@platform-mesh/portal-server-lib 0.6.9 → 0.6.11

package/dist/portal-options/auth-config-provider.d.ts

@@ -7,5 +7,4 @@ export declare class PMAuthConfigProvider implements AuthConfigService {
     constructor(discoveryService: DiscoveryService, kcpKubernetesService: KcpKubernetesService);
     getAuthConfig(request: Request): Promise<ServerAuthVariables>;
     private readClientId;
-    private getWelcomeClientSecret;
 }

package/dist/portal-options/auth-config-provider.js

@@ -9,7 +9,6 @@ var __metadata = (this && this.__metadata) || function (k, v) {
 };
 import { KcpKubernetesService } from './services/kcp-k8s.service.js';
 import { getDiscoveryEndpoint, getOrganization } from './utils/domain.js';
-import { CoreV1Api, KubeConfig } from '@kubernetes/client-node';
 import { HttpException, HttpStatus, Injectable } from '@nestjs/common';
 import { DiscoveryService, } from '@openmfp/portal-server-lib';
 let PMAuthConfigProvider = class PMAuthConfigProvider {
@@ -22,9 +21,9 @@ let PMAuthConfigProvider = class PMAuthConfigProvider {
     async getAuthConfig(request) {
         const oidcUrl = getDiscoveryEndpoint(request);
         const org = getOrganization(request);
-        const clientId = org === 'welcome' ? 'welcome' : await this.readClientId(org);
+        const clientId = await this.readClientId(org);
         const clientSecret = org === 'welcome'
-            ? await this.getWelcomeClientSecret(org)
+            ? await this.kcpKubernetesService.getClientSecret(org, `portal-client-secret-${org}`)
             : await this.kcpKubernetesService.getClientSecret(org);
         const baseDomain = process.env['BASE_DOMAINS_DEFAULT'];
         const oidc = await this.discoveryService.getOIDC(oidcUrl);
@@ -56,30 +55,15 @@ let PMAuthConfigProvider = class PMAuthConfigProvider {
             plural: 'identityproviderconfigurations',
             name: orgName,
         };
+        if (orgName === 'welcome') {
+            const result = await this.kcpKubernetesService.getClusterCustomObjectByWorkspacePath(k8sResourceDescriptor, 'root:platform-mesh-system');
+            return result.status.managedClients[orgName].clientId;
+        }
         const result = await this.kcpKubernetesService.listClusterCustomObject(k8sResourceDescriptor, {
             organization: orgName,
         });
         return result.status.managedClients[orgName].clientId;
     }
-    async getWelcomeClientSecret(orgName) {
-        const secretName = `portal-client-secret-${orgName}`;
-        const namespace = 'platform-mesh-system';
-        const kc = new KubeConfig();
-        kc.loadFromDefault();
-        const k8sApi = kc.makeApiClient(CoreV1Api);
-        try {
-            const res = await k8sApi.readNamespacedSecret({
-                namespace,
-                name: secretName,
-            });
-            const secretData = res.data;
-            return Buffer.from(secretData['attribute.client_secret'], 'base64').toString('utf-8');
-        }
-        catch (err) {
-            console.error(`Failed to fetch secret ${secretName}:`, err.response?.body || err);
-            throw err;
-        }
-    }
 };
 PMAuthConfigProvider = __decorate([
     Injectable(),

package/dist/portal-options/auth-config-provider.js.map

@@ -1 +1 @@
-{"version":3,"file":"auth-config-provider.js","sourceRoot":"","sources":["../../src/portal-options/auth-config-provider.ts"],"names":[],"mappings":";;;;;;;;;AAIA,OAAO,EAAE,oBAAoB,EAAE,MAAM,+BAA+B,CAAC;AACrE,OAAO,EAAE,oBAAoB,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC;AAC1E,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,MAAM,yBAAyB,CAAC;AAChE,OAAO,EAAE,aAAa,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,gBAAgB,CAAC;AACvE,OAAO,EAEL,gBAAgB,GAEjB,MAAM,4BAA4B,CAAC;AAI7B,IAAM,oBAAoB,GAA1B,MAAM,oBAAoB;IAErB;IACA;IAFV,YACU,gBAAkC,EAClC,oBAA0C;QAD1C,qBAAgB,GAAhB,gBAAgB,CAAkB;QAClC,yBAAoB,GAApB,oBAAoB,CAAsB;IACjD,CAAC;IAEJ,KAAK,CAAC,aAAa,CAAC,OAAgB;QAClC,MAAM,OAAO,GAAG,oBAAoB,CAAC,OAAO,CAAC,CAAC;QAC9C,MAAM,GAAG,GAAG,eAAe,CAAC,OAAO,CAAC,CAAC;QAErC,MAAM,QAAQ,GACZ,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC;QAC/D,MAAM,YAAY,GAChB,GAAG,KAAK,SAAS;YACf,CAAC,CAAC,MAAM,IAAI,CAAC,sBAAsB,CAAC,GAAG,CAAC;YACxC,CAAC,CAAC,MAAM,IAAI,CAAC,oBAAoB,CAAC,eAAe,CAAC,GAAG,CAAC,CAAC;QAE3D,MAAM,UAAU,GAAG,OAAO,CAAC,GAAG,CAAC,sBAAsB,CAAC,CAAC;QACvD,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;QAC1D,MAAM,cAAc,GAClB,IAAI,EAAE,sBAAsB,IAAI,OAAO,CAAC,GAAG,CAAC,yBAAyB,CAAC,CAAC;QACzE,MAAM,aAAa,GACjB,IAAI,EAAE,cAAc,IAAI,OAAO,CAAC,GAAG,CAAC,mBAAmB,CAAC,CAAC;QAE3D,IAAI,CAAC,cAAc,IAAI,CAAC,aAAa,IAAI,CAAC,QAAQ,IAAI,CAAC,YAAY,EAAE,CAAC;YACpE,MAAM,eAAe,GAAG,CAAC,CAAC,YAAY,CAAC;YACvC,MAAM,IAAI,aAAa,CACrB;gBACE,OAAO,EAAE,wCAAwC;gBACjD,KAAK,EAAE,qDAAqD,cAAc,qBAAqB,aAAa,gBAAgB,QAAQ,yBAAyB,MAAM,CACjK,eAAe,CAChB,EAAE;gBACH,UAAU,EAAE,UAAU,CAAC,SAAS;aACjC,EACD,UAAU,CAAC,SAAS,CACrB,CAAC;QACJ,CAAC;QAED,OAAO;YACL,OAAO,EAAE,GAAG;YACZ,UAAU;YACV,QAAQ;YACR,YAAY;YACZ,cAAc;YACd,aAAa;YACb,aAAa,EAAE,IAAI,EAAE,MAAM;YAC3B,aAAa,EAAE,IAAI,EAAE,oBAAoB;SAC1C,CAAC;IACJ,CAAC;IAEO,KAAK,CAAC,YAAY,CAAC,OAAe;QACxC,MAAM,qBAAqB,GAA0B;YACnD,KAAK,EAAE,uBAAuB;YAC9B,OAAO,EAAE,UAAU;YACnB,MAAM,EAAE,gCAAgC;YACxC,IAAI,EAAE,OAAO;SACd,CAAC;QAEF,MAAM,MAAM,GACV,MAAM,IAAI,CAAC,oBAAoB,CAAC,uBAAuB,CACrD,qBAAqB,EACrB;YACE,YAAY,EAAE,OAAO;SACtB,CACF,CAAC;QACJ,OAAO,MAAM,CAAC,MAAM,CAAC,cAAc,CAAC,OAAO,CAAC,CAAC,QAAQ,CAAC;IACxD,CAAC;IAEO,KAAK,CAAC,sBAAsB,CAAC,OAAe;QAClD,MAAM,UAAU,GAAG,wBAAwB,OAAO,EAAE,CAAC;QACrD,MAAM,SAAS,GAAG,sBAAsB,CAAC;QAEzC,MAAM,EAAE,GAAG,IAAI,UAAU,EAAE,CAAC;QAC5B,EAAE,CAAC,eAAe,EAAE,CAAC;QACrB,MAAM,MAAM,GAAG,EAAE,CAAC,aAAa,CAAC,SAAS,CAAC,CAAC;QAC3C,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,oBAAoB,CAAC;gBAC5C,SAAS;gBACT,IAAI,EAAE,UAAU;aACjB,CAAC,CAAC;YACH,MAAM,UAAU,GAAG,GAAG,CAAC,IAAI,CAAC;YAE5B,OAAO,MAAM,CAAC,IAAI,CAChB,UAAU,CAAC,yBAAyB,CAAC,EACrC,QAAQ,CACT,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;QACtB,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,CAAC,KAAK,CACX,0BAA0B,UAAU,GAAG,EACvC,GAAG,CAAC,QAAQ,EAAE,IAAI,IAAI,GAAG,CAC1B,CAAC;YACF,MAAM,GAAG,CAAC;QACZ,CAAC;IACH,CAAC;CACF,CAAA;AA9FY,oBAAoB;IADhC,UAAU,EAAE;qCAGiB,gBAAgB;QACZ,oBAAoB;GAHzC,oBAAoB,CA8FhC"}
+{"version":3,"file":"auth-config-provider.js","sourceRoot":"","sources":["../../src/portal-options/auth-config-provider.ts"],"names":[],"mappings":";;;;;;;;;AAIA,OAAO,EAAE,oBAAoB,EAAE,MAAM,+BAA+B,CAAC;AACrE,OAAO,EAAE,oBAAoB,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC;AAC1E,OAAO,EAAE,aAAa,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,gBAAgB,CAAC;AACvE,OAAO,EAEL,gBAAgB,GAEjB,MAAM,4BAA4B,CAAC;AAI7B,IAAM,oBAAoB,GAA1B,MAAM,oBAAoB;IAErB;IACA;IAFV,YACU,gBAAkC,EAClC,oBAA0C;QAD1C,qBAAgB,GAAhB,gBAAgB,CAAkB;QAClC,yBAAoB,GAApB,oBAAoB,CAAsB;IACjD,CAAC;IAEJ,KAAK,CAAC,aAAa,CAAC,OAAgB;QAClC,MAAM,OAAO,GAAG,oBAAoB,CAAC,OAAO,CAAC,CAAC;QAC9C,MAAM,GAAG,GAAG,eAAe,CAAC,OAAO,CAAC,CAAC;QAErC,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC;QAC9C,MAAM,YAAY,GAChB,GAAG,KAAK,SAAS;YACf,CAAC,CAAC,MAAM,IAAI,CAAC,oBAAoB,CAAC,eAAe,CAC7C,GAAG,EACH,wBAAwB,GAAG,EAAE,CAC9B;YACH,CAAC,CAAC,MAAM,IAAI,CAAC,oBAAoB,CAAC,eAAe,CAAC,GAAG,CAAC,CAAC;QAE3D,MAAM,UAAU,GAAG,OAAO,CAAC,GAAG,CAAC,sBAAsB,CAAC,CAAC;QACvD,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;QAC1D,MAAM,cAAc,GAClB,IAAI,EAAE,sBAAsB,IAAI,OAAO,CAAC,GAAG,CAAC,yBAAyB,CAAC,CAAC;QACzE,MAAM,aAAa,GACjB,IAAI,EAAE,cAAc,IAAI,OAAO,CAAC,GAAG,CAAC,mBAAmB,CAAC,CAAC;QAE3D,IAAI,CAAC,cAAc,IAAI,CAAC,aAAa,IAAI,CAAC,QAAQ,IAAI,CAAC,YAAY,EAAE,CAAC;YACpE,MAAM,eAAe,GAAG,CAAC,CAAC,YAAY,CAAC;YACvC,MAAM,IAAI,aAAa,CACrB;gBACE,OAAO,EAAE,wCAAwC;gBACjD,KAAK,EAAE,qDAAqD,cAAc,qBAAqB,aAAa,gBAAgB,QAAQ,yBAAyB,MAAM,CACjK,eAAe,CAChB,EAAE;gBACH,UAAU,EAAE,UAAU,CAAC,SAAS;aACjC,EACD,UAAU,CAAC,SAAS,CACrB,CAAC;QACJ,CAAC;QAED,OAAO;YACL,OAAO,EAAE,GAAG;YACZ,UAAU;YACV,QAAQ;YACR,YAAY;YACZ,cAAc;YACd,aAAa;YACb,aAAa,EAAE,IAAI,EAAE,MAAM;YAC3B,aAAa,EAAE,IAAI,EAAE,oBAAoB;SAC1C,CAAC;IACJ,CAAC;IAEO,KAAK,CAAC,YAAY,CAAC,OAAe;QACxC,MAAM,qBAAqB,GAA0B;YACnD,KAAK,EAAE,uBAAuB;YAC9B,OAAO,EAAE,UAAU;YACnB,MAAM,EAAE,gCAAgC;YACxC,IAAI,EAAE,OAAO;SACd,CAAC;QAEF,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;YAC1B,MAAM,MAAM,GACV,MAAM,IAAI,CAAC,oBAAoB,CAAC,qCAAqC,CACnE,qBAAqB,EACrB,2BAA2B,CAC5B,CAAC;YACJ,OAAO,MAAM,CAAC,MAAM,CAAC,cAAc,CAAC,OAAO,CAAC,CAAC,QAAQ,CAAC;QACxD,CAAC;QAED,MAAM,MAAM,GACV,MAAM,IAAI,CAAC,oBAAoB,CAAC,uBAAuB,CACrD,qBAAqB,EACrB;YACE,YAAY,EAAE,OAAO;SACtB,CACF,CAAC;QACJ,OAAO,MAAM,CAAC,MAAM,CAAC,cAAc,CAAC,OAAO,CAAC,CAAC,QAAQ,CAAC;IACxD,CAAC;CACF,CAAA;AA9EY,oBAAoB;IADhC,UAAU,EAAE;qCAGiB,gBAAgB;QACZ,oBAAoB;GAHzC,oBAAoB,CA8EhC"}

