@node-c/domain-iam 1.0.0-alpha8 → 1.0.0-beta0

package/dist/common/definitions/common.constants.d.ts

@@ -1,3 +1,8 @@
 export declare enum Constants {
-    DOMAIN_MODULE_NAME = "DOMAIN_MODULE_NAME"
+    DOMAIN_MODULE_NAME = "DOMAIN_MODULE_NAME",
+    OAUTH2_CODE_VERIFIER_LENGTH = 128,
+    OAUTH2_PKCE_CHALLENGE_HASH_METHOD = "SHA-256",
+    TOKEN_EXPIRED_ERROR = "Token expired",
+    TOKEN_MISMATCHED_AUDIENCES_ERROR = "Mismatched audiences",
+    TOKEN_MISMATCHED_ISSUER_ERROR = "Mismatched issuer"
 }

package/dist/common/definitions/common.constants.js

@@ -4,5 +4,10 @@ exports.Constants = void 0;
 var Constants;
 (function (Constants) {
     Constants["DOMAIN_MODULE_NAME"] = "DOMAIN_MODULE_NAME";
+    Constants[Constants["OAUTH2_CODE_VERIFIER_LENGTH"] = 128] = "OAUTH2_CODE_VERIFIER_LENGTH";
+    Constants["OAUTH2_PKCE_CHALLENGE_HASH_METHOD"] = "SHA-256";
+    Constants["TOKEN_EXPIRED_ERROR"] = "Token expired";
+    Constants["TOKEN_MISMATCHED_AUDIENCES_ERROR"] = "Mismatched audiences";
+    Constants["TOKEN_MISMATCHED_ISSUER_ERROR"] = "Mismatched issuer";
 })(Constants || (exports.Constants = Constants = {}));
 //# sourceMappingURL=common.constants.js.map

package/dist/common/definitions/common.constants.js.map

@@ -1 +1 @@
-{"version":3,"file":"common.constants.js","sourceRoot":"","sources":["../../../src/common/definitions/common.constants.ts"],"names":[],"mappings":";;;AAAA,IAAY,SAGX;AAHD,WAAY,SAAS;IAEnB,sDAAyC,CAAA;AAC3C,CAAC,EAHW,SAAS,yBAAT,SAAS,QAGpB"}
+{"version":3,"file":"common.constants.js","sourceRoot":"","sources":["../../../src/common/definitions/common.constants.ts"],"names":[],"mappings":";;;AAAA,IAAY,SAaX;AAbD,WAAY,SAAS;IAEnB,sDAAyC,CAAA;IAEzC,yFAAiC,CAAA;IAEjC,0DAA6C,CAAA;IAE7C,kDAAqC,CAAA;IAErC,sEAAyD,CAAA;IAEzD,gEAAmD,CAAA;AACrD,CAAC,EAbW,SAAS,yBAAT,SAAS,QAapB"}

package/dist/module/iam.module.js.map

@@ -1 +1 @@
-{"version":3,"file":"iam.module.js","sourceRoot":"","sources":["../../src/module/iam.module.ts"],"names":[],"mappings":";;;AAEA,uCAAkD;AAIlD,uDAAkD;AAElD,MAAa,eAAe;IAC1B,MAAM,CAAC,QAAQ,CAAC,OAA+B;QAC7C,MAAM,EAAE,UAAU,EAAE,OAAO,EAAE,iBAAiB,EAAE,WAAW,EAAE,GAAG,OAAO,CAAC;QACxE,MAAM,EAAE,KAAK,EAAE,YAAY,EAAE,OAAO,EAAE,cAAc,EAAE,GAAG,iBAAiB,IAAI,EAAE,CAAC;QACjF,MAAM,EAAE,QAAQ,EAAE,GAAG,IAAA,yBAAkB,EAAC,UAAU,CAAC,CAAC;QACpD,OAAO;YACL,MAAM,EAAE,IAAI;YACZ,MAAM,EAAE,WAAsC;YAC9C,OAAO,EAAE,CAAC,GAAG,CAAC,cAAc,IAAI,EAAE,CAAC,EAAE,GAAG,CAAC,YAAY,IAAI,EAAE,CAAC,CAAC;YAC7D,SAAS,EAAE;gBACT;oBACE,OAAO,EAAE,uBAAS,CAAC,kBAAkB;oBACrC,QAAQ,EAAE,OAAO,CAAC,UAAU;iBAC7B;gBACD,GAAG,CAAC,OAAO,CAAC,SAAS,IAAI,EAAE,CAAC;gBAC5B,GAAG,CAAC,QAAQ,IAAI,EAAE,CAAC;aACpB;YACD,OAAO,EAAE,CAAC,GAAG,CAAC,QAAQ,IAAI,EAAE,CAAC,EAAE,GAAG,CAAC,OAAO,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC;SAC3D,CAAC;IACJ,CAAC;CACF;AApBD,0CAoBC"}
+{"version":3,"file":"iam.module.js","sourceRoot":"","sources":["../../src/module/iam.module.ts"],"names":[],"mappings":";;;AAEA,uCAAkD;AAIlD,uDAAkD;AAElD,MAAa,eAAe;IAC1B,MAAM,CAAC,QAAQ,CAAC,OAA+B;QAC7C,MAAM,EAAE,UAAU,EAAE,OAAO,EAAE,iBAAiB,EAAE,WAAW,EAAE,GAAG,OAAO,CAAC;QACxE,MAAM,EAAE,KAAK,EAAE,YAAY,EAAE,OAAO,EAAE,cAAc,EAAE,GAAG,iBAAiB,IAAI,EAAE,CAAC;QACjF,MAAM,EAAE,QAAQ,EAAE,GAAG,IAAA,yBAAkB,EAAC,UAAU,CAAC,CAAC;QACpD,OAAO;YACL,MAAM,EAAE,IAAI;YACZ,MAAM,EAAE,WAAsC;YAC9C,OAAO,EAAE,CAAC,GAAG,CAAC,cAAc,IAAI,EAAE,CAAC,EAAE,GAAG,CAAC,YAAY,IAAI,EAAE,CAAC,CAAC;YAC7D,SAAS,EAAE;gBACT;oBACE,OAAO,EAAE,uBAAS,CAAC,kBAA4B;oBAC/C,QAAQ,EAAE,OAAO,CAAC,UAAU;iBAC7B;gBACD,GAAG,CAAC,OAAO,CAAC,SAAS,IAAI,EAAE,CAAC;gBAC5B,GAAG,CAAC,QAAQ,IAAI,EAAE,CAAC;aACpB;YACD,OAAO,EAAE,CAAC,GAAG,CAAC,QAAQ,IAAI,EAAE,CAAC,EAAE,GAAG,CAAC,OAAO,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC;SAC3D,CAAC;IACJ,CAAC;CACF;AApBD,0CAoBC"}

