@naylence/runtime 0.3.4 → 0.3.5-test.0

package/dist/cjs/naylence/fame/security/auth/oauth2-authorizer.js

@@ -1,226 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.OAuth2Authorizer = void 0;
-const core_1 = require("@naylence/core");
-const ttl_constants_js_1 = require("../../constants/ttl-constants.js");
-const logging_js_1 = require("../../util/logging.js");
-const logger = (0, logging_js_1.getLogger)('naylence.fame.security.auth.oauth2_authorizer');
-class OAuth2Authorizer {
-    constructor(options) {
-        this.priority = 1000;
-        this.tokenVerifierImpl = options.tokenVerifier;
-        this.tokenIssuer = options.tokenIssuer ?? undefined;
-        this.audience = options.audience ?? undefined;
-        this.requiredScopes = new Set((options.requiredScopes ?? []).filter((scope) => scope.trim().length > 0));
-        this.requireScope = options.requireScope ?? true;
-        this.reverseAuthTtlSec =
-            options.reverseAuthTtlSec ?? ttl_constants_js_1.DEFAULT_REVERSE_AUTH_TTL_SEC;
-    }
-    get tokenVerifier() {
-        return this.tokenVerifierImpl;
-    }
-    async onNodeStarted(node) {
-        this.node = node;
-    }
-    async authenticate(credentials) {
-        const token = this.normalizeBearerToken(credentials);
-        if (!token) {
-            logger.debug('oauth2_authenticate_missing_token');
-            return undefined;
-        }
-        try {
-            const expectedAudience = this.audience ?? this.node?.physicalPath;
-            logger.debug('oauth2_authenticate_start', {
-                expected_audience: expectedAudience,
-            });
-            const context = expectedAudience !== undefined
-                ? await this.tokenVerifierImpl.verify(token, { expectedAudience })
-                : await this.tokenVerifierImpl.verify(token);
-            const claims = { ...(context.claims ?? {}) };
-            const scopes = this.extractScopes(claims);
-            const grantedScopes = this.mergeScopes(context.grantedScopes ?? [], scopes);
-            if (this.requireScope &&
-                this.requiredScopes.size > 0 &&
-                !this.hasRequiredScope(grantedScopes)) {
-                logger.warning('oauth2_token_missing_required_scope', {
-                    required_scopes: Array.from(this.requiredScopes),
-                    token_scopes: Array.from(scopes),
-                });
-                return undefined;
-            }
-            const normalized = (0, core_1.createAuthorizationContext)({
-                ...context,
-                authenticated: true,
-                authorized: context.authorized ?? true,
-                claims,
-                grantedScopes,
-                authMethod: context.authMethod ?? 'oauth2_jwt',
-            });
-            logger.debug('oauth2_authenticate_success', {
-                granted_scopes: Array.from(grantedScopes),
-            });
-            return normalized;
-        }
-        catch (error) {
-            logger.warning('oauth2_token_verification_failed', {
-                error: error instanceof Error ? error.message : String(error),
-            });
-            return undefined;
-        }
-    }
-    async authorize(_node, _envelope, context) {
-        const security = context?.security;
-        const authorization = security?.authorization;
-        if (!authorization) {
-            return undefined;
-        }
-        // Early return if already authorized (matches Python behavior)
-        // This skips scope checking for reverse auth contexts
-        if (authorization.authorized) {
-            return authorization;
-        }
-        const grantedScopes = new Set(authorization.grantedScopes ?? []);
-        if (this.requireScope &&
-            this.requiredScopes.size > 0 &&
-            !this.hasRequiredScope(grantedScopes)) {
-            return undefined;
-        }
-        return (0, core_1.createAuthorizationContext)({
-            ...authorization,
-            authorized: true,
-        });
-    }
-    async createReverseAuthorizationConfig(node) {
-        if (!this.tokenIssuer) {
-            return undefined;
-        }
-        const expiresAt = new Date(Date.now() + this.reverseAuthTtlSec * 1000);
-        try {
-            const token = await this.tokenIssuer.issue({
-                iss: this.tokenIssuer.issuer,
-                aud: this.audience ?? node.physicalPath,
-                exp: Math.floor(expiresAt.getTime() / 1000),
-                sub: `reverse-auth-${node.id}`,
-                instance_id: node.instanceId ?? null,
-                capabilities: Array.from(this.requiredScopes),
-            });
-            logger.debug('reverse_authorization_token_generated', {
-                node_id: node.id,
-                expires_at: expiresAt.toISOString(),
-                capabilities: Array.from(this.requiredScopes),
-            });
-            const staticTokenConfig = {
-                type: 'StaticTokenProvider',
-                token,
-                expiresAt,
-            };
-            const result = {
-                type: 'BearerTokenHeaderAuthInjectionStrategy',
-                tokenProvider: staticTokenConfig,
-            };
-            return result;
-        }
-        catch (error) {
-            logger.warning('failed_to_generate_reverse_auth_token', {
-                node_id: node.id,
-                error: error instanceof Error ? error.message : String(error),
-            });
-            return undefined;
-        }
-    }
-    async validateNodeAttachRequest(node, frame, authContext) {
-        if (!authContext || !authContext.authenticated) {
-            return undefined;
-        }
-        const claims = { ...(authContext.claims ?? {}) };
-        const scopes = this.extractScopes(claims);
-        const grantedScopes = this.mergeScopes(authContext.grantedScopes ?? [], scopes);
-        if (this.requireScope &&
-            this.requiredScopes.size > 0 &&
-            !this.hasRequiredScope(grantedScopes)) {
-            logger.warning('oauth2_attach_missing_required_scope', {
-                required_scopes: Array.from(this.requiredScopes),
-                token_scopes: Array.from(scopes),
-            });
-            return undefined;
-        }
-        claims.instance_id = claims.instance_id ?? frame.instanceId;
-        claims.assigned_path = claims.assigned_path ?? frame.assignedPath;
-        claims.accepted_capabilities =
-            frame.capabilities ?? claims.accepted_capabilities;
-        claims.accepted_logicals =
-            frame.acceptedLogicals ?? claims.accepted_logicals;
-        claims.aud = node.id;
-        claims.scopes = Array.from(scopes);
-        return (0, core_1.createAuthorizationContext)({
-            ...authContext,
-            claims,
-            principal: authContext.principal ??
-                (typeof claims.sub === 'string'
-                    ? claims.sub
-                    : frame.systemId),
-            grantedScopes,
-            authorized: true,
-            authMethod: authContext.authMethod ?? 'oauth2_jwt',
-        });
-    }
-    normalizeBearerToken(credentials) {
-        if (typeof credentials === 'string') {
-            const trimmed = credentials.trim();
-            if (trimmed.toLowerCase().startsWith('bearer ')) {
-                return trimmed.slice(7).trim();
-            }
-            return trimmed.length > 0 ? trimmed : undefined;
-        }
-        const decoded = new TextDecoder().decode(credentials);
-        return this.normalizeBearerToken(decoded);
-    }
-    extractScopes(claims) {
-        const scopes = new Set();
-        const add = (value) => {
-            if (typeof value === 'string') {
-                value
-                    .split(/[\s,]+/)
-                    .filter(Boolean)
-                    .forEach((scope) => scopes.add(scope));
-            }
-            else if (Array.isArray(value)) {
-                value
-                    .map((scope) => (typeof scope === 'string' ? scope.trim() : ''))
-                    .filter(Boolean)
-                    .forEach((scope) => scopes.add(scope));
-            }
-        };
-        add(claims.scope);
-        add(claims.scopes);
-        const capabilities = claims.capabilities;
-        if (Array.isArray(capabilities)) {
-            capabilities
-                .map((scope) => (typeof scope === 'string' ? scope.trim() : ''))
-                .filter(Boolean)
-                .forEach((scope) => scopes.add(scope));
-        }
-        return scopes;
-    }
-    mergeScopes(existing, scopes) {
-        const merged = new Set(existing.filter((scope) => typeof scope === 'string'));
-        for (const scope of scopes) {
-            merged.add(scope);
-        }
-        return Array.from(merged);
-    }
-    hasRequiredScope(scopes) {
-        const candidate = scopes instanceof Set ? scopes : new Set(scopes);
-        if (this.requiredScopes.size === 0) {
-            return true;
-        }
-        for (const scope of this.requiredScopes) {
-            if (candidate.has(scope)) {
-                return true;
-            }
-        }
-        return false;
-    }
-}
-exports.OAuth2Authorizer = OAuth2Authorizer;
-//# sourceMappingURL=oauth2-authorizer.js.map

