@cifra-x/nest-keycloak 0.0.2

package/dist/src/interface/keycloak-connect-options-factory.interface.js

@@ -0,0 +1,2 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });

package/dist/src/interface/keycloak-connect-options.interface.d.ts

@@ -0,0 +1,121 @@
+import { LogLevel } from '@nestjs/common';
+import { TokenValidation } from '../constants';
+import { PolicyEnforcementMode } from '../constants';
+import { RoleMerge } from '../constants';
+/**
+ * Keycloak Connect options.
+ * @see {@link https://github.com/keycloak/keycloak-nodejs-connect/blob/f8e011aea5/middleware/auth-utils/config.js}
+ */
+export interface KeycloakConnectOptions extends NestKeycloakConfig {
+    /**
+     * Realm ID.
+     */
+    realm?: string;
+    /**
+     * Client/Application ID.
+     */
+    resource?: string;
+    /**
+     * Client/Application ID.
+     * @see {KeycloakConnectOptions#resource}
+     */
+    clientId?: string;
+    /**
+     * Client/Application secret.
+     */
+    credentials?: KeycloakCredentials;
+    /**
+     * Client/Application secret.
+     * @see {KeycloakCredentials#secret}
+     */
+    secret?: string;
+    /**
+     * If this is a public application or confidential.
+     * @see {KeycloakConnectOptions#public}
+     */
+    public?: boolean;
+    /**
+     * Authentication server URL.
+     * @see {KeycloakConnectOptions#authServerUrl}
+     */
+    authServerUrl: string;
+    /**
+     * How many minutes before retrying getting the keys.
+     * @see {KeycloakConnectOptions#minTimeBetweenJwksRequests}
+     */
+    minTimeBetweenJwksRequests?: number;
+    /**
+     * If this is a Bearer Only application.
+     * @see {KeycloakConnectOptions#bearerOnly}
+     */
+    bearerOnly?: boolean;
+    /**
+     * Formatted public-key.
+     * @see {KeycloakConnectOptions#realmPublicKey}
+     */
+    realmPublicKey?: string;
+    /**
+     * Verify token audience.
+     * @see {KeycloakConnectOptions#verifyTokenAudience}
+     */
+    verifyTokenAudience?: boolean;
+}
+/**
+ * Multi tenant configuration.
+ */
+export interface MultiTenantOptions {
+    /**
+     * Option to always resolve the realm and secret. Disabled by default.
+     */
+    resolveAlways?: boolean;
+    /**
+     * The realm resolver function.
+     */
+    realmResolver: (request: any) => Promise<string> | string;
+    /**
+     * The realm secret resolver function.
+     */
+    realmSecretResolver?: (realm: string, request?: any) => Promise<string> | string;
+    /**
+     * The realm auth server url resolver function.
+     */
+    realmAuthServerUrlResolver?: (realm: string, request?: any) => Promise<string> | string;
+}
+/**
+ * Library only configuration.
+ */
+export interface NestKeycloakConfig {
+    /**
+     * Cookie key.
+     */
+    cookieKey?: string;
+    /**
+     * Log level.
+     */
+    logLevels?: LogLevel[];
+    /**
+     * Sets the policy enforcement mode for this adapter, defaults to {@link PolicyEnforcementMode.PERMISSIVE}.
+     */
+    policyEnforcement?: PolicyEnforcementMode;
+    /**
+     * Sets the token validation method, defaults to {@link TokenValidation.ONLINE}.
+     */
+    tokenValidation?: TokenValidation;
+    /**
+     * Multi tenant options.
+     */
+    multiTenant?: MultiTenantOptions;
+    /**
+     * Role merging options.
+     */
+    roleMerge?: RoleMerge;
+}
+/**
+ * Represents Keycloak credentials.
+ */
+export interface KeycloakCredentials {
+    /**
+     * Client/Application secret.
+     */
+    secret: string;
+}

package/dist/src/interface/keycloak-connect-options.interface.js

@@ -0,0 +1,2 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });

package/dist/src/interface/role-decorator-options.interface.d.ts

@@ -0,0 +1,11 @@
+import { RoleMatchingMode } from '../constants';
+export interface RoleDecoratorOptionsInterface {
+    /**
+     * The roles to match at the application/client, prefix any realm-level roles with "realm:" (i.e realm:admin)
+     */
+    roles: string[];
+    /**
+     * Role matching mode, defaults to {@link RoleMatchingMode.ANY}
+     */
+    mode?: RoleMatchingMode;
+}

package/dist/src/interface/role-decorator-options.interface.js

@@ -0,0 +1,2 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });

