@optimizely-opal/opal-tool-ocp-sdk 0.0.0-OCP-1487.1

package/dist/auth/AuthUtils.js

@@ -0,0 +1,64 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.AuthUtils = void 0;
+const app_sdk_1 = require("@zaiusinc/app-sdk");
+const TokenVerifier_1 = require("./TokenVerifier");
+/**
+ * Common authentication utilities for all function types
+ */
+class AuthUtils {
+    /**
+     * Validate the OptiID access token
+     *
+     * @param accessToken - The access token to validate
+     * @returns true if the token is valid
+     */
+    static async validateAccessToken(accessToken) {
+        try {
+            if (!accessToken) {
+                return false;
+            }
+            const tokenVerifier = await (0, TokenVerifier_1.getTokenVerifier)();
+            return await tokenVerifier.verify(accessToken);
+        }
+        catch (error) {
+            app_sdk_1.logger.error('OptiID token validation failed:', error);
+            return false;
+        }
+    }
+    /**
+     * Extract and validate basic OptiID authentication data from request
+     *
+     * @param request - The incoming request
+     * @returns object with authData and accessToken, or null if invalid
+     */
+    static extractAuthData(request) {
+        const authData = request?.bodyJSON?.auth;
+        const accessToken = authData?.credentials?.access_token;
+        if (!accessToken || authData?.provider?.toLowerCase() !== 'optiid') {
+            app_sdk_1.logger.error('OptiID token is required but not provided');
+            return null;
+        }
+        return { authData, accessToken };
+    }
+    /**
+     * Validate organization ID matches the app context
+     *
+     * @param customerId - The customer ID from the auth data
+     * @returns true if the organization ID is valid
+     */
+    static validateOrganizationId(customerId) {
+        if (!customerId) {
+            app_sdk_1.logger.error('Organisation ID is required but not provided');
+            return false;
+        }
+        const appOrganisationId = (0, app_sdk_1.getAppContext)()?.account?.organizationId;
+        if (customerId !== appOrganisationId) {
+            app_sdk_1.logger.error(`Invalid organisation ID: expected ${appOrganisationId}, received ${customerId}`);
+            return false;
+        }
+        return true;
+    }
+}
+exports.AuthUtils = AuthUtils;
+//# sourceMappingURL=AuthUtils.js.map

package/dist/auth/AuthUtils.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"AuthUtils.js","sourceRoot":"","sources":["../../src/auth/AuthUtils.ts"],"names":[],"mappings":";;;AAAA,+CAA0D;AAC1D,mDAAmD;AAGnD;;GAEG;AACH,MAAa,SAAS;IAEpB;;;;;OAKG;IACI,MAAM,CAAC,KAAK,CAAC,mBAAmB,CAAC,WAA+B;QACrE,IAAI,CAAC;YACH,IAAI,CAAC,WAAW,EAAE,CAAC;gBACjB,OAAO,KAAK,CAAC;YACf,CAAC;YACD,MAAM,aAAa,GAAG,MAAM,IAAA,gCAAgB,GAAE,CAAC;YAC/C,OAAO,MAAM,aAAa,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;QACjD,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,gBAAM,CAAC,KAAK,CAAC,iCAAiC,EAAE,KAAK,CAAC,CAAC;YACvD,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;IAED;;;;;OAKG;IACI,MAAM,CAAC,eAAe,CAAC,OAAY;QACxC,MAAM,QAAQ,GAAG,OAAO,EAAE,QAAQ,EAAE,IAAsB,CAAC;QAC3D,MAAM,WAAW,GAAG,QAAQ,EAAE,WAAW,EAAE,YAAY,CAAC;QACxD,IAAI,CAAC,WAAW,IAAI,QAAQ,EAAE,QAAQ,EAAE,WAAW,EAAE,KAAK,QAAQ,EAAE,CAAC;YACnE,gBAAM,CAAC,KAAK,CAAC,2CAA2C,CAAC,CAAC;YAC1D,OAAO,IAAI,CAAC;QACd,CAAC;QAED,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,CAAC;IACnC,CAAC;IAED;;;;;OAKG;IACI,MAAM,CAAC,sBAAsB,CAAC,UAA8B;QACjE,IAAI,CAAC,UAAU,EAAE,CAAC;YAChB,gBAAM,CAAC,KAAK,CAAC,8CAA8C,CAAC,CAAC;YAC7D,OAAO,KAAK,CAAC;QACf,CAAC;QAED,MAAM,iBAAiB,GAAG,IAAA,uBAAa,GAAE,EAAE,OAAO,EAAE,cAAc,CAAC;QACnE,IAAI,UAAU,KAAK,iBAAiB,EAAE,CAAC;YACrC,gBAAM,CAAC,KAAK,CAAC,qCAAqC,iBAAiB,cAAc,UAAU,EAAE,CAAC,CAAC;YAC/F,OAAO,KAAK,CAAC;QACf,CAAC;QAED,OAAO,IAAI,CAAC;IACd,CAAC;CACF;AA1DD,8BA0DC"}

package/dist/auth/AuthUtils.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=AuthUtils.test.d.ts.map

package/dist/auth/AuthUtils.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"AuthUtils.test.d.ts","sourceRoot":"","sources":["../../src/auth/AuthUtils.test.ts"],"names":[],"mappings":""}

package/dist/auth/AuthUtils.test.js

@@ -0,0 +1,469 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+const AuthUtils_1 = require("./AuthUtils");
+const app_sdk_1 = require("@zaiusinc/app-sdk");
+const TokenVerifier_1 = require("./TokenVerifier");
+// Mock the dependencies
+jest.mock('./TokenVerifier', () => ({
+    getTokenVerifier: jest.fn(),
+}));
+jest.mock('@zaiusinc/app-sdk', () => ({
+    getAppContext: jest.fn(),
+    logger: {
+        info: jest.fn(),
+        error: jest.fn(),
+        warn: jest.fn(),
+        debug: jest.fn(),
+    },
+}));
+describe('AuthUtils', () => {
+    let mockGetTokenVerifier;
+    let mockGetAppContext;
+    let mockTokenVerifier;
+    beforeEach(() => {
+        jest.clearAllMocks();
+        // Create mock token verifier
+        mockTokenVerifier = {
+            verify: jest.fn(),
+        };
+        // Setup the mocks
+        mockGetTokenVerifier = jest.mocked(TokenVerifier_1.getTokenVerifier);
+        mockGetAppContext = jest.mocked(app_sdk_1.getAppContext);
+        mockGetTokenVerifier.mockResolvedValue(mockTokenVerifier);
+        mockGetAppContext.mockReturnValue({
+            account: {
+                organizationId: 'app-org-123'
+            }
+        });
+    });
+    describe('validateAccessToken', () => {
+        it('should return true for valid token', async () => {
+            // Arrange
+            const validToken = 'valid-access-token';
+            mockTokenVerifier.verify.mockResolvedValue(true);
+            // Act
+            const result = await AuthUtils_1.AuthUtils.validateAccessToken(validToken);
