@nsshunt/stsauthclient 1.0.20 → 1.0.22

package/dist/stsauthclient.mjs

@@ -9,14 +9,14 @@ var __privateGet = (obj, member, getter) => (__accessCheck(obj, member, "read fr
 var __privateAdd = (obj, member, value) => member.has(obj) ? __typeError("Cannot add the same private member more than once") : member instanceof WeakSet ? member.add(obj) : member.set(obj, value);
 var __privateSet = (obj, member, value, setter) => (__accessCheck(obj, member, "write to private field"), setter ? setter.call(obj, value) : member.set(obj, value), value);
 var __privateMethod = (obj, member, method) => (__accessCheck(obj, member, "access private method"), method);
-var _options, _logger, _agentManager, _cache, _cacheTimeout, _logger2, _cookiejar, _originRegex, _agentManager2, _AuthUtilsNode_instances, LogDebugMessage_fn;
+var _options, _options2, _cache, _cacheTimeout, _cookiejar, _originRegex, _AuthUtilsNode_instances, LogDebugMessage_fn;
 import axios from "axios";
-import { AgentManager, STSAxiosConfig, goptions } from "@nsshunt/stsconfig";
+import { STSAxiosConfig, GetErrorPayload } from "@nsshunt/stsutils";
 import tough from "tough-cookie";
 import jwt from "jsonwebtoken";
 import { jwtDecode } from "jwt-decode";
 import jwksClient from "jwks-rsa";
-import { GetErrorPayload } from "@nsshunt/stsutils";
+import { goptions } from "@nsshunt/stsconfig";
 import chalk from "chalk";
 import { Gauge } from "@nsshunt/stsobservability";
 const iss = `https://stscore.stsmda.org/oauth2/v2.0`;
@@ -87,12 +87,9 @@ var StatusCodes;
   StatusCodes2[StatusCodes2["INSUFFICIENT_STORAGE"] = 507] = "INSUFFICIENT_STORAGE";
   StatusCodes2[StatusCodes2["NETWORK_AUTHENTICATION_REQUIRED"] = 511] = "NETWORK_AUTHENTICATION_REQUIRED";
 })(StatusCodes || (StatusCodes = {}));
-const isNode = Object.prototype.toString.call(typeof process !== "undefined" ? process : 0) === "[object process]";
 class ResourceManager {
-  constructor(options, logger) {
+  constructor(options) {
     __privateAdd(this, _options);
-    __privateAdd(this, _logger);
-    __privateAdd(this, _agentManager, null);
     // eslint-disable-next-line  @typescript-eslint/no-explicit-any
     __publicField(this, "GetErrorMessage", (status, error, detail) => {
       return {
@@ -112,8 +109,8 @@ class ResourceManager {
     });
     __publicField(this, "GetResult", async (accessToken, url, method, requestData, errorCb) => {
       const axiosConfig = new STSAxiosConfig(url, method, this.GetHeaders(accessToken), this.options.timeout);
-      if (__privateGet(this, _agentManager)) {
-        axiosConfig.withAgentManager(__privateGet(this, _agentManager));
+      if (__privateGet(this, _options).agentManager) {
+        axiosConfig.withAgentManager(__privateGet(this, _options).agentManager);
       }
       if (requestData !== null) {
         axiosConfig.withData(requestData);
@@ -140,43 +137,35 @@ class ResourceManager {
       }
     });
     __privateSet(this, _options, options);
-    __privateSet(this, _logger, logger);
     this.LogDebugMessage(`STSOAuth2Worker:constructor:#options: [${JSON.stringify(__privateGet(this, _options))}]`);
-    if (isNode) {
-      if (__privateGet(this, _options).agentOptions) {
-        __privateSet(this, _agentManager, new AgentManager({
-          agentOptions: __privateGet(this, _options).agentOptions
-        }));
-      } else {
-        __privateSet(this, _agentManager, new AgentManager({}));
-      }
-    }
   }
   get agentManager() {
-    return __privateGet(this, _agentManager);
+    if (__privateGet(this, _options).agentManager) {
+      return __privateGet(this, _options).agentManager;
+    } else {
+      return null;
+    }
   }
   get options() {
     return __privateGet(this, _options);
   }
   // eslint-disable-next-line  @typescript-eslint/no-explicit-any
   LogDebugMessage(message) {
-    __privateGet(this, _logger).debug(message);
+    __privateGet(this, _options).logger.debug(message);
   }
   // eslint-disable-next-line  @typescript-eslint/no-explicit-any
   LogInfoMessage(message) {
-    __privateGet(this, _logger).info(message);
+    __privateGet(this, _options).logger.info(message);
   }
   // eslint-disable-next-line  @typescript-eslint/no-explicit-any
   LogErrorMessage(message) {
-    __privateGet(this, _logger).error(message);
+    __privateGet(this, _options).logger.error(message);
   }
 }
 _options = new WeakMap();
-_logger = new WeakMap();
-_agentManager = new WeakMap();
 class SessionManager extends ResourceManager {
-  constructor(options, logger) {
-    super(options, logger);
+  constructor(options) {
+    super(options);
     __publicField(this, "GetSession", async (access_token, sessionId, errorCb) => {
       try {
         return this.GetResult(access_token, `${this.options.asendpoint}/session/${encodeURIComponent(sessionId)}`, "get", null, errorCb);
@@ -200,17 +189,18 @@ class SessionManager extends ResourceManager {
   }
 }
 class AuthUtilsNode {
-  constructor(logger) {
+  constructor(options) {
     __privateAdd(this, _AuthUtilsNode_instances);
+    __privateAdd(this, _options2);
     __privateAdd(this, _cache, {});
     __privateAdd(this, _cacheTimeout, 1e3);
-    __privateAdd(this, _logger2);
     __privateAdd(this, _cookiejar);
     // Regular expression to match the origin
     __privateAdd(this, _originRegex, /^(api:\/\/\w+)/);
-    __privateAdd(this, _agentManager2, new AgentManager({}));
     __publicField(this, "ResetAgent", () => {
-      __privateGet(this, _agentManager2).ResetAgent();
+      if (__privateGet(this, _options2).agentManager) {
+        __privateGet(this, _options2).agentManager.ResetAgent();
+      }
     });
     __publicField(this, "VerifyRequestMiddlewareFactory", (options) => {
       return async (req, res, next) => {
@@ -267,7 +257,7 @@ class AuthUtilsNode {
     });
     __publicField(this, "ValidateJWT", async (token, audience, endpoint) => {
       const jwksClientUri = endpoint ? `${endpoint}${goptions.asoauthapiroot}${goptions.asjwksjsonpath}` : `${goptions.asendpoint}:${goptions.asport}${goptions.asoauthapiroot}${goptions.asjwksjsonpath}`;
-      const jwks = jwksClient({
+      const jwksClientOptions = {
         cache: true,
         //@@ all config items
         cacheMaxEntries: 5,
@@ -278,11 +268,13 @@ class AuthUtilsNode {
         jwksRequestsPerMinute: 10,
         // Default value
         jwksUri: jwksClientUri,
-        timeout: 3e4,
+        timeout: 3e4
         //@@ config
-        // eslint-disable-next-line @typescript-eslint/no-explicit-any
-        requestAgent: __privateGet(this, _agentManager2).GetAgent(jwksClientUri)
-      });
+      };
+      if (__privateGet(this, _options2).agentManager) {
+        jwksClientOptions.requestAgent = __privateGet(this, _options2).agentManager.GetAgent(jwksClientUri);
+      }
+      const jwks = jwksClient(jwksClientOptions);
       const decodedRefreshToken = jwtDecode(token, { header: true });
       const kid = decodedRefreshToken.kid;
       const key = await jwks.getSigningKey(kid);
@@ -364,7 +356,11 @@ class AuthUtilsNode {
         stage = "6";
         const url = endPoint ? `${endPoint}${goptions.asoauthapiroot}/token` : `${goptions.asendpoint}:${goptions.asport}${goptions.asoauthapiroot}/token`;
         stage = `6.5: url: [${url}] payload: [${JSON.stringify(payload)}]`;
-        const retVal = await axios(new STSAxiosConfig(url, "post").withDefaultHeaders().withData(payload).withAgentManager(__privateGet(this, _agentManager2)).config);
+        const axiosConfig = new STSAxiosConfig(url, "post").withDefaultHeaders().withData(payload);
+        if (__privateGet(this, _options2).agentManager) {
+          axiosConfig.withAgentManager(__privateGet(this, _options2).agentManager);
+        }
+        const retVal = await axios(axiosConfig.config);
         stage = "7";
         if (retVal.status) {
           if (retVal.status !== 200) {
@@ -413,11 +409,11 @@ class AuthUtilsNode {
         return "";
       }
     });
-    __privateSet(this, _logger2, logger);
+    __privateSet(this, _options2, options);
     __privateSet(this, _cookiejar, new tough.CookieJar());
   }
   get agentManager() {
-    return __privateGet(this, _agentManager2);
+    return __privateGet(this, _options2).agentManager;
   }
   /*
   let cookies = await this.GetCookiesFromJar();
@@ -440,16 +436,15 @@ class AuthUtilsNode {
     next();
   }
 }
+_options2 = new WeakMap();
 _cache = new WeakMap();
 _cacheTimeout = new WeakMap();
-_logger2 = new WeakMap();
 _cookiejar = new WeakMap();
 _originRegex = new WeakMap();
-_agentManager2 = new WeakMap();
 _AuthUtilsNode_instances = new WeakSet();
 // eslint-disable-next-line @typescript-eslint/no-explicit-any
 LogDebugMessage_fn = function(message) {
-  __privateGet(this, _logger2).debug(message);
+  __privateGet(this, _options2).logger.debug(message);
 };
 export {
   AuthUtilsNode,

