@nextera.one/axis-server-sdk 2.3.5 → 2.3.7

package/dist/cce/index.mjs

@@ -732,13 +732,13 @@ var CceEnvelopeValidationSensor = class {
     this.order = 5;
     this.phase = "PRE_DECODE";
   }
-  async supports(input) {
-    return input.metadata?.cce === true || input.metadata?.contentType === "application/axis-cce" ? { action: "ALLOW" } : {
-      action: "DENY",
-      code: "SENSOR_NOT_APPLICABLE",
-      reason: "Not a CCE envelope"
-    };
+  // supports() is a synchronous applicability gate.
+  // Return false to skip this sensor without producing a denial.
+  supports(input) {
+    return input.metadata?.cce === true || input.metadata?.contentType === "application/axis-cce";
   }
+  // run() executes only after supports() passes.
+  // Return the actual ALLOW/DENY/FLAG/THROTTLE decision here.
   async run(input) {
     const envelope = input.metadata?.cceEnvelope;
     if (!envelope) {
@@ -824,13 +824,13 @@ var CceClientSignatureSensor = class {
     this.order = 45;
     this.phase = "POST_DECODE";
   }
-  async supports(input) {
-    return input.metadata?.cceEnvelopeValid === true ? { action: "ALLOW" } : {
-      action: "DENY",
-      code: "SENSOR_NOT_APPLICABLE",
-      reason: "CCE envelope not validated"
-    };
+  // supports() is a synchronous applicability gate.
+  // Return false to skip this sensor without producing a denial.
+  supports(input) {
+    return input.metadata?.cceEnvelopeValid === true;
   }
+  // run() executes only after supports() passes.
+  // Return the actual ALLOW/DENY/FLAG/THROTTLE decision here.
   async run(input) {
     const envelope = input.metadata?.cceEnvelope;
     if (!envelope) {
@@ -905,13 +905,13 @@ var CceCapsuleVerificationSensor = class {
     this.order = 50;
     this.phase = "POST_DECODE";
   }
-  async supports(input) {
-    return input.metadata?.cceEnvelopeValid === true ? { action: "ALLOW" } : {
-      action: "DENY",
-      code: CCE_ERROR.CAPSULE_NOT_VERIFIED,
-      reason: "CCE capsule not verified"
-    };
+  // supports() is a synchronous applicability gate.
+  // Return false to skip this sensor without producing a denial.
+  supports(input) {
+    return input.metadata?.cceEnvelopeValid === true;
   }
+  // run() executes only after supports() passes.
+  // Return the actual ALLOW/DENY/FLAG/THROTTLE decision here.
   async run(input) {
     const capsule = input.metadata?.cceEnvelope?.capsule;
     if (!capsule) {
@@ -1023,13 +1023,13 @@ var CceTpsWindowSensor = class {
     this.order = 92;
     this.phase = "POST_DECODE";
   }
-  async supports(input) {
-    return input.metadata?.cceCapsuleVerified === true ? { action: "ALLOW" } : {
-      action: "DENY",
-      code: "SENSOR_NOT_APPLICABLE",
-      reason: "CCE capsule not verified"
-    };
+  // supports() is a synchronous applicability gate.
+  // Return false to skip this sensor without producing a denial.
+  supports(input) {
+    return input.metadata?.cceCapsuleVerified === true;
   }
+  // run() executes only after supports() passes.
+  // Return the actual ALLOW/DENY/FLAG/THROTTLE decision here.
   async run(input) {
     const capsule = input.metadata?.cceCapsule;
     if (!capsule) {
@@ -1080,13 +1080,13 @@ var CceAudienceIntentBindingSensor = class {
     this.order = 95;
     this.phase = "POST_DECODE";
   }
-  async supports(input) {
-    return input.metadata?.cceCapsuleVerified === true ? { action: "ALLOW" } : {
-      action: "DENY",
-      code: CCE_ERROR.CAPSULE_NOT_VERIFIED,
-      reason: "CCE capsule not verified"
-    };
+  // supports() is a synchronous applicability gate.
+  // Return false to skip this sensor without producing a denial.
+  supports(input) {
+    return input.metadata?.cceCapsuleVerified === true;
   }
+  // run() executes only after supports() passes.
+  // Return the actual ALLOW/DENY/FLAG/THROTTLE decision here.
   async run(input) {
     const capsule = input.metadata?.cceCapsule;
     const envelope = input.metadata?.cceEnvelope;
@@ -1181,13 +1181,13 @@ var CceReplayProtectionSensor = class {
     this.phase = "POST_DECODE";
     this.nonceTtlMs = options?.nonceTtlMs ?? 5 * 60 * 1e3;
   }
-  async supports(input) {
-    return input.metadata?.cceCapsuleVerified === true ? { action: "ALLOW" } : {
-      action: "DENY",
-      code: "SENSOR_NOT_APPLICABLE",
-      reason: "CCE capsule not verified"
-    };
+  // supports() is a synchronous applicability gate.
+  // Return false to skip this sensor without producing a denial.
+  supports(input) {
+    return input.metadata?.cceCapsuleVerified === true;
   }
+  // run() executes only after supports() passes.
+  // Return the actual ALLOW/DENY/FLAG/THROTTLE decision here.
   async run(input) {
     const capsule = input.metadata?.cceCapsule;
     const envelope = input.metadata?.cceEnvelope;
@@ -1265,13 +1265,13 @@ var CcePayloadDecryptionSensor = class {
     this.order = 145;
     this.phase = "POST_DECODE";
   }
-  async supports(input) {
-    return input.metadata?.cceEnvelopeValid === true && input.metadata?.cceClientSigVerified === true && input.metadata?.cceCapsuleVerified === true && input.metadata?.cceReplayClean === true ? { action: "ALLOW" } : {
-      action: "DENY",
-      code: "SENSOR_NOT_APPLICABLE",
-      reason: "CCE preconditions not met"
-    };
+  // supports() is a synchronous applicability gate.
+  // Return false to skip this sensor without producing a denial.
+  supports(input) {
+    return input.metadata?.cceEnvelopeValid === true && input.metadata?.cceClientSigVerified === true && input.metadata?.cceCapsuleVerified === true && input.metadata?.cceReplayClean === true;
   }
+  // run() executes only after supports() passes.
+  // Return the actual ALLOW/DENY/FLAG/THROTTLE decision here.
   async run(input) {
     const envelope = input.metadata?.cceEnvelope;
     if (!envelope) {