@contember/engine-tenant-api 2.2.0-alpha.7 → 2.2.0-alpha.9
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/dist/development/src/TenantContainer.cjs +5 -2
- package/dist/development/src/TenantContainer.cjs.map +1 -1
- package/dist/development/src/TenantContainer.js +5 -2
- package/dist/development/src/TenantContainer.js.map +1 -1
- package/dist/development/src/model/commands/apiKey/ProlongApiKeyCommand.cjs +5 -8
- package/dist/development/src/model/commands/apiKey/ProlongApiKeyCommand.cjs.map +1 -1
- package/dist/development/src/model/commands/apiKey/ProlongApiKeyCommand.js +5 -8
- package/dist/development/src/model/commands/apiKey/ProlongApiKeyCommand.js.map +1 -1
- package/dist/development/src/model/commands/authLog/CreateAuthLogEntryCommand.cjs.map +1 -1
- package/dist/development/src/model/commands/authLog/CreateAuthLogEntryCommand.js.map +1 -1
- package/dist/development/src/model/service/IDPSignInManager.cjs +23 -15
- package/dist/development/src/model/service/IDPSignInManager.cjs.map +1 -1
- package/dist/development/src/model/service/IDPSignInManager.js +23 -15
- package/dist/development/src/model/service/IDPSignInManager.js.map +1 -1
- package/dist/development/src/model/service/apiKey/ApiKeyManager.cjs +16 -3
- package/dist/development/src/model/service/apiKey/ApiKeyManager.cjs.map +1 -1
- package/dist/development/src/model/service/apiKey/ApiKeyManager.js +16 -3
- package/dist/development/src/model/service/apiKey/ApiKeyManager.js.map +1 -1
- package/dist/development/src/model/service/idp/IdpSessionRevalidator.cjs +42 -31
- package/dist/development/src/model/service/idp/IdpSessionRevalidator.cjs.map +1 -1
- package/dist/development/src/model/service/idp/IdpSessionRevalidator.js +42 -31
- package/dist/development/src/model/service/idp/IdpSessionRevalidator.js.map +1 -1
- package/dist/production/src/TenantContainer.cjs +5 -2
- package/dist/production/src/TenantContainer.cjs.map +1 -1
- package/dist/production/src/TenantContainer.js +5 -2
- package/dist/production/src/TenantContainer.js.map +1 -1
- package/dist/production/src/model/commands/apiKey/ProlongApiKeyCommand.cjs +5 -8
- package/dist/production/src/model/commands/apiKey/ProlongApiKeyCommand.cjs.map +1 -1
- package/dist/production/src/model/commands/apiKey/ProlongApiKeyCommand.js +5 -8
- package/dist/production/src/model/commands/apiKey/ProlongApiKeyCommand.js.map +1 -1
- package/dist/production/src/model/commands/authLog/CreateAuthLogEntryCommand.cjs.map +1 -1
- package/dist/production/src/model/commands/authLog/CreateAuthLogEntryCommand.js.map +1 -1
- package/dist/production/src/model/service/IDPSignInManager.cjs +23 -15
- package/dist/production/src/model/service/IDPSignInManager.cjs.map +1 -1
- package/dist/production/src/model/service/IDPSignInManager.js +23 -15
- package/dist/production/src/model/service/IDPSignInManager.js.map +1 -1
- package/dist/production/src/model/service/apiKey/ApiKeyManager.cjs +16 -3
- package/dist/production/src/model/service/apiKey/ApiKeyManager.cjs.map +1 -1
- package/dist/production/src/model/service/apiKey/ApiKeyManager.js +16 -3
- package/dist/production/src/model/service/apiKey/ApiKeyManager.js.map +1 -1
- package/dist/production/src/model/service/idp/IdpSessionRevalidator.cjs +42 -31
- package/dist/production/src/model/service/idp/IdpSessionRevalidator.cjs.map +1 -1
- package/dist/production/src/model/service/idp/IdpSessionRevalidator.js +42 -31
- package/dist/production/src/model/service/idp/IdpSessionRevalidator.js.map +1 -1
- package/dist/tests/cases/integration/mocked/sql/sqlTransaction.d.ts +5 -0