package/dist/portal-options/index.d.ts

@@ -1,10 +1,8 @@
 export * from './account-entity-context-provider.service.js';
+export * from './auth-config-provider.js';
+export * from './logout-callback.service.js';
 export * from './pm-portal-context.service.js';
 export * from './pm-request-context-provider.js';
-export * from './auth-config-provider.js';
 export * from './service-providers/content-configuration-service-providers.service.js';
 export * from './service-providers/kubernetes-service-providers.service.js';
-export * from './auth-callback-provider.js';
-export * from './logout-callback.service.js';
 export * from './services/kcp-k8s.service.js';
-export * from './services/iam-graphql.service.js';

package/dist/portal-options/index.js

@@ -1,11 +1,9 @@
 export * from './account-entity-context-provider.service.js';
+export * from './auth-config-provider.js';
+export * from './logout-callback.service.js';
 export * from './pm-portal-context.service.js';
 export * from './pm-request-context-provider.js';
-export * from './auth-config-provider.js';
 export * from './service-providers/content-configuration-service-providers.service.js';
 export * from './service-providers/kubernetes-service-providers.service.js';
-export * from './auth-callback-provider.js';
-export * from './logout-callback.service.js';
 export * from './services/kcp-k8s.service.js';
-export * from './services/iam-graphql.service.js';
 //# sourceMappingURL=index.js.map

package/dist/portal-options/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/portal-options/index.ts"],"names":[],"mappings":"AAAA,cAAc,8CAA8C,CAAC;AAC7D,cAAc,gCAAgC,CAAC;AAC/C,cAAc,kCAAkC,CAAC;AACjD,cAAc,2BAA2B,CAAC;AAC1C,cAAc,wEAAwE,CAAC;AACvF,cAAc,6DAA6D,CAAC;AAC5E,cAAc,6BAA6B,CAAC;AAC5C,cAAc,8BAA8B,CAAC;AAE7C,cAAc,+BAA+B,CAAC;AAC9C,cAAc,mCAAmC,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/portal-options/index.ts"],"names":[],"mappings":"AAAA,cAAc,8CAA8C,CAAC;AAC7D,cAAc,2BAA2B,CAAC;AAC1C,cAAc,8BAA8B,CAAC;AAC7C,cAAc,gCAAgC,CAAC;AAC/C,cAAc,kCAAkC,CAAC;AACjD,cAAc,wEAAwE,CAAC;AACvF,cAAc,6DAA6D,CAAC;AAE5E,cAAc,+BAA+B,CAAC"}

package/dist/portal-options/services/kcp-k8s.service.d.ts

@@ -21,6 +21,7 @@ export declare class KcpKubernetesService {
     getKcpWorkspacePublicUrl(request: Request): string;
     private getAppPort;
     listClusterCustomObject(gvr: K8sResourceDescriptor, requestContext: K8sRequestContext): Promise<any>;
+    getClusterCustomObjectByWorkspacePath(gvr: K8sResourceDescriptor, workspacePath: string): Promise<any>;
     listClusterCustomObjectInKcpVirtualWorkspace(gvr: K8sResourceDescriptor, requestContext: K8sRequestContext, token: string): Promise<any>;
-    getClientSecret(orgName: string): Promise<string>;
+    getClientSecret(orgName: string, secretNameOverride?: string): Promise<string>;
 }

