@owlmeans/server-auth 0.1.1 → 0.1.3

package/LICENSE

@@ -1,6 +1,6 @@
 MIT License
 
-Copyright (c) 2024 OwlMeans Common — Fullstack typescript framework
+Copyright (c) 2026 OwlMeans Common — Fullstack typescript framework
 
 Permission is hereby granted, free of charge, to any person obtaining a copy
 of this software and associated documentation files (the "Software"), to deal

package/README.md

@@ -1,490 +1,69 @@
 # @owlmeans/server-auth
 
-Server-side authentication service for OwlMeans Common applications. This package provides a comprehensive server authentication implementation with Ed25519 signature verification, token management, cache integration, and centralized authentication hub capabilities.
+Server-side Ed25519 authentication service for OwlMeans backends.
 
 ## Overview
 
-The `@owlmeans/server-auth` package delivers server-side authentication functionality for the OwlMeans ecosystem, offering:
-
-- **Authentication Service**: Server-side authentication with Ed25519 signature verification
-- **Token Management**: Authentication token creation, validation, and lifecycle management
-- **Guard Integration**: Seamless integration with OwlMeans module guard system
-- **Cache Support**: Authentication state caching for performance optimization
-- **Central Auth Hub**: Complete authentication manager application for centralized authentication
-- **Trusted Entity Support**: Integration with trusted service authentication
-
-This package follows the OwlMeans "quadra" pattern as a server-side implementation complementing `@owlmeans/auth-common` and working with client authentication packages.
+- Implements the `GuardService` interface for Ed25519-signed token verification
+- `appendAuthService()` registers the auth guard into a server context
+- `DEFAULT_ALIAS` (`'auth'`) is the service alias and re-exported as `DAUTH_GUARD` via `@owlmeans/server-app`
+- Handles token caching via a static resource identified by `AUTH_CACHE`
 
