@node-c/domain-iam 1.0.0-beta6 → 1.0.0-beta8

package/dist/services/{userManager/iam.userManager.service.js → authenticationManager/iam.authenticationManager.service.js}

@@ -23,36 +23,37 @@ var __importDefault = (this && this.__importDefault) || function (mod) {
     return (mod && mod.__esModule) ? mod : { "default": mod };
 };
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.IAMUserManagerService = void 0;
+exports.IAMAuthenticationManagerService = void 0;
 const core_1 = require("@node-c/core");
 const lodash_1 = __importDefault(require("lodash"));
-const iam_userManager_definitions_1 = require("./iam.userManager.definitions");
+const iam_authenticationManager_definitions_1 = require("./iam.authenticationManager.definitions");
+const definitions_1 = require("../../common/definitions");
 const authentication_1 = require("../authentication");
 const tokenManager_1 = require("../tokenManager");
-class IAMUserManagerService {
-    constructor(authServices, configProvider, dataUsersAuthCacheService, domainUsersEntityService, logger, moduleName, tokenManager) {
+class IAMAuthenticationManagerService {
+    constructor(authServices, configProvider, logger, moduleName, dataUsersAuthCacheService, domainUsersEntityService, tokenManager) {
         this.authServices = authServices;
         this.configProvider = configProvider;
-        this.dataUsersAuthCacheService = dataUsersAuthCacheService;
-        this.domainUsersEntityService = domainUsersEntityService;
         this.logger = logger;
         this.moduleName = moduleName;
+        this.dataUsersAuthCacheService = dataUsersAuthCacheService;
+        this.domainUsersEntityService = domainUsersEntityService;
         this.tokenManager = tokenManager;
     }
-    createAccessToken(options) {
+    authenticate(options) {
         return __awaiter(this, void 0, void 0, function* () {
             var _a;
-            const { configProvider, logger, moduleName } = this;
+            const { configProvider, logger, moduleName, tokenManager } = this;
             const moduleConfig = configProvider.config.domain[moduleName];
             const { accessTokenExpiryTimeInMinutes, defaultUserIdentifierField, refreshTokenExpiryTimeInHours } = moduleConfig;
             const { auth: { type: authType }, rememberUser } = options;
-            logger.info(`[Domain.${moduleName}.UserManager]: Login attempt started${options.step ? ` for step ${options.step}` : ''}.`);
+            logger.info(`[Domain.${moduleName}.AuthenticationManager][${authType}]: Login attempt started${options.step ? ` for step ${options.step}` : ''}.`);
             const authService = this.authServices[authType];
             if (!authService) {
-                logger.info(`[Domain.${moduleName}.UserManager]: No authService ${authType} found.`);
+                logger.info(`[Domain.${moduleName}.AuthenticationManager][${authType}]: No authService ${authType} found.`);
                 throw new core_1.ApplicationError('Authentication failed.');
             }
-            const authServiceBehaviorConfig = authService.getUserCreateAccessTokenConfig();
+            const authServiceBehaviorConfig = authService.getUserAuthenticationConfig();
             let externalAccessToken;
             let externalRefreshToken;
             let issueTokens = false;
@@ -74,17 +75,27 @@ class IAMUserManagerService {
             }), { stepResult, user } = _b, otherStepData = __rest(_b, ["stepResult", "user"]);
             if (step === core_1.AppConfigDomainIAMAuthenticationStep.Initiate && !stepResult.mfaUsed) {
                 issueTokens = true;
-                step = core_1.AppConfigDomainIAMAuthenticationStep.Complete;
-                stepConfig = authServiceBehaviorConfig[step];
-                const finalStepData = yield this.executeStep(options, {
-                    authService,
-                    name: step,
-                    stepConfig: lodash_1.default.omit(stepConfig, 'cache')
-                });
-                stepResult = finalStepData.stepResult;
-                user = user !== null && user !== void 0 ? user : finalStepData.user;
-                userFilterField = finalStepData.userFilterField;
-                userFilterValue = finalStepData.userFilterValue;
+                if (!('skipCompleteStepAllowedOnNoMFA' in stepConfig && stepConfig.skipCompleteStepAllowedOnNoMFA)) {
+                    step = core_1.AppConfigDomainIAMAuthenticationStep.Complete;
+                    stepConfig = authServiceBehaviorConfig[step];
+                    const finalStepData = yield this.executeStep(options, {
+                        authService,
+                        name: step,
+                        stepConfig: lodash_1.default.omit(stepConfig, 'cache')
+                    });
+                    stepResult = lodash_1.default.merge(lodash_1.default.omit(stepResult, ['mfaUsed', 'mfaValid', 'valid']), finalStepData.stepResult);
+                    user = user !== null && user !== void 0 ? user : finalStepData.user;
+                    userFilterField = finalStepData.userFilterField;
+                    userFilterValue = finalStepData.userFilterValue;
+                }
+                else {
+                    if ('userFilterField' in stepResult) {
+                        userFilterField = stepResult.userFilterField;
+                    }
+                    if ('userFilterValue' in stepResult) {
+                        userFilterValue = stepResult.userFilterValue;
+                    }
+                }
             }
             const actualStepResult = stepResult;
             if (!userFilterField && otherStepData.userFilterField) {
@@ -95,7 +106,7 @@ class IAMUserManagerService {
             }
             if ('useReturnedTokens' in stepConfig && stepConfig.useReturnedTokens && stepConfig.authReturnsTokens) {
                 if (!actualStepResult.accessToken) {
