@gennext/lb-infra 0.2.2 → 0.3.0

package/dist/components/authenticate/services/basic-token.service.js

@@ -0,0 +1,31 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.BasicTokenService = void 0;
+const services_1 = require("../../../base/services");
+const rest_1 = require("@loopback/rest");
+class BasicTokenService extends services_1.BaseService {
+    constructor() {
+        super({ scope: BasicTokenService.name });
+    }
+    async verify(credential) {
+        if (!credential) {
+            this.logger.error('verify', 'Missing basic credential for validating request!');
+            throw new rest_1.HttpErrors.Unauthorized('Invalid basic request credential!');
+        }
+        let tokenPayload;
+        try {
+            const { username, password } = credential;
+            const basicCredential = {
+                identifier: { scheme: 'username', value: username },
+                credential: { scheme: 'basic', value: password },
+            };
+            tokenPayload = basicCredential;
+        }
+        catch (error) {
+            throw new rest_1.HttpErrors.Unauthorized(`Error verifying token : ${error.message}`);
+        }
+        return tokenPayload;
+    }
+}
+exports.BasicTokenService = BasicTokenService;
+//# sourceMappingURL=basic-token.service.js.map

package/dist/components/authenticate/services/basic-token.service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"basic-token.service.js","sourceRoot":"","sources":["../../../../src/components/authenticate/services/basic-token.service.ts"],"names":[],"mappings":";;;AAAA,8CAA8C;AAC9C,yCAA4C;AAE5C,MAAa,iBAAkB,SAAQ,sBAAW;IAChD;QACE,KAAK,CAAC,EAAE,KAAK,EAAE,iBAAiB,CAAC,IAAI,EAAE,CAAC,CAAC;IAC3C,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,UAAkD;QAC7D,IAAI,CAAC,UAAU,EAAE,CAAC;YAChB,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,QAAQ,EAAE,kDAAkD,CAAC,CAAC;YAChF,MAAM,IAAI,iBAAU,CAAC,YAAY,CAAC,mCAAmC,CAAC,CAAC;QACzE,CAAC;QAED,IAAI,YAAY,CAAC;QACjB,IAAI,CAAC;YACH,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,GAAG,UAAU,CAAC;YAC1C,MAAM,eAAe,GAAG;gBACtB,UAAU,EAAE,EAAE,MAAM,EAAE,UAAU,EAAE,KAAK,EAAE,QAAQ,EAAE;gBACnD,UAAU,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE;aACjD,CAAC;YAEF,YAAY,GAAG,eAAe,CAAC;QACjC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,IAAI,iBAAU,CAAC,YAAY,CAAC,2BAA2B,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;QAChF,CAAC;QAED,OAAO,YAAY,CAAC;IACtB,CAAC;CACF;AA1BD,8CA0BC"}

package/dist/components/authenticate/services/basic.strategy.d.ts

@@ -0,0 +1,14 @@
+import { AuthenticationStrategy } from '@loopback/authentication';
+import { Request } from '@loopback/rest';
+import { BasicTokenService } from './basic-token.service';
+export declare class BasicAuthenticationStrategy implements AuthenticationStrategy {
+    private service;
+    name: string;
+    constructor(service: BasicTokenService);
+    extractCredentials(request: Request): {
+        username: string;
+        password: string;
+    };
+    authenticate(request: Request): Promise<any>;
+}
+//# sourceMappingURL=basic.strategy.d.ts.map

package/dist/components/authenticate/services/basic.strategy.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"basic.strategy.d.ts","sourceRoot":"","sources":["../../../../src/components/authenticate/services/basic.strategy.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,sBAAsB,EAAE,MAAM,0BAA0B,CAAC;AAElE,OAAO,EAAc,OAAO,EAAE,MAAM,gBAAgB,CAAC;AAErD,OAAO,EAAE,iBAAiB,EAAE,MAAM,uBAAuB,CAAC;AAE1D,qBAAa,2BAA4B,YAAW,sBAAsB;IAGtB,OAAO,CAAC,OAAO;IAFjE,IAAI,SAAiC;gBAEqB,OAAO,EAAE,iBAAiB;IAEpF,kBAAkB,CAAC,OAAO,EAAE,OAAO,GAAG;QAAE,QAAQ,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAA;KAAE;IAsBtE,YAAY,CAAC,OAAO,EAAE,OAAO;CAKpC"}

package/dist/components/authenticate/services/basic.strategy.js

@@ -0,0 +1,53 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+var __param = (this && this.__param) || function (paramIndex, decorator) {
+    return function (target, key) { decorator(target, key, paramIndex); }
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.BasicAuthenticationStrategy = void 0;
+const core_1 = require("@loopback/core");
+const rest_1 = require("@loopback/rest");
+const common_1 = require("../common");
+const basic_token_service_1 = require("./basic-token.service");
+let BasicAuthenticationStrategy = class BasicAuthenticationStrategy {
+    constructor(service) {
+        this.service = service;
+        this.name = common_1.Authentication.STRATEGY_BASIC;
+    }
+    extractCredentials(request) {
+        if (!request.headers.authorization) {
+            throw new rest_1.HttpErrors.Unauthorized(`Authorization header not found.`);
+        }
+        const authHeaderValue = request.headers.authorization;
+        if (!authHeaderValue.startsWith('Basic')) {
+            throw new rest_1.HttpErrors.Unauthorized(`Authorization header is not of type 'Basic'.`);
+        }
+        const parts = authHeaderValue.split(' ');
+        if (parts.length !== 2) {
+            throw new rest_1.HttpErrors.Unauthorized('Invalid basic authentication header');
+        }
+        const token = parts[1];
+        const credential = Buffer.from(token, 'base64').toString();
+        const [username, password] = credential?.split(':') || [];
+        return { username, password };
+    }
+    async authenticate(request) {
+        const credential = this.extractCredentials(request);
+        const rs = await this.service.verify(credential);
+        return rs;
+    }
+};
+exports.BasicAuthenticationStrategy = BasicAuthenticationStrategy;
+exports.BasicAuthenticationStrategy = BasicAuthenticationStrategy = __decorate([
+    __param(0, (0, core_1.inject)('services.BasicTokenService')),
+    __metadata("design:paramtypes", [basic_token_service_1.BasicTokenService])
+], BasicAuthenticationStrategy);
+//# sourceMappingURL=basic.strategy.js.map