package/dist/stsauthclient.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"stsauthclient.mjs","sources":["../src/commonTypes.ts","../node_modules/http-status-codes/build/es/status-codes.js","../node_modules/detect-node/index.esm.js","../src/resourceManager.ts","../src/sessionManager.ts","../src/authutilsnode.ts"],"sourcesContent":["import { StatusCodes } from 'http-status-codes'\n\nimport { OIDCStandardClaim, OAuth2ParameterType } from '@nsshunt/stsutils';\n\nexport interface ISTSResourceManagerOptions {\n\ttimeout: number\n    asendpoint: string;\n\tagentOptions?: {\n\t\tkeepAlive: boolean\n\t\tmaxSockets: number\n\t\tmaxTotalSockets: number\n\t\tmaxFreeSockets: number\n        timeout: number\n\t\trejectUnauthorized: boolean\n\t}\n}\n\nexport interface ISTSAuthPayload {\n\tsessionId: string,\n\tid_token: string,\n\tconsentRequired: string[],\n\tremainingAdminConsentRequired: string[],\n\tremainingUserConsentRequired: string[],\n\tauthorizationCode?: string\n\tscope: string\n\tclientName: string\n}\n\nexport interface ISTSLogoutPayload {\n\tsessionId: string\n}\n\nexport interface ISTSConsent {\n    consent: string[]\n}\n\nexport interface ISTSTokenPayload {\n    access_token: string,\n    token_type: \"Bearer\",\n    expires_in: number,\n    refresh_token: string,\n    id_token: string,\n    scope?: string\n}\n\nexport interface ISTSSessionResource { \n    sessionId: string\n    sessionState: string\n    id_token: string\n    consentCurrent: string[]\n    consentRequired: string[]\n    remainingAdminConsentRequired: string[]\n    remainingUserConsentRequired: string[]\n    consentNonce?: string\n    audience: string\n    permissions: string\n    subject: string\n    authorizationCode: string\n    authorizationCodeState: string\n    userId: string\n\n    // Client query paramaters (mandatory)\n    client_id: string\n    response_type: string\n    redirect_uri: string\n    scope: string // Microsoft uses '+' instead of ' ' to seperate scopes - update the string if we have '+' characters\n    state: string\n\n    code_challenge?: string\n    code_challenge_method?: string\n    nonce?: string\n    response_mode?: string\n\n    tokenPayload?: ISTSTokenPayload\n}\n\nexport interface ISTSLoginQueryParams {\n    email: string\n    password: string\n    [OAuth2ParameterType.CLIENT_ID]: string\n    nonce: string\n    [OAuth2ParameterType.RESPONSE_TYPE]: string\n    [OAuth2ParameterType.REDIRECT_URI]: string\n    [OAuth2ParameterType.RESPONSE_MODE]: string\n    [OAuth2ParameterType.SCOPE]: string\n    [OAuth2ParameterType.STATE]: string\n    code_challenge: string\n    code_challenge_method: string\n}\n\nexport interface ISTSUser {\n    id: string\n    name: string\n    email: string\n    hash: string\n    roles: string[]\n}\n\nexport interface ISTSAuthorizationCodeResource {\n    sessionId: string\n}\n\nexport interface ISTSClaims {\n    iss: string, // issuer - server that issues the tokens\n    sub: string, // subject - normally the resource (e.g. https://stsmda.com.au/myresource01/) or the user (for id_token)\n    //aud: audience, // audience (normally the API) (e.g. https://stsmda.com.au/myresource01api/)\n    exp: number,  // expires\n    iat: number, // issues at\n    // OIDC claims\n    [OIDCStandardClaim.NAME]: string\n    [OIDCStandardClaim.EMAIL]: string,\n    // STS Custom claims\n    sts_user_id: string\n    // eslint-disable-next-line  @typescript-eslint/no-explicit-any\n    sts_user_roles: any\n    //alg: 'RS256'\n    [OIDCStandardClaim.NONCE]?: string\n}\n\nexport interface ISTSResourceEx<T> {\n    status: StatusCodes;\n    error?: string;\n    sourceError?: Error;\n    detail?: T;\n}\n\nexport interface ISTSError {\n    status: StatusCodes;\n    error: string;\n    // eslint-disable-next-line  @typescript-eslint/no-explicit-any\n    detail: any;\n}\n\nexport const iss = `https://stscore.stsmda.org/oauth2/v2.0`;\n\nexport const STSAuthClientErrorCode = Object.freeze({\n    STS_AC_MISSING_PERMISSION: {\n        code: 'STS_AFC0001',\n        description: 'STS_AC_0001: Missing Permission(s).'\n    },\n});\n","// Generated file. Do not edit\nexport var StatusCodes;\n(function (StatusCodes) {\n    /**\n     * Official Documentation @ https://tools.ietf.org/html/rfc7231#section-6.2.1\n     *\n     * This interim response indicates that everything so far is OK and that the client should continue with the request or ignore it if it is already finished.\n     */\n    StatusCodes[StatusCodes[\"CONTINUE\"] = 100] = \"CONTINUE\";\n    /**\n     * Official Documentation @ https://tools.ietf.org/html/rfc7231#section-6.2.2\n     *\n     * This code is sent in response to an Upgrade request header by the client, and indicates the protocol the server is switching too.\n     */\n    StatusCodes[StatusCodes[\"SWITCHING_PROTOCOLS\"] = 101] = \"SWITCHING_PROTOCOLS\";\n    /**\n     * Official Documentation @ https://tools.ietf.org/html/rfc2518#section-10.1\n     *\n     * This code indicates that the server has received and is processing the request, but no response is available yet.\n     */\n    StatusCodes[StatusCodes[\"PROCESSING\"] = 102] = \"PROCESSING\";\n    /**\n     * Official Documentation @ https://www.rfc-editor.org/rfc/rfc8297#page-3\n     *\n     * This code indicates to the client that the server is likely to send a final response with the header fields included in the informational response.\n     */\n    StatusCodes[StatusCodes[\"EARLY_HINTS\"] = 103] = \"EARLY_HINTS\";\n    /**\n     * Official Documentation @ https://tools.ietf.org/html/rfc7231#section-6.3.1\n     *\n     * The request has succeeded. The meaning of a success varies depending on the HTTP method:\n     * GET: The resource has been fetched and is transmitted in the message body.\n     * HEAD: The entity headers are in the message body.\n     * POST: The resource describing the result of the action is transmitted in the message body.\n     * TRACE: The message body contains the request message as received by the server\n     */\n    StatusCodes[StatusCodes[\"OK\"] = 200] = \"OK\";\n    /**\n     * Official Documentation @ https://tools.ietf.org/html/rfc7231#section-6.3.2\n     *\n     * The request has succeeded and a new resource has been created as a result of it. This is typically the response sent after a PUT request.\n     */\n    StatusCodes[StatusCodes[\"CREATED\"] = 201] = \"CREATED\";\n    /**\n     * Official Documentation @ https://tools.ietf.org/html/rfc7231#section-6.3.3\n     *\n     * The request has been received but not yet acted upon. It is non-committal, meaning that there is no way in HTTP to later send an asynchronous response indicating the outcome of processing the request. It is intended for cases where another process or server handles the request, or for batch processing.\n     */\n    StatusCodes[StatusCodes[\"ACCEPTED\"] = 202] = \"ACCEPTED\";\n    /**\n     * Official Documentation @ https://tools.ietf.org/html/rfc7231#section-6.3.4\n     *\n     * This response code means returned meta-information set is not exact set as available from the origin server, but collected from a local or a third party copy. Except this condition, 200 OK response should be preferred instead of this response.\n     */\n    StatusCodes[StatusCodes[\"NON_AUTHORITATIVE_INFORMATION\"] = 203] = \"NON_AUTHORITATIVE_INFORMATION\";\n    /**\n     * Official Documentation @ https://tools.ietf.org/html/rfc7231#section-6.3.5\n     *\n     * There is no content to send for this request, but the headers may be useful. The user-agent may update its cached headers for this resource with the new ones.\n     */\n    StatusCodes[StatusCodes[\"NO_CONTENT\"] = 204] = \"NO_CONTENT\";\n    /**\n     * Official Documentation @ https://tools.ietf.org/html/rfc7231#section-6.3.6\n     *\n     * This response code is sent after accomplishing request to tell user agent reset document view which sent this request.\n     */\n    StatusCodes[StatusCodes[\"RESET_CONTENT\"] = 205] = \"RESET_CONTENT\";\n    /**\n     * Official Documentation @ https://tools.ietf.org/html/rfc7233#section-4.1\n     *\n     * This response code is used because of range header sent by the client to separate download into multiple streams.\n     */\n    StatusCodes[StatusCodes[\"PARTIAL_CONTENT\"] = 206] = \"PARTIAL_CONTENT\";\n    /**\n     * Official Documentation @ https://tools.ietf.org/html/rfc2518#section-10.2\n     *\n     * A Multi-Status response conveys information about multiple resources in situations where multiple status codes might be appropriate.\n     */\n    StatusCodes[StatusCodes[\"MULTI_STATUS\"] = 207] = \"MULTI_STATUS\";\n    /**\n     * Official Documentation @ https://tools.ietf.org/html/rfc7231#section-6.4.1\n     *\n     * The request has more than one possible responses. User-agent or user should choose one of them. There is no standardized way to choose one of the responses.\n     */\n    StatusCodes[StatusCodes[\"MULTIPLE_CHOICES\"] = 300] = \"MULTIPLE_CHOICES\";\n    /**\n     * Official Documentation @ https://tools.ietf.org/html/rfc7231#section-6.4.2\n     *\n     * This response code means that URI of requested resource has been changed. Probably, new URI would be given in the response.\n     */\n    StatusCodes[StatusCodes[\"MOVED_PERMANENTLY\"] = 301] = \"MOVED_PERMANENTLY\";\n    /**\n     * Official Documentation @ https://tools.ietf.org/html/rfc7231#section-6.4.3\n     *\n     * This response code means that URI of requested resource has been changed temporarily. New changes in the URI might be made in the future. Therefore, this same URI should be used by the client in future requests.\n     */\n    StatusCodes[StatusCodes[\"MOVED_TEMPORARILY\"] = 302] = \"MOVED_TEMPORARILY\";\n    /**\n     * Official Documentation @ https://tools.ietf.org/html/rfc7231#section-6.4.4\n     *\n     * Server sent this response to directing client to get requested resource to another URI with an GET request.\n     */\n    StatusCodes[StatusCodes[\"SEE_OTHER\"] = 303] = \"SEE_OTHER\";\n    /**\n     * Official Documentation @ https://tools.ietf.org/html/rfc7232#section-4.1\n     *\n     * This is used for caching purposes. It is telling to client that response has not been modified. So, client can continue to use same cached version of response.\n     */\n    StatusCodes[StatusCodes[\"NOT_MODIFIED\"] = 304] = \"NOT_MODIFIED\";\n    /**\n     * @deprecated\n     * Official Documentation @ https://tools.ietf.org/html/rfc7231#section-6.4.6\n     *\n     * Was defined in a previous version of the HTTP specification to indicate that a requested response must be accessed by a proxy. It has been deprecated due to security concerns regarding in-band configuration of a proxy.\n     */\n    StatusCodes[StatusCodes[\"USE_PROXY\"] = 305] = \"USE_PROXY\";\n    /**\n     * Official Documentation @ https://tools.ietf.org/html/rfc7231#section-6.4.7\n     *\n     * Server sent this response to directing client to get requested resource to another URI with same method that used prior request. This has the same semantic than the 302 Found HTTP response code, with the exception that the user agent must not change the HTTP method used: if a POST was used in the first request, a POST must be used in the second request.\n     */\n    StatusCodes[StatusCodes[\"TEMPORARY_REDIRECT\"] = 307] = \"TEMPORARY_REDIRECT\";\n    /**\n     * Official Documentation @ https://tools.ietf.org/html/rfc7538#section-3\n     *\n     * This means that the resource is now permanently located at another URI, specified by the Location: HTTP Response header. This has the same semantics as the 301 Moved Permanently HTTP response code, with the exception that the user agent must not change the HTTP method used: if a POST was used in the first request, a POST must be used in the second request.\n     */\n    StatusCodes[StatusCodes[\"PERMANENT_REDIRECT\"] = 308] = \"PERMANENT_REDIRECT\";\n    /**\n     * Official Documentation @ https://tools.ietf.org/html/rfc7231#section-6.5.1\n     *\n     * This response means that server could not understand the request due to invalid syntax.\n     */\n    StatusCodes[StatusCodes[\"BAD_REQUEST\"] = 400] = \"BAD_REQUEST\";\n    /**\n     * Official Documentation @ https://tools.ietf.org/html/rfc7235#section-3.1\n     *\n     * Although the HTTP standard specifies \"unauthorized\", semantically this response means \"unauthenticated\". That is, the client must authenticate itself to get the requested response.\n     */\n    StatusCodes[StatusCodes[\"UNAUTHORIZED\"] = 401] = \"UNAUTHORIZED\";\n    /**\n     * Official Documentation @ https://tools.ietf.org/html/rfc7231#section-6.5.2\n     *\n     * This response code is reserved for future use. Initial aim for creating this code was using it for digital payment systems however this is not used currently.\n     */\n    StatusCodes[StatusCodes[\"PAYMENT_REQUIRED\"] = 402] = \"PAYMENT_REQUIRED\";\n    /**\n     * Official Documentation @ https://tools.ietf.org/html/rfc7231#section-6.5.3\n     *\n     * The client does not have access rights to the content, i.e. they are unauthorized, so server is rejecting to give proper response. Unlike 401, the client's identity is known to the server.\n     */\n    StatusCodes[StatusCodes[\"FORBIDDEN\"] = 403] = \"FORBIDDEN\";\n    /**\n     * Official Documentation @ https://tools.ietf.org/html/rfc7231#section-6.5.4\n     *\n     * The server can not find requested resource. In the browser, this means the URL is not recognized. In an API, this can also mean that the endpoint is valid but the resource itself does not exist. Servers may also send this response instead of 403 to hide the existence of a resource from an unauthorized client. This response code is probably the most famous one due to its frequent occurence on the web.\n     */\n    StatusCodes[StatusCodes[\"NOT_FOUND\"] = 404] = \"NOT_FOUND\";\n    /**\n     * Official Documentation @ https://tools.ietf.org/html/rfc7231#section-6.5.5\n     *\n     * The request method is known by the server but has been disabled and cannot be used. For example, an API may forbid DELETE-ing a resource. The two mandatory methods, GET and HEAD, must never be disabled and should not return this error code.\n     */\n    StatusCodes[StatusCodes[\"METHOD_NOT_ALLOWED\"] = 405] = \"METHOD_NOT_ALLOWED\";\n    /**\n     * Official Documentation @ https://tools.ietf.org/html/rfc7231#section-6.5.6\n     *\n     * This response is sent when the web server, after performing server-driven content negotiation, doesn't find any content following the criteria given by the user agent.\n     */\n    StatusCodes[StatusCodes[\"NOT_ACCEPTABLE\"] = 406] = \"NOT_ACCEPTABLE\";\n    /**\n     * Official Documentation @ https://tools.ietf.org/html/rfc7235#section-3.2\n     *\n     * This is similar to 401 but authentication is needed to be done by a proxy.\n     */\n    StatusCodes[StatusCodes[\"PROXY_AUTHENTICATION_REQUIRED\"] = 407] = \"PROXY_AUTHENTICATION_REQUIRED\";\n    /**\n     * Official Documentation @ https://tools.ietf.org/html/rfc7231#section-6.5.7\n     *\n     * This response is sent on an idle connection by some servers, even without any previous request by the client. It means that the server would like to shut down this unused connection. This response is used much more since some browsers, like Chrome, Firefox 27+, or IE9, use HTTP pre-connection mechanisms to speed up surfing. Also note that some servers merely shut down the connection without sending this message.\n     */\n    StatusCodes[StatusCodes[\"REQUEST_TIMEOUT\"] = 408] = \"REQUEST_TIMEOUT\";\n    /**\n     * Official Documentation @ https://tools.ietf.org/html/rfc7231#section-6.5.8\n     *\n     * This response is sent when a request conflicts with the current state of the server.\n     */\n    StatusCodes[StatusCodes[\"CONFLICT\"] = 409] = \"CONFLICT\";\n    /**\n     * Official Documentation @ https://tools.ietf.org/html/rfc7231#section-6.5.9\n     *\n     * This response would be sent when the requested content has been permenantly deleted from server, with no forwarding address. Clients are expected to remove their caches and links to the resource. The HTTP specification intends this status code to be used for \"limited-time, promotional services\". APIs should not feel compelled to indicate resources that have been deleted with this status code.\n     */\n    StatusCodes[StatusCodes[\"GONE\"] = 410] = \"GONE\";\n    /**\n     * Official Documentation @ https://tools.ietf.org/html/rfc7231#section-6.5.10\n     *\n     * The server rejected the request because the Content-Length header field is not defined and the server requires it.\n     */\n    StatusCodes[StatusCodes[\"LENGTH_REQUIRED\"] = 411] = \"LENGTH_REQUIRED\";\n    /**\n     * Official Documentation @ https://tools.ietf.org/html/rfc7232#section-4.2\n     *\n     * The client has indicated preconditions in its headers which the server does not meet.\n     */\n    StatusCodes[StatusCodes[\"PRECONDITION_FAILED\"] = 412] = \"PRECONDITION_FAILED\";\n    /**\n     * Official Documentation @ https://tools.ietf.org/html/rfc7231#section-6.5.11\n     *\n     * Request entity is larger than limits defined by server; the server might close the connection or return an Retry-After header field.\n     */\n    StatusCodes[StatusCodes[\"REQUEST_TOO_LONG\"] = 413] = \"REQUEST_TOO_LONG\";\n    /**\n     * Official Documentation @ https://tools.ietf.org/html/rfc7231#section-6.5.12\n     *\n     * The URI requested by the client is longer than the server is willing to interpret.\n     */\n    StatusCodes[StatusCodes[\"REQUEST_URI_TOO_LONG\"] = 414] = \"REQUEST_URI_TOO_LONG\";\n    /**\n     * Official Documentation @ https://tools.ietf.org/html/rfc7231#section-6.5.13\n     *\n     * The media format of the requested data is not supported by the server, so the server is rejecting the request.\n     */\n    StatusCodes[StatusCodes[\"UNSUPPORTED_MEDIA_TYPE\"] = 415] = \"UNSUPPORTED_MEDIA_TYPE\";\n    /**\n     * Official Documentation @ https://tools.ietf.org/html/rfc7233#section-4.4\n     *\n     * The range specified by the Range header field in the request can't be fulfilled; it's possible that the range is outside the size of the target URI's data.\n     */\n    StatusCodes[StatusCodes[\"REQUESTED_RANGE_NOT_SATISFIABLE\"] = 416] = \"REQUESTED_RANGE_NOT_SATISFIABLE\";\n    /**\n     * Official Documentation @ https://tools.ietf.org/html/rfc7231#section-6.5.14\n     *\n     * This response code means the expectation indicated by the Expect request header field can't be met by the server.\n     */\n    StatusCodes[StatusCodes[\"EXPECTATION_FAILED\"] = 417] = \"EXPECTATION_FAILED\";\n    /**\n     * Official Documentation @ https://tools.ietf.org/html/rfc2324#section-2.3.2\n     *\n     * Any attempt to brew coffee with a teapot should result in the error code \"418 I'm a teapot\". The resulting entity body MAY be short and stout.\n     */\n    StatusCodes[StatusCodes[\"IM_A_TEAPOT\"] = 418] = \"IM_A_TEAPOT\";\n    /**\n     * Official Documentation @ https://tools.ietf.org/html/rfc2518#section-10.6\n     *\n     * The 507 (Insufficient Storage) status code means the method could not be performed on the resource because the server is unable to store the representation needed to successfully complete the request. This condition is considered to be temporary. If the request which received this status code was the result of a user action, the request MUST NOT be repeated until it is requested by a separate user action.\n     */\n    StatusCodes[StatusCodes[\"INSUFFICIENT_SPACE_ON_RESOURCE\"] = 419] = \"INSUFFICIENT_SPACE_ON_RESOURCE\";\n    /**\n     * @deprecated\n     * Official Documentation @ https://tools.ietf.org/rfcdiff?difftype=--hwdiff&url2=draft-ietf-webdav-protocol-06.txt\n     *\n     * A deprecated response used by the Spring Framework when a method has failed.\n     */\n    StatusCodes[StatusCodes[\"METHOD_FAILURE\"] = 420] = \"METHOD_FAILURE\";\n    /**\n     * Official Documentation @ https://datatracker.ietf.org/doc/html/rfc7540#section-9.1.2\n     *\n     * Defined in the specification of HTTP/2 to indicate that a server is not able to produce a response for the combination of scheme and authority that are included in the request URI.\n     */\n    StatusCodes[StatusCodes[\"MISDIRECTED_REQUEST\"] = 421] = \"MISDIRECTED_REQUEST\";\n    /**\n     * Official Documentation @ https://tools.ietf.org/html/rfc2518#section-10.3\n     *\n     * The request was well-formed but was unable to be followed due to semantic errors.\n     */\n    StatusCodes[StatusCodes[\"UNPROCESSABLE_ENTITY\"] = 422] = \"UNPROCESSABLE_ENTITY\";\n    /**\n     * Official Documentation @ https://tools.ietf.org/html/rfc2518#section-10.4\n     *\n     * The resource that is being accessed is locked.\n     */\n    StatusCodes[StatusCodes[\"LOCKED\"] = 423] = \"LOCKED\";\n    /**\n     * Official Documentation @ https://tools.ietf.org/html/rfc2518#section-10.5\n     *\n     * The request failed due to failure of a previous request.\n     */\n    StatusCodes[StatusCodes[\"FAILED_DEPENDENCY\"] = 424] = \"FAILED_DEPENDENCY\";\n    /**\n     * Official Documentation @ https://datatracker.ietf.org/doc/html/rfc7231#section-6.5.15\n     *\n     * The server refuses to perform the request using the current protocol but might be willing to do so after the client upgrades to a different protocol.\n     */\n    StatusCodes[StatusCodes[\"UPGRADE_REQUIRED\"] = 426] = \"UPGRADE_REQUIRED\";\n    /**\n     * Official Documentation @ https://tools.ietf.org/html/rfc6585#section-3\n     *\n     * The origin server requires the request to be conditional. Intended to prevent the 'lost update' problem, where a client GETs a resource's state, modifies it, and PUTs it back to the server, when meanwhile a third party has modified the state on the server, leading to a conflict.\n     */\n    StatusCodes[StatusCodes[\"PRECONDITION_REQUIRED\"] = 428] = \"PRECONDITION_REQUIRED\";\n    /**\n     * Official Documentation @ https://tools.ietf.org/html/rfc6585#section-4\n     *\n     * The user has sent too many requests in a given amount of time (\"rate limiting\").\n     */\n    StatusCodes[StatusCodes[\"TOO_MANY_REQUESTS\"] = 429] = \"TOO_MANY_REQUESTS\";\n    /**\n     * Official Documentation @ https://tools.ietf.org/html/rfc6585#section-5\n     *\n     * The server is unwilling to process the request because its header fields are too large. The request MAY be resubmitted after reducing the size of the request header fields.\n     */\n    StatusCodes[StatusCodes[\"REQUEST_HEADER_FIELDS_TOO_LARGE\"] = 431] = \"REQUEST_HEADER_FIELDS_TOO_LARGE\";\n    /**\n     * Official Documentation @ https://tools.ietf.org/html/rfc7725\n     *\n     * The user-agent requested a resource that cannot legally be provided, such as a web page censored by a government.\n     */\n    StatusCodes[StatusCodes[\"UNAVAILABLE_FOR_LEGAL_REASONS\"] = 451] = \"UNAVAILABLE_FOR_LEGAL_REASONS\";\n    /**\n     * Official Documentation @ https://tools.ietf.org/html/rfc7231#section-6.6.1\n     *\n     * The server encountered an unexpected condition that prevented it from fulfilling the request.\n     */\n    StatusCodes[StatusCodes[\"INTERNAL_SERVER_ERROR\"] = 500] = \"INTERNAL_SERVER_ERROR\";\n    /**\n     * Official Documentation @ https://tools.ietf.org/html/rfc7231#section-6.6.2\n     *\n     * The request method is not supported by the server and cannot be handled. The only methods that servers are required to support (and therefore that must not return this code) are GET and HEAD.\n     */\n    StatusCodes[StatusCodes[\"NOT_IMPLEMENTED\"] = 501] = \"NOT_IMPLEMENTED\";\n    /**\n     * Official Documentation @ https://tools.ietf.org/html/rfc7231#section-6.6.3\n     *\n     * This error response means that the server, while working as a gateway to get a response needed to handle the request, got an invalid response.\n     */\n    StatusCodes[StatusCodes[\"BAD_GATEWAY\"] = 502] = \"BAD_GATEWAY\";\n    /**\n     * Official Documentation @ https://tools.ietf.org/html/rfc7231#section-6.6.4\n     *\n     * The server is not ready to handle the request. Common causes are a server that is down for maintenance or that is overloaded. Note that together with this response, a user-friendly page explaining the problem should be sent. This responses should be used for temporary conditions and the Retry-After: HTTP header should, if possible, contain the estimated time before the recovery of the service. The webmaster must also take care about the caching-related headers that are sent along with this response, as these temporary condition responses should usually not be cached.\n     */\n    StatusCodes[StatusCodes[\"SERVICE_UNAVAILABLE\"] = 503] = \"SERVICE_UNAVAILABLE\";\n    /**\n     * Official Documentation @ https://tools.ietf.org/html/rfc7231#section-6.6.5\n     *\n     * This error response is given when the server is acting as a gateway and cannot get a response in time.\n     */\n    StatusCodes[StatusCodes[\"GATEWAY_TIMEOUT\"] = 504] = \"GATEWAY_TIMEOUT\";\n    /**\n     * Official Documentation @ https://tools.ietf.org/html/rfc7231#section-6.6.6\n     *\n     * The HTTP version used in the request is not supported by the server.\n     */\n    StatusCodes[StatusCodes[\"HTTP_VERSION_NOT_SUPPORTED\"] = 505] = \"HTTP_VERSION_NOT_SUPPORTED\";\n    /**\n     * Official Documentation @ https://tools.ietf.org/html/rfc2518#section-10.6\n     *\n     * The server has an internal configuration error: the chosen variant resource is configured to engage in transparent content negotiation itself, and is therefore not a proper end point in the negotiation process.\n     */\n    StatusCodes[StatusCodes[\"INSUFFICIENT_STORAGE\"] = 507] = \"INSUFFICIENT_STORAGE\";\n    /**\n     * Official Documentation @ https://tools.ietf.org/html/rfc6585#section-6\n     *\n     * The 511 status code indicates that the client needs to authenticate to gain network access.\n     */\n    StatusCodes[StatusCodes[\"NETWORK_AUTHENTICATION_REQUIRED\"] = 511] = \"NETWORK_AUTHENTICATION_REQUIRED\";\n})(StatusCodes || (StatusCodes = {}));\n","// Only Node.JS has a process variable that is of [[Class]] process\nexport default Object.prototype.toString.call(typeof process !== 'undefined' ? process : 0) === '[object process]';\n","import isNode from 'detect-node'\n\nimport { StatusCodes } from 'http-status-codes';\n\nimport axios, { AxiosRequestConfig } from \"axios\";\n\nimport { ISTSLogger, JSONObject } from '@nsshunt/stsutils';\n\nimport { ISTSError, ISTSResourceManagerOptions } from './commonTypes'\n\nimport { AgentManager, STSAxiosConfig } from '@nsshunt/stsconfig';\n\nexport abstract class ResourceManager {\n    #options: ISTSResourceManagerOptions;\n    #logger: ISTSLogger;\n    #agentManager: AgentManager | null = null;\n\n    constructor(options: ISTSResourceManagerOptions, logger: ISTSLogger) {\n        this.#options = options;\n        this.#logger  = logger;\n\t\t\n        this.LogDebugMessage(`STSOAuth2Worker:constructor:#options: [${JSON.stringify(this.#options)}]`);\n\n        if (isNode) {\n            if (this.#options.agentOptions) {\n                this.#agentManager = new AgentManager({\n                    agentOptions: this.#options.agentOptions\n                });\n            } else {\n                this.#agentManager = new AgentManager({});\n            }\n        }\n    }\n\n    get agentManager(): AgentManager | null {\n        return this.#agentManager;\n    }\n\n    get options(): ISTSResourceManagerOptions {\n        return this.#options;\n    }\n\n    // eslint-disable-next-line  @typescript-eslint/no-explicit-any\n    LogDebugMessage(message: any) {\n        this.#logger.debug(message);\n    }\n\n    // eslint-disable-next-line  @typescript-eslint/no-explicit-any\n    LogInfoMessage(message: any) {\n        this.#logger.info(message);\n    }\n\n    // eslint-disable-next-line  @typescript-eslint/no-explicit-any\n    LogErrorMessage(message: any) {\n        this.#logger.error(message);\n    }\n\n    // eslint-disable-next-line  @typescript-eslint/no-explicit-any\n    GetErrorMessage = (status: StatusCodes, error: string, detail: any): ISTSError => {\n        return {\n            status,\n            error,\n            detail\n        };\n    }\n\n    GetHeaders = (access_token: string | null): JSONObject => {\n        const headers: JSONObject = { \n            'Content-Type': 'application/json'\n        }\n        if (access_token) {\n            headers['Authorization'] = `Bearer ${access_token}`;\n        }\n        return headers;\n    }\n\n    GetResult = async <T>(accessToken: string | null, url: string, method: string, requestData: JSONObject | null, errorCb: (error: ISTSError) => void): Promise<T | null> => {\n        const axiosConfig = new STSAxiosConfig(url, method, this.GetHeaders(accessToken as string), this.options.timeout);\n        if (this.#agentManager) {\n            axiosConfig.withAgentManager(this.#agentManager)\n        }\n        if (requestData !== null) {\n            axiosConfig.withData(requestData)\n        }\n\n        const data = await axios(axiosConfig.config as AxiosRequestConfig); // The snapshot is not actually required here but after the await. I put it here by way of example only.\n        // The reason is that when await is called, the node event loop will continue to process all remaining queued operations.\n        // One of those operations or any operation executed prior to the axios call completing might update the config. So we need to use the\n        // snapshot copy of the config made above.\n        if (data.data.status === StatusCodes.OK || data.data.status === StatusCodes.CREATED) {\n            const sessionDataRaw = data.data.detail;\n            if (sessionDataRaw) {\n                try {\n                    const sessionData = JSON.parse(sessionDataRaw) as T;\n                    return sessionData;\n                } catch  (error) {\n                    errorCb(this.GetErrorMessage(StatusCodes.INTERNAL_SERVER_ERROR, 'SessionManager:GetResult(): Could not parse session data.', error));\n                    return null;\n                }\n            } else {\n                errorCb(this.GetErrorMessage(StatusCodes.INTERNAL_SERVER_ERROR, 'SessionManager:GetResult(): No session data returned.', null));\n                return null;\n            }\n        } else {\n            const { status, error, detail } = data.data;\n            errorCb(this.GetErrorMessage(status, `SessionManager:GetResult(): Status not OK. Error: [${error}]`, detail));\n            return null;\n        }\n    }\n}\n","import { StatusCodes } from 'http-status-codes';\n\nimport { ISTSLogger } from '@nsshunt/stsutils';\n\nimport { ISTSSessionResource, ISTSError, ISTSResourceManagerOptions } from './commonTypes'\n\nimport { ResourceManager } from './resourceManager'\n\nexport class SessionManager extends ResourceManager {\n    constructor(options: ISTSResourceManagerOptions, logger: ISTSLogger) {\n        super(options, logger);\n    }\n\n    GetSession = async (access_token: string, sessionId: string, errorCb: (error: ISTSError) => void): Promise<ISTSSessionResource | null> => {\n        try {\n            return this.GetResult<ISTSSessionResource>(access_token, `${this.options.asendpoint}/session/${encodeURIComponent(sessionId)}`, 'get', null, errorCb);\n        // eslint-disable-next-line  @typescript-eslint/no-explicit-any\n        } catch (error: any) {\n            errorCb(this.GetErrorMessage(StatusCodes.INTERNAL_SERVER_ERROR, `SessionManager:GetSession(): Could not process session. Error: [${error}]`, error));\n            return null;\n        }\n    }\n\n    PatchSession = async (access_token: string, session: Partial<ISTSSessionResource>, errorCb: (error: ISTSError) => void): Promise<ISTSSessionResource | null> => {\n        try {\n            if (!session.sessionId) {\n                errorCb(this.GetErrorMessage(StatusCodes.INTERNAL_SERVER_ERROR, 'SessionManager:GetSession(): sessionId not provided.', null));\n                return null;\n            }\n            return this.GetResult<ISTSSessionResource>(access_token, `${this.options.asendpoint}/session/${encodeURIComponent(session.sessionId)}`, 'patch', session, errorCb);\n        // eslint-disable-next-line  @typescript-eslint/no-explicit-any\n        } catch (error: any) {\n            errorCb(this.GetErrorMessage(StatusCodes.INTERNAL_SERVER_ERROR, `SessionManager:GetSession(): Could not process session. Error: [${error}]`, error));\n            return null;\n        }\n    }\n}\n","import tough from 'tough-cookie';\nimport jwt from 'jsonwebtoken';\nimport { jwtDecode } from \"jwt-decode\";\nimport jwksClient from 'jwks-rsa';\n\nimport axios from 'axios';\n\nimport { goptions, AgentManager, STSAxiosConfig } from '@nsshunt/stsconfig'\n\nimport { GetErrorPayload, ISTSLogger, JSONObject } from '@nsshunt/stsutils'\n\nimport { StatusCodes } from 'http-status-codes';\n\nimport chalk from 'chalk';\n\nimport { Gauge, PublishInstrumentController } from '@nsshunt/stsobservability'\n\nimport { iss, STSAuthClientErrorCode } from './commonTypes'\n\nexport interface IAuthUtilsNodeOptions {\n    permissions: string[]\n}\n\nexport interface IGetAPITokenFromAuthServerUsingScopeOptions {\n    clientId: string\n    authClientSecret: string\n    scope: string\n    endPoint: string\n    instrumentController?: PublishInstrumentController\n    outputErrorsToConsole?: boolean\n}\n\ndeclare interface ICacheScopeRecord {\n    scope: string\n    timeout: NodeJS.Timeout\n}\n\ndeclare interface ICacheRecord {\n    scopes: Record<string, ICacheScopeRecord>\n}\n\nexport class AuthUtilsNode\n{\n    #cache: Record<string, ICacheRecord> = { };\n    #cacheTimeout: number = 1000;\n    #logger: ISTSLogger\n    #cookiejar: tough.CookieJar;\n    // Regular expression to match the origin\n    #originRegex = /^(api:\\/\\/\\w+)/;\n    #agentManager: AgentManager = new AgentManager({});\n\n    constructor(logger: ISTSLogger) {\n        this.#logger = logger;\n        this.#cookiejar = new tough.CookieJar();\n    }\n\n    // eslint-disable-next-line @typescript-eslint/no-explicit-any\n    #LogDebugMessage(message: any) {\n        this.#logger.debug(message);\n    }\n\n    get agentManager(): AgentManager {\n        return this.#agentManager;\n    }\n\n    ResetAgent = () => {\n        this.#agentManager.ResetAgent();\n    }\n\n    VerifyRequestMiddlewareFactory = (options: IAuthUtilsNodeOptions) => {\n        // eslint-disable-next-line @typescript-eslint/no-explicit-any\n        return async (req: any, res: any, next: any) => {\n            if (options.permissions) {\n\n                const permissionsKey = options.permissions.join('_');\n                const scopeKey = (req.auth.scope as string).split(' ').join('_');\n\n                if (this.#cache[permissionsKey] && this.#cache[permissionsKey].scopes[scopeKey]) {\n                    next();\n                    return;\n                }\n\n                const scopes = req.auth.scope.split(' ');\n\n                const requiredPermissions = [ ];\n                for (let i=0; i < options.permissions.length; i++) {\n                    const permission = options.permissions[i];\n                    if (!scopes.includes(permission)) {\n                        requiredPermissions.push(permission);\n                    }\n                }\n                if (requiredPermissions.length > 0) {\n                    const errorPayload = GetErrorPayload(STSAuthClientErrorCode.STS_AC_MISSING_PERMISSION, requiredPermissions);\n                    res.status(StatusCodes.UNAUTHORIZED).send( { status: StatusCodes.UNAUTHORIZED, error: errorPayload });\n                    return;\n                }\n\n                if (!this.#cache[permissionsKey]) {\n                    this.#cache[permissionsKey] = {\n                        scopes: { }\n                    }\n                }\n\n                this.#cache[permissionsKey].scopes[scopeKey] = {\n                    scope: scopeKey,\n                    timeout: setTimeout(() => {\n                        delete this.#cache[permissionsKey].scopes[scopeKey]\n                    }, this.#cacheTimeout).unref()\n                }\n            }\n            next();\n        }\n    }\n    /*\n\tlet cookies = await this.GetCookiesFromJar();\n\tconst valid = this.#ValidateCookies(cookies);\n\tif (valid) {\n\t\tnext();\n\t} else {\n\t\tconst error = { }; //@@\n\t\tconst invalidToken = false; //@@\n\t\tif (invalidToken)\n\t\t{\n\t\t\tres.status(StatusCodes.UNAUTHORIZED).send( { status: StatusCodes.UNAUTHORIZED, error: 'Invalid Token', detail: error } );\n\t\t} else{\n\t\t\tres.status(StatusCodes.INTERNAL_SERVER_ERROR).send( { status: StatusCodes.INTERNAL_SERVER_ERROR, error: 'Operation was not successful', detail: error } );\n\t\t}\n\t}\n\t*/\n\n    // eslint-disable-next-line @typescript-eslint/no-explicit-any\n    async verifyRequestMiddleware(req: any, res: any, next: any)\n    {\n        next();\n        /*\n\t\t\n\t\tlet cookies = await this.GetCookiesFromJar();\n\n\t\tconst valid = this.#ValidateCookies(cookies);\n\n\t\tif (valid) {\n\t\t\tnext();\n\t\t} else {\n\t\t\tconst error = { }; //@@\n\t\t\tconst invalidToken = false; //@@\n\t\t\tif (invalidToken)\n\t\t\t{\n\t\t\t\tres.status(StatusCodes.UNAUTHORIZED).send( { status: StatusCodes.UNAUTHORIZED, error: 'Invalid Token', detail: error } );\n\t\t\t} else{\n\t\t\t\tres.status(StatusCodes.INTERNAL_SERVER_ERROR).send( { status: StatusCodes.INTERNAL_SERVER_ERROR, error: 'Operation was not successful', detail: error } );\n\t\t\t}\n\t\t}\n\t\t*/\n    }\n\n    // eslint-disable-next-line @typescript-eslint/no-explicit-any\n    SetCookiesToJar = async (headers: Record<string, any>, endpoint: string): Promise<tough.Cookie[]> =>\n    {\n        if (headers['set-cookie']) {\n            // eslint-disable-next-line @typescript-eslint/no-explicit-any\n            headers['set-cookie'].map((headerCookie: any) => {\n                // eslint-disable-next-line @typescript-eslint/no-explicit-any\n                const cookie: any = tough.Cookie.parse(headerCookie);\n                this.#cookiejar.setCookieSync(cookie, endpoint);\n            });\n        } else {\n            // eslint-disable-next-line @typescript-eslint/no-explicit-any\n            const cookie: any = tough.Cookie.parse(headers['set-cookie']);\n            this.#cookiejar.setCookieSync(cookie, endpoint);\n        }\n\n        return this.#cookiejar.getCookies(endpoint);\n    };\n\n    GetCookiesFromJar = async (endpoint: string): Promise<tough.Cookie[]> =>\n    {\n        return this.#cookiejar.getCookies(endpoint);\n    };\n\n    ValidateJWT = async (token: string, audience: string, endpoint?: string): Promise<string> => {\n        const jwksClientUri = (endpoint \n            ? `${endpoint}${goptions.asoauthapiroot}${goptions.asjwksjsonpath}` \n            : `${goptions.asendpoint}:${goptions.asport}${goptions.asoauthapiroot}${goptions.asjwksjsonpath}`);\n\n        const jwks = jwksClient({\n            cache: true, //@@ all config items\n            cacheMaxEntries: 5, // Default value\n            cacheMaxAge: 600000, // Defaults to 10m\n            rateLimit: true,\n            jwksRequestsPerMinute: 10, // Default value\n            jwksUri: jwksClientUri,\n            timeout: 30000, //@@ config\n            // eslint-disable-next-line @typescript-eslint/no-explicit-any\n            requestAgent: this.#agentManager.GetAgent(jwksClientUri) as any\n        });\n\n        // Use decode to get the kid\n        const decodedRefreshToken = jwtDecode<JSONObject>(token, { header: true });\n        const kid = decodedRefreshToken.kid;\n\n        const key = await jwks.getSigningKey(kid);\n        const signingKey = key.getPublicKey();\n\t\t\n        const verifyOptions = {\n            issuer: iss,\n            //subject:  s,\n            audience:  audience,\n            //expiresIn:  600, // 10 minutes\n            algorithm:  [\"RS256\"]   // RSASSA [ \"RS256\", \"RS384\", \"RS512\" ]\n        };\n\n        return jwt.verify(token, signingKey, verifyOptions) as string;\n    }\n\n    // Function to extract the origin from a URI\n    ExtractOrigin = (uri: string) => {\n        const match = uri.match(this.#originRegex);\n        return match ? match[1] : null;\n    }\n\n    GetAPITokenFromAuthServerUsingScope = async (options: IGetAPITokenFromAuthServerUsingScopeOptions, errorCb: (error: Error) => void): Promise<string> => {\n        const { scope, clientId, authClientSecret, endPoint, instrumentController, outputErrorsToConsole } = options;\n\n        let stage = '1';\n\n        const invokeErrorCb = (error: Error) => {\n            this.#LogDebugMessage(error);\n            if (instrumentController) {\n                instrumentController.UpdateInstrument(Gauge.AUTHENTICATION_ERROR_COUNT_GAUGE, { // auth error\n                    Inc: 1\n                });\n            }\n            errorCb(error);\n        };\n\n        try {\n            stage = '2';\n            const scopes = scope.split(' ');\n            let origin: string | null = null;\n            let error: Error | null = null;\n            stage = '3';\n            for (let i=0; i < scopes.length; i++) {\n                const s = scopes[i];\n                if (!origin) {\n                    origin = this.ExtractOrigin(s);\n                    if (!origin) {\n                        error = new Error(`Scope: [${scope}] not in required format. Must use (space seperated) api://<client id>[/<resource>.<permission>].`);\n                        break;\n                    }\n                } else {\n                    const nextOrigin: string | null = this.ExtractOrigin(s);\n                    if (!nextOrigin) {\n                        error = new Error(`Scope: [${scope}] not in required format. Must use (space seperated) api://<client id>[/<resource>.<permission>].`);\n                        break;\n                    } else {\n                        if (origin.localeCompare(nextOrigin) !== 0) {\n                            error = new Error(`Scope: [${scope}] not all from the same client API. All scopes must come from the same client API.`);\n                            break;\n                        }\n                    }\n                }\n            }\n            stage = '4';\n            if (error) {\n                invokeErrorCb(error);\n                return \"\";\n            }\n\n            stage = '5';\n            const payload = { //@@ make a type\n                client_id: clientId, // The service calling this method\n                client_secret: authClientSecret, // Auth service client secret\n                //client_secret: goptions.brokerclientsecret, // Broker service client secret\n                scope: scope, // required API\n                //@@ remove audience\n                //@@ need scope to be the API identifier\n                grant_type: \"client_credentials\"\n            }\n            stage = '6';\n            const url = (endPoint \n                ? `${endPoint}${goptions.asoauthapiroot}/token`\n                : `${goptions.asendpoint}:${goptions.asport}${goptions.asoauthapiroot}/token`);\n\n            stage = `6.5: url: [${url}] payload: [${JSON.stringify(payload)}]`\n\n            const retVal = await axios(new STSAxiosConfig(url, 'post')\n                .withDefaultHeaders()\n                .withData(payload)\n                .withAgentManager(this.#agentManager).config);\n\n            stage = '7';\n            if (retVal.status) {\n                if (retVal.status !== 200) {\n                    // Just provide a warning here\n                    this.#LogDebugMessage(chalk.magenta(`Error (AuthUtilsNode:GetAPITokenFromServer): Invalid response from server: [${retVal.status}]`));\n                }\n            } else {\n                invokeErrorCb(new Error(chalk.red(`Error (AuthUtilsNode:GetAPITokenFromServer:No retVal.status)`)));\n                return \"\";\n            }\n            stage = '8';\n            if (retVal.data) {\n                stage = '9';\n                if (retVal.data.access_token) {\n                    stage = '10';\n                    if (instrumentController) {\n                        stage = '11';\n                        instrumentController.UpdateInstrument(Gauge.AUTHENTICATION_COUNT_GAUGE, {\n                            Inc: 1\n                        });\n                    }\n    \n                    stage = '12';\n                    return retVal.data.access_token as string;\n                } else {\n                    stage = '13';\n                    invokeErrorCb(new Error(`Error (AuthUtilsNode:GetAPITokenFromServer:No retVal.data.access_token)`));\n                    return \"\";\n                }\n            } else {\n                stage = '14';\n                invokeErrorCb(new Error(`Error (AuthUtilsNode:GetAPITokenFromServer:No retVal.data)`));\n                return \"\";\n            }\n        // eslint-disable-next-line @typescript-eslint/no-explicit-any\n        } catch (error: any) {\n            if (outputErrorsToConsole === true) {\n                console.error(error);\n            }\n            let details = 'None available.';\n            if (error.response && error.response.data) {\n                try {\n                    details = JSON.stringify(error.response.data);\n                // eslint-disable-next-line @typescript-eslint/no-unused-vars\n                } catch (error) {\n                    details = `Could not JSON.stringify(error.response.data)`;\n                }\n            }\n            invokeErrorCb(new Error(`Error (AuthUtilsNode:GetAPITokenFromServer:catch): [${error}], Stage: [${stage}], Details: [${details}]`));\n            return \"\";\n        }\n    }\n}\n"],"names":["StatusCodes","_logger","_agentManager","error"],"mappings":";;;;;;;;;;;;;;;;;;;;;AAqIO,MAAM,MAAM;AAEN,MAAA,yBAAyB,OAAO,OAAO;AAAA,EAChD,2BAA2B;AAAA,IACvB,MAAM;AAAA,IACN,aAAa;AAAA,EAAA;AAErB,CAAC;AC3IM,IAAI;AAAA,CACV,SAAUA,cAAa;AAMpB,EAAAA,aAAYA,aAAY,UAAU,IAAI,GAAG,IAAI;AAM7C,EAAAA,aAAYA,aAAY,qBAAqB,IAAI,GAAG,IAAI;AAMxD,EAAAA,aAAYA,aAAY,YAAY,IAAI,GAAG,IAAI;AAM/C,EAAAA,aAAYA,aAAY,aAAa,IAAI,GAAG,IAAI;AAUhD,EAAAA,aAAYA,aAAY,IAAI,IAAI,GAAG,IAAI;AAMvC,EAAAA,aAAYA,aAAY,SAAS,IAAI,GAAG,IAAI;AAM5C,EAAAA,aAAYA,aAAY,UAAU,IAAI,GAAG,IAAI;AAM7C,EAAAA,aAAYA,aAAY,+BAA+B,IAAI,GAAG,IAAI;AAMlE,EAAAA,aAAYA,aAAY,YAAY,IAAI,GAAG,IAAI;AAM/C,EAAAA,aAAYA,aAAY,eAAe,IAAI,GAAG,IAAI;AAMlD,EAAAA,aAAYA,aAAY,iBAAiB,IAAI,GAAG,IAAI;AAMpD,EAAAA,aAAYA,aAAY,cAAc,IAAI,GAAG,IAAI;AAMjD,EAAAA,aAAYA,aAAY,kBAAkB,IAAI,GAAG,IAAI;AAMrD,EAAAA,aAAYA,aAAY,mBAAmB,IAAI,GAAG,IAAI;AAMtD,EAAAA,aAAYA,aAAY,mBAAmB,IAAI,GAAG,IAAI;AAMtD,EAAAA,aAAYA,aAAY,WAAW,IAAI,GAAG,IAAI;AAM9C,EAAAA,aAAYA,aAAY,cAAc,IAAI,GAAG,IAAI;AAOjD,EAAAA,aAAYA,aAAY,WAAW,IAAI,GAAG,IAAI;AAM9C,EAAAA,aAAYA,aAAY,oBAAoB,IAAI,GAAG,IAAI;AAMvD,EAAAA,aAAYA,aAAY,oBAAoB,IAAI,GAAG,IAAI;AAMvD,EAAAA,aAAYA,aAAY,aAAa,IAAI,GAAG,IAAI;AAMhD,EAAAA,aAAYA,aAAY,cAAc,IAAI,GAAG,IAAI;AAMjD,EAAAA,aAAYA,aAAY,kBAAkB,IAAI,GAAG,IAAI;AAMrD,EAAAA,aAAYA,aAAY,WAAW,IAAI,GAAG,IAAI;AAM9C,EAAAA,aAAYA,aAAY,WAAW,IAAI,GAAG,IAAI;AAM9C,EAAAA,aAAYA,aAAY,oBAAoB,IAAI,GAAG,IAAI;AAMvD,EAAAA,aAAYA,aAAY,gBAAgB,IAAI,GAAG,IAAI;AAMnD,EAAAA,aAAYA,aAAY,+BAA+B,IAAI,GAAG,IAAI;AAMlE,EAAAA,aAAYA,aAAY,iBAAiB,IAAI,GAAG,IAAI;AAMpD,EAAAA,aAAYA,aAAY,UAAU,IAAI,GAAG,IAAI;AAM7C,EAAAA,aAAYA,aAAY,MAAM,IAAI,GAAG,IAAI;AAMzC,EAAAA,aAAYA,aAAY,iBAAiB,IAAI,GAAG,IAAI;AAMpD,EAAAA,aAAYA,aAAY,qBAAqB,IAAI,GAAG,IAAI;AAMxD,EAAAA,aAAYA,aAAY,kBAAkB,IAAI,GAAG,IAAI;AAMrD,EAAAA,aAAYA,aAAY,sBAAsB,IAAI,GAAG,IAAI;AAMzD,EAAAA,aAAYA,aAAY,wBAAwB,IAAI,GAAG,IAAI;AAM3D,EAAAA,aAAYA,aAAY,iCAAiC,IAAI,GAAG,IAAI;AAMpE,EAAAA,aAAYA,aAAY,oBAAoB,IAAI,GAAG,IAAI;AAMvD,EAAAA,aAAYA,aAAY,aAAa,IAAI,GAAG,IAAI;AAMhD,EAAAA,aAAYA,aAAY,gCAAgC,IAAI,GAAG,IAAI;AAOnE,EAAAA,aAAYA,aAAY,gBAAgB,IAAI,GAAG,IAAI;AAMnD,EAAAA,aAAYA,aAAY,qBAAqB,IAAI,GAAG,IAAI;AAMxD,EAAAA,aAAYA,aAAY,sBAAsB,IAAI,GAAG,IAAI;AAMzD,EAAAA,aAAYA,aAAY,QAAQ,IAAI,GAAG,IAAI;AAM3C,EAAAA,aAAYA,aAAY,mBAAmB,IAAI,GAAG,IAAI;AAMtD,EAAAA,aAAYA,aAAY,kBAAkB,IAAI,GAAG,IAAI;AAMrD,EAAAA,aAAYA,aAAY,uBAAuB,IAAI,GAAG,IAAI;AAM1D,EAAAA,aAAYA,aAAY,mBAAmB,IAAI,GAAG,IAAI;AAMtD,EAAAA,aAAYA,aAAY,iCAAiC,IAAI,GAAG,IAAI;AAMpE,EAAAA,aAAYA,aAAY,+BAA+B,IAAI,GAAG,IAAI;AAMlE,EAAAA,aAAYA,aAAY,uBAAuB,IAAI,GAAG,IAAI;AAM1D,EAAAA,aAAYA,aAAY,iBAAiB,IAAI,GAAG,IAAI;AAMpD,EAAAA,aAAYA,aAAY,aAAa,IAAI,GAAG,IAAI;AAMhD,EAAAA,aAAYA,aAAY,qBAAqB,IAAI,GAAG,IAAI;AAMxD,EAAAA,aAAYA,aAAY,iBAAiB,IAAI,GAAG,IAAI;AAMpD,EAAAA,aAAYA,aAAY,4BAA4B,IAAI,GAAG,IAAI;AAM/D,EAAAA,aAAYA,aAAY,sBAAsB,IAAI,GAAG,IAAI;AAMzD,EAAAA,aAAYA,aAAY,iCAAiC,IAAI,GAAG,IAAI;AACxE,GAAG,gBAAgB,cAAc,CAAA,EAAG;ACpWpC,MAAA,SAAe,OAAO,UAAU,SAAS,KAAK,OAAO,YAAY,cAAc,UAAU,CAAC,MAAM;ACWzF,MAAe,gBAAgB;AAAA,EAKlC,YAAY,SAAqC,QAAoB;AAJrE;AACA;AACA,sCAAqC;AA2CrC;AAAA,2CAAkB,CAAC,QAAqB,OAAe,WAA2B;AACvE,aAAA;AAAA,QACH;AAAA,QACA;AAAA,QACA;AAAA,MACJ;AAAA,IACJ;AAEA,sCAAa,CAAC,iBAA4C;AACtD,YAAM,UAAsB;AAAA,QACxB,gBAAgB;AAAA,MACpB;AACA,UAAI,cAAc;AACN,gBAAA,eAAe,IAAI,UAAU,YAAY;AAAA,MAAA;AAE9C,aAAA;AAAA,IACX;AAEA,qCAAY,OAAU,aAA4B,KAAa,QAAgB,aAAgC,YAA2D;AAChK,YAAA,cAAc,IAAI,eAAe,KAAK,QAAQ,KAAK,WAAW,WAAqB,GAAG,KAAK,QAAQ,OAAO;AAChH,UAAI,mBAAK,gBAAe;AACR,oBAAA,iBAAiB,mBAAK,cAAa;AAAA,MAAA;AAEnD,UAAI,gBAAgB,MAAM;AACtB,oBAAY,SAAS,WAAW;AAAA,MAAA;AAGpC,YAAM,OAAO,MAAM,MAAM,YAAY,MAA4B;AAI7D,UAAA,KAAK,KAAK,WAAW,YAAY,MAAM,KAAK,KAAK,WAAW,YAAY,SAAS;AAC3E,cAAA,iBAAiB,KAAK,KAAK;AACjC,YAAI,gBAAgB;AACZ,cAAA;AACM,kBAAA,cAAc,KAAK,MAAM,cAAc;AACtC,mBAAA;AAAA,mBACD,OAAO;AACb,oBAAQ,KAAK,gBAAgB,YAAY,uBAAuB,6DAA6D,KAAK,CAAC;AAC5H,mBAAA;AAAA,UAAA;AAAA,QACX,OACG;AACH,kBAAQ,KAAK,gBAAgB,YAAY,uBAAuB,yDAAyD,IAAI,CAAC;AACvH,iBAAA;AAAA,QAAA;AAAA,MACX,OACG;AACH,cAAM,EAAE,QAAQ,OAAO,WAAW,KAAK;AACvC,gBAAQ,KAAK,gBAAgB,QAAQ,sDAAsD,KAAK,KAAK,MAAM,CAAC;AACrG,eAAA;AAAA,MAAA;AAAA,IAEf;AA1FI,uBAAK,UAAW;AAChB,uBAAK,SAAW;AAEhB,SAAK,gBAAgB,0CAA0C,KAAK,UAAU,mBAAK,SAAQ,CAAC,GAAG;AAE/F,QAAI,QAAQ;AACJ,UAAA,mBAAK,UAAS,cAAc;AACvB,2BAAA,eAAgB,IAAI,aAAa;AAAA,UAClC,cAAc,mBAAK,UAAS;AAAA,QAAA,CAC/B;AAAA,MAAA,OACE;AACH,2BAAK,eAAgB,IAAI,aAAa,EAAE;AAAA,MAAA;AAAA,IAC5C;AAAA,EACJ;AAAA,EAGJ,IAAI,eAAoC;AACpC,WAAO,mBAAK;AAAA,EAAA;AAAA,EAGhB,IAAI,UAAsC;AACtC,WAAO,mBAAK;AAAA,EAAA;AAAA;AAAA,EAIhB,gBAAgB,SAAc;AACrB,uBAAA,SAAQ,MAAM,OAAO;AAAA,EAAA;AAAA;AAAA,EAI9B,eAAe,SAAc;AACpB,uBAAA,SAAQ,KAAK,OAAO;AAAA,EAAA;AAAA;AAAA,EAI7B,gBAAgB,SAAc;AACrB,uBAAA,SAAQ,MAAM,OAAO;AAAA,EAAA;AAuDlC;AAhGI;AACA;AACA;ACPG,MAAM,uBAAuB,gBAAgB;AAAA,EAChD,YAAY,SAAqC,QAAoB;AACjE,UAAM,SAAS,MAAM;AAGzB,sCAAa,OAAO,cAAsB,WAAmB,YAA6E;AAClI,UAAA;AACA,eAAO,KAAK,UAA+B,cAAc,GAAG,KAAK,QAAQ,UAAU,YAAY,mBAAmB,SAAS,CAAC,IAAI,OAAO,MAAM,OAAO;AAAA,eAE/I,OAAY;AACT,gBAAA,KAAK,gBAAgB,YAAY,uBAAuB,mEAAmE,KAAK,KAAK,KAAK,CAAC;AAC5I,eAAA;AAAA,MAAA;AAAA,IAEf;AAEA,wCAAe,OAAO,cAAsB,SAAuC,YAA6E;AACxJ,UAAA;AACI,YAAA,CAAC,QAAQ,WAAW;AACpB,kBAAQ,KAAK,gBAAgB,YAAY,uBAAuB,wDAAwD,IAAI,CAAC;AACtH,iBAAA;AAAA,QAAA;AAEX,eAAO,KAAK,UAA+B,cAAc,GAAG,KAAK,QAAQ,UAAU,YAAY,mBAAmB,QAAQ,SAAS,CAAC,IAAI,SAAS,SAAS,OAAO;AAAA,eAE5J,OAAY;AACT,gBAAA,KAAK,gBAAgB,YAAY,uBAAuB,mEAAmE,KAAK,KAAK,KAAK,CAAC;AAC5I,eAAA;AAAA,MAAA;AAAA,IAEf;AAAA,EAzByB;AA0B7B;ACKO,MAAM,cACb;AAAA,EASI,YAAY,QAAoB;AAV7B;AAEH,+BAAuC,CAAE;AACzC,sCAAwB;AACxB,uBAAAC;AACA;AAEA;AAAA,qCAAe;AACf,uBAAAC,gBAA8B,IAAI,aAAa,EAAE;AAgBjD,sCAAa,MAAM;AACf,yBAAKA,gBAAc,WAAW;AAAA,IAClC;AAEA,0DAAiC,CAAC,YAAmC;AAE1D,aAAA,OAAO,KAAU,KAAU,SAAc;AAC5C,YAAI,QAAQ,aAAa;AAErB,gBAAM,iBAAiB,QAAQ,YAAY,KAAK,GAAG;AAC7C,gBAAA,WAAY,IAAI,KAAK,MAAiB,MAAM,GAAG,EAAE,KAAK,GAAG;AAE3D,cAAA,mBAAK,QAAO,cAAc,KAAK,mBAAK,QAAO,cAAc,EAAE,OAAO,QAAQ,GAAG;AACxE,iBAAA;AACL;AAAA,UAAA;AAGJ,gBAAM,SAAS,IAAI,KAAK,MAAM,MAAM,GAAG;AAEvC,gBAAM,sBAAsB,CAAE;AAC9B,mBAAS,IAAE,GAAG,IAAI,QAAQ,YAAY,QAAQ,KAAK;AACzC,kBAAA,aAAa,QAAQ,YAAY,CAAC;AACxC,gBAAI,CAAC,OAAO,SAAS,UAAU,GAAG;AAC9B,kCAAoB,KAAK,UAAU;AAAA,YAAA;AAAA,UACvC;AAEA,cAAA,oBAAoB,SAAS,GAAG;AAChC,kBAAM,eAAe,gBAAgB,uBAAuB,2BAA2B,mBAAmB;AACtG,gBAAA,OAAO,YAAY,YAAY,EAAE,KAAM,EAAE,QAAQ,YAAY,cAAc,OAAO,aAAA,CAAc;AACpG;AAAA,UAAA;AAGJ,cAAI,CAAC,mBAAK,QAAO,cAAc,GAAG;AACzB,+BAAA,QAAO,cAAc,IAAI;AAAA,cAC1B,QAAQ,CAAA;AAAA,YACZ;AAAA,UAAA;AAGJ,6BAAK,QAAO,cAAc,EAAE,OAAO,QAAQ,IAAI;AAAA,YAC3C,OAAO;AAAA,YACP,SAAS,WAAW,MAAM;AACtB,qBAAO,mBAAK,QAAO,cAAc,EAAE,OAAO,QAAQ;AAAA,YAAA,GACnD,mBAAK,cAAa,EAAE,MAAM;AAAA,UACjC;AAAA,QAAA;AAEC,aAAA;AAAA,MACT;AAAA,IACJ;AA4CA;AAAA,2CAAkB,OAAO,SAA8B,aACvD;AACQ,UAAA,QAAQ,YAAY,GAAG;AAEvB,gBAAQ,YAAY,EAAE,IAAI,CAAC,iBAAsB;AAE7C,gBAAM,SAAc,MAAM,OAAO,MAAM,YAAY;AAC9C,6BAAA,YAAW,cAAc,QAAQ,QAAQ;AAAA,QAAA,CACjD;AAAA,MAAA,OACE;AAEH,cAAM,SAAc,MAAM,OAAO,MAAM,QAAQ,YAAY,CAAC;AACvD,2BAAA,YAAW,cAAc,QAAQ,QAAQ;AAAA,MAAA;AAG3C,aAAA,mBAAK,YAAW,WAAW,QAAQ;AAAA,IAC9C;AAEA,6CAAoB,OAAO,aAC3B;AACW,aAAA,mBAAK,YAAW,WAAW,QAAQ;AAAA,IAC9C;AAEA,uCAAc,OAAO,OAAe,UAAkB,aAAuC;AACnF,YAAA,gBAAiB,WACjB,GAAG,QAAQ,GAAG,SAAS,cAAc,GAAG,SAAS,cAAc,KAC/D,GAAG,SAAS,UAAU,IAAI,SAAS,MAAM,GAAG,SAAS,cAAc,GAAG,SAAS,cAAc;AAEnG,YAAM,OAAO,WAAW;AAAA,QACpB,OAAO;AAAA;AAAA,QACP,iBAAiB;AAAA;AAAA,QACjB,aAAa;AAAA;AAAA,QACb,WAAW;AAAA,QACX,uBAAuB;AAAA;AAAA,QACvB,SAAS;AAAA,QACT,SAAS;AAAA;AAAA;AAAA,QAET,cAAc,mBAAKA,gBAAc,SAAS,aAAa;AAAA,MAAA,CAC1D;AAGD,YAAM,sBAAsB,UAAsB,OAAO,EAAE,QAAQ,MAAM;AACzE,YAAM,MAAM,oBAAoB;AAEhC,YAAM,MAAM,MAAM,KAAK,cAAc,GAAG;AAClC,YAAA,aAAa,IAAI,aAAa;AAEpC,YAAM,gBAAgB;AAAA,QAClB,QAAQ;AAAA;AAAA,QAER;AAAA;AAAA,QAEA,WAAY,CAAC,OAAO;AAAA;AAAA,MACxB;AAEA,aAAO,IAAI,OAAO,OAAO,YAAY,aAAa;AAAA,IACtD;AAGA;AAAA,yCAAgB,CAAC,QAAgB;AAC7B,YAAM,QAAQ,IAAI,MAAM,mBAAK,aAAY;AAClC,aAAA,QAAQ,MAAM,CAAC,IAAI;AAAA,IAC9B;AAEA,+DAAsC,OAAO,SAAsD,YAAqD;AACpJ,YAAM,EAAE,OAAO,UAAU,kBAAkB,UAAU,sBAAsB,0BAA0B;AAErG,UAAI,QAAQ;AAEN,YAAA,gBAAgB,CAAC,UAAiB;AACpC,8BAAK,8CAAL,WAAsB;AACtB,YAAI,sBAAsB;AACD,+BAAA,iBAAiB,MAAM,kCAAkC;AAAA;AAAA,YAC1E,KAAK;AAAA,UAAA,CACR;AAAA,QAAA;AAEL,gBAAQ,KAAK;AAAA,MACjB;AAEI,UAAA;AACQ,gBAAA;AACF,cAAA,SAAS,MAAM,MAAM,GAAG;AAC9B,YAAI,SAAwB;AAC5B,YAAI,QAAsB;AAClB,gBAAA;AACR,iBAAS,IAAE,GAAG,IAAI,OAAO,QAAQ,KAAK;AAC5B,gBAAA,IAAI,OAAO,CAAC;AAClB,cAAI,CAAC,QAAQ;AACA,qBAAA,KAAK,cAAc,CAAC;AAC7B,gBAAI,CAAC,QAAQ;AACT,sBAAQ,IAAI,MAAM,WAAW,KAAK,mGAAmG;AACrI;AAAA,YAAA;AAAA,UACJ,OACG;AACG,kBAAA,aAA4B,KAAK,cAAc,CAAC;AACtD,gBAAI,CAAC,YAAY;AACb,sBAAQ,IAAI,MAAM,WAAW,KAAK,mGAAmG;AACrI;AAAA,YAAA,OACG;AACH,kBAAI,OAAO,cAAc,UAAU,MAAM,GAAG;AACxC,wBAAQ,IAAI,MAAM,WAAW,KAAK,oFAAoF;AACtH;AAAA,cAAA;AAAA,YACJ;AAAA,UACJ;AAAA,QACJ;AAEI,gBAAA;AACR,YAAI,OAAO;AACP,wBAAc,KAAK;AACZ,iBAAA;AAAA,QAAA;AAGH,gBAAA;AACR,cAAM,UAAU;AAAA;AAAA,UACZ,WAAW;AAAA;AAAA,UACX,eAAe;AAAA;AAAA;AAAA,UAEf;AAAA;AAAA;AAAA;AAAA,UAGA,YAAY;AAAA,QAChB;AACQ,gBAAA;AACR,cAAM,MAAO,WACP,GAAG,QAAQ,GAAG,SAAS,cAAc,WACrC,GAAG,SAAS,UAAU,IAAI,SAAS,MAAM,GAAG,SAAS,cAAc;AAEzE,gBAAQ,cAAc,GAAG,eAAe,KAAK,UAAU,OAAO,CAAC;AAE/D,cAAM,SAAS,MAAM,MAAM,IAAI,eAAe,KAAK,MAAM,EACpD,mBAAmB,EACnB,SAAS,OAAO,EAChB,iBAAiB,mBAAKA,eAAa,EAAE,MAAM;AAExC,gBAAA;AACR,YAAI,OAAO,QAAQ;AACX,cAAA,OAAO,WAAW,KAAK;AAEvB,kCAAK,8CAAL,WAAsB,MAAM,QAAQ,+EAA+E,OAAO,MAAM,GAAG;AAAA,UAAC;AAAA,QACxI,OACG;AACH,wBAAc,IAAI,MAAM,MAAM,IAAI,8DAA8D,CAAC,CAAC;AAC3F,iBAAA;AAAA,QAAA;AAEH,gBAAA;AACR,YAAI,OAAO,MAAM;AACL,kBAAA;AACJ,cAAA,OAAO,KAAK,cAAc;AAClB,oBAAA;AACR,gBAAI,sBAAsB;AACd,sBAAA;AACa,mCAAA,iBAAiB,MAAM,4BAA4B;AAAA,gBACpE,KAAK;AAAA,cAAA,CACR;AAAA,YAAA;AAGG,oBAAA;AACR,mBAAO,OAAO,KAAK;AAAA,UAAA,OAChB;AACK,oBAAA;AACM,0BAAA,IAAI,MAAM,yEAAyE,CAAC;AAC3F,mBAAA;AAAA,UAAA;AAAA,QACX,OACG;AACK,kBAAA;AACM,wBAAA,IAAI,MAAM,4DAA4D,CAAC;AAC9E,iBAAA;AAAA,QAAA;AAAA,eAGN,OAAY;AACjB,YAAI,0BAA0B,MAAM;AAChC,kBAAQ,MAAM,KAAK;AAAA,QAAA;AAEvB,YAAI,UAAU;AACd,YAAI,MAAM,YAAY,MAAM,SAAS,MAAM;AACnC,cAAA;AACA,sBAAU,KAAK,UAAU,MAAM,SAAS,IAAI;AAAA,mBAEvCC,QAAO;AACF,sBAAA;AAAA,UAAA;AAAA,QACd;AAEU,sBAAA,IAAI,MAAM,uDAAuD,KAAK,cAAc,KAAK,gBAAgB,OAAO,GAAG,CAAC;AAC3H,eAAA;AAAA,MAAA;AAAA,IAEf;AAjSI,uBAAKF,UAAU;AACV,uBAAA,YAAa,IAAI,MAAM,UAAU;AAAA,EAAA;AAAA,EAQ1C,IAAI,eAA6B;AAC7B,WAAO,mBAAKC;AAAA,EAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAqEhB,MAAM,wBAAwB,KAAU,KAAU,MAClD;AACS,SAAA;AAAA,EAAA;AAiNb;AA3SI;AACA;AACAD,WAAA;AACA;AAEA;AACAC,iBAAA;AARG;AAAA;AAgBH,8BAAiB,SAAc;AACtB,qBAAAD,UAAQ,MAAM,OAAO;AAAA;","x_google_ignoreList":[1,2]}
