@codiac.io/codiac-cli 1.2.175 → 1.2.202

package/dist/apis/codiac-relay/common/endpoint-spec.js

@@ -0,0 +1,28 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.endpointSpec = void 0;
+// export interface IEndpointSpec {
+//   entityType: typeRef;  // this requires that TRequest extends Object.  It prob should.  Not sure where that breaks down - what is the scenario that we are passing in a contract that doesnt extend Object? 
+//   httpMethod: httpRestVerb;
+//   route: string;
+//   serializerMap?: stringDictionary;
+// }
+class endpointSpec {
+    /**
+     *
+     * @param entityType
+     * @param httpMethod
+     * @param route
+     * @param baseUrl Overrides the api base url.
+     * @param serializerMap
+     */
+    constructor(entityType, httpMethod, route, baseUrl, serializerMap) {
+        this.entityType = entityType;
+        this.httpMethod = httpMethod;
+        this.route = route;
+        this.baseUrl = baseUrl;
+        this.serializerMap = serializerMap;
+    }
+}
+exports.endpointSpec = endpointSpec;
+//# sourceMappingURL=endpoint-spec.js.map

package/dist/apis/codiac-relay/common/security/api-auth-methods-legacy.d.ts

@@ -0,0 +1,87 @@
+import { AxiosRequestConfig } from "axios";
+import * as contracts from "@codiac.io/codiac-common/contracts";
+import { classDef, httpRestVerb, IBetterLogger } from "@codiac.io/codiac-common";
+import { TenantUser, AuthTenant } from "@codiac.io/codiac-common/security";
+import { ApiClientBase } from "../api-client-base";
+import { IAuthClient } from "./i-auth-client";
+import { AuthConstants } from "./auth-constants";
+import { TokenHolder } from "./token-holder";
+/** Contains hard-coded Codiac Auth methods.
+ * It is considered legacy because it is to be replaced by methods generated from an openApi spec. */
+export declare class ApiAuthMethodsLegacy implements IAuthClient {
+    private core;
+    private logger;
+    /** Hardcoded to match the current setting on the server.
+     * TODO: Get this from a config that is copied from the server project to the client project on build.
+     */
+    static TOKEN_HEADER_PARAM: string;
+    constructor(core: ApiClientBase, logger: IBetterLogger);
+    /** The name of the http request header that declares the authentication token for the request.
+     *  NOTE: This gets set to DEFAULT_TOKEN_HEADER_NAME in the ctor of ApiClientBase,
+     *        so child classes can override it in their own ctor AFTER calling super(). */
+    protected tokenHeaderName: string;
+    protected authConstants: AuthConstants;
+    /** Logs in remotely with the given credentials.
+     * Returns a valid token in the headers of the response
+     * and the user info in the body of the response.
+     * NOTE: If successful, keeps the returned auth token in scope for this client instance.
+     * @param login The human readable unique identifier for the user.
+     * @param password the secret held for this particular user.
+     * @param tenantCode (optional) Unique identifier of the tenant to activate with this authentication.
+     */
+    authenticate(login: string, password: string, tenantCode?: string): Promise<contracts.SingleResult<TokenHolder>>;
+    /** Traps the errors thrown by axios on non-200 statuses. */
+    protected executeAxiosRequest<TRequest, TResponse extends contracts.Result>(verb: httpRestVerb, responseType: classDef<TResponse>, url: string, request?: TRequest, options?: AxiosRequestConfig): Promise<{
+        data: TResponse;
+        headers?: any;
+        status: number;
+        statusText: string;
+    }>;
+    /** Replaces the user in the output with a TokenHolder so that they client consumer has access to the token.
+     * throws if the axios response does not contain a data property. */
+    private convertToTokenHolderResult;
+    /** Replaces the user in the output with a TokenHolder so that they client consumer has access to the token.
+     * throws if the axios response does not contain a data property.
+     * @deprecated Use `convertToTokenHolderResult()` instead.*/
+    private convertToTokenHolderResponse;
+    /** Determines whether the given token is expired.
+     * @param throwOnError throws any encountered errors, including token parsing errors.
+     */
+    isExpired(token: string, throwOnError?: boolean): boolean;
+    extractTokenExpiration(token: string): Date | undefined;
+    /** Provides the ability to extend an existing token.
+     *  Returns failure for invalid or revoked tokens.
+     *  Returns any errors encountered refreshing.
+     *  NOTE: If successful, keeps the returned auth token in scope for this client instance.
+     * @param currentToken The JWT token returned in a prior request.
+     * */
+    refreshToken(currentToken: string): Promise<contracts.SingleResult<TokenHolder>>;
+    /** Retrieves the full account info for the current user (minus any passwords),
+     *  including all tenant profiles.
+     *  Returns failure for invalid or revoked tokens.
+     *  Returns any errors encountered refreshing.
+     *  NOTE: keeps the returned auth token in scope for this client instance.
+     * @param currentToken (optional if the client instance has already authenticated) The JWT token returned in a prior request.
+     */
+    whoAmI(currentToken?: string): Promise<contracts.SingleResult<TenantUser>>;
+    /** Provides the ability to extend an existing token.
+     *  Returns failure for invalid or revoked tokens.
+     *  NOTE: If successful, keeps the returned auth token in scope for this client instance.
+     * @param currentToken The JWT token returned in a prior request.
+     * @param tenantCode Unique identifier of the tenant being switched to.
+     *  Returns any errors encountered refreshing.  */
+    switchTenant(currentToken: string, tenantCode: string): Promise<contracts.SingleResult<TokenHolder>>;
+    /** Declares a new organization in the toyhauler system.
+     * The given user account is made the administrator for that organization,
+     * and if the new user flag is given,
+     * the user account will get created.
+     * NOTE: If successful, keeps the returned auth token in scope for this client instance.
+     * @param tenantName Human readable friendly title for the tenant.  NOT used for system identification.
+     * @param newUser Flag to create a new user account with the given credentials.
+     * @param userName User to be the adminstrator for the new tenant.
+     * @param password Password for the given user (desired password if the newuser flag is set).
+     * @param tenantCode (optional) Desired unique identifier for the new tenant (if omitted one will be generated).
+     * @param currentToken The JWT token returned in a prior request.
+     *  */
+    registerTenant(tenantName: string, newUser: boolean, userName: string, password: string, tenantCode?: string, currentToken?: string): Promise<contracts.SingleResult<AuthTenant>>;
+}

