@degenerate/generic 0.1.2 → 0.1.4

package/dist/authorization/safe/validation/jwt/verify-token-header.js

@@ -0,0 +1,25 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.verifyTokenHeader = void 0;
+const authorization_settings_1 = require("../../../../_settings/authorization-settings");
+const authorization_errors_1 = require("../../../../errors/authorization/authorization-errors");
+const get_decoded_jwt_header_1 = require("../../../jwt/verify/get-decoded-jwt-header");
+/**
+ * This validates that the header encoding is the expected encoding for the token
+ *
+ * @param token the token to validate the header of.
+ * @returns
+ */
+const verifyTokenHeader = (token) => {
+    const jwtTokenParts = token.split('.');
+    if (jwtTokenParts.length !== 3) {
+        throw new authorization_errors_1.SafeAuthorizationTokenNotBase64Error();
+    }
+    const header = (0, get_decoded_jwt_header_1.getDecodedJwtHeader)(token);
+    if (header.alg !== authorization_settings_1.AuthorizationSettings.JWT.Algorithm ||
+        header.typ !== authorization_settings_1.AuthorizationSettings.JWT.HeaderType) {
+        return false;
+    }
+    return true;
+};
+exports.verifyTokenHeader = verifyTokenHeader;

package/dist/authorization/safe/validation/jwt/verify-token-payload.d.ts

@@ -0,0 +1,11 @@
+import jwt from 'jsonwebtoken';
+import { IValidSafeTokenPayload } from '../../../../models/authorization/authorization-models';
+/**
+ * This function verifies the payload of the token to have the minimum token information from the decoded token payload.
+ *
+ * @param payload the payload to verify
+ * @returns void (throws an error if the payload is not valid)
+ */
+declare const verifyTokenPayload: (payload: jwt.JwtPayload) => payload is IValidSafeTokenPayload;
+export { verifyTokenPayload };
+//# sourceMappingURL=verify-token-payload.d.ts.map

package/dist/authorization/safe/validation/jwt/verify-token-payload.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"verify-token-payload.d.ts","sourceRoot":"","sources":["../../../../../src/authorization/safe/validation/jwt/verify-token-payload.ts"],"names":[],"mappings":"AAAA,OAAO,GAAG,MAAM,cAAc,CAAC;AAU/B,OAAO,EAAE,sBAAsB,EAAE,MAAM,uDAAuD,CAAC;AAE/F;;;;;GAKG;AACH,QAAA,MAAM,kBAAkB,YAAa,GAAG,CAAC,UAAU,KAAG,OAAO,IAAI,sBAchE,CAAC;AAEF,OAAO,EAAE,kBAAkB,EAAE,CAAC"}

package/dist/authorization/safe/validation/jwt/verify-token-payload.js

@@ -0,0 +1,30 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.verifyTokenPayload = void 0;
+const authorization_errors_1 = require("../../../../errors/authorization/authorization-errors");
+const verify_authorization_issuer_1 = require("./payload/verify-authorization-issuer");
+const verify_authorization_subject_1 = require("./payload/verify-authorization-subject");
+const verify_authorization_audience_1 = require("./payload/verify-authorization-audience");
+const verify_authorization_not_before_time_1 = require("./payload/verify-authorization-not-before-time");
+const verify_authorization_expiration_time_1 = require("./payload/verify-authorization-expiration-time");
+const verify_authorization_issued_at_time_1 = require("./payload/verify-authorization-issued-at-time");
+/**
+ * This function verifies the payload of the token to have the minimum token information from the decoded token payload.
+ *
+ * @param payload the payload to verify
+ * @returns void (throws an error if the payload is not valid)
+ */
+const verifyTokenPayload = (payload) => {
+    if (!payload || typeof payload !== 'object') {
+        throw new authorization_errors_1.SafeAuthorizationPayloadNotValidError();
+    }
+    // make sure the issued at time is a valid
+    (0, verify_authorization_issued_at_time_1.verifyAuthorizationIssuedAtTime)(payload.iat);
+    (0, verify_authorization_not_before_time_1.verifyAuthorizationNotBeforeTime)(payload.nbf);
+    (0, verify_authorization_expiration_time_1.verifyAuthorizationExpirationTime)(payload.exp);
+    (0, verify_authorization_subject_1.verifyAuthorizationSubject)(payload.sub);
+    (0, verify_authorization_audience_1.verifyAuthorizationAudience)(payload.aud);
+    (0, verify_authorization_issuer_1.verifyAuthorizationIssuer)(payload.iss);
+    return true;
+};
+exports.verifyTokenPayload = verifyTokenPayload;

package/dist/crypto/index.d.ts

@@ -3,6 +3,7 @@ export * from './calculate-combined-hash';
 export * from './private-public-keys/generation/create-256-private-key-from-mnemonic';
 export * from './private-public-keys/generation/create-entropy-for-elliptical-curve';
 export * from './private-public-keys/generation/create-random-256-private-key';
+export * from './private-public-keys/generation/create-random-512-key-pair';
 export * from './private-public-keys/generation/generate-key-pair';
 export * from './private-public-keys/generation/get-private-public-key-from-keypair';
 export * from './private-public-keys/create-key-pair-from-private-key';

