@naylence/advanced-security 0.3.0

package/dist/cjs/naylence/fame/security/cert/default-ca-service.js

@@ -0,0 +1,270 @@
+"use strict";
+/**
+ * Default CA service implementation with environment variable support.
+ *
+ * Wraps InternalCAService (CASigningService) with automatic credential
+ * loading from environment variables and test CA fallback.
+ */
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.DefaultCAService = exports.ENV_FAME_SIGNING_KEY_PEM = exports.ENV_FAME_SIGNING_KEY_FILE = exports.ENV_FAME_SIGNING_CERT_PEM = exports.ENV_FAME_SIGNING_CERT_FILE = exports.ENV_FAME_INTERMEDIATE_CHAIN_PEM = exports.ENV_FAME_INTERMEDIATE_CHAIN_FILE = exports.ENV_FAME_CA_KEY_PEM = exports.ENV_FAME_CA_KEY_FILE = exports.ENV_FAME_CA_CERT_PEM = exports.ENV_FAME_CA_CERT_FILE = void 0;
+const ca_types_js_1 = require("./ca-types.js");
+const internal_ca_service_js_1 = require("./internal-ca-service.js");
+/**
+ * Environment variable names for CA credentials.
+ */
+exports.ENV_FAME_CA_CERT_FILE = "FAME_CA_CERT_FILE";
+exports.ENV_FAME_CA_CERT_PEM = "FAME_CA_CERT_PEM";
+exports.ENV_FAME_CA_KEY_FILE = "FAME_CA_KEY_FILE";
+exports.ENV_FAME_CA_KEY_PEM = "FAME_CA_KEY_PEM";
+exports.ENV_FAME_INTERMEDIATE_CHAIN_FILE = "FAME_INTERMEDIATE_CHAIN_FILE";
+exports.ENV_FAME_INTERMEDIATE_CHAIN_PEM = "FAME_INTERMEDIATE_CHAIN_PEM";
+exports.ENV_FAME_SIGNING_CERT_FILE = "FAME_SIGNING_CERT_FILE";
+exports.ENV_FAME_SIGNING_CERT_PEM = "FAME_SIGNING_CERT_PEM";
+exports.ENV_FAME_SIGNING_KEY_FILE = "FAME_SIGNING_KEY_FILE";
+exports.ENV_FAME_SIGNING_KEY_PEM = "FAME_SIGNING_KEY_PEM";
+/**
+ * Default CA service with environment variable support and test CA fallback.
+ *
+ * Provides automatic credential loading from:
+ * 1. Constructor options
+ * 2. Environment variables (FAME_CA_CERT_PEM, FAME_CA_KEY_PEM, etc.)
+ * 3. Test CA generation (development only)
+ */
+class DefaultCAService extends ca_types_js_1.CAService {
+    constructor(options = {}) {
+        super();
+        this.caCertPem = options.caCertPem;
+        this.caKeyPem = options.caKeyPem;
+        this.intermediateChainPem = options.intermediateChainPem;
+        this.signingCertPem = options.signingCertPem;
+        this.signingKeyPem = options.signingKeyPem;
+        this.authorizerInstance = options.authorizer;
+    }
+    get authorizer() {
+        return this.authorizerInstance ?? null;
+    }
+    /**
+     * Get CA credentials from environment or configuration.
