@naylence/advanced-security 0.3.0

package/dist/esm/naylence/fame/security/cert/default-ca-service.js

@@ -0,0 +1,233 @@
+/**
+ * Default CA service implementation with environment variable support.
+ *
+ * Wraps InternalCAService (CASigningService) with automatic credential
+ * loading from environment variables and test CA fallback.
+ */
+import { CAService } from "./ca-types.js";
+import { CASigningService, createTestCA } from "./internal-ca-service.js";
+/**
+ * Environment variable names for CA credentials.
+ */
+export const ENV_FAME_CA_CERT_FILE = "FAME_CA_CERT_FILE";
+export const ENV_FAME_CA_CERT_PEM = "FAME_CA_CERT_PEM";
+export const ENV_FAME_CA_KEY_FILE = "FAME_CA_KEY_FILE";
+export const ENV_FAME_CA_KEY_PEM = "FAME_CA_KEY_PEM";
+export const ENV_FAME_INTERMEDIATE_CHAIN_FILE = "FAME_INTERMEDIATE_CHAIN_FILE";
+export const ENV_FAME_INTERMEDIATE_CHAIN_PEM = "FAME_INTERMEDIATE_CHAIN_PEM";
+export const ENV_FAME_SIGNING_CERT_FILE = "FAME_SIGNING_CERT_FILE";
+export const ENV_FAME_SIGNING_CERT_PEM = "FAME_SIGNING_CERT_PEM";
+export const ENV_FAME_SIGNING_KEY_FILE = "FAME_SIGNING_KEY_FILE";
+export const ENV_FAME_SIGNING_KEY_PEM = "FAME_SIGNING_KEY_PEM";
+/**
+ * Default CA service with environment variable support and test CA fallback.
+ *
+ * Provides automatic credential loading from:
+ * 1. Constructor options
+ * 2. Environment variables (FAME_CA_CERT_PEM, FAME_CA_KEY_PEM, etc.)
+ * 3. Test CA generation (development only)
+ */
+export class DefaultCAService extends CAService {
+    constructor(options = {}) {
+        super();
+        this.caCertPem = options.caCertPem;
+        this.caKeyPem = options.caKeyPem;
+        this.intermediateChainPem = options.intermediateChainPem;
+        this.signingCertPem = options.signingCertPem;
+        this.signingKeyPem = options.signingKeyPem;
+        this.authorizerInstance = options.authorizer;
+    }
+    get authorizer() {
+        return this.authorizerInstance ?? null;
+    }
+    /**
+     * Get CA credentials from environment or configuration.
+     *
+     * @returns CA credentials loaded from config or environment
+     */
+    async getCACredentials() {
+        let caCertPem = this.caCertPem;
+        let caKeyPem = this.caKeyPem;
+        let intermediateChainPem = this.intermediateChainPem;
+        let signingCertPem = this.signingCertPem;
+        let signingKeyPem = this.signingKeyPem;
+        // Try environment variables if not provided
+        if (!caCertPem) {
+            const caCertFile = process.env[ENV_FAME_CA_CERT_FILE];
+            if (caCertFile) {
+                caCertPem = await this.readFileIfExists(caCertFile);
+            }
+            if (!caCertPem) {
+                caCertPem = process.env[ENV_FAME_CA_CERT_PEM];
+            }
+        }
+        if (!caKeyPem) {
+            const caKeyFile = process.env[ENV_FAME_CA_KEY_FILE];
+            if (caKeyFile) {
+                caKeyPem = await this.readFileIfExists(caKeyFile);
+            }
+            if (!caKeyPem) {
+                caKeyPem = process.env[ENV_FAME_CA_KEY_PEM];
