@ibgib/core-gib 0.1.60 → 0.1.61
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/CHANGELOG.md +3 -0
- package/dist/common/other/graph-helper.d.mts.map +1 -1
- package/dist/common/other/graph-helper.mjs +7 -6
- package/dist/common/other/graph-helper.mjs.map +1 -1
- package/dist/keystone/keystone-config-builder.d.mts +1 -2
- package/dist/keystone/keystone-config-builder.d.mts.map +1 -1
- package/dist/keystone/keystone-config-builder.mjs +4 -19
- package/dist/keystone/keystone-config-builder.mjs.map +1 -1
- package/dist/keystone/keystone-constants.d.mts +2 -0
- package/dist/keystone/keystone-constants.d.mts.map +1 -1
- package/dist/keystone/keystone-constants.mjs +2 -0
- package/dist/keystone/keystone-constants.mjs.map +1 -1
- package/dist/keystone/keystone-helpers.d.mts +5 -15
- package/dist/keystone/keystone-helpers.d.mts.map +1 -1
- package/dist/keystone/keystone-helpers.mjs +59 -73
- package/dist/keystone/keystone-helpers.mjs.map +1 -1
- package/dist/keystone/keystone-policy-types.d.mts +6 -4
- package/dist/keystone/keystone-policy-types.d.mts.map +1 -1
- package/dist/keystone/keystone-service-v1.d.mts.map +1 -1
- package/dist/keystone/keystone-service-v1.mjs +4 -8
- package/dist/keystone/keystone-service-v1.mjs.map +1 -1
- package/dist/keystone/keystone-service-v1.respec.mjs +182 -33
- package/dist/keystone/keystone-service-v1.respec.mjs.map +1 -1
- package/dist/keystone/keystone-types.d.mts +4 -11
- package/dist/keystone/keystone-types.d.mts.map +1 -1
- package/dist/keystone/policy/keystone-profile-builder.d.mts +25 -0
- package/dist/keystone/policy/keystone-profile-builder.d.mts.map +1 -0
- package/dist/keystone/policy/keystone-profile-builder.mjs +117 -0
- package/dist/keystone/policy/keystone-profile-builder.mjs.map +1 -0
- package/dist/keystone/policy/profiles/profile-high.json +84 -0
- package/dist/keystone/policy/profiles/profile-low.json +84 -0
- package/dist/keystone/policy/profiles/profile-medium.json +84 -0
- package/dist/keystone/policy/profiles/profile-session.json +84 -0
- package/dist/keystone/policy/profiles/profile-test.json +84 -0
- package/dist/keystone/policy/schemas/connect-pool.high.schema.json +23 -0
- package/dist/keystone/policy/schemas/connect-pool.low.schema.json +23 -0
- package/dist/keystone/policy/schemas/connect-pool.medium.schema.json +23 -0
- package/dist/keystone/policy/schemas/keystone.high.schema.json +26 -0
- package/dist/keystone/policy/schemas/keystone.low.schema.json +26 -0
- package/dist/keystone/policy/schemas/keystone.medium.schema.json +26 -0
- package/dist/keystone/policy/schemas/manage-pool.high.schema.json +23 -0
- package/dist/keystone/policy/schemas/manage-pool.low.schema.json +23 -0
- package/dist/keystone/policy/schemas/manage-pool.medium.schema.json +23 -0
- package/dist/keystone/policy/schemas/revoke-pool.high.schema.json +23 -0
- package/dist/keystone/policy/schemas/revoke-pool.low.schema.json +23 -0
- package/dist/keystone/policy/schemas/revoke-pool.medium.schema.json +23 -0
- package/dist/keystone/policy/schemas/sign-pool.high.schema.json +23 -0
- package/dist/keystone/policy/schemas/sign-pool.low.schema.json +23 -0
- package/dist/keystone/policy/schemas/sign-pool.medium.schema.json +23 -0
- package/dist/keystone/policy/schemas/sync-pool.high.schema.json +23 -0
- package/dist/keystone/policy/schemas/sync-pool.low.schema.json +23 -0
- package/dist/keystone/policy/schemas/sync-pool.medium.schema.json +23 -0
- package/dist/sync/sync-conflict-adv-multitimelines.withid.respec.d.mts +8 -0
- package/dist/sync/sync-conflict-adv-multitimelines.withid.respec.d.mts.map +1 -0
- package/dist/sync/sync-conflict-adv-multitimelines.withid.respec.mjs +582 -0
- package/dist/sync/sync-conflict-adv-multitimelines.withid.respec.mjs.map +1 -0
- package/dist/sync/sync-conflict-basic-divergence.withid.respec.d.mts +7 -0
- package/dist/sync/sync-conflict-basic-divergence.withid.respec.d.mts.map +1 -0
- package/dist/sync/sync-conflict-basic-divergence.withid.respec.mjs +274 -0
- package/dist/sync/sync-conflict-basic-divergence.withid.respec.mjs.map +1 -0
- package/dist/sync/sync-conflict-basic-multitimelines.withid.respec.d.mts +8 -0
- package/dist/sync/sync-conflict-basic-multitimelines.withid.respec.d.mts.map +1 -0
- package/dist/sync/sync-conflict-basic-multitimelines.withid.respec.mjs +322 -0
- package/dist/sync/sync-conflict-basic-multitimelines.withid.respec.mjs.map +1 -0
- package/dist/sync/sync-conflict-text-merge.withid.respec.d.mts +7 -0
- package/dist/sync/sync-conflict-text-merge.withid.respec.d.mts.map +1 -0
- package/dist/sync/sync-conflict-text-merge.withid.respec.mjs +307 -0
- package/dist/sync/sync-conflict-text-merge.withid.respec.mjs.map +1 -0
- package/dist/sync/sync-innerspace-constants.withid.respec.d.mts +8 -0
- package/dist/sync/sync-innerspace-constants.withid.respec.d.mts.map +1 -0
- package/dist/sync/sync-innerspace-constants.withid.respec.mjs +233 -0
- package/dist/sync/sync-innerspace-constants.withid.respec.mjs.map +1 -0
- package/dist/sync/sync-innerspace-deep-updates.withid.respec.d.mts +7 -0
- package/dist/sync/sync-innerspace-deep-updates.withid.respec.d.mts.map +1 -0
- package/dist/sync/sync-innerspace-deep-updates.withid.respec.mjs +233 -0
- package/dist/sync/sync-innerspace-deep-updates.withid.respec.mjs.map +1 -0
- package/dist/sync/sync-innerspace-dest-ahead.withid.respec.d.mts +7 -0
- package/dist/sync/sync-innerspace-dest-ahead.withid.respec.d.mts.map +1 -0
- package/dist/sync/sync-innerspace-dest-ahead.withid.respec.mjs +225 -0
- package/dist/sync/sync-innerspace-dest-ahead.withid.respec.mjs.map +1 -0
- package/dist/sync/sync-innerspace-multiple-timelines.respec.mjs.map +1 -1
- package/dist/sync/sync-innerspace-multiple-timelines.withid.respec.d.mts +7 -0
- package/dist/sync/sync-innerspace-multiple-timelines.withid.respec.d.mts.map +1 -0
- package/dist/sync/sync-innerspace-multiple-timelines.withid.respec.mjs +235 -0
- package/dist/sync/sync-innerspace-multiple-timelines.withid.respec.mjs.map +1 -0
- package/dist/sync/sync-innerspace-partial-update.withid.respec.d.mts +7 -0
- package/dist/sync/sync-innerspace-partial-update.withid.respec.d.mts.map +1 -0
- package/dist/sync/sync-innerspace-partial-update.withid.respec.mjs +211 -0
- package/dist/sync/sync-innerspace-partial-update.withid.respec.mjs.map +1 -0
