@kensio/yulin 1.0.0 → 1.2.0

package/dist/serve/payload-2/sim-payload-2-event.type.d.ts

@@ -1,3 +1,4 @@
+import type { JSONValue } from "../../util/type-guard/json.js";
 /**
  * A Lambda proxy invocation event in API Gateway HTTP API payload format 2.0.
  *
@@ -48,12 +49,24 @@ export interface SimPayload2RequestContext {
  * An endpoint that admits anyone has no caller to describe, so real AWS leaves
  * this out entirely rather than filling it with blanks. Which member is
  * present says which kind of authorizer admitted the request: `iam` for a
- * SigV4-signed request, `jwt` for a JWT authorizer.
+ * SigV4-signed request, `jwt` for a JWT authorizer, `lambda` for a Lambda
+ * `REQUEST` authorizer.
  */
 export interface SimPayload2AuthorizerContext {
     iam?: SimPayload2IamAuthorizer;
     jwt?: SimPayload2JwtAuthorizer;
+    lambda?: SimPayload2LambdaAuthorizer | null;
 }
+/**
+ * The context a Lambda `REQUEST` authorizer passed on to the integration.
+ *
+ * The values arrive as the authorizer returned them rather than stringified,
+ * which is what payload format 2.0 does with them: a REST API's `$context`
+ * variables are strings, and this is not one of those. An authorizer that
+ * allowed the request and returned no context at all leaves `null` here, so
+ * the authorizer block is still there to say which kind of authorizer ran.
+ */
+export type SimPayload2LambdaAuthorizer = Readonly<Record<string, JSONValue>>;
 /**
  * The IAM caller of a SigV4-authorized invocation.
  *

package/dist/serve/payload-2/sim-payload-2-event.type.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sim-payload-2-event.type.d.ts","sourceRoot":"","sources":["../../../src/serve/payload-2/sim-payload-2-event.type.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AACH,MAAM,WAAW,gBAAgB;IAC/B,OAAO,EAAE,KAAK,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,EAAE,MAAM,CAAC;IAChB,cAAc,EAAE,MAAM,CAAC;IACvB,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC;IACnB,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAChC,qBAAqB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC/C,cAAc,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACxC,cAAc,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACxC,cAAc,EAAE,yBAAyB,CAAC;IAC1C,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,eAAe,EAAE,OAAO,CAAC;CAC1B;AAED;;GAEG;AACH,MAAM,WAAW,yBAAyB;IACxC,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,MAAM,CAAC;IACd,UAAU,CAAC,EAAE,4BAA4B,CAAC;IAC1C,UAAU,EAAE,MAAM,CAAC;IACnB,YAAY,EAAE,MAAM,CAAC;IACrB,IAAI,EAAE,sBAAsB,CAAC;IAC7B,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,EAAE,MAAM,CAAC;CACnB;AAED;;;;;;;;GAQG;AACH,MAAM,WAAW,4BAA4B;IAC3C,GAAG,CAAC,EAAE,wBAAwB,CAAC;IAC/B,GAAG,CAAC,EAAE,wBAAwB,CAAC;CAChC;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,WAAW,wBAAwB;IACvC,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC;IACjB,eAAe,EAAE,IAAI,CAAC;IACtB,cAAc,EAAE,IAAI,CAAC;IACrB,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,MAAM,CAAC;CAChB;AAED;;;;;GAKG;AACH,MAAM,WAAW,wBAAwB;IACvC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC/B,MAAM,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC;CACzB;AAED;;GAEG;AACH,MAAM,WAAW,sBAAsB;IACrC,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED;;;;;GAKG;AACH,MAAM,WAAW,iBAAkB,SAAQ,qBAAqB;IAC9D,UAAU,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CACjC;AAED;;;GAGG;AACH,MAAM,WAAW,2BAA4B,SAAQ,qBAAqB;IACxE,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,UAAU,qBAAqB;IAC7B,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO,CAAC,GAAG,SAAS,CAAC;IAChE,OAAO,CAAC,EAAE,MAAM,EAAE,GAAG,SAAS,CAAC;IAC/B,IAAI,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC1B,eAAe,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;CACvC"}
+{"version":3,"file":"sim-payload-2-event.type.d.ts","sourceRoot":"","sources":["../../../src/serve/payload-2/sim-payload-2-event.type.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,+BAA+B,CAAC;AAE/D;;;;;;;;;;;;GAYG;AACH,MAAM,WAAW,gBAAgB;IAC/B,OAAO,EAAE,KAAK,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,EAAE,MAAM,CAAC;IAChB,cAAc,EAAE,MAAM,CAAC;IACvB,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC;IACnB,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAChC,qBAAqB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC/C,cAAc,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACxC,cAAc,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACxC,cAAc,EAAE,yBAAyB,CAAC;IAC1C,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,eAAe,EAAE,OAAO,CAAC;CAC1B;AAED;;GAEG;AACH,MAAM,WAAW,yBAAyB;IACxC,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,MAAM,CAAC;IACd,UAAU,CAAC,EAAE,4BAA4B,CAAC;IAC1C,UAAU,EAAE,MAAM,CAAC;IACnB,YAAY,EAAE,MAAM,CAAC;IACrB,IAAI,EAAE,sBAAsB,CAAC;IAC7B,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,EAAE,MAAM,CAAC;CACnB;AAED;;;;;;;;;GASG;AACH,MAAM,WAAW,4BAA4B;IAC3C,GAAG,CAAC,EAAE,wBAAwB,CAAC;IAC/B,GAAG,CAAC,EAAE,wBAAwB,CAAC;IAC/B,MAAM,CAAC,EAAE,2BAA2B,GAAG,IAAI,CAAC;CAC7C;AAED;;;;;;;;GAQG;AACH,MAAM,MAAM,2BAA2B,GAAG,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC,CAAC;AAE9E;;;;;;;;;;;;;GAaG;AACH,MAAM,WAAW,wBAAwB;IACvC,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC;IACjB,eAAe,EAAE,IAAI,CAAC;IACtB,cAAc,EAAE,IAAI,CAAC;IACrB,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,MAAM,CAAC;CAChB;AAED;;;;;GAKG;AACH,MAAM,WAAW,wBAAwB;IACvC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC/B,MAAM,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC;CACzB;AAED;;GAEG;AACH,MAAM,WAAW,sBAAsB;IACrC,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED;;;;;GAKG;AACH,MAAM,WAAW,iBAAkB,SAAQ,qBAAqB;IAC9D,UAAU,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CACjC;AAED;;;GAGG;AACH,MAAM,WAAW,2BAA4B,SAAQ,qBAAqB;IACxE,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,UAAU,qBAAqB;IAC7B,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO,CAAC,GAAG,SAAS,CAAC;IAChE,OAAO,CAAC,EAAE,MAAM,EAAE,GAAG,SAAS,CAAC;IAC/B,IAAI,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC1B,eAAe,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;CACvC"}