- package/dist/tests/cases/integration/mocked/sql/sqlTransaction.d.ts.map +1 -1
- package/dist/tests/cases/unit/apiKey/verifyAndProlongReplica.test.d.ts +2 -0
- package/dist/tests/cases/unit/apiKey/verifyAndProlongReplica.test.d.ts.map +1 -0
- package/dist/tests/src/IdPMock.d.ts.map +1 -1
- package/dist/tests/src/testTenant.d.ts.map +1 -1
- package/dist/tests/tsconfig.tsbuildinfo +1 -1
- package/dist/types/TenantContainer.d.ts +2 -0
- package/dist/types/TenantContainer.d.ts.map +1 -1
- package/dist/types/model/commands/apiKey/ProlongApiKeyCommand.d.ts +5 -3
- package/dist/types/model/commands/apiKey/ProlongApiKeyCommand.d.ts.map +1 -1
- package/dist/types/model/commands/authLog/CreateAuthLogEntryCommand.d.ts +1 -0
- package/dist/types/model/commands/authLog/CreateAuthLogEntryCommand.d.ts.map +1 -1
- package/dist/types/model/service/IDPSignInManager.d.ts +3 -1
- package/dist/types/model/service/IDPSignInManager.d.ts.map +1 -1
- package/dist/types/model/service/apiKey/ApiKeyManager.d.ts +1 -0
- package/dist/types/model/service/apiKey/ApiKeyManager.d.ts.map +1 -1
- package/dist/types/model/service/idp/IdpSessionRevalidator.d.ts +3 -1
- package/dist/types/model/service/idp/IdpSessionRevalidator.d.ts.map +1 -1
- package/dist/types/tsconfig.tsbuildinfo +1 -1
- package/package.json +12 -12
- package/src/TenantContainer.ts +7 -2
- package/src/model/commands/apiKey/ProlongApiKeyCommand.ts +10 -11
- package/src/model/commands/authLog/CreateAuthLogEntryCommand.ts +1 -0
- package/src/model/service/IDPSignInManager.ts +26 -14
- package/src/model/service/apiKey/ApiKeyManager.ts +24 -3
- package/src/model/service/idp/IdpSessionRevalidator.ts +43 -28
- package/tests/cases/integration/mocked/signInIdpMutation.test.ts +100 -1
- package/tests/cases/integration/mocked/sql/sqlTransaction.ts +16 -0
- package/tests/cases/unit/apiKey/prolongApiKeyCommand.test.ts +19 -9
- package/tests/cases/unit/apiKey/unpersistedApiKeyManager.test.ts +2 -3
- package/tests/cases/unit/apiKey/verifyAndProlongReplica.test.ts +170 -0
- package/tests/cases/unit/idp/idpSessionRevalidator.test.ts +37 -4
- package/tests/src/IdPMock.ts +2 -0
- package/tests/src/testTenant.ts +1 -0
|
@@ -1,3 +1,4 @@
|
|
|
1
|
+
import { Logger } from '@contember/logger';
|
|
1
2
|
import { AccessEvaluator, Authorizator } from '@contember/authorization';
|
|
2
3
|
import { Connection, DatabaseConfig } from '@contember/database';
|
|
3
4
|
import { Builder } from '@contember/dic';
|
|
@@ -55,6 +56,7 @@ export interface TenantContainerArgs {
|
|
|
55
56
|
projectInitializer: ProjectInitializer;
|
|
56
57
|
tenantCredentials: TenantCredentials;
|
|
57
58
|
cryptoProviders: Pick<Providers, 'encrypt' | 'decrypt' | 'encryptionEnabled'>;
|
|
59
|
+
logger: Logger;
|
|
58
60
|
}
|
|
59
61
|
export declare class TenantContainerFactory {
|
|
60
62
|
private readonly providers;
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"TenantContainer.d.ts","sourceRoot":"","sources":["../../src/TenantContainer.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,YAAY,EAAE,MAAM,0BAA0B,CAAA;AACxE,OAAO,EAAE,UAAU,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAA;AAChE,OAAO,EAAE,OAAO,EAAE,MAAM,gBAAgB,CAAA;AACxC,OAAO,EAEN,aAAa,EACb,aAAa,EAEb,iBAAiB,EACjB,kBAAkB,EAClB,wBAAwB,EACxB,iBAAiB,EACjB,gBAAgB,EAChB,eAAe,EACf,kBAAkB,EAClB,eAAe,EACf,cAAc,EACd,wBAAwB,EAGxB,QAAQ,EACR,eAAe,EACf,mBAAmB,EACnB,kBAAkB,EAClB,UAAU,EACV,qBAAqB,EACrB,gBAAgB,EAChB,aAAa,EACb,iBAAiB,EACjB,mBAAmB,EACnB,mBAAmB,EAEnB,gBAAgB,EAChB,UAAU,EACV,mBAAmB,EACnB,qBAAqB,EACrB,oBAAoB,EACpB,wBAAwB,EAExB,mBAAmB,EACnB,6BAA6B,EAC7B,aAAa,EACb,kBAAkB,EAClB,cAAc,EACd,oBAAoB,EACpB,qBAAqB,EACrB,mBAAmB,EACnB,SAAS,EACT,WAAW,EAEX,YAAY,EACZ,cAAc,EACd,aAAa,EACb,cAAc,EACd,aAAa,EAEb,wBAAwB,EACxB,UAAU,EACV,MAAM,kBAAkB,CAAA;AACzB,OAAO,EAAE,WAAW,EAAoC,MAAM,gCAAgC,CAAA;AAC9F,OAAO,EACN,sBAAsB,EACtB,gCAAgC,EAChC,8BAA8B,EAC9B,6BAA6B,EAC7B,4BAA4B,EAC5B,6BAA6B,EAC7B,6BAA6B,EAC7B,0BAA0B,EAC1B,4CAA4C,EAC5C,wBAAwB,EACxB,iCAAiC,EACjC,yBAAyB,EACzB,mCAAmC,EACnC,oBAAoB,EACpB,mBAAmB,EACnB,sBAAsB,EACtB,4BAA4B,EAC5B,eAAe,EACf,mBAAmB,EACnB,mBAAmB,EACnB,kBAAkB,EAClB,2BAA2B,EAC3B,oBAAoB,EACpB,mBAAmB,EACnB,qCAAqC,EACrC,mCAAmC,EACnC,6BAA6B,EAE7B,gCAAgC,EAChC,sBAAsB,EACtB,uBAAuB,EACvB,sBAAsB,EACtB,4BAA4B,EAC5B,mCAAmC,EACnC,6BAA6B,EAC7B,MAAM,sBAAsB,CAAA;AAC7B,OAAO,KAAK,MAAM,MAAM,mBAAmB,CAAA;AAC3C,OAAO,EAAgB,aAAa,EAAE,gBAAgB,EAAE,MAAM,kBAAkB,CAAA;AAChF,OAAO,EAAE,eAAe,EAAE,MAAM,qCAAqC,CAAA;AACrE,OAAO,EAAE,qBAAqB,EAAE,MAAM,sDAAsD,CAAA;AAC5F,OAAO,EAAE,gBAAgB,EAAE,MAAM,uCAAuC,CAAA;AACxE,OAAO,EAAE,yBAAyB,EAAE,MAAM,uDAAuD,CAAA;AACjG,OAAO,EAAE,iBAAiB,EAAE,sBAAsB,EAAE,MAAM,uBAAuB,CAAA;AACjF,OAAO,EAAE,6BAA6B,EAAE,MAAM,8DAA8D,CAAA;AAC5G,OAAO,EAAE,4BAA4B,EAAE,MAAM,6DAA6D,CAAA;AAC1G,OAAO,EAAE,4BAA4B,EAAE,MAAM,6DAA6D,CAAA;AAC1G,OAAO,EAAE,6BAA6B,EAAE,MAAM,8DAA8D,CAAA;AAC5G,OAAO,EAAE,yBAAyB,EAAE,MAAM,gDAAgD,CAAA;AAC1F,OAAO,EAAE,oBAAoB,EAAE,MAAM,yCAAyC,CAAA;AAC9E,OAAO,EAAE,6BAA6B,EAAE,MAAM,qEAAqE,CAAA;AACnH,OAAO,EAAE,0BAA0B,EAAE,MAAM,iDAAiD,CAAA;AAC5F,OAAO,EAAE,0BAA0B,EAAE,MAAM,kEAAkE,CAAA;AAC7G,OAAO,EAAE,uBAAuB,EAAE,MAAM,8CAA8C,CAAA;AACtF,OAAO,EAAE,8BAA8B,EAAE,MAAM,+DAA+D,CAAA;AAC9G,OAAO,EAAE,oBAAoB,EAAE,MAAM,2CAA2C,CAAA;AAChF,OAAO,EAAE,mBAAmB,EAAE,MAAM,0CAA0C,CAAA;AAC9E,OAAO,EAAE,4BAA4B,EAAE,MAAM,6DAA6D,CAAA;AAC1G,OAAO,EAAE,yBAAyB,EAAE,MAAM,8CAA8C,CAAA;AACxF,OAAO,EAAE,kCAAkC,EAAE,MAAM,mEAAmE,CAAA;AACtH,OAAO,EAAE,yBAAyB,EAAE,MAAM,8CAA8C,CAAA;AACxF,OAAO,EAAE,cAAc,EAAE,MAAM,mCAAmC,CAAA;AAElE,MAAM,WAAW,eAAe;IAC/B,oBAAoB,EAAE,oBAAoB,CAAA;IAC1C,aAAa,EAAE,aAAa,CAAA;IAC5B,wBAAwB,EAAE,wBAAwB,CAAA;IAClD,aAAa,EAAE,aAAa,CAAA;IAC5B,cAAc,EAAE,cAAc,CAAA;IAC9B,mBAAmB,EAAE,mBAAmB,CAAA;IACxC,SAAS,EAAE,MAAM,CAAC,SAAS,CAAA;IAC3B,sBAAsB,EAAE,4BAA4B,CAAA;IACpD,YAAY,EAAE,YAAY,CAAC,QAAQ,CAAC,CAAA;IACpC,eAAe,EAAE,eAAe,CAAA;IAChC,eAAe,EAAE,eAAe,CAAA;IAChC,mBAAmB,EAAE,eAAe,CAAA;IACpC,gBAAgB,EAAE,sBAAsB,CAAA;IACxC,UAAU,EAAE,UAAU,CAAC,cAAc,CAAA;IACrC,cAAc,EAAE,UAAU,CAAC,cAAc,CAAA;CACzC;AAED,MAAM,WAAW,mBAAmB;IACnC,UAAU,EAAE,UAAU,CAAC,cAAc,CAAA;IACrC,cAAc,EAAE,UAAU,CAAC,cAAc,CAAA;IACzC,aAAa,EAAE,cAAc,CAAA;IAC7B,WAAW,EAAE,aAAa,CAAA;IAC1B,qBAAqB,EAAE,qBAAqB,CAAA;IAC5C,kBAAkB,EAAE,kBAAkB,CAAA;IACtC,iBAAiB,EAAE,iBAAiB,CAAA;IACpC,eAAe,EAAE,IAAI,CAAC,SAAS,EAAE,SAAS,GAAG,SAAS,GAAG,mBAAmB,CAAC,CAAA;
|
|
1
|
+
{"version":3,"file":"TenantContainer.d.ts","sourceRoot":"","sources":["../../src/TenantContainer.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,mBAAmB,CAAA;AAC1C,OAAO,EAAE,eAAe,EAAE,YAAY,EAAE,MAAM,0BAA0B,CAAA;AACxE,OAAO,EAAE,UAAU,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAA;AAChE,OAAO,EAAE,OAAO,EAAE,MAAM,gBAAgB,CAAA;AACxC,OAAO,EAEN,aAAa,EACb,aAAa,EAEb,iBAAiB,EACjB,kBAAkB,EAClB,wBAAwB,EACxB,iBAAiB,EACjB,gBAAgB,EAChB,eAAe,EACf,kBAAkB,EAClB,eAAe,EACf,cAAc,EACd,wBAAwB,EAGxB,QAAQ,EACR,eAAe,EACf,mBAAmB,EACnB,kBAAkB,EAClB,UAAU,EACV,qBAAqB,EACrB,gBAAgB,EAChB,aAAa,EACb,iBAAiB,EACjB,mBAAmB,EACnB,mBAAmB,EAEnB,gBAAgB,EAChB,UAAU,EACV,mBAAmB,EACnB,qBAAqB,EACrB,oBAAoB,EACpB,wBAAwB,EAExB,mBAAmB,EACnB,6BAA6B,EAC7B,aAAa,EACb,kBAAkB,EAClB,cAAc,EACd,oBAAoB,EACpB,qBAAqB,EACrB,mBAAmB,EACnB,SAAS,EACT,WAAW,EAEX,YAAY,EACZ,cAAc,EACd,aAAa,EACb,cAAc,EACd,aAAa,EAEb,wBAAwB,EACxB,UAAU,EACV