@kensio/yulin 1.17.2 → 1.18.1

package/dist/serve/payload-2/sim-payload-2-response-builder.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sim-payload-2-response-builder.d.ts","sourceRoot":"","sources":["../../../src/serve/payload-2/sim-payload-2-response-builder.ts"],"names":[],"mappings":"AAQA;;;;;;;;;;;GAWG;AACH,qBAAa,0BAA0B;IACrC,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAiC;IAE9D;;OAEG;IACH,KAAK,CAAC,MAAM,EAAE,OAAO,GAAG,QAAQ,CAS/B;IAED;;;OAGG;IACH,OAAO,CAAC,kBAAkB;IAW1B,OAAO,CAAC,kBAAkB;CAgC3B"}
+{"version":3,"file":"sim-payload-2-response-builder.d.ts","sourceRoot":"","sources":["../../../src/serve/payload-2/sim-payload-2-response-builder.ts"],"names":[],"mappings":"AAQA;;;;;;;;;;;GAWG;AACH,qBAAa,0BAA0B;IACrC,OAAO,CAAC,QAAQ,CAAC,YAAY,CAA8B;IAE3D;;OAEG;IACH,KAAK,CAAC,MAAM,EAAE,OAAO,GAAG,QAAQ,CAS/B;IAED;;;OAGG;IACH,OAAO,CAAC,kBAAkB;IAW1B,OAAO,CAAC,kBAAkB;CAgC3B"}

package/dist/serve/payload-2/sim-payload-2-response-builder.js

@@ -1,4 +1,4 @@
-import { SimPayload2BodyEncoding } from "./sim-payload-2-body-encoding.js";
+import { SimProxyBodyEncoding } from "../proxy/sim-proxy-body-encoding.js";
 const jsonContentType = "application/json";
 /**
  * Turns a payload format 2.0 handler result into the HTTP response the client
@@ -13,7 +13,7 @@ const jsonContentType = "application/json";
  * AWS.
  */
 export class SimPayload2ResponseBuilder {
-    bodyEncoding = new SimPayload2BodyEncoding();
+    bodyEncoding = new SimProxyBodyEncoding();
     /**
      * Build the HTTP response for one handler result.
      */

package/dist/serve/payload-2/sim-payload-2-response-builder.js.map

@@ -1 +1 @@
-{"version":3,"file":"sim-payload-2-response-builder.js","sourceRoot":"","sources":["../../../src/serve/payload-2/sim-payload-2-response-builder.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,uBAAuB,EAAE,MAAM,kCAAkC,CAAC;AAM3E,MAAM,eAAe,GAAG,kBAAkB,CAAC;AAE3C;;;;;;;;;;;GAWG;AACH,MAAM,OAAO,0BAA0B;IACpB,YAAY,GAAG,IAAI,uBAAuB,EAAE,CAAC;IAE9D;;OAEG;IACH,KAAK,CAAC,MAAe;QACnB,IAAI,IAAI,CAAC,kBAAkB,CAAC,MAAM,CAAC,EAAE,CAAC;YACpC,OAAO,IAAI,CAAC,kBAAkB,CAAC,MAAM,CAAC,CAAC;QACzC,CAAC;QAED,OAAO,QAAQ,CAAC,IAAI,CAAC,MAAM,IAAI,IAAI,EAAE;YACnC,MAAM,EAAE,GAAG;YACX,OAAO,EAAE,EAAE,cAAc,EAAE,eAAe,EAAE;SAC7C,CAAC,CAAC;IACL,CAAC;IAED;;;OAGG;IACK,kBAAkB,CACxB,MAAe;QAEf,OAAO,CACL,OAAO,MAAM,KAAK,QAAQ;YAC1B,MAAM,KAAK,IAAI;YACf,YAAY,IAAI,MAAM;YACtB,OAAQ,MAA4B,CAAC,UAAU,KAAK,QAAQ,CAC7D,CAAC;IACJ,CAAC;IAEO,kBAAkB,CAAC,MAAmC;QAC5D,MAAM,OAAO,GAAG,IAAI,OAAO,EAAE,CAAC;QAC9B,MAAM,aAAa,GAAG,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC;QAC3D,MAAM,aAAa,GAAG,MAAM,CAAC,OAAO,IAAI,EAAE,CAAC;QAE3C,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,aAAa,EAAE,CAAC;YAC1C,OAAO,CAAC,GAAG,CAAC,IAAI,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;QACnC,CAAC;QAED,KAAK,MAAM,MAAM,IAAI,aAAa,EAAE,CAAC;YACnC,OAAO,CAAC,MAAM,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC;QACvC,CAAC;QAED,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,EAAE,CAAC;YACjC,OAAO,CAAC,GAAG,CAAC,cAAc,EAAE,eAAe,CAAC,CAAC;QAC/C,CAAC;QAED,MAAM,IAAI,GAAG,IAAI,CAAC,YAAY,CAAC,MAAM,CACnC,MAAM,CAAC,IAAI,IAAI,EAAE,EACjB,MAAM,CAAC,eAAe,IAAI,KAAK,CAChC,CAAC;QAEF,OAAO,IAAI,QAAQ;QACjB,qEAAqE;QACrE,gDAAgD;QAChD,IAAI,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,EAC/B;YACE,MAAM,EAAE,MAAM,CAAC,UAAU;YACzB,OAAO;SACR,CACF,CAAC;IACJ,CAAC;CACF"}
+{"version":3,"file":"sim-payload-2-response-builder.js","sourceRoot":"","sources":["../../../src/serve/payload-2/sim-payload-2-response-builder.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,oBAAoB,EAAE,MAAM,qCAAqC,CAAC;AAM3E,MAAM,eAAe,GAAG,kBAAkB,CAAC;AAE3C;;;;;;;;;;;GAWG;AACH,MAAM,OAAO,0BAA0B;IACpB,YAAY,GAAG,IAAI,oBAAoB,EAAE,CAAC;IAE3D;;OAEG;IACH,KAAK,CAAC,MAAe;QACnB,IAAI,IAAI,CAAC,kBAAkB,CAAC,MAAM,CAAC,EAAE,CAAC;YACpC,OAAO,IAAI,CAAC,kBAAkB,CAAC,MAAM,CAAC,CAAC;QACzC,CAAC;QAED,OAAO,QAAQ,CAAC,IAAI,CAAC,MAAM,IAAI,IAAI,EAAE;YACnC,MAAM,EAAE,GAAG;YACX,OAAO,EAAE,EAAE,cAAc,EAAE,eAAe,EAAE;SAC7C,CAAC,CAAC;IACL,CAAC;IAED;;;OAGG;IACK,kBAAkB,CACxB,MAAe;QAEf,OAAO,CACL,OAAO,MAAM,KAAK,QAAQ;YAC1B,MAAM,KAAK,IAAI;YACf,YAAY,IAAI,MAAM;YACtB,OAAQ,MAA4B,CAAC,UAAU,KAAK,QAAQ,CAC7D,CAAC;IACJ,CAAC;IAEO,kBAAkB,CAAC,MAAmC;QAC5D,MAAM,OAAO,GAAG,IAAI,OAAO,EAAE,CAAC;QAC9B,MAAM,aAAa,GAAG,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC;QAC3D,MAAM,aAAa,GAAG,MAAM,CAAC,OAAO,IAAI,EAAE,CAAC;QAE3C,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,aAAa,EAAE,CAAC;YAC1C,OAAO,CAAC,GAAG,CAAC,IAAI,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;QACnC,CAAC;QAED,KAAK,MAAM,MAAM,IAAI,aAAa,EAAE,CAAC;YACnC,OAAO,CAAC,MAAM,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC;QACvC,CAAC;QAED,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,EAAE,CAAC;YACjC,OAAO,CAAC,GAAG,CAAC,cAAc,EAAE,eAAe,CAAC,CAAC;QAC/C,CAAC;QAED,MAAM,IAAI,GAAG,IAAI,CAAC,YAAY,CAAC,MAAM,CACnC,MAAM,CAAC,IAAI,IAAI,EAAE,EACjB,MAAM,CAAC,eAAe,IAAI,KAAK,CAChC,CAAC;QAEF,OAAO,IAAI,QAAQ;QACjB,qEAAqE;QACrE,gDAAgD;QAChD,IAAI,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,EAC/B;YACE,MAAM,EAAE,MAAM,CAAC,UAAU;YACzB,OAAO;SACR,CACF,CAAC;IACJ,CAAC;CACF"}

