@decaf-ts/integrations 0.1.1

package/lib/cjs/keycloak/services/KeycloakClientService.cjs

@@ -0,0 +1,245 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.KeycloakClientService = void 0;
+const db_decorators_1 = require("@decaf-ts/db-decorators");
+const core_1 = require("@decaf-ts/core");
+const axios_1 = __importDefault(require("axios"));
+const https = __importStar(require("node:https"));
+class KeycloakClientService extends core_1.ClientBasedService {
+    async initialize(...args) {
+        const { ctxArgs } = (await this.logCtx(args, "initialize", true)).for(this.initialize);
+        const config = ctxArgs[0];
+        this._config = config;
+        const client = this.createHttpClient(config);
+        this._client = client;
+        return { config, client };
+    }
+    async createClient(keycloakSetupConfig, overrides, ...args) {
+        const { ctxArgs } = (await this.logCtx(args, "createClient", true)).for(this.createClient);
+        const realmAccessToken = await this.getRealmAccessToken(keycloakSetupConfig, ...ctxArgs);
+        const client = this.normalizeClientConfig(keycloakSetupConfig.client, overrides ?? {});
+        const response = await this.request("POST", `/admin/realms/${keycloakSetupConfig.realmApiUser?.realm}/clients`, realmAccessToken, this.buildClientPayload(client), 201, {}, ...ctxArgs);
+        return this.extractUUIDfromResponse(response);
+    }
+    async updateClient(keycloakSetupConfig, overrides, ...args) {
+        const { ctxArgs } = (await this.logCtx(args, "updateClient", true)).for(this.updateClient);
+        const realmAccessToken = await this.getRealmAccessToken(keycloakSetupConfig, ...ctxArgs);
+        const client = this.normalizeClientConfig(keycloakSetupConfig.client, overrides ?? {});
+        const clientUUID = client.clientUUID ??
+            (await this.getClientUUID(realmAccessToken, keycloakSetupConfig.realmApiUser.realm, client.clientId, ...ctxArgs));
+        await this.request("PUT", `/admin/realms/${keycloakSetupConfig.realmApiUser?.realm}/clients/${encodeURIComponent(clientUUID)}`, realmAccessToken, this.buildClientPayload(client), 204, {}, ...ctxArgs);
+    }
+    async getClientUUID(accessToken, realmName, clientId, ...args) {
+        const { ctxArgs } = (await this.logCtx(args, "getClientUUID", true)).for(this.getClientUUID);
+        const response = await this.request("GET", `/admin/realms/${realmName}/clients?clientId=${encodeURIComponent(clientId)}`, accessToken, undefined, 200, {}, ...ctxArgs);
+        const data = this.parseJsonResponse(response.data);
+        const clientUUID = data?.[0]?.id;
+        if (clientUUID)
+            return clientUUID;
+        throw new db_decorators_1.NotFoundError(`Unable to get Keycloak Client UUID: ${clientId}`);
+    }
+    async createClientRoles(keycloakSetupConfig, roleConfigs, ...args) {
+        const { ctxArgs } = (await this.logCtx(args, "createClientRoles", true)).for(this.createClientRoles);
+        const roles = roleConfigs ?? keycloakSetupConfig.client.roles ?? [];
+        const realmAccessToken = await this.getRealmAccessToken(keycloakSetupConfig, ...ctxArgs);
+        for (const role of roles) {
+            await this.request("POST", `/admin/realms/${keycloakSetupConfig.realmApiUser?.realm}/clients/${keycloakSetupConfig.client.clientUUID}/roles`, realmAccessToken, {
+                name: role.roleName,
+                description: role.description ?? `Auto-created role ${role.roleName}`,
+                composite: false,
+                clientRole: true,
+            }, 201, {}, ...ctxArgs);
+        }
+    }
+    createHttpClient(config) {
+        return axios_1.default.create({
+            baseURL: `${config.protocol}://${config.host}`,
+            headers: { "Content-Type": "application/json" },
+            validateStatus: () => true,
+            httpsAgent: new https.Agent({
+                rejectUnauthorized: this.isProduction(config),
+            }),
+        });
+    }
+    isProduction(config) {
+        return config.id === "production" || config.host.includes("prod");
+    }
+    async getRealmAccessToken(keycloakSetupConfig, ...args) {
+        const { ctxArgs } = this.logCtx(args, this.getRealmAccessToken);
+        return this.getAccessToken(keycloakSetupConfig.realmApiUser, ...ctxArgs);
+    }
+    async getAccessToken(keycloakUser, ...args) {
+        const { ctxArgs } = this.logCtx(args, this.getAccessToken);
+        const response = await this.request("POST", `/realms/${keycloakUser.realm}/protocol/openid-connect/token`, undefined, new URLSearchParams({
+            client_id: keycloakUser.apiClientId,
+            username: keycloakUser.username,
+            password: keycloakUser.password,
+            grant_type: "password",
+        }).toString(), 200, { "content-type": "application/x-www-form-urlencoded" }, ...ctxArgs);
+        const data = this.parseJsonResponse(response.data);
+        if (data?.access_token)
+            return data.access_token;