-                    logger.info(`[Domain.${moduleName}.UserManager]: Login attempt failed for ${userFilterField} ${userFilterValue} - no accessToken returned from the authService and useReturnedTokens is set to true.`);
+                    logger.info(`[Domain.${moduleName}.AuthenticationManager][${authType}]: Login attempt failed for ${userFilterField} ${userFilterValue} - no accessToken returned from the authService and useReturnedTokens is set to true.`);
                     throw new core_1.ApplicationError('Authentication failed.');
                 }
                 externalAccessToken = actualStepResult.accessToken;
@@ -104,63 +115,92 @@ class IAMUserManagerService {
                 }
             }
             if (issueTokens) {
+                if (!tokenManager) {
+                    throw new core_1.ApplicationError(`[${moduleName}][AuthenticationManager] tokenManager not configured.`);
+                }
                 if (!user) {
-                    logger.info(`[Domain.${moduleName}.UserManager]: Login attempt failed at step ${step} - user is required when issueTokens is set to true.`);
+                    logger.info(`[Domain.${moduleName}.AuthenticationManager][${authType}]: Login attempt failed at step ${step} - user is required when issueTokens is set to true.`);
                     throw new core_1.ApplicationError('Authentication failed.');
                 }
-                let refreshToken;
+                const useExternalTokenAsLocal = 'useReturnedTokensAsLocal' in stepConfig && stepConfig.useReturnedTokensAsLocal;
                 const userIdentifierValue = user[defaultUserIdentifierField];
+                let refreshToken;
+                let refreshTokenExpiresIn;
+                let refreshTokenTTL;
                 if (externalRefreshToken || !externalAccessToken) {
-                    const { result: { token: localRefreshToken } } = yield this.tokenManager.create(Object.assign({ type: tokenManager_1.TokenType.Refresh, [iam_userManager_definitions_1.IAMUserManagerUserTokenUserIdentifier.FieldName]: userIdentifierValue }, (externalRefreshToken
-                        ? {
+                    let externalTokenData = {};
+                    if (externalRefreshToken &&
+                        'refreshTokenExpiresIn' in actualStepResult &&
+                        actualStepResult.refreshTokenExpiresIn) {
+                        externalTokenData = {
                             externalToken: externalRefreshToken,
                             externalTokenAuthService: authType
-                        }
-                        : {})), {
-                        expiresInMinutes: (externalRefreshToken &&
-                            'refreshTokenExpiresIn' in actualStepResult &&
-                            actualStepResult.refreshTokenExpiresIn) ||
-                            (rememberUser || !refreshTokenExpiryTimeInHours ? undefined : refreshTokenExpiryTimeInHours * 60),
-                        identifierDataField: iam_userManager_definitions_1.IAMUserManagerUserTokenUserIdentifier.FieldName,
+                        };
+                        refreshTokenExpiresIn = actualStepResult.refreshTokenExpiresIn;
+                    }
+                    else if (!rememberUser) {
+                        refreshTokenExpiresIn =
+                            (refreshTokenExpiryTimeInHours
+                                ? refreshTokenExpiryTimeInHours
+                                : definitions_1.Constants.DEFAULT_REFRESH_TOKEN_EXPIRY_TIME_IN_HOURS) * 60;
+                    }
+                    if (refreshTokenExpiresIn) {
+                        refreshTokenTTL =
+                            refreshTokenExpiresIn *
+                                (moduleConfig.refreshTokenExpiryStorageTTLMultiplier ||
+                                    definitions_1.Constants.DEFAULT_REFRESH_TOKEN_STORAGE_TTL_MULTIPLIER);
+                    }
+                    const { result: { token: localRefreshToken } } = yield tokenManager.create(Object.assign({ type: tokenManager_1.TokenType.Refresh, [iam_authenticationManager_definitions_1.IAMAuthenticationManagerUserTokenUserIdentifier.FieldName]: userIdentifierValue }, externalTokenData), {
+                        expiresInMinutes: refreshTokenExpiresIn,
+                        identifierDataField: iam_authenticationManager_definitions_1.IAMAuthenticationManagerUserTokenUserIdentifier.FieldName,
                         persist: true,
                         purgeOldFromData: true,
-                        tokenContentOnlyFields: ['externalToken']
+                        tokenContentOnlyFields: ['externalToken'],
+                        ttl: refreshTokenTTL,
+                        useExternalTokenAsLocal
                     });
                     refreshToken = localRefreshToken;
                 }
                 const accessTokenExpiresIn = (externalAccessToken && 'accessTokenExpiresIn' in actualStepResult && actualStepResult.accessTokenExpiresIn) ||
-                    accessTokenExpiryTimeInMinutes;
-                const { result: { token: accessToken } } = yield this.tokenManager.create(Object.assign({ refreshToken, type: tokenManager_1.TokenType.Access, [iam_userManager_definitions_1.IAMUserManagerUserTokenUserIdentifier.FieldName]: userIdentifierValue }, (externalAccessToken
+                    accessTokenExpiryTimeInMinutes ||
+                    definitions_1.Constants.DEFAULT_ACCESS_TOKEN_EXPIRY_TIME_IN_HOURS;
+                const accessTokenTTL = refreshTokenExpiresIn ||
+                    accessTokenExpiresIn *
+                        (moduleConfig.accessTokenExpiryStorageTTLMultiplier || definitions_1.Constants.DEFAULT_ACCESS_TOKEN_STORAGE_TTL_MULTIPLIER);
