@bostonuniversity/shibboleth-sp 1.0.2

package/dist/esm/Config.js

@@ -0,0 +1,25 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.getConfigFromEnvironment = void 0;
+const Keys_1 = require("./Keys");
+/**
+ * @returns An instance of IConfig whose values are ALL obtained from the environment.
+ */
+const getConfigFromEnvironment = () => {
+    let { DOMAIN: domain = 'localhost', APP_LOGIN_HEADER: appLoginHeader, APP_LOGOUT_HEADER: appLogoutHeader, APP_AUTHORIZATION: appAuthorization = 'false', ENTITY_ID: entityId, ENTRY_POINT: entryPoint, LOGOUT_URL: logoutUrl, IDP_CERT: idpCert, SAML_CERT: cert, SAML_PK: key, JWT_PRIVATE_KEY_PEM: jwtPrivateKeyPEM, JWT_PUBLIC_KEY_PEM: jwtPublicKeyPEM } = process.env;
+    // If JWT keys are not in the environment, then generate them.
+    if (!jwtPrivateKeyPEM && !jwtPublicKeyPEM) {
+        const { privateKeyPEM, publicKeyPEM } = new Keys_1.Keys();
+        jwtPrivateKeyPEM = privateKeyPEM;
+        jwtPublicKeyPEM = publicKeyPEM;
+    }
+    return {
+        domain, appLoginHeader, appLogoutHeader, jwtPrivateKeyPEM, jwtPublicKeyPEM,
+        appAuthorization: `${appAuthorization}`.toLowerCase() == 'false' ? false : true,
+        samlParms: {
+            entityId, entryPoint, logoutUrl, idpCert, cert, key
+        }
+    };
+};
+exports.getConfigFromEnvironment = getConfigFromEnvironment;
+//# sourceMappingURL=Config.js.map

package/dist/esm/Config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"Config.js","sourceRoot":"","sources":["../../src/Config.ts"],"names":[],"mappings":";;;AACA,iCAA8B;AA2B9B;;GAEG;AACI,MAAM,wBAAwB,GAAG,GAAG,EAAE;IAC3C,IAAI,EACF,MAAM,EAAC,MAAM,GAAC,WAAW,EACzB,gBAAgB,EAAC,cAAc,EAC/B,iBAAiB,EAAC,eAAe,EACjC,iBAAiB,EAAC,gBAAgB,GAAC,OAAO,EAC1C,SAAS,EAAC,QAAQ,EAClB,WAAW,EAAC,UAAU,EACtB,UAAU,EAAC,SAAS,EACpB,QAAQ,EAAC,OAAO,EAChB,SAAS,EAAC,IAAI,EACd,OAAO,EAAC,GAAG,EACX,mBAAmB,EAAC,gBAAgB,EACpC,kBAAkB,EAAC,eAAe,EACnC,GAAG,OAAO,CAAC,GAAG,CAAC;IAEhB,8DAA8D;IAC9D,IAAI,CAAE,gBAAgB,IAAI,CAAE,eAAe,EAAE;QAC3C,MAAM,EAAE,aAAa,EAAE,YAAY,EAAE,GAAG,IAAI,WAAI,EAAE,CAAC;QACnD,gBAAgB,GAAG,aAAa,CAAC;QACjC,eAAe,GAAG,YAAY,CAAC;KAChC;IAED,OAAO;QACL,MAAM,EAAE,cAAc,EAAE,eAAe,EAAE,gBAAgB,EAAE,eAAe;QAC1E,gBAAgB,EAAE,GAAG,gBAAgB,EAAE,CAAC,WAAW,EAAE,IAAI,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI;QAC/E,SAAS,EAAE;YACT,QAAQ,EAAE,UAAU,EAAE,SAAS,EAAE,OAAO,EAAE,IAAI,EAAE,GAAG;SACpD;KACS,CAAC;AACf,CAAC,CAAA;AA9BY,QAAA,wBAAwB,4BA8BpC"}

