@decaf-ts/integrations 0.1.1

package/lib/esm/keycloak/services/KeycloakAuthService.js

@@ -0,0 +1,148 @@
+import { BadRequestError, ConflictError, InternalError, NotFoundError, } from "@decaf-ts/db-decorators";
+import { ClientBasedService } from "@decaf-ts/core";
+import Axios from "axios";
+import * as https from "node:https";
+export class KeycloakAuthService extends ClientBasedService {
+    async initialize(...args) {
+        const { ctxArgs } = (await this.logCtx(args, "initialize", true)).for(this.initialize);
+        const config = ctxArgs[0];
+        this._config = config;
+        const client = this.createHttpClient(config);
+        this._client = client;
+        return { config, client };
+    }
+    async getAccessToken(keycloakUser, ...args) {
+        const { ctxArgs } = (await this.logCtx(args, "getAccessToken", true)).for(this.getAccessToken);
+        const response = await this.request("POST", `/realms/${keycloakUser.realm}/protocol/openid-connect/token`, undefined, new URLSearchParams({
+            client_id: keycloakUser.apiClientId,
+            username: keycloakUser.username,
+            password: keycloakUser.password,
+            grant_type: "password",
+        }).toString(), 200, { "content-type": "application/x-www-form-urlencoded" }, ...ctxArgs);
+        const data = this.parseJsonResponse(response.data);
+        if (data?.access_token)
+            return data.access_token;
+        throw new BadRequestError(`Unable to get Keycloak access token for user ${keycloakUser.username}`);
+    }
+    async refreshAccessToken(refreshToken, clientId, clientSecret, ...args) {
+        const { ctxArgs } = (await this.logCtx(args, "refreshAccessToken", true)).for(this.refreshAccessToken);
+        const response = await this.request("POST", `/realms/${this.config.realmApiUser.realm}/protocol/openid-connect/token`, undefined, new URLSearchParams({
+            client_id: clientId,
+            client_secret: clientSecret,
+            grant_type: "refresh_token",
+            refresh_token: refreshToken,
+        }).toString(), 200, { "content-type": "application/x-www-form-urlencoded" }, ...ctxArgs);
+        const data = this.parseJsonResponse(response.data);
+        if (data?.access_token)
+            return data.access_token;
+        throw new BadRequestError("Unable to refresh Keycloak access token");
+    }
+    async validateAccessToken(accessToken, ...args) {
+        const { ctxArgs } = (await this.logCtx(args, "validateAccessToken", true)).for(this.validateAccessToken);
+        try {
+            await this.request("GET", `/realms/${this.config.realmApiUser.realm}/protocol/openid-connect/userinfo`, accessToken, undefined, 200, {}, ...ctxArgs);
+            return true;
+        }
+        catch {
+            return false;
+        }
+    }
+    async logout(keycloakUser, refreshToken, ...args) {
+        const { ctxArgs } = (await this.logCtx(args, "logout", true)).for(this.logout);
+        await this.request("POST", `/realms/${keycloakUser.realm}/protocol/openid-connect/logout`, undefined, new URLSearchParams({
+            client_id: keycloakUser.apiClientId,
+            refresh_token: refreshToken,
+        }).toString(), 200, { "content-type": "application/x-www-form-urlencoded" }, ...ctxArgs);
+    }
+    createHttpClient(config) {
+        return Axios.create({
+            baseURL: `${config.protocol}://${config.host}`,
+            headers: { "Content-Type": "application/json" },
+            validateStatus: () => true,
+            httpsAgent: new https.Agent({
+                rejectUnauthorized: this.isProduction(config),
+            }),
+        });
+    }
+    isProduction(config) {
+        return config.id === "production" || config.host.includes("prod");
+    }
+    async request(method, path, accessToken, payload, successCode, headers, ...args) {
+        this.logCtx(args, this.request);
+        const response = await this.client.request({
+            method,
+            url: `${this.config.protocol}://${this.config.host}${path}`,
+            data: payload === undefined
+                ? undefined
+                : typeof payload === "string"
+                    ? payload
+                    : JSON.stringify(payload),
+            headers: {
+                ...headers,
+                ...(accessToken ? { Authorization: `Bearer ${accessToken}` } : {}),
+                ...(payload !== undefined && typeof payload !== "string"
+                    ? { "Content-Type": "application/json" }
+                    : {}),
+            },
+            httpsAgent: new https.Agent({
+                rejectUnauthorized: this.isProduction(this.config),
+            }),
+            validateStatus: () => true,
+        });
+        if (response.status !== successCode) {
+            this.handleHttpResponse(response, successCode);
+        }
+        return response;
+    }
+    handleHttpResponse(response, successCode, errorMsg) {
+        const status = response.status;
+        const message = errorMsg
+            ? `${errorMsg}: Expected ${successCode}, received ${response.status}: ${response.statusText}.`
+            : `Expected ${successCode}, received ${response.status}: ${response.statusText}`;
+        if (status === 404 || message.toLowerCase().includes("not found")) {
+            throw new NotFoundError(message);
+        }
+        if (status === 409 || message.toLowerCase().includes("conflict")) {
+            throw new ConflictError(message);
+        }
+        if (status === 400) {
+            throw new BadRequestError(message);
+        }
+        if (status === 401 || status === 403) {
+            throw new NotFoundError(message);
+        }
+        throw new InternalError(message);
+    }
+    parseError(error) {
+        const message = error.message || error.name || "Unknown error";
+        const lowerMessage = message.toLowerCase();
+        if (lowerMessage.includes("not found") || lowerMessage.includes("404")) {
+            return new NotFoundError(message);
+        }
+        if (lowerMessage.includes("already exists") || lowerMessage.includes("conflict") || lowerMessage.includes("409")) {
+            return new ConflictError(message);
+        }
+        if (lowerMessage.includes("invalid") || lowerMessage.includes("bad request") || lowerMessage.includes("400")) {
+            return new BadRequestError(message);
+        }
+        if (lowerMessage.includes("unauthorized") || lowerMessage.includes("401")) {
+            return new NotFoundError(message);
+        }
+        if (lowerMessage.includes("forbidden") || lowerMessage.includes("403")) {
+            return new NotFoundError(message);
+        }
+        return new InternalError(message);
+    }
+    parseJsonResponse(data) {
+        if (typeof data === "string") {
+            try {
+                return JSON.parse(data);
+            }
+            catch {
+                return undefined;
+            }
+        }
+        return data;
+    }
+}
+//# sourceMappingURL=KeycloakAuthService.js.map