package/dist/crypto/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/crypto/index.ts"],"names":[],"mappings":"AAAA,cAAc,kBAAkB,CAAC;AACjC,cAAc,2BAA2B,CAAC;AAK1C,cAAc,uEAAuE,CAAC;AACtF,cAAc,sEAAsE,CAAC;AACrF,cAAc,gEAAgE,CAAC;AAC/E,cAAc,oDAAoD,CAAC;AACnE,cAAc,sEAAsE,CAAC;AAGrF,cAAc,wDAAwD,CAAC;AACvE,cAAc,qDAAqD,CAAC;AAMpE,cAAc,qCAAqC,CAAC;AACpD,cAAc,6CAA6C,CAAC;AAC5D,cAAc,6CAA6C,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/crypto/index.ts"],"names":[],"mappings":"AAAA,cAAc,kBAAkB,CAAC;AACjC,cAAc,2BAA2B,CAAC;AAK1C,cAAc,uEAAuE,CAAC;AACtF,cAAc,sEAAsE,CAAC;AACrF,cAAc,gEAAgE,CAAC;AAC/E,cAAc,6DAA6D,CAAC;AAC5E,cAAc,oDAAoD,CAAC;AACnE,cAAc,sEAAsE,CAAC;AAGrF,cAAc,wDAAwD,CAAC;AACvE,cAAc,qDAAqD,CAAC;AAMpE,cAAc,qCAAqC,CAAC;AACpD,cAAc,6CAA6C,CAAC;AAC5D,cAAc,6CAA6C,CAAC"}

package/dist/crypto/index.js

@@ -21,6 +21,7 @@ __exportStar(require("./calculate-combined-hash"), exports);
 __exportStar(require("./private-public-keys/generation/create-256-private-key-from-mnemonic"), exports);
 __exportStar(require("./private-public-keys/generation/create-entropy-for-elliptical-curve"), exports);
 __exportStar(require("./private-public-keys/generation/create-random-256-private-key"), exports);
+__exportStar(require("./private-public-keys/generation/create-random-512-key-pair"), exports);
 __exportStar(require("./private-public-keys/generation/generate-key-pair"), exports);
 __exportStar(require("./private-public-keys/generation/get-private-public-key-from-keypair"), exports);
 //#endregion folder generation

package/dist/crypto/private-public-keys/create-key-pair-from-private-key.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"create-key-pair-from-private-key.d.ts","sourceRoot":"","sources":["../../../src/crypto/private-public-keys/create-key-pair-from-private-key.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,QAAQ,MAAM,UAAU,CAAC;AACrC,OAAO,EAAE,uBAAuB,EAAE,0BAA0B,EAAE,MAAM,uCAAuC,CAAC;AAE5G;;;;;GAKG;AACH,QAAA,MAAM,2BAA2B,UAAW,uBAAuB,GAAG,0BAA0B,cAChF,MAAM,KAAG,QAAQ,CAAC,EAAE,CAAC,OAMpC,CAAC;AAEF,OAAO,EAAE,2BAA2B,EAAE,CAAC"}
+{"version":3,"file":"create-key-pair-from-private-key.d.ts","sourceRoot":"","sources":["../../../src/crypto/private-public-keys/create-key-pair-from-private-key.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,QAAQ,MAAM,UAAU,CAAC;AACrC,OAAO,EAAE,uBAAuB,EAAE,0BAA0B,EAAE,MAAM,uCAAuC,CAAC;AAE5G;;;;;GAKG;AACH,QAAA,MAAM,2BAA2B,UAAW,uBAAuB,GAAG,0BAA0B,cAChF,MAAM,KAAG,QAAQ,CAAC,EAAE,CAAC,OAKpC,CAAC;AAEF,OAAO,EAAE,2BAA2B,EAAE,CAAC"}

package/dist/crypto/private-public-keys/generation/create-256-private-key-from-mnemonic.d.ts

@@ -1,5 +1,5 @@
 /**
- * Generates a random private key from the mnemonic phrase.
+ * This function generates a random mnemonic phrase and creates a private key from it. (256 Bits)
  *
  * @returns A random private key as a hexadecimal string.
  */

package/dist/crypto/private-public-keys/generation/create-256-private-key-from-mnemonic.js

@@ -28,7 +28,7 @@ const crypto = __importStar(require("crypto"));
 const bip39 = __importStar(require("bip39"));
 const cryptography_settings_1 = require("../../../_settings/cryptography-settings");
 /**
- * Generates a random private key from the mnemonic phrase.
+ * This function generates a random mnemonic phrase and creates a private key from it. (256 Bits)
  *
  * @returns A random private key as a hexadecimal string.
  */

package/dist/crypto/private-public-keys/generation/create-entropy-for-elliptical-curve.d.ts

