@node-c/domain-iam 1.0.0-alpha9 → 1.0.0-beta0

package/dist/services/authorization/iam.authorization.service.js

@@ -13,49 +13,137 @@ var __importDefault = (this && this.__importDefault) || function (mod) {
 };
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.IAMAuthorizationService = void 0;
+const crypto_1 = __importDefault(require("crypto"));
 const core_1 = require("@node-c/core");
-const general_tools_1 = require("@ramster/general-tools");
-const immutable_1 = __importDefault(require("immutable"));
-const ramda_1 = require("ramda");
+const lodash_1 = __importDefault(require("lodash"));
+const iam_authorization_definitions_1 = require("./iam.authorization.definitions");
 class IAMAuthorizationService extends core_1.DomainEntityService {
-    constructor(persistanceAuthorizationPointsService, defaultMethods = [core_1.DomainMethod.Find], additionalPersistanceEntityServices) {
-        super(persistanceAuthorizationPointsService, defaultMethods, additionalPersistanceEntityServices);
-        this.persistanceAuthorizationPointsService = persistanceAuthorizationPointsService;
+    constructor(dataAuthorizationPointsService, defaultMethods = [core_1.DomainMethod.Find], additionalDataEntityServices, tokenManager) {
+        super(dataAuthorizationPointsService, defaultMethods, additionalDataEntityServices);
+        this.dataAuthorizationPointsService = dataAuthorizationPointsService;
         this.defaultMethods = defaultMethods;
-        this.additionalPersistanceEntityServices = additionalPersistanceEntityServices;
+        this.additionalDataEntityServices = additionalDataEntityServices;
+        this.tokenManager = tokenManager;
     }
-    static checkAccess(authorizationPoints, inputData, user) {
-        const mutatedInputData = immutable_1.default.fromJS(inputData).toJS();
-        const userPermissionsData = user.currentAuthorizationPoints;
+    authorizeApiKey(data, options) {
+        return __awaiter(this, void 0, void 0, function* () {
+            const { apiKey, signature, signatureContent } = data;
+            const { config: { apiKey: expectedApiKey, apiSecret, apiSecretAlgorithm } } = options;
+            if (!apiKey) {
+                console.error('Missing api key.');
+                return { valid: false };
+            }
+            if (apiKey !== expectedApiKey) {
+                console.error('Invalid api key.');
+                return { valid: false };
+            }
+            if (apiSecret && apiSecretAlgorithm) {
+                if (!signature) {
+                    console.error('Missing authorization signature.');
+                    return { valid: false };
+                }
+                if (!signatureContent) {
+                    console.error('Missing authorization signature content.');
+                    return { valid: false };
+                }
+                const calcualtedSignature = crypto_1.default
+                    .createHmac(apiSecretAlgorithm, apiSecret)
+                    .update(signatureContent)
+                    .digest('hex');
+                if (calcualtedSignature !== signature) {
+                    console.error(`Invalid signature provided. Expected: ${calcualtedSignature}. Provided: ${signature}`);
+                    return { valid: false };
+                }
+            }
+            return { valid: true };
+        });
+    }
+    authorizeBearer(data, options) {
+        return __awaiter(this, void 0, void 0, function* () {
+            const { tokenManager } = this;
+            const { authToken, refreshToken } = data;
+            const { identifierDataField } = options || {};
+            if (!tokenManager) {
+                console.error('Token manager not configured.');
+                return { valid: false };
+            }
+            if (!authToken) {
+                console.error('Missing auth token.');
+                return { valid: false };
+            }
+            let newAuthToken;
+            let tokenContent;
+            try {
+                const tokenRes = yield tokenManager.verifyAccessToken(authToken, {
+                    deleteFromStoreIfExpired: true,
+                    identifierDataField,
+                    persistNewToken: true,
+                    purgeStoreOnRenew: true,
+                    refreshToken,
+                    refreshTokenAccessTokenIdentifierDataField: 'accessToken'
+                });
+                tokenContent = tokenRes.content;
+                if (tokenRes.newToken) {
+                    newAuthToken = tokenRes.newToken;
+                }
+            }
+            catch (e) {
+                console.error('Failed to parse the access or refresh token:', e);
+                return { valid: false };
+            }
+            return { newAuthToken, tokenContent, valid: true };
+        });
+    }
+    checkAccessWithStorage() {
+        return __awaiter(this, void 0, void 0, function* () {
+            throw new core_1.ApplicationError('[IAMAuthorizationService.checkAccessWithStorage]: Method not implemented.');
+        });
+    }
+    static checkAccess(inputData, user, options) {
+        var _a;
+        const { moduleName, resourceContext, resource } = options;
+        let hasResource = false;
+        if (resource) {
+            if (!resourceContext) {
+                throw new core_1.ApplicationError('[IAMAuthorizationService.checkAccess]: A resourceContext is required when providing a resource value.');
+            }
+            hasResource = true;
+        }
+        const mutatedInputData = lodash_1.default.cloneDeep(inputData);
+        const usedAuthorizationPoints = {};
+        const { currentAuthorizationPoints } = user;
+        let authorizationPointsCount = 0;
+        let authorizationPointsForDifferentModules = 0;
+        let authorizationPointsForDifferentContexts = 0;
         let hasAccess = false;
         let inputDataToBeMutated = {};
-        for (const apId in authorizationPoints) {
-            if (!userPermissionsData[apId]) {
+        let noMatchForResource = false;
+        for (const apId in currentAuthorizationPoints) {
+            const apData = currentAuthorizationPoints[apId];
+            authorizationPointsCount++;
+            if (moduleName !== apData.moduleName) {
+                authorizationPointsForDifferentModules++;
+                continue;
+            }
+            if (hasResource &&
+                (!apData.resourceContext ||
+                    apData.resourceContext !== resourceContext ||
+                    !((_a = apData.resources) === null || _a === void 0 ? void 0 : _a.includes(resource)))) {
+                authorizationPointsForDifferentContexts++;
                 continue;
             }
-            const apData = authorizationPoints[apId];
             const { allowedInputData, forbiddenInputData, inputDataFieldName, requiredStaticData, userFieldName } = apData;
             const hasStaticData = requiredStaticData && Object.keys(requiredStaticData).length;
-            const innerMutatedInputData = immutable_1.default.fromJS(mutatedInputData).toJS();
+            const innerMutatedInputData = lodash_1.default.cloneDeep(mutatedInputData);
             const innerInputDataToBeMutated = {};
             hasAccess = true;
-            if (allowedInputData && Object.keys(allowedInputData).length) {
-                const values = IAMAuthorizationService.matchInputValues(innerMutatedInputData, allowedInputData);
-                for (const key in values) {
-                    innerInputDataToBeMutated[key] = values[key];
-                    (0, general_tools_1.setNested)(innerMutatedInputData, key, values[key], { removeNestedFieldEscapeSign: true });
-                }
-            }
-            if (forbiddenInputData && Object.keys(forbiddenInputData).length) {
-                const values = IAMAuthorizationService.matchInputValues(innerMutatedInputData, forbiddenInputData);
-                for (const key in values) {
-                    innerInputDataToBeMutated[key] = undefined;
-                    (0, general_tools_1.setNested)(innerMutatedInputData, key, undefined, { removeNestedFieldEscapeSign: true });
-                }
+            if (!noMatchForResource) {
+                noMatchForResource = true;
             }
             if (hasStaticData) {
                 for (const fieldName in requiredStaticData) {
-                    if (!IAMAuthorizationService.testValue((0, general_tools_1.getNested)({ inputData: innerMutatedInputData, user }, fieldName, { removeNestedFieldEscapeSign: true }), requiredStaticData[fieldName])) {
+                    if (!IAMAuthorizationService.testValue((0, core_1.getNested)({ inputData: innerMutatedInputData, user }, fieldName, { removeNestedFieldEscapeSign: true })
+                        .unifiedValue, requiredStaticData[fieldName])) {
                         hasAccess = false;
                         break;
                     }
@@ -65,49 +153,72 @@ class IAMAuthorizationService extends core_1.DomainEntityService {
                 }
             }
             if (userFieldName && inputDataFieldName) {
-                const inputFieldValue = (0, general_tools_1.getNested)(innerMutatedInputData, inputDataFieldName, {
+                const { paths: inputFieldPaths, unifiedValue: inputFieldValue } = (0, core_1.getNested)(innerMutatedInputData, inputDataFieldName, {
                     removeNestedFieldEscapeSign: true
                 });
-                const userFieldValue = (0, general_tools_1.getNested)(user, userFieldName, { removeNestedFieldEscapeSign: true });
-                if (typeof userFieldValue === 'undefined' || typeof inputFieldValue === 'undefined') {
+                const { unifiedValue: userFieldValue } = (0, core_1.getNested)(user, userFieldName, { removeNestedFieldEscapeSign: true });
+                if (typeof userFieldValue === 'undefined') {
                     hasAccess = false;
                     continue;
                 }
-                const allowedValues = [];
-                const inputValueIsArray = inputFieldValue instanceof Array;
-                const valuesToTest = inputValueIsArray ? inputFieldValue : [inputFieldValue];
-                const valuesToTestAgainst = userFieldValue instanceof Array ? userFieldValue : [userFieldValue];
-                valuesToTest.forEach((valueToTest) => {
-                    const valueToTestVariants = IAMAuthorizationService.getValuesForTesting(valueToTest);
-                    for (const j in valuesToTestAgainst) {
-                        const valueToTestAgainst = valuesToTestAgainst[j];
-                        let matchFound = false;
-                        for (const k in valueToTestVariants) {
-                            const variant = valueToTestVariants[k];
-                            if (valueToTestAgainst === variant) {
-                                allowedValues.push(variant);
-                                matchFound = true;
-                                break;
-                            }
-                        }
-                        if (matchFound) {
-                            break;
-                        }
+                if (typeof inputFieldValue === 'undefined') {
+                    innerInputDataToBeMutated[inputDataFieldName] = userFieldValue;
