@nolag/core 0.4.0

package/dist/modules/actorTokenModule/enum/EActorTokenPrefix.enum.js

@@ -0,0 +1,8 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.EActorTokenPrefix = void 0;
+var EActorTokenPrefix;
+(function (EActorTokenPrefix) {
+    EActorTokenPrefix["Live"] = "at_live";
+    EActorTokenPrefix["Sandbox"] = "at_sandbox";
+})(EActorTokenPrefix || (exports.EActorTokenPrefix = EActorTokenPrefix = {}));

package/dist/modules/actorTokenModule/enum/EActorTokenStatus.enum.d.ts

@@ -0,0 +1,5 @@
+export declare enum EActorTokenStatus {
+    Active = "active",
+    Disabled = "disabled"
+}
+//# sourceMappingURL=EActorTokenStatus.enum.d.ts.map

package/dist/modules/actorTokenModule/enum/EActorTokenStatus.enum.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"EActorTokenStatus.enum.d.ts","sourceRoot":"","sources":["../../../../src/modules/actorTokenModule/enum/EActorTokenStatus.enum.ts"],"names":[],"mappings":"AAAA,oBAAY,iBAAiB;IAC3B,MAAM,WAAW;IACjB,QAAQ,aAAa;CACtB"}

package/dist/modules/actorTokenModule/enum/EActorTokenStatus.enum.js

@@ -0,0 +1,8 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.EActorTokenStatus = void 0;
+var EActorTokenStatus;
+(function (EActorTokenStatus) {
+    EActorTokenStatus["Active"] = "active";
+    EActorTokenStatus["Disabled"] = "disabled";
+})(EActorTokenStatus || (exports.EActorTokenStatus = EActorTokenStatus = {}));

package/dist/modules/actorTokenModule/enum/EActorType.enum.d.ts

@@ -0,0 +1,11 @@
+export declare enum EActorType {
+    Device = "device",
+    Service = "service",
+    Session = "session",
+    User = "user",
+    Agent = "agent",
+    Orchestrator = "orchestrator",
+    Observer = "observer"
+}
+export declare const PERSISTENT_SESSION_ACTOR_TYPES: readonly EActorType[];
+//# sourceMappingURL=EActorType.enum.d.ts.map

package/dist/modules/actorTokenModule/enum/EActorType.enum.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"EActorType.enum.d.ts","sourceRoot":"","sources":["../../../../src/modules/actorTokenModule/enum/EActorType.enum.ts"],"names":[],"mappings":"AAAA,oBAAY,UAAU;IACpB,MAAM,WAAW;IACjB,OAAO,YAAY;IACnB,OAAO,YAAY;IACnB,IAAI,SAAS;IACb,KAAK,UAAU;IACf,YAAY,iBAAiB;IAC7B,QAAQ,aAAa;CACtB;AAMD,eAAO,MAAM,8BAA8B,EAAE,SAAS,UAAU,EAG/D,CAAC"}

package/dist/modules/actorTokenModule/enum/EActorType.enum.js

@@ -0,0 +1,17 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.PERSISTENT_SESSION_ACTOR_TYPES = exports.EActorType = void 0;
+var EActorType;
+(function (EActorType) {
+    EActorType["Device"] = "device";
+    EActorType["Service"] = "service";
+    EActorType["Session"] = "session";
+    EActorType["User"] = "user";
+    EActorType["Agent"] = "agent";
+    EActorType["Orchestrator"] = "orchestrator";
+    EActorType["Observer"] = "observer";
+})(EActorType || (exports.EActorType = EActorType = {}));
+exports.PERSISTENT_SESSION_ACTOR_TYPES = [
+    EActorType.Agent,
+    EActorType.Orchestrator,
+];

package/dist/modules/actorTokenModule/query/actorToken.query.d.ts

@@ -0,0 +1,10 @@
+import { BaseQuery } from "../../../common/pagination";
+import { ActorTokenEntity } from "../actorToken.entity";
+import { EActorTokenStatus } from "../enum/EActorTokenStatus.enum";
+import { EActorType } from "../enum/EActorType.enum";
+export declare class ActorTokenQuery extends BaseQuery<ActorTokenEntity> {
+    name?: string;
+    actorType?: EActorType;
+    status?: EActorTokenStatus;
+}
+//# sourceMappingURL=actorToken.query.d.ts.map

