@rockcarver/frodo-lib 2.0.0-34 → 2.0.0-36

package/cjs/api/AuthenticationSettingsApi.js

@@ -0,0 +1,90 @@
+"use strict";
+
+Object.defineProperty(exports, "__esModule", {
+  value: true
+});
+exports.getAuthenticationSettings = getAuthenticationSettings;
+exports.putAuthenticationSettings = putAuthenticationSettings;
+var _util = _interopRequireDefault(require("util"));
+var _Console = require("../utils/Console.js");
+var _ForgeRockUtils = require("../utils/ForgeRockUtils.js");
+var _BaseApi = require("./BaseApi.js");
+function _interopRequireDefault(obj) { return obj && obj.__esModule ? obj : { default: obj }; }
+function asyncGeneratorStep(gen, resolve, reject, _next, _throw, key, arg) { try { var info = gen[key](arg); var value = info.value; } catch (error) { reject(error); return; } if (info.done) { resolve(value); } else { Promise.resolve(value).then(_next, _throw); } }
+function _asyncToGenerator(fn) { return function () { var self = this, args = arguments; return new Promise(function (resolve, reject) { var gen = fn.apply(self, args); function _next(value) { asyncGeneratorStep(gen, resolve, reject, _next, _throw, "next", value); } function _throw(err) { asyncGeneratorStep(gen, resolve, reject, _next, _throw, "throw", err); } _next(undefined); }); }; }
+var authenticationSettingsURLTemplate = '%s/json%s/realm-config/authentication';
+var apiVersion = 'resource=1.0';
+var getApiConfig = () => {
+  return {
+    apiVersion
+  };
+};
+/**
+ * Get authentication settings
+ * @returns {Promise<AuthenticationSettingsSkeleton>} a promise that resolves to an authentication settings object
+ */
+function getAuthenticationSettings(_x) {
+  return _getAuthenticationSettings.apply(this, arguments);
+}
+/**
+ * Put authentiction settings
+ * @param {AuthenticationSettingsSkeleton} settings authentiction settings object
+ * @returns {Promise<AuthenticationSettingsSkeleton>} a promise that resolves to an authentiction settings object
+ */
+function _getAuthenticationSettings() {
+  _getAuthenticationSettings = _asyncToGenerator(function* (_ref) {
+    var {
+      state
+    } = _ref;
+    (0, _Console.debugMessage)({
+      message: "AuthenticationSettingsApi.getAuthenticationSettings: start",
+      state
+    });
+    var urlString = _util.default.format(authenticationSettingsURLTemplate, state.getHost(), (0, _ForgeRockUtils.getCurrentRealmPath)(state));
+    var {
+      data
+    } = yield (0, _BaseApi.generateAmApi)({
+      resource: getApiConfig(),
+      state
+    }).get(urlString, {
+      withCredentials: true
+    });
+    (0, _Console.debugMessage)({
+      message: "AuthenticationSettingsApi.getAuthenticationSettings: end",
+      state
+    });
+    return data;
+  });
+  return _getAuthenticationSettings.apply(this, arguments);
+}
+function putAuthenticationSettings(_x2) {
+  return _putAuthenticationSettings.apply(this, arguments);
+}
+function _putAuthenticationSettings() {
+  _putAuthenticationSettings = _asyncToGenerator(function* (_ref2) {
+    var {
+      settings,
+      state
+    } = _ref2;
+    (0, _Console.debugMessage)({
+      message: "AuthenticationSettingsApi.putAuthenticationSettings: start",
+      state
+    });
+    var urlString = _util.default.format(authenticationSettingsURLTemplate, state.getHost(), (0, _ForgeRockUtils.getCurrentRealmPath)(state));
+    var {
+      data
+    } = yield (0, _BaseApi.generateAmApi)({
+      resource: getApiConfig(),
+      state
+    }).put(urlString, settings, {
+      withCredentials: true
+    });
+    (0, _Console.debugMessage)({
+      message: "AuthenticationSettingsApi.putAuthenticationSettings: end",
+      state
+    });
+    return data;
+  });
+  return _putAuthenticationSettings.apply(this, arguments);
+}
+//# sourceMappingURL=AuthenticationSettingsApi.js.map

package/cjs/api/AuthenticationSettingsApi.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"AuthenticationSettingsApi.js","names":["_util","_interopRequireDefault","require","_Console","_ForgeRockUtils","_BaseApi","obj","__esModule","default","asyncGeneratorStep","gen","resolve","reject","_next","_throw","key","arg","info","value","error","done","Promise","then","_asyncToGenerator","fn","self","args","arguments","apply","err","undefined","authenticationSettingsURLTemplate","apiVersion","getApiConfig","getAuthenticationSettings","_x","_getAuthenticationSettings","_ref","state","debugMessage","message","urlString","util","format","getHost","getCurrentRealmPath","data","generateAmApi","resource","get","withCredentials","putAuthenticationSettings","_x2","_putAuthenticationSettings","_ref2","settings","put"],"sources":["../../src/api/AuthenticationSettingsApi.ts"],"sourcesContent":["import util from 'util';\n\nimport { State } from '../shared/State';\nimport { debugMessage } from '../utils/Console';\nimport { getCurrentRealmPath } from '../utils/ForgeRockUtils';\nimport { type IdObjectSkeletonInterface } from './ApiTypes';\nimport { generateAmApi } from './BaseApi';\n\nconst authenticationSettingsURLTemplate =\n  '%s/json%s/realm-config/authentication';\nconst apiVersion = 'resource=1.0';\nconst getApiConfig = () => {\n  return {\n    apiVersion,\n  };\n};\n\nexport type AuthenticationSettingsSkeleton = IdObjectSkeletonInterface & {\n  _id: '';\n  _type: {\n    _id: 'EMPTY';\n    name: 'Core';\n    collection: false;\n  };\n};\n\n/**\n * Get authentication settings\n * @returns {Promise<AuthenticationSettingsSkeleton>} a promise that resolves to an authentication settings object\n */\nexport async function getAuthenticationSettings({ state }: { state: State }) {\n  debugMessage({\n    message: `AuthenticationSettingsApi.getAuthenticationSettings: start`,\n    state,\n  });\n  const urlString = util.format(\n    authenticationSettingsURLTemplate,\n    state.getHost(),\n    getCurrentRealmPath(state)\n  );\n  const { data } = await generateAmApi({ resource: getApiConfig(), state }).get(\n    urlString,\n    {\n      withCredentials: true,\n    }\n  );\n  debugMessage({\n    message: `AuthenticationSettingsApi.getAuthenticationSettings: end`,\n    state,\n  });\n  return data;\n}\n\n/**\n * Put authentiction settings\n * @param {AuthenticationSettingsSkeleton} settings authentiction settings object\n * @returns {Promise<AuthenticationSettingsSkeleton>} a promise that resolves to an authentiction settings object\n */\nexport async function putAuthenticationSettings({\n  settings,\n  state,\n}: {\n  settings: AuthenticationSettingsSkeleton;\n  state: State;\n}): Promise<AuthenticationSettingsSkeleton> {\n  debugMessage({\n    message: `AuthenticationSettingsApi.putAuthenticationSettings: start`,\n    state,\n  });\n  const urlString = util.format(\n    authenticationSettingsURLTemplate,\n    state.getHost(),\n    getCurrentRealmPath(state)\n  );\n  const { data } = await generateAmApi({ resource: getApiConfig(), state }).put(\n    urlString,\n    settings,\n    {\n      withCredentials: true,\n    }\n  );\n  debugMessage({\n    message: `AuthenticationSettingsApi.putAuthenticationSettings: end`,\n    state,\n  });\n  return data;\n}\n"],"mappings":";;;;;;;AAAA,IAAAA,KAAA,GAAAC,sBAAA,CAAAC,OAAA;AAAwB,IAAAC,QAAA,GAAAD,OAAA;AAAA,IAAAE,eAAA,GAAAF,OAAA;AAAA,IAAAG,QAAA,GAAAH,OAAA;AAAA,SAAAD,uBAAAK,GAAA,WAAAA,GAAA,IAAAA,GAAA,CAAAC,UAAA,GAAAD,GAAA,KAAAE,OAAA,EAAAF,GAAA;AAAA,SAAAG,mBAAAC,GAAA,EAAAC,OAAA,EAAAC,MAAA,EAAAC,KAAA,EAAAC,MAAA,EAAAC,GAAA,EAAAC,GAAA,cAAAC,IAAA,GAAAP,GAAA,CAAAK,GAAA,EAAAC,GAAA,OAAAE,KAAA,GAAAD,IAAA,CAAAC,KAAA,WAAAC,KAAA,IAAAP,MAAA,CAAAO,KAAA,iBAAAF,IAAA,CAAAG,IAAA,IAAAT,OAAA,CAAAO,KAAA,YAAAG,OAAA,CAAAV,OAAA,CAAAO,KAAA,EAAAI,IAAA,CAAAT,KAAA,EAAAC,MAAA;AAAA,SAAAS,kBAAAC,EAAA,6BAAAC,IAAA,SAAAC,IAAA,GAAAC,SAAA,aAAAN,OAAA,WAAAV,OAAA,EAAAC,MAAA,QAAAF,GAAA,GAAAc,EAAA,CAAAI,KAAA,CAAAH,IAAA,EAAAC,IAAA,YAAAb,MAAAK,KAAA,IAAAT,kBAAA,CAAAC,GAAA,EAAAC,OAAA,EAAAC,MAAA,EAAAC,KAAA,EAAAC,MAAA,UAAAI,KAAA,cAAAJ,OAAAe,GAAA,IAAApB,kBAAA,CAAAC,GAAA,EAAAC,OAAA,EAAAC,MAAA,EAAAC,KAAA,EAAAC,MAAA,WAAAe,GAAA,KAAAhB,KAAA,CAAAiB,SAAA;AAQxB,IAAMC,iCAAiC,GACrC,uCAAuC;AACzC,IAAMC,UAAU,GAAG,cAAc;AACjC,IAAMC,YAAY,GAAGA,CAAA,KAAM;EACzB,OAAO;IACLD;EACF,CAAC;AACH,CAAC;AAWD;AACA;AACA;AACA;AAHA,SAIsBE,yBAAyBA,CAAAC,EAAA;EAAA,OAAAC,0BAAA,CAAAR,KAAA,OAAAD,SAAA;AAAA;AAuB/C;AACA;AACA;AACA;AACA;AAJA,SAAAS,2BAAA;EAAAA,0BAAA,GAAAb,iBAAA,CAvBO,WAAAc,IAAA,EAAsE;IAAA,IAA7B;MAAEC;IAAwB,CAAC,GAAAD,IAAA;IACzE,IAAAE,qBAAY,EAAC;MACXC,OAAO,8DAA8D;MACrEF;IACF,CAAC,CAAC;IACF,IAAMG,SAAS,GAAGC,aAAI,CAACC,MAAM,CAC3BZ,iCAAiC,EACjCO,KAAK,CAACM,OAAO,CAAC,CAAC,EACf,IAAAC,mCAAmB,EAACP,KAAK,CAC3B,CAAC;IACD,IAAM;MAAEQ;IAAK,CAAC,SAAS,IAAAC,sBAAa,EAAC;MAAEC,QAAQ,EAAEf,YAAY,CAAC,CAAC;MAAEK;IAAM,CAAC,CAAC,CAACW,GAAG,CAC3ER,SAAS,EACT;MACES,eAAe,EAAE;IACnB,CACF,CAAC;IACD,IAAAX,qBAAY,EAAC;MACXC,OAAO,4DAA4D;MACnEF;IACF,CAAC,CAAC;IACF,OAAOQ,IAAI;EACb,CAAC;EAAA,OAAAV,0BAAA,CAAAR,KAAA,OAAAD,SAAA;AAAA;AAAA,SAOqBwB,yBAAyBA,CAAAC,GAAA;EAAA,OAAAC,0BAAA,CAAAzB,KAAA,OAAAD,SAAA;AAAA;AAAA,SAAA0B,2BAAA;EAAAA,0BAAA,GAAA9B,iBAAA,CAAxC,WAAA+B,KAAA,EAMqC;IAAA,IANI;MAC9CC,QAAQ;MACRjB;IAIF,CAAC,GAAAgB,KAAA;IACC,IAAAf,qBAAY,EAAC;MACXC,OAAO,8DAA8D;MACrEF;IACF,CAAC,CAAC;IACF,IAAMG,SAAS,GAAGC,aAAI,CAACC,MAAM,CAC3BZ,iCAAiC,EACjCO,KAAK,CAACM,OAAO,CAAC,CAAC,EACf,IAAAC,mCAAmB,EAACP,KAAK,CAC3B,CAAC;IACD,IAAM;MAAEQ;IAAK,CAAC,SAAS,IAAAC,sBAAa,EAAC;MAAEC,QAAQ,EAAEf,YAAY,CAAC,CAAC;MAAEK;IAAM,CAAC,CAAC,CAACkB,GAAG,CAC3Ef,SAAS,EACTc,QAAQ,EACR;MACEL,eAAe,EAAE;IACnB,CACF,CAAC;IACD,IAAAX,qBAAY,EAAC;MACXC,OAAO,4DAA4D;MACnEF;IACF,CAAC,CAAC;IACF,OAAOQ,IAAI;EACb,CAAC;EAAA,OAAAO,0BAAA,CAAAzB,KAAA,OAAAD,SAAA;AAAA"}

package/cjs/api/OAuth2OIDCApi.test.js

@@ -6,7 +6,7 @@ var OAuth2OIDCApi = _interopRequireWildcard(require("./OAuth2OIDCApi.js"));
 var _index = require("../index.js");
 var _Constants = _interopRequireDefault(require("../shared/Constants.js"));