package/dist/esm/HandlerSp.js

@@ -0,0 +1,229 @@
+"use strict";
+var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
+    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
+    return new (P || (P = Promise))(function (resolve, reject) {
+        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
+        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
+        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
+        step((generator = generator.apply(thisArg, _arguments || [])).next());
+    });
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.handler = exports.APP_AUTHORIZATION_HEADER_NAME = exports.AUTH_PATHS = void 0;
+const Saml_1 = require("./Saml");
+const Jwt_1 = require("./Jwt");
+const Utils_1 = require("./Utils");
+const Http_1 = require("./Http");
+var AUTH_PATHS;
+(function (AUTH_PATHS) {
+    AUTH_PATHS["LOGIN"] = "/login";
+    AUTH_PATHS["LOGOUT"] = "/logout";
+    AUTH_PATHS["ASSERT"] = "/assert";
+    AUTH_PATHS["METADATA"] = "/metadata";
+    AUTH_PATHS["FAVICON"] = "/favicon.ico";
+})(AUTH_PATHS || (exports.AUTH_PATHS = AUTH_PATHS = {}));
+exports.APP_AUTHORIZATION_HEADER_NAME = 'app_authorization';
+/**
+ * This is the sp "switchboard operator" for origin request traffic. It will perform all saml SP operations for ensuring
+ * that the user bears JWT proof of saml authentication, else it drives the authentication flow with the IDP.
+ * @param event
+ * @returns Promise<IRequest|IResponse>
+ *    IRequest: Returning the original request (possibly with headers added) - indicates the request is to be
+ *      forwarded on to the target app.
+ *    IResponse: Returning an object that indicates an error or redirection - not passing through to the target app.
+ */
+const handler = (originRequest, config) => __awaiter(void 0, void 0, void 0, function* () {
+    let { domain, appAuthorization, appLoginHeader, appLogoutHeader, samlParms, jwtPrivateKeyPEM, jwtPublicKeyPEM, customHeaders = [] } = config;
+    const { querystring, uri } = originRequest;
+    const headers = (0, Http_1.Headers)(originRequest);
+    const samlTools = new Saml_1.SamlTools(samlParms);
+    const relayDomain = `https://${domain}`;
+    samlTools.setAssertUrl(`${relayDomain}/assert`);
+    const jwtTools = new Jwt_1.JwtTools();
+    jwtTools.resetPublicKey(jwtPublicKeyPEM);
+    jwtTools.resetPrivateKey(jwtPrivateKeyPEM);
+    // Set appAuth. True means that the target app "decides" if authentication is needed (default).
+    // False means an assumption that all requests must be authenticated and that is enforced here.
+    const customHdr = headers.get(exports.APP_AUTHORIZATION_HEADER_NAME);
+    if (customHdr && 'true' == customHdr) {
+        appAuthorization = true;
+    }
+    try {
+        let response;
+        const qsparms = querystring ? new URLSearchParams(querystring) : null;
+        console.log(`uri: ${uri}`);
+        console.log(`querystring: ${querystring}`);
+        const { LOGIN, LOGOUT, ASSERT, METADATA, FAVICON } = AUTH_PATHS;
+        const getAppLoginUrl = () => {
+            const relay_state = encodeURIComponent(relayDomain + uri + (querystring ? `?${querystring}` : ''));
+            return `${relayDomain}${AUTH_PATHS.LOGIN}?relay_state=${relay_state}`;
+        };
+        const getAppLogoutUrl = () => `${relayDomain}${AUTH_PATHS.LOGOUT}`;
+        switch (uri) {
+            case LOGIN:
+                console.log('User is not authenticated, initiate SAML authentication...');
+                var relayState = decodeURIComponent(qsparms ? qsparms.get('relay_state') || '' : relayDomain);
+                const loginUrl = yield samlTools.createLoginRequestUrl(relayState);
+                response = {
+                    status: '302',
+                    statusDescription: 'Found',
+                    headers: {
+                        location: [{ key: 'Location', value: loginUrl }],
+                    },
+                };
+                (0, Utils_1.debugPrint)(`response: ${JSON.stringify(response, null, 2)}`);
+                break;
+            case LOGOUT:
+                const target = qsparms ? qsparms.get('target') : null;
+                if (target == 'idp') {
+                    // Second step: logout with the Idp
+                    const logoutUrl = yield samlTools.createLogoutRequestUrl();
+                    response = {
+                        status: '302',
+                        statusDescription: 'Found',
+                        headers: {
+                            location: [{ key: 'Location', value: logoutUrl }],
+                        },
+                    };
+                    (0, Utils_1.debugPrint)(`IDP logout response: ${JSON.stringify(response, null, 2)}`);
+                }
+                else {
+                    // First step: invalidate the jwt along with a redirect to come back and logout with the IDP
+                    response = {
+                        status: '302',
+                        statusDescription: 'Found',
+                        headers: {
+                            location: [{ key: 'Location', value: `${relayDomain}/logout?target=idp` }],
+                        }
+                    };
+                    jwtTools.setCookieInvalidationInResponse(response);
+                    (0, Utils_1.debugPrint)(`Local logout response: ${JSON.stringify(response, null, 2)}`);
+                }
+                break;
+            case ASSERT:
+                const result = yield samlTools.sendAssert(originRequest);
+                const message = `Authentication successful. result: ${JSON.stringify(result, null, 2)}`;
+                var { samlAssertResponse, relayState } = result;
+                relayState = decodeURIComponent(relayState || relayDomain);
+                if (!samlAssertResponse)
+                    break;
+                (0, Utils_1.debugPrint)(message);
+                console.log(`relayState: ${relayState}`);
+                const redirectUrl = new URL(relayState);
+                redirectUrl.searchParams.append('after_auth', 'true');
+                response = {
+                    status: '302',
+                    statusDescription: 'Found',
+                    headers: {
+                        location: [{ key: 'Location', value: redirectUrl.toString() }],
+                    },
+                };
+                const cookieValue = {
+                    sub: samlAssertResponse.user.name_id,
+                    user: samlAssertResponse.user.attributes
+                };
+                console.log(`Setting JWT: ${JSON.stringify(cookieValue, null, 2)}`);
+                jwtTools.setCookieInResponse(response, cookieValue);
+                break;
+            case METADATA:
+                response = {
+                    status: '200',
+                    statusDescription: 'OK',
+                    body: samlTools.getMetaData(),
+                    headers: {
+                        'content-type': [{ key: 'Content-Type', value: 'application/xml' }],
+                    },
+                };
+                break;
+            case FAVICON:
+                // This path just dirties up logs, so intercept it here and return a blank.
+                // Can't seem to get an actual favicon.ico to work from here anyway.
+                response = {
+                    status: '200',
+                    statusDescription: 'OK',
+                };
+                break;
+            default:
+                const afterAuth = decodeURIComponent(qsparms ? qsparms.get('after_auth') || '' : '');
+                const validToken = jwtTools.hasValidToken(originRequest);
+                if (validToken) {
+                    // Tokens are valid, so consider the user authenticated and pass through to the origin.
+                    console.log('Request has valid JWT');
+                    response = originRequest;
+                    (0, Http_1.addHeader)(response, 'authenticated', 'true');
+                    // Send the entire token in a single header
+                    const userDetails = `${Buffer.from(JSON.stringify(validToken, null, 2)).toString('base64')}`;
+                    (0, Http_1.addHeader)(response, 'user-details', userDetails);
+                    // Also send the individual claims in separate headers, as mod_shib would.
+                    const { user: { eduPersonPrincipalName, buPrincipal, eduPersonAffiliation, eduPersonEntitlement } } = validToken[Jwt_1.JwtTools.TOKEN_NAME];
+                    (0, Http_1.addHeader)(response, 'eduPersonPrincipalName', eduPersonPrincipalName);
+                    (0, Http_1.addHeader)(response, 'buPrincipal', buPrincipal);
+                    (0, Http_1.addHeader)(response, 'eduPersonAffiliation', eduPersonAffiliation.join(';'));
+                    (0, Http_1.addHeader)(response, 'eduPersonEntitlement', eduPersonEntitlement.join(';'));
+                    (0, Http_1.addHeader)(response, appLoginHeader, encodeURIComponent(getAppLoginUrl()));
+                    (0, Http_1.addHeader)(response, appLogoutHeader, encodeURIComponent(getAppLogoutUrl()));
+                    for (let i = 0; i < customHeaders.length; i++) {
+                        const { key, value } = customHeaders[i];
+                        (0, Http_1.addHeader)(response, key, encodeURIComponent(value));
+                    }
+                    console.log(`Valid JWT found - passing through to origin: ${JSON.stringify(response, null, 2)}`);
+                }
+                else if (afterAuth.toLocaleLowerCase() === 'true') {
+                    // The saml exchange has just taken place, and the user has authenticated with the IDP, yet either
+                    // the JWT did not make it into a cookie, or the cookie value did not make it into the header of 
+                    // this request. In either case, we don't redirect back to the login path to try again, because this
+                    // will most likely result in an endless loop. Just terminate with an error.
+                    response = {
+                        status: '500',
+                        statusDescription: 'State Error',
+                        body: 'Authentication should have resulted in a valid JWT - no valid token found',
+                        headers: {
+                            'content-type': [{ key: 'Content-Type', value: 'text/plain' }],
+                        }
+                    };
+                    console.log(`No valid JWT found after authentication: ${JSON.stringify(response, null, 2)}`);
+                }
+                else if (appAuthorization) {
+                    // The application will "decide" if access to it needs to be authenticated or not, so just pass through the request
+                    response = originRequest;
+                    (0, Http_1.addHeader)(response, 'authenticated', 'false');
+                    (0, Http_1.addHeader)(response, 'login', LOGIN);
+                    (0, Http_1.addHeader)(response, appLoginHeader, encodeURIComponent(getAppLoginUrl()));
+                    (0, Http_1.addHeader)(response, appLogoutHeader, encodeURIComponent(getAppLogoutUrl()));
+                    for (let i = 0; i < customHeaders.length; i++) {
+                        const { key, value } = customHeaders[i];
+                        (0, Http_1.addHeader)(response, key, encodeURIComponent(value));
+                    }
+                    console.log('App will determine need for auth - passing through to origin');
+                }
+                else {
+                    // No valid token has been found, and this is not a post authentication redirect - send user to login.
+                    response = {
+                        status: '302',
+                        statusDescription: 'Found',
+                        headers: {
+                            location: [{ key: 'Location', value: getAppLoginUrl() }],
+                        },
+                    };
+                    console.log(`No valid JWT found - redirecting: ${JSON.stringify(response, null, 2)}`);
+                }
+                break;
+        }
+        return response;
+    }
+    catch (error) {
+        // Handle authentication error
+        console.error('SP error:', error);
+        return {
+            status: '500',
+            statusDescription: 'Server Error',
+            body: `${JSON.stringify({ message: error.message, stack: error.stack }, null, 2)}`,
+            headers: {
+                'content-type': [{ key: 'Content-Type', value: 'text/plain' }],
+                // 'www-authenticate': [{ key: 'WWW-Authenticate', value: 'Basic' }],
+            },
+        };
+    }
+});
+exports.handler = handler;
+//# sourceMappingURL=HandlerSp.js.map

