@minimaltech/node-infra 0.5.10-12 → 0.5.10-13

package/dist/components/authenticate/services/basic.strategy.js

@@ -0,0 +1,53 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+var __param = (this && this.__param) || function (paramIndex, decorator) {
+    return function (target, key) { decorator(target, key, paramIndex); }
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.BasicAuthenticationStrategy = void 0;
+const core_1 = require("@loopback/core");
+const rest_1 = require("@loopback/rest");
+const common_1 = require("../common");
+const basic_token_service_1 = require("./basic-token.service");
+let BasicAuthenticationStrategy = class BasicAuthenticationStrategy {
+    constructor(service) {
+        this.service = service;
+        this.name = common_1.Authentication.STRATEGY_BASIC;
+    }
+    extractCredentials(request) {
+        if (!request.headers.authorization) {
+            throw new rest_1.HttpErrors.Unauthorized(`Authorization header not found.`);
+        }
+        const authHeaderValue = request.headers.authorization;
+        if (!authHeaderValue.startsWith('Basic')) {
+            throw new rest_1.HttpErrors.Unauthorized(`Authorization header is not of type 'Basic'.`);
+        }
+        const parts = authHeaderValue.split(' ');
+        if (parts.length !== 2) {
+            throw new rest_1.HttpErrors.Unauthorized('Invalid basic authentication header');
+        }
+        const token = parts[1];
+        const credential = Buffer.from(token, 'base64').toString();
+        const [username, password] = credential?.split(':') || [];
+        return { username, password };
+    }
+    async authenticate(request) {
+        const credential = this.extractCredentials(request);
+        const rs = await this.service.verify(credential);
+        return rs;
+    }
+};
+exports.BasicAuthenticationStrategy = BasicAuthenticationStrategy;
+exports.BasicAuthenticationStrategy = BasicAuthenticationStrategy = __decorate([
+    __param(0, (0, core_1.inject)('services.BasicTokenService')),
+    __metadata("design:paramtypes", [basic_token_service_1.BasicTokenService])
+], BasicAuthenticationStrategy);
+//# sourceMappingURL=basic.strategy.js.map

package/dist/components/authenticate/services/basic.strategy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"basic.strategy.js","sourceRoot":"","sources":["../../../../src/components/authenticate/services/basic.strategy.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;AACA,yCAAwC;AACxC,yCAAqD;AACrD,sCAA2C;AAC3C,+DAA0D;AAE1D,IAAa,2BAA2B,GAAxC,MAAa,2BAA2B;IAGtC,YAAkD,OAAkC;QAA1B,YAAO,GAAP,OAAO,CAAmB;QAFpF,SAAI,GAAG,uBAAc,CAAC,cAAc,CAAC;IAEkD,CAAC;IAExF,kBAAkB,CAAC,OAAgB;QACjC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,aAAa,EAAE,CAAC;YACnC,MAAM,IAAI,iBAAU,CAAC,YAAY,CAAC,iCAAiC,CAAC,CAAC;QACvE,CAAC;QAED,MAAM,eAAe,GAAG,OAAO,CAAC,OAAO,CAAC,aAAa,CAAC;QAEtD,IAAI,CAAC,eAAe,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;YACzC,MAAM,IAAI,iBAAU,CAAC,YAAY,CAAC,8CAA8C,CAAC,CAAC;QACpF,CAAC;QAED,MAAM,KAAK,GAAG,eAAe,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QACzC,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACvB,MAAM,IAAI,iBAAU,CAAC,YAAY,CAAC,qCAAqC,CAAC,CAAC;QAC3E,CAAC;QAED,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;QACvB,MAAM,UAAU,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC,QAAQ,EAAE,CAAC;QAC3D,MAAM,CAAC,QAAQ,EAAE,QAAQ,CAAC,GAAG,UAAU,EAAE,KAAK,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC;QAC1D,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,CAAC;IAChC,CAAC;IAED,KAAK,CAAC,YAAY,CAAC,OAAgB;QACjC,MAAM,UAAU,GAAG,IAAI,CAAC,kBAAkB,CAAC,OAAO,CAAC,CAAC;QACpD,MAAM,EAAE,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;QACjD,OAAO,EAAE,CAAC;IACZ,CAAC;CACF,CAAA;AAhCY,kEAA2B;sCAA3B,2BAA2B;IAGzB,WAAA,IAAA,aAAM,EAAC,4BAA4B,CAAC,CAAA;qCAAkB,uCAAiB;GAHzE,2BAA2B,CAgCvC"}

