@sasjs/api 0.3.0 → 0.4.0

package/README.md

@@ -9,7 +9,7 @@ The plan that this package implements is tracked in `sasjs/cli#1550`.
 
 ## What is in it
 
-**The route table** (`ROUTES`, `findRoute`) is every operation in the API - 31 paths, 60 operations - derived from `spec/swagger.yaml` by `npm run sync:routes`.
+**The route table** (`ROUTES`, `findRoute`) is every operation in the API - 31 paths, 61 operations - derived from `spec/swagger.yaml` by `npm run sync:routes`.
 The statuses come from that document and nowhere else: the overlay cannot add one, and an overlay entry naming a status the document does not state fails the build rather than describing a wish.
 The document cannot say everything a host needs, so the reviewed overlay adds the body each response carries, the capability a route needs, and whether this package implements it.
 Where the document is wrong, it is corrected in `sasjs/server` and re-vendored here - never worked around in the overlay.
@@ -89,6 +89,14 @@ Not implemented yet, in the order the plan sets: the rest of identity (`user`, `
 
 A status the document states but only a host can send - an account lockout (`429`), a provider failure (`500`), a session-store failure - is marked `hostResponses` in the overlay. It stays in the document, because a client still receives it, and is excluded from the parity check, whose other side is what this package answers; the host's own suite pins it.
 
+## What a host must do
+
+Three of the sign-in flow's defences are the host's, because the package has no request to read and no clock to trust:
+
+- **Re-resolve the caller on every request.** A host with its own session passes the subject in (`session`, `authorize`), so the service re-reads the account behind it and refuses a deactivated one; a host that caches the subject it resolved at sign-in defeats that check. `logout` is the exception and does not refuse: dropping a credential is not access, and refusing would leave the pair in the store.
+- **Lock the account out after repeated failures.** `POST /SASLogon/login` answers `401 Username is not found.` for an unknown username and `401 Invalid Password.` for a wrong one, because that is what the server's own form tells a user - which also means the route cannot tell a caller to stop guessing on its own. The defence is the host's limiter, answering `429` with `Retry-After` in seconds; without it the route is a way to enumerate usernames and account state.
+- **Answer a session-store or identity-provider failure with `500`.** Those are the host's own dependencies, and the overlay marks the statuses as `hostResponses`.
+
 ## Development
 
 ```bash

package/build/browser.js

@@ -1,4 +1,4 @@
-/* @sasjs/api 0.3.0 - the SASjs Server API, for a service worker. https://github.com/sasjs/api */
+/* @sasjs/api 0.4.0 - the SASjs Server API, for a service worker. https://github.com/sasjs/api */
 "use strict";
 var SASjsApi = (() => {
   var __defProp = Object.defineProperty;
@@ -744,6 +744,42 @@ var SASjsApi = (() => {
         }
       ]
     },
+    {
+      id: "DELETE /SASjsApi/drive/deploy",
+      method: "DELETE",
+      path: "/SASjsApi/drive/deploy",
+      tag: "Drive",
+      summary: "Remove an app stream entry",
+      params: [
+        {
+          name: "appLoc",
+          in: "body",
+          required: true,
+          type: "string"
+        },
+        {
+          name: "streamServiceName",
+          in: "body",
+          required: true,
+          type: "string"
+        }
+      ],
+      requestBodies: ["application/json"],
+      responses: [
+        {
+          status: 200,
+          description: "Ok"
+        },
+        {
+          status: 400,
+          description: "Invalid Format"
+        },
+        {
+          status: 404,
+          description: "No such app stream entry"
+        }
+      ]
+    },
     {
       id: "POST /SASjsApi/drive/deploy",
       method: "POST",
@@ -2094,6 +2130,15 @@ var SASjsApi = (() => {
     "POST /SASjsApi/drive/deploy/upload": {
       implemented: false
     },
+    // Unpublishing is the counterpart of the two above and lands with them: the
+    // document in sasjs/server states it (sasjs/server#543), so a host may answer
+    // it in the meantime, but this package cannot until the publish side it would
+    // invert is implemented here. The statuses are the document's; `404` is a pair
+    // - the registry name and the appLoc it was published from - that matches no
+    // entry, and the drive's content is deliberately left alone.
+    "DELETE /SASjsApi/drive/deploy": {
+      implemented: false
+    },
     // The lockout and the provider failure are answered before the package is
     // consulted (routes/web/web.ts in sasjs/server).