 ## Installation
 
 ```bash
-npm install @owlmeans/server-auth
-```
-
-## Dependencies
-
-This package requires and integrates with:
-- `@owlmeans/auth`: Core authentication types and validation
-- `@owlmeans/auth-common`: Common authentication components
-- `@owlmeans/basic-envelope`: Cryptographic message envelopes
-- `@owlmeans/server-context`: Server context management
-- `@owlmeans/basic-keys`: Cryptographic operations
-- `@owlmeans/static-resource`: Resource management
-
-## Core Concepts
-
-### Authentication Service
-
-The server authentication service handles token validation, signature verification, and authentication state management using Ed25519 cryptographic signatures.
-
-### Token Verification
-
-Implements secure token verification using envelope-based signatures and trusted entity validation, ensuring non-repudiable authentication.
-
-### Central Auth Hub
-
-Includes a complete authentication manager application that can serve as a centralized authentication hub for microservices architectures.
-
-## API Reference
-
-### Types
-
-#### `AuthService`
-Main server authentication service interface extending GuardService.
-
-```typescript
-interface AuthService extends GuardService {
-  authenticate: (token: AuthToken) => Promise<AuthToken>
-  unpack: (token: string) => Promise<Auth>
-}
-```
-
-**Methods:**
-- **`authenticate(token: AuthToken): Promise<AuthToken>`**: Validates and processes authentication token
-- **`unpack(token: string): Promise<Auth>`**: Unpacks and verifies authentication token to extract Auth object
-
-#### `AuthServiceAppend`
-Interface for contexts that provide authentication service access.
-
-```typescript
-interface AuthServiceAppend {
-  auth: () => AuthService
-}
-```
-
-#### `AuthSpent`
-Interface for authentication cache records.
-
-```typescript
-interface AuthSpent extends ResourceRecord {
-  // Cache record for authentication state
-}
-```
-
-### Factory Functions
-
-#### `makeAuthService(alias?: string): AuthService`
-
-Creates a server authentication service instance with signature verification capabilities.
-
-**Parameters:**
-- `alias` (optional): Service alias (default: `DEFAULT_ALIAS`)
-
-**Returns:** AuthService instance
-
-**Features:**
-- Ed25519 signature verification
-- Token unpacking and validation
-- Cache integration for performance
-- Trusted entity authentication
-
-**Example:**
-```typescript
-import { makeAuthService } from '@owlmeans/server-auth'
-
-const authService = makeAuthService('auth')
-
-// Use as a guard service
-const isAuthenticated = await authService.match(request)
-if (isAuthenticated) {
-  const result = await authService.handle(request, response)
-}
-
-// Authenticate tokens
-const validatedToken = await authService.authenticate(authToken)
-
-// Unpack tokens to Auth objects
-const auth = await authService.unpack(bearerToken)
-```
-
-### Service Methods
-
-#### `match(req: AbstractRequest): Promise<boolean>`
-
-Checks if a request contains valid authentication token format.
-
-**Parameters:**
-- `req`: Request object to check for authentication
-
-**Returns:** Promise resolving to boolean indicating if auth token is present
-
-**Example:**
-```typescript
-const hasAuth = await authService.match(req)
-if (hasAuth) {
-  // Request has authentication token
-}
-```
-
-#### `handle<T>(req: AbstractRequest, res: AbstractResponse<Auth>): Promise<T>`
-
-Processes authentication request and validates the token signature.
-
-**Parameters:**
-- `req`: Request object with authentication token
-- `res`: Response object to resolve with Auth data
-
-**Returns:** Promise resolving to boolean indicating success
-
-**Process:**
-1. Extracts Ed25519 token from request
-2. Creates envelope from token
-3. Verifies signature against trusted entity
-4. Resolves response with Auth object on success
-
-**Example:**
-```typescript
-const success = await authService.handle(req, res)
-if (success) {
-  // Authentication successful, Auth data available in res
-}
-```
-
-#### `authenticate(token: AuthToken): Promise<AuthToken>`
-
-Validates and processes an authentication token.
-
-**Parameters:**
-- `token`: Authentication token to validate
-
-**Returns:** Promise resolving to validated AuthToken
-
-**Throws:** `AuthenFailed` if token validation fails
-
-**Example:**
-```typescript
-try {
-  const validToken = await authService.authenticate(userToken)
-  // Token is valid and can be used
-} catch (error) {
-  if (error instanceof AuthenFailed) {
-    // Handle authentication failure
-  }
-}
-```
-
-#### `unpack(token: string): Promise<Auth>`
-
-Unpacks a bearer token string and extracts the Auth object.
-
-**Parameters:**
-- `token`: Bearer token string (e.g., "Bearer ed25519:...")
-
-**Returns:** Promise resolving to Auth object
-
-**Process:**
-1. Splits bearer token to extract authorization part
-2. Creates envelope from token
-3. Verifies signature against trusted entity
-4. Returns unpacked Auth object
-
-**Example:**
-```typescript
-const bearerToken = "Bearer ed25519:eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9..."
-const auth = await authService.unpack(bearerToken)
-
-console.log(auth.userId) // Access user information
-console.log(auth.role)   // Access user role
+bun add @owlmeans/server-auth
 ```
 
-### Constants
+## Usage
 
-#### Authentication Constants
+Registered automatically by `makeContext()` from `@owlmeans/server-app`. To customize, pass `customize: true` and append manually:
 
 ```typescript
-const DEFAULT_ALIAS = 'auth'                    // Default service alias
-const AUTH_CACHE = 'auth-cache'                 // Cache resource name
-const AUTH_SRV_KEY = 'server-auth-key'          // Server key identifier
-const AUTHEN_TIMEFRAME = 60 * 60 * 1000        // Authentication timeframe (1 hour)
-```
-
-### Modules
+import { makeContext } from '@owlmeans/server-app'
+import { appendAuthService, AUTH_CACHE } from '@owlmeans/server-auth'
 
-The package provides predefined authentication modules for server-side routing. These modules are automatically configured with proper validation schemas and authentication handlers.
+const context = makeContext(appConfig, true)  // skip default auth
 
-```typescript
-import { modules } from '@owlmeans/server-auth'
-
-// Modules include server-side authentication endpoints
-// with proper request/response validation
+// Append auth with custom config
+appendAuthService(context)
 ```
 
-## Usage Examples
-
-### Basic Server Authentication Setup
+Reference the guard by alias when protecting routes:
 
 ```typescript
-import { makeAuthService } from '@owlmeans/server-auth'
-import { makeServerContext } from '@owlmeans/server-context'
-
-// Create server context
-const context = makeServerContext({
-  service: 'auth-server',
-  type: AppType.Backend,
-  layer: Layer.Service
-})
+import { DAUTH_GUARD } from '@owlmeans/server-app'
+// same as DEFAULT_ALIAS from @owlmeans/server-auth
 
-// Create and register authentication service
-const authService = makeAuthService('auth')
-context.registerService(authService)
-
-await context.configure().init()
-
-// Service is now available for authentication
+const adminModule = module(route('admin', '/admin'), guard(DAUTH_GUARD))
 ```
 