+            // Assert
+            expect(result).toBe(true);
+            expect(mockGetTokenVerifier).toHaveBeenCalledTimes(1);
+            expect(mockTokenVerifier.verify).toHaveBeenCalledWith(validToken);
+            expect(app_sdk_1.logger.error).not.toHaveBeenCalled();
+        });
+        it('should return false for invalid token', async () => {
+            // Arrange
+            const invalidToken = 'invalid-access-token';
+            mockTokenVerifier.verify.mockResolvedValue(false);
+            // Act
+            const result = await AuthUtils_1.AuthUtils.validateAccessToken(invalidToken);
+            // Assert
+            expect(result).toBe(false);
+            expect(mockGetTokenVerifier).toHaveBeenCalledTimes(1);
+            expect(mockTokenVerifier.verify).toHaveBeenCalledWith(invalidToken);
+            expect(app_sdk_1.logger.error).not.toHaveBeenCalled();
+        });
+        it('should return false for undefined token', async () => {
+            // Act
+            const result = await AuthUtils_1.AuthUtils.validateAccessToken(undefined);
+            // Assert
+            expect(result).toBe(false);
+            expect(mockGetTokenVerifier).not.toHaveBeenCalled();
+            expect(mockTokenVerifier.verify).not.toHaveBeenCalled();
+            expect(app_sdk_1.logger.error).not.toHaveBeenCalled();
+        });
+        it('should return false for null token', async () => {
+            // Act
+            const result = await AuthUtils_1.AuthUtils.validateAccessToken(null);
+            // Assert
+            expect(result).toBe(false);
+            expect(mockGetTokenVerifier).not.toHaveBeenCalled();
+            expect(mockTokenVerifier.verify).not.toHaveBeenCalled();
+            expect(app_sdk_1.logger.error).not.toHaveBeenCalled();
+        });
+        it('should return false for empty string token', async () => {
+            // Act
+            const result = await AuthUtils_1.AuthUtils.validateAccessToken('');
+            // Assert
+            expect(result).toBe(false);
+            expect(mockGetTokenVerifier).not.toHaveBeenCalled();
+            expect(mockTokenVerifier.verify).not.toHaveBeenCalled();
+            expect(app_sdk_1.logger.error).not.toHaveBeenCalled();
+        });
+        it('should return false and log error when getTokenVerifier fails', async () => {
+            // Arrange
+            const validToken = 'valid-access-token';
+            const error = new Error('Failed to get token verifier');
+            mockGetTokenVerifier.mockRejectedValue(error);
+            // Act
+            const result = await AuthUtils_1.AuthUtils.validateAccessToken(validToken);
+            // Assert
+            expect(result).toBe(false);
+            expect(mockGetTokenVerifier).toHaveBeenCalledTimes(1);
+            expect(mockTokenVerifier.verify).not.toHaveBeenCalled();
+            expect(app_sdk_1.logger.error).toHaveBeenCalledWith('OptiID token validation failed:', error);
+        });
+        it('should return false and log error when token verification throws', async () => {
+            // Arrange
+            const validToken = 'valid-access-token';
+            const error = new Error('Token verification failed');
+            mockTokenVerifier.verify.mockRejectedValue(error);
+            // Act
+            const result = await AuthUtils_1.AuthUtils.validateAccessToken(validToken);
+            // Assert
+            expect(result).toBe(false);
+            expect(mockGetTokenVerifier).toHaveBeenCalledTimes(1);
+            expect(mockTokenVerifier.verify).toHaveBeenCalledWith(validToken);
+            expect(app_sdk_1.logger.error).toHaveBeenCalledWith('OptiID token validation failed:', error);
+        });
+        it('should handle whitespace-only token', async () => {
+            // Arrange
+            mockTokenVerifier.verify.mockResolvedValue(false);
+            // Act
+            const result = await AuthUtils_1.AuthUtils.validateAccessToken('   ');
+            // Assert - whitespace-only string should be treated as truthy and passed to verifier
+            expect(result).toBe(false);
+            expect(mockGetTokenVerifier).toHaveBeenCalledTimes(1);
+            expect(mockTokenVerifier.verify).toHaveBeenCalledWith('   ');
+        });
+    });
+    describe('extractAuthData', () => {
+        const createValidRequest = () => ({
+            bodyJSON: {
+                auth: {
+                    provider: 'OptiID',
+                    credentials: {
+                        access_token: 'valid-access-token',
+                        customer_id: 'org-123',
+                        instance_id: 'instance-456',
+                        product_sku: 'OPAL'
+                    }
+                }
+            }
+        });
+        it('should extract auth data successfully from valid request', () => {
+            // Arrange
+            const request = createValidRequest();
+            // Act
+            const result = AuthUtils_1.AuthUtils.extractAuthData(request);
+            // Assert
+            expect(result).not.toBeNull();
+            expect(result?.authData).toBe(request.bodyJSON.auth);
+            expect(result?.accessToken).toBe('valid-access-token');
+            expect(app_sdk_1.logger.error).not.toHaveBeenCalled();
+        });
+        it('should handle case-insensitive provider name', () => {
+            // Arrange
+            const request = createValidRequest();
+            request.bodyJSON.auth.provider = 'optiid'; // lowercase
+            // Act
+            const result = AuthUtils_1.AuthUtils.extractAuthData(request);
+            // Assert
