@mft/moneyhub-api-client 6.94.0 → 6.97.0

package/.idea/workspace.xml

@@ -0,0 +1,337 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<project version="4">
+  <component name="AutoImportSettings">
+    <option name="autoReloadType" value="SELECTIVE" />
+  </component>
+  <component name="ChangeListManager">
+    <list default="true" id="dc4a9aba-6094-4841-80e9-db3a0ecbe4e7" name="Changes" comment="">
+      <change beforePath="$PROJECT_DIR$/examples/config.js" beforeDir="false" afterPath="$PROJECT_DIR$/examples/config.js" afterDir="false" />
+    </list>
+    <option name="SHOW_DIALOG" value="false" />
+    <option name="HIGHLIGHT_CONFLICTS" value="true" />
+    <option name="HIGHLIGHT_NON_ACTIVE_CHANGELIST" value="false" />
+    <option name="LAST_RESOLUTION" value="IGNORE" />
+  </component>
+  <component name="Git.Settings">
+    <option name="RECENT_GIT_ROOT_PATH" value="$PROJECT_DIR$" />
+  </component>
+  <component name="GitToolBoxStore">
+    <option name="projectConfigVersion" value="5" />
+    <option name="recentBranches">
+      <RecentBranches>
+        <option name="branchesForRepo">
+          <list>
+            <RecentBranchesForRepo>
+              <option name="branches">
+                <list>
+                  <RecentBranch>
+                    <option name="branchName" value="master" />
+                    <option name="lastUsedInstant" value="1736270362" />
+                  </RecentBranch>
+                  <RecentBranch>
+                    <option name="branchName" value="API-1244_Adjust_savings_goals_parameters" />
+                    <option name="lastUsedInstant" value="1736268297" />
+                  </RecentBranch>
+                  <RecentBranch>
+                    <option name="branchName" value="API-1244_adjust_update_savings_goal" />
+                    <option name="lastUsedInstant" value="1736178700" />
+                  </RecentBranch>
+                  <RecentBranch>
+                    <option name="branchName" value="API-1241_add_targetDate_to_savingsGoals" />
+                    <option name="lastUsedInstant" value="1735351829" />
+                  </RecentBranch>
+                  <RecentBranch>
+                    <option name="branchName" value="auth-req-account-filtering" />
+                    <option name="lastUsedInstant" value="1721817112" />
+                  </RecentBranch>
+                </list>
+              </option>
+              <option name="repositoryRootUrl" value="file://$PROJECT_DIR$" />
+            </RecentBranchesForRepo>
+          </list>
+        </option>
+      </RecentBranches>
+    </option>
+  </component>
+  <component name="MarkdownSettingsMigration">
+    <option name="stateVersion" value="1" />
+  </component>
+  <component name="ProjectColorInfo">{
+  &quot;associatedIndex&quot;: 0
+}</component>
+  <component name="ProjectId" id="2WLqHFawFgrd0VYQ4mTpc7rMdT0" />
+  <component name="ProjectViewState">
+    <option name="hideEmptyMiddlePackages" value="true" />
+    <option name="showLibraryContents" value="true" />
+  </component>
+  <component name="PropertiesComponent"><![CDATA[{
+  "keyToString": {
+    "RunOnceActivity.OpenProjectViewOnStart": "true",
+    "RunOnceActivity.ShowReadmeOnStart": "true",
+    "WebServerToolWindowFactoryState": "false",
+    "git-widget-placeholder": "main",
+    "last_opened_file_path": "/Users/ingrid.acero/Documents/Repos/moneyhub-api-client",
+    "node.js.detected.package.eslint": "true",
+    "node.js.detected.package.standard": "true",
+    "node.js.detected.package.tslint": "true",
+    "node.js.selected.package.eslint": "(autodetect)",
+    "node.js.selected.package.standard": "",
+    "node.js.selected.package.tslint": "(autodetect)",
+    "nodejs.mocha.mocha_node_package_dir": "/Users/ingrid.acero/Documents/Repos/moneyhub-api-client/node_modules/mocha",
+    "nodejs_package_manager_path": "npm",
+    "settings.editor.selected.configurable": "project.scopes",
+    "ts.external.directory.path": "/Users/ingrid.acero/Documents/Repos/moneyhub-api-client/node_modules/typescript/lib",
+    "vue.rearranger.settings.migration": "true"
+  }
+}]]></component>
+  <component name="RunManager" selected="Mocha.src/__tests__/index.ts">
+    <configuration name="src/__tests__/index.ts" type="mocha-javascript-test-runner" temporary="true" nameIsGenerated="true">
+      <node-interpreter>project</node-interpreter>
+      <node-options />
+      <mocha-package>$PROJECT_DIR$/node_modules/mocha</mocha-package>
+      <working-directory>$PROJECT_DIR$</working-directory>
+      <pass-parent-env>true</pass-parent-env>
+      <ui>bdd</ui>
+      <extra-mocha-options>--require ts-node/register</extra-mocha-options>
+      <test-kind>TEST_FILE</test-kind>
+      <test-file>$PROJECT_DIR$/src/__tests__/index.ts</test-file>
+      <method v="2" />
+    </configuration>
+    <configuration name="src/__tests__/savings-goals.ts" type="mocha-javascript-test-runner" temporary="true" nameIsGenerated="true">
+      <node-interpreter>project</node-interpreter>
+      <node-options />
+      <mocha-package>$PROJECT_DIR$/node_modules/mocha</mocha-package>
+      <working-directory>$PROJECT_DIR$</working-directory>
+      <pass-parent-env>true</pass-parent-env>
+      <ui>bdd</ui>
+      <extra-mocha-options>--require ts-node/register</extra-mocha-options>
+      <test-kind>TEST_FILE</test-kind>
+      <test-file>$PROJECT_DIR$/src/__tests__/savings-goals.ts</test-file>
+      <method v="2" />
+    </configuration>