@@ -3,7 +3,7 @@ import { EllipticalCurvesEncryption, EllipticalCurvesSigning } from '../../../_s
  * Creates entropy for an elliptical curve.
  *
  * @param signingCurve - The elliptical curve to create entropy for.
- * @returns The entropy for the elliptical curve.
+ * @returns The entropy for the elliptical curve. string in hexadecimal format.
  */
 declare const createEntropyForEllipitalCurve: (curve: EllipticalCurvesSigning | EllipticalCurvesEncryption) => string;
 export { createEntropyForEllipitalCurve };

package/dist/crypto/private-public-keys/generation/create-entropy-for-elliptical-curve.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"create-entropy-for-elliptical-curve.d.ts","sourceRoot":"","sources":["../../../../src/crypto/private-public-keys/generation/create-entropy-for-elliptical-curve.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,0BAA0B,EAAE,uBAAuB,EAAE,MAAM,0CAA0C,CAAC;AAG/G;;;;;GAKG;AACH,QAAA,MAAM,8BAA8B,UAAW,uBAAuB,GAAG,0BAA0B,KAAG,MAOrG,CAAC;AAEF,OAAO,EAAE,8BAA8B,EAAE,CAAC"}
+{"version":3,"file":"create-entropy-for-elliptical-curve.d.ts","sourceRoot":"","sources":["../../../../src/crypto/private-public-keys/generation/create-entropy-for-elliptical-curve.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,0BAA0B,EAAE,uBAAuB,EAAE,MAAM,0CAA0C,CAAC;AAG/G;;;;;GAKG;AACH,QAAA,MAAM,8BAA8B,UAAW,uBAAuB,GAAG,0BAA0B,KAAG,MAQrG,CAAC;AAEF,OAAO,EAAE,8BAA8B,EAAE,CAAC"}

package/dist/crypto/private-public-keys/generation/create-entropy-for-elliptical-curve.js

@@ -29,12 +29,13 @@ const Elliptic = __importStar(require("elliptic"));
  * Creates entropy for an elliptical curve.
  *
  * @param signingCurve - The elliptical curve to create entropy for.
- * @returns The entropy for the elliptical curve.
+ * @returns The entropy for the elliptical curve. string in hexadecimal format.
  */
 const createEntropyForEllipitalCurve = (curve) => {
     const ecKey = new Elliptic.ec(curve);
     const hashStrength = ecKey.hash.hmacStrength;
     const entropy = Elliptic.rand(hashStrength);
-    return entropy;
+    const entropyHex = entropy.toString('hex');
+    return entropyHex;
 };
 exports.createEntropyForEllipitalCurve = createEntropyForEllipitalCurve;

package/dist/crypto/private-public-keys/generation/create-random-512-key-pair.d.ts

@@ -0,0 +1,9 @@
+import { IPublicPrivateKeyDerPair } from '../../../models/crypto/crypto-models';
+/**
+ * This function creates a random key pair using the crypto library for the P521 curve.
+ *
+ * @returns the private and public key in DER format.
+ */
+declare const createRandom512KeyPair: () => IPublicPrivateKeyDerPair;
+export { createRandom512KeyPair };
+//# sourceMappingURL=create-random-512-key-pair.d.ts.map

package/dist/crypto/private-public-keys/generation/create-random-512-key-pair.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"create-random-512-key-pair.d.ts","sourceRoot":"","sources":["../../../../src/crypto/private-public-keys/generation/create-random-512-key-pair.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,wBAAwB,EAAE,MAAM,sCAAsC,CAAC;AAGhF;;;;GAIG;AACH,QAAA,MAAM,sBAAsB,QAAO,wBAelC,CAAC;AAEF,OAAO,EAAE,sBAAsB,EAAE,CAAC"}

package/dist/crypto/private-public-keys/generation/create-random-512-key-pair.js

@@ -0,0 +1,46 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || function (mod) {
+    if (mod && mod.__esModule) return mod;
+    var result = {};
+    if (mod != null) for (var k in mod) if (k !== "default" && Object.prototype.hasOwnProperty.call(mod, k)) __createBinding(result, mod, k);
+    __setModuleDefault(result, mod);
+    return result;
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.createRandom512KeyPair = void 0;
+const crypto = __importStar(require("crypto"));
+const cryptography_settings_1 = require("../../../_settings/cryptography-settings");
+/**
+ * This function creates a random key pair using the crypto library for the P521 curve.
+ *
+ * @returns the private and public key in DER format.
+ */
+const createRandom512KeyPair = () => {
+    const curve = 'secp521r1'; // P521 curve
+    const { publicKey, privateKey } = crypto.generateKeyPairSync('ec', { namedCurve: curve }); // Generate the key pair
+    const privateKeyDer = privateKey.export({ format: cryptography_settings_1.keyExportFormatDer, type: cryptography_settings_1.sec1KeyExportType })
+        .toString(cryptography_settings_1.base64Encoding); // Export the private key to base64
+    const publicKeyDer = publicKey.export({ format: cryptography_settings_1.keyExportFormatDer, type: cryptography_settings_1.spkiKeyExportType })
+        .toString(cryptography_settings_1.base64Encoding); // Export the public key to base64
+    return {
+        privateKeyDer,
+        publicKeyDer,
+    };
+};
+exports.createRandom512KeyPair = createRandom512KeyPair;

