@juzi/wechaty-puppet-service 1.0.0

package/dist/cjs/src/auth/auth-impl-token.spec.js

@@ -0,0 +1,65 @@
+#!/usr/bin/env -S node --no-warnings --loader ts-node/esm
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+const tstest_1 = require("tstest");
+const grpc_js_js_1 = require("./grpc-js.js");
+const auth_impl_token_js_1 = require("./auth-impl-token.js");
+(0, tstest_1.test)('authImplToken()', async (t) => {
+    const sandbox = tstest_1.sinon.createSandbox();
+    const spy = sandbox.spy();
+    const TOKEN = 'UUIDv4';
+    const IMPL = {
+        spy,
+    };
+    const implWithAuth = (0, auth_impl_token_js_1.authImplToken)(TOKEN)(IMPL);
+    const validMetadata = new grpc_js_js_1.Metadata();
+    validMetadata.add('Authorization', 'Wechaty ' + TOKEN);
+    const TEST_LIST = [
+        {
+            call: {
+                metadata: validMetadata,
+            },
+            callback: sandbox.spy(),
+            ok: true,
+        },
+        {
+            call: {
+                metadata: new grpc_js_js_1.Metadata(),
+            },
+            callback: sandbox.spy(),
+            ok: false,
+        },
+        {
+            call: {
+                emit: sandbox.spy(),
+                metadata: new grpc_js_js_1.Metadata(),
+            },
+            callback: undefined,
+            ok: false,
+        },
+    ];
+    const method = implWithAuth['spy'];
+    for (const { call, callback, ok } of TEST_LIST) {
+        spy.resetHistory();
+        method(call, callback);
+        if (ok) {
+            t.ok(spy.calledOnce, 'should call IMPL handler');
+            continue;
+        }
+        /**
+          * not ok
+          */
+        t.ok(spy.notCalled, 'should not call IMPL handler');
+        if (callback) {
+            t.equal(callback.args[0][0].code, grpc_js_js_1.GrpcStatus.UNAUTHENTICATED, 'should return UNAUTHENTICATED');
+        }
+        else {
+            t.equal(call.emit.args[0][0], 'error', 'should emit error');
+            t.equal(call.emit.args[0][1].code, grpc_js_js_1.GrpcStatus.UNAUTHENTICATED, 'should emit UNAUTHENTICATED');
+        }
+        // console.info(spy.args)
+        // console.info(callback?.args)
+    }
+    sandbox.restore();
+});
+//# sourceMappingURL=auth-impl-token.spec.js.map

package/dist/cjs/src/auth/auth-impl-token.spec.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth-impl-token.spec.js","sourceRoot":"","sources":["../../../../src/auth/auth-impl-token.spec.ts"],"names":[],"mappings":";;;AAEA,mCAGuB;AAEvB,6CAIuD;AAEvD,6DAAoD;AAEpD,IAAA,aAAI,EAAC,iBAAiB,EAAE,KAAK,EAAC,CAAC,EAAC,EAAE;IAChC,MAAM,OAAO,GAAG,cAAK,CAAC,aAAa,EAAE,CAAA;IACrC,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,EAAE,CAAA;IAEzB,MAAM,KAAK,GAAG,QAAQ,CAAA;IACtB,MAAM,IAAI,GAAiC;QACzC,GAAG;KACJ,CAAA;IAED,MAAM,YAAY,GAAG,IAAA,kCAAa,EAAC,KAAK,CAAC,CAAC,IAAI,CAAC,CAAA;IAC/C,MAAM,aAAa,GAAG,IAAI,qBAAQ,EAAE,CAAA;IACpC,aAAa,CAAC,GAAG,CAAC,eAAe,EAAE,UAAU,GAAG,KAAK,CAAC,CAAA;IAEtD,MAAM,SAAS,GAAG;QAChB;YACE,IAAI,EAAE;gBACJ,QAAQ,EAAE,aAAa;aACjB;YACR,QAAQ,EAAE,OAAO,CAAC,GAAG,EAAE;YACvB,EAAE,EAAE,IAAI;SACT;QACD;YACE,IAAI,EAAE;gBACJ,QAAQ,EAAE,IAAI,qBAAQ,EAAE;aAClB;YACR,QAAQ,EAAE,OAAO,CAAC,GAAG,EAAE;YACvB,EAAE,EAAE,KAAK;SACV;QACD;YACE,IAAI,EAAE;gBACJ,IAAI,EAAE,OAAO,CAAC,GAAG,EAAE;gBACnB,QAAQ,EAAE,IAAI,qBAAQ,EAAE;aAClB;YACR,QAAQ,EAAE,SAAS;YACnB,EAAE,EAAE,KAAK;SACV;KACO,CAAA;IAEV,MAAM,MAAM,GAAG,YAAY,CAAC,KAAK,CAAE,CAAA;IAEnC,KAAK,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,EAAE,IAAI,SAAS,EAAE;QAC9C,GAAG,CAAC,YAAY,EAAE,CAAA;QAElB,MAAM,CAAC,IAAI,EAAE,QAAe,CAAC,CAAA;QAE7B,IAAI,EAAE,EAAE;YACN,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,UAAU,EAAE,0BAA0B,CAAC,CAAA;YAChD,SAAQ;SACT;QAED;;YAEI;QACJ,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,SAAS,EAAE,8BAA8B,CAAC,CAAA;QACnD,IAAI,QAAQ,EAAE;YACZ,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAE,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,uBAAU,CAAC,eAAe,EAAE,+BAA+B,CAAC,CAAA;SAChG;aAAM;YACL,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,mBAAmB,CAAC,CAAA;YAC3D,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,uBAAU,CAAC,eAAe,EAAE,6BAA6B,CAAC,CAAA;SAC9F;QAED,yBAAyB;QACzB,+BAA+B;KAChC;IACD,OAAO,CAAC,OAAO,EAAE,CAAA;AACnB,CAAC,CAAC,CAAA"}