 var _ForgeRockApiMockEngine = require("../test/mocks/ForgeRockApiMockEngine.js");
-var _MiscUtils = require("../utils/MiscUtils.js");
+var _ExportImportUtils = require("../utils/ExportImportUtils.js");
 function _getRequireWildcardCache(nodeInterop) { if (typeof WeakMap !== "function") return null; var cacheBabelInterop = new WeakMap(); var cacheNodeInterop = new WeakMap(); return (_getRequireWildcardCache = function _getRequireWildcardCache(nodeInterop) { return nodeInterop ? cacheNodeInterop : cacheBabelInterop; })(nodeInterop); }
 function _interopRequireWildcard(obj, nodeInterop) { if (!nodeInterop && obj && obj.__esModule) { return obj; } if (obj === null || typeof obj !== "object" && typeof obj !== "function") { return { default: obj }; } var cache = _getRequireWildcardCache(nodeInterop); if (cache && cache.has(obj)) { return cache.get(obj); } var newObj = {}; var hasPropertyDescriptor = Object.defineProperty && Object.getOwnPropertyDescriptor; for (var key in obj) { if (key !== "default" && Object.prototype.hasOwnProperty.call(obj, key)) { var desc = hasPropertyDescriptor ? Object.getOwnPropertyDescriptor(obj, key) : null; if (desc && (desc.get || desc.set)) { Object.defineProperty(newObj, key, desc); } else { newObj[key] = obj[key]; } } } newObj.default = obj; if (cache) { cache.set(obj, newObj); } return newObj; }
 function _interopRequireDefault(obj) { return obj && obj.__esModule ? obj : { default: obj }; }
@@ -53,7 +53,7 @@ describe('OAuth2OIDCApi', () => {
         state: _index.state
       });
       var redirectLocationURL = response.headers['location'];
-      var parsed = (0, _MiscUtils.parseUrl)(redirectLocationURL);
+      var parsed = (0, _ExportImportUtils.parseUrl)(redirectLocationURL);
       expect(response.status).toBe(302);
       expect(parsed.searchParam['code']).toBeTruthy();
     }));

package/cjs/api/OAuth2OIDCApi.test.js.map

@@ -1 +1 @@
-{"version":3,"file":"OAuth2OIDCApi.test.js","names":["_axios","_interopRequireDefault","require","_axiosMockAdapter","OAuth2OIDCApi","_interopRequireWildcard","_index","_Constants","_ForgeRockApiMockEngine","_MiscUtils","_getRequireWildcardCache","nodeInterop","WeakMap","cacheBabelInterop","cacheNodeInterop","obj","__esModule","default","cache","has","get","newObj","hasPropertyDescriptor","Object","defineProperty","getOwnPropertyDescriptor","key","prototype","hasOwnProperty","call","desc","set","asyncGeneratorStep","gen","resolve","reject","_next","_throw","arg","info","value","error","done","Promise","then","_asyncToGenerator","fn","self","args","arguments","apply","err","undefined","mock","MockAdapter","axios","state","setHost","setRealm","setCookieName","setCookieValue","setDeploymentType","Constants","CLOUD_DEPLOYMENT_TYPE_KEY","describe","test","expect","authorize","toBeDefined","mockAuthorize","bodyFormData","concat","getCookieValue","config","headers","validateStatus","status","response","amBaseUrl","getHost","data","redirectLocationURL","parsed","parseUrl","toBe","searchParam","toBeTruthy","accessToken","mockAccessToken","access_token"],"sources":["../../src/api/OAuth2OIDCApi.test.ts"],"sourcesContent":["/**\n * Don't convert this to Polly. Once MFA is enforced for tenant admins in ID Cloud,\n * it will be very cumbersome to use Polly for OAuth API calls, as they require an\n * admin user session, not a service account bearer token.\n *\n * Run tests\n *\n *        npm run test OAuth2OIDCApi\n *\n * Note: FRODO_DEBUG=1 is optional and enables debug logging for some output\n * in case things don't function as expected\n */\nimport axios from 'axios';\nimport MockAdapter from 'axios-mock-adapter';\nimport * as OAuth2OIDCApi from './OAuth2OIDCApi';\nimport { state } from '../index';\nimport Constants from '../shared/Constants';\nimport {\n  mockAuthorize,\n  mockAccessToken,\n} from '../test/mocks/ForgeRockApiMockEngine';\nimport { parseUrl } from '../utils/MiscUtils';\n\nconst mock = new MockAdapter(axios);\n\nstate.setHost('https://openam-frodo-dev.forgeblocks.com/am');\nstate.setRealm('alpha');\nstate.setCookieName('cookieName');\nstate.setCookieValue('cookieValue');\nstate.setDeploymentType(Constants.CLOUD_DEPLOYMENT_TYPE_KEY);\n\ndescribe('OAuth2OIDCApi', () => {\n  describe('authorize()', () => {\n    test('0: Method is implemented', async () => {\n      expect(OAuth2OIDCApi.authorize).toBeDefined();\n    });\n\n    test('1: Get authorization code', async () => {\n      mockAuthorize(mock);\n      const bodyFormData = `redirect_uri=https://openam-volker-dev.forgeblocks.com/platform/appAuthHelperRedirect.html&scope=fr:idm:* openid&response_type=code&client_id=idmAdminClient&csrf=${state.getCookieValue()}&decision=allow&code_challenge=l_UNfjLP_eRKwLtvM2M86PxhF2pZyYp629TfJUqDNHY&code_challenge_method=S256`;\n      const config = {\n        headers: {\n          'Content-Type': 'application/x-www-form-urlencoded',\n        },\n        validateStatus: function (status: number) {\n          // if this function returns true, no exception is thrown on a 302, which is the expected status code.