package/dist/services/authentication/iam.authentication.definitions.d.ts

@@ -1,20 +1,83 @@
-export type AuthenticateUserUserData<UserFields extends object> = {
-    mfaEnabled?: boolean;
-} & UserFields;
-export interface AuthenticateUserAuthData {
-    mfaCode?: string;
-    mfaType?: UserMFAType;
-    userIdentifierField?: string;
-    userMFAIdentifierField?: string;
-}
-export interface AuthenticateUserResult {
+import { AppConfigCommonDomainIAMAuthServiceConfigStepSettings, GenericObject } from '@node-c/core';
+import { IAMMFAType } from '../mfa';
+export interface IAMAuthenticationCompleteData {
+    mfaData?: unknown;
+    mfaType?: IAMMFAType;
+}
+export interface IAMAuthenticationCompleteOptions<Context> {
+    context: Context;
+    contextIdentifierField?: string;
+    mfaOptions?: unknown;
+}
+export declare enum IAMAuthenticationType {
+    OAuth2 = "ouath2",
+    UserLocal = "userLocal"
+}
+export interface IAMAuthenticationCompleteResult {
+    accessToken?: string;
+    accessTokenExpiresIn?: number;
+    idToken?: string;
+    mfaUsed?: boolean;
+    mfaValid?: boolean;
+    refreshToken?: string;
+    refreshTokenExpiresIn?: number;
     valid: boolean;
 }
-export declare enum UserAuthKnownType {
-    Local = "local"
+export type IAMAuthenticationGetUserCreateAccessTokenConfigResult = AppConfigCommonDomainIAMAuthServiceConfigStepSettings;
+export interface IAMAuthenticationGetPayloadsFromExternalTokensData {
+    accessToken?: string;
+    idToken?: string;
+    refreshToken?: string;
+}
+export interface IAMAuthenticationGetPayloadsFromExternalTokensResult {
+    accessTokenPayload?: unknown;
+    idTokenPayload?: unknown;
+    refreshTokenPayload?: unknown;
+}
+export interface IAMAuthenticationGetUserDataFromExternalTokenPayloadsData {
+    accessTokenPayload?: GenericObject;
+    idTokenPayload?: {
+        email: string;
+        name: string;
+    } & GenericObject;
+    refreshTokenPayload?: GenericObject;
+}
+export interface IAMAuthenticationGetUserDataFromExternalTokenPayloadsResult {
+    email: string;
+    firstName: string;
+    lastName: string;
+}
+export interface IAMAuthenticationInitiateData {
+    mfaData?: unknown;
+    mfaType?: IAMMFAType;
+}
+export interface IAMAuthenticationInitiateOptions<Context> {
+    context: Context;
+    contextIdentifierField?: string;
+    mfaOptions?: unknown;
+}
+export interface IAMAuthenticationInitiateResult {
+    mfaUsed?: boolean;
+    mfaValid?: boolean;
+    valid: boolean;
+}
+export interface IAMAuthenticationRefreshExternalAccessTokenData {
+    accessToken: string;
+    refreshToken: string;
+}
+export interface IAMAuthenticationRefreshExternalAccessTokenResult {
+    error?: string;
+    newAccessToken?: string;
+    newRefreshToken?: string;
+}
+export interface IAMAuthenticationVerifyExternalAccessTokenData {
+    accessToken: string;
+    refreshToken?: string;
 }
-export type UserAuthType = UserAuthKnownType & string;
-export declare enum UserMFAKnownType {
-    Local = "local"
+export interface IAMAuthenticationVerifyExternalAccessTokenResult {
+    accessTokenPayload?: unknown;
+    error?: unknown;
+    newAccessToken?: string;
+    newRefreshToken?: string;
+    refreshTokenPayload?: unknown;
 }
-export type UserMFAType = UserMFAKnownType & string;

package/dist/services/authentication/iam.authentication.definitions.js

@@ -1,12 +1,9 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.UserMFAKnownType = exports.UserAuthKnownType = void 0;
-var UserAuthKnownType;
-(function (UserAuthKnownType) {
-    UserAuthKnownType["Local"] = "local";
-})(UserAuthKnownType || (exports.UserAuthKnownType = UserAuthKnownType = {}));
-var UserMFAKnownType;
-(function (UserMFAKnownType) {
-    UserMFAKnownType["Local"] = "local";
-})(UserMFAKnownType || (exports.UserMFAKnownType = UserMFAKnownType = {}));
+exports.IAMAuthenticationType = void 0;
+var IAMAuthenticationType;
+(function (IAMAuthenticationType) {
+    IAMAuthenticationType["OAuth2"] = "ouath2";
+    IAMAuthenticationType["UserLocal"] = "userLocal";
+})(IAMAuthenticationType || (exports.IAMAuthenticationType = IAMAuthenticationType = {}));
 //# sourceMappingURL=iam.authentication.definitions.js.map

package/dist/services/authentication/iam.authentication.definitions.js.map

@@ -1 +1 @@
-{"version":3,"file":"iam.authentication.definitions.js","sourceRoot":"","sources":["../../../src/services/authentication/iam.authentication.definitions.ts"],"names":[],"mappings":";;;AAeA,IAAY,iBAGX;AAHD,WAAY,iBAAiB;IAE3B,oCAAe,CAAA;AACjB,CAAC,EAHW,iBAAiB,iCAAjB,iBAAiB,QAG5B;AAID,IAAY,gBAGX;AAHD,WAAY,gBAAgB;IAE1B,mCAAe,CAAA;AACjB,CAAC,EAHW,gBAAgB,gCAAhB,gBAAgB,QAG3B"}
+{"version":3,"file":"iam.authentication.definitions.js","sourceRoot":"","sources":["../../../src/services/authentication/iam.authentication.definitions.ts"],"names":[],"mappings":";;;AAeA,IAAY,qBAKX;AALD,WAAY,qBAAqB;IAE/B,0CAAiB,CAAA;IAEjB,gDAAuB,CAAA;AACzB,CAAC,EALW,qBAAqB,qCAArB,qBAAqB,QAKhC"}

package/dist/services/authentication/iam.authentication.service.d.ts

@@ -1,8 +1,15 @@
 import { ConfigProviderService } from '@node-c/core';
-import { AuthenticateUserAuthData, AuthenticateUserResult, AuthenticateUserUserData } from './iam.authentication.definitions';
-export declare class IAMAuthenticationService<UserFields extends object> {
+import { IAMAuthenticationCompleteData, IAMAuthenticationCompleteOptions, IAMAuthenticationCompleteResult, IAMAuthenticationGetPayloadsFromExternalTokensData, IAMAuthenticationGetPayloadsFromExternalTokensResult, IAMAuthenticationGetUserCreateAccessTokenConfigResult, IAMAuthenticationGetUserDataFromExternalTokenPayloadsData, IAMAuthenticationGetUserDataFromExternalTokenPayloadsResult, IAMAuthenticationInitiateData, IAMAuthenticationInitiateOptions, IAMAuthenticationInitiateResult, IAMAuthenticationRefreshExternalAccessTokenData, IAMAuthenticationRefreshExternalAccessTokenResult, IAMAuthenticationVerifyExternalAccessTokenData, IAMAuthenticationVerifyExternalAccessTokenResult } from './iam.authentication.definitions';
+export declare class IAMAuthenticationService<CompleteContext extends object, InitiateContext extends object> {
     protected configProvider: ConfigProviderService;
     protected moduleName: string;
+    protected isLocal: boolean;
     constructor(configProvider: ConfigProviderService, moduleName: string);
-    authenticateUser(_userData: AuthenticateUserUserData<UserFields>, _authData: AuthenticateUserAuthData): Promise<AuthenticateUserResult>;
+    complete(_data: IAMAuthenticationCompleteData, _options: IAMAuthenticationCompleteOptions<CompleteContext>): Promise<IAMAuthenticationCompleteResult>;
+    getUserCreateAccessTokenConfig(): IAMAuthenticationGetUserCreateAccessTokenConfigResult;
+    getPayloadsFromExternalTokens(_data: IAMAuthenticationGetPayloadsFromExternalTokensData): Promise<IAMAuthenticationGetPayloadsFromExternalTokensResult>;
+    getUserDataFromExternalTokenPayloads(_data: IAMAuthenticationGetUserDataFromExternalTokenPayloadsData): Promise<IAMAuthenticationGetUserDataFromExternalTokenPayloadsResult | null>;
+    initiate(_data: IAMAuthenticationInitiateData, _options: IAMAuthenticationInitiateOptions<InitiateContext>): Promise<IAMAuthenticationInitiateResult>;
+    refreshExternalAccessToken(_data: IAMAuthenticationRefreshExternalAccessTokenData): Promise<IAMAuthenticationRefreshExternalAccessTokenResult>;
+    verifyExternalAccessToken(_data: IAMAuthenticationVerifyExternalAccessTokenData): Promise<IAMAuthenticationVerifyExternalAccessTokenResult>;
 }

