@node-c/domain-iam 1.0.0-alpha3

package/dist/services/authorization/iam.authorization.service.js

@@ -0,0 +1,222 @@
+"use strict";
+var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
+    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
+    return new (P || (P = Promise))(function (resolve, reject) {
+        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
+        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
+        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
+        step((generator = generator.apply(thisArg, _arguments || [])).next());
+    });
+};
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.IAMAuthorizationService = void 0;
+const core_1 = require("@node-c/core");
+const general_tools_1 = require("@ramster/general-tools");
+const immutable_1 = __importDefault(require("immutable"));
+const ramda_1 = require("ramda");
+class IAMAuthorizationService {
+    constructor(persistanceAuthorizationPointsService) {
+        this.persistanceAuthorizationPointsService = persistanceAuthorizationPointsService;
+    }
+    static checkAccess(accessPoints, inputData, user) {
+        const userPermissionsData = user.currentAuthorizationPoints;
+        let hasAccess = false;
+        const inputDataToBeMutated = {};
+        const mutatedInputData = immutable_1.default.fromJS(inputData).toJS();
+        for (const acpId in accessPoints) {
+            const acpData = userPermissionsData[acpId];
+            if (!acpData) {
+                continue;
+            }
+            const { allowedInputData, forbiddenInputData, inputDataFieldName, requiredStaticData, userFieldName } = acpData;
+            const hasStaticData = requiredStaticData && Object.keys(requiredStaticData).length;
+            const innerMutatedInputData = immutable_1.default.fromJS(mutatedInputData).toJS();
+            const innerInputDataToBeMutated = {};
+            if (allowedInputData && Object.keys(allowedInputData).length) {
+                const values = IAMAuthorizationService.matchInputValues(innerMutatedInputData, allowedInputData);
+                for (const key in values) {
+                    innerInputDataToBeMutated[key] = values[key];
+                    (0, general_tools_1.setNested)(innerMutatedInputData, key, values[key], { removeNestedFieldEscapeSign: true });
+                }
+            }
+            if (forbiddenInputData && Object.keys(forbiddenInputData).length) {
+                const values = IAMAuthorizationService.matchInputValues(innerMutatedInputData, forbiddenInputData);
+                for (const key in values) {
+                    innerInputDataToBeMutated[key] = undefined;
+                    (0, general_tools_1.setNested)(innerMutatedInputData, key, undefined, { removeNestedFieldEscapeSign: true });
+                }
+            }
+            if (hasStaticData) {
+                for (const fieldName in requiredStaticData) {
+                    if (!IAMAuthorizationService.testValue((0, general_tools_1.getNested)({ inputData: innerMutatedInputData, user }, fieldName, { removeNestedFieldEscapeSign: true }), requiredStaticData[fieldName])) {
+                        hasAccess = false;
+                        break;
+                    }
+                    if (!hasAccess) {
+                        hasAccess = true;
+                    }
+                }
+                if (hasAccess) {
+                    hasAccess = false;
+                }
+                else {
+                    continue;
+                }
+            }
+            if (userFieldName) {
+                if (!inputDataFieldName) {
+                    continue;
+                }
+                const userFieldValue = (0, general_tools_1.getNested)(user, userFieldName, { removeNestedFieldEscapeSign: true }), inputFieldValue = (0, general_tools_1.getNested)(innerMutatedInputData, inputDataFieldName, { removeNestedFieldEscapeSign: true });
+                if (typeof userFieldValue === 'undefined' || typeof inputFieldValue === 'undefined') {
+                    continue;
+                }
+                const inputValueIsArray = inputFieldValue instanceof Array, valuesToTest = inputValueIsArray ? inputFieldValue : [inputFieldValue], valuesToTestAgainst = userFieldValue instanceof Array ? userFieldValue : [userFieldValue];
+                const allowedValues = [];
+                valuesToTest.forEach((valueToTest) => {
+                    const valueToTestVariants = IAMAuthorizationService.getValuesForTesting(valueToTest);
+                    for (const j in valuesToTestAgainst) {
+                        const valueToTestAgainst = valuesToTestAgainst[j];
+                        let matchFound = false;
+                        for (const k in valueToTestVariants) {
+                            const variant = valueToTestVariants[k];
+                            if (valueToTestAgainst === variant) {
+                                allowedValues.push(variant);
+                                matchFound = true;
+                                break;
+                            }
+                        }
+                        if (matchFound) {
+                            break;
+                        }
+                    }
+                });
+                if (!allowedValues.length) {
+                    continue;
+                }
+                if (inputValueIsArray) {
+                    innerInputDataToBeMutated[inputDataFieldName] = allowedValues;
+                    (0, general_tools_1.setNested)(mutatedInputData, inputDataFieldName, allowedValues, { removeNestedFieldEscapeSign: true });
+                }
+                hasAccess = true;
+                (0, ramda_1.mergeDeepRight)(innerInputDataToBeMutated, innerInputDataToBeMutated);
+                break;
+            }
+        }
+        return { hasAccess, inputDataToBeMutated };
+    }
+    static getValuesForTesting(valueToTest) {
+        const values = [
+            valueToTest,
+            parseInt(valueToTest, 10),
+            parseFloat(valueToTest)
+        ];
+        if (valueToTest === 'true') {
+            values.push(true);
+        }
+        else if (valueToTest === 'false') {
+            values.push(false);
+        }
+        return values;
+    }
+    mapAuthorizationPoints(moduleName) {
+        return __awaiter(this, void 0, void 0, function* () {
+            const { items: acpList } = yield this.persistanceAuthorizationPointsService.find({
+                filters: { moduleNames: { [core_1.PersistanceSelectOperator.Contains]: moduleName } },
+                findAll: true
+            });
+            const authorizationData = { __all: { __all: {} } };
+            const moduleGlobalData = authorizationData.__all.__all;
+            acpList.forEach(item => {
+                if (!item.controllerNames) {
+                    moduleGlobalData[item.id] = item;
+                    return;
+                }
+                item.controllerNames.forEach(ctlName => {
+                    let ctlData = authorizationData[ctlName];
+                    if (!ctlData) {
+                        ctlData = { __all: {} };
+                        authorizationData[ctlName] = ctlData;
+                    }
+                    if (!item.handlerNames) {
+                        ctlData.__all[item.id] = item;
+                        return;
+                    }
+                    item.handlerNames.forEach(hName => {
+                        let hData = ctlData[hName];
+                        if (!hData) {
+                            hData = {};
+                            ctlData[hName] = hData;
+                        }
+                        hData[item.id] = item;
+                    });
+                });
+            });
+            return authorizationData;
+        });
+    }
+    static matchInputValues(input, values) {
+        const mutatedInput = immutable_1.default.fromJS(input).toJS();
+        for (const fieldName in values) {
+            const value = (0, general_tools_1.getNested)(input, fieldName, { removeNestedFieldEscapeSign: true });
+            const allowedValue = values[fieldName];
+            const allowedValues = allowedValue instanceof Array ? allowedValue : [allowedValue];
+            let valueIsArray = false;
+            let valuesToCheck = [];
+            const valuesToSet = [];
+            if (value instanceof Array) {
+                valuesToCheck = value;
+                valueIsArray = true;
+            }
+            else {
+                valuesToCheck.push(value);
+            }
+            valuesToCheck.forEach(valueToCheck => {
+                const valueToCheckVariants = IAMAuthorizationService.getValuesForTesting(valueToCheck);
+                for (const i in valueToCheckVariants) {
+                    const actualValueToCheck = valueToCheckVariants[i];
+                    let checkPassed = false;
+                    for (const j in allowedValues) {
+                        if (IAMAuthorizationService.testValue(actualValueToCheck, allowedValues[j])) {
+                            valuesToSet.push(valueToCheck);
+                            checkPassed = true;
+                            break;
+                        }
+                    }
+                    if (checkPassed) {
+                        break;
+                    }
+                }
+            });
+            if (!valuesToSet.length) {
+                (0, general_tools_1.setNested)(mutatedInput, fieldName, undefined, { removeNestedFieldEscapeSign: true });
+                continue;
+            }
+            (0, general_tools_1.setNested)(mutatedInput, fieldName, valueIsArray ? valuesToSet : valuesToSet[0], {
+                removeNestedFieldEscapeSign: true
+            });
+        }
+        return mutatedInput;
+    }
+    static testValue(valueToTest, valueToTestAgainst) {
+        if (typeof valueToTest === 'string' &&
+            typeof valueToTestAgainst === 'string' &&
+            valueToTest.charAt(0) === '/' &&
+            valueToTest.charAt(valueToTest.length - 1) === '/') {
+            const regex = new RegExp(valueToTest);
+            return regex.test(valueToTestAgainst);
+        }
+        const possibleValidValues = IAMAuthorizationService.getValuesForTesting(valueToTest);
+        for (const i in possibleValidValues) {
+            if (possibleValidValues[i] === valueToTestAgainst) {
+                return true;
+            }
+        }
+        return false;
+    }
+}
+exports.IAMAuthorizationService = IAMAuthorizationService;
+//# sourceMappingURL=iam.authorization.service.js.map