package/dist/cjs/naylence/fame/security/auth/oauth2-authorizer.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"oauth2-authorizer.js","sourceRoot":"","sources":["../../../../../../src/naylence/fame/security/auth/oauth2-authorizer.ts"],"names":[],"mappings":";;;AAMA,yCAA4D;AAC5D,uEAAgF;AAChF,sDAAkD;AAQlD,MAAM,MAAM,GAAG,IAAA,sBAAS,EAAC,+CAA+C,CAAC,CAAC;AAwB1E,MAAa,gBAAgB;IAa3B,YAAY,OAAgC;QAV5B,aAAQ,GAAG,IAAI,CAAC;QAW9B,IAAI,CAAC,iBAAiB,GAAG,OAAO,CAAC,aAAa,CAAC;QAC/C,IAAI,CAAC,WAAW,GAAG,OAAO,CAAC,WAAW,IAAI,SAAS,CAAC;QACpD,IAAI,CAAC,QAAQ,GAAG,OAAO,CAAC,QAAQ,IAAI,SAAS,CAAC;QAC9C,IAAI,CAAC,cAAc,GAAG,IAAI,GAAG,CAC3B,CAAC,OAAO,CAAC,cAAc,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,CAAC,CAC1E,CAAC;QACF,IAAI,CAAC,YAAY,GAAG,OAAO,CAAC,YAAY,IAAI,IAAI,CAAC;QACjD,IAAI,CAAC,iBAAiB;YACpB,OAAO,CAAC,iBAAiB,IAAI,+CAA4B,CAAC;IAC9D,CAAC;IAED,IAAI,aAAa;QACf,OAAO,IAAI,CAAC,iBAAiB,CAAC;IAChC,CAAC;IAED,KAAK,CAAC,aAAa,CAAC,IAAc;QAChC,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;IACnB,CAAC;IAED,KAAK,CAAC,YAAY,CAChB,WAAgC;QAEhC,MAAM,KAAK,GAAG,IAAI,CAAC,oBAAoB,CAAC,WAAW,CAAC,CAAC;QACrD,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,MAAM,CAAC,KAAK,CAAC,mCAAmC,CAAC,CAAC;YAClD,OAAO,SAAS,CAAC;QACnB,CAAC;QAED,IAAI,CAAC;YACH,MAAM,gBAAgB,GAAG,IAAI,CAAC,QAAQ,IAAI,IAAI,CAAC,IAAI,EAAE,YAAY,CAAC;YAClE,MAAM,CAAC,KAAK,CAAC,2BAA2B,EAAE;gBACxC,iBAAiB,EAAE,gBAAgB;aACpC,CAAC,CAAC;YACH,MAAM,OAAO,GACX,gBAAgB,KAAK,SAAS;gBAC5B,CAAC,CAAC,MAAM,IAAI,CAAC,iBAAiB,CAAC,MAAM,CAAC,KAAK,EAAE,EAAE,gBAAgB,EAAE,CAAC;gBAClE,CAAC,CAAC,MAAM,IAAI,CAAC,iBAAiB,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YAEjD,MAAM,MAAM,GAAG,EAAE,GAAG,CAAC,OAAO,CAAC,MAAM,IAAI,EAAE,CAAC,EAA6B,CAAC;YACxE,MAAM,MAAM,GAAG,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC;YAC1C,MAAM,aAAa,GAAG,IAAI,CAAC,WAAW,CACpC,OAAO,CAAC,aAAa,IAAI,EAAE,EAC3B,MAAM,CACP,CAAC;YAEF,IACE,IAAI,CAAC,YAAY;gBACjB,IAAI,CAAC,cAAc,CAAC,IAAI,GAAG,CAAC;gBAC5B,CAAC,IAAI,CAAC,gBAAgB,CAAC,aAAa,CAAC,EACrC,CAAC;gBACD,MAAM,CAAC,OAAO,CAAC,qCAAqC,EAAE;oBACpD,eAAe,EAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,cAAc,CAAC;oBAChD,YAAY,EAAE,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC;iBACjC,CAAC,CAAC;gBACH,OAAO,SAAS,CAAC;YACnB,CAAC;YAED,MAAM,UAAU,GAAG,IAAA,iCAA0B,EAAC;gBAC5C,GAAG,OAAO;gBACV,aAAa,EAAE,IAAI;gBACnB,UAAU,EAAE,OAAO,CAAC,UAAU,IAAI,IAAI;gBACtC,MAAM;gBACN,aAAa;gBACb,UAAU,EAAE,OAAO,CAAC,UAAU,IAAI,YAAY;aAC/C,CAAC,CAAC;YAEH,MAAM,CAAC,KAAK,CAAC,6BAA6B,EAAE;gBAC1C,cAAc,EAAE,KAAK,CAAC,IAAI,CAAC,aAAa,CAAC;aAC1C,CAAC,CAAC;YAEH,OAAO,UAAU,CAAC;QACpB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,CAAC,OAAO,CAAC,kCAAkC,EAAE;gBACjD,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;aAC9D,CAAC,CAAC;YACH,OAAO,SAAS,CAAC;QACnB,CAAC;IACH,CAAC;IAED,KAAK,CAAC,SAAS,CACb,KAAe,EACf,SAAuB,EACvB,OAA6B;QAE7B,MAAM,QAAQ,GAAG,OAAO,EAAE,QAAQ,CAAC;QACnC,MAAM,aAAa,GAAG,QAAQ,EAAE,aAAa,CAAC;QAC9C,IAAI,CAAC,aAAa,EAAE,CAAC;YACnB,OAAO,SAAS,CAAC;QACnB,CAAC;QAED,+DAA+D;QAC/D,sDAAsD;QACtD,IAAI,aAAa,CAAC,UAAU,EAAE,CAAC;YAC7B,OAAO,aAAa,CAAC;QACvB,CAAC;QAED,MAAM,aAAa,GAAG,IAAI,GAAG,CAAS,aAAa,CAAC,aAAa,IAAI,EAAE,CAAC,CAAC;QAEzE,IACE,IAAI,CAAC,YAAY;YACjB,IAAI,CAAC,cAAc,CAAC,IAAI,GAAG,CAAC;YAC5B,CAAC,IAAI,CAAC,gBAAgB,CAAC,aAAa,CAAC,EACrC,CAAC;YACD,OAAO,SAAS,CAAC;QACnB,CAAC;QAED,OAAO,IAAA,iCAA0B,EAAC;YAChC,GAAG,aAAa;YAChB,UAAU,EAAE,IAAI;SACjB,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,gCAAgC,CACpC,IAAc;QAEd,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC;YACtB,OAAO,SAAS,CAAC;QACnB,CAAC;QAED,MAAM,SAAS,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,iBAAiB,GAAG,IAAI,CAAC,CAAC;QAEvE,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC;gBACzC,GAAG,EAAE,IAAI,CAAC,WAAW,CAAC,MAAM;gBAC5B,GAAG,EAAE,IAAI,CAAC,QAAQ,IAAI,IAAI,CAAC,YAAY;gBACvC,GAAG,EAAE,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC;gBAC3C,GAAG,EAAE,gBAAgB,IAAI,CAAC,EAAE,EAAE;gBAC9B,WAAW,EACR,IAA2C,CAAC,UAAU,IAAI,IAAI;gBACjE,YAAY,EAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,cAAc,CAAC;aAC9C,CAAC,CAAC;YAEH,MAAM,CAAC,KAAK,CAAC,uCAAuC,EAAE;gBACpD,OAAO,EAAE,IAAI,CAAC,EAAE;gBAChB,UAAU,EAAE,SAAS,CAAC,WAAW,EAAE;gBACnC,YAAY,EAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,cAAc,CAAC