,MAAM,kBAAkB,CAAA;AACzB,OAAO,EAAE,WAAW,EAAoC,MAAM,gCAAgC,CAAA;AAC9F,OAAO,EACN,sBAAsB,EACtB,gCAAgC,EAChC,8BAA8B,EAC9B,6BAA6B,EAC7B,4BAA4B,EAC5B,6BAA6B,EAC7B,6BAA6B,EAC7B,0BAA0B,EAC1B,4CAA4C,EAC5C,wBAAwB,EACxB,iCAAiC,EACjC,yBAAyB,EACzB,mCAAmC,EACnC,oBAAoB,EACpB,mBAAmB,EACnB,sBAAsB,EACtB,4BAA4B,EAC5B,eAAe,EACf,mBAAmB,EACnB,mBAAmB,EACnB,kBAAkB,EAClB,2BAA2B,EAC3B,oBAAoB,EACpB,mBAAmB,EACnB,qCAAqC,EACrC,mCAAmC,EACnC,6BAA6B,EAE7B,gCAAgC,EAChC,sBAAsB,EACtB,uBAAuB,EACvB,sBAAsB,EACtB,4BAA4B,EAC5B,mCAAmC,EACnC,6BAA6B,EAC7B,MAAM,sBAAsB,CAAA;AAC7B,OAAO,KAAK,MAAM,MAAM,mBAAmB,CAAA;AAC3C,OAAO,EAAgB,aAAa,EAAE,gBAAgB,EAAE,MAAM,kBAAkB,CAAA;AAChF,OAAO,EAAE,eAAe,EAAE,MAAM,qCAAqC,CAAA;AACrE,OAAO,EAAE,qBAAqB,EAAE,MAAM,sDAAsD,CAAA;AAC5F,OAAO,EAAE,gBAAgB,EAAE,MAAM,uCAAuC,CAAA;AACxE,OAAO,EAAE,yBAAyB,EAAE,MAAM,uDAAuD,CAAA;AACjG,OAAO,EAAE,iBAAiB,EAAE,sBAAsB,EAAE,MAAM,uBAAuB,CAAA;AACjF,OAAO,EAAE,6BAA6B,EAAE,MAAM,8DAA8D,CAAA;AAC5G,OAAO,EAAE,4BAA4B,EAAE,MAAM,6DAA6D,CAAA;AAC1G,OAAO,EAAE,4BAA4B,EAAE,MAAM,6DAA6D,CAAA;AAC1G,OAAO,EAAE,6BAA6B,EAAE,MAAM,8DAA8D,CAAA;AAC5G,OAAO,EAAE,yBAAyB,EAAE,MAAM,gDAAgD,CAAA;AAC1F,OAAO,EAAE,oBAAoB,EAAE,MAAM,yCAAyC,CAAA;AAC9E,OAAO,EAAE,6BAA6B,EAAE,MAAM,qEAAqE,CAAA;AACnH,OAAO,EAAE,0BAA0B,EAAE,MAAM,iDAAiD,CAAA;AAC5F,OAAO,EAAE,0BAA0B,EAAE,MAAM,kEAAkE,CAAA;AAC7G,OAAO,EAAE,uBAAuB,EAAE,MAAM,8CAA8C,CAAA;AACtF,OAAO,EAAE,8BAA8B,EAAE,MAAM,+DAA+D,CAAA;AAC9G,OAAO,EAAE,oBAAoB,EAAE,MAAM,2CAA2C,CAAA;AAChF,OAAO,EAAE,mBAAmB,EAAE,MAAM,0CAA0C,CAAA;AAC9E,OAAO,EAAE,4BAA4B,EAAE,MAAM,6DAA6D,CAAA;AAC1G,OAAO,EAAE,yBAAyB,EAAE,MAAM,8CAA8C,CAAA;AACxF,OAAO,EAAE,kCAAkC,EAAE,MAAM,mEAAmE,CAAA;AACtH,OAAO,EAAE,yBAAyB,EAAE,MAAM,8CAA8C,CAAA;AACxF,OAAO,EAAE,cAAc,EAAE,MAAM,mCAAmC,CAAA;AAElE,MAAM,WAAW,eAAe;IAC/B,oBAAoB,EAAE,oBAAoB,CAAA;IAC1C,aAAa,EAAE,aAAa,CAAA;IAC5B,wBAAwB,EAAE,wBAAwB,CAAA;IAClD,aAAa,EAAE,aAAa,CAAA;IAC5B,cAAc,EAAE,cAAc,CAAA;IAC9B,mBAAmB,EAAE,mBAAmB,CAAA;IACxC,SAAS,EAAE,MAAM,CAAC,SAAS,CAAA;IAC3B,sBAAsB,EAAE,4BAA4B,CAAA;IACpD,YAAY,EAAE,YAAY,CAAC,QAAQ,CAAC,CAAA;IACpC,eAAe,EAAE,eAAe,CAAA;IAChC,eAAe,EAAE,eAAe,CAAA;IAChC,mBAAmB,EAAE,eAAe,CAAA;IACpC,gBAAgB,EAAE,sBAAsB,CAAA;IACxC,UAAU,EAAE,UAAU,CAAC,cAAc,CAAA;IACrC,cAAc,EAAE,UAAU,CAAC,cAAc,CAAA;CACzC;AAED,MAAM,WAAW,mBAAmB;IACnC,UAAU,EAAE,UAAU,CAAC,cAAc,CAAA;IACrC,cAAc,EAAE,UAAU,CAAC,cAAc,CAAA;IACzC,aAAa,EAAE,cAAc,CAAA;IAC7B,WAAW,EAAE,aAAa,CAAA;IAC1B,qBAAqB,EAAE,qBAAqB,CAAA;IAC5C,kBAAkB,EAAE,kBAAkB,CAAA;IACtC,iBAAiB,EAAE,iBAAiB,CAAA;IACpC,eAAe,EAAE,IAAI,CAAC,SAAS,EAAE,SAAS,GAAG,SAAS,GAAG,mBAAmB,CAAC,CAAA;IAC7E,MAAM,EAAE,MAAM,CAAA;CACd;AAED,qBAAa,sBAAsB;IAEjC,OAAO,CAAC,QAAQ,CAAC,SAAS;IAD3B,YACkB,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,SAAS,GAAG,SAAS,GAAG,mBAAmB,CAAC,EACrF;IAEJ,MAAM,CAAC,IAAI,EAAE,mBAAmB,GAAG,eAAe,CAoBjD;IAED,aAAa,CAAC,IAAI,EAAE,mBAAmB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OAuRtC;CACD"}
|
|
@@ -1,9 +1,11 @@
|
|
|
1
1
|
import { Command } from '../Command.js';
|
|
2
2
|
import { ApiKey } from '../../type/index.js';
|
|
3
3
|
/**
|
|
4
|
-
* Tracking writes (`last_used_at`) are throttled to at most once per
|
|
5
|
-
*
|
|
6
|
-
*
|
|
4
|
+
* Tracking writes (`last_ip`, `last_user_agent`, `last_used_at`) are throttled to at most once per
|
|
5
|
+
* this window, even when the IP or User-Agent changes: a key shared by several service replicas
|
|
6
|
+
* alternates between their addresses, and writing every change makes its row a lock hotspot.
|
|
7
|
+
* An idle check must add this slack to avoid prematurely expiring an active session whose
|
|
8
|
+
* `last_used_at` is intentionally stale (see {@link ApiKeyManager.verifyAndProlong}).