package/dist/esm/HandlerSp.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"HandlerSp.js","sourceRoot":"","sources":["../../src/HandlerSp.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,iCAAqD;AACrD,+BAAiC;AACjC,mCAAqC;AAErC,iCAA+E;AAE/E,IAAY,UAEX;AAFD,WAAY,UAAU;IACpB,8BAAgB,CAAA;IAAE,gCAAkB,CAAA;IAAE,gCAAkB,CAAA;IAAE,oCAAsB,CAAA;IAAE,sCAAwB,CAAA;AAC5G,CAAC,EAFW,UAAU,0BAAV,UAAU,QAErB;AAEY,QAAA,6BAA6B,GAAG,mBAAmB,CAAC;AAEjE;;;;;;;;GAQG;AACI,MAAM,OAAO,GAAG,CAAO,aAAsB,EAAE,MAAc,EAA8B,EAAE;IAElG,IAAI,EACF,MAAM,EAAE,gBAAgB,EAAE,cAAc,EAAE,eAAe,EAAE,SAAS,EACpE,gBAAgB,EAAE,eAAe,EAAE,aAAa,GAAC,EAAoB,EACtE,GAAG,MAAM,CAAC;IAEX,MAAM,EAAE,WAAW,EAAE,GAAG,EAAE,GAAG,aAAa,CAAC;IAC3C,MAAM,OAAO,GAAG,IAAA,cAAO,EAAC,aAAa,CAAC,CAAC;IACvC,MAAM,SAAS,GAAG,IAAI,gBAAS,CAAC,SAAS,CAAC,CAAC;IAC3C,MAAM,WAAW,GAAG,WAAW,MAAM,EAAE,CAAC;IACxC,SAAS,CAAC,YAAY,CAAC,GAAG,WAAW,SAAS,CAAC,CAAC;IAEhD,MAAM,QAAQ,GAAG,IAAI,cAAQ,EAAE,CAAC;IAChC,QAAQ,CAAC,cAAc,CAAC,eAAgB,CAAC,CAAC;IAC1C,QAAQ,CAAC,eAAe,CAAC,gBAAiB,CAAC,CAAC;IAE5C,+FAA+F;IAC/F,+FAA+F;IAC/F,MAAM,SAAS,GAAG,OAAO,CAAC,GAAG,CAAC,qCAA6B,CAAC,CAAC;IAC7D,IAAG,SAAS,IAAI,MAAM,IAAI,SAAS,EAAE;QACnC,gBAAgB,GAAG,IAAI,CAAC;KACzB;IAED,IAAI;QACF,IAAI,QAAQ,CAAC;QACb,MAAM,OAAO,GAAG,WAAW,CAAC,CAAC,CAAC,IAAI,eAAe,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QACtE,OAAO,CAAC,GAAG,CAAC,QAAQ,GAAG,EAAE,CAAC,CAAC;QAC3B,OAAO,CAAC,GAAG,CAAC,gBAAgB,WAAW,EAAE,CAAC,CAAC;QAC3C,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,GAAG,UAAU,CAAC;QAEhE,MAAM,cAAc,GAAG,GAAU,EAAE;YACjC,MAAM,WAAW,GAAG,kBAAkB,CAAC,WAAW,GAAG,GAAG,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;YACnG,OAAO,GAAG,WAAW,GAAG,UAAU,CAAC,KAAK,gBAAgB,WAAW,EAAE,CAAC;QACxE,CAAC,CAAA;QAED,MAAM,eAAe,GAAG,GAAU,EAAE,CAAC,GAAG,WAAW,GAAG,UAAU,CAAC,MAAM,EAAE,CAAC;QAE1E,QAAO,GAAG,EAAE;YACV,KAAK,KAAK;gBACR,OAAO,CAAC,GAAG,CAAC,4DAA4D,CAAC,CAAC;gBAC1E,IAAI,UAAU,GAAe,kBAAkB,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,aAAa,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC;gBAC1G,MAAM,QAAQ,GAAG,MAAM,SAAS,CAAC,qBAAqB,CAAC,UAAU,CAAC,CAAC;gBACnE,QAAQ,GAAG;oBACT,MAAM,EAAE,KAAK;oBACb,iBAAiB,EAAE,OAAO;oBAC1B,OAAO,EAAE;wBACP,QAAQ,EAAE,CAAC,EAAE,GAAG,EAAE,UAAU,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC;qBACjD;iBACW,CAAC;gBACf,IAAA,kBAAU,EAAC,aAAa,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC;gBAC7D,MAAM;YAER,KAAK,MAAM;gBACT,MAAM,MAAM,GAAG,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;gBACtD,IAAG,MAAM,IAAI,KAAK,EAAE;oBAClB,mCAAmC;oBACnC,MAAM,SAAS,GAAG,MAAM,SAAS,CAAC,sBAAsB,EAAE,CAAC;oBAC3D,QAAQ,GAAG;wBACT,MAAM,EAAE,KAAK;wBACb,iBAAiB,EAAE,OAAO;wBAC1B,OAAO,EAAE;4BACP,QAAQ,EAAE,CAAC,EAAE,GAAG,EAAE,UAAU,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC;yBAClD;qBACW,CAAC;oBACf,IAAA,kBAAU,EAAC,wBAAwB,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC;iBACzE;qBACI;oBACH,4FAA4F;oBAC5F,QAAQ,GAAG;wBACT,MAAM,EAAE,KAAK;wBACb,iBAAiB,EAAE,OAAO;wBAC1B,OAAO,EAAE;4BACP,QAAQ,EAAE,CAAC,EAAE,GAAG,EAAE,UAAU,EAAE,KAAK,EAAE,GAAG,WAAW,oBAAoB,EAAE,CAAC;yBAC3E;qBACW,CAAC;oBACf,QAAQ,CAAC,+BAA+B,CAAC,QAAQ,CAAC,CAAC;oBACnD,IAAA,kBAAU,EAAC,0BAA0B,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC;iBAC3E;gBACD,MAAM;YAER,KAAK,MAAM;gBACT,MAAM,MAAM,GAAyB,MAAM,SAAS,CAAC,UAAU,CAAC,aAAa,CAAC,CAAC;gBAC/E,MAAM,OAAO,GAAG,sCAAsC,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,CAAA;gBACvF,IAAI,EAAE,kBAAkB,EAAE,UAAU,EAAE,GAAG,MAAM,CAAC;gBAChD,UAAU,GAAG,kBAAkB,CAAC,UAAU,IAAI,WAAW,CAAC,CAAC;gBAC3D,IAAI,CAAE,kBAAkB;oBAAE,MAAM;gBAEhC,IAAA,kBAAU,EAAC,OAAO,CAAC,CAAC;gBAEpB,OAAO,CAAC,GAAG,CAAC,eAAe,UAAU,EAAE,CAAC,CAAC;gBACzC,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC,UAAU,CAAC,CAAC;gBACxC,WAAW,CAAC,YAAY,CAAC,MAAM,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC;gBAEtD,QAAQ,GAAG;oBACT,MAAM,EAAE,KAAK;oBACb,iBAAiB,EAAE,OAAO;oBAC1B,OAAO,EAAE;wBACP,QAAQ,EAAE,CAAC,EAAE,GAAG,EAAE,UAAU,EAAE,KAAK,EAAE,WAAW,CAAC,QAAQ,EAAE,EAAE,CAAC;qBAC/D;iBACW,CAAC;gBACf,MAAM,WAAW,GAAG;oBAClB,GAAG