@loopstack/auth 0.19.0 → 0.21.0-rc.0

package/dist/auth.module.js

@@ -14,12 +14,12 @@ const jwt_1 = require("@nestjs/jwt");
 const passport_1 = require("@nestjs/passport");
 const typeorm_1 = require("@nestjs/typeorm");
 const common_2 = require("@loopstack/common");
+const assign_role_command_1 = require("./commands/assign-role.command");
 const controllers_1 = require("./controllers");
 const guards_1 = require("./guards");
 const repositories_1 = require("./repositories");
 const services_1 = require("./services");
 const config_validation_service_1 = require("./services/config-validation.service");
-const hub_audit_service_1 = require("./services/hub-audit.service");
 const strategies_1 = require("./strategies");
 let AuthModule = AuthModule_1 = class AuthModule {
     static forRoot() {
@@ -39,7 +39,7 @@ let AuthModule = AuthModule_1 = class AuthModule {
                     }),
                     inject: [config_1.ConfigService],
                 }),
-                typeorm_1.TypeOrmModule.forFeature([common_2.User, common_2.Permission, common_2.Role]),
+                typeorm_1.TypeOrmModule.forFeature([common_2.User, common_2.Role]),
             ],
             controllers: [controllers_1.AuthController],
             providers: [
@@ -48,12 +48,12 @@ let AuthModule = AuthModule_1 = class AuthModule {
                 repositories_1.UserRepository,
                 services_1.TokenService,
                 strategies_1.JwtStrategy,
-                services_1.HubService,
                 strategies_1.HubStrategy,
-                hub_audit_service_1.HubAuditService,
                 guards_1.JwtAuthGuard,
+                guards_1.RolesGuard,
+                assign_role_command_1.AssignRoleCommand,
             ],
-            exports: [services_1.AuthService, repositories_1.UserRepository, guards_1.JwtAuthGuard],
+            exports: [services_1.AuthService, repositories_1.UserRepository, guards_1.JwtAuthGuard, guards_1.RolesGuard],
         };
     }
 };

package/dist/auth.module.js.map

@@ -1 +1 @@
-{"version":3,"file":"auth.module.js","sourceRoot":"","sources":["../src/auth.module.ts"],"names":[],"mappings":";;;;;;;;;;AAAA,2CAAuD;AACvD,2CAA+C;AAC/C,qCAAwC;AACxC,+CAAkD;AAClD,6CAAgD;AAEhD,8CAA2D;AAC3D,+CAA+C;AAC/C,qCAAwC;AACxC,iDAAgD;AAChD,yCAAmE;AACnE,oFAA+E;AAC/E,oEAA+D;AAC/D,6CAAwD;AAGjD,IAAM,UAAU,kBAAhB,MAAM,UAAU;IACrB,MAAM,CAAC,OAAO;QACZ,OAAO,IAAI,CAAC,YAAY,EAAE,CAAC;IAC7B,CAAC;IAED,MAAM,CAAC,YAAY;QACjB,OAAO;YACL,MAAM,EAAE,YAAU;YAClB,OAAO,EAAE;gBACP,yBAAc,CAAC,QAAQ,CAAC,EAAE,eAAe,EAAE,KAAK,EAAE,CAAC;gBACnD,eAAS,CAAC,aAAa,CAAC;oBACtB,UAAU,EAAE,CAAC,aAA4B,EAAE,EAAE,CAAC,CAAC;wBAC7C,MAAM,EAAE,aAAa,CAAC,GAAG,CAAS,iBAAiB,CAAC;wBACpD,WAAW,EAAE;4BACX,SAAS,EAAE,aAAa,CAAC,GAAG,CAAmC,oBAAoB,CAAC,IAAI,IAAI;yBAC7F;qBACF,CAAC;oBACF,MAAM,EAAE,CAAC,sBAAa,CAAC;iBACxB,CAAC;gBACF,uBAAa,CAAC,UAAU,CAAC,CAAC,aAAI,EAAE,mBAAU,EAAE,aAAI,CAAC,CAAC;aACnD;YACD,WAAW,EAAE,CAAC,4BAAc,CAAC;YAC7B,SAAS,EAAE;gBACT,mDAAuB;gBACvB,sBAAW;gBACX,6BAAc;gBACd,uBAAY;gBACZ,wBAAW;gBACX,qBAAU;gBACV,wBAAW;gBACX,mCAAe;gBACf,qBAAY;aACb;YACD,OAAO,EAAE,CAAC,sBAAW,EAAE,6BAAc,EAAE,qBAAY,CAAC;SACrD,CAAC;IACJ,CAAC;CACF,CAAA;AApCY,gCAAU;qBAAV,UAAU;IADtB,IAAA,eAAM,EAAC,EAAE,CAAC;GACE,UAAU,CAoCtB"}
+{"version":3,"file":"auth.module.js","sourceRoot":"","sources":["../src/auth.module.ts"],"names":[],"mappings":";;;;;;;;;;AAAA,2CAAuD;AACvD,2CAA+C;AAC/C,qCAAwC;AACxC,+CAAkD;AAClD,6CAAgD;AAEhD,8CAA+C;AAC/C,wEAAmE;AACnE,+CAA+C;AAC/C,qCAAoD;AACpD,iDAAgD;AAChD,yCAAuD;AACvD,oFAA+E;AAC/E,6CAAwD;AAGjD,IAAM,UAAU,kBAAhB,MAAM,UAAU;IACrB,MAAM,CAAC,OAAO;QACZ,OAAO,IAAI,CAAC,YAAY,EAAE,CAAC;IAC7B,CAAC;IAED,MAAM,CAAC,YAAY;QACjB,OAAO;YACL,MAAM,EAAE,YAAU;YAClB,OAAO,EAAE;gBACP,yBAAc,CAAC,QAAQ,CAAC,EAAE,eAAe,EAAE,KAAK,EAAE,CAAC;gBACnD,eAAS,CAAC,aAAa,CAAC;oBACtB,UAAU,EAAE,CAAC,aAA4B,EAAE,EAAE,CAAC,CAAC;wBAC7C,MAAM,EAAE,aAAa,CAAC,GAAG,CAAS,iBAAiB,CAAC;wBACpD,WAAW,EAAE;4BACX,SAAS,EAAE,aAAa,CAAC,GAAG,CAAmC,oBAAoB,CAAC,IAAI,IAAI;yBAC7F;qBACF,CAAC;oBACF,MAAM,EAAE,CAAC,sBAAa,CAAC;iBACxB,CAAC;gBACF,uBAAa,CAAC,UAAU,CAAC,CAAC,aAAI,EAAE,aAAI,CAAC,CAAC;aACvC;YACD,WAAW,EAAE,CAAC,4BAAc,CAAC;YAC7B,SAAS,EAAE;gBACT,mDAAuB;gBACvB,sBAAW;gBACX,6BAAc;gBACd,uBAAY;gBACZ,wBAAW;gBACX,wBAAW;gBACX,qBAAY;gBACZ,mBAAU;gBACV,uCAAiB;aAClB;YACD,OAAO,EAAE,CAAC,sBAAW,EAAE,6BAAc,EAAE,qBAAY,EAAE,mBAAU,CAAC;SACjE,CAAC;IACJ,CAAC;CACF,CAAA;AApCY,gCAAU;qBAAV,UAAU;IADtB,IAAA,eAAM,EAAC,EAAE,CAAC;GACE,UAAU,CAoCtB"}

package/dist/commands/assign-role.command.d.ts

@@ -0,0 +1,16 @@
+import { CommandRunner } from 'nest-commander';
+import { Repository } from 'typeorm';
+import { Role, RoleName, User } from '@loopstack/common';
+interface AssignRoleCommandOptions {
+    role: RoleName;
+}
+export declare class AssignRoleCommand extends CommandRunner {
+    private readonly userRepository;
+    private readonly roleRepository;
+    private readonly logger;
+    constructor(userRepository: Repository<User>, roleRepository: Repository<Role>);
+    run(inputs: string[], options: AssignRoleCommandOptions): Promise<void>;
+    parseRole(val: string): RoleName;
+}
+export {};
+//# sourceMappingURL=assign-role.command.d.ts.map

package/dist/commands/assign-role.command.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"assign-role.command.d.ts","sourceRoot":"","sources":["../../src/commands/assign-role.command.ts"],"names":[],"mappings":"AAEA,OAAO,EAAW,aAAa,EAAU,MAAM,gBAAgB,CAAC;AAChE,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACrC,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,mBAAmB,CAAC;AAEzD,UAAU,wBAAwB;IAChC,IAAI,EAAE,QAAQ,CAAC;CAChB;AAED,qBAKa,iBAAkB,SAAQ,aAAa;IAKhD,OAAO,CAAC,QAAQ,CAAC,cAAc;IAE/B,OAAO,CAAC,QAAQ,CAAC,cAAc;IANjC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAsC;gBAI1C,cAAc,EAAE,UAAU,CAAC,IAAI,CAAC,EAEhC,cAAc,EAAE,UAAU,CAAC,IAAI,CAAC;IAK7C,GAAG,CAAC,MAAM,EAAE,MAAM,EAAE,EAAE,OAAO,EAAE,wBAAwB,GAAG,OAAO,CAAC,IAAI,CAAC;IAgE7E,SAAS,CAAC,GAAG,EAAE,MAAM,GAAG,QAAQ;CAGjC"}

package/dist/commands/assign-role.command.js

@@ -0,0 +1,106 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+var __param = (this && this.__param) || function (paramIndex, decorator) {
+    return function (target, key) { decorator(target, key, paramIndex); }
+};
+var AssignRoleCommand_1;
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.AssignRoleCommand = void 0;
+const common_1 = require("@nestjs/common");
+const typeorm_1 = require("@nestjs/typeorm");
+const nest_commander_1 = require("nest-commander");
+const typeorm_2 = require("typeorm");
+const common_2 = require("@loopstack/common");
+let AssignRoleCommand = AssignRoleCommand_1 = class AssignRoleCommand extends nest_commander_1.CommandRunner {
+    userRepository;
+    roleRepository;
+    logger = new common_1.Logger(AssignRoleCommand_1.name);
+    constructor(userRepository, roleRepository) {
+        super();
+        this.userRepository = userRepository;
+        this.roleRepository = roleRepository;
+    }
+    async run(inputs, options) {
+        const [userId] = inputs;
+        if (!userId) {
+            console.error('Please specify a user ID');
+            console.log('Usage: loopstack assign-role <userId> --role ADMIN');
+            process.exit(1);
+        }
+        const roleName = options.role;
+        if (!roleName) {
+            console.error('Please specify a role with --role');
+            console.log(`Available roles: ${Object.values(common_2.RoleName).join(', ')}`);
+            process.exit(1);
+        }
+        if (!Object.values(common_2.RoleName).includes(roleName)) {
+            console.error(`Invalid role: ${roleName}`);
+            console.log(`Available roles: ${Object.values(common_2.RoleName).join(', ')}`);
+            process.exit(1);
+        }
+        try {
+            const user = await this.userRepository.findOne({
+                where: { id: userId },
+                relations: ['roles'],
+            });
+            if (!user) {
+                console.error(`User with ID '${userId}' not found`);
+                process.exit(1);
+            }
+            if (user.roles.some((r) => r.name === roleName)) {
+                console.log(`User '${userId}' already has role '${roleName}'`);
+                return;
+            }
+            let role = await this.roleRepository.findOne({ where: { name: roleName } });
+            if (!role) {
+                role = this.roleRepository.create({
+                    name: roleName,
+                    description: `${roleName} role`,
+                });
+                role = await this.roleRepository.save(role);
+                this.logger.log(`Created role '${roleName}'`);
+            }
+            user.roles.push(role);
+            await this.userRepository.save(user);
+            console.log(`Role '${roleName}' assigned to user '${userId}'`);
+        }
+        catch (error) {
+            console.error('Failed to assign role:', error instanceof Error ? error.message : error);
+            process.exit(1);
+        }
+    }
+    parseRole(val) {
+        return val;
+    }
+};
+exports.AssignRoleCommand = AssignRoleCommand;
+__decorate([
+    (0, nest_commander_1.Option)({
+        flags: '-r, --role <role>',
+        description: `Role to assign (${Object.values(common_2.RoleName).join(', ')})`,
+        required: true,
+    }),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [String]),
+    __metadata("design:returntype", String)
+], AssignRoleCommand.prototype, "parseRole", null);
+exports.AssignRoleCommand = AssignRoleCommand = AssignRoleCommand_1 = __decorate([
+    (0, nest_commander_1.Command)({
+        name: 'assign-role',
+        description: 'Assign a role to an existing user',
+        arguments: '<userId>',
+    }),
+    __param(0, (0, typeorm_1.InjectRepository)(common_2.User)),
+    __param(1, (0, typeorm_1.InjectRepository)(common_2.Role)),
+    __metadata("design:paramtypes", [typeorm_2.Repository,
+        typeorm_2.Repository])
+], AssignRoleCommand);
+//# sourceMappingURL=assign-role.command.js.map

