@nolag/core 0.4.0

package/dist/modules/signingKeyModule/dto/signingKey.dto.js

@@ -0,0 +1,57 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.SigningKeyPatchDto = exports.SigningKeyCreateDto = void 0;
+const swagger_1 = require("@nestjs/swagger");
+const class_validator_1 = require("class-validator");
+const ESigningKeyStatus_enum_1 = require("../enum/ESigningKeyStatus.enum");
+class SigningKeyCreateDto {
+    name;
+    environment;
+}
+exports.SigningKeyCreateDto = SigningKeyCreateDto;
+__decorate([
+    (0, swagger_1.ApiProperty)({ example: "Browser client tokens", maxLength: 255 }),
+    (0, class_validator_1.IsString)(),
+    (0, class_validator_1.MaxLength)(255),
+    __metadata("design:type", String)
+], SigningKeyCreateDto.prototype, "name", void 0);
+__decorate([
+    (0, swagger_1.ApiPropertyOptional)({
+        enum: ["live", "sandbox"],
+        default: "live",
+        description: "Decides the key id prefix, which the JWT header carries.",
+    }),
+    (0, class_validator_1.IsOptional)(),
+    (0, class_validator_1.IsIn)(["live", "sandbox"]),
+    __metadata("design:type", String)
+], SigningKeyCreateDto.prototype, "environment", void 0);
+class SigningKeyPatchDto {
+    name;
+    status;
+}
+exports.SigningKeyPatchDto = SigningKeyPatchDto;
+__decorate([
+    (0, swagger_1.ApiPropertyOptional)({ maxLength: 255 }),
+    (0, class_validator_1.IsOptional)(),
+    (0, class_validator_1.IsString)(),
+    (0, class_validator_1.MaxLength)(255),
+    __metadata("design:type", String)
+], SigningKeyPatchDto.prototype, "name", void 0);
+__decorate([
+    (0, swagger_1.ApiPropertyOptional)({
+        enum: ESigningKeyStatus_enum_1.ESigningKeyStatus,
+        description: "Anything but active stops new client tokens verifying.",
+    }),
+    (0, class_validator_1.IsOptional)(),
+    (0, class_validator_1.IsEnum)(ESigningKeyStatus_enum_1.ESigningKeyStatus),
+    __metadata("design:type", String)
+], SigningKeyPatchDto.prototype, "status", void 0);

package/dist/modules/signingKeyModule/enum/ESigningKeyPrefix.enum.d.ts

@@ -0,0 +1,5 @@
+export declare enum ESigningKeyPrefix {
+    Live = "sk_live",
+    Sandbox = "sk_sandbox"
+}
+//# sourceMappingURL=ESigningKeyPrefix.enum.d.ts.map

package/dist/modules/signingKeyModule/enum/ESigningKeyPrefix.enum.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ESigningKeyPrefix.enum.d.ts","sourceRoot":"","sources":["../../../../src/modules/signingKeyModule/enum/ESigningKeyPrefix.enum.ts"],"names":[],"mappings":"AAAA,oBAAY,iBAAiB;IAC3B,IAAI,YAAY;IAChB,OAAO,eAAe;CACvB"}

package/dist/modules/signingKeyModule/enum/ESigningKeyPrefix.enum.js

@@ -0,0 +1,8 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ESigningKeyPrefix = void 0;
+var ESigningKeyPrefix;
+(function (ESigningKeyPrefix) {
+    ESigningKeyPrefix["Live"] = "sk_live";
+    ESigningKeyPrefix["Sandbox"] = "sk_sandbox";
+})(ESigningKeyPrefix || (exports.ESigningKeyPrefix = ESigningKeyPrefix = {}));

package/dist/modules/signingKeyModule/enum/ESigningKeyStatus.enum.d.ts

@@ -0,0 +1,5 @@
+export declare enum ESigningKeyStatus {
+    Active = "active",
+    Disabled = "disabled"
+}
+//# sourceMappingURL=ESigningKeyStatus.enum.d.ts.map

package/dist/modules/signingKeyModule/enum/ESigningKeyStatus.enum.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ESigningKeyStatus.enum.d.ts","sourceRoot":"","sources":["../../../../src/modules/signingKeyModule/enum/ESigningKeyStatus.enum.ts"],"names":[],"mappings":"AAAA,oBAAY,iBAAiB;IAC3B,MAAM,WAAW;IACjB,QAAQ,aAAa;CACtB"}

