@node-c/domain-iam 1.0.0-beta7 → 1.0.0-beta8

package/dist/common/definitions/common.constants.d.ts

@@ -1,9 +1,13 @@
-export declare enum Constants {
-    ACCESS_CONTROL_MODULE_NAME = "ACCESS_CONTROL_MODULE_NAME",
-    DOMAIN_MODULE_NAME = "DOMAIN_MODULE_NAME",
-    OAUTH2_CODE_VERIFIER_LENGTH = "128",
-    OAUTH2_PKCE_CHALLENGE_HASH_METHOD = "SHA-256",
-    TOKEN_EXPIRED_ERROR = "Token expired",
-    TOKEN_MISMATCHED_AUDIENCES_ERROR = "Mismatched audiences",
-    TOKEN_MISMATCHED_ISSUER_ERROR = "Mismatched issuer"
-}
+export declare const Constants: {
+    ACCESS_CONTROL_MODULE_NAME: string;
+    DEFAULT_ACCESS_TOKEN_EXPIRY_TIME_IN_HOURS: number;
+    DEFAULT_ACCESS_TOKEN_STORAGE_TTL_MULTIPLIER: number;
+    DEFAULT_REFRESH_TOKEN_EXPIRY_TIME_IN_HOURS: number;
+    DEFAULT_REFRESH_TOKEN_STORAGE_TTL_MULTIPLIER: number;
+    DOMAIN_MODULE_NAME: string;
+    OAUTH2_CODE_VERIFIER_LENGTH: string;
+    OAUTH2_PKCE_CHALLENGE_HASH_METHOD: string;
+    TOKEN_EXPIRED_ERROR: string;
+    TOKEN_MISMATCHED_AUDIENCES_ERROR: string;
+    TOKEN_MISMATCHED_ISSUER_ERROR: string;
+};

package/dist/common/definitions/common.constants.js

@@ -1,14 +1,17 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.Constants = void 0;
-var Constants;
-(function (Constants) {
-    Constants["ACCESS_CONTROL_MODULE_NAME"] = "ACCESS_CONTROL_MODULE_NAME";
-    Constants["DOMAIN_MODULE_NAME"] = "DOMAIN_MODULE_NAME";
-    Constants["OAUTH2_CODE_VERIFIER_LENGTH"] = "128";
-    Constants["OAUTH2_PKCE_CHALLENGE_HASH_METHOD"] = "SHA-256";
-    Constants["TOKEN_EXPIRED_ERROR"] = "Token expired";
-    Constants["TOKEN_MISMATCHED_AUDIENCES_ERROR"] = "Mismatched audiences";
-    Constants["TOKEN_MISMATCHED_ISSUER_ERROR"] = "Mismatched issuer";
-})(Constants || (exports.Constants = Constants = {}));
+exports.Constants = {
+    ACCESS_CONTROL_MODULE_NAME: 'ACCESS_CONTROL_MODULE_NAME',
+    DEFAULT_ACCESS_TOKEN_EXPIRY_TIME_IN_HOURS: 24,
+    DEFAULT_ACCESS_TOKEN_STORAGE_TTL_MULTIPLIER: 1,
+    DEFAULT_REFRESH_TOKEN_EXPIRY_TIME_IN_HOURS: 24,
+    DEFAULT_REFRESH_TOKEN_STORAGE_TTL_MULTIPLIER: 1,
+    DOMAIN_MODULE_NAME: 'DOMAIN_MODULE_NAME',
+    OAUTH2_CODE_VERIFIER_LENGTH: '128',
+    OAUTH2_PKCE_CHALLENGE_HASH_METHOD: 'SHA-256',
+    TOKEN_EXPIRED_ERROR: 'jwt expired',
+    TOKEN_MISMATCHED_AUDIENCES_ERROR: 'Mismatched audiences',
+    TOKEN_MISMATCHED_ISSUER_ERROR: 'Mismatched issuer'
+};
 //# sourceMappingURL=common.constants.js.map

package/dist/common/definitions/common.constants.js.map

@@ -1 +1 @@
-{"version":3,"file":"common.constants.js","sourceRoot":"","sources":["../../../src/common/definitions/common.constants.ts"],"names":[],"mappings":";;;AAAA,IAAY,SAeX;AAfD,WAAY,SAAS;IAEnB,sEAAyD,CAAA;IAEzD,sDAAyC,CAAA;IAEzC,gDAAmC,CAAA;IAEnC,0DAA6C,CAAA;IAE7C,kDAAqC,CAAA;IAErC,sEAAyD,CAAA;IAEzD,gEAAmD,CAAA;AACrD,CAAC,EAfW,SAAS,yBAAT,SAAS,QAepB"}
+{"version":3,"file":"common.constants.js","sourceRoot":"","sources":["../../../src/common/definitions/common.constants.ts"],"names":[],"mappings":";;;AAAa,QAAA,SAAS,GAAG;IACvB,0BAA0B,EAAE,4BAA4B;IACxD,yCAAyC,EAAE,EAAE;IAC7C,2CAA2C,EAAE,CAAC;IAC9C,0CAA0C,EAAE,EAAE;IAC9C,4CAA4C,EAAE,CAAC;IAC/C,kBAAkB,EAAE,oBAAoB;IACxC,2BAA2B,EAAE,KAAK;IAClC,iCAAiC,EAAE,SAAS;IAC5C,mBAAmB,EAAE,aAAa;IAClC,gCAAgC,EAAE,sBAAsB;IACxD,6BAA6B,EAAE,mBAAmB;CACnD,CAAC"}

package/dist/services/authentication/iam.authentication.definitions.d.ts

@@ -10,7 +10,7 @@ export interface IAMAuthenticationCompleteOptions<Context> {
     mfaOptions?: unknown;
 }
 export declare enum IAMAuthenticationType {
-    OAuth2 = "ouath2",
+    OAuth2 = "oauth2",
     UserLocal = "userLocal"
 }
 export interface IAMAuthenticationCompleteResult {
@@ -23,7 +23,7 @@ export interface IAMAuthenticationCompleteResult {
     refreshTokenExpiresIn?: number;
     valid: boolean;
 }
-export type IAMAuthenticationGetUserCreateAccessTokenConfigResult = AppConfigCommonDomainIAMAuthServiceConfigStepSettings;
+export type IAMAuthenticationGetUserAuthenticationConfigResult = AppConfigCommonDomainIAMAuthServiceConfigStepSettings;
 export interface IAMAuthenticationGetPayloadsFromExternalTokensData {
     accessToken?: string;
     idToken?: string;
@@ -39,6 +39,10 @@ export interface IAMAuthenticationGetUserDataFromExternalTokenPayloadsData {
     idTokenPayload?: {
         email: string;
         name: string;
+    } & {
+        data?: {
+            user?: GenericObject;
+        } & GenericObject;
     } & GenericObject;
     refreshTokenPayload?: GenericObject;
 }
@@ -81,3 +85,8 @@ export interface IAMAuthenticationVerifyExternalAccessTokenResult {
     newRefreshToken?: string;
     refreshTokenPayload?: unknown;
 }
+export interface IAMAuthenticationVerifyTokenOptions {
+    audiences?: string[];
+    issuer?: string;
+    secret?: string;
+}

