@hmcts/opal-frontend-common-node 0.0.15 → 0.0.17

package/index.d.ts

@@ -5,5 +5,6 @@ export * from './helmet';
 export * from './properties-volume';
 export * from './csrf-token';
 export * from './routes';
+export * from './services';
 export * from './interfaces';
 //# sourceMappingURL=index.d.ts.map

package/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,cAAc,iBAAiB,CAAC;AAChC,cAAc,gBAAgB,CAAC;AAC/B,cAAc,UAAU,CAAC;AACzB,cAAc,UAAU,CAAC;AACzB,cAAc,qBAAqB,CAAC;AACpC,cAAc,cAAc,CAAC;AAC7B,cAAc,UAAU,CAAC;AAGzB,cAAc,cAAc,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,cAAc,iBAAiB,CAAC;AAChC,cAAc,gBAAgB,CAAC;AAC/B,cAAc,UAAU,CAAC;AACzB,cAAc,UAAU,CAAC;AACzB,cAAc,qBAAqB,CAAC;AACpC,cAAc,cAAc,CAAC;AAC7B,cAAc,UAAU,CAAC;AACzB,cAAc,YAAY,CAAC;AAG3B,cAAc,cAAc,CAAC"}

package/index.js

@@ -5,6 +5,7 @@ export * from './helmet';
 export * from './properties-volume';
 export * from './csrf-token';
 export * from './routes';
+export * from './services';
 // INTERFACES
 export * from './interfaces';
 //# sourceMappingURL=index.js.map

package/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,cAAc,iBAAiB,CAAC;AAChC,cAAc,gBAAgB,CAAC;AAC/B,cAAc,UAAU,CAAC;AACzB,cAAc,UAAU,CAAC;AACzB,cAAc,qBAAqB,CAAC;AACpC,cAAc,cAAc,CAAC;AAC7B,cAAc,UAAU,CAAC;AAEzB,aAAa;AACb,cAAc,cAAc,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,cAAc,iBAAiB,CAAC;AAChC,cAAc,gBAAgB,CAAC;AAC/B,cAAc,UAAU,CAAC;AACzB,cAAc,UAAU,CAAC;AACzB,cAAc,qBAAqB,CAAC;AACpC,cAAc,cAAc,CAAC;AAC7B,cAAc,UAAU,CAAC;AACzB,cAAc,YAAY,CAAC;AAE3B,aAAa;AACb,cAAc,cAAc,CAAC"}

package/interfaces/index.d.ts

@@ -7,4 +7,5 @@ export { default as SessionStorageConfiguration } from './session-storage-config
 export { default as RoutesConfiguration } from './routes-config';
 export { default as SsoConfiguration } from './sso-config';
 export { default as SessionConfiguration } from './session-config';
+export { default as OpalUserServiceConfiguration } from './opal-user-service-config';
 //# sourceMappingURL=index.d.ts.map

package/interfaces/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/interfaces/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,IAAI,aAAa,EAAE,MAAM,iBAAiB,CAAC;AAC3D,OAAO,EAAE,OAAO,IAAI,kBAAkB,EAAE,MAAM,wBAAwB,CAAC;AACvE,OAAO,EAAE,OAAO,IAAI,iBAAiB,EAAE,MAAM,uBAAuB,CAAC;AACrE,OAAO,EAAE,OAAO,IAAI,mBAAmB,EAAE,MAAM,yBAAyB,CAAC;AACzE,OAAO,EAAE,OAAO,IAAI,mBAAmB,EAAE,MAAM,yBAAyB,CAAC;AACzE,OAAO,EAAE,OAAO,IAAI,2BAA2B,EAAE,MAAM,0BAA0B,CAAC;AAClF,OAAO,EAAE,OAAO,IAAI,mBAAmB,EAAE,MAAM,iBAAiB,CAAC;AACjE,OAAO,EAAE,OAAO,IAAI,gBAAgB,EAAE,MAAM,cAAc,CAAC;AAC3D,OAAO,EAAE,OAAO,IAAI,oBAAoB,EAAE,MAAM,kBAAkB,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/interfaces/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,IAAI,aAAa,EAAE,MAAM,iBAAiB,CAAC;AAC3D,OAAO,EAAE,OAAO,IAAI,kBAAkB,EAAE,MAAM,wBAAwB,CAAC;AACvE,OAAO,EAAE,OAAO,IAAI,iBAAiB,EAAE,MAAM,uBAAuB,CAAC;AACrE,OAAO,EAAE,OAAO,IAAI,mBAAmB,EAAE,MAAM,yBAAyB,CAAC;AACzE,OAAO,EAAE,OAAO,IAAI,mBAAmB,EAAE,MAAM,yBAAyB,CAAC;AACzE,OAAO,EAAE,OAAO,IAAI,2BAA2B,EAAE,MAAM,0BAA0B,CAAC;AAClF,OAAO,EAAE,OAAO,IAAI,mBAAmB,EAAE,MAAM,iBAAiB,CAAC;AACjE,OAAO,EAAE,OAAO,IAAI,gBAAgB,EAAE,MAAM,cAAc,CAAC;AAC3D,OAAO,EAAE,OAAO,IAAI,oBAAoB,EAAE,MAAM,kBAAkB,CAAC;AACnE,OAAO,EAAE,OAAO,IAAI,4BAA4B,EAAE,MAAM,4BAA4B,CAAC"}

package/interfaces/index.js

@@ -7,4 +7,5 @@ export { default as SessionStorageConfiguration } from './session-storage-config
 export { default as RoutesConfiguration } from './routes-config';
 export { default as SsoConfiguration } from './sso-config';
 export { default as SessionConfiguration } from './session-config';
+export { default as OpalUserServiceConfiguration } from './opal-user-service-config';
 //# sourceMappingURL=index.js.map

package/interfaces/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/interfaces/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,IAAI,aAAa,EAAE,MAAM,iBAAiB,CAAC;AAC3D,OAAO,EAAE,OAAO,IAAI,kBAAkB,EAAE,MAAM,wBAAwB,CAAC;AACvE,OAAO,EAAE,OAAO,IAAI,iBAAiB,EAAE,MAAM,uBAAuB,CAAC;AACrE,OAAO,EAAE,OAAO,IAAI,mBAAmB,EAAE,MAAM,yBAAyB,CAAC;AACzE,OAAO,EAAE,OAAO,IAAI,mBAAmB,EAAE,MAAM,yBAAyB,CAAC;AACzE,OAAO,EAAE,OAAO,IAAI,2BAA2B,EAAE,MAAM,0BAA0B,CAAC;AAClF,OAAO,EAAE,OAAO,IAAI,mBAAmB,EAAE,MAAM,iBAAiB,CAAC;AACjE,OAAO,EAAE,OAAO,IAAI,gBAAgB,EAAE,MAAM,cAAc,CAAC;AAC3D,OAAO,EAAE,OAAO,IAAI,oBAAoB,EAAE,MAAM,kBAAkB,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/interfaces/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,IAAI,aAAa,EAAE,MAAM,iBAAiB,CAAC;AAC3D,OAAO,EAAE,OAAO,IAAI,kBAAkB,EAAE,MAAM,wBAAwB,CAAC;AACvE,OAAO,EAAE,OAAO,IAAI,iBAAiB,EAAE,MAAM,uBAAuB,CAAC;AACrE,OAAO,EAAE,OAAO,IAAI,mBAAmB,EAAE,MAAM,yBAAyB,CAAC;AACzE,OAAO,EAAE,OAAO,IAAI,mBAAmB,EAAE,MAAM,yBAAyB,CAAC;AACzE,OAAO,EAAE,OAAO,IAAI,2BAA2B,EAAE,MAAM,0BAA0B,CAAC;AAClF,OAAO,EAAE,OAAO,IAAI,mBAAmB,EAAE,MAAM,iBAAiB,CAAC;AACjE,OAAO,EAAE,OAAO,IAAI,gBAAgB,EAAE,MAAM,cAAc,CAAC;AAC3D,OAAO,EAAE,OAAO,IAAI,oBAAoB,EAAE,MAAM,kBAAkB,CAAC;AACnE,OAAO,EAAE,OAAO,IAAI,4BAA4B,EAAE,MAAM,4BAA4B,CAAC"}

package/interfaces/opal-user-service-config.d.ts

@@ -0,0 +1,7 @@
+declare class OpalUserServiceConfiguration {
+    userStateUrl: string;
+    addUserUrl: string;
+    updateUserUrl: string;
+}
+export default OpalUserServiceConfiguration;
+//# sourceMappingURL=opal-user-service-config.d.ts.map