+        throw new db_decorators_1.BadRequestError(`Unable to get Keycloak access token for user ${keycloakUser.username}`);
+    }
+    normalizeClientConfig(base, overrides) {
+        return {
+            ...base,
+            ...overrides,
+            redirectUris: overrides.redirectUris ?? base.redirectUris,
+            webOrigins: overrides.webOrigins ?? base.webOrigins,
+            roles: overrides.roles ?? base.roles,
+        };
+    }
+    buildClientPayload(client) {
+        return {
+            clientId: client.clientId,
+            name: client.clientName,
+            description: client.description,
+            rootUrl: client.rootUrl,
+            adminUrl: client.adminUrl,
+            baseUrl: client.baseUrl,
+            surrogateAuthRequired: client.surrogateAuthRequired ?? false,
+            enabled: client.enabled ?? true,
+            alwaysDisplayInConsole: client.alwaysDisplayInConsole ?? false,
+            clientAuthenticatorType: "client-secret",
+            secret: client.secret,
+            redirectUris: client.redirectUris,
+            webOrigins: client.webOrigins,
+            notBefore: client.notBefore ?? 0,
+            bearerOnly: client.bearerOnly ?? false,
+            consentRequired: client.consentRequired ?? false,
+            standardFlowEnabled: client.standardFlowEnabled ?? true,
+            implicitFlowEnabled: client.implicitFlowEnabled ?? false,
+            directAccessGrantsEnabled: client.directAccessGrantsEnabled ?? true,
+            serviceAccountsEnabled: client.serviceAccountsEnabled ?? true,
+            authorizationServicesEnabled: client.authorizationServicesEnabled ?? true,
+            publicClient: client.publicClient ?? false,
+            frontchannelLogout: client.frontchannelLogout ?? true,
+            protocol: client.protocol ?? "openid-connect",
+            attributes: client.attributes ?? { "access.token.lifespan": "300" },
+        };
+    }
+    async request(method, path, accessToken, payload, successCode, headers, ...args) {
+        this.logCtx(args, this.request);
+        const response = await this.client.request({
+            method,
+            url: `${this.config.protocol}://${this.config.host}${path}`,
+            data: payload === undefined
+                ? undefined
+                : typeof payload === "string"
+                    ? payload
+                    : JSON.stringify(payload),
+            headers: {
+                ...headers,
+                ...(accessToken ? { Authorization: `Bearer ${accessToken}` } : {}),
+                ...(payload !== undefined && typeof payload !== "string"
+                    ? { "Content-Type": "application/json" }
+                    : {}),
+            },
+            httpsAgent: new https.Agent({
+                rejectUnauthorized: this.isProduction(this.config),
+            }),
+            validateStatus: () => true,
+        });
+        if (response.status !== successCode) {
+            this.handleHttpResponse(response, successCode);
+        }
+        return response;
+    }
+    handleHttpResponse(response, successCode, errorMsg) {
+        const message = errorMsg
+            ? `${errorMsg}: Expected ${successCode}, received ${response.status}: ${response.statusText}.`
+            : `Expected ${successCode}, received ${response.status}: ${response.statusText}`;
+        const status = response.status;
+        if (status === 404 || message.toLowerCase().includes("not found")) {
+            throw new db_decorators_1.NotFoundError(message);
+        }
+        if (status === 409 || message.toLowerCase().includes("conflict")) {
+            throw new db_decorators_1.ConflictError(message);
+        }
+        if (status === 400) {
+            throw new db_decorators_1.BadRequestError(message);
+        }
+        if (status === 401 || status === 403) {
+            throw new db_decorators_1.NotFoundError(message);
+        }
+        throw new db_decorators_1.InternalError(message);
+    }
+    parseError(error) {
+        const message = error.message || error.name || "Unknown error";
+        const lowerMessage = message.toLowerCase();
+        if (lowerMessage.includes("not found") || lowerMessage.includes("404")) {
+            return new db_decorators_1.NotFoundError(message);
+        }
+        if (lowerMessage.includes("already exists") || lowerMessage.includes("conflict") || lowerMessage.includes("409")) {
+            return new db_decorators_1.ConflictError(message);
+        }
+        if (lowerMessage.includes("invalid") || lowerMessage.includes("bad request") || lowerMessage.includes("400")) {
+            return new db_decorators_1.BadRequestError(message);
+        }
+        if (lowerMessage.includes("unauthorized") || lowerMessage.includes("401")) {
+            return new db_decorators_1.NotFoundError(message);
+        }
+        if (lowerMessage.includes("forbidden") || lowerMessage.includes("403")) {
+            return new db_decorators_1.NotFoundError(message);
+        }