package/dist/serve/{payload-2/sim-payload-2-body-encoding.d.ts → proxy/sim-proxy-body-encoding.d.ts}

@@ -1,11 +1,12 @@
 /**
  * Decides how a request or response body crosses the boundary between HTTP
- * bytes and the string a payload format 2.0 event carries.
+ * bytes and the string a Lambda proxy integration event carries.
  *
  * Real AWS passes text bodies through as UTF-8 strings and base64-encodes
  * everything else, telling the handler which happened with isBase64Encoded.
+ * Both payload formats do it the same way, so both read the rules from here.
  */
-export declare class SimPayload2BodyEncoding {
+export declare class SimProxyBodyEncoding {
     /**
      * Whether a content type's body is passed to the handler as text.
      *
@@ -22,4 +23,4 @@ export declare class SimPayload2BodyEncoding {
      */
     decode(body: string, isBase64Encoded: boolean): Uint8Array | string;
 }
-//# sourceMappingURL=sim-payload-2-body-encoding.d.ts.map
+//# sourceMappingURL=sim-proxy-body-encoding.d.ts.map

package/dist/serve/proxy/sim-proxy-body-encoding.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-proxy-body-encoding.d.ts","sourceRoot":"","sources":["../../../src/serve/proxy/sim-proxy-body-encoding.ts"],"names":[],"mappings":"AAOA;;;;;;;GAOG;AACH,qBAAa,oBAAoB;IAC/B;;;;;OAKG;IACH,MAAM,CAAC,WAAW,EAAE,MAAM,GAAG,IAAI,GAAG,OAAO,CAgB1C;IAED;;OAEG;IACH,MAAM,CAAC,KAAK,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,GAAG,IAAI,GAAG,MAAM,CAM5D;IAED;;OAEG;IACH,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,eAAe,EAAE,OAAO,GAAG,UAAU,GAAG,MAAM,CAMlE;CACF"}

package/dist/serve/{payload-2/sim-payload-2-body-encoding.js → proxy/sim-proxy-body-encoding.js}

@@ -6,12 +6,13 @@ const textContentTypes = new Set([
 ]);
 /**
  * Decides how a request or response body crosses the boundary between HTTP
- * bytes and the string a payload format 2.0 event carries.
+ * bytes and the string a Lambda proxy integration event carries.
  *
  * Real AWS passes text bodies through as UTF-8 strings and base64-encodes
  * everything else, telling the handler which happened with isBase64Encoded.
+ * Both payload formats do it the same way, so both read the rules from here.
  */
-export class SimPayload2BodyEncoding {
+export class SimProxyBodyEncoding {
     /**
      * Whether a content type's body is passed to the handler as text.
      *
@@ -50,4 +51,4 @@ export class SimPayload2BodyEncoding {
         return body;
     }
 }
-//# sourceMappingURL=sim-payload-2-body-encoding.js.map
+//# sourceMappingURL=sim-proxy-body-encoding.js.map

package/dist/serve/proxy/sim-proxy-body-encoding.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-proxy-body-encoding.js","sourceRoot":"","sources":["../../../src/serve/proxy/sim-proxy-body-encoding.ts"],"names":[],"mappings":"AAAA,MAAM,gBAAgB,GAAwB,IAAI,GAAG,CAAC;IACpD,wBAAwB;IACxB,kBAAkB;IAClB,mCAAmC;IACnC,iBAAiB;CAClB,CAAC,CAAC;AAEH;;;;;;;GAOG;AACH,MAAM,OAAO,oBAAoB;IAC/B;;;;;OAKG;IACH,MAAM,CAAC,WAA0B;QAC/B,IAAI,WAAW,KAAK,IAAI,EAAE,CAAC;YACzB,OAAO,KAAK,CAAC;QACf,CAAC;QAED,MAAM,SAAS,GAAG,WAAW,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,WAAW,EAAE,IAAI,EAAE,CAAC;QAE3E,IAAI,SAAS,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;YAClC,OAAO,IAAI,CAAC;QACd,CAAC;QAED,IAAI,SAAS,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,SAAS,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;YAC9D,OAAO,IAAI,CAAC;QACd,CAAC;QAED,OAAO,gBAAgB,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;IACzC,CAAC;IAED;;OAEG;IACH,MAAM,CAAC,KAAiB,EAAE,WAA0B;QAClD,IAAI,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,EAAE,CAAC;YAC7B,OAAO,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACzC,CAAC;QAED,OAAO,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;IAC/C,CAAC;IAED;;OAEG;IACH,MAAM,CAAC,IAAY,EAAE,eAAwB;QAC3C,IAAI,eAAe,EAAE,CAAC;YACpB,OAAO,IAAI,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC,CAAC;QACrD,CAAC;QAED,OAAO,IAAI,CAAC;IACd,CAAC;CACF"}