,EAAE,kBAAkB,CAAC,IAAI,CAAC,OAAO;oBACpC,IAAI,EAAE,kBAAkB,CAAC,IAAI,CAAC,UAAU;iBACzC,CAAC;gBACF,OAAO,CAAC,GAAG,CAAC,gBAAgB,IAAI,CAAC,SAAS,CAAC,WAAW,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC;gBACpE,QAAQ,CAAC,mBAAmB,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAC;gBAEpD,MAAM;YAER,KAAK,QAAQ;gBACX,QAAQ,GAAG;oBACT,MAAM,EAAE,KAAK;oBACb,iBAAiB,EAAE,IAAI;oBACvB,IAAI,EAAE,SAAS,CAAC,WAAW,EAAE;oBAC7B,OAAO,EAAE;wBACP,cAAc,EAAE,CAAC,EAAE,GAAG,EAAE,cAAc,EAAE,KAAK,EAAE,iBAAiB,EAAE,CAAC;qBACpE;iBACW,CAAC;gBACf,MAAM;YAER,KAAK,OAAO;gBACV,2EAA2E;gBAC3E,oEAAoE;gBACpE,QAAQ,GAAG;oBACT,MAAM,EAAE,KAAK;oBACb,iBAAiB,EAAE,IAAI;iBACX,CAAC;gBACf,MAAM;YAER;gBACE,MAAM,SAAS,GAAG,kBAAkB,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;gBACrF,MAAM,UAAU,GAAG,QAAQ,CAAC,aAAa,CAAC,aAAa,CAAC,CAAC;gBAEzD,IAAI,UAAU,EAAE;oBACd,uFAAuF;oBACvF,OAAO,CAAC,GAAG,CAAC,uBAAuB,CAAC,CAAC;oBACrC,QAAQ,GAAG,aAAa,CAAC;oBACzB,IAAA,gBAAS,EAAC,QAAQ,EAAE,eAAe,EAAE,MAAM,CAAC,CAAC;oBAE7C,2CAA2C;oBAC3C,MAAM,WAAW,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,UAAU,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;oBAC7F,IAAA,gBAAS,EAAC,QAAQ,EAAE,cAAc,EAAE,WAAW,CAAC,CAAC;oBAEjD,0EAA0E;oBAC1E,MAAM,EAAE,IAAI,EAAE,EAAE,sBAAsB,EAAE,WAAW,EAAE,oBAAoB,EAAE,oBAAoB,EAAE,EAAE,GAAG,UAAU,CAAC,cAAQ,CAAC,UAAU,CAAC,CAAC;oBACtI,IAAA,gBAAS,EAAC,QAAQ,EAAE,wBAAwB,EAAE,sBAAsB,CAAC,CAAC;oBACtE,IAAA,gBAAS,EAAC,QAAQ,EAAE,aAAa,EAAE,WAAW,CAAC,CAAC;oBAChD,IAAA,gBAAS,EAAC,QAAQ,EAAE,sBAAsB,EAAE,oBAAoB,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;oBAC5E,IAAA,gBAAS,EAAC,QAAQ,EAAE,sBAAsB,EAAE,oBAAoB,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;oBAC5E,IAAA,gBAAS,EAAC,QAAQ,EAAE,cAAc,EAAE,kBAAkB,CAAC,cAAc,EAAE,CAAC,CAAC,CAAC;oBAC1E,IAAA,gBAAS,EAAC,QAAQ,EAAE,eAAe,EAAE,kBAAkB,CAAC,eAAe,EAAE,CAAC,CAAC,CAAC;oBAC5E,KAAI,IAAI,CAAC,GAAC,CAAC,EAAE,CAAC,GAAC,aAAa,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE;wBACxC,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,GAAG,aAAa,CAAC,CAAC,CAAC,CAAC;wBACxC,IAAA,gBAAS,EAAC,QAAQ,EAAE,GAAG,EAAE,kBAAkB,CAAC,KAAK,CAAC,CAAC,CAAA;qBACpD;oBAED,OAAO,CAAC,GAAG,CAAC,gDAAgD,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC;iBAClG;qBACI,IAAG,SAAS,CAAC,iBAAiB,EAAE,KAAK,MAAM,EAAE;oBAChD,kGAAkG;oBAClG,iGAAiG;oBACjG,oGAAoG;oBACpG,4EAA4E;oBAC5E,QAAQ,GAAG;wBACT,MAAM,EAAE,KAAK;wBACb,iBAAiB,EAAE,aAAa;wBAChC,IAAI,EAAE,2EAA2E;wBACjF,OAAO,EAAE;4BACP,cAAc,EAAE,CAAC,EAAE,GAAG,EAAE,cAAc,EAAE,KAAK,EAAE,YAAY,EAAE,CAAC;yBAC/D;qBACF,CAAA;oBACD,OAAO,CAAC,GAAG,CAAC,4CAA4C,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC;iBAC9F;qBACI,IAAG,gBAAgB,EAAE;oBACxB,mHAAmH;oBACnH,QAAQ,GAAG,aAAa,CAAC;oBACzB,IAAA,gBAAS,EAAC,QAAQ,EAAE,eAAe,EAAE,OAAO,CAAC,CAAC;oBAC9C,IAAA,gBAAS,EAAC,QAAQ,EAAE,OAAO,EAAE,KAAK,CAAC,CAAC;oBACpC,IAAA,gBAAS,EAAC,QAAQ,EAAE,cAAc,EAAE,kBAAkB,CAAC,cAAc,EAAE,CAAC,CAAC,CAAC;oBAC1E,IAAA,gBAAS,EAAC,QAAQ,EAAE,eAAe,EAAE,kBAAkB,CAAC,eAAe,EAAE,CAAC,CAAC,CAAC;oBAC5E,KAAI,IAAI,CAAC,GAAC,CAAC,EAAE,CAAC,GAAC,aAAa,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE;wBACxC,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,GAAG,aAAa,CAAC,CAAC,CAAC,CAAC;wBACxC,IAAA,gBAAS,EAAC,QAAQ,EAAE,GAAG,EAAE,kBAAkB,CAAC,KAAK,CAAC,CAAC,CAAA;qBACpD;oBAED,OAAO,CAAC,GAAG,CAAC,8DAA8D,CAAC,CAAC;iBAC7E;qBACI;oBACH,sGAAsG;oBACtG,QAAQ,GAAG;wBACT,MAAM,EAAE,KAAK;wBACb,iBAAiB,EAAE,OAAO;wBAC1B,OAAO,EAAE;4BACP,QAAQ,EAAE,CAAC,EAAE,GAAG,EAAE,UAAU,EAAE,KAAK,EAAE,cAAc,EAAE,EAAE,CAAC;yBACzD;qBACW,CAAC;oBACf,OAAO,CAAC,GAAG,CAAC,qCAAqC,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC;iBACvF;gBACD,MAAM;SACT;QAED,OAAO,QAA8B,CAAC;KACvC;IACD,OAAO,KAAS,EAAE;QAChB,8BAA8B;QAC9B,OAAO,CAAC,KAAK,CAAC,WAAW,EAAE,KAAK,CAAC,CAAC;QAClC,OAAO;YACL,MAAM,EAAE,KAAK;YACb,iBAAiB,EAAE,cAAc;YACjC,IAAI,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE;YAClF,OAAO,EAAE;gBACP,cAAc,EAAE,CAAC,EAAE,GAAG,EAAE,cAAc,EAAE,KAAK,EAAE,YAAY,EAAE,CAAC;gBAC9D,qEAAqE;aACtE;SACF,CAAC;KACH;AACH,CAAC,CAAA,CAAC;AAzNW,QAAA,OAAO,WAyNlB"}