package/dist/commands/assign-role.command.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"assign-role.command.js","sourceRoot":"","sources":["../../src/commands/assign-role.command.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,2CAAwC;AACxC,6CAAmD;AACnD,mDAAgE;AAChE,qCAAqC;AACrC,8CAAyD;AAWlD,IAAM,iBAAiB,yBAAvB,MAAM,iBAAkB,SAAQ,8BAAa;IAK/B;IAEA;IANF,MAAM,GAAG,IAAI,eAAM,CAAC,mBAAiB,CAAC,IAAI,CAAC,CAAC;IAE7D,YAEmB,cAAgC,EAEhC,cAAgC;QAEjD,KAAK,EAAE,CAAC;QAJS,mBAAc,GAAd,cAAc,CAAkB;QAEhC,mBAAc,GAAd,cAAc,CAAkB;IAGnD,CAAC;IAED,KAAK,CAAC,GAAG,CAAC,MAAgB,EAAE,OAAiC;QAC3D,MAAM,CAAC,MAAM,CAAC,GAAG,MAAM,CAAC;QAExB,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,OAAO,CAAC,KAAK,CAAC,0BAA0B,CAAC,CAAC;YAC1C,OAAO,CAAC,GAAG,CAAC,oDAAoD,CAAC,CAAC;YAClE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;QAED,MAAM,QAAQ,GAAG,OAAO,CAAC,IAAI,CAAC;QAC9B,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,OAAO,CAAC,KAAK,CAAC,mCAAmC,CAAC,CAAC;YACnD,OAAO,CAAC,GAAG,CAAC,oBAAoB,MAAM,CAAC,MAAM,CAAC,iBAAQ,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YACtE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;QAED,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,iBAAQ,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;YAChD,OAAO,CAAC,KAAK,CAAC,iBAAiB,QAAQ,EAAE,CAAC,CAAC;YAC3C,OAAO,CAAC,GAAG,CAAC,oBAAoB,MAAM,CAAC,MAAM,CAAC,iBAAQ,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YACtE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;QAED,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,OAAO,CAAC;gBAC7C,KAAK,EAAE,EAAE,EAAE,EAAE,MAAM,EAAE;gBACrB,SAAS,EAAE,CAAC,OAAO,CAAC;aACrB,CAAC,CAAC;YAEH,IAAI,CAAC,IAAI,EAAE,CAAC;gBACV,OAAO,CAAC,KAAK,CAAC,iBAAiB,MAAM,aAAa,CAAC,CAAC;gBACpD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YAClB,CAAC;YAED,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAM,QAAmB,CAAC,EAAE,CAAC;gBAC5D,OAAO,CAAC,GAAG,CAAC,SAAS,MAAM,uBAAuB,QAAQ,GAAG,CAAC,CAAC;gBAC/D,OAAO;YACT,CAAC;YAED,IAAI,IAAI,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,OAAO,CAAC,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,CAAC,CAAC;YAE5E,IAAI,CAAC,IAAI,EAAE,CAAC;gBACV,IAAI,GAAG,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC;oBAChC,IAAI,EAAE,QAAQ;oBACd,WAAW,EAAE,GAAG,QAAQ,OAAO;iBAChC,CAAC,CAAC;gBACH,IAAI,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBAC5C,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,iBAAiB,QAAQ,GAAG,CAAC,CAAC;YAChD,CAAC;YAED,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACtB,MAAM,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAErC,OAAO,CAAC,GAAG,CAAC,SAAS,QAAQ,uBAAuB,MAAM,GAAG,CAAC,CAAC;QACjE,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,CAAC,KAAK,CAAC,wBAAwB,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;YACxF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;IACH,CAAC;IAOD,SAAS,CAAC,GAAW;QACnB,OAAO,GAAe,CAAC;IACzB,CAAC;CACF,CAAA;AA/EY,8CAAiB;AA4E5B;IALC,IAAA,uBAAM,EAAC;QACN,KAAK,EAAE,mBAAmB;QAC1B,WAAW,EAAE,mBAAmB,MAAM,CAAC,MAAM,CAAC,iBAAQ,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG;QACrE,QAAQ,EAAE,IAAI;KACf,CAAC;;;;kDAGD;4BA9EU,iBAAiB;IAL7B,IAAA,wBAAO,EAAC;QACP,IAAI,EAAE,aAAa;QACnB,WAAW,EAAE,mCAAmC;QAChD,SAAS,EAAE,UAAU;KACtB,CAAC;IAKG,WAAA,IAAA,0BAAgB,EAAC,aAAI,CAAC,CAAA;IAEtB,WAAA,IAAA,0BAAgB,EAAC,aAAI,CAAC,CAAA;qCADU,oBAAU;QAEV,oBAAU;GAPlC,iBAAiB,CA+E7B"}

package/dist/dtos/hub-login-request.dto.d.ts

@@ -1,5 +1,4 @@
 export declare class HubLoginRequestDto {
-    code: string;
-    grantType: string;
+    idToken: string;
 }
 //# sourceMappingURL=hub-login-request.dto.d.ts.map

package/dist/dtos/hub-login-request.dto.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"hub-login-request.dto.d.ts","sourceRoot":"","sources":["../../src/dtos/hub-login-request.dto.ts"],"names":[],"mappings":"AAGA,qBAAa,kBAAkB;IAG7B,IAAI,EAAE,MAAM,CAAC;IAIb,SAAS,EAAE,MAAM,CAAC;CACnB"}
+{"version":3,"file":"hub-login-request.dto.d.ts","sourceRoot":"","sources":["../../src/dtos/hub-login-request.dto.ts"],"names":[],"mappings":"AAGA,qBAAa,kBAAkB;IAG7B,OAAO,EAAE,MAAM,CAAC;CACjB"}

package/dist/dtos/hub-login-request.dto.js

@@ -13,18 +13,12 @@ exports.HubLoginRequestDto = void 0;
 const swagger_1 = require("@nestjs/swagger");
 const class_transformer_1 = require("class-transformer");
 class HubLoginRequestDto {
-    code;
-    grantType;
+    idToken;
 }
 exports.HubLoginRequestDto = HubLoginRequestDto;
 __decorate([
     (0, class_transformer_1.Expose)(),
-    (0, swagger_1.ApiProperty)({ description: 'The authorization code' }),
+    (0, swagger_1.ApiProperty)({ description: 'Hub-signed ID token' }),
     __metadata("design:type", String)
-], HubLoginRequestDto.prototype, "code", void 0);
-__decorate([
-    (0, class_transformer_1.Expose)(),
-    (0, swagger_1.ApiProperty)({ description: 'The grant type', example: 'authorization_code' }),
-    __metadata("design:type", String)
-], HubLoginRequestDto.prototype, "grantType", void 0);
+], HubLoginRequestDto.prototype, "idToken", void 0);
 //# sourceMappingURL=hub-login-request.dto.js.map

package/dist/dtos/hub-login-request.dto.js.map

@@ -1 +1 @@
-{"version":3,"file":"hub-login-request.dto.js","sourceRoot":"","sources":["../../src/dtos/hub-login-request.dto.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,6CAA8C;AAC9C,yDAA2C;AAE3C,MAAa,kBAAkB;IAG7B,IAAI,CAAS;IAIb,SAAS,CAAS;CACnB;AARD,gDAQC;AALC;IAFC,IAAA,0BAAM,GAAE;IACR,IAAA,qBAAW,EAAC,EAAE,WAAW,EAAE,wBAAwB,EAAE,CAAC;;gDAC1C;AAIb;IAFC,IAAA,0BAAM,GAAE;IACR,IAAA,qBAAW,EAAC,EAAE,WAAW,EAAE,gBAAgB,EAAE,OAAO,EAAE,oBAAoB,EAAE,CAAC;;qDAC5D"}
+{"version":3,"file":"hub-login-request.dto.js","sourceRoot":"","sources":["../../src/dtos/hub-login-request.dto.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,6CAA8C;AAC9C,yDAA2C;AAE3C,MAAa,kBAAkB;IAG7B,OAAO,CAAS;CACjB;AAJD,gDAIC;AADC;IAFC,IAAA,0BAAM,GAAE;IACR,IAAA,qBAAW,EAAC,EAAE,WAAW,EAAE,qBAAqB,EAAE,CAAC;;mDACpC"}

package/dist/guards/roles.guard.js.map

@@ -1 +1 @@
-{"version":3,"file":"roles.guard.js","sourceRoot":"","sources":["../../src/guards/roles.guard.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,2CAA2E;AAC3E,uCAAyC;AAEzC,8CAAoE;AAG7D,IAAM,UAAU,GAAhB,MAAM,UAAU;IACD;IAApB,YAAoB,SAAoB;QAApB,cAAS,GAAT,SAAS,CAAW;IAAG,CAAC;IAE5C,WAAW,CAAC,OAAyB;QACnC,MAAM,aAAa,GAAG,IAAI,CAAC,SAAS,CAAC,iBAAiB,CAAW,kBAAS,EAAE;YAC1E,OAAO,CAAC,UAAU,EAAE;YACpB,OAAO,CAAC,QAAQ,EAAE;SACnB,CAAC,CAAC;QACH,IAAI,CAAC,aAAa,EAAE,CAAC;YACnB,OAAO,IAAI,CAAC;QACd,CAAC;QACD,MAAM,EAAE,IAAI,EAAE,GAAG,OAAO,CAAC,YAAY,EAAE,CAAC,UAAU,EAA4C,CAAC;QAC/F,OAAO,aAAa,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,EAAE,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC;IAClE,CAAC;CACF,CAAA;AAdY,gCAAU;qBAAV,UAAU;IADtB,IAAA,mBAAU,GAAE;qCAEoB,gBAAS;GAD7B,UAAU,CActB"}
+{"version":3,"file":"roles.guard.js","sourceRoot":"","sources":["../../src/guards/roles.guard.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,2CAA2E;AAC3E,uCAAyC;AAEzC,8CAA8E;AAGvE,IAAM,UAAU,GAAhB,MAAM,UAAU;IACD;IAApB,YAAoB,SAAoB;QAApB,cAAS,GAAT,SAAS,CAAW;IAAG,CAAC;IAE5C,WAAW,CAAC,OAAyB;QACnC,MAAM,aAAa,GAAG,IAAI,CAAC,SAAS,CAAC,iBAAiB,CAAa,kBAAS,EAAE;YAC5E,OAAO,CAAC,UAAU,EAAE;YACpB,OAAO,CAAC,QAAQ,EAAE;SACnB,CAAC,CAAC;QACH,IAAI,CAAC,aAAa,EAAE,CAAC;YACnB,OAAO,IAAI,CAAC;QACd,CAAC;QACD,MAAM,EAAE,IAAI,EAAE,GAAG,OAAO,CAAC,YAAY,EAAE,CAAC,UAAU,EAA4C,CAAC;QAC/F,OAAO,aAAa,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,EAAE,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC;IAClE,CAAC;CACF,CAAA;AAdY,gCAAU;qBAAV,UAAU;IADtB,IAAA,mBAAU,GAAE;qCAEoB,gBAAS;GAD7B,UAAU,CActB"}