package/dist/apis/codiac-relay/common/security/api-auth-methods-legacy.js

@@ -0,0 +1,368 @@
+"use strict";
+var ApiAuthMethodsLegacy_1;
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ApiAuthMethodsLegacy = void 0;
+const tslib_1 = require("tslib");
+const path = require("path");
+const inversify_1 = require("inversify");
+const axios_1 = require("axios");
+const contracts = require("@codiac.io/codiac-common/contracts");
+const codiac_common_1 = require("@codiac.io/codiac-common");
+const jwt_lib_1 = require("@codiac.io/jwt-lib");
+const api_client_base_1 = require("../api-client-base");
+const auth_constants_1 = require("./auth-constants");
+const token_holder_1 = require("./token-holder");
+/** Contains hard-coded Codiac Auth methods.
+ * It is considered legacy because it is to be replaced by methods generated from an openApi spec. */
+let ApiAuthMethodsLegacy = ApiAuthMethodsLegacy_1 = class ApiAuthMethodsLegacy {
+    // /**
+    //  * @param apiRootUrl The base url of the api.  That is, prepending it to any individual endpoint route will yield the fully qualified url for that endpoint.
+    //  * @param authToken Either a Principal or TenantUser token for the api this client is targeting.  NOTE: Also gets hydrated on successful attempts of authenticate / switchTenant / refreshToken / registerTenant. 
+    //  */
+    // constructor(logger: IBetterLogger, apiRootUrl?: string, authToken?: string) {
+    //   super(logger, apiRootUrl, authToken);
+    //   this.tokenHeaderName = ApiClientBaseWithAuth.TOKEN_HEADER_PARAM;  // Right now this is redundant bc this class and the apiClientBase have the same value for tokenHeaderName.  But it's here bc the auth client should explicitly declare it anyway and the base is just a default.
+    // }
+    constructor(core, logger) {
+        this.core = core;
+        this.logger = logger;
+        this.authConstants = new auth_constants_1.AuthConstants();
+        this.tokenHeaderName = ApiAuthMethodsLegacy_1.TOKEN_HEADER_PARAM; // Right now this is redundant bc this class and the apiClientBase have the same value for tokenHeaderName.  But it's here bc this auth client should explicitly declare it anyway and the base is just a default.
+    }
+    ;
+    /** Logs in remotely with the given credentials.
+     * Returns a valid token in the headers of the response
+     * and the user info in the body of the response.
+     * NOTE: If successful, keeps the returned auth token in scope for this client instance.
+     * @param login The human readable unique identifier for the user.
+     * @param password the secret held for this particular user.
+     * @param tenantCode (optional) Unique identifier of the tenant to activate with this authentication.
+     */
+    authenticate(login, password, tenantCode) {
+        return tslib_1.__awaiter(this, void 0, void 0, function* () {
+            return new Promise((resolve, reject) => tslib_1.__awaiter(this, void 0, void 0, function* () {
+                var _a, _b, _c, _d, _e;
+                try {
+                    let url = path.join(this.authConstants.ROUTE_PREFIX, this.authConstants.ROUTE_SUBPATH_LOGIN);
+                    let req = { login: login, password: password, tenantCode: tenantCode };
+                    let options = {
+                        "baseURL": this.core.apiRootUrl,
+                        "headers": { "content-type": "application/json" }
+                    };
+                    // let apiResponse = await axios.post<contracts.SingleResult<TenantUser>>(url, req, options);
+                    // let result = this.convertToTokenHolderResponse(apiResponse);
+                    let httpResp = yield this.executeAxiosRequest(codiac_common_1.httpRestVerb.POST, (contracts.SingleResult), url, req, options);
+                    if (httpResp.data === undefined) {
+                        throw new Error(`Authentication request did not return an output object. HttpStatus: ${(_a = httpResp.status) !== null && _a !== void 0 ? _a : ""} ${(_b = httpResp.statusText) !== null && _b !== void 0 ? _b : ""}`);
+                    }
+                    let result = this.convertToTokenHolderResult(httpResp.data, httpResp.headers);
+                    if ((_c = result.output) === null || _c === void 0 ? void 0 : _c.token) {
+                        this.core.authToken = result.output.token;
+                    }
+                    resolve(result);
+                }
+                catch (err) {
+                    let output = new contracts.SingleResult(false, `Error during authenticate: ${(_d = err.name) !== null && _d !== void 0 ? _d : ""} ${(_e = err.message) !== null && _e !== void 0 ? _e : "(no error message available)"}`, err);
+                    this.logger.debug(output.message);
+                    resolve(output);
+                }
+            }));
+        });
+    }
+    /** Traps the errors thrown by axios on non-200 statuses. */
+    executeAxiosRequest(verb, responseType, url, request, options) {
+        var _a, _b, _c, _d, _e, _f, _g, _h;
+        return tslib_1.__awaiter(this, void 0, void 0, function* () {
+            try {
+                let axr;
+                switch (verb) {
+                    case codiac_common_1.httpRestVerb.POST:
+                        axr = yield axios_1.default.post(url, request, options);
+                        break;
+                    case codiac_common_1.httpRestVerb.PUT:
+                        axr = yield axios_1.default.put(url, request, options);
+                        break;
+                    case codiac_common_1.httpRestVerb.PATCH:
+                        axr = yield axios_1.default.patch(url, request, options);
+                        break;
+                    case codiac_common_1.httpRestVerb.DELETE:
+                        axr = yield axios_1.default.delete(url, options);
+                        break;
+                    default: // GET
+                        axr = yield axios_1.default.get(url, options);
+                        break;
+                }
+                let expected = responseType; // <-- just to satisfy TS (we want to infer the generics, dont want the caller to have to explicitly type them)
+                return axr; // { data: axr.data, headers: axr.headers, status: axr.status, statusText: axr.statusText };
+            }
+            catch (err) {
+                if (err.isAxiosError === true && err.response) {
+                    let axErrResponse = (err.response);
+                    this.logger.debug(`Remote api returned failure http status: ${axErrResponse.status || ""} ${axErrResponse.statusText || ""}.`); // , stringify(axr);  // need json-safe-stringify
+                    return { data: axErrResponse.data, headers: axErrResponse.headers, status: axErrResponse.status, statusText: axErrResponse.statusText };
+                }
+                else {
+                    let result = new contracts.Result(false, `Error communicating with remote api: ${(_a = err.name) !== null && _a !== void 0 ? _a : ""} ${(_b = err.message) !== null && _b !== void 0 ? _b : "unspecified error."}`, err);
+                    return { data: result, headers: (_d = (_c = err.response) === null || _c === void 0 ? void 0 : _c.headers) !== null && _d !== void 0 ? _d : {}, status: (_f = (_e = err.response) === null || _e === void 0 ? void 0 : _e.status) !== null && _f !== void 0 ? _f : -1, statusText: (_h = (_g = err.response) === null || _g === void 0 ? void 0 : _g.statusText) !== null && _h !== void 0 ? _h : "" };
+                }
+            }
+        });
+    }
+    /** Replaces the user in the output with a TokenHolder so that they client consumer has access to the token.
+     * throws if the axios response does not contain a data property. */
