@nsshunt/stsappframework 3.1.216 → 3.1.218

package/dist/testHelpers.js

@@ -1,283 +0,0 @@
-"use strict";
-var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    var desc = Object.getOwnPropertyDescriptor(m, k);
-    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
-      desc = { enumerable: true, get: function() { return m[k]; } };
-    }
-    Object.defineProperty(o, k2, desc);
-}) : (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    o[k2] = m[k];
-}));
-var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
-    Object.defineProperty(o, "default", { enumerable: true, value: v });
-}) : function(o, v) {
-    o["default"] = v;
-});
-var __importStar = (this && this.__importStar) || function (mod) {
-    if (mod && mod.__esModule) return mod;
-    var result = {};
-    if (mod != null) for (var k in mod) if (k !== "default" && Object.prototype.hasOwnProperty.call(mod, k)) __createBinding(result, mod, k);
-    __setModuleDefault(result, mod);
-    return result;
-};
-var __importDefault = (this && this.__importDefault) || function (mod) {
-    return (mod && mod.__esModule) ? mod : { "default": mod };
-};
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.TestHelper = void 0;
-/* eslint @typescript-eslint/no-explicit-any: 0 */ // --> OFF
-const chalk_1 = __importDefault(require("chalk"));
-const tough = __importStar(require("tough-cookie"));
-const https_1 = __importDefault(require("https"));
-const crypto_1 = __importDefault(require("crypto"));
-const axios_1 = __importDefault(require("axios"));
-const testcontainers_1 = require("testcontainers");
-const stsconfig_1 = require("@nsshunt/stsconfig");
-const stsutils_1 = require("@nsshunt/stsutils");
-const authutilsnode_1 = require("./authutilsnode");
-class TestHelper {
-    //#regexBase64URL = /^[A-Za-z0-9_-]+$/ // Base64URL  - https://base64.guru/standards/base64url
-    #regexURLSafeStringComponent = /[-a-zA-Z0-9@:%._+~#=]{1,256}/; // URL safe string component
-    //#regexBase64 = /(?:[A-Za-z0-9+/]{4})*(?:[A-Za-z0-9+/]{2}==|[A-Za-z0-9+/]{3}=)?/ // Base64 - https://stackoverflow.com/questions/475074/regex-to-parse-or-validate-base64-data
-    #regexSTSBase64 = /SES_(?:[A-Za-z0-9+/]{4})*(?:[A-Za-z0-9+/]{2}==|[A-Za-z0-9+/]{3}=)?/; // Base64
-    #regexJWT = /[A-Za-z0-9-_]+\.[A-Za-z0-9-_]+\.[A-Za-z0-9-_]+/; // JWT (Base64URL.Base64URL.Base64URL)
-    #authUtilsNode = new authutilsnode_1.AuthUtilsNode(stsutils_1.defaultLogger);
-    #databaseContainer;
-    #stsAuthContainer;
-    #network;
-    #authEndpoint = '';
-    #authPort = '';
-    #authHost = '';
-    #httpsAgent = null;
-    constructor() {
-        this.#authEndpoint = 'https://localhost:3002'; //@@
-    }
-    LogDebugMessage(message) {
-        stsutils_1.defaultLogger.debug(message);
-    }
-    #GetHttpsAgent = () => {
-        if (this.#httpsAgent === null) {
-            // https://nodejs.org/api/http.html#class-httpagent
-            this.#httpsAgent = new https_1.default.Agent({
-                keepAlive: stsconfig_1.goptions.keepAlive,
-                maxSockets: stsconfig_1.goptions.maxSockets,
-                maxTotalSockets: stsconfig_1.goptions.maxTotalSockets,
-                maxFreeSockets: stsconfig_1.goptions.maxFreeSockets,
-                timeout: stsconfig_1.goptions.timeout,
-                rejectUnauthorized: false
-            });
-        }
-        return this.#httpsAgent;
-    };
-    StartNetwork = async () => {
-        this.#network = await new testcontainers_1.Network().start();
-    };
-    StopNetwork = async () => {
-        await this.#network.stop();
-    };
-    get network() {
-        return this.#network;
-    }
-    get authPort() {
-        return this.#authPort;
-    }
-    get authHost() {
-        return this.#authHost;
-    }
-    get authEndpoint() {
-        return this.#authEndpoint;
-    }
-    get getHttpsAgent() {
-        return this.#GetHttpsAgent();
-    }
-    CreateRandomString = () => {
-        const charset = '0123456789ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz-_~.'; //    /[0-9A-Za-z\-_~.]/
-        let random = '';
-        const randomValues = Array.from(crypto_1.default.getRandomValues(new Uint8Array(43)));
-        randomValues.forEach(v => (random += charset[v % charset.length]));
-        return random;
-    };
-    Login = async (username, password) => {
-        const client_id = process.env.CLIENT_ID;
-        const nonce = crypto_1.default.randomBytes(43).toString('base64'); //CreateRandomString();
