@decaf-ts/integrations 0.1.1

package/lib/esm/keycloak/services/KeycloakUserService.js

@@ -0,0 +1,238 @@
+import { BadRequestError, ConflictError, InternalError, NotFoundError, } from "@decaf-ts/db-decorators";
+import { ClientBasedService } from "@decaf-ts/core";
+import Axios from "axios";
+import * as https from "node:https";
+export class KeycloakUserService extends ClientBasedService {
+    async initialize(...args) {
+        const { ctxArgs } = (await this.logCtx(args, "initialize", true)).for(this.initialize);
+        const config = ctxArgs[0];
+        this._config = config;
+        const client = this.createHttpClient(config);
+        this._client = client;
+        return { config, client };
+    }
+    async addUserToRealm(keycloakUser, payload, ...args) {
+        const { ctxArgs } = (await this.logCtx(args, "addUserToRealm", true)).for(this.addUserToRealm);
+        return this.createRealmUser(keycloakUser, payload, ...ctxArgs);
+    }
+    async editUser(realmName, userUUID, payload, ...args) {
+        const { ctxArgs } = (await this.logCtx(args, "editUser", true)).for(this.editUser);
+        await this.updateRealmUser(realmName, userUUID, payload, ...ctxArgs);
+    }
+    async updateRealmUser(realmName, userUUID, payload, ...args) {
+        const { ctxArgs } = (await this.logCtx(args, "updateRealmUser", true)).for(this.updateRealmUser);
+        const adminAccessToken = await this.getAdminAccessToken(...ctxArgs);
+        const response = await this.request("GET", `/admin/realms/${realmName}/users/${userUUID}`, adminAccessToken, undefined, 200, {}, ...ctxArgs);
+        const currentUser = this.parseJsonResponse(response.data) ?? {};
+        await this.request("PUT", `/admin/realms/${realmName}/users/${userUUID}`, adminAccessToken, { ...currentUser, ...payload }, 204, {}, ...ctxArgs);
+    }
+    async removeUserFromRealm(realmName, userUUID, ...args) {
+        const { ctxArgs } = (await this.logCtx(args, "removeUserFromRealm", true)).for(this.removeUserFromRealm);
+        const adminAccessToken = await this.getAccessToken(this.config.adminApiUser, ...ctxArgs);
+        await this.deleteUser(adminAccessToken, {
+            realm: realmName,
+            usernameUUID: userUUID,
+            apiClientId: "",
+            username: "",
+            password: "",
+        }, ...ctxArgs);
+    }
+    async deleteUser(accessToken, keycloakUser, ...args) {
+        const { ctxArgs } = (await this.logCtx(args, "deleteUser", true)).for(this.deleteUser);
+        await this.request("DELETE", `/admin/realms/${keycloakUser.realm}/users/${keycloakUser.usernameUUID}`, accessToken, undefined, 204, {}, ...ctxArgs);
+    }
+    async createRealmUser(keycloakUser, payload, ...args) {
+        const { ctxArgs } = (await this.logCtx(args, "createRealmUser", true)).for(this.createRealmUser);
+        const adminAccessToken = await this.getAdminAccessToken(...ctxArgs);
+        const userPayload = {
+            username: keycloakUser.username,
+            firstName: "Api",
+            lastName: "Admin",
+            email: `${keycloakUser.apiClientId}@${keycloakUser.realm}.com`,
+            emailVerified: true,
+            enabled: true,
+            credentials: [
+                {
+                    type: "password",
+                    value: keycloakUser.password,
+                    temporary: false,
+                },
+            ],
+            ...payload,
+        };
+        const response = await this.request("POST", `/admin/realms/${keycloakUser.realm}/users`, adminAccessToken, userPayload, 201, {}, ...ctxArgs);
+        return this.extractUUIDfromResponse(response);
+    }
+    async assignRolesToUser(rolesUrl, setRolesUrl, roleNames, accessToken, ...args) {
+        const { ctxArgs } = (await this.logCtx(args, "assignRolesToUser", true)).for(this.assignRolesToUser);
+        const response = await this.request("GET", rolesUrl, accessToken, undefined, 200, {}, ...ctxArgs);
+        const roles = this.parseJsonResponse(response.data) ?? [];
+        const selectedRoles = roles.filter((role) => roleNames.includes(role.name));
+        if (selectedRoles.length === 0) {
+            throw new NotFoundError(`No roles matched ${roleNames.join(", ")}`);
+        }
+        const promises = selectedRoles.map((role) => this.request("POST", setRolesUrl, accessToken, [role], 204, {}, ...ctxArgs));
+        await Promise.all(promises);
+    }
+    async grantRealmRolesToUser(realmName, userUUID, roleNames, ...args) {
+        const { ctxArgs } = (await this.logCtx(args, "grantRealmRolesToUser", true)).for(this.grantRealmRolesToUser);
+        const adminAccessToken = await this.getAdminAccessToken(...ctxArgs);
+        await this.assignRolesToUser(`/admin/realms/${realmName}/roles`, `/admin/realms/${realmName}/users/${userUUID}/role-mappings/realm`, roleNames, adminAccessToken, ...ctxArgs);
+    }
+    async grantClientRolesToUser(realmName, clientUUID, userUUID, roleNames, ...args) {
+        const { ctxArgs } = (await this.logCtx(args, "grantClientRolesToUser", true)).for(this.grantClientRolesToUser);
+        const adminAccessToken = await this.getAdminAccessToken(...ctxArgs);
+        await this.assignRolesToUser(`/admin/realms/${realmName}/clients/${clientUUID}/roles`, `/admin/realms/${realmName}/users/${userUUID}/role-mappings/clients/${clientUUID}`, roleNames, adminAccessToken, ...ctxArgs);
+    }
+    async revokeRealmRolesFromUser(realmName, userUUID, roleNames, ...args) {
+        const { ctxArgs } = (await this.logCtx(args, "revokeRealmRolesFromUser", true)).for(this.revokeRealmRolesFromUser);
+        const adminAccessToken = await this.getAdminAccessToken(...ctxArgs);
+        const rolesResponse = await this.request("GET", `/admin/realms/${realmName}/roles`, adminAccessToken, undefined, 200, {}, ...ctxArgs);
+        const roles = this.parseJsonResponse(rolesResponse.data) ?? [];
+        const selectedRoles = roles.filter((role) => roleNames.includes(role.name));
+        await this.request("DELETE", `/admin/realms/${realmName}/users/${userUUID}/role-mappings/realm`, adminAccessToken, selectedRoles, 204, {}, ...ctxArgs);
+    }
+    async replaceRealmRolesForUser(realmName, userUUID, roleNames, ...args) {
+        const { ctxArgs } = (await this.logCtx(args, "replaceRealmRolesForUser", true)).for(this.replaceRealmRolesForUser);
+        const adminAccessToken = await this.getAdminAccessToken(...ctxArgs);
+        const currentRolesResponse = await this.request("GET", `/admin/realms/${realmName}/users/${userUUID}/role-mappings/realm`, adminAccessToken, undefined, 200, {}, ...ctxArgs);
+        const currentRoles = this.parseJsonResponse(currentRolesResponse.data) ?? [];
+        if (currentRoles.length > 0) {
+            await this.request("DELETE", `/admin/realms/${realmName}/users/${userUUID}/role-mappings/realm`, adminAccessToken, currentRoles, 204, {}, ...ctxArgs);
