@qelos/plugin-play 3.7.3 → 3.7.7

package/dist/app.d.ts

@@ -0,0 +1,16 @@
+import { FastifyInstance } from 'fastify';
+import { RouteHandlerMethod } from 'fastify/types/route';
+import { ManifestOptions } from './manifest';
+import { ConfigOptions } from './config';
+export declare function start(options?: {
+    manifest?: ManifestOptions;
+    config?: ConfigOptions;
+}): Promise<void>;
+export declare function configure(manifestOptions: ManifestOptions, appConfig: ConfigOptions): void;
+export declare function getApp(): FastifyInstance;
+export declare function registerToHook(hook: {
+    source?: string;
+    kind?: string;
+    eventName?: string;
+    path?: string;
+}, handler: RouteHandlerMethod): void;

package/dist/app.js

@@ -0,0 +1,170 @@
+import { existsSync, readFileSync } from 'node:fs';
+import { join } from 'node:path';
+import fastify from 'fastify';
+import cookie from '@fastify/cookie';
+import { manifest } from './manifest';
+import config, { setConfig } from './config';
+import { getCallbackRoute, getFrontendAuthorizationRoute, getFrontendUnAuthorizationRoute, getRefreshTokenRoute, getRegisterRoute, verifyAccessToken, verifyCookieToken } from './authentication';
+import handlers from './handlers';
+import { endpoints, internalEndpoints } from './endpoints';
+import { LifecycleEvent, trigger } from './lifecycle';
+const hooks = new Set();
+let app;
+let internalApp;
+export async function start(options) {
+    configure(options?.manifest || {}, options?.config || {});
+    const app = getApp();
+    trigger(LifecycleEvent.appMounted, { app });
+    if (internalEndpoints.size) {
+        createInternalApp();
+    }
+    try {
+        console.log('start application for environment: ', config.dev ? 'development' : 'production');
+        await app.listen({ port: Number(config.port), host: config.host });
+        if (internalApp) {
+            console.log(`Internal Application listening on: ${config.internalHost}:${config.internalPort}`);
+            await internalApp.listen({ port: Number(config.internalPort), host: config.internalHost });
+        }
+    }
+    catch (err) {
+        app.log.error(err);
+        process.exit(1);
+    }
+}
+export function configure(manifestOptions, appConfig) {
+    trigger(LifecycleEvent.beforeConfigure, { manifest, config, manifestOptions, configOptions: appConfig });
+    Object.assign(manifest, manifestOptions);
+    setConfig(appConfig);
+    if (config.dev && !manifest.appUrl) {
+        manifest.appUrl = 'https://' + config.host + ':' + config.port;
+    }
+    manifest.proxyUrl = new URL(manifest.proxyPath, manifest.appUrl).href;
+    trigger(LifecycleEvent.configured, { manifest, config });
+}
+export function getApp() {
+    return app || createApp();
+}
+export function registerToHook(hook, handler) {
+    hook.path = hook.path || btoa(JSON.stringify(hook));
+    const subscribedEvent = {
+        source: hook.source || '*',
+        kind: hook.kind || '*',
+        eventName: hook.eventName || '*',
+    };
+    hooks.add({
+        subscribedEvent,
+        path: hook.path,
+        handler
+    });
+    manifest.subscribedEvents.push(subscribedEvent);
+}
+function createApp() {
+    const fastifyOptions = {
+        logger: !!config.dev,
+        https: getHttps()
+    };
+    trigger(LifecycleEvent.beforeCreate, { fastifyOptions, config, manifest });
+    app = fastify(fastifyOptions);
+    trigger(LifecycleEvent.beforeMount, { app, fastifyOptions, config, manifest });
+    app.addContentTypeParser('application/json', { parseAs: 'string' }, parseJsonRequest);
+    app.route(getRefreshTokenRoute());
+    app.route(getRegisterRoute());
+    app.route(getCallbackRoute());
+    playManifest();
+    playHooks();
+    playEndpoints();
+    playFrontend();
+    if (!(config.qelosUrl || handlers.refreshToken.length)) {
+        throw new Error('you must provide either a refresh token handler or Qelos application credentials');
+    }
+    trigger(LifecycleEvent.mounted, { app, config, manifest });
+    return app;
+}
+function createInternalApp() {
+    const fastifyOptions = {
+        logger: !!config.dev,
+    };
+    trigger(LifecycleEvent.beforeInternalAppCreate, { fastifyOptions });
+    internalApp = fastify(fastifyOptions);
+    internalApp.addContentTypeParser('application/json', { parseAs: 'string' }, parseJsonRequest);
+    internalEndpoints.forEach((routeOptions) => {
+        internalApp.route(routeOptions);
+    });
+    trigger(LifecycleEvent.internalAppMounted, { app: internalApp });
+    return internalApp;
+}
+function playManifest() {
+    getApp().route({
+        method: 'GET',
+        url: manifest.manifestUrl,
+        handler({ headers, body }, res) {
+            setImmediate(() => handlers.manifest.forEach(cb => cb({ headers, body })));
+            res.header('Access-Control-Allow-Origin', '*');
+            return manifest;
+        }
+    });
+    console.log('manifest URL: ' + new URL(manifest.manifestUrl, manifest.appUrl).href);
+}
+function playHooks() {
+    hooks.forEach(hook => {
+        const routePath = join('/api/hooks', hook.path);
+        hook.subscribedEvent.hookUrl = new URL(routePath, manifest.appUrl).href;
+        getApp().route({
+            method: 'POST',
+            url: routePath,
+            preHandler: verifyAccessToken,
+            handler: hook.handler
+        });
+        console.log('subscribed event configured: ', routePath, hook.subscribedEvent);
+    });
+}
+function playFrontend() {
+    if (existsSync(config.staticFrontend.root)) {
+        getApp().register(require('@fastify/static'), config.staticFrontend);
+    }
+}
+function playEndpoints() {
+    if (!endpoints.size) {
+        return;
+    }
+    getApp().register(cookie, {
+        parseOptions: {
+            maxAge: 1000 * 60 * 30,
+            secure: true,
+            httpOnly: true,
+            sameSite: config.dev ? 'none' : (process.env.SAME_SITE_COOKIES || true)
+        }
+    });
+    getApp().route(getFrontendAuthorizationRoute());
+    getApp().route(getFrontendUnAuthorizationRoute());
+    endpoints.forEach((routeOptions) => {
+        const route = {
+            ...routeOptions,
+        };
+        if (routeOptions.verifyToken) {
+            route.preHandler = routeOptions.url.startsWith(manifest.proxyPath) ? verifyAccessToken : verifyCookieToken;
+        }
+        getApp().route(route);
+    });
+}
+function getHttps() {
+    const certPath = join(process.cwd(), 'cert/cert.pem');
+    if (existsSync(certPath)) {
+        return {
+            cert: readFileSync(join(process.cwd(), 'cert/cert.pem')).toString(),
+            key: readFileSync(join(process.cwd(), 'cert/key.pem')).toString(),
+        };
+    }
+    return null;
+}
+function parseJsonRequest(req, body, done) {
+    try {
+        const bodyStr = body.toString();
+        done(null, bodyStr ? JSON.parse(bodyStr) : {});
+    }
+    catch (err) {
+        err.statusCode = 400;
+        done(err, undefined);
+    }
+}
+//# sourceMappingURL=app.js.map