package/dist/components/authenticate/services/basic.strategy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"basic.strategy.js","sourceRoot":"","sources":["../../../../src/components/authenticate/services/basic.strategy.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;AACA,yCAAwC;AACxC,yCAAqD;AACrD,sCAA2C;AAC3C,+DAA0D;AAE1D,IAAa,2BAA2B,GAAxC,MAAa,2BAA2B;IAGtC,YAAkD,OAAkC;QAA1B,YAAO,GAAP,OAAO,CAAmB;QAFpF,SAAI,GAAG,uBAAc,CAAC,cAAc,CAAC;IAEkD,CAAC;IAExF,kBAAkB,CAAC,OAAgB;QACjC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,aAAa,EAAE,CAAC;YACnC,MAAM,IAAI,iBAAU,CAAC,YAAY,CAAC,iCAAiC,CAAC,CAAC;QACvE,CAAC;QAED,MAAM,eAAe,GAAG,OAAO,CAAC,OAAO,CAAC,aAAa,CAAC;QAEtD,IAAI,CAAC,eAAe,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;YACzC,MAAM,IAAI,iBAAU,CAAC,YAAY,CAAC,8CAA8C,CAAC,CAAC;QACpF,CAAC;QAED,MAAM,KAAK,GAAG,eAAe,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QACzC,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACvB,MAAM,IAAI,iBAAU,CAAC,YAAY,CAAC,qCAAqC,CAAC,CAAC;QAC3E,CAAC;QAED,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;QACvB,MAAM,UAAU,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC,QAAQ,EAAE,CAAC;QAC3D,MAAM,CAAC,QAAQ,EAAE,QAAQ,CAAC,GAAG,UAAU,EAAE,KAAK,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC;QAC1D,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,CAAC;IAChC,CAAC;IAED,KAAK,CAAC,YAAY,CAAC,OAAgB;QACjC,MAAM,UAAU,GAAG,IAAI,CAAC,kBAAkB,CAAC,OAAO,CAAC,CAAC;QACpD,MAAM,EAAE,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;QACjD,OAAO,EAAE,CAAC;IACZ,CAAC;CACF,CAAA;AAhCY,kEAA2B;sCAA3B,2BAA2B;IAGzB,WAAA,IAAA,aAAM,EAAC,4BAA4B,CAAC,CAAA;qCAAkB,uCAAiB;GAHzE,2BAA2B,CAgCvC"}

package/dist/components/authenticate/services/index.d.ts

@@ -0,0 +1,8 @@
+export * from './basic.strategy';
+export * from './basic-token.service';
+export * from './jwt.strategy';
+export * from './jwt-token.service';
+export * from './oauth2.strategy';
+export * from './oauth2.service';
+export * from './oauth2-scope.service';
+//# sourceMappingURL=index.d.ts.map

package/dist/components/authenticate/services/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/components/authenticate/services/index.ts"],"names":[],"mappings":"AAAA,cAAc,kBAAkB,CAAC;AACjC,cAAc,uBAAuB,CAAC;AAEtC,cAAc,gBAAgB,CAAC;AAC/B,cAAc,qBAAqB,CAAC;AAEpC,cAAc,mBAAmB,CAAC;AAClC,cAAc,kBAAkB,CAAC;AACjC,cAAc,wBAAwB,CAAC"}

package/dist/components/authenticate/services/index.js

@@ -0,0 +1,24 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __exportStar = (this && this.__exportStar) || function(m, exports) {
+    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+__exportStar(require("./basic.strategy"), exports);
+__exportStar(require("./basic-token.service"), exports);
+__exportStar(require("./jwt.strategy"), exports);
+__exportStar(require("./jwt-token.service"), exports);
+__exportStar(require("./oauth2.strategy"), exports);
+__exportStar(require("./oauth2.service"), exports);
+__exportStar(require("./oauth2-scope.service"), exports);
+//# sourceMappingURL=index.js.map

package/dist/components/authenticate/services/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../src/components/authenticate/services/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,mDAAiC;AACjC,wDAAsC;AAEtC,iDAA+B;AAC/B,sDAAoC;AAEpC,oDAAkC;AAClC,mDAAiC;AACjC,yDAAuC"}

package/dist/components/authenticate/services/jwt-token.service.d.ts

@@ -0,0 +1,29 @@
+import { BaseService } from '../../../base/services';
+import { IJWTTokenPayload, TGetTokenExpiresFn } from '../common';
+export declare class JWTTokenService extends BaseService {
+    protected applicationSecret: string;
+    protected jwtSecret: string;
+    protected jwtExpiresIn: string;
+    protected getTokenExpiresFn: TGetTokenExpiresFn;
+    private aes;
+    constructor(applicationSecret: string, jwtSecret: string, jwtExpiresIn: string, getTokenExpiresFn: TGetTokenExpiresFn);
+    extractCredentials(request: {
+        headers: any;
+    }): {
+        type: string;
+        token: string;
+    };
+    encryptPayload(payload: IJWTTokenPayload): {
+        [x: string]: string;
+    };
+    decryptPayload(decodedToken: any): IJWTTokenPayload;
+    verify(opts: {
+        type: string;
+        token: string;
+    }): IJWTTokenPayload;
+    generate(opts: {
+        payload: IJWTTokenPayload;
+        getTokenExpiresFn?: TGetTokenExpiresFn;
+    }): Promise<string>;
+}
+//# sourceMappingURL=jwt-token.service.d.ts.map