+    <recent_temporary>
+      <list>
+        <item itemvalue="Mocha.src/__tests__/index.ts" />
+        <item itemvalue="Mocha.src/__tests__/savings-goals.ts" />
+      </list>
+    </recent_temporary>
+  </component>
+  <component name="SpellCheckerSettings" RuntimeDictionaries="0" Folders="0" CustomDictionaries="0" DefaultDictionary="application-level" UseSingleDictionary="true" transferred="true" />
+  <component name="TaskManager">
+    <task active="true" id="Default" summary="Default task">
+      <changelist id="dc4a9aba-6094-4841-80e9-db3a0ecbe4e7" name="Changes" comment="" />
+      <created>1696522117454</created>
+      <option name="number" value="Default" />
+      <option name="presentableId" value="Default" />
+      <updated>1696522117454</updated>
+      <workItem from="1696522118499" duration="1908000" />
+      <workItem from="1696599338311" duration="3777000" />
+      <workItem from="1696842411351" duration="14000" />
+      <workItem from="1696842432625" duration="2354000" />
+      <workItem from="1696850236583" duration="645000" />
+      <workItem from="1696861043755" duration="7838000" />
+      <workItem from="1697032484296" duration="5574000" />
+      <workItem from="1697530070060" duration="599000" />
+      <workItem from="1698055104901" duration="6932000" />
+      <workItem from="1698399821368" duration="13174000" />
+      <workItem from="1698855859057" duration="21289000" />
+      <workItem from="1699541759033" duration="7225000" />
+      <workItem from="1699643878245" duration="4967000" />
+      <workItem from="1699887017589" duration="21867000" />
+      <workItem from="1700489404449" duration="9869000" />
+      <workItem from="1700579373630" duration="8452000" />
+      <workItem from="1700847560007" duration="1872000" />
+      <workItem from="1701258566437" duration="9303000" />
+      <workItem from="1701360437913" duration="8906000" />
+      <workItem from="1701681747628" duration="12116000" />
+      <workItem from="1702033873365" duration="193000" />
+      <workItem from="1702034080013" duration="12000" />
+      <workItem from="1702034157457" duration="18649000" />
+      <workItem from="1702639540107" duration="16538000" />
+      <workItem from="1703067091696" duration="566000" />
+      <workItem from="1704228724190" duration="5644000" />
+      <workItem from="1704389655854" duration="14590000" />
+      <workItem from="1704746016876" duration="23881000" />
+      <workItem from="1705336460196" duration="3241000" />
+      <workItem from="1707303477272" duration="13980000" />
+      <workItem from="1707401874612" duration="1046000" />
+      <workItem from="1707404929630" duration="1792000" />
+      <workItem from="1707474852304" duration="3009000" />
+      <workItem from="1707501068520" duration="1205000" />
+      <workItem from="1707999284657" duration="1721000" />
+      <workItem from="1708004116287" duration="20282000" />
+      <workItem from="1708511937605" duration="57000" />
+      <workItem from="1708512047016" duration="599000" />
+      <workItem from="1708514446947" duration="10157000" />
+      <workItem from="1708958457905" duration="9828000" />
+      <workItem from="1709304046135" duration="2121000" />
+      <workItem from="1709555432300" duration="4083000" />
+      <workItem from="1710516263031" duration="7070000" />
+      <workItem from="1712045751195" duration="590000" />
+      <workItem from="1712240416430" duration="4776000" />
+      <workItem from="1712246913675" duration="35000" />
+      <workItem from="1712247523711" duration="49208000" />
+      <workItem from="1713173779790" duration="8692000" />
+      <workItem from="1713279124637" duration="7255000" />
+      <workItem from="1713782285944" duration="10057000" />
+      <workItem from="1714410851524" duration="599000" />
+      <workItem from="1714989266485" duration="8841000" />
+      <workItem from="1715702983590" duration="3069000" />
+      <workItem from="1715957635788" duration="25736000" />
+      <workItem from="1716482042798" duration="44436000" />
+      <workItem from="1718094948712" duration="21589000" />
+      <workItem from="1718806890393" duration="9638000" />
+      <workItem from="1719328446932" duration="3502000" />
+      <workItem from="1719586270628" duration="24431000" />
+      <workItem from="1721041131098" duration="775000" />
+      <workItem from="1721734526409" duration="18464000" />
+      <workItem from="1721993015609" duration="3182000" />
+      <workItem from="1722416495820" duration="506000" />
+      <workItem from="1722417206473" duration="2577000" />
+      <workItem from="1722595979789" duration="1786000" />
+      <workItem from="1722870148871" duration="5303000" />
+      <workItem from="1723121743010" duration="6238000" />
+      <workItem from="1724246865742" duration="598000" />
+      <workItem from="1724319168831" duration="599000" />
+      <workItem from="1724340115974" duration="389000" />
+      <workItem from="1724340703376" duration="106000" />
+      <workItem from="1724340928806" duration="21575000" />
+      <workItem from="1724928332712" duration="1586000" />
+      <workItem from="1724931940386" duration="7582000" />
+      <workItem from="1725544217218" duration="4558000" />
+      <workItem from="1725904930392" duration="15506000" />
+      <workItem from="1726648049913" duration="599000" />
+      <workItem from="1726650305526" duration="11157000" />
+      <workItem from="1727184993562" duration="1089000" />