+                const { result: { token: accessToken } } = yield tokenManager.create(Object.assign({ refreshToken, type: tokenManager_1.TokenType.Access, [iam_authenticationManager_definitions_1.IAMAuthenticationManagerUserTokenUserIdentifier.FieldName]: userIdentifierValue }, (externalAccessToken
                     ? {
                         externalToken: externalAccessToken,
                         externalTokenAuthService: authType
                     }
                     : {})), {
                     expiresInMinutes: accessTokenExpiresIn,
-                    identifierDataField: iam_userManager_definitions_1.IAMUserManagerUserTokenUserIdentifier.FieldName,
+                    identifierDataField: iam_authenticationManager_definitions_1.IAMAuthenticationManagerUserTokenUserIdentifier.FieldName,
                     persist: true,
                     purgeOldFromData: true,
-                    tokenContentOnlyFields: ['externalToken', 'refreshToken']
+                    tokenContentOnlyFields: ['externalToken', 'refreshToken'],
+                    ttl: accessTokenTTL,
+                    useExternalTokenAsLocal
                 });
-                const { result: { token: idToken } } = yield this.tokenManager.create({
+                const { result: { token: idToken } } = yield tokenManager.create({
                     accessToken,
                     type: tokenManager_1.TokenType.Id,
                     user,
-                    [iam_userManager_definitions_1.IAMUserManagerUserTokenUserIdentifier.FieldName]: userIdentifierValue
+                    [iam_authenticationManager_definitions_1.IAMAuthenticationManagerUserTokenUserIdentifier.FieldName]: userIdentifierValue
                 }, {
                     expiresInMinutes: accessTokenExpiresIn,
-                    identifierDataField: iam_userManager_definitions_1.IAMUserManagerUserTokenUserIdentifier.FieldName,
+                    identifierDataField: iam_authenticationManager_definitions_1.IAMAuthenticationManagerUserTokenUserIdentifier.FieldName,
                     persist: true,
                     purgeOldFromData: true,
-                    tokenContentOnlyFields: ['accessToken', 'user']
+                    tokenContentOnlyFields: ['accessToken', 'user'],
+                    ttl: accessTokenTTL
                 });
-                logger.info(`[Domain.${moduleName}.UserManager]: Login attempt successful for ${userFilterField} ${userFilterValue}.`);
+                logger.info(`[Domain.${moduleName}.AuthenticationManager][${authType}]: Login attempt successful for ${userFilterField} ${userFilterValue}.`);
                 return { accessToken, idToken, refreshToken, user };
             }
             const returnData = { nextStepsRequired: true };
             if ((_a = stepConfig.stepResultPublicFields) === null || _a === void 0 ? void 0 : _a.length) {
                 stepConfig.stepResultPublicFields.forEach(fieldName => {
-                    (0, core_1.setNested)(returnData, fieldName, (0, core_1.getNested)(stepResult, fieldName, { removeNestedFieldEscapeSign: true }).unifiedValue);
+                    (0, core_1.setNested)(returnData, fieldName, (0, core_1.getNested)(stepResult, fieldName, { removeNestedFieldEscapeSign: true }).unifiedValue, { removeNestedFieldEscapeSign: true });
                 });
             }
             return returnData;
@@ -168,39 +208,53 @@ class IAMUserManagerService {
     }
     executeStep(data, options) {
         return __awaiter(this, void 0, void 0, function* () {
-            const { configProvider, domainUsersEntityService, logger, moduleName } = this;
+            const { configProvider, dataUsersAuthCacheService, domainUsersEntityService, logger, moduleName } = this;
             const { defaultUserIdentifierField } = configProvider.config.domain[moduleName];
-            const _a = data.auth, { type: _authType } = _a, authData = __rest(_a, ["type"]), { filters: userFilters, mainFilterField } = data;
+            const _a = data.auth, { type: authType } = _a, authData = __rest(_a, ["type"]), { filters: userFilters, mainFilterField } = data;
             const { authService, stepConfig, name: stepName } = options;
             const { cache: cacheSettings, findUser, findUserBeforeAuth, validWithoutUser } = stepConfig;
             const hasFilters = userFilters && Object.keys(userFilters).length;
+            const logPrefix = `[Domain.${moduleName}.AuthenticationManager][executeStep][${authType}][${stepName}]`;
             const stepInputData = { data: lodash_1.default.cloneDeep(authData) };
+            let runFindUserInExternalTokenPayloads = false;
             let user = null;
             let userFilterField;
             let userFilterValue;
             if (findUser && findUserBeforeAuth) {
                 if (!hasFilters) {
-                    logger.info(`[Domain.${moduleName}.UserManager]: No filters provided for findUserBeforeToken=true.`);
+                    logger.info(`${logPrefix}[Part 1]: No filters provided for findUserBeforeToken=true.`);
                     throw new core_1.ApplicationError('Authentication failed.');
                 }
                 userFilterField = mainFilterField;
                 userFilterValue = userFilters[userFilterField];
                 user = yield this.getUserForStepExecution({ filters: userFilters, mainFilterField: userFilterField });
                 if (!user) {
-                    logger.info(`[Domain.${moduleName}.UserManager]: Login attempt failed for ${userFilterField} ${userFilterValue} - user not found.`);
+                    logger.info(`${logPrefix}[Part 1]: Login attempt failed for ${userFilterField} ${userFilterValue} - user not found.`);
                     throw new core_1.ApplicationError('Authentication failed.');
                 }
             }
-            stepInputData.options = {
-                context: user || {},
-                contextIdentifierField: defaultUserIdentifierField
-            };
