@iwentsourcing/core 0.1.0

package/dist/management/authentication/authentication-stream.js

@@ -0,0 +1,132 @@
+import { defineStream } from '../../stream/define-stream.js';
+import { iwentsourcingRealm } from '../system/iwentsourcing-realm.js';
+import { AuthenticationState } from './authentication-state.js';
+import { AuthenticationEvents } from './authentication-events.js';
+export const authenticationStream = defineStream(iwentsourcingRealm, {
+    state: AuthenticationState,
+    events: AuthenticationEvents,
+    pattern: 'auth',
+    auth: { allowAnonymous: false },
+    outputs: {},
+    handle: {
+        'authorize-session': async (evt, ctx) => {
+            const existingUser = await ctx
+                .snapshot('user')
+                .get({ username: evt.sub, realm: evt.realm, provider: evt.provider });
+            if (!existingUser) {
+                await ctx.state('user').insert({
+                    realm: evt.realm,
+                    provider: evt.provider,
+                    username: evt.sub,
+                    createdAt: ctx.metadata.createdAt,
+                    attributes: evt.externalAttributes,
+                });
+            }
+            else {
+                await ctx.state('user').patch({
+                    username: evt.sub,
+                    realm: evt.realm,
+                    provider: evt.provider,
+                    attributes: evt.externalAttributes,
+                });
+            }
+            await ctx.state('userSession').upsert({
+                username: evt.sub,
+                realm: evt.realm,
+                provider: evt.provider,
+                createdAt: ctx.metadata.createdAt,
+                refreshToken: evt.refreshToken,
+                externalRefreshToken: evt.externalRefreshToken,
+                externalAccessToken: evt.externalAccessToken,
+                externalAttributes: evt.externalAttributes,
+                clientSecret: evt.clientSecret,
+            });
+        },
+        'refresh-session': async (evt, ctx) => {
+            const current = await ctx.snapshot('userSession').get({
+                username: evt.username,
+                realm: evt.realm,
+                provider: evt.provider,
+                refreshToken: evt.currentRefreshToken,
+            });
+            if (!current) {
+                throw new Error('no session');
+            }
+            await ctx.state('userSession').delete({
+                username: evt.username,
+                realm: evt.realm,
+                provider: evt.provider,
+                refreshToken: evt.currentRefreshToken,
+            });
+            await ctx.state('userSession').insert({
+                username: evt.username,
+                realm: evt.realm,
+                provider: evt.provider,
+                createdAt: ctx.metadata.createdAt,
+                refreshToken: evt.newRefreshToken,
+                externalRefreshToken: evt.externalRefreshToken,
+                externalAccessToken: evt.externalAccessToken,
+                externalAttributes: evt.externalAttributes,
+                clientSecret: evt.clientSecret,
+            });
+            await ctx.state('user').patch({
+                username: evt.username,
+                realm: evt.realm,
+                provider: evt.provider,
+                attributes: evt.externalAttributes,
+            });
+        },
+        'login-user': async (evt, ctx) => {
+            const userCredentials = await ctx.snapshot('userCredentials').get({
+                username: evt.username,
+                realm: evt.realm,
+                provider: evt.provider,
+            });
+            if (!userCredentials) {
+                throw new Error('not valid user');
+            }
+            if (userCredentials.data.password !== evt.passwordHash) {
+                throw new Error('not valid password');
+            }
+            await ctx.state('userSession').insert({
+                username: evt.username,
+                realm: evt.realm,
+                provider: evt.provider,
+                createdAt: ctx.metadata.createdAt,
+                refreshToken: evt.refreshToken,
+                externalRefreshToken: undefined,
+                externalAccessToken: undefined,
+                externalAttributes: undefined,
+                clientSecret: false,
+            });
+        },
+        'registered-user': async (evt, ctx) => {
+            await ctx.state('user').insert({
+                username: evt.username,
+                realm: evt.realm,
+                provider: evt.provider,
+                createdAt: ctx.metadata.createdAt,
+                attributes: {},
+            });
+            await ctx.state('userCredentials').insert({
+                username: evt.username,
+                realm: evt.realm,
+                provider: evt.provider,
+                password: evt.passwordHash,
+                createdAt: ctx.metadata.createdAt,
+            });
+            await ctx.state('userSession').insert({
+                username: evt.username,
+                realm: evt.realm,
+                provider: evt.provider,
+                createdAt: ctx.metadata.createdAt,
+                refreshToken: evt.refreshToken,
+                externalRefreshToken: undefined,
+                externalAccessToken: undefined,
+                externalAttributes: undefined,
+                clientSecret: false,
+            });
+        },
+    },
+});
+//# sourceMappingURL=authentication-stream.js.map