+        return new db_decorators_1.InternalError(message);
+    }
+    extractUUIDfromResponse(response) {
+        const location = response.headers.location;
+        if (!location) {
+            throw new db_decorators_1.InternalError("Keycloak response did not include a location header");
+        }
+        return location.split("/").pop() ?? "";
+    }
+    parseJsonResponse(data) {
+        if (typeof data === "string") {
+            try {
+                return JSON.parse(data);
+            }
+            catch {
+                return undefined;
+            }
+        }
+        return data;
+    }
+}
+exports.KeycloakClientService = KeycloakClientService;
+//# sourceMappingURL=KeycloakClientService.js.map
+//# sourceMappingURL=KeycloakClientService.js.map

package/lib/cjs/keycloak/services/KeycloakClientService.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"KeycloakClientService.js","sourceRoot":"","sources":["KeycloakClientService.js"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,2DAAwG;AACxG,yCAAoD;AACpD,kDAA0B;AAC1B,kDAAoC;AACpC,MAAa,qBAAsB,SAAQ,yBAAkB;IACzD,KAAK,CAAC,UAAU,CAAC,GAAG,IAAI;QACpB,MAAM,EAAE,OAAO,EAAE,GAAG,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,YAAY,EAAE,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QACvF,MAAM,MAAM,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;QAC1B,IAAI,CAAC,OAAO,GAAG,MAAM,CAAC;QACtB,MAAM,MAAM,GAAG,IAAI,CAAC,gBAAgB,CAAC,MAAM,CAAC,CAAC;QAC7C,IAAI,CAAC,OAAO,GAAG,MAAM,CAAC;QACtB,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;IAC9B,CAAC;IACD,KAAK,CAAC,YAAY,CAAC,mBAAmB,EAAE,SAAS,EAAE,GAAG,IAAI;QACtD,MAAM,EAAE,OAAO,EAAE,GAAG,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,cAAc,EAAE,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;QAC3F,MAAM,gBAAgB,GAAG,MAAM,IAAI,CAAC,mBAAmB,CAAC,mBAAmB,EAAE,GAAG,OAAO,CAAC,CAAC;QACzF,MAAM,MAAM,GAAG,IAAI,CAAC,qBAAqB,CAAC,mBAAmB,CAAC,MAAM,EAAE,SAAS,IAAI,EAAE,CAAC,CAAC;QACvF,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,iBAAiB,mBAAmB,CAAC,YAAY,EAAE,KAAK,UAAU,EAAE,gBAAgB,EAAE,IAAI,CAAC,kBAAkB,CAAC,MAAM,CAAC,EAAE,GAAG,EAAE,EAAE,EAAE,GAAG,OAAO,CAAC,CAAC;QACxL,OAAO,IAAI,CAAC,uBAAuB,CAAC,QAAQ,CAAC,CAAC;IAClD,CAAC;IACD,KAAK,CAAC,YAAY,CAAC,mBAAmB,EAAE,SAAS,EAAE,GAAG,IAAI;QACtD,MAAM,EAAE,OAAO,EAAE,GAAG,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,cAAc,EAAE,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;QAC3F,MAAM,gBAAgB,GAAG,MAAM,IAAI,CAAC,mBAAmB,CAAC,mBAAmB,EAAE,GAAG,OAAO,CAAC,CAAC;QACzF,MAAM,MAAM,GAAG,IAAI,CAAC,qBAAqB,CAAC,mBAAmB,CAAC,MAAM,EAAE,SAAS,IAAI,EAAE,CAAC,CAAC;QACvF,MAAM,UAAU,GAAG,MAAM,CAAC,UAAU;YAChC,CAAC,MAAM,IAAI,CAAC,aAAa,CAAC,gBAAgB,EAAE,mBAAmB,CAAC,YAAY,CAAC,KAAK,EAAE,MAAM,CAAC,QAAQ,EAAE,GAAG,OAAO,CAAC,CAAC,CAAC;QACtH,MAAM,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,iBAAiB,mBAAmB,CAAC,YAAY,EAAE,KAAK,YAAY,kBAAkB,CAAC,UAAU,CAAC,EAAE,EAAE,gBAAgB,EAAE,IAAI,CAAC,kBAAkB,CAAC,MAAM,CAAC,EAAE,GAAG,EAAE,EAAE,EAAE,GAAG,OAAO,CAAC,CAAC;IAC5M,CAAC;IACD,KAAK,CAAC,aAAa,CAAC,WAAW,EAAE,SAAS,EAAE,QAAQ,EAAE,GAAG,IAAI;QACzD,MAAM,EAAE,OAAO,EAAE,GAAG,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,eAAe,EAAE,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;QAC7F,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,iBAAiB,SAAS,qBAAqB,kBAAkB,CAAC,QAAQ,CAAC,EAAE,EAAE,WAAW,EAAE,SAAS,EAAE,GAAG,EAAE,EAAE,EAAE,GAAG,OAAO,CAAC,CAAC;QACvK,MAAM,IAAI,GAAG,IAAI,CAAC,iBAAiB,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;QACnD,MAAM,UAAU,GAAG,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;QACjC,IAAI,UAAU;YACV,OAAO,UAAU,CAAC;QACtB,MAAM,IAAI,6BAAa,CAAC,uCAAuC,QAAQ,EAAE,CAAC,CAAC;IAC/E,CAAC;IACD,KAAK,CAAC,iBAAiB,CAAC,mBAAmB,EAAE,WAAW,EAAE,GAAG,IAAI;QAC7D,MAAM,EAAE,OAAO,EAAE,GAAG,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,mBAAmB,EAAE,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC;QACrG,MAAM,KAAK,GAAG,WAAW,IAAI,mBAAmB,CAAC,MAAM,CAAC,KAAK,IAAI,EAAE,CAAC;QACpE,MAAM,gBAAgB,GAAG,MAAM,IAAI,CAAC,mBAAmB,CAAC,mBAAmB,EAAE,GAAG,OAAO,CAAC,CAAC;QACzF,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACvB,MAAM,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,iBAAiB,mBAAmB,CAAC,YAAY,EAAE,KAAK,YAAY,mBAAmB,CAAC,MAAM,CAAC,UAAU,QAAQ,EAAE,gBAAgB,EAAE;gBAC5J,IAAI,EAAE,IAAI,CAAC,QAAQ;gBACnB,WAAW,EAAE,IAAI,CAAC,WAAW,IAAI,qBAAqB,IAAI,CAAC,QAAQ,EAAE;gBACrE,SAAS,EAAE,KAAK;gBAChB,UAAU,EAAE,IAAI;aACnB,EAAE,GAAG,EAAE,EAAE,EAAE,GAAG,OAAO,CAAC,CAAC;QAC5B,CAAC;IACL,CAAC;IACD,gBAAgB,CAAC,MAAM;QACnB,OAAO,eAAK,CAAC,MAAM,CAAC;YAChB,OAAO,EAAE,GAAG,MAAM,CAAC,QAAQ,MAAM,MAAM,CAAC,IAAI,EAAE;YAC9C,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;YAC/C,cAAc,EAAE,GAAG,EAAE,CAAC,IAAI;YAC1B,UAAU,EAAE,IAAI,KAAK,CAAC,KAAK,CAAC;gBACxB,kBAAkB,EAAE,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC;aAChD,CAAC;SACL,CAAC,CAAC;IACP,CAAC;IACD,YAAY,CAAC,MAAM;QACf,OAAO,MAAM,CAAC,EAAE,KAAK,YAAY,IAAI,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IACtE,CAAC;IACD,KAAK,CAAC,mBAAmB,CAAC,mBAAmB,EAAE,GAAG,IAAI;QAClD,MAAM,EAAE,OAAO,EAAE,GAAG,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,mBAAmB,CAAC,CAAC;QAChE,OAAO,IAAI,CAAC,cAAc,CAAC,mBAAmB,CAAC,YAAY,EAAE,GAAG,OAAO,CAAC,CAAC;IAC7E,CAAC;IACD,KAAK,CAAC,cAAc,CAAC,YAAY,EAAE,GAAG,IAAI;QACtC,MAAM,EAAE,OAAO,EAAE,GAAG,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,cAAc,CAAC,CAAC;QAC3D,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,WAAW,YAAY,CAAC,KAAK,gCAAgC,EAAE,SAAS,EAAE,IAAI,eAAe,CAAC;YACtI,SAAS,EAAE,YAAY,CAAC,WAAW;YACnC,QAAQ,EAAE,YAAY,CAAC,QAAQ;YAC/B,QAAQ,EAAE,YAAY,CAAC,QAAQ;YAC/B,UAAU,EAAE,UAAU;SACzB,CAAC,CAAC,QAAQ,EAAE,EAAE,GAAG,EAAE,EAAE,cAAc,EAAE,mCAAmC,EAAE,EAAE,GAAG,OAAO,CAAC,CAAC;QACzF,MAAM,IAAI,GAAG,IAAI,CAAC,iBAAiB,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;QACnD,IAAI,IAAI,EAAE,YAAY;YAClB,OAAO,IAAI,CAAC,YAAY,CAAC;QAC7B,MAAM,IAAI,+BAAe,CAAC,gDAAgD,YAAY,CAAC,QAAQ,EAAE,CAAC,CAAC;IACvG,CAAC;IACD,qBAAqB,CAAC,IAAI,EAAE,SAAS;QACjC,OAAO;YACH,GAAG,IAAI;YACP,GAAG,SAAS;YACZ,YAAY,EAAE,SAAS,CAAC,YAAY,IAAI,IAAI,CAAC,YAAY;YACzD,UAAU,EAAE,SAAS,CAAC,UAAU,IAAI,IAAI,CAAC,UAAU;YACnD,KAAK,EAAE,SAAS,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK;SACvC,CAAC;IACN,CAAC;IACD,kBAAkB,CAAC,MAAM;QACrB,OAAO;YACH,QAAQ,EAAE,MAAM,CAAC,QAAQ;YACzB,IAAI,EAAE,MAAM,CAAC,UAAU;YACvB,WAAW,EAAE,MAAM,CAAC,WAAW;YAC/B,OAAO,EAAE,MAAM,CAAC,OAAO;YACvB,QAAQ,EAAE,MAAM,CAAC,QAAQ;YACzB,OAAO,EAAE,MAAM,CAAC,OAAO;YACvB,qBAAqB,EAAE,MAAM,CAAC,qBAAqB,IAAI,KAAK;YAC5D,OAAO,EAAE,MAAM,CAAC,OAAO,IAAI,IAAI;YAC/B,sBAAsB,EAAE,MAAM,CAAC,sBAAsB,IAAI,KAAK;YAC9D,uBAAuB,EAAE,eAAe;YACxC,MAAM,EAAE,MAAM,CAAC,MAAM;YACrB,YAAY,EAAE,MAAM,CAAC,YAAY;YACjC,UAAU,EAAE,MAAM,CAAC,UAAU;YAC7B,SAAS,EAAE,MAAM,CAAC,SAAS,IAAI,CAAC;YAChC,UAAU,EAAE,MAAM,CAAC,UAAU,IAAI,KAAK;YACtC,eAAe,EAAE,MAAM,CAAC,eAAe,IAAI,KAAK;YAChD,mBAAmB,EAAE,MAAM,CAAC,mBAAmB,IAAI,IAAI;YACvD,mBAAmB,EAAE,MAAM,CAAC,mBAAmB,IAAI,KAAK;YACxD,yBAAyB,EAAE,MAAM,CAAC,yBAAyB,IAAI,IAAI;YACnE,sBAAsB,EAAE,MAAM,CAAC,sBAAsB,IAAI,IAAI;YAC7D,4BAA4B,EAAE,MAAM,CAAC,4BAA4B,IAAI,IAAI;YACzE,YAAY,EAAE,MAAM,CAAC,YAAY,IAAI,KAAK;YAC1C,kBAAkB,EAAE,MAAM,CAAC,kBAAkB,IAAI,IAAI;YACrD,QAAQ,EAAE,MAAM,CAAC,QAAQ,IAAI,gBAAgB;YAC7C,UAAU,EAAE,MAAM,CAAC,UAAU,IAAI,EAAE,uBAAuB,EAAE,KAAK,EAAE;SACtE,CAAC;IACN,CAAC;IACD,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,IAAI,EAAE,WAAW,EAAE,OAAO,EAAE,WAAW,EAAE,OAAO,EAAE,GAAG,IAAI;QAC3E,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;QAChC,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC;YACvC,MAAM;YACN,GAAG,EAAE,GAAG,IAAI,CAAC,MAAM,CAAC,QAAQ,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,GAAG,IAAI,EAAE;YAC3D,IAAI,EAAE,OAAO,KAAK,SAAS;gBACvB,CAAC,CAAC,SAAS;gBACX,CAAC,CAAC,OAAO,OAAO,KAAK,QAAQ;oBACzB,CAAC,CAAC,OAAO;oBACT,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC;YACjC,OAAO,EAAE;gBACL,GAAG,OAAO;gBACV,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,UAAU,WAAW,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBAClE,GAAG,CAAC,OAAO,KAAK,SAAS,IAAI,OAAO,OAAO,KAAK,QAAQ;oBACpD,CAAC,CAAC,EAAE,cAAc,EAAE,kBAAkB,EAAE;oBACxC,CAAC,CAAC,EAAE,CAAC;aACZ;YACD,UAAU,EAAE,IAAI,KAAK,CAAC,KAAK,CAAC;gBACxB,kBAAkB,EAAE,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,MAAM,CAAC;aACrD,CAAC;YACF,cAAc,EAAE,GAAG,EAAE,CAAC,IAAI;SAC7B,CAAC,CAAC;QACH,IAAI,QAAQ,CAAC,MAAM,KAAK,WAAW,EAAE,CAAC;YAClC,IAAI,CAAC,kBAAkB,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAC;QACnD,CAAC;QACD,OAAO,QAAQ,CAAC;IACpB,CAAC;IACD,kBAAkB,CAAC,QAAQ,EAAE,WAAW,EAAE,QAAQ;QAC9C,MAAM,OAAO,GAAG,QAAQ;YACpB,CAAC,CAAC,GAAG,QAAQ,cAAc,WAAW,cAAc,QAAQ,CAAC,MAAM,KAAK,QAAQ,CAAC,UAAU,GAAG;YAC9F,CAAC,CAAC,YAAY,WAAW,cAAc,QAAQ,CAAC,MAAM,KAAK,QAAQ,CAAC,UAAU,EAAE,CAAC;QACrF,MAAM,MAAM,GAAG,QAAQ,CAAC,MAAM,CAAC;QAC/B,IAAI,MAAM,KAAK,GAAG,IAAI,OAAO,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC;YAChE,MAAM,IAAI,6BAAa,CAAC,OAAO,CAAC,CAAC;QACrC,CAAC;QACD,IAAI,MAAM,KAAK,GAAG,IAAI,OAAO,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC;YAC/D,MAAM,IAAI,6BAAa,CAAC,OAAO,CAAC,CAAC;QACrC,CAAC;QACD,IAAI,MAAM,KAAK,GAAG,EAAE,CAAC;YACjB,MAAM,IAAI,+BAAe,CAAC,OAAO,CAAC,CAAC;QACvC,CAAC;QACD,IAAI,MAAM,KAAK,GAAG,IAAI,MAAM,KAAK,GAAG,EAAE,CAAC;YACnC,MAAM,IAAI,6BAAa,CAAC,OAAO,CAAC,CAAC;QACrC,CAAC;QACD,MAAM,IAAI,6BAAa,CAAC,OAAO,CAAC,CAAC;IACrC,CAAC;IACD,UAAU,CAAC,KAAK;QACZ,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,IAAI,KAAK,CAAC,IAAI,IAAI,eAAe,CAAC;QAC/D,MAAM,YAAY,GAAG,OAAO,CAAC,WAAW,EAAE,CAAC;QAC3C,IAAI,YAAY,CAAC,QAAQ,CAAC,WAAW,CAAC,IAAI,YAAY,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;YACrE,OAAO,IAAI,6BAAa,CAAC,OAAO,CAAC,CAAC;QACtC,CAAC;QACD,IAAI,YAAY,CAAC,QAAQ,CAAC,gBAAgB,CAAC,IAAI,YAAY,CAAC,QAAQ,CAAC,UAAU,CAAC,IAAI,YAAY,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;YAC/G,OAAO,IAAI,6BAAa,CAAC,OAAO,CAAC,CAAC;QACtC,CAAC;QACD,IAAI,YAAY,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,YAAY,CAAC,QAAQ,CAAC,aAAa,CAAC,IAAI,YAAY,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;YAC3G,OAAO,IAAI,+BAAe,CAAC,OAAO,CAAC,CAAC;QACxC,CAAC;QACD,IAAI,YAAY,CAAC,QAAQ,CAAC,cAAc,CAAC,IAAI,YAAY,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;YACxE,OAAO,IAAI,6BAAa,CAAC,OAAO,CAAC,CAAC;QACtC,CAAC;QACD,IAAI,YAAY,CAAC,QAAQ,CAAC,WAAW,CAAC,IAAI,YAAY,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;YACrE,OAAO,IAAI,6BAAa,CAAC,OAAO,CAAC,CAAC;QACtC,CAAC;QACD,OAAO,IAAI,6BAAa,CAAC,OAAO,CAAC,CAAC;IACtC,CAAC;IACD,uBAAuB,CAAC,QAAQ;QAC5B,MAAM,QAAQ,GAAG,QAAQ,CAAC,OAAO,CAAC,QAAQ,CAAC;QAC3C,IAAI,CAAC,QAAQ,EAAE,CAAC;YACZ,MAAM,IAAI,6BAAa,CAAC,qDAAqD,CAAC,CAAC;QACnF,CAAC;QACD,OAAO,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,IAAI,EAAE,CAAC;IAC3C,CAAC;IACD,iBAAiB,CAAC,IAAI;QAClB,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;YAC3B,IAAI,CAAC;gBACD,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YAC5B,CAAC;YACD,MAAM,CAAC;gBACH,OAAO,SAAS,CAAC;YACrB,CAAC;QACL,CAAC;QACD,OAAO,IAAI,CAAC;IAChB,CAAC;CACJ;AAtMD,sDAsMC;AACD,iDAAiD"}

