@mondart/nestjs-common-module-iam 3.2.12 → 3.2.14

package/README.md

@@ -62,6 +62,62 @@ attached to the request (`agentId`/`isAgent` -> `AGENT`, `userId`/`user` ->
 `USER`, `guestId`/`guest.id` -> `GUEST`) and rejects the request with
 `ForbiddenException` if that type isn't in the route's allowed list.
 
+## Agent permissions
+
+```ts
+@AllowIam(IamUserTypeEnum.AGENT)
+@RequirePermission({ key: 'order:orders:read', description: 'List orders' })
+@Get()
+findAll() { ... }
+```
+
+An agent needs every listed key in its `permissions` claim (client roles of
+the back-office `permissions` client, assigned through IAM groups). An agent
+in a group whose path ends with `/super-admin` passes every check. Users and
+guests are rejected on these routes.
+
+```ts
+IamContextModule.forRoot({
+  permissions: { service: 'order', kafkaClient: IAM_KAFKA_CLIENT },
+});
+```
+
+- `service`: key prefix of this service. On boot every declared key is sent to
+  IAM as `iam.permission.sync`, so IAM can create the roles.
+- `kafkaClient`: injection token of the `ClientKafka` that sends the sync event.
+
+## Verifying tokens in the service
+
+The gateway introspects the token and forwards its claims as the
+`injectedpayload` header. Anyone who can reach the service directly can forge
+that header, so each service can verify the Bearer token itself:
+
+```ts
+IamContextModule.forRootAsync({
+  inject: [ConfigService],
+  useFactory: (config: ConfigService) => ({
+    tokenVerification: {
+      issuers: config.get<string[]>('keycloak.issuers'), // https://auth.example.com/realms/back-office, ...
+      jwksBaseUrl: config.get('keycloak.internalUrl'), // optional, e.g. http://keycloak:8080
+    },
+  }),
+});
+```
+
+With `tokenVerification` set, the guard runs on every HTTP request, before
+the controller filter:
+
+- The access token's RS256 signature is checked against the realm's JWKS
+  (cached, refetched on key rotation), along with expiry and an allowed issuer.
+- `injectedpayload` is replaced with the verified claims, so `@IamContext()`,
+  `@GetAgent()` and `@GetUser()` only ever see verified data. A forwarded
+  payload whose `sub` differs from the token is logged.
+- A missing token removes `injectedpayload`: the caller is anonymous.
+- An invalid token, a foreign issuer, or anything other than an access token
+  (`typ: Bearer`) gets 401. That includes offline tokens; exchange them for an
+  access token first. `@PublicIam()` routes treat such callers as anonymous
+  instead.
+
 ## Entity access rules
 
 Access rules describe, per user type, which field(s) on the entity must

package/dist/constants/iam-decorator-key.const.d.ts

@@ -1,5 +1,8 @@
 export declare const IAM_PUBLIC_ROUTE = "iam_public_route";
 export declare const IAM_ROUTE_USER_TYPE = "iam_route_user_type";
+export declare const IAM_ROUTE_PERMISSIONS = "iam_route_permissions";
+export declare const IAM_PERMISSION_SYNC_TOPIC = "iam.permission.sync";
+export declare const IAM_SUPER_ADMIN_GROUP_SUFFIX = "/super-admin";
 export declare const IAM_ENTITY_ACCESS_KEY = "iam_entity_access";
 export declare const IAM_ENTITY_SCOPE_KEY = "iam_entity_scope";
 export declare const IAM_REQUEST_USER_TYPE_KEY = "__iam_user_type";

package/dist/constants/iam-decorator-key.const.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"iam-decorator-key.const.d.ts","sourceRoot":"","sources":["../../src/constants/iam-decorator-key.const.ts"],"names":[],"mappings":"AAAA,eAAO,MAAM,gBAAgB,qBAAqB,CAAC;AACnD,eAAO,MAAM,mBAAmB,wBAAwB,CAAC;AAEzD,eAAO,MAAM,qBAAqB,sBAAsB,CAAC;AACzD,eAAO,MAAM,oBAAoB,qBAAqB,CAAC;AAEvD,eAAO,MAAM,yBAAyB,oBAAoB,CAAC;AAC3D,eAAO,MAAM,oCAAoC,+BACnB,CAAC;AAE/B,eAAO,MAAM,yBAAyB,aAAa,CAAC"}
+{"version":3,"file":"iam-decorator-key.const.d.ts","sourceRoot":"","sources":["../../src/constants/iam-decorator-key.const.ts"],"names":[],"mappings":"AAAA,eAAO,MAAM,gBAAgB,qBAAqB,CAAC;AACnD,eAAO,MAAM,mBAAmB,wBAAwB,CAAC;AACzD,eAAO,MAAM,qBAAqB,0BAA0B,CAAC;AAG7D,eAAO,MAAM,yBAAyB,wBAAwB,CAAC;AAG/D,eAAO,MAAM,4BAA4B,iBAAiB,CAAC;AAE3D,eAAO,MAAM,qBAAqB,sBAAsB,CAAC;AACzD,eAAO,MAAM,oBAAoB,qBAAqB,CAAC;AAEvD,eAAO,MAAM,yBAAyB,oBAAoB,CAAC;AAC3D,eAAO,MAAM,oCAAoC,+BACnB,CAAC;AAE/B,eAAO,MAAM,yBAAyB,aAAa,CAAC"}

package/dist/constants/iam-decorator-key.const.js

@@ -1,8 +1,11 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.IAM_QUERY_SCOPE_WHERE_KEY = exports.IAM_REQUEST_ENTITY_SCOPE_OPTIONS_KEY = exports.IAM_REQUEST_USER_TYPE_KEY = exports.IAM_ENTITY_SCOPE_KEY = exports.IAM_ENTITY_ACCESS_KEY = exports.IAM_ROUTE_USER_TYPE = exports.IAM_PUBLIC_ROUTE = void 0;
+exports.IAM_QUERY_SCOPE_WHERE_KEY = exports.IAM_REQUEST_ENTITY_SCOPE_OPTIONS_KEY = exports.IAM_REQUEST_USER_TYPE_KEY = exports.IAM_ENTITY_SCOPE_KEY = exports.IAM_ENTITY_ACCESS_KEY = exports.IAM_SUPER_ADMIN_GROUP_SUFFIX = exports.IAM_PERMISSION_SYNC_TOPIC = exports.IAM_ROUTE_PERMISSIONS = exports.IAM_ROUTE_USER_TYPE = exports.IAM_PUBLIC_ROUTE = void 0;
 exports.IAM_PUBLIC_ROUTE = 'iam_public_route';
 exports.IAM_ROUTE_USER_TYPE = 'iam_route_user_type';
+exports.IAM_ROUTE_PERMISSIONS = 'iam_route_permissions';
+exports.IAM_PERMISSION_SYNC_TOPIC = 'iam.permission.sync';
+exports.IAM_SUPER_ADMIN_GROUP_SUFFIX = '/super-admin';
 exports.IAM_ENTITY_ACCESS_KEY = 'iam_entity_access';
 exports.IAM_ENTITY_SCOPE_KEY = 'iam_entity_scope';
 exports.IAM_REQUEST_USER_TYPE_KEY = '__iam_user_type';

package/dist/constants/iam-decorator-key.const.js.map

@@ -1 +1 @@
-{"version":3,"file":"iam-decorator-key.const.js","sourceRoot":"","sources":["../../src/constants/iam-decorator-key.const.ts"],"names":[],"mappings":";;;AAAa,QAAA,gBAAgB,GAAG,kBAAkB,CAAC;AACtC,QAAA,mBAAmB,GAAG,qBAAqB,CAAC;AAE5C,QAAA,qBAAqB,GAAG,mBAAmB,CAAC;AAC5C,QAAA,oBAAoB,GAAG,kBAAkB,CAAC;AAE1C,QAAA,yBAAyB,GAAG,iBAAiB,CAAC;AAC9C,QAAA,oCAAoC,GAC/C,4BAA4B,CAAC;AAElB,QAAA,yBAAyB,GAAG,UAAU,CAAC"}
+{"version":3,"file":"iam-decorator-key.const.js","sourceRoot":"","sources":["../../src/constants/iam-decorator-key.const.ts"],"names":[],"mappings":";;;AAAa,QAAA,gBAAgB,GAAG,kBAAkB,CAAC;AACtC,QAAA,mBAAmB,GAAG,qBAAqB,CAAC;AAC5C,QAAA,qBAAqB,GAAG,uBAAuB,CAAC;AAGhD,QAAA,yBAAyB,GAAG,qBAAqB,CAAC;AAGlD,QAAA,4BAA4B,GAAG,cAAc,CAAC;AAE9C,QAAA,qBAAqB,GAAG,mBAAmB,CAAC;AAC5C,QAAA,oBAAoB,GAAG,kBAAkB,CAAC;AAE1C,QAAA,yBAAyB,GAAG,iBAAiB,CAAC;AAC9C,QAAA,oCAAoC,GAC/C,4BAA4B,CAAC;AAElB,QAAA,yBAAyB,GAAG,UAAU,CAAC"}

package/dist/decorators/get-agent.decorator.d.ts

@@ -0,0 +1,2 @@
+export declare const GetAgent: (...dataOrPipes: unknown[]) => ParameterDecorator;
+//# sourceMappingURL=get-agent.decorator.d.ts.map