package/lib/esm/keycloak/services/KeycloakAuthService.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"KeycloakAuthService.js","sourceRoot":"","sources":["../../../../src/keycloak/services/KeycloakAuthService.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,eAAe,EACf,aAAa,EACb,aAAa,EACb,aAAa,GACd,MAAM,yBAAyB,CAAC;AAEjC,OAAO,EAAE,kBAAkB,EAAE,MAAM,gBAAgB,CAAC;AAEpD,OAAO,KAAwB,MAAM,OAAO,CAAC;AAC7C,OAAO,KAAK,KAAK,MAAM,YAAY,CAAC;AAEpC,MAAM,OAAO,mBAAoB,SAAQ,kBAGxC;IACC,KAAK,CAAC,UAAU,CACd,GAAG,IAA6B;QAEhC,MAAM,EAAE,OAAO,EAAE,GAAG,CAClB,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,YAAY,EAAE,IAAI,CAAC,CAC5C,CAAC,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QACvB,MAAM,MAAM,GAAG,OAAO,CAAC,CAAC,CAAwB,CAAC;QACjD,IAAI,CAAC,OAAO,GAAG,MAAM,CAAC;QACtB,MAAM,MAAM,GAAG,IAAI,CAAC,gBAAgB,CAAC,MAAM,CAAC,CAAC;QAC7C,IAAI,CAAC,OAAO,GAAG,MAAM,CAAC;QACtB,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;IAC5B,CAAC;IAED,KAAK,CAAC,cAAc,CAClB,YAA0B,EAC1B,GAAG,IAA6B;QAEhC,MAAM,EAAE,OAAO,EAAE,GAAG,CAClB,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,gBAAgB,EAAE,IAAI,CAAC,CAChD,CAAC,GAAG,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;QAE3B,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,OAAO,CACjC,MAAM,EACN,WAAW,YAAY,CAAC,KAAK,gCAAgC,EAC7D,SAAS,EACT,IAAI,eAAe,CAAC;YAClB,SAAS,EAAE,YAAY,CAAC,WAAW;YACnC,QAAQ,EAAE,YAAY,CAAC,QAAQ;YAC/B,QAAQ,EAAE,YAAY,CAAC,QAAQ;YAC/B,UAAU,EAAE,UAAU;SACvB,CAAC,CAAC,QAAQ,EAAE,EACb,GAAG,EACH,EAAE,cAAc,EAAE,mCAAmC,EAAE,EACvD,GAAG,OAAO,CACX,CAAC;QAEF,MAAM,IAAI,GAAG,IAAI,CAAC,iBAAiB,CACjC,QAAQ,CAAC,IAAI,CACd,CAAC;QACF,IAAI,IAAI,EAAE,YAAY;YAAE,OAAO,IAAI,CAAC,YAAY,CAAC;QAEjD,MAAM,IAAI,eAAe,CACvB,gDAAgD,YAAY,CAAC,QAAQ,EAAE,CACxE,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,kBAAkB,CACtB,YAAoB,EACpB,QAAgB,EAChB,YAAoB,EACpB,GAAG,IAA6B;QAEhC,MAAM,EAAE,OAAO,EAAE,GAAG,CAClB,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,oBAAoB,EAAE,IAAI,CAAC,CACpD,CAAC,GAAG,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC;QAE/B,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,OAAO,CACjC,MAAM,EACN,WAAW,IAAI,CAAC,MAAM,CAAC,YAAa,CAAC,KAAK,gCAAgC,EAC1E,SAAS,EACT,IAAI,eAAe,CAAC;YAClB,SAAS,EAAE,QAAQ;YACnB,aAAa,EAAE,YAAY;YAC3B,UAAU,EAAE,eAAe;YAC3B,aAAa,EAAE,YAAY;SAC5B,CAAC,CAAC,QAAQ,EAAE,EACb,GAAG,EACH,EAAE,cAAc,EAAE,mCAAmC,EAAE,EACvD,GAAG,OAAO,CACX,CAAC;QAEF,MAAM,IAAI,GAAG,IAAI,CAAC,iBAAiB,CACjC,QAAQ,CAAC,IAAI,CACd,CAAC;QACF,IAAI,IAAI,EAAE,YAAY;YAAE,OAAO,IAAI,CAAC,YAAY,CAAC;QAEjD,MAAM,IAAI,eAAe,CAAC,yCAAyC,CAAC,CAAC;IACvE,CAAC;IAED,KAAK,CAAC,mBAAmB,CACvB,WAAmB,EACnB,GAAG,IAA6B;QAEhC,MAAM,EAAE,OAAO,EAAE,GAAG,CAClB,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,qBAAqB,EAAE,IAAI,CAAC,CACrD,CAAC,GAAG,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC;QAEhC,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,OAAO,CAChB,KAAK,EACL,WAAW,IAAI,CAAC,MAAM,CAAC,YAAa,CAAC,KAAK,mCAAmC,EAC7E,WAAW,EACX,SAAS,EACT,GAAG,EACH,EAAE,EACF,GAAG,OAAO,CACX,CAAC;YACF,OAAO,IAAI,CAAC;QACd,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;IAED,KAAK,CAAC,MAAM,CACV,YAA0B,EAC1B,YAAoB,EACpB,GAAG,IAA6B;QAEhC,MAAM,EAAE,OAAO,EAAE,GAAG,CAClB,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,QAAQ,EAAE,IAAI,CAAC,CACxC,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAEnB,MAAM,IAAI,CAAC,OAAO,CAChB,MAAM,EACN,WAAW,YAAY,CAAC,KAAK,iCAAiC,EAC9D,SAAS,EACT,IAAI,eAAe,CAAC;YAClB,SAAS,EAAE,YAAY,CAAC,WAAW;YACnC,aAAa,EAAE,YAAY;SAC5B,CAAC,CAAC,QAAQ,EAAE,EACb,GAAG,EACH,EAAE,cAAc,EAAE,mCAAmC,EAAE,EACvD,GAAG,OAAO,CACX,CAAC;IACJ,CAAC;IAEO,gBAAgB,CAAC,MAA2B;QAClD,OAAO,KAAK,CAAC,MAAM,CAAC;YAClB,OAAO,EAAE,GAAG,MAAM,CAAC,QAAQ,MAAM,MAAM,CAAC,IAAI,EAAE;YAC9C,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;YAC/C,cAAc,EAAE,GAAG,EAAE,CAAC,IAAI;YAC1B,UAAU,EAAE,IAAI,KAAK,CAAC,KAAK,CAAC;gBAC1B,kBAAkB,EAAE,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC;aAC9C,CAAC;SACH,CAAC,CAAC;IACL,CAAC;IAEO,YAAY,CAAC,MAA2B;QAC9C,OAAO,MAAM,CAAC,EAAE,KAAK,YAAY,IAAI,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IACpE,CAAC;IAEO,KAAK,CAAC,OAAO,CACnB,MAAyC,EACzC,IAAY,EACZ,WAA+B,EAC/B,OAAgB,EAChB,WAAmB,EACnB,OAA+B,EAC/B,GAAG,IAAyB;QAE5B,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;QAChC,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC;YACzC,MAAM;YACN,GAAG,EAAE,GAAG,IAAI,CAAC,MAAM,CAAC,QAAQ,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,GAAG,IAAI,EAAE;YAC3D,IAAI,EACF,OAAO,KAAK,SAAS;gBACnB,CAAC,CAAC,SAAS;gBACX,CAAC,CAAC,OAAO,OAAO,KAAK,QAAQ;oBAC3B,CAAC,CAAC,OAAO;oBACT,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC;YAC/B,OAAO,EAAE;gBACP,GAAG,OAAO;gBACV,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,UAAU,WAAW,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBAClE,GAAG,CAAC,OAAO,KAAK,SAAS,IAAI,OAAO,OAAO,KAAK,QAAQ;oBACtD,CAAC,CAAC,EAAE,cAAc,EAAE,kBAAkB,EAAE;oBACxC,CAAC,CAAC,EAAE,CAAC;aACR;YACD,UAAU,EAAE,IAAI,KAAK,CAAC,KAAK,CAAC;gBAC1B,kBAAkB,EAAE,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,MAAM,CAAC;aACnD,CAAC;YACF,cAAc,EAAE,GAAG,EAAE,CAAC,IAAI;SAC3B,CAAC,CAAC;QACH,IAAI,QAAQ,CAAC,MAAM,KAAK,WAAW,EAAE,CAAC;YACpC,IAAI,CAAC,kBAAkB,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAC;QACjD,CAAC;QACD,OAAO,QAAQ,CAAC;IAClB,CAAC;IAEO,kBAAkB,CACxB,QAAa,EACb,WAAmB,EACnB,QAAiB;QAEjB,MAAM,MAAM,GAAG,QAAQ,CAAC,MAAgB,CAAC;QACzC,MAAM,OAAO,GAAG,QAAQ;YACtB,CAAC,CAAC,GAAG,QAAQ,cAAc,WAAW,cAAc,QAAQ,CAAC,MAAM,KAAK,QAAQ,CAAC,UAAU,GAAG;YAC9F,CAAC,CAAC,YAAY,WAAW,cAAc,QAAQ,CAAC,MAAM,KAAK,QAAQ,CAAC,UAAU,EAAE,CAAC;QACnF,IAAI,MAAM,KAAK,GAAG,IAAI,OAAO,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC;YAClE,MAAM,IAAI,aAAa,CAAC,OAAO,CAAC,CAAC;QACnC,CAAC;QACD,IAAI,MAAM,KAAK,GAAG,IAAI,OAAO,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC;YACjE,MAAM,IAAI,aAAa,CAAC,OAAO,CAAC,CAAC;QACnC,CAAC;QACD,IAAI,MAAM,KAAK,GAAG,EAAE,CAAC;YACnB,MAAM,IAAI,eAAe,CAAC,OAAO,CAAC,CAAC;QACrC,CAAC;QACD,IAAI,MAAM,KAAK,GAAG,IAAI,MAAM,KAAK,GAAG,EAAE,CAAC;YACrC,MAAM,IAAI,aAAa,CAAC,OAAO,CAAC,CAAC;QACnC,CAAC;QACD,MAAM,IAAI,aAAa,CAAC,OAAO,CAAC,CAAC;IACnC,CAAC;IAES,UAAU,CAAC,KAAY;QAC/B,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,IAAI,KAAK,CAAC,IAAI,IAAI,eAAe,CAAC;QAC/D,MAAM,YAAY,GAAG,OAAO,CAAC,WAAW,EAAE,CAAC;QAE3C,IAAI,YAAY,CAAC,QAAQ,CAAC,WAAW,CAAC,IAAI,YAAY,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;YACvE,OAAO,IAAI,aAAa,CAAC,OAAO,CAAC,CAAC;QACpC,CAAC;QAED,IAAI,YAAY,CAAC,QAAQ,CAAC,gBAAgB,CAAC,IAAI,YAAY,CAAC,QAAQ,CAAC,UAAU,CAAC,IAAI,YAAY,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;YACjH,OAAO,IAAI,aAAa,CAAC,OAAO,CAAC,CAAC;QACpC,CAAC;QAED,IAAI,YAAY,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,YAAY,CAAC,QAAQ,CAAC,aAAa,CAAC,IAAI,YAAY,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;YAC7G,OAAO,IAAI,eAAe,CAAC,OAAO,CAAC,CAAC;QACtC,CAAC;QAED,IAAI,YAAY,CAAC,QAAQ,CAAC,cAAc,CAAC,IAAI,YAAY,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;YAC1E,OAAO,IAAI,aAAa,CAAC,OAAO,CAAC,CAAC;QACpC,CAAC;QAED,IAAI,YAAY,CAAC,QAAQ,CAAC,WAAW,CAAC,IAAI,YAAY,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;YACvE,OAAO,IAAI,aAAa,CAAC,OAAO,CAAC,CAAC;QACpC,CAAC;QAED,OAAO,IAAI,aAAa,CAAC,OAAO,CAAC,CAAC;IACpC,CAAC;IAEO,iBAAiB,CAAI,IAAa;QACxC,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;YAC7B,IAAI,CAAC;gBACH,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAM,CAAC;YAC/B,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,SAAS,CAAC;YACnB,CAAC;QACH,CAAC;QACD,OAAO,IAAS,CAAC;IACnB,CAAC;CACF"}

package/lib/esm/keycloak/services/KeycloakClientService.js

@@ -0,0 +1,204 @@
+import { BadRequestError, ConflictError, InternalError, NotFoundError, } from "@decaf-ts/db-decorators";
+import { ClientBasedService } from "@decaf-ts/core";
+import Axios from "axios";
+import * as https from "node:https";
+export class KeycloakClientService extends ClientBasedService {
+    async initialize(...args) {
+        const { ctxArgs } = (await this.logCtx(args, "initialize", true)).for(this.initialize);
+        const config = ctxArgs[0];
+        this._config = config;
+        const client = this.createHttpClient(config);
+        this._client = client;
+        return { config, client };
+    }
+    async createClient(keycloakSetupConfig, overrides, ...args) {
+        const { ctxArgs } = (await this.logCtx(args, "createClient", true)).for(this.createClient);
+        const realmAccessToken = await this.getRealmAccessToken(keycloakSetupConfig, ...ctxArgs);
+        const client = this.normalizeClientConfig(keycloakSetupConfig.client, overrides ?? {});
+        const response = await this.request("POST", `/admin/realms/${keycloakSetupConfig.realmApiUser?.realm}/clients`, realmAccessToken, this.buildClientPayload(client), 201, {}, ...ctxArgs);
+        return this.extractUUIDfromResponse(response);
+    }
+    async updateClient(keycloakSetupConfig, overrides, ...args) {
+        const { ctxArgs } = (await this.logCtx(args, "updateClient", true)).for(this.updateClient);
+        const realmAccessToken = await this.getRealmAccessToken(keycloakSetupConfig, ...ctxArgs);
+        const client = this.normalizeClientConfig(keycloakSetupConfig.client, overrides ?? {});
+        const clientUUID = client.clientUUID ??