package/dist/services/authentication/iam.authentication.definitions.js

@@ -3,7 +3,7 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.IAMAuthenticationType = void 0;
 var IAMAuthenticationType;
 (function (IAMAuthenticationType) {
-    IAMAuthenticationType["OAuth2"] = "ouath2";
+    IAMAuthenticationType["OAuth2"] = "oauth2";
     IAMAuthenticationType["UserLocal"] = "userLocal";
 })(IAMAuthenticationType || (exports.IAMAuthenticationType = IAMAuthenticationType = {}));
 //# sourceMappingURL=iam.authentication.definitions.js.map

package/dist/services/authentication/iam.authentication.service.d.ts

@@ -1,16 +1,21 @@
 import { ConfigProviderService, LoggerService } from '@node-c/core';
-import { IAMAuthenticationCompleteData, IAMAuthenticationCompleteOptions, IAMAuthenticationCompleteResult, IAMAuthenticationGetPayloadsFromExternalTokensData, IAMAuthenticationGetPayloadsFromExternalTokensResult, IAMAuthenticationGetUserCreateAccessTokenConfigResult, IAMAuthenticationGetUserDataFromExternalTokenPayloadsData, IAMAuthenticationGetUserDataFromExternalTokenPayloadsResult, IAMAuthenticationInitiateData, IAMAuthenticationInitiateOptions, IAMAuthenticationInitiateResult, IAMAuthenticationRefreshExternalAccessTokenData, IAMAuthenticationRefreshExternalAccessTokenResult, IAMAuthenticationVerifyExternalAccessTokenData, IAMAuthenticationVerifyExternalAccessTokenResult } from './iam.authentication.definitions';
+import { IAMAuthenticationCompleteData, IAMAuthenticationCompleteOptions, IAMAuthenticationCompleteResult, IAMAuthenticationGetPayloadsFromExternalTokensData, IAMAuthenticationGetPayloadsFromExternalTokensResult, IAMAuthenticationGetUserAuthenticationConfigResult, IAMAuthenticationGetUserDataFromExternalTokenPayloadsData, IAMAuthenticationGetUserDataFromExternalTokenPayloadsResult, IAMAuthenticationInitiateData, IAMAuthenticationInitiateOptions, IAMAuthenticationInitiateResult, IAMAuthenticationRefreshExternalAccessTokenData, IAMAuthenticationRefreshExternalAccessTokenResult, IAMAuthenticationVerifyExternalAccessTokenData, IAMAuthenticationVerifyExternalAccessTokenResult, IAMAuthenticationVerifyTokenOptions } from './iam.authentication.definitions';
 export declare class IAMAuthenticationService<CompleteContext extends object, InitiateContext extends object> {
     protected configProvider: ConfigProviderService;
     protected logger: LoggerService;
     protected moduleName: string;
+    protected serviceName: string;
     protected isLocal: boolean;
-    constructor(configProvider: ConfigProviderService, logger: LoggerService, moduleName: string);
+    constructor(configProvider: ConfigProviderService, logger: LoggerService, moduleName: string, serviceName: string);
     complete(_data: IAMAuthenticationCompleteData, _options: IAMAuthenticationCompleteOptions<CompleteContext>): Promise<IAMAuthenticationCompleteResult>;
-    getUserCreateAccessTokenConfig(): IAMAuthenticationGetUserCreateAccessTokenConfigResult;
-    getPayloadsFromExternalTokens(_data: IAMAuthenticationGetPayloadsFromExternalTokensData): Promise<IAMAuthenticationGetPayloadsFromExternalTokensResult>;
+    getUserAuthenticationConfig(): IAMAuthenticationGetUserAuthenticationConfigResult;
+    getPayloadsFromExternalTokens(data: IAMAuthenticationGetPayloadsFromExternalTokensData): Promise<IAMAuthenticationGetPayloadsFromExternalTokensResult>;
     getUserDataFromExternalTokenPayloads(_data: IAMAuthenticationGetUserDataFromExternalTokenPayloadsData): Promise<IAMAuthenticationGetUserDataFromExternalTokenPayloadsResult | null>;
     initiate(_data: IAMAuthenticationInitiateData, _options: IAMAuthenticationInitiateOptions<InitiateContext>): Promise<IAMAuthenticationInitiateResult>;
     refreshExternalAccessToken(_data: IAMAuthenticationRefreshExternalAccessTokenData): Promise<IAMAuthenticationRefreshExternalAccessTokenResult>;
     verifyExternalAccessToken(_data: IAMAuthenticationVerifyExternalAccessTokenData): Promise<IAMAuthenticationVerifyExternalAccessTokenResult>;
+    verifyToken<DecodedTokenContent = unknown>(token: string, options?: IAMAuthenticationVerifyTokenOptions): Promise<{
+        content?: DecodedTokenContent;
+        error?: unknown;
+    }>;
 }