+    convertToTokenHolderResult(apiResponse, headers) {
+        let result = new contracts.SingleResult(apiResponse.success, apiResponse.message, apiResponse.error, undefined, apiResponse.validation);
+        if (apiResponse.output) {
+            let token = headers[this.tokenHeaderName];
+            if (!token)
+                throw new Error(`Authentication service did not provide a user token.`);
+            let exp = this.extractTokenExpiration(token);
+            result.output = new token_holder_1.TokenHolder(apiResponse.output, token, exp);
+        }
+        return result;
+    }
+    /** Replaces the user in the output with a TokenHolder so that they client consumer has access to the token.
+     * throws if the axios response does not contain a data property.
+     * @deprecated Use `convertToTokenHolderResult()` instead.*/
+    convertToTokenHolderResponse(apiResponse) {
+        if (apiResponse.data) {
+            // TODO:  Dont construct new - just cast or ducktype and replace the output property.
+            let result = new contracts.SingleResult(apiResponse.data.success, apiResponse.data.message, apiResponse.data.error, undefined, apiResponse.data.validation);
+            if (apiResponse.data.output) {
+                let token = apiResponse.headers[this.tokenHeaderName];
+                if (!token)
+                    throw new Error(`Authentication service did not provide a user token.`);
+                let exp = this.extractTokenExpiration(token);
+                result.output = new token_holder_1.TokenHolder(apiResponse.data.output, token, exp);
+            }
+            return result;
+        }
+        else {
+            throw new Error(`Authentication request did not return an output object. HttpStatus: ${apiResponse.status} ${apiResponse.statusText}`);
+        }
+    }
+    /** Determines whether the given token is expired.
+     * @param throwOnError throws any encountered errors, including token parsing errors.
+     */
+    isExpired(token, throwOnError = false) {
+        try {
+            const exp = this.extractTokenExpiration(token);
+            return (exp == undefined) || !(0, codiac_common_1.isFuture)(exp);
+        }
+        catch (err) {
+            let newErr = new contracts.CodiacError(`Error determining expiry status: ${err.message || ""}`, err);
+            this.logger.detail(newErr.message);
+            if (throwOnError) {
+                throw newErr;
+            }
+            else {
+                return true;
+            }
+        }
+    }
+    extractTokenExpiration(token) {
+        let exp;
+        try {
+            const encoder = new jwt_lib_1.JwtEncoder();
+            const tokenObj = encoder.tryDecode(token);
+            const CLAIM_KEY_FOR_EXPIRATION = "exp"; // this is just a standard claim so it ought to come from the jwt lib
+            const rawExp = tokenObj === null || tokenObj === void 0 ? void 0 : tokenObj.payload[CLAIM_KEY_FOR_EXPIRATION];
+            if (rawExp) {
+                try {
+                    exp = new Date(rawExp);
+                    this.logger.trace(`Exracted token expiration (utc): ${(exp === null || exp === void 0 ? void 0 : exp.toUTCString()) || "undefined"}`);
+                }
+                catch (_a) {
+                    this.logger.trace(`Invalid date format in token expiration: [${rawExp}]`);
+                }
+            }
+            return exp;
+        }
+        catch (err) {
+            throw new Error(`Error parsing expiration from token: ${err.message}`);
+        }
+    }
+    /** Provides the ability to extend an existing token.
+     *  Returns failure for invalid or revoked tokens.
+     *  Returns any errors encountered refreshing.
+     *  NOTE: If successful, keeps the returned auth token in scope for this client instance.
+     * @param currentToken The JWT token returned in a prior request.
+     * */
+    refreshToken(currentToken) {
+        return tslib_1.__awaiter(this, void 0, void 0, function* () {
+            return new Promise((resolve, reject) => tslib_1.__awaiter(this, void 0, void 0, function* () {
+                var _a, _b, _c, _d, _e;
+                try {
+                    let url = path.join(this.authConstants.ROUTE_PREFIX, this.authConstants.ROUTE_SUBPATH_TOKEN_REFRESH);
+                    let req = {};
+                    let options = {
+                        "baseURL": this.core.apiRootUrl,
+                        "headers": {
+                            "content-type": "application/json",
+                            [this.tokenHeaderName]: currentToken
+                        }
+                    };
+                    // let apiResponse = await axios.post<contracts.SingleResult<TenantUser>>(url, req, options);
+                    // let result = this.convertToTokenHolderResponse(apiResponse);
+                    let httpResp = yield this.executeAxiosRequest(codiac_common_1.httpRestVerb.POST, (contracts.SingleResult), url, req, options);
+                    if (httpResp.data === undefined) {
+                        throw new Error(`refreshToken request did not return an output object. HttpStatus: ${(_a = httpResp.status) !== null && _a !== void 0 ? _a : ""} ${(_b = httpResp.statusText) !== null && _b !== void 0 ? _b : ""}`);
+                    }
+                    let result = this.convertToTokenHolderResult(httpResp.data, httpResp.headers);
+                    if ((_c = result.output) === null || _c === void 0 ? void 0 : _c.token) {
+                        this.core.authToken = result.output.token;
+                    }
+                    resolve(result);
+                }
+                catch (err) {
+                    let output = new contracts.SingleResult(false, `Error during refreshToken: ${(_d = err.name) !== null && _d !== void 0 ? _d : ""} ${(_e = err.message) !== null && _e !== void 0 ? _e : "(no error message available)"}`, err);
+                    this.logger.debug(output.message);
+                    resolve(output);
+                }
+            }));
+        });
+    }
+    /** Retrieves the full account info for the current user (minus any passwords),
+     *  including all tenant profiles.
+     *  Returns failure for invalid or revoked tokens.
+     *  Returns any errors encountered refreshing.
+     *  NOTE: keeps the returned auth token in scope for this client instance.
+     * @param currentToken (optional if the client instance has already authenticated) The JWT token returned in a prior request.
+     */
+    whoAmI(currentToken) {
+        return tslib_1.__awaiter(this, void 0, void 0, function* () {
+            return new Promise((resolve, reject) => tslib_1.__awaiter(this, void 0, void 0, function* () {
+                var _a, _b, _c, _d, _e;
+                try {
+                    let url = path.join(this.authConstants.ROUTE_PREFIX, this.authConstants.ROUTE_SUBPATH_TOKEN_WHOAMI);
+                    let options = {
+                        "baseURL": this.core.apiRootUrl,
+                        "headers": {
+                            "content-type": "application/json"
+                        }
+                    };
+                    if (currentToken || this.core.authToken)
+                        options.headers[this.tokenHeaderName] = currentToken || this.core.authToken;
+                    // let apiResponse = await axios.get<contracts.SingleResult<TenantUser>>(url, options);
+                    // let result = apiResponse.data;
+                    // if (apiResponse.headers[RestClientBaseWithAuth.TOKEN_HEADER_PARAM]) {
+                    //   this.core.authToken = apiResponse.headers[RestClientBaseWithAuth.TOKEN_HEADER_PARAM];
+                    // }