package/dist/components/authenticate/services/jwt-token.service.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"jwt-token.service.d.ts","sourceRoot":"","sources":["../../../../src/components/authenticate/services/jwt-token.service.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAC;AAS9C,OAAO,EAAoC,gBAAgB,EAAE,kBAAkB,EAAE,MAAM,WAAW,CAAC;AAEnG,qBACa,eAAgB,SAAQ,WAAW;IAK5C,SAAS,CAAC,iBAAiB,EAAE,MAAM;IACQ,SAAS,CAAC,SAAS,EAAE,MAAM;IACvB,SAAS,CAAC,YAAY,EAAE,MAAM;IAE7E,SAAS,CAAC,iBAAiB,EAAE,kBAAkB;IARjD,OAAO,CAAC,GAAG,CAAoC;gBAInC,iBAAiB,EAAE,MAAM,EACkB,SAAS,EAAE,MAAM,EACb,YAAY,EAAE,MAAM,EAEnE,iBAAiB,EAAE,kBAAkB;IAMjD,kBAAkB,CAAC,OAAO,EAAE;QAAE,OAAO,EAAE,GAAG,CAAA;KAAE,GAAG;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE;IA2B9E,cAAc,CAAC,OAAO,EAAE,gBAAgB;;;IAoBxC,cAAc,CAAC,YAAY,EAAE,GAAG,GAAG,gBAAgB;IA8CnD,MAAM,CAAC,IAAI,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,GAAG,gBAAgB;IA0BzD,QAAQ,CAAC,IAAI,EAAE;QACnB,OAAO,EAAE,gBAAgB,CAAC;QAC1B,iBAAiB,CAAC,EAAE,kBAAkB,CAAC;KACxC,GAAG,OAAO,CAAC,MAAM,CAAC;CA4BpB"}

package/dist/components/authenticate/services/jwt-token.service.js

@@ -0,0 +1,173 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+var __param = (this && this.__param) || function (paramIndex, decorator) {
+    return function (target, key) { decorator(target, key, paramIndex); }
+};
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+var JWTTokenService_1;
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.JWTTokenService = void 0;
+const services_1 = require("../../../base/services");
+const common_1 = require("../../../common");
+const helpers_1 = require("../../../helpers");
+const utilities_1 = require("../../../utilities");
+const authentication_jwt_1 = require("@loopback/authentication-jwt");
+const core_1 = require("@loopback/core");
+const rest_1 = require("@loopback/rest");
+const security_1 = require("@loopback/security");
+const jsonwebtoken_1 = __importDefault(require("jsonwebtoken"));
+const common_2 = require("../common");
+let JWTTokenService = JWTTokenService_1 = class JWTTokenService extends services_1.BaseService {
+    constructor(applicationSecret, jwtSecret, jwtExpiresIn, getTokenExpiresFn) {
+        super({ scope: JWTTokenService_1.name });
+        this.applicationSecret = applicationSecret;
+        this.jwtSecret = jwtSecret;
+        this.jwtExpiresIn = jwtExpiresIn;
+        this.getTokenExpiresFn = getTokenExpiresFn;
+        this.aes = helpers_1.AES.withAlgorithm('aes-256-cbc');
+    }
+    // --------------------------------------------------------------------------------------
+    extractCredentials(request) {
+        if (!request.headers.authorization) {
+            throw (0, utilities_1.getError)({
+                statusCode: 401,
+                message: 'Unauthorized user! Missing authorization header',
+            });
+        }
+        const authHeaderValue = request.headers.authorization;
+        if (!authHeaderValue.startsWith(common_2.Authentication.TYPE_BEARER)) {
+            throw (0, utilities_1.getError)({
+                statusCode: 401,
+                message: 'Unauthorized user! Invalid schema of request token!',
+            });
+        }
+        const parts = authHeaderValue.split(' ');
+        if (parts.length !== 2) {
+            throw new rest_1.HttpErrors.Unauthorized(`Authorization header value has too many parts. It must follow the pattern: 'Bearer xx.yy.zz' where xx.yy.zz is a valid JWT token.`);
+        }
+        return { type: parts[0], token: parts[1] };
+    }
+    // --------------------------------------------------------------------------------------
+    encryptPayload(payload) {
+        const providerKey = this.aes.encrypt('provider', this.applicationSecret);
+        const userKey = this.aes.encrypt('userId', this.applicationSecret);
+        const rolesKey = this.aes.encrypt('roles', this.applicationSecret);
+        const clientIdKey = this.aes.encrypt('clientId', this.applicationSecret);
+        const { provider = 'NA', userId, roles, clientId = 'NA' } = payload;
+        return {
+            [providerKey]: this.aes.encrypt(provider, this.applicationSecret),
+            [userKey]: this.aes.encrypt(userId.toString(), this.applicationSecret),
+            [rolesKey]: this.aes.encrypt(JSON.stringify(roles.map(el => `${el.id}|${el.identifier}|${el.priority}`)), this.applicationSecret),
+            [clientIdKey]: this.aes.encrypt(clientId, this.applicationSecret),
+        };
+    }
+    // --------------------------------------------------------------------------------------
+    decryptPayload(decodedToken) {
+        const rs = {};
+        const jwtFields = new Set(['iat', 'exp']);
+        for (const encodedAttr in decodedToken) {
+            if (jwtFields.has(encodedAttr)) {
+                rs[encodedAttr] = decodedToken[encodedAttr];
+                continue;
+            }
+            const attr = this.aes.decrypt(encodedAttr, this.applicationSecret);
+            const decryptedValue = this.aes.decrypt(decodedToken[encodedAttr], this.applicationSecret);
+            switch (attr) {
+                case 'provider': {
+                    rs.provider = decryptedValue;
+                    break;
+                }
+                case 'userId': {
+                    rs.userId = parseInt(decryptedValue);
+                    rs[security_1.securityId] = rs.userId.toString();
+                    break;
+                }
+                case 'clientId': {
+                    rs.clientId = decryptedValue;
+                    break;
+                }
+                case 'roles': {
+                    rs.roles = JSON.parse(decryptedValue).map(el => {
+                        const [id, identifier, priority] = el.split('|');
+                        return { id, identifier, priority: (0, utilities_1.int)(priority) };
+                    });
+                    break;
+                }
+                default: {
+                    rs[encodedAttr] = decodedToken[encodedAttr];
+                    break;
+                }
+            }
+        }
+        return rs;
+    }
+    // --------------------------------------------------------------------------------------
+    verify(opts) {
+        const { token } = opts;
+        if (!token) {
+            this.logger.error('[verify] Missing token for validating request!');
+            throw new rest_1.HttpErrors.Unauthorized('Invalid request token!');
+        }
+        let decodedToken;
+        try {
+            decodedToken = jsonwebtoken_1.default.verify(token, this.jwtSecret);
+        }
+        catch (error) {
+            throw new rest_1.HttpErrors.Unauthorized(`Error verifying token : ${error.message}`);
+        }
+        try {
+            return this.decryptPayload(decodedToken);
+        }
+        catch (error) {
+            this.logger.error('[verify] Failed to decode token | Error: %s', error);
+            throw (0, utilities_1.getError)({
+                statusCode: 401,
+                message: 'Invalid token signature | Failed to decode token!',
+            });
+        }
+    }
+    // --------------------------------------------------------------------------------------
+    async generate(opts) {
+        const { payload, getTokenExpiresFn = () => {
+            return Number(this.jwtExpiresIn);
+        }, } = opts;
+        if (!payload) {
+            throw (0, utilities_1.getError)({
+                statusCode: common_1.ResultCodes.RS_4.Unauthorized,
+                message: 'Error generating token : userProfile is null',
+            });
+        }
+        let token;
+        const expiresIn = (await this.getTokenExpiresFn?.()) ?? (await getTokenExpiresFn());
+        try {
+            token = jsonwebtoken_1.default.sign(this.encryptPayload(payload), this.jwtSecret, { expiresIn });
+        }
+        catch (error) {
+            throw (0, utilities_1.getError)({
+                statusCode: common_1.ResultCodes.RS_4.Unauthorized,
+                message: `Error encoding token : ${error}`,
+            });
+        }
+        return token;
+    }
+};
+exports.JWTTokenService = JWTTokenService;
+exports.JWTTokenService = JWTTokenService = JWTTokenService_1 = __decorate([
+    (0, core_1.injectable)({ scope: core_1.BindingScope.SINGLETON }),
+    __param(0, (0, core_1.inject)(common_2.AuthenticateKeys.APPLICATION_SECRET)),
+    __param(1, (0, core_1.inject)(authentication_jwt_1.TokenServiceBindings.TOKEN_SECRET)),
+    __param(2, (0, core_1.inject)(authentication_jwt_1.TokenServiceBindings.TOKEN_EXPIRES_IN)),
+    __param(3, (0, core_1.inject)(common_2.AuthenticateKeys.GET_TOKEN_EXPIRES_FN, { optional: true })),
+    __metadata("design:paramtypes", [String, String, String, Function])
+], JWTTokenService);
+//# sourceMappingURL=jwt-token.service.js.map