+      <workItem from="1727190262254" duration="599000" />
+      <workItem from="1728472656956" duration="3674000" />
+      <workItem from="1728642072309" duration="562000" />
+      <workItem from="1728642649832" duration="9722000" />
+      <workItem from="1728655110744" duration="1222000" />
+      <workItem from="1729015916256" duration="4841000" />
+      <workItem from="1729702509254" duration="2621000" />
+      <workItem from="1733160353656" duration="2897000" />
+      <workItem from="1733308163347" duration="14515000" />
+      <workItem from="1733503136078" duration="3410000" />
+      <workItem from="1733747863260" duration="8238000" />
+      <workItem from="1733912213167" duration="3780000" />
+      <workItem from="1734022952435" duration="46000" />
+      <workItem from="1734083873278" duration="25678000" />
+      <workItem from="1734613325964" duration="7658000" />
+      <workItem from="1735570029258" duration="308000" />
+      <workItem from="1736176628434" duration="13441000" />
+      <workItem from="1736363202637" duration="1814000" />
+      <workItem from="1736367973179" duration="3787000" />
+      <workItem from="1736452712824" duration="60000" />
+      <workItem from="1736452786706" duration="8000" />
+      <workItem from="1736452816901" duration="223000" />
+      <workItem from="1736453084591" duration="7643000" />
+      <workItem from="1736870396374" duration="16138000" />
+      <workItem from="1738169265116" duration="476000" />
+      <workItem from="1738254368720" duration="53000" />
+      <workItem from="1738606178330" duration="17365000" />
+      <workItem from="1738774404633" duration="1672000" />
+      <workItem from="1738943163530" duration="6248000" />
+      <workItem from="1739268701229" duration="4435000" />
+      <workItem from="1740140483944" duration="36634000" />
+      <workItem from="1741801593050" duration="599000" />
+      <workItem from="1741859774974" duration="7386000" />
+      <workItem from="1743092233284" duration="757000" />
+      <workItem from="1743426445696" duration="595000" />
+      <workItem from="1743502599180" duration="2540000" />
+      <workItem from="1744021184910" duration="25457000" />
+      <workItem from="1744638468601" duration="5600000" />
+      <workItem from="1744878267214" duration="15333000" />
+      <workItem from="1747062945004" duration="935000" />
+      <workItem from="1747128667865" duration="584000" />
+      <workItem from="1747648707998" duration="92000" />
+      <workItem from="1747650909387" duration="7473000" />
+      <workItem from="1747824421648" duration="10449000" />
+      <workItem from="1749027451124" duration="227000" />
+      <workItem from="1749028737138" duration="3012000" />
+      <workItem from="1749551828132" duration="595000" />
+      <workItem from="1749743415713" duration="1377000" />
+      <workItem from="1750154833015" duration="611000" />
+      <workItem from="1750170824529" duration="598000" />
+      <workItem from="1752835715569" duration="27204000" />
+      <workItem from="1753956541426" duration="14907000" />
+      <workItem from="1754402029202" duration="2425000" />
+      <workItem from="1754406742801" duration="3871000" />
+      <workItem from="1754500112721" duration="1210000" />
+      <workItem from="1754667818216" duration="5734000" />
+      <workItem from="1755250955093" duration="8985000" />
+      <workItem from="1755774270593" duration="4984000" />
+      <workItem from="1756287137870" duration="6864000" />
+      <workItem from="1756719776091" duration="596000" />
+      <workItem from="1756806091581" duration="598000" />
+      <workItem from="1756807183817" duration="1194000" />
+      <workItem from="1756983036388" duration="913000" />
+      <workItem from="1757501214008" duration="809000" />
+      <workItem from="1757602699976" duration="2119000" />
+      <workItem from="1758205661715" duration="1683000" />
+      <workItem from="1758533121784" duration="4026000" />
+      <workItem from="1759330920815" duration="616000" />
+      <workItem from="1759399267432" duration="599000" />
+      <workItem from="1761057751759" duration="10626000" />
+      <workItem from="1761230254104" duration="599000" />
+      <workItem from="1761231160769" duration="598000" />
+      <workItem from="1761648605345" duration="599000" />
+      <workItem from="1761674616966" duration="595000" />
+      <workItem from="1761758454317" duration="613000" />
+      <workItem from="1761819311576" duration="1198000" />
+      <workItem from="1761822636356" duration="2000" />
+      <workItem from="1762959471433" duration="663000" />
+      <workItem from="1762961144570" duration="15000" />
+      <workItem from="1763566255667" duration="2731000" />
+      <workItem from="1766591399442" duration="3276000" />
+      <workItem from="1768227835717" duration="597000" />
+      <workItem from="1768244813125" duration="579000" />
+      <workItem from="1768396481433" duration="595000" />
+      <workItem from="1768409518311" duration="596000" />
+      <workItem from="1768503892189" duration="187000" />
+      <workItem from="1768576915887" duration="586000" />
+      <workItem from="1769688653157" duration="2028000" />
+      <workItem from="1775559323855" duration="1233000" />
+      <workItem from="1775813644487" duration="748000" />
+      <workItem from="1776164612300" duration="226000" />
+      <workItem from="1776185498529" duration="692000" />
+      <workItem from="1779361262246" duration="1248000" />