package/dist/services/authorization/iam.authorization.service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"iam.authorization.service.js","sourceRoot":"","sources":["../../../src/services/authorization/iam.authorization.service.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;AAAA,uCAAkG;AAElG,0DAA8D;AAE9D,0DAAkC;AAClC,iCAAgD;AAQhD,MAAa,uBAAuB;IAClC,YAEY,qCAAmF;QAAnF,0CAAqC,GAArC,qCAAqC,CAA8C;IAC5F,CAAC;IAEJ,MAAM,CAAC,WAAW,CAChB,YAA+D,EAC/D,SAAwB,EACxB,IAAgC;QAKhC,MAAM,mBAAmB,GAAG,IAAI,CAAC,0BAA2B,CAAC;QAC7D,IAAI,SAAS,GAAG,KAAK,CAAC;QACtB,MAAM,oBAAoB,GAAkB,EAAE,CAAC;QAC/C,MAAM,gBAAgB,GAAG,mBAAS,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,IAAI,EAAE,CAAC;QAC5D,KAAK,MAAM,KAAK,IAAI,YAAY,EAAE,CAAC;YACjC,MAAM,OAAO,GAAG,mBAAmB,CAAC,KAAK,CAAC,CAAC;YAC3C,IAAI,CAAC,OAAO,EAAE,CAAC;gBACb,SAAS;YACX,CAAC;YACD,MAAM,EAAE,gBAAgB,EAAE,kBAAkB,EAAE,kBAAkB,EAAE,kBAAkB,EAAE,aAAa,EAAE,GAAG,OAAO,CAAC;YAChH,MAAM,aAAa,GAAG,kBAAkB,IAAI,MAAM,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC,MAAM,CAAC;YACnF,MAAM,qBAAqB,GAAG,mBAAS,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC,IAAI,EAAE,CAAC;YACxE,MAAM,yBAAyB,GAAkB,EAAE,CAAC;YACpD,IAAI,gBAAgB,IAAI,MAAM,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC,MAAM,EAAE,CAAC;gBAC7D,MAAM,MAAM,GAAG,uBAAuB,CAAC,gBAAgB,CAAC,qBAAqB,EAAE,gBAAgB,CAAC,CAAC;gBACjG,KAAK,MAAM,GAAG,IAAI,MAAM,EAAE,CAAC;oBACzB,yBAAyB,CAAC,GAAG,CAAC,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;oBAC7C,IAAA,yBAAS,EAAC,qBAAqB,EAAE,GAAG,EAAE,MAAM,CAAC,GAAG,CAAC,EAAE,EAAE,2BAA2B,EAAE,IAAI,EAAE,CAAC,CAAC;gBAC5F,CAAC;YACH,CAAC;YACD,IAAI,kBAAkB,IAAI,MAAM,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC,MAAM,EAAE,CAAC;gBACjE,MAAM,MAAM,GAAG,uBAAuB,CAAC,gBAAgB,CAAC,qBAAqB,EAAE,kBAAkB,CAAC,CAAC;gBACnG,KAAK,MAAM,GAAG,IAAI,MAAM,EAAE,CAAC;oBACzB,yBAAyB,CAAC,GAAG,CAAC,GAAG,SAAS,CAAC;oBAC3C,IAAA,yBAAS,EAAC,qBAAqB,EAAE,GAAG,EAAE,SAAS,EAAE,EAAE,2BAA2B,EAAE,IAAI,EAAE,CAAC,CAAC;gBAC1F,CAAC;YACH,CAAC;YACD,IAAI,aAAa,EAAE,CAAC;gBAClB,KAAK,MAAM,SAAS,IAAI,kBAAkB,EAAE,CAAC;oBAC3C,IACE,CAAC,uBAAuB,CAAC,SAAS,CAChC,IAAA,yBAAS,EAAC,EAAE,SAAS,EAAE,qBAAqB,EAAE,IAAI,EAAE,EAAE,SAAS,EAAE,EAAE,2BAA2B,EAAE,IAAI,EAAE,CAAC,EACvG,kBAAkB,CAAC,SAAS,CAAC,CAC9B,EACD,CAAC;wBACD,SAAS,GAAG,KAAK,CAAC;wBAClB,MAAM;oBACR,CAAC;oBACD,IAAI,CAAC,SAAS,EAAE,CAAC;wBACf,SAAS,GAAG,IAAI,CAAC;oBACnB,CAAC;gBACH,CAAC;gBACD,IAAI,SAAS,EAAE,CAAC;oBACd,SAAS,GAAG,KAAK,CAAC;gBACpB,CAAC;qBAAM,CAAC;oBACN,SAAS;gBACX,CAAC;YACH,CAAC;YACD,IAAI,aAAa,EAAE,CAAC;gBAClB,IAAI,CAAC,kBAAkB,EAAE,CAAC;oBACxB,SAAS;gBACX,CAAC;gBACD,MAAM,cAAc,GAAG,IAAA,yBAAS,EAAC,IAAI,EAAE,aAAa,EAAE,EAAE,2BAA2B,EAAE,IAAI,EAAE,CAAC,EAC1F,eAAe,GAAG,IAAA,yBAAS,EAAC,qBAAqB,EAAE,kBAAkB,EAAE,EAAE,2BAA2B,EAAE,IAAI,EAAE,CAAC,CAAC;gBAChH,IAAI,OAAO,cAAc,KAAK,WAAW,IAAI,OAAO,eAAe,KAAK,WAAW,EAAE,CAAC;oBACpF,SAAS;gBACX,CAAC;gBACD,MAAM,iBAAiB,GAAG,eAAe,YAAY,KAAK,EACxD,YAAY,GAAG,iBAAiB,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,eAAe,CAAC,EACtE,mBAAmB,GAAG,cAAc,YAAY,KAAK,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC;gBAC5F,MAAM,aAAa,GAAc,EAAE,CAAC;gBACpC,YAAY,CAAC,OAAO,CAAC,CAAC,WAAoB,EAAE,EAAE;oBAC5C,MAAM,mBAAmB,GAAG,uBAAuB,CAAC,mBAAmB,CAAC,WAAW,CAAC,CAAC;oBACrF,KAAK,MAAM,CAAC,IAAI,mBAAmB,EAAE,CAAC;wBACpC,MAAM,kBAAkB,GAAG,mBAAmB,CAAC,CAAC,CAAC,CAAC;wBAClD,IAAI,UAAU,GAAG,KAAK,CAAC;wBACvB,KAAK,MAAM,CAAC,IAAI,mBAAmB,EAAE,CAAC;4BACpC,MAAM,OAAO,GAAG,mBAAmB,CAAC,CAAC,CAAC,CAAC;4BACvC,IAAI,kBAAkB,KAAK,OAAO,EAAE,CAAC;gCACnC,aAAa,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;gCAC5B,UAAU,GAAG,IAAI,CAAC;gCAClB,MAAM;4BACR,CAAC;wBACH,CAAC;wBACD,IAAI,UAAU,EAAE,CAAC;4BACf,MAAM;wBACR,CAAC;oBACH,CAAC;gBACH,CAAC,CAAC,CAAC;gBACH,IAAI,CAAC,aAAa,CAAC,MAAM,EAAE,CAAC;oBAC1B,SAAS;gBACX,CAAC;gBACD,IAAI,iBAAiB,EAAE,CAAC;oBACtB,yBAAyB,CAAC,kBAAkB,CAAC,GAAG,aAAa,CAAC;oBAC9D,IAAA,yBAAS,EAAC,gBAAgB,EAAE,kBAAkB,EAAE,aAAa,EAAE,EAAE,2BAA2B,EAAE,IAAI,EAAE,CAAC,CAAC;gBACxG,CAAC;gBACD,SAAS,GAAG,IAAI,CAAC;gBACjB,IAAA,sBAAK,EAAC,yBAAyB,EAAE,yBAAyB,CAAC,CAAC;gBAC5D,MAAM;YACR,CAAC;QACH,CAAC;QACD,OAAO,EAAE,SAAS,EAAE,oBAAoB,EAAE,CAAC;IAC7C,CAAC;IAED,MAAM,CAAC,mBAAmB