package/dist/components/authenticate/services/jwt-token.service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"jwt-token.service.js","sourceRoot":"","sources":["../../../../src/components/authenticate/services/jwt-token.service.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;AAAA,8CAA8C;AAC9C,qCAAuC;AACvC,uCAAgC;AAChC,2CAA4C;AAC5C,qEAAoE;AACpE,yCAAkE;AAClE,yCAA4C;AAC5C,iDAAgD;AAChD,gEAA+C;AAC/C,sCAAmG;AAG5F,IAAM,eAAe,uBAArB,MAAM,eAAgB,SAAQ,sBAAW;IAG9C,YAEE,iBAAmC,EACQ,SAA2B,EACvB,YAA8B,EAE7E,iBAA+C;QAE/C,KAAK,CAAC,EAAE,KAAK,EAAE,iBAAe,CAAC,IAAI,EAAE,CAAC,CAAC;QAN7B,sBAAiB,GAAjB,iBAAiB,CAAQ;QACkB,cAAS,GAAT,SAAS,CAAQ;QACb,iBAAY,GAAZ,YAAY,CAAQ;QAEnE,sBAAiB,GAAjB,iBAAiB,CAAoB;QARzC,QAAG,GAAG,aAAG,CAAC,aAAa,CAAC,aAAa,CAAC,CAAC;IAW/C,CAAC;IAED,yFAAyF;IACzF,kBAAkB,CAAC,OAAyB;QAC1C,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,aAAa,EAAE,CAAC;YACnC,MAAM,IAAA,oBAAQ,EAAC;gBACb,UAAU,EAAE,GAAG;gBACf,OAAO,EAAE,iDAAiD;aAC3D,CAAC,CAAC;QACL,CAAC;QAED,MAAM,eAAe,GAAG,OAAO,CAAC,OAAO,CAAC,aAAa,CAAC;QACtD,IAAI,CAAC,eAAe,CAAC,UAAU,CAAC,uBAAc,CAAC,WAAW,CAAC,EAAE,CAAC;YAC5D,MAAM,IAAA,oBAAQ,EAAC;gBACb,UAAU,EAAE,GAAG;gBACf,OAAO,EAAE,qDAAqD;aAC/D,CAAC,CAAC;QACL,CAAC;QAED,MAAM,KAAK,GAAG,eAAe,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QACzC,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACvB,MAAM,IAAI,iBAAU,CAAC,YAAY,CAC/B,mIAAmI,CACpI,CAAC;QACJ,CAAC;QAED,OAAO,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;IAC7C,CAAC;IAED,yFAAyF;IACzF,cAAc,CAAC,OAAyB;QACtC,MAAM,WAAW,GAAG,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,UAAU,EAAE,IAAI,CAAC,iBAAiB,CAAC,CAAC;QACzE,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,QAAQ,EAAE,IAAI,CAAC,iBAAiB,CAAC,CAAC;QACnE,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,OAAO,EAAE,IAAI,CAAC,iBAAiB,CAAC,CAAC;QACnE,MAAM,WAAW,GAAG,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,UAAU,EAAE,IAAI,CAAC,iBAAiB,CAAC,CAAC;QAEzE,MAAM,EAAE,QAAQ,GAAG,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,QAAQ,GAAG,IAAI,EAAE,GAAG,OAAO,CAAC;QAEpE,OAAO;YACL,CAAC,WAAW,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,QAAQ,EAAE,IAAI,CAAC,iBAAiB,CAAC;YACjE,CAAC,OAAO,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,QAAQ,EAAE,EAAE,IAAI,CAAC,iBAAiB,CAAC;YACtE,CAAC,QAAQ,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,OAAO,CAC1B,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,CAAC,GAAG,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,UAAU,IAAI,EAAE,CAAC,QAAQ,EAAE,CAAC,CAAC,EAC3E,IAAI,CAAC,iBAAiB,CACvB;YACD,CAAC,WAAW,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,QAAQ,EAAE,IAAI,CAAC,iBAAiB,CAAC;SAClE,CAAC;IACJ,CAAC;IAED,yFAAyF;IACzF,cAAc,CAAC,YAAiB;QAC9B,MAAM,EAAE,GAAQ,EAAE,CAAC;QAEnB,MAAM,SAAS,GAAG,IAAI,GAAG,CAAS,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC;QAElD,KAAK,MAAM,WAAW,IAAI,YAAY,EAAE,CAAC;YACvC,IAAI,SAAS,CAAC,GAAG,CAAC,WAAW,CAAC,EAAE,CAAC;gBAC/B,EAAE,CAAC,WAAW,CAAC,GAAG,YAAY,CAAC,WAAW,CAAC,CAAC;gBAC5C,SAAS;YACX,CAAC;YAED,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,WAAW,EAAE,IAAI,CAAC,iBAAiB,CAAC,CAAC;YACnE,MAAM,cAAc,GAAG,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,YAAY,CAAC,WAAW,CAAC,EAAE,IAAI,CAAC,iBAAiB,CAAC,CAAC;YAE3F,QAAQ,IAAI,EAAE,CAAC;gBACb,KAAK,UAAU,CAAC,CAAC,CAAC;oBAChB,EAAE,CAAC,QAAQ,GAAG,cAAc,CAAC;oBAC7B,MAAM;gBACR,CAAC;gBACD,KAAK,QAAQ,CAAC,CAAC,CAAC;oBACd,EAAE,CAAC,MAAM,GAAG,QAAQ,CAAC,cAAc,CAAC,CAAC;oBACrC,EAAE,CAAC,qBAAU,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC;oBACtC,MAAM;gBACR,CAAC;gBACD,KAAK,UAAU,CAAC,CAAC,CAAC;oBAChB,EAAE,CAAC,QAAQ,GAAG,cAAc,CAAC;oBAC7B,MAAM;gBACR,CAAC;gBACD,KAAK,OAAO,CAAC,CAAC,CAAC;oBACb,EAAE,CAAC,KAAK,GAAI,IAAI,CAAC,KAAK,CAAC,cAAc,CAAc,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE;wBAC3D,MAAM,CAAC,EAAE,EAAE,UAAU,EAAE,QAAQ,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;wBACjD,OAAO,EAAE,EAAE,EAAE,UAAU,EAAE,QAAQ,EAAE,IAAA,eAAG,EAAC,QAAQ,CAAC,EAAE,CAAC;oBACrD,CAAC,CAAC,CAAC;oBACH,MAAM;gBACR,CAAC;gBACD,OAAO,CAAC,CAAC,CAAC;oBACR,EAAE,CAAC,WAAW,CAAC,GAAG,YAAY,CAAC,WAAW,CAAC,CAAC;oBAC5C,MAAM;gBACR,CAAC;YACH,CAAC;QACH,CAAC;QAED,OAAO,EAAE,CAAC;IACZ,CAAC;IAED,yFAAyF;IACzF,MAAM,CAAC,IAAqC;QAC1C,MAAM,EAAE,KAAK,EAAE,GAAG,IAAI,CAAC;QACvB,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,gDAAgD,CAAC,CAAC;YACpE,MAAM,IAAI,iBAAU,CAAC,YAAY,CAAC,wBAAwB,CAAC,CAAC;QAC9D,CAAC;QAED,IAAI,YAAiC,CAAC;QACtC,IAAI,CAAC;YACH,YAAY,GAAG,sBAAG,CAAC,MAAM,CAAC,KAAK,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC;QACnD,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,IAAI,iBAAU,CAAC,YAAY,CAAC,2BAA2B,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;QAChF,CAAC;QAED,IAAI,CAAC;YACH,OAAO,IAAI,CAAC,cAAc,CAAC,YAAY,CAAC,CAAC;QAC3C,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,6CAA6C,EAAE,KAAK,CAAC,CAAC;YACxE,MAAM,IAAA,oBAAQ,EAAC;gBACb,UAAU,EAAE,GAAG;gBACf,OAAO,EAAE,mDAAmD;aAC7D,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,yFAAyF;IACzF,KAAK,CAAC,QAAQ,CAAC,IAGd;QACC,MAAM,EACJ,OAAO,EACP,iBAAiB,GAAG,GAAG,EAAE;YACvB,OAAO,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;QACnC,CAAC,GACF,GAAG,IAAI,CAAC;QAET,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,MAAM,IAAA,oBAAQ,EAAC;gBACb,UAAU,EAAE,oBAAW,CAAC,IAAI,CAAC,YAAY;gBACzC,OAAO,EAAE,8CAA8C;aACxD,CAAC,CAAC;QACL,CAAC;QAED,IAAI,KAAa,CAAC;QAClB,MAAM,SAAS,GAAG,CAAC,MAAM,IAAI,CAAC,iBAAiB,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,iBAAiB,EAAE,CAAC,CAAC;QACpF,IAAI,CAAC;YACH,KAAK,GAAG,sBAAG,CAAC,IAAI,CAAC,IAAI,CAAC,cAAc,CAAC,OAAO,CAAC,EAAE,IAAI,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,CAAC,CAAC;QAChF,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,IAAA,oBAAQ,EAAC;gBACb,UAAU,EAAE,oBAAW,CAAC,IAAI,CAAC,YAAY;gBACzC,OAAO,EAAE,0BAA0B,KAAK,EAAE;aAC3C,CAAC,CAAC;QACL,CAAC;QAED,OAAO,KAAK,CAAC;IACf,CAAC;CACF,CAAA;AArKY,0CAAe;0BAAf,eAAe;IAD3B,IAAA,iBAAU,EAAC,EAAE,KAAK,EAAE,mBAAY,CAAC,SAAS,EAAE,CAAC;IAKzC,WAAA,IAAA,aAAM,EAAC,yBAAgB,CAAC,kBAAkB,CAAC,CAAA;IAE3C,WAAA,IAAA,aAAM,EAAC,yCAAoB,CAAC,YAAY,CAAC,CAAA;IACzC,WAAA,IAAA,aAAM,EAAC,yCAAoB,CAAC,gBAAgB,CAAC,CAAA;IAC7C,WAAA,IAAA,aAAM,EAAC,yBAAgB,CAAC,oBAAoB,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAA;;GARzD,eAAe,CAqK3B"}