package/interfaces/opal-user-service-config.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"opal-user-service-config.d.ts","sourceRoot":"","sources":["../../src/interfaces/opal-user-service-config.ts"],"names":[],"mappings":"AAAA,cAAM,4BAA4B;IAChC,YAAY,EAAG,MAAM,CAAC;IACtB,UAAU,EAAG,MAAM,CAAC;IACpB,aAAa,EAAG,MAAM,CAAC;CACxB;AAED,eAAe,4BAA4B,CAAC"}

package/interfaces/opal-user-service-config.js

@@ -0,0 +1,7 @@
+class OpalUserServiceConfiguration {
+    userStateUrl;
+    addUserUrl;
+    updateUserUrl;
+}
+export default OpalUserServiceConfiguration;
+//# sourceMappingURL=opal-user-service-config.js.map

package/interfaces/opal-user-service-config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"opal-user-service-config.js","sourceRoot":"","sources":["../../src/interfaces/opal-user-service-config.ts"],"names":[],"mappings":"AAAA,MAAM,4BAA4B;IAChC,YAAY,CAAU;IACtB,UAAU,CAAU;IACpB,aAAa,CAAU;CACxB;AAED,eAAe,4BAA4B,CAAC"}

package/interfaces/transfer-server-state.d.ts

@@ -4,6 +4,7 @@ declare class TransferServerState {
     launchDarklyConfig: LaunchDarklyConfig;
     ssoEnabled: boolean;
     appInsightsConfig: AppInsightsConfig;
+    userStateCacheExpirationMilliseconds: number;
 }
 export default TransferServerState;
 //# sourceMappingURL=transfer-server-state.d.ts.map

package/interfaces/transfer-server-state.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"transfer-server-state.d.ts","sourceRoot":"","sources":["../../src/interfaces/transfer-server-state.ts"],"names":[],"mappings":"AAAA,OAAO,iBAAiB,MAAM,uBAAuB,CAAC;AACtD,OAAO,kBAAkB,MAAM,wBAAwB,CAAC;AAExD,cAAM,mBAAmB;IACvB,kBAAkB,EAAG,kBAAkB,CAAC;IACxC,UAAU,EAAG,OAAO,CAAC;IACrB,iBAAiB,EAAG,iBAAiB,CAAC;CACvC;AAED,eAAe,mBAAmB,CAAC"}
+{"version":3,"file":"transfer-server-state.d.ts","sourceRoot":"","sources":["../../src/interfaces/transfer-server-state.ts"],"names":[],"mappings":"AAAA,OAAO,iBAAiB,MAAM,uBAAuB,CAAC;AACtD,OAAO,kBAAkB,MAAM,wBAAwB,CAAC;AAExD,cAAM,mBAAmB;IACvB,kBAAkB,EAAG,kBAAkB,CAAC;IACxC,UAAU,EAAG,OAAO,CAAC;IACrB,iBAAiB,EAAG,iBAAiB,CAAC;IACtC,oCAAoC,EAAG,MAAM,CAAC;CAC/C;AAED,eAAe,mBAAmB,CAAC"}

package/interfaces/transfer-server-state.js

@@ -2,6 +2,7 @@ class TransferServerState {
     launchDarklyConfig;
     ssoEnabled;
     appInsightsConfig;
+    userStateCacheExpirationMilliseconds;
 }
 export default TransferServerState;
 //# sourceMappingURL=transfer-server-state.js.map

package/interfaces/transfer-server-state.js.map

@@ -1 +1 @@
-{"version":3,"file":"transfer-server-state.js","sourceRoot":"","sources":["../../src/interfaces/transfer-server-state.ts"],"names":[],"mappings":"AAGA,MAAM,mBAAmB;IACvB,kBAAkB,CAAsB;IACxC,UAAU,CAAW;IACrB,iBAAiB,CAAqB;CACvC;AAED,eAAe,mBAAmB,CAAC"}
+{"version":3,"file":"transfer-server-state.js","sourceRoot":"","sources":["../../src/interfaces/transfer-server-state.ts"],"names":[],"mappings":"AAGA,MAAM,mBAAmB;IACvB,kBAAkB,CAAsB;IACxC,UAAU,CAAW;IACrB,iBAAiB,CAAqB;IACtC,oCAAoC,CAAU;CAC/C;AAED,eAAe,mBAAmB,CAAC"}

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@hmcts/opal-frontend-common-node",
   "type": "module",
-  "version": "0.0.15",
+  "version": "0.0.17",
   "license": "MIT",
   "description": "Common nodejs library components for opal",
   "main": "dist/index",
@@ -43,10 +43,10 @@
     "@types/cookie-parser": "^1.4.6",
     "@types/express": "^5.0.0",
     "@types/luxon": "^3.4.2",
-    "@types/node": "^22.0.0",
+    "@types/node": "^24.0.0",
     "@types/session-file-store": "^1.2.5",
-    "@typescript-eslint/eslint-plugin": "8.45.0",
-    "@typescript-eslint/parser": "8.45.0",
+    "@typescript-eslint/eslint-plugin": "8.46.4",
+    "@typescript-eslint/parser": "8.46.4",
     "eslint": "^9.0.0",
     "eslint-plugin-prettier": "^5.2.6",
     "typescript": "~5.9.0",
@@ -86,6 +86,10 @@
       "import": "./routes/index.js",
       "types": "./routes/index.d.ts"
     },
+    "./services": {
+      "import": "./services/index.js",
+      "types": "./services/index.d.ts"
+    },
     "./interfaces": {
       "import": "./interfaces/index.js",
       "types": "./interfaces/index.d.ts"

package/routes/index.d.ts

@@ -3,9 +3,10 @@ import ExpiryConfiguration from '@hmcts/opal-frontend-common-node/interfaces/ses
 import RoutesConfiguration from '@hmcts/opal-frontend-common-node/interfaces/routes-config';
 import SsoConfiguration from '@hmcts/opal-frontend-common-node/interfaces/sso-config';
 import SessionConfiguration from '@hmcts/opal-frontend-common-node/interfaces/session-config';
+import OpalUserServiceConfig from '../interfaces/opal-user-service-config';
 export declare class Routes {
     private setupSSORoutes;
     private setupStubRoutes;
-    enableFor(app: Application, ssoEnabled: boolean, expiryConfiguration: ExpiryConfiguration, routesConfiguration: RoutesConfiguration, sessionConfiguration: SessionConfiguration, ssoConfiguration: SsoConfiguration): void;
+    enableFor(app: Application, ssoEnabled: boolean, expiryConfiguration: ExpiryConfiguration, routesConfiguration: RoutesConfiguration, sessionConfiguration: SessionConfiguration, ssoConfiguration: SsoConfiguration, opalUserServiceConfig: OpalUserServiceConfig): void;
 }
 //# sourceMappingURL=index.d.ts.map

package/routes/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/routes/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,SAAS,CAAC;AAQtC,OAAO,mBAAmB,MAAM,mEAAmE,CAAC;AACpG,OAAO,mBAAmB,MAAM,2DAA2D,CAAC;AAC5F,OAAO,gBAAgB,MAAM,wDAAwD,CAAC;AACtF,OAAO,oBAAoB,MAAM,4DAA4D,CAAC;AAG9F,qBAAa,MAAM;IACjB,OAAO,CAAC,cAAc;IAoDtB,OAAO,CAAC,eAAe;IA2BhB,SAAS,CACd,GAAG,EAAE,WAAW,EAChB,UAAU,EAAE,OAAO,EACnB,mBAAmB,EAAE,mBAAmB,EACxC,mBAAmB,EAAE,mBAAmB,EACxC,oBAAoB,EAAE,oBAAoB,EAC1C,gBAAgB,EAAE,gBAAgB,GACjC,IAAI;CAqBR"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/routes/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,SAAS,CAAC;AAQtC,OAAO,mBAAmB,MAAM,mEAAmE,CAAC;AACpG,OAAO,mBAAmB,MAAM,2DAA2D,CAAC;AAC5F,OAAO,gBAAgB,MAAM,wDAAwD,CAAC;AACtF,OAAO,oBAAoB,MAAM,4DAA4D,CAAC;AAE9F,OAAO,qBAAqB,MAAM,wCAAwC,CAAC;AAE3E,qBAAa,MAAM;IACjB,OAAO,CAAC,cAAc;IAqDtB,OAAO,CAAC,eAAe;IA2BhB,SAAS,CACd,GAAG,EAAE,WAAW,EAChB,UAAU,EAAE,OAAO,EACnB,mBAAmB,EAAE,mBAAmB,EACxC,mBAAmB,EAAE,mBAAmB,EACxC,oBAAoB,EAAE,oBAAoB,EAC1C,gBAAgB,EAAE,gBAAgB,EAClC,qBAAqB,EAAE,qBAAqB,GAC3C,IAAI;CAqBR"}