,CAAC,WAAoB;QAC7C,MAAM,MAAM,GAAG;YACb,WAAW;YACX,QAAQ,CAAC,WAAqB,EAAE,EAAE,CAAC;YACnC,UAAU,CAAC,WAAqB,CAAC;SAClC,CAAC;QAEF,IAAI,WAAW,KAAK,MAAM,EAAE,CAAC;YAC3B,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACpB,CAAC;aAAM,IAAI,WAAW,KAAK,OAAO,EAAE,CAAC;YACnC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACrB,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;IAEK,sBAAsB,CAAC,UAAkB;;YAC7C,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,GAAG,MAAM,IAAI,CAAC,qCAAqC,CAAC,IAAI,CAAC;gBAC/E,OAAO,EAAE,EAAE,WAAW,EAAE,EAAE,CAAC,gCAAyB,CAAC,QAAQ,CAAC,EAAE,UAAU,EAAE,EAAE;gBAC9E,OAAO,EAAE,IAAI;aACd,CAAC,CAAC;YACH,MAAM,iBAAiB,GAA+B,EAAE,KAAK,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE,CAAC;YAC/E,MAAM,gBAAgB,GAAG,iBAAiB,CAAC,KAAK,CAAC,KAAK,CAAC;YACvD,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE;gBACrB,IAAI,CAAC,IAAI,CAAC,eAAe,EAAE,CAAC;oBAC1B,gBAAgB,CAAC,IAAI,CAAC,EAAY,CAAC,GAAG,IAAI,CAAC;oBAC3C,OAAO;gBACT,CAAC;gBACD,IAAI,CAAC,eAAe,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE;oBACrC,IAAI,OAAO,GAAG,iBAAiB,CAAC,OAAO,CAAC,CAAC;oBACzC,IAAI,CAAC,OAAO,EAAE,CAAC;wBACb,OAAO,GAAG,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC;wBACxB,iBAAiB,CAAC,OAAO,CAAC,GAAG,OAAO,CAAC;oBACvC,CAAC;oBACD,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,CAAC;wBACvB,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,EAAY,CAAC,GAAG,IAAI,CAAC;wBACxC,OAAO;oBACT,CAAC;oBACD,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE;wBAChC,IAAI,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC;wBAC3B,IAAI,CAAC,KAAK,EAAE,CAAC;4BACX,KAAK,GAAG,EAAE,CAAC;4BACX,OAAO,CAAC,KAAK,CAAC,GAAG,KAAK,CAAC;wBACzB,CAAC;wBACD,KAAK,CAAC,IAAI,CAAC,EAAY,CAAC,GAAG,IAAI,CAAC;oBAClC,CAAC,CAAC,CAAC;gBACL,CAAC,CAAC,CAAC;YACL,CAAC,CAAC,CAAC;YACH,OAAO,iBAAiB,CAAC;QAC3B,CAAC;KAAA;IAED,MAAM,CAAC,gBAAgB,CAAC,KAAoB,EAAE,MAAqB;QACjE,MAAM,YAAY,GAAG,mBAAS,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,CAAC;QACpD,KAAK,MAAM,SAAS,IAAI,MAAM,EAAE,CAAC;YAC/B,MAAM,KAAK,GAAG,IAAA,yBAAS,EAAC,KAAK,EAAE,SAAS,EAAE,EAAE,2BAA2B,EAAE,IAAI,EAAE,CAAC,CAAC;YACjF,MAAM,YAAY,GAAG,MAAM,CAAC,SAAS,CAAC,CAAC;YACvC,MAAM,aAAa,GAAG,YAAY,YAAY,KAAK,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC;YACpF,IAAI,YAAY,GAAG,KAAK,CAAC;YACzB,IAAI,aAAa,GAAc,EAAE,CAAC;YAClC,MAAM,WAAW,GAAc,EAAE,CAAC;YAClC,IAAI,KAAK,YAAY,KAAK,EAAE,CAAC;gBAC3B,aAAa,GAAG,KAAK,CAAC;gBACtB,YAAY,GAAG,IAAI,CAAC;YACtB,CAAC;iBAAM,CAAC;gBACN,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YAC5B,CAAC;YACD,aAAa,CAAC,OAAO,CAAC,YAAY,CAAC,EAAE;gBACnC,MAAM,oBAAoB,GAAG,uBAAuB,CAAC,mBAAmB,CAAC,YAAY,CAAC,CAAC;gBACvF,KAAK,MAAM,CAAC,IAAI,oBAAoB,EAAE,CAAC;oBACrC,MAAM,kBAAkB,GAAG,oBAAoB,CAAC,CAAC,CAAC,CAAC;oBACnD,IAAI,WAAW,GAAG,KAAK,CAAC;oBACxB,KAAK,MAAM,CAAC,IAAI,aAAa,EAAE,CAAC;wBAC9B,IAAI,uBAAuB,CAAC,SAAS,CAAC,kBAAkB,EAAE,aAAa,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;4BAC5E,WAAW,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;4BAC/B,WAAW,GAAG,IAAI,CAAC;4BACnB,MAAM;wBACR,CAAC;oBACH,CAAC;oBACD,IAAI,WAAW,EAAE,CAAC;wBAChB,MAAM;oBACR,CAAC;gBACH,CAAC;YACH,CAAC,CAAC,CAAC;YACH,IAAI,CAAC,WAAW,CAAC,MAAM,EAAE,CAAC;gBACxB,IAAA,yBAAS,EAAC,YAAY,EAAE,SAAS,EAAE,SAAS,EAAE,EAAE,2BAA2B,EAAE,IAAI,EAAE,CAAC,CAAC;gBACrF,SAAS;YACX,CAAC;YACD,IAAA,yBAAS,EAAC,YAAY,EAAE,SAAS,EAAE,YAAY,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE;gBAC9E,2BAA2B,EAAE,IAAI;aAClC,CAAC,CAAC;QACL,CAAC;QACD,OAAO,YAAY,CAAC;IACtB,CAAC;IAED,MAAM,CAAC,SAAS,CAAC,WAAoB,EAAE,kBAA2B;QAChE,IACE,OAAO,WAAW,KAAK,QAAQ;YAC/B,OAAO,kBAAkB,KAAK,QAAQ;YACtC,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,GAAG;YAC7B,WAAW,CAAC,MAAM,CAAC,WAAW,CAAC,MAAM,GAAG,CAAC,CAAC,KAAK,GAAG,EAClD,CAAC;YACD,MAAM,KAAK,GAAG,IAAI,MAAM,CAAC,WAAW,CAAC,CAAC;YACtC,OAAO,KAAK,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC;QACxC,CAAC;QACD,MAAM,mBAAmB,GAAG,uBAAuB,CAAC,mBAAmB,CAAC,WAAW,CAAC,CAAC;QACrF,KAAK,MAAM,CAAC,IAAI,mBAAmB,EAAE,CAAC;YACpC,IAAI,mBAAmB,CAAC,CAAC,CAAC,KAAK,kBAAkB,EAAE,CAAC;gBAClD,OAAO,IAAI,CAAC;YACd,CAAC;QACH,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;CACF;AA3ND,0DA2NC"}