package/dist/management/authentication/authentication-stream.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"authentication-stream.js","sourceRoot":"","sources":["../../../src/management/authentication/authentication-stream.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,+BAA+B,CAAC;AAC7D,OAAO,EAAE,kBAAkB,EAAE,MAAM,kCAAkC,CAAC;AACtE,OAAO,EAAE,mBAAmB,EAAE,MAAM,2BAA2B,CAAC;AAChE,OAAO,EAAE,oBAAoB,EAAE,MAAM,4BAA4B,CAAC;AAElE,MAAM,CAAC,MAAM,oBAAoB,GAAG,YAAY,CAAC,kBAAkB,EAAE;IACnE,KAAK,EAAE,mBAAmB;IAC1B,MAAM,EAAE,oBAAoB;IAC5B,OAAO,EAAE,MAAM;IACf,IAAI,EAAE,EAAE,cAAc,EAAE,KAAK,EAAE;IAC/B,OAAO,EAAE,EAAE;IACX,MAAM,EAAE;QACN,mBAAmB,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;YACtC,MAAM,YAAY,GAAG,MAAM,GAAG;iBAC3B,QAAQ,CAAC,MAAM,CAAC;iBAChB,GAAG,CAAC,EAAE,QAAQ,EAAE,GAAG,CAAC,GAAG,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,EAAE,QAAQ,EAAE,GAAG,CAAC,QAAQ,EAAE,CAAC,CAAC;YACxE,IAAI,CAAC,YAAY,EAAE,CAAC;gBAClB,MAAM,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC;oBAC7B,KAAK,EAAE,GAAG,CAAC,KAAK;oBAChB,QAAQ,EAAE,GAAG,CAAC,QAAQ;oBACtB,QAAQ,EAAE,GAAG,CAAC,GAAG;oBACjB,SAAS,EAAE,GAAG,CAAC,QAAQ,CAAC,SAAS;oBACjC,UAAU,EAAE,GAAG,CAAC,kBAAkB;iBACnC,CAAC,CAAC;YACL,CAAC;iBAAM,CAAC;gBACN,MAAM,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC;oBAC5B,QAAQ,EAAE,GAAG,CAAC,GAAG;oBACjB,KAAK,EAAE,GAAG,CAAC,KAAK;oBAChB,QAAQ,EAAE,GAAG,CAAC,QAAQ;oBACtB,UAAU,EAAE,GAAG,CAAC,kBAAkB;iBACnC,CAAC,CAAC;YACL,CAAC;YACD,MAAM,GAAG,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC,MAAM,CAAC;gBACpC,QAAQ,EAAE,GAAG,CAAC,GAAG;gBACjB,KAAK,EAAE,GAAG,CAAC,KAAK;gBAChB,QAAQ,EAAE,GAAG,CAAC,QAAQ;gBACtB,SAAS,EAAE,GAAG,CAAC,QAAQ,CAAC,SAAS;gBACjC,YAAY,EAAE,GAAG,CAAC,YAAY;gBAC9B,oBAAoB,EAAE,GAAG,CAAC,oBAAoB;gBAC9C,mBAAmB,EAAE,GAAG,CAAC,mBAAmB;gBAC5C,kBAAkB,EAAE,GAAG,CAAC,kBAAkB;gBAC1C,YAAY,EAAE,GAAG,CAAC,YAAY;aAC/B,CAAC,CAAC;QACL,CAAC;QACD,iBAAiB,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;YACpC,MAAM,OAAO,GAAG,MAAM,GAAG,CAAC,QAAQ,CAAC,aAAa,CAAC,CAAC,GAAG,CAAC;gBACpD,QAAQ,EAAE,GAAG,CAAC,QAAQ;gBACtB,KAAK,EAAE,GAAG,CAAC,KAAK;gBAChB,QAAQ,EAAE,GAAG,CAAC,QAAQ;gBACtB,YAAY,EAAE,GAAG,CAAC,mBAAmB;aACtC,CAAC,CAAC;YACH,IAAI,CAAC,OAAO,EAAE,CAAC;gBACb,MAAM,IAAI,KAAK,CAAC,YAAY,CAAC,CAAC;YAChC,CAAC;YAED,MAAM,GAAG,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC,MAAM,CAAC;gBACpC,QAAQ,EAAE,GAAG,CAAC,QAAQ;gBACtB,KAAK,EAAE,GAAG,CAAC,KAAK;gBAChB,QAAQ,EAAE,GAAG,CAAC,QAAQ;gBACtB,YAAY,EAAE,GAAG,CAAC,mBAAmB;aACtC,CAAC,CAAC;YACH,MAAM,GAAG,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC,MAAM,CAAC;gBACpC,QAAQ,EAAE,GAAG,CAAC,QAAQ;gBACtB,KAAK,EAAE,GAAG,CAAC,KAAK;gBAChB,QAAQ,EAAE,GAAG,CAAC,QAAQ;gBACtB,SAAS,EAAE,GAAG,CAAC,QAAQ,CAAC,SAAS;gBACjC,YAAY,EAAE,GAAG,CAAC,eAAe;gBACjC,oBAAoB,EAAE,GAAG,CAAC,oBAAoB;gBAC9C,mBAAmB,EAAE,GAAG,CAAC,mBAAmB;gBAC5C,kBAAkB,EAAE,GAAG,CAAC,kBAAkB;gBAC1C,YAAY,EAAE,GAAG,CAAC,YAAY;aAC/B,CAAC,CAAC;YACH,MAAM,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC;gBAC5B,QAAQ,EAAE,GAAG,CAAC,QAAQ;gBACtB,KAAK,EAAE,GAAG,CAAC,KAAK;gBAChB,QAAQ,EAAE,GAAG,CAAC,QAAQ;gBACtB,UAAU,EAAE,GAAG,CAAC,kBAAkB;aACnC,CAAC,CAAC;QACL,CAAC;QACD,YAAY,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;YAC/B,MAAM,eAAe,GAAG,MAAM,GAAG,CAAC,QAAQ,CAAC,iBAAiB,CAAC,CAAC,GAAG,CAAC;gBAChE,QAAQ,EAAE,GAAG,CAAC,QAAQ;gBACtB,KAAK,EAAE,GAAG,CAAC,KAAK;gBAChB,QAAQ,EAAE,GAAG,CAAC,QAAQ;aACvB,CAAC,CAAC;YAEH,IAAI,CAAC,eAAe,EAAE,CAAC;gBACrB,MAAM,IAAI,KAAK,CAAC,gBAAgB,CAAC,CAAC;YACpC,CAAC;YAED,IAAI,eAAe,CAAC,IAAI,CAAC,QAAQ,KAAK,GAAG,CAAC,YAAY,EAAE,CAAC;gBACvD,MAAM,IAAI,KAAK,CAAC,oBAAoB,CAAC,CAAC;YACxC,CAAC;YAED,MAAM,GAAG,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC,MAAM,CAAC;gBACpC,QAAQ,EAAE,GAAG,CAAC,QAAQ;gBACtB,KAAK,EAAE,GAAG,CAAC,KAAK;gBAChB,QAAQ,EAAE,GAAG,CAAC,QAAQ;gBACtB,SAAS,EAAE,GAAG,CAAC,QAAQ,CAAC,SAAS;gBACjC,YAAY,EAAE,GAAG,CAAC,YAAY;gBAC9B,oBAAoB,EAAE,SAAS;gBAC/B,mBAAmB,EAAE,SAAS;gBAC9B,kBAAkB,EAAE,SAAS;gBAC7B,YAAY,EAAE,KAAK;aACpB,CAAC,CAAC;QACL,CAAC;QACD,iBAAiB,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;YACpC,MAAM,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC;gBAC7B,QAAQ,EAAE,GAAG,CAAC,QAAQ;gBACtB,KAAK,EAAE,GAAG,CAAC,KAAK;gBAChB,QAAQ,EAAE,GAAG,CAAC,QAAQ;gBACtB,SAAS,EAAE,GAAG,CAAC,QAAQ,CAAC,SAAS;gBACjC,UAAU,EAAE,EAAE;aACf,CAAC,CAAC;YACH,MAAM,GAAG,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC,MAAM,CAAC;gBACxC,QAAQ,EAAE,GAAG,CAAC,QAAQ;gBACtB,KAAK,EAAE,GAAG,CAAC,KAAK;gBAChB,QAAQ,EAAE,GAAG,CAAC,QAAQ;gBACtB,QAAQ,EAAE,GAAG,CAAC,YAAY;gBAC1B,SAAS,EAAE,GAAG,CAAC,QAAQ,CAAC,SAAS;aAClC,CAAC,CAAC;YAEH,MAAM,GAAG,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC,MAAM,CAAC;gBACpC,QAAQ,EAAE,GAAG,CAAC,QAAQ;gBACtB,KAAK,EAAE,GAAG,CAAC,KAAK;gBAChB,QAAQ,EAAE,GAAG,CAAC,QAAQ;gBACtB,SAAS,EAAE,GAAG,CAAC,QAAQ,CAAC,SAAS;gBACjC,YAAY,EAAE,GAAG,CAAC,YAAY;gBAC9B,oBAAoB,EAAE,SAAS;gBAC/B,mBAAmB,EAAE,SAAS;gBAC9B,kBAAkB,EAAE,SAAS;gBAC7B,YAAY,EAAE,KAAK;aACpB,CAAC,CAAC;QACL,CAAC;KACF;CACF,CAAC,CAAC"}

package/dist/management/authentication/authentication-stream.test.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/management/authentication/authentication-stream.test.js

@@ -0,0 +1,21 @@
+import { describe, it } from 'node:test';
+import { createTestCase } from '../../testing/create-test-case.js';
+import * as assert from 'node:assert';
+import { createExampleRegistry } from '../create-example-registry.js';
+describe('auth-management-event', () => {
+    it('should run register', async (test) => {
+        const todoExampleRegistry = createExampleRegistry(test.signal);
+        const testCase = createTestCase({
+            signal: test.signal,
+            registry: todoExampleRegistry,
+        });
+        await testCase.run(async (run) => {
+            const token = await run.auth.register('iwentsourcing', 'test', 'provider', 'username', 'password', test.signal);
+            assert.equal(token.username, 'username');
+            assert.ok(token.id_token);
+            assert.ok(token.refresh_token);
+            assert.ok(token.expires_in);
+        });
+    });
+});
+//# sourceMappingURL=authentication-stream.test.js.map

package/dist/management/authentication/authentication-stream.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"authentication-stream.test.js","sourceRoot":"","sources":["../../../src/management/authentication/authentication-stream.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,WAAW,CAAC;AACzC,OAAO,EAAE,cAAc,EAAE,MAAM,mCAAmC,CAAC;AACnE,OAAO,KAAK,MAAM,MAAM,aAAa,CAAC;AAEtC,OAAO,EAAE,qBAAqB,EAAE,MAAM,+BAA+B,CAAC;AAEtE,QAAQ,CAAC,uBAAuB,EAAE,GAAG,EAAE;IACrC,EAAE,CAAC,qBAAqB,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE;QACvC,MAAM,mBAAmB,GAAG,qBAAqB,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAC/D,MAAM,QAAQ,GAAG,cAAc,CAAC;YAC9B,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,QAAQ,EAAE,mBAAmB;SAC9B,CAAC,CAAC;QACH,MAAM,QAAQ,CAAC,GAAG,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE;YAC/B,MAAM,KAAK,GAAG,MAAM,GAAG,CAAC,IAAI,CAAC,QAAQ,CACnC,eAAe,EACf,MAAM,EACN,UAAU,EACV,UAAU,EACV,UAAU,EACV,IAAI,CAAC,MAAM,CACZ,CAAC;YACF,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;YACzC,MAAM,CAAC,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;YAC1B,MAAM,CAAC,EAAE,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC;YAC/B,MAAM,CAAC,EAAE,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;QAC9B,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/management/authentication/create-auth-management.d.ts

