@owlmeans/server-auth 0.1.0

package/build/manager/plugins/types.d.ts

@@ -0,0 +1,25 @@
+import type { AllowanceResponse } from '@owlmeans/auth';
+import type { AuthModel } from '../types.js';
+import type { AbstractRequest } from '@owlmeans/module';
+import type { RedisResource } from '@owlmeans/redis-resource';
+import type { ResourceRecord } from '@owlmeans/resource';
+export interface AuthPlugin extends Omit<AuthModel, "rely"> {
+    type: string;
+}
+export interface RecpatchaResponse {
+    success: boolean;
+    challenge_ts: number;
+    hostname: string;
+    'error-codes'?: string[];
+}
+export interface RecaptchaRequest extends AbstractRequest<{
+    secret: string;
+    response: string;
+    remoteip?: string;
+}> {
+}
+export interface RelyRecord extends ResourceRecord, AllowanceResponse {
+}
+export interface AuthRedisResource extends RedisResource<RelyRecord> {
+}
+//# sourceMappingURL=types.d.ts.map

package/build/manager/plugins/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../src/manager/plugins/types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,gBAAgB,CAAA;AACvD,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,aAAa,CAAA;AAC5C,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAA;AACvD,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,0BAA0B,CAAA;AAC7D,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAA;AAExD,MAAM,WAAW,UAAW,SAAQ,IAAI,CAAC,SAAS,EAAE,MAAM,CAAC;IACzD,IAAI,EAAE,MAAM,CAAA;CACb;AAED,MAAM,WAAW,iBAAiB;IAChC,OAAO,EAAE,OAAO,CAAA;IAChB,YAAY,EAAE,MAAM,CAAA;IACpB,QAAQ,EAAE,MAAM,CAAA;IAChB,aAAa,CAAC,EAAE,MAAM,EAAE,CAAA;CACzB;AAED,MAAM,WAAW,gBAAiB,SAAQ,eAAe,CAAC;IACxD,MAAM,EAAE,MAAM,CAAA;IACd,QAAQ,EAAE,MAAM,CAAA;IAChB,QAAQ,CAAC,EAAE,MAAM,CAAA;CAClB,CAAC;CAAI;AAEN,MAAM,WAAW,UAAW,SAAQ,cAAc,EAAE,iBAAiB;CACpE;AAED,MAAM,WAAW,iBAAkB,SAAQ,aAAa,CAAC,UAAU,CAAC;CAAG"}

package/build/manager/plugins/types.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=types.js.map

package/build/manager/plugins/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../../src/manager/plugins/types.ts"],"names":[],"mappings":""}

package/build/manager/plugins/utils.d.ts

@@ -0,0 +1,8 @@
+import type { AuthPlugin } from './types.js';
+import type { AppContext, AppConfig } from '../types.js';
+export declare const assertType: (type: string, plugin: AuthPlugin) => void;
+/**
+ * @throws {AuthUnknown}
+ */
+export declare const getPlugin: (type: string, context: AppContext<AppConfig>) => AuthPlugin;
+//# sourceMappingURL=utils.d.ts.map

package/build/manager/plugins/utils.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"utils.d.ts","sourceRoot":"","sources":["../../../src/manager/plugins/utils.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,YAAY,CAAA;AAE5C,OAAO,KAAK,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,aAAa,CAAA;AAExD,eAAO,MAAM,UAAU,SAAU,MAAM,UAAU,UAAU,SAI1D,CAAA;AAED;;GAEG;AACH,eAAO,MAAM,SAAS,SAAU,MAAM,WAAW,UAAU,CAAC,SAAS,CAAC,KAAG,UAMxE,CAAA"}

package/build/manager/plugins/utils.js

@@ -0,0 +1,18 @@
+import { AuthUnknown, TypeMissmatchError } from '@owlmeans/auth';
+import { plugins } from './index.js';
+export const assertType = (type, plugin) => {
+    if (type !== plugin.type) {
+        throw new TypeMissmatchError(plugin.type);
+    }
+};
+/**
+ * @throws {AuthUnknown}
+ */
+export const getPlugin = (type, context) => {
+    const plugin = plugins[type];
+    if (plugin == null) {
+        throw new AuthUnknown(type);
+    }
+    return plugins[type](context);
+};
+//# sourceMappingURL=utils.js.map

package/build/manager/plugins/utils.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"utils.js","sourceRoot":"","sources":["../../../src/manager/plugins/utils.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,kBAAkB,EAAE,MAAM,gBAAgB,CAAA;AAEhE,OAAO,EAAE,OAAO,EAAE,MAAM,YAAY,CAAA;AAGpC,MAAM,CAAC,MAAM,UAAU,GAAG,CAAC,IAAY,EAAE,MAAkB,EAAE,EAAE;IAC7D,IAAI,IAAI,KAAK,MAAM,CAAC,IAAI,EAAE,CAAC;QACzB,MAAM,IAAI,kBAAkB,CAAC,MAAM,CAAC,IAAI,CAAC,CAAA;IAC3C,CAAC;AACH,CAAC,CAAA;AAED;;GAEG;AACH,MAAM,CAAC,MAAM,SAAS,GAAG,CAAC,IAAY,EAAE,OAA8B,EAAc,EAAE;IACpF,MAAM,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IAC5B,IAAI,MAAM,IAAI,IAAI,EAAE,CAAC;QACnB,MAAM,IAAI,WAAW,CAAC,IAAI,CAAC,CAAA;IAC7B,CAAC;IACD,OAAO,OAAO,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,CAAA;AAC/B,CAAC,CAAA"}

package/build/manager/rely/flow.d.ts

@@ -0,0 +1,5 @@
+import type { Auth } from '@owlmeans/auth';
+import type { AuthenticateMethod, Connection } from '@owlmeans/socket';
+import type { AppContext } from '../types.js';
+export declare const createRelyFlow: (context: AppContext, conn: Connection, auth?: Auth | null) => AuthenticateMethod;
+//# sourceMappingURL=flow.d.ts.map

package/build/manager/rely/flow.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"flow.d.ts","sourceRoot":"","sources":["../../../src/manager/rely/flow.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAoB,IAAI,EAA8B,MAAM,gBAAgB,CAAA;AAExF,OAAO,KAAK,EAAE,kBAAkB,EAAE,UAAU,EAAyB,MAAM,kBAAkB,CAAA;AAE7F,OAAO,KAAK,EAAE,UAAU,EAAiD,MAAM,aAAa,CAAA;AAkB5F,eAAO,MAAM,cAAc,YAAa,UAAU,QAAQ,UAAU,SAAS,IAAI,GAAG,IAAI,KAAG,kBAgH1F,CAAA"}