+                    let httpResp = yield this.executeAxiosRequest(codiac_common_1.httpRestVerb.GET, (contracts.SingleResult), url, undefined, options);
+                    if (httpResp.data === undefined) {
+                        throw new Error(`whoAmI request did not return an output object. HttpStatus: ${(_a = httpResp.status) !== null && _a !== void 0 ? _a : ""} ${(_b = httpResp.statusText) !== null && _b !== void 0 ? _b : ""}`);
+                    }
+                    let result = this.convertToTokenHolderResult(httpResp.data, httpResp.headers);
+                    if ((_c = result.output) === null || _c === void 0 ? void 0 : _c.token) {
+                        this.core.authToken = result.output.token;
+                    }
+                    resolve(httpResp.data); // result);  // this method should have returned a tokenHolder, not a tenantUser.
+                }
+                catch (err) {
+                    let output = new contracts.SingleResult(false, `Error during whoAmI: ${(_d = err.name) !== null && _d !== void 0 ? _d : ""} ${(_e = err.message) !== null && _e !== void 0 ? _e : "(no error message available)"}`, err);
+                    this.logger.debug(output.message);
+                    resolve(output);
+                }
+            }));
+        });
+    }
+    /** Provides the ability to extend an existing token.
+     *  Returns failure for invalid or revoked tokens.
+     *  NOTE: If successful, keeps the returned auth token in scope for this client instance.
+     * @param currentToken The JWT token returned in a prior request.
+     * @param tenantCode Unique identifier of the tenant being switched to.
+     *  Returns any errors encountered refreshing.  */
+    switchTenant(currentToken, tenantCode) {
+        return tslib_1.__awaiter(this, void 0, void 0, function* () {
+            return new Promise((resolve, reject) => tslib_1.__awaiter(this, void 0, void 0, function* () {
+                var _a, _b, _c, _d, _e;
+                try {
+                    let url = path.join(this.authConstants.ROUTE_PREFIX, this.authConstants.ROUTE_SUBPATH_SWITCH_TENANT);
+                    let req = { newTenantCode: tenantCode };
+                    let options = {
+                        "baseURL": this.core.apiRootUrl,
+                        "headers": {
+                            "content-type": "application/json",
+                            [this.tokenHeaderName]: currentToken
+                        }
+                    };
+                    let httpResp = yield this.executeAxiosRequest(codiac_common_1.httpRestVerb.POST, (contracts.SingleResult), url, req, options);
+                    if (httpResp.data === undefined) {
+                        throw new Error(`switchTenant request did not return an output object. HttpStatus: ${(_a = httpResp.status) !== null && _a !== void 0 ? _a : ""} ${(_b = httpResp.statusText) !== null && _b !== void 0 ? _b : ""}`);
+                    }
+                    let result = this.convertToTokenHolderResult(httpResp.data, httpResp.headers);
+                    if ((_c = result.output) === null || _c === void 0 ? void 0 : _c.token) {
+                        this.core.authToken = result.output.token;
+                    }
+                    resolve(result);
+                }
+                catch (err) {
+                    let output = new contracts.SingleResult(false, `Error during switchTenant: ${(_d = err.name) !== null && _d !== void 0 ? _d : ""} ${(_e = err.message) !== null && _e !== void 0 ? _e : "(no error message available)"}`, err);
+                    this.logger.debug(output.message);
+                    resolve(output);
+                }
+            }));
+        });
+    }
+    /** Declares a new organization in the toyhauler system.
+     * The given user account is made the administrator for that organization,
+     * and if the new user flag is given,
+     * the user account will get created.
+     * NOTE: If successful, keeps the returned auth token in scope for this client instance.
+     * @param tenantName Human readable friendly title for the tenant.  NOT used for system identification.
+     * @param newUser Flag to create a new user account with the given credentials.
+     * @param userName User to be the adminstrator for the new tenant.
+     * @param password Password for the given user (desired password if the newuser flag is set).
+     * @param tenantCode (optional) Desired unique identifier for the new tenant (if omitted one will be generated).
+     * @param currentToken The JWT token returned in a prior request.
+     *  */
+    registerTenant(tenantName, newUser, userName, password, tenantCode, currentToken) {
+        return tslib_1.__awaiter(this, void 0, void 0, function* () {
+            return new Promise((resolve, reject) => tslib_1.__awaiter(this, void 0, void 0, function* () {
+                var _a, _b, _c, _d;
+                try {
+                    let url = path.join(this.authConstants.ROUTE_PREFIX, this.authConstants.ROUTE_SUBPATH_TENANT_REGISTER);
+                    let req = { tenantName: tenantName, newUser: newUser, userName: userName, password: password, tenantCode: tenantCode };
+                    let options = {
+                        "baseURL": this.core.apiRootUrl,
+                        "headers": {
+                            "content-type": "application/json"
+                        }
+                    };
+                    if (currentToken)
+                        options.headers[this.tokenHeaderName] = currentToken;
+                    // let response = await axios.post<contracts.SingleResult<AuthTenant>>(url, req, options);
+                    // let opResult = response.data;
+                    // if (opResult && opResult.success && response.headers[this.tokenHeaderName]) {
+                    //   this.core.authToken = response.headers[this.tokenHeaderName];
+                    // }
+                    // resolve(response.data);
+                    let httpResp = yield this.executeAxiosRequest(codiac_common_1.httpRestVerb.POST, (contracts.SingleResult), url, req, options);
+                    if (httpResp.data === undefined) {
+                        throw new Error(`registerTenant request did not return an output object. HttpStatus: ${(_a = httpResp.status) !== null && _a !== void 0 ? _a : ""} ${(_b = httpResp.statusText) !== null && _b !== void 0 ? _b : ""}`);
+                    }
+                    let result = httpResp.data;
+                    if (result.success && httpResp.headers[this.tokenHeaderName]) {
+                        this.core.authToken = httpResp.headers[this.tokenHeaderName];
+                    }
+                    resolve(result); // this should have been a tokenHolder result instead of an AuthTenant.
+                }
+                catch (err) {
+                    let output = new contracts.SingleResult(false, `Error during registerTenant: ${(_c = err.name) !== null && _c !== void 0 ? _c : ""} ${(_d = err.message) !== null && _d !== void 0 ? _d : "(no error message available)"}`, err);
+                    this.logger.debug(output.message);
+                    resolve(output);
+                }
+            }));
+        });
+    }
+};
+/** Hardcoded to match the current setting on the server.
+ * TODO: Get this from a config that is copied from the server project to the client project on build.
+ */
+ApiAuthMethodsLegacy.TOKEN_HEADER_PARAM = "authorization";
+ApiAuthMethodsLegacy = ApiAuthMethodsLegacy_1 = tslib_1.__decorate([
+    (0, inversify_1.injectable)(),
+    tslib_1.__metadata("design:paramtypes", [api_client_base_1.ApiClientBase, Object])
+], ApiAuthMethodsLegacy);
+exports.ApiAuthMethodsLegacy = ApiAuthMethodsLegacy;
+//# sourceMappingURL=api-auth-methods-legacy.js.map