package/dist/cjs/src/auth/ca.d.ts

@@ -0,0 +1,46 @@
+/**
+ * Wechaty Certificate Authority Repo:
+ *  https://github.com/wechaty/dotenv/tree/main/ca
+ *
+ * The SSL_ROOT_CERT is a root certificate generated by and for wechaty community.
+ *
+ * Because it's the default root cert for the puppet service,
+ *  so all the Polyglot Wechaty SDK should set this cert to be trusted by default.
+ *
+ * Update:
+ *  - Huan(202108): init, expired in 3650 days (after 2031/07)
+ */
+declare const TLS_CA_CERT = "-----BEGIN CERTIFICATE-----\nMIIFxTCCA62gAwIBAgIUYddLAoa8JnLzJ80l2u5vGuFsaEIwDQYJKoZIhvcNAQEL\nBQAwcjELMAkGA1UEBhMCVVMxFjAUBgNVBAgMDVNhbiBGcmFuY2lzY28xEjAQBgNV\nBAcMCVBhbG8gQWx0bzEQMA4GA1UECgwHV2VjaGF0eTELMAkGA1UECwwCQ0ExGDAW\nBgNVBAMMD3dlY2hhdHktcm9vdC1jYTAeFw0yMTA4MDkxNTQ4NTJaFw0zMTA4MDcx\nNTQ4NTJaMHIxCzAJBgNVBAYTAlVTMRYwFAYDVQQIDA1TYW4gRnJhbmNpc2NvMRIw\nEAYDVQQHDAlQYWxvIEFsdG8xEDAOBgNVBAoMB1dlY2hhdHkxCzAJBgNVBAsMAkNB\nMRgwFgYDVQQDDA93ZWNoYXR5LXJvb3QtY2EwggIiMA0GCSqGSIb3DQEBAQUAA4IC\nDwAwggIKAoICAQDulLjOZhzQ58TSQ7TfWNYgdtWhlc+5L9MnKb1nznVRhzAkZo3Q\nrPLRW/HDjlv2OEbt4nFLaQgaMmc1oJTUVGDBDlrzesI/lJh7z4eA/B0z8eW7f6Cw\n/TGc8lgzHvq7UIE507QYPhvfSejfW4Prw+90HJnuodriPdMGS0n9AR37JPdQm6sD\niMFeEvhHmM2SXRo/o7bll8UDZi81DoFu0XuTCx0esfCX1W5QWEmAJ5oAdjWxJ23C\nlxI1+EjwBQKXGqp147VP9+pwpYW5Xxpy870kctPBHKjCAti8Bfo+Y6dyWz2UAd4w\n4BFRD+18C/TgX+ECl1s9fsHMY15JitcSGgAIz8gQX1OelECaTMRTQfNaSnNW4LdS\nsXMQEI9WxAU/W47GCQFmwcJeZvimqDF1QtflHSaARD3O8tlbduYqTR81LJ63bPoy\n9e1pdB6w2bVOTlHunE0YaGSJERALVc1xz40QpPGcZ52mNCb3PBg462RQc77yv/QB\nx/P2RC1y0zDUF2tP9J29gTatWq6+D4MhfEk2flZNyzAgJbDuT6KAIJGzOB1ZJ/MG\no1gS13eTuZYw24LElrhd1PrR6OHK+lkyYzqUPYMulUg4HzaZIDclfHKwAC4lecKm\nzC5q9jJB4m4SKMKdzxvpIOfdahoqsZMg34l4AavWRqPTpwEU0C0dboNA/QIDAQAB\no1MwUTAdBgNVHQ4EFgQU0rey3QPklTOgdhMJ9VIA6KbZ5bAwHwYDVR0jBBgwFoAU\n0rey3QPklTOgdhMJ9VIA6KbZ5bAwDwYDVR0TAQH/BAUwAwEB/zANBgkqhkiG9w0B\nAQsFAAOCAgEAx2uyShx9kLoB1AJ8x7Vf95v6PX95L/4JkJ1WwzJ9Dlf3BcCI7VH7\nFp1dnQ6Ig7mFqSBDBAUUBWAptAnuqIDcgehI6XAEKxW8ZZRxD877pUNwZ/45tSC4\nb5U5y9uaiNK7oC3LlDCsB0291b3KSOtevMeDFoh12LcliXAkdIGGTccUxrH+Cyij\ncBOc+EKGJFBdLqcjLDU4M6QdMMMFOdfXyAOSpYuWGYqrxqvxQjAjvianEyMpNZWM\nlajggJqiPhfF67sZTB2yzvRTmtHdUq7x+iNOVonOBcCHu31aGxa9Py91XEr9jaIQ\nEBdl6sycLxKo8mxF/5tyUOns9+919aWNqTOUBmI15D68bqhhOVNyvsb7aVURIt5y\n6A7Sj4gSBR9P22Ba6iFZgbvfLn0zKLzjlBonUGlSPf3rSIYUkawICtDyYPvK5mi3\nmANgIChMiOw6LYCPmmUVVAWU/tDy36kr9ZV9YTIZRYAkWswsJB340whjuzvZUVaG\nDgW45GPR6bGIwlFZeqCwXLput8Z3C8Sw9bE9vjlB2ZCpjPLmWV/WbDlH3J3uDjgt\n9PoALW0sOPhHfYklH4/rrmsSWMYTUuGS/HqxrEER1vpIOOb0hIiAWENDT/mruq22\nVqO8MHX9ebjInSxPmhYOlrSZrOgEcogyMB4Z0SOtKVqPnkWmdR5hatU=\n-----END CERTIFICATE-----";
+/**
+ * Huan(202108): This private key is NOT SAFE!
+ *
+ * WARNING: This CA is not safe for production.
+ * **use environment variables to set your safe CA data**
+ *
+ * Our system use this private key for server by default for convience.
+ *  However, everyone can get this key and use it to see the traffic between client and server.
+ *
+ * For security, we should not use this key in production
+ *  by setting it manually by
+ *    either the environment variable `WECHATY_PUPPET_SERVICE_TLS_SERVER_KEY`
+ *    or `options.tlsServerKey`
+ *
+ * So does the below `TLS_SERVER_CERT_UNSAFE`
+ */
+declare const TLS_INSECURE_SERVER_KEY = "-----BEGIN RSA PRIVATE KEY-----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\nqXI72DDvrh802t6KO9W6CQIfpVcxLeOy82RfUP1pHQ/sMPkx89Fd5A==\n-----END RSA PRIVATE KEY-----";
+declare const TLS_INSECURE_SERVER_CERT = "-----BEGIN CERTIFICATE-----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\nWqE+fOGDBUET\n-----END CERTIFICATE-----";
+/**
+ * Common Name:
+ *  - Server Name Indication (SNI)
+ *  - Case insensitive
+ *
+ * Wechaty Token format: `${SNI}/${UUIDv4}`
+ *
+ * Huan(202108): the CA generated by Wechaty Puppet Service
+ *  default set to this value:
+ *
+ * grpc.ssl_target_name_override: 'insecure'
+ */
+declare const TLS_INSECURE_SERVER_CERT_COMMON_NAME = "insecure";
+export { TLS_CA_CERT, TLS_INSECURE_SERVER_CERT_COMMON_NAME, TLS_INSECURE_SERVER_CERT, TLS_INSECURE_SERVER_KEY, };
+//# sourceMappingURL=ca.d.ts.map

