@kensio/yulin 1.0.0 → 1.2.0

package/dist/service/apigatewayv2/command/route/sim-http-api-route-authorization-options.d.ts

@@ -0,0 +1,30 @@
+import type { SimCreateRouteCommandInput } from "./route.command.js";
+/**
+ * Refuses the options a route's authorization type has no use for.
+ *
+ * An authorizer nothing would ask, or a scope nothing would check, is refused
+ * rather than stored, so a route cannot report a restriction that applies to
+ * none of its requests. Refusing scopes anywhere but on a `JWT` route is
+ * stricter than AWS, which documents route scopes as meaningful only there and
+ * ignores them elsewhere. Accepting them would let a test assert on a scope
+ * restriction that nothing applies.
+ */
+export declare class SimHttpApiRouteAuthorizationOptions {
+    private readonly input;
+    constructor(input: SimCreateRouteCommandInput);
+    /**
+     * Refuse what a route that authorizes nobody has no use for.
+     */
+    refuseOnOpenRoute(): void;
+    /**
+     * Refuse what a route IAM decides has no use for.
+     */
+    refuseOnIamRoute(): void;
+    /**
+     * Refuse what a route a Lambda authorizer decides has no use for.
+     */
+    refuseOnCustomRoute(): void;
+    private refuseAuthorizerId;
+    private refuseAuthorizationScopes;
+}
+//# sourceMappingURL=sim-http-api-route-authorization-options.d.ts.map

package/dist/service/apigatewayv2/command/route/sim-http-api-route-authorization-options.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-http-api-route-authorization-options.d.ts","sourceRoot":"","sources":["../../../../../src/service/apigatewayv2/command/route/sim-http-api-route-authorization-options.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,0BAA0B,EAAE,MAAM,oBAAoB,CAAC;AAErE;;;;;;;;;GASG;AACH,qBAAa,mCAAmC;IAC9C,OAAO,CAAC,QAAQ,CAAC,KAAK,CAA6B;IAEnD,YAAY,KAAK,EAAE,0BAA0B,EAE5C;IAED;;OAEG;IACH,iBAAiB,IAAI,IAAI,CASxB;IAED;;OAEG;IACH,gBAAgB,IAAI,IAAI,CAWvB;IAED;;OAEG;IACH,mBAAmB,IAAI,IAAI,CAM1B;IAED,OAAO,CAAC,kBAAkB;IAW1B,OAAO,CAAC,yBAAyB;CAalC"}

package/dist/service/apigatewayv2/command/route/sim-http-api-route-authorization-options.js

@@ -0,0 +1,55 @@
+import { SimApiGatewayV2BadRequest } from "../../error/sim-api-gateway-v2.error.js";
+/**
+ * Refuses the options a route's authorization type has no use for.
+ *
+ * An authorizer nothing would ask, or a scope nothing would check, is refused
+ * rather than stored, so a route cannot report a restriction that applies to
+ * none of its requests. Refusing scopes anywhere but on a `JWT` route is
+ * stricter than AWS, which documents route scopes as meaningful only there and
+ * ignores them elsewhere. Accepting them would let a test assert on a scope
+ * restriction that nothing applies.
+ */
+export class SimHttpApiRouteAuthorizationOptions {
+    input;
+    constructor(input) {
+        this.input = input;
+    }
+    /**
+     * Refuse what a route that authorizes nobody has no use for.
+     */
+    refuseOnOpenRoute() {
+        this.refuseAuthorizerId("NONE", "which would be ignored here and would leave the route open on AWS too");
+        this.refuseAuthorizationScopes("NONE", "and nothing checks a scope on a route that authorizes nobody");
+    }
+    /**
+     * Refuse what a route IAM decides has no use for.
+     */
+    refuseOnIamRoute() {
+        this.refuseAuthorizerId("AWS_IAM", "and IAM itself decides an AWS_IAM route, so there is no authorizer to " +
+            "send the request through");
+        this.refuseAuthorizationScopes("AWS_IAM", "and AWS applies route scopes to a JWT route only, so a scope written " +
+            "here would restrict nothing");
+    }
+    /**
+     * Refuse what a route a Lambda authorizer decides has no use for.
+     */
+    refuseOnCustomRoute() {
+        this.refuseAuthorizationScopes("CUSTOM", "and AWS applies route scopes to a JWT route only: what a Lambda " +
+            "authorizer accepts is the function's own business");
+    }
+    refuseAuthorizerId(authorizationType, reason) {
+        if (this.input.AuthorizerId === undefined) {
+            return;
+        }
+        throw new SimApiGatewayV2BadRequest(`CreateRoute AuthorizerId is set on a route with AuthorizationType ` +
+            `${authorizationType}, ${reason}`);
+    }
+    refuseAuthorizationScopes(authorizationType, reason) {
+        if ((this.input.AuthorizationScopes ?? []).length === 0) {
+            return;
+        }
+        throw new SimApiGatewayV2BadRequest(`CreateRoute AuthorizationScopes is set on a route with ` +
+            `AuthorizationType ${authorizationType}, ${reason}`);
+    }
+}
+//# sourceMappingURL=sim-http-api-route-authorization-options.js.map

package/dist/service/apigatewayv2/command/route/sim-http-api-route-authorization-options.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-http-api-route-authorization-options.js","sourceRoot":"","sources":["../../../../../src/service/apigatewayv2/command/route/sim-http-api-route-authorization-options.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,yBAAyB,EAAE,MAAM,yCAAyC,CAAC;AAGpF;;;;;;;;;GASG;AACH,MAAM,OAAO,mCAAmC;IAC7B,KAAK,CAA6B;IAEnD,YAAY,KAAiC;QAC3C,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC;IACrB,CAAC;IAED;;OAEG;IACH,iBAAiB;QACf,IAAI,CAAC,kBAAkB,CACrB,MAAM,EACN,uEAAuE,CACxE,CAAC;QACF,IAAI,CAAC,yBAAyB,CAC5B,MAAM,EACN,8DAA8D,CAC/D,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,gBAAgB;QACd,IAAI,CAAC,kBAAkB,CACrB,SAAS,EACT,wEAAwE;YACtE,0BAA0B,CAC7B,CAAC;QACF,IAAI,CAAC,yBAAyB,CAC5B,SAAS,EACT,uEAAuE;YACrE,6BAA6B,CAChC,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,mBAAmB;QACjB,IAAI,CAAC,yBAAyB,CAC5B,QAAQ,EACR,kEAAkE;YAChE,mDAAmD,CACtD,CAAC;IACJ,CAAC;IAEO,kBAAkB,CAAC,iBAAyB,EAAE,MAAc;QAClE,IAAI,IAAI,CAAC,KAAK,CAAC,YAAY,KAAK,SAAS,EAAE,CAAC;YAC1C,OAAO;QACT,CAAC;QAED,MAAM,IAAI,yBAAyB,CACjC,oEAAoE;YAClE,GAAG,iBAAiB,KAAK,MAAM,EAAE,CACpC,CAAC;IACJ,CAAC;IAEO,yBAAyB,CAC/B,iBAAyB,EACzB,MAAc;QAEd,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,mBAAmB,IAAI,EAAE,CAAC,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACxD,OAAO;QACT,CAAC;QAED,MAAM,IAAI,yBAAyB,CACjC,yDAAyD;YACvD,qBAAqB,iBAAiB,KAAK,MAAM,EAAE,CACtD,CAAC;IACJ,CAAC;CACF"}

package/dist/service/apigatewayv2/command/route/sim-http-api-route-authorization.d.ts

@@ -15,13 +15,15 @@ export interface SimHttpApiRouteAuthorization {
  * Reads the authorization a CreateRoute input asks for, against the API it is
  * being created on.
  *
- * A `JWT` route has to name an authorizer the API has. A route deploying with
- * an `AuthorizerId` that resolved to nothing would be open here and closed on
- * AWS, which is the failure this whole area exists to avoid, so it is refused
- * rather than created.
+ * A `JWT` and a `CUSTOM` route each name an authorizer, and the other two name
+ * none. Which options each type has a use for is
+ * `SimHttpApiRouteAuthorizationOptions`, and finding the authorizer named is
+ * `SimHttpApiRouteAuthorizerInput`, so what is left here is which of the four
+ * a route asked for.
  */
 export declare class SimHttpApiRouteAuthorizationInput {
     private readonly input;
+    private readonly options;
     constructor(input: SimCreateRouteCommandInput);
     /**
      * The authorization this route is created with.
@@ -34,20 +36,17 @@ export declare class SimHttpApiRouteAuthorizationInput {
     private open;
     /**
      * A route IAM decides, which takes neither an authorizer nor scopes.
-     *
-     * Refusing scopes is stricter than AWS, which documents route scopes as
-     * meaningful only for `JWT` and ignores them for `AWS_IAM`. Accepting them
-     * here would let a test assert on a scope restriction that nothing applies.
      */
     private iam;
     /**
-     * Refuse an `AuthorizerId` on an authorization type that takes none.
+     * A route a Lambda `REQUEST` authorizer decides, which takes no scopes.
      */
-    private refuseAuthorizerId;
+    private custom;
     /**
-     * Refuse `AuthorizationScopes` on an authorization type that checks none.
+     * A route a JWT authorizer decides, which is the one kind route scopes
+     * apply to.
      */
-    private refuseAuthorizationScopes;
+    private jwt;
     private authorizer;
 }
 //# sourceMappingURL=sim-http-api-route-authorization.d.ts.map