package/dist/components/authenticate/services/jwt.strategy.d.ts

@@ -0,0 +1,10 @@
+import { AuthenticationStrategy } from '@loopback/authentication';
+import { Request } from '@loopback/rest';
+import { JWTTokenService } from './jwt-token.service';
+export declare class JWTAuthenticationStrategy implements AuthenticationStrategy {
+    private service;
+    name: string;
+    constructor(service: JWTTokenService);
+    authenticate(request: Request): Promise<import("../common").IJWTTokenPayload>;
+}
+//# sourceMappingURL=jwt.strategy.d.ts.map

package/dist/components/authenticate/services/jwt.strategy.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"jwt.strategy.d.ts","sourceRoot":"","sources":["../../../../src/components/authenticate/services/jwt.strategy.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,sBAAsB,EAAE,MAAM,0BAA0B,CAAC;AAElE,OAAO,EAAE,OAAO,EAAE,MAAM,gBAAgB,CAAC;AACzC,OAAO,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AAGtD,qBAAa,yBAA0B,YAAW,sBAAsB;IAGtB,OAAO,CAAC,OAAO;IAF/D,IAAI,SAA+B;gBAEqB,OAAO,EAAE,eAAe;IAEhF,YAAY,CAAC,OAAO,EAAE,OAAO;CAI9B"}

package/dist/components/authenticate/services/jwt.strategy.js

@@ -0,0 +1,34 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+var __param = (this && this.__param) || function (paramIndex, decorator) {
+    return function (target, key) { decorator(target, key, paramIndex); }
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.JWTAuthenticationStrategy = void 0;
+const core_1 = require("@loopback/core");
+const jwt_token_service_1 = require("./jwt-token.service");
+const common_1 = require("../common");
+let JWTAuthenticationStrategy = class JWTAuthenticationStrategy {
+    constructor(service) {
+        this.service = service;
+        this.name = common_1.Authentication.STRATEGY_JWT;
+    }
+    authenticate(request) {
+        const token = this.service.extractCredentials(request);
+        return Promise.resolve(this.service.verify(token));
+    }
+};
+exports.JWTAuthenticationStrategy = JWTAuthenticationStrategy;
+exports.JWTAuthenticationStrategy = JWTAuthenticationStrategy = __decorate([
+    __param(0, (0, core_1.inject)('services.JWTTokenService')),
+    __metadata("design:paramtypes", [jwt_token_service_1.JWTTokenService])
+], JWTAuthenticationStrategy);
+//# sourceMappingURL=jwt.strategy.js.map

package/dist/components/authenticate/services/jwt.strategy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"jwt.strategy.js","sourceRoot":"","sources":["../../../../src/components/authenticate/services/jwt.strategy.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;AACA,yCAAwC;AAExC,2DAAsD;AACtD,sCAA2C;AAE3C,IAAa,yBAAyB,GAAtC,MAAa,yBAAyB;IAGpC,YAAgD,OAAgC;QAAxB,YAAO,GAAP,OAAO,CAAiB;QAFhF,SAAI,GAAG,uBAAc,CAAC,YAAY,CAAC;IAEgD,CAAC;IAEpF,YAAY,CAAC,OAAgB;QAC3B,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,kBAAkB,CAAC,OAAO,CAAC,CAAC;QACvD,OAAO,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;IACrD,CAAC;CACF,CAAA;AATY,8DAAyB;oCAAzB,yBAAyB;IAGvB,WAAA,IAAA,aAAM,EAAC,0BAA0B,CAAC,CAAA;qCAAkB,mCAAe;GAHrE,yBAAyB,CASrC"}

package/dist/components/authenticate/services/oauth2-scope.service.d.ts

@@ -0,0 +1,22 @@
+import { TInjectionGetter } from '../../../common';
+import { IScopeDefinition } from '../common';
+export interface IOAuth2ScopeServiceOptions {
+    injectionGetter: TInjectionGetter;
+    repositoryKey?: string;
+}
+export declare class OAuth2ScopeService {
+    private logger;
+    private injectionGetter;
+    private repositoryKey;
+    private scopeCache;
+    private cacheTimestamp;
+    private cacheTTL;
+    constructor(opts: {
+        options: IOAuth2ScopeServiceOptions;
+        scope?: string;
+    });
+    loadScopes(useCache?: boolean): Promise<IScopeDefinition[]>;
+    private convertToScopeDefinitions;
+    private isCacheValid;
+}
+//# sourceMappingURL=oauth2-scope.service.d.ts.map

package/dist/components/authenticate/services/oauth2-scope.service.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"oauth2-scope.service.d.ts","sourceRoot":"","sources":["../../../../src/components/authenticate/services/oauth2-scope.service.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gBAAgB,EAAE,MAAM,UAAU,CAAC;AAG5C,OAAO,EAAE,gBAAgB,EAAE,MAAM,WAAW,CAAC;AAI7C,MAAM,WAAW,0BAA0B;IACzC,eAAe,EAAE,gBAAgB,CAAC;IAClC,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB;AAED,qBAAa,kBAAkB;IAC7B,OAAO,CAAC,MAAM,CAAoB;IAClC,OAAO,CAAC,eAAe,CAAmB;IAC1C,OAAO,CAAC,aAAa,CAAS;IAC9B,OAAO,CAAC,UAAU,CAAmC;IACrD,OAAO,CAAC,cAAc,CAAa;IACnC,OAAO,CAAC,QAAQ,CAAiB;gBAErB,IAAI,EAAE;QAAE,OAAO,EAAE,0BAA0B,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE;IASnE,UAAU,CAAC,QAAQ,UAAO,GAAG,OAAO,CAAC,gBAAgB,EAAE,CAAC;IAsC9D,OAAO,CAAC,yBAAyB;IAUjC,OAAO,CAAC,YAAY;CAQrB"}