\n          return status === 302;\n        },\n      };\n      const response = await OAuth2OIDCApi.authorize({\n        amBaseUrl: state.getHost() as string,\n        data: bodyFormData,\n        config,\n        state,\n      });\n      const redirectLocationURL = response.headers['location'];\n      const parsed = parseUrl(redirectLocationURL);\n      expect(response.status).toBe(302);\n      expect(parsed.searchParam['code']).toBeTruthy();\n    });\n  });\n\n  describe('accessToken()', () => {\n    test('0: Method is implemented', async () => {\n      expect(OAuth2OIDCApi.accessToken).toBeDefined();\n    });\n\n    test('1: Get access token', async () => {\n      mockAccessToken(mock);\n      const bodyFormData = `grant_type=authorization_code&code=PMA6VB9U_Ctiv6q8CAGphy_1vwQ&redirect_uri=https://openam-volker-dev.forgeblocks.com/platform/appAuthHelperRedirect.html&code_verifier=QchYMz4ApoxmyZaFs0MJwZK9rmc8WU-kuoi3JM--CZq7-LmmtxB6_Lf0AtmumFFdOxY&client_id=idmAdminClient`;\n      const config = {\n        headers: {\n          'Content-Type': 'application/x-www-form-urlencoded',\n        },\n      };\n      const response = await OAuth2OIDCApi.accessToken({\n        amBaseUrl: state.getHost() as string,\n        data: bodyFormData,\n        config,\n        state,\n      });\n      expect(response.status).toBe(200);\n      expect(response.data.access_token).toBeTruthy();\n    });\n  });\n});\n"],"mappings":";;AAYA,IAAAA,MAAA,GAAAC,sBAAA,CAAAC,OAAA;AACA,IAAAC,iBAAA,GAAAF,sBAAA,CAAAC,OAAA;AAA6C,IAAAE,aAAA,GAAAC,uBAAA,CAAAH,OAAA;AAAA,IAAAI,MAAA,GAAAJ,OAAA;AAAA,IAAAK,UAAA,GAAAN,sBAAA,CAAAC,OAAA;AAAA,IAAAM,uBAAA,GAAAN,OAAA;AAAA,IAAAO,UAAA,GAAAP,OAAA;AAAA,SAAAQ,yBAAAC,WAAA,eAAAC,OAAA,kCAAAC,iBAAA,OAAAD,OAAA,QAAAE,gBAAA,OAAAF,OAAA,YAAAF,wBAAA,YAAAA,yBAAAC,WAAA,WAAAA,WAAA,GAAAG,gBAAA,GAAAD,iBAAA,KAAAF,WAAA;AAAA,SAAAN,wBAAAU,GAAA,EAAAJ,WAAA,SAAAA,WAAA,IAAAI,GAAA,IAAAA,GAAA,CAAAC,UAAA,WAAAD,GAAA,QAAAA,GAAA,oBAAAA,GAAA,wBAAAA,GAAA,4BAAAE,OAAA,EAAAF,GAAA,UAAAG,KAAA,GAAAR,wBAAA,CAAAC,WAAA,OAAAO,KAAA,IAAAA,KAAA,CAAAC,GAAA,CAAAJ,GAAA,YAAAG,KAAA,CAAAE,GAAA,CAAAL,GAAA,SAAAM,MAAA,WAAAC,qBAAA,GAAAC,MAAA,CAAAC,cAAA,IAAAD,MAAA,CAAAE,wBAAA,WAAAC,GAAA,IAAAX,GAAA,QAAAW,GAAA,kBAAAH,MAAA,CAAAI,SAAA,CAAAC,cAAA,CAAAC,IAAA,CAAAd,GAAA,EAAAW,GAAA,SAAAI,IAAA,GAAAR,qBAAA,GAAAC,MAAA,CAAAE,wBAAA,CAAAV,GAAA,EAAAW,GAAA,cAAAI,IAAA,KAAAA,IAAA,CAAAV,GAAA,IAAAU,IAAA,CAAAC,GAAA,KAAAR,MAAA,CAAAC,cAAA,CAAAH,MAAA,EAAAK,GAAA,EAAAI,IAAA,YAAAT,MAAA,CAAAK,GAAA,IAAAX,GAAA,CAAAW,GAAA,SAAAL,MAAA,CAAAJ,OAAA,GAAAF,GAAA,MAAAG,KAAA,IAAAA,KAAA,CAAAa,GAAA,CAAAhB,GAAA,EAAAM,MAAA,YAAAA,MAAA;AAAA,SAAApB,uBAAAc,GAAA,WAAAA,GAAA,IAAAA,GAAA,CAAAC,UAAA,GAAAD,GAAA,KAAAE,OAAA,EAAAF,GAAA;AAAA,SAAAiB,mBAAAC,GAAA,EAAAC,OAAA,EAAAC,MAAA,EAAAC,KAAA,EAAAC,MAAA,EAAAX,GAAA,EAAAY,GAAA,cAAAC,IAAA,GAAAN,GAAA,CAAAP,GAAA,EAAAY,GAAA,OAAAE,KAAA,GAAAD,IAAA,CAAAC,KAAA,WAAAC,KAAA,IAAAN,MAAA,CAAAM,KAAA,iBAAAF,IAAA,CAAAG,IAAA,IAAAR,OAAA,CAAAM,KAAA,YAAAG,OAAA,CAAAT,OAAA,CAAAM,KAAA,EAAAI,IAAA,CAAAR,KAAA,EAAAC,MAAA;AAAA,SAAAQ,kBAAAC,EAAA,6BAAAC,IAAA,SAAAC,IAAA,GAAAC,SAAA,aAAAN,OAAA,WAAAT,OAAA,EAAAC,MAAA,QAAAF,GAAA,GAAAa,EAAA,CAAAI,KAAA,CAAAH,IAAA,EAAAC,IAAA,YAAAZ,MAAAI,KAAA,IAAAR,kBAAA,CAAAC,GAAA,EAAAC,OAAA,EAAAC,MAAA,EAAAC,KAAA,EAAAC,MAAA,UAAAG,KAAA,cAAAH,OAAAc,GAAA,IAAAnB,kBAAA,CAAAC,GAAA,EAAAC,OAAA,EAAAC,MAAA,EAAAC,KAAA,EAAAC,MAAA,WAAAc,GAAA,KAAAf,KAAA,CAAAgB,SAAA,YAb7C;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AAYA,IAAMC,IAAI,GAAG,IAAIC,yBAAW,CAACC,cAAK,CAAC;AAEnCC,YAAK,CAACC,OAAO,CAAC,6CAA6C,CAAC;AAC5DD,YAAK,CAACE,QAAQ,CAAC,OAAO,CAAC;AACvBF,YAAK,CAACG,aAAa,CAAC,YAAY,CAAC;AACjCH,YAAK,CAACI,cAAc,CAAC,aAAa,CAAC;AACnCJ,YAAK,CAACK,iBAAiB,CAACC,kBAAS,CAACC,yBAAyB,CAAC;AAE5DC,QAAQ,CAAC,eAAe,EAAE,MAAM;EAC9BA,QAAQ,CAAC,aAAa,EAAE,MAAM;IAC5BC,IAAI,CAAC,0BAA0B,eAAApB,iBAAA,CAAE,aAAY;MAC3CqB,MAAM,CAAC9D,aAAa,CAAC+D,SAAS,CAAC,CAACC,WAAW,CAAC,CAAC;IAC/C,CAAC,EAAC;IAEFH,IAAI,CAAC,2BAA2B,eAAApB,iBAAA,CAAE,aAAY;MAC5C,IAAAwB,qCAAa,EAAChB,IAAI,CAAC;MACnB,IAAMiB,YAAY,wKAAAC,MAAA,CAAwKf,YAAK,CAACgB,cAAc,CAAC,CAAC,0GAAuG;MACvT,IAAMC,MAAM,GAAG;QACbC,OAAO,EAAE;UACP,cAAc,EAAE;QAClB,CAAC;QACDC,cAAc,EAAE,SAAAA,eAAUC,MAAc,EAAE;UACxC;UACA,OAAOA,MAAM,KAAK,GAAG;QACvB;MACF,CAAC;MACD,IAAMC,QAAQ,SAASzE,aAAa,CAAC+D,SAAS,CAAC;QAC7CW,SAAS,EAAEtB,YAAK,CAACuB,OAAO,CAAC,CAAW;QACpCC,IAAI,EAAEV,YAAY;QAClBG,MAAM;QACNjB,KAAK,EAALA;MACF,CAAC,CAAC;MACF,IAAMyB,mBAAmB,GAAGJ,QAAQ,CAACH,OAAO,CAAC,UAAU,CAAC;MACxD,IAAMQ,MAAM,GAAG,IAAAC,mBAAQ,EAACF,mBAAmB,CAAC;MAC5Cf,MAAM,CAACW,QAAQ,CAACD,MAAM,CAAC,CAACQ,IAAI,CAAC,GAAG,CAAC;MACjClB,MAAM,CAACgB,MAAM,CAACG,WAAW,CAAC,MAAM,CAAC,CAAC,CAACC,UAAU,CAAC,CAAC;IACjD,CAAC,EAAC;EACJ,CAAC,CAAC;EAEFtB,QAAQ,CAAC,eAAe,EAAE,MAAM;IAC9BC,IAAI,CAAC,0BAA0B,eAAApB,iBAAA,CAAE,aAAY;MAC3CqB,MAAM,CAAC9D,aAAa,CAACmF,WAAW,CAAC,CAACnB,WAAW,CAAC,CAAC;IACjD,CAAC,EAAC;IAEFH,IAAI,CAAC,qBAAqB,eAAApB,iBAAA,CAAE,aAAY;MACtC,IAAA2C,uCAAe,EAACnC,IAAI,CAAC;MACrB,IAAMiB,YAAY,yQAAyQ;MAC3R,IAAMG,MAAM,GAAG;QACbC,OAAO,EAAE;UACP,cAAc,EAAE;QAClB;MACF,CAAC;MACD,IAAMG,QAAQ,SAASzE,aAAa,CAACmF,WAAW,CAAC;QAC/CT,SAAS,EAAEtB,YAAK,CAACuB,OAAO,CAAC,CAAW;QACpCC,IAAI,EAAEV,YAAY;QAClBG,MAAM;QACNjB,KAAK,EAALA;MACF,CAAC,CAAC;MACFU,MAAM,CAACW,QAAQ,CAACD,MAAM,CAAC,CAACQ,IAAI,CAAC,GAAG,CAAC;MACjClB,MAAM,CAACW,QAAQ,CAACG,IAAI,CAACS,YAAY,CAAC,CAACH,UAAU,CAAC,CAAC;IACjD,CAAC,EAAC;EACJ,CAAC,CAAC;AACJ,CAAC,CAAC"}