package/dist/services/authentication/iam.authentication.service.js

@@ -16,9 +16,37 @@ class IAMAuthenticationService {
         this.configProvider = configProvider;
         this.moduleName = moduleName;
     }
-    authenticateUser(_userData, _authData) {
+    complete(_data, _options) {
         return __awaiter(this, void 0, void 0, function* () {
-            throw new core_1.ApplicationError('[IAMAuthenticationService]: Method "authenticateUser" not implemented.');
+            throw new core_1.ApplicationError(`[${this.moduleName}][IAMAuthenticationService]: Method "complete" not implemented.`);
+        });
+    }
+    getUserCreateAccessTokenConfig() {
+        throw new core_1.ApplicationError(`[${this.moduleName}][IAMAuthenticationService]: Method "getUserAccessTokenConfig" not implemented.`);
+    }
+    getPayloadsFromExternalTokens(_data) {
+        return __awaiter(this, void 0, void 0, function* () {
+            throw new core_1.ApplicationError(`[${this.moduleName}][IAMAuthenticationService]: Method "getPayloadsFromExternalTokens" not implemented.`);
+        });
+    }
+    getUserDataFromExternalTokenPayloads(_data) {
+        return __awaiter(this, void 0, void 0, function* () {
+            throw new core_1.ApplicationError(`[${this.moduleName}][IAMAuthenticationService]: Method "getUserDataFromExternalTokenPayloads" not implemented.`);
+        });
+    }
+    initiate(_data, _options) {
+        return __awaiter(this, void 0, void 0, function* () {
+            throw new core_1.ApplicationError(`[${this.moduleName}][IAMAuthenticationService]: Method "initiate" not implemented.`);
+        });
+    }
+    refreshExternalAccessToken(_data) {
+        return __awaiter(this, void 0, void 0, function* () {
+            throw new core_1.ApplicationError(`[${this.moduleName}][IAMAuthenticationService]: Method "refreshExternalAccessToken" not implemented.`);
+        });
+    }
+    verifyExternalAccessToken(_data) {
+        return __awaiter(this, void 0, void 0, function* () {
+            throw new core_1.ApplicationError(`[${this.moduleName}][IAMAuthenticationService]: Method "verifyExternalAccessToken" not implemented.`);
         });
     }
 }

package/dist/services/authentication/iam.authentication.service.js.map

@@ -1 +1 @@
-{"version":3,"file":"iam.authentication.service.js","sourceRoot":"","sources":["../../../src/services/authentication/iam.authentication.service.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,uCAAuE;AASvE,MAAa,wBAAwB;IACnC,YAEY,cAAqC,EAErC,UAAkB;QAFlB,mBAAc,GAAd,cAAc,CAAuB;QAErC,eAAU,GAAV,UAAU,CAAQ;IAC3B,CAAC;IAEE,gBAAgB,CAEpB,SAA+C,EAE/C,SAAmC;;YAEnC,MAAM,IAAI,uBAAgB,CAAC,wEAAwE,CAAC,CAAC;QACvG,CAAC;KAAA;CACF;AAhBD,4DAgBC"}
+{"version":3,"file":"iam.authentication.service.js","sourceRoot":"","sources":["../../../src/services/authentication/iam.authentication.service.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,uCAAuE;AAoBvE,MAAa,wBAAwB;IAGnC,YAEY,cAAqC,EAErC,UAAkB;QAFlB,mBAAc,GAAd,cAAc,CAAuB;QAErC,eAAU,GAAV,UAAU,CAAQ;IAC3B,CAAC;IAKE,QAAQ,CAEZ,KAAoC,EAEpC,QAA2D;;YAE3D,MAAM,IAAI,uBAAgB,CAAC,IAAI,IAAI,CAAC,UAAU,iEAAiE,CAAC,CAAC;QACnH,CAAC;KAAA;IAED,8BAA8B;QAC5B,MAAM,IAAI,uBAAgB,CACxB,IAAI,IAAI,CAAC,UAAU,iFAAiF,CACrG,CAAC;IACJ,CAAC;IAMK,6BAA6B,CAEjC,KAAyD;;YAEzD,MAAM,IAAI,uBAAgB,CACxB,IAAI,IAAI,CAAC,UAAU,sFAAsF,CAC1G,CAAC;QACJ,CAAC;KAAA;IAKK,oCAAoC,CAExC,KAAgE;;YAEhE,MAAM,IAAI,uBAAgB,CACxB,IAAI,IAAI,CAAC,UAAU,6FAA6F,CACjH,CAAC;QACJ,CAAC;KAAA;IAKK,QAAQ,CAEZ,KAAoC,EAEpC,QAA2D;;YAE3D,MAAM,IAAI,uBAAgB,CAAC,IAAI,IAAI,CAAC,UAAU,iEAAiE,CAAC,CAAC;QACnH,CAAC;KAAA;IAEK,0BAA0B,CAE9B,KAAsD;;YAEtD,MAAM,IAAI,uBAAgB,CACxB,IAAI,IAAI,CAAC,UAAU,mFAAmF,CACvG,CAAC;QACJ,CAAC;KAAA;IAEK,yBAAyB,CAE7B,KAAqD;;YAErD,MAAM,IAAI,uBAAgB,CACxB,IAAI,IAAI,CAAC,UAAU,kFAAkF,CACtG,CAAC;QACJ,CAAC;KAAA;CACF;AAlFD,4DAkFC"}

package/dist/services/authenticationOAuth2/iam.authenticationOAuth2.definitions.d.ts