|
|
7
9
|
*/
|
|
8
10
|
export declare const PROLONG_THROTTLE_MS = 60000;
|
|
9
11
|
export interface ApiKeyRequestInfo {
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"ProlongApiKeyCommand.d.ts","sourceRoot":"","sources":["../../../../../src/model/commands/apiKey/ProlongApiKeyCommand.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,eAAe,CAAA;AACvC,OAAO,EAAE,MAAM,EAAE,MAAM,qBAAqB,CAAA;AAI5C
|
|
1
|
+
{"version":3,"file":"ProlongApiKeyCommand.d.ts","sourceRoot":"","sources":["../../../../../src/model/commands/apiKey/ProlongApiKeyCommand.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,eAAe,CAAA;AACvC,OAAO,EAAE,MAAM,EAAE,MAAM,qBAAqB,CAAA;AAI5C;;;;;;GAMG;AACH,eAAO,MAAM,mBAAmB,QAAS,CAAA;AAEzC,MAAM,WAAW,iBAAiB;IACjC,EAAE,CAAC,EAAE,MAAM,CAAA;IACX,SAAS,CAAC,EAAE,MAAM,CAAA;CAClB;AAED,MAAM,WAAW,mBAAmB;IACnC,MAAM,EAAE,MAAM,GAAG,IAAI,CAAA;IACrB,aAAa,EAAE,MAAM,GAAG,IAAI,CAAA;IAC5B,UAAU,EAAE,IAAI,GAAG,IAAI,CAAA;CACvB;AAED,qBAAa,oBAAqB,YAAW,OAAO,CAAC,IAAI,CAAC;IAExD,OAAO,CAAC,QAAQ,CAAC,EAAE;IACnB,OAAO,CAAC,QAAQ,CAAC,IAAI;IACrB,OAAO,CAAC,QAAQ,CAAC,UAAU;IAC3B,OAAO,CAAC,QAAQ,CAAC,iBAAiB;IAClC,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAC;IAC7B,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC;IAC1B,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAC;IAP/B,YACkB,EAAE,EAAE,MAAM,EACV,IAAI,EAAE,MAAM,CAAC,IAAI,EACjB,UAAU,EAAE,MAAM,GAAG,IAAI,EACzB,iBAAiB,EAAE,IAAI,GAAG,IAAI,EAC9B,WAAW,CAAC,EAAE,iBAAiB,YAAA,EAC/B,QAAQ,CAAC,EAAE,mBAAmB,YAAA,EAC9B,YAAY,CAAC,EAAE,IAAI,GAAG,IAAI,YAAA,EACxC;IAEE,OAAO,CAAC,EAAE,EAAE,EAAE,SAAS,EAAE,EAAE,OAAO,CAAC,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAwC5D;IAED,OAAO,CAAC,oBAAoB;CAU5B"}
|
|
@@ -13,6 +13,7 @@ declare namespace CreateAuthLogEntryCommand {
|
|
|
13
13
|
invokedById?: string;
|
|
14
14
|
personInputIdentifier?: string;
|
|
15
15
|
personId?: string;
|
|
16
|
+
/** A `person_token` id (password reset, e-mail verification, passwordless). FK-checked, so never an `api_key` id: put that in `eventData`. */
|
|
16
17
|
personTokenId?: string;
|
|
17
18
|
success: boolean;
|
|
18
19
|
errorCode?: string;
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"CreateAuthLogEntryCommand.d.ts","sourceRoot":"","sources":["../../../../../src/model/commands/authLog/CreateAuthLogEntryCommand.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,eAAe,CAAA;AACvC,OAAO,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAA;AAEtD,OAAO,EAAE,SAAS,EAAE,MAAM,mBAAmB,CAAA;AAE7C,qBAAa,yBAA0B,YAAW,OAAO,CAAC,IAAI,CAAC;IAE7D,OAAO,CAAC,QAAQ,CAAC,IAAI;IADtB,YACkB,IAAI,EAAE,yBAAyB,CAAC,KAAK,EAEtD;IAEK,OAAO,CAAC,EAAE,EAAE,EAAE,SAAS,EAAE,EAAE,OAAO,CAAC,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAuB5D;CACD;AAED,kBAAU,yBAAyB,CAAC;IACnC,KAAY,KAAK,GAAG;QACnB,IAAI,EAAE,cAAc,CAAA;QACpB,yIAAyI;QACzI,WAAW,CAAC,EAAE,MAAM,CAAA;QACpB,qBAAqB,CAAC,EAAE,MAAM,CAAA;QAC9B,QAAQ,CAAC,EAAE,MAAM,CAAA;QACjB,aAAa,CAAC,EAAE,MAAM,CAAA;QACtB,OAAO,EAAE,OAAO,CAAA;QAChB,SAAS,CAAC,EAAE,MAAM,CAAA;QAClB,YAAY,CAAC,EAAE,MAAM,CAAA;QACrB,SAAS,CAAC,EAAE,MAAM,CAAA;QAClB,SAAS,CAAC,EAAE,MAAM,CAAA;QAClB,kBAAkB,CAAC,EAAE,MAAM,CAAA;QAC3B,QAAQ,CAAC,EAAE,SAAS,CAAA;QACpB,cAAc,CAAC,EAAE,MAAM,CAAA;QACvB,SAAS,CAAC,EAAE,SAAS,CAAA;QACrB,oFAAoF;QACpF,UAAU,CAAC,EAAE,MAAM,CAAA;QACnB,6DAA6D;QAC7D,iBAAiB,CAAC,EAAE,MAAM,CAAA;KAC1B,CAAA;CACD"}
|
|
1
|
+
{"version":3,"file":"CreateAuthLogEntryCommand.d.ts","sourceRoot":"","sources":["../../../../../src/model/commands/authLog/CreateAuthLogEntryCommand.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,eAAe,CAAA;AACvC,OAAO,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAA;AAEtD,OAAO,EAAE,SAAS,EAAE,MAAM,mBAAmB,CAAA;AAE7C,qBAAa,yBAA0B,YAAW,OAAO,CAAC,IAAI,CAAC;IAE7D,OAAO,CAAC,QAAQ,CAAC,IAAI;IADtB,YACkB,IAAI,EAAE,yBAAyB,CAAC,KAAK,EAEtD;IAEK,OAAO,CAAC,EAAE,EAAE,EAAE,SAAS,EAAE,EAAE,OAAO,CAAC,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAuB5D;CACD;AAED,kBAAU,yBAAyB,CAAC;IACnC,KAAY,KAAK,GAAG;QACnB,IAAI,EAAE,cAAc,CAAA;QACpB,yIAAyI;QACzI,WAAW,CAAC,EAAE,MAAM,CAAA;QACpB,qBAAqB,CAAC,EAAE,MAAM,CAAA;QAC9B,QAAQ,CAAC,EAAE,MAAM,CAAA;QACjB,8IAA8I;QAC9I,aAAa,CAAC,EAAE,MAAM,CAAA;QACtB,OAAO,EAAE,OAAO,CAAA;QAChB,SAAS,CAAC,EAAE,MAAM,CAAA;QAClB,YAAY,CAAC,EAAE,MAAM,CAAA;QACrB,SAAS,CAAC,EAAE,MAAM,CAAA;QAClB,SAAS,CAAC,EAAE,MAAM,CAAA;QAClB,kBAAkB,CAAC,EAAE,MAAM,CAAA;QAC3B,QAAQ,CAAC,EAAE,SAAS,CAAA;QACpB,cAAc,CAAC,EAAE,MAAM,CAAA;QACvB,SAAS,CAAC,EAAE,SAAS,CAAA;QACrB,oFAAoF;QACpF,UAAU,CAAC,EAAE,MAAM,CAAA;QACnB,6DAA6D;QAC7D,iBAAiB,CAAC,EAAE,MAAM,CAAA;KAC1B,CAAA;CACD"}