package/dist/modules/actorTokenModule/query/actorToken.query.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"actorToken.query.d.ts","sourceRoot":"","sources":["../../../../src/modules/actorTokenModule/query/actorToken.query.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,SAAS,EAAE,MAAM,4BAA4B,CAAC;AACvD,OAAO,EAAE,gBAAgB,EAAE,MAAM,sBAAsB,CAAC;AACxD,OAAO,EAAE,iBAAiB,EAAE,MAAM,gCAAgC,CAAC;AACnE,OAAO,EAAE,UAAU,EAAE,MAAM,yBAAyB,CAAC;AAErD,qBAAa,eAAgB,SAAQ,SAAS,CAAC,gBAAgB,CAAC;IAI9D,IAAI,CAAC,EAAE,MAAM,CAAC;IAKd,SAAS,CAAC,EAAE,UAAU,CAAC;IAKvB,MAAM,CAAC,EAAE,iBAAiB,CAAC;CAC5B"}

package/dist/modules/actorTokenModule/query/actorToken.query.js

@@ -0,0 +1,41 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ActorTokenQuery = void 0;
+const swagger_1 = require("@nestjs/swagger");
+const class_validator_1 = require("class-validator");
+const pagination_1 = require("../../../common/pagination");
+const EActorTokenStatus_enum_1 = require("../enum/EActorTokenStatus.enum");
+const EActorType_enum_1 = require("../enum/EActorType.enum");
+class ActorTokenQuery extends pagination_1.BaseQuery {
+    name;
+    actorType;
+    status;
+}
+exports.ActorTokenQuery = ActorTokenQuery;
+__decorate([
+    (0, swagger_1.ApiPropertyOptional)({ description: "Partial match" }),
+    (0, class_validator_1.IsOptional)(),
+    (0, class_validator_1.IsString)(),
+    __metadata("design:type", String)
+], ActorTokenQuery.prototype, "name", void 0);
+__decorate([
+    (0, swagger_1.ApiPropertyOptional)({ enum: EActorType_enum_1.EActorType }),
+    (0, class_validator_1.IsOptional)(),
+    (0, class_validator_1.IsEnum)(EActorType_enum_1.EActorType),
+    __metadata("design:type", String)
+], ActorTokenQuery.prototype, "actorType", void 0);
+__decorate([
+    (0, swagger_1.ApiPropertyOptional)({ enum: EActorTokenStatus_enum_1.EActorTokenStatus }),
+    (0, class_validator_1.IsOptional)(),
+    (0, class_validator_1.IsEnum)(EActorTokenStatus_enum_1.EActorTokenStatus),
+    __metadata("design:type", String)
+], ActorTokenQuery.prototype, "status", void 0);

package/dist/modules/actorTokenModule/query/actorToken.query.service.d.ts

@@ -0,0 +1,10 @@
+import { BasePaginationService, PaginatedResult } from "../../../common/pagination";
+import { ActorTokenEntity } from "../actorToken.entity";
+import { ActorTokenRepository } from "../actorToken.repository";
+import { ActorTokenQuery } from "./actorToken.query";
+export declare class ActorTokenQueryService extends BasePaginationService {
+    private readonly _repository;
+    constructor(_repository: ActorTokenRepository);
+    findPaginated(query: ActorTokenQuery, projectId: string): Promise<PaginatedResult<ActorTokenEntity>>;
+}
+//# sourceMappingURL=actorToken.query.service.d.ts.map