-        const response_type = 'code';
-        const redirect_uri = process.env.REDIRECT_URI;
-        const response_mode = 'query';
-        const scope = process.env.SCOPE;
-        const state = crypto_1.default.randomBytes(43).toString('base64'); // CreateRandomString();
-        const code_verifier = this.CreateRandomString();
-        const code_challenge = crypto_1.default.createHash('sha256').update(code_verifier).digest('base64');
-        const code_challenge_method = 'S256';
-        const authoriseOptions = {
-            email: username,
-            password,
-            client_id,
-            nonce,
-            response_type,
-            redirect_uri,
-            response_mode,
-            scope,
-            state,
-            code_challenge,
-            code_challenge_method
-        };
-        const url = `${this.#authEndpoint}${stsconfig_1.goptions.asapiroot}/login`;
-        const headers = { 'Content-Type': 'application/json' };
-        const retVal = await (0, axios_1.default)({
-            url,
-            method: 'post',
-            data: authoriseOptions,
-            headers: headers,
-            httpsAgent: this.#GetHttpsAgent()
-        });
-        //const cookieString = retVal.headers['set-cookie'];
-        /*
-        const api = request(this.#endpoint);
-        const retVal: any = await (api as any)
-            .post(`${goptions.asapiroot}/login`)
-            .send(authoriseOptions)
-        //.expect('set-cookie', /consent_cookie=.*; Max-Age=86; Path=\/; Expires=.*; HttpOnly; Secure; SameSite=Strict/);
-
-        const cookieString = retVal.header['set-cookie'];
-
-        if (cookieString) {
-            retVal.cookie = new Cookie(cookieString[0]);
-        }
-        */
-        return retVal;
-    };
-    /*
-    GetAuthServerAPITokenFromServer = async (): Promise<string> => {
-        return await this.#authUtilsNode.GetAPITokenFromAuthServer(STSClientID.STSTestingService,
-            "eN9u0mHZLGWZrdnE1zit2vL6xwUFW466sTZcbkXDml5KWxlvKaZ1uiOZmA==",
-            goptions.asapiidentifier, this.#authEndpoint)
-    }
-    */
-    ValidateJWT = async (token) => {
-        return await this.#authUtilsNode.ValidateJWT(token, stsconfig_1.goptions.asapiidentifier, this.#authEndpoint);
-    };
-    StartDatabase = async () => {
-        this.#databaseContainer = await new testcontainers_1.GenericContainer("postgres")
-            .withExposedPorts(5432)
-            .withEnvironment({
-            POSTGRES_PASSWORD: "postgres",
-            //UV_THREADPOOL_SIZE: "64"
-        })
-            .withNetwork(this.#network)
-            .withNetworkAliases("database")
-            .start();
-        const httpPort = this.#databaseContainer.getMappedPort(5432);
-        const host = this.#databaseContainer.getHost();
-        const networkIpAddress = this.#databaseContainer.getIpAddress(this.#network.getName());
-        process.env.DB_HOST = `${host}:${httpPort}`;
-        (0, stsconfig_1.$ResetOptions)();
-        this.LogDebugMessage(chalk_1.default.green(`httpPort: [${httpPort}]`));
-        this.LogDebugMessage(chalk_1.default.green(`host: [${host}]`));
-        this.LogDebugMessage(chalk_1.default.green(`networkIpAddress: [${networkIpAddress}]`));
-        this.LogDebugMessage(chalk_1.default.green(`connectionString: [${stsconfig_1.goptions.connectionString}]`));
-        this.LogDebugMessage(chalk_1.default.green(`defaultDatabaseConnectionString: [${stsconfig_1.goptions.defaultDatabaseConnectionString}]`));
-    };
-    StopDatabase = async () => {
-        if (this.#databaseContainer) {
-            await this.#databaseContainer.stop();
-            this.LogDebugMessage(chalk_1.default.yellow(`Used the following parameters for the database during testing:`));
-            this.LogDebugMessage(chalk_1.default.yellow(`connectionString: [${stsconfig_1.goptions.connectionString}]`));
-            this.LogDebugMessage(chalk_1.default.yellow(`defaultDatabaseConnectionString: [${stsconfig_1.goptions.defaultDatabaseConnectionString}]`));
-        }
-    };
-    // Note: .withCopyFilesToContainer and .withCopyContentToContainer have a defect in that Jest will not close. A file handle/stream is left open
-    // within the underlying code.
-    InitializeDatabase = async () => {
-        const stsAuthContainerInit = await new testcontainers_1.GenericContainer("serza/stsauth:latest")
-            .withEnvironment({
-            DB_USER: "postgres",
-            DB_PASSWORD: "postgres",
