@bluealba/pae-core 0.0.3 → 3.4.1-develop-1171

package/dist/src/authentication/dto/create-api-key-response.dto.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"create-api-key-response.dto.js","sourceRoot":"","sources":["../../../../src/authentication/dto/create-api-key-response.dto.ts"],"names":[],"mappings":""}

package/dist/src/authentication/dto/create-impersonation-config-response.dto.d.ts

@@ -0,0 +1,7 @@
+export type CreateImpersonationConfigResponseDTO = {
+    id: number;
+    created_at: string;
+    created_by: string;
+    name: string;
+};
+//# sourceMappingURL=create-impersonation-config-response.dto.d.ts.map

package/dist/src/authentication/dto/create-impersonation-config-response.dto.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"create-impersonation-config-response.dto.d.ts","sourceRoot":"","sources":["../../../../src/authentication/dto/create-impersonation-config-response.dto.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,oCAAoC,GAAG;IACjD,EAAE,EAAE,MAAM,CAAC;IACX,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC;IACnB,IAAI,EAAE,MAAM,CAAC;CACd,CAAA"}

package/dist/src/authentication/dto/create-impersonation-config-response.dto.js

@@ -0,0 +1,3 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+//# sourceMappingURL=create-impersonation-config-response.dto.js.map

package/dist/src/authentication/dto/create-impersonation-config-response.dto.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"create-impersonation-config-response.dto.js","sourceRoot":"","sources":["../../../../src/authentication/dto/create-impersonation-config-response.dto.ts"],"names":[],"mappings":""}

package/dist/src/authentication/dto/create-invitation-request.dto.d.ts

@@ -0,0 +1,5 @@
+export type CreateInvitationRequest = {
+    email: string;
+    expirationDays: number;
+};
+//# sourceMappingURL=create-invitation-request.dto.d.ts.map

package/dist/src/authentication/dto/create-invitation-request.dto.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"create-invitation-request.dto.d.ts","sourceRoot":"","sources":["../../../../src/authentication/dto/create-invitation-request.dto.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,uBAAuB,GAAG;IACpC,KAAK,EAAE,MAAM,CAAC;IACd,cAAc,EAAE,MAAM,CAAC;CACxB,CAAA"}

package/dist/src/authentication/dto/create-invitation-request.dto.js

@@ -0,0 +1,3 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+//# sourceMappingURL=create-invitation-request.dto.js.map

package/dist/src/authentication/dto/create-invitation-request.dto.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"create-invitation-request.dto.js","sourceRoot":"","sources":["../../../../src/authentication/dto/create-invitation-request.dto.ts"],"names":[],"mappings":""}

package/dist/src/authentication/dto/get-all-impersonation-configs-response.dto.d.ts

@@ -0,0 +1,3 @@
+import { ImpersonationConfigsResponseDTO } from "./impersonation-config-response.dto";
+export type GetAllImpersonationConfigsResponseDTO = ImpersonationConfigsResponseDTO[];
+//# sourceMappingURL=get-all-impersonation-configs-response.dto.d.ts.map

package/dist/src/authentication/dto/get-all-impersonation-configs-response.dto.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"get-all-impersonation-configs-response.dto.d.ts","sourceRoot":"","sources":["../../../../src/authentication/dto/get-all-impersonation-configs-response.dto.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,+BAA+B,EAAE,MAAM,qCAAqC,CAAA;AAErF,MAAM,MAAM,qCAAqC,GAAG,+BAA+B,EAAE,CAAC"}

package/dist/src/authentication/dto/get-all-impersonation-configs-response.dto.js

@@ -0,0 +1,3 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+//# sourceMappingURL=get-all-impersonation-configs-response.dto.js.map

package/dist/src/authentication/dto/get-all-impersonation-configs-response.dto.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"get-all-impersonation-configs-response.dto.js","sourceRoot":"","sources":["../../../../src/authentication/dto/get-all-impersonation-configs-response.dto.ts"],"names":[],"mappings":""}