package/dist/app.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"app.js","sourceRoot":"","sources":["../src/app.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACnD,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,OAA4B,MAAM,SAAS,CAAC;AAGnD,OAAO,MAAM,MAAM,iBAAiB,CAAC;AACrC,OAAO,EAAE,QAAQ,EAAmB,MAAM,YAAY,CAAC;AACvD,OAAO,MAAM,EAAE,EAAiB,SAAS,EAAE,MAAM,UAAU,CAAC;AAC5D,OAAO,EACL,gBAAgB,EAChB,6BAA6B,EAC7B,+BAA+B,EAC/B,oBAAoB,EACpB,gBAAgB,EAChB,iBAAiB,EACjB,iBAAiB,EAClB,MAAM,kBAAkB,CAAC;AAC1B,OAAO,QAAQ,MAAM,YAAY,CAAC;AAClC,OAAO,EAAE,SAAS,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AAC3D,OAAO,EAAE,cAAc,EAAE,OAAO,EAAE,MAAM,aAAa,CAAC;AAEtD,MAAM,KAAK,GAAG,IAAI,GAAG,EAAsC,CAAC;AAE5D,IAAI,GAAoB,CAAC;AACzB,IAAI,WAA4B,CAAC;AAEjC,MAAM,CAAC,KAAK,UAAU,KAAK,CAAC,OAAgE;IAC1F,SAAS,CAAC,OAAO,EAAE,QAAQ,IAAI,EAAE,EAAE,OAAO,EAAE,MAAM,IAAI,EAAE,CAAC,CAAC;IAE1D,MAAM,GAAG,GAAG,MAAM,EAAE,CAAC;IACrB,OAAO,CAAC,cAAc,CAAC,UAAU,EAAE,EAAE,GAAG,EAAE,CAAC,CAAA;IAE3C,IAAI,iBAAiB,CAAC,IAAI,EAAE;QAC1B,iBAAiB,EAAE,CAAC;KACrB;IACD,IAAI;QACF,OAAO,CAAC,GAAG,CAAC,qCAAqC,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC;QAC9F,MAAM,GAAG,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;QAEnE,IAAI,WAAW,EAAE;YACf,OAAO,CAAC,GAAG,CAAC,sCAAsC,MAAM,CAAC,YAAY,IAAI,MAAM,CAAC,YAAY,EAAE,CAAC,CAAC;YAChG,MAAM,WAAW,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC,YAAY,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,YAAY,EAAE,CAAC,CAAC;SAC5F;KAEF;IAAC,OAAO,GAAG,EAAE;QACZ,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QACnB,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;KACjB;AACH,CAAC;AAED,MAAM,UAAU,SAAS,CAAC,eAAgC,EAAE,SAAwB;IAClF,OAAO,CAAC,cAAc,CAAC,eAAe,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,eAAe,EAAE,aAAa,EAAE,SAAS,EAAE,CAAC,CAAC;IAEzG,MAAM,CAAC,MAAM,CAAC,QAAQ,EAAE,eAAe,CAAC,CAAC;IACzC,SAAS,CAAC,SAAS,CAAC,CAAC;IAErB,IAAI,MAAM,CAAC,GAAG,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE;QAClC,QAAQ,CAAC,MAAM,GAAG,UAAU,GAAG,MAAM,CAAC,IAAI,GAAG,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC;KAChE;IACD,QAAQ,CAAC,QAAQ,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,SAAS,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC;IAEtE,OAAO,CAAC,cAAc,CAAC,UAAU,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC,CAAA;AAC1D,CAAC;AAED,MAAM,UAAU,MAAM;IACpB,OAAO,GAAG,IAAI,SAAS,EAAE,CAAC;AAC5B,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,IAK9B,EAAE,OAA2B;IAC5B,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC;IACpD,MAAM,eAAe,GAAG;QACtB,MAAM,EAAE,IAAI,CAAC,MAAM,IAAI,GAAG;QAC1B,IAAI,EAAE,IAAI,CAAC,IAAI,IAAI,GAAG;QACtB,SAAS,EAAE,IAAI,CAAC,SAAS,IAAI,GAAG;KACjC,CAAC;IACF,KAAK,CAAC,GAAG,CAAC;QACR,eAAe;QACf,IAAI,EAAE,IAAI,CAAC,IAAI;QACf,OAAO;KACR,CAAC,CAAC;IACH,QAAQ,CAAC,gBAAgB,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;AAClD,CAAC;AAED,SAAS,SAAS;IAChB,MAAM,cAAc,GAAG;QACrB,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,GAAG;QACpB,KAAK,EAAE,QAAQ,EAAE;KAClB,CAAC;IACF,OAAO,CAAC,cAAc,CAAC,YAAY,EAAE,EAAE,cAAc,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,CAAC;IAC3E,GAAG,GAAG,OAAO,CAAC,cAAc,CAAC,CAAC;IAC9B,OAAO,CAAC,cAAc,CAAC,WAAW,EAAE,EAAE,GAAG,EAAE,cAAc,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,CAAC;IAE/E,GAAG,CAAC,oBAAoB,CAAC,kBAAkB,EAAE,EAAE,OAAO,EAAE,QAAQ,EAAE,EAAE,gBAAgB,CAAC,CAAC;IAEtF,GAAG,CAAC,KAAK,CAAC,oBAAoB,EAAE,CAAC,CAAC;IAClC,GAAG,CAAC,KAAK,CAAC,gBAAgB,EAAE,CAAC,CAAC;IAC9B,GAAG,CAAC,KAAK,CAAC,gBAAgB,EAAE,CAAC,CAAC;IAC9B,YAAY,EAAE,CAAC;IACf,SAAS,EAAE,CAAC;IACZ,aAAa,EAAE,CAAC;IAChB,YAAY,EAAE,CAAC;IAEf,IAAI,CAAC,CAAC,MAAM,CAAC,QAAQ,IAAI,QAAQ,CAAC,YAAY,CAAC,MAAM,CAAC,EAAE;QACtD,MAAM,IAAI,KAAK,CAAC,kFAAkF,CAAC,CAAC;KACrG;IAED,OAAO,CAAC,cAAc,CAAC,OAAO,EAAE,EAAE,GAAG,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,CAAA;IAE1D,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,iBAAiB;IACxB,MAAM,cAAc,GAAG;QACrB,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,GAAG;KACrB,CAAC;IACF,OAAO,CAAC,cAAc,CAAC,uBAAuB,EAAE,EAAE,cAAc,EAAE,CAAC,CAAA;IAEnE,WAAW,GAAG,OAAO,CAAC,cAAc,CAAC,CAAC;IACtC,WAAW,CAAC,oBAAoB,CAAC,kBAAkB,EAAE,EAAE,OAAO,EAAE,QAAQ,EAAE,EAAE,gBAAgB,CAAC,CAAC;IAE9F,iBAAiB,CAAC,OAAO,CAAC,CAAC,YAAY,EAAE,EAAE;QACzC,WAAW,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;IAClC,CAAC,CAAC,CAAC;IAEH,OAAO,CAAC,cAAc,CAAC,kBAAkB,EAAE,EAAE,GAAG,EAAE,WAAW,EAAE,CAAC,CAAA;IAEhE,OAAO,WAAW,CAAC;AACrB,CAAC;AAED,SAAS,YAAY;IACnB,MAAM,EAAE,CAAC,KAAK,CAAC;QACb,MAAM,EAAE,KAAK;QACb,GAAG,EAAE,QAAQ,CAAC,WAAW;QACzB,OAAO,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE,GAAG;YAC5B,YAAY,CAAC,GAAG,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;YAC3E,GAAG,CAAC,MAAM,CAAC,6BAA6B,EAAE,GAAG,CAAC,CAAC;YAC/C,OAAO,QAAQ,CAAC;QAClB,CAAC;KACF,CAAC,CAAA;IACF,OAAO,CAAC,GAAG,CAAC,gBAAgB,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,WAAW,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAA;AACrF,CAAC;AAED,SAAS,SAAS;IAChB,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE;QACnB,MAAM,SAAS,GAAG,IAAI,CAAC,YAAY,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;QAChD,IAAI,CAAC,eAAe,CAAC,OAAO,GAAG,IAAI,GAAG,CAAC,SAAS,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC;QACxE,MAAM,EAAE,CAAC,KAAK,CAAC;YACb,MAAM,EAAE,MAAM;YACd,GAAG,EAAE,SAAS;YACd,UAAU,EAAE,iBAAiB;YAC7B,OAAO,EAAE,IAAI,CAAC,OAAO;SACtB,CAAC,CAAA;QACF,OAAO,CAAC,GAAG,CAAC,+BAA+B,EAAE,SAAS,EAAE,IAAI,CAAC,eAAe,CAAC,CAAC;IAChF,CAAC,CAAC,CAAA;AACJ,CAAC;AAED,SAAS,YAAY;IACnB,IAAI,UAAU,CAAC,MAAM,CAAC,cAAc,CAAC,IAAI,CAAC,EAAE;QAC1C,MAAM,EAAE,CAAC,QAAQ,CAAC,OAAO,CAAC,iBAAiB,CAAC,EAAE,MAAM,CAAC,cAAc,CAAC,CAAC;KACtE;AACH,CAAC;AAED,SAAS,aAAa;IACpB,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE;QACnB,OAAO;KACR;IACD,MAAM,EAAE,CAAC,QAAQ,CAAC,MAAM,EAAE;QACxB,YAAY,EAAE;YACZ,MAAM,EAAE,IAAI,GAAG,EAAE,GAAG,EAAE;YACtB,MAAM,EAAE,IAAI;YACZ,QAAQ,EAAE,IAAI;YACd,QAAQ,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,iBAAiB,IAAI,IAAI,CAAC;SACxE;KACsB,CAAC,CAAC;IAC3B,MAAM,EAAE,CAAC,KAAK,CAAC,6BAA6B,EAAE,CAAC,CAAC;IAChD,MAAM,EAAE,CAAC,KAAK,CAAC,+BAA+B,EAAE,CAAC,CAAC;IAClD,SAAS,CAAC,OAAO,CAAC,CAAC,YAAY,EAAE,EAAE;QACjC,MAAM,KAAK,GAAG;YACZ,GAAG,YAAY;SAChB,CAAC;QACF,IAAI,YAAY,CAAC,WAAW,EAAE;YAC5B,KAAK,CAAC,UAAU,GAAG,YAAY,CAAC,GAAG,CAAC,UAAU,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC,iBAAiB,CAAA;SAC3G;QACD,MAAM,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IACxB,CAAC,CAAC,CAAA;AACJ,CAAC;AAED,SAAS,QAAQ;IACf,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,eAAe,CAAC,CAAC;IACtD,IAAI,UAAU,CAAC,QAAQ,CAAC,EAAE;QACxB,OAAO;YACL,IAAI,EAAE,YAAY,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,eAAe,CAAC,CAAC,CAAC,QAAQ,EAAE;YACnE,GAAG,EAAE,YAAY,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,cAAc,CAAC,CAAC,CAAC,QAAQ,EAAE;SAClE,CAAA;KACF;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,gBAAgB,CAAC,GAAG,EAAE,IAAI,EAAE,IAAI;IACvC,IAAI;QACF,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,EAAY,CAAC;QAC1C,IAAI,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAA;KAC/C;IAAC,OAAO,GAAG,EAAE;QACZ,GAAG,CAAC,UAAU,GAAG,GAAG,CAAA;QACpB,IAAI,CAAC,GAAG,EAAE,SAAS,CAAC,CAAA;KACrB;AACH,CAAC"}