+     *
+     * @returns CA credentials loaded from config or environment
+     */
+    async getCACredentials() {
+        let caCertPem = this.caCertPem;
+        let caKeyPem = this.caKeyPem;
+        let intermediateChainPem = this.intermediateChainPem;
+        let signingCertPem = this.signingCertPem;
+        let signingKeyPem = this.signingKeyPem;
+        // Try environment variables if not provided
+        if (!caCertPem) {
+            const caCertFile = process.env[exports.ENV_FAME_CA_CERT_FILE];
+            if (caCertFile) {
+                caCertPem = await this.readFileIfExists(caCertFile);
+            }
+            if (!caCertPem) {
+                caCertPem = process.env[exports.ENV_FAME_CA_CERT_PEM];
+            }
+        }
+        if (!caKeyPem) {
+            const caKeyFile = process.env[exports.ENV_FAME_CA_KEY_FILE];
+            if (caKeyFile) {
+                caKeyPem = await this.readFileIfExists(caKeyFile);
+            }
+            if (!caKeyPem) {
+                caKeyPem = process.env[exports.ENV_FAME_CA_KEY_PEM];
+            }
+        }
+        // Load intermediate chain
+        if (!intermediateChainPem) {
+            const intermediateChainFile = process.env[exports.ENV_FAME_INTERMEDIATE_CHAIN_FILE];
+            if (intermediateChainFile) {
+                intermediateChainPem = await this.readFileIfExists(intermediateChainFile);
+            }
+            if (!intermediateChainPem) {
+                intermediateChainPem = process.env[exports.ENV_FAME_INTERMEDIATE_CHAIN_PEM];
+            }
+        }
+        // Load signing certificate
+        if (!signingCertPem) {
+            const signingCertFile = process.env[exports.ENV_FAME_SIGNING_CERT_FILE];
+            if (signingCertFile) {
+                signingCertPem = await this.readFileIfExists(signingCertFile);
+            }
+            if (!signingCertPem) {
+                signingCertPem = process.env[exports.ENV_FAME_SIGNING_CERT_PEM];
+            }
+        }
+        // Load signing key
+        if (!signingKeyPem) {
+            const signingKeyFile = process.env[exports.ENV_FAME_SIGNING_KEY_FILE];
+            if (signingKeyFile) {
+                signingKeyPem = await this.readFileIfExists(signingKeyFile);
+            }
+            if (!signingKeyPem) {
+                signingKeyPem = process.env[exports.ENV_FAME_SIGNING_KEY_PEM];
+            }
+        }
+        // Fallback to test CA if nothing configured
+        if (!caCertPem || !caKeyPem) {
+            console.warn("No CA credentials configured, using test CA (not for production!)");
+            const [rootCert, rootKey] = await (0, internal_ca_service_js_1.createTestCA)();
+            return {
+                rootCaCertPem: rootCert,
+                rootCaKeyPem: rootKey,
+                intermediateChainPem,
+                signingCertPem,
+                signingKeyPem,
+            };
+        }
+        return {
+            rootCaCertPem: caCertPem,
+            rootCaKeyPem: caKeyPem,
+            intermediateChainPem,
+            signingCertPem,
+            signingKeyPem,
+        };
+    }
+    /**
+     * Read file contents if the file exists.
+     *
+     * @param filePath - Path to the file
+     * @returns File contents or undefined if file doesn't exist
+     */
+    async readFileIfExists(filePath) {
+        // Browser environment - files not supported
+        if (typeof require === "undefined" && typeof window !== "undefined") {
+            return undefined;
+        }
+        // Node.js environment
+        try {
+            const fs = await Promise.resolve().then(() => __importStar(require("fs/promises")));
+            const stats = await fs.stat(filePath);
+            if (stats.isFile()) {
+                return await fs.readFile(filePath, "utf-8");
+            }
+        }
+        catch {
+            // File doesn't exist or can't be read
+        }
+        return undefined;
+    }
+    /**
+     * Parse a PEM certificate chain into individual certificates.
+     *
+     * @param chainPem - Certificate chain in PEM format
+     * @returns List of individual certificate PEM strings, ordered from leaf to root
+     */
+    parseCertificateChain(chainPem) {
+        const certificates = [];
+        let currentCert = "";
+        let inCert = false;
+        for (const line of chainPem.split("\n")) {
+            if (line.includes("-----BEGIN CERTIFICATE-----")) {
+                inCert = true;
+                currentCert = line + "\n";
+            }
+            else if (line.includes("-----END CERTIFICATE-----")) {
+                currentCert += line + "\n";
+                certificates.push(currentCert.trim());
+                currentCert = "";
+                inCert = false;
+            }
+            else if (inCert) {
+                currentCert += line + "\n";
+            }
+        }
+        return certificates;
+    }
+    /**
+     * Issue a certificate from a CSR using the local CA service.