-### Using as Module Guard
+## API
 
-```typescript
-import { guard } from '@owlmeans/module'
+### `appendAuthService<C, T>(context): void`
 
-// Create module with authentication guard
-const protectedModule = module(
-  route('protected', '/api/protected'),
-  guard('auth') // References the auth service
-)
+Registers the Ed25519 auth service and its nonce cache resource into the context.
 
-// The auth service will automatically validate tokens for this module
-```
+### `makeAuthService(alias?): AuthService`
 
-### Manual Token Validation
+Creates the auth service directly (used internally by `appendAuthService`).
 
-```typescript
-const authService = makeAuthService()
+### `DEFAULT_ALIAS`
 
-// Validate incoming request
-const isValid = await authService.match(req)
-if (isValid) {
-  const success = await authService.handle(req, res)
-  if (success) {
-    // Authentication successful
-    const auth = res.value // Auth object
-    console.log(`Authenticated user: ${auth.userId}`)
-  }
-}
-```
-
-### Token Processing
+The auth service alias: `'auth'`. Re-exported as `DAUTH_GUARD` from `@owlmeans/server-app`.
 
-```typescript
-// Process authentication token
-try {
-  const authToken = { token: 'user-auth-token' }
-  const validatedToken = await authService.authenticate(authToken)
-  
-  // Token is now validated and can be used
-  console.log('Token validated successfully')
-} catch (error) {
-  console.error('Authentication failed:', error.message)
-}
-```
+### `AUTH_CACHE`
 
-### Bearer Token Unpacking
+Resource alias for the nonce replay-prevention cache.
 
-```typescript
-// Extract Auth from bearer token
-const bearerToken = req.headers.authorization // "Bearer ed25519:..."
-
-try {
-  const auth = await authService.unpack(bearerToken)
-  
-  // Use Auth object
-  console.log(`User: ${auth.userId}, Role: ${auth.role}`)
-  console.log(`Scopes: ${auth.scopes.join(', ')}`)
-} catch (error) {
-  console.error('Token unpacking failed:', error)
-}
-```
-
-### Integration with Express.js
-
-```typescript
-import express from 'express'
-
-const app = express()
-const authService = makeAuthService()
-
-// Authentication middleware
-app.use(async (req, res, next) => {
-  const hasAuth = await authService.match(req)
-  
-  if (hasAuth) {
-    try {
-      const authRes = { resolve: (auth) => { req.auth = auth } }
-      await authService.handle(req, authRes)
-      next()
-    } catch (error) {
-      res.status(401).json({ error: 'Authentication failed' })
-    }
-  } else {
-    res.status(401).json({ error: 'No authentication provided' })
-  }
-})
-
-// Protected routes
-app.get('/api/protected', (req, res) => {
-  res.json({ 
-    message: 'Access granted',
-    user: req.auth.userId 
-  })
-})
-```
-
-### Cache Integration
-
-```typescript
-// Service automatically uses cache for performance
-// Cache resource should be configured in context
-
-const context = makeServerContext({
-  service: 'auth-app',
-  // ... other config
-  resources: [{
-    alias: 'auth-cache',
-    type: 'redis', // or other cache implementation
-    config: {
-      // cache configuration
-    }
-  }]
-})
-
-const authService = makeAuthService()
-context.registerService(authService)
-
-// Cache is automatically used for authentication state
-```
+## Product-Viable Integration Notes
 