package/dist/services/authorization/index.d.ts

@@ -0,0 +1,2 @@
+export * from './iam.authorization.definitions';
+export * from './iam.authorization.service';

package/dist/services/authorization/index.js

@@ -0,0 +1,19 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __exportStar = (this && this.__exportStar) || function(m, exports) {
+    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+__exportStar(require("./iam.authorization.definitions"), exports);
+__exportStar(require("./iam.authorization.service"), exports);
+//# sourceMappingURL=index.js.map

package/dist/services/authorization/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/services/authorization/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,kEAAgD;AAChD,8DAA4C"}

package/dist/services/index.d.ts

@@ -0,0 +1,5 @@
+export * from './authentication';
+export * from './authenticationLocal';
+export * from './authorization';
+export * from './tokenManager';
+export * from './users';

package/dist/services/index.js

@@ -0,0 +1,22 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __exportStar = (this && this.__exportStar) || function(m, exports) {
+    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+__exportStar(require("./authentication"), exports);
+__exportStar(require("./authenticationLocal"), exports);
+__exportStar(require("./authorization"), exports);
+__exportStar(require("./tokenManager"), exports);
+__exportStar(require("./users"), exports);
+//# sourceMappingURL=index.js.map

package/dist/services/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/services/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,mDAAiC;AACjC,wDAAsC;AACtC,kDAAgC;AAChC,iDAA+B;AAC/B,0CAAwB"}

package/dist/services/tokenManager/iam.tokenManager.definitions.d.ts

@@ -0,0 +1,34 @@
+import { DomainCreateOptions } from '@node-c/core';
+export type DecodedTokenContent<TokenEntityFields> = {
+    exp?: number;
+    iat: number;
+    data?: TokenEntityFields;
+};
+export type TokenEntity<TokenEntityFields extends object> = {
+    token: string;
+    type: TokenType;
+} & TokenEntityFields;
+export type TokenManagerCreateData<TokenEntityFields extends object> = Partial<Omit<TokenEntity<TokenEntityFields>, 'token'>>;
+export type TokenManagerCreateOptions = {
+    expiresInMinutes?: number;
+    identifierDataField?: string;
+    persist?: boolean;
+    purgeOldFromPersistance?: boolean;
+} & DomainCreateOptions;
+export declare enum TokenType {
+    Access = "access",
+    Refresh = "refresh"
+}
+export interface VerifyAccessTokenOptions {
+    deleteFromStoreIfExpired?: boolean;
+    identifierDataField?: string;
+    newTokenExpiresInMinutes?: number;
+    persistNewToken?: boolean;
+    purgeStoreOnRenew?: boolean;
+    refreshToken?: string;
+    refreshTokenAccessTokenIdentifierDataField?: string;
+}
+export interface VerifyAccessTokenReturnData<TokenEntityFields> {
+    content?: DecodedTokenContent<TokenEntityFields>;
+    newToken?: string;
+}

package/dist/services/tokenManager/iam.tokenManager.definitions.js

@@ -0,0 +1,9 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.TokenType = void 0;
+var TokenType;
+(function (TokenType) {
+    TokenType["Access"] = "access";
+    TokenType["Refresh"] = "refresh";
+})(TokenType || (exports.TokenType = TokenType = {}));
+//# sourceMappingURL=iam.tokenManager.definitions.js.map

package/dist/services/tokenManager/iam.tokenManager.definitions.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"iam.tokenManager.definitions.js","sourceRoot":"","sources":["../../../src/services/tokenManager/iam.tokenManager.definitions.ts"],"names":[],"mappings":";;;AAwBA,IAAY,SAKX;AALD,WAAY,SAAS;IAEnB,8BAAiB,CAAA;IAEjB,gCAAmB,CAAA;AACrB,CAAC,EALW,SAAS,yBAAT,SAAS,QAKpB"}

package/dist/services/tokenManager/iam.tokenManager.service.d.ts

@@ -0,0 +1,14 @@
+import { ConfigProviderService, DomainCreateResult, DomainEntityService, PersistanceEntityService } from '@node-c/core';
+import { DecodedTokenContent, TokenEntity, TokenManagerCreateData, TokenManagerCreateOptions, VerifyAccessTokenOptions, VerifyAccessTokenReturnData } from './iam.tokenManager.definitions';
+export declare class IAMTokenManagerService<TokenEntityFields extends object> extends DomainEntityService<TokenEntity<TokenEntityFields>, PersistanceEntityService<TokenEntity<TokenEntityFields>>> {
+    protected configProvider: ConfigProviderService;
+    protected moduleName: string;
+    protected persistanceEntityService: PersistanceEntityService<TokenEntity<TokenEntityFields>>;
+    constructor(configProvider: ConfigProviderService, moduleName: string, persistanceEntityService: PersistanceEntityService<TokenEntity<TokenEntityFields>>);
+    create(data: TokenManagerCreateData<TokenEntityFields>, options: TokenManagerCreateOptions): Promise<DomainCreateResult<TokenEntity<TokenEntityFields>>>;
+    verifyAccessToken(token: string, options?: VerifyAccessTokenOptions): Promise<VerifyAccessTokenReturnData<TokenEntityFields>>;
+    protected verify(token: string, secret: string): Promise<{
+        content?: DecodedTokenContent<TokenEntityFields>;
+        error?: unknown;
+    }>;
+}