package/dist/modules/actorTokenModule/query/actorToken.query.service.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"actorToken.query.service.d.ts","sourceRoot":"","sources":["../../../../src/modules/actorTokenModule/query/actorToken.query.service.ts"],"names":[],"mappings":"AACA,OAAO,EACL,qBAAqB,EACrB,eAAe,EAChB,MAAM,4BAA4B,CAAC;AACpC,OAAO,EAAE,gBAAgB,EAAE,MAAM,sBAAsB,CAAC;AACxD,OAAO,EAAE,oBAAoB,EAAE,MAAM,0BAA0B,CAAC;AAChE,OAAO,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC;AAErD,qBACa,sBAAuB,SAAQ,qBAAqB;IACnD,OAAO,CAAC,QAAQ,CAAC,WAAW;gBAAX,WAAW,EAAE,oBAAoB;IAI9D,aAAa,CACX,KAAK,EAAE,eAAe,EACtB,SAAS,EAAE,MAAM,GAChB,OAAO,CAAC,eAAe,CAAC,gBAAgB,CAAC,CAAC;CAyB9C"}

package/dist/modules/actorTokenModule/query/actorToken.query.service.js

@@ -0,0 +1,47 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ActorTokenQueryService = void 0;
+const common_1 = require("@nestjs/common");
+const pagination_1 = require("../../../common/pagination");
+const actorToken_entity_1 = require("../actorToken.entity");
+const actorToken_repository_1 = require("../actorToken.repository");
+let ActorTokenQueryService = class ActorTokenQueryService extends pagination_1.BasePaginationService {
+    _repository;
+    constructor(_repository) {
+        super();
+        this._repository = _repository;
+    }
+    findPaginated(query, projectId) {
+        const alias = actorToken_entity_1.ActorTokenEntity.entityName();
+        const qb = this._repository.createQueryBuilder(alias);
+        qb.where(`${alias}.deletedAt IS NULL`);
+        qb.andWhere(`${alias}.projectId = :projectId`, { projectId });
+        if (query.name) {
+            qb.andWhere(`${alias}.name ILIKE :name`, { name: `%${query.name}%` });
+        }
+        if (query.actorType) {
+            qb.andWhere(`${alias}.actorType = :actorType`, {
+                actorType: query.actorType,
+            });
+        }
+        if (query.status) {
+            qb.andWhere(`${alias}.status = :status`, { status: query.status });
+        }
+        qb.orderBy(`${alias}.createdAt`, "DESC");
+        return this.paginate(qb, query);
+    }
+};
+exports.ActorTokenQueryService = ActorTokenQueryService;
+exports.ActorTokenQueryService = ActorTokenQueryService = __decorate([
+    (0, common_1.Injectable)(),
+    __metadata("design:paramtypes", [actorToken_repository_1.ActorTokenRepository])
+], ActorTokenQueryService);