+            (await this.getClientUUID(realmAccessToken, keycloakSetupConfig.realmApiUser.realm, client.clientId, ...ctxArgs));
+        await this.request("PUT", `/admin/realms/${keycloakSetupConfig.realmApiUser?.realm}/clients/${encodeURIComponent(clientUUID)}`, realmAccessToken, this.buildClientPayload(client), 204, {}, ...ctxArgs);
+    }
+    async getClientUUID(accessToken, realmName, clientId, ...args) {
+        const { ctxArgs } = (await this.logCtx(args, "getClientUUID", true)).for(this.getClientUUID);
+        const response = await this.request("GET", `/admin/realms/${realmName}/clients?clientId=${encodeURIComponent(clientId)}`, accessToken, undefined, 200, {}, ...ctxArgs);
+        const data = this.parseJsonResponse(response.data);
+        const clientUUID = data?.[0]?.id;
+        if (clientUUID)
+            return clientUUID;
+        throw new NotFoundError(`Unable to get Keycloak Client UUID: ${clientId}`);
+    }
+    async createClientRoles(keycloakSetupConfig, roleConfigs, ...args) {
+        const { ctxArgs } = (await this.logCtx(args, "createClientRoles", true)).for(this.createClientRoles);
+        const roles = roleConfigs ?? keycloakSetupConfig.client.roles ?? [];
+        const realmAccessToken = await this.getRealmAccessToken(keycloakSetupConfig, ...ctxArgs);
+        for (const role of roles) {
+            await this.request("POST", `/admin/realms/${keycloakSetupConfig.realmApiUser?.realm}/clients/${keycloakSetupConfig.client.clientUUID}/roles`, realmAccessToken, {
+                name: role.roleName,
+                description: role.description ?? `Auto-created role ${role.roleName}`,
+                composite: false,
+                clientRole: true,
+            }, 201, {}, ...ctxArgs);
+        }
+    }
+    createHttpClient(config) {
+        return Axios.create({
+            baseURL: `${config.protocol}://${config.host}`,
+            headers: { "Content-Type": "application/json" },
+            validateStatus: () => true,
+            httpsAgent: new https.Agent({
+                rejectUnauthorized: this.isProduction(config),
+            }),
+        });
+    }
+    isProduction(config) {
+        return config.id === "production" || config.host.includes("prod");
+    }
+    async getRealmAccessToken(keycloakSetupConfig, ...args) {
+        const { ctxArgs } = this.logCtx(args, this.getRealmAccessToken);
+        return this.getAccessToken(keycloakSetupConfig.realmApiUser, ...ctxArgs);
+    }
+    async getAccessToken(keycloakUser, ...args) {
+        const { ctxArgs } = this.logCtx(args, this.getAccessToken);
+        const response = await this.request("POST", `/realms/${keycloakUser.realm}/protocol/openid-connect/token`, undefined, new URLSearchParams({
+            client_id: keycloakUser.apiClientId,
+            username: keycloakUser.username,
+            password: keycloakUser.password,
+            grant_type: "password",
+        }).toString(), 200, { "content-type": "application/x-www-form-urlencoded" }, ...ctxArgs);
+        const data = this.parseJsonResponse(response.data);
+        if (data?.access_token)
+            return data.access_token;
+        throw new BadRequestError(`Unable to get Keycloak access token for user ${keycloakUser.username}`);
+    }
+    normalizeClientConfig(base, overrides) {
+        return {
+            ...base,
+            ...overrides,
+            redirectUris: overrides.redirectUris ?? base.redirectUris,
+            webOrigins: overrides.webOrigins ?? base.webOrigins,
+            roles: overrides.roles ?? base.roles,
+        };
+    }
+    buildClientPayload(client) {
+        return {
+            clientId: client.clientId,
+            name: client.clientName,
+            description: client.description,
+            rootUrl: client.rootUrl,
+            adminUrl: client.adminUrl,
+            baseUrl: client.baseUrl,
+            surrogateAuthRequired: client.surrogateAuthRequired ?? false,
+            enabled: client.enabled ?? true,
+            alwaysDisplayInConsole: client.alwaysDisplayInConsole ?? false,
+            clientAuthenticatorType: "client-secret",
+            secret: client.secret,
+            redirectUris: client.redirectUris,
+            webOrigins: client.webOrigins,
+            notBefore: client.notBefore ?? 0,
+            bearerOnly: client.bearerOnly ?? false,
+            consentRequired: client.consentRequired ?? false,
+            standardFlowEnabled: client.standardFlowEnabled ?? true,
+            implicitFlowEnabled: client.implicitFlowEnabled ?? false,
+            directAccessGrantsEnabled: client.directAccessGrantsEnabled ?? true,
+            serviceAccountsEnabled: client.serviceAccountsEnabled ?? true,
+            authorizationServicesEnabled: client.authorizationServicesEnabled ?? true,
+            publicClient: client.publicClient ?? false,
+            frontchannelLogout: client.frontchannelLogout ?? true,
+            protocol: client.protocol ?? "openid-connect",
+            attributes: client.attributes ?? { "access.token.lifespan": "300" },
+        };
+    }
+    async request(method, path, accessToken, payload, successCode, headers, ...args) {
+        this.logCtx(args, this.request);
+        const response = await this.client.request({
+            method,
+            url: `${this.config.protocol}://${this.config.host}${path}`,
+            data: payload === undefined
+                ? undefined
+                : typeof payload === "string"
+                    ? payload
+                    : JSON.stringify(payload),
+            headers: {
+                ...headers,
+                ...(accessToken ? { Authorization: `Bearer ${accessToken}` } : {}),
+                ...(payload !== undefined && typeof payload !== "string"
+                    ? { "Content-Type": "application/json" }
+                    : {}),
+            },
+            httpsAgent: new https.Agent({
+                rejectUnauthorized: this.isProduction(this.config),
+            }),
+            validateStatus: () => true,
+        });
+        if (response.status !== successCode) {
+            this.handleHttpResponse(response, successCode);
+        }
+        return response;
+    }
+    handleHttpResponse(response, successCode, errorMsg) {
+        const message = errorMsg