package/dist/src/keycloak-connect.module.d.ts

@@ -0,0 +1,37 @@
+import { DynamicModule, Logger } from '@nestjs/common';
+import { KeycloakConnectModuleAsyncOptions } from './interface/keycloak-connect-module-async-options.interface';
+import { KeycloakConnectOptions } from './interface/keycloak-connect-options.interface';
+export * from './constants';
+export * from './decorators/authenticated-user.decorator';
+export * from './decorators/enforcer-options.decorator';
+export * from './decorators/public.decorator';
+export * from './decorators/resource.decorator';
+export * from './decorators/roles.decorator';
+export * from './decorators/scopes.decorator';
+export * from './guards/auth.guard';
+export * from './guards/resource.guard';
+export * from './guards/role.guard';
+export * from './interface/keycloak-connect-module-async-options.interface';
+export * from './interface/keycloak-connect-options-factory.interface';
+export * from './interface/keycloak-connect-options.interface';
+export * from './interface/role-decorator-options.interface';
+export * from './services/keycloak-multitenant.service';
+export declare class KeycloakConnectModule {
+    static logger: Logger;
+    /**
+     * Register the `KeycloakConnect` module.
+     * @param opts {@link KeycloakConnectOptions} object.
+     * @returns
+     */
+    static register(opts: KeycloakConnectOptions): DynamicModule;
+    static registerAsync(opts: KeycloakConnectModuleAsyncOptions): DynamicModule;
+    private static createAsyncProviders;
+    private static createAsyncOptionsProvider;
+}
+export { KEYCLOAK_COOKIE_DEFAULT } from './constants/keycloak-module.constants';
+export { KEYCLOAK_LOGGER } from './constants/keycloak-module.constants';
+export { KEYCLOAK_MULTITENANT_SERVICE } from './constants/keycloak-module.constants';
+export { KEYCLOAK_INSTANCE } from './constants/keycloak-module.constants';
+export { KEYCLOAK_CONNECT_OPTIONS } from './constants/keycloak-module.constants';
+export { PolicyEnforcementMode } from './constants/policy-enforcement-mode.enum';
+export { RoleMerge } from './constants/role-merge.enum';