package/dist/components/authenticate/services/index.d.ts

@@ -0,0 +1,7 @@
+export * from './basic.strategy';
+export * from './basic-token.service';
+export * from './jwt.strategy';
+export * from './jwt-token.service';
+export * from './oauth2.strategy';
+export * from './oauth2.service';
+//# sourceMappingURL=index.d.ts.map

package/dist/components/authenticate/services/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/components/authenticate/services/index.ts"],"names":[],"mappings":"AAAA,cAAc,kBAAkB,CAAC;AACjC,cAAc,uBAAuB,CAAC;AAEtC,cAAc,gBAAgB,CAAC;AAC/B,cAAc,qBAAqB,CAAC;AAEpC,cAAc,mBAAmB,CAAC;AAClC,cAAc,kBAAkB,CAAC"}

package/dist/components/authenticate/services/index.js

@@ -0,0 +1,23 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __exportStar = (this && this.__exportStar) || function(m, exports) {
+    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+__exportStar(require("./basic.strategy"), exports);
+__exportStar(require("./basic-token.service"), exports);
+__exportStar(require("./jwt.strategy"), exports);
+__exportStar(require("./jwt-token.service"), exports);
+__exportStar(require("./oauth2.strategy"), exports);
+__exportStar(require("./oauth2.service"), exports);
+//# sourceMappingURL=index.js.map

package/dist/components/authenticate/services/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../src/components/authenticate/services/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,mDAAiC;AACjC,wDAAsC;AAEtC,iDAA+B;AAC/B,sDAAoC;AAEpC,oDAAkC;AAClC,mDAAiC"}

package/dist/components/authenticate/services/jwt-token.service.d.ts

@@ -0,0 +1,29 @@
+import { BaseService } from '../../../base/services';
+import { IJWTTokenPayload, TGetTokenExpiresFn } from '../common';
+export declare class JWTTokenService extends BaseService {
+    protected applicationSecret: string;
+    protected jwtSecret: string;
+    protected jwtExpiresIn: string;
+    protected getTokenExpiresFn: TGetTokenExpiresFn;
+    private aes;
+    constructor(applicationSecret: string, jwtSecret: string, jwtExpiresIn: string, getTokenExpiresFn: TGetTokenExpiresFn);
+    extractCredentials(request: {
+        headers: any;
+    }): {
+        type: string;
+        token: string;
+    };
+    encryptPayload(payload: IJWTTokenPayload): {
+        [x: string]: string;
+    };
+    decryptPayload(decodedToken: any): IJWTTokenPayload;
+    verify(opts: {
+        type: string;
+        token: string;
+    }): IJWTTokenPayload;
+    generate(opts: {
+        payload: IJWTTokenPayload;
+        getTokenExpiresFn?: TGetTokenExpiresFn;
+    }): Promise<string>;
+}
+//# sourceMappingURL=jwt-token.service.d.ts.map

package/dist/components/authenticate/services/jwt-token.service.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"jwt-token.service.d.ts","sourceRoot":"","sources":["../../../../src/components/authenticate/services/jwt-token.service.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAC;AAS9C,OAAO,EAAoC,gBAAgB,EAAE,kBAAkB,EAAE,MAAM,WAAW,CAAC;AAEnG,qBACa,eAAgB,SAAQ,WAAW;IAK5C,SAAS,CAAC,iBAAiB,EAAE,MAAM;IACQ,SAAS,CAAC,SAAS,EAAE,MAAM;IACvB,SAAS,CAAC,YAAY,EAAE,MAAM;IAE7E,SAAS,CAAC,iBAAiB,EAAE,kBAAkB;IARjD,OAAO,CAAC,GAAG,CAAoC;gBAInC,iBAAiB,EAAE,MAAM,EACkB,SAAS,EAAE,MAAM,EACb,YAAY,EAAE,MAAM,EAEnE,iBAAiB,EAAE,kBAAkB;IAMjD,kBAAkB,CAAC,OAAO,EAAE;QAAE,OAAO,EAAE,GAAG,CAAA;KAAE,GAAG;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE;IA2B9E,cAAc,CAAC,OAAO,EAAE,gBAAgB;;;IAoBxC,cAAc,CAAC,YAAY,EAAE,GAAG,GAAG,gBAAgB;IA8CnD,MAAM,CAAC,IAAI,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,GAAG,gBAAgB;IA0BzD,QAAQ,CAAC,IAAI,EAAE;QACnB,OAAO,EAAE,gBAAgB,CAAC;QAC1B,iBAAiB,CAAC,EAAE,kBAAkB,CAAC;KACxC,GAAG,OAAO,CAAC,MAAM,CAAC;CA4BpB"}

