@contember/engine-tenant-api 1.4.0-rc.8 → 2.0.0-alpha.8

package/dist/src/model/service/SignInManager.js

@@ -1,66 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.SignInManager = exports.SignInResult = void 0;
-const queries_1 = require("../queries");
-const Response_1 = require("../utils/Response");
-const exceptions_1 = require("../../exceptions");
-class SignInManager {
-    constructor(apiKeyManager, providers, otpAuthenticator) {
-        this.apiKeyManager = apiKeyManager;
-        this.providers = providers;
-        this.otpAuthenticator = otpAuthenticator;
-    }
-    async signIn(dbContext, email, password, expiration, otpCode) {
-        const personRow = await dbContext.queryHandler.fetch(queries_1.PersonQuery.byEmail(email));
-        if (personRow === null) {
-            return new Response_1.ResponseError('UNKNOWN_EMAIL', `Person with email ${email} not found`);
-        }
-        if (!personRow.password_hash) {
-            return new Response_1.ResponseError('NO_PASSWORD_SET', `No password set`);
-        }
-        if (personRow.disabled_at !== null) {
-            return new Response_1.ResponseError('PERSON_DISABLED', `Person is disabled`);
-        }
-        const passwordValid = await this.providers.bcryptCompare(password, personRow.password_hash);
-        if (!passwordValid) {
-            return new Response_1.ResponseError('INVALID_PASSWORD', `Password does not match`);
-        }
-        if (personRow.otp_uri && personRow.otp_activated_at) {
-            if (!otpCode) {
-                return new Response_1.ResponseError('OTP_REQUIRED', `2FA is enabled. OTP token is required`);
-            }
-            if (!this.otpAuthenticator.validate({ uri: personRow.otp_uri }, otpCode)) {
-                return new Response_1.ResponseError('INVALID_OTP_TOKEN', 'OTP token validation has failed');
-            }
-        }
-        const sessionToken = await this.apiKeyManager.createSessionApiKey(dbContext, personRow.identity_id, expiration);
-        return new Response_1.ResponseOk(new SignInResult(personRow, sessionToken));
-    }
-    async createSessionToken(dbContext, personIdentifier, expiration, verifier) {
-        const personRow = await dbContext.queryHandler.fetch(queries_1.PersonQuery.byUniqueIdentifier(personIdentifier));
-        if (personRow === null) {
-            if (personIdentifier.type === 'email') {
-                return new Response_1.ResponseError('UNKNOWN_EMAIL', `Person with email ${personIdentifier.email} not found`);
-            }
-            else if (personIdentifier.type === 'id') {
-                return new Response_1.ResponseError('UNKNOWN_PERSON_ID', `Person with id ${personIdentifier.id} not found`);
-            }
-            throw new exceptions_1.ImplementationException();
-        }
-        if (personRow.disabled_at !== null) {
-            return new Response_1.ResponseError('PERSON_DISABLED', `Person with id ${personRow.id} is disabled`);
-        }
-        await (verifier === null || verifier === void 0 ? void 0 : verifier(personRow));
-        const sessionToken = await this.apiKeyManager.createSessionApiKey(dbContext, personRow.identity_id, expiration);
-        return new Response_1.ResponseOk(new SignInResult(personRow, sessionToken));
-    }
-}
-exports.SignInManager = SignInManager;
-class SignInResult {
-    constructor(person, token) {
-        this.person = person;
-        this.token = token;
-    }
-}
-exports.SignInResult = SignInResult;
-//# sourceMappingURL=SignInManager.js.map

package/dist/src/model/service/SignInManager.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"SignInManager.js","sourceRoot":"","sources":["../../../../src/model/service/SignInManager.ts"],"names":[],"mappings":";;;AAEA,wCAA2E;AAG3E,gDAAuE;AACvE,iDAA0D;AAE1D,MAAM,aAAa;IAClB,YACkB,aAA4B,EAC5B,SAAoB,EACpB,gBAAkC;QAFlC,kBAAa,GAAb,aAAa,CAAe;QAC5B,cAAS,GAAT,SAAS,CAAW;QACpB,qBAAgB,GAAhB,gBAAgB,CAAkB;IACjD,CAAC;IAEJ,KAAK,CAAC,MAAM,CAAC,SAA0B,EAAE,KAAa,EAAE,QAAgB,EAAE,UAAmB,EAAE,OAAgB;QAC9G,MAAM,SAAS,GAAG,MAAM,SAAS,CAAC,YAAY,CAAC,KAAK,CAAC,qBAAW,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAA;QAEhF,IAAI,SAAS,KAAK,IAAI,EAAE;YACvB,OAAO,IAAI,wBAAa,CAAC,eAAe,EAAE,qBAAqB,KAAK,YAAY,CAAC,CAAA;SACjF;QAED,IAAI,CAAC,SAAS,CAAC,aAAa,EAAE;YAC7B,OAAO,IAAI,wBAAa,CAAC,iBAAiB,EAAE,iBAAiB,CAAC,CAAA;SAC9D;QAED,IAAI,SAAS,CAAC,WAAW,KAAK,IAAI,EAAE;YACnC,OAAO,IAAI,wBAAa,CAAC,iBAAiB,EAAE,oBAAoB,CAAC,CAAA;SACjE;QAED,MAAM,aAAa,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,aAAa,CAAC,QAAQ,EAAE,SAAS,CAAC,aAAa,CAAC,CAAA;QAE3F,IAAI,CAAC,aAAa,EAAE;YACnB,OAAO,IAAI,wBAAa,CAAC,kBAAkB,EAAE,yBAAyB,CAAC,CAAA;SACvE;QAED,IAAI,SAAS,CAAC,OAAO,IAAI,SAAS,CAAC,gBAAgB,EAAE;YACpD,IAAI,CAAC,OAAO,EAAE;gBACb,OAAO,IAAI,wBAAa,CAAC,cAAc,EAAE,uCAAuC,CAAC,CAAA;aACjF;YAED,IAAI,CAAC,IAAI,CAAC,gBAAgB,CAAC,QAAQ,CAAC,EAAE,GAAG,EAAE,SAAS,CAAC,OAAO,EAAE,EAAE,OAAO,CAAC,EAAE;gBACzE,OAAO,IAAI,wBAAa,CAAC,mBAAmB,EAAE,iCAAiC,CAAC,CAAA;aAChF;SACD;QAED,MAAM,YAAY,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,mBAAmB,CAAC,SAAS,EAAE,SAAS,CAAC,WAAW,EAAE,UAAU,CAAC,CAAA;QAE/G,OAAO,IAAI,qBAAU,CAAC,IAAI,YAAY,CAAC,SAAS,EAAE,YAAY,CAAC,CAAC,CAAA;IACjE,CAAC;IAED,KAAK,CAAC,kBAAkB,CACvB,SAA0B,EAC1B,gBAAwC,EACxC,UAAmB,EACnB,QAA+C;QAE/C,MAAM,SAAS,GAAG,MAAM,SAAS,CAAC,YAAY,CAAC,KAAK,CAAC,qBAAW,CAAC,kBAAkB,CAAC,gBAAgB,CAAC,CAAC,CAAA;QAEtG,IAAI,SAAS,KAAK,IAAI,EAAE;YACvB,IAAI,gBAAgB,CAAC,IAAI,KAAK,OAAO,EAAE;gBACtC,OAAO,IAAI,wBAAa,CAAC,eAAe,EAAE,qBAAqB,gBAAgB,CAAC,KAAK,YAAY,CAAC,CAAA;aAElG;iBAAM,IAAI,gBAAgB,CAAC,IAAI,KAAK,IAAI,EAAE;gBAC1C,OAAO,IAAI,wBAAa,CAAC,mBAAmB,EAAE,kBAAkB,gBAAgB,CAAC,EAAE,YAAY,CAAC,CAAA;aAChG;YAED,MAAM,IAAI,oCAAuB,EAAE,CAAA;SACnC;QAED,IAAI,SAAS,CAAC,WAAW,KAAK,IAAI,EAAE;YACnC,OAAO,IAAI,wBAAa,CAAC,iBAAiB,EAAE,kBAAkB,SAAS,CAAC,EAAE,cAAc,CAAC,CAAA;SACzF;QAED,MAAM,CAAA,QAAQ,aAAR,QAAQ,uBAAR,QAAQ,CAAG,SAAS,CAAC,CAAA,CAAA;QAE3B,MAAM,YAAY,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,mBAAmB,CAAC,SAAS,EAAE,SAAS,CAAC,WAAW,EAAE,UAAU,CAAC,CAAA;QAC/G,OAAO,IAAI,qBAAU,CAAC,IAAI,YAAY,CAAC,SAAS,EAAE,YAAY,CAAC,CAAC,CAAA;IACjE,CAAC;CACD;AAYQ,sCAAa;AAVtB,MAAa,YAAY;IACxB,YACiB,MAAiB,EACjB,KAAa;QADb,WAAM,GAAN,MAAM,CAAW;QACjB,UAAK,GAAL,KAAK,CAAQ;IAC3B,CAAC;CACJ;AALD,oCAKC"}

