@redocly/cli 2.40.0 → 2.41.1

package/lib/chunks/{HT6ZGKQQ.js → Z3EJWJEX.js}

@@ -5907,6 +5907,7 @@ var require_fast_uri = __commonJS({
       return uriTokens.join("");
     }
     var URI_PARSE = /^(?:([^#/:?]+):)?(?:\/\/((?:([^#/?@]*)@)?(\[[^#/?\]]+\]|[^#/:?]*)(?::(\d*))?))?([^#?]*)(?:\?([^#]*))?(?:#((?:.|[\n\r])*))?/u;
+    var AUTHORITY_PREFIX = /^(?:[^#/:?]+:)?\/\/([^/?#]*)/;
     function getParseError(parsed, matches) {
       if (matches[2] !== void 0 && parsed.path && parsed.path[0] !== "/") {
         return 'URI path must start with "/" when authority is present.';
@@ -5936,6 +5937,11 @@ var require_fast_uri = __commonJS({
           uri = "//" + uri;
         }
       }
+      const authorityMatch = uri.match(AUTHORITY_PREFIX);
+      if (authorityMatch !== null && authorityMatch[1].indexOf("\\") !== -1) {
+        parsed.error = "URI authority must not contain a literal backslash.";
+        malformedAuthorityOrPort = true;
+      }
       const matches = uri.match(URI_PARSE);
       if (matches) {
         parsed.scheme = matches[1];
@@ -5979,7 +5985,7 @@ var require_fast_uri = __commonJS({
         if (!options2.unicodeSupport && (!schemeHandler || !schemeHandler.unicodeSupport)) {
           if (parsed.host && (options2.domainHost || schemeHandler && schemeHandler.domainHost) && isIP === false && nonSimpleDomain(parsed.host)) {
             try {
-              parsed.host = URL.domainToASCII(parsed.host.toLowerCase());
+              parsed.host = new URL("http://" + parsed.host).hostname;
             } catch (e2) {
               parsed.error = parsed.error || "Host's domain name can not be converted to ASCII: " + e2;
             }
@@ -28139,6 +28145,7 @@ var builtInOAS2Rules = [
   "response-contains-header",
   "scalar-property-missing-example",
   "security-defined",
+  "security-scopes-defined",
   "spec-strict-refs",
   "no-required-schema-properties-undefined",
   "no-schema-type-mismatch",
@@ -28183,6 +28190,7 @@ var builtInOAS3Rules = [
   "response-contains-header",
   "scalar-property-missing-example",
   "security-defined",
+  "security-scopes-defined",
   "spec-strict-refs",
   "no-required-schema-properties-undefined",
   "no-schema-type-mismatch",
@@ -28223,7 +28231,8 @@ var builtInAsync2Rules = [
   "no-required-schema-properties-undefined",
   "no-enum-type-mismatch",
   "no-mixed-number-range-constraints",
-  "no-schema-type-mismatch"
+  "no-schema-type-mismatch",
+  "security-scopes-defined"
 ];
 var builtInAsync3Rules = [
   "info-contact",
@@ -28237,7 +28246,8 @@ var builtInAsync3Rules = [
   "no-required-schema-properties-undefined",
   "no-enum-type-mismatch",
   "no-mixed-number-range-constraints",
-  "no-schema-type-mismatch"
+  "no-schema-type-mismatch",
+  "security-scopes-defined"
 ];
 var builtInArazzo1Rules = [
   "sourceDescription-type",
@@ -31978,6 +31988,69 @@ var OperationOperationId = () => {
   };
 };
 
+// ../core/lib/rules/common/security-scopes-defined.js
+function getDefinedScopes(scheme, resolve7, schemeLocation) {
+  if ("flows" in scheme && scheme.flows) {
+    const { node: flows, location: flowsLocation } = isRef(scheme.flows) ? resolve7(scheme.flows, schemeLocation.source.absoluteRef) : { node: scheme.flows, location: schemeLocation };
+    const flowsSource = (flowsLocation ?? schemeLocation).source.absoluteRef;
+    const scopes = Object.values(flows ?? {}).flatMap((flow) => {
+      const resolvedFlow = isRef(flow) ? resolve7(flow, flowsSource).node : flow;
+      return Object.keys(resolvedFlow?.scopes || {});
+    });
+    return [...new Set(scopes)];
+  }
+  return Object.keys(scheme.scopes || {});
+}
+var SecurityScopesDefined = (opts) => {
+  const definedSchemes = /* @__PURE__ */ new Map();
+  const usedScopes = [];
+  return {
+    Root: {
+      leave(_root, { report }) {
+        for (const { schemeName, scopes, location } of usedScopes) {
+          const scheme = definedSchemes.get(schemeName);
+          if (scheme?.type !== "oauth2")
