@node-c/domain-iam 1.0.0-alpha9 → 1.0.0-beta1

package/dist/services/tokenManager/iam.tokenManager.definitions.d.ts

@@ -1,25 +1,36 @@
 import { DomainCreateOptions } from '@node-c/core';
+import { IAMAuthenticationType, IAMAuthenticationVerifyExternalAccessTokenResult } from '../authentication';
+export interface BaseTokenEntityFields {
+    externalToken?: string;
+    externalTokenAuthService?: IAMAuthenticationType;
+}
 export type DecodedTokenContent<TokenEntityFields> = {
     exp?: number;
     iat: number;
-    data?: TokenEntityFields;
+    data?: TokenEntityFields & BaseTokenEntityFields;
 };
 export type TokenEntity<TokenEntityFields extends object> = {
     token: string;
     type: TokenType;
-} & TokenEntityFields;
+} & TokenEntityFields & BaseTokenEntityFields;
 export type TokenManagerCreateData<TokenEntityFields extends object> = Partial<Omit<TokenEntity<TokenEntityFields>, 'token'>>;
 export type TokenManagerCreateOptions = {
     expiresInMinutes?: number;
     identifierDataField?: string;
     persist?: boolean;
-    purgeOldFromPersistance?: boolean;
+    purgeOldFromData?: boolean;
+    tokenContentOnlyFields?: string[];
     ttl?: number;
 } & DomainCreateOptions;
 export declare enum TokenType {
     Access = "access",
     Refresh = "refresh"
 }
+export interface TokenManagerVerifyResult<TokenEntityFields> {
+    content?: DecodedTokenContent<TokenEntityFields>;
+    externalTokenData?: IAMAuthenticationVerifyExternalAccessTokenResult;
+    error?: unknown;
+}
 export interface VerifyAccessTokenOptions {
     deleteFromStoreIfExpired?: boolean;
     identifierDataField?: string;

package/dist/services/tokenManager/iam.tokenManager.definitions.js.map

@@ -1 +1 @@
-{"version":3,"file":"iam.tokenManager.definitions.js","sourceRoot":"","sources":["../../../src/services/tokenManager/iam.tokenManager.definitions.ts"],"names":[],"mappings":";;;AAyBA,IAAY,SAKX;AALD,WAAY,SAAS;IAEnB,8BAAiB,CAAA;IAEjB,gCAAmB,CAAA;AACrB,CAAC,EALW,SAAS,yBAAT,SAAS,QAKpB"}
+{"version":3,"file":"iam.tokenManager.definitions.js","sourceRoot":"","sources":["../../../src/services/tokenManager/iam.tokenManager.definitions.ts"],"names":[],"mappings":";;;AAkCA,IAAY,SAKX;AALD,WAAY,SAAS;IAEnB,8BAAiB,CAAA;IAEjB,gCAAmB,CAAA;AACrB,CAAC,EALW,SAAS,yBAAT,SAAS,QAKpB"}

package/dist/services/tokenManager/iam.tokenManager.service.d.ts

@@ -1,14 +1,29 @@
-import { ConfigProviderService, DomainCreateResult, DomainEntityService, PersistanceEntityService } from '@node-c/core';
-import { DecodedTokenContent, TokenEntity, TokenManagerCreateData, TokenManagerCreateOptions, VerifyAccessTokenOptions, VerifyAccessTokenReturnData } from './iam.tokenManager.definitions';
-export declare class IAMTokenManagerService<TokenEntityFields extends object> extends DomainEntityService<TokenEntity<TokenEntityFields>, PersistanceEntityService<TokenEntity<TokenEntityFields>>> {
+import { ConfigProviderService, DataEntityService, DomainCreateResult, DomainEntityService, LoggerService } from '@node-c/core';
+import { TokenEntity, TokenManagerCreateData, TokenManagerCreateOptions, TokenManagerVerifyResult, VerifyAccessTokenOptions, VerifyAccessTokenReturnData } from './iam.tokenManager.definitions';
+import { IAMAuthenticationService, IAMAuthenticationType } from '../authentication';
+import { IAMAuthenticationOAuth2Service } from '../authenticationOAuth2';
+import { IAMAuthenticationUserLocalService } from '../authenticationUserLocal';
+export declare class IAMTokenManagerService<TokenEntityFields extends object> {
+    protected authServices: {
+        [IAMAuthenticationType.OAuth2]?: IAMAuthenticationOAuth2Service<object, object>;
+        [IAMAuthenticationType.UserLocal]?: IAMAuthenticationUserLocalService<object, object>;
+    } & {
+        [serviceName: string]: IAMAuthenticationService<object, object>;
+    };
     protected configProvider: ConfigProviderService;
+    protected domainTokensEntityService: DomainEntityService<TokenEntity<TokenEntityFields>, DataEntityService<TokenEntity<TokenEntityFields>>>;
+    protected logger: LoggerService;
     protected moduleName: string;
-    protected persistanceEntityService: PersistanceEntityService<TokenEntity<TokenEntityFields>>;
-    constructor(configProvider: ConfigProviderService, moduleName: string, persistanceEntityService: PersistanceEntityService<TokenEntity<TokenEntityFields>>);
+    constructor(authServices: {
+        [IAMAuthenticationType.OAuth2]?: IAMAuthenticationOAuth2Service<object, object>;
+        [IAMAuthenticationType.UserLocal]?: IAMAuthenticationUserLocalService<object, object>;
+    } & {
+        [serviceName: string]: IAMAuthenticationService<object, object>;
+    }, configProvider: ConfigProviderService, domainTokensEntityService: DomainEntityService<TokenEntity<TokenEntityFields>, DataEntityService<TokenEntity<TokenEntityFields>>>, logger: LoggerService, moduleName: string);
     create(data: TokenManagerCreateData<TokenEntityFields>, options: TokenManagerCreateOptions): Promise<DomainCreateResult<TokenEntity<TokenEntityFields>>>;
     verifyAccessToken(token: string, options?: VerifyAccessTokenOptions): Promise<VerifyAccessTokenReturnData<TokenEntityFields>>;
-    protected verify(token: string, secret: string): Promise<{
-        content?: DecodedTokenContent<TokenEntityFields>;
-        error?: unknown;
-    }>;
+    protected verify(token: string, secret: string, options?: {
+        forceVerifyExternal?: boolean;
+        verifyExternal?: boolean;
+    }): Promise<TokenManagerVerifyResult<TokenEntityFields>>;
 }