-            DB_HOST: "database:5432", // "192.168.14.101",
-            POOL_SIZE: "50",
-            MAX_CPU: "2",
-            DEBUG: "proc*",
-            HTTPS_SERVER_KEY_PATH: "/var/lib/sts/stsglobalresources/keys-tmp/server.key",
-            HTTPS_SERVER_CERT_PATH: "/var/lib/sts/stsglobalresources/keys-tmp/server.cert",
-            AS_ENDPOINT: "https://stscore.stsmda.org"
-        })
-            .withCommand(["node", "dist/app", "create"])
-            .withNetwork(this.#network)
-            .withNetworkAliases("stsauthrunnerinit")
-            .withWaitStrategy(testcontainers_1.Wait.forLogMessage(`User registered: {"status":200,"detail":{"id":"USR_STSGlobalAdminUser@stsmda.com","name":"STSGlobalAdminUser@stsmda.com","email":"STSGlobalAdminUser@stsmda.com","roles":[]}}`))
-            .start();
-        await (0, stsutils_1.Sleep)(500);
-        await stsAuthContainerInit.stop();
-    };
-    StartAuthService = async () => {
-        this.#stsAuthContainer = await new testcontainers_1.GenericContainer("serza/stsauth:latest")
-            .withExposedPorts(3002)
-            .withEnvironment({
-            DB_USER: "postgres",
-            DB_PASSWORD: "postgres",
-            DB_HOST: "database:5432",
-            POOL_SIZE: "50",
-            MAX_CPU: "2",
-            DEBUG: "proc*",
-            HTTPS_SERVER_KEY_PATH: "/var/lib/sts/stsglobalresources/keys-tmp/server.key",
-            HTTPS_SERVER_CERT_PATH: "/var/lib/sts/stsglobalresources/keys-tmp/server.cert",
-            AS_ENDPOINT: "https://stscore.stsmda.org"
-        })
-            .withNetwork(this.#network)
-            .withNetworkAliases("stsauthrunner")
-            .withWaitStrategy(testcontainers_1.Wait.forHttp("/stsauth/v1.0/latency", 3002).usingTls().allowInsecure())
-            .start();
-        const httpAuthPort = this.#stsAuthContainer.getMappedPort(3002);
-        await (0, stsutils_1.Sleep)(200);
-        this.LogDebugMessage(chalk_1.default.green(`-------------------------------------------------------------------------------------------`));
-        this.LogDebugMessage(chalk_1.default.green(`                                 *** STSAuth Started ***: [${httpAuthPort}]`));
-        this.LogDebugMessage(chalk_1.default.green(`-------------------------------------------------------------------------------------------`));
-        this.#authHost = 'https://localhost';
-        this.#authPort = httpAuthPort;
-        this.#authEndpoint = `${this.#authHost}:${this.#authPort}`;
-    };
-    StopAuthService = async () => {
-        if (this.#stsAuthContainer) {
-            await this.#stsAuthContainer.stop();
-            await (0, stsutils_1.Sleep)(200);
-        }
-    };
-    TestLoginAndVerify = async () => {
-        expect.assertions(4);
-        const retVal = await this.Login('user01@stsmda.com.au', 'user01password');
-        expect(retVal.status).toEqual(200);
-        this.LogDebugMessage(chalk_1.default.red(`${JSON.stringify(retVal.data)}`));
-        this.LogDebugMessage(chalk_1.default.magenta(`${JSON.stringify(retVal.headers)}`));
-        this.LogDebugMessage(chalk_1.default.yellow(`${JSON.stringify(retVal.headers['set-cookie'])}`));
-        const cookies = retVal.headers['set-cookie'];
-        this.LogDebugMessage(chalk_1.default.yellow(`${cookies[0]}`));
-        this.LogDebugMessage(chalk_1.default.green(`${JSON.stringify(tough.Cookie.parse(cookies[0]))}`));
-        const cookie = tough.Cookie.parse(cookies[0]);
-        const desiredCookieResultAxios = {
-            key: 'consent_cookie',
-            value: expect.stringMatching(this.#regexURLSafeStringComponent),
-            path: '/',
-            secure: true,
-            httpOnly: true,
-            sameSite: 'strict',
-        };
-        const cookieResult = JSON.parse(JSON.stringify(cookie));
-        expect(cookieResult).toMatchObject(desiredCookieResultAxios);
-        const cookieExpireDate = new Date(cookie.expires);
-        expect(cookieExpireDate.getTime()).toBeGreaterThan(new Date().getTime());
-        const desiredResult = {
-            sessionId: expect.stringMatching(this.#regexSTSBase64),
-            id_token: expect.stringMatching(this.#regexJWT),
-            consentRequired: [
-                'api://d8277fce-bb48-44c2-bbf1-257fe13a444b/res01.create',
-                'api://d8277fce-bb48-44c2-bbf1-257fe13a444b/res01.read',
-                'api://d8277fce-bb48-44c2-bbf1-257fe13a444b/res01.update',