package/dist/serve/payload-2/sim-payload-2-request-context.d.ts

@@ -1,6 +1,6 @@
 import type { SimAwsRequestCaller } from "../../service/iam/request/sim-aws-request-caller.js";
 import type { SimPayload2Endpoint } from "./sim-payload-2-endpoint.js";
-import type { SimPayload2JwtAuthorizer, SimPayload2RequestContext } from "./sim-payload-2-event.type.js";
+import type { SimPayload2JwtAuthorizer, SimPayload2LambdaAuthorizer, SimPayload2RequestContext } from "./sim-payload-2-event.type.js";
 /**
  * What the endpoint's authorizer knows about the caller, if it authorized one.
  *
@@ -13,6 +13,11 @@ export interface SimPayload2Authorization {
     readonly caller?: SimAwsRequestCaller | undefined;
     /** The token a JWT authorizer accepted. */
     readonly jwt?: SimPayload2JwtAuthorizer | undefined;
+    /**
+     * The context a Lambda `REQUEST` authorizer returned, which is `null` when
+     * it allowed the request and returned none.
+     */
+    readonly lambda?: SimPayload2LambdaAuthorizer | null | undefined;
 }
 interface SimPayload2RequestContextInput {
     readonly request: Request;

package/dist/serve/payload-2/sim-payload-2-request-context.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sim-payload-2-request-context.d.ts","sourceRoot":"","sources":["../../../src/serve/payload-2/sim-payload-2-request-context.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,qDAAqD,CAAC;AAE/F,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,6BAA6B,CAAC;AACvE,OAAO,KAAK,EACV,wBAAwB,EACxB,yBAAyB,EAC1B,MAAM,+BAA+B,CAAC;AAOvC;;;;;;GAMG;AACH,MAAM,WAAW,wBAAwB;IACvC,uEAAuE;IACvE,QAAQ,CAAC,MAAM,CAAC,EAAE,mBAAmB,GAAG,SAAS,CAAC;IAClD,2CAA2C;IAC3C,QAAQ,CAAC,GAAG,CAAC,EAAE,wBAAwB,GAAG,SAAS,CAAC;CACrD;AAED,UAAU,8BAA8B;IACtC,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;IAC1B,QAAQ,CAAC,GAAG,EAAE,GAAG,CAAC;IAClB,QAAQ,CAAC,QAAQ,EAAE,mBAAmB,CAAC;IACvC,yDAAyD;IACzD,QAAQ,CAAC,EAAE,EAAE,IAAI,CAAC;IAClB,QAAQ,CAAC,aAAa,CAAC,EAAE,wBAAwB,GAAG,SAAS,CAAC;CAC/D;AAED;;;;;;;GAOG;AACH,qBAAa,gCAAgC;IAC3C;;OAEG;IACH,KAAK,CAAC,KAAK,EAAE,8BAA8B,GAAG,yBAAyB,CAoCtE;IAED,OAAO,CAAC,SAAS;CAKlB"}
+{"version":3,"file":"sim-payload-2-request-context.d.ts","sourceRoot":"","sources":["../../../src/serve/payload-2/sim-payload-2-request-context.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,qDAAqD,CAAC;AAE/F,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,6BAA6B,CAAC;AACvE,OAAO,KAAK,EACV,wBAAwB,EACxB,2BAA2B,EAC3B,yBAAyB,EAC1B,MAAM,+BAA+B,CAAC;AAOvC;;;;;;GAMG;AACH,MAAM,WAAW,wBAAwB;IACvC,uEAAuE;IACvE,QAAQ,CAAC,MAAM,CAAC,EAAE,mBAAmB,GAAG,SAAS,CAAC;IAClD,2CAA2C;IAC3C,QAAQ,CAAC,GAAG,CAAC,EAAE,wBAAwB,GAAG,SAAS,CAAC;IACpD;;;OAGG;IACH,QAAQ,CAAC,MAAM,CAAC,EAAE,2BAA2B,GAAG,IAAI,GAAG,SAAS,CAAC;CAClE;AAED,UAAU,8BAA8B;IACtC,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;IAC1B,QAAQ,CAAC,GAAG,EAAE,GAAG,CAAC;IAClB,QAAQ,CAAC,QAAQ,EAAE,mBAAmB,CAAC;IACvC,yDAAyD;IACzD,QAAQ,CAAC,EAAE,EAAE,IAAI,CAAC;IAClB,QAAQ,CAAC,aAAa,CAAC,EAAE,wBAAwB,GAAG,SAAS,CAAC;CAC/D;AAED;;;;;;;GAOG;AACH,qBAAa,gCAAgC;IAC3C;;OAEG;IACH,KAAK,CAAC,KAAK,EAAE,8BAA8B,GAAG,yBAAyB,CAyCtE;IAED,OAAO,CAAC,SAAS;CAKlB"}

package/dist/serve/payload-2/sim-payload-2-request-context.js

@@ -41,6 +41,10 @@ export class SimPayload2RequestContextBuilder {
         if (jwt !== undefined) {
             requestContext.authorizer = { jwt };
         }
+        const lambda = input.authorization?.lambda;
+        if (lambda !== undefined) {
+            requestContext.authorizer = { lambda };
+        }
         const authorizer = iamCaller?.authorizerContext();
         if (authorizer !== undefined) {
             requestContext.authorizer = authorizer;

