@naylence/runtime 0.3.4 → 0.3.5-test.0

package/dist/cjs/src/naylence/fame/security/keys/in-memory-key-store.js

@@ -0,0 +1,187 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.InMemoryKeyStore = void 0;
+const logging_js_1 = require("../../util/logging.js");
+const key_store_js_1 = require("./key-store.js");
+const jwk_validation_js_1 = require("../crypto/jwk-validation.js");
+const logger = (0, logging_js_1.getLogger)('naylence.fame.security.keys.in_memory_key_store');
+class InMemoryKeyStore extends key_store_js_1.KeyStore {
+    constructor(initialKeys = null) {
+        super();
+        this.keys = new Map();
+        if (initialKeys instanceof Map) {
+            for (const [kid, jwk] of initialKeys.entries()) {
+                this.keys.set(kid, this.cloneKey(kid, jwk));
+            }
+        }
+        else if (initialKeys) {
+            for (const [kid, jwk] of Object.entries(initialKeys)) {
+                this.keys.set(kid, this.cloneKey(kid, jwk));
+            }
+        }
+    }
+    async addKey(kid, jwk) {
+        try {
+            (0, jwk_validation_js_1.validateJwkComplete)(jwk);
+        }
+        catch (error) {
+            if (error instanceof jwk_validation_js_1.JWKValidationError) {
+                logger.warning('rejected_invalid_jwk_individual', {
+                    kid,
+                    error: error.message,
+                });
+                return;
+            }
+            throw error;
+        }
+        const keyToStore = this.cloneKey(kid, jwk);
+        const physicalPath = typeof keyToStore.physical_path === 'string'
+            ? keyToStore.physical_path
+            : undefined;
+        const use = typeof keyToStore.use === 'string'
+            ? keyToStore.use
+            : undefined;
+        if (physicalPath && use) {
+            const basePath = physicalPath.includes('@')
+                ? (physicalPath.split('@', 2)[1] ?? physicalPath)
+                : physicalPath;
+            const staleKeys = [];
+            for (const [existingKid, existingJwk] of this.keys.entries()) {
+                if (existingKid === kid) {
+                    continue;
+                }
+                const existingUse = typeof existingJwk.use === 'string'
+                    ? existingJwk.use
+                    : undefined;
+                const existingPath = typeof existingJwk.physical_path === 'string'
+                    ? existingJwk.physical_path
+                    : undefined;
+                if (existingUse !== use) {
+                    continue;
+                }
+                if (!existingPath) {
+                    continue;
+                }
+                const matchesPath = existingPath === physicalPath ||
+                    existingPath === basePath ||
+                    existingPath.endsWith(`@${basePath}`);
+                if (matchesPath) {
+                    staleKeys.push(existingKid);
+                }
+            }
+            if (staleKeys.length > 0) {
+                logger.debug('removing_stale_keys_before_adding_new_key', {
+                    new_kid: kid,
+                    physical_path: physicalPath,
+                    base_path: basePath,
+                    use,
+                    stale_key_ids: staleKeys,