;aAC9C,CAAC,CAAC;YAEH,MAAM,iBAAiB,GAA8B;gBACnD,IAAI,EAAE,qBAAqB;gBAC3B,KAAK;gBACL,SAAS;aACV,CAAC;YAEF,MAAM,MAAM,GAAiD;gBAC3D,IAAI,EAAE,wCAAwC;gBAC9C,aAAa,EAAE,iBAAiB;aACjC,CAAC;YACF,OAAO,MAAM,CAAC;QAChB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,CAAC,OAAO,CAAC,uCAAuC,EAAE;gBACtD,OAAO,EAAE,IAAI,CAAC,EAAE;gBAChB,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;aAC9D,CAAC,CAAC;YACH,OAAO,SAAS,CAAC;QACnB,CAAC;IACH,CAAC;IAED,KAAK,CAAC,yBAAyB,CAC7B,IAAc,EACd,KAAsB,EACtB,WAAkC;QAElC,IAAI,CAAC,WAAW,IAAI,CAAC,WAAW,CAAC,aAAa,EAAE,CAAC;YAC/C,OAAO,SAAS,CAAC;QACnB,CAAC;QAED,MAAM,MAAM,GAAG,EAAE,GAAG,CAAC,WAAW,CAAC,MAAM,IAAI,EAAE,CAAC,EAA6B,CAAC;QAC5E,MAAM,MAAM,GAAG,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC;QAC1C,MAAM,aAAa,GAAG,IAAI,CAAC,WAAW,CACpC,WAAW,CAAC,aAAa,IAAI,EAAE,EAC/B,MAAM,CACP,CAAC;QAEF,IACE,IAAI,CAAC,YAAY;YACjB,IAAI,CAAC,cAAc,CAAC,IAAI,GAAG,CAAC;YAC5B,CAAC,IAAI,CAAC,gBAAgB,CAAC,aAAa,CAAC,EACrC,CAAC;YACD,MAAM,CAAC,OAAO,CAAC,sCAAsC,EAAE;gBACrD,eAAe,EAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,cAAc,CAAC;gBAChD,YAAY,EAAE,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC;aACjC,CAAC,CAAC;YACH,OAAO,SAAS,CAAC;QACnB,CAAC;QAED,MAAM,CAAC,WAAW,GAAG,MAAM,CAAC,WAAW,IAAI,KAAK,CAAC,UAAU,CAAC;QAC5D,MAAM,CAAC,aAAa,GAAG,MAAM,CAAC,aAAa,IAAI,KAAK,CAAC,YAAY,CAAC;QAClE,MAAM,CAAC,qBAAqB;YAC1B,KAAK,CAAC,YAAY,IAAI,MAAM,CAAC,qBAAqB,CAAC;QACrD,MAAM,CAAC,iBAAiB;YACtB,KAAK,CAAC,gBAAgB,IAAI,MAAM,CAAC,iBAAiB,CAAC;QACrD,MAAM,CAAC,GAAG,GAAG,IAAI,CAAC,EAAE,CAAC;QACrB,MAAM,CAAC,MAAM,GAAG,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAEnC,OAAO,IAAA,iCAA0B,EAAC;YAChC,GAAG,WAAW;YACd,MAAM;YACN,SAAS,EACP,WAAW,CAAC,SAAS;gBACrB,CAAC,OAAO,MAAM,CAAC,GAAG,KAAK,QAAQ;oBAC7B,CAAC,CAAE,MAAM,CAAC,GAAc;oBACxB,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC;YACrB,aAAa;YACb,UAAU,EAAE,IAAI;YAChB,UAAU,EAAE,WAAW,CAAC,UAAU,IAAI,YAAY;SACnD,CAAC,CAAC;IACL,CAAC;IAEO,oBAAoB,CAC1B,WAAgC;QAEhC,IAAI,OAAO,WAAW,KAAK,QAAQ,EAAE,CAAC;YACpC,MAAM,OAAO,GAAG,WAAW,CAAC,IAAI,EAAE,CAAC;YACnC,IAAI,OAAO,CAAC,WAAW,EAAE,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;gBAChD,OAAO,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;YACjC,CAAC;YACD,OAAO,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;QAClD,CAAC;QAED,MAAM,OAAO,GAAG,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;QACtD,OAAO,IAAI,CAAC,oBAAoB,CAAC,OAAO,CAAC,CAAC;IAC5C,CAAC;IAEO,aAAa,CAAC,MAA+B;QACnD,MAAM,MAAM,GAAG,IAAI,GAAG,EAAU,CAAC;QAEjC,MAAM,GAAG,GAAG,CAAC,KAAc,EAAQ,EAAE;YACnC,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;gBAC9B,KAAK;qBACF,KAAK,CAAC,QAAQ,CAAC;qBACf,MAAM,CAAC,OAAO,CAAC;qBACf,OAAO,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC;YAC3C,CAAC;iBAAM,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;gBAChC,KAAK;qBACF,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;qBAC/D,MAAM,CAAC,OAAO,CAAC;qBACf,OAAO,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC;YAC3C,CAAC;QACH,CAAC,CAAC;QAEF,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QAClB,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QAEnB,MAAM,YAAY,GAAG,MAAM,CAAC,YAAY,CAAC;QACzC,IAAI,KAAK,CAAC,OAAO,CAAC,YAAY,CAAC,EAAE,CAAC;YAChC,YAAY;iBACT,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;iBAC/D,MAAM,CAAC,OAAO,CAAC;iBACf,OAAO,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC;QAC3C,CAAC;QAED,OAAO,MAAM,CAAC;IAChB,CAAC;IAEO,WAAW,CAAC,QAAkB,EAAE,MAAmB;QACzD,MAAM,MAAM,GAAG,IAAI,GAAG,CACpB,QAAQ,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,OAAO,KAAK,KAAK,QAAQ,CAAC,CACtD,CAAC;QACF,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;YAC3B,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QACpB,CAAC;QACD,OAAO,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAC5B,CAAC;IAEO,gBAAgB,CAAC,MAA8B;QACrD,MAAM,SAAS,GAAG,MAAM,YAAY,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC;QACnE,IAAI,IAAI,CAAC,cAAc,CAAC,IAAI,KAAK,CAAC,EAAE,CAAC;YACnC,OAAO,IAAI,CAAC;QACd,CAAC;QACD,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,cAAc,EAAE,CAAC;YACxC,IAAI,SAAS,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;gBACzB,OAAO,IAAI,CAAC;YACd,CAAC;QACH,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;CACF;AAnSD,4CAmSC"}

