@feedb2b-dev/service-auth 0.0.1 → 0.0.2

package/dist/index.d.ts

@@ -1,3 +1,3 @@
 export { ServiceAuthModule } from './service-auth.module';
-export { ServiceToken } from './service-token';
-export type { ServiceAuthModuleOptions } from './service-auth.options';
+export { ServiceAuth } from './service-auth';
+export type { ServiceAuthLogger, ServiceAuthModuleOptions, } from './service-auth.options';

package/dist/index.js

@@ -1,8 +1,8 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.ServiceToken = exports.ServiceAuthModule = void 0;
+exports.ServiceAuth = exports.ServiceAuthModule = void 0;
 var service_auth_module_1 = require("./service-auth.module");
 Object.defineProperty(exports, "ServiceAuthModule", { enumerable: true, get: function () { return service_auth_module_1.ServiceAuthModule; } });
-var service_token_1 = require("./service-token");
-Object.defineProperty(exports, "ServiceToken", { enumerable: true, get: function () { return service_token_1.ServiceToken; } });
+var service_auth_1 = require("./service-auth");
+Object.defineProperty(exports, "ServiceAuth", { enumerable: true, get: function () { return service_auth_1.ServiceAuth; } });
 //# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";;;AAAA,6DAA0D;AAAjD,wHAAA,iBAAiB,OAAA;AAC1B,iDAA+C;AAAtC,6GAAA,YAAY,OAAA"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";;;AAAA,6DAA0D;AAAjD,wHAAA,iBAAiB,OAAA;AAC1B,+CAA6C;AAApC,2GAAA,WAAW,OAAA"}

package/dist/service-auth.client.d.ts

@@ -1,4 +1,4 @@
-import { type ServiceAuthModuleOptions } from './service-auth.options';
+import { type ServiceAuthConfig } from './service-auth.options';
 export interface ServiceAuthTokenResponse {
     access_token: string;
     token_type: 'Bearer';
@@ -7,6 +7,6 @@ export interface ServiceAuthTokenResponse {
 export declare class ServiceAuthClient {
     private readonly options;
     private readonly http;
-    constructor(options: ServiceAuthModuleOptions);
+    constructor(options: ServiceAuthConfig);
     fetchToken(): Promise<ServiceAuthTokenResponse>;
 }

package/dist/service-auth.client.js

@@ -48,7 +48,6 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.ServiceAuthClient = void 0;
 const common_1 = require("@nestjs/common");
 const axios_1 = __importStar(require("axios"));
-const service_auth_module_definition_1 = require("./service-auth.module-definition");
 const service_auth_options_1 = require("./service-auth.options");
 const REQUEST_TIMEOUT_MS = 10_000;
 const MAX_BODY_BYTES = 64 * 1024;
@@ -58,9 +57,8 @@ let ServiceAuthClient = class ServiceAuthClient {
     http;
     constructor(options) {
         this.options = options;
-        (0, service_auth_options_1.assertServiceAuthOptions)(options);
         this.http = axios_1.default.create({
-            baseURL: options.authUrl.trim().replace(/\/+$/, ''),
+            baseURL: options.authUrl,
             timeout: REQUEST_TIMEOUT_MS,
             maxContentLength: MAX_BODY_BYTES,
             maxBodyLength: MAX_BODY_BYTES,
@@ -88,7 +86,7 @@ let ServiceAuthClient = class ServiceAuthClient {
 exports.ServiceAuthClient = ServiceAuthClient;
 exports.ServiceAuthClient = ServiceAuthClient = __decorate([
     (0, common_1.Injectable)(),
-    __param(0, (0, common_1.Inject)(service_auth_module_definition_1.MODULE_OPTIONS_TOKEN)),
+    __param(0, (0, common_1.Inject)(service_auth_options_1.SERVICE_AUTH_CONFIG)),
     __metadata("design:paramtypes", [Object])
 ], ServiceAuthClient);
 class InvalidTokenResponseError extends Error {