package/dist/services/tokenManager/iam.tokenManager.service.js

@@ -0,0 +1,202 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
+    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
+    return new (P || (P = Promise))(function (resolve, reject) {
+        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
+        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
+        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
+        step((generator = generator.apply(thisArg, _arguments || [])).next());
+    });
+};
+var __rest = (this && this.__rest) || function (s, e) {
+    var t = {};
+    for (var p in s) if (Object.prototype.hasOwnProperty.call(s, p) && e.indexOf(p) < 0)
+        t[p] = s[p];
+    if (s != null && typeof Object.getOwnPropertySymbols === "function")
+        for (var i = 0, p = Object.getOwnPropertySymbols(s); i < p.length; i++) {
+            if (e.indexOf(p[i]) < 0 && Object.prototype.propertyIsEnumerable.call(s, p[i]))
+                t[p[i]] = s[p[i]];
+        }
+    return t;
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.IAMTokenManagerService = void 0;
+const core_1 = require("@node-c/core");
+const general_tools_1 = require("@ramster/general-tools");
+const jwt = __importStar(require("jsonwebtoken"));
+const iam_tokenManager_definitions_1 = require("./iam.tokenManager.definitions");
+class IAMTokenManagerService extends core_1.DomainEntityService {
+    constructor(configProvider, moduleName, persistanceEntityService) {
+        super(persistanceEntityService, undefined, []);
+        this.configProvider = configProvider;
+        this.moduleName = moduleName;
+        this.persistanceEntityService = persistanceEntityService;
+    }
+    create(data, options) {
+        const _super = Object.create(null, {
+            create: { get: () => super.create }
+        });
+        return __awaiter(this, void 0, void 0, function* () {
+            const { configProvider, moduleName, persistanceEntityService } = this;
+            const moduleConfig = configProvider.config.domain[moduleName];
+            const { type } = data, tokenData = __rest(data, ["type"]);
+            const { expiresInMinutes, identifierDataField, persist, purgeOldFromPersistance } = options;
+            const signOptions = {};
+            let secret;
+            if (type === iam_tokenManager_definitions_1.TokenType.Access) {
+                secret = moduleConfig.jwtAccessSecret;
+                if (expiresInMinutes) {
+                    signOptions.expiresIn = expiresInMinutes * 60;
+                }
+                else if (moduleConfig.accessTokenExpiryTimeInMinutes) {
+                    signOptions.expiresIn = moduleConfig.accessTokenExpiryTimeInMinutes * 60;
+                }
+            }
+            else if (type === iam_tokenManager_definitions_1.TokenType.Refresh) {
+                if (expiresInMinutes) {
+                    signOptions.expiresIn = expiresInMinutes * 60;
+                }
+                else if (moduleConfig.refreshTokenExpiryTimeInMinutes) {
+                    signOptions.expiresIn = moduleConfig.refreshTokenExpiryTimeInMinutes * 60;
+                }
+            }
+            else {
+                throw new core_1.ApplicationError(`[TokenManager.create]: Invalid token type - "${type}".`);
+            }
+            const token = yield new Promise((resolve, reject) => {
+                jwt.sign({ data }, secret, signOptions, (err, token) => {
+                    if (err) {
+                        console.error(err);
+                        reject(new core_1.ApplicationError('Failed to sign token.'));
+                        return;
+                    }
+                    resolve(token);
+                });
+            });
+            const objectToSave = Object.assign(Object.assign({}, tokenData), { token, type });
+            if (persist && persistanceEntityService) {
+                if (purgeOldFromPersistance && identifierDataField) {
+                    const identifierValue = (0, general_tools_1.getNested)(data, identifierDataField);
+                    if (typeof identifierValue !== 'undefined' && typeof identifierValue !== 'object') {
+                        yield persistanceEntityService.delete({
+                            filters: { [identifierDataField]: identifierValue }
+                        });
+                    }
+                }
+                yield _super.create.call(this, objectToSave);
+            }
+            return { result: objectToSave };
+        });
+    }
+    verifyAccessToken(token, options) {
+        return __awaiter(this, void 0, void 0, function* () {
+            const { configProvider, moduleName, persistanceEntityService } = this;
+            const moduleConfig = configProvider.config.domain[moduleName];
+            const { deleteFromStoreIfExpired, identifierDataField, newTokenExpiresInMinutes, persistNewToken, purgeStoreOnRenew, refreshToken, refreshTokenAccessTokenIdentifierDataField } = options || {};
+            const { content, error } = yield this.verify(token, moduleConfig.jwtAccessSecret);
+            let forceRenew = true;
+            let newToken;
+            if (error) {
+                let errorToThrow;
+                let throwError = true;
+                if (error === 'Token expired' && identifierDataField && (content === null || content === void 0 ? void 0 : content.data) && persistanceEntityService) {
+                    if (refreshToken && refreshTokenAccessTokenIdentifierDataField) {
+                        const { content: refreshTokenContent, error: refreshTokenError } = yield this.verify(refreshToken, moduleConfig.jwtRefreshSecret);
+                        if (refreshTokenError) {
+                            errorToThrow = refreshTokenError;
+                        }
+                        if (!refreshTokenContent) {
+                            errorToThrow = new core_1.ApplicationError('Empty refresh token.');
+                        }
+                        else {
+                            const refreshTokenCheckValue = (0, general_tools_1.getNested)(content.data, refreshTokenAccessTokenIdentifierDataField);
+                            if (refreshTokenCheckValue !== refreshToken) {
+                                errorToThrow = new core_1.ApplicationError('Mismatched refresh token.');
+                            }
+                            else {
+                                forceRenew = false;
+                                throwError = false;
+                            }
+                        }
+                    }
+                    else {
+                        if (deleteFromStoreIfExpired) {
+                            const identifierValue = (0, general_tools_1.getNested)(content.data, identifierDataField);
+                            if (typeof identifierValue !== 'undefined' && typeof identifierValue !== 'object') {
+                                yield persistanceEntityService.delete({
+                                    filters: { [identifierDataField]: identifierValue }
+                                });
+                            }
+                        }
+                        errorToThrow = new core_1.ApplicationError('Expired access token.');
+                    }
+                }
+                if (throwError) {
+                    throw errorToThrow || error;
+                }
+            }
+            if ((content === null || content === void 0 ? void 0 : content.data) && forceRenew) {
+                const tokenData = Object.assign(Object.assign({}, content.data), { type: iam_tokenManager_definitions_1.TokenType.Access });
+                if (refreshToken && refreshTokenAccessTokenIdentifierDataField) {
+                    tokenData[refreshTokenAccessTokenIdentifierDataField] = refreshToken;
+                }
+                const { result } = yield this.create(tokenData, {
+                    expiresInMinutes: newTokenExpiresInMinutes,
+                    identifierDataField,
+                    persist: persistNewToken,
+                    purgeOldFromPersistance: purgeStoreOnRenew
+                });
+                newToken = result.token;
+            }
+            return { content, newToken };
+        });
+    }
+    verify(token, secret) {
+        return __awaiter(this, void 0, void 0, function* () {
+            const data = yield new Promise(resolve => {
+                jwt.verify(token, secret, (err, decoded) => {
+                    if (err) {
+                        resolve({ content: decoded, error: err });
+                    }
+                    resolve({ content: decoded });
+                });
+            });
+            return data;
+        });
+    }
+}
+exports.IAMTokenManagerService = IAMTokenManagerService;
+//# sourceMappingURL=iam.tokenManager.service.js.map