+            expect(result).not.toBeNull();
+            expect(result?.authData).toBe(request.bodyJSON.auth);
+            expect(result?.accessToken).toBe('valid-access-token');
+            expect(app_sdk_1.logger.error).not.toHaveBeenCalled();
+        });
+        it('should handle mixed case provider name', () => {
+            // Arrange
+            const request = createValidRequest();
+            request.bodyJSON.auth.provider = 'OpTiId'; // mixed case
+            // Act
+            const result = AuthUtils_1.AuthUtils.extractAuthData(request);
+            // Assert
+            expect(result).not.toBeNull();
+            expect(result?.authData).toBe(request.bodyJSON.auth);
+            expect(result?.accessToken).toBe('valid-access-token');
+            expect(app_sdk_1.logger.error).not.toHaveBeenCalled();
+        });
+        it('should return null when access token is missing', () => {
+            // Arrange
+            const request = createValidRequest();
+            delete request.bodyJSON.auth.credentials.access_token;
+            // Act
+            const result = AuthUtils_1.AuthUtils.extractAuthData(request);
+            // Assert
+            expect(result).toBeNull();
+            expect(app_sdk_1.logger.error).toHaveBeenCalledWith('OptiID token is required but not provided');
+        });
+        it('should return null when access token is undefined', () => {
+            // Arrange
+            const request = createValidRequest();
+            request.bodyJSON.auth.credentials.access_token = undefined;
+            // Act
+            const result = AuthUtils_1.AuthUtils.extractAuthData(request);
+            // Assert
+            expect(result).toBeNull();
+            expect(app_sdk_1.logger.error).toHaveBeenCalledWith('OptiID token is required but not provided');
+        });
+        it('should return null when access token is empty string', () => {
+            // Arrange
+            const request = createValidRequest();
+            request.bodyJSON.auth.credentials.access_token = '';
+            // Act
+            const result = AuthUtils_1.AuthUtils.extractAuthData(request);
+            // Assert
+            expect(result).toBeNull();
+            expect(app_sdk_1.logger.error).toHaveBeenCalledWith('OptiID token is required but not provided');
+        });
+        it('should return null when provider is not OptiID', () => {
+            // Arrange
+            const request = createValidRequest();
+            request.bodyJSON.auth.provider = 'SomeOtherProvider';
+            // Act
+            const result = AuthUtils_1.AuthUtils.extractAuthData(request);
+            // Assert
+            expect(result).toBeNull();
+            expect(app_sdk_1.logger.error).toHaveBeenCalledWith('OptiID token is required but not provided');
+        });
+        it('should return null when provider is missing', () => {
+            // Arrange
+            const request = createValidRequest();
+            delete request.bodyJSON.auth.provider;
+            // Act
+            const result = AuthUtils_1.AuthUtils.extractAuthData(request);
+            // Assert
+            expect(result).toBeNull();
+            expect(app_sdk_1.logger.error).toHaveBeenCalledWith('OptiID token is required but not provided');
+        });
+        it('should return null when auth structure is missing', () => {
+            // Arrange
+            const request = {
+                bodyJSON: {
+                    parameters: { some: 'data' }
+                }
+            };
+            // Act
+            const result = AuthUtils_1.AuthUtils.extractAuthData(request);
+            // Assert
+            expect(result).toBeNull();
+            expect(app_sdk_1.logger.error).toHaveBeenCalledWith('OptiID token is required but not provided');
+        });
+        it('should return null when credentials structure is missing', () => {
+            // Arrange
+            const request = {
+                bodyJSON: {
+                    auth: {
+                        provider: 'OptiID'
+                    }
+                }
+            };
+            // Act
+            const result = AuthUtils_1.AuthUtils.extractAuthData(request);
+            // Assert
+            expect(result).toBeNull();
+            expect(app_sdk_1.logger.error).toHaveBeenCalledWith('OptiID token is required but not provided');
+        });
+        it('should return null when bodyJSON is missing', () => {
+            // Arrange
+            const request = {};
+            // Act
+            const result = AuthUtils_1.AuthUtils.extractAuthData(request);
+            // Assert
+            expect(result).toBeNull();
+            expect(app_sdk_1.logger.error).toHaveBeenCalledWith('OptiID token is required but not provided');
+        });
+        it('should return null when request is null', () => {
+            // Act
+            const result = AuthUtils_1.AuthUtils.extractAuthData(null);
+            // Assert
+            expect(result).toBeNull();
+            expect(app_sdk_1.logger.error).toHaveBeenCalledWith('OptiID token is required but not provided');
+        });
+        it('should return null when request is undefined', () => {
+            // Act
+            const result = AuthUtils_1.AuthUtils.extractAuthData(undefined);
+            // Assert
+            expect(result).toBeNull();
+            expect(app_sdk_1.logger.error).toHaveBeenCalledWith('OptiID token is required but not provided');
+        });
+    });
+    describe('validateOrganizationId', () => {
+        beforeEach(() => {
+            mockGetAppContext.mockReturnValue({
+                account: {