+{"version":3,"file":"OAuth2OIDCApi.test.js","names":["_axios","_interopRequireDefault","require","_axiosMockAdapter","OAuth2OIDCApi","_interopRequireWildcard","_index","_Constants","_ForgeRockApiMockEngine","_ExportImportUtils","_getRequireWildcardCache","nodeInterop","WeakMap","cacheBabelInterop","cacheNodeInterop","obj","__esModule","default","cache","has","get","newObj","hasPropertyDescriptor","Object","defineProperty","getOwnPropertyDescriptor","key","prototype","hasOwnProperty","call","desc","set","asyncGeneratorStep","gen","resolve","reject","_next","_throw","arg","info","value","error","done","Promise","then","_asyncToGenerator","fn","self","args","arguments","apply","err","undefined","mock","MockAdapter","axios","state","setHost","setRealm","setCookieName","setCookieValue","setDeploymentType","Constants","CLOUD_DEPLOYMENT_TYPE_KEY","describe","test","expect","authorize","toBeDefined","mockAuthorize","bodyFormData","concat","getCookieValue","config","headers","validateStatus","status","response","amBaseUrl","getHost","data","redirectLocationURL","parsed","parseUrl","toBe","searchParam","toBeTruthy","accessToken","mockAccessToken","access_token"],"sources":["../../src/api/OAuth2OIDCApi.test.ts"],"sourcesContent":["/**\n * Don't convert this to Polly. Once MFA is enforced for tenant admins in ID Cloud,\n * it will be very cumbersome to use Polly for OAuth API calls, as they require an\n * admin user session, not a service account bearer token.\n *\n * Run tests\n *\n *        npm run test OAuth2OIDCApi\n *\n * Note: FRODO_DEBUG=1 is optional and enables debug logging for some output\n * in case things don't function as expected\n */\nimport axios from 'axios';\nimport MockAdapter from 'axios-mock-adapter';\nimport * as OAuth2OIDCApi from './OAuth2OIDCApi';\nimport { state } from '../index';\nimport Constants from '../shared/Constants';\nimport {\n  mockAuthorize,\n  mockAccessToken,\n} from '../test/mocks/ForgeRockApiMockEngine';\nimport { parseUrl } from '../utils/ExportImportUtils';\n\nconst mock = new MockAdapter(axios);\n\nstate.setHost('https://openam-frodo-dev.forgeblocks.com/am');\nstate.setRealm('alpha');\nstate.setCookieName('cookieName');\nstate.setCookieValue('cookieValue');\nstate.setDeploymentType(Constants.CLOUD_DEPLOYMENT_TYPE_KEY);\n\ndescribe('OAuth2OIDCApi', () => {\n  describe('authorize()', () => {\n    test('0: Method is implemented', async () => {\n      expect(OAuth2OIDCApi.authorize).toBeDefined();\n    });\n\n    test('1: Get authorization code', async () => {\n      mockAuthorize(mock);\n      const bodyFormData = `redirect_uri=https://openam-volker-dev.forgeblocks.com/platform/appAuthHelperRedirect.html&scope=fr:idm:* openid&response_type=code&client_id=idmAdminClient&csrf=${state.getCookieValue()}&decision=allow&code_challenge=l_UNfjLP_eRKwLtvM2M86PxhF2pZyYp629TfJUqDNHY&code_challenge_method=S256`;\n      const config = {\n        headers: {\n          'Content-Type': 'application/x-www-form-urlencoded',\n        },\n        validateStatus: function (status: number) {\n          // if this function returns true, no exception is thrown on a 302, which is the expected status code.\n          return status === 302;\n        },\n      };\n      const response = await OAuth2OIDCApi.authorize({\n        amBaseUrl: state.getHost() as string,\n        data: bodyFormData,\n        config,\n        state,\n      });\n      const redirectLocationURL = response.headers['location'];\n      const parsed = parseUrl(redirectLocationURL);\n      expect(response.status).toBe(302);\n      expect(parsed.searchParam['code']).toBeTruthy();\n    });\n  });\n\n  describe('accessToken()', () => {\n    test('0: Method is implemented', async () => {\n      expect(OAuth2OIDCApi.accessToken).toBeDefined();\n    });\n\n    test('1: Get access token', async () => {\n      mockAccessToken(mock);\n      const bodyFormData = `grant_type=authorization_code&code=PMA6VB9U_Ctiv6q8CAGphy_1vwQ&redirect_uri=https://openam-volker-dev.forgeblocks.com/platform/appAuthHelperRedirect.html&code_verifier=QchYMz4ApoxmyZaFs0MJwZK9rmc8WU-kuoi3JM--CZq7-LmmtxB6_Lf0AtmumFFdOxY&client_id=idmAdminClient`;\n      const config = {\n        headers: {\n          'Content-Type': 'application/x-www-form-urlencoded',\n        },\n      };\n      const response = await OAuth2OIDCApi.accessToken({\n        