+                    (0, core_1.setNested)(innerMutatedInputData, inputDataFieldName, userFieldValue, {
+                        removeNestedFieldEscapeSign: true,
+                        setNestedArraysPerIndex: inputFieldPaths.length > 1
+                    });
+                }
+                else {
+                    const allowedValues = IAMAuthorizationService.matchInputValues(innerMutatedInputData, {
+                        [inputDataFieldName]: userFieldValue
+                    })[inputDataFieldName];
+                    const inputValueIsArray = inputFieldValue instanceof Array;
+                    if (!(allowedValues === null || allowedValues === void 0 ? void 0 : allowedValues.length)) {
+                        hasAccess = false;
+                        continue;
                     }
-                });
-                if (!allowedValues.length) {
-                    hasAccess = false;
-                    continue;
+                    if (inputValueIsArray) {
+                        innerInputDataToBeMutated[inputDataFieldName] = allowedValues;
+                        (0, core_1.setNested)(innerMutatedInputData, inputDataFieldName, allowedValues, { removeNestedFieldEscapeSign: true });
+                    }
+                }
+            }
+            if (allowedInputData && Object.keys(allowedInputData).length) {
+                const values = IAMAuthorizationService.matchInputValues(innerMutatedInputData, allowedInputData);
+                for (const key in values) {
+                    innerInputDataToBeMutated[key] = values[key];
+                    (0, core_1.setNested)(innerMutatedInputData, key, values[key], { removeNestedFieldEscapeSign: true });
                 }
-                if (inputValueIsArray) {
-                    innerInputDataToBeMutated[inputDataFieldName] = allowedValues;
-                    (0, general_tools_1.setNested)(mutatedInputData, inputDataFieldName, allowedValues, { removeNestedFieldEscapeSign: true });
+            }
+            if (forbiddenInputData && Object.keys(forbiddenInputData).length) {
+                const values = IAMAuthorizationService.matchInputValues(innerMutatedInputData, forbiddenInputData);
+                for (const key in values) {
+                    innerInputDataToBeMutated[key] = undefined;
+                    (0, core_1.setNested)(innerMutatedInputData, key, undefined, { removeNestedFieldEscapeSign: true });
                 }
             }
-            inputDataToBeMutated = (0, ramda_1.mergeDeepRight)(inputDataToBeMutated, innerInputDataToBeMutated);
+            inputDataToBeMutated = lodash_1.default.merge(inputDataToBeMutated, innerInputDataToBeMutated);
+            usedAuthorizationPoints[apId] = apData;
             break;
         }
-        return { hasAccess, inputDataToBeMutated };
+        const returnData = {
+            authorizationPoints: usedAuthorizationPoints,
+            hasAccess,
+            inputDataToBeMutated,
+            noMatchForResource
+        };
+        if (!hasAccess) {
+            if (authorizationPointsForDifferentModules === authorizationPointsCount) {
+                returnData.errorCode = iam_authorization_definitions_1.AuthorizationCheckErrorCode.RBACNoAccessToModule;
+            }
+            else if (authorizationPointsForDifferentContexts === authorizationPointsCount) {
+                returnData.errorCode = iam_authorization_definitions_1.AuthorizationCheckErrorCode.RBACNoAccessToResource;
+            }
+            else {
+                returnData.errorCode = iam_authorization_definitions_1.AuthorizationCheckErrorCode.FGANoAccessToModule;
+            }
+        }
+        return returnData;
     }
     static getValuesForTesting(valueToTest) {
         const values = [
@@ -123,89 +234,84 @@ class IAMAuthorizationService extends core_1.DomainEntityService {
         }
         return values;
     }
-    mapAuthorizationPoints(moduleName, additionalServicesOptions) {
-        return __awaiter(this, void 0, void 0, function* () {
-            const { result: { items: apList } } = yield this.find(Object.assign(Object.assign({}, (additionalServicesOptions || {})), { filters: { moduleNames: { [core_1.PersistanceSelectOperator.Contains]: moduleName } }, findAll: true }));
-            const authorizationData = { __all: { __all: {} } };
-            const moduleGlobalData = authorizationData.__all.__all;
-            apList.forEach(item => {
-                if (!item.controllerNames) {
-                    moduleGlobalData[item.id] = item;
-                    return;
-                }
-                item.controllerNames.forEach(ctlName => {
-                    let ctlData = authorizationData[ctlName];
-                    if (!ctlData) {
-                        ctlData = { __all: {} };
-                        authorizationData[ctlName] = ctlData;
-                    }
-                    if (!item.handlerNames) {
-                        ctlData.__all[item.id] = item;
-                        return;
-                    }
-                    item.handlerNames.forEach(hName => {
-                        let hData = ctlData[hName];
-                        if (!hData) {
-                            hData = {};
-                            ctlData[hName] = hData;
-                        }
-                        hData[item.id] = item;
-                    });
-                });
-            });
-            return authorizationData;
-        });
-    }
     static matchInputValues(input, values) {
-        const mutatedInput = immutable_1.default.fromJS(input).toJS();
+        const matchedValues = {};
         for (const fieldName in values) {
-            const value = (0, general_tools_1.getNested)(input, fieldName, { removeNestedFieldEscapeSign: true });
+            const { paths: valuePaths, values: foundValues } = (0, core_1.getNested)(input, fieldName, {
+                removeNestedFieldEscapeSign: true
+            });
             const allowedValue = values[fieldName];
             const allowedValues = allowedValue instanceof Array ? allowedValue : [allowedValue];
-            let valueIsArray = false;
-            let valuesToCheck = [];
             const valuesToSet = [];
-            if (value instanceof Array) {
-                valuesToCheck = value;
-                valueIsArray = true;
-            }
-            else {
-                valuesToCheck.push(value);
-            }
-            valuesToCheck.forEach(valueToCheck => {
-                const valueToCheckVariants = IAMAuthorizationService.getValuesForTesting(valueToCheck);
-                for (const i in valueToCheckVariants) {
-                    const actualValueToCheck = valueToCheckVariants[i];
-                    let checkPassed = false;
+            valuePaths.forEach((valuePath, valuePathIndex) => {
+                const valueAtIndex = foundValues[valuePathIndex];
+                let valueIsArray = false;
+                let valuesToCheck = [];
+                if (valueAtIndex instanceof Array) {
+                    valuesToCheck = valueAtIndex;
+                    valueIsArray = true;
+                }
+                else {
+                    valuesToCheck.push(valueAtIndex);
+                }
+                valuesToCheck.forEach(valueToCheck => {
                     for (const j in allowedValues) {
-                        if (IAMAuthorizationService.testValue(actualValueToCheck, allowedValues[j])) {
+                        if (IAMAuthorizationService.testValue(valueToCheck, allowedValues[j])) {
                             valuesToSet.push(valueToCheck);
-                            checkPassed = true;
                             break;
                         }
                     }
-                    if (checkPassed) {
-                        break;
-                    }
+                });
+                if (!valuesToSet.length) {
+                    matchedValues[valuePath] = undefined;
+                    return;
                 }
+                matchedValues[valuePath] = valueIsArray ? valuesToSet : valuesToSet[0];
             });
-            if (!valuesToSet.length) {
-                (0, general_tools_1.setNested)(mutatedInput, fieldName, undefined, { removeNestedFieldEscapeSign: true });
-                continue;
+        }
+        return matchedValues;
+    }
+    static processOutputData(authorizationPoints, outputData) {
+        const mutatedOutputData = lodash_1.default.cloneDeep(outputData);
+        let outputDataToBeMutated = {};
+        for (const apId in authorizationPoints) {
+            const apData = authorizationPoints[apId];
+            const { allowedOutputData, forbiddenOutputData } = apData;
+            const innerMutatedOutputData = lodash_1.default.cloneDeep(mutatedOutputData);
+            const innerOutputDataToBeMutated = {};
+            if (allowedOutputData && Object.keys(allowedOutputData).length) {
+                const values = IAMAuthorizationService.matchInputValues(innerMutatedOutputData, allowedOutputData);
+                for (const key in values) {
+                    innerOutputDataToBeMutated[key] = values[key];
+                    (0, core_1.setNested)(innerMutatedOutputData, key, values[key], { removeNestedFieldEscapeSign: true });
+                }
             }
-            (0, general_tools_1.setNested)(mutatedInput, fieldName, valueIsArray ? valuesToSet : valuesToSet[0], {
-                removeNestedFieldEscapeSign: true
-            });
+            if (forbiddenOutputData && Object.keys(forbiddenOutputData).length) {
+                const values = IAMAuthorizationService.matchInputValues(innerMutatedOutputData, forbiddenOutputData);
+                for (const key in values) {
+                    innerOutputDataToBeMutated[key] = undefined;
+                    (0, core_1.setNested)(innerMutatedOutputData, key, undefined, { removeNestedFieldEscapeSign: true });
+                }
+            }
+            outputDataToBeMutated = lodash_1.default.merge(outputDataToBeMutated, innerOutputDataToBeMutated);
         }
-        return mutatedInput;
+        return { outputDataToBeMutated };
     }
     static testValue(valueToTest, valueToTestAgainst) {
-        if (typeof valueToTest === 'string' &&
-            typeof valueToTestAgainst === 'string' &&
+        if (typeof valueToTestAgainst === 'string' &&
             valueToTestAgainst.charAt(0) === '/' &&
             valueToTestAgainst.charAt(valueToTestAgainst.length - 1) === '/') {
-            const regex = new RegExp(valueToTestAgainst.substring(1, valueToTestAgainst.length - 2));
-            return regex.test(valueToTest);
+            const regex = new RegExp(valueToTestAgainst.substring(1, valueToTestAgainst.length - 1));
+            if (typeof valueToTest === 'undefined') {
+                return false;
+            }
+            return regex.test(typeof valueToTest === 'string' ? valueToTest : JSON.stringify(valueToTest));
+        }
+        if (typeof valueToTest === 'object' &&
+            valueToTest !== null &&
+            typeof valueToTestAgainst === 'object' &&
+            valueToTestAgainst !== null) {
+            return JSON.stringify(valueToTest) === JSON.stringify(valueToTestAgainst);
         }
         const possibleValidValues = IAMAuthorizationService.getValuesForTesting(valueToTest);
         let hasMatch = false;

