@kensio/yulin 1.0.0 → 1.2.0

package/dist/service/apigatewayv2/openapi/sim-http-api-openapi-jwt-authorizer-scheme.js

@@ -0,0 +1,32 @@
+import { SimHttpApiOpenApiIdentitySource } from "./sim-http-api-openapi-identity-source.js";
+/**
+ * An `x-amazon-apigateway-authorizer` of `type: jwt`, read into the
+ * CreateAuthorizer input it asks for.
+ *
+ * The issuer and the audiences are handed to CreateAuthorizer as the document
+ * wrote them, so what an authorizer requires is stated where every other caller
+ * reads it.
+ */
+export class SimHttpApiOpenApiJwtAuthorizerScheme {
+    authorizer;
+    constructor(authorizer) {
+        this.authorizer = authorizer;
+    }
+    /**
+     * The CreateAuthorizer input this authorizer asks for.
+     */
+    createAuthorizerInput(apiId, name) {
+        const configuration = this.authorizer.member("jwtConfiguration").object();
+        return {
+            ApiId: apiId,
+            Name: name,
+            AuthorizerType: "JWT",
+            IdentitySource: new SimHttpApiOpenApiIdentitySource(this.authorizer).one(),
+            JwtConfiguration: {
+                Issuer: configuration.member("issuer").optionalString(),
+                Audience: configuration.member("audience").optionalStringList(),
+            },
+        };
+    }
+}
+//# sourceMappingURL=sim-http-api-openapi-jwt-authorizer-scheme.js.map

package/dist/service/apigatewayv2/openapi/sim-http-api-openapi-jwt-authorizer-scheme.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-http-api-openapi-jwt-authorizer-scheme.js","sourceRoot":"","sources":["../../../../src/service/apigatewayv2/openapi/sim-http-api-openapi-jwt-authorizer-scheme.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,+BAA+B,EAAE,MAAM,2CAA2C,CAAC;AAG5F;;;;;;;GAOG;AACH,MAAM,OAAO,oCAAoC;IAC9B,UAAU,CAA0B;IAErD,YAAY,UAAmC;QAC7C,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC;IAC/B,CAAC;IAED;;OAEG;IACH,qBAAqB,CACnB,KAAa,EACb,IAAY;QAEZ,MAAM,aAAa,GAAG,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,kBAAkB,CAAC,CAAC,MAAM,EAAE,CAAC;QAE1E,OAAO;YACL,KAAK,EAAE,KAAK;YACZ,IAAI,EAAE,IAAI;YACV,cAAc,EAAE,KAAK;YACrB,cAAc,EAAE,IAAI,+BAA+B,CACjD,IAAI,CAAC,UAAU,CAChB,CAAC,GAAG,EAAE;YACP,gBAAgB,EAAE;gBAChB,MAAM,EAAE,aAAa,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,cAAc,EAAE;gBACvD,QAAQ,EAAE,aAAa,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,kBAAkB,EAAE;aAChE;SACF,CAAC;IACJ,CAAC;CACF"}

package/dist/service/apigatewayv2/openapi/sim-http-api-openapi-request-authorizer-scheme.d.ts

@@ -0,0 +1,21 @@
+import type { SimCreateAuthorizerCommandInput } from "../command/authorizer/authorizer.command.js";
+import type { SimHttpApiOpenApiObject } from "./sim-http-api-openapi-object.js";
+/**
+ * An `x-amazon-apigateway-authorizer` of `type: request`, read into the
+ * CreateAuthorizer input it asks for.
+ *
+ * The values are handed to CreateAuthorizer as the document wrote them, so what
+ * a Lambda `REQUEST` authorizer requires is stated where an SDK caller and a
+ * template already meet it. That covers the function URI, and an
+ * `authorizerPayloadFormatVersion` of `1.0`, which builds a different event and
+ * is refused across this simulation.
+ */
+export declare class SimHttpApiOpenApiRequestAuthorizerScheme {
+    private readonly authorizer;
+    constructor(authorizer: SimHttpApiOpenApiObject);
+    /**
+     * The CreateAuthorizer input this authorizer asks for.
+     */
+    createAuthorizerInput(apiId: string, name: string): SimCreateAuthorizerCommandInput;
+}
+//# sourceMappingURL=sim-http-api-openapi-request-authorizer-scheme.d.ts.map

package/dist/service/apigatewayv2/openapi/sim-http-api-openapi-request-authorizer-scheme.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-http-api-openapi-request-authorizer-scheme.d.ts","sourceRoot":"","sources":["../../../../src/service/apigatewayv2/openapi/sim-http-api-openapi-request-authorizer-scheme.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,+BAA+B,EAAE,MAAM,6CAA6C,CAAC;AAEnG,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,kCAAkC,CAAC;AAiBhF;;;;;;;;;GASG;AACH,qBAAa,wCAAwC;IACnD,OAAO,CAAC,QAAQ,CAAC,UAAU,CAA0B;IAErD,YAAY,UAAU,EAAE,uBAAuB,EAE9C;IAED;;OAEG;IACH,qBAAqB,CACnB,KAAK,EAAE,MAAM,EACb,IAAI,EAAE,MAAM,GACX,+BAA+B,CAyBjC;CACF"}

package/dist/service/apigatewayv2/openapi/sim-http-api-openapi-request-authorizer-scheme.js

@@ -0,0 +1,51 @@
+import { SimHttpApiOpenApiIdentitySource } from "./sim-http-api-openapi-identity-source.js";
+const authorizerCredentials = "names an IAM Role for API Gateway to assume before invoking the authorizer " +
+    "function, and nothing here assumes one: the function's own resource policy " +
+    "is what admits the call";
+/**
+ * The members that belong to a REST API's authorizers rather than an HTTP
+ * API's, refused rather than ignored so a document written for a REST API does
+ * not import as something quieter than it says.
+ */
+const restOnlyMembers = ["identityValidationExpression", "providerARNs"];
+const restOnly = "configures a REST API authorizer, and an HTTP API applies none of it";
+/**
+ * An `x-amazon-apigateway-authorizer` of `type: request`, read into the
+ * CreateAuthorizer input it asks for.
+ *
+ * The values are handed to CreateAuthorizer as the document wrote them, so what
+ * a Lambda `REQUEST` authorizer requires is stated where an SDK caller and a
+ * template already meet it. That covers the function URI, and an
+ * `authorizerPayloadFormatVersion` of `1.0`, which builds a different event and
+ * is refused across this simulation.
+ */
+export class SimHttpApiOpenApiRequestAuthorizerScheme {
+    authorizer;
+    constructor(authorizer) {
+        this.authorizer = authorizer;
+    }
+    /**
+     * The CreateAuthorizer input this authorizer asks for.
+     */
+    createAuthorizerInput(apiId, name) {
+        this.authorizer.refuseMember("authorizerCredentials", authorizerCredentials);
+        this.authorizer.refuseMembers(restOnlyMembers, restOnly);
+        return {
+            ApiId: apiId,
+            Name: name,
+            AuthorizerType: "REQUEST",
+            IdentitySource: new SimHttpApiOpenApiIdentitySource(this.authorizer).all(),
+            AuthorizerUri: this.authorizer.member("authorizerUri").optionalString(),
+            AuthorizerPayloadFormatVersion: this.authorizer
+                .member("authorizerPayloadFormatVersion")
+                .optionalString(),
+            EnableSimpleResponses: this.authorizer
+                .member("enableSimpleResponses")
+                .optionalBoolean(),
+            AuthorizerResultTtlInSeconds: this.authorizer
+                .member("authorizerResultTtlInSeconds")
+                .optionalNumber(),
+        };
+    }
+}
+//# sourceMappingURL=sim-http-api-openapi-request-authorizer-scheme.js.map