-                'api://d8277fce-bb48-44c2-bbf1-257fe13a444b/res01.delete'
-            ]
-        };
-        expect(retVal.data.detail).toMatchObject(desiredResult);
-    };
-}
-exports.TestHelper = TestHelper;
-//# sourceMappingURL=testHelpers.js.map

package/dist/testHelpers.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"testHelpers.js","sourceRoot":"","sources":["../src/testHelpers.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,kDAAkD,CAAE,UAAU;AAC9D,kDAAyB;AAEzB,oDAAqC;AAErC,kDAAyB;AACzB,oDAA4B;AAE5B,kDAA0B;AAE1B,mDAAiE;AAEjE,kDAA4D;AAE5D,gDAAwD;AAExD,mDAA+C;AAE/C,MAAa,UAAU;IACnB,8FAA8F;IAC9F,4BAA4B,GAAG,8BAA8B,CAAA,CAAC,4BAA4B;IAC1F,+KAA+K;IAC/K,eAAe,GAAG,oEAAoE,CAAA,CAAC,SAAS;IAChG,SAAS,GAAG,gDAAgD,CAAA,CAAC,sCAAsC;IAEnG,cAAc,GAAG,IAAI,6BAAa,CAAC,wBAAa,CAAC,CAAC;IAElD,kBAAkB,CAAM;IACxB,iBAAiB,CAAM;IACvB,QAAQ,CAAM;IACd,aAAa,GAAG,EAAE,CAAC;IACnB,SAAS,GAAG,EAAE,CAAC;IACf,SAAS,GAAG,EAAE,CAAC;IACf,WAAW,GAAuB,IAAI,CAAC;IAEvC;QACI,IAAI,CAAC,aAAa,GAAG,wBAAwB,CAAC,CAAC,IAAI;IACvD,CAAC;IAED,eAAe,CAAC,OAAY;QACxB,wBAAa,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IACjC,CAAC;IAED,cAAc,GAAG,GAAG,EAAE;QAElB,IAAI,IAAI,CAAC,WAAW,KAAK,IAAI,EAAE,CAAC;YAC5B,mDAAmD;YACnD,IAAI,CAAC,WAAW,GAAG,IAAI,eAAK,CAAC,KAAK,CAAC;gBAC/B,SAAS,EAAE,oBAAQ,CAAC,SAAS;gBAC7B,UAAU,EAAE,oBAAQ,CAAC,UAAU;gBAC/B,eAAe,EAAE,oBAAQ,CAAC,eAAe;gBACzC,cAAc,EAAE,oBAAQ,CAAC,cAAc;gBACvC,OAAO,EAAE,oBAAQ,CAAC,OAAO;gBACzB,kBAAkB,EAAE,KAAK;aAC5B,CAAC,CAAC;QACP,CAAC;QACD,OAAO,IAAI,CAAC,WAAW,CAAC;IAC5B,CAAC,CAAA;IAED,YAAY,GAAG,KAAK,IAAI,EAAE;QACtB,IAAI,CAAC,QAAQ,GAAG,MAAM,IAAI,wBAAO,EAAE,CAAC,KAAK,EAAE,CAAC;IAChD,CAAC,CAAA;IAED,WAAW,GAAG,KAAK,IAAI,EAAE;QACrB,MAAM,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC;IAC/B,CAAC,CAAA;IAED,IAAI,OAAO;QACP,OAAO,IAAI,CAAC,QAAQ,CAAC;IACzB,CAAC;IAED,IAAI,QAAQ;QACR,OAAO,IAAI,CAAC,SAAS,CAAC;IAC1B,CAAC;IAED,IAAI,QAAQ;QACR,OAAO,IAAI,CAAC,SAAS,CAAC;IAC1B,CAAC;IAED,IAAI,YAAY;QACZ,OAAO,IAAI,CAAC,aAAa,CAAC;IAC9B,CAAC;IAED,IAAI,aAAa;QACb,OAAO,IAAI,CAAC,cAAc,EAAE,CAAC;IACjC,CAAC;IAED,kBAAkB,GAAG,GAAG,EAAE;QACtB,MAAM,OAAO,GAAG,oEAAoE,CAAC,CAAC,wBAAwB;QAC9G,IAAI,MAAM,GAAG,EAAE,CAAC;QAChB,MAAM,YAAY,GAAa,KAAK,CAAC,IAAI,CAAC,gBAAM,CAAC,eAAe,CAAC,IAAI,UAAU,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;QACtF,YAAY,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,MAAM,IAAI,OAAO,CAAC,CAAC,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;QACnE,OAAO,MAAM,CAAC;IAClB,CAAC,CAAA;IAED,KAAK,GAAG,KAAK,EAAE,QAAgB,EAAE,QAAgB,EAAE,EAAE;QACjD,MAAM,SAAS,GAAG,OAAO,CAAC,GAAG,CAAC,SAAmB,CAAC;QAClD,MAAM,KAAK,GAAG,gBAAM,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC,uBAAuB;QAChF,MAAM,aAAa,GAAG,MAAM,CAAC;QAC7B,MAAM,YAAY,GAAG,OAAO,CAAC,GAAG,CAAC,YAAsB,CAAC;QACxD,MAAM,aAAa,GAAG,OAAO,CAAC;QAC9B,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,KAAe,CAAC;QAC1C,MAAM,KAAK,GAAG,gBAAM,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC,wBAAwB;QACjF,MAAM,aAAa,GAAG,IAAI,CAAC,kBAAkB,EAAE,CAAC;QAChD,MAAM,cAAc,GAAG,gBAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QAC1F,MAAM,qBAAqB,GAAG,MAAM,CAAC;QAErC,MAAM,gBAAgB,GAAQ;YAC1B,KAAK,EAAE,QAAQ;YACf,QAAQ;YACR,SAAS;YACT,KAAK;YACL,aAAa;YACb,YAAY;YACZ,aAAa;YACb,KAAK;YACL,KAAK;YACL,cAAc;YACd,qBAAqB;SACxB,CAAA;QAED,MAAM,GAAG,GAAG,GAAG,IAAI,CAAC,aAAa,GAAG,oBAAQ,CAAC,SAAS,QAAQ,CAAC;QAC/D,MAAM,OAAO,GAAG,EAAE,cAAc,EAAE,kBAAkB,EAAC,CAAC;QAEtD,MAAM,MAAM,GAAG,MAAM,IAAA,eAAK,EAAC;YACvB,GAAG;YACF,MAAM,EAAE,MAAM;YACd,IAAI,EAAE,gBAAgB;YACtB,OAAO,EAAE,OAAO;YAChB,UAAU,EAAE,IAAI,CAAC,cAAc,EAAE;SACrC,CAAC,CAAC;QAEH,oDAAoD;QAEpD;;;;;;;;;;;;UAYE;QAEF,OAAO,MAAM,CAAC;IAClB,CAAC,CAAA;IAED;;;;;;MAME;IAEF,WAAW,GAAG,KAAK,EAAE,KAAa,EAAmB,EAAE;QACnD,OAAO,MAAM,IAAI,CAAC,cAAc,CAAC,WAAW,CAAC,KAAK,EAAE,oBAAQ,CAAC,eAAe,EAAE,IAAI,CAAC,aAAa,CAAC,CAAC;IACtG,CAAC,CAAA;IAED,aAAa,GAAG,KAAK,IAAI,EAAE;QACvB,IAAI,CAAC,kBAAkB,GAAG,MAAM,IAAI,iCAAgB,CAAC,UAAU,CAAC;aAC3D,gBAAgB,CAAC,IAAI,CAAC;aACtB,eAAe,CAAC;YACb,iBAAiB,EAAE,UAAU;YAC7B,0BAA0B;SAC7B,CAAC;aACD,WAAW,CAAC,IAAI,CAAC,QAAQ,CAAC;aAC1B,kBAAkB,CAAC,UAAU,CAAC;aAC9B,KAAK,EAAE,CAAC;QAEb,MAAM,QAAQ,GAAG,IAAI,CAAC,kBAAkB,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC;QAC7D,MAAM,IAAI,GAAG,IAAI,CAAC,kBAAkB,CAAC,OAAO,EAAE,CAAC;QAC/C,MAAM,gBAAgB,GAAG,IAAI,CAAC,kBAAkB,CAAC,YAAY,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC,CAAC;QAEvF,OAAO,CAAC,GAAG,CAAC,OAAO,GAAG,GAAG,IAAI,IAAI,QAAQ,EAAE,CAAC;QAE5C,IAAA,yBAAa,GAAE,CAAC;QAEhB,IAAI,CAAC,eAAe,CAAC,eAAK,CAAC,KAAK,CAAC,cAAc,QAAQ,GAAG,CAAC,CAAC,CAAC;QAC7D,IAAI,CAAC,eAAe,CAAC,eAAK,CAAC,KAAK,CAAC,UAAU,IAAI,GAAG,CAAC,CAAC,CAAC;QACrD,IAAI,CAAC