@contember/engine-s3-plugin 2.1.0-alpha.3 → 2.1.0-alpha.35

package/dist/production/src/S3Service.cjs

@@ -1,105 +0,0 @@
-"use strict";
-Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
-const mimeTypes = require("mime-types");
-const Config = require("./Config.cjs");
-const graphqlUtils = require("@contember/graphql-utils");
-const S3Signer = require("./S3Signer.cjs");
-var __defProp = Object.defineProperty;
-var __defNormalProp = (obj, key, value) => key in obj ? __defProp(obj, key, { enumerable: true, configurable: true, writable: true, value }) : obj[key] = value;
-var __publicField = (obj, key, value) => __defNormalProp(obj, typeof key !== "symbol" ? key + "" : key, value);
-class S3Service {
-  constructor(config, providers, authorizator) {
-    this.config = config;
-    this.providers = providers;
-    this.authorizator = authorizator;
-    __publicField(this, "publicBaseUrl");
-    __publicField(this, "signer");
-    this.publicBaseUrl = Config.resolveS3PublicBaseUrl(config);
-    this.signer = new S3Signer.S3Signer(config, providers);
-  }
-  getSignedUploadUrl({ acl, contentDisposition, contentType, expiration, prefix, suffix, fileName, extension, size }) {
-    const ext = extension ?? ((contentType ? mimeTypes.extension(contentType) : null) || "bin");
-    const id = this.providers.uuid();
-    const localObjectKey = (prefix ? prefix + "/" : "") + `${id}${suffix ?? ""}.${ext}`;
-    this.authorizator.verifyUploadAccess({ key: localObjectKey, size });
-    const objectKey = (this.config.prefix ? this.config.prefix + "/" : "") + localObjectKey;
-    const bucket = this.config.bucket;
-    if (acl && this.config.noAcl) {
-      throw new graphqlUtils.UserInputError("ACL is not supported");
-    }
-    const headers = {
-      "Cache-Control": "immutable"
-    };
-    if (contentType) {
-      headers["Content-Type"] = contentType;
-    }
-    if (!this.config.noAcl && acl !== "NONE") {
-      const mapping = { PUBLIC_READ: "public-read", PRIVATE: "private" };
-      headers["x-amz-acl"] = mapping[acl ?? "PUBLIC_READ"];
-    }
-    if (fileName || contentDisposition) {
-      let contentDispositionHeader = contentDisposition?.toLowerCase() ?? "inline";
-      if (fileName) {
-        contentDispositionHeader += `; filename*=UTF-8''${encodeURIComponent(fileName)}`;
-      }
-      headers["Content-Disposition"] = contentDispositionHeader;
-    }
-    const headersToSend = Object.entries(headers).map(([key, value]) => ({ key, value }));
-    if (size) {
-      headers["Content-Length"] = String(size);
-    }
-    const url = this.signer.sign({
-      action: "upload",
-      expiration: expiration ?? 3600,
-      key: objectKey,
-      headers: { ...headers }
-    });
-    const publicUrl = this.formatPublicUrl(objectKey);
-    return {
-      bucket,
-      objectKey,
-      url,
-      publicUrl,
-      headers: headersToSend,
-      method: "PUT"
-    };
-  }
-  getSignedReadUrl({ objectKey, expiration }) {
-    const bucket = this.config.bucket;
-    const publicPrefix = this.formatPublicUrl("");
-    if (objectKey.startsWith(publicPrefix)) {
-      objectKey = objectKey.substring(publicPrefix.length);
-    }
-    if (this.config.prefix && !objectKey.startsWith(this.config.prefix)) {
-      throw new graphqlUtils.ForbiddenError(
-        `Given object key "${objectKey}" does not start with a project prefix "${this.config.prefix}"`
-      );
-    }
-    const localObjectKey = this.config.prefix ? objectKey.substring(this.config.prefix.length + 1) : objectKey;
-    this.authorizator.verifyReadAccess({ key: localObjectKey });
-    const url = this.signer.sign({
-      action: "read",
-      expiration: expiration ?? 3600,
-      key: objectKey,
-      headers: {}
-    });
-    return {
-      bucket,
-      objectKey,
-      url,
-      headers: [],
-      method: "GET"
-    };
-  }
-  formatPublicUrl(key) {
-    return `${this.publicBaseUrl}/${key}`;
-  }
-}
-class S3ServiceFactory {
-  create(config, providers, authorizator) {
-    return new S3Service(config, providers, authorizator);
-  }
-}
-exports.S3Service = S3Service;
-exports.S3ServiceFactory = S3ServiceFactory;
-//# sourceMappingURL=S3Service.cjs.map