package/dist/service/apigatewayv2/openapi/sim-http-api-openapi-request-authorizer-scheme.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-http-api-openapi-request-authorizer-scheme.js","sourceRoot":"","sources":["../../../../src/service/apigatewayv2/openapi/sim-http-api-openapi-request-authorizer-scheme.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,+BAA+B,EAAE,MAAM,2CAA2C,CAAC;AAG5F,MAAM,qBAAqB,GACzB,6EAA6E;IAC7E,6EAA6E;IAC7E,yBAAyB,CAAC;AAE5B;;;;GAIG;AACH,MAAM,eAAe,GAAG,CAAC,8BAA8B,EAAE,cAAc,CAAC,CAAC;AAEzE,MAAM,QAAQ,GACZ,sEAAsE,CAAC;AAEzE;;;;;;;;;GASG;AACH,MAAM,OAAO,wCAAwC;IAClC,UAAU,CAA0B;IAErD,YAAY,UAAmC;QAC7C,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC;IAC/B,CAAC;IAED;;OAEG;IACH,qBAAqB,CACnB,KAAa,EACb,IAAY;QAEZ,IAAI,CAAC,UAAU,CAAC,YAAY,CAC1B,uBAAuB,EACvB,qBAAqB,CACtB,CAAC;QACF,IAAI,CAAC,UAAU,CAAC,aAAa,CAAC,eAAe,EAAE,QAAQ,CAAC,CAAC;QAEzD,OAAO;YACL,KAAK,EAAE,KAAK;YACZ,IAAI,EAAE,IAAI;YACV,cAAc,EAAE,SAAS;YACzB,cAAc,EAAE,IAAI,+BAA+B,CACjD,IAAI,CAAC,UAAU,CAChB,CAAC,GAAG,EAAE;YACP,aAAa,EAAE,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC,cAAc,EAAE;YACvE,8BAA8B,EAAE,IAAI,CAAC,UAAU;iBAC5C,MAAM,CAAC,gCAAgC,CAAC;iBACxC,cAAc,EAAE;YACnB,qBAAqB,EAAE,IAAI,CAAC,UAAU;iBACnC,MAAM,CAAC,uBAAuB,CAAC;iBAC/B,eAAe,EAAE;YACpB,4BAA4B,EAAE,IAAI,CAAC,UAAU;iBAC1C,MAAM,CAAC,8BAA8B,CAAC;iBACtC,cAAc,EAAE;SACpB,CAAC;IACJ,CAAC;CACF"}

package/dist/service/apigatewayv2/openapi/sim-http-api-openapi-route-authorization.d.ts

@@ -27,9 +27,18 @@ export declare class SimHttpApiOpenApiAuthorization {
      */
     of(apiId: string, operation: SimHttpApiOpenApiOperation, schemes: SimHttpApiOpenApiSecuritySchemes): SimHttpApiOpenApiRouteAuthorization;
     /**
-     * A route the named authorizer decides, asking for the requirement's scopes.
+     * Create the authorizer a requirement's scheme declares, remembering it for
+     * the next operation naming the same scheme.
      */
-    private jwt;
+    private create;
+    /**
+     * A route the named authorizer decides, of the type that authorizer is.
+     *
+     * A Lambda `REQUEST` authorizer makes a `CUSTOM` route, and the requirement's
+     * scopes go with it rather than being dropped: AWS applies route scopes to a
+     * `JWT` route only, so CreateRoute refuses them here.
+     */
+    private authorization;
 }
 export {};
 //# sourceMappingURL=sim-http-api-openapi-route-authorization.d.ts.map

package/dist/service/apigatewayv2/openapi/sim-http-api-openapi-route-authorization.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sim-http-api-openapi-route-authorization.d.ts","sourceRoot":"","sources":["../../../../src/service/apigatewayv2/openapi/sim-http-api-openapi-route-authorization.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,4BAA4B,EAAE,MAAM,2DAA2D,CAAC;AAC9G,OAAO,KAAK,EAAE,0BAA0B,EAAE,MAAM,mCAAmC,CAAC;AACpF,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,mCAAmC,CAAC;AAClF,OAAO,KAAK,EAAE,0BAA0B,EAAE,MAAM,qCAAqC,CAAC;AACtF,OAAO,KAAK,EAAE,gCAAgC,EAAE,MAAM,4CAA4C,CAAC;AAEnG;;GAEG;AACH,MAAM,MAAM,mCAAmC,GAAG,IAAI,CACpD,0BAA0B,EAC1B,mBAAmB,GAAG,cAAc,GAAG,qBAAqB,CAC7D,CAAC;AAEF,UAAU,wCAAwC;IAChD,QAAQ,CAAC,kBAAkB,EAAE,4BAA4B,CAAC;IAC1D,QAAQ,CAAC,OAAO,EAAE,wBAAwB,CAAC;CAC5C;AAED;;;;;;GAMG;AACH,qBAAa,8BAA8B;IACzC,OAAO,CAAC,QAAQ,CAAC,kBAAkB,CAA+B;IAClE,OAAO,CAAC,QAAQ,CAAC,OAAO,CAA2B;IAEnD,YAAY,UAAU,EAAE,wCAAwC,EAG/D;IAED;;OAEG;IACH,EAAE,CACA,KAAK,EAAE,MAAM,EACb,SAAS,EAAE,0BAA0B,EACrC,OAAO,EAAE,gCAAgC,GACxC,mCAAmC,CAoBrC;IAED;;OAEG;IACH,OAAO,CAAC,GAAG;CAUZ"}
+{"version":3,"file":"sim-http-api-openapi-route-authorization.d.ts","sourceRoot":"","sources":["../../../../src/service/apigatewayv2/openapi/sim-http-api-openapi-route-authorization.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,4BAA4B,EAAE,MAAM,2DAA2D,CAAC;AAC9G,OAAO,KAAK,EAAE,0BAA0B,EAAE,MAAM,mCAAmC,CAAC;AACpF,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,mCAAmC,CAAC;AAClF,OAAO,KAAK,EACV,0BAA0B,EAE3B,MAAM,qCAAqC,CAAC;AAC7C,OAAO,KAAK,EAAE,gCAAgC,EAAE,MAAM,4CAA4C,CAAC;AAEnG;;GAEG;AACH,MAAM,MAAM,mCAAmC,GAAG,IAAI,CACpD,0BAA0B,EAC1B,mBAAmB,GAAG,cAAc,GAAG,qBAAqB,CAC7D,CAAC;AAEF,UAAU,wCAAwC;IAChD,QAAQ,CAAC,kBAAkB,EAAE,4BAA4B,CAAC;IAC1D,QAAQ,CAAC,OAAO,EAAE,wBAAwB,CAAC;CAC5C;AAED;;;;;;GAMG;AACH,qBAAa,8BAA8B;IACzC,OAAO,CAAC,QAAQ,CAAC,kBAAkB,CAA+B;IAClE,OAAO,CAAC,QAAQ,CAAC,OAAO,CAA2B;IAEnD,YAAY,UAAU,EAAE,wCAAwC,EAG/D;IAED;;OAEG;IACH,EAAE,CACA,KAAK,EAAE,MAAM,EACb,SAAS,EAAE,0BAA0B,EACrC,OAAO,EAAE,gCAAgC,GACxC,mCAAmC,CAgBrC;IAED;;;OAGG;IACH,OAAO,CAAC,MAAM;IAcd;;;;;;OAMG;IACH,OAAO,CAAC,aAAa;CAkBtB"}

package/dist/service/apigatewayv2/openapi/sim-http-api-openapi-route-authorization.js

@@ -20,22 +20,41 @@ export class SimHttpApiOpenApiAuthorization {
         if (requirement === undefined) {
             return { AuthorizationType: "NONE" };
         }
-        const shared = schemes.createdId(requirement.schemeName);
+        const shared = schemes.createdAuthorizer(requirement.schemeName);
         if (shared !== undefined) {
-            return this.jwt(shared, requirement.scopes);
+            return this.authorization(shared, requirement.scopes);
         }
+        const created = this.create(apiId, requirement, schemes);
+        return this.authorization(created, requirement.scopes);
+    }
+    /**
+     * Create the authorizer a requirement's scheme declares, remembering it for
+     * the next operation naming the same scheme.
+     */
+    create(apiId, requirement, schemes) {
         const input = schemes.authorizerInput(apiId, requirement);
         const created = this.command.run(requirement.value.pointer, () => this.authorizerCommands.createAuthorizer({ input }));
-        schemes.remember(requirement.schemeName, created.AuthorizerId);
-        return this.jwt(created.AuthorizerId, requirement.scopes);
+        schemes.remember(requirement.schemeName, created);
+        return created;
     }
     /**
-     * A route the named authorizer decides, asking for the requirement's scopes.
+     * A route the named authorizer decides, of the type that authorizer is.
+     *
+     * A Lambda `REQUEST` authorizer makes a `CUSTOM` route, and the requirement's
+     * scopes go with it rather than being dropped: AWS applies route scopes to a
+     * `JWT` route only, so CreateRoute refuses them here.
      */
-    jwt(authorizerId, scopes) {
+    authorization(authorizer, scopes) {
+        if (authorizer.AuthorizerType === "REQUEST") {
+            return {
+                AuthorizationType: "CUSTOM",
+                AuthorizerId: authorizer.AuthorizerId,
+                AuthorizationScopes: scopes,
+            };
+        }
         return {
             AuthorizationType: "JWT",
-            AuthorizerId: authorizerId,
+            AuthorizerId: authorizer.AuthorizerId,
             AuthorizationScopes: scopes,
         };
     }

package/dist/service/apigatewayv2/openapi/sim-http-api-openapi-route-authorization.js.map