-### Multi-Service Authentication
-
-```typescript
-// Configure multiple auth services for different purposes
-const userAuthService = makeAuthService('user-auth')
-const serviceAuthService = makeAuthService('service-auth') 
-const adminAuthService = makeAuthService('admin-auth')
-
-context.registerService(userAuthService)
-context.registerService(serviceAuthService)
-context.registerService(adminAuthService)
-
-// Use different services for different authentication needs
-const userAuth = await userAuthService.authenticate(userToken)
-const serviceAuth = await serviceAuthService.authenticate(serviceToken)
-```
-
-## Authentication Manager Application
-
-The package includes a complete authentication manager application for centralized authentication:
-
-### Manager Features
-
-- **Central Authentication Hub**: Serves as authentication center for microservices
-- **Token Issuance**: Issues authentication tokens for validated users
-- **Multi-Service Support**: Handles authentication for multiple services
-- **Admin Interface**: Management interface for authentication configuration
-
-### Manager Usage
-
-```typescript
-// Located in src/manager - see manager/README.md for details
-import { authManager } from '@owlmeans/server-auth/manager'
-
-// The manager provides a complete authentication application
-// that can be deployed as a standalone service
-```
-
-## Security Considerations
-
-### Token Security
-- All tokens use Ed25519 signatures for non-repudiable authentication
-- Tokens include expiration times to limit exposure windows
-- Signature verification prevents token tampering
-
-### Trusted Entities
-- Authentication relies on trusted entity verification
-- Trusted entities must be properly configured and secured
-- Private keys should be stored securely and rotated regularly
-
-### Cache Security
-- Authentication cache should be secured and encrypted
-- Cache entries should have appropriate TTL values
-- Cache should be cleared on security events
-
-## Error Handling
-
-The package provides comprehensive error handling:
-
-- **AuthenFailed**: Authentication token validation failed
-- **AuthorizationError**: Authorization verification failed
-- **SyntaxError**: Configuration or context errors
-
-```typescript
-try {
-  const auth = await authService.unpack(token)
-} catch (error) {
-  if (error instanceof AuthenFailed) {
-    // Handle authentication failure
-  } else if (error instanceof AuthorizationError) {
-    // Handle authorization failure
-  }
-}
-```
-
-## Performance Considerations
-
-- **Cache Integration**: Uses cache for frequently accessed authentication data
-- **Signature Verification**: Ed25519 operations are computationally efficient
-- **Token Reuse**: Validated tokens can be cached to avoid repeated verification
-- **Resource Management**: Proper cleanup of authentication resources
-
-## Integration with OwlMeans Ecosystem
-
-This package integrates with:
-
-- **@owlmeans/auth-common**: Common authentication components
-- **@owlmeans/client-auth**: Client-side authentication
-- **@owlmeans/basic-envelope**: Cryptographic message envelopes
-- **@owlmeans/server-context**: Server context management
-- **@owlmeans/module**: Module guard system integration
-
-## Best Practices
-
-1. **Configure cache** for better authentication performance
-2. **Use trusted entities** for secure signature verification
-3. **Implement proper error handling** for authentication failures
-4. **Set appropriate token TTL** values for security
-5. **Monitor authentication logs** for security analysis
-6. **Rotate trusted keys** regularly
+- Register `appendAuthService(context)` before `appendAuthIdentityResources(context)` and product-specific gate services.
+- Register `AUTH_CACHE` explicitly as a Redis resource when customizing the backend context.
+- This package verifies bearer tokens and populates `request.auth`; authorization remains the job of module gates and handler-level entity checks.
+- Pair it with `@owlmeans/server-auth-identity` when external provider login should produce durable local account/profile/credentials records.
 
 ## Related Packages
 
-- **@owlmeans/client-auth**: Client-side authentication
-- **@owlmeans/auth-common**: Common authentication components
-- **@owlmeans/server-context**: Server context management
-- **@owlmeans/basic-envelope**: Cryptographic envelopes
-- **@owlmeans/static-resource**: Resource management
-
-## Manager Application
-
-For detailed information about the authentication manager application, see the [Manager README](src/manager/README.md).
-
-The manager provides a complete authentication service that can function as a central authentication hub for microservices architectures.
+- [`@owlmeans/auth-common`](../auth-common) — `GUARD_ED25519` constant and auth modules
+- [`@owlmeans/server-app`](../server-app) — `makeContext` calls `appendAuthService` by default

package/build/actions/service.d.ts

@@ -1,4 +1,4 @@
-import type { RefedModuleHandler } from '@owlmeans/server-module';
+import type { RefedEntrypointHandler } from '@owlmeans/server-entrypoint';
 import type { AuthToken } from '@owlmeans/auth';
-export declare const authenticate: RefedModuleHandler<AuthToken>;
+export declare const authenticate: RefedEntrypointHandler<AuthToken>;
 //# sourceMappingURL=service.d.ts.map