package/dist/src/model/service/SignUpManager.js

@@ -1,36 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.SignUpResult = exports.SignUpManager = void 0;
-const commands_1 = require("../commands");
-const authorization_1 = require("../authorization");
-const password_1 = require("../utils/password");
-const Response_1 = require("../utils/Response");
-class SignUpManager {
-    constructor(emailValidator) {
-        this.emailValidator = emailValidator;
-    }
-    async signUp(dbContext, { email, password, roles = [] }) {
-        const validationError = await this.emailValidator.validateEmail(dbContext, email);
-        if (validationError !== null) {
-            return validationError;
-        }
-        const plainPassword = password.getPlain();
-        const weakPassword = plainPassword ? (0, password_1.getPasswordWeaknessMessage)(plainPassword) : null;
-        if (weakPassword) {
-            return new Response_1.ResponseError('TOO_WEAK', weakPassword);
-        }
-        const person = await dbContext.transaction(async (db) => {
-            const identityId = await db.commandBus.execute(new commands_1.CreateIdentityCommand([...roles, authorization_1.TenantRole.PERSON]));
-            return await db.commandBus.execute(new commands_1.CreatePersonCommand({ identityId, email, password }));
-        });
-        return new Response_1.ResponseOk(new SignUpResult(person));
-    }
-}
-exports.SignUpManager = SignUpManager;
-class SignUpResult {
-    constructor(person) {
-        this.person = person;
-    }
-}
-exports.SignUpResult = SignUpResult;
-//# sourceMappingURL=SignUpManager.js.map

package/dist/src/model/service/SignUpManager.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"SignUpManager.js","sourceRoot":"","sources":["../../../../src/model/service/SignUpManager.ts"],"names":[],"mappings":";;;AAAA,0CAAwE;AAGxE,oDAA6C;AAC7C,gDAA8D;AAC9D,gDAAuE;AAYvE,MAAa,aAAa;IACzB,YACkB,cAA8B;QAA9B,mBAAc,GAAd,cAAc,CAAgB;IAEhD,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,SAA0B,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,KAAK,GAAG,EAAE,EAAc;QACnF,MAAM,eAAe,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,aAAa,CAAC,SAAS,EAAE,KAAK,CAAC,CAAA;QACjF,IAAI,eAAe,KAAK,IAAI,EAAE;YAC7B,OAAO,eAAe,CAAA;SACtB;QACD,MAAM,aAAa,GAAG,QAAQ,CAAC,QAAQ,EAAE,CAAA;QACzC,MAAM,YAAY,GAAG,aAAa,CAAC,CAAC,CAAC,IAAA,qCAA0B,EAAC,aAAa,CAAC,CAAC,CAAC,CAAC,IAAI,CAAA;QACrF,IAAI,YAAY,EAAE;YACjB,OAAO,IAAI,wBAAa,CAAC,UAAU,EAAE,YAAY,CAAC,CAAA;SAClD;QACD,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,WAAW,CAAC,KAAK,EAAC,EAAE,EAAC,EAAE;YACrD,MAAM,UAAU,GAAG,MAAM,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC,IAAI,gCAAqB,CAAC,CAAC,GAAG,KAAK,EAAE,0BAAU,CAAC,MAAM,CAAC,CAAC,CAAC,CAAA;YACxG,OAAO,MAAM,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC,IAAI,8BAAmB,CAAC,EAAE,UAAU,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAA;QAC7F,CAAC,CAAC,CAAA;QACF,OAAO,IAAI,qBAAU,CAAC,IAAI,YAAY,CAAC,MAAM,CAAC,CAAC,CAAA;IAChD,CAAC;CACD;AAtBD,sCAsBC;AAED,MAAa,YAAY;IACxB,YAA4B,MAAgC;QAAhC,WAAM,GAAN,MAAM,CAA0B;IAAG,CAAC;CAChE;AAFD,oCAEC"}

package/dist/src/model/service/apiKey/ApiKeyManager.js

@@ -1,72 +0,0 @@
-"use strict";
-var __importDefault = (this && this.__importDefault) || function (mod) {
-    return (mod && mod.__esModule) ? mod : { "default": mod };
-};
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.VerifyResult = exports.ApiKeyManager = void 0;
-const commands_1 = require("../../commands");
-const Response_1 = require("../../utils/Response");
-const node_assert_1 = __importDefault(require("node:assert"));
-const queries_1 = require("../../queries");
-class ApiKeyManager {
-    constructor(apiKeyService) {
-        this.apiKeyService = apiKeyService;
-    }
-    async verifyAndProlong(dbContext, readDbContext, token) {
-        const apiKeyRow = await readDbContext.queryHandler.fetch(new queries_1.ApiKeyByTokenQuery(token));
-        if (apiKeyRow === null) {
-            return new Response_1.ResponseError("not_found" /* VerifyErrorCode.NOT_FOUND */, 'API key was not found');
-        }
-        if (apiKeyRow.disabled_at !== null) {
-            return new Response_1.ResponseError("disabled" /* VerifyErrorCode.DISABLED */, `API key was disabled at ${apiKeyRow.disabled_at.toISOString()}`);
-        }
-        const now = new Date();
-        if (apiKeyRow.expires_at !== null && apiKeyRow.expires_at <= now) {
-            return new Response_1.ResponseError("disabled" /* VerifyErrorCode.DISABLED */, `API key expired at ${apiKeyRow.expires_at.toISOString()}`);
-        }
-        setImmediate(async () => {
-            await dbContext.commandBus.execute(new commands_1.ProlongApiKeyCommand(apiKeyRow.id, apiKeyRow.type, apiKeyRow.expiration, apiKeyRow.expires_at));
-        });
-        return new Response_1.ResponseOk(new VerifyResult(apiKeyRow.identity_id, apiKeyRow.id, apiKeyRow.roles, apiKeyRow.person_id));
-    }
-    async createSessionApiKey(dbContext, identityId, expiration) {
-        const command = new commands_1.CreateApiKeyCommand({ type: "session" /* ApiKey.Type.SESSION */, identityId, expiration });
-        const token = (await dbContext.commandBus.execute(command)).token;
-        (0, node_assert_1.default)(token !== undefined);
-        return token;
-    }
-    async findApiKey(dbContext, apiKeyId) {
-        return await dbContext.queryHandler.fetch(new queries_1.ApiKeyByIdQuery(apiKeyId));
-    }
-    async disableOneOffApiKey(dbContext, apiKeyId) {
-        await dbContext.commandBus.execute(new commands_1.DisableOneOffApiKeyCommand(apiKeyId));
-    }
-    async disableApiKey(dbContext, apiKeyId) {
-        return await dbContext.commandBus.execute(new commands_1.DisableApiKeyCommand(apiKeyId));
-    }
-    async disableIdentityApiKeys(dbContext, identityId) {
-        await dbContext.commandBus.execute(new commands_1.DisableIdentityApiKeysCommand(identityId));
-    }
-    async createGlobalPermanentApiKey(dbContext, description, roles, tokenHash) {
-        return await dbContext.transaction(async (db) => {
-            return await this.apiKeyService.createPermanentApiKey(db, description, roles, tokenHash);
-        });
-    }
-    async createProjectPermanentApiKey(dbContext, projectId, memberships, description, tokenHash) {
-        return await dbContext.transaction(async (db) => {
-            return await this.apiKeyService.createProjectPermanentApiKey(db, projectId, memberships, description, tokenHash);
-        });
-    }
-}
-exports.ApiKeyManager = ApiKeyManager;
-class VerifyResult {
-    constructor(identityId, apiKeyId, roles, personId) {
-        this.identityId = identityId;
-        this.apiKeyId = apiKeyId;
-        this.roles = roles;
-        this.personId = personId;
-        this.valid = true;
-    }
-}
-exports.VerifyResult = VerifyResult;
-//# sourceMappingURL=ApiKeyManager.js.map