package/dist/cjs/src/auth/ca.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ca.d.ts","sourceRoot":"","sources":["../../../../src/auth/ca.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AACH,QAAA,MAAM,WAAW,ijEAgCS,CAAA;AAE1B;;;;;;;;;;;;;;;GAeG;AACH,QAAA,MAAM,uBAAuB,6qDA0BC,CAAA;AAE9B,QAAA,MAAM,wBAAwB,ujDAyBJ,CAAA;AAE1B;;;;;;;;;;;GAWG;AACH,QAAA,MAAM,oCAAoC,aAAa,CAAA;AAEvD,OAAO,EACL,WAAW,EACX,oCAAoC,EACpC,wBAAwB,EACxB,uBAAuB,GACxB,CAAA"}

package/dist/cjs/src/auth/ca.js

@@ -0,0 +1,135 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.TLS_INSECURE_SERVER_KEY = exports.TLS_INSECURE_SERVER_CERT = exports.TLS_INSECURE_SERVER_CERT_COMMON_NAME = exports.TLS_CA_CERT = void 0;
+/**
+ * Wechaty Certificate Authority Repo:
+ *  https://github.com/wechaty/dotenv/tree/main/ca
+ *
+ * The SSL_ROOT_CERT is a root certificate generated by and for wechaty community.
+ *
+ * Because it's the default root cert for the puppet service,
+ *  so all the Polyglot Wechaty SDK should set this cert to be trusted by default.
+ *
+ * Update:
+ *  - Huan(202108): init, expired in 3650 days (after 2031/07)
+ */
+const TLS_CA_CERT = `-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----`;
+exports.TLS_CA_CERT = TLS_CA_CERT;
+/**
+ * Huan(202108): This private key is NOT SAFE!
+ *
+ * WARNING: This CA is not safe for production.
+ * **use environment variables to set your safe CA data**
+ *
+ * Our system use this private key for server by default for convience.
+ *  However, everyone can get this key and use it to see the traffic between client and server.
+ *
+ * For security, we should not use this key in production
+ *  by setting it manually by
+ *    either the environment variable `WECHATY_PUPPET_SERVICE_TLS_SERVER_KEY`
+ *    or `options.tlsServerKey`
+ *
+ * So does the below `TLS_SERVER_CERT_UNSAFE`
+ */
+const TLS_INSECURE_SERVER_KEY = `-----BEGIN RSA PRIVATE KEY-----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+-----END RSA PRIVATE KEY-----`;
+exports.TLS_INSECURE_SERVER_KEY = TLS_INSECURE_SERVER_KEY;
+const TLS_INSECURE_SERVER_CERT = `-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----`;
+exports.TLS_INSECURE_SERVER_CERT = TLS_INSECURE_SERVER_CERT;
+/**
+ * Common Name:
+ *  - Server Name Indication (SNI)
+ *  - Case insensitive
+ *
+ * Wechaty Token format: `${SNI}/${UUIDv4}`
+ *
+ * Huan(202108): the CA generated by Wechaty Puppet Service
+ *  default set to this value:
+ *
+ * grpc.ssl_target_name_override: 'insecure'
+ */
+const TLS_INSECURE_SERVER_CERT_COMMON_NAME = 'insecure'; // case insensitive
+exports.TLS_INSECURE_SERVER_CERT_COMMON_NAME = TLS_INSECURE_SERVER_CERT_COMMON_NAME;
+//# sourceMappingURL=ca.js.map

package/dist/cjs/src/auth/ca.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ca.js","sourceRoot":"","sources":["../../../../src/auth/ca.ts"],"names":[],"mappings":";;;AAAA;;;;;;;;;;;GAWG;AACH,MAAM,WAAW,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;0BAgCM,CAAA;AAwFxB,kCAAW;AAtFb;;;;;;;;;;;;;;;GAeG;AACH,MAAM,uBAAuB,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;8BA0BF,CAAA;AA+C5B,0DAAuB;AA7CzB,MAAM,wBAAwB,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;0BAyBP,CAAA;AAmBxB,4DAAwB;AAjB1B;;;;;;;;;;;GAWG;AACH,MAAM,oCAAoC,GAAG,UAAU,CAAA,CAAC,mBAAmB;AAIzE,oFAAoC"}

package/dist/cjs/src/auth/ca.spec.d.ts

@@ -0,0 +1,3 @@
+#!/usr/bin/env -S node --no-warnings --loader ts-node/esm
+export {};
+//# sourceMappingURL=ca.spec.d.ts.map

package/dist/cjs/src/auth/ca.spec.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ca.spec.d.ts","sourceRoot":"","sources":["../../../../src/auth/ca.spec.ts"],"names":[],"mappings":""}