+     *
+     * @param csr - Certificate signing request
+     * @returns Certificate issuance response with the signed certificate
+     */
+    async issueCertificate(csr) {
+        // Get CA credentials including intermediate chain
+        const credentials = await this.getCACredentials();
+        // Determine which certificate and key to use for signing
+        let signingService;
+        if (credentials.signingCertPem && credentials.signingKeyPem) {
+            // Use specific signing certificate (leaf of intermediate chain)
+            signingService = new internal_ca_service_js_1.CASigningService({
+                rootCertPem: credentials.signingCertPem,
+                rootKeyPem: credentials.signingKeyPem,
+            });
+            console.debug("Using signing certificate for signing:", csr.requesterId);
+        }
+        else if (credentials.intermediateChainPem) {
+            // Extract the leaf certificate from the intermediate chain
+            const intermediateCerts = this.parseCertificateChain(credentials.intermediateChainPem);
+            if (intermediateCerts.length > 0 && credentials.signingKeyPem) {
+                // Use the first certificate in the chain (should be the leaf/signing certificate)
+                const leafCertPem = intermediateCerts[0];
+                signingService = new internal_ca_service_js_1.CASigningService({
+                    rootCertPem: leafCertPem,
+                    rootKeyPem: credentials.signingKeyPem,
+                });
+                console.debug("Using intermediate leaf CA for signing:", csr.requesterId);
+            }
+            else {
+                // Fall back to root CA if no signing key provided
+                signingService = new internal_ca_service_js_1.CASigningService({
+                    rootCertPem: credentials.rootCaCertPem,
+                    rootKeyPem: credentials.rootCaKeyPem,
+                });
+                console.warn("No signing key for intermediate, falling back to root:", csr.requesterId);
+            }
+        }
+        else {
+            // Sign with root CA
+            signingService = new internal_ca_service_js_1.CASigningService({
+                rootCertPem: credentials.rootCaCertPem,
+                rootKeyPem: credentials.rootCaKeyPem,
+            });
+            console.debug("Using root CA for signing:", csr.requesterId);
+        }