package/dist/esm/Http.js

@@ -0,0 +1,83 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.getHost = exports.addHeader = exports.Headers = void 0;
+const Utils_1 = require("./Utils");
+/**
+ * Header accessor wrapper.
+ * @param request
+ * @returns
+ */
+const Headers = (request) => {
+    const { headers } = request;
+    if (headers) {
+        const get = (key) => {
+            if (!key) {
+                return null;
+            }
+            if (headers[key.toLowerCase()]) {
+                return headers[key.toLowerCase()][0].value;
+            }
+            return null;
+        };
+        const join = (joiner, except = []) => {
+            return Object.keys(headers).map(key => {
+                return `${key}: ${get(key)}`;
+            })
+                .filter(key => {
+                return except.find(e => {
+                    return e.toLowerCase() == key.toLowerCase();
+                }) == undefined;
+            })
+                .join(joiner);
+        };
+        const isTruthy = (key) => {
+            return `${get(key)}`.toLowerCase() == 'true';
+        };
+        return { empty: false, get, join, isTruthy };
+    }
+    return { empty: true, get: () => null, join: () => '', isTruthy: () => false };
+};
+exports.Headers = Headers;
+/**
+ * Utility function for adding headers to a request or response
+ * @param obj
+ * @param keyname
+ * @param value
+ * @returns
+ */
+const addHeader = (obj, keyname, value) => {
+    const { isBlank } = Utils_1.ParameterTester;
+    if (isBlank(value)) {
+        console.log(`ERROR: attempt to set header ${keyname} with "${value}"`);
+        return;
+    }
+    if (obj.headers) {
+        obj.headers[keyname.toLowerCase()] = [{ key: keyname, value }];
+        if ((0, Utils_1.instanceOf)(obj, "uri")) {
+            // Be more specific as to header activity when it comes to IRequest instances
+            obj.headerActivity.added[keyname.toLowerCase()] = [{ key: keyname, value }];
+        }
+    }
+};
+exports.addHeader = addHeader;
+/**
+ * Extracts the host header value from an HTTP request.
+ * @param request The HTTP request object
+ * @returns The host header value, or null if not found or invalid request
+ */
+const getHost = (request) => {
+    if (!request || !request.headers) {
+        return null;
+        ;
+    }
+    try {
+        const headers = (0, exports.Headers)(request);
+        return headers.get('host');
+    }
+    catch (e) {
+        console.log(`ERROR: Unable to determine host from request: ${JSON.stringify(request, null, 2)}`);
+    }
+    return null;
+};
+exports.getHost = getHost;
+//# sourceMappingURL=Http.js.map