package/dist/components/authenticate/services/jwt-token.service.js

@@ -0,0 +1,173 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+var __param = (this && this.__param) || function (paramIndex, decorator) {
+    return function (target, key) { decorator(target, key, paramIndex); }
+};
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+var JWTTokenService_1;
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.JWTTokenService = void 0;
+const services_1 = require("../../../base/services");
+const common_1 = require("../../../common");
+const helpers_1 = require("../../../helpers");
+const utilities_1 = require("../../../utilities");
+const authentication_jwt_1 = require("@loopback/authentication-jwt");
+const core_1 = require("@loopback/core");
+const rest_1 = require("@loopback/rest");
+const security_1 = require("@loopback/security");
+const jsonwebtoken_1 = __importDefault(require("jsonwebtoken"));
+const common_2 = require("../common");
+let JWTTokenService = JWTTokenService_1 = class JWTTokenService extends services_1.BaseService {
+    constructor(applicationSecret, jwtSecret, jwtExpiresIn, getTokenExpiresFn) {
+        super({ scope: JWTTokenService_1.name });
+        this.applicationSecret = applicationSecret;
+        this.jwtSecret = jwtSecret;
+        this.jwtExpiresIn = jwtExpiresIn;
+        this.getTokenExpiresFn = getTokenExpiresFn;
+        this.aes = helpers_1.AES.withAlgorithm('aes-256-cbc');
+    }
+    // --------------------------------------------------------------------------------------
+    extractCredentials(request) {
+        if (!request.headers.authorization) {
+            throw (0, utilities_1.getError)({
+                statusCode: 401,
+                message: 'Unauthorized user! Missing authorization header',
+            });
+        }
+        const authHeaderValue = request.headers.authorization;
+        if (!authHeaderValue.startsWith(common_2.Authentication.TYPE_BEARER)) {
+            throw (0, utilities_1.getError)({
+                statusCode: 401,
+                message: 'Unauthorized user! Invalid schema of request token!',
+            });
+        }
+        const parts = authHeaderValue.split(' ');
+        if (parts.length !== 2) {
+            throw new rest_1.HttpErrors.Unauthorized(`Authorization header value has too many parts. It must follow the pattern: 'Bearer xx.yy.zz' where xx.yy.zz is a valid JWT token.`);
+        }
+        return { type: parts[0], token: parts[1] };
+    }
+    // --------------------------------------------------------------------------------------
+    encryptPayload(payload) {
+        const providerKey = this.aes.encrypt('provider', this.applicationSecret);
+        const userKey = this.aes.encrypt('userId', this.applicationSecret);
+        const rolesKey = this.aes.encrypt('roles', this.applicationSecret);
+        const clientIdKey = this.aes.encrypt('clientId', this.applicationSecret);
+        const { provider = 'NA', userId, roles, clientId = 'NA' } = payload;
+        return {
+            [providerKey]: this.aes.encrypt(provider, this.applicationSecret),
+            [userKey]: this.aes.encrypt(userId.toString(), this.applicationSecret),
+            [rolesKey]: this.aes.encrypt(JSON.stringify(roles.map(el => `${el.id}|${el.identifier}|${el.priority}`)), this.applicationSecret),
+            [clientIdKey]: this.aes.encrypt(clientId, this.applicationSecret),
+        };
+    }
+    // --------------------------------------------------------------------------------------
+    decryptPayload(decodedToken) {
+        const rs = {};
+        const jwtFields = new Set(['iat', 'exp']);
+        for (const encodedAttr in decodedToken) {
+            if (jwtFields.has(encodedAttr)) {
+                rs[encodedAttr] = decodedToken[encodedAttr];
+                continue;
+            }
+            const attr = this.aes.decrypt(encodedAttr, this.applicationSecret);