@@ -1 +1 @@
-{"version":3,"file":"sim-http-api-openapi-route-authorization.js","sourceRoot":"","sources":["../../../../src/service/apigatewayv2/openapi/sim-http-api-openapi-route-authorization.ts"],"names":[],"mappings":"AAmBA;;;;;;GAMG;AACH,MAAM,OAAO,8BAA8B;IACxB,kBAAkB,CAA+B;IACjD,OAAO,CAA2B;IAEnD,YAAY,UAAoD;QAC9D,IAAI,CAAC,kBAAkB,GAAG,UAAU,CAAC,kBAAkB,CAAC;QACxD,IAAI,CAAC,OAAO,GAAG,UAAU,CAAC,OAAO,CAAC;IACpC,CAAC;IAED;;OAEG;IACH,EAAE,CACA,KAAa,EACb,SAAqC,EACrC,OAAyC;QAEzC,MAAM,WAAW,GAAG,SAAS,CAAC,QAAQ,EAAE,CAAC;QAEzC,IAAI,WAAW,KAAK,SAAS,EAAE,CAAC;YAC9B,OAAO,EAAE,iBAAiB,EAAE,MAAM,EAAE,CAAC;QACvC,CAAC;QAED,MAAM,MAAM,GAAG,OAAO,CAAC,SAAS,CAAC,WAAW,CAAC,UAAU,CAAC,CAAC;QAEzD,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;YACzB,OAAO,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC;QAC9C,CAAC;QAED,MAAM,KAAK,GAAG,OAAO,CAAC,eAAe,CAAC,KAAK,EAAE,WAAW,CAAC,CAAC;QAC1D,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,WAAW,CAAC,KAAK,CAAC,OAAO,EAAE,GAAG,EAAE,CAC/D,IAAI,CAAC,kBAAkB,CAAC,gBAAgB,CAAC,EAAE,KAAK,EAAE,CAAC,CACpD,CAAC;QACF,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAC,UAAU,EAAE,OAAO,CAAC,YAAY,CAAC,CAAC;QAE/D,OAAO,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,YAAY,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC;IAC5D,CAAC;IAED;;OAEG;IACK,GAAG,CACT,YAAoB,EACpB,MAAyB;QAEzB,OAAO;YACL,iBAAiB,EAAE,KAAK;YACxB,YAAY,EAAE,YAAY;YAC1B,mBAAmB,EAAE,MAAM;SAC5B,CAAC;IACJ,CAAC;CACF"}
+{"version":3,"file":"sim-http-api-openapi-route-authorization.js","sourceRoot":"","sources":["../../../../src/service/apigatewayv2/openapi/sim-http-api-openapi-route-authorization.ts"],"names":[],"mappings":"AAuBA;;;;;;GAMG;AACH,MAAM,OAAO,8BAA8B;IACxB,kBAAkB,CAA+B;IACjD,OAAO,CAA2B;IAEnD,YAAY,UAAoD;QAC9D,IAAI,CAAC,kBAAkB,GAAG,UAAU,CAAC,kBAAkB,CAAC;QACxD,IAAI,CAAC,OAAO,GAAG,UAAU,CAAC,OAAO,CAAC;IACpC,CAAC;IAED;;OAEG;IACH,EAAE,CACA,KAAa,EACb,SAAqC,EACrC,OAAyC;QAEzC,MAAM,WAAW,GAAG,SAAS,CAAC,QAAQ,EAAE,CAAC;QAEzC,IAAI,WAAW,KAAK,SAAS,EAAE,CAAC;YAC9B,OAAO,EAAE,iBAAiB,EAAE,MAAM,EAAE,CAAC;QACvC,CAAC;QAED,MAAM,MAAM,GAAG,OAAO,CAAC,iBAAiB,CAAC,WAAW,CAAC,UAAU,CAAC,CAAC;QAEjE,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;YACzB,OAAO,IAAI,CAAC,aAAa,CAAC,MAAM,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC;QACxD,CAAC;QAED,MAAM,OAAO,GAAG,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,WAAW,EAAE,OAAO,CAAC,CAAC;QAEzD,OAAO,IAAI,CAAC,aAAa,CAAC,OAAO,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC;IACzD,CAAC;IAED;;;OAGG;IACK,MAAM,CACZ,KAAa,EACb,WAAiD,EACjD,OAAyC;QAEzC,MAAM,KAAK,GAAG,OAAO,CAAC,eAAe,CAAC,KAAK,EAAE,WAAW,CAAC,CAAC;QAC1D,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,WAAW,CAAC,KAAK,CAAC,OAAO,EAAE,GAAG,EAAE,CAC/D,IAAI,CAAC,kBAAkB,CAAC,gBAAgB,CAAC,EAAE,KAAK,EAAE,CAAC,CACpD,CAAC;QACF,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;QAElD,OAAO,OAAO,CAAC;IACjB,CAAC;IAED;;;;;;OAMG;IACK,aAAa,CACnB,UAAoC,EACpC,MAAyB;QAEzB,IAAI,UAAU,CAAC,cAAc,KAAK,SAAS,EAAE,CAAC;YAC5C,OAAO;gBACL,iBAAiB,EAAE,QAAQ;gBAC3B,YAAY,EAAE,UAAU,CAAC,YAAY;gBACrC,mBAAmB,EAAE,MAAM;aAC5B,CAAC;QACJ,CAAC;QAED,OAAO;YACL,iBAAiB,EAAE,KAAK;YACxB,YAAY,EAAE,UAAU,CAAC,YAAY;YACrC,mBAAmB,EAAE,MAAM;SAC5B,CAAC;IACJ,CAAC;CACF"}

package/dist/service/apigatewayv2/openapi/sim-http-api-openapi-security-scheme.d.ts

@@ -4,10 +4,9 @@ import type { SimHttpApiOpenApiObject } from "./sim-http-api-openapi-object.js";
  * One `components.securitySchemes` member, read into the CreateAuthorizer
  * input the operations naming it ask for.
  *
- * The issuer and the audiences are handed to CreateAuthorizer as the document
- * wrote them, so what an authorizer requires is stated where every other
- * caller reads it. Only the translation is here: a document writes the
- * identity sources as one comma-separated string, and the command takes a list.
+ * Which of the two kinds of authorizer a scheme carries is decided here, and
+ * reading each kind is the class named after it. A scheme whose type and
+ * whose extension disagree is refused rather than resolved either way.
  */
 export declare class SimHttpApiOpenApiSecurityScheme {
     private readonly scheme;
@@ -17,13 +16,14 @@ export declare class SimHttpApiOpenApiSecurityScheme {
      */
     createAuthorizerInput(apiId: string, name: string): SimCreateAuthorizerCommandInput;
     /**
-     * The `x-amazon-apigateway-authorizer` this scheme carries, refusing every
-     * other kind of scheme and every other kind of authorizer.
+     * The kind of authorizer this scheme's own type declares, refusing every
+     * scheme type an HTTP API route cannot use.
      */
-    private jwtAuthorizer;
+    private authorizerType;
     /**
-     * The one header or query string parameter the token is read from.
+     * The `x-amazon-apigateway-authorizer` this scheme carries, refusing one of a
+     * kind the scheme's own type does not declare.
      */
-    private identitySource;
+    private authorizer;
 }
 //# sourceMappingURL=sim-http-api-openapi-security-scheme.d.ts.map

package/dist/service/apigatewayv2/openapi/sim-http-api-openapi-security-scheme.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sim-http-api-openapi-security-scheme.d.ts","sourceRoot":"","sources":["../../../../src/service/apigatewayv2/openapi/sim-http-api-openapi-security-scheme.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,+BAA+B,EAAE,MAAM,6CAA6C,CAAC;AACnG,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,kCAAkC,CAAC;AAehF;;;;;;;;GAQG;AACH,qBAAa,+BAA+B;IAC1C,OAAO,CAAC,QAAQ,CAAC,MAAM,CAA0B;IAEjD,YAAY,MAAM,EAAE,uBAAuB,EAE1C;IAED;;OAEG;IACH,qBAAqB,CACnB,KAAK,EAAE,MAAM,EACb,IAAI,EAAE,MAAM,GACX,+BAA+B,CAcjC;IAED;;;OAGG;IACH,OAAO,CAAC,aAAa;IA+BrB;;OAEG;IACH,OAAO,CAAC,cAAc;CAiBvB"}
+{"version":3,"file":"sim-http-api-openapi-security-scheme.d.ts","sourceRoot":"","sources":["../../../../src/service/apigatewayv2/openapi/sim-http-api-openapi-security-scheme.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,+BAA+B,EAAE,MAAM,6CAA6C,CAAC;AAEnG,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,kCAAkC,CAAC;AA0BhF;;;;;;;GAOG;AACH,qBAAa,+BAA+B;IAC1C,OAAO,CAAC,QAAQ,CAAC,MAAM,CAA0B;IAEjD,YAAY,MAAM,EAAE,uBAAuB,EAE1C;IAED;;OAEG;IACH,qBAAqB,CACnB,KAAK,EAAE,MAAM,EACb,IAAI,EAAE,MAAM,GACX,+BAA+B,CAajC;IAED;;;OAGG;IACH,OAAO,CAAC,cAAc;IAoBtB;;;OAGG;IACH,OAAO,CAAC,UAAU;CAiBnB"}

package/dist/service/apigatewayv2/openapi/sim-http-api-openapi-security-scheme.js