package/dist/src/keycloak-connect.module.js

@@ -0,0 +1,142 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __exportStar = (this && this.__exportStar) || function(m, exports) {
+    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
+};
+var KeycloakConnectModule_1;
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.RoleMerge = exports.PolicyEnforcementMode = exports.KEYCLOAK_CONNECT_OPTIONS = exports.KEYCLOAK_INSTANCE = exports.KEYCLOAK_MULTITENANT_SERVICE = exports.KEYCLOAK_LOGGER = exports.KEYCLOAK_COOKIE_DEFAULT = exports.KeycloakConnectModule = void 0;
+const common_1 = require("@nestjs/common");
+const keycloak_multitenant_service_1 = require("./services/keycloak-multitenant.service");
+const core_1 = require("@nestjs/core");
+const constants_1 = require("./constants");
+const logger_provider_1 = require("./providers/logger.provider");
+const async_class_provider_type_guard_1 = require("./async-class-provider.type-guard");
+const keycloak_provider_1 = require("./providers/keycloak.provider");
+__exportStar(require("./constants"), exports);
+__exportStar(require("./decorators/authenticated-user.decorator"), exports);
+__exportStar(require("./decorators/enforcer-options.decorator"), exports);
+__exportStar(require("./decorators/public.decorator"), exports);
+__exportStar(require("./decorators/resource.decorator"), exports);
+__exportStar(require("./decorators/roles.decorator"), exports);
+__exportStar(require("./decorators/scopes.decorator"), exports);
+__exportStar(require("./guards/auth.guard"), exports);
+__exportStar(require("./guards/resource.guard"), exports);
+__exportStar(require("./guards/role.guard"), exports);
+__exportStar(require("./interface/keycloak-connect-module-async-options.interface"), exports);
+__exportStar(require("./interface/keycloak-connect-options-factory.interface"), exports);
+__exportStar(require("./interface/keycloak-connect-options.interface"), exports);
+__exportStar(require("./interface/role-decorator-options.interface"), exports);
+__exportStar(require("./services/keycloak-multitenant.service"), exports);
+let KeycloakConnectModule = KeycloakConnectModule_1 = class KeycloakConnectModule {
+    /**
+     * Register the `KeycloakConnect` module.
+     * @param opts {@link KeycloakConnectOptions} object.
+     * @returns
+     */
+    static register(opts) {
+        const keycloakConnectProviders = [
+            {
+                provide: constants_1.KEYCLOAK_CONNECT_OPTIONS,
+                useValue: opts,
+            },
+            logger_provider_1.loggerProvider,
+            keycloak_provider_1.keycloakProvider,
+            keycloak_multitenant_service_1.KeycloakMultiTenantService,
+            {
+                provide: constants_1.KEYCLOAK_MULTITENANT_SERVICE,
+                useClass: keycloak_multitenant_service_1.KeycloakMultiTenantService,
+            },
+            core_1.Reflector,
+        ];
+        return {
+            module: KeycloakConnectModule_1,
+            providers: keycloakConnectProviders,
+            exports: keycloakConnectProviders,
+        };
+    }
+    static registerAsync(opts) {
+        const optsProvider = this.createAsyncProviders(opts);
+        return {
+            module: KeycloakConnectModule_1,
+            imports: opts.imports || [],
+            providers: optsProvider,
+            exports: optsProvider,
+        };
+    }
+    static createAsyncProviders(options) {
+        const providers = [
+            this.createAsyncOptionsProvider(options),
+            logger_provider_1.loggerProvider,
+            keycloak_provider_1.keycloakProvider,
+            keycloak_multitenant_service_1.KeycloakMultiTenantService,
+            {
+                provide: constants_1.KEYCLOAK_MULTITENANT_SERVICE,
+                useClass: keycloak_multitenant_service_1.KeycloakMultiTenantService,
+            },
+            core_1.Reflector,
+        ];
+        if (options.useExisting || options.useFactory) {
+            return providers;
+        }
+        if (options.useClass) {
+            providers.push({
+                provide: options.useClass,
+                useClass: options.useClass,
+            });
+        }
+        return providers;
+    }
+    static createAsyncOptionsProvider(options) {
+        if (options.useFactory) {
+            return {
+                provide: constants_1.KEYCLOAK_CONNECT_OPTIONS,
+                useFactory: options.useFactory,
+                inject: options.inject || [],
+            };
+        }
+        if (!(0, async_class_provider_type_guard_1.hasAsyncClassProvider)(options)) {
+            throw new Error('Invalid configuration. Must provide either useExisting or useClass.');
+        }
+        return {
+            provide: constants_1.KEYCLOAK_CONNECT_OPTIONS,
+            useFactory: async (optionsFactory) => await optionsFactory.createKeycloakConnectOptions(),
+            inject: [options.useExisting || options.useClass],
+        };
+    }
+};
+exports.KeycloakConnectModule = KeycloakConnectModule;
+KeycloakConnectModule.logger = new common_1.Logger(KeycloakConnectModule_1.name);
+exports.KeycloakConnectModule = KeycloakConnectModule = KeycloakConnectModule_1 = __decorate([
+    (0, common_1.Module)({})
+], KeycloakConnectModule);
+var keycloak_module_constants_1 = require("./constants/keycloak-module.constants");
+Object.defineProperty(exports, "KEYCLOAK_COOKIE_DEFAULT", { enumerable: true, get: function () { return keycloak_module_constants_1.KEYCLOAK_COOKIE_DEFAULT; } });
+var keycloak_module_constants_2 = require("./constants/keycloak-module.constants");
+Object.defineProperty(exports, "KEYCLOAK_LOGGER", { enumerable: true, get: function () { return keycloak_module_constants_2.KEYCLOAK_LOGGER; } });
+var keycloak_module_constants_3 = require("./constants/keycloak-module.constants");
+Object.defineProperty(exports, "KEYCLOAK_MULTITENANT_SERVICE", { enumerable: true, get: function () { return keycloak_module_constants_3.KEYCLOAK_MULTITENANT_SERVICE; } });
+var keycloak_module_constants_4 = require("./constants/keycloak-module.constants");
+Object.defineProperty(exports, "KEYCLOAK_INSTANCE", { enumerable: true, get: function () { return keycloak_module_constants_4.KEYCLOAK_INSTANCE; } });
+var keycloak_module_constants_5 = require("./constants/keycloak-module.constants");
+Object.defineProperty(exports, "KEYCLOAK_CONNECT_OPTIONS", { enumerable: true, get: function () { return keycloak_module_constants_5.KEYCLOAK_CONNECT_OPTIONS; } });
+var policy_enforcement_mode_enum_1 = require("./constants/policy-enforcement-mode.enum");
+Object.defineProperty(exports, "PolicyEnforcementMode", { enumerable: true, get: function () { return policy_enforcement_mode_enum_1.PolicyEnforcementMode; } });
+var role_merge_enum_1 = require("./constants/role-merge.enum");
+Object.defineProperty(exports, "RoleMerge", { enumerable: true, get: function () { return role_merge_enum_1.RoleMerge; } });

