@point3/logto-module 1.0.11 → 1.0.13

package/README.md

@@ -10,8 +10,25 @@ NestJS 기반 Logto 인증/권한 통합 모듈
 `@point3-logto-module`은 [Logto](https://logto.io/) 인증 시스템을 NestJS 환경에서 손쉽게 통합할 수 있도록 설계된 모듈 번들입니다.  
 OAuth, M2M(Machine-to-Machine), 사용자/역할 관리, 토큰 검증, 인증 가드 등 인증/권한 관련 기능을 일관된 DI 패턴으로 제공합니다.
 
+### 동작 모드
+
+`LOGTO_CLIENT` 환경변수 값에 따라 두 가지 모드로 동작합니다:
+
+- **Stateless 모드 (`LOGTO_CLIENT=false` 또는 미설정)**: 
+  - API 서버와 같이 토큰 검증만 필요한 경우 사용
+  - `@LogtoProtected()` 가드와 `LogtoTokenVerifier`만 활성화
+  - 필수 환경변수: `LOGTO_JWKS_URI`, `LOGTO_AUTH_ISSUER`만 필요
+
+- **Stateful 모드 (`LOGTO_CLIENT=true`)**:
+  - 로그인/로그아웃 처리가 필요한 웹 애플리케이션이나 M2M 통신이 필요한 경우 사용
+  - `OAuthClient`, `LogtoM2MClient` 등 모든 클라이언트 기능 활성화
+  - 추가 환경변수 필요 (OAuth, M2M 관련)
+
+### 주요 특징
+
 - **유연한 로깅 연동**: 외부 로거 모듈/토큰을 DI로 주입받아, 다양한 로깅 시스템과 쉽게 통합
 - **NestJS Dynamic Module 패턴**: 환경/구성에 따라 동적으로 모듈 생성
+- **Global 모듈 지원**: 애플리케이션 전체에서 사용할 수 있는 글로벌 모듈로 설정 가능
 - **실제 서비스에서 검증된 인증/권한 관리 기능**: OAuth, M2M, 사용자/역할 관리, 토큰 검증, 인증 가드 등
 
 ---
@@ -21,7 +38,8 @@ OAuth, M2M(Machine-to-Machine), 사용자/역할 관리, 토큰 검증, 인증
 ### 1. LogtoModule (Dynamic Module)
 
 - 외부에서 로거 모듈과 토큰을 주입받아, Logto 인증/권한 기능을 번들로 제공
-- `logto.module.LogtoModule.forLogger(loggerModule, loggerToken)` 패턴으로 사용
+- `logto.module.LogtoModule.forLogger(loggerModule, loggerToken, global?)` 패턴으로 사용
+- global 파라미터를 true로 설정하면 애플리케이션 전체에서 사용 가능한 글로벌 모듈로 등록
 
 ### 2. 핵심 서비스/토큰
 
@@ -76,12 +94,17 @@ export class MyLoggerModule {}
 
 ```ts
 import { Module } from '@nestjs/common';
+import { ConfigModule } from '@nestjs/config';
 import * as logto from '@point3/logto-module';
 import { MyLoggerModule, MY_LOGGER_TOKEN } from './my-logger.module';
 
 @Module({
   imports: [
-    logto.module.LogtoModule.forLogger(MyLoggerModule, MY_LOGGER_TOKEN),
+    // 환경변수를 먼저 로드
+    ConfigModule.forRoot({ isGlobal: true }),
+    
+    // LogtoModule을 글로벌 모듈로 설정 (세 번째 파라미터를 true로 설정)
+    logto.module.LogtoModule.forLogger(MyLoggerModule, MY_LOGGER_TOKEN, true),
   ],
 })
 export class AppModule {}
@@ -125,96 +148,155 @@ export class AuthService {
 
 ### 4. stateless 네임스페이스 활용 예시
 
-#### 4-1. Express/Fastify 미들웨어로 토큰 인증
+> ⚠️ **중요한 주의사항**  
+> `requiredScopes`와 `requiredRoles`에 사용되는 모든 스코프와 역할은 **반드시 Logto 관리 콘솔에서 먼저 정의되어야 합니다**.  
+> 
+> - **스코프(Scopes)**: Logto 콘솔의 API Resources → 해당 리소스 → Scopes에서 정의
+> - **역할(Roles)**: Logto 콘솔의 User Management → Roles에서 정의  
+> - **역할-스코프 연결**: 각 역할에 필요한 스코프들을 Logto 콘솔에서 할당
+> 
+> 코드에서 사용하는 스코프/역할 이름이 Logto에 정의되지 않았다면 토큰 검증이 실패합니다.
+
+#### 4-1. LogtoProtected 데코레이터를 사용한 라우트 보호
 
 ```ts
-// main.ts
+// user.controller.ts
+import { Controller, Get } from '@nestjs/common';
 import { stateless } from '@point3/logto-module';
-import { NestFactory } from '@nestjs/core';
-import { AppModule } from './app.module';
 
-async function bootstrap() {
-  const app = await NestFactory.create(AppModule);
-  // JWT Bearer 토큰 인증 미들웨어 (stateless)
-  app.use(stateless.createTokenAuthMiddleware({
-    requiredScopes: ['admin'],
-    requiredRoles: ['superuser'],
-  }));
-  await app.listen(3000);
-}
-bootstrap();
-```
+@Controller('users')
+export class UserController {
+  // 기본 토큰 인증만 필요한 경우
+  @Get('profile')
+  @stateless.LogtoProtected()
+  getProfile() {
+    return { message: '인증된 사용자만 접근 가능' };
+  }
 
-#### 4-2. 커스텀 가드/핸들러에서 stateless 유틸리티 활용
+  // 특정 스코프가 필요한 경우
+  @Get('admin')
+  @stateless.LogtoProtected({
+    requiredScopes: ['admin', 'user:read']
+  })
+  getAdminData() {
+    return { message: '관리자 스코프가 필요한 데이터' };
+  }
 