package/dist/modules/signingKeyModule/enum/ESigningKeyStatus.enum.js

@@ -0,0 +1,8 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ESigningKeyStatus = void 0;
+var ESigningKeyStatus;
+(function (ESigningKeyStatus) {
+    ESigningKeyStatus["Active"] = "active";
+    ESigningKeyStatus["Disabled"] = "disabled";
+})(ESigningKeyStatus || (exports.ESigningKeyStatus = ESigningKeyStatus = {}));

package/dist/modules/signingKeyModule/query/signingKey.query.d.ts

@@ -0,0 +1,8 @@
+import { BaseQuery } from "../../../common/pagination";
+import { ESigningKeyStatus } from "../enum/ESigningKeyStatus.enum";
+import { SigningKeyEntity } from "../signingKey.entity";
+export declare class SigningKeyQuery extends BaseQuery<SigningKeyEntity> {
+    name?: string;
+    status?: ESigningKeyStatus;
+}
+//# sourceMappingURL=signingKey.query.d.ts.map

package/dist/modules/signingKeyModule/query/signingKey.query.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"signingKey.query.d.ts","sourceRoot":"","sources":["../../../../src/modules/signingKeyModule/query/signingKey.query.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,SAAS,EAAE,MAAM,4BAA4B,CAAC;AACvD,OAAO,EAAE,iBAAiB,EAAE,MAAM,gCAAgC,CAAC;AACnE,OAAO,EAAE,gBAAgB,EAAE,MAAM,sBAAsB,CAAC;AAExD,qBAAa,eAAgB,SAAQ,SAAS,CAAC,gBAAgB,CAAC;IAI9D,IAAI,CAAC,EAAE,MAAM,CAAC;IAKd,MAAM,CAAC,EAAE,iBAAiB,CAAC;CAC5B"}

package/dist/modules/signingKeyModule/query/signingKey.query.js

@@ -0,0 +1,33 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.SigningKeyQuery = void 0;
+const swagger_1 = require("@nestjs/swagger");
+const class_validator_1 = require("class-validator");
+const pagination_1 = require("../../../common/pagination");
+const ESigningKeyStatus_enum_1 = require("../enum/ESigningKeyStatus.enum");
+class SigningKeyQuery extends pagination_1.BaseQuery {
+    name;
+    status;
+}
+exports.SigningKeyQuery = SigningKeyQuery;
+__decorate([
+    (0, swagger_1.ApiPropertyOptional)({ description: "Partial match" }),
+    (0, class_validator_1.IsOptional)(),
+    (0, class_validator_1.IsString)(),
+    __metadata("design:type", String)
+], SigningKeyQuery.prototype, "name", void 0);
+__decorate([
+    (0, swagger_1.ApiPropertyOptional)({ enum: ESigningKeyStatus_enum_1.ESigningKeyStatus }),
+    (0, class_validator_1.IsOptional)(),
+    (0, class_validator_1.IsEnum)(ESigningKeyStatus_enum_1.ESigningKeyStatus),
+    __metadata("design:type", String)
+], SigningKeyQuery.prototype, "status", void 0);

package/dist/modules/signingKeyModule/query/signingKey.query.service.d.ts

@@ -0,0 +1,10 @@
+import { BasePaginationService, PaginatedResult } from "../../../common/pagination";
+import { SigningKeyEntity } from "../signingKey.entity";
+import { SigningKeyRepository } from "../signingKey.repository";
+import { SigningKeyQuery } from "./signingKey.query";
+export declare class SigningKeyQueryService extends BasePaginationService {
+    private readonly _repository;
+    constructor(_repository: SigningKeyRepository);
+    findPaginated(query: SigningKeyQuery, projectId: string): Promise<PaginatedResult<SigningKeyEntity>>;
+}
+//# sourceMappingURL=signingKey.query.service.d.ts.map

package/dist/modules/signingKeyModule/query/signingKey.query.service.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"signingKey.query.service.d.ts","sourceRoot":"","sources":["../../../../src/modules/signingKeyModule/query/signingKey.query.service.ts"],"names":[],"mappings":"AACA,OAAO,EACL,qBAAqB,EACrB,eAAe,EAChB,MAAM,4BAA4B,CAAC;AACpC,OAAO,EAAE,gBAAgB,EAAE,MAAM,sBAAsB,CAAC;AACxD,OAAO,EAAE,oBAAoB,EAAE,MAAM,0BAA0B,CAAC;AAChE,OAAO,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC;AAErD,qBACa,sBAAuB,SAAQ,qBAAqB;IACnD,OAAO,CAAC,QAAQ,CAAC,WAAW;gBAAX,WAAW,EAAE,oBAAoB;IAI9D,aAAa,CACX,KAAK,EAAE,eAAe,EACtB,SAAS,EAAE,MAAM,GAChB,OAAO,CAAC,eAAe,CAAC,gBAAgB,CAAC,CAAC;CAgC9C"}