package/dist/services/tokenManager/iam.tokenManager.service.js

@@ -52,28 +52,31 @@ var __rest = (this && this.__rest) || function (s, e) {
         }
     return t;
 };
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.IAMTokenManagerService = void 0;
 const core_1 = require("@node-c/core");
-const general_tools_1 = require("@ramster/general-tools");
 const jwt = __importStar(require("jsonwebtoken"));
+const lodash_1 = __importDefault(require("lodash"));
 const iam_tokenManager_definitions_1 = require("./iam.tokenManager.definitions");
-class IAMTokenManagerService extends core_1.DomainEntityService {
-    constructor(configProvider, moduleName, persistanceEntityService) {
-        super(persistanceEntityService, ['create']);
+const definitions_1 = require("../../common/definitions");
+const authentication_1 = require("../authentication");
+class IAMTokenManagerService {
+    constructor(authServices, configProvider, domainTokensEntityService, logger, moduleName) {
+        this.authServices = authServices;
         this.configProvider = configProvider;
+        this.domainTokensEntityService = domainTokensEntityService;
+        this.logger = logger;
         this.moduleName = moduleName;
-        this.persistanceEntityService = persistanceEntityService;
     }
     create(data, options) {
-        const _super = Object.create(null, {
-            create: { get: () => super.create }
-        });
         return __awaiter(this, void 0, void 0, function* () {
-            const { configProvider, moduleName, persistanceEntityService } = this;
+            const { configProvider, logger, moduleName, domainTokensEntityService } = this;
             const moduleConfig = configProvider.config.domain[moduleName];
             const { type } = data, tokenData = __rest(data, ["type"]);
-            const { expiresInMinutes, identifierDataField, persist, purgeOldFromPersistance } = options;
+            const { expiresInMinutes, identifierDataField, persist, purgeOldFromData, tokenContentOnlyFields } = options;
             const signOptions = {};
             let secret;
             if (type === iam_tokenManager_definitions_1.TokenType.Access) {
@@ -100,7 +103,7 @@ class IAMTokenManagerService extends core_1.DomainEntityService {
             const token = yield new Promise((resolve, reject) => {
                 jwt.sign({ data }, secret, signOptions, (err, token) => {
                     if (err) {
-                        console.error(err);
+                        logger.error(err);
                         reject(new core_1.ApplicationError('Failed to sign token.'));
                         return;
                     }
@@ -108,85 +111,137 @@ class IAMTokenManagerService extends core_1.DomainEntityService {
                 });
             });
             const objectToSave = Object.assign(Object.assign({}, tokenData), { token, type });
-            if (persist && persistanceEntityService) {
-                if (purgeOldFromPersistance && identifierDataField) {
-                    const identifierValue = (0, general_tools_1.getNested)(data, identifierDataField);
+            if (tokenContentOnlyFields === null || tokenContentOnlyFields === void 0 ? void 0 : tokenContentOnlyFields.length) {
+                tokenContentOnlyFields.forEach(fieldName => (0, core_1.setNested)(objectToSave, fieldName, undefined, { removeNestedFieldEscapeSign: true }));
+            }
+            if (persist) {
+                if (purgeOldFromData && identifierDataField) {
+                    const identifierValue = lodash_1.default.get(data, identifierDataField);
                     if (typeof identifierValue !== 'undefined' && typeof identifierValue !== 'object') {
-                        yield persistanceEntityService.delete({
-                            filters: { [identifierDataField]: identifierValue }
-                        });
+                        yield domainTokensEntityService.delete({
+                            filters: { [identifierDataField]: identifierValue, type }
+                        }, { requirePrimaryKeys: true });
                     }
                 }
-                yield _super.create.call(this, objectToSave, { ttl: signOptions.expiresIn });
+                yield domainTokensEntityService.create(objectToSave, { ttl: signOptions.expiresIn });
             }
             return { result: objectToSave };
         });
     }
     verifyAccessToken(token, options) {
         return __awaiter(this, void 0, void 0, function* () {
-            const { configProvider, moduleName, persistanceEntityService } = this;
+            var _a;
+            const { configProvider, domainTokensEntityService, logger, moduleName } = this;
             const moduleConfig = configProvider.config.domain[moduleName];
             const { deleteFromStoreIfExpired, identifierDataField, newTokenExpiresInMinutes, persistNewToken, purgeStoreOnRenew, refreshToken, refreshTokenAccessTokenIdentifierDataField } = options || {};
-            const { content, error } = yield this.verify(token, moduleConfig.jwtAccessSecret);
-            let forceRenew = true;
+            const { content, error, externalTokenData } = yield this.verify(token, moduleConfig.jwtAccessSecret, {
+                verifyExternal: true
+            });
+            const externalAccessTokenExpired = !!(externalTokenData === null || externalTokenData === void 0 ? void 0 : externalTokenData.error);
+            const internalAccessTokenExpired = error === definitions_1.Constants.TOKEN_EXPIRED_ERROR;
+            let errorMessageToLog;
+            let externalRenewEnabled = false;
             let newToken;
-            if (error) {
-                let errorToThrow;
-                let throwError = true;
-                if (error === 'Token expired' && identifierDataField && (content === null || content === void 0 ? void 0 : content.data) && persistanceEntityService) {
+            let refreshTokenContent;
+            let renewEnabled = false;
+            let throwError = true;
+            if (internalAccessTokenExpired || externalAccessTokenExpired) {
+                if (identifierDataField && (content === null || content === void 0 ? void 0 : content.data)) {
                     if (refreshToken && refreshTokenAccessTokenIdentifierDataField) {
-                        const { content: refreshTokenContent, error: refreshTokenError } = yield this.verify(refreshToken, moduleConfig.jwtRefreshSecret);
-                        if (refreshTokenError) {
-                            errorToThrow = refreshTokenError;
-                        }
+                        const { content: rtc, error: refreshTokenError } = yield this.verify(refreshToken, moduleConfig.jwtRefreshSecret);
+                        refreshTokenContent = rtc;
                         if (!refreshTokenContent) {
-                            errorToThrow = new core_1.ApplicationError('Empty refresh token.');
+                            errorMessageToLog = '[IAMTokenManagerService.verifyAccessToken]: Empty internal refresh token.';
+                        }
+                        else if (refreshTokenError) {
+                            errorMessageToLog = refreshTokenError;
+                            if (deleteFromStoreIfExpired && refreshTokenContent.data) {
+                                const identifierValue = lodash_1.default.get(refreshTokenContent.data, refreshTokenAccessTokenIdentifierDataField);
+                                if (typeof identifierValue !== 'undefined' && typeof identifierValue !== 'object') {
+                                    yield domainTokensEntityService.delete({