package/dist/serve/proxy/sim-proxy-event-time.d.ts

@@ -0,0 +1,11 @@
+/**
+ * Format the time a proxy integration event carries.
+ *
+ * This is the Common Log Format stamp real events use, such as
+ * `12/Mar/2020:19:03:58 +0000`, always in UTC. Payload format 2.0 puts it in
+ * `requestContext.time` and format 1.0 in `requestContext.requestTime`, and
+ * both carry the same instant in milliseconds beside it for handlers that want
+ * to compute with it.
+ */
+export declare function simProxyEventTime(at: Date): string;
+//# sourceMappingURL=sim-proxy-event-time.d.ts.map

package/dist/serve/proxy/sim-proxy-event-time.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-proxy-event-time.d.ts","sourceRoot":"","sources":["../../../src/serve/proxy/sim-proxy-event-time.ts"],"names":[],"mappings":"AAqBA;;;;;;;;GAQG;AACH,wBAAgB,iBAAiB,CAAC,EAAE,EAAE,IAAI,GAAG,MAAM,CAalD"}

package/dist/serve/{payload-2/sim-payload-2-event-time.js → proxy/sim-proxy-event-time.js}

@@ -17,13 +17,15 @@ function twoDigits(value) {
     return String(value).padStart(2, "0");
 }
 /**
- * Format the time payload format 2.0 carries in requestContext.time.
+ * Format the time a proxy integration event carries.
  *
  * This is the Common Log Format stamp real events use, such as
- * `12/Mar/2020:19:03:58 +0000`, always in UTC. The event's timeEpoch field is
- * the same instant in milliseconds, for handlers that want to compute with it.
+ * `12/Mar/2020:19:03:58 +0000`, always in UTC. Payload format 2.0 puts it in
+ * `requestContext.time` and format 1.0 in `requestContext.requestTime`, and
+ * both carry the same instant in milliseconds beside it for handlers that want
+ * to compute with it.
  */
-export function simPayload2EventTime(at) {
+export function simProxyEventTime(at) {
     const month = months[at.getUTCMonth()];
     assertDefined(month, `Month name for ${at.toISOString()}`);
     const year = String(at.getUTCFullYear());
@@ -35,4 +37,4 @@ export function simPayload2EventTime(at) {
     ].join(":");
     return `${date}:${time} +0000`;
 }
-//# sourceMappingURL=sim-payload-2-event-time.js.map
+//# sourceMappingURL=sim-proxy-event-time.js.map

package/dist/serve/proxy/sim-proxy-event-time.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-proxy-event-time.js","sourceRoot":"","sources":["../../../src/serve/proxy/sim-proxy-event-time.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,kCAAkC,CAAC;AAEjE,MAAM,MAAM,GAAG;IACb,KAAK;IACL,KAAK;IACL,KAAK;IACL,KAAK;IACL,KAAK;IACL,KAAK;IACL,KAAK;IACL,KAAK;IACL,KAAK;IACL,KAAK;IACL,KAAK;IACL,KAAK;CACN,CAAC;AAEF,SAAS,SAAS,CAAC,KAAa;IAC9B,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;AACxC,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,iBAAiB,CAAC,EAAQ;IACxC,MAAM,KAAK,GAAG,MAAM,CAAC,EAAE,CAAC,WAAW,EAAE,CAAC,CAAC;IACvC,aAAa,CAAC,KAAK,EAAE,kBAAkB,EAAE,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC;IAE3D,MAAM,IAAI,GAAG,MAAM,CAAC,EAAE,CAAC,cAAc,EAAE,CAAC,CAAC;IACzC,MAAM,IAAI,GAAG,GAAG,SAAS,CAAC,EAAE,CAAC,UAAU,EAAE,CAAC,IAAI,KAAK,IAAI,IAAI,EAAE,CAAC;IAC9D,MAAM,IAAI,GAAG;QACX,SAAS,CAAC,EAAE,CAAC,WAAW,EAAE,CAAC;QAC3B,SAAS,CAAC,EAAE,CAAC,aAAa,EAAE,CAAC;QAC7B,SAAS,CAAC,EAAE,CAAC,aAAa,EAAE,CAAC;KAC9B,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAEZ,OAAO,GAAG,IAAI,IAAI,IAAI,QAAQ,CAAC;AACjC,CAAC"}

package/dist/serve/proxy/sim-proxy-headers.d.ts

@@ -0,0 +1,23 @@
+/**
+ * What AWS knows about a request it proxied, beyond the request itself.
+ */
+export interface SimProxiedConnection {
+    /** The AWS-shaped hostname of the endpoint the request reached. */
+    readonly domainName: string;
+    readonly traceId: string;
+    readonly sourceIp: string;
+}
+export interface SimProxiedRequest extends SimProxiedConnection {
+    readonly request: Request;
+}
+/**
+ * The headers AWS sets itself on a request it proxies to a function.
+ *
+ * Both payload formats carry the same ones, so both read them from here.
+ *
+ * These are set rather than merged: AWS terminates the connection itself and
+ * rewrites them before the handler sees them, so whatever a client sent under
+ * those names does not survive.
+ */
+export declare function simProxyHeaders(proxied: SimProxiedConnection): Record<string, string>;
+//# sourceMappingURL=sim-proxy-headers.d.ts.map