package/dist/apis/codiac-relay/common/security/api-auth-methods-legacy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"api-auth-methods-legacy.js","sourceRoot":"","sources":["../../../../../src/apis/codiac-relay/common/security/api-auth-methods-legacy.ts"],"names":[],"mappings":";;;;;AAAA,6BAA6B;AAC7B,yCAAuC;AACvC,iCAAiE;AAEjE,gEAAgE;AAChE,4DAA2F;AAE3F,gDAAgD;AAEhD,wDAAmD;AAEnD,qDAAiD;AACjD,iDAA6C;AAI7C;qGACqG;AAErG,IAAa,oBAAoB,4BAAjC,MAAa,oBAAoB;IAO/B,MAAM;IACN,+JAA+J;IAC/J,qNAAqN;IACrN,MAAM;IACN,gFAAgF;IAChF,0CAA0C;IAC1C,wRAAwR;IACxR,IAAI;IAEJ,YAAoB,IAAmB,EAAU,MAAqB;QAAlD,SAAI,GAAJ,IAAI,CAAe;QAAU,WAAM,GAAN,MAAM,CAAe;QAS5D,kBAAa,GAAkB,IAAI,8BAAa,EAAE,CAAC;QAR3D,IAAI,CAAC,eAAe,GAAG,sBAAoB,CAAC,kBAAkB,CAAC,CAAE,kNAAkN;IACrR,CAAC;IAAA,CAAC;IAWF;;;;;;;OAOG;IACU,YAAY,CAAC,KAAa,EAAE,QAAgB,EAAE,UAAmB;;YAC5E,OAAO,IAAI,OAAO,CAAsC,CAAO,OAAO,EAAE,MAAM,EAAE,EAAE;;gBAChF,IAAI;oBACF,IAAI,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC,YAAY,EAAE,IAAI,CAAC,aAAa,CAAC,mBAAmB,CAAC,CAAA;oBAC5F,IAAI,GAAG,GAAG,EAAE,KAAK,EAAE,KAAK,EAAE,QAAQ,EAAE,QAAQ,EAAE,UAAU,EAAE,UAAU,EAAE,CAAC;oBACvE,IAAI,OAAO,GAAG;wBACZ,SAAS,EAAE,IAAI,CAAC,IAAI,CAAC,UAAU;wBAC/B,SAAS,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;qBAClD,CAAC;oBAEF,6FAA6F;oBAC7F,+DAA+D;oBAC/D,IAAI,QAAQ,GAAG,MAAM,IAAI,CAAC,mBAAmB,CAAC,4BAAY,CAAC,IAAI,EAAE,CAAA,SAAS,CAAC,YAAwB,CAAA,EAAE,GAAG,EAAE,GAAG,EAAE,OAAO,CAAC,CAAC;oBACxH,IAAI,QAAQ,CAAC,IAAI,KAAK,SAAS,EAAE;wBAC/B,MAAM,IAAI,KAAK,CAAC,uEAAuE,MAAA,QAAQ,CAAC,MAAM,mCAAI,EAAE,IAAI,MAAA,QAAQ,CAAC,UAAU,mCAAI,EAAE,EAAE,CAAC,CAAC;qBAC9I;oBACD,IAAI,MAAM,GAAG,IAAI,CAAC,0BAA0B,CAAC,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC,OAAO,CAAC,CAAC;oBAC9E,IAAI,MAAA,MAAM,CAAC,MAAM,0CAAE,KAAK,EAAE;wBACxB,IAAI,CAAC,IAAI,CAAC,SAAS,GAAG,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC;qBAC3C;oBACD,OAAO,CAAC,MAAM,CAAC,CAAC;iBACnB;gBAAC,OAAO,GAAG,EAAE;oBACV,IAAI,MAAM,GAAG,IAAI,SAAS,CAAC,YAAY,CAAc,KAAK,EAAE,8BAA8B,MAAA,GAAG,CAAC,IAAI,mCAAI,EAAE,IAAI,MAAA,GAAG,CAAC,OAAO,mCAAI,8BAA8B,EAAE,EAAE,GAAG,CAAC,CAAC;oBAClK,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,OAAQ,CAAC,CAAA;oBAClC,OAAO,CAAC,MAAM,CAAC,CAAC;iBACjB;YACH,CAAC,CAAA,CAAC,CAAC;QACL,CAAC;KAAA;IAGD,4DAA4D;IAC5C,mBAAmB,CAA+C,IAAkB,EAAE,YAAiC,EAAE,GAAW,EAAE,OAAkB,EAAE,OAA4B;;;YACpM,IAAI;gBACF,IAAI,GAA6B,CAAC;gBAClC,QAAQ,IAAI,EAAE;oBACZ,KAAK,4BAAY,CAAC,IAAI;wBACpB,GAAG,GAAG,MAAM,eAAK,CAAC,IAAI,CAAY,GAAG,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;wBACzD,MAAM;oBACR,KAAK,4BAAY,CAAC,GAAG;wBACnB,GAAG,GAAG,MAAM,eAAK,CAAC,GAAG,CAAY,GAAG,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;wBACxD,MAAM;oBACR,KAAK,4BAAY,CAAC,KAAK;wBACrB,GAAG,GAAG,MAAM,eAAK,CAAC,KAAK,CAAY,GAAG,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;wBAC1D,MAAM;oBACR,KAAK,4BAAY,CAAC,MAAM;wBACtB,GAAG,GAAG,MAAM,eAAK,CAAC,MAAM,CAAY,GAAG,EAAE,OAAO,CAAC,CAAC;wBAClD,MAAM;oBACR,SAAU,MAAM;wBACd,GAAG,GAAG,MAAM,eAAK,CAAC,GAAG,CAAY,GAAG,EAAE,OAAO,CAAC,CAAC;wBAC/C,MAAM;iBACT;gBACD,IAAI,QAAQ,GAAG,YAAY,CAAC,CAAE,+GAA+G;gBAC7I,OAAO,GAAG,CAAC,CAAC,4FAA4F;aACzG;YAAC,OAAO,GAAG,EAAE;gBACZ,IAAI,GAAG,CAAC,YAAY,KAAK,IAAI,IAAI,GAAG,CAAC,QAAQ,EAAE;oBAC7C,IAAI,aAAa,GAA6B,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;oBAC7D,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,4CAA4C,aAAa,CAAC,MAAM,IAAI,EAAE,IAAI,aAAa,CAAC,UAAU,IAAI,EAAE,GAAG,CAAC,CAAA,CAAC,iDAAiD;oBAChL,OAAO,EAAE,IAAI,EAAE,aAAa,CAAC,IAAiB,EAAE,OAAO,EAAE,aAAa,CAAC,OAAO,EAAE,MAAM,EAAE,aAAa,CAAC,MAAM,EAAE,UAAU,EAAE,aAAa,CAAC,UAAU,EAAE,CAAC;iBACtJ;qBAAM;oBACL,IAAI,MAAM,GAAG,IAAI,SAAS,CAAC,MAAM,CAAC,KAAK,EAAE,wCAAwC,MAAA,GAAG,CAAC,IAAI,mCAAI,EAAE,IAAI,MAAA,GAAG,CAAC,OAAO,mCAAI,oBAAoB,EAAE,EAAE,GAAG,CAAC,CAAC;oBAC/I,OAAO,EAAE,IAAI,EAAE,MAAmB,EAAE,OAAO,EAAE,MAAA,MAAA,GAAG,CAAC,QAAQ,0CAAE,OAAO,mCAAI,EAAE,EAAE,MAAM,EAAE,MAAA,MAAA,GAAG,CAAC,QAAQ,0CAAE,MAAM,mCAAI,CAAC,CAAC,EAAE,UAAU,EAAE,MAAA,MAAA,GAAG,CAAC,QAAQ,0CAAE,UAAU,mCAAI,EAAE,EAAE,CAAC;iBAC5J;aACF;;KACF;IAGD;wEACoE;IAC5D,0BAA0B,CAAC,WAA+C,EAAE,OAAa;QAC/F,IAAI,MAAM,GAAG,IAAI,SAAS,CAAC,YAAY,CAAc,WAAW,CAAC,OAAO,EAAE,WAAW,CAAC,OAAO,EAAE,WAAW,CAAC,KAAK,EAAE,SAAS,EAAE,WAAW,CAAC,UAAU,CAAC,CAAC;QACrJ,IAAI,WAAW,CAAC,MAAM,EAAE;YACtB,IAAI,KAAK,GAAuB,OAAO,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