+            continue;
+          if (opts.requireScopes && scopes.length === 0) {
+            report({
+              message: `The "${schemeName}" security requirement must list at least one scope.`,
+              location: location.key(),
+              reference: "https://redocly.com/docs/cli/rules/common/security-scopes-defined"
+            });
+            continue;
+          }
+          for (let scopeIndex = 0; scopeIndex < scopes.length; scopeIndex++) {
+            const scope = scopes[scopeIndex];
+            if (!scheme.definedScopes.includes(scope)) {
+              report({
+                message: `The "${scope}" scope is not defined in the "${schemeName}" security scheme.`,
+                location: location.child([scopeIndex]),
+                suggest: getSuggest(scope, scheme.definedScopes),
+                reference: "https://redocly.com/docs/cli/rules/common/security-scopes-defined"
+              });
+            }
+          }
+        }
+      }
+    },
+    SecurityScheme(scheme, { key, resolve: resolve7, location }) {
+      definedSchemes.set(key.toString(), {
+        type: scheme.type,
+        definedScopes: scheme.type === "oauth2" ? getDefinedScopes(scheme, resolve7, location) : []
+      });
+    },
+    SecurityRequirement(requirement, { location }) {
+      for (const [schemeName, scopes] of Object.entries(requirement)) {
+        usedScopes.push({
+          schemeName,
+          scopes: scopes || [],
+          location: location.child([schemeName])
+        });
+      }
+    }
+  };
+};
+
 // ../core/lib/rules/common/tag-description.js
 var TagDescription = () => {
   return {
@@ -32058,7 +32131,8 @@ var rules2 = {
   "no-required-schema-properties-undefined": NoRequiredSchemaPropertiesUndefined,
   "no-enum-type-mismatch": NoEnumTypeMismatch,
   "no-mixed-number-range-constraints": NoMixedNumberRangeConstraints,
-  "no-schema-type-mismatch": NoSchemaTypeMismatch
+  "no-schema-type-mismatch": NoSchemaTypeMismatch,
+  "security-scopes-defined": SecurityScopesDefined
 };
 var preprocessors2 = {};
 
@@ -32093,6 +32167,65 @@ var NoChannelTrailingSlash2 = () => {
   };
 };
 
+// ../core/lib/rules/async3/security-scopes-defined.js
+function getAvailableScopes(scheme, resolve7, schemeLocation) {
+  if (!scheme.flows)
+    return [];
+  const { node: flows, location: flowsLocation } = isRef(scheme.flows) ? resolve7(scheme.flows, schemeLocation.source.absoluteRef) : { node: scheme.flows, location: schemeLocation };
+  const flowsSource = (flowsLocation ?? schemeLocation).source.absoluteRef;
+  const scopeNames = Object.values(flows ?? {}).flatMap((flow) => {
+    const resolvedFlow = isRef(flow) ? resolve7(flow, flowsSource).node : flow;
+    return Object.keys(resolvedFlow?.availableScopes || {});
+  });
+  return [...new Set(scopeNames)];
+}
+var SecurityScopesDefined2 = (opts) => {
+  const usedSchemes = /* @__PURE__ */ new Map();
+  return {
+    SecuritySchemeList(schemeList, { resolve: resolve7, location }) {
+      for (let itemIndex = 0; itemIndex < schemeList.length; itemIndex++) {
+        const item = schemeList[itemIndex];
+        const resolved = isRef(item) ? resolve7(item) : { node: item, location: location.child([itemIndex]) };
+        if (!resolved.node || !resolved.location)
+          continue;
+        usedSchemes.set(resolved.location.absolutePointer, {
+          scheme: resolved.node,
+          location: resolved.location,
+          availableScopes: resolved.node.type === "oauth2" ? getAvailableScopes(resolved.node, resolve7, resolved.location) : []
+        });
+      }
+    },
+    Root: {
+      leave(_root, { report }) {
+        for (const { scheme, location, availableScopes } of usedSchemes.values()) {
+          if (scheme.type !== "oauth2")
+            continue;
+          if (opts.requireScopes && !scheme.scopes?.length) {
+            report({
+              message: `The security scheme must list at least one scope.`,
+              location: location.key(),