+            ? `${errorMsg}: Expected ${successCode}, received ${response.status}: ${response.statusText}.`
+            : `Expected ${successCode}, received ${response.status}: ${response.statusText}`;
+        const status = response.status;
+        if (status === 404 || message.toLowerCase().includes("not found")) {
+            throw new NotFoundError(message);
+        }
+        if (status === 409 || message.toLowerCase().includes("conflict")) {
+            throw new ConflictError(message);
+        }
+        if (status === 400) {
+            throw new BadRequestError(message);
+        }
+        if (status === 401 || status === 403) {
+            throw new NotFoundError(message);
+        }
+        throw new InternalError(message);
+    }
+    parseError(error) {
+        const message = error.message || error.name || "Unknown error";
+        const lowerMessage = message.toLowerCase();
+        if (lowerMessage.includes("not found") || lowerMessage.includes("404")) {
+            return new NotFoundError(message);
+        }
+        if (lowerMessage.includes("already exists") || lowerMessage.includes("conflict") || lowerMessage.includes("409")) {
+            return new ConflictError(message);
+        }
+        if (lowerMessage.includes("invalid") || lowerMessage.includes("bad request") || lowerMessage.includes("400")) {
+            return new BadRequestError(message);
+        }
+        if (lowerMessage.includes("unauthorized") || lowerMessage.includes("401")) {
+            return new NotFoundError(message);
+        }
+        if (lowerMessage.includes("forbidden") || lowerMessage.includes("403")) {
+            return new NotFoundError(message);
+        }
+        return new InternalError(message);
+    }
+    extractUUIDfromResponse(response) {
+        const location = response.headers.location;
+        if (!location) {
+            throw new InternalError("Keycloak response did not include a location header");
+        }
+        return location.split("/").pop() ?? "";
+    }
+    parseJsonResponse(data) {
+        if (typeof data === "string") {
+            try {
+                return JSON.parse(data);
+            }
+            catch {
+                return undefined;
+            }
+        }
+        return data;
+    }
+}
+//# sourceMappingURL=KeycloakClientService.js.map

package/lib/esm/keycloak/services/KeycloakClientService.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"KeycloakClientService.js","sourceRoot":"","sources":["../../../../src/keycloak/services/KeycloakClientService.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,eAAe,EACf,aAAa,EACb,aAAa,EACb,aAAa,GACd,MAAM,yBAAyB,CAAC;AAEjC,OAAO,EAAE,kBAAkB,EAAE,MAAM,gBAAgB,CAAC;AAOpD,OAAO,KAAwB,MAAM,OAAO,CAAC;AAC7C,OAAO,KAAK,KAAK,MAAM,YAAY,CAAC;AAEpC,MAAM,OAAO,qBAAsB,SAAQ,kBAG1C;IACC,KAAK,CAAC,UAAU,CACd,GAAG,IAA6B;QAEhC,MAAM,EAAE,OAAO,EAAE,GAAG,CAClB,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,YAAY,EAAE,IAAI,CAAC,CAC5C,CAAC,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QACvB,MAAM,MAAM,GAAG,OAAO,CAAC,CAAC,CAAwB,CAAC;QACjD,IAAI,CAAC,OAAO,GAAG,MAAM,CAAC;QACtB,MAAM,MAAM,GAAG,IAAI,CAAC,gBAAgB,CAAC,MAAM,CAAC,CAAC;QAC7C,IAAI,CAAC,OAAO,GAAG,MAAM,CAAC;QACtB,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;IAC5B,CAAC;IAED,KAAK,CAAC,YAAY,CAChB,mBAAwC,EACxC,SAAoD,EACpD,GAAG,IAA6B;QAEhC,MAAM,EAAE,OAAO,EAAE,GAAG,CAClB,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,cAAc,EAAE,IAAI,CAAC,CAC9C,CAAC,GAAG,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;QACzB,MAAM,gBAAgB,GAAG,MAAM,IAAI,CAAC,mBAAmB,CACrD,mBAAmB,EACnB,GAAG,OAAO,CACX,CAAC;QACF,MAAM,MAAM,GAAG,IAAI,CAAC,qBAAqB,CACvC,mBAAmB,CAAC,MAAM,EAC1B,SAAS,IAAI,EAAE,CAChB,CAAC;QACF,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,OAAO,CACjC,MAAM,EACN,iBAAiB,mBAAmB,CAAC,YAAY,EAAE,KAAK,UAAU,EAClE,gBAAgB,EAChB,IAAI,CAAC,kBAAkB,CAAC,MAAM,CAAC,EAC/B,GAAG,EACH,EAAE,EACF,GAAG,OAAO,CACX,CAAC;QACF,OAAO,IAAI,CAAC,uBAAuB,CAAC,QAAQ,CAAC,CAAC;IAChD,CAAC;IAED,KAAK,CAAC,YAAY,CAChB,mBAAwC,EACxC,SAAoD,EACpD,GAAG,IAA6B;QAEhC,MAAM,EAAE,OAAO,EAAE,GAAG,CAClB,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,cAAc,EAAE,IAAI,CAAC,CAC9C,CAAC,GAAG,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;QACzB,MAAM,gBAAgB,GAAG,MAAM,IAAI,CAAC,mBAAmB,CACrD,mBAAmB,EACnB,GAAG,OAAO,CACX,CAAC;QACF,MAAM,MAAM,GAAG,IAAI,CAAC,qBAAqB,CACvC,mBAAmB,CAAC,MAAM,EAC1B,SAAS,IAAI,EAAE,CAChB,CAAC;QACF,MAAM,UAAU,GACd,MAAM,CAAC,UAAU;YACjB,CAAC,MAAM,IAAI,CAAC,aAAa,CACvB,gBAAgB,EAChB,mBAAmB,CAAC,YAAa,CAAC,KAAK,EACvC,MAAM,CAAC,QAAQ,EACf,GAAG,OAAO,CACX,CAAC,CAAC;QACL,MAAM,IAAI,CAAC,OAAO,CAChB,KAAK,EACL,iBAAiB,mBAAmB,CAAC,YAAY,EAAE,KAAK,YAAY,kBAAkB,CAAC,UAAU,CAAC,EAAE,EACpG,gBAAgB,EAChB,IAAI,CAAC,kBAAkB,CAAC,MAAM,CAAC,EAC/B,GAAG,EACH,EAAE,EACF,GAAG,OAAO,CACX,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,aAAa,CACjB,WAAmB,EACnB,SAAiB,EACjB,QAAgB,EAChB,GAAG,IAA6B;QAEhC,MAAM,EAAE,OAAO,EAAE,GAAG,CAClB,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,eAAe,EAAE,IAAI,CAAC,CAC/C,CAAC,GAAG,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;QAC1B,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,OAAO,CACjC,KAAK,EACL,iBAAiB,SAAS,qBAAqB,kBAAkB,CAAC,QAAQ,CAAC,EAAE,EAC7E,WAAW,EACX,SAAS,EACT,GAAG,EACH,EAAE,EACF,GAAG,OAAO,CACX,CAAC;QACF,MAAM,IAAI,GAAG,IAAI,CAAC,iBAAiB,CAAyB,QAAQ,CAAC,IAAI,CAAC,CAAC;QAC3E,MAAM,UAAU,GAAG,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;QACjC,IAAI,UAAU;YAAE,OAAO,UAAU,CAAC;QAClC,MAAM,IAAI,aAAa,CAAC,uCAAuC,QAAQ,EAAE,CAAC,CAAC;IAC7E,CAAC;IAED,KAAK,CAAC,iBAAiB,CACrB,mBAAwC,EACxC,WAAmD,EACnD,GAAG,IAA6B;QAEhC,MAAM,EAAE,OAAO,EAAE,GAAG,CAClB,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,mBAAmB,EAAE,IAAI,CAAC,CACnD,CAAC,GAAG,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC;QAC9B,MAAM,KAAK,GAAG,WAAW,IAAI,mBAAmB,CAAC,MAAM,CAAC,KAAK,IAAI,EAAE,CAAC;QACpE,MAAM,gBAAgB,GAAG,MAAM,IAAI,CAAC,mBAAmB,CACrD,mBAAmB,EACnB,GAAG,OAAO,CACX,CAAC;QACF,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,MAAM,IAAI,CAAC,OAAO,CAChB,MAAM,EACN,iBAAiB,mBAAmB,CAAC,YAAY,EAAE,KAAK,YAAY,mBAAmB,CAAC,MAAM,CAAC,UAAU,QAAQ,EACjH,gBAAgB,EAChB;gBACE,IAAI,EAAE,IAAI,CAAC,QAAQ;gBACnB,WAAW,EAAE,IAAI,CAAC,WAAW,IAAI,qBAAqB,IAAI,CAAC,QAAQ,EAAE;gBACrE,SAAS,EAAE,KAAK;gBAChB,UAAU,EAAE,IAAI;aACjB,EACD,GAAG,EACH,EAAE,EACF,GAAG,OAAO,CACX,CAAC;QACJ,CAAC;IACH,CAAC;IAEO,gBAAgB,CAAC,MAA2B;QAClD,OAAO,KAAK,CAAC,MAAM,CAAC;YAClB,OAAO,EAAE,GAAG,MAAM,CAAC,QAAQ,MAAM,MAAM,CAAC,IAAI,EAAE;YAC9C,