+            if (user) {
+                stepInputData.options = {
+                    context: user,
+                    contextIdentifierField: defaultUserIdentifierField
+                };
+            }
+            else if (userFilters) {
+                stepInputData.options = {
+                    context: userFilters,
+                    contextIdentifierField: mainFilterField
+                };
+            }
             if (cacheSettings && 'use' in cacheSettings && cacheSettings.use) {
+                if (!dataUsersAuthCacheService) {
+                    logger.info(`${logPrefix}[Part 2]: dataUsersAuthCacheService not configured.`);
+                    throw new core_1.ApplicationError('Authentication failed.');
+                }
                 const cacheInput = {
                     data: stepInputData.data,
                     options: stepInputData.options
                 };
-                const cacheResult = yield this.tokenManager.domainTokensEntityService.findOne({
+                const cacheResult = yield dataUsersAuthCacheService.findOne({
                     filters: {
                         [cacheSettings.settings.cacheFieldName]: (0, core_1.getNested)(cacheInput, cacheSettings.settings.inputFieldName)
                             .unifiedValue
@@ -223,8 +277,9 @@ class IAMUserManagerService {
                 }
             }
             let stepResult = yield authService[stepName](stepInputData.data, stepInputData.options);
-            if (!stepResult.valid || (stepResult.mfaUsed && !stepResult.mfaValid)) {
-                logger.info(`[Domain.${moduleName}.UserManager]: Bad step result:`, stepResult);
+            if ((!stepResult.valid && !stepResult.nextStepsRequired) ||
+                (stepResult.mfaUsed && !stepResult.mfaValid)) {
+                logger.info(`${logPrefix}[Part 4]: Bad step result:`, stepResult);
                 throw new core_1.ApplicationError('Authentication failed.');
             }
             if ('decodeReturnedTokens' in stepConfig && stepConfig.decodeReturnedTokens) {
@@ -257,6 +312,9 @@ class IAMUserManagerService {
                         });
                     }
                 }
+                else if ('findUserInExternalTokenPayloads' in stepConfig && stepConfig.findUserInExternalTokenPayloads) {
+                    runFindUserInExternalTokenPayloads = true;
+                }
                 else if (hasFilters) {
                     userFilterField = mainFilterField;
                     userFilterValue = userFilters[userFilterField];
@@ -266,25 +324,37 @@ class IAMUserManagerService {
                     });
                 }
             }
-            if (!user && 'createUser' in stepConfig && stepConfig.createUser) {
+            const createUser = 'createUser' in stepConfig && stepConfig.createUser;
+            if (!user && (createUser || runFindUserInExternalTokenPayloads)) {
                 const userData = yield authService.getUserDataFromExternalTokenPayloads(stepResult);
-                if (userData) {
+                if (createUser && userData) {
+                    if (!domainUsersEntityService) {
+                        logger.info(`${logPrefix}[Part 7]: domainUsersEntityService not configured.`);
+                        throw new core_1.ApplicationError('Authentication failed.');
+                    }
                     const { result: createdUser } = yield domainUsersEntityService.create(userData);
-                    user = yield this.getUserWithPermissionsData({
+                    user = yield domainUsersEntityService.getUserWithPermissionsData({
                         filters: {
                             [defaultUserIdentifierField]: createdUser[defaultUserIdentifierField]
                         }
                     }, { keepPassword: false });
                 }
+                else if (runFindUserInExternalTokenPayloads) {
+                    user = userData;
+                }
             }
             if (validWithoutUser !== true && !user) {
-                logger.info(`[Domain.${moduleName}.UserManager]: Login attempt failed ${userFilterField && userFilterValue ? `for ${userFilterField} ${userFilterValue} ` : ''}- user not found.`);
+                logger.info(`${logPrefix}[Part 7]: Login attempt failed ${userFilterField && userFilterValue ? `for ${userFilterField} ${userFilterValue} ` : ''}- user not found.`);
                 throw new core_1.ApplicationError('Authentication failed.');
             }
             if (user && 'password' in user) {
                 delete user.password;
             }
-            if (stepResult.mfaUsed && cacheSettings && 'populate' in cacheSettings && cacheSettings.populate) {
+            if (cacheSettings && 'populate' in cacheSettings && cacheSettings.populate) {
+                if (!dataUsersAuthCacheService) {
+                    logger.info(`${logPrefix}[Part 7]: dataUsersAuthCacheService not configured.`);
+                    throw new core_1.ApplicationError('Authentication failed.');
+                }
                 const cacheInput = {
                     data: stepInputData.data,
                     options: stepInputData.options,
@@ -304,7 +374,7 @@ class IAMUserManagerService {
                     }
                     cacheData[inputName] = cacheInput[inputName];
                 }
-                yield this.dataUsersAuthCacheService.create(Object.assign(Object.assign({}, cacheData), { [cacheSettings.settings.cacheFieldName]: (0, core_1.getNested)(cacheInput, cacheSettings.settings.inputFieldName)
+                yield dataUsersAuthCacheService.create(Object.assign(Object.assign({}, cacheData), { [cacheSettings.settings.cacheFieldName]: (0, core_1.getNested)(cacheInput, cacheSettings.settings.inputFieldName)
                         .unifiedValue }));
             }