package/dist/service/apigatewayv2/command/route/sim-http-api-route-authorization.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sim-http-api-route-authorization.d.ts","sourceRoot":"","sources":["../../../../../src/service/apigatewayv2/command/route/sim-http-api-route-authorization.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,iDAAiD,CAAC;AAC9F,OAAO,KAAK,EAAE,2BAA2B,EAAE,MAAM,uCAAuC,CAAC;AACzF,OAAO,EAAE,qBAAqB,EAAE,MAAM,8CAA8C,CAAC;AACrF,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,2BAA2B,CAAC;AAE5D,OAAO,KAAK,EAAE,0BAA0B,EAAE,MAAM,oBAAoB,CAAC;AAErE;;GAEG;AACH,MAAM,WAAW,4BAA4B;IAC3C,QAAQ,CAAC,iBAAiB,EAAE,2BAA2B,CAAC;IACxD,QAAQ,CAAC,YAAY,CAAC,EAAE,sBAAsB,GAAG,SAAS,CAAC;IAC3D,QAAQ,CAAC,mBAAmB,EAAE,qBAAqB,CAAC;CACrD;AAED;;;;;;;;GAQG;AACH,qBAAa,iCAAiC;IAC5C,OAAO,CAAC,QAAQ,CAAC,KAAK,CAA6B;IAEnD,YAAY,KAAK,EAAE,0BAA0B,EAE5C;IAED;;OAEG;IACH,IAAI,CAAC,GAAG,EAAE,UAAU,GAAG,4BAA4B,CAkBlD;IAED;;;OAGG;IACH,OAAO,CAAC,IAAI;IAgBZ;;;;;;OAMG;IACH,OAAO,CAAC,GAAG;IAkBX;;OAEG;IACH,OAAO,CAAC,kBAAkB;IAW1B;;OAEG;IACH,OAAO,CAAC,yBAAyB;IAcjC,OAAO,CAAC,UAAU;CAoBnB"}
+{"version":3,"file":"sim-http-api-route-authorization.d.ts","sourceRoot":"","sources":["../../../../../src/service/apigatewayv2/command/route/sim-http-api-route-authorization.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,sBAAsB,EAEvB,MAAM,iDAAiD,CAAC;AACzD,OAAO,KAAK,EAAE,2BAA2B,EAAE,MAAM,uCAAuC,CAAC;AACzF,OAAO,EAAE,qBAAqB,EAAE,MAAM,8CAA8C,CAAC;AACrF,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,2BAA2B,CAAC;AAC5D,OAAO,KAAK,EAAE,0BAA0B,EAAE,MAAM,oBAAoB,CAAC;AAIrE;;GAEG;AACH,MAAM,WAAW,4BAA4B;IAC3C,QAAQ,CAAC,iBAAiB,EAAE,2BAA2B,CAAC;IACxD,QAAQ,CAAC,YAAY,CAAC,EAAE,sBAAsB,GAAG,SAAS,CAAC;IAC3D,QAAQ,CAAC,mBAAmB,EAAE,qBAAqB,CAAC;CACrD;AAED;;;;;;;;;GASG;AACH,qBAAa,iCAAiC;IAC5C,OAAO,CAAC,QAAQ,CAAC,KAAK,CAA6B;IACnD,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAsC;IAE9D,YAAY,KAAK,EAAE,0BAA0B,EAG5C;IAED;;OAEG;IACH,IAAI,CAAC,GAAG,EAAE,UAAU,GAAG,4BAA4B,CAgBlD;IAED;;;OAGG;IACH,OAAO,CAAC,IAAI;IASZ;;OAEG;IACH,OAAO,CAAC,GAAG;IASX;;OAEG;IACH,OAAO,CAAC,MAAM;IAUd;;;OAGG;IACH,OAAO,CAAC,GAAG;IAUX,OAAO,CAAC,UAAU;CASnB"}

package/dist/service/apigatewayv2/command/route/sim-http-api-route-authorization.js

@@ -1,18 +1,22 @@
 import { SimHttpApiRouteScopes } from "../../api/route/sim-http-api-route-scopes.js";
-import { SimApiGatewayV2BadRequest } from "../../error/sim-api-gateway-v2.error.js";
+import { SimHttpApiRouteAuthorizationOptions } from "./sim-http-api-route-authorization-options.js";
+import { SimHttpApiRouteAuthorizerInput } from "./sim-http-api-route-authorizer-input.js";
 /**
  * Reads the authorization a CreateRoute input asks for, against the API it is
  * being created on.
  *
- * A `JWT` route has to name an authorizer the API has. A route deploying with
- * an `AuthorizerId` that resolved to nothing would be open here and closed on
- * AWS, which is the failure this whole area exists to avoid, so it is refused
- * rather than created.
+ * A `JWT` and a `CUSTOM` route each name an authorizer, and the other two name
+ * none. Which options each type has a use for is
+ * `SimHttpApiRouteAuthorizationOptions`, and finding the authorizer named is
+ * `SimHttpApiRouteAuthorizerInput`, so what is left here is which of the four
+ * a route asked for.
  */
 export class SimHttpApiRouteAuthorizationInput {
     input;
+    options;
     constructor(input) {
         this.input = input;
+        this.options = new SimHttpApiRouteAuthorizationOptions(input);
     }
     /**
      * The authorization this route is created with.
@@ -25,19 +29,17 @@ export class SimHttpApiRouteAuthorizationInput {
         if (authorizationType === "AWS_IAM") {
             return this.iam();
         }
-        return {
-            authorizationType: "JWT",
-            authorizerId: this.authorizer(api),
-            authorizationScopes: new SimHttpApiRouteScopes(this.input.AuthorizationScopes ?? []),
-        };
+        if (authorizationType === "CUSTOM") {
+            return this.custom(api);
+        }
+        return this.jwt(api);
     }
     /**
      * A route anyone may call, which is what a route says by leaving
      * `AuthorizationType` out.
      */
     open() {
-        this.refuseAuthorizerId("NONE", "which would be ignored here and would leave the route open on AWS too");
-        this.refuseAuthorizationScopes("NONE", "and nothing checks a scope on a route that authorizes nobody");
+        this.options.refuseOnOpenRoute();
         return {
             authorizationType: "NONE",
             authorizationScopes: new SimHttpApiRouteScopes(),
@@ -45,52 +47,41 @@ export class SimHttpApiRouteAuthorizationInput {
     }
     /**
      * A route IAM decides, which takes neither an authorizer nor scopes.
-     *
-     * Refusing scopes is stricter than AWS, which documents route scopes as
-     * meaningful only for `JWT` and ignores them for `AWS_IAM`. Accepting them
-     * here would let a test assert on a scope restriction that nothing applies.
      */
     iam() {
-        this.refuseAuthorizerId("AWS_IAM", "and IAM itself decides an AWS_IAM route, so there is no authorizer to " +
-            "send the request through");
-        this.refuseAuthorizationScopes("AWS_IAM", "and AWS applies route scopes to a JWT route only, so a scope written " +
-            "here would restrict nothing");
+        this.options.refuseOnIamRoute();
         return {
             authorizationType: "AWS_IAM",
             authorizationScopes: new SimHttpApiRouteScopes(),
         };
     }
     /**
-     * Refuse an `AuthorizerId` on an authorization type that takes none.
+     * A route a Lambda `REQUEST` authorizer decides, which takes no scopes.
      */
-    refuseAuthorizerId(authorizationType, reason) {
-        if (this.input.AuthorizerId === undefined) {
-            return;
-        }
-        throw new SimApiGatewayV2BadRequest(`CreateRoute AuthorizerId is set on a route with AuthorizationType ` +
-            `${authorizationType}, ${reason}`);
+    custom(api) {
+        this.options.refuseOnCustomRoute();
+        return {
+            authorizationType: "CUSTOM",
+            authorizerId: this.authorizer(api, "REQUEST"),
+            authorizationScopes: new SimHttpApiRouteScopes(),
+        };
     }
     /**
-     * Refuse `AuthorizationScopes` on an authorization type that checks none.
+     * A route a JWT authorizer decides, which is the one kind route scopes
+     * apply to.
      */
-    refuseAuthorizationScopes(authorizationType, reason) {
-        if ((this.input.AuthorizationScopes ?? []).length === 0) {
-            return;
-        }
-        throw new SimApiGatewayV2BadRequest(`CreateRoute AuthorizationScopes is set on a route with ` +
-            `AuthorizationType ${authorizationType}, ${reason}`);
+    jwt(api) {
+        return {
+            authorizationType: "JWT",
+            authorizerId: this.authorizer(api, "JWT"),
+            authorizationScopes: new SimHttpApiRouteScopes(this.input.AuthorizationScopes ?? []),
+        };
     }
-    authorizer(api) {
-        const authorizerId = this.input.AuthorizerId;
-        if (authorizerId === undefined || authorizerId.length === 0) {
-            throw new SimApiGatewayV2BadRequest("CreateRoute with AuthorizationType JWT requires AuthorizerId");
-        }
-        const authorizer = api.authorizers.find(authorizerId);
-        if (authorizer === undefined) {
-            throw new SimApiGatewayV2BadRequest(`CreateRoute AuthorizerId ${authorizerId} names no authorizer on ` +
-                `API ${api.apiId}. The route would be open here and closed on AWS.`);
-        }
-        return authorizer.authorizerId;
+    authorizer(api, authorizerType) {
+        return new SimHttpApiRouteAuthorizerInput({
+            authorizationType: this.input.AuthorizationType ?? "",
+            authorizerId: this.input.AuthorizerId,
+        }).read(api, authorizerType);
     }
 }
 //# sourceMappingURL=sim-http-api-route-authorization.js.map

package/dist/service/apigatewayv2/command/route/sim-http-api-route-authorization.js.map