package/dist/serve/payload-2/sim-payload-2-request-context.js.map

@@ -1 +1 @@
-{"version":3,"file":"sim-payload-2-request-context.js","sourceRoot":"","sources":["../../../src/serve/payload-2/sim-payload-2-request-context.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAGzC,OAAO,EAAE,mBAAmB,EAAE,MAAM,+BAA+B,CAAC;AAMpE,OAAO,EAAE,oBAAoB,EAAE,MAAM,+BAA+B,CAAC;AACrE,OAAO,EACL,6BAA6B,EAC7B,oBAAoB,GACrB,MAAM,+BAA+B,CAAC;AAyBvC;;;;;;;GAOG;AACH,MAAM,OAAO,gCAAgC;IAC3C;;OAEG;IACH,KAAK,CAAC,KAAqC;QACzC,MAAM,EAAE,OAAO,EAAE,GAAG,EAAE,QAAQ,EAAE,EAAE,EAAE,GAAG,KAAK,CAAC;QAC7C,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,aAAa,EAAE,MAAM,CAAC,CAAC;QAE9D,MAAM,cAAc,GAA8B;YAChD,wEAAwE;YACxE,uBAAuB;YACvB,SAAS,EAAE,SAAS,EAAE,SAAS,EAAE,IAAI,6BAA6B;YAClE,KAAK,EAAE,QAAQ,CAAC,KAAK;YACrB,UAAU,EAAE,QAAQ,CAAC,UAAU;YAC/B,YAAY,EAAE,QAAQ,CAAC,YAAY;YACnC,IAAI,EAAE;gBACJ,MAAM,EAAE,OAAO,CAAC,MAAM;gBACtB,IAAI,EAAE,GAAG,CAAC,QAAQ;gBAClB,QAAQ,EAAE,UAAU;gBACpB,QAAQ,EAAE,mBAAmB;gBAC7B,SAAS,EAAE,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC,IAAI,EAAE;aACnD;YACD,SAAS,EAAE,UAAU,EAAE;YACvB,QAAQ,EAAE,QAAQ,CAAC,QAAQ;YAC3B,KAAK,EAAE,QAAQ,CAAC,KAAK;YACrB,IAAI,EAAE,oBAAoB,CAAC,EAAE,CAAC;YAC9B,SAAS,EAAE,EAAE,CAAC,OAAO,EAAE;SACxB,CAAC;QAEF,MAAM,GAAG,GAAG,KAAK,CAAC,aAAa,EAAE,GAAG,CAAC;QACrC,IAAI,GAAG,KAAK,SAAS,EAAE,CAAC;YACtB,cAAc,CAAC,UAAU,GAAG,EAAE,GAAG,EAAE,CAAC;QACtC,CAAC;QAED,MAAM,UAAU,GAAG,SAAS,EAAE,iBAAiB,EAAE,CAAC;QAClD,IAAI,UAAU,KAAK,SAAS,EAAE,CAAC;YAC7B,cAAc,CAAC,UAAU,GAAG,UAAU,CAAC;QACzC,CAAC;QAED,OAAO,cAAc,CAAC;IACxB,CAAC;IAEO,SAAS,CACf,MAAuC;QAEvC,OAAO,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,oBAAoB,CAAC,MAAM,CAAC,CAAC;IAC7E,CAAC;CACF"}
+{"version":3,"file":"sim-payload-2-request-context.js","sourceRoot":"","sources":["../../../src/serve/payload-2/sim-payload-2-request-context.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAGzC,OAAO,EAAE,mBAAmB,EAAE,MAAM,+BAA+B,CAAC;AAOpE,OAAO,EAAE,oBAAoB,EAAE,MAAM,+BAA+B,CAAC;AACrE,OAAO,EACL,6BAA6B,EAC7B,oBAAoB,GACrB,MAAM,+BAA+B,CAAC;AA8BvC;;;;;;;GAOG;AACH,MAAM,OAAO,gCAAgC;IAC3C;;OAEG;IACH,KAAK,CAAC,KAAqC;QACzC,MAAM,EAAE,OAAO,EAAE,GAAG,EAAE,QAAQ,EAAE,EAAE,EAAE,GAAG,KAAK,CAAC;QAC7C,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,aAAa,EAAE,MAAM,CAAC,CAAC;QAE9D,MAAM,cAAc,GAA8B;YAChD,wEAAwE;YACxE,uBAAuB;YACvB,SAAS,EAAE,SAAS,EAAE,SAAS,EAAE,IAAI,6BAA6B;YAClE,KAAK,EAAE,QAAQ,CAAC,KAAK;YACrB,UAAU,EAAE,QAAQ,CAAC,UAAU;YAC/B,YAAY,EAAE,QAAQ,CAAC,YAAY;YACnC,IAAI,EAAE;gBACJ,MAAM,EAAE,OAAO,CAAC,MAAM;gBACtB,IAAI,EAAE,GAAG,CAAC,QAAQ;gBAClB,QAAQ,EAAE,UAAU;gBACpB,QAAQ,EAAE,mBAAmB;gBAC7B,SAAS,EAAE,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC,IAAI,EAAE;aACnD;YACD,SAAS,EAAE,UAAU,EAAE;YACvB,QAAQ,EAAE,QAAQ,CAAC,QAAQ;YAC3B,KAAK,EAAE,QAAQ,CAAC,KAAK;YACrB,IAAI,EAAE,oBAAoB,CAAC,EAAE,CAAC;YAC9B,SAAS,EAAE,EAAE,CAAC,OAAO,EAAE;SACxB,CAAC;QAEF,MAAM,GAAG,GAAG,KAAK,CAAC,aAAa,EAAE,GAAG,CAAC;QACrC,IAAI,GAAG,KAAK,SAAS,EAAE,CAAC;YACtB,cAAc,CAAC,UAAU,GAAG,EAAE,GAAG,EAAE,CAAC;QACtC,CAAC;QAED,MAAM,MAAM,GAAG,KAAK,CAAC,aAAa,EAAE,MAAM,CAAC;QAC3C,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;YACzB,cAAc,CAAC,UAAU,GAAG,EAAE,MAAM,EAAE,CAAC;QACzC,CAAC;QAED,MAAM,UAAU,GAAG,SAAS,EAAE,iBAAiB,EAAE,CAAC;QAClD,IAAI,UAAU,KAAK,SAAS,EAAE,CAAC;YAC7B,cAAc,CAAC,UAAU,GAAG,UAAU,CAAC;QACzC,CAAC;QAED,OAAO,cAAc,CAAC;IACxB,CAAC;IAEO,SAAS,CACf,MAAuC;QAEvC,OAAO,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,oBAAoB,CAAC,MAAM,CAAC,CAAC;IAC7E,CAAC;CACF"}

package/dist/service/apigatewayv2/api/authorizer/identity/sim-http-api-header-identity-source.d.ts