- package/dist/sync/sync-innerspace.withid.respec.d.mts +8 -0
- package/dist/sync/sync-innerspace.withid.respec.d.mts.map +1 -0
- package/dist/sync/sync-innerspace.withid.respec.mjs +260 -0
- package/dist/sync/sync-innerspace.withid.respec.mjs.map +1 -0
- package/dist/sync/sync-peer/sync-peer-websocket/sync-peer-websocket-receiver/sync-peer-websocket-receiver-v1.d.mts +1 -0
- package/dist/sync/sync-peer/sync-peer-websocket/sync-peer-websocket-receiver/sync-peer-websocket-receiver-v1.d.mts.map +1 -1
- package/dist/sync/sync-peer/sync-peer-websocket/sync-peer-websocket-receiver/sync-peer-websocket-receiver-v1.mjs +13 -4
- package/dist/sync/sync-peer/sync-peer-websocket/sync-peer-websocket-receiver/sync-peer-websocket-receiver-v1.mjs.map +1 -1
- package/dist/sync/sync-peer/sync-peer-websocket/sync-peer-websocket-receiver/sync-websocket-peer-helpers.d.mts +1 -1
- package/dist/sync/sync-peer/sync-peer-websocket/sync-peer-websocket-receiver/sync-websocket-peer-helpers.d.mts.map +1 -1
- package/dist/sync/sync-peer/sync-peer-websocket/sync-peer-websocket-receiver/sync-websocket-peer-helpers.mjs +5 -3
- package/dist/sync/sync-peer/sync-peer-websocket/sync-peer-websocket-receiver/sync-websocket-peer-helpers.mjs.map +1 -1
- package/dist/sync/sync-saga-coordinator.d.mts.map +1 -1
- package/dist/sync/sync-saga-coordinator.mjs +165 -145
- package/dist/sync/sync-saga-coordinator.mjs.map +1 -1
- package/dist/sync/sync-withid.pingpong.respec.mjs +8 -8
- package/dist/sync/sync-withid.pingpong.respec.mjs.map +1 -1
- package/dist/timeline/timeline-api.d.mts.map +1 -1
- package/dist/timeline/timeline-api.mjs +1 -14
- package/dist/timeline/timeline-api.mjs.map +1 -1
- package/dist/witness/space/reconciliation-space/reconciliation-space-base.d.mts.map +1 -1
- package/dist/witness/space/reconciliation-space/reconciliation-space-base.mjs +0 -40
- package/dist/witness/space/reconciliation-space/reconciliation-space-base.mjs.map +1 -1
- package/dist/witness/space/reconciliation-space/reconciliation-space-helper.d.mts.map +1 -1
- package/dist/witness/space/reconciliation-space/reconciliation-space-helper.mjs +6 -6
- package/dist/witness/space/reconciliation-space/reconciliation-space-helper.mjs.map +1 -1
- package/ibgib-foundations.md +2 -1
- package/package.json +1 -1
- package/src/common/other/graph-helper.mts +7 -6
- package/src/keystone/README.md +19 -15
- package/src/keystone/docs/CRYPTANALYSIS.md +185 -0
- package/src/keystone/docs/architecture.md +24 -1
- package/src/keystone/docs/profiles.md +124 -0
- package/src/keystone/keystone-config-builder.mts +3 -21
- package/src/keystone/keystone-constants.mts +2 -0
- package/src/keystone/keystone-helpers.mts +74 -77
- package/src/keystone/keystone-policy-types.mts +6 -4
- package/src/keystone/keystone-service-v1.mts +4 -9
- package/src/keystone/keystone-service-v1.respec.mts +214 -32
- package/src/keystone/keystone-types.mts +5 -9
- package/src/keystone/policy/IMPLEMENTATION.md +60 -0
- package/src/keystone/policy/README.md +94 -0
- package/src/keystone/policy/keystone-profile-builder.mts +131 -0
- package/src/keystone/policy/profiles/profile-high.json +84 -0
- package/src/keystone/policy/profiles/profile-low.json +84 -0
- package/src/keystone/policy/profiles/profile-medium.json +84 -0
- package/src/keystone/policy/profiles/profile-session.json +84 -0
- package/src/keystone/policy/profiles/profile-test.json +84 -0
- package/src/keystone/policy/schemas/connect-pool.high.schema.json +23 -0
- package/src/keystone/policy/schemas/connect-pool.low.schema.json +23 -0
- package/src/keystone/policy/schemas/connect-pool.medium.schema.json +23 -0
- package/src/keystone/policy/schemas/keystone.high.schema.json +26 -0
- package/src/keystone/policy/schemas/keystone.low.schema.json +26 -0
- package/src/keystone/policy/schemas/keystone.medium.schema.json +26 -0
- package/src/keystone/policy/schemas/manage-pool.high.schema.json +23 -0
- package/src/keystone/policy/schemas/manage-pool.low.schema.json +23 -0
- package/src/keystone/policy/schemas/manage-pool.medium.schema.json +23 -0
- package/src/keystone/policy/schemas/revoke-pool.high.schema.json +23 -0
- package/src/keystone/policy/schemas/revoke-pool.low.schema.json +23 -0
- package/src/keystone/policy/schemas/revoke-pool.medium.schema.json +23 -0
- package/src/keystone/policy/schemas/sign-pool.high.schema.json +23 -0
- package/src/keystone/policy/schemas/sign-pool.low.schema.json +23 -0
- package/src/keystone/policy/schemas/sign-pool.medium.schema.json +23 -0
- package/src/keystone/policy/schemas/sync-pool.high.schema.json +23 -0
- package/src/keystone/policy/schemas/sync-pool.low.schema.json +23 -0
- package/src/keystone/policy/schemas/sync-pool.medium.schema.json +23 -0
- package/src/sync/docs/security.md +54 -21
- package/src/sync/sync-conflict-adv-multitimelines.withid.respec.mts +706 -0
- package/src/sync/sync-conflict-basic-divergence.withid.respec.mts +321 -0
- package/src/sync/sync-conflict-basic-multitimelines.withid.respec.mts +374 -0
- package/src/sync/sync-conflict-text-merge.withid.respec.mts +347 -0
- package/src/sync/sync-innerspace-constants.withid.respec.mts +264 -0
- package/src/sync/sync-innerspace-deep-updates.withid.respec.mts +272 -0
- package/src/sync/sync-innerspace-dest-ahead.withid.respec.mts +266 -0
- package/src/sync/sync-innerspace-multiple-timelines.respec.mts +0 -1
- package/src/sync/sync-innerspace-multiple-timelines.withid.respec.mts +273 -0
- package/src/sync/sync-innerspace-partial-update.withid.respec.mts +249 -0
- package/src/sync/sync-innerspace.withid.respec.mts +265 -0
- package/src/sync/sync-peer/sync-peer-websocket/sync-peer-websocket-receiver/sync-peer-websocket-receiver-v1.mts +12 -4
- package/src/sync/sync-peer/sync-peer-websocket/sync-peer-websocket-receiver/sync-websocket-peer-helpers.mts +5 -3
- package/src/sync/sync-saga-coordinator.mts +159 -143
- package/src/sync/sync-withid.pingpong.respec.mts +8 -8
- package/src/timeline/timeline-api.mts +1 -15
- package/src/timeline/timeline-api.respec.mts +3 -3
- package/src/witness/space/reconciliation-space/reconciliation-space-base.mts +0 -46
- package/src/witness/space/reconciliation-space/reconciliation-space-helper.mts +6 -5
- package/tsconfig.json +6 -1
- package/src/keystone/keystone-policy.schema.json +0 -51