@@ -1 +1 @@
-{"version":3,"file":"sim-http-api-route-authorization.js","sourceRoot":"","sources":["../../../../../src/service/apigatewayv2/command/route/sim-http-api-route-authorization.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,qBAAqB,EAAE,MAAM,8CAA8C,CAAC;AAErF,OAAO,EAAE,yBAAyB,EAAE,MAAM,yCAAyC,CAAC;AAYpF;;;;;;;;GAQG;AACH,MAAM,OAAO,iCAAiC;IAC3B,KAAK,CAA6B;IAEnD,YAAY,KAAiC;QAC3C,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC;IACrB,CAAC;IAED;;OAEG;IACH,IAAI,CAAC,GAAe;QAClB,MAAM,iBAAiB,GAAG,IAAI,CAAC,KAAK,CAAC,iBAAiB,IAAI,MAAM,CAAC;QAEjE,IAAI,iBAAiB,KAAK,MAAM,EAAE,CAAC;YACjC,OAAO,IAAI,CAAC,IAAI,EAAE,CAAC;QACrB,CAAC;QAED,IAAI,iBAAiB,KAAK,SAAS,EAAE,CAAC;YACpC,OAAO,IAAI,CAAC,GAAG,EAAE,CAAC;QACpB,CAAC;QAED,OAAO;YACL,iBAAiB,EAAE,KAAK;YACxB,YAAY,EAAE,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;YAClC,mBAAmB,EAAE,IAAI,qBAAqB,CAC5C,IAAI,CAAC,KAAK,CAAC,mBAAmB,IAAI,EAAE,CACrC;SACF,CAAC;IACJ,CAAC;IAED;;;OAGG;IACK,IAAI;QACV,IAAI,CAAC,kBAAkB,CACrB,MAAM,EACN,uEAAuE,CACxE,CAAC;QACF,IAAI,CAAC,yBAAyB,CAC5B,MAAM,EACN,8DAA8D,CAC/D,CAAC;QAEF,OAAO;YACL,iBAAiB,EAAE,MAAM;YACzB,mBAAmB,EAAE,IAAI,qBAAqB,EAAE;SACjD,CAAC;IACJ,CAAC;IAED;;;;;;OAMG;IACK,GAAG;QACT,IAAI,CAAC,kBAAkB,CACrB,SAAS,EACT,wEAAwE;YACtE,0BAA0B,CAC7B,CAAC;QACF,IAAI,CAAC,yBAAyB,CAC5B,SAAS,EACT,uEAAuE;YACrE,6BAA6B,CAChC,CAAC;QAEF,OAAO;YACL,iBAAiB,EAAE,SAAS;YAC5B,mBAAmB,EAAE,IAAI,qBAAqB,EAAE;SACjD,CAAC;IACJ,CAAC;IAED;;OAEG;IACK,kBAAkB,CAAC,iBAAyB,EAAE,MAAc;QAClE,IAAI,IAAI,CAAC,KAAK,CAAC,YAAY,KAAK,SAAS,EAAE,CAAC;YAC1C,OAAO;QACT,CAAC;QAED,MAAM,IAAI,yBAAyB,CACjC,oEAAoE;YAClE,GAAG,iBAAiB,KAAK,MAAM,EAAE,CACpC,CAAC;IACJ,CAAC;IAED;;OAEG;IACK,yBAAyB,CAC/B,iBAAyB,EACzB,MAAc;QAEd,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,mBAAmB,IAAI,EAAE,CAAC,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACxD,OAAO;QACT,CAAC;QAED,MAAM,IAAI,yBAAyB,CACjC,yDAAyD;YACvD,qBAAqB,iBAAiB,KAAK,MAAM,EAAE,CACtD,CAAC;IACJ,CAAC;IAEO,UAAU,CAAC,GAAe;QAChC,MAAM,YAAY,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC;QAE7C,IAAI,YAAY,KAAK,SAAS,IAAI,YAAY,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC5D,MAAM,IAAI,yBAAyB,CACjC,8DAA8D,CAC/D,CAAC;QACJ,CAAC;QAED,MAAM,UAAU,GAAG,GAAG,CAAC,WAAW,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;QAEtD,IAAI,UAAU,KAAK,SAAS,EAAE,CAAC;YAC7B,MAAM,IAAI,yBAAyB,CACjC,4BAA4B,YAAY,0BAA0B;gBAChE,OAAO,GAAG,CAAC,KAAK,mDAAmD,CACtE,CAAC;QACJ,CAAC;QAED,OAAO,UAAU,CAAC,YAAY,CAAC;IACjC,CAAC;CACF"}
+{"version":3,"file":"sim-http-api-route-authorization.js","sourceRoot":"","sources":["../../../../../src/service/apigatewayv2/command/route/sim-http-api-route-authorization.ts"],"names":[],"mappings":"AAKA,OAAO,EAAE,qBAAqB,EAAE,MAAM,8CAA8C,CAAC;AAGrF,OAAO,EAAE,mCAAmC,EAAE,MAAM,+CAA+C,CAAC;AACpG,OAAO,EAAE,8BAA8B,EAAE,MAAM,0CAA0C,CAAC;AAW1F;;;;;;;;;GASG;AACH,MAAM,OAAO,iCAAiC;IAC3B,KAAK,CAA6B;IAClC,OAAO,CAAsC;IAE9D,YAAY,KAAiC;QAC3C,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC;QACnB,IAAI,CAAC,OAAO,GAAG,IAAI,mCAAmC,CAAC,KAAK,CAAC,CAAC;IAChE,CAAC;IAED;;OAEG;IACH,IAAI,CAAC,GAAe;QAClB,MAAM,iBAAiB,GAAG,IAAI,CAAC,KAAK,CAAC,iBAAiB,IAAI,MAAM,CAAC;QAEjE,IAAI,iBAAiB,KAAK,MAAM,EAAE,CAAC;YACjC,OAAO,IAAI,CAAC,IAAI,EAAE,CAAC;QACrB,CAAC;QAED,IAAI,iBAAiB,KAAK,SAAS,EAAE,CAAC;YACpC,OAAO,IAAI,CAAC,GAAG,EAAE,CAAC;QACpB,CAAC;QAED,IAAI,iBAAiB,KAAK,QAAQ,EAAE,CAAC;YACnC,OAAO,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAC1B,CAAC;QAED,OAAO,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IACvB,CAAC;IAED;;;OAGG;IACK,IAAI;QACV,IAAI,CAAC,OAAO,CAAC,iBAAiB,EAAE,CAAC;QAEjC,OAAO;YACL,iBAAiB,EAAE,MAAM;YACzB,mBAAmB,EAAE,IAAI,qBAAqB,EAAE;SACjD,CAAC;IACJ,CAAC;IAED;;OAEG;IACK,GAAG;QACT,IAAI,CAAC,OAAO,CAAC,gBAAgB,EAAE,CAAC;QAEhC,OAAO;YACL,iBAAiB,EAAE,SAAS;YAC5B,mBAAmB,EAAE,IAAI,qBAAqB,EAAE;SACjD,CAAC;IACJ,CAAC;IAED;;OAEG;IACK,MAAM,CAAC,GAAe;QAC5B,IAAI,CAAC,OAAO,CAAC,mBAAmB,EAAE,CAAC;QAEnC,OAAO;YACL,iBAAiB,EAAE,QAAQ;YAC3B,YAAY,EAAE,IAAI,CAAC,UAAU,CAAC,GAAG,EAAE,SAAS,CAAC;YAC7C,mBAAmB,EAAE,IAAI,qBAAqB,EAAE;SACjD,CAAC;IACJ,CAAC;IAED;;;OAGG;IACK,GAAG,CAAC,GAAe;QACzB,OAAO;YACL,iBAAiB,EAAE,KAAK;YACxB,YAAY,EAAE,IAAI,CAAC,UAAU,CAAC,GAAG,EAAE,KAAK,CAAC;YACzC,mBAAmB,EAAE,IAAI,qBAAqB,CAC5C,IAAI,CAAC,KAAK,CAAC,mBAAmB,IAAI,EAAE,CACrC;SACF,CAAC;IACJ,CAAC;IAEO,UAAU,CAChB,GAAe,EACf,cAAwC;QAExC,OAAO,IAAI,8BAA8B,CAAC;YACxC,iBAAiB,EAAE,IAAI,CAAC,KAAK,CAAC,iBAAiB,IAAI,EAAE;YACrD,YAAY,EAAE,IAAI,CAAC,KAAK,CAAC,YAAY;SACtC,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,cAAc,CAAC,CAAC;IAC/B,CAAC;CACF"}

package/dist/service/apigatewayv2/command/route/sim-http-api-route-authorizer-input.d.ts