     "POST /SASLogon/login": {
@@ -2381,7 +2426,8 @@ var SASjsApi = (() => {
       if (!subject) throw unauthorized();
       if (!await store.client(clientId))
         throw new ApiError(403, "Invalid clientId.");
-      return store.issueCode({ userId: subject.userId, clientId });
+      const named = await liveSubject(store, subject);
+      return store.issueCode({ userId: named.userId, clientId });
     },
     async token({ clientId, code }) {
       const subject = await store.readCode(code);
@@ -2418,7 +2464,7 @@ var SASjsApi = (() => {
     async session(subject) {
       if (!subject) throw unauthorized();
       const user3 = await store.userById(subject.userId);
-      if (!user3) throw unauthorized();
+      if (!user3 || !user3.isActive) throw unauthorized();
       return asSession(user3);
     }
   });
@@ -2656,8 +2702,23 @@ var SASjsApi = (() => {
       const pair = this.pairs.get(keyOf(subject));
       return pair && pair[kind] === token ? subject : void 0;
     }
+    /**
+     * The subject's saved pair, while both of its tokens are still live.
+     *
+     * An exchange hands a saved pair back rather than rotating a second tab's
+     * tokens. That is only an answer if the pair can still be used: a saved pair
+     * whose access token has aged out would sign the caller in and then refuse
+     * every request it makes, so an aged-out pair is reported as absent and the
+     * exchange mints a fresh one. `live()` reads the issue-time expiry, which a
+     * seeded token does not carry - a seeded pair therefore never ages out here.
+     */
     async pairFor(subject) {
-      return this.pairs.get(keyOf(subject));
+      const pair = this.pairs.get(keyOf(subject));
+      if (!pair) return void 0;
+      const now = Date.now();
+      const access = this.access.get(pair.accessToken);
+      const refresh = this.refresh.get(pair.refreshToken);
+      return live(access, now) && live(refresh, now) ? pair : void 0;
     }
     async savePair(subject, pair) {
       this.pairs.set(keyOf(subject), pair);

package/build/cjs/identity/memory-store.js

@@ -149,8 +149,24 @@ class MemoryIdentityStore {
         const pair = this.pairs.get(keyOf(subject));
         return pair && pair[kind] === token ? subject : undefined;
     }
+    /**
+     * The subject's saved pair, while both of its tokens are still live.
+     *
+     * An exchange hands a saved pair back rather than rotating a second tab's
+     * tokens. That is only an answer if the pair can still be used: a saved pair
+     * whose access token has aged out would sign the caller in and then refuse
+     * every request it makes, so an aged-out pair is reported as absent and the
+     * exchange mints a fresh one. `live()` reads the issue-time expiry, which a
+     * seeded token does not carry - a seeded pair therefore never ages out here.
+     */
     async pairFor(subject) {
-        return this.pairs.get(keyOf(subject));
+        const pair = this.pairs.get(keyOf(subject));
+        if (!pair)
+            return undefined;
+        const now = Date.now();
+        const access = this.access.get(pair.accessToken);
+        const refresh = this.refresh.get(pair.refreshToken);
+        return live(access, now) && live(refresh, now) ? pair : undefined;
     }
     async savePair(subject, pair) {
         this.pairs.set(keyOf(subject), pair);

package/build/cjs/identity/service.js

@@ -72,7 +72,12 @@ const createIdentityService = (store) => ({
             throw unauthorized();
         if (!(await store.client(clientId)))
             throw new types_js_1.ApiError(403, 'Invalid clientId.');
-        return store.issueCode({ userId: subject.userId, clientId });
+        // A host resolves the caller once, at sign-in; the account may since have
+        // been deactivated. sasjs/server re-reads the user on every request and
+        // refuses an inactive one, so a session that outlived the account must not
+        // go on buying codes here.
+        const named = await liveSubject(store, subject);
+        return store.issueCode({ userId: named.userId, clientId });
     },
     async token({ clientId, code }) {
         // Read before claiming: a code presented with another client is refused
@@ -116,6 +121,10 @@ const createIdentityService = (store) => ({
     async logout(subject) {
         if (!subject)
             throw unauthorized();
+        // Deliberately no liveness check: the caller is asking for its credential to
+        // be dropped, and refusing would leave a pair in the store that nothing can
+        // use. Every path that READS the account refuses an inactive one, so a
+        // deactivated caller's sign-out is housekeeping rather than access.
         await store.deletePair(subject);
     },
     async logoutSession() {
@@ -124,8 +133,10 @@ const createIdentityService = (store) => ({
     async session(subject) {
         if (!subject)
             throw unauthorized();
+        // As with `authorize`: the account behind a host's session is re-read here,
+        // because the session outlives the account.