package/dist/production/src/S3Service.cjs.map

@@ -1 +0,0 @@
-{"version":3,"file":"S3Service.cjs","sources":["../../../../packages/engine-s3-plugin/src/S3Service.ts"],"sourcesContent":["import { extension as resolveExtension } from 'mime-types'\nimport { resolveS3PublicBaseUrl, S3Config } from './Config'\nimport { ForbiddenError, UserInputError } from '@contember/graphql-utils'\nimport { Providers } from '@contember/engine-plugins'\nimport { S3Signer } from './S3Signer'\nimport { S3GenerateSignedUploadInput } from './S3SchemaTypes'\nimport { S3ObjectAuthorizator } from './S3ObjectAuthorizator'\n\ntype SignedReadUrl = {\n\turl: string\n\tbucket: string\n\tobjectKey: string\n\theaders: { key: string; value: string }[]\n\tmethod: string\n}\n\ntype SignedUploadUrl = {\n\tobjectKey: string\n\turl: string\n\tbucket: string\n\tpublicUrl: string\n\theaders: { key: string; value: string }[]\n\tmethod: string\n}\n\n\nexport class S3Service {\n\tprivate readonly publicBaseUrl: string\n\n\tprivate readonly signer: S3Signer\n\n\tconstructor(\n\t\tpublic readonly config: S3Config,\n\t\tprivate readonly providers: Pick<Providers, 'uuid' | 'now'>,\n\t\tprivate readonly authorizator: S3ObjectAuthorizator,\n\t) {\n\t\tthis.publicBaseUrl = resolveS3PublicBaseUrl(config)\n\t\tthis.signer = new S3Signer(config, providers)\n\t}\n\n\tpublic getSignedUploadUrl(\n\t\t{ acl, contentDisposition, contentType, expiration, prefix, suffix, fileName, extension, size }: S3GenerateSignedUploadInput,\n\t): SignedUploadUrl {\n\t\tconst ext = extension ?? ((contentType ? resolveExtension(contentType) : null) || 'bin')\n\t\tconst id = this.providers.uuid()\n\t\tconst localObjectKey = (prefix ? prefix + '/' : '') + `${id}${suffix ?? ''}.${ext}`\n\t\tthis.authorizator.verifyUploadAccess({ key: localObjectKey, size })\n\n\t\tconst objectKey = (this.config.prefix ? this.config.prefix + '/' : '') + localObjectKey\n\n\t\tconst bucket = this.config.bucket\n\t\tif (acl && this.config.noAcl) {\n\t\t\tthrow new UserInputError('ACL is not supported')\n\t\t}\n\n\t\tconst headers: Record<string, string> = {\n\t\t\t'Cache-Control': 'immutable',\n\t\t}\n\t\tif (contentType) {\n\t\t\theaders['Content-Type'] = contentType\n\t\t}\n\n\t\tif (!this.config.noAcl && acl !== 'NONE') {\n\t\t\tconst mapping = { PUBLIC_READ: 'public-read', PRIVATE: 'private' }\n\t\t\theaders['x-amz-acl'] = mapping[acl ?? 'PUBLIC_READ']\n\t\t}\n\t\tif (fileName || contentDisposition) {\n\t\t\tlet contentDispositionHeader = contentDisposition?.toLowerCase() ?? 'inline'\n\t\t\tif (fileName) {\n\t\t\t\tcontentDispositionHeader += `; filename*=UTF-8''${encodeURIComponent(fileName)}`\n\t\t\t}\n\t\t\theaders['Content-Disposition'] = contentDispositionHeader\n\t\t}\n\t\tconst headersToSend = Object.entries(headers).map(([key, value]) => ({ key, value }))\n\n\t\t// intentionally not sending following headers\n\t\tif (size) {\n\t\t\theaders['Content-Length'] = String(size)\n\t\t}\n\n\t\tconst url = this.signer.sign({\n\t\t\taction: 'upload',\n\t\t\texpiration: expiration ?? 3600,\n\t\t\tkey: objectKey,\n\t\t\theaders: { ...headers },\n\t\t})\n\n\t\tconst publicUrl = this.formatPublicUrl(objectKey)\n\t\treturn {\n\t\t\tbucket,\n\t\t\tobjectKey,\n\t\t\turl,\n\t\t\tpublicUrl,\n\t\t\theaders: headersToSend,\n\t\t\tmethod: 'PUT',\n\t\t}\n\t}\n\n\tpublic getSignedReadUrl({ objectKey, expiration }: { objectKey: string; expiration: number | null}): SignedReadUrl {\n\t\tconst bucket = this.config.bucket\n\n\t\tconst publicPrefix = this.formatPublicUrl('')\n\t\tif (objectKey.startsWith(publicPrefix)) {\n\t\t\tobjectKey = objectKey.substring(publicPrefix.length)\n\t\t}\n\t\tif (this.config.prefix && !objectKey.startsWith(this.config.prefix)) {\n\t\t\tthrow new ForbiddenError(\n\t\t\t\t`Given object key \"${objectKey}\" does not start with a project prefix \"${this.config.prefix}\"`,\n\t\t\t)\n\t\t}\n\t\tconst localObjectKey = this.config.prefix ? objectKey.substring(this.config.prefix.length + 1) : objectKey\n\t\tthis.authorizator.verifyReadAccess({ key: localObjectKey })\n\n\t\tconst url = this.signer.sign({\n\t\t\taction: 'read',\n\t\t\texpiration: expiration ?? 3600,\n\t\t\tkey: objectKey,\n\t\t\theaders: {},\n\t\t})\n\n\t\treturn {\n\t\t\tbucket,\n\t\t\tobjectKey,\n\t\t\turl,\n\t\t\theaders: [],\n\t\t\tmethod: 'GET',\n\t\t}\n\t}\n\n\tpublic formatPublicUrl(key: string): string {\n\t\treturn `${this.publicBaseUrl}/${key}`\n\t}\n}\n\nexport class S3ServiceFactory {\n\tpublic create(config: S3Config, providers: Providers, authorizator: S3ObjectAuthorizator) {\n\t\treturn new S3Service(config, providers, authorizator)\n\t}\n}\n"],"names":["resolveS3PublicBaseUrl","S3Signer","resolveExtension","UserInputError","ForbiddenError"],"mappings":";;;;;;;;;AA0BO,MAAM,UAAU;AAAA,EAKtB,YACiB,QACC,WACA,cAChB;AAHe,SAAA,SAAA;AACC,SAAA,YAAA;AACA,SAAA,eAAA;AAPD,kBAAA,MAAA,eAAA;AAEA,kBAAA,MAAA,QAAA;AAOX,SAAA,gBAAgBA,8BAAuB,MAAM;AAClD,SAAK,SAAS,IAAIC,kBAAS,QAAQ,SAAS;AAAA,EAAA;AAAA,EAGtC,mBACN,EAAE,KAAK,oBAAoB,aAAa,YAAY,QAAQ,QAAQ,UAAU,WAAW,KAAA,GACvE;AAClB,UAAM,MAAM,eAAe,cAAcC,UAAiB,UAAA,WAAW,IAAI,SAAS;AAC5E,UAAA,KAAK,KAAK,UAAU,KAAK;AACzB,UAAA,kBAAkB,SAAS,SAAS,MAAM,MAAM,GAAG,EAAE,GAAG,UAAU,EAAE,IAAI,GAAG;AACjF,SAAK,aAAa,mBAAmB,EAAE,KAAK,gBAAgB,MAAM;AAE5D,UAAA,aAAa,KAAK,OAAO,SAAS,KAAK,OAAO,SAAS,MAAM,MAAM;AAEnE,UAAA,SAAS,KAAK,OAAO;AACvB,QAAA,OAAO,KAAK,OAAO,OAAO;AACvB,YAAA,IAAIC,4BAAe,sBAAsB;AAAA,IAAA;AAGhD,UAAM,UAAkC;AAAA,MACvC,iBAAiB;AAAA,IAClB;AACA,QAAI,aAAa;AAChB,cAAQ,cAAc,IAAI;AAAA,IAAA;AAG3B,QAAI,CAAC,KAAK,OAAO,SAAS,QAAQ,QAAQ;AACzC,YAAM,UAAU,EAAE,aAAa,eAAe,SAAS,UAAU;AACjE,cAAQ,WAAW,IAAI,QAAQ,OAAO,aAAa;AAAA,IAAA;AAEpD,QAAI,YAAY,oBAAoB;AAC/B,UAAA,2BAA2B,oBAAoB,YAAA,KAAiB;AACpE,UAAI,UAAU;AACe,oCAAA,sBAAsB,mBAAmB,QAAQ,CAAC;AAAA,MAAA;AAE/E,cAAQ,qBAAqB,IAAI;AAAA,IAAA;AAElC,UAAM,gBAAgB,OAAO,QAAQ,OAAO,EAAE,IAAI,CAAC,CAAC,KAAK,KAAK,OAAO,EAAE,KAAK,MAAQ,EAAA;AAGpF,QAAI,MAAM;AACD,cAAA,gBAAgB,IAAI,OAAO,IAAI;AAAA,IAAA;AAGlC,UAAA,MAAM,KAAK,OAAO,KAAK;AAAA,MAC5B,QAAQ;AAAA,MACR,YAAY,cAAc;AAAA,MAC1B,KAAK;AAAA,MACL,SAAS,EAAE,GAAG,QAAQ;AAAA,IAAA,CACtB;AAEK,UAAA,YAAY,KAAK,gBAAgB,SAAS;AACzC,WAAA;AAAA,MACN;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA,SAAS;AAAA,MACT,QAAQ;AAAA,IACT;AAAA,EAAA;AAAA,EAGM,iBAAiB,EAAE,WAAW,cAA8E;AAC5G,UAAA,SAAS,KAAK,OAAO;AAErB,UAAA,eAAe,KAAK,gBAAgB,EAAE;AACxC,QAAA,UAAU,WAAW,YAAY,GAAG;AAC3B,kBAAA,UAAU,UAAU,aAAa,MAAM;AAAA,IAAA;AAEhD,QAAA,KAAK,OAAO,UAAU,CAAC,UAAU,WAAW,KAAK,OAAO,MAAM,GAAG;AACpE,YAAM,IAAIC,aAAA;AAAA,QACT,qBAAqB,SAAS,2CAA2C,KAAK,OAAO,MAAM;AAAA,MAC5F;AAAA,IAAA;AAEK,UAAA,iBAAiB,KAAK,OAAO,SAAS,UAAU,UAAU,KAAK,OAAO,OAAO,SAAS,CAAC,IAAI;AACjG,SAAK,aAAa,iBAAiB,EAAE,KAAK,gBAAgB;AAEpD,UAAA,MAAM,KAAK,OAAO,KAAK;AAAA,MAC5B,QAAQ;AAAA,MACR,YAAY,cAAc;AAAA,MAC1B,KAAK;AAAA,MACL,SAAS,CAAA;AAAA,IAAC,CACV;AAEM,WAAA;AAAA,MACN;AAAA,MACA;AAAA,MACA;AAAA,MACA,SAAS,CAAC;AAAA,MACV,QAAQ;AAAA,IACT;AAAA,EAAA;AAAA,EAGM,gBAAgB,KAAqB;AAC3C,WAAO,GAAG,KAAK,aAAa,IAAI,GAAG;AAAA,EAAA;AAErC;AAEO,MAAM,iBAAiB;AAAA,EACtB,OAAO,QAAkB,WAAsB,cAAoC;AACzF,WAAO,IAAI,UAAU,QAAQ,WAAW,YAAY;AAAA,EAAA;AAEtD;;;"}