+{"version":3,"file":"stsauthclient.mjs","sources":["../src/commonTypes.ts","../node_modules/http-status-codes/build/es/status-codes.js","../src/resourceManager.ts","../src/sessionManager.ts","../src/authutilsnode.ts"],"sourcesContent":["import { StatusCodes } from 'http-status-codes'\n\nimport { OIDCStandardClaim, OAuth2ParameterType, ISTSLogger, AgentManager } from '@nsshunt/stsutils';\n\nexport interface ISTSResourceManagerOptions {\n\ttimeout: number\n    asendpoint: string\n    logger: ISTSLogger\n    agentManager?: AgentManager\n}\n\nexport interface ISTSAuthPayload {\n\tsessionId: string,\n\tid_token: string,\n\tconsentRequired: string[],\n\tremainingAdminConsentRequired: string[],\n\tremainingUserConsentRequired: string[],\n\tauthorizationCode?: string\n\tscope: string\n\tclientName: string\n}\n\nexport interface ISTSLogoutPayload {\n\tsessionId: string\n}\n\nexport interface ISTSConsent {\n    consent: string[]\n}\n\nexport interface ISTSTokenPayload {\n    access_token: string,\n    token_type: \"Bearer\",\n    expires_in: number,\n    refresh_token: string,\n    id_token: string,\n    scope?: string\n}\n\nexport interface ISTSSessionResource { \n    sessionId: string\n    sessionState: string\n    id_token: string\n    consentCurrent: string[]\n    consentRequired: string[]\n    remainingAdminConsentRequired: string[]\n    remainingUserConsentRequired: string[]\n    consentNonce?: string\n    audience: string\n    permissions: string\n    subject: string\n    authorizationCode: string\n    authorizationCodeState: string\n    userId: string\n\n    // Client query paramaters (mandatory)\n    client_id: string\n    response_type: string\n    redirect_uri: string\n    scope: string // Microsoft uses '+' instead of ' ' to seperate scopes - update the string if we have '+' characters\n    state: string\n\n    code_challenge?: string\n    code_challenge_method?: string\n    nonce?: string\n    response_mode?: string\n\n    tokenPayload?: ISTSTokenPayload\n}\n\nexport interface ISTSLoginQueryParams {\n    email: string\n    password: string\n    [OAuth2ParameterType.CLIENT_ID]: string\n    nonce: string\n    [OAuth2ParameterType.RESPONSE_TYPE]: string\n    [OAuth2ParameterType.REDIRECT_URI]: string\n    [OAuth2ParameterType.RESPONSE_MODE]: string\n    [OAuth2ParameterType.SCOPE]: string\n    [OAuth2ParameterType.STATE]: string\n    code_challenge: string\n    code_challenge_method: string\n}\n\nexport interface ISTSUser {\n    id: string\n    name: string\n    email: string\n    hash: string\n    roles: string[]\n}\n\nexport interface ISTSAuthorizationCodeResource {\n    sessionId: string\n}\n\nexport interface ISTSClaims {\n    iss: string, // issuer - server that issues the tokens\n    sub: string, // subject - normally the resource (e.g. https://stsmda.com.au/myresource01/) or the user (for id_token)\n    //aud: audience, // audience (normally the API) (e.g. https://stsmda.com.au/myresource01api/)\n    exp: number,  // expires\n    iat: number, // issues at\n    // OIDC claims\n    [OIDCStandardClaim.NAME]: string\n    [OIDCStandardClaim.EMAIL]: string,\n    // STS Custom claims\n    sts_user_id: string\n    // eslint-disable-next-line  @typescript-eslint/no-explicit-any\n    sts_user_roles: any\n    //alg: 'RS256'\n    [OIDCStandardClaim.NONCE]?: string\n}\n\nexport interface ISTSResourceEx<T> {\n    status: StatusCodes;\n    error?: string;\n    sourceError?: Error;\n    detail?: T;\n}\n\nexport interface ISTSError {\n    status: StatusCodes;\n    error: string;\n    // eslint-disable-next-line  @typescript-eslint/no-explicit-any\n    detail: any;\n}\n\nexport const iss = `https://stscore.stsmda.org/oauth2/v2.0`;\n\nexport const STSAuthClientErrorCode = Object.freeze({\n    STS_AC_MISSING_PERMISSION: {\n        code: 'STS_AFC0001',\n        description: 'STS_AC_0001: Missing Permission(s).'\n    },\n});\n","// Generated file. Do not edit\nexport var StatusCodes;\n(function (StatusCodes) {\n    /**\n     * Official Documentation @ https://tools.ietf.org/html/rfc7231#section-6.2.1\n     *\n     * This interim response indicates that everything so far is OK and that the client should continue with the request or ignore it if it is already finished.\n     */\n    StatusCodes[StatusCodes[\"CONTINUE\"] = 100] = \"CONTINUE\";\n    /**\n     * Official Documentation @ https://tools.ietf.org/html/rfc7231#section-6.2.2\n     *\n     * This code is sent in response to an Upgrade request header by the client, and indicates the protocol the server is switching too.\n     */\n    StatusCodes[StatusCodes[\"SWITCHING_PROTOCOLS\"] = 101] = \"SWITCHING_PROTOCOLS\";\n    /**\n     * Official Documentation @ https://tools.ietf.org/html/rfc2518#section-10.1\n     *\n     * This code indicates that the server has received and is processing the request, but no response is available yet.\n     */\n    StatusCodes[StatusCodes[\"PROCESSING\"] = 102] = \"PROCESSING\";\n    /**\n     * Official Documentation @ https://www.rfc-editor.org/rfc/rfc8297#page-3\n     *\n     * This code indicates to the client that the server is likely to send a final response with the header fields included in the informational response.\n     */\n    StatusCodes[StatusCodes[\"EARLY_HINTS\"] = 103] = \"EARLY_HINTS\";\n    /**\n     * Official Documentation @ https://tools.ietf.org/html/rfc7231#section-6.3.1\n     *\n     * The request has succeeded. The meaning of a success varies depending on the HTTP method:\n     * GET: The resource has been fetched and is transmitted in the message body.\n     * HEAD: The entity headers are in the message body.\n     * POST: The resource describing the result of the action is transmitted in the message body.\n     * TRACE: The message body contains the request message as received by the server\n     */\n    StatusCodes[StatusCodes[\"OK\"] = 200] = \"OK\";\n    /**\n     * Official Documentation @ https://tools.ietf.org/html/rfc7231#section-6.3.2\n     *\n     * The request has succeeded and a new resource has been created as a result of it. This is typically the response sent after a PUT request.\n     */\n    StatusCodes[StatusCodes[\"CREATED\"] = 201] = \"CREATED\";\n    /**\n     * Official Documentation @ https://tools.ietf.org/html/rfc7231#section-6.3.3\n     *\n     * The request has been received but not yet acted upon. It is non-committal, meaning that there is no way in HTTP to later send an asynchronous response indicating the outcome of processing the request. It is intended for cases where another process or server handles the request, or for batch processing.\n     */\n    StatusCodes[StatusCodes[\"ACCEPTED\"] = 202] = \"ACCEPTED\";\n    /**\n     * Official Documentation @ https://tools.ietf.org/html/rfc7231#section-6.3.4\n     *\n     * This response code means returned meta-information set is not exact set as available from the origin server, but collected from a local or a third party copy. Except this condition, 200 OK response should be preferred instead of this response.\n     */\n    StatusCodes[StatusCodes[\"NON_AUTHORITATIVE_INFORMATION\"] = 203] = \"NON_AUTHORITATIVE_INFORMATION\";\n    /**\n     * Official Documentation @ https://tools.ietf.org/html/rfc7231#section-6.3.5\n     *\n     * There is no content to send for this request, but the headers may be useful. The user-agent may update its cached headers for this resource with the new ones.\n     */\n    StatusCodes[StatusCodes[\"NO_CONTENT\"] = 204] = \"NO_CONTENT\";\n    /**\n     * Official Documentation @ https://tools.ietf.org/html/rfc7231#section-6.3.6\n     *\n     * This response code is sent after accomplishing request to tell user agent reset document view which sent this request.\n     */\n    StatusCodes[StatusCodes[\"RESET_CONTENT\"] = 205] = \"RESET_CONTENT\";\n    /**\n     * Official Documentation @ https://tools.ietf.org/html/rfc7233#section-4.1\n     *\n     * This response code is used because of range header sent by the client to separate download into multiple streams.\n     */\n    StatusCodes[StatusCodes[\"PARTIAL_CONTENT\"] = 206] = \"PARTIAL_CONTENT\";\n    /**\n     * Official Documentation @ https://tools.ietf.org/html/rfc2518#section-10.2\n     *\n     * A Multi-Status response conveys information about multiple resources in situations where multiple status codes might be appropriate.\n     */\n    StatusCodes[StatusCodes[\"MULTI_STATUS\"] = 207] = \"MULTI_STATUS\";\n    /**\n     * Official Documentation @ https://tools.ietf.org/html/rfc7231#section-6.4.1\n     *\n     * The request has more than one possible responses. User-agent or user should choose one of them. There is no standardized way to choose one of the responses.\n     */\n    StatusCodes[StatusCodes[\"MULTIPLE_CHOICES\"] = 300] = \"MULTIPLE_CHOICES\";\n    /**\n     * Official Documentation @ https://tools.ietf.org/html/rfc7231#section-6.4.2\n     *\n     * This response code means that URI of requested resource has been changed. Probably, new URI would be given in the response.\n     */\n    StatusCodes[StatusCodes[\"MOVED_PERMANENTLY\"] = 301] = \"MOVED_PERMANENTLY\";\n    /**\n     * Official Documentation @ https://tools.ietf.org/html/rfc7231#section-6.4.3\n     *\n     * This response code means that URI of requested resource has been changed temporarily. New changes in the URI might be made in the future. Therefore, this same URI should be used by the client in future requests.\n     */\n    StatusCodes[StatusCodes[\"MOVED_TEMPORARILY\"] = 302] = \"MOVED_TEMPORARILY\";\n    /**\n     * Official Documentation @ https://tools.ietf.org/html/rfc7231#section-6.4.4\n     *\n     * Server sent this response to directing client to get requested resource to another URI with an GET request.\n     */\n    StatusCodes[StatusCodes[\"SEE_OTHER\"] = 303] = \"SEE_OTHER\";\n    /**\n     * Official Documentation @ https://tools.ietf.org/html/rfc7232#section-4.1\n     *\n     * This is used for caching purposes. It is telling to client that response has not been modified. So, client can continue to use same cached version of response.\n     */\n    StatusCodes[StatusCodes[\"NOT_MODIFIED\"] = 304] = \"NOT_MODIFIED\";\n    /**\n     * @deprecated\n     * Official Documentation @ https://tools.ietf.org/html/rfc7231#section-6.4.6\n     *\n     * Was defined in a previous version of the HTTP specification to indicate that a requested response must be accessed by a proxy. It has been deprecated due to security concerns regarding in-band configuration of a proxy.\n     */\n    StatusCodes[StatusCodes[\"USE_PROXY\"] = 305] = \"USE_PROXY\";\n    /**\n     * Official Documentation @ https://tools.ietf.org/html/rfc7231#section-6.4.7\n     *\n     * Server sent this response to directing client to get requested resource to another URI with same method that used prior request. This has the same semantic than the 302 Found HTTP response code, with the exception that the user agent must not change the HTTP method used: if a POST was used in the first request, a POST must be used in the second request.\n     */\n    StatusCodes[StatusCodes[\"TEMPORARY_REDIRECT\"] = 307] = \"TEMPORARY_REDIRECT\";\n    /**\n     * Official Documentation @ https://tools.ietf.org/html/rfc7538#section-3\n     *\n     * This means that the resource is now permanently located at another URI, specified by the Location: HTTP Response header. This has the same semantics as the 301 Moved Permanently HTTP response code, with the exception that the user agent must not change the HTTP method used: if a POST was used in the first request, a POST must be used in the second request.\n     */\n    StatusCodes[StatusCodes[\"PERMANENT_REDIRECT\"] = 308] = \"PERMANENT_REDIRECT\";\n    /**\n     * Official Documentation @ https://tools.ietf.org/html/rfc7231#section-6.5.1\n     *\n     * This response means that server could not understand the request due to invalid syntax.\n     */\n    StatusCodes[StatusCodes[\"BAD_REQUEST\"] = 400] = \"BAD_REQUEST\";\n    /**\n     * Official Documentation @ https://tools.ietf.org/html/rfc7235#section-3.1\n     *\n     * Although the HTTP standard specifies \"unauthorized\", semantically this response means \"unauthenticated\". That is, the client must authenticate itself to get the requested response.\n     */\n    StatusCodes[StatusCodes[\"UNAUTHORIZED\"] = 401] = \"UNAUTHORIZED\";\n    /**\n     * Official Documentation @ https://tools.ietf.org/html/rfc7231#section-6.5.2\n     *\n     * This response code is reserved for future use. Initial aim for creating this code was using it for digital payment systems however this is not used currently.\n     */\n    StatusCodes[StatusCodes[\"PAYMENT_REQUIRED\"] = 402] = \"PAYMENT_REQUIRED\";\n    /**\n     * Official Documentation @ https://tools.ietf.org/html/rfc7231#section-6.5.3\n     *\n     * The client does not have access rights to the content, i.e. they are unauthorized, so server is rejecting to give proper response. Unlike 401, the client's identity is known to the server.\n     */\n    StatusCodes[StatusCodes[\"FORBIDDEN\"] = 403] = \"FORBIDDEN\";\n    /**\n     * Official Documentation @ https://tools.ietf.org/html/rfc7231#section-6.5.4\n     *\n     * The server can not find requested resource. In the browser, this means the URL is not recognized. In an API, this can also mean that the endpoint is valid but the resource itself does not exist. Servers may also send this response instead of 403 to hide the existence of a resource from an unauthorized client. This response code is probably the most famous one due to its frequent occurence on the web.\n     */\n    StatusCodes[StatusCodes[\"NOT_FOUND\"] = 404] = \"NOT_FOUND\";\n    /**\n     * Official Documentation @ https://tools.ietf.org/html/rfc7231#section-6.5.5\n     *\n     * The request method is known by the server but has been disabled and cannot be used. For example, an API may forbid DELETE-ing a resource. The two mandatory methods, GET and HEAD, must never be disabled and should not return this error code.\n     */\n    StatusCodes[StatusCodes[\"METHOD_NOT_ALLOWED\"] = 405] = \"METHOD_NOT_ALLOWED\";\n    /**\n     * Official Documentation @ https://tools.ietf.org/html/rfc7231#section-6.5.6\n     *\n     * This response is sent when the web server, after performing server-driven content negotiation, doesn't find any content following the criteria given by the user agent.\n     */\n    StatusCodes[StatusCodes[\"NOT_ACCEPTABLE\"] = 406] = \"NOT_ACCEPTABLE\";\n    /**\n     * Official Documentation @ https://tools.ietf.org/html/rfc7235#section-3.2\n     *\n     * This is similar to 401 but authentication is needed to be done by a proxy.\n     */\n    StatusCodes[StatusCodes[\"PROXY_AUTHENTICATION_REQUIRED\"] = 407] = \"PROXY_AUTHENTICATION_REQUIRED\";\n    /**\n     * Official Documentation @ https://tools.ietf.org/html/rfc7231#section-6.5.7\n     *\n     * This response is sent on an idle connection by some servers, even without any previous request by the client. It means that the server would like to shut down this unused connection. This response is used much more since some browsers, like Chrome, Firefox 27+, or IE9, use HTTP pre-connection mechanisms to speed up surfing. Also note that some servers merely shut down the connection without sending this message.\n     */\n    StatusCodes[StatusCodes[\"REQUEST_TIMEOUT\"] = 408] = \"REQUEST_TIMEOUT\";\n    /**\n     * Official Documentation @ https://tools.ietf.org/html/rfc7231#section-6.5.8\n     *\n     * This response is sent when a request conflicts with the current state of the server.\n     */\n    StatusCodes[StatusCodes[\"CONFLICT\"] = 409] = \"CONFLICT\";\n    /**\n     * Official Documentation @ https://tools.ietf.org/html/rfc7231#section-6.5.9\n     *\n     * This response would be sent when the requested content has been permenantly deleted from server, with no forwarding address. Clients are expected to remove their caches and links to the resource. The HTTP specification intends this status code to be used for \"limited-time, promotional services\". APIs should not feel compelled to indicate resources that have been deleted with this status code.\n     */\n    StatusCodes[StatusCodes[\"GONE\"] = 410] = \"GONE\";\n    /**\n     * Official Documentation @ https://tools.ietf.org/html/rfc7231#section-6.5.10\n     *\n     * The server rejected the request because the Content-Length header field is not defined and the server requires it.\n     */\n    StatusCodes[StatusCodes[\"LENGTH_REQUIRED\"] = 411] = \"LENGTH_REQUIRED\";\n    /**\n     * Official Documentation @ https://tools.ietf.org/html/rfc7232#section-4.2\n     *\n     * The client has indicated preconditions in its headers which the server does not meet.\n     */\n    StatusCodes[StatusCodes[\"PRECONDITION_FAILED\"] = 412] = \"PRECONDITION_FAILED\";\n    /**\n     * Official Documentation @ https://tools.ietf.org/html/rfc7231#section-6.5.11\n     *\n     * Request entity is larger than limits defined by server; the server might close the connection or return an Retry-After header field.\n     */\n    StatusCodes[StatusCodes[\"REQUEST_TOO_LONG\"] = 413] = \"REQUEST_TOO_LONG\";\n    /**\n     * Official Documentation @ https://tools.ietf.org/html/rfc7231#section-6.5.12\n     *\n     * The URI requested by the client is longer than the server is willing to interpret.\n     */\n    StatusCodes[StatusCodes[\"REQUEST_URI_TOO_LONG\"] = 414] = \"REQUEST_URI_TOO_LONG\";\n    /**\n     * Official Documentation @ https://tools.ietf.org/html/rfc7231#section-6.5.13\n     *\n     * The media format of the requested data is not supported by the server, so the server is rejecting the request.\n     */\n    StatusCodes[StatusCodes[\"UNSUPPORTED_MEDIA_TYPE\"] = 415] = \"UNSUPPORTED_MEDIA_TYPE\";\n    /**\n     * Official Documentation @ https://tools.ietf.org/html/rfc7233#section-4.4\n     *\n     * The range specified by the Range header field in the request can't be fulfilled; it's possible that the range is outside the size of the target URI's data.\n     */\n    StatusCodes[StatusCodes[\"REQUESTED_RANGE_NOT_SATISFIABLE\"] = 416] = \"REQUESTED_RANGE_NOT_SATISFIABLE\";\n    /**\n     * Official Documentation @ https://tools.ietf.org/html/rfc7231#section-6.5.14\n     *\n     * This response code means the expectation indicated by the Expect request header field can't be met by the server.\n     */\n    StatusCodes[StatusCodes[\"EXPECTATION_FAILED\"] = 417] = \"EXPECTATION_FAILED\";\n    /**\n     * Official Documentation @ https://tools.ietf.org/html/rfc2324#section-2.3.2\n     *\n     * Any attempt to brew coffee with a teapot should result in the error code \"418 I'm a teapot\". The resulting entity body MAY be short and stout.\n     */\n    StatusCodes[StatusCodes[\"IM_A_TEAPOT\"] = 418] = \"IM_A_TEAPOT\";\n    /**\n     * Official Documentation @ https://tools.ietf.org/html/rfc2518#section-10.6\n     *\n     * The 507 (Insufficient Storage) status code means the method could not be performed on the resource because the server is unable to store the representation needed to successfully complete the request. This condition is considered to be temporary. If the request which received this status code was the result of a user action, the request MUST NOT be repeated until it is requested by a separate user action.\n     */\n    StatusCodes[StatusCodes[\"INSUFFICIENT_SPACE_ON_RESOURCE\"] = 419] = \"INSUFFICIENT_SPACE_ON_RESOURCE\";\n    /**\n     * @deprecated\n     * Official Documentation @ https://tools.ietf.org/rfcdiff?difftype=--hwdiff&url2=draft-ietf-webdav-protocol-06.txt\n     *\n     * A deprecated response used by the Spring Framework when a method has failed.\n     */\n    StatusCodes[StatusCodes[\"METHOD_FAILURE\"] = 420] = \"METHOD_FAILURE\";\n    /**\n     * Official Documentation @ https://datatracker.ietf.org/doc/html/rfc7540#section-9.1.2\n     *\n     * Defined in the specification of HTTP/2 to indicate that a server is not able to produce a response for the combination of scheme and authority that are included in the request URI.\n     */\n    StatusCodes[StatusCodes[\"MISDIRECTED_REQUEST\"] = 421] = \"MISDIRECTED_REQUEST\";\n    /**\n     * Official Documentation @ https://tools.ietf.org/html/rfc2518#section-10.3\n     *\n     * The request was well-formed but was unable to be followed due to semantic errors.\n     */\n    StatusCodes[StatusCodes[\"UNPROCESSABLE_ENTITY\"] = 422] = \"UNPROCESSABLE_ENTITY\";\n    /**\n     * Official Documentation @ https://tools.ietf.org/html/rfc2518#section-10.4\n     *\n     * The resource that is being accessed is locked.\n     */\n    StatusCodes[StatusCodes[\"LOCKED\"] = 423] = \"LOCKED\";\n    /**\n     * Official Documentation @ https://tools.ietf.org/html/rfc2518#section-10.5\n     *\n     * The request failed due to failure of a previous request.\n     */\n    StatusCodes[StatusCodes[\"FAILED_DEPENDENCY\"] = 424] = \"FAILED_DEPENDENCY\";\n    /**\n     * Official Documentation @ https://datatracker.ietf.org/doc/html/rfc7231#section-6.5.15\n     *\n     * The server refuses to perform the request using the current protocol but might be willing to do so after the client upgrades to a different protocol.\n     */\n    StatusCodes[StatusCodes[\"UPGRADE_REQUIRED\"] = 426] = \"UPGRADE_REQUIRED\";\n    /**\n     * Official Documentation @ https://tools.ietf.org/html/rfc6585#section-3\n     *\n     * The origin server requires the request to be conditional. Intended to prevent the 'lost update' problem, where a client GETs a resource's state, modifies it, and PUTs it back to the server, when meanwhile a third party has modified the state on the server, leading to a conflict.\n     */\n    StatusCodes[StatusCodes[\"PRECONDITION_REQUIRED\"] = 428] = \"PRECONDITION_REQUIRED\";\n    /**\n     * Official Documentation @ https://tools.ietf.org/html/rfc6585#section-4\n     *\n     * The user has sent too many requests in a given amount of time (\"rate limiting\").\n     */\n    StatusCodes[StatusCodes[\"TOO_MANY_REQUESTS\"] = 429] = \"TOO_MANY_REQUESTS\";\n    /**\n     * Official Documentation @ https://tools.ietf.org/html/rfc6585#section-5\n     *\n     * The server is unwilling to process the request because its header fields are too large. The request MAY be resubmitted after reducing the size of the request header fields.\n     */\n    StatusCodes[StatusCodes[\"REQUEST_HEADER_FIELDS_TOO_LARGE\"] = 431] = \"REQUEST_HEADER_FIELDS_TOO_LARGE\";\n    /**\n     * Official Documentation @ https://tools.ietf.org/html/rfc7725\n     *\n     * The user-agent requested a resource that cannot legally be provided, such as a web page censored by a government.\n     */\n    StatusCodes[StatusCodes[\"UNAVAILABLE_FOR_LEGAL_REASONS\"] = 451] = \"UNAVAILABLE_FOR_LEGAL_REASONS\";\n    /**\n     * Official Documentation @ https://tools.ietf.org/html/rfc7231#section-6.6.1\n     *\n     * The server encountered an unexpected condition that prevented it from fulfilling the request.\n     */\n    StatusCodes[StatusCodes[\"INTERNAL_SERVER_ERROR\"] = 500] = \"INTERNAL_SERVER_ERROR\";\n    /**\n     * Official Documentation @ https://tools.ietf.org/html/rfc7231#section-6.6.2\n     *\n     * The request method is not supported by the server and cannot be handled. The only methods that servers are required to support (and therefore that must not return this code) are GET and HEAD.\n     */\n    StatusCodes[StatusCodes[\"NOT_IMPLEMENTED\"] = 501] = \"NOT_IMPLEMENTED\";\n    /**\n     * Official Documentation @ https://tools.ietf.org/html/rfc7231#section-6.6.3\n     *\n     * This error response means that the server, while working as a gateway to get a response needed to handle the request, got an invalid response.\n     */\n    StatusCodes[StatusCodes[\"BAD_GATEWAY\"] = 502] = \"BAD_GATEWAY\";\n    /**\n     * Official Documentation @ https://tools.ietf.org/html/rfc7231#section-6.6.4\n     *\n     * The server is not ready to handle the request. Common causes are a server that is down for maintenance or that is overloaded. Note that together with this response, a user-friendly page explaining the problem should be sent. This responses should be used for temporary conditions and the Retry-After: HTTP header should, if possible, contain the estimated time before the recovery of the service. The webmaster must also take care about the caching-related headers that are sent along with this response, as these temporary condition responses should usually not be cached.\n     */\n    StatusCodes[StatusCodes[\"SERVICE_UNAVAILABLE\"] = 503] = \"SERVICE_UNAVAILABLE\";\n    /**\n     * Official Documentation @ https://tools.ietf.org/html/rfc7231#section-6.6.5\n     *\n     * This error response is given when the server is acting as a gateway and cannot get a response in time.\n     */\n    StatusCodes[StatusCodes[\"GATEWAY_TIMEOUT\"] = 504] = \"GATEWAY_TIMEOUT\";\n    /**\n     * Official Documentation @ https://tools.ietf.org/html/rfc7231#section-6.6.6\n     *\n     * The HTTP version used in the request is not supported by the server.\n     */\n    StatusCodes[StatusCodes[\"HTTP_VERSION_NOT_SUPPORTED\"] = 505] = \"HTTP_VERSION_NOT_SUPPORTED\";\n    /**\n     * Official Documentation @ https://tools.ietf.org/html/rfc2518#section-10.6\n     *\n     * The server has an internal configuration error: the chosen variant resource is configured to engage in transparent content negotiation itself, and is therefore not a proper end point in the negotiation process.\n     */\n    StatusCodes[StatusCodes[\"INSUFFICIENT_STORAGE\"] = 507] = \"INSUFFICIENT_STORAGE\";\n    /**\n     * Official Documentation @ https://tools.ietf.org/html/rfc6585#section-6\n     *\n     * The 511 status code indicates that the client needs to authenticate to gain network access.\n     */\n    StatusCodes[StatusCodes[\"NETWORK_AUTHENTICATION_REQUIRED\"] = 511] = \"NETWORK_AUTHENTICATION_REQUIRED\";\n})(StatusCodes || (StatusCodes = {}));\n","import { StatusCodes } from 'http-status-codes';\n\nimport axios, { AxiosRequestConfig } from \"axios\";\n\nimport { JSONObject, AgentManager, STSAxiosConfig } from '@nsshunt/stsutils';\n\nimport { ISTSError, ISTSResourceManagerOptions } from './commonTypes'\n\nexport abstract class ResourceManager {\n    #options: ISTSResourceManagerOptions;\n\n    constructor(options: ISTSResourceManagerOptions) {\n        this.#options = options;\n        this.LogDebugMessage(`STSOAuth2Worker:constructor:#options: [${JSON.stringify(this.#options)}]`);\n    }\n\n    get agentManager(): AgentManager | null {\n        if (this.#options.agentManager) {\n            return this.#options.agentManager;\n        } else {\n            return null;\n        }\n    }\n\n    get options(): ISTSResourceManagerOptions {\n        return this.#options;\n    }\n\n    // eslint-disable-next-line  @typescript-eslint/no-explicit-any\n    LogDebugMessage(message: any) {\n        this.#options.logger.debug(message);\n    }\n\n    // eslint-disable-next-line  @typescript-eslint/no-explicit-any\n    LogInfoMessage(message: any) {\n        this.#options.logger.info(message);\n    }\n\n    // eslint-disable-next-line  @typescript-eslint/no-explicit-any\n    LogErrorMessage(message: any) {\n        this.#options.logger.error(message);\n    }\n\n    // eslint-disable-next-line  @typescript-eslint/no-explicit-any\n    GetErrorMessage = (status: StatusCodes, error: string, detail: any): ISTSError => {\n        return {\n            status,\n            error,\n            detail\n        };\n    }\n\n    GetHeaders = (access_token: string | null): JSONObject => {\n        const headers: JSONObject = { \n            'Content-Type': 'application/json'\n        }\n        if (access_token) {\n            headers['Authorization'] = `Bearer ${access_token}`;\n        }\n        return headers;\n    }\n\n    GetResult = async <T>(accessToken: string | null, url: string, method: string, requestData: JSONObject | null, errorCb: (error: ISTSError) => void): Promise<T | null> => {\n        const axiosConfig = new STSAxiosConfig(url, method, this.GetHeaders(accessToken as string), this.options.timeout);\n        if (this.#options.agentManager) {\n            axiosConfig.withAgentManager(this.#options.agentManager)\n        }\n        if (requestData !== null) {\n            axiosConfig.withData(requestData)\n        }\n\n        const data = await axios(axiosConfig.config as AxiosRequestConfig); // The snapshot is not actually required here but after the await. I put it here by way of example only.\n        // The reason is that when await is called, the node event loop will continue to process all remaining queued operations.\n        // One of those operations or any operation executed prior to the axios call completing might update the config. So we need to use the\n        // snapshot copy of the config made above.\n        if (data.data.status === StatusCodes.OK || data.data.status === StatusCodes.CREATED) {\n            const sessionDataRaw = data.data.detail;\n            if (sessionDataRaw) {\n                try {\n                    const sessionData = JSON.parse(sessionDataRaw) as T;\n                    return sessionData;\n                } catch  (error) {\n                    errorCb(this.GetErrorMessage(StatusCodes.INTERNAL_SERVER_ERROR, 'SessionManager:GetResult(): Could not parse session data.', error));\n                    return null;\n                }\n            } else {\n                errorCb(this.GetErrorMessage(StatusCodes.INTERNAL_SERVER_ERROR, 'SessionManager:GetResult(): No session data returned.', null));\n                return null;\n            }\n        } else {\n            const { status, error, detail } = data.data;\n            errorCb(this.GetErrorMessage(status, `SessionManager:GetResult(): Status not OK. Error: [${error}]`, detail));\n            return null;\n        }\n    }\n}\n","import { StatusCodes } from 'http-status-codes';\n\nimport { ISTSSessionResource, ISTSError, ISTSResourceManagerOptions } from './commonTypes'\n\nimport { ResourceManager } from './resourceManager'\n\nexport class SessionManager extends ResourceManager {\n    constructor(options: ISTSResourceManagerOptions) {\n        super(options);\n    }\n\n    GetSession = async (access_token: string, sessionId: string, errorCb: (error: ISTSError) => void): Promise<ISTSSessionResource | null> => {\n        try {\n            return this.GetResult<ISTSSessionResource>(access_token, `${this.options.asendpoint}/session/${encodeURIComponent(sessionId)}`, 'get', null, errorCb);\n        // eslint-disable-next-line  @typescript-eslint/no-explicit-any\n        } catch (error: any) {\n            errorCb(this.GetErrorMessage(StatusCodes.INTERNAL_SERVER_ERROR, `SessionManager:GetSession(): Could not process session. Error: [${error}]`, error));\n            return null;\n        }\n    }\n\n    PatchSession = async (access_token: string, session: Partial<ISTSSessionResource>, errorCb: (error: ISTSError) => void): Promise<ISTSSessionResource | null> => {\n        try {\n            if (!session.sessionId) {\n                errorCb(this.GetErrorMessage(StatusCodes.INTERNAL_SERVER_ERROR, 'SessionManager:GetSession(): sessionId not provided.', null));\n                return null;\n            }\n            return this.GetResult<ISTSSessionResource>(access_token, `${this.options.asendpoint}/session/${encodeURIComponent(session.sessionId)}`, 'patch', session, errorCb);\n        // eslint-disable-next-line  @typescript-eslint/no-explicit-any\n        } catch (error: any) {\n            errorCb(this.GetErrorMessage(StatusCodes.INTERNAL_SERVER_ERROR, `SessionManager:GetSession(): Could not process session. Error: [${error}]`, error));\n            return null;\n        }\n    }\n}\n","import tough from 'tough-cookie';\nimport jwt from 'jsonwebtoken';\nimport { jwtDecode } from \"jwt-decode\";\nimport jwksClient from 'jwks-rsa';\n\nimport axios from 'axios';\n\nimport { goptions } from '@nsshunt/stsconfig'\n\nimport { GetErrorPayload, ISTSLogger, JSONObject, AgentManager, STSAxiosConfig } from '@nsshunt/stsutils'\n\nimport { StatusCodes } from 'http-status-codes';\n\nimport chalk from 'chalk';\n\nimport { Gauge, PublishInstrumentController } from '@nsshunt/stsobservability'\n\nimport { iss, STSAuthClientErrorCode } from './commonTypes'\n\nexport interface IAuthUtilsNodeOptions {\n    permissions: string[]\n}\n\nexport interface IGetAPITokenFromAuthServerUsingScopeOptions {\n    clientId: string\n    authClientSecret: string\n    scope: string\n    endPoint: string\n    instrumentController?: PublishInstrumentController\n    outputErrorsToConsole?: boolean\n}\n\ndeclare interface ICacheScopeRecord {\n    scope: string\n    timeout: NodeJS.Timeout\n}\n\ndeclare interface ICacheRecord {\n    scopes: Record<string, ICacheScopeRecord>\n}\n\nexport interface IAuthUtilsNodeOptions {\n    logger: ISTSLogger\n    agentManager?: AgentManager\n}\n\nexport class AuthUtilsNode {\n    #options: IAuthUtilsNodeOptions;\n    #cache: Record<string, ICacheRecord> = { };\n    #cacheTimeout: number = 1000;\n    #cookiejar: tough.CookieJar;\n    // Regular expression to match the origin\n    #originRegex = /^(api:\\/\\/\\w+)/;\n\n    constructor(options: IAuthUtilsNodeOptions) {\n        this.#options = options;\n        this.#cookiejar = new tough.CookieJar();\n    }\n\n    // eslint-disable-next-line @typescript-eslint/no-explicit-any\n    #LogDebugMessage(message: any) {\n        this.#options.logger.debug(message);\n    }\n\n    get agentManager(): AgentManager | undefined {\n        return this.#options.agentManager;\n    }\n\n    ResetAgent = () => {\n        if (this.#options.agentManager) {\n            this.#options.agentManager.ResetAgent();\n        }\n    }\n\n    VerifyRequestMiddlewareFactory = (options: IAuthUtilsNodeOptions) => {\n        // eslint-disable-next-line @typescript-eslint/no-explicit-any\n        return async (req: any, res: any, next: any) => {\n            if (options.permissions) {\n\n                const permissionsKey = options.permissions.join('_');\n                const scopeKey = (req.auth.scope as string).split(' ').join('_');\n\n                if (this.#cache[permissionsKey] && this.#cache[permissionsKey].scopes[scopeKey]) {\n                    next();\n                    return;\n                }\n\n                const scopes = req.auth.scope.split(' ');\n\n                const requiredPermissions = [ ];\n                for (let i=0; i < options.permissions.length; i++) {\n                    const permission = options.permissions[i];\n                    if (!scopes.includes(permission)) {\n                        requiredPermissions.push(permission);\n                    }\n                }\n                if (requiredPermissions.length > 0) {\n                    const errorPayload = GetErrorPayload(STSAuthClientErrorCode.STS_AC_MISSING_PERMISSION, requiredPermissions);\n                    res.status(StatusCodes.UNAUTHORIZED).send( { status: StatusCodes.UNAUTHORIZED, error: errorPayload });\n                    return;\n                }\n\n                if (!this.#cache[permissionsKey]) {\n                    this.#cache[permissionsKey] = {\n                        scopes: { }\n                    }\n                }\n\n                this.#cache[permissionsKey].scopes[scopeKey] = {\n                    scope: scopeKey,\n                    timeout: setTimeout(() => {\n                        delete this.#cache[permissionsKey].scopes[scopeKey]\n                    }, this.#cacheTimeout).unref()\n                }\n            }\n            next();\n        }\n    }\n    /*\n\tlet cookies = await this.GetCookiesFromJar();\n\tconst valid = this.#ValidateCookies(cookies);\n\tif (valid) {\n\t\tnext();\n\t} else {\n\t\tconst error = { }; //@@\n\t\tconst invalidToken = false; //@@\n\t\tif (invalidToken)\n\t\t{\n\t\t\tres.status(StatusCodes.UNAUTHORIZED).send( { status: StatusCodes.UNAUTHORIZED, error: 'Invalid Token', detail: error } );\n\t\t} else{\n\t\t\tres.status(StatusCodes.INTERNAL_SERVER_ERROR).send( { status: StatusCodes.INTERNAL_SERVER_ERROR, error: 'Operation was not successful', detail: error } );\n\t\t}\n\t}\n\t*/\n\n    // eslint-disable-next-line @typescript-eslint/no-explicit-any\n    async verifyRequestMiddleware(req: any, res: any, next: any)\n    {\n        next();\n        /*\n\t\t\n\t\tlet cookies = await this.GetCookiesFromJar();\n\n\t\tconst valid = this.#ValidateCookies(cookies);\n\n\t\tif (valid) {\n\t\t\tnext();\n\t\t} else {\n\t\t\tconst error = { }; //@@\n\t\t\tconst invalidToken = false; //@@\n\t\t\tif (invalidToken)\n\t\t\t{\n\t\t\t\tres.status(StatusCodes.UNAUTHORIZED).send( { status: StatusCodes.UNAUTHORIZED, error: 'Invalid Token', detail: error } );\n\t\t\t} else{\n\t\t\t\tres.status(StatusCodes.INTERNAL_SERVER_ERROR).send( { status: StatusCodes.INTERNAL_SERVER_ERROR, error: 'Operation was not successful', detail: error } );\n\t\t\t}\n\t\t}\n\t\t*/\n    }\n\n    // eslint-disable-next-line @typescript-eslint/no-explicit-any\n    SetCookiesToJar = async (headers: Record<string, any>, endpoint: string): Promise<tough.Cookie[]> =>\n    {\n        if (headers['set-cookie']) {\n            // eslint-disable-next-line @typescript-eslint/no-explicit-any\n            headers['set-cookie'].map((headerCookie: any) => {\n                // eslint-disable-next-line @typescript-eslint/no-explicit-any\n                const cookie: any = tough.Cookie.parse(headerCookie);\n                this.#cookiejar.setCookieSync(cookie, endpoint);\n            });\n        } else {\n            // eslint-disable-next-line @typescript-eslint/no-explicit-any\n            const cookie: any = tough.Cookie.parse(headers['set-cookie']);\n            this.#cookiejar.setCookieSync(cookie, endpoint);\n        }\n\n        return this.#cookiejar.getCookies(endpoint);\n    };\n\n    GetCookiesFromJar = async (endpoint: string): Promise<tough.Cookie[]> =>\n    {\n        return this.#cookiejar.getCookies(endpoint);\n    };\n\n    ValidateJWT = async (token: string, audience: string, endpoint?: string): Promise<string> => {\n        const jwksClientUri = (endpoint \n            ? `${endpoint}${goptions.asoauthapiroot}${goptions.asjwksjsonpath}` \n            : `${goptions.asendpoint}:${goptions.asport}${goptions.asoauthapiroot}${goptions.asjwksjsonpath}`);\n\n        const jwksClientOptions: jwksClient.Options = {\n            cache: true, //@@ all config items\n            cacheMaxEntries: 5, // Default value\n            cacheMaxAge: 600000, // Defaults to 10m\n            rateLimit: true,\n            jwksRequestsPerMinute: 10, // Default value\n            jwksUri: jwksClientUri,\n            timeout: 30000, //@@ config\n        }\n        if (this.#options.agentManager) {\n            // eslint-disable-next-line @typescript-eslint/no-explicit-any\n            jwksClientOptions.requestAgent = this.#options.agentManager.GetAgent(jwksClientUri) as any\n        }\n\n        const jwks = jwksClient(jwksClientOptions);\n\n        // Use decode to get the kid\n        const decodedRefreshToken = jwtDecode<JSONObject>(token, { header: true });\n        const kid = decodedRefreshToken.kid;\n\n        const key = await jwks.getSigningKey(kid);\n        const signingKey = key.getPublicKey();\n\t\t\n        const verifyOptions = {\n            issuer: iss,\n            //subject:  s,\n            audience:  audience,\n            //expiresIn:  600, // 10 minutes\n            algorithm:  [\"RS256\"]   // RSASSA [ \"RS256\", \"RS384\", \"RS512\" ]\n        };\n\n        return jwt.verify(token, signingKey, verifyOptions) as string;\n    }\n\n    // Function to extract the origin from a URI\n    ExtractOrigin = (uri: string) => {\n        const match = uri.match(this.#originRegex);\n        return match ? match[1] : null;\n    }\n\n    GetAPITokenFromAuthServerUsingScope = async (options: IGetAPITokenFromAuthServerUsingScopeOptions, errorCb: (error: Error) => void): Promise<string> => {\n        const { scope, clientId, authClientSecret, endPoint, instrumentController, outputErrorsToConsole } = options;\n\n        let stage = '1';\n\n        const invokeErrorCb = (error: Error) => {\n            this.#LogDebugMessage(error);\n            if (instrumentController) {\n                instrumentController.UpdateInstrument(Gauge.AUTHENTICATION_ERROR_COUNT_GAUGE, { // auth error\n                    Inc: 1\n                });\n            }\n            errorCb(error);\n        };\n\n        try {\n            stage = '2';\n            const scopes = scope.split(' ');\n            let origin: string | null = null;\n            let error: Error | null = null;\n            stage = '3';\n            for (let i=0; i < scopes.length; i++) {\n                const s = scopes[i];\n                if (!origin) {\n                    origin = this.ExtractOrigin(s);\n                    if (!origin) {\n                        error = new Error(`Scope: [${scope}] not in required format. Must use (space seperated) api://<client id>[/<resource>.<permission>].`);\n                        break;\n                    }\n                } else {\n                    const nextOrigin: string | null = this.ExtractOrigin(s);\n                    if (!nextOrigin) {\n                        error = new Error(`Scope: [${scope}] not in required format. Must use (space seperated) api://<client id>[/<resource>.<permission>].`);\n                        break;\n                    } else {\n                        if (origin.localeCompare(nextOrigin) !== 0) {\n                            error = new Error(`Scope: [${scope}] not all from the same client API. All scopes must come from the same client API.`);\n                            break;\n                        }\n                    }\n                }\n            }\n            stage = '4';\n            if (error) {\n                invokeErrorCb(error);\n                return \"\";\n            }\n\n            stage = '5';\n            const payload = { //@@ make a type\n                client_id: clientId, // The service calling this method\n                client_secret: authClientSecret, // Auth service client secret\n                //client_secret: goptions.brokerclientsecret, // Broker service client secret\n                scope: scope, // required API\n                //@@ remove audience\n                //@@ need scope to be the API identifier\n                grant_type: \"client_credentials\"\n            }\n            stage = '6';\n            const url = (endPoint \n                ? `${endPoint}${goptions.asoauthapiroot}/token`\n                : `${goptions.asendpoint}:${goptions.asport}${goptions.asoauthapiroot}/token`);\n\n            stage = `6.5: url: [${url}] payload: [${JSON.stringify(payload)}]`\n\n            const axiosConfig = new STSAxiosConfig(url, 'post')\n                .withDefaultHeaders()\n                .withData(payload);\n            if (this.#options.agentManager) {\n                axiosConfig.withAgentManager(this.#options.agentManager)\n            }\n\n            const retVal = await axios(axiosConfig.config);\n\n            stage = '7';\n            if (retVal.status) {\n                if (retVal.status !== 200) {\n                    // Just provide a warning here\n                    this.#LogDebugMessage(chalk.magenta(`Error (AuthUtilsNode:GetAPITokenFromServer): Invalid response from server: [${retVal.status}]`));\n                }\n            } else {\n                invokeErrorCb(new Error(chalk.red(`Error (AuthUtilsNode:GetAPITokenFromServer:No retVal.status)`)));\n                return \"\";\n            }\n            stage = '8';\n            if (retVal.data) {\n                stage = '9';\n                if (retVal.data.access_token) {\n                    stage = '10';\n                    if (instrumentController) {\n                        stage = '11';\n                        instrumentController.UpdateInstrument(Gauge.AUTHENTICATION_COUNT_GAUGE, {\n                            Inc: 1\n                        });\n                    }\n    \n                    stage = '12';\n                    return retVal.data.access_token as string;\n                } else {\n                    stage = '13';\n                    invokeErrorCb(new Error(`Error (AuthUtilsNode:GetAPITokenFromServer:No retVal.data.access_token)`));\n                    return \"\";\n                }\n            } else {\n                stage = '14';\n                invokeErrorCb(new Error(`Error (AuthUtilsNode:GetAPITokenFromServer:No retVal.data)`));\n                return \"\";\n            }\n        // eslint-disable-next-line @typescript-eslint/no-explicit-any\n        } catch (error: any) {\n            if (outputErrorsToConsole === true) {\n                console.error(error);\n            }\n            let details = 'None available.';\n            if (error.response && error.response.data) {\n                try {\n                    details = JSON.stringify(error.response.data);\n                // eslint-disable-next-line @typescript-eslint/no-unused-vars\n                } catch (error) {\n                    details = `Could not JSON.stringify(error.response.data)`;\n                }\n            }\n            invokeErrorCb(new Error(`Error (AuthUtilsNode:GetAPITokenFromServer:catch): [${error}], Stage: [${stage}], Details: [${details}]`));\n            return \"\";\n        }\n    }\n}\n"],"names":["StatusCodes","_options","error"],"mappings":";;;;;;;;;;;;;;;;;;;;;AA+HO,MAAM,MAAM;AAEN,MAAA,yBAAyB,OAAO,OAAO;AAAA,EAChD,2BAA2B;AAAA,IACvB,MAAM;AAAA,IACN,aAAa;AAAA,EAAA;AAErB,CAAC;ACrIM,IAAI;AAAA,CACV,SAAUA,cAAa;AAMpB,EAAAA,aAAYA,aAAY,UAAU,IAAI,GAAG,IAAI;AAM7C,EAAAA,aAAYA,aAAY,qBAAqB,IAAI,GAAG,IAAI;AAMxD,EAAAA,aAAYA,aAAY,YAAY,IAAI,GAAG,IAAI;AAM/C,EAAAA,aAAYA,aAAY,aAAa,IAAI,GAAG,IAAI;AAUhD,EAAAA,aAAYA,aAAY,IAAI,IAAI,GAAG,IAAI;AAMvC,EAAAA,aAAYA,aAAY,SAAS,IAAI,GAAG,IAAI;AAM5C,EAAAA,aAAYA,aAAY,UAAU,IAAI,GAAG,IAAI;AAM7C,EAAAA,aAAYA,aAAY,+BAA+B,IAAI,GAAG,IAAI;AAMlE,EAAAA,aAAYA,aAAY,YAAY,IAAI,GAAG,IAAI;AAM/C,EAAAA,aAAYA,aAAY,eAAe,IAAI,GAAG,IAAI;AAMlD,EAAAA,aAAYA,aAAY,iBAAiB,IAAI,GAAG,IAAI;AAMpD,EAAAA,aAAYA,aAAY,cAAc,IAAI,GAAG,IAAI;AAMjD,EAAAA,aAAYA,aAAY,kBAAkB,IAAI,GAAG,IAAI;AAMrD,EAAAA,aAAYA,aAAY,mBAAmB,IAAI,GAAG,IAAI;AAMtD,EAAAA,aAAYA,aAAY,mBAAmB,IAAI,GAAG,IAAI;AAMtD,EAAAA,aAAYA,aAAY,WAAW,IAAI,GAAG,IAAI;AAM9C,EAAAA,aAAYA,aAAY,cAAc,IAAI,GAAG,IAAI;AAOjD,EAAAA,aAAYA,aAAY,WAAW,IAAI,GAAG,IAAI;AAM9C,EAAAA,aAAYA,aAAY,oBAAoB,IAAI,GAAG,IAAI;AAMvD,EAAAA,aAAYA,aAAY,oBAAoB,IAAI,GAAG,IAAI;AAMvD,EAAAA,aAAYA,aAAY,aAAa,IAAI,GAAG,IAAI;AAMhD,EAAAA,aAAYA,aAAY,cAAc,IAAI,GAAG,IAAI;AAMjD,EAAAA,aAAYA,aAAY,kBAAkB,IAAI,GAAG,IAAI;AAMrD,EAAAA,aAAYA,aAAY,WAAW,IAAI,GAAG,IAAI;AAM9C,EAAAA,aAAYA,aAAY,WAAW,IAAI,GAAG,IAAI;AAM9C,EAAAA,aAAYA,aAAY,oBAAoB,IAAI,GAAG,IAAI;AAMvD,EAAAA,aAAYA,aAAY,gBAAgB,IAAI,GAAG,IAAI;AAMnD,EAAAA,aAAYA,aAAY,+BAA+B,IAAI,GAAG,IAAI;AAMlE,EAAAA,aAAYA,aAAY,iBAAiB,IAAI,GAAG,IAAI;AAMpD,EAAAA,aAAYA,aAAY,UAAU,IAAI,GAAG,IAAI;AAM7C,EAAAA,aAAYA,aAAY,MAAM,IAAI,GAAG,IAAI;AAMzC,EAAAA,aAAYA,aAAY,iBAAiB,IAAI,GAAG,IAAI;AAMpD,EAAAA,aAAYA,aAAY,qBAAqB,IAAI,GAAG,IAAI;AAMxD,EAAAA,aAAYA,aAAY,kBAAkB,IAAI,GAAG,IAAI;AAMrD,EAAAA,aAAYA,aAAY,sBAAsB,IAAI,GAAG,IAAI;AAMzD,EAAAA,aAAYA,aAAY,wBAAwB,IAAI,GAAG,IAAI;AAM3D,EAAAA,aAAYA,aAAY,iCAAiC,IAAI,GAAG,IAAI;AAMpE,EAAAA,aAAYA,aAAY,oBAAoB,IAAI,GAAG,IAAI;AAMvD,EAAAA,aAAYA,aAAY,aAAa,IAAI,GAAG,IAAI;AAMhD,EAAAA,aAAYA,aAAY,gCAAgC,IAAI,GAAG,IAAI;AAOnE,EAAAA,aAAYA,aAAY,gBAAgB,IAAI,GAAG,IAAI;AAMnD,EAAAA,aAAYA,aAAY,qBAAqB,IAAI,GAAG,IAAI;AAMxD,EAAAA,aAAYA,aAAY,sBAAsB,IAAI,GAAG,IAAI;AAMzD,EAAAA,aAAYA,aAAY,QAAQ,IAAI,GAAG,IAAI;AAM3C,EAAAA,aAAYA,aAAY,mBAAmB,IAAI,GAAG,IAAI;AAMtD,EAAAA,aAAYA,aAAY,kBAAkB,IAAI,GAAG,IAAI;AAMrD,EAAAA,aAAYA,aAAY,uBAAuB,IAAI,GAAG,IAAI;AAM1D,EAAAA,aAAYA,aAAY,mBAAmB,IAAI,GAAG,IAAI;AAMtD,EAAAA,aAAYA,aAAY,iCAAiC,IAAI,GAAG,IAAI;AAMpE,EAAAA,aAAYA,aAAY,+BAA+B,IAAI,GAAG,IAAI;AAMlE,EAAAA,aAAYA,aAAY,uBAAuB,IAAI,GAAG,IAAI;AAM1D,EAAAA,aAAYA,aAAY,iBAAiB,IAAI,GAAG,IAAI;AAMpD,EAAAA,aAAYA,aAAY,aAAa,IAAI,GAAG,IAAI;AAMhD,EAAAA,aAAYA,aAAY,qBAAqB,IAAI,GAAG,IAAI;AAMxD,EAAAA,aAAYA,aAAY,iBAAiB,IAAI,GAAG,IAAI;AAMpD,EAAAA,aAAYA,aAAY,4BAA4B,IAAI,GAAG,IAAI;AAM/D,EAAAA,aAAYA,aAAY,sBAAsB,IAAI,GAAG,IAAI;AAMzD,EAAAA,aAAYA,aAAY,iCAAiC,IAAI,GAAG,IAAI;AACxE,GAAG,gBAAgB,cAAc,CAAA,EAAG;AC7V7B,MAAe,gBAAgB;AAAA,EAGlC,YAAY,SAAqC;AAFjD;AAmCA;AAAA,2CAAkB,CAAC,QAAqB,OAAe,WAA2B;AACvE,aAAA;AAAA,QACH;AAAA,QACA;AAAA,QACA;AAAA,MACJ;AAAA,IACJ;AAEA,sCAAa,CAAC,iBAA4C;AACtD,YAAM,UAAsB;AAAA,QACxB,gBAAgB;AAAA,MACpB;AACA,UAAI,cAAc;AACN,gBAAA,eAAe,IAAI,UAAU,YAAY;AAAA,MAAA;AAE9C,aAAA;AAAA,IACX;AAEA,qCAAY,OAAU,aAA4B,KAAa,QAAgB,aAAgC,YAA2D;AAChK,YAAA,cAAc,IAAI,eAAe,KAAK,QAAQ,KAAK,WAAW,WAAqB,GAAG,KAAK,QAAQ,OAAO;AAC5G,UAAA,mBAAK,UAAS,cAAc;AAChB,oBAAA,iBAAiB,mBAAK,UAAS,YAAY;AAAA,MAAA;AAE3D,UAAI,gBAAgB,MAAM;AACtB,oBAAY,SAAS,WAAW;AAAA,MAAA;AAGpC,YAAM,OAAO,MAAM,MAAM,YAAY,MAA4B;AAI7D,UAAA,KAAK,KAAK,WAAW,YAAY,MAAM,KAAK,KAAK,WAAW,YAAY,SAAS;AAC3E,cAAA,iBAAiB,KAAK,KAAK;AACjC,YAAI,gBAAgB;AACZ,cAAA;AACM,kBAAA,cAAc,KAAK,MAAM,cAAc;AACtC,mBAAA;AAAA,mBACD,OAAO;AACb,oBAAQ,KAAK,gBAAgB,YAAY,uBAAuB,6DAA6D,KAAK,CAAC;AAC5H,mBAAA;AAAA,UAAA;AAAA,QACX,OACG;AACH,kBAAQ,KAAK,gBAAgB,YAAY,uBAAuB,yDAAyD,IAAI,CAAC;AACvH,iBAAA;AAAA,QAAA;AAAA,MACX,OACG;AACH,cAAM,EAAE,QAAQ,OAAO,WAAW,KAAK;AACvC,gBAAQ,KAAK,gBAAgB,QAAQ,sDAAsD,KAAK,KAAK,MAAM,CAAC;AACrG,eAAA;AAAA,MAAA;AAAA,IAEf;AAlFI,uBAAK,UAAW;AAChB,SAAK,gBAAgB,0CAA0C,KAAK,UAAU,mBAAK,SAAQ,CAAC,GAAG;AAAA,EAAA;AAAA,EAGnG,IAAI,eAAoC;AAChC,QAAA,mBAAK,UAAS,cAAc;AAC5B,aAAO,mBAAK,UAAS;AAAA,IAAA,OAClB;AACI,aAAA;AAAA,IAAA;AAAA,EACX;AAAA,EAGJ,IAAI,UAAsC;AACtC,WAAO,mBAAK;AAAA,EAAA;AAAA;AAAA,EAIhB,gBAAgB,SAAc;AACrB,uBAAA,UAAS,OAAO,MAAM,OAAO;AAAA,EAAA;AAAA;AAAA,EAItC,eAAe,SAAc;AACpB,uBAAA,UAAS,OAAO,KAAK,OAAO;AAAA,EAAA;AAAA;AAAA,EAIrC,gBAAgB,SAAc;AACrB,uBAAA,UAAS,OAAO,MAAM,OAAO;AAAA,EAAA;AAuD1C;AAtFI;ACHG,MAAM,uBAAuB,gBAAgB;AAAA,EAChD,YAAY,SAAqC;AAC7C,UAAM,OAAO;AAGjB,sCAAa,OAAO,cAAsB,WAAmB,YAA6E;AAClI,UAAA;AACA,eAAO,KAAK,UAA+B,cAAc,GAAG,KAAK,QAAQ,UAAU,YAAY,mBAAmB,SAAS,CAAC,IAAI,OAAO,MAAM,OAAO;AAAA,eAE/I,OAAY;AACT,gBAAA,KAAK,gBAAgB,YAAY,uBAAuB,mEAAmE,KAAK,KAAK,KAAK,CAAC;AAC5I,eAAA;AAAA,MAAA;AAAA,IAEf;AAEA,wCAAe,OAAO,cAAsB,SAAuC,YAA6E;AACxJ,UAAA;AACI,YAAA,CAAC,QAAQ,WAAW;AACpB,kBAAQ,KAAK,gBAAgB,YAAY,uBAAuB,wDAAwD,IAAI,CAAC;AACtH,iBAAA;AAAA,QAAA;AAEX,eAAO,KAAK,UAA+B,cAAc,GAAG,KAAK,QAAQ,UAAU,YAAY,mBAAmB,QAAQ,SAAS,CAAC,IAAI,SAAS,SAAS,OAAO;AAAA,eAE5J,OAAY;AACT,gBAAA,KAAK,gBAAgB,YAAY,uBAAuB,mEAAmE,KAAK,KAAK,KAAK,CAAC;AAC5I,eAAA;AAAA,MAAA;AAAA,IAEf;AAAA,EAzBiB;AA0BrB;ACYO,MAAM,cAAc;AAAA,EAQvB,YAAY,SAAgC;AARzC;AACH,uBAAAC;AACA,+BAAuC,CAAE;AACzC,sCAAwB;AACxB;AAEA;AAAA,qCAAe;AAgBf,sCAAa,MAAM;AACX,UAAA,mBAAKA,WAAS,cAAc;AACvB,2BAAAA,WAAS,aAAa,WAAW;AAAA,MAAA;AAAA,IAE9C;AAEA,0DAAiC,CAAC,YAAmC;AAE1D,aAAA,OAAO,KAAU,KAAU,SAAc;AAC5C,YAAI,QAAQ,aAAa;AAErB,gBAAM,iBAAiB,QAAQ,YAAY,KAAK,GAAG;AAC7C,gBAAA,WAAY,IAAI,KAAK,MAAiB,MAAM,GAAG,EAAE,KAAK,GAAG;AAE3D,cAAA,mBAAK,QAAO,cAAc,KAAK,mBAAK,QAAO,cAAc,EAAE,OAAO,QAAQ,GAAG;AACxE,iBAAA;AACL;AAAA,UAAA;AAGJ,gBAAM,SAAS,IAAI,KAAK,MAAM,MAAM,GAAG;AAEvC,gBAAM,sBAAsB,CAAE;AAC9B,mBAAS,IAAE,GAAG,IAAI,QAAQ,YAAY,QAAQ,KAAK;AACzC,kBAAA,aAAa,QAAQ,YAAY,CAAC;AACxC,gBAAI,CAAC,OAAO,SAAS,UAAU,GAAG;AAC9B,kCAAoB,KAAK,UAAU;AAAA,YAAA;AAAA,UACvC;AAEA,cAAA,oBAAoB,SAAS,GAAG;AAChC,kBAAM,eAAe,gBAAgB,uBAAuB,2BAA2B,mBAAmB;AACtG,gBAAA,OAAO,YAAY,YAAY,EAAE,KAAM,EAAE,QAAQ,YAAY,cAAc,OAAO,aAAA,CAAc;AACpG;AAAA,UAAA;AAGJ,cAAI,CAAC,mBAAK,QAAO,cAAc,GAAG;AACzB,+BAAA,QAAO,cAAc,IAAI;AAAA,cAC1B,QAAQ,CAAA;AAAA,YACZ;AAAA,UAAA;AAGJ,6BAAK,QAAO,cAAc,EAAE,OAAO,QAAQ,IAAI;AAAA,YAC3C,OAAO;AAAA,YACP,SAAS,WAAW,MAAM;AACtB,qBAAO,mBAAK,QAAO,cAAc,EAAE,OAAO,QAAQ;AAAA,YAAA,GACnD,mBAAK,cAAa,EAAE,MAAM;AAAA,UACjC;AAAA,QAAA;AAEC,aAAA;AAAA,MACT;AAAA,IACJ;AA4CA;AAAA,2CAAkB,OAAO,SAA8B,aACvD;AACQ,UAAA,QAAQ,YAAY,GAAG;AAEvB,gBAAQ,YAAY,EAAE,IAAI,CAAC,iBAAsB;AAE7C,gBAAM,SAAc,MAAM,OAAO,MAAM,YAAY;AAC9C,6BAAA,YAAW,cAAc,QAAQ,QAAQ;AAAA,QAAA,CACjD;AAAA,MAAA,OACE;AAEH,cAAM,SAAc,MAAM,OAAO,MAAM,QAAQ,YAAY,CAAC;AACvD,2BAAA,YAAW,cAAc,QAAQ,QAAQ;AAAA,MAAA;AAG3C,aAAA,mBAAK,YAAW,WAAW,QAAQ;AAAA,IAC9C;AAEA,6CAAoB,OAAO,aAC3B;AACW,aAAA,mBAAK,YAAW,WAAW,QAAQ;AAAA,IAC9C;AAEA,uCAAc,OAAO,OAAe,UAAkB,aAAuC;AACnF,YAAA,gBAAiB,WACjB,GAAG,QAAQ,GAAG,SAAS,cAAc,GAAG,SAAS,cAAc,KAC/D,GAAG,SAAS,UAAU,IAAI,SAAS,MAAM,GAAG,SAAS,cAAc,GAAG,SAAS,cAAc;AAEnG,YAAM,oBAAwC;AAAA,QAC1C,OAAO;AAAA;AAAA,QACP,iBAAiB;AAAA;AAAA,QACjB,aAAa;AAAA;AAAA,QACb,WAAW;AAAA,QACX,uBAAuB;AAAA;AAAA,QACvB,SAAS;AAAA,QACT,SAAS;AAAA;AAAA,MACb;AACI,UAAA,mBAAKA,WAAS,cAAc;AAE5B,0BAAkB,eAAe,mBAAKA,WAAS,aAAa,SAAS,aAAa;AAAA,MAAA;AAGhF,YAAA,OAAO,WAAW,iBAAiB;AAGzC,YAAM,sBAAsB,UAAsB,OAAO,EAAE,QAAQ,MAAM;AACzE,YAAM,MAAM,oBAAoB;AAEhC,YAAM,MAAM,MAAM,KAAK,cAAc,GAAG;AAClC,YAAA,aAAa,IAAI,aAAa;AAEpC,YAAM,gBAAgB;AAAA,QAClB,QAAQ;AAAA;AAAA,QAER;AAAA;AAAA,QAEA,WAAY,CAAC,OAAO;AAAA;AAAA,MACxB;AAEA,aAAO,IAAI,OAAO,OAAO,YAAY,aAAa;AAAA,IACtD;AAGA;AAAA,yCAAgB,CAAC,QAAgB;AAC7B,YAAM,QAAQ,IAAI,MAAM,mBAAK,aAAY;AAClC,aAAA,QAAQ,MAAM,CAAC,IAAI;AAAA,IAC9B;AAEA,+DAAsC,OAAO,SAAsD,YAAqD;AACpJ,YAAM,EAAE,OAAO,UAAU,kBAAkB,UAAU,sBAAsB,0BAA0B;AAErG,UAAI,QAAQ;AAEN,YAAA,gBAAgB,CAAC,UAAiB;AACpC,8BAAK,8CAAL,WAAsB;AACtB,YAAI,sBAAsB;AACD,+BAAA,iBAAiB,MAAM,kCAAkC;AAAA;AAAA,YAC1E,KAAK;AAAA,UAAA,CACR;AAAA,QAAA;AAEL,gBAAQ,KAAK;AAAA,MACjB;AAEI,UAAA;AACQ,gBAAA;AACF,cAAA,SAAS,MAAM,MAAM,GAAG;AAC9B,YAAI,SAAwB;AAC5B,YAAI,QAAsB;AAClB,gBAAA;AACR,iBAAS,IAAE,GAAG,IAAI,OAAO,QAAQ,KAAK;AAC5B,gBAAA,IAAI,OAAO,CAAC;AAClB,cAAI,CAAC,QAAQ;AACA,qBAAA,KAAK,cAAc,CAAC;AAC7B,gBAAI,CAAC,QAAQ;AACT,sBAAQ,IAAI,MAAM,WAAW,KAAK,mGAAmG;AACrI;AAAA,YAAA;AAAA,UACJ,OACG;AACG,kBAAA,aAA4B,KAAK,cAAc,CAAC;AACtD,gBAAI,CAAC,YAAY;AACb,sBAAQ,IAAI,MAAM,WAAW,KAAK,mGAAmG;AACrI;AAAA,YAAA,OACG;AACH,kBAAI,OAAO,cAAc,UAAU,MAAM,GAAG;AACxC,wBAAQ,IAAI,MAAM,WAAW,KAAK,oFAAoF;AACtH;AAAA,cAAA;AAAA,YACJ;AAAA,UACJ;AAAA,QACJ;AAEI,gBAAA;AACR,YAAI,OAAO;AACP,wBAAc,KAAK;AACZ,iBAAA;AAAA,QAAA;AAGH,gBAAA;AACR,cAAM,UAAU;AAAA;AAAA,UACZ,WAAW;AAAA;AAAA,UACX,eAAe;AAAA;AAAA;AAAA,UAEf;AAAA;AAAA;AAAA;AAAA,UAGA,YAAY;AAAA,QAChB;AACQ,gBAAA;AACR,cAAM,MAAO,WACP,GAAG,QAAQ,GAAG,SAAS,cAAc,WACrC,GAAG,SAAS,UAAU,IAAI,SAAS,MAAM,GAAG,SAAS,cAAc;AAEzE,gBAAQ,cAAc,GAAG,eAAe,KAAK,UAAU,OAAO,CAAC;AAEzD,cAAA,cAAc,IAAI,eAAe,KAAK,MAAM,EAC7C,mBAAA,EACA,SAAS,OAAO;AACjB,YAAA,mBAAKA,WAAS,cAAc;AAChB,sBAAA,iBAAiB,mBAAKA,WAAS,YAAY;AAAA,QAAA;AAG3D,cAAM,SAAS,MAAM,MAAM,YAAY,MAAM;AAErC,gBAAA;AACR,YAAI,OAAO,QAAQ;AACX,cAAA,OAAO,WAAW,KAAK;AAEvB,kCAAK,8CAAL,WAAsB,MAAM,QAAQ,+EAA+E,OAAO,MAAM,GAAG;AAAA,UAAC;AAAA,QACxI,OACG;AACH,wBAAc,IAAI,MAAM,MAAM,IAAI,8DAA8D,CAAC,CAAC;AAC3F,iBAAA;AAAA,QAAA;AAEH,gBAAA;AACR,YAAI,OAAO,MAAM;AACL,kBAAA;AACJ,cAAA,OAAO,KAAK,cAAc;AAClB,oBAAA;AACR,gBAAI,sBAAsB;AACd,sBAAA;AACa,mCAAA,iBAAiB,MAAM,4BAA4B;AAAA,gBACpE,KAAK;AAAA,cAAA,CACR;AAAA,YAAA;AAGG,oBAAA;AACR,mBAAO,OAAO,KAAK;AAAA,UAAA,OAChB;AACK,oBAAA;AACM,0BAAA,IAAI,MAAM,yEAAyE,CAAC;AAC3F,mBAAA;AAAA,UAAA;AAAA,QACX,OACG;AACK,kBAAA;AACM,wBAAA,IAAI,MAAM,4DAA4D,CAAC;AAC9E,iBAAA;AAAA,QAAA;AAAA,eAGN,OAAY;AACjB,YAAI,0BAA0B,MAAM;AAChC,kBAAQ,MAAM,KAAK;AAAA,QAAA;AAEvB,YAAI,UAAU;AACd,YAAI,MAAM,YAAY,MAAM,SAAS,MAAM;AACnC,cAAA;AACA,sBAAU,KAAK,UAAU,MAAM,SAAS,IAAI;AAAA,mBAEvCC,QAAO;AACF,sBAAA;AAAA,UAAA;AAAA,QACd;AAEU,sBAAA,IAAI,MAAM,uDAAuD,KAAK,cAAc,KAAK,gBAAgB,OAAO,GAAG,CAAC;AAC3H,eAAA;AAAA,MAAA;AAAA,IAEf;AA3SI,uBAAKD,WAAW;AACX,uBAAA,YAAa,IAAI,MAAM,UAAU;AAAA,EAAA;AAAA,EAQ1C,IAAI,eAAyC;AACzC,WAAO,mBAAKA,WAAS;AAAA,EAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAuEzB,MAAM,wBAAwB,KAAU,KAAU,MAClD;AACS,SAAA;AAAA,EAAA;AAyNb;AApTIA,YAAA;AACA;AACA;AACA;AAEA;AANG;AAAA;AAcH,8BAAiB,SAAc;AACtB,qBAAAA,WAAS,OAAO,MAAM,OAAO;AAAA;","x_google_ignoreList":[1]}