package/dist/src/authentication/dto/group.dto.d.ts

@@ -0,0 +1,26 @@
+import { AuditableDTO, OmitAudit } from "../../common";
+export interface GroupDTO extends AuditableDTO {
+    /**
+     * A Platform Group is one that can be managed by the platform. It doesn't exist in any provider
+     * A Provider Group is one that exists in a provider and has been imported/synchronized to the Platform.
+     * These kind of group are read-only, since they are managed by the provider.
+     */
+    type: 'platform' | 'provider';
+    /**
+     * Only for Platform Groups.
+     */
+    id?: number;
+    name: string;
+    description?: string;
+    /**
+     * The name of the provider this group belongs to. Only applies to provider type.
+     */
+    provider?: string;
+    /**
+     * An id of this group in the provider. Only applies to provider type.
+     */
+    providerGroupId?: string;
+}
+export type CreateGroupDTO = OmitAudit<Omit<GroupDTO, 'providerGroupId' | 'provider' | 'type' | 'id'>>;
+export type UpdateGroupDTO = CreateGroupDTO;
+//# sourceMappingURL=group.dto.d.ts.map

package/dist/src/authentication/dto/group.dto.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"group.dto.d.ts","sourceRoot":"","sources":["../../../../src/authentication/dto/group.dto.ts"],"names":[],"mappings":"AAAA,OAAO,EAAC,YAAY,EAAE,SAAS,EAAC,MAAM,cAAc,CAAC;AAErD,MAAM,WAAW,QAAS,SAAQ,YAAY;IAC5C;;;;OAIG;IACH,IAAI,EAAE,UAAU,GAAG,UAAU,CAAC;IAE9B;;OAEG;IACH,EAAE,CAAC,EAAE,MAAM,CAAC;IAEZ,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,CAAC,EAAE,MAAM,CAAC;IAErB;;OAEG;IACH,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB;;OAEG;IACH,eAAe,CAAC,EAAE,MAAM,CAAC;CAC1B;AAED,MAAM,MAAM,cAAc,GAAG,SAAS,CAAC,IAAI,CAAC,QAAQ,EAAE,iBAAiB,GAAG,UAAU,GAAG,MAAM,GAAG,IAAI,CAAC,CAAC,CAAA;AACtG,MAAM,MAAM,cAAc,GAAG,cAAc,CAAA"}

package/dist/src/{user/group.interface.js → authentication/dto/group.dto.js}

@@ -1,3 +1,3 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-//# sourceMappingURL=group.interface.js.map
+//# sourceMappingURL=group.dto.js.map

package/dist/src/authentication/dto/group.dto.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"group.dto.js","sourceRoot":"","sources":["../../../../src/authentication/dto/group.dto.ts"],"names":[],"mappings":""}

package/dist/src/authentication/dto/impersonation-config-response.dto.d.ts

@@ -0,0 +1,7 @@
+export type ImpersonationConfigsResponseDTO = {
+    username: string;
+    createdAt: string;
+    createdBy: string;
+    restrictedTo?: string[];
+};
+//# sourceMappingURL=impersonation-config-response.dto.d.ts.map

package/dist/src/authentication/dto/impersonation-config-response.dto.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"impersonation-config-response.dto.d.ts","sourceRoot":"","sources":["../../../../src/authentication/dto/impersonation-config-response.dto.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,+BAA+B,GAAG;IAC5C,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;CACzB,CAAA"}

package/dist/src/authentication/dto/impersonation-config-response.dto.js

@@ -0,0 +1,3 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+//# sourceMappingURL=impersonation-config-response.dto.js.map

package/dist/src/authentication/dto/impersonation-config-response.dto.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"impersonation-config-response.dto.js","sourceRoot":"","sources":["../../../../src/authentication/dto/impersonation-config-response.dto.ts"],"names":[],"mappings":""}

package/dist/src/authentication/dto/impersonation-restriction.dto.d.ts

@@ -0,0 +1,5 @@
+export interface ImpersonationRestrictionDTO {
+    username: string;
+    restrictedUser: string;
+}
+//# sourceMappingURL=impersonation-restriction.dto.d.ts.map

package/dist/src/authentication/dto/impersonation-restriction.dto.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"impersonation-restriction.dto.d.ts","sourceRoot":"","sources":["../../../../src/authentication/dto/impersonation-restriction.dto.ts"],"names":[],"mappings":"AAAA,MAAM,WAAW,2BAA2B;IAC1C,QAAQ,EAAE,MAAM,CAAC;IACjB,cAAc,EAAE,MAAM,CAAC;CACxB"}

package/dist/src/authentication/dto/impersonation-restriction.dto.js

@@ -0,0 +1,3 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+//# sourceMappingURL=impersonation-restriction.dto.js.map