package/dist/services/authorization/iam.authorization.service.js.map

@@ -1 +1 @@
-{"version":3,"file":"iam.authorization.service.js","sourceRoot":"","sources":["../../../src/services/authorization/iam.authorization.service.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;AAAA,uCAQsB;AAEtB,0DAA8D;AAE9D,0DAAkC;AAClC,iCAAgD;AAQhD,MAAa,uBAKX,SAAQ,0BAKT;IACC,YACY,qCAAmF,EACnF,iBAA2B,CAAC,mBAAY,CAAC,IAAI,CAAC,EAC9C,mCAGT;QAED,KAAK,CAAC,qCAAqC,EAAE,cAAc,EAAE,mCAAmC,CAAC,CAAC;QAPxF,0CAAqC,GAArC,qCAAqC,CAA8C;QACnF,mBAAc,GAAd,cAAc,CAAgC;QAC9C,wCAAmC,GAAnC,mCAAmC,CAG5C;IAGH,CAAC;IAED,MAAM,CAAC,WAAW,CAChB,mBAAsE,EACtE,SAAwB,EACxB,IAAgC;QAKhC,MAAM,gBAAgB,GAAG,mBAAS,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,IAAI,EAAE,CAAC;QAC5D,MAAM,mBAAmB,GAAG,IAAI,CAAC,0BAA2B,CAAC;QAC7D,IAAI,SAAS,GAAG,KAAK,CAAC;QACtB,IAAI,oBAAoB,GAAkB,EAAE,CAAC;QAC7C,KAAK,MAAM,IAAI,IAAI,mBAAmB,EAAE,CAAC;YACvC,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC,EAAE,CAAC;gBAC/B,SAAS;YACX,CAAC;YACD,MAAM,MAAM,GAAG,mBAAmB,CAAC,IAAI,CAAC,CAAC;YACzC,MAAM,EAAE,gBAAgB,EAAE,kBAAkB,EAAE,kBAAkB,EAAE,kBAAkB,EAAE,aAAa,EAAE,GAAG,MAAM,CAAC;YAC/G,MAAM,aAAa,GAAG,kBAAkB,IAAI,MAAM,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC,MAAM,CAAC;YACnF,MAAM,qBAAqB,GAAG,mBAAS,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC,IAAI,EAAE,CAAC;YACxE,MAAM,yBAAyB,GAAkB,EAAE,CAAC;YACpD,SAAS,GAAG,IAAI,CAAC;YACjB,IAAI,gBAAgB,IAAI,MAAM,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC,MAAM,EAAE,CAAC;gBAC7D,MAAM,MAAM,GAAG,uBAAuB,CAAC,gBAAgB,CAAC,qBAAqB,EAAE,gBAAgB,CAAC,CAAC;gBACjG,KAAK,MAAM,GAAG,IAAI,MAAM,EAAE,CAAC;oBACzB,yBAAyB,CAAC,GAAG,CAAC,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;oBAC7C,IAAA,yBAAS,EAAC,qBAAqB,EAAE,GAAG,EAAE,MAAM,CAAC,GAAG,CAAC,EAAE,EAAE,2BAA2B,EAAE,IAAI,EAAE,CAAC,CAAC;gBAC5F,CAAC;YACH,CAAC;YACD,IAAI,kBAAkB,IAAI,MAAM,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC,MAAM,EAAE,CAAC;gBACjE,MAAM,MAAM,GAAG,uBAAuB,CAAC,gBAAgB,CAAC,qBAAqB,EAAE,kBAAkB,CAAC,CAAC;gBACnG,KAAK,MAAM,GAAG,IAAI,MAAM,EAAE,CAAC;oBACzB,yBAAyB,CAAC,GAAG,CAAC,GAAG,SAAS,CAAC;oBAC3C,IAAA,yBAAS,EAAC,qBAAqB,EAAE,GAAG,EAAE,SAAS,EAAE,EAAE,2BAA2B,EAAE,IAAI,EAAE,CAAC,CAAC;gBAC1F,CAAC;YACH,CAAC;YACD,IAAI,aAAa,EAAE,CAAC;gBAClB,KAAK,MAAM,SAAS,IAAI,kBAAkB,EAAE,CAAC;oBAC3C,IACE,CAAC,uBAAuB,CAAC,SAAS,CAChC,IAAA,yBAAS,EAAC,EAAE,SAAS,EAAE,qBAAqB,EAAE,IAAI,EAAE,EAAE,SAAS,EAAE,EAAE,2BAA2B,EAAE,IAAI,EAAE,CAAC,EACvG,kBAAkB,CAAC,SAAS,CAAC,CAC9B,EACD,CAAC;wBACD,SAAS,GAAG,KAAK,CAAC;wBAClB,MAAM;oBACR,CAAC;gBACH,CAAC;gBACD,IAAI,CAAC,SAAS,EAAE,CAAC;oBACf,SAAS;gBACX,CAAC;YACH,CAAC;YACD,IAAI,aAAa,IAAI,kBAAkB,EAAE,CAAC;gBACxC,MAAM,eAAe,GAAG,IAAA,yBAAS,EAAC,qBAAqB,EAAE,kBAAkB,EAAE;oBAC3E,2BAA2B,EAAE,IAAI;iBAClC,CAAC,CAAC;gBACH,MAAM,cAAc,GAAG,IAAA,yBAAS,EAAC,IAAI,EAAE,aAAa,EAAE,EAAE,2BAA2B,EAAE,IAAI,EAAE,CAAC,CAAC;gBAC7F,IAAI,OAAO,cAAc,KAAK,WAAW,IAAI,OAAO,eAAe,KAAK,WAAW,EAAE,CAAC;oBACpF,SAAS,GAAG,KAAK,CAAC;oBAClB,SAAS;gBACX,CAAC;gBACD,MAAM,aAAa,GAAc,EAAE,CAAC;gBACpC,MAAM,iBAAiB,GAAG,eAAe,YAAY,KAAK,CAAC;gBAC3D,MAAM,YAAY,GAAG,iBAAiB,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC;gBAC7E,MAAM,mBAAmB,GAAG,cAAc,YAAY,KAAK,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC;gBAChG,YAAY,CAAC,OAAO,CAAC,CAAC,WAAoB,EAAE,EAAE;oBAC5C,MAAM,mBAAmB,GAAG,uBAAuB,CAAC,mBAAmB,CAAC,WAAW,CAAC,CAAC;oBACrF,KAAK,MAAM,CAAC,IAAI,mBAAmB,EAAE,CAAC;wBACpC,MAAM,kBAAkB,GAAG,mBAAmB,CAAC,CAAC,CAAC,CAAC;wBAClD,IAAI,UAAU,GAAG,KAAK,CAAC;wBACvB,KAAK,MAAM,CAAC,IAAI,mBAAmB,EAAE,CAAC;4BACpC,MAAM,OAAO,GAAG,mBAAmB,CAAC,CAAC,CAAC,CAAC;4BACvC,IAAI,kBAAkB,KAAK,OAAO,EAAE,CAAC;gCACnC,aAAa,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;gCAC5B,UAAU,GAAG,IAAI,CAAC;gCAClB,MAAM;4BACR,CAAC;wBACH,CAAC;wBACD,IAAI,UAAU,EAAE,CAAC;4BACf,MAAM;wBACR,CAAC;oBACH,CAAC;gBACH,CAAC,CAAC,CAAC;gBACH,IAAI,CAAC,aAAa,CAAC,MAAM,EAAE,CAAC;oBAC1B,SAAS,GAAG,KAAK,CAAC;oBAClB,SAAS;gBACX,CAAC;gBACD,IAAI,iBAAiB,EAAE,CAAC;oBACtB,yBAAyB,CAAC,kBAAkB,CAAC,GAAG,aAAa,CAAC;oBAC9D,IAAA,yBAAS,EAAC,gBAAgB,EAAE,kBAAkB,EAAE,aAAa,EAAE,EAAE,2BAA