package/dist/stsauthclient.umd.js

@@ -1,6 +1,6 @@
 (function(global, factory) {
-  typeof exports === "object" && typeof module !== "undefined" ? factory(exports, require("axios"), require("@nsshunt/stsconfig"), require("tough-cookie"), require("jsonwebtoken"), require("jwt-decode"), require("jwks-rsa"), require("@nsshunt/stsutils"), require("chalk"), require("@nsshunt/stsobservability")) : typeof define === "function" && define.amd ? define(["exports", "axios", "@nsshunt/stsconfig", "tough-cookie", "jsonwebtoken", "jwt-decode", "jwks-rsa", "@nsshunt/stsutils", "chalk", "@nsshunt/stsobservability"], factory) : (global = typeof globalThis !== "undefined" ? globalThis : global || self, factory(global["@nsshunt/stsauthclient"] = {}, global.axios, global.stsconfig, global["tough-cookie"], global.jsonwebtoken, global["jwt-decode"], global["jwks-rsa"], global.stsutils, global.chalk, global.stsobservability));
-})(this, function(exports2, axios, stsconfig, tough, jwt, jwtDecode, jwksClient, stsutils, chalk, stsobservability) {
+  typeof exports === "object" && typeof module !== "undefined" ? factory(exports, require("axios"), require("@nsshunt/stsutils"), require("tough-cookie"), require("jsonwebtoken"), require("jwt-decode"), require("jwks-rsa"), require("@nsshunt/stsconfig"), require("chalk"), require("@nsshunt/stsobservability")) : typeof define === "function" && define.amd ? define(["exports", "axios", "@nsshunt/stsutils", "tough-cookie", "jsonwebtoken", "jwt-decode", "jwks-rsa", "@nsshunt/stsconfig", "chalk", "@nsshunt/stsobservability"], factory) : (global = typeof globalThis !== "undefined" ? globalThis : global || self, factory(global["@nsshunt/stsauthclient"] = {}, global.axios, global.stsutils, global["tough-cookie"], global.jsonwebtoken, global["jwt-decode"], global["jwks-rsa"], global.stsconfig, global.chalk, global.stsobservability));
+})(this, function(exports2, axios, stsutils, tough, jwt, jwtDecode, jwksClient, stsconfig, chalk, stsobservability) {
   "use strict";var __defProp = Object.defineProperty;
 var __typeError = (msg) => {
   throw TypeError(msg);
@@ -13,7 +13,7 @@ var __privateAdd = (obj, member, value) => member.has(obj) ? __typeError("Cannot
 var __privateSet = (obj, member, value, setter) => (__accessCheck(obj, member, "write to private field"), setter ? setter.call(obj, value) : member.set(obj, value), value);
 var __privateMethod = (obj, member, method) => (__accessCheck(obj, member, "access private method"), method);
 
-  var _options, _logger, _agentManager, _cache, _cacheTimeout, _logger2, _cookiejar, _originRegex, _agentManager2, _AuthUtilsNode_instances, LogDebugMessage_fn;
+  var _options, _options2, _cache, _cacheTimeout, _cookiejar, _originRegex, _AuthUtilsNode_instances, LogDebugMessage_fn;
   const iss = `https://stscore.stsmda.org/oauth2/v2.0`;
   const STSAuthClientErrorCode = Object.freeze({
     STS_AC_MISSING_PERMISSION: {
@@ -82,12 +82,9 @@ var __privateMethod = (obj, member, method) => (__accessCheck(obj, member, "acce
     StatusCodes2[StatusCodes2["INSUFFICIENT_STORAGE"] = 507] = "INSUFFICIENT_STORAGE";
     StatusCodes2[StatusCodes2["NETWORK_AUTHENTICATION_REQUIRED"] = 511] = "NETWORK_AUTHENTICATION_REQUIRED";
   })(StatusCodes || (StatusCodes = {}));
-  const isNode = Object.prototype.toString.call(typeof process !== "undefined" ? process : 0) === "[object process]";
   class ResourceManager {
-    constructor(options, logger) {
+    constructor(options) {
       __privateAdd(this, _options);
-      __privateAdd(this, _logger);
-      __privateAdd(this, _agentManager, null);
       // eslint-disable-next-line  @typescript-eslint/no-explicit-any
       __publicField(this, "GetErrorMessage", (status, error, detail) => {
         return {
@@ -106,9 +103,9 @@ var __privateMethod = (obj, member, method) => (__accessCheck(obj, member, "acce
         return headers;
       });
       __publicField(this, "GetResult", async (accessToken, url, method, requestData, errorCb) => {
-        const axiosConfig = new stsconfig.STSAxiosConfig(url, method, this.GetHeaders(accessToken), this.options.timeout);
-        if (__privateGet(this, _agentManager)) {
-          axiosConfig.withAgentManager(__privateGet(this, _agentManager));
+        const axiosConfig = new stsutils.STSAxiosConfig(url, method, this.GetHeaders(accessToken), this.options.timeout);
+        if (__privateGet(this, _options).agentManager) {
+          axiosConfig.withAgentManager(__privateGet(this, _options).agentManager);
         }
         if (requestData !== null) {
           axiosConfig.withData(requestData);
@@ -135,43 +132,35 @@ var __privateMethod = (obj, member, method) => (__accessCheck(obj, member, "acce
         }
       });
       __privateSet(this, _options, options);
-      __privateSet(this, _logger, logger);
       this.LogDebugMessage(`STSOAuth2Worker:constructor:#options: [${JSON.stringify(__privateGet(this, _options))}]`);
-      if (isNode) {
-        if (__privateGet(this, _options).agentOptions) {
-          __privateSet(this, _agentManager, new stsconfig.AgentManager({
-            agentOptions: __privateGet(this, _options).agentOptions
-          }));
-        } else {
-          __privateSet(this, _agentManager, new stsconfig.AgentManager({}));
-        }
-      }
     }
     get agentManager() {
-      return __privateGet(this, _agentManager);
+      if (__privateGet(this, _options).agentManager) {
+        return __privateGet(this, _options).agentManager;
+      } else {
+        return null;
+      }
     }
     get options() {
       return __privateGet(this, _options);
     }
     // eslint-disable-next-line  @typescript-eslint/no-explicit-any
     LogDebugMessage(message) {
-      __privateGet(this, _logger).debug(message);
+      __privateGet(this, _options).logger.debug(message);
     }
     // eslint-disable-next-line  @typescript-eslint/no-explicit-any
     LogInfoMessage(message) {
-      __privateGet(this, _logger).info(message);
+      __privateGet(this, _options).logger.info(message);
     }
     // eslint-disable-next-line  @typescript-eslint/no-explicit-any
     LogErrorMessage(message) {
-      __privateGet(this, _logger).error(message);
+      __privateGet(this, _options).logger.error(message);
     }
   }
   _options = new WeakMap();
-  _logger = new WeakMap();
-  _agentManager = new WeakMap();
   class SessionManager extends ResourceManager {
-    constructor(options, logger) {
-      super(options, logger);
+    constructor(options) {
+      super(options);
       __publicField(this, "GetSession", async (access_token, sessionId, errorCb) => {
         try {
           return this.GetResult(access_token, `${this.options.asendpoint}/session/${encodeURIComponent(sessionId)}`, "get", null, errorCb);
@@ -195,17 +184,18 @@ var __privateMethod = (obj, member, method) => (__accessCheck(obj, member, "acce
     }
   }
   class AuthUtilsNode {
-    constructor(logger) {
+    constructor(options) {
       __privateAdd(this, _AuthUtilsNode_instances);
+      __privateAdd(this, _options2);
       __privateAdd(this, _cache, {});
       __privateAdd(this, _cacheTimeout, 1e3);
-      __privateAdd(this, _logger2);
       __privateAdd(this, _cookiejar);
       // Regular expression to match the origin
       __privateAdd(this, _originRegex, /^(api:\/\/\w+)/);
-      __privateAdd(this, _agentManager2, new stsconfig.AgentManager({}));
       __publicField(this, "ResetAgent", () => {
-        __privateGet(this, _agentManager2).ResetAgent();
+        if (__privateGet(this, _options2).agentManager) {
+          __privateGet(this, _options2).agentManager.ResetAgent();
+        }
       });
       __publicField(this, "VerifyRequestMiddlewareFactory", (options) => {
         return async (req, res, next) => {
@@ -262,7 +252,7 @@ var __privateMethod = (obj, member, method) => (__accessCheck(obj, member, "acce
       });
       __publicField(this, "ValidateJWT", async (token, audience, endpoint) => {
         const jwksClientUri = endpoint ? `${endpoint}${stsconfig.goptions.asoauthapiroot}${stsconfig.goptions.asjwksjsonpath}` : `${stsconfig.goptions.asendpoint}:${stsconfig.goptions.asport}${stsconfig.goptions.asoauthapiroot}${stsconfig.goptions.asjwksjsonpath}`;
-        const jwks = jwksClient({
+        const jwksClientOptions = {
           cache: true,
           //@@ all config items
           cacheMaxEntries: 5,
@@ -273,11 +263,13 @@ var __privateMethod = (obj, member, method) => (__accessCheck(obj, member, "acce
           jwksRequestsPerMinute: 10,
           // Default value
           jwksUri: jwksClientUri,
-          timeout: 3e4,
+          timeout: 3e4
           //@@ config
-          // eslint-disable-next-line @typescript-eslint/no-explicit-any
-          requestAgent: __privateGet(this, _agentManager2).GetAgent(jwksClientUri)
-        });
+        };
+        if (__privateGet(this, _options2).agentManager) {
+          jwksClientOptions.requestAgent = __privateGet(this, _options2).agentManager.GetAgent(jwksClientUri);
+        }
+        const jwks = jwksClient(jwksClientOptions);
         const decodedRefreshToken = jwtDecode.jwtDecode(token, { header: true });
         const kid = decodedRefreshToken.kid;
         const key = await jwks.getSigningKey(kid);
@@ -359,7 +351,11 @@ var __privateMethod = (obj, member, method) => (__accessCheck(obj, member, "acce
           stage = "6";
           const url = endPoint ? `${endPoint}${stsconfig.goptions.asoauthapiroot}/token` : `${stsconfig.goptions.asendpoint}:${stsconfig.goptions.asport}${stsconfig.goptions.asoauthapiroot}/token`;
           stage = `6.5: url: [${url}] payload: [${JSON.stringify(payload)}]`;
-          const retVal = await axios(new stsconfig.STSAxiosConfig(url, "post").withDefaultHeaders().withData(payload).withAgentManager(__privateGet(this, _agentManager2)).config);
+          const axiosConfig = new stsutils.STSAxiosConfig(url, "post").withDefaultHeaders().withData(payload);
+          if (__privateGet(this, _options2).agentManager) {
+            axiosConfig.withAgentManager(__privateGet(this, _options2).agentManager);
+          }
+          const retVal = await axios(axiosConfig.config);
           stage = "7";
           if (retVal.status) {
             if (retVal.status !== 200) {
@@ -408,11 +404,11 @@ var __privateMethod = (obj, member, method) => (__accessCheck(obj, member, "acce
           return "";
         }
       });
-      __privateSet(this, _logger2, logger);
+      __privateSet(this, _options2, options);
       __privateSet(this, _cookiejar, new tough.CookieJar());
     }
     get agentManager() {
-      return __privateGet(this, _agentManager2);
+      return __privateGet(this, _options2).agentManager;
     }
     /*
     let cookies = await this.GetCookiesFromJar();
@@ -435,16 +431,15 @@ var __privateMethod = (obj, member, method) => (__accessCheck(obj, member, "acce
       next();
     }
   }
+  _options2 = new WeakMap();
   _cache = new WeakMap();
   _cacheTimeout = new WeakMap();
-  _logger2 = new WeakMap();
   _cookiejar = new WeakMap();
   _originRegex = new WeakMap();
-  _agentManager2 = new WeakMap();
   _AuthUtilsNode_instances = new WeakSet();
   // eslint-disable-next-line @typescript-eslint/no-explicit-any
   LogDebugMessage_fn = function(message) {
-    __privateGet(this, _logger2).debug(message);
+    __privateGet(this, _options2).logger.debug(message);
   };
   exports2.AuthUtilsNode = AuthUtilsNode;
   exports2.STSAuthClientErrorCode = STSAuthClientErrorCode;