package/dist/src/providers/keycloak.provider.d.ts

@@ -0,0 +1,2 @@
+import { Provider } from '@nestjs/common';
+export declare const keycloakProvider: Provider;

package/dist/src/providers/keycloak.provider.js

@@ -0,0 +1,25 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.keycloakProvider = void 0;
+const keycloak_connect_1 = __importDefault(require("keycloak-connect"));
+const constants_1 = require("../constants");
+const keycloak_connect_module_1 = require("../keycloak-connect.module");
+exports.keycloakProvider = {
+    provide: constants_1.KEYCLOAK_INSTANCE,
+    useFactory: (opts) => {
+        const keycloakOpts = opts;
+        const keycloak = new keycloak_connect_1.default({}, keycloakOpts);
+        if (opts.tokenValidation === constants_1.TokenValidation.NONE) {
+            keycloak_connect_module_1.KeycloakConnectModule.logger.warn(`Token validation is disabled, please only do this on development/special use-cases.`);
+        }
+        // Access denied is called, add a flag to request so our resource guard knows
+        keycloak.accessDenied = (req, _) => {
+            req.resourceDenied = true;
+        };
+        return keycloak;
+    },
+    inject: [constants_1.KEYCLOAK_CONNECT_OPTIONS],
+};

package/dist/src/providers/logger.provider.d.ts

@@ -0,0 +1,2 @@
+import { Provider } from '@nestjs/common';
+export declare const loggerProvider: Provider;

package/dist/src/providers/logger.provider.js

@@ -0,0 +1,20 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.loggerProvider = void 0;
+const common_1 = require("@nestjs/common");
+const keycloak_connect_1 = __importDefault(require("keycloak-connect"));
+const constants_1 = require("../constants");
+exports.loggerProvider = {
+    provide: constants_1.KEYCLOAK_LOGGER,
+    useFactory: (opts) => {
+        const loggerOptions = {};
+        if (opts.logLevels) {
+            loggerOptions.logLevels = opts.logLevels;
+        }
+        return new common_1.Logger(keycloak_connect_1.default.name, loggerOptions);
+    },
+    inject: [constants_1.KEYCLOAK_CONNECT_OPTIONS],
+};

package/dist/src/services/keycloak-multitenant.service.d.ts

@@ -0,0 +1,23 @@
+import KeycloakConnect from 'keycloak-connect';
+import { KeycloakConnectOptions } from '../interface/keycloak-connect-options.interface';
+/**
+ * Stores all keycloak instances when multi tenant option is defined.
+ */
+export declare class KeycloakMultiTenantService {
+    private keycloakOpts;
+    private instances;
+    constructor(keycloakOpts: KeycloakConnectOptions);
+    /**
+     * Clears the cached Keycloak instances.
+     */
+    clear(): void;
+    /**
+     * Retrieves a keycloak instance based on the realm provided.
+     * @param realm the realm to retrieve from
+     * @param request the request instance, defaults to undefined
+     * @returns the multi tenant keycloak instance
+     */
+    get(realm: string, request?: any): Promise<KeycloakConnect.Keycloak>;
+    resolveAuthServerUrl(realm: string, request?: any): Promise<string>;
+    resolveSecret(realm: string, request?: any): Promise<string>;
+}