package/dist/cjs/src/auth/ca.spec.js

@@ -0,0 +1,115 @@
+#!/usr/bin/env -S node --no-warnings --loader ts-node/esm
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || function (mod) {
+    if (mod && mod.__esModule) return mod;
+    var result = {};
+    if (mod != null) for (var k in mod) if (k !== "default" && Object.prototype.hasOwnProperty.call(mod, k)) __createBinding(result, mod, k);
+    __setModuleDefault(result, mod);
+    return result;
+};
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+const tstest_1 = require("tstest");
+const https_1 = __importDefault(require("https"));
+const envVar = __importStar(require("./env-vars.js"));
+const ca_js_1 = require("./ca.js");
+(0, tstest_1.test)('CA smoke testing', async (t) => {
+    const ca = envVar.WECHATY_PUPPET_SERVICE_TLS_CA_CERT() || ca_js_1.TLS_CA_CERT;
+    const cert = envVar.WECHATY_PUPPET_SERVICE_TLS_SERVER_CERT() || ca_js_1.TLS_INSECURE_SERVER_CERT;
+    const key = envVar.WECHATY_PUPPET_SERVICE_TLS_SERVER_KEY() || ca_js_1.TLS_INSECURE_SERVER_KEY;
+    const server = https_1.default.createServer({
+        cert,
+        key,
+    });
+    const ALIVE = 'Alive!\n';
+    server.on('request', (_req, res) => {
+        res.writeHead(200);
+        res.end(ALIVE);
+    });
+    server.listen();
+    const port = server.address().port;
+    const reply = await new Promise((resolve, reject) => {
+        https_1.default.request({
+            ca,
+            hostname: '127.0.0.1',
+            method: 'GET',
+            path: '/',
+            port,
+            servername: ca_js_1.TLS_INSECURE_SERVER_CERT_COMMON_NAME,
+        }, res => {
+            res.on('data', chunk => resolve(chunk.toString()));
+            res.on('error', reject);
+        }).end();
+    });
+    server.close();
+    t.equal(reply, ALIVE, 'should get https server reply');
+});
+(0, tstest_1.test)('CA SNI tests', async (t) => {
+    const ca = envVar.WECHATY_PUPPET_SERVICE_TLS_CA_CERT() || ca_js_1.TLS_CA_CERT;
+    const cert = envVar.WECHATY_PUPPET_SERVICE_TLS_SERVER_CERT() || ca_js_1.TLS_INSECURE_SERVER_CERT;
+    const key = envVar.WECHATY_PUPPET_SERVICE_TLS_SERVER_KEY() || ca_js_1.TLS_INSECURE_SERVER_KEY;
+    const server = https_1.default.createServer({
+        cert,
+        key,
+    });
+    server.on('request', (_req, res) => {
+        res.writeHead(200);
+        res.end(ALIVE);
+    });
+    server.listen();
+    const port = server.address().port;
+    const ALIVE = 'Alive!\n';
+    const SNI_TEST_LIST = [
+        [
+            ca_js_1.TLS_INSECURE_SERVER_CERT_COMMON_NAME,
+            true,
+        ],
+        [
+            'invalid-sni',
+            false,
+            "Hostname/IP does not match certificate's altnames: Host: invalid-sni. is not cert's CN: insecure",
+        ],
+    ];
+    for (const [SNI, EXPECT, MSG] of SNI_TEST_LIST) {
+        const result = await new Promise((resolve, reject) => {
+            https_1.default.request({
+                ca,
+                hostname: '127.0.0.1',
+                method: 'GET',
+                path: '/',
+                port,
+                servername: SNI,
+            }, res => {
+                res.on('data', chunk => resolve(chunk.toString() === ALIVE));
+                res.on('error', reject);
+            })
+                .on('error', e => {
+                // console.info(e.message)
+                t.equal(e.message, MSG, 'should get the error for invalid SNI: ' + SNI);
+                resolve(false);
+            })
+                .end();
+        });
+        t.equal(result, EXPECT, 'should check the SNI: ' + SNI);
+    }
+    server.close();
+});
+//# sourceMappingURL=ca.spec.js.map

package/dist/cjs/src/auth/ca.spec.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ca.spec.js","sourceRoot":"","sources":["../../../../src/auth/ca.spec.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAEA,mCAEuB;AAEvB,kDAAyB;AAEzB,sDAAwC;AAGxC,mCAKwD;AAExD,IAAA,aAAI,EAAC,kBAAkB,EAAE,KAAK,EAAC,CAAC,EAAC,EAAE;IAEjC,MAAM,EAAE,GAAK,MAAM,CAAC,kCAAkC,EAAE,IAAI,mBAAW,CAAA;IACvE,MAAM,IAAI,GAAG,MAAM,CAAC,sCAAsC,EAAE,IAAI,gCAAwB,CAAA;IACxF,MAAM,GAAG,GAAI,MAAM,CAAC,qCAAqC,EAAE,IAAI,+BAAuB,CAAA;IAEtF,MAAM,MAAM,GAAG,eAAK,CAAC,YAAY,CAAC;QAChC,IAAI;QACJ,GAAG;KACJ,CAAC,CAAA;IAEF,MAAM,KAAK,GAAG,UAAU,CAAA;IAExB,MAAM,CAAC,EAAE,CAAC,SAAS,EAAE,CAAC,IAAI,EAAE,GAAG,EAAE,EAAE;QACjC,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAA;QAClB,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,CAAA;IAChB,CAAC,CAAC,CAAA;IAEF,MAAM,CAAC,MAAM,EAAE,CAAA;IACf,MAAM,IAAI,GAAI,MAAM,CAAC,OAAO,EAAkB,CAAC,IAAI,CAAA;IAEnD,MAAM,KAAK,GAAG,MAAM,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QAClD,eAAK,CAAC,OAAO,CAAC;YACZ,EAAE;YACF,QAAQ,EAAE,WAAW;YACrB,MAAM,EAAE,KAAK;YACb,IAAI,EAAE,GAAG;YACT,IAAI;YACJ,UAAU,EAAE,4CAAoC;SACjD,EAAE,GAAG,CAAC,EAAE;YACP,GAAG,CAAC,EAAE,CAAC,MAAM,EAAE,KAAK,CAAC,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAA;YAClD,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,CAAA;QACzB,CAAC,CAAC,CAAC,GAAG,EAAE,CAAA;IACV,CAAC,CAAC,CAAA;IACF,MAAM,CAAC,KAAK,EAAE,CAAA;IAEd,CAAC,CAAC,KAAK,CAAC,KAAK,EAAE,KAAK,EAAE,+BAA+B,CAAC,CAAA;AACxD,CAAC,CAAC,CAAA;AAEF,IAAA,aAAI,EAAC,cAAc,EAAE,KAAK,EAAC,CAAC,EAAC,EAAE;IAE7B,MAAM,EAAE,GAAK,MAAM,CAAC,kCAAkC,EAAE,IAAS,mBAAW,CAAA;IAC5E,MAAM,IAAI,GAAG,MAAM,CAAC,sCAAsC,EAAE,IAAK,gCAAwB,CAAA;IACzF,MAAM,GAAG,GAAI,MAAM,CAAC,qCAAqC,EAAE,IAAM,+BAAuB,CAAA;IAExF,MAAM,MAAM,GAAG,eAAK,CAAC,YAAY,CAAC;QAChC,IAAI;QACJ,GAAG;KACJ,CAAC,CAAA;IAEF,MAAM,CAAC,EAAE,CAAC,SAAS,EAAE,CAAC,IAAI,EAAE,GAAG,EAAE,EAAE;QACjC,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAA;QAClB,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,CAAA;IAChB,CAAC,CAAC,CAAA;IAEF,MAAM,CAAC,MAAM,EAAE,CAAA;IACf,MAAM,IAAI,GAAI,MAAM,CAAC,OAAO,EAAkB,CAAC,IAAI,CAAA;IAEnD,MAAM,KAAK,GAAG,UAAU,CAAA;IACxB,MAAM,aAAa,GAAG;QACpB;YACE,4CAAoC;YACpC,IAAI;SACL;QACD;YACE,aAAa;YACb,KAAK;YACL,kGAAkG;SACnG;KACO,CAAA;IAEV,KAAK,MAAM,CAAC,GAAG,EAAE,MAAM,EAAE,GAAG,CAAC,IAAI,aAAa,EAAE;QAC9C,MAAM,MAAM,GAAG,MAAM,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YACnD,eAAK,CAAC,OAAO,CAAC;gBACZ,EAAE;gBACF,QAAQ,EAAE,WAAW;gBACrB,MAAM,EAAE,KAAK;gBACb,IAAI,EAAE,GAAG;gBACT,IAAI;gBACJ,UAAU,EAAE,GAAG;aAChB,EAAE,GAAG,CAAC,EAAE;gBACP,GAAG,CAAC,EAAE,CAAC,MAAM,EAAE,KAAK,CAAC,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,QAAQ,EAAE,KAAK,KAAK,CAAC,CAAC,CAAA;gBAC5D,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,CAAA;YACzB,CAAC,CAAC;iBACC,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC,EAAE;gBACf,0BAA0B;gBAC1B,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,EAAE,GAAG,EAAE,wCAAwC,GAAG,GAAG,CAAC,CAAA;gBACvE,OAAO,CAAC,KAAK,CAAC,CAAA;YAChB,CAAC,CAAC;iBACD,GAAG,EAAE,CAAA;QAEV,CAAC,CAAC,CAAA;QAEF,CAAC,CAAC,KAAK,CAAC,MAAM,EAAE,MAAM,EAAE,wBAAwB,GAAG,GAAG,CAAC,CAAA;KACxD;IAED,MAAM,CAAC,KAAK,EAAE,CAAA;AAChB,CAAC,CAAC,CAAA"}