package/dist/interfaces/auth-config.interface.d.ts

@@ -7,7 +7,9 @@ export interface AuthConfig {
         cookieDomain?: string;
     };
     clientId?: string;
-    clientSecret?: string;
-    authCallback?: string;
+    hub?: {
+        issuer: string;
+        jwksUri: string;
+    };
 }
 //# sourceMappingURL=auth-config.interface.d.ts.map

package/dist/interfaces/auth-config.interface.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"auth-config.interface.d.ts","sourceRoot":"","sources":["../../src/interfaces/auth-config.interface.ts"],"names":[],"mappings":"AAAA,MAAM,WAAW,UAAU;IACzB,GAAG,CAAC,EAAE;QACJ,MAAM,EAAE,MAAM,CAAC;QACf,SAAS,EAAE,MAAM,CAAC;QAClB,aAAa,CAAC,EAAE,MAAM,CAAC;QACvB,gBAAgB,CAAC,EAAE,MAAM,CAAC;QAC1B,YAAY,CAAC,EAAE,MAAM,CAAC;KACvB,CAAC;IACF,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB"}
+{"version":3,"file":"auth-config.interface.d.ts","sourceRoot":"","sources":["../../src/interfaces/auth-config.interface.ts"],"names":[],"mappings":"AAAA,MAAM,WAAW,UAAU;IACzB,GAAG,CAAC,EAAE;QACJ,MAAM,EAAE,MAAM,CAAC;QACf,SAAS,EAAE,MAAM,CAAC;QAClB,aAAa,CAAC,EAAE,MAAM,CAAC;QACvB,gBAAgB,CAAC,EAAE,MAAM,CAAC;QAC1B,YAAY,CAAC,EAAE,MAAM,CAAC;KACvB,CAAC;IACF,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,GAAG,CAAC,EAAE;QACJ,MAAM,EAAE,MAAM,CAAC;QACf,OAAO,EAAE,MAAM,CAAC;KACjB,CAAC;CACH"}

package/dist/repositories/user.repository.js

@@ -26,7 +26,7 @@ let UserRepository = class UserRepository {
     async findById(id) {
         return this.repository.findOne({
             where: { id },
-            relations: ['roles', 'roles.permissions'],
+            relations: ['roles'],
         });
     }
     async findLocalUser() {
@@ -34,7 +34,7 @@ let UserRepository = class UserRepository {
             where: {
                 type: common_3.UserTypeEnum.Local,
             },
-            relations: ['roles', 'roles.permissions'],
+            relations: ['roles'],
         });
     }
     async create(userData) {

package/dist/repositories/user.repository.js.map

@@ -1 +1 @@
-{"version":3,"file":"user.repository.js","sourceRoot":"","sources":["../../src/repositories/user.repository.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;AAAA,2CAA4C;AAC5C,6CAAmD;AACnD,qCAAqC;AACrC,8CAAyC;AACzC,8CAAiD;AAG1C,IAAM,cAAc,GAApB,MAAM,cAAc;IAGf;IAFV,YAEU,UAA4B;QAA5B,eAAU,GAAV,UAAU,CAAkB;IACnC,CAAC;IAEJ,KAAK,CAAC,QAAQ,CAAC,EAAU;QACvB,OAAO,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC;YAC7B,KAAK,EAAE,EAAE,EAAE,EAAE;YACb,SAAS,EAAE,CAAC,OAAO,EAAE,mBAAmB,CAAC;SAC1C,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,aAAa;QACjB,OAAO,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC;YAC7B,KAAK,EAAE;gBACL,IAAI,EAAE,qBAAY,CAAC,KAAK;aACzB;YACD,SAAS,EAAE,CAAC,OAAO,EAAE,mBAAmB,CAAC;SAC1C,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,QAAuB;QAClC,MAAM,IAAI,GAAG,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QAC9C,OAAO,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACpC,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,EAAU,EAAE,QAAuB;QAC9C,MAAM,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,EAAE,QAAQ,CAAC,CAAC;QAC3C,OAAO,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;IAC3B,CAAC;IAED,aAAa;QACX,OAAO,IAAI,CAAC,UAAU,CAAC;IACzB,CAAC;CACF,CAAA;AAnCY,wCAAc;yBAAd,cAAc;IAD1B,IAAA,mBAAU,GAAE;IAGR,WAAA,IAAA,0BAAgB,EAAC,aAAI,CAAC,CAAA;qCACH,oBAAU;GAHrB,cAAc,CAmC1B"}
+{"version":3,"file":"user.repository.js","sourceRoot":"","sources":["../../src/repositories/user.repository.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;AAAA,2CAA4C;AAC5C,6CAAmD;AACnD,qCAAqC;AACrC,8CAAyC;AACzC,8CAAiD;AAG1C,IAAM,cAAc,GAApB,MAAM,cAAc;IAGf;IAFV,YAEU,UAA4B;QAA5B,eAAU,GAAV,UAAU,CAAkB;IACnC,CAAC;IAEJ,KAAK,CAAC,QAAQ,CAAC,EAAU;QACvB,OAAO,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC;YAC7B,KAAK,EAAE,EAAE,EAAE,EAAE;YACb,SAAS,EAAE,CAAC,OAAO,CAAC;SACrB,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,aAAa;QACjB,OAAO,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC;YAC7B,KAAK,EAAE;gBACL,IAAI,EAAE,qBAAY,CAAC,KAAK;aACzB;YACD,SAAS,EAAE,CAAC,OAAO,CAAC;SACrB,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,QAAuB;QAClC,MAAM,IAAI,GAAG,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QAC9C,OAAO,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACpC,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,EAAU,EAAE,QAAuB;QAC9C,MAAM,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,EAAE,QAAQ,CAAC,CAAC;QAC3C,OAAO,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;IAC3B,CAAC;IAED,aAAa;QACX,OAAO,IAAI,CAAC,UAAU,CAAC;IACzB,CAAC;CACF,CAAA;AAnCY,wCAAc;yBAAd,cAAc;IAD1B,IAAA,mBAAU,GAAE;IAGR,WAAA,IAAA,0BAAgB,EAAC,aAAI,CAAC,CAAA;qCACH,oBAAU;GAHrB,cAAc,CAmC1B"}

package/dist/services/auth.service.js

@@ -82,7 +82,7 @@ let AuthService = class AuthService {
         const isLocalMode = this.configService.get('app.isLocalMode');
         return (0, class_transformer_1.plainToInstance)(worker_info_dto_1.WorkerInfoDto, {
             clientId: isLocalMode ? 'local' : this.configService.get('auth.clientId'),
-            isConfigured: isLocalMode || !!this.configService.get('auth.clientSecret'),
+            isConfigured: isLocalMode || !!this.configService.get('auth.hub.jwksUri'),
             timestamp: new Date(),
         }, {
             excludeExtraneousValues: true,