@@ -0,0 +1,38 @@
+import { IAMAuthenticationCompleteData, IAMAuthenticationCompleteOptions, IAMAuthenticationCompleteResult, IAMAuthenticationGetPayloadsFromExternalTokensData, IAMAuthenticationGetPayloadsFromExternalTokensResult, IAMAuthenticationGetUserCreateAccessTokenConfigResult, IAMAuthenticationInitiateData, IAMAuthenticationInitiateOptions, IAMAuthenticationInitiateResult, IAMAuthenticationVerifyExternalAccessTokenData, IAMAuthenticationVerifyExternalAccessTokenResult } from '../authentication';
+export interface IAMAuthenticationOAuth2AccessTokenProviderResponseData {
+    access_token: string;
+    expires_in?: number;
+    id_token?: string;
+    refresh_token?: string;
+    scope: string;
+    token_type: string;
+}
+export interface IAMAuthenticationOAuth2CompleteData extends IAMAuthenticationCompleteData {
+    code: string;
+    codeVerifier: string;
+    state: string;
+}
+export type IAMAuthenticationOAuth2CompleteOptions<Context extends object> = IAMAuthenticationCompleteOptions<Context>;
+export interface IAMAuthenticationOAuth2CompleteResult extends IAMAuthenticationCompleteResult {
+    accessToken: string;
+    scope: string;
+}
+export type IAMAuthenticationOAuth2GetPayloadsFromExternalTokensData = IAMAuthenticationGetPayloadsFromExternalTokensData;
+export type IAMAuthenticationOAuth2GetPayloadsFromExternalTokensResult = IAMAuthenticationGetPayloadsFromExternalTokensResult;
+export type IAMAuthenticationOAuth2GetUserCreateAccessTokenConfigResult = IAMAuthenticationGetUserCreateAccessTokenConfigResult;
+export interface IAMAuthenticationOAuth2InitiateData extends IAMAuthenticationInitiateData {
+    scope?: string;
+}
+export interface IAMAuthenticationOAuth2InitiateOptions<Context extends object> extends IAMAuthenticationInitiateOptions<Context> {
+    generateNonce?: boolean;
+    withPCKE?: boolean;
+}
+export interface IAMAuthenticationOAuth2InitiateResult extends IAMAuthenticationInitiateResult {
+    authorizationCodeRequestURL: string;
+    codeChallenge?: string;
+    codeVerifier?: string;
+    nonce?: string;
+    state: string;
+}
+export type IAMAuthenticationOAuth2VerifyExternalAccessTokenData = Pick<IAMAuthenticationVerifyExternalAccessTokenData, 'accessToken'>;
+export type IAMAuthenticationOAuth2VerifyExternalAccessTokenResult = Pick<IAMAuthenticationVerifyExternalAccessTokenResult, 'accessTokenPayload' | 'error'>;

package/dist/services/{authenticationLocal/iam.authenticationLocal.definitions.js → authenticationOAuth2/iam.authenticationOAuth2.definitions.js}

@@ -1,3 +1,3 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-//# sourceMappingURL=iam.authenticationLocal.definitions.js.map
+//# sourceMappingURL=iam.authenticationOAuth2.definitions.js.map

package/dist/services/authenticationOAuth2/iam.authenticationOAuth2.definitions.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"iam.authenticationOAuth2.definitions.js","sourceRoot":"","sources":["../../../src/services/authenticationOAuth2/iam.authenticationOAuth2.definitions.ts"],"names":[],"mappings":""}

package/dist/services/authenticationOAuth2/iam.authenticationOAuth2.service.d.ts

@@ -0,0 +1,24 @@
+import { ConfigProviderService } from '@node-c/core';
+import { IAMAuthenticationOAuth2CompleteData, IAMAuthenticationOAuth2CompleteOptions, IAMAuthenticationOAuth2CompleteResult, IAMAuthenticationOAuth2GetPayloadsFromExternalTokensData, IAMAuthenticationOAuth2GetPayloadsFromExternalTokensResult, IAMAuthenticationOAuth2GetUserCreateAccessTokenConfigResult, IAMAuthenticationOAuth2InitiateData, IAMAuthenticationOAuth2InitiateOptions, IAMAuthenticationOAuth2InitiateResult, IAMAuthenticationOAuth2VerifyExternalAccessTokenData, IAMAuthenticationOAuth2VerifyExternalAccessTokenResult } from './iam.authenticationOAuth2.definitions';
+import { IAMAuthenticationService } from '../authentication';
+export declare class IAMAuthenticationOAuth2Service<CompleteContext extends object, InitiateContext extends object> extends IAMAuthenticationService<CompleteContext, InitiateContext> {
+    protected configProvider: ConfigProviderService;
+    protected moduleName: string;
+    protected serviceName: string;
+    constructor(configProvider: ConfigProviderService, moduleName: string, serviceName: string);
+    complete(data: IAMAuthenticationOAuth2CompleteData, _options: IAMAuthenticationOAuth2CompleteOptions<CompleteContext>): Promise<IAMAuthenticationOAuth2CompleteResult>;
+    protected generateChallenge(codeVerifier: string): Promise<string>;
+    protected generateUrlEncodedString(length: number): string;
+    getPayloadsFromExternalTokens(data: IAMAuthenticationOAuth2GetPayloadsFromExternalTokensData): Promise<IAMAuthenticationOAuth2GetPayloadsFromExternalTokensResult>;
+    getUserCreateAccessTokenConfig(): IAMAuthenticationOAuth2GetUserCreateAccessTokenConfigResult;
+    initiate(data: IAMAuthenticationOAuth2InitiateData, options: IAMAuthenticationOAuth2InitiateOptions<InitiateContext>): Promise<IAMAuthenticationOAuth2InitiateResult>;
+    verifyExternalAccessToken(data: IAMAuthenticationOAuth2VerifyExternalAccessTokenData): Promise<IAMAuthenticationOAuth2VerifyExternalAccessTokenResult>;
+    protected verifyToken<DecodedTokenContent = unknown>(token: string, options?: {
+        audiences?: string[];
+        issuer?: string;
+        secret?: string;
+    }): Promise<{
+        content?: DecodedTokenContent;
+        error?: unknown;
+    }>;
+}