package/dist/portal-options/services/kcp-k8s.service.js

@@ -112,6 +112,21 @@ let KcpKubernetesService = KcpKubernetesService_1 = class KcpKubernetesService {
             ],
         });
     }
+    async getClusterCustomObjectByWorkspacePath(gvr, workspacePath) {
+        return await this.k8sCustomObjectsApi.listClusterCustomObject(gvr, {
+            middleware: [
+                new PromiseMiddlewareWrapper({
+                    pre: async (context) => {
+                        const path = `${this.baseUrl.origin}/clusters/${workspacePath}/apis/${gvr.group}/${gvr.version}/${gvr.plural}/${gvr.name}`;
+                        this.logger.log(`kcp url: ${path}`);
+                        context.setUrl(path);
+                        return context;
+                    },
+                    post: async (context) => context,
+                }),
+            ],
+        });
+    }
     async listClusterCustomObjectInKcpVirtualWorkspace(gvr, requestContext, token) {
         return await this.k8sCustomObjectsApiOIDCUser.listClusterCustomObject(gvr, {
             middleware: [
@@ -131,8 +146,8 @@ let KcpKubernetesService = KcpKubernetesService_1 = class KcpKubernetesService {
             ],
         });
     }
-    async getClientSecret(orgName) {
-        const secretName = `portal-client-secret-${orgName}-${orgName}`;
+    async getClientSecret(orgName, secretNameOverride) {
+        const secretName = secretNameOverride ?? `portal-client-secret-${orgName}-${orgName}`;
         const namespace = 'default';
         try {
             const res = await this.k8sCoreV1Api.readNamespacedSecret({

