@boxyhq/saml-jackson 0.5.1 → 1.0.2

package/dist/controller/oauth.js

@@ -41,14 +41,26 @@ const util_1 = require("util");
 const zlib_1 = require("zlib");
 const dbutils = __importStar(require("../db/utils"));
 const metrics = __importStar(require("../opentelemetry/metrics"));
-const saml_1 = __importDefault(require("../saml/saml"));
+const saml20_1 = __importDefault(require("@boxyhq/saml20"));
+const claims_1 = __importDefault(require("../saml/claims"));
 const error_1 = require("./error");
 const allowed = __importStar(require("./oauth/allowed"));
 const codeVerifier = __importStar(require("./oauth/code-verifier"));
 const redirect = __importStar(require("./oauth/redirect"));
 const utils_1 = require("./utils");
 const deflateRawAsync = (0, util_1.promisify)(zlib_1.deflateRaw);
-const relayStatePrefix = 'boxyhq_jackson_';
+const validateResponse = (rawResponse, validateOpts) => __awaiter(void 0, void 0, void 0, function* () {
+    const profile = yield saml20_1.default.validateAsync(rawResponse, validateOpts);
+    if (profile && profile.claims) {
+        // we map claims to our attributes id, email, firstName, lastName where possible. We also map original claims to raw
+        profile.claims = claims_1.default.map(profile.claims);
+        // some providers don't return the id in the assertion, we set it to a sha256 hash of the email
+        if (!profile.claims.id && profile.claims.email) {
+            profile.claims.id = crypto_1.default.createHash('sha256').update(profile.claims.email).digest('hex');
+        }
+    }
+    return profile;
+});
 function getEncodedClientId(client_id) {
     try {
         const sp = new URLSearchParams(client_id);
@@ -74,11 +86,53 @@ class OAuthController {
         this.tokenStore = tokenStore;
         this.opts = opts;
     }
+    resolveMultipleConfigMatches(samlConfigs, idp_hint, originalParams, isIdpFlow = false) {
+        if (samlConfigs.length > 1) {
+            if (idp_hint) {
+                return { resolvedSamlConfig: samlConfigs.find(({ clientID }) => clientID === idp_hint) };
+            }
+            else if (this.opts.idpDiscoveryPath) {
+                if (!isIdpFlow) {
+                    // redirect to IdP selection page
+                    const idpList = samlConfigs.map(({ idpMetadata: { provider }, clientID }) => JSON.stringify({
+                        provider,
+                        clientID,
+                    }));
+                    return {
+                        redirect_url: redirect.success(this.opts.externalUrl + this.opts.idpDiscoveryPath, Object.assign(Object.assign({}, originalParams), { idp: idpList })),
+                    };
+                }
+                else {
+                    const appList = samlConfigs.map(({ product, name, description, clientID }) => ({
+                        product,
+                        name,
+                        description,
+                        clientID,
+                    }));
+                    return {
+                        app_select_form: saml20_1.default.createPostForm(this.opts.idpDiscoveryPath, [
+                            {
+                                name: 'SAMLResponse',
+                                value: originalParams.SAMLResponse,
+                            },
+                            {
+                                name: 'app',
+                                value: encodeURIComponent(JSON.stringify(appList)),
+                            },
+                        ]),
+                    };
+                }
+            }
+        }
+        return {};
+    }
     authorize(body) {
         return __awaiter(this, void 0, void 0, function* () {
             const { response_type = 'code', client_id, redirect_uri, state, tenant, product, code_challenge, code_challenge_method = '', 
             // eslint-disable-next-line @typescript-eslint/no-unused-vars
-            provider = 'saml', } = body;
+            provider = 'saml', idp_hint, } = body;
+            let requestedTenant = tenant;
+            let requestedProduct = product;
             metrics.increment('oauthAuthorize');
             if (!redirect_uri) {
                 throw new error_1.JacksonError('Please specify a redirect URL.', 400);
@@ -95,22 +149,58 @@ class OAuthController {
                 if (!samlConfigs || samlConfigs.length === 0) {
                     throw new error_1.JacksonError('SAML configuration not found.', 403);
                 }
-                // TODO: Support multiple matches
                 samlConfig = samlConfigs[0];
+                // Support multiple matches
+                const { resolvedSamlConfig, redirect_url } = this.resolveMultipleConfigMatches(samlConfigs, idp_hint, {
+                    response_type,
+                    client_id,
+                    redirect_uri,
+                    state,