package/dist/service-auth.client.js.map

@@ -1 +1 @@
-{"version":3,"file":"service-auth.client.js","sourceRoot":"","sources":["../src/service-auth.client.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,2CAAoD;AACpD,+CAA2D;AAC3D,qFAAwE;AACxE,iEAGgC;AAEhC,MAAM,kBAAkB,GAAG,MAAM,CAAC;AAClC,MAAM,cAAc,GAAG,EAAE,GAAG,IAAI,CAAC;AACjC,MAAM,qBAAqB,GAAG,cAAc,CAAC;AAStC,IAAM,iBAAiB,GAAvB,MAAM,iBAAiB;IAKT;IAJF,IAAI,CAAgB;IAErC,YAEmB,OAAiC;QAAjC,YAAO,GAAP,OAAO,CAA0B;QAElD,IAAA,+CAAwB,EAAC,OAAO,CAAC,CAAC;QAClC,IAAI,CAAC,IAAI,GAAG,eAAK,CAAC,MAAM,CAAC;YACvB,OAAO,EAAE,OAAO,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC;YACnD,OAAO,EAAE,kBAAkB;YAC3B,gBAAgB,EAAE,cAAc;YAChC,aAAa,EAAE,cAAc;YAC7B,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;SAChD,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,UAAU;QACd,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,IAAI,CAAU,cAAc,EAAE;gBAC7D,UAAU,EAAE,oBAAoB;gBAChC,QAAQ,EAAE,qBAAqB;gBAC/B,SAAS,EAAE,IAAI,CAAC,OAAO,CAAC,SAAS;gBACjC,aAAa,EAAE,IAAI,CAAC,OAAO,CAAC,aAAa;aAC1C,CAAC,CAAC;YACH,OAAO,kBAAkB,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;QAC3C,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,KAAK,YAAY,yBAAyB,EAAE,CAAC;gBAC/C,MAAM,KAAK,CAAC;YACd,CAAC;YACD,MAAM,IAAI,KAAK,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC,CAAC;QACzC,CAAC;IACH,CAAC;CACF,CAAA;AAjCY,8CAAiB;4BAAjB,iBAAiB;IAD7B,IAAA,mBAAU,GAAE;IAKR,WAAA,IAAA,eAAM,EAAC,qDAAoB,CAAC,CAAA;;GAJpB,iBAAiB,CAiC7B;AAED,MAAM,yBAA0B,SAAQ,KAAK;IAC3C;QACE,KAAK,CAAC,iDAAiD,CAAC,CAAC;IAC3D,CAAC;CACF;AAED,SAAS,kBAAkB,CAAC,IAAa;IACvC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QACpB,MAAM,IAAI,yBAAyB,EAAE,CAAC;IACxC,CAAC;IACD,MAAM,WAAW,GAAG,IAAI,CAAC,YAAY,CAAC;IACtC,MAAM,SAAS,GAAG,IAAI,CAAC,UAAU,CAAC;IAClC,MAAM,SAAS,GAAG,IAAI,CAAC,UAAU,CAAC;IAClC,IACE,OAAO,WAAW,KAAK,QAAQ;QAC/B,WAAW,CAAC,MAAM,KAAK,CAAC;QACxB,SAAS,KAAK,QAAQ;QACtB,OAAO,SAAS,KAAK,QAAQ;QAC7B,CAAC,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC,EAC3B,CAAC;QACD,MAAM,IAAI,yBAAyB,EAAE,CAAC;IACxC,CAAC;IACD,OAAO;QACL,YAAY,EAAE,WAAW;QACzB,UAAU,EAAE,QAAQ;QACpB,UAAU,EAAE,SAAS;KACtB,CAAC;AACJ,CAAC;AAED,SAAS,QAAQ,CAAC,KAAc;IAC9B,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,CAAC;AACrD,CAAC;AAED,SAAS,cAAc,CAAC,KAAc;IACpC,IAAI,IAAA,oBAAY,EAAC,KAAK,CAAC,IAAI,OAAO,KAAK,CAAC,QAAQ,EAAE,MAAM,KAAK,QAAQ,EAAE,CAAC;QACtE,OAAO,4CAA4C,KAAK,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC;IAC7E,CAAC;IACD,OAAO,8BAA8B,CAAC;AACxC,CAAC"}
+{"version":3,"file":"service-auth.client.js","sourceRoot":"","sources":["../src/service-auth.client.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,2CAAoD;AACpD,+CAA2D;AAC3D,iEAGgC;AAEhC,MAAM,kBAAkB,GAAG,MAAM,CAAC;AAClC,MAAM,cAAc,GAAG,EAAE,GAAG,IAAI,CAAC;AACjC,MAAM,qBAAqB,GAAG,cAAc,CAAC;AAStC,IAAM,iBAAiB,GAAvB,MAAM,iBAAiB;IAKT;IAJF,IAAI,CAAgB;IAErC,YAEmB,OAA0B;QAA1B,YAAO,GAAP,OAAO,CAAmB;QAE3C,IAAI,CAAC,IAAI,GAAG,eAAK,CAAC,MAAM,CAAC;YACvB,OAAO,EAAE,OAAO,CAAC,OAAO;YACxB,OAAO,EAAE,kBAAkB;YAC3B,gBAAgB,EAAE,cAAc;YAChC,aAAa,EAAE,cAAc;YAC7B,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;SAChD,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,UAAU;QACd,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,IAAI,CAAU,cAAc,EAAE;gBAC7D,UAAU,EAAE,oBAAoB;gBAChC,QAAQ,EAAE,qBAAqB;gBAC/B,SAAS,EAAE,IAAI,CAAC,OAAO,CAAC,SAAS;gBACjC,aAAa,EAAE,IAAI,CAAC,OAAO,CAAC,aAAa;aAC1C,CAAC,CAAC;YACH,OAAO,kBAAkB,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;QAC3C,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,KAAK,YAAY,yBAAyB,EAAE,CAAC;gBAC/C,MAAM,KAAK,CAAC;YACd,CAAC;YACD,MAAM,IAAI,KAAK,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC,CAAC;QACzC,CAAC;IACH,CAAC;CACF,CAAA;AAhCY,8CAAiB;4BAAjB,iBAAiB;IAD7B,IAAA,mBAAU,GAAE;IAKR,WAAA,IAAA,eAAM,EAAC,0CAAmB,CAAC,CAAA;;GAJnB,iBAAiB,CAgC7B;AAED,MAAM,yBAA0B,SAAQ,KAAK;IAC3C;QACE,KAAK,CAAC,iDAAiD,CAAC,CAAC;IAC3D,CAAC;CACF;AAED,SAAS,kBAAkB,CAAC,IAAa;IACvC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QACpB,MAAM,IAAI,yBAAyB,EAAE,CAAC;IACxC,CAAC;IACD,MAAM,WAAW,GAAG,IAAI,CAAC,YAAY,CAAC;IACtC,MAAM,SAAS,GAAG,IAAI,CAAC,UAAU,CAAC;IAClC,MAAM,SAAS,GAAG,IAAI,CAAC,UAAU,CAAC;IAClC,IACE,OAAO,WAAW,KAAK,QAAQ;QAC/B,WAAW,CAAC,MAAM,KAAK,CAAC;QACxB,SAAS,KAAK,QAAQ;QACtB,OAAO,SAAS,KAAK,QAAQ;QAC7B,CAAC,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC,EAC3B,CAAC;QACD,MAAM,IAAI,yBAAyB,EAAE,CAAC;IACxC,CAAC;IACD,OAAO;QACL,YAAY,EAAE,WAAW;QACzB,UAAU,EAAE,QAAQ;QACpB,UAAU,EAAE,SAAS;KACtB,CAAC;AACJ,CAAC;AAED,SAAS,QAAQ,CAAC,KAAc;IAC9B,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,CAAC;AACrD,CAAC;AAED,SAAS,cAAc,CAAC,KAAc;IACpC,IAAI,IAAA,oBAAY,EAAC,KAAK,CAAC,IAAI,OAAO,KAAK,CAAC,QAAQ,EAAE,MAAM,KAAK,QAAQ,EAAE,CAAC;QACtE,OAAO,4CAA4C,KAAK,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC;IAC7E,CAAC;IACD,OAAO,8BAA8B,CAAC;AACxC,CAAC"}