;YAC9D,IAAI,CAAC,KAAK;gBAAE,MAAM,IAAI,KAAK,CAAC,sDAAsD,CAAC,CAAC;YACpF,IAAI,GAAG,GAAG,IAAI,CAAC,sBAAsB,CAAC,KAAK,CAAC,CAAC;YAC7C,MAAM,CAAC,MAAM,GAAG,IAAI,0BAAW,CAAC,WAAW,CAAC,MAAM,EAAE,KAAK,EAAE,GAAG,CAAC,CAAC;SACjE;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;IAGD;;gEAE4D;IACpD,4BAA4B,CAAC,WAA8D;QACjG,IAAI,WAAW,CAAC,IAAI,EAAE;YACpB,qFAAqF;YACrF,IAAI,MAAM,GAAG,IAAI,SAAS,CAAC,YAAY,CAAc,WAAW,CAAC,IAAI,CAAC,OAAO,EAAE,WAAW,CAAC,IAAI,CAAC,OAAO,EAAE,WAAW,CAAC,IAAI,CAAC,KAAK,EAAE,SAAS,EAAE,WAAW,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;YACzK,IAAI,WAAW,CAAC,IAAI,CAAC,MAAM,EAAE;gBAC3B,IAAI,KAAK,GAAuB,WAAW,CAAC,OAAO,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;gBAC1E,IAAI,CAAC,KAAK;oBAAE,MAAM,IAAI,KAAK,CAAC,sDAAsD,CAAC,CAAC;gBACpF,IAAI,GAAG,GAAG,IAAI,CAAC,sBAAsB,CAAC,KAAK,CAAC,CAAC;gBAC7C,MAAM,CAAC,MAAM,GAAG,IAAI,0BAAW,CAAC,WAAW,CAAC,IAAI,CAAC,MAAM,EAAE,KAAK,EAAE,GAAG,CAAC,CAAC;aACtE;YACD,OAAO,MAAM,CAAC;SACf;aAAM;YACL,MAAM,IAAI,KAAK,CAAC,uEAAuE,WAAW,CAAC,MAAM,IAAI,WAAW,CAAC,UAAU,EAAE,CAAC,CAAC;SACxI;IACH,CAAC;IAED;;OAEG;IACI,SAAS,CAAC,KAAa,EAAE,eAAwB,KAAK;QAC3D,IAAI;YACF,MAAM,GAAG,GAAG,IAAI,CAAC,sBAAsB,CAAC,KAAK,CAAC,CAAC;YAC/C,OAAO,CAAC,GAAG,IAAI,SAAS,CAAC,IAAI,CAAC,IAAA,wBAAQ,EAAC,GAAG,CAAC,CAAC;SAC7C;QAAC,OAAO,GAAG,EAAE;YACZ,IAAI,MAAM,GAAG,IAAI,SAAS,CAAC,WAAW,CAAC,oCAAoC,GAAG,CAAC,OAAO,IAAI,EAAE,EAAE,EAAE,GAAG,CAAC,CAAA;YACpG,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;YACnC,IAAI,YAAY,EAAE;gBAChB,MAAM,MAAM,CAAC;aACd;iBAAM;gBACL,OAAO,IAAI,CAAC;aACb;SACF;IACH,CAAC;IAIM,sBAAsB,CAAC,KAAa;QACzC,IAAI,GAAqB,CAAC;QAC1B,IAAI;YACF,MAAM,OAAO,GAAG,IAAI,oBAAU,EAAE,CAAC;YACjC,MAAM,QAAQ,GAAG,OAAO,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;YAC1C,MAAM,wBAAwB,GAAG,KAAK,CAAC,CAAE,qEAAqE;YAC9G,MAAM,MAAM,GAAG,QAAQ,aAAR,QAAQ,uBAAR,QAAQ,CAAE,OAAO,CAAC,wBAAwB,CAAC,CAAC;YAC3D,IAAI,MAAM,EAAE;gBACV,IAAI;oBACF,GAAG,GAAG,IAAI,IAAI,CAAC,MAAM,CAAC,CAAC;oBACvB,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,oCAAoC,CAAA,GAAG,aAAH,GAAG,uBAAH,GAAG,CAAE,WAAW,EAAE,KAAI,WAAW,EAAE,CAAC,CAAC;iBAC5F;gBAAC,WAAM;oBACN,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,6CAA6C,MAAM,GAAG,CAAC,CAAC;iBAC3E;aACF;YACD,OAAO,GAAG,CAAC;SACZ;QAAC,OAAO,GAAG,EAAE;YACZ,MAAM,IAAI,KAAK,CAAC,wCAAwC,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;SACxE;IACH,CAAC;IAGD;;;;;SAKK;IACQ,YAAY,CAAC,YAAoB;;YAC5C,OAAO,IAAI,OAAO,CAAsC,CAAO,OAAO,EAAE,MAAM,EAAE,EAAE;;gBAChF,IAAI;oBACF,IAAI,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC,YAAY,EAAE,IAAI,CAAC,aAAa,CAAC,2BAA2B,CAAC,CAAA;oBACpG,IAAI,GAAG,GAAG,EAAE,CAAC;oBACb,IAAI,OAAO,GAAG;wBACZ,SAAS,EAAE,IAAI,CAAC,IAAI,CAAC,UAAU;wBAC/B,SAAS,EAAE;4BACT,cAAc,EAAE,kBAAkB;4BAClC,CAAC,IAAI,CAAC,eAAe,CAAC,EAAE,YAAY;yBACrC;qBACF,CAAC;oBAEF,6FAA6F;oBAC7F,+DAA+D;oBAE/D,IAAI,QAAQ,GAAG,MAAM,IAAI,CAAC,mBAAmB,CAAC,4BAAY,CAAC,IAAI,EAAE,CAAA,SAAS,CAAC,YAAwB,CAAA,EAAE,GAAG,EAAE,GAAG,EAAE,OAAO,CAAC,CAAC;oBACxH,IAAI,QAAQ,CAAC,IAAI,KAAK,SAAS,EAAE;wBAC/B,MAAM,IAAI,KAAK,CAAC,qEAAqE,MAAA,QAAQ,CAAC,MAAM,mCAAI,EAAE,IAAI,MAAA,QAAQ,CAAC,UAAU,mCAAI,EAAE,EAAE,CAAC,CAAC;qBAC5I;oBACD,IAAI,MAAM,GAAG,IAAI,CAAC,0BAA0B,CAAC,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC,OAAO,CAAC,CAAC;oBAC9E,IAAI,MAAA,MAAM,CAAC,MAAM,0CAAE,KAAK,EAAE;wBACxB,IAAI,CAAC,IAAI,CAAC,SAAS,GAAG,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC;qBAC3C;oBAED,OAAO,CAAC,MAAM,CAAC,CAAC;iBACjB;gBAAC,OAAO,GAAG,EAAE;oBACZ,IAAI,MAAM,GAAG,IAAI,SAAS,CAAC,YAAY,CAAc,KAAK,EAAE,8BAA8B,MAAA,GAAG,CAAC,IAAI,mCAAI,EAAE,IAAI,MAAA,GAAG,CAAC,OAAO,mCAAI,8BAA8B,EAAE,EAAE,GAAG,CAAC,CAAC;oBAClK,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,OAAQ,CAAC,CAAA;oBAClC,OAAO,CAAC,MAAM,CAAC,CAAC;iBACjB;YACH,CAAC,CAAA,CAAC,CAAC;QACL,CAAC;KAAA;IAGD;;;;;;OAMG;IACU,MAAM,CAAC,YAAqB;;YACvC,OAAO,IAAI,OAAO,CAAqC,CAAO,OAAO,EAAE,MAAM,EAAE,EAAE;;gBAC/E,IAAI;oBACF,IAAI,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC,YAAY,EAAE,IAAI,CAAC,aAAa,CAAC,0BAA0B,CAAC,CAAA;oBACnG,IAAI,OAAO,GAAQ;wBACjB,SAAS,EAAE,IAAI,CAAC,IAAI,CAAC,UAAU;wBAC/B,SAAS,EAAE;4BACT,cAAc,EAAE,kBAAkB;yBACnC;qBACF,CAAC;oBACF,IAAI,YAAY,IAAI,IAAI,CAAC,IAAI,CAAC,SAAS;wBAAE,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,eAAe,CAAC,GAAG,YAAY,IAAI,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC;