@contember/engine-tenant-api 2.1.0-alpha.3 → 2.1.0-alpha.35

package/dist/production/src/model/service/apiKey/ApiKeyManager.js

@@ -1,104 +0,0 @@
-import { CreateApiKeyCommand } from "../../commands/apiKey/CreateApiKeyCommand.js";
-import { DisableApiKeyCommand } from "../../commands/apiKey/DisableApiKeyCommand.js";
-import { DisableIdentityApiKeysCommand } from "../../commands/apiKey/DisableIdentityApiKeysCommand.js";
-import { DisableOneOffApiKeyCommand } from "../../commands/apiKey/DisableOneOffApiKeyCommand.js";
-import { ProlongApiKeyCommand } from "../../commands/apiKey/ProlongApiKeyCommand.js";
-import "@contember/database";
-import { ResponseError, ResponseOk } from "../../utils/Response.js";
-import "node:crypto";
-import { ApiKey } from "../../type/ApiKey.js";
-import assert from "node:assert";
-import { ApiKeyByTokenQuery, ApiKeyByIdQuery } from "../../queries/apiKey/ApiKeyQuery.js";
-import "../../authorization/PermissionActions.js";
-import "@contember/authorization";
-import "../../authorization/PermissionContext.js";
-import "../../authorization/PermissionsFactory.js";
-import "@contember/schema";
-var __defProp = Object.defineProperty;
-var __defNormalProp = (obj, key, value) => key in obj ? __defProp(obj, key, { enumerable: true, configurable: true, writable: true, value }) : obj[key] = value;
-var __publicField = (obj, key, value) => __defNormalProp(obj, key + "", value);
-class ApiKeyManager {
-  constructor(apiKeyService) {
-    this.apiKeyService = apiKeyService;
-  }
-  async verifyAndProlong(dbContext, readDbContext, token) {
-    const apiKeyRow = await readDbContext.queryHandler.fetch(new ApiKeyByTokenQuery(token));
-    if (apiKeyRow === null) {
-      return new ResponseError("not_found", "API key was not found");
-    }
-    if (apiKeyRow.disabled_at !== null) {
-      return new ResponseError(
-        "disabled",
-        `API key was disabled at ${apiKeyRow.disabled_at.toISOString()}`
-      );
-    }
-    const now = /* @__PURE__ */ new Date();
-    if (apiKeyRow.expires_at !== null && apiKeyRow.expires_at <= now) {
-      return new ResponseError("disabled", `API key expired at ${apiKeyRow.expires_at.toISOString()}`);
-    }
-    setImmediate(async () => {
-      await dbContext.commandBus.execute(
-        new ProlongApiKeyCommand(
-          apiKeyRow.id,
-          apiKeyRow.type,
-          apiKeyRow.expiration,
-          apiKeyRow.expires_at
-        )
-      );
-    });
-    return new ResponseOk(new VerifyResult(apiKeyRow.identity_id, apiKeyRow.id, apiKeyRow.roles, apiKeyRow.person_id));
-  }
-  async createSessionApiKey(dbContext, identityId, expiration) {
-    const command = new CreateApiKeyCommand({ type: ApiKey.Type.SESSION, identityId, expiration });
-    const token = (await dbContext.commandBus.execute(command)).token;
-    assert(token !== void 0);
-    return token;
-  }
-  async findApiKey(dbContext, apiKeyId) {
-    return await dbContext.queryHandler.fetch(
-      new ApiKeyByIdQuery(apiKeyId)
-    );
-  }
-  async disableOneOffApiKey(dbContext, apiKeyId) {
-    await dbContext.commandBus.execute(new DisableOneOffApiKeyCommand(apiKeyId));
-  }
-  async disableApiKey(dbContext, apiKeyId) {
-    return await dbContext.commandBus.execute(new DisableApiKeyCommand(apiKeyId));
-  }
-  async disableIdentityApiKeys(dbContext, identityId) {
-    await dbContext.commandBus.execute(new DisableIdentityApiKeysCommand(identityId));
-  }
-  async createGlobalPermanentApiKey(dbContext, description, roles, tokenHash) {
-    return await dbContext.transaction(async (db) => {
-      return await this.apiKeyService.createPermanentApiKey(db, description, roles, tokenHash);
-    });
-  }
-  async createProjectPermanentApiKey(dbContext, projectId, memberships, description, tokenHash) {
-    return await dbContext.transaction(async (db) => {
-      return await this.apiKeyService.createProjectPermanentApiKey(db, projectId, memberships, description, tokenHash);
-    });
-  }
-}
-class VerifyResult {
-  constructor(identityId, apiKeyId, roles, personId) {
-    this.identityId = identityId;
-    this.apiKeyId = apiKeyId;
-    this.roles = roles;
-    this.personId = personId;
-    __publicField(this, "valid", true);
-  }
-}
-var VerifyErrorCode = /* @__PURE__ */ ((VerifyErrorCode2) => {
-  VerifyErrorCode2["NOT_FOUND"] = "not_found";
-  VerifyErrorCode2["DISABLED"] = "disabled";
-  VerifyErrorCode2["EXPIRED"] = "expired";
-  VerifyErrorCode2["NO_AUTH_HEADER"] = "no_auth_header";
-  VerifyErrorCode2["INVALID_AUTH_HEADER"] = "invalid_auth_header";
-  return VerifyErrorCode2;
-})(VerifyErrorCode || {});
-export {
-  ApiKeyManager,
-  VerifyErrorCode,
-  VerifyResult
-};
-//# sourceMappingURL=ApiKeyManager.js.map