package/dist/service-auth.d.ts

@@ -0,0 +1,12 @@
+export interface ServiceAuthCredentials {
+    token: string | null;
+    tokenType: string | null;
+    fullToken: string;
+}
+export declare class ServiceAuth {
+    constructor();
+    get token(): string | null;
+    get tokenType(): string | null;
+    get fullToken(): string;
+}
+export declare function writeServiceAuth(serviceAuth: ServiceAuth, next: ServiceAuthCredentials): void;

package/dist/service-auth.js

@@ -0,0 +1,50 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ServiceAuth = void 0;
+exports.writeServiceAuth = writeServiceAuth;
+const common_1 = require("@nestjs/common");
+const EMPTY_CREDENTIALS = {
+    token: null,
+    tokenType: null,
+    fullToken: '',
+};
+const credentials = new WeakMap();
+let ServiceAuth = class ServiceAuth {
+    constructor() {
+        credentials.set(this, EMPTY_CREDENTIALS);
+    }
+    get token() {
+        return current(this).token;
+    }
+    get tokenType() {
+        return current(this).tokenType;
+    }
+    get fullToken() {
+        return current(this).fullToken;
+    }
+};
+exports.ServiceAuth = ServiceAuth;
+exports.ServiceAuth = ServiceAuth = __decorate([
+    (0, common_1.Injectable)(),
+    __metadata("design:paramtypes", [])
+], ServiceAuth);
+function writeServiceAuth(serviceAuth, next) {
+    credentials.set(serviceAuth, {
+        token: next.token,
+        tokenType: next.tokenType,
+        fullToken: next.fullToken,
+    });
+}
+function current(serviceAuth) {
+    return credentials.get(serviceAuth) ?? EMPTY_CREDENTIALS;
+}
+//# sourceMappingURL=service-auth.js.map

package/dist/service-auth.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"service-auth.js","sourceRoot":"","sources":["../src/service-auth.ts"],"names":[],"mappings":";;;;;;;;;;;;AAmCA,4CASC;AA5CD,2CAA4C;AAQ5C,MAAM,iBAAiB,GAA2B;IAChD,KAAK,EAAE,IAAI;IACX,SAAS,EAAE,IAAI;IACf,SAAS,EAAE,EAAE;CACd,CAAC;AAEF,MAAM,WAAW,GAAG,IAAI,OAAO,EAAuC,CAAC;AAGhE,IAAM,WAAW,GAAjB,MAAM,WAAW;IACtB;QACE,WAAW,CAAC,GAAG,CAAC,IAAI,EAAE,iBAAiB,CAAC,CAAC;IAC3C,CAAC;IAED,IAAI,KAAK;QACP,OAAO,OAAO,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC;IAC7B,CAAC;IAED,IAAI,SAAS;QACX,OAAO,OAAO,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC;IACjC,CAAC;IAED,IAAI,SAAS;QACX,OAAO,OAAO,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC;IACjC,CAAC;CACF,CAAA;AAhBY,kCAAW;sBAAX,WAAW;IADvB,IAAA,mBAAU,GAAE;;GACA,WAAW,CAgBvB;AAED,SAAgB,gBAAgB,CAC9B,WAAwB,EACxB,IAA4B;IAE5B,WAAW,CAAC,GAAG,CAAC,WAAW,EAAE;QAC3B,KAAK,EAAE,IAAI,CAAC,KAAK;QACjB,SAAS,EAAE,IAAI,CAAC,SAAS;QACzB,SAAS,EAAE,IAAI,CAAC,SAAS;KAC1B,CAAC,CAAC;AACL,CAAC;AAED,SAAS,OAAO,CAAC,WAAwB;IACvC,OAAO,WAAW,CAAC,GAAG,CAAC,WAAW,CAAC,IAAI,iBAAiB,CAAC;AAC3D,CAAC"}

package/dist/service-auth.module.js

@@ -8,11 +8,12 @@ var __decorate = (this && this.__decorate) || function (decorators, target, key,
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.ServiceAuthModule = void 0;
 const common_1 = require("@nestjs/common");
+const service_auth_1 = require("./service-auth");
 const service_auth_client_1 = require("./service-auth.client");
 const service_auth_controller_1 = require("./service-auth.controller");
 const service_auth_module_definition_1 = require("./service-auth.module-definition");
 const service_auth_service_1 = require("./service-auth.service");
-const service_token_1 = require("./service-token");
+const service_auth_options_1 = require("./service-auth.options");
 let ServiceAuthModule = class ServiceAuthModule extends service_auth_module_definition_1.ConfigurableModuleClass {
 };
 exports.ServiceAuthModule = ServiceAuthModule;
@@ -20,8 +21,17 @@ exports.ServiceAuthModule = ServiceAuthModule = __decorate([
     (0, common_1.Global)(),
     (0, common_1.Module)({
         controllers: [service_auth_controller_1.ServiceAuthController],
-        providers: [service_auth_client_1.ServiceAuthClient, service_auth_service_1.ServiceAuthService, service_token_1.ServiceToken],
-        exports: [service_token_1.ServiceToken],
+        providers: [
+            service_auth_1.ServiceAuth,
+            {
+                provide: service_auth_options_1.SERVICE_AUTH_CONFIG,
+                inject: [service_auth_module_definition_1.MODULE_OPTIONS_TOKEN],
+                useFactory: (options) => (0, service_auth_options_1.normalizeServiceAuthOptions)(options),
+            },
+            service_auth_client_1.ServiceAuthClient,
+            service_auth_service_1.ServiceAuthService,
+        ],
+        exports: [service_auth_1.ServiceAuth],
     })
 ], ServiceAuthModule);
 //# sourceMappingURL=service-auth.module.js.map