@@ -0,0 +1,11 @@
+import { KeystoreManager } from '../../authentication/keystore/keystore-manager.js';
+import { AuthManagement } from './auth-management.js';
+import { RuntimeOptions } from '../runtime-options.js';
+import { Registry } from '../../registry/registry.js';
+import { RemoteSystems } from '../system/remote-systems.js';
+export declare function createAuthManagement(opts: {
+    registry: Registry;
+    keystoreManager: KeystoreManager;
+    runtime: RuntimeOptions;
+    system: RemoteSystems;
+}): AuthManagement;

package/dist/management/authentication/create-auth-management.js

@@ -0,0 +1,426 @@
+import { string } from '../../typing/string.js';
+import { object } from '../../typing/object.js';
+import { parseJwt } from '../../authentication/jwt/parse-jwt.js';
+import { assertsSuccess } from '../../runtime/asserts-success.js';
+import { resolveSecret } from '../../authentication/resolve-secret.js';
+import { validate } from '../../typing/validate.js';
+import { AuthTokenResponse } from '../../authentication/oauth/auth-token-response.js';
+import { JwtPayload } from '../../authentication/jwt/jwt-payload.js';
+import { sha256 } from '../../authentication/sha256.js';
+import { number } from '../../typing/number.js';
+import { getOrFail } from '../../utils/get-or-fail.js';
+import { sleep } from '../../utils/sleep.js';
+import { randomText } from '../../random/random-text.js';
+import { BadRequestError } from '../../error/bad-request-error.js';
+import { fallbackAuth } from '../../event-store/fallback-auth.js';
+import { serializePublicAuthProviders } from '../../authentication/public-auth-providers.js';
+export function createAuthManagement(opts) {
+    return {
+        async token(tenant, realm, provider, token, signal) {
+            const keyStore = await opts.keystoreManager.get(tenant, realm, signal);
+            const store = keyStore.provider(provider);
+            if (!store) {
+                throw new BadRequestError('provider not found', { provider });
+            }
+            const parsed = await store.validate(token, signal);
+            if (!parsed) {
+                throw new BadRequestError('unauthorized', { provider });
+            }
+            const refreshToken = randomText(opts.runtime.env, 24);
+            const authStream = opts.system.auth(tenant);
+            const evt = await authStream.push('authorize-session', {
+                realm,
+                provider: provider,
+                sub: parsed.payload.sub,
+                aud: parsed.payload.aud,
+                iss: parsed.payload.iss,
+                refreshToken,
+                externalRefreshToken: undefined,
+                externalAccessToken: store.type != 'jwt' ? token : undefined,
+                externalAttributes: parsed.attributes,
+                clientSecret: true,
+            }, { signal, await: true });
+            const result = await authStream.result(evt.id, { signal });
+            assertsSuccess(result);
+            return store.create({
+                refresh_token: refreshToken,
+                username: parsed.payload.sub,
+                attributes: parsed.attributes,
+            }, signal);
+        },
+        async login(tenant, realm, provider, username, password, signal) {
+            const keyStore = await opts.keystoreManager.get(tenant, realm, signal);
+            const store = keyStore.provider(provider);
+            if (!store) {
+                throw new BadRequestError('provider not found', { provider });
+            }
+            if (store.type !== 'jwt') {
+                throw new BadRequestError('login not supported', { provider });
+            }
+            const refreshToken = randomText(opts.runtime.env, 24);
+            const authStream = opts.system.auth(tenant);
+            const evt = await authStream.push('login-user', {
+                realm,
+                provider,
+                username,
+                passwordHash: await sha256(opts.runtime.env, password),
+                refreshToken,
+            }, { signal, await: true });
+            const result = await authStream.result(evt.id, { signal });
+            assertsSuccess(result);
+            return store.create({
+                refresh_token: refreshToken,
+                username: username,
+                attributes: {},
+            }, signal);
+        },
+        async register(tenant, realm, provider, username, password, signal) {
+            const keyStore = await opts.keystoreManager.get(tenant, realm, signal);
+            const providerConfig = keyStore.provider(provider);
+            if (providerConfig === null) {
+                throw new BadRequestError('provider not found', {
+                    provider: provider,
+                });
+            }
+            if (providerConfig.type !== 'jwt') {
+                throw new BadRequestError('jwt support only', { provider });
+            }
+            const refreshToken = randomText(opts.runtime.env, 24);
+            const authStream = opts.system.auth(tenant);
+            const evt = await authStream.push('registered-user', {
+                realm,
+                provider,
+                username,
+                passwordHash: await sha256(opts.runtime.env, password),
+                refreshToken,
+            }, { signal, await: true });
+            const result = await authStream.result(evt.id, { signal });
+            assertsSuccess(result);
+            return providerConfig.create({
+                refresh_token: refreshToken,
+                username: username,
+                attributes: {},
+            }, signal);
+        },
+        async publicProviders(tenant, realm, signal) {
+            void signal;
+            const auth = await opts.registry.getAuth(tenant, realm, signal);
+            if (!auth) {
+                throw new BadRequestError('realm not found', { realm });
+            }
+            return {
+                realm,
+                providers: serializePublicAuthProviders(auth),
+            };
+        },