,eAAe,CAAC,eAAK,CAAC,KAAK,CAAC,sBAAsB,gBAAgB,GAAG,CAAC,CAAC,CAAC;QAC7E,IAAI,CAAC,eAAe,CAAC,eAAK,CAAC,KAAK,CAAC,sBAAsB,oBAAQ,CAAC,gBAAgB,GAAG,CAAC,CAAC,CAAC;QACtF,IAAI,CAAC,eAAe,CAAC,eAAK,CAAC,KAAK,CAAC,qCAAqC,oBAAQ,CAAC,+BAAgC,GAAG,CAAC,CAAC,CAAC;IACzH,CAAC,CAAA;IAED,YAAY,GAAG,KAAK,IAAI,EAAE;QACtB,IAAI,IAAI,CAAC,kBAAkB,EAAE,CAAC;YAC1B,MAAM,IAAI,CAAC,kBAAkB,CAAC,IAAI,EAAE,CAAC;YAErC,IAAI,CAAC,eAAe,CAAC,eAAK,CAAC,MAAM,CAAC,gEAAgE,CAAC,CAAC,CAAC;YACrG,IAAI,CAAC,eAAe,CAAC,eAAK,CAAC,MAAM,CAAC,sBAAsB,oBAAQ,CAAC,gBAAgB,GAAG,CAAC,CAAC,CAAC;YACvF,IAAI,CAAC,eAAe,CAAC,eAAK,CAAC,MAAM,CAAC,qCAAqC,oBAAQ,CAAC,+BAAgC,GAAG,CAAC,CAAC,CAAC;QAC1H,CAAC;IACL,CAAC,CAAA;IAED,+IAA+I;IAC/I,8BAA8B;IAC9B,kBAAkB,GAAG,KAAK,IAAI,EAAE;QAC5B,MAAM,oBAAoB,GAAG,MAAM,IAAI,iCAAgB,CAAC,sBAAsB,CAAC;aAC1E,eAAe,CAAC;YACb,OAAO,EAAE,UAAU;YACnB,WAAW,EAAE,UAAU;YACvB,OAAO,EAAE,eAAe,EAAE,oBAAoB;YAC9C,SAAS,EAAE,IAAI;YACf,OAAO,EAAE,GAAG;YACZ,KAAK,EAAE,OAAO;YACd,qBAAqB,EAAE,qDAAqD;YAC5E,sBAAsB,EAAE,sDAAsD;YAC9E,WAAW,EAAE,4BAA4B;SAC5C,CAAC;aACD,WAAW,CAAC,CAAC,MAAM,EAAE,UAAU,EAAE,QAAQ,CAAC,CAAC;aAC3C,WAAW,CAAC,IAAI,CAAC,QAAQ,CAAC;aAC1B,kBAAkB,CAAC,mBAAmB,CAAC;aACvC,gBAAgB,CAAC,qBAAI,CAAC,aAAa,CAAC,+KAA+K,CAAC,CAAC;aACrN,KAAK,EAAE,CAAC;QAEb,MAAM,IAAA,gBAAK,EAAC,GAAG,CAAC,CAAC;QAEjB,MAAM,oBAAoB,CAAC,IAAI,EAAE,CAAC;IACtC,CAAC,CAAA;IAED,gBAAgB,GAAG,KAAK,IAAI,EAAE;QAC1B,IAAI,CAAC,iBAAiB,GAAG,MAAM,IAAI,iCAAgB,CAAC,sBAAsB,CAAC;aACtE,gBAAgB,CAAC,IAAI,CAAC;aACtB,eAAe,CAAC;YACb,OAAO,EAAE,UAAU;YACnB,WAAW,EAAE,UAAU;YACvB,OAAO,EAAE,eAAe;YACxB,SAAS,EAAE,IAAI;YACf,OAAO,EAAE,GAAG;YACZ,KAAK,EAAE,OAAO;YACd,qBAAqB,EAAE,qDAAqD;YAC5E,sBAAsB,EAAE,sDAAsD;YAC9E,WAAW,EAAE,4BAA4B;SAC5C,CAAC;aACD,WAAW,CAAC,IAAI,CAAC,QAAQ,CAAC;aAC1B,kBAAkB,CAAC,eAAe,CAAC;aACnC,gBAAgB,CAAC,qBAAI,CAAC,OAAO,CAAC,uBAAuB,EAAE,IAAI,CAAC,CAAC,QAAQ,EAAE,CAAC,aAAa,EAAE,CAAC;aACxF,KAAK,EAAE,CAAC;QAEb,MAAM,YAAY,GAAG,IAAI,CAAC,iBAAiB,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC;QAEhE,MAAM,IAAA,gBAAK,EAAC,GAAG,CAAC,CAAC;QACjB,IAAI,CAAC,eAAe,CAAC,eAAK,CAAC,KAAK,CAAC,6FAA6F,CAAC,CAAC,CAAC;QACjI,IAAI,CAAC,eAAe,CAAC,eAAK,CAAC,KAAK,CAAC,8DAA8D,YAAY,GAAG,CAAC,CAAC,CAAC;QACjH,IAAI,CAAC,eAAe,CAAC,eAAK,CAAC,KAAK,CAAC,6FAA6F,CAAC,CAAC,CAAC;QAEjI,IAAI,CAAC,SAAS,GAAG,mBAAmB,CAAA;QACpC,IAAI,CAAC,SAAS,GAAG,YAAY,CAAC;QAC9B,IAAI,CAAC,aAAa,GAAG,GAAG,IAAI,CAAC,SAAS,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;IAC/D,CAAC,CAAA;IAED,eAAe,GAAG,KAAK,IAAI,EAAE;QACzB,IAAI,IAAI,CAAC,iBAAiB,EAAE,CAAC;YACzB,MAAM,IAAI,CAAC,iBAAiB,CAAC,IAAI,EAAE,CAAC;YACpC,MAAM,IAAA,gBAAK,EAAC,GAAG,CAAC,CAAC;QACrB,CAAC;IACL,CAAC,CAAA;IAED,kBAAkB,GAAG,KAAK,IAAI,EAAE;QAC5B,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;QAErB,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,sBAAsB,EAAE,gBAAgB,CAAC,CAAC;QAC1E,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QAEnC,IAAI,CAAC,eAAe,CAAC,eAAK,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;QAClE,IAAI,CAAC,eAAe,CAAC,eAAK,CAAC,OAAO,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC;QACzE,IAAI,CAAC,eAAe,CAAC,eAAK,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;QAEtF,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,YAAY,CAAa,CAAC;QACzD,IAAI,CAAC,eAAe,CAAC,eAAK,CAAC,MAAM,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;QACpD,IAAI,CAAC,eAAe,CAAC,eAAK,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;QAEvF,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAiB,CAAC;QAE9D,MAAM,wBAAwB,GAAG;YAC7B,GAAG,EAAE,gBAAgB;YACrB,KAAK,EAAE,MAAM,CAAC,cAAc,CAAC,IAAI,CAAC,4BAA4B,CAAC;YAC/D,IAAI,EAAE,GAAG;YACT,MAAM,EAAE,IAAI;YACZ,QAAQ,EAAE,IAAI;YACd,QAAQ,EAAE,QAAQ;SACrB,CAAA;QAED,MAAM,YAAY,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC;QACxD,MAAM,CAAC,YAAY,CAAC,CAAC,aAAa,CAAC,wBAAwB,CAAC,CAAC;QAE7D,MAAM,gBAAgB,GAAG,IAAI,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QAClD,MAAM,CAAC,gBAAgB,CAAC,OAAO,EAAE,CAAC,CAAC,eAAe,CAAC,IAAI,IAAI,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC;QAEzE,MAAM,aAAa,GAAG;YAClB,SAAS,EAAE,MAAM,CAAC,cAAc,CAAC,IAAI,CAAC,eAAe,CAAC;YACtD,QAAQ,EAAE,MAAM,CAAC,cAAc,CAAC,IAAI,CAAC,SAAS,CAAC;YAC/C,eAAe,EAAE;gBACb,yDAAyD;gBACzD,uDAAuD;gBACvD,yDAAyD;gBACzD,yDAAyD;aAC5D;SACJ,CAAA;QACD,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,aAAa,CAAC,aAAa,CAAC,CAAC;IAC5D,CAAC,CAAA;CAqBJ;AApTD,gCAoTC"}

package/src/authutilsnode.ts

@@ -1,360 +0,0 @@
-import tough from 'tough-cookie';
-import https from 'https'
-import jwt from 'jsonwebtoken';
-import { jwtDecode } from "jwt-decode";
-import jwksClient from 'jwks-rsa';
-
-import axios from 'axios';
-