package/dist/authentication.d.ts

@@ -0,0 +1,10 @@
+import { RouteOptions } from 'fastify/types/route';
+import { FastifyRequest } from 'fastify/types/request';
+import { FastifyReply } from 'fastify/types/reply';
+export declare function verifyAccessToken(req: FastifyRequest, reply: FastifyReply): Promise<void>;
+export declare function verifyCookieToken(req: FastifyRequest): Promise<void>;
+export declare function getRefreshTokenRoute(): RouteOptions;
+export declare function getRegisterRoute(): RouteOptions;
+export declare function getCallbackRoute(): RouteOptions;
+export declare function getFrontendAuthorizationRoute(): RouteOptions;
+export declare function getFrontendUnAuthorizationRoute(): RouteOptions;

package/dist/authentication.js

@@ -0,0 +1,380 @@
+import jwt from 'jsonwebtoken';
+import manifest from './manifest';
+import handlers, { onCallback, onFrontendAuthorization, onNewTenant, onRefreshToken } from './handlers';
+import config from './config';
+import { authenticate, getSdk, getSdkForUrl } from './sdk';
+import { ResponseError } from './response-error';
+import logger from './logger';
+import { atob } from 'buffer';
+import { cacheManager } from './cache-manager';
+const notAuthorized = { message: 'you are not authorized' };
+function getHostname(fullUrl) {
+    if (!fullUrl.startsWith('http')) {
+        fullUrl = 'https://' + fullUrl;
+    }
+    const url = new URL(fullUrl);
+    return url.hostname;
+}
+export async function verifyAccessToken(req, reply) {
+    const { authorization } = req.headers;
+    const token = authorization?.split(' ')[1];
+    if (!token) {
+        throw new Error('authorization token was not provided');
+    }
+    try {
+        req.tenantPayload = jwt.verify(token, config.accessTokenSecret);
+        req.user = req.headers.user ? JSON.parse(req.headers.user) : null;
+    }
+    catch (err) {
+        logger.error('error in verify access token', err);
+        reply.statusCode = 407;
+        reply.header('x-q-auth', 'unauthorized');
+        throw new Error('authorization token was not valid');
+    }
+}
+export async function verifyCookieToken(req) {
+    const { code } = req.headers;
+    if (!code) {
+        throw new Error('authorization code was not provided');
+    }
+    const token = req.cookies?.['token_' + code];
+    if (!token) {
+        throw new Error('user is not authorized');
+    }
+    try {
+        const data = jwt.verify(token, config.accessTokenSecret);
+        req.tenantPayload = data.tenant;
+        req.user = data.user;
+    }
+    catch {
+        throw new Error('authorization token was not valid');
+    }
+}
+export function getRefreshTokenRoute() {
+    const usersSdk = getSdk().users;
+    if (config.qelosUrl) {
+        onRefreshToken(async ({ sub, identifier = '' }) => {
+            const user = await usersSdk.getUser(sub);
+            if (identifier.toString() !== user.internalMetadata?.tokenIdentifier) {
+                throw new ResponseError({ message: 'user is not verified on Qelos BaaS', sub, user, identifier });
+            }
+            const newPayload = {
+                sub,
+                identifier: (Date.now() + Math.random()).toString().substring(0, 10)
+            };
+            await usersSdk.update(sub, { internalMetadata: { tokenIdentifier: newPayload.identifier } });
+            return { payload: newPayload };
+        });
+    }
+    return {
+        method: 'POST',
+        url: manifest.authAcquire.refreshTokenUrl,
+        handler: async (request, reply) => {
+            const expectedRefreshToken = request.headers['authorization']?.split(' ')[1];
+            let payload;
+            try {
+                if (!expectedRefreshToken || expectedRefreshToken === 'undefined') {
+                    throw new ResponseError('expected refresh token is empty');
+                }
+                payload = jwt.verify(expectedRefreshToken, config.refreshTokenSecret);
+                if (handlers.refreshToken.length) {
+                    for (let handler of handlers.refreshToken) {
+                        const result = await handler(payload, request);
+                        if (result?.payload) {
+                            return {
+                                [manifest.authAcquire.refreshTokenKey]: jwt.sign(result.payload, config.refreshTokenSecret, { expiresIn: '90d' }),
+                                [manifest.authAcquire.accessTokenKey]: jwt.sign(result.payload, config.accessTokenSecret, { expiresIn: '1h' }),
+                            };
+                        }
+                    }
+                }
+            }
+            catch (err) {
+                if (err instanceof ResponseError) {
+                    logger.error('error in callback', err);
+                    reply.statusCode = 401;
+                    return err.responseMessage;
+                }
+            }
+            reply.statusCode = 401;
+            return notAuthorized;
+        }
+    };
+}
+export function getRegisterRoute() {
+    const sdk = getSdk();
+    const usersSdk = sdk.users;
+    if (config.allowedTenants?.length) {
+        onNewTenant(async ({ appUrl }) => {
+            const hostname = getHostname(appUrl);
+            if (!config.allowedTenants.includes(hostname)) {
+                throw new ResponseError('your tenant is not allowed for this plugin');
+            }
+        });
+    }
+    if (config.qelosUrl) {
+        onNewTenant(async ({ username, password, appUrl }) => {
+            const tenantSdk = getSdkForUrl(appUrl);
+            const emailSplit = username.split('@');
+            if (emailSplit.length === 2 && getHostname(appUrl) !== emailSplit[1].split(':')[0]) {
+                throw new ResponseError('email must be provided from the same app url: ' + appUrl);
+            }
+            let currentAuthPayload;
+            try {
+                // email will be: {pluginId}.{tenantId}@${tenantHostname}
+                const { payload } = await tenantSdk.authentication.oAuthSignin({ username, password });
+                if (!payload.user?.roles?.includes('plugin')) {
+                    throw new ResponseError('should retrieve a plugin user to app: ' + appUrl);
+                }
+                currentAuthPayload = payload;
+            }
+            catch (err) {
+                logger.error('failure during login to qelos app', { username, appUrl, err });
+                if (err instanceof ResponseError) {
+                    throw err;
+                }
+                throw new ResponseError('failed to login to qelos tenant: ' + appUrl);
+            }
+            const newPayload = {
+                sub: '',
+                identifier: (Date.now() + Math.random()).toString().substring(0, 10)
+            };
+            let user;
+            try {
+                const [existingUser] = await usersSdk.getList({ username, exact: true });
+                user = existingUser;
+            }
+            catch (e) {
+                if (e?.message === 'could not able to refresh token') {
+                    await authenticate();
+                    const [existingUser] = await usersSdk.getList({ username, exact: true });
+                    user = existingUser;
+                }
+            }
+            if (user) {
+                await usersSdk.update(user._id, {
+                    firstName: appUrl,
+                    lastName: 'qelos-player-app',
+                    username,
+                    password,
+                    internalMetadata: { tokenIdentifier: newPayload.identifier }
+                });
+            }
+            else {
+                user = await usersSdk.create({
+                    firstName: appUrl,
+                    lastName: 'qelos-player-app',
+                    username,
+                    password,
+                    roles: ['user', 'qelos'],
+                    internalMetadata: { tokenIdentifier: newPayload.identifier }
+                });
+            }
+            await usersSdk.setEncryptedData(user._id, config.userPayloadSecret, {