package/routes/index.js

@@ -6,7 +6,7 @@ import { ssoAuthenticatedStub, ssoLogoutCallbackStub, ssoLoginStub, ssoLoginCall
 import sessionExpiry from '@hmcts/opal-frontend-common-node/session/session-expiry';
 import ssoLogoutCallback from '../sso/sso-logout-callback';
 export class Routes {
-    setupSSORoutes(app, ssoConfiguration, routesConfiguration) {
+    setupSSORoutes(app, ssoConfiguration, routesConfiguration, opalUserServiceConfig) {
         if (!routesConfiguration.clientId || !routesConfiguration.clientSecret || !routesConfiguration.tenantId) {
             throw new Error('Missing essential SSO configuration fields: clientId, clientSecret, or tenantId');
         }
@@ -15,7 +15,7 @@ export class Routes {
         // LOGIN
         app.get(ssoConfiguration.login, (req, res, next) => ssoLogin(res, next, confidentialClient, routesConfiguration.frontendHostname, ssoConfiguration.loginCallback));
         // LOGIN CALLBACK
-        app.post(ssoConfiguration.loginCallback, (req, res) => ssoLoginCallback(req, res, confidentialClient, routesConfiguration.clientId, routesConfiguration.frontendHostname, ssoConfiguration.loginCallback));
+        app.post(ssoConfiguration.loginCallback, (req, res) => ssoLoginCallback(req, res, confidentialClient, ssoConfiguration.loginCallback, routesConfiguration, opalUserServiceConfig));
         // LOGOUT
         app.get(ssoConfiguration.logout, (req, res) => ssoLogout(res, `${routesConfiguration.microsoftUrl}${routesConfiguration.tenantId}`, `${routesConfiguration.frontendHostname}${ssoConfiguration.logoutCallback}`));
         // LOGOUT CALLBACK
@@ -27,7 +27,7 @@ export class Routes {
         // LOGIN
         app.get(ssoConfiguration.login, (req, res, next) => ssoLoginStub(req, res, next));
         // LOGIN CALLBACK
-        app.get(ssoConfiguration.loginCallback, (req, res, next) => ssoLoginCallbackStub(req, res, next, routesConfiguration.opalApiTarget));
+        app.get(ssoConfiguration.loginCallback, (req, res, next) => ssoLoginCallbackStub(req, res, next, routesConfiguration.opalUserServiceTarget));
         // LOGOUT
         app.get(ssoConfiguration.logout, (req, res, next) => ssoLogoutCallbackStub(req, res, next, routesConfiguration.prefix));
         // LOGOUT CALLBACK
@@ -35,12 +35,12 @@ export class Routes {
         // AUTHENTICATED
         app.get(ssoConfiguration.authenticated, (req, res) => ssoAuthenticatedStub(req, res));
     }
-    enableFor(app, ssoEnabled, expiryConfiguration, routesConfiguration, sessionConfiguration, ssoConfiguration) {
+    enableFor(app, ssoEnabled, expiryConfiguration, routesConfiguration, sessionConfiguration, ssoConfiguration, opalUserServiceConfig) {
         // Declare use of body-parser AFTER the use of proxy https://github.com/villadora/express-http-proxy
         app.use(bodyParser.json());
         app.use(bodyParser.urlencoded({ extended: false }));
         if (ssoEnabled) {
-            this.setupSSORoutes(app, ssoConfiguration, routesConfiguration);
+            this.setupSSORoutes(app, ssoConfiguration, routesConfiguration, opalUserServiceConfig);
         }
         else {
             this.setupStubRoutes(app, ssoConfiguration, routesConfiguration);