package/dist/errors/authorization/authorization-errors.d.ts

@@ -0,0 +1,106 @@
+import { AuthorityValidationType } from '../../models/authorization/authorization-models';
+import { BaseError } from '../base-error';
+/**
+ * This is thrown when the removal of a IJWTAuthority fails because it does not exist.
+ */
+export declare class SafeAuthorizationIssuerDoesNotExistError extends BaseError {
+    constructor(issuer: string);
+}
+/**
+ * This is thrown when a authority validation request is received the type of validation requested is unknown.
+ * (this should not happen).
+ */
+export declare class SafeAuthorizationAuthorityValidationTypeNotValidError extends BaseError {
+    constructor(validationType: AuthorityValidationType);
+}
+/**
+ * This is throw when a database records is not found.
+ */
+export declare class SafeAuthorizationSubjectNotValidError extends BaseError {
+    constructor(subjectType: string, subjectId: string);
+}
+/**
+ * This is thrown when the public key given for the issuer is not valid.
+ */
+export declare class SafeAuthorizationIssuerPublicKeyNotValidError extends BaseError {
+    constructor(issuerName: string, publicKey: string);
+}
+/**
+ * This is thrown when the issuer is not valid.
+ */
+export declare class SafeAuthorizationIssuerNotValidError extends BaseError {
+    constructor(issuer: string);
+}
+/**
+ * This is thrown when the JWT token is not the corrent base64 encoding
+ */
+export declare class SafeAuthorizationTokenNotBase64Error extends BaseError {
+    constructor();
+}
+/**
+ * This is thrown when the secret key or public key is not included for token verification.
+ */
+export declare class SafeAuthorizationKeyNotIncludedForVerificationError extends BaseError {
+    constructor();
+}
+/**
+ * This is thrown when the authorization payload is not valid.
+ */
+export declare class SafeAuthorizationPayloadNotValidError extends BaseError {
+    constructor();
+}
+/**
+ * This is thrown when the type of data in a token is not valid
+ */
+export declare class SafeAuthorizationTokenPropertyDataTypeNotValidError extends BaseError {
+    constructor(property: string, propertyValue: any, expectedDataType: string);
+}
+/**
+ * This is thrown when the authorization payload is missing a property
+ */
+export declare class SafeAuthorizationMissingPropertyError extends BaseError {
+    constructor(property: string);
+}
+/**
+ * This is thrown when the issued at time is before the current time
+ */
+export declare class SafeAuthorizationTokenIssuedAtTimeNotValidError extends BaseError {
+    constructor();
+}
+/**
+ * This is thrown not authorization exists on the request.
+ */
+export declare class SafeAuthorizationNotExistsError extends BaseError {
+    constructor();
+}
+/**
+ * This is thrown when the bearer token is not found
+ */
+export declare class SafeAuthorizationBearerTokenNotFound extends BaseError {
+    constructor();
+}
+/**
+ * This is thrown when the authorization request headers are not found.
+ */
+export declare class SafeRequestAuthorizationHeadersNotFound extends BaseError {
+    constructor();
+}
+/**
+ * This is thrown when the authorization is not found in the request headers.
+ */
+export declare class SafeRequestAuthorizationHeaderNotFound extends BaseError {
+    constructor();
+}
+/**
+ * This is thrown when the Issuer does not match the expected issuer.
+ */
+export declare class SafeAuthorizationIssuerNotMatchingExpectedError extends BaseError {
+    constructor(expectedIssuer: string, actualIssuer: string);
+}
+/**
+ * This is thrown when the decoded token null or a string (not an object)
+ */
+export declare class SafeAuthorizationTokenNotObjectError extends BaseError {
+    constructor();
+}
+//# sourceMappingURL=authorization-errors.d.ts.map