package/dist/esm/Http.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"Http.js","sourceRoot":"","sources":["../../src/Http.ts"],"names":[],"mappings":";;;AAAA,mCAAsD;AA4DtD;;;;GAIG;AACI,MAAM,OAAO,GAAG,CAAC,OAA0B,EAAW,EAAE;IAC7D,MAAM,EAAE,OAAO,EAAE,GAAG,OAAO,CAAC;IAC5B,IAAG,OAAO,EAAE;QACV,MAAM,GAAG,GAAG,CAAC,GAAyB,EAAc,EAAE;YACpD,IAAG,CAAC,GAAG,EAAE;gBACP,OAAO,IAAI,CAAC;aACb;YACD,IAAG,OAAO,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC,EAAE;gBAC7B,OAAO,OAAO,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;aAC5C;YACD,OAAO,IAAI,CAAC;QACd,CAAC,CAAA;QACD,MAAM,IAAI,GAAG,CAAC,MAAa,EAAE,SAAgB,EAAE,EAAS,EAAE;YACxD,OAAO,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE;gBACpC,OAAO,GAAG,GAAG,KAAK,GAAG,CAAC,GAAG,CAAC,EAAE,CAAA;YAC9B,CAAC,CAAC;iBACD,MAAM,CAAC,GAAG,CAAC,EAAE;gBACZ,OAAO,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE;oBACrB,OAAO,CAAC,CAAC,WAAW,EAAE,IAAI,GAAG,CAAC,WAAW,EAAE,CAAC;gBAC9C,CAAC,CAAC,IAAI,SAAS,CAAC;YAClB,CAAC,CAAC;iBACD,IAAI,CAAC,MAAM,CAAC,CAAC;QAChB,CAAC,CAAA;QACD,MAAM,QAAQ,GAAG,CAAC,GAAU,EAAU,EAAE;YACtC,OAAO,GAAG,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,WAAW,EAAE,IAAI,MAAM,CAAC;QAC/C,CAAC,CAAA;QACD,OAAO,EAAE,KAAK,EAAC,KAAK,EAAE,GAAG,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC;KAC7C;IACD,OAAO,EAAE,KAAK,EAAC,IAAI,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,EAAE,EAAE,QAAQ,EAAE,GAAG,EAAE,CAAC,KAAK,EAAE,CAAC;AAChF,CAAC,CAAA;AA7BY,QAAA,OAAO,WA6BnB;AAED;;;;;;GAMG;AACI,MAAM,SAAS,GAAG,CAAC,GAAsB,EAAE,OAAc,EAAE,KAAY,EAAE,EAAE;IAChF,MAAM,EAAE,OAAO,EAAE,GAAG,uBAAe,CAAC;IACpC,IAAG,OAAO,CAAC,KAAK,CAAC,EAAE;QACjB,OAAO,CAAC,GAAG,CAAC,gCAAgC,OAAO,UAAU,KAAK,GAAG,CAAC,CAAC;QACvE,OAAO;KACR;IACD,IAAG,GAAG,CAAC,OAAO,EAAE;QACd,GAAG,CAAC,OAAO,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC,GAAG,CAAC,EAAE,GAAG,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC;QAC/D,IAAG,IAAA,kBAAU,EAAW,GAAG,EAAE,KAAK,CAAC,EAAE;YACnC,6EAA6E;YAC7E,GAAG,CAAC,cAAc,CAAC,KAAK,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC,GAAG,CAAC,EAAE,GAAG,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC;SAC7E;KACF;AACH,CAAC,CAAA;AAbY,QAAA,SAAS,aAarB;AAID;;;;GAIG;AACI,MAAM,OAAO,GAAG,CAAC,OAAgB,EAAc,EAAE;IACtD,IAAG,CAAC,OAAO,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE;QAC/B,OAAO,IAAI,CAAC;QAAA,CAAC;KACd;IACD,IAAI;QACF,MAAM,OAAO,GAAG,IAAA,eAAO,EAAC,OAAO,CAAC,CAAC;QACjC,OAAO,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;KAC5B;IACD,OAAM,CAAK,EAAE;QACX,OAAO,CAAC,GAAG,CAAC,iDAAiD,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC;KAClG;IACD,OAAO,IAAI,CAAC;AACd,CAAC,CAAA;AAZY,QAAA,OAAO,WAYnB"}

package/dist/esm/Jwt.js

@@ -0,0 +1,186 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || function (mod) {
+    if (mod && mod.__esModule) return mod;
+    var result = {};
+    if (mod != null) for (var k in mod) if (k !== "default" && Object.prototype.hasOwnProperty.call(mod, k)) __createBinding(result, mod, k);
+    __setModuleDefault(result, mod);
+    return result;
+};
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.JwtTools = void 0;
+const jwt = __importStar(require("jsonwebtoken"));
+const ms_1 = __importDefault(require("ms"));
+/**
+ * Use the jsonwebtoken library to create and verify jwts.
+ *
+ * @see https://www.npmjs.com/package/jsonwebtoken
+ */
+class JwtTools {
+    constructor() {
+        this.expiresIn = '7d';
+    }
+    resetPrivateKey(privateKey) {
+        this.privateKey = privateKey;
+    }
+    resetPublicKey(publicKey) {
+        this.publicKey = publicKey;
+    }
+    setExpiration(expiresIn) {
+        this.expiresIn = expiresIn;
+    }
+    setClockTime(clockTime) {
+        this.clockTime = clockTime;
+    }
+    /**
+     * The cookie header is a concatenation of name=value pairs delimited by a ";" character.
+     * Get the value of one of these pairs, specified by name.
+     * @param request The HTTP request containing cookies
+     * @param cookieName The name of the cookie to retrieve
+     * @returns The cookie value if found, undefined otherwise
+     */
+    parseCookieValue(request, cookieName) {
+        let { cookie: cookieHeader } = request.headers;
+        if (cookieHeader) {
+            let cookieHdrVal;
+            if (typeof cookieHeader != 'string') {
+                cookieHdrVal = cookieHeader[0].value;
+            }
+            const cookies = cookieHdrVal ? cookieHdrVal.split(';') : [];
+            for (const cookie of cookies) {
+                const [name, value] = cookie.trim().split('=');
+                if (name === cookieName) {
+                    return value;
+                }
+            }
+        }
+        return null;
+    }
+    /**
+     * Any environment variable starting with "IMPERSONATE_" is treated as an attribute for building a jwt token.
+     * This provides an option for mocking a jwt while running locally for testing so as to "pretend" a valid jwt
+     * was provided with the http request.
+     * @example
+     * IMPERSONATE_buPrincipal=wrh
+     * IMPERSONATE_eduPersonPrincipalName=wrh@bu.edu
+     * IMPERSONATE_eduPersonAffiliation=employee|member|staff
+     * @returns JWT token object with impersonation attributes, or null if no IMPERSONATE_ environment variables are found
+     */
+    getImpersonationToken() {
+        let sub = '';
+        const attributes = {};
+        Object.keys(process.env).filter((e) => {
+            return e.toLocaleUpperCase().startsWith('IMPERSONATE_') ? e : null;
+        }).forEach((e) => {
+            const attributeValue = process.env[e];
+            const attributeName = e.substring(e.indexOf('_') + 1);
+            if (attributeName.toLocaleLowerCase() === 'name_id') {
+                sub = attributeValue;
+            }
+            else {
+                attributes[attributeName] = attributeValue.split('|').map((e) => { return e.trim(); });
+            }
+        });
+        if (Object.keys(attributes).length > 0) {
+            const retval = {
+                [JwtTools.TOKEN_NAME]: { sub, user: { attributes } }
+            };
+            return retval;
+        }
+        return null;
+    }
+    /**
+     * Extract the decoded JWT from the larger cookie value.
+     * @param request
+     * @param verify
+     * @returns
+     */
+    getToken(request, verify) {
+        try {
+            const impersonationToken = this.getImpersonationToken();
+            if (impersonationToken) {
+                return impersonationToken;
+            }
+            const { cookie } = request.headers;
+            if (cookie) {
+                let authToken = this.parseCookieValue(request, JwtTools.COOKIE_NAME);
+                if (authToken) {
+                    let decoded;
+                    if (verify) {
+                        decoded = jwt.verify(authToken, this.publicKey, {
+                            algorithms: ['RS256'],
+                            clockTimestamp: this.clockTime
+                        });
+                    }
+                    else {
+                        decoded = jwt.decode(authToken);
+                    }
+                    // If no error is thrown, then the token is valid
+                    return decoded;
+                }
+            }
+            return null;
+        }
+        catch (error) {
+            return null;
+        }
+    }
+    /**
+     * Determine if a request carries a valid jwt in its cookie header.
+     * @param request
+     * @returns
+     */
+    hasValidToken(request) {
+        return this.getToken(request, true);
+    }
+    /**
+     * Place a jwt in a "set-cookie" response header.
+     * @param response
+     * @param payload
+     */
+    setCookieInResponse(response, payload) {
+        const jwtToken = jwt.sign({ [JwtTools.TOKEN_NAME]: payload }, this.privateKey, {
+            algorithm: 'RS256',
+            expiresIn: this.expiresIn,
+        });
+        const maxAge = Math.floor((0, ms_1.default)(this.expiresIn) / 1000);
+        response.headers['set-cookie'] = [{
+                key: 'Set-Cookie',
+                value: `${JwtTools.COOKIE_NAME}=${jwtToken}; Max-Age=${maxAge}; Secure; HttpOnly`
+            }];
+    }
+    setCookieInvalidationInResponse(response) {
+        response.headers['set-cookie'] = [{
+                key: 'Set-Cookie',
+                value: `${JwtTools.COOKIE_NAME}=invalidated; Max-Age=0; Expires=Thu, 01 Jan 1970 00:00:00 GMT; Secure; HttpOnly`
+            }];
+    }
+    getCookieName() {
+        return JwtTools.COOKIE_NAME;
+    }
+    getTokenName() {
+        return JwtTools.TOKEN_NAME;
+    }
+}
+exports.JwtTools = JwtTools;
+JwtTools.TOKEN_NAME = 'auth-token';
+JwtTools.COOKIE_NAME = `${JwtTools.TOKEN_NAME}-cookie`;
+//# sourceMappingURL=Jwt.js.map