package/dist/decorators/get-agent.decorator.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"get-agent.decorator.d.ts","sourceRoot":"","sources":["../../src/decorators/get-agent.decorator.ts"],"names":[],"mappings":"AASA,eAAO,MAAM,QAAQ,mDAgCpB,CAAC"}

package/dist/decorators/get-agent.decorator.js

@@ -0,0 +1,27 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.GetAgent = void 0;
+const common_1 = require("@nestjs/common");
+exports.GetAgent = (0, common_1.createParamDecorator)((data, ctx) => {
+    const request = ctx.switchToHttp().getRequest();
+    const injectedPayload = request?.headers?.['injectedpayload'];
+    if (injectedPayload) {
+        const data = JSON.parse(injectedPayload);
+        const token = request?.headers?.['authorization'];
+        if (data) {
+            if (data?.is_agent)
+                request.agent = {
+                    agentId: data?.sub,
+                    isAgent: data?.is_agent,
+                    storeIds: data?.store_ids,
+                    groupsMembership: data?.groups_membership,
+                    permissions: data?.permissions,
+                    tokenType: data?.typ,
+                    token,
+                };
+        }
+        delete request?.headers?.['authorization'];
+    }
+    return request?.agent ? request?.agent : null;
+});
+//# sourceMappingURL=get-agent.decorator.js.map

package/dist/decorators/get-agent.decorator.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"get-agent.decorator.js","sourceRoot":"","sources":["../../src/decorators/get-agent.decorator.ts"],"names":[],"mappings":";;;AAAA,2CAAwE;AAS3D,QAAA,QAAQ,GAAG,IAAA,6BAAoB,EAC1C,CAAC,IAAa,EAAE,GAAqB,EAAE,EAAE;IACvC,MAAM,OAAO,GAAG,GAAG,CAAC,YAAY,EAAE,CAAC,UAAU,EAAE,CAAC;IAEhD,MAAM,eAAe,GAAG,OAAO,EAAE,OAAO,EAAE,CAAC,iBAAiB,CAAC,CAAC;IAC9D,IAAI,eAAe,EAAE,CAAC;QACpB,MAAM,IAAI,GAON,IAAI,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC;QAEhC,MAAM,KAAK,GAAG,OAAO,EAAE,OAAO,EAAE,CAAC,eAAe,CAAC,CAAC;QAClD,IAAI,IAAI,EAAE,CAAC;YACT,IAAI,IAAI,EAAE,QAAQ;gBAChB,OAAO,CAAC,KAAK,GAAG;oBACd,OAAO,EAAE,IAAI,EAAE,GAAG;oBAClB,OAAO,EAAE,IAAI,EAAE,QAAQ;oBACvB,QAAQ,EAAE,IAAI,EAAE,SAAS;oBACzB,gBAAgB,EAAE,IAAI,EAAE,iBAAiB;oBACzC,WAAW,EAAE,IAAI,EAAE,WAAW;oBAC9B,SAAS,EAAE,IAAI,EAAE,GAAG;oBACpB,KAAK;iBACN,CAAC;QACN,CAAC;QACD,OAAO,OAAO,EAAE,OAAO,EAAE,CAAC,eAAe,CAAC,CAAC;IAC7C,CAAC;IACD,OAAO,OAAO,EAAE,KAAK,CAAC,CAAC,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC;AAChD,CAAC,CACF,CAAC"}

package/dist/decorators/get-user.decorator.d.ts

@@ -0,0 +1,2 @@
+export declare const GetUser: (...dataOrPipes: unknown[]) => ParameterDecorator;
+//# sourceMappingURL=get-user.decorator.d.ts.map

package/dist/decorators/get-user.decorator.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"get-user.decorator.d.ts","sourceRoot":"","sources":["../../src/decorators/get-user.decorator.ts"],"names":[],"mappings":"AASA,eAAO,MAAM,OAAO,mDA0BnB,CAAC"}

package/dist/decorators/get-user.decorator.js

@@ -0,0 +1,24 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.GetUser = void 0;
+const common_1 = require("@nestjs/common");
+exports.GetUser = (0, common_1.createParamDecorator)((data, ctx) => {
+    const request = ctx.switchToHttp().getRequest();
+    const injectedPayload = request?.headers?.['injectedpayload'];
+    if (injectedPayload) {
+        const data = JSON.parse(injectedPayload);
+        const token = request?.headers?.['authorization'];
+        if (data) {
+            if (!data?.is_agent && (data?.contact_id || data?.store_id))
+                request.user = {
+                    contactId: data?.contact_id,
+                    storeId: data?.store_id,
+                    isAgent: data?.is_agent ?? false,
+                    token,
+                };
+        }
+        delete request?.headers?.['authorization'];
+    }
+    return request?.user ? request?.user : null;
+});
+//# sourceMappingURL=get-user.decorator.js.map

package/dist/decorators/get-user.decorator.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"get-user.decorator.js","sourceRoot":"","sources":["../../src/decorators/get-user.decorator.ts"],"names":[],"mappings":";;;AAAA,2CAAwE;AAS3D,QAAA,OAAO,GAAG,IAAA,6BAAoB,EACzC,CAAC,IAAa,EAAE,GAAqB,EAAE,EAAE;IACvC,MAAM,OAAO,GAAG,GAAG,CAAC,YAAY,EAAE,CAAC,UAAU,EAAE,CAAC;IAEhD,MAAM,eAAe,GAAG,OAAO,EAAE,OAAO,EAAE,CAAC,iBAAiB,CAAC,CAAC;IAC9D,IAAI,eAAe,EAAE,CAAC;QACpB,MAAM,IAAI,GAIN,IAAI,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC;QAEhC,MAAM,KAAK,GAAG,OAAO,EAAE,OAAO,EAAE,CAAC,eAAe,CAAC,CAAC;QAClD,IAAI,IAAI,EAAE,CAAC;YACT,IAAI,CAAC,IAAI,EAAE,QAAQ,IAAI,CAAC,IAAI,EAAE,UAAU,IAAI,IAAI,EAAE,QAAQ,CAAC;gBACzD,OAAO,CAAC,IAAI,GAAG;oBACb,SAAS,EAAE,IAAI,EAAE,UAAU;oBAC3B,OAAO,EAAE,IAAI,EAAE,QAAQ;oBACvB,OAAO,EAAE,IAAI,EAAE,QAAQ,IAAI,KAAK;oBAChC,KAAK;iBACN,CAAC;QACN,CAAC;QACD,OAAO,OAAO,EAAE,OAAO,EAAE,CAAC,eAAe,CAAC,CAAC;IAC7C,CAAC;IACD,OAAO,OAAO,EAAE,IAAI,CAAC,CAAC,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;AAC9C,CAAC,CACF,CAAC"}

package/dist/decorators/iam-context.decorator.d.ts

@@ -0,0 +1,4 @@
+import { IamContextDto } from '../dto/iam-context.dto';
+export declare const IamContext: (...dataOrPipes: unknown[]) => ParameterDecorator;
+export declare const getIamContext: (request: any) => IamContextDto;
+//# sourceMappingURL=iam-context.decorator.d.ts.map

package/dist/decorators/iam-context.decorator.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"iam-context.decorator.d.ts","sourceRoot":"","sources":["../../src/decorators/iam-context.decorator.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,aAAa,EAAE,MAAM,wBAAwB,CAAC;AAKvD,eAAO,MAAM,UAAU,mDAMtB,CAAC;AAUF,eAAO,MAAM,aAAa,GAAI,SAAS,GAAG,KAAG,aAkE5C,CAAC"}

package/dist/decorators/iam-context.decorator.js

@@ -0,0 +1,62 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.getIamContext = exports.IamContext = void 0;
+const common_1 = require("@nestjs/common");
+const crypto_1 = require("crypto");
+const iam_context_dto_1 = require("../dto/iam-context.dto");
+exports.IamContext = (0, common_1.createParamDecorator)((data, ctx) => {
+    const request = ctx.switchToHttp().getRequest();
+    return (0, exports.getIamContext)(request);
+});
+const getIamContext = (request) => {
+    const headers = typeof request?.headers === 'string'
+        ? JSON.parse(request?.headers)
+        : request?.headers;
+    const injectedPayload = headers?.['injectedpayload'];
+    const ip = headers?.['x-forwarded-for'] ||
+        headers?.['host'] ||
+        headers?.address ||
+        request?.socket?.remoteAddress ||
+        null;
+    const requestId = headers?.['request-id'] ?? (0, crypto_1.randomUUID)();
+    const timestamp = new Date(headers?.['timestamp'] || headers?.['time'] || Date.now());
+    let isAgent = false;
+    let user;
+    let agent;
+    if (injectedPayload) {
+        const data = JSON.parse(injectedPayload);
+        const token = headers?.['authorization'];
+        if (data) {
+            if (!data?.is_agent && (data?.contact_id || data?.store_id)) {
+                user = {
+                    userId: data?.sub,
+                    contactId: data?.contact_id,
+                    storeId: data?.store_id,
+                    token,
+                };
+            }
+            else if (data?.is_agent) {
+                isAgent = true;
+                agent = {
+                    agentId: data?.sub,
+                    storeIds: data?.store_ids,
+                    groupsMembership: data?.groups_membership,
+                    permissions: data?.permissions,
+                    tokenType: data?.typ,
+                    token,
+                };
+            }
+        }
+        delete headers?.['authorization'];
+    }
+    return new iam_context_dto_1.IamContextDto({
+        ip,
+        requestId,
+        timestamp,
+        isAgent,
+        user,
+        agent,
+    });
+};
+exports.getIamContext = getIamContext;
+//# sourceMappingURL=iam-context.decorator.js.map