+                    organizationId: 'app-org-123'
+                }
+            });
+        });
+        it('should return true when customer ID matches app organization ID', () => {
+            // Act
+            const result = AuthUtils_1.AuthUtils.validateOrganizationId('app-org-123');
+            // Assert
+            expect(result).toBe(true);
+            expect(mockGetAppContext).toHaveBeenCalledTimes(1);
+            expect(app_sdk_1.logger.error).not.toHaveBeenCalled();
+        });
+        it('should return false when customer ID does not match app organization ID', () => {
+            // Act
+            const result = AuthUtils_1.AuthUtils.validateOrganizationId('different-org-456');
+            // Assert
+            expect(result).toBe(false);
+            expect(mockGetAppContext).toHaveBeenCalledTimes(1);
+            expect(app_sdk_1.logger.error).toHaveBeenCalledWith('Invalid organisation ID: expected app-org-123, received different-org-456');
+        });
+        it('should return false when customer ID is undefined', () => {
+            // Act
+            const result = AuthUtils_1.AuthUtils.validateOrganizationId(undefined);
+            // Assert
+            expect(result).toBe(false);
+            expect(mockGetAppContext).not.toHaveBeenCalled();
+            expect(app_sdk_1.logger.error).toHaveBeenCalledWith('Organisation ID is required but not provided');
+        });
+        it('should return false when customer ID is null', () => {
+            // Act
+            const result = AuthUtils_1.AuthUtils.validateOrganizationId(null);
+            // Assert
+            expect(result).toBe(false);
+            expect(mockGetAppContext).not.toHaveBeenCalled();
+            expect(app_sdk_1.logger.error).toHaveBeenCalledWith('Organisation ID is required but not provided');
+        });
+        it('should return false when customer ID is empty string', () => {
+            // Act
+            const result = AuthUtils_1.AuthUtils.validateOrganizationId('');
+            // Assert
+            expect(result).toBe(false);
+            expect(mockGetAppContext).not.toHaveBeenCalled();
+            expect(app_sdk_1.logger.error).toHaveBeenCalledWith('Organisation ID is required but not provided');
+        });
+        it('should handle case when app context has no account', () => {
+            // Arrange
+            mockGetAppContext.mockReturnValue({});
+            // Act
+            const result = AuthUtils_1.AuthUtils.validateOrganizationId('some-org-123');
+            // Assert
+            expect(result).toBe(false);
+            expect(mockGetAppContext).toHaveBeenCalledTimes(1);
+            expect(app_sdk_1.logger.error).toHaveBeenCalledWith('Invalid organisation ID: expected undefined, received some-org-123');
+        });
+        it('should handle case when app context account has no organizationId', () => {
+            // Arrange
+            mockGetAppContext.mockReturnValue({
+                account: {}
+            });
+            // Act
+            const result = AuthUtils_1.AuthUtils.validateOrganizationId('some-org-123');
+            // Assert
+            expect(result).toBe(false);
+            expect(mockGetAppContext).toHaveBeenCalledTimes(1);
+            expect(app_sdk_1.logger.error).toHaveBeenCalledWith('Invalid organisation ID: expected undefined, received some-org-123');
+        });
+        it('should handle case when app context is null', () => {
+            // Arrange
+            mockGetAppContext.mockReturnValue(null);
+            // Act
+            const result = AuthUtils_1.AuthUtils.validateOrganizationId('some-org-123');
+            // Assert
+            expect(result).toBe(false);
+            expect(mockGetAppContext).toHaveBeenCalledTimes(1);
+            expect(app_sdk_1.logger.error).toHaveBeenCalledWith('Invalid organisation ID: expected undefined, received some-org-123');
+        });
+        it('should be case-sensitive for organization ID matching', () => {
+            // Arrange
+            mockGetAppContext.mockReturnValue({
+                account: {
+                    organizationId: 'App-Org-123' // different case
+                }
+            });
+            // Act
+            const result = AuthUtils_1.AuthUtils.validateOrganizationId('app-org-123');
+            // Assert
+            expect(result).toBe(false);
+            expect(mockGetAppContext).toHaveBeenCalledTimes(1);
+            expect(app_sdk_1.logger.error).toHaveBeenCalledWith('Invalid organisation ID: expected App-Org-123, received app-org-123');
+        });
+        it('should handle whitespace-only customer ID', () => {
+            // Act
+            const result = AuthUtils_1.AuthUtils.validateOrganizationId('   ');
+            // Assert
+            expect(result).toBe(false);
+            expect(mockGetAppContext).toHaveBeenCalledTimes(1);
+            expect(app_sdk_1.logger.error).toHaveBeenCalledWith('Invalid organisation ID: expected app-org-123, received    ');
+        });
+    });
+    describe('integration scenarios', () => {
+        it('should handle complete authentication flow for valid request', async () => {
+            // Arrange
+            const request = {
+                bodyJSON: {
+                    auth: {
+                        provider: 'OptiID',
+                        credentials: {
+                            access_token: 'valid-access-token',
+                            customer_id: 'app-org-123',
+                            instance_id: 'instance-456',
+                            product_sku: 'OPAL'
+                        }
+                    }
+                }
+            };