package/build/actions/service.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"service.d.ts","sourceRoot":"","sources":["../../src/actions/service.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,yBAAyB,CAAA;AACjE,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAA;AAS/C,eAAO,MAAM,YAAY,EAAE,kBAAkB,CAAC,SAAS,CAKtD,CAAA"}
+{"version":3,"file":"service.d.ts","sourceRoot":"","sources":["../../src/actions/service.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,6BAA6B,CAAA;AACzE,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAA;AAS/C,eAAO,MAAM,YAAY,EAAE,sBAAsB,CAAC,SAAS,CAK1D,CAAA"}

package/build/actions/service.js.map

@@ -1 +1 @@
-{"version":3,"file":"service.js","sourceRoot":"","sources":["../../src/actions/service.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,UAAU,EAAE,MAAM,sBAAsB,CAAA;AAGjD,OAAO,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAA;AAKjD,MAAM,CAAC,MAAM,YAAY,GAAkC,UAAU,CACnE,KAAK,EAAE,OAAkB,EAAE,GAAG,EAAE,EAAE;IAChC,MAAM,OAAO,GAAG,aAAa,CAAC,GAAG,EAAE,cAAc,CAAY,CAAA;IAC7D,OAAO,MAAM,OAAO,CAAC,IAAI,EAAE,CAAC,YAAY,CAAC,OAAO,CAAC,CAAA;AACnD,CAAC,CACF,CAAA"}
+{"version":3,"file":"service.js","sourceRoot":"","sources":["../../src/actions/service.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,UAAU,EAAE,MAAM,sBAAsB,CAAA;AAGjD,OAAO,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAA;AAKjD,MAAM,CAAC,MAAM,YAAY,GAAsC,UAAU,CACvE,KAAK,EAAE,OAAkB,EAAE,GAAG,EAAE,EAAE;IAChC,MAAM,OAAO,GAAG,aAAa,CAAC,GAAG,EAAE,cAAc,CAAY,CAAA;IAC7D,OAAO,MAAM,OAAO,CAAC,IAAI,EAAE,CAAC,YAAY,CAAC,OAAO,CAAC,CAAA;AACnD,CAAC,CACF,CAAA"}

package/build/manager/actions/manager.d.ts

@@ -1,6 +1,6 @@
 import type { AllowanceRequest, AuthCredentials } from '@owlmeans/auth';
-import type { RefedModuleHandler } from '@owlmeans/server-module';
-export declare const authenticationInit: RefedModuleHandler<AllowanceRequest>;
-export declare const authenticate: RefedModuleHandler<AuthCredentials>;
-export declare const rely: RefedModuleHandler<void>;
+import type { RefedEntrypointHandler } from '@owlmeans/server-entrypoint';
+export declare const authenticationInit: RefedEntrypointHandler<AllowanceRequest>;
+export declare const authenticate: RefedEntrypointHandler<AuthCredentials>;
+export declare const rely: RefedEntrypointHandler<void>;
 //# sourceMappingURL=manager.d.ts.map

package/build/manager/actions/manager.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"manager.d.ts","sourceRoot":"","sources":["../../../src/manager/actions/manager.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,gBAAgB,EAAE,eAAe,EAAE,MAAM,gBAAgB,CAAA;AAGvE,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,yBAAyB,CAAA;AAIjE,eAAO,MAAM,kBAAkB,EAAE,kBAAkB,CAAC,gBAAgB,CAGnE,CAAA;AAED,eAAO,MAAM,YAAY,EAAE,kBAAkB,CAAC,eAAe,CAG5D,CAAA;AAED,eAAO,MAAM,IAAI,EAAE,kBAAkB,CAAC,IAAI,CAKzC,CAAA"}
+{"version":3,"file":"manager.d.ts","sourceRoot":"","sources":["../../../src/manager/actions/manager.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,gBAAgB,EAAE,eAAe,EAAE,MAAM,gBAAgB,CAAA;AAGvE,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,6BAA6B,CAAA;AAIzE,eAAO,MAAM,kBAAkB,EAAE,sBAAsB,CAAC,gBAAgB,CAGvE,CAAA;AAED,eAAO,MAAM,YAAY,EAAE,sBAAsB,CAAC,eAAe,CAGhE,CAAA;AAED,eAAO,MAAM,IAAI,EAAE,sBAAsB,CAAC,IAAI,CAK7C,CAAA"}