package/dist/cjs/src/auth/call-cred.d.ts

@@ -0,0 +1,9 @@
+import { CallMetadataGenerator } from './grpc-js.js';
+/**
+ * With server authentication SSL/TLS and a custom header with token
+ *  https://grpc.io/docs/guides/auth/#with-server-authentication-ssltls-and-a-custom-header-with-token-1
+ */
+declare const metaGeneratorToken: (token: string) => CallMetadataGenerator;
+declare const callCredToken: (token: string) => import("@grpc/grpc-js").CallCredentials;
+export { callCredToken, metaGeneratorToken, };
+//# sourceMappingURL=call-cred.d.ts.map

package/dist/cjs/src/auth/call-cred.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"call-cred.d.ts","sourceRoot":"","sources":["../../../../src/auth/call-cred.ts"],"names":[],"mappings":"AAAA,OAAO,EAEL,qBAAqB,EAEtB,MAA8B,cAAc,CAAA;AAE7C;;;GAGG;AACH,QAAA,MAAM,kBAAkB,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,qBAI5C,CAAA;AAED,QAAA,MAAM,aAAa,UAAW,MAAM,4CAAuE,CAAA;AAE3G,OAAO,EACL,aAAa,EACb,kBAAkB,GACnB,CAAA"}

package/dist/cjs/src/auth/call-cred.js

@@ -0,0 +1,17 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.metaGeneratorToken = exports.callCredToken = void 0;
+const grpc_js_js_1 = require("./grpc-js.js");
+/**
+ * With server authentication SSL/TLS and a custom header with token
+ *  https://grpc.io/docs/guides/auth/#with-server-authentication-ssltls-and-a-custom-header-with-token-1
+ */
+const metaGeneratorToken = token => (_params, callback) => {
+    const meta = new grpc_js_js_1.Metadata();
+    meta.add('authorization', `Wechaty ${token}`);
+    callback(null, meta);
+};
+exports.metaGeneratorToken = metaGeneratorToken;
+const callCredToken = (token) => grpc_js_js_1.credentials.createFromMetadataGenerator(metaGeneratorToken(token));
+exports.callCredToken = callCredToken;
+//# sourceMappingURL=call-cred.js.map

package/dist/cjs/src/auth/call-cred.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"call-cred.js","sourceRoot":"","sources":["../../../../src/auth/call-cred.ts"],"names":[],"mappings":";;;AAAA,6CAI6C;AAE7C;;;GAGG;AACH,MAAM,kBAAkB,GAA6C,KAAK,CAAC,EAAE,CAAC,CAAC,OAAO,EAAE,QAAQ,EAAE,EAAE;IAClG,MAAM,IAAI,GAAG,IAAI,qBAAQ,EAAE,CAAA;IAC3B,IAAI,CAAC,GAAG,CAAC,eAAe,EAAE,WAAW,KAAK,EAAE,CAAC,CAAA;IAC7C,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC,CAAA;AACtB,CAAC,CAAA;AAMC,gDAAkB;AAJpB,MAAM,aAAa,GAAG,CAAC,KAAa,EAAE,EAAE,CAAC,wBAAW,CAAC,2BAA2B,CAAC,kBAAkB,CAAC,KAAK,CAAC,CAAC,CAAA;AAGzG,sCAAa"}

package/dist/cjs/src/auth/call-cred.spec.d.ts

@@ -0,0 +1,3 @@
+#!/usr/bin/env -S node --no-warnings --loader ts-node/esm
+export {};
+//# sourceMappingURL=call-cred.spec.d.ts.map

package/dist/cjs/src/auth/call-cred.spec.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"call-cred.spec.d.ts","sourceRoot":"","sources":["../../../../src/auth/call-cred.spec.ts"],"names":[],"mappings":""}