oBAErH,uFAAuF;oBACvF,iCAAiC;oBACjC,wEAAwE;oBACxE,0FAA0F;oBAC1F,IAAI;oBAEJ,IAAI,QAAQ,GAAG,MAAM,IAAI,CAAC,mBAAmB,CAAC,4BAAY,CAAC,GAAG,EAAE,CAAA,SAAS,CAAC,YAAwB,CAAA,EAAE,GAAG,EAAE,SAAS,EAAE,OAAO,CAAC,CAAC;oBAC7H,IAAI,QAAQ,CAAC,IAAI,KAAK,SAAS,EAAE;wBAC/B,MAAM,IAAI,KAAK,CAAC,+DAA+D,MAAA,QAAQ,CAAC,MAAM,mCAAI,EAAE,IAAI,MAAA,QAAQ,CAAC,UAAU,mCAAI,EAAE,EAAE,CAAC,CAAC;qBACtI;oBACD,IAAI,MAAM,GAAG,IAAI,CAAC,0BAA0B,CAAC,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC,OAAO,CAAC,CAAC;oBAC9E,IAAI,MAAA,MAAM,CAAC,MAAM,0CAAE,KAAK,EAAE;wBACxB,IAAI,CAAC,IAAI,CAAC,SAAS,GAAG,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC;qBAC3C;oBAED,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,iFAAiF;iBAC1G;gBAAC,OAAO,GAAG,EAAE;oBACZ,IAAI,MAAM,GAAG,IAAI,SAAS,CAAC,YAAY,CAAa,KAAK,EAAE,wBAAwB,MAAA,GAAG,CAAC,IAAI,mCAAI,EAAE,IAAI,MAAA,GAAG,CAAC,OAAO,mCAAI,8BAA8B,EAAE,EAAE,GAAG,CAAC,CAAC;oBAC3J,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,OAAQ,CAAC,CAAA;oBAClC,OAAO,CAAC,MAAM,CAAC,CAAC;iBACjB;YACH,CAAC,CAAA,CAAC,CAAC;QACL,CAAC;KAAA;IAGD;;;;;sDAKkD;IACrC,YAAY,CAAC,YAAoB,EAAE,UAAkB;;YAChE,OAAO,IAAI,OAAO,CAAsC,CAAO,OAAO,EAAE,MAAM,EAAE,EAAE;;gBAChF,IAAI;oBACF,IAAI,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC,YAAY,EAAE,IAAI,CAAC,aAAa,CAAC,2BAA2B,CAAC,CAAA;oBACpG,IAAI,GAAG,GAAG,EAAE,aAAa,EAAE,UAAU,EAAE,CAAC;oBACxC,IAAI,OAAO,GAAG;wBACZ,SAAS,EAAE,IAAI,CAAC,IAAI,CAAC,UAAU;wBAC/B,SAAS,EAAE;4BACT,cAAc,EAAE,kBAAkB;4BAClC,CAAC,IAAI,CAAC,eAAe,CAAC,EAAE,YAAY;yBACrC;qBACF,CAAC;oBAEF,IAAI,QAAQ,GAAG,MAAM,IAAI,CAAC,mBAAmB,CAAC,4BAAY,CAAC,IAAI,EAAE,CAAA,SAAS,CAAC,YAAwB,CAAA,EAAE,GAAG,EAAE,GAAG,EAAE,OAAO,CAAC,CAAC;oBACxH,IAAI,QAAQ,CAAC,IAAI,KAAK,SAAS,EAAE;wBAC/B,MAAM,IAAI,KAAK,CAAC,qEAAqE,MAAA,QAAQ,CAAC,MAAM,mCAAI,EAAE,IAAI,MAAA,QAAQ,CAAC,UAAU,mCAAI,EAAE,EAAE,CAAC,CAAC;qBAC5I;oBACD,IAAI,MAAM,GAAG,IAAI,CAAC,0BAA0B,CAAC,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC,OAAO,CAAC,CAAC;oBAC9E,IAAI,MAAA,MAAM,CAAC,MAAM,0CAAE,KAAK,EAAE;wBACxB,IAAI,CAAC,IAAI,CAAC,SAAS,GAAG,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC;qBAC3C;oBAED,OAAO,CAAC,MAAM,CAAC,CAAC;iBACjB;gBAAC,OAAO,GAAG,EAAE;oBACZ,IAAI,MAAM,GAAG,IAAI,SAAS,CAAC,YAAY,CAAc,KAAK,EAAE,8BAA8B,MAAA,GAAG,CAAC,IAAI,mCAAI,EAAE,IAAI,MAAA,GAAG,CAAC,OAAO,mCAAI,8BAA8B,EAAE,EAAE,GAAG,CAAC,CAAC;oBAClK,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,OAAQ,CAAC,CAAA;oBAClC,OAAO,CAAC,MAAM,CAAC,CAAC;iBACjB;YACH,CAAC,CAAA,CAAC,CAAC;QACL,CAAC;KAAA;IAGD;;;;;;;;;;;UAWM;IACO,cAAc,CAAC,UAAkB,EAAE,OAAgB,EAAE,QAAgB,EAAE,QAAgB,EAClG,UAAmB,EAAE,YAAqB;;YAC1C,OAAO,IAAI,OAAO,CAAqC,CAAO,OAAO,EAAE,MAAM,EAAE,EAAE;;gBAC/E,IAAI;oBACF,IAAI,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC,YAAY,EAAE,IAAI,CAAC,aAAa,CAAC,6BAA6B,CAAC,CACnG;oBACH,IAAI,GAAG,GAAG,EAAE,UAAU,EAAE,UAAU,EAAE,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,QAAQ,EAAE,QAAQ,EAAE,UAAU,EAAE,UAAU,EAAE,CAAC;oBACvH,IAAI,OAAO,GAAQ;wBACjB,SAAS,EAAE,IAAI,CAAC,IAAI,CAAC,UAAU;wBAC/B,SAAS,EAAE;4BACT,cAAc,EAAE,kBAAkB;yBACnC;qBACF,CAAC;oBACF,IAAI,YAAY;wBAAE,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,eAAe,CAAC,GAAG,YAAY,CAAC;oBAEvE,0FAA0F;oBAC1F,gCAAgC;oBAChC,gFAAgF;oBAChF,kEAAkE;oBAClE,IAAI;oBACJ,0BAA0B;oBAG1B,IAAI,QAAQ,GAAG,MAAM,IAAI,CAAC,mBAAmB,CAAC,4BAAY,CAAC,IAAI,EAAE,CAAA,SAAS,CAAC,YAAwB,CAAA,EAAE,GAAG,EAAE,GAAG,EAAE,OAAO,CAAC,CAAC;oBACxH,IAAI,QAAQ,CAAC,IAAI,KAAK,SAAS,EAAE;wBAC/B,MAAM,IAAI,KAAK,CAAC,uEAAuE,MAAA,QAAQ,CAAC,MAAM,mCAAI,EAAE,IAAI,MAAA,QAAQ,CAAC,UAAU,mCAAI,EAAE,EAAE,CAAC,CAAC;qBAC9I;oBACD,IAAI,MAAM,GAAG,QAAQ,CAAC,IAAI,CAAC;oBAC3B,IAAI,MAAM,CAAC,OAAO,IAAI,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,eAAe,CAAC,EAAE;wBAC5D,IAAI,CAAC,IAAI,CAAC,SAAS,GAAG,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;qBAC9D;oBAED,OAAO,CAAC,MAAM,CAAC,CAAC,CAAE,uEAAuE;iBAC1F;gBAAC,OAAO,GAAG,EAAE;oBACZ,IAAI,MAAM,GAAG,IAAI,SAAS,CAAC,YAAY,CAAa,KAAK,EAAE,gCAAgC,MAAA,GAAG,CAAC,IAAI,mCAAI,EAAE,IAAI,MAAA,GAAG,CAAC,OAAO,mCAAI,8BAA8B,EAAE,EAAE,GAAG,CAAC,CAAC;oBACnK,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,OAAQ,CAAC,CAAA;oBAClC,OAAO,CAAC,MAAM,CAAC,CAAC;iBACjB;YACH,CAAC,CAAA,CAAC,CAAC;QACL,CAAC;KAAA;CACF,CAAA;AA/VC;;GAEG;AACI,uCAAkB,GAAG,eAAe,CAAC;AALjC,oBAAoB;IADhC,IAAA,sBAAU,GAAE;6CAiBe,+BAAa;GAhB5B,oBAAoB,CAiWhC;AAjWY,oDAAoB"}