+    </task>
+    <servers />
+  </component>
+  <component name="TypeScriptGeneratedFilesManager">
+    <option name="version" value="3" />
+  </component>
+  <component name="Vcs.Log.History.Properties">
+    <option name="COLUMN_ID_ORDER">
+      <list>
+        <option value="Default.Root" />
+        <option value="Default.Author" />
+        <option value="Default.Date" />
+        <option value="Default.Subject" />
+        <option value="Space.CommitStatus" />
+      </list>
+    </option>
+  </component>
+  <component name="XDebuggerManager">
+    <breakpoint-manager>
+      <breakpoints>
+        <line-breakpoint enabled="true" type="javascript">
+          <url>file://$PROJECT_DIR$/src/get-auth-urls.ts</url>
+          <line>172</line>
+          <option name="timeStamp" value="2" />
+        </line-breakpoint>
+        <line-breakpoint enabled="true" type="javascript">
+          <url>file://$PROJECT_DIR$/examples/token/get-client-credential-token.js</url>
+          <line>10</line>
+          <option name="timeStamp" value="3" />
+        </line-breakpoint>
+        <line-breakpoint enabled="true" type="javascript">
+          <url>file://$PROJECT_DIR$/src/exchange-code-for-token.ts</url>
+          <line>23</line>
+          <option name="timeStamp" value="5" />
+        </line-breakpoint>
+      </breakpoints>
+    </breakpoint-manager>
+  </component>
+</project>

package/CHANGELOG.md

@@ -1,3 +1,20 @@
+6.96.0 / 2026-04-07
+==========
+
+**Features**
+
+* Add `caasGetRegularTransactions` for CaaS `GET /accounts/{accountId}/regular-transactions`.
+
+6.95.0 / 2026-02-23
+==========
+
+**Features**
+
+* **Gateway behaviour**: When `gatewayIdentityServiceUrl` is set, discovery is fetched from it and endpoint URLs in the document are rewritten to that base (discovery `issuer` is left unchanged for JWT validation). When `gatewayResourceServerUrl`, `gatewayCaasResourceServerUrl`, or `gatewayOsipResourceServerUrl` is set, the client uses that URL for that API and rewrites response link URLs in the response body to it. When `gatewayAccountConnectUrl` is set, the client uses that URL for the account-connect API (request routing only; link rewriting applies to resource server, CaaS, and OSIP only). When a gateway URL is not set for a resource, no rewriting occurs for that resource.
+* `getOpenIdConfig()` uses a TTL cache backed by `@isaacs/ttlcache` (configurable via `options.openIdConfigCacheTtlMs`) and returns discovery with endpoint URLs rewritten to `gatewayIdentityServiceUrl` only when that option is set.
+* Identity URLs are detected for versioning via the effective identity base (no hardcoded path prefix list); when provided, any request URL under that base does not have an API version segment added.
+* See the readme section **Using the client behind a gateway** for configuration, verification, and security notes.
+
 6.91.0 / 2025-05-01
 ==================
 
@@ -172,7 +189,7 @@
 **Breaking Changes**
 
 * Normalisation of all methods to use object destructuring to pass parameters. Please refer to the docs of each method when migrating to this version
-* Delete methods only return the status code when succesful
+* Delete methods only return the status code when successful
 * All methods to retrieve data return the body response as json, on previous versions some methods were returning the full response from the got library.
 * When our API response code is not 2xx an HTTP error is thrown. Includes a response property with more information.
 * Removal of all the methods with the suffix `WithToken`. To migrate to this version you can use the method with the same name but without the suffix. e.g `getUserConnectionsWithToken()` => `getUserConnections()`

package/dist/discovery.d.ts

@@ -0,0 +1,75 @@
+import type { Agents } from "got";
+import type { MutualTLSOptions } from "./schema/config";
+export interface DiscoveryOptions {
+    timeout?: number;
+    agent?: Agents;
+    mTLS?: MutualTLSOptions;
+}
+/**
+ * Rewrites any string value in a value (object, array, or primitive) that starts with
+ * canonicalBase to use targetBase instead. Does not mutate the original.
+ * Used for both OIDC discovery documents and resource server response bodies (e.g. links).
+ * @param {*} value - Object, array or primitive to rewrite
+ * @param {string} canonicalBase - Base URL to replace
+ * @param {string} targetBase - Base URL to use instead
+ * @returns {*} A copy of value with matching URLs rewritten
+ */
+export declare function rewriteUrlsInObject<T>(value: T, canonicalBase: string, targetBase: string): T;
+/**
+ * Rewrites URL fields in an OIDC discovery document so that endpoint URLs use the
+ * target base. Leaves the discovery "issuer" field unchanged so that JWT iss claim
+ * validation continues to work when the IdP still issues tokens with the canonical issuer.
+ * @param {Object} doc - OIDC discovery document
+ * @param {string} canonicalBase - Base URL to replace
+ * @param {string} targetBase - Base URL to use instead
+ * @returns {Object} Discovery document with endpoint URLs rewritten
+ */
+export declare function rewriteDiscoveryUrls(doc: Record<string, unknown>, canonicalBase: string, targetBase: string): Record<string, unknown>;
+export interface OpenIDDiscoveryMetadata {
+    issuer: string;
+    authorization_endpoint?: string;
+    token_endpoint?: string;
+    jwks_uri?: string;
+    [key: string]: unknown;
+}
+/**
+ * Rewrites a discovery document so endpoint URLs use the identity service base (e.g. gateway).