package/routes/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/routes/index.ts"],"names":[],"mappings":"AACA,OAAO,UAAU,MAAM,aAAa,CAAC;AAErC,OAAO,EAAE,gBAAgB,EAAE,QAAQ,EAAE,gBAAgB,EAAE,MAAM,QAAQ,CAAC;AACtE,OAAO,kBAAkB,MAAM,0BAA0B,CAAC;AAC1D,OAAO,SAAS,MAAM,mBAAmB,CAAC;AAC1C,OAAO,EAAE,oBAAoB,EAAE,qBAAqB,EAAE,YAAY,EAAE,oBAAoB,EAAE,MAAM,cAAc,CAAC;AAC/G,OAAO,aAAa,MAAM,yDAAyD,CAAC;AAKpF,OAAO,iBAAiB,MAAM,4BAA4B,CAAC;AAE3D,MAAM,OAAO,MAAM;IACT,cAAc,CACpB,GAAgB,EAChB,gBAAkC,EAClC,mBAAwC;QAExC,IAAI,CAAC,mBAAmB,CAAC,QAAQ,IAAI,CAAC,mBAAmB,CAAC,YAAY,IAAI,CAAC,mBAAmB,CAAC,QAAQ,EAAE,CAAC;YACxG,MAAM,IAAI,KAAK,CAAC,iFAAiF,CAAC,CAAC;QACrG,CAAC;QAED,oBAAoB;QACpB,MAAM,kBAAkB,GAAG,kBAAkB,CAC3C,mBAAmB,CAAC,QAAQ,EAC5B,mBAAmB,CAAC,YAAY,EAChC,mBAAmB,CAAC,QAAQ,EAC5B,mBAAmB,CAAC,YAAY,CACjC,CAAC;QAEF,QAAQ;QACR,GAAG,CAAC,GAAG,CAAC,gBAAgB,CAAC,KAAK,EAAE,CAAC,GAAY,EAAE,GAAa,EAAE,IAAkB,EAAE,EAAE,CAClF,QAAQ,CAAC,GAAG,EAAE,IAAI,EAAE,kBAAkB,EAAE,mBAAmB,CAAC,gBAAgB,EAAE,gBAAgB,CAAC,aAAa,CAAC,CAC9G,CAAC;QAEF,iBAAiB;QACjB,GAAG,CAAC,IAAI,CAAC,gBAAgB,CAAC,aAAa,EAAE,CAAC,GAAY,EAAE,GAAa,EAAE,EAAE,CACvE,gBAAgB,CACd,GAAG,EACH,GAAG,EACH,kBAAkB,EAClB,mBAAmB,CAAC,QAAQ,EAC5B,mBAAmB,CAAC,gBAAgB,EACpC,gBAAgB,CAAC,aAAa,CAC/B,CACF,CAAC;QAEF,SAAS;QACT,GAAG,CAAC,GAAG,CAAC,gBAAgB,CAAC,MAAM,EAAE,CAAC,GAAY,EAAE,GAAa,EAAE,EAAE,CAC/D,SAAS,CACP,GAAG,EACH,GAAG,mBAAmB,CAAC,YAAY,GAAG,mBAAmB,CAAC,QAAQ,EAAE,EACpE,GAAG,mBAAmB,CAAC,gBAAgB,GAAG,gBAAgB,CAAC,cAAc,EAAE,CAC5E,CACF,CAAC;QAEF,kBAAkB;QAClB,GAAG,CAAC,GAAG,CAAC,gBAAgB,CAAC,cAAc,EAAE,CAAC,GAAY,EAAE,GAAa,EAAE,IAAkB,EAAE,EAAE,CAC3F,iBAAiB,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,mBAAmB,CAAC,MAAM,CAAC,CAC9D,CAAC;QAEF,gBAAgB;QAChB,GAAG,CAAC,GAAG,CAAC,gBAAgB,CAAC,aAAa,EAAE,CAAC,GAAY,EAAE,GAAa,EAAE,EAAE,CAAC,gBAAgB,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC;IACvG,CAAC;IAEO,eAAe,CACrB,GAAgB,EAChB,gBAAkC,EAClC,mBAAwC;QAExC,QAAQ;QACR,GAAG,CAAC,GAAG,CAAC,gBAAgB,CAAC,KAAK,EAAE,CAAC,GAAY,EAAE,GAAa,EAAE,IAAkB,EAAE,EAAE,CAAC,YAAY,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC,CAAC;QAEnH,iBAAiB;QACjB,GAAG,CAAC,GAAG,CAAC,gBAAgB,CAAC,aAAa,EAAE,CAAC,GAAY,EAAE,GAAa,EAAE,IAAkB,EAAE,EAAE,CAC1F,oBAAoB,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,mBAAmB,CAAC,aAAa,CAAC,CACxE,CAAC;QAEF,SAAS;QACT,GAAG,CAAC,GAAG,CAAC,gBAAgB,CAAC,MAAM,EAAE,CAAC,GAAY,EAAE,GAAa,EAAE,IAAkB,EAAE,EAAE,CACnF,qBAAqB,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,mBAAmB,CAAC,MAAM,CAAC,CAClE,CAAC;QAEF,kBAAkB;QAClB,GAAG,CAAC,GAAG,CAAC,gBAAgB,CAAC,cAAc,EAAE,CAAC,GAAY,EAAE,GAAa,EAAE,IAAkB,EAAE,EAAE,CAC3F,qBAAqB,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,mBAAmB,CAAC,MAAM,CAAC,CAClE,CAAC;QAEF,gBAAgB;QAChB,GAAG,CAAC,GAAG,CAAC,gBAAgB,CAAC,aAAa,EAAE,CAAC,GAAY,EAAE,GAAa,EAAE,EAAE,CAAC,oBAAoB,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC;IAC3G,CAAC;IAEM,SAAS,CACd,GAAgB,EAChB,UAAmB,EACnB,mBAAwC,EACxC,mBAAwC,EACxC,oBAA0C,EAC1C,gBAAkC;QAElC,oGAAoG;QACpG,GAAG,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,EAAE,CAAC,CAAC;QAC3B,GAAG,CAAC,GAAG,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC;QAEpD,IAAI,UAAU,EAAE,CAAC;YACf,IAAI,CAAC,cAAc,CAAC,GAAG,EAAE,gBAAgB,EAAE,mBAAmB,CAAC,CAAC;QAClE,CAAC;aAAM,CAAC;YACN,IAAI,CAAC,eAAe,CAAC,GAAG,EAAE,gBAAgB,EAAE,mBAAmB,CAAC,CAAC;QACnE,CAAC;QAED,GAAG,CAAC,GAAG,CAAC,oBAAoB,CAAC,gBAAgB,EAAE,CAAC,GAAY,EAAE,GAAa,EAAE,EAAE,CAC7E,aAAa,CACX,GAAG,EACH,GAAG,EACH,mBAAmB,CAAC,QAAQ,EAC5B,mBAAmB,CAAC,wBAAwB,EAC5C,mBAAmB,CAAC,8BAA8B,CACnD,CACF,CAAC;IACJ,CAAC;CACF"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/routes/index.ts"],"names":[],"mappings":"AACA,OAAO,UAAU,MAAM,aAAa,CAAC;AAErC,OAAO,EAAE,gBAAgB,EAAE,QAAQ,EAAE,gBAAgB,EAAE,MAAM,QAAQ,CAAC;AACtE,OAAO,kBAAkB,MAAM,0BAA0B,CAAC;AAC1D,OAAO,SAAS,MAAM,mBAAmB,CAAC;AAC1C,OAAO,EAAE,oBAAoB,EAAE,qBAAqB,EAAE,YAAY,EAAE,oBAAoB,EAAE,MAAM,cAAc,CAAC;AAC/G,OAAO,aAAa,MAAM,yDAAyD,CAAC;AAKpF,OAAO,iBAAiB,MAAM,4BAA4B,CAAC;AAG3D,MAAM,OAAO,MAAM;IACT,cAAc,CACpB,GAAgB,EAChB,gBAAkC,EAClC,mBAAwC,EACxC,qBAA4C;QAE5C,IAAI,CAAC,mBAAmB,CAAC,QAAQ,IAAI,CAAC,mBAAmB,CAAC,YAAY,IAAI,CAAC,mBAAmB,CAAC,QAAQ,EAAE,CAAC;YACxG,MAAM,IAAI,KAAK,CAAC,iFAAiF,CAAC,CAAC;QACrG,CAAC;QAED,oBAAoB;QACpB,MAAM,kBAAkB,GAAG,kBAAkB,CAC3C,mBAAmB,CAAC,QAAQ,EAC5B,mBAAmB,CAAC,YAAY,EAChC,mBAAmB,CAAC,QAAQ,EAC5B,mBAAmB,CAAC,YAAY,CACjC,CAAC;QAEF,QAAQ;QACR,GAAG,CAAC,GAAG,CAAC,gBAAgB,CAAC,KAAK,EAAE,CAAC,GAAY,EAAE,GAAa,EAAE,IAAkB,EAAE,EAAE,CAClF,QAAQ,CAAC,GAAG,EAAE,IAAI,EAAE,kBAAkB,EAAE,mBAAmB,CAAC,gBAAgB,EAAE,gBAAgB,CAAC,aAAa,CAAC,CAC9G,CAAC;QAEF,iBAAiB;QACjB,GAAG,CAAC,IAAI,CAAC,gBAAgB,CAAC,aAAa,EAAE,CAAC,GAAY,EAAE,GAAa,EAAE,EAAE,CACvE,gBAAgB,CACd,GAAG,EACH,GAAG,EACH,kBAAkB,EAClB,gBAAgB,CAAC,aAAa,EAC9B,mBAAmB,EACnB,qBAAqB,CACtB,CACF,CAAC;QAEF,SAAS;QACT,GAAG,CAAC,GAAG,CAAC,gBAAgB,CAAC,MAAM,EAAE,CAAC,GAAY,EAAE,GAAa,EAAE,EAAE,CAC/D,SAAS,CACP,GAAG,EACH,GAAG,mBAAmB,CAAC,YAAY,GAAG,mBAAmB,CAAC,QAAQ,EAAE,EACpE,GAAG,mBAAmB,CAAC,gBAAgB,GAAG,gBAAgB,CAAC,cAAc,EAAE,CAC5E,CACF,CAAC;QAEF,kBAAkB;QAClB,GAAG,CAAC,GAAG,CAAC,gBAAgB,CAAC,cAAc,EAAE,CAAC,GAAY,EAAE,GAAa,EAAE,IAAkB,EAAE,EAAE,CAC3F,iBAAiB,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,mBAAmB,CAAC,MAAM,CAAC,CAC9D,CAAC;QAEF,gBAAgB;QAChB,GAAG,CAAC,GAAG,CAAC,gBAAgB,CAAC,aAAa,EAAE,CAAC,GAAY,EAAE,GAAa,EAAE,EAAE,CAAC,gBAAgB,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC;IACvG,CAAC;IAEO,eAAe,CACrB,GAAgB,EAChB,gBAAkC,EAClC,mBAAwC;QAExC,QAAQ;QACR,GAAG,CAAC,GAAG,CAAC,gBAAgB,CAAC,KAAK,EAAE,CAAC,GAAY,EAAE,GAAa,EAAE,IAAkB,EAAE,EAAE,CAAC,YAAY,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC,CAAC;QAEnH,iBAAiB;QACjB,GAAG,CAAC,GAAG,CAAC,gBAAgB,CAAC,aAAa,EAAE,CAAC,GAAY,EAAE,GAAa,EAAE,IAAkB,EAAE,EAAE,CAC1F,oBAAoB,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,mBAAmB,CAAC,qBAAqB,CAAC,CAChF,CAAC;QAEF,SAAS;QACT,GAAG,CAAC,GAAG,CAAC,gBAAgB,CAAC,MAAM,EAAE,CAAC,GAAY,EAAE,GAAa,EAAE,IAAkB,EAAE,EAAE,CACnF,qBAAqB,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,mBAAmB,CAAC,MAAM,CAAC,CAClE,CAAC;QAEF,kBAAkB;QAClB,GAAG,CAAC,GAAG,CAAC,gBAAgB,CAAC,cAAc,EAAE,CAAC,GAAY,EAAE,GAAa,EAAE,IAAkB,EAAE,EAAE,CAC3F,qBAAqB,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,mBAAmB,CAAC,MAAM,CAAC,CAClE,CAAC;QAEF,gBAAgB;QAChB,GAAG,CAAC,GAAG,CAAC,gBAAgB,CAAC,aAAa,EAAE,CAAC,GAAY,EAAE,GAAa,EAAE,EAAE,CAAC,oBAAoB,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC;IAC3G,CAAC;IAEM,SAAS,CACd,GAAgB,EAChB,UAAmB,EACnB,mBAAwC,EACxC,mBAAwC,EACxC,oBAA0C,EAC1C,gBAAkC,EAClC,qBAA4C;QAE5C,oGAAoG;QACpG,GAAG,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,EAAE,CAAC,CAAC;QAC3B,GAAG,CAAC,GAAG,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC;QAEpD,IAAI,UAAU,EAAE,CAAC;YACf,IAAI,CAAC,cAAc,CAAC,GAAG,EAAE,gBAAgB,EAAE,mBAAmB,EAAE,qBAAqB,CAAC,CAAC;QACzF,CAAC;aAAM,CAAC;YACN,IAAI,CAAC,eAAe,CAAC,GAAG,EAAE,gBAAgB,EAAE,mBAAmB,CAAC,CAAC;QACnE,CAAC;QAED,GAAG,CAAC,GAAG,CAAC,oBAAoB,CAAC,gBAAgB,EAAE,CAAC,GAAY,EAAE,GAAa,EAAE,EAAE,CAC7E,aAAa,CACX,GAAG,EACH,GAAG,EACH,mBAAmB,CAAC,QAAQ,EAC5B,mBAAmB,CAAC,wBAAwB,EAC5C,mBAAmB,CAAC,8BAA8B,CACnD,CACF,CAAC;IACJ,CAAC;CACF"}