-import { goptions } from '@nsshunt/stsconfig'
-
-import { GetErrorPayload, ISTSLogger, JSONObject } from '@nsshunt/stsutils'
-
-import { AppFrameworkErrorCode } from './validation/errors'
-
-import { StatusCodes } from 'http-status-codes';
-
-import chalk from 'chalk';
-
-import { Gauge, PublishInstrumentController } from '@nsshunt/stsobservability'
-
-import { iss } from './commonTypes'
-
-export interface IAuthUtilsNodeOptions {
-    permissions: string[]
-}
-
-export interface IGetAPITokenFromAuthServerUsingScopeOptions {
-    clientId: string
-    authClientSecret: string
-    scope: string
-    endPoint: string
-    instrumentController?: PublishInstrumentController
-    outputErrorsToConsole?: boolean
-}
-
-declare interface ICacheScopeRecord {
-    scope: string
-    timeout: NodeJS.Timeout
-}
-
-declare interface ICacheRecord {
-    scopes: Record<string, ICacheScopeRecord>
-}
-
-export class AuthUtilsNode
-{
-    #cache: Record<string, ICacheRecord> = { };
-    #cacheTimeout: number = 1000;
-    #logger: ISTSLogger
-    #cookiejar: tough.CookieJar;
-    #httpsAgent: https.Agent | null = null;
-    // Regular expression to match the origin
-    #originRegex = /^(api:\/\/\w+)/;
-
-    constructor(logger: ISTSLogger) {
-        this.#logger = logger;
-        this.#cookiejar = new tough.CookieJar();
-    }
-
-    // eslint-disable-next-line @typescript-eslint/no-explicit-any
-    #LogDebugMessage(message: any) {
-        this.#logger.debug(message);
-    }
-
-    #GetHttpsAgent = () => {
-        if (this.#httpsAgent === null) {
-            // https://nodejs.org/api/http.html#class-httpagent
-            this.#httpsAgent = new https.Agent({ 
-                keepAlive: goptions.keepAlive,
-                maxSockets: goptions.maxSockets,
-                maxTotalSockets: goptions.maxTotalSockets,
-                maxFreeSockets: goptions.maxFreeSockets,
-                timeout: goptions.timeout,
-                rejectUnauthorized: false
-            });
-        }
-        return this.#httpsAgent;
-    }
-
-    ResetAgent = () => {
-        this.#httpsAgent = null;
-    }
-
-    VerifyRequestMiddlewareFactory = (options: IAuthUtilsNodeOptions) => {
-        // eslint-disable-next-line @typescript-eslint/no-explicit-any
-        return async (req: any, res: any, next: any) => {
-            if (options.permissions) {
-
-                const permissionsKey = options.permissions.join('_');
-                const scopeKey = (req.auth.scope as string).split(' ').join('_');
-
-                if (this.#cache[permissionsKey] && this.#cache[permissionsKey].scopes[scopeKey]) {
-                    next();
-                    return;
-                }
-
-                const scopes = req.auth.scope.split(' ');
-
-                const requiredPermissions = [ ];
-                for (let i=0; i < options.permissions.length; i++) {
-                    const permission = options.permissions[i];
-                    if (!scopes.includes(permission)) {
-                        requiredPermissions.push(permission);
-                    }
-                }
-                if (requiredPermissions.length > 0) {
-                    const errorPayload = GetErrorPayload(AppFrameworkErrorCode.APPFRAMEWORK_MISSING_PERMISSION, requiredPermissions);
-                    res.status(StatusCodes.UNAUTHORIZED).send( { status: StatusCodes.UNAUTHORIZED, error: errorPayload });
-                    return;
-                }
-
-                if (!this.#cache[permissionsKey]) {
-                    this.#cache[permissionsKey] = {
-                        scopes: { }
-                    }
-                }
-
-                this.#cache[permissionsKey].scopes[scopeKey] = {
-                    scope: scopeKey,
-                    timeout: setTimeout(() => {
-                        delete this.#cache[permissionsKey].scopes[scopeKey]
-                    }, this.#cacheTimeout).unref()
-                }
-            }
-            next();
-        }
-    }
-    /*
-	let cookies = await this.GetCookiesFromJar();
-	const valid = this.#ValidateCookies(cookies);
-	if (valid) {
-		next();
-	} else {
-		const error = { }; //@@
-		const invalidToken = false; //@@
-		if (invalidToken)
-		{
-			res.status(StatusCodes.UNAUTHORIZED).send( { status: StatusCodes.UNAUTHORIZED, error: 'Invalid Token', detail: error } );
-		} else{
-			res.status(StatusCodes.INTERNAL_SERVER_ERROR).send( { status: StatusCodes.INTERNAL_SERVER_ERROR, error: 'Operation was not successful', detail: error } );