package/dist/cjs/naylence/fame/security/auth/oauth2-client-credentials-token-provider-factory.js

@@ -1,104 +0,0 @@
-"use strict";
-var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    var desc = Object.getOwnPropertyDescriptor(m, k);
-    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
-      desc = { enumerable: true, get: function() { return m[k]; } };
-    }
-    Object.defineProperty(o, k2, desc);
-}) : (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    o[k2] = m[k];
-}));
-var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
-    Object.defineProperty(o, "default", { enumerable: true, value: v });
-}) : function(o, v) {
-    o["default"] = v;
-});
-var __importStar = (this && this.__importStar) || (function () {
-    var ownKeys = function(o) {
-        ownKeys = Object.getOwnPropertyNames || function (o) {
-            var ar = [];
-            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
-            return ar;
-        };
-        return ownKeys(o);
-    };
-    return function (mod) {
-        if (mod && mod.__esModule) return mod;
-        var result = {};
-        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
-        __setModuleDefault(result, mod);
-        return result;
-    };
-})();
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.OAuth2ClientCredentialsTokenProviderFactory = exports.FACTORY_META = void 0;
-const credential_provider_factory_js_1 = require("../credential/credential-provider-factory.js");
-const secret_source_js_1 = require("../credential/secret-source.js");
-const lazy_import_js_1 = require("../../util/lazy-import.js");
-const token_provider_factory_js_1 = require("./token-provider-factory.js");
-let oauth2ClientCredentialsTokenProviderModulePromise = null;
-async function getOAuth2ClientCredentialsTokenProviderModule() {
-    if (!oauth2ClientCredentialsTokenProviderModulePromise) {
-        oauth2ClientCredentialsTokenProviderModulePromise = (0, lazy_import_js_1.safeImport)(() => Promise.resolve().then(() => __importStar(require('./oauth2-client-credentials-token-provider.js'))), 'oauth2-client-credentials-token-provider');
-    }
-    return oauth2ClientCredentialsTokenProviderModulePromise;
-}
-function normalizeConfig(config) {
-    if (!config) {
-        throw new Error('OAuth2ClientCredentialsTokenProvider requires configuration');
-    }
-    const candidate = config;
-    // Support both camelCase and snake_case for compatibility
-    const tokenUrl = candidate.tokenUrl ?? candidate.token_url;
-    if (typeof tokenUrl !== 'string' || tokenUrl.length === 0) {
-        throw new Error('OAuth2ClientCredentialsTokenProvider tokenUrl must be a non-empty string');
-    }
-    const clientIdSource = candidate.clientId ?? candidate.client_id;
-    const clientSecretSource = candidate.clientSecret ?? candidate.client_secret;
-    const scopes = Array.isArray(candidate.scopes)
-        ? candidate.scopes.filter((scope) => typeof scope === 'string' && scope.length > 0)
-        : ['node.connect'];
-    const normalized = {
-        tokenUrl,
-        clientIdConfig: (0, secret_source_js_1.normalizeSecretSource)(clientIdSource),
-        clientSecretConfig: (0, secret_source_js_1.normalizeSecretSource)(clientSecretSource),
-        scopes,
-    };
-    if (typeof candidate.audience === 'string' && candidate.audience.length > 0) {
-        normalized.audience = candidate.audience;
-    }
-    return normalized;
-}
-exports.FACTORY_META = {
-    base: token_provider_factory_js_1.TOKEN_PROVIDER_FACTORY_BASE_TYPE,
-    key: 'OAuth2ClientCredentialsTokenProvider',
-};
-class OAuth2ClientCredentialsTokenProviderFactory extends token_provider_factory_js_1.TokenProviderFactory {
-    constructor() {
-        super(...arguments);
-        this.type = 'OAuth2ClientCredentialsTokenProvider';
-    }
-    async create(config) {
-        const normalized = normalizeConfig(config);
-        const [clientIdProvider, clientSecretProvider] = await Promise.all([
-            credential_provider_factory_js_1.CredentialProviderFactory.createCredentialProvider(normalized.clientIdConfig),
-            credential_provider_factory_js_1.CredentialProviderFactory.createCredentialProvider(normalized.clientSecretConfig),
-        ]);
-        const options = {
-            tokenUrl: normalized.tokenUrl,
-            clientIdProvider,
-            clientSecretProvider,
-            scopes: normalized.scopes,
-        };
-        if (normalized.audience) {
-            options.audience = normalized.audience;
-        }
-        const { OAuth2ClientCredentialsTokenProvider } = await getOAuth2ClientCredentialsTokenProviderModule();
-        return new OAuth2ClientCredentialsTokenProvider(options);
-    }
-}
-exports.OAuth2ClientCredentialsTokenProviderFactory = OAuth2ClientCredentialsTokenProviderFactory;
-exports.default = OAuth2ClientCredentialsTokenProviderFactory;
-//# sourceMappingURL=oauth2-client-credentials-token-provider-factory.js.map