         const user = await store.userById(subject.userId);
-        if (!user)
+        if (!user || !user.isActive)
             throw unauthorized();
         return (0, exports.asSession)(user);
     }

package/build/cjs/routes/generated.js

@@ -400,6 +400,42 @@ exports.GENERATED_ROUTES = [
             }
         ]
     },
+    {
+        id: 'DELETE /SASjsApi/drive/deploy',
+        method: 'DELETE',
+        path: '/SASjsApi/drive/deploy',
+        tag: 'Drive',
+        summary: 'Remove an app stream entry',
+        params: [
+            {
+                name: 'appLoc',
+                in: 'body',
+                required: true,
+                type: 'string'
+            },
+            {
+                name: 'streamServiceName',
+                in: 'body',
+                required: true,
+                type: 'string'
+            }
+        ],
+        requestBodies: ['application/json'],
+        responses: [
+            {
+                status: 200,
+                description: 'Ok'
+            },
+            {
+                status: 400,
+                description: 'Invalid Format'
+            },
+            {
+                status: 404,
+                description: 'No such app stream entry'
+            }
+        ]
+    },
     {
         id: 'POST /SASjsApi/drive/deploy',
         method: 'POST',

package/build/cjs/routes/overlay.js

@@ -77,6 +77,15 @@ exports.OVERLAY = {
     'POST /SASjsApi/drive/deploy/upload': {
         implemented: false
     },
+    // Unpublishing is the counterpart of the two above and lands with them: the
+    // document in sasjs/server states it (sasjs/server#543), so a host may answer
+    // it in the meantime, but this package cannot until the publish side it would
+    // invert is implemented here. The statuses are the document's; `404` is a pair
+    // - the registry name and the appLoc it was published from - that matches no
+    // entry, and the drive's content is deliberately left alone.
+    'DELETE /SASjsApi/drive/deploy': {
+        implemented: false
+    },
     // The lockout and the provider failure are answered before the package is
     // consulted (routes/web/web.ts in sasjs/server).
     'POST /SASLogon/login': {

package/build/esm/identity/memory-store.d.ts

@@ -41,6 +41,16 @@ export declare class MemoryIdentityStore implements IdentityStore {
     readAccess(token: string): Promise<Subject | undefined>;
     readRefresh(token: string): Promise<Subject | undefined>;
     private current;
+    /**
+     * The subject's saved pair, while both of its tokens are still live.
+     *
+     * An exchange hands a saved pair back rather than rotating a second tab's
+     * tokens. That is only an answer if the pair can still be used: a saved pair
+     * whose access token has aged out would sign the caller in and then refuse
+     * every request it makes, so an aged-out pair is reported as absent and the
+     * exchange mints a fresh one. `live()` reads the issue-time expiry, which a
+     * seeded token does not carry - a seeded pair therefore never ages out here.
+     */
     pairFor(subject: Subject): Promise<TokenPair | undefined>;
     savePair(subject: Subject, pair: TokenPair): Promise<void>;
     deletePair(subject: Subject): Promise<void>;

package/build/esm/identity/memory-store.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"memory-store.d.ts","sourceRoot":"","sources":["../../../src/identity/memory-store.