+                appUrl,
+                username,
+                password,
+                currentAuthPayload
+            });
+            newPayload.sub = user._id;
+            return { payload: newPayload };
+        });
+    }
+    function checkMissingCredentialsError({ username, password, appUrl }) {
+        if (username && password && appUrl) {
+            return;
+        }
+        const missing = [];
+        if (username) {
+            missing.push('username');
+        }
+        if (password) {
+            missing.push('password');
+        }
+        if (appUrl) {
+            missing.push('appUrl');
+        }
+        throw new ResponseError('missing credentials: ' + missing.join(', '));
+    }
+    return {
+        method: 'POST',
+        url: manifest.registerUrl,
+        handler: async (request, reply) => {
+            try {
+                checkMissingCredentialsError(request.body || {});
+                if (handlers.newTenant.length) {
+                    for (let handler of handlers.newTenant) {
+                        const result = await handler(request.body, request);
+                        if (result?.payload) {
+                            return {
+                                [manifest.authAcquire.refreshTokenKey]: jwt.sign(result.payload, config.refreshTokenSecret, { expiresIn: '90d' }),
+                                [manifest.authAcquire.accessTokenKey]: jwt.sign(result.payload, config.accessTokenSecret, { expiresIn: '1h' }),
+                            };
+                        }
+                    }
+                }
+            }
+            catch (err) {
+                if (err instanceof ResponseError) {
+                    reply.statusCode = err.status || 401;
+                    return { message: err.responseMessage };
+                }
+                else {
+                    logger.error('internal register error', err);
+                }
+            }
+            reply.statusCode = 401;
+            return notAuthorized;
+        }
+    };
+}
+export function getCallbackRoute() {
+    if (config.qelosUrl) {
+        onCallback(async ({ user, returnUrl }, request) => {
+            const code = Math.floor(Math.random() * 1000).toString();
+            // set the code on cache manager
+            const username = user?.username || 'anonymous';
+            await cacheManager.setItem(`${returnUrl}:${request.tenantPayload.sub}:${username}`, JSON.stringify({
+                code,
+                user,
+                created: Date.now(),
+                tenant: request.tenantPayload
+            }));
+            return code;
+        });
+    }
+    return {
+        method: 'GET',
+        url: manifest.callbackUrl,
+        preHandler: verifyAccessToken,
+        handler: async (request, reply) => {
+            const queryParams = request.query || {};
+            try {
+                const returnUrl = new URL(atob(queryParams.returnUrl));
+                const user = request.headers.user ? JSON.parse(request.headers.user) : undefined;
+                request.user = user;
+                for (let handler of handlers.callback) {
+                    const code = await handler({ user, returnUrl: returnUrl.href }, request);
+                    if (code && typeof code === 'string') {
+                        const token = jwt.sign({
+                            user,
+                            tenant: request.tenantPayload
+                        }, config.accessTokenSecret, { expiresIn: '30min' });
+                        returnUrl.searchParams.append('code', code);
+                        returnUrl.searchParams.append('token', token);
+                        return {
+                            code,
+                            token,
+                            returnUrl: returnUrl.href
+                        };
+                    }
+                }
+            }
+            catch (err) {
+                logger.log('error in callback', err);
+            }
+            reply.statusCode = 401;
+            return notAuthorized;
+        }
+    };
+}
+export function getFrontendAuthorizationRoute() {
+    let standaloneAuthorize = async () => {
+        return;
+    };
+    if (config.qelosUrl) {
+        onFrontendAuthorization(async ({ returnUrl, user, tenant }) => {
+            try {
+                const data = JSON.parse(await cacheManager.getItem(`${returnUrl}:${tenant.sub}:${user.email}`));
+                if (data) {
+                    return {
+                        code: data.code,
+                        token: jwt.sign({ code: data.code, user, tenant }, config.accessTokenSecret, { expiresIn: '30min' }),
+                    };
+                }
+            }
+            catch {
+                //
+            }
+            return;
+        });
+        if (config.dev) {
+            standaloneAuthorize = async (reply) => {
+                const user = await getSdk().authentication.getLoggedInUser();
+                const tenant = {
+                    sub: 'test-tenant-' + user._id,
+                    identifier: user.email
+                };
+                reply.setCookie('token_default', jwt.sign({
+                    code: 'default',
+                    user,
+                    tenant
+                }, config.accessTokenSecret, { expiresIn: '30min' }));
+                return {
+                    user,
+                    tenant
+                };
+            };
+        }
+    }
+    return {
+        method: 'POST',
+        url: manifest.authorizeUrl,
+        handler: async (request, reply) => {
+            const { returnUrl, token } = request.body || {};
+            if (returnUrl && token) {
+                try {
+                    const { user, tenant } = jwt.verify(token, config.accessTokenSecret);
+                    try {
+                        Object.keys(request.cookies || {}).forEach(key => {
+                            if (key.startsWith('token_')) {
+                                const payload = jwt.decode(request.cookies[key]);
+                                if (payload && payload.tenant?.identifier === tenant?.identifier) {
+                                    reply.setCookie(key, '', { maxAge: 1 });
+                                }
+                            }
+                        });
+                    }
+                    catch (err) {
+                        logger.error('failed to remove duplicate cookies', err);
+                    }
+                    for (let handler of handlers.frontendAuth) {
+                        const cookieData = await handler({ returnUrl, user, tenant }, request);
+                        if (cookieData && cookieData.code && cookieData.token) {
+                            reply.setCookie('token_' + cookieData.code, cookieData.token);
+                            return {
+                                user,
+                                tenant
+                            };
+                        }
+                    }
+                }
+                catch (err) {
+                    logger.log('error in callback', err);
+                }
+            }
+            const response = await standaloneAuthorize(reply);
+            if (!response) {
+                reply.statusCode = 401;
+                return notAuthorized;
+            }
+            return response;
+        }
+    };
+}
+export function getFrontendUnAuthorizationRoute() {
+    return {
+        method: 'POST',
+        url: manifest.unAuthorizeUrl,
+        preHandler: verifyCookieToken,
+        handler: async (request, reply) => {
+            const code = request.headers.code;
+            const user = request.user;
+            const tenant = request.tenantPayload;
+            reply.setCookie('token_' + code, '', { maxAge: 1 });
+            handlers.frontendUnAuth.forEach((handler) => handler({ user, tenant }));
+            return 'OK';
+        }
+    };
+}
+//# sourceMappingURL=authentication.js.map