package/dist/src/authentication/dto/impersonation-restriction.dto.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"impersonation-restriction.dto.js","sourceRoot":"","sources":["../../../../src/authentication/dto/impersonation-restriction.dto.ts"],"names":[],"mappings":""}

package/dist/src/authentication/dto/invitation.dto.d.ts

@@ -0,0 +1,9 @@
+import { AuditableDTO } from "../../common";
+export type InvitationStatus = 'pending' | 'accepted' | 'expired';
+export interface InvitationDTO extends AuditableDTO {
+    id: number;
+    email: string;
+    status: InvitationStatus;
+    expiresAt: string;
+}
+//# sourceMappingURL=invitation.dto.d.ts.map

package/dist/src/authentication/dto/invitation.dto.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"invitation.dto.d.ts","sourceRoot":"","sources":["../../../../src/authentication/dto/invitation.dto.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AAE5C,MAAM,MAAM,gBAAgB,GAAG,SAAS,GAAG,UAAU,GAAG,SAAS,CAAC;AAElE,MAAM,WAAW,aAAc,SAAQ,YAAY;IACjD,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,gBAAgB,CAAC;IACzB,SAAS,EAAE,MAAM,CAAC;CACnB"}

package/dist/src/{pae/config.interface.js → authentication/dto/invitation.dto.js}

@@ -1,3 +1,3 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-//# sourceMappingURL=config.interface.js.map
+//# sourceMappingURL=invitation.dto.js.map

package/dist/src/authentication/dto/invitation.dto.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"invitation.dto.js","sourceRoot":"","sources":["../../../../src/authentication/dto/invitation.dto.ts"],"names":[],"mappings":""}

package/dist/src/authentication/dto/invitations-response.dto.d.ts

@@ -0,0 +1,4 @@
+import { TableQueryResponse } from "../../common/table-query-response.interface";
+import { InvitationDTO } from "./invitation.dto";
+export type InvitationsResponseDTO = TableQueryResponse<InvitationDTO>;
+//# sourceMappingURL=invitations-response.dto.d.ts.map

package/dist/src/authentication/dto/invitations-response.dto.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"invitations-response.dto.d.ts","sourceRoot":"","sources":["../../../../src/authentication/dto/invitations-response.dto.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,kBAAkB,EAAE,MAAM,6CAA6C,CAAC;AACjF,OAAO,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AAEjD,MAAM,MAAM,sBAAsB,GAAG,kBAAkB,CAAC,aAAa,CAAC,CAAC"}

package/dist/src/authentication/dto/invitations-response.dto.js

@@ -0,0 +1,3 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+//# sourceMappingURL=invitations-response.dto.js.map

package/dist/src/authentication/dto/invitations-response.dto.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"invitations-response.dto.js","sourceRoot":"","sources":["../../../../src/authentication/dto/invitations-response.dto.ts"],"names":[],"mappings":""}

package/dist/src/authentication/dto/manage-impersonation-config-request.d.ts

@@ -0,0 +1,5 @@
+export interface ManageImpersonationConfigRequestDTO {
+    username: string;
+    restrictedTo?: string[];
+}
+//# sourceMappingURL=manage-impersonation-config-request.d.ts.map

package/dist/src/authentication/dto/manage-impersonation-config-request.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"manage-impersonation-config-request.d.ts","sourceRoot":"","sources":["../../../../src/authentication/dto/manage-impersonation-config-request.ts"],"names":[],"mappings":"AAAA,MAAM,WAAW,mCAAmC;IAClD,QAAQ,EAAE,MAAM,CAAC;IACjB,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;CACzB"}

package/dist/src/authentication/dto/manage-impersonation-config-request.js

@@ -0,0 +1,3 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+//# sourceMappingURL=manage-impersonation-config-request.js.map

package/dist/src/authentication/dto/manage-impersonation-config-request.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"manage-impersonation-config-request.js","sourceRoot":"","sources":["../../../../src/authentication/dto/manage-impersonation-config-request.ts"],"names":[],"mappings":""}