package/dist/services/authentication/iam.authentication.service.js

@@ -1,4 +1,37 @@
 "use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
 var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
     function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
     return new (P || (P = Promise))(function (resolve, reject) {
@@ -11,23 +44,41 @@ var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, ge
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.IAMAuthenticationService = void 0;
 const core_1 = require("@node-c/core");
+const jwt = __importStar(require("jsonwebtoken"));
+const definitions_1 = require("../../common/definitions");
 class IAMAuthenticationService {
-    constructor(configProvider, logger, moduleName) {
+    constructor(configProvider, logger, moduleName, serviceName) {
         this.configProvider = configProvider;
         this.logger = logger;
         this.moduleName = moduleName;
+        this.serviceName = serviceName;
     }
     complete(_data, _options) {
         return __awaiter(this, void 0, void 0, function* () {
             throw new core_1.ApplicationError(`[${this.moduleName}][IAMAuthenticationService]: Method "complete" not implemented.`);
         });
     }
-    getUserCreateAccessTokenConfig() {
+    getUserAuthenticationConfig() {
         throw new core_1.ApplicationError(`[${this.moduleName}][IAMAuthenticationService]: Method "getUserAccessTokenConfig" not implemented.`);
     }
-    getPayloadsFromExternalTokens(_data) {
+    getPayloadsFromExternalTokens(data) {
         return __awaiter(this, void 0, void 0, function* () {
-            throw new core_1.ApplicationError(`[${this.moduleName}][IAMAuthenticationService]: Method "getPayloadsFromExternalTokens" not implemented.`);
+            const { logger, moduleName, serviceName } = this;
+            const { accessToken, idToken } = data;
+            const returnData = {};
+            if (accessToken) {
+                const { content: accessTokenPayload, error } = yield this.verifyToken(accessToken);
+                if (error) {
+                    logger.error(`[${moduleName}][${serviceName}]: Method "getPayloadsFromExternalTokens" has produced an error:`, error);
+                    throw new core_1.ApplicationError(`[${moduleName}][${serviceName}]: Error getting data from external tokens.`);
+                }
+                returnData.accessTokenPayload = accessTokenPayload;
+            }
+            if (idToken) {
+                const idTokenData = yield this.verifyToken(idToken);
+                returnData.idTokenPayload = idTokenData.content;
+            }
+            return returnData;
         });
     }
     getUserDataFromExternalTokenPayloads(_data) {
@@ -50,6 +101,46 @@ class IAMAuthenticationService {
             throw new core_1.ApplicationError(`[${this.moduleName}][IAMAuthenticationService]: Method "verifyExternalAccessToken" not implemented.`);
         });
     }
+    verifyToken(token, options) {
+        return __awaiter(this, void 0, void 0, function* () {
+            const { audiences, issuer, secret } = options || {};
+            let returnData = {};
+            if (secret) {
+                returnData = yield new Promise(resolve => {
+                    jwt.verify(token, secret, (err, decoded) => {
+                        if (err) {
+                            resolve({ content: decoded, error: err });
+                        }
+                        resolve({ content: decoded });
+                    });
+                });
+            }
+            else {
+                const tokenContent = jwt.decode(token);
+                if (tokenContent.exp) {
+                    let currentTimeStamp = `${new Date().valueOf()}`;
+                    let expString = `${tokenContent.exp}`;
+                    if (expString.length < currentTimeStamp.length) {
+                        currentTimeStamp = currentTimeStamp.substring(0, expString.length);
+                    }
+                    else if (expString.length > currentTimeStamp.length) {
+                        expString = expString.substring(0, currentTimeStamp.length);
+                    }
+                    if (parseInt(expString, 10) < parseInt(currentTimeStamp, 10)) {
+                        returnData.error = definitions_1.Constants.TOKEN_EXPIRED_ERROR;
+                    }
+                }
+                if (tokenContent.aud && audiences && !audiences.includes(tokenContent.aud)) {
+                    returnData.error = definitions_1.Constants.TOKEN_MISMATCHED_AUDIENCES_ERROR;
+                }
+                if (tokenContent.iss && issuer && issuer !== tokenContent.iss) {
+                    returnData.error = definitions_1.Constants.TOKEN_MISMATCHED_ISSUER_ERROR;
+                }
+                returnData.content = tokenContent;