-		}
-	}
-	*/
-
-    // eslint-disable-next-line @typescript-eslint/no-explicit-any
-    async verifyRequestMiddleware(req: any, res: any, next: any)
-    {
-        next();
-        /*
-		
-		let cookies = await this.GetCookiesFromJar();
-
-		const valid = this.#ValidateCookies(cookies);
-
-		if (valid) {
-			next();
-		} else {
-			const error = { }; //@@
-			const invalidToken = false; //@@
-			if (invalidToken)
-			{
-				res.status(StatusCodes.UNAUTHORIZED).send( { status: StatusCodes.UNAUTHORIZED, error: 'Invalid Token', detail: error } );
-			} else{
-				res.status(StatusCodes.INTERNAL_SERVER_ERROR).send( { status: StatusCodes.INTERNAL_SERVER_ERROR, error: 'Operation was not successful', detail: error } );
-			}
-		}
-		*/
-    }
-
-    // eslint-disable-next-line @typescript-eslint/no-explicit-any
-    SetCookiesToJar = async (headers: Record<string, any>, endpoint: string): Promise<tough.Cookie[]> =>
-    {
-        if (headers['set-cookie']) {
-            // eslint-disable-next-line @typescript-eslint/no-explicit-any
-            headers['set-cookie'].map((headerCookie: any) => {
-                // eslint-disable-next-line @typescript-eslint/no-explicit-any
-                const cookie: any = tough.Cookie.parse(headerCookie);
-                this.#cookiejar.setCookieSync(cookie, endpoint);
-            });
-        } else {
-            // eslint-disable-next-line @typescript-eslint/no-explicit-any
-            const cookie: any = tough.Cookie.parse(headers['set-cookie']);
-            this.#cookiejar.setCookieSync(cookie, endpoint);
-        }
-
-        return this.#cookiejar.getCookies(endpoint);
-    };
-
-    GetCookiesFromJar = async (endpoint: string): Promise<tough.Cookie[]> =>
-    {
-        return this.#cookiejar.getCookies(endpoint);
-    };
-
-    ValidateJWT = async (token: string, audience: string, endpoint?: string): Promise<string> => {
-        const jwksClientUri = (endpoint 
-            ? `${endpoint}${goptions.asoauthapiroot}${goptions.asjwksjsonpath}` 
-            : `${goptions.asendpoint}:${goptions.asport}${goptions.asoauthapiroot}${goptions.asjwksjsonpath}`);
-
-        const jwks = jwksClient({
-            cache: true, //@@ all config items
-            cacheMaxEntries: 5, // Default value
-            cacheMaxAge: 600000, // Defaults to 10m
-            rateLimit: true,
-            jwksRequestsPerMinute: 10, // Default value
-            jwksUri: jwksClientUri,
-            timeout: 30000, //@@ config
-            requestAgent: this.#GetHttpsAgent()
-        });
-
-        // Use decode to get the kid
-        const decodedRefreshToken = jwtDecode<JSONObject>(token, { header: true });
-        const kid = decodedRefreshToken.kid;
-
-        const key = await jwks.getSigningKey(kid);
-        const signingKey = key.getPublicKey();
-		
-        const verifyOptions = {
-            issuer: iss,
-            //subject:  s,
-            audience:  audience,
-            //expiresIn:  600, // 10 minutes
-            algorithm:  ["RS256"]   // RSASSA [ "RS256", "RS384", "RS512" ]
-        };
-
-        return jwt.verify(token, signingKey, verifyOptions) as string;
-    }
-
-    // Function to extract the origin from a URI
-    ExtractOrigin = (uri: string) => {
-        const match = uri.match(this.#originRegex);
-        return match ? match[1] : null;
-    }
-
-    GetAPITokenFromAuthServerUsingScope = async (options: IGetAPITokenFromAuthServerUsingScopeOptions, errorCb: (error: Error) => void): Promise<string> => {
-        const { scope, clientId, authClientSecret, endPoint, instrumentController, outputErrorsToConsole } = options;
-
-        let stage = '1';
-
-        const invokeErrorCb = (error: Error) => {
-            this.#LogDebugMessage(error);
-            if (instrumentController) {
-                instrumentController.UpdateInstrument(Gauge.AUTHENTICATION_ERROR_COUNT_GAUGE, { // auth error
-                    Inc: 1
-                });
-            }
-            errorCb(error);
-        };
-
-        try {
-            stage = '2';
-            const scopes = scope.split(' ');
-            let origin: string | null = null;
-            let error: Error | null = null;
-            stage = '3';
-            for (let i=0; i < scopes.length; i++) {
-                const s = scopes[i];
-                if (!origin) {
-                    origin = this.ExtractOrigin(s);
-                    if (!origin) {