package/dist/authentication.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"authentication.js","sourceRoot":"","sources":["../src/authentication.ts"],"names":[],"mappings":"AAAA,OAAO,GAAG,MAAM,cAAc,CAAC;AAG/B,OAAO,QAAQ,MAAM,YAAY,CAAC;AAClC,OAAO,QAAQ,EAAE,EACf,UAAU,EACV,uBAAuB,EACvB,WAAW,EACX,cAAc,EAEf,MAAM,YAAY,CAAC;AACpB,OAAO,MAAM,MAAM,UAAU,CAAC;AAC9B,OAAO,EAAE,YAAY,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,OAAO,CAAC;AAC3D,OAAO,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AACjD,OAAO,MAAM,MAAM,UAAU,CAAC;AAC9B,OAAO,EAAE,IAAI,EAAE,MAAM,QAAQ,CAAC;AAC9B,OAAO,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAC;AAI/C,MAAM,aAAa,GAAG,EAAE,OAAO,EAAE,wBAAwB,EAAE,CAAC;AAE5D,SAAS,WAAW,CAAC,OAAe;IAClC,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE;QAC/B,OAAO,GAAG,UAAU,GAAG,OAAO,CAAC;KAChC;IACD,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,CAAC;IAC7B,OAAO,GAAG,CAAC,QAAQ,CAAC;AACtB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,GAAmB,EAAE,KAAmB;IAC9E,MAAM,EAAE,aAAa,EAAE,GAAG,GAAG,CAAC,OAAO,CAAC;IAEtC,MAAM,KAAK,GAAG,aAAa,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;IAE3C,IAAI,CAAC,KAAK,EAAE;QACV,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;KACzD;IAED,IAAI;QACF,GAAG,CAAC,aAAa,GAAG,GAAG,CAAC,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,iBAAiB,CAAC,CAAC;QAChE,GAAG,CAAC,IAAI,GAAG,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,IAAc,CAAgB,CAAC,CAAC,CAAC,IAAI,CAAC;KAC5F;IAAC,OAAO,GAAG,EAAE;QACZ,MAAM,CAAC,KAAK,CAAC,8BAA8B,EAAE,GAAG,CAAC,CAAC;QAClD,KAAK,CAAC,UAAU,GAAG,GAAG,CAAC;QACvB,KAAK,CAAC,MAAM,CAAC,UAAU,EAAE,cAAc,CAAC,CAAC;QACzC,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC;KACtD;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,GAAmB;IACzD,MAAM,EAAE,IAAI,EAAE,GAAG,GAAG,CAAC,OAAO,CAAC;IAC7B,IAAI,CAAC,IAAI,EAAE;QACT,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAC;KACxD;IACD,MAAM,KAAK,GAAG,GAAG,CAAC,OAAO,EAAE,CAAC,QAAQ,GAAG,IAAI,CAAC,CAAC;IAE7C,IAAI,CAAC,KAAK,EAAE;QACV,MAAM,IAAI,KAAK,CAAC,wBAAwB,CAAC,CAAC;KAC3C;IAED,IAAI;QACF,MAAM,IAAI,GAAG,GAAG,CAAC,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,iBAAiB,CAAC,CAAC;QACzD,GAAG,CAAC,aAAa,GAAG,IAAI,CAAC,MAAM,CAAC;QAChC,GAAG,CAAC,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC;KACtB;IAAC,MAAM;QACN,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC;KACtD;AACH,CAAC;AAED,MAAM,UAAU,oBAAoB;IAElC,MAAM,QAAQ,GAAG,MAAM,EAAE,CAAC,KAAK,CAAC;IAEhC,IAAI,MAAM,CAAC,QAAQ,EAAE;QACnB,cAAc,CAAC,KAAK,EAAE,EAAE,GAAG,EAAE,UAAU,GAAG,EAAE,EAAE,EAAE,EAAE;YAChD,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;YACzC,IAAI,UAAU,CAAC,QAAQ,EAAE,KAAK,IAAI,CAAC,gBAAgB,EAAE,eAAe,EAAE;gBACpE,MAAM,IAAI,aAAa,CAAC,EAAE,OAAO,EAAE,oCAAoC,EAAE,GAAG,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC,CAAA;aAClG;YACD,MAAM,UAAU,GAAoB;gBAClC,GAAG;gBACH,UAAU,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC,SAAS,CAAC,CAAC,EAAE,EAAE,CAAC;aACrE,CAAA;YACD,MAAM,QAAQ,CAAC,MAAM,CAAC,GAAG,EAAE,EAAE,gBAAgB,EAAE,EAAE,eAAe,EAAE,UAAU,CAAC,UAAU,EAAE,EAAE,CAAC,CAAA;YAC5F,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,CAAC;QACjC,CAAC,CAAC,CAAA;KACH;IAED,OAAO;QACL,MAAM,EAAE,MAAM;QACd,GAAG,EAAE,QAAQ,CAAC,WAAW,CAAC,eAAe;QACzC,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE;YAChC,MAAM,oBAAoB,GAAG,OAAO,CAAC,OAAO,CAAC,eAAe,CAAC,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;YAC7E,IAAI,OAAwB,CAAC;YAC7B,IAAI;gBACF,IAAI,CAAC,oBAAoB,IAAI,oBAAoB,KAAK,WAAW,EAAE;oBACjE,MAAM,IAAI,aAAa,CAAC,iCAAiC,CAAC,CAAC;iBAC5D;gBACD,OAAO,GAAG,GAAG,CAAC,MAAM,CAAC,oBAAoB,EAAE,MAAM,CAAC,kBAAkB,CAAC,CAAC;gBACtE,IAAI,QAAQ,CAAC,YAAY,CAAC,MAAM,EAAE;oBAChC,KAAK,IAAI,OAAO,IAAI,QAAQ,CAAC,YAAY,EAAE;wBACzC,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;wBAC/C,IAAI,MAAM,EAAE,OAA0B,EAAE;4BACtC,OAAO;gCACL,CAAC,QAAQ,CAAC,WAAW,CAAC,eAAe,CAAC,EAAE,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,MAAM,CAAC,kBAAkB,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC;gCACjH,CAAC,QAAQ,CAAC,WAAW,CAAC,cAAc,CAAC,EAAE,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,MAAM,CAAC,iBAAiB,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC;6BAC/G,CAAA;yBACF;qBACF;iBACF;aACF;YAAC,OAAO,GAAG,EAAE;gBACZ,IAAI,GAAG,YAAY,aAAa,EAAE;oBAChC,MAAM,CAAC,KAAK,CAAC,mBAAmB,EAAE,GAAG,CAAC,CAAC;oBACvC,KAAK,CAAC,UAAU,GAAG,GAAG,CAAC;oBACvB,OAAO,GAAG,CAAC,eAAe,CAAC;iBAC5B;aACF;YACD,KAAK,CAAC,UAAU,GAAG,GAAG,CAAC;YACvB,OAAO,aAAa,CAAC;QACvB,CAAC;KACF,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,gBAAgB;IAE9B,MAAM,GAAG,GAAG,MAAM,EAAE,CAAC;IACrB,MAAM,QAAQ,GAAG,GAAG,CAAC,KAAK,CAAC;IAE3B,IAAI,MAAM,CAAC,cAAc,EAAE,MAAM,EAAE;QACjC,WAAW,CAAC,KAAK,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE;YAC/B,MAAM,QAAQ,GAAG,WAAW,CAAC,MAAM,CAAC,CAAC;YACrC,IAAI,CAAC,MAAM,CAAC,cAAc,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE;gBAC7C,MAAM,IAAI,aAAa,CAAC,4CAA4C,CAAC,CAAC;aACvE;QACH,CAAC,CAAC,CAAA;KACH;IAED,IAAI,MAAM,CAAC,QAAQ,EAAE;QACnB,WAAW,CAAC,KAAK,EAAE,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE;YACnD,MAAM,SAAS,GAAG,YAAY,CAAC,MAAM,CAAC,CAAA;YACtC,MAAM,UAAU,GAAG,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YACvC,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC,IAAI,WAAW,CAAC,MAAM,CAAC,KAAK,UAAU,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE;gBAClF,MAAM,IAAI,aAAa,CAAC,gDAAgD,GAAG,MAAM,CAAC,CAAC;aACpF;YACD,IAAI,kBAAkB,CAAC;YACvB,IAAI;gBACF,yDAAyD;gBACzD,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,SAAS,CAAC,cAAc,CAAC,WAAW,CAAC,EAAE,QAAQ,EAAE,QAAQ,EAAE,CAAC,CAAC;gBACvF,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,KAAK,EAAE,QAAQ,CAAC,QAAQ,CAAC,EAAE;oBAC5C,MAAM,IAAI,aAAa,CAAC,wCAAwC,GAAG,MAAM,CAAC,CAAC;iBAC5E;gBACD,kBAAkB,GAAG,OAAO,CAAC;aAC9B;YAAC,OAAO,GAAG,EAAE;gBACZ,MAAM,CAAC,KAAK,CAAC,mCAAmC,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAA;gBAC5E,IAAI,GAAG,YAAY,aAAa,EAAE;oBAChC,MAAM,GAAG,CAAC;iBACX;gBACD,MAAM,IAAI,aAAa,CAAC,mCAAmC,GAAG,MAAM,CAAC,CAAC;aACvE;YACD,MAAM,UAAU,GAAoB;gBAClC,GAAG,EAAE,EAAE;gBACP,UAAU,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC,SAAS,CAAC,CAAC,EAAE,EAAE,CAAC;aACrE,CAAA;YACD,IAAI,IAAI,CAAC;YACT,IAAI;gBACF,MAAM,CAAC,YAAY,CAAC,GAAG,MAAM,QAAQ,CAAC,OAAO,CAAC,EAAE,QAAQ,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;gBACzE,IAAI,GAAG,YAAY,CAAC;aACrB;YAAC,OAAO,CAAC,EAAE;gBACV,IAAI,CAAC,EAAE,OAAO,KAAK,iCAAiC,EAAE;oBACpD,MAAM,YAAY,EAAE,CAAC;oBACrB,MAAM,CAAC,YAAY,CAAC,GAAG,MAAM,QAAQ,CAAC,OAAO,CAAC,EAAE,QAAQ,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;oBACzE,IAAI,GAAG,YAAY,CAAC;iBACrB;aACF;YACD,IAAI,IAAI,EAAE;gBACR,MAAM,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE;oBAC9B,SAAS,EAAE,MAAM;oBACjB,QAAQ,EAAE,kBAAkB;oBAC5B,QAAQ;oBACR,QAAQ;oBACR,gBAAgB,EAAE,EAAE,eAAe,EAAE,UAAU,CAAC,UAAU,EAAE;iBAC7D,CAAC,CAAC;aACJ;iBAAM;gBACL,IAAI,GAAG,MAAM,QAAQ,CAAC,MAAM,CAAC;oBAC3B,SAAS,EAAE,MAAM;oBACjB,QAAQ,EAAE,kBAAkB;oBAC5B,QAAQ;oBACR,QAAQ;oBACR,KAAK,EAAE,CAAC,MAAM,EAAE,OAAO,CAAC;oBACxB,gBAAgB,EAAE,EAAE,eAAe,EAAE,UAAU,CAAC,UAAU,EAAE;iBAC7D,CAAC,CAAC;aACJ;YAED,MAAM,QAAQ,CAAC,gBAAgB,CAAC,IAAI,CAAC,GAAG,EAAE,MAAM,CAAC,iBAAiB,EAAE;gBAClE,MAAM;gBACN,QAAQ;gBACR,QAAQ;gBACR,kBAAkB;aACnB,CAAC,CAAA;YACF,UAAU,CAAC,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC;YAC1B,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,CAAC;QACjC,CAAC,CAAC,CAAA;KACH;IAED,SAAS,4BAA4B,CAAC,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,EAAO;QACvE,IAAI,QAAQ,IAAI,QAAQ,IAAI,MAAM,EAAE;YAClC,OAAO;SACR;QACD,MAAM,OAAO,GAAG,EAAE,CAAC;QACnB,IAAI,QAAQ,EAAE;YACZ,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;SAC1B;QACD,IAAI,QAAQ,EAAE;YACZ,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;SAC1B;QACD,IAAI,MAAM,EAAE;YACV,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;SACxB;QACD,MAAM,IAAI,aAAa,CAAC,uBAAuB,GAAG,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAA;IACvE,CAAC;IAED,OAAO;QACL,MAAM,EAAE,MAAM;QACd,GAAG,EAAE,QAAQ,CAAC,WAAW;QACzB,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE;YAChC,IAAI;gBACF,4BAA4B,CAAC,OAAO,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;gBAEjD,IAAI,QAAQ,CAAC,SAAS,CAAC,MAAM,EAAE;oBAC7B,KAAK,IAAI,OAAO,IAAI,QAAQ,CAAC,SAAS,EAAE;wBACtC,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;wBACpD,IAAI,MAAM,EAAE,OAA0B,EAAE;4BACtC,OAAO;gCACL,CAAC,QAAQ,CAAC,WAAW,CAAC,eAAe,CAAC,EAAE,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,MAAM,CAAC,kBAAkB,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC;gCACjH,CAAC,QAAQ,CAAC,WAAW,CAAC,cAAc,CAAC,EAAE,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,MAAM,CAAC,iBAAiB,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC;6BAC/G,CAAA;yBACF;qBACF;iBACF;aACF;YAAC,OAAO,GAAG,EAAE;gBACZ,IAAI,GAAG,YAAY,aAAa,EAAE;oBAChC,KAAK,CAAC,UAAU,GAAG,GAAG,CAAC,MAAM,IAAI,GAAG,CAAC;oBACrC,OAAO,EAAE,OAAO,EAAE,GAAG,CAAC,eAAe,EAAE,CAAC;iBACzC;qBAAM;oBACL,MAAM,CAAC,KAAK,CAAC,yBAAyB,EAAE,GAAG,CAAC,CAAC;iBAC9C;aACF;YACD,KAAK,CAAC,UAAU,GAAG,GAAG,CAAC;YACvB,OAAO,aAAa,CAAC;QACvB,CAAC;KACF,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,gBAAgB;IAC9B,IAAI,MAAM,CAAC,QAAQ,EAAE;QACnB,UAAU,CAAC,KAAK,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,OAAO,EAAE,EAAE;YAChD,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,IAAI,CAAC,CAAC,QAAQ,EAAE,CAAC;YACzD,gCAAgC;YAChC,MAAM,QAAQ,GAAG,IAAI,EAAE,QAAQ,IAAI,WAAW,CAAC;YAC/C,MAAM,YAAY,CAAC,OAAO,CAAC,GAAG,SAAS,IAAI,OAAO,CAAC,aAAa,CAAC,GAAG,IAAI,QAAQ,EAAE,EAAE,IAAI,CAAC,SAAS,CAAC;gBACjG,IAAI;gBACJ,IAAI