package/services/index.d.ts

@@ -0,0 +1,2 @@
+export { handleCheckUser } from './opal-user-service';
+//# sourceMappingURL=index.d.ts.map

package/services/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/services/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC"}

package/services/index.js

@@ -0,0 +1,2 @@
+export { handleCheckUser } from './opal-user-service';
+//# sourceMappingURL=index.js.map

package/services/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/services/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC"}

package/services/opal-user-service.d.ts

@@ -0,0 +1,9 @@
+import OpalUserServiceConfiguration from '../interfaces/opal-user-service-config';
+/**
+ * Handles user validation and management after successful SSO login
+ * @param opalUserServiceTarget - The base URL of the opal-user-service
+ * @param accessToken - The access token for authentication
+ * @returns Promise<boolean> - true if user management was successful, false otherwise
+ */
+export declare function handleCheckUser(opalUserServiceTarget: string, accessToken: string, config: OpalUserServiceConfiguration): Promise<boolean>;
+//# sourceMappingURL=opal-user-service.d.ts.map

package/services/opal-user-service.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"opal-user-service.d.ts","sourceRoot":"","sources":["../../src/services/opal-user-service.ts"],"names":[],"mappings":"AAEA,OAAO,4BAA4B,MAAM,wCAAwC,CAAC;AA0HlF;;;;;GAKG;AACH,wBAAsB,eAAe,CACnC,qBAAqB,EAAE,MAAM,EAC7B,WAAW,EAAE,MAAM,EACnB,MAAM,EAAE,4BAA4B,GACnC,OAAO,CAAC,OAAO,CAAC,CAoDlB"}

package/services/opal-user-service.js

@@ -0,0 +1,152 @@
+import axios from 'axios';
+import { Logger } from '@hmcts/nodejs-logging';
+const logger = Logger.getLogger('opal-user-service');
+/**
+ * Checks if a user exists in the opal-user-service
+ * @param opalUserServiceTarget - The base URL of the opal-user-service
+ * @param accessToken - The access token for authentication
+ * @returns Promise<{status: number, user_id?: string, version?: string}>
+ */
+async function checkUserExists(opalUserServiceTarget, accessToken, userStateUrl) {
+    try {
+        const response = await axios.get(`${opalUserServiceTarget}${userStateUrl}`, {
+            headers: {
+                Authorization: `Bearer ${accessToken}`,
+                'Content-Type': 'application/json',
+            },
+        });
+        return {
+            status: response.status,
+            user_id: response.data?.user_id,
+            version: response.headers['etag'],
+        };
+    }
+    catch (error) {
+        if (axios.isAxiosError(error)) {
+            const status = error.response?.status;
+            if (status) {
+                return {
+                    status,
+                    // For 409 conflicts, extract user_id from resourceId
+                    user_id: error.response?.data?.resourceId,
+                    // Extract version from ETag header (same as success case)
+                    version: error.response?.headers['etag'],
+                };
+            }
+            logger.error('Axios error without response status when checking user state', {
+                message: error.message,
+                code: error.code,
+            });
+            return { status: 500 };
+        }
+        logger.error('Unexpected error when checking user state', error);
+        return { status: 500 };
+    }
+}
+/**
+ * Adds a new user via the opal-user-service
+ * @param opalUserServiceTarget - The base URL of the opal-user-service
+ * @param accessToken - The access token for authentication
+ * @returns Promise<boolean> - true if successful, false otherwise
+ */
+async function addUser(opalUserServiceTarget, accessToken, addUserUrl) {
+    try {
+        const response = await axios.post(`${opalUserServiceTarget}${addUserUrl}`, {}, {
+            headers: {
+                Authorization: `Bearer ${accessToken}`,
+                'Content-Type': 'application/json',
+            },
+        });
+        return response.status === 201 || response.status === 200;
+    }
+    catch (error) {
+        logger.error('Error adding user', error);
+        return false;
+    }
+}
+/**
+ * Updates an existing user via the opal-user-service
+ * @param opalUserServiceTarget - The base URL of the opal-user-service
+ * @param accessToken - The access token for authentication
+ * @param updateUserUrl - The update user endpoint URL
+ * @param userId - The user ID to update
+ * @param version - The version number for optimistic locking
+ * @returns Promise<boolean> - true if successful, false otherwise
+ */
+async function updateUser(opalUserServiceTarget, accessToken, updateUserUrl, userId, version) {
+    try {
+        const headers = {
+            Authorization: `Bearer ${accessToken}`,
+            'Content-Type': 'application/json',
+            'If-Match': version,
+        };
+        const response = await axios.put(`${opalUserServiceTarget}${updateUserUrl}/${userId}`, {}, { headers });
+        return response.status === 200;
+    }
+    catch (error) {
+        if (axios.isAxiosError(error)) {
+            logger.error('updateUser axios error', {
+                status: error.response?.status,
+                statusText: error.response?.statusText,
+                data: error.response?.data,
+                url: error.config?.url,
+                method: error.config?.method,
+                message: error.message,
+            });
+        }
+        else {
+            logger.error('updateUser non-axios error', { error: String(error) });
+        }
+        return false;
+    }
+}
+/**
+ * Handles user validation and management after successful SSO login
+ * @param opalUserServiceTarget - The base URL of the opal-user-service
+ * @param accessToken - The access token for authentication
+ * @returns Promise<boolean> - true if user management was successful, false otherwise
+ */
+export async function handleCheckUser(opalUserServiceTarget, accessToken, config) {
+    const userResult = await checkUserExists(opalUserServiceTarget, accessToken, config.userStateUrl);
+    switch (userResult.status) {
+        case 200:
+            logger.info('User exists, proceeding to frontend');
+            return true;
+        case 404: {
+            logger.info('User not found, attempting to add user');
+            const addResult = await addUser(opalUserServiceTarget, accessToken, config.addUserUrl);
+            if (addResult) {
+                logger.info('User successfully added');
+                return true;
+            }
+            else {
+                logger.error('Failed to add user');
+                return false;
+            }
+        }
+        case 409: {
+            logger.info('User conflict detected, attempting to update user');
+            if (!userResult.user_id) {
+                logger.error('Cannot update user: userId not available');
+                return false;
+            }
+            if (!userResult.version) {
+                logger.error('Cannot update user: version not available');
+                return false;
+            }
+            const updateResult = await updateUser(opalUserServiceTarget, accessToken, config.updateUserUrl, userResult.user_id, userResult.version);
+            if (updateResult) {
+                logger.info('User successfully updated');
+                return true;
+            }
+            else {
+                logger.error('Failed to update user');
+                return false;
+            }
+        }
+        default:
+            logger.error('Error during user validation', { status: userResult.status });
+            return false;
+    }
+}
+//# sourceMappingURL=opal-user-service.js.map