package/dist/src/model/service/apiKey/ApiKeyManager.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"ApiKeyManager.js","sourceRoot":"","sources":["../../../../../src/model/service/apiKey/ApiKeyManager.ts"],"names":[],"mappings":";;;;;;AAAA,6CAMuB;AAGvB,mDAA0E;AAG1E,8DAAgC;AAEhC,2CAA8E;AAE9E,MAAa,aAAa;IACzB,YACkB,aAA4B;QAA5B,kBAAa,GAAb,aAAa,CAAe;IAC3C,CAAC;IAEJ,KAAK,CAAC,gBAAgB,CACrB,SAA0B,EAC1B,aAA8B,EAC9B,KAAa;QAEb,MAAM,SAAS,GAAG,MAAM,aAAa,CAAC,YAAY,CAAC,KAAK,CAAC,IAAI,4BAAkB,CAAC,KAAK,CAAC,CAAC,CAAA;QACvF,IAAI,SAAS,KAAK,IAAI,EAAE;YACvB,OAAO,IAAI,wBAAa,8CAA4B,uBAAuB,CAAC,CAAA;SAC5E;QAED,IAAI,SAAS,CAAC,WAAW,KAAK,IAAI,EAAE;YACnC,OAAO,IAAI,wBAAa,4CAEvB,2BAA2B,SAAS,CAAC,WAAW,CAAC,WAAW,EAAE,EAAE,CAChE,CAAA;SACD;QAED,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAA;QACtB,IAAI,SAAS,CAAC,UAAU,KAAK,IAAI,IAAI,SAAS,CAAC,UAAU,IAAI,GAAG,EAAE;YACjE,OAAO,IAAI,wBAAa,4CAA2B,sBAAsB,SAAS,CAAC,UAAU,CAAC,WAAW,EAAE,EAAE,CAAC,CAAA;SAC9G;QAED,YAAY,CAAC,KAAK,IAAI,EAAE;YACvB,MAAM,SAAS,CAAC,UAAU,CAAC,OAAO,CACjC,IAAI,+BAAoB,CACvB,SAAS,CAAC,EAAE,EACZ,SAAS,CAAC,IAAI,EACd,SAAS,CAAC,UAAU,EACpB,SAAS,CAAC,UAAU,CACpB,CACD,CAAA;QACF,CAAC,CAAC,CAAA;QAEF,OAAO,IAAI,qBAAU,CAAC,IAAI,YAAY,CAAC,SAAS,CAAC,WAAW,EAAE,SAAS,CAAC,EAAE,EAAE,SAAS,CAAC,KAAK,EAAE,SAAS,CAAC,SAAS,CAAC,CAAC,CAAA;IACnH,CAAC;IAED,KAAK,CAAC,mBAAmB,CAAC,SAA0B,EAAE,UAAkB,EAAE,UAAmB;QAC5F,MAAM,OAAO,GAAG,IAAI,8BAAmB,CAAC,EAAE,IAAI,qCAAqB,EAAE,UAAU,EAAE,UAAU,EAAE,CAAC,CAAA;QAC9F,MAAM,KAAK,GAAG,CAAC,MAAM,SAAS,CAAC,UAAU,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAA;QACjE,IAAA,qBAAM,EAAC,KAAK,KAAK,SAAS,CAAC,CAAA;QAC3B,OAAO,KAAK,CAAA;IACb,CAAC;IAGD,KAAK,CAAC,UAAU,CAAC,SAA0B,EAAE,QAAgB;QAC5D,OAAO,MAAM,SAAS,CAAC,YAAY,CAAC,KAAK,CACxC,IAAI,yBAAe,CAAC,QAAQ,CAAC,CAC7B,CAAA;IACF,CAAC;IAED,KAAK,CAAC,mBAAmB,CAAC,SAA0B,EAAE,QAAgB;QACrE,MAAM,SAAS,CAAC,UAAU,CAAC,OAAO,CAAC,IAAI,qCAA0B,CAAC,QAAQ,CAAC,CAAC,CAAA;IAC7E,CAAC;IAED,KAAK,CAAC,aAAa,CAAC,SAA0B,EAAE,QAAgB;QAC/D,OAAO,MAAM,SAAS,CAAC,UAAU,CAAC,OAAO,CAAC,IAAI,+BAAoB,CAAC,QAAQ,CAAC,CAAC,CAAA;IAC9E,CAAC;IAED,KAAK,CAAC,sBAAsB,CAAC,SAA0B,EAAE,UAAkB;QAC1E,MAAM,SAAS,CAAC,UAAU,CAAC,OAAO,CAAC,IAAI,wCAA6B,CAAC,UAAU,CAAC,CAAC,CAAA;IAClF,CAAC;IAED,KAAK,CAAC,2BAA2B,CAChC,SAA0B,EAC1B,WAAmB,EACnB,KAAwB,EACxB,SAAqB;QAErB,OAAO,MAAM,SAAS,CAAC,WAAW,CAAC,KAAK,EAAC,EAAE,EAAC,EAAE;YAC7C,OAAO,MAAM,IAAI,CAAC,aAAa,CAAC,qBAAqB,CAAC,EAAE,EAAE,WAAW,EAAE,KAAK,EAAE,SAAS,CAAC,CAAA;QACzF,CAAC,CAAC,CAAA;IACH,CAAC;IAED,KAAK,CAAC,4BAA4B,CACjC,SAA0B,EAC1B,SAAiB,EACjB,WAAsC,EACtC,WAAmB,EACnB,SAAqB;QAErB,OAAO,MAAM,SAAS,CAAC,WAAW,CAAC,KAAK,EAAC,EAAE,EAAC,EAAE;YAC7C,OAAO,MAAM,IAAI,CAAC,aAAa,CAAC,4BAA4B,CAAC,EAAE,EAAE,SAAS,EAAE,WAAW,EAAE,WAAW,EAAE,SAAS,CAAC,CAAA;QACjH,CAAC,CAAC,CAAA;IACH,CAAC;CAED;AA1FD,sCA0FC;AAID,MAAa,YAAY;IAGxB,YACiB,UAAkB,EAClB,QAAgB,EAChB,KAAe,EACf,QAAuB;QAHvB,eAAU,GAAV,UAAU,CAAQ;QAClB,aAAQ,GAAR,QAAQ,CAAQ;QAChB,UAAK,GAAL,KAAK,CAAU;QACf,aAAQ,GAAR,QAAQ,CAAe;QAN/B,UAAK,GAAG,IAAI,CAAA;IAOlB,CAAC;CACJ;AATD,oCASC"}