+        // TODO: Parse CSR, extract public key, and sign certificate
+        // For now, delegate to the signing service (which will throw until implemented)
+        try {
+            return await signingService.issueCertificate(csr);
+        }
+        catch (error) {
+            console.error("Certificate issuance failed:", csr.requesterId, error);
+            throw error;
+        }
+    }
+}
+exports.DefaultCAService = DefaultCAService;
+//# sourceMappingURL=default-ca-service.js.map

package/dist/cjs/naylence/fame/security/cert/default-ca-service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"default-ca-service.js","sourceRoot":"","sources":["../../../../../../src/naylence/fame/security/cert/default-ca-service.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAOH,+CAA0C;AAC1C,qEAA0E;AAE1E;;GAEG;AACU,QAAA,qBAAqB,GAAG,mBAAmB,CAAC;AAC5C,QAAA,oBAAoB,GAAG,kBAAkB,CAAC;AAC1C,QAAA,oBAAoB,GAAG,kBAAkB,CAAC;AAC1C,QAAA,mBAAmB,GAAG,iBAAiB,CAAC;AACxC,QAAA,gCAAgC,GAAG,8BAA8B,CAAC;AAClE,QAAA,+BAA+B,GAAG,6BAA6B,CAAC;AAChE,QAAA,0BAA0B,GAAG,wBAAwB,CAAC;AACtD,QAAA,yBAAyB,GAAG,uBAAuB,CAAC;AACpD,QAAA,yBAAyB,GAAG,uBAAuB,CAAC;AACpD,QAAA,wBAAwB,GAAG,sBAAsB,CAAC;AAoC/D;;;;;;;GAOG;AACH,MAAa,gBAAiB,SAAQ,uBAAS;IAQ7C,YAAY,UAAmC,EAAE;QAC/C,KAAK,EAAE,CAAC;QAER,IAAI,CAAC,SAAS,GAAG,OAAO,CAAC,SAAS,CAAC;QACnC,IAAI,CAAC,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC;QACjC,IAAI,CAAC,oBAAoB,GAAG,OAAO,CAAC,oBAAoB,CAAC;QACzD,IAAI,CAAC,cAAc,GAAG,OAAO,CAAC,cAAc,CAAC;QAC7C,IAAI,CAAC,aAAa,GAAG,OAAO,CAAC,aAAa,CAAC;QAC3C,IAAI,CAAC,kBAAkB,GAAG,OAAO,CAAC,UAAU,CAAC;IAC/C,CAAC;IAED,IAAI,UAAU;QACZ,OAAO,IAAI,CAAC,kBAAkB,IAAI,IAAI,CAAC;IACzC,CAAC;IAED;;;;OAIG;IACK,KAAK,CAAC,gBAAgB;QAC5B,IAAI,SAAS,GAAG,IAAI,CAAC,SAAS,CAAC;QAC/B,IAAI,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC;QAC7B,IAAI,oBAAoB,GAAG,IAAI,CAAC,oBAAoB,CAAC;QACrD,IAAI,cAAc,GAAG,IAAI,CAAC,cAAc,CAAC;QACzC,IAAI,aAAa,GAAG,IAAI,CAAC,aAAa,CAAC;QAEvC,4CAA4C;QAC5C,IAAI,CAAC,SAAS,EAAE,CAAC;YACf,MAAM,UAAU,GAAG,OAAO,CAAC,GAAG,CAAC,6BAAqB,CAAC,CAAC;YACtD,IAAI,UAAU,EAAE,CAAC;gBACf,SAAS,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAAC,UAAU,CAAC,CAAC;YACtD,CAAC;YACD,IAAI,CAAC,SAAS,EAAE,CAAC;gBACf,SAAS,GAAG,OAAO,CAAC,GAAG,CAAC,4BAAoB,CAAC,CAAC;YAChD,CAAC;QACH,CAAC;QAED,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,MAAM,SAAS,GAAG,OAAO,CAAC,GAAG,CAAC,4BAAoB,CAAC,CAAC;YACpD,IAAI,SAAS,EAAE,CAAC;gBACd,QAAQ,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAAC,SAAS,CAAC,CAAC;YACpD,CAAC;