package/build/manager/rely/flow.js

@@ -0,0 +1,127 @@
+import { AUTH_SCOPE, AuthenticationStage, AuthenticationType, AuthPluginError, AuthRole, RELY_3RD } from '@owlmeans/auth';
+import { isEventMessage, isMessage } from '@owlmeans/socket';
+import { makeAuthModel } from '../model.js';
+import { EnvelopeKind, makeEnvelopeModel } from '@owlmeans/basic-envelope';
+import { trusted } from '../utils/trusted.js';
+import { RELY_TUNNEL } from '../consts.js';
+import { RELY_ACTION_TIMEOUT } from '@owlmeans/auth-common';
+// 1. There is a difference between privileged (provider)
+//    and non-privileged (consumer) request 
+// 2. Source allows to distinguish between provider and consumer
+//    but probably it needs to be universalized some way
+//    cause potentially wallet can also be consumer
+//    (right now consumer will request authentication type)
+// 3. General idea is that: when you are connected, the auth
+//    process can be started from scratch following same stages
+//    and using the same plugins but via socket
+export const createRelyFlow = (context, conn, auth) => {
+    const auhtenticate = conn.authenticate;
+    const model = makeAuthModel(context);
+    let internalAuth = auth ?? null;
+    const linker = async (rely, source, notify) => {
+        const tunnel = context.resource(RELY_TUNNEL);
+        const closeReceiver = await tunnel.subscribe(async (message) => {
+            if (isMessage(message, true)) {
+                await conn.send(message);
+            }
+            else if (isEventMessage(message, true)) {
+                if (message.event === 'close') {
+                    await conn.close();
+                    closeSender();
+                    await closeReceiver();
+                }
+            }
+        }, source.nonce);
+        // We allow to just forward call messages back and forth
+        conn._receiveCall = async (msg) => { console.info(source.nonce, 'Forward call', msg.method, msg.id); };
+        conn._receiveResult = async (msg) => { console.info(source.nonce, 'Forward result', msg.id); };
+        conn._receiveError = async (msg) => { console.info(source.nonce, 'Forward error', msg.id); };
+        conn.defaultCallTimeout = RELY_ACTION_TIMEOUT * 1000;
+        const closeSender = conn.listen(async (message) => {
+            if (isMessage(message, true)) {
+                const forward = { ...message };
+                if (forward.rawData != null) {
+                    delete forward.rawData;
+                }
+                await tunnel.publish(forward, rely.nonce);
+            }
+            else if (isEventMessage(message, true)) {
+                if (message.event === 'close') {
+                    const forward = { ...message };
+                    if (forward.rawData != null) {
+                        delete forward.rawData;
+                    }
+                    await tunnel.publish(forward, rely.nonce);
+                    closeSender();
+                    await closeReceiver();
+                }
+            }
+        });
+        if (notify === true) {
+            internalAuth = {
+                token: makeEnvelopeModel(RELY_3RD).send(rely).tokenize(),
+                isUser: true,
+                createdAt: new Date(),
+                type: AuthenticationType.RelyHandshake,
+                role: AuthRole.User,
+                userId: source.nonce,
+                scopes: [AUTH_SCOPE]
+            };
+            await conn.auth(AuthenticationStage.Authenticated, internalAuth);
+        }
+    };
+    conn.authenticate = async (stage, payload) => {
+        const [, keyPair] = await trusted(context);
+        switch (stage) {
+            // This part of flow is entered by both consumer and provider (wallet)
+            case AuthenticationStage.Init:
+                const _payload = payload;
+                if (auth != null) {
+                    _payload.auth = auth;
+                }
+                else if (_payload.auth != null) {
+                    delete _payload.auth;
+                }
+                _payload.provideRely = linker;
+                _payload.conn = conn;
+                try {
+                    return [stage, await model.init(_payload)];
+                }
+                catch (e) {
+                    console.error(e);
+                    await conn.close();
+                }
+                break;
+            // This part of flow is entered by that actor who enters peer's key (token or pin)
+            case AuthenticationStage.Authenticate:
+                try {
+                    const cred = payload;
+                    const authenticated = await model.authenticate(cred);
+                    const envelope = makeEnvelopeModel(authenticated.token, EnvelopeKind.Token);
+                    if (!await envelope.verify(keyPair)) {
+                        throw new AuthPluginError('internal-rely');
+                    }
+                    if (envelope.type() !== AuthenticationType.RelyHandshake) {
+                        throw new AuthPluginError('internal-rely');
+                    }
+                    internalAuth = envelope.message();
+                    const token = makeEnvelopeModel(internalAuth.token, EnvelopeKind.Token).message();
+                    await linker(token.rely, token.source);
+                    return [AuthenticationStage.Authenticated, internalAuth];
+                }
+                catch (e) {
+                    console.error(e);
+                    await conn.close();
+                }
+                break;
+            // Support intermediate stage for visual confirmation
+            case AuthenticationStage.Authenticated:
+                return [stage, internalAuth];
+            default:
+                return auhtenticate(stage, payload);
+        }
+        return [stage, null];
+    };
+    return conn.authenticate;
+};
+//# sourceMappingURL=flow.js.map