package/dist/stsauthclient.umd.js.map

@@ -1 +1 @@
-{"version":3,"file":"stsauthclient.umd.js","sources":["../src/commonTypes.ts","../node_modules/http-status-codes/build/es/status-codes.js","../node_modules/detect-node/index.esm.js","../src/resourceManager.ts","../src/sessionManager.ts","../src/authutilsnode.ts"],"sourcesContent":["import { StatusCodes } from 'http-status-codes'\n\nimport { OIDCStandardClaim, OAuth2ParameterType } from '@nsshunt/stsutils';\n\nexport interface ISTSResourceManagerOptions {\n\ttimeout: number\n    asendpoint: string;\n\tagentOptions?: {\n\t\tkeepAlive: boolean\n\t\tmaxSockets: number\n\t\tmaxTotalSockets: number\n\t\tmaxFreeSockets: number\n        timeout: number\n\t\trejectUnauthorized: boolean\n\t}\n}\n\nexport interface ISTSAuthPayload {\n\tsessionId: string,\n\tid_token: string,\n\tconsentRequired: string[],\n\tremainingAdminConsentRequired: string[],\n\tremainingUserConsentRequired: string[],\n\tauthorizationCode?: string\n\tscope: string\n\tclientName: string\n}\n\nexport interface ISTSLogoutPayload {\n\tsessionId: string\n}\n\nexport interface ISTSConsent {\n    consent: string[]\n}\n\nexport interface ISTSTokenPayload {\n    access_token: string,\n    token_type: \"Bearer\",\n    expires_in: number,\n    refresh_token: string,\n    id_token: string,\n    scope?: string\n}\n\nexport interface ISTSSessionResource { \n    sessionId: string\n    sessionState: string\n    id_token: string\n    consentCurrent: string[]\n    consentRequired: string[]\n    remainingAdminConsentRequired: string[]\n    remainingUserConsentRequired: string[]\n    consentNonce?: string\n    audience: string\n    permissions: string\n    subject: string\n    authorizationCode: string\n    authorizationCodeState: string\n    userId: string\n\n    // Client query paramaters (mandatory)\n    client_id: string\n    response_type: string\n    redirect_uri: string\n    scope: string // Microsoft uses '+' instead of ' ' to seperate scopes - update the string if we have '+' characters\n    state: string\n\n    code_challenge?: string\n    code_challenge_method?: string\n    nonce?: string\n    response_mode?: string\n\n    tokenPayload?: ISTSTokenPayload\n}\n\nexport interface ISTSLoginQueryParams {\n    email: string\n    password: string\n    [OAuth2ParameterType.CLIENT_ID]: string\n    nonce: string\n    [OAuth2ParameterType.RESPONSE_TYPE]: string\n    [OAuth2ParameterType.REDIRECT_URI]: string\n    [OAuth2ParameterType.RESPONSE_MODE]: string\n    [OAuth2ParameterType.SCOPE]: string\n    [OAuth2ParameterType.STATE]: string\n    code_challenge: string\n    code_challenge_method: string\n}\n\nexport interface ISTSUser {\n    id: string\n    name: string\n    email: string\n    hash: string\n    roles: string[]\n}\n\nexport interface ISTSAuthorizationCodeResource {\n    sessionId: string\n}\n\nexport interface ISTSClaims {\n    iss: string, // issuer - server that issues the tokens\n    sub: string, // subject - normally the resource (e.g. https://stsmda.com.au/myresource01/) or the user (for id_token)\n    //aud: audience, // audience (normally the API) (e.g. https://stsmda.com.au/myresource01api/)\n    exp: number,  // expires\n    iat: number, // issues at\n    // OIDC claims\n    [OIDCStandardClaim.NAME]: string\n    [OIDCStandardClaim.EMAIL]: string,\n    // STS Custom claims\n    sts_user_id: string\n    // eslint-disable-next-line  @typescript-eslint/no-explicit-any\n    sts_user_roles: any\n    //alg: 'RS256'\n    [OIDCStandardClaim.NONCE]?: string\n}\n\nexport interface ISTSResourceEx<T> {\n    status: StatusCodes;\n    error?: string;\n    sourceError?: Error;\n    detail?: T;\n}\n\nexport interface ISTSError {\n    status: StatusCodes;\n    error: string;\n    // eslint-disable-next-line  @typescript-eslint/no-explicit-any\n    detail: any;\n}\n\nexport const iss = `https://stscore.stsmda.org/oauth2/v2.0`;\n\nexport const STSAuthClientErrorCode = Object.freeze({\n    STS_AC_MISSING_PERMISSION: {\n        code: 'STS_AFC0001',\n        description: 'STS_AC_0001: Missing Permission(s).'\n    },\n});\n","// Generated file. Do not edit\nexport var StatusCodes;\n(function (StatusCodes) {\n    /**\n     * Official Documentation @ https://tools.ietf.org/html/rfc7231#section-6.2.1\n     *\n     * This interim response indicates that everything so far is OK and that the client should continue with the request or ignore it if it is already finished.\n     */\n    StatusCodes[StatusCodes[\"CONTINUE\"] = 100] = \"CONTINUE\";\n    /**\n     * Official Documentation @ https://tools.ietf.org/html/rfc7231#section-6.2.2\n     *\n     * This code is sent in response to an Upgrade request header by the client, and indicates the protocol the server is switching too.\n     */\n    StatusCodes[StatusCodes[\"SWITCHING_PROTOCOLS\"] = 101] = \"SWITCHING_PROTOCOLS\";\n    /**\n     * Official Documentation @ https://tools.ietf.org/html/rfc2518#section-10.1\n     *\n     * This code indicates that the server has received and is processing the request, but no response is available yet.\n     */\n    StatusCodes[StatusCodes[\"PROCESSING\"] = 102] = \"PROCESSING\";\n    /**\n     * Official Documentation @ https://www.rfc-editor.org/rfc/rfc8297#page-3\n     *\n     * This code indicates to the client that the server is likely to send a final response with the header fields included in the informational response.\n     */\n    StatusCodes[StatusCodes[\"EARLY_HINTS\"] = 103] = \"EARLY_HINTS\";\n    /**\n     * Official Documentation @ https://tools.ietf.org/html/rfc7231#section-6.3.1\n     *\n     * The request has succeeded. The meaning of a success varies depending on the HTTP method:\n     * GET: The resource has been fetched and is transmitted in the message body.\n     * HEAD: The entity headers are in the message body.\n     * POST: The resource describing the result of the action is transmitted in the message body.\n     * TRACE: The message body contains the request message as received by the server\n     */\n    StatusCodes[StatusCodes[\"OK\"] = 200] = \"OK\";\n    /**\n     * Official Documentation @ https://tools.ietf.org/html/rfc7231#section-6.3.2\n     *\n     * The request has succeeded and a new resource has been created as a result of it. This is typically the response sent after a PUT request.\n     */\n    StatusCodes[StatusCodes[\"CREATED\"] = 201] = \"CREATED\";\n    /**\n     * Official Documentation @ https://tools.ietf.org/html/rfc7231#section-6.3.3\n     *\n     * The request has been received but not yet acted upon. It is non-committal, meaning that there is no way in HTTP to later send an asynchronous response indicating the outcome of processing the request. It is intended for cases where another process or server handles the request, or for batch processing.\n     */\n    StatusCodes[StatusCodes[\"ACCEPTED\"] = 202] = \"ACCEPTED\";\n    /**\n     * Official Documentation @ https://tools.ietf.org/html/rfc7231#section-6.3.4\n     *\n     * This response code means returned meta-information set is not exact set as available from the origin server, but collected from a local or a third party copy. Except this condition, 200 OK response should be preferred instead of this response.\n     */\n    StatusCodes[StatusCodes[\"NON_AUTHORITATIVE_INFORMATION\"] = 203] = \"NON_AUTHORITATIVE_INFORMATION\";\n    /**\n     * Official Documentation @ https://tools.ietf.org/html/rfc7231#section-6.3.5\n     *\n     * There is no content to send for this request, but the headers may be useful. The user-agent may update its cached headers for this resource with the new ones.\n     */\n    StatusCodes[StatusCodes[\"NO_CONTENT\"] = 204] = \"NO_CONTENT\";\n    /**\n     * Official Documentation @ https://tools.ietf.org/html/rfc7231#section-6.3.6\n     *\n     * This response code is sent after accomplishing request to tell user agent reset document view which sent this request.\n     */\n    StatusCodes[StatusCodes[\"RESET_CONTENT\"] = 205] = \"RESET_CONTENT\";\n    /**\n     * Official Documentation @ https://tools.ietf.org/html/rfc7233#section-4.1\n     *\n     * This response code is used because of range header sent by the client to separate download into multiple streams.\n     */\n    StatusCodes[StatusCodes[\"PARTIAL_CONTENT\"] = 206] = \"PARTIAL_CONTENT\";\n    /**\n     * Official Documentation @ https://tools.ietf.org/html/rfc2518#section-10.2\n     *\n     * A Multi-Status response conveys information about multiple resources in situations where multiple status codes might be appropriate.\n     */\n    StatusCodes[StatusCodes[\"MULTI_STATUS\"] = 207] = \"MULTI_STATUS\";\n    /**\n     * Official Documentation @ https://tools.ietf.org/html/rfc7231#section-6.4.1\n     *\n     * The request has more than one possible responses. User-agent or user should choose one of them. There is no standardized way to choose one of the responses.\n     */\n    StatusCodes[StatusCodes[\"MULTIPLE_CHOICES\"] = 300] = \"MULTIPLE_CHOICES\";\n    /**\n     * Official Documentation @ https://tools.ietf.org/html/rfc7231#section-6.4.2\n     *\n     * This response code means that URI of requested resource has been changed. Probably, new URI would be given in the response.\n     */\n    StatusCodes[StatusCodes[\"MOVED_PERMANENTLY\"] = 301] = \"MOVED_PERMANENTLY\";\n    /**\n     * Official Documentation @ https://tools.ietf.org/html/rfc7231#section-6.4.3\n     *\n     * This response code means that URI of requested resource has been changed temporarily. New changes in the URI might be made in the future. Therefore, this same URI should be used by the client in future requests.\n     */\n    StatusCodes[StatusCodes[\"MOVED_TEMPORARILY\"] = 302] = \"MOVED_TEMPORARILY\";\n    /**\n     * Official Documentation @ https://tools.ietf.org/html/rfc7231#section-6.4.4\n     *\n     * Server sent this response to directing client to get requested resource to another URI with an GET request.\n     */\n    StatusCodes[StatusCodes[\"SEE_OTHER\"] = 303] = \"SEE_OTHER\";\n    /**\n     * Official Documentation @ https://tools.ietf.org/html/rfc7232#section-4.1\n     *\n     * This is used for caching purposes. It is telling to client that response has not been modified. So, client can continue to use same cached version of response.\n     */\n    StatusCodes[StatusCodes[\"NOT_MODIFIED\"] = 304] = \"NOT_MODIFIED\";\n    /**\n     * @deprecated\n     * Official Documentation @ https://tools.ietf.org/html/rfc7231#section-6.4.6\n     *\n     * Was defined in a previous version of the HTTP specification to indicate that a requested response must be accessed by a proxy. It has been deprecated due to security concerns regarding in-band configuration of a proxy.\n     */\n    StatusCodes[StatusCodes[\"USE_PROXY\"] = 305] = \"USE_PROXY\";\n    /**\n     * Official Documentation @ https://tools.ietf.org/html/rfc7231#section-6.4.7\n     *\n     * Server sent this response to directing client to get requested resource to another URI with same method that used prior request. This has the same semantic than the 302 Found HTTP response code, with the exception that the user agent must not change the HTTP method used: if a POST was used in the first request, a POST must be used in the second request.\n     */\n    StatusCodes[StatusCodes[\"TEMPORARY_REDIRECT\"] = 307] = \"TEMPORARY_REDIRECT\";\n    /**\n     * Official Documentation @ https://tools.ietf.org/html/rfc7538#section-3\n     *\n     * This means that the resource is now permanently located at another URI, specified by the Location: HTTP Response header. This has the same semantics as the 301 Moved Permanently HTTP response code, with the exception that the user agent must not change the HTTP method used: if a POST was used in the first request, a POST must be used in the second request.\n     */\n    StatusCodes[StatusCodes[\"PERMANENT_REDIRECT\"] = 308] = \"PERMANENT_REDIRECT\";\n    /**\n     * Official Documentation @ https://tools.ietf.org/html/rfc7231#section-6.5.1\n     *\n     * This response means that server could not understand the request due to invalid syntax.\n     */\n    StatusCodes[StatusCodes[\"BAD_REQUEST\"] = 400] = \"BAD_REQUEST\";\n    /**\n     * Official Documentation @ https://tools.ietf.org/html/rfc7235#section-3.1\n     *\n     * Although the HTTP standard specifies \"unauthorized\", semantically this response means \"unauthenticated\". That is, the client must authenticate itself to get the requested response.\n     */\n    StatusCodes[StatusCodes[\"UNAUTHORIZED\"] = 401] = \"UNAUTHORIZED\";\n    /**\n     * Official Documentation @ https://tools.ietf.org/html/rfc7231#section-6.5.2\n     *\n     * This response code is reserved for future use. Initial aim for creating this code was using it for digital payment systems however this is not used currently.\n     */\n    StatusCodes[StatusCodes[\"PAYMENT_REQUIRED\"] = 402] = \"PAYMENT_REQUIRED\";\n    /**\n     * Official Documentation @ https://tools.ietf.org/html/rfc7231#section-6.5.3\n     *\n     * The client does not have access rights to the content, i.e. they are unauthorized, so server is rejecting to give proper response. Unlike 401, the client's identity is known to the server.\n     */\n    StatusCodes[StatusCodes[\"FORBIDDEN\"] = 403] = \"FORBIDDEN\";\n    /**\n     * Official Documentation @ https://tools.ietf.org/html/rfc7231#section-6.5.4\n     *\n     * The server can not find requested resource. In the browser, this means the URL is not recognized. In an API, this can also mean that the endpoint is valid but the resource itself does not exist. Servers may also send this response instead of 403 to hide the existence of a resource from an unauthorized client. This response code is probably the most famous one due to its frequent occurence on the web.\n     */\n    StatusCodes[StatusCodes[\"NOT_FOUND\"] = 404] = \"NOT_FOUND\";\n    /**\n     * Official Documentation @ https://tools.ietf.org/html/rfc7231#section-6.5.5\n     *\n     * The request method is known by the server but has been disabled and cannot be used. For example, an API may forbid DELETE-ing a resource. The two mandatory methods, GET and HEAD, must never be disabled and should not return this error code.\n     */\n    StatusCodes[StatusCodes[\"METHOD_NOT_ALLOWED\"] = 405] = \"METHOD_NOT_ALLOWED\";\n    /**\n     * Official Documentation @ https://tools.ietf.org/html/rfc7231#section-6.5.6\n     *\n     * This response is sent when the web server, after performing server-driven content negotiation, doesn't find any content following the criteria given by the user agent.\n     */\n    StatusCodes[StatusCodes[\"NOT_ACCEPTABLE\"] = 406] = \"NOT_ACCEPTABLE\";\n    /**\n     * Official Documentation @ https://tools.ietf.org/html/rfc7235#section-3.2\n     *\n     * This is similar to 401 but authentication is needed to be done by a proxy.\n     */\n    StatusCodes[StatusCodes[\"PROXY_AUTHENTICATION_REQUIRED\"] = 407] = \"PROXY_AUTHENTICATION_REQUIRED\";\n    /**\n     * Official Documentation @ https://tools.ietf.org/html/rfc7231#section-6.5.7\n     *\n     * This response is sent on an idle connection by some servers, even without any previous request by the client. It means that the server would like to shut down this unused connection. This response is used much more since some browsers, like Chrome, Firefox 27+, or IE9, use HTTP pre-connection mechanisms to speed up surfing. Also note that some servers merely shut down the connection without sending this message.\n     */\n    StatusCodes[StatusCodes[\"REQUEST_TIMEOUT\"] = 408] = \"REQUEST_TIMEOUT\";\n    /**\n     * Official Documentation @ https://tools.ietf.org/html/rfc7231#section-6.5.8\n     *\n     * This response is sent when a request conflicts with the current state of the server.\n     */\n    StatusCodes[StatusCodes[\"CONFLICT\"] = 409] = \"CONFLICT\";\n    /**\n     * Official Documentation @ https://tools.ietf.org/html/rfc7231#section-6.5.9\n     *\n     * This response would be sent when the requested content has been permenantly deleted from server, with no forwarding address. Clients are expected to remove their caches and links to the resource. The HTTP specification intends this status code to be used for \"limited-time, promotional services\". APIs should not feel compelled to indicate resources that have been deleted with this status code.\n     */\n    StatusCodes[StatusCodes[\"GONE\"] = 410] = \"GONE\";\n    /**\n     * Official Documentation @ https://tools.ietf.org/html/rfc7231#section-6.5.10\n     *\n     * The server rejected the request because the Content-Length header field is not defined and the server requires it.\n     */\n    StatusCodes[StatusCodes[\"LENGTH_REQUIRED\"] = 411] = \"LENGTH_REQUIRED\";\n    /**\n     * Official Documentation @ https://tools.ietf.org/html/rfc7232#section-4.2\n     *\n     * The client has indicated preconditions in its headers which the server does not meet.\n     */\n    StatusCodes[StatusCodes[\"PRECONDITION_FAILED\"] = 412] = \"PRECONDITION_FAILED\";\n    /**\n     * Official Documentation @ https://tools.ietf.org/html/rfc7231#section-6.5.11\n     *\n     * Request entity is larger than limits defined by server; the server might close the connection or return an Retry-After header field.\n     */\n    StatusCodes[StatusCodes[\"REQUEST_TOO_LONG\"] = 413] = \"REQUEST_TOO_LONG\";\n    /**\n     * Official Documentation @ https://tools.ietf.org/html/rfc7231#section-6.5.12\n     *\n     * The URI requested by the client is longer than the server is willing to interpret.\n     */\n    StatusCodes[StatusCodes[\"REQUEST_URI_TOO_LONG\"] = 414] = \"REQUEST_URI_TOO_LONG\";\n    /**\n     * Official Documentation @ https://tools.ietf.org/html/rfc7231#section-6.5.13\n     *\n     * The media format of the requested data is not supported by the server, so the server is rejecting the request.\n     */\n    StatusCodes[StatusCodes[\"UNSUPPORTED_MEDIA_TYPE\"] = 415] = \"UNSUPPORTED_MEDIA_TYPE\";\n    /**\n     * Official Documentation @ https://tools.ietf.org/html/rfc7233#section-4.4\n     *\n     * The range specified by the Range header field in the request can't be fulfilled; it's possible that the range is outside the size of the target URI's data.\n     */\n    StatusCodes[StatusCodes[\"REQUESTED_RANGE_NOT_SATISFIABLE\"] = 416] = \"REQUESTED_RANGE_NOT_SATISFIABLE\";\n    /**\n     * Official Documentation @ https://tools.ietf.org/html/rfc7231#section-6.5.14\n     *\n     * This response code means the expectation indicated by the Expect request header field can't be met by the server.\n     */\n    StatusCodes[StatusCodes[\"EXPECTATION_FAILED\"] = 417] = \"EXPECTATION_FAILED\";\n    /**\n     * Official Documentation @ https://tools.ietf.org/html/rfc2324#section-2.3.2\n     *\n     * Any attempt to brew coffee with a teapot should result in the error code \"418 I'm a teapot\". The resulting entity body MAY be short and stout.\n     */\n    StatusCodes[StatusCodes[\"IM_A_TEAPOT\"] = 418] = \"IM_A_TEAPOT\";\n    /**\n     * Official Documentation @ https://tools.ietf.org/html/rfc2518#section-10.6\n     *\n     * The 507 (Insufficient Storage) status code means the method could not be performed on the resource because the server is unable to store the representation needed to successfully complete the request. This condition is considered to be temporary. If the request which received this status code was the result of a user action, the request MUST NOT be repeated until it is requested by a separate user action.\n     */\n    StatusCodes[StatusCodes[\"INSUFFICIENT_SPACE_ON_RESOURCE\"] = 419] = \"INSUFFICIENT_SPACE_ON_RESOURCE\";\n    /**\n     * @deprecated\n     * Official Documentation @ https://tools.ietf.org/rfcdiff?difftype=--hwdiff&url2=draft-ietf-webdav-protocol-06.txt\n     *\n     * A deprecated response used by the Spring Framework when a method has failed.\n     */\n    StatusCodes[StatusCodes[\"METHOD_FAILURE\"] = 420] = \"METHOD_FAILURE\";\n    /**\n     * Official Documentation @ https://datatracker.ietf.org/doc/html/rfc7540#section-9.1.2\n     *\n     * Defined in the specification of HTTP/2 to indicate that a server is not able to produce a response for the combination of scheme and authority that are included in the request URI.\n     */\n    StatusCodes[StatusCodes[\"MISDIRECTED_REQUEST\"] = 421] = \"MISDIRECTED_REQUEST\";\n    /**\n     * Official Documentation @ https://tools.ietf.org/html/rfc2518#section-10.3\n     *\n     * The request was well-formed but was unable to be followed due to semantic errors.\n     */\n    StatusCodes[StatusCodes[\"UNPROCESSABLE_ENTITY\"] = 422] = \"UNPROCESSABLE_ENTITY\";\n    /**\n     * Official Documentation @ https://tools.ietf.org/html/rfc2518#section-10.4\n     *\n     * The resource that is being accessed is locked.\n     */\n    StatusCodes[StatusCodes[\"LOCKED\"] = 423] = \"LOCKED\";\n    /**\n     * Official Documentation @ https://tools.ietf.org/html/rfc2518#section-10.5\n     *\n     * The request failed due to failure of a previous request.\n     */\n    StatusCodes[StatusCodes[\"FAILED_DEPENDENCY\"] = 424] = \"FAILED_DEPENDENCY\";\n    /**\n     * Official Documentation @ https://datatracker.ietf.org/doc/html/rfc7231#section-6.5.15\n     *\n     * The server refuses to perform the request using the current protocol but might be willing to do so after the client upgrades to a different protocol.\n     */\n    StatusCodes[StatusCodes[\"UPGRADE_REQUIRED\"] = 426] = \"UPGRADE_REQUIRED\";\n    /**\n     * Official Documentation @ https://tools.ietf.org/html/rfc6585#section-3\n     *\n     * The origin server requires the request to be conditional. Intended to prevent the 'lost update' problem, where a client GETs a resource's state, modifies it, and PUTs it back to the server, when meanwhile a third party has modified the state on the server, leading to a conflict.\n     */\n    StatusCodes[StatusCodes[\"PRECONDITION_REQUIRED\"] = 428] = \"PRECONDITION_REQUIRED\";\n    /**\n     * Official Documentation @ https://tools.ietf.org/html/rfc6585#section-4\n     *\n     * The user has sent too many requests in a given amount of time (\"rate limiting\").\n     */\n    StatusCodes[StatusCodes[\"TOO_MANY_REQUESTS\"] = 429] = \"TOO_MANY_REQUESTS\";\n    /**\n     * Official Documentation @ https://tools.ietf.org/html/rfc6585#section-5\n     *\n     * The server is unwilling to process the request because its header fields are too large. The request MAY be resubmitted after reducing the size of the request header fields.\n     */\n    StatusCodes[StatusCodes[\"REQUEST_HEADER_FIELDS_TOO_LARGE\"] = 431] = \"REQUEST_HEADER_FIELDS_TOO_LARGE\";\n    /**\n     * Official Documentation @ https://tools.ietf.org/html/rfc7725\n     *\n     * The user-agent requested a resource that cannot legally be provided, such as a web page censored by a government.\n     */\n    StatusCodes[StatusCodes[\"UNAVAILABLE_FOR_LEGAL_REASONS\"] = 451] = \"UNAVAILABLE_FOR_LEGAL_REASONS\";\n    /**\n     * Official Documentation @ https://tools.ietf.org/html/rfc7231#section-6.6.1\n     *\n     * The server encountered an unexpected condition that prevented it from fulfilling the request.\n     */\n    StatusCodes[StatusCodes[\"INTERNAL_SERVER_ERROR\"] = 500] = \"INTERNAL_SERVER_ERROR\";\n    /**\n     * Official Documentation @ https://tools.ietf.org/html/rfc7231#section-6.6.2\n     *\n     * The request method is not supported by the server and cannot be handled. The only methods that servers are required to support (and therefore that must not return this code) are GET and HEAD.\n     */\n    StatusCodes[StatusCodes[\"NOT_IMPLEMENTED\"] = 501] = \"NOT_IMPLEMENTED\";\n    /**\n     * Official Documentation @ https://tools.ietf.org/html/rfc7231#section-6.6.3\n     *\n     * This error response means that the server, while working as a gateway to get a response needed to handle the request, got an invalid response.\n     */\n    StatusCodes[StatusCodes[\"BAD_GATEWAY\"] = 502] = \"BAD_GATEWAY\";\n    /**\n     * Official Documentation @ https://tools.ietf.org/html/rfc7231#section-6.6.4\n     *\n     * The server is not ready to handle the request. Common causes are a server that is down for maintenance or that is overloaded. Note that together with this response, a user-friendly page explaining the problem should be sent. This responses should be used for temporary conditions and the Retry-After: HTTP header should, if possible, contain the estimated time before the recovery of the service. The webmaster must also take care about the caching-related headers that are sent along with this response, as these temporary condition responses should usually not be cached.\n     */\n    StatusCodes[StatusCodes[\"SERVICE_UNAVAILABLE\"] = 503] = \"SERVICE_UNAVAILABLE\";\n    /**\n     * Official Documentation @ https://tools.ietf.org/html/rfc7231#section-6.6.5\n     *\n     * This error response is given when the server is acting as a gateway and cannot get a response in time.\n     */\n    StatusCodes[StatusCodes[\"GATEWAY_TIMEOUT\"] = 504] = \"GATEWAY_TIMEOUT\";\n    /**\n     * Official Documentation @ https://tools.ietf.org/html/rfc7231#section-6.6.6\n     *\n     * The HTTP version used in the request is not supported by the server.\n     */\n    StatusCodes[StatusCodes[\"HTTP_VERSION_NOT_SUPPORTED\"] = 505] = \"HTTP_VERSION_NOT_SUPPORTED\";\n    /**\n     * Official Documentation @ https://tools.ietf.org/html/rfc2518#section-10.6\n     *\n     * The server has an internal configuration error: the chosen variant resource is configured to engage in transparent content negotiation itself, and is therefore not a proper end point in the negotiation process.\n     */\n    StatusCodes[StatusCodes[\"INSUFFICIENT_STORAGE\"] = 507] = \"INSUFFICIENT_STORAGE\";\n    /**\n     * Official Documentation @ https://tools.ietf.org/html/rfc6585#section-6\n     *\n     * The 511 status code indicates that the client needs to authenticate to gain network access.\n     */\n    StatusCodes[StatusCodes[\"NETWORK_AUTHENTICATION_REQUIRED\"] = 511] = \"NETWORK_AUTHENTICATION_REQUIRED\";\n})(StatusCodes || (StatusCodes = {}));\n","// Only Node.JS has a process variable that is of [[Class]] process\nexport default Object.prototype.toString.call(typeof process !== 'undefined' ? process : 0) === '[object process]';\n","import isNode from 'detect-node'\n\nimport { StatusCodes } from 'http-status-codes';\n\nimport axios, { AxiosRequestConfig } from \"axios\";\n\nimport { ISTSLogger, JSONObject } from '@nsshunt/stsutils';\n\nimport { ISTSError, ISTSResourceManagerOptions } from './commonTypes'\n\nimport { AgentManager, STSAxiosConfig } from '@nsshunt/stsconfig';\n\nexport abstract class ResourceManager {\n    #options: ISTSResourceManagerOptions;\n    #logger: ISTSLogger;\n    #agentManager: AgentManager | null = null;\n\n    constructor(options: ISTSResourceManagerOptions, logger: ISTSLogger) {\n        this.#options = options;\n        this.#logger  = logger;\n\t\t\n        this.LogDebugMessage(`STSOAuth2Worker:constructor:#options: [${JSON.stringify(this.#options)}]`);\n\n        if (isNode) {\n            if (this.#options.agentOptions) {\n                this.#agentManager = new AgentManager({\n                    agentOptions: this.#options.agentOptions\n                });\n            } else {\n                this.#agentManager = new AgentManager({});\n            }\n        }\n    }\n\n    get agentManager(): AgentManager | null {\n        return this.#agentManager;\n    }\n\n    get options(): ISTSResourceManagerOptions {\n        return this.#options;\n    }\n\n    // eslint-disable-next-line  @typescript-eslint/no-explicit-any\n    LogDebugMessage(message: any) {\n        this.#logger.debug(message);\n    }\n\n    // eslint-disable-next-line  @typescript-eslint/no-explicit-any\n    LogInfoMessage(message: any) {\n        this.#logger.info(message);\n    }\n\n    // eslint-disable-next-line  @typescript-eslint/no-explicit-any\n    LogErrorMessage(message: any) {\n        this.#logger.error(message);\n    }\n\n    // eslint-disable-next-line  @typescript-eslint/no-explicit-any\n    GetErrorMessage = (status: StatusCodes, error: string, detail: any): ISTSError => {\n        return {\n            status,\n            error,\n            detail\n        };\n    }\n\n    GetHeaders = (access_token: string | null): JSONObject => {\n        const headers: JSONObject = { \n            'Content-Type': 'application/json'\n        }\n        if (access_token) {\n            headers['Authorization'] = `Bearer ${access_token}`;\n        }\n        return headers;\n    }\n\n    GetResult = async <T>(accessToken: string | null, url: string, method: string, requestData: JSONObject | null, errorCb: (error: ISTSError) => void): Promise<T | null> => {\n        const axiosConfig = new STSAxiosConfig(url, method, this.GetHeaders(accessToken as string), this.options.timeout);\n        if (this.#agentManager) {\n            axiosConfig.withAgentManager(this.#agentManager)\n        }\n        if (requestData !== null) {\n            axiosConfig.withData(requestData)\n        }\n\n        const data = await axios(axiosConfig.config as AxiosRequestConfig); // The snapshot is not actually required here but after the await. I put it here by way of example only.\n        // The reason is that when await is called, the node event loop will continue to process all remaining queued operations.\n        // One of those operations or any operation executed prior to the axios call completing might update the config. So we need to use the\n        // snapshot copy of the config made above.\n        if (data.data.status === StatusCodes.OK || data.data.status === StatusCodes.CREATED) {\n            const sessionDataRaw = data.data.detail;\n            if (sessionDataRaw) {\n                try {\n                    const sessionData = JSON.parse(sessionDataRaw) as T;\n                    return sessionData;\n                } catch  (error) {\n                    errorCb(this.GetErrorMessage(StatusCodes.INTERNAL_SERVER_ERROR, 'SessionManager:GetResult(): Could not parse session data.', error));\n                    return null;\n                }\n            } else {\n                errorCb(this.GetErrorMessage(StatusCodes.INTERNAL_SERVER_ERROR, 'SessionManager:GetResult(): No session data returned.', null));\n                return null;\n            }\n        } else {\n            const { status, error, detail } = data.data;\n            errorCb(this.GetErrorMessage(status, `SessionManager:GetResult(): Status not OK. Error: [${error}]`, detail));\n            return null;\n        }\n    }\n}\n","import { StatusCodes } from 'http-status-codes';\n\nimport { ISTSLogger } from '@nsshunt/stsutils';\n\nimport { ISTSSessionResource, ISTSError, ISTSResourceManagerOptions } from './commonTypes'\n\nimport { ResourceManager } from './resourceManager'\n\nexport class SessionManager extends ResourceManager {\n    constructor(options: ISTSResourceManagerOptions, logger: ISTSLogger) {\n        super(options, logger);\n    }\n\n    GetSession = async (access_token: string, sessionId: string, errorCb: (error: ISTSError) => void): Promise<ISTSSessionResource | null> => {\n        try {\n            return this.GetResult<ISTSSessionResource>(access_token, `${this.options.asendpoint}/session/${encodeURIComponent(sessionId)}`, 'get', null, errorCb);\n        // eslint-disable-next-line  @typescript-eslint/no-explicit-any\n        } catch (error: any) {\n            errorCb(this.GetErrorMessage(StatusCodes.INTERNAL_SERVER_ERROR, `SessionManager:GetSession(): Could not process session. Error: [${error}]`, error));\n            return null;\n        }\n    }\n\n    PatchSession = async (access_token: string, session: Partial<ISTSSessionResource>, errorCb: (error: ISTSError) => void): Promise<ISTSSessionResource | null> => {\n        try {\n            if (!session.sessionId) {\n                errorCb(this.GetErrorMessage(StatusCodes.INTERNAL_SERVER_ERROR, 'SessionManager:GetSession(): sessionId not provided.', null));\n                return null;\n            }\n            return this.GetResult<ISTSSessionResource>(access_token, `${this.options.asendpoint}/session/${encodeURIComponent(session.sessionId)}`, 'patch', session, errorCb);\n        // eslint-disable-next-line  @typescript-eslint/no-explicit-any\n        } catch (error: any) {\n            errorCb(this.GetErrorMessage(StatusCodes.INTERNAL_SERVER_ERROR, `SessionManager:GetSession(): Could not process session. Error: [${error}]`, error));\n            return null;\n        }\n    }\n}\n","import tough from 'tough-cookie';\nimport jwt from 'jsonwebtoken';\nimport { jwtDecode } from \"jwt-decode\";\nimport jwksClient from 'jwks-rsa';\n\nimport axios from 'axios';\n\nimport { goptions, AgentManager, STSAxiosConfig } from '@nsshunt/stsconfig'\n\nimport { GetErrorPayload, ISTSLogger, JSONObject } from '@nsshunt/stsutils'\n\nimport { StatusCodes } from 'http-status-codes';\n\nimport chalk from 'chalk';\n\nimport { Gauge, PublishInstrumentController } from '@nsshunt/stsobservability'\n\nimport { iss, STSAuthClientErrorCode } from './commonTypes'\n\nexport interface IAuthUtilsNodeOptions {\n    permissions: string[]\n}\n\nexport interface IGetAPITokenFromAuthServerUsingScopeOptions {\n    clientId: string\n    authClientSecret: string\n    scope: string\n    endPoint: string\n    instrumentController?: PublishInstrumentController\n    outputErrorsToConsole?: boolean\n}\n\ndeclare interface ICacheScopeRecord {\n    scope: string\n    timeout: NodeJS.Timeout\n}\n\ndeclare interface ICacheRecord {\n    scopes: Record<string, ICacheScopeRecord>\n}\n\nexport class AuthUtilsNode\n{\n    #cache: Record<string, ICacheRecord> = { };\n    #cacheTimeout: number = 1000;\n    #logger: ISTSLogger\n    #cookiejar: tough.CookieJar;\n    // Regular expression to match the origin\n    #originRegex = /^(api:\\/\\/\\w+)/;\n    #agentManager: AgentManager = new AgentManager({});\n\n    constructor(logger: ISTSLogger) {\n        this.#logger = logger;\n        this.#cookiejar = new tough.CookieJar();\n    }\n\n    // eslint-disable-next-line @typescript-eslint/no-explicit-any\n    #LogDebugMessage(message: any) {\n        this.#logger.debug(message);\n    }\n\n    get agentManager(): AgentManager {\n        return this.#agentManager;\n    }\n\n    ResetAgent = () => {\n        this.#agentManager.ResetAgent();\n    }\n\n    VerifyRequestMiddlewareFactory = (options: IAuthUtilsNodeOptions) => {\n        // eslint-disable-next-line @typescript-eslint/no-explicit-any\n        return async (req: any, res: any, next: any) => {\n            if (options.permissions) {\n\n                const permissionsKey = options.permissions.join('_');\n                const scopeKey = (req.auth.scope as string).split(' ').join('_');\n\n                if (this.#cache[permissionsKey] && this.#cache[permissionsKey].scopes[scopeKey]) {\n                    next();\n                    return;\n                }\n\n                const scopes = req.auth.scope.split(' ');\n\n                const requiredPermissions = [ ];\n                for (let i=0; i < options.permissions.length; i++) {\n                    const permission = options.permissions[i];\n                    if (!scopes.includes(permission)) {\n                        requiredPermissions.push(permission);\n                    }\n                }\n                if (requiredPermissions.length > 0) {\n                    const errorPayload = GetErrorPayload(STSAuthClientErrorCode.STS_AC_MISSING_PERMISSION, requiredPermissions);\n                    res.status(StatusCodes.UNAUTHORIZED).send( { status: StatusCodes.UNAUTHORIZED, error: errorPayload });\n                    return;\n                }\n\n                if (!this.#cache[permissionsKey]) {\n                    this.#cache[permissionsKey] = {\n                        scopes: { }\n                    }\n                }\n\n                this.#cache[permissionsKey].scopes[scopeKey] = {\n                    scope: scopeKey,\n                    timeout: setTimeout(() => {\n                        delete this.#cache[permissionsKey].scopes[scopeKey]\n                    }, this.#cacheTimeout).unref()\n                }\n            }\n            next();\n        }\n    }\n    /*\n\tlet cookies = await this.GetCookiesFromJar();\n\tconst valid = this.#ValidateCookies(cookies);\n\tif (valid) {\n\t\tnext();\n\t} else {\n\t\tconst error = { }; //@@\n\t\tconst invalidToken = false; //@@\n\t\tif (invalidToken)\n\t\t{\n\t\t\tres.status(StatusCodes.UNAUTHORIZED).send( { status: StatusCodes.UNAUTHORIZED, error: 'Invalid Token', detail: error } );\n\t\t} else{\n\t\t\tres.status(StatusCodes.INTERNAL_SERVER_ERROR).send( { status: StatusCodes.INTERNAL_SERVER_ERROR, error: 'Operation was not successful', detail: error } );\n\t\t}\n\t}\n\t*/\n\n    // eslint-disable-next-line @typescript-eslint/no-explicit-any\n    async verifyRequestMiddleware(req: any, res: any, next: any)\n    {\n        next();\n        /*\n\t\t\n\t\tlet cookies = await this.GetCookiesFromJar();\n\n\t\tconst valid = this.#ValidateCookies(cookies);\n\n\t\tif (valid) {\n\t\t\tnext();\n\t\t} else {\n\t\t\tconst error = { }; //@@\n\t\t\tconst invalidToken = false; //@@\n\t\t\tif (invalidToken)\n\t\t\t{\n\t\t\t\tres.status(StatusCodes.UNAUTHORIZED).send( { status: StatusCodes.UNAUTHORIZED, error: 'Invalid Token', detail: error } );\n\t\t\t} else{\n\t\t\t\tres.status(StatusCodes.INTERNAL_SERVER_ERROR).send( { status: StatusCodes.INTERNAL_SERVER_ERROR, error: 'Operation was not successful', detail: error } );\n\t\t\t}\n\t\t}\n\t\t*/\n    }\n\n    // eslint-disable-next-line @typescript-eslint/no-explicit-any\n    SetCookiesToJar = async (headers: Record<string, any>, endpoint: string): Promise<tough.Cookie[]> =>\n    {\n        if (headers['set-cookie']) {\n            // eslint-disable-next-line @typescript-eslint/no-explicit-any\n            headers['set-cookie'].map((headerCookie: any) => {\n                // eslint-disable-next-line @typescript-eslint/no-explicit-any\n                const cookie: any = tough.Cookie.parse(headerCookie);\n                this.