package/dist/production/src/S3Service.js

@@ -1,105 +0,0 @@
-import { extension } from "mime-types";
-import { resolveS3PublicBaseUrl } from "./Config.js";
-import { UserInputError, ForbiddenError } from "@contember/graphql-utils";
-import { S3Signer } from "./S3Signer.js";
-var __defProp = Object.defineProperty;
-var __defNormalProp = (obj, key, value) => key in obj ? __defProp(obj, key, { enumerable: true, configurable: true, writable: true, value }) : obj[key] = value;
-var __publicField = (obj, key, value) => __defNormalProp(obj, typeof key !== "symbol" ? key + "" : key, value);
-class S3Service {
-  constructor(config, providers, authorizator) {
-    this.config = config;
-    this.providers = providers;
-    this.authorizator = authorizator;
-    __publicField(this, "publicBaseUrl");
-    __publicField(this, "signer");
-    this.publicBaseUrl = resolveS3PublicBaseUrl(config);
-    this.signer = new S3Signer(config, providers);
-  }
-  getSignedUploadUrl({ acl, contentDisposition, contentType, expiration, prefix, suffix, fileName, extension: extension$1, size }) {
-    const ext = extension$1 ?? ((contentType ? extension(contentType) : null) || "bin");
-    const id = this.providers.uuid();
-    const localObjectKey = (prefix ? prefix + "/" : "") + `${id}${suffix ?? ""}.${ext}`;
-    this.authorizator.verifyUploadAccess({ key: localObjectKey, size });
-    const objectKey = (this.config.prefix ? this.config.prefix + "/" : "") + localObjectKey;
-    const bucket = this.config.bucket;
-    if (acl && this.config.noAcl) {
-      throw new UserInputError("ACL is not supported");
-    }
-    const headers = {
-      "Cache-Control": "immutable"
-    };
-    if (contentType) {
-      headers["Content-Type"] = contentType;
-    }
-    if (!this.config.noAcl && acl !== "NONE") {
-      const mapping = { PUBLIC_READ: "public-read", PRIVATE: "private" };
-      headers["x-amz-acl"] = mapping[acl ?? "PUBLIC_READ"];
-    }
-    if (fileName || contentDisposition) {
-      let contentDispositionHeader = contentDisposition?.toLowerCase() ?? "inline";
-      if (fileName) {
-        contentDispositionHeader += `; filename*=UTF-8''${encodeURIComponent(fileName)}`;
-      }
-      headers["Content-Disposition"] = contentDispositionHeader;
-    }
-    const headersToSend = Object.entries(headers).map(([key, value]) => ({ key, value }));
-    if (size) {
-      headers["Content-Length"] = String(size);
-    }
-    const url = this.signer.sign({
-      action: "upload",
-      expiration: expiration ?? 3600,
-      key: objectKey,
-      headers: { ...headers }
-    });
-    const publicUrl = this.formatPublicUrl(objectKey);
-    return {
-      bucket,
-      objectKey,
-      url,
-      publicUrl,
-      headers: headersToSend,
-      method: "PUT"
-    };
-  }
-  getSignedReadUrl({ objectKey, expiration }) {
-    const bucket = this.config.bucket;
-    const publicPrefix = this.formatPublicUrl("");
-    if (objectKey.startsWith(publicPrefix)) {
-      objectKey = objectKey.substring(publicPrefix.length);
-    }
-    if (this.config.prefix && !objectKey.startsWith(this.config.prefix)) {
-      throw new ForbiddenError(
-        `Given object key "${objectKey}" does not start with a project prefix "${this.config.prefix}"`
-      );
-    }
-    const localObjectKey = this.config.prefix ? objectKey.substring(this.config.prefix.length + 1) : objectKey;
-    this.authorizator.verifyReadAccess({ key: localObjectKey });
-    const url = this.signer.sign({
-      action: "read",
-      expiration: expiration ?? 3600,
-      key: objectKey,
-      headers: {}
-    });
-    return {
-      bucket,
-      objectKey,
-      url,
-      headers: [],
-      method: "GET"
-    };
-  }
-  formatPublicUrl(key) {
-    return `${this.publicBaseUrl}/${key}`;
-  }
-}
-class S3ServiceFactory {
-  create(config, providers, authorizator) {
-    return new S3Service(config, providers, authorizator);
-  }
-}
-export {
-  S3Service,
-  S3ServiceFactory
-};
-//# sourceMappingURL=S3Service.js.map