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;YAC/C,cAAc,EAAE,GAAG,EAAE,CAAC,IAAI;YAC1B,UAAU,EAAE,IAAI,KAAK,CAAC,KAAK,CAAC;gBAC1B,kBAAkB,EAAE,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC;aAC9C,CAAC;SACH,CAAC,CAAC;IACL,CAAC;IAEO,YAAY,CAAC,MAA2B;QAC9C,OAAO,MAAM,CAAC,EAAE,KAAK,YAAY,IAAI,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IACpE,CAAC;IAEO,KAAK,CAAC,mBAAmB,CAC/B,mBAAwC,EACxC,GAAG,IAAyB;QAE5B,MAAM,EAAE,OAAO,EAAE,GAAG,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,mBAAmB,CAAC,CAAC;QAChE,OAAO,IAAI,CAAC,cAAc,CAAC,mBAAmB,CAAC,YAAa,EAAE,GAAG,OAAO,CAAC,CAAC;IAC5E,CAAC;IAEO,KAAK,CAAC,cAAc,CAC1B,YAA0B,EAC1B,GAAG,IAAyB;QAE5B,MAAM,EAAE,OAAO,EAAE,GAAG,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,cAAc,CAAC,CAAC;QAC3D,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,OAAO,CACjC,MAAM,EACN,WAAW,YAAY,CAAC,KAAK,gCAAgC,EAC7D,SAAS,EACT,IAAI,eAAe,CAAC;YAClB,SAAS,EAAE,YAAY,CAAC,WAAW;YACnC,QAAQ,EAAE,YAAY,CAAC,QAAQ;YAC/B,QAAQ,EAAE,YAAY,CAAC,QAAQ;YAC/B,UAAU,EAAE,UAAU;SACvB,CAAC,CAAC,QAAQ,EAAE,EACb,GAAG,EACH,EAAE,cAAc,EAAE,mCAAmC,EAAE,EACvD,GAAG,OAAO,CACX,CAAC;QACF,MAAM,IAAI,GAAG,IAAI,CAAC,iBAAiB,CACjC,QAAQ,CAAC,IAAI,CACd,CAAC;QACF,IAAI,IAAI,EAAE,YAAY;YAAE,OAAO,IAAI,CAAC,YAAY,CAAC;QACjD,MAAM,IAAI,eAAe,CACvB,gDAAgD,YAAY,CAAC,QAAQ,EAAE,CACxE,CAAC;IACJ,CAAC;IAEO,qBAAqB,CAC3B,IAA0B,EAC1B,SAAwC;QAExC,OAAO;YACL,GAAG,IAAI;YACP,GAAG,SAAS;YACZ,YAAY,EAAE,SAAS,CAAC,YAAY,IAAI,IAAI,CAAC,YAAY;YACzD,UAAU,EAAE,SAAS,CAAC,UAAU,IAAI,IAAI,CAAC,UAAU;YACnD,KAAK,EAAE,SAAS,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK;SACrC,CAAC;IACJ,CAAC;IAEO,kBAAkB,CACxB,MAA4B;QAE5B,OAAO;YACL,QAAQ,EAAE,MAAM,CAAC,QAAQ;YACzB,IAAI,EAAE,MAAM,CAAC,UAAU;YACvB,WAAW,EAAE,MAAM,CAAC,WAAW;YAC/B,OAAO,EAAE,MAAM,CAAC,OAAO;YACvB,QAAQ,EAAE,MAAM,CAAC,QAAQ;YACzB,OAAO,EAAE,MAAM,CAAC,OAAO;YACvB,qBAAqB,EAAE,MAAM,CAAC,qBAAqB,IAAI,KAAK;YAC5D,OAAO,EAAE,MAAM,CAAC,OAAO,IAAI,IAAI;YAC/B,sBAAsB,EAAE,MAAM,CAAC,sBAAsB,IAAI,KAAK;YAC9D,uBAAuB,EAAE,eAAe;YACxC,MAAM,EAAE,MAAM,CAAC,MAAM;YACrB,YAAY,EAAE,MAAM,CAAC,YAAY;YACjC,UAAU,EAAE,MAAM,CAAC,UAAU;YAC7B,SAAS,EAAE,MAAM,CAAC,SAAS,IAAI,CAAC;YAChC,UAAU,EAAE,MAAM,CAAC,UAAU,IAAI,KAAK;YACtC,eAAe,EAAE,MAAM,CAAC,eAAe,IAAI,KAAK;YAChD,mBAAmB,EAAE,MAAM,CAAC,mBAAmB,IAAI,IAAI;YACvD,mBAAmB,EAAE,MAAM,CAAC,mBAAmB,IAAI,KAAK;YACxD,yBAAyB,EAAE,MAAM,CAAC,yBAAyB,IAAI,IAAI;YACnE,sBAAsB,EAAE,MAAM,CAAC,sBAAsB,IAAI,IAAI;YAC7D,4BAA4B,EAAE,MAAM,CAAC,4BAA4B,IAAI,IAAI;YACzE,YAAY,EAAE,MAAM,CAAC,YAAY,IAAI,KAAK;YAC1C,kBAAkB,EAAE,MAAM,CAAC,kBAAkB,IAAI,IAAI;YACrD,QAAQ,EAAE,MAAM,CAAC,QAAQ,IAAI,gBAAgB;YAC7C,UAAU,EAAE,MAAM,CAAC,UAAU,IAAI,EAAE,uBAAuB,EAAE,KAAK,EAAE;SACpE,CAAC;IACJ,CAAC;IAEO,KAAK,CAAC,OAAO,CACnB,MAAyC,EACzC,IAAY,EACZ,WAA+B,EAC/B,OAAgB,EAChB,WAAmB,EACnB,OAA+B,EAC/B,GAAG,IAAyB;QAE5B,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;QAChC,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC;YACzC,MAAM;YACN,GAAG,EAAE,GAAG,IAAI,CAAC,MAAM,CAAC,QAAQ,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,GAAG,IAAI,EAAE;YAC3D,IAAI,EACF,OAAO,KAAK,SAAS;gBACnB,CAAC,CAAC,SAAS;gBACX,CAAC,CAAC,OAAO,OAAO,KAAK,QAAQ;oBAC3B,CAAC,CAAC,OAAO;oBACT,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC;YAC/B,OAAO,EAAE;gBACP,GAAG,OAAO;gBACV,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,UAAU,WAAW,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBAClE,GAAG,CAAC,OAAO,KAAK,SAAS,IAAI,OAAO,OAAO,KAAK,QAAQ;oBACtD,CAAC,CAAC,EAAE,cAAc,EAAE,kBAAkB,EAAE;oBACxC,CAAC,CAAC,EAAE,CAAC;aACR;YACD,UAAU,EAAE,IAAI,KAAK,CAAC,KAAK,CAAC;gBAC1B,kBAAkB,EAAE,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,MAAM,CAAC;aACnD,CAAC;YACF,cAAc,EAAE,GAAG,EAAE,CAAC,IAAI;SAC3B,CAAC,CAAC;QACH,IAAI,QAAQ,CAAC,MAAM,KAAK,WAAW,EAAE,CAAC;YACpC,IAAI,CAAC,kBAAkB,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAC;QACjD,CAAC;QACD,OAAO,QAAQ,CAAC;IAClB,CAAC;IAEO,kBAAkB,CACxB,QAAa,EACb,WAAmB,EACnB,QAAiB;QAEjB,MAAM,OAAO,GAAG,QAAQ;YACtB,CAAC,CAAC,GAAG,QAAQ,cAAc,WAAW,cAAc,QAAQ,CAAC,MAAM,KAAK,QAAQ,CAAC,UAAU,GAAG;YAC9F,CAAC,CAAC,YAAY,WAAW,cAAc,QAAQ,CAAC,MAAM,KAAK,QAAQ,CAAC,UAAU,EAAE,CAAC;QACnF,MAAM,MAAM,GAAG,QAAQ,CAAC,MAAgB,CAAC;QACzC,IAAI,MAAM,KAAK,GAAG,IAAI,OAAO,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC;YAClE,MAAM,IAAI,aAAa,CAAC,OAAO,CAAC,CAAC;QACnC,CAAC;QACD,IAAI,MAAM,KAAK,GAAG,IAAI,OAAO,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC;YACjE,MAAM,IAAI,aAAa,CAAC,OAAO,CAAC,CAAC;QACnC,CAAC;QACD,IAAI,MAAM,KAAK,GAAG,EAAE,CAAC;YACnB,MAAM,IAAI,eAAe,CAAC,OAAO,CAAC,CAAC;QACrC,CAAC;QACD,IAAI,MAAM,KAAK,GAAG,IAAI,MAAM,KAAK,GAAG,EAAE,CAAC;YACrC,MAAM,IAAI,aAAa,CAAC,OAAO,CAAC,CAAC;QACnC,CAAC;QACD,MAAM,IAAI,aAAa,CAAC,OAAO,CAAC,CAAC;IACnC,CAAC;IAES,UAAU,CAAC,KAAY;QAC/B,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,IAAI,KAAK,CAAC,IAAI,IAAI,eAAe,CAAC;QAC/D,MAAM,YAAY,GAAG,OAAO,CAAC,WAAW,EAAE,CAAC;QAE3C,IAAI,YAAY,CAAC,QAAQ,CAAC,WAAW,CAAC,IAAI,YAAY,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;YACvE,OAAO,IAAI,aAAa,CAAC,OAAO,CAAC,CAAC;QACpC,CAAC;QAED,IAAI,YAAY,CAAC,QAAQ,CAAC,gBAAgB,CAAC,IAAI,YAAY,CAAC,QAAQ,CAAC,UAAU,CAAC,IAAI,YAAY,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;YACjH,OAAO,IAAI,aAAa,CAAC,OAAO,CAAC,CAAC;QACpC,CAAC;QAED,IAAI,YAAY,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,YAAY,CAAC,QAAQ,CAAC,aAAa,CAAC,IAAI,YAAY,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;YAC7G,OAAO,IAAI,eAAe,CAAC,OAAO,CAAC,CAAC;QACtC,CAAC;QAED,IAAI,YAAY,CAAC,QAAQ,CAAC,cAAc,CAAC,IAAI,YAAY,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;YAC1E,OAAO,IAAI,aAAa,CAAC,OAAO,CAAC,CAAC;QACpC,CAAC;QAED,IAAI,YAAY,CAAC,QAAQ,CAAC,WAAW,CAAC,IAAI,YAAY,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;YACvE,OAAO,IAAI,aAAa,CAAC,OAAO,CAAC,CAAC;QACpC,CAAC;QAED,OAAO,IAAI,aAAa,CAAC,OAAO,CAAC,CAAC;IACpC,CAAC;IAEO,uBAAuB,CAAC,QAAa;QAC3C,MAAM,QAAQ,GAAG,QAAQ,CAAC,OAAO,CAAC,QAA8B,CAAC;QACjE,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,MAAM,IAAI,aAAa,CACrB,qDAAqD,CACtD,CAAC;QACJ,CAAC;QACD,OAAO,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,IAAI,EAAE,CAAC;IACzC,CAAC;IAEO,iBAAiB,CAAI,IAAa;QACxC,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;YAC7B,IAAI,CAAC;gBACH,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAM,CAAC;YAC/B,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,SAAS,CAAC;YACnB,CAAC;QACH,CAAC;QACD,OAAO,IAAS,CAAC;IACnB,CAAC;CACF"}

package/lib/esm/keycloak/services/KeycloakIdentityProviderService.js

@@ -0,0 +1,193 @@
+import { BadRequestError, ConflictError, InternalError, NotFoundError, } from "@decaf-ts/db-decorators";