+                    tenant,
+                    product,
+                    code_challenge,
+                    code_challenge_method,
+                    provider,
+                });
+                if (redirect_url) {
+                    return { redirect_url };
+                }
+                if (resolvedSamlConfig) {
+                    samlConfig = resolvedSamlConfig;
+                }
             }
             else if (client_id && client_id !== '' && client_id !== 'undefined' && client_id !== 'null') {
                 // if tenant and product are encoded in the client_id then we parse it and check for the relevant config(s)
                 const sp = getEncodedClientId(client_id);
-                if (sp === null || sp === void 0 ? void 0 : sp.tenant) {
+                if (sp && sp.tenant && sp.product) {
+                    requestedTenant = sp.tenant;
+                    requestedProduct = sp.product;
                     const samlConfigs = yield this.configStore.getByIndex({
                         name: utils_1.IndexNames.TenantProduct,
-                        value: dbutils.keyFromParts(sp.tenant, sp.product || ''),
+                        value: dbutils.keyFromParts(sp.tenant, sp.product),
                     });
                     if (!samlConfigs || samlConfigs.length === 0) {
                         throw new error_1.JacksonError('SAML configuration not found.', 403);
                     }
-                    // TODO: Support multiple matches
                     samlConfig = samlConfigs[0];
+                    // Support multiple matches
+                    const { resolvedSamlConfig, redirect_url } = this.resolveMultipleConfigMatches(samlConfigs, idp_hint, {
+                        response_type,
+                        client_id,
+                        redirect_uri,
+                        state,
+                        tenant,
+                        product,
+                        code_challenge,
+                        code_challenge_method,
+                        provider,
+                    });
+                    if (redirect_url) {
+                        return { redirect_url };
+                    }
+                    if (resolvedSamlConfig) {
+                        samlConfig = resolvedSamlConfig;
+                    }
                 }
                 else {
                     samlConfig = yield this.configStore.get(client_id);
@@ -137,7 +227,7 @@ class OAuthController {
                 ssoUrl = sso.postUrl;
                 post = true;
             }
-            const samlReq = saml_1.default.request({
+            const samlReq = saml20_1.default.request({
                 ssoUrl,
                 entityID: this.opts.samlAudience,
                 callbackUrl: this.opts.externalUrl + this.opts.samlPath,
@@ -145,12 +235,16 @@ class OAuthController {
                 publicKey: samlConfig.certs.publicKey,
             });
             const sessionId = crypto_1.default.randomBytes(16).toString('hex');
-            const requestedParams = {
-                tenant,
-                product,
-                client_id,
-                state,
-            };
+            const requested = { client_id, state };
+            if (requestedTenant) {
+                requested.tenant = requestedTenant;
+            }
+            if (requestedProduct) {
+                requested.product = requestedProduct;
+            }
+            if (idp_hint) {
+                requested.idp_hint = idp_hint;
+            }
             yield this.sessionStore.put(sessionId, {
                 id: samlReq.id,
                 redirect_uri,
@@ -158,9 +252,9 @@ class OAuthController {
                 state,
                 code_challenge,
                 code_challenge_method,
-                requested: requestedParams,
+                requested,
             });
-            const relayState = relayStatePrefix + sessionId;
+            const relayState = utils_1.relayStatePrefix + sessionId;
             let redirectUrl;
             let authorizeForm;
             if (!post) {
@@ -172,7 +266,16 @@ class OAuthController {
             }
             else {
                 // HTTP POST binding
-                authorizeForm = (0, utils_1.createAuthorizeForm)(relayState, encodeURI(Buffer.from(samlReq.request).toString('base64')), ssoUrl);
+                authorizeForm = saml20_1.default.createPostForm(ssoUrl, [
+                    {
+                        name: 'RelayState',
+                        value: relayState,
+                    },
+                    {
+                        name: 'SAMLRequest',
+                        value: Buffer.from(samlReq.request).toString('base64'),
+                    },
+                ]);
             }
             return {
                 redirect_url: redirectUrl,