@@ -0,0 +1,26 @@
+import type { SimHttpApiAuthorizerId, SimHttpApiAuthorizerType } from "../../api/authorizer/sim-http-api-authorizer.js";
+import type { SimHttpApi } from "../../api/sim-http-api.js";
+interface SimHttpApiRouteAuthorizerInputProperties {
+    /** The route's own authorization type, which names the kind it needs. */
+    readonly authorizationType: string;
+    readonly authorizerId: string | undefined;
+}
+/**
+ * Finds the authorizer a route names, of the kind that route authorizes with.
+ *
+ * A route deploying with an `AuthorizerId` that resolved to nothing, or to the
+ * other kind of authorizer, would be open here and closed on AWS, which is the
+ * failure this whole area exists to avoid, so both are refused rather than
+ * created.
+ */
+export declare class SimHttpApiRouteAuthorizerInput {
+    private readonly authorizationType;
+    private readonly authorizerId;
+    constructor(properties: SimHttpApiRouteAuthorizerInputProperties);
+    /**
+     * The id of the authorizer this route sends its requests through.
+     */
+    read(api: SimHttpApi, authorizerType: SimHttpApiAuthorizerType): SimHttpApiAuthorizerId;
+}
+export {};
+//# sourceMappingURL=sim-http-api-route-authorizer-input.d.ts.map

package/dist/service/apigatewayv2/command/route/sim-http-api-route-authorizer-input.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-http-api-route-authorizer-input.d.ts","sourceRoot":"","sources":["../../../../../src/service/apigatewayv2/command/route/sim-http-api-route-authorizer-input.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,sBAAsB,EACtB,wBAAwB,EACzB,MAAM,iDAAiD,CAAC;AACzD,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,2BAA2B,CAAC;AAG5D,UAAU,wCAAwC;IAChD,yEAAyE;IACzE,QAAQ,CAAC,iBAAiB,EAAE,MAAM,CAAC;IACnC,QAAQ,CAAC,YAAY,EAAE,MAAM,GAAG,SAAS,CAAC;CAC3C;AAED;;;;;;;GAOG;AACH,qBAAa,8BAA8B;IACzC,OAAO,CAAC,QAAQ,CAAC,iBAAiB,CAAS;IAC3C,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAqB;IAElD,YAAY,UAAU,EAAE,wCAAwC,EAG/D;IAED;;OAEG;IACH,IAAI,CACF,GAAG,EAAE,UAAU,EACf,cAAc,EAAE,wBAAwB,GACvC,sBAAsB,CA6BxB;CACF"}

package/dist/service/apigatewayv2/command/route/sim-http-api-route-authorizer-input.js

@@ -0,0 +1,40 @@
+import { SimApiGatewayV2BadRequest } from "../../error/sim-api-gateway-v2.error.js";
+/**
+ * Finds the authorizer a route names, of the kind that route authorizes with.
+ *
+ * A route deploying with an `AuthorizerId` that resolved to nothing, or to the
+ * other kind of authorizer, would be open here and closed on AWS, which is the
+ * failure this whole area exists to avoid, so both are refused rather than
+ * created.
+ */
+export class SimHttpApiRouteAuthorizerInput {
+    authorizationType;
+    authorizerId;
+    constructor(properties) {
+        this.authorizationType = properties.authorizationType;
+        this.authorizerId = properties.authorizerId;
+    }
+    /**
+     * The id of the authorizer this route sends its requests through.
+     */
+    read(api, authorizerType) {
+        const authorizerId = this.authorizerId;
+        if (authorizerId === undefined || authorizerId.length === 0) {
+            throw new SimApiGatewayV2BadRequest(`CreateRoute with AuthorizationType ${this.authorizationType} ` +
+                `requires AuthorizerId`);
+        }
+        const authorizer = api.authorizers.find(authorizerId);
+        if (authorizer === undefined) {
+            throw new SimApiGatewayV2BadRequest(`CreateRoute AuthorizerId ${authorizerId} names no authorizer on ` +
+                `API ${api.apiId}. The route would be open here and closed on AWS.`);
+        }
+        if (authorizer.authorizerType !== authorizerType) {
+            throw new SimApiGatewayV2BadRequest(`CreateRoute AuthorizerId ${authorizerId} names a ` +
+                `${authorizer.authorizerType} authorizer on API ${api.apiId}, and ` +
+                `an AuthorizationType of ${this.authorizationType} takes a ` +
+                `${authorizerType} one`);
+        }
+        return authorizer.authorizerId;
+    }
+}
+//# sourceMappingURL=sim-http-api-route-authorizer-input.js.map

package/dist/service/apigatewayv2/command/route/sim-http-api-route-authorizer-input.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-http-api-route-authorizer-input.js","sourceRoot":"","sources":["../../../../../src/service/apigatewayv2/command/route/sim-http-api-route-authorizer-input.ts"],"names":[],"mappings":"AAKA,OAAO,EAAE,yBAAyB,EAAE,MAAM,yCAAyC,CAAC;AAQpF;;;;;;;GAOG;AACH,MAAM,OAAO,8BAA8B;IACxB,iBAAiB,CAAS;IAC1B,YAAY,CAAqB;IAElD,YAAY,UAAoD;QAC9D,IAAI,CAAC,iBAAiB,GAAG,UAAU,CAAC,iBAAiB,CAAC;QACtD,IAAI,CAAC,YAAY,GAAG,UAAU,CAAC,YAAY,CAAC;IAC9C,CAAC;IAED;;OAEG;IACH,IAAI,CACF,GAAe,EACf,cAAwC;QAExC,MAAM,YAAY,GAAG,IAAI,CAAC,YAAY,CAAC;QAEvC,IAAI,YAAY,KAAK,SAAS,IAAI,YAAY,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC5D,MAAM,IAAI,yBAAyB,CACjC,sCAAsC,IAAI,CAAC,iBAAiB,GAAG;gBAC7D,uBAAuB,CAC1B,CAAC;QACJ,CAAC;QAED,MAAM,UAAU,GAAG,GAAG,CAAC,WAAW,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;QAEtD,IAAI,UAAU,KAAK,SAAS,EAAE,CAAC;YAC7B,MAAM,IAAI,yBAAyB,CACjC,4BAA4B,YAAY,0BAA0B;gBAChE,OAAO,GAAG,CAAC,KAAK,mDAAmD,CACtE,CAAC;QACJ,CAAC;QAED,IAAI,UAAU,CAAC,cAAc,KAAK,cAAc,EAAE,CAAC;YACjD,MAAM,IAAI,yBAAyB,CACjC,4BAA4B,YAAY,WAAW;gBACjD,GAAG,UAAU,CAAC,cAAc,sBAAsB,GAAG,CAAC,KAAK,QAAQ;gBACnE,2BAA2B,IAAI,CAAC,iBAAiB,WAAW;gBAC5D,GAAG,cAAc,MAAM,CAC1B,CAAC;QACJ,CAAC;QAED,OAAO,UAAU,CAAC,YAAY,CAAC;IACjC,CAAC;CACF"}

package/dist/service/apigatewayv2/command/route/sim-http-api-route-commands.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sim-http-api-route-commands.d.ts","sourceRoot":"","sources":["../../../../../src/service/apigatewayv2/command/route/sim-http-api-route-commands.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,6BAA6B,EAAE,MAAM,0CAA0C,CAAC;AAE9F,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,2BAA2B,CAAC;AAClE,OAAO,KAAK,EACV,qBAAqB,EACrB,2BAA2B,EAC3B,mBAAmB,EACnB,yBAAyB,EAC1B,MAAM,oBAAoB,CAAC;AAuB5B,UAAU,iCAAiC;IACzC,QAAQ,CAAC,MAAM,EAAE,gBAAgB,CAAC;CACnC;AAED;;GAEG;AACH,qBAAa,uBAAuB;IAClC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAmB;IAC1C,OAAO,CAAC,QAAQ,CAAC,WAAW,CAA+B;IAC3D,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAkC;IAEjE,YAAY,UAAU,EAAE,iCAAiC,EAExD;IAED;;OAEG;IACH,WAAW,CACT,OAAO,EAAE,qBAAqB,EAC9B,OAAO,CAAC,EAAE,6BAA6B,GACtC,2BAA2B,CAwC7B;IAED;;OAEG;IACH,SAAS,CACP,OAAO,EAAE,mBAAmB,EAC5B,OAAO,CAAC,EAAE,6BAA6B,GACtC,yBAAyB,CAiB3B;CACF"}
+{"version":3,"file":"sim-http-api-route-commands.d.ts","sourceRoot":"","sources":["../../../../../src/service/apigatewayv2/command/route/sim-http-api-route-commands.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,6BAA6B,EAAE,MAAM,0CAA0C,CAAC;AAE9F,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,2BAA2B,CAAC;AAClE,OAAO,KAAK,EACV,qBAAqB,EACrB,2BAA2B,EAC3B,mBAAmB,EACnB,yBAAyB,EAC1B,MAAM,oBAAoB,CAAC;AAqB5B,UAAU,iCAAiC;IACzC,QAAQ,CAAC,MAAM,EAAE,gBAAgB,CAAC;CACnC;AAED;;GAEG;AACH,qBAAa,uBAAuB;IAClC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAmB;IAC1C,OAAO,CAAC,QAAQ,CAAC,WAAW,CAA+B;IAC3D,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAkC;IAEjE,YAAY,UAAU,EAAE,iCAAiC,EAExD;IAED;;OAEG;IACH,WAAW,CACT,OAAO,EAAE,qBAAqB,EAC9B,OAAO,CAAC,EAAE,6BAA6B,GACtC,2BAA2B,CAwC7B;IAED;;OAEG;IACH,SAAS,CACP,OAAO,EAAE,mBAAmB,EAC5B,OAAO,CAAC,EAAE,6BAA6B,GACtC,yBAAyB,CAiB3B;CACF"}

package/dist/service/apigatewayv2/command/route/sim-http-api-route-commands.js

@@ -13,12 +13,10 @@ const acceptedCreateRouteOptions = [
     "AuthorizationScopes",
 ];
 /**
- * The authorization types a route may ask for.
- *
- * `CUSTOM`, a Lambda authorizer, is refused rather than created open: a route
- * asking for it would admit anyone here and refuse them on AWS.
+ * The authorization types a route may ask for, which is every one an HTTP API
+ * route has.
  */
-const simulatedAuthorizationTypes = ["NONE", "JWT", "AWS_IAM"];
+const simulatedAuthorizationTypes = ["NONE", "JWT", "AWS_IAM", "CUSTOM"];
 /**
  * The commands addressing the routes of an API.
  */
@@ -40,7 +38,7 @@ export class SimHttpApiRouteCommands {
         // Parsed before the API is looked up, because a malformed route key is a
         // bad request whether or not the API it names exists.
         const routeKey = this.routeKeyParser.parse(unsimulated.require("RouteKey", input.RouteKey));
-        unsimulated.refuseUnlessOneOf("AuthorizationType", input.AuthorizationType, simulatedAuthorizationTypes, "Lambda route authorization is not simulated");
+        unsimulated.refuseUnlessOneOf("AuthorizationType", input.AuthorizationType, simulatedAuthorizationTypes, "an HTTP API route authorizes with one of these and nothing else");
         const target = unsimulated.require("Target", input.Target);
         const httpApi = this.access.api({
             method: "POST",

package/dist/service/apigatewayv2/command/route/sim-http-api-route-commands.js.map