+            mockGetAppContext.mockReturnValue({
+                account: {
+                    organizationId: 'app-org-123'
+                }
+            });
+            mockTokenVerifier.verify.mockResolvedValue(true);
+            // Act
+            const authInfo = AuthUtils_1.AuthUtils.extractAuthData(request);
+            const isValidOrg = authInfo
+                ? AuthUtils_1.AuthUtils.validateOrganizationId(authInfo.authData.credentials?.customer_id)
+                : false;
+            const isValidToken = authInfo ? await AuthUtils_1.AuthUtils.validateAccessToken(authInfo.accessToken) : false;
+            // Assert
+            expect(authInfo).not.toBeNull();
+            expect(isValidOrg).toBe(true);
+            expect(isValidToken).toBe(true);
+            expect(app_sdk_1.logger.error).not.toHaveBeenCalled();
+        });
+        it('should handle complete authentication flow for invalid provider', async () => {
+            // Arrange
+            const request = {
+                bodyJSON: {
+                    auth: {
+                        provider: 'SomeOtherProvider',
+                        credentials: {
+                            access_token: 'valid-access-token',
+                            customer_id: 'app-org-123',
+                            instance_id: 'instance-456',
+                            product_sku: 'OPAL'
+                        }
+                    }
+                }
+            };
+            // Act
+            const authInfo = AuthUtils_1.AuthUtils.extractAuthData(request);
+            // Assert
+            expect(authInfo).toBeNull();
+            expect(app_sdk_1.logger.error).toHaveBeenCalledWith('OptiID token is required but not provided');
+        });
+        it('should handle complete authentication flow for organization mismatch', async () => {
+            // Arrange
+            const request = {
+                bodyJSON: {
+                    auth: {
+                        provider: 'OptiID',
+                        credentials: {
+                            access_token: 'valid-access-token',
+                            customer_id: 'different-org-456',
+                            instance_id: 'instance-456',
+                            product_sku: 'OPAL'
+                        }
+                    }
+                }
+            };
+            mockGetAppContext.mockReturnValue({
+                account: {
+                    organizationId: 'app-org-123'
+                }
+            });
+            // Act
+            const authInfo = AuthUtils_1.AuthUtils.extractAuthData(request);
+            const isValidOrg = authInfo
+                ? AuthUtils_1.AuthUtils.validateOrganizationId(authInfo.authData.credentials?.customer_id)
+                : false;
+            // Assert
+            expect(authInfo).not.toBeNull();
+            expect(isValidOrg).toBe(false);
+            expect(app_sdk_1.logger.error).toHaveBeenCalledWith('Invalid organisation ID: expected app-org-123, received different-org-456');
+        });
+    });
+});
+//# sourceMappingURL=AuthUtils.test.js.map

package/dist/auth/AuthUtils.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"AuthUtils.test.js","sourceRoot":"","sources":["../../src/auth/AuthUtils.test.ts"],"names":[],"mappings":";;AAAA,2CAAwC;AACxC,+CAA0D;AAC1D,mDAAmD;AAGnD,wBAAwB;AACxB,IAAI,CAAC,IAAI,CAAC,iBAAiB,EAAE,GAAG,EAAE,CAAC,CAAC;IAClC,gBAAgB,EAAE,IAAI,CAAC,EAAE,EAAE;CAC5B,CAAC,CAAC,CAAC;AAEJ,IAAI,CAAC,IAAI,CAAC,mBAAmB,EAAE,GAAG,EAAE,CAAC,CAAC;IACpC,aAAa,EAAE,IAAI,CAAC,EAAE,EAAE;IACxB,MAAM,EAAE;QACN,IAAI,EAAE,IAAI,CAAC,EAAE,EAAE;QACf,KAAK,EAAE,IAAI,CAAC,EAAE,EAAE;QAChB,IAAI,EAAE,IAAI,CAAC,EAAE,EAAE;QACf,KAAK,EAAE,IAAI,CAAC,EAAE,EAAE;KACjB;CACF,CAAC,CAAC,CAAC;AAEJ,QAAQ,CAAC,WAAW,EAAE,GAAG,EAAE;IACzB,IAAI,oBAAkE,CAAC;IACvE,IAAI,iBAA4D,CAAC;IACjE,IAAI,iBAEF,CAAC;IAEH,UAAU,CAAC,GAAG,EAAE;QACd,IAAI,CAAC,aAAa,EAAE,CAAC;QAErB,6BAA6B;QAC7B,iBAAiB,GAAG;YAClB,MAAM,EAAE,IAAI,CAAC,EAAE,EAAE;SAClB,CAAC;QAEF,kBAAkB;QAClB,oBAAoB,GAAG,IAAI,CAAC,MAAM,CAAC,gCAAgB,CAAC,CAAC;QACrD,iBAAiB,GAAG,IAAI,CAAC,MAAM,CAAC,uBAAa,CAAC,CAAC;QAE/C,oBAAoB,CAAC,iBAAiB,CAAC,iBAAwB,CAAC,CAAC;QACjE,iBAAiB,CAAC,eAAe,CAAC;YAChC,OAAO,EAAE;gBACP,cAAc,EAAE,aAAa;aAC9B;SACK,CAAC,CAAC;IACZ,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,qBAAqB,EAAE,GAAG,EAAE;QACnC,EAAE,CAAC,oCAAoC,EAAE,KAAK,IAAI,EAAE;YAClD,UAAU;YACV,MAAM,UAAU,GAAG,oBAAoB,CAAC;YACxC,iBAAiB,CAAC,MAAM,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC;YAEjD,MAAM;YACN,MAAM,MAAM,GAAG,MAAM,qBAAS,CAAC,mBAAmB,CAAC,UAAU,CAAC,CAAC;YAE/D,SAAS;YACT,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAC1B,MAAM,CAAC,oBAAoB,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC;YACtD,MAAM,CAAC,iBAAiB,CAAC,MAAM,CAAC,CAAC,oBAAoB,CAAC,UAAU,CAAC,CAAC;YAClE,MAAM,CAAC,gBAAM,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;QAC9C,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,uCAAuC,EAAE,KAAK,IAAI,EAAE;YACrD,UAAU;YACV,MAAM,YAAY,GAAG,sBAAsB,CAAC;YAC5C,iBAAiB,CAAC,MAAM,CAAC,iBAAiB,CAAC,KAAK,CAAC,CAAC;YAElD,MAAM;YACN,MAAM,MAAM,GAAG,MAAM,qBAAS,CAAC,mBAAmB,CAAC,YAAY,CAAC,CAAC;YAEjE,SAAS;YACT,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YAC3B,MAAM,CAAC,oBAAoB,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC;YACtD,MAAM,CAAC,iBAAiB,CAAC,MAAM,CAAC,CAAC,oBAAoB,CAAC,YAAY,CAAC,CAAC;YACpE,MAAM,CAAC,gBAAM,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;QAC9C,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,yCAAyC,EAAE,KAAK,IAAI,EAAE;YACvD,MAAM;YACN,MAAM,MAAM,GAAG,MAAM,qBAAS,CAAC,mBAAmB,CAAC,SAAS,CAAC,CAAC;YAE9D,SAAS;YACT,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YAC3B,MAAM,CAAC,oBAAoB,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