- package/src/witness/space/reconciliation-space/reconciliation-space-base.mts.OLD.md +0 -884
- package/src/witness/space/reconciliation-space/reconciliation-space-helper.mts.OLD.md +0 -125
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"keystone-types.d.mts","sourceRoot":"","sources":["../../src/keystone/keystone-types.mts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,iDAAiD,CAAC;AAChF,OAAO,EAAE,SAAS,EAAE,MAAM,8BAA8B,CAAC;AACzD,OAAO,EAAE,QAAQ,EAAE,YAAY,EAAE,cAAc,EAAE,MAAM,iCAAiC,CAAC;AAEzF,OAAO,EAAE,aAAa,EAAE,MAAM,0BAA0B,CAAC;AAIzD,eAAO,MAAM,sCAAsC,mBAAmB,CAAC;AACvE;;;GAGG;AACH,MAAM,MAAM,qBAAqB,GAC3B,OAAO,sCAAsC,CAG9C;AACL,eAAO,MAAM,qBAAqB;;CAEkB,CAAC;AACrD,eAAO,MAAM,oCAAoC,oBAAuC,CAAC;AACzF,wBAAgB,4BAA4B,CAAC,CAAC,EAAE,GAAG,GAAG,CAAC,IAAI,qBAAqB,CAE/E;AAQD;;GAEG;AACH,eAAO,MAAM,kCAAkC,WAAW,CAAC;AAC3D;;GAEG;AACH,eAAO,MAAM,uCAAuC,gBAAgB,CAAC;AACrE;;GAEG;AACH,eAAO,MAAM,mCAAmC,YAAY,CAAC;AAC7D;;GAEG;AACH,eAAO,MAAM,sCAAsC,eAAe,CAAC;AACnE,MAAM,MAAM,yBAAyB,GAC/B,OAAO,kCAAkC,GACzC,OAAO,uCAAuC,GAC9C,OAAO,mCAAmC,GAC1C,OAAO,sCAAsC,CAC9C;AACL;;GAEG;AACH,eAAO,MAAM,yBAAyB;IAClC;;OAEG;;IAEH;;OAEG;;IAEH;;;;;;OAMG;;IAEH;;;OAGG;;CAEiD,CAAC;AACzD,eAAO,MAAM,wCAAwC,yDAA2C,CAAC;AACjG,wBAAgB,2BAA2B,CAAC,CAAC,EAAE,GAAG,GAAG,CAAC,IAAI,yBAAyB,CAElF;AAGD,MAAM,WAAW,oBAAoB;IACjC;;OAEG;IACH,IAAI,EAAE,MAAM,CAAC;IAEb;;;;;OAKG;IACH,SAAS,EAAE,yBAAyB,CAAC;IAErC;;;OAGG;IACH,kBAAkB,EAAE,MAAM,CAAC;IAE3B;;;OAGG;IACH,cAAc,EAAE,MAAM,CAAC;IAEvB
|
|
1
|
+
{"version":3,"file":"keystone-types.d.mts","sourceRoot":"","sources":["../../src/keystone/keystone-types.mts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,iDAAiD,CAAC;AAChF,OAAO,EAAE,SAAS,EAAE,MAAM,8BAA8B,CAAC;AACzD,OAAO,EAAE,QAAQ,EAAE,YAAY,EAAE,cAAc,EAAE,MAAM,iCAAiC,CAAC;AAEzF,OAAO,EAAE,aAAa,EAAE,MAAM,0BAA0B,CAAC;AAIzD,eAAO,MAAM,sCAAsC,mBAAmB,CAAC;AACvE;;;GAGG;AACH,MAAM,MAAM,qBAAqB,GAC3B,OAAO,sCAAsC,CAG9C;AACL,eAAO,MAAM,qBAAqB;;CAEkB,CAAC;AACrD,eAAO,MAAM,oCAAoC,oBAAuC,CAAC;AACzF,wBAAgB,4BAA4B,CAAC,CAAC,EAAE,GAAG,GAAG,CAAC,IAAI,qBAAqB,CAE/E;AAQD;;GAEG;AACH,eAAO,MAAM,kCAAkC,WAAW,CAAC;AAC3D;;GAEG;AACH,eAAO,MAAM,uCAAuC,gBAAgB,CAAC;AACrE;;GAEG;AACH,eAAO,MAAM,mCAAmC,YAAY,CAAC;AAC7D;;GAEG;AACH,eAAO,MAAM,sCAAsC,eAAe,CAAC;AACnE,MAAM,MAAM,yBAAyB,GAC/B,OAAO,kCAAkC,GACzC,OAAO,uCAAuC,GAC9C,OAAO,mCAAmC,GAC1C,OAAO,sCAAsC,CAC9C;AACL;;GAEG;AACH,eAAO,MAAM,yBAAyB;IAClC;;OAEG;;IAEH;;OAEG;;IAEH;;;;;;OAMG;;IAEH;;;OAGG;;CAEiD,CAAC;AACzD,eAAO,MAAM,wCAAwC,yDAA2C,CAAC;AACjG,wBAAgB,2BAA2B,CAAC,CAAC,EAAE,GAAG,GAAG,CAAC,IAAI,yBAAyB,CAElF;AAGD,MAAM,WAAW,oBAAoB;IACjC;;OAEG;IACH,IAAI,EAAE,MAAM,CAAC;IAEb;;;;;OAKG;IACH,SAAS,EAAE,yBAAyB,CAAC;IAErC;;;OAGG;IACH,kBAAkB,EAAE,MAAM,CAAC;IAE3B;;;OAGG;IACH,cAAc,EAAE,MAAM,CAAC;IAEvB;;;;;OAKG;IACH,kBAAkB,EAAE,MAAM,CAAC;CAC9B;AAED,MAAM,WAAW,sBAAsB;IACnC;;OAEG;IACH,EAAE,EAAE,MAAM,CAAC;IAEX,IAAI,EAAE,qBAAqB,CAAC;IAC5B;;OAEG;IACH,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,oBAAoB,CAAC;IAC/B;;;;;;;;;OASG;IACH,YAAY,EAAE,MAAM,EAAE,CAAC;CAC1B;AAED,MAAM,WAAW,yBAA0B,SAAQ,sBAAsB;IACrE,IAAI,EAAE,OAAO,qBAAqB,CAAC,cAAc,CAAC;IAClD,IAAI,EAAE,aAAa,CAAC;IACpB,MAAM,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,MAAM,kBAAkB,GAAG,yBAAyB,CAAC;AAM3D,MAAM,WAAW,qBAAqB;IAClC,IAAI,EAAE,qBAAqB,CAAC;CAC/B;AAED,MAAM,WAAW,wBAAyB,SAAQ,qBAAqB;IACnE,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,OAAO,qBAAqB,CAAC,cAAc,CAAC;IAClD;;OAEG;IACH,IAAI,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,MAAM,iBAAiB,GAAG,wBAAwB,CAAC;AAMzD,MAAM,WAAW,oBAAoB;IACjC,IAAI,EAAE,qBAAqB,CAAC;IAC5B;;OAEG;IACH,MAAM,EAAE,MAAM,CAAC;IACf;;OAEG;IACH,WAAW,EAAE,MAAM,CAAC;CACvB;AAED,MAAM,WAAW,uBAAwB,SAAQ,oBAAoB;IACjE,IAAI,EAAE,gBAAgB,CAAC;IACvB;;OAEG;IACH,KAAK,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,MAAM,gBAAgB,GAAG,uBAAuB,CAAC;AAMvD;;GAEG;AACH,MAAM,WAAW,qBAAqB;IAClC;;OAEG;IACH,EAAE,EAAE,MAAM,CAAC;IAEX;;;;OAIG;IACH,MAAM,EAAE,kBAAkB,CAAC;IAE3B;;;OAGG;IACH,YAAY,CAAC,EAAE,OAAO,CAAC,aAAa,CAAC,CAAC;IAEtC;;;OAGG;IACH,UAAU,EAAE;QAAE,CAAC,WAAW,EAAE,MAAM,GAAG,iBAAiB,CAAA;KAAE,CAAC;IAIzD;;;;;;;;;OASG;IACH,SAAS,CAAC,EAAE,OAAO,CAAC;IAEpB;;;;;;;;;OASG;IACH,QAAQ,CAAC,EAAE,GAAG,CAAC;CAClB;AAED;;;GAGG;AACH,MAAM,WAAW,aAAa;IAC1B;;;;;OAKG;IACH,IAAI,EAAE,MAAM,CAAC;IACb;;;;;;OAMG;IACH,MAAM,EAAE,SAAS,CAAC;IAClB;;OAEG;IACH,KAAK,CAAC,EAAE,MAAM,CAAC;CAClB;AAED;;GAEG;AACH,MAAM,WAAW,aAAa;IAC1B,EAAE,CAAC,EAAE,MAAM,CAAC;IAEZ;;OAEG;IACH,KAAK,EAAE,OAAO,CAAC,aAAa,CAAC,CAAC;IAE9B;;OAEG;IACH,SAAS,EAAE,gBAAgB,EAAE,CAAC;IAE9B;;;;OAIG;IACH,oBAAoB,CAAC,EAAE,MAAM,EAAE,CAAC;CACnC;AAED;;GAEG;AACH,MAAM,WAAW,sBAAsB;IACnC,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,aAAa,CAAC;CACxB;AAMD,MAAM,WAAW,aAAa;IAC1B,IAAI,EAAE,OAAO,aAAa,CAAC;CAC9B;AAED,MAAM,WAAW,eAAgB,SAAQ,YAAY;IACjD;;;OAGG;IACH,cAAc,EAAE,qBAAqB,EAAE,CAAC;IAExC;;OAEG;IACH,MAAM,EAAE,aAAa,EAAE,CAAC;IAExB;;OAEG;IACH,cAAc,CAAC,EAAE,sBAAsB,CAAC;IAExC;;;;OAIG;IACH,YAAY,CAAC,EAAE,GAAG,CAAC;IAEnB;;;OAGG;IACH,iBAAiB,CAAC,EAAE,GAAG,CAAC;CAC3B;AAED,MAAM,WAAW,iBAAkB,SAAQ,cAAc;CAGxD;AAED,MAAM,WAAW,gBAAiB,SAAQ,QAAQ,CAAC,eAAe,EAAE,iBAAiB,CAAC;IAClF,IAAI,EAAE,eAAe,CAAC;IACtB,MAAM,EAAE,iBAAiB,CAAC;CAC7B;AAED,MAAM,WAAW,mBAAmB;IAChC;;;OAGG;IACH,YAAY,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;IAE1B;;;OAGG;IACH,YAAY,EAAE,MAAM,EAAE,CAAC;CAC1B"}
|
|
@@ -0,0 +1,25 @@
|
|
|
1
|
+
import { KeystonePoolConfig } from "../keystone-types.mjs";
|
|
2
|
+
import { KeystonePoolTemplate, KeystoneBehaviorProfileTemplate } from "../keystone-policy-types.mjs";
|
|
3
|
+
export declare class KeystoneProfileBuilder {
|
|
4
|
+
private _template;
|
|
5
|
+
private _username?;
|
|
6
|
+
private _email?;
|
|
7
|
+
private _description?;
|
|
8
|
+
private _details?;
|
|
9
|
+
private _customizations;
|
|
10
|
+
private constructor();
|
|
11
|
+
static buildKeystone(profileName: 'high' | 'medium' | 'low' | 'session' | 'test'): KeystoneProfileBuilder;
|
|
12
|
+
withUsername(username: string): this;
|
|
13
|
+
withEmail(email: string): this;
|
|
14
|
+
withDescription(description: string): this;
|
|
15
|
+
withDetails(details: any): this;
|
|
16
|
+
customizePool(poolId: string, overrides: Omit<Partial<KeystonePoolTemplate>, 'behavior'> & {
|
|
17
|
+
behavior?: Partial<KeystoneBehaviorProfileTemplate>;
|
|
18
|
+
}): this;
|
|
19
|
+
/**
|
|
20
|
+
* Unifies username, email, description, and details into a frameDetails object for genesis.