@@ -1 +1 @@
-{"version":3,"file":"sim-http-api-route-commands.js","sourceRoot":"","sources":["../../../../../src/service/apigatewayv2/command/route/sim-http-api-route-commands.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,wBAAwB,EAAE,MAAM,sDAAsD,CAAC;AAChG,OAAO,EAAE,eAAe,EAAE,MAAM,uCAAuC,CAAC;AAExE,OAAO,EAAE,+BAA+B,EAAE,MAAM,4CAA4C,CAAC;AAQ7F,OAAO,EAAE,iCAAiC,EAAE,MAAM,uCAAuC,CAAC;AAC1F,OAAO,EAAE,qBAAqB,EAAE,MAAM,gCAAgC,CAAC;AAEvE,MAAM,UAAU,GAAG,SAAS,CAAC;AAE7B,MAAM,0BAA0B,GAAG;IACjC,OAAO;IACP,UAAU;IACV,QAAQ;IACR,mBAAmB;IACnB,cAAc;IACd,qBAAqB;CACtB,CAAC;AAEF;;;;;GAKG;AACH,MAAM,2BAA2B,GAAG,CAAC,MAAM,EAAE,KAAK,EAAE,SAAS,CAAC,CAAC;AAM/D;;GAEG;AACH,MAAM,OAAO,uBAAuB;IACjB,MAAM,CAAmB;IACzB,WAAW,GAAG,IAAI,qBAAqB,EAAE,CAAC;IAC1C,cAAc,GAAG,IAAI,wBAAwB,EAAE,CAAC;IAEjE,YAAY,UAA6C;QACvD,IAAI,CAAC,MAAM,GAAG,UAAU,CAAC,MAAM,CAAC;IAClC,CAAC;IAED;;OAEG;IACH,WAAW,CACT,OAA8B,EAC9B,OAAuC;QAEvC,MAAM,EAAE,KAAK,EAAE,GAAG,OAAO,CAAC;QAC1B,MAAM,WAAW,GAAG,IAAI,+BAA+B,CAAC,aAAa,CAAC,CAAC;QACvE,WAAW,CAAC,gBAAgB,CAAC,KAAK,EAAE,0BAA0B,CAAC,CAAC;QAChE,MAAM,KAAK,GAAG,WAAW,CAAC,OAAO,CAAC,OAAO,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC;QACxD,yEAAyE;QACzE,sDAAsD;QACtD,MAAM,QAAQ,GAAG,IAAI,CAAC,cAAc,CAAC,KAAK,CACxC,WAAW,CAAC,OAAO,CAAC,UAAU,EAAE,KAAK,CAAC,QAAQ,CAAC,CAChD,CAAC;QACF,WAAW,CAAC,iBAAiB,CAC3B,mBAAmB,EACnB,KAAK,CAAC,iBAAiB,EACvB,2BAA2B,EAC3B,6CAA6C,CAC9C,CAAC;QACF,MAAM,MAAM,GAAG,WAAW,CAAC,OAAO,CAAC,QAAQ,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;QAE3D,MAAM,OAAO,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC;YAC9B,MAAM,EAAE,MAAM;YACd,KAAK;YACL,SAAS,EAAE,UAAU;YACrB,MAAM,EAAE,OAAO,EAAE,MAAM;SACxB,CAAC,CAAC;QACH,IAAI,CAAC,WAAW,CAAC,qBAAqB,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;QAC1D,0EAA0E;QAC1E,wEAAwE;QACxE,MAAM,aAAa,GAAG,IAAI,iCAAiC,CAAC,KAAK,CAAC,CAAC,IAAI,CACrE,OAAO,CACR,CAAC;QAEF,MAAM,KAAK,GAAG,IAAI,eAAe,CAAC;YAChC,OAAO,EAAE,OAAO,CAAC,MAAM,CAAC,UAAU,EAAE;YACpC,GAAG,EAAE,QAAQ;YACb,aAAa,EAAE,IAAI,CAAC,WAAW,CAAC,aAAa,CAAC,OAAO,EAAE,MAAM,CAAC;YAC9D,GAAG,aAAa;SACjB,CAAC,CAAC;QACH,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QAE1B,OAAO,EAAE,GAAG,KAAK,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC;IAC5C,CAAC;IAED;;OAEG;IACH,SAAS,CACP,OAA4B,EAC5B,OAAuC;QAEvC,MAAM,WAAW,GAAG,IAAI,+BAA+B,CAAC,WAAW,CAAC,CAAC;QACrE,WAAW,CAAC,YAAY,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;QACxC,WAAW,CAAC,gBAAgB,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC;QACvD,MAAM,KAAK,GAAG,WAAW,CAAC,OAAO,CAAC,OAAO,EAAE,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QAEhE,MAAM,OAAO,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC;YAC9B,MAAM,EAAE,KAAK;YACb,KAAK;YACL,SAAS,EAAE,UAAU;YACrB,MAAM,EAAE,OAAO,EAAE,MAAM;SACxB,CAAC,CAAC;QAEH,OAAO;YACL,KAAK,EAAE,OAAO,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;YACzD,SAAS,EAAE,EAAE;SACd,CAAC;IACJ,CAAC;CACF"}
+{"version":3,"file":"sim-http-api-route-commands.js","sourceRoot":"","sources":["../../../../../src/service/apigatewayv2/command/route/sim-http-api-route-commands.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,wBAAwB,EAAE,MAAM,sDAAsD,CAAC;AAChG,OAAO,EAAE,eAAe,EAAE,MAAM,uCAAuC,CAAC;AAExE,OAAO,EAAE,+BAA+B,EAAE,MAAM,4CAA4C,CAAC;AAQ7F,OAAO,EAAE,iCAAiC,EAAE,MAAM,uCAAuC,CAAC;AAC1F,OAAO,EAAE,qBAAqB,EAAE,MAAM,gCAAgC,CAAC;AAEvE,MAAM,UAAU,GAAG,SAAS,CAAC;AAE7B,MAAM,0BAA0B,GAAG;IACjC,OAAO;IACP,UAAU;IACV,QAAQ;IACR,mBAAmB;IACnB,cAAc;IACd,qBAAqB;CACtB,CAAC;AAEF;;;GAGG;AACH,MAAM,2BAA2B,GAAG,CAAC,MAAM,EAAE,KAAK,EAAE,SAAS,EAAE,QAAQ,CAAC,CAAC;AAMzE;;GAEG;AACH,MAAM,OAAO,uBAAuB;IACjB,MAAM,CAAmB;IACzB,WAAW,GAAG,IAAI,qBAAqB,EAAE,CAAC;IAC1C,cAAc,GAAG,IAAI,wBAAwB,EAAE,CAAC;IAEjE,YAAY,UAA6C;QACvD,IAAI,CAAC,MAAM,GAAG,UAAU,CAAC,MAAM,CAAC;IAClC,CAAC;IAED;;OAEG;IACH,WAAW,CACT,OAA8B,EAC9B,OAAuC;QAEvC,MAAM,EAAE,KAAK,EAAE,GAAG,OAAO,CAAC;QAC1B,MAAM,WAAW,GAAG,IAAI,+BAA+B,CAAC,aAAa,CAAC,CAAC;QACvE,WAAW,CAAC,gBAAgB,CAAC,KAAK,EAAE,0BAA0B,CAAC,CAAC;QAChE,MAAM,KAAK,GAAG,WAAW,CAAC,OAAO,CAAC,OAAO,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC;QACxD,yEAAyE;QACzE,sDAAsD;QACtD,MAAM,QAAQ,GAAG,IAAI,CAAC,cAAc,CAAC,KAAK,CACxC,WAAW,CAAC,OAAO,CAAC,UAAU,EAAE,KAAK,CAAC,QAAQ,CAAC,CAChD,CAAC;QACF,WAAW,CAAC,iBAAiB,CAC3B,mBAAmB,EACnB,KAAK,CAAC,iBAAiB,EACvB,2BAA2B,EAC3B,iEAAiE,CAClE,CAAC;QACF,MAAM,MAAM,GAAG,WAAW,CAAC,OAAO,CAAC,QAAQ,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;QAE3D,MAAM,OAAO,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC;YAC9B,MAAM,EAAE,MAAM;YACd,KAAK;YACL,SAAS,EAAE,UAAU;YACrB,MAAM,EAAE,OAAO,EAAE,MAAM;SACxB,CAAC,CAAC;QACH,IAAI,CAAC,WAAW,CAAC,qBAAqB,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;QAC1D,0EAA0E;QAC1E,wEAAwE;QACxE,MAAM,aAAa,GAAG,IAAI,iCAAiC,CAAC,KAAK,CAAC,CAAC,IAAI,CACrE,OAAO,CACR,CAAC;QAEF,MAAM,KAAK,GAAG,IAAI,eAAe,CAAC;YAChC,OAAO,EAAE,OAAO,CAAC,MAAM,CAAC,UAAU,EAAE;YACpC,GAAG,EAAE,QAAQ;YACb,aAAa,EAAE,IAAI,CAAC,WAAW,CAAC,aAAa,CAAC,OAAO,EAAE,MAAM,CAAC;YAC9D,GAAG,aAAa;SACjB,CAAC,CAAC;QACH,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QAE1B,OAAO,EAAE,GAAG,KAAK,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC;IAC5C,CAAC;IAED;;OAEG;IACH,SAAS,CACP,OAA4B,EAC5B,OAAuC;QAEvC,MAAM,WAAW,GAAG,IAAI,+BAA+B,CAAC,WAAW,CAAC,CAAC;QACrE,WAAW,CAAC,YAAY,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;QACxC,WAAW,CAAC,gBAAgB,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC;QACvD,MAAM,KAAK,GAAG,WAAW,CAAC,OAAO,CAAC,OAAO,EAAE,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QAEhE,MAAM,OAAO,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC;YAC9B,MAAM,EAAE,KAAK;YACb,KAAK;YACL,SAAS,EAAE,UAAU;YACrB,MAAM,EAAE,OAAO,EAAE,MAAM;SACxB,CAAC,CAAC;QAEH,OAAO;YACL,KAAK,EAAE,OAAO,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;YACzD,SAAS,EAAE,EAAE;SACd,CAAC;IACJ,CAAC;CACF"}