package/build/manager/actions/manager.js.map

@@ -1 +1 @@
-{"version":3,"file":"manager.js","sourceRoot":"","sources":["../../../src/manager/actions/manager.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,UAAU,EAAE,MAAM,sBAAsB,CAAA;AACjD,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAA;AAG3C,OAAO,EAAE,gBAAgB,EAAE,MAAM,yBAAyB,CAAA;AAE1D,MAAM,CAAC,MAAM,kBAAkB,GAAyC,UAAU,CAChF,KAAK,EAAE,OAAyB,EAAE,GAAG,EAAE,EAAE,CACvC,MAAM,aAAa,CAAC,GAA4B,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAClE,CAAA;AAED,MAAM,CAAC,MAAM,YAAY,GAAwC,UAAU,CACzE,KAAK,EAAE,OAAwB,EAAE,GAAG,EAAE,EAAE,CACtC,MAAM,aAAa,CAAC,GAA4B,CAAC,CAAC,YAAY,CAAC,OAAO,CAAC,CAC1E,CAAA;AAED,MAAM,CAAC,MAAM,IAAI,GAA6B,gBAAgB;AAC5D,4DAA4D;AAC5D,+DAA+D;AAC/D,KAAK,EAAE,IAAI,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE,CACvB,MAAM,aAAa,CAAC,GAA4B,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,CAAC,IAAI,CAAC,CACzE,CAAA"}
+{"version":3,"file":"manager.js","sourceRoot":"","sources":["../../../src/manager/actions/manager.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,UAAU,EAAE,MAAM,sBAAsB,CAAA;AACjD,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAA;AAG3C,OAAO,EAAE,gBAAgB,EAAE,MAAM,yBAAyB,CAAA;AAE1D,MAAM,CAAC,MAAM,kBAAkB,GAA6C,UAAU,CACpF,KAAK,EAAE,OAAyB,EAAE,GAAG,EAAE,EAAE,CACvC,MAAM,aAAa,CAAC,GAA4B,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAClE,CAAA;AAED,MAAM,CAAC,MAAM,YAAY,GAA4C,UAAU,CAC7E,KAAK,EAAE,OAAwB,EAAE,GAAG,EAAE,EAAE,CACtC,MAAM,aAAa,CAAC,GAA4B,CAAC,CAAC,YAAY,CAAC,OAAO,CAAC,CAC1E,CAAA;AAED,MAAM,CAAC,MAAM,IAAI,GAAiC,gBAAgB;AAChE,4DAA4D;AAC5D,+DAA+D;AAC/D,KAAK,EAAE,IAAI,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE,CACvB,MAAM,aAAa,CAAC,GAA4B,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,CAAC,IAAI,CAAC,CACzE,CAAA"}

package/build/manager/exports.d.ts

@@ -4,11 +4,11 @@ export { addWebService } from '@owlmeans/client-config';
 export { service, TRUSTED } from '@owlmeans/config';
 export { AppType, assertContext } from '@owlmeans/context';
 export { klusterize } from '@owlmeans/kluster';
-export { elevate } from '@owlmeans/server-module';
-export { elevate as celevate, stab } from '@owlmeans/client-module';
-export type { RefedModuleHandler } from '@owlmeans/server-module';
+export { elevate } from '@owlmeans/server-entrypoint';
+export { elevate as celevate, stab } from '@owlmeans/client-entrypoint';
+export type { RefedEntrypointHandler } from '@owlmeans/server-entrypoint';
 export { handleIntermediate, handleBody, handleRequest, handleParams } from '@owlmeans/server-api';
-export type { AbstractRequest, AbstractResponse } from '@owlmeans/module';
+export type { AbstractRequest, AbstractResponse } from '@owlmeans/entrypoint';
 export { backend } from '@owlmeans/route';
 export { AUTHEN, AUTHEN_AUTHEN, AUTHEN_INIT } from '@owlmeans/auth';
 export { GUARD_ED25519, BED255_CASHE_RESOURCE } from '@owlmeans/auth-common';