package/dist/production/src/S3Service.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"S3Service.js","sources":["../../../../packages/engine-s3-plugin/src/S3Service.ts"],"sourcesContent":["import { extension as resolveExtension } from 'mime-types'\nimport { resolveS3PublicBaseUrl, S3Config } from './Config'\nimport { ForbiddenError, UserInputError } from '@contember/graphql-utils'\nimport { Providers } from '@contember/engine-plugins'\nimport { S3Signer } from './S3Signer'\nimport { S3GenerateSignedUploadInput } from './S3SchemaTypes'\nimport { S3ObjectAuthorizator } from './S3ObjectAuthorizator'\n\ntype SignedReadUrl = {\n\turl: string\n\tbucket: string\n\tobjectKey: string\n\theaders: { key: string; value: string }[]\n\tmethod: string\n}\n\ntype SignedUploadUrl = {\n\tobjectKey: string\n\turl: string\n\tbucket: string\n\tpublicUrl: string\n\theaders: { key: string; value: string }[]\n\tmethod: string\n}\n\n\nexport class S3Service {\n\tprivate readonly publicBaseUrl: string\n\n\tprivate readonly signer: S3Signer\n\n\tconstructor(\n\t\tpublic readonly config: S3Config,\n\t\tprivate readonly providers: Pick<Providers, 'uuid' | 'now'>,\n\t\tprivate readonly authorizator: S3ObjectAuthorizator,\n\t) {\n\t\tthis.publicBaseUrl = resolveS3PublicBaseUrl(config)\n\t\tthis.signer = new S3Signer(config, providers)\n\t}\n\n\tpublic getSignedUploadUrl(\n\t\t{ acl, contentDisposition, contentType, expiration, prefix, suffix, fileName, extension, size }: S3GenerateSignedUploadInput,\n\t): SignedUploadUrl {\n\t\tconst ext = extension ?? ((contentType ? resolveExtension(contentType) : null) || 'bin')\n\t\tconst id = this.providers.uuid()\n\t\tconst localObjectKey = (prefix ? prefix + '/' : '') + `${id}${suffix ?? ''}.${ext}`\n\t\tthis.authorizator.verifyUploadAccess({ key: localObjectKey, size })\n\n\t\tconst objectKey = (this.config.prefix ? this.config.prefix + '/' : '') + localObjectKey\n\n\t\tconst bucket = this.config.bucket\n\t\tif (acl && this.config.noAcl) {\n\t\t\tthrow new UserInputError('ACL is not supported')\n\t\t}\n\n\t\tconst headers: Record<string, string> = {\n\t\t\t'Cache-Control': 'immutable',\n\t\t}\n\t\tif (contentType) {\n\t\t\theaders['Content-Type'] = contentType\n\t\t}\n\n\t\tif (!this.config.noAcl && acl !== 'NONE') {\n\t\t\tconst mapping = { PUBLIC_READ: 'public-read', PRIVATE: 'private' }\n\t\t\theaders['x-amz-acl'] = mapping[acl ?? 'PUBLIC_READ']\n\t\t}\n\t\tif (fileName || contentDisposition) {\n\t\t\tlet contentDispositionHeader = contentDisposition?.toLowerCase() ?? 'inline'\n\t\t\tif (fileName) {\n\t\t\t\tcontentDispositionHeader += `; filename*=UTF-8''${encodeURIComponent(fileName)}`\n\t\t\t}\n\t\t\theaders['Content-Disposition'] = contentDispositionHeader\n\t\t}\n\t\tconst headersToSend = Object.entries(headers).map(([key, value]) => ({ key, value }))\n\n\t\t// intentionally not sending following headers\n\t\tif (size) {\n\t\t\theaders['Content-Length'] = String(size)\n\t\t}\n\n\t\tconst url = this.signer.sign({\n\t\t\taction: 'upload',\n\t\t\texpiration: expiration ?? 3600,\n\t\t\tkey: objectKey,\n\t\t\theaders: { ...headers },\n\t\t})\n\n\t\tconst publicUrl = this.formatPublicUrl(objectKey)\n\t\treturn {\n\t\t\tbucket,\n\t\t\tobjectKey,\n\t\t\turl,\n\t\t\tpublicUrl,\n\t\t\theaders: headersToSend,\n\t\t\tmethod: 'PUT',\n\t\t}\n\t}\n\n\tpublic getSignedReadUrl({ objectKey, expiration }: { objectKey: string; expiration: number | null}): SignedReadUrl {\n\t\tconst bucket = this.config.bucket\n\n\t\tconst publicPrefix = this.formatPublicUrl('')\n\t\tif (objectKey.startsWith(publicPrefix)) {\n\t\t\tobjectKey = objectKey.substring(publicPrefix.length)\n\t\t}\n\t\tif (this.config.prefix && !objectKey.startsWith(this.config.prefix)) {\n\t\t\tthrow new ForbiddenError(\n\t\t\t\t`Given object key \"${objectKey}\" does not start with a project prefix \"${this.config.prefix}\"`,\n\t\t\t)\n\t\t}\n\t\tconst localObjectKey = this.config.prefix ? objectKey.substring(this.config.prefix.length + 1) : objectKey\n\t\tthis.authorizator.verifyReadAccess({ key: localObjectKey })\n\n\t\tconst url = this.signer.sign({\n\t\t\taction: 'read',\n\t\t\texpiration: expiration ?? 3600,\n\t\t\tkey: objectKey,\n\t\t\theaders: {},\n\t\t})\n\n\t\treturn {\n\t\t\tbucket,\n\t\t\tobjectKey,\n\t\t\turl,\n\t\t\theaders: [],\n\t\t\tmethod: 'GET',\n\t\t}\n\t}\n\n\tpublic formatPublicUrl(key: string): string {\n\t\treturn `${this.publicBaseUrl}/${key}`\n\t}\n}\n\nexport class S3ServiceFactory {\n\tpublic create(config: S3Config, providers: Providers, authorizator: S3ObjectAuthorizator) {\n\t\treturn new S3Service(config, providers, authorizator)\n\t}\n}\n"],"names":["extension","resolveExtension"],"mappings":";;;;;;;AA0BO,MAAM,UAAU;AAAA,EAKtB,YACiB,QACC,WACA,cAChB;AAHe,SAAA,SAAA;AACC,SAAA,YAAA;AACA,SAAA,eAAA;AAPD,kBAAA,MAAA,eAAA;AAEA,kBAAA,MAAA,QAAA;AAOX,SAAA,gBAAgB,uBAAuB,MAAM;AAClD,SAAK,SAAS,IAAI,SAAS,QAAQ,SAAS;AAAA,EAAA;AAAA,EAGtC,mBACN,EAAE,KAAK,oBAAoB,aAAa,YAAY,QAAQ,QAAQ,qBAAUA,aAAW,KAAA,GACvE;AAClB,UAAM,MAAMA,iBAAe,cAAcC,UAAiB,WAAW,IAAI,SAAS;AAC5E,UAAA,KAAK,KAAK,UAAU,KAAK;AACzB,UAAA,kBAAkB,SAAS,SAAS,MAAM,MAAM,GAAG,EAAE,GAAG,UAAU,EAAE,IAAI,GAAG;AACjF,SAAK,aAAa,mBAAmB,EAAE,KAAK,gBAAgB,MAAM;AAE5D,UAAA,aAAa,KAAK,OAAO,SAAS,KAAK,OAAO,SAAS,MAAM,MAAM;AAEnE,UAAA,SAAS,KAAK,OAAO;AACvB,QAAA,OAAO,KAAK,OAAO,OAAO;AACvB,YAAA,IAAI,eAAe,sBAAsB;AAAA,IAAA;AAGhD,UAAM,UAAkC;AAAA,MACvC,iBAAiB;AAAA,IAClB;AACA,QAAI,aAAa;AAChB,cAAQ,cAAc,IAAI;AAAA,IAAA;AAG3B,QAAI,CAAC,KAAK,OAAO,SAAS,QAAQ,QAAQ;AACzC,YAAM,UAAU,EAAE,aAAa,eAAe,SAAS,UAAU;AACjE,cAAQ,WAAW,IAAI,QAAQ,OAAO,aAAa;AAAA,IAAA;AAEpD,QAAI,YAAY,oBAAoB;AAC/B,UAAA,2BAA2B,oBAAoB,YAAA,KAAiB;AACpE,UAAI,UAAU;AACe,oCAAA,sBAAsB,mBAAmB,QAAQ,CAAC;AAAA,MAAA;AAE/E,cAAQ,qBAAqB,IAAI;AAAA,IAAA;AAElC,UAAM,gBAAgB,OAAO,QAAQ,OAAO,EAAE,IAAI,CAAC,CAAC,KAAK,KAAK,OAAO,EAAE,KAAK,MAAQ,EAAA;AAGpF,QAAI,MAAM;AACD,cAAA,gBAAgB,IAAI,OAAO,IAAI;AAAA,IAAA;AAGlC,UAAA,MAAM,KAAK,OAAO,KAAK;AAAA,MAC5B,QAAQ;AAAA,MACR,YAAY,cAAc;AAAA,MAC1B,KAAK;AAAA,MACL,SAAS,EAAE,GAAG,QAAQ;AAAA,IAAA,CACtB;AAEK,UAAA,YAAY,KAAK,gBAAgB,SAAS;AACzC,WAAA;AAAA,MACN;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA,SAAS;AAAA,MACT,QAAQ;AAAA,IACT;AAAA,EAAA;AAAA,EAGM,iBAAiB,EAAE,WAAW,cAA8E;AAC5G,UAAA,SAAS,KAAK,OAAO;AAErB,UAAA,eAAe,KAAK,gBAAgB,EAAE;AACxC,QAAA,UAAU,WAAW,YAAY,GAAG;AAC3B,kBAAA,UAAU,UAAU,aAAa,MAAM;AAAA,IAAA;AAEhD,QAAA,KAAK,OAAO,UAAU,CAAC,UAAU,WAAW,KAAK,OAAO,MAAM,GAAG;AACpE,YAAM,IAAI;AAAA,QACT,qBAAqB,SAAS,2CAA2C,KAAK,OAAO,MAAM;AAAA,MAC5F;AAAA,IAAA;AAEK,UAAA,iBAAiB,KAAK,OAAO,SAAS,UAAU,UAAU,KAAK,OAAO,OAAO,SAAS,CAAC,IAAI;AACjG,SAAK,aAAa,iBAAiB,EAAE,KAAK,gBAAgB;AAEpD,UAAA,MAAM,KAAK,OAAO,KAAK;AAAA,MAC5B,QAAQ;AAAA,MACR,YAAY,cAAc;AAAA,MAC1B,KAAK;AAAA,MACL,SAAS,CAAA;AAAA,IAAC,CACV;AAEM,WAAA;AAAA,MACN;AAAA,MACA;AAAA,MACA;AAAA,MACA,SAAS,CAAC;AAAA,MACV,QAAQ;AAAA,IACT;AAAA,EAAA;AAAA,EAGM,gBAAgB,KAAqB;AAC3C,WAAO,GAAG,KAAK,aAAa,IAAI,GAAG;AAAA,EAAA;AAErC;AAEO,MAAM,iBAAiB;AAAA,EACtB,OAAO,QAAkB,WAAsB,cAAoC;AACzF,WAAO,IAAI,UAAU,QAAQ,WAAW,YAAY;AAAA,EAAA;AAEtD;"}