package/dist/src/model/service/apiKey/ApiKeyService.js

@@ -1,41 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.CreateApiKeyResult = exports.ApiKeyService = void 0;
-const commands_1 = require("../../commands");
-const membershipUtils_1 = require("../membershipUtils");
-const exceptions_1 = require("../../../exceptions");
-const Response_1 = require("../../utils/Response");
-class ApiKeyService {
-    async createPermanentApiKey(db, description, roles = [], tokenHash) {
-        const identityId = await db.commandBus.execute(new commands_1.CreateIdentityCommand(roles, description));
-        const apiKeyResult = await db.commandBus.execute(new commands_1.CreateApiKeyCommand({ type: "permanent" /* ApiKey.Type.PERMANENT */, identityId, tokenHash }));
-        return new Response_1.ResponseOk(new CreateApiKeyResult({ id: identityId, description }, apiKeyResult));
-    }
-    async createProjectPermanentApiKey(db, projectId, memberships, description, tokenHash) {
-        const response = await this.createPermanentApiKey(db, description, [], tokenHash);
-        const addMemberResult = await db.commandBus.execute(new commands_1.AddProjectMemberCommand(projectId, response.result.identity.id, (0, membershipUtils_1.createSetMembershipVariables)(memberships)));
-        if (!addMemberResult.ok) {
-            throw new exceptions_1.ImplementationException();
-        }
-        return response;
-    }
-}
-exports.ApiKeyService = ApiKeyService;
-class CreateApiKeyResult {
-    constructor(identity, apiKey) {
-        this.identity = identity;
-        this.apiKey = apiKey;
-    }
-    toApiKeyWithToken() {
-        return {
-            id: this.apiKey.id,
-            token: this.apiKey.token,
-            identity: {
-                ...this.identity,
-                projects: [],
-            },
-        };
-    }
-}
-exports.CreateApiKeyResult = CreateApiKeyResult;
-//# sourceMappingURL=ApiKeyService.js.map

package/dist/src/model/service/apiKey/ApiKeyService.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"ApiKeyService.js","sourceRoot":"","sources":["../../../../../src/model/service/apiKey/ApiKeyService.ts"],"names":[],"mappings":";;;AACA,6CAAoG;AAEpG,wDAAiE;AACjE,oDAA6D;AAC7D,mDAA2D;AAI3D,MAAa,aAAa;IACzB,KAAK,CAAC,qBAAqB,CAC1B,EAAmB,EACnB,WAAmB,EACnB,QAA2B,EAAE,EAC7B,SAAqB;QAErB,MAAM,UAAU,GAAG,MAAM,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC,IAAI,gCAAqB,CAAC,KAAK,EAAE,WAAW,CAAC,CAAC,CAAA;QAC7F,MAAM,YAAY,GAAG,MAAM,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC,IAAI,8BAAmB,CAAC,EAAE,IAAI,yCAAuB,EAAE,UAAU,EAAE,SAAS,EAAE,CAAC,CAAC,CAAA;QAEjI,OAAO,IAAI,qBAAU,CAAC,IAAI,kBAAkB,CAAC,EAAE,EAAE,EAAE,UAAU,EAAE,WAAW,EAAE,EAAE,YAAY,CAAC,CAAC,CAAA;IAC7F,CAAC;IAED,KAAK,CAAC,4BAA4B,CACjC,EAAmB,EACnB,SAAiB,EACjB,WAAsC,EACtC,WAAmB,EACnB,SAAqB;QAErB,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,qBAAqB,CAAC,EAAE,EAAE,WAAW,EAAE,EAAE,EAAE,SAAS,CAAC,CAAA;QAEjF,MAAM,eAAe,GAAG,MAAM,EAAE,CAAC,UAAU,CAAC,OAAO,CAClD,IAAI,kCAAuB,CAAC,SAAS,EAAE,QAAQ,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,EAAE,IAAA,8CAA4B,EAAC,WAAW,CAAC,CAAC,CAC9G,CAAA;QACD,IAAI,CAAC,eAAe,CAAC,EAAE,EAAE;YACxB,MAAM,IAAI,oCAAuB,EAAE,CAAA;SACnC;QACD,OAAO,QAAQ,CAAA;IAChB,CAAC;CACD;AA9BD,sCA8BC;AAKD,MAAa,kBAAkB;IAC9B,YAA4B,QAA4C,EAAkB,MAAsC;QAApG,aAAQ,GAAR,QAAQ,CAAoC;QAAkB,WAAM,GAAN,MAAM,CAAgC;IAChI,CAAC;IAED,iBAAiB;QAChB,OAAO;YACN,EAAE,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE;YAClB,KAAK,EAAE,IAAI,CAAC,MAAM,CAAC,KAAK;YACxB,QAAQ,EAAE;gBACT,GAAG,IAAI,CAAC,QAAQ;gBAChB,QAAQ,EAAE,EAAE;aACZ;SACD,CAAA;IACF,CAAC;CACD;AAdD,gDAcC"}

package/dist/src/model/service/apiKey/index.js

@@ -1,19 +0,0 @@
-"use strict";
-var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    var desc = Object.getOwnPropertyDescriptor(m, k);
-    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
-      desc = { enumerable: true, get: function() { return m[k]; } };
-    }
-    Object.defineProperty(o, k2, desc);
-}) : (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    o[k2] = m[k];
-}));
-var __exportStar = (this && this.__exportStar) || function(m, exports) {
-    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
-};
-Object.defineProperty(exports, "__esModule", { value: true });
-__exportStar(require("./ApiKeyManager"), exports);
-__exportStar(require("./ApiKeyService"), exports);
-//# sourceMappingURL=index.js.map

package/dist/src/model/service/apiKey/index.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../../src/model/service/apiKey/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,kDAA+B;AAC/B,kDAA+B"}

package/dist/src/model/service/idp/IDPHandlerRegistry.js

@@ -1,25 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.IDPHandlerRegistry = void 0;
-const IdentityProviderNotFoundError_1 = require("./IdentityProviderNotFoundError");
-class IDPHandlerRegistry {
-    constructor() {
-        this.providers = {};
-    }
-    registerHandler(type, provider) {
-        this.providers[type] = provider;
-    }
-    getHandlerOrNull(type) {
-        var _a;
-        return (_a = this.providers[type]) !== null && _a !== void 0 ? _a : null;
-    }
-    getHandler(type) {
-        const provider = this.providers[type];
-        if (!provider) {
-            throw new IdentityProviderNotFoundError_1.IdentityProviderNotFoundError(`Identity provider handler ${type} not found`);
-        }
-        return provider;
-    }
-}
-exports.IDPHandlerRegistry = IDPHandlerRegistry;
-//# sourceMappingURL=IDPHandlerRegistry.js.map