#cookiejar.setCookieSync(cookie, endpoint);\n            });\n        } else {\n            // eslint-disable-next-line @typescript-eslint/no-explicit-any\n            const cookie: any = tough.Cookie.parse(headers['set-cookie']);\n            this.#cookiejar.setCookieSync(cookie, endpoint);\n        }\n\n        return this.#cookiejar.getCookies(endpoint);\n    };\n\n    GetCookiesFromJar = async (endpoint: string): Promise<tough.Cookie[]> =>\n    {\n        return this.#cookiejar.getCookies(endpoint);\n    };\n\n    ValidateJWT = async (token: string, audience: string, endpoint?: string): Promise<string> => {\n        const jwksClientUri = (endpoint \n            ? `${endpoint}${goptions.asoauthapiroot}${goptions.asjwksjsonpath}` \n            : `${goptions.asendpoint}:${goptions.asport}${goptions.asoauthapiroot}${goptions.asjwksjsonpath}`);\n\n        const jwks = jwksClient({\n            cache: true, //@@ all config items\n            cacheMaxEntries: 5, // Default value\n            cacheMaxAge: 600000, // Defaults to 10m\n            rateLimit: true,\n            jwksRequestsPerMinute: 10, // Default value\n            jwksUri: jwksClientUri,\n            timeout: 30000, //@@ config\n            // eslint-disable-next-line @typescript-eslint/no-explicit-any\n            requestAgent: this.#agentManager.GetAgent(jwksClientUri) as any\n        });\n\n        // Use decode to get the kid\n        const decodedRefreshToken = jwtDecode<JSONObject>(token, { header: true });\n        const kid = decodedRefreshToken.kid;\n\n        const key = await jwks.getSigningKey(kid);\n        const signingKey = key.getPublicKey();\n\t\t\n        const verifyOptions = {\n            issuer: iss,\n            //subject:  s,\n            audience:  audience,\n            //expiresIn:  600, // 10 minutes\n            algorithm:  [\"RS256\"]   // RSASSA [ \"RS256\", \"RS384\", \"RS512\" ]\n        };\n\n        return jwt.verify(token, signingKey, verifyOptions) as string;\n    }\n\n    // Function to extract the origin from a URI\n    ExtractOrigin = (uri: string) => {\n        const match = uri.match(this.#originRegex);\n        return match ? match[1] : null;\n    }\n\n    GetAPITokenFromAuthServerUsingScope = async (options: IGetAPITokenFromAuthServerUsingScopeOptions, errorCb: (error: Error) => void): Promise<string> => {\n        const { scope, clientId, authClientSecret, endPoint, instrumentController, outputErrorsToConsole } = options;\n\n        let stage = '1';\n\n        const invokeErrorCb = (error: Error) => {\n            this.#LogDebugMessage(error);\n            if (instrumentController) {\n                instrumentController.UpdateInstrument(Gauge.AUTHENTICATION_ERROR_COUNT_GAUGE, { // auth error\n                    Inc: 1\n                });\n            }\n            errorCb(error);\n        };\n\n        try {\n            stage = '2';\n            const scopes = scope.split(' ');\n            let origin: string | null = null;\n            let error: Error | null = null;\n            stage = '3';\n            for (let i=0; i < scopes.length; i++) {\n                const s = scopes[i];\n                if (!origin) {\n                    origin = this.ExtractOrigin(s);\n                    if (!origin) {\n                        error = new Error(`Scope: [${scope}] not in required format. Must use (space seperated) api://<client id>[/<resource>.<permission>].`);\n                        break;\n                    }\n                } else {\n                    const nextOrigin: string | null = this.ExtractOrigin(s);\n                    if (!nextOrigin) {\n                        error = new Error(`Scope: [${scope}] not in required format. Must use (space seperated) api://<client id>[/<resource>.<permission>].`);\n                        break;\n                    } else {\n                        if (origin.localeCompare(nextOrigin) !== 0) {\n                            error = new Error(`Scope: [${scope}] not all from the same client API. All scopes must come from the same client API.`);\n                            break;\n                        }\n                    }\n                }\n            }\n            stage = '4';\n            if (error) {\n                invokeErrorCb(error);\n                return \"\";\n            }\n\n            stage = '5';\n            const payload = { //@@ make a type\n                client_id: clientId, // The service calling this method\n                client_secret: authClientSecret, // Auth service client secret\n                //client_secret: goptions.brokerclientsecret, // Broker service client secret\n                scope: scope, // required API\n                //@@ remove audience\n                //@@ need scope to be the API identifier\n                grant_type: \"client_credentials\"\n            }\n            stage = '6';\n            const url = (endPoint \n                ? `${endPoint}${goptions.asoauthapiroot}/token`\n                : `${goptions.asendpoint}:${goptions.asport}${goptions.asoauthapiroot}/token`);\n\n            stage = `6.5: url: [${url}] payload: [${JSON.stringify(payload)}]`\n\n            const retVal = await axios(new STSAxiosConfig(url, 'post')\n                .withDefaultHeaders()\n                .withData(payload)\n                .withAgentManager(this.#agentManager).config);\n\n            stage = '7';\n            if (retVal.status) {\n                if (retVal.status !== 200) {\n                    // Just provide a warning here\n                    this.#LogDebugMessage(chalk.magenta(`Error (AuthUtilsNode:GetAPITokenFromServer): Invalid response from server: [${retVal.status}]`));\n                }\n            } else {\n                invokeErrorCb(new Error(chalk.red(`Error (AuthUtilsNode:GetAPITokenFromServer:No retVal.status)`)));\n                return \"\";\n            }\n            stage = '8';\n            if (retVal.data) {\n                stage = '9';\n                if (retVal.data.access_token) {\n                    stage = '10';\n                    if (instrumentController) {\n                        stage = '11';\n                        instrumentController.UpdateInstrument(Gauge.AUTHENTICATION_COUNT_GAUGE, {\n                            Inc: 1\n                        });\n                    }\n    \n                    stage = '12';\n                    return retVal.data.access_token as string;\n                } else {\n                    stage = '13';\n                    invokeErrorCb(new Error(`Error (AuthUtilsNode:GetAPITokenFromServer:No retVal.data.access_token)`));\n                    return \"\";\n                }\n            } else {\n                stage = '14';\n                invokeErrorCb(new Error(`Error (AuthUtilsNode:GetAPITokenFromServer:No retVal.data)`));\n                return \"\";\n            }\n        // eslint-disable-next-line @typescript-eslint/no-explicit-any\n        } catch (error: any) {\n            if (outputErrorsToConsole === true) {\n                console.error(error);\n            }\n            let details = 'None available.';\n            if (error.response && error.response.data) {\n                try {\n                    details = JSON.stringify(error.response.data);\n                // eslint-disable-next-line @typescript-eslint/no-unused-vars\n                } catch (error) {\n                    details = `Could not JSON.stringify(error.response.data)`;\n                }\n            }\n            invokeErrorCb(new Error(`Error (AuthUtilsNode:GetAPITokenFromServer:catch): [${error}], Stage: [${stage}], Details: [${details}]`));\n            return \"\";\n        }\n    }\n}\n"],"names":["StatusCodes","STSAxiosConfig","AgentManager","_logger","_agentManager","GetErrorPayload","goptions","jwtDecode","Gauge","error"],"mappings":";;;;;;;;;;;;;;;;AAqIa,QAAA,MAAM;AAEN,QAAA,yBAAyB,OAAO,OAAO;AAAA,IAChD,2BAA2B;AAAA,MACvB,MAAM;AAAA,MACN,aAAa;AAAA,IAAA;AAAA,EAErB,CAAC;AC3IM,MAAI;AACX,GAAC,SAAUA,cAAa;AAMpB,IAAAA,aAAYA,aAAY,UAAU,IAAI,GAAG,IAAI;AAM7C,IAAAA,aAAYA,aAAY,qBAAqB,IAAI,GAAG,IAAI;AAMxD,IAAAA,aAAYA,aAAY,YAAY,IAAI,GAAG,IAAI;AAM/C,IAAAA,aAAYA,aAAY,aAAa,IAAI,GAAG,IAAI;AAUhD,IAAAA,aAAYA,aAAY,IAAI,IAAI,GAAG,IAAI;AAMvC,IAAAA,aAAYA,aAAY,SAAS,IAAI,GAAG,IAAI;AAM5C,IAAAA,aAAYA,aAAY,UAAU,IAAI,GAAG,IAAI;AAM7C,IAAAA,aAAYA,aAAY,+BAA+B,IAAI,GAAG,IAAI;AAMlE,IAAAA,aAAYA,aAAY,YAAY,IAAI,GAAG,IAAI;AAM/C,IAAAA,aAAYA,aAAY,eAAe,IAAI,GAAG,IAAI;AAMlD,IAAAA,aAAYA,aAAY,iBAAiB,IAAI,GAAG,IAAI;AAMpD,IAAAA,aAAYA,aAAY,cAAc,IAAI,GAAG,IAAI;AAMjD,IAAAA,aAAYA,aAAY,kBAAkB,IAAI,GAAG,IAAI;AAMrD,IAAAA,aAAYA,aAAY,mBAAmB,IAAI,GAAG,IAAI;AAMtD,IAAAA,aAAYA,aAAY,mBAAmB,IAAI,GAAG,IAAI;AAMtD,IAAAA,aAAYA,aAAY,WAAW,IAAI,GAAG,IAAI;AAM9C,IAAAA,aAAYA,aAAY,cAAc,IAAI,GAAG,IAAI;AAOjD,IAAAA,aAAYA,aAAY,WAAW,IAAI,GAAG,IAAI;AAM9C,IAAAA,aAAYA,aAAY,oBAAoB,IAAI,GAAG,IAAI;AAMvD,IAAAA,aAAYA,aAAY,oBAAoB,IAAI,GAAG,IAAI;AAMvD,IAAAA,aAAYA,aAAY,aAAa,IAAI,GAAG,IAAI;AAMhD,IAAAA,aAAYA,aAAY,cAAc,IAAI,GAAG,IAAI;AAMjD,IAAAA,aAAYA,aAAY,kBAAkB,IAAI,GAAG,IAAI;AAMrD,IAAAA,aAAYA,aAAY,WAAW,IAAI,GAAG,IAAI;AAM9C,IAAAA,aAAYA,aAAY,WAAW,IAAI,GAAG,IAAI;AAM9C,IAAAA,aAAYA,aAAY,oBAAoB,IAAI,GAAG,IAAI;AAMvD,IAAAA,aAAYA,aAAY,gBAAgB,IAAI,GAAG,IAAI;AAMnD,IAAAA,aAAYA,aAAY,+BAA+B,IAAI,GAAG,IAAI;AAMlE,IAAAA,aAAYA,aAAY,iBAAiB,IAAI,GAAG,IAAI;AAMpD,IAAAA,aAAYA,aAAY,UAAU,IAAI,GAAG,IAAI;AAM7C,IAAAA,aAAYA,aAAY,MAAM,IAAI,GAAG,IAAI;AAMzC,IAAAA,aAAYA,aAAY,iBAAiB,IAAI,GAAG,IAAI;AAMpD,IAAAA,aAAYA,aAAY,qBAAqB,IAAI,GAAG,IAAI;AAMxD,IAAAA,aAAYA,aAAY,kBAAkB,IAAI,GAAG,IAAI;AAMrD,IAAAA,aAAYA,aAAY,sBAAsB,IAAI,GAAG,IAAI;AAMzD,IAAAA,aAAYA,aAAY,wBAAwB,IAAI,GAAG,IAAI;AAM3D,IAAAA,aAAYA,aAAY,iCAAiC,IAAI,GAAG,IAAI;AAMpE,IAAAA,aAAYA,aAAY,oBAAoB,IAAI,GAAG,IAAI;AAMvD,IAAAA,aAAYA,aAAY,aAAa,IAAI,GAAG,IAAI;AAMhD,IAAAA,aAAYA,aAAY,gCAAgC,IAAI,GAAG,IAAI;AAOnE,IAAAA,aAAYA,aAAY,gBAAgB,IAAI,GAAG,IAAI;AAMnD,IAAAA,aAAYA,aAAY,qBAAqB,IAAI,GAAG,IAAI;AAMxD,IAAAA,aAAYA,aAAY,sBAAsB,IAAI,GAAG,IAAI;AAMzD,IAAAA,aAAYA,aAAY,QAAQ,IAAI,GAAG,IAAI;AAM3C,IAAAA,aAAYA,aAAY,mBAAmB,IAAI,GAAG,IAAI;AAMtD,IAAAA,aAAYA,aAAY,kBAAkB,IAAI,GAAG,IAAI;AAMrD,IAAAA,aAAYA,aAAY,uBAAuB,IAAI,GAAG,IAAI;AAM1D,IAAAA,aAAYA,aAAY,mBAAmB,IAAI,GAAG,IAAI;AAMtD,IAAAA,aAAYA,aAAY,iCAAiC,IAAI,GAAG,IAAI;AAMpE,IAAAA,aAAYA,aAAY,+BAA+B,IAAI,GAAG,IAAI;AAMlE,IAAAA,aAAYA,aAAY,uBAAuB,IAAI,GAAG,IAAI;AAM1D,IAAAA,aAAYA,aAAY,iBAAiB,IAAI,GAAG,IAAI;AAMpD,IAAAA,aAAYA,aAAY,aAAa,IAAI,GAAG,IAAI;AAMhD,IAAAA,aAAYA,aAAY,qBAAqB,IAAI,GAAG,IAAI;AAMxD,IAAAA,aAAYA,aAAY,iBAAiB,IAAI,GAAG,IAAI;AAMpD,IAAAA,aAAYA,aAAY,4BAA4B,IAAI,GAAG,IAAI;AAM/D,IAAAA,aAAYA,aAAY,sBAAsB,IAAI,GAAG,IAAI;AAMzD,IAAAA,aAAYA,aAAY,iCAAiC,IAAI,GAAG,IAAI;AAAA,EACxE,GAAG,gBAAgB,cAAc,CAAA,EAAG;ACpWpC,QAAA,SAAe,OAAO,UAAU,SAAS,KAAK,OAAO,YAAY,cAAc,UAAU,CAAC,MAAM;AAAA,ECWzF,MAAe,gBAAgB;AAAA,IAKlC,YAAY,SAAqC,QAAoB;AAJrE;AACA;AACA,wCAAqC;AA2CrC;AAAA,6CAAkB,CAAC,QAAqB,OAAe,WAA2B;AACvE,eAAA;AAAA,UACH;AAAA,UACA;AAAA,UACA;AAAA,QACJ;AAAA,MACJ;AAEA,wCAAa,CAAC,iBAA4C;AACtD,cAAM,UAAsB;AAAA,UACxB,gBAAgB;AAAA,QACpB;AACA,YAAI,cAAc;AACN,kBAAA,eAAe,IAAI,UAAU,YAAY;AAAA,QAAA;AAE9C,eAAA;AAAA,MACX;AAEA,uCAAY,OAAU,aAA4B,KAAa,QAAgB,aAAgC,YAA2D;AAChK,cAAA,cAAc,IAAIC,yBAAe,KAAK,QAAQ,KAAK,WAAW,WAAqB,GAAG,KAAK,QAAQ,OAAO;AAChH,YAAI,mBAAK,gBAAe;AACR,sBAAA,iBAAiB,mBAAK,cAAa;AAAA,QAAA;AAEnD,YAAI,gBAAgB,MAAM;AACtB,sBAAY,SAAS,WAAW;AAAA,QAAA;AAGpC,cAAM,OAAO,MAAM,MAAM,YAAY,MAA4B;AAI7D,YAAA,KAAK,KAAK,WAAW,YAAY,MAAM,KAAK,KAAK,WAAW,YAAY,SAAS;AAC3E,gBAAA,iBAAiB,KAAK,KAAK;AACjC,cAAI,gBAAgB;AACZ,gBAAA;AACM,oBAAA,cAAc,KAAK,MAAM,cAAc;AACtC,qBAAA;AAAA,qBACD,OAAO;AACb,sBAAQ,KAAK,gBAAgB,YAAY,uBAAuB,6DAA6D,KAAK,CAAC;AAC5H,qBAAA;AAAA,YAAA;AAAA,UACX,OACG;AACH,oBAAQ,KAAK,gBAAgB,YAAY,uBAAuB,yDAAyD,IAAI,CAAC;AACvH,mBAAA;AAAA,UAAA;AAAA,QACX,OACG;AACH,gBAAM,EAAE,QAAQ,OAAO,WAAW,KAAK;AACvC,kBAAQ,KAAK,gBAAgB,QAAQ,sDAAsD,KAAK,KAAK,MAAM,CAAC;AACrG,iBAAA;AAAA,QAAA;AAAA,MAEf;AA1FI,yBAAK,UAAW;AAChB,yBAAK,SAAW;AAEhB,WAAK,gBAAgB,0CAA0C,KAAK,UAAU,mBAAK,SAAQ,CAAC,GAAG;AAE/F,UAAI,QAAQ;AACJ,YAAA,mBAAK,UAAS,cAAc;AACvB,6BAAA,eAAgB,IAAIC,uBAAa;AAAA,YAClC,cAAc,mBAAK,UAAS;AAAA,UAAA,CAC/B;AAAA,QAAA,OACE;AACH,6BAAK,eAAgB,IAAIA,UAAa,aAAA,EAAE;AAAA,QAAA;AAAA,MAC5C;AAAA,IACJ;AAAA,IAGJ,IAAI,eAAoC;AACpC,aAAO,mBAAK;AAAA,IAAA;AAAA,IAGhB,IAAI,UAAsC;AACtC,aAAO,mBAAK;AAAA,IAAA;AAAA;AAAA,IAIhB,gBAAgB,SAAc;AACrB,yBAAA,SAAQ,MAAM,OAAO;AAAA,IAAA;AAAA;AAAA,IAI9B,eAAe,SAAc;AACpB,yBAAA,SAAQ,KAAK,OAAO;AAAA,IAAA;AAAA;AAAA,IAI7B,gBAAgB,SAAc;AACrB,yBAAA,SAAQ,MAAM,OAAO;AAAA,IAAA;AAAA,EAuDlC;AAhGI;AACA;AACA;AAAA,ECPG,MAAM,uBAAuB,gBAAgB;AAAA,IAChD,YAAY,SAAqC,QAAoB;AACjE,YAAM,SAAS,MAAM;AAGzB,wCAAa,OAAO,cAAsB,WAAmB,YAA6E;AAClI,YAAA;AACA,iBAAO,KAAK,UAA+B,cAAc,GAAG,KAAK,QAAQ,UAAU,YAAY,mBAAmB,SAAS,CAAC,IAAI,OAAO,MAAM,OAAO;AAAA,iBAE/I,OAAY;AACT,kBAAA,KAAK,gBAAgB,YAAY,uBAAuB,mEAAmE,KAAK,KAAK,KAAK,CAAC;AAC5I,iBAAA;AAAA,QAAA;AAAA,MAEf;AAEA,0CAAe,OAAO,cAAsB,SAAuC,YAA6E;AACxJ,YAAA;AACI,cAAA,CAAC,QAAQ,WAAW;AACpB,oBAAQ,KAAK,gBAAgB,YAAY,uBAAuB,wDAAwD,IAAI,CAAC;AACtH,mBAAA;AAAA,UAAA;AAEX,iBAAO,KAAK,UAA+B,cAAc,GAAG,KAAK,QAAQ,UAAU,YAAY,mBAAmB,QAAQ,SAAS,CAAC,IAAI,SAAS,SAAS,OAAO;AAAA,iBAE5J,OAAY;AACT,kBAAA,KAAK,gBAAgB,YAAY,uBAAuB,mEAAmE,KAAK,KAAK,KAAK,CAAC;AAC5I,iBAAA;AAAA,QAAA;AAAA,MAEf;AAAA,IAzByB;AAAA,EA0B7B;AAAA,ECKO,MAAM,cACb;AAAA,IASI,YAAY,QAAoB;AAV7B;AAEH,iCAAuC,CAAE;AACzC,wCAAwB;AACxB,yBAAAC;AACA;AAEA;AAAA,uCAAe;AACf,yBAAAC,gBAA8B,IAAIF,UAAa,aAAA,EAAE;AAgBjD,wCAAa,MAAM;AACf,2BAAKE,gBAAc,WAAW;AAAA,MAClC;AAEA,4DAAiC,CAAC,YAAmC;AAE1D,eAAA,OAAO,KAAU,KAAU,SAAc;AAC5C,cAAI,QAAQ,aAAa;AAErB,kBAAM,iBAAiB,QAAQ,YAAY,KAAK,GAAG;AAC7C,kBAAA,WAAY,IAAI,KAAK,MAAiB,MAAM,GAAG,EAAE,KAAK,GAAG;AAE3D,gBAAA,mBAAK,QAAO,cAAc,KAAK,mBAAK,QAAO,cAAc,EAAE,OAAO,QAAQ,GAAG;AACxE,mBAAA;AACL;AAAA,YAAA;AAGJ,kBAAM,SAAS,IAAI,KAAK,MAAM,MAAM,GAAG;AAEvC,kBAAM,sBAAsB,CAAE;AAC9B,qBAAS,IAAE,GAAG,IAAI,QAAQ,YAAY,QAAQ,KAAK;AACzC,oBAAA,aAAa,QAAQ,YAAY,CAAC;AACxC,kBAAI,CAAC,OAAO,SAAS,UAAU,GAAG;AAC9B,oCAAoB,KAAK,UAAU;AAAA,cAAA;AAAA,YACvC;AAEA,gBAAA,oBAAoB,SAAS,GAAG;AAChC,oBAAM,eAAeC,SAAA,gBAAgB,uBAAuB,2BAA2B,mBAAmB;AACtG,kBAAA,OAAO,YAAY,YAAY,EAAE,KAAM,EAAE,QAAQ,YAAY,cAAc,OAAO,aAAA,CAAc;AACpG;AAAA,YAAA;AAGJ,gBAAI,CAAC,mBAAK,QAAO,cAAc,GAAG;AACzB,iCAAA,QAAO,cAAc,IAAI;AAAA,gBAC1B,QAAQ,CAAA;AAAA,cACZ;AAAA,YAAA;AAGJ,+BAAK,QAAO,cAAc,EAAE,OAAO,QAAQ,IAAI;AAAA,cAC3C,OAAO;AAAA,cACP,SAAS,WAAW,MAAM;AACtB,uBAAO,mBAAK,QAAO,cAAc,EAAE,OAAO,QAAQ;AAAA,cAAA,GACnD,mBAAK,cAAa,EAAE,MAAM;AAAA,YACjC;AAAA,UAAA;AAEC,eAAA;AAAA,QACT;AAAA,MACJ;AA4CA;AAAA,6CAAkB,OAAO,SAA8B,aACvD;AACQ,YAAA,QAAQ,YAAY,GAAG;AAEvB,kBAAQ,YAAY,EAAE,IAAI,CAAC,iBAAsB;AAE7C,kBAAM,SAAc,MAAM,OAAO,MAAM,YAAY;AAC9C,+BAAA,YAAW,cAAc,QAAQ,QAAQ;AAAA,UAAA,CACjD;AAAA,QAAA,OACE;AAEH,gBAAM,SAAc,MAAM,OAAO,MAAM,QAAQ,YAAY,CAAC;AACvD,6BAAA,YAAW,cAAc,QAAQ,QAAQ;AAAA,QAAA;AAG3C,eAAA,mBAAK,YAAW,WAAW,QAAQ;AAAA,MAC9C;AAEA,+CAAoB,OAAO,aAC3B;AACW,eAAA,mBAAK,YAAW,WAAW,QAAQ;AAAA,MAC9C;AAEA,yCAAc,OAAO,OAAe,UAAkB,aAAuC;AACnF,cAAA,gBAAiB,WACjB,GAAG,QAAQ,GAAGC,UAAS,SAAA,cAAc,GAAGA,mBAAS,cAAc,KAC/D,GAAGA,UAAAA,SAAS,UAAU,IAAIA,UAAAA,SAAS,MAAM,GAAGA,UAAS,SAAA,cAAc,GAAGA,mBAAS,cAAc;AAEnG,cAAM,OAAO,WAAW;AAAA,UACpB,OAAO;AAAA;AAAA,UACP,iBAAiB;AAAA;AAAA,UACjB,aAAa;AAAA;AAAA,UACb,WAAW;AAAA,UACX,uBAAuB;AAAA;AAAA,UACvB,SAAS;AAAA,UACT,SAAS;AAAA;AAAA;AAAA,UAET,cAAc,mBAAKF,gBAAc,SAAS,aAAa;AAAA,QAAA,CAC1D;AAGD,cAAM,sBAAsBG,UAAAA,UAAsB,OAAO,EAAE,QAAQ,MAAM;AACzE,cAAM,MAAM,oBAAoB;AAEhC,cAAM,MAAM,MAAM,KAAK,cAAc,GAAG;AAClC,cAAA,aAAa,IAAI,aAAa;AAEpC,cAAM,gBAAgB;AAAA,UAClB,QAAQ;AAAA;AAAA,UAER;AAAA;AAAA,UAEA,WAAY,CAAC,OAAO;AAAA;AAAA,QACxB;AAEA,eAAO,IAAI,OAAO,OAAO,YAAY,aAAa;AAAA,MACtD;AAGA;AAAA,2CAAgB,CAAC,QAAgB;AAC7B,cAAM,QAAQ,IAAI,MAAM,mBAAK,aAAY;AAClC,eAAA,QAAQ,MAAM,CAAC,IAAI;AAAA,MAC9B;AAEA,iEAAsC,OAAO,SAAsD,YAAqD;AACpJ,cAAM,EAAE,OAAO,UAAU,kBAAkB,UAAU,sBAAsB,0BAA0B;AAErG,YAAI,QAAQ;AAEN,cAAA,gBAAgB,CAAC,UAAiB;AACpC,gCAAK,8CAAL,WAAsB;AACtB,cAAI,sBAAsB;AACD,iCAAA,iBAAiBC,uBAAM,kCAAkC;AAAA;AAAA,cAC1E,KAAK;AAAA,YAAA,CACR;AAAA,UAAA;AAEL,kBAAQ,KAAK;AAAA,QACjB;AAEI,YAAA;AACQ,kBAAA;AACF,gBAAA,SAAS,MAAM,MAAM,GAAG;AAC9B,cAAI,SAAwB;AAC5B,cAAI,QAAsB;AAClB,kBAAA;AACR,mBAAS,IAAE,GAAG,IAAI,OAAO,QAAQ,KAAK;AAC5B,kBAAA,IAAI,OAAO,CAAC;AAClB,gBAAI,CAAC,QAAQ;AACA,uBAAA,KAAK,cAAc,CAAC;AAC7B,kBAAI,CAAC,QAAQ;AACT,wBAAQ,IAAI,MAAM,WAAW,KAAK,mGAAmG;AACrI;AAAA,cAAA;AAAA,YACJ,OACG;AACG,oBAAA,aAA4B,KAAK,cAAc,CAAC;AACtD,kBAAI,CAAC,YAAY;AACb,wBAAQ,IAAI,MAAM,WAAW,KAAK,mGAAmG;AACrI;AAAA,cAAA,OACG;AACH,oBAAI,OAAO,cAAc,UAAU,MAAM,GAAG;AACxC,0BAAQ,IAAI,MAAM,WAAW,KAAK,oFAAoF;AACtH;AAAA,gBAAA;AAAA,cACJ;AAAA,YACJ;AAAA,UACJ;AAEI,kBAAA;AACR,cAAI,OAAO;AACP,0BAAc,KAAK;AACZ,mBAAA;AAAA,UAAA;AAGH,kBAAA;AACR,gBAAM,UAAU;AAAA;AAAA,YACZ,WAAW;AAAA;AAAA,YACX,eAAe;AAAA;AAAA;AAAA,YAEf;AAAA;AAAA;AAAA;AAAA,YAGA,YAAY;AAAA,UAChB;AACQ,kBAAA;AACR,gBAAM,MAAO,WACP,GAAG,QAAQ,GAAGF,mBAAS,cAAc,WACrC,GAAGA,mBAAS,UAAU,IAAIA,UAAA,SAAS,MAAM,GAAGA,mBAAS,cAAc;AAEzE,kBAAQ,cAAc,GAAG,eAAe,KAAK,UAAU,OAAO,CAAC;AAE/D,gBAAM,SAAS,MAAM,MAAM,IAAIL,UAAAA,eAAe,KAAK,MAAM,EACpD,mBAAmB,EACnB,SAAS,OAAO,EAChB,iBAAiB,mBAAKG,eAAa,EAAE,MAAM;AAExC,kBAAA;AACR,cAAI,OAAO,QAAQ;AACX,gBAAA,OAAO,WAAW,KAAK;AAEvB,oCAAK,8CAAL,WAAsB,MAAM,QAAQ,+EAA+E,OAAO,MAAM,GAAG;AAAA,YAAC;AAAA,UACxI,OACG;AACH,0BAAc,IAAI,MAAM,MAAM,IAAI,8DAA8D,CAAC,CAAC;AAC3F,mBAAA;AAAA,UAAA;AAEH,kBAAA;AACR,cAAI,OAAO,MAAM;AACL,oBAAA;AACJ,gBAAA,OAAO,KAAK,cAAc;AAClB,sBAAA;AACR,kBAAI,sBAAsB;AACd,wBAAA;AACa,qCAAA,iBAAiBI,uBAAM,4BAA4B;AAAA,kBACpE,KAAK;AAAA,gBAAA,CACR;AAAA,cAAA;AAGG,sBAAA;AACR,qBAAO,OAAO,KAAK;AAAA,YAAA,OAChB;AACK,sBAAA;AACM,4BAAA,IAAI,MAAM,yEAAyE,CAAC;AAC3F,qBAAA;AAAA,YAAA;AAAA,UACX,OACG;AACK,oBAAA;AACM,0BAAA,IAAI,MAAM,4DAA4D,CAAC;AAC9E,mBAAA;AAAA,UAAA;AAAA,iBAGN,OAAY;AACjB,cAAI,0BAA0B,MAAM;AAChC,oBAAQ,MAAM,KAAK;AAAA,UAAA;AAEvB,cAAI,UAAU;AACd,cAAI,MAAM,YAAY,MAAM,SAAS,MAAM;AACnC,gBAAA;AACA,wBAAU,KAAK,UAAU,MAAM,SAAS,IAAI;AAAA,qBAEvCC,QAAO;AACF,wBAAA;AAAA,YAAA;AAAA,UACd;AAEU,wBAAA,IAAI,MAAM,uDAAuD,KAAK,cAAc,KAAK,gBAAgB,OAAO,GAAG,CAAC;AAC3H,iBAAA;AAAA,QAAA;AAAA,MAEf;AAjSI,yBAAKN,UAAU;AACV,yBAAA,YAAa,IAAI,MAAM,UAAU;AAAA,IAAA;AAAA,IAQ1C,IAAI,eAA6B;AAC7B,aAAO,mBAAKC;AAAA,IAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,IAqEhB,MAAM,wBAAwB,KAAU,KAAU,MAClD;AACS,WAAA;AAAA,IAAA;AAAA,EAiNb;AA3SI;AACA;AACA,EAAAD,WAAA;AACA;AAEA;AACA,EAAAC,iBAAA;AARG;AAgBH;AAAA,gCAAiB,SAAc;AACtB,uBAAAD,UAAQ,MAAM,OAAO;AAAA,EAAA;;;;;;;","x_google_ignoreList":[1,2]}
+{"version":3,"file":"stsauthclient.umd.js","sources":["../src/commonTypes.ts","../node_modules/http-status-codes/build/es/status-codes.js","../src/resourceManager.ts","../src/sessionManager.ts","../src/authutilsnode.ts"],"sourcesContent":["import { StatusCodes } from 'http-status-codes'\n\nimport { OIDCStandardClaim, OAuth2ParameterType, ISTSLogger, AgentManager } from '@nsshunt/stsutils';\n\nexport interface ISTSResourceManagerOptions {\n\ttimeout: number\n    asendpoint: string\n    logger: ISTSLogger\n    agentManager?: AgentManager\n}\n\nexport interface ISTSAuthPayload {\n\tsessionId: string,\n\tid_token: string,\n\tconsentRequired: string[],\n\tremainingAdminConsentRequired: string[],\n\tremainingUserConsentRequired: string[],\n\tauthorizationCode?: string\n\tscope: string\n\tclientName: string\n}\n\nexport interface ISTSLogoutPayload {\n\tsessionId: string\n}\n\nexport interface ISTSConsent {\n    consent: string[]\n}\n\nexport interface ISTSTokenPayload {\n    access_token: string,\n    token_type: \"Bearer\",\n    expires_in: number,\n    refresh_token: string,\n    id_token: string,\n    scope?: string\n}\n\nexport interface ISTSSessionResource { \n    sessionId: string\n    sessionState: string\n    id_token: string\n    consentCurrent: string[]\n    consentRequired: string[]\n    remainingAdminConsentRequired: string[]\n    remainingUserConsentRequired: string[]\n    consentNonce?: string\n    audience: string\n    permissions: string\n    subject: string\n    authorizationCode: string\n    authorizationCodeState: string\n    userId: string\n\n    // Client query paramaters (mandatory)\n    client_id: string\n    response_type: string\n    redirect_uri: string\n    scope: string // Microsoft uses '+' instead of ' ' to seperate scopes - update the string if we have '+' characters\n    state: string\n\n    code_challenge?: string\n    code_challenge_method?: string\n    nonce?: string\n    response_mode?: string\n\n    tokenPayload?: ISTSTokenPayload\n}\n\nexport interface ISTSLoginQueryParams {\n    email: string\n    password: string\n    [OAuth2ParameterType.CLIENT_ID]: string\n    nonce: string\n    [OAuth2ParameterType.RESPONSE_TYPE]: string\n    [OAuth2ParameterType.REDIRECT_URI]: string\n    [OAuth2ParameterType.RESPONSE_MODE]: string\n    [OAuth2ParameterType.SCOPE]: string\n    [OAuth2ParameterType.STATE]: string\n    code_challenge: string\n    code_challenge_method: string\n}\n\nexport interface ISTSUser {\n    id: string\n    name: string\n    email: string\n    hash: string\n    roles: string[]\n}\n\nexport interface ISTSAuthorizationCodeResource {\n    sessionId: string\n}\n\nexport interface ISTSClaims {\n    iss: string, // issuer - server that issues the tokens\n    sub: string, // subject - normally the resource (e.g. https://stsmda.com.au/myresource01/) or the user (for id_token)\n    //aud: audience, // audience (normally the API) (e.g. https://stsmda.com.au/myresource01api/)\n    exp: number,  // expires\n    iat: number, // issues at\n    // OIDC claims\n    [OIDCStandardClaim.NAME]: string\n    [OIDCStandardClaim.EMAIL]: string,\n    // STS Custom claims\n    sts_user_id: string\n    // eslint-disable-next-line  @typescript-eslint/no-explicit-any\n    sts_user_roles: any\n    //alg: 'RS256'\n    [OIDCStandardClaim.NONCE]?: string\n}\n\nexport interface ISTSResourceEx<T> {\n    status: StatusCodes;\n    error?: string;\n    sourceError?: Error;\n    detail?: T;\n}\n\nexport interface ISTSError {\n    status: StatusCodes;\n    error: string;\n    // eslint-disable-next-line  @typescript-eslint/no-explicit-any\n    detail: any;\n}\n\nexport const iss = `https://stscore.stsmda.org/oauth2/v2.0`;\n\nexport const STSAuthClientErrorCode = Object.freeze({\n    STS_AC_MISSING_PERMISSION: {\n        code: 'STS_AFC0001',\n        description: 'STS_AC_0001: Missing Permission(s).'\n    },\n});\n","// Generated file. Do not edit\nexport var StatusCodes;\n(function (StatusCodes) {\n    /**\n     * Official Documentation @ https://tools.ietf.org/html/rfc7231#section-6.2.1\n     *\n     * This interim response indicates that everything so far is OK and that the client should continue with the request or ignore it if it is already finished.\n     */\n    StatusCodes[StatusCodes[\"CONTINUE\"] = 100] = \"CONTINUE\";\n    /**\n     * Official Documentation @ https://tools.ietf.org/html/rfc7231#section-6.2.2\n     *\n     * This code is sent in response to an Upgrade request header by the client, and indicates the protocol the server is switching too.\n     */\n    StatusCodes[StatusCodes[\"SWITCHING_PROTOCOLS\"] = 101] = \"SWITCHING_PROTOCOLS\";\n    /**\n     * Official Documentation @ https://tools.ietf.org/html/rfc2518#section-10.1\n     *\n     * This code indicates that the server has received and is processing the request, but no response is available yet.\n     */\n    StatusCodes[StatusCodes[\"PROCESSING\"] = 102] = \"PROCESSING\";\n    /**\n     * Official Documentation @ https://www.rfc-editor.org/rfc/rfc8297#page-3\n     *\n     * This code indicates to the client that the server is likely to send a final response with the header fields included in the informational response.\n     */\n    StatusCodes[StatusCodes[\"EARLY_HINTS\"] = 103] = \"EARLY_HINTS\";\n    /**\n     * Official Documentation @ https://tools.ietf.org/html/rfc7231#section-6.3.1\n     *\n     * The request has succeeded. The meaning of a success varies depending on the HTTP method:\n     * GET: The resource has been fetched and is transmitted in the message body.\n     * HEAD: The entity headers are in the message body.\n     * POST: The resource describing the result of the action is transmitted in the message body.\n     * TRACE: The message body contains the request message as received by the server\n     */\n    StatusCodes[StatusCodes[\"OK\"] = 200] = \"OK\";\n    /**\n     * Official Documentation @ https://tools.ietf.org/html/rfc7231#section-6.3.2\n     *\n     * The request has succeeded and a new resource has been created as a result of it. This is typically the response sent after a PUT request.\n     */\n    StatusCodes[StatusCodes[\"CREATED\"] = 201] = \"CREATED\";\n    /**\n     * Official Documentation @ https://tools.ietf.org/html/rfc7231#section-6.3.3\n     *\n     * The request has been received but not yet acted upon. It is non-committal, meaning that there is no way in HTTP to later send an asynchronous response indicating the outcome of processing the request. It is intended for cases where another process or server handles the request, or for batch processing.\n     */\n    StatusCodes[StatusCodes[\"ACCEPTED\"] = 202] = \"ACCEPTED\";\n    /**\n     * Official Documentation @ https://tools.ietf.org/html/rfc7231#section-6.3.4\n     *\n     * This response code means returned meta-information set is not exact set as available from the origin server, but collected from a local or a third party copy. Except this condition, 200 OK response should be preferred instead of this response.\n     */\n    StatusCodes[StatusCodes[\"NON_AUTHORITATIVE_INFORMATION\"] = 203] = \"NON_AUTHORITATIVE_INFORMATION\";\n    /**\n     * Official Documentation @ https://tools.ietf.org/html/rfc7231#section-6.3.5\n     *\n     * There is no content to send for this request, but the headers may be useful. The user-agent may update its cached headers for this resource with the new ones.\n     */\n    StatusCodes[StatusCodes[\"NO_CONTENT\"] = 204] = \"NO_CONTENT\";\n    /**\n     * Official Documentation @ https://tools.ietf.org/html/rfc7231#section-6.3.6\n     *\n     * This response code is sent after accomplishing request to tell user agent reset document view which sent this request.\n     */\n    StatusCodes[StatusCodes[\"RESET_CONTENT\"] = 205] = \"RESET_CONTENT\";\n    /**\n     * Official Documentation @ https://tools.ietf.org/html/rfc7233#section-4.1\n     *\n     * This response code is used because of range header sent by the client to separate download into multiple streams.\n     */\n    StatusCodes[StatusCodes[\"PARTIAL_CONTENT\"] = 206] = \"PARTIAL_CONTENT\";\n    /**\n     * Official Documentation @ https://tools.ietf.org/html/rfc2518#section-10.2\n     *\n     * A Multi-Status response conveys information about multiple resources in situations where multiple status codes might be appropriate.\n     */\n    StatusCodes[StatusCodes[\"MULTI_STATUS\"] = 207] = \"MULTI_STATUS\";\n    /**\n     * Official Documentation @ https://tools.ietf.org/html/rfc7231#section-6.4.1\n     *\n     * The request has more than one possible responses. User-agent or user should choose one of them. There is no standardized way to choose one of the responses.\n     */\n    StatusCodes[StatusCodes[\"MULTIPLE_CHOICES\"] = 300] = \"MULTIPLE_CHOICES\";\n    /**\n     * Official Documentation @ https://tools.ietf.org/html/rfc7231#section-6.4.2\n     *\n     * This response code means that URI of requested resource has been changed. Probably, new URI would be given in the response.\n     */\n    StatusCodes[StatusCodes[\"MOVED_PERMANENTLY\"] = 301] = \"MOVED_PERMANENTLY\";\n    /**\n     * Official Documentation @ https://tools.ietf.org/html/rfc7231#section-6.4.3\n     *\n     * This response code means that URI of requested resource has been changed temporarily. New changes in the URI might be made in the future. Therefore, this same URI should be used by the client in future requests.\n     */\n    StatusCodes[StatusCodes[\"MOVED_TEMPORARILY\"] = 302] = \"MOVED_TEMPORARILY\";\n    /**\n     * Official Documentation @ https://tools.ietf.org/html/rfc7231#section-6.4.4\n     *\n     * Server sent this response to directing client to get requested resource to another URI with an GET request.\n     */\n    StatusCodes[StatusCodes[\"SEE_OTHER\"] = 303] = \"SEE_OTHER\";\n    /**\n     * Official Documentation @ https://tools.ietf.org/html/rfc7232#section-4.1\n     *\n     * This is used for caching purposes. It is telling to client that response has not been modified. So, client can continue to use same cached version of response.\n     */\n    StatusCodes[StatusCodes[\"NOT_MODIFIED\"] = 304] = \"NOT_MODIFIED\";\n    /**\n     * @deprecated\n     * Official Documentation @ https://tools.ietf.org/html/rfc7231#section-6.4.6\n     *\n     * Was defined in a previous version of the HTTP specification to indicate that a requested response must be accessed by a proxy. It has been deprecated due to security concerns regarding in-band configuration of a proxy.\n     */\n    StatusCodes[StatusCodes[\"USE_PROXY\"] = 305] = \"USE_PROXY\";\n    /**\n     * Official Documentation @ https://tools.ietf.org/html/rfc7231#section-6.4.7\n     *\n     * Server sent this response to directing client to get requested resource to another URI with same method that used prior request. This has the same semantic than the 302 Found HTTP response code, with the exception that the user agent must not change the HTTP method used: if a POST was used in the first request, a POST must be used in the second request.\n     */\n    StatusCodes[StatusCodes[\"TEMPORARY_REDIRECT\"] = 307] = \"TEMPORARY_REDIRECT\";\n    /**\n     * Official Documentation @ https://tools.ietf.org/html/rfc7538#section-3\n     *\n     * This means that the resource is now permanently located at another URI, specified by the Location: HTTP Response header. This has the same semantics as the 301 Moved Permanently HTTP response code, with the exception that the user agent must not change the HTTP method used: if a POST was used in the first request, a POST must be used in the second request.\n     */\n    StatusCodes[StatusCodes[\"PERMANENT_REDIRECT\"] = 308] = \"PERMANENT_REDIRECT\";\n    /**\n     * Official Documentation @ https://tools.ietf.org/html/rfc7231#section-6.5.1\n     *\n     * This response means that server could not understand the request due to invalid syntax.\n     */\n    StatusCodes[StatusCodes[\"BAD_REQUEST\"] = 400] = \"BAD_REQUEST\";\n    /**\n     * Official Documentation @ https://tools.ietf.org/html/rfc7235#section-3.1\n     *\n     * Although the HTTP standard specifies \"unauthorized\", semantically this response means \"unauthenticated\". That is, the client must authenticate itself to get the requested response.\n     */\n    StatusCodes[StatusCodes[\"UNAUTHORIZED\"] = 401] = \"UNAUTHORIZED\";\n    /**\n     * Official Documentation @ https://tools.ietf.org/html/rfc7231#section-6.5.2\n     *\n     * This response code is reserved for future use. Initial aim for creating this code was using it for digital payment systems however this is not used currently.\n     */\n    StatusCodes[StatusCodes[\"PAYMENT_REQUIRED\"] = 402] = \"PAYMENT_REQUIRED\";\n    /**\n     * Official Documentation @ https://tools.ietf.org/html/rfc7231#section-6.5.3\n     *\n     * The client does not have access rights to the content, i.e. they are unauthorized, so server is rejecting to give proper response. Unlike 401, the client's identity is known to the server.\n     */\n    StatusCodes[StatusCodes[\"FORBIDDEN\"] = 403] = \"FORBIDDEN\";\n    /**\n     * Official Documentation @ https://tools.ietf.org/html/rfc7231#section-6.5.4\n     *\n     * The server can not find requested resource. In the browser, this means the URL is not recognized. In an API, this can also mean that the endpoint is valid but the resource itself does not exist. Servers may also send this response instead of 403 to hide the existence of a resource from an unauthorized client. This response code is probably the most famous one due to its frequent occurence on the web.\n     */\n    StatusCodes[StatusCodes[\"NOT_FOUND\"] = 404] = \"NOT_FOUND\";\n    /**\n     * Official Documentation @ https://tools.ietf.org/html/rfc7231#section-6.5.5\n     *\n     * The request method is known by the server but has been disabled and cannot be used. For example, an API may forbid DELETE-ing a resource. The two mandatory methods, GET and HEAD, must never be disabled and should not return this error code.\n     */\n    StatusCodes[StatusCodes[\"METHOD_NOT_ALLOWED\"] = 405] = \"METHOD_NOT_ALLOWED\";\n    /**\n     * Official Documentation @ https://tools.ietf.org/html/rfc7231#section-6.5.6\n     *\n     * This response is sent when the web server, after performing server-driven content negotiation, doesn't find any content following the criteria given by the user agent.\n     */\n    StatusCodes[StatusCodes[\"NOT_ACCEPTABLE\"] = 406] = \"NOT_ACCEPTABLE\";\n    /**\n     * Official Documentation @ https://tools.ietf.org/html/rfc7235#section-3.2\n     *\n     * This is similar to 401 but authentication is needed to be done by a proxy.\n     */\n    StatusCodes[StatusCodes[\"PROXY_AUTHENTICATION_REQUIRED\"] = 407] = \"PROXY_AUTHENTICATION_REQUIRED\";\n    /**\n     * Official Documentation @ https://tools.ietf.org/html/rfc7231#section-6.5.7\n     *\n     * This response is sent on an idle connection by some servers, even without any previous request by the client. It means that the server would like to shut down this unused connection. This response is used much more since some browsers, like Chrome, Firefox 27+, or IE9, use HTTP pre-connection mechanisms to speed up surfing. Also note that some servers merely shut down the connection without sending this message.\n     */\n    StatusCodes[StatusCodes[\"REQUEST_TIMEOUT\"] = 408] = \"REQUEST_TIMEOUT\";\n    /**\n     * Official Documentation @ https://tools.ietf.org/html/rfc7231#section-6.5.8\n     *\n     * This response is sent when a request conflicts with the current state of the server.\n     */\n    StatusCodes[StatusCodes[\"CONFLICT\"] = 409] = \"CONFLICT\";\n    /**\n     * Official Documentation @ https://tools.ietf.org/html/rfc7231#section-6.5.9\n     *\n     * This response would be sent when the requested content has been permenantly deleted from server, with no forwarding address. Clients are expected to remove their caches and links to the resource. The HTTP specification intends this status code to be used for \"limited-time, promotional services\". APIs should not feel compelled to indicate resources that have been deleted with this status code.\n     */\n    StatusCodes[StatusCodes[\"GONE\"] = 410] = \"GONE\";\n    /**\n     * Official Documentation @ https://tools.ietf.org/html/rfc7231#section-6.5.10\n     *\n     * The server rejected the request because the Content-Length header field is not defined and the server requires it.\n     */\n    StatusCodes[StatusCodes[\"LENGTH_REQUIRED\"] = 411] = \"LENGTH_REQUIRED\";\n    /**\n     * Official Documentation @ https://tools.ietf.org/html/rfc7232#section-4.2\n     *\n     * The client has indicated preconditions in its headers which the server does not meet.\n     */\n    StatusCodes[StatusCodes[\"PRECONDITION_FAILED\"] = 412] = \"PRECONDITION_FAILED\";\n    /**\n     * Official Documentation @ https://tools.ietf.org/html/rfc7231#section-6.5.11\n     *\n     * Request entity is larger than limits defined by server; the server might close the connection or return an Retry-After header field.\n     */\n    StatusCodes[StatusCodes[\"REQUEST_TOO_LONG\"] = 413] = \"REQUEST_TOO_LONG\";\n    /**\n     * Official Documentation @ https://tools.ietf.org/html/rfc7231#section-6.5.12\n     *\n     * The URI requested by the client is longer than the server is willing to interpret.\n     */\n    StatusCodes[StatusCodes[\"REQUEST_URI_TOO_LONG\"] = 414] = \"REQUEST_URI_TOO_LONG\";\n    /**\n     * Official Documentation @ https://tools.ietf.org/html/rfc7231#section-6.5.13\n     *\n     * The media format of the requested data is not supported by the server, so the server is rejecting the request.\n     */\n    StatusCodes[StatusCodes[\"UNSUPPORTED_MEDIA_TYPE\"] = 415] = \"UNSUPPORTED_MEDIA_TYPE\";\n    /**\n     * Official Documentation @ https://tools.ietf.org/html/rfc7233#section-4.4\n     *\n     * The range specified by the Range header field in the request can't be fulfilled; it's possible that the range is outside the size of the target URI's data.\n     */\n    StatusCodes[StatusCodes[\"REQUESTED_RANGE_NOT_SATISFIABLE\"] = 416] = \"REQUESTED_RANGE_NOT_SATISFIABLE\";\n    /**\n     * Official Documentation @ https://tools.ietf.org/html/rfc7231#section-6.5.14\n     *\n     * This response code means the expectation indicated by the Expect request header field can't be met by the server.\n     */\n    StatusCodes[StatusCodes[\"EXPECTATION_FAILED\"] = 417] = \"EXPECTATION_FAILED\";\n    /**\n     * Official Documentation @ https://tools.ietf.org/html/rfc2324#section-2.3.2\n     *\n     * Any attempt to brew coffee with a teapot should result in the error code \"418 I'm a teapot\". The resulting entity body MAY be short and stout.\n     */\n    StatusCodes[StatusCodes[\"IM_A_TEAPOT\"] = 418] = \"IM_A_TEAPOT\";\n    /**\n     * Official Documentation @ https://tools.ietf.org/html/rfc2518#section-10.6\n     *\n     * The 507 (Insufficient Storage) status code means the method could not be performed on the resource because the server is unable to store the representation needed to successfully complete the request. This condition is considered to be temporary. If the request which received this status code was the result of a user action, the request MUST NOT be repeated until it is requested by a separate user action.