package/dist/cjs/naylence/fame/security/auth/oauth2-client-credentials-token-provider-factory.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"oauth2-client-credentials-token-provider-factory.js","sourceRoot":"","sources":["../../../../../../src/naylence/fame/security/auth/oauth2-client-credentials-token-provider-factory.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,iGAGsD;AACtD,qEAGwC;AACxC,8DAAuD;AAEvD,2EAIqC;AAMrC,IAAI,iDAAiD,GACnD,IAAI,CAAC;AACP,KAAK,UAAU,6CAA6C;IAC1D,IAAI,CAAC,iDAAiD,EAAE,CAAC;QACvD,iDAAiD,GAAG,IAAA,2BAAU,EAC5D,GAAG,EAAE,mDAAQ,+CAA+C,GAAC,EAC7D,0CAA0C,CAC3C,CAAC;IACJ,CAAC;IAED,OAAO,iDAAiD,CAAC;AAC3D,CAAC;AAoBD,SAAS,eAAe,CACtB,MAGQ;IAER,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,MAAM,IAAI,KAAK,CACb,6DAA6D,CAC9D,CAAC;IACJ,CAAC;IAED,MAAM,SAAS,GAAG,MACO,CAAC;IAE1B,0DAA0D;IAC1D,MAAM,QAAQ,GAAG,SAAS,CAAC,QAAQ,IAAI,SAAS,CAAC,SAAS,CAAC;IAC3D,IAAI,OAAO,QAAQ,KAAK,QAAQ,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC1D,MAAM,IAAI,KAAK,CACb,0EAA0E,CAC3E,CAAC;IACJ,CAAC;IAED,MAAM,cAAc,GAClB,SAAS,CAAC,QAAQ,IAAI,SAAS,CAAC,SAAS,CAAC;IAC5C,MAAM,kBAAkB,GACtB,SAAS,CAAC,YAAY,IAAI,SAAS,CAAC,aAAa,CAAC;IAEpD,MAAM,MAAM,GAAG,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,MAAM,CAAC;QAC5C,CAAC,CAAC,SAAS,CAAC,MAAM,CAAC,MAAM,CACrB,CAAC,KAAK,EAAmB,EAAE,CACzB,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,CAChD;QACH,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC;IAErB,MAAM,UAAU,GAA2B;QACzC,QAAQ;QACR,cAAc,EAAE,IAAA,wCAAqB,EAAC,cAAc,CAAC;QACrD,kBAAkB,EAAE,IAAA,wCAAqB,EAAC,kBAAkB,CAAC;QAC7D,MAAM;KACP,CAAC;IAEF,IAAI,OAAO,SAAS,CAAC,QAAQ,KAAK,QAAQ,IAAI,SAAS,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC5E,UAAU,CAAC,QAAQ,GAAG,SAAS,CAAC,QAAQ,CAAC;IAC3C,CAAC;IAED,OAAO,UAAU,CAAC;AACpB,CAAC;AAEY,QAAA,YAAY,GAAG;IAC1B,IAAI,EAAE,4DAAgC;IACtC,GAAG,EAAE,sCAAsC;CACnC,CAAC;AAEX,MAAa,2CAA4C,SAAQ,gDAAgE;IAAjI;;QACkB,SAAI,GAAG,sCAAsC,CAAC;IAmChE,CAAC;IAjCQ,KAAK,CAAC,MAAM,CACjB,MAGQ;QAER,MAAM,UAAU,GAAG,eAAe,CAAC,MAAM,CAAC,CAAC;QAE3C,MAAM,CAAC,gBAAgB,EAAE,oBAAoB,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;YACjE,0DAAyB,CAAC,wBAAwB,CAChD,UAAU,CAAC,cAAc,CAC1B;YACD,0DAAyB,CAAC,wBAAwB,CAChD,UAAU,CAAC,kBAAkB,CAC9B;SACF,CAAC,CAAC;QAEH,MAAM,OAAO,GAAgD;YAC3D,QAAQ,EAAE,UAAU,CAAC,QAAQ;YAC7B,gBAAgB;YAChB,oBAAoB;YACpB,MAAM,EAAE,UAAU,CAAC,MAAM;SAC1B,CAAC;QAEF,IAAI,UAAU,CAAC,QAAQ,EAAE,CAAC;YACxB,OAAO,CAAC,QAAQ,GAAG,UAAU,CAAC,QAAQ,CAAC;QACzC,CAAC;QAED,MAAM,EAAE,oCAAoC,EAAE,GAC5C,MAAM,6CAA6C,EAAE,CAAC;QAExD,OAAO,IAAI,oCAAoC,CAAC,OAAO,CAAC,CAAC;IAC3D,CAAC;CACF;AApCD,kGAoCC;AAED,kBAAe,2CAA2C,CAAC"}

package/dist/cjs/naylence/fame/security/auth/oauth2-client-credentials-token-provider.js

@@ -1,103 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.OAuth2ClientCredentialsTokenProvider = void 0;
-const logging_js_1 = require("../../util/logging.js");
-const credential_provider_js_1 = require("../credential/credential-provider.js");
-const logger = (0, logging_js_1.getLogger)('naylence.fame.security.auth.oauth2_client_credentials_token_provider');
-const DEFAULT_EXPIRY_SECONDS = 3600;
-const DEFAULT_CLOCK_SKEW_SECONDS = 30;
-class OAuth2ClientCredentialsTokenProvider {
-    constructor(options) {
-        this.options = options;
-        if (!options.tokenUrl) {
-            throw new Error('OAuth2 token URL must be provided');
-        }
-    }
-    async getToken() {
-        if (this.cachedToken && this.isTokenFresh(this.cachedToken)) {
-            logger.debug('using_cached_oauth2_token', {
-                token_url: this.options.tokenUrl,
-            });
-            return { ...this.cachedToken };
-        }
-        this.cachedToken = await this.fetchNewToken();
-        return { ...this.cachedToken };
-    }
-    isTokenFresh(token) {
-        if (typeof token.expiresAt !== 'number') {
-            return true;
-        }
-        const clockSkew = this.options.clockSkewSeconds ?? DEFAULT_CLOCK_SKEW_SECONDS;
-        return token.expiresAt - clockSkew * 1000 > Date.now();
-    }
-    async fetchNewToken() {
-        const fetchImpl = this.resolveFetch();
-        const clientId = (0, credential_provider_js_1.credentialToString)(await this.options.clientIdProvider.get());
-        if (!clientId) {
-            throw new Error('OAuth2 client ID provider returned empty value');
-        }
-        const clientSecret = (0, credential_provider_js_1.credentialToString)(await this.options.clientSecretProvider.get());
-        if (!clientSecret) {
-            throw new Error('OAuth2 client secret provider returned empty value');
-        }
-        const params = new URLSearchParams();
-        params.set('grant_type', 'client_credentials');
-        params.set('client_id', clientId);
-        params.set('client_secret', clientSecret);
-        if (this.options.scopes && this.options.scopes.length > 0) {
-            params.set('scope', this.options.scopes.join(' '));
-        }
-        if (this.options.audience) {
-            params.set('audience', this.options.audience);
-        }
-        const response = await fetchImpl(this.options.tokenUrl, {
-            method: 'POST',
-            headers: {
-                'Content-Type': 'application/x-www-form-urlencoded',
-            },
-            body: params.toString(),
-        });
-        if (!response.ok) {
-            const errorBody = await response.text().catch(() => '<unavailable>');
-            throw new Error(`OAuth2 token request failed: ${response.status} ${response.statusText} - ${errorBody}`);
-        }
-        const payload = (await response.json());
-        const accessToken = typeof payload.access_token === 'string'
-            ? payload.access_token
-            : undefined;
-        if (!accessToken) {
-            throw new Error('OAuth2 token response did not include access_token');
-        }
-        const expiresInSeconds = this.resolveExpiresIn(payload);
-        const expiresAt = Date.now() + expiresInSeconds * 1000;
-        logger.debug('oauth2_token_fetched', {
-            token_url: this.options.tokenUrl,
-            scopes: this.options.scopes,
-            audience: this.options.audience,
-            expires_in: expiresInSeconds,
-        });
-        return {
-            value: accessToken,
-            expiresAt,
-        };
-    }
-    resolveFetch() {
-        if (this.options.fetchImpl) {
-            return this.options.fetchImpl;
-        }
-        if (typeof fetch === 'function') {
-            return fetch.bind(globalThis);
-        }
-        throw new Error('Global fetch implementation is not available. Provide fetchImpl in options.');
-    }
-    resolveExpiresIn(payload) {
-        const expiresInCandidate = payload.expires_in ?? payload.expires;
-        if (typeof expiresInCandidate === 'number' &&
-            Number.isFinite(expiresInCandidate)) {
-            return Math.max(1, Math.floor(expiresInCandidate));
-        }
-        return DEFAULT_EXPIRY_SECONDS;
-    }
-}
-exports.OAuth2ClientCredentialsTokenProvider = OAuth2ClientCredentialsTokenProvider;
-//# sourceMappingURL=oauth2-client-credentials-token-provider.js.map