-```ts
-// custom.guard.ts
-import { CanActivate, ExecutionContext, Injectable } from '@nestjs/common';
-import { stateless } from '@point3/logto-module';
+  // 특정 역할이 필요한 경우
+  @Get('management')
+  @stateless.LogtoProtected({
+    requiredRoles: ['superuser', 'management-point3']
+  })
+  getManagementData() {
+    return { message: '관리자 역할이 필요한 데이터' };
+  }
 
-@Injectable()
-export class MyStatelessGuard implements CanActivate {
-  async canActivate(context: ExecutionContext): Promise<boolean> {
-    const req = context.switchToHttp().getRequest();
-    // stateless 토큰 검증 및 권한 체크
-    const payload = await stateless.verifyRequestToken(req, {
-      requiredScopes: ['user'],
-    });
-    // payload에 따라 추가 로직 가능
-    return !!payload;
+  // 스코프와 역할을 모두 요구하는 경우
+  @Get('secure')
+  @stateless.LogtoProtected({
+    requiredScopes: ['admin'],
+    requiredRoles: ['superuser']
+  })
+  getSecureData() {
+    return { message: '고급 권한이 필요한 데이터' };
   }
 }
 ```
 
-#### 4-3. 커스텀 데코레이터로 유저 정보 추출
+#### 4-2. 커스텀 데코레이터로 유저 정보 추출
 
 ```ts
 // user.decorator.ts
 import { createParamDecorator, ExecutionContext } from '@nestjs/common';
-import { stateless } from '@point3/logto-module';
 
 export const CurrentUser = createParamDecorator(
-  async (data, ctx: ExecutionContext) => {
-    const req = ctx.switchToHttp().getRequest();
-    const payload = await stateless.verifyRequestToken(req);
-    return payload;
+  (data: unknown, ctx: ExecutionContext) => {
+    const request = ctx.switchToHttp().getRequest();
+    // LogtoTokenGuard가 request.user에 설정한 사용자 정보 반환
+    return request.user;
   },
 );
 
 // 컨트롤러에서 사용
-@Get('me')
-getMe(@CurrentUser() user) {
-  return user;
+@Controller('me')
+export class MeController {
+  @Get()
+  @stateless.LogtoProtected()
+  getMe(@CurrentUser() user: any) {
+    return {
+      userId: user.userId,
+      managerId: user.managerId,
+      clientId: user.clientId
+    };
+  }
 }
 ```
 
-#### 4-4. NestJS Provider로 stateless 가드 등록
+#### 4-3. 전역 가드로 LogtoTokenGuard 등록
 
 ```ts
 // app.module.ts
 import { Module } from '@nestjs/common';
+import { APP_GUARD } from '@nestjs/core';
 import { stateless } from '@point3/logto-module';
 
 @Module({
   providers: [
     {
-      provide: 'STATLESS_GUARD',
-      useClass: stateless.StatelessTokenGuard,
+      provide: APP_GUARD,
+      useClass: stateless.LogtoTokenGuard,
     },
   ],
 })
 export class AppModule {}
 ```
 
-#### 4-5. 직접 토큰 검증/유저 정보 추출 (서비스/핸들러 등)
+#### 4-4. 커스텀 가드에서 LogtoTokenGuard 확장
 
 ```ts
+// custom.guard.ts
+import { CanActivate, ExecutionContext, Injectable } from '@nestjs/common';
 import { stateless } from '@point3/logto-module';
 
