@kwiz/node 1.0.57 → 1.0.59

package/dist/auth/exports-index.d.ts

@@ -1,2 +1,3 @@
 export * from './discovery';
+export * from './key-vault';
 export * from './msal';

package/dist/auth/exports-index.js

@@ -15,5 +15,6 @@ var __exportStar = (this && this.__exportStar) || function(m, exports) {
 };
 Object.defineProperty(exports, "__esModule", { value: true });
 __exportStar(require("./discovery"), exports);
+__exportStar(require("./key-vault"), exports);
 __exportStar(require("./msal"), exports);
 //# sourceMappingURL=exports-index.js.map

package/dist/auth/exports-index.js.map

@@ -1 +1 @@
-{"version":3,"file":"exports-index.js","sourceRoot":"","sources":["../../src/auth/exports-index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,8CAA4B;AAC5B,yCAAuB"}
+{"version":3,"file":"exports-index.js","sourceRoot":"","sources":["../../src/auth/exports-index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,8CAA4B;AAC5B,8CAA4B;AAC5B,yCAAuB"}

package/dist/auth/key-vault.d.ts

@@ -0,0 +1,23 @@
+/** provide the URL for azure key vault
+ * to use from an Azure App Service - grant access to "Microsoft Azure App Service" for "Key Vault Certificate User" and "Key Vault Secrets User" roles
+ * For local dev session, grant access to [your app registration name], and add these environment variables:
+ * AZURE_TENANT_ID - your tenant ID
+ * AZURE_CLIENT_ID - your azure app registration id
+ * AZURE_CLIENT_SECRET - your azure app secret
+ */
+export declare function ConfigureKeyVault(config: {
+    url: string;
+}): void;
+type tCertificate = {
+    privateKey: string;
+    certificate: string;
+    thumbprint: string;
+    fetched: number;
+};
+/**
+ * Fetches the active certificate from Azure Key Vault.
+ * It loads the last 2 certificates, uses the old one as long as it is not expired, once it is expired - switches to using the newer one.
+ * by default it caches the result and reuses it, forceRefresh to bypass
+ */
+export declare function getLatestCertificate(certName: string, forceRefresh?: boolean): Promise<tCertificate>;
+export {};