+import { ClientBasedService } from "@decaf-ts/core";
+import Axios from "axios";
+import * as https from "node:https";
+export class KeycloakIdentityProviderService extends ClientBasedService {
+    async initialize(...args) {
+        const { ctxArgs } = (await this.logCtx(args, "initialize", true)).for(this.initialize);
+        const config = ctxArgs[0];
+        this._config = config;
+        const client = this.createHttpClient(config);
+        this._client = client;
+        return { config, client };
+    }
+    async createIdentityProvider(keycloakSetupConfig, overrides, ...args) {
+        const { ctxArgs } = (await this.logCtx(args, "createIdentityProvider", true)).for(this.createIdentityProvider);
+        const realmAccessToken = await this.getRealmAccessToken(keycloakSetupConfig, ...ctxArgs);
+        const identityProvider = this.normalizeIdentityProviderConfig(keycloakSetupConfig.identityProvider, overrides ?? {});
+        await this.request("POST", `/admin/realms/${keycloakSetupConfig.realmApiUser?.realm}/identity-provider/instances`, realmAccessToken, this.buildIdentityProviderPayload(identityProvider), 201, {}, ...ctxArgs);
+    }
+    async updateIdentityProvider(keycloakSetupConfig, overrides, ...args) {
+        const { ctxArgs } = (await this.logCtx(args, "updateIdentityProvider", true)).for(this.updateIdentityProvider);
+        const realmAccessToken = await this.getRealmAccessToken(keycloakSetupConfig, ...ctxArgs);
+        const identityProvider = this.normalizeIdentityProviderConfig(keycloakSetupConfig.identityProvider, overrides ?? {});
+        await this.request("PUT", `/admin/realms/${keycloakSetupConfig.realmApiUser?.realm}/identity-provider/instances/${encodeURIComponent(identityProvider.alias)}`, realmAccessToken, this.buildIdentityProviderPayload(identityProvider), 204, {}, ...ctxArgs);
+    }
+    async createIdentityProviderMappers(keycloakSetupConfig, roleConfigs, ...args) {
+        const { ctxArgs } = (await this.logCtx(args, "createIdentityProviderMappers", true)).for(this.createIdentityProviderMappers);
+        const roles = roleConfigs ?? keycloakSetupConfig.client.roles ?? [];
+        const realmAccessToken = await this.getRealmAccessToken(keycloakSetupConfig, ...ctxArgs);
+        const identityProvider = keycloakSetupConfig.identityProvider;
+        for (const role of roles) {
+            await this.request("POST", `/admin/realms/${keycloakSetupConfig.realmApiUser?.realm}/identity-provider/instances/${identityProvider.alias}/mappers`, realmAccessToken, {
+                name: role.roleName,
+                identityProviderAlias: identityProvider.alias,
+                identityProviderMapper: "oidc-role-idp-mapper",
+                config: {
+                    syncMode: identityProvider.mapperSyncMode ?? "FORCE",
+                    claim: identityProvider.mapperClaimName ?? "groups",
+                    "claim.value": role.claimValue,
+                    role: `${keycloakSetupConfig.client.clientId}.${role.roleName}`,
+                },
+            }, 201, {}, ...ctxArgs);
+        }
+    }
+    createHttpClient(config) {
+        return Axios.create({
+            baseURL: `${config.protocol}://${config.host}`,
+            headers: { "Content-Type": "application/json" },
+            validateStatus: () => true,
+            httpsAgent: new https.Agent({
+                rejectUnauthorized: this.isProduction(config),
+            }),
+        });
+    }
+    isProduction(config) {
+        return config.id === "production" || config.host.includes("prod");
+    }
+    async getRealmAccessToken(keycloakSetupConfig, ...args) {
+        const { ctxArgs } = this.logCtx(args, this.getRealmAccessToken);
+        return this.getAccessToken(keycloakSetupConfig.realmApiUser, ...ctxArgs);
+    }
+    async getAccessToken(keycloakUser, ...args) {
+        const { ctxArgs } = this.logCtx(args, this.getAccessToken);
+        const response = await this.request("POST", `/realms/${keycloakUser.realm}/protocol/openid-connect/token`, undefined, new URLSearchParams({
+            client_id: keycloakUser.apiClientId,
+            username: keycloakUser.username,
+            password: keycloakUser.password,
+            grant_type: "password",
+        }).toString(), 200, { "content-type": "application/x-www-form-urlencoded" }, ...ctxArgs);
+        const data = this.parseJsonResponse(response.data);
+        if (data?.access_token)
+            return data.access_token;
+        throw new BadRequestError(`Unable to get Keycloak access token for user ${keycloakUser.username}`);
+    }
+    normalizeIdentityProviderConfig(base, overrides) {
+        return {
+            ...base,
+            ...overrides,
+            config: {
+                ...base.config,
+                ...overrides.config,
+            },
+        };
+    }
+    buildIdentityProviderPayload(identityProvider) {
+        return {
+            alias: identityProvider.alias,
+            displayName: identityProvider.displayName,
+            providerId: identityProvider.providerId ?? "oidc",
+            enabled: identityProvider.enabled ?? true,
+            updateProfileFirstLoginMode: identityProvider.updateProfileFirstLoginMode ?? "on",
+            trustEmail: identityProvider.trustEmail ?? false,
+            storeToken: identityProvider.storeToken ?? false,
+            addReadTokenRoleOnCreate: false,
+            authenticateByDefault: false,
+            linkOnly: identityProvider.linkOnly ?? false,
+            hideOnLogin: identityProvider.hideOnLogin ?? false,
+            config: {
+                userInfoUrl: "https://graph.microsoft.com/oidc/userinfo",
+                validateSignature: true,
+                tokenUrl: `https://login.microsoftonline.com/${identityProvider.tenantId}/oauth2/v2.0/token`,
+                clientId: identityProvider.clientId,
+                jwksUrl: `https://login.microsoftonline.com/${identityProvider.tenantId}/discovery/v2.0/keys`,
+                issuer: `https://login.microsoftonline.com/${identityProvider.tenantId}/v2.0`,
+                useJwksUrl: true,
+                pkceEnabled: false,
+                metadataDescriptorUrl: `https://login.microsoftonline.com/${identityProvider.tenantId}/v2.0/.well-known/openid-configuration`,