package/dist/decorators/iam-context.decorator.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"iam-context.decorator.js","sourceRoot":"","sources":["../../src/decorators/iam-context.decorator.ts"],"names":[],"mappings":";;;AAAA,2CAAwE;AACxE,mCAAoC;AACpC,4DAAuD;AAK1C,QAAA,UAAU,GAAG,IAAA,6BAAoB,EAC5C,CAAC,IAAa,EAAE,GAAqB,EAAiB,EAAE;IACtD,MAAM,OAAO,GAAG,GAAG,CAAC,YAAY,EAAE,CAAC,UAAU,EAAE,CAAC;IAEhD,OAAO,IAAA,qBAAa,EAAC,OAAO,CAAC,CAAC;AAChC,CAAC,CACF,CAAC;AAUK,MAAM,aAAa,GAAG,CAAC,OAAY,EAAiB,EAAE;IAC3D,MAAM,OAAO,GACX,OAAO,OAAO,EAAE,OAAO,KAAK,QAAQ;QAClC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,OAAO,CAAC;QAC9B,CAAC,CAAC,OAAO,EAAE,OAAO,CAAC;IAEvB,MAAM,eAAe,GAAG,OAAO,EAAE,CAAC,iBAAiB,CAAC,CAAC;IACrD,MAAM,EAAE,GACN,OAAO,EAAE,CAAC,iBAAiB,CAAC;QAC5B,OAAO,EAAE,CAAC,MAAM,CAAC;QACjB,OAAO,EAAE,OAAO;QAChB,OAAO,EAAE,MAAM,EAAE,aAAa;QAC9B,IAAI,CAAC;IAEP,MAAM,SAAS,GAAG,OAAO,EAAE,CAAC,YAAY,CAAC,IAAI,IAAA,mBAAU,GAAE,CAAC;IAC1D,MAAM,SAAS,GAAG,IAAI,IAAI,CACxB,OAAO,EAAE,CAAC,WAAW,CAAC,IAAI,OAAO,EAAE,CAAC,MAAM,CAAC,IAAI,IAAI,CAAC,GAAG,EAAE,CAC1D,CAAC;IACF,IAAI,OAAO,GAAY,KAAK,CAAC;IAC7B,IAAI,IAAsB,CAAC;IAC3B,IAAI,KAAwB,CAAC;IAE7B,IAAI,eAAe,EAAE,CAAC;QACpB,MAAM,IAAI,GASN,IAAI,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC;QAEhC,MAAM,KAAK,GAAG,OAAO,EAAE,CAAC,eAAe,CAAC,CAAC;QACzC,IAAI,IAAI,EAAE,CAAC;YACT,IAAI,CAAC,IAAI,EAAE,QAAQ,IAAI,CAAC,IAAI,EAAE,UAAU,IAAI,IAAI,EAAE,QAAQ,CAAC,EAAE,CAAC;gBAC5D,IAAI,GAAG;oBACL,MAAM,EAAE,IAAI,EAAE,GAAG;oBACjB,SAAS,EAAE,IAAI,EAAE,UAAU;oBAC3B,OAAO,EAAE,IAAI,EAAE,QAAQ;oBACvB,KAAK;iBACN,CAAC;YACJ,CAAC;iBAAM,IAAI,IAAI,EAAE,QAAQ,EAAE,CAAC;gBAC1B,OAAO,GAAG,IAAI,CAAC;gBACf,KAAK,GAAG;oBACN,OAAO,EAAE,IAAI,EAAE,GAAG;oBAClB,QAAQ,EAAE,IAAI,EAAE,SAAS;oBACzB,gBAAgB,EAAE,IAAI,EAAE,iBAAiB;oBACzC,WAAW,EAAE,IAAI,EAAE,WAAW;oBAC9B,SAAS,EAAE,IAAI,EAAE,GAAG;oBACpB,KAAK;iBACN,CAAC;YACJ,CAAC;QACH,CAAC;QACD,OAAO,OAAO,EAAE,CAAC,eAAe,CAAC,CAAC;IACpC,CAAC;IAED,OAAO,IAAI,+BAAa,CAAC;QACvB,EAAE;QACF,SAAS;QACT,SAAS;QACT,OAAO;QACP,IAAI;QACJ,KAAK;KACN,CAAC,CAAC;AACL,CAAC,CAAC;AAlEW,QAAA,aAAa,iBAkExB"}

package/dist/decorators/require-permission.decorator.d.ts

@@ -0,0 +1,6 @@
+export interface IamPermissionDefinition {
+    key: string;
+    description?: string;
+}
+export declare const RequirePermission: (...permissions: (string | IamPermissionDefinition)[]) => import("@nestjs/common").CustomDecorator<string>;
+//# sourceMappingURL=require-permission.decorator.d.ts.map

package/dist/decorators/require-permission.decorator.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"require-permission.decorator.d.ts","sourceRoot":"","sources":["../../src/decorators/require-permission.decorator.ts"],"names":[],"mappings":"AAGA,MAAM,WAAW,uBAAuB;IAEtC,GAAG,EAAE,MAAM,CAAC;IACZ,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAOD,eAAO,MAAM,iBAAiB,GAC5B,GAAG,aAAa,CAAC,MAAM,GAAG,uBAAuB,CAAC,EAAE,qDAOnD,CAAC"}

package/dist/decorators/require-permission.decorator.js

@@ -0,0 +1,8 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.RequirePermission = void 0;
+const common_1 = require("@nestjs/common");
+const iam_decorator_key_const_1 = require("../constants/iam-decorator-key.const");
+const RequirePermission = (...permissions) => (0, common_1.SetMetadata)(iam_decorator_key_const_1.IAM_ROUTE_PERMISSIONS, permissions.map((permission) => typeof permission === 'string' ? { key: permission } : permission));
+exports.RequirePermission = RequirePermission;
+//# sourceMappingURL=require-permission.decorator.js.map

package/dist/decorators/require-permission.decorator.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"require-permission.decorator.js","sourceRoot":"","sources":["../../src/decorators/require-permission.decorator.ts"],"names":[],"mappings":";;;AAAA,2CAA6C;AAC7C,kFAA6E;AAatE,MAAM,iBAAiB,GAAG,CAC/B,GAAG,WAAiD,EACpD,EAAE,CACF,IAAA,oBAAW,EACT,+CAAqB,EACrB,WAAW,CAAC,GAAG,CAAC,CAAC,UAAU,EAAE,EAAE,CAC7B,OAAO,UAAU,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC,UAAU,CAClE,CACF,CAAC;AARS,QAAA,iBAAiB,qBAQ1B"}

package/dist/dto/iam-context.dto.d.ts

@@ -0,0 +1,14 @@
+import { GetAgentInterface } from '../interfaces/get-agent.interface';
+import { GetUserInterface } from '../interfaces/get-user.interface';
+export declare class IamContextDto {
+    timestamp: Date;
+    requestId: string;
+    ip?: string;
+    agentId: string;
+    user?: GetUserInterface;
+    userId: string;
+    agent?: GetAgentInterface;
+    isAgent?: boolean;
+    constructor(init?: Partial<Omit<IamContextDto, 'agentId' | 'userId'>>);
+}
+//# sourceMappingURL=iam-context.dto.d.ts.map

package/dist/dto/iam-context.dto.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"iam-context.dto.d.ts","sourceRoot":"","sources":["../../src/dto/iam-context.dto.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,iBAAiB,EAAE,MAAM,mCAAmC,CAAC;AACtE,OAAO,EAAE,gBAAgB,EAAE,MAAM,kCAAkC,CAAC;AAGpE,qBAAa,aAAa;IAGxB,SAAS,EAAE,IAAI,CAAC;IAIhB,SAAS,EAAE,MAAM,CAAC;IAIlB,EAAE,CAAC,EAAE,MAAM,CAAC;IAIZ,OAAO,EAAE,MAAM,CAAC;IAIhB,IAAI,CAAC,EAAE,gBAAgB,CAAC;IAIxB,MAAM,EAAE,MAAM,CAAC;IAIf,KAAK,CAAC,EAAE,iBAAiB,CAAC;IAG1B,OAAO,CAAC,EAAE,OAAO,CAAC;gBAEN,IAAI,CAAC,EAAE,OAAO,CAAC,IAAI,CAAC,aAAa,EAAE,SAAS,GAAG,QAAQ,CAAC,CAAC;CAWtE"}