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AACH,OAAO,KAAK,EACV,cAAc,EACd,aAAa,EACb,YAAY,EACZ,OAAO,EACP,SAAS,EACV,MAAM,YAAY,CAAA;AACnB,OAAO,EAGL,KAAK,eAAe,EACrB,MAAM,cAAc,CAAA;AAyDrB;;;;;GAKG;AACH,qBAAa,mBAAoB,YAAW,aAAa;IACvD,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAqB;IAC3C,OAAO,CAAC,QAAQ,CAAC,SAAS,CAA4B;IACtD,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAoC;IAC5D,OAAO,CAAC,QAAQ,CAAC,KAAK,CAA+B;IACrD,OAAO,CAAC,QAAQ,CAAC,MAAM,CAA4B;IACnD,OAAO,CAAC,QAAQ,CAAC,OAAO,CAA4B;IACpD,OAAO,CAAC,QAAQ,CAAC,KAAK,CAA4B;IAClD,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAoB;gBAEhC,OAAO,GAAE,eAAkC;IAsDjD,UAAU,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,YAAY,GAAG,SAAS,CAAC;IAI/D,QAAQ,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,YAAY,GAAG,SAAS,CAAC;IAI9D,0EAA0E;IACpE,eAAe,CACnB,IAAI,EAAE,YAAY,EAClB,QAAQ,EAAE,MAAM,GACf,OAAO,CAAC,OAAO,CAAC;IAIb,MAAM,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,cAAc,GAAG,SAAS,CAAC;IAI7D,KAAK,CAAC,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,cAAc,GAAG,OAAO,CAAC,SAAS,CAAC;IAoBzE;;;;;OAKG;IACG,UAAU,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,GAAG,SAAS,CAAC;IAIvD,WAAW,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,GAAG,SAAS,CAAC;IAI9D,OAAO,CAAC,OAAO;IAeT,OAAO,CAAC,OAAO,EAAE,OAAO,GAAG,OAAO,CAAC,SAAS,GAAG,SAAS,CAAC;IAIzD,QAAQ,CAAC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,GAAG,OAAO,CAAC,IAAI,CAAC;IAI1D,UAAU,CAAC,OAAO,EAAE,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC;IAI3C,SAAS,CAAC,OAAO,EAAE,OAAO,GAAG,OAAO,CAAC,MAAM,CAAC;IAS5C,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,GAAG,SAAS,CAAC;IAIpD,SAAS,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;CAKhD"}
+{"version":3,"file":"memory-store.d.ts","sourceRoot":"","sources":["../../../src/identity/memory-store.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AACH,OAAO,KAAK,EACV,cAAc,EACd,aAAa,EACb,YAAY,EACZ,OAAO,EACP,SAAS,EACV,MAAM,YAAY,CAAA;AACnB,OAAO,EAGL,KAAK,eAAe,EACrB,MAAM,cAAc,CAAA;AAyDrB;;;;;GAKG;AACH,qBAAa,mBAAoB,YAAW,aAAa;IACvD,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAqB;IAC3C,OAAO,CAAC,QAAQ,CAAC,SAAS,CAA4B;IACtD,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAoC;IAC5D,OAAO,CAAC,QAAQ,CAAC,KAAK,CAA+B;IACrD,OAAO,CAAC,QAAQ,CAAC,MAAM,CAA4B;IACnD,OAAO,CAAC,QAAQ,CAAC,OAAO,CAA4B;IACpD,OAAO,CAAC,QAAQ,CAAC,KAAK,CAA4B;IAClD,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAoB;gBAEhC,OAAO,GAAE,eAAkC;IAsDjD,UAAU,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,YAAY,GAAG,SAAS,CAAC;IAI/D,QAAQ,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,YAAY,GAAG,SAAS,CAAC;IAI9D,0EAA0E;IACpE,eAAe,CACnB,IAAI,EAAE,YAAY,EAClB,QAAQ,EAAE,MAAM,GACf,OAAO,CAAC,OAAO,CAAC;IAIb,MAAM,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,cAAc,GAAG,SAAS,CAAC;IAI7D,KAAK,CAAC,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,cAAc,GAAG,OAAO,CAAC,SAAS,CAAC;IAoBzE;;;;;OAKG;IACG,UAAU,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,GAAG,SAAS,CAAC;IAIvD,WAAW,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,GAAG,SAAS,CAAC;IAI9D,OAAO,CAAC,OAAO;IAef;;;;;;;;;OASG;IACG,OAAO,CAAC,OAAO,EAAE,OAAO,GAAG,OAAO,CAAC,SAAS,GAAG,SAAS,CAAC;IAWzD,QAAQ,CAAC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,GAAG,OAAO,CAAC,IAAI,CAAC;IAI1D,UAAU,CAAC,OAAO,EAAE,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC;IAI3C,SAAS,CAAC,OAAO,EAAE,OAAO,GAAG,OAAO,CAAC,MAAM,CAAC;IAS5C,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,GAAG,SAAS,CAAC;IAIpD,SAAS,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;CAKhD"}

package/build/esm/identity/memory-store.js

@@ -146,8 +146,24 @@ export class MemoryIdentityStore {
         const pair = this.pairs.get(keyOf(subject));
         return pair && pair[kind] === token ? subject : undefined;
     }
+    /**
+     * The subject's saved pair, while both of its tokens are still live.
+     *
+     * An exchange hands a saved pair back rather than rotating a second tab's
+     * tokens. That is only an answer if the pair can still be used: a saved pair
+     * whose access token has aged out would sign the caller in and then refuse
+     * every request it makes, so an aged-out pair is reported as absent and the
+     * exchange mints a fresh one. `live()` reads the issue-time expiry, which a
+     * seeded token does not carry - a seeded pair therefore never ages out here.