+              reference: "https://redocly.com/docs/cli/rules/common/security-scopes-defined"
+            });
+            continue;
+          }
+          const usedScopes = scheme.scopes || [];
+          for (let scopeIndex = 0; scopeIndex < usedScopes.length; scopeIndex++) {
+            const scope = usedScopes[scopeIndex];
+            if (!availableScopes.includes(scope)) {
+              report({
+                message: `The "${scope}" scope is not defined in the available scopes of the security scheme flows.`,
+                location: location.child(["scopes", scopeIndex]),
+                suggest: getSuggest(scope, availableScopes),
+                reference: "https://redocly.com/docs/cli/rules/common/security-scopes-defined"
+              });
+            }
+          }
+        }
+      }
+    }
+  };
+};
+
 // ../core/lib/rules/async3/index.js
 var rules3 = {
   struct: Struct,
@@ -32109,7 +32242,8 @@ var rules3 = {
   "no-required-schema-properties-undefined": NoRequiredSchemaPropertiesUndefined,
   "no-enum-type-mismatch": NoEnumTypeMismatch,
   "no-mixed-number-range-constraints": NoMixedNumberRangeConstraints,
-  "no-schema-type-mismatch": NoSchemaTypeMismatch
+  "no-schema-type-mismatch": NoSchemaTypeMismatch,
+  "security-scopes-defined": SecurityScopesDefined2
 };
 var preprocessors3 = {};
 
@@ -33581,6 +33715,7 @@ var rules5 = {
   "parameter-description": ParameterDescription,
   "operation-singular-tag": OperationSingularTag,
   "security-defined": SecurityDefined,
+  "security-scopes-defined": SecurityScopesDefined,
   "no-unresolved-refs": NoUnresolvedRefs,
   "no-identical-paths": NoIdenticalPaths,
   "no-ambiguous-paths": NoAmbiguousPaths,
@@ -34610,6 +34745,7 @@ var rules6 = {
   "parameter-description": ParameterDescription,
   "operation-singular-tag": OperationSingularTag,
   "security-defined": SecurityDefined,
+  "security-scopes-defined": SecurityScopesDefined,
   "no-unresolved-refs": NoUnresolvedRefs,
   "paths-kebab-case": PathsKebabCase,
   "boolean-parameter-prefixes": BooleanParameterPrefixes2,
@@ -34861,6 +34997,7 @@ var all = {
     },
     "response-contains-property": "error",
     "security-defined": "error",
+    "security-scopes-defined": "error",
     "spec-strict-refs": "error",
     "scalar-property-missing-example": "error",
     "tag-description": "error",
@@ -34923,6 +35060,7 @@ var all = {
     },
     "response-contains-property": "error",
     "security-defined": "error",
+    "security-scopes-defined": "error",
     "spec-strict-refs": "error",
     "scalar-property-missing-example": "error",
     "spec-components-invalid-map-name": "error",
@@ -34987,6 +35125,7 @@ var all = {
     },
     "response-contains-property": "error",
     "security-defined": "error",
+    "security-scopes-defined": "error",
     "spec-strict-refs": "error",
     "scalar-property-missing-example": "error",
     "spec-components-invalid-map-name": "error",
@@ -35050,6 +35189,7 @@ var all = {
     },
     "response-contains-property": "error",
     "security-defined": "error",
+    "security-scopes-defined": "error",
     "spec-strict-refs": "error",
     "scalar-property-missing-example": "error",
     "spec-components-invalid-map-name": "error",
@@ -35068,6 +35208,7 @@ var all = {
     "info-license-strict": "error",
     "no-channel-trailing-slash": "error",
     "operation-operationId": "error",
+    "security-scopes-defined": "error",
     "tag-description": "error",
     "tags-alphabetical": "error",
     "no-duplicated-tag-names": "error",
@@ -35082,6 +35223,7 @@ var all = {
     "info-license-strict": "error",
     "no-channel-trailing-slash": "error",
     "operation-operationId": "error",
+    "security-scopes-defined": "error",
     "tag-description": "error",
     "tags-alphabetical": "error",
     "no-duplicated-tag-names": "error",
@@ -35201,6 +35343,7 @@ var minimal = {
     "response-mime-type": "off",
     "scalar-property-missing-example": "off",