|
|
21
|
+
*/
|
|
22
|
+
getFrameDetails(): any;
|
|
23
|
+
compileConfigs(): Promise<KeystonePoolConfig[]>;
|
|
24
|
+
}
|
|
25
|
+
//# sourceMappingURL=keystone-profile-builder.d.mts.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"keystone-profile-builder.d.mts","sourceRoot":"","sources":["../../../src/keystone/policy/keystone-profile-builder.mts"],"names":[],"mappings":"AACA,OAAO,EAAE,kBAAkB,EAAE,MAAM,uBAAuB,CAAC;AAC3D,OAAO,EAAE,oBAAoB,EAAgC,+BAA+B,EAAE,MAAM,8BAA8B,CAAC;AASnI,qBAAa,sBAAsB;IAC/B,OAAO,CAAC,SAAS,CAA+B;IAChD,OAAO,CAAC,SAAS,CAAC,CAAS;IAC3B,OAAO,CAAC,MAAM,CAAC,CAAS;IACxB,OAAO,CAAC,YAAY,CAAC,CAAS;IAC9B,OAAO,CAAC,QAAQ,CAAC,CAAM;IACvB,OAAO,CAAC,eAAe,CAA+H;IAEtJ,OAAO;IAKP,MAAM,CAAC,aAAa,CAAC,WAAW,EAAE,MAAM,GAAG,QAAQ,GAAG,KAAK,GAAG,SAAS,GAAG,MAAM,GAAG,sBAAsB;IAwBzG,YAAY,CAAC,QAAQ,EAAE,MAAM,GAAG,IAAI;IAKpC,SAAS,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI;IAK9B,eAAe,CAAC,WAAW,EAAE,MAAM,GAAG,IAAI;IAK1C,WAAW,CAAC,OAAO,EAAE,GAAG,GAAG,IAAI;IAK/B,aAAa,CACT,MAAM,EAAE,MAAM,EACd,SAAS,EAAE,IAAI,CAAC,OAAO,CAAC,oBAAoB,CAAC,EAAE,UAAU,CAAC,GAAG;QAAE,QAAQ,CAAC,EAAE,OAAO,CAAC,+BAA+B,CAAC,CAAA;KAAE,GACrH,IAAI;IASP;;OAEG;IACH,eAAe,IAAI,GAAG;IAQhB,cAAc,IAAI,OAAO,CAAC,kBAAkB,EAAE,CAAC;CAuCxD"}
|
|
@@ -0,0 +1,117 @@
|
|
|
1
|
+
import { hash } from "@ibgib/helper-gib/dist/helpers/utils-helper.mjs";
|
|
2
|
+
import { createPoolConfigFromJson } from "../keystone-config-builder.mjs";
|
|
3
|
+
import profileHigh from "./profiles/profile-high.json" assert { type: "json" };
|
|
4
|
+
import profileMedium from "./profiles/profile-medium.json" assert { type: "json" };
|
|
5
|
+
import profileLow from "./profiles/profile-low.json" assert { type: "json" };
|
|
6
|
+
import profileSession from "./profiles/profile-session.json" assert { type: "json" };
|
|
7
|
+
import profileTest from "./profiles/profile-test.json" assert { type: "json" };
|
|
8
|
+
export class KeystoneProfileBuilder {
|
|
9
|
+
_template;
|
|
10
|
+
_username;
|
|
11
|
+
_email;
|
|
12
|
+
_description;
|
|
13
|
+
_details;
|
|
14
|
+
_customizations = {};
|
|
15
|
+
constructor(template) {
|
|
16
|
+
// Deep copy the template to avoid modifying shared imports
|
|
17
|
+
this._template = JSON.parse(JSON.stringify(template));
|
|
18
|
+
}
|
|
19
|
+
static buildKeystone(profileName) {
|
|
20
|
+
let selected;
|
|
21
|
+
switch (profileName) {
|
|
22
|
+
case 'high':
|
|
23
|
+
selected = profileHigh;
|
|
24
|
+
break;
|
|
25
|
+
case 'medium':
|
|
26
|
+
selected = profileMedium;
|
|
27
|
+
break;
|
|
28
|
+
case 'low':
|
|
29
|
+
selected = profileLow;
|
|
30
|
+
break;
|
|
31
|
+
case 'session':
|
|
32
|
+
selected = profileSession;
|
|
33
|
+
break;
|
|
34
|
+
case 'test':
|
|
35
|
+
selected = profileTest;
|
|
36
|
+
break;
|
|
37
|
+
default:
|
|
38
|
+
throw new Error(`Unknown profile name: ${profileName} (E: fc10a8ad482ef2bda871ac567d268d26)`);
|
|
39
|
+
}
|
|
40
|
+
return new KeystoneProfileBuilder(selected);
|
|
41
|
+
}
|
|
42
|
+
withUsername(username) {
|
|
43
|
+
this._username = username;
|
|
44
|
+
return this;
|
|
45
|
+
}
|
|
46
|
+
withEmail(email) {
|
|
47
|
+
this._email = email;
|
|
48
|
+
return this;
|
|
49
|
+
}
|
|
50
|
+
withDescription(description) {
|
|
51
|
+
this._description = description;
|
|
52
|
+
return this;
|
|
53
|
+
}
|
|
54
|
+
withDetails(details) {
|
|
55
|
+
this._details = details;
|
|
56
|
+
return this;
|
|
57
|
+
}
|
|
58
|
+
customizePool(poolId, overrides) {
|
|
59
|
+
const { behavior, ...templateOverrides } = overrides;
|
|
60
|
+
this._customizations[poolId] = {
|
|
61
|
+
template: templateOverrides,
|
|
62
|
+
behavior
|
|
63
|
+
};
|
|
64
|
+
return this;
|
|
65
|
+
}
|
|
66
|
+
/**
|
|
67
|
+
* Unifies username, email, description, and details into a frameDetails object for genesis.