+        }
+        await this.grantRealmRolesToUser(realmName, userUUID, roleNames, ...ctxArgs);
+    }
+    async revokeClientRolesFromUser(realmName, clientUUID, userUUID, roleNames, ...args) {
+        const { ctxArgs } = (await this.logCtx(args, "revokeClientRolesFromUser", true)).for(this.revokeClientRolesFromUser);
+        const adminAccessToken = await this.getAdminAccessToken(...ctxArgs);
+        const rolesResponse = await this.request("GET", `/admin/realms/${realmName}/clients/${clientUUID}/roles`, adminAccessToken, undefined, 200, {}, ...ctxArgs);
+        const roles = this.parseJsonResponse(rolesResponse.data) ?? [];
+        const selectedRoles = roles.filter((role) => roleNames.includes(role.name));
+        await this.request("DELETE", `/admin/realms/${realmName}/users/${userUUID}/role-mappings/clients/${clientUUID}`, adminAccessToken, selectedRoles, 204, {}, ...ctxArgs);
+    }
+    async replaceClientRolesForUser(realmName, clientUUID, userUUID, roleNames, ...args) {
+        const { ctxArgs } = (await this.logCtx(args, "replaceClientRolesForUser", true)).for(this.replaceClientRolesForUser);
+        const adminAccessToken = await this.getAdminAccessToken(...ctxArgs);
+        const currentRolesResponse = await this.request("GET", `/admin/realms/${realmName}/users/${userUUID}/role-mappings/clients/${clientUUID}`, adminAccessToken, undefined, 200, {}, ...ctxArgs);
+        const currentRoles = this.parseJsonResponse(currentRolesResponse.data) ?? [];
+        if (currentRoles.length > 0) {
+            await this.request("DELETE", `/admin/realms/${realmName}/users/${userUUID}/role-mappings/clients/${clientUUID}`, adminAccessToken, currentRoles, 204, {}, ...ctxArgs);
+        }
+        await this.grantClientRolesToUser(realmName, clientUUID, userUUID, roleNames, ...ctxArgs);
+    }
+    createHttpClient(config) {
+        return Axios.create({
+            baseURL: `${config.protocol}://${config.host}`,
+            headers: { "Content-Type": "application/json" },
+            validateStatus: () => true,
+            httpsAgent: new https.Agent({
+                rejectUnauthorized: this.isProduction(config),
+            }),
+        });
+    }
+    isProduction(config) {
+        return config.id === "production" || config.host.includes("prod");
+    }
+    async getAdminAccessToken(...args) {
+        const { ctxArgs } = this.logCtx(args, this.getAdminAccessToken);
+        return this.getAccessToken(this.config.adminApiUser, ...ctxArgs);
+    }
+    async getAccessToken(keycloakUser, ...args) {
+        const { ctxArgs } = this.logCtx(args, this.getAccessToken);
+        const response = await this.request("POST", `/realms/${keycloakUser.realm}/protocol/openid-connect/token`, undefined, new URLSearchParams({
+            client_id: keycloakUser.apiClientId,
+            username: keycloakUser.username,
+            password: keycloakUser.password,
+            grant_type: "password",
+        }).toString(), 200, { "content-type": "application/x-www-form-urlencoded" }, ...ctxArgs);
+        const data = this.parseJsonResponse(response.data);
+        if (data?.access_token)
+            return data.access_token;
+        throw new BadRequestError(`Unable to get Keycloak access token for user ${keycloakUser.username}`);
+    }
+    async request(method, path, accessToken, payload, successCode, headers, ...args) {
+        this.logCtx(args, this.request);
+        const response = await this.client.request({
+            method,
+            url: `${this.config.protocol}://${this.config.host}${path}`,
+            data: payload === undefined
+                ? undefined
+                : typeof payload === "string"
+                    ? payload
+                    : JSON.stringify(payload),
+            headers: {
+                ...headers,
+                ...(accessToken ? { Authorization: `Bearer ${accessToken}` } : {}),
+                ...(payload !== undefined && typeof payload !== "string"
+                    ? { "Content-Type": "application/json" }
+                    : {}),
+            },
+            httpsAgent: new https.Agent({
+                rejectUnauthorized: this.isProduction(this.config),
+            }),
+            validateStatus: () => true,
+        });
+        if (response.status !== successCode) {
+            this.handleHttpResponse(response, successCode);
+        }
+        return response;
+    }
+    handleHttpResponse(response, successCode, errorMsg) {
+        const status = response.status;
+        const message = errorMsg
+            ? `${errorMsg}: Expected ${successCode}, received ${response.status}: ${response.statusText}.`
+            : `Expected ${successCode}, received ${response.status}: ${response.statusText}`;
+        if (status === 404 || message.toLowerCase().includes("not found")) {
+            throw new NotFoundError(message);
+        }
+        if (status === 409 || message.toLowerCase().includes("conflict")) {
+            throw new ConflictError(message);
+        }
+        if (status === 400) {
+            throw new BadRequestError(message);
+        }
+        if (status === 401 || status === 403) {
+            throw new NotFoundError(message);
+        }
+        throw new InternalError(message);
+    }
+    parseError(error) {
+        const message = error.message || error.name || "Unknown error";
+        const lowerMessage = message.toLowerCase();
+        if (lowerMessage.includes("not found") || lowerMessage.includes("404")) {
+            return new NotFoundError(message);
+        }
+        if (lowerMessage.includes("already exists") || lowerMessage.includes("conflict") || lowerMessage.includes("409")) {
+            return new ConflictError(message);
+        }
+        if (lowerMessage.includes("invalid") || lowerMessage.includes("bad request") || lowerMessage.includes("400")) {
+            return new BadRequestError(message);
+        }
+        if (lowerMessage.includes("unauthorized") || lowerMessage.includes("401")) {
+            return new NotFoundError(message);
+        }
+        if (lowerMessage.includes("forbidden") || lowerMessage.includes("403")) {
+            return new NotFoundError(message);
+        }
+        return new InternalError(message);
+    }
+    extractUUIDfromResponse(response) {
+        const location = response.headers.location;
+        if (!location) {
+            throw new InternalError("Keycloak response did not include a location header");
+        }
+        return location.split("/").pop() ?? "";
+    }
+    parseJsonResponse(data) {
+        if (typeof data === "string") {
+            try {
+                return JSON.parse(data);
+            }
+            catch {
+                return undefined;
+            }
+        }
+        return data;
+    }
+}
+//# sourceMappingURL=KeycloakUserService.js.map