package/dist/production/src/model/service/apiKey/ApiKeyManager.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"ApiKeyManager.js","sources":["../../../../../../../packages/engine-tenant-api/src/model/service/apiKey/ApiKeyManager.ts"],"sourcesContent":["import {\n\tCreateApiKeyCommand,\n\tDisableApiKeyCommand,\n\tDisableIdentityApiKeysCommand,\n\tDisableOneOffApiKeyCommand,\n\tProlongApiKeyCommand,\n} from '../../commands'\nimport { ApiKey } from '../../type'\n\nimport { Response, ResponseError, ResponseOk } from '../../utils/Response'\nimport { DatabaseContext, TokenHash } from '../../utils'\nimport { ApiKeyService, CreateApiKeyResponse } from './ApiKeyService'\nimport assert from 'node:assert'\nimport { Acl } from '@contember/schema'\nimport { ApiKeyByIdQuery, ApiKeyByTokenQuery, ApiKeyRow } from '../../queries'\n\nexport class ApiKeyManager {\n\tconstructor(\n\t\tprivate readonly apiKeyService: ApiKeyService,\n\t) {}\n\n\tasync verifyAndProlong(\n\t\tdbContext: DatabaseContext,\n\t\treadDbContext: DatabaseContext,\n\t\ttoken: string,\n\t): Promise<VerifyResponse> {\n\t\tconst apiKeyRow = await readDbContext.queryHandler.fetch(new ApiKeyByTokenQuery(token))\n\t\tif (apiKeyRow === null) {\n\t\t\treturn new ResponseError(VerifyErrorCode.NOT_FOUND, 'API key was not found')\n\t\t}\n\n\t\tif (apiKeyRow.disabled_at !== null) {\n\t\t\treturn new ResponseError(\n\t\t\t\tVerifyErrorCode.DISABLED,\n\t\t\t\t`API key was disabled at ${apiKeyRow.disabled_at.toISOString()}`,\n\t\t\t)\n\t\t}\n\n\t\tconst now = new Date()\n\t\tif (apiKeyRow.expires_at !== null && apiKeyRow.expires_at <= now) {\n\t\t\treturn new ResponseError(VerifyErrorCode.DISABLED, `API key expired at ${apiKeyRow.expires_at.toISOString()}`)\n\t\t}\n\n\t\tsetImmediate(async () => {\n\t\t\tawait dbContext.commandBus.execute(\n\t\t\t\tnew ProlongApiKeyCommand(\n\t\t\t\t\tapiKeyRow.id,\n\t\t\t\t\tapiKeyRow.type,\n\t\t\t\t\tapiKeyRow.expiration,\n\t\t\t\t\tapiKeyRow.expires_at,\n\t\t\t\t),\n\t\t\t)\n\t\t})\n\n\t\treturn new ResponseOk(new VerifyResult(apiKeyRow.identity_id, apiKeyRow.id, apiKeyRow.roles, apiKeyRow.person_id))\n\t}\n\n\tasync createSessionApiKey(dbContext: DatabaseContext, identityId: string, expiration?: number): Promise<string> {\n\t\tconst command = new CreateApiKeyCommand({ type: ApiKey.Type.SESSION, identityId, expiration })\n\t\tconst token = (await dbContext.commandBus.execute(command)).token\n\t\tassert(token !== undefined)\n\t\treturn token\n\t}\n\n\n\tasync findApiKey(dbContext: DatabaseContext, apiKeyId: string): Promise<ApiKeyRow | null> {\n\t\treturn await dbContext.queryHandler.fetch(\n\t\t\tnew ApiKeyByIdQuery(apiKeyId),\n\t\t)\n\t}\n\n\tasync disableOneOffApiKey(dbContext: DatabaseContext, apiKeyId: string): Promise<void> {\n\t\tawait dbContext.commandBus.execute(new DisableOneOffApiKeyCommand(apiKeyId))\n\t}\n\n\tasync disableApiKey(dbContext: DatabaseContext, apiKeyId: string): Promise<boolean> {\n\t\treturn await dbContext.commandBus.execute(new DisableApiKeyCommand(apiKeyId))\n\t}\n\n\tasync disableIdentityApiKeys(dbContext: DatabaseContext, identityId: string): Promise<void> {\n\t\tawait dbContext.commandBus.execute(new DisableIdentityApiKeysCommand(identityId))\n\t}\n\n\tasync createGlobalPermanentApiKey(\n\t\tdbContext: DatabaseContext,\n\t\tdescription: string,\n\t\troles: readonly string[],\n\t\ttokenHash?: TokenHash,\n\t): Promise<CreateApiKeyResponse> {\n\t\treturn await dbContext.transaction(async db => {\n\t\t\treturn await this.apiKeyService.createPermanentApiKey(db, description, roles, tokenHash)\n\t\t})\n\t}\n\n\tasync createProjectPermanentApiKey(\n\t\tdbContext: DatabaseContext,\n\t\tprojectId: string,\n\t\tmemberships: readonly Acl.Membership[],\n\t\tdescription: string,\n\t\ttokenHash?: TokenHash,\n\t): Promise<CreateApiKeyResponse> {\n\t\treturn await dbContext.transaction(async db => {\n\t\t\treturn await this.apiKeyService.createProjectPermanentApiKey(db, projectId, memberships, description, tokenHash)\n\t\t})\n\t}\n\n}\n\nexport type VerifyResponse = Response<VerifyResult, VerifyErrorCode>\n\nexport class VerifyResult {\n\treadonly valid = true\n\n\tconstructor(\n\t\tpublic readonly identityId: string,\n\t\tpublic readonly apiKeyId: string,\n\t\tpublic readonly roles: string[],\n\t\tpublic readonly personId: string | null,\n\t) {}\n}\n\nexport const enum VerifyErrorCode {\n\tNOT_FOUND = 'not_found',\n\tDISABLED = 'disabled',\n\tEXPIRED = 'expired',\n\tNO_AUTH_HEADER = 'no_auth_header',\n\tINVALID_AUTH_HEADER = 'invalid_auth_header',\n}\n"],"names":["VerifyErrorCode"],"mappings":";;;;;;;;;;;;;;;;;;;AAgBO,MAAM,cAAc;AAAA,EAC1B,YACkB,eAChB;AADgB,SAAA,gBAAA;AAAA,EAAA;AAAA,EAGlB,MAAM,iBACL,WACA,eACA,OAC0B;AACpB,UAAA,YAAY,MAAM,cAAc,aAAa,MAAM,IAAI,mBAAmB,KAAK,CAAC;AACtF,QAAI,cAAc,MAAM;AAChB,aAAA,IAAI,cAAc,aAA2B,uBAAuB;AAAA,IAAA;AAGxE,QAAA,UAAU,gBAAgB,MAAM;AACnC,aAAO,IAAI;AAAA,QACV;AAAA,QACA,2BAA2B,UAAU,YAAY,YAAA,CAAa;AAAA,MAC/D;AAAA,IAAA;AAGK,UAAA,0BAAU,KAAK;AACrB,QAAI,UAAU,eAAe,QAAQ,UAAU,cAAc,KAAK;AAC1D,aAAA,IAAI,cAAc,YAA0B,sBAAsB,UAAU,WAAW,YAAa,CAAA,EAAE;AAAA,IAAA;AAG9G,iBAAa,YAAY;AACxB,YAAM,UAAU,WAAW;AAAA,QAC1B,IAAI;AAAA,UACH,UAAU;AAAA,UACV,UAAU;AAAA,UACV,UAAU;AAAA,UACV,UAAU;AAAA,QAAA;AAAA,MAEZ;AAAA,IAAA,CACA;AAED,WAAO,IAAI,WAAW,IAAI,aAAa,UAAU,aAAa,UAAU,IAAI,UAAU,OAAO,UAAU,SAAS,CAAC;AAAA,EAAA;AAAA,EAGlH,MAAM,oBAAoB,WAA4B,YAAoB,YAAsC;AACzG,UAAA,UAAU,IAAI,oBAAoB,EAAE,MAAM,OAAO,KAAK,SAAS,YAAY,YAAY;AAC7F,UAAM,SAAS,MAAM,UAAU,WAAW,QAAQ,OAAO,GAAG;AAC5D,WAAO,UAAU,MAAS;AACnB,WAAA;AAAA,EAAA;AAAA,EAIR,MAAM,WAAW,WAA4B,UAA6C;AAClF,WAAA,MAAM,UAAU,aAAa;AAAA,MACnC,IAAI,gBAAgB,QAAQ;AAAA,IAC7B;AAAA,EAAA;AAAA,EAGD,MAAM,oBAAoB,WAA4B,UAAiC;AACtF,UAAM,UAAU,WAAW,QAAQ,IAAI,2BAA2B,QAAQ,CAAC;AAAA,EAAA;AAAA,EAG5E,MAAM,cAAc,WAA4B,UAAoC;AACnF,WAAO,MAAM,UAAU,WAAW,QAAQ,IAAI,qBAAqB,QAAQ,CAAC;AAAA,EAAA;AAAA,EAG7E,MAAM,uBAAuB,WAA4B,YAAmC;AAC3F,UAAM,UAAU,WAAW,QAAQ,IAAI,8BAA8B,UAAU,CAAC;AAAA,EAAA;AAAA,EAGjF,MAAM,4BACL,WACA,aACA,OACA,WACgC;AAChC,WAAO,MAAM,UAAU,YAAY,OAAM,OAAM;AAC9C,aAAO,MAAM,KAAK,cAAc,sBAAsB,IAAI,aAAa,OAAO,SAAS;AAAA,IAAA,CACvF;AAAA,EAAA;AAAA,EAGF,MAAM,6BACL,WACA,WACA,aACA,aACA,WACgC;AAChC,WAAO,MAAM,UAAU,YAAY,OAAM,OAAM;AACvC,aAAA,MAAM,KAAK,cAAc,6BAA6B,IAAI,WAAW,aAAa,aAAa,SAAS;AAAA,IAAA,CAC/G;AAAA,EAAA;AAGH;AAIO,MAAM,aAAa;AAAA,EAGzB,YACiB,YACA,UACA,OACA,UACf;AAJe,SAAA,aAAA;AACA,SAAA,WAAA;AACA,SAAA,QAAA;AACA,SAAA,WAAA;AANjB,kBAAA,MAAS,SAAQ,IAAA;AAAA,EAAA;AAQlB;AAEkB,IAAA,oCAAAA,qBAAX;AACNA,mBAAA,WAAY,IAAA;AACZA,mBAAA,UAAW,IAAA;AACXA,mBAAA,SAAU,IAAA;AACVA,mBAAA,gBAAiB,IAAA;AACjBA,mBAAA,qBAAsB,IAAA;AALLA,SAAAA;AAAA,GAAA,mBAAA,CAAA,CAAA;"}

package/dist/production/src/model/service/apiKey/ApiKeyService.cjs

@@ -1,47 +0,0 @@
-"use strict";
-Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
-const CreateApiKeyCommand = require("../../commands/apiKey/CreateApiKeyCommand.cjs");
-require("@contember/database");
-const ApiKey = require("../../type/ApiKey.cjs");
-const CreateIdentityCommand = require("../../commands/identity/CreateIdentityCommand.cjs");
-const AddProjectMemberCommand = require("../../commands/membership/AddProjectMemberCommand.cjs");
-const exceptions = require("../../../exceptions.cjs");
-const Response = require("../../utils/Response.cjs");
-require("node:crypto");
-const membershipUtils = require("../membershipUtils.cjs");
-class ApiKeyService {
-  async createPermanentApiKey(db, description, roles = [], tokenHash) {
-    const identityId = await db.commandBus.execute(new CreateIdentityCommand.CreateIdentityCommand(roles, description));
-    const apiKeyResult = await db.commandBus.execute(new CreateApiKeyCommand.CreateApiKeyCommand({ type: ApiKey.ApiKey.Type.PERMANENT, identityId, tokenHash }));
-    return new Response.ResponseOk(new CreateApiKeyResult({ id: identityId, description }, apiKeyResult));
-  }
-  async createProjectPermanentApiKey(db, projectId, memberships, description, tokenHash) {
-    const response = await this.createPermanentApiKey(db, description, [], tokenHash);
-    const addMemberResult = await db.commandBus.execute(
-      new AddProjectMemberCommand.AddProjectMemberCommand(projectId, response.result.identity.id, membershipUtils.createSetMembershipVariables(memberships))
-    );
-    if (!addMemberResult.ok) {
-      throw new exceptions.ImplementationException();
-    }
-    return response;
-  }
-}
-class CreateApiKeyResult {
-  constructor(identity, apiKey) {
-    this.identity = identity;
-    this.apiKey = apiKey;
-  }
-  toApiKeyWithToken() {
-    return {
-      id: this.apiKey.id,
-      token: this.apiKey.token,
-      identity: {
-        ...this.identity,
-        projects: []
-      }
-    };
-  }
-}
-exports.ApiKeyService = ApiKeyService;
-exports.CreateApiKeyResult = CreateApiKeyResult;
-//# sourceMappingURL=ApiKeyService.cjs.map