package/dist/production/src/S3Signer.cjs

@@ -1,84 +0,0 @@
-"use strict";
-Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
-const Config = require("./Config.cjs");
-const qs = require("qs");
-const crypto = require("node:crypto");
-var __defProp = Object.defineProperty;
-var __defNormalProp = (obj, key, value) => key in obj ? __defProp(obj, key, { enumerable: true, configurable: true, writable: true, value }) : obj[key] = value;
-var __publicField = (obj, key, value) => __defNormalProp(obj, key + "", value);
-const hmac = (secret, data) => crypto.createHmac("sha256", secret).update(data).digest();
-const hash = (data) => crypto.createHash("sha256").update(data).digest("hex");
-const unsignableHeaders = ["authorization", "user-agent", "content-type", "expect", "x-amzn-trace-id"];
-const sortMap = (input) => {
-  return Object.fromEntries(Object.entries(input).sort((a, b) => a[0] < b[0] ? -1 : 1));
-};
-class S3Signer {
-  constructor(config, providers) {
-    this.config = config;
-    this.providers = providers;
-    __publicField(this, "region");
-    this.region = config.region || "eu-west-1";
-  }
-  sign(request) {
-    const uris = Config.resolveS3Endpoint(this.config);
-    request.headers.host = uris.endpoint.substring(uris.endpoint.indexOf("://") + 3);
-    const nowFormatted = this.providers.now().toISOString().replace(/[:\-]|\.\d{3}/g, "");
-    const queryString = this.getQueryParams(request, nowFormatted);
-    const path = uris.basePath + "/" + request.key;
-    const lines = [
-      request.action === "read" ? "GET" : "PUT",
-      path,
-      queryString,
-      this.getSignedHeaders(request),
-      this.getSignedHeaderNames(Object.keys(request.headers)),
-      "UNSIGNED-PAYLOAD"
-    ];
-    const canonicalRequest = lines.join("\n");
-    const parts = ["AWS4-HMAC-SHA256", nowFormatted, this.getScope(nowFormatted), hash(canonicalRequest)];
-    const signature = [nowFormatted.substring(0, 8), this.region, "s3", "aws4_request", parts.join("\n")].reduce((acc, x) => hmac(acc, x), Buffer.from("AWS4" + this.config.credentials.secret)).toString("hex");
-    return uris.endpoint + path + "?" + (queryString + "&X-Amz-Signature=" + signature).split("&").sort().join("&");
-  }
-  getQueryParams(request, dateFormatted) {
-    const scope = this.getScope(dateFormatted);
-    const queryString = {
-      "X-Amz-Date": dateFormatted,
-      "X-Amz-Algorithm": "AWS4-HMAC-SHA256",
-      "X-Amz-Credential": this.config.credentials.key + "/" + scope,
-      "X-Amz-Expires": String(request.expiration),
-      "X-Amz-SignedHeaders": this.getSignedHeaderNames(Object.keys(request.headers))
-    };
-    const headersToQs = ["content-type", "content-md5", "cache-control"];
-    for (const header in request.headers) {
-      const headerLc = header.toLowerCase();
-      if (headersToQs.includes(headerLc) || headerLc.startsWith("x-amz-")) {
-        queryString[headerLc.startsWith("x-amz-meta-") ? headerLc : header] = request.headers[header];
-      }
-    }
-    const qsSorted = sortMap(queryString);
-    return qs.stringify(qsSorted);
-  }
-  getScope(dateFormatted) {
-    return dateFormatted.substring(0, 8) + "/" + this.region + "/s3/aws4_request";
-  }
-  getSignedHeaders(request) {
-    const lines = [];
-    for (const header in request.headers) {
-      const headerNameLc = header.toLowerCase();
-      if (!this.isHeaderSignable(headerNameLc)) {
-        continue;
-      }
-      const value = request.headers[header].replace(/\s+/g, " ").replace(/^\s+|\s+$/g, "");
-      lines.push(`${headerNameLc}:${value}
-`);
-    }
-    return lines.sort().join("");
-  }
-  isHeaderSignable(headerName) {
-    return headerName.toLowerCase().startsWith("x-amz") || !unsignableHeaders.includes(headerName.toLowerCase());
-  }
-  getSignedHeaderNames(headers) {
-    return headers.map((it) => it.toLowerCase()).filter(this.isHeaderSignable).sort().join(";");
-  }
-}
-exports.S3Signer = S3Signer;
-//# sourceMappingURL=S3Signer.cjs.map