+        async refresh(tenant, realm, provider, username, refreshToken, signal) {
+            const keyStore = await opts.keystoreManager.get(tenant, realm, signal);
+            const store = keyStore.provider(provider);
+            if (!store) {
+                throw new BadRequestError('issuer not found', { provider });
+            }
+            const authStream = opts.system.auth(tenant);
+            const current = await authStream.snapshot('userSession').get({
+                refreshToken,
+                realm,
+                username,
+                provider,
+            }, { signal });
+            if (!current) {
+                throw new BadRequestError('unknown session', { provider });
+            }
+            let externalAccessToken = current.data.externalAccessToken;
+            let externalRefreshToken = current.data.externalRefreshToken;
+            let externalAttributes = current.data.externalAttributes ?? {};
+            if (store.type === 'openid') {
+                if (!store.config.token ||
+                    !store.config.clientSecret ||
+                    !store.config.clientId) {
+                    throw new BadRequestError('refresh not supported', { provider });
+                }
+                if (externalRefreshToken) {
+                    const data = new FormData();
+                    data.set('client_id', store.config.clientId);
+                    if (current.data.clientSecret) {
+                        data.set('client_secret', resolveSecret(opts.runtime.env, store.config.clientSecret));
+                    }
+                    data.set('grant_type', 'refresh_token');
+                    data.set('refresh_token', externalRefreshToken);
+                    const res = await fetch(store.config.token.url, {
+                        method: 'POST',
+                        body: data,
+                        headers: {
+                            Accept: 'application/json',
+                        },
+                        signal,
+                    });
+                    const authResult = await res.json();
+                    const [err, validatedResult] = validate(authResult, AuthTokenResponse);
+                    if (err) {
+                        throw err;
+                    }
+                    const tokenValidation = await store.validate(validatedResult.id_token, signal);
+                    if (!tokenValidation) {
+                        throw new BadRequestError('not valid', {});
+                    }
+                    externalAttributes = tokenValidation.attributes;
+                    externalRefreshToken =
+                        validatedResult.refresh_token ?? externalRefreshToken;
+                    externalAccessToken = validatedResult.id_token;
+                }
+                else {
+                    throw new BadRequestError('missing refresh token', { provider });
+                }
+            }
+            else if (store.type === 'token') {
+                if (!externalAccessToken) {
+                    throw new BadRequestError('missing access token', { provider });
+                }
+                const tokenValidation = await store.validate(externalAccessToken, signal);
+                if (!tokenValidation) {
+                    throw new BadRequestError('not valid', {});
+                }
+                externalAttributes = tokenValidation.attributes;
+            }
+            const newRefreshToken = randomText(opts.runtime.env, 24);
+            const evt = await authStream.push('refresh-session', {
+                realm,
+                provider,
+                username,
+                currentRefreshToken: refreshToken,
+                newRefreshToken: newRefreshToken,
+                externalAttributes,
+                externalAccessToken,
+                externalRefreshToken,
+                clientSecret: current.data.clientSecret,
+            }, { signal, await: true });
+            const result = await authStream.result(evt.id, { signal });
+            assertsSuccess(result);
+            return await store.create({
+                refresh_token: newRefreshToken,
+                username: username,
+                attributes: externalAttributes,
+            }, signal);
+        },
+        async authorize(tenant, realm, options, signal) {
+            const keyStore = await opts.keystoreManager.get(tenant, realm, signal);
+            const issuer = keyStore.provider(options.provider);
+            if (!issuer) {
+                throw new BadRequestError('issuer not found', {
+                    provider: options.provider,
+                });
+            }
+            if (issuer.type === 'jwt') {
+                throw new BadRequestError('jwt not supported', {
+                    provider: options.provider,
+                });
+            }
+            if (!issuer.config.token || !issuer.config.clientSecret) {
+                throw new BadRequestError('authorize not supported', {
+                    provider: options.provider,
+                });
+            }
+            const data = new FormData();
+            data.set('client_id', issuer.config.clientId);
+            data.set('client_secret', resolveSecret(opts.runtime.env, issuer.config.clientSecret));
+            data.set('code', options.code);
+            data.set('grant_type', 'authorization_code');
+            data.set('redirect_uri', options.redirectUri);
+            for (const [key, value] of Object.entries(issuer.config.token.formData)) {
+                data.set(key, value);
+            }
+            const res = await fetch(issuer.config.token.url, {
+                method: 'POST',
+                body: data,
+                headers: {
+                    Accept: 'application/json',
+                },
+                signal,
+            });
+            const json = await res.json();
+            const parsed = await issuer.parseTokenResult(json, signal);
+            if (!parsed) {
+                throw new BadRequestError('unknown result', {
+                    provider: options.provider,
+                });
+            }
+            const refreshToken = randomText(opts.runtime.env, 24);
+            const authStream = opts.system.auth(tenant);
+            const evt = await authStream.push('authorize-session', {