+            }
+            return returnData;
+        });
+    }
 }
 exports.IAMAuthenticationService = IAMAuthenticationService;
 //# sourceMappingURL=iam.authentication.service.js.map

package/dist/services/authentication/iam.authentication.service.js.map

@@ -1 +1 @@
-{"version":3,"file":"iam.authentication.service.js","sourceRoot":"","sources":["../../../src/services/authentication/iam.authentication.service.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,uCAAsF;AAoBtF,MAAa,wBAAwB;IAGnC,YAEY,cAAqC,EAErC,MAAqB,EAErB,UAAkB;QAJlB,mBAAc,GAAd,cAAc,CAAuB;QAErC,WAAM,GAAN,MAAM,CAAe;QAErB,eAAU,GAAV,UAAU,CAAQ;IAC3B,CAAC;IAKE,QAAQ,CAEZ,KAAoC,EAEpC,QAA2D;;YAE3D,MAAM,IAAI,uBAAgB,CAAC,IAAI,IAAI,CAAC,UAAU,iEAAiE,CAAC,CAAC;QACnH,CAAC;KAAA;IAED,8BAA8B;QAC5B,MAAM,IAAI,uBAAgB,CACxB,IAAI,IAAI,CAAC,UAAU,iFAAiF,CACrG,CAAC;IACJ,CAAC;IAMK,6BAA6B,CAEjC,KAAyD;;YAEzD,MAAM,IAAI,uBAAgB,CACxB,IAAI,IAAI,CAAC,UAAU,sFAAsF,CAC1G,CAAC;QACJ,CAAC;KAAA;IAKK,oCAAoC,CAExC,KAAgE;;YAEhE,MAAM,IAAI,uBAAgB,CACxB,IAAI,IAAI,CAAC,UAAU,6FAA6F,CACjH,CAAC;QACJ,CAAC;KAAA;IAKK,QAAQ,CAEZ,KAAoC,EAEpC,QAA2D;;YAE3D,MAAM,IAAI,uBAAgB,CAAC,IAAI,IAAI,CAAC,UAAU,iEAAiE,CAAC,CAAC;QACnH,CAAC;KAAA;IAEK,0BAA0B,CAE9B,KAAsD;;YAEtD,MAAM,IAAI,uBAAgB,CACxB,IAAI,IAAI,CAAC,UAAU,mFAAmF,CACvG,CAAC;QACJ,CAAC;KAAA;IAEK,yBAAyB,CAE7B,KAAqD;;YAErD,MAAM,IAAI,uBAAgB,CACxB,IAAI,IAAI,CAAC,UAAU,kFAAkF,CACtG,CAAC;QACJ,CAAC;KAAA;CACF;AApFD,4DAoFC"}
+{"version":3,"file":"iam.authentication.service.js","sourceRoot":"","sources":["../../../src/services/authentication/iam.authentication.service.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,uCAAsF;AAEtF,kDAAoC;AAqBpC,0DAAqD;AAErD,MAAa,wBAAwB;IAGnC,YAEY,cAAqC,EAErC,MAAqB,EAErB,UAAkB,EAElB,WAAmB;QANnB,mBAAc,GAAd,cAAc,CAAuB;QAErC,WAAM,GAAN,MAAM,CAAe;QAErB,eAAU,GAAV,UAAU,CAAQ;QAElB,gBAAW,GAAX,WAAW,CAAQ;IAC5B,CAAC;IAKE,QAAQ,CAEZ,KAAoC,EAEpC,QAA2D;;YAE3D,MAAM,IAAI,uBAAgB,CAAC,IAAI,IAAI,CAAC,UAAU,iEAAiE,CAAC,CAAC;QACnH,CAAC;KAAA;IAED,2BAA2B;QACzB,MAAM,IAAI,uBAAgB,CACxB,IAAI,IAAI,CAAC,UAAU,iFAAiF,CACrG,CAAC;IACJ,CAAC;IAOK,6BAA6B,CACjC,IAAwD;;YAExD,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,WAAW,EAAE,GAAG,IAAI,CAAC;YACjD,MAAM,EAAE,WAAW,EAAE,OAAO,EAAE,GAAG,IAAI,CAAC;YACtC,MAAM,UAAU,GAAyD,EAAE,CAAC;YAC5E,IAAI,WAAW,EAAE,CAAC;gBAChB,MAAM,EAAE,OAAO,EAAE,kBAAkB,EAAE,KAAK,EAAE,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,WAAW,CAAC,CAAC;gBACnF,IAAI,KAAK,EAAE,CAAC;oBACV,MAAM,CAAC,KAAK,CACV,IAAI,UAAU,KAAK,WAAW,kEAAkE,EAChG,KAAK,CACN,CAAC;oBACF,MAAM,IAAI,uBAAgB,CAAC,IAAI,UAAU,KAAK,WAAW,6CAA6C,CAAC,CAAC;gBAC1G,CAAC;gBACD,UAAU,CAAC,kBAAkB,GAAG,kBAAkB,CAAC;YACrD,CAAC;YACD,IAAI,OAAO,EAAE,CAAC;gBACZ,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC;gBACpD,UAAU,CAAC,cAAc,GAAG,WAAW,CAAC,OAAO,CAAC;YAClD,CAAC;YACD,OAAO,UAAU,CAAC;QACpB,CAAC;KAAA;IAKK,oCAAoC,CAExC,KAAgE;;YAEhE,MAAM,IAAI,uBAAgB,CACxB,IAAI,IAAI,CAAC,UAAU,6FAA6F,CACjH,CAAC;QACJ,CAAC;KAAA;IAKK,QAAQ,CAEZ,KAAoC,EAEpC,QAA2D;;YAE3D,MAAM,IAAI,uBAAgB,CAAC,IAAI,IAAI,CAAC,UAAU,iEAAiE,CAAC,CAAC;QACnH,CAAC;KAAA;IAEK,0BAA0B,CAE9B,KAAsD;;YAEtD,MAAM,IAAI,uBAAgB,CACxB,IAAI,IAAI,CAAC,UAAU,mFAAmF,CACvG,CAAC;QACJ,CAAC;KAAA;IAEK,yBAAyB,CAE7B,KAAqD;;YAErD,MAAM,IAAI,uBAAgB,CACxB,IAAI,IAAI,CAAC,UAAU,kFAAkF,CACtG,CAAC;QACJ,CAAC;KAAA;IAEK,WAAW,CACf,KAAa,EACb,OAA6C;;YAE7C,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,OAAO,IAAI,EAAE,CAAC;YACpD,IAAI,UAAU,GAAuD,EAAE,CAAC;YACxE,IAAI,MAAM,EAAE,CAAC;gBACX,UAAU,GAAG,MAAM,IAAI,OAAO,CAAqD,OAAO,CAAC,EAAE;oBAC3F,GAAG,CAAC,MAAM,CAAC,KAAK,EAAE,MAAM,EAAE,CAAC,GAAG,EAAE,OAAO,EAAE,EAAE;wBACzC,IAAI,GAAG,EAAE,CAAC;4BACR,OAAO,CAAC,EAAE,OAAO,EAAE,OAA8B,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,CAAC;wBACnE,CAAC;wBACD,OAAO,CAAC,EAAE,OAAO,EAAE,OAA8B,EAAE,CAAC,CAAC;oBACvD,CAAC,CAAC,CAAC;gBACL,CAAC,CAAC,CAAC;YACL,CAAC;iBAAM,CAAC;gBACN,MAAM,YAAY,GAAG,GAAG,CAAC,MAAM,CAAC,KAAK,CAAuE,CAAC;gBAC7G,IAAI,YAAY,CAAC,GAAG,EAAE,CAAC;oBAErB,IAAI,gBAAgB,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC;oBACjD,IAAI,SAAS,GAAG,GAAG,YAAY,CAAC,GAAG,EAAE,CAAC;oBACtC,IAAI,SAAS,CAAC,MAAM,GAAG,gBAAgB,CAAC,MAAM,EAAE,CAAC;wBAC/C,gBAAgB,GAAG,gBAAgB,CAAC,SAAS,CAAC,CAAC,EAAE,SAAS,CAAC,MAAM,CAAC,CAAC;oBACrE,CAAC;yBAAM,IAAI,SAAS,CAAC,MAAM,GAAG,gBAAgB,CAAC,MAAM,EAAE,CAAC;wBACtD,SAAS,GAAG,SAAS,CAAC,SAAS,CAAC,CAAC,EAAE,gBAAgB,CAAC,MAAM,CAAC,CAAC;oBAC9D,CAAC;oBACD,IAAI,QAAQ,CAAC,SAAS,EAAE,EAAE,CAAC,GAAG,QAAQ,CAAC,gBAAgB,EAAE,EAAE,CAAC,EAAE,CAAC;wBAC7D,UAAU,CAAC,KAAK,GAAG,uBAAS,CAAC,mBAAmB,CAAC;oBACnD,CAAC;gBACH,CAAC;gBACD,IAAI,YAAY,CAAC,GAAG,IAAI,SAAS,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,YAAY,CAAC,GAAG,CAAC,EAAE,CAAC;oBAC3E,UAAU,CAAC,KAAK,GAAG,uBAAS,CAAC,gCAAgC,CAAC;gBAChE,CAAC;gBACD,IAAI,YAAY,CAAC,GAAG,IAAI,MAAM,IAAI,MAAM,KAAK,YAAY,CAAC,GAAG,EAAE,CAAC;oBAC9D,UAAU,CAAC,KAAK,GAAG,uBAAS,CAAC,6BAA6B,CAAC;gBAC7D,CAAC;gBACD,UAAU,CAAC,OAAO,GAAG,YAAY,CAAC;YACpC,CAAC;YACD,OAAO,UAAU,CAAC;QACpB,CAAC;KAAA;CACF;AA/ID,4DA+IC"}