+            const decryptedValue = this.aes.decrypt(decodedToken[encodedAttr], this.applicationSecret);
+            switch (attr) {
+                case 'provider': {
+                    rs.provider = decryptedValue;
+                    break;
+                }
+                case 'userId': {
+                    rs.userId = parseInt(decryptedValue);
+                    rs[security_1.securityId] = rs.userId.toString();
+                    break;
+                }
+                case 'clientId': {
+                    rs.clientId = decryptedValue;
+                    break;
+                }
+                case 'roles': {
+                    rs.roles = JSON.parse(decryptedValue).map(el => {
+                        const [id, identifier, priority] = el.split('|');
+                        return { id, identifier, priority: (0, utilities_1.int)(priority) };
+                    });
+                    break;
+                }
+                default: {
+                    rs[encodedAttr] = decodedToken[encodedAttr];
+                    break;
+                }
+            }
+        }
+        return rs;
+    }
+    // --------------------------------------------------------------------------------------
+    verify(opts) {
+        const { token } = opts;
+        if (!token) {
+            this.logger.error('[verify] Missing token for validating request!');
+            throw new rest_1.HttpErrors.Unauthorized('Invalid request token!');
+        }
+        let decodedToken;
+        try {
+            decodedToken = jsonwebtoken_1.default.verify(token, this.jwtSecret);
+        }
+        catch (error) {
+            throw new rest_1.HttpErrors.Unauthorized(`Error verifying token : ${error.message}`);
+        }
+        try {
+            return this.decryptPayload(decodedToken);
+        }
+        catch (error) {
+            this.logger.error('[verify] Failed to decode token | Error: %s', error);
+            throw (0, utilities_1.getError)({
+                statusCode: 401,
+                message: 'Invalid token signature | Failed to decode token!',
+            });
+        }
+    }
+    // --------------------------------------------------------------------------------------
+    async generate(opts) {
+        const { payload, getTokenExpiresFn = () => {
+            return Number(this.jwtExpiresIn);
+        }, } = opts;
+        if (!payload) {
+            throw (0, utilities_1.getError)({
+                statusCode: common_1.ResultCodes.RS_4.Unauthorized,
+                message: 'Error generating token : userProfile is null',
+            });
+        }
+        let token;
+        const expiresIn = (await this.getTokenExpiresFn?.()) ?? (await getTokenExpiresFn());
+        try {
+            token = jsonwebtoken_1.default.sign(this.encryptPayload(payload), this.jwtSecret, { expiresIn });
+        }
+        catch (error) {
+            throw (0, utilities_1.getError)({
+                statusCode: common_1.ResultCodes.RS_4.Unauthorized,
+                message: `Error encoding token : ${error}`,
+            });
+        }
+        return token;
+    }
+};
+exports.JWTTokenService = JWTTokenService;
+exports.JWTTokenService = JWTTokenService = JWTTokenService_1 = __decorate([
+    (0, core_1.injectable)({ scope: core_1.BindingScope.SINGLETON }),
+    __param(0, (0, core_1.inject)(common_2.AuthenticateKeys.APPLICATION_SECRET)),
+    __param(1, (0, core_1.inject)(authentication_jwt_1.TokenServiceBindings.TOKEN_SECRET)),
+    __param(2, (0, core_1.inject)(authentication_jwt_1.TokenServiceBindings.TOKEN_EXPIRES_IN)),
+    __param(3, (0, core_1.inject)(common_2.AuthenticateKeys.GET_TOKEN_EXPIRES_FN, { optional: true })),
+    __metadata("design:paramtypes", [String, String, String, Function])
+], JWTTokenService);
+//# sourceMappingURL=jwt-token.service.js.map

