@jazzmind/busibox-app 3.0.18 → 3.0.20

package/dist/sso/token.js

@@ -1,57 +0,0 @@
-import * as jose from 'jose';
-function toUint8(secret) {
-    return new TextEncoder().encode(secret);
-}
-/**
- * Verify and parse an Busibox Portal SSO token.
- *
- * This is intentionally **stateless**: no DB lookups, no "usedAt" checks, no client-secret validation.
- * Those DB-backed checks remain busibox-portal-only.
- */
-export async function verifySsoToken(token, options) {
-    const issuer = options.issuer ?? 'busibox-portal';
-    const { payload } = await jose.jwtVerify(token, toUint8(options.secret), {
-        issuer,
-        ...(options.audience ? { audience: options.audience } : {}),
-    });
-    // `payload` is jose.JWTPayload; map into our shape (keeping unknowns optional)
-    return payload;
-}
-/**
- * Decode token without verification (useful for debugging only).
- */
-export function decodeSsoToken(token) {
-    const decoded = jose.decodeJwt(token);
-    return decoded;
-}
-export function getRoleNamesFromSsoClaims(claims) {
-    const direct = Array.isArray(claims.roles) ? claims.roles : [];
-    const entra = claims.entraId?.roles ?? [];
-    // Dedup while preserving order: direct first, then entra
-    const seen = new Set();
-    const out = [];
-    for (const r of [...direct, ...entra]) {
-        if (!r)
-            continue;
-        if (seen.has(r))
-            continue;
-        seen.add(r);
-        out.push(r);
-    }
-    return out;
-}
-export function hasRole(roleNames, roleName) {
-    return roleNames.includes(roleName);
-}
-export function isAdmin(roleNames) {
-    return hasRole(roleNames, 'Admin');
-}
-export function getEntraIdClaims(claims) {
-    return (claims.entraId ?? {
-        roles: [],
-        groups: [],
-        tenantId: null,
-        objectId: null,
-    });
-}
-//# sourceMappingURL=token.js.map

package/dist/sso/token.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"token.js","sourceRoot":"","sources":["../../src/sso/token.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,IAAI,MAAM,MAAM,CAAC;AAG7B,SAAS,OAAO,CAAC,MAAc;IAC7B,OAAO,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;AAC1C,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,KAAa,EACb,OAA8B;IAE9B,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,IAAI,gBAAgB,CAAC;IAElD,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE;QACvE,MAAM;QACN,GAAG,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,OAAO,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC5D,CAAC,CAAC;IAEH,+EAA+E;IAC/E,OAAO,OAAkC,CAAC;AAC5C,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,cAAc,CAAC,KAAa;IAC1C,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IACtC,OAAO,OAAkC,CAAC;AAC5C,CAAC;AAED,MAAM,UAAU,yBAAyB,CAAC,MAAoB;IAC5D,MAAM,MAAM,GAAG,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;IAC/D,MAAM,KAAK,GAAG,MAAM,CAAC,OAAO,EAAE,KAAK,IAAI,EAAE,CAAC;IAC1C,yDAAyD;IACzD,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,MAAM,GAAG,GAAa,EAAE,CAAC;IACzB,KAAK,MAAM,CAAC,IAAI,CAAC,GAAG,MAAM,EAAE,GAAG,KAAK,CAAC,EAAE,CAAC;QACtC,IAAI,CAAC,CAAC;YAAE,SAAS;QACjB,IAAI,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;YAAE,SAAS;QAC1B,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;QACZ,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACd,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,MAAM,UAAU,OAAO,CAAC,SAAmB,EAAE,QAAgB;IAC3D,OAAO,SAAS,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;AACtC,CAAC;AAED,MAAM,UAAU,OAAO,CAAC,SAAmB;IACzC,OAAO,OAAO,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;AACrC,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,MAAoB;IACnD,OAAO,CACL,MAAM,CAAC,OAAO,IAAI;QAChB,KAAK,EAAE,EAAE;QACT,MAAM,EAAE,EAAE;QACV,QAAQ,EAAE,IAAI;QACd,QAAQ,EAAE,IAAI;KACf,CACF,CAAC;AACJ,CAAC"}

package/dist/types/sso.d.ts

@@ -1,37 +0,0 @@
-export type EntraIdClaims = {
-    roles: string[];
-    groups: string[];
-    tenantId: string | null;
-    objectId: string | null;
-};
-/**
- * Shared SSO JWT claims (issued by Busibox Portal).
- * Other apps can verify and parse these tokens locally using a shared secret.
- */
-export type SsoJwtClaims = {
-    /** JWT ID */
-    jti?: string;
-    /** Subject: user id */
-    sub?: string;
-    /** Audience: app id */
-    aud?: string | string[];
-    /** Issuer */
-    iss?: string;
-    /** Issued at (seconds) */
-    iat?: number;
-    /** Exp (seconds) */
-    exp?: number;
-    /** Convenience claims */
-    email?: string;
-    roles?: string[];
-    appName?: string;
-    entraId?: EntraIdClaims;
-};
-export type VerifySsoTokenOptions = {
-    secret: string;
-    /** Default issuer: "busibox-portal" */
-    issuer?: string;
-    /** Audience/app id (if you want to enforce it) */
-    audience?: string;
-};
-//# sourceMappingURL=sso.d.ts.map

package/dist/types/sso.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"sso.d.ts","sourceRoot":"","sources":["../../src/types/sso.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,aAAa,GAAG;IAC1B,KAAK,EAAE,MAAM,EAAE,CAAC;IAChB,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;CACzB,CAAC;AAEF;;;GAGG;AACH,MAAM,MAAM,YAAY,GAAG;IACzB,aAAa;IACb,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,uBAAuB;IACvB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,uBAAuB;IACvB,GAAG,CAAC,EAAE,MAAM,GAAG,MAAM,EAAE,CAAC;IACxB,aAAa;IACb,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,0BAA0B;IAC1B,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,oBAAoB;IACpB,GAAG,CAAC,EAAE,MAAM,CAAC;IAEb,yBAAyB;IACzB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,KAAK,CAAC,EAAE,MAAM,EAAE,CAAC;IACjB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,OAAO,CAAC,EAAE,aAAa,CAAC;CACzB,CAAC;AAEF,MAAM,MAAM,qBAAqB,GAAG;IAClC,MAAM,EAAE,MAAM,CAAC;IACf,uCAAuC;IACvC,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,kDAAkD;IAClD,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB,CAAC"}

package/dist/types/sso.js

@@ -1,2 +0,0 @@
-export {};
-//# sourceMappingURL=sso.js.map

package/dist/types/sso.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"sso.js","sourceRoot":"","sources":["../../src/types/sso.ts"],"names":[],"mappings":""}