package/build/manager/rely/flow.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"flow.js","sourceRoot":"","sources":["../../../src/manager/rely/flow.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,UAAU,EAAE,mBAAmB,EAAE,kBAAkB,EAAE,eAAe,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAA;AAEzH,OAAO,EAAE,cAAc,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAA;AAE5D,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAA;AAC3C,OAAO,EAAE,YAAY,EAAE,iBAAiB,EAAE,MAAM,0BAA0B,CAAA;AAC1E,OAAO,EAAE,OAAO,EAAE,MAAM,qBAAqB,CAAA;AAC7C,OAAO,EAAE,WAAW,EAAE,MAAM,cAAc,CAAA;AAE1C,OAAO,EAAE,mBAAmB,EAAE,MAAM,uBAAuB,CAAA;AAE3D,yDAAyD;AACzD,4CAA4C;AAC5C,gEAAgE;AAChE,wDAAwD;AACxD,mDAAmD;AACnD,2DAA2D;AAC3D,4DAA4D;AAC5D,+DAA+D;AAC/D,+CAA+C;AAE/C,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,OAAmB,EAAE,IAAgB,EAAE,IAAkB,EAAsB,EAAE;IAC9G,MAAM,YAAY,GAAG,IAAI,CAAC,YAAY,CAAA;IAEtC,MAAM,KAAK,GAAG,aAAa,CAAC,OAAO,CAAC,CAAA;IACpC,IAAI,YAAY,GAAgB,IAAI,IAAI,IAAI,CAAA;IAE5C,MAAM,MAAM,GAAe,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,EAAE;QACxD,MAAM,MAAM,GAAG,OAAO,CAAC,QAAQ,CAA8B,WAAW,CAAC,CAAA;QACzE,MAAM,aAAa,GAAG,MAAM,MAAM,CAAC,SAAS,CAAC,KAAK,EAAC,OAAO,EAAC,EAAE;YAC3D,IAAI,SAAS,CAAC,OAAO,EAAE,IAAI,CAAC,EAAE,CAAC;gBAC7B,MAAM,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;YAC1B,CAAC;iBAAM,IAAI,cAAc,CAAC,OAAO,EAAE,IAAI,CAAC,EAAE,CAAC;gBACzC,IAAK,OAAiC,CAAC,KAAK,KAAK,OAAO,EAAE,CAAC;oBACzD,MAAM,IAAI,CAAC,KAAK,EAAE,CAAA;oBAClB,WAAW,EAAE,CAAA;oBACb,MAAM,aAAa,EAAE,CAAA;gBACvB,CAAC;YACH,CAAC;QACH,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,CAAA;QAChB,wDAAwD;QACxD,IAAI,CAAC,YAAY,GAAG,KAAK,EAAC,GAAG,EAAC,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,cAAc,EAAE,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,EAAE,CAAC,CAAA,CAAC,CAAC,CAAA;QACnG,IAAI,CAAC,cAAc,GAAG,KAAK,EAAC,GAAG,EAAC,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,gBAAgB,EAAE,GAAG,CAAC,EAAE,CAAC,CAAA,CAAC,CAAC,CAAA;QAC3F,IAAI,CAAC,aAAa,GAAG,KAAK,EAAC,GAAG,EAAC,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,eAAe,EAAE,GAAG,CAAC,EAAE,CAAC,CAAA,CAAC,CAAC,CAAA;QACzF,IAAI,CAAC,kBAAkB,GAAG,mBAAmB,GAAG,IAAI,CAAA;QACpD,MAAM,WAAW,GAAG,IAAI,CAAC,MAAM,CAAC,KAAK,EAAC,OAAO,EAAC,EAAE;YAC9C,IAAI,SAAS,CAAC,OAAO,EAAE,IAAI,CAAC,EAAE,CAAC;gBAC7B,MAAM,OAAO,GAAG,EAAE,GAAG,OAAO,EAAE,CAAA;gBAC9B,IAAI,OAAO,CAAC,OAAO,IAAI,IAAI,EAAE,CAAC;oBAC5B,OAAO,OAAO,CAAC,OAAO,CAAA;gBACxB,CAAC;gBACD,MAAM,MAAM,CAAC,OAAO,CAAC,OAAO,EAAE,IAAI,CAAC,KAAK,CAAC,CAAA;YAC3C,CAAC;iBAAM,IAAI,cAAc,CAAC,OAAO,EAAE,IAAI,CAAC,EAAE,CAAC;gBACzC,IAAI,OAAO,CAAC,KAAK,KAAK,OAAO,EAAE,CAAC;oBAC9B,MAAM,OAAO,GAAG,EAAE,GAAG,OAA2B,EAAE,CAAA;oBAClD,IAAI,OAAO,CAAC,OAAO,IAAI,IAAI,EAAE,CAAC;wBAC5B,OAAO,OAAO,CAAC,OAAO,CAAA;oBACxB,CAAC;oBACD,MAAM,MAAM,CAAC,OAAO,CAAC,OAAO,EAAE,IAAI,CAAC,KAAK,CAAC,CAAA;oBACzC,WAAW,EAAE,CAAA;oBACb,MAAM,aAAa,EAAE,CAAA;gBACvB,CAAC;YACH,CAAC;QACH,CAAC,CAAC,CAAA;QACF,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;YACpB,YAAY,GAAG;gBACb,KAAK,EAAE,iBAAiB,CAAY,QAAQ,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE;gBACnE,MAAM,EAAE,IAAI;gBACZ,SAAS,EAAE,IAAI,IAAI,EAAE;gBACrB,IAAI,EAAE,kBAAkB,CAAC,aAAa;gBACtC,IAAI,EAAE,QAAQ,CAAC,IAAI;gBACnB,MAAM,EAAE,MAAM,CAAC,KAAK;gBACpB,MAAM,EAAE,CAAC,UAAU,CAAC;aACrB,CAAA;YACD,MAAM,IAAI,CAAC,IAAI,CAAC,mBAAmB,CAAC,aAAa,EAAE,YAAY,CAAC,CAAA;QAClE,CAAC;IACH,CAAC,CAAA;IAED,IAAI,CAAC,YAAY,GAAG,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE;QAC3C,MAAM,CAAC,EAAE,OAAO,CAAC,GAAG,MAAM,OAAO,CAAC,OAAO,CAAC,CAAA;QAC1C,QAAQ,KAAK,EAAE,CAAC;YACd,sEAAsE;YACtE,KAAK,mBAAmB,CAAC,IAAI;gBAC3B,MAAM,QAAQ,GAAG,OAA+B,CAAA;gBAChD,IAAI,IAAI,IAAI,IAAI,EAAE,CAAC;oBACjB,QAAQ,CAAC,IAAI,GAAG,IAAI,CAAA;gBACtB,CAAC;qBAAM,IAAI,QAAQ,CAAC,IAAI,IAAI,IAAI,EAAE,CAAC;oBACjC,OAAO,QAAQ,CAAC,IAAI,CAAA;gBACtB,CAAC;gBACD,QAAQ,CAAC,WAAW,GAAG,MAAM,CAAA;gBAC7B,QAAQ,CAAC,IAAI,GAAG,IAAI,CAAA;gBAEpB,IAAI,CAAC;oBACH,OAAO,CAAC,KAAK,EAAE,MAAM,KAAK,CAAC,IAAI,CAAC,QAA4B,CAAQ,CAAC,CAAA;gBACvE,CAAC;gBAAC,OAAO,CAAC,EAAE,CAAC;oBACX,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAA;oBAChB,MAAM,IAAI,CAAC,KAAK,EAAE,CAAA;gBACpB,CAAC;gBACD,MAAK;YACP,kFAAkF;YAClF,KAAK,mBAAmB,CAAC,YAAY;gBACnC,IAAI,CAAC;oBACH,MAAM,IAAI,GAAG,OAA0B,CAAA;oBACvC,MAAM,aAAa,GAAG,MAAM,KAAK,CAAC,YAAY,CAAC,IAAI,CAAC,CAAA;oBACpD,MAAM,QAAQ,GAAG,iBAAiB,CAAO,aAAa,CAAC,KAAK,EAAE,YAAY,CAAC,KAAK,CAAC,CAAA;oBACjF,IAAI,CAAC,MAAM,QAAQ,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC;wBACpC,MAAM,IAAI,eAAe,CAAC,eAAe,CAAC,CAAA;oBAC5C,CAAC;oBACD,IAAI,QAAQ,CAAC,IAAI,EAAE,KAAK,kBAAkB,CAAC,aAAa,EAAE,CAAC;wBACzD,MAAM,IAAI,eAAe,CAAC,eAAe,CAAC,CAAA;oBAC5C,CAAC;oBACD,YAAY,GAAG,QAAQ,CAAC,OAAO,EAAE,CAAA;oBAEjC,MAAM,KAAK,GAAG,iBAAiB,CAAc,YAAY,CAAC,KAAK,EAAE,YAAY,CAAC,KAAK,CAAC,CAAC,OAAO,EAAE,CAAA;oBAE9F,MAAM,MAAM,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,MAAM,CAAC,CAAA;oBAEtC,OAAO,CAAC,mBAAmB,CAAC,aAAa,EAAE,YAAmB,CAAC,CAAA;gBACjE,CAAC;gBAAC,OAAO,CAAC,EAAE,CAAC;oBACX,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAA;oBAChB,MAAM,IAAI,CAAC,KAAK,EAAE,CAAA;gBACpB,CAAC;gBACD,MAAK;YACP,qDAAqD;YACrD,KAAK,mBAAmB,CAAC,aAAa;gBACpC,OAAO,CAAC,KAAK,EAAE,YAAmB,CAAC,CAAA;YACrC;gBACE,OAAO,YAAY,CAAC,KAAK,EAAE,OAAO,CAAC,CAAA;QACvC,CAAC;QACD,OAAO,CAAC,KAAK,EAAE,IAAW,CAAC,CAAA;IAC7B,CAAC,CAAA;IAED,OAAO,IAAI,CAAC,YAAY,CAAA;AAC1B,CAAC,CAAA"}