package/dist/esm/Jwt.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"Jwt.js","sourceRoot":"","sources":["../../src/Jwt.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,kDAAoC;AACpC,4CAAqC;AAGrC;;;;GAIG;AACH,MAAa,QAAQ;IAArB;QAIU,cAAS,GAAe,IAAI,CAAC;IAgKvC,CAAC;IA1JQ,eAAe,CAAC,UAAiB;QACtC,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC;IAC/B,CAAC;IACM,cAAc,CAAC,SAAgB;QACpC,IAAI,CAAC,SAAS,GAAG,SAAS,CAAC;IAC7B,CAAC;IACM,aAAa,CAAC,SAAgB;QACnC,IAAI,CAAC,SAAS,GAAG,SAAwB,CAAC;IAC5C,CAAC;IACM,YAAY,CAAC,SAAgB;QAClC,IAAI,CAAC,SAAS,GAAG,SAAS,CAAC;IAC7B,CAAC;IAED;;;;;;OAMG;IACI,gBAAgB,CAAC,OAAgB,EAAE,UAAiB;QACzD,IAAI,EAAE,MAAM,EAAC,YAAY,EAAE,GAAG,OAAO,CAAC,OAAO,CAAC;QAC9C,IAAG,YAAY,EAAE;YACf,IAAI,YAA6B,CAAC;YAClC,IAAG,OAAO,YAAY,IAAI,QAAQ,EAAE;gBAClC,YAAY,GAAG,YAAY,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;aACtC;YACD,MAAM,OAAO,GAAG,YAAY,CAAC,CAAC,CAAC,YAAY,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YAC5D,KAAI,MAAM,MAAM,IAAI,OAAO,EAAE;gBAC3B,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,GAAG,MAAM,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;gBAC/C,IAAI,IAAI,KAAK,UAAU,EAAE;oBACvB,OAAO,KAAK,CAAC;iBACd;aACF;SACF;QAED,OAAO,IAAI,CAAC;IACd,CAAC;IAED;;;;;;;;;OASG;IACI,qBAAqB;QAC1B,IAAI,GAAG,GAAU,EAAE,CAAC;QACpB,MAAM,UAAU,GAAG,EAAU,CAAC;QAE9B,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE;YACpC,OAAO,CAAC,CAAC,iBAAiB,EAAE,CAAC,UAAU,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QACrE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE;YACf,MAAM,cAAc,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,CAAW,CAAC;YAChD,MAAM,aAAa,GAAG,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,GAAC,CAAC,CAAC,CAAC;YACpD,IAAG,aAAa,CAAC,iBAAiB,EAAE,KAAK,SAAS,EAAE;gBAClD,GAAG,GAAG,cAAc,CAAC;aACtB;iBACI;gBACH,UAAU,CAAC,aAAa,CAAC,GAAG,cAAc,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,GAAG,OAAO,CAAC,CAAC,IAAI,EAAE,CAAA,CAAA,CAAC,CAAC,CAAC;aACtF;QACH,CAAC,CAAC,CAAC;QAEH,IAAG,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE;YACrC,MAAM,MAAM,GAAG;gBACb,CAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,UAAU,EAAC,EAAE;aACpD,CAAC;YACF,OAAO,MAAM,CAAC;SACf;QAED,OAAO,IAAI,CAAC;IACd,CAAC;IAED;;;;;OAKG;IACI,QAAQ,CAAC,OAAgB,EAAE,MAAe;QAC/C,IAAI;YACF,MAAM,kBAAkB,GAAG,IAAI,CAAC,qBAAqB,EAAE,CAAC;YACxD,IAAG,kBAAkB,EAAE;gBACrB,OAAO,kBAAkB,CAAC;aAC3B;YACD,MAAM,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,OAAO,CAAC;YACnC,IAAG,MAAM,EAAE;gBACT,IAAI,SAAS,GAAe,IAAI,CAAC,gBAAgB,CAAC,OAAO,EAAE,QAAQ,CAAC,WAAW,CAAC,CAAC;gBACjF,IAAG,SAAS,EAAE;oBACZ,IAAI,OAAW,CAAC;oBAChB,IAAG,MAAM,EAAE;wBACT,OAAO,GAAG,GAAG,CAAC,MAAM,CAAC,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE;4BAC9C,UAAU,EAAE,CAAC,OAAO,CAAC;4BACrB,cAAc,EAAE,IAAI,CAAC,SAAS;yBAC/B,CAAC,CAAC;qBACJ;yBACI;wBACH,OAAO,GAAG,GAAG,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;qBACjC;oBAED,iDAAiD;oBACjD,OAAO,OAAO,CAAC;iBAChB;aACF;YACD,OAAO,IAAI,CAAC;SACb;QACD,OAAO,KAAK,EAAE;YACZ,OAAO,IAAI,CAAC;SACb;IACH,CAAC;IAED;;;;OAIG;IACI,aAAa,CAAC,OAAgB;QACnC,OAAO,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;IACtC,CAAC;IAED;;;;OAIG;IACI,mBAAmB,CAAC,QAAY,EAAE,OAAW;QAClD,MAAM,QAAQ,GAAG,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,OAAO,EAAE,EAAE,IAAI,CAAC,UAAU,EAAE;YAC7E,SAAS,EAAE,OAAO;YAClB,SAAS,EAAE,IAAI,CAAC,SAAS;SAC1B,CAAC,CAAC;QAEH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAA,YAAE,EAAC,IAAI,CAAC,SAAS,CAAC,GAAC,IAAI,CAAC,CAAC;QACnD,QAAQ,CAAC,OAAO,CAAC,YAAY,CAAC,GAAG,CAAC;gBAChC,GAAG,EAAE,YAAY;gBACjB,KAAK,EAAE,GAAG,QAAQ,CAAC,WAAW,IAAI,QAAQ,aAAa,MAAM,oBAAoB;aAClF,CAAC,CAAC;IACL,CAAC;IAEM,+BAA+B,CAAC,QAAY;QACjD,QAAQ,CAAC,OAAO,CAAC,YAAY,CAAC,GAAG,CAAC;gBAChC,GAAG,EAAE,YAAY;gBACjB,KAAK,EAAE,GAAG,QAAQ,CAAC,WAAW,kFAAkF;aACjH,CAAC,CAAC;IACL,CAAC;IAEM,aAAa;QAClB,OAAO,QAAQ,CAAC,WAAW,CAAC;IAC9B,CAAC;IACM,YAAY;QACjB,OAAO,QAAQ,CAAC,UAAU,CAAC;IAC7B,CAAC;;AAnKH,4BAoKC;AA7Je,mBAAU,GAAU,YAAY,AAAtB,CAAuB;AACjC,oBAAW,GAAU,GAAG,QAAQ,CAAC,UAAU,SAAS,AAAzC,CAA0C"}