package/services/opal-user-service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"opal-user-service.js","sourceRoot":"","sources":["../../src/services/opal-user-service.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,MAAM,OAAO,CAAC;AAC1B,OAAO,EAAE,MAAM,EAAE,MAAM,uBAAuB,CAAC;AAG/C,MAAM,MAAM,GAAG,MAAM,CAAC,SAAS,CAAC,mBAAmB,CAAC,CAAC;AAErD;;;;;GAKG;AACH,KAAK,UAAU,eAAe,CAC5B,qBAA6B,EAC7B,WAAmB,EACnB,YAAoB;IAEpB,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,CAAC,GAAG,qBAAqB,GAAG,YAAY,EAAE,EAAE;YAC1E,OAAO,EAAE;gBACP,aAAa,EAAE,UAAU,WAAW,EAAE;gBACtC,cAAc,EAAE,kBAAkB;aACnC;SACF,CAAC,CAAC;QAEH,OAAO;YACL,MAAM,EAAE,QAAQ,CAAC,MAAM;YACvB,OAAO,EAAE,QAAQ,CAAC,IAAI,EAAE,OAAO;YAC/B,OAAO,EAAE,QAAQ,CAAC,OAAO,CAAC,MAAM,CAAC;SAClC,CAAC;IACJ,CAAC;IAAC,OAAO,KAAc,EAAE,CAAC;QACxB,IAAI,KAAK,CAAC,YAAY,CAAC,KAAK,CAAC,EAAE,CAAC;YAC9B,MAAM,MAAM,GAAG,KAAK,CAAC,QAAQ,EAAE,MAAM,CAAC;YACtC,IAAI,MAAM,EAAE,CAAC;gBACX,OAAO;oBACL,MAAM;oBACN,qDAAqD;oBACrD,OAAO,EAAE,KAAK,CAAC,QAAQ,EAAE,IAAI,EAAE,UAAU;oBACzC,0DAA0D;oBAC1D,OAAO,EAAE,KAAK,CAAC,QAAQ,EAAE,OAAO,CAAC,MAAM,CAAC;iBACzC,CAAC;YACJ,CAAC;YAED,MAAM,CAAC,KAAK,CAAC,8DAA8D,EAAE;gBAC3E,OAAO,EAAE,KAAK,CAAC,OAAO;gBACtB,IAAI,EAAE,KAAK,CAAC,IAAI;aACjB,CAAC,CAAC;YACH,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC;QACzB,CAAC;QAED,MAAM,CAAC,KAAK,CAAC,2CAA2C,EAAE,KAAK,CAAC,CAAC;QACjE,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC;IACzB,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,KAAK,UAAU,OAAO,CAAC,qBAA6B,EAAE,WAAmB,EAAE,UAAkB;IAC3F,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,IAAI,CAC/B,GAAG,qBAAqB,GAAG,UAAU,EAAE,EACvC,EAAE,EACF;YACE,OAAO,EAAE;gBACP,aAAa,EAAE,UAAU,WAAW,EAAE;gBACtC,cAAc,EAAE,kBAAkB;aACnC;SACF,CACF,CAAC;QAEF,OAAO,QAAQ,CAAC,MAAM,KAAK,GAAG,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,CAAC;IAC5D,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,CAAC,KAAK,CAAC,mBAAmB,EAAE,KAAK,CAAC,CAAC;QACzC,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED;;;;;;;;GAQG;AACH,KAAK,UAAU,UAAU,CACvB,qBAA6B,EAC7B,WAAmB,EACnB,aAAqB,EACrB,MAAc,EACd,OAAe;IAEf,IAAI,CAAC;QACH,MAAM,OAAO,GAA2B;YACtC,aAAa,EAAE,UAAU,WAAW,EAAE;YACtC,cAAc,EAAE,kBAAkB;YAClC,UAAU,EAAE,OAAO;SACpB,CAAC;QAEF,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,CAAC,GAAG,qBAAqB,GAAG,aAAa,IAAI,MAAM,EAAE,EAAE,EAAE,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC;QAExG,OAAO,QAAQ,CAAC,MAAM,KAAK,GAAG,CAAC;IACjC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,KAAK,CAAC,YAAY,CAAC,KAAK,CAAC,EAAE,CAAC;YAC9B,MAAM,CAAC,KAAK,CAAC,wBAAwB,EAAE;gBACrC,MAAM,EAAE,KAAK,CAAC,QAAQ,EAAE,MAAM;gBAC9B,UAAU,EAAE,KAAK,CAAC,QAAQ,EAAE,UAAU;gBACtC,IAAI,EAAE,KAAK,CAAC,QAAQ,EAAE,IAAI;gBAC1B,GAAG,EAAE,KAAK,CAAC,MAAM,EAAE,GAAG;gBACtB,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,MAAM;gBAC5B,OAAO,EAAE,KAAK,CAAC,OAAO;aACvB,CAAC,CAAC;QACL,CAAC;aAAM,CAAC;YACN,MAAM,CAAC,KAAK,CAAC,4BAA4B,EAAE,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QACvE,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,qBAA6B,EAC7B,WAAmB,EACnB,MAAoC;IAEpC,MAAM,UAAU,GAAG,MAAM,eAAe,CAAC,qBAAqB,EAAE,WAAW,EAAE,MAAM,CAAC,YAAY,CAAC,CAAC;IAElG,QAAQ,UAAU,CAAC,MAAM,EAAE,CAAC;QAC1B,KAAK,GAAG;YACN,MAAM,CAAC,IAAI,CAAC,qCAAqC,CAAC,CAAC;YACnD,OAAO,IAAI,CAAC;QAEd,KAAK,GAAG,CAAC,CAAC,CAAC;YACT,MAAM,CAAC,IAAI,CAAC,wCAAwC,CAAC,CAAC;YACtD,MAAM,SAAS,GAAG,MAAM,OAAO,CAAC,qBAAqB,EAAE,WAAW,EAAE,MAAM,CAAC,UAAU,CAAC,CAAC;YACvF,IAAI,SAAS,EAAE,CAAC;gBACd,MAAM,CAAC,IAAI,CAAC,yBAAyB,CAAC,CAAC;gBACvC,OAAO,IAAI,CAAC;YACd,CAAC;iBAAM,CAAC;gBACN,MAAM,CAAC,KAAK,CAAC,oBAAoB,CAAC,CAAC;gBACnC,OAAO,KAAK,CAAC;YACf,CAAC;QACH,CAAC;QAED,KAAK,GAAG,CAAC,CAAC,CAAC;YACT,MAAM,CAAC,IAAI,CAAC,mDAAmD,CAAC,CAAC;YACjE,IAAI,CAAC,UAAU,CAAC,OAAO,EAAE,CAAC;gBACxB,MAAM,CAAC,KAAK,CAAC,0CAA0C,CAAC,CAAC;gBACzD,OAAO,KAAK,CAAC;YACf,CAAC;YAED,IAAI,CAAC,UAAU,CAAC,OAAO,EAAE,CAAC;gBACxB,MAAM,CAAC,KAAK,CAAC,2CAA2C,CAAC,CAAC;gBAC1D,OAAO,KAAK,CAAC;YACf,CAAC;YAED,MAAM,YAAY,GAAG,MAAM,UAAU,CACnC,qBAAqB,EACrB,WAAW,EACX,MAAM,CAAC,aAAa,EACpB,UAAU,CAAC,OAAO,EAClB,UAAU,CAAC,OAAO,CACnB,CAAC;YACF,IAAI,YAAY,EAAE,CAAC;gBACjB,MAAM,CAAC,IAAI,CAAC,2BAA2B,CAAC,CAAC;gBACzC,OAAO,IAAI,CAAC;YACd,CAAC;iBAAM,CAAC;gBACN,MAAM,CAAC,KAAK,CAAC,uBAAuB,CAAC,CAAC;gBACtC,OAAO,KAAK,CAAC;YACf,CAAC;QACH,CAAC;QAED;YACE,MAAM,CAAC,KAAK,CAAC,8BAA8B,EAAE,EAAE,MAAM,EAAE,UAAU,CAAC,MAAM,EAAE,CAAC,CAAC;YAC5E,OAAO,KAAK,CAAC;IACjB,CAAC;AACH,CAAC"}