2B,EAAE,IAAI,EAAE,CAAC,CAAC;gBACxG,CAAC;YACH,CAAC;YACD,oBAAoB,GAAG,IAAA,sBAAK,EAAC,oBAAoB,EAAE,yBAAyB,CAAC,CAAC;YAC9E,MAAM;QACR,CAAC;QACD,OAAO,EAAE,SAAS,EAAE,oBAAoB,EAAE,CAAC;IAC7C,CAAC;IAED,MAAM,CAAC,mBAAmB,CAAC,WAAoB;QAC7C,MAAM,MAAM,GAAG;YACb,WAAW;YACX,QAAQ,CAAC,WAAqB,EAAE,EAAE,CAAC;YACnC,UAAU,CAAC,WAAqB,CAAC;SAClC,CAAC;QAEF,IAAI,WAAW,KAAK,MAAM,EAAE,CAAC;YAC3B,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACpB,CAAC;aAAM,IAAI,WAAW,KAAK,OAAO,EAAE,CAAC;YACnC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACrB,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;IAEK,sBAAsB,CAC1B,UAAkB,EAClB,yBAAsE;;YAEtE,MAAM,EACJ,MAAM,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,EAC1B,GAAG,MAAM,IAAI,CAAC,IAAI,iCACd,CAAC,yBAAyB,IAAI,EAAE,CAAC,KACpC,OAAO,EAAE,EAAE,WAAW,EAAE,EAAE,CAAC,gCAAyB,CAAC,QAAQ,CAAC,EAAE,UAAU,EAAE,EAAE,EAC9E,OAAO,EAAE,IAAI,IACb,CAAC;YACH,MAAM,iBAAiB,GAA+B,EAAE,KAAK,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE,CAAC;YAC/E,MAAM,gBAAgB,GAAG,iBAAiB,CAAC,KAAK,CAAC,KAAK,CAAC;YACvD,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE;gBACpB,IAAI,CAAC,IAAI,CAAC,eAAe,EAAE,CAAC;oBAC1B,gBAAgB,CAAC,IAAI,CAAC,EAAY,CAAC,GAAG,IAAI,CAAC;oBAC3C,OAAO;gBACT,CAAC;gBACD,IAAI,CAAC,eAAe,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE;oBACrC,IAAI,OAAO,GAAG,iBAAiB,CAAC,OAAO,CAAC,CAAC;oBACzC,IAAI,CAAC,OAAO,EAAE,CAAC;wBACb,OAAO,GAAG,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC;wBACxB,iBAAiB,CAAC,OAAO,CAAC,GAAG,OAAO,CAAC;oBACvC,CAAC;oBACD,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,CAAC;wBACvB,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,EAAY,CAAC,GAAG,IAAI,CAAC;wBACxC,OAAO;oBACT,CAAC;oBACD,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE;wBAChC,IAAI,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC;wBAC3B,IAAI,CAAC,KAAK,EAAE,CAAC;4BACX,KAAK,GAAG,EAAE,CAAC;4BACX,OAAO,CAAC,KAAK,CAAC,GAAG,KAAK,CAAC;wBACzB,CAAC;wBACD,KAAK,CAAC,IAAI,CAAC,EAAY,CAAC,GAAG,IAAI,CAAC;oBAClC,CAAC,CAAC,CAAC;gBACL,CAAC,CAAC,CAAC;YACL,CAAC,CAAC,CAAC;YACH,OAAO,iBAAiB,CAAC;QAC3B,CAAC;KAAA;IAED,MAAM,CAAC,gBAAgB,CAAC,KAAoB,EAAE,MAAqB;QACjE,MAAM,YAAY,GAAG,mBAAS,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,CAAC;QACpD,KAAK,MAAM,SAAS,IAAI,MAAM,EAAE,CAAC;YAC/B,MAAM,KAAK,GAAG,IAAA,yBAAS,EAAC,KAAK,EAAE,SAAS,EAAE,EAAE,2BAA2B,EAAE,IAAI,EAAE,CAAC,CAAC;YACjF,MAAM,YAAY,GAAG,MAAM,CAAC,SAAS,CAAC,CAAC;YACvC,MAAM,aAAa,GAAG,YAAY,YAAY,KAAK,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC;YACpF,IAAI,YAAY,GAAG,KAAK,CAAC;YACzB,IAAI,aAAa,GAAc,EAAE,CAAC;YAClC,MAAM,WAAW,GAAc,EAAE,CAAC;YAClC,IAAI,KAAK,YAAY,KAAK,EAAE,CAAC;gBAC3B,aAAa,GAAG,KAAK,CAAC;gBACtB,YAAY,GAAG,IAAI,CAAC;YACtB,CAAC;iBAAM,CAAC;gBACN,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YAC5B,CAAC;YACD,aAAa,CAAC,OAAO,CAAC,YAAY,CAAC,EAAE;gBACnC,MAAM,oBAAoB,GAAG,uBAAuB,CAAC,mBAAmB,CAAC,YAAY,CAAC,CAAC;gBACvF,KAAK,MAAM,CAAC,IAAI,oBAAoB,EAAE,CAAC;oBACrC,MAAM,kBAAkB,GAAG,oBAAoB,CAAC,CAAC,CAAC,CAAC;oBACnD,IAAI,WAAW,GAAG,KAAK,CAAC;oBACxB,KAAK,MAAM,CAAC,IAAI,aAAa,EAAE,CAAC;wBAC9B,IAAI,uBAAuB,CAAC,SAAS,CAAC,kBAAkB,EAAE,aAAa,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;4BAC5E,WAAW,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;4BAC/B,WAAW,GAAG,IAAI,CAAC;4BACnB,MAAM;wBACR,CAAC;oBACH,CAAC;oBACD,IAAI,WAAW,EAAE,CAAC;wBAChB,MAAM;oBACR,CAAC;gBACH,CAAC;YACH,CAAC,CAAC,CAAC;YACH,IAAI,CAAC,WAAW,CAAC,MAAM,EAAE,CAAC;gBACxB,IAAA,yBAAS,EAAC,YAAY,EAAE,SAAS,EAAE,SAAS,EAAE,EAAE,2BAA2B,EAAE,IAAI,EAAE,CAAC,CAAC;gBACrF,SAAS;YACX,CAAC;YACD,IAAA,yBAAS,EAAC,YAAY,EAAE,SAAS,EAAE,YAAY,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE;gBAC9E,2BAA2B,EAAE,IAAI;aAClC,CAAC,CAAC;QACL,CAAC;QACD,OAAO,YAAY,CAAC;IACtB,CAAC;IAED,MAAM,CAAC,SAAS,CAAC,WAAoB,EAAE,kBAA2B;QAChE,IACE,OAAO,WAAW,KAAK,QAAQ;YAC/B,OAAO,kBAAkB,KAAK,QAAQ;YACtC,kBAAkB,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,GAAG;YACpC,kBAAkB,CAAC,MAAM,CAAC,kBAAkB,CAAC,MAAM,GAAG,CAAC,CAAC,KAAK,GAAG,EAChE,CAAC;YACD,MAAM,KAAK,GAAG,IAAI,MAAM,CAAC,kBAAkB,CAAC,SAAS,CAAC,CAAC,EAAE,kBAAkB,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC;YACzF,OAAO,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;QACjC,CAAC;QACD,MAAM,mBAAmB,GAAG,uBAAuB,CAAC,mBAAmB,CAAC,WAAW,CAAC,CAAC;QACrF,IAAI,QAAQ,GAAG,KAAK,CAAC;QACrB,KAAK,MAAM,CAAC,IAAI,mBAAmB,EAAE,CAAC;YACpC,IAAI,mBAAmB,CAAC,CAAC,CAAC,KAAK,kBAAkB,EAAE,CAAC;gBAClD,QAAQ,GAAG,IAAI,CAAC;gBAChB,MAAM;YACR,CAAC;QACH,CAAC;QACD,OAAO,QAAQ,CAAC;IAClB,CAAC;CACF;AA/OD,0DA+OC"}