package/dist/cjs/naylence/fame/security/auth/oauth2-client-credentials-token-provider.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"oauth2-client-credentials-token-provider.js","sourceRoot":"","sources":["../../../../../../src/naylence/fame/security/auth/oauth2-client-credentials-token-provider.ts"],"names":[],"mappings":";;;AAAA,sDAAkD;AAClD,iFAG8C;AAI9C,MAAM,MAAM,GAAG,IAAA,sBAAS,EACtB,sEAAsE,CACvE,CAAC;AAyBF,MAAM,sBAAsB,GAAG,IAAI,CAAC;AACpC,MAAM,0BAA0B,GAAG,EAAE,CAAC;AAEtC,MAAa,oCAAoC;IAG/C,YACmB,OAAoD;QAApD,YAAO,GAAP,OAAO,CAA6C;QAErE,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC;YACtB,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC;QACvD,CAAC;IACH,CAAC;IAEM,KAAK,CAAC,QAAQ;QACnB,IAAI,IAAI,CAAC,WAAW,IAAI,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,WAAW,CAAC,EAAE,CAAC;YAC5D,MAAM,CAAC,KAAK,CAAC,2BAA2B,EAAE;gBACxC,SAAS,EAAE,IAAI,CAAC,OAAO,CAAC,QAAQ;aACjC,CAAC,CAAC;YACH,OAAO,EAAE,GAAG,IAAI,CAAC,WAAW,EAAE,CAAC;QACjC,CAAC;QAED,IAAI,CAAC,WAAW,GAAG,MAAM,IAAI,CAAC,aAAa,EAAE,CAAC;QAC9C,OAAO,EAAE,GAAG,IAAI,CAAC,WAAW,EAAE,CAAC;IACjC,CAAC;IAEO,YAAY,CAAC,KAAY;QAC/B,IAAI,OAAO,KAAK,CAAC,SAAS,KAAK,QAAQ,EAAE,CAAC;YACxC,OAAO,IAAI,CAAC;QACd,CAAC;QAED,MAAM,SAAS,GACb,IAAI,CAAC,OAAO,CAAC,gBAAgB,IAAI,0BAA0B,CAAC;QAC9D,OAAO,KAAK,CAAC,SAAS,GAAG,SAAS,GAAG,IAAI,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACzD,CAAC;IAEO,KAAK,CAAC,aAAa;QACzB,MAAM,SAAS,GAAG,IAAI,CAAC,YAAY,EAAE,CAAC;QAEtC,MAAM,QAAQ,GAAG,IAAA,2CAAkB,EACjC,MAAM,IAAI,CAAC,OAAO,CAAC,gBAAgB,CAAC,GAAG,EAAE,CAC1C,CAAC;QACF,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,MAAM,IAAI,KAAK,CAAC,gDAAgD,CAAC,CAAC;QACpE,CAAC;QAED,MAAM,YAAY,GAAG,IAAA,2CAAkB,EACrC,MAAM,IAAI,CAAC,OAAO,CAAC,oBAAoB,CAAC,GAAG,EAAE,CAC9C,CAAC;QACF,IAAI,CAAC,YAAY,EAAE,CAAC;YAClB,MAAM,IAAI,KAAK,CAAC,oDAAoD,CAAC,CAAC;QACxE,CAAC;QAED,MAAM,MAAM,GAAG,IAAI,eAAe,EAAE,CAAC;QACrC,MAAM,CAAC,GAAG,CAAC,YAAY,EAAE,oBAAoB,CAAC,CAAC;QAC/C,MAAM,CAAC,GAAG,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAC;QAClC,MAAM,CAAC,GAAG,CAAC,eAAe,EAAE,YAAY,CAAC,CAAC;QAE1C,IAAI,IAAI,CAAC,OAAO,CAAC,MAAM,IAAI,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC1D,MAAM,CAAC,GAAG,CAAC,OAAO,EAAE,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;QACrD,CAAC;QAED,IAAI,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC;YAC1B,MAAM,CAAC,GAAG,CAAC,UAAU,EAAE,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;QAChD,CAAC;QAED,MAAM,QAAQ,GAAG,MAAM,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE;YACtD,MAAM,EAAE,MAAM;YACd,OAAO,EAAE;gBACP,cAAc,EAAE,mCAAmC;aACpD;YACD,IAAI,EAAE,MAAM,CAAC,QAAQ,EAAE;SACxB,CAAC,CAAC;QAEH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YACjB,MAAM,SAAS,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,eAAe,CAAC,CAAC;YACrE,MAAM,IAAI,KAAK,CACb,gCAAgC,QAAQ,CAAC,MAAM,IAAI,QAAQ,CAAC,UAAU,MAAM,SAAS,EAAE,CACxF,CAAC;QACJ,CAAC;QAED,MAAM,OAAO,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAwB,CAAC;QAC/D,MAAM,WAAW,GACf,OAAO,OAAO,CAAC,YAAY,KAAK,QAAQ;YACtC,CAAC,CAAC,OAAO,CAAC,YAAY;YACtB,CAAC,CAAC,SAAS,CAAC;QAChB,IAAI,CAAC,WAAW,EAAE,CAAC;YACjB,MAAM,IAAI,KAAK,CAAC,oDAAoD,CAAC,CAAC;QACxE,CAAC;QAED,MAAM,gBAAgB,GAAG,IAAI,CAAC,gBAAgB,CAAC,OAAO,CAAC,CAAC;QACxD,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,gBAAgB,GAAG,IAAI,CAAC;QAEvD,MAAM,CAAC,KAAK,CAAC,sBAAsB,EAAE;YACnC,SAAS,EAAE,IAAI,CAAC,OAAO,CAAC,QAAQ;YAChC,MAAM,EAAE,IAAI,CAAC,OAAO,CAAC,MAAM;YAC3B,QAAQ,EAAE,IAAI,CAAC,OAAO,CAAC,QAAQ;YAC/B,UAAU,EAAE,gBAAgB;SAC7B,CAAC,CAAC;QAEH,OAAO;YACL,KAAK,EAAE,WAAW;YAClB,SAAS;SACV,CAAC;IACJ,CAAC;IAEO,YAAY;QAClB,IAAI,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,CAAC;YAC3B,OAAO,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC;QAChC,CAAC;QAED,IAAI,OAAO,KAAK,KAAK,UAAU,EAAE,CAAC;YAChC,OAAO,KAAK,CAAC,IAAI,CAAC,UAAU,CAAc,CAAC;QAC7C,CAAC;QAED,MAAM,IAAI,KAAK,CACb,6EAA6E,CAC9E,CAAC;IACJ,CAAC;IAEO,gBAAgB,CAAC,OAA4B;QACnD,MAAM,kBAAkB,GAAG,OAAO,CAAC,UAAU,IAAI,OAAO,CAAC,OAAO,CAAC;QACjE,IACE,OAAO,kBAAkB,KAAK,QAAQ;YACtC,MAAM,CAAC,QAAQ,CAAC,kBAAkB,CAAC,EACnC,CAAC;YACD,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,kBAAkB,CAAC,CAAC,CAAC;QACrD,CAAC;QAED,OAAO,sBAAsB,CAAC;IAChC,CAAC;CACF;AAhID,oFAgIC"}