+     */
     async pairFor(subject) {
-        return this.pairs.get(keyOf(subject));
+        const pair = this.pairs.get(keyOf(subject));
+        if (!pair)
+            return undefined;
+        const now = Date.now();
+        const access = this.access.get(pair.accessToken);
+        const refresh = this.refresh.get(pair.refreshToken);
+        return live(access, now) && live(refresh, now) ? pair : undefined;
     }
     async savePair(subject, pair) {
         this.pairs.set(keyOf(subject), pair);

package/build/esm/identity/service.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"service.d.ts","sourceRoot":"","sources":["../../../src/identity/service.ts"],"names":[],"mappings":"AAWA,OAAO,KAAK,EACV,aAAa,EACb,YAAY,EACZ,OAAO,EACP,SAAS,EACV,MAAM,YAAY,CAAA;AAEnB,MAAM,WAAW,WAAW;IAC1B,QAAQ,EAAE,OAAO,CAAA;IACjB,IAAI,EAAE;QACJ,GAAG,EAAE,MAAM,CAAA;QACX,QAAQ,EAAE,MAAM,CAAA;QAChB,WAAW,EAAE,MAAM,CAAA;QACnB,OAAO,EAAE,OAAO,CAAA;QAChB,qBAAqB,EAAE,OAAO,CAAA;KAC/B,CAAA;CACF;AAED,MAAM,WAAW,aAAa;IAC5B,GAAG,EAAE,MAAM,CAAA;IACX,QAAQ,EAAE,MAAM,CAAA;IAChB,WAAW,EAAE,MAAM,CAAA;IACnB,OAAO,EAAE,OAAO,CAAA;IAChB,qBAAqB,EAAE,OAAO,CAAA;CAC/B;AAED,MAAM,WAAW,eAAe;IAC9B;;;OAGG;IACH,YAAY,CAAC,KAAK,EAAE,MAAM,GAAG,SAAS,GAAG,OAAO,CAAC,OAAO,GAAG,SAAS,CAAC,CAAA;IACrE,KAAK,CAAC,WAAW,EAAE;QACjB,QAAQ,EAAE,MAAM,CAAA;QAChB,QAAQ,EAAE,MAAM,CAAA;KACjB,GAAG,OAAO,CAAC,WAAW,CAAC,CAAA;IACxB,sEAAsE;IACtE,SAAS,CAAC,OAAO,EAAE,OAAO,GAAG,SAAS,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAA;IAC1E,iDAAiD;IACjD,KAAK,CAAC,OAAO,EAAE;QAAE,QAAQ,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,SAAS,CAAC,CAAA;IACtE,uDAAuD;IACvD,OAAO,CAAC,KAAK,EAAE,MAAM,GAAG,SAAS,GAAG,OAAO,CAAC,SAAS,CAAC,CAAA;IACtD,sEAAsE;IACtE,MAAM,CAAC,OAAO,EAAE,OAAO,GAAG,SAAS,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IACnD,iFAAiF;IACjF,aAAa,IAAI,OAAO,CAAC,MAAM,CAAC,CAAA;IAChC,yDAAyD;IACzD,OAAO,CAAC,OAAO,EAAE,OAAO,GAAG,SAAS,GAAG,OAAO,CAAC,aAAa,CAAC,CAAA;CAC9D;AAsBD,eAAO,MAAM,qBAAqB,GAChC,OAAO,aAAa,KACnB,eAiHD,CAAA;AAEF,kDAAkD;AAClD,eAAO,MAAM,SAAS,GAAI,MAAM,YAAY,KAAG,aAM7C,CAAA"}
+{"version":3,"file":"service.d.ts","sourceRoot":"","sources":["../../../src/identity/service.ts"],"names":[],"mappings":"AAWA,OAAO,KAAK,EACV,aAAa,EACb,YAAY,EACZ,OAAO,EACP,SAAS,EACV,MAAM,YAAY,CAAA;AAEnB,MAAM,WAAW,WAAW;IAC1B,QAAQ,EAAE,OAAO,CAAA;IACjB,IAAI,EAAE;QACJ,GAAG,EAAE,MAAM,CAAA;QACX,QAAQ,EAAE,MAAM,CAAA;QAChB,WAAW,EAAE,MAAM,CAAA;QACnB,OAAO,EAAE,OAAO,CAAA;QAChB,qBAAqB,EAAE,OAAO,CAAA;KAC/B,CAAA;CACF;AAED,MAAM,WAAW,aAAa;IAC5B,GAAG,EAAE,MAAM,CAAA;IACX,QAAQ,EAAE,MAAM,CAAA;IAChB,WAAW,EAAE,MAAM,CAAA;IACnB,OAAO,EAAE,OAAO,CAAA;IAChB,qBAAqB,EAAE,OAAO,CAAA;CAC/B;AAED,MAAM,WAAW,eAAe;IAC9B;;;OAGG;IACH,YAAY,CAAC,KAAK,EAAE,MAAM,GAAG,SAAS,GAAG,OAAO,CAAC,OAAO,GAAG,SAAS,CAAC,CAAA;IACrE,KAAK,CAAC,WAAW,EAAE;QACjB,QAAQ,EAAE,MAAM,CAAA;QAChB,QAAQ,EAAE,MAAM,CAAA;KACjB,GAAG,OAAO,CAAC,WAAW,CAAC,CAAA;IACxB,sEAAsE;IACtE,SAAS,CAAC,OAAO,EAAE,OAAO,GAAG,SAAS,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAA;IAC1E,iDAAiD;IACjD,KAAK,CAAC,OAAO,EAAE;QAAE,QAAQ,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,SAAS,CAAC,CAAA;IACtE,uDAAuD;IACvD,OAAO,CAAC,KAAK,EAAE,MAAM,GAAG,SAAS,GAAG,OAAO,CAAC,SAAS,CAAC,CAAA;IACtD,sEAAsE;IACtE,MAAM,CAAC,OAAO,EAAE,OAAO,GAAG,SAAS,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IACnD,iFAAiF;IACjF,aAAa,IAAI,OAAO,CAAC,MAAM,CAAC,CAAA;IAChC,yDAAyD;IACzD,OAAO,CAAC,OAAO,EAAE,OAAO,GAAG,SAAS,GAAG,OAAO,CAAC,aAAa,CAAC,CAAA;CAC9D;AAsBD,eAAO,MAAM,qBAAqB,GAChC,OAAO,aAAa,KACnB,eA6HD,CAAA;AAEF,kDAAkD;AAClD,eAAO,MAAM,SAAS,GAAI,MAAM,YAAY,KAAG,aAM7C,CAAA"}

package/build/esm/identity/service.js

@@ -69,7 +69,12 @@ export const createIdentityService = (store) => ({
             throw unauthorized();
         if (!(await store.client(clientId)))
             throw new ApiError(403, 'Invalid clientId.');
-        return store.issueCode({ userId: subject.userId, clientId });
+        // A host resolves the caller once, at sign-in; the account may since have
+        // been deactivated. sasjs/server re-reads the user on every request and
+        // refuses an inactive one, so a session that outlived the account must not
+        // go on buying codes here.