+            }
+        }
+        // Load intermediate chain
+        if (!intermediateChainPem) {
+            const intermediateChainFile = process.env[ENV_FAME_INTERMEDIATE_CHAIN_FILE];
+            if (intermediateChainFile) {
+                intermediateChainPem = await this.readFileIfExists(intermediateChainFile);
+            }
+            if (!intermediateChainPem) {
+                intermediateChainPem = process.env[ENV_FAME_INTERMEDIATE_CHAIN_PEM];
+            }
+        }
+        // Load signing certificate
+        if (!signingCertPem) {
+            const signingCertFile = process.env[ENV_FAME_SIGNING_CERT_FILE];
+            if (signingCertFile) {
+                signingCertPem = await this.readFileIfExists(signingCertFile);
+            }
+            if (!signingCertPem) {
+                signingCertPem = process.env[ENV_FAME_SIGNING_CERT_PEM];
+            }
+        }
+        // Load signing key
+        if (!signingKeyPem) {
+            const signingKeyFile = process.env[ENV_FAME_SIGNING_KEY_FILE];
+            if (signingKeyFile) {
+                signingKeyPem = await this.readFileIfExists(signingKeyFile);
+            }
+            if (!signingKeyPem) {
+                signingKeyPem = process.env[ENV_FAME_SIGNING_KEY_PEM];
+            }
+        }
+        // Fallback to test CA if nothing configured
+        if (!caCertPem || !caKeyPem) {
+            console.warn("No CA credentials configured, using test CA (not for production!)");
+            const [rootCert, rootKey] = await createTestCA();
+            return {
+                rootCaCertPem: rootCert,
+                rootCaKeyPem: rootKey,
+                intermediateChainPem,
+                signingCertPem,
+                signingKeyPem,
+            };
+        }
+        return {
+            rootCaCertPem: caCertPem,
+            rootCaKeyPem: caKeyPem,
+            intermediateChainPem,
+            signingCertPem,
+            signingKeyPem,
+        };
+    }
+    /**
+     * Read file contents if the file exists.
+     *
+     * @param filePath - Path to the file
+     * @returns File contents or undefined if file doesn't exist
+     */
+    async readFileIfExists(filePath) {
+        // Browser environment - files not supported
+        if (typeof require === "undefined" && typeof window !== "undefined") {
+            return undefined;
+        }
+        // Node.js environment
+        try {
+            const fs = await import("fs/promises");
+            const stats = await fs.stat(filePath);
+            if (stats.isFile()) {
+                return await fs.readFile(filePath, "utf-8");
+            }
+        }
+        catch {
+            // File doesn't exist or can't be read
+        }
+        return undefined;
+    }
+    /**
+     * Parse a PEM certificate chain into individual certificates.
+     *
+     * @param chainPem - Certificate chain in PEM format
+     * @returns List of individual certificate PEM strings, ordered from leaf to root
+     */
+    parseCertificateChain(chainPem) {