package/dist/cjs/naylence/fame/security/auth/query-param-auth-injection-strategy-factory.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"query-param-auth-injection-strategy-factory.js","sourceRoot":"","sources":["../../../../../../src/naylence/fame/security/auth/query-param-auth-injection-strategy-factory.ts"],"names":[],"mappings":";;;AACA,6FAI8C;AAC9C,qGAA2F;AAmB9E,QAAA,YAAY,GAAG;IAC1B,IAAI,EAAE,8EAAyC;IAC/C,GAAG,EAAE,gBAAgB;CACb,CAAC;AAEX,MAAa,sCAAuC,SAAQ,iEAAmE;IAA/H;;QACkB,SAAI,GAAG,gBAAgB,CAAC;IAW1C,CAAC;IATQ,KAAK,CAAC,MAAM,CACjB,MAGQ;QAER,MAAM,UAAU,GAAG,eAAe,CAAC,MAAM,CAAC,CAAC;QAC3C,OAAO,IAAI,wEAA+B,CAAC,UAAU,CAAC,CAAC;IACzD,CAAC;CACF;AAZD,wFAYC;AAED,SAAS,eAAe,CACtB,MAGQ;IAER,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,MAAM,IAAI,KAAK,CAAC,wDAAwD,CAAC,CAAC;IAC5E,CAAC;IAED,MAAM,SAAS,GAAG,MACO,CAAC;IAC1B,MAAM,IAAI,GAAG,OAAO,SAAS,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;IAC7E,IAAI,IAAI,KAAK,gBAAgB,EAAE,CAAC;QAC9B,MAAM,IAAI,KAAK,CACb,8EAA8E,IAAI,IAAI,WAAW,GAAG,CACrG,CAAC;IACJ,CAAC;IAED,MAAM,aAAa,GAAG,SAAS,CAAC,aAAa,IAAI,SAAS,CAAC,cAAc,CAAC;IAC1E,IAAI,CAAC,aAAa,EAAE,CAAC;QACnB,MAAM,IAAI,KAAK,CACb,wEAAwE,CACzE,CAAC;IACJ,CAAC;IAED,MAAM,cAAc,GAClB,SAAS,CAAC,SAAS,IAAI,SAAS,CAAC,UAAU,IAAI,SAAS,CAAC,KAAK,CAAC;IACjE,MAAM,SAAS,GACb,OAAO,cAAc,KAAK,QAAQ,IAAI,cAAc,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC;QACpE,CAAC,CAAC,cAAc,CAAC,IAAI,EAAE;QACvB,CAAC,CAAC,OAAO,CAAC;IAEd,OAAO;QACL,IAAI,EAAE,gBAAgB;QACtB,aAAa;QACb,SAAS;KACV,CAAC;AACJ,CAAC;AAED,kBAAe,sCAAsC,CAAC"}

package/dist/cjs/naylence/fame/security/auth/query-param-auth-injection-strategy.js

@@ -1,28 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.QueryParamAuthInjectionStrategy = void 0;
-const token_provider_factory_js_1 = require("./token-provider-factory.js");
-class QueryParamAuthInjectionStrategy {
-    constructor(options) {
-        this.options = options;
-    }
-    async apply(_connector) {
-        // Query parameter strategies modify the URL at connection time only
-    }
-    async modifyUrl(url) {
-        const provider = await token_provider_factory_js_1.TokenProviderFactory.createTokenProvider(this.options.tokenProvider);
-        const token = await provider.getToken();
-        const [basePart, hashPart] = url.split('#', 2);
-        const [pathPart, queryPart] = basePart.split('?', 2);
-        const params = new URLSearchParams(queryPart ?? '');
-        params.set(this.options.paramName, token.value);
-        const queryString = params.toString();
-        const rebuilt = queryString.length > 0 ? `${pathPart}?${queryString}` : pathPart;
-        return hashPart ? `${rebuilt}#${hashPart}` : rebuilt;
-    }
-    async cleanup() {
-        // Nothing to clean up for query parameter injection
-    }
-}
-exports.QueryParamAuthInjectionStrategy = QueryParamAuthInjectionStrategy;
-//# sourceMappingURL=query-param-auth-injection-strategy.js.map