+                realm,
+                provider: options.provider,
+                sub: parsed.payload.sub,
+                aud: parsed.payload.aud,
+                iss: parsed.payload.iss,
+                refreshToken,
+                externalRefreshToken: parsed.token?.refresh_token,
+                externalAccessToken: parsed.token?.id_token,
+                externalAttributes: parsed.attributes,
+                clientSecret: true,
+            }, { signal, await: true });
+            const result = await authStream.result(evt.id, { signal });
+            assertsSuccess(result);
+            return await issuer.create({
+                username: parsed.payload.sub,
+                refresh_token: refreshToken,
+                attributes: parsed.attributes,
+            }, signal);
+        },
+        async *deviceCode(tenant, realm, provider, signal) {
+            const keyStore = await opts.keystoreManager.get(tenant, realm, signal);
+            const issuer = keyStore.provider(provider);
+            if (!issuer) {
+                throw new BadRequestError('issuer not found', { provider });
+            }
+            if (issuer.type === 'jwt') {
+                throw new BadRequestError('jwt not supported', { provider });
+            }
+            if (!issuer.config.deviceCode ||
+                (!issuer.config.clientSecret &&
+                    issuer.config.deviceCode.clientSecret) ||
+                !issuer.config.token) {
+                throw new BadRequestError('device code not supported', { provider });
+            }
+            const codeData = new FormData();
+            codeData.set('client_id', issuer.config.clientId);
+            codeData.set('scope', issuer.config.deviceCode.scope ?? '');
+            const codeResponse = await fetch(issuer.config.deviceCode.codeUrl, {
+                method: 'POST',
+                body: codeData,
+                headers: {
+                    Accept: 'application/json',
+                },
+                signal,
+            });
+            const codeResponseJson = await codeResponse.json();
+            const [codeErr, codeResponseData] = validate(codeResponseJson, object('CodeJson', {
+                interval: number(),
+                user_code: string(),
+                device_code: string(),
+                expires_in: number(),
+            }));
+            const [codeUrlErr, codeUrlData] = validate(codeResponseJson, object('CodeJson', {
+                [issuer.config.deviceCode.verificationUriName]: string(),
+            }));
+            if (codeErr) {
+                throw codeErr;
+            }
+            if (codeUrlErr) {
+                throw codeUrlErr;
+            }
+            yield {
+                type: 'code',
+                url: getOrFail(codeUrlData, issuer.config.deviceCode.verificationUriName),
+                userCode: codeResponseData.user_code,
+            };
+            const tokenData = new FormData();
+            tokenData.set('client_id', issuer.config.clientId);
+            if (issuer.config.deviceCode.clientSecret && issuer.config.clientSecret) {
+                tokenData.set('client_secret', resolveSecret(opts.runtime.env, issuer.config.clientSecret));
+            }
+            tokenData.set('device_code', codeResponseData.device_code);
+            tokenData.set('grant_type', issuer.config.deviceCode.grantType);
+            let slowDown = 1;
+            do {
+                await sleep(codeResponseData.interval * slowDown * 1000);
+                const tokenResponse = await fetch(issuer.config.token.url, {
+                    method: 'POST',
+                    body: tokenData,
+                    headers: {
+                        Accept: 'application/json',
+                    },
+                    signal,
+                });
+                const tokenResponseJson = await tokenResponse.json();
+                const [, codeErrorData] = validate(tokenResponseJson, object('CodeError', {
+                    error: string(),
+                }));
+                if (codeErrorData) {
+                    if (codeErrorData.error === 'authorization_pending') {
+                        continue;
+                    }
+                    else if (codeErrorData.error === 'slow_down') {
+                        slowDown++;
+                    }
+                    else if (codeErrorData.error === 'expired_token') {
+                        yield {
+                            type: 'expired',
+                        };
+                        break;
+                    }
+                    else if (codeErrorData.error === 'access_denied') {
+                        throw new BadRequestError('access_denied', { provider });
+                    }
+                    else {
+                        throw new BadRequestError('unknown_error', {
+                            error: codeErrorData.error,
+                            provider,
+                        });
+                    }
+                }
+                else {
+                    if (tokenResponse.ok) {
+                        const parsed = await issuer.parseTokenResult(tokenResponseJson, signal);
+                        if (!parsed) {
+                            throw new BadRequestError('unknown_result', {});
+                        }
+                        const refreshToken = randomText(opts.runtime.env, 24);
+                        const authStream = opts.system.auth(tenant);
+                        const evt = await authStream.push('authorize-session', {
+                            realm,
+                            provider: provider,
+                            sub: parsed.payload.sub,
+                            aud: parsed.payload.aud,
+                            iss: parsed.payload.iss,
+                            refreshToken,
+                            externalRefreshToken: parsed.token?.refresh_token,
+                            externalAccessToken: parsed.token?.id_token,
+                            externalAttributes: parsed.attributes,
+                            clientSecret: false,
+                        }, { signal, await: true });
+                        const result = await authStream.result(evt.id, { signal });