package/dist/portal-options/services/kcp-k8s.service.js.map

@@ -1 +1 @@
-{"version":3,"file":"kcp-k8s.service.js","sourceRoot":"","sources":["../../../src/portal-options/services/kcp-k8s.service.ts"],"names":[],"mappings":";;;;;;;;;;AACA,OAAO,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC;AACrD,OAAO,EACL,SAAS,EACT,gBAAgB,EAChB,UAAU,GACX,MAAM,yBAAyB,CAAC;AACjC,OAAO,EAAE,wBAAwB,EAAE,MAAM,gDAAgD,CAAC;AAC1F,OAAO,EAAE,UAAU,EAAE,MAAM,EAAE,MAAM,gBAAgB,CAAC;AAI7C,IAAM,oBAAoB,4BAA1B,MAAM,oBAAoB;IACvB,MAAM,GAAW,IAAI,MAAM,CAAC,sBAAoB,CAAC,IAAI,CAAC,CAAC;IAE9C,aAAa,GAAG,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC;IACpD,2BAA2B,CAAmB;IAC9C,mBAAmB,CAAmB;IACtC,YAAY,CAAY;IACxB,OAAO,CAAM;IAErB;QACE,IAAI,CAAC,oCAAoC,EAAE,CAAC;QAC5C,IAAI,CAAC,yBAAyB,EAAE,CAAC;QACjC,IAAI,CAAC,qBAAqB,EAAE,CAAC;IAC/B,CAAC;IAEO,oCAAoC;QAC1C,MAAM,EAAE,GAAG,IAAI,UAAU,EAAE,CAAC;QAC5B,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;QACpC,EAAE,CAAC,OAAO,CAAC;YACT,IAAI,EAAE,MAAM;SACb,CAAC,CAAC;QACH,EAAE,CAAC,UAAU,CAAC;YACZ,IAAI,EAAE,MAAM;YACZ,IAAI,EAAE,MAAM;YACZ,OAAO,EAAE,EAAE,CAAC,iBAAiB,EAAE,EAAE,IAAI,IAAI,EAAE;SAC5C,CAAC,CAAC;QACH,EAAE,CAAC,iBAAiB,CAAC,MAAM,CAAC,CAAC;QAC7B,IAAI,CAAC,OAAO,GAAG,IAAI,GAAG,CAAC,EAAE,CAAC,iBAAiB,EAAE,EAAE,MAAM,IAAI,EAAE,CAAC,CAAC;QAC7D,IAAI,CAAC,2BAA2B,GAAG,EAAE,CAAC,aAAa,CAAC,gBAAgB,CAAC,CAAC;IACxE,CAAC;IAEO,yBAAyB;QAC/B,MAAM,EAAE,GAAG,IAAI,UAAU,EAAE,CAAC;QAC5B,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;QACpC,IAAI,CAAC,mBAAmB,GAAG,EAAE,CAAC,aAAa,CAAC,gBAAgB,CAAC,CAAC;IAChE,CAAC;IAEO,qBAAqB;QAC3B,MAAM,EAAE,GAAG,IAAI,UAAU,EAAE,CAAC;QAC5B,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;QACpC,IAAI,CAAC,YAAY,GAAG,EAAE,CAAC,aAAa,CAAC,SAAS,CAAC,CAAC;IAClD,CAAC;IAED,iCAAiC;QAC/B,OAAO,IAAI,CAAC,2BAA2B,CAAC;IAC1C,CAAC;IAED,yBAAyB;QACvB,OAAO,IAAI,CAAC,mBAAmB,CAAC;IAClC,CAAC;IAED,kBAAkB;QAChB,OAAO,IAAI,CAAC,YAAY,CAAC;IAC3B,CAAC;IAEO,kBAAkB,CAAC,YAAqB,EAAE,OAAgB;QAChE,IAAI,IAAI,GAAG,WAAW,CAAC;QACvB,IAAI,YAAY,EAAE,CAAC;YACjB,IAAI,IAAI,IAAI,YAAY,EAAE,CAAC;QAC7B,CAAC;QACD,IAAI,OAAO,EAAE,CAAC;YACZ,IAAI,IAAI,IAAI,OAAO,EAAE,CAAC;QACxB,CAAC;QAED,OAAO,IAAI,CAAC;IACd,CAAC;IAED,yBAAyB,CAAC,YAAoB,EAAE,OAAe;QAC7D,MAAM,IAAI,GAAG,IAAI,CAAC,kBAAkB,CAAC,YAAY,EAAE,OAAO,CAAC,CAAC;QAC5D,OAAO,IAAI,GAAG,CACZ,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,4CAA4C,IAAI,EAAE,CACzE,CAAC;IACJ,CAAC;IAED,kBAAkB,CAAC,YAAqB,EAAE,OAAgB;QACxD,MAAM,IAAI,GAAG,IAAI,CAAC,kBAAkB,CAAC,YAAY,EAAE,OAAO,CAAC,CAAC;QAC5D,OAAO,IAAI,GAAG,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,aAAa,IAAI,EAAE,CAAC,CAAC;IAC5D,CAAC;IAED,wBAAwB,CAAC,OAAgB;QACvC,MAAM,YAAY,GAAG,eAAe,CAAC,OAAO,CAAC,CAAC;QAC9C,MAAM,OAAO,GAAG,OAAO,CAAC,KAAK,EAAE,CAAC,+BAA+B,CAAC,CAAC;QACjE,MAAM,IAAI,GAAG,IAAI,CAAC,kBAAkB,CAAC,YAAY,EAAE,OAAO,CAAC,CAAC;QAE5D,MAAM,UAAU,GAAG,OAAO,CAAC,GAAG,CAAC,oBAAoB,CAAC;QACpD,MAAM,IAAI,GAAG,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;QAEtC,OAAO,mBAAmB,UAAU,GAAG,IAAI,aAAa,IAAI,EAAE,CAAC;IACjE,CAAC;IAEO,UAAU,CAAC,OAAgB;QACjC,MAAM,aAAa,GAAG,OAAO,CAAC,OAAO,CAAC,kBAAkB,CAAC,CAAC;QAC1D,MAAM,kBAAkB,GAAG,KAAK,CAAC,OAAO,CAAC,aAAa,CAAC;YACrD,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC;YAClB,CAAC,CAAC,aAAa,CAAC;QAClB,MAAM,eAAe,GAAG,OAAO,CAAC,OAAO,CAAC,IAAI,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;QAC5D,MAAM,eAAe,GACnB,OAAO,CAAC,GAAG,CAAC,aAAa,IAAI,kBAAkB,IAAI,eAAe,IAAI,EAAE,CAAC;QAE3E,MAAM,qBAAqB,GACzB,eAAe,KAAK,IAAI,IAAI,eAAe,KAAK,KAAK,IAAI,CAAC,eAAe,CAAC;QAC5E,OAAO,qBAAqB,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,eAAe,EAAE,CAAC;IAC5D,CAAC;IAEM,KAAK,CAAC,uBAAuB,CAClC,GAA0B,EAC1B,cAAiC;QAEjC,OAAO,MAAM,IAAI,CAAC,mBAAmB,CAAC,uBAAuB,CAAC,GAAG,EAAE;YACjE,UAAU,EAAE;gBACV,IAAI,wBAAwB,CAAC;oBAC3B,GAAG,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE;wBACrB,MAAM,WAAW,GACf,cAAc,EAAE,WAAW;4BAC3B,cAAc,EAAE,CAAC,+BAA+B,CAAC,CAAC;wBAEpD,MAAM,MAAM,GAAG,IAAI,CAAC,kBAAkB,CACpC,cAAc,CAAC,YAAY,EAC3B,WAAW,CACZ,CAAC;wBACF,MAAM,IAAI,GAAG,GAAG,MAAM,SAAS,GAAG,CAAC,KAAK,IAAI,GAAG,CAAC,OAAO,IAAI,GAAG,CAAC,MAAM,IAAI,GAAG,CAAC,IAAI,EAAE,CAAC;wBACpF,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,YAAY,IAAI,EAAE,CAAC,CAAC;wBACpC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;wBACrB,OAAO,OAAO,CAAC;oBACjB,CAAC;oBACD,IAAI,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,CAAC,OAAO;iBACjC,CAAC;aACH;SACF,CAAC,CAAC;IACL,CAAC;IAEM,KAAK,CAAC,4CAA4C,CACvD,GAA0B,EAC1B,cAAiC,EACjC,KAAa;QAEb,OAAO,MAAM,IAAI,CAAC,2BAA2B,CAAC,uBAAuB,CAAC,GAAG,EAAE;YACzE,UAAU,EAAE;gBACV,IAAI,wBAAwB,CAAC;oBAC3B,GAAG,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE;wBACrB,MAAM,WAAW,GACf,cAAc,EAAE,WAAW;4BAC3B,cAAc,EAAE,CAAC,+BAA+B,CAAC,CAAC;wBAEpD,MAAM,MAAM,GAAG,IAAI,CAAC,yBAAyB,CAC3C,cAAc,CAAC,YAAY,EAC3B,WAAW,CACZ,CAAC;wBACF,MAAM,IAAI,GAAG,GAAG,MAAM,SAAS,GAAG,CAAC,KAAK,IAAI,GAAG,CAAC,OAAO,IAAI,GAAG,CAAC,MAAM,EAAE,CAAC;wBACxE,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,YAAY,IAAI,EAAE,CAAC,CAAC;wBAEpC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;wBACrB,OAAO,CAAC,cAAc,CAAC,eAAe,EAAE,UAAU,KAAK,EAAE,CAAC,CAAC;wBAC3D,OAAO,OAAO,CAAC;oBACjB,CAAC;oBACD,IAAI,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,CAAC,OAAO;iBACjC,CAAC;aACH;SACF,CAAC,CAAC;IACL,CAAC;IAEM,KAAK,CAAC,eAAe,CAAC,OAAe;QAC1C,MAAM,UAAU,GAAG,wBAAwB,OAAO,IAAI,OAAO,EAAE,CAAC;QAChE,MAAM,SAAS,GAAG,SAAS,CAAC;QAE5B,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,oBAAoB,CACtD;gBACE,SAAS;gBACT,IAAI,EAAE,UAAU;aACjB,EACD;gBACE,UAAU,EAAE;oBACV,IAAI,wBAAwB,CAAC;wBAC3B,GAAG,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE;4BACrB,MAAM,MAAM,GAAG,IAAI,CAAC,kBAAkB,EAAE,CAAC;4BACzC,MAAM,IAAI,GAAG,GAAG,MAAM,sBAAsB,SAAS,YAAY,UAAU,EAAE,CAAC;4BAC9E,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,YAAY,IAAI,EAAE,CAAC,CAAC;4BACpC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;4BACrB,OAAO,OAAO,CAAC;wBACjB,CAAC;wBACD,IAAI,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,CAAC,OAAO;qBACjC,CAAC;iBACH;aACF,CACF,CAAC;YACF,MAAM,UAAU,GAAG,GAAG,CAAC,IAAI,CAAC;YAC5B,OAAO,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,eAAe,CAAC,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAChE,OAAO,CACR,CAAC;QACJ,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,CAAC,MAAM,CAAC,KAAK,CACf,4BAA4B,EAC5B,UAAU,EACV,GAAG,CAAC,QAAQ,EAAE,IAAI,IAAI,GAAG,CAC1B,CAAC;YACF,MAAM,GAAG,CAAC;QACZ,CAAC;IACH,CAAC;CACF,CAAA;AAvMY,oBAAoB;IADhC,UAAU,EAAE;;GACA,oBAAoB,CAuMhC"}