package/dist/errors/authorization/authorization-errors.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"authorization-errors.d.ts","sourceRoot":"","sources":["../../../src/errors/authorization/authorization-errors.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,uBAAuB,EAAE,MAAM,iDAAiD,CAAC;AAC1F,OAAO,EAAE,SAAS,EAAE,MAAM,eAAe,CAAC;AAE1C;;GAEG;AACH,qBAAa,wCAAyC,SAAQ,SAAS;gBACvD,MAAM,EAAE,MAAM;CAG7B;AAED;;;GAGG;AACH,qBAAa,qDAAsD,SAAQ,SAAS;gBACpE,cAAc,EAAE,uBAAuB;CAGtD;AAED;;GAEG;AACH,qBAAa,qCAAsC,SAAQ,SAAS;gBACpD,WAAW,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM;CAGrD;AAED;;GAEG;AACH,qBAAa,6CAA8C,SAAQ,SAAS;gBAC5D,UAAU,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM;CAGpD;AAED;;GAEG;AACH,qBAAa,oCAAqC,SAAQ,SAAS;gBACnD,MAAM,EAAE,MAAM;CAG7B;AAED;;GAEG;AACH,qBAAa,oCAAqC,SAAQ,SAAS;;CAIlE;AAED;;GAEG;AACH,qBAAa,mDAAoD,SAAQ,SAAS;;CAIjF;AAED;;GAEG;AACH,qBAAa,qCAAsC,SAAQ,SAAS;;CAInE;AAED;;GAEG;AACH,qBAAa,mDAAoD,SAAQ,SAAS;gBAClE,QAAQ,EAAE,MAAM,EAAE,aAAa,EAAE,GAAG,EAAE,gBAAgB,EAAE,MAAM;CAG7E;AAED;;GAEG;AACH,qBAAa,qCAAsC,SAAQ,SAAS;gBACpD,QAAQ,EAAE,MAAM;CAG/B;AAED;;GAEG;AACH,qBAAa,+CAAgD,SAAQ,SAAS;;CAI7E;AAED;;GAEG;AACH,qBAAa,+BAAgC,SAAQ,SAAS;;CAI7D;AAED;;GAEG;AACH,qBAAa,oCAAqC,SAAQ,SAAS;;CAIlE;AAKD;;GAEG;AACH,qBAAa,uCAAwC,SAAQ,SAAS;;CAIrE;AAED;;GAEG;AACH,qBAAa,sCAAuC,SAAQ,SAAS;;CAIpE;AAED;;GAEG;AACH,qBAAa,+CAAgD,SAAQ,SAAS;gBAC9D,cAAc,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM;CAG3D;AAED;;GAEG;AACH,qBAAa,oCAAqC,SAAQ,SAAS;;CAIlE"}