package/dist/services/tokenManager/iam.tokenManager.service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"iam.tokenManager.service.js","sourceRoot":"","sources":["../../../src/services/tokenManager/iam.tokenManager.service.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,uCAQsB;AAEtB,0DAAmD;AACnD,kDAAoC;AAEpC,iFAQwC;AAGxC,MAAa,sBAAyD,SAAQ,0BAG7E;IACC,YAEY,cAAqC,EAErC,UAAkB,EAElB,wBAAkF;QAE5F,KAAK,CAAC,wBAAyB,EAAE,SAAS,EAAE,EAAE,CAAC,CAAC;QANtC,mBAAc,GAAd,cAAc,CAAuB;QAErC,eAAU,GAAV,UAAU,CAAQ;QAElB,6BAAwB,GAAxB,wBAAwB,CAA0D;IAG9F,CAAC;IAEK,MAAM,CACV,IAA+C,EAC/C,OAAkC;;;;;YAElC,MAAM,EAAE,cAAc,EAAE,UAAU,EAAE,wBAAwB,EAAE,GAAG,IAAI,CAAC;YACtE,MAAM,YAAY,GAAG,cAAc,CAAC,MAAM,CAAC,MAAM,CAAC,UAAU,CAAuB,CAAC;YACpF,MAAM,EAAE,IAAI,KAAmB,IAAI,EAAlB,SAAS,UAAK,IAAI,EAA7B,QAAsB,CAAO,CAAC;YACpC,MAAM,EAAE,gBAAgB,EAAE,mBAAmB,EAAE,OAAO,EAAE,uBAAuB,EAAE,GAAG,OAAO,CAAC;YAC5F,MAAM,WAAW,GAAG,EAAqB,CAAC;YAC1C,IAAI,MAAc,CAAC;YAEnB,IAAI,IAAI,KAAK,wCAAS,CAAC,MAAM,EAAE,CAAC;gBAC9B,MAAM,GAAG,YAAY,CAAC,eAAe,CAAC;gBACtC,IAAI,gBAAgB,EAAE,CAAC;oBACrB,WAAW,CAAC,SAAS,GAAG,gBAAgB,GAAG,EAAE,CAAC;gBAChD,CAAC;qBAAM,IAAI,YAAY,CAAC,8BAA8B,EAAE,CAAC;oBACvD,WAAW,CAAC,SAAS,GAAG,YAAY,CAAC,8BAA8B,GAAG,EAAE,CAAC;gBAC3E,CAAC;YACH,CAAC;iBAAM,IAAI,IAAI,KAAK,wCAAS,CAAC,OAAO,EAAE,CAAC;gBACtC,IAAI,gBAAgB,EAAE,CAAC;oBACrB,WAAW,CAAC,SAAS,GAAG,gBAAgB,GAAG,EAAE,CAAC;gBAChD,CAAC;qBAAM,IAAI,YAAY,CAAC,+BAA+B,EAAE,CAAC;oBACxD,WAAW,CAAC,SAAS,GAAG,YAAY,CAAC,+BAA+B,GAAG,EAAE,CAAC;gBAC5E,CAAC;YACH,CAAC;iBAAM,CAAC;gBACN,MAAM,IAAI,uBAAgB,CAAC,gDAAgD,IAAI,IAAI,CAAC,CAAC;YACvF,CAAC;YACD,MAAM,KAAK,GAAG,MAAM,IAAI,OAAO,CAAS,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;gBAC1D,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC,GAAG,EAAE,KAAK,EAAE,EAAE;oBACrD,IAAI,GAAG,EAAE,CAAC;wBACR,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;wBACnB,MAAM,CAAC,IAAI,uBAAgB,CAAC,uBAAuB,CAAC,CAAC,CAAC;wBACtD,OAAO;oBACT,CAAC;oBACD,OAAO,CAAC,KAAe,CAAC,CAAC;gBAC3B,CAAC,CAAC,CAAC;YACL,CAAC,CAAC,CAAC;YACH,MAAM,YAAY,GAAG,gCAAK,SAAS,KAAE,KAAK,EAAE,IAAI,GAAoC,CAAC;YAGrF,IAAI,OAAO,IAAI,wBAAwB,EAAE,CAAC;gBACxC,IAAI,uBAAuB,IAAI,mBAAmB,EAAE,CAAC;oBACnD,MAAM,eAAe,GAAG,IAAA,yBAAS,EAAC,IAAI,EAAE,mBAAmB,CAAC,CAAC;oBAC7D,IAAI,OAAO,eAAe,KAAK,WAAW,IAAI,OAAO,eAAe,KAAK,QAAQ,EAAE,CAAC;wBAClF,MAAM,wBAAwB,CAAC,MAAM,CAAC;4BACpC,OAAO,EAAE,EAAE,CAAC,mBAAmB,CAAC,EAAE,eAAe,EAAE;yBACpD,CAAC,CAAC;oBACL,CAAC;gBACH,CAAC;gBACD,MAAM,OAAM,MAAM,YAAC,YAAY,CAAC,CAAC;YACnC,CAAC;YACD,OAAO,EAAE,MAAM,EAAE,YAAY,EAAE,CAAC;QAClC,CAAC;KAAA;IAEK,iBAAiB,CACrB,KAAa,EACb,OAAkC;;YAElC,MAAM,EAAE,cAAc,EAAE,UAAU,EAAE,wBAAwB,EAAE,GAAG,IAAI,CAAC;YACtE,MAAM