package/dist/services/auth.service.js.map

@@ -1 +1 @@
-{"version":3,"file":"auth.service.js","sourceRoot":"","sources":["../../src/services/auth.service.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,2CAAmE;AACnE,2CAA+C;AAC/C,yDAAoD;AAIpD,6DAAwD;AACxD,kDAAiD;AACjD,mDAA+C;AAGxC,IAAM,WAAW,GAAjB,MAAM,WAAW;IAEH;IACT;IACA;IAHV,YACmB,aAA4B,EACrC,cAA8B,EAC9B,YAA0B;QAFjB,kBAAa,GAAb,aAAa,CAAe;QACrC,mBAAc,GAAd,cAAc,CAAgB;QAC9B,iBAAY,GAAZ,YAAY,CAAc;IACjC,CAAC;IAEJ,KAAK,CAAC,KAAK,CAAC,IAAU;QACpB,MAAM,QAAQ,GAAG,IAAI,CAAC,aAAa,CAAC,GAAG,CAAS,eAAe,CAAC,IAAI,EAAE,CAAC;QACvE,MAAM,OAAO,GAAwB;YACnC,GAAG,EAAE,IAAI,CAAC,EAAE;YACZ,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE;YACjD,QAAQ;SACT,CAAC;QAEF,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,cAAc,CAAC,OAAO,CAAC,CAAC;QAC/D,OAAO;YACL,GAAG,MAAM;YACT,SAAS,EAAE,QAAQ;SACpB,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,YAAoB;QAChC,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,IAAI,CAAC,YAAY,CAAC,kBAAkB,CAAC,YAAY,CAAC,CAAC;YAEnE,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;YAC7D,IAAI,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC;gBAC5B,MAAM,IAAI,8BAAqB,CAAC,uBAAuB,CAAC,CAAC;YAC3D,CAAC;YAGD,MAAM,UAAU,GAAG;gBACjB,GAAG,EAAE,OAAO,CAAC,GAAG;gBAChB,IAAI,EAAE,OAAO,CAAC,IAAI;gBAClB,QAAQ,EAAE,OAAO,CAAC,QAAQ;gBAC1B,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE;aAClD,CAAC;YAEF,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,cAAc,CAAC,UAAU,CAAC,CAAC;YAClE,OAAO;gBACL,GAAG,MAAM;gBACT,SAAS,EAAE,QAAQ;aACpB,CAAC;QACJ,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,IAAI,8BAAqB,CAAC,uBAAuB,CAAC,CAAC;QAC3D,CAAC;IACH,CAAC;IAED,iBAAiB,CAAC,IAAU;QAC1B,OAAO;YACL,EAAE,EAAE,IAAI,CAAC,EAAE;YACX,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE;YACjD,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,SAAS,EAAE,IAAI,CAAC,SAAS;SAC1B,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,cAAc,CAAC,MAAc;QACjC,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QACxD,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,MAAM,IAAI,8BAAqB,CAAC,gBAAgB,CAAC,CAAC;QACpD,CAAC;QACD,OAAO,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC;IACtC,CAAC;IAED,mBAAmB;QACjB,MAAM,WAAW,GAAG,IAAI,CAAC,aAAa,CAAC,GAAG,CAAU,iBAAiB,CAAC,CAAC;QACvE,OAAO,IAAA,mCAAe,EACpB,+BAAa,EACb;YACE,QAAQ,EAAE,WAAW,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,GAAG,CAAS,eAAe,CAAC;YACjF,YAAY,EAAE,WAAW,IAAI,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,GAAG,CAAS,mBAAmB,CAAC;YAClF,SAAS,EAAE,IAAI,IAAI,EAAE;SACtB,EACD;YACE,uBAAuB,EAAE,IAAI;SAC9B,CACF,CAAC;IACJ,CAAC;CACF,CAAA;AAlFY,kCAAW;sBAAX,WAAW;IADvB,IAAA,mBAAU,GAAE;qCAGuB,sBAAa;QACrB,6BAAc;QAChB,4BAAY;GAJzB,WAAW,CAkFvB"}
+{"version":3,"file":"auth.service.js","sourceRoot":"","sources":["../../src/services/auth.service.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,2CAAmE;AACnE,2CAA+C;AAC/C,yDAAoD;AAIpD,6DAAwD;AACxD,kDAAiD;AACjD,mDAA+C;AAGxC,IAAM,WAAW,GAAjB,MAAM,WAAW;IAEH;IACT;IACA;IAHV,YACmB,aAA4B,EACrC,cAA8B,EAC9B,YAA0B;QAFjB,kBAAa,GAAb,aAAa,CAAe;QACrC,mBAAc,GAAd,cAAc,CAAgB;QAC9B,iBAAY,GAAZ,YAAY,CAAc;IACjC,CAAC;IAEJ,KAAK,CAAC,KAAK,CAAC,IAAU;QACpB,MAAM,QAAQ,GAAG,IAAI,CAAC,aAAa,CAAC,GAAG,CAAS,eAAe,CAAC,IAAI,EAAE,CAAC;QACvE,MAAM,OAAO,GAAwB;YACnC,GAAG,EAAE,IAAI,CAAC,EAAE;YACZ,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE;YACjD,QAAQ;SACT,CAAC;QAEF,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,cAAc,CAAC,OAAO,CAAC,CAAC;QAC/D,OAAO;YACL,GAAG,MAAM;YACT,SAAS,EAAE,QAAQ;SACpB,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,YAAoB;QAChC,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,IAAI,CAAC,YAAY,CAAC,kBAAkB,CAAC,YAAY,CAAC,CAAC;YAEnE,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;YAC7D,IAAI,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC;gBAC5B,MAAM,IAAI,8BAAqB,CAAC,uBAAuB,CAAC,CAAC;YAC3D,CAAC;YAGD,MAAM,UAAU,GAAG;gBACjB,GAAG,EAAE,OAAO,CAAC,GAAG;gBAChB,IAAI,EAAE,OAAO,CAAC,IAAI;gBAClB,QAAQ,EAAE,OAAO,CAAC,QAAQ;gBAC1B,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE;aAClD,CAAC;YAEF,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,cAAc,CAAC,UAAU,CAAC,CAAC;YAClE,OAAO;gBACL,GAAG,MAAM;gBACT,SAAS,EAAE,QAAQ;aACpB,CAAC;QACJ,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,IAAI,8BAAqB,CAAC,uBAAuB,CAAC,CAAC;QAC3D,CAAC;IACH,CAAC;IAED,iBAAiB,CAAC,IAAU;QAC1B,OAAO;YACL,EAAE,EAAE,IAAI,CAAC,EAAE;YACX,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE;YACjD,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,SAAS,EAAE,IAAI,CAAC,SAAS;SAC1B,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,cAAc,CAAC,MAAc;QACjC,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QACxD,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,MAAM,IAAI,8BAAqB,CAAC,gBAAgB,CAAC,CAAC;QACpD,CAAC;QACD,OAAO,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC;IACtC,CAAC;IAED,mBAAmB;QACjB,MAAM,WAAW,GAAG,IAAI,CAAC,aAAa,CAAC,GAAG,CAAU,iBAAiB,CAAC,CAAC;QACvE,OAAO,IAAA,mCAAe,EACpB,+BAAa,EACb;YACE,QAAQ,EAAE,WAAW,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,GAAG,CAAS,eAAe,CAAC;YACjF,YAAY,EAAE,WAAW,IAAI,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,GAAG,CAAS,kBAAkB,CAAC;YACjF,SAAS,EAAE,IAAI,IAAI,EAAE;SACtB,EACD;YACE,uBAAuB,EAAE,IAAI;SAC9B,CACF,CAAC;IACJ,CAAC;CACF,CAAA;AAlFY,kCAAW;sBAAX,WAAW;IADvB,IAAA,mBAAU,GAAE;qCAGuB,sBAAa;QACrB,6BAAc;QAChB,4BAAY;GAJzB,WAAW,CAkFvB"}

package/dist/services/index.d.ts

@@ -1,4 +1,3 @@
 export * from './auth.service';
 export * from './token.service';
-export * from './hub.service';
 //# sourceMappingURL=index.d.ts.map

package/dist/services/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/services/index.ts"],"names":[],"mappings":"AAAA,cAAc,gBAAgB,CAAC;AAC/B,cAAc,iBAAiB,CAAC;AAChC,cAAc,eAAe,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/services/index.ts"],"names":[],"mappings":"AAAA,cAAc,gBAAgB,CAAC;AAC/B,cAAc,iBAAiB,CAAC"}

package/dist/services/index.js

@@ -16,5 +16,4 @@ var __exportStar = (this && this.__exportStar) || function(m, exports) {
 Object.defineProperty(exports, "__esModule", { value: true });
 __exportStar(require("./auth.service"), exports);
 __exportStar(require("./token.service"), exports);
-__exportStar(require("./hub.service"), exports);
 //# sourceMappingURL=index.js.map

package/dist/services/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/services/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,iDAA+B;AAC/B,kDAAgC;AAChC,gDAA8B"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/services/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,iDAA+B;AAC/B,kDAAgC"}

package/dist/strategies/hub.strategy.d.ts

@@ -3,16 +3,16 @@ import { Request } from 'express';
 import { Strategy } from 'passport-custom';
 import { User } from '@loopstack/common';
 import { UserRepository } from '../repositories';
-import { HubService } from '../services';
 declare const HubStrategy_base: new () => Strategy & {
     validate(...args: any[]): unknown;
 };
 export declare class HubStrategy extends HubStrategy_base {
     private readonly configService;
-    private readonly hubService;
     private readonly userRepository;
     private readonly logger;
-    constructor(configService: ConfigService, hubService: HubService, userRepository: UserRepository);
+    private jwks;
+    constructor(configService: ConfigService, userRepository: UserRepository);
+    private getJwks;
     private validateLocalUser;
     private validateCloudUser;
     validate(req: Request): Promise<User>;

package/dist/strategies/hub.strategy.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"hub.strategy.d.ts","sourceRoot":"","sources":["../../src/strategies/hub.strategy.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAC;AAE/C,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,QAAQ,EAAE,MAAM,iBAAiB,CAAC;AAE3C,OAAO,EAAE,IAAI,EAAE,MAAM,mBAAmB,CAAC;AACzC,OAAO,EAAE,cAAc,EAAE,MAAM,iBAAiB,CAAC;AACjD,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;;;;AAEzC,qBACa,WAAY,SAAQ,gBAAiC;IAI9D,OAAO,CAAC,QAAQ,CAAC,aAAa;IAC9B,OAAO,CAAC,QAAQ,CAAC,UAAU;IAC3B,OAAO,CAAC,QAAQ,CAAC,cAAc;IALjC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAgC;gBAGpC,aAAa,EAAE,aAAa,EAC5B,UAAU,EAAE,UAAU,EACtB,cAAc,EAAE,cAAc;YAKnC,iBAAiB;YAkBjB,iBAAiB;IA8BzB,QAAQ,CAAC,GAAG,EAAE,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC;CAY5C"}
+{"version":3,"file":"hub.strategy.d.ts","sourceRoot":"","sources":["../../src/strategies/hub.strategy.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAC;AAE/C,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAElC,OAAO,EAAE,QAAQ,EAAE,MAAM,iBAAiB,CAAC;AAE3C,OAAO,EAAE,IAAI,EAAE,MAAM,mBAAmB,CAAC;AACzC,OAAO,EAAE,cAAc,EAAE,MAAM,iBAAiB,CAAC;;;;AAEjD,qBACa,WAAY,SAAQ,gBAAiC;IAK9D,OAAO,CAAC,QAAQ,CAAC,aAAa;IAC9B,OAAO,CAAC,QAAQ,CAAC,cAAc;IALjC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAgC;IACvD,OAAO,CAAC,IAAI,CAAgC;gBAGzB,aAAa,EAAE,aAAa,EAC5B,cAAc,EAAE,cAAc;IAKjD,OAAO,CAAC,OAAO;YAWD,iBAAiB;YAkBjB,iBAAiB;IAoCzB,QAAQ,CAAC,GAAG,EAAE,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC;CAgB5C"}

package/dist/strategies/hub.strategy.js

@@ -14,21 +14,30 @@ exports.HubStrategy = void 0;
 const common_1 = require("@nestjs/common");
 const config_1 = require("@nestjs/config");
 const passport_1 = require("@nestjs/passport");
+const jose_1 = require("jose");
 const passport_custom_1 = require("passport-custom");
 const common_2 = require("@loopstack/common");
 const repositories_1 = require("../repositories");
-const services_1 = require("../services");
 let HubStrategy = HubStrategy_1 = class HubStrategy extends (0, passport_1.PassportStrategy)(passport_custom_1.Strategy, 'hub') {
     configService;
-    hubService;
     userRepository;
     logger = new common_1.Logger(HubStrategy_1.name);
-    constructor(configService, hubService, userRepository) {
+    jwks = null;
+    constructor(configService, userRepository) {
         super();
         this.configService = configService;
-        this.hubService = hubService;
         this.userRepository = userRepository;
     }
+    getJwks() {
+        if (!this.jwks) {
+            const jwksUri = this.configService.get('auth.hub.jwksUri');
+            if (!jwksUri) {
+                throw new common_1.UnauthorizedException('Hub JWKS URI not configured');
+            }
+            this.jwks = (0, jose_1.createRemoteJWKSet)(new URL(jwksUri));
+        }
+        return this.jwks;
+    }
     async validateLocalUser() {
         const existingUser = await this.userRepository.findLocalUser();
         if (existingUser) {
@@ -44,25 +53,30 @@ let HubStrategy = HubStrategy_1 = class HubStrategy extends (0, passport_1.Passp
         return user;
     }
     async validateCloudUser(req) {
-        const { code, grantType } = req.body;
-        this.logger.log('Validating SSO token exchange request');
-        if (!code || grantType !== 'authorization_code') {
-            throw new common_1.UnauthorizedException('Invalid grant type or missing code');
+        const { idToken } = req.body;
+        if (!idToken) {
+            throw new common_1.UnauthorizedException('Missing ID token');
         }
-        const validateCodeResponse = await this.hubService.exchangeCodeForUserInfo(code);
-        if (!validateCodeResponse.data?.id) {
-            throw new common_1.UnauthorizedException('Code exchange failed');
+        const issuer = this.configService.get('auth.hub.issuer');
+        const clientId = this.configService.get('auth.clientId');
+        const { payload } = await (0, jose_1.jwtVerify)(idToken, this.getJwks(), {
+            issuer,
+            audience: clientId,
+        });
+        if (!payload.sub) {
+            throw new common_1.UnauthorizedException('ID token missing sub claim');
         }
-        const existingUser = await this.userRepository.findById(validateCodeResponse.data?.id);
+        const existingUser = await this.userRepository.findById(payload.sub);
         if (existingUser) {
             return existingUser;
         }
         const user = await this.userRepository.create({
-            id: validateCodeResponse.data?.id,
+            id: payload.sub,
+            type: common_2.UserTypeEnum.Cloud,
             isActive: true,
             roles: [],
         });
-        this.logger.log(`SSO authentication successful for user ${user.id}`);
+        this.logger.log(`Hub ID token authentication successful for user ${user.id}`);
         return user;
     }
     async validate(req) {
@@ -71,9 +85,13 @@ let HubStrategy = HubStrategy_1 = class HubStrategy extends (0, passport_1.Passp
             if (isLocalDevMode) {
                 return this.validateLocalUser();
             }
-            return this.validateCloudUser(req);
+            return await this.validateCloudUser(req);
         }
-        catch {
+        catch (error) {
+            if (error instanceof common_1.UnauthorizedException) {
+                throw error;
+            }
+            this.logger.error(`Authentication failed: ${error instanceof Error ? error.message : 'Unknown error'}`);
             throw new common_1.UnauthorizedException('Authentication failed.');
         }
     }
@@ -82,7 +100,6 @@ exports.HubStrategy = HubStrategy;
 exports.HubStrategy = HubStrategy = HubStrategy_1 = __decorate([
     (0, common_1.Injectable)(),
     __metadata("design:paramtypes", [config_1.ConfigService,
-        services_1.HubService,
         repositories_1.UserRepository])
 ], HubStrategy);
 //# sourceMappingURL=hub.strategy.js.map