package/dist/src/authentication/dto/oauth-provider.dto.d.ts

@@ -0,0 +1,174 @@
+import { AuditableDTO, OmitAudit } from "../../common";
+export type BuiltInProviderType = 'okta' | 'entra-id' | 'cognito' | 'github' | 'onelogin';
+export type OAuthProviderType = 'custom' | BuiltInProviderType;
+/**
+ * IDP Provisioning Methods
+ * Defines the specific method used by an IDP to provision tenant assignments.
+ * This is configured per-IDP and determines how tenant information is extracted from IDP tokens.
+ */
+export declare const IDP_PROVISIONING_METHODS: {
+    readonly CLAIM: "claim";
+};
+export type IDPProvisioningMethod = typeof IDP_PROVISIONING_METHODS[keyof typeof IDP_PROVISIONING_METHODS];
+/**
+ * Configuration for CLAIM-based tenant provisioning
+ * Used when tenant assignment is determined by a specific claim in the IDP token
+ */
+export interface ClaimBasedProvisioningConfig {
+    method: typeof IDP_PROVISIONING_METHODS.CLAIM;
+    /**
+     * The name of the claim in the IDP token to use for tenant identification
+     * Example: 'tenants', 'organizations', 'company_id', etc.
+     */
+    claimName: string;
+    /**
+     * The type of the claim value in the IDP token
+     * - 'string': Single tenant identifier (e.g., "tenant-abc")
+     * - 'array': Array of tenant identifiers (e.g., ["tenant-1", "tenant-2"])
+     * - 'stringified_array': JSON stringified array (e.g., '["tenant-1", "tenant-2"]')
+     */
+    claimValueType: 'string' | 'array' | 'stringified_array';
+}
+/**
+ * Configuration for CLAIM-based role provisioning
+ * Used when role assignments are determined by a specific claim in the IDP token
+ * The claim values must follow the pattern "application::roleName"
+ */
+export interface RoleClaimBasedProvisioningConfig {
+    method: typeof IDP_PROVISIONING_METHODS.CLAIM;
+    /**
+     * The name of the claim in the IDP token to use for role identification
+     * Example: 'roles', 'user_roles', 'app_roles', etc.
+     */
+    claimName: string;
+    /**
+     * The type of the claim value in the IDP token
+     * - 'string': Single role identifier with pattern "application::roleName"
+     * - 'array': Array of role identifiers (e.g., ["app1::admin", "app2::user"])
+     * - 'stringified_array': JSON stringified array (e.g., '["app1::admin", "app2::user"]')
+     */
+    claimValueType: 'string' | 'array' | 'stringified_array';
+}
+/**
+ * Configuration for CLAIM-based application provisioning
+ * Used when application assignments are determined by a specific claim in the IDP token
+ */
+export interface ApplicationClaimBasedProvisioningConfig {
+    method: typeof IDP_PROVISIONING_METHODS.CLAIM;
+    /**
+     * The name of the claim in the IDP token to use for application identification
+     * Example: 'applications', 'apps', 'user_apps', etc.
+     */
+    claimName: string;
+    /**
+     * The type of the claim value in the IDP token
+     * - 'string': Single application identifier (e.g., "habits-app")
+     * - 'array': Array of application identifiers (e.g., ["habits-app", "admin-app"])
+     * - 'stringified_array': JSON stringified array (e.g., '["habits-app", "admin-app"]')
+     */
+    claimValueType: 'string' | 'array' | 'stringified_array';
+}
+/**
+ * Union type for all possible IDP tenant provisioning configurations
+ * Extensible for future provisioning methods
+ */
+export type IDPProvisioningConfig = ClaimBasedProvisioningConfig;
+/**
+ * Union type for all possible IDP role provisioning configurations