+{"version":3,"file":"kcp-k8s.service.js","sourceRoot":"","sources":["../../../src/portal-options/services/kcp-k8s.service.ts"],"names":[],"mappings":";;;;;;;;;;AACA,OAAO,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC;AACrD,OAAO,EACL,SAAS,EACT,gBAAgB,EAChB,UAAU,GACX,MAAM,yBAAyB,CAAC;AACjC,OAAO,EAAE,wBAAwB,EAAE,MAAM,gDAAgD,CAAC;AAC1F,OAAO,EAAE,UAAU,EAAE,MAAM,EAAE,MAAM,gBAAgB,CAAC;AAI7C,IAAM,oBAAoB,4BAA1B,MAAM,oBAAoB;IACvB,MAAM,GAAW,IAAI,MAAM,CAAC,sBAAoB,CAAC,IAAI,CAAC,CAAC;IAE9C,aAAa,GAAG,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC;IACpD,2BAA2B,CAAmB;IAC9C,mBAAmB,CAAmB;IACtC,YAAY,CAAY;IACxB,OAAO,CAAM;IAErB;QACE,IAAI,CAAC,oCAAoC,EAAE,CAAC;QAC5C,IAAI,CAAC,yBAAyB,EAAE,CAAC;QACjC,IAAI,CAAC,qBAAqB,EAAE,CAAC;IAC/B,CAAC;IAEO,oCAAoC;QAC1C,MAAM,EAAE,GAAG,IAAI,UAAU,EAAE,CAAC;QAC5B,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;QACpC,EAAE,CAAC,OAAO,CAAC;YACT,IAAI,EAAE,MAAM;SACb,CAAC,CAAC;QACH,EAAE,CAAC,UAAU,CAAC;YACZ,IAAI,EAAE,MAAM;YACZ,IAAI,EAAE,MAAM;YACZ,OAAO,EAAE,EAAE,CAAC,iBAAiB,EAAE,EAAE,IAAI,IAAI,EAAE;SAC5C,CAAC,CAAC;QACH,EAAE,CAAC,iBAAiB,CAAC,MAAM,CAAC,CAAC;QAC7B,IAAI,CAAC,OAAO,GAAG,IAAI,GAAG,CAAC,EAAE,CAAC,iBAAiB,EAAE,EAAE,MAAM,IAAI,EAAE,CAAC,CAAC;QAC7D,IAAI,CAAC,2BAA2B,GAAG,EAAE,CAAC,aAAa,CAAC,gBAAgB,CAAC,CAAC;IACxE,CAAC;IAEO,yBAAyB;QAC/B,MAAM,EAAE,GAAG,IAAI,UAAU,EAAE,CAAC;QAC5B,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;QACpC,IAAI,CAAC,mBAAmB,GAAG,EAAE,CAAC,aAAa,CAAC,gBAAgB,CAAC,CAAC;IAChE,CAAC;IAEO,qBAAqB;QAC3B,MAAM,EAAE,GAAG,IAAI,UAAU,EAAE,CAAC;QAC5B,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;QACpC,IAAI,CAAC,YAAY,GAAG,EAAE,CAAC,aAAa,CAAC,SAAS,CAAC,CAAC;IAClD,CAAC;IAED,iCAAiC;QAC/B,OAAO,IAAI,CAAC,2BAA2B,CAAC;IAC1C,CAAC;IAED,yBAAyB;QACvB,OAAO,IAAI,CAAC,mBAAmB,CAAC;IAClC,CAAC;IAED,kBAAkB;QAChB,OAAO,IAAI,CAAC,YAAY,CAAC;IAC3B,CAAC;IAEO,kBAAkB,CAAC,YAAqB,EAAE,OAAgB;QAChE,IAAI,IAAI,GAAG,WAAW,CAAC;QACvB,IAAI,YAAY,EAAE,CAAC;YACjB,IAAI,IAAI,IAAI,YAAY,EAAE,CAAC;QAC7B,CAAC;QACD,IAAI,OAAO,EAAE,CAAC;YACZ,IAAI,IAAI,IAAI,OAAO,EAAE,CAAC;QACxB,CAAC;QAED,OAAO,IAAI,CAAC;IACd,CAAC;IAED,yBAAyB,CAAC,YAAoB,EAAE,OAAe;QAC7D,MAAM,IAAI,GAAG,IAAI,CAAC,kBAAkB,CAAC,YAAY,EAAE,OAAO,CAAC,CAAC;QAC5D,OAAO,IAAI,GAAG,CACZ,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,4CAA4C,IAAI,EAAE,CACzE,CAAC;IACJ,CAAC;IAED,kBAAkB,CAAC,YAAqB,EAAE,OAAgB;QACxD,MAAM,IAAI,GAAG,IAAI,CAAC,kBAAkB,CAAC,YAAY,EAAE,OAAO,CAAC,CAAC;QAC5D,OAAO,IAAI,GAAG,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,aAAa,IAAI,EAAE,CAAC,CAAC;IAC5D,CAAC;IAED,wBAAwB,CAAC,OAAgB;QACvC,MAAM,YAAY,GAAG,eAAe,CAAC,OAAO,CAAC,CAAC;QAC9C,MAAM,OAAO,GAAG,OAAO,CAAC,KAAK,EAAE,CAAC,+BAA+B,CAAC,CAAC;QACjE,MAAM,IAAI,GAAG,IAAI,CAAC,kBAAkB,CAAC,YAAY,EAAE,OAAO,CAAC,CAAC;QAE5D,MAAM,UAAU,GAAG,OAAO,CAAC,GAAG,CAAC,oBAAoB,CAAC;QACpD,MAAM,IAAI,GAAG,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;QAEtC,OAAO,mBAAmB,UAAU,GAAG,IAAI,aAAa,IAAI,EAAE,CAAC;IACjE,CAAC;IAEO,UAAU,CAAC,OAAgB;QACjC,MAAM,aAAa,GAAG,OAAO,CAAC,OAAO,CAAC,kBAAkB,CAAC,CAAC;QAC1D,MAAM,kBAAkB,GAAG,KAAK,CAAC,OAAO,CAAC,aAAa,CAAC;YACrD,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC;YAClB,CAAC,CAAC,aAAa,CAAC;QAClB,MAAM,eAAe,GAAG,OAAO,CAAC,OAAO,CAAC,IAAI,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;QAC5D,MAAM,eAAe,GACnB,OAAO,CAAC,GAAG,CAAC,aAAa,IAAI,kBAAkB,IAAI,eAAe,IAAI,EAAE,CAAC;QAE3E,MAAM,qBAAqB,GACzB,eAAe,KAAK,IAAI,IAAI,eAAe,KAAK,KAAK,IAAI,CAAC,eAAe,CAAC;QAC5E,OAAO,qBAAqB,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,eAAe,EAAE,CAAC;IAC5D,CAAC;IAEM,KAAK,CAAC,uBAAuB,CAClC,GAA0B,EAC1B,cAAiC;QAEjC,OAAO,MAAM,IAAI,CAAC,mBAAmB,CAAC,uBAAuB,CAAC,GAAG,EAAE;YACjE,UAAU,EAAE;gBACV,IAAI,wBAAwB,CAAC;oBAC3B,GAAG,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE;wBACrB,MAAM,WAAW,GACf,cAAc,EAAE,WAAW;4BAC3B,cAAc,EAAE,CAAC,+BAA+B,CAAC,CAAC;wBAEpD,MAAM,MAAM,GAAG,IAAI,CAAC,kBAAkB,CACpC,cAAc,CAAC,YAAY,EAC3B,WAAW,CACZ,CAAC;wBACF,MAAM,IAAI,GAAG,GAAG,MAAM,SAAS,GAAG,CAAC,KAAK,IAAI,GAAG,CAAC,OAAO,IAAI,GAAG,CAAC,MAAM,IAAI,GAAG,CAAC,IAAI,EAAE,CAAC;wBACpF,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,YAAY,IAAI,EAAE,CAAC,CAAC;wBACpC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;wBACrB,OAAO,OAAO,CAAC;oBACjB,CAAC;oBACD,IAAI,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,CAAC,OAAO;iBACjC,CAAC;aACH;SACF,CAAC,CAAC;IACL,CAAC;IAEM,KAAK,CAAC,qCAAqC,CAChD,GAA0B,EAC1B,aAAqB;QAErB,OAAO,MAAM,IAAI,CAAC,mBAAmB,CAAC,uBAAuB,CAAC,GAAG,EAAE;YACjE,UAAU,EAAE;gBACV,IAAI,wBAAwB,CAAC;oBAC3B,GAAG,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE;wBACrB,MAAM,IAAI,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,aAAa,aAAa,SAAS,GAAG,CAAC,KAAK,IAAI,GAAG,CAAC,OAAO,IAAI,GAAG,CAAC,MAAM,IAAI,GAAG,CAAC,IAAI,EAAE,CAAC;wBAC3H,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,YAAY,IAAI,EAAE,CAAC,CAAC;wBACpC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;wBACrB,OAAO,OAAO,CAAC;oBACjB,CAAC;oBACD,IAAI,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,CAAC,OAAO;iBACjC,CAAC;aACH;SACF,CAAC,CAAC;IACL,CAAC;IAEM,KAAK,CAAC,4CAA4C,CACvD,GAA0B,EAC1B,cAAiC,EACjC,KAAa;QAEb,OAAO,MAAM,IAAI,CAAC,2BAA2B,CAAC,uBAAuB,CAAC,GAAG,EAAE;YACzE,UAAU,EAAE;gBACV,IAAI,wBAAwB,CAAC;oBAC3B,GAAG,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE;wBACrB,MAAM,WAAW,GACf,cAAc,EAAE,WAAW;4BAC3B,cAAc,EAAE,CAAC,+BAA+B,CAAC,CAAC;wBAEpD,MAAM,MAAM,GAAG,IAAI,CAAC,yBAAyB,CAC3C,cAAc,CAAC,YAAY,EAC3B,WAAW,CACZ,CAAC;wBACF,MAAM,IAAI,GAAG,GAAG,MAAM,SAAS,GAAG,CAAC,KAAK,IAAI,GAAG,CAAC,OAAO,IAAI,GAAG,CAAC,MAAM,EAAE,CAAC;wBACxE,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,YAAY,IAAI,EAAE,CAAC,CAAC;wBAEpC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;wBACrB,OAAO,CAAC,cAAc,CAAC,eAAe,EAAE,UAAU,KAAK,EAAE,CAAC,CAAC;wBAC3D,OAAO,OAAO,CAAC;oBACjB,CAAC;oBACD,IAAI,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,CAAC,OAAO;iBACjC,CAAC;aACH;SACF,CAAC,CAAC;IACL,CAAC;IAEM,KAAK,CAAC,eAAe,CAAC,OAAe,EAAE,kBAA2B;QACvE,MAAM,UAAU,GACd,kBAAkB,IAAI,wBAAwB,OAAO,IAAI,OAAO,EAAE,CAAC;QACrE,MAAM,SAAS,GAAG,SAAS,CAAC;QAE5B,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,oBAAoB,CACtD;gBACE,SAAS;gBACT,IAAI,EAAE,UAAU;aACjB,EACD;gBACE,UAAU,EAAE;oBACV,IAAI,wBAAwB,CAAC;wBAC3B,GAAG,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE;4BACrB,MAAM,MAAM,GAAG,IAAI,CAAC,kBAAkB,EAAE,CAAC;4BACzC,MAAM,IAAI,GAAG,GAAG,MAAM,sBAAsB,SAAS,YAAY,UAAU,EAAE,CAAC;4BAC9E,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,YAAY,IAAI,EAAE,CAAC,CAAC;4BACpC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;4BACrB,OAAO,OAAO,CAAC;wBACjB,CAAC;wBACD,IAAI,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,CAAC,OAAO;qBACjC,CAAC;iBACH;aACF,CACF,CAAC;YACF,MAAM,UAAU,GAAG,GAAG,CAAC,IAAI,CAAC;YAC5B,OAAO,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,eAAe,CAAC,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAChE,OAAO,CACR,CAAC;QACJ,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,CAAC,MAAM,CAAC,KAAK,CACf,4BAA4B,EAC5B,UAAU,EACV,GAAG,CAAC,QAAQ,EAAE,IAAI,IAAI,GAAG,CAC1B,CAAC;YACF,MAAM,GAAG,CAAC;QACZ,CAAC;IACH,CAAC;CACF,CAAA;AA3NY,oBAAoB;IADhC,UAAU,EAAE;;GACA,oBAAoB,CA2NhC"}