+        const certificates = [];
+        let currentCert = "";
+        let inCert = false;
+        for (const line of chainPem.split("\n")) {
+            if (line.includes("-----BEGIN CERTIFICATE-----")) {
+                inCert = true;
+                currentCert = line + "\n";
+            }
+            else if (line.includes("-----END CERTIFICATE-----")) {
+                currentCert += line + "\n";
+                certificates.push(currentCert.trim());
+                currentCert = "";
+                inCert = false;
+            }
+            else if (inCert) {
+                currentCert += line + "\n";
+            }
+        }
+        return certificates;
+    }
+    /**
+     * Issue a certificate from a CSR using the local CA service.
+     *
+     * @param csr - Certificate signing request
+     * @returns Certificate issuance response with the signed certificate
+     */
+    async issueCertificate(csr) {
+        // Get CA credentials including intermediate chain
+        const credentials = await this.getCACredentials();
+        // Determine which certificate and key to use for signing
+        let signingService;
+        if (credentials.signingCertPem && credentials.signingKeyPem) {
+            // Use specific signing certificate (leaf of intermediate chain)
+            signingService = new CASigningService({
+                rootCertPem: credentials.signingCertPem,
+                rootKeyPem: credentials.signingKeyPem,
+            });
+            console.debug("Using signing certificate for signing:", csr.requesterId);
+        }
+        else if (credentials.intermediateChainPem) {
+            // Extract the leaf certificate from the intermediate chain
+            const intermediateCerts = this.parseCertificateChain(credentials.intermediateChainPem);
+            if (intermediateCerts.length > 0 && credentials.signingKeyPem) {
+                // Use the first certificate in the chain (should be the leaf/signing certificate)
+                const leafCertPem = intermediateCerts[0];
+                signingService = new CASigningService({
+                    rootCertPem: leafCertPem,
+                    rootKeyPem: credentials.signingKeyPem,
+                });
+                console.debug("Using intermediate leaf CA for signing:", csr.requesterId);
+            }
+            else {
+                // Fall back to root CA if no signing key provided
+                signingService = new CASigningService({
+                    rootCertPem: credentials.rootCaCertPem,
+                    rootKeyPem: credentials.rootCaKeyPem,
+                });
+                console.warn("No signing key for intermediate, falling back to root:", csr.requesterId);
+            }
+        }
+        else {
+            // Sign with root CA
+            signingService = new CASigningService({
+                rootCertPem: credentials.rootCaCertPem,
+                rootKeyPem: credentials.rootCaKeyPem,
+            });
+            console.debug("Using root CA for signing:", csr.requesterId);
+        }