-async function handleRequest(req) {
-  const payload = await stateless.verifyRequestToken(req);
-  if (!payload) throw new Error('인증 실패');
-  // payload.sub, payload.userRoles 등 활용
+@Injectable()
+export class CustomLogtoGuard extends stateless.LogtoTokenGuard {
+  async canActivate(context: ExecutionContext): Promise<boolean> {
+    // 기본 토큰 검증 수행
+    const isValid = await super.canActivate(context);
+    
+    if (!isValid) return false;
+
+    // 추가 커스텀 로직
+    const request = context.switchToHttp().getRequest();
+    const user = request.user;
+    
+    // 예: 특정 시간대에만 접근 허용
+    const currentHour = new Date().getHours();
+    if (currentHour < 9 || currentHour > 18) {
+      return false;
+    }
+    
+    return true;
+  }
+}
+```
+
+#### 4-5. 타입 안전성을 위한 역할 타입 정의
+
+```ts
+// types/roles.ts
+export type UserRole = 'admin' | 'user' | 'moderator';
+
+// 컨트롤러에서 타입 안전하게 사용
+@Controller('typed')
+export class TypedController {
+  @Get('admin-only')
+  @stateless.LogtoProtected<UserRole>({
+    requiredRoles: ['admin'] // 타입 체크됨
+  })
+  getAdminData() {
+    return { message: '타입 안전한 역할 기반 접근 제어' };
+  }
 }
 ```
 
@@ -275,25 +357,35 @@ const config: LogtoConfig = {
 
 ## 🗂️ 환경변수 목록 및 설명
 
+### 필수 환경변수 (Stateless/Stateful 모드 공통)
+
 | 환경변수명                        | 설명                                              | 예시 값                                  |
 |-----------------------------------|---------------------------------------------------|------------------------------------------|
-| LOGTO_AUTH_ENDPOINT               | Logto 인증 서버 OIDC 엔드포인트                   | https://auth.example.com/oidc            |
-| LOGTO_CLIENT_ID                   | OAuth 클라이언트 ID                               | my-client-id                             |
-| LOGTO_CLIENT_SECRET               | OAuth 클라이언트 시크릿                           | my-client-secret                         |
-| LOGTO_RESOURCES                   | 접근할 리소스 서버(여러 개일 경우 쉼표로 구분)     | https://api.example.com                  |
-| LOGTO_SCOPES                      | 요청할 OAuth 스코프(쉼표로 구분)                  | openid,profile,email                     |
-| LOGTO_PROMPT                      | OAuth prompt 파라미터                             | login                                    |
-| LOGTO_REDIRECT_URI                | 인증 후 리다이렉트될 URI                          | https://myapp.com/callback               |
-| LOGTO_SIGN_IN_URI                 | 기본 로그인 URI                                   | https://auth.example.com                 |
-| LOGTO_DASHBOARD_SIGN_IN_URI       | 대시보드 로그인 URI(선택)                         | https://dashboard.example.com            |
-| LOGTO_M2M_CLIENT_ID               | M2M 인증용 클라이언트 ID                          | my-m2m-client-id                         |
-| LOGTO_M2M_CLIENT_SECRET           | M2M 인증용 클라이언트 시크릿                      | my-m2m-client-secret                     |
-| LOGTO_M2M_RESOURCE                | M2M 인증용 리소스                                 | https://api.example.com                  |
-| LOGTO_M2M_API_URL                 | M2M API 서버의 base URL                           | https://api.example.com/api              |
 | LOGTO_JWKS_URI                    | JWT 검증용 JWKS 엔드포인트                        | https://auth.example.com/oidc/jwks       |
 | LOGTO_AUTH_ISSUER                 | JWT 발급자(iss)                                   | https://auth.example.com/oidc            |
 
-> ⚠️ 실제로 필요한 환경변수는 사용하는 서비스(OAuth, M2M, 세션 등)에 따라 다를 수 있습니다. 위 표를 참고하여 .env 파일 또는 환경설정에 추가하세요.
+### 선택적 환경변수
+
+| 환경변수명                        | 설명                                              | 예시 값                                  | 필요 조건                               |
+|-----------------------------------|---------------------------------------------------|------------------------------------------|-----------------------------------------|
+| LOGTO_CLIENT                      | Stateful 모드 활성화 (클라이언트 기능 사용)       | true                                     | 클라이언트 기능 사용 시                 |
+| LOGTO_AUTH_ENDPOINT               | Logto 인증 서버 OIDC 엔드포인트                   | https://auth.example.com/oidc            | LOGTO_CLIENT=true                       |
+| LOGTO_CLIENT_ID                   | OAuth 클라이언트 ID                               | my-client-id                             | LOGTO_CLIENT=true                       |
+| LOGTO_CLIENT_SECRET               | OAuth 클라이언트 시크릿                           | my-client-secret                         | LOGTO_CLIENT=true                       |