+ * Single source of truth for canonical/target computation; used by both initial fetch and cache refresh.
+ * @param {string} identityServiceUrl - Identity service base URL (e.g. gateway or https://identity.moneyhub.co.uk)
+ * @param {Record<string, unknown>} doc - Raw OIDC discovery document
+ * @returns {Record<string, unknown>} Discovery document with endpoint URLs rewritten (issuer unchanged)
+ */
+export declare function rewriteDiscoveryDocForIdentityUrl(identityServiceUrl: string, doc: Record<string, unknown>): Record<string, unknown>;
+/**
+ * Fetches the raw OpenID discovery document from identityServiceUrl/oidc (no URL rewriting).
+ * @param {string} identityServiceUrl - Identity service base URL
+ * @param {DiscoveryOptions} options - Optional timeout, agent or mTLS settings
+ * @returns {Promise<OpenIDDiscoveryMetadata>} Raw OpenID discovery metadata
+ */
+export declare function getDiscovery(identityServiceUrl: string, options?: DiscoveryOptions): Promise<OpenIDDiscoveryMetadata>;
+/**
+ * Fetches the OpenID discovery document from identityServiceUrl/oidc and rewrites
+ * all endpoint URLs (but not the issuer field) to use the configured identity service url, so that
+ * when used behind a gateway all OIDC traffic goes through the gateway.
+ * @param {string} identityServiceUrl - Identity service URL (e.g. https://identity.moneyhub.co.uk)
+ * @param {DiscoveryOptions} options - Optional timeout, agent or mTLS settings
+ * @returns {Promise<OpenIDDiscoveryMetadata>} OpenID discovery metadata with URLs rewritten for the gateway
+ */
+export declare function getDiscoveryWithGatewayUrl(identityServiceUrl: string, options?: DiscoveryOptions): Promise<OpenIDDiscoveryMetadata>;
+/**
+ * Infers the canonical API base from a response link URL (e.g. links.self) by taking
+ * origin and path up to and including the version segment (e.g. /v3).
+ * @param {string} linkUrl - Full link URL from a resource response
+ * @returns {string|null} Canonical base URL or null if it cannot be inferred
+ */
+export declare function inferCanonicalBaseFromLinkUrl(linkUrl: string): string | null;
+/**
+ * Rewrites URL strings in a resource server response body (e.g. links.self, links.next,
+ * links.prev) so that any canonical API base is replaced with resourceServerUrl.
+ * Returns the body unchanged if no links or no canonical base can be inferred.
+ * @param {*} body - Resource server response body (typically with a links property)
+ * @param {string} resourceServerUrl - Base URL for the resource server (e.g. gateway URL)
+ * @returns {*} Body with link URLs rewritten to use resourceServerUrl
+ */
+export declare function rewriteResourceServerResponseUrls<T>(body: T, resourceServerUrl: string): T;
+//# sourceMappingURL=discovery.d.ts.map

package/dist/discovery.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"discovery.d.ts","sourceRoot":"","sources":["../src/discovery.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAC,MAAM,EAAC,MAAM,KAAK,CAAA;AAC/B,OAAO,KAAK,EAAC,gBAAgB,EAAC,MAAM,iBAAiB,CAAA;AAErD,MAAM,WAAW,gBAAgB;IAC/B,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,IAAI,CAAC,EAAE,gBAAgB,CAAA;CACxB;AAED;;;;;;;;GAQG;AACH,wBAAgB,mBAAmB,CAAC,CAAC,EACnC,KAAK,EAAE,CAAC,EACR,aAAa,EAAE,MAAM,EACrB,UAAU,EAAE,MAAM,GACjB,CAAC,CAuBH;AAED;;;;;;;;GAQG;AACH,wBAAgB,oBAAoB,CAClC,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC5B,aAAa,EAAE,MAAM,EACrB,UAAU,EAAE,MAAM,GACjB,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAYzB;AAED,MAAM,WAAW,uBAAuB;IACtC,MAAM,EAAE,MAAM,CAAA;IACd,sBAAsB,CAAC,EAAE,MAAM,CAAA;IAC/B,cAAc,CAAC,EAAE,MAAM,CAAA;IACvB,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAA;CACvB;AAUD;;;;;;GAMG;AACH,wBAAgB,iCAAiC,CAC/C,kBAAkB,EAAE,MAAM,EAC1B,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC3B,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAMzB;AAED;;;;;GAKG;AACH,wBAAsB,YAAY,CAChC,kBAAkB,EAAE,MAAM,EAC1B,OAAO,GAAE,gBAAqB,GAC7B,OAAO,CAAC,uBAAuB,CAAC,CAkBlC;AAED;;;;;;;GAOG;AACH,wBAAsB,0BAA0B,CAC9C,kBAAkB,EAAE,MAAM,EAC1B,OAAO,GAAE,gBAAqB,GAC7B,OAAO,CAAC,uBAAuB,CAAC,CAIlC;AAED;;;;;GAKG;AACH,wBAAgB,6BAA6B,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAa5E;AAED;;;;;;;GAOG;AACH,wBAAgB,iCAAiC,CAAC,CAAC,EACjD,IAAI,EAAE,CAAC,EACP,iBAAiB,EAAE,MAAM,GACxB,CAAC,CAaH"}

package/dist/discovery.js

@@ -0,0 +1,169 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.rewriteResourceServerResponseUrls = exports.inferCanonicalBaseFromLinkUrl = exports.getDiscoveryWithGatewayUrl = exports.getDiscovery = exports.rewriteDiscoveryDocForIdentityUrl = exports.rewriteDiscoveryUrls = exports.rewriteUrlsInObject = void 0;
+const got_1 = __importDefault(require("got"));
+/**
+ * Rewrites any string value in a value (object, array, or primitive) that starts with
+ * canonicalBase to use targetBase instead. Does not mutate the original.
+ * Used for both OIDC discovery documents and resource server response bodies (e.g. links).
+ * @param {*} value - Object, array or primitive to rewrite
+ * @param {string} canonicalBase - Base URL to replace
+ * @param {string} targetBase - Base URL to use instead
+ * @returns {*} A copy of value with matching URLs rewritten
+ */
+function rewriteUrlsInObject(value, canonicalBase, targetBase) {
+    if (canonicalBase === targetBase)
+        return value;
+    if (typeof value === "string") {
+        if (value.startsWith(canonicalBase)) {
+            return (targetBase + value.slice(canonicalBase.length));
+        }
+        return value;
+    }
+    if (Array.isArray(value)) {
+        return value.map((item) => rewriteUrlsInObject(item, canonicalBase, targetBase));
+    }
+    if (value !== null && typeof value === "object") {
+        const out = {};
+        for (const [k, v] of Object.entries(value)) {
+            out[k] = rewriteUrlsInObject(v, canonicalBase, targetBase);
+        }
+        return out;
+    }
+    return value;
+}
+exports.rewriteUrlsInObject = rewriteUrlsInObject;
+/**
+ * Rewrites URL fields in an OIDC discovery document so that endpoint URLs use the
+ * target base. Leaves the discovery "issuer" field unchanged so that JWT iss claim
+ * validation continues to work when the IdP still issues tokens with the canonical issuer.
+ * @param {Object} doc - OIDC discovery document
+ * @param {string} canonicalBase - Base URL to replace
+ * @param {string} targetBase - Base URL to use instead
+ * @returns {Object} Discovery document with endpoint URLs rewritten
+ */
+function rewriteDiscoveryUrls(doc, canonicalBase, targetBase) {
+    if (canonicalBase === targetBase)
+        return doc;
+    const result = {};
+    for (const [key, val] of Object.entries(doc)) {
+        if (key === "issuer" && typeof val === "string") {
+            result[key] = val;
+            continue;
+        }
+        result[key] = rewriteUrlsInObject(val, canonicalBase, targetBase);
+    }
+    return result;
+}
+exports.rewriteDiscoveryUrls = rewriteDiscoveryUrls;
+/**
+ * Normalised OIDC base for the given identity service URL (no trailing slash).
+ * @param {string} identityServiceUrl - Identity service base URL
+ * @returns {string} OIDC base URL with no trailing slash
+ */
+const oidcBaseFromIdentityUrl = (identityServiceUrl) => (identityServiceUrl.replace(/\/oidc\/?$/, "") + "/oidc").replace(/\/$/, "");
+/**
+ * Rewrites a discovery document so endpoint URLs use the identity service base (e.g. gateway).
+ * Single source of truth for canonical/target computation; used by both initial fetch and cache refresh.
+ * @param {string} identityServiceUrl - Identity service base URL (e.g. gateway or https://identity.moneyhub.co.uk)
+ * @param {Record<string, unknown>} doc - Raw OIDC discovery document
+ * @returns {Record<string, unknown>} Discovery document with endpoint URLs rewritten (issuer unchanged)
+ */
+function rewriteDiscoveryDocForIdentityUrl(identityServiceUrl, doc) {
+    const issuer = doc === null || doc === void 0 ? void 0 : doc.issuer;
+    if (!issuer || typeof issuer !== "string")
+        return doc;
+    const canonicalBase = issuer.replace(/\/$/, "");
+    const targetBase = oidcBaseFromIdentityUrl(identityServiceUrl);
+    return rewriteDiscoveryUrls(doc, canonicalBase, targetBase);
+}
+exports.rewriteDiscoveryDocForIdentityUrl = rewriteDiscoveryDocForIdentityUrl;
+/**
+ * Fetches the raw OpenID discovery document from identityServiceUrl/oidc (no URL rewriting).
+ * @param {string} identityServiceUrl - Identity service base URL
+ * @param {DiscoveryOptions} options - Optional timeout, agent or mTLS settings
+ * @returns {Promise<OpenIDDiscoveryMetadata>} Raw OpenID discovery metadata
+ */
+async function getDiscovery(identityServiceUrl, options = {}) {
+    const base = oidcBaseFromIdentityUrl(identityServiceUrl);
+    const url = `${base}/.well-known/openid-configuration`;
+    const gotOpts = {
+        timeout: options.timeout,
+        responseType: "json",
+    };
+    if (options.agent) {
+        gotOpts.agent = options.agent;
+    }
+    if (options.mTLS) {
+        gotOpts.https = {
+            certificate: options.mTLS.cert,
+            key: options.mTLS.key,
+        };
+    }
+    const doc = (await (0, got_1.default)(url, gotOpts).json());
+    return doc;
+}
+exports.getDiscovery = getDiscovery;
+/**
+ * Fetches the OpenID discovery document from identityServiceUrl/oidc and rewrites
+ * all endpoint URLs (but not the issuer field) to use the configured identity service url, so that
+ * when used behind a gateway all OIDC traffic goes through the gateway.