package/dist/components/authenticate/services/jwt-token.service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"jwt-token.service.js","sourceRoot":"","sources":["../../../../src/components/authenticate/services/jwt-token.service.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;AAAA,8CAA8C;AAC9C,qCAAuC;AACvC,uCAAgC;AAChC,2CAA4C;AAC5C,qEAAoE;AACpE,yCAAkE;AAClE,yCAA4C;AAC5C,iDAAgD;AAChD,gEAA+C;AAC/C,sCAAmG;AAG5F,IAAM,eAAe,uBAArB,MAAM,eAAgB,SAAQ,sBAAW;IAG9C,YAEE,iBAAmC,EACQ,SAA2B,EACvB,YAA8B,EAE7E,iBAA+C;QAE/C,KAAK,CAAC,EAAE,KAAK,EAAE,iBAAe,CAAC,IAAI,EAAE,CAAC,CAAC;QAN7B,sBAAiB,GAAjB,iBAAiB,CAAQ;QACkB,cAAS,GAAT,SAAS,CAAQ;QACb,iBAAY,GAAZ,YAAY,CAAQ;QAEnE,sBAAiB,GAAjB,iBAAiB,CAAoB;QARzC,QAAG,GAAG,aAAG,CAAC,aAAa,CAAC,aAAa,CAAC,CAAC;IAW/C,CAAC;IAED,yFAAyF;IACzF,kBAAkB,CAAC,OAAyB;QAC1C,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,aAAa,EAAE,CAAC;YACnC,MAAM,IAAA,oBAAQ,EAAC;gBACb,UAAU,EAAE,GAAG;gBACf,OAAO,EAAE,iDAAiD;aAC3D,CAAC,CAAC;QACL,CAAC;QAED,MAAM,eAAe,GAAG,OAAO,CAAC,OAAO,CAAC,aAAa,CAAC;QACtD,IAAI,CAAC,eAAe,CAAC,UAAU,CAAC,uBAAc,CAAC,WAAW,CAAC,EAAE,CAAC;YAC5D,MAAM,IAAA,oBAAQ,EAAC;gBACb,UAAU,EAAE,GAAG;gBACf,OAAO,EAAE,qDAAqD;aAC/D,CAAC,CAAC;QACL,CAAC;QAED,MAAM,KAAK,GAAG,eAAe,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QACzC,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACvB,MAAM,IAAI,iBAAU,CAAC,YAAY,CAC/B,mIAAmI,CACpI,CAAC;QACJ,CAAC;QAED,OAAO,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;IAC7C,CAAC;IAED,yFAAyF;IACzF,cAAc,CAAC,OAAyB;QACtC,MAAM,WAAW,GAAG,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,UAAU,EAAE,IAAI,CAAC,iBAAiB,CAAC,CAAC;QACzE,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,QAAQ,EAAE,IAAI,CAAC,iBAAiB,CAAC,CAAC;QACnE,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,OAAO,EAAE,IAAI,CAAC,iBAAiB,CAAC,CAAC;QACnE,MAAM,WAAW,GAAG,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,UAAU,EAAE,IAAI,CAAC,iBAAiB,CAAC,CAAC;QAEzE,MAAM,EAAE,QAAQ,GAAG,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,QAAQ,GAAG,IAAI,EAAE,GAAG,OAAO,CAAC;QAEpE,OAAO;YACL,CAAC,WAAW,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,QAAQ,EAAE,IAAI,CAAC,iBAAiB,CAAC;YACjE,CAAC,OAAO,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,QAAQ,EAAE,EAAE,IAAI,CAAC,iBAAiB,CAAC;YACtE,CAAC,QAAQ,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,OAAO,CAC1B,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,CAAC,GAAG,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,UAAU,IAAI,EAAE,CAAC,QAAQ,EAAE,CAAC,CAAC,EAC3E,IAAI,CAAC,iBAAiB,CACvB;YACD,CAAC,WAAW,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,QAAQ,EAAE,IAAI,CAAC,iBAAiB,CAAC;SAClE,CAAC;IACJ,CAAC;IAED,yFAAyF;IACzF,cAAc,CAAC,YAAiB;QAC9B,MAAM,EAAE,GAAQ,EAAE,CAAC;QAEnB,MAAM,SAAS,GAAG,IAAI,GAAG,CAAS,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC;QAElD,KAAK,MAAM,WAAW,IAAI,YAAY,EAAE,CAAC;YACvC,IAAI,SAAS,CAAC,GAAG,CAAC,WAAW,CAAC,EAAE,CAAC;gBAC/B,EAAE,CAAC,WAAW,CAAC,GAAG,YAAY,CAAC,WAAW,CAAC,CAAC;gBAC5C,SAAS;YACX,CAAC;YAED,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,WAAW,EAAE,IAAI,CAAC,iBAAiB,CAAC,CAAC;YACnE,MAAM,cAAc,GAAG,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,YAAY,CAAC,WAAW,CAAC,EAAE,IAAI,CAAC,iBAAiB,CAAC,CAAC;YAE3F,QAAQ,IAAI,EAAE,CAAC;gBACb,KAAK,UAAU,CAAC,CAAC,CAAC;oBAChB,EAAE,CAAC,QAAQ,GAAG,cAAc,CAAC;oBAC7B,MAAM;gBACR,CAAC;gBACD,KAAK,QAAQ,CAAC,CAAC,CAAC;oBACd,EAAE,CAAC,MAAM,GAAG,QAAQ,CAAC,cAAc,CAAC,CAAC;oBACrC,EAAE,CAAC,qBAAU,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC;oBACtC,MAAM;gBACR,CAAC;gBACD,KAAK,UAAU,CAAC,CAAC,CAAC;oBAChB,EAAE,CAAC,QAAQ,GAAG,cAAc,CAAC;oBAC7B,MAAM;gBACR,CAAC;gBACD,KAAK,OAAO,CAAC,CAAC,CAAC;oBACb,EAAE,CAAC,KAAK,GAAI,IAAI,CAAC,KAAK,CAAC,cAAc,CAAc,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE;wBAC3D,MAAM,CAAC,EAAE,EAAE,UAAU,EAAE,QAAQ,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;wBACjD,OAAO,EAAE,EAAE,EAAE,UAAU,EAAE,QAAQ,EAAE,IAAA,eAAG,EAAC,QAAQ,CAAC,EAAE,CAAC;oBACrD,CAAC,CAAC,CAAC;oBACH,MAAM;gBACR,CAAC;gBACD,OAAO,CAAC,CAAC,CAAC;oBACR,EAAE,CAAC,WAAW,CAAC,GAAG,YAAY,CAAC,WAAW,CAAC,CAAC;oBAC5C,MAAM;gBACR,CAAC;YACH,CAAC;QACH,CAAC;QAED,OAAO,EAAE,CAAC;IACZ,CAAC;IAED,yFAAyF;IACzF,MAAM,CAAC,IAAqC;QAC1C,MAAM,EAAE,KAAK,EAAE,GAAG,IAAI,CAAC;QACvB,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,gDAAgD,CAAC,CAAC;YACpE,MAAM,IAAI,iBAAU,CAAC,YAAY,CAAC,wBAAwB,CAAC,CAAC;QAC9D,CAAC;QAED,IAAI,YAAiC,CAAC;QACtC,IAAI,CAAC;YACH,YAAY,GAAG,sBAAG,CAAC,MAAM,CAAC,KAAK,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC;QACnD,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,IAAI,iBAAU,CAAC,YAAY,CAAC,2BAA2B,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;QAChF,CAAC;QAED,IAAI,CAAC;YACH,OAAO,IAAI,CAAC,cAAc,CAAC,YAAY,CAAC,CAAC;QAC3C,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,6CAA6C,EAAE,KAAK,CAAC,CAAC;YACxE,MAAM,IAAA,oBAAQ,EAAC;gBACb,UAAU,EAAE,GAAG;gBACf,OAAO,EAAE,mDAAmD;aAC7D,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,yFAAyF;IACzF,KAAK,CAAC,QAAQ,CAAC,IAGd;QACC,MAAM,EACJ,OAAO,EACP,iBAAiB,GAAG,GAAG,EAAE;YACvB,OAAO,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;QACnC,CAAC,GACF,GAAG,IAAI,CAAC;QAET,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,MAAM,IAAA,oBAAQ,EAAC;gBACb,UAAU,EAAE,oBAAW,CAAC,IAAI,CAAC,YAAY;gBACzC,OAAO,EAAE,8CAA8C;aACxD,CAAC,CAAC;QACL,CAAC;QAED,IAAI,KAAa,CAAC;QAClB,MAAM,SAAS,GAAG,CAAC,MAAM,IAAI,CAAC,iBAAiB,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,iBAAiB,EAAE,CAAC,CAAC;QACpF,IAAI,CAAC;YACH,KAAK,GAAG,sBAAG,CAAC,IAAI,CAAC,IAAI,CAAC,cAAc,CAAC,OAAO,CAAC,EAAE,IAAI,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,CAAC,CAAC;QAChF,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,IAAA,oBAAQ,EAAC;gBACb,UAAU,EAAE,oBAAW,CAAC,IAAI,CAAC,YAAY;gBACzC,OAAO,EAAE,0BAA0B,KAAK,EAAE;aAC3C,CAAC,CAAC;QACL,CAAC;QAED,OAAO,KAAK,CAAC;IACf,CAAC;CACF,CAAA;AArKY,0CAAe;0BAAf,eAAe;IAD3B,IAAA,iBAAU,EAAC,EAAE,KAAK,EAAE,mBAAY,CAAC,SAAS,EAAE,CAAC;IAKzC,WAAA,IAAA,aAAM,EAAC,yBAAgB,CAAC,kBAAkB,CAAC,CAAA;IAE3C,WAAA,IAAA,aAAM,EAAC,yCAAoB,CAAC,YAAY,CAAC,CAAA;IACzC,WAAA,IAAA,aAAM,EAAC,yCAAoB,CAAC,gBAAgB,CAAC,CAAA;IAC7C,WAAA,IAAA,aAAM,EAAC,yBAAgB,CAAC,oBAAoB,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAA;;GARzD,eAAe,CAqK3B"}