+| LOGTO_RESOURCES                   | 접근할 리소스 서버(여러 개일 경우 쉼표로 구분)     | https://api.example.com                  | LOGTO_CLIENT=true                       |
+| LOGTO_SCOPES                      | 요청할 OAuth 스코프(쉼표로 구분)                  | openid,profile,email                     | LOGTO_CLIENT=true                       |
+| LOGTO_PROMPT                      | OAuth prompt 파라미터                             | login                                    | LOGTO_CLIENT=true                       |
+| LOGTO_REDIRECT_URI                | 인증 후 리다이렉트될 URI                          | https://myapp.com/callback               | LOGTO_CLIENT=true                       |
+| LOGTO_SIGN_IN_URI                 | 기본 로그인 URI                                   | https://auth.example.com                 | LOGTO_CLIENT=true                       |
+| LOGTO_DASHBOARD_SIGN_IN_URI       | 대시보드 로그인 URI(선택)                         | https://dashboard.example.com            | LOGTO_CLIENT=true                       |
+| LOGTO_M2M_CLIENT_ID               | M2M 인증용 클라이언트 ID                          | my-m2m-client-id                         | LOGTO_CLIENT=true & M2M 기능 사용 시    |
+| LOGTO_M2M_CLIENT_SECRET           | M2M 인증용 클라이언트 시크릿                      | my-m2m-client-secret                     | LOGTO_CLIENT=true & M2M 기능 사용 시    |
+| LOGTO_M2M_RESOURCE                | M2M 인증용 리소스                                 | https://api.example.com                  | LOGTO_CLIENT=true & M2M 기능 사용 시    |
+| LOGTO_M2M_API_URL                 | M2M API 서버의 base URL                           | https://api.example.com/api              | LOGTO_CLIENT=true & M2M 기능 사용 시    |
+
+> ⚠️ **중요**: 
+> - Stateless 모드(기본값): `LOGTO_JWKS_URI`와 `LOGTO_AUTH_ISSUER`만 설정하면 토큰 검증 기능을 사용할 수 있습니다.
+> - Stateful 모드: `LOGTO_CLIENT=true`로 설정하고 OAuth/M2M 관련 환경변수를 추가로 설정해야 합니다.
 
 ---
 
@@ -316,6 +408,16 @@ const config: LogtoConfig = {
 - **Q. 인증/권한 외에 사용자/역할 관리도 가능한가요?**  
   → 네, `LogtoM2MClient`를 통해 사용자/역할 생성, 조회, 수정, 삭제, 할당 등 모든 관리가 가능합니다.
 
+- **Q. Stateless 모드와 Stateful 모드의 차이는 무엇인가요?**  
+  → Stateless 모드는 토큰 검증만 필요한 API 서버에 적합하며, 최소한의 환경변수(`LOGTO_JWKS_URI`, `LOGTO_AUTH_ISSUER`)만 필요합니다.  
+  → Stateful 모드는 `LOGTO_CLIENT=true`로 설정하여 로그인/로그아웃, M2M 통신 등 클라이언트 기능을 모두 사용할 수 있습니다.
+
+- **Q. global 파라미터는 언제 사용하나요?**  
+  → `forLogger`의 세 번째 파라미터를 `true`로 설정하면 LogtoModule이 글로벌 모듈로 등록되어, 다른 모듈에서 별도의 import 없이 Logto 서비스들을 사용할 수 있습니다.
+
+- **Q. 토큰 검증만 필요한데 모든 환경변수를 설정해야 하나요?**  
+  → 아니요. 토큰 검증만 필요하다면 `LOGTO_JWKS_URI`와 `LOGTO_AUTH_ISSUER`만 설정하면 됩니다. `LOGTO_CLIENT`를 설정하지 않거나 `false`로 설정하면 자동으로 Stateless 모드가 활성화됩니다.
+
 ---
 
 ## 🏷️ 내보내는 토큰/서비스

package/dist/module.js

@@ -1,45 +1,67 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.LogtoModule = void 0;
-const stateless_1 = require("./stateless");
-const token_1 = require("./token");
+const config_1 = require("@nestjs/config");
 const client_1 = require("./client");
+const token_1 = require("./token");
+const stateless_1 = require("./stateless");
 class LogtoModule {
     static forLogger(loggerModule, loggerToken, global = false) {
-        return {
-            module: LogtoModule,
-            global: global,
-            imports: [loggerModule],
-            providers: [
-                {
-                    provide: client_1.LogtoLoggerServiceToken,
-                    useExisting: loggerToken
-                },
-                {
-                    provide: token_1.LogtoTokenVerifierToken,
-                    useClass: token_1.LogtoTokenVerifier,
-                },
-                {
-                    provide: client_1.OAuthClientToken,
-                    useClass: client_1.OAuthClient,
+        const baseProviders = [
+            {
+                provide: client_1.LogtoLoggerServiceToken,
+                useExisting: loggerToken,
+            },
+            {
+                provide: token_1.LogtoTokenVerifierToken,
+                useClass: token_1.LogtoTokenVerifier,
+            },
+            {
+                provide: stateless_1.LogtoTokenGuardToken,
+                useClass: stateless_1.LogtoTokenGuard,
+            },
+        ];
+        const statefulProviders = [
+            {
+                provide: client_1.OAuthClientToken,
+                useFactory: (configService, logger) => {
+                    if (configService.get('LOGTO_CLIENT')?.toLowerCase() === 'true') {
+                        return new client_1.OAuthClient(configService, logger);