|
|
68
|
+
*/
|
|
69
|
+
getFrameDetails() {
|
|
70
|
+
const details = { ...this._details };
|
|
71
|
+
if (this._username) {
|
|
72
|
+
details.username = this._username;
|
|
73
|
+
}
|
|
74
|
+
if (this._email) {
|
|
75
|
+
details.email = this._email;
|
|
76
|
+
}
|
|
77
|
+
if (this._description) {
|
|
78
|
+
details.description = this._description;
|
|
79
|
+
}
|
|
80
|
+
return details;
|
|
81
|
+
}
|
|
82
|
+
async compileConfigs() {
|
|
83
|
+
const poolConfigs = [];
|
|
84
|
+
// Derive a unique user-specific base salt if username/email is provided
|
|
85
|
+
let userSalt = "";
|
|
86
|
+
if (this._username || this._email) {
|
|
87
|
+
const seed = `${this._username || ""}:${this._email || ""}`;
|
|
88
|
+
userSalt = await hash({ s: seed });
|
|
89
|
+
}
|
|
90
|
+
else {
|
|
91
|
+
// Fallback salt to guarantee unique challenge IDs even without user details
|
|
92
|
+
userSalt = await hash({ s: "default-keystone-salt" });
|
|
93
|
+
}
|
|
94
|
+
for (const [poolKey, poolTemplate] of Object.entries(this._template.pools)) {
|
|
95
|
+
// Apply customization overrides
|
|
96
|
+
const custom = this._customizations[poolTemplate.id];
|
|
97
|
+
if (custom) {
|
|
98
|
+
if (custom.template) {
|
|
99
|
+
Object.assign(poolTemplate, custom.template);
|
|
100
|
+
}
|
|
101
|
+
if (custom.behavior && poolTemplate.behavior) {
|
|
102
|
+
Object.assign(poolTemplate.behavior, custom.behavior);
|
|
103
|
+
}
|
|
104
|
+
}
|
|
105
|
+
// Derive a unique salt for this specific pool by hashing userSalt + poolId
|
|
106
|
+
const saltSeed = `${userSalt}-${poolTemplate.id}`;
|
|
107
|
+
const derivedSalt = await hash({ s: saltSeed });
|
|
108
|
+
const poolConfig = createPoolConfigFromJson({
|
|
109
|
+
template: poolTemplate,
|
|
110
|
+
salt: derivedSalt
|
|
111
|
+
});
|
|
112
|
+
poolConfigs.push(poolConfig);
|
|
113
|
+
}
|
|
114
|
+
return poolConfigs;
|
|
115
|
+
}
|
|
116
|
+
}
|
|
117
|
+
//# sourceMappingURL=keystone-profile-builder.mjs.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"keystone-profile-builder.mjs","sourceRoot":"","sources":["../../../src/keystone/policy/keystone-profile-builder.mts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,iDAAiD,CAAC;AAGvE,OAAO,EAAE,wBAAwB,EAAE,MAAM,gCAAgC,CAAC;AAE1E,OAAO,WAAW,MAAM,8BAA8B,CAAC,SAAS,IAAI,EAAE,MAAM,EAAE,CAAC;AAC/E,OAAO,aAAa,MAAM,gCAAgC,CAAC,SAAS,IAAI,EAAE,MAAM,EAAE,CAAC;AACnF,OAAO,UAAU,MAAM,6BAA6B,CAAC,SAAS,IAAI,EAAE,MAAM,EAAE,CAAC;AAC7E,OAAO,cAAc,MAAM,iCAAiC,CAAC,SAAS,IAAI,EAAE,MAAM,EAAE,CAAC;AACrF,OAAO,WAAW,MAAM,8BAA8B,CAAC,SAAS,IAAI,EAAE,MAAM,EAAE,CAAC;AAE/E,MAAM,OAAO,sBAAsB;IACvB,SAAS,CAA+B;IACxC,SAAS,CAAU;IACnB,MAAM,CAAU;IAChB,YAAY,CAAU;IACtB,QAAQ,CAAO;IACf,eAAe,GAA4H,EAAE,CAAC;IAEtJ,YAAoB,QAAsC;QACtD,2DAA2D;QAC3D,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC,CAAC;IAC1D,CAAC;IAED,MAAM,CAAC,aAAa,CAAC,WAA2D;QAC5E,IAAI,QAAsC,CAAC;QAC3C,QAAQ,WAAW,EAAE,CAAC;YAClB,KAAK,MAAM;gBACP,QAAQ,GAAG,WAAkB,CAAC;gBAC9B,MAAM;YACV,KAAK,QAAQ;gBACT,QAAQ,GAAG,aAAoB,CAAC;gBAChC,MAAM;YACV,KAAK,KAAK;gBACN,QAAQ,GAAG,UAAiB,CAAC;gBAC7B,MAAM;YACV,KAAK,SAAS;gBACV,QAAQ,GAAG,cAAqB,CAAC;gBACjC,MAAM;YACV,KAAK,MAAM;gBACP,QAAQ,GAAG,WAAkB,CAAC;gBAC9B,MAAM;YACV;gBACI,MAAM,IAAI,KAAK,CAAC,yBAAyB,WAAW,wCAAwC,CAAC,CAAC;QACtG,CAAC;QACD,OAAO,IAAI,sBAAsB,CAAC,QAAQ,CAAC,CAAC;IAChD,CAAC;IAED,YAAY,CAAC,QAAgB;QACzB,IAAI,CAAC,SAAS,GAAG,QAAQ,CAAC;QAC1B,OAAO,IAAI,CAAC;IAChB,CAAC;IAED,SAAS,CAAC,KAAa;QACnB,IAAI,CAAC,MAAM,GAAG,KAAK,CAAC;QACpB,OAAO,IAAI,CAAC;IAChB,CAAC;IAED,eAAe,CAAC,WAAmB;QAC/B,IAAI,CAAC,YAAY,GAAG,WAAW,CAAC;QAChC,OAAO,IAAI,CAAC;IAChB,CAAC;IAED,WAAW,CAAC,OAAY;QACpB,IAAI,CAAC,QAAQ,GAAG,OAAO,CAAC;QACxB,OAAO,IAAI,CAAC;IAChB,CAAC;IAED,aAAa,CACT,MAAc,EACd,SAAoH;QAEpH,MAAM,EAAE,QAAQ,EAAE,GAAG,iBAAiB,EAAE,GAAG,SAAS,CAAC;QACrD,IAAI,CAAC,eAAe,CAAC,MAAM,CAAC,GAAG;YAC3B,QAAQ,EAAE,iBAAwB;YAClC,QAAQ;SACX,CAAC;QACF,OAAO,IAAI,CAAC;IAChB,CAAC;IAED;;OAEG;IACH,eAAe;QACX,MAAM,OAAO,GAAQ,EAAE,GAAG,IAAI,CAAC,QAAQ,EAAE,CAAC;QAC1C,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;YAAC,OAAO,CAAC,QAAQ,GAAG,IAAI,CAAC,SAAS,CAAC;QAAC,CAAC;QAC1D,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;YAAC,OAAO,CAAC,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC;QAAC,CAAC;QACjD,IAAI,IAAI,CAAC,YAAY,EAAE,CAAC;YAAC,OAAO,CAAC,WAAW,GAAG,IAAI,CAAC,YAAY,CAAC;QAAC,CAAC;QACnE,OAAO,OAAO,CAAC;IACnB,CAAC;IAED,KAAK,CAAC,cAAc;QAChB,MAAM,WAAW,GAAyB,EAAE,CAAC;QAE7C,wEAAwE;QACxE,IAAI,QAAQ,GAAG,EAAE,CAAC;QAClB,IAAI,IAAI,CAAC,SAAS,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;YAChC,MAAM,IAAI,GAAG,GAAG,IAAI,CAAC,SAAS,IAAI,EAAE,IAAI,IAAI,CAAC,MAAM,IAAI,EAAE,EAAE,CAAC;YAC5D,QAAQ,GAAG,MAAM,IAAI,CAAC,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC;QACvC,CAAC;aAAM,CAAC;YACJ,4EAA4E;YAC5E,QAAQ,GAAG,MAAM,IAAI,CAAC,EAAE,CAAC,EAAE,uBAAuB,EAAE,CAAC,CAAC;QAC1D,CAAC;QAED,KAAK,MAAM,CAAC,OAAO,EAAE,YAAY,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,CAAC;YACzE,gCAAgC;YAChC,MAAM,MAAM,GAAG,IAAI,CAAC,eAAe,CAAC,YAAY,CAAC,EAAE,CAAC,CAAC;YACrD,IAAI,MAAM,EAAE,CAAC;gBACT,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;oBAClB,MAAM,CAAC,MAAM,CAAC,YAAY,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAC;gBACjD,CAAC;gBACD,IAAI,MAAM,CAAC,QAAQ,IAAI,YAAY,CAAC,QAAQ,EAAE,CAAC;oBAC3C,MAAM,CAAC,MAAM,CAAC,YAAY,CAAC,QAAQ,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAC;gBAC1D,CAAC;YACL,CAAC;YAED,2EAA2E;YAC3E,MAAM,QAAQ,GAAG,GAAG,QAAQ,IAAI,YAAY,CAAC,EAAE,EAAE,CAAC;YAClD,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,EAAE,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC;YAEhD,MAAM,UAAU,GAAG,wBAAwB,CAAC;gBACxC,QAAQ,EAAE,YAAY;gBACtB,IAAI,EAAE,WAAW;aACpB,CAAC,CAAC;YAEH,WAAW,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QACjC,CAAC;QAED,OAAO,WAAW,CAAC;IACvB,CAAC;CACJ"}