package/dist/src/model/service/idp/IDPHandlerRegistry.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"IDPHandlerRegistry.js","sourceRoot":"","sources":["../../../../../src/model/service/idp/IDPHandlerRegistry.ts"],"names":[],"mappings":";;;AACA,mFAA+E;AAE/E,MAAa,kBAAkB;IAA/B;QACS,cAAS,GAAiD,EAAE,CAAA;IAiBrE,CAAC;IAfO,eAAe,CAAC,IAAY,EAAE,QAAsC;QAC1E,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,GAAG,QAAQ,CAAA;IAChC,CAAC;IAEM,gBAAgB,CAAC,IAAY;;QACnC,OAAO,MAAA,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,mCAAI,IAAI,CAAA;IACpC,CAAC;IAEM,UAAU,CAAC,IAAY;QAC7B,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAA;QACrC,IAAI,CAAC,QAAQ,EAAE;YACd,MAAM,IAAI,6DAA6B,CAAC,6BAA6B,IAAI,YAAY,CAAC,CAAA;SACtF;QACD,OAAO,QAAQ,CAAA;IAChB,CAAC;CACD;AAlBD,gDAkBC"}

package/dist/src/model/service/idp/IDPManager.js

@@ -1,120 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.IDPManager = void 0;
-const Response_1 = require("../../utils/Response");
-const queries_1 = require("../../queries");
-const CreateIdpCommand_1 = require("../../commands/idp/CreateIdpCommand");
-const IdentityProviderNotFoundError_1 = require("./IdentityProviderNotFoundError");
-const InvalidIDPConfigurationError_1 = require("./InvalidIDPConfigurationError");
-const DisableIdpCommand_1 = require("../../commands/idp/DisableIdpCommand");
-const EnableIdpCommand_1 = require("../../commands/idp/EnableIdpCommand");
-const UpdateIdpCommand_1 = require("../../commands/idp/UpdateIdpCommand");
-class IDPManager {
-    constructor(idpRegistry) {
-        this.idpRegistry = idpRegistry;
-    }
-    async addIDP(db, idp) {
-        return await db.transaction(async (db) => {
-            try {
-                const providerService = this.idpRegistry.getHandler(idp.type);
-                providerService.validateConfiguration(idp.configuration);
-            }
-            catch (e) {
-                if (e instanceof IdentityProviderNotFoundError_1.IdentityProviderNotFoundError) {
-                    return new Response_1.ResponseError('UNKNOWN_TYPE', `IDP type ${idp.type} not found`);
-                }
-                if (e instanceof InvalidIDPConfigurationError_1.InvalidIDPConfigurationError) {
-                    return new Response_1.ResponseError('INVALID_CONFIGURATION', `Invalid IDP configuration: ${e.message}`);
-                }
-                throw e;
-            }
-            const existing = await db.queryHandler.fetch(new queries_1.IdentityProviderBySlugQuery(idp.slug));
-            if (existing) {
-                return new Response_1.ResponseError('ALREADY_EXISTS', `IDP with slug ${idp.slug} already exists`);
-            }
-            await db.commandBus.execute(new CreateIdpCommand_1.CreateIdpCommand(idp));
-            return new Response_1.ResponseOk(null);
-        });
-    }
-    async disableIDP(db, slug) {
-        return await db.transaction(async (db) => {
-            const existing = await db.queryHandler.fetch(new queries_1.IdentityProviderBySlugQuery(slug));
-            if (!existing) {
-                return new Response_1.ResponseError('NOT_FOUND', `IDP ${slug} not found`);
-            }
-            if (!existing.disabledAt) {
-                await db.commandBus.execute(new DisableIdpCommand_1.DisableIdpCommand(existing.id));
-            }
-            return new Response_1.ResponseOk(null);
-        });
-    }
-    async enableIDP(db, slug) {
-        return await db.transaction(async (db) => {
-            const existing = await db.queryHandler.fetch(new queries_1.IdentityProviderBySlugQuery(slug));
-            if (!existing) {
-                return new Response_1.ResponseError('NOT_FOUND', `IDP ${slug} not found`);
-            }
-            if (existing.disabledAt) {
-                await db.commandBus.execute(new EnableIdpCommand_1.EnableIdpCommand(existing.id));
-            }
-            return new Response_1.ResponseOk(null);
-        });
-    }
-    async updateIDP(db, slug, data, mergeConfiguration) {
-        return await db.transaction(async (db) => {
-            var _a;
-            const existing = await db.queryHandler.fetch(new queries_1.IdentityProviderBySlugQuery(slug));
-            if (!existing) {
-                return new Response_1.ResponseError('NOT_FOUND', `IDP ${slug} not found`);
-            }
-            const newConfiguration = (() => {
-                if (!data.configuration) {
-                    return existing.configuration;
-                }
-                if (!mergeConfiguration) {
-                    return data.configuration;
-                }
-                const newConfiguration = { ...existing.configuration };
-                for (const [key, value] of Object.entries(data.configuration)) {
-                    if (value === null) {
-                        delete newConfiguration[key];
-                    }
-                    else {
-                        newConfiguration[key] = value;
-                    }
-                }
-                return newConfiguration;
-            })();
-            try {
-                const type = (_a = data.type) !== null && _a !== void 0 ? _a : existing.type;
-                const providerService = this.idpRegistry.getHandler(type);
-                if (data.configuration !== undefined || type !== existing.type) {
-                    providerService.validateConfiguration(newConfiguration);
-                }
-            }
-            catch (e) {
-                if (e instanceof InvalidIDPConfigurationError_1.InvalidIDPConfigurationError) {
-                    return new Response_1.ResponseError('INVALID_CONFIGURATION', `Invalid IDP configuration: ${e.message}`);
-                }
-                throw e;
-            }
-            await db.commandBus.execute(new UpdateIdpCommand_1.UpdateIdpCommand(existing.id, {
-                ...data,
-                configuration: data.configuration ? newConfiguration : undefined,
-            }));
-            return new Response_1.ResponseOk(null);
-        });
-    }
-    async listIDP(db) {
-        const result = await db.queryHandler.fetch(new queries_1.IdentityProvidersQuery());
-        return result.map(it => {
-            const providerService = this.idpRegistry.getHandlerOrNull(it.type);
-            const configuration = (providerService === null || providerService === void 0 ? void 0 : providerService.getPublicConfiguration)
-                ? providerService.getPublicConfiguration(it.configuration)
-                : it.configuration;
-            return { ...it, configuration };
-        });
-    }
-}
-exports.IDPManager = IDPManager;
-//# sourceMappingURL=IDPManager.js.map