+                        assertsSuccess(result);
+                        yield {
+                            type: 'token',
+                            token: await issuer.create({
+                                refresh_token: refreshToken,
+                                username: parsed.payload.sub,
+                                attributes: parsed.attributes,
+                            }, signal),
+                        };
+                        break;
+                    }
+                    else {
+                        throw new BadRequestError('unknown_error', { provider });
+                    }
+                }
+            } while (!signal.aborted);
+        },
+        async context(tenant, realm, token, signal) {
+            if (!token) {
+                return fallbackAuth(undefined);
+            }
+            const store = await opts.keystoreManager.get(tenant, realm, signal);
+            const payload = parseJwt(token, 1, JwtPayload);
+            if (!payload.iss) {
+                throw new BadRequestError('issuer not found', {});
+            }
+            const issuer = store.provider(payload.iss);
+            if (!issuer) {
+                throw new BadRequestError('issuer not found', {});
+            }
+            const validatedPayload = await issuer.verify(token, signal);
+            if (!validatedPayload) {
+                throw new BadRequestError('invalid token', {
+                    issuer: payload.iss,
+                });
+            }
+            return {
+                sub: validatedPayload.payload.sub,
+                iss: validatedPayload.payload.iss,
+                aud: validatedPayload.payload.aud,
+            };
+        },
+    };
+}
+//# sourceMappingURL=create-auth-management.js.map

package/dist/management/authentication/create-auth-management.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"create-auth-management.js","sourceRoot":"","sources":["../../../src/management/authentication/create-auth-management.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,wBAAwB,CAAC;AAChD,OAAO,EAAE,MAAM,EAAE,MAAM,wBAAwB,CAAC;AAChD,OAAO,EAAE,QAAQ,EAAE,MAAM,uCAAuC,CAAC;AAIjE,OAAO,EAAE,cAAc,EAAE,MAAM,kCAAkC,CAAC;AAClE,OAAO,EAAE,aAAa,EAAE,MAAM,wCAAwC,CAAC;AACvE,OAAO,EAAE,QAAQ,EAAE,MAAM,0BAA0B,CAAC;AACpD,OAAO,EAAE,iBAAiB,EAAE,MAAM,mDAAmD,CAAC;AACtF,OAAO,EAAE,UAAU,EAAE,MAAM,yCAAyC,CAAC;AAErE,OAAO,EAAE,MAAM,EAAE,MAAM,gCAAgC,CAAC;AAIxD,OAAO,EAAE,MAAM,EAAE,MAAM,wBAAwB,CAAC;AAChD,OAAO,EAAE,SAAS,EAAE,MAAM,4BAA4B,CAAC;AACvD,OAAO,EAAE,KAAK,EAAE,MAAM,sBAAsB,CAAC;AAC7C,OAAO,EAAE,UAAU,EAAE,MAAM,6BAA6B,CAAC;AACzD,OAAO,EAAE,eAAe,EAAE,MAAM,kCAAkC,CAAC;AACnE,OAAO,EAAE,YAAY,EAAE,MAAM,oCAAoC,CAAC;AAGlE,OAAO,EAAE,4BAA4B,EAAE,MAAM,+CAA+C,CAAC;AAE7F,MAAM,UAAU,oBAAoB,CAAC,IAKpC;IACC,OAAO;QACL,KAAK,CAAC,KAAK,CACT,MAAc,EACd,KAAa,EACb,QAAgB,EAChB,KAAa,EACb,MAAmB;YAEnB,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,MAAM,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC;YACvE,MAAM,KAAK,GAAG,QAAQ,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;YAC1C,IAAI,CAAC,KAAK,EAAE,CAAC;gBACX,MAAM,IAAI,eAAe,CAAC,oBAAoB,EAAE,EAAE,QAAQ,EAAE,CAAC,CAAC;YAChE,CAAC;YAED,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;YACnD,IAAI,CAAC,MAAM,EAAE,CAAC;gBACZ,MAAM,IAAI,eAAe,CAAC,cAAc,EAAE,EAAE,QAAQ,EAAE,CAAC,CAAC;YAC1D,CAAC;YAED,MAAM,YAAY,GAAG,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;YACtD,MAAM,UAAU,GAAG,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YAC5C,MAAM,GAAG,GAAG,MAAM,UAAU,CAAC,IAAI,CAC/B,mBAAmB,EACnB;gBACE,KAAK;gBACL,QAAQ,EAAE,QAAQ;gBAClB,GAAG,EAAE,MAAM,CAAC,OAAO,CAAC,GAAG;gBACvB,GAAG,EAAE,MAAM,CAAC,OAAO,CAAC,GAAG;gBACvB,GAAG,EAAE,MAAM,CAAC,OAAO,CAAC,GAAG;gBACvB,YAAY;gBACZ,oBAAoB,EAAE,SAAS;gBAC/B,mBAAmB,EAAE,KAAK,CAAC,IAAI,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS;gBAC5D,kBAAkB,EAAE,MAAM,CAAC,UAAU;gBACrC,YAAY,EAAE,IAAI;aACnB,EACD,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,CACxB,CAAC;YAEF,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC;YAC3D,cAAc,CAAC,MAAM,CAAC,CAAC;YAEvB,OAAO,KAAK,CAAC,MAAM,CACjB;gBACE,aAAa,EAAE,YAAY;gBAC3B,QAAQ,EAAE,MAAM,CAAC,OAAO,CAAC,GAAG;gBAC5B,UAAU,EAAE,MAAM,CAAC,UAAU;aAC9B,EACD,MAAM,CACP,CAAC;QACJ,CAAC;QACD,KAAK,CAAC,KAAK,CACT,MAAc,EACd,KAAa,EACb,QAAgB,EAChB,QAAgB,EAChB,QAAgB,EAChB,MAAmB;YAEnB,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,MAAM,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC;YACvE,MAAM,KAAK,GAAG,QAAQ,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;YAC1C,IAAI,CAAC,KAAK,EAAE,CAAC;gBACX,MAAM,IAAI,eAAe,CAAC,oBAAoB,EAAE,EAAE,QAAQ,EAAE,CAAC,CAAC;YAChE,CAAC;YAED,IAAI,KAAK,CAAC,IAAI,KAAK,KAAK,EAAE,CAAC;gBACzB,MAAM,IAAI,eAAe,CAAC,qBAAqB,EAAE,EAAE,QAAQ,EAAE,CAAC,CAAC;YACjE,CAAC;YAED,MAAM,YAAY,GAAG,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;YACtD,MAAM,UAAU,GAAG,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YAC5C,MAAM,GAAG,GAAG,MAAM,UAAU,CAAC,IAAI,CAC/B,YAAY,EACZ;gBACE,KAAK;gBACL,QAAQ;gBACR,QAAQ;gBACR,YAAY,EAAE,MAAM,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,QAAQ,CAAC;gBACtD,YAAY;aACb,EACD,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,CACxB,CAAC;YAEF,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC;YAE3D,cAAc,CAAC,MAAM,CAAC,CAAC;YAEvB,OAAO,KAAK,CAAC,MAAM,CACjB;gBACE,aAAa,EAAE,YAAY;gBAC3B,QAAQ,EAAE,QAAQ;gBAClB,UAAU,EAAE,EAAE;aACf,EACD,MAAM,CACP,CAAC;QACJ,CAAC;QACD,KAAK,CAAC,QAAQ,CACZ,MAAc,EACd,KAAa,EACb,QAAgB,EAChB,QAAgB,EAChB,QAAgB,EAChB,MAAmB;YAEnB,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,MAAM,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC;YACvE,MAAM,cAAc,GAAG,QAAQ,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;YACnD,IAAI,cAAc,KAAK,IAAI,EAAE,CAAC;gBAC5B,MAAM,IAAI,eAAe,CAAC,oBAAoB,EAAE;oBAC9C,QAAQ,EAAE,QAAQ;iBACnB,CAAC,CAAC;YACL,CAAC;YACD,IAAI,cAAc,CAAC,IAAI,KAAK,KAAK,EAAE,CAAC;gBAClC,MAAM,IAAI,eAAe,CAAC,kBAAkB,EAAE,EAAE,QAAQ,EAAE,CAAC,CAAC;YAC9D,CAAC;YAED,MAAM,YAAY,GAAG,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;YACtD,MAAM,UAAU,GAAG,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YAC5C,MAAM,GAAG,GAAG,MAAM,UAAU,CAAC,IAAI,CAC/B,iBAAiB,EACjB;gBACE,KAAK;gBACL,QAAQ;gBACR,QAAQ;gBACR,YAAY,EAAE,MAAM,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,QAAQ,CAAC;gBACtD,YAAY;aACb,EACD,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,CACxB,CAAC;YAEF,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC;YAC3D,cAAc,CAAC,MAAM,CAAC,CAAC;YAEvB,OAAO,cAAc,CAAC,MAAM,CAC1B;gBACE,aAAa,EAAE,YAAY;gBAC3B,QAAQ,EAAE,QAAQ;gBAClB,UAAU,EAAE,EAAE;aACf,EACD,MAAM,CACP,CAAC;QACJ,CAAC;QACD,KAAK,CAAC,eAAe,CAAC,MAAc,EAAE,KAAa,EAAE,MAAmB;YACtE,KAAK,MAAM,CAAC;YACZ,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,MAAM,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC;YAChE,IAAI,CAAC,IAAI,EAAE,CAAC;gBACV,MAAM,IAAI,eAAe,CAAC,iBAAiB,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;YAC1D,CAAC;YACD,OAAO;gBACL,KAAK;gBACL,SAAS,EAAE,4BAA4B,CAAC,IAAI,CAAC;aAC9C,CAAC;QACJ,CAAC;QACD,KAAK,CAAC,OAAO,CACX,MAAc,EACd,KAAa,EACb,QAAgB,EAChB,QAAgB,EAChB,YAAoB,EACpB,MAAmB;YAEnB,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,MAAM,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC;YACvE,MAAM,KAAK,GAAG,QAAQ,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;YAC1C,IAAI,CAAC,KAAK,EAAE,CAAC;gBACX,MAAM,IAAI,eAAe,CAAC,kBAAkB,EAAE,EAAE,QAAQ,EAAE,CAAC,CAAC;YAC9D,CAAC;YAED,MAAM,UAAU,GAAG,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YAC5C,MAAM,OAAO,GAAG,MAAM,UAAU,CAAC,QAAQ,CAAC,aAAa,CAAC,CAAC,GAAG,CAC1D;gBACE,YAAY;gBACZ,KAAK;gBACL,QAAQ;gBACR,QAAQ;aACT,EACD,EAAE,MAAM,EAAE,CACX,CAAC;YAEF,IAAI,CAAC,OAAO,EAAE,CAAC;gBACb,MAAM,IAAI,eAAe,CAAC,iBAAiB,EAAE,EAAE,QAAQ,EAAE,CAAC,CAAC;YAC7D,CAAC;YAED,IAAI,mBAAmB,GAAG,OAAO,CAAC,IAAI,CAAC,mBAAmB,CAAC;YAC3D,IAAI,oBAAoB,GAAG,OAAO,CAAC,IAAI,CAAC,oBAAoB,CAAC;YAC7D,IAAI,kBAAkB,GAAG,OAAO,CAAC,IAAI,CAAC,kBAAkB,IAAI,EAAE,CAAC;YAE/D,IAAI,KAAK,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;gBAC5B,IACE,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK;oBACnB,CAAC,KAAK,CAAC,MAAM,CAAC,YAAY;oBAC1B,CAAC,KAAK,CAAC,MAAM,CAAC,QAAQ,EACtB,CAAC;oBACD,MAAM,IAAI,eAAe,CAAC,uBAAuB,EAAE,EAAE,QAAQ,EAAE,CAAC,CAAC;gBACnE,CAAC;gBAED,IAAI,oBAAoB,EAAE,CAAC;oBACzB,MAAM,IAAI,GAAG,IAAI,QAAQ,EAAE,CAAC;oBAC5B,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,KAAK,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;oBAC7C,IAAI,OAAO,CAAC,IAAI,CAAC,YAAY,EAAE,CAAC;wBAC9B,IAAI,CAAC,GAAG,CACN,eAAe,EACf,aAAa,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,KAAK,CAAC,MAAM,CAAC,YAAY,CAAC,CAC3D,CAAC;oBACJ,CAAC;oBACD,IAAI,CAAC,GAAG,CAAC,YAAY,EAAE,eAAe,CAAC,CAAC;oBACxC,IAAI,CAAC,GAAG,CAAC,eAAe,EAAE,oBAAoB,CAAC,CAAC;oBAEhD,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE;wBAC9C,MAAM,EAAE,MAAM;wBACd,IAAI,EAAE,IAAI;wBACV,OAAO,EAAE;4BACP,MAAM,EAAE,kBAAkB;yBAC3B;wBACD,MAAM;qBACP,CAAC,CAAC;oBAEH,MAAM,UAAU,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC;oBAEpC,MAAM,CAAC,GAAG,EAAE,eAAe,CAAC,GAAG,QAAQ,CACrC,UAAU,EACV,iBAAiB,CAClB,CAAC;oBAEF,IAAI,GAAG,EAAE,CAAC;wBACR,MAAM,GAAG,CAAC;oBACZ,CAAC;oBAED,MAAM,eAAe,GAAG,MAAM,KAAK,CAAC,QAAQ,CAC1C,eAAe,CAAC,QAAQ,EACxB,MAAM,CACP,CAAC;oBACF,IAAI,CAAC,eAAe,EAAE,CAAC;wBACrB,MAAM,IAAI,eAAe,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC;oBAC7C,CAAC;oBAED,kBAAkB,GAAG,eAAe,CAAC,UAAU,CAAC;oBAChD,oBAAoB;wBAClB,eAAe,CAAC,aAAa,IAAI,oBAAoB,CAAC;oBACxD,mBAAmB,GAAG,eAAe,CAAC,QAAQ,CAAC;gBACjD,CAAC;qBAAM,CAAC;oBACN,MAAM,IAAI,eAAe,CAAC,uBAAuB,EAAE,EAAE,QAAQ,EAAE,CAAC,CAAC;gBACnE,CAAC;YACH,CAAC;iBAAM,IAAI,KAAK,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;gBAClC,IAAI,CAAC,mBAAmB,EAAE,CAAC;oBACzB,MAAM,IAAI,eAAe,CAAC,sBAAsB,EAAE,EAAE,QAAQ,EAAE,CAAC,CAAC;gBAClE,CAAC;gBAED,MAAM,eAAe,GAAG,MAAM,KAAK,CAAC,QAAQ,CAC1C,mBAAmB,EACnB,MAAM,CACP,CAAC;gBACF,IAAI,CAAC,eAAe,EAAE,CAAC;oBACrB,MAAM,IAAI,eAAe,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC;gBAC7C,CAAC;gBACD,kBAAkB,GAAG,eAAe,CAAC,UAAU,CAAC;YAClD,CAAC;YAED,MAAM,eAAe,GAAG,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;YACzD,MAAM,GAAG,GAAG,MAAM,UAAU,CAAC,IAAI,CAC/B,iBAAiB,EACjB;gBACE,KAAK;gBACL,QAAQ;gBACR,QAAQ;gBACR,mBAAmB,EAAE,YAAY;gBACjC,eAAe,EAAE,eAAe;gBAChC,kBAAkB;gBAClB,mBAAmB;gBACnB,oBAAoB;gBACpB,YAAY,EAAE,OAAO,CAAC,IAAI,CAAC,YAAY;aACxC,EACD,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,CACxB,CAAC;YAEF,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC;YAC3D,cAAc,CAAC,MAAM,CAAC,CAAC;YAEvB,OAAO,MAAM,KAAK,CAAC,MAAM,CACvB;gBACE,aAAa,EAAE,eAAe;gBAC9B,QAAQ,EAAE,QAAQ;gBAClB,UAAU,EAAE,kBAAkB;aAC/B,EACD,MAAM,CACP,CAAC;QACJ,CAAC;QACD,KAAK,CAAC,SAAS,CACb,MAAc,EACd,KAAa,EACb,OAA8B,EAC9B,MAAmB;YAEnB,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,MAAM,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC;YACvE,MAAM,MAAM,GAAG,QAAQ,CAAC,QAAQ,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;YACnD,IAAI,CAAC,MAAM,EAAE,CAAC;gBACZ,MAAM,IAAI,eAAe,CAAC,kBAAkB,EAAE;oBAC5C,QAAQ,EAAE,OAAO,CAAC,QAAQ;iBAC3B,CAAC,CAAC;YACL,CAAC;YAED,IAAI,MAAM,CAAC,IAAI,KAAK,KAAK,EAAE,CAAC;gBAC1B,MAAM,IAAI,eAAe,CAAC,mBAAmB,EAAE;oBAC7C,QAAQ,EAAE,OAAO,CAAC,QAAQ;iBAC3B,CAAC,CAAC;YACL,CAAC;YAED,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,YAAY,EAAE,CAAC;gBACxD,MAAM,IAAI,eAAe,CAAC,yBAAyB,EAAE;oBACnD,QAAQ,EAAE,OAAO,CAAC,QAAQ;iBAC3B,CAAC,CAAC;YACL,CAAC;YAED,MAAM,IAAI,GAAG,IAAI,QAAQ,EAAE,CAAC;YAC5B,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;YAC9C,IAAI,CAAC,GAAG,CACN,eAAe,EACf,aAAa,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,MAAM,CAAC,MAAM,CAAC,YAAY,CAAC,CAC5D,CAAC;YACF,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC;YAC/B,IAAI,CAAC,GAAG,CAAC,YAAY,EAAE,oBAAoB,CAAC,CAAC;YAC7C,IAAI,CAAC,GAAG,CAAC,cAAc,EAAE,OAAO,CAAC,WAAW,CAAC,CAAC;YAE9C,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,CAAC;gBACxE,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;YACvB,CAAC;YAED,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE;gBAC/C,MAAM,EAAE,MAAM;gBACd,IAAI,EAAE,IAAI;gBACV,OAAO,EAAE;oBACP,MAAM,EAAE,kBAAkB;iBAC3B;gBACD,MAAM;aACP,CAAC,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC;YAC9B,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,gBAAgB,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;YAC3D,IAAI,CAAC,MAAM,EAAE,CAAC;gBACZ,MAAM,IAAI,eAAe,CAAC,gBAAgB,EAAE;oBAC1C,QAAQ,EAAE,OAAO,CAAC,QAAQ;iBAC3B,CAAC,CAAC;YACL,CAAC;YAED,MAAM,YAAY,GAAG,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;YACtD,MAAM,UAAU,GAAG,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YAC5C,MAAM,GAAG,GAAG,MAAM,UAAU,CAAC,IAAI,CAC/B,mBAAmB,EACnB;gBACE,KAAK;gBACL,QAAQ,EAAE,OAAO,CAAC,QAAQ;gBAC1B,GAAG,EAAE,MAAM,CAAC,OAAO,CAAC,GAAG;gBACvB,GAAG,EAAE,MAAM,CAAC,OAAO,CAAC,GAAG;gBACvB,GAAG,EAAE,MAAM,CAAC,OAAO,CAAC,GAAG;gBACvB,YAAY;gBACZ,oBAAoB,EAAE,MAAM,CAAC,KAAK,EAAE,aAAa;gBACjD,mBAAmB,EAAE,MAAM,CAAC,KAAK,EAAE,QAAQ;gBAC3C,kBAAkB,EAAE,MAAM,CAAC,UAAU;gBACrC,YAAY,EAAE,IAAI;aACnB,EACD,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,CACxB,CAAC;YAEF,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC;YAC3D,cAAc,CAAC,MAAM,CAAC,CAAC;YAEvB,OAAO,MAAM,MAAM,CAAC,MAAM,CACxB;gBACE,QAAQ,EAAE,MAAM,CAAC,OAAO,CAAC,GAAG;gBAC5B,aAAa,EAAE,YAAY;gBAC3B,UAAU,EAAE,MAAM,CAAC,UAAU;aAC9B,EACD,MAAM,CACP,CAAC;QACJ,CAAC;QACD,KAAK,CAAC,CAAC,UAAU,CACf,MAAc,EACd,KAAa,EACb,QAAgB,EAChB,MAAmB;YAEnB,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,MAAM,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC;YACvE,MAAM,MAAM,GAAG,QAAQ,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;YAC3C,IAAI,CAAC,MAAM,EAAE,CAAC;gBACZ,MAAM,IAAI,eAAe,CAAC,kBAAkB,EAAE,EAAE,QAAQ,EAAE,CAAC,CAAC;YAC9D,CAAC;YAED,IAAI,MAAM,CAAC,IAAI,KAAK,KAAK,EAAE,CAAC;gBAC1B,MAAM,IAAI,eAAe,CAAC,mBAAmB,EAAE,EAAE,QAAQ,EAAE,CAAC,CAAC;YAC/D,CAAC;YAED,IACE,CAAC,MAAM,CAAC,MAAM,CAAC,UAAU;gBACzB,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,YAAY;oBAC1B,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,YAAY,CAAC;gBACxC,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,EACpB,CAAC;gBACD,MAAM,IAAI,eAAe,CAAC,2BAA2B,EAAE,EAAE,QAAQ,EAAE,CAAC,CAAC;YACvE,CAAC;YAED,MAAM,QAAQ,GAAG,IAAI,QAAQ,EAAE,CAAC;YAChC,QAAQ,CAAC,GAAG,CAAC,WAAW,EAAE,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;YAClD,QAAQ,CAAC,GAAG,CAAC,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC;YAC5D,MAAM,YAAY,GAAG,MAAM,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,OAAO,EAAE;gBACjE,MAAM,EAAE,MAAM;gBACd,IAAI,EAAE,QAAQ;gBACd,OAAO,EAAE;oBACP,MAAM,EAAE,kBAAkB;iBAC3B;gBACD,MAAM;aACP,CAAC,CAAC;YACH,MAAM,gBAAgB,GAAG,MAAM,YAAY,CAAC,IAAI,EAAE,CAAC;YACnD,MAAM,CAAC,OAAO,EAAE,gBAAgB,CAAC,GAAG,QAAQ,CAC1C,gBAAgB,EAChB,MAAM,CAAC,UAAU,EAAE;gBACjB,QAAQ,EAAE,MAAM,EAAE;gBAClB,SAAS,EAAE,MAAM,EAAE;gBACnB,WAAW,EAAE,MAAM,EAAE;gBACrB,UAAU,EAAE,MAAM,EAAE;aACrB,CAAC,CACH,CAAC;YACF,MAAM,CAAC,UAAU,EAAE,WAAW,CAAC,GAAG,QAAQ,CACxC,gBAAgB,EAChB,MAAM,CAAC,UAAU,EAAE;gBACjB,CAAC,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,mBAAmB,CAAC,EAAE,MAAM,EAAE;aACzD,CAAC,CACH,CAAC;YACF,IAAI,OAAO,EAAE,CAAC;gBACZ,MAAM,OAAO,CAAC;YAChB,CAAC;YACD,IAAI,UAAU,EAAE,CAAC;gBACf,MAAM,UAAU,CAAC;YACnB,CAAC;YAED,MAAM;gBACJ,IAAI,EAAE,MAAM;gBACZ,GAAG,EAAE,SAAS,CACZ,WAAW,EACX,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,mBAAmB,CAC7C;gBACD,QAAQ,EAAE,gBAAgB,CAAC,SAAS;aACrC,CAAC;YAEF,MAAM,SAAS,GAAG,IAAI,QAAQ,EAAE,CAAC;YACjC,SAAS,CAAC,GAAG,CAAC,WAAW,EAAE,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;YACnD,IAAI,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,YAAY,IAAI,MAAM,CAAC,MAAM,CAAC,YAAY,EAAE,CAAC;gBACxE,SAAS,CAAC,GAAG,CACX,eAAe,EACf,aAAa,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,MAAM,CAAC,MAAM,CAAC,YAAY,CAAC,CAC5D,CAAC;YACJ,CAAC;YACD,SAAS,CAAC,GAAG,CAAC,aAAa,EAAE,gBAAgB,CAAC,WAAW,CAAC,CAAC;YAC3D,SAAS,CAAC,GAAG,CAAC,YAAY,EAAE,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC;YAEhE,IAAI,QAAQ,GAAG,CAAC,CAAC;YACjB,GAAG,CAAC;gBACF,MAAM,KAAK,CAAC,gBAAgB,CAAC,QAAQ,GAAG,QAAQ,GAAG,IAAI,CAAC,CAAC;gBAEzD,MAAM,aAAa,GAAG,MAAM,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE;oBACzD,MAAM,EAAE,MAAM;oBACd,IAAI,EAAE,SAAS;oBACf,OAAO,EAAE;wBACP,MAAM,EAAE,kBAAkB;qBAC3B;oBACD,MAAM;iBACP,CAAC,CAAC;gBAEH,MAAM,iBAAiB,GAAG,MAAM,aAAa,CAAC,IAAI,EAAE,CAAC;gBACrD,MAAM,CAAC,EAAE,aAAa,CAAC,GAAG,QAAQ,CAChC,iBAAiB,EACjB,MAAM,CAAC,WAAW,EAAE;oBAClB,KAAK,EAAE,MAAM,EAAE;iBAChB,CAAC,CACH,CAAC;gBACF,IAAI,aAAa,EAAE,CAAC;oBAClB,IAAI,aAAa,CAAC,KAAK,KAAK,uBAAuB,EAAE,CAAC;wBACpD,SAAS;oBACX,CAAC;yBAAM,IAAI,aAAa,CAAC,KAAK,KAAK,WAAW,EAAE,CAAC;wBAC/C,QAAQ,EAAE,CAAC;oBACb,CAAC;yBAAM,IAAI,aAAa,CAAC,KAAK,KAAK,eAAe,EAAE,CAAC;wBACnD,MAAM;4BACJ,IAAI,EAAE,SAAS;yBAChB,CAAC;wBACF,MAAM;oBACR,CAAC;yBAAM,IAAI,aAAa,CAAC,KAAK,KAAK,eAAe,EAAE,CAAC;wBACnD,MAAM,IAAI,eAAe,CAAC,eAAe,EAAE,EAAE,QAAQ,EAAE,CAAC,CAAC;oBAC3D,CAAC;yBAAM,CAAC;wBACN,MAAM,IAAI,eAAe,CAAC,eAAe,EAAE;4BACzC,KAAK,EAAE,aAAa,CAAC,KAAK;4BAC1B,QAAQ;yBACT,CAAC,CAAC;oBACL,CAAC;gBACH,CAAC;qBAAM,CAAC;oBACN,IAAI,aAAa,CAAC,EAAE,EAAE,CAAC;wBACrB,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,gBAAgB,CAC1C,iBAAiB,EACjB,MAAM,CACP,CAAC;wBAEF,IAAI,CAAC,MAAM,EAAE,CAAC;4BACZ,MAAM,IAAI,eAAe,CAAC,gBAAgB,EAAE,EAAE,CAAC,CAAC;wBAClD,CAAC;wBAED,MAAM,YAAY,GAAG,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;wBACtD,MAAM,UAAU,GAAG,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;wBAC5C,MAAM,GAAG,GAAG,MAAM,UAAU,CAAC,IAAI,CAC/B,mBAAmB,EACnB;4BACE,KAAK;4BACL,QAAQ,EAAE,QAAQ;4BAClB,GAAG,EAAE,MAAM,CAAC,OAAO,CAAC,GAAG;4BACvB,GAAG,EAAE,MAAM,CAAC,OAAO,CAAC,GAAG;4BACvB,GAAG,EAAE,MAAM,CAAC,OAAO,CAAC,GAAG;4BACvB,YAAY;4BACZ,oBAAoB,EAAE,MAAM,CAAC,KAAK,EAAE,aAAa;4BACjD,mBAAmB,EAAE,MAAM,CAAC,KAAK,EAAE,QAAQ;4BAC3C,kBAAkB,EAAE,MAAM,CAAC,UAAU;4BACrC,YAAY,EAAE,KAAK;yBACpB,EACD,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,CACxB,CAAC;wBAEF,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC;wBAC3D,cAAc,CAAC,MAAM,CAAC,CAAC;wBAEvB,MAAM;4BACJ,IAAI,EAAE,OAAO;4BACb,KAAK,EAAE,MAAM,MAAM,CAAC,MAAM,CACxB;gCACE,aAAa,EAAE,YAAY;gCAC3B,QAAQ,EAAE,MAAM,CAAC,OAAO,CAAC,GAAG;gCAC5B,UAAU,EAAE,MAAM,CAAC,UAAU;6BAC9B,EACD,MAAM,CACP;yBACF,CAAC;wBACF,MAAM;oBACR,CAAC;yBAAM,CAAC;wBACN,MAAM,IAAI,eAAe,CAAC,eAAe,EAAE,EAAE,QAAQ,EAAE,CAAC,CAAC;oBAC3D,CAAC;gBACH,CAAC;YACH,CAAC,QAAQ,CAAC,MAAM,CAAC,OAAO,EAAE;QAC5B,CAAC;QACD,KAAK,CAAC,OAAO,CACX,MAAc,EACd,KAAa,EACb,KAAoB,EACpB,MAAmB;YAEnB,IAAI,CAAC,KAAK,EAAE,CAAC;gBACX,OAAO,YAAY,CAAC,SAAS,CAAC,CAAC;YACjC,CAAC;YAED,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,MAAM,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC;YAEpE,MAAM,OAAO,GAAG,QAAQ,CAAC,KAAK,EAAE,CAAC,EAAE,UAAU,CAAC,CAAC;YAE/C,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC;gBACjB,MAAM,IAAI,eAAe,CAAC,kBAAkB,EAAE,EAAE,CAAC,CAAC;YACpD,CAAC;YAED,MAAM,MAAM,GAAG,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;YAC3C,IAAI,CAAC,MAAM,EAAE,CAAC;gBACZ,MAAM,IAAI,eAAe,CAAC,kBAAkB,EAAE,EAAE,CAAC,CAAC;YACpD,CAAC;YAED,MAAM,gBAAgB,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;YAC5D,IAAI,CAAC,gBAAgB,EAAE,CAAC;gBACtB,MAAM,IAAI,eAAe,CAAC,eAAe,EAAE;oBACzC,MAAM,EAAE,OAAO,CAAC,GAAG;iBACpB,CAAC,CAAC;YACL,CAAC;YAED,OAAO;gBACL,GAAG,EAAE,gBAAgB,CAAC,OAAO,CAAC,GAAG;gBACjC,GAAG,EAAE,gBAAgB,CAAC,OAAO,CAAC,GAAG;gBACjC,GAAG,EAAE,gBAAgB,CAAC,OAAO,CAAC,GAAG;aAClC,CAAC;QACJ,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/management/authentication/create-auth-management.test.d.ts

@@ -0,0 +1 @@
+export {};