|
|
@@ -7,11 +7,13 @@ import { DatabaseContext } from '../utils/index.js';
|
|
|
7
7
|
import { ApiKeyRequestInfo } from '../commands/index.js';
|
|
8
8
|
import { AuthLogService } from './AuthLogService.js';
|
|
9
9
|
import { ClaimMappingAudit, IDPClaimSyncService } from './idp/IDPClaimSyncService.js';
|
|
10
|
+
import { Logger } from '@contember/logger';
|
|
10
11
|
declare class IDPSignInManager {
|
|
11
12
|
private readonly apiKeyManager;
|
|
12
13
|
private readonly idpRegistry;
|
|
13
14
|
private readonly claimSyncService;
|
|
14
|
-
|
|
15
|
+
private readonly logger;
|
|
16
|
+
constructor(apiKeyManager: ApiKeyManager, idpRegistry: IDPHandlerRegistry, claimSyncService: IDPClaimSyncService, logger: Logger);
|
|
15
17
|
signInIDP(dbContext: DatabaseContext, idpSlug: string, responseData: unknown, expiration?: number, requestInfo?: ApiKeyRequestInfo, trustForwardedInfo?: boolean): Promise<IDPSignInManager.SignInIDPResponse>;
|
|
16
18
|
initSignInIDP(dbContext: DatabaseContext, idpSlug: string, data: unknown): Promise<IDPSignInManager.InitSignInIDPResponse>;
|
|
17
19
|
private resolvePerson;
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"IDPSignInManager.d.ts","sourceRoot":"","sources":["../../../../src/model/service/IDPSignInManager.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAA;AACjD,OAAO,EAA8D,SAAS,EAAE,MAAM,qBAAqB,CAAA;AAC3G,OAAO,EAAE,kBAAkB,EAAqD,MAAM,gBAAgB,CAAA;AACtG,OAAO,EAAE,QAAQ,EAA6B,MAAM,sBAAsB,CAAA;AAC1E,OAAO,EAAE,sBAAsB,EAAE,mBAAmB,EAAE,kBAAkB,EAAE,MAAM,uBAAuB,CAAA;AACvG,OAAO,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAA;AACnD,OAAO,EAAE,iBAAiB,EAA6F,MAAM,sBAAsB,CAAA;AAMnJ,OAAO,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAA;AACpD,OAAO,EAAE,iBAAiB,EAAE,mBAAmB,EAAE,MAAM,8BAA8B,CAAA;
|
|
1
|
+
{"version":3,"file":"IDPSignInManager.d.ts","sourceRoot":"","sources":["../../../../src/model/service/IDPSignInManager.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAA;AACjD,OAAO,EAA8D,SAAS,EAAE,MAAM,qBAAqB,CAAA;AAC3G,OAAO,EAAE,kBAAkB,EAAqD,MAAM,gBAAgB,CAAA;AACtG,OAAO,EAAE,QAAQ,EAA6B,MAAM,sBAAsB,CAAA;AAC1E,OAAO,EAAE,sBAAsB,EAAE,mBAAmB,EAAE,kBAAkB,EAAE,MAAM,uBAAuB,CAAA;AACvG,OAAO,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAA;AACnD,OAAO,EAAE,iBAAiB,EAA6F,MAAM,sBAAsB,CAAA;AAMnJ,OAAO,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAA;AACpD,OAAO,EAAE,iBAAiB,EAAE,mBAAmB,EAAE,MAAM,8BAA8B,CAAA;AAErF,OAAO,EAAE,MAAM,EAAE,MAAM,mBAAmB,CAAA;AAE1C,cAAM,gBAAgB;IAEpB,OAAO,CAAC,QAAQ,CAAC,aAAa;IAC9B,OAAO,CAAC,QAAQ,CAAC,WAAW;IAC5B,OAAO,CAAC,QAAQ,CAAC,gBAAgB;IACjC,OAAO,CAAC,QAAQ,CAAC,MAAM;IAJxB,YACkB,aAAa,EAAE,aAAa,EAC5B,WAAW,EAAE,kBAAkB,EAC/B,gBAAgB,EAAE,mBAAmB,EACrC,MAAM,EAAE,MAAM,EAC5B;IAEE,SAAS,CACd,SAAS,EAAE,eAAe,EAC1B,OAAO,EAAE,MAAM,EACf,YAAY,EAAE,OAAO,EACrB,UAAU,CAAC,EAAE,MAAM,EACnB,WAAW,CAAC,EAAE,iBAAiB,EAC/B,kBAAkB,CAAC,EAAE,OAAO,GAC1B,OAAO,CAAC,gBAAgB,CAAC,iBAAiB,CAAC,CA8J7C;IAEK,aAAa,CAAC,SAAS,EAAE,eAAe,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,GAAG,OAAO,CAAC,gBAAgB,CAAC,qBAAqB,CAAC,CAwB/H;YAEa,aAAa;YAoCb,MAAM;YAmBN,iBAAiB;CAG/B;AAED,kBAAU,gBAAgB,CAAC;IAC1B,MAAM,MAAM,mBAAmB,GAAG;QACjC,QAAQ,CAAC,MAAM,EAAE,SAAS,GAAG,IAAI,CAAA;QACjC,QAAQ,CAAC,aAAa,CAAC,EAAE,sBAAsB,CAAA;QAC/C,QAAQ,CAAC,eAAe,CAAC,EAAE,MAAM,CAAA;QACjC,4GAA4G;QAC5G,QAAQ,CAAC,WAAW,CAAC,EAAE,OAAO,CAAA;KAC9B,CAAA;IAED,MAAM,MAAM,qBAAqB,GAAG,QAAQ,CAAC,mBAAmB,EAAE,sBAAsB,CAAC,CAAA;IAEzF,UAAU,eAAe;QACxB,QAAQ,CAAC,MAAM,EAAE,SAAS,CAAA;QAC1B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;QACtB,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;QAC9C,6EAA6E;QAC7E,QAAQ,CAAC,kBAAkB,CAAC,EAAE,MAAM,CAAA;QACpC,2FAA2F;QAC3F,QAAQ,CAAC,iBAAiB,CAAC,EAAE,iBAAiB,GAAG,IAAI,CAAA;QACrD,+GAA+G;QAC/G,QAAQ,CAAC,kBAAkB,CAAC,EAAE,OAAO,CAAA;QACrC,CAAC,cAAc,CAAC,GAAG,CAAC,EAAE,cAAc,CAAC,GAAG,CAAA;KACxC;IAED,MAAM,MAAM,iBAAiB,GAAG,QAAQ,CAAC,eAAe,EAAE,kBAAkB,EAAE;QAC7E,CAAC,cAAc,CAAC,GAAG,CAAC,EAAE,cAAc,CAAC,GAAG,CAAA;KACxC,CAAC,CAAA;;CACF;AAED,OAAO,EAAE,gBAAgB,EAAE,CAAA"}