+ * @param {string} identityServiceUrl - Identity service URL (e.g. https://identity.moneyhub.co.uk)
+ * @param {DiscoveryOptions} options - Optional timeout, agent or mTLS settings
+ * @returns {Promise<OpenIDDiscoveryMetadata>} OpenID discovery metadata with URLs rewritten for the gateway
+ */
+async function getDiscoveryWithGatewayUrl(identityServiceUrl, options = {}) {
+    const doc = (await getDiscovery(identityServiceUrl, options));
+    const rewritten = rewriteDiscoveryDocForIdentityUrl(identityServiceUrl, doc);
+    return rewritten;
+}
+exports.getDiscoveryWithGatewayUrl = getDiscoveryWithGatewayUrl;
+/**
+ * Infers the canonical API base from a response link URL (e.g. links.self) by taking
+ * origin and path up to and including the version segment (e.g. /v3).
+ * @param {string} linkUrl - Full link URL from a resource response
+ * @returns {string|null} Canonical base URL or null if it cannot be inferred
+ */
+function inferCanonicalBaseFromLinkUrl(linkUrl) {
+    try {
+        const u = new URL(linkUrl);
+        const pathParts = u.pathname.split("/").filter(Boolean);
+        const versionIndex = pathParts.findIndex((p) => /^v\d+(\.\d+)?$/i.test(p));
+        if (versionIndex >= 0) {
+            const versionPath = "/" + pathParts.slice(0, versionIndex + 1).join("/");
+            return `${u.origin}${versionPath}`;
+        }
+        return u.origin;
+    }
+    catch {
+        return null;
+    }
+}
+exports.inferCanonicalBaseFromLinkUrl = inferCanonicalBaseFromLinkUrl;
+/**
+ * Rewrites URL strings in a resource server response body (e.g. links.self, links.next,
+ * links.prev) so that any canonical API base is replaced with resourceServerUrl.
+ * Returns the body unchanged if no links or no canonical base can be inferred.
+ * @param {*} body - Resource server response body (typically with a links property)
+ * @param {string} resourceServerUrl - Base URL for the resource server (e.g. gateway URL)
+ * @returns {*} Body with link URLs rewritten to use resourceServerUrl
+ */
+function rewriteResourceServerResponseUrls(body, resourceServerUrl) {
+    if (body === null || typeof body !== "object")
+        return body;
+    const targetBase = resourceServerUrl.replace(/\/$/, "");
+    const links = body.links;
+    if (!links || typeof links.self !== "string")
+        return body;
+    const canonicalBase = inferCanonicalBaseFromLinkUrl(links.self);
+    if (!canonicalBase || canonicalBase === targetBase)
+        return body;
+    const result = { ...body };
+    result.links = rewriteUrlsInObject(links, canonicalBase, targetBase);
+    return result;
+}
+exports.rewriteResourceServerResponseUrls = rewriteResourceServerResponseUrls;
+//# sourceMappingURL=discovery.js.map

package/dist/discovery.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"discovery.js","sourceRoot":"","sources":["../src/discovery.ts"],"names":[],"mappings":";;;;;;AAAA,8CAA2D;AAU3D;;;;;;;;GAQG;AACH,SAAgB,mBAAmB,CACjC,KAAQ,EACR,aAAqB,EACrB,UAAkB;IAElB,IAAI,aAAa,KAAK,UAAU;QAAE,OAAO,KAAK,CAAA;IAE9C,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE;QAC7B,IAAI,KAAK,CAAC,UAAU,CAAC,aAAa,CAAC,EAAE;YACnC,OAAO,CAAC,UAAU,GAAG,KAAK,CAAC,KAAK,CAAC,aAAa,CAAC,MAAM,CAAC,CAAiB,CAAA;SACxE;QACD,OAAO,KAAK,CAAA;KACb;IAED,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE;QACxB,OAAO,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,mBAAmB,CAAC,IAAI,EAAE,aAAa,EAAE,UAAU,CAAC,CAAiB,CAAA;KACjG;IAED,