package/dist/service-auth.module.js.map

@@ -1 +1 @@
-{"version":3,"file":"service-auth.module.js","sourceRoot":"","sources":["../src/service-auth.module.ts"],"names":[],"mappings":";;;;;;;;;AAAA,2CAAgD;AAChD,+DAA0D;AAC1D,uEAAkE;AAClE,qFAA2E;AAC3E,iEAA4D;AAC5D,mDAA+C;AAQxC,IAAM,iBAAiB,GAAvB,MAAM,iBAAkB,SAAQ,wDAAuB;CAAG,CAAA;AAApD,8CAAiB;4BAAjB,iBAAiB;IAN7B,IAAA,eAAM,GAAE;IACR,IAAA,eAAM,EAAC;QACN,WAAW,EAAE,CAAC,+CAAqB,CAAC;QACpC,SAAS,EAAE,CAAC,uCAAiB,EAAE,yCAAkB,EAAE,4BAAY,CAAC;QAChE,OAAO,EAAE,CAAC,4BAAY,CAAC;KACxB,CAAC;GACW,iBAAiB,CAAmC"}
+{"version":3,"file":"service-auth.module.js","sourceRoot":"","sources":["../src/service-auth.module.ts"],"names":[],"mappings":";;;;;;;;;AAAA,2CAAgD;AAChD,iDAA6C;AAC7C,+DAA0D;AAC1D,uEAAkE;AAClE,qFAG0C;AAC1C,iEAA4D;AAC5D,iEAIgC;AAkBzB,IAAM,iBAAiB,GAAvB,MAAM,iBAAkB,SAAQ,wDAAuB;CAAG,CAAA;AAApD,8CAAiB;4BAAjB,iBAAiB;IAhB7B,IAAA,eAAM,GAAE;IACR,IAAA,eAAM,EAAC;QACN,WAAW,EAAE,CAAC,+CAAqB,CAAC;QACpC,SAAS,EAAE;YACT,0BAAW;YACX;gBACE,OAAO,EAAE,0CAAmB;gBAC5B,MAAM,EAAE,CAAC,qDAAoB,CAAC;gBAC9B,UAAU,EAAE,CAAC,OAAiC,EAAE,EAAE,CAChD,IAAA,kDAA2B,EAAC,OAAO,CAAC;aACvC;YACD,uCAAiB;YACjB,yCAAkB;SACnB;QACD,OAAO,EAAE,CAAC,0BAAW,CAAC;KACvB,CAAC;GACW,iBAAiB,CAAmC"}

package/dist/service-auth.options.d.ts

@@ -1,8 +1,38 @@
+export declare const SERVICE_AUTH_CONFIG: unique symbol;
+export declare const DEFAULT_REQUEST_INTERVAL_SECONDS: number;
+export declare const MIN_REQUEST_INTERVAL_SECONDS: number;
+export declare const MAX_REQUEST_INTERVAL_SECONDS: number;
+export declare const MAX_RETRY_ATTEMPTS = 10;
+export declare const EXPIRY_MARGIN_SECONDS = 60;
+export interface ServiceAuthLogger {
+    log(...args: unknown[]): void;
+    info(...args: unknown[]): void;
+    warn(...args: unknown[]): void;
+    error(...args: unknown[]): void;
+    debug(...args: unknown[]): void;
+    verbose(...args: unknown[]): void;
+}
 export interface ServiceAuthModuleOptions {
     env?: string;
     authUrl: string;
     serviceId: string;
     serviceSecret: string;
-    shadowToken?: string;
+    shadowToken?: unknown;
+    requestInterval?: unknown;
+    retry?: unknown;
+    logger?: ServiceAuthLogger;
+}
+export interface ServiceAuthConfig {
+    env: string;
+    local: boolean;
+    authUrl: string;
+    serviceId: string;
+    serviceSecret: string;
+    shadowToken: string | null;
+    requestInterval: number;
+    retry: number;
+    logger: ServiceAuthLogger;
 }
-export declare function assertServiceAuthOptions(options: ServiceAuthModuleOptions): void;
+export declare function normalizeServiceAuthOptions(options: ServiceAuthModuleOptions): ServiceAuthConfig;
+export declare function formatDuration(seconds: number): string;
+export declare function expirationTooSmallMessage(expiresIn: number, requestInterval: number): string;