package/dist/cjs/src/auth/call-cred.spec.js

@@ -0,0 +1,18 @@
+#!/usr/bin/env -S node --no-warnings --loader ts-node/esm
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+const tstest_1 = require("tstest");
+const call_cred_js_1 = require("./call-cred.js");
+(0, tstest_1.test)('metaGeneratorToken()', async (t) => {
+    const TOKEN = 'UUIDv4';
+    const EXPECTED_AUTHORIZATION = `Wechaty ${TOKEN}`;
+    const sandbox = tstest_1.sinon.createSandbox();
+    const spy = sandbox.spy();
+    const metaGenerator = (0, call_cred_js_1.metaGeneratorToken)(TOKEN);
+    metaGenerator({}, spy);
+    t.equal(spy.args[0][0], null, 'should no error');
+    const metadata = spy.args[0][1];
+    const authorization = metadata.get('Authorization')[0];
+    t.equal(authorization, EXPECTED_AUTHORIZATION, 'should generate authorization in metadata');
+});
+//# sourceMappingURL=call-cred.spec.js.map

package/dist/cjs/src/auth/call-cred.spec.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"call-cred.spec.js","sourceRoot":"","sources":["../../../../src/auth/call-cred.spec.ts"],"names":[],"mappings":";;;AAEA,mCAGuB;AAEvB,iDAAmD;AAEnD,IAAA,aAAI,EAAC,sBAAsB,EAAE,KAAK,EAAC,CAAC,EAAC,EAAE;IACrC,MAAM,KAAK,GAAG,QAAQ,CAAA;IACtB,MAAM,sBAAsB,GAAG,WAAW,KAAK,EAAE,CAAA;IAEjD,MAAM,OAAO,GAAG,cAAK,CAAC,aAAa,EAAE,CAAA;IACrC,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,EAAE,CAAA;IAEzB,MAAM,aAAa,GAAG,IAAA,iCAAkB,EAAC,KAAK,CAAC,CAAA;IAE/C,aAAa,CAAC,EAAS,EAAE,GAAG,CAAC,CAAA;IAC7B,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,iBAAiB,CAAC,CAAA;IAEjD,MAAM,QAAQ,GAAG,GAAG,CAAC,IAAI,CAAC,CAAC,CAAE,CAAC,CAAC,CAAC,CAAA;IAChC,MAAM,aAAa,GAAG,QAAQ,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,CAAA;IACtD,CAAC,CAAC,KAAK,CAAC,aAAa,EAAE,sBAAsB,EAAE,2CAA2C,CAAC,CAAA;AAC7F,CAAC,CAAC,CAAA"}

package/dist/cjs/src/auth/env-vars.d.ts

@@ -0,0 +1,13 @@
+/**
+ * Environment variables containing newlines in Node?
+ *  `replace(/\\n/g, '\n')`
+ *    https://stackoverflow.com/a/36439803/1123955
+ */
+declare const WECHATY_PUPPET_SERVICE_TLS_CA_CERT: (v?: string) => string | undefined;
+declare const WECHATY_PUPPET_SERVICE_TLS_SERVER_CERT: (v?: string) => string | undefined;
+declare const WECHATY_PUPPET_SERVICE_TLS_SERVER_KEY: (v?: string) => string | undefined;
+declare const WECHATY_PUPPET_SERVICE_TLS_SERVER_NAME: (v?: string) => string | undefined;
+declare const WECHATY_PUPPET_SERVICE_NO_TLS_INSECURE_SERVER: (v?: boolean) => boolean;
+declare const WECHATY_PUPPET_SERVICE_NO_TLS_INSECURE_CLIENT: (v?: boolean) => boolean;
+export { WECHATY_PUPPET_SERVICE_NO_TLS_INSECURE_CLIENT, WECHATY_PUPPET_SERVICE_NO_TLS_INSECURE_SERVER, WECHATY_PUPPET_SERVICE_TLS_CA_CERT, WECHATY_PUPPET_SERVICE_TLS_SERVER_CERT, WECHATY_PUPPET_SERVICE_TLS_SERVER_KEY, WECHATY_PUPPET_SERVICE_TLS_SERVER_NAME, };
+//# sourceMappingURL=env-vars.d.ts.map

package/dist/cjs/src/auth/env-vars.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"env-vars.d.ts","sourceRoot":"","sources":["../../../../src/auth/env-vars.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,QAAA,MAAM,kCAAkC,OAAQ,MAAM,uBACsB,CAAA;AAE5E,QAAA,MAAM,sCAAsC,OAAQ,MAAM,uBACsB,CAAA;AAEhF,QAAA,MAAM,qCAAqC,OAAQ,MAAM,uBACsB,CAAA;AAE/E,QAAA,MAAM,sCAAsC,OAAQ,MAAM,uBACsB,CAAA;AAEhF,QAAA,MAAM,6CAA6C,OAAQ,OAAO,YAE7D,CAAA;AACL,QAAA,MAAM,6CAA6C,OAAQ,OAAO,YAE7D,CAAA;AAEL,OAAO,EACL,6CAA6C,EAC7C,6CAA6C,EAC7C,kCAAkC,EAClC,sCAAsC,EACtC,qCAAqC,EACrC,sCAAsC,GACvC,CAAA"}