package/dist/src/model/service/idp/IDPManager.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"IDPManager.js","sourceRoot":"","sources":["../../../../../src/model/service/idp/IDPManager.ts"],"names":[],"mappings":";;;AAAA,mDAA0E;AAI1E,2CAAmF;AACnF,0EAAsE;AAEtE,mFAA+E;AAC/E,iFAA6E;AAC7E,4EAAwE;AACxE,0EAAsE;AACtE,0EAAqF;AAGrF,MAAa,UAAU;IACtB,YACkB,WAA+B;QAA/B,gBAAW,GAAX,WAAW,CAAoB;IAEjD,CAAC;IAEM,KAAK,CAAC,MAAM,CAAC,EAAmB,EAAE,GAAyB;QACjE,OAAO,MAAM,EAAE,CAAC,WAAW,CAAC,KAAK,EAAE,EAAE,EAAgC,EAAE;YACtE,IAAI;gBACH,MAAM,eAAe,GAAG,IAAI,CAAC,WAAW,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,CAAA;gBAC7D,eAAe,CAAC,qBAAqB,CAAC,GAAG,CAAC,aAAa,CAAC,CAAA;aACxD;YAAC,OAAO,CAAC,EAAE;gBACX,IAAI,CAAC,YAAY,6DAA6B,EAAE;oBAC/C,OAAO,IAAI,wBAAa,CAAC,cAAc,EAAE,YAAY,GAAG,CAAC,IAAI,YAAY,CAAC,CAAA;iBAC1E;gBACD,IAAI,CAAC,YAAY,2DAA4B,EAAE;oBAC9C,OAAO,IAAI,wBAAa,CAAC,uBAAuB,EAAE,8BAA8B,CAAC,CAAC,OAAO,EAAE,CAAC,CAAA;iBAC5F;gBACD,MAAM,CAAC,CAAA;aACP;YAED,MAAM,QAAQ,GAAG,MAAM,EAAE,CAAC,YAAY,CAAC,KAAK,CAAC,IAAI,qCAA2B,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAA;YACvF,IAAI,QAAQ,EAAE;gBACb,OAAO,IAAI,wBAAa,CAAC,gBAAgB,EAAE,iBAAiB,GAAG,CAAC,IAAI,iBAAiB,CAAC,CAAA;aACtF;YACD,MAAM,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC,IAAI,mCAAgB,CAAC,GAAG,CAAC,CAAC,CAAA;YACtD,OAAO,IAAI,qBAAU,CAAC,IAAI,CAAC,CAAA;QAC5B,CAAC,CAAC,CAAA;IACH,CAAC;IAEM,KAAK,CAAC,UAAU,CAAC,EAAmB,EAAE,IAAY;QACxD,OAAO,MAAM,EAAE,CAAC,WAAW,CAAC,KAAK,EAAC,EAAE,EAAC,EAAE;YACtC,MAAM,QAAQ,GAAG,MAAM,EAAE,CAAC,YAAY,CAAC,KAAK,CAAC,IAAI,qCAA2B,CAAC,IAAI,CAAC,CAAC,CAAA;YACnF,IAAI,CAAC,QAAQ,EAAE;gBACd,OAAO,IAAI,wBAAa,CAAC,WAAW,EAAE,OAAO,IAAI,YAAY,CAAC,CAAA;aAC9D;YACD,IAAI,CAAC,QAAQ,CAAC,UAAU,EAAE;gBACzB,MAAM,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC,IAAI,qCAAiB,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAA;aAC/D;YACD,OAAO,IAAI,qBAAU,CAAC,IAAI,CAAC,CAAA;QAC5B,CAAC,CAAC,CAAA;IACH,CAAC;IAGM,KAAK,CAAC,SAAS,CAAC,EAAmB,EAAE,IAAY;QACvD,OAAO,MAAM,EAAE,CAAC,WAAW,CAAC,KAAK,EAAC,EAAE,EAAC,EAAE;YACtC,MAAM,QAAQ,GAAG,MAAM,EAAE,CAAC,YAAY,CAAC,KAAK,CAAC,IAAI,qCAA2B,CAAC,IAAI,CAAC,CAAC,CAAA;YACnF,IAAI,CAAC,QAAQ,EAAE;gBACd,OAAO,IAAI,wBAAa,CAAC,WAAW,EAAE,OAAO,IAAI,YAAY,CAAC,CAAA;aAC9D;YACD,IAAI,QAAQ,CAAC,UAAU,EAAE;gBACxB,MAAM,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC,IAAI,mCAAgB,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAA;aAC9D;YACD,OAAO,IAAI,qBAAU,CAAC,IAAI,CAAC,CAAA;QAC5B,CAAC,CAAC,CAAA;IACH,CAAC;IAEM,KAAK,CAAC,SAAS,CAAC,EAAmB,EAAE,IAAY,EAAE,IAAmB,EAAE,kBAA2B;QACzG,OAAO,MAAM,EAAE,CAAC,WAAW,CAAC,KAAK,EAAC,EAAE,EAAC,EAAE;;YACtC,MAAM,QAAQ,GAAG,MAAM,EAAE,CAAC,YAAY,CAAC,KAAK,CAAC,IAAI,qCAA2B,CAAC,IAAI,CAAC,CAAC,CAAA;YACnF,IAAI,CAAC,QAAQ,EAAE;gBACd,OAAO,IAAI,wBAAa,CAAC,WAAW,EAAE,OAAO,IAAI,YAAY,CAAC,CAAA;aAC9D;YAED,MAAM,gBAAgB,GAAG,CAAC,GAAG,EAAE;gBAC9B,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE;oBACxB,OAAO,QAAQ,CAAC,aAAa,CAAA;iBAC7B;gBACD,IAAI,CAAC,kBAAkB,EAAE;oBACxB,OAAO,IAAI,CAAC,aAAa,CAAA;iBACzB;gBAED,MAAM,gBAAgB,GAAG,EAAE,GAAG,QAAQ,CAAC,aAAa,EAAE,CAAA;gBACtD,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,aAAa,CAAC,EAAE;oBAC9D,IAAI,KAAK,KAAK,IAAI,EAAE;wBACnB,OAAO,gBAAgB,CAAC,GAAG,CAAC,CAAA;qBAC5B;yBAAM;wBACN,gBAAgB,CAAC,GAAG,CAAC,GAAG,KAAK,CAAA;qBAC7B;iBACD;gBAED,OAAO,gBAAgB,CAAA;YACxB,CAAC,CAAC,EAAE,CAAA;YAEJ,IAAI;gBACH,MAAM,IAAI,GAAG,MAAA,IAAI,CAAC,IAAI,mCAAI,QAAQ,CAAC,IAAI,CAAA;gBACvC,MAAM,eAAe,GAAG,IAAI,CAAC,WAAW,CAAC,UAAU,CAAC,IAAI,CAAC,CAAA;gBACzD,IAAI,IAAI,CAAC,aAAa,KAAK,SAAS,IAAI,IAAI,KAAK,QAAQ,CAAC,IAAI,EAAE;oBAC/D,eAAe,CAAC,qBAAqB,CAAC,gBAAgB,CAAC,CAAA;iBACvD;aACD;YAAC,OAAO,CAAC,EAAE;gBACX,IAAI,CAAC,YAAY,2DAA4B,EAAE;oBAC9C,OAAO,IAAI,wBAAa,CAAC,uBAAuB,EAAE,8BAA8B,CAAC,CAAC,OAAO,EAAE,CAAC,CAAA;iBAC5F;gBACD,MAAM,CAAC,CAAA;aACP;YAED,MAAM,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC,IAAI,mCAAgB,CAAC,QAAQ,CAAC,EAAE,EAAE;gBAC7D,GAAG,IAAI;gBACP,aAAa,EAAE,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC,SAAS;aAChE,CAAC,CAAC,CAAA;YAEH,OAAO,IAAI,qBAAU,CAAC,IAAI,CAAC,CAAA;QAC5B,CAAC,CAAC,CAAA;IACH,CAAC;IAEM,KAAK,CAAC,OAAO,CAAC,EAAmB;QACvC,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC,YAAY,CAAC,KAAK,CAAC,IAAI,gCAAsB,EAAE,CAAC,CAAA;QACxE,OAAO,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE;YACtB,MAAM,eAAe,GAAG,IAAI,CAAC,WAAW,CAAC,gBAAgB,CAAC,EAAE,CAAC,IAAI,CAAC,CAAA;YAClE,MAAM,aAAa,GAAG,CAAA,eAAe,aAAf,eAAe,uBAAf,eAAe,CAAE,sBAAsB;gBAC5D,CAAC,CAAC,eAAe,CAAC,sBAAsB,CAAC,EAAE,CAAC,aAAa,CAAC;gBAC1D,CAAC,CAAC,EAAE,CAAC,aAAa,CAAA;YAEnB,OAAO,EAAE,GAAG,EAAE,EAAE,aAAa,EAAE,CAAA;QAChC,CAAC,CAAC,CAAA;IACH,CAAC;CACD;AArHD,gCAqHC"}