|
|
@@ -0,0 +1,84 @@
|
|
|
1
|
+
{
|
|
2
|
+
"$schema": "../schemas/keystone.high.schema.json",
|
|
3
|
+
"metadata": {
|
|
4
|
+
"name": "High Security Profile",
|
|
5
|
+
"securityLevel": "high"
|
|
6
|
+
},
|
|
7
|
+
"pools": {
|
|
8
|
+
"sync": {
|
|
9
|
+
"id": "sync",
|
|
10
|
+
"allowedVerbs": [
|
|
11
|
+
"sync"
|
|
12
|
+
],
|
|
13
|
+
"algo": "SHA-512",
|
|
14
|
+
"rounds": 4,
|
|
15
|
+
"behavior": {
|
|
16
|
+
"size": 2000,
|
|
17
|
+
"replenish": "top-up",
|
|
18
|
+
"selectSequentially": 10,
|
|
19
|
+
"selectRandomly": 10,
|
|
20
|
+
"targetBindingCount": 16
|
|
21
|
+
}
|
|
22
|
+
},
|
|
23
|
+
"manage": {
|
|
24
|
+
"id": "manage",
|
|
25
|
+
"allowedVerbs": [
|
|
26
|
+
"manage"
|
|
27
|
+
],
|
|
28
|
+
"algo": "SHA-512",
|
|
29
|
+
"rounds": 4,
|
|
30
|
+
"behavior": {
|
|
31
|
+
"size": 2000,
|
|
32
|
+
"replenish": "replace-all",
|
|
33
|
+
"selectSequentially": 10,
|
|
34
|
+
"selectRandomly": 10,
|
|
35
|
+
"targetBindingCount": 16
|
|
36
|
+
}
|
|
37
|
+
},
|
|
38
|
+
"revoke": {
|
|
39
|
+
"id": "revoke",
|
|
40
|
+
"allowedVerbs": [
|
|
41
|
+
"revoke"
|
|
42
|
+
],
|
|
43
|
+
"algo": "SHA-512",
|
|
44
|
+
"rounds": 20,
|
|
45
|
+
"behavior": {
|
|
46
|
+
"size": 2000,
|
|
47
|
+
"replenish": "delete-all",
|
|
48
|
+
"selectSequentially": 50,
|
|
49
|
+
"selectRandomly": 50,
|
|
50
|
+
"targetBindingCount": 0
|
|
51
|
+
}
|
|
52
|
+
},
|
|
53
|
+
"connect": {
|
|
54
|
+
"id": "connect",
|
|
55
|
+
"allowedVerbs": [
|
|
56
|
+
"connect"
|
|
57
|
+
],
|
|
58
|
+
"algo": "SHA-512",
|
|
59
|
+
"rounds": 4,
|
|
60
|
+
"behavior": {
|
|
61
|
+
"size": 2000,
|
|
62
|
+
"replenish": "top-up",
|
|
63
|
+
"selectSequentially": 10,
|
|
64
|
+
"selectRandomly": 10,
|
|
65
|
+
"targetBindingCount": 16
|
|
66
|
+
}
|
|
67
|
+
},
|
|
68
|
+
"sign": {
|
|
69
|
+
"id": "default",
|
|
70
|
+
"allowedVerbs": [
|
|
71
|
+
"sign"
|
|
72
|
+
],
|
|
73
|
+
"algo": "SHA-512",
|
|
74
|
+
"rounds": 4,
|
|
75
|
+
"behavior": {
|
|
76
|
+
"size": 2000,
|
|
77
|
+
"replenish": "top-up",
|
|
78
|
+
"selectSequentially": 10,
|
|
79
|
+
"selectRandomly": 10,
|
|
80
|
+
"targetBindingCount": 16
|
|
81
|
+
}
|
|
82
|
+
}
|
|
83
|
+
}
|
|
84
|
+
}
|
|
@@ -0,0 +1,84 @@
|
|
|
1
|
+
{
|
|
2
|
+
"$schema": "../schemas/keystone.low.schema.json",
|
|
3
|
+
"metadata": {
|
|
4
|
+
"name": "Low Security Profile",
|
|
5
|
+
"securityLevel": "low"
|
|
6
|
+
},
|
|
7
|
+
"pools": {
|
|
8
|
+
"sync": {
|
|
9
|
+
"id": "sync",
|
|
10
|
+
"allowedVerbs": [
|
|
11
|
+
"sync"
|
|
12
|
+
],
|
|
13
|
+
"algo": "SHA-256",
|
|
14
|
+
"rounds": 1,
|
|
15
|
+
"behavior": {
|
|
16
|
+
"size": 100,
|
|
17
|
+
"replenish": "top-up",
|
|
18
|
+
"selectSequentially": 3,
|
|
19
|
+
"selectRandomly": 3,
|
|
20
|
+
"targetBindingCount": 8
|
|
21
|
+
}
|
|
22
|
+
},
|
|
23
|
+
"manage": {
|
|
24
|
+
"id": "manage",
|
|
25
|
+
"allowedVerbs": [
|
|
26
|
+
"manage"
|
|
27
|
+
],
|
|
28
|
+
"algo": "SHA-256",
|
|
29
|
+
"rounds": 2,
|
|
30
|
+
"behavior": {
|
|
31
|
+
"size": 100,
|
|
32
|
+
"replenish": "replace-all",
|
|
33
|
+
"selectSequentially": 3,
|
|
34
|
+
"selectRandomly": 3,
|
|
35
|
+
"targetBindingCount": 8
|
|
36
|
+
}
|
|
37
|
+
},
|
|
38
|
+
"revoke": {
|
|
39
|
+
"id": "revoke",
|
|
40
|
+
"allowedVerbs": [
|
|
41
|
+
"revoke"
|
|
42
|
+
],
|
|
43
|
+
"algo": "SHA-256",
|
|
44
|
+
"rounds": 5,
|
|
45
|
+
"behavior": {
|
|
46
|
+
"size": 100,
|
|
47
|
+
"replenish": "delete-all",
|
|
48
|
+
"selectSequentially": 3,
|
|
49
|
+
"selectRandomly": 3,
|
|
50
|
+
"targetBindingCount": 0
|
|
51
|
+
}
|
|
52
|
+
},
|
|
53
|
+
"connect": {
|
|
54
|
+
"id": "connect",
|
|
55
|
+
"allowedVerbs": [
|
|
56
|
+
"connect"
|
|
57
|
+
],
|
|
58
|
+
"algo": "SHA-256",
|
|
59
|
+
"rounds": 1,
|
|
60
|
+
"behavior": {
|
|
61
|
+
"size": 100,
|
|
62
|
+
"replenish": "top-up",
|
|
63
|
+
"selectSequentially": 3,
|
|
64
|
+
"selectRandomly": 3,
|
|
65
|
+
"targetBindingCount": 8
|
|
66
|
+
}
|
|
67
|
+
},
|
|
68
|
+
"sign": {
|
|
69
|
+
"id": "default",
|
|
70
|
+
"allowedVerbs": [
|
|
71
|
+
"sign"
|
|
72
|
+
],
|
|
73
|
+
"algo": "SHA-256",
|
|
74
|
+
"rounds": 2,
|
|
75
|
+
"behavior": {
|
|
76
|
+
"size": 100,
|
|
77
|
+
"replenish": "top-up",
|
|
78
|
+
"selectSequentially": 3,
|
|
79