package/dist/services/authenticationOAuth2/iam.authenticationOAuth2.service.js

@@ -0,0 +1,299 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
+    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
+    return new (P || (P = Promise))(function (resolve, reject) {
+        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
+        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
+        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
+        step((generator = generator.apply(thisArg, _arguments || [])).next());
+    });
+};
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.IAMAuthenticationOAuth2Service = void 0;
+const crypto_1 = __importDefault(require("crypto"));
+const core_1 = require("@node-c/core");
+const jwt = __importStar(require("jsonwebtoken"));
+const lodash_1 = __importDefault(require("lodash"));
+const definitions_1 = require("../../common/definitions");
+const authentication_1 = require("../authentication");
+class IAMAuthenticationOAuth2Service extends authentication_1.IAMAuthenticationService {
+    constructor(configProvider, moduleName, serviceName) {
+        super(configProvider, moduleName);
+        this.configProvider = configProvider;
+        this.moduleName = moduleName;
+        this.serviceName = serviceName;
+        this.isLocal = false;
+    }
+    complete(data, _options) {
+        return __awaiter(this, void 0, void 0, function* () {
+            const { configProvider, moduleName, serviceName } = this;
+            const moduleConfig = configProvider.config.domain[moduleName];
+            const { accessTokenGrantUrl, clientId, clientSecret, redirectUri } = moduleConfig.authServiceSettings[serviceName].oauth2;
+            if (!accessTokenGrantUrl) {
+                console.error(`[${moduleName}][${serviceName}]: Access token grant URL not configured.`);
+                throw new core_1.ApplicationError('Authentication failed.');
+            }
+            if (!redirectUri) {
+                console.error(`[${moduleName}][${serviceName}]: Redirect URI not configured.`);
+                throw new core_1.ApplicationError('Authentication failed.');
+            }
+            const { code, codeVerifier } = data;
+            const { data: providerResponseData, hasError } = yield (0, core_1.httpRequest)(accessTokenGrantUrl, {
+                body: {
+                    client_id: clientId,
+                    client_secret: clientSecret,
+                    code,
+                    code_verifier: codeVerifier,
+                    grant_type: 'authorization_code',
+                    redirect_uri: redirectUri
+                },
+                isFormData: true,
+                method: core_1.HttpMethod.POST
+            });
+            if (hasError || !providerResponseData) {
+                console.error(`[${moduleName}][${serviceName}]: Auhorization grant attempt failed for code "${code}".`, providerResponseData);
+                throw new core_1.ApplicationError('Authentication failed.');
+            }
+            return {
+                accessToken: providerResponseData.access_token,
+                accessTokenExpiresIn: providerResponseData.expires_in,
+                idToken: providerResponseData.id_token,
+                mfaUsed: true,
+                mfaValid: true,
+                refreshToken: providerResponseData.refresh_token,
+                scope: providerResponseData.scope,
+                valid: true
+            };
+        });
+    }
+    generateChallenge(codeVerifier) {
+        return __awaiter(this, void 0, void 0, function* () {
+            const buffer = yield crypto_1.default.subtle.digest(definitions_1.Constants.OAUTH2_PKCE_CHALLENGE_HASH_METHOD, new TextEncoder().encode(codeVerifier));
+            return (0, core_1.base64UrlEncode)(buffer);
+        });
+    }
+    generateUrlEncodedString(length) {
+        const octetSize = Math.ceil((length * 3) / 4);
+        const octets = crypto_1.default.getRandomValues(new Uint8Array(octetSize));
+        return (0, core_1.base64UrlEncode)(octets.buffer).slice(0, length);
+    }
+    getPayloadsFromExternalTokens(data) {
+        return __awaiter(this, void 0, void 0, function* () {
+            const { moduleName, serviceName } = this;
+            const { accessToken, idToken } = data;
+            const returnData = {};
+            if (accessToken) {
+                const { accessTokenPayload, error } = yield this.verifyExternalAccessToken({
+                    accessToken
+                });
+                if (error) {
+                    console.error(`[${moduleName}][${serviceName}]: Method "getPayloadsFromExternalTokens" has produced an error:`, error);
+                    throw new core_1.ApplicationError(`[${moduleName}][${serviceName}]: Error getting data from external tokens.`);
+                }
+                returnData.accessTokenPayload = accessTokenPayload;
+            }
+            if (idToken) {
+                const idTokenData = yield this.verifyToken(idToken);
+                returnData.idTokenPayload = idTokenData.content;
+            }
+            return returnData;
+        });
+    }
+    getUserCreateAccessTokenConfig() {
+        const { configProvider, moduleName, serviceName } = this;
+        const moduleConfig = configProvider.config.domain[moduleName];
+        const { steps } = moduleConfig.authServiceSettings[serviceName];
+        const defaultConfig = {
+            [core_1.AppConfigDomainIAMAuthenticationStep.Complete]: {
+                cache: {
+                    settings: {
+                        cacheFieldName: 'state',
+                        inputFieldName: 'data.state'
+                    },
+                    use: {
+                        data: { overwrite: true, use: true }
+                    }
+                },
+                createUser: true,
+                decodeReturnedTokens: true,
+                findUser: true,
+                findUserBeforeAuth: false,
+                findUserInAuthResultBy: {
+                    userFieldName: 'email',
+                    resultFieldName: 'accessTokenPayload.username'
+                },
+                useReturnedTokens: true,
+                validWithoutUser: false
+            },
+            [core_1.AppConfigDomainIAMAuthenticationStep.Initiate]: {
+                cache: {
+                    populate: {
+                        data: [{ cacheFieldName: 'codeVerifier', inputFieldName: 'result.codeVerifier' }]
+                    },
+                    settings: {
+                        cacheFieldName: 'state',
+                        inputFieldName: 'result.state'
+                    }
+                },
+                findUser: false,
+                stepResultPublicFields: ['authorizationCodeRequestURL'],
+                validWithoutUser: true
+            }
+        };
+        return lodash_1.default.merge(defaultConfig, steps || {});
+    }
+    initiate(data, options) {
+        return __awaiter(this, void 0, void 0, function* () {
+            const { configProvider, moduleName, serviceName } = this;
+            const moduleConfig = configProvider.config.domain[moduleName];
+            const { authorizationUrl, clientId, codeChallengeMethod, defaultScope, redirectUri } = moduleConfig.authServiceSettings[serviceName].oauth2;
+            const { scope } = data;
+            const { generateNonce, withPCKE } = options;
+            const finalScope = scope || defaultScope;
+            if (!authorizationUrl) {
+                console.error(`[${moduleName}][${serviceName}]: Authorization URL not configured.`);
+                throw new core_1.ApplicationError('Authentication failed.');
+            }
+            if (!redirectUri) {
+                console.error(`[${moduleName}][${serviceName}]: Redirect URI not configured.`);
+                throw new core_1.ApplicationError('Authentication failed.');
+            }
+            if (!finalScope) {
+                console.error(`[${moduleName}][${serviceName}]: Either a scope in thwe input, or a configured default scope, is required..`);
+                throw new core_1.ApplicationError('Authentication failed.');
+            }
+            const state = this.generateUrlEncodedString(16);
+            let challenge;
+            let nonce;
+            let verifier;
+            let url = `${authorizationUrl}?` +
+                'response_type=code&' +
+                `client_id=${clientId}&` +
+                `redirect_uri=${encodeURIComponent(redirectUri)}&` +
+                `scope=${encodeURIComponent(finalScope)}&` +
+                `state=${state}`;
+            if (withPCKE) {
+                verifier = this.generateUrlEncodedString(definitions_1.Constants.OAUTH2_CODE_VERIFIER_LENGTH);
+                challenge = yield this.generateChallenge(verifier);
+                url += `&code_challenge=${challenge}&code_challenge_method=${codeChallengeMethod}`;
+            }
+            if (generateNonce) {
+                nonce = this.generateUrlEncodedString(16);
+                url += `&nonce=${nonce}`;
+            }
+            return {
+                authorizationCodeRequestURL: url,
+                codeChallenge: challenge,
+                codeVerifier: verifier,
+                mfaUsed: true,
+                mfaValid: true,
+                nonce,
+                state,
+                valid: true
+            };
+        });
+    }
+    verifyExternalAccessToken(data) {
+        return __awaiter(this, void 0, void 0, function* () {
+            const { configProvider, moduleName, serviceName } = this;
+            const moduleConfig = configProvider.config.domain[moduleName];
+            const { accessTokenAudiences, issuerUri, verifyTokensLocally } = moduleConfig.authServiceSettings[serviceName].oauth2;
+            const { accessToken } = data;
+            if (!accessTokenAudiences) {
+                throw new core_1.ApplicationError(`[${moduleName}][${serviceName}]: In method "verifyExternalAccessToken": accessTokenAudiences not configured.`);
+            }
+            if (!issuerUri) {
+                throw new core_1.ApplicationError(`[${moduleName}][${serviceName}]:  In method "verifyExternalAccessToken": issuer URI not configured.`);
+            }
+            if (verifyTokensLocally) {
+                const accessTokenData = yield this.verifyToken(accessToken, {
+                    audiences: accessTokenAudiences,
+                    issuer: issuerUri
+                });
+                if (accessTokenData.error) {
+                    return { error: accessTokenData.error };
+                }
+                return { accessTokenPayload: accessTokenData.content };
+            }
+            throw new core_1.ApplicationError(`[${moduleName}][${serviceName}]:  In method "verifyExternalAccessToken": verification via external endpoint not configured.`);
+        });
+    }
+    verifyToken(token, options) {
+        return __awaiter(this, void 0, void 0, function* () {
+            const { audiences, issuer, secret } = options || {};
+            let returnData = {};
+            if (secret) {
+                returnData = yield new Promise(resolve => {
+                    jwt.verify(token, secret, (err, decoded) => {
+                        if (err) {
+                            resolve({ content: decoded, error: err });
+                        }
+                        resolve({ content: decoded });
+                    });
+                });
+            }
+            else {
+                const tokenContent = jwt.decode(token);
+                if (tokenContent.exp) {
+                    let currentTimeStamp = `${new Date().valueOf()}`;
+                    let expString = `${tokenContent.exp}`;
+                    if (expString.length < currentTimeStamp.length) {
+                        currentTimeStamp = currentTimeStamp.substring(0, expString.length);
+                    }
+                    else if (expString.length > currentTimeStamp.length) {
+                        expString = expString.substring(0, currentTimeStamp.length);
+                    }
+                    if (parseInt(expString, 10) < parseInt(currentTimeStamp, 10)) {
+                        returnData.error = definitions_1.Constants.TOKEN_EXPIRED_ERROR;
+                    }
+                }
+                if (tokenContent.aud && audiences && !audiences.includes(tokenContent.aud)) {
+                    returnData.error = definitions_1.Constants.TOKEN_MISMATCHED_AUDIENCES_ERROR;
+                }
+                if (tokenContent.iss && issuer && issuer !== tokenContent.iss) {
+                    returnData.error = definitions_1.Constants.TOKEN_MISMATCHED_ISSUER_ERROR;
+                }
+                returnData.content = tokenContent;
+            }
+            return returnData;
+        });
+    }
+}
+exports.IAMAuthenticationOAuth2Service = IAMAuthenticationOAuth2Service;
+//# sourceMappingURL=iam.authenticationOAuth2.service.js.map