package/dist/services/authenticationConsumer/iam.authenticationConsumer.definitions.d.ts

@@ -0,0 +1,15 @@
+import { IAMAuthenticationCompleteData, IAMAuthenticationCompleteOptions, IAMAuthenticationCompleteResult, IAMAuthenticationGetUserAuthenticationConfigResult, IAMAuthenticationGetUserDataFromExternalTokenPayloadsData, IAMAuthenticationGetUserDataFromExternalTokenPayloadsResult, IAMAuthenticationInitiateData, IAMAuthenticationInitiateOptions, IAMAuthenticationInitiateResult, IAMAuthenticationRefreshExternalAccessTokenData, IAMAuthenticationRefreshExternalAccessTokenResult } from '../authentication';
+export type IAMAuthenticationConsumerCompleteData = IAMAuthenticationCompleteData;
+export type IAMAuthenticationConsumerCompleteOptions<Context extends object> = IAMAuthenticationCompleteOptions<Context>;
+export interface IAMAuthenticationConsumerCompleteResult extends IAMAuthenticationCompleteResult {
+    idToken?: string;
+    refreshToken?: string;
+}
+export type IAMAuthenticationConsumerGetUserAuthenticationConfigResult = IAMAuthenticationGetUserAuthenticationConfigResult;
+export type IAMAuthenticationConsumerGetUserDataFromExternalTokenPayloadsData = IAMAuthenticationGetUserDataFromExternalTokenPayloadsData;
+export type IAMAuthenticationConsumerGetUserDataFromExternalTokenPayloadsResult = IAMAuthenticationGetUserDataFromExternalTokenPayloadsResult;
+export type IAMAuthenticationConsumerInitiateData = IAMAuthenticationInitiateData;
+export type IAMAuthenticationConsumerInitiateOptions<Context extends object> = IAMAuthenticationInitiateOptions<Context>;
+export type IAMAuthenticationConsumerInitiateResult = IAMAuthenticationInitiateResult;
+export type IAMAuthenticationConsumerRefreshExternalAccessTokenData = IAMAuthenticationRefreshExternalAccessTokenData;
+export type IAMAuthenticationConsumerRefreshExternalAccessTokenResult = IAMAuthenticationRefreshExternalAccessTokenResult;

package/dist/services/authenticationConsumer/iam.authenticationConsumer.definitions.js