+        const named = await liveSubject(store, subject);
+        return store.issueCode({ userId: named.userId, clientId });
     },
     async token({ clientId, code }) {
         // Read before claiming: a code presented with another client is refused
@@ -113,6 +118,10 @@ export const createIdentityService = (store) => ({
     async logout(subject) {
         if (!subject)
             throw unauthorized();
+        // Deliberately no liveness check: the caller is asking for its credential to
+        // be dropped, and refusing would leave a pair in the store that nothing can
+        // use. Every path that READS the account refuses an inactive one, so a
+        // deactivated caller's sign-out is housekeeping rather than access.
         await store.deletePair(subject);
     },
     async logoutSession() {
@@ -121,8 +130,10 @@ export const createIdentityService = (store) => ({
     async session(subject) {
         if (!subject)
             throw unauthorized();
+        // As with `authorize`: the account behind a host's session is re-read here,
+        // because the session outlives the account.
         const user = await store.userById(subject.userId);
-        if (!user)
+        if (!user || !user.isActive)
             throw unauthorized();
         return asSession(user);
     }

package/build/esm/routes/generated.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"generated.d.ts","sourceRoot":"","sources":["../../../src/routes/generated.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AACH,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,aAAa,CAAA;AAEjD,eAAO,MAAM,gBAAgB,EAAE,cAAc,EA6oD5C,CAAA"}
+{"version":3,"file":"generated.d.ts","sourceRoot":"","sources":["../../../src/routes/generated.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AACH,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,aAAa,CAAA;AAEjD,eAAO,MAAM,gBAAgB,EAAE,cAAc,EAirD5C,CAAA"}

package/build/esm/routes/generated.js

@@ -397,6 +397,42 @@ export const GENERATED_ROUTES = [
             }
         ]
     },
+    {
+        id: 'DELETE /SASjsApi/drive/deploy',
+        method: 'DELETE',
+        path: '/SASjsApi/drive/deploy',
+        tag: 'Drive',
+        summary: 'Remove an app stream entry',
+        params: [
+            {
+                name: 'appLoc',
+                in: 'body',
+                required: true,
+                type: 'string'
+            },
+            {
+                name: 'streamServiceName',
+                in: 'body',
+                required: true,
+                type: 'string'
+            }
+        ],
+        requestBodies: ['application/json'],
+        responses: [
+            {
+                status: 200,
+                description: 'Ok'
+            },
+            {
+                status: 400,
+                description: 'Invalid Format'
+            },
+            {
+                status: 404,
+                description: 'No such app stream entry'
+            }
+        ]
+    },
     {
         id: 'POST /SASjsApi/drive/deploy',
         method: 'POST',

package/build/esm/routes/overlay.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"overlay.d.ts","sourceRoot":"","sources":["../../../src/routes/overlay.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,OAAO,KAAK,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,aAAa,CAAA;AAEzD,MAAM,WAAW,YAAY;IAC3B,YAAY,CAAC,EAAE,UAAU,EAAE,CAAA;IAC3B,WAAW,CAAC,EAAE,OAAO,CAAA;IACrB;;;;;;;OAOG;IACH,aAAa,CAAC,EAAE,MAAM,EAAE,CAAA;IACxB;;;OAGG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;CACpC;AAED,kFAAkF;AAClF,eAAO,MAAM,gBAAgB,EAAE,MAAM,CAAC,MAAM,EAAE,UAAU,EAAE,CAczD,CAAA;AAYD,eAAO,MAAM,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,YAAY,CAoFhD,CAAA;AAED,wEAAwE;AACxE,eAAO,MAAM,OAAO,EAAE,UAAU,EAA8C,CAAA"}
+{"version":3,"file":"overlay.d.ts","sourceRoot":"","sources":["../../../src/routes/overlay.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,OAAO,KAAK,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,aAAa,CAAA;AAEzD,MAAM,WAAW,YAAY;IAC3B,YAAY,CAAC,EAAE,UAAU,EAAE,CAAA;IAC3B,WAAW,CAAC,EAAE,OAAO,CAAA;IACrB;;;;;;;OAOG;IACH,aAAa,CAAC,EAAE,MAAM,EAAE,CAAA;IACxB;;;OAGG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;CACpC;AAED,kFAAkF;AAClF,eAAO,MAAM,gBAAgB,EAAE,MAAM,CAAC,MAAM,EAAE,UAAU,EAAE,CAczD,CAAA;AAYD,eAAO,MAAM,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,YAAY,CA6FhD,CAAA;AAED,wEAAwE;AACxE,eAAO,MAAM,OAAO,EAAE,UAAU,EAA8C,CAAA"}

package/build/esm/routes/overlay.js

@@ -74,6 +74,15 @@ export const OVERLAY = {
     'POST /SASjsApi/drive/deploy/upload': {
         implemented: false
     },
+    // Unpublishing is the counterpart of the two above and lands with them: the
+    // document in sasjs/server states it (sasjs/server#543), so a host may answer
+    // it in the meantime, but this package cannot until the publish side it would
+    // invert is implemented here. The statuses are the document's; `404` is a pair
+    // - the registry name and the appLoc it was published from - that matches no
+    // entry, and the drive's content is deliberately left alone.