@@ -182,18 +285,16 @@ class OAuthController {
     }
     samlResponse(body) {
         return __awaiter(this, void 0, void 0, function* () {
-            const { SAMLResponse } = body;
+            const { SAMLResponse, idp_hint } = body;
             let RelayState = body.RelayState || ''; // RelayState will contain the sessionId from earlier quasi-oauth flow
-            if (!this.opts.idpEnabled && !RelayState.startsWith(relayStatePrefix)) {
+            const isIdPFlow = !RelayState.startsWith(utils_1.relayStatePrefix);
+            if (!this.opts.idpEnabled && isIdPFlow) {
                 // IDP is disabled so block the request
                 throw new error_1.JacksonError('IdP (Identity Provider) flow has been disabled. Please head to your Service Provider to login.', 403);
             }
-            if (!RelayState.startsWith(relayStatePrefix)) {
-                RelayState = '';
-            }
-            RelayState = RelayState.replace(relayStatePrefix, '');
+            RelayState = RelayState.replace(utils_1.relayStatePrefix, '');
             const rawResponse = Buffer.from(SAMLResponse, 'base64').toString();
-            const parsedResp = yield saml_1.default.parseAsync(rawResponse);
+            const parsedResp = yield saml20_1.default.parseAsync(rawResponse);
             const samlConfigs = yield this.configStore.getByIndex({
                 name: utils_1.IndexNames.EntityID,
                 value: parsedResp === null || parsedResp === void 0 ? void 0 : parsedResp.issuer,
@@ -201,8 +302,17 @@ class OAuthController {
             if (!samlConfigs || samlConfigs.length === 0) {
                 throw new error_1.JacksonError('SAML configuration not found.', 403);
             }
-            // TODO: Support multiple matches
-            const samlConfig = samlConfigs[0];
+            let samlConfig = samlConfigs[0];
+            if (isIdPFlow) {
+                RelayState = '';
+                const { resolvedSamlConfig, app_select_form } = this.resolveMultipleConfigMatches(samlConfigs, idp_hint, { SAMLResponse }, true);
+                if (app_select_form) {
+                    return { app_select_form };
+                }
+                if (resolvedSamlConfig) {
+                    samlConfig = resolvedSamlConfig;
+                }
+            }
             let session;
             if (RelayState !== '') {
                 session = yield this.sessionStore.get(RelayState);
@@ -210,6 +320,20 @@ class OAuthController {
                     throw new error_1.JacksonError('Unable to validate state from the origin request.', 403);
                 }
             }
+            if (!isIdPFlow) {
+                // Resolve if there are multiple matches for SP login. TODO: Support multiple matches for IdP login
+                samlConfig =
+                    samlConfigs.length === 1
+                        ? samlConfigs[0]
+                        : samlConfigs.filter((c) => {
+                            var _a, _b, _c;
+                            return (c.clientID === ((_a = session === null || session === void 0 ? void 0 : session.requested) === null || _a === void 0 ? void 0 : _a.client_id) ||
+                                (c.tenant === ((_b = session === null || session === void 0 ? void 0 : session.requested) === null || _b === void 0 ? void 0 : _b.tenant) && c.product === ((_c = session === null || session === void 0 ? void 0 : session.requested) === null || _c === void 0 ? void 0 : _c.product)));
+                        })[0];
+            }
+            if (!samlConfig) {
+                throw new error_1.JacksonError('SAML configuration not found.', 403);
+            }
             const validateOpts = {
                 thumbprint: samlConfig.idpMetadata.thumbprint,
                 audience: this.opts.samlAudience,
@@ -217,7 +341,7 @@ class OAuthController {
             if (session && session.id) {
                 validateOpts.inResponseTo = session.id;
             }
-            const profile = yield saml_1.default.validateAsync(rawResponse, validateOpts);
+            const profile = yield validateResponse(rawResponse, validateOpts);
             // store details against a code
             const code = crypto_1.default.randomBytes(20).toString('hex');
             const codeVal = {
@@ -346,6 +470,11 @@ class OAuthController {
                         }
                     }
                 }
+                else {
+                    if (client_secret !== this.opts.clientSecretVerifier && client_secret !== codeVal.clientSecret) {
+                        throw new error_1.JacksonError('Invalid client_secret', 401);
+                    }
+                }
             }
             else if (codeVal && codeVal.session) {
                 throw new error_1.JacksonError('Please specify client_secret or code_verifier', 401);