+                    count: staleKeys.length,
+                });
+                for (const staleKid of staleKeys) {
+                    this.keys.delete(staleKid);
+                }
+            }
+        }
+        this.keys.set(kid, keyToStore);
+    }
+    async getKey(kid) {
+        const key = this.keys.get(kid);
+        if (!key) {
+            const keysByPath = {};
+            for (const [existingKid, existingJwk] of this.keys.entries()) {
+                const path = typeof existingJwk.physical_path === 'string'
+                    ? existingJwk.physical_path
+                    : 'null';
+                if (!keysByPath[path]) {
+                    keysByPath[path] = [];
+                }
+                keysByPath[path].push(existingKid);
+            }
+            logger.debug('key_lookup_failed', {
+                missing_kid: kid,
+                available_kids: Array.from(this.keys.keys()),
+                keys_by_path: keysByPath,
+            });
+            throw new Error(`Unknown key id: ${kid}`);
+        }
+        return key;
+    }
+    async hasKey(kid) {
+        return this.keys.has(kid);
+    }
+    async getKeys() {
+        return this.keys.values();
+    }
+    async getKeysForPath(physicalPath) {
+        const matching = [];
+        for (const key of this.keys.values()) {
+            if (key.physical_path === physicalPath) {
+                matching.push(key);
+            }
+        }
+        return matching;
+    }
+    async getKeysGroupedByPath() {
+        const grouped = new Map();
+        for (const key of this.keys.values()) {
+            const physicalPath = key.physical_path;
+            if (typeof physicalPath !== 'string') {
+                continue;
+            }
+            if (!grouped.has(physicalPath)) {
+                grouped.set(physicalPath, []);
+            }
+            grouped.get(physicalPath).push(key);
+        }
+        return Object.fromEntries(grouped.entries());
+    }
+    async removeKeysForPath(physicalPath) {
+        const keysToRemove = [];
+        for (const [kid, jwk] of this.keys.entries()) {
+            if (jwk.physical_path === physicalPath) {
+                keysToRemove.push(kid);
+            }
+        }
+        for (const kid of keysToRemove) {
+            this.keys.delete(kid);
+        }
+        if (keysToRemove.length > 0) {
+            logger.debug('removed_keys_for_path', {
+                physical_path: physicalPath,
+                removed_key_ids: keysToRemove,
+                count: keysToRemove.length,
+            });
+        }
+        return keysToRemove.length;
+    }
+    async removeKey(kid) {
+        const removed = this.keys.delete(kid);
+        if (removed) {
+            logger.debug('removed_individual_key', { kid });
+        }
+        return removed;
+    }
+    cloneKey(kid, jwk) {
+        const clone = {
+            ...jwk,
+            kid,
+        };
+        if (clone.physical_path === undefined &&
+            clone.physicalPath !== undefined) {
+            const physicalPath = clone.physicalPath;
+            clone.physical_path =
+                typeof physicalPath === 'string'
+                    ? physicalPath
+                    : physicalPath != null
+                        ? String(physicalPath)