\n     */\n    StatusCodes[StatusCodes[\"INSUFFICIENT_SPACE_ON_RESOURCE\"] = 419] = \"INSUFFICIENT_SPACE_ON_RESOURCE\";\n    /**\n     * @deprecated\n     * Official Documentation @ https://tools.ietf.org/rfcdiff?difftype=--hwdiff&url2=draft-ietf-webdav-protocol-06.txt\n     *\n     * A deprecated response used by the Spring Framework when a method has failed.\n     */\n    StatusCodes[StatusCodes[\"METHOD_FAILURE\"] = 420] = \"METHOD_FAILURE\";\n    /**\n     * Official Documentation @ https://datatracker.ietf.org/doc/html/rfc7540#section-9.1.2\n     *\n     * Defined in the specification of HTTP/2 to indicate that a server is not able to produce a response for the combination of scheme and authority that are included in the request URI.\n     */\n    StatusCodes[StatusCodes[\"MISDIRECTED_REQUEST\"] = 421] = \"MISDIRECTED_REQUEST\";\n    /**\n     * Official Documentation @ https://tools.ietf.org/html/rfc2518#section-10.3\n     *\n     * The request was well-formed but was unable to be followed due to semantic errors.\n     */\n    StatusCodes[StatusCodes[\"UNPROCESSABLE_ENTITY\"] = 422] = \"UNPROCESSABLE_ENTITY\";\n    /**\n     * Official Documentation @ https://tools.ietf.org/html/rfc2518#section-10.4\n     *\n     * The resource that is being accessed is locked.\n     */\n    StatusCodes[StatusCodes[\"LOCKED\"] = 423] = \"LOCKED\";\n    /**\n     * Official Documentation @ https://tools.ietf.org/html/rfc2518#section-10.5\n     *\n     * The request failed due to failure of a previous request.\n     */\n    StatusCodes[StatusCodes[\"FAILED_DEPENDENCY\"] = 424] = \"FAILED_DEPENDENCY\";\n    /**\n     * Official Documentation @ https://datatracker.ietf.org/doc/html/rfc7231#section-6.5.15\n     *\n     * The server refuses to perform the request using the current protocol but might be willing to do so after the client upgrades to a different protocol.\n     */\n    StatusCodes[StatusCodes[\"UPGRADE_REQUIRED\"] = 426] = \"UPGRADE_REQUIRED\";\n    /**\n     * Official Documentation @ https://tools.ietf.org/html/rfc6585#section-3\n     *\n     * The origin server requires the request to be conditional. Intended to prevent the 'lost update' problem, where a client GETs a resource's state, modifies it, and PUTs it back to the server, when meanwhile a third party has modified the state on the server, leading to a conflict.\n     */\n    StatusCodes[StatusCodes[\"PRECONDITION_REQUIRED\"] = 428] = \"PRECONDITION_REQUIRED\";\n    /**\n     * Official Documentation @ https://tools.ietf.org/html/rfc6585#section-4\n     *\n     * The user has sent too many requests in a given amount of time (\"rate limiting\").\n     */\n    StatusCodes[StatusCodes[\"TOO_MANY_REQUESTS\"] = 429] = \"TOO_MANY_REQUESTS\";\n    /**\n     * Official Documentation @ https://tools.ietf.org/html/rfc6585#section-5\n     *\n     * The server is unwilling to process the request because its header fields are too large. The request MAY be resubmitted after reducing the size of the request header fields.\n     */\n    StatusCodes[StatusCodes[\"REQUEST_HEADER_FIELDS_TOO_LARGE\"] = 431] = \"REQUEST_HEADER_FIELDS_TOO_LARGE\";\n    /**\n     * Official Documentation @ https://tools.ietf.org/html/rfc7725\n     *\n     * The user-agent requested a resource that cannot legally be provided, such as a web page censored by a government.\n     */\n    StatusCodes[StatusCodes[\"UNAVAILABLE_FOR_LEGAL_REASONS\"] = 451] = \"UNAVAILABLE_FOR_LEGAL_REASONS\";\n    /**\n     * Official Documentation @ https://tools.ietf.org/html/rfc7231#section-6.6.1\n     *\n     * The server encountered an unexpected condition that prevented it from fulfilling the request.\n     */\n    StatusCodes[StatusCodes[\"INTERNAL_SERVER_ERROR\"] = 500] = \"INTERNAL_SERVER_ERROR\";\n    /**\n     * Official Documentation @ https://tools.ietf.org/html/rfc7231#section-6.6.2\n     *\n     * The request method is not supported by the server and cannot be handled. The only methods that servers are required to support (and therefore that must not return this code) are GET and HEAD.\n     */\n    StatusCodes[StatusCodes[\"NOT_IMPLEMENTED\"] = 501] = \"NOT_IMPLEMENTED\";\n    /**\n     * Official Documentation @ https://tools.ietf.org/html/rfc7231#section-6.6.3\n     *\n     * This error response means that the server, while working as a gateway to get a response needed to handle the request, got an invalid response.\n     */\n    StatusCodes[StatusCodes[\"BAD_GATEWAY\"] = 502] = \"BAD_GATEWAY\";\n    /**\n     * Official Documentation @ https://tools.ietf.org/html/rfc7231#section-6.6.4\n     *\n     * The server is not ready to handle the request. Common causes are a server that is down for maintenance or that is overloaded. Note that together with this response, a user-friendly page explaining the problem should be sent. This responses should be used for temporary conditions and the Retry-After: HTTP header should, if possible, contain the estimated time before the recovery of the service. The webmaster must also take care about the caching-related headers that are sent along with this response, as these temporary condition responses should usually not be cached.\n     */\n    StatusCodes[StatusCodes[\"SERVICE_UNAVAILABLE\"] = 503] = \"SERVICE_UNAVAILABLE\";\n    /**\n     * Official Documentation @ https://tools.ietf.org/html/rfc7231#section-6.6.5\n     *\n     * This error response is given when the server is acting as a gateway and cannot get a response in time.\n     */\n    StatusCodes[StatusCodes[\"GATEWAY_TIMEOUT\"] = 504] = \"GATEWAY_TIMEOUT\";\n    /**\n     * Official Documentation @ https://tools.ietf.org/html/rfc7231#section-6.6.6\n     *\n     * The HTTP version used in the request is not supported by the server.\n     */\n    StatusCodes[StatusCodes[\"HTTP_VERSION_NOT_SUPPORTED\"] = 505] = \"HTTP_VERSION_NOT_SUPPORTED\";\n    /**\n     * Official Documentation @ https://tools.ietf.org/html/rfc2518#section-10.6\n     *\n     * The server has an internal configuration error: the chosen variant resource is configured to engage in transparent content negotiation itself, and is therefore not a proper end point in the negotiation process.\n     */\n    StatusCodes[StatusCodes[\"INSUFFICIENT_STORAGE\"] = 507] = \"INSUFFICIENT_STORAGE\";\n    /**\n     * Official Documentation @ https://tools.ietf.org/html/rfc6585#section-6\n     *\n     * The 511 status code indicates that the client needs to authenticate to gain network access.\n     */\n    StatusCodes[StatusCodes[\"NETWORK_AUTHENTICATION_REQUIRED\"] = 511] = \"NETWORK_AUTHENTICATION_REQUIRED\";\n})(StatusCodes || (StatusCodes = {}));\n","import { StatusCodes } from 'http-status-codes';\n\nimport axios, { AxiosRequestConfig } from \"axios\";\n\nimport { JSONObject, AgentManager, STSAxiosConfig } from '@nsshunt/stsutils';\n\nimport { ISTSError, ISTSResourceManagerOptions } from './commonTypes'\n\nexport abstract class ResourceManager {\n    #options: ISTSResourceManagerOptions;\n\n    constructor(options: ISTSResourceManagerOptions) {\n        this.#options = options;\n        this.LogDebugMessage(`STSOAuth2Worker:constructor:#options: [${JSON.stringify(this.#options)}]`);\n    }\n\n    get agentManager(): AgentManager | null {\n        if (this.#options.agentManager) {\n            return this.#options.agentManager;\n        } else {\n            return null;\n        }\n    }\n\n    get options(): ISTSResourceManagerOptions {\n        return this.#options;\n    }\n\n    // eslint-disable-next-line  @typescript-eslint/no-explicit-any\n    LogDebugMessage(message: any) {\n        this.#options.logger.debug(message);\n    }\n\n    // eslint-disable-next-line  @typescript-eslint/no-explicit-any\n    LogInfoMessage(message: any) {\n        this.#options.logger.info(message);\n    }\n\n    // eslint-disable-next-line  @typescript-eslint/no-explicit-any\n    LogErrorMessage(message: any) {\n        this.#options.logger.error(message);\n    }\n\n    // eslint-disable-next-line  @typescript-eslint/no-explicit-any\n    GetErrorMessage = (status: StatusCodes, error: string, detail: any): ISTSError => {\n        return {\n            status,\n            error,\n            detail\n        };\n    }\n\n    GetHeaders = (access_token: string | null): JSONObject => {\n        const headers: JSONObject = { \n            'Content-Type': 'application/json'\n        }\n        if (access_token) {\n            headers['Authorization'] = `Bearer ${access_token}`;\n        }\n        return headers;\n    }\n\n    GetResult = async <T>(accessToken: string | null, url: string, method: string, requestData: JSONObject | null, errorCb: (error: ISTSError) => void): Promise<T | null> => {\n        const axiosConfig = new STSAxiosConfig(url, method, this.GetHeaders(accessToken as string), this.options.timeout);\n        if (this.#options.agentManager) {\n            axiosConfig.withAgentManager(this.#options.agentManager)\n        }\n        if (requestData !== null) {\n            axiosConfig.withData(requestData)\n        }\n\n        const data = await axios(axiosConfig.config as AxiosRequestConfig); // The snapshot is not actually required here but after the await. I put it here by way of example only.\n        // The reason is that when await is called, the node event loop will continue to process all remaining queued operations.\n        // One of those operations or any operation executed prior to the axios call completing might update the config. So we need to use the\n        // snapshot copy of the config made above.\n        if (data.data.status === StatusCodes.OK || data.data.status === StatusCodes.CREATED) {\n            const sessionDataRaw = data.data.detail;\n            if (sessionDataRaw) {\n                try {\n                    const sessionData = JSON.parse(sessionDataRaw) as T;\n                    return sessionData;\n                } catch  (error) {\n                    errorCb(this.GetErrorMessage(StatusCodes.INTERNAL_SERVER_ERROR, 'SessionManager:GetResult(): Could not parse session data.', error));\n                    return null;\n                }\n            } else {\n                errorCb(this.GetErrorMessage(StatusCodes.INTERNAL_SERVER_ERROR, 'SessionManager:GetResult(): No session data returned.', null));\n                return null;\n            }\n        } else {\n            const { status, error, detail } = data.data;\n            errorCb(this.GetErrorMessage(status, `SessionManager:GetResult(): Status not OK. Error: [${error}]`, detail));\n            return null;\n        }\n    }\n}\n","import { StatusCodes } from 'http-status-codes';\n\nimport { ISTSSessionResource, ISTSError, ISTSResourceManagerOptions } from './commonTypes'\n\nimport { ResourceManager } from './resourceManager'\n\nexport class SessionManager extends ResourceManager {\n    constructor(options: ISTSResourceManagerOptions) {\n        super(options);\n    }\n\n    GetSession = async (access_token: string, sessionId: string, errorCb: (error: ISTSError) => void): Promise<ISTSSessionResource | null> => {\n        try {\n            return this.GetResult<ISTSSessionResource>(access_token, `${this.options.asendpoint}/session/${encodeURIComponent(sessionId)}`, 'get', null, errorCb);\n        // eslint-disable-next-line  @typescript-eslint/no-explicit-any\n        } catch (error: any) {\n            errorCb(this.GetErrorMessage(StatusCodes.INTERNAL_SERVER_ERROR, `SessionManager:GetSession(): Could not process session. Error: [${error}]`, error));\n            return null;\n        }\n    }\n\n    PatchSession = async (access_token: string, session: Partial<ISTSSessionResource>, errorCb: (error: ISTSError) => void): Promise<ISTSSessionResource | null> => {\n        try {\n            if (!session.sessionId) {\n                errorCb(this.GetErrorMessage(StatusCodes.INTERNAL_SERVER_ERROR, 'SessionManager:GetSession(): sessionId not provided.', null));\n                return null;\n            }\n            return this.GetResult<ISTSSessionResource>(access_token, `${this.options.asendpoint}/session/${encodeURIComponent(session.sessionId)}`, 'patch', session, errorCb);\n        // eslint-disable-next-line  @typescript-eslint/no-explicit-any\n        } catch (error: any) {\n            errorCb(this.GetErrorMessage(StatusCodes.INTERNAL_SERVER_ERROR, `SessionManager:GetSession(): Could not process session. Error: [${error}]`, error));\n            return null;\n        }\n    }\n}\n","import tough from 'tough-cookie';\nimport jwt from 'jsonwebtoken';\nimport { jwtDecode } from \"jwt-decode\";\nimport jwksClient from 'jwks-rsa';\n\nimport axios from 'axios';\n\nimport { goptions } from '@nsshunt/stsconfig'\n\nimport { GetErrorPayload, ISTSLogger, JSONObject, AgentManager, STSAxiosConfig } from '@nsshunt/stsutils'\n\nimport { StatusCodes } from 'http-status-codes';\n\nimport chalk from 'chalk';\n\nimport { Gauge, PublishInstrumentController } from '@nsshunt/stsobservability'\n\nimport { iss, STSAuthClientErrorCode } from './commonTypes'\n\nexport interface IAuthUtilsNodeOptions {\n    permissions: string[]\n}\n\nexport interface IGetAPITokenFromAuthServerUsingScopeOptions {\n    clientId: string\n    authClientSecret: string\n    scope: string\n    endPoint: string\n    instrumentController?: PublishInstrumentController\n    outputErrorsToConsole?: boolean\n}\n\ndeclare interface ICacheScopeRecord {\n    scope: string\n    timeout: NodeJS.Timeout\n}\n\ndeclare interface ICacheRecord {\n    scopes: Record<string, ICacheScopeRecord>\n}\n\nexport interface IAuthUtilsNodeOptions {\n    logger: ISTSLogger\n    agentManager?: AgentManager\n}\n\nexport class AuthUtilsNode {\n    #options: IAuthUtilsNodeOptions;\n    #cache: Record<string, ICacheRecord> = { };\n    #cacheTimeout: number = 1000;\n    #cookiejar: tough.CookieJar;\n    // Regular expression to match the origin\n    #originRegex = /^(api:\\/\\/\\w+)/;\n\n    constructor(options: IAuthUtilsNodeOptions) {\n        this.#options = options;\n        this.#cookiejar = new tough.CookieJar();\n    }\n\n    // eslint-disable-next-line @typescript-eslint/no-explicit-any\n    #LogDebugMessage(message: any) {\n        this.#options.logger.debug(message);\n    }\n\n    get agentManager(): AgentManager | undefined {\n        return this.#options.agentManager;\n    }\n\n    ResetAgent = () => {\n        if (this.#options.agentManager) {\n            this.#options.agentManager.ResetAgent();\n        }\n    }\n\n    VerifyRequestMiddlewareFactory = (options: IAuthUtilsNodeOptions) => {\n        // eslint-disable-next-line @typescript-eslint/no-explicit-any\n        return async (req: any, res: any, next: any) => {\n            if (options.permissions) {\n\n                const permissionsKey = options.permissions.join('_');\n                const scopeKey = (req.auth.scope as string).split(' ').join('_');\n\n                if (this.#cache[permissionsKey] && this.#cache[permissionsKey].scopes[scopeKey]) {\n                    next();\n                    return;\n                }\n\n                const scopes = req.auth.scope.split(' ');\n\n                const requiredPermissions = [ ];\n                for (let i=0; i < options.permissions.length; i++) {\n                    const permission = options.permissions[i];\n                    if (!scopes.includes(permission)) {\n                        requiredPermissions.push(permission);\n                    }\n                }\n                if (requiredPermissions.length > 0) {\n                    const errorPayload = GetErrorPayload(STSAuthClientErrorCode.STS_AC_MISSING_PERMISSION, requiredPermissions);\n                    res.status(StatusCodes.UNAUTHORIZED).send( { status: StatusCodes.UNAUTHORIZED, error: errorPayload });\n                    return;\n                }\n\n                if (!this.#cache[permissionsKey]) {\n                    this.#cache[permissionsKey] = {\n                        scopes: { }\n                    }\n                }\n\n                this.#cache[permissionsKey].scopes[scopeKey] = {\n                    scope: scopeKey,\n                    timeout: setTimeout(() => {\n                        delete this.#cache[permissionsKey].scopes[scopeKey]\n                    }, this.#cacheTimeout).unref()\n                }\n            }\n            next();\n        }\n    }\n    /*\n\tlet cookies = await this.GetCookiesFromJar();\n\tconst valid = this.#ValidateCookies(cookies);\n\tif (valid) {\n\t\tnext();\n\t} else {\n\t\tconst error = { }; //@@\n\t\tconst invalidToken = false; //@@\n\t\tif (invalidToken)\n\t\t{\n\t\t\tres.status(StatusCodes.UNAUTHORIZED).send( { status: StatusCodes.UNAUTHORIZED, error: 'Invalid Token', detail: error } );\n\t\t} else{\n\t\t\tres.status(StatusCodes.INTERNAL_SERVER_ERROR).send( { status: StatusCodes.INTERNAL_SERVER_ERROR, error: 'Operation was not successful', detail: error } );\n\t\t}\n\t}\n\t*/\n\n    // eslint-disable-next-line @typescript-eslint/no-explicit-any\n    async verifyRequestMiddleware(req: any, res: any, next: any)\n    {\n        next();\n        /*\n\t\t\n\t\tlet cookies = await this.GetCookiesFromJar();\n\n\t\tconst valid = this.#ValidateCookies(cookies);\n\n\t\tif (valid) {\n\t\t\tnext();\n\t\t} else {\n\t\t\tconst error = { }; //@@\n\t\t\tconst invalidToken = false; //@@\n\t\t\tif (invalidToken)\n\t\t\t{\n\t\t\t\tres.status(StatusCodes.UNAUTHORIZED).send( { status: StatusCodes.UNAUTHORIZED, error: 'Invalid Token', detail: error } );\n\t\t\t} else{\n\t\t\t\tres.status(StatusCodes.INTERNAL_SERVER_ERROR).send( { status: StatusCodes.INTERNAL_SERVER_ERROR, error: 'Operation was not successful', detail: error } );\n\t\t\t}\n\t\t}\n\t\t*/\n    }\n\n    // eslint-disable-next-line @typescript-eslint/no-explicit-any\n    SetCookiesToJar = async (headers: Record<string, any>, endpoint: string): Promise<tough.Cookie[]> =>\n    {\n        if (headers['set-cookie']) {\n            // eslint-disable-next-line @typescript-eslint/no-explicit-any\n            headers['set-cookie'].map((headerCookie: any) => {\n                // eslint-disable-next-line @typescript-eslint/no-explicit-any\n                const cookie: any = tough.Cookie.parse(headerCookie);\n                this.#cookiejar.setCookieSync(cookie, endpoint);\n            });\n        } else {\n            // eslint-disable-next-line @typescript-eslint/no-explicit-any\n            const cookie: any = tough.Cookie.parse(headers['set-cookie']);\n            this.#cookiejar.setCookieSync(cookie, endpoint);\n        }\n\n        return this.#cookiejar.getCookies(endpoint);\n    };\n\n    GetCookiesFromJar = async (endpoint: string): Promise<tough.Cookie[]> =>\n    {\n        return this.#cookiejar.getCookies(endpoint);\n    };\n\n    ValidateJWT = async (token: string, audience: string, endpoint?: string): Promise<string> => {\n        const jwksClientUri = (endpoint \n            ? `${endpoint}${goptions.asoauthapiroot}${goptions.asjwksjsonpath}` \n            : `${goptions.asendpoint}:${goptions.asport}${goptions.asoauthapiroot}${goptions.asjwksjsonpath}`);\n\n        const jwksClientOptions: jwksClient.Options = {\n            cache: true, //@@ all config items\n            cacheMaxEntries: 5, // Default value\n            cacheMaxAge: 600000, // Defaults to 10m\n            rateLimit: true,\n            jwksRequestsPerMinute: 10, // Default value\n            jwksUri: jwksClientUri,\n            timeout: 30000, //@@ config\n        }\n        if (this.#options.agentManager) {\n            // eslint-disable-next-line @typescript-eslint/no-explicit-any\n            jwksClientOptions.requestAgent = this.#options.agentManager.GetAgent(jwksClientUri) as any\n        }\n\n        const jwks = jwksClient(jwksClientOptions);\n\n        // Use decode to get the kid\n        const decodedRefreshToken = jwtDecode<JSONObject>(token, { header: true });\n        const kid = decodedRefreshToken.kid;\n\n        const key = await jwks.getSigningKey(kid);\n        const signingKey = key.getPublicKey();\n\t\t\n        const verifyOptions = {\n            issuer: iss,\n            //subject:  s,\n            audience:  audience,\n            //expiresIn:  600, // 10 minutes\n            algorithm:  [\"RS256\"]   // RSASSA [ \"RS256\", \"RS384\", \"RS512\" ]\n        };\n\n        return jwt.verify(token, signingKey, verifyOptions) as string;\n    }\n\n    // Function to extract the origin from a URI\n    ExtractOrigin = (uri: string) => {\n        const match = uri.match(this.#originRegex);\n        return match ? match[1] : null;\n    }\n\n    GetAPITokenFromAuthServerUsingScope = async (options: IGetAPITokenFromAuthServerUsingScopeOptions, errorCb: (error: Error) => void): Promise<string> => {\n        const { scope, clientId, authClientSecret, endPoint, instrumentController, outputErrorsToConsole } = options;\n\n        let stage = '1';\n\n        const invokeErrorCb = (error: Error) => {\n            this.#LogDebugMessage(error);\n            if (instrumentController) {\n                instrumentController.UpdateInstrument(Gauge.AUTHENTICATION_ERROR_COUNT_GAUGE, { // auth error\n                    Inc: 1\n                });\n            }\n            errorCb(error);\n        };\n\n        try {\n            stage = '2';\n            const scopes = scope.split(' ');\n            let origin: string | null = null;\n            let error: Error | null = null;\n            stage = '3';\n            for (let i=0; i < scopes.length; i++) {\n                const s = scopes[i];\n                if (!origin) {\n                    origin = this.ExtractOrigin(s);\n                    if (!origin) {\n                        error = new Error(`Scope: [${scope}] not in required format. Must use (space seperated) api://<client id>[/<resource>.<permission>].`);\n                        break;\n                    }\n                } else {\n                    const nextOrigin: string | null = this.ExtractOrigin(s);\n                    if (!nextOrigin) {\n                        error = new Error(`Scope: [${scope}] not in required format. Must use (space seperated) api://<client id>[/<resource>.<permission>].`);\n                        break;\n                    } else {\n                        if (origin.localeCompare(nextOrigin) !== 0) {\n                            error = new Error(`Scope: [${scope}] not all from the same client API. All scopes must come from the same client API.`);\n                            break;\n                        }\n                    }\n                }\n            }\n            stage = '4';\n            if (error) {\n                invokeErrorCb(error);\n                return \"\";\n            }\n\n            stage = '5';\n            const payload = { //@@ make a type\n                client_id: clientId, // The service calling this method\n                client_secret: authClientSecret, // Auth service client secret\n                //client_secret: goptions.brokerclientsecret, // Broker service client secret\n                scope: scope, // required API\n                //@@ remove audience\n                //@@ need scope to be the API identifier\n                grant_type: \"client_credentials\"\n            }\n            stage = '6';\n            const url = (endPoint \n                ? `${endPoint}${goptions.asoauthapiroot}/token`\n                : `${goptions.asendpoint}:${goptions.asport}${goptions.asoauthapiroot}/token`);\n\n            stage = `6.5: url: [${url}] payload: [${JSON.stringify(payload)}]`\n\n            const axiosConfig = new STSAxiosConfig(url, 'post')\n                .withDefaultHeaders()\n                .withData(payload);\n            if (this.#options.agentManager) {\n                axiosConfig.withAgentManager(this.#options.agentManager)\n            }\n\n            const retVal = await axios(axiosConfig.config);\n\n            stage = '7';\n            if (retVal.status) {\n                if (retVal.status !== 200) {\n                    // Just provide a warning here\n                    this.#LogDebugMessage(chalk.magenta(`Error (AuthUtilsNode:GetAPITokenFromServer): Invalid response from server: [${retVal.status}]`));\n                }\n            } else {\n                invokeErrorCb(new Error(chalk.red(`Error (AuthUtilsNode:GetAPITokenFromServer:No retVal.status)`)));\n                return \"\";\n            }\n            stage = '8';\n            if (retVal.data) {\n                stage = '9';\n                if (retVal.data.access_token) {\n                    stage = '10';\n                    if (instrumentController) {\n                        stage = '11';\n                        instrumentController.UpdateInstrument(Gauge.AUTHENTICATION_COUNT_GAUGE, {\n                            Inc: 1\n                        });\n                    }\n    \n                    stage = '12';\n                    return retVal.data.access_token as string;\n                } else {\n                    stage = '13';\n                    invokeErrorCb(new Error(`Error (AuthUtilsNode:GetAPITokenFromServer:No retVal.data.access_token)`));\n                    return \"\";\n                }\n            } else {\n                stage = '14';\n                invokeErrorCb(new Error(`Error (AuthUtilsNode:GetAPITokenFromServer:No retVal.data)`));\n                return \"\";\n            }\n        // eslint-disable-next-line @typescript-eslint/no-explicit-any\n        } catch (error: any) {\n            if (outputErrorsToConsole === true) {\n                console.error(error);\n            }\n            let details = 'None available.';\n            if (error.response && error.response.data) {\n                try {\n                    details = JSON.stringify(error.response.data);\n                // eslint-disable-next-line @typescript-eslint/no-unused-vars\n                } catch (error) {\n                    details = `Could not JSON.stringify(error.response.data)`;\n                }\n            }\n            invokeErrorCb(new Error(`Error (AuthUtilsNode:GetAPITokenFromServer:catch): [${error}], Stage: [${stage}], Details: [${details}]`));\n            return \"\";\n        }\n    }\n}\n"],"names":["StatusCodes","STSAxiosConfig","_options","GetErrorPayload","goptions","jwtDecode","Gauge","error"],"mappings":";;;;;;;;;;;;;;;;AA+Ha,QAAA,MAAM;AAEN,QAAA,yBAAyB,OAAO,OAAO;AAAA,IAChD,2BAA2B;AAAA,MACvB,MAAM;AAAA,MACN,aAAa;AAAA,IAAA;AAAA,EAErB,CAAC;ACrIM,MAAI;AACX,GAAC,SAAUA,cAAa;AAMpB,IAAAA,aAAYA,aAAY,UAAU,IAAI,GAAG,IAAI;AAM7C,IAAAA,aAAYA,aAAY,qBAAqB,IAAI,GAAG,IAAI;AAMxD,IAAAA,aAAYA,aAAY,YAAY,IAAI,GAAG,IAAI;AAM/C,IAAAA,aAAYA,aAAY,aAAa,IAAI,GAAG,IAAI;AAUhD,IAAAA,aAAYA,aAAY,IAAI,IAAI,GAAG,IAAI;AAMvC,IAAAA,aAAYA,aAAY,SAAS,IAAI,GAAG,IAAI;AAM5C,IAAAA,aAAYA,aAAY,UAAU,IAAI,GAAG,IAAI;AAM7C,IAAAA,aAAYA,aAAY,+BAA+B,IAAI,GAAG,IAAI;AAMlE,IAAAA,aAAYA,aAAY,YAAY,IAAI,GAAG,IAAI;AAM/C,IAAAA,aAAYA,aAAY,eAAe,IAAI,GAAG,IAAI;AAMlD,IAAAA,aAAYA,aAAY,iBAAiB,IAAI,GAAG,IAAI;AAMpD,IAAAA,aAAYA,aAAY,cAAc,IAAI,GAAG,IAAI;AAMjD,IAAAA,aAAYA,aAAY,kBAAkB,IAAI,GAAG,IAAI;AAMrD,IAAAA,aAAYA,aAAY,mBAAmB,IAAI,GAAG,IAAI;AAMtD,IAAAA,aAAYA,aAAY,mBAAmB,IAAI,GAAG,IAAI;AAMtD,IAAAA,aAAYA,aAAY,WAAW,IAAI,GAAG,IAAI;AAM9C,IAAAA,aAAYA,aAAY,cAAc,IAAI,GAAG,IAAI;AAOjD,IAAAA,aAAYA,aAAY,WAAW,IAAI,GAAG,IAAI;AAM9C,IAAAA,aAAYA,aAAY,oBAAoB,IAAI,GAAG,IAAI;AAMvD,IAAAA,aAAYA,aAAY,oBAAoB,IAAI,GAAG,IAAI;AAMvD,IAAAA,aAAYA,aAAY,aAAa,IAAI,GAAG,IAAI;AAMhD,IAAAA,aAAYA,aAAY,cAAc,IAAI,GAAG,IAAI;AAMjD,IAAAA,aAAYA,aAAY,kBAAkB,IAAI,GAAG,IAAI;AAMrD,IAAAA,aAAYA,aAAY,WAAW,IAAI,GAAG,IAAI;AAM9C,IAAAA,aAAYA,aAAY,WAAW,IAAI,GAAG,IAAI;AAM9C,IAAAA,aAAYA,aAAY,oBAAoB,IAAI,GAAG,IAAI;AAMvD,IAAAA,aAAYA,aAAY,gBAAgB,IAAI,GAAG,IAAI;AAMnD,IAAAA,aAAYA,aAAY,+BAA+B,IAAI,GAAG,IAAI;AAMlE,IAAAA,aAAYA,aAAY,iBAAiB,IAAI,GAAG,IAAI;AAMpD,IAAAA,aAAYA,aAAY,UAAU,IAAI,GAAG,IAAI;AAM7C,IAAAA,aAAYA,aAAY,MAAM,IAAI,GAAG,IAAI;AAMzC,IAAAA,aAAYA,aAAY,iBAAiB,IAAI,GAAG,IAAI;AAMpD,IAAAA,aAAYA,aAAY,qBAAqB,IAAI,GAAG,IAAI;AAMxD,IAAAA,aAAYA,aAAY,kBAAkB,IAAI,GAAG,IAAI;AAMrD,IAAAA,aAAYA,aAAY,sBAAsB,IAAI,GAAG,IAAI;AAMzD,IAAAA,aAAYA,aAAY,wBAAwB,IAAI,GAAG,IAAI;AAM3D,IAAAA,aAAYA,aAAY,iCAAiC,IAAI,GAAG,IAAI;AAMpE,IAAAA,aAAYA,aAAY,oBAAoB,IAAI,GAAG,IAAI;AAMvD,IAAAA,aAAYA,aAAY,aAAa,IAAI,GAAG,IAAI;AAMhD,IAAAA,aAAYA,aAAY,gCAAgC,IAAI,GAAG,IAAI;AAOnE,IAAAA,aAAYA,aAAY,gBAAgB,IAAI,GAAG,IAAI;AAMnD,IAAAA,aAAYA,aAAY,qBAAqB,IAAI,GAAG,IAAI;AAMxD,IAAAA,aAAYA,aAAY,sBAAsB,IAAI,GAAG,IAAI;AAMzD,IAAAA,aAAYA,aAAY,QAAQ,IAAI,GAAG,IAAI;AAM3C,IAAAA,aAAYA,aAAY,mBAAmB,IAAI,GAAG,IAAI;AAMtD,IAAAA,aAAYA,aAAY,kBAAkB,IAAI,GAAG,IAAI;AAMrD,IAAAA,aAAYA,aAAY,uBAAuB,IAAI,GAAG,IAAI;AAM1D,IAAAA,aAAYA,aAAY,mBAAmB,IAAI,GAAG,IAAI;AAMtD,IAAAA,aAAYA,aAAY,iCAAiC,IAAI,GAAG,IAAI;AAMpE,IAAAA,aAAYA,aAAY,+BAA+B,IAAI,GAAG,IAAI;AAMlE,IAAAA,aAAYA,aAAY,uBAAuB,IAAI,GAAG,IAAI;AAM1D,IAAAA,aAAYA,aAAY,iBAAiB,IAAI,GAAG,IAAI;AAMpD,IAAAA,aAAYA,aAAY,aAAa,IAAI,GAAG,IAAI;AAMhD,IAAAA,aAAYA,aAAY,qBAAqB,IAAI,GAAG,IAAI;AAMxD,IAAAA,aAAYA,aAAY,iBAAiB,IAAI,GAAG,IAAI;AAMpD,IAAAA,aAAYA,aAAY,4BAA4B,IAAI,GAAG,IAAI;AAM/D,IAAAA,aAAYA,aAAY,sBAAsB,IAAI,GAAG,IAAI;AAMzD,IAAAA,aAAYA,aAAY,iCAAiC,IAAI,GAAG,IAAI;AAAA,EACxE,GAAG,gBAAgB,cAAc,CAAA,EAAG;AAAA,EC7V7B,MAAe,gBAAgB;AAAA,IAGlC,YAAY,SAAqC;AAFjD;AAmCA;AAAA,6CAAkB,CAAC,QAAqB,OAAe,WAA2B;AACvE,eAAA;AAAA,UACH;AAAA,UACA;AAAA,UACA;AAAA,QACJ;AAAA,MACJ;AAEA,wCAAa,CAAC,iBAA4C;AACtD,cAAM,UAAsB;AAAA,UACxB,gBAAgB;AAAA,QACpB;AACA,YAAI,cAAc;AACN,kBAAA,eAAe,IAAI,UAAU,YAAY;AAAA,QAAA;AAE9C,eAAA;AAAA,MACX;AAEA,uCAAY,OAAU,aAA4B,KAAa,QAAgB,aAAgC,YAA2D;AAChK,cAAA,cAAc,IAAIC,wBAAe,KAAK,QAAQ,KAAK,WAAW,WAAqB,GAAG,KAAK,QAAQ,OAAO;AAC5G,YAAA,mBAAK,UAAS,cAAc;AAChB,sBAAA,iBAAiB,mBAAK,UAAS,YAAY;AAAA,QAAA;AAE3D,YAAI,gBAAgB,MAAM;AACtB,sBAAY,SAAS,WAAW;AAAA,QAAA;AAGpC,cAAM,OAAO,MAAM,MAAM,YAAY,MAA4B;AAI7D,YAAA,KAAK,KAAK,WAAW,YAAY,MAAM,KAAK,KAAK,WAAW,YAAY,SAAS;AAC3E,gBAAA,iBAAiB,KAAK,KAAK;AACjC,cAAI,gBAAgB;AACZ,gBAAA;AACM,oBAAA,cAAc,KAAK,MAAM,cAAc;AACtC,qBAAA;AAAA,qBACD,OAAO;AACb,sBAAQ,KAAK,gBAAgB,YAAY,uBAAuB,6DAA6D,KAAK,CAAC;AAC5H,qBAAA;AAAA,YAAA;AAAA,UACX,OACG;AACH,oBAAQ,KAAK,gBAAgB,YAAY,uBAAuB,yDAAyD,IAAI,CAAC;AACvH,mBAAA;AAAA,UAAA;AAAA,QACX,OACG;AACH,gBAAM,EAAE,QAAQ,OAAO,WAAW,KAAK;AACvC,kBAAQ,KAAK,gBAAgB,QAAQ,sDAAsD,KAAK,KAAK,MAAM,CAAC;AACrG,iBAAA;AAAA,QAAA;AAAA,MAEf;AAlFI,yBAAK,UAAW;AAChB,WAAK,gBAAgB,0CAA0C,KAAK,UAAU,mBAAK,SAAQ,CAAC,GAAG;AAAA,IAAA;AAAA,IAGnG,IAAI,eAAoC;AAChC,UAAA,mBAAK,UAAS,cAAc;AAC5B,eAAO,mBAAK,UAAS;AAAA,MAAA,OAClB;AACI,eAAA;AAAA,MAAA;AAAA,IACX;AAAA,IAGJ,IAAI,UAAsC;AACtC,aAAO,mBAAK;AAAA,IAAA;AAAA;AAAA,IAIhB,gBAAgB,SAAc;AACrB,yBAAA,UAAS,OAAO,MAAM,OAAO;AAAA,IAAA;AAAA;AAAA,IAItC,eAAe,SAAc;AACpB,yBAAA,UAAS,OAAO,KAAK,OAAO;AAAA,IAAA;AAAA;AAAA,IAIrC,gBAAgB,SAAc;AACrB,yBAAA,UAAS,OAAO,MAAM,OAAO;AAAA,IAAA;AAAA,EAuD1C;AAtFI;AAAA,ECHG,MAAM,uBAAuB,gBAAgB;AAAA,IAChD,YAAY,SAAqC;AAC7C,YAAM,OAAO;AAGjB,wCAAa,OAAO,cAAsB,WAAmB,YAA6E;AAClI,YAAA;AACA,iBAAO,KAAK,UAA+B,cAAc,GAAG,KAAK,QAAQ,UAAU,YAAY,mBAAmB,SAAS,CAAC,IAAI,OAAO,MAAM,OAAO;AAAA,iBAE/I,OAAY;AACT,kBAAA,KAAK,gBAAgB,YAAY,uBAAuB,mEAAmE,KAAK,KAAK,KAAK,CAAC;AAC5I,iBAAA;AAAA,QAAA;AAAA,MAEf;AAEA,0CAAe,OAAO,cAAsB,SAAuC,YAA6E;AACxJ,YAAA;AACI,cAAA,CAAC,QAAQ,WAAW;AACpB,oBAAQ,KAAK,gBAAgB,YAAY,uBAAuB,wDAAwD,IAAI,CAAC;AACtH,mBAAA;AAAA,UAAA;AAEX,iBAAO,KAAK,UAA+B,cAAc,GAAG,KAAK,QAAQ,UAAU,YAAY,mBAAmB,QAAQ,SAAS,CAAC,IAAI,SAAS,SAAS,OAAO;AAAA,iBAE5J,OAAY;AACT,kBAAA,KAAK,gBAAgB,YAAY,uBAAuB,mEAAmE,KAAK,KAAK,KAAK,CAAC;AAC5I,iBAAA;AAAA,QAAA;AAAA,MAEf;AAAA,IAzBiB;AAAA,EA0BrB;AAAA,ECYO,MAAM,cAAc;AAAA,IAQvB,YAAY,SAAgC;AARzC;AACH,yBAAAC;AACA,iCAAuC,CAAE;AACzC,wCAAwB;AACxB;AAEA;AAAA,uCAAe;AAgBf,wCAAa,MAAM;AACX,YAAA,mBAAKA,WAAS,cAAc;AACvB,6BAAAA,WAAS,aAAa,WAAW;AAAA,QAAA;AAAA,MAE9C;AAEA,4DAAiC,CAAC,YAAmC;AAE1D,eAAA,OAAO,KAAU,KAAU,SAAc;AAC5C,cAAI,QAAQ,aAAa;AAErB,kBAAM,iBAAiB,QAAQ,YAAY,KAAK,GAAG;AAC7C,kBAAA,WAAY,IAAI,KAAK,MAAiB,MAAM,GAAG,EAAE,KAAK,GAAG;AAE3D,gBAAA,mBAAK,QAAO,cAAc,KAAK,mBAAK,QAAO,cAAc,EAAE,OAAO,QAAQ,GAAG;AACxE,mBAAA;AACL;AAAA,YAAA;AAGJ,kBAAM,SAAS,IAAI,KAAK,MAAM,MAAM,GAAG;AAEvC,kBAAM,sBAAsB,CAAE;AAC9B,qBAAS,IAAE,GAAG,IAAI,QAAQ,YAAY,QAAQ,KAAK;AACzC,oBAAA,aAAa,QAAQ,YAAY,CAAC;AACxC,kBAAI,CAAC,OAAO,SAAS,UAAU,GAAG;AAC9B,oCAAoB,KAAK,UAAU;AAAA,cAAA;AAAA,YACvC;AAEA,gBAAA,oBAAoB,SAAS,GAAG;AAChC,oBAAM,eAAeC,SAAA,gBAAgB,uBAAuB,2BAA2B,mBAAmB;AACtG,kBAAA,OAAO,YAAY,YAAY,EAAE,KAAM,EAAE,QAAQ,YAAY,cAAc,OAAO,aAAA,CAAc;AACpG;AAAA,YAAA;AAGJ,gBAAI,CAAC,mBAAK,QAAO,cAAc,GAAG;AACzB,iCAAA,QAAO,cAAc,IAAI;AAAA,gBAC1B,QAAQ,CAAA;AAAA,cACZ;AAAA,YAAA;AAGJ,+BAAK,QAAO,cAAc,EAAE,OAAO,QAAQ,IAAI;AAAA,cAC3C,OAAO;AAAA,cACP,SAAS,WAAW,MAAM;AACtB,uBAAO,mBAAK,QAAO,cAAc,EAAE,OAAO,QAAQ;AAAA,cAAA,GACnD,mBAAK,cAAa,EAAE,MAAM;AAAA,YACjC;AAAA,UAAA;AAEC,eAAA;AAAA,QACT;AAAA,MACJ;AA4CA;AAAA,6CAAkB,OAAO,SAA8B,aACvD;AACQ,YAAA,QAAQ,YAAY,GAAG;AAEvB,kBAAQ,YAAY,EAAE,IAAI,CAAC,iBAAsB;AAE7C,kBAAM,SAAc,MAAM,OAAO,MAAM,YAAY;AAC9C,+BAAA,YAAW,cAAc,QAAQ,QAAQ;AAAA,UAAA,CACjD;AAAA,QAAA,OACE;AAEH,gBAAM,SAAc,MAAM,OAAO,MAAM,QAAQ,YAAY,CAAC;AACvD,6BAAA,YAAW,cAAc,QAAQ,QAAQ;AAAA,QAAA;AAG3C,eAAA,mBAAK,YAAW,WAAW,QAAQ;AAAA,MAC9C;AAEA,+CAAoB,OAAO,aAC3B;AACW,eAAA,mBAAK,YAAW,WAAW,QAAQ;AAAA,MAC9C;AAEA,yCAAc,OAAO,OAAe,UAAkB,aAAuC;AACnF,cAAA,gBAAiB,WACjB,GAAG,QAAQ,GAAGC,UAAS,SAAA,cAAc,GAAGA,mBAAS,cAAc,KAC/D,GAAGA,UAAAA,SAAS,UAAU,IAAIA,UAAAA,SAAS,MAAM,GAAGA,UAAS,SAAA,cAAc,GAAGA,mBAAS,cAAc;AAEnG,cAAM,oBAAwC;AAAA,UAC1C,OAAO;AAAA;AAAA,UACP,iBAAiB;AAAA;AAAA,UACjB,aAAa;AAAA;AAAA,UACb,WAAW;AAAA,UACX,uBAAuB;AAAA;AAAA,UACvB,SAAS;AAAA,UACT,SAAS;AAAA;AAAA,QACb;AACI,YAAA,mBAAKF,WAAS,cAAc;AAE5B,4BAAkB,eAAe,mBAAKA,WAAS,aAAa,SAAS,aAAa;AAAA,QAAA;AAGhF,cAAA,OAAO,WAAW,iBAAiB;AAGzC,cAAM,sBAAsBG,UAAAA,UAAsB,OAAO,EAAE,QAAQ,MAAM;AACzE,cAAM,MAAM,oBAAoB;AAEhC,cAAM,MAAM,MAAM,KAAK,cAAc,GAAG;AAClC,cAAA,aAAa,IAAI,aAAa;AAEpC,cAAM,gBAAgB;AAAA,UAClB,QAAQ;AAAA;AAAA,UAER;AAAA;AAAA,UAEA,WAAY,CAAC,OAAO;AAAA;AAAA,QACxB;AAEA,eAAO,IAAI,OAAO,OAAO,YAAY,aAAa;AAAA,MACtD;AAGA;AAAA,2CAAgB,CAAC,QAAgB;AAC7B,cAAM,QAAQ,IAAI,MAAM,mBAAK,aAAY;AAClC,eAAA,QAAQ,MAAM,CAAC,IAAI;AAAA,MAC9B;AAEA,iEAAsC,OAAO,SAAsD,YAAqD;AACpJ,cAAM,EAAE,OAAO,UAAU,kBAAkB,UAAU,sBAAsB,0BAA0B;AAErG,YAAI,QAAQ;AAEN,cAAA,gBAAgB,CAAC,UAAiB;AACpC,gCAAK,8CAAL,WAAsB;AACtB,cAAI,sBAAsB;AACD,iCAAA,iBAAiBC,uBAAM,kCAAkC;AAAA;AAAA,cAC1E,KAAK;AAAA,YAAA,CACR;AAAA,UAAA;AAEL,kBAAQ,KAAK;AAAA,QACjB;AAEI,YAAA;AACQ,kBAAA;AACF,gBAAA,SAAS,MAAM,MAAM,GAAG;AAC9B,cAAI,SAAwB;AAC5B,cAAI,QAAsB;AAClB,kBAAA;AACR,mBAAS,IAAE,GAAG,IAAI,OAAO,QAAQ,KAAK;AAC5B,kBAAA,IAAI,OAAO,CAAC;AAClB,gBAAI,CAAC,QAAQ;AACA,uBAAA,KAAK,cAAc,CAAC;AAC7B,kBAAI,CAAC,QAAQ;AACT,wBAAQ,IAAI,MAAM,WAAW,KAAK,mGAAmG;AACrI;AAAA,cAAA;AAAA,YACJ,OACG;AACG,oBAAA,aAA4B,KAAK,cAAc,CAAC;AACtD,kBAAI,CAAC,YAAY;AACb,wBAAQ,IAAI,MAAM,WAAW,KAAK,mGAAmG;AACrI;AAAA,cAAA,OACG;AACH,oBAAI,OAAO,cAAc,UAAU,MAAM,GAAG;AACxC,0BAAQ,IAAI,MAAM,WAAW,KAAK,oFAAoF;AACtH;AAAA,gBAAA;AAAA,cACJ;AAAA,YACJ;AAAA,UACJ;AAEI,kBAAA;AACR,cAAI,OAAO;AACP,0BAAc,KAAK;AACZ,mBAAA;AAAA,UAAA;AAGH,kBAAA;AACR,gBAAM,UAAU;AAAA;AAAA,YACZ,WAAW;AAAA;AAAA,YACX,eAAe;AAAA;AAAA;AAAA,YAEf;AAAA;AAAA;AAAA;AAAA,YAGA,YAAY;AAAA,UAChB;AACQ,kBAAA;AACR,gBAAM,MAAO,WACP,GAAG,QAAQ,GAAGF,mBAAS,cAAc,WACrC,GAAGA,mBAAS,UAAU,IAAIA,UAAA,SAAS,MAAM,GAAGA,mBAAS,cAAc;AAEzE,kBAAQ,cAAc,GAAG,eAAe,KAAK,UAAU,OAAO,CAAC;AAEzD,gBAAA,cAAc,IAAIH,SAAAA,eAAe,KAAK,MAAM,EAC7C,mBAAA,EACA,SAAS,OAAO;AACjB,cAAA,mBAAKC,WAAS,cAAc;AAChB,wBAAA,iBAAiB,mBAAKA,WAAS,YAAY;AAAA,UAAA;AAG3D,gBAAM,SAAS,MAAM,MAAM,YAAY,MAAM;AAErC,kBAAA;AACR,cAAI,OAAO,QAAQ;AACX,gBAAA,OAAO,WAAW,KAAK;AAEvB,oCAAK,8CAAL,WAAsB,MAAM,QAAQ,+EAA+E,OAAO,MAAM,GAAG;AAAA,YAAC;AAAA,UACxI,OACG;AACH,0BAAc,IAAI,MAAM,MAAM,IAAI,8DAA8D,CAAC,CAAC;AAC3F,mBAAA;AAAA,UAAA;AAEH,kBAAA;AACR,cAAI,OAAO,MAAM;AACL,oBAAA;AACJ,gBAAA,OAAO,KAAK,cAAc;AAClB,sBAAA;AACR,kBAAI,sBAAsB;AACd,wBAAA;AACa,qCAAA,iBAAiBI,uBAAM,4BAA4B;AAAA,kBACpE,KAAK;AAAA,gBAAA,CACR;AAAA,cAAA;AAGG,sBAAA;AACR,qBAAO,OAAO,KAAK;AAAA,YAAA,OAChB;AACK,sBAAA;AACM,4BAAA,IAAI,MAAM,yEAAyE,CAAC;AAC3F,qBAAA;AAAA,YAAA;AAAA,UACX,OACG;AACK,oBAAA;AACM,0BAAA,IAAI,MAAM,4DAA4D,CAAC;AAC9E,mBAAA;AAAA,UAAA;AAAA,iBAGN,OAAY;AACjB,cAAI,0BAA0B,MAAM;AAChC,oBAAQ,MAAM,KAAK;AAAA,UAAA;AAEvB,cAAI,UAAU;AACd,cAAI,MAAM,YAAY,MAAM,SAAS,MAAM;AACnC,gBAAA;AACA,wBAAU,KAAK,UAAU,MAAM,SAAS,IAAI;AAAA,qBAEvCC,QAAO;AACF,wBAAA;AAAA,YAAA;AAAA,UACd;AAEU,wBAAA,IAAI,MAAM,uDAAuD,KAAK,cAAc,KAAK,gBAAgB,OAAO,GAAG,CAAC;AAC3H,iBAAA;AAAA,QAAA;AAAA,MAEf;AA3SI,yBAAKL,WAAW;AACX,yBAAA,YAAa,IAAI,MAAM,UAAU;AAAA,IAAA;AAAA,IAQ1C,IAAI,eAAyC;AACzC,aAAO,mBAAKA,WAAS;AAAA,IAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,IAuEzB,MAAM,wBAAwB,KAAU,KAAU,MAClD;AACS,WAAA;AAAA,IAAA;AAAA,EAyNb;AApTI,EAAAA,YAAA;AACA;AACA;AACA;AAEA;AANG;AAcH;AAAA,gCAAiB,SAAc;AACtB,uBAAAA,WAAS,OAAO,MAAM,OAAO;AAAA,EAAA;;;;;;;","x_google_ignoreList":[1]}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@nsshunt/stsauthclient",
-  "version": "1.0.20",
+  "version": "1.0.22",
   "description": "",
   "main": "./dist/stsauthclient.umd.js",
   "module": "./dist/stsauthclient.mjs",
@@ -41,23 +41,21 @@
     "@eslint/eslintrc": "^3.2.0",
     "@eslint/js": "^9.15.0",
     "@tsconfig/node20": "^20.1.4",
-    "@types/detect-node": "^2.0.2",
     "@types/jsonwebtoken": "^9.0.7",
-    "@typescript-eslint/eslint-plugin": "^8.14.0",
-    "@typescript-eslint/parser": "^8.14.0",
+    "@typescript-eslint/eslint-plugin": "^8.16.0",
+    "@typescript-eslint/parser": "^8.16.0",
     "eslint": "^9.15.0",
     "globals": "^15.12.0",
-    "typescript": "^5.6.3",
+    "typescript": "^5.7.2",
     "vite": "^5.4.11",
-    "vitest": "^2.1.5"
+    "vitest": "^2.1.6"
   },
   "dependencies": {
-    "@nsshunt/stsconfig": "^1.27.2",
-    "@nsshunt/stsobservability": "^1.0.89",
-    "@nsshunt/stsutils": "^1.19.7",
-    "axios": "^1.7.7",
+    "@nsshunt/stsconfig": "^1.27.6",
+    "@nsshunt/stsobservability": "^1.0.90",
+    "@nsshunt/stsutils": "^1.19.8",
+    "axios": "^1.7.8",
     "chalk": "^4.1.2",
-    "detect-node": "^2.1.0",
     "http-status-codes": "^2.3.0",
     "jsonwebtoken": "^9.0.2",
     "jwks-rsa": "^3.1.0",