YACD,IAAI,CAAC,QAAQ,EAAE,CAAC;gBACd,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,2BAAmB,CAAC,CAAC;YAC9C,CAAC;QACH,CAAC;QAED,0BAA0B;QAC1B,IAAI,CAAC,oBAAoB,EAAE,CAAC;YAC1B,MAAM,qBAAqB,GACzB,OAAO,CAAC,GAAG,CAAC,wCAAgC,CAAC,CAAC;YAChD,IAAI,qBAAqB,EAAE,CAAC;gBAC1B,oBAAoB,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAChD,qBAAqB,CACtB,CAAC;YACJ,CAAC;YACD,IAAI,CAAC,oBAAoB,EAAE,CAAC;gBAC1B,oBAAoB,GAAG,OAAO,CAAC,GAAG,CAAC,uCAA+B,CAAC,CAAC;YACtE,CAAC;QACH,CAAC;QAED,2BAA2B;QAC3B,IAAI,CAAC,cAAc,EAAE,CAAC;YACpB,MAAM,eAAe,GAAG,OAAO,CAAC,GAAG,CAAC,kCAA0B,CAAC,CAAC;YAChE,IAAI,eAAe,EAAE,CAAC;gBACpB,cAAc,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAAC,eAAe,CAAC,CAAC;YAChE,CAAC;YACD,IAAI,CAAC,cAAc,EAAE,CAAC;gBACpB,cAAc,GAAG,OAAO,CAAC,GAAG,CAAC,iCAAyB,CAAC,CAAC;YAC1D,CAAC;QACH,CAAC;QAED,mBAAmB;QACnB,IAAI,CAAC,aAAa,EAAE,CAAC;YACnB,MAAM,cAAc,GAAG,OAAO,CAAC,GAAG,CAAC,iCAAyB,CAAC,CAAC;YAC9D,IAAI,cAAc,EAAE,CAAC;gBACnB,aAAa,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAAC,cAAc,CAAC,CAAC;YAC9D,CAAC;YACD,IAAI,CAAC,aAAa,EAAE,CAAC;gBACnB,aAAa,GAAG,OAAO,CAAC,GAAG,CAAC,gCAAwB,CAAC,CAAC;YACxD,CAAC;QACH,CAAC;QAED,4CAA4C;QAC5C,IAAI,CAAC,SAAS,IAAI,CAAC,QAAQ,EAAE,CAAC;YAC5B,OAAO,CAAC,IAAI,CACV,mEAAmE,CACpE,CAAC;YACF,MAAM,CAAC,QAAQ,EAAE,OAAO,CAAC,GAAG,MAAM,IAAA,qCAAY,GAAE,CAAC;YACjD,OAAO;gBACL,aAAa,EAAE,QAAQ;gBACvB,YAAY,EAAE,OAAO;gBACrB,oBAAoB;gBACpB,cAAc;gBACd,aAAa;aACd,CAAC;QACJ,CAAC;QAED,OAAO;YACL,aAAa,EAAE,SAAS;YACxB,YAAY,EAAE,QAAQ;YACtB,oBAAoB;YACpB,cAAc;YACd,aAAa;SACd,CAAC;IACJ,CAAC;IAED;;;;;OAKG;IACK,KAAK,CAAC,gBAAgB,CAC5B,QAAgB;QAEhB,4CAA4C;QAC5C,IAAI,OAAO,OAAO,KAAK,WAAW,IAAI,OAAO,MAAM,KAAK,WAAW,EAAE,CAAC;YACpE,OAAO,SAAS,CAAC;QACnB,CAAC;QAED,sBAAsB;QACtB,IAAI,CAAC;YACH,MAAM,EAAE,GAAG,wDAAa,aAAa,GAAC,CAAC;YACvC,MAAM,KAAK,GAAG,MAAM,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;YACtC,IAAI,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC;gBACnB,OAAO,MAAM,EAAE,CAAC,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;YAC9C,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,sCAAsC;QACxC,CAAC;QAED,OAAO,SAAS,CAAC;IACnB,CAAC;IAED;;;;;OAKG;IACK,qBAAqB,CAAC,QAAgB;QAC5C,MAAM,YAAY,GAAa,EAAE,CAAC;QAClC,IAAI,WAAW,GAAG,EAAE,CAAC;QACrB,IAAI,MAAM,GAAG,KAAK,CAAC;QAEnB,KAAK,MAAM,IAAI,IAAI,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;YACxC,IAAI,IAAI,CAAC,QAAQ,CAAC,6BAA6B,CAAC,EAAE,CAAC;gBACjD,MAAM,GAAG,IAAI,CAAC;gBACd,WAAW,GAAG,IAAI,GAAG,IAAI,CAAC;YAC5B,CAAC;iBAAM,IAAI,IAAI,CAAC,QAAQ,CAAC,2BAA2