package/build/manager/rely/index.d.ts

@@ -0,0 +1,2 @@
+export * from './flow.js';
+//# sourceMappingURL=index.d.ts.map

package/build/manager/rely/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/manager/rely/index.ts"],"names":[],"mappings":"AACA,cAAc,WAAW,CAAA"}

package/build/manager/rely/index.js

@@ -0,0 +1,2 @@
+export * from './flow.js';
+//# sourceMappingURL=index.js.map

package/build/manager/rely/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/manager/rely/index.ts"],"names":[],"mappings":"AACA,cAAc,WAAW,CAAA"}

package/build/manager/rely.d.ts

@@ -0,0 +1,3 @@
+import type { RelyService } from './types.js';
+export declare const createRelyService: (alias?: string) => RelyService;
+//# sourceMappingURL=rely.d.ts.map

package/build/manager/rely.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"rely.d.ts","sourceRoot":"","sources":["../../src/manager/rely.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAc,WAAW,EAAE,MAAM,YAAY,CAAA;AAczD,eAAO,MAAM,iBAAiB,WAAW,MAAM,KAAkB,WAyEhE,CAAA"}

package/build/manager/rely.js

@@ -0,0 +1,63 @@
+import { assertContext, createService } from '@owlmeans/context';
+import { DEFAULT_RELY } from './consts.js';
+import { AUTH_QUERY, AuthenFailed, AuthenticationType } from '@owlmeans/auth';
+import { EnvelopeKind, makeEnvelopeModel } from '@owlmeans/basic-envelope';
+import { AUTH_CACHE, AUTHEN_TIMEFRAME } from '../consts.js';
+import { trusted } from './utils/trusted.js';
+export const createRelyService = (alias = DEFAULT_RELY) => {
+    const _keyPair = async (context) => {
+        const [, keyPair] = await trusted(context);
+        return keyPair;
+    };
+    const service = createService(alias, {
+        match: async (req) => {
+            const authorization = req.query[AUTH_QUERY] != null
+                ? `${req.query[AUTH_QUERY]}` : null;
+            if (authorization == null) {
+                // This is optional Guard. So it can not match only on provided authorization
+                // that is not valid. In other cases it's passed and need to be handled 
+                // to provide or null authentication object.
+                return true;
+            }
+            const token = makeEnvelopeModel(authorization, EnvelopeKind.Token);
+            const auth = token.message();
+            return auth.type === AuthenticationType.OneTimeToken;
+        },
+        handle: async (req, res) => {
+            const context = assertContext(service.ctx);
+            const authorization = req.query[AUTH_QUERY];
+            // We authorize in cases when there is no authorization or it's valid one
+            if (authorization == null) {
+                return true;
+            }
+            // @TODO it's likely something is wrong with AbstractRequest types - so it should be fixed there
+            if (typeof authorization !== 'string') {
+                return false;
+            }
+            const envelope = makeEnvelopeModel(authorization, EnvelopeKind.Token);
+            if (!await envelope.verify(await _keyPair(context))) {
+                return false;
+            }
+            const msg = envelope.message();
+            if (msg.source !== AuthenticationType.WalletDid) {
+                return false;
+            }
+            try {
+                const cache = (context) => context.resource(AUTH_CACHE);
+                await cache(context).create({ id: msg.challenge }, { ttl: (envelope.envelope.ttl ?? AUTHEN_TIMEFRAME) / 1000 });
+            }
+            catch (e) {
+                const error = new AuthenFailed('challenge');
+                if (e instanceof Error) {
+                    error.oiriginalStack = `${e} : ${e.stack}`;
+                }
+                throw error;
+            }
+            // @TODO Actually there is some mess. We know that it aint Auth but AuthCredentials
+            res.resolve(msg);
+            return true;
+        }
+    }, service => async () => { service.initialized = true; });
+    return service;
+};
+//# sourceMappingURL=rely.js.map