package/dist/dto/iam-context.dto.js

@@ -0,0 +1,68 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.IamContextDto = void 0;
+const swagger_1 = require("@nestjs/swagger");
+const class_validator_1 = require("class-validator");
+const crypto_1 = require("crypto");
+class IamContextDto {
+    constructor(init) {
+        this.ip = init?.ip;
+        this.isAgent = init?.isAgent;
+        this.agentId = init?.agent ? init?.agent?.agentId : undefined;
+        this.agent = init?.agent;
+        this.userId = init?.user ? init?.user?.userId : undefined;
+        this.user = init?.user;
+        this.requestId = init?.requestId ?? (0, crypto_1.randomUUID)();
+        this.timestamp = init?.timestamp ?? new Date();
+    }
+}
+exports.IamContextDto = IamContextDto;
+__decorate([
+    (0, swagger_1.ApiResponseProperty)({ type: Date }),
+    (0, class_validator_1.IsDate)(),
+    __metadata("design:type", Date)
+], IamContextDto.prototype, "timestamp", void 0);
+__decorate([
+    (0, swagger_1.ApiResponseProperty)({ type: String }),
+    (0, class_validator_1.IsString)(),
+    __metadata("design:type", String)
+], IamContextDto.prototype, "requestId", void 0);
+__decorate([
+    (0, swagger_1.ApiResponseProperty)({ type: String }),
+    (0, class_validator_1.IsString)(),
+    __metadata("design:type", String)
+], IamContextDto.prototype, "ip", void 0);
+__decorate([
+    (0, swagger_1.ApiResponseProperty)({ type: String }),
+    (0, class_validator_1.IsString)(),
+    __metadata("design:type", String)
+], IamContextDto.prototype, "agentId", void 0);
+__decorate([
+    (0, swagger_1.ApiResponseProperty)({ type: Object }),
+    (0, class_validator_1.IsObject)(),
+    __metadata("design:type", Object)
+], IamContextDto.prototype, "user", void 0);
+__decorate([
+    (0, swagger_1.ApiResponseProperty)({ type: String }),
+    (0, class_validator_1.IsString)(),
+    __metadata("design:type", String)
+], IamContextDto.prototype, "userId", void 0);
+__decorate([
+    (0, swagger_1.ApiResponseProperty)({ type: Object }),
+    (0, class_validator_1.IsObject)(),
+    __metadata("design:type", Object)
+], IamContextDto.prototype, "agent", void 0);
+__decorate([
+    (0, swagger_1.ApiResponseProperty)({ type: Boolean }),
+    __metadata("design:type", Boolean)
+], IamContextDto.prototype, "isAgent", void 0);
+//# sourceMappingURL=iam-context.dto.js.map

package/dist/dto/iam-context.dto.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"iam-context.dto.js","sourceRoot":"","sources":["../../src/dto/iam-context.dto.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,6CAAsD;AACtD,qDAA6D;AAC7D,mCAAoC;AAKpC,MAAa,aAAa;IAgCxB,YAAY,IAAyD;QACnE,IAAI,CAAC,EAAE,GAAG,IAAI,EAAE,EAAE,CAAC;QACnB,IAAI,CAAC,OAAO,GAAG,IAAI,EAAE,OAAO,CAAC;QAC7B,IAAI,CAAC,OAAO,GAAG,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;QAC9D,IAAI,CAAC,KAAK,GAAG,IAAI,EAAE,KAAK,CAAC;QACzB,IAAI,CAAC,MAAM,GAAG,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;QAC1D,IAAI,CAAC,IAAI,GAAG,IAAI,EAAE,IAAI,CAAC;QAEvB,IAAI,CAAC,SAAS,GAAG,IAAI,EAAE,SAAS,IAAI,IAAA,mBAAU,GAAE,CAAC;QACjD,IAAI,CAAC,SAAS,GAAG,IAAI,EAAE,SAAS,IAAI,IAAI,IAAI,EAAE,CAAC;IACjD,CAAC;CACF;AA3CD,sCA2CC;AAxCC;IAFC,IAAA,6BAAmB,EAAC,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;IACnC,IAAA,wBAAM,GAAE;8BACE,IAAI;gDAAC;AAIhB;IAFC,IAAA,6BAAmB,EAAC,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;IACrC,IAAA,0BAAQ,GAAE;;gDACO;AAIlB;IAFC,IAAA,6BAAmB,EAAC,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;IACrC,IAAA,0BAAQ,GAAE;;yCACC;AAIZ;IAFC,IAAA,6BAAmB,EAAC,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;IACrC,IAAA,0BAAQ,GAAE;;8CACK;AAIhB;IAFC,IAAA,6BAAmB,EAAC,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;IACrC,IAAA,0BAAQ,GAAE;;2CACa;AAIxB;IAFC,IAAA,6BAAmB,EAAC,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;IACrC,IAAA,0BAAQ,GAAE;;6CACI;AAIf;IAFC,IAAA,6BAAmB,EAAC,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;IACrC,IAAA,0BAAQ,GAAE;;4CACe;AAG1B;IADC,IAAA,6BAAmB,EAAC,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;;8CACrB"}

package/dist/guards/iam-context.guard.d.ts

@@ -1,12 +1,16 @@
 import { CanActivate, ExecutionContext } from '@nestjs/common';
 import { Reflector } from '@nestjs/core';
+import { IamPermissionService } from '../services/iam-permission.service';
+import { IamTokenVerifierService } from '../services/iam-token-verifier.service';
 import { IamEntityAccessService } from '../services/iam-entity-access.service';
 import { IamContextModuleOptions } from '../interfaces/iam-context-options.interface';
 export declare class IamContextGuard implements CanActivate {
     private readonly reflector;
     private readonly iamEntityAccessService;
+    private readonly iamPermissionService;
+    private readonly iamTokenVerifierService;
     private readonly moduleOptions;
-    constructor(reflector: Reflector, iamEntityAccessService: IamEntityAccessService, moduleOptions: IamContextModuleOptions);
+    constructor(reflector: Reflector, iamEntityAccessService: IamEntityAccessService, iamPermissionService: IamPermissionService, iamTokenVerifierService: IamTokenVerifierService, moduleOptions: IamContextModuleOptions);
     canActivate(context: ExecutionContext): Promise<boolean>;
     private shouldIgnoreController;
     private matchController;

package/dist/guards/iam-context.guard.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"iam-context.guard.d.ts","sourceRoot":"","sources":["../../src/guards/iam-context.guard.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,WAAW,EACX,gBAAgB,EAKjB,MAAM,gBAAgB,CAAC;AACxB,OAAO,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AAWzC,OAAO,EAAE,sBAAsB,EAAE,MAAM,uCAAuC,CAAC;AAC/E,OAAO,EAEL,uBAAuB,EAGxB,MAAM,6CAA6C,CAAC;AAerD,qBACa,eAAgB,YAAW,WAAW;IAE/C,OAAO,CAAC,QAAQ,CAAC,SAAS;IAC1B,OAAO,CAAC,QAAQ,CAAC,sBAAsB;IAGvC,OAAO,CAAC,QAAQ,CAAC,aAAa;gBAJb,SAAS,EAAE,SAAS,EACpB,sBAAsB,EAAE,sBAAsB,EAG9C,aAAa,EAAE,uBAAuB;IAUnD,WAAW,CAAC,OAAO,EAAE,gBAAgB,GAAG,OAAO,CAAC,OAAO,CAAC;IA2F9D,OAAO,CAAC,sBAAsB;IAe9B,OAAO,CAAC,eAAe;IAavB,OAAO,CAAC,0BAA0B;IAkBlC,OAAO,CAAC,mBAAmB;IAoB3B,OAAO,CAAC,gBAAgB;IAQxB,OAAO,CAAC,WAAW;CAkBpB"}
+{"version":3,"file":"iam-context.guard.d.ts","sourceRoot":"","sources":["../../src/guards/iam-context.guard.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,WAAW,EACX,gBAAgB,EAKjB,MAAM,gBAAgB,CAAC;AACxB,OAAO,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AAYzC,OAAO,EAAE,oBAAoB,EAAE,MAAM,oCAAoC,CAAC;AAC1E,OAAO,EAAE,uBAAuB,EAAE,MAAM,wCAAwC,CAAC;AAEjF,OAAO,EAAE,sBAAsB,EAAE,MAAM,uCAAuC,CAAC;AAC/E,OAAO,EAEL,uBAAuB,EAGxB,MAAM,6CAA6C,CAAC;AAerD,qBACa,eAAgB,YAAW,WAAW;IAE/C,OAAO,CAAC,QAAQ,CAAC,SAAS;IAC1B,OAAO,CAAC,QAAQ,CAAC,sBAAsB;IACvC,OAAO,CAAC,QAAQ,CAAC,oBAAoB;IACrC,OAAO,CAAC,QAAQ,CAAC,uBAAuB;IAGxC,OAAO,CAAC,QAAQ,CAAC,aAAa;gBANb,SAAS,EAAE,SAAS,EACpB,sBAAsB,EAAE,sBAAsB,EAC9C,oBAAoB,EAAE,oBAAoB,EAC1C,uBAAuB,EAAE,uBAAuB,EAGhD,aAAa,EAAE,uBAAuB;IAYnD,WAAW,CAAC,OAAO,EAAE,gBAAgB,GAAG,OAAO,CAAC,OAAO,CAAC;IAqH9D,OAAO,CAAC,sBAAsB;IAe9B,OAAO,CAAC,eAAe;IAavB,OAAO,CAAC,0BAA0B;IAkBlC,OAAO,CAAC,mBAAmB;IAoB3B,OAAO,CAAC,gBAAgB;IAQxB,OAAO,CAAC,WAAW;CAkBpB"}