package/dist/cjs/naylence/fame/security/auth/query-param-auth-injection-strategy.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"query-param-auth-injection-strategy.js","sourceRoot":"","sources":["../../../../../../src/naylence/fame/security/auth/query-param-auth-injection-strategy.ts"],"names":[],"mappings":";;;AAEA,2EAAmE;AAQnE,MAAa,+BAA+B;IAC1C,YACmB,OAA+C;QAA/C,YAAO,GAAP,OAAO,CAAwC;IAC/D,CAAC;IAEG,KAAK,CAAC,KAAK,CAAC,UAAmB;QACpC,oEAAoE;IACtE,CAAC;IAEM,KAAK,CAAC,SAAS,CAAC,GAAW;QAChC,MAAM,QAAQ,GAAG,MAAM,gDAAoB,CAAC,mBAAmB,CAC7D,IAAI,CAAC,OAAO,CAAC,aAAa,CAC3B,CAAC;QACF,MAAM,KAAK,GAAG,MAAM,QAAQ,CAAC,QAAQ,EAAE,CAAC;QAExC,MAAM,CAAC,QAAQ,EAAE,QAAQ,CAAC,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;QAC/C,MAAM,CAAC,QAAQ,EAAE,SAAS,CAAC,GAAG,QAAQ,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;QACrD,MAAM,MAAM,GAAG,IAAI,eAAe,CAAC,SAAS,IAAI,EAAE,CAAC,CAAC;QACpD,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC;QAEhD,MAAM,WAAW,GAAG,MAAM,CAAC,QAAQ,EAAE,CAAC;QACtC,MAAM,OAAO,GACX,WAAW,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,QAAQ,IAAI,WAAW,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC;QACnE,OAAO,QAAQ,CAAC,CAAC,CAAC,GAAG,OAAO,IAAI,QAAQ,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC;IACvD,CAAC;IAEM,KAAK,CAAC,OAAO;QAClB,oDAAoD;IACtD,CAAC;CACF;AA7BD,0EA6BC"}

package/dist/cjs/naylence/fame/security/auth/shared-secret-authorizer-factory.js

@@ -1,76 +0,0 @@
-"use strict";
-var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    var desc = Object.getOwnPropertyDescriptor(m, k);
-    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
-      desc = { enumerable: true, get: function() { return m[k]; } };
-    }
-    Object.defineProperty(o, k2, desc);
-}) : (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    o[k2] = m[k];
-}));
-var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
-    Object.defineProperty(o, "default", { enumerable: true, value: v });
-}) : function(o, v) {
-    o["default"] = v;
-});
-var __importStar = (this && this.__importStar) || (function () {
-    var ownKeys = function(o) {
-        ownKeys = Object.getOwnPropertyNames || function (o) {
-            var ar = [];
-            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
-            return ar;
-        };
-        return ownKeys(o);
-    };
-    return function (mod) {
-        if (mod && mod.__esModule) return mod;
-        var result = {};
-        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
-        __setModuleDefault(result, mod);
-        return result;
-    };
-})();
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.SharedSecretAuthorizerFactory = exports.FACTORY_META = void 0;
-const lazy_import_js_1 = require("../../util/lazy-import.js");
-const authorizer_factory_js_1 = require("./authorizer-factory.js");
-const credential_provider_factory_js_1 = require("../credential/credential-provider-factory.js");
-const secret_source_js_1 = require("../credential/secret-source.js");
-let sharedSecretAuthorizerModulePromise = null;
-async function getSharedSecretAuthorizerModule() {
-    if (!sharedSecretAuthorizerModulePromise) {
-        sharedSecretAuthorizerModulePromise = (0, lazy_import_js_1.safeImport)(() => Promise.resolve().then(() => __importStar(require('./shared-secret-authorizer.js'))), 'shared-secret-authorizer');
-    }
-    return sharedSecretAuthorizerModulePromise;
-}
-function normalizeConfig(config) {
-    if (!config) {
-        throw new Error('SharedSecretAuthorizer requires configuration');
-    }
-    const source = config;
-    const secretSource = source.secret ?? 'env://SHARED_SECRET';
-    return {
-        secretConfig: (0, secret_source_js_1.normalizeSecretSource)(secretSource),
-    };
-}
-exports.FACTORY_META = {
-    base: authorizer_factory_js_1.AUTHORIZER_FACTORY_BASE_TYPE,
-    key: 'SharedSecretAuthorizer',
-};
-class SharedSecretAuthorizerFactory extends authorizer_factory_js_1.AuthorizerFactory {
-    constructor() {
-        super(...arguments);
-        this.type = 'SharedSecretAuthorizer';
-    }
-    async create(config) {
-        const normalized = normalizeConfig(config);
-        const credentialProvider = await credential_provider_factory_js_1.CredentialProviderFactory.createCredentialProvider(normalized.secretConfig);
-        const { SharedSecretAuthorizer } = await getSharedSecretAuthorizerModule();
-        return new SharedSecretAuthorizer(credentialProvider);
-    }
-}
-exports.SharedSecretAuthorizerFactory = SharedSecretAuthorizerFactory;
-exports.default = SharedSecretAuthorizerFactory;
-//# sourceMappingURL=shared-secret-authorizer-factory.js.map

package/dist/cjs/naylence/fame/security/auth/shared-secret-authorizer-factory.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"shared-secret-authorizer-factory.js","sourceRoot":"","sources":["../../../../../../src/naylence/fame/security/auth/shared-secret-authorizer-factory.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,8DAAuD;AAEvD,mEAIiC;AACjC,iGAGsD;AACtD,qEAGwC;AAcxC,IAAI,mCAAmC,GACrC,IAAI,CAAC;AAEP,KAAK,UAAU,+BAA+B;IAC5C,IAAI,CAAC,mCAAmC,EAAE,CAAC;QACzC,mCAAmC,GAAG,IAAA,2BAAU,EAC9C,GAAG,EAAE,mDAAQ,+BAA+B,GAAC,EAC7C,0BAA0B,CAC3B,CAAC;IACJ,CAAC;IAED,OAAO,mCAAmC,CAAC;AAC7C,CAAC;AAED,SAAS,eAAe,CACtB,MAAsE;IAEtE,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,MAAM,IAAI,KAAK,CAAC,+CAA+C,CAAC,CAAC;IACnE,CAAC;IAED,MAAM,MAAM,GAAG,MACU,CAAC;IAC1B,MAAM,YAAY,GAAqB,MAAM,CAAC,MAAM,IAAI,qBAAqB,CAAC;IAE9E,OAAO;QACL,YAAY,EAAE,IAAA,wCAAqB,EAAC,YAAY,CAAC;KAClD,CAAC;AACJ,CAAC;AAEY,QAAA,YAAY,GAAG;IAC1B,IAAI,EAAE,oDAA4B;IAClC,GAAG,EAAE,wBAAwB;CACrB,CAAC;AAEX,MAAa,6BAA8B,SAAQ,yCAA+C;IAAlG;;QACkB,SAAI,GAAG,wBAAwB,CAAC;IAgBlD,CAAC;IAdQ,KAAK,CAAC,MAAM,CACjB,MAAsE;QAEtE,MAAM,UAAU,GAAG,eAAe,CAAC,MAAM,CAAC,CAAC;QAE3C,MAAM,kBAAkB,GACtB,MAAM,0DAAyB,CAAC,wBAAwB,CACtD,UAAU,CAAC,YAAY,CACxB,CAAC;QAEJ,MAAM,EAAE,sBAAsB,EAAE,GAAG,MAAM,+BAA+B,EAAE,CAAC;QAE3E,OAAO,IAAI,sBAAsB,CAAC,kBAAkB,CAAC,CAAC;IACxD,CAAC;CACF;AAjBD,sEAiBC;AAED,kBAAe,6BAA6B,CAAC"}