package/dist/production/src/model/service/apiKey/ApiKeyService.cjs.map

@@ -1 +0,0 @@
-{"version":3,"file":"ApiKeyService.cjs","sources":["../../../../../../../packages/engine-tenant-api/src/model/service/apiKey/ApiKeyService.ts"],"sourcesContent":["import { DatabaseContext, TokenHash } from '../../utils'\nimport { AddProjectMemberCommand, CreateApiKeyCommand, CreateIdentityCommand } from '../../commands'\nimport { ApiKey } from '../../type'\nimport { createSetMembershipVariables } from '../membershipUtils'\nimport { ImplementationException } from '../../../exceptions'\nimport { Response, ResponseOk } from '../../utils/Response'\nimport { ApiKeyWithToken } from '../../../schema'\nimport { Acl } from '@contember/schema'\n\nexport class ApiKeyService {\n\tasync createPermanentApiKey(\n\t\tdb: DatabaseContext,\n\t\tdescription: string,\n\t\troles: readonly string[] = [],\n\t\ttokenHash?: TokenHash,\n\t) {\n\t\tconst identityId = await db.commandBus.execute(new CreateIdentityCommand(roles, description))\n\t\tconst apiKeyResult = await db.commandBus.execute(new CreateApiKeyCommand({ type: ApiKey.Type.PERMANENT, identityId, tokenHash }))\n\n\t\treturn new ResponseOk(new CreateApiKeyResult({ id: identityId, description }, apiKeyResult))\n\t}\n\n\tasync createProjectPermanentApiKey(\n\t\tdb: DatabaseContext,\n\t\tprojectId: string,\n\t\tmemberships: readonly Acl.Membership[],\n\t\tdescription: string,\n\t\ttokenHash?: TokenHash,\n\t) {\n\t\tconst response = await this.createPermanentApiKey(db, description, [], tokenHash)\n\n\t\tconst addMemberResult = await db.commandBus.execute(\n\t\t\tnew AddProjectMemberCommand(projectId, response.result.identity.id, createSetMembershipVariables(memberships)),\n\t\t)\n\t\tif (!addMemberResult.ok) {\n\t\t\tthrow new ImplementationException()\n\t\t}\n\t\treturn response\n\t}\n}\n\n\nexport type CreateApiKeyResponse = Response<CreateApiKeyResult, never>\n\nexport class CreateApiKeyResult {\n\tconstructor(public readonly identity: {id: string; description?: string}, public readonly apiKey: { id: string; token?: string }) {\n\t}\n\n\ttoApiKeyWithToken(): ApiKeyWithToken {\n\t\treturn {\n\t\t\tid: this.apiKey.id,\n\t\t\ttoken: this.apiKey.token,\n\t\t\tidentity: {\n\t\t\t\t...this.identity,\n\t\t\t\tprojects: [],\n\t\t\t},\n\t\t}\n\t}\n}\n"],"names":["CreateIdentityCommand","CreateApiKeyCommand","ApiKey","ResponseOk","AddProjectMemberCommand","createSetMembershipVariables","ImplementationException"],"mappings":";;;;;;;;;;;AASO,MAAM,cAAc;AAAA,EAC1B,MAAM,sBACL,IACA,aACA,QAA2B,CAAA,GAC3B,WACC;AACK,UAAA,aAAa,MAAM,GAAG,WAAW,QAAQ,IAAIA,sBAAA,sBAAsB,OAAO,WAAW,CAAC;AAC5F,UAAM,eAAe,MAAM,GAAG,WAAW,QAAQ,IAAIC,oBAAA,oBAAoB,EAAE,MAAMC,OAAAA,OAAO,KAAK,WAAW,YAAY,UAAW,CAAA,CAAC;AAEzH,WAAA,IAAIC,SAAAA,WAAW,IAAI,mBAAmB,EAAE,IAAI,YAAY,eAAe,YAAY,CAAC;AAAA,EAAA;AAAA,EAG5F,MAAM,6BACL,IACA,WACA,aACA,aACA,WACC;AACK,UAAA,WAAW,MAAM,KAAK,sBAAsB,IAAI,aAAa,IAAI,SAAS;AAE1E,UAAA,kBAAkB,MAAM,GAAG,WAAW;AAAA,MAC3C,IAAIC,gDAAwB,WAAW,SAAS,OAAO,SAAS,IAAIC,gBAA6B,6BAAA,WAAW,CAAC;AAAA,IAC9G;AACI,QAAA,CAAC,gBAAgB,IAAI;AACxB,YAAM,IAAIC,WAAAA,wBAAwB;AAAA,IAAA;AAE5B,WAAA;AAAA,EAAA;AAET;AAKO,MAAM,mBAAmB;AAAA,EAC/B,YAA4B,UAA8D,QAAwC;AAAtG,SAAA,WAAA;AAA8D,SAAA,SAAA;AAAA,EAAA;AAAA,EAG1F,oBAAqC;AAC7B,WAAA;AAAA,MACN,IAAI,KAAK,OAAO;AAAA,MAChB,OAAO,KAAK,OAAO;AAAA,MACnB,UAAU;AAAA,QACT,GAAG,KAAK;AAAA,QACR,UAAU,CAAA;AAAA,MAAC;AAAA,IAEb;AAAA,EAAA;AAEF;;;"}

package/dist/production/src/model/service/apiKey/ApiKeyService.js

@@ -1,47 +0,0 @@
-import { CreateApiKeyCommand } from "../../commands/apiKey/CreateApiKeyCommand.js";
-import "@contember/database";
-import { ApiKey } from "../../type/ApiKey.js";
-import { CreateIdentityCommand } from "../../commands/identity/CreateIdentityCommand.js";
-import { AddProjectMemberCommand } from "../../commands/membership/AddProjectMemberCommand.js";
-import { ImplementationException } from "../../../exceptions.js";
-import { ResponseOk } from "../../utils/Response.js";
-import "node:crypto";
-import { createSetMembershipVariables } from "../membershipUtils.js";
-class ApiKeyService {
-  async createPermanentApiKey(db, description, roles = [], tokenHash) {
-    const identityId = await db.commandBus.execute(new CreateIdentityCommand(roles, description));
-    const apiKeyResult = await db.commandBus.execute(new CreateApiKeyCommand({ type: ApiKey.Type.PERMANENT, identityId, tokenHash }));
-    return new ResponseOk(new CreateApiKeyResult({ id: identityId, description }, apiKeyResult));
-  }
-  async createProjectPermanentApiKey(db, projectId, memberships, description, tokenHash) {
-    const response = await this.createPermanentApiKey(db, description, [], tokenHash);
-    const addMemberResult = await db.commandBus.execute(
-      new AddProjectMemberCommand(projectId, response.result.identity.id, createSetMembershipVariables(memberships))
-    );
-    if (!addMemberResult.ok) {
-      throw new ImplementationException();
-    }
-    return response;
-  }
-}
-class CreateApiKeyResult {
-  constructor(identity, apiKey) {
-    this.identity = identity;
-    this.apiKey = apiKey;
-  }
-  toApiKeyWithToken() {
-    return {
-      id: this.apiKey.id,
-      token: this.apiKey.token,
-      identity: {
-        ...this.identity,
-        projects: []
-      }
-    };
-  }
-}
-export {
-  ApiKeyService,
-  CreateApiKeyResult
-};
-//# sourceMappingURL=ApiKeyService.js.map

package/dist/production/src/model/service/apiKey/ApiKeyService.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"ApiKeyService.js","sources":["../../../../../../../packages/engine-tenant-api/src/model/service/apiKey/ApiKeyService.ts"],"sourcesContent":["import { DatabaseContext, TokenHash } from '../../utils'\nimport { AddProjectMemberCommand, CreateApiKeyCommand, CreateIdentityCommand } from '../../commands'\nimport { ApiKey } from '../../type'\nimport { createSetMembershipVariables } from '../membershipUtils'\nimport { ImplementationException } from '../../../exceptions'\nimport { Response, ResponseOk } from '../../utils/Response'\nimport { ApiKeyWithToken } from '../../../schema'\nimport { Acl } from '@contember/schema'\n\nexport class ApiKeyService {\n\tasync createPermanentApiKey(\n\t\tdb: DatabaseContext,\n\t\tdescription: string,\n\t\troles: readonly string[] = [],\n\t\ttokenHash?: TokenHash,\n\t) {\n\t\tconst identityId = await db.commandBus.execute(new CreateIdentityCommand(roles, description))\n\t\tconst apiKeyResult = await db.commandBus.execute(new CreateApiKeyCommand({ type: ApiKey.Type.PERMANENT, identityId, tokenHash }))\n\n\t\treturn new ResponseOk(new CreateApiKeyResult({ id: identityId, description }, apiKeyResult))\n\t}\n\n\tasync createProjectPermanentApiKey(\n\t\tdb: DatabaseContext,\n\t\tprojectId: string,\n\t\tmemberships: readonly Acl.Membership[],\n\t\tdescription: string,\n\t\ttokenHash?: TokenHash,\n\t) {\n\t\tconst response = await this.createPermanentApiKey(db, description, [], tokenHash)\n\n\t\tconst addMemberResult = await db.commandBus.execute(\n\t\t\tnew AddProjectMemberCommand(projectId, response.result.identity.id, createSetMembershipVariables(memberships)),\n\t\t)\n\t\tif (!addMemberResult.ok) {\n\t\t\tthrow new ImplementationException()\n\t\t}\n\t\treturn response\n\t}\n}\n\n\nexport type CreateApiKeyResponse = Response<CreateApiKeyResult, never>\n\nexport class CreateApiKeyResult {\n\tconstructor(public readonly identity: {id: string; description?: string}, public readonly apiKey: { id: string; token?: string }) {\n\t}\n\n\ttoApiKeyWithToken(): ApiKeyWithToken {\n\t\treturn {\n\t\t\tid: this.apiKey.id,\n\t\t\ttoken: this.apiKey.token,\n\t\t\tidentity: {\n\t\t\t\t...this.identity,\n\t\t\t\tprojects: [],\n\t\t\t},\n\t\t}\n\t}\n}\n"],"names":[],"mappings":";;;;;;;;;AASO,MAAM,cAAc;AAAA,EAC1B,MAAM,sBACL,IACA,aACA,QAA2B,CAAA,GAC3B,WACC;AACK,UAAA,aAAa,MAAM,GAAG,WAAW,QAAQ,IAAI,sBAAsB,OAAO,WAAW,CAAC;AAC5F,UAAM,eAAe,MAAM,GAAG,WAAW,QAAQ,IAAI,oBAAoB,EAAE,MAAM,OAAO,KAAK,WAAW,YAAY,UAAW,CAAA,CAAC;AAEzH,WAAA,IAAI,WAAW,IAAI,mBAAmB,EAAE,IAAI,YAAY,eAAe,YAAY,CAAC;AAAA,EAAA;AAAA,EAG5F,MAAM,6BACL,IACA,WACA,aACA,aACA,WACC;AACK,UAAA,WAAW,MAAM,KAAK,sBAAsB,IAAI,aAAa,IAAI,SAAS;AAE1E,UAAA,kBAAkB,MAAM,GAAG,WAAW;AAAA,MAC3C,IAAI,wBAAwB,WAAW,SAAS,OAAO,SAAS,IAAI,6BAA6B,WAAW,CAAC;AAAA,IAC9G;AACI,QAAA,CAAC,gBAAgB,IAAI;AACxB,YAAM,IAAI,wBAAwB;AAAA,IAAA;AAE5B,WAAA;AAAA,EAAA;AAET;AAKO,MAAM,mBAAmB;AAAA,EAC/B,YAA4B,UAA8D,QAAwC;AAAtG,SAAA,WAAA;AAA8D,SAAA,SAAA;AAAA,EAAA;AAAA,EAG1F,oBAAqC;AAC7B,WAAA;AAAA,MACN,IAAI,KAAK,OAAO;AAAA,MAChB,OAAO,KAAK,OAAO;AAAA,MACnB,UAAU;AAAA,QACT,GAAG,KAAK;AAAA,QACR,UAAU,CAAA;AAAA,MAAC;AAAA,IAEb;AAAA,EAAA;AAEF;"}