@@ -1,3 +1,5 @@
+import { SimHttpApiOpenApiJwtAuthorizerScheme } from "./sim-http-api-openapi-jwt-authorizer-scheme.js";
+import { SimHttpApiOpenApiRequestAuthorizerScheme } from "./sim-http-api-openapi-request-authorizer-scheme.js";
 /**
  * The security scheme types that are not a JWT authorizer.
  *
@@ -9,14 +11,22 @@
 const openIdConnect = "AWS reads the issuer out of the discovery document published at " +
     "openIdConnectUrl, and nothing here is fetched over HTTP. Declare the " +
     "scheme as oauth2 with an explicit jwtConfiguration.issuer instead.";
+/**
+ * The `x-amazon-apigateway-authorizer` type each security scheme type carries,
+ * which is what AWS documents for an HTTP API: a JWT authorizer under `oauth2`,
+ * and a Lambda `REQUEST` authorizer under `apiKey`.
+ */
+const authorizerTypes = new Map([
+    ["oauth2", "jwt"],
+    ["apiKey", "request"],
+]);
 /**
  * One `components.securitySchemes` member, read into the CreateAuthorizer
  * input the operations naming it ask for.
  *
- * The issuer and the audiences are handed to CreateAuthorizer as the document
- * wrote them, so what an authorizer requires is stated where every other
- * caller reads it. Only the translation is here: a document writes the
- * identity sources as one comma-separated string, and the command takes a list.
+ * Which of the two kinds of authorizer a scheme carries is decided here, and
+ * reading each kind is the class named after it. A scheme whose type and
+ * whose extension disagree is refused rather than resolved either way.
  */
 export class SimHttpApiOpenApiSecurityScheme {
     scheme;
@@ -27,59 +37,46 @@ export class SimHttpApiOpenApiSecurityScheme {
      * The CreateAuthorizer input this scheme asks for.
      */
     createAuthorizerInput(apiId, name) {
-        const authorizer = this.jwtAuthorizer();
-        const configuration = authorizer.member("jwtConfiguration").object();
-        return {
-            ApiId: apiId,
-            Name: name,
-            AuthorizerType: "JWT",
-            IdentitySource: this.identitySource(authorizer),
-            JwtConfiguration: {
-                Issuer: configuration.member("issuer").optionalString(),
-                Audience: configuration.member("audience").optionalStringList(),
-            },
-        };
+        const authorizerType = this.authorizerType();
+        const authorizer = this.authorizer(authorizerType);
+        if (authorizerType === "request") {
+            return new SimHttpApiOpenApiRequestAuthorizerScheme(authorizer).createAuthorizerInput(apiId, name);
+        }
+        return new SimHttpApiOpenApiJwtAuthorizerScheme(authorizer).createAuthorizerInput(apiId, name);
     }
     /**
-     * The `x-amazon-apigateway-authorizer` this scheme carries, refusing every
-     * other kind of scheme and every other kind of authorizer.
+     * The kind of authorizer this scheme's own type declares, refusing every
+     * scheme type an HTTP API route cannot use.
      */
-    jwtAuthorizer() {
+    authorizerType() {
         const declared = this.scheme.member("type");
-        const type = declared.requiredString();
-        if (type === "openIdConnect") {
+        const schemeType = declared.requiredString();
+        if (schemeType === "openIdConnect") {
             throw declared.refusal(openIdConnect);
         }
-        if (type !== "oauth2") {
-            throw declared.refusal(`is '${type}', and only an oauth2 scheme carrying a JWT ` +
-                `x-amazon-apigateway-authorizer is simulated`);
+        const authorizerType = authorizerTypes.get(schemeType);
+        if (authorizerType === undefined) {
+            throw declared.refusal(`is '${schemeType}', and an HTTP API declares a JWT authorizer under ` +
+                `oauth2 and a Lambda REQUEST authorizer under apiKey`);
         }
+        return authorizerType;
+    }
+    /**
+     * The `x-amazon-apigateway-authorizer` this scheme carries, refusing one of a
+     * kind the scheme's own type does not declare.
+     */
+    authorizer(authorizerType) {
         const authorizer = this.scheme
             .member("x-amazon-apigateway-authorizer")
             .object();
-        if (authorizer.member("type").requiredString() !== "jwt") {
-            throw authorizer
-                .member("type")
-                .refusal("is not jwt, and a JWT authorizer is the only kind simulated: a " +
-                "Lambda authorizer runs code of its own to decide");
+        const declared = authorizer.member("type");
+        const declaredType = declared.requiredString();
+        if (declaredType !== authorizerType) {
+            throw declared.refusal(`is '${declaredType}', and the security scheme carrying it declares a ` +
+                `'${authorizerType}' authorizer. A JWT authorizer and a Lambda ` +
+                `REQUEST authorizer are the two an HTTP API has.`);
         }
         return authorizer;
     }
-    /**
-     * The one header or query string parameter the token is read from.
-     */
-    identitySource(authorizer) {
-        const declared = authorizer.member("identitySource");
-        const sources = declared
-            .requiredString()
-            .split(",")
-            .map((source) => source.trim())
-            .filter((source) => source.length > 0);
-        if (sources.length > 1) {
-            throw declared.refusal(`carries ${String(sources.length)} identity sources, and only the ` +
-                `first would be read here`);
-        }
-        return sources;
-    }
 }
 //# sourceMappingURL=sim-http-api-openapi-security-scheme.js.map

package/dist/service/apigatewayv2/openapi/sim-http-api-openapi-security-scheme.js.map