@@ -0,0 +1,3 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+//# sourceMappingURL=iam.authenticationConsumer.definitions.js.map

package/dist/services/authenticationConsumer/iam.authenticationConsumer.definitions.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"iam.authenticationConsumer.definitions.js","sourceRoot":"","sources":["../../../src/services/authenticationConsumer/iam.authenticationConsumer.definitions.ts"],"names":[],"mappings":""}

package/dist/services/authenticationConsumer/iam.authenticationConsumer.service.d.ts

@@ -0,0 +1,12 @@
+import { AppConfigDomainIAMAuthenticationStep, ConfigProviderService, GenericObject, LoggerService } from '@node-c/core';
+import { IAMAuthenticationConsumerCompleteData, IAMAuthenticationConsumerCompleteOptions, IAMAuthenticationConsumerCompleteResult, IAMAuthenticationConsumerGetUserAuthenticationConfigResult, IAMAuthenticationConsumerGetUserDataFromExternalTokenPayloadsData, IAMAuthenticationConsumerGetUserDataFromExternalTokenPayloadsResult, IAMAuthenticationConsumerInitiateData, IAMAuthenticationConsumerInitiateOptions, IAMAuthenticationConsumerInitiateResult, IAMAuthenticationConsumerRefreshExternalAccessTokenData, IAMAuthenticationConsumerRefreshExternalAccessTokenResult } from './iam.authenticationConsumer.definitions';
+import { IAMAuthenticationService } from '../authentication';
+export declare class IAMAuthenticationConsumerService<CompleteContext extends object, InitiateContext extends object> extends IAMAuthenticationService<CompleteContext, InitiateContext> {
+    constructor(configProvider: ConfigProviderService, logger: LoggerService, moduleName: string, serviceName: string);
+    complete(data: IAMAuthenticationConsumerCompleteData, options: IAMAuthenticationConsumerCompleteOptions<CompleteContext>): Promise<IAMAuthenticationConsumerCompleteResult>;
+    getUserAuthenticationConfig(): IAMAuthenticationConsumerGetUserAuthenticationConfigResult;
+    getUserDataFromExternalTokenPayloads(data: IAMAuthenticationConsumerGetUserDataFromExternalTokenPayloadsData): Promise<IAMAuthenticationConsumerGetUserDataFromExternalTokenPayloadsResult | null>;
+    initiate(data: IAMAuthenticationConsumerInitiateData, options: IAMAuthenticationConsumerInitiateOptions<InitiateContext>): Promise<IAMAuthenticationConsumerInitiateResult>;
+    protected runRequest<ReturnData>(endpoint: AppConfigDomainIAMAuthenticationStep | 'refreshExternalAccessToken', data: GenericObject): Promise<ReturnData>;
+    refreshExternalAccessToken(data: IAMAuthenticationConsumerRefreshExternalAccessTokenData): Promise<IAMAuthenticationConsumerRefreshExternalAccessTokenResult>;
+}

package/dist/services/authenticationConsumer/iam.authenticationConsumer.service.js

@@ -0,0 +1,135 @@
+"use strict";
+var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
+    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
+    return new (P || (P = Promise))(function (resolve, reject) {
+        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
+        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
+        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
+        step((generator = generator.apply(thisArg, _arguments || [])).next());
+    });
+};
+var __rest = (this && this.__rest) || function (s, e) {
+    var t = {};
+    for (var p in s) if (Object.prototype.hasOwnProperty.call(s, p) && e.indexOf(p) < 0)
+        t[p] = s[p];
+    if (s != null && typeof Object.getOwnPropertySymbols === "function")
+        for (var i = 0, p = Object.getOwnPropertySymbols(s); i < p.length; i++) {
+            if (e.indexOf(p[i]) < 0 && Object.prototype.propertyIsEnumerable.call(s, p[i]))
+                t[p[i]] = s[p[i]];
+        }
+    return t;
+};
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.IAMAuthenticationConsumerService = void 0;
+const core_1 = require("@node-c/core");
+const lodash_1 = __importDefault(require("lodash"));
+const authentication_1 = require("../authentication");
+class IAMAuthenticationConsumerService extends authentication_1.IAMAuthenticationService {
+    constructor(configProvider, logger, moduleName, serviceName) {
+        super(configProvider, logger, moduleName, serviceName);
+        this.isLocal = false;
+    }
+    complete(data, options) {
+        return __awaiter(this, void 0, void 0, function* () {
+            var _a;
+            const responseData = yield this.runRequest(core_1.AppConfigDomainIAMAuthenticationStep.Complete, Object.assign({ auth: Object.assign(Object.assign({}, data), { type: this.serviceName }), step: core_1.AppConfigDomainIAMAuthenticationStep.Complete }, ((options === null || options === void 0 ? void 0 : options.contextIdentifierField)
+                ? {
+                    filters: {
+                        [options.contextIdentifierField]: options.context[options.contextIdentifierField]
+                    }
+                }
+                : {})));
+            return Object.assign(Object.assign({}, responseData), { valid: typeof responseData.valid !== 'undefined' ? responseData.valid : !!((_a = responseData.accessToken) === null || _a === void 0 ? void 0 : _a.length) });
+        });
+    }
+    getUserAuthenticationConfig() {
+        const { configProvider, moduleName, serviceName } = this;
+        const moduleConfig = configProvider.config.domain[moduleName];
+        const { steps } = moduleConfig.authServiceSettings[serviceName];
+        const defaultConfig = {
+            [core_1.AppConfigDomainIAMAuthenticationStep.Complete]: {
+                authReturnsTokens: true,
+                decodeReturnedTokens: true,
+                findUser: true,
+                findUserBeforeAuth: false,
+                findUserInExternalTokenPayloads: true,
+                useReturnedTokens: true,
+                useReturnedTokensAsLocal: true,
+                validWithoutUser: false
+            },
+            [core_1.AppConfigDomainIAMAuthenticationStep.Initiate]: {
+                findUser: false,
+                validWithoutUser: true
+            }
+        };
+        return lodash_1.default.merge(defaultConfig, steps || {});
+    }
+    getUserDataFromExternalTokenPayloads(data) {
+        return __awaiter(this, void 0, void 0, function* () {
+            var _a;
+            const { idTokenPayload } = data;
+            if (!((_a = idTokenPayload === null || idTokenPayload === void 0 ? void 0 : idTokenPayload.data) === null || _a === void 0 ? void 0 : _a.user)) {
+                return null;
+            }
+            return idTokenPayload.data.user;
+        });
+    }
+    initiate(data, options) {
+        return __awaiter(this, void 0, void 0, function* () {
+            var _a;
+            const responseData = yield this.runRequest(core_1.AppConfigDomainIAMAuthenticationStep.Initiate, Object.assign({ auth: Object.assign(Object.assign({}, data), { type: this.serviceName }), step: core_1.AppConfigDomainIAMAuthenticationStep.Initiate }, ((options === null || options === void 0 ? void 0 : options.contextIdentifierField)
+                ? {
+                    filters: {
+                        [options.contextIdentifierField]: options.context[options.contextIdentifierField]
+                    }
+                }
+                : {})));
+            return Object.assign(Object.assign(Object.assign({}, responseData), { valid: typeof responseData.valid !== 'undefined'
+                    ? responseData.valid
+                    : 'accessToken' in responseData && !!((_a = responseData.accessToken) === null || _a === void 0 ? void 0 : _a.length) }), ('nextStepsRequired' in responseData && responseData.nextStepsRequired
+                ? { mfaUsed: true, mfaValid: true }
+                : { mfaUsed: false }));
+        });
+    }
+    runRequest(endpoint, data) {
+        return __awaiter(this, void 0, void 0, function* () {
+            const { configProvider, logger, moduleName, serviceName } = this;
+            const moduleConfig = configProvider.config.domain[moduleName];
+            const _a = moduleConfig.authServiceSettings[serviceName].nodeC, { apiKey, apiSecret, apiSecretHashingAlgorithm, baseUrl } = _a, configData = __rest(_a, ["apiKey", "apiSecret", "apiSecretHashingAlgorithm", "baseUrl"]);
+            const endpointMethod = configData[`${endpoint}EndpointMethod`];
+            const endpointUri = configData[`${endpoint}Endpoint`];
+            if (!baseUrl) {
+                logger.error(`[${moduleName}][${serviceName}]: Base URL not configured.`);
+                throw new core_1.ApplicationError('Authentication failed.');
+            }
+            if (!endpointUri) {
+                logger.error(`[${moduleName}][${serviceName}]: Endpoint URI for "${endpoint}" not configured.`);
+                throw new core_1.ApplicationError('Authentication failed.');
+            }
+            if (!endpointMethod) {
+                logger.error(`[${moduleName}][${serviceName}]: Endpoint method for "${endpoint}" not configured.`);
+                throw new core_1.ApplicationError('Authentication failed.');
+            }
+            const { data: responseData, hasError } = yield (0, core_1.httpRequest)(`${baseUrl}${endpointUri}`, Object.assign({ apiKey,
+                apiSecret,
+                apiSecretHashingAlgorithm, isJSON: true, method: endpointMethod }, (endpointMethod === core_1.HttpMethod.GET ? { query: data } : { body: data })));
+            if (hasError || !responseData) {
+                logger.error(`[${moduleName}][${serviceName}]: Endpoint ${endpointUri} failed.`, responseData);
+                throw new core_1.ApplicationError('Authentication failed.');
+            }
+            return responseData;
+        });
+    }
+    refreshExternalAccessToken(data) {
+        return __awaiter(this, void 0, void 0, function* () {
+            return yield this.runRequest('refreshExternalAccessToken', {
+                data
+            });
+        });
+    }
+}
+exports.IAMAuthenticationConsumerService = IAMAuthenticationConsumerService;
+//# sourceMappingURL=iam.authenticationConsumer.service.js.map