package/dist/controller/utils.d.ts

@@ -2,4 +2,5 @@ export declare enum IndexNames {
     EntityID = "entityID",
     TenantProduct = "tenantProduct"
 }
-export declare const createAuthorizeForm: (relayState: string, samlReqEnc: string, postUrl: string) => string;
+export declare const relayStatePrefix = "boxyhq_jackson_";
+export declare const validateAbsoluteUrl: (url: any, message: any) => void;

package/dist/controller/utils.js

@@ -1,32 +1,19 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.createAuthorizeForm = exports.IndexNames = void 0;
+exports.validateAbsoluteUrl = exports.relayStatePrefix = exports.IndexNames = void 0;
+const error_1 = require("./error");
 var IndexNames;
 (function (IndexNames) {
     IndexNames["EntityID"] = "entityID";
     IndexNames["TenantProduct"] = "tenantProduct";
 })(IndexNames = exports.IndexNames || (exports.IndexNames = {}));
-const createAuthorizeForm = (relayState, samlReqEnc, postUrl) => {
-    const formElements = [
-        '<!DOCTYPE html>',
-        '<html>',
-        '<head>',
-        '<meta charset="utf-8">',
-        '<meta http-equiv="x-ua-compatible" content="ie=edge">',
-        '</head>',
-        '<body onload="document.forms[0].submit()">',
-        '<noscript>',
-        '<p>Note: Since your browser does not support JavaScript, you must press the Continue button once to proceed.</p>',
-        '</noscript>',
-        '<form method="post" action="' + encodeURI(postUrl) + '">',
-        '<input type="hidden" name="RelayState" value="' + relayState + '"/>',
-        '<input type="hidden" name="SAMLRequest" value="' + samlReqEnc + '"/>',
-        '<input type="submit" value="Continue" />',
-        '</form>',
-        '<script>document.forms[0].style.display="none";</script>',
-        '</body>',
-        '</html>',
-    ];
-    return formElements.join('');
+exports.relayStatePrefix = 'boxyhq_jackson_';
+const validateAbsoluteUrl = (url, message) => {
+    try {
+        new URL(url);
+    }
+    catch (err) {
+        throw new error_1.JacksonError(message ? message : 'Invalid url', 400);
+    }
 };
-exports.createAuthorizeForm = createAuthorizeForm;
+exports.validateAbsoluteUrl = validateAbsoluteUrl;

package/dist/db/mem.js

@@ -79,16 +79,16 @@ class Mem {
             take += skip;
             const returnValue = [];
             if (namespace) {
-                for (const key in this.store) {
-                    if (key.startsWith(namespace)) {
-                        if (count >= take) {
-                            break;
-                        }
-                        if (count >= skip) {
-                            returnValue.push(this.store[key]);
-                        }
-                        count++;
+                const val = Array.from(this.indexes[dbutils.keyFromParts(dbutils.createdAtPrefix, namespace)]);
+                const iterator = val.reverse().values();
+                for (const value of iterator) {
+                    if (count >= take) {
+                        break;
+                    }
+                    if (count >= skip) {
+                        returnValue.push(this.store[dbutils.keyFromParts(namespace, value)]);
                     }
+                    count++;
                 }
             }
             return returnValue || [];
@@ -108,9 +108,6 @@ class Mem {
         return __awaiter(this, void 0, void 0, function* () {
             const k = dbutils.key(namespace, key);
             this.store[k] = val;
-            if (!Date.parse(this.store['createdAt']))
-                this.store['createdAt'] = new Date().toISOString();
-            this.store['modifiedAt'] = new Date().toISOString();
             // console.log(this.store)
             if (ttl) {
                 this.ttlStore[k] = {
@@ -136,6 +133,26 @@ class Mem {
                 }
                 cleanup.add(idxKey);
             }
+            let createdAtSet = this.indexes[dbutils.keyFromParts(dbutils.createdAtPrefix, namespace)];
+            if (!createdAtSet) {
+                createdAtSet = new Set();
+                this.indexes[dbutils.keyFromParts(dbutils.createdAtPrefix, namespace)] = createdAtSet;
+                this.store['createdAt'] = new Date().toISOString();
+                createdAtSet.add(key);
+            }
+            else {
+                if (!this.indexes[dbutils.keyFromParts(dbutils.createdAtPrefix, namespace)].has(key)) {
+                    createdAtSet.add(key);
+                    this.store['createdAt'] = new Date().toISOString();
+                }
+            }
+            let modifiedAtSet = this.indexes[dbutils.keyFromParts(dbutils.modifiedAtPrefix, namespace)];
+            if (!modifiedAtSet) {
+                modifiedAtSet = new Set();
+                this.indexes[dbutils.keyFromParts(dbutils.modifiedAtPrefix, namespace)] = modifiedAtSet;
+            }
+            modifiedAtSet.add(key);
+            this.store['modifiedAt'] = new Date().toISOString();
         });
     }
     delete(namespace, key) {
@@ -148,6 +165,8 @@ class Mem {
             for (const dbKey of dbKeys || []) {
                 this.indexes[dbKey] && this.indexes[dbKey].delete(key);
             }
+            this.indexes[dbutils.keyFromParts(dbutils.createdAtPrefix, namespace)].delete(key);
+            this.indexes[dbutils.keyFromParts(dbutils.modifiedAtPrefix, namespace)].delete(key);
             delete this.cleanup[idxKey];
             delete this.ttlStore[k];
         });