package/dist/cjs/src/auth/env-vars.js

@@ -0,0 +1,29 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.WECHATY_PUPPET_SERVICE_TLS_SERVER_NAME = exports.WECHATY_PUPPET_SERVICE_TLS_SERVER_KEY = exports.WECHATY_PUPPET_SERVICE_TLS_SERVER_CERT = exports.WECHATY_PUPPET_SERVICE_TLS_CA_CERT = exports.WECHATY_PUPPET_SERVICE_NO_TLS_INSECURE_SERVER = exports.WECHATY_PUPPET_SERVICE_NO_TLS_INSECURE_CLIENT = void 0;
+/**
+ * Environment variables containing newlines in Node?
+ *  `replace(/\\n/g, '\n')`
+ *    https://stackoverflow.com/a/36439803/1123955
+ */
+const WECHATY_PUPPET_SERVICE_TLS_CA_CERT = (v) => v
+    || process.env['WECHATY_PUPPET_SERVICE_TLS_CA_CERT']?.replace(/\\n/g, '\n');
+exports.WECHATY_PUPPET_SERVICE_TLS_CA_CERT = WECHATY_PUPPET_SERVICE_TLS_CA_CERT;
+const WECHATY_PUPPET_SERVICE_TLS_SERVER_CERT = (v) => v
+    || process.env['WECHATY_PUPPET_SERVICE_TLS_SERVER_CERT']?.replace(/\\n/g, '\n');
+exports.WECHATY_PUPPET_SERVICE_TLS_SERVER_CERT = WECHATY_PUPPET_SERVICE_TLS_SERVER_CERT;
+const WECHATY_PUPPET_SERVICE_TLS_SERVER_KEY = (v) => v
+    || process.env['WECHATY_PUPPET_SERVICE_TLS_SERVER_KEY']?.replace(/\\n/g, '\n');
+exports.WECHATY_PUPPET_SERVICE_TLS_SERVER_KEY = WECHATY_PUPPET_SERVICE_TLS_SERVER_KEY;
+const WECHATY_PUPPET_SERVICE_TLS_SERVER_NAME = (v) => v
+    || process.env['WECHATY_PUPPET_SERVICE_TLS_SERVER_NAME']?.replace(/\\n/g, '\n');
+exports.WECHATY_PUPPET_SERVICE_TLS_SERVER_NAME = WECHATY_PUPPET_SERVICE_TLS_SERVER_NAME;
+const WECHATY_PUPPET_SERVICE_NO_TLS_INSECURE_SERVER = (v) => typeof v === 'undefined'
+    ? process.env['WECHATY_PUPPET_SERVICE_NO_TLS_INSECURE_SERVER'] === 'true'
+    : v;
+exports.WECHATY_PUPPET_SERVICE_NO_TLS_INSECURE_SERVER = WECHATY_PUPPET_SERVICE_NO_TLS_INSECURE_SERVER;
+const WECHATY_PUPPET_SERVICE_NO_TLS_INSECURE_CLIENT = (v) => typeof v === 'undefined'
+    ? process.env['WECHATY_PUPPET_SERVICE_NO_TLS_INSECURE_CLIENT'] === 'true'
+    : v;
+exports.WECHATY_PUPPET_SERVICE_NO_TLS_INSECURE_CLIENT = WECHATY_PUPPET_SERVICE_NO_TLS_INSECURE_CLIENT;
+//# sourceMappingURL=env-vars.js.map

package/dist/cjs/src/auth/env-vars.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"env-vars.js","sourceRoot":"","sources":["../../../../src/auth/env-vars.ts"],"names":[],"mappings":";;;AAAA;;;;GAIG;AACH,MAAM,kCAAkC,GAAG,CAAC,CAAU,EAAE,EAAE,CAAC,CAAC;OACxD,OAAO,CAAC,GAAG,CAAC,oCAAoC,CAAC,EAAE,OAAO,CAAC,MAAM,EAAE,IAAI,CAAC,CAAA;AAqB1E,gFAAkC;AAnBpC,MAAM,sCAAsC,GAAG,CAAC,CAAU,EAAE,EAAE,CAAC,CAAC;OAC5D,OAAO,CAAC,GAAG,CAAC,wCAAwC,CAAC,EAAE,OAAO,CAAC,MAAM,EAAE,IAAI,CAAC,CAAA;AAmB9E,wFAAsC;AAjBxC,MAAM,qCAAqC,GAAG,CAAC,CAAU,EAAE,EAAE,CAAC,CAAC;OAC3D,OAAO,CAAC,GAAG,CAAC,uCAAuC,CAAC,EAAE,OAAO,CAAC,MAAM,EAAE,IAAI,CAAC,CAAA;AAiB7E,sFAAqC;AAfvC,MAAM,sCAAsC,GAAG,CAAC,CAAU,EAAE,EAAE,CAAC,CAAC;OAC5D,OAAO,CAAC,GAAG,CAAC,wCAAwC,CAAC,EAAE,OAAO,CAAC,MAAM,EAAE,IAAI,CAAC,CAAA;AAe9E,wFAAsC;AAbxC,MAAM,6CAA6C,GAAG,CAAC,CAAW,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,WAAW;IAC7F,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,+CAA+C,CAAC,KAAK,MAAM;IACzE,CAAC,CAAC,CAAC,CAAA;AAOH,sGAA6C;AAN/C,MAAM,6CAA6C,GAAG,CAAC,CAAW,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,WAAW;IAC7F,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,+CAA+C,CAAC,KAAK,MAAM;IACzE,CAAC,CAAC,CAAC,CAAA;AAGH,sGAA6C"}

package/dist/cjs/src/auth/grpc-js.d.ts

@@ -0,0 +1,7 @@
+import { credentials, StatusBuilder, UntypedHandleCall, Metadata, UntypedServiceImplementation } from '@grpc/grpc-js';
+import type { sendUnaryData, ServerUnaryCall } from '@grpc/grpc-js/build/src/server-call.js';
+import type { CallMetadataGenerator } from '@grpc/grpc-js/build/src/call-credentials.js';
+import { Status as GrpcStatus } from '@grpc/grpc-js/build/src/constants.js';
+export type { UntypedServiceImplementation, UntypedHandleCall, sendUnaryData, ServerUnaryCall, CallMetadataGenerator, };
+export { credentials, GrpcStatus, Metadata, StatusBuilder, };
+//# sourceMappingURL=grpc-js.d.ts.map

package/dist/cjs/src/auth/grpc-js.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"grpc-js.d.ts","sourceRoot":"","sources":["../../../../src/auth/grpc-js.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,WAAW,EACX,aAAa,EACb,iBAAiB,EACjB,QAAQ,EACR,4BAA4B,EAC7B,MAAsC,eAAe,CAAA;AACtD,OAAO,KAAK,EACV,aAAa,EACb,eAAe,EAChB,MAAsC,wCAAwC,CAAA;AAC/E,OAAO,KAAK,EACV,qBAAqB,EACtB,MAAsC,6CAA6C,CAAA;AACpF,OAAO,EAAE,MAAM,IAAI,UAAU,EAAE,MAAU,sCAAsC,CAAA;AAE/E,YAAY,EACV,4BAA4B,EAC5B,iBAAiB,EACjB,aAAa,EACb,eAAe,EACf,qBAAqB,GACtB,CAAA;AACD,OAAO,EACL,WAAW,EACX,UAAU,EACV,QAAQ,EACR,aAAa,GACd,CAAA"}