package/dist/guards/iam-context.guard.js

@@ -15,27 +15,42 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.IamContextGuard = void 0;
 const common_1 = require("@nestjs/common");
 const core_1 = require("@nestjs/core");
-const nestjs_common_module_core_1 = require("@mondart/nestjs-common-module-core");
+const iam_context_decorator_1 = require("../decorators/iam-context.decorator");
 const iam_decorator_key_const_1 = require("../constants/iam-decorator-key.const");
+const iam_permission_service_1 = require("../services/iam-permission.service");
+const iam_token_verifier_service_1 = require("../services/iam-token-verifier.service");
+const iam_user_type_enum_1 = require("../enums/iam-user-type.enum");
 const iam_entity_access_service_1 = require("../services/iam-entity-access.service");
 const iam_context_options_interface_1 = require("../interfaces/iam-context-options.interface");
 let IamContextGuard = class IamContextGuard {
-    constructor(reflector, iamEntityAccessService, moduleOptions) {
+    constructor(reflector, iamEntityAccessService, iamPermissionService, iamTokenVerifierService, moduleOptions) {
         this.reflector = reflector;
         this.iamEntityAccessService = iamEntityAccessService;
+        this.iamPermissionService = iamPermissionService;
+        this.iamTokenVerifierService = iamTokenVerifierService;
         this.moduleOptions = moduleOptions;
     }
     async canActivate(context) {
         const request = context.switchToHttp().getRequest();
+        const isPublicRoute = this.reflector.getAllAndOverride(iam_decorator_key_const_1.IAM_PUBLIC_ROUTE, [context.getHandler(), context.getClass()]);
+        if (context.getType() === 'http' && this.iamTokenVerifierService.enabled) {
+            try {
+                await this.iamTokenVerifierService.verifyRequest(request);
+            }
+            catch (error) {
+                if (!isPublicRoute)
+                    throw error;
+                delete request.headers?.['injectedpayload'];
+            }
+        }
         const controller = context.getClass();
         if (this.shouldIgnoreController(controller)) {
             return true;
         }
-        const isPublicRoute = this.reflector.getAllAndOverride(iam_decorator_key_const_1.IAM_PUBLIC_ROUTE, [context.getHandler(), context.getClass()]);
         if (isPublicRoute) {
             return true;
         }
-        const iamContext = (0, nestjs_common_module_core_1.getIamContext)(request);
+        const iamContext = (0, iam_context_decorator_1.getIamContext)(request);
         const decoratorAllowedUserTypes = this.reflector.getAllAndOverride(iam_decorator_key_const_1.IAM_ROUTE_USER_TYPE, [context.getHandler(), context.getClass()]);
         const allowedUserTypes = decoratorAllowedUserTypes ??
             this.moduleOptions.defaultAllowedUserTypes ??
@@ -50,6 +65,12 @@ let IamContextGuard = class IamContextGuard {
         if (!allowedUserTypes.includes(currentUserType)) {
             throw new common_1.ForbiddenException();
         }
+        const requiredPermissions = this.reflector.getAllAndMerge(iam_decorator_key_const_1.IAM_ROUTE_PERMISSIONS, [context.getHandler(), context.getClass()]);
+        if (requiredPermissions.length &&
+            (currentUserType !== iam_user_type_enum_1.IamUserTypeEnum.AGENT ||
+                !this.iamPermissionService.hasPermissions(iamContext.agent, requiredPermissions.map(({ key }) => key)))) {
+            throw new common_1.ForbiddenException('Missing permission');
+        }
         const rawScopeOptions = this.reflector.getAllAndOverride(iam_decorator_key_const_1.IAM_ENTITY_SCOPE_KEY, [context.getHandler(), context.getClass()]);
         if (rawScopeOptions) {
             request[iam_decorator_key_const_1.IAM_REQUEST_ENTITY_SCOPE_OPTIONS_KEY] =
@@ -124,8 +145,10 @@ let IamContextGuard = class IamContextGuard {
 exports.IamContextGuard = IamContextGuard;
 exports.IamContextGuard = IamContextGuard = __decorate([
     (0, common_1.Injectable)(),
-    __param(2, (0, common_1.Inject)(iam_context_options_interface_1.IAM_CONTEXT_MODULE_OPTIONS)),
+    __param(4, (0, common_1.Inject)(iam_context_options_interface_1.IAM_CONTEXT_MODULE_OPTIONS)),
     __metadata("design:paramtypes", [core_1.Reflector,
-        iam_entity_access_service_1.IamEntityAccessService, Object])
+        iam_entity_access_service_1.IamEntityAccessService,
+        iam_permission_service_1.IamPermissionService,
+        iam_token_verifier_service_1.IamTokenVerifierService, Object])
 ], IamContextGuard);
 //# sourceMappingURL=iam-context.guard.js.map