package/dist/auth/key-vault.js

@@ -0,0 +1,136 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ConfigureKeyVault = ConfigureKeyVault;
+exports.getLatestCertificate = getLatestCertificate;
+const identity_1 = require("@azure/identity");
+const keyvault_secrets_1 = require("@azure/keyvault-secrets");
+const common_1 = require("@kwiz/common");
+const node_forge_1 = require("node-forge");
+var logger;
+var keyVaultUrl = null;
+var bias;
+/** provide the URL for azure key vault
+ * to use from an Azure App Service - grant access to "Microsoft Azure App Service" for "Key Vault Certificate User" and "Key Vault Secrets User" roles
+ * For local dev session, grant access to [your app registration name], and add these environment variables:
+ * AZURE_TENANT_ID - your tenant ID
+ * AZURE_CLIENT_ID - your azure app registration id
+ * AZURE_CLIENT_SECRET - your azure app secret
+ */
+function ConfigureKeyVault(config) {
+    keyVaultUrl = config.url;
+    bias = common_1.CommonConfig.i.IsLocalDev ? common_1.shiftDateValues.m10 : common_1.shiftDateValues.h24;
+    logger = new common_1.CommonLogger("key-vault");
+    logger.log(`Configured for ${config.url}, bias: ${common_1.CommonConfig.i.IsLocalDev ? '10 minutes' : '24 hours'}`);
+}
+/**
+ * Fetches the active certificate from Azure Key Vault.
+ * It loads the last 2 certificates, uses the old one as long as it is not expired, once it is expired - switches to using the newer one.
+ * by default it caches the result and reuses it, forceRefresh to bypass
+ */
+async function getLatestCertificate(certName, forceRefresh = false) {
+    try {
+        if ((0, common_1.isNullOrEmptyString)(keyVaultUrl)) {
+            console.error("Call ConfigureKeyVault first!");
+            throw Error("Call ConfigureKeyVault first!");
+        }
+        const res = await (0, common_1.promiseOnce)(`getLatestCertificate(${certName})`, async () => {
+            logger.log(`Fetching ${certName}`);
+            const vaultUrl = keyVaultUrl;
+            if (!vaultUrl) {
+                throw new Error("Missing AZURE_KEYVAULT_URL environment variable.");
+            }
+            try {
+                // DefaultAzureCredential - in azure: automatically discovers your App Service's Managed Identity
+                // In local dev: add AZURE_TENANT_ID,AZURE_CLIENT_ID,AZURE_CLIENT_SECRET to your env file
+                const credential = new identity_1.DefaultAzureCredential();
+                const client = new keyvault_secrets_1.SecretClient(vaultUrl, credential);
+                // List all versions of the secret
+                const versionProperties = [];
+                for await (const prop of client.listPropertiesOfSecretVersions(certName)) {
+                    // Only consider enabled versions
+                    if (prop.enabled) {
+                        versionProperties.push(prop);
+                    }
+                    //do not rely on prop.expiresOn - manually uploaded certificates might input wrong/missing date here!
+                }
+                if (versionProperties.length === 0) {
+                    throw new Error(`No enabled versions found for secret '${certName}'.`);
+                }
+                // Sort them by creation date to get the newest ones first
+                versionProperties.sort((a, b) => b.createdOn.getTime() - a.createdOn.getTime());
+                //most recent certificate
+                const latestSecret = await client.getSecret(certName, { version: versionProperties[0].version });