package/dist/cjs/src/auth/grpc-js.js

@@ -0,0 +1,10 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.StatusBuilder = exports.Metadata = exports.GrpcStatus = exports.credentials = void 0;
+const grpc_js_1 = require("@grpc/grpc-js");
+Object.defineProperty(exports, "credentials", { enumerable: true, get: function () { return grpc_js_1.credentials; } });
+Object.defineProperty(exports, "StatusBuilder", { enumerable: true, get: function () { return grpc_js_1.StatusBuilder; } });
+Object.defineProperty(exports, "Metadata", { enumerable: true, get: function () { return grpc_js_1.Metadata; } });
+const constants_js_1 = require("@grpc/grpc-js/build/src/constants.js");
+Object.defineProperty(exports, "GrpcStatus", { enumerable: true, get: function () { return constants_js_1.Status; } });
+//# sourceMappingURL=grpc-js.js.map

package/dist/cjs/src/auth/grpc-js.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"grpc-js.js","sourceRoot":"","sources":["../../../../src/auth/grpc-js.ts"],"names":[],"mappings":";;;AAAA,2CAMsD;AAkBpD,4FAvBA,qBAAW,OAuBA;AAGX,8FAzBA,uBAAa,OAyBA;AADb,yFAtBA,kBAAQ,OAsBA;AAZV,uEAA+E;AAW7E,2FAXiB,qBAAU,OAWjB"}

package/dist/cjs/src/auth/mod.d.ts

@@ -0,0 +1,5 @@
+import { authImplToken } from './auth-impl-token.js';
+import { monkeyPatchMetadataFromHttp2Headers } from './mokey-patch-header-authorization.js';
+import { callCredToken } from './call-cred.js';
+export { authImplToken, callCredToken, monkeyPatchMetadataFromHttp2Headers, };
+//# sourceMappingURL=mod.d.ts.map

package/dist/cjs/src/auth/mod.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"mod.d.ts","sourceRoot":"","sources":["../../../../src/auth/mod.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAA2C,sBAAsB,CAAA;AACzF,OAAO,EAAE,mCAAmC,EAAE,MAAqB,uCAAuC,CAAA;AAC1G,OAAO,EAAE,aAAa,EAAE,MAA2C,gBAAgB,CAAA;AAEnF,OAAO,EACL,aAAa,EACb,aAAa,EACb,mCAAmC,GACpC,CAAA"}

package/dist/cjs/src/auth/mod.js

@@ -0,0 +1,10 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.monkeyPatchMetadataFromHttp2Headers = exports.callCredToken = exports.authImplToken = void 0;
+const auth_impl_token_js_1 = require("./auth-impl-token.js");
+Object.defineProperty(exports, "authImplToken", { enumerable: true, get: function () { return auth_impl_token_js_1.authImplToken; } });
+const mokey_patch_header_authorization_js_1 = require("./mokey-patch-header-authorization.js");
+Object.defineProperty(exports, "monkeyPatchMetadataFromHttp2Headers", { enumerable: true, get: function () { return mokey_patch_header_authorization_js_1.monkeyPatchMetadataFromHttp2Headers; } });
+const call_cred_js_1 = require("./call-cred.js");
+Object.defineProperty(exports, "callCredToken", { enumerable: true, get: function () { return call_cred_js_1.callCredToken; } });
+//# sourceMappingURL=mod.js.map

package/dist/cjs/src/auth/mod.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mod.js","sourceRoot":"","sources":["../../../../src/auth/mod.ts"],"names":[],"mappings":";;;AAAA,6DAAyF;AAKvF,8FALO,kCAAa,OAKP;AAJf,+FAA0G;AAMxG,oHANO,yEAAmC,OAMP;AALrC,iDAAmF;AAIjF,8FAJO,4BAAa,OAIP"}

package/dist/cjs/src/auth/mokey-patch-header-authorization.d.ts

@@ -0,0 +1,11 @@
+import type { Metadata } from './grpc-js.js';
+/**
+ * Huan(202108): This is for compatible with old clients (version v0.26 or before)
+ *  for non-tls authorization:
+ *    use the HTTP2 header `:authority` as the token.
+ *
+ * This feature is planed to be removed after Dec 31, 2022
+ */
+declare function monkeyPatchMetadataFromHttp2Headers(MetadataClass: typeof Metadata): () => void;
+export { monkeyPatchMetadataFromHttp2Headers, };
+//# sourceMappingURL=mokey-patch-header-authorization.d.ts.map

package/dist/cjs/src/auth/mokey-patch-header-authorization.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"mokey-patch-header-authorization.d.ts","sourceRoot":"","sources":["../../../../src/auth/mokey-patch-header-authorization.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EACV,QAAQ,EACT,MAAkB,cAAc,CAAA;AAEjC;;;;;;GAMG;AACH,iBAAS,mCAAmC,CAC1C,aAAa,EAAE,OAAO,QAAQ,GAC7B,MAAM,IAAI,CAuBZ;AAED,OAAO,EACL,mCAAmC,GACpC,CAAA"}

package/dist/cjs/src/auth/mokey-patch-header-authorization.js

@@ -0,0 +1,32 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.monkeyPatchMetadataFromHttp2Headers = void 0;
+const wechaty_puppet_1 = require("@juzi/wechaty-puppet");
+/**
+ * Huan(202108): This is for compatible with old clients (version v0.26 or before)
+ *  for non-tls authorization:
+ *    use the HTTP2 header `:authority` as the token.
+ *
+ * This feature is planed to be removed after Dec 31, 2022
+ */
+function monkeyPatchMetadataFromHttp2Headers(MetadataClass) {
+    wechaty_puppet_1.log.verbose('wechaty-puppet-service', 'monkeyPatchMetadataFromHttp2Headers()');
+    const fromHttp2Headers = MetadataClass.fromHttp2Headers;
+    MetadataClass.fromHttp2Headers = function (headers) {
+        const metadata = fromHttp2Headers.call(MetadataClass, headers);
+        if (metadata.get('authorization').length <= 0) {
+            const authority = headers[':authority'];
+            const authorization = `Wechaty ${authority}`;
+            metadata.set('authorization', authorization);
+        }
+        return metadata;
+    };
+    /**
+     * un-monkey-patch
+     */
+    return () => {
+        MetadataClass.fromHttp2Headers = fromHttp2Headers;
+    };
+}
+exports.monkeyPatchMetadataFromHttp2Headers = monkeyPatchMetadataFromHttp2Headers;
+//# sourceMappingURL=mokey-patch-header-authorization.js.map