     "security-defined": "warn",
+    "security-scopes-defined": "off",
     "spec-strict-refs": "off",
     "tag-description": "warn",
     "tags-alphabetical": "off"
@@ -35260,6 +35403,7 @@ var minimal = {
     "response-mime-type": "off",
     "scalar-property-missing-example": "off",
     "security-defined": "warn",
+    "security-scopes-defined": "off",
     "spec-components-invalid-map-name": "warn",
     "spec-example-values": "off",
     "spec-strict-refs": "off",
@@ -35318,6 +35462,7 @@ var minimal = {
     "response-mime-type": "off",
     "scalar-property-missing-example": "off",
     "security-defined": "warn",
+    "security-scopes-defined": "off",
     "spec-components-invalid-map-name": "warn",
     "spec-example-values": "off",
     "spec-strict-refs": "off",
@@ -35375,6 +35520,7 @@ var minimal = {
     "response-mime-type": "off",
     "scalar-property-missing-example": "off",
     "security-defined": "warn",
+    "security-scopes-defined": "off",
     "spec-components-invalid-map-name": "warn",
     "spec-discriminator-defaultMapping": "off",
     "spec-example-values": "off",
@@ -35396,6 +35542,7 @@ var minimal = {
     "no-required-schema-properties-undefined": "warn",
     "no-schema-type-mismatch": "warn",
     "operation-operationId": "warn",
+    "security-scopes-defined": "off",
     "tag-description": "warn",
     "tags-alphabetical": "off"
   },
@@ -35410,6 +35557,7 @@ var minimal = {
     "no-required-schema-properties-undefined": "warn",
     "no-schema-type-mismatch": "warn",
     "operation-operationId": "warn",
+    "security-scopes-defined": "off",
     "tag-description": "warn",
     "tags-alphabetical": "off"
   },
@@ -35524,6 +35672,7 @@ var recommendedStrict = {
     "response-mime-type": "off",
     "scalar-property-missing-example": "off",
     "security-defined": "error",
+    "security-scopes-defined": "error",
     "spec-strict-refs": "off",
     "tag-description": "error",
     "tags-alphabetical": "off"
@@ -35583,6 +35732,7 @@ var recommendedStrict = {
     "response-mime-type": "off",
     "scalar-property-missing-example": "off",
     "security-defined": "error",
+    "security-scopes-defined": "error",
     "spec-components-invalid-map-name": "error",
     "spec-example-values": "off",
     "spec-strict-refs": "off",
@@ -35641,6 +35791,7 @@ var recommendedStrict = {
     "response-mime-type": "off",
     "scalar-property-missing-example": "off",
     "security-defined": "error",
+    "security-scopes-defined": "error",
     "spec-components-invalid-map-name": "error",
     "spec-example-values": "off",
     "spec-strict-refs": "off",
@@ -35698,6 +35849,7 @@ var recommendedStrict = {
     "response-mime-type": "off",
     "scalar-property-missing-example": "off",
     "security-defined": "error",
+    "security-scopes-defined": "error",
     "spec-components-invalid-map-name": "error",
     "spec-discriminator-defaultMapping": "error",
     "spec-example-values": "error",
@@ -35719,6 +35871,7 @@ var recommendedStrict = {
     "no-required-schema-properties-undefined": "error",
     "no-schema-type-mismatch": "error",
     "operation-operationId": "error",
+    "security-scopes-defined": "error",
     "tag-description": "error",
     "tags-alphabetical": "off"
   },
@@ -35733,6 +35886,7 @@ var recommendedStrict = {
     "no-required-schema-properties-undefined": "error",
     "no-schema-type-mismatch": "error",
     "operation-operationId": "error",
+    "security-scopes-defined": "error",
     "tag-description": "error",
     "tags-alphabetical": "off"
   },
@@ -35847,6 +36001,7 @@ var recommended = {
     "response-mime-type": "off",
     "scalar-property-missing-example": "off",
     "security-defined": "error",
+    "security-scopes-defined": "warn",
     "spec-strict-refs": "off",
     "tag-description": "warn",
     "tags-alphabetical": "off"
@@ -35906,6 +36061,7 @@ var recommended = {
     "response-mime-type": "off",
     "scalar-property-missing-example": "off",