-                        error = new Error(`Scope: [${scope}] not in required format. Must use (space seperated) api://<client id>[/<resource>.<permission>].`);
-                        break;
-                    }
-                } else {
-                    const nextOrigin: string | null = this.ExtractOrigin(s);
-                    if (!nextOrigin) {
-                        error = new Error(`Scope: [${scope}] not in required format. Must use (space seperated) api://<client id>[/<resource>.<permission>].`);
-                        break;
-                    } else {
-                        if (origin.localeCompare(nextOrigin) !== 0) {
-                            error = new Error(`Scope: [${scope}] not all from the same client API. All scopes must come from the same client API.`);
-                            break;
-                        }
-                    }
-                }
-            }
-            stage = '4';
-            if (error) {
-                invokeErrorCb(error);
-                return "";
-            }
-
-            stage = '5';
-            const headers = { 'Content-Type': 'application/json'};
-            const payload = { //@@ make a type
-                client_id: clientId, // The service calling this method
-                client_secret: authClientSecret, // Auth service client secret
-                //client_secret: goptions.brokerclientsecret, // Broker service client secret
-                scope: scope, // required API
-                //@@ remove audience
-                //@@ need scope to be the API identifier
-                grant_type: "client_credentials"
-            }
-            stage = '6';
-            const url = (endPoint 
-                ? `${endPoint}${goptions.asoauthapiroot}/token`
-                : `${goptions.asendpoint}:${goptions.asport}${goptions.asoauthapiroot}/token`);
-
-            stage = `6.5: url: [${url}] payload: [${JSON.stringify(payload)}]`
-
-            const retVal = await axios({
-                url
-                ,method: 'post'
-                ,data: payload
-                ,headers: headers
-                ,httpsAgent: this.#GetHttpsAgent()
-            });
-
-            stage = '7';
-            if (retVal.status) {
-                if (retVal.status !== 200) {
-                    // Just provide a warning here
-                    this.#LogDebugMessage(chalk.magenta(`Error (AuthUtilsNode:GetAPITokenFromServer): Invalid response from server: [${retVal.status}]`));
-                }
-            } else {
-                invokeErrorCb(new Error(chalk.red(`Error (AuthUtilsNode:GetAPITokenFromServer:No retVal.status)`)));
-                return "";
-            }
-            stage = '8';
-            if (retVal.data) {
-                stage = '9';
-                if (retVal.data.access_token) {
-                    stage = '10';
-                    if (instrumentController) {
-                        stage = '11';
-                        instrumentController.UpdateInstrument(Gauge.AUTHENTICATION_COUNT_GAUGE, {
-                            Inc: 1
-                        });
-                    }
-    
-                    stage = '12';
-                    return retVal.data.access_token as string;
-                } else {
-                    stage = '13';
-                    invokeErrorCb(new Error(`Error (AuthUtilsNode:GetAPITokenFromServer:No retVal.data.access_token)`));
-                    return "";
-                }
-            } else {
-                stage = '14';
-                invokeErrorCb(new Error(`Error (AuthUtilsNode:GetAPITokenFromServer:No retVal.data)`));
-                return "";
-            }
-        // eslint-disable-next-line @typescript-eslint/no-explicit-any
-        } catch (error: any) {
-            if (outputErrorsToConsole === true) {
-                console.error(error);
-            }
-            let details = 'None available.';
-            if (error.response && error.response.data) {
-                try {
-                    details = JSON.stringify(error.response.data);
-                // eslint-disable-next-line @typescript-eslint/no-unused-vars
-                } catch (error) {
-                    details = `Could not JSON.stringify(error.response.data)`;
-                }
-            }
-            invokeErrorCb(new Error(`Error (AuthUtilsNode:GetAPITokenFromServer:catch): [${error}], Stage: [${stage}], Details: [${details}]`));
-            return "";
-        }
-    }
-}