package/dist/esm/Keys.js

@@ -0,0 +1,82 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || function (mod) {
+    if (mod && mod.__esModule) return mod;
+    var result = {};
+    if (mod != null) for (var k in mod) if (k !== "default" && Object.prototype.hasOwnProperty.call(mod, k)) __createBinding(result, mod, k);
+    __setModuleDefault(result, mod);
+    return result;
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.Keys = void 0;
+const forge = __importStar(require("node-forge"));
+class Keys {
+    constructor() {
+        this.extractValueFromPEM = (pem) => {
+            return pem.replace(/[\r\n]/g, '').split(/\-{2,}/)[2];
+        };
+        this.toString = () => {
+            return JSON.stringify({
+                privateKey: this.privateKey,
+                publicKey: this.publicKey,
+                certificate: this.certificate
+            }, null, 2);
+        };
+        const keys = forge.pki.rsa.generateKeyPair(2048);
+        const cert = forge.pki.createCertificate();
+        const yearsToExpire = 5;
+        cert.publicKey = keys.publicKey;
+        cert.serialNumber = '01';
+        cert.validity.notBefore = new Date();
+        cert.validity.notAfter = new Date();
+        cert.validity.notAfter.setFullYear(cert.validity.notBefore.getFullYear() + yearsToExpire);
+        const attrs = [
+            { name: 'commonName', value: 'example.org' },
+            { name: 'countryName', value: 'US' },
+            { shortName: 'ST', value: 'Massachusetts' },
+            { name: 'localityName', value: 'Boston' },
+            { name: 'organizationName', value: 'Boston University' },
+            { shortName: 'OU', value: 'Test' }
+        ];
+        cert.setSubject(attrs);
+        cert.setIssuer(attrs);
+        cert.sign(keys.privateKey);
+        this._keys = keys;
+        this._certificate = cert;
+    }
+    get privateKey() {
+        return this.extractValueFromPEM(this.privateKeyPEM);
+    }
+    get publicKey() {
+        return this.extractValueFromPEM(this.publicKeyPEM);
+    }
+    get certificate() {
+        return this.extractValueFromPEM(this.certificatePEM);
+    }
+    get privateKeyPEM() {
+        return forge.pki.privateKeyToPem(this._keys.privateKey);
+    }
+    get publicKeyPEM() {
+        return forge.pki.publicKeyToPem(this._keys.publicKey);
+    }
+    get certificatePEM() {
+        return forge.pki.certificateToPem(this._certificate);
+    }
+}
+exports.Keys = Keys;
+//# sourceMappingURL=Keys.js.map

package/dist/esm/Keys.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"Keys.js","sourceRoot":"","sources":["../../src/Keys.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,kDAAoC;AAEpC,MAAa,IAAI;IAIf;QA0BQ,wBAAmB,GAAG,CAAC,GAAU,EAAE,EAAE;YAC3C,OAAO,GAAG,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC;QACvD,CAAC,CAAA;QAmBM,aAAQ,GAAG,GAAG,EAAE;YACrB,OAAO,IAAI,CAAC,SAAS,CAAC;gBACpB,UAAU,EAAE,IAAI,CAAC,UAAU;gBAC3B,SAAS,EAAE,IAAI,CAAC,SAAS;gBACzB,WAAW,EAAE,IAAI,CAAC,WAAW;aAC9B,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;QACd,CAAC,CAAA;QApDC,MAAM,IAAI,GAAG,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC;QACjD,MAAM,IAAI,GAAG,KAAK,CAAC,GAAG,CAAC,iBAAiB,EAAE,CAAC;QAC3C,MAAM,aAAa,GAAG,CAAC,CAAC;QACxB,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,SAAS,CAAC;QAChC,IAAI,CAAC,YAAY,GAAG,IAAI,CAAC;QACzB,IAAI,CAAC,QAAQ,CAAC,SAAS,GAAG,IAAI,IAAI,EAAE,CAAC;QACrC,IAAI,CAAC,QAAQ,CAAC,QAAQ,GAAG,IAAI,IAAI,EAAE,CAAC;QACpC,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,WAAW,CAAC,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,WAAW,EAAE,GAAG,aAAa,CAAC,CAAC;QAE1F,MAAM,KAAK,GAAG;YACZ,EAAE,IAAI,EAAE,YAAY,EAAE,KAAK,EAAE,aAAa,EAAE;YAC5C,EAAE,IAAI,EAAE,aAAa,EAAE,KAAK,EAAE,IAAI,EAAE;YACpC,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,eAAe,EAAE;YAC3C,EAAE,IAAI,EAAE,cAAc,EAAE,KAAK,EAAE,QAAQ,EAAE;YACzC,EAAE,IAAI,EAAE,kBAAkB,EAAE,KAAK,EAAE,mBAAmB,EAAE;YACxD,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE;SACnC,CAAC;QACF,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;QACvB,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;QACtB,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QAE3B,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC;QAClB,IAAI,CAAC,YAAY,GAAG,IAAI,CAAC;IAC3B,CAAC;IAKD,IAAW,UAAU;QACnB,OAAO,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;IACtD,CAAC;IACD,IAAW,SAAS;QAClB,OAAO,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;IACrD,CAAC;IACD,IAAW,WAAW;QACpB,OAAO,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;IACvD,CAAC;IACD,IAAW,aAAa;QACtB,OAAO,KAAK,CAAC,GAAG,CAAC,eAAe,CAAC,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;IAC1D,CAAC;IACD,IAAW,YAAY;QACrB,OAAO,KAAK,CAAC,GAAG,CAAC,cAAc,CAAC,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;IACxD,CAAC;IACD,IAAW,cAAc;QACvB,OAAO,KAAK,CAAC,GAAG,CAAC,gBAAgB,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;IACvD,CAAC;CAQF;AA1DD,oBA0DC"}