package/dist/modules/signingKeyModule/query/signingKey.query.service.js

@@ -0,0 +1,52 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.SigningKeyQueryService = void 0;
+const common_1 = require("@nestjs/common");
+const pagination_1 = require("../../../common/pagination");
+const signingKey_entity_1 = require("../signingKey.entity");
+const signingKey_repository_1 = require("../signingKey.repository");
+let SigningKeyQueryService = class SigningKeyQueryService extends pagination_1.BasePaginationService {
+    _repository;
+    constructor(_repository) {
+        super();
+        this._repository = _repository;
+    }
+    findPaginated(query, projectId) {
+        const alias = signingKey_entity_1.SigningKeyEntity.entityName();
+        const qb = this._repository.createQueryBuilder(alias);
+        qb.where(`${alias}.deletedAt IS NULL`);
+        qb.andWhere(`${alias}.projectId = :projectId`, { projectId });
+        if (query.name) {
+            qb.andWhere(`${alias}.name ILIKE :name`, { name: `%${query.name}%` });
+        }
+        if (query.status) {
+            qb.andWhere(`${alias}.status = :status`, { status: query.status });
+        }
+        qb.orderBy(`${alias}.createdAt`, "DESC");
+        qb.select([
+            `${alias}.signingKeyId`,
+            `${alias}.projectId`,
+            `${alias}.keyId`,
+            `${alias}.name`,
+            `${alias}.status`,
+            `${alias}.lastUsedAt`,
+            `${alias}.createdAt`,
+            `${alias}.updatedAt`,
+        ]);
+        return this.paginate(qb, query);
+    }
+};
+exports.SigningKeyQueryService = SigningKeyQueryService;
+exports.SigningKeyQueryService = SigningKeyQueryService = __decorate([
+    (0, common_1.Injectable)(),
+    __metadata("design:paramtypes", [signingKey_repository_1.SigningKeyRepository])
+], SigningKeyQueryService);

package/dist/modules/signingKeyModule/signingKey.entity.d.ts

@@ -0,0 +1,16 @@
+import { BaseTimeEntity } from "../../common/entities/base.entity";
+import { ProjectEntity } from "../projectModule/project.entity";
+import { ESigningKeyStatus } from "./enum/ESigningKeyStatus.enum";
+export declare class SigningKeyEntity extends BaseTimeEntity {
+    static entityName(): string;
+    signingKeyId: string;
+    generateId(): void;
+    projectId: string;
+    keyId: string;
+    secretEncrypted: string;
+    name: string;
+    status: ESigningKeyStatus;
+    lastUsedAt: Date | null;
+    project: ProjectEntity;
+}
+//# sourceMappingURL=signingKey.entity.d.ts.map

package/dist/modules/signingKeyModule/signingKey.entity.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"signingKey.entity.d.ts","sourceRoot":"","sources":["../../../src/modules/signingKeyModule/signingKey.entity.ts"],"names":[],"mappings":"AASA,OAAO,EAAE,cAAc,EAAE,MAAM,mCAAmC,CAAC;AAEnE,OAAO,EAAE,aAAa,EAAE,MAAM,iCAAiC,CAAC;AAChE,OAAO,EAAE,iBAAiB,EAAE,MAAM,+BAA+B,CAAC;AAqBlE,qBAGa,gBAAiB,SAAQ,cAAc;IAClD,MAAM,CAAC,UAAU;IAKjB,YAAY,EAAE,MAAM,CAAC;IAGrB,UAAU;IAWV,SAAS,EAAE,MAAM,CAAC;IAIlB,KAAK,EAAE,MAAM,CAAC;IAId,eAAe,EAAE,MAAM,CAAC;IAGxB,IAAI,EAAE,MAAM,CAAC;IAab,MAAM,EAAE,iBAAiB,CAAC;IAG1B,UAAU,EAAE,IAAI,GAAG,IAAI,CAAC;IAKxB,OAAO,EAAG,aAAa,CAAC;CACzB"}