package/dist/src/model/service/idp/IDPResponseError.js

@@ -1,10 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.IDPResponseError = void 0;
-class IDPResponseError extends Error {
-    constructor(message) {
-        super(message);
-    }
-}
-exports.IDPResponseError = IDPResponseError;
-//# sourceMappingURL=IDPResponseError.js.map

package/dist/src/model/service/idp/IDPResponseError.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"IDPResponseError.js","sourceRoot":"","sources":["../../../../../src/model/service/idp/IDPResponseError.ts"],"names":[],"mappings":";;;AAAA,MAAa,gBAAiB,SAAQ,KAAK;IAC1C,YAAY,OAAe;QAC1B,KAAK,CAAC,OAAO,CAAC,CAAA;IACf,CAAC;CACD;AAJD,4CAIC"}

package/dist/src/model/service/idp/IDPValidationError.js

@@ -1,10 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.IDPValidationError = void 0;
-class IDPValidationError extends Error {
-    constructor(message) {
-        super(message);
-    }
-}
-exports.IDPValidationError = IDPValidationError;
-//# sourceMappingURL=IDPValidationError.js.map

package/dist/src/model/service/idp/IDPValidationError.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"IDPValidationError.js","sourceRoot":"","sources":["../../../../../src/model/service/idp/IDPValidationError.ts"],"names":[],"mappings":";;;AAAA,MAAa,kBAAmB,SAAQ,KAAK;IAC5C,YAAY,OAAe;QAC1B,KAAK,CAAC,OAAO,CAAC,CAAA;IACf,CAAC;CACD;AAJD,gDAIC"}

package/dist/src/model/service/idp/IdentityProviderHandler.js

@@ -1,3 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-//# sourceMappingURL=IdentityProviderHandler.js.map

package/dist/src/model/service/idp/IdentityProviderHandler.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"IdentityProviderHandler.js","sourceRoot":"","sources":["../../../../../src/model/service/idp/IdentityProviderHandler.ts"],"names":[],"mappings":""}

package/dist/src/model/service/idp/IdentityProviderNotFoundError.js

@@ -1,10 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.IdentityProviderNotFoundError = void 0;
-class IdentityProviderNotFoundError extends Error {
-    constructor(message) {
-        super(message);
-    }
-}
-exports.IdentityProviderNotFoundError = IdentityProviderNotFoundError;
-//# sourceMappingURL=IdentityProviderNotFoundError.js.map

package/dist/src/model/service/idp/IdentityProviderNotFoundError.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"IdentityProviderNotFoundError.js","sourceRoot":"","sources":["../../../../../src/model/service/idp/IdentityProviderNotFoundError.ts"],"names":[],"mappings":";;;AAAA,MAAa,6BAA8B,SAAQ,KAAK;IACvD,YAAY,OAAe;QAC1B,KAAK,CAAC,OAAO,CAAC,CAAA;IACf,CAAC;CACD;AAJD,sEAIC"}

package/dist/src/model/service/idp/InvalidIDPConfigurationError.js

@@ -1,10 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.InvalidIDPConfigurationError = void 0;
-class InvalidIDPConfigurationError extends Error {
-    constructor(message) {
-        super(message);
-    }
-}
-exports.InvalidIDPConfigurationError = InvalidIDPConfigurationError;
-//# sourceMappingURL=InvalidIDPConfigurationError.js.map

package/dist/src/model/service/idp/InvalidIDPConfigurationError.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"InvalidIDPConfigurationError.js","sourceRoot":"","sources":["../../../../../src/model/service/idp/InvalidIDPConfigurationError.ts"],"names":[],"mappings":";;;AAAA,MAAa,4BAA6B,SAAQ,KAAK;IACtD,YAAY,OAAe;QAC1B,KAAK,CAAC,OAAO,CAAC,CAAA;IACf,CAAC;CACD;AAJD,oEAIC"}

package/dist/src/model/service/idp/index.js

@@ -1,27 +0,0 @@
-"use strict";
-var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    var desc = Object.getOwnPropertyDescriptor(m, k);
-    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
-      desc = { enumerable: true, get: function() { return m[k]; } };
-    }
-    Object.defineProperty(o, k2, desc);
-}) : (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    o[k2] = m[k];
-}));
-var __exportStar = (this && this.__exportStar) || function(m, exports) {
-    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
-};
-Object.defineProperty(exports, "__esModule", { value: true });
-__exportStar(require("./IdentityProviderHandler"), exports);
-__exportStar(require("./IdentityProviderNotFoundError"), exports);
-__exportStar(require("./IDPHandlerRegistry"), exports);
-__exportStar(require("./IDPManager"), exports);
-__exportStar(require("./IDPResponseError"), exports);
-__exportStar(require("./IDPValidationError"), exports);
-__exportStar(require("./InvalidIDPConfigurationError"), exports);
-__exportStar(require("./providers/AppleProvider"), exports);
-__exportStar(require("./providers/OIDCProvider"), exports);
-__exportStar(require("./providers/FacebookProvider"), exports);
-//# sourceMappingURL=index.js.map

package/dist/src/model/service/idp/index.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../../src/model/service/idp/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,4DAAyC;AACzC,kEAA+C;AAC/C,uDAAoC;AACpC,+CAA4B;AAC5B,qDAAkC;AAClC,uDAAoC;AACpC,iEAA8C;AAC9C,4DAAyC;AACzC,2DAAwC;AACxC,+DAA4C"}