@@ -1 +1 @@
-{"version":3,"file":"sim-http-api-openapi-security-scheme.js","sourceRoot":"","sources":["../../../../src/service/apigatewayv2/openapi/sim-http-api-openapi-security-scheme.ts"],"names":[],"mappings":"AAGA;;;;;;;GAOG;AACH,MAAM,aAAa,GACjB,kEAAkE;IAClE,uEAAuE;IACvE,oEAAoE,CAAC;AAEvE;;;;;;;;GAQG;AACH,MAAM,OAAO,+BAA+B;IACzB,MAAM,CAA0B;IAEjD,YAAY,MAA+B;QACzC,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;IACvB,CAAC;IAED;;OAEG;IACH,qBAAqB,CACnB,KAAa,EACb,IAAY;QAEZ,MAAM,UAAU,GAAG,IAAI,CAAC,aAAa,EAAE,CAAC;QACxC,MAAM,aAAa,GAAG,UAAU,CAAC,MAAM,CAAC,kBAAkB,CAAC,CAAC,MAAM,EAAE,CAAC;QAErE,OAAO;YACL,KAAK,EAAE,KAAK;YACZ,IAAI,EAAE,IAAI;YACV,cAAc,EAAE,KAAK;YACrB,cAAc,EAAE,IAAI,CAAC,cAAc,CAAC,UAAU,CAAC;YAC/C,gBAAgB,EAAE;gBAChB,MAAM,EAAE,aAAa,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,cAAc,EAAE;gBACvD,QAAQ,EAAE,aAAa,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,kBAAkB,EAAE;aAChE;SACF,CAAC;IACJ,CAAC;IAED;;;OAGG;IACK,aAAa;QACnB,MAAM,QAAQ,GAAG,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QAC5C,MAAM,IAAI,GAAG,QAAQ,CAAC,cAAc,EAAE,CAAC;QAEvC,IAAI,IAAI,KAAK,eAAe,EAAE,CAAC;YAC7B,MAAM,QAAQ,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC;QACxC,CAAC;QAED,IAAI,IAAI,KAAK,QAAQ,EAAE,CAAC;YACtB,MAAM,QAAQ,CAAC,OAAO,CACpB,OAAO,IAAI,8CAA8C;gBACvD,6CAA6C,CAChD,CAAC;QACJ,CAAC;QAED,MAAM,UAAU,GAAG,IAAI,CAAC,MAAM;aAC3B,MAAM,CAAC,gCAAgC,CAAC;aACxC,MAAM,EAAE,CAAC;QAEZ,IAAI,UAAU,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,cAAc,EAAE,KAAK,KAAK,EAAE,CAAC;YACzD,MAAM,UAAU;iBACb,MAAM,CAAC,MAAM,CAAC;iBACd,OAAO,CACN,iEAAiE;gBAC/D,kDAAkD,CACrD,CAAC;QACN,CAAC;QAED,OAAO,UAAU,CAAC;IACpB,CAAC;IAED;;OAEG;IACK,cAAc,CAAC,UAAmC;QACxD,MAAM,QAAQ,GAAG,UAAU,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC;QACrD,MAAM,OAAO,GAAG,QAAQ;aACrB,cAAc,EAAE;aAChB,KAAK,CAAC,GAAG,CAAC;aACV,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;aAC9B,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;QAEzC,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACvB,MAAM,QAAQ,CAAC,OAAO,CACpB,WAAW,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,kCAAkC;gBACjE,0BAA0B,CAC7B,CAAC;QACJ,CAAC;QAED,OAAO,OAAO,CAAC;IACjB,CAAC;CACF"}
+{"version":3,"file":"sim-http-api-openapi-security-scheme.js","sourceRoot":"","sources":["../../../../src/service/apigatewayv2/openapi/sim-http-api-openapi-security-scheme.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,oCAAoC,EAAE,MAAM,iDAAiD,CAAC;AAEvG,OAAO,EAAE,wCAAwC,EAAE,MAAM,qDAAqD,CAAC;AAE/G;;;;;;;GAOG;AACH,MAAM,aAAa,GACjB,kEAAkE;IAClE,uEAAuE;IACvE,oEAAoE,CAAC;AAEvE;;;;GAIG;AACH,MAAM,eAAe,GAAG,IAAI,GAAG,CAAC;IAC9B,CAAC,QAAQ,EAAE,KAAK,CAAC;IACjB,CAAC,QAAQ,EAAE,SAAS,CAAC;CACtB,CAAC,CAAC;AAEH;;;;;;;GAOG;AACH,MAAM,OAAO,+BAA+B;IACzB,MAAM,CAA0B;IAEjD,YAAY,MAA+B;QACzC,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;IACvB,CAAC;IAED;;OAEG;IACH,qBAAqB,CACnB,KAAa,EACb,IAAY;QAEZ,MAAM,cAAc,GAAG,IAAI,CAAC,cAAc,EAAE,CAAC;QAC7C,MAAM,UAAU,GAAG,IAAI,CAAC,UAAU,CAAC,cAAc,CAAC,CAAC;QAEnD,IAAI,cAAc,KAAK,SAAS,EAAE,CAAC;YACjC,OAAO,IAAI,wCAAwC,CACjD,UAAU,CACX,CAAC,qBAAqB,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;QACvC,CAAC;QAED,OAAO,IAAI,oCAAoC,CAC7C,UAAU,CACX,CAAC,qBAAqB,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;IACvC,CAAC;IAED;;;OAGG;IACK,cAAc;QACpB,MAAM,QAAQ,GAAG,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QAC5C,MAAM,UAAU,GAAG,QAAQ,CAAC,cAAc,EAAE,CAAC;QAE7C,IAAI,UAAU,KAAK,eAAe,EAAE,CAAC;YACnC,MAAM,QAAQ,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC;QACxC,CAAC;QAED,MAAM,cAAc,GAAG,eAAe,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QAEvD,IAAI,cAAc,KAAK,SAAS,EAAE,CAAC;YACjC,MAAM,QAAQ,CAAC,OAAO,CACpB,OAAO,UAAU,qDAAqD;gBACpE,qDAAqD,CACxD,CAAC;QACJ,CAAC;QAED,OAAO,cAAc,CAAC;IACxB,CAAC;IAED;;;OAGG;IACK,UAAU,CAAC,cAAsB;QACvC,MAAM,UAAU,GAAG,IAAI,CAAC,MAAM;aAC3B,MAAM,CAAC,gCAAgC,CAAC;aACxC,MAAM,EAAE,CAAC;QACZ,MAAM,QAAQ,GAAG,UAAU,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QAC3C,MAAM,YAAY,GAAG,QAAQ,CAAC,cAAc,EAAE,CAAC;QAE/C,IAAI,YAAY,KAAK,cAAc,EAAE,CAAC;YACpC,MAAM,QAAQ,CAAC,OAAO,CACpB,OAAO,YAAY,oDAAoD;gBACrE,IAAI,cAAc,8CAA8C;gBAChE,iDAAiD,CACpD,CAAC;QACJ,CAAC;QAED,OAAO,UAAU,CAAC;IACpB,CAAC;CACF"}

package/dist/service/apigatewayv2/openapi/sim-http-api-openapi-security-schemes.d.ts

@@ -1,3 +1,4 @@
+import type { SimHttpApiAuthorizerView } from "../api/authorizer/sim-http-api-authorizer.js";
 import type { SimCreateAuthorizerCommandInput } from "../command/authorizer/authorizer.command.js";
 import type { SimHttpApiOpenApiSecurityRequirement } from "./sim-http-api-openapi-operation.js";
 import type { SimHttpApiOpenApiValue } from "./sim-http-api-openapi-value.js";
@@ -23,12 +24,12 @@ export declare class SimHttpApiOpenApiSecuritySchemes {
     /**
      * The authorizer already created for a scheme, if one was.
      */
-    createdId(schemeName: string): string | undefined;
+    createdAuthorizer(schemeName: string): SimHttpApiAuthorizerView | undefined;
     /**
      * Remember the authorizer created for a scheme, so the next operation naming
      * it shares that one.
      */
-    remember(schemeName: string, authorizerId: string): void;
+    remember(schemeName: string, authorizer: SimHttpApiAuthorizerView): void;
     /**
      * The security scheme a requirement names, refusing one the document does
      * not define.

package/dist/service/apigatewayv2/openapi/sim-http-api-openapi-security-schemes.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sim-http-api-openapi-security-schemes.d.ts","sourceRoot":"","sources":["../../../../src/service/apigatewayv2/openapi/sim-http-api-openapi-security-schemes.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,+BAA+B,EAAE,MAAM,6CAA6C,CAAC;AAEnG,OAAO,KAAK,EAAE,oCAAoC,EAAE,MAAM,qCAAqC,CAAC;AAEhG,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,iCAAiC,CAAC;AAE9E,UAAU,0CAA0C;IAClD,QAAQ,CAAC,OAAO,EAAE,sBAAsB,CAAC;CAC1C;AAED;;;;;;;GAOG;AACH,qBAAa,gCAAgC;IAC3C,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAyB;IACjD,OAAO,CAAC,QAAQ,CAAC,OAAO,CAA6B;IAErD,YAAY,UAAU,EAAE,0CAA0C,EAEjE;IAED;;OAEG;IACH,eAAe,CACb,KAAK,EAAE,MAAM,EACb,WAAW,EAAE,oCAAoC,GAChD,+BAA+B,CAMjC;IAED;;OAEG;IACH,SAAS,CAAC,UAAU,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAEhD;IAED;;;OAGG;IACH,QAAQ,CAAC,UAAU,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,GAAG,IAAI,CAEvD;IAED;;;OAGG;IACH,OAAO,CAAC,MAAM;CAcf"}
+{"version":3,"file":"sim-http-api-openapi-security-schemes.d.ts","sourceRoot":"","sources":["../../../../src/service/apigatewayv2/openapi/sim-http-api-openapi-security-schemes.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,8CAA8C,CAAC;AAC7F,OAAO,KAAK,EAAE,+BAA+B,EAAE,MAAM,6CAA6C,CAAC;AAEnG,OAAO,KAAK,EAAE,oCAAoC,EAAE,MAAM,qCAAqC,CAAC;AAEhG,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,iCAAiC,CAAC;AAE9E,UAAU,0CAA0C;IAClD,QAAQ,CAAC,OAAO,EAAE,sBAAsB,CAAC;CAC1C;AAED;;;;;;;GAOG;AACH,qBAAa,gCAAgC;IAC3C,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAyB;IACjD,OAAO,CAAC,QAAQ,CAAC,OAAO,CAA+C;IAEvE,YAAY,UAAU,EAAE,0CAA0C,EAEjE;IAED;;OAEG;IACH,eAAe,CACb,KAAK,EAAE,MAAM,EACb,WAAW,EAAE,oCAAoC,GAChD,+BAA+B,CAMjC;IAED;;OAEG;IACH,iBAAiB,CAAC,UAAU,EAAE,MAAM,GAAG,wBAAwB,GAAG,SAAS,CAE1E;IAED;;;OAGG;IACH,QAAQ,CAAC,UAAU,EAAE,MAAM,EAAE,UAAU,EAAE,wBAAwB,GAAG,IAAI,CAEvE;IAED;;;OAGG;IACH,OAAO,CAAC,MAAM;CAcf"}

package/dist/service/apigatewayv2/openapi/sim-http-api-openapi-security-schemes.js