+                    }
+                    return null;
                 },
-                {
-                    provide: client_1.LogtoLoginSessionToken,
-                    useClass: client_1.LogtoLoginSession
+                inject: [config_1.ConfigService, client_1.LogtoLoggerServiceToken],
+            },
+            {
+                provide: client_1.LogtoLoginSessionToken,
+                useFactory: (configService, logger, oauthClient) => {
+                    if (configService.get('LOGTO_CLIENT')?.toLowerCase() === 'true') {
+                        return new client_1.LogtoLoginSession(logger, configService, oauthClient);
+                    }
+                    return null;
                 },
-                {
-                    provide: client_1.LogtoM2MClientToken,
-                    useClass: client_1.LogtoM2MClient
+                inject: [config_1.ConfigService, client_1.LogtoLoggerServiceToken, client_1.OAuthClientToken],
+            },
+            {
+                provide: client_1.LogtoM2MClientToken,
+                useFactory: (configService, tokenVerifier, logger) => {
+                    if (configService.get('LOGTO_CLIENT')?.toLowerCase() === 'true') {
+                        return new client_1.LogtoM2MClient(configService, tokenVerifier, logger);
+                    }
+                    return null;
                 },
-                stateless_1.LogtoTokenGuard
+                inject: [config_1.ConfigService, token_1.LogtoTokenVerifierToken, client_1.LogtoLoggerServiceToken],
+            },
+        ];
+        const providers = [...baseProviders, ...statefulProviders];
+        return {
+            module: LogtoModule,
+            global: global,
+            imports: [
+                loggerModule,
             ],
-            exports: [
-                client_1.OAuthClientToken,
-                client_1.LogtoM2MClientToken,
-                token_1.LogtoTokenVerifierToken,
-                client_1.LogtoLoginSessionToken,
-                stateless_1.LogtoTokenGuard,
-            ]
+            providers: providers,
+            exports: providers,
         };
     }
 }

package/dist/module.js.map

@@ -1 +1 @@
-{"version":3,"file":"module.js","sourceRoot":"","sources":["../module.ts"],"names":[],"mappings":";;;AACA,2CAA8C;AAC9C,mCAAsE;AACtE,qCAKkB;AAqBlB,MAAa,WAAW;IAiBpB,MAAM,CAAC,SAAS,CACZ,YAAuB,EACvB,WAA4B,EAC5B,SAAkB,KAAK;QAEvB,OAAO;YACH,MAAM,EAAE,WAAW;YACnB,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,CAAC,YAAY,CAAC;YACvB,SAAS,EAAE;gBACP;oBACI,OAAO,EAAE,gCAAuB;oBAChC,WAAW,EAAE,WAAW;iBAC3B;gBACD;oBACI,OAAO,EAAE,+BAAuB;oBAChC,QAAQ,EAAE,0BAAkB;iBAC/B;gBACD;oBACI,OAAO,EAAE,yBAAgB;oBACzB,QAAQ,EAAE,oBAAW;iBACxB;gBACD;oBACI,OAAO,EAAE,+BAAsB;oBAC/B,QAAQ,EAAE,0BAAiB;iBAC9B;gBACD;oBACI,OAAO,EAAE,4BAAmB;oBAC5B,QAAQ,EAAE,uBAAc;iBAC3B;gBACD,2BAAe;aAClB;YACD,OAAO,EAAE;gBACL,yBAAgB;gBAChB,4BAAmB;gBACnB,+BAAuB;gBACvB,+BAAsB;gBACtB,2BAAe;aAClB;SACJ,CAAA;IACL,CAAC;CACJ;AA1DD,kCA0DC;AAAA,CAAC"}
+{"version":3,"file":"module.js","sourceRoot":"","sources":["../module.ts"],"names":[],"mappings":";;;AACA,2CAA6D;AAC7D,qCAQkB;AAClB,mCAAsE;AACtE,2CAAoE;AAmBpE,MAAa,WAAW;IAgDpB,MAAM,CAAC,SAAS,CACZ,YAAuB,EACvB,WAA4B,EAC5B,SAAkB,KAAK;QAEvB,MAAM,aAAa,GAAe;YAC9B;gBACI,OAAO,EAAE,gCAAuB;gBAChC,WAAW,EAAE,WAAW;aAC3B;YACD;gBACI,OAAO,EAAE,+BAAuB;gBAChC,QAAQ,EAAE,0BAAkB;aAC/B;YACD;gBACI,OAAO,EAAE,gCAAoB;gBAC7B,QAAQ,EAAE,2BAAe;aAC5B;SACJ,CAAC;QAEF,MAAM,iBAAiB,GAAe;YAClC;gBACI,OAAO,EAAE,yBAAgB;gBACzB,UAAU,EAAE,CAAC,aAA4B,EAAE,MAAW,EAAE,EAAE;oBACtD,IAAI,aAAa,CAAC,GAAG,CAAS,cAAc,CAAC,EAAE,WAAW,EAAE,KAAK,MAAM,EAAE,CAAC;wBACtE,OAAO,IAAI,oBAAW,CAAC,aAAa,EAAE,MAAM,CAAC,CAAC;oBAClD,CAAC;oBACD,OAAO,IAAI,CAAC;gBAChB,CAAC;gBACD,MAAM,EAAE,CAAC,sBAAa,EAAE,gCAAuB,CAAC;aACnD;YACD;gBACI,OAAO,EAAE,+BAAsB;gBAC/B,UAAU,EAAE,CAAC,aAA4B,EAAE,MAAW,EAAE,WAAwB,EAAE,EAAE;oBAChF,IAAI,aAAa,CAAC,GAAG,CAAS,cAAc,CAAC,EAAE,WAAW,EAAE,KAAK,MAAM,EAAE,CAAC;wBACtE,OAAO,IAAI,0BAAiB,CAAC,MAAM,EAAE,aAAa,EAAE,WAAW,CAAC,CAAC;oBACrE,CAAC;oBACD,OAAO,IAAI,CAAC;gBAChB,CAAC;gBACD,MAAM,EAAE,CAAC,sBAAa,EAAE,gCAAuB,EAAE,yBAAgB,CAAC;aACrE;YACD;gBACI,OAAO,EAAE,4BAAmB;gBAC5B,UAAU,EAAE,CAAC,aAA4B,EAAE,aAAiC,EAAE,MAAW,EAAE,EAAE;oBACzF,IAAI,aAAa,CAAC,GAAG,CAAS,cAAc,CAAC,EAAE,WAAW,EAAE,KAAK,MAAM,EAAE,CAAC;wBACtE,OAAO,IAAI,uBAAc,CAAC,aAAa,EAAE,aAAa,EAAE,MAAM,CAAC,CAAC;oBACpE,CAAC;oBACD,OAAO,IAAI,CAAC;gBAChB,CAAC;gBACD,MAAM,EAAE,CAAC,sBAAa,EAAE,+BAAuB,EAAE,gCAAuB,CAAC;aAC5E;SACJ,CAAC;QAEF,MAAM,SAAS,GAAG,CAAC,GAAG,aAAa,EAAE,GAAG,iBAAiB,CAAC,CAAC;QAE3D,OAAO;YACH,MAAM,EAAE,WAAW;YACnB,MAAM,EAAE,MAAM;YACd,OAAO,EAAE;gBACL,YAAY;aACf;YACD,SAAS,EAAE,SAAS;YACpB,OAAO,EAAE,SAAS;SACrB,CAAC;IACN,CAAC;CACJ;AAjHD,kCAiHC;AAAA,CAAC"}