package/dist/services/authenticationOAuth2/iam.authenticationOAuth2.service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"iam.authenticationOAuth2.service.js","sourceRoot":"","sources":["../../../src/services/authenticationOAuth2/iam.authenticationOAuth2.service.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,oDAA4B;AAE5B,uCAQsB;AAEtB,kDAAoC;AACpC,oDAAwB;AAiBxB,0DAAqD;AACrD,sDAA6D;AAkB7D,MAAa,8BAGX,SAAQ,yCAA0D;IAClE,YACY,cAAqC,EACrC,UAAkB,EAElB,WAAmB;QAE7B,KAAK,CAAC,cAAc,EAAE,UAAU,CAAC,CAAC;QALxB,mBAAc,GAAd,cAAc,CAAuB;QACrC,eAAU,GAAV,UAAU,CAAQ;QAElB,gBAAW,GAAX,WAAW,CAAQ;QAG7B,IAAI,CAAC,OAAO,GAAG,KAAK,CAAC;IACvB,CAAC;IAUK,QAAQ,CACZ,IAAyC,EAEzC,QAAiE;;YAEjE,MAAM,EAAE,cAAc,EAAE,UAAU,EAAE,WAAW,EAAE,GAAG,IAAI,CAAC;YACzD,MAAM,YAAY,GAAG,cAAc,CAAC,MAAM,CAAC,MAAM,CAAC,UAAU,CAAuB,CAAC;YACpF,MAAM,EAAE,mBAAmB,EAAE,QAAQ,EAAE,YAAY,EAAE,WAAW,EAAE,GAChE,YAAY,CAAC,mBAAoB,CAAC,WAAW,CAAC,CAAC,MAAO,CAAC;YACzD,IAAI,CAAC,mBAAmB,EAAE,CAAC;gBACzB,OAAO,CAAC,KAAK,CAAC,IAAI,UAAU,KAAK,WAAW,2CAA2C,CAAC,CAAC;gBACzF,MAAM,IAAI,uBAAgB,CAAC,wBAAwB,CAAC,CAAC;YACvD,CAAC;YACD,IAAI,CAAC,WAAW,EAAE,CAAC;gBACjB,OAAO,CAAC,KAAK,CAAC,IAAI,UAAU,KAAK,WAAW,iCAAiC,CAAC,CAAC;gBAC/E,MAAM,IAAI,uBAAgB,CAAC,wBAAwB,CAAC,CAAC;YACvD,CAAC;YACD,MAAM,EAAE,IAAI,EAAE,YAAY,EAAE,GAAG,IAAI,CAAC;YACpC,MAAM,EAAE,IAAI,EAAE,oBAAoB,EAAE,QAAQ,EAAE,GAC5C,MAAM,IAAA,kBAAW,EAAyD,mBAAmB,EAAE;gBAC7F,IAAI,EAAE;oBACJ,SAAS,EAAE,QAAQ;oBACnB,aAAa,EAAE,YAAY;oBAC3B,IAAI;oBACJ,aAAa,EAAE,YAAY;oBAC3B,UAAU,EAAE,oBAAoB;oBAChC,YAAY,EAAE,WAAW;iBAC1B;gBACD,UAAU,EAAE,IAAI;gBAChB,MAAM,EAAE,iBAAU,CAAC,IAAI;aACxB,CAAC,CAAC;YACL,IAAI,QAAQ,IAAI,CAAC,oBAAoB,EAAE,CAAC;gBACtC,OAAO,CAAC,KAAK,CACX,IAAI,UAAU,KAAK,WAAW,kDAAkD,IAAI,IAAI,EACxF,oBAAoB,CACrB,CAAC;gBACF,MAAM,IAAI,uBAAgB,CAAC,wBAAwB,CAAC,CAAC;YACvD,CAAC;YACD,OAAO;gBACL,WAAW,EAAE,oBAAoB,CAAC,YAAY;gBAC9C,oBAAoB,EAAE,oBAAoB,CAAC,UAAU;gBACrD,OAAO,EAAE,oBAAoB,CAAC,QAAQ;gBACtC,OAAO,EAAE,IAAI;gBACb,QAAQ,EAAE,IAAI;gBACd,YAAY,EAAE,oBAAoB,CAAC,aAAa;gBAChD,KAAK,EAAE,oBAAoB,CAAC,KAAK;gBACjC,KAAK,EAAE,IAAI;aACZ,CAAC;QACJ,CAAC;KAAA;IAEe,iBAAiB,CAAC,YAAoB;;YACpD,MAAM,MAAM,GAAG,MAAM,gBAAM,CAAC,MAAM,CAAC,MAAM,CACvC,uBAAS,CAAC,iCAAiC,EAC3C,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,YAAY,CAAC,CACvC,CAAC;YACF,OAAO,IAAA,sBAAe,EAAC,MAAM,CAAC,CAAC;QACjC,CAAC;KAAA;IAES,wBAAwB,CAAC,MAAc;QAC/C,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;QAC9C,MAAM,MAAM,GAAG,gBAAM,CAAC,eAAe,CAAC,IAAI,UAAU,CAAC,SAAS,CAAC,CAAC,CAAC;QACjE,OAAO,IAAA,sBAAe,EAAC,MAAM,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;IACzD,CAAC;IAGK,6BAA6B,CACjC,IAA8D;;YAE9D,MAAM,EAAE,UAAU,EAAE,WAAW,EAAE,GAAG,IAAI,CAAC;YACzC,MAAM,EAAE,WAAW,EAAE,OAAO,EAAE,GAAG,IAAI,CAAC;YACtC,MAAM,UAAU,GAA+D,EAAE,CAAC;YAClF,IAAI,WAAW,EAAE,CAAC;gBAChB,MAAM,EAAE,kBAAkB,EAAE,KAAK,EAAE,GAAG,MAAM,IAAI,CAAC,yBAAyB,CAAC;oBACzE,WAAW;iBACZ,CAAC,CAAC;gBACH,IAAI,KAAK,EAAE,CAAC;oBACV,OAAO,CAAC,KAAK,CACX,IAAI,UAAU,KAAK,WAAW,kEAAkE,EAChG,KAAK,CACN,CAAC;oBACF,MAAM,IAAI,uBAAgB,CAAC,IAAI,UAAU,KAAK,WAAW,6CAA6C,CAAC,CAAC;gBAC1G,CAAC;gBACD,UAAU,CAAC,kBAAkB,GAAG,kBAAkB,CAAC;YACrD,CAAC;YACD,IAAI,OAAO,EAAE,CAAC;gBACZ,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC;gBACpD,UAAU,CAAC,cAAc,GAAG,WAAW,CAAC,OAAO,CAAC;YAClD,CAAC;YACD,OAAO,UAAU,CAAC;QACpB,CAAC;KAAA;IAGD,8BAA8B;QAC5B,MAAM,EAAE,cAAc,EAAE,UAAU,EAAE,WAAW,EAAE,GAAG,IAAI,CAAC;QACzD,MAAM,YAAY,GAAG,cAAc,CAAC,MAAM,CAAC,MAAM,CAAC,UAAU,CAAuB,CAAC;QACpF,MAAM,EAAE,KAAK,EAAE,GAAG,YAAY,CAAC,mBAAoB,CAAC,WAAW,CAAC,CAAC;QACjE,MAAM,aAAa,GAAgE;YACjF,CAAC,2CAAoC,CAAC,QAAQ,CAAC,EAAE;gBAC/C,KAAK,EAAE;oBACL,QAAQ,EAAE;wBACR,cAAc,EAAE,OAAO;wBACvB,cAAc,EAAE,YAAY;qBAC7B;oBACD,GAAG,EAAE;wBACH,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,GAAG,EAAE,IAAI,EAAE;qBACrC;iBACF;gBACD,UAAU,EAAE,IAAI;gBAChB,oBAAoB,EAAE,IAAI;gBAC1B,QAAQ,EAAE,IAAI;gBACd,kBAAkB,EAAE,KAAK;gBACzB,sBAAsB,EAAE;oBACtB,aAAa,EAAE,OAAO;oBACtB,eAAe,EAAE,6BAA6B;iBAC/C;gBACD,iBAAiB,EAAE,IAAI;gBACvB,gBAAgB,EAAE,KAAK;aACxB;YACD,CAAC,2CAAoC,CAAC,QAAQ,CAAC,EAAE;gBAC/C,KAAK,EAAE;oBACL,QAAQ,EAAE;wBACR,IAAI,EAAE,CAAC,EAAE,cAAc,EAAE,cAAc,EAAE,cAAc,EAAE,qBAAqB,EAAE,CAAC;qBAClF;oBACD,QAAQ,EAAE;wBACR,cAAc,EAAE,OAAO;wBACvB,cAAc,EAAE,cAAc;qBAC/B;iBACF;gBACD,QAAQ,EAAE,KAAK;gBACf,sBAAsB,EAAE,CAAC,6BAA6B,CAAC;gBACvD,gBAAgB,EAAE,IAAI;aACvB;SACF,CAAC;QACF,OAAO,gBAAE,CAAC,KAAK,CAAC,aAAa,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC;IAC9C,CAAC;IAYK,QAAQ,CACZ,IAAyC,EACzC,OAAgE;;YAEhE,MAAM,EAAE,cAAc,EAAE,UAAU,EAAE,WAAW,EAAE,GAAG,IAAI,CAAC;YACzD,MAAM,YAAY,GAAG,cAAc,CAAC,MAAM,CAAC,MAAM,CAAC,UAAU,CAAuB,CAAC;YACpF,MAAM,EAAE,gBAAgB,EAAE,QAAQ,EAAE,mBAAmB,EAAE,YAAY,EAAE,WAAW,EAAE,GAClF,YAAY,CAAC,mBAAoB,CAAC,WAAW,CAAC,CAAC,MAAO,CAAC;YACzD,MAAM,EAAE,KAAK,EAAE,GAAG,IAAI,CAAC;YACvB,MAAM,EAAE,aAAa,EAAE,QAAQ,EAAE,GAAG,OAAO,CAAC;YAC5C,MAAM,UAAU,GAAG,KAAK,IAAI,YAAY,CAAC;YACzC,IAAI,CAAC,gBAAgB,EAAE,CAAC;gBACtB,OAAO,CAAC,KAAK,CAAC,IAAI,UAAU,KAAK,WAAW,sCAAsC,CAAC,CAAC;gBACpF,MAAM,IAAI,uBAAgB,CAAC,wBAAwB,CAAC,CAAC;YACvD,CAAC;YACD,IAAI,CAAC,WAAW,EAAE,CAAC;gBACjB,OAAO,CAAC,KAAK,CAAC,IAAI,UAAU,KAAK,WAAW,iCAAiC,CAAC,CAAC;gBAC/E,MAAM,IAAI,uBAAgB,CAAC,wBAAwB,CAAC,CAAC;YACvD,CAAC;YACD,IAAI,CAAC,UAAU,EAAE,CAAC;gBAChB,OAAO,CAAC,KAAK,CACX,IAAI,UAAU,KAAK,WAAW,+EAA+E,CAC9G,CAAC;gBACF,MAAM,IAAI,uBAAgB,CAAC,wBAAwB,CAAC,CAAC;YACvD,CAAC;YACD,MAAM,KAAK,GAAG,IAAI,CAAC,wBAAwB,CAAC,EAAE,CAAC,CAAC;YAChD,IAAI,SAA6B,CAAC;YAClC,IAAI,KAAyB,CAAC;YAC9B,IAAI,QAA4B,CAAC;YACjC,IAAI,GAAG,GACL,GAAG,gBAAgB,GAAG;gBACtB,qBAAqB;gBACrB,aAAa,QAAQ,GAAG;gBACxB,gBAAgB,kBAAkB,CAAC,WAAW,CAAC,GAAG;gBAClD,SAAS,kBAAkB,CAAC,UAAU,CAAC,GAAG;gBAC1C,SAAS,KAAK,EAAE,CAAC;YACnB,IAAI,QAAQ,EAAE,CAAC;gBACb,QAAQ,GAAG,IAAI,CAAC,wBAAwB,CAAC,uBAAS,CAAC,2BAA2B,CAAC,CAAC;gBAChF,SAAS,GAAG,MAAM,IAAI,CAAC,iBAAiB,CAAC,QAAQ,CAAC,CAAC;gBACnD,GAAG,IAAI,mBAAmB,SAAS,0BAA0B,mBAAmB,EAAE,CAAC;YACrF,CAAC;YACD,IAAI,aAAa,EAAE,CAAC;gBAClB,KAAK,GAAG,IAAI,CAAC,wBAAwB,CAAC,EAAE,CAAC,CAAC;gBAC1C,GAAG,IAAI,UAAU,KAAK,EAAE,CAAC;YAC3B,CAAC;YACD,OAAO;gBACL,2BAA2