     "security-defined": "error",
+    "security-scopes-defined": "warn",
     "spec-components-invalid-map-name": "error",
     "spec-example-values": "off",
     "spec-strict-refs": "off",
@@ -35964,6 +36120,7 @@ var recommended = {
     "response-mime-type": "off",
     "scalar-property-missing-example": "off",
     "security-defined": "error",
+    "security-scopes-defined": "warn",
     "spec-components-invalid-map-name": "error",
     "spec-example-values": "off",
     "spec-strict-refs": "off",
@@ -36021,6 +36178,7 @@ var recommended = {
     "response-mime-type": "off",
     "scalar-property-missing-example": "off",
     "security-defined": "error",
+    "security-scopes-defined": "warn",
     "spec-components-invalid-map-name": "error",
     "spec-discriminator-defaultMapping": "warn",
     "spec-example-values": "error",
@@ -36042,6 +36200,7 @@ var recommended = {
     "no-required-schema-properties-undefined": "warn",
     "no-schema-type-mismatch": "error",
     "operation-operationId": "warn",
+    "security-scopes-defined": "warn",
     "tag-description": "warn",
     "tags-alphabetical": "off"
   },
@@ -36056,6 +36215,7 @@ var recommended = {
     "no-required-schema-properties-undefined": "warn",
     "no-schema-type-mismatch": "error",
     "operation-operationId": "warn",
+    "security-scopes-defined": "warn",
     "tag-description": "warn",
     "tags-alphabetical": "off"
   },
@@ -36170,6 +36330,7 @@ var spec = {
     "response-mime-type": "off",
     "scalar-property-missing-example": "off",
     "security-defined": "off",
+    "security-scopes-defined": "off",
     "spec-strict-refs": "error",
     "tag-description": "off",
     "tags-alphabetical": "off"
@@ -36229,6 +36390,7 @@ var spec = {
     "response-mime-type": "off",
     "scalar-property-missing-example": "off",
     "security-defined": "off",
+    "security-scopes-defined": "off",
     "spec-components-invalid-map-name": "error",
     "spec-example-values": "off",
     "spec-strict-refs": "error",
@@ -36287,6 +36449,7 @@ var spec = {
     "response-mime-type": "off",
     "scalar-property-missing-example": "off",
     "security-defined": "off",
+    "security-scopes-defined": "off",
     "spec-components-invalid-map-name": "error",
     "spec-example-values": "off",
     "spec-strict-refs": "error",
@@ -36344,6 +36507,7 @@ var spec = {
     "response-mime-type": "off",
     "scalar-property-missing-example": "off",
     "security-defined": "off",
+    "security-scopes-defined": "off",
     "spec-components-invalid-map-name": "error",
     "spec-discriminator-defaultMapping": "error",
     "spec-example-values": "error",
@@ -36365,6 +36529,7 @@ var spec = {
     "no-required-schema-properties-undefined": "off",
     "no-schema-type-mismatch": "off",
     "operation-operationId": "off",
+    "security-scopes-defined": "off",
     "tag-description": "off",
     "tags-alphabetical": "off"
   },
@@ -36379,6 +36544,7 @@ var spec = {
     "no-required-schema-properties-undefined": "off",
     "no-schema-type-mismatch": "off",
     "operation-operationId": "off",
+    "security-scopes-defined": "off",
     "tag-description": "off",
     "tags-alphabetical": "off"
   },
@@ -37988,7 +38154,7 @@ async function bundle(opts) {
   if (document instanceof Error) {
     throw document;
   }
-  opts.collectSpecData?.(document.parsed);
+  opts.collectSpecData?.(document);
   return bundleDocument({
     document,
     ...opts,
@@ -38978,7 +39144,7 @@ var redoclyConfigSchemaWithoutTheme2 = {
 async function lint(opts) {
   const { ref, externalRefResolver = new BaseResolver(opts.config.resolve) } = opts;
   const document = await externalRefResolver.resolveDocument(null, ref, true);
-  opts.collectSpecData?.(document.parsed);
+  opts.collectSpecData?.(document);
   return lintDocument({
     document,
     ...opts,
@@ -39131,6 +39297,7 @@ export {
   detectSpec,
   require_dist,
   isSupportedExtension,
+  isGraphqlRef,
   ResolveError,
   BaseResolver,
   resolveDocument,