+        // TODO: Parse CSR, extract public key, and sign certificate
+        // For now, delegate to the signing service (which will throw until implemented)
+        try {
+            return await signingService.issueCertificate(csr);
+        }
+        catch (error) {
+            console.error("Certificate issuance failed:", csr.requesterId, error);
+            throw error;
+        }
+    }
+}
+//# sourceMappingURL=default-ca-service.js.map

package/dist/esm/naylence/fame/security/cert/default-ca-service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"default-ca-service.js","sourceRoot":"","sources":["../../../../../../src/naylence/fame/security/cert/default-ca-service.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAOH,OAAO,EAAE,SAAS,EAAE,MAAM,eAAe,CAAC;AAC1C,OAAO,EAAE,gBAAgB,EAAE,YAAY,EAAE,MAAM,0BAA0B,CAAC;AAE1E;;GAEG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAG,mBAAmB,CAAC;AACzD,MAAM,CAAC,MAAM,oBAAoB,GAAG,kBAAkB,CAAC;AACvD,MAAM,CAAC,MAAM,oBAAoB,GAAG,kBAAkB,CAAC;AACvD,MAAM,CAAC,MAAM,mBAAmB,GAAG,iBAAiB,CAAC;AACrD,MAAM,CAAC,MAAM,gCAAgC,GAAG,8BAA8B,CAAC;AAC/E,MAAM,CAAC,MAAM,+BAA+B,GAAG,6BAA6B,CAAC;AAC7E,MAAM,CAAC,MAAM,0BAA0B,GAAG,wBAAwB,CAAC;AACnE,MAAM,CAAC,MAAM,yBAAyB,GAAG,uBAAuB,CAAC;AACjE,MAAM,CAAC,MAAM,yBAAyB,GAAG,uBAAuB,CAAC;AACjE,MAAM,CAAC,MAAM,wBAAwB,GAAG,sBAAsB,CAAC;AAoC/D;;;;;;;GAOG;AACH,MAAM,OAAO,gBAAiB,SAAQ,SAAS;IAQ7C,YAAY,UAAmC,EAAE;QAC/C,KAAK,EAAE,CAAC;QAER,IAAI,CAAC,SAAS,GAAG,OAAO,CAAC,SAAS,CAAC;QACnC,IAAI,CAAC,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC;QACjC,IAAI,CAAC,oBAAoB,GAAG,OAAO,CAAC,oBAAoB,CAAC;QACzD,IAAI,CAAC,cAAc,GAAG,OAAO,CAAC,cAAc,CAAC;QAC7C,IAAI,CAAC,aAAa,GAAG,OAAO,CAAC,aAAa,CAAC;QAC3C,IAAI,CAAC,kBAAkB,GAAG,OAAO,CAAC,UAAU,CAAC;IAC/C,CAAC;IAED,IAAI,UAAU;QACZ,OAAO,IAAI,CAAC,kBAAkB,IAAI,IAAI,CAAC;IACzC,CAAC;IAED;;;;OAIG;IACK,KAAK,CAAC,gBAAgB;QAC5B,IAAI,SAAS,GAAG,IAAI,CAAC,SAAS,CAAC;QAC/B,IAAI,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC;QAC7B,IAAI,oBAAoB,GAAG,IAAI,CAAC,oBAAoB,CAAC;QACrD,IAAI,cAAc,GAAG,IAAI,CAAC,cAAc,CAAC;QACzC,IAAI,aAAa,GAAG,IAAI,CAAC,aAAa,CAAC;QAEvC,4CAA4C;QAC5C,IAAI,CAAC,SAAS,EAAE,CAAC;YACf,MAAM,UAAU,GAAG,OAAO,CAAC,GAAG,CAAC,qBAAqB,CAAC,CAAC;YACtD,IAAI,UAAU,EAAE,CAAC;gBACf,SAAS,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAAC,UAAU,CAAC,CAAC;YACtD,CAAC;YACD,IAAI,CAAC,SAAS,EAAE,CAAC;gBACf,SAAS,GAAG,OAAO,CAAC,GAAG,CAAC,oBAAoB,CAAC,CAAC;YAChD,CAAC;QACH,CAAC;QAED,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,MAAM,SAAS,GAAG,OAAO,CAAC,GAAG,CAAC,oBAAoB,CAAC,CAAC;YACpD,IAAI,SAAS,EAAE,CAAC;gBACd,QAAQ,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAAC,SAAS,CAAC,CAAC;YACpD,CAAC;YACD,IAAI,CAAC,QAAQ,EAAE,CAAC;gBACd,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,mBAAmB,CAAC,CAAC;YAC9C,CAAC;QACH,CAAC;QAED,0BAA0B;QAC1B,IAAI,CAAC,oBAAoB,EAAE,CAAC;YAC1B,MAAM,qBAAqB,GACzB,OAAO,CAAC,GAAG,CAAC,gCAAgC,CAAC,CAAC;YAChD,IAAI,qBAAqB,EAAE,CAAC;gBAC1B,oBAAoB,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAChD,qBAAqB,CACtB,CAAC;YACJ,CAAC;YACD,IAAI,CAAC,oBAAoB,EAAE,CAAC;gBAC1B,oBAAoB,GAAG,OAAO,CAAC,GAAG,CAAC,+BAA+B,CAAC,