package/dist/components/authenticate/services/oauth2-scope.service.js

@@ -0,0 +1,63 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.OAuth2ScopeService = void 0;
+const helpers_1 = require("../../../helpers");
+const utilities_1 = require("../../../utilities");
+class OAuth2ScopeService {
+    constructor(opts) {
+        this.scopeCache = null;
+        this.cacheTimestamp = 0;
+        this.cacheTTL = 60000; // 1 minute cache TTL
+        const { options, scope } = opts;
+        this.logger = helpers_1.LoggerFactory.getLogger([scope ?? OAuth2ScopeService.name]);
+        this.injectionGetter = options.injectionGetter;
+        this.repositoryKey = options.repositoryKey ?? 'repositories.OAuth2ScopeRepository';
+        this.logger.info('[constructor] Initialized | Repository: %s', this.repositoryKey);
+    }
+    async loadScopes(useCache = true) {
+        if (useCache && this.isCacheValid()) {
+            this.logger.debug('[loadScopes] Returning cached scopes | count: %d', this.scopeCache.length);
+            return this.scopeCache;
+        }
+        try {
+            this.logger.info('[loadScopes] Loading scopes from database');
+            const repository = this.injectionGetter(this.repositoryKey);
+            this.logger.info('[loadScopes] Repository injected: %s', this.repositoryKey);
+            const scopes = await repository.find({
+                where: { isActive: true },
+                order: ['identifier ASC'],
+            });
+            this.logger.info('[loadScopes] Loaded scopes from database | count: %d', scopes.length);
+            const scopeDefinitions = this.convertToScopeDefinitions(scopes);
+            this.scopeCache = scopeDefinitions;
+            this.cacheTimestamp = Date.now();
+            return scopeDefinitions;
+        }
+        catch (error) {
+            this.logger.error('[loadScopes] Error loading scopes: %s', (0, utilities_1.getError)(error).message);
+            if (this.scopeCache) {
+                this.logger.warn('[loadScopes] Returning stale cached scopes due to error');
+                return this.scopeCache;
+            }
+            return [];
+        }
+    }
+    convertToScopeDefinitions(scopes) {
+        return scopes.map(scope => ({
+            identifier: scope.identifier,
+            name: scope.name,
+            description: scope.description,
+            fields: scope?.fields,
+            relations: scope?.relations,
+        }));
+    }
+    isCacheValid() {
+        if (!this.scopeCache) {
+            return false;
+        }
+        const age = Date.now() - this.cacheTimestamp;
+        return age < this.cacheTTL;
+    }
+}
+exports.OAuth2ScopeService = OAuth2ScopeService;
+//# sourceMappingURL=oauth2-scope.service.js.map

package/dist/components/authenticate/services/oauth2-scope.service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"oauth2-scope.service.js","sourceRoot":"","sources":["../../../../src/components/authenticate/services/oauth2-scope.service.ts"],"names":[],"mappings":";;;AACA,uCAA6D;AAC7D,2CAAuC;AAUvC,MAAa,kBAAkB;IAQ7B,YAAY,IAA6D;QAJjE,eAAU,GAA8B,IAAI,CAAC;QAC7C,mBAAc,GAAW,CAAC,CAAC;QAC3B,aAAQ,GAAW,KAAK,CAAC,CAAC,qBAAqB;QAGrD,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,GAAG,IAAI,CAAC;QAChC,IAAI,CAAC,MAAM,GAAG,uBAAa,CAAC,SAAS,CAAC,CAAC,KAAK,IAAI,kBAAkB,CAAC,IAAI,CAAC,CAAC,CAAC;QAC1E,IAAI,CAAC,eAAe,GAAG,OAAO,CAAC,eAAe,CAAC;QAC/C,IAAI,CAAC,aAAa,GAAG,OAAO,CAAC,aAAa,IAAI,oCAAoC,CAAC;QAEnF,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,4CAA4C,EAAE,IAAI,CAAC,aAAa,CAAC,CAAC;IACrF,CAAC;IAED,KAAK,CAAC,UAAU,CAAC,QAAQ,GAAG,IAAI;QAC9B,IAAI,QAAQ,IAAI,IAAI,CAAC,YAAY,EAAE,EAAE,CAAC;YACpC,IAAI,CAAC,MAAM,CAAC,KAAK,CACf,kDAAkD,EAClD,IAAI,CAAC,UAAW,CAAC,MAAM,CACxB,CAAC;YACF,OAAO,IAAI,CAAC,UAAW,CAAC;QAC1B,CAAC;QAED,IAAI,CAAC;YACH,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,2CAA2C,CAAC,CAAC;YAC9D,MAAM,UAAU,GAAG,IAAI,CAAC,eAAe,CAAwB,IAAI,CAAC,aAAa,CAAC,CAAC;YACnF,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,sCAAsC,EAAE,IAAI,CAAC,aAAa,CAAC,CAAC;YAC7E,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,IAAI,CAAC;gBACnC,KAAK,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE;gBACzB,KAAK,EAAE,CAAC,gBAAgB,CAAC;aAC1B,CAAC,CAAC;YAEH,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,sDAAsD,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC;YAExF,MAAM,gBAAgB,GAAG,IAAI,CAAC,yBAAyB,CAAC,MAAM,CAAC,CAAC;YAEhE,IAAI,CAAC,UAAU,GAAG,gBAAgB,CAAC;YACnC,IAAI,CAAC,cAAc,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;YAEjC,OAAO,gBAAgB,CAAC;QAC1B,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,uCAAuC,EAAE,IAAA,oBAAQ,EAAC,KAAK,CAAC,CAAC,OAAO,CAAC,CAAC;YAEpF,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;gBACpB,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,yDAAyD,CAAC,CAAC;gBAC5E,OAAO,IAAI,CAAC,UAAU,CAAC;YACzB,CAAC;YAED,OAAO,EAAE,CAAC;QACZ,CAAC;IACH,CAAC;IAEO,yBAAyB,CAAC,MAAqB;QACrD,OAAO,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;YAC1B,UAAU,EAAE,KAAK,CAAC,UAAU;YAC5B,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,WAAW,EAAE,KAAK,CAAC,WAAW;YAC9B,MAAM,EAAE,KAAK,EAAE,MAAM;YACrB,SAAS,EAAE,KAAK,EAAE,SAAS;SAC5B,CAAC,CAAC,CAAC;IACN,CAAC;IAEO,YAAY;QAClB,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,CAAC;YACrB,OAAO,KAAK,CAAC;QACf,CAAC;QAED,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,cAAc,CAAC;QAC7C,OAAO,GAAG,GAAG,IAAI,CAAC,QAAQ,CAAC;IAC7B,CAAC;CACF;AAzED,gDAyEC"}