B,CAAC,EAAE,CAAC;gBACtD,WAAW,IAAI,IAAI,GAAG,IAAI,CAAC;gBAC3B,YAAY,CAAC,IAAI,CAAC,WAAW,CAAC,IAAI,EAAE,CAAC,CAAC;gBACtC,WAAW,GAAG,EAAE,CAAC;gBACjB,MAAM,GAAG,KAAK,CAAC;YACjB,CAAC;iBAAM,IAAI,MAAM,EAAE,CAAC;gBAClB,WAAW,IAAI,IAAI,GAAG,IAAI,CAAC;YAC7B,CAAC;QACH,CAAC;QAED,OAAO,YAAY,CAAC;IACtB,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,gBAAgB,CACpB,GAA8B;QAE9B,kDAAkD;QAClD,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,gBAAgB,EAAE,CAAC;QAElD,yDAAyD;QACzD,IAAI,cAAgC,CAAC;QAErC,IAAI,WAAW,CAAC,cAAc,IAAI,WAAW,CAAC,aAAa,EAAE,CAAC;YAC5D,gEAAgE;YAChE,cAAc,GAAG,IAAI,yCAAgB,CAAC;gBACpC,WAAW,EAAE,WAAW,CAAC,cAAc;gBACvC,UAAU,EAAE,WAAW,CAAC,aAAa;aACtC,CAAC,CAAC;YACH,OAAO,CAAC,KAAK,CAAC,wCAAwC,EAAE,GAAG,CAAC,WAAW,CAAC,CAAC;QAC3E,CAAC;aAAM,IAAI,WAAW,CAAC,oBAAoB,EAAE,CAAC;YAC5C,2DAA2D;YAC3D,MAAM,iBAAiB,GAAG,IAAI,CAAC,qBAAqB,CAClD,WAAW,CAAC,oBAAoB,CACjC,CAAC;YACF,IAAI,iBAAiB,CAAC,MAAM,GAAG,CAAC,IAAI,WAAW,CAAC,aAAa,EAAE,CAAC;gBAC9D,kFAAkF;gBAClF,MAAM,WAAW,GAAG,iBAAiB,CAAC,CAAC,CAAC,CAAC;gBACzC,cAAc,GAAG,IAAI,yCAAgB,CAAC;oBACpC,WAAW,EAAE,WAAY;oBACzB,UAAU,EAAE,WAAW,CAAC,aAAa;iBACtC,CAAC,CAAC;gBACH,OAAO,CAAC,KAAK,CACX,yCAAyC,EACzC,GAAG,CAAC,WAAW,CAChB,CAAC;YACJ,CAAC;iBAAM,CAAC;gBACN,kDAAkD;gBAClD,cAAc,GAAG,IAAI,yCAAgB,CAAC;oBACpC,WAAW,EAAE,WAAW,CAAC,aAAa;oBACtC,UAAU,EAAE,WAAW,CAAC,YAAY;iBACrC,CAAC,CAAC;gBACH,OAAO,CAAC,IAAI,CACV,wDAAwD,EACxD,GAAG,CAAC,WAAW,CAChB,CAAC;YACJ,CAAC;QACH,CAAC;aAAM,CAAC;YACN,oBAAoB;YACpB,cAAc,GAAG,IAAI,yCAAgB,CAAC;gBACpC,WAAW,EAAE,WAAW,CAAC,aAAa;gBACtC,UAAU,EAAE,WAAW,CAAC,YAAY;aACrC,CAAC,CAAC;YACH,OAAO,CAAC,KAAK,CAAC,4BAA4B,EAAE,GAAG,CAAC,WAAW,CAAC,CAAC;QAC/D,CAAC;QAED,4DAA4D;QAC5D,gFAAgF;QAChF,IAAI,CAAC;YACH,OAAO,MAAM,cAAc,CAAC,gBAAgB,CAAC,GAAG,CAAC,CAAC;QACpD,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,CAAC,KAAK,CAAC,8BAA8B,EAAE,GAAG,CAAC,WAAW,EAAE,KAAK,CAAC,CAAC;YACtE,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC;CACF;AA/OD,4CA+OC"}

package/dist/cjs/naylence/fame/security/cert/default-certificate-manager-factory.js

@@ -0,0 +1,77 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.DefaultCertificateManagerFactory = exports.FACTORY_META = void 0;
+const runtime_1 = require("@naylence/runtime");
+const runtime_2 = require("@naylence/runtime");
+const default_certificate_manager_js_1 = require("./default-certificate-manager.js");
+exports.FACTORY_META = {
+    base: runtime_2.CERTIFICATE_MANAGER_FACTORY_BASE_TYPE,
+    key: "DefaultCertificateManager",
+};