package/dist/errors/authorization/authorization-errors.js

@@ -0,0 +1,160 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.SafeAuthorizationTokenNotObjectError = exports.SafeAuthorizationIssuerNotMatchingExpectedError = exports.SafeRequestAuthorizationHeaderNotFound = exports.SafeRequestAuthorizationHeadersNotFound = exports.SafeAuthorizationBearerTokenNotFound = exports.SafeAuthorizationNotExistsError = exports.SafeAuthorizationTokenIssuedAtTimeNotValidError = exports.SafeAuthorizationMissingPropertyError = exports.SafeAuthorizationTokenPropertyDataTypeNotValidError = exports.SafeAuthorizationPayloadNotValidError = exports.SafeAuthorizationKeyNotIncludedForVerificationError = exports.SafeAuthorizationTokenNotBase64Error = exports.SafeAuthorizationIssuerNotValidError = exports.SafeAuthorizationIssuerPublicKeyNotValidError = exports.SafeAuthorizationSubjectNotValidError = exports.SafeAuthorizationAuthorityValidationTypeNotValidError = exports.SafeAuthorizationIssuerDoesNotExistError = void 0;
+const base_error_1 = require("../base-error");
+/**
+ * This is thrown when the removal of a IJWTAuthority fails because it does not exist.
+ */
+class SafeAuthorizationIssuerDoesNotExistError extends base_error_1.BaseError {
+    constructor(issuer) {
+        super(`The authorization issuer ${issuer} does not exist`);
+    }
+}
+exports.SafeAuthorizationIssuerDoesNotExistError = SafeAuthorizationIssuerDoesNotExistError;
+/**
+ * This is thrown when a authority validation request is received the type of validation requested is unknown.
+ * (this should not happen).
+ */
+class SafeAuthorizationAuthorityValidationTypeNotValidError extends base_error_1.BaseError {
+    constructor(validationType) {
+        super(`The authority validation type is not valid, the type is ${validationType}`);
+    }
+}
+exports.SafeAuthorizationAuthorityValidationTypeNotValidError = SafeAuthorizationAuthorityValidationTypeNotValidError;
+/**
+ * This is throw when a database records is not found.
+ */
+class SafeAuthorizationSubjectNotValidError extends base_error_1.BaseError {
+    constructor(subjectType, subjectId) {
+        super(`The authorization subject ${subjectType} with id ${subjectId} is not valid`);
+    }
+}
+exports.SafeAuthorizationSubjectNotValidError = SafeAuthorizationSubjectNotValidError;
+/**
+ * This is thrown when the public key given for the issuer is not valid.
+ */
+class SafeAuthorizationIssuerPublicKeyNotValidError extends base_error_1.BaseError {
+    constructor(issuerName, publicKey) {
+        super(`The authorization issuer ${issuerName} with public key ${publicKey} is not valid`);
+    }
+}
+exports.SafeAuthorizationIssuerPublicKeyNotValidError = SafeAuthorizationIssuerPublicKeyNotValidError;
+/**
+ * This is thrown when the issuer is not valid.
+ */
+class SafeAuthorizationIssuerNotValidError extends base_error_1.BaseError {
+    constructor(issuer) {
+        super(`The authorization issuer ${issuer} is not valid`);
+    }
+}
+exports.SafeAuthorizationIssuerNotValidError = SafeAuthorizationIssuerNotValidError;
+/**
+ * This is thrown when the JWT token is not the corrent base64 encoding
+ */
+class SafeAuthorizationTokenNotBase64Error extends base_error_1.BaseError {
+    constructor() {
+        super('The authorization token is not a valid base64 encoding');
+    }
+}
+exports.SafeAuthorizationTokenNotBase64Error = SafeAuthorizationTokenNotBase64Error;
+/**
+ * This is thrown when the secret key or public key is not included for token verification.
+ */
+class SafeAuthorizationKeyNotIncludedForVerificationError extends base_error_1.BaseError {
+    constructor() {
+        super('The secret of public key is not included for token verification');
+    }
+}
+exports.SafeAuthorizationKeyNotIncludedForVerificationError = SafeAuthorizationKeyNotIncludedForVerificationError;
+/**
+ * This is thrown when the authorization payload is not valid.
+ */
+class SafeAuthorizationPayloadNotValidError extends base_error_1.BaseError {
+    constructor() {
+        super('The authorization payload is not valid');
+    }
+}
+exports.SafeAuthorizationPayloadNotValidError = SafeAuthorizationPayloadNotValidError;
+/**
+ * This is thrown when the type of data in a token is not valid
+ */
+class SafeAuthorizationTokenPropertyDataTypeNotValidError extends base_error_1.BaseError {
+    constructor(property, propertyValue, expectedDataType) {
+        super(`The property ${property} with value ${propertyValue} is not a valid ${expectedDataType}`);
+    }
+}
+exports.SafeAuthorizationTokenPropertyDataTypeNotValidError = SafeAuthorizationTokenPropertyDataTypeNotValidError;
+/**
+ * This is thrown when the authorization payload is missing a property
+ */
+class SafeAuthorizationMissingPropertyError extends base_error_1.BaseError {
+    constructor(property) {
+        super(`The authorization payload is missing the property ${property}`);
+    }
+}
+exports.SafeAuthorizationMissingPropertyError = SafeAuthorizationMissingPropertyError;
+/**
+ * This is thrown when the issued at time is before the current time
+ */
+class SafeAuthorizationTokenIssuedAtTimeNotValidError extends base_error_1.BaseError {
+    constructor() {
+        super('The issued at time of the token is not valid: ');
+    }
+}
+exports.SafeAuthorizationTokenIssuedAtTimeNotValidError = SafeAuthorizationTokenIssuedAtTimeNotValidError;
+/**
+ * This is thrown not authorization exists on the request.
+ */
+class SafeAuthorizationNotExistsError extends base_error_1.BaseError {
+    constructor() {
+        super('The authorization does not exist');
+    }
+}
+exports.SafeAuthorizationNotExistsError = SafeAuthorizationNotExistsError;
+/**
+ * This is thrown when the bearer token is not found
+ */
+class SafeAuthorizationBearerTokenNotFound extends base_error_1.BaseError {
+    constructor() {
+        super('The bearer token is not found');
+    }
+}
+exports.SafeAuthorizationBearerTokenNotFound = SafeAuthorizationBearerTokenNotFound;
+//#region Safe Request Authorization Errors
+/**
+ * This is thrown when the authorization request headers are not found.
+ */
+class SafeRequestAuthorizationHeadersNotFound extends base_error_1.BaseError {
+    constructor() {
+        super('The authorization request headers are not found');
+    }
+}
+exports.SafeRequestAuthorizationHeadersNotFound = SafeRequestAuthorizationHeadersNotFound;
+/**
+ * This is thrown when the authorization is not found in the request headers.
+ */
+class SafeRequestAuthorizationHeaderNotFound extends base_error_1.BaseError {
+    constructor() {
+        super('The authorization header is not found');
+    }
+}
+exports.SafeRequestAuthorizationHeaderNotFound = SafeRequestAuthorizationHeaderNotFound;
+/**
+ * This is thrown when the Issuer does not match the expected issuer.
+ */
+class SafeAuthorizationIssuerNotMatchingExpectedError extends base_error_1.BaseError {
+    constructor(expectedIssuer, actualIssuer) {
+        super(`The expected issuer ${expectedIssuer} does not match the actual issuer ${actualIssuer}`);
+    }
+}
+exports.SafeAuthorizationIssuerNotMatchingExpectedError = SafeAuthorizationIssuerNotMatchingExpectedError;
+/**
+ * This is thrown when the decoded token null or a string (not an object)
+ */
+class SafeAuthorizationTokenNotObjectError extends base_error_1.BaseError {
+    constructor() {
+        super('The decoded token is not an object');
+    }
+}
+exports.SafeAuthorizationTokenNotObjectError = SafeAuthorizationTokenNotObjectError;
+//#endregion Safe Request Authorization Errors