+ * Extensible for future provisioning methods
+ */
+export type IDPRoleProvisioningConfig = RoleClaimBasedProvisioningConfig;
+/**
+ * Union type for all possible IDP application provisioning configurations
+ * Extensible for future provisioning methods
+ */
+export type IDPApplicationProvisioningConfig = ApplicationClaimBasedProvisioningConfig;
+/**
+ * Supported IDP and provisioning method combinations
+ * Maps which provisioning methods are supported for each IDP type
+ * Used for validation in the UI and backend
+ */
+export declare const SUPPORTED_IDP_PROVISIONING: Readonly<Record<OAuthProviderType, readonly IDPProvisioningMethod[]>>;
+/**
+ * An OAuth2 Identity Provider configuration parameters.
+ * It could be for one of the supported providers, like okta, entra-id, or a custom one
+ */
+export interface OAuthProviderDTO extends AuditableDTO {
+    id: number;
+    type: OAuthProviderType;
+    name: string;
+    active: boolean;
+    /**
+     * Some providers cannot be deleted/updated. This comes from infrastructure configuration (environment variables).
+     */
+    readOnly: boolean;
+    issuer: string;
+    clientId: string;
+    clientSecret: string;
+    /**
+     * An extra config/params field specific for each provider.
+     * This allow to store Provider's specific API integrations such as for fetching groups.
+     */
+    extras?: any;
+    /**
+     * Tenant provisioning configuration for this IDP.
+     * Defines how tenant assignments are determined from IDP tokens.
+     * Only applicable when the platform's tenantIDPProvisioningStrategy is set to 'multi-tenant-per-idp'.
+     *
+     * Example for OKTA with claim-based provisioning:
+     * {
+     *   method: 'claim',
+     *   claimName: 'tenants',
+     *   claimValueType: 'array'
+     * }
+     */
+    provisioningConfig?: IDPProvisioningConfig;
+    /**
+     * Role provisioning configuration for this IDP.
+     * Defines how role assignments are determined from IDP tokens.
+     * Claim values must follow the pattern "application::roleName".
+     *
+     * Example for OKTA with claim-based provisioning:
+     * {
+     *   method: 'claim',
+     *   claimName: 'roles',
+     *   claimValueType: 'array'
+     * }
+     */
+    roleProvisioningConfig?: IDPRoleProvisioningConfig;
+    /**
+     * Application provisioning configuration for this IDP.
+     * Defines how application assignments are determined from IDP tokens.
+     *
+     * Example for OKTA with claim-based provisioning:
+     * {
+     *   method: 'claim',
+     *   claimName: 'applications',
+     *   claimValueType: 'array'
+     * }
+     */
+    applicationProvisioningConfig?: IDPApplicationProvisioningConfig;
+    authUrl?: string;
+    tokenUrl?: string;
+    userInfoUrl?: string;
+    mapUsername?: string;
+    mapDisplayName?: string;
+    mapFirstName?: string;
+    mapLastName?: string;
+}
+/**
+ * DTO to create a new provider
+ * A shorter version of the DTO without audit, id, and active (?)
+ */
+export type CreateIdentityProviderDTO = Omit<OmitAudit<OAuthProviderDTO>, 'id' | 'active' | 'readOnly'> & {
+    /**
+     * Whether this provider should be created active already or not. Default is active (true)
+     * @default true
+     */
+    active?: boolean;
+};
+/**
+ * DTO to update an identityProvider
+ */
+export type UpdateIdentityProviderDTO = Partial<CreateIdentityProviderDTO>;
+//# sourceMappingURL=oauth-provider.dto.d.ts.map