package/dist/services/authenticationConsumer/iam.authenticationConsumer.service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"iam.authenticationConsumer.service.js","sourceRoot":"","sources":["../../../src/services/authenticationConsumer/iam.authenticationConsumer.service.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,uCASsB;AAEtB,oDAAwB;AAgBxB,sDAA6D;AAO7D,MAAa,gCAGX,SAAQ,yCAA0D;IAClE,YAAY,cAAqC,EAAE,MAAqB,EAAE,UAAkB,EAAE,WAAmB;QAC/G,KAAK,CAAC,cAAc,EAAE,MAAM,EAAE,UAAU,EAAE,WAAW,CAAC,CAAC;QACvD,IAAI,CAAC,OAAO,GAAG,KAAK,CAAC;IACvB,CAAC;IAEK,QAAQ,CACZ,IAA2C,EAC3C,OAAkE;;;YAElE,MAAM,YAAY,GAAG,MAAM,IAAI,CAAC,UAAU,CACxC,2CAAoC,CAAC,QAAQ,kBAE3C,IAAI,kCAAO,IAAI,KAAE,IAAI,EAAE,IAAI,CAAC,WAAW,KACvC,IAAI,EAAE,2CAAoC,CAAC,QAAQ,IAChD,CAAC,CAAA,OAAO,aAAP,OAAO,uBAAP,OAAO,CAAE,sBAAsB;gBACjC,CAAC,CAAC;oBACE,OAAO,EAAE;wBACP,CAAC,OAAO,CAAC,sBAAsB,CAAC,EAC9B,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,sBAA+C,CAAC;qBAC3E;iBACF;gBACH,CAAC,CAAC,EAAE,CAAC,EAEV,CAAC;YACF,uCACK,YAAY,KACf,KAAK,EAAE,OAAO,YAAY,CAAC,KAAK,KAAK,WAAW,CAAC,CAAC,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA,MAAA,YAAY,CAAC,WAAW,0CAAE,MAAM,CAAA,IAC1G;QACJ,CAAC;KAAA;IAaD,2BAA2B;QACzB,MAAM,EAAE,cAAc,EAAE,UAAU,EAAE,WAAW,EAAE,GAAG,IAAI,CAAC;QACzD,MAAM,YAAY,GAAG,cAAc,CAAC,MAAM,CAAC,MAAM,CAAC,UAAU,CAAuB,CAAC;QACpF,MAAM,EAAE,KAAK,EAAE,GAAG,YAAY,CAAC,mBAAoB,CAAC,WAAW,CAAC,CAAC;QACjE,MAAM,aAAa,GAA+D;YAGhF,CAAC,2CAAoC,CAAC,QAAQ,CAAC,EAAE;gBAC/C,iBAAiB,EAAE,IAAI;gBACvB,oBAAoB,EAAE,IAAI;gBAC1B,QAAQ,EAAE,IAAI;gBACd,kBAAkB,EAAE,KAAK;gBACzB,+BAA+B,EAAE,IAAI;gBACrC,iBAAiB,EAAE,IAAI;gBACvB,wBAAwB,EAAE,IAAI;gBAC9B,gBAAgB,EAAE,KAAK;aACxB;YAED,CAAC,2CAAoC,CAAC,QAAQ,CAAC,EAAE;gBAC/C,QAAQ,EAAE,KAAK;gBACf,gBAAgB,EAAE,IAAI;aACvB;SACF,CAAC;QACF,OAAO,gBAAE,CAAC,KAAK,CAAC,aAAa,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC;IAC9C,CAAC;IAEK,oCAAoC,CACxC,IAAuE;;;YAEvE,MAAM,EAAE,cAAc,EAAE,GAAG,IAAI,CAAC;YAChC,IAAI,CAAC,CAAA,MAAA,cAAc,aAAd,cAAc,uBAAd,cAAc,CAAE,IAAI,0CAAE,IAAI,CAAA,EAAE,CAAC;gBAChC,OAAO,IAAI,CAAC;YACd,CAAC;YACD,OAAO,cAAc,CAAC,IAAI,CAAC,IAAsF,CAAC;QACpH,CAAC;KAAA;IAEK,QAAQ,CACZ,IAA2C,EAC3C,OAAkE;;;YAElE,MAAM,YAAY,GAAG,MAAM,IAAI,CAAC,UAAU,CAExC,2CAAoC,CAAC,QAAQ,kBAC7C,IAAI,kCAAO,IAAI,KAAE,IAAI,EAAE,IAAI,CAAC,WAAW,KACvC,IAAI,EAAE,2CAAoC,CAAC,QAAQ,IAChD,CAAC,CAAA,OAAO,aAAP,OAAO,uBAAP,OAAO,CAAE,sBAAsB;gBACjC,CAAC,CAAC;oBACE,OAAO,EAAE;wBACP,CAAC,OAAO,CAAC,sBAAsB,CAAC,EAAE,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,sBAA+C,CAAC;qBAC3G;iBACF;gBACH,CAAC,CAAC,EAAE,CAAC,EACP,CAAC;YACH,qDACK,YAAY,KACf,KAAK,EACH,OAAO,YAAY,CAAC,KAAK,KAAK,WAAW;oBACvC,CAAC,CAAC,YAAY,CAAC,KAAK;oBACpB,CAAC,CAAC,aAAa,IAAI,YAAY,IAAI,CAAC,CAAC,CAAA,MAAA,YAAY,CAAC,WAAW,0CAAE,MAAM,CAAA,KACtE,CAAC,mBAAmB,IAAI,YAAY,IAAI,YAAY,CAAC,iBAAiB;gBACvE,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE;gBACnC,CAAC,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,EACvB;QACJ,CAAC;KAAA;IAEe,UAAU,CACxB,QAA6E,EAC7E,IAAmB;;YAEnB,MAAM,EAAE,cAAc,EAAE,MAAM,EAAE,UAAU,EAAE,WAAW,EAAE,GAAG,IAAI,CAAC;YACjE,MAAM,YAAY,GAAG,cAAc,CAAC,MAAM,CAAC,MAAM,CAAC,UAAU,CAAuB,CAAC;YACpF,MAAM,KACJ,YAAY,CAAC,mBAAoB,CAAC,WAAW,CAAC,CAAC,KAAM,EADjD,EAAE,MAAM,EAAE,SAAS,EAAE,yBAAyB,EAAE,OAAO,OACN,EADW,UAAU,cAAtE,+DAAwE,CACvB,CAAC;YACxD,MAAM,cAAc,GAAG,UAAU,CAAC,GAAG,QAAQ,gBAAgB,CAAC,CAAC;YAC/D,MAAM,WAAW,GAAG,UAAU,CAAC,GAAG,QAAQ,UAAU,CAAC,CAAC;YACtD,IAAI,CAAC,OAAO,EAAE,CAAC;gBACb,MAAM,CAAC,KAAK,CAAC,IAAI,UAAU,KAAK,WAAW,6BAA6B,CAAC,CAAC;gBAC1E,MAAM,IAAI,uBAAgB,CAAC,wBAAwB,CAAC,CAAC;YACvD,CAAC;YACD,IAAI,CAAC,WAAW,EAAE,CAAC;gBACjB,MAAM,CAAC,KAAK,CAAC,IAAI,UAAU,KAAK,WAAW,wBAAwB,QAAQ,mBAAmB,CAAC,CAAC;gBAChG,MAAM,IAAI,uBAAgB,CAAC,wBAAwB,CAAC,CAAC;YACvD,CAAC;YACD,IAAI,CAAC,cAAc,EAAE,CAAC;gBACpB,MAAM,CAAC,KAAK,CAAC,IAAI,UAAU,KAAK,WAAW,2BAA2B,QAAQ,mBAAmB,CAAC,CAAC;gBACnG,MAAM,IAAI,uBAAgB,CAAC,wBAAwB,CAAC,CAAC;YACvD,CAAC;YACD,MAAM,EAAE,IAAI,EAAE,YAAY,EAAE,QAAQ,EAAE,GAAG,MAAM,IAAA,kBAAW,EAAa,GAAG,OAAO,GAAG,WAAW,EAAE,kBAC/F,MAAM;gBACN,SAAS;gBACT,yBAAyB,EACzB,MAAM,EAAE,IAAI,EACZ,MAAM,EAAE,cAAc,IACnB,CAAC,cAAc,KAAK,iBAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,EACzE,CAAC;YACH,IAAI,QAAQ,IAAI,CAAC,YAAY,EAAE,CAAC;gBAC9B,MAAM,CAAC,KAAK,CAAC,IAAI,UAAU,KAAK,WAAW,eAAe,WAAW,UAAU,EAAE,YAAY,CAAC,CAAC;gBAC/F,MAAM,IAAI,uBAAgB,CAAC,wBAAwB,CAAC,CAAC;YACvD,CAAC;YACD,OAAO,YAAY,CAAC;QACtB,CAAC;KAAA;IAEK,0BAA0B,CAC9B,IAA6D;;YAE7D,OAAO,MAAM,IAAI,CAAC,UAAU,CAC1B,4BAA4B,EAC5B;gBACE,IAAI;aACL,CACF,CAAC;QACJ,CAAC;KAAA;CACF;AA7JD,4EA6JC"}