amBaseUrl: state.getHost() as string,\n        data: bodyFormData,\n        config,\n        state,\n      });\n      expect(response.status).toBe(200);\n      expect(response.data.access_token).toBeTruthy();\n    });\n  });\n});\n"],"mappings":";;AAYA,IAAAA,MAAA,GAAAC,sBAAA,CAAAC,OAAA;AACA,IAAAC,iBAAA,GAAAF,sBAAA,CAAAC,OAAA;AAA6C,IAAAE,aAAA,GAAAC,uBAAA,CAAAH,OAAA;AAAA,IAAAI,MAAA,GAAAJ,OAAA;AAAA,IAAAK,UAAA,GAAAN,sBAAA,CAAAC,OAAA;AAAA,IAAAM,uBAAA,GAAAN,OAAA;AAAA,IAAAO,kBAAA,GAAAP,OAAA;AAAA,SAAAQ,yBAAAC,WAAA,eAAAC,OAAA,kCAAAC,iBAAA,OAAAD,OAAA,QAAAE,gBAAA,OAAAF,OAAA,YAAAF,wBAAA,YAAAA,yBAAAC,WAAA,WAAAA,WAAA,GAAAG,gBAAA,GAAAD,iBAAA,KAAAF,WAAA;AAAA,SAAAN,wBAAAU,GAAA,EAAAJ,WAAA,SAAAA,WAAA,IAAAI,GAAA,IAAAA,GAAA,CAAAC,UAAA,WAAAD,GAAA,QAAAA,GAAA,oBAAAA,GAAA,wBAAAA,GAAA,4BAAAE,OAAA,EAAAF,GAAA,UAAAG,KAAA,GAAAR,wBAAA,CAAAC,WAAA,OAAAO,KAAA,IAAAA,KAAA,CAAAC,GAAA,CAAAJ,GAAA,YAAAG,KAAA,CAAAE,GAAA,CAAAL,GAAA,SAAAM,MAAA,WAAAC,qBAAA,GAAAC,MAAA,CAAAC,cAAA,IAAAD,MAAA,CAAAE,wBAAA,WAAAC,GAAA,IAAAX,GAAA,QAAAW,GAAA,kBAAAH,MAAA,CAAAI,SAAA,CAAAC,cAAA,CAAAC,IAAA,CAAAd,GAAA,EAAAW,GAAA,SAAAI,IAAA,GAAAR,qBAAA,GAAAC,MAAA,CAAAE,wBAAA,CAAAV,GAAA,EAAAW,GAAA,cAAAI,IAAA,KAAAA,IAAA,CAAAV,GAAA,IAAAU,IAAA,CAAAC,GAAA,KAAAR,MAAA,CAAAC,cAAA,CAAAH,MAAA,EAAAK,GAAA,EAAAI,IAAA,YAAAT,MAAA,CAAAK,GAAA,IAAAX,GAAA,CAAAW,GAAA,SAAAL,MAAA,CAAAJ,OAAA,GAAAF,GAAA,MAAAG,KAAA,IAAAA,KAAA,CAAAa,GAAA,CAAAhB,GAAA,EAAAM,MAAA,YAAAA,MAAA;AAAA,SAAApB,uBAAAc,GAAA,WAAAA,GAAA,IAAAA,GAAA,CAAAC,UAAA,GAAAD,GAAA,KAAAE,OAAA,EAAAF,GAAA;AAAA,SAAAiB,mBAAAC,GAAA,EAAAC,OAAA,EAAAC,MAAA,EAAAC,KAAA,EAAAC,MAAA,EAAAX,GAAA,EAAAY,GAAA,cAAAC,IAAA,GAAAN,GAAA,CAAAP,GAAA,EAAAY,GAAA,OAAAE,KAAA,GAAAD,IAAA,CAAAC,KAAA,WAAAC,KAAA,IAAAN,MAAA,CAAAM,KAAA,iBAAAF,IAAA,CAAAG,IAAA,IAAAR,OAAA,CAAAM,KAAA,YAAAG,OAAA,CAAAT,OAAA,CAAAM,KAAA,EAAAI,IAAA,CAAAR,KAAA,EAAAC,MAAA;AAAA,SAAAQ,kBAAAC,EAAA,6BAAAC,IAAA,SAAAC,IAAA,GAAAC,SAAA,aAAAN,OAAA,WAAAT,OAAA,EAAAC,MAAA,QAAAF,GAAA,GAAAa,EAAA,CAAAI,KAAA,CAAAH,IAAA,EAAAC,IAAA,YAAAZ,MAAAI,KAAA,IAAAR,kBAAA,CAAAC,GAAA,EAAAC,OAAA,EAAAC,MAAA,EAAAC,KAAA,EAAAC,MAAA,UAAAG,KAAA,cAAAH,OAAAc,GAAA,IAAAnB,kBAAA,CAAAC,GAAA,EAAAC,OAAA,EAAAC,MAAA,EAAAC,KAAA,EAAAC,MAAA,WAAAc,GAAA,KAAAf,KAAA,CAAAgB,SAAA,YAb7C;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AAYA,IAAMC,IAAI,GAAG,IAAIC,yBAAW,CAACC,cAAK,CAAC;AAEnCC,YAAK,CAACC,OAAO,CAAC,6CAA6C,CAAC;AAC5DD,YAAK,CAACE,QAAQ,CAAC,OAAO,CAAC;AACvBF,YAAK,CAACG,aAAa,CAAC,YAAY,CAAC;AACjCH,YAAK,CAACI,cAAc,CAAC,aAAa,CAAC;AACnCJ,YAAK,CAACK,iBAAiB,CAACC,kBAAS,CAACC,yBAAyB,CAAC;AAE5DC,QAAQ,CAAC,eAAe,EAAE,MAAM;EAC9BA,QAAQ,CAAC,aAAa,EAAE,MAAM;IAC5BC,IAAI,CAAC,0BAA0B,eAAApB,iBAAA,CAAE,aAAY;MAC3CqB,MAAM,CAAC9D,aAAa,CAAC+D,SAAS,CAAC,CAACC,WAAW,CAAC,CAAC;IAC/C,CAAC,EAAC;IAEFH,IAAI,CAAC,2BAA2B,eAAApB,iBAAA,CAAE,aAAY;MAC5C,IAAAwB,qCAAa,EAAChB,IAAI,CAAC;MACnB,IAAMiB,YAAY,wKAAAC,MAAA,CAAwKf,YAAK,CAACgB,cAAc,CAAC,CAAC,0GAAuG;MACvT,IAAMC,MAAM,GAAG;QACbC,OAAO,EAAE;UACP,cAAc,EAAE;QAClB,CAAC;QACDC,cAAc,EAAE,SAAAA,eAAUC,MAAc,EAAE;UACxC;UACA,OAAOA,MAAM,KAAK,GAAG;QACvB;MACF,CAAC;MACD,IAAMC,QAAQ,SAASzE,aAAa,CAAC+D,SAAS,CAAC;QAC7CW,SAAS,EAAEtB,YAAK,CAACuB,OAAO,CAAC,CAAW;QACpCC,IAAI,EAAEV,YAAY;QAClBG,MAAM;QACNjB,KAAK,EAALA;MACF,CAAC,CAAC;MACF,IAAMyB,mBAAmB,GAAGJ,QAAQ,CAACH,OAAO,CAAC,UAAU,CAAC;MACxD,IAAMQ,MAAM,GAAG,IAAAC,2BAAQ,EAACF,mBAAmB,CAAC;MAC5Cf,MAAM,CAACW,QAAQ,CAACD,MAAM,CAAC,CAACQ,IAAI,CAAC,GAAG,CAAC;MACjClB,MAAM,CAACgB,MAAM,CAACG,WAAW,CAAC,MAAM,CAAC,CAAC,CAACC,UAAU,CAAC,CAAC;IACjD,CAAC,EAAC;EACJ,CAAC,CAAC;EAEFtB,QAAQ,CAAC,eAAe,EAAE,MAAM;IAC9BC,IAAI,CAAC,0BAA0B,eAAApB,iBAAA,CAAE,aAAY;MAC3CqB,MAAM,CAAC9D,aAAa,CAACmF,WAAW,CAAC,CAACnB,WAAW,CAAC,CAAC;IACjD,CAAC,EAAC;IAEFH,IAAI,CAAC,qBAAqB,eAAApB,iBAAA,CAAE,aAAY;MACtC,IAAA2C,uCAAe,EAACnC,IAAI,CAAC;MACrB,IAAMiB,YAAY,yQAAyQ;MAC3R,IAAMG,MAAM,GAAG;QACbC,OAAO,EAAE;UACP,cAAc,EAAE;QAClB;MACF,CAAC;MACD,IAAMG,QAAQ,SAASzE,aAAa,CAACmF,WAAW,CAAC;QAC/CT,SAAS,EAAEtB,YAAK,CAACuB,OAAO,CAAC,CAAW;QACpCC,IAAI,EAAEV,YAAY;QAClBG,MAAM;QACNjB,KAAK,EAALA;MACF,CAAC,CAAC;MACFU,MAAM,CAACW,QAAQ,CAACD,MAAM,CAAC,CAACQ,IAAI,CAAC,GAAG,CAAC;MACjClB,MAAM,CAACW,QAAQ,CAACG,IAAI,CAACS,YAAY,CAAC,CAACH,UAAU,CAAC,CAAC;IACjD,CAAC,EAAC;EACJ,CAAC,CAAC;AACJ,CAAC,CAAC"}

package/cjs/ops/AdminOps.js

@@ -7,18 +7,28 @@ exports.addAutoIdStaticUserMapping = addAutoIdStaticUserMapping;
 exports.createLongLivedToken = createLongLivedToken;
 exports.createOAuth2ClientWithAdminPrivileges = createOAuth2ClientWithAdminPrivileges;
 exports.default = void 0;
+exports.getUniqueValues = getUniqueValues;
 exports.grantOAuth2ClientAdminPrivileges = grantOAuth2ClientAdminPrivileges;
 exports.hideGenericExtensionAttributes = hideGenericExtensionAttributes;
 exports.listNonOAuth2AdminStaticUserMappings = listNonOAuth2AdminStaticUserMappings;
 exports.listOAuth2AdminClients = listOAuth2AdminClients;
 exports.listOAuth2CustomClients = listOAuth2CustomClients;
+exports.pickRandomIPAddress = pickRandomIPAddress;
+exports.pickRandomNumber = pickRandomNumber;