package/dist/errors/index.d.ts

@@ -1,4 +1,5 @@
 export * from './audit-log/audit-log-errors';
+export * from './authorization/authorization-errors';
 export * from './database/database-errors';
 export * from './generic/generic-errors';
 export * from './request/request-errors';

package/dist/errors/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/errors/index.ts"],"names":[],"mappings":"AAAA,cAAc,8BAA8B,CAAC;AAC7C,cAAc,4BAA4B,CAAC;AAC3C,cAAc,0BAA0B,CAAC;AACzC,cAAc,0BAA0B,CAAC;AACzC,cAAc,0BAA0B,CAAC;AACzC,cAAc,8BAA8B,CAAC;AAC7C,cAAc,gCAAgC,CAAC;AAG/C,cAAc,cAAc,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/errors/index.ts"],"names":[],"mappings":"AAAA,cAAc,8BAA8B,CAAC;AAC7C,cAAc,sCAAsC,CAAC;AACrD,cAAc,4BAA4B,CAAC;AAC3C,cAAc,0BAA0B,CAAC;AACzC,cAAc,0BAA0B,CAAC;AACzC,cAAc,0BAA0B,CAAC;AACzC,cAAc,8BAA8B,CAAC;AAC7C,cAAc,gCAAgC,CAAC;AAG/C,cAAc,cAAc,CAAC"}

package/dist/errors/index.js

@@ -15,6 +15,7 @@ var __exportStar = (this && this.__exportStar) || function(m, exports) {
 };
 Object.defineProperty(exports, "__esModule", { value: true });
 __exportStar(require("./audit-log/audit-log-errors"), exports);
+__exportStar(require("./authorization/authorization-errors"), exports);
 __exportStar(require("./database/database-errors"), exports);
 __exportStar(require("./generic/generic-errors"), exports);
 __exportStar(require("./request/request-errors"), exports);

package/dist/errors/safe/safe-rules-errors.d.ts

@@ -27,4 +27,76 @@ export declare class SafeRuleEvaluationSpecialConditionPatternError extends Base
      */
     constructor(dataValue: unknown, conditionValue: unknown);
 }
+/**
+ * This error is thrown when a rule set has no rule groups
+ */
+export declare class SafeRuleRuleSetNoRuleGroupsError extends BaseError {
+    /**
+     * This error is thrown when a rule set has no rule groups
+     */
+    constructor(name: string, description?: string);
+}
+export declare class SafeRuleConditionNotTypeOfError extends BaseError {
+    constructor(conditionType: ConditionType, expectedType: string);
+}
+/**
+ * This error is thrown when a rule condition is not an object
+ */
+export declare class SafeRuleConditionNotObjectError extends BaseError {
+    constructor(incomingObject: unknown);
+}
+/**
+ * This error is thrown when a rule condition is missing or has an extra property
+ */
+export declare class SafeRuleConditionHasMismatchingProperties extends BaseError {
+    constructor(incomingObject: unknown, expectedPropertyCount: number, actualPropertyCount: number);
+}
+/**
+ * This error is thrown when the safe condition qualifier is not valid
+ */
+export declare class SafeRuleConditionQualifierError extends BaseError {
+    constructor(conditionQualifier: unknown);
+}
+/**
+ * This error is thrown when a rule condition property is missing
+ */
+export declare class SafeRuleConditionPropertyMissingError extends BaseError {
+    constructor(missingProperty: string);
+}
+/**
+ * This error is thrown when a rule condition value is not valid
+ */
+export declare class SafeRuleConditionValueWrongType extends BaseError {
+    constructor(conditionValue: unknown, expectedType: string);
+}
+/**
+ * This error is thrown when a rule condition type is not valid
+ */
+export declare class SafeRuleConditionTypeNotValidError extends BaseError {
+    constructor(conditionType: unknown);
+}
+/**
+ * This error is thrown when a safe rule is not an object
+ */
+export declare class SafeRuleNotObjectError extends BaseError {
+    constructor(incomingObject: unknown);
+}
+/**
+ * This error is thrown when a safe rule is missing or has an extra property
+ */
+export declare class SafeRuleHasMismatchingProperties extends BaseError {
+    constructor(incomingObject: unknown, expectedPropertyCount: number, actualPropertyCount: number);
+}
+/**
+ * This error is thrown when a safe rule is missing property
+ */
+export declare class SafeRuleHasMissingProperty extends BaseError {
+    constructor(incomingObject: unknown, expectedProperty: string);
+}
+/**
+ * This error is thrown when a safe rule property is not valid
+ */
+export declare class SafeRulePropertyValueWrongType extends BaseError {
+    constructor(propertyName: string, propertyValue: unknown, expectedType: string);
+}
 //# sourceMappingURL=safe-rules-errors.d.ts.map