package/lib/esm/keycloak/services/KeycloakUserService.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"KeycloakUserService.js","sourceRoot":"","sources":["../../../../src/keycloak/services/KeycloakUserService.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,eAAe,EACf,aAAa,EACb,aAAa,EACb,aAAa,GACd,MAAM,yBAAyB,CAAC;AAEjC,OAAO,EAAE,kBAAkB,EAAE,MAAM,gBAAgB,CAAC;AAEpD,OAAO,KAAwB,MAAM,OAAO,CAAC;AAC7C,OAAO,KAAK,KAAK,MAAM,YAAY,CAAC;AAiBpC,MAAM,OAAO,mBAAoB,SAAQ,kBAGxC;IACC,KAAK,CAAC,UAAU,CACd,GAAG,IAA6B;QAEhC,MAAM,EAAE,OAAO,EAAE,GAAG,CAClB,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,YAAY,EAAE,IAAI,CAAC,CAC5C,CAAC,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QACvB,MAAM,MAAM,GAAG,OAAO,CAAC,CAAC,CAAwB,CAAC;QACjD,IAAI,CAAC,OAAO,GAAG,MAAM,CAAC;QACtB,MAAM,MAAM,GAAG,IAAI,CAAC,gBAAgB,CAAC,MAAM,CAAC,CAAC;QAC7C,IAAI,CAAC,OAAO,GAAG,MAAM,CAAC;QACtB,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;IAC5B,CAAC;IAED,KAAK,CAAC,cAAc,CAClB,YAA0B,EAC1B,OAAwD,EACxD,GAAG,IAA6B;QAEhC,MAAM,EAAE,OAAO,EAAE,GAAG,CAClB,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,gBAAgB,EAAE,IAAI,CAAC,CAChD,CAAC,GAAG,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;QAC3B,OAAO,IAAI,CAAC,eAAe,CAAC,YAAY,EAAE,OAAO,EAAE,GAAG,OAAO,CAAC,CAAC;IACjE,CAAC;IAED,KAAK,CAAC,QAAQ,CACZ,SAAiB,EACjB,QAAgB,EAChB,OAA4C,EAC5C,GAAG,IAA6B;QAEhC,MAAM,EAAE,OAAO,EAAE,GAAG,CAClB,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,UAAU,EAAE,IAAI,CAAC,CAC1C,CAAC,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QACrB,MAAM,IAAI,CAAC,eAAe,CAAC,SAAS,EAAE,QAAQ,EAAE,OAAO,EAAE,GAAG,OAAO,CAAC,CAAC;IACvE,CAAC;IAED,KAAK,CAAC,eAAe,CACnB,SAAiB,EACjB,QAAgB,EAChB,OAA4C,EAC5C,GAAG,IAA6B;QAEhC,MAAM,EAAE,OAAO,EAAE,GAAG,CAClB,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,iBAAiB,EAAE,IAAI,CAAC,CACjD,CAAC,GAAG,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;QAC5B,MAAM,gBAAgB,GAAG,MAAM,IAAI,CAAC,mBAAmB,CAAC,GAAG,OAAO,CAAC,CAAC;QACpE,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,OAAO,CACjC,KAAK,EACL,iBAAiB,SAAS,UAAU,QAAQ,EAAE,EAC9C,gBAAgB,EAChB,SAAS,EACT,GAAG,EACH,EAAE,EACF,GAAG,OAAO,CACX,CAAC;QACF,MAAM,WAAW,GACf,IAAI,CAAC,iBAAiB,CAA6B,QAAQ,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;QAC1E,MAAM,IAAI,CAAC,OAAO,CAChB,KAAK,EACL,iBAAiB,SAAS,UAAU,QAAQ,EAAE,EAC9C,gBAAgB,EAChB,EAAE,GAAG,WAAW,EAAE,GAAG,OAAO,EAAE,EAC9B,GAAG,EACH,EAAE,EACF,GAAG,OAAO,CACX,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,mBAAmB,CACvB,SAAiB,EACjB,QAAgB,EAChB,GAAG,IAA6B;QAEhC,MAAM,EAAE,OAAO,EAAE,GAAG,CAClB,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,qBAAqB,EAAE,IAAI,CAAC,CACrD,CAAC,GAAG,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC;QAChC,MAAM,gBAAgB,GAAG,MAAM,IAAI,CAAC,cAAc,CAChD,IAAI,CAAC,MAAM,CAAC,YAAa,EACzB,GAAG,OAAO,CACX,CAAC;QACF,MAAM,IAAI,CAAC,UAAU,CACnB,gBAAgB,EAChB;YACE,KAAK,EAAE,SAAS;YAChB,YAAY,EAAE,QAAQ;YACtB,WAAW,EAAE,EAAE;YACf,QAAQ,EAAE,EAAE;YACZ,QAAQ,EAAE,EAAE;SACb,EACD,GAAG,OAAO,CACX,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,UAAU,CACd,WAAmB,EACnB,YAA0B,EAC1B,GAAG,IAA6B;QAEhC,MAAM,EAAE,OAAO,EAAE,GAAG,CAClB,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,YAAY,EAAE,IAAI,CAAC,CAC5C,CAAC,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QACvB,MAAM,IAAI,CAAC,OAAO,CAChB,QAAQ,EACR,iBAAiB,YAAY,CAAC,KAAK,UAAU,YAAY,CAAC,YAAY,EAAE,EACxE,WAAW,EACX,SAAS,EACT,GAAG,EACH,EAAE,EACF,GAAG,OAAO,CACX,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,eAAe,CACnB,YAA0B,EAC1B,OAAwD,EACxD,GAAG,IAA6B;QAEhC,MAAM,EAAE,OAAO,EAAE,GAAG,CAClB,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,iBAAiB,EAAE,IAAI,CAAC,CACjD,CAAC,GAAG,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;QAC5B,MAAM,gBAAgB,GAAG,MAAM,IAAI,CAAC,mBAAmB,CAAC,GAAG,OAAO,CAAC,CAAC;QACpE,MAAM,WAAW,GAAG;YAClB,QAAQ,EAAE,YAAY,CAAC,QAAQ;YAC/B,SAAS,EAAE,KAAK;YAChB,QAAQ,EAAE,OAAO;YACjB,KAAK,EAAE,GAAG,YAAY,CAAC,WAAW,IAAI,YAAY,CAAC,KAAK,MAAM;YAC9D,aAAa,EAAE,IAAI;YACnB,OAAO,EAAE,IAAI;YACb,WAAW,EAAE;gBACX;oBACE,IAAI,EAAE,UAAU;oBAChB,KAAK,EAAE,YAAY,CAAC,QAAQ;oBAC5B,SAAS,EAAE,KAAK;iBACjB;aACF;YACD,GAAG,OAAO;SACX,CAAC;QACF,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,OAAO,CACjC,MAAM,EACN,iBAAiB,YAAY,CAAC,KAAK,QAAQ,EAC3C,gBAAgB,EAChB,WAAW,EACX,GAAG,EACH,EAAE,EACF,GAAG,OAAO,CACX,CAAC;QACF,OAAO,IAAI,CAAC,uBAAuB,CAAC,QAAQ,CAAC,CAAC;IAChD,CAAC;IAED,KAAK,CAAC,iBAAiB,CACrB,QAAgB,EAChB,WAAmB,EACnB,SAAmB,EACnB,WAAmB,EACnB,GAAG,IAA6B;QAEhC,MAAM,EAAE,OAAO,EAAE,GAAG,CAClB,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,mBAAmB,EAAE,IAAI,CAAC,CACnD,CAAC,GAAG,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC;QAC9B,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,OAAO,CACjC,KAAK,EACL,QAAQ,EACR,WAAW,EACX,SAAS,EACT,GAAG,EACH,EAAE,EACF,GAAG,OAAO,CACX,CAAC;QACF,MAAM,KAAK,GAAG,IAAI,CAAC,iBAAiB,CAAQ,QAAQ,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;QACjE,MAAM,aAAa,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,SAAS,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;QAC5E,IAAI,aAAa,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC/B,MAAM,IAAI,aAAa,CAAC,oBAAoB,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACtE,CAAC;QACD,MAAM,QAAQ,GAAoB,aAAa,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAC3D,IAAI,CAAC,OAAO,CACV,MAAM,EACN,WAAW,EACX,WAAW,EACX,CAAC,IAAI,CAAC,EACN,GAAG,EACH,EAAE,EACF,GAAG,OAAO,CACX,CACF,CAAC;QACF,MAAM,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IAC9B,CAAC;IAED,KAAK,CAAC,qBAAqB,CACzB,SAAiB,EACjB,QAAgB,EAChB,SAAmB,EACnB,GAAG,IAA6B;QAEhC,MAAM,EAAE,OAAO,EAAE,GAAG,CAClB,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,uBAAuB,EAAE,IAAI,CAAC,CACvD,CAAC,GAAG,CAAC,IAAI,CAAC,qBAAqB,CAAC,CAAC;QAClC,MAAM,gBAAgB,GAAG,MAAM,IAAI,CAAC,mBAAmB,CAAC,GAAG,OAAO,CAAC,CAAC;QACpE,MAAM,IAAI,CAAC,iBAAiB,CAC1B,iBAAiB,SAAS,QAAQ,EAClC,iBAAiB,SAAS,UAAU,QAAQ,sBAAsB,EAClE,SAAS,EACT,gBAAgB,EAChB,GAAG,OAAO,CACX,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,sBAAsB,CAC1B,SAAiB,EACjB,UAAkB,EAClB,QAAgB,EAChB,SAAmB,EACnB,GAAG,IAA6B;QAEhC,MAAM,EAAE,OAAO,EAAE,GAAG,CAClB,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,wBAAwB,EAAE,IAAI,CAAC,CACxD,CAAC,GAAG,CAAC,IAAI,CAAC,sBAAsB,CAAC,CAAC;QACnC,MAAM,gBAAgB,GAAG,MAAM,IAAI,CAAC,mBAAmB,CAAC,GAAG,OAAO,CAAC,CAAC;QACpE,MAAM,IAAI,CAAC,iBAAiB,CAC1B,iBAAiB,SAAS,YAAY,UAAU,QAAQ,EACxD,iBAAiB,SAAS,UAAU,QAAQ,0BAA0B,UAAU,EAAE,EAClF,SAAS,EACT,gBAAgB,EAChB,GAAG,OAAO,CACX,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,wBAAwB,CAC5B,SAAiB,EACjB,QAAgB,EAChB,SAAmB,EACnB,GAAG,IAA6B;QAEhC,MAAM,EAAE,OAAO,EAAE,GAAG,CAClB,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,0BAA0B,EAAE,IAAI,CAAC,CAC1D,CAAC,GAAG,CAAC,IAAI,CAAC,wBAAwB,CAAC,CAAC;QACrC,MAAM,gBAAgB,GAAG,MAAM,IAAI,CAAC,mBAAmB,CAAC,GAAG,OAAO,CAAC,CAAC;QACpE,MAAM,aAAa,GAAG,MAAM,IAAI,CAAC,OAAO,CACtC,KAAK,EACL,iBAAiB,SAAS,QAAQ,EAClC,gBAAgB,EAChB,SAAS,EACT,GAAG,EACH,EAAE,EACF,GAAG,OAAO,CACX,CAAC;QACF,MAAM,KAAK,GAAG,IAAI,CAAC,iBAAiB,CAAQ,aAAa,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;QACtE,MAAM,aAAa,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,SAAS,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;QAC5E,MAAM,IAAI,CAAC,OAAO,CAChB,QAAQ,EACR,iBAAiB,SAAS,UAAU,QAAQ,sBAAsB,EAClE,gBAAgB,EAChB,aAAa,EACb,GAAG,EACH,EAAE,EACF,GAAG,OAAO,CACX,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,wBAAwB,CAC5B,SAAiB,EACjB,QAAgB,EAChB,SAAmB,EACnB,GAAG,IAA6B;QAEhC,MAAM,EAAE,OAAO,EAAE,GAAG,CAClB,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,0BAA0B,EAAE,IAAI,CAAC,CAC1D,CAAC,GAAG,CAAC,IAAI,CAAC,wBAAwB,CAAC,CAAC;QACrC,MAAM,gBAAgB,GAAG,MAAM,IAAI,CAAC,mBAAmB,CAAC,GAAG,OAAO,CAAC,CAAC;QACpE,MAAM,oBAAoB,GAAG,MAAM,IAAI,CAAC,OAAO,CAC7C,KAAK,EACL,iBAAiB,SAAS,UAAU,QAAQ,sBAAsB,EAClE,gBAAgB,EAChB,SAAS,EACT,GAAG,EACH,EAAE,EACF,GAAG,OAAO,CACX,CAAC;QACF,MAAM,YAAY,GAChB,IAAI,CAAC,iBAAiB,CAAQ,oBAAoB,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;QACjE,IAAI,YAAY,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC5B,MAAM,IAAI,CAAC,OAAO,CAChB,QAAQ,EACR,iBAAiB,SAAS,UAAU,QAAQ,sBAAsB,EAClE,gBAAgB,EAChB,YAAY,EACZ,GAAG,EACH,EAAE,EACF,GAAG,OAAO,CACX,CAAC;QACJ,CAAC;QACD,MAAM,IAAI,CAAC,qBAAqB,CAC9B,SAAS,EACT,QAAQ,EACR,SAAS,EACT,GAAG,OAAO,CACX,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,yBAAyB,CAC7B,SAAiB,EACjB,UAAkB,EAClB,QAAgB,EAChB,SAAmB,EACnB,GAAG,IAA6B;QAEhC,MAAM,EAAE,OAAO,EAAE,GAAG,CAClB,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,2BAA2B,EAAE,IAAI,CAAC,CAC3D,CAAC,GAAG,CAAC,IAAI,CAAC,yBAAyB,CAAC,CAAC;QACtC,MAAM,gBAAgB,GAAG,MAAM,IAAI,CAAC,mBAAmB,CAAC,GAAG,OAAO,CAAC,CAAC;QACpE,MAAM,aAAa,GAAG,MAAM,IAAI,CAAC,OAAO,CACtC,KAAK,EACL,iBAAiB,SAAS,YAAY,UAAU,QAAQ,EACxD,gBAAgB,EAChB,SAAS,EACT,GAAG,EACH,EAAE,EACF,GAAG,OAAO,CACX,CAAC;QACF,MAAM,KAAK,GAAG,IAAI,CAAC,iBAAiB,CAAQ,aAAa,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;QACtE,MAAM,aAAa,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,SAAS,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;QAC5E,MAAM,IAAI,CAAC,OAAO,CAChB,QAAQ,EACR,iBAAiB,SAAS,UAAU,QAAQ,0BAA0B,UAAU,EAAE,EAClF,gBAAgB,EAChB,aAAa,EACb,GAAG,EACH,EAAE,EACF,GAAG,OAAO,CACX,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,yBAAyB,CAC7B,SAAiB,EACjB,UAAkB,EAClB,QAAgB,EAChB,SAAmB,EACnB,GAAG,IAA6B;QAEhC,MAAM,EAAE,OAAO,EAAE,GAAG,CAClB,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,2BAA2B,EAAE,IAAI,CAAC,CAC3D,CAAC,GAAG,CAAC,IAAI,CAAC,yBAAyB,CAAC,CAAC;QACtC,MAAM,gBAAgB,GAAG,MAAM,IAAI,CAAC,mBAAmB,CAAC,GAAG,OAAO,CAAC,CAAC;QACpE,MAAM,oBAAoB,GAAG,MAAM,IAAI,CAAC,OAAO,CAC7C,KAAK,EACL,iBAAiB,SAAS,UAAU,QAAQ,0BAA0B,UAAU,EAAE,EAClF,gBAAgB,EAChB,SAAS,EACT,GAAG,EACH,EAAE,EACF,GAAG,OAAO,CACX,CAAC;QACF,MAAM,YAAY,GAChB,IAAI,CAAC,iBAAiB,CAAQ,oBAAoB,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;QACjE,IAAI,YAAY,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC5B,MAAM,IAAI,CAAC,OAAO,CAChB,QAAQ,EACR,iBAAiB,SAAS,UAAU,QAAQ,0BAA0B,UAAU,EAAE,EAClF,gBAAgB,EAChB,YAAY,EACZ,GAAG,EACH,EAAE,EACF,GAAG,OAAO,CACX,CAAC;QACJ,CAAC;QACD,MAAM,IAAI,CAAC,sBAAsB,CAC/B,SAAS,EACT,UAAU,EACV,QAAQ,EACR,SAAS,EACT,GAAG,OAAO,CACX,CAAC;IACJ,CAAC;IAEO,gBAAgB,CAAC,MAA2B;QAClD,OAAO,KAAK,CAAC,MAAM,CAAC;YAClB,OAAO,EAAE,GAAG,MAAM,CAAC,QAAQ,MAAM,MAAM,CAAC,IAAI,EAAE;YAC9C,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;YAC/C,cAAc,EAAE,GAAG,EAAE,CAAC,IAAI;YAC1B,UAAU,EAAE,IAAI,KAAK,CAAC,KAAK,CAAC;gBAC1B,kBAAkB,EAAE,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC;aAC9C,CAAC;SACH,CAAC,CAAC;IACL,CAAC;IAEO,YAAY,CAAC,MAA2B;QAC9C,OAAO,MAAM,CAAC,EAAE,KAAK,YAAY,IAAI,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IACpE,CAAC;IAEO,KAAK,CAAC,mBAAmB,CAC/B,GAAG,IAAyB;QAE5B,MAAM,EAAE,OAAO,EAAE,GAAG,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,mBAAmB,CAAC,CAAC;QAChE,OAAO,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,MAAM,CAAC,YAAa,EAAE,GAAG,OAAO,CAAC,CAAC;IACpE,CAAC;IAEO,KAAK,CAAC,cAAc,CAC1B,YAA0B,EAC1B,GAAG,IAAyB;QAE5B,MAAM,EAAE,OAAO,EAAE,GAAG,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,cAAc,CAAC,CAAC;QAC3D,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,OAAO,CACjC,MAAM,EACN,WAAW,YAAY,CAAC,KAAK,gCAAgC,EAC7D,SAAS,EACT,IAAI,eAAe,CAAC;YAClB,SAAS,EAAE,YAAY,CAAC,WAAW;YACnC,QAAQ,EAAE,YAAY,CAAC,QAAQ;YAC/B,QAAQ,EAAE,YAAY,CAAC,QAAQ;YAC/B,UAAU,EAAE,UAAU;SACvB,CAAC,CAAC,QAAQ,EAAE,EACb,GAAG,EACH,EAAE,cAAc,EAAE,mCAAmC,EAAE,EACvD,GAAG,OAAO,CACX,CAAC;QACF,MAAM,IAAI,GAAG,IAAI,CAAC,iBAAiB,CACjC,QAAQ,CAAC,IAAI,CACd,CAAC;QACF,IAAI,IAAI,EAAE,YAAY;YAAE,OAAO,IAAI,CAAC,YAAY,CAAC;QACjD,MAAM,IAAI,eAAe,CACvB,gDAAgD,YAAY,CAAC,QAAQ,EAAE,CACxE,CAAC;IACJ,CAAC;IAEO,KAAK,CAAC,OAAO,CACnB,MAAyC,EACzC,IAAY,EACZ,WAA+B,EAC/B,OAAgB,EAChB,WAAmB,EACnB,OAA+B,EAC/B,GAAG,IAAyB;QAE5B,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;QAChC,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC;YACzC,MAAM;YACN,GAAG,EAAE,GAAG,IAAI,CAAC,MAAM,CAAC,QAAQ,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,GAAG,IAAI,EAAE;YAC3D,IAAI,EACF,OAAO,KAAK,SAAS;gBACnB,CAAC,CAAC,SAAS;gBACX,CAAC,CAAC,OAAO,OAAO,KAAK,QAAQ;oBAC3B,CAAC,CAAC,OAAO;oBACT,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC;YAC/B,OAAO,EAAE;gBACP,GAAG,OAAO;gBACV,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,UAAU,WAAW,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBAClE,GAAG,CAAC,OAAO,KAAK,SAAS,IAAI,OAAO,OAAO,KAAK,QAAQ;oBACtD,CAAC,CAAC,EAAE,cAAc,EAAE,kBAAkB,EAAE;oBACxC,CAAC,CAAC,EAAE,CAAC;aACR;YACD,UAAU,EAAE,IAAI,KAAK,CAAC,KAAK,CAAC;gBAC1B,kBAAkB,EAAE,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,MAAM,CAAC;aACnD,CAAC;YACF,cAAc,EAAE,GAAG,EAAE,CAAC,IAAI;SAC3B,CAAC,CAAC;QACH,IAAI,QAAQ,CAAC,MAAM,KAAK,WAAW,EAAE,CAAC;YACpC,IAAI,CAAC,kBAAkB,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAC;QACjD,CAAC;QACD,OAAO,QAAQ,CAAC;IAClB,CAAC;IAEO,kBAAkB,CACxB,QAAa,EACb,WAAmB,EACnB,QAAiB;QAEjB,MAAM,MAAM,GAAG,QAAQ,CAAC,MAAgB,CAAC;QACzC,MAAM,OAAO,GAAG,QAAQ;YACtB,CAAC,CAAC,GAAG,QAAQ,cAAc,WAAW,cAAc,QAAQ,CAAC,MAAM,KAAK,QAAQ,CAAC,UAAU,GAAG;YAC9F,CAAC,CAAC,YAAY,WAAW,cAAc,QAAQ,CAAC,MAAM,KAAK,QAAQ,CAAC,UAAU,EAAE,CAAC;QACnF,IAAI,MAAM,KAAK,GAAG,IAAI,OAAO,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC;YAClE,MAAM,IAAI,aAAa,CAAC,OAAO,CAAC,CAAC;QACnC,CAAC;QACD,IAAI,MAAM,KAAK,GAAG,IAAI,OAAO,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC;YACjE,MAAM,IAAI,aAAa,CAAC,OAAO,CAAC,CAAC;QACnC,CAAC;QACD,IAAI,MAAM,KAAK,GAAG,EAAE,CAAC;YACnB,MAAM,IAAI,eAAe,CAAC,OAAO,CAAC,CAAC;QACrC,CAAC;QACD,IAAI,MAAM,KAAK,GAAG,IAAI,MAAM,KAAK,GAAG,EAAE,CAAC;YACrC,MAAM,IAAI,aAAa,CAAC,OAAO,CAAC,CAAC;QACnC,CAAC;QACD,MAAM,IAAI,aAAa,CAAC,OAAO,CAAC,CAAC;IACnC,CAAC;IAES,UAAU,CAAC,KAAY;QAC/B,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,IAAI,KAAK,CAAC,IAAI,IAAI,eAAe,CAAC;QAC/D,MAAM,YAAY,GAAG,OAAO,CAAC,WAAW,EAAE,CAAC;QAE3C,IAAI,YAAY,CAAC,QAAQ,CAAC,WAAW,CAAC,IAAI,YAAY,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;YACvE,OAAO,IAAI,aAAa,CAAC,OAAO,CAAC,CAAC;QACpC,CAAC;QAED,IAAI,YAAY,CAAC,QAAQ,CAAC,gBAAgB,CAAC,IAAI,YAAY,CAAC,QAAQ,CAAC,UAAU,CAAC,IAAI,YAAY,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;YACjH,OAAO,IAAI,aAAa,CAAC,OAAO,CAAC,CAAC;QACpC,CAAC;QAED,IAAI,YAAY,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,YAAY,CAAC,QAAQ,CAAC,aAAa,CAAC,IAAI,YAAY,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;YAC7G,OAAO,IAAI,eAAe,CAAC,OAAO,CAAC,CAAC;QACtC,CAAC;QAED,IAAI,YAAY,CAAC,QAAQ,CAAC,cAAc,CAAC,IAAI,YAAY,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;YAC1E,OAAO,IAAI,aAAa,CAAC,OAAO,CAAC,CAAC;QACpC,CAAC;QAED,IAAI,YAAY,CAAC,QAAQ,CAAC,WAAW,CAAC,IAAI,YAAY,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;YACvE,OAAO,IAAI,aAAa,CAAC,OAAO,CAAC,CAAC;QACpC,CAAC;QAED,OAAO,IAAI,aAAa,CAAC,OAAO,CAAC,CAAC;IACpC,CAAC;IAEO,uBAAuB,CAAC,QAAa;QAC3C,MAAM,QAAQ,GAAG,QAAQ,CAAC,OAAO,CAAC,QAA8B,CAAC;QACjE,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,MAAM,IAAI,aAAa,CACrB,qDAAqD,CACtD,CAAC;QACJ,CAAC;QACD,OAAO,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,IAAI,EAAE,CAAC;IACzC,CAAC;IAEO,iBAAiB,CAAI,IAAa;QACxC,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;YAC7B,IAAI,CAAC;gBACH,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAM,CAAC;YAC/B,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,SAAS,CAAC;YACnB,CAAC;QACH,CAAC;QACD,OAAO,IAAS,CAAC;IACnB,CAAC;CACF"}