             return { stepResult, user, userFilterField, userFilterValue };
@@ -312,13 +382,16 @@ class IAMUserManagerService {
     }
     getUserForStepExecution(options) {
         return __awaiter(this, void 0, void 0, function* () {
-            const { configProvider, moduleName } = this;
+            const { configProvider, domainUsersEntityService, moduleName } = this;
+            if (!domainUsersEntityService) {
+                throw new core_1.ApplicationError(`[${moduleName}][AuthenticationManager] domainUsersEntityService not configured.`);
+            }
             const { defaultUserIdentifierField } = configProvider.config.domain[moduleName];
             const { mainFilterField } = options;
             let filters = options.filters;
             let user = null;
             if (mainFilterField !== defaultUserIdentifierField) {
-                const mainFilterFieldResult = yield this.domainUsersEntityService.findOne({ filters });
+                const mainFilterFieldResult = yield domainUsersEntityService.findOne({ filters });
                 if (!mainFilterFieldResult.result) {
                     return null;
                 }
@@ -329,15 +402,10 @@ class IAMUserManagerService {
             else {
                 filters = options.filters;
             }
-            user = yield this.getUserWithPermissionsData({ filters }, { keepPassword: true });
+            user = yield domainUsersEntityService.getUserWithPermissionsData({ filters }, { keepPassword: true });
             return user;
         });
     }
-    getUserWithPermissionsData(_options, _privateOptions) {
-        return __awaiter(this, void 0, void 0, function* () {
-            throw new core_1.ApplicationError(`Method ${this.moduleName}.IAMUserManagerService.getUserWithPermissionsData not implemented.`);
-        });
-    }
 }
-exports.IAMUserManagerService = IAMUserManagerService;
-//# sourceMappingURL=iam.userManager.service.js.map
+exports.IAMAuthenticationManagerService = IAMAuthenticationManagerService;
+//# sourceMappingURL=iam.authenticationManager.service.js.map

package/dist/services/authenticationManager/iam.authenticationManager.service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"iam.authenticationManager.service.js","sourceRoot":"","sources":["../../../src/services/authenticationManager/iam.authenticationManager.service.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,uCAYsB;AAEtB,oDAAwB;AAExB,mGAQiD;AAEjD,0DAAqD;AACrD,sDAM2B;AAM3B,kDAAoE;AAOpE,MAAa,+BAA+B;IAK1C,YAEY,YAG6D,EAE7D,cAAqC,EAErC,MAAqB,EAErB,UAAkB,EAElB,yBAA4D,EAE/D,wBAKN,EAES,YAAmF;QApBnF,iBAAY,GAAZ,YAAY,CAGiD;QAE7D,mBAAc,GAAd,cAAc,CAAuB;QAErC,WAAM,GAAN,MAAM,CAAe;QAErB,eAAU,GAAV,UAAU,CAAQ;QAElB,8BAAyB,GAAzB,yBAAyB,CAAmC;QAE/D,6BAAwB,GAAxB,wBAAwB,CAK9B;QAES,iBAAY,GAAZ,YAAY,CAAuE;IAC5F,CAAC;IAKE,YAAY,CAChB,OAA8D;;;YAE9D,MAAM,EAAE,cAAc,EAAE,MAAM,EAAE,UAAU,EAAE,YAAY,EAAE,GAAG,IAAI,CAAC;YAClE,MAAM,YAAY,GAAG,cAAc,CAAC,MAAM,CAAC,MAAM,CAAC,UAAU,CAAuB,CAAC;YACpF,MAAM,EAAE,8BAA8B,EAAE,0BAA0B,EAAE,6BAA6B,EAAE,GAAG,YAAY,CAAC;YACnH,MAAM,EACJ,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EACxB,YAAY,EACb,GAAG,OAAO,CAAC;YACZ,MAAM,CAAC,IAAI,CACT,WAAW,UAAU,2BAA2B,QAAQ,2BAA2B,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,aAAa,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,GAAG,CACtI,CAAC;YAEF,MAAM,WAAW,GAAG,IAAI,CAAC,YAAY,CAAC,QAAQ,CAA6C,CAAC;YAC5F,IAAI,CAAC,WAAW,EAAE,CAAC;gBACjB,MAAM,CAAC,IAAI,CAAC,WAAW,UAAU,2BAA2B,QAAQ,qBAAqB,QAAQ,SAAS,CAAC,CAAC;gBAC5G,MAAM,IAAI,uBAAgB,CAAC,wBAAwB,CAAC,CAAC;YACvD,CAAC;YAED,MAAM,yBAAyB,GAAG,WAAW,CAAC,2BAA2B,EAAE,CAAC;YAC5E,IAAI,mBAAuC,CAAC;YAC5C,IAAI,oBAAwC,CAAC;YAC7C,IAAI,WAAW,GAAG,KAAK,CAAC;YACxB,IAAI,IAA0C,CAAC;YAC/C,IAAI,eAAmC,CAAC;YACxC,IAAI,eAAoC,CAAC;YAGzC,IAAI,OAAO,CAAC,IAAI,KAAK,2CAAoC,CAAC,QAAQ,EAAE,CAAC;gBACnE,WAAW,GAAG,IAAI,CAAC;gBACnB,IAAI,GAAG,2CAAoC,CAAC,QAAQ,CAAC;YACvD,CAAC;iBAEI,CAAC;gBACJ,IAAI,GAAG,2CAAoC,CAAC,QAAQ,CAAC;YACvD,CAAC;YACD,IAAI,UAAU,GAAG,yBAAyB,CAAC,IAAI,CAAC,CAAC;YAGjD,IAAI,KAAyC,MAAM,IAAI,CAAC,WAAW,CAAC,OAAO,EAAE;gBAC3E,WAAW;gBACX,IAAI,EAAE,IAAI;gBACV,UAAU;aACX,CAAC,EAJE,EAAE,UAAU,EAAE,IAAI,OAIpB,EAJyB,aAAa,cAApC,sBAAsC,CAIxC,CAAC;YAEH,IAAI,IAAI,KAAK,2CAAoC,CAAC,QAAQ,IAAI,CAAC,UAAU,CAAC,OAAO,EAAE,CAAC;gBAClF,WAAW,GAAG,IAAI,CAAC;gBAEnB,IAAI,CAAC,CAAC,gCAAgC,IAAI,UAAU,IAAI,UAAU,CAAC,8BAA8B,CAAC,EAAE,CAAC;oBACnG,IAAI,GAAG,2CAAoC,CAAC,QAAQ,CAAC;oBACrD,UAAU,GAAG,yBAAyB,CAAC,IAAI,CAAC,CAAC;oBAC7C,MAAM,aAAa,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,OAAO,EAAE;wBACpD,WAAW;wBACX,IAAI,EAAE,IAAI;wBACV,UAAU,EAAE,gBAAE,CAAC,IAAI,CAAC,UAAU,EAAE,OAAO,CAAC;qBACzC,CAAC,CAAC;oBACH,UAAU,GAAG,gBAAE,CAAC,KAAK,CAAC,gBAAE,CAAC,IAAI,CAAC,UAAU,EAAE,CAAC,SAAS,EAAE,UAAU,EAAE,OAAO,CAAC,CAAC,EAAE,aAAa,CAAC,UAAU,CAAC,CAAC;oBACvG,IAAI,GAAG,IAAI,aAAJ,IAAI,cAAJ,IAAI,GAAI,aAAa,CAAC,IAAI,CAAC;oBAClC,eAAe,GAAG,aAAa,CAAC,eAAe,CAAC;oBAChD,eAAe,GAAG,aAAa,CAAC,eAAe,CAAC;gBAClD,CAAC;qBAAM,CAAC;oBACN,IAAI,iBAAiB,IAAI,UAAU,EAAE,CAAC;wBACpC,eAAe,GAAG,UAAU,CAAC,eAAyB,CAAC;oBACzD,CAAC;oBACD,IAAI,iBAAiB,IAAI,UAAU,EAAE,CAAC;wBACpC,eAAe,GAAG,UAAU,CAAC,eAAyB,CAAC;oBACzD,CAAC;gBACH,CAAC;YACH,CAAC;YAED,MAAM,gBAAgB,GAAG,UAEmB,CAAC;YAC7C,IAAI,CAAC,eAAe,IAAI,aAAa,CAAC,eAAe,EAAE,CAAC;gBACtD,eAAe,GAAG,aAAa,CAAC,eAAe,CAAC;YAClD,CAAC;YACD,IAAI,CAAC,eAAe,IAAI,aAAa,CAAC,eAAe,EAAE,CAAC;gBACtD,eAAe,GAAG,aAAa,CAAC,eAAe,CAAC;YAClD,CAAC;YACD,IAAI,mBAAmB,IAAI,UAAU,IAAI,UAAU,CAAC,iBAAiB,IAAI,UAAU,CAAC,iBAAiB,EAAE,CAAC;gBAEtG,IAAI,CAAC,gBAAgB,CAAC,WAAW,EAAE,CAAC;oBAClC,MAAM,CAAC,IAAI,CACT,WAAW,UAAU,2BAA2B,QAAQ,+BAA+B,eAAe,IAAI,eAAe,uFAAuF,CACjN,CAAC;oBACF,MAAM,IAAI,uBAAgB,CAAC,wBAAwB,CAAC,CAAC;gBACvD,CAAC;gBACD,mBAAmB,GAAG,gBAAgB,CAAC,WAAW,CAAC;gBACnD,IAAI,gBAAgB,CAAC,YAAY,EAAE,CAAC;oBAClC,oBAAoB,GAAG,gBAAgB,CAAC,YAAY,CAAC;gBACvD,CAAC;YACH,CAAC;YAED,IAAI,WAAW,EAAE,CAAC;gBAChB,IAAI,CAAC,YAAY,EAAE,CAAC;oBAClB,MAAM,IAAI,uBAAgB,CAAC,IAAI,UAAU,uDAAuD,CAAC,CAAC;gBACpG,CAAC;gBACD,IAAI,CAAC,IAAI,EAAE,CAAC;oBACV,MAAM,CAAC,IAAI,CACT,WAAW,UAAU,