package/dist/guards/iam-context.guard.js.map

@@ -1 +1 @@
-{"version":3,"file":"iam-context.guard.js","sourceRoot":"","sources":["../../src/guards/iam-context.guard.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;AAAA,2CAOwB;AACxB,uCAAyC;AACzC,kFAAmE;AACnE,kFAO8C;AAE9C,qFAA+E;AAC/E,+FAKqD;AAgB9C,IAAM,eAAe,GAArB,MAAM,eAAe;IAC1B,YACmB,SAAoB,EACpB,sBAA8C,EAG9C,aAAsC;QAJtC,cAAS,GAAT,SAAS,CAAW;QACpB,2BAAsB,GAAtB,sBAAsB,CAAwB;QAG9C,kBAAa,GAAb,aAAa,CAAyB;IACtD,CAAC;IASJ,KAAK,CAAC,WAAW,CAAC,OAAyB;QACzC,MAAM,OAAO,GAAG,OAAO,CAAC,YAAY,EAAE,CAAC,UAAU,EAAE,CAAC;QAEpD,MAAM,UAAU,GAAG,OAAO,CAAC,QAAQ,EAAE,CAAC;QAEtC,IAAI,IAAI,CAAC,sBAAsB,CAAC,UAAU,CAAC,EAAE,CAAC;YAC5C,OAAO,IAAI,CAAC;QACd,CAAC;QAED,MAAM,aAAa,GAAG,IAAI,CAAC,SAAS,CAAC,iBAAiB,CACpD,0CAAgB,EAChB,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,OAAO,CAAC,QAAQ,EAAE,CAAC,CAC3C,CAAC;QAEF,IAAI,aAAa,EAAE,CAAC;YAClB,OAAO,IAAI,CAAC;QACd,CAAC;QAED,MAAM,UAAU,GAAG,IAAA,yCAAa,EAAC,OAAO,CAAC,CAAC;QAE1C,MAAM,yBAAyB,GAAG,IAAI,CAAC,SAAS,CAAC,iBAAiB,CAEhE,6CAAmB,EAAE,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,OAAO,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC;QAEnE,MAAM,gBAAgB,GACpB,yBAAyB;YACzB,IAAI,CAAC,aAAa,CAAC,uBAAuB;YAC1C,EAAE,CAAC;QAEL,IACE,CAAC,yBAAyB;YAC1B,CAAC,IAAI,CAAC,aAAa,CAAC,8BAA8B;YAClD,CAAC,gBAAgB,CAAC,MAAM,EACxB,CAAC;YACD,MAAM,IAAI,2BAAkB,CAAC,uCAAuC,CAAC,CAAC;QACxE,CAAC;QAED,MAAM,eAAe,GAAG,IAAI,CAAC,sBAAsB,CAAC,eAAe,CACjE,UAAU,EACV,gBAAgB,CACjB,CAAC;QAEF,OAAO,CAAC,mDAAyB,CAAC,GAAG,eAAe,CAAC;QAErD,IAAI,CAAC,gBAAgB,CAAC,QAAQ,CAAC,eAAe,CAAC,EAAE,CAAC;YAChD,MAAM,IAAI,2BAAkB,EAAE,CAAC;QACjC,CAAC;QAED,MAAM,eAAe,GACnB,IAAI,CAAC,SAAS,CAAC,iBAAiB,CAC9B,8CAAoB,EACpB,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,OAAO,CAAC,QAAQ,EAAE,CAAC,CAC3C,CAAC;QAEJ,IAAI,eAAe,EAAE,CAAC;YACpB,OAAO,CAAC,8DAAoC,CAAC;gBAC3C,IAAI,CAAC,mBAAmB,CAAC,eAAe,CAAC,CAAC;QAC9C,CAAC;QAED,MAAM,sBAAsB,GAC1B,IAAI,CAAC,SAAS,CAAC,iBAAiB,CAC9B,+CAAqB,EACrB,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,OAAO,CAAC,QAAQ,EAAE,CAAC,CAC3C,CAAC;QAEJ,IAAI,CAAC,sBAAsB,EAAE,CAAC;YAC5B,OAAO,IAAI,CAAC;QACd,CAAC;QAED,MAAM,mBAAmB,GAAG,IAAI,CAAC,0BAA0B,CACzD,sBAAsB,CACvB,CAAC;QAEF,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,sBAAsB,CAAC,eAAe,CACjE,mBAAmB,EACnB,OAAO,EACP,UAAU,EACV,eAAe,CAChB,CAAC;QAEF,IAAI,CAAC,SAAS,EAAE,CAAC;YACf,MAAM,IAAI,2BAAkB,CAC1B,kCACE,mBAAmB,CAAC,YAAY,IAAI,UACtC,EAAE,CACH,CAAC;QACJ,CAAC;QAED,OAAO,IAAI,CAAC;IACd,CAAC;IAEO,sBAAsB,CAAC,UAAyB;QACtD,MAAM,MAAM,GAAG,IAAI,CAAC,aAAa,CAAC,WAAW,EAAE,MAAM,IAAI,EAAE,CAAC;QAC5D,MAAM,MAAM,GAAG,IAAI,CAAC,aAAa,CAAC,WAAW,EAAE,MAAM,IAAI,EAAE,CAAC;QAE5D,IAAI,IAAI,CAAC,eAAe,CAAC,UAAU,EAAE,MAAM,CAAC,EAAE,CAAC;YAC7C,OAAO,IAAI,CAAC;QACd,CAAC;QAED,IAAI,MAAM,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,eAAe,CAAC,UAAU,EAAE,MAAM,CAAC,EAAE,CAAC;YAC/D,OAAO,IAAI,CAAC;QACd,CAAC;QAED,OAAO,KAAK,CAAC;IACf,CAAC;IAEO,eAAe,CACrB,UAAyB,EACzB,QAAgC;QAEhC,OAAO,QAAQ,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE;YAC/B,IAAI,OAAO,OAAO,KAAK,QAAQ,EAAE,CAAC;gBAChC,OAAO,OAAO,KAAK,UAAU,CAAC,IAAI,CAAC;YACrC,CAAC;YAED,OAAO,OAAO,KAAK,UAAU,CAAC;QAChC,CAAC,CAAC,CAAC;IACL,CAAC;IAEO,0BAA0B,CAChC,gBAAkD;QAElD,MAAM,MAAM,GAAG,IAAI,CAAC,gBAAgB,CAAC,gBAAgB,CAAC,MAAM,CAAC,CAAC;QAE9D,OAAO;YACL,GAAG,gBAAgB;YAEnB,YAAY,EAAE,gBAAgB,CAAC,YAAY,IAAI,MAAM,EAAE,YAAY;YAEnE,MAAM,EAAE,IAAI,CAAC,WAAW,CACtB,IAAI,CAAC,aAAa,CAAC,YAAY,EAAE,aAAa,EAC9C,MAAM,EAAE,MAAM,EACd,gBAAgB,CAAC,MAAM,CACxB;SACF,CAAC;IACJ,CAAC;IAEO,mBAAmB,CACzB,gBAA+C;QAE/C,MAAM,MAAM,GAAG,gBAAgB,CAAC,MAAM;YACpC,CAAC,CAAC,IAAI,CAAC,gBAAgB,CAAC,gBAAgB,CAAC,MAAM,CAAC;YAChD,CAAC,CAAC,SAAS,CAAC;QAEd,OAAO;YACL,GAAG,IAAI,CAAC,aAAa,CAAC,YAAY,EAAE,YAAY;YAChD,GAAG,MAAM,EAAE,KAAK;YAChB,GAAG,gBAAgB;YAEnB,MAAM,EAAE,IAAI,CAAC,WAAW,CACtB,IAAI,CAAC,aAAa,CAAC,YAAY,EAAE,aAAa,EAC9C,MAAM,EAAE,KAAK,EAAE,MAAM,IAAI,MAAM,EAAE,MAAM,EACvC,gBAAgB,CAAC,MAAM,CACxB;SACF,CAAC;IACJ,CAAC;IAEO,gBAAgB,CACtB,MAAuB;QAEvB,OAAO,IAAI,CAAC,aAAa,CAAC,YAAY,EAAE,OAAO,EAAE,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE;YAC/D,OAAO,MAAM,CAAC,MAAM,KAAK,MAAM,CAAC;QAClC,CAAC,CAAyC,CAAC;IAC7C,CAAC;IAEO,WAAW,CACjB,YAAoC,EACpC,YAAoC,EACpC,eAAuC;QAEvC,OAAO;YACL,KAAK,EAAE;gBACL,GAAG,YAAY,EAAE,KAAK;gBACtB,GAAG,YAAY,EAAE,KAAK;gBACtB,GAAG,eAAe,EAAE,KAAK;aAC1B;YAED,IAAI,EAAE,eAAe,EAAE,IAAI,IAAI,YAAY,EAAE,IAAI,IAAI,YAAY,EAAE,IAAI;YAEvE,KAAK,EACH,eAAe,EAAE,KAAK,IAAI,YAAY,EAAE,KAAK,IAAI,YAAY,EAAE,KAAK;SACvE,CAAC;IACJ,CAAC;CACF,CAAA;AAvMY,0CAAe;0BAAf,eAAe;IAD3B,IAAA,mBAAU,GAAE;IAMR,WAAA,IAAA,eAAM,EAAC,0DAA0B,CAAC,CAAA;qCAHP,gBAAS;QACI,kDAAsB;GAHtD,eAAe,CAuM3B"}
+{"version":3,"file":"iam-context.guard.js","sourceRoot":"","sources":["../../src/guards/iam-context.guard.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;AAAA,2CAOwB;AACxB,uCAAyC;AACzC,+EAAoE;AACpE,kFAQ8C;AAE9C,+EAA0E;AAC1E,uFAAiF;AACjF,oEAA8D;AAC9D,qFAA+E;AAC/E,+FAKqD;AAgB9C,IAAM,eAAe,GAArB,MAAM,eAAe;IAC1B,YACmB,SAAoB,EACpB,sBAA8C,EAC9C,oBAA0C,EAC1C,uBAAgD,EAGhD,aAAsC;QANtC,cAAS,GAAT,SAAS,CAAW;QACpB,2BAAsB,GAAtB,sBAAsB,CAAwB;QAC9C,yBAAoB,GAApB,oBAAoB,CAAsB;QAC1C,4BAAuB,GAAvB,uBAAuB,CAAyB;QAGhD,kBAAa,GAAb,aAAa,CAAyB;IACtD,CAAC;IAWJ,KAAK,CAAC,WAAW,CAAC,OAAyB;QACzC,MAAM,OAAO,GAAG,OAAO,CAAC,YAAY,EAAE,CAAC,UAAU,EAAE,CAAC;QAEpD,MAAM,aAAa,GAAG,IAAI,CAAC,SAAS,CAAC,iBAAiB,CACpD,0CAAgB,EAChB,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,OAAO,CAAC,QAAQ,EAAE,CAAC,CAC3C,CAAC;QAIF,IAAI,OAAO,CAAC,OAAO,EAAE,KAAK,MAAM,IAAI,IAAI,CAAC,uBAAuB,CAAC,OAAO,EAAE,CAAC;YACzE,IAAI,CAAC;gBACH,MAAM,IAAI,CAAC,uBAAuB,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC;YAC5D,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,IAAI,CAAC,aAAa;oBAAE,MAAM,KAAK,CAAC;gBAChC,OAAO,OAAO,CAAC,OAAO,EAAE,CAAC,iBAAiB,CAAC,CAAC;YAC9C,CAAC;QACH,CAAC;QAED,MAAM,UAAU,GAAG,OAAO,CAAC,QAAQ,EAAE,CAAC;QAEtC,IAAI,IAAI,CAAC,sBAAsB,CAAC,UAAU,CAAC,EAAE,CAAC;YAC5C,OAAO,IAAI,CAAC;QACd,CAAC;QAED,IAAI,aAAa,EAAE,CAAC;YAClB,OAAO,IAAI,CAAC;QACd,CAAC;QAED,MAAM,UAAU,GAAG,IAAA,qCAAa,EAAC,OAAO,CAAC,CAAC;QAE1C,MAAM,yBAAyB,GAAG,IAAI,CAAC,SAAS,CAAC,iBAAiB,CAEhE,6CAAmB,EAAE,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,OAAO,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC;QAEnE,MAAM,gBAAgB,GACpB,yBAAyB;YACzB,IAAI,CAAC,aAAa,CAAC,uBAAuB;YAC1C,EAAE,CAAC;QAEL,IACE,CAAC,yBAAyB;YAC1B,CAAC,IAAI,CAAC,aAAa,CAAC,8BAA8B;YAClD,CAAC,gBAAgB,CAAC,MAAM,EACxB,CAAC;YACD,MAAM,IAAI,2BAAkB,CAAC,uCAAuC,CAAC,CAAC;QACxE,CAAC;QAED,MAAM,eAAe,GAAG,IAAI,CAAC,sBAAsB,CAAC,eAAe,CACjE,UAAU,EACV,gBAAgB,CACjB,CAAC;QAEF,OAAO,CAAC,mDAAyB,CAAC,GAAG,eAAe,CAAC;QAErD,IAAI,CAAC,gBAAgB,CAAC,QAAQ,CAAC,eAAe,CAAC,EAAE,CAAC;YAChD,MAAM,IAAI,2BAAkB,EAAE,CAAC;QACjC,CAAC;QAED,MAAM,mBAAmB,GAAG,IAAI,CAAC,SAAS,CAAC,cAAc,CAEvD,+CAAqB,EAAE,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,OAAO,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC;QAErE,IACE,mBAAmB,CAAC,MAAM;YAC1B,CAAC,eAAe,KAAK,oCAAe,CAAC,KAAK;gBACxC,CAAC,IAAI,CAAC,oBAAoB,CAAC,cAAc,CACvC,UAAU,CAAC,KAAK,EAChB,mBAAmB,CAAC,GAAG,CAAC,CAAC,EAAE,GAAG,EAAE,EAAE,EAAE,CAAC,GAAG,CAAC,CAC1C,CAAC,EACJ,CAAC;YACD,MAAM,IAAI,2BAAkB,CAAC,oBAAoB,CAAC,CAAC;QACrD,CAAC;QAED,MAAM,eAAe,GACnB,IAAI,CAAC,SAAS,CAAC,iBAAiB,CAC9B,8CAAoB,EACpB,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,OAAO,CAAC,QAAQ,EAAE,CAAC,CAC3C,CAAC;QAEJ,IAAI,eAAe,EAAE,CAAC;YACpB,OAAO,CAAC,8DAAoC,CAAC;gBAC3C,IAAI,CAAC,mBAAmB,CAAC,eAAe,CAAC,CAAC;QAC9C,CAAC;QAED,MAAM,sBAAsB,GAC1B,IAAI,CAAC,SAAS,CAAC,iBAAiB,CAC9B,+CAAqB,EACrB,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,OAAO,CAAC,QAAQ,EAAE,CAAC,CAC3C,CAAC;QAEJ,IAAI,CAAC,sBAAsB,EAAE,CAAC;YAC5B,OAAO,IAAI,CAAC;QACd,CAAC;QAED,MAAM,mBAAmB,GAAG,IAAI,CAAC,0BAA0B,CACzD,sBAAsB,CACvB,CAAC;QAEF,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,sBAAsB,CAAC,eAAe,CACjE,mBAAmB,EACnB,OAAO,EACP,UAAU,EACV,eAAe,CAChB,CAAC;QAEF,IAAI,CAAC,SAAS,EAAE,CAAC;YACf,MAAM,IAAI,2BAAkB,CAC1B,kCACE,mBAAmB,CAAC,YAAY,IAAI,UACtC,EAAE,CACH,CAAC;QACJ,CAAC;QAED,OAAO,IAAI,CAAC;IACd,CAAC;IAEO,sBAAsB,CAAC,UAAyB;QACtD,MAAM,MAAM,GAAG,IAAI,CAAC,aAAa,CAAC,WAAW,EAAE,MAAM,IAAI,EAAE,CAAC;QAC5D,MAAM,MAAM,GAAG,IAAI,CAAC,aAAa,CAAC,WAAW,EAAE,MAAM,IAAI,EAAE,CAAC;QAE5D,IAAI,IAAI,CAAC,eAAe,CAAC,UAAU,EAAE,MAAM,CAAC,EAAE,CAAC;YAC7C,OAAO,IAAI,CAAC;QACd,CAAC;QAED,IAAI,MAAM,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,eAAe,CAAC,UAAU,EAAE,MAAM,CAAC,EAAE,CAAC;YAC/D,OAAO,IAAI,CAAC;QACd,CAAC;QAED,OAAO,KAAK,CAAC;IACf,CAAC;IAEO,eAAe,CACrB,UAAyB,EACzB,QAAgC;QAEhC,OAAO,QAAQ,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE;YAC/B,IAAI,OAAO,OAAO,KAAK,QAAQ,EAAE,CAAC;gBAChC,OAAO,OAAO,KAAK,UAAU,CAAC,IAAI,CAAC;YACrC,CAAC;YAED,OAAO,OAAO,KAAK,UAAU,CAAC;QAChC,CAAC,CAAC,CAAC;IACL,CAAC;IAEO,0BAA0B,CAChC,gBAAkD;QAElD,MAAM,MAAM,GAAG,IAAI,CAAC,gBAAgB,CAAC,gBAAgB,CAAC,MAAM,CAAC,CAAC;QAE9D,OAAO;YACL,GAAG,gBAAgB;YAEnB,YAAY,EAAE,gBAAgB,CAAC,YAAY,IAAI,MAAM,EAAE,YAAY;YAEnE,MAAM,EAAE,IAAI,CAAC,WAAW,CACtB,IAAI,CAAC,aAAa,CAAC,YAAY,EAAE,aAAa,EAC9C,MAAM,EAAE,MAAM,EACd,gBAAgB,CAAC,MAAM,CACxB;SACF,CAAC;IACJ,CAAC;IAEO,mBAAmB,CACzB,gBAA+C;QAE/C,MAAM,MAAM,GAAG,gBAAgB,CAAC,MAAM;YACpC,CAAC,CAAC,IAAI,CAAC,gBAAgB,CAAC,gBAAgB,CAAC,MAAM,CAAC;YAChD,CAAC,CAAC,SAAS,CAAC;QAEd,OAAO;YACL,GAAG,IAAI,CAAC,aAAa,CAAC,YAAY,EAAE,YAAY;YAChD,GAAG,MAAM,EAAE,KAAK;YAChB,GAAG,gBAAgB;YAEnB,MAAM,EAAE,IAAI,CAAC,WAAW,CACtB,IAAI,CAAC,aAAa,CAAC,YAAY,EAAE,aAAa,EAC9C,MAAM,EAAE,KAAK,EAAE,MAAM,IAAI,MAAM,EAAE,MAAM,EACvC,gBAAgB,CAAC,MAAM,CACxB;SACF,CAAC;IACJ,CAAC;IAEO,gBAAgB,CACtB,MAAuB;QAEvB,OAAO,IAAI,CAAC,aAAa,CAAC,YAAY,EAAE,OAAO,EAAE,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE;YAC/D,OAAO,MAAM,CAAC,MAAM,KAAK,MAAM,CAAC;QAClC,CAAC,CAAyC,CAAC;IAC7C,CAAC;IAEO,WAAW,CACjB,YAAoC,EACpC,YAAoC,EACpC,eAAuC;QAEvC,OAAO;YACL,KAAK,EAAE;gBACL,GAAG,YAAY,EAAE,KAAK;gBACtB,GAAG,YAAY,EAAE,KAAK;gBACtB,GAAG,eAAe,EAAE,KAAK;aAC1B;YAED,IAAI,EAAE,eAAe,EAAE,IAAI,IAAI,YAAY,EAAE,IAAI,IAAI,YAAY,EAAE,IAAI;YAEvE,KAAK,EACH,eAAe,EAAE,KAAK,IAAI,YAAY,EAAE,KAAK,IAAI,YAAY,EAAE,KAAK;SACvE,CAAC;IACJ,CAAC;CACF,CAAA;AArOY,0CAAe;0BAAf,eAAe;IAD3B,IAAA,mBAAU,GAAE;IAQR,WAAA,IAAA,eAAM,EAAC,0DAA0B,CAAC,CAAA;qCALP,gBAAS;QACI,kDAAsB;QACxB,6CAAoB;QACjB,oDAAuB;GALxD,eAAe,CAqO3B"}