package/dist/strategies/hub.strategy.js.map

@@ -1 +1 @@
-{"version":3,"file":"hub.strategy.js","sourceRoot":"","sources":["../../src/strategies/hub.strategy.ts"],"names":[],"mappings":";;;;;;;;;;;;;AAAA,2CAA2E;AAC3E,2CAA+C;AAC/C,+CAAoD;AAEpD,qDAA2C;AAC3C,8CAAiD;AAEjD,kDAAiD;AACjD,0CAAyC;AAGlC,IAAM,WAAW,mBAAjB,MAAM,WAAY,SAAQ,IAAA,2BAAgB,EAAC,0BAAQ,EAAE,KAAK,CAAC;IAI7C;IACA;IACA;IALF,MAAM,GAAG,IAAI,eAAM,CAAC,aAAW,CAAC,IAAI,CAAC,CAAC;IAEvD,YACmB,aAA4B,EAC5B,UAAsB,EACtB,cAA8B;QAE/C,KAAK,EAAE,CAAC;QAJS,kBAAa,GAAb,aAAa,CAAe;QAC5B,eAAU,GAAV,UAAU,CAAY;QACtB,mBAAc,GAAd,cAAc,CAAgB;IAGjD,CAAC;IAEO,KAAK,CAAC,iBAAiB;QAC7B,MAAM,YAAY,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,aAAa,EAAE,CAAC;QAC/D,IAAI,YAAY,EAAE,CAAC;YACjB,OAAO,YAAY,CAAC;QACtB,CAAC;QAED,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC;YAC5C,EAAE,EAAE,MAAM,CAAC,UAAU,EAAE;YACvB,IAAI,EAAE,qBAAY,CAAC,KAAK;YACxB,QAAQ,EAAE,IAAI;YACd,KAAK,EAAE,EAAE;SACV,CAAC,CAAC;QAEH,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,4CAA4C,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC;QAEvE,OAAO,IAAI,CAAC;IACd,CAAC;IAEO,KAAK,CAAC,iBAAiB,CAAC,GAAY;QAC1C,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,GAAG,GAAG,CAAC,IAA6C,CAAC;QAE9E,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,uCAAuC,CAAC,CAAC;QAEzD,IAAI,CAAC,IAAI,IAAI,SAAS,KAAK,oBAAoB,EAAE,CAAC;YAChD,MAAM,IAAI,8BAAqB,CAAC,oCAAoC,CAAC,CAAC;QACxE,CAAC;QAED,MAAM,oBAAoB,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,uBAAuB,CAAC,IAAI,CAAC,CAAC;QACjF,IAAI,CAAC,oBAAoB,CAAC,IAAI,EAAE,EAAE,EAAE,CAAC;YACnC,MAAM,IAAI,8BAAqB,CAAC,sBAAsB,CAAC,CAAC;QAC1D,CAAC;QAED,MAAM,YAAY,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC,oBAAoB,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;QACvF,IAAI,YAAY,EAAE,CAAC;YACjB,OAAO,YAAY,CAAC;QACtB,CAAC;QAED,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC;YAC5C,EAAE,EAAE,oBAAoB,CAAC,IAAI,EAAE,EAAE;YACjC,QAAQ,EAAE,IAAI;YACd,KAAK,EAAE,EAAE;SACV,CAAC,CAAC;QAEH,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,0CAA0C,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC;QAErE,OAAO,IAAI,CAAC;IACd,CAAC;IAED,KAAK,CAAC,QAAQ,CAAC,GAAY;QACzB,IAAI,CAAC;YACH,MAAM,cAAc,GAAG,IAAI,CAAC,aAAa,CAAC,GAAG,CAAU,iBAAiB,CAAC,CAAC;YAC1E,IAAI,cAAc,EAAE,CAAC;gBACnB,OAAO,IAAI,CAAC,iBAAiB,EAAE,CAAC;YAClC,CAAC;YAED,OAAO,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,CAAC;QACrC,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,IAAI,8BAAqB,CAAC,wBAAwB,CAAC,CAAC;QAC5D,CAAC;IACH,CAAC;CACF,CAAA;AAvEY,kCAAW;sBAAX,WAAW;IADvB,IAAA,mBAAU,GAAE;qCAKuB,sBAAa;QAChB,qBAAU;QACN,6BAAc;GANtC,WAAW,CAuEvB"}
+{"version":3,"file":"hub.strategy.js","sourceRoot":"","sources":["../../src/strategies/hub.strategy.ts"],"names":[],"mappings":";;;;;;;;;;;;;AAAA,2CAA2E;AAC3E,2CAA+C;AAC/C,+CAAoD;AAEpD,+BAAsE;AACtE,qDAA2C;AAC3C,8CAAiD;AAEjD,kDAAiD;AAG1C,IAAM,WAAW,mBAAjB,MAAM,WAAY,SAAQ,IAAA,2BAAgB,EAAC,0BAAQ,EAAE,KAAK,CAAC;IAK7C;IACA;IALF,MAAM,GAAG,IAAI,eAAM,CAAC,aAAW,CAAC,IAAI,CAAC,CAAC;IAC/C,IAAI,GAA2B,IAAI,CAAC;IAE5C,YACmB,aAA4B,EAC5B,cAA8B;QAE/C,KAAK,EAAE,CAAC;QAHS,kBAAa,GAAb,aAAa,CAAe;QAC5B,mBAAc,GAAd,cAAc,CAAgB;IAGjD,CAAC;IAEO,OAAO;QACb,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;YACf,MAAM,OAAO,GAAG,IAAI,CAAC,aAAa,CAAC,GAAG,CAAS,kBAAkB,CAAC,CAAC;YACnE,IAAI,CAAC,OAAO,EAAE,CAAC;gBACb,MAAM,IAAI,8BAAqB,CAAC,6BAA6B,CAAC,CAAC;YACjE,CAAC;YACD,IAAI,CAAC,IAAI,GAAG,IAAA,yBAAkB,EAAC,IAAI,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC;QACnD,CAAC;QACD,OAAO,IAAI,CAAC,IAAI,CAAC;IACnB,CAAC;IAEO,KAAK,CAAC,iBAAiB;QAC7B,MAAM,YAAY,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,aAAa,EAAE,CAAC;QAC/D,IAAI,YAAY,EAAE,CAAC;YACjB,OAAO,YAAY,CAAC;QACtB,CAAC;QAED,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC;YAC5C,EAAE,EAAE,MAAM,CAAC,UAAU,EAAE;YACvB,IAAI,EAAE,qBAAY,CAAC,KAAK;YACxB,QAAQ,EAAE,IAAI;YACd,KAAK,EAAE,EAAE;SACV,CAAC,CAAC;QAEH,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,4CAA4C,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC;QAEvE,OAAO,IAAI,CAAC;IACd,CAAC;IAEO,KAAK,CAAC,iBAAiB,CAAC,GAAY;QAC1C,MAAM,EAAE,OAAO,EAAE,GAAG,GAAG,CAAC,IAA4B,CAAC;QAErD,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,MAAM,IAAI,8BAAqB,CAAC,kBAAkB,CAAC,CAAC;QACtD,CAAC;QAED,MAAM,MAAM,GAAG,IAAI,CAAC,aAAa,CAAC,GAAG,CAAS,iBAAiB,CAAC,CAAC;QACjE,MAAM,QAAQ,GAAG,IAAI,CAAC,aAAa,CAAC,GAAG,CAAS,eAAe,CAAC,CAAC;QAEjE,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,IAAA,gBAAS,EAAC,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,EAAE;YAC3D,MAAM;YACN,QAAQ,EAAE,QAAQ;SACnB,CAAC,CAAC;QAEH,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC;YACjB,MAAM,IAAI,8BAAqB,CAAC,4BAA4B,CAAC,CAAC;QAChE,CAAC;QAED,MAAM,YAAY,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QACrE,IAAI,YAAY,EAAE,CAAC;YACjB,OAAO,YAAY,CAAC;QACtB,CAAC;QAED,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC;YAC5C,EAAE,EAAE,OAAO,CAAC,GAAG;YACf,IAAI,EAAE,qBAAY,CAAC,KAAK;YACxB,QAAQ,EAAE,IAAI;YACd,KAAK,EAAE,EAAE;SACV,CAAC,CAAC;QAEH,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,mDAAmD,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC;QAE9E,OAAO,IAAI,CAAC;IACd,CAAC;IAED,KAAK,CAAC,QAAQ,CAAC,GAAY;QACzB,IAAI,CAAC;YACH,MAAM,cAAc,GAAG,IAAI,CAAC,aAAa,CAAC,GAAG,CAAU,iBAAiB,CAAC,CAAC;YAC1E,IAAI,cAAc,EAAE,CAAC;gBACnB,OAAO,IAAI,CAAC,iBAAiB,EAAE,CAAC;YAClC,CAAC;YAED,OAAO,MAAM,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,CAAC;QAC3C,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,KAAK,YAAY,8BAAqB,EAAE,CAAC;gBAC3C,MAAM,KAAK,CAAC;YACd,CAAC;YACD,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,0BAA0B,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe,EAAE,CAAC,CAAC;YACxG,MAAM,IAAI,8BAAqB,CAAC,wBAAwB,CAAC,CAAC;QAC5D,CAAC;IACH,CAAC;CACF,CAAA;AA5FY,kCAAW;sBAAX,WAAW;IADvB,IAAA,mBAAU,GAAE;qCAMuB,sBAAa;QACZ,6BAAc;GANtC,WAAW,CA4FvB"}