package/lib/esm/keycloak/services/index.js

@@ -0,0 +1,13 @@
+/**
+ * @module integrations/keycloak/services
+ * @summary Keycloak provisioning services.
+ * @description Re-exports the orchestrator and lower-level services used to manage realms, roles, clients, users, identity providers, and access tokens.
+ */
+export * from "./KeycloakAuthService.js";
+export * from "./KeycloakClientService.js";
+export * from "./KeycloakIdentityProviderService.js";
+export * from "./KeycloakRealmService.js";
+export * from "./KeycloakRoleService.js";
+export * from "./KeycloakService.js";
+export * from "./KeycloakUserService.js";
+//# sourceMappingURL=index.js.map

package/lib/esm/keycloak/services/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../src/keycloak/services/index.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,yCAAsC;AACtC,2CAAwC;AACxC,qDAAkD;AAClD,0CAAuC;AACvC,yCAAsC;AACtC,qCAAkC;AAClC,yCAAsC"}

package/lib/esm/keycloak/types.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=types.js.map

package/lib/esm/keycloak/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../../src/keycloak/types.ts"],"names":[],"mappings":""}

package/lib/esm/kibana/helpers.js

@@ -0,0 +1,56 @@
+export function createDefaultKibanaSpaceConfig(realm) {
+    return {
+        id: realm.toLowerCase(),
+        name: realm.toUpperCase(),
+        description: `Tenant space for ${realm.toUpperCase()} dashboards and logs`,
+        initials: realm.slice(0, 2).toUpperCase(),
+        disabledFeatures: [],
+    };
+}
+export function createDefaultKibanaDataViewConfigs(realm) {
+    const suffix = realm.toLowerCase();
+    return [
+        {
+            id: `filebeat_pla_${suffix}`,
+            name: `PLA Filebeat Logs (${realm})`,
+            title: `filebeat-pla-${suffix}-*`,
+            timeFieldName: "@timestamp",
+            allowNoIndex: true,
+        },
+        {
+            id: `logs_pla_${suffix}`,
+            name: `PLA Metricbeat Logs (${realm})`,
+            title: `metricbeat-pla-${suffix}-*`,
+            timeFieldName: "@timestamp",
+            allowNoIndex: true,
+        },
+    ];
+}
+export function createDefaultKibanaRoleConfig(realm) {
+    const suffix = realm.toLowerCase();
+    return {
+        name: `pla_${suffix}_reader`,
+        indices: [
+            {
+                names: [`filebeat-pla-${suffix}-*`, `metricbeat-pla-${suffix}-*`],
+                privileges: ["read", "view_index_metadata"],
+                allow_restricted_indices: false,
+            },
+        ],
+        applications: [
+            {
+                application: "kibana-.kibana",
+                privileges: ["feature_discover.read", "feature_dashboard.read"],
+                resources: [`space:${realm}`],
+            },
+        ],
+        kibana: [
+            {
+                spaces: [realm],
+                base: ["read"],
+            },
+        ],
+        metadata: {},
+    };
+}
+//# sourceMappingURL=helpers.js.map

package/lib/esm/kibana/helpers.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"helpers.js","sourceRoot":"","sources":["../../../src/kibana/helpers.ts"],"names":[],"mappings":"AAWA,MAAM,UAAU,8BAA8B,CAAC,KAAa;IAC1D,OAAO;QACL,EAAE,EAAE,KAAK,CAAC,WAAW,EAAE;QACvB,IAAI,EAAE,KAAK,CAAC,WAAW,EAAE;QACzB,WAAW,EAAE,oBAAoB,KAAK,CAAC,WAAW,EAAE,sBAAsB;QAC1E,QAAQ,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE;QACzC,gBAAgB,EAAE,EAAE;KACrB,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,kCAAkC,CAAC,KAAa;IAC9D,MAAM,MAAM,GAAG,KAAK,CAAC,WAAW,EAAE,CAAC;IACnC,OAAO;QACL;YACE,EAAE,EAAE,gBAAgB,MAAM,EAAE;YAC5B,IAAI,EAAE,sBAAsB,KAAK,GAAG;YACpC,KAAK,EAAE,gBAAgB,MAAM,IAAI;YACjC,aAAa,EAAE,YAAY;YAC3B,YAAY,EAAE,IAAI;SACnB;QACD;YACE,EAAE,EAAE,YAAY,MAAM,EAAE;YACxB,IAAI,EAAE,wBAAwB,KAAK,GAAG;YACtC,KAAK,EAAE,kBAAkB,MAAM,IAAI;YACnC,aAAa,EAAE,YAAY;YAC3B,YAAY,EAAE,IAAI;SACnB;KACF,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,6BAA6B,CAAC,KAAa;IACzD,MAAM,MAAM,GAAG,KAAK,CAAC,WAAW,EAAE,CAAC;IACnC,OAAO;QACL,IAAI,EAAE,OAAO,MAAM,SAAS;QAC5B,OAAO,EAAE;YACP;gBACE,KAAK,EAAE,CAAC,gBAAgB,MAAM,IAAI,EAAE,kBAAkB,MAAM,IAAI,CAAC;gBACjE,UAAU,EAAE,CAAC,MAAM,EAAE,qBAAqB,CAAC;gBAC3C,wBAAwB,EAAE,KAAK;aAChC;SACF;QACD,YAAY,EAAE;YACZ;gBACE,WAAW,EAAE,gBAAgB;gBAC7B,UAAU,EAAE,CAAC,uBAAuB,EAAE,wBAAwB,CAAC;gBAC/D,SAAS,EAAE,CAAC,SAAS,KAAK,EAAE,CAAC;aAC9B;SACF;QACD,MAAM,EAAE;YACN;gBACE,MAAM,EAAE,CAAC,KAAK,CAAC;gBACf,IAAI,EAAE,CAAC,MAAM,CAAC;aACf;SACF;QACD,QAAQ,EAAE,EAAE;KACb,CAAC;AACJ,CAAC"}