package/dist/modules/authzModule/adapters/brokerResponse.adapter.d.ts

@@ -0,0 +1,128 @@
+import { CheckRoomAccessResult, RevalidateActorResponseDto, ValidateActorResponseDto } from "../dto/authz.dto";
+export declare function toBrokerValidateResponse(result: ValidateActorResponseDto): {
+    result: string;
+    is_superuser: boolean;
+    client_attrs?: undefined;
+} | {
+    result: string;
+    is_superuser: boolean;
+    client_attrs: {
+        actor_token_id: string;
+        organization_id: string | null;
+        project_id: string;
+        project_name: string;
+        actor_type: import("../../..").EActorType;
+        scope_id: string | undefined;
+        scope_slug: string | undefined;
+        scope_name: string | undefined;
+        apps: {
+            app_id: string;
+            app_name: string;
+            app_slug: string;
+            allowed_topics: {
+                pattern: string;
+                topic: string;
+                permission: import("../../..").EAccessPermission;
+                room_id: string;
+                room_slug: string;
+                scope_id: string | undefined;
+                scope_slug: string | undefined;
+            }[];
+            allowed_lobbies: {
+                lobby_id: string;
+                lobby_slug: string;
+            }[];
+            active_subscriptions: {
+                pattern: string;
+                topic: string;
+                load_balance: boolean | undefined;
+                load_balance_group: string | undefined;
+                filters: string[] | undefined;
+            }[];
+            hydration_webhook: import("../dto/authz.dto").WebhookConfigDto | null;
+            trigger_webhook: import("../dto/authz.dto").WebhookConfigDto | null;
+            topic_webhooks: import("../dto/authz.dto").TopicWebhooksMap;
+        }[];
+        max_connections: number | null;
+        max_message_size_bytes: number | null;
+        persistent_session: boolean;
+        session_expiry_seconds: number;
+        auth_expires_at: number | null;
+    };
+};
+export declare function toBrokerRevalidateResponse(result: RevalidateActorResponseDto): {
+    valid: boolean;
+    error: import("../dto/authz.dto").AuthzDenyReason;
+    disconnect_reason: string;
+    actor_token_id?: undefined;
+    organization_id?: undefined;
+    project_id?: undefined;
+    project_name?: undefined;
+    actor_type?: undefined;
+    scope_id?: undefined;
+    scope_slug?: undefined;
+    scope_name?: undefined;
+    apps?: undefined;
+    max_connections?: undefined;
+    max_message_size_bytes?: undefined;
+    persistent_session?: undefined;
+    session_expiry_seconds?: undefined;
+} | {
+    valid: boolean;
+    actor_token_id: string;
+    organization_id: string | null;
+    project_id: string;
+    project_name: string;
+    actor_type: import("../../..").EActorType;
+    scope_id: string | undefined;
+    scope_slug: string | undefined;
+    scope_name: string | undefined;
+    apps: {
+        app_id: string;
+        app_name: string;
+        app_slug: string;
+        allowed_topics: {
+            pattern: string;
+            topic: string;
+            permission: import("../../..").EAccessPermission;
+            room_id: string;
+            room_slug: string;
+            scope_id: string | undefined;
+            scope_slug: string | undefined;
+        }[];
+        allowed_lobbies: {
+            lobby_id: string;
+            lobby_slug: string;
+        }[];
+        active_subscriptions: {
+            pattern: string;
+            topic: string;
+            load_balance: boolean | undefined;
+            load_balance_group: string | undefined;
+            filters: string[] | undefined;
+        }[];
+        hydration_webhook: import("../dto/authz.dto").WebhookConfigDto | null;
+        trigger_webhook: import("../dto/authz.dto").WebhookConfigDto | null;
+        topic_webhooks: import("../dto/authz.dto").TopicWebhooksMap;
+    }[];
+    max_connections: number | null;
+    max_message_size_bytes: number | null;
+    persistent_session: boolean;
+    session_expiry_seconds: number;
+    error?: undefined;
+    disconnect_reason?: undefined;
+};
+export declare function toBrokerCheckRoomAccessResponse(result: CheckRoomAccessResult): {
+    allow: boolean;
+    allowed_topics: {
+        pattern: string;
+        topic: string;
+        permission: import("../../..").EAccessPermission;
+        app_id: string | undefined;
+        room_id: string;
+        room_slug: string;
+        scope_id: string | undefined;
+        scope_slug: string | undefined;
+    }[];
+};
+//# sourceMappingURL=brokerResponse.adapter.d.ts.map

package/dist/modules/authzModule/adapters/brokerResponse.adapter.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"brokerResponse.adapter.d.ts","sourceRoot":"","sources":["../../../../src/modules/authzModule/adapters/brokerResponse.adapter.ts"],"names":[],"mappings":"AAAA,OAAO,EAGL,qBAAqB,EACrB,0BAA0B,EAC1B,wBAAwB,EACzB,MAAM,kBAAkB,CAAC;AAmD1B,wBAAgB,wBAAwB,CAAC,MAAM,EAAE,wBAAwB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EA4BxE;AAMD,wBAAgB,0BAA0B,CAAC,MAAM,EAAE,0BAA0B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAyB5E;AASD,wBAAgB,+BAA+B,CAAC,MAAM,EAAE,qBAAqB;;;;;;;;;;;;EAc5E"}