package/dist/apis/codiac-relay/common/security/auth-constants.d.ts

@@ -0,0 +1,15 @@
+/** THIS IS A REDUNDANT COPY of the one in: auth-sdk/authentication-plugin.ts.  */
+export declare class AuthConstants {
+    /** The url segments prepended to all the auth endpoint routes. */
+    readonly ROUTE_PREFIX = "auth";
+    /** The default route for the login endpoint (unprefixed).  */
+    readonly ROUTE_SUBPATH_LOGIN = "login";
+    /** The default route for the tenant registration endpoint (unprefixed).  */
+    readonly ROUTE_SUBPATH_TENANT_REGISTER = "tenants";
+    /** The default route for the switch tenant endpoint (unprefixed).  */
+    readonly ROUTE_SUBPATH_SWITCH_TENANT = "switch";
+    /** The default route for the token refresh endpoint (unprefixed).  */
+    readonly ROUTE_SUBPATH_TOKEN_REFRESH = "refresh";
+    /** The default route for the WhoAmI endpoint (unprefixed).  */
+    readonly ROUTE_SUBPATH_TOKEN_WHOAMI = "whoami";
+}

package/dist/apis/codiac-relay/common/security/auth-constants.js

@@ -0,0 +1,22 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.AuthConstants = void 0;
+/** THIS IS A REDUNDANT COPY of the one in: auth-sdk/authentication-plugin.ts.  */
+class AuthConstants {
+    constructor() {
+        /** The url segments prepended to all the auth endpoint routes. */
+        this.ROUTE_PREFIX = "auth";
+        /** The default route for the login endpoint (unprefixed).  */
+        this.ROUTE_SUBPATH_LOGIN = "login";
+        /** The default route for the tenant registration endpoint (unprefixed).  */
+        this.ROUTE_SUBPATH_TENANT_REGISTER = "tenants";
+        /** The default route for the switch tenant endpoint (unprefixed).  */
+        this.ROUTE_SUBPATH_SWITCH_TENANT = "switch";
+        /** The default route for the token refresh endpoint (unprefixed).  */
+        this.ROUTE_SUBPATH_TOKEN_REFRESH = "refresh";
+        /** The default route for the WhoAmI endpoint (unprefixed).  */
+        this.ROUTE_SUBPATH_TOKEN_WHOAMI = "whoami";
+    }
+}
+exports.AuthConstants = AuthConstants;
+//# sourceMappingURL=auth-constants.js.map

package/dist/apis/codiac-relay/common/security/i-auth-client.d.ts

@@ -0,0 +1,44 @@
+import * as contracts from "@codiac.io/codiac-common/contracts";
+import { AuthTenant, TenantUser } from "@codiac.io/codiac-common/security";
+import { TokenHolder } from "./token-holder";
+export interface IAuthClient {
+    /** Logs in remotely with the given credentials.
+     * Returns a valid token in the headers of the response
+     * and the user info in the body of the response.
+     * @param login The human readable unique identifier for the user.
+     * @param password the secret held for this particular user.
+     * @param tenantCode (optional) Unique identifier of the tenant to activate with this authentication.
+     */
+    authenticate(login: string, password: string, tenantCode?: string): Promise<contracts.SingleResult<TokenHolder>>;
+    /** Provides the ability to extend an existing token.
+     *  Returns failure for invalid or revoked tokens.
+     *  Returns any errors encountered refreshing.
+     * @param currentToken The JWT token returned in a prior request.
+     * */
+    refreshToken(currentToken: string): Promise<contracts.SingleResult<TokenHolder>>;
+    /** Retrieves the full account info for the current user (minus any passwords),
+     *  including all tenant profiles.
+     *  Returns failure for invalid or revoked tokens.
+     *  Returns any errors encountered refreshing.
+     *  NOTE: keeps the returned auth token in scope for this client instance.
+     * @param currentToken The JWT token returned in a prior request.   */
+    whoAmI(currentToken: string): Promise<contracts.SingleResult<TenantUser>>;
+    /** Provides the ability to extend an existing token.
+     *  Returns failure for invalid or revoked tokens.
+     * @param currentToken The JWT token returned in a prior request.
+     * @param tenantCode Unique identifier of the tenant being switched to.
+     *  Returns any errors encountered refreshing.  */
+    switchTenant(currentToken: string, tenantCode: string): Promise<contracts.SingleResult<TokenHolder>>;
+    /** Declares a new organization in the toyhauler system.
+     * The given user account is made the administrator for that organization,
+     * and if the new user flag is given,
+     * the user account will get created.
+     * @param tenantName Human readable friendly title for the tenant.  NOT used for system identification.
+     * @param newUser Flag to create a new user account with the given credentials.
+     * @param userName User to be the adminstrator for the new tenant.
+     * @param password Password for the given user (desired password if the newuser flag is set).
+     * @param tenantCode (optional) Desired unique identifier for the new tenant (if omitted one will be generated).
+     * @param currentToken The JWT token returned in a prior request.
+     *  */
+    registerTenant(tenantName: string, newUser: boolean, userName: string, password: string, tenantCode?: string, currentToken?: string): Promise<contracts.SingleResult<AuthTenant>>;
+}

package/dist/apis/codiac-relay/common/security/i-auth-client.js

@@ -0,0 +1,3 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+//# sourceMappingURL=i-auth-client.js.map

package/dist/apis/codiac-relay/common/security/token-holder.d.ts

@@ -0,0 +1,13 @@
+import { TenantUser } from "@codiac.io/codiac-common/security";
+export declare class TokenHolder {
+    user: TenantUser;
+    token: string;
+    expiration: Date | undefined;
+    /**
+     * @param user A user or principal (ie: tenantCode is optional)
+     * @param token The JWT returned by the auth api.  If there's a tenantCode,
+     * then the token is a tenant-user token. Otherwise just a user token.
+     * @param expiration in GMT
+     */
+    constructor(user: TenantUser, token: string, expiration: Date | undefined);
+}

package/dist/apis/codiac-relay/common/security/token-holder.js

@@ -0,0 +1,18 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.TokenHolder = void 0;
+class TokenHolder {
+    /**
+     * @param user A user or principal (ie: tenantCode is optional)
+     * @param token The JWT returned by the auth api.  If there's a tenantCode,
+     * then the token is a tenant-user token. Otherwise just a user token.
+     * @param expiration in GMT
+     */
+    constructor(user, token, expiration) {
+        this.user = user;
+        this.token = token;
+        this.expiration = expiration;
+    }
+}
+exports.TokenHolder = TokenHolder;
+//# sourceMappingURL=token-holder.js.map