package/lib/cjs/keycloak/services/KeycloakIdentityProviderService.cjs

@@ -0,0 +1,234 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.KeycloakIdentityProviderService = void 0;
+const db_decorators_1 = require("@decaf-ts/db-decorators");
+const core_1 = require("@decaf-ts/core");
+const axios_1 = __importDefault(require("axios"));
+const https = __importStar(require("node:https"));
+class KeycloakIdentityProviderService extends core_1.ClientBasedService {
+    async initialize(...args) {
+        const { ctxArgs } = (await this.logCtx(args, "initialize", true)).for(this.initialize);
+        const config = ctxArgs[0];
+        this._config = config;
+        const client = this.createHttpClient(config);
+        this._client = client;
+        return { config, client };
+    }
+    async createIdentityProvider(keycloakSetupConfig, overrides, ...args) {
+        const { ctxArgs } = (await this.logCtx(args, "createIdentityProvider", true)).for(this.createIdentityProvider);
+        const realmAccessToken = await this.getRealmAccessToken(keycloakSetupConfig, ...ctxArgs);
+        const identityProvider = this.normalizeIdentityProviderConfig(keycloakSetupConfig.identityProvider, overrides ?? {});
+        await this.request("POST", `/admin/realms/${keycloakSetupConfig.realmApiUser?.realm}/identity-provider/instances`, realmAccessToken, this.buildIdentityProviderPayload(identityProvider), 201, {}, ...ctxArgs);
+    }
+    async updateIdentityProvider(keycloakSetupConfig, overrides, ...args) {
+        const { ctxArgs } = (await this.logCtx(args, "updateIdentityProvider", true)).for(this.updateIdentityProvider);
+        const realmAccessToken = await this.getRealmAccessToken(keycloakSetupConfig, ...ctxArgs);
+        const identityProvider = this.normalizeIdentityProviderConfig(keycloakSetupConfig.identityProvider, overrides ?? {});
+        await this.request("PUT", `/admin/realms/${keycloakSetupConfig.realmApiUser?.realm}/identity-provider/instances/${encodeURIComponent(identityProvider.alias)}`, realmAccessToken, this.buildIdentityProviderPayload(identityProvider), 204, {}, ...ctxArgs);
+    }
+    async createIdentityProviderMappers(keycloakSetupConfig, roleConfigs, ...args) {
+        const { ctxArgs } = (await this.logCtx(args, "createIdentityProviderMappers", true)).for(this.createIdentityProviderMappers);
+        const roles = roleConfigs ?? keycloakSetupConfig.client.roles ?? [];
+        const realmAccessToken = await this.getRealmAccessToken(keycloakSetupConfig, ...ctxArgs);
+        const identityProvider = keycloakSetupConfig.identityProvider;
+        for (const role of roles) {
+            await this.request("POST", `/admin/realms/${keycloakSetupConfig.realmApiUser?.realm}/identity-provider/instances/${identityProvider.alias}/mappers`, realmAccessToken, {
+                name: role.roleName,
+                identityProviderAlias: identityProvider.alias,
+                identityProviderMapper: "oidc-role-idp-mapper",
+                config: {
+                    syncMode: identityProvider.mapperSyncMode ?? "FORCE",
+                    claim: identityProvider.mapperClaimName ?? "groups",
+                    "claim.value": role.claimValue,
+                    role: `${keycloakSetupConfig.client.clientId}.${role.roleName}`,
+                },
+            }, 201, {}, ...ctxArgs);
+        }
+    }
+    createHttpClient(config) {
+        return axios_1.default.create({
+            baseURL: `${config.protocol}://${config.host}`,
+            headers: { "Content-Type": "application/json" },
+            validateStatus: () => true,
+            httpsAgent: new https.Agent({
+                rejectUnauthorized: this.isProduction(config),
+            }),
+        });
+    }
+    isProduction(config) {
+        return config.id === "production" || config.host.includes("prod");
+    }
+    async getRealmAccessToken(keycloakSetupConfig, ...args) {
+        const { ctxArgs } = this.logCtx(args, this.getRealmAccessToken);
+        return this.getAccessToken(keycloakSetupConfig.realmApiUser, ...ctxArgs);
+    }
+    async getAccessToken(keycloakUser, ...args) {
+        const { ctxArgs } = this.logCtx(args, this.getAccessToken);
+        const response = await this.request("POST", `/realms/${keycloakUser.realm}/protocol/openid-connect/token`, undefined, new URLSearchParams({
+            client_id: keycloakUser.apiClientId,