package/dist/modules/authzModule/adapters/brokerResponse.adapter.js

@@ -0,0 +1,103 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.toBrokerValidateResponse = toBrokerValidateResponse;
+exports.toBrokerRevalidateResponse = toBrokerRevalidateResponse;
+exports.toBrokerCheckRoomAccessResponse = toBrokerCheckRoomAccessResponse;
+function toBrokerApps(apps) {
+    return apps.map((app) => ({
+        app_id: app.appId,
+        app_name: app.appName,
+        app_slug: app.appSlug,
+        allowed_topics: app.allowedTopics.map((t) => ({
+            pattern: t.pattern,
+            topic: t.topic,
+            permission: t.permission,
+            room_id: t.roomId,
+            room_slug: t.roomSlug,
+            scope_id: t.scopeId,
+            scope_slug: t.scopeSlug,
+        })),
+        allowed_lobbies: (app.allowedLobbies || []).map((l) => ({
+            lobby_id: l.lobbyId,
+            lobby_slug: l.lobbySlug,
+        })),
+        active_subscriptions: (app.activeSubscriptions || []).map((s) => ({
+            pattern: s.pattern,
+            topic: s.topic,
+            load_balance: s.loadBalance,
+            load_balance_group: s.loadBalanceGroup,
+            filters: s.filters,
+        })),
+        hydration_webhook: app.hydrationWebhook || null,
+        trigger_webhook: app.triggerWebhook || null,
+        topic_webhooks: app.topicWebhooks || {},
+    }));
+}
+function toBrokerValidateResponse(result) {
+    if (!result.valid) {
+        return {
+            result: "deny",
+            is_superuser: false,
+        };
+    }
+    return {
+        result: "allow",
+        is_superuser: false,
+        client_attrs: {
+            actor_token_id: result.actorTokenId,
+            organization_id: result.organizationId,
+            project_id: result.projectId,
+            project_name: result.projectName,
+            actor_type: result.actorType,
+            scope_id: result.scopeId,
+            scope_slug: result.scopeSlug,
+            scope_name: result.scopeName,
+            apps: toBrokerApps(result.apps),
+            max_connections: result.maxConnections,
+            max_message_size_bytes: result.maxMessageSizeBytes,
+            persistent_session: result.persistentSession,
+            session_expiry_seconds: result.sessionExpirySeconds,
+            auth_expires_at: result.authExpiresAt ?? null,
+        },
+    };
+}
+function toBrokerRevalidateResponse(result) {
+    if (!result.valid) {
+        return {
+            valid: false,
+            error: result.error,
+            disconnect_reason: result.disconnectReason,
+        };
+    }
+    return {
+        valid: true,
+        actor_token_id: result.actorTokenId,
+        organization_id: result.organizationId,
+        project_id: result.projectId,
+        project_name: result.projectName,
+        actor_type: result.actorType,
+        scope_id: result.scopeId,
+        scope_slug: result.scopeSlug,
+        scope_name: result.scopeName,
+        apps: toBrokerApps(result.apps),
+        max_connections: result.maxConnections,
+        max_message_size_bytes: result.maxMessageSizeBytes,
+        persistent_session: result.persistentSession,
+        session_expiry_seconds: result.sessionExpirySeconds,
+    };
+}
+function toBrokerCheckRoomAccessResponse(result) {
+    return {
+        allow: result.allow,
+        allowed_topics: result.allowedTopics.map((t) => ({
+            pattern: t.pattern,
+            topic: t.topic,
+            permission: t.permission,
+            app_id: result.appId,
+            room_id: t.roomId,
+            room_slug: t.roomSlug,
+            scope_id: t.scopeId,
+            scope_slug: t.scopeSlug,
+        })),
+    };
+}

package/dist/modules/authzModule/authz.facade.d.ts

@@ -0,0 +1,18 @@
+import { DataSource } from "typeorm";
+import { AuthzService } from "./authz.service";
+import { CheckRoomAccessResult, RevalidateActorResponseDto, SubscriptionUpdateRequestDto, ValidateActorResponseDto } from "./dto/authz.dto";
+export declare class AuthzFacade {
+    private readonly _authzService;
+    private readonly _dataSource;
+    constructor(_authzService: AuthzService, _dataSource: DataSource);
+    validateActor(accessToken: string): Promise<ValidateActorResponseDto>;
+    revalidateActor(actorTokenId: string): Promise<RevalidateActorResponseDto>;
+    checkRoomAccess(actorTokenId: string, pattern: string): Promise<CheckRoomAccessResult>;
+    getActorScope(actorTokenId: string): Promise<{
+        organizationId: string | null;
+        projectId: string;
+    } | null>;
+    updateSubscription(dto: SubscriptionUpdateRequestDto): Promise<void>;
+    clearSubscriptions(actorTokenId: string): Promise<void>;
+}
+//# sourceMappingURL=authz.facade.d.ts.map