+                                        filters: { [refreshTokenAccessTokenIdentifierDataField]: identifierValue, token: refreshToken }
+                                    }, { requirePrimaryKeys: true });
+                                }
+                            }
                         }
                         else {
-                            const refreshTokenCheckValue = (0, general_tools_1.getNested)(content.data, refreshTokenAccessTokenIdentifierDataField);
+                            const refreshTokenCheckValue = lodash_1.default.get(content.data, refreshTokenAccessTokenIdentifierDataField);
                             if (refreshTokenCheckValue !== refreshToken) {
-                                errorToThrow = new core_1.ApplicationError('Mismatched refresh token.');
+                                errorMessageToLog = '[IAMTokenManagerService.verifyAccessToken]: Mismatched internal refresh token.';
                             }
                             else {
-                                forceRenew = false;
+                                renewEnabled = true;
                                 throwError = false;
                             }
                         }
+                        if (externalAccessTokenExpired) {
+                            if ((_a = refreshTokenContent === null || refreshTokenContent === void 0 ? void 0 : refreshTokenContent.data) === null || _a === void 0 ? void 0 : _a.externalToken) {
+                                externalRenewEnabled = true;
+                                renewEnabled = true;
+                                throwError = false;
+                            }
+                            else {
+                                errorMessageToLog = '[IAMTokenManagerService.verifyAccessToken]: Missing external refresh token.';
+                            }
+                        }
                     }
                     else {
+                        errorMessageToLog =
+                            '[IAMTokenManagerService.verifyAccessToken]: Access token expired & no refresh token data present or configured.';
                         if (deleteFromStoreIfExpired) {
-                            const identifierValue = (0, general_tools_1.getNested)(content.data, identifierDataField);
+                            const identifierValue = lodash_1.default.get(content.data, identifierDataField);
                             if (typeof identifierValue !== 'undefined' && typeof identifierValue !== 'object') {
-                                yield persistanceEntityService.delete({
-                                    filters: { [identifierDataField]: identifierValue }
-                                });
+                                yield domainTokensEntityService.delete({
+                                    filters: { [identifierDataField]: identifierValue, token }
+                                }, { requirePrimaryKeys: true });
                             }
                         }
-                        errorToThrow = new core_1.ApplicationError('Expired access token.');
                     }
                 }
-                if (throwError) {
-                    throw errorToThrow || error;
+                else {
+                    errorMessageToLog = '[IAMTokenManagerService.verify]: Internal access token expired.';
                 }
             }
-            if ((content === null || content === void 0 ? void 0 : content.data) && forceRenew) {
+            else {
+                throwError = false;
+            }
+            if (throwError) {
+                logger.error(errorMessageToLog);
+                throw new core_1.ApplicationError('Expired access token.');
+            }
+            if ((content === null || content === void 0 ? void 0 : content.data) && renewEnabled) {
                 const tokenData = Object.assign(Object.assign({}, content.data), { type: iam_tokenManager_definitions_1.TokenType.Access });
                 if (refreshToken && refreshTokenAccessTokenIdentifierDataField) {
                     tokenData[refreshTokenAccessTokenIdentifierDataField] = refreshToken;
                 }
+                if (externalRenewEnabled) {
+                    const externalAccessTokenRenewalResult = yield this.authServices[refreshTokenContent.data.externalTokenAuthService].refreshExternalAccessToken({
+                        accessToken: content.data.externalToken,
+                        refreshToken: refreshTokenContent.data.externalToken
+                    });
+                    if (externalAccessTokenRenewalResult.error) {
+                        logger.error(errorMessageToLog);
+                        throw new core_1.ApplicationError('Expired access token.');
+                    }
+                    tokenData.externalToken = externalAccessTokenRenewalResult.newAccessToken;
+                }
                 const { result } = yield this.create(tokenData, {
                     expiresInMinutes: newTokenExpiresInMinutes,
                     identifierDataField,
                     persist: persistNewToken,
-                    purgeOldFromPersistance: purgeStoreOnRenew
+                    purgeOldFromData: purgeStoreOnRenew
                 });
                 newToken = result.token;
             }
             return { content, newToken };
         });
     }
-    verify(token, secret) {
+    verify(token, secret, options) {
         return __awaiter(this, void 0, void 0, function* () {
+            var _a, _b;
+            const { configProvider, moduleName } = this;
+            const moduleConfig = configProvider.config.domain[moduleName];
+            const { forceVerifyExternal, verifyExternal } = options || {};
             const data = yield new Promise(resolve => {
                 jwt.verify(token, secret, (err, decoded) => {
                     if (err) {
@@ -195,7 +250,21 @@ class IAMTokenManagerService extends core_1.DomainEntityService {
                     resolve({ content: decoded });
                 });
             });
-            return data;
+            const returnData = Object.assign({}, data);
+            const tokenPayload = (_a = data.content) === null || _a === void 0 ? void 0 : _a.data;
+            if (verifyExternal && (tokenPayload === null || tokenPayload === void 0 ? void 0 : tokenPayload.externalToken) && (tokenPayload === null || tokenPayload === void 0 ? void 0 : tokenPayload.externalTokenAuthService)) {
+                const authServiceConfig = (_b = moduleConfig.authServiceSettings) === null || _b === void 0 ? void 0 : _b[tokenPayload === null || tokenPayload === void 0 ? void 0 : tokenPayload.externalTokenAuthService];
+                if ((authServiceConfig === null || authServiceConfig === void 0 ? void 0 : authServiceConfig.processExternalTokensOnVerify) || forceVerifyExternal) {
+                    const authService = this.authServices[tokenPayload === null || tokenPayload === void 0 ? void 0 : tokenPayload.externalTokenAuthService];
+                    if (!authService) {
+                        throw new core_1.ApplicationError(`[IAMTokenManagerService.verify]: Auth service ${tokenPayload === null || tokenPayload === void 0 ? void 0 : tokenPayload.externalTokenAuthService} not configured.`);
+                    }
+                    returnData.externalTokenData = yield authService.verifyExternalAccessToken({
+                        accessToken: tokenPayload === null || tokenPayload === void 0 ? void 0 : tokenPayload.externalToken
+                    });
+                }
+            }
+            return returnData;
         });
     }
 }