package/dist/service/apigatewayv2/index.d.ts

@@ -9,7 +9,15 @@ export { type SimHttpApiId, makeSimHttpApiId } from "./api/sim-http-api-id.js";
 export { SimHttpApiIntegration, type SimHttpApiIntegrationId, type SimHttpApiIntegrationType, type SimHttpApiIntegrationView, type SimHttpApiPayloadFormatVersion, } from "./api/integration/sim-http-api-integration.js";
 export { SimHttpApiLambdaUri } from "./api/integration/sim-http-api-lambda-uri.js";
 export { SimHttpApiAuthorizer, type SimHttpApiAuthorizerId, type SimHttpApiAuthorizerType, type SimHttpApiAuthorizerView, } from "./api/authorizer/sim-http-api-authorizer.js";
-export { SimHttpApiIdentitySource } from "./api/authorizer/sim-http-api-identity-source.js";
+export { SimHttpApiJwtAuthorizer } from "./api/authorizer/sim-http-api-jwt-authorizer.js";
+export { simHttpApiAuthorizerPayloadFormatVersion, SimHttpApiRequestAuthorizer, } from "./api/authorizer/sim-http-api-request-authorizer.js";
+export type { SimHttpApiIdentityInput, SimHttpApiIdentitySource, } from "./api/authorizer/identity/sim-http-api-identity-source.js";
+export { SimHttpApiIdentitySourceParser } from "./api/authorizer/identity/sim-http-api-identity-source-parser.js";
+export { SimHttpApiIdentitySources } from "./api/authorizer/identity/sim-http-api-identity-sources.js";
+export { SimHttpApiHeaderIdentitySource } from "./api/authorizer/identity/sim-http-api-header-identity-source.js";
+export { SimHttpApiQueryStringIdentitySource } from "./api/authorizer/identity/sim-http-api-query-string-identity-source.js";
+export { SimHttpApiRouteKeyIdentitySource } from "./api/authorizer/identity/sim-http-api-route-key-identity-source.js";
+export { SimHttpApiAuthorizerResultCache } from "./api/authorizer/sim-http-api-authorizer-result-cache.js";
 export { SimHttpApiJwtConfiguration, type SimHttpApiJwtConfigurationView, } from "./api/authorizer/sim-http-api-jwt-configuration.js";
 export { type SimHttpApiJwtIssuerKeys, SimHttpApiNoJwtIssuerKeys, } from "./api/authorizer/sim-http-api-jwt-issuer-keys.js";
 export { type SimHttpApiAuthorizationType, SimHttpApiRoute, type SimHttpApiRouteId, } from "./api/route/sim-http-api-route.js";
@@ -25,5 +33,6 @@ export { SimHttpApiRoutePath } from "./api/route/path/sim-http-api-route-path.js
 export { SimHttpApiRouteRank } from "./api/route/sim-http-api-route-rank.js";
 export { simHttpApiDefaultStageName, SimHttpApiStage, type SimHttpApiStageView, } from "./api/stage/sim-http-api-stage.js";
 export { SimApiGatewayV2BadRequest, SimApiGatewayV2Conflict, SimApiGatewayV2Error, SimApiGatewayV2NotFound, } from "./error/sim-api-gateway-v2.error.js";
-export type { SimPayload2AuthorizerContext, SimPayload2Event, SimPayload2HttpContext, SimPayload2IamAuthorizer, SimPayload2JwtAuthorizer, SimPayload2RequestContext, SimPayload2Result, } from "../../serve/payload-2/sim-payload-2-event.type.js";
+export type { SimHttpApiAuthorizerEvent } from "./serve/auth/sim-http-api-authorizer-event.js";
+export type { SimPayload2AuthorizerContext, SimPayload2Event, SimPayload2HttpContext, SimPayload2IamAuthorizer, SimPayload2JwtAuthorizer, SimPayload2LambdaAuthorizer, SimPayload2RequestContext, SimPayload2Result, } from "../../serve/payload-2/sim-payload-2-event.type.js";
 //# sourceMappingURL=index.d.ts.map

package/dist/service/apigatewayv2/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/service/apigatewayv2/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,MAAM,yBAAyB,CAAC;AAC1D,YAAY,EAAE,6BAA6B,EAAE,MAAM,iDAAiD,CAAC;AACrG,OAAO,EAAE,UAAU,EAAE,MAAM,uBAAuB,CAAC;AACnD,YAAY,EAAE,eAAe,EAAE,MAAM,6BAA6B,CAAC;AACnE,OAAO,EAAE,iBAAiB,EAAE,MAAM,+BAA+B,CAAC;AAClE,YAAY,EACV,sBAAsB,EACtB,cAAc,GACf,MAAM,4BAA4B,CAAC;AACpC,OAAO,EACL,gBAAgB,EAChB,mBAAmB,EACnB,cAAc,EACd,qBAAqB,GACtB,MAAM,4BAA4B,CAAC;AACpC,OAAO,EAAE,KAAK,YAAY,EAAE,gBAAgB,EAAE,MAAM,0BAA0B,CAAC;AAC/E,OAAO,EACL,qBAAqB,EACrB,KAAK,uBAAuB,EAC5B,KAAK,yBAAyB,EAC9B,KAAK,yBAAyB,EAC9B,KAAK,8BAA8B,GACpC,MAAM,+CAA+C,CAAC;AACvD,OAAO,EAAE,mBAAmB,EAAE,MAAM,8CAA8C,CAAC;AACnF,OAAO,EACL,oBAAoB,EACpB,KAAK,sBAAsB,EAC3B,KAAK,wBAAwB,EAC7B,KAAK,wBAAwB,GAC9B,MAAM,6CAA6C,CAAC;AACrD,OAAO,EAAE,wBAAwB,EAAE,MAAM,kDAAkD,CAAC;AAC5F,OAAO,EACL,0BAA0B,EAC1B,KAAK,8BAA8B,GACpC,MAAM,oDAAoD,CAAC;AAC5D,OAAO,EACL,KAAK,uBAAuB,EAC5B,yBAAyB,GAC1B,MAAM,kDAAkD,CAAC;AAC1D,OAAO,EACL,KAAK,2BAA2B,EAChC,eAAe,EACf,KAAK,iBAAiB,GACvB,MAAM,mCAAmC,CAAC;AAC3C,YAAY,EAAE,mBAAmB,EAAE,MAAM,wCAAwC,CAAC;AAClF,OAAO,EAAE,qBAAqB,EAAE,MAAM,0CAA0C,CAAC;AACjF,YAAY,EAAE,kBAAkB,EAAE,MAAM,2CAA2C,CAAC;AACpF,OAAO,EACL,yBAAyB,EACzB,yBAAyB,GAC1B,MAAM,mDAAmD,CAAC;AAC3D,OAAO,EAAE,wBAAwB,EAAE,MAAM,kDAAkD,CAAC;AAC5F,OAAO,EACL,mBAAmB,EACnB,qBAAqB,GACtB,MAAM,8CAA8C,CAAC;AACtD,OAAO,EAAE,wBAAwB,EAAE,MAAM,kDAAkD,CAAC;AAC5F,OAAO,EACL,uBAAuB,EACvB,wBAAwB,GACzB,MAAM,kDAAkD,CAAC;AAC1D,OAAO,EAAE,mBAAmB,EAAE,MAAM,6CAA6C,CAAC;AAClF,OAAO,EAAE,mBAAmB,EAAE,MAAM,wCAAwC,CAAC;AAC7E,OAAO,EACL,0BAA0B,EAC1B,eAAe,EACf,KAAK,mBAAmB,GACzB,MAAM,mCAAmC,CAAC;AAC3C,OAAO,EACL,yBAAyB,EACzB,uBAAuB,EACvB,oBAAoB,EACpB,uBAAuB,GACxB,MAAM,qCAAqC,CAAC;AAC7C,YAAY,EACV,4BAA4B,EAC5B,gBAAgB,EAChB,sBAAsB,EACtB,wBAAwB,EACxB,wBAAwB,EACxB,yBAAyB,EACzB,iBAAiB,GAClB,MAAM,mDAAmD,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/service/apigatewayv2/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,MAAM,yBAAyB,CAAC;AAC1D,YAAY,EAAE,6BAA6B,EAAE,MAAM,iDAAiD,CAAC;AACrG,OAAO,EAAE,UAAU,EAAE,MAAM,uBAAuB,CAAC;AACnD,YAAY,EAAE,eAAe,EAAE,MAAM,6BAA6B,CAAC;AACnE,OAAO,EAAE,iBAAiB,EAAE,MAAM,+BAA+B,CAAC;AAClE,YAAY,EACV,sBAAsB,EACtB,cAAc,GACf,MAAM,4BAA4B,CAAC;AACpC,OAAO,EACL,gBAAgB,EAChB,mBAAmB,EACnB,cAAc,EACd,qBAAqB,GACtB,MAAM,4BAA4B,CAAC;AACpC,OAAO,EAAE,KAAK,YAAY,EAAE,gBAAgB,EAAE,MAAM,0BAA0B,CAAC;AAC/E,OAAO,EACL,qBAAqB,EACrB,KAAK,uBAAuB,EAC5B,KAAK,yBAAyB,EAC9B,KAAK,yBAAyB,EAC9B,KAAK,8BAA8B,GACpC,MAAM,+CAA+C,CAAC;AACvD,OAAO,EAAE,mBAAmB,EAAE,MAAM,8CAA8C,CAAC;AACnF,OAAO,EACL,oBAAoB,EACpB,KAAK,sBAAsB,EAC3B,KAAK,wBAAwB,EAC7B,KAAK,wBAAwB,GAC9B,MAAM,6CAA6C,CAAC;AACrD,OAAO,EAAE,uBAAuB,EAAE,MAAM,iDAAiD,CAAC;AAC1F,OAAO,EACL,wCAAwC,EACxC,2BAA2B,GAC5B,MAAM,qDAAqD,CAAC;AAC7D,YAAY,EACV,uBAAuB,EACvB,wBAAwB,GACzB,MAAM,2DAA2D,CAAC;AACnE,OAAO,EAAE,8BAA8B,EAAE,MAAM,kEAAkE,CAAC;AAClH,OAAO,EAAE,yBAAyB,EAAE,MAAM,4DAA4D,CAAC;AACvG,OAAO,EAAE,8BAA8B,EAAE,MAAM,kEAAkE,CAAC;AAClH,OAAO,EAAE,mCAAmC,EAAE,MAAM,wEAAwE,CAAC;AAC7H,OAAO,EAAE,gCAAgC,EAAE,MAAM,qEAAqE,CAAC;AACvH,OAAO,EAAE,+BAA+B,EAAE,MAAM,0DAA0D,CAAC;AAC3G,OAAO,EACL,0BAA0B,EAC1B,KAAK,8BAA8B,GACpC,MAAM,oDAAoD,CAAC;AAC5D,OAAO,EACL,KAAK,uBAAuB,EAC5B,yBAAyB,GAC1B,MAAM,kDAAkD,CAAC;AAC1D,OAAO,EACL,KAAK,2BAA2B,EAChC,eAAe,EACf,KAAK,iBAAiB,GACvB,MAAM,mCAAmC,CAAC;AAC3C,YAAY,EAAE,mBAAmB,EAAE,MAAM,wCAAwC,CAAC;AAClF,OAAO,EAAE,qBAAqB,EAAE,MAAM,0CAA0C,CAAC;AACjF,YAAY,EAAE,kBAAkB,EAAE,MAAM,2CAA2C,CAAC;AACpF,OAAO,EACL,yBAAyB,EACzB,yBAAyB,GAC1B,MAAM,mDAAmD,CAAC;AAC3D,OAAO,EAAE,wBAAwB,EAAE,MAAM,kDAAkD,CAAC;AAC5F,OAAO,EACL,mBAAmB,EACnB,qBAAqB,GACtB,MAAM,8CAA8C,CAAC;AACtD,OAAO,EAAE,wBAAwB,EAAE,MAAM,kDAAkD,CAAC;AAC5F,OAAO,EACL,uBAAuB,EACvB,wBAAwB,GACzB,MAAM,kDAAkD,CAAC;AAC1D,OAAO,EAAE,mBAAmB,EAAE,MAAM,6CAA6C,CAAC;AAClF,OAAO,EAAE,mBAAmB,EAAE,MAAM,wCAAwC,CAAC;AAC7E,OAAO,EACL,0BAA0B,EAC1B,eAAe,EACf,KAAK,mBAAmB,GACzB,MAAM,mCAAmC,CAAC;AAC3C,OAAO,EACL,yBAAyB,EACzB,uBAAuB,EACvB,oBAAoB,EACpB,uBAAuB,GACxB,MAAM,qCAAqC,CAAC;AAC7C,YAAY,EAAE,yBAAyB,EAAE,MAAM,+CAA+C,CAAC;AAC/F,YAAY,EACV,4BAA4B,EAC5B,gBAAgB,EAChB,sBAAsB,EACtB,wBAAwB,EACxB,wBAAwB,EACxB,2BAA2B,EAC3B,yBAAyB,EACzB,iBAAiB,GAClB,MAAM,mDAAmD,CAAC"}