package/build/manager/rely.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"rely.js","sourceRoot":"","sources":["../../src/manager/rely.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAA;AAChE,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAA;AAE1C,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,kBAAkB,EAAE,MAAM,gBAAgB,CAAA;AAG7E,OAAO,EAAE,YAAY,EAAE,iBAAiB,EAAE,MAAM,0BAA0B,CAAA;AAE1E,OAAO,EAAE,UAAU,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAA;AAG3D,OAAO,EAAE,OAAO,EAAE,MAAM,oBAAoB,CAAA;AAK5C,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,QAAgB,YAAY,EAAe,EAAE;IAC7E,MAAM,QAAQ,GAAG,KAAK,EAAE,OAAgB,EAAE,EAAE;QAC1C,MAAM,CAAC,EAAE,OAAO,CAAC,GAAG,MAAM,OAAO,CAAC,OAAqB,CAAC,CAAA;QAExD,OAAO,OAAO,CAAA;IAChB,CAAC,CAAA;IAED,MAAM,OAAO,GAAgB,aAAa,CAAc,KAAK,EAAE;QAC7D,KAAK,EAAE,KAAK,EAAE,GAA+B,EAAE,EAAE;YAC/C,MAAM,aAAa,GAAkB,GAAG,CAAC,KAAK,CAAC,UAAU,CAAC,IAAI,IAAI;gBAChE,CAAC,CAAC,GAAG,GAAG,CAAC,KAAK,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAA;YAErC,IAAI,aAAa,IAAI,IAAI,EAAE,CAAC;gBAC1B,6EAA6E;gBAC7E,wEAAwE;gBACxE,4CAA4C;gBAC5C,OAAO,IAAI,CAAA;YACb,CAAC;YAED,MAAM,KAAK,GAAG,iBAAiB,CAAO,aAAa,EAAE,YAAY,CAAC,KAAK,CAAC,CAAA;YACxE,MAAM,IAAI,GAAG,KAAK,CAAC,OAAO,EAAE,CAAA;YAE5B,OAAO,IAAI,CAAC,IAAI,KAAK,kBAAkB,CAAC,YAAY,CAAA;QACtD,CAAC;QAED,MAAM,EAAE,KAAK,EAAK,GAA+B,EAAE,GAA2B,EAAE,EAAE;YAChF,MAAM,OAAO,GAAG,aAAa,CAAkB,OAAO,CAAC,GAAc,CAAC,CAAA;YACtE,MAAM,aAAa,GAAG,GAAG,CAAC,KAAK,CAAC,UAAU,CAAC,CAAA;YAC3C,yEAAyE;YACzE,IAAI,aAAa,IAAI,IAAI,EAAE,CAAC;gBAC1B,OAAO,IAAS,CAAA;YAClB,CAAC;YAED,gGAAgG;YAChG,IAAI,OAAO,aAAa,KAAK,QAAQ,EAAE,CAAC;gBACtC,OAAO,KAAU,CAAA;YACnB,CAAC;YAED,MAAM,QAAQ,GAAG,iBAAiB,CAAkB,aAAa,EAAE,YAAY,CAAC,KAAK,CAAC,CAAA;YAEtF,IAAI,CAAC,MAAM,QAAQ,CAAC,MAAM,CAAC,MAAM,QAAQ,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC;gBACpD,OAAO,KAAU,CAAA;YACnB,CAAC;YAED,MAAM,GAAG,GAAG,QAAQ,CAAC,OAAO,EAAE,CAAA;YAC9B,IAAI,GAAG,CAAC,MAAM,KAAK,kBAAkB,CAAC,SAAS,EAAE,CAAC;gBAChD,OAAO,KAAU,CAAA;YACnB,CAAC;YAED,IAAI,CAAC;gBACH,MAAM,KAAK,GAAG,CAAC,OAAgB,EAAuB,EAAE,CACtD,OAAO,CAAC,QAAQ,CAAsB,UAAU,CAAC,CAAA;gBAEnD,MAAM,KAAK,CAAC,OAAO,CAAC,CAAC,MAAM,CACzB,EAAE,EAAE,EAAE,GAAG,CAAC,SAAS,EAAE,EACrB,EAAE,GAAG,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,GAAG,IAAI,gBAAgB,CAAC,GAAG,IAAI,EAAE,CAC5D,CAAA;YACH,CAAC;YAAC,OAAO,CAAC,EAAE,CAAC;gBACX,MAAM,KAAK,GAAG,IAAI,YAAY,CAAC,WAAW,CAAC,CAAA;gBAC3C,IAAI,CAAC,YAAY,KAAK,EAAE,CAAC;oBACvB,KAAK,CAAC,cAAc,GAAG,GAAG,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,CAAA;gBAC5C,CAAC;gBACD,MAAM,KAAK,CAAA;YACb,CAAC;YAED,mFAAmF;YACnF,GAAG,CAAC,OAAO,CAAC,GAAsB,CAAC,CAAA;YAEnC,OAAO,IAAS,CAAA;QAClB,CAAC;KACF,EAAE,OAAO,CAAC,EAAE,CAAC,KAAK,IAAI,EAAE,GAAG,OAAO,CAAC,WAAW,GAAG,IAAI,CAAA,CAAC,CAAC,CAAC,CAAA;IAEzD,OAAO,OAAO,CAAA;AAChB,CAAC,CAAA"}

package/build/manager/types.d.ts

@@ -0,0 +1,33 @@
+import type { AllowanceRequest, AllowanceResponse, Auth, AuthCredentials, AuthToken, RelyToken } from '@owlmeans/auth';
+import type { KlusterConfig } from '@owlmeans/kluster';
+import type { GuardService } from '@owlmeans/module';
+import type { ApiServerAppend } from '@owlmeans/server-api';
+import type { ServerContext, ServerConfig } from '@owlmeans/server-context';
+import type { ServiceRoute } from '@owlmeans/server-route';
+import type { Connection } from '@owlmeans/socket';
+import type { StaticResourceAppend } from '@owlmeans/static-resource';
+export interface AppConfig extends ServerConfig, KlusterConfig {
+    services: Record<string, ServiceRoute>;
+}
+export interface AuthModel {
+    init: (request: AllowanceRequest) => Promise<AllowanceResponse>;
+    authenticate: (credential: AuthCredentials) => Promise<AuthToken>;
+    rely: (conn: Connection, source?: Auth | null) => Promise<void>;
+}
+export interface AppContext<C extends AppConfig = AppConfig> extends ServerContext<C>, ApiServerAppend, StaticResourceAppend {
+}
+export interface RelyService extends GuardService {
+}
+export interface RelyAllowanceRequest extends AllowanceRequest {
+    auth?: Auth;
+    provideRely?: RelyLinker;
+    conn?: Connection;
+}
+export interface RelyLinker {
+    (rely: RelyToken, source: RelyToken, notify?: boolean): Promise<void>;
+}
+export interface RelyCarrier {
+    source: RelyToken;
+    rely: RelyToken;
+}
+//# sourceMappingURL=types.d.ts.map