|
+
"selectRandomly": 3,
|
|
80
|
+
"targetBindingCount": 8
|
|
81
|
+
}
|
|
82
|
+
}
|
|
83
|
+
}
|
|
84
|
+
}
|
|
@@ -0,0 +1,84 @@
|
|
|
1
|
+
{
|
|
2
|
+
"$schema": "../schemas/keystone.medium.schema.json",
|
|
3
|
+
"metadata": {
|
|
4
|
+
"name": "Medium Security Profile",
|
|
5
|
+
"securityLevel": "medium"
|
|
6
|
+
},
|
|
7
|
+
"pools": {
|
|
8
|
+
"sync": {
|
|
9
|
+
"id": "sync",
|
|
10
|
+
"allowedVerbs": [
|
|
11
|
+
"sync"
|
|
12
|
+
],
|
|
13
|
+
"algo": "SHA-256",
|
|
14
|
+
"rounds": 2,
|
|
15
|
+
"behavior": {
|
|
16
|
+
"size": 500,
|
|
17
|
+
"replenish": "top-up",
|
|
18
|
+
"selectSequentially": 5,
|
|
19
|
+
"selectRandomly": 5,
|
|
20
|
+
"targetBindingCount": 10
|
|
21
|
+
}
|
|
22
|
+
},
|
|
23
|
+
"manage": {
|
|
24
|
+
"id": "manage",
|
|
25
|
+
"allowedVerbs": [
|
|
26
|
+
"manage"
|
|
27
|
+
],
|
|
28
|
+
"algo": "SHA-256",
|
|
29
|
+
"rounds": 2,
|
|
30
|
+
"behavior": {
|
|
31
|
+
"size": 500,
|
|
32
|
+
"replenish": "replace-all",
|
|
33
|
+
"selectSequentially": 5,
|
|
34
|
+
"selectRandomly": 5,
|
|
35
|
+
"targetBindingCount": 10
|
|
36
|
+
}
|
|
37
|
+
},
|
|
38
|
+
"revoke": {
|
|
39
|
+
"id": "revoke",
|
|
40
|
+
"allowedVerbs": [
|
|
41
|
+
"revoke"
|
|
42
|
+
],
|
|
43
|
+
"algo": "SHA-256",
|
|
44
|
+
"rounds": 10,
|
|
45
|
+
"behavior": {
|
|
46
|
+
"size": 500,
|
|
47
|
+
"replenish": "delete-all",
|
|
48
|
+
"selectSequentially": 20,
|
|
49
|
+
"selectRandomly": 20,
|
|
50
|
+
"targetBindingCount": 0
|
|
51
|
+
}
|
|
52
|
+
},
|
|
53
|
+
"connect": {
|
|
54
|
+
"id": "connect",
|
|
55
|
+
"allowedVerbs": [
|
|
56
|
+
"connect"
|
|
57
|
+
],
|
|
58
|
+
"algo": "SHA-256",
|
|
59
|
+
"rounds": 2,
|
|
60
|
+
"behavior": {
|
|
61
|
+
"size": 500,
|
|
62
|
+
"replenish": "top-up",
|
|
63
|
+
"selectSequentially": 5,
|
|
64
|
+
"selectRandomly": 5,
|
|
65
|
+
"targetBindingCount": 10
|
|
66
|
+
}
|
|
67
|
+
},
|
|
68
|
+
"sign": {
|
|
69
|
+
"id": "default",
|
|
70
|
+
"allowedVerbs": [
|
|
71
|
+
"sign"
|
|
72
|
+
],
|
|
73
|
+
"algo": "SHA-256",
|
|
74
|
+
"rounds": 2,
|
|
75
|
+
"behavior": {
|
|
76
|
+
"size": 500,
|
|
77
|
+
"replenish": "top-up",
|
|
78
|
+
"selectSequentially": 5,
|
|
79
|
+
"selectRandomly": 5,
|
|
80
|
+
"targetBindingCount": 10
|
|
81
|
+
}
|
|
82
|
+
}
|
|
83
|
+
}
|
|
84
|
+
}
|
|
@@ -0,0 +1,84 @@
|
|
|
1
|
+
{
|
|
2
|
+
"$schema": "../schemas/keystone.low.schema.json",
|
|
3
|
+
"metadata": {
|
|
4
|
+
"name": "Session/Saga Identity Profile",
|
|
5
|
+
"securityLevel": "low"
|
|
6
|
+
},
|
|
7
|
+
"pools": {
|
|
8
|
+
"sync": {
|
|
9
|
+
"id": "sync",
|
|
10
|
+
"allowedVerbs": [
|
|
11
|
+
"sync"
|
|
12
|
+
],
|
|
13
|
+
"algo": "SHA-256",
|
|
14
|
+
"rounds": 1,
|
|
15
|
+
"behavior": {
|
|
16
|
+
"size": 50,
|
|
17
|
+
"replenish": "top-up",
|
|
18
|
+
"selectSequentially": 2,
|
|
19
|
+
"selectRandomly": 2,
|
|
20
|
+
"targetBindingCount": 6
|
|
21
|
+
}
|
|
22
|
+
},
|
|
23
|
+
"manage": {
|
|
24
|
+
"id": "manage",
|
|
25
|
+
"allowedVerbs": [
|
|
26
|
+
"manage"
|
|
27
|
+
],
|
|
28
|
+
"algo": "SHA-256",
|
|
29
|
+
"rounds": 2,
|
|
30
|
+
"behavior": {
|
|
31
|
+
"size": 50,
|
|
32
|
+
"replenish": "replace-all",
|
|
33
|
+
"selectSequentially": 2,
|
|
34
|
+
"selectRandomly": 2,
|
|
35
|
+
"targetBindingCount": 6
|
|
36
|
+
}
|
|
37
|
+
},
|
|
38
|
+
"revoke": {
|
|
39
|
+
"id": "revoke",
|
|
40
|
+
"allowedVerbs": [
|
|
41
|
+
"revoke"
|
|
42
|
+
],
|
|
43
|
+
"algo": "SHA-256",
|
|
44
|
+
"rounds": 5,
|
|
45
|
+
"behavior": {
|
|
46
|
+
"size": 50,
|
|
47
|
+
"replenish": "delete-all",
|
|
48
|
+
"selectSequentially": 3,
|
|
49
|
+
"selectRandomly": 3,
|
|
50
|
+
"targetBindingCount": 0
|
|
51
|
+
}
|
|
52
|
+
},
|
|
53
|
+
"connect": {
|
|
54
|
+
"id": "connect",
|
|
55
|
+
"allowedVerbs": [
|
|
56
|
+
"connect"
|
|
57
|
+
],
|
|
58
|
+
"algo": "SHA-256",
|
|
59
|
+
"rounds": 1,
|
|
60
|
+
"behavior": {
|
|
61
|
+
"size": 50,
|
|
62
|
+
"replenish": "top-up",
|
|
63
|
+
"selectSequentially": 2,
|
|
64
|
+
"selectRandomly": 2,
|
|
65
|
+
"targetBindingCount": 6
|
|
66
|
+
}
|
|
67
|
+
},
|
|
68
|
+
"sign": {
|
|
69
|
+
"id": "default",
|
|
70
|
+
"allowedVerbs": [
|
|
71
|
+
"sign"
|
|
72
|
+
],
|
|
73
|
+
"algo": "SHA-256",
|
|
74
|
+
"rounds": 2,
|
|
75
|
+
"behavior": {
|
|
76
|
+
"size": 50,
|
|
77
|
+
"replenish": "top-up",
|
|
78
|
+
"selectSequentially": 2,
|
|
79
|
+
"selectRandomly": 2,
|
|
80
|
+
"targetBindingCount": 6
|
|
81
|
+
}
|
|
82
|
+
}
|
|
83
|
+
}
|
|
84
|
+
}
|
|
@@ -0,0 +1,84 @@
|
|
|
1
|
+
{
|
|
2
|
+
"$schema": "../schemas/keystone.low.schema.json",
|
|
3
|
+
"metadata": {
|
|
4
|
+
"name": "Test Identity Profile",
|
|
5
|
+
"securityLevel": "low"
|
|
6
|
+
},
|
|
7
|
+
"pools": {
|
|
8
|
+
"sync": {
|
|
9
|
+
"id": "sync",
|
|
10
|
+
"allowedVerbs": [
|
|
11
|
+
"sync"
|
|
12
|
+
],
|
|
13
|
+
"algo": "SHA-256",
|
|
14
|
+
"rounds": 1,
|
|
15
|
+
"behavior": {
|
|
16
|
+
"size": 12,
|
|
17
|
+
"replenish": "top-up",
|
|
18
|
+
"selectSequentially": 1,
|
|
19