package/dist/production/src/model/service/helpers/getPreferredProject.cjs

@@ -1,13 +0,0 @@
-"use strict";
-Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
-const getPreferredProject = (projects, preferredProjectSlug) => {
-  if (projects.length === 1) {
-    return projects[0];
-  }
-  if (preferredProjectSlug) {
-    return projects.find((it) => it.slug === preferredProjectSlug) || null;
-  }
-  return null;
-};
-exports.getPreferredProject = getPreferredProject;
-//# sourceMappingURL=getPreferredProject.cjs.map

package/dist/production/src/model/service/helpers/getPreferredProject.cjs.map

@@ -1 +0,0 @@
-{"version":3,"file":"getPreferredProject.cjs","sources":["../../../../../../../packages/engine-tenant-api/src/model/service/helpers/getPreferredProject.ts"],"sourcesContent":["import { Project } from '../../type'\n\nexport const getPreferredProject = (projects: Project[], preferredProjectSlug: string | null): Project | null => {\n\tif (projects.length === 1) {\n\t\treturn projects[0]\n\t}\n\tif (preferredProjectSlug) {\n\t\treturn projects.find(it => it.slug === preferredProjectSlug) || null\n\t}\n\treturn null\n}\n"],"names":[],"mappings":";;AAEa,MAAA,sBAAsB,CAAC,UAAqB,yBAAwD;AAC5G,MAAA,SAAS,WAAW,GAAG;AAC1B,WAAO,SAAS,CAAC;AAAA,EAAA;AAElB,MAAI,sBAAsB;AACzB,WAAO,SAAS,KAAK,CAAA,OAAM,GAAG,SAAS,oBAAoB,KAAK;AAAA,EAAA;AAE1D,SAAA;AACR;;"}

package/dist/production/src/model/service/helpers/getPreferredProject.js

@@ -1,13 +0,0 @@
-const getPreferredProject = (projects, preferredProjectSlug) => {
-  if (projects.length === 1) {
-    return projects[0];
-  }
-  if (preferredProjectSlug) {
-    return projects.find((it) => it.slug === preferredProjectSlug) || null;
-  }
-  return null;
-};
-export {
-  getPreferredProject
-};
-//# sourceMappingURL=getPreferredProject.js.map

package/dist/production/src/model/service/helpers/getPreferredProject.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"getPreferredProject.js","sources":["../../../../../../../packages/engine-tenant-api/src/model/service/helpers/getPreferredProject.ts"],"sourcesContent":["import { Project } from '../../type'\n\nexport const getPreferredProject = (projects: Project[], preferredProjectSlug: string | null): Project | null => {\n\tif (projects.length === 1) {\n\t\treturn projects[0]\n\t}\n\tif (preferredProjectSlug) {\n\t\treturn projects.find(it => it.slug === preferredProjectSlug) || null\n\t}\n\treturn null\n}\n"],"names":[],"mappings":"AAEa,MAAA,sBAAsB,CAAC,UAAqB,yBAAwD;AAC5G,MAAA,SAAS,WAAW,GAAG;AAC1B,WAAO,SAAS,CAAC;AAAA,EAAA;AAElB,MAAI,sBAAsB;AACzB,WAAO,SAAS,KAAK,CAAA,OAAM,GAAG,SAAS,oBAAoB,KAAK;AAAA,EAAA;AAE1D,SAAA;AACR;"}

package/dist/production/src/model/service/idp/IDPHandlerRegistry.cjs

@@ -1,26 +0,0 @@
-"use strict";
-Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
-const IdentityProviderNotFoundError = require("./IdentityProviderNotFoundError.cjs");
-var __defProp = Object.defineProperty;
-var __defNormalProp = (obj, key, value) => key in obj ? __defProp(obj, key, { enumerable: true, configurable: true, writable: true, value }) : obj[key] = value;
-var __publicField = (obj, key, value) => __defNormalProp(obj, key + "", value);
-class IDPHandlerRegistry {
-  constructor() {
-    __publicField(this, "providers", {});
-  }
-  registerHandler(type, provider) {
-    this.providers[type] = provider;
-  }
-  getHandlerOrNull(type) {
-    return this.providers[type] ?? null;
-  }
-  getHandler(type) {
-    const provider = this.providers[type];
-    if (!provider) {
-      throw new IdentityProviderNotFoundError.IdentityProviderNotFoundError(`Identity provider handler ${type} not found`);
-    }
-    return provider;
-  }
-}
-exports.IDPHandlerRegistry = IDPHandlerRegistry;
-//# sourceMappingURL=IDPHandlerRegistry.cjs.map

package/dist/production/src/model/service/idp/IDPHandlerRegistry.cjs.map

@@ -1 +0,0 @@
-{"version":3,"file":"IDPHandlerRegistry.cjs","sources":["../../../../../../../packages/engine-tenant-api/src/model/service/idp/IDPHandlerRegistry.ts"],"sourcesContent":["import { IdentityProviderHandler } from './IdentityProviderHandler'\nimport { IdentityProviderNotFoundError } from './IdentityProviderNotFoundError'\n\nexport class IDPHandlerRegistry {\n\tprivate providers: Record<string, IdentityProviderHandler<any>> = {}\n\n\tpublic registerHandler(type: string, provider: IdentityProviderHandler<any>): void {\n\t\tthis.providers[type] = provider\n\t}\n\n\tpublic getHandlerOrNull(type: string): IdentityProviderHandler<{}> | null {\n\t\treturn this.providers[type] ?? null\n\t}\n\n\tpublic getHandler(type: string): IdentityProviderHandler<{}> {\n\t\tconst provider = this.providers[type]\n\t\tif (!provider) {\n\t\t\tthrow new IdentityProviderNotFoundError(`Identity provider handler ${type} not found`)\n\t\t}\n\t\treturn provider\n\t}\n}\n"],"names":["IdentityProviderNotFoundError"],"mappings":";;;;;;AAGO,MAAM,mBAAmB;AAAA,EAAzB,cAAA;AACN,kBAAA,MAAQ,aAA0D,EAAC;AAAA,EAAA;AAAA,EAE5D,gBAAgB,MAAc,UAA8C;AAC7E,SAAA,UAAU,IAAI,IAAI;AAAA,EAAA;AAAA,EAGjB,iBAAiB,MAAkD;AAClE,WAAA,KAAK,UAAU,IAAI,KAAK;AAAA,EAAA;AAAA,EAGzB,WAAW,MAA2C;AACtD,UAAA,WAAW,KAAK,UAAU,IAAI;AACpC,QAAI,CAAC,UAAU;AACd,YAAM,IAAIA,8BAAAA,8BAA8B,6BAA6B,IAAI,YAAY;AAAA,IAAA;AAE/E,WAAA;AAAA,EAAA;AAET;;"}

package/dist/production/src/model/service/idp/IDPHandlerRegistry.js

@@ -1,26 +0,0 @@
-import { IdentityProviderNotFoundError } from "./IdentityProviderNotFoundError.js";
-var __defProp = Object.defineProperty;
-var __defNormalProp = (obj, key, value) => key in obj ? __defProp(obj, key, { enumerable: true, configurable: true, writable: true, value }) : obj[key] = value;
-var __publicField = (obj, key, value) => __defNormalProp(obj, key + "", value);
-class IDPHandlerRegistry {
-  constructor() {
-    __publicField(this, "providers", {});
-  }
-  registerHandler(type, provider) {
-    this.providers[type] = provider;
-  }
-  getHandlerOrNull(type) {
-    return this.providers[type] ?? null;
-  }
-  getHandler(type) {
-    const provider = this.providers[type];
-    if (!provider) {
-      throw new IdentityProviderNotFoundError(`Identity provider handler ${type} not found`);
-    }
-    return provider;
-  }
-}
-export {
-  IDPHandlerRegistry
-};
-//# sourceMappingURL=IDPHandlerRegistry.js.map

package/dist/production/src/model/service/idp/IDPHandlerRegistry.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"IDPHandlerRegistry.js","sources":["../../../../../../../packages/engine-tenant-api/src/model/service/idp/IDPHandlerRegistry.ts"],"sourcesContent":["import { IdentityProviderHandler } from './IdentityProviderHandler'\nimport { IdentityProviderNotFoundError } from './IdentityProviderNotFoundError'\n\nexport class IDPHandlerRegistry {\n\tprivate providers: Record<string, IdentityProviderHandler<any>> = {}\n\n\tpublic registerHandler(type: string, provider: IdentityProviderHandler<any>): void {\n\t\tthis.providers[type] = provider\n\t}\n\n\tpublic getHandlerOrNull(type: string): IdentityProviderHandler<{}> | null {\n\t\treturn this.providers[type] ?? null\n\t}\n\n\tpublic getHandler(type: string): IdentityProviderHandler<{}> {\n\t\tconst provider = this.providers[type]\n\t\tif (!provider) {\n\t\t\tthrow new IdentityProviderNotFoundError(`Identity provider handler ${type} not found`)\n\t\t}\n\t\treturn provider\n\t}\n}\n"],"names":[],"mappings":";;;;AAGO,MAAM,mBAAmB;AAAA,EAAzB,cAAA;AACN,kBAAA,MAAQ,aAA0D,EAAC;AAAA,EAAA;AAAA,EAE5D,gBAAgB,MAAc,UAA8C;AAC7E,SAAA,UAAU,IAAI,IAAI;AAAA,EAAA;AAAA,EAGjB,iBAAiB,MAAkD;AAClE,WAAA,KAAK,UAAU,IAAI,KAAK;AAAA,EAAA;AAAA,EAGzB,WAAW,MAA2C;AACtD,UAAA,WAAW,KAAK,UAAU,IAAI;AACpC,QAAI,CAAC,UAAU;AACd,YAAM,IAAI,8BAA8B,6BAA6B,IAAI,YAAY;AAAA,IAAA;AAE/E,WAAA;AAAA,EAAA;AAET;"}