package/dist/service-auth.options.js

@@ -1,8 +1,18 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.assertServiceAuthOptions = assertServiceAuthOptions;
+exports.EXPIRY_MARGIN_SECONDS = exports.MAX_RETRY_ATTEMPTS = exports.MAX_REQUEST_INTERVAL_SECONDS = exports.MIN_REQUEST_INTERVAL_SECONDS = exports.DEFAULT_REQUEST_INTERVAL_SECONDS = exports.SERVICE_AUTH_CONFIG = void 0;
+exports.normalizeServiceAuthOptions = normalizeServiceAuthOptions;
+exports.formatDuration = formatDuration;
+exports.expirationTooSmallMessage = expirationTooSmallMessage;
+const common_1 = require("@nestjs/common");
+exports.SERVICE_AUTH_CONFIG = Symbol('SERVICE_AUTH_CONFIG');
+exports.DEFAULT_REQUEST_INTERVAL_SECONDS = 59 * 60;
+exports.MIN_REQUEST_INTERVAL_SECONDS = 5 * 60;
+exports.MAX_REQUEST_INTERVAL_SECONDS = 24 * 60 * 60;
+exports.MAX_RETRY_ATTEMPTS = 10;
+exports.EXPIRY_MARGIN_SECONDS = 60;
 const REQUIRED_OPTIONS = ['authUrl', 'serviceId', 'serviceSecret'];
-function assertServiceAuthOptions(options) {
+function normalizeServiceAuthOptions(options) {
     const missing = REQUIRED_OPTIONS.filter((key) => {
         const value = options?.[key];
         return typeof value !== 'string' || value.trim() === '';
@@ -10,5 +20,129 @@ function assertServiceAuthOptions(options) {
     if (missing.length > 0) {
         throw new Error(`ServiceAuthModule requires ${missing.join(', ')}`);
     }
+    const logger = resolveLogger(options.logger);
+    const env = normalizeEnv(options.env);
+    const requestInterval = clampInterval(parseOptionalNumber(options.requestInterval, 'requestInterval'), logger);
+    const retry = clampRetry(parseOptionalNumber(options.retry, 'retry'), logger);
+    return {
+        env,
+        local: env === 'local',
+        authUrl: options.authUrl.trim().replace(/\/+$/, ''),
+        serviceId: options.serviceId.trim(),
+        serviceSecret: options.serviceSecret.trim(),
+        shadowToken: normalizeShadowToken(options.shadowToken),
+        requestInterval,
+        retry,
+        logger,
+    };
+}
+function formatDuration(seconds) {
+    const minutes = seconds / 60;
+    const minuteText = Number.isInteger(minutes)
+        ? String(minutes)
+        : minutes.toFixed(2);
+    const minuteWord = Math.abs(minutes) === 1 ? 'minute' : 'minutes';
+    const secondWord = Math.abs(seconds) === 1 ? 'second' : 'seconds';
+    return `${minuteText} ${minuteWord} (${seconds} ${secondWord})`;
+}
+function expirationTooSmallMessage(expiresIn, requestInterval) {
+    return ('Received token expiration is too small for the current service schedule. ' +
+        `The expiration is ${formatDuration(expiresIn)} and the schedule interval is ${formatDuration(requestInterval)}. ` +
+        `The expiration must be at least ${formatDuration(exports.EXPIRY_MARGIN_SECONDS)} longer than the schedule interval.`);
+}
+function normalizeEnv(env) {
+    if (typeof env !== 'string') {
+        return '';
+    }
+    return env.trim().toLowerCase();
+}
+function normalizeShadowToken(value) {
+    if (isFalsyShadow(value)) {
+        return null;
+    }
+    if (typeof value !== 'string') {
+        throw new Error('ServiceAuthModule shadowToken must be a string');
+    }
+    const trimmed = value.trim();
+    return trimmed === '' ? null : trimmed;
+}
+function isFalsyShadow(value) {
+    return (value === undefined ||
+        value === null ||
+        value === false ||
+        value === 0 ||
+        value === '');
+}
+function parseOptionalNumber(value, name) {
+    if (value === undefined || value === null || value === '') {
+        return undefined;
+    }
+    const raw = typeof value === 'string' ? value.trim() : value;
+    if (raw === '') {
+        return undefined;
+    }
+    if (typeof raw !== 'number' && typeof raw !== 'string') {
+        throw new Error(`ServiceAuthModule ${name} must be a number`);
+    }
+    const parsed = typeof raw === 'number' ? raw : Number(raw);
+    if (!Number.isFinite(parsed)) {
+        throw new Error(`ServiceAuthModule ${name} must be a number`);
+    }
+    return Math.floor(parsed);
+}
+function clampInterval(value, logger) {
+    if (value === undefined) {
+        return exports.DEFAULT_REQUEST_INTERVAL_SECONDS;
+    }
+    if (value < exports.MIN_REQUEST_INTERVAL_SECONDS) {
+        logger.warn(`requestInterval ${formatDuration(value)} is below the minimum. Using ${formatDuration(exports.MIN_REQUEST_INTERVAL_SECONDS)}.`);
+        return exports.MIN_REQUEST_INTERVAL_SECONDS;
+    }
+    if (value > exports.MAX_REQUEST_INTERVAL_SECONDS) {
+        logger.warn(`requestInterval ${formatDuration(value)} is above the maximum. Using ${formatDuration(exports.MAX_REQUEST_INTERVAL_SECONDS)}.`);
+        return exports.MAX_REQUEST_INTERVAL_SECONDS;
+    }
+    return value;
+}
+function clampRetry(value, logger) {
+    if (value === undefined) {
+        return 0;
+    }
+    if (value < 0) {
+        logger.warn(`retry ${value} is below the minimum. No retry attempts will be made.`);
+        return 0;
+    }
+    if (value > exports.MAX_RETRY_ATTEMPTS) {
+        logger.warn(`retry ${value} is above the maximum. Using ${exports.MAX_RETRY_ATTEMPTS} retry attempts.`);
+        return exports.MAX_RETRY_ATTEMPTS;
+    }
+    return value;
+}
+function resolveLogger(logger) {
+    if (logger === undefined || logger === null) {
+        return nestLoggerAdapter();
+    }
+    if (typeof logger.info !== 'function' ||
+        typeof logger.warn !== 'function' ||
+        typeof logger.error !== 'function') {
+        throw new Error('ServiceAuthModule logger must implement info, warn, and error');
+    }
+    return logger;
+}
+function nestLoggerAdapter() {
+    const logger = new common_1.Logger('ServiceAuth');
+    return {
+        log: (...args) => logger.log(message(args)),
+        info: (...args) => logger.log(message(args)),
+        warn: (...args) => logger.warn(message(args)),
+        error: (...args) => logger.error(message(args)),
+        debug: (...args) => logger.debug(message(args)),
+        verbose: (...args) => logger.verbose(message(args)),
+    };
+}
+function message(args) {
+    return args
+        .map((arg) => (typeof arg === 'string' ? arg : String(arg)))
+        .join(' ');
 }
 //# sourceMappingURL=service-auth.options.js.map