|
+
"selectRandomly": 1,
|
|
20
|
+
"targetBindingCount": 3
|
|
21
|
+
}
|
|
22
|
+
},
|
|
23
|
+
"manage": {
|
|
24
|
+
"id": "manage",
|
|
25
|
+
"allowedVerbs": [
|
|
26
|
+
"manage"
|
|
27
|
+
],
|
|
28
|
+
"algo": "SHA-256",
|
|
29
|
+
"rounds": 2,
|
|
30
|
+
"behavior": {
|
|
31
|
+
"size": 12,
|
|
32
|
+
"replenish": "replace-all",
|
|
33
|
+
"selectSequentially": 1,
|
|
34
|
+
"selectRandomly": 2,
|
|
35
|
+
"targetBindingCount": 3
|
|
36
|
+
}
|
|
37
|
+
},
|
|
38
|
+
"revoke": {
|
|
39
|
+
"id": "revoke",
|
|
40
|
+
"allowedVerbs": [
|
|
41
|
+
"revoke"
|
|
42
|
+
],
|
|
43
|
+
"algo": "SHA-256",
|
|
44
|
+
"rounds": 5,
|
|
45
|
+
"behavior": {
|
|
46
|
+
"size": 12,
|
|
47
|
+
"replenish": "delete-all",
|
|
48
|
+
"selectSequentially": 3,
|
|
49
|
+
"selectRandomly": 3,
|
|
50
|
+
"targetBindingCount": 0
|
|
51
|
+
}
|
|
52
|
+
},
|
|
53
|
+
"connect": {
|
|
54
|
+
"id": "connect",
|
|
55
|
+
"allowedVerbs": [
|
|
56
|
+
"connect"
|
|
57
|
+
],
|
|
58
|
+
"algo": "SHA-256",
|
|
59
|
+
"rounds": 1,
|
|
60
|
+
"behavior": {
|
|
61
|
+
"size": 12,
|
|
62
|
+
"replenish": "top-up",
|
|
63
|
+
"selectSequentially": 1,
|
|
64
|
+
"selectRandomly": 1,
|
|
65
|
+
"targetBindingCount": 3
|
|
66
|
+
}
|
|
67
|
+
},
|
|
68
|
+
"sign": {
|
|
69
|
+
"id": "default",
|
|
70
|
+
"allowedVerbs": [
|
|
71
|
+
"sign"
|
|
72
|
+
],
|
|
73
|
+
"algo": "SHA-256",
|
|
74
|
+
"rounds": 2,
|
|
75
|
+
"behavior": {
|
|
76
|
+
"size": 20,
|
|
77
|
+
"replenish": "top-up",
|
|
78
|
+
"selectSequentially": 1,
|
|
79
|
+
"selectRandomly": 1,
|
|
80
|
+
"targetBindingCount": 3
|
|
81
|
+
}
|
|
82
|
+
}
|
|
83
|
+
}
|
|
84
|
+
}
|
|
@@ -0,0 +1,23 @@
|
|
|
1
|
+
{
|
|
2
|
+
"$schema": "http://json-schema.org/draft-07/schema#",
|
|
3
|
+
"title": "HighSecurityConnectPool",
|
|
4
|
+
"type": "object",
|
|
5
|
+
"properties": {
|
|
6
|
+
"id": { "type": "string", "const": "connect" },
|
|
7
|
+
"allowedVerbs": { "type": "array", "items": { "const": "connect" } },
|
|
8
|
+
"algo": { "type": "string", "const": "SHA-512" },
|
|
9
|
+
"rounds": { "type": "integer", "minimum": 4 },
|
|
10
|
+
"behavior": {
|
|
11
|
+
"type": "object",
|
|
12
|
+
"properties": {
|
|
13
|
+
"size": { "type": "integer", "minimum": 2000 },
|
|
14
|
+
"replenish": { "type": "string", "const": "top-up" },
|
|
15
|
+
"selectSequentially": { "type": "integer", "minimum": 10 },
|
|
16
|
+
"selectRandomly": { "type": "integer", "minimum": 10 },
|
|
17
|
+
"targetBindingCount": { "type": "integer", "minimum": 16 }
|
|
18
|
+
},
|
|
19
|
+
"required": ["size", "replenish", "selectSequentially", "selectRandomly", "targetBindingCount"]
|
|
20
|
+
}
|
|
21
|
+
},
|
|
22
|
+
"required": ["id", "allowedVerbs", "algo", "rounds", "behavior"]
|
|
23
|
+
}
|
|
@@ -0,0 +1,23 @@
|
|
|
1
|
+
{
|
|
2
|
+
"$schema": "http://json-schema.org/draft-07/schema#",
|
|
3
|
+
"title": "LowSecurityConnectPool",
|
|
4
|
+
"type": "object",
|
|
5
|
+
"properties": {
|
|
6
|
+
"id": { "type": "string", "const": "connect" },
|
|
7
|
+
"allowedVerbs": { "type": "array", "items": { "const": "connect" } },
|
|
8
|
+
"algo": { "type": "string", "const": "SHA-256" },
|
|
9
|
+
"rounds": { "type": "integer", "minimum": 1 },
|
|
10
|
+
"behavior": {
|
|
11
|
+
"type": "object",
|
|
12
|
+
"properties": {
|
|
13
|
+
"size": { "type": "integer", "minimum": 12 },
|
|
14
|
+
"replenish": { "type": "string", "const": "top-up" },
|
|
15
|
+
"selectSequentially": { "type": "integer", "minimum": 1 },
|
|
16
|
+
"selectRandomly": { "type": "integer", "minimum": 1 },
|
|
17
|
+
"targetBindingCount": { "type": "integer", "minimum": 3 }
|
|
18
|
+
},
|
|
19
|
+
"required": ["size", "replenish", "selectSequentially", "selectRandomly", "targetBindingCount"]
|
|
20
|
+
}
|
|
21
|
+
},
|
|
22
|
+
"required": ["id", "allowedVerbs", "algo", "rounds", "behavior"]
|
|
23
|
+
}
|
|
@@ -0,0 +1,23 @@
|
|
|
1
|
+
{
|
|
2
|
+
"$schema": "http://json-schema.org/draft-07/schema#",
|
|
3
|
+
"title": "MediumSecurityConnectPool",
|
|
4
|
+
"type": "object",
|
|
5
|
+
"properties": {
|
|
6
|
+
"id": { "type": "string", "const": "connect" },
|
|
7
|
+
"allowedVerbs": { "type": "array", "items": { "const": "connect" } },
|
|
8
|
+
"algo": { "type": "string", "enum": ["SHA-256", "SHA-512"] },
|
|
9
|
+
"rounds": { "type": "integer", "minimum": 2 },
|
|
10
|
+
"behavior": {
|
|
11
|
+
"type": "object",
|
|
12
|
+
"properties": {
|
|
13
|
+
"size": { "type": "integer", "minimum": 500 },
|
|
14
|
+
"replenish": { "type": "string", "const": "top-up" },
|
|
15
|
+
"selectSequentially": { "type": "integer", "minimum": 5 },
|
|
16
|
+
"selectRandomly": { "type": "integer", "minimum": 5 },
|
|
17
|
+
"targetBindingCount": { "type": "integer", "minimum": 10 }
|
|
18
|
+
},
|
|
19
|
+
"required": ["size", "replenish", "selectSequentially", "selectRandomly", "targetBindingCount"]
|
|
20
|
+
}
|
|
21
|
+
},
|
|
22
|
+
"required": ["id", "allowedVerbs", "algo", "rounds", "behavior"]
|
|
23
|
+
}
|