package/dist/modules/authzModule/authz.facade.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"authz.facade.d.ts","sourceRoot":"","sources":["../../../src/modules/authzModule/authz.facade.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACrC,OAAO,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAC;AAC/C,OAAO,EACL,qBAAqB,EACrB,0BAA0B,EAC1B,4BAA4B,EAC5B,wBAAwB,EACzB,MAAM,iBAAiB,CAAC;AAEzB,qBACa,WAAW;IAEpB,OAAO,CAAC,QAAQ,CAAC,aAAa;IAE9B,OAAO,CAAC,QAAQ,CAAC,WAAW;gBAFX,aAAa,EAAE,YAAY,EAE3B,WAAW,EAAE,UAAU;IAG1C,aAAa,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,wBAAwB,CAAC;IAIrE,eAAe,CAAC,YAAY,EAAE,MAAM,GAAG,OAAO,CAAC,0BAA0B,CAAC;IAI1E,eAAe,CACb,YAAY,EAAE,MAAM,EACpB,OAAO,EAAE,MAAM,GACd,OAAO,CAAC,qBAAqB,CAAC;IAIjC,aAAa,CACX,YAAY,EAAE,MAAM,GACnB,OAAO,CAAC;QAAE,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;QAAC,SAAS,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI,CAAC;IAQvE,kBAAkB,CAAC,GAAG,EAAE,4BAA4B,GAAG,OAAO,CAAC,IAAI,CAAC;IAcpE,kBAAkB,CAAC,YAAY,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;CAGxD"}

package/dist/modules/authzModule/authz.facade.js

@@ -0,0 +1,52 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+var __param = (this && this.__param) || function (paramIndex, decorator) {
+    return function (target, key) { decorator(target, key, paramIndex); }
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.AuthzFacade = void 0;
+const common_1 = require("@nestjs/common");
+const typeorm_1 = require("@nestjs/typeorm");
+const typeorm_2 = require("typeorm");
+const authz_service_1 = require("./authz.service");
+let AuthzFacade = class AuthzFacade {
+    _authzService;
+    _dataSource;
+    constructor(_authzService, _dataSource) {
+        this._authzService = _authzService;
+        this._dataSource = _dataSource;
+    }
+    validateActor(accessToken) {
+        return this._authzService.validateActor(accessToken);
+    }
+    revalidateActor(actorTokenId) {
+        return this._authzService.revalidateActor(actorTokenId);
+    }
+    checkRoomAccess(actorTokenId, pattern) {
+        return this._authzService.checkRoomAccess(actorTokenId, pattern);
+    }
+    getActorScope(actorTokenId) {
+        return this._authzService.getActorScope(actorTokenId);
+    }
+    updateSubscription(dto) {
+        return this._dataSource.transaction((manager) => this._authzService.updateSubscription(dto.actorTokenId, dto.topic, dto.action, manager, dto.loadBalance, dto.loadBalanceGroup, dto.filters));
+    }
+    clearSubscriptions(actorTokenId) {
+        return this._authzService.clearSubscriptions(actorTokenId);
+    }
+};
+exports.AuthzFacade = AuthzFacade;
+exports.AuthzFacade = AuthzFacade = __decorate([
+    (0, common_1.Injectable)(),
+    __param(1, (0, typeorm_1.InjectDataSource)()),
+    __metadata("design:paramtypes", [authz_service_1.AuthzService,
+        typeorm_2.DataSource])
+], AuthzFacade);