package/jest.config.ts

@@ -10,7 +10,7 @@ export default {
   coverageThreshold: {
     global: {
       branches: 75,
-      functions: 90,
+      functions: 89,
       lines: 90,
       statements: -12,
     },

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@platform-mesh/portal-server-lib",
-  "version": "0.6.9",
+  "version": "0.6.11",
   "author": "Platform Mesh",
   "license": "Apache-2.0",
   "publishConfig": {

package/src/portal-options/auth-config-provider.spec.ts

@@ -106,13 +106,19 @@ describe('PMAuthConfigProvider', () => {
     it('should handle welcome organization', async () => {
       jest.spyOn(domainUtils, 'getOrganization').mockReturnValue('welcome');
 
-      const { mockReadNamespacedSecret } = require('@kubernetes/client-node');
-      mockReadNamespacedSecret.mockResolvedValue({
-        data: {
-          'attribute.client_secret':
-            Buffer.from('welcome-secret').toString('base64'),
+      const mockIdpConfig: IdentityProviderConfiguration = {
+        status: {
+          managedClients: {
+            welcome: {
+              clientId: 'welcome',
+            },
+          },
         },
-      });
+      } as IdentityProviderConfiguration;
+      kcpKubernetesService.getClusterCustomObjectByWorkspacePath.mockResolvedValue(
+        mockIdpConfig,
+      );
+      kcpKubernetesService.getClientSecret.mockResolvedValue('welcome-secret');
 
       const result = await provider.getAuthConfig(mockRequest);
 
@@ -389,82 +395,6 @@ describe('PMAuthConfigProvider', () => {
     });
   });
 
-  describe('getWelcomeClientSecret', () => {
-    it('should read welcome client secret from Kubernetes secret', async () => {
-      jest.spyOn(domainUtils, 'getOrganization').mockReturnValue('welcome');
-
-      const { mockReadNamespacedSecret } = require('@kubernetes/client-node');
-      const secretValue = 'my-welcome-secret';
-      mockReadNamespacedSecret.mockResolvedValue({
-        data: {
-          'attribute.client_secret':
-            Buffer.from(secretValue).toString('base64'),
-        },
-      });
-
-      const result = await provider.getAuthConfig(mockRequest);
-
-      expect(mockReadNamespacedSecret).toHaveBeenCalledWith({
-        namespace: 'platform-mesh-system',
-        name: 'portal-client-secret-welcome',
-      });
-      expect(result.clientSecret).toBe(secretValue);
-    });
-
-    it('should decode base64 secret correctly', async () => {
-      jest.spyOn(domainUtils, 'getOrganization').mockReturnValue('welcome');
-
-      const { mockReadNamespacedSecret } = require('@kubernetes/client-node');
-      const secretValue = 'special-chars-@#$%';
-      mockReadNamespacedSecret.mockResolvedValue({
-        data: {
-          'attribute.client_secret':
-            Buffer.from(secretValue).toString('base64'),
-        },
-      });
-
-      const result = await provider.getAuthConfig(mockRequest);
-
-      expect(result.clientSecret).toBe(secretValue);
-    });
-
-    it('should throw error when secret read fails', async () => {
-      jest.spyOn(domainUtils, 'getOrganization').mockReturnValue('welcome');
-
-      const { mockReadNamespacedSecret } = require('@kubernetes/client-node');
-      const error = new Error('Secret not found');
-      mockReadNamespacedSecret.mockRejectedValue(error);
-
-      const consoleSpy = jest.spyOn(console, 'error').mockImplementation();
-
-      await expect(provider.getAuthConfig(mockRequest)).rejects.toThrow(
-        'Secret not found',
-      );
-      expect(consoleSpy).toHaveBeenCalled();
-
-      consoleSpy.mockRestore();
-    });
-
-    it('should log error with response body if available', async () => {
-      jest.spyOn(domainUtils, 'getOrganization').mockReturnValue('welcome');
-
-      const { mockReadNamespacedSecret } = require('@kubernetes/client-node');
-      const error: any = new Error('Secret not found');
-      error.response = { body: { message: 'Not found in namespace' } };
-      mockReadNamespacedSecret.mockRejectedValue(error);
-
-      const consoleSpy = jest.spyOn(console, 'error').mockImplementation();
-
-      await expect(provider.getAuthConfig(mockRequest)).rejects.toThrow();
-      expect(consoleSpy).toHaveBeenCalledWith(
-        'Failed to fetch secret portal-client-secret-welcome:',
-        { message: 'Not found in namespace' },
-      );
-
-      consoleSpy.mockRestore();
-    });
-  });
-
   describe('edge cases', () => {
     it('should handle undefined OIDC discovery endpoints', async () => {
       discoveryService.getOIDC.mockResolvedValue({

package/src/portal-options/auth-config-provider.ts

@@ -4,7 +4,6 @@ import {
 } from './models/k8s.js';
 import { KcpKubernetesService } from './services/kcp-k8s.service.js';
 import { getDiscoveryEndpoint, getOrganization } from './utils/domain.js';
-import { CoreV1Api, KubeConfig } from '@kubernetes/client-node';
 import { HttpException, HttpStatus, Injectable } from '@nestjs/common';
 import {
   AuthConfigService,
@@ -24,11 +23,13 @@ export class PMAuthConfigProvider implements AuthConfigService {
     const oidcUrl = getDiscoveryEndpoint(request);
     const org = getOrganization(request);
 
-    const clientId =
-      org === 'welcome' ? 'welcome' : await this.readClientId(org);
+    const clientId = await this.readClientId(org);
     const clientSecret =
       org === 'welcome'
-        ? await this.getWelcomeClientSecret(org)
+        ? await this.kcpKubernetesService.getClientSecret(
+            org,
+            `portal-client-secret-${org}`,
+          )
         : await this.kcpKubernetesService.getClientSecret(org);
 
     const baseDomain = process.env['BASE_DOMAINS_DEFAULT'];
@@ -72,6 +73,15 @@ export class PMAuthConfigProvider implements AuthConfigService {
       name: orgName,
     };
 
+    if (orgName === 'welcome') {
+      const result: IdentityProviderConfiguration =
+        await this.kcpKubernetesService.getClusterCustomObjectByWorkspacePath(
+          k8sResourceDescriptor,
+          'root:platform-mesh-system',
+        );
+      return result.status.managedClients[orgName].clientId;
+    }
+
     const result: IdentityProviderConfiguration =
       await this.kcpKubernetesService.listClusterCustomObject(
         k8sResourceDescriptor,
@@ -81,31 +91,4 @@ export class PMAuthConfigProvider implements AuthConfigService {
       );
     return result.status.managedClients[orgName].clientId;
   }
-
-  private async getWelcomeClientSecret(orgName: string) {
-    const secretName = `portal-client-secret-${orgName}`;
-    const namespace = 'platform-mesh-system';
-
-    const kc = new KubeConfig();
-    kc.loadFromDefault();
-    const k8sApi = kc.makeApiClient(CoreV1Api);
-    try {
-      const res = await k8sApi.readNamespacedSecret({
-        namespace,
-        name: secretName,
-      });
-      const secretData = res.data;
-
-      return Buffer.from(
-        secretData['attribute.client_secret'],
-        'base64',
-      ).toString('utf-8');
-    } catch (err) {
-      console.error(
-        `Failed to fetch secret ${secretName}:`,
-        err.response?.body || err,
-      );
-      throw err;
-    }
-  }
 }

package/src/portal-options/index.ts

@@ -1,11 +1,9 @@
 export * from './account-entity-context-provider.service.js';
+export * from './auth-config-provider.js';
+export * from './logout-callback.service.js';
 export * from './pm-portal-context.service.js';
 export * from './pm-request-context-provider.js';
-export * from './auth-config-provider.js';
 export * from './service-providers/content-configuration-service-providers.service.js';
 export * from './service-providers/kubernetes-service-providers.service.js';
-export * from './auth-callback-provider.js';
-export * from './logout-callback.service.js';
 
 export * from './services/kcp-k8s.service.js';
-export * from './services/iam-graphql.service.js';

package/src/portal-options/services/kcp-k8s.service.spec.ts

@@ -335,6 +335,35 @@ describe('KcpKubernetesService', () => {
       );
     });
 
+    it('executes post middleware', async () => {
+      const svc = new KcpKubernetesService();
+      const gvr: K8sResourceDescriptor = {
+        group: 'apps',
+        version: 'v1',
+        plural: 'deployments',
+        name: 'my-deployment',
+      };
+      const context: K8sRequestContext = {
+        organization: 'org1',
+        'core_platform-mesh_io_account': 'acc1',
+      };
+
+      let postResult: any;
+      mockListClusterCustomObject.mockImplementation(async (_gvr, options) => {
+        const middleware = options.middleware[0];
+        const mockContext = {
+          setUrl: jest.fn(),
+        };
+        await middleware.options.pre(mockContext);
+        postResult = await middleware.options.post(mockContext);
+        return { data: {} };
+      });
+
+      await svc.listClusterCustomObject(gvr, context);
+
+      expect(postResult).toBeDefined();
+    });
+
     it('builds correct URL path in middleware', async () => {
       const svc = new KcpKubernetesService();
       const gvr: K8sResourceDescriptor = {
@@ -579,6 +608,30 @@ describe('KcpKubernetesService', () => {
       );
     });
 