package/dist/production/src/S3Signer.cjs.map

@@ -1 +0,0 @@
-{"version":3,"file":"S3Signer.cjs","sources":["../../../../packages/engine-s3-plugin/src/S3Signer.ts"],"sourcesContent":["import { resolveS3Endpoint, S3Config } from './Config'\nimport { Providers } from '@contember/engine-plugins'\nimport qs from 'qs'\nimport { BinaryLike, createHash, createHmac } from 'node:crypto'\n\ninterface S3Request {\n\taction: 'read' | 'upload'\n\tkey: string\n\texpiration: number\n\theaders: Record<string, string>\n}\n\nconst hmac = (secret: BinaryLike, data: BinaryLike) => createHmac('sha256', secret).update(data).digest()\n\nconst hash = (data: BinaryLike) => createHash('sha256').update(data).digest('hex')\n\nconst unsignableHeaders = ['authorization', 'user-agent', 'content-type', 'expect', 'x-amzn-trace-id']\n\nconst sortMap = <T extends Record<string, any>>(input: T): T => {\n\treturn Object.fromEntries(Object.entries(input).sort((a, b) => (a[0] < b[0] ? -1 : 1))) as T\n}\nexport class S3Signer {\n\tprivate region: string\n\n\tconstructor(private readonly config: S3Config, private readonly providers: Pick<Providers, 'now'>) {\n\t\tthis.region = config.region || 'eu-west-1'\n\t}\n\n\tpublic sign(request: S3Request) {\n\t\tconst uris = resolveS3Endpoint(this.config)\n\t\trequest.headers.host = uris.endpoint.substring(uris.endpoint.indexOf('://') + 3)\n\t\tconst nowFormatted = this.providers\n\t\t\t.now()\n\t\t\t.toISOString()\n\t\t\t.replace(/[:\\-]|\\.\\d{3}/g, '')\n\t\tconst queryString = this.getQueryParams(request, nowFormatted)\n\t\tconst path = uris.basePath + '/' + request.key\n\t\tconst lines = [\n\t\t\trequest.action === 'read' ? 'GET' : 'PUT',\n\t\t\tpath,\n\t\t\tqueryString,\n\t\t\tthis.getSignedHeaders(request),\n\t\t\tthis.getSignedHeaderNames(Object.keys(request.headers)),\n\t\t\t'UNSIGNED-PAYLOAD',\n\t\t]\n\t\tconst canonicalRequest = lines.join('\\n')\n\n\t\tconst parts = ['AWS4-HMAC-SHA256', nowFormatted, this.getScope(nowFormatted), hash(canonicalRequest)]\n\n\t\tconst signature = [nowFormatted.substring(0, 8), this.region, 's3', 'aws4_request', parts.join('\\n')]\n\t\t\t.reduce<Buffer>((acc, x) => hmac(acc, x), Buffer.from('AWS4' + this.config.credentials.secret))\n\t\t\t.toString('hex')\n\t\treturn uris.endpoint + path + '?' + (queryString + '&X-Amz-Signature=' + signature).split('&').sort().join('&')\n\t}\n\n\tprivate getQueryParams(request: S3Request, dateFormatted: string) {\n\t\tconst scope = this.getScope(dateFormatted)\n\t\tconst queryString: Record<string, string> = {\n\t\t\t'X-Amz-Date': dateFormatted,\n\t\t\t'X-Amz-Algorithm': 'AWS4-HMAC-SHA256',\n\t\t\t'X-Amz-Credential': this.config.credentials.key + '/' + scope,\n\t\t\t'X-Amz-Expires': String(request.expiration),\n\t\t\t'X-Amz-SignedHeaders': this.getSignedHeaderNames(Object.keys(request.headers)),\n\t\t}\n\n\t\tconst headersToQs = ['content-type', 'content-md5', 'cache-control']\n\t\tfor (const header in request.headers) {\n\t\t\tconst headerLc = header.toLowerCase()\n\t\t\tif (headersToQs.includes(headerLc) || headerLc.startsWith('x-amz-')) {\n\t\t\t\tqueryString[headerLc.startsWith('x-amz-meta-') ? headerLc : header] = request.headers[header]\n\t\t\t}\n\t\t}\n\t\tconst qsSorted = sortMap(queryString)\n\t\treturn qs.stringify(qsSorted)\n\t}\n\n\tprivate getScope(dateFormatted: string) {\n\t\treturn dateFormatted.substring(0, 8) + '/' + this.region + '/s3/aws4_request'\n\t}\n\n\tprivate getSignedHeaders(request: S3Request): string {\n\t\tconst lines = []\n\t\tfor (const header in request.headers) {\n\t\t\tconst headerNameLc = header.toLowerCase()\n\t\t\tif (!this.isHeaderSignable(headerNameLc)) {\n\t\t\t\tcontinue\n\t\t\t}\n\t\t\tconst value = request.headers[header].replace(/\\s+/g, ' ').replace(/^\\s+|\\s+$/g, '')\n\t\t\tlines.push(`${headerNameLc}:${value}\\n`)\n\t\t}\n\t\treturn lines.sort().join('')\n\t}\n\n\tprivate isHeaderSignable(headerName: string) {\n\t\treturn headerName.toLowerCase().startsWith('x-amz') || !unsignableHeaders.includes(headerName.toLowerCase())\n\t}\n\n\tprivate getSignedHeaderNames(headers: string[]) {\n\t\treturn headers\n\t\t\t.map(it => it.toLowerCase())\n\t\t\t.filter(this.isHeaderSignable)\n\t\t\t.sort()\n\t\t\t.join(';')\n\t}\n}\n"],"names":["createHmac","createHash","resolveS3Endpoint"],"mappings":";;;;;;;;AAYA,MAAM,OAAO,CAAC,QAAoB,SAAqBA,kBAAW,UAAU,MAAM,EAAE,OAAO,IAAI,EAAE,OAAO;AAExG,MAAM,OAAO,CAAC,SAAqBC,OAAAA,WAAW,QAAQ,EAAE,OAAO,IAAI,EAAE,OAAO,KAAK;AAEjF,MAAM,oBAAoB,CAAC,iBAAiB,cAAc,gBAAgB,UAAU,iBAAiB;AAErG,MAAM,UAAU,CAAgC,UAAgB;AAC/D,SAAO,OAAO,YAAY,OAAO,QAAQ,KAAK,EAAE,KAAK,CAAC,GAAG,MAAO,EAAE,CAAC,IAAI,EAAE,CAAC,IAAI,KAAK,CAAE,CAAC;AACvF;AACO,MAAM,SAAS;AAAA,EAGrB,YAA6B,QAAmC,WAAmC;AAAtE,SAAA,SAAA;AAAmC,SAAA,YAAA;AAFxD,kBAAA,MAAA,QAAA;AAGF,SAAA,SAAS,OAAO,UAAU;AAAA,EAAA;AAAA,EAGzB,KAAK,SAAoB;AACzB,UAAA,OAAOC,OAAAA,kBAAkB,KAAK,MAAM;AAClC,YAAA,QAAQ,OAAO,KAAK,SAAS,UAAU,KAAK,SAAS,QAAQ,KAAK,IAAI,CAAC;AACzE,UAAA,eAAe,KAAK,UACxB,IAAA,EACA,cACA,QAAQ,kBAAkB,EAAE;AAC9B,UAAM,cAAc,KAAK,eAAe,SAAS,YAAY;AAC7D,UAAM,OAAO,KAAK,WAAW,MAAM,QAAQ;AAC3C,UAAM,QAAQ;AAAA,MACb,QAAQ,WAAW,SAAS,QAAQ;AAAA,MACpC;AAAA,MACA;AAAA,MACA,KAAK,iBAAiB,OAAO;AAAA,MAC7B,KAAK,qBAAqB,OAAO,KAAK,QAAQ,OAAO,CAAC;AAAA,MACtD;AAAA,IACD;AACM,UAAA,mBAAmB,MAAM,KAAK,IAAI;AAElC,UAAA,QAAQ,CAAC,oBAAoB,cAAc,KAAK,SAAS,YAAY,GAAG,KAAK,gBAAgB,CAAC;AAEpG,UAAM,YAAY,CAAC,aAAa,UAAU,GAAG,CAAC,GAAG,KAAK,QAAQ,MAAM,gBAAgB,MAAM,KAAK,IAAI,CAAC,EAClG,OAAe,CAAC,KAAK,MAAM,KAAK,KAAK,CAAC,GAAG,OAAO,KAAK,SAAS,KAAK,OAAO,YAAY,MAAM,CAAC,EAC7F,SAAS,KAAK;AAChB,WAAO,KAAK,WAAW,OAAO,OAAO,cAAc,sBAAsB,WAAW,MAAM,GAAG,EAAE,KAAK,EAAE,KAAK,GAAG;AAAA,EAAA;AAAA,EAGvG,eAAe,SAAoB,eAAuB;AAC3D,UAAA,QAAQ,KAAK,SAAS,aAAa;AACzC,UAAM,cAAsC;AAAA,MAC3C,cAAc;AAAA,MACd,mBAAmB;AAAA,MACnB,oBAAoB,KAAK,OAAO,YAAY,MAAM,MAAM;AAAA,MACxD,iBAAiB,OAAO,QAAQ,UAAU;AAAA,MAC1C,uBAAuB,KAAK,qBAAqB,OAAO,KAAK,QAAQ,OAAO,CAAC;AAAA,IAC9E;AAEA,UAAM,cAAc,CAAC,gBAAgB,eAAe,eAAe;AACxD,eAAA,UAAU,QAAQ,SAAS;AAC/B,YAAA,WAAW,OAAO,YAAY;AACpC,UAAI,YAAY,SAAS,QAAQ,KAAK,SAAS,WAAW,QAAQ,GAAG;AACxD,oBAAA,SAAS,WAAW,aAAa,IAAI,WAAW,MAAM,IAAI,QAAQ,QAAQ,MAAM;AAAA,MAAA;AAAA,IAC7F;AAEK,UAAA,WAAW,QAAQ,WAAW;AAC7B,WAAA,GAAG,UAAU,QAAQ;AAAA,EAAA;AAAA,EAGrB,SAAS,eAAuB;AACvC,WAAO,cAAc,UAAU,GAAG,CAAC,IAAI,MAAM,KAAK,SAAS;AAAA,EAAA;AAAA,EAGpD,iBAAiB,SAA4B;AACpD,UAAM,QAAQ,CAAC;AACJ,eAAA,UAAU,QAAQ,SAAS;AAC/B,YAAA,eAAe,OAAO,YAAY;AACxC,UAAI,CAAC,KAAK,iBAAiB,YAAY,GAAG;AACzC;AAAA,MAAA;AAEK,YAAA,QAAQ,QAAQ,QAAQ,MAAM,EAAE,QAAQ,QAAQ,GAAG,EAAE,QAAQ,cAAc,EAAE;AACnF,YAAM,KAAK,GAAG,YAAY,IAAI,KAAK;AAAA,CAAI;AAAA,IAAA;AAExC,WAAO,MAAM,OAAO,KAAK,EAAE;AAAA,EAAA;AAAA,EAGpB,iBAAiB,YAAoB;AACrC,WAAA,WAAW,cAAc,WAAW,OAAO,KAAK,CAAC,kBAAkB,SAAS,WAAW,aAAa;AAAA,EAAA;AAAA,EAGpG,qBAAqB,SAAmB;AAC/C,WAAO,QACL,IAAI,CAAM,OAAA,GAAG,YAAa,CAAA,EAC1B,OAAO,KAAK,gBAAgB,EAC5B,KAAK,EACL,KAAK,GAAG;AAAA,EAAA;AAEZ;;"}