package/package.json

@@ -2,7 +2,7 @@
   "name": "@loopstack/auth",
   "displayName": "Loopstack Auth Module",
   "description": "The auth module of the loopstack automation framework",
-  "version": "0.19.0",
+  "version": "0.21.0-rc.0",
   "license": "BSL",
   "author": {
     "name": "Jakob Klippel",
@@ -23,23 +23,25 @@
     "watch": "nest build --watch"
   },
   "dependencies": {
-    "@loopstack/common": "^0.19.0",
-    "@loopstack/contracts": "^0.19.0",
-    "@loopstack/core": "^0.19.0",
-    "@nestjs/common": "^11.1.12",
-    "@nestjs/config": "^4.0.2",
-    "@nestjs/core": "^11.1.12",
+    "@loopstack/common": "^0.21.0-rc.0",
+    "@loopstack/contracts": "^0.21.0-rc.0",
+    "@loopstack/core": "^0.21.0-rc.0",
+    "@nestjs/common": "^11.1.14",
+    "@nestjs/config": "^4.0.3",
+    "@nestjs/core": "^11.1.14",
     "@nestjs/event-emitter": "^3.0.1",
     "@nestjs/jwt": "^11.0.2",
-    "@nestjs/microservices": "^11.1.12",
+    "@nestjs/microservices": "^11.1.14",
     "@nestjs/passport": "^11.0.5",
-    "@nestjs/platform-express": "^11.1.12",
-    "@nestjs/swagger": "^11.2.5",
-    "axios": "^1.13.2",
+    "@nestjs/platform-express": "^11.1.14",
+    "@nestjs/swagger": "^11.2.6",
+    "axios": "^1.13.5",
     "class-transformer": "^0.5.1",
     "class-validator": "^0.14.3",
     "cookie-parser": "^1.4.7",
+    "nest-commander": "^3.20.1",
     "lodash": "^4.17.23",
+    "jose": "^6.1.3",
     "passport-custom": "^1.1.1",
     "passport-jwt": "^4.0.1",
     "reflect-metadata": "^0.2.2",
@@ -62,6 +64,9 @@
     "transform": {
       "^.+\\.(t|j)s$": "ts-jest"
     },
+    "transformIgnorePatterns": [
+      "node_modules/(?!jose/)"
+    ],
     "collectCoverageFrom": [
       "**/*.(t|j)s"
     ],

package/dist/exceptions/hub.exceptions.d.ts

@@ -1,17 +0,0 @@
-import { HttpException } from '@nestjs/common';
-export declare class HubConfigurationException extends HttpException {
-    constructor(message: string);
-}
-export declare class HubServiceUnavailableException extends HttpException {
-    constructor();
-}
-export declare class InvalidAuthCodeException extends HttpException {
-    constructor();
-}
-export declare class HubAuthenticationException extends HttpException {
-    constructor();
-}
-export declare class HubTimeoutException extends HttpException {
-    constructor();
-}
-//# sourceMappingURL=hub.exceptions.d.ts.map

package/dist/exceptions/hub.exceptions.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"hub.exceptions.d.ts","sourceRoot":"","sources":["../../src/exceptions/hub.exceptions.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAc,MAAM,gBAAgB,CAAC;AAE3D,qBAAa,yBAA0B,SAAQ,aAAa;gBAC9C,OAAO,EAAE,MAAM;CAG5B;AAED,qBAAa,8BAA+B,SAAQ,aAAa;;CAIhE;AAED,qBAAa,wBAAyB,SAAQ,aAAa;;CAI1D;AAED,qBAAa,0BAA2B,SAAQ,aAAa;;CAI5D;AAED,qBAAa,mBAAoB,SAAQ,aAAa;;CAIrD"}

package/dist/exceptions/hub.exceptions.js

@@ -1,35 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.HubTimeoutException = exports.HubAuthenticationException = exports.InvalidAuthCodeException = exports.HubServiceUnavailableException = exports.HubConfigurationException = void 0;
-const common_1 = require("@nestjs/common");
-class HubConfigurationException extends common_1.HttpException {
-    constructor(message) {
-        super(`Hub service configuration error: ${message}`, common_1.HttpStatus.INTERNAL_SERVER_ERROR);
-    }
-}
-exports.HubConfigurationException = HubConfigurationException;
-class HubServiceUnavailableException extends common_1.HttpException {
-    constructor() {
-        super('Hub service is temporarily unavailable', common_1.HttpStatus.SERVICE_UNAVAILABLE);
-    }
-}
-exports.HubServiceUnavailableException = HubServiceUnavailableException;
-class InvalidAuthCodeException extends common_1.HttpException {
-    constructor() {
-        super('Invalid or expired authorization code', common_1.HttpStatus.UNAUTHORIZED);
-    }
-}
-exports.InvalidAuthCodeException = InvalidAuthCodeException;
-class HubAuthenticationException extends common_1.HttpException {
-    constructor() {
-        super('Failed to authenticate with hub service', common_1.HttpStatus.UNAUTHORIZED);
-    }
-}
-exports.HubAuthenticationException = HubAuthenticationException;
-class HubTimeoutException extends common_1.HttpException {
-    constructor() {
-        super('Hub service request timeout', common_1.HttpStatus.REQUEST_TIMEOUT);
-    }
-}
-exports.HubTimeoutException = HubTimeoutException;
-//# sourceMappingURL=hub.exceptions.js.map

package/dist/exceptions/hub.exceptions.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"hub.exceptions.js","sourceRoot":"","sources":["../../src/exceptions/hub.exceptions.ts"],"names":[],"mappings":";;;AAAA,2CAA2D;AAE3D,MAAa,yBAA0B,SAAQ,sBAAa;IAC1D,YAAY,OAAe;QACzB,KAAK,CAAC,oCAAoC,OAAO,EAAE,EAAE,mBAAU,CAAC,qBAAqB,CAAC,CAAC;IACzF,CAAC;CACF;AAJD,8DAIC;AAED,MAAa,8BAA+B,SAAQ,sBAAa;IAC/D;QACE,KAAK,CAAC,wCAAwC,EAAE,mBAAU,CAAC,mBAAmB,CAAC,CAAC;IAClF,CAAC;CACF;AAJD,wEAIC;AAED,MAAa,wBAAyB,SAAQ,sBAAa;IACzD;QACE,KAAK,CAAC,uCAAuC,EAAE,mBAAU,CAAC,YAAY,CAAC,CAAC;IAC1E,CAAC;CACF;AAJD,4DAIC;AAED,MAAa,0BAA2B,SAAQ,sBAAa;IAC3D;QACE,KAAK,CAAC,yCAAyC,EAAE,mBAAU,CAAC,YAAY,CAAC,CAAC;IAC5E,CAAC;CACF;AAJD,gEAIC;AAED,MAAa,mBAAoB,SAAQ,sBAAa;IACpD;QACE,KAAK,CAAC,6BAA6B,EAAE,mBAAU,CAAC,eAAe,CAAC,CAAC;IACnE,CAAC;CACF;AAJD,kDAIC"}

package/dist/interfaces/hub-service.interfaces.d.ts

@@ -1,17 +0,0 @@
-export interface HubConfig {
-    authCallback: string;
-    clientId: string;
-    clientSecret: string;
-    timeout?: number;
-    retries?: number;
-    cacheEnabled?: boolean;
-    cacheTtlSeconds?: number;
-}
-export interface RequestContext {
-    correlationId: string;
-    requestId?: string;
-    userId?: string;
-    clientIp?: string;
-    userAgent?: string;
-}
-//# sourceMappingURL=hub-service.interfaces.d.ts.map

package/dist/interfaces/hub-service.interfaces.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"hub-service.interfaces.d.ts","sourceRoot":"","sources":["../../src/interfaces/hub-service.interfaces.ts"],"names":[],"mappings":"AAAA,MAAM,WAAW,SAAS;IACxB,YAAY,EAAE,MAAM,CAAC;IACrB,QAAQ,EAAE,MAAM,CAAC;IACjB,YAAY,EAAE,MAAM,CAAC;IACrB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB,eAAe,CAAC,EAAE,MAAM,CAAC;CAC1B;AAED,MAAM,WAAW,cAAc;IAC7B,aAAa,EAAE,MAAM,CAAC;IACtB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB"}

package/dist/interfaces/hub-service.interfaces.js

@@ -1,3 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-//# sourceMappingURL=hub-service.interfaces.js.map

package/dist/interfaces/hub-service.interfaces.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"hub-service.interfaces.js","sourceRoot":"","sources":["../../src/interfaces/hub-service.interfaces.ts"],"names":[],"mappings":""}

package/dist/services/hub-audit.service.d.ts

@@ -1,15 +0,0 @@
-import { RequestContext } from '../interfaces/hub-service.interfaces';
-export interface HubAuditEvent {
-    action: string;
-    context: RequestContext;
-    success: boolean;
-    responseTime?: number;
-    error?: string;
-    metadata?: Record<string, any>;
-}
-export declare class HubAuditService {
-    private readonly logger;
-    logCodeExchange(context: RequestContext, success: boolean, responseTime: number, error?: string, metadata?: Record<string, any>): void;
-    private sanitizeEvent;
-}
-//# sourceMappingURL=hub-audit.service.d.ts.map

package/dist/services/hub-audit.service.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"hub-audit.service.d.ts","sourceRoot":"","sources":["../../src/services/hub-audit.service.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,cAAc,EAAE,MAAM,sCAAsC,CAAC;AAEtE,MAAM,WAAW,aAAa;IAC5B,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,cAAc,CAAC;IACxB,OAAO,EAAE,OAAO,CAAC;IACjB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;CAChC;AAED,qBACa,eAAe;IAC1B,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAoC;IAE3D,eAAe,CACb,OAAO,EAAE,cAAc,EACvB,OAAO,EAAE,OAAO,EAChB,YAAY,EAAE,MAAM,EACpB,KAAK,CAAC,EAAE,MAAM,EACd,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC;IAqBhC,OAAO,CAAC,aAAa;CAStB"}

package/dist/services/hub-audit.service.js

@@ -1,47 +0,0 @@
-"use strict";
-var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
-    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
-    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
-    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
-    return c > 3 && r && Object.defineProperty(target, key, r), r;
-};
-var HubAuditService_1;
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.HubAuditService = void 0;
-const common_1 = require("@nestjs/common");
-let HubAuditService = HubAuditService_1 = class HubAuditService {
-    logger = new common_1.Logger(HubAuditService_1.name);
-    logCodeExchange(context, success, responseTime, error, metadata) {
-        const event = {
-            action: 'HUB_CODE_EXCHANGE',
-            context,
-            success,
-            responseTime,
-            error,
-            metadata: {
-                ...metadata,
-                timestamp: new Date().toISOString(),
-            },
-        };
-        if (success) {
-            this.logger.log(`HUB_AUDIT: ${JSON.stringify(this.sanitizeEvent(event))}`);
-        }
-        else {
-            this.logger.error(`HUB_AUDIT_FAILURE: ${JSON.stringify(this.sanitizeEvent(event))}`);
-        }
-    }
-    sanitizeEvent(event) {
-        return {
-            ...event,
-            context: {
-                ...event.context,
-                userId: event.context.userId ? `${event.context.userId.substring(0, 8)}...` : undefined,
-            },
-        };
-    }
-};
-exports.HubAuditService = HubAuditService;
-exports.HubAuditService = HubAuditService = HubAuditService_1 = __decorate([
-    (0, common_1.Injectable)()
-], HubAuditService);
-//# sourceMappingURL=hub-audit.service.js.map