;YACpD,MAAM,CAAC,iBAAiB,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;YACxD,MAAM,CAAC,gBAAM,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;QAC9C,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,oCAAoC,EAAE,KAAK,IAAI,EAAE;YAClD,MAAM;YACN,MAAM,MAAM,GAAG,MAAM,qBAAS,CAAC,mBAAmB,CAAC,IAAW,CAAC,CAAC;YAEhE,SAAS;YACT,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YAC3B,MAAM,CAAC,oBAAoB,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;YACpD,MAAM,CAAC,iBAAiB,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;YACxD,MAAM,CAAC,gBAAM,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;QAC9C,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,4CAA4C,EAAE,KAAK,IAAI,EAAE;YAC1D,MAAM;YACN,MAAM,MAAM,GAAG,MAAM,qBAAS,CAAC,mBAAmB,CAAC,EAAE,CAAC,CAAC;YAEvD,SAAS;YACT,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YAC3B,MAAM,CAAC,oBAAoB,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;YACpD,MAAM,CAAC,iBAAiB,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;YACxD,MAAM,CAAC,gBAAM,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;QAC9C,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,+DAA+D,EAAE,KAAK,IAAI,EAAE;YAC7E,UAAU;YACV,MAAM,UAAU,GAAG,oBAAoB,CAAC;YACxC,MAAM,KAAK,GAAG,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAC;YACxD,oBAAoB,CAAC,iBAAiB,CAAC,KAAK,CAAC,CAAC;YAE9C,MAAM;YACN,MAAM,MAAM,GAAG,MAAM,qBAAS,CAAC,mBAAmB,CAAC,UAAU,CAAC,CAAC;YAE/D,SAAS;YACT,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YAC3B,MAAM,CAAC,oBAAoB,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC;YACtD,MAAM,CAAC,iBAAiB,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;YACxD,MAAM,CAAC,gBAAM,CAAC,KAAK,CAAC,CAAC,oBAAoB,CAAC,iCAAiC,EAAE,KAAK,CAAC,CAAC;QACtF,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,kEAAkE,EAAE,KAAK,IAAI,EAAE;YAChF,UAAU;YACV,MAAM,UAAU,GAAG,oBAAoB,CAAC;YACxC,MAAM,KAAK,GAAG,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAC;YACrD,iBAAiB,CAAC,MAAM,CAAC,iBAAiB,CAAC,KAAK,CAAC,CAAC;YAElD,MAAM;YACN,MAAM,MAAM,GAAG,MAAM,qBAAS,CAAC,mBAAmB,CAAC,UAAU,CAAC,CAAC;YAE/D,SAAS;YACT,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YAC3B,MAAM,CAAC,oBAAoB,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC;YACtD,MAAM,CAAC,iBAAiB,CAAC,MAAM,CAAC,CAAC,oBAAoB,CAAC,UAAU,CAAC,CAAC;YAClE,MAAM,CAAC,gBAAM,CAAC,KAAK,CAAC,CAAC,oBAAoB,CAAC,iCAAiC,EAAE,KAAK,CAAC,CAAC;QACtF,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,qCAAqC,EAAE,KAAK,IAAI,EAAE;YACnD,UAAU;YACV,iBAAiB,CAAC,MAAM,CAAC,iBAAiB,CAAC,KAAK,CAAC,CAAC;YAElD,MAAM;YACN,MAAM,MAAM,GAAG,MAAM,qBAAS,CAAC,mBAAmB,CAAC,KAAK,CAAC,CAAC;YAE1D,qFAAqF;YACrF,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YAC3B,MAAM,CAAC,oBAAoB,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC;YACtD,MAAM,CAAC,iBAAiB,CAAC,MAAM,CAAC,CAAC,oBAAoB,CAAC,KAAK,CAAC,CAAC;QAC/D,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,iBAAiB,EAAE,GAAG,EAAE;QAC/B,MAAM,kBAAkB,GAAG,GAAQ,EAAE,CAAC,CAAC;YACrC,QAAQ,EAAE;gBACR,IAAI,EAAE;oBACJ,QAAQ,EAAE,QAAQ;oBAClB,WAAW,EAAE;wBACX,YAAY,EAAE,oBAAoB;wBAClC,WAAW,EAAE,SAAS;wBACtB,WAAW,EAAE,cAAc;wBAC3B,WAAW,EAAE,MAAM;qBACpB;iBACgB;aACpB;SACF,CAAC,CAAC;QAEH,EAAE,CAAC,0DAA0D,EAAE,GAAG,EAAE;YAClE,UAAU;YACV,MAAM,OAAO,GAAG,kBAAkB,EAAE,CAAC;YAErC,MAAM;YACN,MAAM,MAAM,GAAG,qBAAS,CAAC,eAAe,CAAC,OAAO,CAAC,CAAC;YAElD,SAAS;YACT,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC;YAC9B,MAAM,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;YACrD,MAAM,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAC;YACvD,MAAM,CAAC,gBAAM,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;QAC9C,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,8CAA8C,EAAE,GAAG,EAAE;YACtD,UAAU;YACV,MAAM,OAAO,GAAG,kBAAkB,EAAE,CAAC;YACrC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAC,CAAC,YAAY;YAEvD,MAAM;YACN,MAAM,MAAM,GAAG,qBAAS,CAAC,eAAe,CAAC,OAAO,CAAC,CAAC;YAElD,SAAS;YACT,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC;YAC9B,MAAM,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;YACrD,MAAM,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAC;YACvD,MAAM,CAAC,gBAAM,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;QAC9C,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,wCAAwC,EAAE,GAAG,EAAE;YAChD,UAAU;YACV,MAAM,OAAO,GAAG,kBAAkB,EAAE,CAAC;YACrC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAC,CAAC,aAAa;YAExD,MAAM;YACN,MAAM,MAAM,GAAG,qBAAS,CAAC,eAAe,CAAC,OAAO,CAAC,CAAC;YAElD,SAAS;YACT,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC;YAC9B,MAAM,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;YACrD,MAAM,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAC;YACvD,MAAM,CAAC,gBAAM,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;QAC9C,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,iDAAiD,EAAE,GAAG,EAAE;YACzD,UAAU;YACV,MAAM,OAAO,GAAG,kBAAkB,EAAE,CAAC;YACrC,OAAO,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,WAAW,CAAC,YAAY,CAAC;YAEtD,MAAM;YACN,MAAM,MAAM,GAAG,qBAAS,CAAC,eAAe,CAAC,OAAO,CAAC,CAAC;YAElD,SAAS;YACT,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,EAAE,CAAC;YAC1B,MAAM,CAAC,gBAAM,CAAC,KAAK,CAAC,CAAC,oBAAoB,CAAC,2CAA2C,CAAC,CAAC;QACzF,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,mDAAmD,EAAE,GAAG,EAAE;YAC3D,UAAU;YACV,MAAM,OAAO,GAAG,kBAAkB,EAAE,CAAC;YACrC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,WAAW,CAAC,YAAY,GAAG,SAAS,CAAC;YAE3D,MAAM;YACN,MAAM,MAAM,GAAG,qBAAS,CAAC,eAAe,CAAC,OAAO,CAAC,CAAC;YAElD,SAAS;YACT,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,EAAE,CAAC;YAC1B,MAAM,CAAC,gBAAM,CAAC,KAAK,CAAC,CAAC,oBAAoB,CAAC,2CAA2C,CAAC,CAAC;QACzF,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,sDAAsD,EAAE,GAAG,EAAE;YAC9D,UAAU;YACV,MAAM,OAAO,GAAG,kBAAkB,EAAE,CAAC;YACrC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,WAAW,CAAC,YAAY,GAAG,EAAE,CAAC;YAEpD,MAAM;YACN,MAAM,MAAM,GAAG,qBAAS,CAAC,eAAe,CAAC,OAAO,CAAC,CAAC;YAElD,SAAS;YACT,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,EAAE,CAAC;YAC1B,MAAM,CAAC,gBAAM,CAAC,KAAK,CAAC,CAAC,oBAAoB,CAAC,2CAA2C,CAAC,CAAC;QACzF,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,gDAAgD,EAAE,GAAG,EAAE;YACxD,UAAU;YACV,MAAM,OAAO,GAAG,kBAAkB,EAAE,CAAC;YACrC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,QAAQ,GAAG,mBAAmB,CAAC;YAErD,MAAM;YACN,MAAM,MAAM,GAAG,qBAAS,CAAC,eAAe,CAAC,OAAO,CAAC,CAAC;YAElD,SAAS;YACT,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,EAAE,CAAC;YAC1B,MAAM,CAAC,gBAAM,CAAC,KAAK,CAAC,CAAC,oBAAoB,CAAC,2CAA2C,CAAC,CAAC;QACzF,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,6CAA6C,EAAE,GAAG,EAAE;YACrD,UAAU;YACV,MAAM,OAAO,GAAG,kBAAkB,EAAE,CAAC;YACrC,OAAO,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC;YAEtC,MAAM;YACN,MAAM,MAAM,GAAG,qBAAS,CAAC,eAAe,CAAC,OAAO,CAAC,CAAC;YAElD,SAAS;YACT,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,EAAE,CAAC;YAC1B,MAAM,CAAC,gBAAM,CAAC,KAAK,CAAC,CAAC,oBAAoB,CAAC,2CAA2C,CAAC,CAAC;QACzF,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,mDAAmD,EAAE,GAAG,EAAE;YAC3D,UAAU;YACV,MAAM,OAAO,GAAG;gBACd,QAAQ,EAAE;oBACR,UAAU,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE;iBAC7B;aACF,CAAC;YAEF,MAAM;YACN,MAAM,MAAM,GAAG,qBAAS,CAAC,eAAe,CAAC,OAAO,CAAC,CAAC;YAElD,SAAS;YACT,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,EAAE,CAAC;YAC1B,MAAM,CAAC,gBAAM,CAAC,KAAK,CAAC,CAAC,oBAAoB,CAAC,2CAA2C,CAAC,CAAC;QACzF,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,0DAA0D,EAAE,GAAG,EAAE;YAClE,UAAU;YACV,MAAM,OAAO,GAAG;gBACd,QAAQ,EAAE;oBACR,IAAI,EAAE;wBACJ,QAAQ,EAAE,QAAQ;qBACnB;iBACF;aACF,CAAC;YAEF,MAAM;YACN,MAAM,MAAM,GAAG,qBAAS,CAAC,eAAe,CAAC,OAAO,CAAC,CAAC;YAElD,SAAS;YACT,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,EAAE,CAAC;YAC1B,MAAM,CAAC,gBAAM,CAAC,KAAK,CAAC,CAAC,oBAAoB,CAAC,2CAA2C,CAAC,CAAC;QACzF,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,6CAA6C,EAAE,GAAG,EAAE;YACrD,UAAU;YACV,MAAM,OAAO,GAAG,EAAE,CAAC;YAEnB,MAAM;YACN,MAAM,MAAM,GAAG,qBAAS,CAAC,eAAe,CAAC,OAAO,CAAC,CAAC;YAElD,SAAS;YACT,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,EAAE,CAAC;YAC1B,MAAM,CAAC,gBAAM,CAAC,KAAK,CAAC,CAAC,oBAAoB,CAAC,2CAA2C,CAAC,CAAC;QACzF,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,yCAAyC,EAAE,GAAG,EAAE;YACjD,MAAM;YACN,MAAM,MAAM,GAAG,qBAAS,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC;YAE/C,SAAS;YACT,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,EAAE,CAAC;YAC1B,MAAM,CAAC,gBAAM,CAAC,KAAK,CAAC,CAAC,oBAAoB,CAAC,2CAA2C,CAAC,CAAC;QACzF,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,8CAA8C,EAAE,GAAG,EAAE;YACtD,MAAM;YACN,MAAM,MAAM,GAAG,qBAAS,CAAC,eAAe,CAAC,SAAS,CAAC,CAAC;YAEpD,SAAS;YACT,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,EAAE,CAAC;YAC1B,MAAM,CAAC,gBAAM,CAAC,KAAK,CAAC,CAAC,oBAAoB,CAAC,2CAA2C,CAAC,CAAC;QACzF,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,wBAAwB,EAAE,GAAG,EAAE;QACtC,UAAU,CAAC,GAAG,EAAE;YACd,iBAAiB,CAAC,eAAe,CAAC;gBAChC,OAAO,EAAE;oBACP,cAAc,EAAE,aAAa;iBAC9B;aACK,CAAC,CAAC;QACZ,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,iEAAiE,EAAE,GAAG,EAAE;YACzE,MAAM;YACN,MAAM,MAAM,GAAG,qBAAS,CAAC,sBAAsB,CAAC,aAAa,CAAC,CAAC;YAE/D,SAAS;YACT,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAC1B,MAAM,CAAC,iBAAiB,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC;YACnD,MAAM,CAAC,gBAAM,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;QAC9C,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,yEAAyE,EAAE,GAAG,EAAE;YACjF,MAAM;YACN,MAAM,MAAM,GAAG,qBAAS,CAAC,sBAAsB,CAAC,mBAAmB,CAAC,CAAC;YAErE,SAAS;YACT,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YAC3B,MAAM,CAAC,iBAAiB,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC;YACnD,MAAM,CAAC,gBAAM,CAAC,KAAK,CAAC,CAAC,oBAAoB,CACvC,2EAA2E,CAC5E,CAAC;QACJ,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,mDAAmD,EAAE,GAAG,EAAE;YAC3D,MAAM;YACN,MAAM,MAAM,GAAG,qBAAS,CAAC,sBAAsB,CAAC,SAAS,CAAC,CAAC;YAE3D,SAAS;YACT,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YAC3B,MAAM,CAAC,iBAAiB,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;YACjD,MAAM,CAAC,gBAAM,CAAC,KAAK,CAAC,CAAC,oBAAoB,CAAC,8CAA8C,CAAC,CAAC;QAC5F,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,8CAA8C,EAAE,GAAG,EAAE;YACtD,MAAM;YACN,MAAM,MAAM,GAAG,qBAAS,CAAC,sBAAsB,CAAC,IAAW,CAAC,CAAC;YAE7D,SAAS;YACT,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YAC3B,MAAM,CAAC,iBAAiB,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;YACjD,MAAM,CAAC,gBAAM,CAAC,KAAK,CAAC,CAAC,oBAAoB,CAAC,8CAA8C,CAAC,CAAC;QAC5F,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,sDAAsD,EAAE,GAAG,EAAE;YAC9D,MAAM;YACN,MAAM,MAAM,GAAG,qBAAS,CAAC,sBAAsB,CAAC,EAAE,CAAC,CAAC;YAEpD,SAAS;YACT,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YAC3B,MAAM,CAAC,iBAAiB,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;YACjD,MAAM,CAAC,gBAAM,CAAC,KAAK,CAAC,CAAC,oBAAoB,CAAC,8CAA8C,CAAC,CAAC;QAC5F,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,oDAAoD,EAAE,GAAG,EAAE;YAC5D,UAAU;YACV,iBAAiB,CAAC,eAAe,CAAC,EAAS,CAAC,CAAC;YAE7C,MAAM;YACN,MAAM,MAAM,GAAG,qBAAS,CAAC,sBAAsB,CAAC,cAAc,CAAC,CAAC;YAEhE,SAAS;YACT,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YAC3B,MAAM,CAAC,iBAAiB,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC;YACnD,MAAM,CAAC,gBAAM,CAAC,KAAK,CAAC,CAAC,oBAAoB,CACvC,oEAAoE,CACrE,CAAC;QACJ,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,mEAAmE,EAAE,GAAG,EAAE;YAC3E,UAAU;YACV,iBAAiB,CAAC,eAAe,CAAC;gBAChC,OAAO,EAAE,EAAE;aACL,CAAC,CAAC;YAEV,MAAM;YACN,MAAM,MAAM,GAAG,qBAAS,CAAC,sBAAsB,CAAC,cAAc,CAAC,CAAC;YAEhE,SAAS;YACT,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YAC3B,MAAM,CAAC,iBAAiB,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC;YACnD,MAAM,CAAC,gBAAM,CAAC,KAAK,CAAC,CAAC,oBAAoB,CACvC,oEAAoE,CACrE,CAAC;QACJ,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,6CAA6C,EAAE,GAAG,EAAE;YACrD,UAAU;YACV,iBAAiB,CAAC,eAAe,CAAC,IAAW,CAAC,CAAC;YAE/C,MAAM;YACN,MAAM,MAAM,GAAG,qBAAS,CAAC,sBAAsB,CAAC,cAAc,CAAC,CAAC;YAEhE,SAAS;YACT,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YAC3B,MAAM,CAAC,iBAAiB,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC;YACnD,MAAM,CAAC,gBAAM,CAAC,KAAK,CAAC,CAAC,oBAAoB,CACvC,oEAAoE,CACrE,CAAC;QACJ,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,uDAAuD,EAAE,GAAG,EAAE;YAC/D,UAAU;YACV,iBAAiB,CAAC,eAAe,CAAC;gBAChC,OAAO,EAAE;oBACP,cAAc,EAAE,aAAa,CAAC,iBAAiB;iBAChD;aACK,CAAC,CAAC;YAEV,MAAM;YACN,MAAM,MAAM,GAAG,qBAAS,CAAC,sBAAsB,CAAC,aAAa,CAAC,CAAC;YAE/D,SAAS;YACT,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YAC3B,MAAM,CAAC,iBAAiB,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC;YACnD,MAAM,CAAC,gBAAM,CAAC,KAAK,CAAC,CAAC,oBAAoB,CACvC,qEAAqE,CACtE,CAAC;QACJ,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,2CAA2C,EAAE,GAAG,EAAE;YACnD,MAAM;YACN,MAAM,MAAM,GAAG,qBAAS,CAAC,sBAAsB,CAAC,KAAK,CAAC,CAAC;YAEvD,SAAS;YACT,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YAC3B,MAAM,CAAC,iBAAiB,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC;YACnD,MAAM,CAAC,gBAAM,CAAC,KAAK,CAAC,CAAC,oBAAoB,CACvC,6DAA6D,CAC9D,CAAC;QACJ,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,uBAAuB,EAAE,GAAG,EAAE;QACrC,EAAE,CAAC,8DAA8D,EAAE,KAAK,IAAI,EAAE;YAC5E,UAAU;YACV,MAAM,OAAO,GAAG;gBACd,QAAQ,EAAE;oBACR,IAAI,EAAE;wBACJ,QAAQ,EAAE,QAAQ;wBAClB,WAAW,EAAE;4BACX,YAAY,EAAE,oBAAoB;4BAClC,WAAW,EAAE,aAAa;4BAC1B,WAAW,EAAE,cAAc;4BAC3B,WAAW,EAAE,MAAM;yBACpB;qBACgB;iBACpB;aACF,CAAC;YAEF,iBAAiB,CAAC,eAAe,CAAC;gBAChC,OAAO,EAAE;oBACP,cAAc,EAAE,aAAa;iBAC9B;aACK,CAAC,CAAC;YAEV,iBAAiB,CAAC,MAAM,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC;YAEjD,MAAM;YACN,MAAM,QAAQ,GAAG,qBAAS,CAAC,eAAe,CAAC,OAAO,CAAC,CAAC;YACpD,MAAM,UAAU,GAAG,QAAQ;gBACzB,CAAC,CAAC,qBAAS,CAAC,sBAAsB,CAAC,QAAQ,CAAC,QAAQ,CAAC,WAAW,EAAE,WAAW,CAAC;gBAC9E,CAAC,CAAC,KAAK,CAAC;YACV,MAAM,YAAY,GAAG,QAAQ,CAAC,CAAC,CAAC,MAAM,qBAAS,CAAC,mBAAmB,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;YAElG,SAAS;YACT,MAAM,CAAC,QAAQ,CAAC,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC;YAChC,MAAM,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAC9B,MAAM,CAAC,YAAY,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAChC,MAAM,CAAC,gBAAM,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;QAC9C,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,iEAAiE,EAAE,KAAK,IAAI,EAAE;YAC/E,UAAU;YACV,MAAM,OAAO,GAAG;gBACd,QAAQ,EAAE;oBACR,IAAI,EAAE;wBACJ,QAAQ,EAAE,mBAAmB;wBAC7B,WAAW,EAAE;4BACX,YAAY,EAAE,oBAAoB;4BAClC,WAAW,EAAE,aAAa;4BAC1B,WAAW,EAAE,cAAc;4BAC3B,WAAW,EAAE,MAAM;yBACpB;qBACgB;iBACpB;aACF,CAAC;YAEF,MAAM;YACN,MAAM,QAAQ,GAAG,qBAAS,CAAC,eAAe,CAAC,OAAO,CAAC,CAAC;YAEpD,SAAS;YACT,MAAM,CAAC,QAAQ,CAAC,CAAC,QAAQ,EAAE,CAAC;YAC5B,MAAM,CAAC,gBAAM,CAAC,KAAK,CAAC,CAAC,oBAAoB,CAAC,2CAA2C,CAAC,CAAC;QACzF,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,sEAAsE,EAAE,KAAK,IAAI,EAAE;YACpF,UAAU;YACV,MAAM,OAAO,GAAG;gBACd,QAAQ,EAAE;oBACR,IAAI,EAAE;wBACJ,QAAQ,EAAE,QAAQ;wBAClB,WAAW,EAAE;4BACX,YAAY,EAAE,oBAAoB;4BAClC,WAAW,EAAE,mBAAmB;4BAChC,WAAW,EAAE,cAAc;4BAC3B,WAAW,EAAE,MAAM;yBACpB;qBACgB;iBACpB;aACF,CAAC;YAEF,iBAAiB,CAAC,eAAe,CAAC;gBAChC,OAAO,EAAE;oBACP,cAAc,EAAE,aAAa;iBAC9B;aACK,CAAC,CAAC;YAEV,MAAM;YACN,MAAM,QAAQ,GAAG,qBAAS,CAAC,eAAe,CAAC,OAAO,CAAC,CAAC;YACpD,MAAM,UAAU,GAAG,QAAQ;gBACzB,CAAC,CAAC,qBAAS,CAAC,sBAAsB,CAAC,QAAQ,CAAC,QAAQ,CAAC,WAAW,EAAE,WAAW,CAAC;gBAC9E,CAAC,CAAC,KAAK,CAAC;YAEV,SAAS;YACT,MAAM,CAAC,QAAQ,CAAC,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC;YAChC,MAAM,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YAC/B,MAAM,CAAC,gBAAM,CAAC,KAAK,CAAC,CAAC,oBAAoB,CACvC,2EAA2E,CAC5E,CAAC;QACJ,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/auth/TokenVerifier.d.ts

@@ -0,0 +1,31 @@
+export declare class TokenVerifier {
+    private static instance;
+    private jwksUri?;
+    private issuer?;
+    private jwks?;
+    private initialized;
+    /**
+     * Verify the provided Optimizely JWT token string
+     * @param token JWT token string to verify
+     * @returns boolean true if verification successful, false otherwise
+     * @throws Error if token is null, empty, or verifier is not properly configured
+     */
+    verify(token: string | undefined): Promise<boolean>;
+    private static getInstance;
+    /**
+     * Get singleton instance of TokenVerifier and ensure it's initialized
+     * @returns Promise<TokenVerifier> - initialized singleton instance
+     */
+    static getInitializedInstance(): Promise<TokenVerifier>;
+    /**
+     * Initialize the TokenVerifier with discovery document from well-known endpoint
+     */
+    private initialize;
+    /**
+     * Fetch discovery document from well-known endpoint
+     */
+    private fetchDiscoveryDocument;
+    private verifyToken;
+}
+export declare const getTokenVerifier: () => Promise<TokenVerifier>;
+//# sourceMappingURL=TokenVerifier.d.ts.map

package/dist/auth/TokenVerifier.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"TokenVerifier.d.ts","sourceRoot":"","sources":["../../src/auth/TokenVerifier.ts"],"names":[],"mappings":"AAkCA,qBAAa,aAAa;IACxB,OAAO,CAAC,MAAM,CAAC,QAAQ,CAA8B;IACrD,OAAO,CAAC,OAAO,CAAC,CAAS;IACzB,OAAO,CAAC,MAAM,CAAC,CAAS;IACxB,OAAO,CAAC,IAAI,CAAC,CAAwC;IACrD,OAAO,CAAC,WAAW,CAAkB;IAErC;;;;;OAKG;IACU,MAAM,CAAC,KAAK,EAAE,MAAM,GAAG,SAAS,GAAG,OAAO,CAAC,OAAO,CAAC;IAQhE,OAAO,CAAC,MAAM,CAAC,WAAW;IAO1B;;;OAGG;WACiB,sBAAsB,IAAI,OAAO,CAAC,aAAa,CAAC;IAQpE;;OAEG;YACW,UAAU;IAyBxB;;OAEG;YACW,sBAAsB;YAetB,WAAW;CAsB1B;AAED,eAAO,MAAM,gBAAgB,QAAa,OAAO,CAAC,aAAa,CAA2C,CAAC"}