package/lib/esm/kibana/index.js

@@ -0,0 +1,10 @@
+export * from "./types.js";
+export * from "./helpers.js";
+export * from "./services/index.js";
+/**
+ * @summary Kibana integrations.
+ * @description Helpers for provisioning Kibana spaces, data views, and dashboards.
+ * @namespace kibana
+ * @memberOf module:integrations
+ */
+//# sourceMappingURL=index.js.map

package/lib/esm/kibana/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/kibana/index.ts"],"names":[],"mappings":"AAAA,2BAAwB;AACxB,6BAA0B;AAC1B,oCAA2B;AAE3B;;;;;GAKG"}

package/lib/esm/kibana/services/KibanaAuthService.js

@@ -0,0 +1,107 @@
+import { BadRequestError, ConflictError, InternalError, NotFoundError, } from "@decaf-ts/db-decorators";
+import { ClientBasedService } from "@decaf-ts/core";
+import Axios from "axios";
+import * as https from "node:https";
+export class KibanaAuthService extends ClientBasedService {
+    async initialize(...args) {
+        const { ctxArgs } = (await this.logCtx(args, "initialize", true)).for(this.initialize);
+        const config = ctxArgs[0];
+        this._config = config;
+        const client = this.createHttpClient(config);
+        this._client = client;
+        return { config, client };
+    }
+    async loginToKibana(username, password, ...args) {
+        const { ctxArgs } = (await this.logCtx(args, "loginToKibana", true)).for(this.loginToKibana);
+        const config = this.config;
+        const credentials = {
+            username: username ?? config.adminApiUser?.username,
+            password: password ?? config.adminApiUser?.password,
+        };
+        if (!credentials.username || !credentials.password) {
+            throw new BadRequestError("Kibana login requires credentials");
+        }
+        const response = await this.request("POST", `${config.protocol}://${config.host}/internal/security/login`, {
+            providerType: "basic",
+            providerName: "basic",
+            currentURL: "/login",
+        }, undefined, {
+            auth: credentials,
+            headers: {
+                "kbn-xsrf": "true",
+                "content-type": "application/json",
+            },
+            withCredentials: true,
+            httpsAgent: new https.Agent({
+                rejectUnauthorized: this.isSecureEnvironment(),
+            }),
+        }, 200, ...ctxArgs);
+        if (response.status >= 300) {
+            const message = `Kibana login failed: ${response.statusText}`;
+            throw new BadRequestError(message);
+        }
+        const setCookie = response.headers["set-cookie"];
+        if (!setCookie?.length)
+            return undefined;
+        return setCookie;
+    }
+    async logout(user, ...args) {
+        const { ctxArgs } = (await this.logCtx(args, "logout", true)).for(this.logout);
+        await this.request("POST", `${this.config.protocol}://${this.config.host}/logout`, undefined, user, {
+            headers: { "kbn-xsrf": "true" },
+        }, 200, ...ctxArgs);
+    }
+    parseError(error) {
+        const message = error.message || error.name || "Unknown error";
+        const lowerMessage = message.toLowerCase();
+        if (lowerMessage.includes("not found") || lowerMessage.includes("404")) {
+            return new NotFoundError(message);
+        }
+        if (lowerMessage.includes("already exists") || lowerMessage.includes("conflict") || lowerMessage.includes("409")) {
+            return new ConflictError(message);
+        }
+        if (lowerMessage.includes("invalid") || lowerMessage.includes("bad request") || lowerMessage.includes("400")) {
+            return new BadRequestError(message);
+        }
+        if (lowerMessage.includes("unauthorized") || lowerMessage.includes("401")) {
+            return new NotFoundError(message);
+        }
+        if (lowerMessage.includes("forbidden") || lowerMessage.includes("403")) {
+            return new NotFoundError(message);
+        }
+        return new InternalError(message);
+    }
+    createHttpClient(config) {
+        return Axios.create({
+            baseURL: `${config.protocol}://${config.host}`,
+            validateStatus: () => true,
+            httpsAgent: new https.Agent({
+                rejectUnauthorized: this.isSecureEnvironment(),
+            }),
+        });
+    }
+    isSecureEnvironment() {
+        return (!this.config.id || !["development", "local"].includes(this.config.id));
+    }
+    async request(method, url, payload, apiUser, extra, successCode, ...args) {
+        this.logCtx(args, this.request);
+        return this.client.request({
+            method,
+            url,
+            data: payload === undefined
+                ? undefined
+                : typeof payload === "string"
+                    ? payload
+                    : JSON.stringify(payload),
+            auth: apiUser
+                ? { username: apiUser.username, password: apiUser.password }
+                : undefined,
+            validateStatus: () => true,
+            httpsAgent: new https.Agent({
+                rejectUnauthorized: this.isSecureEnvironment(),
+            }),
+            ...extra,
+        });
+    }
+}
+//# sourceMappingURL=KibanaAuthService.js.map