package/dist/stateless/guard.d.ts

@@ -1,10 +1,11 @@
 import { CanActivate, ExecutionContext } from '@nestjs/common';
 import { Reflector } from '@nestjs/core';
-import * as token from '../token';
+import { LogtoTokenVerifier } from '../token';
+export declare const LogtoTokenGuardToken: unique symbol;
 export declare class LogtoTokenGuard implements CanActivate {
     private reflector;
     private tokenVerifier;
-    constructor(reflector: Reflector, tokenVerifier: token.LogtoTokenVerifier);
+    constructor(reflector: Reflector, tokenVerifier: LogtoTokenVerifier);
     canActivate(context: ExecutionContext): Promise<boolean>;
     private extractBearerTokenFrom;
 }

package/dist/stateless/guard.js

@@ -1,43 +1,10 @@
 "use strict";
-var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    var desc = Object.getOwnPropertyDescriptor(m, k);
-    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
-      desc = { enumerable: true, get: function() { return m[k]; } };
-    }
-    Object.defineProperty(o, k2, desc);
-}) : (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    o[k2] = m[k];
-}));
-var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
-    Object.defineProperty(o, "default", { enumerable: true, value: v });
-}) : function(o, v) {
-    o["default"] = v;
-});
 var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
     var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
     if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
     else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
     return c > 3 && r && Object.defineProperty(target, key, r), r;
 };
-var __importStar = (this && this.__importStar) || (function () {
-    var ownKeys = function(o) {
-        ownKeys = Object.getOwnPropertyNames || function (o) {
-            var ar = [];
-            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
-            return ar;
-        };
-        return ownKeys(o);
-    };
-    return function (mod) {
-        if (mod && mod.__esModule) return mod;
-        var result = {};
-        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
-        __setModuleDefault(result, mod);
-        return result;
-    };
-})();
 var __metadata = (this && this.__metadata) || function (k, v) {
     if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
 };
@@ -45,12 +12,13 @@ var __param = (this && this.__param) || function (paramIndex, decorator) {
     return function (target, key) { decorator(target, key, paramIndex); }
 };
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.LogtoTokenGuard = void 0;
+exports.LogtoTokenGuard = exports.LogtoTokenGuardToken = void 0;
 const common_1 = require("@nestjs/common");
 const core_1 = require("@nestjs/core");
 const jose_1 = require("jose");
 const point3_common_tool_1 = require("point3-common-tool");
-const token = __importStar(require("../token"));
+const token_1 = require("../token");
+exports.LogtoTokenGuardToken = Symbol('LogtoTokenGuard');
 let LogtoTokenGuard = class LogtoTokenGuard {
     constructor(reflector, tokenVerifier) {
         this.reflector = reflector;
@@ -94,9 +62,9 @@ let LogtoTokenGuard = class LogtoTokenGuard {
 };
 exports.LogtoTokenGuard = LogtoTokenGuard;
 exports.LogtoTokenGuard = LogtoTokenGuard = __decorate([
-    (0, common_1.Global)(),
     (0, common_1.Injectable)(),
-    __param(1, (0, common_1.Inject)(token.LogtoTokenVerifierToken)),
-    __metadata("design:paramtypes", [core_1.Reflector, token.LogtoTokenVerifier])
+    __param(1, (0, common_1.Inject)(token_1.LogtoTokenVerifierToken)),
+    __metadata("design:paramtypes", [core_1.Reflector,
+        token_1.LogtoTokenVerifier])
 ], LogtoTokenGuard);
 //# sourceMappingURL=guard.js.map

package/dist/stateless/guard.js.map

@@ -1 +1 @@