package/dist/service/apigatewayv2/index.js

@@ -6,7 +6,14 @@ export { makeSimHttpApiId } from "./api/sim-http-api-id.js";
 export { SimHttpApiIntegration, } from "./api/integration/sim-http-api-integration.js";
 export { SimHttpApiLambdaUri } from "./api/integration/sim-http-api-lambda-uri.js";
 export { SimHttpApiAuthorizer, } from "./api/authorizer/sim-http-api-authorizer.js";
-export { SimHttpApiIdentitySource } from "./api/authorizer/sim-http-api-identity-source.js";
+export { SimHttpApiJwtAuthorizer } from "./api/authorizer/sim-http-api-jwt-authorizer.js";
+export { simHttpApiAuthorizerPayloadFormatVersion, SimHttpApiRequestAuthorizer, } from "./api/authorizer/sim-http-api-request-authorizer.js";
+export { SimHttpApiIdentitySourceParser } from "./api/authorizer/identity/sim-http-api-identity-source-parser.js";
+export { SimHttpApiIdentitySources } from "./api/authorizer/identity/sim-http-api-identity-sources.js";
+export { SimHttpApiHeaderIdentitySource } from "./api/authorizer/identity/sim-http-api-header-identity-source.js";
+export { SimHttpApiQueryStringIdentitySource } from "./api/authorizer/identity/sim-http-api-query-string-identity-source.js";
+export { SimHttpApiRouteKeyIdentitySource } from "./api/authorizer/identity/sim-http-api-route-key-identity-source.js";
+export { SimHttpApiAuthorizerResultCache } from "./api/authorizer/sim-http-api-authorizer-result-cache.js";
 export { SimHttpApiJwtConfiguration, } from "./api/authorizer/sim-http-api-jwt-configuration.js";
 export { SimHttpApiNoJwtIssuerKeys, } from "./api/authorizer/sim-http-api-jwt-issuer-keys.js";
 export { SimHttpApiRoute, } from "./api/route/sim-http-api-route.js";

package/dist/service/apigatewayv2/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/service/apigatewayv2/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,MAAM,yBAAyB,CAAC;AAE1D,OAAO,EAAE,UAAU,EAAE,MAAM,uBAAuB,CAAC;AAEnD,OAAO,EAAE,iBAAiB,EAAE,MAAM,+BAA+B,CAAC;AAKlE,OAAO,EACL,gBAAgB,EAChB,mBAAmB,EACnB,cAAc,EACd,qBAAqB,GACtB,MAAM,4BAA4B,CAAC;AACpC,OAAO,EAAqB,gBAAgB,EAAE,MAAM,0BAA0B,CAAC;AAC/E,OAAO,EACL,qBAAqB,GAKtB,MAAM,+CAA+C,CAAC;AACvD,OAAO,EAAE,mBAAmB,EAAE,MAAM,8CAA8C,CAAC;AACnF,OAAO,EACL,oBAAoB,GAIrB,MAAM,6CAA6C,CAAC;AACrD,OAAO,EAAE,wBAAwB,EAAE,MAAM,kDAAkD,CAAC;AAC5F,OAAO,EACL,0BAA0B,GAE3B,MAAM,oDAAoD,CAAC;AAC5D,OAAO,EAEL,yBAAyB,GAC1B,MAAM,kDAAkD,CAAC;AAC1D,OAAO,EAEL,eAAe,GAEhB,MAAM,mCAAmC,CAAC;AAE3C,OAAO,EAAE,qBAAqB,EAAE,MAAM,0CAA0C,CAAC;AAEjF,OAAO,EACL,yBAAyB,EACzB,yBAAyB,GAC1B,MAAM,mDAAmD,CAAC;AAC3D,OAAO,EAAE,wBAAwB,EAAE,MAAM,kDAAkD,CAAC;AAC5F,OAAO,EACL,mBAAmB,EACnB,qBAAqB,GACtB,MAAM,8CAA8C,CAAC;AACtD,OAAO,EAAE,wBAAwB,EAAE,MAAM,kDAAkD,CAAC;AAC5F,OAAO,EACL,uBAAuB,EACvB,wBAAwB,GACzB,MAAM,kDAAkD,CAAC;AAC1D,OAAO,EAAE,mBAAmB,EAAE,MAAM,6CAA6C,CAAC;AAClF,OAAO,EAAE,mBAAmB,EAAE,MAAM,wCAAwC,CAAC;AAC7E,OAAO,EACL,0BAA0B,EAC1B,eAAe,GAEhB,MAAM,mCAAmC,CAAC;AAC3C,OAAO,EACL,yBAAyB,EACzB,uBAAuB,EACvB,oBAAoB,EACpB,uBAAuB,GACxB,MAAM,qCAAqC,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/service/apigatewayv2/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,MAAM,yBAAyB,CAAC;AAE1D,OAAO,EAAE,UAAU,EAAE,MAAM,uBAAuB,CAAC;AAEnD,OAAO,EAAE,iBAAiB,EAAE,MAAM,+BAA+B,CAAC;AAKlE,OAAO,EACL,gBAAgB,EAChB,mBAAmB,EACnB,cAAc,EACd,qBAAqB,GACtB,MAAM,4BAA4B,CAAC;AACpC,OAAO,EAAqB,gBAAgB,EAAE,MAAM,0BAA0B,CAAC;AAC/E,OAAO,EACL,qBAAqB,GAKtB,MAAM,+CAA+C,CAAC;AACvD,OAAO,EAAE,mBAAmB,EAAE,MAAM,8CAA8C,CAAC;AACnF,OAAO,EACL,oBAAoB,GAIrB,MAAM,6CAA6C,CAAC;AACrD,OAAO,EAAE,uBAAuB,EAAE,MAAM,iDAAiD,CAAC;AAC1F,OAAO,EACL,wCAAwC,EACxC,2BAA2B,GAC5B,MAAM,qDAAqD,CAAC;AAK7D,OAAO,EAAE,8BAA8B,EAAE,MAAM,kEAAkE,CAAC;AAClH,OAAO,EAAE,yBAAyB,EAAE,MAAM,4DAA4D,CAAC;AACvG,OAAO,EAAE,8BAA8B,EAAE,MAAM,kEAAkE,CAAC;AAClH,OAAO,EAAE,mCAAmC,EAAE,MAAM,wEAAwE,CAAC;AAC7H,OAAO,EAAE,gCAAgC,EAAE,MAAM,qEAAqE,CAAC;AACvH,OAAO,EAAE,+BAA+B,EAAE,MAAM,0DAA0D,CAAC;AAC3G,OAAO,EACL,0BAA0B,GAE3B,MAAM,oDAAoD,CAAC;AAC5D,OAAO,EAEL,yBAAyB,GAC1B,MAAM,kDAAkD,CAAC;AAC1D,OAAO,EAEL,eAAe,GAEhB,MAAM,mCAAmC,CAAC;AAE3C,OAAO,EAAE,qBAAqB,EAAE,MAAM,0CAA0C,CAAC;AAEjF,OAAO,EACL,yBAAyB,EACzB,yBAAyB,GAC1B,MAAM,mDAAmD,CAAC;AAC3D,OAAO,EAAE,wBAAwB,EAAE,MAAM,kDAAkD,CAAC;AAC5F,OAAO,EACL,mBAAmB,EACnB,qBAAqB,GACtB,MAAM,8CAA8C,CAAC;AACtD,OAAO,EAAE,wBAAwB,EAAE,MAAM,kDAAkD,CAAC;AAC5F,OAAO,EACL,uBAAuB,EACvB,wBAAwB,GACzB,MAAM,kDAAkD,CAAC;AAC1D,OAAO,EAAE,mBAAmB,EAAE,MAAM,6CAA6C,CAAC;AAClF,OAAO,EAAE,mBAAmB,EAAE,MAAM,wCAAwC,CAAC;AAC7E,OAAO,EACL,0BAA0B,EAC1B,eAAe,GAEhB,MAAM,mCAAmC,CAAC;AAC3C,OAAO,EACL,yBAAyB,EACzB,uBAAuB,EACvB,oBAAoB,EACpB,uBAAuB,GACxB,MAAM,qCAAqC,CAAC"}