+function normalizeConfig(config) {
+    if (!config) {
+        return { type: "DefaultCertificateManager" };
+    }
+    const { type: _ignoredType, ...rest } = config;
+    const normalized = {
+        ...rest,
+        type: "DefaultCertificateManager",
+    };
+    return normalized;
+}
+function normalizeSecuritySettings(config, explicit) {
+    if (explicit) {
+        return explicit;
+    }
+    if (config.securitySettings) {
+        return config.securitySettings;
+    }
+    if (config.security_settings) {
+        return config.security_settings;
+    }
+    return null;
+}
+function normalizeSigning(config, explicit) {
+    if (explicit instanceof runtime_1.SigningConfigClass) {
+        return explicit;
+    }
+    if (explicit && typeof explicit === "object") {
+        return new runtime_1.SigningConfigClass(explicit);
+    }
+    const candidate = config.signing ?? null;
+    if (candidate instanceof runtime_1.SigningConfigClass) {
+        return candidate;
+    }
+    if (candidate && typeof candidate === "object") {
+        return new runtime_1.SigningConfigClass(candidate);
+    }
+    return null;
+}
+function normalizeOptions(config, securitySettings, signing) {
+    const caServiceUrl = config.caServiceUrl ?? config.ca_service_url ?? null;
+    const cryptoProvider = config.cryptoProvider ?? config.crypto_provider ?? null;
+    return {
+        securitySettings,
+        signing,
+        caServiceUrl,
+        cryptoProvider,
+    };
+}
+class DefaultCertificateManagerFactory extends runtime_2.CertificateManagerFactory {
+    constructor() {
+        super(...arguments);
+        this.type = "DefaultCertificateManager";
+        this.isDefault = true;
+        this.priority = 100;
+    }
+    async create(config, securitySettings, signing, ..._factoryArgs) {
+        const normalizedConfig = normalizeConfig(config);
+        const resolvedSecuritySettings = normalizeSecuritySettings(normalizedConfig, securitySettings ?? null);
+        const resolvedSigning = normalizeSigning(normalizedConfig, signing ?? null);
+        const options = normalizeOptions(normalizedConfig, resolvedSecuritySettings, resolvedSigning);
+        return new default_certificate_manager_js_1.DefaultCertificateManager(options);
+    }
+}
+exports.DefaultCertificateManagerFactory = DefaultCertificateManagerFactory;
+exports.default = DefaultCertificateManagerFactory;
+//# sourceMappingURL=default-certificate-manager-factory.js.map