package/dist/src/authentication/dto/oauth-provider.dto.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"oauth-provider.dto.d.ts","sourceRoot":"","sources":["../../../../src/authentication/dto/oauth-provider.dto.ts"],"names":[],"mappings":"AAAA,OAAO,EAAC,YAAY,EAAE,SAAS,EAAC,MAAM,cAAc,CAAC;AAErD,MAAM,MAAM,mBAAmB,GAAG,MAAM,GAAG,UAAU,GAAG,SAAS,GAAG,QAAQ,GAAG,UAAU,CAAC;AAC1F,MAAM,MAAM,iBAAiB,GAAG,QAAQ,GAAG,mBAAmB,CAAA;AAE9D;;;;GAIG;AACH,eAAO,MAAM,wBAAwB;;CAG3B,CAAC;AAEX,MAAM,MAAM,qBAAqB,GAAG,OAAO,wBAAwB,CAAC,MAAM,OAAO,wBAAwB,CAAC,CAAC;AAE3G;;;GAGG;AACH,MAAM,WAAW,4BAA4B;IAC3C,MAAM,EAAE,OAAO,wBAAwB,CAAC,KAAK,CAAC;IAC9C;;;OAGG;IACH,SAAS,EAAE,MAAM,CAAC;IAElB;;;;;OAKG;IACH,cAAc,EAAE,QAAQ,GAAG,OAAO,GAAG,mBAAmB,CAAC;CAC1D;AAED;;;;GAIG;AACH,MAAM,WAAW,gCAAgC;IAC/C,MAAM,EAAE,OAAO,wBAAwB,CAAC,KAAK,CAAC;IAC9C;;;OAGG;IACH,SAAS,EAAE,MAAM,CAAC;IAElB;;;;;OAKG;IACH,cAAc,EAAE,QAAQ,GAAG,OAAO,GAAG,mBAAmB,CAAC;CAC1D;AAED;;;GAGG;AACH,MAAM,WAAW,uCAAuC;IACtD,MAAM,EAAE,OAAO,wBAAwB,CAAC,KAAK,CAAC;IAC9C;;;OAGG;IACH,SAAS,EAAE,MAAM,CAAC;IAElB;;;;;OAKG;IACH,cAAc,EAAE,QAAQ,GAAG,OAAO,GAAG,mBAAmB,CAAC;CAC1D;AAED;;;GAGG;AACH,MAAM,MAAM,qBAAqB,GAAG,4BAA4B,CAAC;AAEjE;;;GAGG;AACH,MAAM,MAAM,yBAAyB,GAAG,gCAAgC,CAAC;AAEzE;;;GAGG;AACH,MAAM,MAAM,gCAAgC,GAAG,uCAAuC,CAAC;AAEvF;;;;GAIG;AACH,eAAO,MAAM,0BAA0B,EAAE,QAAQ,CAAC,MAAM,CAAC,iBAAiB,EAAE,SAAS,qBAAqB,EAAE,CAAC,CAOnG,CAAC;AAEX;;;GAGG;AACH,MAAM,WAAW,gBAAiB,SAAQ,YAAY;IACpD,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,iBAAiB,CAAC;IACxB,IAAI,EAAE,MAAM,CAAC;IAEb,MAAM,EAAE,OAAO,CAAC;IAEhB;;OAEG;IACH,QAAQ,EAAE,OAAO,CAAC;IAElB,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;IACjB,YAAY,EAAE,MAAM,CAAC;IAErB;;;OAGG;IACH,MAAM,CAAC,EAAE,GAAG,CAAC;IAEb;;;;;;;;;;;OAWG;IACH,kBAAkB,CAAC,EAAE,qBAAqB,CAAC;IAE3C;;;;;;;;;;;OAWG;IACH,sBAAsB,CAAC,EAAE,yBAAyB,CAAC;IAEnD;;;;;;;;;;OAUG;IACH,6BAA6B,CAAC,EAAE,gCAAgC,CAAC;IAGjE,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,WAAW,CAAC,EAAE,MAAM,CAAC;IAGrB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED;;;GAGG;AACH,MAAM,MAAM,yBAAyB,GACjC,IAAI,CAAC,SAAS,CAAC,gBAAgB,CAAC,EAAE,IAAI,GAAG,QAAQ,GAAG,UAAU,CAAC,GAAG;IAEpE;;;OAGG;IACH,MAAM,CAAC,EAAE,OAAO,CAAC;CAClB,CAAC;AAEF;;GAEG;AACH,MAAM,MAAM,yBAAyB,GAAG,OAAO,CAAC,yBAAyB,CAAC,CAAC"}