+            username: keycloakUser.username,
+            password: keycloakUser.password,
+            grant_type: "password",
+        }).toString(), 200, { "content-type": "application/x-www-form-urlencoded" }, ...ctxArgs);
+        const data = this.parseJsonResponse(response.data);
+        if (data?.access_token)
+            return data.access_token;
+        throw new db_decorators_1.BadRequestError(`Unable to get Keycloak access token for user ${keycloakUser.username}`);
+    }
+    normalizeIdentityProviderConfig(base, overrides) {
+        return {
+            ...base,
+            ...overrides,
+            config: {
+                ...base.config,
+                ...overrides.config,
+            },
+        };
+    }
+    buildIdentityProviderPayload(identityProvider) {
+        return {
+            alias: identityProvider.alias,
+            displayName: identityProvider.displayName,
+            providerId: identityProvider.providerId ?? "oidc",
+            enabled: identityProvider.enabled ?? true,
+            updateProfileFirstLoginMode: identityProvider.updateProfileFirstLoginMode ?? "on",
+            trustEmail: identityProvider.trustEmail ?? false,
+            storeToken: identityProvider.storeToken ?? false,
+            addReadTokenRoleOnCreate: false,
+            authenticateByDefault: false,
+            linkOnly: identityProvider.linkOnly ?? false,
+            hideOnLogin: identityProvider.hideOnLogin ?? false,
+            config: {
+                userInfoUrl: "https://graph.microsoft.com/oidc/userinfo",
+                validateSignature: true,
+                tokenUrl: `https://login.microsoftonline.com/${identityProvider.tenantId}/oauth2/v2.0/token`,
+                clientId: identityProvider.clientId,
+                jwksUrl: `https://login.microsoftonline.com/${identityProvider.tenantId}/discovery/v2.0/keys`,
+                issuer: `https://login.microsoftonline.com/${identityProvider.tenantId}/v2.0`,
+                useJwksUrl: true,
+                pkceEnabled: false,
+                metadataDescriptorUrl: `https://login.microsoftonline.com/${identityProvider.tenantId}/v2.0/.well-known/openid-configuration`,
+                authorizationUrl: `https://login.microsoftonline.com/${identityProvider.tenantId}/oauth2/v2.0/authorize`,
+                clientAuthMethod: "client_secret_post",
+                logoutUrl: `https://login.microsoftonline.com/${identityProvider.tenantId}/oauth2/v2.0/logout`,
+                syncMode: identityProvider.syncMode ?? "LEGACY",
+                clientSecret: identityProvider.clientSecret,
+                ...identityProvider.config,
+            },
+        };
+    }
+    async request(method, path, accessToken, payload, successCode, headers, ...args) {
+        this.logCtx(args, this.request);
+        const response = await this.client.request({
+            method,
+            url: `${this.config.protocol}://${this.config.host}${path}`,
+            data: payload === undefined
+                ? undefined
+                : typeof payload === "string"
+                    ? payload
+                    : JSON.stringify(payload),
+            headers: {
+                ...headers,
+                ...(accessToken ? { Authorization: `Bearer ${accessToken}` } : {}),
+                ...(payload !== undefined && typeof payload !== "string"
+                    ? { "Content-Type": "application/json" }
+                    : {}),
+            },
+            httpsAgent: new https.Agent({
+                rejectUnauthorized: this.isProduction(this.config),
+            }),
+            validateStatus: () => true,
+        });
+        if (response.status !== successCode) {
+            this.handleHttpResponse(response, successCode);
+        }
+        return response;
+    }
+    handleHttpResponse(response, successCode) {
+        const status = response.status;
+        const message = `Expected ${successCode}, received ${response.status}: ${response.statusText}`;
+        if (status === 404 || message.toLowerCase().includes("not found")) {
+            throw new db_decorators_1.NotFoundError(message);
+        }
+        if (status === 409 || message.toLowerCase().includes("conflict")) {
+            throw new db_decorators_1.ConflictError(message);
+        }
+        if (status === 400) {
+            throw new db_decorators_1.BadRequestError(message);
+        }
+        if (status === 401 || status === 403) {
+            throw new db_decorators_1.NotFoundError(message);
+        }
+        throw new db_decorators_1.InternalError(message);
+    }
+    parseError(error) {
+        const message = error.message || error.name || "Unknown error";
+        const lowerMessage = message.toLowerCase();
+        if (lowerMessage.includes("not found") || lowerMessage.includes("404")) {
+            return new db_decorators_1.NotFoundError(message);
+        }
+        if (lowerMessage.includes("already exists") || lowerMessage.includes("conflict") || lowerMessage.includes("409")) {