package/dist/production/src/model/service/idp/IDPManager.cjs

@@ -1,121 +0,0 @@
-"use strict";
-Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
-const Response = require("../../utils/Response.cjs");
-require("../../queries/apiKey/ApiKeyQuery.cjs");
-require("@contember/database");
-const IdentityProviderBySlugQuery = require("../../queries/idp/IdentityProviderBySlugQuery.cjs");
-const IdentityProvidersQuery = require("../../queries/idp/IdentityProvidersQuery.cjs");
-require("../../authorization/PermissionActions.cjs");
-require("@contember/authorization");
-require("../../authorization/PermissionContext.cjs");
-require("../../authorization/PermissionsFactory.cjs");
-require("@contember/schema");
-const CreateIdpCommand = require("../../commands/idp/CreateIdpCommand.cjs");
-const IdentityProviderNotFoundError = require("./IdentityProviderNotFoundError.cjs");
-const InvalidIDPConfigurationError = require("./InvalidIDPConfigurationError.cjs");
-const DisableIdpCommand = require("../../commands/idp/DisableIdpCommand.cjs");
-const EnableIdpCommand = require("../../commands/idp/EnableIdpCommand.cjs");
-const UpdateIdpCommand = require("../../commands/idp/UpdateIdpCommand.cjs");
-class IDPManager {
-  constructor(idpRegistry) {
-    this.idpRegistry = idpRegistry;
-  }
-  async addIDP(db, idp) {
-    return await db.transaction(async (db2) => {
-      try {
-        const providerService = this.idpRegistry.getHandler(idp.type);
-        providerService.validateConfiguration(idp.configuration);
-      } catch (e) {
-        if (e instanceof IdentityProviderNotFoundError.IdentityProviderNotFoundError) {
-          return new Response.ResponseError("UNKNOWN_TYPE", `IDP type ${idp.type} not found`);
-        }
-        if (e instanceof InvalidIDPConfigurationError.InvalidIDPConfigurationError) {
-          return new Response.ResponseError("INVALID_CONFIGURATION", `Invalid IDP configuration: ${e.message}`);
-        }
-        throw e;
-      }
-      const existing = await db2.queryHandler.fetch(new IdentityProviderBySlugQuery.IdentityProviderBySlugQuery(idp.slug));
-      if (existing) {
-        return new Response.ResponseError("ALREADY_EXISTS", `IDP with slug ${idp.slug} already exists`);
-      }
-      await db2.commandBus.execute(new CreateIdpCommand.CreateIdpCommand(idp));
-      return new Response.ResponseOk(null);
-    });
-  }
-  async disableIDP(db, slug) {
-    return await db.transaction(async (db2) => {
-      const existing = await db2.queryHandler.fetch(new IdentityProviderBySlugQuery.IdentityProviderBySlugQuery(slug));
-      if (!existing) {
-        return new Response.ResponseError("NOT_FOUND", `IDP ${slug} not found`);
-      }
-      if (!existing.disabledAt) {
-        await db2.commandBus.execute(new DisableIdpCommand.DisableIdpCommand(existing.id));
-      }
-      return new Response.ResponseOk(null);
-    });
-  }
-  async enableIDP(db, slug) {
-    return await db.transaction(async (db2) => {
-      const existing = await db2.queryHandler.fetch(new IdentityProviderBySlugQuery.IdentityProviderBySlugQuery(slug));
-      if (!existing) {
-        return new Response.ResponseError("NOT_FOUND", `IDP ${slug} not found`);
-      }
-      if (existing.disabledAt) {
-        await db2.commandBus.execute(new EnableIdpCommand.EnableIdpCommand(existing.id));
-      }
-      return new Response.ResponseOk(null);
-    });
-  }
-  async updateIDP(db, slug, data, mergeConfiguration) {
-    return await db.transaction(async (db2) => {
-      const existing = await db2.queryHandler.fetch(new IdentityProviderBySlugQuery.IdentityProviderBySlugQuery(slug));
-      if (!existing) {
-        return new Response.ResponseError("NOT_FOUND", `IDP ${slug} not found`);
-      }
-      const newConfiguration = (() => {
-        if (!data.configuration) {
-          return existing.configuration;
-        }
-        if (!mergeConfiguration) {
-          return data.configuration;
-        }
-        const newConfiguration2 = { ...existing.configuration };
-        for (const [key, value] of Object.entries(data.configuration)) {
-          if (value === null) {
-            delete newConfiguration2[key];
-          } else {
-            newConfiguration2[key] = value;
-          }
-        }
-        return newConfiguration2;
-      })();
-      try {
-        const type = data.type ?? existing.type;
-        const providerService = this.idpRegistry.getHandler(type);
-        if (data.configuration !== void 0 || type !== existing.type) {
-          providerService.validateConfiguration(newConfiguration);
-        }
-      } catch (e) {
-        if (e instanceof InvalidIDPConfigurationError.InvalidIDPConfigurationError) {
-          return new Response.ResponseError("INVALID_CONFIGURATION", `Invalid IDP configuration: ${e.message}`);
-        }
-        throw e;
-      }
-      await db2.commandBus.execute(new UpdateIdpCommand.UpdateIdpCommand(existing.id, {
-        ...data,
-        configuration: data.configuration ? newConfiguration : void 0
-      }));
-      return new Response.ResponseOk(null);
-    });
-  }
-  async listIDP(db) {
-    const result = await db.queryHandler.fetch(new IdentityProvidersQuery.IdentityProvidersQuery());
-    return result.map((it) => {
-      const providerService = this.idpRegistry.getHandlerOrNull(it.type);
-      const configuration = providerService?.getPublicConfiguration ? providerService.getPublicConfiguration(it.configuration) : it.configuration;
-      return { ...it, configuration };
-    });
-  }
-}
-exports.IDPManager = IDPManager;
-//# sourceMappingURL=IDPManager.cjs.map