package/dist/modules/signingKeyModule/signingKey.entity.js

@@ -0,0 +1,85 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.SigningKeyEntity = void 0;
+const typeorm_1 = require("typeorm");
+const base_entity_1 = require("../../common/entities/base.entity");
+const guid_1 = require("../../utils/guid");
+const project_entity_1 = require("../projectModule/project.entity");
+const ESigningKeyStatus_enum_1 = require("./enum/ESigningKeyStatus.enum");
+const entityName = "signing_key";
+let SigningKeyEntity = class SigningKeyEntity extends base_entity_1.BaseTimeEntity {
+    static entityName() {
+        return entityName;
+    }
+    signingKeyId;
+    generateId() {
+        this.signingKeyId = (0, guid_1.generateDBUuid)();
+    }
+    projectId;
+    keyId;
+    secretEncrypted;
+    name;
+    status;
+    lastUsedAt;
+    project;
+};
+exports.SigningKeyEntity = SigningKeyEntity;
+__decorate([
+    (0, typeorm_1.PrimaryColumn)({ type: "uuid", name: "signing_key_id" }),
+    __metadata("design:type", String)
+], SigningKeyEntity.prototype, "signingKeyId", void 0);
+__decorate([
+    (0, typeorm_1.BeforeInsert)(),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", []),
+    __metadata("design:returntype", void 0)
+], SigningKeyEntity.prototype, "generateId", null);
+__decorate([
+    (0, typeorm_1.Column)({ type: "uuid", name: "project_id" }),
+    (0, typeorm_1.Index)(),
+    __metadata("design:type", String)
+], SigningKeyEntity.prototype, "projectId", void 0);
+__decorate([
+    (0, typeorm_1.Column)({ type: "varchar", length: 100, name: "key_id" }),
+    __metadata("design:type", String)
+], SigningKeyEntity.prototype, "keyId", void 0);
+__decorate([
+    (0, typeorm_1.Column)({ type: "text", name: "secret_encrypted" }),
+    __metadata("design:type", String)
+], SigningKeyEntity.prototype, "secretEncrypted", void 0);
+__decorate([
+    (0, typeorm_1.Column)({ type: "varchar", length: 255, name: "name" }),
+    __metadata("design:type", String)
+], SigningKeyEntity.prototype, "name", void 0);
+__decorate([
+    (0, typeorm_1.Column)({
+        type: "varchar",
+        length: 50,
+        default: ESigningKeyStatus_enum_1.ESigningKeyStatus.Active,
+        name: "status",
+    }),
+    __metadata("design:type", String)
+], SigningKeyEntity.prototype, "status", void 0);
+__decorate([
+    (0, typeorm_1.Column)({ type: "timestamptz", nullable: true, name: "last_used_at" }),
+    __metadata("design:type", Object)
+], SigningKeyEntity.prototype, "lastUsedAt", void 0);
+__decorate([
+    (0, typeorm_1.ManyToOne)(() => project_entity_1.ProjectEntity, { onDelete: "CASCADE" }),
+    (0, typeorm_1.JoinColumn)({ name: "project_id" }),
+    __metadata("design:type", project_entity_1.ProjectEntity)
+], SigningKeyEntity.prototype, "project", void 0);
+exports.SigningKeyEntity = SigningKeyEntity = __decorate([
+    (0, typeorm_1.Entity)(entityName),
+    (0, typeorm_1.Index)(["projectId", "status"]),
+    (0, typeorm_1.Index)(["keyId"], { unique: true })
+], SigningKeyEntity);

package/dist/modules/signingKeyModule/signingKey.facade.d.ts

@@ -0,0 +1,25 @@
+import { DataSource, UpdateResult } from "typeorm";
+import { PaginatedResult } from "../../common/pagination";
+import { SigningKeyEntity } from "./signingKey.entity";
+import { CreatedSigningKey, SigningKeyCreateDto, SigningKeyPatchDto } from "./dto/signingKey.dto";
+import { SigningKeyQuery } from "./query/signingKey.query";
+import { SigningKeyQueryService } from "./query/signingKey.query.service";
+import { ESigningKeyPrefix } from "./enum/ESigningKeyPrefix.enum";
+import { GeneratedSigningKey, SigningKeyService, VerifiedClientToken } from "./signingKey.service";
+export declare class SigningKeyFacade {
+    private readonly _signingKeyService;
+    private readonly _queryService;
+    private readonly _dataSource;
+    private readonly _logger;
+    constructor(_signingKeyService: SigningKeyService, _queryService: SigningKeyQueryService, _dataSource: DataSource);
+    generateSigningKey(environmentPrefix?: ESigningKeyPrefix): GeneratedSigningKey;
+    encryptForStorage(secret: string): string;
+    verifyClientToken(token: string): Promise<VerifiedClientToken | null>;
+    invalidateCache(keyId: string): void;
+    listSigningKeys(projectId: string, query: SigningKeyQuery): Promise<PaginatedResult<SigningKeyEntity>>;
+    getSigningKey(signingKeyId: string, projectId: string): Promise<SigningKeyEntity>;
+    createSigningKey(projectId: string, data: SigningKeyCreateDto): Promise<CreatedSigningKey>;
+    updateSigningKey(signingKeyId: string, projectId: string, data: SigningKeyPatchDto): Promise<SigningKeyEntity>;
+    deleteSigningKey(signingKeyId: string, projectId: string): Promise<UpdateResult>;
+}
+//# sourceMappingURL=signingKey.facade.d.ts.map