+exports.pickRandomUserAgent = pickRandomUserAgent;
+exports.pickRandomUsername = pickRandomUsername;
+exports.pickRandomValue = pickRandomValue;
+exports.pickRandomValues = pickRandomValues;
 exports.removeStaticUserMapping = removeStaticUserMapping;
 exports.repairOrgModel = repairOrgModel;
 exports.revokeOAuth2ClientAdminPrivileges = revokeOAuth2ClientAdminPrivileges;
 exports.showGenericExtensionAttributes = showGenericExtensionAttributes;
+exports.sleep = sleep;
+exports.trainAA = trainAA;
 var _fs = _interopRequireDefault(require("fs"));
 var _path = _interopRequireDefault(require("path"));
 var _url = require("url");
+var _AuthenticateApi = require("../api/AuthenticateApi.js");
 var _SecretsApi = require("../api/cloud/SecretsApi.js");
 var _IdmConfigApi = require("../api/IdmConfigApi.js");
 var _OAuth2OIDCApi = require("../api/OAuth2OIDCApi.js");
@@ -33,31 +43,6 @@ function asyncGeneratorStep(gen, resolve, reject, _next, _throw, key, arg) { try
 function _asyncToGenerator(fn) { return function () { var self = this, args = arguments; return new Promise(function (resolve, reject) { var gen = fn.apply(self, args); function _next(value) { asyncGeneratorStep(gen, resolve, reject, _next, _throw, "next", value); } function _throw(err) { asyncGeneratorStep(gen, resolve, reject, _next, _throw, "throw", err); } _next(undefined); }); }; }
 var _default = state => {
   return {
-    /*
-    * List all oauth2 clients, which have a corresponding staticUserMapping
-    * in the IDM authentication.json:
-    {
-      "_id": "authentication",
-      "rsFilter": {
-        ...
-        "staticUserMapping": [
-          {
-            "subject": "someOauth2ClientID",
-            "localUser": "internal/user/openidm-admin",
-            "userRoles": "authzRoles/*",
-            "roles": [
-              "internal/role/openidm-authorized",
-              "internal/role/openidm-admin"
-            ]
-          },
-          {
-            "subject": "RCSClient",
-            "localUser": "internal/user/idm-provisioning"
-          }
-        ]
-      }
-    }
-    */
     listOAuth2CustomClients() {
       return _asyncToGenerator(function* () {
         return listOAuth2CustomClients({
@@ -65,28 +50,6 @@ var _default = state => {
         });
       })();
     },
-    /*
-    * List all oauth2 clients, which have the fr:idm:* scope and a 
-    * corresponding staticUserMapping in the IDM authentication.json
-    * and are assigned admin privileges:
-    {
-      "_id": "authentication",
-      "rsFilter": {
-        ...
-        "staticUserMapping": [
-          {
-            "subject": "someOauth2ClientID",
-            "localUser": "internal/user/openidm-admin",
-            "userRoles": "authzRoles/*",
-            "roles": [
-              "internal/role/openidm-authorized",
-              "internal/role/openidm-admin"
-            ]
-          }
-        ]
-      }
-    }
-    */
     listOAuth2AdminClients() {
       return _asyncToGenerator(function* () {
         return listOAuth2AdminClients({
@@ -94,47 +57,6 @@ var _default = state => {
         });
       })();
     },
-    /*
-    * List all static user mappings that are not oauth2 clients in authentication.json
-    * and are assigned admin privileges:
-    {
-      "_id": "authentication",
-      "rsFilter": {
-        ...
-          "staticUserMapping": [
-              {
-                  "subject": "amadmin",
-                  "localUser": "internal/user/openidm-admin",
-                  "userRoles": "authzRoles/*",
-                  "roles": [
-                      "internal/role/openidm-authorized",
-                      "internal/role/openidm-admin"
-                  ]
-              },
-              {
-                  "subject": "idm-provisioning",
-                  "localUser": "internal/user/idm-provisioning",
-                  "roles": [
-                      "internal/role/platform-provisioning"
-                  ]
-              },
-              {
-                  "subject": "RCSClient",
-                  "localUser": "internal/user/idm-provisioning"
-              },
-              {
-                  "subject": "autoid-resource-server",
-                  "localUser": "internal/user/idm-provisioning",
-                  "roles": [
-                      "internal/role/platform-provisioning",
-                      "internal/role/openidm-authorized",
-                      "internal/role/openidm-admin"
-                  ]
-              }
-          ]
-      }
-    }
-    */
     listNonOAuth2AdminStaticUserMappings(showProtected) {
       return _asyncToGenerator(function* () {
         return listNonOAuth2AdminStaticUserMappings({
@@ -143,27 +65,6 @@ var _default = state => {
         });
       })();
     },
-    /*
-    * Add AutoId static user mapping to authentication.json to enable dashboards and other AutoId-based functionality.