package/dist/production/src/model/service/idp/IDPManager.cjs.map

@@ -1 +0,0 @@
-{"version":3,"file":"IDPManager.cjs","sources":["../../../../../../../packages/engine-tenant-api/src/model/service/idp/IDPManager.ts"],"sourcesContent":["import { Response, ResponseError, ResponseOk } from '../../utils/Response'\nimport { AddIdpErrorCode, DisableIdpErrorCode, EnableIdpErrorCode, UpdateIdpErrorCode } from '../../../schema'\nimport { DatabaseContext } from '../../utils'\nimport { IdentityProviderData } from '../../type'\nimport { IdentityProviderBySlugQuery, IdentityProvidersQuery } from '../../queries'\nimport { CreateIdpCommand } from '../../commands/idp/CreateIdpCommand'\nimport { IDPHandlerRegistry } from './IDPHandlerRegistry'\nimport { IdentityProviderNotFoundError } from './IdentityProviderNotFoundError'\nimport { InvalidIDPConfigurationError } from './InvalidIDPConfigurationError'\nimport { DisableIdpCommand } from '../../commands/idp/DisableIdpCommand'\nimport { EnableIdpCommand } from '../../commands/idp/EnableIdpCommand'\nimport { UpdateIdpCommand, UpdateIdpData } from '../../commands/idp/UpdateIdpCommand'\nimport { IdentityProviderDto } from '../../queries/idp/types'\n\nexport class IDPManager {\n\tconstructor(\n\t\tprivate readonly idpRegistry: IDPHandlerRegistry,\n\t) {\n\t}\n\n\tpublic async addIDP(db: DatabaseContext, idp: IdentityProviderData): Promise<RegisterIDPResponse> {\n\t\treturn await db.transaction(async (db): Promise<RegisterIDPResponse> => {\n\t\t\ttry {\n\t\t\t\tconst providerService = this.idpRegistry.getHandler(idp.type)\n\t\t\t\tproviderService.validateConfiguration(idp.configuration)\n\t\t\t} catch (e) {\n\t\t\t\tif (e instanceof IdentityProviderNotFoundError) {\n\t\t\t\t\treturn new ResponseError('UNKNOWN_TYPE', `IDP type ${idp.type} not found`)\n\t\t\t\t}\n\t\t\t\tif (e instanceof InvalidIDPConfigurationError) {\n\t\t\t\t\treturn new ResponseError('INVALID_CONFIGURATION', `Invalid IDP configuration: ${e.message}`)\n\t\t\t\t}\n\t\t\t\tthrow e\n\t\t\t}\n\n\t\t\tconst existing = await db.queryHandler.fetch(new IdentityProviderBySlugQuery(idp.slug))\n\t\t\tif (existing) {\n\t\t\t\treturn new ResponseError('ALREADY_EXISTS', `IDP with slug ${idp.slug} already exists`)\n\t\t\t}\n\t\t\tawait db.commandBus.execute(new CreateIdpCommand(idp))\n\t\t\treturn new ResponseOk(null)\n\t\t})\n\t}\n\n\tpublic async disableIDP(db: DatabaseContext, slug: string): Promise<DisableIDPResponse> {\n\t\treturn await db.transaction(async db => {\n\t\t\tconst existing = await db.queryHandler.fetch(new IdentityProviderBySlugQuery(slug))\n\t\t\tif (!existing) {\n\t\t\t\treturn new ResponseError('NOT_FOUND', `IDP ${slug} not found`)\n\t\t\t}\n\t\t\tif (!existing.disabledAt) {\n\t\t\t\tawait db.commandBus.execute(new DisableIdpCommand(existing.id))\n\t\t\t}\n\t\t\treturn new ResponseOk(null)\n\t\t})\n\t}\n\n\n\tpublic async enableIDP(db: DatabaseContext, slug: string): Promise<EnableIDPResponse> {\n\t\treturn await db.transaction(async db => {\n\t\t\tconst existing = await db.queryHandler.fetch(new IdentityProviderBySlugQuery(slug))\n\t\t\tif (!existing) {\n\t\t\t\treturn new ResponseError('NOT_FOUND', `IDP ${slug} not found`)\n\t\t\t}\n\t\t\tif (existing.disabledAt) {\n\t\t\t\tawait db.commandBus.execute(new EnableIdpCommand(existing.id))\n\t\t\t}\n\t\t\treturn new ResponseOk(null)\n\t\t})\n\t}\n\n\tpublic async updateIDP(db: DatabaseContext, slug: string, data: UpdateIdpData, mergeConfiguration: boolean): Promise<UpdateIDPResponse> {\n\t\treturn await db.transaction(async db => {\n\t\t\tconst existing = await db.queryHandler.fetch(new IdentityProviderBySlugQuery(slug))\n\t\t\tif (!existing) {\n\t\t\t\treturn new ResponseError('NOT_FOUND', `IDP ${slug} not found`)\n\t\t\t}\n\n\t\t\tconst newConfiguration = (() => {\n\t\t\t\tif (!data.configuration) {\n\t\t\t\t\treturn existing.configuration\n\t\t\t\t}\n\t\t\t\tif (!mergeConfiguration) {\n\t\t\t\t\treturn data.configuration\n\t\t\t\t}\n\n\t\t\t\tconst newConfiguration = { ...existing.configuration }\n\t\t\t\tfor (const [key, value] of Object.entries(data.configuration)) {\n\t\t\t\t\tif (value === null) {\n\t\t\t\t\t\tdelete newConfiguration[key]\n\t\t\t\t\t} else {\n\t\t\t\t\t\tnewConfiguration[key] = value\n\t\t\t\t\t}\n\t\t\t\t}\n\n\t\t\t\treturn newConfiguration\n\t\t\t})()\n\n\t\t\ttry {\n\t\t\t\tconst type = data.type ?? existing.type\n\t\t\t\tconst providerService = this.idpRegistry.getHandler(type)\n\t\t\t\tif (data.configuration !== undefined || type !== existing.type) {\n\t\t\t\t\tproviderService.validateConfiguration(newConfiguration)\n\t\t\t\t}\n\t\t\t} catch (e) {\n\t\t\t\tif (e instanceof InvalidIDPConfigurationError) {\n\t\t\t\t\treturn new ResponseError('INVALID_CONFIGURATION', `Invalid IDP configuration: ${e.message}`)\n\t\t\t\t}\n\t\t\t\tthrow e\n\t\t\t}\n\n\t\t\tawait db.commandBus.execute(new UpdateIdpCommand(existing.id, {\n\t\t\t\t...data,\n\t\t\t\tconfiguration: data.configuration ? newConfiguration : undefined,\n\t\t\t}))\n\n\t\t\treturn new ResponseOk(null)\n\t\t})\n\t}\n\n\tpublic async listIDP(db: DatabaseContext): Promise<IdentityProviderDto[]> {\n\t\tconst result = await db.queryHandler.fetch(new IdentityProvidersQuery())\n\t\treturn result.map(it => {\n\t\t\tconst providerService = this.idpRegistry.getHandlerOrNull(it.type)\n\t\t\tconst configuration = providerService?.getPublicConfiguration\n\t\t\t\t? providerService.getPublicConfiguration(it.configuration)\n\t\t\t\t: it.configuration\n\n\t\t\treturn { ...it, configuration }\n\t\t})\n\t}\n}\n\nexport type RegisterIDPResponse = Response<null, AddIdpErrorCode>\nexport type DisableIDPResponse = Response<null, DisableIdpErrorCode>\nexport type EnableIDPResponse = Response<null, EnableIdpErrorCode>\nexport type UpdateIDPResponse = Response<null, UpdateIdpErrorCode>\n"],"names":["db","IdentityProviderNotFoundError","ResponseError","InvalidIDPConfigurationError","IdentityProviderBySlugQuery","CreateIdpCommand","ResponseOk","DisableIdpCommand","EnableIdpCommand","newConfiguration","UpdateIdpCommand","IdentityProvidersQuery"],"mappings":";;;;;;;;;;;;;;;;;;AAcO,MAAM,WAAW;AAAA,EACvB,YACkB,aAChB;AADgB,SAAA,cAAA;AAAA,EAAA;AAAA,EAIlB,MAAa,OAAO,IAAqB,KAAyD;AACjG,WAAO,MAAM,GAAG,YAAY,OAAOA,QAAqC;AACnE,UAAA;AACH,cAAM,kBAAkB,KAAK,YAAY,WAAW,IAAI,IAAI;AAC5C,wBAAA,sBAAsB,IAAI,aAAa;AAAA,eAC/C,GAAG;AACX,YAAI,aAAaC,8BAAAA,+BAA+B;AAC/C,iBAAO,IAAIC,SAAc,cAAA,gBAAgB,YAAY,IAAI,IAAI,YAAY;AAAA,QAAA;AAE1E,YAAI,aAAaC,6BAAAA,8BAA8B;AAC9C,iBAAO,IAAID,SAAc,cAAA,yBAAyB,8BAA8B,EAAE,OAAO,EAAE;AAAA,QAAA;AAEtF,cAAA;AAAA,MAAA;AAGD,YAAA,WAAW,MAAMF,IAAG,aAAa,MAAM,IAAII,4BAAA,4BAA4B,IAAI,IAAI,CAAC;AACtF,UAAI,UAAU;AACb,eAAO,IAAIF,SAAc,cAAA,kBAAkB,iBAAiB,IAAI,IAAI,iBAAiB;AAAA,MAAA;AAEtF,YAAMF,IAAG,WAAW,QAAQ,IAAIK,iBAAA,iBAAiB,GAAG,CAAC;AAC9C,aAAA,IAAIC,oBAAW,IAAI;AAAA,IAAA,CAC1B;AAAA,EAAA;AAAA,EAGF,MAAa,WAAW,IAAqB,MAA2C;AACvF,WAAO,MAAM,GAAG,YAAY,OAAMN,QAAM;AACjC,YAAA,WAAW,MAAMA,IAAG,aAAa,MAAM,IAAII,4BAAAA,4BAA4B,IAAI,CAAC;AAClF,UAAI,CAAC,UAAU;AACd,eAAO,IAAIF,SAAA,cAAc,aAAa,OAAO,IAAI,YAAY;AAAA,MAAA;AAE1D,UAAA,CAAC,SAAS,YAAY;AACzB,cAAMF,IAAG,WAAW,QAAQ,IAAIO,kBAAAA,kBAAkB,SAAS,EAAE,CAAC;AAAA,MAAA;AAExD,aAAA,IAAID,oBAAW,IAAI;AAAA,IAAA,CAC1B;AAAA,EAAA;AAAA,EAIF,MAAa,UAAU,IAAqB,MAA0C;AACrF,WAAO,MAAM,GAAG,YAAY,OAAMN,QAAM;AACjC,YAAA,WAAW,MAAMA,IAAG,aAAa,MAAM,IAAII,4BAAAA,4BAA4B,IAAI,CAAC;AAClF,UAAI,CAAC,UAAU;AACd,eAAO,IAAIF,SAAA,cAAc,aAAa,OAAO,IAAI,YAAY;AAAA,MAAA;AAE9D,UAAI,SAAS,YAAY;AACxB,cAAMF,IAAG,WAAW,QAAQ,IAAIQ,iBAAAA,iBAAiB,SAAS,EAAE,CAAC;AAAA,MAAA;AAEvD,aAAA,IAAIF,oBAAW,IAAI;AAAA,IAAA,CAC1B;AAAA,EAAA;AAAA,EAGF,MAAa,UAAU,IAAqB,MAAc,MAAqB,oBAAyD;AACvI,WAAO,MAAM,GAAG,YAAY,OAAMN,QAAM;AACjC,YAAA,WAAW,MAAMA,IAAG,aAAa,MAAM,IAAII,4BAAAA,4BAA4B,IAAI,CAAC;AAClF,UAAI,CAAC,UAAU;AACd,eAAO,IAAIF,SAAA,cAAc,aAAa,OAAO,IAAI,YAAY;AAAA,MAAA;AAG9D,YAAM,oBAAoB,MAAM;AAC3B,YAAA,CAAC,KAAK,eAAe;AACxB,iBAAO,SAAS;AAAA,QAAA;AAEjB,YAAI,CAAC,oBAAoB;AACxB,iBAAO,KAAK;AAAA,QAAA;AAGb,cAAMO,oBAAmB,EAAE,GAAG,SAAS,cAAc;AAC1C,mBAAA,CAAC,KAAK,KAAK,KAAK,OAAO,QAAQ,KAAK,aAAa,GAAG;AAC9D,cAAI,UAAU,MAAM;AACnB,mBAAOA,kBAAiB,GAAG;AAAA,UAAA,OACrB;AACNA,8BAAiB,GAAG,IAAI;AAAA,UAAA;AAAA,QACzB;AAGMA,eAAAA;AAAAA,MAAA,GACL;AAEC,UAAA;AACG,cAAA,OAAO,KAAK,QAAQ,SAAS;AACnC,cAAM,kBAAkB,KAAK,YAAY,WAAW,IAAI;AACxD,YAAI,KAAK,kBAAkB,UAAa,SAAS,SAAS,MAAM;AAC/D,0BAAgB,sBAAsB,gBAAgB;AAAA,QAAA;AAAA,eAE/C,GAAG;AACX,YAAI,aAAaN,6BAAAA,8BAA8B;AAC9C,iBAAO,IAAID,SAAc,cAAA,yBAAyB,8BAA8B,EAAE,OAAO,EAAE;AAAA,QAAA;AAEtF,cAAA;AAAA,MAAA;AAGP,YAAMF,IAAG,WAAW,QAAQ,IAAIU,iBAAA,iBAAiB,SAAS,IAAI;AAAA,QAC7D,GAAG;AAAA,QACH,eAAe,KAAK,gBAAgB,mBAAmB;AAAA,MAAA,CACvD,CAAC;AAEK,aAAA,IAAIJ,oBAAW,IAAI;AAAA,IAAA,CAC1B;AAAA,EAAA;AAAA,EAGF,MAAa,QAAQ,IAAqD;AACzE,UAAM,SAAS,MAAM,GAAG,aAAa,MAAM,IAAIK,uBAAAA,wBAAwB;AAChE,WAAA,OAAO,IAAI,CAAM,OAAA;AACvB,YAAM,kBAAkB,KAAK,YAAY,iBAAiB,GAAG,IAAI;AAC3D,YAAA,gBAAgB,iBAAiB,yBACpC,gBAAgB,uBAAuB,GAAG,aAAa,IACvD,GAAG;AAEC,aAAA,EAAE,GAAG,IAAI,cAAc;AAAA,IAAA,CAC9B;AAAA,EAAA;AAEH;;"}