2BAA2B,QAAQ,mCAAmC,IAAI,sDAAsD,CACtJ,CAAC;oBACF,MAAM,IAAI,uBAAgB,CAAC,wBAAwB,CAAC,CAAC;gBACvD,CAAC;gBACD,MAAM,uBAAuB,GAAG,0BAA0B,IAAI,UAAU,IAAI,UAAU,CAAC,wBAAwB,CAAC;gBAChH,MAAM,mBAAmB,GAAG,IAAI,CAAC,0BAAwC,CAAC,CAAC;gBAC3E,IAAI,YAAgC,CAAC;gBACrC,IAAI,qBAAyC,CAAC;gBAC9C,IAAI,eAAmC,CAAC;gBAExC,IAAI,oBAAoB,IAAI,CAAC,mBAAmB,EAAE,CAAC;oBACjD,IAAI,iBAAiB,GAAkB,EAAE,CAAC;oBAC1C,IACE,oBAAoB;wBACpB,uBAAuB,IAAI,gBAAgB;wBAC3C,gBAAgB,CAAC,qBAAqB,EACtC,CAAC;wBACD,iBAAiB,GAAG;4BAClB,aAAa,EAAE,oBAAoB;4BACnC,wBAAwB,EAAE,QAAiC;yBAC5D,CAAC;wBACF,qBAAqB,GAAG,gBAAgB,CAAC,qBAAqB,CAAC;oBACjE,CAAC;yBAAM,IAAI,CAAC,YAAY,EAAE,CAAC;wBACzB,qBAAqB;4BACnB,CAAC,6BAA6B;gCAC5B,CAAC,CAAC,6BAA6B;gCAC/B,CAAC,CAAC,uBAAS,CAAC,0CAA0C,CAAC,GAAG,EAAE,CAAC;oBACnE,CAAC;oBACD,IAAI,qBAAqB,EAAE,CAAC;wBAC1B,eAAe;4BACb,qBAAqB;gCACrB,CAAC,YAAY,CAAC,sCAAsC;oCAClD,uBAAS,CAAC,4CAA4C,CAAC,CAAC;oBAC9D,CAAC;oBACD,MAAM,EACJ,MAAM,EAAE,EAAE,KAAK,EAAE,iBAAiB,EAAE,EACrC,GAAG,MAAM,YAAY,CAAC,MAAM,iBAEzB,IAAI,EAAE,wBAAS,CAAC,OAAO,EACvB,CAAC,uFAA+C,CAAC,SAAS,CAAC,EAAE,mBAAmB,IAC7E,iBAAiB,GAEtB;wBACE,gBAAgB,EAAE,qBAAqB;wBACvC,mBAAmB,EAAE,uFAA+C,CAAC,SAAS;wBAC9E,OAAO,EAAE,IAAI;wBACb,gBAAgB,EAAE,IAAI;wBACtB,sBAAsB,EAAE,CAAC,eAAe,CAAC;wBACzC,GAAG,EAAE,eAAe;wBACpB,uBAAuB;qBACxB,CACF,CAAC;oBACF,YAAY,GAAG,iBAAiB,CAAC;gBACnC,CAAC;gBAED,MAAM,oBAAoB,GACxB,CAAC,mBAAmB,IAAI,sBAAsB,IAAI,gBAAgB,IAAI,gBAAgB,CAAC,oBAAoB,CAAC;oBAC5G,8BAA8B;oBAC9B,uBAAS,CAAC,yCAAyC,CAAC;gBACtD,MAAM,cAAc,GAClB,qBAAqB;oBACrB,oBAAoB;wBAClB,CAAC,YAAY,CAAC,qCAAqC,IAAI,uBAAS,CAAC,2CAA2C,CAAC,CAAC;gBAClH,MAAM,EACJ,MAAM,EAAE,EAAE,KAAK,EAAE,WAAW,EAAE,EAC/B,GAAG,MAAM,YAAY,CAAC,MAAM,iBAEzB,YAAY,EACZ,IAAI,EAAE,wBAAS,CAAC,MAAM,EACtB,CAAC,uFAA+C,CAAC,SAAS,CAAC,EAAE,mBAAmB,IAC7E,CAAC,mBAAmB;oBACrB,CAAC,CAAC;wBACE,aAAa,EAAE,mBAAmB;wBAClC,wBAAwB,EAAE,QAAiC;qBAC5D;oBACH,CAAC,CAAC,EAAE,CAAC,GAET;oBACE,gBAAgB,EAAE,oBAAoB;oBACtC,mBAAmB,EAAE,uFAA+C,CAAC,SAAS;oBAC9E,OAAO,EAAE,IAAI;oBACb,gBAAgB,EAAE,IAAI;oBACtB,sBAAsB,EAAE,CAAC,eAAe,EAAE,cAAc,CAAC;oBACzD,GAAG,EAAE,cAAc;oBACnB,uBAAuB;iBACxB,CACF,CAAC;gBAEF,MAAM,EACJ,MAAM,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,EAC3B,GAAG,MAAM,YAAY,CAAC,MAAM,CAC3B;oBACE,WAAW;oBACX,IAAI,EAAE,wBAAS,CAAC,EAAE;oBAClB,IAAI;oBACJ,CAAC,uFAA+C,CAAC,SAAS,CAAC,EAAE,mBAAmB;iBACjF,EACD;oBACE,gBAAgB,EAAE,oBAAoB;oBACtC,mBAAmB,EAAE,uFAA+C,CAAC,SAAS;oBAC9E,OAAO,EAAE,IAAI;oBACb,gBAAgB,EAAE,IAAI;oBACtB,sBAAsB,EAAE,CAAC,aAAa,EAAE,MAAM,CAAC;oBAC/C,GAAG,EAAE,cAAc;iBACpB,CACF,CAAC;gBACF,MAAM,CAAC,IAAI,CACT,WAAW,UAAU,2BAA2B,QAAQ,mCAAmC,eAAe,IAAI,eAAe,GAAG,CACjI,CAAC;gBACF,OAAO,EAAE,WAAW,EAAE,OAAO,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC;YACtD,CAAC;YACD,MAAM,UAAU,GAAyD,EAAE,iBAAiB,EAAE,IAAI,EAAE,CAAC;YACrG,IAAI,MAAA,UAAU,CAAC,sBAAsB,0CAAE,MAAM,EAAE,CAAC;gBAC9C,UAAU,CAAC,sBAAsB,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE;oBACpD,IAAA,gBAAS,EACP,UAAU,EACV,SAAS,EACT,IAAA,gBAAS,EAAC,UAAU,EAAE,SAAS,EAAE,EAAE,2BAA2B,EAAE,IAAI,EAAE,CAAC,CAAC,YAAY,EACpF,EAAE,2BAA2B,EAAE,IAAI,EAAE,CACtC,CAAC;gBACJ,CAAC,CAAC,CAAC;YACL,CAAC;YACD,OAAO,UAAU,CAAC;QACpB,CAAC;KAAA;IAEa,WAAW,CACvB,IAAuD,EACvD,OAAyD;;YAEzD,MAAM,EAAE,cAAc,EAAE,yBAAyB,EAAE,wBAAwB,EAAE,MAAM,EAAE,UAAU,EAAE,GAAG,IAAI,CAAC;YACzG,MAAM,EAAE,0BAA0B,EAAE,GAAG,cAAc,CAAC,MAAM,CAAC,MAAM,CAAC,UAAU,CAAuB,CAAC;YACtG,MACE,KAGE,IAAI,KAH+B,EAArC,EAAQ,IAAI,EAAE,QAAQ,OAAe,EAAV,QAAQ,cAA7B,QAA+B,CAAF,EAD/B,EAEJ,OAAO,EAAE,WAAW,EACpB,eAAe,KACb,IAAI,CAAC;YACT,MAAM,EAAE,WAAW,EAAE,UAAU,EAAE,IAAI,EAAE,QAAQ,EAAE,GAAG,OAAO,CAAC;YAC5D,MAAM,EAAE,KAAK,EAAE,aAAa,EAAE,QAAQ,EAAE,kBAAkB,EAAE,gBAAgB,EAAE,GAAG,UAAU,CAAC;YAC5F,MAAM,UAAU,GAAG,WAAW,IAAI,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,MAAM,CAAC;YAClE,MAAM,SAAS,GAAG,WAAW,UAAU,wCAAwC,QAAQ,KAAK,QAAQ,GAAG,CAAC;YACxG,MAAM,aAAa,GAAyC,EAAE,IAAI,EAAE,gBAAE,CAAC,SAAS,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC7F,IAAI,kCAAkC,GAAG,KAAK,CAAC;YAC/C,IAAI,IAAI,GAAqD,IAAI,CAAC;YAClE,IAAI,eAAmC,CAAC;YACxC,IAAI,eAAoC,CAAC;YAEzC,IAAI,QAAQ,IAAI,kBAAkB,EAAE,CAAC;gBACnC,IAAI,CAAC,UAAU,EAAE,CAAC;oBAChB,MAAM,CAAC,IAAI,CAAC,GAAG,SAAS,6DAA6D,CAAC,CAAC;oBACvF,MAAM,IAAI,uBAAgB,CAAC,wBAAwB,CAAC,CAAC;gBACvD,CAAC;gBACD,eAAe,GAAG,eAAe,CAAC;gBAClC,eAAe,GAAG,WAAW,CAAC,eAAe,CAAC,CAAC;gBAC/C,IAAI,GAAG,MAAM,IAAI,CAAC,uBAAuB,CAAC,EAAE,OAAO,EAAE,WAAW,EAAE,eAAe,EAAE,eAAe,EAAE,CAAC,CAAC;gBACtG,IAAI,CAAC,IAAI,EAAE,CAAC;oBACV,MAAM,CAAC,IAAI,CACT,GAAG,SAAS,sCAAsC,eAAe,IAAI,eAAe,oBAAoB,CACzG,CAAC;oBACF,MAAM,IAAI,uBAAgB,CAAC,wBAAwB,CAAC,CAAC;gBACvD,CAAC;YACH,CAAC;YACD,IAAI,IAAI,EAAE,CAAC;gBACT,aAAa,CAAC,OAAO,GAAG;oBACtB,OAAO,EAAE,IAAI;oBACb,sBAAsB,EAAE,0BAA0B;iBACnD,CAAC;YACJ,CAAC;iBAAM,IAAI,WAAW,EAAE,CAAC;gBACvB,aAAa,CAAC,OAAO,GAAG;oBACtB,OAAO,EAAE,WAAW;oBACpB,sBAAsB,EAAE,eAAe;iBACxC,CAAC;YACJ,CAAC;YAED,IAAI,aAAa,IAAI,KAAK,IAAI,aAAa,IAAI,aAAa,CAAC,GAAG,EAAE,CAAC;gBACjE,IAAI,CAAC,yBAAyB,EAAE,CAAC;oBAC/B,MAAM,CAAC,IAAI,CAAC,GAAG,SAAS,qDAAqD,CAAC,CAAC;oBAC/E,MAAM,IAAI,uBAAgB,CAAC,wBAAwB,CAAC,CAAC;gBACvD,CAAC;gBACD,MAAM,UAAU,GAAwC;oBACtD,IAAI,EAAE,aAAa,CAAC,IAAI;oBACxB,OAAO,EAAE,aAAa,CAAC,OAAO;iBAC/B,CAAC;gBACF,MAAM,WAAW,GAAG,MAAM,yBAAyB,CAAC,OAAO,CAAC;oBAC1D,OAAO,EAAE;wBACP,CAAC,aAAa,CAAC,QAAQ,CAAC,cAAc,CAAC,EAAE,IAAA,gBAAS,EAAC,UAAU,EAAE,aAAa,CAAC,QAAQ,CAAC,cAAc,CAAC;6BAClG,YAAY;qBAChB;iBACF,CAAC,CAAC;gBACH,IAAI,WAAW,EAAE,CAAC;oBAChB,KAAK,MAAM,SAAS,IAAI,aAAa,CAAC,GAAG,EAAE,CAAC;wBAC1C,MAAM,EAAE,SAAS,EAAE,GAAG,EAAE,GAAG,aAAa,CAAC,GAAG,CAAC,SAA2C,CAAE,CAAC;wBAC3F,IAAI,CAAC,GAAG,EAAE,CAAC;4BACT,SAAS;wBACX,CAAC;wBACD,MAAM,cAAc,GAClB,IAAA,gBAAS,EAAC,WAAW,EAAE,SAAS,EAAE,EAAE,2BAA2B,EAAE,IAAI,EAAE,CAAC,CAAC,YAAY,IAAI,EAAE,CAAC;wBAC9F,MAAM,YAAY,GAAG,SAAuC,CAAC;wBAC7D,IAAI,SAAS,EAAE,CAAC;4BACd,aAAa,CAAC,YAAY,CAAC,GAAG,gBAAE,CAAC,KAAK,CAAC,aAAa,CAAC,YAAY,CAAC,EAAE,cAAc,CAAC,CAAC;4BACpF,SAAS;wBACX,CAAC;wBACD,aAAa,CAAC,YAAY,CAAC,GAAG,gBAAE,CAAC,KAAK,CAAC,cAAc,EAAE,aAAa,CAAC,YAAY,CAAC,CAAC,CAAC;oBACtF,CAAC;gBACH,CAAC;YACH,CAAC;YAED,IAAI,UAAU,GAAG,MAAM,WAAW,CAAC,QAAmC,CAAC,CACrE,aAAa,CAAC,IAAqC,EACnD,aAAa,CAAC,OAAiD,CAChE,CAAC;YAEF,IACE,CAAC,CAAC,UAAU,CAAC,KAAK,IAAI,CAAE,UAAwD,CAAC,iBAAiB,CAAC;gBACnG,CAAC,UAAU,CAAC,OAAO,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,EAC5C,CAAC;gBACD,MAAM,CAAC,IAAI,CAAC,GAAG,SAAS,4BAA4B,EAAE,UAAU,CAAC,CAAC;gBAClE,MAAM,IAAI,uBAAgB,CAAC,wBAAwB,CAAC,CAAC;YACvD,CAAC;YAED,IAAI,sBAAsB,IAAI,UAAU,IAAI,UAAU,CAAC,oBAAoB,EAAE,CAAC;gBAC5E,MAAM,iBAAiB,GAA2B,EAAE,CAAC;gBACrD,MAAM,SAAS,GAAG,CAAC,aAAa,EAAE,SAAS,EAAE,cAAc,CAAC,CAAC;gBAC7D,SAAS,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE;oBAC3B,MAAM,YAAY,GAAG,UAAU,CAAC,QAAmC,CAAsB,CAAC;oBAC1F,IAAI,CAAC,YAAY,EAAE,CAAC;wBAClB,OAAO;oBACT,CAAC;oBACD,iBAAiB,CAAC,QAAQ,CAAC,GAAG,YAAY,CAAC;gBAC7C,CAAC,CAAC,CAAC;gBACH,MAAM,qBAAqB,GAAG,MAAM,WAAW,CAAC,6BAA6B,CAAC,iBAAiB,CAAC,CAAC;gBACjG,UAAU,mCAAQ,UAAU,GAAK,qBAAqB,CAAE,CAAC;YAC3D,CAAC;YAED,IAAI,QAAQ,IAAI,CAAC,kBAAkB,EAAE,CAAC;gBACpC,IAAI,wBAAwB,IAAI,UAAU,IAAI,UAAU,CAAC,sBAAsB,EAAE,CAAC;oBAChF,MAAM,EAAE,aAAa,EAAE,eAAe,EAAE,GAAG,UAAU,CAAC,sBAAsB,CAAC;oBAC7E,MAAM,kBAAkB,GAAG,IAAA,gBAAS,EAAC,UAAU,EAAE,eAAe,EAAE;wBAChE,2BAA2B,EAAE,IAAI;qBAClC,CAAC,CAAC,YAAY,CAAC;oBAChB,eAAe,GAAG,aAAa,CAAC;oBAChC,IAAI,OAAO,kBAAkB,KAAK,WAAW,EAAE,CAAC;wBAC9C,eAAe,GAAG,kBAAkB,CAAC;oBACvC,CAAC;oBACD,IAAI,OAAO,eAAe,KAAK,WAAW,EAAE,CAAC;wBAC3C,IAAI,GAAG,MAAM,IAAI,CAAC,uBAAuB,CAAC;4BACxC,OAAO,EAAE,EAAE,CAAC,aAAa,CAAC,EAAE,eAAe,EAAE;4BAC7C,eAAe,EAAE,aAAa;yBAC/B,CAAC,CAAC;oBACL,CAAC;gBACH,CAAC;qBAAM,IAAI,iCAAiC,IAAI,UAAU,IAAI,UAAU,CAAC,+BAA+B,EAAE,CAAC;oBACzG,kCAAkC,GAAG,IAAI,CAAC;gBAC5C,CAAC;qBAAM,IAAI,UAAU,EAAE,CAAC;oBACtB,eAAe,GAAG,eAAe,CAAC;oBAClC,eAAe,GAAG,WAAW,CAAC,eAAe,CAAC,CAAC;oBAC/C,IAAI,GAAG,MAAM,IAAI,CAAC,uBAAuB,CAAC;wBACxC,OAAO,EAAE,WAAW;wBACpB,eAAe,EAAE,eAAe;qBACjC,CAAC,CAAC;gBACL,CAAC;YACH,CAAC;YAED,MAAM,UAAU,GAAG,YAAY,IAAI,UAAU,IAAI,UAAU,CAAC,UAAU,CAAC;YACvE,IAAI,CAAC,IAAI,IAAI,CAAC,UAAU,IAAI,kCAAkC,CAAC,EAAE,CAAC;gBAChE,MAAM,QAAQ,GAAG,MAAM,WAAW,CAAC,oCAAoC,CACrE,UAAuE,CACxE,CAAC;gBACF,IAAI,UAAU,IAAI,QAAQ,EAAE,CAAC;oBAC3B,IAAI,CAAC,wBAAwB,EAAE,CAAC;wBAC9B,MAAM,CAAC,IAAI,CAAC,GAAG,SAAS,oDAAoD,CAAC,CAAC;wBAC9E,MAAM,IAAI,uBAAgB,CAAC,wBAAwB,CAAC,CAAC;oBACvD,CAAC;oBACD,MAAM,EAAE,MAAM,EAAE,WAAW,EAAE,GAAG,MAAM,wBAAwB,CAAC,MAAM,CAAC,QAAqC,CAAC,CAAC;oBAC7G,IAAI,GAAG,MAAM,wBAAwB,CAAC,0BAA0B,CAC9D;wBACE,OAAO,EAAE;4BACP,CAAC,0BAA0B,CAAC,EAAE,WAAW,CAAC,0BAAsD,CAAC;yBAClG;qBACF,EACD,EAAE,YAAY,EAAE,KAAK,EAAE,CACxB,CAAC;gBACJ,CAAC;qBAAM,IAAI,kCAAkC,EAAE,CAAC;oBAC9C,IAAI,GAAG,QAAgE,CAAC;gBAC1E,CAAC;YACH,CAAC;YACD,IAAI,gBAAgB,KAAK,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;gBACvC,MAAM,CAAC,IAAI,CACT,GAAG,SAAS,kCAAkC,eAAe,IAAI,eAAe,CAAC,CAAC,CAAC,OAAO,eAAe,IAAI,eAAe,GAAG,CAAC,CAAC,CAAC,EAAE,mBAAmB,CACxJ,CAAC;gBACF,MAAM,IAAI,uBAAgB,CAAC,wBAAwB,CAAC,CAAC;YACvD,CAAC;YACD,IAAI,IAAI,IAAI,UAAU,IAAI,IAAI,EAAE,CAAC;gBAC/B,OAAO,IAAI,CAAC,QAAQ,CAAC;YACvB,CAAC;YAED,IAAI,aAAa,IAAI,UAAU,IAAI,aAAa,IAAI,aAAa,CAAC,QAAQ,EAAE,CAAC;gBAC3E,IAAI,CAAC,yBAAyB,EAAE,CAAC;oBAC/B,MAAM,CAAC,IAAI,CAAC,GAAG,SAAS,qDAAqD,CAAC,CAAC;oBAC/E,MAAM,IAAI,uBAAgB,CAAC,wBAAwB,CAAC,CAAC;gBACvD,CAAC;gBACD,MAAM,UAAU,GAAkB;oBAChC,IAAI,EAAE,aAAa,CAAC,IAAI;oBACxB,OAAO,EAAE,aAAa,CAAC,OAAO;oBAC9B,MAAM,EAAE,UAAU;iBACnB,CAAC;gBACF,MAAM,SAAS,GAAkB,EAAE,CAAC;gBACpC,KAAK,MAAM,SAAS,IAAI,aAAa,CAAC,QAAQ,EAAE,CAAC;oBAC/C,MAAM,aAAa,GAAG,aAAa,CAAC,QAAQ,CAAC,SAAgD,CAAC,CAAC;oBAC/F,IAAI,aAAa,YAAY,KAAK,EAAE,CAAC;wBACnC,MAAM,cAAc,GAAkB,EAAE,CAAC;wBACzC,aAAa,CAAC,OAAO,CAAC,iBAAiB,CAAC,EAAE;4BACxC,MAAM,EAAE,cAAc,EAAE,cAAc,EAAE,GAAG,iBAAiB,CAAC;4BAC7D,IAAA,gBAAS,EACP,cAAc,EACd,cAAc,EACd,IAAA,gBAAS,EAAC,UAAU,EAAE,cAAc,EAAE,EAAE,2BAA2B,EAAE,IAAI,EAAE,CAAC,CAAC,YAAY,CAC1F,CAAC;wBACJ,CAAC,CAAC,CAAC;wBACH,SAAS,CAAC,SAAS,CAAC,GAAG,cAAc,CAAC;wBACtC,SAAS;oBACX,CAAC;oBACD,SAAS,CAAC,SAAS,CAAC,GAAG,UAAU,CAAC,SAAS,CAAC,CAAC;gBAC/C,CAAC;gBACD,MAAM,yBAAyB,CAAC,MAAM,iCACjC,SAAS,KACZ,CAAC,aAAa,CAAC,QAAQ,CAAC,cAAc,CAAC,EAAE,IAAA,gBAAS,EAAC,UAAU,EAAE,aAAa,CAAC,QAAQ,CAAC,cAAc,CAAC;yBAClG,YAAY,IACf,CAAC;YACL,CAAC;YACD,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,eAAe,EAAE,eAAe,EAAE,CAAC;QAChE,CAAC;KAAA;IAEe,uBAAuB,CAAC,OAGvC;;YACC,MAAM,EAAE,cAAc,EAAE,wBAAwB,EAAE,UAAU,EAAE,GAAG,IAAI,CAAC;YACtE,IAAI,CAAC,wBAAwB,EAAE,CAAC;gBAC9B,MAAM,IAAI,uBAAgB,CAAC,IAAI,UAAU,mEAAmE,CAAC,CAAC;YAChH,CAAC;YACD,MAAM,EAAE,0BAA0B,EAAE,GAAG,cAAc,CAAC,MAAM,CAAC,MAAM,CAAC,UAAU,CAAuB,CAAC;YACtG,MAAM,EAAE,eAAe,EAAE,GAAG,OAAO,CAAC;YACpC,IAAI,OAAO,GAAkB,OAAO,CAAC,OAAO,CAAC;YAC7C,IAAI,IAAI,GAAqD,IAAI,CAAC;YAClE,IAAI,eAAe,KAAK,0BAA0B,EAAE,CAAC;gBAInD,MAAM,qBAAqB,GAAG,MAAM,wBAAwB,CAAC,OAAO,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC;gBAClF,IAAI,CAAC,qBAAqB,CAAC,MAAM,EAAE,CAAC;oBAClC,OAAO,IAAI,CAAC;gBACd,CAAC;gBACD,OAAO,GAAG;oBACR,CAAC,0BAA0B,CAAC,EAC1B,qBAAqB,CAAC,MAAM,CAAC,0BAAuE,CAAC;iBACxG,CAAC;YACJ,CAAC;iBAAM,CAAC;gBACN,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC;YAC5B,CAAC;YACD,IAAI,GAAG,MAAM,wBAAwB,CAAC,0BAA0B,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC,CAAC;YACtG,OAAO,IAAI,CAAC;QACd,CAAC;KAAA;CACF;AA9eD,0EA8eC"}

package/dist/services/authenticationManager/index.d.ts

@@ -0,0 +1,2 @@
+export * from './iam.authenticationManager.definitions';
+export * from './iam.authenticationManager.service';

package/dist/services/authenticationManager/index.js

@@ -0,0 +1,19 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __exportStar = (this && this.__exportStar) || function(m, exports) {
+    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+__exportStar(require("./iam.authenticationManager.definitions"), exports);
+__exportStar(require("./iam.authenticationManager.service"), exports);
+//# sourceMappingURL=index.js.map

package/dist/services/authenticationManager/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/services/authenticationManager/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,0EAAwD;AACxD,sEAAoD"}

package/dist/services/authenticationOAuth2/iam.authenticationOAuth2.definitions.d.ts

@@ -1,4 +1,4 @@