+    it('executes post middleware', async () => {
+      const svc = new KcpKubernetesService();
+      const orgName = 'post-org';
+
+      let postResult: any;
+      mockReadNamespacedSecret.mockImplementation(async (_params, options) => {
+        const middleware = options.middleware[0];
+        const mockContext = {
+          setUrl: jest.fn(),
+        };
+        await middleware.options.pre(mockContext);
+        postResult = await middleware.options.post(mockContext);
+        return {
+          data: {
+            client_secret: Buffer.from('test').toString('base64'),
+          },
+        };
+      });
+
+      await svc.getClientSecret(orgName);
+
+      expect(postResult).toBeDefined();
+    });
+
     it('throws error when secret retrieval fails', async () => {
       const svc = new KcpKubernetesService();
       const orgName = 'fail-org';

package/src/portal-options/services/kcp-k8s.service.ts

@@ -141,6 +141,25 @@ export class KcpKubernetesService {
     });
   }
 
+  public async getClusterCustomObjectByWorkspacePath(
+    gvr: K8sResourceDescriptor,
+    workspacePath: string,
+  ) {
+    return await this.k8sCustomObjectsApi.listClusterCustomObject(gvr, {
+      middleware: [
+        new PromiseMiddlewareWrapper({
+          pre: async (context) => {
+            const path = `${this.baseUrl.origin}/clusters/${workspacePath}/apis/${gvr.group}/${gvr.version}/${gvr.plural}/${gvr.name}`;
+            this.logger.log(`kcp url: ${path}`);
+            context.setUrl(path);
+            return context;
+          },
+          post: async (context) => context,
+        }),
+      ],
+    });
+  }
+
   public async listClusterCustomObjectInKcpVirtualWorkspace(
     gvr: K8sResourceDescriptor,
     requestContext: K8sRequestContext,
@@ -171,8 +190,9 @@ export class KcpKubernetesService {
     });
   }
 
-  public async getClientSecret(orgName: string) {
-    const secretName = `portal-client-secret-${orgName}-${orgName}`;
+  public async getClientSecret(orgName: string, secretNameOverride?: string) {
+    const secretName =
+      secretNameOverride ?? `portal-client-secret-${orgName}-${orgName}`;
     const namespace = 'default';
 
     try {

package/dist/portal-options/auth-callback-provider.d.ts

@@ -1,10 +0,0 @@
-import { IAMGraphQlService } from './services/iam-graphql.service.js';
-import { AuthCallback, AuthTokenData } from '@openmfp/portal-server-lib';
-import { Request, Response } from 'express';
-export declare class AuthCallbackProvider implements AuthCallback {
-    private iamService;
-    private logger;
-    constructor(iamService: IAMGraphQlService);
-    handleSuccess(request: Request, response: Response, authTokenResponse: AuthTokenData): Promise<void>;
-    handleFailure(request: Request, response: Response): Promise<void>;
-}

package/dist/portal-options/auth-callback-provider.js

@@ -1,36 +0,0 @@
-var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
-    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
-    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
-    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
-    return c > 3 && r && Object.defineProperty(target, key, r), r;
-};
-var __metadata = (this && this.__metadata) || function (k, v) {
-    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
-};
-var AuthCallbackProvider_1;
-import { IAMGraphQlService } from './services/iam-graphql.service.js';
-import { Injectable, Logger } from '@nestjs/common';
-let AuthCallbackProvider = AuthCallbackProvider_1 = class AuthCallbackProvider {
-    iamService;
-    logger = new Logger(AuthCallbackProvider_1.name);
-    constructor(iamService) {
-        this.iamService = iamService;
-    }
-    async handleSuccess(request, response, authTokenResponse) {
-        try {
-            await this.iamService.addUser(authTokenResponse.id_token, request, response);
-        }
-        catch (e) {
-            this.logger.error(e);
-        }
-    }
-    async handleFailure(request, response) {
-        return Promise.resolve();
-    }
-};
-AuthCallbackProvider = AuthCallbackProvider_1 = __decorate([
-    Injectable(),
-    __metadata("design:paramtypes", [IAMGraphQlService])
-], AuthCallbackProvider);
-export { AuthCallbackProvider };
-//# sourceMappingURL=auth-callback-provider.js.map

package/dist/portal-options/auth-callback-provider.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"auth-callback-provider.js","sourceRoot":"","sources":["../../src/portal-options/auth-callback-provider.ts"],"names":[],"mappings":";;;;;;;;;;AAAA,OAAO,EAAE,iBAAiB,EAAE,MAAM,mCAAmC,CAAC;AACtE,OAAO,EAAE,UAAU,EAAE,MAAM,EAAE,MAAM,gBAAgB,CAAC;AAK7C,IAAM,oBAAoB,4BAA1B,MAAM,oBAAoB;IAGX;IAFZ,MAAM,GAAW,IAAI,MAAM,CAAC,sBAAoB,CAAC,IAAI,CAAC,CAAC;IAE/D,YAAoB,UAA6B;QAA7B,eAAU,GAAV,UAAU,CAAmB;IAAG,CAAC;IAErD,KAAK,CAAC,aAAa,CACjB,OAAgB,EAChB,QAAkB,EAClB,iBAAgC;QAEhC,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,iBAAiB,CAAC,QAAQ,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAC;QAC/E,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QACvB,CAAC;IACH,CAAC;IAED,KAAK,CAAC,aAAa,CAAC,OAAgB,EAAE,QAAkB;QACtD,OAAO,OAAO,CAAC,OAAO,EAAE,CAAC;IAC3B,CAAC;CACF,CAAA;AApBY,oBAAoB;IADhC,UAAU,EAAE;qCAIqB,iBAAiB;GAHtC,oBAAoB,CAoBhC"}

package/dist/portal-options/services/iam-graphql.service.d.ts

@@ -1,7 +0,0 @@
-import { PMRequestContextProvider } from '../pm-request-context-provider.js';
-import type { Request, Response } from 'express';
-export declare class IAMGraphQlService {
-    private requestContextProvider;
-    constructor(requestContextProvider: PMRequestContextProvider);
-    addUser(token: string, request: Request, response: Response): Promise<void>;
-}

package/dist/portal-options/services/iam-graphql.service.js

@@ -1,40 +0,0 @@
-var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
-    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
-    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
-    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
-    return c > 3 && r && Object.defineProperty(target, key, r), r;
-};
-var __metadata = (this && this.__metadata) || function (k, v) {
-    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
-};
-import { PMRequestContextProvider } from '../pm-request-context-provider.js';
-import { MUTATION_LOGIN } from './queries.js';
-import { Injectable } from '@nestjs/common';
-import { GraphQLClient } from 'graphql-request';
-let IAMGraphQlService = class IAMGraphQlService {
-    requestContextProvider;
-    constructor(requestContextProvider) {
-        this.requestContextProvider = requestContextProvider;
-    }
-    async addUser(token, request, response) {
-        const requestContext = await this.requestContextProvider.getContextValues(request, response);
-        const iamUrl = requestContext.iamServiceApiUrl;
-        const client = new GraphQLClient(iamUrl, {
-            headers: {
-                Authorization: `Bearer ${token}`,
-            },
-        });
-        try {
-            await client.request(MUTATION_LOGIN);
-        }
-        catch (e) {
-            console.error(e);
-        }
-    }
-};
-IAMGraphQlService = __decorate([
-    Injectable(),
-    __metadata("design:paramtypes", [PMRequestContextProvider])
-], IAMGraphQlService);
-export { IAMGraphQlService };
-//# sourceMappingURL=iam-graphql.service.js.map

package/dist/portal-options/services/iam-graphql.service.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"iam-graphql.service.js","sourceRoot":"","sources":["../../../src/portal-options/services/iam-graphql.service.ts"],"names":[],"mappings":";;;;;;;;;AAAA,OAAO,EAAE,wBAAwB,EAAE,MAAM,mCAAmC,CAAC;AAC7E,OAAO,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AAC9C,OAAO,EAAE,UAAU,EAAE,MAAM,gBAAgB,CAAC;AAE5C,OAAO,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAC;AAGzC,IAAM,iBAAiB,GAAvB,MAAM,iBAAiB;IACR;IAApB,YAAoB,sBAAgD;QAAhD,2BAAsB,GAAtB,sBAAsB,CAA0B;IAAG,CAAC;IAExE,KAAK,CAAC,OAAO,CACX,KAAa,EACb,OAAgB,EAChB,QAAkB;QAElB,MAAM,cAAc,GAAG,MAAM,IAAI,CAAC,sBAAsB,CAAC,gBAAgB,CACvE,OAAO,EACP,QAAQ,CACT,CAAC;QACF,MAAM,MAAM,GAAG,cAAc,CAAC,gBAAgB,CAAC;QAC/C,MAAM,MAAM,GAAG,IAAI,aAAa,CAAC,MAAM,EAAE;YACvC,OAAO,EAAE;gBACP,aAAa,EAAE,UAAU,KAAK,EAAE;aACjC;SACF,CAAC,CAAC;QAEH,IAAI,CAAC;YACH,MAAM,MAAM,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC;QACvC,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QACnB,CAAC;IACH,CAAC;CACF,CAAA;AAzBY,iBAAiB;IAD7B,UAAU,EAAE;qCAEiC,wBAAwB;GADzD,iBAAiB,CAyB7B"}