@@ -0,0 +1,22 @@
+import { type SimHttpApiIdentityInput, type SimHttpApiIdentitySource } from "./sim-http-api-identity-source.js";
+/**
+ * The prefix a header identity source is written with.
+ */
+export declare const simHttpApiHeaderIdentityPrefix = "$request.header.";
+/**
+ * An identity source naming one request header, such as
+ * `$request.header.Authorization`.
+ *
+ * Header names are matched case-insensitively, which is what `Headers` does
+ * and what HTTP requires.
+ */
+export declare class SimHttpApiHeaderIdentitySource implements SimHttpApiIdentitySource {
+    readonly expression: string;
+    private readonly headerName;
+    constructor(headerName: string);
+    /**
+     * The header this request carries, if it carries one.
+     */
+    value(input: SimHttpApiIdentityInput): string | undefined;
+}
+//# sourceMappingURL=sim-http-api-header-identity-source.d.ts.map

package/dist/service/apigatewayv2/api/authorizer/identity/sim-http-api-header-identity-source.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-http-api-header-identity-source.d.ts","sourceRoot":"","sources":["../../../../../../src/service/apigatewayv2/api/authorizer/identity/sim-http-api-header-identity-source.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,KAAK,uBAAuB,EAC5B,KAAK,wBAAwB,EAE9B,MAAM,mCAAmC,CAAC;AAE3C;;GAEG;AACH,eAAO,MAAM,8BAA8B,qBAAqB,CAAC;AAEjE;;;;;;GAMG;AACH,qBAAa,8BAA+B,YAAW,wBAAwB;IAC7E,SAAgB,UAAU,EAAE,MAAM,CAAC;IAEnC,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAS;IAEpC,YAAY,UAAU,EAAE,MAAM,EAG7B;IAED;;OAEG;IACH,KAAK,CAAC,KAAK,EAAE,uBAAuB,GAAG,MAAM,GAAG,SAAS,CAExD;CACF"}

package/dist/service/apigatewayv2/api/authorizer/identity/sim-http-api-header-identity-source.js

@@ -0,0 +1,27 @@
+import { simHttpApiIdentityValue, } from "./sim-http-api-identity-source.js";
+/**
+ * The prefix a header identity source is written with.
+ */
+export const simHttpApiHeaderIdentityPrefix = "$request.header.";
+/**
+ * An identity source naming one request header, such as
+ * `$request.header.Authorization`.
+ *
+ * Header names are matched case-insensitively, which is what `Headers` does
+ * and what HTTP requires.
+ */
+export class SimHttpApiHeaderIdentitySource {
+    expression;
+    headerName;
+    constructor(headerName) {
+        this.expression = `${simHttpApiHeaderIdentityPrefix}${headerName}`;
+        this.headerName = headerName;
+    }
+    /**
+     * The header this request carries, if it carries one.
+     */
+    value(input) {
+        return simHttpApiIdentityValue(input.request.headers.get(this.headerName));
+    }
+}
+//# sourceMappingURL=sim-http-api-header-identity-source.js.map

package/dist/service/apigatewayv2/api/authorizer/identity/sim-http-api-header-identity-source.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-http-api-header-identity-source.js","sourceRoot":"","sources":["../../../../../../src/service/apigatewayv2/api/authorizer/identity/sim-http-api-header-identity-source.ts"],"names":[],"mappings":"AAAA,OAAO,EAGL,uBAAuB,GACxB,MAAM,mCAAmC,CAAC;AAE3C;;GAEG;AACH,MAAM,CAAC,MAAM,8BAA8B,GAAG,kBAAkB,CAAC;AAEjE;;;;;;GAMG;AACH,MAAM,OAAO,8BAA8B;IACzB,UAAU,CAAS;IAElB,UAAU,CAAS;IAEpC,YAAY,UAAkB;QAC5B,IAAI,CAAC,UAAU,GAAG,GAAG,8BAA8B,GAAG,UAAU,EAAE,CAAC;QACnE,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC;IAC/B,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,KAA8B;QAClC,OAAO,uBAAuB,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC;IAC7E,CAAC;CACF"}

package/dist/service/apigatewayv2/api/authorizer/identity/sim-http-api-identity-source-parser.d.ts

@@ -0,0 +1,47 @@
+import type { SimHttpApiIdentitySource } from "./sim-http-api-identity-source.js";
+/**
+ * Reads the identity source expressions an authorizer is configured with.
+ *
+ * An expression naming somewhere this simulation does not read from is refused
+ * rather than accepted and looked for nowhere, since an authorizer that never
+ * finds what it looks for refuses every request, which looks like a signing
+ * problem rather than a configuration one. That leaves out the rest of
+ * `$context` and all of `$stageVariables`, which a Lambda `REQUEST` authorizer
+ * may also name on AWS.
+ *
+ * A JWT authorizer reads something the client sent and nothing else, so it
+ * parses with `requestSource` and `$context.routeKey` is refused for it.
+ */
+export declare class SimHttpApiIdentitySourceParser {
+    /**
+     * Read an identity source of any kind a Lambda `REQUEST` authorizer takes.
+     */
+    parse(expression: string): SimHttpApiIdentitySource;
+    /**
+     * Read an identity source naming something the client sent, which is all a
+     * JWT authorizer takes.
+     */
+    requestSource(expression: string, alsoSimulated?: readonly string[]): SimHttpApiIdentitySource;
+    /**
+     * The header an expression names, refusing one no request could carry.
+     *
+     * A header name is an HTTP field name, and anything else is refused here
+     * rather than at request time: reading a header by an invalid name throws,
+     * and it would throw on every request to the route rather than on the
+     * command that configured it.
+     */
+    private headerName;
+    /**
+     * The name an expression carries after its prefix, refusing an empty one.
+     *
+     * An expression naming nothing finds nothing on every request, so the
+     * authorizer refuses everyone for a reason that reads like a signing problem
+     * rather than the configuration one it is.
+     */
+    private named;
+    /**
+     * How a refusal names the expressions it would have accepted instead.
+     */
+    private simulatedForms;
+}
+//# sourceMappingURL=sim-http-api-identity-source-parser.d.ts.map

package/dist/service/apigatewayv2/api/authorizer/identity/sim-http-api-identity-source-parser.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-http-api-identity-source-parser.d.ts","sourceRoot":"","sources":["../../../../../../src/service/apigatewayv2/api/authorizer/identity/sim-http-api-identity-source-parser.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,mCAAmC,CAAC;AAelF;;;;;;;;;;;;GAYG;AACH,qBAAa,8BAA8B;IACzC;;OAEG;IACH,KAAK,CAAC,UAAU,EAAE,MAAM,GAAG,wBAAwB,CAQlD;IAED;;;OAGG;IACH,aAAa,CACX,UAAU,EAAE,MAAM,EAClB,aAAa,GAAE,SAAS,MAAM,EAAO,GACpC,wBAAwB,CAwB1B;IAED;;;;;;;OAOG;IACH,OAAO,CAAC,UAAU;IAclB;;;;;;OAMG;IACH,OAAO,CAAC,KAAK;IAWb;;OAEG;IACH,OAAO,CAAC,cAAc;CAUvB"}

package/dist/service/apigatewayv2/api/authorizer/identity/sim-http-api-identity-source-parser.js