package/dist/service-auth.options.js.map

@@ -1 +1 @@
-{"version":3,"file":"service-auth.options.js","sourceRoot":"","sources":["../src/service-auth.options.ts"],"names":[],"mappings":";;AAUA,4DAUC;AAZD,MAAM,gBAAgB,GAAG,CAAC,SAAS,EAAE,WAAW,EAAE,eAAe,CAAU,CAAC;AAE5E,SAAgB,wBAAwB,CACtC,OAAiC;IAEjC,MAAM,OAAO,GAAG,gBAAgB,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE;QAC9C,MAAM,KAAK,GAAG,OAAO,EAAE,CAAC,GAAG,CAAC,CAAC;QAC7B,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC;IAC1D,CAAC,CAAC,CAAC;IACH,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACvB,MAAM,IAAI,KAAK,CAAC,8BAA8B,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACtE,CAAC;AACH,CAAC"}
+{"version":3,"file":"service-auth.options.js","sourceRoot":"","sources":["../src/service-auth.options.ts"],"names":[],"mappings":";;;AA0FA,kEA8BC;AAED,wCAQC;AAED,8DASC;AA7ID,2CAAwC;AAE3B,QAAA,mBAAmB,GAAG,MAAM,CAAC,qBAAqB,CAAC,CAAC;AAEpD,QAAA,gCAAgC,GAAG,EAAE,GAAG,EAAE,CAAC;AAC3C,QAAA,4BAA4B,GAAG,CAAC,GAAG,EAAE,CAAC;AACtC,QAAA,4BAA4B,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC;AAC5C,QAAA,kBAAkB,GAAG,EAAE,CAAC;AACxB,QAAA,qBAAqB,GAAG,EAAE,CAAC;AAExC,MAAM,gBAAgB,GAAG,CAAC,SAAS,EAAE,WAAW,EAAE,eAAe,CAAU,CAAC;AAgF5E,SAAgB,2BAA2B,CACzC,OAAiC;IAEjC,MAAM,OAAO,GAAG,gBAAgB,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE;QAC9C,MAAM,KAAK,GAAG,OAAO,EAAE,CAAC,GAAG,CAAC,CAAC;QAC7B,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC;IAC1D,CAAC,CAAC,CAAC;IACH,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACvB,MAAM,IAAI,KAAK,CAAC,8BAA8B,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACtE,CAAC;IAED,MAAM,MAAM,GAAG,aAAa,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IAC7C,MAAM,GAAG,GAAG,YAAY,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IACtC,MAAM,eAAe,GAAG,aAAa,CACnC,mBAAmB,CAAC,OAAO,CAAC,eAAe,EAAE,iBAAiB,CAAC,EAC/D,MAAM,CACP,CAAC;IACF,MAAM,KAAK,GAAG,UAAU,CAAC,mBAAmB,CAAC,OAAO,CAAC,KAAK,EAAE,OAAO,CAAC,EAAE,MAAM,CAAC,CAAC;IAE9E,OAAO;QACL,GAAG;QACH,KAAK,EAAE,GAAG,KAAK,OAAO;QACtB,OAAO,EAAE,OAAO,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC;QACnD,SAAS,EAAE,OAAO,CAAC,SAAS,CAAC,IAAI,EAAE;QACnC,aAAa,EAAE,OAAO,CAAC,aAAa,CAAC,IAAI,EAAE;QAC3C,WAAW,EAAE,oBAAoB,CAAC,OAAO,CAAC,WAAW,CAAC;QACtD,eAAe;QACf,KAAK;QACL,MAAM;KACP,CAAC;AACJ,CAAC;AAED,SAAgB,cAAc,CAAC,OAAe;IAC5C,MAAM,OAAO,GAAG,OAAO,GAAG,EAAE,CAAC;IAC7B,MAAM,UAAU,GAAG,MAAM,CAAC,SAAS,CAAC,OAAO,CAAC;QAC1C,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC;QACjB,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;IACvB,MAAM,UAAU,GAAG,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;IAClE,MAAM,UAAU,GAAG,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;IAClE,OAAO,GAAG,UAAU,IAAI,UAAU,KAAK,OAAO,IAAI,UAAU,GAAG,CAAC;AAClE,CAAC;AAED,SAAgB,yBAAyB,CACvC,SAAiB,EACjB,eAAuB;IAEvB,OAAO,CACL,2EAA2E;QAC3E,qBAAqB,cAAc,CAAC,SAAS,CAAC,iCAAiC,cAAc,CAAC,eAAe,CAAC,IAAI;QAClH,mCAAmC,cAAc,CAAC,6BAAqB,CAAC,qCAAqC,CAC9G,CAAC;AACJ,CAAC;AAED,SAAS,YAAY,CAAC,GAAY;IAChC,IAAI,OAAO,GAAG,KAAK,QAAQ,EAAE,CAAC;QAC5B,OAAO,EAAE,CAAC;IACZ,CAAC;IACD,OAAO,GAAG,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;AAClC,CAAC;AAED,SAAS,oBAAoB,CAAC,KAAc;IAC1C,IAAI,aAAa,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,MAAM,IAAI,KAAK,CAAC,gDAAgD,CAAC,CAAC;IACpE,CAAC;IACD,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;IAC7B,OAAO,OAAO,KAAK,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC;AACzC,CAAC;AAED,SAAS,aAAa,CAAC,KAAc;IACnC,OAAO,CACL,KAAK,KAAK,SAAS;QACnB,KAAK,KAAK,IAAI;QACd,KAAK,KAAK,KAAK;QACf,KAAK,KAAK,CAAC;QACX,KAAK,KAAK,EAAE,CACb,CAAC;AACJ,CAAC;AAED,SAAS,mBAAmB,CAAC,KAAc,EAAE,IAAY;IACvD,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,EAAE,EAAE,CAAC;QAC1D,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,MAAM,GAAG,GAAG,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC;IAC7D,IAAI,GAAG,KAAK,EAAE,EAAE,CAAC;QACf,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,OAAO,GAAG,KAAK,QAAQ,EAAE,CAAC;QACvD,MAAM,IAAI,KAAK,CAAC,qBAAqB,IAAI,mBAAmB,CAAC,CAAC;IAChE,CAAC;IACD,MAAM,MAAM,GAAG,OAAO,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IAC3D,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;QAC7B,MAAM,IAAI,KAAK,CAAC,qBAAqB,IAAI,mBAAmB,CAAC,CAAC;IAChE,CAAC;IACD,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;AAC5B,CAAC;AAED,SAAS,aAAa,CACpB,KAAyB,EACzB,MAAyB;IAEzB,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;QACxB,OAAO,wCAAgC,CAAC;IAC1C,CAAC;IACD,IAAI,KAAK,GAAG,oCAA4B,EAAE,CAAC;QACzC,MAAM,CAAC,IAAI,CACT,mBAAmB,cAAc,CAAC,KAAK,CAAC,gCAAgC,cAAc,CAAC,oCAA4B,CAAC,GAAG,CACxH,CAAC;QACF,OAAO,oCAA4B,CAAC;IACtC,CAAC;IACD,IAAI,KAAK,GAAG,oCAA4B,EAAE,CAAC;QACzC,MAAM,CAAC,IAAI,CACT,mBAAmB,cAAc,CAAC,KAAK,CAAC,gCAAgC,cAAc,CAAC,oCAA4B,CAAC,GAAG,CACxH,CAAC;QACF,OAAO,oCAA4B,CAAC;IACtC,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,UAAU,CACjB,KAAyB,EACzB,MAAyB;IAEzB,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;QACxB,OAAO,CAAC,CAAC;IACX,CAAC;IACD,IAAI,KAAK,GAAG,CAAC,EAAE,CAAC;QACd,MAAM,CAAC,IAAI,CACT,SAAS,KAAK,wDAAwD,CACvE,CAAC;QACF,OAAO,CAAC,CAAC;IACX,CAAC;IACD,IAAI,KAAK,GAAG,0BAAkB,EAAE,CAAC;QAC/B,MAAM,CAAC,IAAI,CACT,SAAS,KAAK,gCAAgC,0BAAkB,kBAAkB,CACnF,CAAC;QACF,OAAO,0BAAkB,CAAC;IAC5B,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,aAAa,CACpB,MAAqC;IAErC,IAAI,MAAM,KAAK,SAAS,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;QAC5C,OAAO,iBAAiB,EAAE,CAAC;IAC7B,CAAC;IACD,IACE,OAAO,MAAM,CAAC,IAAI,KAAK,UAAU;QACjC,OAAO,MAAM,CAAC,IAAI,KAAK,UAAU;QACjC,OAAO,MAAM,CAAC,KAAK,KAAK,UAAU,EAClC,CAAC;QACD,MAAM,IAAI,KAAK,CACb,+DAA+D,CAChE,CAAC;IACJ,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,iBAAiB;IACxB,MAAM,MAAM,GAAG,IAAI,eAAM,CAAC,aAAa,CAAC,CAAC;IACzC,OAAO;QACL,GAAG,EAAE,CAAC,GAAG,IAAI,EAAE,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QAC3C,IAAI,EAAE,CAAC,GAAG,IAAI,EAAE,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QAC5C,IAAI,EAAE,CAAC,GAAG,IAAI,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QAC7C,KAAK,EAAE,CAAC,GAAG,IAAI,EAAE,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QAC/C,KAAK,EAAE,CAAC,GAAG,IAAI,EAAE,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QAC/C,OAAO,EAAE,CAAC,GAAG,IAAI,EAAE,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;KACpD,CAAC;AACJ,CAAC;AAED,SAAS,OAAO,CAAC,IAAe;IAC9B,OAAO,IAAI;SACR,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,OAAO,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;SAC3D,IAAI,CAAC,GAAG,CAAC,CAAC;AACf,CAAC"}