package/src/portal-options/auth-callback-provider.spec.ts

@@ -1,85 +0,0 @@
-import { AuthCallbackProvider } from './auth-callback-provider.js';
-import { IAMGraphQlService } from './services/iam-graphql.service.js';
-import { Test, TestingModule } from '@nestjs/testing';
-import type { AuthTokenData } from '@openmfp/portal-server-lib';
-import type { Request, Response } from 'express';
-import { mock } from 'jest-mock-extended';
-
-jest.mock('@kubernetes/client-node', () => {
-  class KubeConfig {
-    loadFromDefault = jest.fn();
-    loadFromFile = jest.fn();
-    getCurrentCluster = jest.fn().mockReturnValue({
-      server: 'https://k8s.example.com/base',
-      name: 'test-cluster',
-    });
-    makeApiClient = jest.fn();
-    addUser = jest.fn();
-    addContext = jest.fn();
-    setCurrentContext = jest.fn();
-  }
-  class CustomObjectsApi {}
-  return { KubeConfig, CustomObjectsApi };
-});
-
-describe('AuthCallbackProvider', () => {
-  let callback: AuthCallbackProvider;
-  let iamServiceMock: IAMGraphQlService;
-
-  beforeEach(async () => {
-    iamServiceMock = mock<IAMGraphQlService>();
-    const module: TestingModule = await Test.createTestingModule({
-      providers: [
-        AuthCallbackProvider,
-        {
-          provide: IAMGraphQlService,
-          useValue: iamServiceMock,
-        },
-      ],
-    }).compile();
-
-    callback = module.get<AuthCallbackProvider>(AuthCallbackProvider);
-  });
-
-  it('should be defined', () => {
-    expect(callback).toBeDefined();
-  });
-
-  it('should create a user', async () => {
-    const req = mock<Request>();
-    const res = mock<Response>();
-
-    await callback.handleSuccess(req, res, {
-      id_token: 'idtoken',
-    } as AuthTokenData);
-
-    expect(iamServiceMock.addUser).toHaveBeenCalledTimes(1);
-    expect(iamServiceMock.addUser).toHaveBeenCalledWith('idtoken', req, res);
-  });
-
-  it('should log error if addUser throws', async () => {
-    const req = mock<Request>();
-    const res = mock<Response>();
-    const error = new Error('boom');
-    (iamServiceMock.addUser as jest.Mock).mockRejectedValueOnce(error);
-
-    const errorSpy = jest
-
-      .spyOn((callback as any).logger, 'error')
-      .mockImplementation(() => undefined as unknown as never);
-
-    await callback.handleSuccess(req, res, {
-      id_token: 'bad',
-    } as AuthTokenData);
-
-    expect(iamServiceMock.addUser).toHaveBeenCalledTimes(1);
-    expect(errorSpy).toHaveBeenCalledWith(error);
-  });
-
-  it('should resolve handleFailure without action', async () => {
-    const req = mock<Request>();
-    const res = mock<Response>();
-
-    await expect(callback.handleFailure(req, res)).resolves.toBeUndefined();
-  });
-});

package/src/portal-options/auth-callback-provider.ts

@@ -1,27 +0,0 @@
-import { IAMGraphQlService } from './services/iam-graphql.service.js';
-import { Injectable, Logger } from '@nestjs/common';
-import { AuthCallback, AuthTokenData } from '@openmfp/portal-server-lib';
-import { Request, Response } from 'express';
-
-@Injectable()
-export class AuthCallbackProvider implements AuthCallback {
-  private logger: Logger = new Logger(AuthCallbackProvider.name);
-
-  constructor(private iamService: IAMGraphQlService) {}
-
-  async handleSuccess(
-    request: Request,
-    response: Response,
-    authTokenResponse: AuthTokenData,
-  ): Promise<void> {
-    try {
-      await this.iamService.addUser(authTokenResponse.id_token, request, response);
-    } catch (e) {
-      this.logger.error(e);
-    }
-  }
-
-  async handleFailure(request: Request, response: Response): Promise<void> {
-    return Promise.resolve();
-  }
-}

package/src/portal-options/services/iam-graphql.service.spec.ts

@@ -1,77 +0,0 @@
-import { PMRequestContextProvider } from '../pm-request-context-provider.js';
-import { IAMGraphQlService } from './iam-graphql.service.js';
-import { MUTATION_LOGIN } from './queries.js';
-import { GraphQLClient } from 'graphql-request';
-import { mock } from 'jest-mock-extended';
-
-jest.mock('@kubernetes/client-node', () => {
-  class KubeConfig {
-    loadFromDefault = jest.fn();
-    loadFromFile = jest.fn();
-    getCurrentCluster = jest.fn().mockReturnValue({
-      server: 'https://k8s.example.com/base',
-      name: 'test-cluster',
-    });
-    makeApiClient = jest.fn();
-    addUser = jest.fn();
-    addContext = jest.fn();
-    setCurrentContext = jest.fn();
-  }
-  class CustomObjectsApi {}
-  return { KubeConfig, CustomObjectsApi };
-});
-
-describe('IAMGraphQlService', () => {
-  const mockIamServiceApiUrl = 'http://localhost:8080/query';
-  let service: IAMGraphQlService;
-  const gqlClient = {
-    request: jest.fn(),
-  } as unknown as GraphQLClient;
-
-  const requestContextProvider = mock<PMRequestContextProvider>({
-    getContextValues: jest
-      .fn()
-      .mockResolvedValue({ iamServiceApiUrl: mockIamServiceApiUrl }),
-  });
-
-  let GraphQLClientMock: jest.SpyInstance;
-
-  beforeEach(() => {
-    jest.resetAllMocks();
-
-    // Re-apply RequestContextProvider mock after resetAllMocks
-    (
-      requestContextProvider.getContextValues as unknown as jest.Mock
-    ).mockResolvedValue({
-      iamServiceApiUrl: mockIamServiceApiUrl,
-    });
-
-    // Mock GraphQLClient constructor to return our mocked client
-    GraphQLClientMock = jest
-      .spyOn<any, any>(require('graphql-request'), 'GraphQLClient')
-      .mockImplementation(() => gqlClient);
-
-    service = new IAMGraphQlService(requestContextProvider as any);
-  });
-
-  it('should call mutation addUser', async () => {
-    (gqlClient.request as jest.Mock).mockResolvedValue('');
-
-    const response = await service.addUser('token', {} as any, {} as any);
-
-    expect(GraphQLClientMock).toHaveBeenCalledWith(mockIamServiceApiUrl, {
-      headers: { Authorization: 'Bearer token' },
-    });
-    expect(gqlClient.request).toHaveBeenCalledWith(MUTATION_LOGIN);
-    expect(response).toBe(undefined);
-  });
-
-  it('should call mutation addUser and log error', async () => {
-    console.error = jest.fn();
-    (gqlClient.request as jest.Mock).mockRejectedValue('error');
-
-    const response = await service.addUser('token', {} as any, {} as any);
-    expect(response).toBe(undefined);
-    expect(console.error).toHaveBeenCalledWith('error');
-  });
-});

package/src/portal-options/services/iam-graphql.service.ts

@@ -1,33 +0,0 @@
-import { PMRequestContextProvider } from '../pm-request-context-provider.js';
-import { MUTATION_LOGIN } from './queries.js';
-import { Injectable } from '@nestjs/common';
-import type { Request, Response } from 'express';
-import { GraphQLClient } from 'graphql-request';
-
-@Injectable()
-export class IAMGraphQlService {
-  constructor(private requestContextProvider: PMRequestContextProvider) {}
-
-  async addUser(
-    token: string,
-    request: Request,
-    response: Response,
-  ): Promise<void> {
-    const requestContext = await this.requestContextProvider.getContextValues(
-      request,
-      response,
-    );
-    const iamUrl = requestContext.iamServiceApiUrl;
-    const client = new GraphQLClient(iamUrl, {
-      headers: {
-        Authorization: `Bearer ${token}`,
-      },
-    });
-
-    try {
-      await client.request(MUTATION_LOGIN);
-    } catch (e) {
-      console.error(e);
-    }
-  }
-}