+                const latestCreds = splitPfxToPemStrings(latestSecret.value);
+                if (versionProperties.length === 1) //only 1 - return it
+                    return { ...latestCreds, fetched: new Date().getTime() };
+                //previous certificate
+                const previousSecret = await client.getSecret(certName, { version: versionProperties[1].version });
+                const previousCreds = splitPfxToPemStrings(previousSecret.value);
+                const creds = stillValid(previousCreds.certificate, true) ? previousCreds : latestCreds;
+                return { ...creds, fetched: new Date().getTime() };
+            }
+            catch (error) {
+                logger.error(`Failed to fetch certificate [${certName}] from Key Vault: ${(0, common_1.GetError)(error)}`);
+                throw error;
+            }
+        }, async (res) => {
+            if (forceRefresh)
+                return false; //never valid... get a new one.
+            if (res?.fetched > 0) {
+                const valid = (0, common_1.shiftDate)("h24", new Date(res.fetched)).getTime() > new Date().getTime();
+                if (!valid)
+                    logger.log(`${certName} too stale`);
+                return valid;
+            }
+            return false;
+        });
+        return res;
+    }
+    catch (e) {
+        return null;
+    }
+}
+/** withBias :
+ * The certificate is valid only if:
+ *  - It started at least 1 day before today (oneDayAgo >= notBefore)
+ *  - There is at least 1 more day before it expires (oneDayFromNow <= notAfter)
+ *  */
+function stillValid(certificate, withBias = false) {
+    const prevCertObj = node_forge_1.default.pki.certificateFromPem(certificate);
+    const now = new Date();
+    const notAfter = withBias ? (0, common_1.shiftDate)(bias) : now;
+    const notBefore = withBias ? (0, common_1.shiftDate)(bias * -1) : now;
+    const isStillValid = notBefore >= prevCertObj.validity.notBefore &&
+        notAfter <= prevCertObj.validity.notAfter;
+    return isStillValid;
+}
+function splitPfxToPemStrings(fullPemString) {
+    try {
+        // 1. Extract the Private Key using regex
+        const privateKeyMatch = fullPemString.match(/-----BEGIN [\s\S]+?-----END [\s\S]+?KEY-----/);
+        const privateKey = privateKeyMatch ? privateKeyMatch[0] : null;
+        // 2. Extract the Public Certificate using regex
+        const certificateMatch = fullPemString.match(/-----BEGIN CERTIFICATE-----[\s\S]+?-----END CERTIFICATE-----/);
+        const certificate = certificateMatch ? certificateMatch[0] : null;
+        if (!privateKey || !certificate) {
+            throw new Error("The retrieved secret did not contain a valid private key and certificate pair.");
+        }
+        // ==========================================
+        // ⚡ COMPUTE THE THUMBPRINT (Required for MSAL)
+        // ==========================================
+        // MSAL needs the unique SHA-1 thumbprint of the public certificate
+        const cert = node_forge_1.default.pki.certificateFromPem(certificate);
+        const der = node_forge_1.default.asn1.toDer(node_forge_1.default.pki.certificateToAsn1(cert)).getBytes();
+        const thumbprint = node_forge_1.default.md.sha1.create().update(der).digest().toHex().toUpperCase();
+        return {
+            privateKey,
+            certificate,
+            thumbprint
+        };
+    }
+    catch (error) {
+        logger.error("Failed to split PFX archive: " + (0, common_1.GetError)(error));
+        throw error;
+    }
+}
+//# sourceMappingURL=key-vault.js.map