package/dist/production/src/S3Signer.js

@@ -1,84 +0,0 @@
-import { resolveS3Endpoint } from "./Config.js";
-import qs from "qs";
-import { createHmac, createHash } from "node:crypto";
-var __defProp = Object.defineProperty;
-var __defNormalProp = (obj, key, value) => key in obj ? __defProp(obj, key, { enumerable: true, configurable: true, writable: true, value }) : obj[key] = value;
-var __publicField = (obj, key, value) => __defNormalProp(obj, key + "", value);
-const hmac = (secret, data) => createHmac("sha256", secret).update(data).digest();
-const hash = (data) => createHash("sha256").update(data).digest("hex");
-const unsignableHeaders = ["authorization", "user-agent", "content-type", "expect", "x-amzn-trace-id"];
-const sortMap = (input) => {
-  return Object.fromEntries(Object.entries(input).sort((a, b) => a[0] < b[0] ? -1 : 1));
-};
-class S3Signer {
-  constructor(config, providers) {
-    this.config = config;
-    this.providers = providers;
-    __publicField(this, "region");
-    this.region = config.region || "eu-west-1";
-  }
-  sign(request) {
-    const uris = resolveS3Endpoint(this.config);
-    request.headers.host = uris.endpoint.substring(uris.endpoint.indexOf("://") + 3);
-    const nowFormatted = this.providers.now().toISOString().replace(/[:\-]|\.\d{3}/g, "");
-    const queryString = this.getQueryParams(request, nowFormatted);
-    const path = uris.basePath + "/" + request.key;
-    const lines = [
-      request.action === "read" ? "GET" : "PUT",
-      path,
-      queryString,
-      this.getSignedHeaders(request),
-      this.getSignedHeaderNames(Object.keys(request.headers)),
-      "UNSIGNED-PAYLOAD"
-    ];
-    const canonicalRequest = lines.join("\n");
-    const parts = ["AWS4-HMAC-SHA256", nowFormatted, this.getScope(nowFormatted), hash(canonicalRequest)];
-    const signature = [nowFormatted.substring(0, 8), this.region, "s3", "aws4_request", parts.join("\n")].reduce((acc, x) => hmac(acc, x), Buffer.from("AWS4" + this.config.credentials.secret)).toString("hex");
-    return uris.endpoint + path + "?" + (queryString + "&X-Amz-Signature=" + signature).split("&").sort().join("&");
-  }
-  getQueryParams(request, dateFormatted) {
-    const scope = this.getScope(dateFormatted);
-    const queryString = {
-      "X-Amz-Date": dateFormatted,
-      "X-Amz-Algorithm": "AWS4-HMAC-SHA256",
-      "X-Amz-Credential": this.config.credentials.key + "/" + scope,
-      "X-Amz-Expires": String(request.expiration),
-      "X-Amz-SignedHeaders": this.getSignedHeaderNames(Object.keys(request.headers))
-    };
-    const headersToQs = ["content-type", "content-md5", "cache-control"];
-    for (const header in request.headers) {
-      const headerLc = header.toLowerCase();
-      if (headersToQs.includes(headerLc) || headerLc.startsWith("x-amz-")) {
-        queryString[headerLc.startsWith("x-amz-meta-") ? headerLc : header] = request.headers[header];
-      }
-    }
-    const qsSorted = sortMap(queryString);
-    return qs.stringify(qsSorted);
-  }
-  getScope(dateFormatted) {
-    return dateFormatted.substring(0, 8) + "/" + this.region + "/s3/aws4_request";
-  }
-  getSignedHeaders(request) {
-    const lines = [];
-    for (const header in request.headers) {
-      const headerNameLc = header.toLowerCase();
-      if (!this.isHeaderSignable(headerNameLc)) {
-        continue;
-      }
-      const value = request.headers[header].replace(/\s+/g, " ").replace(/^\s+|\s+$/g, "");
-      lines.push(`${headerNameLc}:${value}
-`);
-    }
-    return lines.sort().join("");
-  }
-  isHeaderSignable(headerName) {
-    return headerName.toLowerCase().startsWith("x-amz") || !unsignableHeaders.includes(headerName.toLowerCase());
-  }
-  getSignedHeaderNames(headers) {
-    return headers.map((it) => it.toLowerCase()).filter(this.isHeaderSignable).sort().join(";");
-  }
-}
-export {
-  S3Signer
-};
-//# sourceMappingURL=S3Signer.js.map