+                authorizationUrl: `https://login.microsoftonline.com/${identityProvider.tenantId}/oauth2/v2.0/authorize`,
+                clientAuthMethod: "client_secret_post",
+                logoutUrl: `https://login.microsoftonline.com/${identityProvider.tenantId}/oauth2/v2.0/logout`,
+                syncMode: identityProvider.syncMode ?? "LEGACY",
+                clientSecret: identityProvider.clientSecret,
+                ...identityProvider.config,
+            },
+        };
+    }
+    async request(method, path, accessToken, payload, successCode, headers, ...args) {
+        this.logCtx(args, this.request);
+        const response = await this.client.request({
+            method,
+            url: `${this.config.protocol}://${this.config.host}${path}`,
+            data: payload === undefined
+                ? undefined
+                : typeof payload === "string"
+                    ? payload
+                    : JSON.stringify(payload),
+            headers: {
+                ...headers,
+                ...(accessToken ? { Authorization: `Bearer ${accessToken}` } : {}),
+                ...(payload !== undefined && typeof payload !== "string"
+                    ? { "Content-Type": "application/json" }
+                    : {}),
+            },
+            httpsAgent: new https.Agent({
+                rejectUnauthorized: this.isProduction(this.config),
+            }),
+            validateStatus: () => true,
+        });
+        if (response.status !== successCode) {
+            this.handleHttpResponse(response, successCode);
+        }
+        return response;
+    }
+    handleHttpResponse(response, successCode) {
+        const status = response.status;
+        const message = `Expected ${successCode}, received ${response.status}: ${response.statusText}`;
+        if (status === 404 || message.toLowerCase().includes("not found")) {
+            throw new NotFoundError(message);
+        }
+        if (status === 409 || message.toLowerCase().includes("conflict")) {
+            throw new ConflictError(message);
+        }
+        if (status === 400) {
+            throw new BadRequestError(message);
+        }
+        if (status === 401 || status === 403) {
+            throw new NotFoundError(message);
+        }
+        throw new InternalError(message);
+    }
+    parseError(error) {
+        const message = error.message || error.name || "Unknown error";
+        const lowerMessage = message.toLowerCase();
+        if (lowerMessage.includes("not found") || lowerMessage.includes("404")) {
+            return new NotFoundError(message);
+        }
+        if (lowerMessage.includes("already exists") || lowerMessage.includes("conflict") || lowerMessage.includes("409")) {
+            return new ConflictError(message);
+        }
+        if (lowerMessage.includes("invalid") || lowerMessage.includes("bad request") || lowerMessage.includes("400")) {
+            return new BadRequestError(message);
+        }
+        if (lowerMessage.includes("unauthorized") || lowerMessage.includes("401")) {
+            return new NotFoundError(message);
+        }
+        if (lowerMessage.includes("forbidden") || lowerMessage.includes("403")) {
+            return new NotFoundError(message);
+        }
+        return new InternalError(message);
+    }
+    parseJsonResponse(data) {
+        if (typeof data === "string") {
+            try {
+                return JSON.parse(data);
+            }
+            catch {
+                return undefined;
+            }
+        }
+        return data;
+    }
+}
+//# sourceMappingURL=KeycloakIdentityProviderService.js.map

package/lib/esm/keycloak/services/KeycloakIdentityProviderService.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"KeycloakIdentityProviderService.js","sourceRoot":"","sources":["../../../../src/keycloak/services/KeycloakIdentityProviderService.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,eAAe,EACf,aAAa,EACb,aAAa,EACb,aAAa,GACd,MAAM,yBAAyB,CAAC;AAEjC,OAAO,EAAE,kBAAkB,EAAE,MAAM,gBAAgB,CAAC;AAMpD,OAAO,KAAwB,MAAM,OAAO,CAAC;AAC7C,OAAO,KAAK,KAAK,MAAM,YAAY,CAAC;AAEpC,MAAM,OAAO,+BAAgC,SAAQ,kBAGpD;IACC,KAAK,CAAC,UAAU,CACd,GAAG,IAA6B;QAEhC,MAAM,EAAE,OAAO,EAAE,GAAG,CAClB,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,YAAY,EAAE,IAAI,CAAC,CAC5C,CAAC,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QACvB,MAAM,MAAM,GAAG,OAAO,CAAC,CAAC,CAAwB,CAAC;QACjD,IAAI,CAAC,OAAO,GAAG,MAAM,CAAC;QACtB,MAAM,MAAM,GAAG,IAAI,CAAC,gBAAgB,CAAC,MAAM,CAAC,CAAC;QAC7C,IAAI,CAAC,OAAO,GAAG,MAAM,CAAC;QACtB,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;IAC5B,CAAC;IAED,KAAK,CAAC,sBAAsB,CAC1B,mBAAwC,EACxC,SAA8D,EAC9D,GAAG,IAA6B;QAEhC,MAAM,EAAE,OAAO,EAAE,GAAG,CAClB,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,wBAAwB,EAAE,IAAI,CAAC,CACxD,CAAC,GAAG,CAAC,IAAI,CAAC,sBAAsB,CAAC,CAAC;QACnC,MAAM,gBAAgB,GAAG,MAAM,IAAI,CAAC,mBAAmB,CACrD,mBAAmB,EACnB,GAAG,OAAO,CACX,CAAC;QACF,MAAM,gBAAgB,GAAG,IAAI,CAAC,+BAA+B,CAC3D,mBAAmB,CAAC,gBAAiB,EACrC,SAAS,IAAI,EAAE,CAChB,CAAC;QACF,MAAM,IAAI,CAAC,OAAO,CAChB,MAAM,EACN,iBAAiB,mBAAmB,CAAC,YAAY,EAAE,KAAK,8BAA8B,EACtF,gBAAgB,EAChB,IAAI,CAAC,4BAA4B,CAAC,gBAAgB,CAAC,EACnD,GAAG,EACH,EAAE,EACF,GAAG,OAAO,CACX,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,sBAAsB,CAC1B,mBAAwC,EACxC,SAA8D,EAC9D,GAAG,IAA6B;QAEhC,MAAM,EAAE,OAAO,EAAE,GAAG,CAClB,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,wBAAwB,EAAE,IAAI,CAAC,CACxD,CAAC,GAAG,CAAC,IAAI,CAAC,sBAAsB,CAAC,CAAC;QACnC,MAAM,gBAAgB,GAAG,MAAM,IAAI,CAAC,mBAAmB,CACrD,mBAAmB,EACnB,GAAG,OAAO,CACX,CAAC;QACF,MAAM,gBAAgB,GAAG,IAAI,CAAC,+BAA+B,CAC3D,mBAAmB,CAAC,gBAAiB,EACrC,SAAS,IAAI,EAAE,CAChB,CAAC;QACF,MAAM,IAAI,CAAC,OAAO,CAChB,KAAK,EACL,iBAAiB,mBAAmB,CAAC,YAAY,EAAE,KAAK,gCAAgC,kBAAkB,CAAC,gBAAgB,CAAC,KAAK,CAAC,EAAE,EACpI,gBAAgB,EAChB,IAAI,CAAC,4BAA4B,CAAC,gBAAgB,CAAC,EACnD,GAAG,EACH,EAAE,EACF,GAAG,OAAO,CACX,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,6BAA6B,CACjC,mBAAwC,EACxC,WAA8B,EAC9B,GAAG,IAA6B;QAEhC,MAAM,EAAE,OAAO,EAAE,GAAG,CAClB,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,+BAA+B,EAAE,IAAI,CAAC,CAC/D,CAAC,GAAG,CAAC,IAAI,CAAC,6BAA6B,CAAC,CAAC;QAC1C,MAAM,KAAK,GAAG,WAAW,IAAI,mBAAmB,CAAC,MAAM,CAAC,KAAK,IAAI,EAAE,CAAC;QACpE,MAAM,gBAAgB,GAAG,MAAM,IAAI,CAAC,mBAAmB,CACrD,mBAAmB,EACnB,GAAG,OAAO,CACX,CAAC;QACF,MAAM,gBAAgB,GAAG,mBAAmB,CAAC,gBAAiB,CAAC;QAC/D,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