package/build/manager/exports.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"exports.d.ts","sourceRoot":"","sources":["../../src/manager/exports.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,MAAM,EAAE,MAAM,0BAA0B,CAAA;AACjD,YAAY,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAA;AAC1D,OAAO,EAAE,aAAa,EAAE,MAAM,yBAAyB,CAAA;AACvD,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,kBAAkB,CAAA;AACnD,OAAO,EAAE,OAAO,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAA;AAC1D,OAAO,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAA;AAC9C,OAAO,EAAE,OAAO,EAAE,MAAM,yBAAyB,CAAA;AACjD,OAAO,EAAE,OAAO,IAAI,QAAQ,EAAE,IAAI,EAAE,MAAM,yBAAyB,CAAA;AACnE,YAAY,EAAE,kBAAkB,EAAE,MAAM,yBAAyB,CAAA;AACjE,OAAO,EAAE,kBAAkB,EAAE,UAAU,EAAE,aAAa,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAA;AAClG,YAAY,EAAE,eAAe,EAAE,gBAAgB,EAAE,MAAM,kBAAkB,CAAA;AACzE,OAAO,EAAE,OAAO,EAAE,MAAM,iBAAiB,CAAA;AAEzC,OAAO,EAAE,MAAM,EAAE,aAAa,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAA;AACnE,OAAO,EAAE,aAAa,EAAE,qBAAqB,EAAE,MAAM,uBAAuB,CAAA;AAC5E,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAA"}
+{"version":3,"file":"exports.d.ts","sourceRoot":"","sources":["../../src/manager/exports.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,MAAM,EAAE,MAAM,0BAA0B,CAAA;AACjD,YAAY,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAA;AAC1D,OAAO,EAAE,aAAa,EAAE,MAAM,yBAAyB,CAAA;AACvD,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,kBAAkB,CAAA;AACnD,OAAO,EAAE,OAAO,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAA;AAC1D,OAAO,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAA;AAC9C,OAAO,EAAE,OAAO,EAAE,MAAM,6BAA6B,CAAA;AACrD,OAAO,EAAE,OAAO,IAAI,QAAQ,EAAE,IAAI,EAAE,MAAM,6BAA6B,CAAA;AACvE,YAAY,EAAE,sBAAsB,EAAE,MAAM,6BAA6B,CAAA;AACzE,OAAO,EAAE,kBAAkB,EAAE,UAAU,EAAE,aAAa,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAA;AAClG,YAAY,EAAE,eAAe,EAAE,gBAAgB,EAAE,MAAM,sBAAsB,CAAA;AAC7E,OAAO,EAAE,OAAO,EAAE,MAAM,iBAAiB,CAAA;AAEzC,OAAO,EAAE,MAAM,EAAE,aAAa,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAA;AACnE,OAAO,EAAE,aAAa,EAAE,qBAAqB,EAAE,MAAM,uBAAuB,CAAA;AAC5E,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAA"}

package/build/manager/exports.js

@@ -3,8 +3,8 @@ export { addWebService } from '@owlmeans/client-config';
 export { service, TRUSTED } from '@owlmeans/config';
 export { AppType, assertContext } from '@owlmeans/context';
 export { klusterize } from '@owlmeans/kluster';
-export { elevate } from '@owlmeans/server-module';
-export { elevate as celevate, stab } from '@owlmeans/client-module';
+export { elevate } from '@owlmeans/server-entrypoint';
+export { elevate as celevate, stab } from '@owlmeans/client-entrypoint';
 export { handleIntermediate, handleBody, handleRequest, handleParams } from '@owlmeans/server-api';
 export { backend } from '@owlmeans/route';
 export { AUTHEN, AUTHEN_AUTHEN, AUTHEN_INIT } from '@owlmeans/auth';