package/dist/modules/signingKeyModule/signingKey.facade.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"signingKey.facade.d.ts","sourceRoot":"","sources":["../../../src/modules/signingKeyModule/signingKey.facade.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACnD,OAAO,EAAE,eAAe,EAAE,MAAM,yBAAyB,CAAC;AAE1D,OAAO,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAC;AACvD,OAAO,EACL,iBAAiB,EACjB,mBAAmB,EACnB,kBAAkB,EACnB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAAE,eAAe,EAAE,MAAM,0BAA0B,CAAC;AAC3D,OAAO,EAAE,sBAAsB,EAAE,MAAM,kCAAkC,CAAC;AAC1E,OAAO,EAAE,iBAAiB,EAAE,MAAM,+BAA+B,CAAC;AAClE,OAAO,EACL,mBAAmB,EACnB,iBAAiB,EACjB,mBAAmB,EACpB,MAAM,sBAAsB,CAAC;AAK9B,qBACa,gBAAgB;IAIzB,OAAO,CAAC,QAAQ,CAAC,kBAAkB;IACnC,OAAO,CAAC,QAAQ,CAAC,aAAa;IAE9B,OAAO,CAAC,QAAQ,CAAC,WAAW;IAN9B,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAqC;gBAG1C,kBAAkB,EAAE,iBAAiB,EACrC,aAAa,EAAE,sBAAsB,EAErC,WAAW,EAAE,UAAU;IAG1C,kBAAkB,CAChB,iBAAiB,CAAC,EAAE,iBAAiB,GACpC,mBAAmB;IAItB,iBAAiB,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM;IAIzC,iBAAiB,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,mBAAmB,GAAG,IAAI,CAAC;IAIrE,eAAe,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI;IAMpC,eAAe,CACb,SAAS,EAAE,MAAM,EACjB,KAAK,EAAE,eAAe,GACrB,OAAO,CAAC,eAAe,CAAC,gBAAgB,CAAC,CAAC;IAIvC,aAAa,CACjB,YAAY,EAAE,MAAM,EACpB,SAAS,EAAE,MAAM,GAChB,OAAO,CAAC,gBAAgB,CAAC;IAc5B,gBAAgB,CACd,SAAS,EAAE,MAAM,EACjB,IAAI,EAAE,mBAAmB,GACxB,OAAO,CAAC,iBAAiB,CAAC;IAM7B,gBAAgB,CACd,YAAY,EAAE,MAAM,EACpB,SAAS,EAAE,MAAM,EACjB,IAAI,EAAE,kBAAkB,GACvB,OAAO,CAAC,gBAAgB,CAAC;IA0B5B,gBAAgB,CACd,YAAY,EAAE,MAAM,EACpB,SAAS,EAAE,MAAM,GAChB,OAAO,CAAC,YAAY,CAAC;CAoBzB"}