package/dist/components/authenticate/services/jwt.strategy.d.ts

@@ -0,0 +1,10 @@
+import { AuthenticationStrategy } from '@loopback/authentication';
+import { Request } from '@loopback/rest';
+import { JWTTokenService } from './jwt-token.service';
+export declare class JWTAuthenticationStrategy implements AuthenticationStrategy {
+    private service;
+    name: string;
+    constructor(service: JWTTokenService);
+    authenticate(request: Request): Promise<import("../common").IJWTTokenPayload>;
+}
+//# sourceMappingURL=jwt.strategy.d.ts.map

package/dist/components/authenticate/services/jwt.strategy.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"jwt.strategy.d.ts","sourceRoot":"","sources":["../../../../src/components/authenticate/services/jwt.strategy.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,sBAAsB,EAAE,MAAM,0BAA0B,CAAC;AAElE,OAAO,EAAE,OAAO,EAAE,MAAM,gBAAgB,CAAC;AACzC,OAAO,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AAGtD,qBAAa,yBAA0B,YAAW,sBAAsB;IAGtB,OAAO,CAAC,OAAO;IAF/D,IAAI,SAA+B;gBAEqB,OAAO,EAAE,eAAe;IAEhF,YAAY,CAAC,OAAO,EAAE,OAAO;CAI9B"}

package/dist/components/authenticate/services/jwt.strategy.js

@@ -0,0 +1,34 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+var __param = (this && this.__param) || function (paramIndex, decorator) {
+    return function (target, key) { decorator(target, key, paramIndex); }
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.JWTAuthenticationStrategy = void 0;
+const core_1 = require("@loopback/core");
+const jwt_token_service_1 = require("./jwt-token.service");
+const common_1 = require("../common");
+let JWTAuthenticationStrategy = class JWTAuthenticationStrategy {
+    constructor(service) {
+        this.service = service;
+        this.name = common_1.Authentication.STRATEGY_JWT;
+    }
+    authenticate(request) {
+        const token = this.service.extractCredentials(request);
+        return Promise.resolve(this.service.verify(token));
+    }
+};
+exports.JWTAuthenticationStrategy = JWTAuthenticationStrategy;
+exports.JWTAuthenticationStrategy = JWTAuthenticationStrategy = __decorate([
+    __param(0, (0, core_1.inject)('services.JWTTokenService')),
+    __metadata("design:paramtypes", [jwt_token_service_1.JWTTokenService])
+], JWTAuthenticationStrategy);
+//# sourceMappingURL=jwt.strategy.js.map

package/dist/components/authenticate/services/jwt.strategy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"jwt.strategy.js","sourceRoot":"","sources":["../../../../src/components/authenticate/services/jwt.strategy.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;AACA,yCAAwC;AAExC,2DAAsD;AACtD,sCAA2C;AAE3C,IAAa,yBAAyB,GAAtC,MAAa,yBAAyB;IAGpC,YAAgD,OAAgC;QAAxB,YAAO,GAAP,OAAO,CAAiB;QAFhF,SAAI,GAAG,uBAAc,CAAC,YAAY,CAAC;IAEgD,CAAC;IAEpF,YAAY,CAAC,OAAgB;QAC3B,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,kBAAkB,CAAC,OAAO,CAAC,CAAC;QACvD,OAAO,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;IACrD,CAAC;CACF,CAAA;AATY,8DAAyB;oCAAzB,yBAAyB;IAGvB,WAAA,IAAA,aAAM,EAAC,0BAA0B,CAAC,CAAA;qCAAkB,mCAAe;GAHrE,yBAAyB,CASrC"}