package/dist/services/tokenManager/iam.tokenManager.service.js.map

@@ -1 +1 @@
-{"version":3,"file":"iam.tokenManager.service.js","sourceRoot":"","sources":["../../../src/services/tokenManager/iam.tokenManager.service.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,uCASsB;AAEtB,0DAAmD;AACnD,kDAAoC;AAEpC,iFAQwC;AAGxC,MAAa,sBAAyD,SAAQ,0BAG7E;IACC,YAEY,cAAqC,EAErC,UAAkB,EAElB,wBAAkF;QAE5F,KAAK,CAAC,wBAAyB,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC;QANnC,mBAAc,GAAd,cAAc,CAAuB;QAErC,eAAU,GAAV,UAAU,CAAQ;QAElB,6BAAwB,GAAxB,wBAAwB,CAA0D;IAG9F,CAAC;IAEK,MAAM,CACV,IAA+C,EAC/C,OAAkC;;;;;YAElC,MAAM,EAAE,cAAc,EAAE,UAAU,EAAE,wBAAwB,EAAE,GAAG,IAAI,CAAC;YACtE,MAAM,YAAY,GAAG,cAAc,CAAC,MAAM,CAAC,MAAM,CAAC,UAAU,CAAuB,CAAC;YACpF,MAAM,EAAE,IAAI,KAAmB,IAAI,EAAlB,SAAS,UAAK,IAAI,EAA7B,QAAsB,CAAO,CAAC;YACpC,MAAM,EAAE,gBAAgB,EAAE,mBAAmB,EAAE,OAAO,EAAE,uBAAuB,EAAE,GAAG,OAAO,CAAC;YAC5F,MAAM,WAAW,GAAG,EAAqB,CAAC;YAC1C,IAAI,MAAc,CAAC;YAEnB,IAAI,IAAI,KAAK,wCAAS,CAAC,MAAM,EAAE,CAAC;gBAC9B,MAAM,GAAG,YAAY,CAAC,eAAe,CAAC;gBACtC,IAAI,gBAAgB,EAAE,CAAC;oBACrB,WAAW,CAAC,SAAS,GAAG,gBAAgB,GAAG,EAAE,CAAC;gBAChD,CAAC;qBAAM,IAAI,YAAY,CAAC,8BAA8B,EAAE,CAAC;oBACvD,WAAW,CAAC,SAAS,GAAG,YAAY,CAAC,8BAA8B,GAAG,EAAE,CAAC;gBAC3E,CAAC;YACH,CAAC;iBAAM,IAAI,IAAI,KAAK,wCAAS,CAAC,OAAO,EAAE,CAAC;gBACtC,MAAM,GAAG,YAAY,CAAC,gBAAgB,CAAC;gBACvC,IAAI,gBAAgB,EAAE,CAAC;oBACrB,WAAW,CAAC,SAAS,GAAG,gBAAgB,GAAG,EAAE,CAAC;gBAChD,CAAC;qBAAM,IAAI,YAAY,CAAC,+BAA+B,EAAE,CAAC;oBACxD,WAAW,CAAC,SAAS,GAAG,YAAY,CAAC,+BAA+B,GAAG,EAAE,CAAC;gBAC5E,CAAC;YACH,CAAC;iBAAM,CAAC;gBACN,MAAM,IAAI,uBAAgB,CAAC,gDAAgD,IAAI,IAAI,CAAC,CAAC;YACvF,CAAC;YACD,MAAM,KAAK,GAAG,MAAM,IAAI,OAAO,CAAS,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;gBAC1D,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC,GAAG,EAAE,KAAK,EAAE,EAAE;oBACrD,IAAI,GAAG,EAAE,CAAC;wBACR,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;wBACnB,MAAM,CAAC,IAAI,uBAAgB,CAAC,uBAAuB,CAAC,CAAC,CAAC;wBACtD,OAAO;oBACT,CAAC;oBACD,OAAO,CAAC,KAAe,CAAC,CAAC;gBAC3B,CAAC,CAAC,CAAC;YACL,CAAC,CAAC,CAAC;YACH,MAAM,YAAY,GAAG,gCAAK,SAAS,KAAE,KAAK,EAAE,IAAI,GAAoC,CAAC;YAGrF,IAAI,OAAO,IAAI,wBAAwB,EAAE,CAAC;gBACxC,IAAI,uBAAuB,IAAI,mBAAmB,EAAE,CAAC;oBACnD,MAAM,eAAe,GAAG,IAAA,yBAAS,EAAC,IAAI,EAAE,mBAAmB,CAAC,CAAC;oBAC7D,IAAI,OAAO,eAAe,KAAK,WAAW,IAAI,OAAO,eAAe,KAAK,QAAQ,EAAE,CAAC;wBAClF,MAAM,wBAAwB,CAAC,MAAM,CAAC;4BACpC,OAAO,EAAE,EAAE,CAAC,mBAAmB,CAAC,EAAE,eAAe,EAAE;yBACpD,CAAC,CAAC;oBACL,CAAC;gBACH,CAAC;gBACD,MAAM,OAAM,MAAM,YAAC,YAAY,EAAE,EAAE,GAAG,EAAE,WAAW,CAAC,SAAS,EAAyB,CAAC,CAAC;YAC1F,CAAC;YACD,OAAO,EAAE,MAAM,EAAE,YAAY,EAAE,CAAC;QAClC,CAAC;KAAA;IAEK,iBAAiB,CACrB,KAAa,EACb,OAAkC;;YAElC,MAAM,EAAE,cAAc,EAAE,UAAU,EAAE,wBAAwB,EAAE,GAAG,IAAI,CAAC;YACtE,MAAM,YAAY,GAAG,cAAc,CAAC,MAAM,CAAC,MAAM,CAAC,UAAU,CAAuB,CAAC;YACpF,MAAM,EACJ,wBAAwB,EACxB,mBAAmB,EACnB,wBAAwB,EACxB,eAAe,EACf,iBAAiB,EACjB,YAAY,EACZ,0CAA0C,EAC3C,GAAG,OAAO,IAAI,EAAE,CAAC;YAElB,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,YAAY,CAAC,eAAe,CAAC,CAAC;YAClF,IAAI,UAAU,GAAG,IAAI,CAAC;YACtB,IAAI,QAA4B,CAAC;YAEjC,IAAI,KAAK,EAAE,CAAC;gBACV,IAAI,YAA+B,CAAC;gBACpC,IAAI,UAAU,GAAG,IAAI,CAAC;gBACtB,IAAI,KAAK,KAAK,eAAe,IAAI,mBAAmB,KAAI,OAAO,aAAP,OAAO,uBAAP,OAAO,CAAE,IAAI,CAAA,IAAI,wBAAwB,EAAE,CAAC;oBAClG,IAAI,YAAY,IAAI,0CAA0C,EAAE,CAAC;wBAC/D,MAAM,EAAE,OAAO,EAAE,mBAAmB,EAAE,KAAK,EAAE,iBAAiB,EAAE,GAAG,MAAM,IAAI,CAAC,MAAM,CAClF,YAAY,EACZ,YAAY,CAAC,gBAAgB,CAC9B,CAAC;wBACF,IAAI,iBAAiB,EAAE,CAAC;4BACtB,YAAY,GAAG,iBAA0B,CAAC;wBAC5C,CAAC;wBACD,IAAI,CAAC,mBAAmB,EAAE,CAAC;4BACzB,YAAY,GAAG,IAAI,uBAAgB,CAAC,sBAAsB,CAAC,CAAC;wBAC9D,CAAC;6BAAM,CAAC;4BACN,MAAM,sBAAsB,GAAG,IAAA,yBAAS,EAAC,OAAO,CAAC,IAAI,EAAE,0CAA0C,CAAC,CAAC;4BACnG,IAAI,sBAAsB,KAAK,YAAY,EAAE,CAAC;gCAC5C,YAAY,GAAG,IAAI,uBAAgB,CAAC,2BAA2B,CAAC,CAAC;4BACnE,CAAC;iCAAM,CAAC;gCACN,UAAU,GAAG,KAAK,CAAC;gCACnB,UAAU,GAAG,KAAK,CAAC;4BACrB,CAAC;wBACH,CAAC;oBACH,CAAC;yBAAM,CAAC;wBACN,IAAI,wBAAwB,EAAE,CAAC;4BAC7B,MAAM,eAAe,GAAG,IAAA,yBAAS,EAAC,OAAO,CAAC,IAAI,EAAE,mBAAmB,CAAC,CAAC;4BACrE,IAAI,OAAO,eAAe,KAAK,WAAW,IAAI,OAAO,eAAe,KAAK,QAAQ,EAAE,CAAC;gCAClF,MAAM,wBAAwB,CAAC,MAAM,CAAC;oCACpC,OAAO,EAAE,EAAE,CAAC,mBAAmB,CAAC,EAAE,eAAe,EAAE;iCACpD,CAAC,CAAC;4BACL,CAAC;wBACH,CAAC;wBACD,YAAY,GAAG,IAAI,uBAAgB,CAAC,uBAAuB,CAAC,CAAC;oBAC/D,CAAC;gBACH,CAAC;gBACD,IAAI,UAAU,EAAE,CAAC;oBACf,MAAM,YAAY,IAAI,KAAK,CAAC;gBAC9B,CAAC;YACH,CAAC;YAED,IAAI,CAAA,OAAO,aAAP,OAAO,uBAAP,OAAO,CAAE,IAAI,KAAI,UAAU,EAAE,CAAC;gBAChC,MAAM,SAAS,mCAAwD,OAAO,CAAC,IAAI,KAAE,IAAI,EAAE,wCAAS,CAAC,MAAM,GAAE,CAAC;gBAC9G,IAAI,YAAY,IAAI,0CAA0C,EAAE,CAAC;oBAC/D,SAAS,CAAC,0CAA0C,CAAC,GAAG,YAAY,CAAC;gBACvE,CAAC;gBACD,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,SAAsD,EAAE;oBAC3F,gBAAgB,EAAE,wBAAwB;oBAC1C,mBAAmB;oBACnB,OAAO,EAAE,eAAe;oBACxB,uBAAuB,EAAE,iBAAiB;iBAC3C,CAAC,CAAC;gBACH,QAAQ,GAAG,MAAM,CAAC,KAAK,CAAC;YAC1B,CAAC;YACD,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAC;QAC/B,CAAC;KAAA;IAEe,MAAM,CACpB,KAAa,EACb,MAAc;;YAEd,MAAM,IAAI,GAAG,MAAM,IAAI,OAAO,CAAwE,OAAO,CAAC,EAAE;gBAC9G,GAAG,CAAC,MAAM,CAAC,KAAK,EAAE,MAAM,EAAE,CAAC,GAAG,EAAE,OAAO,EAAE,EAAE;oBACzC,IAAI,GAAG,EAAE,CAAC;wBACR,OAAO,CAAC,EAAE,OAAO,EAAE,OAAiD,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,CAAC;oBACtF,CAAC;oBACD,OAAO,CAAC,EAAE,OAAO,EAAE,OAAiD,EAAE,CAAC,CAAC;gBAC1E,CAAC,CAAC,CAAC;YACL,CAAC,CAAC,CAAC;YACH,OAAO,IAAI,CAAC;QACd,CAAC;KAAA;CACF;AAhKD,wDAgKC"}
+{"version":3,"file":"iam.tokenManager.service.js","sourceRoot":"","sources":["../../../src/services/tokenManager/iam.tokenManager.service.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,uCAWsB;AAEtB,kDAAoC;AACpC,oDAAwB;AAExB,iFASwC;AAExC,0DAAqD;AACrD,sDAAoF;AAOpF,MAAa,sBAAsB;IACjC,YAIY,YAG6D,EAE7D,cAAqC,EAErC,yBAGT,EAES,MAAqB,EAErB,UAAkB;QAdlB,iBAAY,GAAZ,YAAY,CAGiD;QAE7D,mBAAc,GAAd,cAAc,CAAuB;QAErC,8BAAyB,GAAzB,yBAAyB,CAGlC;QAES,WAAM,GAAN,MAAM,CAAe;QAErB,eAAU,GAAV,UAAU,CAAQ;IAC3B,CAAC;IAEE,MAAM,CACV,IAA+C,EAC/C,OAAkC;;YAElC,MAAM,EAAE,cAAc,EAAE,MAAM,EAAE,UAAU,EAAE,yBAAyB,EAAE,GAAG,IAAI,CAAC;YAC/E,MAAM,YAAY,GAAG,cAAc,CAAC,MAAM,CAAC,MAAM,CAAC,UAAU,CAAuB,CAAC;YACpF,MAAM,EAAE,IAAI,KAAmB,IAAI,EAAlB,SAAS,UAAK,IAAI,EAA7B,QAAsB,CAAO,CAAC;YACpC,MAAM,EAAE,gBAAgB,EAAE,mBAAmB,EAAE,OAAO,EAAE,gBAAgB,EAAE,sBAAsB,EAAE,GAAG,OAAO,CAAC;YAC7G,MAAM,WAAW,GAAG,EAAqB,CAAC;YAC1C,IAAI,MAAc,CAAC;YAEnB,IAAI,IAAI,KAAK,wCAAS,CAAC,MAAM,EAAE,CAAC;gBAC9B,MAAM,GAAG,YAAY,CAAC,eAAe,CAAC;gBACtC,IAAI,gBAAgB,EAAE,CAAC;oBACrB,WAAW,CAAC,SAAS,GAAG,gBAAgB,GAAG,EAAE,CAAC;gBAChD,CAAC;qBAAM,IAAI,YAAY,CAAC,8BAA8B,EAAE,CAAC;oBACvD,WAAW,CAAC,SAAS,GAAG,YAAY,CAAC,8BAA8B,GAAG,EAAE,CAAC;gBAC3E,CAAC;YACH,CAAC;iBAAM,IAAI,IAAI,KAAK,wCAAS,CAAC,OAAO,EAAE,CAAC;gBACtC,MAAM,GAAG,YAAY,CAAC,gBAAgB,CAAC;gBACvC,IAAI,gBAAgB,EAAE,CAAC;oBACrB,WAAW,CAAC,SAAS,GAAG,gBAAgB,GAAG,EAAE,CAAC;gBAChD,CAAC;qBAAM,IAAI,YAAY,CAAC,+BAA+B,EAAE,CAAC;oBACxD,WAAW,CAAC,SAAS,GAAG,YAAY,CAAC,+BAA+B,GAAG,EAAE,CAAC;gBAC5E,CAAC;YACH,CAAC;iBAAM,CAAC;gBACN,MAAM,IAAI,uBAAgB,CAAC,gDAAgD,IAAI,IAAI,CAAC,CAAC;YACvF,CAAC;YACD,MAAM,KAAK,GAAG,MAAM,IAAI,OAAO,CAAS,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;gBAC1D,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC,GAAG,EAAE,KAAK,EAAE,EAAE;oBACrD,IAAI,GAAG,EAAE,CAAC;wBACR,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;wBAClB,MAAM,CAAC,IAAI,uBAAgB,CAAC,uBAAuB,CAAC,CAAC,CAAC;wBACtD,OAAO;oBACT,CAAC;oBACD,OAAO,CAAC,KAAe,CAAC,CAAC;gBAC3B,CAAC,CAAC,CAAC;YACL,CAAC,CAAC,CAAC;YACH,MAAM,YAAY,GAAG,gCAAK,SAAS,KAAE,KAAK,EAAE,IAAI,GAAoC,CAAC;YACrF,IAAI,sBAAsB,aAAtB,sBAAsB,uBAAtB,sBAAsB,CAAE,MAAM,EAAE,CAAC;gBACnC,sBAAsB,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,CACzC,IAAA,gBAAS,EAAC,YAAY,EAAE,SAAS,EAAE,SAAS,EAAE,EAAE,2BAA2B,EAAE,IAAI,EAAE,CAAC,CACrF,CAAC;YACJ,CAAC;YAGD,IAAI,OAAO,EAAE,CAAC;gBACZ,IAAI,gBAAgB,IAAI,mBAAmB,EAAE,CAAC;oBAC5C,MAAM,eAAe,GAAG,gBAAE,CAAC,GAAG,CAAC,IAAI,EAAE,mBAAmB,CAAC,CAAC;oBAC1D,IAAI,OAAO,eAAe,KAAK,WAAW,IAAI,OAAO,eAAe,KAAK,QAAQ,EAAE,CAAC;wBAClF,MAAM,yBAAyB,CAAC,MAAM,CACpC;4BACE,OAAO,EAAE,EAAE,CAAC,mBAAmB,CAAC,EAAE,eAAe,EAAE,IAAI,EAAE;yBAC1D,EACD,EAAE,kBAAkB,EAAE,IAAI,EAAE,CAC7B,CAAC;oBACJ,CAAC;gBACH,CAAC;gBACD,MAAM,yBAAyB,CAAC,MAAM,CAAC,YAAY,EAAE,EAAE,GAAG,EAAE,WAAW,CAAC,SAAS,EAAyB,CAAC,CAAC;YAC9G,CAAC;YACD,OAAO,EAAE,MAAM,EAAE,YAAY,EAAE,CAAC;QAClC,CAAC;KAAA;IAGK,iBAAiB,CACrB,KAAa,EACb,OAAkC;;;YAElC,MAAM,EAAE,cAAc,EAAE,yBAAyB,EAAE,MAAM,EAAE,UAAU,EAAE,GAAG,IAAI,CAAC;YAC/E,MAAM,YAAY,GAAG,cAAc,CAAC,MAAM,CAAC,MAAM,CAAC,UAAU,CAAuB,CAAC;YACpF,MAAM,EACJ,wBAAwB,EACxB,mBAAmB,EACnB,wBAAwB,EACxB,eAAe,EACf,iBAAiB,EACjB,YAAY,EACZ,0CAA0C,EAC3C,GAAG,OAAO,IAAI,EAAE,CAAC;YAElB,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,iBAAiB,EAAE,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,YAAY,CAAC,eAAe,EAAE;gBAEnG,cAAc,EAAE,IAAI;aACrB,CAAC,CAAC;YACH,MAAM,0BAA0B,GAAG,CAAC,CAAC,CAAA,iBAAiB,aAAjB,iBAAiB,uBAAjB,iBAAiB,CAAE,KAAK,CAAA,CAAC;YAC9D,MAAM,0BAA0B,GAAG,KAAK,KAAK,uBAAS,CAAC,mBAAmB,CAAC;YAC3E,IAAI,iBAAqC,CAAC;YAC1C,IAAI,oBAAoB,GAAG,KAAK,CAAC;YACjC,IAAI,QAA4B,CAAC;YACjC,IAAI,mBAA4D,CAAC;YACjE,IAAI,YAAY,GAAG,KAAK,CAAC;YACzB,IAAI,UAAU,GAAG,IAAI,CAAC;YAEtB,IAAI,0BAA0B,IAAI,0BAA0B,EAAE,CAAC;gBAE7D,IAAI,mBAAmB,KAAI,OAAO,aAAP,OAAO,uBAAP,OAAO,CAAE,IAAI,CAAA,EAAE,CAAC;oBACzC,IAAI,YAAY,IAAI,0CAA0C,EAAE,CAAC;wBAE/D,MAAM,EAAE,OAAO,EAAE,GAAG,EAAE,KAAK,EAAE,iBAAiB,EAAE,GAAG,MAAM,IAAI,CAAC,MAAM,CAClE,YAAY,EACZ,YAAY,CAAC,gBAAgB,CAC9B,CAAC;wBACF,mBAAmB,GAAG,GAAG,CAAC;wBAC1B,IAAI,CAAC,mBAAmB,EAAE,CAAC;4BACzB,iBAAiB,GAAG,2EAA2E,CAAC;wBAClG,CAAC;6BAAM,IAAI,iBAAiB,EAAE,CAAC;4BAC7B,iBAAiB,GAAG,iBAA2B,CAAC;4BAEhD,IAAI,wBAAwB,IAAI,mBAAmB,CAAC,IAAI,EAAE,CAAC;gCACzD,MAAM,eAAe,GAAG,gBAAE,CAAC,GAAG,CAAC,mBAAmB,CAAC,IAAI,EAAE,0CAA0C,CAAC,CAAC;gCACrG,IAAI,OAAO,eAAe,KAAK,WAAW,IAAI,OAAO,eAAe,KAAK,QAAQ,EAAE,CAAC;oCAClF,MAAM,yBAAyB,CAAC,MAAM,CACpC;wCACE,OAAO,EAAE,EAAE,CAAC,0CAA0C,CAAC,EAAE,eAAe,EAAE,KAAK,EAAE,YAAY,EAAE;qCAChG,EACD,EAAE,kBAAkB,EAAE,IAAI,EAAE,CAC7B,CAAC;gCACJ,CAAC;4BACH,CAAC;wBACH,CAAC;6BAAM,CAAC;4BACN,MAAM,sBAAsB,GAAG,gBAAE,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,EAAE,0CAA0C,CAAC,CAAC;4BAChG,IAAI,sBAAsB,KAAK,YAAY,EAAE,CAAC;gCAC5C,iBAAiB,GAAG,gFAAgF,CAAC;4BACvG,CAAC;iCAAM,CAAC;gCACN,YAAY,GAAG,IAAI,CAAC;gCACpB,UAAU,GAAG,KAAK,CAAC;4BACrB,CAAC;wBACH,CAAC;wBAED,IAAI,0BAA0B,EAAE,CAAC;4BAC/B,IAAI,MAAA,mBAAmB,aAAnB,mBAAmB,uBAAnB,mBAAmB,CAAE,IAAI,0CAAE,aAAa,EAAE,CAAC;gCAC7C,oBAAoB,GAAG,IAAI,CAAC;gCAC5B,YAAY,GAAG,IAAI,CAAC;gCACpB,UAAU,GAAG,KAAK,CAAC;4BACrB,CAAC;iCAAM,CAAC;gCACN,iBAAiB,GAAG,6EAA6E,CAAC;4BACpG,CAAC;wBACH,CAAC;oBACH,CAAC;yBAEI,CAAC;wBACJ,iBAAiB;4BACf,iHAAiH,CAAC;wBACpH,IAAI,wBAAwB,EAAE,CAAC;4BAC7B,MAAM,eAAe,GAAG,gBAAE,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,EAAE,mBAAmB,CAAC,CAAC;4BAClE,IAAI,OAAO,eAAe,KAAK,WAAW,IAAI,OAAO,eAAe,KAAK,QAAQ,EAAE,CAAC;gCAClF,MAAM,yBAAyB,CAAC,MAAM,CACpC;oCACE,OAAO,EAAE,EAAE,CAAC,mBAAmB,CAAC,EAAE,eAAe,EAAE,KAAK,EAAE;iCAC3D,EACD,EAAE,kBAAkB,EAAE,IAAI,EAAE,CAC7B,CAAC;4BACJ,CAAC;wBACH,CAAC;oBACH,CAAC;gBACH,CAAC;qBAEI,CAAC;oBACJ,iBAAiB,GAAG,iEAAiE,CAAC;gBACxF,CAAC;YACH,CAAC;iBAAM,CAAC;gBACN,UAAU,GAAG,KAAK,CAAC;YACrB,CAAC;YACD,IAAI,UAAU,EAAE,CAAC;gBACf,MAAM,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC;gBAChC,MAAM,IAAI,uBAAgB,CAAC,uBAAuB,CAAC,CAAC;YACtD,CAAC;YAED,IAAI,CAAA,OAAO,aAAP,OAAO,uBAAP,OAAO,CAAE,IAAI,KAAI,YAAY,EAAE,CAAC;gBAClC,MAAM,SAAS,mCAAwD,OAAO,CAAC,IAAI,KAAE,IAAI,EAAE,wCAAS,CAAC,MAAM,GAAE,CAAC;gBAC9G,IAAI,YAAY,IAAI,0CAA0C,EAAE,CAAC;oBAC/D,SAAS,CAAC,0CAA0C,CAAC,GAAG,YAAY,CAAC;gBACvE,CAAC;gBACD,IAAI,oBAAoB,EAAE,CAAC;oBACzB,MAAM,gCAAgC,GAAG,MAAM,IAAI,CAAC,YAAY,CAC9D,mBAAoB,CAAC,IAAK,CAAC,wBAAyB,CACpD,CAAC,0BAA0B,CAAC;wBAC5B,WAAW,EAAE,OAAO,CAAC,IAAK,CAAC,aAAc;wBACzC,YAAY,EAAE,mBAAoB,CAAC,IAAK,CAAC,aAAc;qBACxD,CAAC,CAAC;oBACH,IAAI,gCAAgC,CAAC,KAAK,EAAE,CAAC;wBAE3C,MAAM,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC;wBAChC,MAAM,IAAI,uBAAgB,CAAC,uBAAuB,CAAC,CAAC;oBACtD,CAAC;oBAED,SAAS,CAAC,aAAa,GAAG,gCAAgC,CAAC,cAAc,CAAC;gBAC5E,CAAC;gBACD,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,SAAsD,EAAE;oBAC3F,gBAAgB,EAAE,wBAAwB;oBAC1C,mBAAmB;oBACnB,OAAO,EAAE,eAAe;oBACxB,gBAAgB,EAAE,iBAAiB;iBACpC,CAAC,CAAC;gBACH,QAAQ,GAAG,MAAM,CAAC,KAAK,CAAC;YAC1B,CAAC;YACD,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAC;QAC/B,CAAC;KAAA;IAEe,MAAM,CACpB,KAAa,EACb,MAAc,EACd,OAAqE;;;YAErE,MAAM,EAAE,cAAc,EAAE,UAAU,EAAE,GAAG,IAAI,CAAC;YAC5C,MAAM,YAAY,GAAG,cAAc,CAAC,MAAM,CAAC,MAAM,CAAC,UAAU,CAAuB,CAAC;YACpF,MAAM,EAAE,mBAAmB,EAAE,cAAc,EAAE,GAAG,OAAO,IAAI,EAAE,CAAC;YAC9D,MAAM,IAAI,GAAG,MAAM,IAAI,OAAO,CAAwE,OAAO,CAAC,EAAE;gBAC9G,GAAG,CAAC,MAAM,CAAC,KAAK,EAAE,MAAM,EAAE,CAAC,GAAG,EAAE,OAAO,EAAE,EAAE;oBACzC,IAAI,GAAG,EAAE,CAAC;wBACR,OAAO,CAAC,EAAE,OAAO,EAAE,OAAiD,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,CAAC;oBACtF,CAAC;oBACD,OAAO,CAAC,EAAE,OAAO,EAAE,OAAiD,EAAE,CAAC,CAAC;gBAC1E,CAAC,CAAC,CAAC;YACL,CAAC,CAAC,CAAC;YAEH,MAAM,UAAU,qBAAqD,IAAI,CAAE,CAAC;YAC5E,MAAM,YAAY,GAAG,MAAA,IAAI,CAAC,OAAO,0CAAE,IAAI,CAAC;YACxC,IAAI,cAAc,KAAI,YAAY,aAAZ,YAAY,uBAAZ,YAAY,CAAE,aAAa,CAAA,KAAI,YAAY,aAAZ,YAAY,uBAAZ,YAAY,CAAE,wBAAwB,CAAA,EAAE,CAAC;gBAC5F,MAAM,iBAAiB,GAAG,MAAA,YAAY,CAAC,mBAAmB,0CAAG,YAAY,aAAZ,YAAY,uBAAZ,YAAY,CAAE,wBAAwB,CAAC,CAAC;gBACrG,IAAI,CAAA,iBAAiB,aAAjB,iBAAiB,uBAAjB,iBAAiB,CAAE,6BAA6B,KAAI,mBAAmB,EAAE,CAAC;oBAC5E,MAAM,WAAW,GAAG,IAAI,CAAC,YAAY,CAAC,YAAY,aAAZ,YAAY,uBAAZ,YAAY,CAAE,wBAAwB,CAAC,CAAC;oBAC9E,IAAI,CAAC,WAAW,EAAE,CAAC;wBACjB,MAAM,IAAI,uBAAgB,CACxB,iDAAiD,YAAY,aAAZ,YAAY,uBAAZ,YAAY,CAAE,wBAAwB,kBAAkB,CAC1G,CAAC;oBACJ,CAAC;oBACD,UAAU,CAAC,iBAAiB,GAAG,MAAM,WAAW,CAAC,yBAAyB,CAAC;wBACzE,WAAW,EAAE,YAAY,aAAZ,YAAY,uBAAZ,YAAY,CAAE,aAAa;qBACzC,CAAC,CAAC;gBACL,CAAC;YACH,CAAC;YACD,OAAO,UAAU,CAAC;QACpB,CAAC;KAAA;CACF;AAhQD,wDAgQC"}