package/dist/services/hub-audit.service.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"hub-audit.service.js","sourceRoot":"","sources":["../../src/services/hub-audit.service.ts"],"names":[],"mappings":";;;;;;;;;;AAAA,2CAAoD;AAa7C,IAAM,eAAe,uBAArB,MAAM,eAAe;IACT,MAAM,GAAG,IAAI,eAAM,CAAC,iBAAe,CAAC,IAAI,CAAC,CAAC;IAE3D,eAAe,CACb,OAAuB,EACvB,OAAgB,EAChB,YAAoB,EACpB,KAAc,EACd,QAA8B;QAE9B,MAAM,KAAK,GAAkB;YAC3B,MAAM,EAAE,mBAAmB;YAC3B,OAAO;YACP,OAAO;YACP,YAAY;YACZ,KAAK;YACL,QAAQ,EAAE;gBACR,GAAG,QAAQ;gBACX,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;aACpC;SACF,CAAC;QAEF,IAAI,OAAO,EAAE,CAAC;YACZ,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,cAAc,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC;QAC7E,CAAC;aAAM,CAAC;YACN,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,sBAAsB,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC;QACvF,CAAC;IACH,CAAC;IAEO,aAAa,CAAC,KAAoB;QACxC,OAAO;YACL,GAAG,KAAK;YACR,OAAO,EAAE;gBACP,GAAG,KAAK,CAAC,OAAO;gBAChB,MAAM,EAAE,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS;aACxF;SACF,CAAC;IACJ,CAAC;CACF,CAAA;AAtCY,0CAAe;0BAAf,eAAe;IAD3B,IAAA,mBAAU,GAAE;GACA,eAAe,CAsC3B"}

package/dist/services/hub.service.d.ts

@@ -1,21 +0,0 @@
-import { OnModuleInit } from '@nestjs/common';
-import { ConfigService } from '@nestjs/config';
-import { IValidateCodeResponse } from '@loopstack/common';
-import { RequestContext } from '../interfaces/hub-service.interfaces';
-import { HubAuditService } from './hub-audit.service';
-export declare class HubService implements OnModuleInit {
-    private readonly configService;
-    private readonly auditService;
-    private readonly logger;
-    private axiosInstance;
-    private config;
-    constructor(configService: ConfigService, auditService: HubAuditService);
-    onModuleInit(): void;
-    private initialize;
-    private getConfig;
-    private validateConfiguration;
-    private setupAxiosInterceptors;
-    private retryOperation;
-    exchangeCodeForUserInfo(code: string, context?: RequestContext): Promise<IValidateCodeResponse>;
-}
-//# sourceMappingURL=hub.service.d.ts.map

package/dist/services/hub.service.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"hub.service.d.ts","sourceRoot":"","sources":["../../src/services/hub.service.ts"],"names":[],"mappings":"AAAA,OAAO,EAAgE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAC5G,OAAO,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAC;AAE/C,OAAO,EAAE,qBAAqB,EAAE,MAAM,mBAAmB,CAAC;AAS1D,OAAO,EAAa,cAAc,EAAE,MAAM,sCAAsC,CAAC;AACjF,OAAO,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AAEtD,qBACa,UAAW,YAAW,YAAY;IAM3C,OAAO,CAAC,QAAQ,CAAC,aAAa;IAC9B,OAAO,CAAC,QAAQ,CAAC,YAAY;IAN/B,OAAO,CAAC,QAAQ,CAAC,MAAM,CAA+B;IACtD,OAAO,CAAC,aAAa,CAAgB;IACrC,OAAO,CAAC,MAAM,CAAY;gBAGP,aAAa,EAAE,aAAa,EAC5B,YAAY,EAAE,eAAe;IAGhD,YAAY,IAAI,IAAI;IAIpB,OAAO,CAAC,UAAU;IAyBlB,OAAO,CAAC,SAAS;IAUjB,OAAO,CAAC,qBAAqB;IAiB7B,OAAO,CAAC,sBAAsB;YA4BhB,cAAc;IAiCtB,uBAAuB,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,cAAc,GAAG,OAAO,CAAC,qBAAqB,CAAC;CAqFtG"}

package/dist/services/hub.service.js

@@ -1,225 +0,0 @@
-"use strict";
-var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    var desc = Object.getOwnPropertyDescriptor(m, k);
-    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
-      desc = { enumerable: true, get: function() { return m[k]; } };
-    }
-    Object.defineProperty(o, k2, desc);
-}) : (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    o[k2] = m[k];
-}));
-var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
-    Object.defineProperty(o, "default", { enumerable: true, value: v });
-}) : function(o, v) {
-    o["default"] = v;
-});
-var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
-    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
-    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
-    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
-    return c > 3 && r && Object.defineProperty(target, key, r), r;
-};
-var __importStar = (this && this.__importStar) || (function () {
-    var ownKeys = function(o) {
-        ownKeys = Object.getOwnPropertyNames || function (o) {
-            var ar = [];
-            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
-            return ar;
-        };
-        return ownKeys(o);
-    };
-    return function (mod) {
-        if (mod && mod.__esModule) return mod;
-        var result = {};
-        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
-        __setModuleDefault(result, mod);
-        return result;
-    };
-})();
-var __metadata = (this && this.__metadata) || function (k, v) {
-    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
-};
-var HubService_1;
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.HubService = void 0;
-const common_1 = require("@nestjs/common");
-const config_1 = require("@nestjs/config");
-const axios_1 = __importStar(require("axios"));
-const hub_exceptions_1 = require("../exceptions/hub.exceptions");
-const hub_audit_service_1 = require("./hub-audit.service");
-let HubService = HubService_1 = class HubService {
-    configService;
-    auditService;
-    logger = new common_1.Logger(HubService_1.name);
-    axiosInstance;
-    config;
-    constructor(configService, auditService) {
-        this.configService = configService;
-        this.auditService = auditService;
-    }
-    onModuleInit() {
-        this.initialize();
-    }
-    initialize() {
-        try {
-            this.config = this.getConfig();
-            if (!this.configService.get('app.isLocalMode')) {
-                this.validateConfiguration();
-            }
-            this.axiosInstance = axios_1.default.create({
-                timeout: this.config.timeout || 10000,
-                headers: {
-                    'Content-Type': 'application/json',
-                    'User-Agent': 'HubService/1.0',
-                },
-            });
-            this.setupAxiosInterceptors();
-            this.logger.log('Hub service initialized successfully');
-        }
-        catch (error) {
-            this.logger.error('Failed to initialize Hub service:', error);
-            throw new hub_exceptions_1.HubConfigurationException('Service initialization failed');
-        }
-    }
-    getConfig() {
-        return {
-            authCallback: this.configService.get('auth.authCallback') ?? '',
-            clientId: this.configService.get('auth.clientId') ?? '',
-            clientSecret: this.configService.get('auth.clientSecret') ?? '',
-            timeout: 10000,
-            retries: 3,
-        };
-    }
-    validateConfiguration() {
-        const required = ['authCallback'];
-        const missing = required.filter((field) => !this.config[field]);
-        if (missing.length > 0) {
-            throw new hub_exceptions_1.HubConfigurationException(`Missing required fields: ${missing.join(', ')}`);
-        }
-        try {
-            new URL(this.config.authCallback);
-        }
-        catch {
-            throw new hub_exceptions_1.HubConfigurationException('Invalid authCallback URL format');
-        }
-        this.logger.log('Configuration validated successfully');
-    }
-    setupAxiosInterceptors() {
-        this.axiosInstance.interceptors.request.use((config) => {
-            this.logger.debug(`Making request to: ${config.url}`);
-            return config;
-        }, (error) => {
-            this.logger.error('Request interceptor error:', error);
-            return Promise.reject(error instanceof Error ? error : new Error(String(error)));
-        });
-        this.axiosInstance.interceptors.response.use((response) => {
-            this.logger.debug(`Response received: ${response.status}`);
-            return response;
-        }, (error) => {
-            if (error instanceof axios_1.AxiosError) {
-                this.logger.error(`Response error: ${error.response?.status} - ${error.message}`);
-            }
-            else {
-                this.logger.error('Response error:', error);
-            }
-            return Promise.reject(error instanceof Error ? error : new Error(String(error)));
-        });
-    }
-    async retryOperation(operation, maxRetries = 3, delay = 1000) {
-        let lastError = new Error('Unknown error');
-        for (let attempt = 1; attempt <= maxRetries; attempt++) {
-            try {
-                return await operation();
-            }
-            catch (error) {
-                lastError = error instanceof Error ? error : new Error(String(error));
-                if (error instanceof axios_1.AxiosError &&
-                    error.response?.status &&
-                    error.response?.status >= 400 &&
-                    error.response?.status < 500) {
-                    throw error;
-                }
-                if (attempt < maxRetries) {
-                    this.logger.warn(`Attempt ${attempt} failed, retrying in ${delay}ms: ${lastError.message}`);
-                    await new Promise((resolve) => setTimeout(resolve, delay * attempt));
-                }
-            }
-        }
-        throw lastError;
-    }
-    async exchangeCodeForUserInfo(code, context) {
-        const requestContext = {
-            correlationId: context?.correlationId || 'no-correlation-id',
-            requestId: context?.requestId,
-            userId: context?.userId,
-            clientIp: context?.clientIp,
-            userAgent: context?.userAgent,
-        };
-        const startTime = Date.now();
-        this.logger.log(`[${requestContext.correlationId}] Exchanging authorization code for user info`);
-        try {
-            const result = await this.retryOperation(async () => {
-                const response = await this.axiosInstance.post(this.config.authCallback, {
-                    code,
-                    clientId: this.config.clientId,
-                }, {
-                    headers: {
-                        Authorization: `Bearer ${this.config.clientSecret}`,
-                        'X-Correlation-ID': requestContext.correlationId,
-                        'X-Request-ID': requestContext.requestId || requestContext.correlationId,
-                    },
-                });
-                return response.data;
-            }, this.config.retries);
-            const responseTime = Date.now() - startTime;
-            this.auditService.logCodeExchange(requestContext, true, responseTime);
-            this.logger.log(`[${requestContext.correlationId}] Code exchange successful in ${responseTime}ms`);
-            return result;
-        }
-        catch (error) {
-            const responseTime = Date.now() - startTime;
-            let thrownError;
-            if (error instanceof axios_1.AxiosError) {
-                const status = error.response?.status;
-                if (status === 400) {
-                    thrownError = new hub_exceptions_1.InvalidAuthCodeException();
-                }
-                else if (status === 401) {
-                    thrownError = new hub_exceptions_1.HubAuthenticationException();
-                }
-                else if (error.code === 'ECONNABORTED') {
-                    thrownError = new hub_exceptions_1.HubTimeoutException();
-                }
-                else if (status && status >= 500) {
-                    thrownError = new hub_exceptions_1.HubServiceUnavailableException();
-                }
-                else {
-                    thrownError = new common_1.BadRequestException('Failed to validate authorization code');
-                }
-                this.auditService.logCodeExchange(requestContext, false, responseTime, thrownError.message, {
-                    errorType: error.constructor.name,
-                    statusCode: error.response?.status,
-                });
-            }
-            else {
-                this.logger.error(`[${requestContext.correlationId}] Unexpected error during code exchange:`, error);
-                thrownError = new common_1.BadGatewayException('Hub service communication error');
-                this.auditService.logCodeExchange(requestContext, false, responseTime, thrownError.message, {
-                    errorType: error instanceof Error ? error.constructor.name : 'Unknown',
-                    statusCode: undefined,
-                });
-            }
-            this.logger.error(`[${requestContext.correlationId}] Code exchange failed in ${responseTime}ms: ${thrownError.message}`);
-            throw thrownError;
-        }
-    }
-};
-exports.HubService = HubService;
-exports.HubService = HubService = HubService_1 = __decorate([
-    (0, common_1.Injectable)(),
-    __metadata("design:paramtypes", [config_1.ConfigService,
-        hub_audit_service_1.HubAuditService])
-], HubService);
-//# sourceMappingURL=hub.service.js.map