package/sso/sso-login-callback.d.ts

@@ -1,22 +1,25 @@
 import { Request, Response } from 'express';
 import { ConfidentialClientApplication } from '@azure/msal-node';
 import 'express-session';
+import { RoutesConfiguration } from '../interfaces';
+import OpalUserServiceConfiguration from '../interfaces/opal-user-service-config';
 /**
- * Handles the SSO login callback by exchanging the authorization code for tokens using MSAL,
- * storing the access token in the session, and redirecting the user to the frontend.
+ * Handles the SSO login callback by processing the authorization code, acquiring tokens,
+ * and managing the user in the Opal User Service. This function is designed to handle
+ * transient network errors during token acquisition and ensures proper session management.
  *
- * @param req - The Express request object, expected to contain the authorization code in the body.
- * @param res - The Express response object, used to send responses or perform redirects.
- * @param msalInstance - An instance of MSAL ConfidentialClientApplication used to acquire tokens.
- * @param clientId - The client ID of the application, used to build the token request scope.
- * @param frontendHostname - The base URL of the frontend application, used for redirect URIs.
- * @param ssoLoginCallback - The path of the SSO login callback, appended to the frontend hostname for redirect URI.
- * @returns A promise that resolves when the callback handling is complete.
+ * @param req - The HTTP request object containing the authorization code in the body.
+ * @param res - The HTTP response object used to send responses back to the client.
+ * @param msalInstance - An instance of the MSAL ConfidentialClientApplication used to acquire tokens.
+ * @param clientId - The client ID of the application registered in Azure AD.
+ * @param frontendHostname - The hostname of the frontend application.
+ * @param ssoLoginCallback - The relative path of the SSO login callback endpoint.
+ * @param opalUserServiceTarget - The target URL of the Opal User Service for user validation.
+ * @param opalUserServiceConfig - Configuration options for the Opal User Service.
  *
- * @remarks
- * - If the authorization code is missing, responds with HTTP 400.
- * - On successful token acquisition, stores the access token in the session and redirects to the frontend.
- * - On error, logs the error and responds with HTTP 500.
+ * @returns A promise that resolves when the SSO login callback process is complete.
+ *
+ * @throws Will throw an error if token acquisition fails after retries or if user validation fails.
  */
-export default function ssoLoginCallbackHandler(req: Request, res: Response, msalInstance: ConfidentialClientApplication, clientId: string, frontendHostname: string, ssoLoginCallback: string): Promise<void>;
+export default function ssoLoginCallbackHandler(req: Request, res: Response, msalInstance: ConfidentialClientApplication, ssoLoginCallback: string, routesConfiguration: RoutesConfiguration, opalUserServiceConfig: OpalUserServiceConfiguration): Promise<void>;
 //# sourceMappingURL=sso-login-callback.d.ts.map

package/sso/sso-login-callback.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sso-login-callback.d.ts","sourceRoot":"","sources":["../../src/sso/sso-login-callback.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AAC5C,OAAO,EAAE,6BAA6B,EAAE,MAAM,kBAAkB,CAAC;AACjE,OAAO,iBAAiB,CAAC;AAOzB;;;;;;;;;;;;;;;;GAgBG;AACH,wBAA8B,uBAAuB,CACnD,GAAG,EAAE,OAAO,EACZ,GAAG,EAAE,QAAQ,EACb,YAAY,EAAE,6BAA6B,EAC3C,QAAQ,EAAE,MAAM,EAChB,gBAAgB,EAAE,MAAM,EACxB,gBAAgB,EAAE,MAAM,GACvB,OAAO,CAAC,IAAI,CAAC,CA6Df"}
+{"version":3,"file":"sso-login-callback.d.ts","sourceRoot":"","sources":["../../src/sso/sso-login-callback.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AAC5C,OAAO,EAAE,6BAA6B,EAAE,MAAM,kBAAkB,CAAC;AACjE,OAAO,iBAAiB,CAAC;AACzB,OAAO,EAAE,mBAAmB,EAAiB,MAAM,eAAe,CAAC;AAGnE,OAAO,4BAA4B,MAAM,wCAAwC,CAAC;AAKlF;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAA8B,uBAAuB,CACnD,GAAG,EAAE,OAAO,EACZ,GAAG,EAAE,QAAQ,EACb,YAAY,EAAE,6BAA6B,EAC3C,gBAAgB,EAAE,MAAM,EACxB,mBAAmB,EAAE,mBAAmB,EACxC,qBAAqB,EAAE,4BAA4B,GAClD,OAAO,CAAC,IAAI,CAAC,CAyEf"}

package/sso/sso-login-callback.js

@@ -1,30 +1,32 @@
 import 'express-session';
 import { Logger } from '@hmcts/nodejs-logging';
+import { handleCheckUser } from '../services/opal-user-service';
 const logger = Logger.getLogger('sso-login-callback');
 const sleep = (ms) => new Promise((r) => setTimeout(r, ms));
 /**
- * Handles the SSO login callback by exchanging the authorization code for tokens using MSAL,
- * storing the access token in the session, and redirecting the user to the frontend.
+ * Handles the SSO login callback by processing the authorization code, acquiring tokens,
+ * and managing the user in the Opal User Service. This function is designed to handle
+ * transient network errors during token acquisition and ensures proper session management.
  *
- * @param req - The Express request object, expected to contain the authorization code in the body.
- * @param res - The Express response object, used to send responses or perform redirects.
- * @param msalInstance - An instance of MSAL ConfidentialClientApplication used to acquire tokens.
- * @param clientId - The client ID of the application, used to build the token request scope.
- * @param frontendHostname - The base URL of the frontend application, used for redirect URIs.
- * @param ssoLoginCallback - The path of the SSO login callback, appended to the frontend hostname for redirect URI.
- * @returns A promise that resolves when the callback handling is complete.
+ * @param req - The HTTP request object containing the authorization code in the body.
+ * @param res - The HTTP response object used to send responses back to the client.
+ * @param msalInstance - An instance of the MSAL ConfidentialClientApplication used to acquire tokens.
+ * @param clientId - The client ID of the application registered in Azure AD.
+ * @param frontendHostname - The hostname of the frontend application.
+ * @param ssoLoginCallback - The relative path of the SSO login callback endpoint.
+ * @param opalUserServiceTarget - The target URL of the Opal User Service for user validation.
+ * @param opalUserServiceConfig - Configuration options for the Opal User Service.
  *
- * @remarks
- * - If the authorization code is missing, responds with HTTP 400.
- * - On successful token acquisition, stores the access token in the session and redirects to the frontend.
- * - On error, logs the error and responds with HTTP 500.
+ * @returns A promise that resolves when the SSO login callback process is complete.
+ *
+ * @throws Will throw an error if token acquisition fails after retries or if user validation fails.
  */
-export default async function ssoLoginCallbackHandler(req, res, msalInstance, clientId, frontendHostname, ssoLoginCallback) {
+export default async function ssoLoginCallbackHandler(req, res, msalInstance, ssoLoginCallback, routesConfiguration, opalUserServiceConfig) {
     // Build the token request for MSAL using the auth code returned by the IdP.
     const tokenRequest = {
         code: req.body['code'],
-        scopes: [`api://${clientId}/opalinternaluser`],
-        redirectUri: `${frontendHostname}${ssoLoginCallback}`,
+        scopes: [`api://${routesConfiguration.clientId}/opalinternaluser`],
+        redirectUri: `${routesConfiguration.frontendHostname}${ssoLoginCallback}`,
     };
     if (!tokenRequest.code) {
         logger.warn('Missing authorization code on SSO callback');
@@ -58,12 +60,19 @@ export default async function ssoLoginCallbackHandler(req, res, msalInstance, cl
         if (!response?.accessToken)
             throw new Error('No access token in token response');
         const accessToken = response.accessToken;
+        // Validate and manage user in opal-user-service
+        const userManagementSuccess = await handleCheckUser(routesConfiguration.opalUserServiceTarget, accessToken, opalUserServiceConfig);
+        if (!userManagementSuccess) {
+            logger.error('User management failed after successful token acquisition');
+            res.status(500).send('User validation failed');
+            return;
+        }
         const securityToken = {
             user_state: undefined,
             access_token: accessToken,
         };
         req.session.securityToken = securityToken;
-        req.session.save(() => res.redirect(frontendHostname));
+        req.session.save(() => res.redirect(routesConfiguration.frontendHostname));
         return;
     }
     catch (error) {