package/dist/service-auth.service.d.ts

@@ -1,19 +1,25 @@
 import { OnModuleDestroy, OnModuleInit } from '@nestjs/common';
+import { ServiceAuth } from './service-auth';
 import { ServiceAuthClient, ServiceAuthTokenResponse } from './service-auth.client';
-import { ServiceToken } from './service-token';
+import { type ServiceAuthConfig } from './service-auth.options';
 export declare class ServiceAuthService implements OnModuleInit, OnModuleDestroy {
+    private readonly config;
     private readonly client;
-    private readonly serviceToken;
-    private readonly logger;
+    private readonly serviceAuth;
     private timer?;
     private inflight?;
-    private acquired;
     private closed;
-    constructor(client: ServiceAuthClient, serviceToken: ServiceToken);
-    onModuleInit(): Promise<ServiceAuthTokenResponse>;
+    private shadowActive;
+    constructor(config: ServiceAuthConfig, client: ServiceAuthClient, serviceAuth: ServiceAuth);
+    onModuleInit(): Promise<void>;
     onModuleDestroy(): void;
     refresh(): Promise<ServiceAuthTokenResponse>;
     private execute;
+    private requestWithRetries;
+    private store;
+    private applyShadow;
+    private logStartup;
     private scheduleNext;
     private clearTimer;
+    private failAndStop;
 }