CAAC;YACtE,CAAC;QACH,CAAC;QAED,2BAA2B;QAC3B,IAAI,CAAC,cAAc,EAAE,CAAC;YACpB,MAAM,eAAe,GAAG,OAAO,CAAC,GAAG,CAAC,0BAA0B,CAAC,CAAC;YAChE,IAAI,eAAe,EAAE,CAAC;gBACpB,cAAc,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAAC,eAAe,CAAC,CAAC;YAChE,CAAC;YACD,IAAI,CAAC,cAAc,EAAE,CAAC;gBACpB,cAAc,GAAG,OAAO,CAAC,GAAG,CAAC,yBAAyB,CAAC,CAAC;YAC1D,CAAC;QACH,CAAC;QAED,mBAAmB;QACnB,IAAI,CAAC,aAAa,EAAE,CAAC;YACnB,MAAM,cAAc,GAAG,OAAO,CAAC,GAAG,CAAC,yBAAyB,CAAC,CAAC;YAC9D,IAAI,cAAc,EAAE,CAAC;gBACnB,aAAa,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAAC,cAAc,CAAC,CAAC;YAC9D,CAAC;YACD,IAAI,CAAC,aAAa,EAAE,CAAC;gBACnB,aAAa,GAAG,OAAO,CAAC,GAAG,CAAC,wBAAwB,CAAC,CAAC;YACxD,CAAC;QACH,CAAC;QAED,4CAA4C;QAC5C,IAAI,CAAC,SAAS,IAAI,CAAC,QAAQ,EAAE,CAAC;YAC5B,OAAO,CAAC,IAAI,CACV,mEAAmE,CACpE,CAAC;YACF,MAAM,CAAC,QAAQ,EAAE,OAAO,CAAC,GAAG,MAAM,YAAY,EAAE,CAAC;YACjD,OAAO;gBACL,aAAa,EAAE,QAAQ;gBACvB,YAAY,EAAE,OAAO;gBACrB,oBAAoB;gBACpB,cAAc;gBACd,aAAa;aACd,CAAC;QACJ,CAAC;QAED,OAAO;YACL,aAAa,EAAE,SAAS;YACxB,YAAY,EAAE,QAAQ;YACtB,oBAAoB;YACpB,cAAc;YACd,aAAa;SACd,CAAC;IACJ,CAAC;IAED;;;;;OAKG;IACK,KAAK,CAAC,gBAAgB,CAC5B,QAAgB;QAEhB,4CAA4C;QAC5C,IAAI,OAAO,OAAO,KAAK,WAAW,IAAI,OAAO,MAAM,KAAK,WAAW,EAAE,CAAC;YACpE,OAAO,SAAS,CAAC;QACnB,CAAC;QAED,sBAAsB;QACtB,IAAI,CAAC;YACH,MAAM,EAAE,GAAG,MAAM,MAAM,CAAC,aAAa,CAAC,CAAC;YACvC,MAAM,KAAK,GAAG,MAAM,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;YACtC,IAAI,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC;gBACnB,OAAO,MAAM,EAAE,CAAC,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;YAC9C,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,sCAAsC;QACxC,CAAC;QAED,OAAO,SAAS,CAAC;IACnB,CAAC;IAED;;;;;OAKG;IACK,qBAAqB,CAAC,QAAgB;QAC5C,MAAM,YAAY,GAAa,EAAE,CAAC;QAClC,IAAI,WAAW,GAAG,EAAE,CAAC;QACrB,IAAI,MAAM,GAAG,KAAK,CAAC;QAEnB,KAAK,MAAM,IAAI,IAAI,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;YACxC,IAAI,IAAI,CAAC,QAAQ,CAAC,6BAA6B,CAAC,EAAE,CAAC;gBACjD,MAAM,GAAG,IAAI,CAAC;gBACd,WAAW,GAAG,IAAI,GAAG,IAAI,CAAC;YAC5B,CAAC;iBAAM,IAAI,IAAI,CAAC,QAAQ,CAAC,2BAA2B,CAAC,EAAE,CAAC;gBACtD,WAAW,IAAI,IAAI,GAAG,IAAI,CAAC;gBAC3B,YAAY,CAAC,IAAI,CAAC,WAAW,CAAC,IAAI,EAAE,CAAC,CAAC;gBACtC,WAAW,GAAG,EAAE,CAAC;gBACjB,MAAM,GAAG,KAAK,CAAC;YACjB,CAAC;iBAAM,IAAI,MAAM,EAAE,CAAC;gBAClB,WAAW,IAAI,IAAI,GAAG,IAAI,CAAC;YAC7B,CAAC;QACH,CAAC;QAED,OAAO,YAAY,CAAC;IACtB,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,gBAAgB,CACpB,GAA8B;QAE9B,kDAAkD;QAClD,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,gBAAgB,EAAE,CAAC;QAElD,yDAAyD;QACzD,IAAI,cAAgC,CAAC;QAErC,IAAI,WAAW,CAAC,cAAc,IAAI,WAAW,CAAC,aAAa,EAAE,CAAC;YAC5D,gEAAgE;YAChE,cAAc,GAAG,IAAI,gBAAgB,CAAC;gBACpC,WAAW,EAAE,WAAW,CAAC,cAAc;gBACvC,UAAU,EAAE,WAAW,CAAC,aAAa;aACtC,CAAC,CAAC;YACH,OAAO,CAAC,KAAK,CAAC,wCAAwC,EAAE,GAAG,CAAC,WAAW,CAAC,CAAC;QAC3E,CAAC;aAAM,IAAI,WAAW,CAAC,oBAAoB,EAAE,CAAC;YAC5C,2DAA2D;YAC3D,MAAM,iBAAiB,GAAG,IAAI,CAAC,qBAAqB,CAClD,WAAW,CAAC,oBAAoB,CACjC,CAAC;YACF,IAAI,iBAAiB,CAAC,MAAM,GAAG,CAAC,IAAI,WAAW,CAAC,aAAa,EAAE,CAAC;gBAC9D,kFAAkF;gBAClF,MAAM,WAAW,GAAG,iBAAiB,CAAC,CAAC,CAAC,CAAC;gBACzC,cAAc,GAAG,IAAI,gBAAgB,CAAC;oBACpC,WAAW,EAAE,WAAY;oBACzB,UAAU,EAAE,WAAW,CAAC,aAAa;iBACtC,CAAC,CAAC;gBACH,OAAO,CAAC,KAAK,CACX,yCAAyC,EACzC,GAAG,CAAC,WAAW,CAChB,CAAC;YACJ,CAAC;iBAAM,CAAC;gBACN,kDAAkD;gBAClD,cAAc,GAAG,IAAI,gBAAgB,CAAC;oBACpC,WAAW,EAAE,WAAW,CAAC,aAAa;oBACtC,UAAU,EAAE,WAAW,CAAC,YAAY;iBACrC,CAAC,CAAC;gBACH,OAAO,CAAC,IAAI,CACV,wDAAwD,EACxD,GAAG,CAAC,WAAW,CAChB,CAAC;YACJ,CAAC;QACH,CAAC;aAAM,CAAC;YACN,oBAAoB;YACpB,cAAc,GAAG,IAAI,gBAAgB,CAAC;gBACpC,WAAW,EAAE,WAAW,CAAC,aAAa;gBACtC,UAAU,EAAE,WAAW,CAAC,YAAY;aACrC,CAAC,CAAC;YACH,OAAO,CAAC,KAAK,CAAC,4BAA4B,EAAE,GAAG,CAAC,WAAW,CAAC,CAAC;QAC/D,CAAC;QAED,4DAA4D;QAC5D,gFAAgF;QAChF,IAAI,CAAC;YACH,OAAO,MAAM,cAAc,CAAC,gBAAgB,CAAC,GAAG,CAAC,CAAC;QACpD,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,CAAC,KAAK,CAAC,8BAA8B,EAAE,GAAG,CAAC,WAAW,EAAE,KAAK,CAAC,CAAC;YACtE,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC;CACF"}

package/dist/esm/naylence/fame/security/cert/default-certificate-manager-factory.js

@@ -0,0 +1,73 @@
+import { SigningConfigClass } from "@naylence/runtime";
+import { CertificateManagerFactory, CERTIFICATE_MANAGER_FACTORY_BASE_TYPE, } from "@naylence/runtime";
+import { DefaultCertificateManager, } from "./default-certificate-manager.js";
+export const FACTORY_META = {
+    base: CERTIFICATE_MANAGER_FACTORY_BASE_TYPE,
+    key: "DefaultCertificateManager",
+};
+function normalizeConfig(config) {
+    if (!config) {
+        return { type: "DefaultCertificateManager" };
+    }
+    const { type: _ignoredType, ...rest } = config;
+    const normalized = {
+        ...rest,
+        type: "DefaultCertificateManager",
+    };
+    return normalized;
+}
+function normalizeSecuritySettings(config, explicit) {
+    if (explicit) {
+        return explicit;
+    }
+    if (config.securitySettings) {
+        return config.securitySettings;
+    }
+    if (config.security_settings) {
+        return config.security_settings;
+    }
+    return null;
+}
+function normalizeSigning(config, explicit) {
+    if (explicit instanceof SigningConfigClass) {
+        return explicit;
+    }
+    if (explicit && typeof explicit === "object") {
+        return new SigningConfigClass(explicit);
+    }
+    const candidate = config.signing ?? null;
+    if (candidate instanceof SigningConfigClass) {
+        return candidate;
+    }
+    if (candidate && typeof candidate === "object") {
+        return new SigningConfigClass(candidate);
+    }
+    return null;
+}
+function normalizeOptions(config, securitySettings, signing) {
+    const caServiceUrl = config.caServiceUrl ?? config.ca_service_url ?? null;
+    const cryptoProvider = config.cryptoProvider ?? config.crypto_provider ?? null;
+    return {
+        securitySettings,
+        signing,
+        caServiceUrl,
+        cryptoProvider,
+    };
+}
+export class DefaultCertificateManagerFactory extends CertificateManagerFactory {
+    constructor() {
+        super(...arguments);
+        this.type = "DefaultCertificateManager";
+        this.isDefault = true;
+        this.priority = 100;
+    }
+    async create(config, securitySettings, signing, ..._factoryArgs) {