package/dist/db/mongo.js

@@ -40,16 +40,9 @@ class Mongo {
     }
     init() {
         return __awaiter(this, void 0, void 0, function* () {
-            try {
-                if (!this.options.url) {
-                    throw Error('Please specify a db url');
-                }
-                this.client = new mongodb_1.MongoClient(this.options.url);
-                yield this.client.connect();
-            }
-            catch (err) {
-                console.error(`error connecting to ${this.options.type} db: ${err}`);
-            }
+            const dbUrl = this.options.url;
+            this.client = new mongodb_1.MongoClient(dbUrl);
+            yield this.client.connect();
             this.db = this.client.db();
             this.collection = this.db.collection('jacksonStore');
             yield this.collection.createIndex({ indexes: 1 });

package/dist/db/redis.js

@@ -79,16 +79,13 @@ class Redis {
             let count = 0;
             take += skip;
             try {
-                for (var _b = __asyncValues(this.client.scanIterator({
-                    MATCH: dbutils.keyFromParts(namespace, '*'),
-                    COUNT: Math.min(take, 1000),
-                })), _c; _c = yield _b.next(), !_c.done;) {
-                    const key = _c.value;
+                for (var _b = __asyncValues(this.client.zScanIterator(dbutils.keyFromParts(dbutils.createdAtPrefix, namespace), Math.min(take, 1000))), _c; _c = yield _b.next(), !_c.done;) {
+                    const { score, value } = _c.value;
                     if (count >= take) {
                         break;
                     }
                     if (count >= skip) {
-                        keyArray.push(key);
+                        keyArray.push(dbutils.keyFromParts(namespace, value));
                     }
                     count++;
                 }
@@ -137,6 +134,18 @@ class Redis {
                 tx = tx.sAdd(dbutils.keyFromParts(dbutils.indexPrefix, idxKey), key);
                 tx = tx.sAdd(dbutils.keyFromParts(dbutils.indexPrefix, k), idxKey);
             }
+            const timestamp = Number(Date.now());
+            //Converting Timestamp in negative so that when we get the value, it will be found in reverse order (descending order).
+            const negativeTimestamp = -Math.abs(timestamp);
+            const value = yield this.client.get(k);
+            if (!value) {
+                tx = tx.zAdd(dbutils.keyFromParts(dbutils.createdAtPrefix, namespace), [
+                    { score: negativeTimestamp, value: key },
+                ]);
+            }
+            tx = tx.zAdd(dbutils.keyFromParts(dbutils.modifiedAtPrefix, namespace), [
+                { score: negativeTimestamp, value: key },
+            ]);
             yield tx.exec();
         });
     }
@@ -151,6 +160,8 @@ class Redis {
             for (const dbKey of dbKeys || []) {
                 tx.sRem(dbutils.keyFromParts(dbutils.indexPrefix, dbKey), key);
             }
+            tx.ZREM(dbutils.keyFromParts(dbutils.createdAtPrefix, namespace), key);
+            tx.ZREM(dbutils.keyFromParts(dbutils.modifiedAtPrefix, namespace), key);
             tx.del(idxKey);
             return yield tx.exec();
         });