;gBACJ,OAAO,EAAE,IAAI,CAAC,GAAG,EAAE;gBACnB,MAAM,EAAE,OAAO,CAAC,aAAa;aAC9B,CAAC,CAAC,CAAA;YACH,OAAO,IAAI,CAAC;QACd,CAAC,CAAC,CAAC;KACJ;IAED,OAAO;QACL,MAAM,EAAE,KAAK;QACb,GAAG,EAAE,QAAQ,CAAC,WAAW;QACzB,UAAU,EAAE,iBAAiB;QAC7B,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE;YAChC,MAAM,WAAW,GAAQ,OAAO,CAAC,KAAK,IAAI,EAAE,CAAC;YAE7C,IAAI;gBACF,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,WAAW,CAAC,SAAS,CAAC,CAAC,CAAC;gBACvD,MAAM,IAAI,GAAG,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,IAAc,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;gBAC3F,OAAO,CAAC,IAAI,GAAG,IAAI,CAAC;gBAEpB,KAAK,IAAI,OAAO,IAAI,QAAQ,CAAC,QAAQ,EAAE;oBACrC,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,SAAS,CAAC,IAAI,EAAE,EAAE,OAAO,CAAC,CAAA;oBAExE,IAAI,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE;wBACpC,MAAM,KAAK,GAAG,GAAG,CAAC,IAAI,CAAC;4BACrB,IAAI;4BACJ,MAAM,EAAE,OAAO,CAAC,aAAa;yBAC9B,EAAE,MAAM,CAAC,iBAAiB,EAAE,EAAE,SAAS,EAAE,OAAO,EAAE,CAAC,CAAC;wBACrD,SAAS,CAAC,YAAY,CAAC,MAAM,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;wBAC5C,SAAS,CAAC,YAAY,CAAC,MAAM,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;wBAE9C,OAAO;4BACL,IAAI;4BACJ,KAAK;4BACL,SAAS,EAAE,SAAS,CAAC,IAAI;yBAC1B,CAAA;qBACF;iBACF;aACF;YAAC,OAAO,GAAG,EAAE;gBACZ,MAAM,CAAC,GAAG,CAAC,mBAAmB,EAAE,GAAG,CAAC,CAAC;aACtC;YACD,KAAK,CAAC,UAAU,GAAG,GAAG,CAAC;YACvB,OAAO,aAAa,CAAC;QACvB,CAAC;KACF,CAAA;AACH,CAAC;AAED,MAAM,UAAU,6BAA6B;IAC3C,IAAI,mBAAmB,GAA4B,KAAK,IAAI,EAAE;QAC5D,OAAO;IACT,CAAC,CAAA;IACD,IAAI,MAAM,CAAC,QAAQ,EAAE;QACnB,uBAAuB,CAAC,KAAK,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE;YAC5D,IAAI;gBACF,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,YAAY,CAAC,OAAO,CAAC,GAAG,SAAS,IAAI,MAAM,CAAC,GAAG,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC,CAAA;gBAC/F,IAAI,IAAI,EAAE;oBACR,OAAO;wBACL,IAAI,EAAE,IAAI,CAAC,IAAI;wBACf,KAAK,EAAE,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,MAAM,CAAC,iBAAiB,EAAE,EAAE,SAAS,EAAE,OAAO,EAAE,CAAC;qBACrG,CAAA;iBACF;aACF;YAAC,MAAM;gBACN,EAAE;aACH;YACD,OAAO;QACT,CAAC,CAAC,CAAC;QAEH,IAAI,MAAM,CAAC,GAAG,EAAE;YACd,mBAAmB,GAAG,KAAK,EAAE,KAAK,EAAE,EAAE;gBACpC,MAAM,IAAI,GAAG,MAAM,MAAM,EAAE,CAAC,cAAc,CAAC,eAAe,EAAE,CAAC;gBAC7D,MAAM,MAAM,GAAG;oBACb,GAAG,EAAE,cAAc,GAAG,IAAI,CAAC,GAAG;oBAC9B,UAAU,EAAE,IAAI,CAAC,KAAK;iBACvB,CAAC;gBACF,KAAK,CAAC,SAAS,CAAC,eAAe,EAAE,GAAG,CAAC,IAAI,CAAC;oBACxC,IAAI,EAAE,SAAS;oBACf,IAAI;oBACJ,MAAM;iBACP,EAAE,MAAM,CAAC,iBAAiB,EAAE,EAAE,SAAS,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC;gBACtD,OAAO;oBACL,IAAI;oBACJ,MAAM;iBACP,CAAC;YACJ,CAAC,CAAA;SACF;KACF;IAED,OAAO;QACL,MAAM,EAAE,MAAM;QACd,GAAG,EAAE,QAAQ,CAAC,YAAY;QAC1B,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE;YAChC,MAAM,EAAE,SAAS,EAAE,KAAK,EAAE,GAAQ,OAAO,CAAC,IAAI,IAAI,EAAE,CAAC;YACrD,IAAI,SAAS,IAAI,KAAK,EAAE;gBACtB,IAAI;oBACF,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,GAAG,CAAC,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,iBAAiB,CAAC,CAAC;oBACrE,IAAI;wBACF,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE;4BAC/C,IAAI,GAAG,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE;gCAC5B,MAAM,OAAO,GAAG,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC;gCACjD,IAAI,OAAO,IAAI,OAAO,CAAC,MAAM,EAAE,UAAU,KAAK,MAAM,EAAE,UAAU,EAAE;oCAChE,KAAK,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,EAAE,EAAE,MAAM,EAAE,CAAC,EAAE,CAAC,CAAA;iCACxC;6BACF;wBACH,CAAC,CAAC,CAAA;qBACH;oBAAC,OAAO,GAAG,EAAE;wBACZ,MAAM,CAAC,KAAK,CAAC,oCAAoC,EAAE,GAAG,CAAC,CAAC;qBACzD;oBACD,KAAK,IAAI,OAAO,IAAI,QAAQ,CAAC,YAAY,EAAE;wBACzC,MAAM,UAAU,GAAG,MAAM,OAAO,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,OAAO,CAAC,CAAC;wBAEvE,IAAI,UAAU,IAAI,UAAU,CAAC,IAAI,IAAI,UAAU,CAAC,KAAK,EAAE;4BACrD,KAAK,CAAC,SAAS,CAAC,QAAQ,GAAG,UAAU,CAAC,IAAI,EAAE,UAAU,CAAC,KAAK,CAAC,CAAC;4BAC9D,OAAO;gCACL,IAAI;gCACJ,MAAM;6BACP,CAAA;yBACF;qBACF;iBACF;gBAAC,OAAO,GAAG,EAAE;oBACZ,MAAM,CAAC,GAAG,CAAC,mBAAmB,EAAE,GAAG,CAAC,CAAC;iBACtC;aACF;YACD,MAAM,QAAQ,GAAG,MAAM,mBAAmB,CAAC,KAAK,CAAC,CAAC;YAClD,IAAI,CAAC,QAAQ,EAAE;gBACb,KAAK,CAAC,UAAU,GAAG,GAAG,CAAC;gBACvB,OAAO,aAAa,CAAC;aACtB;YACD,OAAO,QAAQ,CAAC;QAClB,CAAC;KACF,CAAA;AACH,CAAC;AAED,MAAM,UAAU,+BAA+B;IAC7C,OAAO;QACL,MAAM,EAAE,MAAM;QACd,GAAG,EAAE,QAAQ,CAAC,cAAc;QAC5B,UAAU,EAAE,iBAAiB;QAC7B,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE;YAChC,MAAM,IAAI,GAAG,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC;YAClC,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC;YAC1B,MAAM,MAAM,GAAG,OAAO,CAAC,aAAa,CAAC;YACrC,KAAK,CAAC,SAAS,CAAC,QAAQ,GAAG,IAAI,EAAE,EAAE,EAAE,EAAE,MAAM,EAAE,CAAC,EAAE,CAAC,CAAC;YACpD,QAAQ,CAAC,cAAc,CAAC,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC;YACxE,OAAO,IAAI,CAAC;QACd,CAAC;KACF,CAAA;AACH,CAAC"}