+        const normalizedConfig = normalizeConfig(config);
+        const resolvedSecuritySettings = normalizeSecuritySettings(normalizedConfig, securitySettings ?? null);
+        const resolvedSigning = normalizeSigning(normalizedConfig, signing ?? null);
+        const options = normalizeOptions(normalizedConfig, resolvedSecuritySettings, resolvedSigning);
+        return new DefaultCertificateManager(options);
+    }
+}
+export default DefaultCertificateManagerFactory;
+//# sourceMappingURL=default-certificate-manager-factory.js.map

package/dist/esm/naylence/fame/security/cert/default-certificate-manager-factory.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"default-certificate-manager-factory.js","sourceRoot":"","sources":["../../../../../../src/naylence/fame/security/cert/default-certificate-manager-factory.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,kBAAkB,EAAE,MAAM,mBAAmB,CAAC;AACvD,OAAO,EACL,yBAAyB,EACzB,qCAAqC,GAEtC,MAAM,mBAAmB,CAAC;AAE3B,OAAO,EACL,yBAAyB,GAG1B,MAAM,kCAAkC,CAAC;AAe1C,MAAM,CAAC,MAAM,YAAY,GAAG;IAC1B,IAAI,EAAE,qCAAqC;IAC3C,GAAG,EAAE,2BAA2B;CACxB,CAAC;AAEX,SAAS,eAAe,CACtB,MAAyE;IAEzE,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,OAAO,EAAE,IAAI,EAAE,2BAA2B,EAAE,CAAC;IAC/C,CAAC;IAED,MAAM,EAAE,IAAI,EAAE,YAAY,EAAE,GAAG,IAAI,EAAE,GAAG,MAAiC,CAAC;IAC1E,MAAM,UAAU,GAAG;QACjB,GAAG,IAAI;QACP,IAAI,EAAE,2BAA2B;KACC,CAAC;IACrC,OAAO,UAAU,CAAC;AACpB,CAAC;AAED,SAAS,yBAAyB,CAChC,MAAuC,EACvC,QAAkC;IAElC,IAAI,QAAQ,EAAE,CAAC;QACb,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED,IAAI,MAAM,CAAC,gBAAgB,EAAE,CAAC;QAC5B,OAAO,MAAM,CAAC,gBAAgB,CAAC;IACjC,CAAC;IAED,IAAI,MAAM,CAAC,iBAAiB,EAAE,CAAC;QAC7B,OAAO,MAAM,CAAC,iBAAiB,CAAC;IAClC,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,gBAAgB,CACvB,MAAuC,EACvC,QAA+B;IAE/B,IAAI,QAAQ,YAAY,kBAAkB,EAAE,CAAC;QAC3C,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED,IAAI,QAAQ,IAAI,OAAO,QAAQ,KAAK,QAAQ,EAAE,CAAC;QAC7C,OAAO,IAAI,kBAAkB,CAAC,QAAQ,CAAC,CAAC;IAC1C,CAAC;IAED,MAAM,SAAS,GAAI,MAAgC,CAAC,OAAO,IAAI,IAAI,CAAC;IACpE,IAAI,SAAS,YAAY,kBAAkB,EAAE,CAAC;QAC5C,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,IAAI,SAAS,IAAI,OAAO,SAAS,KAAK,QAAQ,EAAE,CAAC;QAC/C,OAAO,IAAI,kBAAkB,CAAC,SAAS,CAAC,CAAC;IAC3C,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,gBAAgB,CACvB,MAAuC,EACvC,gBAAyC,EACzC,OAAqC;IAErC,MAAM,YAAY,GAAG,MAAM,CAAC,YAAY,IAAI,MAAM,CAAC,cAAc,IAAI,IAAI,CAAC;IAC1E,MAAM,cAAc,GAClB,MAAM,CAAC,cAAc,IAAI,MAAM,CAAC,eAAe,IAAI,IAAI,CAAC;IAE1D,OAAO;QACL,gBAAgB;QAChB,OAAO;QACP,YAAY;QACZ,cAAc;KACf,CAAC;AACJ,CAAC;AAED,MAAM,OAAO,gCAAiC,SAAQ,yBAA0D;IAAhH;;QACkB,SAAI,GAAG,2BAA2B,CAAC;QACnC,cAAS,GAAG,IAAI,CAAC;QACjB,aAAQ,GAAG,GAAG,CAAC;IAsBjC,CAAC;IApBQ,KAAK,CAAC,MAAM,CACjB,MAAyE,EACzE,gBAA0C,EAC1C,OAA8B,EAC9B,GAAG,YAAuB;QAE1B,MAAM,gBAAgB,GAAG,eAAe,CAAC,MAAM,CAAC,CAAC;QACjD,MAAM,wBAAwB,GAAG,yBAAyB,CACxD,gBAAgB,EAChB,gBAAgB,IAAI,IAAI,CACzB,CAAC;QACF,MAAM,eAAe,GAAG,gBAAgB,CAAC,gBAAgB,EAAE,OAAO,IAAI,IAAI,CAAC,CAAC;QAC5E,MAAM,OAAO,GAAG,gBAAgB,CAC9B,gBAAgB,EAChB,wBAAwB,EACxB,eAAe,CAChB,CAAC;QAEF,OAAO,IAAI,yBAAyB,CAAC,OAAO,CAAC,CAAC;IAChD,CAAC;CACF;AAED,eAAe,gCAAgC,CAAC"}