package/dist/cjs/naylence/fame/security/cert/default-certificate-manager-factory.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"default-certificate-manager-factory.js","sourceRoot":"","sources":["../../../../../../src/naylence/fame/security/cert/default-certificate-manager-factory.ts"],"names":[],"mappings":";;;AACA,+CAAuD;AACvD,+CAI2B;AAE3B,qFAI0C;AAe7B,QAAA,YAAY,GAAG;IAC1B,IAAI,EAAE,+CAAqC;IAC3C,GAAG,EAAE,2BAA2B;CACxB,CAAC;AAEX,SAAS,eAAe,CACtB,MAAyE;IAEzE,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,OAAO,EAAE,IAAI,EAAE,2BAA2B,EAAE,CAAC;IAC/C,CAAC;IAED,MAAM,EAAE,IAAI,EAAE,YAAY,EAAE,GAAG,IAAI,EAAE,GAAG,MAAiC,CAAC;IAC1E,MAAM,UAAU,GAAG;QACjB,GAAG,IAAI;QACP,IAAI,EAAE,2BAA2B;KACC,CAAC;IACrC,OAAO,UAAU,CAAC;AACpB,CAAC;AAED,SAAS,yBAAyB,CAChC,MAAuC,EACvC,QAAkC;IAElC,IAAI,QAAQ,EAAE,CAAC;QACb,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED,IAAI,MAAM,CAAC,gBAAgB,EAAE,CAAC;QAC5B,OAAO,MAAM,CAAC,gBAAgB,CAAC;IACjC,CAAC;IAED,IAAI,MAAM,CAAC,iBAAiB,EAAE,CAAC;QAC7B,OAAO,MAAM,CAAC,iBAAiB,CAAC;IAClC,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,gBAAgB,CACvB,MAAuC,EACvC,QAA+B;IAE/B,IAAI,QAAQ,YAAY,4BAAkB,EAAE,CAAC;QAC3C,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED,IAAI,QAAQ,IAAI,OAAO,QAAQ,KAAK,QAAQ,EAAE,CAAC;QAC7C,OAAO,IAAI,4BAAkB,CAAC,QAAQ,CAAC,CAAC;IAC1C,CAAC;IAED,MAAM,SAAS,GAAI,MAAgC,CAAC,OAAO,IAAI,IAAI,CAAC;IACpE,IAAI,SAAS,YAAY,4BAAkB,EAAE,CAAC;QAC5C,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,IAAI,SAAS,IAAI,OAAO,SAAS,KAAK,QAAQ,EAAE,CAAC;QAC/C,OAAO,IAAI,4BAAkB,CAAC,SAAS,CAAC,CAAC;IAC3C,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,gBAAgB,CACvB,MAAuC,EACvC,gBAAyC,EACzC,OAAqC;IAErC,MAAM,YAAY,GAAG,MAAM,CAAC,YAAY,IAAI,MAAM,CAAC,cAAc,IAAI,IAAI,CAAC;IAC1E,MAAM,cAAc,GAClB,MAAM,CAAC,cAAc,IAAI,MAAM,CAAC,eAAe,IAAI,IAAI,CAAC;IAE1D,OAAO;QACL,gBAAgB;QAChB,OAAO;QACP,YAAY;QACZ,cAAc;KACf,CAAC;AACJ,CAAC;AAED,MAAa,gCAAiC,SAAQ,mCAA0D;IAAhH;;QACkB,SAAI,GAAG,2BAA2B,CAAC;QACnC,cAAS,GAAG,IAAI,CAAC;QACjB,aAAQ,GAAG,GAAG,CAAC;IAsBjC,CAAC;IApBQ,KAAK,CAAC,MAAM,CACjB,MAAyE,EACzE,gBAA0C,EAC1C,OAA8B,EAC9B,GAAG,YAAuB;QAE1B,MAAM,gBAAgB,GAAG,eAAe,CAAC,MAAM,CAAC,CAAC;QACjD,MAAM,wBAAwB,GAAG,yBAAyB,CACxD,gBAAgB,EAChB,gBAAgB,IAAI,IAAI,CACzB,CAAC;QACF,MAAM,eAAe,GAAG,gBAAgB,CAAC,gBAAgB,EAAE,OAAO,IAAI,IAAI,CAAC,CAAC;QAC5E,MAAM,OAAO,GAAG,gBAAgB,CAC9B,gBAAgB,EAChB,wBAAwB,EACxB,eAAe,CAChB,CAAC;QAEF,OAAO,IAAI,0DAAyB,CAAC,OAAO,CAAC,CAAC;IAChD,CAAC;CACF;AAzBD,4EAyBC;AAED,kBAAe,gCAAgC,CAAC"}