package/dist/src/authentication/dto/oauth-provider.dto.js

@@ -0,0 +1,26 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.SUPPORTED_IDP_PROVISIONING = exports.IDP_PROVISIONING_METHODS = void 0;
+/**
+ * IDP Provisioning Methods
+ * Defines the specific method used by an IDP to provision tenant assignments.
+ * This is configured per-IDP and determines how tenant information is extracted from IDP tokens.
+ */
+exports.IDP_PROVISIONING_METHODS = {
+    CLAIM: 'claim',
+    // Future methods can be added here (e.g., 'email-domain', 'group-membership', etc.)
+};
+/**
+ * Supported IDP and provisioning method combinations
+ * Maps which provisioning methods are supported for each IDP type
+ * Used for validation in the UI and backend
+ */
+exports.SUPPORTED_IDP_PROVISIONING = {
+    okta: [exports.IDP_PROVISIONING_METHODS.CLAIM],
+    'entra-id': [], // Not yet supported in MVP
+    cognito: [], // Not yet supported in MVP
+    github: [], // Not yet supported in MVP
+    onelogin: [], // Not yet supported in MVP
+    custom: [], // Not yet supported in MVP
+};
+//# sourceMappingURL=oauth-provider.dto.js.map

package/dist/src/authentication/dto/oauth-provider.dto.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"oauth-provider.dto.js","sourceRoot":"","sources":["../../../../src/authentication/dto/oauth-provider.dto.ts"],"names":[],"mappings":";;;AAKA;;;;GAIG;AACU,QAAA,wBAAwB,GAAG;IACtC,KAAK,EAAE,OAAO;IACd,oFAAoF;CAC5E,CAAC;AAsFX;;;;GAIG;AACU,QAAA,0BAA0B,GAA0E;IAC/G,IAAI,EAAE,CAAC,gCAAwB,CAAC,KAAK,CAAC;IACtC,UAAU,EAAE,EAAE,EAAE,2BAA2B;IAC3C,OAAO,EAAE,EAAE,EAAK,2BAA2B;IAC3C,MAAM,EAAE,EAAE,EAAM,2BAA2B;IAC3C,QAAQ,EAAE,EAAE,EAAI,2BAA2B;IAC3C,MAAM,EAAE,EAAE,EAAM,2BAA2B;CACnC,CAAC"}

package/dist/src/authentication/dto/search-profiles-request.dto.d.ts

@@ -0,0 +1,4 @@
+export interface SearchProfilesDTO {
+    query: string;
+}
+//# sourceMappingURL=search-profiles-request.dto.d.ts.map

package/dist/src/authentication/dto/search-profiles-request.dto.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"search-profiles-request.dto.d.ts","sourceRoot":"","sources":["../../../../src/authentication/dto/search-profiles-request.dto.ts"],"names":[],"mappings":"AAAA,MAAM,WAAW,iBAAiB;IAChC,KAAK,EAAE,MAAM,CAAC;CACf"}

package/dist/src/authentication/dto/search-profiles-request.dto.js

@@ -0,0 +1,3 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+//# sourceMappingURL=search-profiles-request.dto.js.map

package/dist/src/authentication/dto/search-profiles-request.dto.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"search-profiles-request.dto.js","sourceRoot":"","sources":["../../../../src/authentication/dto/search-profiles-request.dto.ts"],"names":[],"mappings":""}

package/dist/src/authentication/dto/user-identity.dto.d.ts

@@ -0,0 +1,13 @@
+export interface UserIdentityDTO {
+    id: number;
+    name: string;
+    userId: string;
+    createdAt: string;
+    createdBy: string;
+    updatedAt?: string;
+    updatedBy?: string;
+    extras?: {
+        orig?: object;
+    };
+}
+//# sourceMappingURL=user-identity.dto.d.ts.map

package/dist/src/authentication/dto/user-identity.dto.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"user-identity.dto.d.ts","sourceRoot":"","sources":["../../../../src/authentication/dto/user-identity.dto.ts"],"names":[],"mappings":"AAAA,MAAM,WAAW,eAAe;IAC9B,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,MAAM,CAAC,EAAE;QACP,IAAI,CAAC,EAAE,MAAM,CAAC;KACf,CAAA;CACF"}

package/dist/src/authentication/dto/user-identity.dto.js

@@ -0,0 +1,3 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+//# sourceMappingURL=user-identity.dto.js.map

package/dist/src/authentication/dto/user-identity.dto.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"user-identity.dto.js","sourceRoot":"","sources":["../../../../src/authentication/dto/user-identity.dto.ts"],"names":[],"mappings":""}

package/dist/src/authentication/dto/user.dto.d.ts

@@ -0,0 +1,13 @@
+import { UserIdentityDTO } from "./user-identity.dto";
+import { AuditableDTO } from "../../common";
+export interface UserDTO extends AuditableDTO {
+    id: number;
+    username: string;
+    displayName?: string | null;
+    firstName?: string | null;
+    lastName?: string | null;
+    hasPassword?: boolean;
+    isActive: boolean;
+    identities: UserIdentityDTO[];
+}
+//# sourceMappingURL=user.dto.d.ts.map

package/dist/src/authentication/dto/user.dto.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"user.dto.d.ts","sourceRoot":"","sources":["../../../../src/authentication/dto/user.dto.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AACtD,OAAO,EAAC,YAAY,EAAC,MAAM,cAAc,CAAC;AAE1C,MAAM,WAAW,OAAQ,SAAQ,YAAY;IAC3C,EAAE,EAAE,MAAM,CAAC;IACX,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,QAAQ,EAAE,OAAO,CAAC;IAClB,UAAU,EAAE,eAAe,EAAE,CAAC;CAC/B"}

package/dist/src/authentication/dto/user.dto.js

@@ -0,0 +1,3 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+//# sourceMappingURL=user.dto.js.map

package/dist/src/authentication/dto/user.dto.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"user.dto.js","sourceRoot":"","sources":["../../../../src/authentication/dto/user.dto.ts"],"names":[],"mappings":""}