package/dist/auth/key-vault.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"key-vault.js","sourceRoot":"","sources":["../../src/auth/key-vault.ts"],"names":[],"mappings":";;AAeA,8CAOC;AAaD,oDAmEC;AAtGD,8CAAyD;AACzD,8DAAuD;AACvD,yCAAkI;AAClI,2CAA+B;AAE/B,IAAI,MAAoB,CAAC;AACzB,IAAI,WAAW,GAAW,IAAI,CAAC;AAC/B,IAAI,IAAY,CAAC;AACjB;;;;;;GAMG;AACH,SAAgB,iBAAiB,CAAC,MAEjC;IACG,WAAW,GAAG,MAAM,CAAC,GAAG,CAAC;IACzB,IAAI,GAAG,qBAAY,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,wBAAe,CAAC,GAAG,CAAC,CAAC,CAAC,wBAAe,CAAC,GAAG,CAAC;IAC7E,MAAM,GAAG,IAAI,qBAAY,CAAC,WAAW,CAAC,CAAC;IACvC,MAAM,CAAC,GAAG,CAAC,kBAAkB,MAAM,CAAC,GAAG,WAAW,qBAAY,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,UAAU,EAAE,CAAC,CAAC;AAC/G,CAAC;AAQD;;;;GAIG;AACI,KAAK,UAAU,oBAAoB,CAAC,QAAgB,EAAE,YAAY,GAAG,KAAK;IAC7E,IAAI,CAAC;QACD,IAAI,IAAA,4BAAmB,EAAC,WAAW,CAAC,EAAE,CAAC;YACnC,OAAO,CAAC,KAAK,CAAC,+BAA+B,CAAC,CAAC;YAC/C,MAAM,KAAK,CAAC,+BAA+B,CAAC,CAAC;QACjD,CAAC;QAED,MAAM,GAAG,GAAG,MAAM,IAAA,oBAAW,EAAe,wBAAwB,QAAQ,GAAG,EAAE,KAAK,IAAI,EAAE;YACxF,MAAM,CAAC,GAAG,CAAC,YAAY,QAAQ,EAAE,CAAC,CAAC;YACnC,MAAM,QAAQ,GAAG,WAAW,CAAC;YAE7B,IAAI,CAAC,QAAQ,EAAE,CAAC;gBACZ,MAAM,IAAI,KAAK,CAAC,kDAAkD,CAAC,CAAC;YACxE,CAAC;YAED,IAAI,CAAC;gBACD,iGAAiG;gBACjG,yFAAyF;gBACzF,MAAM,UAAU,GAAG,IAAI,iCAAsB,EAAE,CAAC;gBAChD,MAAM,MAAM,GAAG,IAAI,+BAAY,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;gBAEtD,kCAAkC;gBAClC,MAAM,iBAAiB,GAAU,EAAE,CAAC;gBACpC,IAAI,KAAK,EAAE,MAAM,IAAI,IAAI,MAAM,CAAC,8BAA8B,CAAC,QAAQ,CAAC,EAAE,CAAC;oBACvE,iCAAiC;oBACjC,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;wBACf,iBAAiB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;oBACjC,CAAC;oBACD,qGAAqG;gBACzG,CAAC;gBACD,IAAI,iBAAiB,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;oBACjC,MAAM,IAAI,KAAK,CAAC,yCAAyC,QAAQ,IAAI,CAAC,CAAC;gBAC3E,CAAC;gBACD,0DAA0D;gBAC1D,iBAAiB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC,SAAS,CAAC,OAAO,EAAE,CAAC,CAAC;gBAEhF,yBAAyB;gBACzB,MAAM,YAAY,GAAG,MAAM,MAAM,CAAC,SAAS,CAAC,QAAQ,EAAE,EAAE,OAAO,EAAE,iBAAiB,CAAC,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC;gBACjG,MAAM,WAAW,GAAG,oBAAoB,CAAC,YAAY,CAAC,KAAM,CAAC,CAAC;gBAC9D,IAAI,iBAAiB,CAAC,MAAM,KAAK,CAAC,EAAC,oBAAoB;oBACnD,OAAO,EAAE,GAAG,WAAW,EAAE,OAAO,EAAE,IAAI,IAAI,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC;gBAE7D,sBAAsB;gBACtB,MAAM,cAAc,GAAG,MAAM,MAAM,CAAC,SAAS,CAAC,QAAQ,EAAE,EAAE,OAAO,EAAE,iBAAiB,CAAC,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC;gBACnG,MAAM,aAAa,GAAG,oBAAoB,CAAC,cAAc,CAAC,KAAM,CAAC,CAAC;gBAElE,MAAM,KAAK,GAAG,UAAU,CAAC,aAAa,CAAC,WAAW,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,WAAW,CAAC;gBACxF,OAAO,EAAE,GAAG,KAAK,EAAE,OAAO,EAAE,IAAI,IAAI,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC;YACvD,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACb,MAAM,CAAC,KAAK,CAAC,gCAAgC,QAAQ,qBAAqB,IAAA,iBAAQ,EAAC,KAAK,CAAC,EAAE,CAAC,CAAC;gBAC7F,MAAM,KAAK,CAAC;YAChB,CAAC;QACL,CAAC,EAAE,KAAK,EAAC,GAAG,EAAC,EAAE;YACX,IAAI,YAAY;gBAAE,OAAO,KAAK,CAAC,CAAA,+BAA+B;YAE9D,IAAI,GAAG,EAAE,OAAO,GAAG,CAAC,EAAE,CAAC;gBACnB,MAAM,KAAK,GAAG,IAAA,kBAAS,EAAC,KAAK,EAAE,IAAI,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,EAAE,GAAG,IAAI,IAAI,EAAE,CAAC,OAAO,EAAE,CAAC;gBACvF,IAAI,CAAC,KAAK;oBAAE,MAAM,CAAC,GAAG,CAAC,GAAG,QAAQ,YAAY,CAAC,CAAC;gBAChD,OAAO,KAAK,CAAC;YACjB,CAAC;YACD,OAAO,KAAK,CAAC;QACjB,CAAC,CAAC,CAAC;QAEH,OAAO,GAAG,CAAC;IACf,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACT,OAAO,IAAI,CAAC;IAChB,CAAC;AACL,CAAC;AAED;;;;MAIM;AACN,SAAS,UAAU,CAAC,WAAmB,EAAE,QAAQ,GAAG,KAAK;IACrD,MAAM,WAAW,GAAG,oBAAK,CAAC,GAAG,CAAC,kBAAkB,CAAC,WAAW,CAAC,CAAC;IAC9D,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC;IACvB,MAAM,QAAQ,GAAG,QAAQ,CAAC,CAAC,CAAC,IAAA,kBAAS,EAAC,IAAI,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC;IAClD,MAAM,SAAS,GAAG,QAAQ,CAAC,CAAC,CAAC,IAAA,kBAAS,EAAC,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC;IAExD,MAAM,YAAY,GAAG,SAAS,IAAI,WAAW,CAAC,QAAQ,CAAC,SAAS;QAC5D,QAAQ,IAAI,WAAW,CAAC,QAAQ,CAAC,QAAQ,CAAC;IAE9C,OAAO,YAAY,CAAC;AACxB,CAAC;AAED,SAAS,oBAAoB,CAAC,aAAqB;IAC/C,IAAI,CAAC;QACD,yCAAyC;QACzC,MAAM,eAAe,GAAG,aAAa,CAAC,KAAK,CAAC,8CAA8C,CAAC,CAAC;QAC5F,MAAM,UAAU,GAAG,eAAe,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QAE/D,gDAAgD;QAChD,MAAM,gBAAgB,GAAG,aAAa,CAAC,KAAK,CAAC,8DAA8D,CAAC,CAAC;QAC7G,MAAM,WAAW,GAAG,gBAAgB,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QAElE,IAAI,CAAC,UAAU,IAAI,CAAC,WAAW,EAAE,CAAC;YAC9B,MAAM,IAAI,KAAK,CAAC,gFAAgF,CAAC,CAAC;QACtG,CAAC;QAED,6CAA6C;QAC7C,+CAA+C;QAC/C,6CAA6C;QAC7C,mEAAmE;QACnE,MAAM,IAAI,GAAG,oBAAK,CAAC,GAAG,CAAC,kBAAkB,CAAC,WAAW,CAAC,CAAC;QACvD,MAAM,GAAG,GAAG,oBAAK,CAAC,IAAI,CAAC,KAAK,CAAC,oBAAK,CAAC,GAAG,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC;QAC3E,MAAM,UAAU,GAAG,oBAAK,CAAC,EAAE,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,EAAE,CAAC,WAAW,EAAE,CAAC;QAErF,OAAO;YACH,UAAU;YACV,WAAW;YACX,UAAU;SACb,CAAC;IAEN,CAAC;IAAC,OAAO,KAAU,EAAE,CAAC;QAClB,MAAM,CAAC,KAAK,CAAC,+BAA+B,GAAG,IAAA,iBAAQ,EAAC,KAAK,CAAC,CAAC,CAAC;QAChE,MAAM,KAAK,CAAC;IAChB,CAAC;AACL,CAAC"}