package/dist/modules/signingKeyModule/signingKey.facade.js

@@ -0,0 +1,90 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+var __param = (this && this.__param) || function (paramIndex, decorator) {
+    return function (target, key) { decorator(target, key, paramIndex); }
+};
+var SigningKeyFacade_1;
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.SigningKeyFacade = void 0;
+const common_1 = require("@nestjs/common");
+const typeorm_1 = require("@nestjs/typeorm");
+const typeorm_2 = require("typeorm");
+const exceptions_1 = require("../../utils/exceptions");
+const signingKey_query_service_1 = require("./query/signingKey.query.service");
+const signingKey_service_1 = require("./signingKey.service");
+let SigningKeyFacade = SigningKeyFacade_1 = class SigningKeyFacade {
+    _signingKeyService;
+    _queryService;
+    _dataSource;
+    _logger = new common_1.Logger(SigningKeyFacade_1.name);
+    constructor(_signingKeyService, _queryService, _dataSource) {
+        this._signingKeyService = _signingKeyService;
+        this._queryService = _queryService;
+        this._dataSource = _dataSource;
+    }
+    generateSigningKey(environmentPrefix) {
+        return this._signingKeyService.generateSigningKey(environmentPrefix);
+    }
+    encryptForStorage(secret) {
+        return this._signingKeyService.encryptForStorage(secret);
+    }
+    verifyClientToken(token) {
+        return this._signingKeyService.verifyClientToken(token);
+    }
+    invalidateCache(keyId) {
+        this._signingKeyService.invalidateCache(keyId);
+    }
+    listSigningKeys(projectId, query) {
+        return this._queryService.findPaginated(query, projectId);
+    }
+    async getSigningKey(signingKeyId, projectId) {
+        const key = await this._signingKeyService.findByIdAndProject(signingKeyId, projectId);
+        if (!key) {
+            throw (0, exceptions_1.notFoundException)(this._logger, {
+                errorMsgUser: `Signing key ${signingKeyId} not found`,
+            });
+        }
+        return key;
+    }
+    createSigningKey(projectId, data) {
+        return this._dataSource.transaction((manager) => this._signingKeyService.createSigningKey(projectId, data, manager));
+    }
+    updateSigningKey(signingKeyId, projectId, data) {
+        return this._dataSource.transaction(async (manager) => {
+            const existing = await this._signingKeyService.updateLock(signingKeyId, projectId, manager);
+            if (!existing) {
+                throw (0, exceptions_1.notFoundException)(this._logger, {
+                    errorMsgUser: `Signing key ${signingKeyId} not found`,
+                });
+            }
+            return this._signingKeyService.patchSigningKey(signingKeyId, projectId, data, manager);
+        });
+    }
+    deleteSigningKey(signingKeyId, projectId) {
+        return this._dataSource.transaction(async (manager) => {
+            const existing = await this._signingKeyService.updateLock(signingKeyId, projectId, manager);
+            if (!existing) {
+                throw (0, exceptions_1.notFoundException)(this._logger, {
+                    errorMsgUser: `Signing key ${signingKeyId} not found`,
+                });
+            }
+            return this._signingKeyService.removeSigningKey(signingKeyId, projectId, manager);
+        });
+    }
+};
+exports.SigningKeyFacade = SigningKeyFacade;
+exports.SigningKeyFacade = SigningKeyFacade = SigningKeyFacade_1 = __decorate([
+    (0, common_1.Injectable)(),
+    __param(2, (0, typeorm_1.InjectDataSource)()),
+    __metadata("design:paramtypes", [signingKey_service_1.SigningKeyService,
+        signingKey_query_service_1.SigningKeyQueryService,
+        typeorm_2.DataSource])
+], SigningKeyFacade);

package/dist/modules/signingKeyModule/signingKey.module.d.ts

@@ -0,0 +1,3 @@
+export declare class SigningKeyModule {
+}
+//# sourceMappingURL=signingKey.module.d.ts.map

package/dist/modules/signingKeyModule/signingKey.module.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"signingKey.module.d.ts","sourceRoot":"","sources":["../../../src/modules/signingKeyModule/signingKey.module.ts"],"names":[],"mappings":"AASA,qBAca,gBAAgB;CAAG"}

package/dist/modules/signingKeyModule/signingKey.module.js

@@ -0,0 +1,35 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.SigningKeyModule = void 0;
+const common_1 = require("@nestjs/common");
+const typeorm_1 = require("@nestjs/typeorm");
+const signingKey_entity_1 = require("./signingKey.entity");
+const signingKey_facade_1 = require("./signingKey.facade");
+const signingKey_repository_1 = require("./signingKey.repository");
+const signingKey_service_1 = require("./signingKey.service");
+const signingKey_query_service_1 = require("./query/signingKey.query.service");
+let SigningKeyModule = class SigningKeyModule {
+};
+exports.SigningKeyModule = SigningKeyModule;
+exports.SigningKeyModule = SigningKeyModule = __decorate([
+    (0, common_1.Module)({
+        imports: [typeorm_1.TypeOrmModule.forFeature([signingKey_entity_1.SigningKeyEntity])],
+        providers: [
+            signingKey_service_1.SigningKeyService,
+            signingKey_query_service_1.SigningKeyQueryService,
+            signingKey_facade_1.SigningKeyFacade,
+            {
+                provide: signingKey_repository_1.SigningKeyRepository,
+                useFactory: (ds) => new signingKey_repository_1.SigningKeyRepository(ds),
+                inject: [(0, typeorm_1.getDataSourceToken)()],
+            },
+        ],
+        exports: [signingKey_facade_1.SigningKeyFacade],
+    })
+], SigningKeyModule);