package/dist/src/services/keycloak-multitenant.service.js

@@ -0,0 +1,139 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+var __param = (this && this.__param) || function (paramIndex, decorator) {
+    return function (target, key) { decorator(target, key, paramIndex); }
+};
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.KeycloakMultiTenantService = void 0;
+const common_1 = require("@nestjs/common");
+const keycloak_connect_1 = __importDefault(require("keycloak-connect"));
+const constants_1 = require("../constants");
+/**
+ * Stores all keycloak instances when multi tenant option is defined.
+ */
+let KeycloakMultiTenantService = class KeycloakMultiTenantService {
+    constructor(keycloakOpts) {
+        this.keycloakOpts = keycloakOpts;
+        this.instances = new Map();
+    }
+    /**
+     * Clears the cached Keycloak instances.
+     */
+    clear() {
+        this.instances.clear();
+    }
+    /**
+     * Retrieves a keycloak instance based on the realm provided.
+     * @param realm the realm to retrieve from
+     * @param request the request instance, defaults to undefined
+     * @returns the multi tenant keycloak instance
+     */
+    async get(realm, request = undefined) {
+        if (typeof this.keycloakOpts === 'string') {
+            throw new Error('Keycloak configuration is a configuration path. This should not happen after module load.');
+        }
+        if (this.keycloakOpts.multiTenant === null ||
+            this.keycloakOpts.multiTenant === undefined) {
+            throw new Error('Multi tenant is not defined yet multi tenant service is being called.');
+        }
+        const authServerUrl = await this.resolveAuthServerUrl(realm, request);
+        const secret = await this.resolveSecret(realm, request);
+        // Check if existing
+        if (this.instances.has(realm)) {
+            // If resolve always is enabled, resolve everything again
+            if (this.keycloakOpts.multiTenant.resolveAlways) {
+                const keycloak = this.instances.get(realm);
+                keycloak.config.authServerUrl = authServerUrl;
+                keycloak.config.secret = secret;
+                keycloak.grantManager.secret = secret;
+                // Save instance
+                this.instances.set(realm, keycloak);
+                return keycloak;
+            }
+            // Otherwise return the instance
+            const instanse = this.instances.get(realm);
+            if (!instanse) {
+                throw new Error('[KeycloakMultiTenantService] -> get -> No instanse');
+            }
+            return instanse;
+        }
+        else {
+            // TODO: Repeating code from  provider, will need to rework this in 2.0
+            // Override realm, secret, and authServerUrl
+            const keycloakOpts = Object.assign(this.keycloakOpts, {
+                authServerUrl,
+                realm,
+                secret,
+            });
+            const keycloak = new keycloak_connect_1.default({}, keycloakOpts);
+            // The most important part
+            keycloak.accessDenied = (req, res, next) => {
+                req.resourceDenied = true;
+                next();
+            };
+            // Save instance
+            this.instances.set(realm, keycloak);
+            return keycloak;
+        }
+    }
+    async resolveAuthServerUrl(realm, request = undefined) {
+        if (typeof this.keycloakOpts === 'string') {
+            throw new Error('Keycloak configuration is a configuration path. This should not happen after module load.');
+        }
+        if (this.keycloakOpts.multiTenant === null ||
+            this.keycloakOpts.multiTenant === undefined) {
+            throw new Error('Multi tenant is not defined yet multi tenant service is being called.');
+        }
+        // If no realm auth server url resolver is defined, return defaults
+        if (!this.keycloakOpts.multiTenant.realmAuthServerUrlResolver) {
+            return this.keycloakOpts.authServerUrl;
+        }
+        // Resolve realm authServerUrl
+        const resolvedAuthServerUrl = this.keycloakOpts.multiTenant.realmAuthServerUrlResolver(realm, request);
+        const authServerUrl = resolvedAuthServerUrl ||
+            resolvedAuthServerUrl instanceof Promise
+            ? await resolvedAuthServerUrl
+            : resolvedAuthServerUrl;
+        // Override auth server url
+        // Order of priority: resolved realm auth server url > provided auth server url
+        return authServerUrl || this.keycloakOpts.authServerUrl;
+    }
+    async resolveSecret(realm, request = undefined) {
+        if (typeof this.keycloakOpts === 'string') {
+            throw new Error('Keycloak configuration is a configuration path. This should not happen after module load.');
+        }
+        if (this.keycloakOpts.multiTenant === null ||
+            this.keycloakOpts.multiTenant === undefined) {
+            throw new Error('Multi tenant is not defined yet multi tenant service is being called.');
+        }
+        // If no realm secret resolver is defined, return defaults
+        if (!this.keycloakOpts.multiTenant.realmSecretResolver) {
+            return this.keycloakOpts.secret;
+        }
+        // Resolve realm secret
+        const resolvedRealmSecret = this.keycloakOpts.multiTenant.realmSecretResolver(realm, request);
+        const realmSecret = resolvedRealmSecret || resolvedRealmSecret instanceof Promise
+            ? await resolvedRealmSecret
+            : resolvedRealmSecret;
+        // Override secret
+        // Order of priority: resolved realm secret > default global secret
+        return realmSecret || this.keycloakOpts.secret;
+    }
+};
+exports.KeycloakMultiTenantService = KeycloakMultiTenantService;
+exports.KeycloakMultiTenantService = KeycloakMultiTenantService = __decorate([
+    (0, common_1.Injectable)(),
+    __param(0, (0, common_1.Inject)(constants_1.KEYCLOAK_CONNECT_OPTIONS)),
+    __metadata("design:paramtypes", [Object])
+], KeycloakMultiTenantService);