,YAAY,GAAG,cAAc,CAAC,MAAM,CAAC,MAAM,CAAC,UAAU,CAAuB,CAAC;YACpF,MAAM,EACJ,wBAAwB,EACxB,mBAAmB,EACnB,wBAAwB,EACxB,eAAe,EACf,iBAAiB,EACjB,YAAY,EACZ,0CAA0C,EAC3C,GAAG,OAAO,IAAI,EAAE,CAAC;YAElB,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,YAAY,CAAC,eAAe,CAAC,CAAC;YAClF,IAAI,UAAU,GAAG,IAAI,CAAC;YACtB,IAAI,QAA4B,CAAC;YAEjC,IAAI,KAAK,EAAE,CAAC;gBACV,IAAI,YAA+B,CAAC;gBACpC,IAAI,UAAU,GAAG,IAAI,CAAC;gBACtB,IAAI,KAAK,KAAK,eAAe,IAAI,mBAAmB,KAAI,OAAO,aAAP,OAAO,uBAAP,OAAO,CAAE,IAAI,CAAA,IAAI,wBAAwB,EAAE,CAAC;oBAClG,IAAI,YAAY,IAAI,0CAA0C,EAAE,CAAC;wBAC/D,MAAM,EAAE,OAAO,EAAE,mBAAmB,EAAE,KAAK,EAAE,iBAAiB,EAAE,GAAG,MAAM,IAAI,CAAC,MAAM,CAClF,YAAY,EACZ,YAAY,CAAC,gBAAgB,CAC9B,CAAC;wBACF,IAAI,iBAAiB,EAAE,CAAC;4BACtB,YAAY,GAAG,iBAA0B,CAAC;wBAC5C,CAAC;wBACD,IAAI,CAAC,mBAAmB,EAAE,CAAC;4BACzB,YAAY,GAAG,IAAI,uBAAgB,CAAC,sBAAsB,CAAC,CAAC;wBAC9D,CAAC;6BAAM,CAAC;4BACN,MAAM,sBAAsB,GAAG,IAAA,yBAAS,EAAC,OAAO,CAAC,IAAI,EAAE,0CAA0C,CAAC,CAAC;4BACnG,IAAI,sBAAsB,KAAK,YAAY,EAAE,CAAC;gCAC5C,YAAY,GAAG,IAAI,uBAAgB,CAAC,2BAA2B,CAAC,CAAC;4BACnE,CAAC;iCAAM,CAAC;gCACN,UAAU,GAAG,KAAK,CAAC;gCACnB,UAAU,GAAG,KAAK,CAAC;4BACrB,CAAC;wBACH,CAAC;oBACH,CAAC;yBAAM,CAAC;wBACN,IAAI,wBAAwB,EAAE,CAAC;4BAC7B,MAAM,eAAe,GAAG,IAAA,yBAAS,EAAC,OAAO,CAAC,IAAI,EAAE,mBAAmB,CAAC,CAAC;4BACrE,IAAI,OAAO,eAAe,KAAK,WAAW,IAAI,OAAO,eAAe,KAAK,QAAQ,EAAE,CAAC;gCAClF,MAAM,wBAAwB,CAAC,MAAM,CAAC;oCACpC,OAAO,EAAE,EAAE,CAAC,mBAAmB,CAAC,EAAE,eAAe,EAAE;iCACpD,CAAC,CAAC;4BACL,CAAC;wBACH,CAAC;wBACD,YAAY,GAAG,IAAI,uBAAgB,CAAC,uBAAuB,CAAC,CAAC;oBAC/D,CAAC;gBACH,CAAC;gBACD,IAAI,UAAU,EAAE,CAAC;oBACf,MAAM,YAAY,IAAI,KAAK,CAAC;gBAC9B,CAAC;YACH,CAAC;YAED,IAAI,CAAA,OAAO,aAAP,OAAO,uBAAP,OAAO,CAAE,IAAI,KAAI,UAAU,EAAE,CAAC;gBAChC,MAAM,SAAS,mCAAwD,OAAO,CAAC,IAAI,KAAE,IAAI,EAAE,wCAAS,CAAC,MAAM,GAAE,CAAC;gBAC9G,IAAI,YAAY,IAAI,0CAA0C,EAAE,CAAC;oBAC/D,SAAS,CAAC,0CAA0C,CAAC,GAAG,YAAY,CAAC;gBACvE,CAAC;gBACD,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,SAAsD,EAAE;oBAC3F,gBAAgB,EAAE,wBAAwB;oBAC1C,mBAAmB;oBACnB,OAAO,EAAE,eAAe;oBACxB,uBAAuB,EAAE,iBAAiB;iBAC3C,CAAC,CAAC;gBACH,QAAQ,GAAG,MAAM,CAAC,KAAK,CAAC;YAC1B,CAAC;YACD,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAC;QAC/B,CAAC;KAAA;IAEe,MAAM,CACpB,KAAa,EACb,MAAc;;YAEd,MAAM,IAAI,GAAG,MAAM,IAAI,OAAO,CAAwE,OAAO,CAAC,EAAE;gBAC9G,GAAG,CAAC,MAAM,CAAC,KAAK,EAAE,MAAM,EAAE,CAAC,GAAG,EAAE,OAAO,EAAE,EAAE;oBACzC,IAAI,GAAG,EAAE,CAAC;wBACR,OAAO,CAAC,EAAE,OAAO,EAAE,OAAiD,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,CAAC;oBACtF,CAAC;oBACD,OAAO,CAAC,EAAE,OAAO,EAAE,OAAiD,EAAE,CAAC,CAAC;gBAC1E,CAAC,CAAC,CAAC;YACL,CAAC,CAAC,CAAC;YACH,OAAO,IAAI,CAAC;QACd,CAAC;KAAA;CACF;AA/JD,wDA+JC"}