package/dist/components/authenticate/services/oauth2.service.d.ts

@@ -0,0 +1,58 @@
+import { BaseApplication } from '../../../base/applications';
+import { AxiosNetworkRequest } from '../../../helpers';
+import { RequestContext } from '@loopback/rest';
+import { Request, Response, Token } from '@node-oauth/oauth2-server';
+import { BaseService } from '../../../base/services';
+import { SignInRequest } from '../common';
+import { OAuth2Handler } from '../oauth2-handlers';
+import { OAuth2ClientRepository } from '../repositories';
+export declare class OAuth2Service extends BaseService {
+    private application;
+    private handler;
+    private oauth2ClientRepository;
+    private aes;
+    protected networkRequest: AxiosNetworkRequest;
+    constructor(application: BaseApplication, handler: OAuth2Handler, oauth2ClientRepository: OAuth2ClientRepository);
+    encryptClientToken(opts: {
+        clientId: string;
+        clientSecret: string;
+    }): string;
+    decryptClientToken(opts: {
+        token: string;
+    }): {
+        clientId: string;
+        clientSecret: string;
+    };
+    getOAuth2RequestPath(opts: {
+        clientId: string;
+        clientSecret: string;
+        redirectUrl: string;
+        scope?: string;
+    }): Promise<{
+        requestPath: string;
+    }>;
+    generateToken(opts: {
+        request: Request;
+        response: Response;
+    }): Promise<Token>;
+    authorize(opts: {
+        request: Request;
+        response: Response;
+    }): Promise<import("@node-oauth/oauth2-server").AuthorizationCode>;
+    doOAuth2(opts: {
+        context: Pick<RequestContext, 'request' | 'response'>;
+        authServiceKey: string;
+        signInRequest: SignInRequest;
+        redirectUrl?: string;
+        scopes?: string[];
+    }): Promise<{
+        redirectUrl: string;
+        oauth2TokenRs: Token;
+    }>;
+    doClientCallback(opts: {
+        clientToken: string;
+        oauth2Token: Token;
+        useImplicitGrant?: boolean;
+    }): Promise<void>;
+}
+//# sourceMappingURL=oauth2.service.d.ts.map

package/dist/components/authenticate/services/oauth2.service.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"oauth2.service.d.ts","sourceRoot":"","sources":["../../../../src/components/authenticate/services/oauth2.service.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AAEtD,OAAO,EAA+B,mBAAmB,EAAE,MAAM,WAAW,CAAC;AAG7E,OAAO,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAC;AAChD,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,2BAA2B,CAAC;AAErE,OAAO,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAC;AAC9C,OAAO,EAAkC,aAAa,EAAE,MAAM,WAAW,CAAC;AAC1E,OAAO,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AACnD,OAAO,EAAE,sBAAsB,EAAE,MAAM,iBAAiB,CAAC;AAEzD,qBAAa,aAAc,SAAQ,WAAW;IAM1C,OAAO,CAAC,WAAW;IACsB,OAAO,CAAC,OAAO;IAExD,OAAO,CAAC,sBAAsB;IARhC,OAAO,CAAC,GAAG,CAAoC;IAC/C,SAAS,CAAC,cAAc,EAAE,mBAAmB,CAAC;gBAIpC,WAAW,EAAE,eAAe,EACa,OAAO,EAAE,aAAa,EAE/D,sBAAsB,EAAE,sBAAsB;IAWxD,kBAAkB,CAAC,IAAI,EAAE;QAAE,QAAQ,EAAE,MAAM,CAAC;QAAC,YAAY,EAAE,MAAM,CAAA;KAAE;IASnE,kBAAkB,CAAC,IAAI,EAAE;QAAE,KAAK,EAAE,MAAM,CAAA;KAAE;;;;IAmB1C,oBAAoB,CAAC,IAAI,EAAE;QACzB,QAAQ,EAAE,MAAM,CAAC;QACjB,YAAY,EAAE,MAAM,CAAC;QACrB,WAAW,EAAE,MAAM,CAAC;QACpB,KAAK,CAAC,EAAE,MAAM,CAAC;KAChB,GAAG,OAAO,CAAC;QAAE,WAAW,EAAE,MAAM,CAAA;KAAE,CAAC;IAyDpC,aAAa,CAAC,IAAI,EAAE;QAAE,OAAO,EAAE,OAAO,CAAC;QAAC,QAAQ,EAAE,QAAQ,CAAA;KAAE;IAc5D,SAAS,CAAC,IAAI,EAAE;QAAE,OAAO,EAAE,OAAO,CAAC;QAAC,QAAQ,EAAE,QAAQ,CAAA;KAAE;IAclD,QAAQ,CAAC,IAAI,EAAE;QACnB,OAAO,EAAE,IAAI,CAAC,cAAc,EAAE,SAAS,GAAG,UAAU,CAAC,CAAC;QACtD,cAAc,EAAE,MAAM,CAAC;QACvB,aAAa,EAAE,aAAa,CAAC;QAC7B,WAAW,CAAC,EAAE,MAAM,CAAC;QACrB,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;KACnB;;;;IA0DK,gBAAgB,CAAC,IAAI,EAAE;QAC3B,WAAW,EAAE,MAAM,CAAC;QACpB,WAAW,EAAE,KAAK,CAAC;QACnB,gBAAgB,CAAC,EAAE,OAAO,CAAC;KAC5B;CAyDF"}