package/dist/production/src/model/service/idp/IDPManager.js

@@ -1,121 +0,0 @@
-import { ResponseError, ResponseOk } from "../../utils/Response.js";
-import "../../queries/apiKey/ApiKeyQuery.js";
-import "@contember/database";
-import { IdentityProviderBySlugQuery } from "../../queries/idp/IdentityProviderBySlugQuery.js";
-import { IdentityProvidersQuery } from "../../queries/idp/IdentityProvidersQuery.js";
-import "../../authorization/PermissionActions.js";
-import "@contember/authorization";
-import "../../authorization/PermissionContext.js";
-import "../../authorization/PermissionsFactory.js";
-import "@contember/schema";
-import { CreateIdpCommand } from "../../commands/idp/CreateIdpCommand.js";
-import { IdentityProviderNotFoundError } from "./IdentityProviderNotFoundError.js";
-import { InvalidIDPConfigurationError } from "./InvalidIDPConfigurationError.js";
-import { DisableIdpCommand } from "../../commands/idp/DisableIdpCommand.js";
-import { EnableIdpCommand } from "../../commands/idp/EnableIdpCommand.js";
-import { UpdateIdpCommand } from "../../commands/idp/UpdateIdpCommand.js";
-class IDPManager {
-  constructor(idpRegistry) {
-    this.idpRegistry = idpRegistry;
-  }
-  async addIDP(db, idp) {
-    return await db.transaction(async (db2) => {
-      try {
-        const providerService = this.idpRegistry.getHandler(idp.type);
-        providerService.validateConfiguration(idp.configuration);
-      } catch (e) {
-        if (e instanceof IdentityProviderNotFoundError) {
-          return new ResponseError("UNKNOWN_TYPE", `IDP type ${idp.type} not found`);
-        }
-        if (e instanceof InvalidIDPConfigurationError) {
-          return new ResponseError("INVALID_CONFIGURATION", `Invalid IDP configuration: ${e.message}`);
-        }
-        throw e;
-      }
-      const existing = await db2.queryHandler.fetch(new IdentityProviderBySlugQuery(idp.slug));
-      if (existing) {
-        return new ResponseError("ALREADY_EXISTS", `IDP with slug ${idp.slug} already exists`);
-      }
-      await db2.commandBus.execute(new CreateIdpCommand(idp));
-      return new ResponseOk(null);
-    });
-  }
-  async disableIDP(db, slug) {
-    return await db.transaction(async (db2) => {
-      const existing = await db2.queryHandler.fetch(new IdentityProviderBySlugQuery(slug));
-      if (!existing) {
-        return new ResponseError("NOT_FOUND", `IDP ${slug} not found`);
-      }
-      if (!existing.disabledAt) {
-        await db2.commandBus.execute(new DisableIdpCommand(existing.id));
-      }
-      return new ResponseOk(null);
-    });
-  }
-  async enableIDP(db, slug) {
-    return await db.transaction(async (db2) => {
-      const existing = await db2.queryHandler.fetch(new IdentityProviderBySlugQuery(slug));
-      if (!existing) {
-        return new ResponseError("NOT_FOUND", `IDP ${slug} not found`);
-      }
-      if (existing.disabledAt) {
-        await db2.commandBus.execute(new EnableIdpCommand(existing.id));
-      }
-      return new ResponseOk(null);
-    });
-  }
-  async updateIDP(db, slug, data, mergeConfiguration) {
-    return await db.transaction(async (db2) => {
-      const existing = await db2.queryHandler.fetch(new IdentityProviderBySlugQuery(slug));
-      if (!existing) {
-        return new ResponseError("NOT_FOUND", `IDP ${slug} not found`);
-      }
-      const newConfiguration = (() => {
-        if (!data.configuration) {
-          return existing.configuration;
-        }
-        if (!mergeConfiguration) {
-          return data.configuration;
-        }
-        const newConfiguration2 = { ...existing.configuration };
-        for (const [key, value] of Object.entries(data.configuration)) {
-          if (value === null) {
-            delete newConfiguration2[key];
-          } else {
-            newConfiguration2[key] = value;
-          }
-        }
-        return newConfiguration2;
-      })();
-      try {
-        const type = data.type ?? existing.type;
-        const providerService = this.idpRegistry.getHandler(type);
-        if (data.configuration !== void 0 || type !== existing.type) {
-          providerService.validateConfiguration(newConfiguration);
-        }
-      } catch (e) {
-        if (e instanceof InvalidIDPConfigurationError) {
-          return new ResponseError("INVALID_CONFIGURATION", `Invalid IDP configuration: ${e.message}`);
-        }
-        throw e;
-      }
-      await db2.commandBus.execute(new UpdateIdpCommand(existing.id, {
-        ...data,
-        configuration: data.configuration ? newConfiguration : void 0
-      }));
-      return new ResponseOk(null);
-    });
-  }
-  async listIDP(db) {
-    const result = await db.queryHandler.fetch(new IdentityProvidersQuery());
-    return result.map((it) => {
-      const providerService = this.idpRegistry.getHandlerOrNull(it.type);
-      const configuration = providerService?.getPublicConfiguration ? providerService.getPublicConfiguration(it.configuration) : it.configuration;
-      return { ...it, configuration };
-    });
-  }
-}
-export {
-  IDPManager
-};
-//# sourceMappingURL=IDPManager.js.map