package/dist/serve/proxy/sim-proxy-headers.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-proxy-headers.d.ts","sourceRoot":"","sources":["../../../src/serve/proxy/sim-proxy-headers.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH,MAAM,WAAW,oBAAoB;IACnC,mEAAmE;IACnE,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;CAC3B;AAED,MAAM,WAAW,iBAAkB,SAAQ,oBAAoB;IAC7D,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;CAC3B;AAED;;;;;;;;GAQG;AACH,wBAAgB,eAAe,CAC7B,OAAO,EAAE,oBAAoB,GAC5B,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAYxB"}

package/dist/serve/proxy/sim-proxy-headers.js

@@ -0,0 +1,23 @@
+/**
+ * The headers AWS sets itself on a request it proxies to a function.
+ *
+ * Both payload formats carry the same ones, so both read them from here.
+ *
+ * These are set rather than merged: AWS terminates the connection itself and
+ * rewrites them before the handler sees them, so whatever a client sent under
+ * those names does not survive.
+ */
+export function simProxyHeaders(proxied) {
+    return {
+        // The endpoint's own hostname, not the localhost one the request arrived
+        // at, because that is the hostname the request named on real AWS.
+        host: proxied.domainName,
+        "x-amzn-trace-id": proxied.traceId,
+        "x-forwarded-for": proxied.sourceIp,
+        // Simulated endpoints are reached over plain localhost HTTP, while a real
+        // one is only reachable over HTTPS, so these describe the AWS endpoint.
+        "x-forwarded-port": "443",
+        "x-forwarded-proto": "https",
+    };
+}
+//# sourceMappingURL=sim-proxy-headers.js.map

package/dist/serve/proxy/sim-proxy-headers.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-proxy-headers.js","sourceRoot":"","sources":["../../../src/serve/proxy/sim-proxy-headers.ts"],"names":[],"mappings":"AAcA;;;;;;;;GAQG;AACH,MAAM,UAAU,eAAe,CAC7B,OAA6B;IAE7B,OAAO;QACL,yEAAyE;QACzE,kEAAkE;QAClE,IAAI,EAAE,OAAO,CAAC,UAAU;QACxB,iBAAiB,EAAE,OAAO,CAAC,OAAO;QAClC,iBAAiB,EAAE,OAAO,CAAC,QAAQ;QACnC,0EAA0E;QAC1E,wEAAwE;QACxE,kBAAkB,EAAE,KAAK;QACzB,mBAAmB,EAAE,OAAO;KAC7B,CAAC;AACJ,CAAC"}

package/dist/service/apigateway/api/authorizer/identity/sim-rest-api-header-identity-source.d.ts

@@ -0,0 +1,22 @@
+import { type SimRestApiIdentitySource } from "./sim-rest-api-identity-source.js";
+/**
+ * The prefix a header identity source is written with.
+ */
+export declare const simRestApiHeaderIdentityPrefix = "method.request.header.";
+/**
+ * An identity source naming one request header, such as
+ * `method.request.header.Authorization`.
+ *
+ * Header names are matched case-insensitively, which is what `Headers` does
+ * and what HTTP requires.
+ */
+export declare class SimRestApiHeaderIdentitySource implements SimRestApiIdentitySource {
+    readonly expression: string;
+    private readonly headerName;
+    constructor(headerName: string);
+    /**
+     * The header this request carries, if it carries one.
+     */
+    value(request: Request): string | undefined;
+}
+//# sourceMappingURL=sim-rest-api-header-identity-source.d.ts.map

package/dist/service/apigateway/api/authorizer/identity/sim-rest-api-header-identity-source.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-rest-api-header-identity-source.d.ts","sourceRoot":"","sources":["../../../../../../src/service/apigateway/api/authorizer/identity/sim-rest-api-header-identity-source.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,KAAK,wBAAwB,EAE9B,MAAM,mCAAmC,CAAC;AAE3C;;GAEG;AACH,eAAO,MAAM,8BAA8B,2BAA2B,CAAC;AAEvE;;;;;;GAMG;AACH,qBAAa,8BAA+B,YAAW,wBAAwB;IAC7E,SAAgB,UAAU,EAAE,MAAM,CAAC;IAEnC,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAS;IAEpC,YAAY,UAAU,EAAE,MAAM,EAG7B;IAED;;OAEG;IACH,KAAK,CAAC,OAAO,EAAE,OAAO,GAAG,MAAM,GAAG,SAAS,CAE1C;CACF"}

package/dist/service/apigateway/api/authorizer/identity/sim-rest-api-header-identity-source.js

@@ -0,0 +1,27 @@
+import { simRestApiIdentityValue, } from "./sim-rest-api-identity-source.js";
+/**
+ * The prefix a header identity source is written with.
+ */
+export const simRestApiHeaderIdentityPrefix = "method.request.header.";
+/**
+ * An identity source naming one request header, such as
+ * `method.request.header.Authorization`.
+ *
+ * Header names are matched case-insensitively, which is what `Headers` does
+ * and what HTTP requires.
+ */
+export class SimRestApiHeaderIdentitySource {
+    expression;
+    headerName;
+    constructor(headerName) {
+        this.expression = `${simRestApiHeaderIdentityPrefix}${headerName}`;
+        this.headerName = headerName;
+    }
+    /**
+     * The header this request carries, if it carries one.
+     */
+    value(request) {
+        return simRestApiIdentityValue(request.headers.get(this.headerName));
+    }
+}
+//# sourceMappingURL=sim-rest-api-header-identity-source.js.map

package/dist/service/apigateway/api/authorizer/identity/sim-rest-api-header-identity-source.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-rest-api-header-identity-source.js","sourceRoot":"","sources":["../../../../../../src/service/apigateway/api/authorizer/identity/sim-rest-api-header-identity-source.ts"],"names":[],"mappings":"AAAA,OAAO,EAEL,uBAAuB,GACxB,MAAM,mCAAmC,CAAC;AAE3C;;GAEG;AACH,MAAM,CAAC,MAAM,8BAA8B,GAAG,wBAAwB,CAAC;AAEvE;;;;;;GAMG;AACH,MAAM,OAAO,8BAA8B;IACzB,UAAU,CAAS;IAElB,UAAU,CAAS;IAEpC,YAAY,UAAkB;QAC5B,IAAI,CAAC,UAAU,GAAG,GAAG,8BAA8B,GAAG,UAAU,EAAE,CAAC;QACnE,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC;IAC/B,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,OAAgB;QACpB,OAAO,uBAAuB,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC;IACvE,CAAC;CACF"}

package/dist/service/apigateway/api/authorizer/identity/sim-rest-api-identity-source-parser.d.ts