package/dist/production/src/S3Signer.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"S3Signer.js","sources":["../../../../packages/engine-s3-plugin/src/S3Signer.ts"],"sourcesContent":["import { resolveS3Endpoint, S3Config } from './Config'\nimport { Providers } from '@contember/engine-plugins'\nimport qs from 'qs'\nimport { BinaryLike, createHash, createHmac } from 'node:crypto'\n\ninterface S3Request {\n\taction: 'read' | 'upload'\n\tkey: string\n\texpiration: number\n\theaders: Record<string, string>\n}\n\nconst hmac = (secret: BinaryLike, data: BinaryLike) => createHmac('sha256', secret).update(data).digest()\n\nconst hash = (data: BinaryLike) => createHash('sha256').update(data).digest('hex')\n\nconst unsignableHeaders = ['authorization', 'user-agent', 'content-type', 'expect', 'x-amzn-trace-id']\n\nconst sortMap = <T extends Record<string, any>>(input: T): T => {\n\treturn Object.fromEntries(Object.entries(input).sort((a, b) => (a[0] < b[0] ? -1 : 1))) as T\n}\nexport class S3Signer {\n\tprivate region: string\n\n\tconstructor(private readonly config: S3Config, private readonly providers: Pick<Providers, 'now'>) {\n\t\tthis.region = config.region || 'eu-west-1'\n\t}\n\n\tpublic sign(request: S3Request) {\n\t\tconst uris = resolveS3Endpoint(this.config)\n\t\trequest.headers.host = uris.endpoint.substring(uris.endpoint.indexOf('://') + 3)\n\t\tconst nowFormatted = this.providers\n\t\t\t.now()\n\t\t\t.toISOString()\n\t\t\t.replace(/[:\\-]|\\.\\d{3}/g, '')\n\t\tconst queryString = this.getQueryParams(request, nowFormatted)\n\t\tconst path = uris.basePath + '/' + request.key\n\t\tconst lines = [\n\t\t\trequest.action === 'read' ? 'GET' : 'PUT',\n\t\t\tpath,\n\t\t\tqueryString,\n\t\t\tthis.getSignedHeaders(request),\n\t\t\tthis.getSignedHeaderNames(Object.keys(request.headers)),\n\t\t\t'UNSIGNED-PAYLOAD',\n\t\t]\n\t\tconst canonicalRequest = lines.join('\\n')\n\n\t\tconst parts = ['AWS4-HMAC-SHA256', nowFormatted, this.getScope(nowFormatted), hash(canonicalRequest)]\n\n\t\tconst signature = [nowFormatted.substring(0, 8), this.region, 's3', 'aws4_request', parts.join('\\n')]\n\t\t\t.reduce<Buffer>((acc, x) => hmac(acc, x), Buffer.from('AWS4' + this.config.credentials.secret))\n\t\t\t.toString('hex')\n\t\treturn uris.endpoint + path + '?' + (queryString + '&X-Amz-Signature=' + signature).split('&').sort().join('&')\n\t}\n\n\tprivate getQueryParams(request: S3Request, dateFormatted: string) {\n\t\tconst scope = this.getScope(dateFormatted)\n\t\tconst queryString: Record<string, string> = {\n\t\t\t'X-Amz-Date': dateFormatted,\n\t\t\t'X-Amz-Algorithm': 'AWS4-HMAC-SHA256',\n\t\t\t'X-Amz-Credential': this.config.credentials.key + '/' + scope,\n\t\t\t'X-Amz-Expires': String(request.expiration),\n\t\t\t'X-Amz-SignedHeaders': this.getSignedHeaderNames(Object.keys(request.headers)),\n\t\t}\n\n\t\tconst headersToQs = ['content-type', 'content-md5', 'cache-control']\n\t\tfor (const header in request.headers) {\n\t\t\tconst headerLc = header.toLowerCase()\n\t\t\tif (headersToQs.includes(headerLc) || headerLc.startsWith('x-amz-')) {\n\t\t\t\tqueryString[headerLc.startsWith('x-amz-meta-') ? headerLc : header] = request.headers[header]\n\t\t\t}\n\t\t}\n\t\tconst qsSorted = sortMap(queryString)\n\t\treturn qs.stringify(qsSorted)\n\t}\n\n\tprivate getScope(dateFormatted: string) {\n\t\treturn dateFormatted.substring(0, 8) + '/' + this.region + '/s3/aws4_request'\n\t}\n\n\tprivate getSignedHeaders(request: S3Request): string {\n\t\tconst lines = []\n\t\tfor (const header in request.headers) {\n\t\t\tconst headerNameLc = header.toLowerCase()\n\t\t\tif (!this.isHeaderSignable(headerNameLc)) {\n\t\t\t\tcontinue\n\t\t\t}\n\t\t\tconst value = request.headers[header].replace(/\\s+/g, ' ').replace(/^\\s+|\\s+$/g, '')\n\t\t\tlines.push(`${headerNameLc}:${value}\\n`)\n\t\t}\n\t\treturn lines.sort().join('')\n\t}\n\n\tprivate isHeaderSignable(headerName: string) {\n\t\treturn headerName.toLowerCase().startsWith('x-amz') || !unsignableHeaders.includes(headerName.toLowerCase())\n\t}\n\n\tprivate getSignedHeaderNames(headers: string[]) {\n\t\treturn headers\n\t\t\t.map(it => it.toLowerCase())\n\t\t\t.filter(this.isHeaderSignable)\n\t\t\t.sort()\n\t\t\t.join(';')\n\t}\n}\n"],"names":[],"mappings":";;;;;;AAYA,MAAM,OAAO,CAAC,QAAoB,SAAqB,WAAW,UAAU,MAAM,EAAE,OAAO,IAAI,EAAE,OAAO;AAExG,MAAM,OAAO,CAAC,SAAqB,WAAW,QAAQ,EAAE,OAAO,IAAI,EAAE,OAAO,KAAK;AAEjF,MAAM,oBAAoB,CAAC,iBAAiB,cAAc,gBAAgB,UAAU,iBAAiB;AAErG,MAAM,UAAU,CAAgC,UAAgB;AAC/D,SAAO,OAAO,YAAY,OAAO,QAAQ,KAAK,EAAE,KAAK,CAAC,GAAG,MAAO,EAAE,CAAC,IAAI,EAAE,CAAC,IAAI,KAAK,CAAE,CAAC;AACvF;AACO,MAAM,SAAS;AAAA,EAGrB,YAA6B,QAAmC,WAAmC;AAAtE,SAAA,SAAA;AAAmC,SAAA,YAAA;AAFxD,kBAAA,MAAA,QAAA;AAGF,SAAA,SAAS,OAAO,UAAU;AAAA,EAAA;AAAA,EAGzB,KAAK,SAAoB;AACzB,UAAA,OAAO,kBAAkB,KAAK,MAAM;AAClC,YAAA,QAAQ,OAAO,KAAK,SAAS,UAAU,KAAK,SAAS,QAAQ,KAAK,IAAI,CAAC;AACzE,UAAA,eAAe,KAAK,UACxB,IAAA,EACA,cACA,QAAQ,kBAAkB,EAAE;AAC9B,UAAM,cAAc,KAAK,eAAe,SAAS,YAAY;AAC7D,UAAM,OAAO,KAAK,WAAW,MAAM,QAAQ;AAC3C,UAAM,QAAQ;AAAA,MACb,QAAQ,WAAW,SAAS,QAAQ;AAAA,MACpC;AAAA,MACA;AAAA,MACA,KAAK,iBAAiB,OAAO;AAAA,MAC7B,KAAK,qBAAqB,OAAO,KAAK,QAAQ,OAAO,CAAC;AAAA,MACtD;AAAA,IACD;AACM,UAAA,mBAAmB,MAAM,KAAK,IAAI;AAElC,UAAA,QAAQ,CAAC,oBAAoB,cAAc,KAAK,SAAS,YAAY,GAAG,KAAK,gBAAgB,CAAC;AAEpG,UAAM,YAAY,CAAC,aAAa,UAAU,GAAG,CAAC,GAAG,KAAK,QAAQ,MAAM,gBAAgB,MAAM,KAAK,IAAI,CAAC,EAClG,OAAe,CAAC,KAAK,MAAM,KAAK,KAAK,CAAC,GAAG,OAAO,KAAK,SAAS,KAAK,OAAO,YAAY,MAAM,CAAC,EAC7F,SAAS,KAAK;AAChB,WAAO,KAAK,WAAW,OAAO,OAAO,cAAc,sBAAsB,WAAW,MAAM,GAAG,EAAE,KAAK,EAAE,KAAK,GAAG;AAAA,EAAA;AAAA,EAGvG,eAAe,SAAoB,eAAuB;AAC3D,UAAA,QAAQ,KAAK,SAAS,aAAa;AACzC,UAAM,cAAsC;AAAA,MAC3C,cAAc;AAAA,MACd,mBAAmB;AAAA,MACnB,oBAAoB,KAAK,OAAO,YAAY,MAAM,MAAM;AAAA,MACxD,iBAAiB,OAAO,QAAQ,UAAU;AAAA,MAC1C,uBAAuB,KAAK,qBAAqB,OAAO,KAAK,QAAQ,OAAO,CAAC;AAAA,IAC9E;AAEA,UAAM,cAAc,CAAC,gBAAgB,eAAe,eAAe;AACxD,eAAA,UAAU,QAAQ,SAAS;AAC/B,YAAA,WAAW,OAAO,YAAY;AACpC,UAAI,YAAY,SAAS,QAAQ,KAAK,SAAS,WAAW,QAAQ,GAAG;AACxD,oBAAA,SAAS,WAAW,aAAa,IAAI,WAAW,MAAM,IAAI,QAAQ,QAAQ,MAAM;AAAA,MAAA;AAAA,IAC7F;AAEK,UAAA,WAAW,QAAQ,WAAW;AAC7B,WAAA,GAAG,UAAU,QAAQ;AAAA,EAAA;AAAA,EAGrB,SAAS,eAAuB;AACvC,WAAO,cAAc,UAAU,GAAG,CAAC,IAAI,MAAM,KAAK,SAAS;AAAA,EAAA;AAAA,EAGpD,iBAAiB,SAA4B;AACpD,UAAM,QAAQ,CAAC;AACJ,eAAA,UAAU,QAAQ,SAAS;AAC/B,YAAA,eAAe,OAAO,YAAY;AACxC,UAAI,CAAC,KAAK,iBAAiB,YAAY,GAAG;AACzC;AAAA,MAAA;AAEK,YAAA,QAAQ,QAAQ,QAAQ,MAAM,EAAE,QAAQ,QAAQ,GAAG,EAAE,QAAQ,cAAc,EAAE;AACnF,YAAM,KAAK,GAAG,YAAY,IAAI,KAAK;AAAA,CAAI;AAAA,IAAA;AAExC,WAAO,MAAM,OAAO,KAAK,EAAE;AAAA,EAAA;AAAA,EAGpB,iBAAiB,YAAoB;AACrC,WAAA,WAAW,cAAc,WAAW,OAAO,KAAK,CAAC,kBAAkB,SAAS,WAAW,aAAa;AAAA,EAAA;AAAA,EAGpG,qBAAqB,SAAmB;AAC/C,WAAO,QACL,IAAI,CAAM,OAAA,GAAG,YAAa,CAAA,EAC1B,OAAO,KAAK,gBAAgB,EAC5B,KAAK,EACL,KAAK,GAAG;AAAA,EAAA;AAEZ;"}

package/dist/tests/cases/authorizator.test.d.ts

@@ -1,2 +0,0 @@
-export {};
-//# sourceMappingURL=authorizator.test.d.ts.map

package/dist/tests/cases/authorizator.test.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"authorizator.test.d.ts","sourceRoot":"","sources":["../../../tests/cases/authorizator.test.ts"],"names":[],"mappings":""}

package/dist/tests/cases/signRequest.test.d.ts

@@ -1,2 +0,0 @@
-export {};
-//# sourceMappingURL=signRequest.test.d.ts.map

package/dist/tests/cases/signRequest.test.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"signRequest.test.d.ts","sourceRoot":"","sources":["../../../tests/cases/signRequest.test.ts"],"names":[],"mappings":""}