package/dist/services/authenticationConsumer/index.d.ts

@@ -0,0 +1,2 @@
+export * from './iam.authenticationConsumer.definitions';
+export * from './iam.authenticationConsumer.service';

package/dist/services/authenticationConsumer/index.js

@@ -0,0 +1,19 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __exportStar = (this && this.__exportStar) || function(m, exports) {
+    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+__exportStar(require("./iam.authenticationConsumer.definitions"), exports);
+__exportStar(require("./iam.authenticationConsumer.service"), exports);
+//# sourceMappingURL=index.js.map

package/dist/services/authenticationConsumer/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/services/authenticationConsumer/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,2EAAyD;AACzD,uEAAqD"}

package/dist/services/{userManager/iam.userManager.definitions.d.ts → authenticationManager/iam.authenticationManager.definitions.d.ts}

@@ -1,8 +1,8 @@
-import { AppConfigCommonDomainIAMAuthServiceConfigCompleteSettings, AppConfigCommonDomainIAMAuthServiceConfigInitiateSettings, AppConfigDomainIAMAuthenticationStep, DomainFindOnePrivateOptions, GenericObject } from '@node-c/core';
+import { AppConfigCommonDomainIAMAuthServiceConfigCompleteSettings, AppConfigCommonDomainIAMAuthServiceConfigInitiateSettings, AppConfigDomainIAMAuthenticationStep, GenericObject } from '@node-c/core';
 import { IAMAuthenticationCompleteResult, IAMAuthenticationInitiateResult, IAMAuthenticationService, IAMAuthenticationType } from '../authentication';
-import { AuthorizationUser } from '../authorization';
 import { IAMMFAType } from '../mfa';
-export interface IAMUserManagerCreateAccessTokenOptions<AuthData = unknown> {
+import { IAMUserWithPermissionsData } from '../users';
+export interface IAMAuthenticationManagerAuthenticateOptions<AuthData = unknown> {
     auth: {
         mfaType?: IAMMFAType;
         type: IAMAuthenticationType | string;
@@ -12,7 +12,7 @@ export interface IAMUserManagerCreateAccessTokenOptions<AuthData = unknown> {
     rememberUser?: boolean;
     step?: AppConfigDomainIAMAuthenticationStep;
 }
-export type IAMUserManagerCreateAccessTokenReturnData<UserData> = {
+export type IAMAuthenticationManagerAuthenticateReturnData<UserData> = {
     accessToken: string;
     idToken: string;
     refreshToken?: string;
@@ -20,28 +20,24 @@ export type IAMUserManagerCreateAccessTokenReturnData<UserData> = {
 } | {
     nextStepsRequired: boolean;
 };
-export type IAMUserManagerExecuteStepData<AuthData = unknown> = Omit<IAMUserManagerCreateAccessTokenOptions<AuthData>, 'rememberUser' | 'step'>;
-export interface IAMUserManagerExecuteStepOptions<User extends object> {
+export type IAMAuthenticationManagerExecuteStepData<AuthData = unknown> = Omit<IAMAuthenticationManagerAuthenticateOptions<AuthData>, 'rememberUser' | 'step'>;
+export interface IAMAuthenticationManagerExecuteStepOptions<User extends object> {
     authService: IAMAuthenticationService<User, User>;
     name: AppConfigDomainIAMAuthenticationStep;
     stepConfig: AppConfigCommonDomainIAMAuthServiceConfigCompleteSettings | AppConfigCommonDomainIAMAuthServiceConfigInitiateSettings;
 }
-export interface IAMUserManagerExecuteStepResult<User extends object> {
+export interface IAMAuthenticationManagerExecuteStepResult<User extends object> {
     stepResult: IAMAuthenticationCompleteResult | IAMAuthenticationInitiateResult;
-    user: IAMUserManagerUserWithPermissionsData<User, unknown> | null;
+    user: IAMUserWithPermissionsData<User, unknown> | null;
     userFilterField?: string | undefined;
     userFilterValue?: unknown | undefined;
 }
-export interface IAMUserManagerGetUserWithPermissionsDataOptions extends DomainFindOnePrivateOptions {
-    keepPassword?: boolean;
-}
-export type IAMUserManagerUserWithPermissionsData<UserData, AuthorizationPointId> = AuthorizationUser<AuthorizationPointId> & UserData;
-export interface IAMUserManagerUserTokenEnityFields<UserId = unknown> {
+export interface IAMAuthenticationManagerUserTokenEnityFields<UserId = unknown> {
     accessToken?: string;
     refreshToken?: string;
     userId: UserId;
-    user?: IAMUserManagerUserWithPermissionsData<object, unknown>;
+    user?: IAMUserWithPermissionsData<object, unknown>;
 }
-export declare enum IAMUserManagerUserTokenUserIdentifier {
+export declare enum IAMAuthenticationManagerUserTokenUserIdentifier {
     FieldName = "userId"
 }

package/dist/services/authenticationManager/iam.authenticationManager.definitions.js

@@ -0,0 +1,8 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.IAMAuthenticationManagerUserTokenUserIdentifier = void 0;
+var IAMAuthenticationManagerUserTokenUserIdentifier;
+(function (IAMAuthenticationManagerUserTokenUserIdentifier) {
+    IAMAuthenticationManagerUserTokenUserIdentifier["FieldName"] = "userId";
+})(IAMAuthenticationManagerUserTokenUserIdentifier || (exports.IAMAuthenticationManagerUserTokenUserIdentifier = IAMAuthenticationManagerUserTokenUserIdentifier = {}));
+//# sourceMappingURL=iam.authenticationManager.definitions.js.map

package/dist/services/authenticationManager/iam.authenticationManager.definitions.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"iam.authenticationManager.definitions.js","sourceRoot":"","sources":["../../../src/services/authenticationManager/iam.authenticationManager.definitions.ts"],"names":[],"mappings":";;;AA+DA,IAAY,+CAGX;AAHD,WAAY,+CAA+C;IAEzD,uEAAoB,CAAA;AACtB,CAAC,EAHW,+CAA+C,+DAA/C,+CAA+C,QAG1D"}

package/dist/services/authenticationManager/iam.authenticationManager.service.d.ts

@@ -0,0 +1,33 @@
+import { ConfigProviderService, DataDefaultData, DataEntityService, DomainEntityServiceDefaultData, GenericObject, LoggerService } from '@node-c/core';
+import { IAMAuthenticationManagerAuthenticateOptions, IAMAuthenticationManagerAuthenticateReturnData, IAMAuthenticationManagerUserTokenEnityFields } from './iam.authenticationManager.definitions';
+import { IAMAuthenticationService, IAMAuthenticationType } from '../authentication';
+import { IAMAuthenticationOAuth2Service } from '../authenticationOAuth2';
+import { IAMAuthenticationUserLocalService } from '../authenticationUserLocal';
+import { IAMTokenManagerService } from '../tokenManager';
+import { IAMUserWithPermissionsData, IAMUsersService } from '../users';
+export declare class IAMAuthenticationManagerService<User extends object = object, Data extends DomainEntityServiceDefaultData<Partial<User>> = DomainEntityServiceDefaultData<Partial<User>>, DataEntityServiceData extends DataDefaultData<Partial<User>> = DataDefaultData<Partial<User>>> {
+    protected authServices: {
+        [IAMAuthenticationType.OAuth2]?: IAMAuthenticationOAuth2Service<object, object>;
+        [IAMAuthenticationType.UserLocal]?: IAMAuthenticationUserLocalService<object, object>;
+    } & {
+        [serviceName: string]: IAMAuthenticationService<object, object>;
+    };
+    protected configProvider: ConfigProviderService;
+    protected logger: LoggerService;
+    protected moduleName: string;
+    protected dataUsersAuthCacheService?: DataEntityService<GenericObject> | undefined;
+    domainUsersEntityService?: IAMUsersService<User, DataEntityService<User, DataEntityServiceData>, Data, Record<string, DataEntityService<Partial<User>, DataDefaultData<object>>> | undefined> | undefined;
+    protected tokenManager?: IAMTokenManagerService<IAMAuthenticationManagerUserTokenEnityFields> | undefined;
+    constructor(authServices: {
+        [IAMAuthenticationType.OAuth2]?: IAMAuthenticationOAuth2Service<object, object>;
+        [IAMAuthenticationType.UserLocal]?: IAMAuthenticationUserLocalService<object, object>;
+    } & {
+        [serviceName: string]: IAMAuthenticationService<object, object>;
+    }, configProvider: ConfigProviderService, logger: LoggerService, moduleName: string, dataUsersAuthCacheService?: DataEntityService<GenericObject> | undefined, domainUsersEntityService?: IAMUsersService<User, DataEntityService<User, DataEntityServiceData>, Data, Record<string, DataEntityService<Partial<User>, DataDefaultData<object>>> | undefined> | undefined, tokenManager?: IAMTokenManagerService<IAMAuthenticationManagerUserTokenEnityFields> | undefined);
+    authenticate<AuthData = unknown>(options: IAMAuthenticationManagerAuthenticateOptions<AuthData>): Promise<IAMAuthenticationManagerAuthenticateReturnData<User>>;
+    private executeStep;
+    protected getUserForStepExecution(options: {
+        filters: GenericObject;
+        mainFilterField: string;
+    }): Promise<IAMUserWithPermissionsData<User, unknown> | null>;
+}