package/build/manager/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/manager/types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,IAAI,EAAE,eAAe,EAAE,SAAS,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAA;AACtH,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAA;AACtD,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,kBAAkB,CAAA;AACpD,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAA;AAC3D,OAAO,KAAK,EAAE,aAAa,EAAE,YAAY,EAAE,MAAM,0BAA0B,CAAA;AAC3E,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,wBAAwB,CAAA;AAC1D,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAA;AAClD,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,2BAA2B,CAAA;AAErE,MAAM,WAAW,SAAU,SAAQ,YAAY,EAAE,aAAa;IAC5D,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,YAAY,CAAC,CAAA;CACvC;AAED,MAAM,WAAW,SAAS;IACxB,IAAI,EAAE,CAAC,OAAO,EAAE,gBAAgB,KAAK,OAAO,CAAC,iBAAiB,CAAC,CAAA;IAE/D,YAAY,EAAE,CAAC,UAAU,EAAE,eAAe,KAAK,OAAO,CAAC,SAAS,CAAC,CAAA;IAEjE,IAAI,EAAE,CAAC,IAAI,EAAE,UAAU,EAAE,MAAM,CAAC,EAAE,IAAI,GAAG,IAAI,KAAK,OAAO,CAAC,IAAI,CAAC,CAAA;CAChE;AAED,MAAM,WAAW,UAAU,CAAC,CAAC,SAAS,SAAS,GAAG,SAAS,CAAE,SAAQ,aAAa,CAAC,CAAC,CAAC,EACjF,eAAe,EACf,oBAAoB;CAAI;AAE5B,MAAM,WAAW,WAAY,SAAQ,YAAY;CAChD;AAED,MAAM,WAAW,oBAAqB,SAAQ,gBAAgB;IAC5D,IAAI,CAAC,EAAE,IAAI,CAAA;IACX,WAAW,CAAC,EAAE,UAAU,CAAA;IACxB,IAAI,CAAC,EAAE,UAAU,CAAA;CAClB;AAED,MAAM,WAAW,UAAU;IACzB,CAAC,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,CAAC,EAAE,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;CACtE;AAED,MAAM,WAAW,WAAW;IAC1B,MAAM,EAAE,SAAS,CAAC;IAClB,IAAI,EAAE,SAAS,CAAA;CAChB"}

package/build/manager/types.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=types.js.map

package/build/manager/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/manager/types.ts"],"names":[],"mappings":""}

package/build/manager/utils/index.d.ts

@@ -0,0 +1,2 @@
+export * from './trusted.js';
+//# sourceMappingURL=index.d.ts.map

package/build/manager/utils/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/manager/utils/index.ts"],"names":[],"mappings":"AACA,cAAc,cAAc,CAAA"}

package/build/manager/utils/index.js

@@ -0,0 +1,2 @@
+export * from './trusted.js';
+//# sourceMappingURL=index.js.map

package/build/manager/utils/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/manager/utils/index.ts"],"names":[],"mappings":"AACA,cAAc,cAAc,CAAA"}

package/build/manager/utils/trusted.d.ts

@@ -0,0 +1,5 @@
+import type { KeyPairModel } from '@owlmeans/basic-keys';
+import type { AppContext } from '../types.js';
+import type { TrustedRecord } from '@owlmeans/auth-common';
+export declare const trusted: (context: AppContext, userName?: string) => Promise<[TrustedRecord, KeyPairModel]>;
+//# sourceMappingURL=trusted.d.ts.map

package/build/manager/utils/trusted.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"trusted.d.ts","sourceRoot":"","sources":["../../../src/manager/utils/trusted.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAA;AACxD,OAAO,KAAK,EAAE,UAAU,EAAa,MAAM,aAAa,CAAA;AAGxD,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAA;AAG1D,eAAO,MAAM,OAAO,YAAmB,UAAU,aAAY,MAAM,KAAkB,OAAO,CAAC,CAAC,aAAa,EAAE,YAAY,CAAC,CAQzH,CAAA"}

package/build/manager/utils/trusted.js

@@ -0,0 +1,11 @@
+import { TRUSTED } from '@owlmeans/config';
+import { AUTH_SRV_KEY } from '../../consts.js';
+import { trust } from '@owlmeans/auth-common/utils';
+export const trusted = async (context, userName = AUTH_SRV_KEY) => {
+    const trusted = await trust(context, TRUSTED, userName);
+    if (trusted.user.secret == null) {
+        throw new SyntaxError(`Auth srvice trusted users should have secret keys to be used ${userName}`);
+    }
+    return [trusted.user, trusted.key];
+};
+//# sourceMappingURL=trusted.js.map

package/build/manager/utils/trusted.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"trusted.js","sourceRoot":"","sources":["../../../src/manager/utils/trusted.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,OAAO,EAAE,MAAM,kBAAkB,CAAA;AAC1C,OAAO,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAA;AAE9C,OAAO,EAAE,KAAK,EAAE,MAAM,6BAA6B,CAAA;AAEnD,MAAM,CAAC,MAAM,OAAO,GAAG,KAAK,EAAE,OAAmB,EAAE,WAAmB,YAAY,EAA0C,EAAE;IAC5H,MAAM,OAAO,GAAG,MAAM,KAAK,CAAwB,OAAO,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAA;IAE9E,IAAI,OAAO,CAAC,IAAI,CAAC,MAAM,IAAI,IAAI,EAAE,CAAC;QAChC,MAAM,IAAI,WAAW,CAAC,gEAAgE,QAAQ,EAAE,CAAC,CAAA;IACnG,CAAC;IAED,OAAO,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,GAAG,CAAC,CAAA;AACpC,CAAC,CAAA"}

package/build/model/index.d.ts

@@ -0,0 +1,2 @@
+export * from './rely/index.js';
+//# sourceMappingURL=index.d.ts.map

package/build/model/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/model/index.ts"],"names":[],"mappings":"AACA,cAAc,iBAAiB,CAAA"}

package/build/model/index.js

@@ -0,0 +1,2 @@
+export * from './rely/index.js';
+//# sourceMappingURL=index.js.map

package/build/model/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/model/index.ts"],"names":[],"mappings":"AACA,cAAc,iBAAiB,CAAA"}

package/build/model/rely/consumer.d.ts

@@ -0,0 +1,3 @@
+import type { RelyOptions } from './types.js';
+export declare const makeConsumerRely: (opts?: RelyOptions) => import("@owlmeans/basic-envelope").EnvelopeModel<import("@owlmeans/auth").RelyToken>;
+//# sourceMappingURL=consumer.d.ts.map

package/build/model/rely/consumer.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"consumer.d.ts","sourceRoot":"","sources":["../../../src/model/rely/consumer.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,YAAY,CAAA;AAE7C,eAAO,MAAM,gBAAgB,UAAW,WAAW,yFAOlD,CAAA"}

package/build/model/rely/consumer.js

@@ -0,0 +1,9 @@
+import { makeRelyModel } from './peer.js';
+export const makeConsumerRely = (opts) => {
+    const model = makeRelyModel(opts);
+    const msg = model.message();
+    delete msg.pin;
+    model.send(msg);
+    return model;
+};
+//# sourceMappingURL=consumer.js.map

package/build/model/rely/consumer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"consumer.js","sourceRoot":"","sources":["../../../src/model/rely/consumer.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,WAAW,CAAA;AAGzC,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,IAAkB,EAAE,EAAE;IACrD,MAAM,KAAK,GAAG,aAAa,CAAC,IAAI,CAAC,CAAA;IACjC,MAAM,GAAG,GAAG,KAAK,CAAC,OAAO,EAAE,CAAA;IAC3B,OAAO,GAAG,CAAC,GAAG,CAAA;IACd,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;IAEf,OAAO,KAAK,CAAA;AACd,CAAC,CAAA"}