-{"version":3,"file":"guard.js","sourceRoot":"","sources":["../../stateless/guard.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,2CASwB;AACxB,uCAAyC;AAGzC,+BAA8B;AAE9B,2DAA8C;AAC9C,gDAAkC;AAI3B,IAAM,eAAe,GAArB,MAAM,eAAe;IAC1B,YACU,SAAoB,EAGpB,aAAuC;QAHvC,cAAS,GAAT,SAAS,CAAW;QAGpB,kBAAa,GAAb,aAAa,CAA0B;IAC7C,CAAC;IAEL,KAAK,CAAC,WAAW,CAAC,OAAyB;QAEzC,MAAM,cAAc,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAW,gBAAgB,EAAE,OAAO,CAAC,UAAU,EAAE,CAAC,CAAC;QAC5F,MAAM,aAAa,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAW,eAAe,EAAE,OAAO,CAAC,UAAU,EAAE,CAAC,CAAC;QAE1F,MAAM,OAAO,GAAG,OAAO,CAAC,YAAY,EAAE,CAAC,UAAU,EAAE,CAAC;QAGpD,IAAI,CAAC;YACH,MAAM,WAAW,GAAG,IAAI,CAAC,sBAAsB,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;YACjE,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,WAAW,CAAC,WAAW,EAAE,cAAc,EAAE,aAAa,CAAC,CAAC;YAGhG,OAAO,CAAC,IAAI,GAAG;gBACb,MAAM,EAAE,MAAM,CAAC,GAAG;gBAClB,SAAS,EAAE,6BAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,SAAS,CAAC;gBAChD,QAAQ,EAAE,6BAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,QAAQ,CAAC;aAC/C,CAAA;YACD,OAAO,IAAI,CAAC;QACd,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,KAAK,YAAY,8BAAqB;gBAAE,MAAM,KAAK,CAAC;YACxD,IAAI,KAAK,YAAY,aAAM,CAAC,SAAS;gBAAE,MAAM,IAAI,8BAAqB,CAAC,KAAK,CAAC,CAAC;YAC9E,IAAI,KAAK,YAAY,KAAK;gBAAE,MAAM,IAAI,qCAA4B,CAAC,kBAAkB,EAAE,GAAG,mBAAU,CAAC,qBAAqB,EAAE,CAAC,CAAC;YAE9H,MAAM,IAAI,8BAAqB,CAAC,gBAAgB,CAAC,CAAC;QACpD,CAAC;IACH,CAAC;IAQO,sBAAsB,CAAC,OAA4B;QACzD,MAAM,qBAAqB,GAAG,QAAQ,CAAC;QAEvC,IAAI,CAAC,OAAO,CAAC,aAAa,EAAE,CAAC;YAC3B,MAAM,IAAI,8BAAqB,CAAC,iCAAiC,CAAC,CAAC;QACrE,CAAC;QAED,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,UAAU,CAAC,qBAAqB,CAAC,EAAE,CAAC;YAC7D,MAAM,IAAI,8BAAqB,CAAC,wCAAwC,CAAC,CAAC;QAC5E,CAAC;QAED,OAAO,OAAO,CAAC,aAAa,CAAC,KAAK,CAAC,qBAAqB,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IACvE,CAAC;IAAA,CAAC;CACH,CAAA;AAvDY,0CAAe;0BAAf,eAAe;IAF3B,IAAA,eAAM,GAAE;IACR,IAAA,mBAAU,GAAE;IAKR,WAAA,IAAA,eAAM,EAAC,KAAK,CAAC,uBAAuB,CAAC,CAAA;qCAFnB,gBAAS,EAGL,KAAK,CAAC,kBAAkB;GALtC,eAAe,CAuD3B"}
+{"version":3,"file":"guard.js","sourceRoot":"","sources":["../../stateless/guard.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;AAAA,2CAQwB;AACxB,uCAAyC;AAGzC,+BAA8B;AAE9B,2DAA8C;AAC9C,oCAAuE;AAE1D,QAAA,oBAAoB,GAAG,MAAM,CAAC,iBAAiB,CAAC,CAAC;AAGvD,IAAM,eAAe,GAArB,MAAM,eAAe;IAC1B,YACU,SAAoB,EAGpB,aAAiC;QAHjC,cAAS,GAAT,SAAS,CAAW;QAGpB,kBAAa,GAAb,aAAa,CAAoB;IACvC,CAAC;IAEL,KAAK,CAAC,WAAW,CAAC,OAAyB;QAEzC,MAAM,cAAc,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAW,gBAAgB,EAAE,OAAO,CAAC,UAAU,EAAE,CAAC,CAAC;QAC5F,MAAM,aAAa,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAW,eAAe,EAAE,OAAO,CAAC,UAAU,EAAE,CAAC,CAAC;QAE1F,MAAM,OAAO,GAAG,OAAO,CAAC,YAAY,EAAE,CAAC,UAAU,EAAE,CAAC;QAGpD,IAAI,CAAC;YACH,MAAM,WAAW,GAAG,IAAI,CAAC,sBAAsB,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;YACjE,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,WAAW,CAAC,WAAW,EAAE,cAAc,EAAE,aAAa,CAAC,CAAC;YAGhG,OAAO,CAAC,IAAI,GAAG;gBACb,MAAM,EAAE,MAAM,CAAC,GAAG;gBAClB,SAAS,EAAE,6BAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,SAAS,CAAC;gBAChD,QAAQ,EAAE,6BAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,QAAQ,CAAC;aAC/C,CAAA;YACD,OAAO,IAAI,CAAC;QACd,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,KAAK,YAAY,8BAAqB;gBAAE,MAAM,KAAK,CAAC;YACxD,IAAI,KAAK,YAAY,aAAM,CAAC,SAAS;gBAAE,MAAM,IAAI,8BAAqB,CAAC,KAAK,CAAC,CAAC;YAC9E,IAAI,KAAK,YAAY,KAAK;gBAAE,MAAM,IAAI,qCAA4B,CAAC,kBAAkB,EAAE,GAAG,mBAAU,CAAC,qBAAqB,EAAE,CAAC,CAAC;YAE9H,MAAM,IAAI,8BAAqB,CAAC,gBAAgB,CAAC,CAAC;QACpD,CAAC;IACH,CAAC;IAQO,sBAAsB,CAAC,OAA4B;QACzD,MAAM,qBAAqB,GAAG,QAAQ,CAAC;QAEvC,IAAI,CAAC,OAAO,CAAC,aAAa,EAAE,CAAC;YAC3B,MAAM,IAAI,8BAAqB,CAAC,iCAAiC,CAAC,CAAC;QACrE,CAAC;QAED,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,UAAU,CAAC,qBAAqB,CAAC,EAAE,CAAC;YAC7D,MAAM,IAAI,8BAAqB,CAAC,wCAAwC,CAAC,CAAC;QAC5E,CAAC;QAED,OAAO,OAAO,CAAC,aAAa,CAAC,KAAK,CAAC,qBAAqB,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IACvE,CAAC;IAAA,CAAC;CACH,CAAA;AAvDY,0CAAe;0BAAf,eAAe;IAD3B,IAAA,mBAAU,GAAE;IAKR,WAAA,IAAA,eAAM,EAAC,+BAAuB,CAAC,CAAA;qCAFb,gBAAS;QAGL,0BAAkB;GALhC,eAAe,CAuD3B"}

package/dist/token/verifier.js

@@ -58,7 +58,6 @@ let LogtoTokenVerifier = class LogtoTokenVerifier {
 };
 exports.LogtoTokenVerifier = LogtoTokenVerifier;
 exports.LogtoTokenVerifier = LogtoTokenVerifier = __decorate([
-    (0, common_1.Global)(),
     (0, common_1.Injectable)(),
     __param(0, (0, common_1.Inject)(config_1.ConfigService)),
     __metadata("design:paramtypes", [config_1.ConfigService])

package/dist/token/verifier.js.map

@@ -1 +1 @@