+            return new db_decorators_1.ConflictError(message);
+        }
+        if (lowerMessage.includes("invalid") || lowerMessage.includes("bad request") || lowerMessage.includes("400")) {
+            return new db_decorators_1.BadRequestError(message);
+        }
+        if (lowerMessage.includes("unauthorized") || lowerMessage.includes("401")) {
+            return new db_decorators_1.NotFoundError(message);
+        }
+        if (lowerMessage.includes("forbidden") || lowerMessage.includes("403")) {
+            return new db_decorators_1.NotFoundError(message);
+        }
+        return new db_decorators_1.InternalError(message);
+    }
+    parseJsonResponse(data) {
+        if (typeof data === "string") {
+            try {
+                return JSON.parse(data);
+            }
+            catch {
+                return undefined;
+            }
+        }
+        return data;
+    }
+}
+exports.KeycloakIdentityProviderService = KeycloakIdentityProviderService;
+//# sourceMappingURL=KeycloakIdentityProviderService.js.map
+//# sourceMappingURL=KeycloakIdentityProviderService.js.map

package/lib/cjs/keycloak/services/KeycloakIdentityProviderService.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"KeycloakIdentityProviderService.js","sourceRoot":"","sources":["KeycloakIdentityProviderService.js"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,2DAAwG;AACxG,yCAAoD;AACpD,kDAA0B;AAC1B,kDAAoC;AACpC,MAAa,+BAAgC,SAAQ,yBAAkB;IACnE,KAAK,CAAC,UAAU,CAAC,GAAG,IAAI;QACpB,MAAM,EAAE,OAAO,EAAE,GAAG,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,YAAY,EAAE,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QACvF,MAAM,MAAM,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;QAC1B,IAAI,CAAC,OAAO,GAAG,MAAM,CAAC;QACtB,MAAM,MAAM,GAAG,IAAI,CAAC,gBAAgB,CAAC,MAAM,CAAC,CAAC;QAC7C,IAAI,CAAC,OAAO,GAAG,MAAM,CAAC;QACtB,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;IAC9B,CAAC;IACD,KAAK,CAAC,sBAAsB,CAAC,mBAAmB,EAAE,SAAS,EAAE,GAAG,IAAI;QAChE,MAAM,EAAE,OAAO,EAAE,GAAG,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,wBAAwB,EAAE,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,sBAAsB,CAAC,CAAC;QAC/G,MAAM,gBAAgB,GAAG,MAAM,IAAI,CAAC,mBAAmB,CAAC,mBAAmB,EAAE,GAAG,OAAO,CAAC,CAAC;QACzF,MAAM,gBAAgB,GAAG,IAAI,CAAC,+BAA+B,CAAC,mBAAmB,CAAC,gBAAgB,EAAE,SAAS,IAAI,EAAE,CAAC,CAAC;QACrH,MAAM,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,iBAAiB,mBAAmB,CAAC,YAAY,EAAE,KAAK,8BAA8B,EAAE,gBAAgB,EAAE,IAAI,CAAC,4BAA4B,CAAC,gBAAgB,CAAC,EAAE,GAAG,EAAE,EAAE,EAAE,GAAG,OAAO,CAAC,CAAC;IACnN,CAAC;IACD,KAAK,CAAC,sBAAsB,CAAC,mBAAmB,EAAE,SAAS,EAAE,GAAG,IAAI;QAChE,MAAM,EAAE,OAAO,EAAE,GAAG,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,wBAAwB,EAAE,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,sBAAsB,CAAC,CAAC;QAC/G,MAAM,gBAAgB,GAAG,MAAM,IAAI,CAAC,mBAAmB,CAAC,mBAAmB,EAAE,GAAG,OAAO,CAAC,CAAC;QACzF,MAAM,gBAAgB,GAAG,IAAI,CAAC,+BAA+B,CAAC,mBAAmB,CAAC,gBAAgB,EAAE,SAAS,IAAI,EAAE,CAAC,CAAC;QACrH,MAAM,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,iBAAiB,mBAAmB,CAAC,YAAY,EAAE,KAAK,gCAAgC,kBAAkB,CAAC,gBAAgB,CAAC,KAAK,CAAC,EAAE,EAAE,gBAAgB,EAAE,IAAI,CAAC,4BAA4B,CAAC,gBAAgB,CAAC,EAAE,GAAG,EAAE,EAAE,EAAE,GAAG,OAAO,CAAC,CAAC;IAChQ,CAAC;IACD,KAAK,CAAC,6BAA6B,CAAC,mBAAmB,EAAE,WAAW,EAAE,GAAG,IAAI;QACzE,MAAM,EAAE,OAAO,EAAE,GAAG,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,+BAA+B,EAAE,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,6BAA6B,CAAC,CAAC;QAC7H,MAAM,KAAK,GAAG,WAAW,IAAI,mBAAmB,CAAC,MAAM,CAAC,KAAK,IAAI,EAAE,CAAC;QACpE,MAAM,gBAAgB,GAAG,MAAM,IAAI,CAAC,mBAAmB,CAAC,mBAAmB,EAAE,GAAG,OAAO,CAAC,CAAC;QACzF,MAAM,gBAAgB,GAAG,mBAAmB,CAAC,gBAAgB,CAAC;QAC9D,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACvB,MAAM,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,iBAAiB,mBAAmB,CAAC,YAAY,EAAE,KAAK,gCAAgC,gBAAgB,CAAC,KAAK,UAAU,EAAE,gBAAgB,EAAE;gBACnK,IAAI,EAAE,IAAI,CAAC,QAAQ;gBACnB,qBAAqB,EAAE,gBAAgB,CAAC,KAAK;gBAC7C,sBAAsB,EAAE,sBAAsB;gBAC9C,MAAM,EAAE;oBACJ,QAAQ,EAAE,gBAAgB,CAAC,cAAc,IAAI,OAAO;oBACpD,KAAK,EAAE,gBAAgB,CAAC,eAAe,IAAI,QAAQ;oBACnD,aAAa,EAAE,IAAI,CAAC,UAAU;oBAC9B,IAAI,EAAE,GAAG,mBAAmB,CAAC,MAAM,CAAC,QAAQ,IAAI,IAAI,CAAC,QAAQ,EAAE;iBAClE;aACJ,EAAE,GAAG,EAAE,EAAE,EAAE,GAAG,OAAO,CAAC,CAAC;QAC5B,CAAC;IACL,CAAC;IACD,gBAAgB,CAAC,MAAM;QACnB,OAAO,eAAK,CAAC,MAAM,CAAC;YAChB,OAAO,EAAE,GAAG,MAAM,CAAC,QAAQ,MAAM,MAAM,CAAC,IAAI,EAAE;YAC9C,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;YAC/C,cAAc,EAAE,GAAG,EAAE,CAAC,IAAI;YAC1B,UAAU,EAAE,IAAI,KAAK,CAAC,KAAK,CAAC;gBACxB,kBAAkB,EAAE,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC;aAChD,CAAC;SACL,CAAC,CAAC;IACP,CAAC;IACD,YAAY,CAAC,MAAM;QACf,OAAO,MAAM,CAAC,EAAE,KAAK,YAAY,IAAI,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IACtE,CAAC;IACD,KAAK,CAAC,mBAAmB,CAAC,mBAAmB,EAAE,GAAG,IAAI;QAClD,MAAM,EAAE,OAAO,EAAE,GAAG,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,mBAAmB,CAAC,CAAC;QAChE,OAAO,IAAI,CAAC,cAAc,CAAC,mBAAmB,CAAC,YAAY,EAAE,GAAG,OAAO,CAAC,CAAC;IAC7E,CAAC;IACD,KAAK,CAAC,cAAc,CAAC,YAAY,EAAE,GAAG,IAAI;QACtC,MAAM,EAAE,OAAO,EAAE,GAAG,