package/dist/db/sql/sql.d.ts

@@ -1,7 +1,7 @@
 import { DatabaseDriver, DatabaseOption, Index, Encrypted } from '../../typings';
 declare class Sql implements DatabaseDriver {
     private options;
-    private connection;
+    private dataSource;
     private storeRepository;
     private indexRepository;
     private ttlRepository;

package/dist/db/sql/sql.js

@@ -47,8 +47,8 @@ class Sql {
         return __awaiter(this, void 0, void 0, function* () {
             while (true) {
                 try {
-                    this.connection = yield (0, typeorm_1.createConnection)({
-                        name: this.options.type + Math.floor(Math.random() * 100000),
+                    this.dataSource = new typeorm_1.DataSource({
+                        // name: this.options.type! + Math.floor(Math.random() * 100000),
                         type: this.options.type,
                         url: this.options.url,
                         synchronize: true,
@@ -56,6 +56,7 @@ class Sql {
                         logging: ['error'],
                         entities: [JacksonStore_1.JacksonStore, JacksonIndex_1.JacksonIndex, JacksonTTL_1.JacksonTTL],
                     });
+                    yield this.dataSource.initialize();
                     break;
                 }
                 catch (err) {
@@ -64,9 +65,9 @@ class Sql {
                     continue;
                 }
             }
-            this.storeRepository = this.connection.getRepository(JacksonStore_1.JacksonStore);
-            this.indexRepository = this.connection.getRepository(JacksonIndex_1.JacksonIndex);
-            this.ttlRepository = this.connection.getRepository(JacksonTTL_1.JacksonTTL);
+            this.storeRepository = this.dataSource.getRepository(JacksonStore_1.JacksonStore);
+            this.indexRepository = this.dataSource.getRepository(JacksonIndex_1.JacksonIndex);
+            this.ttlRepository = this.dataSource.getRepository(JacksonTTL_1.JacksonTTL);
             if (this.options.ttl && this.options.cleanupLimit) {
                 this.ttlCleanup = () => __awaiter(this, void 0, void 0, function* () {
                     const now = Date.now();
@@ -99,7 +100,7 @@ class Sql {
     }
     get(namespace, key) {
         return __awaiter(this, void 0, void 0, function* () {
-            const res = yield this.storeRepository.findOne({
+            const res = yield this.storeRepository.findOneBy({
                 key: dbutils.key(namespace, key),
             });
             if (res && res.value) {
@@ -133,7 +134,7 @@ class Sql {
     }
     getByIndex(namespace, idx) {
         return __awaiter(this, void 0, void 0, function* () {
-            const res = yield this.indexRepository.find({
+            const res = yield this.indexRepository.findBy({
                 key: dbutils.keyForIndex(namespace, idx),
             });
             const ret = [];
@@ -151,7 +152,7 @@ class Sql {
     }
     put(namespace, key, val, ttl = 0, ...indexes) {
         return __awaiter(this, void 0, void 0, function* () {
-            yield this.connection.transaction((transactionalEntityManager) => __awaiter(this, void 0, void 0, function* () {
+            yield this.dataSource.transaction((transactionalEntityManager) => __awaiter(this, void 0, void 0, function* () {
                 const dbKey = dbutils.key(namespace, key);
                 const store = new JacksonStore_1.JacksonStore();
                 store.key = dbKey;
@@ -169,7 +170,7 @@ class Sql {
                 // no ttl support for secondary indexes
                 for (const idx of indexes || []) {
                     const key = dbutils.keyForIndex(namespace, idx);
-                    const rec = yield this.indexRepository.findOne({
+                    const rec = yield this.indexRepository.findOneBy({
                         key,
                         storeKey: store.key,
                     });