package/dist/next-js/api.responses.js

@@ -23,7 +23,11 @@ function HttpRespond(o) {
             ...(o?.cache ? exports.apiResponseHeaders.cache(o.cache === true ? 5 : o.cache) : {}),
             ...(o?.html ? exports.apiResponseHeaders.html : {})
         },
-        status: o?.status || o?.error ? 500 : axios_1.HttpStatusCode.Ok
+        status: o?.status > 0 ?
+            o.status
+            : o?.error
+                ? 500
+                : axios_1.HttpStatusCode.Ok
     } : undefined;
 }
 //# sourceMappingURL=api.responses.js.map

package/dist/next-js/api.responses.js.map

@@ -1 +1 @@
-{"version":3,"file":"api.responses.js","sourceRoot":"","sources":["../../src/next-js/api.responses.ts"],"names":[],"mappings":";;;AAeA,kCAgBC;AA/BD,iCAAuC;AAEvC,sIAAsI;AACzH,QAAA,kBAAkB,GAAG;IAC9B,IAAI,EAAE;QACF,6BAA6B,EAAE,GAAG;KACrC;IACD,KAAK,EAAE,CAAC,GAAW,EAAE,EAAE,CAAC,CAAC;QACrB,eAAe,EAAE,mBAAmB,CAAC,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,EAAE;KACnE,CAAC;IACF,IAAI,EAAE;QACF,cAAc,EAAE,WAAW;KAC9B;CACJ,CAAC;AACF,oDAAoD;AACpD,SAAgB,WAAW,CAAC,CAO3B;IACG,OAAO,CAAC,CAAC,CAAC,CAAC;QACP,OAAO,EAAE;YACL,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC,0BAAkB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;YAC3C,GAAG,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC,0BAAkB,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,KAAK,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YAC7E,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC,0BAAkB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;SAC9C;QACD,MAAM,EAAE,CAAC,EAAE,MAAM,IAAI,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,sBAAc,CAAC,EAAE;KAC1D,CAAC,CAAC,CAAC,SAAS,CAAC;AAClB,CAAC"}
+{"version":3,"file":"api.responses.js","sourceRoot":"","sources":["../../src/next-js/api.responses.ts"],"names":[],"mappings":";;;AAeA,kCAoBC;AAnCD,iCAAuC;AAEvC,sIAAsI;AACzH,QAAA,kBAAkB,GAAG;IAC9B,IAAI,EAAE;QACF,6BAA6B,EAAE,GAAG;KACrC;IACD,KAAK,EAAE,CAAC,GAAW,EAAE,EAAE,CAAC,CAAC;QACrB,eAAe,EAAE,mBAAmB,CAAC,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,EAAE;KACnE,CAAC;IACF,IAAI,EAAE;QACF,cAAc,EAAE,WAAW;KAC9B;CACJ,CAAC;AACF,oDAAoD;AACpD,SAAgB,WAAW,CAAC,CAO3B;IACG,OAAO,CAAC,CAAC,CAAC,CAAC;QACP,OAAO,EAAE;YACL,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC,0BAAkB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;YAC3C,GAAG,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC,0BAAkB,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,KAAK,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YAC7E,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC,0BAAkB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;SAC9C;QACD,MAAM,EAAE,CAAC,EAAE,MAAM,GAAG,CAAC,CAAC,CAAC;YACnB,CAAC,CAAC,MAAM;YACR,CAAC,CAAC,CAAC,EAAE,KAAK;gBACN,CAAC,CAAC,GAAG;gBACL,CAAC,CAAC,sBAAc,CAAC,EAAE;KAC9B,CAAC,CAAC,CAAC,SAAS,CAAC;AAClB,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@kwiz/node",
-  "version": "1.0.57",
+  "version": "1.0.59",
   "description": "KWIZ utilities and helpers for node applications",
   "module": "dist/index.js",
   "types": "dist/index.d.ts",
@@ -63,6 +63,7 @@
   "packageManager": "npm@9.5.1",
   "devDependencies": {
     "@types/node": "^22.19.15",
+    "@types/node-forge": "^1.3.14",
     "@types/nodemailer": "^7.0.9",
     "@types/xml2js": "^0.4.14",
     "check-node-version": "^4.2.1",
@@ -75,13 +76,16 @@
   },
   "dependencies": {
     "@azure/data-tables": "^13.2.2",
+    "@azure/identity": "^4.10.1",
+    "@azure/keyvault-secrets": "^4.10.0",
     "@azure/msal-node": "^2.6.4",
     "@azure/storage-blob": "^12.31.0",
     "@jsforce/jsforce-node": "^3.10.14",
-    "@kwiz/common": "^1.0.235",
+    "@kwiz/common": "^1.0.238",
     "axios": "^1.6.7",
     "esbuild": "^0.19.12",
     "get-tsconfig": "^4.7.2",
+    "node-forge": "^1.4.0",
     "nodemailer": "^8.0.1",
     "resolve-pkg-maps": "^1.0.0",
     "xml2js": "^0.6.2"