package/lib/esm/kibana/services/KibanaAuthService.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"KibanaAuthService.js","sourceRoot":"","sources":["../../../../src/kibana/services/KibanaAuthService.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,eAAe,EACf,aAAa,EACb,aAAa,EACb,aAAa,GACd,MAAM,yBAAyB,CAAC;AAEjC,OAAO,EAAE,kBAAkB,EAAE,MAAM,gBAAgB,CAAC;AAEpD,OAAO,KAAwB,MAAM,OAAO,CAAC;AAC7C,OAAO,KAAK,KAAK,MAAM,YAAY,CAAC;AAEpC,MAAM,OAAO,iBAAkB,SAAQ,kBAGtC;IACC,KAAK,CAAC,UAAU,CACd,GAAG,IAA6B;QAEhC,MAAM,EAAE,OAAO,EAAE,GAAG,CAClB,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,YAAY,EAAE,IAAI,CAAC,CAC5C,CAAC,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QACvB,MAAM,MAAM,GAAG,OAAO,CAAC,CAAC,CAAsB,CAAC;QAC/C,IAAI,CAAC,OAAO,GAAG,MAAM,CAAC;QACtB,MAAM,MAAM,GAAG,IAAI,CAAC,gBAAgB,CAAC,MAAM,CAAC,CAAC;QAC7C,IAAI,CAAC,OAAO,GAAG,MAAM,CAAC;QACtB,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;IAC5B,CAAC;IAED,KAAK,CAAC,aAAa,CACjB,QAA4B,EAC5B,QAA4B,EAC5B,GAAG,IAA6B;QAEhC,MAAM,EAAE,OAAO,EAAE,GAAG,CAClB,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,eAAe,EAAE,IAAI,CAAC,CAC/C,CAAC,GAAG,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;QAC1B,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC;QAC3B,MAAM,WAAW,GAAG;YAClB,QAAQ,EAAE,QAAQ,IAAI,MAAM,CAAC,YAAY,EAAE,QAAQ;YACnD,QAAQ,EAAE,QAAQ,IAAI,MAAM,CAAC,YAAY,EAAE,QAAQ;SACpD,CAAC;QACF,IAAI,CAAC,WAAW,CAAC,QAAQ,IAAI,CAAC,WAAW,CAAC,QAAQ,EAAE,CAAC;YACnD,MAAM,IAAI,eAAe,CAAC,mCAAmC,CAAC,CAAC;QACjE,CAAC;QAED,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,OAAO,CACjC,MAAM,EACN,GAAG,MAAM,CAAC,QAAQ,MAAM,MAAM,CAAC,IAAI,0BAA0B,EAC7D;YACE,YAAY,EAAE,OAAO;YACrB,YAAY,EAAE,OAAO;YACrB,UAAU,EAAE,QAAQ;SACrB,EACD,SAAS,EACT;YACE,IAAI,EAAE,WAAW;YACjB,OAAO,EAAE;gBACP,UAAU,EAAE,MAAM;gBAClB,cAAc,EAAE,kBAAkB;aACnC;YACD,eAAe,EAAE,IAAI;YACrB,UAAU,EAAE,IAAI,KAAK,CAAC,KAAK,CAAC;gBAC1B,kBAAkB,EAAE,IAAI,CAAC,mBAAmB,EAAE;aAC/C,CAAC;SACH,EACD,GAAG,EACH,GAAG,OAAO,CACX,CAAC;QAEF,IAAI,QAAQ,CAAC,MAAM,IAAI,GAAG,EAAE,CAAC;YAC3B,MAAM,OAAO,GAAG,wBAAwB,QAAQ,CAAC,UAAU,EAAE,CAAC;YAC9D,MAAM,IAAI,eAAe,CAAC,OAAO,CAAC,CAAC;QACrC,CAAC;QAED,MAAM,SAAS,GAAG,QAAQ,CAAC,OAAO,CAAC,YAAY,CAAyB,CAAC;QACzE,IAAI,CAAC,SAAS,EAAE,MAAM;YAAE,OAAO,SAAS,CAAC;QACzC,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,KAAK,CAAC,MAAM,CACV,IAAgB,EAChB,GAAG,IAA6B;QAEhC,MAAM,EAAE,OAAO,EAAE,GAAG,CAClB,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,QAAQ,EAAE,IAAI,CAAC,CACxC,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACnB,MAAM,IAAI,CAAC,OAAO,CAChB,MAAM,EACN,GAAG,IAAI,CAAC,MAAM,CAAC,QAAQ,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,SAAS,EACtD,SAAS,EACT,IAAI,EACJ;YACE,OAAO,EAAE,EAAE,UAAU,EAAE,MAAM,EAAE;SAChC,EACD,GAAG,EACH,GAAG,OAAO,CACX,CAAC;IACJ,CAAC;IAES,UAAU,CAAC,KAAY;QAC/B,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,IAAI,KAAK,CAAC,IAAI,IAAI,eAAe,CAAC;QAC/D,MAAM,YAAY,GAAG,OAAO,CAAC,WAAW,EAAE,CAAC;QAE3C,IAAI,YAAY,CAAC,QAAQ,CAAC,WAAW,CAAC,IAAI,YAAY,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;YACvE,OAAO,IAAI,aAAa,CAAC,OAAO,CAAC,CAAC;QACpC,CAAC;QAED,IAAI,YAAY,CAAC,QAAQ,CAAC,gBAAgB,CAAC,IAAI,YAAY,CAAC,QAAQ,CAAC,UAAU,CAAC,IAAI,YAAY,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;YACjH,OAAO,IAAI,aAAa,CAAC,OAAO,CAAC,CAAC;QACpC,CAAC;QAED,IAAI,YAAY,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,YAAY,CAAC,QAAQ,CAAC,aAAa,CAAC,IAAI,YAAY,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;YAC7G,OAAO,IAAI,eAAe,CAAC,OAAO,CAAC,CAAC;QACtC,CAAC;QAED,IAAI,YAAY,CAAC,QAAQ,CAAC,cAAc,CAAC,IAAI,YAAY,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;YAC1E,OAAO,IAAI,aAAa,CAAC,OAAO,CAAC,CAAC;QACpC,CAAC;QAED,IAAI,YAAY,CAAC,QAAQ,CAAC,WAAW,CAAC,IAAI,YAAY,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;YACvE,OAAO,IAAI,aAAa,CAAC,OAAO,CAAC,CAAC;QACpC,CAAC;QAED,OAAO,IAAI,aAAa,CAAC,OAAO,CAAC,CAAC;IACpC,CAAC;IAEO,gBAAgB,CAAC,MAAyB;QAChD,OAAO,KAAK,CAAC,MAAM,CAAC;YAClB,OAAO,EAAE,GAAG,MAAM,CAAC,QAAQ,MAAM,MAAM,CAAC,IAAI,EAAE;YAC9C,cAAc,EAAE,GAAG,EAAE,CAAC,IAAI;YAC1B,UAAU,EAAE,IAAI,KAAK,CAAC,KAAK,CAAC;gBAC1B,kBAAkB,EAAE,IAAI,CAAC,mBAAmB,EAAE;aAC/C,CAAC;SACH,CAAC,CAAC;IACL,CAAC;IAEO,mBAAmB;QACzB,OAAO,CACL,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,IAAI,CAAC,CAAC,aAAa,EAAE,OAAO,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,CACtE,CAAC;IACJ,CAAC;IAEO,KAAK,CAAC,OAAO,CACnB,MAAyC,EACzC,GAAW,EACX,OAAgB,EAChB,OAA+B,EAC/B,KAA0B,EAC1B,WAAmB,EACnB,GAAG,IAAyB;QAE5B,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;QAChC,OAAO,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC;YACzB,MAAM;YACN,GAAG;YACH,IAAI,EACF,OAAO,KAAK,SAAS;gBACnB,CAAC,CAAC,SAAS;gBACX,CAAC,CAAC,OAAO,OAAO,KAAK,QAAQ;oBAC3B,CAAC,CAAC,OAAO;oBACT,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC;YAC/B,IAAI,EAAE,OAAO;gBACX,CAAC,CAAC,EAAE,QAAQ,EAAE,OAAO,CAAC,QAAQ,EAAE,QAAQ,EAAE,OAAO,CAAC,QAAQ,EAAE;gBAC5D,CAAC,CAAC,SAAS;YACb,cAAc,EAAE,GAAG,EAAE,CAAC,IAAI;YAC1B,UAAU,EAAE,IAAI,KAAK,CAAC,KAAK,CAAC;gBAC1B,kBAAkB,EAAE,IAAI,CAAC,mBAAmB,EAAE;aAC/C,CAAC;YACF,GAAG,KAAK;SACT,CAAC,CAAC;IACL,CAAC;CACF"}