|
|
@@ -16,6 +16,7 @@ export declare class ApiKeyManager {
|
|
|
16
16
|
private readonly idpSessionRevalidator?;
|
|
17
17
|
constructor(apiKeyService: ApiKeyService, authPolicyResolver: AuthPolicyResolver, authLogService: AuthLogService, unpersistedApiKeyManager?: UnpersistedApiKeyManager, idpSessionRevalidator?: IdpSessionRevalidator | undefined);
|
|
18
18
|
verifyAndProlong(dbContext: DatabaseContext, readDbContext: DatabaseContext, token: string, requestInfo?: ApiKeyRequestInfo, forwardedInfo?: ApiKeyRequestInfo): Promise<VerifyResponse>;
|
|
19
|
+
private fetchApiKeyByToken;
|
|
19
20
|
createSessionApiKey(dbContext: DatabaseContext, identityId: string, expiration?: number, requestInfo?: ApiKeyRequestInfo, trustForwardedInfo?: boolean): Promise<string>;
|
|
20
21
|
/**
|
|
21
22
|
* Like {@link createSessionApiKey} but also returns the api_key id — needed when the
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"ApiKeyManager.d.ts","sourceRoot":"","sources":["../../../../../src/model/service/apiKey/ApiKeyManager.ts"],"names":[],"mappings":"AAAA,OAAO,EACN,iBAAiB,EAOjB,MAAM,yBAAyB,CAAA;AAGhC,OAAO,EAAE,QAAQ,EAA6B,MAAM,yBAAyB,CAAA;AAC7E,OAAO,EAAE,eAAe,EAAE,SAAS,EAAE,MAAM,sBAAsB,CAAA;AACjE,OAAO,EAAE,aAAa,EAAE,oBAAoB,EAAE,MAAM,oBAAoB,CAAA;AAExE,OAAO,EAAE,GAAG,EAAE,MAAM,mBAAmB,CAAA;AACvC,OAAO,EAAuC,SAAS,EAAqC,MAAM,wBAAwB,CAAA;AAI1H,OAAO,EAAE,kBAAkB,EAAE,MAAM,0BAA0B,CAAA;AAC7D,OAAO,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAA;AACrD,OAAO,EAAE,qBAAqB,EAAE,MAAM,iCAAiC,CAAA;AACvE,OAAO,EAAE,wBAAwB,EAAE,MAAM,+BAA+B,CAAA;AAExE,qBAAa,aAAa;IAExB,OAAO,CAAC,QAAQ,CAAC,aAAa;IAC9B,OAAO,CAAC,QAAQ,CAAC,kBAAkB;IACnC,OAAO,CAAC,QAAQ,CAAC,cAAc;IAC/B,OAAO,CAAC,QAAQ,CAAC,wBAAwB;IACzC,OAAO,CAAC,QAAQ,CAAC,qBAAqB,CAAC;IALxC,YACkB,aAAa,EAAE,aAAa,EAC5B,kBAAkB,EAAE,kBAAkB,EACtC,cAAc,EAAE,cAAc,EAC9B,wBAAwB,GAAE,wBAAyD,EACnF,qBAAqB,CAAC,EAAE,qBAAqB,YAAA,EAC3D;IAEE,gBAAgB,CACrB,SAAS,EAAE,eAAe,EAC1B,aAAa,EAAE,eAAe,EAC9B,KAAK,EAAE,MAAM,EACb,WAAW,CAAC,EAAE,iBAAiB,EAC/B,aAAa,CAAC,EAAE,iBAAiB,GAC/B,OAAO,CAAC,cAAc,CAAC,
|
|
1
|
+
{"version":3,"file":"ApiKeyManager.d.ts","sourceRoot":"","sources":["../../../../../src/model/service/apiKey/ApiKeyManager.ts"],"names":[],"mappings":"AAAA,OAAO,EACN,iBAAiB,EAOjB,MAAM,yBAAyB,CAAA;AAGhC,OAAO,EAAE,QAAQ,EAA6B,MAAM,yBAAyB,CAAA;AAC7E,OAAO,EAAE,eAAe,EAAE,SAAS,EAAE,MAAM,sBAAsB,CAAA;AACjE,OAAO,EAAE,aAAa,EAAE,oBAAoB,EAAE,MAAM,oBAAoB,CAAA;AAExE,OAAO,EAAE,GAAG,EAAE,MAAM,mBAAmB,CAAA;AACvC,OAAO,EAAuC,SAAS,EAAqC,MAAM,wBAAwB,CAAA;AAI1H,OAAO,EAAE,kBAAkB,EAAE,MAAM,0BAA0B,CAAA;AAC7D,OAAO,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAA;AACrD,OAAO,EAAE,qBAAqB,EAAE,MAAM,iCAAiC,CAAA;AACvE,OAAO,EAAE,wBAAwB,EAAE,MAAM,+BAA+B,CAAA;AAExE,qBAAa,aAAa;IAExB,OAAO,CAAC,QAAQ,CAAC,aAAa;IAC9B,OAAO,CAAC,QAAQ,CAAC,kBAAkB;IACnC,OAAO,CAAC,QAAQ,CAAC,cAAc;IAC/B,OAAO,CAAC,QAAQ,CAAC,wBAAwB;IACzC,OAAO,CAAC,QAAQ,CAAC,qBAAqB,CAAC;IALxC,YACkB,aAAa,EAAE,aAAa,EAC5B,kBAAkB,EAAE,kBAAkB,EACtC,cAAc,EAAE,cAAc,EAC9B,wBAAwB,GAAE,wBAAyD,EACnF,qBAAqB,CAAC,EAAE,qBAAqB,YAAA,EAC3D;IAEE,gBAAgB,CACrB,SAAS,EAAE,eAAe,EAC1B,aAAa,EAAE,eAAe,EAC9B,KAAK,EAAE,MAAM,EACb,WAAW,CAAC,EAAE,iBAAiB,EAC/B,aAAa,CAAC,EAAE,iBAAiB,GAC/B,OAAO,CAAC,cAAc,CAAC,CAwHzB;YAEa,kBAAkB;IAc1B,mBAAmB,CACxB,SAAS,EAAE,eAAe,EAC1B,UAAU,EAAE,MAAM,EAClB,UAAU,CAAC,EAAE,MAAM,EACnB,WAAW,CAAC,EAAE,iBAAiB,EAC/B,kBAAkB,CAAC,EAAE,OAAO,GAC1B,OAAO,CAAC,MAAM,CAAC,CAGjB;IAED;;;;OAIG;IACG,yBAAyB,CAC9B,SAAS,EAAE,eAAe,EAC1B,UAAU,EAAE,MAAM,EAClB,UAAU,CAAC,EAAE,MAAM,EACnB,WAAW,CAAC,EAAE,iBAAiB,EAC/B,kBAAkB,CAAC,EAAE,OAAO,GAC1B,OAAO,CAAC;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC,CAwExC;IAEK,UAAU,CAAC,SAAS,EAAE,eAAe,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,SAAS,GAAG,IAAI,CAAC,CAIxF;IAEK,mBAAmB,CAAC,SAAS,EAAE,eAAe,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAErF;IAEK,aAAa,CAAC,SAAS,EAAE,eAAe,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAElF;IAEK,sBAAsB,CAAC,SAAS,EAAE,eAAe,EAAE,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAE1F;IAEK,2BAA2B,CAChC,SAAS,EAAE,eAAe,EAC1B,WAAW,EAAE,MAAM,EACnB,KAAK,EAAE,SAAS,MAAM,EAAE,EACxB,SAAS,CAAC,EAAE,SAAS,EACrB,kBAAkB,CAAC,EAAE,OAAO,GAC1B,OAAO,CAAC,oBAAoB,CAAC,CAI/B;IAEK,4BAA4B,CACjC,SAAS,EAAE,eAAe,EAC1B,SAAS,EAAE,MAAM,EACjB,WAAW,EAAE,SAAS,GAAG,CAAC,UAAU,EAAE,EACtC,WAAW,EAAE,MAAM,EACnB,SAAS,CAAC,EAAE,SAAS,EACrB,kBAAkB,CAAC,EAAE,OAAO,GAC1B,OAAO,CAAC,oBAAoB,CAAC,CAI/B;CACD;AAOD,MAAM,MAAM,cAAc,GAAG,QAAQ,CAAC,YAAY,EAAE,eAAe,CAAC,CAAA;AAEpE,qBAAa,YAAY;aAIP,UAAU,EAAE,MAAM;aAClB,QAAQ,EAAE,MAAM;aAChB,KAAK,EAAE,MAAM,EAAE;aACf,QAAQ,EAAE,MAAM,GAAG,IAAI;aACvB,kBAAkB,EAAE,OAAO;IAP5C,QAAQ,CAAC,KAAK,QAAO;IAErB,YACiB,UAAU,EAAE,MAAM,EAClB,QAAQ,EAAE,MAAM,EAChB,KAAK,EAAE,MAAM,EAAE,EACf,QAAQ,EAAE,MAAM,GAAG,IAAI,EACvB,kBAAkB,GAAE,OAAe,EAChD;CACJ;AAED,oBAAY,eAAe;IAC1B,SAAS,cAAc;IACvB,QAAQ,aAAa;IACrB,OAAO,YAAY;IACnB,cAAc,mBAAmB;IACjC,mBAAmB,wBAAwB;CAC3C"}
|
|
@@ -3,6 +3,7 @@ import { ApiKeyRequestInfo } from '../../commands/index.js';
|
|
|
3
3
|
import { ApiKeyRow } from '../../queries/apiKey/ApiKeyQuery.js';
|
|
4
4
|
import { IDPHandlerRegistry } from './IDPHandlerRegistry.js';
|
|
5
5
|
import { IDPClaimSyncService } from './IDPClaimSyncService.js';
|
|
6
|
+
import { Logger } from '@contember/logger';
|
|
6
7
|
export type RevalidationOutcome = 'valid' | 'revoked';
|
|
7
8
|
/**
|
|
8
9
|
* Re-validates IdP-backed sessions against their identity provider on the verify hot path
|
|
@@ -20,7 +21,8 @@ export type RevalidationOutcome = 'valid' | 'revoked';
|
|
|
20
21
|
export declare class IdpSessionRevalidator {
|
|
21
22
|
private readonly idpRegistry;
|
|
22
23
|
private readonly claimSyncService;
|
|
23
|
-
|
|
24
|
+
private readonly logger;
|
|
25
|
+
constructor(idpRegistry: IDPHandlerRegistry, claimSyncService: IDPClaimSyncService, logger: Logger);
|
|
24
26
|
revalidate(dbContext: DatabaseContext, readDbContext: DatabaseContext, apiKeyRow: ApiKeyRow, requestInfo?: ApiKeyRequestInfo): Promise<RevalidationOutcome>;
|
|
25
27
|
/**
|
|
26
28
|
* Decide whether (and how) to revalidate, purely from timestamps — no interval parsing in
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"IdpSessionRevalidator.d.ts","sourceRoot":"","sources":["../../../../../src/model/service/idp/IdpSessionRevalidator.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAA;AACtD,OAAO,EAAE,iBAAiB,EAAE,MAAM,yBAAyB,CAAA;AAC3D,OAAO,EAAE,SAAS,EAAE,MAAM,qCAAqC,CAAA;AAE/D,OAAO,EAAE,kBAAkB,EAAE,MAAM,yBAAyB,CAAA;AAO5D,OAAO,EAAE,mBAAmB,EAAE,MAAM,0BAA0B,CAAA;
|
|
1
|
+
{"version":3,"file":"IdpSessionRevalidator.d.ts","sourceRoot":"","sources":["../../../../../src/model/service/idp/IdpSessionRevalidator.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAA;AACtD,OAAO,EAAE,iBAAiB,EAAE,MAAM,yBAAyB,CAAA;AAC3D,OAAO,EAAE,SAAS,EAAE,MAAM,qCAAqC,CAAA;AAE/D,OAAO,EAAE,kBAAkB,EAAE,MAAM,yBAAyB,CAAA;AAO5D,OAAO,EAAE,mBAAmB,EAAE,MAAM,0BAA0B,CAAA;AAC9D,OAAO,EAAE,MAAM,EAAE,MAAM,mBAAmB,CAAA;AAI1C,MAAM,MAAM,mBAAmB,GAAG,OAAO,GAAG,SAAS,CAAA;AAgBrD;;;;;;;;;;;;GAYG;AACH,qBAAa,qBAAqB;IAEhC,OAAO,CAAC,QAAQ,CAAC,WAAW;IAC5B,OAAO,CAAC,QAAQ,CAAC,gBAAgB;IACjC,OAAO,CAAC,QAAQ,CAAC,MAAM;IAHxB,YACkB,WAAW,EAAE,kBAAkB,EAC/B,gBAAgB,EAAE,mBAAmB,EACrC,MAAM,EAAE,MAAM,EAE/B;IAEK,UAAU,CACf,SAAS,EAAE,eAAe,EAC1B,aAAa,EAAE,eAAe,EAC9B,SAAS,EAAE,SAAS,EACpB,WAAW,CAAC,EAAE,iBAAiB,GAC7B,OAAO,CAAC,mBAAmB,CAAC,CA0D9B;IAED;;;OAGG;IACH,OAAO,CAAC,MAAM;YAqBA,eAAe;IAoE7B;;;;;;;OAOG;YACW,UAAU;YAuCV,cAAc;YA+Bd,cAAc;IAe5B;;;;;;OAMG;YACW,qBAAqB;YA6BrB,MAAM;IAgCpB,OAAO,CAAC,aAAa;CAarB"}
|