-{"version":3,"file":"verifier.js","sourceRoot":"","sources":["../../token/verifier.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;AAAA,2CAAmF;AACnF,2CAA+C;AAC/C,+BAAqD;AAIxC,QAAA,uBAAuB,GAAG,MAAM,CAAC,GAAG,CAAC,oBAAoB,CAAC,CAAC;AAIjE,IAAM,kBAAkB,GAAxB,MAAM,kBAAkB;IAC3B,YAEqB,aAA4B;QAA5B,kBAAa,GAAb,aAAa,CAAe;IAC7C,CAAC;IAYE,KAAK,CAAC,WAAW,CAAC,KAAa,EAAE,cAAyB,EAAE,aAAwB;QACvF,IAAI,CAAC,KAAK;YAAE,MAAM,IAAI,8BAAqB,CAAC,oBAAoB,CAAC,CAAC;QAElE,MAAM,OAAO,GAAG,IAAI,CAAC,aAAa,CAAC,GAAG,CAAS,gBAAgB,CAAC,IAAI,iCAAiC,CAAC;QACtG,MAAM,MAAM,GAAG,IAAI,CAAC,aAAa,CAAC,GAAG,CAAS,mBAAmB,CAAC,CAAC;QAEnE,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,IAAA,gBAAS,EAC/B,KAAK,EAAE,IAAA,yBAAkB,EAAC,IAAI,GAAG,CAAC,OAAO,CAAC,CAAC,EAC3C,EAAE,MAAM,EAAE,CACb,CAAC;QAEF,MAAM,YAAY,GAAG,OAAmC,CAAC;QAEzD,IAAI,cAAc,IAAI,aAAa,EAAE,CAAC;YAClC,IAAI,CAAC,+BAA+B,CAChC,YAAY,EAAE,cAAc,EAAE,aAAa,CAAC,CAAC;QACrD,CAAC;QAED,OAAO,YAAY,CAAC;IACxB,CAAC;IAOM,KAAK,CAAC,aAAa,CAAC,KAAa;QACpC,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,cAAc,IAAI,iCAAiC,CAAC;QAChF,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAC;QAE7C,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,IAAA,gBAAS,EAC/B,KAAK,EACL,IAAA,yBAAkB,EAAC,IAAI,GAAG,CAAC,OAAO,CAAC,CAAC,EACpC,EAAE,MAAM,EAAE,CACb,CAAC;QACF,OAAO,OAA+B,CAAC;IAC3C,CAAC;IAQO,+BAA+B,CACnC,OAAiC,EACjC,cAAyB,EACzB,aAAwB;QAExB,MAAM,EAAE,UAAU,EAAE,SAAS,EAAE,GAAG,OAAO,CAAC;QAC1C,MAAM,MAAM,GAAG,UAAU,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;QAExC,IAAI,IAAI,CAAC,qBAAqB,CAAC,cAAc,EAAE,MAAM,CAAC,EAAE,CAAC;YACrD,MAAM,IAAI,8BAAqB,CAC3B,EAAE,IAAI,EAAE,yBAAyB,EAAE,MAAM,EAAE,GAAG,EAAE,EAChD,EAAE,KAAK,EAAE,cAAc,EAAE,CAC5B,CAAC;QACN,CAAC;QAED,IAAI,IAAI,CAAC,oBAAoB,CAAC,aAAa,EAAE,SAAS,CAAC,EAAE,CAAC;YACtD,MAAM,IAAI,8BAAqB,CAC3B,EAAE,IAAI,EAAE,oBAAoB,EAAE,MAAM,EAAE,GAAG,EAAE,EAC3C,EAAE,KAAK,EAAE,aAAa,EAAE,CAC3B,CAAC;QACN,CAAC;IACL,CAAC;IAEO,qBAAqB,CAAC,cAAoC,EAAE,UAAoB;QACpF,OAAO,CAAC,CAAC,CAAC,cAAc,IAAI,cAAc,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,cAAc,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IACzH,CAAC;IAEO,oBAAoB,CAAC,aAAmC,EAAE,SAAmB;QACjF,OAAO,CAAC,CAAC,CAAC,aAAa,IAAI,aAAa,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,SAAS,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClH,CAAC;CACJ,CAAA;AA1FY,gDAAkB;6BAAlB,kBAAkB;IAF9B,IAAA,eAAM,GAAE;IACR,IAAA,mBAAU,GAAE;IAGJ,WAAA,IAAA,eAAM,EAAC,sBAAa,CAAC,CAAA;qCACU,sBAAa;GAHxC,kBAAkB,CA0F9B"}
+{"version":3,"file":"verifier.js","sourceRoot":"","sources":["../../token/verifier.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;AAAA,2CAA2E;AAC3E,2CAA+C;AAC/C,+BAAqD;AAIxC,QAAA,uBAAuB,GAAG,MAAM,CAAC,GAAG,CAAC,oBAAoB,CAAC,CAAC;AAGjE,IAAM,kBAAkB,GAAxB,MAAM,kBAAkB;IAC3B,YAEqB,aAA4B;QAA5B,kBAAa,GAAb,aAAa,CAAe;IAC7C,CAAC;IAYE,KAAK,CAAC,WAAW,CAAC,KAAa,EAAE,cAAyB,EAAE,aAAwB;QACvF,IAAI,CAAC,KAAK;YAAE,MAAM,IAAI,8BAAqB,CAAC,oBAAoB,CAAC,CAAC;QAElE,MAAM,OAAO,GAAG,IAAI,CAAC,aAAa,CAAC,GAAG,CAAS,gBAAgB,CAAC,IAAI,iCAAiC,CAAC;QACtG,MAAM,MAAM,GAAG,IAAI,CAAC,aAAa,CAAC,GAAG,CAAS,mBAAmB,CAAC,CAAC;QAEnE,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,IAAA,gBAAS,EAC/B,KAAK,EAAE,IAAA,yBAAkB,EAAC,IAAI,GAAG,CAAC,OAAO,CAAC,CAAC,EAC3C,EAAE,MAAM,EAAE,CACb,CAAC;QAEF,MAAM,YAAY,GAAG,OAAmC,CAAC;QAEzD,IAAI,cAAc,IAAI,aAAa,EAAE,CAAC;YAClC,IAAI,CAAC,+BAA+B,CAChC,YAAY,EAAE,cAAc,EAAE,aAAa,CAAC,CAAC;QACrD,CAAC;QAED,OAAO,YAAY,CAAC;IACxB,CAAC;IAOM,KAAK,CAAC,aAAa,CAAC,KAAa;QACpC,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,cAAc,IAAI,iCAAiC,CAAC;QAChF,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAC;QAE7C,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,IAAA,gBAAS,EAC/B,KAAK,EACL,IAAA,yBAAkB,EAAC,IAAI,GAAG,CAAC,OAAO,CAAC,CAAC,EACpC,EAAE,MAAM,EAAE,CACb,CAAC;QACF,OAAO,OAA+B,CAAC;IAC3C,CAAC;IAQO,+BAA+B,CACnC,OAAiC,EACjC,cAAyB,EACzB,aAAwB;QAExB,MAAM,EAAE,UAAU,EAAE,SAAS,EAAE,GAAG,OAAO,CAAC;QAC1C,MAAM,MAAM,GAAG,UAAU,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;QAExC,IAAI,IAAI,CAAC,qBAAqB,CAAC,cAAc,EAAE,MAAM,CAAC,EAAE,CAAC;YACrD,MAAM,IAAI,8BAAqB,CAC3B,EAAE,IAAI,EAAE,yBAAyB,EAAE,MAAM,EAAE,GAAG,EAAE,EAChD,EAAE,KAAK,EAAE,cAAc,EAAE,CAC5B,CAAC;QACN,CAAC;QAED,IAAI,IAAI,CAAC,oBAAoB,CAAC,aAAa,EAAE,SAAS,CAAC,EAAE,CAAC;YACtD,MAAM,IAAI,8BAAqB,CAC3B,EAAE,IAAI,EAAE,oBAAoB,EAAE,MAAM,EAAE,GAAG,EAAE,EAC3C,EAAE,KAAK,EAAE,aAAa,EAAE,CAC3B,CAAC;QACN,CAAC;IACL,CAAC;IAEO,qBAAqB,CAAC,cAAoC,EAAE,UAAoB;QACpF,OAAO,CAAC,CAAC,CAAC,cAAc,IAAI,cAAc,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,cAAc,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IACzH,CAAC;IAEO,oBAAoB,CAAC,aAAmC,EAAE,SAAmB;QACjF,OAAO,CAAC,CAAC,CAAC,aAAa,IAAI,aAAa,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,SAAS,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClH,CAAC;CACJ,CAAA;AA1FY,gDAAkB;6BAAlB,kBAAkB;IAD9B,IAAA,mBAAU,GAAE;IAGJ,WAAA,IAAA,eAAM,EAAC,sBAAa,CAAC,CAAA;qCACU,sBAAa;GAHxC,kBAAkB,CA0F9B"}