package/dist/services/tokenManager/index.d.ts

@@ -0,0 +1,2 @@
+export * from './iam.tokenManager.definitions';
+export * from './iam.tokenManager.service';

package/dist/services/tokenManager/index.js

@@ -0,0 +1,19 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __exportStar = (this && this.__exportStar) || function(m, exports) {
+    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+__exportStar(require("./iam.tokenManager.definitions"), exports);
+__exportStar(require("./iam.tokenManager.service"), exports);
+//# sourceMappingURL=index.js.map

package/dist/services/tokenManager/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/services/tokenManager/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,iEAA+C;AAC/C,6DAA2C"}

package/dist/services/users/iam.users.definitions.d.ts

@@ -0,0 +1,36 @@
+import { GenericObject } from '@node-c/core';
+import { UserAuthType, UserMFAType } from '../authentication';
+import { AuthorizationPoint } from '../authorization';
+export interface CreateAccessTokenLocalAuthData {
+    mfaCode?: string;
+    password: string;
+}
+export interface CreateAccessTokenOptions<AuthData = unknown> {
+    auth: {
+        type: UserAuthType;
+        mfaType?: UserMFAType;
+    } & AuthData;
+    email: string;
+    filters?: GenericObject;
+    rememberMe?: boolean;
+}
+export interface CreateAccessTokenReturnData<UserData> {
+    accessToken: string;
+    refreshToken: string;
+    user: UserData;
+}
+export interface GetUserWithPermissionsDataOptions {
+    keepPassword?: boolean;
+}
+export type User<UserIdentifierData, AuthorizationPointId> = {
+    currentAuthorizationPoints: GenericObject<AuthorizationPoint<AuthorizationPointId>>;
+    mfaCode?: string;
+    password?: string;
+} & UserIdentifierData;
+export interface UserTokenEnityFields<UserId = unknown> {
+    refreshToken?: string;
+    userId: UserId;
+}
+export declare enum UserTokenUserIdentifier {
+    FieldName = "userId"
+}