-    {
-      "_id": "authentication",
-      "rsFilter": {
-        ...
-          "staticUserMapping": [
-              ...
-              {
-                  "subject": "autoid-resource-server",
-                  "localUser": "internal/user/idm-provisioning",
-                  "roles": [
-                      "internal/role/platform-provisioning",
-                      "internal/role/openidm-authorized",
-                      "internal/role/openidm-admin"
-                  ]
-              }
-          ]
-      }
-    }
-    */
     addAutoIdStaticUserMapping() {
       return _asyncToGenerator(function* () {
         return addAutoIdStaticUserMapping({
@@ -243,6 +144,20 @@ var _default = state => {
           state
         });
       })();
+    },
+    trainAA(apiKey, apiSecret, customUsernames, customUserAgents, customIPs, loginsPerUser, service) {
+      return _asyncToGenerator(function* () {
+        return trainAA({
+          apiKey,
+          apiSecret,
+          customUsernames,
+          customUserAgents,
+          customIPs,
+          loginsPerUser,
+          service,
+          state
+        });
+      })();
     }
   };
 };
@@ -1447,11 +1362,7 @@ function _extendOrgModelPermissins() {
 }
 function repairOrgModel(_x19) {
   return _repairOrgModel.apply(this, arguments);
-} // suggested by John K.
-// export async function removeRealmNameFromManagedObjectLabels() {}
-// export async function addRealmNameToManagedObjectLabels() {}
-// export async function cleanUpPostmanArtifacts() {}
-// export async function createSampleThemes() {}
+}
 function _repairOrgModel() {
   _repairOrgModel = _asyncToGenerator(function* (_ref21) {
     var {
@@ -1488,4 +1399,139 @@ function _repairOrgModel() {
   });
   return _repairOrgModel.apply(this, arguments);
 }
+var templateUsernames = JSON.parse(_fs.default.readFileSync(_path.default.resolve(_dirname, './templates/autoaccess/Usernames.json'), 'utf8'));
+var templateUserAgents = JSON.parse(_fs.default.readFileSync(_path.default.resolve(_dirname, './templates/autoaccess/UserAgents.json'), 'utf8'));
+var templateIpAddresses = JSON.parse(_fs.default.readFileSync(_path.default.resolve(_dirname, './templates/autoaccess/IPAddresses.json'), 'utf8'));
+function getUniqueValues(values) {
+  return [...new Set(values)].filter(it => it);
+}
+function pickRandomValue(values) {
+  var finalValues = values.filter(it => it);
+  return finalValues[Math.floor(Math.random() * finalValues.length)];
+}
+function pickRandomNumber(max) {
+  return Math.ceil(Math.random() * max);
+}
+function pickRandomValues(values, picks) {
+  var finalValues = values.filter(it => it);
+  var result = [];
+  for (var i = 0; i < picks; i++) {
+    result.push(finalValues[Math.floor(Math.random() * finalValues.length)]);
+  }
+  return result;
+}
+function pickRandomUsername() {
+  var customUsernames = arguments.length > 0 && arguments[0] !== undefined ? arguments[0] : [];
+  var finalUsernames = getUniqueValues(customUsernames.concat(templateUsernames));
+  return pickRandomValue(finalUsernames);
+}
+function pickRandomUserAgent() {
+  var customUserAgents = arguments.length > 0 && arguments[0] !== undefined ? arguments[0] : [];
+  var finalUserAgents = getUniqueValues(customUserAgents.concat(templateUserAgents));
+  return pickRandomValue(finalUserAgents);
+}
+function pickRandomIPAddress() {
+  var customIPs = arguments.length > 0 && arguments[0] !== undefined ? arguments[0] : [];
+  var finalIPs = getUniqueValues(customIPs.concat(templateIpAddresses));
+  return pickRandomValue(finalIPs);
+}
+function sleep(ms) {
+  return new Promise(resolve => setTimeout(resolve, ms));
+}
+
+// generate auto access sample data
+function trainAA(_x20) {
+  return _trainAA.apply(this, arguments);
+} // suggested by John K.
+// export async function removeRealmNameFromManagedObjectLabels() {}
+// export async function addRealmNameToManagedObjectLabels() {}
+// export async function cleanUpPostmanArtifacts() {}
+// export async function createSampleThemes() {}
+function _trainAA() {
+  _trainAA = _asyncToGenerator(function* (_ref22) {
+    var {
+      apiKey,
+      apiSecret,
+      customUsernames = [],
+      customUserAgents = [],
+      customIPs = [],
+      loginsPerUser = 100,
+      service = 'Frodo-Train-AA',
+      state
+    } = _ref22;
+    (0, _Console.printMessage)({
+      message: "loginsPerUser: ".concat(loginsPerUser),
+      state
+    });
+    var usernames = getUniqueValues(customUsernames.concat(templateUsernames));
+    var _loop = function* _loop() {
+      var username = usernames[i];
+      var numDevices = pickRandomNumber(5);
+      var ipAddresses = pickRandomValues(customIPs.concat(templateIpAddresses), numDevices);
+      var ipAgentMap = {};
+      for (var j = 0; j < numDevices; j++) {
+        ipAgentMap[ipAddresses[j]] = pickRandomValue(customUserAgents.concat(templateUserAgents));
+      }
+      var requests = [];
+      var _loop2 = function* _loop2() {
+        var ipAddress = pickRandomValue(ipAddresses);
+        var userAgent = ipAgentMap[ipAddress];
+        var config = {
+          headers: {
+            'User-Agent': userAgent,
+            'X-Forwarded-For': ipAddress,
+            'X-OpenAM-Username': username,
+            'X-API-KEY': apiKey,
+            'X-API-SECRET': apiSecret
+          }
+        };
+        requests.push((0, _AuthenticateApi.step)({
+          body: {},
+          config,
+          realm: state.getRealm(),
+          service,
+          state
+        }).then(response => {
+          (0, _Console.printMessage)({
+            message: "".concat(username, ",").concat(ipAddress, ",").concat(userAgent, ",").concat(response.tokenId ? 'OK' : 'NOK'),
+            state
+          });
+        }).catch(error => {
+          (0, _Console.printMessage)({
+            message: "".concat(username, ",").concat(ipAddress, ",").concat(userAgent, ",").concat(error.message),
+            state
+          });
+        }));
+        yield Promise.allSettled(requests);
+        // try {
+        //   const response = await step({
+        //     body: {},
+        //     config,
+        //     realm: state.getRealm(),
+        //     service,
+        //     state,
+        //   });
+        //   printMessage({
+        //     message: `${username},${ipAddress},${userAgent},${
+        //       response.tokenId ? 'OK' : 'NOK'
+        //     }`,
+        //     state,
+        //   });
+        // } catch (error) {
+        //   printMessage({
+        //     message: `${username},${ipAddress},${userAgent},${error.message}`,
+        //     state,
+        //   });
+        // }
+      };
+      for (var _j = 0; _j < loginsPerUser; _j++) {
+        yield* _loop2();
+      }
+    };
+    for (var i = 0; i < 200; i++) {
+      yield* _loop();
+    }
+  });
+  return _trainAA.apply(this, arguments);
+}
 //# sourceMappingURL=AdminOps.js.map