package/dist/iam-context.module.d.ts

@@ -1,6 +1,8 @@
 import { DynamicModule } from '@nestjs/common';
-import { IamContextModuleOptions } from './interfaces/iam-context-options.interface';
+import { IamContextModuleAsyncOptions, IamContextModuleOptions } from './interfaces/iam-context-options.interface';
 export declare class IamContextModule {
     static forRoot(options?: IamContextModuleOptions): DynamicModule;
+    static forRootAsync(options: IamContextModuleAsyncOptions): DynamicModule;
+    private static create;
 }
 //# sourceMappingURL=iam-context.module.d.ts.map

package/dist/iam-context.module.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"iam-context.module.d.ts","sourceRoot":"","sources":["../src/iam-context.module.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAkB,MAAM,gBAAgB,CAAC;AAO/D,OAAO,EAGL,uBAAuB,EACxB,MAAM,4CAA4C,CAAC;AAMpD,qBAEa,gBAAgB;IAK3B,MAAM,CAAC,OAAO,CAAC,OAAO,GAAE,uBAA4B,GAAG,aAAa;CAmCrE"}
+{"version":3,"file":"iam-context.module.d.ts","sourceRoot":"","sources":["../src/iam-context.module.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAA4B,MAAM,gBAAgB,CAAC;AASzE,OAAO,EAGL,4BAA4B,EAC5B,uBAAuB,EACxB,MAAM,4CAA4C,CAAC;AA8BpD,qBAEa,gBAAgB;IAC3B,MAAM,CAAC,OAAO,CAAC,OAAO,GAAE,uBAA4B,GAAG,aAAa;IAQpE,MAAM,CAAC,YAAY,CAAC,OAAO,EAAE,4BAA4B,GAAG,aAAa;IASzE,OAAO,CAAC,MAAM,CAAC,MAAM;CAetB"}