+{"version":3,"file":"iam.authorization.service.js","sourceRoot":"","sources":["../../../src/services/authorization/iam.authorization.service.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;AAAA,oDAA4B;AAE5B,uCASsB;AAEtB,oDAAwB;AAExB,mFAQyC;AAIzC,MAAa,uBAMX,SAAQ,0BAKT;IACC,YACY,8BAAqE,EACrE,iBAA2B,CAAC,mBAAY,CAAC,IAAI,CAAC,EAC9C,4BAA4F,EAE5F,YAA2B;QAErC,KAAK,CAAC,8BAA8B,EAAE,cAAc,EAAE,4BAA4B,CAAC,CAAC;QAN1E,mCAA8B,GAA9B,8BAA8B,CAAuC;QACrE,mBAAc,GAAd,cAAc,CAAgC;QAC9C,iCAA4B,GAA5B,4BAA4B,CAAgE;QAE5F,iBAAY,GAAZ,YAAY,CAAe;IAGvC,CAAC;IAEK,eAAe,CAAC,IAAyB,EAAE,OAA+B;;YAC9E,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,gBAAgB,EAAE,GAAG,IAAI,CAAC;YACrD,MAAM,EACJ,MAAM,EAAE,EAAE,MAAM,EAAE,cAAc,EAAE,SAAS,EAAE,kBAAkB,EAAE,EAClE,GAAG,OAAO,CAAC;YACZ,IAAI,CAAC,MAAM,EAAE,CAAC;gBACZ,OAAO,CAAC,KAAK,CAAC,kBAAkB,CAAC,CAAC;gBAClC,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC;YAC1B,CAAC;YACD,IAAI,MAAM,KAAK,cAAc,EAAE,CAAC;gBAC9B,OAAO,CAAC,KAAK,CAAC,kBAAkB,CAAC,CAAC;gBAClC,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC;YAC1B,CAAC;YACD,IAAI,SAAS,IAAI,kBAAkB,EAAE,CAAC;gBACpC,IAAI,CAAC,SAAS,EAAE,CAAC;oBACf,OAAO,CAAC,KAAK,CAAC,kCAAkC,CAAC,CAAC;oBAClD,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC;gBAC1B,CAAC;gBACD,IAAI,CAAC,gBAAgB,EAAE,CAAC;oBACtB,OAAO,CAAC,KAAK,CAAC,0CAA0C,CAAC,CAAC;oBAC1D,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC;gBAC1B,CAAC;gBACD,MAAM,mBAAmB,GAAG,gBAAM;qBAC/B,UAAU,CAAC,kBAAkB,EAAE,SAAS,CAAC;qBACzC,MAAM,CAAC,gBAAgB,CAAC;qBACxB,MAAM,CAAC,KAAK,CAAC,CAAC;gBACjB,IAAI,mBAAmB,KAAK,SAAS,EAAE,CAAC;oBACtC,OAAO,CAAC,KAAK,CAAC,yCAAyC,mBAAmB,eAAe,SAAS,EAAE,CAAC,CAAC;oBACtG,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC;gBAC1B,CAAC;YACH,CAAC;YACD,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;QACzB,CAAC;KAAA;IAGK,eAAe,CACnB,IAAmD,EACnD,OAA0C;;YAE1C,MAAM,EAAE,YAAY,EAAE,GAAG,IAAI,CAAC;YAC9B,MAAM,EAAE,SAAS,EAAE,YAAY,EAAE,GAAG,IAAI,CAAC;YACzC,MAAM,EAAE,mBAAmB,EAAE,GAAG,OAAO,IAAI,EAAE,CAAC;YAC9C,IAAI,CAAC,YAAY,EAAE,CAAC;gBAClB,OAAO,CAAC,KAAK,CAAC,+BAA+B,CAAC,CAAC;gBAC/C,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC;YAC1B,CAAC;YACD,IAAI,CAAC,SAAS,EAAE,CAAC;gBACf,OAAO,CAAC,KAAK,CAAC,qBAAqB,CAAC,CAAC;gBACrC,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC;YAC1B,CAAC;YACD,IAAI,YAAgC,CAAC;YACrC,IAAI,YAAmE,CAAC;YACxE,IAAI,CAAC;gBACH,MAAM,QAAQ,GAAG,MAAM,YAAY,CAAC,iBAAiB,CAAC,SAAS,EAAE;oBAC/D,wBAAwB,EAAE,IAAI;oBAC9B,mBAAmB;oBACnB,eAAe,EAAE,IAAI;oBACrB,iBAAiB,EAAE,IAAI;oBACvB,YAAY;oBACZ,0CAA0C,EAAE,aAAa;iBAC1D,CAAC,CAAC;gBACH,YAAY,GAAG,QAAQ,CAAC,OAA+D,CAAC;gBACxF,IAAI,QAAQ,CAAC,QAAQ,EAAE,CAAC;oBACtB,YAAY,GAAG,QAAQ,CAAC,QAAQ,CAAC;gBACnC,CAAC;YACH,CAAC;YAAC,OAAO,CAAC,EAAE,CAAC;gBACX,OAAO,CAAC,KAAK,CAAC,8CAA8C,EAAE,CAAC,CAAC,CAAC;gBACjE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC;YAC1B,CAAC;YACD,OAAO,EAAE,YAAY,EAAE,YAAY,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;QACrD,CAAC;KAAA;IAEK,sBAAsB;;YAC1B,MAAM,IAAI,uBAAgB,CAAC,2EAA2E,CAAC,CAAC;QAC1G,CAAC;KAAA;IAED,MAAM,CAAC,WAAW,CAChB,SAAoB,EACpB,IAAgC,EAChC,OAA8C;;QAE9C,MAAM,EAAE,UAAU,EAAE,eAAe,EAAE,QAAQ,EAAE,GAAG,OAAO,CAAC;QAC1D,IAAI,WAAW,GAAG,KAAK,CAAC;QACxB,IAAI,QAAQ,EAAE,CAAC;YACb,IAAI,CAAC,eAAe,EAAE,CAAC;gBACrB,MAAM,IAAI,uBAAgB,CACxB,uGAAuG,CACxG,CAAC;YACJ,CAAC;YACD,WAAW,GAAG,IAAI,CAAC;QACrB,CAAC;QAED,MAAM,gBAAgB,GAAG,gBAAE,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC;QACjD,MAAM,uBAAuB,GAAmD,EAAE,CAAC;QACnF,MAAM,EAAE,0BAA0B,EAAE,GAAG,IAAI,CAAC;QAC5C,IAAI,wBAAwB,GAAG,CAAC,CAAC;QACjC,IAAI,sCAAsC,GAAG,CAAC,CAAC;QAC/C,IAAI,uCAAuC,GAAG,CAAC,CAAC;QAChD,IAAI,SAAS,GAAG,KAAK,CAAC;QACtB,IAAI,oBAAoB,GAAkB,EAAE,CAAC;QAC7C,IAAI,kBAAkB,GAAG,KAAK,CAAC;QAC/B,KAAK,MAAM,IAAI,IAAI,0BAA0B,EAAE,CAAC;YAC9C,MAAM,MAAM,GAAG,0BAA0B,CAAC,IAAI,CAAC,CAAC;YAChD,wBAAwB,EAAE,CAAC;YAE3B,IAAI,UAAU,KAAK,MAAM,CAAC,UAAU,EAAE,CAAC;gBACrC,sCAAsC,EAAE,CAAC;gBACzC,SAAS;YACX,CAAC;YAED,IACE,WAAW;gBACX,CAAC,CAAC,MAAM,CAAC,eAAe;oBACtB,MAAM,CAAC,eAAe,KAAK,eAAe;oBAC1C,CAAC,CAAA,MAAA,MAAM,CAAC,SAAS,0CAAE,QAAQ,CAAC,QAAS,CAAC,CAAA,CAAC,EACzC,CAAC;gBACD,uCAAuC,EAAE,CAAC;gBAC1C,SAAS;YACX,CAAC;YAED,MAAM,EAAE,gBAAgB,EAAE,kBAAkB,EAAE,kBAAkB,EAAE,kBAAkB,EAAE,aAAa,EAAE,GAAG,MAAM,CAAC;YAC/G,MAAM,aAAa,GAAG,kBAAkB,IAAI,MAAM,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC,MAAM,CAAC;YACnF,MAAM,qBAAqB,GAAG,gBAAE,CAAC,SAAS,CAAC,gBAAgB,CAAkB,CAAC;YAC9E,MAAM,yBAAyB,GAAkB,EAAE,CAAC;YACpD,SAAS,GAAG,IAAI,CAAC;YACjB,IAAI,CAAC,kBAAkB,EAAE,CAAC;gBACxB,kBAAkB,GAAG,IAAI,CAAC;YAC5B,CAAC;YAED,IAAI,aAAa,EAAE,CAAC;gBAClB,KAAK,MAAM,SAAS,IAAI,kBAAkB,EAAE,CAAC;oBAC3C,IACE,CAAC,uBAAuB,CAAC,SAAS,CAChC,IAAA,gBAAS,EAAC,EAAE,SAAS,EAAE,qBAAqB,EAAE,IAAI,EAAE,EAAE,SAAS,EAAE,EAAE,2BAA2B,EAAE,IAAI,EAAE,CAAC;yBACpG,YAAY,EACf,kBAAkB,CAAC,SAAS,CAAC,CAC9B,EACD,CAAC;wBACD,SAAS,GAAG,KAAK,CAAC;wBAClB,MAAM;oBACR,CAAC;gBACH,CAAC;gBACD,IAAI,CAAC,SAAS,EAAE,CAAC;oBACf,SAAS;gBACX,CAAC;YACH,CAAC;YAED,IAAI,aAAa,IAAI,kBAAkB,EAAE,CAAC;gBACxC,MAAM,EAAE,KAAK,EAAE,eAAe,EAAE,YAAY,EAAE,eAAe,EAAE,GAAG,IAAA,gBAAS,EACzE,qBAAqB,EACrB,kBAAkB,EAClB;oBACE,2BAA2B,EAAE,IAAI;iBAClC,CACF,CAAC;gBACF,MAAM,EAAE,YAAY,EAAE,cAAc,EAAE,GAAG,IAAA,gBAAS,EAAC,IAAI,EAAE,aAAa,EAAE,EAAE,2BAA2B,EAAE,IAAI,EAAE,CAAC,CAAC;gBAC/G,IAAI,OAAO,cAAc,KAAK,WAAW,EAAE,CAAC;oBAC1C,SAAS,GAAG,KAAK,CAAC;oBAClB,SAAS;gBACX,CAAC;gBACD,IAAI,OAAO,eAAe,KAAK,WAAW,EAAE,CAAC;oBAC3C,yBAAyB,CAAC,kBAAkB,CAAC,GAAG,cAAc,CAAC;oBAC/D,IAAA,gBAAS,EAAC,qBAAqB,EAAE,kBAAkB,EAAE,cAAc,EAAE;wBACnE,2BAA2B,EAAE,IAAI;wBACjC,uBAAuB,EAAE,eAAe,CAAC,MAAM,GAAG,CAAC;qBACpD,CAAC,CAAC;gBACL,CAAC;qBAAM,CAAC;oBACN,MAAM,aAAa,GAAG,uBAAuB,CAAC,gBAAgB,CAAC,qBAAqB,EAAE;wBACpF,CAAC,kBAAkB,CAAC,EAAE,cAAc;qBACrC,CAAC,CAAC,kBAAkB,CAAc,CAAC;oBACpC,MAAM,iBAAiB,GAAG,eAAe,YAAY,KAAK,CAAC;oBAC3D,IAAI,CAAC,CAAA,aAAa,aAAb,aAAa,uBAAb,aAAa,CAAE,MAAM,CAAA,EAAE,CAAC;wBAC3B,SAAS,GAAG,KAAK,CAAC;wBAClB,SAAS;oBACX,CAAC;oBACD,IAAI,iBAAiB,EAAE,CAAC;wBACtB,yBAAyB,CAAC,kBAAkB,CAAC,GAAG,aAAa,CAAC;wBAC9D,IAAA,gBAAS,EAAC,qBAAqB,EAAE,kBAAkB,EAAE,aAAa,EAAE,EAAE,2BAA2B,EAAE,IAAI,EAAE,CAAC,CAAC;oBAC7G,CAAC;gBACH,CAAC;YACH,CAAC;YAGD,IAAI,gBAAgB,IAAI,MAAM,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC,MAAM,EAAE,CAAC;gBAC7D,MAAM,MAAM,GAAG,uBAAuB,CAAC,gBAAgB,CAAC,qBAAqB,EAAE,gBAAgB,CAAC,CAAC;gBACjG,KAAK,MAAM,GAAG,IAAI,MAAM,EAAE,CAAC;oBACzB,yBAAyB,CAAC,GAAG,CAAC,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;oBAC7C,IAAA,gBAAS,EAAC,qBAAqB,EAAE,GAAG,EAAE,MAAM,CAAC,GAAG,CAAC,EAAE,EAAE,2BAA2B,EAAE,IAAI,EAAE,CAAC,CAAC;gBAC5F,CAAC;YACH,CAAC;YAED,IAAI,kBAAkB,IAAI,MAAM,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC,MAAM,EAAE,CAAC;gBACjE,MAAM,MAAM,GAAG,uBAAuB,CAAC,gBAAgB,CAAC,qBAAqB,EAAE,kBAAkB,CAAC,CAAC;gBACnG,KAAK,MAAM,GAAG,IAAI,MAAM,EAAE,CAAC;oBACzB,yBAAyB,CAAC,GAAG,CAAC,GAAG,SAAS,CAAC;oBAC3C,IAAA,gBAAS,EAAC,qBAAqB,EAAE,GAAG,EAAE,SAAS,EAAE,EAAE,2BAA2B,EAAE,IAAI,EAAE,CAAC,CAAC;gBAC1F,CAAC;YACH,CAAC;YACD,oBAAoB,GAAG,gBAAE,CAAC,KAAK,CAAC,oBAAoB,EAAE,yBAAyB,CAAC,CAAC;YACjF,uBAAuB,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC;YACvC,MAAM;QACR,CAAC;QACD,MAAM,UAAU,GAAyC;YACvD,mBAAmB,EAAE,uBAAuB;YAC5C,SAAS;YACT,oBAAoB;YACpB,kBAAkB;SACnB,CAAC;QACF,IAAI,CAAC,SAAS,EAAE,CAAC;YACf,IAAI,sCAAsC,KAAK,wBAAwB,EAAE,CAAC;gBACxE,UAAU,CAAC,SAAS,GAAG,2DAA2B,CAAC,oBAAoB,CAAC;YAC1E,CAAC;iBAAM,IAAI,uCAAuC,KAAK,wBAAwB,EAAE,CAAC;gBAChF,UAAU,CAAC,SAAS,GAAG,2DAA2B,CAAC,sBAAsB,CAAC;YAC5E,CAAC;iBAAM,CAAC;gBACN,UAAU,CAAC,SAAS,GAAG,2DAA2B,CAAC,mBAAmB,CAAC;YACzE,CAAC;QACH,CAAC;QACD,OAAO,UAAU,CAAC;IACpB,CAAC;IAED,MAAM,CAAC,mBAAmB,CAAC,WAAoB;QAC7C,MAAM,MAAM,GAAG;YACb,WAAW;YACX,QAAQ,CAAC,WAAqB,EAAE,EAAE,CAAC;YACnC,UAAU,CAAC,WAAqB,CAAC;SAClC,CAAC;QAEF,IAAI,WAAW,KAAK,MAAM,EAAE,CAAC;YAC3B,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACpB,CAAC;aAAM,IAAI,WAAW,KAAK,OAAO,EAAE,CAAC;YACnC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACrB,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,MAAM,CAAC,gBAAgB,CAAC,KAAoB,EAAE,MAAqB;QACjE,MAAM,aAAa,GAAkB,EAAE,CAAC;QACxC,KAAK,MAAM,SAAS,IAAI,MAAM,EAAE,CAAC;YAC/B,MAAM,EAAE,KAAK,EAAE,UAAU,EAAE,MAAM,EAAE,WAAW,EAAE,GAAG,IAAA,gBAAS,EAAC,KAAK,EAAE,SAAS,EAAE;gBAC7E,2BAA2B,EAAE,IAAI;aAClC,CAAC,CAAC;YACH,MAAM,YAAY,GAAG,MAAM,CAAC,SAAS,CAAC,CAAC;YACvC,MAAM,aAAa,GAAG,YAAY,YAAY,KAAK,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC;YACpF,MAAM,WAAW,GAAc,EAAE,CAAC;YAClC,UAAU,CAAC,OAAO,CAAC,CAAC,SAAS,EAAE,cAAc,EAAE,EAAE;gBAC/C,MAAM,YAAY,GAAG,WAAW,CAAC,cAAc,CAAC,CAAC;gBACjD,IAAI,YAAY,GAAG,KAAK,CAAC;gBACzB,IAAI,aAAa,GAAc,EAAE,CAAC;gBAClC,IAAI,YAAY,YAAY,KAAK,EAAE,CAAC;oBAClC,aAAa,GAAG,YAAY,CAAC;oBAC7B,YAAY,GAAG,IAAI,CAAC;gBACtB,CAAC;qBAAM,CAAC;oBACN,aAAa,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;gBACnC,CAAC;gBACD,aAAa,CAAC,OAAO,CAAC,YAAY,CAAC,EAAE;oBACnC,KAAK,MAAM,CAAC,IAAI,aAAa,EAAE,CAAC;wBAC9B,IAAI,uBAAuB,CAAC,SAAS,CAAC,YAAY,EAAE,aAAa,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;4BACtE,WAAW,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;4BAC/B,MAAM;wBACR,CAAC;oBACH,CAAC;gBACH,CAAC,CAAC,CAAC;gBACH,IAAI,CAAC,WAAW,CAAC,MAAM,EAAE,CAAC;oBACxB,aAAa,CAAC,SAAS,CAAC,GAAG,SAAS,CAAC;oBACrC,OAAO;gBACT,CAAC;gBACD,aAAa,CAAC,SAAS,CAAC,GAAG,YAAY,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC;YACzE,CAAC,CAAC,CAAC;QACL,CAAC;QACD,OAAO,aAAa,CAAC;IACvB,CAAC;IAED,MAAM,CAAC,iBAAiB,CACtB,mBAAsE,EACtE,UAAyB;QAIzB,MAAM,iBAAiB,GAAG,gBAAE,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC;QACnD,IAAI,qBAAqB,GAAkB,EAAE,CAAC;QAC9C,KAAK,MAAM,IAAI,IAAI,mBAAmB,EAAE,CAAC;YACvC,MAAM,MAAM,GAAG,mBAAmB,CAAC,IAAI,CAAC,CAAC;YACzC,MAAM,EAAE,iBAAiB,EAAE,mBAAmB,EAAE,GAAG,MAAM,CAAC;YAC1D,MAAM,sBAAsB,GAAG,gBAAE,CAAC,SAAS,CAAC,iBAAiB,CAAC,CAAC;YAC/D,MAAM,0BAA0B,GAAkB,EAAE,CAAC;YACrD,IAAI,iBAAiB,IAAI,MAAM,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC,MAAM,EAAE,CAAC;gBAC/D,MAAM,MAAM,GAAG,uBAAuB,CAAC,gBAAgB,CAAC,sBAAsB,EAAE,iBAAiB,CAAC,CAAC;gBACnG,KAAK,MAAM,GAAG,IAAI,MAAM,EAAE,CAAC;oBACzB,0BAA0B,CAAC,GAAG,CAAC,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;oBAC9C,IAAA,gBAAS,EAAC,sBAAsB,EAAE,GAAG,EAAE,MAAM,CAAC,GAAG,CAAC,EAAE,EAAE,2BAA2B,EAAE,IAAI,EAAE,CAAC,CAAC;gBAC7F,CAAC;YACH,CAAC;YACD,IAAI,mBAAmB,IAAI,MAAM,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC,MAAM,EAAE,CAAC;gBACnE,MAAM,MAAM,GAAG,uBAAuB,CAAC,gBAAgB,CAAC,sBAAsB,EAAE,mBAAmB,CAAC,CAAC;gBACrG,KAAK,MAAM,GAAG,IAAI,MAAM,EAAE,CAAC;oBACzB,0BAA0B,CAAC,GAAG,CAAC,GAAG,SAAS,CAAC;oBAC5C,IAAA,gBAAS,EAAC,sBAAsB,EAAE,GAAG,EAAE,SAAS,EAAE,EAAE,2BAA2B,EAAE,IAAI,EAAE,CAAC,CAAC;gBAC3F,CAAC;YACH,CAAC;YACD,qBAAqB,GAAG,gBAAE,CAAC,KAAK,CAAC,qBAAqB,EAAE,0BAA0B,CAAC,CAAC;QACtF,CAAC;QACD,OAAO,EAAE,qBAAqB,EAAE,CAAC;IACnC,CAAC;IAED,MAAM,CAAC,SAAS,CAAC,WAAoB,EAAE,kBAA2B;QAChE,IACE,OAAO,kBAAkB,KAAK,QAAQ;YACtC,kBAAkB,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,GAAG;YACpC,kBAAkB,CAAC,MAAM,CAAC,kBAAkB,CAAC,MAAM,GAAG,CAAC,CAAC,KAAK,GAAG,EAChE,CAAC;YACD,MAAM,KAAK,GAAG,IAAI,MAAM,CAAC,kBAAkB,CAAC,SAAS,CAAC,CAAC,EAAE,kBAAkB,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC;YACzF,IAAI,OAAO,WAAW,KAAK,WAAW,EAAE,CAAC;gBACvC,OAAO,KAAK,CAAC;YACf,CAAC;YACD,OAAO,KAAK,CAAC,IAAI,CAAC,OAAO,WAAW,KAAK,QAAQ,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,WAAW,CAAC,CAAC,CAAC;QACjG,CAAC;QACD,IACE,OAAO,WAAW,KAAK,QAAQ;YAC/B,WAAW,KAAK,IAAI;YACpB,OAAO,kBAAkB,KAAK,QAAQ;YACtC,kBAAkB,KAAK,IAAI,EAC3B,CAAC;YACD,OAAO,IAAI,CAAC,SAAS,CAAC,WAAW,CAAC,KAAK,IAAI,CAAC,SAAS,CAAC,kBAAkB,CAAC,CAAC;QAC5E,CAAC;QACD,MAAM,mBAAmB,GAAG,uBAAuB,CAAC,mBAAmB,CAAC,WAAW,CAAC,CAAC;QACrF,IAAI,QAAQ,GAAG,KAAK,CAAC;QACrB,KAAK,MAAM,CAAC,IAAI,mBAAmB,EAAE,CAAC;YACpC,IAAI,mBAAmB,CAAC,CAAC,CAAC,KAAK,kBAAkB,EAAE,CAAC;gBAClD,QAAQ,GAAG,IAAI,CAAC;gBAChB,MAAM;YACR,CAAC;QACH,CAAC;QACD,OAAO,QAAQ,CAAC;IAClB,CAAC;CACF;AApWD,0DAoWC"}