package/dist/modules/authzModule/authz.module.d.ts

@@ -0,0 +1,3 @@
+export declare class AuthzModule {
+}
+//# sourceMappingURL=authz.module.d.ts.map

package/dist/modules/authzModule/authz.module.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"authz.module.d.ts","sourceRoot":"","sources":["../../../src/modules/authzModule/authz.module.ts"],"names":[],"mappings":"AAuBA,qBAqBa,WAAW;CAAG"}

package/dist/modules/authzModule/authz.module.js

@@ -0,0 +1,50 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.AuthzModule = void 0;
+const common_1 = require("@nestjs/common");
+const typeorm_1 = require("@nestjs/typeorm");
+const accessScope_entity_1 = require("../accessScopeModule/accessScope.entity");
+const actorAppAccess_entity_1 = require("../actorTokenModule/actorAppAccess.entity");
+const actorToken_entity_1 = require("../actorTokenModule/actorToken.entity");
+const actorToken_module_1 = require("../actorTokenModule/actorToken.module");
+const actorTokenState_entity_1 = require("../actorTokenModule/actorTokenState.entity");
+const lobby_entity_1 = require("../lobbyModule/lobby.entity");
+const lobbyRoom_entity_1 = require("../lobbyModule/lobbyRoom.entity");
+const platformApp_entity_1 = require("../platformAppModule/platformApp.entity");
+const project_entity_1 = require("../projectModule/project.entity");
+const room_entity_1 = require("../roomModule/room.entity");
+const roomActorAccess_entity_1 = require("../roomModule/roomActorAccess.entity");
+const signingKey_module_1 = require("../signingKeyModule/signingKey.module");
+const authz_facade_1 = require("./authz.facade");
+const authz_service_1 = require("./authz.service");
+let AuthzModule = class AuthzModule {
+};
+exports.AuthzModule = AuthzModule;
+exports.AuthzModule = AuthzModule = __decorate([
+    (0, common_1.Module)({
+        imports: [
+            typeorm_1.TypeOrmModule.forFeature([
+                project_entity_1.ProjectEntity,
+                platformApp_entity_1.PlatformAppEntity,
+                room_entity_1.RoomEntity,
+                roomActorAccess_entity_1.RoomActorAccessEntity,
+                lobby_entity_1.LobbyEntity,
+                lobbyRoom_entity_1.LobbyRoomEntity,
+                accessScope_entity_1.AccessScopeEntity,
+                actorToken_entity_1.ActorTokenEntity,
+                actorTokenState_entity_1.ActorTokenStateEntity,
+                actorAppAccess_entity_1.ActorAppAccessEntity,
+            ]),
+            actorToken_module_1.ActorTokenModule,
+            signingKey_module_1.SigningKeyModule,
+        ],
+        providers: [authz_service_1.AuthzService, authz_facade_1.AuthzFacade],
+        exports: [authz_facade_1.AuthzFacade],
+    })
+], AuthzModule);

package/dist/modules/authzModule/authz.service.d.ts

@@ -0,0 +1,34 @@
+import { DataSource, EntityManager } from "typeorm";
+import { ActorTokenFacade } from "../actorTokenModule/actorToken.facade";
+import { EActorType } from "../actorTokenModule/enum/EActorType.enum";
+import { CoreConfig } from "../../core.config";
+import { SigningKeyFacade } from "../signingKeyModule/signingKey.facade";
+import { CheckRoomAccessResult, RevalidateActorResponseDto, ValidateActorResponseDto } from "./dto/authz.dto";
+export declare class AuthzService {
+    private readonly _dataSource;
+    private readonly _actorTokenFacade;
+    private readonly _signingKeyFacade;
+    private readonly _config;
+    private readonly _logger;
+    constructor(_dataSource: DataSource, _actorTokenFacade: ActorTokenFacade, _signingKeyFacade: SigningKeyFacade, _config: CoreConfig);
+    validateActor(accessToken: string): Promise<ValidateActorResponseDto>;
+    private _validateClientToken;
+    revalidateActor(actorTokenId: string): Promise<RevalidateActorResponseDto>;
+    private _buildSessionPayload;
+    private _resolveScope;
+    private _resolveLimits;
+    checkRoomAccess(actorTokenId: string, pattern: string): Promise<CheckRoomAccessResult>;
+    private _buildAllowedTopic;
+    private _buildAppAccess;
+    private _attachLobbies;
+    private _buildTopicWebhooksMap;
+    private _getActiveSubscriptionsGroupedByApp;
+    updateSubscription(actorTokenId: string, topic: string, action: "subscribe" | "unsubscribe", manager: EntityManager, loadBalance?: boolean, loadBalanceGroup?: string, filters?: string[]): Promise<void>;
+    clearSubscriptions(actorTokenId: string): Promise<void>;
+    getActorScope(actorTokenId: string): Promise<{
+        organizationId: string | null;
+        projectId: string;
+    } | null>;
+    static isPersistentActorType(actorType: EActorType): boolean;
+}
+//# sourceMappingURL=authz.service.d.ts.map