package/dist/services/userManager/iam.userManager.definitions.d.ts

@@ -0,0 +1,45 @@
+import { AppConfigCommonDomainIAMAuthServiceConfigCompleteSettings, AppConfigCommonDomainIAMAuthServiceConfigInitiateSettings, AppConfigDomainIAMAuthenticationStep, DomainFindOnePrivateOptions, GenericObject } from '@node-c/core';
+import { IAMAuthenticationCompleteResult, IAMAuthenticationInitiateResult, IAMAuthenticationService, IAMAuthenticationType } from '../authentication';
+import { AuthorizationUser } from '../authorization';
+import { IAMMFAType } from '../mfa';
+export interface IAMUserManagerCreateAccessTokenOptions<AuthData = unknown> {
+    auth: {
+        mfaType?: IAMMFAType;
+        type: IAMAuthenticationType | string;
+    } & AuthData;
+    filters?: GenericObject;
+    mainFilterField: string;
+    rememberUser?: boolean;
+    step?: AppConfigDomainIAMAuthenticationStep;
+}
+export type IAMUserManagerCreateAccessTokenReturnData<UserData> = {
+    accessToken: string;
+    refreshToken?: string;
+    user: UserData;
+} | {
+    nextStepsRequired: boolean;
+};
+export type IAMUserManagerExecuteStepData<AuthData = unknown> = Omit<IAMUserManagerCreateAccessTokenOptions<AuthData>, 'rememberUser' | 'step'>;
+export interface IAMUserManagerExecuteStepOptions<User extends object> {
+    authService: IAMAuthenticationService<User, User>;
+    name: AppConfigDomainIAMAuthenticationStep;
+    stepConfig: AppConfigCommonDomainIAMAuthServiceConfigCompleteSettings | AppConfigCommonDomainIAMAuthServiceConfigInitiateSettings;
+}
+export interface IAMUserManagerExecuteStepResult<User extends object> {
+    stepResult: IAMAuthenticationCompleteResult | IAMAuthenticationInitiateResult;
+    user: IAMUserManagerUserWithPermissionsData<User, unknown> | null;
+    userFilterField?: string | undefined;
+    userFilterValue?: unknown | undefined;
+}
+export interface IAMUserManagerGetUserWithPermissionsDataOptions extends DomainFindOnePrivateOptions {
+    keepPassword?: boolean;
+}
+export type IAMUserManagerUserWithPermissionsData<UserData, AuthorizationPointId> = AuthorizationUser<AuthorizationPointId> & UserData;
+export interface IAMUserManagerUserTokenEnityFields<UserId = unknown> {
+    refreshToken?: string;
+    userId: UserId;
+    user?: IAMUserManagerUserWithPermissionsData<object, unknown>;
+}
+export declare enum IAMUserManagerUserTokenUserIdentifier {
+    FieldName = "userId"
+}

package/dist/services/userManager/iam.userManager.definitions.js

@@ -0,0 +1,8 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.IAMUserManagerUserTokenUserIdentifier = void 0;
+var IAMUserManagerUserTokenUserIdentifier;
+(function (IAMUserManagerUserTokenUserIdentifier) {
+    IAMUserManagerUserTokenUserIdentifier["FieldName"] = "userId";
+})(IAMUserManagerUserTokenUserIdentifier || (exports.IAMUserManagerUserTokenUserIdentifier = IAMUserManagerUserTokenUserIdentifier = {}));
+//# sourceMappingURL=iam.userManager.definitions.js.map

package/dist/services/userManager/iam.userManager.definitions.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"iam.userManager.definitions.js","sourceRoot":"","sources":["../../../src/services/userManager/iam.userManager.definitions.ts"],"names":[],"mappings":";;;AAqEA,IAAY,qCAGX;AAHD,WAAY,qCAAqC;IAE/C,6DAAoB,CAAA;AACtB,CAAC,EAHW,qCAAqC,qDAArC,qCAAqC,QAGhD"}

package/dist/services/userManager/iam.userManager.service.d.ts

@@ -0,0 +1,33 @@
+import { ConfigProviderService, DataDefaultData, DataEntityService, DataFindOneOptions, DomainEntityService, DomainEntityServiceDefaultData, GenericObject, LoggerService } from '@node-c/core';
+import { IAMUserManagerCreateAccessTokenOptions, IAMUserManagerCreateAccessTokenReturnData, IAMUserManagerGetUserWithPermissionsDataOptions, IAMUserManagerUserTokenEnityFields, IAMUserManagerUserWithPermissionsData } from './iam.userManager.definitions';
+import { IAMAuthenticationService, IAMAuthenticationType } from '../authentication';
+import { IAMAuthenticationOAuth2Service } from '../authenticationOAuth2';
+import { IAMAuthenticationUserLocalService } from '../authenticationUserLocal';
+import { IAMTokenManagerService } from '../tokenManager';
+export declare class IAMUserManagerService<User extends object, Data extends DomainEntityServiceDefaultData<Partial<User>> = DomainEntityServiceDefaultData<Partial<User>>, DataEntityServiceData extends DataDefaultData<Partial<User>> = DataDefaultData<Partial<User>>> {
+    protected authServices: {
+        [IAMAuthenticationType.OAuth2]?: IAMAuthenticationOAuth2Service<object, object>;
+        [IAMAuthenticationType.UserLocal]?: IAMAuthenticationUserLocalService<object, object>;
+    } & {
+        [serviceName: string]: IAMAuthenticationService<object, object>;
+    };
+    protected configProvider: ConfigProviderService;
+    protected dataUsersAuthCacheService: DataEntityService<GenericObject>;
+    protected domainUsersEntityService: DomainEntityService<User, DataEntityService<User, DataEntityServiceData>, Data, Record<string, DataEntityService<Partial<User>, DataDefaultData<object>>> | undefined>;
+    protected logger: LoggerService;
+    protected moduleName: string;
+    protected tokenManager: IAMTokenManagerService<IAMUserManagerUserTokenEnityFields>;
+    constructor(authServices: {
+        [IAMAuthenticationType.OAuth2]?: IAMAuthenticationOAuth2Service<object, object>;
+        [IAMAuthenticationType.UserLocal]?: IAMAuthenticationUserLocalService<object, object>;
+    } & {
+        [serviceName: string]: IAMAuthenticationService<object, object>;
+    }, configProvider: ConfigProviderService, dataUsersAuthCacheService: DataEntityService<GenericObject>, domainUsersEntityService: DomainEntityService<User, DataEntityService<User, DataEntityServiceData>, Data, Record<string, DataEntityService<Partial<User>, DataDefaultData<object>>> | undefined>, logger: LoggerService, moduleName: string, tokenManager: IAMTokenManagerService<IAMUserManagerUserTokenEnityFields>);
+    createAccessToken<AuthData = unknown>(options: IAMUserManagerCreateAccessTokenOptions<AuthData>): Promise<IAMUserManagerCreateAccessTokenReturnData<User>>;
+    private executeStep;
+    protected getUserForStepExecution(options: {
+        filters: GenericObject;
+        mainFilterField: string;
+    }): Promise<IAMUserManagerUserWithPermissionsData<User, unknown> | null>;
+    getUserWithPermissionsData(_options: DataFindOneOptions, _privateOptions?: IAMUserManagerGetUserWithPermissionsDataOptions): Promise<IAMUserManagerUserWithPermissionsData<User, unknown> | null>;
+}