package/dist/iam-context.module.js

@@ -12,43 +12,54 @@ const common_1 = require("@nestjs/common");
 const core_1 = require("@nestjs/core");
 const iam_context_guard_1 = require("./guards/iam-context.guard");
 const iam_entity_access_service_1 = require("./services/iam-entity-access.service");
+const iam_permission_service_1 = require("./services/iam-permission.service");
+const iam_token_verifier_service_1 = require("./services/iam-token-verifier.service");
 const iam_find_one_query_scope_pipe_1 = require("./pipes/iam-find-one-query-scope.pipe");
 const iam_paginate_query_scope_pipe_1 = require("./pipes/iam-paginate-query-scope.pipe");
 const iam_context_options_interface_1 = require("./interfaces/iam-context-options.interface");
+const services = [
+    iam_entity_access_service_1.IamEntityAccessService,
+    iam_permission_service_1.IamPermissionService,
+    iam_token_verifier_service_1.IamTokenVerifierService,
+    iam_find_one_query_scope_pipe_1.IamFindOneQueryScopePipe,
+    iam_paginate_query_scope_pipe_1.IamPaginateQueryScopePipe,
+];
+const mergeOptions = (options = {}) => ({
+    ...iam_context_options_interface_1.DEFAULT_IAM_CONTEXT_MODULE_OPTIONS,
+    ...options,
+    controllers: {
+        ...iam_context_options_interface_1.DEFAULT_IAM_CONTEXT_MODULE_OPTIONS.controllers,
+        ...options.controllers,
+    },
+    entityAccess: {
+        ...iam_context_options_interface_1.DEFAULT_IAM_CONTEXT_MODULE_OPTIONS.entityAccess,
+        ...options.entityAccess,
+    },
+});
 let IamContextModule = IamContextModule_1 = class IamContextModule {
     static forRoot(options = {}) {
+        return IamContextModule_1.create([], {
+            provide: iam_context_options_interface_1.IAM_CONTEXT_MODULE_OPTIONS,
+            useValue: mergeOptions(options),
+        });
+    }
+    static forRootAsync(options) {
+        return IamContextModule_1.create(options.imports ?? [], {
+            provide: iam_context_options_interface_1.IAM_CONTEXT_MODULE_OPTIONS,
+            inject: options.inject ?? [],
+            useFactory: async (...args) => mergeOptions(await options.useFactory(...args)),
+        });
+    }
+    static create(imports, optionsProvider) {
         return {
             module: IamContextModule_1,
+            imports: [core_1.DiscoveryModule, ...imports],
             providers: [
-                {
-                    provide: iam_context_options_interface_1.IAM_CONTEXT_MODULE_OPTIONS,
-                    useValue: {
-                        ...iam_context_options_interface_1.DEFAULT_IAM_CONTEXT_MODULE_OPTIONS,
-                        ...options,
-                        controllers: {
-                            ...iam_context_options_interface_1.DEFAULT_IAM_CONTEXT_MODULE_OPTIONS.controllers,
-                            ...options.controllers,
-                        },
-                        entityAccess: {
-                            ...iam_context_options_interface_1.DEFAULT_IAM_CONTEXT_MODULE_OPTIONS.entityAccess,
-                            ...options.entityAccess,
-                        },
-                    },
-                },
-                iam_entity_access_service_1.IamEntityAccessService,
-                iam_find_one_query_scope_pipe_1.IamFindOneQueryScopePipe,
-                iam_paginate_query_scope_pipe_1.IamPaginateQueryScopePipe,
-                {
-                    provide: core_1.APP_GUARD,
-                    useClass: iam_context_guard_1.IamContextGuard,
-                },
-            ],
-            exports: [
-                iam_context_options_interface_1.IAM_CONTEXT_MODULE_OPTIONS,
-                iam_entity_access_service_1.IamEntityAccessService,
-                iam_find_one_query_scope_pipe_1.IamFindOneQueryScopePipe,
-                iam_paginate_query_scope_pipe_1.IamPaginateQueryScopePipe,
+                optionsProvider,
+                ...services,
+                { provide: core_1.APP_GUARD, useClass: iam_context_guard_1.IamContextGuard },
             ],
+            exports: [iam_context_options_interface_1.IAM_CONTEXT_MODULE_OPTIONS, ...services],
         };
     }
 };

package/dist/iam-context.module.js.map

@@ -1 +1 @@
-{"version":3,"file":"iam-context.module.js","sourceRoot":"","sources":["../src/iam-context.module.ts"],"names":[],"mappings":";;;;;;;;;;AAAA,2CAA+D;AAC/D,uCAAyC;AAEzC,kEAA6D;AAC7D,oFAA8E;AAC9E,yFAAiF;AACjF,yFAAkF;AAClF,8FAIoD;AAQ7C,IAAM,gBAAgB,wBAAtB,MAAM,gBAAgB;IAK3B,MAAM,CAAC,OAAO,CAAC,UAAmC,EAAE;QAClD,OAAO;YACL,MAAM,EAAE,kBAAgB;YACxB,SAAS,EAAE;gBACT;oBACE,OAAO,EAAE,0DAA0B;oBACnC,QAAQ,EAAE;wBACR,GAAG,kEAAkC;wBACrC,GAAG,OAAO;wBACV,WAAW,EAAE;4BACX,GAAG,kEAAkC,CAAC,WAAW;4BACjD,GAAG,OAAO,CAAC,WAAW;yBACvB;wBACD,YAAY,EAAE;4BACZ,GAAG,kEAAkC,CAAC,YAAY;4BAClD,GAAG,OAAO,CAAC,YAAY;yBACxB;qBACF;iBACF;gBACD,kDAAsB;gBACtB,wDAAwB;gBACxB,yDAAyB;gBACzB;oBACE,OAAO,EAAE,gBAAS;oBAClB,QAAQ,EAAE,mCAAe;iBAC1B;aACF;YACD,OAAO,EAAE;gBACP,0DAA0B;gBAC1B,kDAAsB;gBACtB,wDAAwB;gBACxB,yDAAyB;aAC1B;SACF,CAAC;IACJ,CAAC;CACF,CAAA;AAxCY,4CAAgB;2BAAhB,gBAAgB;IAF5B,IAAA,eAAM,GAAE;IACR,IAAA,eAAM,EAAC,EAAE,CAAC;GACE,gBAAgB,CAwC5B"}
+{"version":3,"file":"iam-context.module.js","sourceRoot":"","sources":["../src/iam-context.module.ts"],"names":[],"mappings":";;;;;;;;;;AAAA,2CAAyE;AACzE,uCAA0D;AAE1D,kEAA6D;AAC7D,oFAA8E;AAC9E,8EAAyE;AACzE,sFAAgF;AAChF,yFAAiF;AACjF,yFAAkF;AAClF,8FAKoD;AAEpD,MAAM,QAAQ,GAAG;IACf,kDAAsB;IACtB,6CAAoB;IACpB,oDAAuB;IACvB,wDAAwB;IACxB,yDAAyB;CAC1B,CAAC;AAGF,MAAM,YAAY,GAAG,CACnB,UAAmC,EAAE,EACZ,EAAE,CAAC,CAAC;IAC7B,GAAG,kEAAkC;IACrC,GAAG,OAAO;IACV,WAAW,EAAE;QACX,GAAG,kEAAkC,CAAC,WAAW;QACjD,GAAG,OAAO,CAAC,WAAW;KACvB;IACD,YAAY,EAAE;QACZ,GAAG,kEAAkC,CAAC,YAAY;QAClD,GAAG,OAAO,CAAC,YAAY;KACxB;CACF,CAAC,CAAC;AAQI,IAAM,gBAAgB,wBAAtB,MAAM,gBAAgB;IAC3B,MAAM,CAAC,OAAO,CAAC,UAAmC,EAAE;QAClD,OAAO,kBAAgB,CAAC,MAAM,CAAC,EAAE,EAAE;YACjC,OAAO,EAAE,0DAA0B;YACnC,QAAQ,EAAE,YAAY,CAAC,OAAO,CAAC;SAChC,CAAC,CAAC;IACL,CAAC;IAGD,MAAM,CAAC,YAAY,CAAC,OAAqC;QACvD,OAAO,kBAAgB,CAAC,MAAM,CAAC,OAAO,CAAC,OAAO,IAAI,EAAE,EAAE;YACpD,OAAO,EAAE,0DAA0B;YACnC,MAAM,EAAE,OAAO,CAAC,MAAM,IAAI,EAAE;YAC5B,UAAU,EAAE,KAAK,EAAE,GAAG,IAAW,EAAE,EAAE,CACnC,YAAY,CAAC,MAAM,OAAO,CAAC,UAAU,CAAC,GAAG,IAAI,CAAC,CAAC;SAClD,CAAC,CAAC;IACL,CAAC;IAEO,MAAM,CAAC,MAAM,CACnB,OAAc,EACd,eAAyB;QAEzB,OAAO;YACL,MAAM,EAAE,kBAAgB;YACxB,OAAO,EAAE,CAAC,sBAAe,EAAE,GAAG,OAAO,CAAC;YACtC,SAAS,EAAE;gBACT,eAAe;gBACf,GAAG,QAAQ;gBACX,EAAE,OAAO,EAAE,gBAAS,EAAE,QAAQ,EAAE,mCAAe,EAAE;aAClD;YACD,OAAO,EAAE,CAAC,0DAA0B,EAAE,GAAG,QAAQ,CAAC;SACnD,CAAC;IACJ,CAAC;CACF,CAAA;AAjCY,4CAAgB;2BAAhB,gBAAgB;IAF5B,IAAA,eAAM,GAAE;IACR,IAAA,eAAM,EAAC,EAAE,CAAC;GACE,gBAAgB,CAiC5B"}