@@ -23,15 +23,15 @@ export class SimHttpApiOpenApiSecuritySchemes {
     /**
      * The authorizer already created for a scheme, if one was.
      */
-    createdId(schemeName) {
+    createdAuthorizer(schemeName) {
         return this.created.get(schemeName);
     }
     /**
      * Remember the authorizer created for a scheme, so the next operation naming
      * it shares that one.
      */
-    remember(schemeName, authorizerId) {
-        this.created.set(schemeName, authorizerId);
+    remember(schemeName, authorizer) {
+        this.created.set(schemeName, authorizer);
     }
     /**
      * The security scheme a requirement names, refusing one the document does

package/dist/service/apigatewayv2/openapi/sim-http-api-openapi-security-schemes.js.map

@@ -1 +1 @@
-{"version":3,"file":"sim-http-api-openapi-security-schemes.js","sourceRoot":"","sources":["../../../../src/service/apigatewayv2/openapi/sim-http-api-openapi-security-schemes.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,+BAA+B,EAAE,MAAM,2CAA2C,CAAC;AAO5F;;;;;;;GAOG;AACH,MAAM,OAAO,gCAAgC;IAC1B,OAAO,CAAyB;IAChC,OAAO,GAAG,IAAI,GAAG,EAAkB,CAAC;IAErD,YAAY,UAAsD;QAChE,IAAI,CAAC,OAAO,GAAG,UAAU,CAAC,OAAO,CAAC;IACpC,CAAC;IAED;;OAEG;IACH,eAAe,CACb,KAAa,EACb,WAAiD;QAEjD,MAAM,MAAM,GAAG,IAAI,+BAA+B,CAChD,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,CACzB,CAAC;QAEF,OAAO,MAAM,CAAC,qBAAqB,CAAC,KAAK,EAAE,WAAW,CAAC,UAAU,CAAC,CAAC;IACrE,CAAC;IAED;;OAEG;IACH,SAAS,CAAC,UAAkB;QAC1B,OAAO,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;IACtC,CAAC;IAED;;;OAGG;IACH,QAAQ,CAAC,UAAkB,EAAE,YAAoB;QAC/C,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,UAAU,EAAE,YAAY,CAAC,CAAC;IAC7C,CAAC;IAED;;;OAGG;IACK,MAAM,CACZ,WAAiD;QAEjD,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,cAAc,EAAE,CAAC;QAE9C,IAAI,OAAO,EAAE,GAAG,CAAC,WAAW,CAAC,UAAU,CAAC,KAAK,IAAI,EAAE,CAAC;YAClD,MAAM,WAAW,CAAC,KAAK,CAAC,OAAO,CAC7B,8BAA8B,WAAW,CAAC,UAAU,WAAW;gBAC7D,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,QAAQ,EAAE,kBAAkB,CACvD,CAAC;QACJ,CAAC;QAED,OAAO,OAAO,CAAC,MAAM,CAAC,WAAW,CAAC,UAAU,CAAC,CAAC,MAAM,EAAE,CAAC;IACzD,CAAC;CACF"}
+{"version":3,"file":"sim-http-api-openapi-security-schemes.js","sourceRoot":"","sources":["../../../../src/service/apigatewayv2/openapi/sim-http-api-openapi-security-schemes.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,+BAA+B,EAAE,MAAM,2CAA2C,CAAC;AAO5F;;;;;;;GAOG;AACH,MAAM,OAAO,gCAAgC;IAC1B,OAAO,CAAyB;IAChC,OAAO,GAAG,IAAI,GAAG,EAAoC,CAAC;IAEvE,YAAY,UAAsD;QAChE,IAAI,CAAC,OAAO,GAAG,UAAU,CAAC,OAAO,CAAC;IACpC,CAAC;IAED;;OAEG;IACH,eAAe,CACb,KAAa,EACb,WAAiD;QAEjD,MAAM,MAAM,GAAG,IAAI,+BAA+B,CAChD,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,CACzB,CAAC;QAEF,OAAO,MAAM,CAAC,qBAAqB,CAAC,KAAK,EAAE,WAAW,CAAC,UAAU,CAAC,CAAC;IACrE,CAAC;IAED;;OAEG;IACH,iBAAiB,CAAC,UAAkB;QAClC,OAAO,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;IACtC,CAAC;IAED;;;OAGG;IACH,QAAQ,CAAC,UAAkB,EAAE,UAAoC;QAC/D,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,UAAU,EAAE,UAAU,CAAC,CAAC;IAC3C,CAAC;IAED;;;OAGG;IACK,MAAM,CACZ,WAAiD;QAEjD,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,cAAc,EAAE,CAAC;QAE9C,IAAI,OAAO,EAAE,GAAG,CAAC,WAAW,CAAC,UAAU,CAAC,KAAK,IAAI,EAAE,CAAC;YAClD,MAAM,WAAW,CAAC,KAAK,CAAC,OAAO,CAC7B,8BAA8B,WAAW,CAAC,UAAU,WAAW;gBAC7D,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,QAAQ,EAAE,kBAAkB,CACvD,CAAC;QACJ,CAAC;QAED,OAAO,OAAO,CAAC,MAAM,CAAC,WAAW,CAAC,UAAU,CAAC,CAAC,MAAM,EAAE,CAAC;IACzD,CAAC;CACF"}

package/dist/service/apigatewayv2/openapi/sim-http-api-openapi-value.d.ts

@@ -42,6 +42,16 @@ export declare class SimHttpApiOpenApiValue {
      * This value as a string when the document carries one.
      */
     optionalString(): string | undefined;
+    /**
+     * This value as a boolean when the document carries one, which is the shape
+     * an authorizer's `enableSimpleResponses` takes.
+     */
+    optionalBoolean(): boolean | undefined;
+    /**
+     * This value as a number when the document carries one, which is the shape
+     * an authorizer's `authorizerResultTtlInSeconds` takes.
+     */
+    optionalNumber(): number | undefined;
     /**
      * The entries of this value as an array, when the document carries one.
      */

package/dist/service/apigatewayv2/openapi/sim-http-api-openapi-value.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sim-http-api-openapi-value.d.ts","sourceRoot":"","sources":["../../../../src/service/apigatewayv2/openapi/sim-http-api-openapi-value.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,kCAAkC,CAAC;AAClE,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,sCAAsC,CAAC;AACtF,OAAO,EAAE,uBAAuB,EAAE,MAAM,kCAAkC,CAAC;AAC3E,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,mCAAmC,CAAC;AAGlF,UAAU,gCAAgC;IACxC,QAAQ,CAAC,OAAO,EAAE,wBAAwB,CAAC;IAC3C,QAAQ,CAAC,KAAK,EAAE,SAAS,GAAG,SAAS,CAAC;CACvC;AAID;;;;;;;GAOG;AACH,qBAAa,sBAAsB;IACjC,SAAgB,OAAO,EAAE,wBAAwB,CAAC;IAClD,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAwB;IAE9C,YAAY,UAAU,EAAE,gCAAgC,EAGvD;IAED;;OAEG;IACH,MAAM,IAAI,OAAO,CAEhB;IAED;;OAEG;IACH,OAAO,CAAC,MAAM,EAAE,MAAM,GAAG,yBAAyB,CAEjD;IAED;;OAEG;IACH,MAAM,IAAI,uBAAuB,CAQhC;IAED;;OAEG;IACH,cAAc,IAAI,uBAAuB,GAAG,SAAS,CAiBpD;IAED;;OAEG;IACH,cAAc,IAAI,MAAM,CAQvB;IAED;;OAEG;IACH,cAAc,IAAI,MAAM,GAAG,SAAS,CAUnC;IAED;;OAEG;IACH,aAAa,IAAI,SAAS,sBAAsB,EAAE,GAAG,SAAS,CAgB7D;IAED;;OAEG;IACH,kBAAkB,IAAI,SAAS,MAAM,EAAE,GAAG,SAAS,CAElD;CACF"}
+{"version":3,"file":"sim-http-api-openapi-value.d.ts","sourceRoot":"","sources":["../../../../src/service/apigatewayv2/openapi/sim-http-api-openapi-value.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,kCAAkC,CAAC;AAClE,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,sCAAsC,CAAC;AACtF,OAAO,EAAE,uBAAuB,EAAE,MAAM,kCAAkC,CAAC;AAC3E,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,mCAAmC,CAAC;AAGlF,UAAU,gCAAgC;IACxC,QAAQ,CAAC,OAAO,EAAE,wBAAwB,CAAC;IAC3C,QAAQ,CAAC,KAAK,EAAE,SAAS,GAAG,SAAS,CAAC;CACvC;AAID;;;;;;;GAOG;AACH,qBAAa,sBAAsB;IACjC,SAAgB,OAAO,EAAE,wBAAwB,CAAC;IAClD,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAwB;IAE9C,YAAY,UAAU,EAAE,gCAAgC,EAGvD;IAED;;OAEG;IACH,MAAM,IAAI,OAAO,CAEhB;IAED;;OAEG;IACH,OAAO,CAAC,MAAM,EAAE,MAAM,GAAG,yBAAyB,CAEjD;IAED;;OAEG;IACH,MAAM,IAAI,uBAAuB,CAQhC;IAED;;OAEG;IACH,cAAc,IAAI,uBAAuB,GAAG,SAAS,CAiBpD;IAED;;OAEG;IACH,cAAc,IAAI,MAAM,CAQvB;IAED;;OAEG;IACH,cAAc,IAAI,MAAM,GAAG,SAAS,CAUnC;IAED;;;OAGG;IACH,eAAe,IAAI,OAAO,GAAG,SAAS,CAUrC;IAED;;;OAGG;IACH,cAAc,IAAI,MAAM,GAAG,SAAS,CAUnC;IAED;;OAEG;IACH,aAAa,IAAI,SAAS,sBAAsB,EAAE,GAAG,SAAS,CAgB7D;IAED;;OAEG;IACH,kBAAkB,IAAI,SAAS,MAAM,EAAE,GAAG,SAAS,CAElD;CACF"}