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,cAAc,CAAC,CAAC;QAC3D,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,WAAW,YAAY,CAAC,KAAK,gCAAgC,EAAE,SAAS,EAAE,IAAI,eAAe,CAAC;YACtI,SAAS,EAAE,YAAY,CAAC,WAAW;YACnC,QAAQ,EAAE,YAAY,CAAC,QAAQ;YAC/B,QAAQ,EAAE,YAAY,CAAC,QAAQ;YAC/B,UAAU,EAAE,UAAU;SACzB,CAAC,CAAC,QAAQ,EAAE,EAAE,GAAG,EAAE,EAAE,cAAc,EAAE,mCAAmC,EAAE,EAAE,GAAG,OAAO,CAAC,CAAC;QACzF,MAAM,IAAI,GAAG,IAAI,CAAC,iBAAiB,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;QACnD,IAAI,IAAI,EAAE,YAAY;YAClB,OAAO,IAAI,CAAC,YAAY,CAAC;QAC7B,MAAM,IAAI,+BAAe,CAAC,gDAAgD,YAAY,CAAC,QAAQ,EAAE,CAAC,CAAC;IACvG,CAAC;IACD,+BAA+B,CAAC,IAAI,EAAE,SAAS;QAC3C,OAAO;YACH,GAAG,IAAI;YACP,GAAG,SAAS;YACZ,MAAM,EAAE;gBACJ,GAAG,IAAI,CAAC,MAAM;gBACd,GAAG,SAAS,CAAC,MAAM;aACtB;SACJ,CAAC;IACN,CAAC;IACD,4BAA4B,CAAC,gBAAgB;QACzC,OAAO;YACH,KAAK,EAAE,gBAAgB,CAAC,KAAK;YAC7B,WAAW,EAAE,gBAAgB,CAAC,WAAW;YACzC,UAAU,EAAE,gBAAgB,CAAC,UAAU,IAAI,MAAM;YACjD,OAAO,EAAE,gBAAgB,CAAC,OAAO,IAAI,IAAI;YACzC,2BAA2B,EAAE,gBAAgB,CAAC,2BAA2B,IAAI,IAAI;YACjF,UAAU,EAAE,gBAAgB,CAAC,UAAU,IAAI,KAAK;YAChD,UAAU,EAAE,gBAAgB,CAAC,UAAU,IAAI,KAAK;YAChD,wBAAwB,EAAE,KAAK;YAC/B,qBAAqB,EAAE,KAAK;YAC5B,QAAQ,EAAE,gBAAgB,CAAC,QAAQ,IAAI,KAAK;YAC5C,WAAW,EAAE,gBAAgB,CAAC,WAAW,IAAI,KAAK;YAClD,MAAM,EAAE;gBACJ,WAAW,EAAE,2CAA2C;gBACxD,iBAAiB,EAAE,IAAI;gBACvB,QAAQ,EAAE,qCAAqC,gBAAgB,CAAC,QAAQ,oBAAoB;gBAC5F,QAAQ,EAAE,gBAAgB,CAAC,QAAQ;gBACnC,OAAO,EAAE,qCAAqC,gBAAgB,CAAC,QAAQ,sBAAsB;gBAC7F,MAAM,EAAE,qCAAqC,gBAAgB,CAAC,QAAQ,OAAO;gBAC7E,UAAU,EAAE,IAAI;gBAChB,WAAW,EAAE,KAAK;gBAClB,qBAAqB,EAAE,qCAAqC,gBAAgB,CAAC,QAAQ,wCAAwC;gBAC7H,gBAAgB,EAAE,qCAAqC,gBAAgB,CAAC,QAAQ,wBAAwB;gBACxG,gBAAgB,EAAE,oBAAoB;gBACtC,SAAS,EAAE,qCAAqC,gBAAgB,CAAC,QAAQ,qBAAqB;gBAC9F,QAAQ,EAAE,gBAAgB,CAAC,QAAQ,IAAI,QAAQ;gBAC/C,YAAY,EAAE,gBAAgB,CAAC,YAAY;gBAC3C,GAAG,gBAAgB,CAAC,MAAM;aAC7B;SACJ,CAAC;IACN,CAAC;IACD,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,IAAI,EAAE,WAAW,EAAE,OAAO,EAAE,WAAW,EAAE,OAAO,EAAE,GAAG,IAAI;QAC3E,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;QAChC,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC;YACvC,MAAM;YACN,GAAG,EAAE,GAAG,IAAI,CAAC,MAAM,CAAC,QAAQ,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,GAAG,IAAI,EAAE;YAC3D,IAAI,EAAE,OAAO,KAAK,SAAS;gBACvB,CAAC,CAAC,SAAS;gBACX,CAAC,CAAC,OAAO,OAAO,KAAK,QAAQ;oBACzB,CAAC,CAAC,OAAO;oBACT,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC;YACjC,OAAO,EAAE;gBACL,GAAG,OAAO;gBACV,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,UAAU,WAAW,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBAClE,GAAG,CAAC,OAAO,KAAK,SAAS,IAAI,OAAO,OAAO,KAAK,QAAQ;oBACpD,CAAC,CAAC,EAAE,cAAc,EAAE,kBAAkB,EAAE;oBACxC,CAAC,CAAC,EAAE,CAAC;aACZ;YACD,UAAU,EAAE,IAAI,KAAK,CAAC,KAAK,CAAC;gBACxB,kBAAkB,EAAE,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,MAAM,CAAC;aACrD,CAAC;YACF,cAAc,EAAE,GAAG,EAAE,CAAC,IAAI;SAC7B,CAAC,CAAC;QACH,IAAI,QAAQ,CAAC,MAAM,KAAK,WAAW,EAAE,CAAC;YAClC,IAAI,CAAC,kBAAkB,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAC;QACnD,CAAC;QACD,OAAO,QAAQ,CAAC;IACpB,CAAC;IACD,kBAAkB,CAAC,QAAQ,EAAE,WAAW;QACpC,MAAM,MAAM,GAAG,QAAQ,CAAC,MAAM,CAAC;QAC/B,MAAM,OAAO,GAAG,YAAY,WAAW,cAAc,QAAQ,CAAC,MAAM,KAAK,QAAQ,CAAC,UAAU,EAAE,CAAC;QAC/F,IAAI,MAAM,KAAK,GAAG,IAAI,OAAO,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC;YAChE,MAAM,IAAI,6BAAa,CAAC,OAAO,CAAC,CAAC;QACrC,CAAC;QACD,IAAI,MAAM,KAAK,GAAG,IAAI,OAAO,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC;YAC/D,MAAM,IAAI,6BAAa,CAAC,OAAO,CAAC,CAAC;QACrC,CAAC;QACD,IAAI,MAAM,KAAK,GAAG,EAAE,CAAC;YACjB,MAAM,IAAI,+BAAe,CAAC,OAAO,CAAC,CAAC;QACvC,CAAC;QACD,IAAI,MAAM,KAAK,GAAG,IAAI,MAAM,KAAK,GAAG,EAAE,CAAC;YACnC,MAAM,IAAI,6BAAa,CAAC,OAAO,CAAC,CAAC;QACrC,CAAC;QACD,MAAM,IAAI,6BAAa,CAAC,OAAO,CAAC,CAAC;IACrC,CAAC;IACD,UAAU,CAAC,KAAK;QACZ,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,IAAI,KAAK,CAAC,IAAI,IAAI,eAAe,CAAC;QAC/D,MAAM,YAAY,GAAG,OAAO,CAAC,WAAW,EAAE,CAAC;QAC3C,IAAI,YAAY,CAAC,QAAQ,CAAC,WAAW,CAAC,IAAI,YAAY,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;YACrE,OAAO,IAAI,6BAAa,CAAC,OAAO,CAAC,CAAC;QACtC,CAAC;QACD,IAAI,YAAY,CAAC,QAAQ,CAAC,gBAAgB,CAAC,IAAI,YAAY,CAAC,QAAQ,CAAC,UAAU,CAAC,IAAI,YAAY,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;YAC/G,OAAO,IAAI,6BAAa,CAAC,OAAO,CAAC,CAAC;QACtC,CAAC;QACD,IAAI,YAAY,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,YAAY,CAAC,QAAQ,CAAC,aAAa,CAAC,IAAI,YAAY,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;YAC3G,OAAO,IAAI,+BAAe,CAAC,OAAO,CAAC,CAAC;QACxC,CAAC;QACD,IAAI,YAAY,CAAC,QAAQ,CAAC,cAAc,CAAC,IAAI,YAAY,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;YACxE,OAAO,IAAI,6BAAa,CAAC,OAAO,CAAC,CAAC;QACtC,CAAC;QACD,IAAI,YAAY,CAAC,QAAQ,CAAC,WAAW,CAAC,IAAI,YAAY,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;YACrE,OAAO,IAAI,6BAAa,CAAC,OAAO,CAAC,CAAC;QACtC,CAAC;QACD,OAAO,IAAI,6BAAa,CAAC,OAAO,CAAC,CAAC;IACtC,CAAC;IACD,iBAAiB,CAAC,IAAI;QAClB,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;YAC3B,IAAI,CAAC;gBACD,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YAC5B,CAAC;YACD,MAAM,CAAC;gBACH,OAAO,SAAS,CAAC;YACrB,CAAC;QACL,CAAC;QACD,OAAO,IAAI,CAAC;IAChB,CAAC;CACJ;AA3LD,0EA2LC;AACD,2DAA2D"}