package/dist/cache-manager.d.ts

@@ -0,0 +1,2 @@
+import { CacheManager } from '@qelos/cache-manager';
+export declare const cacheManager: CacheManager;

package/dist/cache-manager.js

@@ -0,0 +1,7 @@
+import { createCacheManager } from '@qelos/cache-manager';
+import config from './config';
+const cacher = config.redisUrl ?
+    require('@qelos/cache-manager/dist/redis-cache').createRedisCache(config.redisUrl) :
+    require('@qelos/cache-manager/dist/memory-cache').createMemoryCache();
+export const cacheManager = createCacheManager(cacher, { ttl: 60 * 30 });
+//# sourceMappingURL=cache-manager.js.map

package/dist/cache-manager.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cache-manager.js","sourceRoot":"","sources":["../src/cache-manager.ts"],"names":[],"mappings":"AAAA,OAAO,EAAe,kBAAkB,EAAC,MAAM,sBAAsB,CAAC;AAEtE,OAAO,MAAM,MAAM,UAAU,CAAC;AAE9B,MAAM,MAAM,GAAG,MAAM,CAAC,QAAQ,CAAC,CAAC;IAC9B,OAAO,CAAC,uCAAuC,CAAC,CAAC,gBAAgB,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC;IACpF,OAAO,CAAC,wCAAwC,CAAC,CAAC,iBAAiB,EAAE,CAAA;AAEvE,MAAM,CAAC,MAAM,YAAY,GAAiB,kBAAkB,CAAC,MAAM,EAAE,EAAC,GAAG,EAAE,EAAE,GAAG,EAAE,EAAC,CAAC,CAAC"}

package/dist/config.d.ts

@@ -0,0 +1,24 @@
+import { QelosSDKOptions } from '@qelos/sdk/dist/types';
+declare const config: {
+    port: number;
+    internalPort: number;
+    host: string;
+    internalHost: string;
+    dev: boolean;
+    allowedTenants: string[];
+    refreshTokenSecret: string;
+    accessTokenSecret: string;
+    userPayloadSecret: string;
+    qelosUrl: string;
+    qelosUsername: string;
+    qelosPassword: string;
+    redisUrl: string;
+    staticFrontend: {
+        root: string;
+        prefix: string;
+    };
+    sdkOptions: Partial<QelosSDKOptions>;
+};
+export type ConfigOptions = Partial<typeof config>;
+export declare function setConfig(appConfig: ConfigOptions): void;
+export default config;