@@ -0,0 +1,45 @@
+import type { SimRestApiAuthorizerType } from "../sim-rest-api-authorizer.js";
+import type { SimRestApiIdentitySource } from "./sim-rest-api-identity-source.js";
+/**
+ * Reads the identity source expressions a REST API authorizer is configured
+ * with.
+ *
+ * An expression naming somewhere this simulation does not read from is refused
+ * rather than accepted and looked for nowhere, since an authorizer that never
+ * finds what it looks for refuses every request, which looks like a signing
+ * problem rather than the configuration one it is. That leaves out
+ * `method.request.path`, `context` and `stageVariables`, which a `REQUEST`
+ * authorizer may also name on AWS.
+ *
+ * A `TOKEN` and a `COGNITO_USER_POOLS` authorizer each read one header and
+ * nothing else, which is the rule real API Gateway holds both to, so they
+ * parse with `header`.
+ */
+export declare class SimRestApiIdentitySourceParser {
+    /**
+     * Read the one header an authorizer of this kind takes its token from.
+     */
+    header(expression: string, authorizerType: SimRestApiAuthorizerType): SimRestApiIdentitySource;
+    /**
+     * Read one expression of a `REQUEST` authorizer's identity source.
+     */
+    parse(expression: string): SimRestApiIdentitySource;
+    /**
+     * The header an expression names, refusing one no request could carry.
+     *
+     * A header name is an HTTP field name, and anything else is refused here
+     * rather than at request time: reading a header by an invalid name throws,
+     * and it would throw on every request to the method rather than on the
+     * command that configured it.
+     */
+    private headerSource;
+    /**
+     * The name an expression carries after its prefix, refusing an empty one.
+     *
+     * An expression naming nothing finds nothing on every request, so the
+     * authorizer refuses everyone for a reason that reads like a signing problem
+     * rather than the configuration one it is.
+     */
+    private named;
+}
+//# sourceMappingURL=sim-rest-api-identity-source-parser.d.ts.map

package/dist/service/apigateway/api/authorizer/identity/sim-rest-api-identity-source-parser.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-rest-api-identity-source-parser.d.ts","sourceRoot":"","sources":["../../../../../../src/service/apigateway/api/authorizer/identity/sim-rest-api-identity-source-parser.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,+BAA+B,CAAC;AAK9E,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,mCAAmC,CAAC;AAWlF;;;;;;;;;;;;;;GAcG;AACH,qBAAa,8BAA8B;IACzC;;OAEG;IACH,MAAM,CACJ,UAAU,EAAE,MAAM,EAClB,cAAc,EAAE,wBAAwB,GACvC,wBAAwB,CAU1B;IAED;;OAEG;IACH,KAAK,CAAC,UAAU,EAAE,MAAM,GAAG,wBAAwB,CAqBlD;IAED;;;;;;;OAOG;IACH,OAAO,CAAC,YAAY;IAkBpB;;;;;;OAMG;IACH,OAAO,CAAC,KAAK;CAUd"}

package/dist/service/apigateway/api/authorizer/identity/sim-rest-api-identity-source-parser.js

@@ -0,0 +1,82 @@
+import { SimApiGatewayBadRequest } from "../../../error/sim-api-gateway.error.js";
+import { SimRestApiHeaderIdentitySource, simRestApiHeaderIdentityPrefix, } from "./sim-rest-api-header-identity-source.js";
+import { SimRestApiQueryStringIdentitySource, simRestApiQueryStringIdentityPrefix, } from "./sim-rest-api-query-string-identity-source.js";
+/**
+ * The characters an HTTP field name holds, which is the RFC 9110 token.
+ */
+const httpFieldName = /^[!#$%&'*+.^_`|~\w-]+$/u;
+/**
+ * Reads the identity source expressions a REST API authorizer is configured
+ * with.
+ *
+ * An expression naming somewhere this simulation does not read from is refused
+ * rather than accepted and looked for nowhere, since an authorizer that never
+ * finds what it looks for refuses every request, which looks like a signing
+ * problem rather than the configuration one it is. That leaves out
+ * `method.request.path`, `context` and `stageVariables`, which a `REQUEST`
+ * authorizer may also name on AWS.
+ *
+ * A `TOKEN` and a `COGNITO_USER_POOLS` authorizer each read one header and
+ * nothing else, which is the rule real API Gateway holds both to, so they
+ * parse with `header`.
+ */
+export class SimRestApiIdentitySourceParser {
+    /**
+     * Read the one header an authorizer of this kind takes its token from.
+     */
+    header(expression, authorizerType) {
+        if (!expression.startsWith(simRestApiHeaderIdentityPrefix)) {
+            throw new SimApiGatewayBadRequest(`identitySource '${expression}' is not simulated: a ` +
+                `${authorizerType} authorizer reads one header, written as ` +
+                `'${simRestApiHeaderIdentityPrefix}<name>'`);
+        }
+        return this.headerSource(expression);
+    }
+    /**
+     * Read one expression of a `REQUEST` authorizer's identity source.
+     */
+    parse(expression) {
+        if (expression.startsWith(simRestApiHeaderIdentityPrefix)) {
+            return this.headerSource(expression);
+        }
+        if (expression.startsWith(simRestApiQueryStringIdentityPrefix)) {
+            return new SimRestApiQueryStringIdentitySource(this.named(expression, expression.slice(simRestApiQueryStringIdentityPrefix.length), "query string parameter"));
+        }
+        throw new SimApiGatewayBadRequest(`identitySource '${expression}' is not simulated: a REQUEST ` +
+            `authorizer reads request headers and query string parameters, ` +
+            `written as '${simRestApiHeaderIdentityPrefix}<name>' or ` +
+            `'${simRestApiQueryStringIdentityPrefix}<name>'`);
+    }
+    /**
+     * The header an expression names, refusing one no request could carry.
+     *
+     * A header name is an HTTP field name, and anything else is refused here
+     * rather than at request time: reading a header by an invalid name throws,
+     * and it would throw on every request to the method rather than on the
+     * command that configured it.
+     */
+    headerSource(expression) {
+        const name = this.named(expression, expression.slice(simRestApiHeaderIdentityPrefix.length), "header");
+        if (!httpFieldName.test(name)) {
+            throw new SimApiGatewayBadRequest(`identitySource '${expression}' names the header '${name}', which ` +
+                `is not a header name: an HTTP field name holds letters, digits ` +
+                `and the characters !#$%&'*+-.^_\`|~`);
+        }
+        return new SimRestApiHeaderIdentitySource(name);
+    }
+    /**
+     * The name an expression carries after its prefix, refusing an empty one.
+     *
+     * An expression naming nothing finds nothing on every request, so the
+     * authorizer refuses everyone for a reason that reads like a signing problem
+     * rather than the configuration one it is.
+     */
+    named(expression, name, what) {
+        if (name.length === 0) {
+            throw new SimApiGatewayBadRequest(`identitySource '${expression}' names no ${what}, so it would find ` +
+                `nothing on every request`);
+        }
+        return name;
+    }
+}
+//# sourceMappingURL=sim-rest-api-identity-source-parser.js.map