+                        : undefined;
+        }
+        if ('physicalPath' in clone) {
+            delete clone.physicalPath;
+        }
+        return clone;
+    }
+}
+exports.InMemoryKeyStore = InMemoryKeyStore;
+//# sourceMappingURL=in-memory-key-store.js.map

package/dist/cjs/src/naylence/fame/security/keys/in-memory-key-store.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"in-memory-key-store.js","sourceRoot":"","sources":["../../../../../../../src/naylence/fame/security/keys/in-memory-key-store.ts"],"names":[],"mappings":";;;AAAA,sDAAkD;AAElD,iDAA0C;AAC1C,mEAGqC;AAErC,MAAM,MAAM,GAAG,IAAA,sBAAS,EAAC,iDAAiD,CAAC,CAAC;AAE5E,MAAa,gBAAiB,SAAQ,uBAAQ;IAG5C,YACE,cAGW,IAAI;QAEf,KAAK,EAAE,CAAC;QACR,IAAI,CAAC,IAAI,GAAG,IAAI,GAAG,EAAE,CAAC;QAEtB,IAAI,WAAW,YAAY,GAAG,EAAE,CAAC;YAC/B,KAAK,MAAM,CAAC,GAAG,EAAE,GAAG,CAAC,IAAI,WAAW,CAAC,OAAO,EAAE,EAAE,CAAC;gBAC/C,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,IAAI,CAAC,QAAQ,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC;YAC9C,CAAC;QACH,CAAC;aAAM,IAAI,WAAW,EAAE,CAAC;YACvB,KAAK,MAAM,CAAC,GAAG,EAAE,GAAG,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,WAAW,CAAC,EAAE,CAAC;gBACrD,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,IAAI,CAAC,QAAQ,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC;YAC9C,CAAC;QACH,CAAC;IACH,CAAC;IAEM,KAAK,CAAC,MAAM,CAAC,GAAW,EAAE,GAAc;QAC7C,IAAI,CAAC;YACH,IAAA,uCAAmB,EAAC,GAAG,CAAC,CAAC;QAC3B,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,KAAK,YAAY,sCAAkB,EAAE,CAAC;gBACxC,MAAM,CAAC,OAAO,CAAC,iCAAiC,EAAE;oBAChD,GAAG;oBACH,KAAK,EAAE,KAAK,CAAC,OAAO;iBACrB,CAAC,CAAC;gBACH,OAAO;YACT,CAAC;YACD,MAAM,KAAK,CAAC;QACd,CAAC;QAED,MAAM,UAAU,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;QAC3C,MAAM,YAAY,GAChB,OAAO,UAAU,CAAC,aAAa,KAAK,QAAQ;YAC1C,CAAC,CAAE,UAAU,CAAC,aAAwB;YACtC,CAAC,CAAC,SAAS,CAAC;QAChB,MAAM,GAAG,GACP,OAAO,UAAU,CAAC,GAAG,KAAK,QAAQ;YAChC,CAAC,CAAE,UAAU,CAAC,GAAc;YAC5B,CAAC,CAAC,SAAS,CAAC;QAEhB,IAAI,YAAY,IAAI,GAAG,EAAE,CAAC;YACxB,MAAM,QAAQ,GAAG,YAAY,CAAC,QAAQ,CAAC,GAAG,CAAC;gBACzC,CAAC,CAAC,CAAC,YAAY,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,YAAY,CAAC;gBACjD,CAAC,CAAC,YAAY,CAAC;YAEjB,MAAM,SAAS,GAAa,EAAE,CAAC;YAC/B,KAAK,MAAM,CAAC,WAAW,EAAE,WAAW,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,CAAC;gBAC7D,IAAI,WAAW,KAAK,GAAG,EAAE,CAAC;oBACxB,SAAS;gBACX,CAAC;gBAED,MAAM,WAAW,GACf,OAAO,WAAW,CAAC,GAAG,KAAK,QAAQ;oBACjC,CAAC,CAAE,WAAW,CAAC,GAAc;oBAC7B,CAAC,CAAC,SAAS,CAAC;gBAChB,MAAM,YAAY,GAChB,OAAO,WAAW,CAAC,aAAa,KAAK,QAAQ;oBAC3C,CAAC,CAAE,WAAW,CAAC,aAAwB;oBACvC,CAAC,CAAC,SAAS,CAAC;gBAEhB,IAAI,WAAW,KAAK,GAAG,EAAE,CAAC;oBACxB,SAAS;gBACX,CAAC;gBAED,IAAI,CAAC,YAAY,EAAE,CAAC;oBAClB,SAAS;gBACX,CAAC;gBAED,MAAM,WAAW,GACf,YAAY,KAAK,YAAY;oBAC7B,YAAY,KAAK,QAAQ;oBACzB,YAAY,CAAC,QAAQ,CAAC,IAAI,QAAQ,EAAE,CAAC,CAAC;gBAExC,IAAI,WAAW,EAAE,CAAC;oBAChB,SAAS,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;gBAC9B,CAAC;YACH,CAAC;YAED,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACzB,MAAM,CAAC,KAAK,CAAC,2CAA2C,EAAE;oBACxD,OAAO,EAAE,GAAG;oBACZ,aAAa,EAAE,YAAY;oBAC3B,SAAS,EAAE,QAAQ;oBACnB,GAAG;oBACH,aAAa,EAAE,SAAS;oBACxB,KAAK,EAAE,SAAS,CAAC,MAAM;iBACxB,CAAC,CAAC;gBAEH,KAAK,MAAM,QAAQ,IAAI,SAAS,EAAE,CAAC;oBACjC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;gBAC7B,CAAC;YACH,CAAC;QACH,CAAC;QAED,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,UAAU,CAAC