package/dist/service-auth.service.js

@@ -8,28 +8,36 @@ var __decorate = (this && this.__decorate) || function (decorators, target, key,
 var __metadata = (this && this.__metadata) || function (k, v) {
     if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
 };
-var ServiceAuthService_1;
+var __param = (this && this.__param) || function (paramIndex, decorator) {
+    return function (target, key) { decorator(target, key, paramIndex); }
+};
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.ServiceAuthService = void 0;
 const common_1 = require("@nestjs/common");
+const service_auth_1 = require("./service-auth");
 const service_auth_client_1 = require("./service-auth.client");
-const service_token_1 = require("./service-token");
-const MIN_DELAY_MS = 5_000;
-const EXPIRY_MARGIN_SECONDS = 60;
-let ServiceAuthService = ServiceAuthService_1 = class ServiceAuthService {
+const service_auth_options_1 = require("./service-auth.options");
+const RETRY_DELAY_MS = 1000;
+let ServiceAuthService = class ServiceAuthService {
+    config;
     client;
-    serviceToken;
-    logger = new common_1.Logger(ServiceAuthService_1.name);
+    serviceAuth;
     timer;
     inflight;
-    acquired = false;
     closed = false;
-    constructor(client, serviceToken) {
+    shadowActive = false;
+    constructor(config, client, serviceAuth) {
+        this.config = config;
         this.client = client;
-        this.serviceToken = serviceToken;
+        this.serviceAuth = serviceAuth;
     }
     onModuleInit() {
-        return this.refresh();
+        this.logStartup();
+        if (this.config.local) {
+            this.applyShadow();
+            return Promise.resolve();
+        }
+        return this.refresh().then(() => undefined);
     }
     onModuleDestroy() {
         this.closed = true;
@@ -55,34 +63,96 @@ let ServiceAuthService = ServiceAuthService_1 = class ServiceAuthService {
     }
     async execute() {
         try {
-            const response = await this.client.fetchToken();
+            const response = await this.requestWithRetries();
             if (this.closed) {
                 return response;
             }
-            this.serviceToken.set(response.access_token);
-            this.acquired = true;
-            this.scheduleNext(response.expires_in);
+            this.store(response);
+            if (!this.config.local) {
+                this.scheduleNext();
+            }
             return response;
         }
         catch (error) {
-            const failure = toFailure(error);
-            if (this.closed || !this.acquired) {
-                throw failure;
+            if (this.closed || this.config.local) {
+                throw toFailure(error);
+            }
+            this.failAndStop(error);
+        }
+    }
+    async requestWithRetries() {
+        const attempts = 1 + this.config.retry;
+        let lastError;
+        for (let attempt = 0; attempt < attempts; attempt += 1) {
+            if (attempt > 0) {
+                await delay(RETRY_DELAY_MS);
+            }
+            if (this.closed) {
+                throw new common_1.BadGatewayException('Service auth is stopped');
+            }
+            try {
+                const response = await this.client.fetchToken();
+                if (response.expires_in <
+                    this.config.requestInterval + service_auth_options_1.EXPIRY_MARGIN_SECONDS) {
+                    throw new Error((0, service_auth_options_1.expirationTooSmallMessage)(response.expires_in, this.config.requestInterval));
+                }
+                return response;
+            }
+            catch (error) {
+                lastError = error;
             }
-            this.logger.error(failure.message);
-            this.scheduleNext(undefined);
-            throw failure;
         }
+        throw lastError;
+    }
+    store(response) {
+        const replacingShadow = this.shadowActive;
+        (0, service_auth_1.writeServiceAuth)(this.serviceAuth, {
+            token: response.access_token,
+            tokenType: response.token_type,
+            fullToken: `${response.token_type} ${response.access_token}`,
+        });
+        if (!replacingShadow) {
+            return;
+        }
+        this.shadowActive = false;
+        this.config.logger.warn('Manual token request overrode the shadow token.');
     }
-    scheduleNext(expiresIn) {
+    applyShadow() {
+        if (!this.config.shadowToken) {
+            (0, service_auth_1.writeServiceAuth)(this.serviceAuth, {
+                token: null,
+                tokenType: null,
+                fullToken: '',
+            });
+            return;
+        }
+        (0, service_auth_1.writeServiceAuth)(this.serviceAuth, {
+            token: null,
+            tokenType: null,
+            fullToken: this.config.shadowToken,
+        });
+        this.shadowActive = true;
+    }
+    logStartup() {
+        this.config.logger.info(`Service auth retry attempts: ${this.config.retry}. Schedule interval: ${(0, service_auth_options_1.formatDuration)(this.config.requestInterval)}.`);
+        if (!this.config.local) {
+            return;
+        }
+        if (this.config.shadowToken) {
+            this.config.logger.info('Shadow token will be used for fullToken.');
+            return;
+        }
+        this.config.logger.warn('Shadow token was not provided. fullToken will be an empty string.');
+    }
+    scheduleNext() {
         this.clearTimer();
-        if (this.closed) {
+        if (this.closed || this.config.local) {
             return;
         }
         this.timer = setTimeout(() => {
             this.timer = undefined;
             void this.refresh().catch(() => undefined);
-        }, delayMsFor(expiresIn));
+        }, this.config.requestInterval * 1000);
         this.timer.unref();
     }
     clearTimer() {
@@ -92,26 +162,35 @@ let ServiceAuthService = ServiceAuthService_1 = class ServiceAuthService {
         clearTimeout(this.timer);
         this.timer = undefined;
     }
+    failAndStop(error) {
+        this.clearTimer();
+        this.config.logger.error(failureText(error));
+        process.exit(1);
+    }
 };
 exports.ServiceAuthService = ServiceAuthService;
-exports.ServiceAuthService = ServiceAuthService = ServiceAuthService_1 = __decorate([
+exports.ServiceAuthService = ServiceAuthService = __decorate([
     (0, common_1.Injectable)(),
-    __metadata("design:paramtypes", [service_auth_client_1.ServiceAuthClient,
-        service_token_1.ServiceToken])
+    __param(0, (0, common_1.Inject)(service_auth_options_1.SERVICE_AUTH_CONFIG)),
+    __metadata("design:paramtypes", [Object, service_auth_client_1.ServiceAuthClient,
+        service_auth_1.ServiceAuth])
 ], ServiceAuthService);
-function delayMsFor(expiresIn) {
-    if (typeof expiresIn !== 'number' || !Number.isFinite(expiresIn)) {
-        return MIN_DELAY_MS;
-    }
-    return (Math.max(expiresIn - EXPIRY_MARGIN_SECONDS, MIN_DELAY_MS / 1000) * 1000);
+function delay(ms) {
+    return new Promise((resolve) => {
+        const timer = setTimeout(resolve, ms);
+        timer.unref();
+    });
 }
 function toFailure(error) {
     if (error instanceof common_1.BadGatewayException) {
         return error;
     }
-    const message = error instanceof Error && error.message
-        ? error.message
-        : 'Service token request failed';
-    return new common_1.BadGatewayException(message);
+    return new common_1.BadGatewayException(failureText(error));
+}
+function failureText(error) {
+    if (error instanceof Error && error.message) {
+        return error.message;
+    }
+    return 'Service token request failed';
 }
 //# sourceMappingURL=service-auth.service.js.map