package/dist/components/authenticate/services/oauth2.service.d.ts

@@ -0,0 +1,56 @@
+import { BaseApplication } from '../../../base/applications';
+import { AxiosNetworkRequest } from '../../../helpers';
+import { RequestContext } from '@loopback/rest';
+import { Request, Response, Token } from '@node-oauth/oauth2-server';
+import { BaseService } from '../../../base/services';
+import { SignInRequest } from '../common';
+import { OAuth2Handler } from '../oauth2-handlers';
+import { OAuth2ClientRepository } from '../repositories';
+export declare class OAuth2Service extends BaseService {
+    private application;
+    private handler;
+    private oauth2ClientRepository;
+    private aes;
+    protected networkRequest: AxiosNetworkRequest;
+    constructor(application: BaseApplication, handler: OAuth2Handler, oauth2ClientRepository: OAuth2ClientRepository);
+    encryptClientToken(opts: {
+        clientId: string;
+        clientSecret: string;
+    }): string;
+    decryptClientToken(opts: {
+        token: string;
+    }): {
+        clientId: string;
+        clientSecret: string;
+    };
+    getOAuth2RequestPath(opts: {
+        clientId: string;
+        clientSecret: string;
+        redirectUrl: string;
+    }): Promise<{
+        requestPath: string;
+    }>;
+    generateToken(opts: {
+        request: Request;
+        response: Response;
+    }): Promise<Token>;
+    authorize(opts: {
+        request: Request;
+        response: Response;
+    }): Promise<import("@node-oauth/oauth2-server").AuthorizationCode>;
+    doOAuth2(opts: {
+        context: Pick<RequestContext, 'request' | 'response'>;
+        authServiceKey: string;
+        signInRequest: SignInRequest;
+        redirectUrl?: string;
+    }): Promise<{
+        redirectUrl: string;
+        oauth2TokenRs: Token;
+    }>;
+    doClientCallback(opts: {
+        clientToken: string;
+        oauth2Token: Token;
+        useImplicitGrant: boolean;
+    }): Promise<void>;
+}
+//# sourceMappingURL=oauth2.service.d.ts.map

package/dist/components/authenticate/services/oauth2.service.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"oauth2.service.d.ts","sourceRoot":"","sources":["../../../../src/components/authenticate/services/oauth2.service.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AAEtD,OAAO,EAA+B,mBAAmB,EAAE,MAAM,WAAW,CAAC;AAG7E,OAAO,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAC;AAChD,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,2BAA2B,CAAC;AAErE,OAAO,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAC;AAC9C,OAAO,EAAkC,aAAa,EAAE,MAAM,WAAW,CAAC;AAC1E,OAAO,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AACnD,OAAO,EAAE,sBAAsB,EAAE,MAAM,iBAAiB,CAAC;AAEzD,qBAAa,aAAc,SAAQ,WAAW;IAM1C,OAAO,CAAC,WAAW;IACsB,OAAO,CAAC,OAAO;IAExD,OAAO,CAAC,sBAAsB;IARhC,OAAO,CAAC,GAAG,CAAoC;IAC/C,SAAS,CAAC,cAAc,EAAE,mBAAmB,CAAC;gBAIpC,WAAW,EAAE,eAAe,EACa,OAAO,EAAE,aAAa,EAE/D,sBAAsB,EAAE,sBAAsB;IAWxD,kBAAkB,CAAC,IAAI,EAAE;QAAE,QAAQ,EAAE,MAAM,CAAC;QAAC,YAAY,EAAE,MAAM,CAAA;KAAE;IASnE,kBAAkB,CAAC,IAAI,EAAE;QAAE,KAAK,EAAE,MAAM,CAAA;KAAE;;;;IAmB1C,oBAAoB,CAAC,IAAI,EAAE;QACzB,QAAQ,EAAE,MAAM,CAAC;QACjB,YAAY,EAAE,MAAM,CAAC;QACrB,WAAW,EAAE,MAAM,CAAC;KACrB,GAAG,OAAO,CAAC;QAAE,WAAW,EAAE,MAAM,CAAA;KAAE,CAAC;IAoDpC,aAAa,CAAC,IAAI,EAAE;QAAE,OAAO,EAAE,OAAO,CAAC;QAAC,QAAQ,EAAE,QAAQ,CAAA;KAAE;IAc5D,SAAS,CAAC,IAAI,EAAE;QAAE,OAAO,EAAE,OAAO,CAAC;QAAC,QAAQ,EAAE,QAAQ,CAAA;KAAE;IAclD,QAAQ,CAAC,IAAI,EAAE;QACnB,OAAO,EAAE,IAAI,CAAC,cAAc,EAAE,SAAS,GAAG,UAAU,CAAC,CAAC;QACtD,cAAc,EAAE,MAAM,CAAC;QACvB,aAAa,EAAE,aAAa,CAAC;QAC7B,WAAW,CAAC,EAAE,MAAM,CAAC;KACtB;;;;IA0DK,gBAAgB,CAAC,IAAI,EAAE;QAC3B,WAAW,EAAE,MAAM,CAAC;QACpB,WAAW,EAAE,KAAK,CAAC;QACnB,gBAAgB,EAAE,OAAO,CAAC;KAC3B;CAyDF"}