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE;QAC/C,MAAM,GAAG,GAA4B,EAAE,CAAA;QACvC,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE;YAC1C,GAAG,CAAC,CAAC,CAAC,GAAG,mBAAmB,CAAC,CAAC,EAAE,aAAa,EAAE,UAAU,CAAC,CAAA;SAC3D;QACD,OAAO,GAAQ,CAAA;KAChB;IAED,OAAO,KAAK,CAAA;AACd,CAAC;AA3BD,kDA2BC;AAED;;;;;;;;GAQG;AACH,SAAgB,oBAAoB,CAClC,GAA4B,EAC5B,aAAqB,EACrB,UAAkB;IAElB,IAAI,aAAa,KAAK,UAAU;QAAE,OAAO,GAAG,CAAA;IAE5C,MAAM,MAAM,GAA4B,EAAE,CAAA;IAC1C,KAAK,MAAM,CAAC,GAAG,EAAE,GAAG,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE;QAC5C,IAAI,GAAG,KAAK,QAAQ,IAAI,OAAO,GAAG,KAAK,QAAQ,EAAE;YAC/C,MAAM,CAAC,GAAG,CAAC,GAAG,GAAG,CAAA;YACjB,SAAQ;SACT;QACD,MAAM,CAAC,GAAG,CAAC,GAAG,mBAAmB,CAAC,GAAG,EAAE,aAAa,EAAE,UAAU,CAAC,CAAA;KAClE;IACD,OAAO,MAAM,CAAA;AACf,CAAC;AAhBD,oDAgBC;AAUD;;;;GAIG;AACH,MAAM,uBAAuB,GAAG,CAAC,kBAA0B,EAAU,EAAE,CACrE,CAAC,kBAAkB,CAAC,OAAO,CAAC,YAAY,EAAE,EAAE,CAAC,GAAG,OAAO,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAA;AAE7E;;;;;;GAMG;AACH,SAAgB,iCAAiC,CAC/C,kBAA0B,EAC1B,GAA4B;IAE5B,MAAM,MAAM,GAAG,GAAG,aAAH,GAAG,uBAAH,GAAG,CAAE,MAAM,CAAA;IAC1B,IAAI,CAAC,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ;QAAE,OAAO,GAAG,CAAA;IACrD,MAAM,aAAa,GAAG,MAAM,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAA;IAC/C,MAAM,UAAU,GAAG,uBAAuB,CAAC,kBAAkB,CAAC,CAAA;IAC9D,OAAO,oBAAoB,CAAC,GAAG,EAAE,aAAa,EAAE,UAAU,CAAC,CAAA;AAC7D,CAAC;AATD,8EASC;AAED;;;;;GAKG;AACI,KAAK,UAAU,YAAY,CAChC,kBAA0B,EAC1B,UAA4B,EAAE;IAE9B,MAAM,IAAI,GAAG,uBAAuB,CAAC,kBAAkB,CAAC,CAAA;IACxD,MAAM,GAAG,GAAG,GAAG,IAAI,mCAAmC,CAAA;IACtD,MAAM,OAAO,GAA8B;QACzC,OAAO,EAAE,OAAO,CAAC,OAAO;QACxB,YAAY,EAAE,MAAM;KACrB,CAAA;IACD,IAAI,OAAO,CAAC,KAAK,EAAE;QAChB,OAAmB,CAAC,KAAK,GAAG,OAAO,CAAC,KAAK,CAAA;KAC3C;IACD,IAAI,OAAO,CAAC,IAAI,EAAE;QAChB,OAAO,CAAC,KAAK,GAAG;YACd,WAAW,EAAE,OAAO,CAAC,IAAI,CAAC,IAAI;YAC9B,GAAG,EAAE,OAAO,CAAC,IAAI,CAAC,GAAG;SACtB,CAAA;KACF;IACD,MAAM,GAAG,GAAG,CAAC,MAAM,IAAA,aAAG,EAAC,GAAG,EAAE,OAAO,CAAC,CAAC,IAAI,EAAE,CAA4B,CAAA;IACvE,OAAO,GAA8B,CAAA;AACvC,CAAC;AArBD,oCAqBC;AAED;;;;;;;GAOG;AACI,KAAK,UAAU,0BAA0B,CAC9C,kBAA0B,EAC1B,UAA4B,EAAE;IAE9B,MAAM,GAAG,GAAG,CAAC,MAAM,YAAY,CAAC,kBAAkB,EAAE,OAAO,CAAC,CAA4B,CAAA;IACxF,MAAM,SAAS,GAAG,iCAAiC,CAAC,kBAAkB,EAAE,GAAG,CAAC,CAAA;IAC5E,OAAO,SAAoC,CAAA;AAC7C,CAAC;AAPD,gEAOC;AAED;;;;;GAKG;AACH,SAAgB,6BAA6B,CAAC,OAAe;IAC3D,IAAI;QACF,MAAM,CAAC,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,CAAA;QAC1B,MAAM,SAAS,GAAG,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAA;QACvD,MAAM,YAAY,GAAG,SAAS,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAA;QAC1E,IAAI,YAAY,IAAI,CAAC,EAAE;YACrB,MAAM,WAAW,GAAG,GAAG,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,YAAY,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;YACxE,OAAO,GAAG,CAAC,CAAC,MAAM,GAAG,WAAW,EAAE,CAAA;SACnC;QACD,OAAO,CAAC,CAAC,MAAM,CAAA;KAChB;IAAC,MAAM;QACN,OAAO,IAAI,CAAA;KACZ;AACH,CAAC;AAbD,sEAaC;AAED;;;;;;;GAOG;AACH,SAAgB,iCAAiC,CAC/C,IAAO,EACP,iBAAyB;IAEzB,IAAI,IAAI,KAAK,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAA;IAE1D,MAAM,UAAU,GAAG,iBAAiB,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAA;IACvD,MAAM,KAAK,GAAI,IAAgC,CAAC,KAAoE,CAAA;IACpH,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAA;IAEzD,MAAM,aAAa,GAAG,6BAA6B,CAAC,KAAK,CAAC,IAAI,CAAC,CAAA;IAC/D,IAAI,CAAC,aAAa,IAAI,aAAa,KAAK,UAAU;QAAE,OAAO,IAAI,CAAA;IAE/D,MAAM,MAAM,GAAG,EAAC,GAAI,IAAgC,EAAC,CAAA;IACrD,MAAM,CAAC,KAAK,GAAG,mBAAmB,CAAC,KAAK,EAAE,aAAa,EAAE,UAAU,CAAC,CAAA;IACpE,OAAO,MAAsB,CAAA;AAC/B,CAAC;AAhBD,8EAgBC"}