package/build/model/rely/index.d.ts

@@ -0,0 +1,5 @@
+export type * from './types.js';
+export * from './peer.js';
+export * from './provider.js';
+export * from './consumer.js';
+//# sourceMappingURL=index.d.ts.map

package/build/model/rely/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/model/rely/index.ts"],"names":[],"mappings":"AACA,mBAAmB,YAAY,CAAA;AAC/B,cAAc,WAAW,CAAA;AACzB,cAAc,eAAe,CAAA;AAC7B,cAAc,eAAe,CAAA"}

package/build/model/rely/index.js

@@ -0,0 +1,4 @@
+export * from './peer.js';
+export * from './provider.js';
+export * from './consumer.js';
+//# sourceMappingURL=index.js.map

package/build/model/rely/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/model/rely/index.ts"],"names":[],"mappings":"AAEA,cAAc,WAAW,CAAA;AACzB,cAAc,eAAe,CAAA;AAC7B,cAAc,eAAe,CAAA"}

package/build/model/rely/peer.d.ts

@@ -0,0 +1,5 @@
+import type { RelyToken } from '@owlmeans/auth';
+import type { EnvelopeModel } from '@owlmeans/basic-envelope';
+import type { RelyOptions } from './types.js';
+export declare const makeRelyModel: (opts?: RelyOptions) => EnvelopeModel<RelyToken>;
+//# sourceMappingURL=peer.d.ts.map

package/build/model/rely/peer.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"peer.d.ts","sourceRoot":"","sources":["../../../src/model/rely/peer.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAA;AAE/C,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,0BAA0B,CAAA;AAI7D,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,YAAY,CAAA;AAG7C,eAAO,MAAM,aAAa,UAAW,WAAW,KAAG,aAAa,CAAC,SAAS,CAyBzE,CAAA"}

package/build/model/rely/peer.js

@@ -0,0 +1,36 @@
+import { RELY_3RD } from '@owlmeans/auth';
+import { makeEnvelopeModel } from '@owlmeans/basic-envelope';
+import { createRandomPrefix, createIdOfLength, IdStyle } from '@owlmeans/basic-ids';
+import { base58 } from '@scure/base';
+import { RELY_CALL_TIMEOUT } from '@owlmeans/auth-common';
+export const makeRelyModel = (opts) => {
+    const envelope = makeEnvelopeModel(RELY_3RD);
+    const pinLength = opts?.pinLength ?? 6;
+    const checkLength = opts?.checkLenght ?? 2;
+    const tokenLength = opts?.tokenLength ?? 16;
+    const nonceLength = opts?.nonceLength ?? 24;
+    const pinQty = Math.ceil(pinLength / 2);
+    const checkQty = Math.ceil(checkLength / 2);
+    const tokenQty = tokenLength;
+    const source = createRandomPrefix(pinQty + checkQty + tokenQty);
+    const bytes = base58.decode(source);
+    const pinBytes = bytes.slice(0, pinQty);
+    const checkBytes = bytes.slice(pinQty, pinQty + checkQty);
+    const tokenBytes = bytes.slice(pinQty + checkQty);
+    const pin = toNumber(pinBytes).substring(0, pinLength);
+    envelope.send({
+        pin,
+        check: toNumber(checkBytes).substring(0, checkLength),
+        token: base58.encode(tokenBytes).substring(0, tokenLength),
+        nonce: createIdOfLength(nonceLength, IdStyle.Base64)
+    }, opts?.liveTime ?? RELY_CALL_TIMEOUT * 1000);
+    return envelope;
+};
+const toNumber = (bytes) => {
+    let pinInt = 0n;
+    for (let i = bytes.length - 1; i >= 0; i--) {
+        pinInt = (pinInt << 8n) | BigInt(bytes[i]);
+    }
+    return pinInt.toString();
+};
+//# sourceMappingURL=peer.js.map

package/build/model/rely/peer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"peer.js","sourceRoot":"","sources":["../../../src/model/rely/peer.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAA;AAEzC,OAAO,EAAE,iBAAiB,EAAE,MAAM,0BAA0B,CAAA;AAC5D,OAAO,EAAE,kBAAkB,EAAE,gBAAgB,EAAE,OAAO,EAAE,MAAM,qBAAqB,CAAA;AACnF,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAA;AAEpC,OAAO,EAAE,iBAAiB,EAAE,MAAM,uBAAuB,CAAA;AAEzD,MAAM,CAAC,MAAM,aAAa,GAAG,CAAC,IAAkB,EAA4B,EAAE;IAC5E,MAAM,QAAQ,GAAG,iBAAiB,CAAY,QAAQ,CAAC,CAAA;IAEvD,MAAM,SAAS,GAAG,IAAI,EAAE,SAAS,IAAI,CAAC,CAAA;IACtC,MAAM,WAAW,GAAG,IAAI,EAAE,WAAW,IAAI,CAAC,CAAA;IAC1C,MAAM,WAAW,GAAG,IAAI,EAAE,WAAW,IAAI,EAAE,CAAA;IAC3C,MAAM,WAAW,GAAG,IAAI,EAAE,WAAW,IAAI,EAAE,CAAA;IAC3C,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,GAAG,CAAC,CAAC,CAAA;IACvC,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,WAAW,GAAG,CAAC,CAAC,CAAA;IAC3C,MAAM,QAAQ,GAAG,WAAW,CAAA;IAC5B,MAAM,MAAM,GAAG,kBAAkB,CAAC,MAAM,GAAG,QAAQ,GAAG,QAAQ,CAAC,CAAA;IAC/D,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAA;IACnC,MAAM,QAAQ,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,MAAM,CAAC,CAAA;IACvC,MAAM,UAAU,GAAG,KAAK,CAAC,KAAK,CAAC,MAAM,EAAE,MAAM,GAAG,QAAQ,CAAC,CAAA;IACzD,MAAM,UAAU,GAAG,KAAK,CAAC,KAAK,CAAC,MAAM,GAAG,QAAQ,CAAC,CAAA;IAEjD,MAAM,GAAG,GAAG,QAAQ,CAAC,QAAQ,CAAC,CAAC,SAAS,CAAC,CAAC,EAAE,SAAS,CAAC,CAAA;IACtD,QAAQ,CAAC,IAAI,CAAC;QACZ,GAAG;QACH,KAAK,EAAE,QAAQ,CAAC,UAAU,CAAC,CAAC,SAAS,CAAC,CAAC,EAAE,WAAW,CAAC;QACrD,KAAK,EAAE,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,SAAS,CAAC,CAAC,EAAE,WAAW,CAAC;QAC1D,KAAK,EAAE,gBAAgB,CAAC,WAAW,EAAE,OAAO,CAAC,MAAM,CAAC;KACrD,EAAE,IAAI,EAAE,QAAQ,IAAI,iBAAiB,GAAG,IAAI,CAAC,CAAA;IAE9C,OAAO,QAAQ,CAAA;AACjB,CAAC,CAAA;AAED,MAAM,QAAQ,GAAG,CAAC,KAAiB,EAAU,EAAE;IAC7C,IAAI,MAAM,GAAG,EAAE,CAAA;IACf,KAAK,IAAI,CAAC,GAAG,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;QAC3C,MAAM,GAAG,CAAC,MAAM,IAAI,EAAE,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IAC7C,CAAC;IACD,OAAO,MAAM,CAAC,QAAQ,EAAE,CAAA;AAC1B,CAAC,CAAA"}