package/dist/services/index.d.ts

@@ -1,5 +1,7 @@
 export * from './authentication';
-export * from './authenticationLocal';
+export * from './authenticationOAuth2';
+export * from './authenticationUserLocal';
 export * from './authorization';
+export * from './mfa';
 export * from './tokenManager';
-export * from './users';
+export * from './userManager';

package/dist/services/index.js

@@ -15,8 +15,10 @@ var __exportStar = (this && this.__exportStar) || function(m, exports) {
 };
 Object.defineProperty(exports, "__esModule", { value: true });
 __exportStar(require("./authentication"), exports);
-__exportStar(require("./authenticationLocal"), exports);
+__exportStar(require("./authenticationOAuth2"), exports);
+__exportStar(require("./authenticationUserLocal"), exports);
 __exportStar(require("./authorization"), exports);
+__exportStar(require("./mfa"), exports);
 __exportStar(require("./tokenManager"), exports);
-__exportStar(require("./users"), exports);
+__exportStar(require("./userManager"), exports);
 //# sourceMappingURL=index.js.map

package/dist/services/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/services/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,mDAAiC;AACjC,wDAAsC;AACtC,kDAAgC;AAChC,iDAA+B;AAC/B,0CAAwB"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/services/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,mDAAiC;AACjC,yDAAuC;AACvC,4DAA0C;AAC1C,kDAAgC;AAChC,wCAAsB;AACtB,iDAA+B;AAC/B,gDAA8B"}

package/dist/services/mfa/iam.mfa.definitions.d.ts

@@ -0,0 +1,21 @@
+export interface IAMMFACompleteData {
+    type?: IAMMFAType;
+}
+export interface IAMMFACompleteOptions<Context> {
+    context: Context;
+}
+export declare enum IAMMFAType {
+    Local = "local"
+}
+export interface IAMMFACompleteResult {
+    valid: boolean;
+}
+export interface IAMMFAInitiateData {
+    type?: IAMMFAType;
+}
+export interface IAMMFAInitiateOptions<Context> {
+    context: Context;
+}
+export interface IAMMFAInitiateResult {
+    valid: boolean;
+}

package/dist/services/mfa/iam.mfa.definitions.js

@@ -0,0 +1,8 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.IAMMFAType = void 0;
+var IAMMFAType;
+(function (IAMMFAType) {
+    IAMMFAType["Local"] = "local";
+})(IAMMFAType || (exports.IAMMFAType = IAMMFAType = {}));
+//# sourceMappingURL=iam.mfa.definitions.js.map

package/dist/services/mfa/iam.mfa.definitions.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"iam.mfa.definitions.js","sourceRoot":"","sources":["../../../src/services/mfa/iam.mfa.definitions.ts"],"names":[],"mappings":";;;AAQA,IAAY,UAGX;AAHD,WAAY,UAAU;IAEpB,6BAAe,CAAA;AACjB,CAAC,EAHW,UAAU,0BAAV,UAAU,QAGrB"}

package/dist/services/mfa/iam.mfa.service.d.ts

@@ -0,0 +1,9 @@
+import { ConfigProviderService } from '@node-c/core';
+import { IAMMFACompleteData, IAMMFACompleteOptions, IAMMFACompleteResult, IAMMFAInitiateData, IAMMFAInitiateOptions, IAMMFAInitiateResult } from './iam.mfa.definitions';
+export declare class IAMMFAService<CompleteContext extends object, InitiateContext extends object = object> {
+    protected configProvider: ConfigProviderService;
+    protected moduleName: string;
+    constructor(configProvider: ConfigProviderService, moduleName: string);
+    complete(_data: IAMMFACompleteData, _options: IAMMFACompleteOptions<CompleteContext>): Promise<IAMMFACompleteResult>;
+    initiate(_data: IAMMFAInitiateData, _options: IAMMFAInitiateOptions<InitiateContext>): Promise<IAMMFAInitiateResult>;
+}

package/dist/services/mfa/iam.mfa.service.js

@@ -0,0 +1,31 @@
+"use strict";
+var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
+    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
+    return new (P || (P = Promise))(function (resolve, reject) {
+        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
+        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
+        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
+        step((generator = generator.apply(thisArg, _arguments || [])).next());
+    });
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.IAMMFAService = void 0;
+const core_1 = require("@node-c/core");
+class IAMMFAService {
+    constructor(configProvider, moduleName) {
+        this.configProvider = configProvider;
+        this.moduleName = moduleName;
+    }
+    complete(_data, _options) {
+        return __awaiter(this, void 0, void 0, function* () {
+            throw new core_1.ApplicationError(`[${this.moduleName}][IAMMFAService]: Method "complete" not implemented.`);
+        });
+    }
+    initiate(_data, _options) {
+        return __awaiter(this, void 0, void 0, function* () {
+            throw new core_1.ApplicationError(`[${this.moduleName}][IAMMFAService]: Method "initiate" not implemented.`);
+        });
+    }
+}
+exports.IAMMFAService = IAMMFAService;
+//# sourceMappingURL=iam.mfa.service.js.map

package/dist/services/mfa/iam.mfa.service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"iam.mfa.service.js","sourceRoot":"","sources":["../../../src/services/mfa/iam.mfa.service.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,uCAAuE;AAYvE,MAAa,aAAa;IACxB,YAEY,cAAqC,EAErC,UAAkB;QAFlB,mBAAc,GAAd,cAAc,CAAuB;QAErC,eAAU,GAAV,UAAU,CAAQ;IAC3B,CAAC;IAEE,QAAQ,CAEZ,KAAyB,EAEzB,QAAgD;;YAEhD,MAAM,IAAI,uBAAgB,CAAC,IAAI,IAAI,CAAC,UAAU,sDAAsD,CAAC,CAAC;QACxG,CAAC;KAAA;IAEK,QAAQ,CAEZ,KAAyB,EAEzB,QAAgD;;YAEhD,MAAM,IAAI,uBAAgB,CAAC,IAAI,IAAI,CAAC,UAAU,sDAAsD,CAAC,CAAC;QACxG,CAAC;KAAA;CACF;AAzBD,sCAyBC"}

package/dist/services/mfa/index.d.ts

@@ -0,0 +1,2 @@
+export * from './iam.mfa.definitions';
+export * from './iam.mfa.service';

package/dist/services/{users → mfa}/index.js

@@ -14,6 +14,6 @@ var __exportStar = (this && this.__exportStar) || function(m, exports) {
     for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
 };
 Object.defineProperty(exports, "__esModule", { value: true });
-__exportStar(require("./iam.users.definitions"), exports);
-__exportStar(require("./iam.users.service"), exports);
+__exportStar(require("./iam.mfa.definitions"), exports);
+__exportStar(require("./iam.mfa.service"), exports);
 //# sourceMappingURL=index.js.map

package/dist/services/mfa/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/services/mfa/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,wDAAsC;AACtC,oDAAkC"}

package/dist/services/tokenManager/iam.tokenManager.definitions.d.ts

@@ -1,25 +1,36 @@
 import { DomainCreateOptions } from '@node-c/core';
+import { IAMAuthenticationType, IAMAuthenticationVerifyExternalAccessTokenResult } from '../authentication';
+export interface BaseTokenEntityFields {
+    externalToken?: string;
+    externalTokenAuthService?: IAMAuthenticationType;
+}
 export type DecodedTokenContent<TokenEntityFields> = {
     exp?: number;
     iat: number;
-    data?: TokenEntityFields;
+    data?: TokenEntityFields & BaseTokenEntityFields;
 };
 export type TokenEntity<TokenEntityFields extends object> = {
     token: string;
     type: TokenType;
-} & TokenEntityFields;
+} & TokenEntityFields & BaseTokenEntityFields;
 export type TokenManagerCreateData<TokenEntityFields extends object> = Partial<Omit<TokenEntity<TokenEntityFields>, 'token'>>;
 export type TokenManagerCreateOptions = {
     expiresInMinutes?: number;
     identifierDataField?: string;
     persist?: boolean;
-    purgeOldFromPersistance?: boolean;
+    purgeOldFromData?: boolean;
+    tokenContentOnlyFields?: string[];
     ttl?: number;
 } & DomainCreateOptions;
 export declare enum TokenType {
     Access = "access",
     Refresh = "refresh"
 }
+export interface TokenManagerVerifyResult<TokenEntityFields> {
+    content?: DecodedTokenContent<TokenEntityFields>;
+    externalTokenData?: IAMAuthenticationVerifyExternalAccessTokenResult;
+    error?: unknown;
+}
 export interface VerifyAccessTokenOptions {
     deleteFromStoreIfExpired?: boolean;
     identifierDataField?: string;