package/dist/service/apigatewayv2/openapi/sim-http-api-openapi-value.js

@@ -77,6 +77,32 @@ export class SimHttpApiOpenApiValue {
         }
         return this.value;
     }
+    /**
+     * This value as a boolean when the document carries one, which is the shape
+     * an authorizer's `enableSimpleResponses` takes.
+     */
+    optionalBoolean() {
+        if (this.value === undefined) {
+            return undefined;
+        }
+        if (typeof this.value !== "boolean") {
+            throw this.refusal("has to be a boolean");
+        }
+        return this.value;
+    }
+    /**
+     * This value as a number when the document carries one, which is the shape
+     * an authorizer's `authorizerResultTtlInSeconds` takes.
+     */
+    optionalNumber() {
+        if (this.value === undefined) {
+            return undefined;
+        }
+        if (typeof this.value !== "number") {
+            throw this.refusal("has to be a number");
+        }
+        return this.value;
+    }
     /**
      * The entries of this value as an array, when the document carries one.
      */

package/dist/service/apigatewayv2/openapi/sim-http-api-openapi-value.js.map

@@ -1 +1 @@
-{"version":3,"file":"sim-http-api-openapi-value.js","sourceRoot":"","sources":["../../../../src/service/apigatewayv2/openapi/sim-http-api-openapi-value.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,uBAAuB,EAAE,MAAM,kCAAkC,CAAC;AAE3E,OAAO,EAAE,wBAAwB,EAAE,MAAM,mCAAmC,CAAC;AAO7E,MAAM,OAAO,GAAG,iDAAiD,CAAC;AAElE;;;;;;;GAOG;AACH,MAAM,OAAO,sBAAsB;IACjB,OAAO,CAA2B;IACjC,KAAK,CAAwB;IAE9C,YAAY,UAA4C;QACtD,IAAI,CAAC,OAAO,GAAG,UAAU,CAAC,OAAO,CAAC;QAClC,IAAI,CAAC,KAAK,GAAG,UAAU,CAAC,KAAK,CAAC;IAChC,CAAC;IAED;;OAEG;IACH,MAAM;QACJ,OAAO,IAAI,CAAC,KAAK,KAAK,SAAS,CAAC;IAClC,CAAC;IAED;;OAEG;IACH,OAAO,CAAC,MAAc;QACpB,OAAO,wBAAwB,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;IACxD,CAAC;IAED;;OAEG;IACH,MAAM;QACJ,MAAM,MAAM,GAAG,IAAI,CAAC,cAAc,EAAE,CAAC;QAErC,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;YACzB,MAAM,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;QAC9B,CAAC;QAED,OAAO,MAAM,CAAC;IAChB,CAAC;IAED;;OAEG;IACH,cAAc;QACZ,IAAI,IAAI,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;YAC7B,OAAO,SAAS,CAAC;QACnB,CAAC;QAED,IACE,OAAO,IAAI,CAAC,KAAK,KAAK,QAAQ;YAC9B,IAAI,CAAC,KAAK,KAAK,IAAI;YACnB,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,EACzB,CAAC;YACD,MAAM,IAAI,CAAC,OAAO,CAAC,qBAAqB,CAAC,CAAC;QAC5C,CAAC;QAED,OAAO,IAAI,uBAAuB,CAAC;YACjC,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,OAAO,EAAE,IAAI,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;SAC7C,CAAC,CAAC;IACL,CAAC;IAED;;OAEG;IACH,cAAc;QACZ,MAAM,IAAI,GAAG,IAAI,CAAC,cAAc,EAAE,CAAC;QAEnC,IAAI,IAAI,KAAK,SAAS,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC5C,MAAM,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;QAC9B,CAAC;QAED,OAAO,IAAI,CAAC;IACd,CAAC;IAED;;OAEG;IACH,cAAc;QACZ,IAAI,IAAI,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;YAC7B,OAAO,SAAS,CAAC;QACnB,CAAC;QAED,IAAI,OAAO,IAAI,CAAC,KAAK,KAAK,QAAQ,EAAE,CAAC;YACnC,MAAM,IAAI,CAAC,OAAO,CAAC,oBAAoB,CAAC,CAAC;QAC3C,CAAC;QAED,OAAO,IAAI,CAAC,KAAK,CAAC;IACpB,CAAC;IAED;;OAEG;IACH,aAAa;QACX,IAAI,IAAI,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;YAC7B,OAAO,SAAS,CAAC;QACnB,CAAC;QAED,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;YAC/B,MAAM,IAAI,CAAC,OAAO,CAAC,oBAAoB,CAAC,CAAC;QAC3C,CAAC;QAED,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CACnB,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE,CACf,IAAI,sBAAsB,CAAC;YACzB,OAAO,EAAE,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YAC1C,KAAK,EAAE,KAAK;SACb,CAAC,CACL,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,kBAAkB;QAChB,OAAO,IAAI,CAAC,aAAa,EAAE,EAAE,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,cAAc,EAAE,CAAC,CAAC;IACtE,CAAC;CACF"}
+{"version":3,"file":"sim-http-api-openapi-value.js","sourceRoot":"","sources":["../../../../src/service/apigatewayv2/openapi/sim-http-api-openapi-value.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,uBAAuB,EAAE,MAAM,kCAAkC,CAAC;AAE3E,OAAO,EAAE,wBAAwB,EAAE,MAAM,mCAAmC,CAAC;AAO7E,MAAM,OAAO,GAAG,iDAAiD,CAAC;AAElE;;;;;;;GAOG;AACH,MAAM,OAAO,sBAAsB;IACjB,OAAO,CAA2B;IACjC,KAAK,CAAwB;IAE9C,YAAY,UAA4C;QACtD,IAAI,CAAC,OAAO,GAAG,UAAU,CAAC,OAAO,CAAC;QAClC,IAAI,CAAC,KAAK,GAAG,UAAU,CAAC,KAAK,CAAC;IAChC,CAAC;IAED;;OAEG;IACH,MAAM;QACJ,OAAO,IAAI,CAAC,KAAK,KAAK,SAAS,CAAC;IAClC,CAAC;IAED;;OAEG;IACH,OAAO,CAAC,MAAc;QACpB,OAAO,wBAAwB,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;IACxD,CAAC;IAED;;OAEG;IACH,MAAM;QACJ,MAAM,MAAM,GAAG,IAAI,CAAC,cAAc,EAAE,CAAC;QAErC,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;YACzB,MAAM,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;QAC9B,CAAC;QAED,OAAO,MAAM,CAAC;IAChB,CAAC;IAED;;OAEG;IACH,cAAc;QACZ,IAAI,IAAI,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;YAC7B,OAAO,SAAS,CAAC;QACnB,CAAC;QAED,IACE,OAAO,IAAI,CAAC,KAAK,KAAK,QAAQ;YAC9B,IAAI,CAAC,KAAK,KAAK,IAAI;YACnB,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,EACzB,CAAC;YACD,MAAM,IAAI,CAAC,OAAO,CAAC,qBAAqB,CAAC,CAAC;QAC5C,CAAC;QAED,OAAO,IAAI,uBAAuB,CAAC;YACjC,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,OAAO,EAAE,IAAI,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;SAC7C,CAAC,CAAC;IACL,CAAC;IAED;;OAEG;IACH,cAAc;QACZ,MAAM,IAAI,GAAG,IAAI,CAAC,cAAc,EAAE,CAAC;QAEnC,IAAI,IAAI,KAAK,SAAS,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC5C,MAAM,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;QAC9B,CAAC;QAED,OAAO,IAAI,CAAC;IACd,CAAC;IAED;;OAEG;IACH,cAAc;QACZ,IAAI,IAAI,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;YAC7B,OAAO,SAAS,CAAC;QACnB,CAAC;QAED,IAAI,OAAO,IAAI,CAAC,KAAK,KAAK,QAAQ,EAAE,CAAC;YACnC,MAAM,IAAI,CAAC,OAAO,CAAC,oBAAoB,CAAC,CAAC;QAC3C,CAAC;QAED,OAAO,IAAI,CAAC,KAAK,CAAC;IACpB,CAAC;IAED;;;OAGG;IACH,eAAe;QACb,IAAI,IAAI,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;YAC7B,OAAO,SAAS,CAAC;QACnB,CAAC;QAED,IAAI,OAAO,IAAI,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;YACpC,MAAM,IAAI,CAAC,OAAO,CAAC,qBAAqB,CAAC,CAAC;QAC5C,CAAC;QAED,OAAO,IAAI,CAAC,KAAK,CAAC;IACpB,CAAC;IAED;;;OAGG;IACH,cAAc;QACZ,IAAI,IAAI,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;YAC7B,OAAO,SAAS,CAAC;QACnB,CAAC;QAED,IAAI,OAAO,IAAI,CAAC,KAAK,KAAK,QAAQ,EAAE,CAAC;YACnC,MAAM,IAAI,CAAC,OAAO,CAAC,oBAAoB,CAAC,CAAC;QAC3C,CAAC;QAED,OAAO,IAAI,CAAC,KAAK,CAAC;IACpB,CAAC;IAED;;OAEG;IACH,aAAa;QACX,IAAI,IAAI,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;YAC7B,OAAO,SAAS,CAAC;QACnB,CAAC;QAED,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;YAC/B,MAAM,IAAI,CAAC,OAAO,CAAC,oBAAoB,CAAC,CAAC;QAC3C,CAAC;QAED,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CACnB,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE,CACf,IAAI,sBAAsB,CAAC;YACzB,OAAO,EAAE,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YAC1C,KAAK,EAAE,KAAK;SACb,CAAC,CACL,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,kBAAkB;QAChB,OAAO,IAAI,CAAC,aAAa,EAAE,EAAE,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,cAAc,EAAE,CAAC,CAAC;IACtE,CAAC;CACF"}