@@ -0,0 +1,92 @@
+import { SimApiGatewayV2BadRequest } from "../../../error/sim-api-gateway-v2.error.js";
+import { SimHttpApiHeaderIdentitySource, simHttpApiHeaderIdentityPrefix, } from "./sim-http-api-header-identity-source.js";
+import { SimHttpApiQueryStringIdentitySource, simHttpApiQueryStringIdentityPrefix, } from "./sim-http-api-query-string-identity-source.js";
+import { simHttpApiRouteKeyIdentityExpression, SimHttpApiRouteKeyIdentitySource, } from "./sim-http-api-route-key-identity-source.js";
+/**
+ * The characters an HTTP field name holds, which is the RFC 9110 token.
+ */
+const httpFieldName = /^[!#$%&'*+.^_`|~\w-]+$/u;
+/**
+ * Reads the identity source expressions an authorizer is configured with.
+ *
+ * An expression naming somewhere this simulation does not read from is refused
+ * rather than accepted and looked for nowhere, since an authorizer that never
+ * finds what it looks for refuses every request, which looks like a signing
+ * problem rather than a configuration one. That leaves out the rest of
+ * `$context` and all of `$stageVariables`, which a Lambda `REQUEST` authorizer
+ * may also name on AWS.
+ *
+ * A JWT authorizer reads something the client sent and nothing else, so it
+ * parses with `requestSource` and `$context.routeKey` is refused for it.
+ */
+export class SimHttpApiIdentitySourceParser {
+    /**
+     * Read an identity source of any kind a Lambda `REQUEST` authorizer takes.
+     */
+    parse(expression) {
+        if (expression === simHttpApiRouteKeyIdentityExpression) {
+            return new SimHttpApiRouteKeyIdentitySource();
+        }
+        return this.requestSource(expression, [
+            simHttpApiRouteKeyIdentityExpression,
+        ]);
+    }
+    /**
+     * Read an identity source naming something the client sent, which is all a
+     * JWT authorizer takes.
+     */
+    requestSource(expression, alsoSimulated = []) {
+        if (expression.startsWith(simHttpApiHeaderIdentityPrefix)) {
+            return new SimHttpApiHeaderIdentitySource(this.headerName(expression, expression.slice(simHttpApiHeaderIdentityPrefix.length)));
+        }
+        if (expression.startsWith(simHttpApiQueryStringIdentityPrefix)) {
+            return new SimHttpApiQueryStringIdentitySource(this.named(expression, expression.slice(simHttpApiQueryStringIdentityPrefix.length), "query string parameter"));
+        }
+        throw new SimApiGatewayV2BadRequest(`IdentitySource '${expression}' is not simulated: an identity source ` +
+            `is ${this.simulatedForms(alsoSimulated)}`);
+    }
+    /**
+     * The header an expression names, refusing one no request could carry.
+     *
+     * A header name is an HTTP field name, and anything else is refused here
+     * rather than at request time: reading a header by an invalid name throws,
+     * and it would throw on every request to the route rather than on the
+     * command that configured it.
+     */
+    headerName(expression, name) {
+        const headerName = this.named(expression, name, "header");
+        if (!httpFieldName.test(headerName)) {
+            throw new SimApiGatewayV2BadRequest(`IdentitySource '${expression}' names the header '${headerName}', ` +
+                `which is not a header name: an HTTP field name holds letters, ` +
+                `digits and the characters !#$%&'*+-.^_\`|~`);
+        }
+        return headerName;
+    }
+    /**
+     * The name an expression carries after its prefix, refusing an empty one.
+     *
+     * An expression naming nothing finds nothing on every request, so the
+     * authorizer refuses everyone for a reason that reads like a signing problem
+     * rather than the configuration one it is.
+     */
+    named(expression, name, what) {
+        if (name.length === 0) {
+            throw new SimApiGatewayV2BadRequest(`IdentitySource '${expression}' names no ${what}, so it would find ` +
+                `nothing on every request`);
+        }
+        return name;
+    }
+    /**
+     * How a refusal names the expressions it would have accepted instead.
+     */
+    simulatedForms(alsoSimulated) {
+        const forms = [
+            `'${simHttpApiHeaderIdentityPrefix}<name>'`,
+            `'${simHttpApiQueryStringIdentityPrefix}<name>'`,
+            ...alsoSimulated.map((expression) => `'${expression}'`),
+        ];
+        const last = forms.pop() ?? "";
+        return `${forms.join(", ")} or ${last}`;
+    }
+}
+//# sourceMappingURL=sim-http-api-identity-source-parser.js.map