package/dist/src/authentication/dto/users-response.dto.d.ts

@@ -0,0 +1,4 @@
+import { TableQueryResponse } from "../../common/table-query-response.interface";
+import { UserDTO } from "./user.dto";
+export type UsersResponseDTO = TableQueryResponse<UserDTO>;
+//# sourceMappingURL=users-response.dto.d.ts.map

package/dist/src/authentication/dto/users-response.dto.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"users-response.dto.d.ts","sourceRoot":"","sources":["../../../../src/authentication/dto/users-response.dto.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,kBAAkB,EAAE,MAAM,6CAA6C,CAAC;AACjF,OAAO,EAAE,OAAO,EAAE,MAAM,YAAY,CAAC;AAErC,MAAM,MAAM,gBAAgB,GAAG,kBAAkB,CAAC,OAAO,CAAC,CAAC"}

package/dist/src/authentication/dto/users-response.dto.js

@@ -0,0 +1,3 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+//# sourceMappingURL=users-response.dto.js.map

package/dist/src/authentication/dto/users-response.dto.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"users-response.dto.js","sourceRoot":"","sources":["../../../../src/authentication/dto/users-response.dto.ts"],"names":[],"mappings":""}

package/dist/src/authentication/entities/api-key.entity.d.ts

@@ -0,0 +1,10 @@
+import { ApiKeyResponseDTO } from "../dto/api-key-response.dto";
+export declare class ApiKey {
+    id: number;
+    username: string;
+    displayName?: string;
+    createdAt: Date;
+    createdBy: string;
+    static fromDTO(dto: ApiKeyResponseDTO): ApiKey;
+}
+//# sourceMappingURL=api-key.entity.d.ts.map

package/dist/src/authentication/entities/api-key.entity.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"api-key.entity.d.ts","sourceRoot":"","sources":["../../../../src/authentication/entities/api-key.entity.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAAE,MAAM,6BAA6B,CAAC;AAEhE,qBAAa,MAAM;IACjB,EAAE,EAAE,MAAM,CAAK;IACf,QAAQ,EAAE,MAAM,CAAM;IACtB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,SAAS,EAAE,IAAI,CAAc;IAC7B,SAAS,EAAE,MAAM,CAAM;IAEvB,MAAM,CAAC,OAAO,CAAC,GAAG,EAAE,iBAAiB,GAAG,MAAM;CAS/C"}

package/dist/src/authentication/entities/api-key.entity.js

@@ -0,0 +1,22 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ApiKey = void 0;
+class ApiKey {
+    constructor() {
+        this.id = 0;
+        this.username = '';
+        this.createdAt = new Date();
+        this.createdBy = '';
+    }
+    static fromDTO(dto) {
+        const apiKey = new ApiKey();
+        apiKey.id = dto.id;
+        apiKey.username = dto.name;
+        apiKey.displayName = dto.displayName;
+        apiKey.createdAt = new Date(dto.createdAt);
+        apiKey.createdBy = dto.createdBy;
+        return apiKey;
+    }
+}
+exports.ApiKey = ApiKey;
+//# sourceMappingURL=api-key.entity.js.map

package/dist/src/authentication/entities/api-key.entity.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"api-key.entity.js","sourceRoot":"","sources":["../../../../src/authentication/entities/api-key.entity.ts"],"names":[],"mappings":";;;AAEA,MAAa,MAAM;IAAnB;QACE,OAAE,GAAW,CAAC,CAAC;QACf,aAAQ,GAAW,EAAE,CAAC;QAEtB,cAAS,GAAS,IAAI,IAAI,EAAE,CAAC;QAC7B,cAAS,GAAW,EAAE,CAAC;IAWzB,CAAC;IATC,MAAM,CAAC,OAAO,CAAC,GAAsB;QACnC,MAAM,MAAM,GAAG,IAAI,MAAM,EAAE,CAAC;QAC5B,MAAM,CAAC,EAAE,GAAG,GAAG,CAAC,EAAE,CAAC;QACnB,MAAM,CAAC,QAAQ,GAAG,GAAG,CAAC,IAAI,CAAC;QAC3B,MAAM,CAAC,WAAW,GAAG,GAAG,CAAC,WAAW,CAAC;QACrC,MAAM,CAAC,SAAS,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QAC3C,MAAM,CAAC,SAAS,GAAG,GAAG,CAAC,SAAS,CAAC;QACjC,OAAO,MAAM,CAAC;IAChB,CAAC;CACF;AAhBD,wBAgBC"}