,MAAM,IAAI,CAAC,OAAO,CAChB,MAAM,EACN,iBAAiB,mBAAmB,CAAC,YAAY,EAAE,KAAK,gCAAgC,gBAAgB,CAAC,KAAK,UAAU,EACxH,gBAAgB,EAChB;gBACE,IAAI,EAAE,IAAI,CAAC,QAAQ;gBACnB,qBAAqB,EAAE,gBAAgB,CAAC,KAAK;gBAC7C,sBAAsB,EAAE,sBAAsB;gBAC9C,MAAM,EAAE;oBACN,QAAQ,EAAE,gBAAgB,CAAC,cAAc,IAAI,OAAO;oBACpD,KAAK,EAAE,gBAAgB,CAAC,eAAe,IAAI,QAAQ;oBACnD,aAAa,EAAE,IAAI,CAAC,UAAU;oBAC9B,IAAI,EAAE,GAAG,mBAAmB,CAAC,MAAM,CAAC,QAAQ,IAAI,IAAI,CAAC,QAAQ,EAAE;iBAChE;aACF,EACD,GAAG,EACH,EAAE,EACF,GAAG,OAAO,CACX,CAAC;QACJ,CAAC;IACH,CAAC;IAEO,gBAAgB,CAAC,MAA2B;QAClD,OAAO,KAAK,CAAC,MAAM,CAAC;YAClB,OAAO,EAAE,GAAG,MAAM,CAAC,QAAQ,MAAM,MAAM,CAAC,IAAI,EAAE;YAC9C,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;YAC/C,cAAc,EAAE,GAAG,EAAE,CAAC,IAAI;YAC1B,UAAU,EAAE,IAAI,KAAK,CAAC,KAAK,CAAC;gBAC1B,kBAAkB,EAAE,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC;aAC9C,CAAC;SACH,CAAC,CAAC;IACL,CAAC;IAEO,YAAY,CAAC,MAA2B;QAC9C,OAAO,MAAM,CAAC,EAAE,KAAK,YAAY,IAAI,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IACpE,CAAC;IAEO,KAAK,CAAC,mBAAmB,CAC/B,mBAAwC,EACxC,GAAG,IAAyB;QAE5B,MAAM,EAAE,OAAO,EAAE,GAAG,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,mBAAmB,CAAC,CAAC;QAChE,OAAO,IAAI,CAAC,cAAc,CAAC,mBAAmB,CAAC,YAAa,EAAE,GAAG,OAAO,CAAC,CAAC;IAC5E,CAAC;IAEO,KAAK,CAAC,cAAc,CAC1B,YAA0B,EAC1B,GAAG,IAAyB;QAE5B,MAAM,EAAE,OAAO,EAAE,GAAG,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,cAAc,CAAC,CAAC;QAC3D,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,OAAO,CACjC,MAAM,EACN,WAAW,YAAY,CAAC,KAAK,gCAAgC,EAC7D,SAAS,EACT,IAAI,eAAe,CAAC;YAClB,SAAS,EAAE,YAAY,CAAC,WAAW;YACnC,QAAQ,EAAE,YAAY,CAAC,QAAQ;YAC/B,QAAQ,EAAE,YAAY,CAAC,QAAQ;YAC/B,UAAU,EAAE,UAAU;SACvB,CAAC,CAAC,QAAQ,EAAE,EACb,GAAG,EACH,EAAE,cAAc,EAAE,mCAAmC,EAAE,EACvD,GAAG,OAAO,CACX,CAAC;QACF,MAAM,IAAI,GAAG,IAAI,CAAC,iBAAiB,CACjC,QAAQ,CAAC,IAAI,CACd,CAAC;QACF,IAAI,IAAI,EAAE,YAAY;YAAE,OAAO,IAAI,CAAC,YAAY,CAAC;QACjD,MAAM,IAAI,eAAe,CACvB,gDAAgD,YAAY,CAAC,QAAQ,EAAE,CACxE,CAAC;IACJ,CAAC;IAEO,+BAA+B,CACrC,IAAoC,EACpC,SAAkD;QAElD,OAAO;YACL,GAAG,IAAI;YACP,GAAG,SAAS;YACZ,MAAM,EAAE;gBACN,GAAG,IAAI,CAAC,MAAM;gBACd,GAAG,SAAS,CAAC,MAAM;aACpB;SACF,CAAC;IACJ,CAAC;IAEO,4BAA4B,CAClC,gBAAgD;QAEhD,OAAO;YACL,KAAK,EAAE,gBAAgB,CAAC,KAAK;YAC7B,WAAW,EAAE,gBAAgB,CAAC,WAAW;YACzC,UAAU,EAAE,gBAAgB,CAAC,UAAU,IAAI,MAAM;YACjD,OAAO,EAAE,gBAAgB,CAAC,OAAO,IAAI,IAAI;YACzC,2BAA2B,EACzB,gBAAgB,CAAC,2BAA2B,IAAI,IAAI;YACtD,UAAU,EAAE,gBAAgB,CAAC,UAAU,IAAI,KAAK;YAChD,UAAU,EAAE,gBAAgB,CAAC,UAAU,IAAI,KAAK;YAChD,wBAAwB,EAAE,KAAK;YAC/B,qBAAqB,EAAE,KAAK;YAC5B,QAAQ,EAAE,gBAAgB,CAAC,QAAQ,IAAI,KAAK;YAC5C,WAAW,EAAE,gBAAgB,CAAC,WAAW,IAAI,KAAK;YAClD,MAAM,EAAE;gBACN,WAAW,EAAE,2CAA2C;gBACxD,iBAAiB,EAAE,IAAI;gBACvB,QAAQ,EAAE,qCAAqC,gBAAgB,CAAC,QAAQ,oBAAoB;gBAC5F,QAAQ,EAAE,gBAAgB,CAAC,QAAQ;gBACnC,OAAO,EAAE,qCAAqC,gBAAgB,CAAC,QAAQ,sBAAsB;gBAC7F,MAAM,EAAE,qCAAqC,gBAAgB,CAAC,QAAQ,OAAO;gBAC7E,UAAU,EAAE,IAAI;gBAChB,WAAW,EAAE,KAAK;gBAClB,qBAAqB,EAAE,qCAAqC,gBAAgB,CAAC,QAAQ,wCAAwC;gBAC7H,gBAAgB,EAAE,qCAAqC,gBAAgB,CAAC,QAAQ,wBAAwB;gBACxG,gBAAgB,EAAE,oBAAoB;gBACtC,SAAS,EAAE,qCAAqC,gBAAgB,CAAC,QAAQ,qBAAqB;gBAC9F,QAAQ,EAAE,gBAAgB,CAAC,QAAQ,IAAI,QAAQ;gBAC/C,YAAY,EAAE,gBAAgB,CAAC,YAAY;gBAC3C,GAAG,gBAAgB,CAAC,MAAM;aAC3B;SACF,CAAC;IACJ,CAAC;IAEO,KAAK,CAAC,OAAO,CACnB,MAAyC,EACzC,IAAY,EACZ,WAA+B,EAC/B,OAAgB,EAChB,WAAmB,EACnB,OAA+B,EAC/B,GAAG,IAAyB;QAE5B,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;QAChC,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC;YACzC,MAAM;YACN,GAAG,EAAE,GAAG,IAAI,CAAC,MAAM,CAAC,QAAQ,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,GAAG,IAAI,EAAE;YAC3D,IAAI,EACF,OAAO,KAAK,SAAS;gBACnB,CAAC,CAAC,SAAS;gBACX,CAAC,CAAC,OAAO,OAAO,KAAK,QAAQ;oBAC3B,CAAC,CAAC,OAAO;oBACT,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC;YAC/B,OAAO,EAAE;gBACP,GAAG,OAAO;gBACV,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,UAAU,WAAW,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBAClE,GAAG,CAAC,OAAO,KAAK,SAAS,IAAI,OAAO,OAAO,KAAK,QAAQ;oBACtD,CAAC,CAAC,EAAE,cAAc,EAAE,kBAAkB,EAAE;oBACxC,CAAC,CAAC,EAAE,CAAC;aACR;YACD,UAAU,EAAE,IAAI,KAAK,CAAC,KAAK,CAAC;gBAC1B,kBAAkB,EAAE,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,MAAM,CAAC;aACnD,CAAC;YACF,cAAc,EAAE,GAAG,EAAE,CAAC,IAAI;SAC3B,CAAC,CAAC;QACH,IAAI,QAAQ,CAAC,MAAM,KAAK,WAAW,EAAE,CAAC;YACpC,IAAI,CAAC,kBAAkB,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAC;QACjD,CAAC;QACD,OAAO,QAAQ,CAAC;IAClB,CAAC;IAEO,kBAAkB,CAAC,QAAa,EAAE,WAAmB;QAC3D,MAAM,MAAM,GAAG,QAAQ,CAAC,MAAgB,CAAC;QACzC,MAAM,OAAO,GAAG,YAAY,WAAW,cAAc,QAAQ,CAAC,MAAM,KAAK,QAAQ,CAAC,UAAU,EAAE,CAAC;QAC/F,IAAI,MAAM,KAAK,GAAG,IAAI,OAAO,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC;YAClE,MAAM,IAAI,aAAa,CAAC,OAAO,CAAC,CAAC;QACnC,CAAC;QACD,IAAI,MAAM,KAAK,GAAG,IAAI,OAAO,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC;YACjE,MAAM,IAAI,aAAa,CAAC,OAAO,CAAC,CAAC;QACnC,CAAC;QACD,IAAI,MAAM,KAAK,GAAG,EAAE,CAAC;YACnB,MAAM,IAAI,eAAe,CAAC,OAAO,CAAC,CAAC;QACrC,CAAC;QACD,IAAI,MAAM,KAAK,GAAG,IAAI,MAAM,KAAK,GAAG,EAAE,CAAC;YACrC,MAAM,IAAI,aAAa,CAAC,OAAO,CAAC,CAAC;QACnC,CAAC;QACD,MAAM,IAAI,aAAa,CAAC,OAAO,CAAC,CAAC;IACnC,CAAC;IAES,UAAU,CAAC,KAAY;QAC/B,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,IAAI,KAAK,CAAC,IAAI,IAAI,eAAe,CAAC;QAC/D,MAAM,YAAY,GAAG,OAAO,CAAC,WAAW,EAAE,CAAC;QAE3C,IAAI,YAAY,CAAC,QAAQ,CAAC,WAAW,CAAC,IAAI,YAAY,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;YACvE,OAAO,IAAI,aAAa,CAAC,OAAO,CAAC,CAAC;QACpC,CAAC;QAED,IAAI,YAAY,CAAC,QAAQ,CAAC,gBAAgB,CAAC,IAAI,YAAY,CAAC,QAAQ,CAAC,UAAU,CAAC,IAAI,YAAY,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;YACjH,OAAO,IAAI,aAAa,CAAC,OAAO,CAAC,CAAC;QACpC,CAAC;QAED,IAAI,YAAY,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,YAAY,CAAC,QAAQ,CAAC,aAAa,CAAC,IAAI,YAAY,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;YAC7G,OAAO,IAAI,eAAe,CAAC,OAAO,CAAC,CAAC;QACtC,CAAC;QAED,IAAI,YAAY,CAAC,QAAQ,CAAC,cAAc,CAAC,IAAI,YAAY,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;YAC1E,OAAO,IAAI,aAAa,CAAC,OAAO,CAAC,CAAC;QACpC,CAAC;QAED,IAAI,YAAY,CAAC,QAAQ,CAAC,WAAW,CAAC,IAAI,YAAY,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;YACvE,OAAO,IAAI,aAAa,CAAC,OAAO,CAAC,CAAC;QACpC,CAAC;QAED,OAAO,IAAI,aAAa,CAAC,OAAO,CAAC,CAAC;IACpC,CAAC;IAEO,iBAAiB,CAAI,IAAa;QACxC,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;YAC7B,IAAI,CAAC;gBACH,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAM,CAAC;YAC/B,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,SAAS,CAAC;YACnB,CAAC;QACH,CAAC;QACD,OAAO,IAAS,CAAC;IACnB,CAAC;CACF"}