package/build/model/rely/provider.d.ts

@@ -0,0 +1,3 @@
+import type { RelyOptions } from './types.js';
+export declare const makeProviderRely: (opts?: RelyOptions) => import("@owlmeans/basic-envelope").EnvelopeModel<import("@owlmeans/auth").RelyToken>;
+//# sourceMappingURL=provider.d.ts.map

package/build/model/rely/provider.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"provider.d.ts","sourceRoot":"","sources":["../../../src/model/rely/provider.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,YAAY,CAAA;AAE7C,eAAO,MAAM,gBAAgB,UAAW,WAAW,yFAIlD,CAAA"}

package/build/model/rely/provider.js

@@ -0,0 +1,6 @@
+import { makeRelyModel } from './peer.js';
+export const makeProviderRely = (opts) => {
+    const model = makeRelyModel(opts);
+    return model;
+};
+//# sourceMappingURL=provider.js.map

package/build/model/rely/provider.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"provider.js","sourceRoot":"","sources":["../../../src/model/rely/provider.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,aAAa,EAAE,MAAM,WAAW,CAAA;AAGzC,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,IAAkB,EAAE,EAAE;IACrD,MAAM,KAAK,GAAG,aAAa,CAAC,IAAI,CAAC,CAAA;IAEjC,OAAO,KAAK,CAAA;AACd,CAAC,CAAA"}

package/build/model/rely/types.d.ts

@@ -0,0 +1,8 @@
+export interface RelyOptions {
+    pinLength?: number;
+    checkLenght?: number;
+    tokenLength?: number;
+    nonceLength?: number;
+    liveTime?: number;
+}
+//# sourceMappingURL=types.d.ts.map

package/build/model/rely/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../src/model/rely/types.ts"],"names":[],"mappings":"AACA,MAAM,WAAW,WAAW;IAC1B,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,QAAQ,CAAC,EAAE,MAAM,CAAA;CAClB"}

package/build/model/rely/types.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=types.js.map

package/build/model/rely/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../../src/model/rely/types.ts"],"names":[],"mappings":""}

package/build/modules.d.ts

@@ -0,0 +1,3 @@
+import type { ServerModule } from '@owlmeans/server-module';
+export declare const modules: ServerModule<unknown>[];
+//# sourceMappingURL=modules.d.ts.map

package/build/modules.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"modules.d.ts","sourceRoot":"","sources":["../src/modules.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,yBAAyB,CAAA;AAO3D,eAAO,MAAM,OAAO,EAAE,YAAY,CAAC,OAAO,CAAC,EAK1C,CAAA"}

package/build/modules.js

@@ -0,0 +1,11 @@
+import { elevate } from '@owlmeans/server-module';
+import { modules as list } from '@owlmeans/auth-common';
+import { DISPATCHER, DISPATCHER_AUTHEN } from '@owlmeans/auth';
+import { authenticate } from './actions/service.js';
+import { stab, elevate as celevate } from '@owlmeans/client-module';
+elevate(list, DISPATCHER_AUTHEN, authenticate);
+celevate(list, DISPATCHER, stab);
+export const modules = [
+    ...list.filter((module) => [DISPATCHER, DISPATCHER_AUTHEN].includes(module.getAlias()))
+];
+//# sourceMappingURL=modules.js.map

package/build/modules.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"modules.js","sourceRoot":"","sources":["../src/modules.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,OAAO,EAAE,MAAM,yBAAyB,CAAA;AACjD,OAAO,EAAE,OAAO,IAAI,IAAI,EAAE,MAAM,uBAAuB,CAAA;AACvD,OAAO,EAAE,UAAU,EAAE,iBAAiB,EAAE,MAAM,gBAAgB,CAAA;AAE9D,OAAO,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAA;AACnD,OAAO,EAAE,IAAI,EAAE,OAAO,IAAI,QAAQ,EAAE,MAAM,yBAAyB,CAAA;AAEnE,OAAO,CAAC,IAAI,EAAE,iBAAiB,EAAE,YAAY,CAAC,CAAA;AAC9C,QAAQ,CAAC,IAAI,EAAE,UAAU,EAAE,IAAI,CAAC,CAAA;AAEhC,MAAM,CAAC,MAAM,OAAO,GAA4B;IAC9C,GAAG,IAAI,CAAC,MAAM,CACZ,CAAC,MAAM,EAAmC,EAAE,CAC1C,CAAC,UAAU,EAAE,iBAAiB,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC,CAC9D;CACF,CAAA"}

package/build/service.d.ts

@@ -0,0 +1,7 @@
+import type { ServerContext, ServerConfig } from '@owlmeans/server-context';
+import type { AuthServiceAppend, AuthService } from './types.js';
+type Config = ServerConfig;
+export declare const makeAuthService: (alias?: string) => AuthService;
+export declare const appendAuthService: <C extends Config, T extends ServerContext<C>>(ctx: T, alias?: string) => T & AuthServiceAppend;
+export {};
+//# sourceMappingURL=service.d.ts.map

package/build/service.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"service.d.ts","sourceRoot":"","sources":["../src/service.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,YAAY,EAAE,MAAM,0BAA0B,CAAA;AAG3E,OAAO,KAAK,EAAE,iBAAiB,EAAE,WAAW,EAAa,MAAM,YAAY,CAAA;AAU3E,KAAK,MAAM,GAAG,YAAY,CAAA;AAG1B,eAAO,MAAM,eAAe,WAAW,MAAM,KAAmB,WA4F/D,CAAA;AAED,eAAO,MAAM,iBAAiB,GAAI,CAAC,SAAS,MAAM,EAAE,CAAC,SAAS,aAAa,CAAC,CAAC,CAAC,OACvE,CAAC,UAAS,MAAM,KACpB,CAAC,GAAG,iBAaN,CAAA"}