package/dist/db/utils.d.ts

@@ -6,3 +6,5 @@ export declare const keyFromParts: (...parts: string[]) => string;
 export declare const sleep: (ms: number) => Promise<void>;
 export declare function isNumeric(num: any): boolean;
 export declare const indexPrefix = "_index";
+export declare const createdAtPrefix = "_createdAt";
+export declare const modifiedAtPrefix = "_modifiedAt";

package/dist/db/utils.js

@@ -3,7 +3,7 @@ var __importDefault = (this && this.__importDefault) || function (mod) {
     return (mod && mod.__esModule) ? mod : { "default": mod };
 };
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.indexPrefix = exports.isNumeric = exports.sleep = exports.keyFromParts = exports.keyDigest = exports.keyForIndex = exports.key = void 0;
+exports.modifiedAtPrefix = exports.createdAtPrefix = exports.indexPrefix = exports.isNumeric = exports.sleep = exports.keyFromParts = exports.keyDigest = exports.keyForIndex = exports.key = void 0;
 const ripemd160_1 = __importDefault(require("ripemd160"));
 const key = (namespace, k) => {
     return namespace + ':' + k;
@@ -31,3 +31,5 @@ function isNumeric(num) {
 }
 exports.isNumeric = isNumeric;
 exports.indexPrefix = '_index';
+exports.createdAtPrefix = '_createdAt';
+exports.modifiedAtPrefix = '_modifiedAt';

package/dist/index.d.ts

@@ -1,11 +1,15 @@
+import { AdminController } from './controller/admin';
 import { APIController } from './controller/api';
 import { OAuthController } from './controller/oauth';
-import { AdminController } from './controller/admin';
+import { HealthCheckController } from './controller/health-check';
+import { LogoutController } from './controller/logout';
 import { JacksonOption } from './typings';
 export declare const controllers: (opts: JacksonOption) => Promise<{
     apiController: APIController;
     oauthController: OAuthController;
     adminController: AdminController;
+    logoutController: LogoutController;
+    healthCheckController: HealthCheckController;
 }>;
 export default controllers;
 export * from './typings';

package/dist/index.js

@@ -27,12 +27,14 @@ var __importDefault = (this && this.__importDefault) || function (mod) {
 };
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.controllers = void 0;
+const admin_1 = require("./controller/admin");
 const api_1 = require("./controller/api");
 const oauth_1 = require("./controller/oauth");
-const admin_1 = require("./controller/admin");
+const health_check_1 = require("./controller/health-check");
+const logout_1 = require("./controller/logout");
 const db_1 = __importDefault(require("./db/db"));
-const read_config_1 = __importDefault(require("./read-config"));
 const defaultDb_1 = __importDefault(require("./db/defaultDb"));
+const read_config_1 = __importDefault(require("./read-config"));
 const defaultOpts = (opts) => {
     const newOpts = Object.assign({}, opts);
     if (!newOpts.externalUrl) {
@@ -56,8 +58,11 @@ const controllers = (opts) => __awaiter(void 0, void 0, void 0, function* () {
     const sessionStore = db.store('oauth:session', opts.db.ttl);
     const codeStore = db.store('oauth:code', opts.db.ttl);
     const tokenStore = db.store('oauth:token', opts.db.ttl);
+    const healthCheckStore = db.store('_health:check');
     const apiController = new api_1.APIController({ configStore });
     const adminController = new admin_1.AdminController({ configStore });
+    const healthCheckController = new health_check_1.HealthCheckController({ healthCheckStore });
+    yield healthCheckController.init();
     const oauthController = new oauth_1.OAuthController({
         configStore,
         sessionStore,
@@ -65,6 +70,11 @@ const controllers = (opts) => __awaiter(void 0, void 0, void 0, function* () {
         tokenStore,
         opts,
     });
+    const logoutController = new logout_1.LogoutController({
+        configStore,
+        sessionStore,
+        opts,
+    });
     // write pre-loaded config if present
     if (opts.preLoadedConfig && opts.preLoadedConfig.length > 0) {
         const configs = yield (0, read_config_1.default)(opts.preLoadedConfig);
@@ -79,6 +89,8 @@ const controllers = (opts) => __awaiter(void 0, void 0, void 0, function* () {
         apiController,
         oauthController,
         adminController,
+        logoutController,
+        healthCheckController,
     };
 });
 exports.controllers = controllers;