package/dist/service/apigatewayv2/api/authorizer/identity/sim-http-api-identity-source-parser.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-http-api-identity-source-parser.js","sourceRoot":"","sources":["../../../../../../src/service/apigatewayv2/api/authorizer/identity/sim-http-api-identity-source-parser.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,yBAAyB,EAAE,MAAM,4CAA4C,CAAC;AACvF,OAAO,EACL,8BAA8B,EAC9B,8BAA8B,GAC/B,MAAM,0CAA0C,CAAC;AAElD,OAAO,EACL,mCAAmC,EACnC,mCAAmC,GACpC,MAAM,gDAAgD,CAAC;AACxD,OAAO,EACL,oCAAoC,EACpC,gCAAgC,GACjC,MAAM,6CAA6C,CAAC;AAErD;;GAEG;AACH,MAAM,aAAa,GAAG,yBAAyB,CAAC;AAEhD;;;;;;;;;;;;GAYG;AACH,MAAM,OAAO,8BAA8B;IACzC;;OAEG;IACH,KAAK,CAAC,UAAkB;QACtB,IAAI,UAAU,KAAK,oCAAoC,EAAE,CAAC;YACxD,OAAO,IAAI,gCAAgC,EAAE,CAAC;QAChD,CAAC;QAED,OAAO,IAAI,CAAC,aAAa,CAAC,UAAU,EAAE;YACpC,oCAAoC;SACrC,CAAC,CAAC;IACL,CAAC;IAED;;;OAGG;IACH,aAAa,CACX,UAAkB,EAClB,aAAa,GAAsB,EAAE;QAErC,IAAI,UAAU,CAAC,UAAU,CAAC,8BAA8B,CAAC,EAAE,CAAC;YAC1D,OAAO,IAAI,8BAA8B,CACvC,IAAI,CAAC,UAAU,CACb,UAAU,EACV,UAAU,CAAC,KAAK,CAAC,8BAA8B,CAAC,MAAM,CAAC,CACxD,CACF,CAAC;QACJ,CAAC;QAED,IAAI,UAAU,CAAC,UAAU,CAAC,mCAAmC,CAAC,EAAE,CAAC;YAC/D,OAAO,IAAI,mCAAmC,CAC5C,IAAI,CAAC,KAAK,CACR,UAAU,EACV,UAAU,CAAC,KAAK,CAAC,mCAAmC,CAAC,MAAM,CAAC,EAC5D,wBAAwB,CACzB,CACF,CAAC;QACJ,CAAC;QAED,MAAM,IAAI,yBAAyB,CACjC,mBAAmB,UAAU,yCAAyC;YACpE,MAAM,IAAI,CAAC,cAAc,CAAC,aAAa,CAAC,EAAE,CAC7C,CAAC;IACJ,CAAC;IAED;;;;;;;OAOG;IACK,UAAU,CAAC,UAAkB,EAAE,IAAY;QACjD,MAAM,UAAU,GAAG,IAAI,CAAC,KAAK,CAAC,UAAU,EAAE,IAAI,EAAE,QAAQ,CAAC,CAAC;QAE1D,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC;YACpC,MAAM,IAAI,yBAAyB,CACjC,mBAAmB,UAAU,uBAAuB,UAAU,KAAK;gBACjE,gEAAgE;gBAChE,4CAA4C,CAC/C,CAAC;QACJ,CAAC;QAED,OAAO,UAAU,CAAC;IACpB,CAAC;IAED;;;;;;OAMG;IACK,KAAK,CAAC,UAAkB,EAAE,IAAY,EAAE,IAAY;QAC1D,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACtB,MAAM,IAAI,yBAAyB,CACjC,mBAAmB,UAAU,cAAc,IAAI,qBAAqB;gBAClE,0BAA0B,CAC7B,CAAC;QACJ,CAAC;QAED,OAAO,IAAI,CAAC;IACd,CAAC;IAED;;OAEG;IACK,cAAc,CAAC,aAAgC;QACrD,MAAM,KAAK,GAAG;YACZ,IAAI,8BAA8B,SAAS;YAC3C,IAAI,mCAAmC,SAAS;YAChD,GAAG,aAAa,CAAC,GAAG,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC,IAAI,UAAU,GAAG,CAAC;SACxD,CAAC;QACF,MAAM,IAAI,GAAG,KAAK,CAAC,GAAG,EAAE,IAAI,EAAE,CAAC;QAE/B,OAAO,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,IAAI,EAAE,CAAC;IAC1C,CAAC;CACF"}

package/dist/service/apigatewayv2/api/authorizer/identity/sim-http-api-identity-source.d.ts

@@ -0,0 +1,47 @@
+/**
+ * What one identity source reads its value out of.
+ *
+ * Most sources read the request, and `$context.routeKey` reads the route that
+ * matched, so both are carried rather than the request alone.
+ */
+export interface SimHttpApiIdentityInput {
+    readonly request: Request;
+    /** The route key of the route the request matched, as it was written. */
+    readonly routeKey: string;
+}
+/**
+ * Where an authorizer takes what it identifies the caller by.
+ *
+ * An identity source is a request mapping expression. Each kind reads from
+ * somewhere different and answers the same question, so reading a list of them
+ * is a loop rather than a switch over kinds.
+ *
+ * A source the request supplies nothing at is what refuses a request before
+ * the authorizer is invoked, and is also part of what a cached decision is
+ * keyed on.
+ */
+export interface SimHttpApiIdentitySource {
+    /**
+     * The expression as it was written, which is what the API reports back.
+     */
+    readonly expression: string;
+    /**
+     * What this request carries at this identity source, if it carries anything.
+     *
+     * An empty value is the same as no value here: real API Gateway treats a
+     * source it finds nothing at as one the request did not supply, and refuses
+     * the request without asking the authorizer anything.
+     */
+    value(input: SimHttpApiIdentityInput): string | undefined;
+}
+/**
+ * A value the request actually supplied, rather than an empty one.
+ *
+ * The value is answered as it arrived, and trimmed only to decide whether the
+ * request supplied anything at all. What is around a value is part of it: an
+ * authorizer is handed what the client sent, and two values differing only in
+ * their whitespace are two different callers as far as a held decision is
+ * concerned.
+ */
+export declare function simHttpApiIdentityValue(value: string | null | undefined): string | undefined;
+//# sourceMappingURL=sim-http-api-identity-source.d.ts.map

package/dist/service/apigatewayv2/api/authorizer/identity/sim-http-api-identity-source.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-http-api-identity-source.d.ts","sourceRoot":"","sources":["../../../../../../src/service/apigatewayv2/api/authorizer/identity/sim-http-api-identity-source.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,MAAM,WAAW,uBAAuB;IACtC,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;IAC1B,yEAAyE;IACzE,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;CAC3B;AAED;;;;;;;;;;GAUG;AACH,MAAM,WAAW,wBAAwB;IACvC;;OAEG;IACH,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAE5B;;;;;;OAMG;IACH,KAAK,CAAC,KAAK,EAAE,uBAAuB,GAAG,MAAM,GAAG,SAAS,CAAC;CAC3D;AAED;;;;;;;;GAQG;AACH,wBAAgB,uBAAuB,CACrC,KAAK,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,GAC/B,MAAM,GAAG,SAAS,CAMpB"}

package/dist/service/apigatewayv2/api/authorizer/identity/sim-http-api-identity-source.js

@@ -0,0 +1,16 @@
+/**
+ * A value the request actually supplied, rather than an empty one.
+ *
+ * The value is answered as it arrived, and trimmed only to decide whether the
+ * request supplied anything at all. What is around a value is part of it: an
+ * authorizer is handed what the client sent, and two values differing only in
+ * their whitespace are two different callers as far as a held decision is
+ * concerned.
+ */
+export function simHttpApiIdentityValue(value) {
+    if (value === undefined || value === null || value.trim().length === 0) {
+        return undefined;
+    }
+    return value;
+}
+//# sourceMappingURL=sim-http-api-identity-source.js.map

package/dist/service/apigatewayv2/api/authorizer/identity/sim-http-api-identity-source.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-http-api-identity-source.js","sourceRoot":"","sources":["../../../../../../src/service/apigatewayv2/api/authorizer/identity/sim-http-api-identity-source.ts"],"names":[],"mappings":"AAuCA;;;;;;;;GAQG;AACH,MAAM,UAAU,uBAAuB,CACrC,KAAgC;IAEhC,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACvE,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,OAAO,KAAK,CAAC;AACf,CAAC"}

package/dist/service/apigatewayv2/api/authorizer/identity/sim-http-api-identity-sources.d.ts