package/sso/sso-login-callback.js.map

@@ -1 +1 @@
-{"version":3,"file":"sso-login-callback.js","sourceRoot":"","sources":["../../src/sso/sso-login-callback.ts"],"names":[],"mappings":"AAEA,OAAO,iBAAiB,CAAC;AAEzB,OAAO,EAAE,MAAM,EAAE,MAAM,uBAAuB,CAAC;AAE/C,MAAM,MAAM,GAAG,MAAM,CAAC,SAAS,CAAC,oBAAoB,CAAC,CAAC;AACtD,MAAM,KAAK,GAAG,CAAC,EAAU,EAAE,EAAE,CAAC,IAAI,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;AAEpE;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,CAAC,OAAO,CAAC,KAAK,UAAU,uBAAuB,CACnD,GAAY,EACZ,GAAa,EACb,YAA2C,EAC3C,QAAgB,EAChB,gBAAwB,EACxB,gBAAwB;IAExB,4EAA4E;IAC5E,MAAM,YAAY,GAAG;QACnB,IAAI,EAAE,GAAG,CAAC,IAAI,CAAC,MAAM,CAAW;QAChC,MAAM,EAAE,CAAC,SAAS,QAAQ,mBAAmB,CAAC;QAC9C,WAAW,EAAE,GAAG,gBAAgB,GAAG,gBAAgB,EAAE;KACtD,CAAC;IAEF,IAAI,CAAC,YAAY,CAAC,IAAI,EAAE,CAAC;QACvB,MAAM,CAAC,IAAI,CAAC,4CAA4C,CAAC,CAAC;QAC1D,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,4BAA4B,CAAC,CAAC;QACnD,OAAO;IACT,CAAC;IAED,IAAI,CAAC;QACH,0EAA0E;QAC1E,MAAM,UAAU,GAAG,CAAC,CAAC;QACrB,IAAI,QAAQ,CAAC;QACb,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,IAAI,UAAU,EAAE,OAAO,EAAE,EAAE,CAAC;YACvD,IAAI,CAAC;gBACH,QAAQ,GAAG,MAAM,YAAY,CAAC,kBAAkB,CAAC,YAAY,CAAC,CAAC;gBAC/D,MAAM;gBACN,8DAA8D;YAChE,CAAC;YAAC,OAAO,GAAQ,EAAE,CAAC;gBAClB,8DAA8D;gBAC9D,MAAM,WAAW,GAAG,CAAC,CAAM,EAAE,EAAE,CAC7B,CAAC,EAAE,SAAS,KAAK,eAAe,IAAI,CAAC,YAAY,EAAE,WAAW,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC;gBACpF,IAAI,WAAW,CAAC,GAAG,CAAC,IAAI,OAAO,GAAG,UAAU,EAAE,CAAC;oBAC7C,MAAM,CAAC,IAAI,CAAC,yDAAyD,OAAO,KAAK,CAAC,CAAC;oBACnF,MAAM,KAAK,CAAC,GAAG,GAAG,OAAO,CAAC,CAAC;oBAC3B,SAAS;gBACX,CAAC;gBACD,MAAM,GAAG,CAAC;YACZ,CAAC;QACH,CAAC;QAED,IAAI,CAAC,QAAQ,EAAE,aAAa,EAAE,CAAC;YAC7B,MAAM,IAAI,KAAK,CAAC,yBAAyB,CAAC,CAAC;QAC7C,CAAC;QAED,IAAI,CAAC,QAAQ,EAAE,WAAW;YAAE,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC;QAEjF,MAAM,WAAW,GAAG,QAAQ,CAAC,WAAW,CAAC;QAEzC,MAAM,aAAa,GAAkB;YACnC,UAAU,EAAE,SAAS;YACrB,YAAY,EAAE,WAAW;SAC1B,CAAC;QAEF,GAAG,CAAC,OAAO,CAAC,aAAa,GAAG,aAAa,CAAC;QAC1C,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,QAAQ,CAAC,gBAAgB,CAAC,CAAC,CAAC;QACvD,OAAO;IACT,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,CAAC,KAAK,CAAC,6BAA6B,EAAE;YAC1C,8DAA8D;YAC9D,SAAS,EAAG,KAAa,EAAE,SAAS;YACpC,8DAA8D;YAC9D,aAAa,EAAG,KAAa,EAAE,aAAa;SAC7C,CAAC,CAAC;QACH,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,2BAA2B,CAAC,CAAC;IACpD,CAAC;AACH,CAAC"}
+{"version":3,"file":"sso-login-callback.js","sourceRoot":"","sources":["../../src/sso/sso-login-callback.ts"],"names":[],"mappings":"AAEA,OAAO,iBAAiB,CAAC;AAEzB,OAAO,EAAE,MAAM,EAAE,MAAM,uBAAuB,CAAC;AAC/C,OAAO,EAAE,eAAe,EAAE,MAAM,+BAA+B,CAAC;AAGhE,MAAM,MAAM,GAAG,MAAM,CAAC,SAAS,CAAC,oBAAoB,CAAC,CAAC;AACtD,MAAM,KAAK,GAAG,CAAC,EAAU,EAAE,EAAE,CAAC,IAAI,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;AAEpE;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,CAAC,OAAO,CAAC,KAAK,UAAU,uBAAuB,CACnD,GAAY,EACZ,GAAa,EACb,YAA2C,EAC3C,gBAAwB,EACxB,mBAAwC,EACxC,qBAAmD;IAEnD,4EAA4E;IAC5E,MAAM,YAAY,GAAG;QACnB,IAAI,EAAE,GAAG,CAAC,IAAI,CAAC,MAAM,CAAW;QAChC,MAAM,EAAE,CAAC,SAAS,mBAAmB,CAAC,QAAQ,mBAAmB,CAAC;QAClE,WAAW,EAAE,GAAG,mBAAmB,CAAC,gBAAgB,GAAG,gBAAgB,EAAE;KAC1E,CAAC;IAEF,IAAI,CAAC,YAAY,CAAC,IAAI,EAAE,CAAC;QACvB,MAAM,CAAC,IAAI,CAAC,4CAA4C,CAAC,CAAC;QAC1D,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,4BAA4B,CAAC,CAAC;QACnD,OAAO;IACT,CAAC;IAED,IAAI,CAAC;QACH,0EAA0E;QAC1E,MAAM,UAAU,GAAG,CAAC,CAAC;QACrB,IAAI,QAAQ,CAAC;QACb,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,IAAI,UAAU,EAAE,OAAO,EAAE,EAAE,CAAC;YACvD,IAAI,CAAC;gBACH,QAAQ,GAAG,MAAM,YAAY,CAAC,kBAAkB,CAAC,YAAY,CAAC,CAAC;gBAC/D,MAAM;gBACN,8DAA8D;YAChE,CAAC;YAAC,OAAO,GAAQ,EAAE,CAAC;gBAClB,8DAA8D;gBAC9D,MAAM,WAAW,GAAG,CAAC,CAAM,EAAE,EAAE,CAC7B,CAAC,EAAE,SAAS,KAAK,eAAe,IAAI,CAAC,YAAY,EAAE,WAAW,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC;gBACpF,IAAI,WAAW,CAAC,GAAG,CAAC,IAAI,OAAO,GAAG,UAAU,EAAE,CAAC;oBAC7C,MAAM,CAAC,IAAI,CAAC,yDAAyD,OAAO,KAAK,CAAC,CAAC;oBACnF,MAAM,KAAK,CAAC,GAAG,GAAG,OAAO,CAAC,CAAC;oBAC3B,SAAS;gBACX,CAAC;gBACD,MAAM,GAAG,CAAC;YACZ,CAAC;QACH,CAAC;QAED,IAAI,CAAC,QAAQ,EAAE,aAAa,EAAE,CAAC;YAC7B,MAAM,IAAI,KAAK,CAAC,yBAAyB,CAAC,CAAC;QAC7C,CAAC;QAED,IAAI,CAAC,QAAQ,EAAE,WAAW;YAAE,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC;QAEjF,MAAM,WAAW,GAAG,QAAQ,CAAC,WAAW,CAAC;QAEzC,gDAAgD;QAChD,MAAM,qBAAqB,GAAG,MAAM,eAAe,CACjD,mBAAmB,CAAC,qBAAqB,EACzC,WAAW,EACX,qBAAqB,CACtB,CAAC;QACF,IAAI,CAAC,qBAAqB,EAAE,CAAC;YAC3B,MAAM,CAAC,KAAK,CAAC,2DAA2D,CAAC,CAAC;YAC1E,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,wBAAwB,CAAC,CAAC;YAC/C,OAAO;QACT,CAAC;QAED,MAAM,aAAa,GAAkB;YACnC,UAAU,EAAE,SAAS;YACrB,YAAY,EAAE,WAAW;SAC1B,CAAC;QAEF,GAAG,CAAC,OAAO,CAAC,aAAa,GAAG,aAAa,CAAC;QAC1C,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,QAAQ,CAAC,mBAAmB,CAAC,gBAAgB,CAAC,CAAC,CAAC;QAC3E,OAAO;IACT,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,CAAC,KAAK,CAAC,6BAA6B,EAAE;YAC1C,8DAA8D;YAC9D,SAAS,EAAG,KAAa,EAAE,SAAS;YACpC,8DAA8D;YAC9D,aAAa,EAAG,KAAa,EAAE,aAAa;SAC7C,CAAC,CAAC;QACH,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,2BAA2B,CAAC,CAAC;IACpD,CAAC;AACH,CAAC"}