package/dist/service/apigateway/api/authorizer/identity/sim-rest-api-identity-source-parser.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-rest-api-identity-source-parser.js","sourceRoot":"","sources":["../../../../../../src/service/apigateway/api/authorizer/identity/sim-rest-api-identity-source-parser.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,uBAAuB,EAAE,MAAM,yCAAyC,CAAC;AAElF,OAAO,EACL,8BAA8B,EAC9B,8BAA8B,GAC/B,MAAM,0CAA0C,CAAC;AAElD,OAAO,EACL,mCAAmC,EACnC,mCAAmC,GACpC,MAAM,gDAAgD,CAAC;AAExD;;GAEG;AACH,MAAM,aAAa,GAAG,yBAAyB,CAAC;AAEhD;;;;;;;;;;;;;;GAcG;AACH,MAAM,OAAO,8BAA8B;IACzC;;OAEG;IACH,MAAM,CACJ,UAAkB,EAClB,cAAwC;QAExC,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,8BAA8B,CAAC,EAAE,CAAC;YAC3D,MAAM,IAAI,uBAAuB,CAC/B,mBAAmB,UAAU,wBAAwB;gBACnD,GAAG,cAAc,2CAA2C;gBAC5D,IAAI,8BAA8B,SAAS,CAC9C,CAAC;QACJ,CAAC;QAED,OAAO,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC,CAAC;IACvC,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,UAAkB;QACtB,IAAI,UAAU,CAAC,UAAU,CAAC,8BAA8B,CAAC,EAAE,CAAC;YAC1D,OAAO,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC,CAAC;QACvC,CAAC;QAED,IAAI,UAAU,CAAC,UAAU,CAAC,mCAAmC,CAAC,EAAE,CAAC;YAC/D,OAAO,IAAI,mCAAmC,CAC5C,IAAI,CAAC,KAAK,CACR,UAAU,EACV,UAAU,CAAC,KAAK,CAAC,mCAAmC,CAAC,MAAM,CAAC,EAC5D,wBAAwB,CACzB,CACF,CAAC;QACJ,CAAC;QAED,MAAM,IAAI,uBAAuB,CAC/B,mBAAmB,UAAU,gCAAgC;YAC3D,gEAAgE;YAChE,eAAe,8BAA8B,aAAa;YAC1D,IAAI,mCAAmC,SAAS,CACnD,CAAC;IACJ,CAAC;IAED;;;;;;;OAOG;IACK,YAAY,CAAC,UAAkB;QACrC,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CACrB,UAAU,EACV,UAAU,CAAC,KAAK,CAAC,8BAA8B,CAAC,MAAM,CAAC,EACvD,QAAQ,CACT,CAAC;QAEF,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YAC9B,MAAM,IAAI,uBAAuB,CAC/B,mBAAmB,UAAU,uBAAuB,IAAI,WAAW;gBACjE,iEAAiE;gBACjE,qCAAqC,CACxC,CAAC;QACJ,CAAC;QAED,OAAO,IAAI,8BAA8B,CAAC,IAAI,CAAC,CAAC;IAClD,CAAC;IAED;;;;;;OAMG;IACK,KAAK,CAAC,UAAkB,EAAE,IAAY,EAAE,IAAY;QAC1D,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACtB,MAAM,IAAI,uBAAuB,CAC/B,mBAAmB,UAAU,cAAc,IAAI,qBAAqB;gBAClE,0BAA0B,CAC7B,CAAC;QACJ,CAAC;QAED,OAAO,IAAI,CAAC;IACd,CAAC;CACF"}

package/dist/service/apigateway/api/authorizer/identity/sim-rest-api-identity-source.d.ts

@@ -0,0 +1,33 @@
+/**
+ * Where an authorizer takes what it identifies the caller by.
+ *
+ * An identity source is a request mapping expression. Each kind reads from
+ * somewhere different and answers the same question, so reading a list of them
+ * is a loop rather than a switch over kinds.
+ *
+ * A source the request supplies nothing at is what refuses a request before
+ * the authorizer is invoked.
+ */
+export interface SimRestApiIdentitySource {
+    /**
+     * The expression as it was written, which is what the API reports back.
+     */
+    readonly expression: string;
+    /**
+     * What this request carries at this identity source, if it carries anything.
+     *
+     * An empty value is the same as no value here: real API Gateway treats a
+     * source it finds nothing at as one the request did not supply, and refuses
+     * the request without asking the authorizer anything.
+     */
+    value(request: Request): string | undefined;
+}
+/**
+ * A value the request actually supplied, rather than an empty one.
+ *
+ * The value is answered as it arrived, and trimmed only to decide whether the
+ * request supplied anything at all. What is around a value is part of it,
+ * since an authorizer is handed what the client sent.
+ */
+export declare function simRestApiIdentityValue(value: string | null): string | undefined;
+//# sourceMappingURL=sim-rest-api-identity-source.d.ts.map

package/dist/service/apigateway/api/authorizer/identity/sim-rest-api-identity-source.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-rest-api-identity-source.d.ts","sourceRoot":"","sources":["../../../../../../src/service/apigateway/api/authorizer/identity/sim-rest-api-identity-source.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AACH,MAAM,WAAW,wBAAwB;IACvC;;OAEG;IACH,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAE5B;;;;;;OAMG;IACH,KAAK,CAAC,OAAO,EAAE,OAAO,GAAG,MAAM,GAAG,SAAS,CAAC;CAC7C;AAED;;;;;;GAMG;AACH,wBAAgB,uBAAuB,CACrC,KAAK,EAAE,MAAM,GAAG,IAAI,GACnB,MAAM,GAAG,SAAS,CAMpB"}

package/dist/service/apigateway/api/authorizer/identity/sim-rest-api-identity-source.js