package/types/authManager.d.ts

@@ -1,8 +1,7 @@
-import { ISTSLogger } from '@nsshunt/stsutils';
 import { ISTSError, ISTSResourceManagerOptions, ISTSLoginQueryParams, ISTSAuthPayload, ISTSLogoutPayload } from './commonTypes';
 import { ResourceManager } from './resourceManager';
 export declare class AuthManager extends ResourceManager {
-    constructor(options: ISTSResourceManagerOptions, logger: ISTSLogger);
+    constructor(options: ISTSResourceManagerOptions);
     Logout: (sessionId: string, errorCb: (error: ISTSError) => void) => Promise<ISTSLogoutPayload | null>;
     Login: (loginDetails: ISTSLoginQueryParams, errorCb: (error: ISTSError) => void) => Promise<ISTSAuthPayload | null>;
 }

package/types/authManager.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"authManager.d.ts","sourceRoot":"","sources":["../src/authManager.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAE/C,OAAO,EAAE,SAAS,EAAE,0BAA0B,EAAE,oBAAoB,EAAE,eAAe,EAAE,iBAAiB,EAAE,MAAM,eAAe,CAAA;AAE/H,OAAO,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAA;AAEnD,qBAAa,WAAY,SAAQ,eAAe;gBAChC,OAAO,EAAE,0BAA0B,EAAE,MAAM,EAAE,UAAU;IAInE,MAAM,cAAqB,MAAM,WAAW,CAAC,KAAK,EAAE,SAAS,KAAK,IAAI,KAAG,OAAO,CAAC,iBAAiB,GAAG,IAAI,CAAC,CAQzG;IAED,KAAK,iBAAwB,oBAAoB,WAAW,CAAC,KAAK,EAAE,SAAS,KAAK,IAAI,KAAG,OAAO,CAAC,eAAe,GAAG,IAAI,CAAC,CAevH;CACJ"}
+{"version":3,"file":"authManager.d.ts","sourceRoot":"","sources":["../src/authManager.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,SAAS,EAAE,0BAA0B,EAAE,oBAAoB,EAAE,eAAe,EAAE,iBAAiB,EAAE,MAAM,eAAe,CAAA;AAE/H,OAAO,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAA;AAEnD,qBAAa,WAAY,SAAQ,eAAe;gBAChC,OAAO,EAAE,0BAA0B;IAI/C,MAAM,cAAqB,MAAM,WAAW,CAAC,KAAK,EAAE,SAAS,KAAK,IAAI,KAAG,OAAO,CAAC,iBAAiB,GAAG,IAAI,CAAC,CAQzG;IAED,KAAK,iBAAwB,oBAAoB,WAAW,CAAC,KAAK,EAAE,SAAS,KAAK,IAAI,KAAG,OAAO,CAAC,eAAe,GAAG,IAAI,CAAC,CAevH;CACJ"}

package/types/authutilsnode.d.ts

@@ -1,6 +1,5 @@
 import tough from 'tough-cookie';
-import { AgentManager } from '@nsshunt/stsconfig';
-import { ISTSLogger } from '@nsshunt/stsutils';
+import { ISTSLogger, AgentManager } from '@nsshunt/stsutils';
 import { PublishInstrumentController } from '@nsshunt/stsobservability';
 export interface IAuthUtilsNodeOptions {
     permissions: string[];
@@ -13,10 +12,14 @@ export interface IGetAPITokenFromAuthServerUsingScopeOptions {
     instrumentController?: PublishInstrumentController;
     outputErrorsToConsole?: boolean;
 }
+export interface IAuthUtilsNodeOptions {
+    logger: ISTSLogger;
+    agentManager?: AgentManager;
+}
 export declare class AuthUtilsNode {
     #private;
-    constructor(logger: ISTSLogger);
-    get agentManager(): AgentManager;
+    constructor(options: IAuthUtilsNodeOptions);
+    get agentManager(): AgentManager | undefined;
     ResetAgent: () => void;
     VerifyRequestMiddlewareFactory: (options: IAuthUtilsNodeOptions) => (req: any, res: any, next: any) => Promise<void>;
     verifyRequestMiddleware(req: any, res: any, next: any): Promise<void>;

package/types/authutilsnode.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"authutilsnode.d.ts","sourceRoot":"","sources":["../src/authutilsnode.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,MAAM,cAAc,CAAC;AAOjC,OAAO,EAAY,YAAY,EAAkB,MAAM,oBAAoB,CAAA;AAE3E,OAAO,EAAmB,UAAU,EAAc,MAAM,mBAAmB,CAAA;AAM3E,OAAO,EAAS,2BAA2B,EAAE,MAAM,2BAA2B,CAAA;AAI9E,MAAM,WAAW,qBAAqB;IAClC,WAAW,EAAE,MAAM,EAAE,CAAA;CACxB;AAED,MAAM,WAAW,2CAA2C;IACxD,QAAQ,EAAE,MAAM,CAAA;IAChB,gBAAgB,EAAE,MAAM,CAAA;IACxB,KAAK,EAAE,MAAM,CAAA;IACb,QAAQ,EAAE,MAAM,CAAA;IAChB,oBAAoB,CAAC,EAAE,2BAA2B,CAAA;IAClD,qBAAqB,CAAC,EAAE,OAAO,CAAA;CAClC;AAWD,qBAAa,aAAa;;gBAUV,MAAM,EAAE,UAAU;IAU9B,IAAI,YAAY,IAAI,YAAY,CAE/B;IAED,UAAU,aAET;IAED,8BAA8B,YAAa,qBAAqB,WAEzC,GAAG,OAAO,GAAG,QAAQ,GAAG,mBAyC9C;IAmBK,uBAAuB,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,GAAG;IAyB3D,eAAe,YAAmB,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,YAAY,MAAM,KAAG,OAAO,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,CAgB/F;IAEF,iBAAiB,aAAoB,MAAM,KAAG,OAAO,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,CAGnE;IAEF,WAAW,UAAiB,MAAM,YAAY,MAAM,aAAa,MAAM,KAAG,OAAO,CAAC,MAAM,CAAC,CAiCxF;IAGD,aAAa,QAAS,MAAM,mBAG3B;IAED,mCAAmC,YAAmB,2CAA2C,WAAW,CAAC,KAAK,EAAE,KAAK,KAAK,IAAI,KAAG,OAAO,CAAC,MAAM,CAAC,CAyHnJ;CACJ"}
+{"version":3,"file":"authutilsnode.d.ts","sourceRoot":"","sources":["../src/authutilsnode.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,MAAM,cAAc,CAAC;AASjC,OAAO,EAAmB,UAAU,EAAc,YAAY,EAAkB,MAAM,mBAAmB,CAAA;AAMzG,OAAO,EAAS,2BAA2B,EAAE,MAAM,2BAA2B,CAAA;AAI9E,MAAM,WAAW,qBAAqB;IAClC,WAAW,EAAE,MAAM,EAAE,CAAA;CACxB;AAED,MAAM,WAAW,2CAA2C;IACxD,QAAQ,EAAE,MAAM,CAAA;IAChB,gBAAgB,EAAE,MAAM,CAAA;IACxB,KAAK,EAAE,MAAM,CAAA;IACb,QAAQ,EAAE,MAAM,CAAA;IAChB,oBAAoB,CAAC,EAAE,2BAA2B,CAAA;IAClD,qBAAqB,CAAC,EAAE,OAAO,CAAA;CAClC;AAWD,MAAM,WAAW,qBAAqB;IAClC,MAAM,EAAE,UAAU,CAAA;IAClB,YAAY,CAAC,EAAE,YAAY,CAAA;CAC9B;AAED,qBAAa,aAAa;;gBAQV,OAAO,EAAE,qBAAqB;IAU1C,IAAI,YAAY,IAAI,YAAY,GAAG,SAAS,CAE3C;IAED,UAAU,aAIT;IAED,8BAA8B,YAAa,qBAAqB,WAEzC,GAAG,OAAO,GAAG,QAAQ,GAAG,mBAyC9C;IAmBK,uBAAuB,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,GAAG;IAyB3D,eAAe,YAAmB,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,YAAY,MAAM,KAAG,OAAO,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,CAgB/F;IAEF,iBAAiB,aAAoB,MAAM,KAAG,OAAO,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,CAGnE;IAEF,WAAW,UAAiB,MAAM,YAAY,MAAM,aAAa,MAAM,KAAG,OAAO,CAAC,MAAM,CAAC,CAqCxF;IAGD,aAAa,QAAS,MAAM,mBAG3B;IAED,mCAAmC,YAAmB,2CAA2C,WAAW,CAAC,KAAK,EAAE,KAAK,KAAK,IAAI,KAAG,OAAO,CAAC,MAAM,CAAC,CA6HnJ;CACJ"}

package/types/commonTypes.d.ts

@@ -1,16 +1,10 @@
 import { StatusCodes } from 'http-status-codes';
-import { OIDCStandardClaim, OAuth2ParameterType } from '@nsshunt/stsutils';
+import { OIDCStandardClaim, OAuth2ParameterType, ISTSLogger, AgentManager } from '@nsshunt/stsutils';
 export interface ISTSResourceManagerOptions {
     timeout: number;
     asendpoint: string;
-    agentOptions?: {
-        keepAlive: boolean;
-        maxSockets: number;
-        maxTotalSockets: number;
-        maxFreeSockets: number;
-        timeout: number;
-        rejectUnauthorized: boolean;
-    };
+    logger: ISTSLogger;
+    agentManager?: AgentManager;
 }
 export interface ISTSAuthPayload {
     sessionId: string;

package/types/commonTypes.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"commonTypes.d.ts","sourceRoot":"","sources":["../src/commonTypes.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAA;AAE/C,OAAO,EAAE,iBAAiB,EAAE,mBAAmB,EAAE,MAAM,mBAAmB,CAAC;AAE3E,MAAM,WAAW,0BAA0B;IAC1C,OAAO,EAAE,MAAM,CAAA;IACZ,UAAU,EAAE,MAAM,CAAC;IACtB,YAAY,CAAC,EAAE;QACd,SAAS,EAAE,OAAO,CAAA;QAClB,UAAU,EAAE,MAAM,CAAA;QAClB,eAAe,EAAE,MAAM,CAAA;QACvB,cAAc,EAAE,MAAM,CAAA;QAChB,OAAO,EAAE,MAAM,CAAA;QACrB,kBAAkB,EAAE,OAAO,CAAA;KAC3B,CAAA;CACD;AAED,MAAM,WAAW,eAAe;IAC/B,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC;IACjB,eAAe,EAAE,MAAM,EAAE,CAAC;IAC1B,6BAA6B,EAAE,MAAM,EAAE,CAAC;IACxC,4BAA4B,EAAE,MAAM,EAAE,CAAC;IACvC,iBAAiB,CAAC,EAAE,MAAM,CAAA;IAC1B,KAAK,EAAE,MAAM,CAAA;IACb,UAAU,EAAE,MAAM,CAAA;CAClB;AAED,MAAM,WAAW,iBAAiB;IACjC,SAAS,EAAE,MAAM,CAAA;CACjB;AAED,MAAM,WAAW,WAAW;IACxB,OAAO,EAAE,MAAM,EAAE,CAAA;CACpB;AAED,MAAM,WAAW,gBAAgB;IAC7B,YAAY,EAAE,MAAM,CAAC;IACrB,UAAU,EAAE,QAAQ,CAAC;IACrB,UAAU,EAAE,MAAM,CAAC;IACnB,aAAa,EAAE,MAAM,CAAC;IACtB,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,CAAC,EAAE,MAAM,CAAA;CACjB;AAED,MAAM,WAAW,mBAAmB;IAChC,SAAS,EAAE,MAAM,CAAA;IACjB,YAAY,EAAE,MAAM,CAAA;IACpB,QAAQ,EAAE,MAAM,CAAA;IAChB,cAAc,EAAE,MAAM,EAAE,CAAA;IACxB,eAAe,EAAE,MAAM,EAAE,CAAA;IACzB,6BAA6B,EAAE,MAAM,EAAE,CAAA;IACvC,4BAA4B,EAAE,MAAM,EAAE,CAAA;IACtC,YAAY,CAAC,EAAE,MAAM,CAAA;IACrB,QAAQ,EAAE,MAAM,CAAA;IAChB,WAAW,EAAE,MAAM,CAAA;IACnB,OAAO,EAAE,MAAM,CAAA;IACf,iBAAiB,EAAE,MAAM,CAAA;IACzB,sBAAsB,EAAE,MAAM,CAAA;IAC9B,MAAM,EAAE,MAAM,CAAA;IAGd,SAAS,EAAE,MAAM,CAAA;IACjB,aAAa,EAAE,MAAM,CAAA;IACrB,YAAY,EAAE,MAAM,CAAA;IACpB,KAAK,EAAE,MAAM,CAAA;IACb,KAAK,EAAE,MAAM,CAAA;IAEb,cAAc,CAAC,EAAE,MAAM,CAAA;IACvB,qBAAqB,CAAC,EAAE,MAAM,CAAA;IAC9B,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,aAAa,CAAC,EAAE,MAAM,CAAA;IAEtB,YAAY,CAAC,EAAE,gBAAgB,CAAA;CAClC;AAED,MAAM,WAAW,oBAAoB;IACjC,KAAK,EAAE,MAAM,CAAA;IACb,QAAQ,EAAE,MAAM,CAAA;IAChB,CAAC,mBAAmB,CAAC,SAAS,CAAC,EAAE,MAAM,CAAA;IACvC,KAAK,EAAE,MAAM,CAAA;IACb,CAAC,mBAAmB,CAAC,aAAa,CAAC,EAAE,MAAM,CAAA;IAC3C,CAAC,mBAAmB,CAAC,YAAY,CAAC,EAAE,MAAM,CAAA;IAC1C,CAAC,mBAAmB,CAAC,aAAa,CAAC,EAAE,MAAM,CAAA;IAC3C,CAAC,mBAAmB,CAAC,KAAK,CAAC,EAAE,MAAM,CAAA;IACnC,CAAC,mBAAmB,CAAC,KAAK,CAAC,EAAE,MAAM,CAAA;IACnC,cAAc,EAAE,MAAM,CAAA;IACtB,qBAAqB,EAAE,MAAM,CAAA;CAChC;AAED,MAAM,WAAW,QAAQ;IACrB,EAAE,EAAE,MAAM,CAAA;IACV,IAAI,EAAE,MAAM,CAAA;IACZ,KAAK,EAAE,MAAM,CAAA;IACb,IAAI,EAAE,MAAM,CAAA;IACZ,KAAK,EAAE,MAAM,EAAE,CAAA;CAClB;AAED,MAAM,WAAW,6BAA6B;IAC1C,SAAS,EAAE,MAAM,CAAA;CACpB;AAED,MAAM,WAAW,UAAU;IACvB,GAAG,EAAE,MAAM,CAAC;IACZ,GAAG,EAAE,MAAM,CAAC;IAEZ,GAAG,EAAE,MAAM,CAAC;IACZ,GAAG,EAAE,MAAM,CAAC;IAEZ,CAAC,iBAAiB,CAAC,IAAI,CAAC,EAAE,MAAM,CAAA;IAChC,CAAC,iBAAiB,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IAElC,WAAW,EAAE,MAAM,CAAA;IAEnB,cAAc,EAAE,GAAG,CAAA;IAEnB,CAAC,iBAAiB,CAAC,KAAK,CAAC,CAAC,EAAE,MAAM,CAAA;CACrC;AAED,MAAM,WAAW,cAAc,CAAC,CAAC;IAC7B,MAAM,EAAE,WAAW,CAAC;IACpB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,WAAW,CAAC,EAAE,KAAK,CAAC;IACpB,MAAM,CAAC,EAAE,CAAC,CAAC;CACd;AAED,MAAM,WAAW,SAAS;IACtB,MAAM,EAAE,WAAW,CAAC;IACpB,KAAK,EAAE,MAAM,CAAC;IAEd,MAAM,EAAE,GAAG,CAAC;CACf;AAED,eAAO,MAAM,GAAG,2CAA2C,CAAC;AAE5D,eAAO,MAAM,sBAAsB;;;;;EAKjC,CAAC"}
+{"version":3,"file":"commonTypes.d.ts","sourceRoot":"","sources":["../src/commonTypes.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAA;AAE/C,OAAO,EAAE,iBAAiB,EAAE,mBAAmB,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AAErG,MAAM,WAAW,0BAA0B;IAC1C,OAAO,EAAE,MAAM,CAAA;IACZ,UAAU,EAAE,MAAM,CAAA;IAClB,MAAM,EAAE,UAAU,CAAA;IAClB,YAAY,CAAC,EAAE,YAAY,CAAA;CAC9B;AAED,MAAM,WAAW,eAAe;IAC/B,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC;IACjB,eAAe,EAAE,MAAM,EAAE,CAAC;IAC1B,6BAA6B,EAAE,MAAM,EAAE,CAAC;IACxC,4BAA4B,EAAE,MAAM,EAAE,CAAC;IACvC,iBAAiB,CAAC,EAAE,MAAM,CAAA;IAC1B,KAAK,EAAE,MAAM,CAAA;IACb,UAAU,EAAE,MAAM,CAAA;CAClB;AAED,MAAM,WAAW,iBAAiB;IACjC,SAAS,EAAE,MAAM,CAAA;CACjB;AAED,MAAM,WAAW,WAAW;IACxB,OAAO,EAAE,MAAM,EAAE,CAAA;CACpB;AAED,MAAM,WAAW,gBAAgB;IAC7B,YAAY,EAAE,MAAM,CAAC;IACrB,UAAU,EAAE,QAAQ,CAAC;IACrB,UAAU,EAAE,MAAM,CAAC;IACnB,aAAa,EAAE,MAAM,CAAC;IACtB,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,CAAC,EAAE,MAAM,CAAA;CACjB;AAED,MAAM,WAAW,mBAAmB;IAChC,SAAS,EAAE,MAAM,CAAA;IACjB,YAAY,EAAE,MAAM,CAAA;IACpB,QAAQ,EAAE,MAAM,CAAA;IAChB,cAAc,EAAE,MAAM,EAAE,CAAA;IACxB,eAAe,EAAE,MAAM,EAAE,CAAA;IACzB,6BAA6B,EAAE,MAAM,EAAE,CAAA;IACvC,4BAA4B,EAAE,MAAM,EAAE,CAAA;IACtC,YAAY,CAAC,EAAE,MAAM,CAAA;IACrB,QAAQ,EAAE,MAAM,CAAA;IAChB,WAAW,EAAE,MAAM,CAAA;IACnB,OAAO,EAAE,MAAM,CAAA;IACf,iBAAiB,EAAE,MAAM,CAAA;IACzB,sBAAsB,EAAE,MAAM,CAAA;IAC9B,MAAM,EAAE,MAAM,CAAA;IAGd,SAAS,EAAE,MAAM,CAAA;IACjB,aAAa,EAAE,MAAM,CAAA;IACrB,YAAY,EAAE,MAAM,CAAA;IACpB,KAAK,EAAE,MAAM,CAAA;IACb,KAAK,EAAE,MAAM,CAAA;IAEb,cAAc,CAAC,EAAE,MAAM,CAAA;IACvB,qBAAqB,CAAC,EAAE,MAAM,CAAA;IAC9B,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,aAAa,CAAC,EAAE,MAAM,CAAA;IAEtB,YAAY,CAAC,EAAE,gBAAgB,CAAA;CAClC;AAED,MAAM,WAAW,oBAAoB;IACjC,KAAK,EAAE,MAAM,CAAA;IACb,QAAQ,EAAE,MAAM,CAAA;IAChB,CAAC,mBAAmB,CAAC,SAAS,CAAC,EAAE,MAAM,CAAA;IACvC,KAAK,EAAE,MAAM,CAAA;IACb,CAAC,mBAAmB,CAAC,aAAa,CAAC,EAAE,MAAM,CAAA;IAC3C,CAAC,mBAAmB,CAAC,YAAY,CAAC,EAAE,MAAM,CAAA;IAC1C,CAAC,mBAAmB,CAAC,aAAa,CAAC,EAAE,MAAM,CAAA;IAC3C,CAAC,mBAAmB,CAAC,KAAK,CAAC,EAAE,MAAM,CAAA;IACnC,CAAC,mBAAmB,CAAC,KAAK,CAAC,EAAE,MAAM,CAAA;IACnC,cAAc,EAAE,MAAM,CAAA;IACtB,qBAAqB,EAAE,MAAM,CAAA;CAChC;AAED,MAAM,WAAW,QAAQ;IACrB,EAAE,EAAE,MAAM,CAAA;IACV,IAAI,EAAE,MAAM,CAAA;IACZ,KAAK,EAAE,MAAM,CAAA;IACb,IAAI,EAAE,MAAM,CAAA;IACZ,KAAK,EAAE,MAAM,EAAE,CAAA;CAClB;AAED,MAAM,WAAW,6BAA6B;IAC1C,SAAS,EAAE,MAAM,CAAA;CACpB;AAED,MAAM,WAAW,UAAU;IACvB,GAAG,EAAE,MAAM,CAAC;IACZ,GAAG,EAAE,MAAM,CAAC;IAEZ,GAAG,EAAE,MAAM,CAAC;IACZ,GAAG,EAAE,MAAM,CAAC;IAEZ,CAAC,iBAAiB,CAAC,IAAI,CAAC,EAAE,MAAM,CAAA;IAChC,CAAC,iBAAiB,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IAElC,WAAW,EAAE,MAAM,CAAA;IAEnB,cAAc,EAAE,GAAG,CAAA;IAEnB,CAAC,iBAAiB,CAAC,KAAK,CAAC,CAAC,EAAE,MAAM,CAAA;CACrC;AAED,MAAM,WAAW,cAAc,CAAC,CAAC;IAC7B,MAAM,EAAE,WAAW,CAAC;IACpB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,WAAW,CAAC,EAAE,KAAK,CAAC;IACpB,MAAM,CAAC,EAAE,CAAC,CAAC;CACd;AAED,MAAM,WAAW,SAAS;IACtB,MAAM,EAAE,WAAW,CAAC;IACpB,KAAK,EAAE,MAAM,CAAC;IAEd,MAAM,EAAE,GAAG,CAAC;CACf;AAED,eAAO,MAAM,GAAG,2CAA2C,CAAC;AAE5D,eAAO,MAAM,sBAAsB;;;;;EAKjC,CAAC"}

package/types/resourceManager.d.ts

@@ -1,10 +1,9 @@
 import { StatusCodes } from 'http-status-codes';
-import { ISTSLogger, JSONObject } from '@nsshunt/stsutils';
+import { JSONObject, AgentManager } from '@nsshunt/stsutils';
 import { ISTSError, ISTSResourceManagerOptions } from './commonTypes';
-import { AgentManager } from '@nsshunt/stsconfig';
 export declare abstract class ResourceManager {
     #private;
-    constructor(options: ISTSResourceManagerOptions, logger: ISTSLogger);
+    constructor(options: ISTSResourceManagerOptions);
     get agentManager(): AgentManager | null;
     get options(): ISTSResourceManagerOptions;
     LogDebugMessage(message: any): void;

package/types/resourceManager.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"resourceManager.d.ts","sourceRoot":"","sources":["../src/resourceManager.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAIhD,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAE3D,OAAO,EAAE,SAAS,EAAE,0BAA0B,EAAE,MAAM,eAAe,CAAA;AAErE,OAAO,EAAE,YAAY,EAAkB,MAAM,oBAAoB,CAAC;AAElE,8BAAsB,eAAe;;gBAKrB,OAAO,EAAE,0BAA0B,EAAE,MAAM,EAAE,UAAU;IAiBnE,IAAI,YAAY,IAAI,YAAY,GAAG,IAAI,CAEtC;IAED,IAAI,OAAO,IAAI,0BAA0B,CAExC;IAGD,eAAe,CAAC,OAAO,EAAE,GAAG;IAK5B,cAAc,CAAC,OAAO,EAAE,GAAG;IAK3B,eAAe,CAAC,OAAO,EAAE,GAAG;IAK5B,eAAe,WAAY,WAAW,SAAS,MAAM,UAAU,GAAG,KAAG,SAAS,CAM7E;IAED,UAAU,iBAAkB,MAAM,GAAG,IAAI,KAAG,UAAU,CAQrD;IAED,SAAS,GAAU,CAAC,eAAe,MAAM,GAAG,IAAI,OAAO,MAAM,UAAU,MAAM,eAAe,UAAU,GAAG,IAAI,WAAW,CAAC,KAAK,EAAE,SAAS,KAAK,IAAI,KAAG,OAAO,CAAC,CAAC,GAAG,IAAI,CAAC,CAgCrK;CACJ"}
+{"version":3,"file":"resourceManager.d.ts","sourceRoot":"","sources":["../src/resourceManager.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAIhD,OAAO,EAAE,UAAU,EAAE,YAAY,EAAkB,MAAM,mBAAmB,CAAC;AAE7E,OAAO,EAAE,SAAS,EAAE,0BAA0B,EAAE,MAAM,eAAe,CAAA;AAErE,8BAAsB,eAAe;;gBAGrB,OAAO,EAAE,0BAA0B;IAK/C,IAAI,YAAY,IAAI,YAAY,GAAG,IAAI,CAMtC;IAED,IAAI,OAAO,IAAI,0BAA0B,CAExC;IAGD,eAAe,CAAC,OAAO,EAAE,GAAG;IAK5B,cAAc,CAAC,OAAO,EAAE,GAAG;IAK3B,eAAe,CAAC,OAAO,EAAE,GAAG;IAK5B,eAAe,WAAY,WAAW,SAAS,MAAM,UAAU,GAAG,KAAG,SAAS,CAM7E;IAED,UAAU,iBAAkB,MAAM,GAAG,IAAI,KAAG,UAAU,CAQrD;IAED,SAAS,GAAU,CAAC,eAAe,MAAM,GAAG,IAAI,OAAO,MAAM,UAAU,MAAM,eAAe,UAAU,GAAG,IAAI,WAAW,CAAC,KAAK,EAAE,SAAS,KAAK,IAAI,KAAG,OAAO,CAAC,CAAC,GAAG,IAAI,CAAC,CAgCrK;CACJ"}

package/types/sessionManager.d.ts

@@ -1,8 +1,7 @@
-import { ISTSLogger } from '@nsshunt/stsutils';
 import { ISTSSessionResource, ISTSError, ISTSResourceManagerOptions } from './commonTypes';
 import { ResourceManager } from './resourceManager';
 export declare class SessionManager extends ResourceManager {
-    constructor(options: ISTSResourceManagerOptions, logger: ISTSLogger);
+    constructor(options: ISTSResourceManagerOptions);
     GetSession: (access_token: string, sessionId: string, errorCb: (error: ISTSError) => void) => Promise<ISTSSessionResource | null>;
     PatchSession: (access_token: string, session: Partial<ISTSSessionResource>, errorCb: (error: ISTSError) => void) => Promise<ISTSSessionResource | null>;
 }

package/types/sessionManager.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sessionManager.d.ts","sourceRoot":"","sources":["../src/sessionManager.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAE/C,OAAO,EAAE,mBAAmB,EAAE,SAAS,EAAE,0BAA0B,EAAE,MAAM,eAAe,CAAA;AAE1F,OAAO,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAA;AAEnD,qBAAa,cAAe,SAAQ,eAAe;gBACnC,OAAO,EAAE,0BAA0B,EAAE,MAAM,EAAE,UAAU;IAInE,UAAU,iBAAwB,MAAM,aAAa,MAAM,WAAW,CAAC,KAAK,EAAE,SAAS,KAAK,IAAI,KAAG,OAAO,CAAC,mBAAmB,GAAG,IAAI,CAAC,CAQrI;IAED,YAAY,iBAAwB,MAAM,WAAW,OAAO,CAAC,mBAAmB,CAAC,WAAW,CAAC,KAAK,EAAE,SAAS,KAAK,IAAI,KAAG,OAAO,CAAC,mBAAmB,GAAG,IAAI,CAAC,CAY3J;CACJ"}
+{"version":3,"file":"sessionManager.d.ts","sourceRoot":"","sources":["../src/sessionManager.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,mBAAmB,EAAE,SAAS,EAAE,0BAA0B,EAAE,MAAM,eAAe,CAAA;AAE1F,OAAO,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAA;AAEnD,qBAAa,cAAe,SAAQ,eAAe;gBACnC,OAAO,EAAE,0BAA0B;IAI/C,UAAU,iBAAwB,MAAM,aAAa,MAAM,WAAW,CAAC,KAAK,EAAE,SAAS,KAAK,IAAI,KAAG,OAAO,CAAC,mBAAmB,GAAG,IAAI,CAAC,CAQrI;IAED,YAAY,iBAAwB,MAAM,WAAW,OAAO,CAAC,mBAAmB,CAAC,WAAW,CAAC,KAAK,EAAE,SAAS,KAAK,IAAI,KAAG,OAAO,CAAC,mBAAmB,GAAG,IAAI,CAAC,CAY3J;CACJ"}