package/dist/modules/signingKeyModule/signingKey.repository.d.ts

@@ -0,0 +1,11 @@
+import { DataSource, Repository, UpdateResult } from "typeorm";
+import { SigningKeyEntity } from "./signingKey.entity";
+export declare class SigningKeyRepository extends Repository<SigningKeyEntity> {
+    private readonly dataSource;
+    constructor(dataSource: DataSource);
+    findByKeyId(keyId: string): Promise<SigningKeyEntity | null>;
+    findById(signingKeyId: string): Promise<SigningKeyEntity | null>;
+    findByProject(projectId: string): Promise<SigningKeyEntity[]>;
+    updateLastUsed(signingKeyId: string): Promise<UpdateResult>;
+}
+//# sourceMappingURL=signingKey.repository.d.ts.map

package/dist/modules/signingKeyModule/signingKey.repository.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"signingKey.repository.d.ts","sourceRoot":"","sources":["../../../src/modules/signingKeyModule/signingKey.repository.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,UAAU,EAAU,UAAU,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACvE,OAAO,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAC;AAEvD,qBACa,oBAAqB,SAAQ,UAAU,CAAC,gBAAgB,CAAC;IACxD,OAAO,CAAC,QAAQ,CAAC,UAAU;gBAAV,UAAU,EAAE,UAAU;IAKnD,WAAW,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,gBAAgB,GAAG,IAAI,CAAC;IAI5D,QAAQ,CAAC,YAAY,EAAE,MAAM,GAAG,OAAO,CAAC,gBAAgB,GAAG,IAAI,CAAC;IAIhE,aAAa,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,gBAAgB,EAAE,CAAC;IAI7D,cAAc,CAAC,YAAY,EAAE,MAAM,GAAG,OAAO,CAAC,YAAY,CAAC;CAG5D"}

package/dist/modules/signingKeyModule/signingKey.repository.js

@@ -0,0 +1,39 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.SigningKeyRepository = void 0;
+const common_1 = require("@nestjs/common");
+const typeorm_1 = require("typeorm");
+const signingKey_entity_1 = require("./signingKey.entity");
+let SigningKeyRepository = class SigningKeyRepository extends typeorm_1.Repository {
+    dataSource;
+    constructor(dataSource) {
+        super(signingKey_entity_1.SigningKeyEntity, dataSource.createEntityManager());
+        this.dataSource = dataSource;
+    }
+    findByKeyId(keyId) {
+        return this.findOne({ where: { keyId, deletedAt: (0, typeorm_1.IsNull)() } });
+    }
+    findById(signingKeyId) {
+        return this.findOne({ where: { signingKeyId, deletedAt: (0, typeorm_1.IsNull)() } });
+    }
+    findByProject(projectId) {
+        return this.find({ where: { projectId, deletedAt: (0, typeorm_1.IsNull)() } });
+    }
+    updateLastUsed(signingKeyId) {
+        return this.update({ signingKeyId }, { lastUsedAt: new Date() });
+    }
+};
+exports.SigningKeyRepository = SigningKeyRepository;
+exports.SigningKeyRepository = SigningKeyRepository = __decorate([
+    (0, common_1.Injectable)(),
+    __metadata("design:paramtypes", [typeorm_1.DataSource])
+], SigningKeyRepository);

package/dist/modules/signingKeyModule/signingKey.service.d.ts

@@ -0,0 +1,40 @@
+import { CoreConfig } from "../../core.config";
+import { ESigningKeyPrefix } from "./enum/ESigningKeyPrefix.enum";
+import { EntityManager, UpdateResult } from "typeorm";
+import { SigningKeyEntity } from "./signingKey.entity";
+import { CreatedSigningKey, SigningKeyCreateDto, SigningKeyPatchDto } from "./dto/signingKey.dto";
+import { SigningKeyRepository } from "./signingKey.repository";
+export interface GeneratedSigningKey {
+    keyId: string;
+    secret: string;
+    signingKey: string;
+}
+export interface ClientTokenPayload {
+    sub: string;
+    exp: number;
+    iat?: number;
+}
+export interface VerifiedClientToken {
+    signingKey: SigningKeyEntity;
+    payload: ClientTokenPayload;
+}
+export declare class SigningKeyService {
+    private readonly _signingKeyRepository;
+    private readonly _config;
+    private readonly _logger;
+    private readonly _kidCache;
+    constructor(_signingKeyRepository: SigningKeyRepository, _config: CoreConfig);
+    private encryptionKey;
+    generateSigningKey(environmentPrefix?: ESigningKeyPrefix): GeneratedSigningKey;
+    encryptForStorage(secret: string): string;
+    verifyClientToken(token: string): Promise<VerifiedClientToken | null>;
+    private _resolveSigningKey;
+    invalidateCache(keyId: string): void;
+    private _repo;
+    findByIdAndProject(signingKeyId: string, projectId: string, manager?: EntityManager): Promise<SigningKeyEntity | null>;
+    createSigningKey(projectId: string, data: SigningKeyCreateDto, manager?: EntityManager): Promise<CreatedSigningKey>;
+    updateLock(signingKeyId: string, projectId: string, manager: EntityManager): Promise<SigningKeyEntity | null>;
+    patchSigningKey(signingKeyId: string, projectId: string, data: SigningKeyPatchDto, manager?: EntityManager): Promise<SigningKeyEntity>;
+    removeSigningKey(signingKeyId: string, projectId: string, manager?: EntityManager): Promise<UpdateResult>;
+}
+//# sourceMappingURL=signingKey.service.d.ts.map