package/dist/service/apigatewayv2/openapi/sim-http-api-openapi-identity-source.d.ts

@@ -0,0 +1,25 @@
+import type { SimHttpApiOpenApiObject } from "./sim-http-api-openapi-object.js";
+/**
+ * The `identitySource` of an `x-amazon-apigateway-authorizer`.
+ *
+ * A document writes the sources as one comma-separated string, and
+ * CreateAuthorizer takes a list, so the translation is here. How many a
+ * document may name is the kind of authorizer's business: a JWT one reads the
+ * token from one place, and a `REQUEST` one requires everything it names.
+ */
+export declare class SimHttpApiOpenApiIdentitySource {
+    private readonly declared;
+    constructor(authorizer: SimHttpApiOpenApiObject);
+    /**
+     * Every source the document names, which is what a `REQUEST` authorizer
+     * requires a request to carry.
+     */
+    all(): string[];
+    /**
+     * The one place a JWT authorizer reads its token from, refusing a document
+     * naming more.
+     */
+    one(): string[];
+    private sources;
+}
+//# sourceMappingURL=sim-http-api-openapi-identity-source.d.ts.map

package/dist/service/apigatewayv2/openapi/sim-http-api-openapi-identity-source.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-http-api-openapi-identity-source.d.ts","sourceRoot":"","sources":["../../../../src/service/apigatewayv2/openapi/sim-http-api-openapi-identity-source.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,kCAAkC,CAAC;AAGhF;;;;;;;GAOG;AACH,qBAAa,+BAA+B;IAC1C,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAyB;IAElD,YAAY,UAAU,EAAE,uBAAuB,EAE9C;IAED;;;OAGG;IACH,GAAG,IAAI,MAAM,EAAE,CAEd;IAED;;;OAGG;IACH,GAAG,IAAI,MAAM,EAAE,CAWd;IAED,OAAO,CAAC,OAAO;CAOhB"}

package/dist/service/apigatewayv2/openapi/sim-http-api-openapi-identity-source.js

@@ -0,0 +1,41 @@
+/**
+ * The `identitySource` of an `x-amazon-apigateway-authorizer`.
+ *
+ * A document writes the sources as one comma-separated string, and
+ * CreateAuthorizer takes a list, so the translation is here. How many a
+ * document may name is the kind of authorizer's business: a JWT one reads the
+ * token from one place, and a `REQUEST` one requires everything it names.
+ */
+export class SimHttpApiOpenApiIdentitySource {
+    declared;
+    constructor(authorizer) {
+        this.declared = authorizer.member("identitySource");
+    }
+    /**
+     * Every source the document names, which is what a `REQUEST` authorizer
+     * requires a request to carry.
+     */
+    all() {
+        return this.sources();
+    }
+    /**
+     * The one place a JWT authorizer reads its token from, refusing a document
+     * naming more.
+     */
+    one() {
+        const sources = this.sources();
+        if (sources.length > 1) {
+            throw this.declared.refusal(`carries ${String(sources.length)} identity sources, and only the ` +
+                `first would be read here`);
+        }
+        return sources;
+    }
+    sources() {
+        return this.declared
+            .requiredString()
+            .split(",")
+            .map((source) => source.trim())
+            .filter((source) => source.length > 0);
+    }
+}
+//# sourceMappingURL=sim-http-api-openapi-identity-source.js.map

package/dist/service/apigatewayv2/openapi/sim-http-api-openapi-identity-source.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-http-api-openapi-identity-source.js","sourceRoot":"","sources":["../../../../src/service/apigatewayv2/openapi/sim-http-api-openapi-identity-source.ts"],"names":[],"mappings":"AAGA;;;;;;;GAOG;AACH,MAAM,OAAO,+BAA+B;IACzB,QAAQ,CAAyB;IAElD,YAAY,UAAmC;QAC7C,IAAI,CAAC,QAAQ,GAAG,UAAU,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC;IACtD,CAAC;IAED;;;OAGG;IACH,GAAG;QACD,OAAO,IAAI,CAAC,OAAO,EAAE,CAAC;IACxB,CAAC;IAED;;;OAGG;IACH,GAAG;QACD,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,EAAE,CAAC;QAE/B,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACvB,MAAM,IAAI,CAAC,QAAQ,CAAC,OAAO,CACzB,WAAW,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,kCAAkC;gBACjE,0BAA0B,CAC7B,CAAC;QACJ,CAAC;QAED,OAAO,OAAO,CAAC;IACjB,CAAC;IAEO,OAAO;QACb,OAAO,IAAI,CAAC,QAAQ;aACjB,cAAc,EAAE;aAChB,KAAK,CAAC,GAAG,CAAC;aACV,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;aAC9B,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IAC3C,CAAC;CACF"}

package/dist/service/apigatewayv2/openapi/sim-http-api-openapi-jwt-authorizer-scheme.d.ts

@@ -0,0 +1,19 @@
+import type { SimCreateAuthorizerCommandInput } from "../command/authorizer/authorizer.command.js";
+import type { SimHttpApiOpenApiObject } from "./sim-http-api-openapi-object.js";
+/**
+ * An `x-amazon-apigateway-authorizer` of `type: jwt`, read into the
+ * CreateAuthorizer input it asks for.
+ *
+ * The issuer and the audiences are handed to CreateAuthorizer as the document
+ * wrote them, so what an authorizer requires is stated where every other caller
+ * reads it.
+ */
+export declare class SimHttpApiOpenApiJwtAuthorizerScheme {
+    private readonly authorizer;
+    constructor(authorizer: SimHttpApiOpenApiObject);
+    /**
+     * The CreateAuthorizer input this authorizer asks for.
+     */
+    createAuthorizerInput(apiId: string, name: string): SimCreateAuthorizerCommandInput;
+}
+//# sourceMappingURL=sim-http-api-openapi-jwt-authorizer-scheme.d.ts.map

package/dist/service/apigatewayv2/openapi/sim-http-api-openapi-jwt-authorizer-scheme.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-http-api-openapi-jwt-authorizer-scheme.d.ts","sourceRoot":"","sources":["../../../../src/service/apigatewayv2/openapi/sim-http-api-openapi-jwt-authorizer-scheme.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,+BAA+B,EAAE,MAAM,6CAA6C,CAAC;AAEnG,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,kCAAkC,CAAC;AAEhF;;;;;;;GAOG;AACH,qBAAa,oCAAoC;IAC/C,OAAO,CAAC,QAAQ,CAAC,UAAU,CAA0B;IAErD,YAAY,UAAU,EAAE,uBAAuB,EAE9C;IAED;;OAEG;IACH,qBAAqB,CACnB,KAAK,EAAE,MAAM,EACb,IAAI,EAAE,MAAM,GACX,+BAA+B,CAejC;CACF"}