-import { IAMAuthenticationCompleteData, IAMAuthenticationCompleteOptions, IAMAuthenticationCompleteResult, IAMAuthenticationGetPayloadsFromExternalTokensData, IAMAuthenticationGetPayloadsFromExternalTokensResult, IAMAuthenticationGetUserCreateAccessTokenConfigResult, IAMAuthenticationInitiateData, IAMAuthenticationInitiateOptions, IAMAuthenticationInitiateResult, IAMAuthenticationVerifyExternalAccessTokenData, IAMAuthenticationVerifyExternalAccessTokenResult } from '../authentication';
+import { IAMAuthenticationCompleteData, IAMAuthenticationCompleteOptions, IAMAuthenticationCompleteResult, IAMAuthenticationGetPayloadsFromExternalTokensData, IAMAuthenticationGetPayloadsFromExternalTokensResult, IAMAuthenticationGetUserAuthenticationConfigResult, IAMAuthenticationInitiateData, IAMAuthenticationInitiateOptions, IAMAuthenticationInitiateResult, IAMAuthenticationVerifyExternalAccessTokenData, IAMAuthenticationVerifyExternalAccessTokenResult } from '../authentication';
 export interface IAMAuthenticationOAuth2AccessTokenProviderResponseData {
     access_token: string;
     expires_in?: number;
@@ -10,6 +10,7 @@ export interface IAMAuthenticationOAuth2AccessTokenProviderResponseData {
 export interface IAMAuthenticationOAuth2CompleteData extends IAMAuthenticationCompleteData {
     code: string;
     codeVerifier: string;
+    redirectUri?: string;
     state: string;
 }
 export type IAMAuthenticationOAuth2CompleteOptions<Context extends object> = IAMAuthenticationCompleteOptions<Context>;
@@ -19,8 +20,9 @@ export interface IAMAuthenticationOAuth2CompleteResult extends IAMAuthentication
 }
 export type IAMAuthenticationOAuth2GetPayloadsFromExternalTokensData = IAMAuthenticationGetPayloadsFromExternalTokensData;
 export type IAMAuthenticationOAuth2GetPayloadsFromExternalTokensResult = IAMAuthenticationGetPayloadsFromExternalTokensResult;
-export type IAMAuthenticationOAuth2GetUserCreateAccessTokenConfigResult = IAMAuthenticationGetUserCreateAccessTokenConfigResult;
+export type IAMAuthenticationOAuth2GetUserAuthenticationConfigResult = IAMAuthenticationGetUserAuthenticationConfigResult;
 export interface IAMAuthenticationOAuth2InitiateData extends IAMAuthenticationInitiateData {
+    redirectUri?: string;
     scope?: string;
 }
 export interface IAMAuthenticationOAuth2InitiateOptions<Context extends object> extends IAMAuthenticationInitiateOptions<Context> {
@@ -33,6 +35,7 @@ export interface IAMAuthenticationOAuth2InitiateResult extends IAMAuthentication
     codeVerifier?: string;
     nonce?: string;
     state: string;
+    redirectUri: string;
 }
 export type IAMAuthenticationOAuth2VerifyExternalAccessTokenData = Pick<IAMAuthenticationVerifyExternalAccessTokenData, 'accessToken'>;
 export type IAMAuthenticationOAuth2VerifyExternalAccessTokenResult = Pick<IAMAuthenticationVerifyExternalAccessTokenResult, 'accessTokenPayload' | 'error'>;

package/dist/services/authenticationOAuth2/iam.authenticationOAuth2.service.d.ts

@@ -1,25 +1,13 @@
 import { ConfigProviderService, LoggerService } from '@node-c/core';
-import { IAMAuthenticationOAuth2CompleteData, IAMAuthenticationOAuth2CompleteOptions, IAMAuthenticationOAuth2CompleteResult, IAMAuthenticationOAuth2GetPayloadsFromExternalTokensData, IAMAuthenticationOAuth2GetPayloadsFromExternalTokensResult, IAMAuthenticationOAuth2GetUserCreateAccessTokenConfigResult, IAMAuthenticationOAuth2InitiateData, IAMAuthenticationOAuth2InitiateOptions, IAMAuthenticationOAuth2InitiateResult, IAMAuthenticationOAuth2VerifyExternalAccessTokenData, IAMAuthenticationOAuth2VerifyExternalAccessTokenResult } from './iam.authenticationOAuth2.definitions';
+import { IAMAuthenticationOAuth2CompleteData, IAMAuthenticationOAuth2CompleteOptions, IAMAuthenticationOAuth2CompleteResult, IAMAuthenticationOAuth2GetPayloadsFromExternalTokensData, IAMAuthenticationOAuth2GetPayloadsFromExternalTokensResult, IAMAuthenticationOAuth2GetUserAuthenticationConfigResult, IAMAuthenticationOAuth2InitiateData, IAMAuthenticationOAuth2InitiateOptions, IAMAuthenticationOAuth2InitiateResult, IAMAuthenticationOAuth2VerifyExternalAccessTokenData, IAMAuthenticationOAuth2VerifyExternalAccessTokenResult } from './iam.authenticationOAuth2.definitions';
 import { IAMAuthenticationService } from '../authentication';
 export declare class IAMAuthenticationOAuth2Service<CompleteContext extends object, InitiateContext extends object> extends IAMAuthenticationService<CompleteContext, InitiateContext> {
-    protected configProvider: ConfigProviderService;
-    protected logger: LoggerService;
-    protected moduleName: string;
-    protected serviceName: string;
     constructor(configProvider: ConfigProviderService, logger: LoggerService, moduleName: string, serviceName: string);
     complete(data: IAMAuthenticationOAuth2CompleteData, _options: IAMAuthenticationOAuth2CompleteOptions<CompleteContext>): Promise<IAMAuthenticationOAuth2CompleteResult>;
     protected generateChallenge(codeVerifier: string): Promise<string>;
     protected generateUrlEncodedString(length: number): string;
     getPayloadsFromExternalTokens(data: IAMAuthenticationOAuth2GetPayloadsFromExternalTokensData): Promise<IAMAuthenticationOAuth2GetPayloadsFromExternalTokensResult>;
-    getUserCreateAccessTokenConfig(): IAMAuthenticationOAuth2GetUserCreateAccessTokenConfigResult;
+    getUserAuthenticationConfig(): IAMAuthenticationOAuth2GetUserAuthenticationConfigResult;
     initiate(data: IAMAuthenticationOAuth2InitiateData, options: IAMAuthenticationOAuth2InitiateOptions<InitiateContext>): Promise<IAMAuthenticationOAuth2InitiateResult>;
     verifyExternalAccessToken(data: IAMAuthenticationOAuth2VerifyExternalAccessTokenData): Promise<IAMAuthenticationOAuth2VerifyExternalAccessTokenResult>;
-    protected verifyToken<DecodedTokenContent = unknown>(token: string, options?: {
-        audiences?: string[];
-        issuer?: string;
-        secret?: string;
-    }): Promise<{
-        content?: DecodedTokenContent;
-        error?: unknown;
-    }>;
 }