package/dist/modules/signingKeyModule/signingKey.service.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"signingKey.service.d.ts","sourceRoot":"","sources":["../../../src/modules/signingKeyModule/signingKey.service.ts"],"names":[],"mappings":"AAKA,OAAO,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAC/C,OAAO,EAAE,iBAAiB,EAAE,MAAM,+BAA+B,CAAC;AAElE,OAAO,EAAE,aAAa,EAAU,YAAY,EAAE,MAAM,SAAS,CAAC;AAE9D,OAAO,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAC;AACvD,OAAO,EACL,iBAAiB,EACjB,mBAAmB,EACnB,kBAAkB,EACnB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAAE,oBAAoB,EAAE,MAAM,yBAAyB,CAAC;AAE/D,MAAM,WAAW,mBAAmB;IAClC,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,CAAC;IAEf,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,kBAAkB;IAEjC,GAAG,EAAE,MAAM,CAAC;IAEZ,GAAG,EAAE,MAAM,CAAC;IACZ,GAAG,CAAC,EAAE,MAAM,CAAC;CACd;AAED,MAAM,WAAW,mBAAmB;IAClC,UAAU,EAAE,gBAAgB,CAAC;IAC7B,OAAO,EAAE,kBAAkB,CAAC;CAC7B;AAmBD,qBACa,iBAAiB;IAgB1B,OAAO,CAAC,QAAQ,CAAC,qBAAqB;IACtC,OAAO,CAAC,QAAQ,CAAC,OAAO;IAhB1B,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAsC;IAS9D,OAAO,CAAC,QAAQ,CAAC,SAAS,CAGf;gBAGQ,qBAAqB,EAAE,oBAAoB,EAC3C,OAAO,EAAE,UAAU;IAGtC,OAAO,CAAC,aAAa;IAcrB,kBAAkB,CAChB,iBAAiB,GAAE,iBAA0C,GAC5D,mBAAmB;IAMtB,iBAAiB,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM;IA8BnC,iBAAiB,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,mBAAmB,GAAG,IAAI,CAAC;YA2E7D,kBAAkB;IA4ChC,eAAe,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI;IASpC,OAAO,CAAC,KAAK;IAMb,kBAAkB,CAChB,YAAY,EAAE,MAAM,EACpB,SAAS,EAAE,MAAM,EACjB,OAAO,CAAC,EAAE,aAAa,GACtB,OAAO,CAAC,gBAAgB,GAAG,IAAI,CAAC;IAa7B,gBAAgB,CACpB,SAAS,EAAE,MAAM,EACjB,IAAI,EAAE,mBAAmB,EACzB,OAAO,CAAC,EAAE,aAAa,GACtB,OAAO,CAAC,iBAAiB,CAAC;IAoB7B,UAAU,CACR,YAAY,EAAE,MAAM,EACpB,SAAS,EAAE,MAAM,EACjB,OAAO,EAAE,aAAa,GACrB,OAAO,CAAC,gBAAgB,GAAG,IAAI,CAAC;IAa7B,eAAe,CACnB,YAAY,EAAE,MAAM,EACpB,SAAS,EAAE,MAAM,EACjB,IAAI,EAAE,kBAAkB,EACxB,OAAO,CAAC,EAAE,aAAa,GACtB,OAAO,CAAC,gBAAgB,CAAC;IAyBtB,gBAAgB,CACpB,YAAY,EAAE,MAAM,EACpB,SAAS,EAAE,MAAM,EACjB,OAAO,CAAC,EAAE,aAAa,GACtB,OAAO,CAAC,YAAY,CAAC;CAmBzB"}