package/dist/production/src/model/service/idp/IDPManager.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"IDPManager.js","sources":["../../../../../../../packages/engine-tenant-api/src/model/service/idp/IDPManager.ts"],"sourcesContent":["import { Response, ResponseError, ResponseOk } from '../../utils/Response'\nimport { AddIdpErrorCode, DisableIdpErrorCode, EnableIdpErrorCode, UpdateIdpErrorCode } from '../../../schema'\nimport { DatabaseContext } from '../../utils'\nimport { IdentityProviderData } from '../../type'\nimport { IdentityProviderBySlugQuery, IdentityProvidersQuery } from '../../queries'\nimport { CreateIdpCommand } from '../../commands/idp/CreateIdpCommand'\nimport { IDPHandlerRegistry } from './IDPHandlerRegistry'\nimport { IdentityProviderNotFoundError } from './IdentityProviderNotFoundError'\nimport { InvalidIDPConfigurationError } from './InvalidIDPConfigurationError'\nimport { DisableIdpCommand } from '../../commands/idp/DisableIdpCommand'\nimport { EnableIdpCommand } from '../../commands/idp/EnableIdpCommand'\nimport { UpdateIdpCommand, UpdateIdpData } from '../../commands/idp/UpdateIdpCommand'\nimport { IdentityProviderDto } from '../../queries/idp/types'\n\nexport class IDPManager {\n\tconstructor(\n\t\tprivate readonly idpRegistry: IDPHandlerRegistry,\n\t) {\n\t}\n\n\tpublic async addIDP(db: DatabaseContext, idp: IdentityProviderData): Promise<RegisterIDPResponse> {\n\t\treturn await db.transaction(async (db): Promise<RegisterIDPResponse> => {\n\t\t\ttry {\n\t\t\t\tconst providerService = this.idpRegistry.getHandler(idp.type)\n\t\t\t\tproviderService.validateConfiguration(idp.configuration)\n\t\t\t} catch (e) {\n\t\t\t\tif (e instanceof IdentityProviderNotFoundError) {\n\t\t\t\t\treturn new ResponseError('UNKNOWN_TYPE', `IDP type ${idp.type} not found`)\n\t\t\t\t}\n\t\t\t\tif (e instanceof InvalidIDPConfigurationError) {\n\t\t\t\t\treturn new ResponseError('INVALID_CONFIGURATION', `Invalid IDP configuration: ${e.message}`)\n\t\t\t\t}\n\t\t\t\tthrow e\n\t\t\t}\n\n\t\t\tconst existing = await db.queryHandler.fetch(new IdentityProviderBySlugQuery(idp.slug))\n\t\t\tif (existing) {\n\t\t\t\treturn new ResponseError('ALREADY_EXISTS', `IDP with slug ${idp.slug} already exists`)\n\t\t\t}\n\t\t\tawait db.commandBus.execute(new CreateIdpCommand(idp))\n\t\t\treturn new ResponseOk(null)\n\t\t})\n\t}\n\n\tpublic async disableIDP(db: DatabaseContext, slug: string): Promise<DisableIDPResponse> {\n\t\treturn await db.transaction(async db => {\n\t\t\tconst existing = await db.queryHandler.fetch(new IdentityProviderBySlugQuery(slug))\n\t\t\tif (!existing) {\n\t\t\t\treturn new ResponseError('NOT_FOUND', `IDP ${slug} not found`)\n\t\t\t}\n\t\t\tif (!existing.disabledAt) {\n\t\t\t\tawait db.commandBus.execute(new DisableIdpCommand(existing.id))\n\t\t\t}\n\t\t\treturn new ResponseOk(null)\n\t\t})\n\t}\n\n\n\tpublic async enableIDP(db: DatabaseContext, slug: string): Promise<EnableIDPResponse> {\n\t\treturn await db.transaction(async db => {\n\t\t\tconst existing = await db.queryHandler.fetch(new IdentityProviderBySlugQuery(slug))\n\t\t\tif (!existing) {\n\t\t\t\treturn new ResponseError('NOT_FOUND', `IDP ${slug} not found`)\n\t\t\t}\n\t\t\tif (existing.disabledAt) {\n\t\t\t\tawait db.commandBus.execute(new EnableIdpCommand(existing.id))\n\t\t\t}\n\t\t\treturn new ResponseOk(null)\n\t\t})\n\t}\n\n\tpublic async updateIDP(db: DatabaseContext, slug: string, data: UpdateIdpData, mergeConfiguration: boolean): Promise<UpdateIDPResponse> {\n\t\treturn await db.transaction(async db => {\n\t\t\tconst existing = await db.queryHandler.fetch(new IdentityProviderBySlugQuery(slug))\n\t\t\tif (!existing) {\n\t\t\t\treturn new ResponseError('NOT_FOUND', `IDP ${slug} not found`)\n\t\t\t}\n\n\t\t\tconst newConfiguration = (() => {\n\t\t\t\tif (!data.configuration) {\n\t\t\t\t\treturn existing.configuration\n\t\t\t\t}\n\t\t\t\tif (!mergeConfiguration) {\n\t\t\t\t\treturn data.configuration\n\t\t\t\t}\n\n\t\t\t\tconst newConfiguration = { ...existing.configuration }\n\t\t\t\tfor (const [key, value] of Object.entries(data.configuration)) {\n\t\t\t\t\tif (value === null) {\n\t\t\t\t\t\tdelete newConfiguration[key]\n\t\t\t\t\t} else {\n\t\t\t\t\t\tnewConfiguration[key] = value\n\t\t\t\t\t}\n\t\t\t\t}\n\n\t\t\t\treturn newConfiguration\n\t\t\t})()\n\n\t\t\ttry {\n\t\t\t\tconst type = data.type ?? existing.type\n\t\t\t\tconst providerService = this.idpRegistry.getHandler(type)\n\t\t\t\tif (data.configuration !== undefined || type !== existing.type) {\n\t\t\t\t\tproviderService.validateConfiguration(newConfiguration)\n\t\t\t\t}\n\t\t\t} catch (e) {\n\t\t\t\tif (e instanceof InvalidIDPConfigurationError) {\n\t\t\t\t\treturn new ResponseError('INVALID_CONFIGURATION', `Invalid IDP configuration: ${e.message}`)\n\t\t\t\t}\n\t\t\t\tthrow e\n\t\t\t}\n\n\t\t\tawait db.commandBus.execute(new UpdateIdpCommand(existing.id, {\n\t\t\t\t...data,\n\t\t\t\tconfiguration: data.configuration ? newConfiguration : undefined,\n\t\t\t}))\n\n\t\t\treturn new ResponseOk(null)\n\t\t})\n\t}\n\n\tpublic async listIDP(db: DatabaseContext): Promise<IdentityProviderDto[]> {\n\t\tconst result = await db.queryHandler.fetch(new IdentityProvidersQuery())\n\t\treturn result.map(it => {\n\t\t\tconst providerService = this.idpRegistry.getHandlerOrNull(it.type)\n\t\t\tconst configuration = providerService?.getPublicConfiguration\n\t\t\t\t? providerService.getPublicConfiguration(it.configuration)\n\t\t\t\t: it.configuration\n\n\t\t\treturn { ...it, configuration }\n\t\t})\n\t}\n}\n\nexport type RegisterIDPResponse = Response<null, AddIdpErrorCode>\nexport type DisableIDPResponse = Response<null, DisableIdpErrorCode>\nexport type EnableIDPResponse = Response<null, EnableIdpErrorCode>\nexport type UpdateIDPResponse = Response<null, UpdateIdpErrorCode>\n"],"names":["db","newConfiguration"],"mappings":";;;;;;;;;;;;;;;;AAcO,MAAM,WAAW;AAAA,EACvB,YACkB,aAChB;AADgB,SAAA,cAAA;AAAA,EAAA;AAAA,EAIlB,MAAa,OAAO,IAAqB,KAAyD;AACjG,WAAO,MAAM,GAAG,YAAY,OAAOA,QAAqC;AACnE,UAAA;AACH,cAAM,kBAAkB,KAAK,YAAY,WAAW,IAAI,IAAI;AAC5C,wBAAA,sBAAsB,IAAI,aAAa;AAAA,eAC/C,GAAG;AACX,YAAI,aAAa,+BAA+B;AAC/C,iBAAO,IAAI,cAAc,gBAAgB,YAAY,IAAI,IAAI,YAAY;AAAA,QAAA;AAE1E,YAAI,aAAa,8BAA8B;AAC9C,iBAAO,IAAI,cAAc,yBAAyB,8BAA8B,EAAE,OAAO,EAAE;AAAA,QAAA;AAEtF,cAAA;AAAA,MAAA;AAGD,YAAA,WAAW,MAAMA,IAAG,aAAa,MAAM,IAAI,4BAA4B,IAAI,IAAI,CAAC;AACtF,UAAI,UAAU;AACb,eAAO,IAAI,cAAc,kBAAkB,iBAAiB,IAAI,IAAI,iBAAiB;AAAA,MAAA;AAEtF,YAAMA,IAAG,WAAW,QAAQ,IAAI,iBAAiB,GAAG,CAAC;AAC9C,aAAA,IAAI,WAAW,IAAI;AAAA,IAAA,CAC1B;AAAA,EAAA;AAAA,EAGF,MAAa,WAAW,IAAqB,MAA2C;AACvF,WAAO,MAAM,GAAG,YAAY,OAAMA,QAAM;AACjC,YAAA,WAAW,MAAMA,IAAG,aAAa,MAAM,IAAI,4BAA4B,IAAI,CAAC;AAClF,UAAI,CAAC,UAAU;AACd,eAAO,IAAI,cAAc,aAAa,OAAO,IAAI,YAAY;AAAA,MAAA;AAE1D,UAAA,CAAC,SAAS,YAAY;AACzB,cAAMA,IAAG,WAAW,QAAQ,IAAI,kBAAkB,SAAS,EAAE,CAAC;AAAA,MAAA;AAExD,aAAA,IAAI,WAAW,IAAI;AAAA,IAAA,CAC1B;AAAA,EAAA;AAAA,EAIF,MAAa,UAAU,IAAqB,MAA0C;AACrF,WAAO,MAAM,GAAG,YAAY,OAAMA,QAAM;AACjC,YAAA,WAAW,MAAMA,IAAG,aAAa,MAAM,IAAI,4BAA4B,IAAI,CAAC;AAClF,UAAI,CAAC,UAAU;AACd,eAAO,IAAI,cAAc,aAAa,OAAO,IAAI,YAAY;AAAA,MAAA;AAE9D,UAAI,SAAS,YAAY;AACxB,cAAMA,IAAG,WAAW,QAAQ,IAAI,iBAAiB,SAAS,EAAE,CAAC;AAAA,MAAA;AAEvD,aAAA,IAAI,WAAW,IAAI;AAAA,IAAA,CAC1B;AAAA,EAAA;AAAA,EAGF,MAAa,UAAU,IAAqB,MAAc,MAAqB,oBAAyD;AACvI,WAAO,MAAM,GAAG,YAAY,OAAMA,QAAM;AACjC,YAAA,WAAW,MAAMA,IAAG,aAAa,MAAM,IAAI,4BAA4B,IAAI,CAAC;AAClF,UAAI,CAAC,UAAU;AACd,eAAO,IAAI,cAAc,aAAa,OAAO,IAAI,YAAY;AAAA,MAAA;AAG9D,YAAM,oBAAoB,MAAM;AAC3B,YAAA,CAAC,KAAK,eAAe;AACxB,iBAAO,SAAS;AAAA,QAAA;AAEjB,YAAI,CAAC,oBAAoB;AACxB,iBAAO,KAAK;AAAA,QAAA;AAGb,cAAMC,oBAAmB,EAAE,GAAG,SAAS,cAAc;AAC1C,mBAAA,CAAC,KAAK,KAAK,KAAK,OAAO,QAAQ,KAAK,aAAa,GAAG;AAC9D,cAAI,UAAU,MAAM;AACnB,mBAAOA,kBAAiB,GAAG;AAAA,UAAA,OACrB;AACNA,8BAAiB,GAAG,IAAI;AAAA,UAAA;AAAA,QACzB;AAGMA,eAAAA;AAAAA,MAAA,GACL;AAEC,UAAA;AACG,cAAA,OAAO,KAAK,QAAQ,SAAS;AACnC,cAAM,kBAAkB,KAAK,YAAY,WAAW,IAAI;AACxD,YAAI,KAAK,kBAAkB,UAAa,SAAS,SAAS,MAAM;AAC/D,0BAAgB,sBAAsB,gBAAgB;AAAA,QAAA;AAAA,eAE/C,GAAG;AACX,YAAI,aAAa,8BAA8B;AAC9C,iBAAO,IAAI,cAAc,yBAAyB,8BAA8B,EAAE,OAAO,EAAE;AAAA,QAAA;AAEtF,cAAA;AAAA,MAAA;AAGP,YAAMD,IAAG,WAAW,QAAQ,IAAI,iBAAiB,SAAS,IAAI;AAAA,QAC7D,GAAG;AAAA,QACH,eAAe,KAAK,gBAAgB,mBAAmB;AAAA,MAAA,CACvD,CAAC;AAEK,aAAA,IAAI,WAAW,IAAI;AAAA,IAAA,CAC1B;AAAA,EAAA;AAAA,EAGF,MAAa,QAAQ,IAAqD;AACzE,UAAM,SAAS,MAAM,GAAG,aAAa,MAAM,IAAI,wBAAwB;AAChE,WAAA,OAAO,IAAI,CAAM,OAAA;AACvB,YAAM,kBAAkB,KAAK,YAAY,iBAAiB,GAAG,IAAI;AAC3D,YAAA,gBAAgB,iBAAiB,yBACpC,gBAAgB,uBAAuB,GAAG,aAAa,IACvD,GAAG;AAEC,aAAA,EAAE,GAAG,IAAI,cAAc;AAAA,IAAA,CAC9B;AAAA,EAAA;AAEH;"}

package/dist/production/src/model/service/idp/IDPResponseError.cjs

@@ -1,9 +0,0 @@
-"use strict";
-Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
-class IDPResponseError extends Error {
-  constructor(message) {
-    super(message);
-  }
-}
-exports.IDPResponseError = IDPResponseError;
-//# sourceMappingURL=IDPResponseError.cjs.map

package/dist/production/src/model/service/idp/IDPResponseError.cjs.map

@@ -1 +0,0 @@
-{"version":3,"file":"IDPResponseError.cjs","sources":["../../../../../../../packages/engine-tenant-api/src/model/service/idp/IDPResponseError.ts"],"sourcesContent":["export class IDPResponseError extends Error {\n\tconstructor(message: string) {\n\t\tsuper(message)\n\t}\n}\n"],"names":[],"mappings":";;AAAO,MAAM,yBAAyB,MAAM;AAAA,EAC3C,YAAY,SAAiB;AAC5B,UAAM,OAAO;AAAA,EAAA;AAEf;;"}