B,EAAE,GAAG;gBAChC,aAAa,EAAE,SAAS;gBACxB,YAAY,EAAE,QAAQ;gBACtB,OAAO,EAAE,IAAI;gBACb,QAAQ,EAAE,IAAI;gBACd,KAAK;gBACL,KAAK;gBACL,KAAK,EAAE,IAAI;aACZ,CAAC;QACJ,CAAC;KAAA;IAGK,yBAAyB,CAC7B,IAA0D;;YAE1D,MAAM,EAAE,cAAc,EAAE,UAAU,EAAE,WAAW,EAAE,GAAG,IAAI,CAAC;YACzD,MAAM,YAAY,GAAG,cAAc,CAAC,MAAM,CAAC,MAAM,CAAC,UAAU,CAAuB,CAAC;YACpF,MAAM,EAAE,oBAAoB,EAAE,SAAS,EAAE,mBAAmB,EAAE,GAC5D,YAAY,CAAC,mBAAoB,CAAC,WAAW,CAAC,CAAC,MAAO,CAAC;YACzD,MAAM,EAAE,WAAW,EAAE,GAAG,IAAI,CAAC;YAC7B,IAAI,CAAC,oBAAoB,EAAE,CAAC;gBAC1B,MAAM,IAAI,uBAAgB,CACxB,IAAI,UAAU,KAAK,WAAW,gFAAgF,CAC/G,CAAC;YACJ,CAAC;YACD,IAAI,CAAC,SAAS,EAAE,CAAC;gBACf,MAAM,IAAI,uBAAgB,CACxB,IAAI,UAAU,KAAK,WAAW,uEAAuE,CACtG,CAAC;YACJ,CAAC;YACD,IAAI,mBAAmB,EAAE,CAAC;gBACxB,MAAM,eAAe,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,WAAW,EAAE;oBAC1D,SAAS,EAAE,oBAAoB;oBAC/B,MAAM,EAAE,SAAS;iBAClB,CAAC,CAAC;gBACH,IAAI,eAAe,CAAC,KAAK,EAAE,CAAC;oBAE1B,OAAO,EAAE,KAAK,EAAE,eAAe,CAAC,KAAK,EAAE,CAAC;gBAC1C,CAAC;gBACD,OAAO,EAAE,kBAAkB,EAAE,eAAe,CAAC,OAAO,EAAE,CAAC;YACzD,CAAC;YACD,MAAM,IAAI,uBAAgB,CACxB,IAAI,UAAU,KAAK,WAAW,+FAA+F,CAC9H,CAAC;QACJ,CAAC;KAAA;IAEe,WAAW,CACzB,KAAa,EACb,OAAoE;;YAEpE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,OAAO,IAAI,EAAE,CAAC;YACpD,IAAI,UAAU,GAAuD,EAAE,CAAC;YACxE,IAAI,MAAM,EAAE,CAAC;gBACX,UAAU,GAAG,MAAM,IAAI,OAAO,CAAqD,OAAO,CAAC,EAAE;oBAC3F,GAAG,CAAC,MAAM,CAAC,KAAK,EAAE,MAAM,EAAE,CAAC,GAAG,EAAE,OAAO,EAAE,EAAE;wBACzC,IAAI,GAAG,EAAE,CAAC;4BACR,OAAO,CAAC,EAAE,OAAO,EAAE,OAA8B,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,CAAC;wBACnE,CAAC;wBACD,OAAO,CAAC,EAAE,OAAO,EAAE,OAA8B,EAAE,CAAC,CAAC;oBACvD,CAAC,CAAC,CAAC;gBACL,CAAC,CAAC,CAAC;YACL,CAAC;iBAAM,CAAC;gBACN,MAAM,YAAY,GAAG,GAAG,CAAC,MAAM,CAAC,KAAK,CAAuE,CAAC;gBAC7G,IAAI,YAAY,CAAC,GAAG,EAAE,CAAC;oBAErB,IAAI,gBAAgB,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC;oBACjD,IAAI,SAAS,GAAG,GAAG,YAAY,CAAC,GAAG,EAAE,CAAC;oBACtC,IAAI,SAAS,CAAC,MAAM,GAAG,gBAAgB,CAAC,MAAM,EAAE,CAAC;wBAC/C,gBAAgB,GAAG,gBAAgB,CAAC,SAAS,CAAC,CAAC,EAAE,SAAS,CAAC,MAAM,CAAC,CAAC;oBACrE,CAAC;yBAAM,IAAI,SAAS,CAAC,MAAM,GAAG,gBAAgB,CAAC,MAAM,EAAE,CAAC;wBACtD,SAAS,GAAG,SAAS,CAAC,SAAS,CAAC,CAAC,EAAE,gBAAgB,CAAC,MAAM,CAAC,CAAC;oBAC9D,CAAC;oBACD,IAAI,QAAQ,CAAC,SAAS,EAAE,EAAE,CAAC,GAAG,QAAQ,CAAC,gBAAgB,EAAE,EAAE,CAAC,EAAE,CAAC;wBAC7D,UAAU,CAAC,KAAK,GAAG,uBAAS,CAAC,mBAAmB,CAAC;oBACnD,CAAC;gBACH,CAAC;gBACD,IAAI,YAAY,CAAC,GAAG,IAAI,SAAS,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,YAAY,CAAC,GAAG,CAAC,EAAE,CAAC;oBAC3E,UAAU,CAAC,KAAK,GAAG,uBAAS,CAAC,gCAAgC,CAAC;gBAChE,CAAC;gBACD,IAAI,YAAY,CAAC,GAAG,IAAI,MAAM,IAAI,MAAM,KAAK,YAAY,CAAC,GAAG,EAAE,CAAC;oBAC9D,UAAU,CAAC,KAAK,GAAG,uBAAS,CAAC,6BAA6B,CAAC;gBAC7D,CAAC;gBACD,UAAU,CAAC,OAAO,GAAG,YAAY,CAAC;YACpC,CAAC;YACD,OAAO,UAAU,CAAC;QACpB,CAAC;KAAA;CACF;AA5SD,wEA4SC"}

package/dist/services/authenticationOAuth2/index.d.ts

@@ -0,0 +1,2 @@
+export * from './iam.authenticationOAuth2.definitions';
+export * from './iam.authenticationOAuth2.service';