package/dist/src/model/service/idp/providers/AppleProvider.js

@@ -1,84 +0,0 @@
-"use strict";
-var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    var desc = Object.getOwnPropertyDescriptor(m, k);
-    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
-      desc = { enumerable: true, get: function() { return m[k]; } };
-    }
-    Object.defineProperty(o, k2, desc);
-}) : (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    o[k2] = m[k];
-}));
-var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
-    Object.defineProperty(o, "default", { enumerable: true, value: v });
-}) : function(o, v) {
-    o["default"] = v;
-});
-var __importStar = (this && this.__importStar) || function (mod) {
-    if (mod && mod.__esModule) return mod;
-    var result = {};
-    if (mod != null) for (var k in mod) if (k !== "default" && Object.prototype.hasOwnProperty.call(mod, k)) __createBinding(result, mod, k);
-    __setModuleDefault(result, mod);
-    return result;
-};
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.AppleProvider = exports.AppleConfiguration = void 0;
-const Typesafe = __importStar(require("@contember/typesafe"));
-const OIDCTypes_1 = require("./OIDCTypes");
-const helpers_1 = require("./helpers");
-const IDPValidationError_1 = require("../IDPValidationError");
-const InvalidIDPConfigurationError_1 = require("../InvalidIDPConfigurationError");
-const OIDCHelpers_1 = require("./OIDCHelpers");
-const openid_client_1 = require("openid-client");
-const jose_1 = require("jose");
-exports.AppleConfiguration = Typesafe.intersection(Typesafe.object({
-    keyId: Typesafe.string,
-    teamId: Typesafe.string,
-    clientId: Typesafe.string,
-    privateKey: Typesafe.string,
-}), OIDCTypes_1.OIDCConfigurationOptions);
-const APPLE_OIDC_CONFIGURATION_ENDPOINT = 'https://appleid.apple.com/.well-known/openid-configuration';
-class AppleProvider {
-    constructor() {
-        this.validateConfiguration = (0, helpers_1.catchTypesafe)(exports.AppleConfiguration, InvalidIDPConfigurationError_1.InvalidIDPConfigurationError);
-    }
-    async initAuth(configuration, data) {
-        const initData = (0, helpers_1.catchTypesafe)(OIDCTypes_1.OIDCInitData, IDPValidationError_1.IDPValidationError)(data);
-        const client = await this.createOIDCClient(configuration);
-        return await (0, OIDCHelpers_1.initOIDCAuth)(client, {
-            claims: configuration.claims,
-            ...initData,
-        });
-    }
-    async processResponse(configuration, data) {
-        const responseData = (0, helpers_1.catchTypesafe)(OIDCTypes_1.OIDCResponseData, IDPValidationError_1.IDPValidationError)(data);
-        const client = await this.createOIDCClient(configuration);
-        return await (0, OIDCHelpers_1.handleOIDCResponse)(client, responseData);
-    }
-    getPublicConfiguration({ privateKey, ...config }) {
-        return config;
-    }
-    async createOIDCClient(configuration) {
-        var _a, _b;
-        (_a = this.issuer) !== null && _a !== void 0 ? _a : (this.issuer = await openid_client_1.Issuer.discover(APPLE_OIDC_CONFIGURATION_ENDPOINT));
-        const privateKey = await (0, jose_1.importPKCS8)(configuration.privateKey, 'ES256');
-        const jwt = await new jose_1.SignJWT({})
-            .setProtectedHeader({ alg: 'ES256', typ: 'JWT', kid: configuration.keyId })
-            .setIssuedAt()
-            .setIssuer(configuration.teamId)
-            .setAudience('https://appleid.apple.com')
-            .setSubject(configuration.clientId)
-            .setExpirationTime('10m')
-            .sign(privateKey);
-        return new this.issuer.Client({
-            client_id: configuration.clientId,
-            client_secret: jwt,
-            response_types: [configuration.responseType || 'code'],
-        }, undefined, {
-            additionalAuthorizedParties: [...((_b = configuration.additionalAuthorizedParties) !== null && _b !== void 0 ? _b : [])],
-        });
-    }
-}
-exports.AppleProvider = AppleProvider;
-//# sourceMappingURL=AppleProvider.js.map

package/dist/src/model/service/idp/providers/AppleProvider.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"AppleProvider.js","sourceRoot":"","sources":["../../../../../../src/model/service/idp/providers/AppleProvider.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,8DAA+C;AAE/C,2CAA0H;AAC1H,uCAAyC;AACzC,8DAA0D;AAC1D,kFAA8E;AAC9E,+CAAgE;AAChE,iDAA8C;AAC9C,+BAA2C;AAE9B,QAAA,kBAAkB,GAAG,QAAQ,CAAC,YAAY,CACtD,QAAQ,CAAC,MAAM,CAAC;IACf,KAAK,EAAE,QAAQ,CAAC,MAAM;IACtB,MAAM,EAAE,QAAQ,CAAC,MAAM;IACvB,QAAQ,EAAE,QAAQ,CAAC,MAAM;IACzB,UAAU,EAAE,QAAQ,CAAC,MAAM;CAC3B,CAAC,EACF,oCAAwB,CACxB,CAAA;AAID,MAAM,iCAAiC,GAAG,4DAA4D,CAAA;AAEtG,MAAa,aAAa;IAA1B;QAGC,0BAAqB,GAAG,IAAA,uBAAa,EAAC,0BAAkB,EAAE,2DAA4B,CAAC,CAAA;IA8CxF,CAAC;IA5CO,KAAK,CAAC,QAAQ,CAAC,aAAiC,EAAE,IAAa;QACrE,MAAM,QAAQ,GAAG,IAAA,uBAAa,EAAC,wBAAY,EAAE,uCAAkB,CAAC,CAAC,IAAI,CAAC,CAAA;QACtE,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAAC,aAAa,CAAC,CAAA;QACzD,OAAO,MAAM,IAAA,0BAAY,EAAC,MAAM,EAAE;YACjC,MAAM,EAAE,aAAa,CAAC,MAAM;YAC5B,GAAG,QAAQ;SACX,CAAC,CAAA;IACH,CAAC;IAEM,KAAK,CAAC,eAAe,CAAC,aAAiC,EAAE,IAAa;QAC5E,MAAM,YAAY,GAAG,IAAA,uBAAa,EAAC,4BAAgB,EAAE,uCAAkB,CAAC,CAAC,IAAI,CAAC,CAAA;QAC9E,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAAC,aAAa,CAAC,CAAA;QACzD,OAAO,MAAM,IAAA,gCAAkB,EAAC,MAAM,EAAE,YAAY,CAAC,CAAA;IACtD,CAAC;IAED,sBAAsB,CAAC,EAAE,UAAU,EAAE,GAAG,MAAM,EAAsB;QACnE,OAAO,MAAM,CAAA;IACd,CAAC;IAEO,KAAK,CAAC,gBAAgB,CAAC,aAAiC;;QAC/D,MAAA,IAAI,CAAC,MAAM,oCAAX,IAAI,CAAC,MAAM,GAAK,MAAM,sBAAM,CAAC,QAAQ,CAAC,iCAAiC,CAAC,EAAA;QACxE,MAAM,UAAU,GAAG,MAAM,IAAA,kBAAW,EAAC,aAAa,CAAC,UAAU,EAAE,OAAO,CAAC,CAAA;QAEvE,MAAM,GAAG,GAAG,MAAM,IAAI,cAAO,CAAC,EAAE,CAAC;aAC/B,kBAAkB,CAAC,EAAE,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,KAAK,EAAE,GAAG,EAAE,aAAa,CAAC,KAAK,EAAE,CAAC;aAC1E,WAAW,EAAE;aACb,SAAS,CAAC,aAAa,CAAC,MAAM,CAAC;aAC/B,WAAW,CAAC,2BAA2B,CAAC;aACxC,UAAU,CAAC,aAAa,CAAC,QAAQ,CAAC;aAClC,iBAAiB,CAAC,KAAK,CAAC;aACxB,IAAI,CAAC,UAAU,CAAC,CAAA;QAElB,OAAO,IAAI,IAAI,CAAC,MAAM,CAAC,MAAM,CAC5B;YACC,SAAS,EAAE,aAAa,CAAC,QAAQ;YACjC,aAAa,EAAE,GAAG;YAClB,cAAc,EAAE,CAAC,aAAa,CAAC,YAAY,IAAI,MAAM,CAAC;SACtD,EACD,SAAS,EACT;YACC,2BAA2B,EAAE,CAAC,GAAG,CAAC,MAAA,aAAa,CAAC,2BAA2B,mCAAI,EAAE,CAAC,CAAC;SACnF,CACD,CAAA;IACF,CAAC;CACD;AAjDD,sCAiDC"}