@@ -0,0 +1,14 @@
+/**
+ * A value the request actually supplied, rather than an empty one.
+ *
+ * The value is answered as it arrived, and trimmed only to decide whether the
+ * request supplied anything at all. What is around a value is part of it,
+ * since an authorizer is handed what the client sent.
+ */
+export function simRestApiIdentityValue(value) {
+    if (value === null || value.trim().length === 0) {
+        return undefined;
+    }
+    return value;
+}
+//# sourceMappingURL=sim-rest-api-identity-source.js.map

package/dist/service/apigateway/api/authorizer/identity/sim-rest-api-identity-source.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-rest-api-identity-source.js","sourceRoot":"","sources":["../../../../../../src/service/apigateway/api/authorizer/identity/sim-rest-api-identity-source.ts"],"names":[],"mappings":"AA0BA;;;;;;GAMG;AACH,MAAM,UAAU,uBAAuB,CACrC,KAAoB;IAEpB,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAChD,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,OAAO,KAAK,CAAC;AACf,CAAC"}

package/dist/service/apigateway/api/authorizer/identity/sim-rest-api-identity-sources.d.ts

@@ -0,0 +1,48 @@
+/**
+ * The identity sources an authorizer is configured with.
+ *
+ * A REST API writes them as one comma-separated string, where an HTTP API
+ * takes a list. A `TOKEN` authorizer names one header and a `REQUEST`
+ * authorizer names as many headers and query string parameters as identify its
+ * callers.
+ *
+ * API Gateway checks the whole set before it invokes anything: a request
+ * missing any one of them is refused with a 401 and the function never runs.
+ * The order they were configured in is kept, because that is the order their
+ * values reach the authorizer in.
+ */
+export declare class SimRestApiIdentitySources {
+    private readonly sources;
+    private constructor();
+    /**
+     * Read the one header a `TOKEN` authorizer takes its token from.
+     */
+    static token(identitySource: string): SimRestApiIdentitySources;
+    /**
+     * Read the comma-separated expressions a `REQUEST` authorizer identifies its
+     * callers by.
+     *
+     * Whitespace around a separator is dropped, since CDK's `IdentitySource`
+     * writes the list joined by commas and a template written by hand often
+     * spaces them out.
+     *
+     * A stray comma leaves an empty expression, and that is refused rather than
+     * dropped. A dropped one would make a list the caller wrote and a list the
+     * authorizer holds two different things.
+     */
+    static request(identitySource: string): SimRestApiIdentitySources;
+    /**
+     * The expressions as they were written, joined the way the REST API reports
+     * them back.
+     */
+    get expression(): string;
+    /**
+     * The values this request carries, in the order the sources were configured,
+     * or nothing at all when it is missing any one of them.
+     *
+     * These are the values rather than the expressions that found them, which is
+     * what a `TOKEN` authorizer is handed as its `authorizationToken`.
+     */
+    values(request: Request): string[] | undefined;
+}
+//# sourceMappingURL=sim-rest-api-identity-sources.d.ts.map

package/dist/service/apigateway/api/authorizer/identity/sim-rest-api-identity-sources.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-rest-api-identity-sources.d.ts","sourceRoot":"","sources":["../../../../../../src/service/apigateway/api/authorizer/identity/sim-rest-api-identity-sources.ts"],"names":[],"mappings":"AAMA;;;;;;;;;;;;GAYG;AACH,qBAAa,yBAAyB;IACpC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAsC;IAE9D,OAAO,eAEN;IAED;;OAEG;IACH,MAAM,CAAC,KAAK,CAAC,cAAc,EAAE,MAAM,GAAG,yBAAyB,CAI9D;IAED;;;;;;;;;;;OAWG;IACH,MAAM,CAAC,OAAO,CAAC,cAAc,EAAE,MAAM,GAAG,yBAAyB,CAgBhE;IAED;;;OAGG;IACH,IAAI,UAAU,IAAI,MAAM,CAEvB;IAED;;;;;;OAMG;IACH,MAAM,CAAC,OAAO,EAAE,OAAO,GAAG,MAAM,EAAE,GAAG,SAAS,CAc7C;CACF"}

package/dist/service/apigateway/api/authorizer/identity/sim-rest-api-identity-sources.js