package/dist/modules/authzModule/authz.service.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"authz.service.d.ts","sourceRoot":"","sources":["../../../src/modules/authzModule/authz.service.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,UAAU,EAAE,aAAa,EAAc,MAAM,SAAS,CAAC;AAKhE,OAAO,EAAE,gBAAgB,EAAE,MAAM,uCAAuC,CAAC;AAIzE,OAAO,EACL,UAAU,EAEX,MAAM,0CAA0C,CAAC;AAClD,OAAO,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAc/C,OAAO,EAAE,gBAAgB,EAAE,MAAM,uCAAuC,CAAC;AACzE,OAAO,EAKL,qBAAqB,EACrB,0BAA0B,EAE1B,wBAAwB,EACzB,MAAM,iBAAiB,CAAC;AAkCzB,qBACa,YAAY;IAKrB,OAAO,CAAC,QAAQ,CAAC,WAAW;IAC5B,OAAO,CAAC,QAAQ,CAAC,iBAAiB;IAClC,OAAO,CAAC,QAAQ,CAAC,iBAAiB;IAClC,OAAO,CAAC,QAAQ,CAAC,OAAO;IAP1B,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAiC;gBAItC,WAAW,EAAE,UAAU,EACvB,iBAAiB,EAAE,gBAAgB,EACnC,iBAAiB,EAAE,gBAAgB,EACnC,OAAO,EAAE,UAAU;IAShC,aAAa,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,wBAAwB,CAAC;YAsC7D,oBAAoB;IAwD5B,eAAe,CACnB,YAAY,EAAE,MAAM,GACnB,OAAO,CAAC,0BAA0B,CAAC;YA4DxB,oBAAoB;YA+CpB,aAAa;IAiC3B,OAAO,CAAC,cAAc;IAoChB,eAAe,CACnB,YAAY,EAAE,MAAM,EACpB,OAAO,EAAE,MAAM,GACd,OAAO,CAAC,qBAAqB,CAAC;IA+JjC,OAAO,CAAC,kBAAkB;YAmCZ,eAAe;YAyNf,cAAc;IA6D5B,OAAO,CAAC,sBAAsB;YA4BhB,mCAAmC;IA4D3C,kBAAkB,CACtB,YAAY,EAAE,MAAM,EACpB,KAAK,EAAE,MAAM,EACb,MAAM,EAAE,WAAW,GAAG,aAAa,EACnC,OAAO,EAAE,aAAa,EACtB,WAAW,CAAC,EAAE,OAAO,EACrB,gBAAgB,CAAC,EAAE,MAAM,EACzB,OAAO,CAAC,EAAE,MAAM,EAAE,GACjB,OAAO,CAAC,IAAI,CAAC;IAiDV,kBAAkB,CAAC,YAAY,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAqBvD,aAAa,CACjB,YAAY,EAAE,MAAM,GACnB,OAAO,CAAC;QAAE,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;QAAC,SAAS,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI,CAAC;IAqBvE,MAAM,CAAC,qBAAqB,CAAC,SAAS,EAAE,UAAU,GAAG,OAAO;CAG7D"}