package/dist/errors/safe/safe-rules-errors.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"safe-rules-errors.d.ts","sourceRoot":"","sources":["../../../src/errors/safe/safe-rules-errors.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAC7C,OAAO,EAAE,SAAS,EAAE,MAAM,eAAe,CAAC;AAE1C;;GAEG;AACH,qBAAa,yCAA0C,SAAQ,SAAS;IACpE;;OAEG;gBACS,SAAS,EAAE,OAAO,EAAE,cAAc,EAAE,OAAO,EAAE,aAAa,EAAE,aAAa;CAGxF;AAED;;GAEG;AACH,qBAAa,qCAAsC,SAAQ,SAAS;IAChE;;OAEG;gBACS,SAAS,EAAE,OAAO,EAAE,cAAc,EAAE,OAAO,EAAE,aAAa,EAAE,aAAa;CAGxF;AAED;;GAEG;AACH,qBAAa,8CAA+C,SAAQ,SAAS;IACzE;;OAEG;gBACS,SAAS,EAAE,OAAO,EAAE,cAAc,EAAE,OAAO;CAG1D"}
+{"version":3,"file":"safe-rules-errors.d.ts","sourceRoot":"","sources":["../../../src/errors/safe/safe-rules-errors.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAC7C,OAAO,EAAE,SAAS,EAAE,MAAM,eAAe,CAAC;AAE1C;;GAEG;AACH,qBAAa,yCAA0C,SAAQ,SAAS;IACpE;;OAEG;gBACS,SAAS,EAAE,OAAO,EAAE,cAAc,EAAE,OAAO,EAAE,aAAa,EAAE,aAAa;CAGxF;AAED;;GAEG;AACH,qBAAa,qCAAsC,SAAQ,SAAS;IAChE;;OAEG;gBACS,SAAS,EAAE,OAAO,EAAE,cAAc,EAAE,OAAO,EAAE,aAAa,EAAE,aAAa;CAGxF;AAED;;GAEG;AACH,qBAAa,8CAA+C,SAAQ,SAAS;IACzE;;OAEG;gBACS,SAAS,EAAE,OAAO,EAAE,cAAc,EAAE,OAAO;CAG1D;AAED;;GAEG;AACH,qBAAa,gCAAiC,SAAQ,SAAS;IAC3D;;OAEG;gBACS,IAAI,EAAE,MAAM,EAAE,WAAW,CAAC,EAAE,MAAM;CAGjD;AAKD,qBAAa,+BAAgC,SAAQ,SAAS;gBAC9C,aAAa,EAAE,aAAa,EAAE,YAAY,EAAE,MAAM;CAGjE;AAGD;;GAEG;AACH,qBAAa,+BAAgC,SAAQ,SAAS;gBAC9C,cAAc,EAAE,OAAO;CAGtC;AAED;;GAEG;AACH,qBAAa,yCAA0C,SAAQ,SAAS;gBACxD,cAAc,EAAE,OAAO,EAAE,qBAAqB,EAAE,MAAM,EAAE,mBAAmB,EAAE,MAAM;CAGlG;AAED;;GAEG;AACH,qBAAa,+BAAgC,SAAQ,SAAS;gBAC9C,kBAAkB,EAAE,OAAO;CAG1C;AAGD;;GAEG;AACH,qBAAa,qCAAsC,SAAQ,SAAS;gBACpD,eAAe,EAAE,MAAM;CAGtC;AAED;;GAEG;AACH,qBAAa,+BAAgC,SAAQ,SAAS;gBAC9C,cAAc,EAAE,OAAO,EAAE,YAAY,EAAE,MAAM;CAG5D;AAED;;GAEG;AACH,qBAAa,kCAAmC,SAAQ,SAAS;gBACjD,aAAa,EAAE,OAAO;CAGrC;AAMD;;GAEG;AACH,qBAAa,sBAAuB,SAAQ,SAAS;gBACrC,cAAc,EAAE,OAAO;CAGtC;AAED;;GAEG;AACH,qBAAa,gCAAiC,SAAQ,SAAS;gBAC/C,cAAc,EAAE,OAAO,EAAE,qBAAqB,EAAE,MAAM,EAAE,mBAAmB,EAAE,MAAM;CAGlG;AAED;;GAEG;AACH,qBAAa,0BAA2B,SAAQ,SAAS;gBACzC,cAAc,EAAE,OAAO,EAAE,gBAAgB,EAAE,MAAM;CAGhE;AAED;;GAEG;AACH,qBAAa,8BAA+B,SAAQ,SAAS;gBAC7C,YAAY,EAAE,MAAM,EAAE,aAAa,EAAE,OAAO,EAAE,YAAY,EAAE,MAAM;CAGjF"}