package/dist/services/hub.service.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"hub.service.js","sourceRoot":"","sources":["../../src/services/hub.service.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,2CAA4G;AAC5G,2CAA+C;AAC/C,+CAAwE;AAGxE,iEAMsC;AAEtC,2DAAsD;AAG/C,IAAM,UAAU,kBAAhB,MAAM,UAAU;IAMF;IACA;IANF,MAAM,GAAG,IAAI,eAAM,CAAC,YAAU,CAAC,IAAI,CAAC,CAAC;IAC9C,aAAa,CAAgB;IAC7B,MAAM,CAAY;IAE1B,YACmB,aAA4B,EAC5B,YAA6B;QAD7B,kBAAa,GAAb,aAAa,CAAe;QAC5B,iBAAY,GAAZ,YAAY,CAAiB;IAC7C,CAAC;IAEJ,YAAY;QACV,IAAI,CAAC,UAAU,EAAE,CAAC;IACpB,CAAC;IAEO,UAAU;QAChB,IAAI,CAAC;YACH,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,SAAS,EAAE,CAAC;YAE/B,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC,GAAG,CAAU,iBAAiB,CAAC,EAAE,CAAC;gBACxD,IAAI,CAAC,qBAAqB,EAAE,CAAC;YAC/B,CAAC;YAED,IAAI,CAAC,aAAa,GAAG,eAAK,CAAC,MAAM,CAAC;gBAChC,OAAO,EAAE,IAAI,CAAC,MAAM,CAAC,OAAO,IAAI,KAAK;gBACrC,OAAO,EAAE;oBACP,cAAc,EAAE,kBAAkB;oBAClC,YAAY,EAAE,gBAAgB;iBAC/B;aACF,CAAC,CAAC;YAEH,IAAI,CAAC,sBAAsB,EAAE,CAAC;YAE9B,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,sCAAsC,CAAC,CAAC;QAC1D,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,mCAAmC,EAAE,KAAK,CAAC,CAAC;YAC9D,MAAM,IAAI,0CAAyB,CAAC,+BAA+B,CAAC,CAAC;QACvE,CAAC;IACH,CAAC;IAEO,SAAS;QACf,OAAO;YACL,YAAY,EAAE,IAAI,CAAC,aAAa,CAAC,GAAG,CAAS,mBAAmB,CAAC,IAAI,EAAE;YACvE,QAAQ,EAAE,IAAI,CAAC,aAAa,CAAC,GAAG,CAAS,eAAe,CAAC,IAAI,EAAE;YAC/D,YAAY,EAAE,IAAI,CAAC,aAAa,CAAC,GAAG,CAAS,mBAAmB,CAAC,IAAI,EAAE;YACvE,OAAO,EAAE,KAAK;YACd,OAAO,EAAE,CAAC;SACX,CAAC;IACJ,CAAC;IAEO,qBAAqB;QAC3B,MAAM,QAAQ,GAAG,CAAC,cAAc,CAAC,CAAC;QAClC,MAAM,OAAO,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;QAEhE,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACvB,MAAM,IAAI,0CAAyB,CAAC,4BAA4B,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACxF,CAAC;QAED,IAAI,CAAC;YACH,IAAI,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;QACpC,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,IAAI,0CAAyB,CAAC,iCAAiC,CAAC,CAAC;QACzE,CAAC;QAED,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,sCAAsC,CAAC,CAAC;IAC1D,CAAC;IAEO,sBAAsB;QAC5B,IAAI,CAAC,aAAa,CAAC,YAAY,CAAC,OAAO,CAAC,GAAG,CACzC,CAAC,MAAM,EAAE,EAAE;YACT,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,sBAAsB,MAAM,CAAC,GAAG,EAAE,CAAC,CAAC;YACtD,OAAO,MAAM,CAAC;QAChB,CAAC,EACD,CAAC,KAAc,EAAE,EAAE;YACjB,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,4BAA4B,EAAE,KAAK,CAAC,CAAC;YACvD,OAAO,OAAO,CAAC,MAAM,CAAC,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QACnF,CAAC,CACF,CAAC;QAEF,IAAI,CAAC,aAAa,CAAC,YAAY,CAAC,QAAQ,CAAC,GAAG,CAC1C,CAAC,QAAQ,EAAE,EAAE;YACX,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,sBAAsB,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;YAC3D,OAAO,QAAQ,CAAC;QAClB,CAAC,EACD,CAAC,KAAc,EAAE,EAAE;YACjB,IAAI,KAAK,YAAY,kBAAU,EAAE,CAAC;gBAChC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,mBAAmB,KAAK,CAAC,QAAQ,EAAE,MAAM,MAAM,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;YACpF,CAAC;iBAAM,CAAC;gBACN,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,iBAAiB,EAAE,KAAK,CAAC,CAAC;YAC9C,CAAC;YACD,OAAO,OAAO,CAAC,MAAM,CAAC,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QACnF,CAAC,CACF,CAAC;IACJ,CAAC;IAEO,KAAK,CAAC,cAAc,CAC1B,SAA2B,EAC3B,aAAqB,CAAC,EACtB,QAAgB,IAAI;QAEpB,IAAI,SAAS,GAAU,IAAI,KAAK,CAAC,eAAe,CAAC,CAAC;QAElD,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,IAAI,UAAU,EAAE,OAAO,EAAE,EAAE,CAAC;YACvD,IAAI,CAAC;gBACH,OAAO,MAAM,SAAS,EAAE,CAAC;YAC3B,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,SAAS,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;gBAGtE,IACE,KAAK,YAAY,kBAAU;oBAC3B,KAAK,CAAC,QAAQ,EAAE,MAAM;oBACtB,KAAK,CAAC,QAAQ,EAAE,MAAM,IAAI,GAAG;oBAC7B,KAAK,CAAC,QAAQ,EAAE,MAAM,GAAG,GAAG,EAC5B,CAAC;oBACD,MAAM,KAAK,CAAC;gBACd,CAAC;gBAED,IAAI,OAAO,GAAG,UAAU,EAAE,CAAC;oBACzB,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,WAAW,OAAO,wBAAwB,KAAK,OAAO,SAAS,CAAC,OAAO,EAAE,CAAC,CAAC;oBAC5F,MAAM,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,KAAK,GAAG,OAAO,CAAC,CAAC,CAAC;gBACvE,CAAC;YACH,CAAC;QACH,CAAC;QAED,MAAM,SAAS,CAAC;IAClB,CAAC;IAED,KAAK,CAAC,uBAAuB,CAAC,IAAY,EAAE,OAAwB;QAClE,MAAM,cAAc,GAAmB;YACrC,aAAa,EAAE,OAAO,EAAE,aAAa,IAAI,mBAAmB;YAC5D,SAAS,EAAE,OAAO,EAAE,SAAS;YAC7B,MAAM,EAAE,OAAO,EAAE,MAAM;YACvB,QAAQ,EAAE,OAAO,EAAE,QAAQ;YAC3B,SAAS,EAAE,OAAO,EAAE,SAAS;SAC9B,CAAC;QAEF,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAE7B,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,cAAc,CAAC,aAAa,+CAA+C,CAAC,CAAC;QAEjG,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,KAAK,IAAI,EAAE;gBAClD,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,IAAI,CAK5C,IAAI,CAAC,MAAM,CAAC,YAAY,EACxB;oBACE,IAAI;oBACJ,QAAQ,EAAE,IAAI,CAAC,MAAM,CAAC,QAAQ;iBAC/B,EACD;oBACE,OAAO,EAAE;wBACP,aAAa,EAAE,UAAU,IAAI,CAAC,MAAM,CAAC,YAAY,EAAE;wBACnD,kBAAkB,EAAE,cAAc,CAAC,aAAa;wBAChD,cAAc,EAAE,cAAc,CAAC,SAAS,IAAI,cAAc,CAAC,aAAa;qBACzE;iBACF,CACF,CAAC;gBAEF,OAAO,QAAQ,CAAC,IAAI,CAAC;YACvB,CAAC,EAAE,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;YAExB,MAAM,YAAY,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC;YAE5C,IAAI,CAAC,YAAY,CAAC,eAAe,CAAC,cAAc,EAAE,IAAI,EAAE,YAAY,CAAC,CAAC;YAEtE,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,cAAc,CAAC,aAAa,iCAAiC,YAAY,IAAI,CAAC,CAAC;YAEnG,OAAO,MAAM,CAAC;QAChB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,YAAY,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC;YAE5C,IAAI,WAAkB,CAAC;YAEvB,IAAI,KAAK,YAAY,kBAAU,EAAE,CAAC;gBAChC,MAAM,MAAM,GAAG,KAAK,CAAC,QAAQ,EAAE,MAAM,CAAC;gBAEtC,IAAI,MAAM,KAAK,GAAG,EAAE,CAAC;oBACnB,WAAW,GAAG,IAAI,yCAAwB,EAAE,CAAC;gBAC/C,CAAC;qBAAM,IAAI,MAAM,KAAK,GAAG,EAAE,CAAC;oBAC1B,WAAW,GAAG,IAAI,2CAA0B,EAAE,CAAC;gBACjD,CAAC;qBAAM,IAAI,KAAK,CAAC,IAAI,KAAK,cAAc,EAAE,CAAC;oBACzC,WAAW,GAAG,IAAI,oCAAmB,EAAE,CAAC;gBAC1C,CAAC;qBAAM,IAAI,MAAM,IAAI,MAAM,IAAI,GAAG,EAAE,CAAC;oBACnC,WAAW,GAAG,IAAI,+CAA8B,EAAE,CAAC;gBACrD,CAAC;qBAAM,CAAC;oBACN,WAAW,GAAG,IAAI,4BAAmB,CAAC,uCAAuC,CAAC,CAAC;gBACjF,CAAC;gBAED,IAAI,CAAC,YAAY,CAAC,eAAe,CAAC,cAAc,EAAE,KAAK,EAAE,YAAY,EAAE,WAAW,CAAC,OAAO,EAAE;oBAC1F,SAAS,EAAE,KAAK,CAAC,WAAW,CAAC,IAAI;oBACjC,UAAU,EAAE,KAAK,CAAC,QAAQ,EAAE,MAAM;iBACnC,CAAC,CAAC;YACL,CAAC;iBAAM,CAAC;gBACN,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,cAAc,CAAC,aAAa,0CAA0C,EAAE,KAAK,CAAC,CAAC;gBACrG,WAAW,GAAG,IAAI,4BAAmB,CAAC,iCAAiC,CAAC,CAAC;gBAEzE,IAAI,CAAC,YAAY,CAAC,eAAe,CAAC,cAAc,EAAE,KAAK,EAAE,YAAY,EAAE,WAAW,CAAC,OAAO,EAAE;oBAC1F,SAAS,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS;oBACtE,UAAU,EAAE,SAAS;iBACtB,CAAC,CAAC;YACL,CAAC;YAED,IAAI,CAAC,MAAM,CAAC,KAAK,CACf,IAAI,cAAc,CAAC,aAAa,6BAA6B,YAAY,OAAO,WAAW,CAAC,OAAO,EAAE,CACtG,CAAC;YAEF,MAAM,WAAW,CAAC;QACpB,CAAC;IACH,CAAC;CACF,CAAA;AApNY,gCAAU;qBAAV,UAAU;IADtB,IAAA,mBAAU,GAAE;qCAOuB,sBAAa;QACd,mCAAe;GAPrC,UAAU,CAoNtB"}