package/build/manager/exports.js.map

@@ -1 +1 @@
-{"version":3,"file":"exports.js","sourceRoot":"","sources":["../../src/manager/exports.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,MAAM,EAAE,MAAM,0BAA0B,CAAA;AAEjD,OAAO,EAAE,aAAa,EAAE,MAAM,yBAAyB,CAAA;AACvD,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,kBAAkB,CAAA;AACnD,OAAO,EAAE,OAAO,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAA;AAC1D,OAAO,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAA;AAC9C,OAAO,EAAE,OAAO,EAAE,MAAM,yBAAyB,CAAA;AACjD,OAAO,EAAE,OAAO,IAAI,QAAQ,EAAE,IAAI,EAAE,MAAM,yBAAyB,CAAA;AAEnE,OAAO,EAAE,kBAAkB,EAAE,UAAU,EAAE,aAAa,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAA;AAElG,OAAO,EAAE,OAAO,EAAE,MAAM,iBAAiB,CAAA;AAEzC,OAAO,EAAE,MAAM,EAAE,aAAa,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAA;AACnE,OAAO,EAAE,aAAa,EAAE,qBAAqB,EAAE,MAAM,uBAAuB,CAAA;AAC5E,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAA"}
+{"version":3,"file":"exports.js","sourceRoot":"","sources":["../../src/manager/exports.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,MAAM,EAAE,MAAM,0BAA0B,CAAA;AAEjD,OAAO,EAAE,aAAa,EAAE,MAAM,yBAAyB,CAAA;AACvD,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,kBAAkB,CAAA;AACnD,OAAO,EAAE,OAAO,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAA;AAC1D,OAAO,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAA;AAC9C,OAAO,EAAE,OAAO,EAAE,MAAM,6BAA6B,CAAA;AACrD,OAAO,EAAE,OAAO,IAAI,QAAQ,EAAE,IAAI,EAAE,MAAM,6BAA6B,CAAA;AAEvE,OAAO,EAAE,kBAAkB,EAAE,UAAU,EAAE,aAAa,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAA;AAElG,OAAO,EAAE,OAAO,EAAE,MAAM,iBAAiB,CAAA;AAEzC,OAAO,EAAE,MAAM,EAAE,aAAa,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAA;AACnE,OAAO,EAAE,aAAa,EAAE,qBAAqB,EAAE,MAAM,uBAAuB,CAAA;AAC5E,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAA"}

package/build/manager/main.js

@@ -1,6 +1,6 @@
 import { modules } from './modules.js';
 export const main = async (ctx) => {
-    ctx.registerModules(modules);
+    ctx.registerEntrypoints(modules);
     await ctx.configure().init();
     await ctx.getApiServer().listen();
 };

package/build/manager/main.js.map

@@ -1 +1 @@
-{"version":3,"file":"main.js","sourceRoot":"","sources":["../../src/manager/main.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,OAAO,EAAE,MAAM,cAAc,CAAA;AAGtC,MAAM,CAAC,MAAM,IAAI,GAAG,KAAK,EAAgD,GAAM,EAAE,EAAE;IACjF,GAAG,CAAC,eAAe,CAAC,OAAO,CAAC,CAAA;IAC5B,MAAM,GAAG,CAAC,SAAS,EAAE,CAAC,IAAI,EAAE,CAAA;IAC5B,MAAM,GAAG,CAAC,YAAY,EAAE,CAAC,MAAM,EAAE,CAAA;AACnC,CAAC,CAAA"}
+{"version":3,"file":"main.js","sourceRoot":"","sources":["../../src/manager/main.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,OAAO,EAAE,MAAM,cAAc,CAAA;AAGtC,MAAM,CAAC,MAAM,IAAI,GAAG,KAAK,EAAgD,GAAM,EAAE,EAAE;IACjF,GAAG,CAAC,mBAAmB,CAAC,OAAO,CAAC,CAAA;IAChC,MAAM,GAAG,CAAC,SAAS,EAAE,CAAC,IAAI,EAAE,CAAA;IAC5B,MAAM,GAAG,CAAC,YAAY,EAAE,CAAC,MAAM,EAAE,CAAA;AACnC,CAAC,CAAA"}

package/build/manager/model.js

@@ -8,7 +8,7 @@ export const makeAuthModel = (context) => {
     const cache = (context) => context.resource(AUTH_CACHE);
     const model = {
         init: async (request) => {
-            const plugin = getPlugin(request.type, context);
+            const plugin = await getPlugin(request.type, context);
             const response = await plugin.init(request);
             const envelope = makeEnvelopeModel(plugin.type);
             /**
@@ -43,7 +43,7 @@ export const makeAuthModel = (context) => {
             if (credential.userId == null) {
                 throw new AuthenPayloadError('userId');
             }
-            const plugin = getPlugin(envelope.type(), context);
+            const plugin = await getPlugin(envelope.type(), context);
             // @TODO this token PROBABLY needs to be registered somewhere and rechecked
             // from time to time to make sure that the session is not deleted 
             // or permission hasn't changed.