@@ -0,0 +1,29 @@
+import type { SimHttpApiIdentityInput, SimHttpApiIdentitySource } from "./sim-http-api-identity-source.js";
+/**
+ * The identity sources a Lambda `REQUEST` authorizer is configured with.
+ *
+ * A `REQUEST` authorizer takes a list rather than the single source a JWT
+ * authorizer takes, and API Gateway checks the whole list before it invokes
+ * anything: a request missing any one of them is refused with a 401 and the
+ * authorizer function never runs.
+ *
+ * The values found are also what a cached decision is keyed on, which is why
+ * the order they were configured in is kept.
+ */
+export declare class SimHttpApiIdentitySources {
+    private readonly sources;
+    constructor(sources: readonly SimHttpApiIdentitySource[]);
+    /**
+     * The expressions as they were written, which is what the API reports back.
+     */
+    get expressions(): string[];
+    /**
+     * The values this request carries, in the order the sources were configured,
+     * or nothing at all when it is missing any one of them.
+     *
+     * This is what reaches the authorizer as the event's `identitySource`: the
+     * values rather than the expressions that found them.
+     */
+    values(input: SimHttpApiIdentityInput): string[] | undefined;
+}
+//# sourceMappingURL=sim-http-api-identity-sources.d.ts.map

package/dist/service/apigatewayv2/api/authorizer/identity/sim-http-api-identity-sources.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-http-api-identity-sources.d.ts","sourceRoot":"","sources":["../../../../../../src/service/apigatewayv2/api/authorizer/identity/sim-http-api-identity-sources.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,uBAAuB,EACvB,wBAAwB,EACzB,MAAM,mCAAmC,CAAC;AAE3C;;;;;;;;;;GAUG;AACH,qBAAa,yBAAyB;IACpC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAsC;IAE9D,YAAY,OAAO,EAAE,SAAS,wBAAwB,EAAE,EAEvD;IAED;;OAEG;IACH,IAAI,WAAW,IAAI,MAAM,EAAE,CAE1B;IAED;;;;;;OAMG;IACH,MAAM,CAAC,KAAK,EAAE,uBAAuB,GAAG,MAAM,EAAE,GAAG,SAAS,CAc3D;CACF"}

package/dist/service/apigatewayv2/api/authorizer/identity/sim-http-api-identity-sources.js

@@ -0,0 +1,42 @@
+/**
+ * The identity sources a Lambda `REQUEST` authorizer is configured with.
+ *
+ * A `REQUEST` authorizer takes a list rather than the single source a JWT
+ * authorizer takes, and API Gateway checks the whole list before it invokes
+ * anything: a request missing any one of them is refused with a 401 and the
+ * authorizer function never runs.
+ *
+ * The values found are also what a cached decision is keyed on, which is why
+ * the order they were configured in is kept.
+ */
+export class SimHttpApiIdentitySources {
+    sources;
+    constructor(sources) {
+        this.sources = [...sources];
+    }
+    /**
+     * The expressions as they were written, which is what the API reports back.
+     */
+    get expressions() {
+        return this.sources.map((source) => source.expression);
+    }
+    /**
+     * The values this request carries, in the order the sources were configured,
+     * or nothing at all when it is missing any one of them.
+     *
+     * This is what reaches the authorizer as the event's `identitySource`: the
+     * values rather than the expressions that found them.
+     */
+    values(input) {
+        const values = [];
+        for (const source of this.sources) {
+            const value = source.value(input);
+            if (value === undefined) {
+                return undefined;
+            }
+            values.push(value);
+        }
+        return values;
+    }
+}
+//# sourceMappingURL=sim-http-api-identity-sources.js.map

package/dist/service/apigatewayv2/api/authorizer/identity/sim-http-api-identity-sources.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-http-api-identity-sources.js","sourceRoot":"","sources":["../../../../../../src/service/apigatewayv2/api/authorizer/identity/sim-http-api-identity-sources.ts"],"names":[],"mappings":"AAKA;;;;;;;;;;GAUG;AACH,MAAM,OAAO,yBAAyB;IACnB,OAAO,CAAsC;IAE9D,YAAY,OAA4C;QACtD,IAAI,CAAC,OAAO,GAAG,CAAC,GAAG,OAAO,CAAC,CAAC;IAC9B,CAAC;IAED;;OAEG;IACH,IAAI,WAAW;QACb,OAAO,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;IACzD,CAAC;IAED;;;;;;OAMG;IACH,MAAM,CAAC,KAA8B;QACnC,MAAM,MAAM,GAAa,EAAE,CAAC;QAE5B,KAAK,MAAM,MAAM,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YAClC,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;YAElC,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;gBACxB,OAAO,SAAS,CAAC;YACnB,CAAC;YAED,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACrB,CAAC;QAED,OAAO,MAAM,CAAC;IAChB,CAAC;CACF"}

package/dist/service/apigatewayv2/api/authorizer/identity/sim-http-api-query-string-identity-source.d.ts

@@ -0,0 +1,19 @@
+import { type SimHttpApiIdentityInput, type SimHttpApiIdentitySource } from "./sim-http-api-identity-source.js";
+/**
+ * The prefix a query string identity source is written with.
+ */
+export declare const simHttpApiQueryStringIdentityPrefix = "$request.querystring.";
+/**
+ * An identity source naming one query string parameter, such as
+ * `$request.querystring.access_token`.
+ */
+export declare class SimHttpApiQueryStringIdentitySource implements SimHttpApiIdentitySource {
+    readonly expression: string;
+    private readonly parameterName;
+    constructor(parameterName: string);
+    /**
+     * The query string parameter this request carries, if it carries one.
+     */
+    value(input: SimHttpApiIdentityInput): string | undefined;
+}
+//# sourceMappingURL=sim-http-api-query-string-identity-source.d.ts.map

package/dist/service/apigatewayv2/api/authorizer/identity/sim-http-api-query-string-identity-source.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-http-api-query-string-identity-source.d.ts","sourceRoot":"","sources":["../../../../../../src/service/apigatewayv2/api/authorizer/identity/sim-http-api-query-string-identity-source.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,KAAK,uBAAuB,EAC5B,KAAK,wBAAwB,EAE9B,MAAM,mCAAmC,CAAC;AAE3C;;GAEG;AACH,eAAO,MAAM,mCAAmC,0BAA0B,CAAC;AAE3E;;;GAGG;AACH,qBAAa,mCAAoC,YAAW,wBAAwB;IAClF,SAAgB,UAAU,EAAE,MAAM,CAAC;IAEnC,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAS;IAEvC,YAAY,aAAa,EAAE,MAAM,EAGhC;IAED;;OAEG;IACH,KAAK,CAAC,KAAK,EAAE,uBAAuB,GAAG,MAAM,GAAG,SAAS,CAIxD;CACF"}

package/dist/service/apigatewayv2/api/authorizer/identity/sim-http-api-query-string-identity-source.js