package/dist/service/apigatewayv2/serve/auth/sim-http-api-authorizer-decisions.d.ts

@@ -0,0 +1,36 @@
+import type { SimClock } from "../../../../util/clock/sim-clock.js";
+import type { SimHttpApiAuthorization } from "../../api/authorizer/sim-http-api-authorization.js";
+import type { SimHttpApiRequestAuthorizer } from "../../api/authorizer/sim-http-api-request-authorizer.js";
+interface SimHttpApiAuthorizerDecisionsProperties {
+    /**
+     * Clock a held decision expires against, so advancing simulated time drops
+     * one that was being reused a moment before.
+     */
+    readonly clock: SimClock;
+}
+/**
+ * Reuses a Lambda authorizer's decision for as long as its
+ * `AuthorizerResultTtlInSeconds` says, and makes a new one when there is none
+ * to reuse.
+ *
+ * What is held and what is not is the whole of this: a refusal is held the way
+ * an admission is, because AWS holds whatever answer the authorizer gave. An
+ * authorizer that could not answer at all is not held, since there is no
+ * answer to hold and a request a moment later may find its function working.
+ */
+export declare class SimHttpApiAuthorizerDecisions {
+    private readonly clock;
+    constructor(properties: SimHttpApiAuthorizerDecisionsProperties);
+    /**
+     * The decision for these identity source values, made only if there is not
+     * one already.
+     */
+    decide(authorizer: SimHttpApiRequestAuthorizer, identitySource: readonly string[], invoke: () => Promise<SimHttpApiAuthorization>): Promise<SimHttpApiAuthorization>;
+    /**
+     * Whether this is something the authorizer answered, rather than the
+     * authorizer failing to answer.
+     */
+    private isAnswer;
+}
+export {};
+//# sourceMappingURL=sim-http-api-authorizer-decisions.d.ts.map

package/dist/service/apigatewayv2/serve/auth/sim-http-api-authorizer-decisions.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-http-api-authorizer-decisions.d.ts","sourceRoot":"","sources":["../../../../../src/service/apigatewayv2/serve/auth/sim-http-api-authorizer-decisions.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,qCAAqC,CAAC;AACpE,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,oDAAoD,CAAC;AAClG,OAAO,KAAK,EAAE,2BAA2B,EAAE,MAAM,yDAAyD,CAAC;AAE3G,UAAU,uCAAuC;IAC/C;;;OAGG;IACH,QAAQ,CAAC,KAAK,EAAE,QAAQ,CAAC;CAC1B;AAED;;;;;;;;;GASG;AACH,qBAAa,6BAA6B;IACxC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAW;IAEjC,YAAY,UAAU,EAAE,uCAAuC,EAE9D;IAED;;;OAGG;IACG,MAAM,CACV,UAAU,EAAE,2BAA2B,EACvC,cAAc,EAAE,SAAS,MAAM,EAAE,EACjC,MAAM,EAAE,MAAM,OAAO,CAAC,uBAAuB,CAAC,GAC7C,OAAO,CAAC,uBAAuB,CAAC,CAclC;IAED;;;OAGG;IACH,OAAO,CAAC,QAAQ;CAGjB"}

package/dist/service/apigatewayv2/serve/auth/sim-http-api-authorizer-decisions.js

@@ -0,0 +1,39 @@
+/**
+ * Reuses a Lambda authorizer's decision for as long as its
+ * `AuthorizerResultTtlInSeconds` says, and makes a new one when there is none
+ * to reuse.
+ *
+ * What is held and what is not is the whole of this: a refusal is held the way
+ * an admission is, because AWS holds whatever answer the authorizer gave. An
+ * authorizer that could not answer at all is not held, since there is no
+ * answer to hold and a request a moment later may find its function working.
+ */
+export class SimHttpApiAuthorizerDecisions {
+    clock;
+    constructor(properties) {
+        this.clock = properties.clock;
+    }
+    /**
+     * The decision for these identity source values, made only if there is not
+     * one already.
+     */
+    async decide(authorizer, identitySource, invoke) {
+        const cached = authorizer.results.find(identitySource, this.clock.now());
+        if (cached !== undefined) {
+            return cached;
+        }
+        const authorization = await invoke();
+        if (this.isAnswer(authorization)) {
+            authorizer.results.store(identitySource, this.clock.now(), authorization);
+        }
+        return authorization;
+    }
+    /**
+     * Whether this is something the authorizer answered, rather than the
+     * authorizer failing to answer.
+     */
+    isAnswer(authorization) {
+        return authorization.admitted || authorization.kind !== "error";
+    }
+}
+//# sourceMappingURL=sim-http-api-authorizer-decisions.js.map

package/dist/service/apigatewayv2/serve/auth/sim-http-api-authorizer-decisions.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-http-api-authorizer-decisions.js","sourceRoot":"","sources":["../../../../../src/service/apigatewayv2/serve/auth/sim-http-api-authorizer-decisions.ts"],"names":[],"mappings":"AAYA;;;;;;;;;GASG;AACH,MAAM,OAAO,6BAA6B;IACvB,KAAK,CAAW;IAEjC,YAAY,UAAmD;QAC7D,IAAI,CAAC,KAAK,GAAG,UAAU,CAAC,KAAK,CAAC;IAChC,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,MAAM,CACV,UAAuC,EACvC,cAAiC,EACjC,MAA8C;QAE9C,MAAM,MAAM,GAAG,UAAU,CAAC,OAAO,CAAC,IAAI,CAAC,cAAc,EAAE,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC;QAEzE,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;YACzB,OAAO,MAAM,CAAC;QAChB,CAAC;QAED,MAAM,aAAa,GAAG,MAAM,MAAM,EAAE,CAAC;QAErC,IAAI,IAAI,CAAC,QAAQ,CAAC,aAAa,CAAC,EAAE,CAAC;YACjC,UAAU,CAAC,OAAO,CAAC,KAAK,CAAC,cAAc,EAAE,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,EAAE,aAAa,CAAC,CAAC;QAC5E,CAAC;QAED,OAAO,aAAa,CAAC;IACvB,CAAC;IAED;;;OAGG;IACK,QAAQ,CAAC,aAAsC;QACrD,OAAO,aAAa,CAAC,QAAQ,IAAI,aAAa,CAAC,IAAI,KAAK,OAAO,CAAC;IAClE,CAAC;CACF"}