,CAAC;IACjC,CAAC;IAEM,KAAK,CAAC,MAAM,CAAC,GAAW;QAC7B,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAC/B,IAAI,CAAC,GAAG,EAAE,CAAC;YACT,MAAM,UAAU,GAA6B,EAAE,CAAC;YAChD,KAAK,MAAM,CAAC,WAAW,EAAE,WAAW,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,CAAC;gBAC7D,MAAM,IAAI,GACR,OAAO,WAAW,CAAC,aAAa,KAAK,QAAQ;oBAC3C,CAAC,CAAE,WAAW,CAAC,aAAwB;oBACvC,CAAC,CAAC,MAAM,CAAC;gBACb,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;oBACtB,UAAU,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC;gBACxB,CAAC;gBACD,UAAU,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;YACrC,CAAC;YAED,MAAM,CAAC,KAAK,CAAC,mBAAmB,EAAE;gBAChC,WAAW,EAAE,GAAG;gBAChB,cAAc,EAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;gBAC5C,YAAY,EAAE,UAAU;aACzB,CAAC,CAAC;YACH,MAAM,IAAI,KAAK,CAAC,mBAAmB,GAAG,EAAE,CAAC,CAAC;QAC5C,CAAC;QACD,OAAO,GAAG,CAAC;IACb,CAAC;IAEM,KAAK,CAAC,MAAM,CAAC,GAAW;QAC7B,OAAO,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IAC5B,CAAC;IAEM,KAAK,CAAC,OAAO;QAClB,OAAO,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;IAC5B,CAAC;IAEM,KAAK,CAAC,cAAc,CACzB,YAAoB;QAEpB,MAAM,QAAQ,GAAgB,EAAE,CAAC;QACjC,KAAK,MAAM,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,CAAC;YACrC,IAAI,GAAG,CAAC,aAAa,KAAK,YAAY,EAAE,CAAC;gBACvC,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YACrB,CAAC;QACH,CAAC;QACD,OAAO,QAAQ,CAAC;IAClB,CAAC;IAEM,KAAK,CAAC,oBAAoB;QAC/B,MAAM,OAAO,GAAG,IAAI,GAAG,EAAuB,CAAC;QAC/C,KAAK,MAAM,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,CAAC;YACrC,MAAM,YAAY,GAAG,GAAG,CAAC,aAAa,CAAC;YACvC,IAAI,OAAO,YAAY,KAAK,QAAQ,EAAE,CAAC;gBACrC,SAAS;YACX,CAAC;YACD,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC,EAAE,CAAC;gBAC/B,OAAO,CAAC,GAAG,CAAC,YAAY,EAAE,EAAE,CAAC,CAAC;YAChC,CAAC;YACD,OAAO,CAAC,GAAG,CAAC,YAAY,CAAE,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACvC,CAAC;QACD,OAAO,MAAM,CAAC,WAAW,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC;IAC/C,CAAC;IAEM,KAAK,CAAC,iBAAiB,CAAC,YAAoB;QACjD,MAAM,YAAY,GAAa,EAAE,CAAC;QAClC,KAAK,MAAM,CAAC,GAAG,EAAE,GAAG,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,CAAC;YAC7C,IAAI,GAAG,CAAC,aAAa,KAAK,YAAY,EAAE,CAAC;gBACvC,YAAY,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YACzB,CAAC;QACH,CAAC;QAED,KAAK,MAAM,GAAG,IAAI,YAAY,EAAE,CAAC;YAC/B,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QACxB,CAAC;QAED,IAAI,YAAY,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC5B,MAAM,CAAC,KAAK,CAAC,uBAAuB,EAAE;gBACpC,aAAa,EAAE,YAAY;gBAC3B,eAAe,EAAE,YAAY;gBAC7B,KAAK,EAAE,YAAY,CAAC,MAAM;aAC3B,CAAC,CAAC;QACL,CAAC;QAED,OAAO,YAAY,CAAC,MAAM,CAAC;IAC7B,CAAC;IAEM,KAAK,CAAC,SAAS,CAAC,GAAW;QAChC,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QACtC,IAAI,OAAO,EAAE,CAAC;YACZ,MAAM,CAAC,KAAK,CAAC,wBAAwB,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC;QAClD,CAAC;QACD,OAAO,OAAO,CAAC;IACjB,CAAC;IAEO,QAAQ,CAAC,GAAW,EAAE,GAAc;QAC1C,MAAM,KAAK,GAAG;YACZ,GAAI,GAA+B;YACnC,GAAG;SACsC,CAAC;QAE5C,IACG,KAAiC,CAAC,aAAa,KAAK,SAAS;YAC9D,KAAK,CAAC,YAAY,KAAK,SAAS,EAChC,CAAC;YACD,MAAM,YAAY,GAAG,KAAK,CAAC,YAAY,CAAC;YACvC,KAAiC,CAAC,aAAa;gBAC9C,OAAO,YAAY,KAAK,QAAQ;oBAC9B,CAAC,CAAC,YAAY;oBACd,CAAC,CAAC,YAAY,IAAI,IAAI;wBACpB,CAAC,CAAC,MAAM,CAAC,YAAY,CAAC;wBACtB,CAAC,CAAC,SAAS,CAAC;QACpB,CAAC;QAED,IAAI,cAAc,IAAI,KAAK,EAAE,CAAC;YAC5B,OAAQ,KAAiC,CAAC,YAAY,CAAC;QACzD,CAAC;QAED,OAAO,KAAkB,CAAC;IAC5B,CAAC;CACF;AA5ND,4CA4NC"}