@@ -0,0 +1,24 @@
+import { simHttpApiIdentityValue, } from "./sim-http-api-identity-source.js";
+/**
+ * The prefix a query string identity source is written with.
+ */
+export const simHttpApiQueryStringIdentityPrefix = "$request.querystring.";
+/**
+ * An identity source naming one query string parameter, such as
+ * `$request.querystring.access_token`.
+ */
+export class SimHttpApiQueryStringIdentitySource {
+    expression;
+    parameterName;
+    constructor(parameterName) {
+        this.expression = `${simHttpApiQueryStringIdentityPrefix}${parameterName}`;
+        this.parameterName = parameterName;
+    }
+    /**
+     * The query string parameter this request carries, if it carries one.
+     */
+    value(input) {
+        return simHttpApiIdentityValue(new URL(input.request.url).searchParams.get(this.parameterName));
+    }
+}
+//# sourceMappingURL=sim-http-api-query-string-identity-source.js.map

package/dist/service/apigatewayv2/api/authorizer/identity/sim-http-api-query-string-identity-source.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-http-api-query-string-identity-source.js","sourceRoot":"","sources":["../../../../../../src/service/apigatewayv2/api/authorizer/identity/sim-http-api-query-string-identity-source.ts"],"names":[],"mappings":"AAAA,OAAO,EAGL,uBAAuB,GACxB,MAAM,mCAAmC,CAAC;AAE3C;;GAEG;AACH,MAAM,CAAC,MAAM,mCAAmC,GAAG,uBAAuB,CAAC;AAE3E;;;GAGG;AACH,MAAM,OAAO,mCAAmC;IAC9B,UAAU,CAAS;IAElB,aAAa,CAAS;IAEvC,YAAY,aAAqB;QAC/B,IAAI,CAAC,UAAU,GAAG,GAAG,mCAAmC,GAAG,aAAa,EAAE,CAAC;QAC3E,IAAI,CAAC,aAAa,GAAG,aAAa,CAAC;IACrC,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,KAA8B;QAClC,OAAO,uBAAuB,CAC5B,IAAI,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,YAAY,CAAC,GAAG,CAAC,IAAI,CAAC,aAAa,CAAC,CAChE,CAAC;IACJ,CAAC;CACF"}

package/dist/service/apigatewayv2/api/authorizer/identity/sim-http-api-route-key-identity-source.d.ts

@@ -0,0 +1,25 @@
+import type { SimHttpApiIdentityInput, SimHttpApiIdentitySource } from "./sim-http-api-identity-source.js";
+/**
+ * The one `$context` identity source simulated.
+ */
+export declare const simHttpApiRouteKeyIdentityExpression = "$context.routeKey";
+/**
+ * An identity source naming the route the request matched.
+ *
+ * This is the source AWS documents for caching a Lambda authorizer's decision
+ * per route. Every other identity source reads something the client sent, and
+ * a decision keyed only on those covers every route of the API using that
+ * authorizer, which is what AWS warns about. Adding this one puts the route in
+ * the key.
+ *
+ * It never refuses a request the way a missing header does: every matched
+ * request has a route key, so this source always supplies a value.
+ */
+export declare class SimHttpApiRouteKeyIdentitySource implements SimHttpApiIdentitySource {
+    readonly expression = "$context.routeKey";
+    /**
+     * The route key of the route that matched.
+     */
+    value(input: SimHttpApiIdentityInput): string;
+}
+//# sourceMappingURL=sim-http-api-route-key-identity-source.d.ts.map

package/dist/service/apigatewayv2/api/authorizer/identity/sim-http-api-route-key-identity-source.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-http-api-route-key-identity-source.d.ts","sourceRoot":"","sources":["../../../../../../src/service/apigatewayv2/api/authorizer/identity/sim-http-api-route-key-identity-source.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,uBAAuB,EACvB,wBAAwB,EACzB,MAAM,mCAAmC,CAAC;AAE3C;;GAEG;AACH,eAAO,MAAM,oCAAoC,sBAAsB,CAAC;AAExE;;;;;;;;;;;GAWG;AACH,qBAAa,gCAAiC,YAAW,wBAAwB;IAC/E,SAAgB,UAAU,uBAAwC;IAElE;;OAEG;IACH,KAAK,CAAC,KAAK,EAAE,uBAAuB,GAAG,MAAM,CAE5C;CACF"}

package/dist/service/apigatewayv2/api/authorizer/identity/sim-http-api-route-key-identity-source.js

@@ -0,0 +1,26 @@
+/**
+ * The one `$context` identity source simulated.
+ */
+export const simHttpApiRouteKeyIdentityExpression = "$context.routeKey";
+/**
+ * An identity source naming the route the request matched.
+ *
+ * This is the source AWS documents for caching a Lambda authorizer's decision
+ * per route. Every other identity source reads something the client sent, and
+ * a decision keyed only on those covers every route of the API using that
+ * authorizer, which is what AWS warns about. Adding this one puts the route in
+ * the key.
+ *
+ * It never refuses a request the way a missing header does: every matched
+ * request has a route key, so this source always supplies a value.
+ */
+export class SimHttpApiRouteKeyIdentitySource {
+    expression = simHttpApiRouteKeyIdentityExpression;
+    /**
+     * The route key of the route that matched.
+     */
+    value(input) {
+        return input.routeKey;
+    }
+}
+//# sourceMappingURL=sim-http-api-route-key-identity-source.js.map

package/dist/service/apigatewayv2/api/authorizer/identity/sim-http-api-route-key-identity-source.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-http-api-route-key-identity-source.js","sourceRoot":"","sources":["../../../../../../src/service/apigatewayv2/api/authorizer/identity/sim-http-api-route-key-identity-source.ts"],"names":[],"mappings":"AAKA;;GAEG;AACH,MAAM,CAAC,MAAM,oCAAoC,GAAG,mBAAmB,CAAC;AAExE;;;;;;;;;;;GAWG;AACH,MAAM,OAAO,gCAAgC;IAC3B,UAAU,GAAG,oCAAoC,CAAC;IAElE;;OAEG;IACH,KAAK,CAAC,KAA8B;QAClC,OAAO,KAAK,CAAC,QAAQ,CAAC;IACxB,CAAC;CACF"}