@@ -0,0 +1,79 @@
+import { SimApiGatewayBadRequest } from "../../../error/sim-api-gateway.error.js";
+import { SimRestApiIdentitySourceParser } from "./sim-rest-api-identity-source-parser.js";
+const parser = new SimRestApiIdentitySourceParser();
+/**
+ * The identity sources an authorizer is configured with.
+ *
+ * A REST API writes them as one comma-separated string, where an HTTP API
+ * takes a list. A `TOKEN` authorizer names one header and a `REQUEST`
+ * authorizer names as many headers and query string parameters as identify its
+ * callers.
+ *
+ * API Gateway checks the whole set before it invokes anything: a request
+ * missing any one of them is refused with a 401 and the function never runs.
+ * The order they were configured in is kept, because that is the order their
+ * values reach the authorizer in.
+ */
+export class SimRestApiIdentitySources {
+    sources;
+    constructor(sources) {
+        this.sources = sources;
+    }
+    /**
+     * Read the one header a `TOKEN` authorizer takes its token from.
+     */
+    static token(identitySource) {
+        return new SimRestApiIdentitySources([
+            parser.header(identitySource, "TOKEN"),
+        ]);
+    }
+    /**
+     * Read the comma-separated expressions a `REQUEST` authorizer identifies its
+     * callers by.
+     *
+     * Whitespace around a separator is dropped, since CDK's `IdentitySource`
+     * writes the list joined by commas and a template written by hand often
+     * spaces them out.
+     *
+     * A stray comma leaves an empty expression, and that is refused rather than
+     * dropped. A dropped one would make a list the caller wrote and a list the
+     * authorizer holds two different things.
+     */
+    static request(identitySource) {
+        const expressions = identitySource
+            .split(",")
+            .map((expression) => expression.trim());
+        if (expressions.some((expression) => expression.length === 0)) {
+            throw new SimApiGatewayBadRequest(`identitySource '${identitySource}' holds an empty expression ` +
+                `between its commas, and every expression has to name somewhere ` +
+                `the request carries something`);
+        }
+        return new SimRestApiIdentitySources(expressions.map((expression) => parser.parse(expression)));
+    }
+    /**
+     * The expressions as they were written, joined the way the REST API reports
+     * them back.
+     */
+    get expression() {
+        return this.sources.map((source) => source.expression).join(",");
+    }
+    /**
+     * The values this request carries, in the order the sources were configured,
+     * or nothing at all when it is missing any one of them.
+     *
+     * These are the values rather than the expressions that found them, which is
+     * what a `TOKEN` authorizer is handed as its `authorizationToken`.
+     */
+    values(request) {
+        const values = [];
+        for (const source of this.sources) {
+            const value = source.value(request);
+            if (value === undefined) {
+                return undefined;
+            }
+            values.push(value);
+        }
+        return values;
+    }
+}
+//# sourceMappingURL=sim-rest-api-identity-sources.js.map

package/dist/service/apigateway/api/authorizer/identity/sim-rest-api-identity-sources.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-rest-api-identity-sources.js","sourceRoot":"","sources":["../../../../../../src/service/apigateway/api/authorizer/identity/sim-rest-api-identity-sources.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,uBAAuB,EAAE,MAAM,yCAAyC,CAAC;AAClF,OAAO,EAAE,8BAA8B,EAAE,MAAM,0CAA0C,CAAC;AAG1F,MAAM,MAAM,GAAG,IAAI,8BAA8B,EAAE,CAAC;AAEpD;;;;;;;;;;;;GAYG;AACH,MAAM,OAAO,yBAAyB;IACnB,OAAO,CAAsC;IAE9D,YAAoB,OAA4C;QAC9D,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;IACzB,CAAC;IAED;;OAEG;IACH,MAAM,CAAC,KAAK,CAAC,cAAsB;QACjC,OAAO,IAAI,yBAAyB,CAAC;YACnC,MAAM,CAAC,MAAM,CAAC,cAAc,EAAE,OAAO,CAAC;SACvC,CAAC,CAAC;IACL,CAAC;IAED;;;;;;;;;;;OAWG;IACH,MAAM,CAAC,OAAO,CAAC,cAAsB;QACnC,MAAM,WAAW,GAAG,cAAc;aAC/B,KAAK,CAAC,GAAG,CAAC;aACV,GAAG,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC,UAAU,CAAC,IAAI,EAAE,CAAC,CAAC;QAE1C,IAAI,WAAW,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC,UAAU,CAAC,MAAM,KAAK,CAAC,CAAC,EAAE,CAAC;YAC9D,MAAM,IAAI,uBAAuB,CAC/B,mBAAmB,cAAc,8BAA8B;gBAC7D,iEAAiE;gBACjE,+BAA+B,CAClC,CAAC;QACJ,CAAC;QAED,OAAO,IAAI,yBAAyB,CAClC,WAAW,CAAC,GAAG,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAC1D,CAAC;IACJ,CAAC;IAED;;;OAGG;IACH,IAAI,UAAU;QACZ,OAAO,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACnE,CAAC;IAED;;;;;;OAMG;IACH,MAAM,CAAC,OAAgB;QACrB,MAAM,MAAM,GAAa,EAAE,CAAC;QAE5B,KAAK,MAAM,MAAM,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YAClC,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;YAEpC,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;gBACxB,OAAO,SAAS,CAAC;YACnB,CAAC;YAED,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACrB,CAAC;QAED,OAAO,MAAM,CAAC;IAChB,CAAC;CACF"}

package/dist/service/apigateway/api/authorizer/identity/sim-rest-api-query-string-identity-source.d.ts

@@ -0,0 +1,22 @@
+import { type SimRestApiIdentitySource } from "./sim-rest-api-identity-source.js";
+/**
+ * The prefix a query string identity source is written with.
+ */
+export declare const simRestApiQueryStringIdentityPrefix = "method.request.querystring.";
+/**
+ * An identity source naming one query string parameter, such as
+ * `method.request.querystring.access_token`.
+ *
+ * A repeated parameter supplies its first value, which is the one a mapping
+ * expression reads on real API Gateway.
+ */
+export declare class SimRestApiQueryStringIdentitySource implements SimRestApiIdentitySource {
+    readonly expression: string;
+    private readonly parameterName;
+    constructor(parameterName: string);
+    /**
+     * The query string parameter this request carries, if it carries one.
+     */
+    value(request: Request): string | undefined;
+}
+//# sourceMappingURL=sim-rest-api-query-string-identity-source.d.ts.map

package/dist/service/apigateway/api/authorizer/identity/sim-rest-api-query-string-identity-source.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-rest-api-query-string-identity-source.d.ts","sourceRoot":"","sources":["../../../../../../src/service/apigateway/api/authorizer/identity/sim-rest-api-query-string-identity-source.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,KAAK,wBAAwB,EAE9B,MAAM,mCAAmC,CAAC;AAE3C;;GAEG;AACH,eAAO,MAAM,mCAAmC,gCACjB,CAAC;AAEhC;;;;;;GAMG;AACH,qBAAa,mCAAoC,YAAW,wBAAwB;IAClF,SAAgB,UAAU,EAAE,MAAM,CAAC;IAEnC,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAS;IAEvC,YAAY,aAAa,EAAE,MAAM,EAGhC;IAED;;OAEG;IACH,KAAK,CAAC,OAAO,EAAE,OAAO,GAAG,MAAM,GAAG,SAAS,CAI1C;CACF"}