+    'DELETE /SASjsApi/drive/deploy': {
+        implemented: false
+    },
     // The lockout and the provider failure are answered before the package is
     // consulted (routes/web/web.ts in sasjs/server).
     'POST /SASLogon/login': {

package/build/esm/types.d.ts

@@ -72,8 +72,12 @@ export interface Route extends GeneratedRoute {
      * the host's limiter, a provider failure is its identity provider. The corpus
      * does not answer them, so the parity check compares the document without
      * them; the host's own suite pins them.
+     *
+     * Optional, and read as empty when absent: a host that builds a `Route` of its
+     * own is describing the document, not the lockout, and requiring the field
+     * made every such value a compile error.
      */
-    hostResponses: number[];
+    hostResponses?: number[];
     capabilities: Capability[];
     /**
      * Whether this package carries a handler for the operation. A host may still

package/build/esm/types.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/types.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH;;;;GAIG;AACH,qBAAa,QAAS,SAAQ,KAAK;IAK/B,QAAQ,CAAC,MAAM,EAAE,MAAM;IAJzB,wEAAwE;IACxE,QAAQ,CAAC,QAAQ,QAAO;gBAGb,MAAM,EAAE,MAAM,EACvB,OAAO,EAAE,MAAM;CAKlB;AAED;;;;;GAKG;AACH,eAAO,MAAM,UAAU,GAAI,OAAO,OAAO,KAAG,KAAK,IAAI,QACH,CAAA;AAElD;;;;;;;;GAQG;AACH,MAAM,MAAM,UAAU,GAClB,SAAS,GACT,SAAS,GACT,UAAU,GACV,KAAK,GACL,MAAM,CAAA;AAEV,MAAM,MAAM,UAAU,GAAG,KAAK,GAAG,MAAM,GAAG,OAAO,GAAG,QAAQ,GAAG,KAAK,CAAA;AAEpE,MAAM,MAAM,aAAa,GAAG,OAAO,GAAG,MAAM,GAAG,MAAM,GAAG,UAAU,GAAG,QAAQ,CAAA;AAE7E,MAAM,WAAW,UAAU;IACzB,IAAI,EAAE,MAAM,CAAA;IACZ,EAAE,EAAE,aAAa,CAAA;IACjB,QAAQ,EAAE,OAAO,CAAA;IACjB,yDAAyD;IACzD,IAAI,EAAE,MAAM,CAAA;IACZ,IAAI,CAAC,EAAE,MAAM,EAAE,CAAA;CAChB;AAED,MAAM,WAAW,aAAa;IAC5B,MAAM,EAAE,MAAM,CAAA;IACd,WAAW,EAAE,MAAM,CAAA;IACnB,qEAAqE;IACrE,IAAI,CAAC,EAAE,OAAO,CAAA;CACf;AAED,8DAA8D;AAC9D,MAAM,WAAW,cAAc;IAC7B,EAAE,EAAE,MAAM,CAAA;IACV,MAAM,EAAE,UAAU,CAAA;IAClB,IAAI,EAAE,MAAM,CAAA;IACZ,GAAG,EAAE,MAAM,CAAA;IACX,OAAO,EAAE,MAAM,CAAA;IACf,MAAM,EAAE,UAAU,EAAE,CAAA;IACpB,aAAa,EAAE,MAAM,EAAE,CAAA;IACvB,SAAS,EAAE,KAAK,CAAC;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,WAAW,EAAE,MAAM,CAAA;KAAE,CAAC,CAAA;CAC1D;AAED,MAAM,WAAW,KAAM,SAAQ,cAAc;IAC3C,SAAS,EAAE,aAAa,EAAE,CAAA;IAC1B;;;;;OAKG;IACH,aAAa,EAAE,MAAM,EAAE,CAAA;IACvB,YAAY,EAAE,UAAU,EAAE,CAAA;IAC1B;;;;OAIG;IACH,WAAW,EAAE,OAAO,CAAA;CACrB;AAED;;;;;;;;GAQG;AACH,MAAM,WAAW,UAAU;IACzB,IAAI,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,UAAU,CAAC,CAAA;IAChD,KAAK,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IACjE,MAAM,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAA;IACtC,IAAI,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC;QAAE,SAAS,EAAE,OAAO,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC,CAAA;IACjE,IAAI,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC;QAAE,KAAK,EAAE,MAAM,EAAE,CAAC;QAAC,OAAO,EAAE,MAAM,EAAE,CAAA;KAAE,CAAC,CAAA;IACnE,MAAM,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IACnC,4DAA4D;IAC5D,MAAM,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IACnC,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;CAC9C;AAED,MAAM,WAAW,QAAQ;IACvB,IAAI,EAAE,MAAM,CAAA;IACZ,YAAY,EAAE,MAAM,CAAA;IACpB,QAAQ,EAAE,OAAO,CAAA;IACjB,QAAQ,EAAE,QAAQ,EAAE,CAAA;CACrB"}
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/types.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH;;;;GAIG;AACH,qBAAa,QAAS,SAAQ,KAAK;IAK/B,QAAQ,CAAC,MAAM,EAAE,MAAM;IAJzB,wEAAwE;IACxE,QAAQ,CAAC,QAAQ,QAAO;gBAGb,MAAM,EAAE,MAAM,EACvB,OAAO,EAAE,MAAM;CAKlB;AAED;;;;;GAKG;AACH,eAAO,MAAM,UAAU,GAAI,OAAO,OAAO,KAAG,KAAK,IAAI,QACH,CAAA;AAElD;;;;;;;;GAQG;AACH,MAAM,MAAM,UAAU,GAClB,SAAS,GACT,SAAS,GACT,UAAU,GACV,KAAK,GACL,MAAM,CAAA;AAEV,MAAM,MAAM,UAAU,GAAG,KAAK,GAAG,MAAM,GAAG,OAAO,GAAG,QAAQ,GAAG,KAAK,CAAA;AAEpE,MAAM,MAAM,aAAa,GAAG,OAAO,GAAG,MAAM,GAAG,MAAM,GAAG,UAAU,GAAG,QAAQ,CAAA;AAE7E,MAAM,WAAW,UAAU;IACzB,IAAI,EAAE,MAAM,CAAA;IACZ,EAAE,EAAE,aAAa,CAAA;IACjB,QAAQ,EAAE,OAAO,CAAA;IACjB,yDAAyD;IACzD,IAAI,EAAE,MAAM,CAAA;IACZ,IAAI,CAAC,EAAE,MAAM,EAAE,CAAA;CAChB;AAED,MAAM,WAAW,aAAa;IAC5B,MAAM,EAAE,MAAM,CAAA;IACd,WAAW,EAAE,MAAM,CAAA;IACnB,qEAAqE;IACrE,IAAI,CAAC,EAAE,OAAO,CAAA;CACf;AAED,8DAA8D;AAC9D,MAAM,WAAW,cAAc;IAC7B,EAAE,EAAE,MAAM,CAAA;IACV,MAAM,EAAE,UAAU,CAAA;IAClB,IAAI,EAAE,MAAM,CAAA;IACZ,GAAG,EAAE,MAAM,CAAA;IACX,OAAO,EAAE,MAAM,CAAA;IACf,MAAM,EAAE,UAAU,EAAE,CAAA;IACpB,aAAa,EAAE,MAAM,EAAE,CAAA;IACvB,SAAS,EAAE,KAAK,CAAC;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,WAAW,EAAE,MAAM,CAAA;KAAE,CAAC,CAAA;CAC1D;AAED,MAAM,WAAW,KAAM,SAAQ,cAAc;IAC3C,SAAS,EAAE,aAAa,EAAE,CAAA;IAC1B;;;;;;;;;OASG;IACH,aAAa,CAAC,EAAE,MAAM,EAAE,CAAA;IACxB,YAAY,EAAE,UAAU,EAAE,CAAA;IAC1B;;;;OAIG;IACH,WAAW,EAAE,OAAO,CAAA;CACrB;AAED;;;;;;;;GAQG;AACH,MAAM,WAAW,UAAU;IACzB,IAAI,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,UAAU,CAAC,CAAA;IAChD,KAAK,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IACjE,MAAM,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAA;IACtC,IAAI,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC;QAAE,SAAS,EAAE,OAAO,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC,CAAA;IACjE,IAAI,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC;QAAE,KAAK,EAAE,MAAM,EAAE,CAAC;QAAC,OAAO,EAAE,MAAM,EAAE,CAAA;KAAE,CAAC,CAAA;IACnE,MAAM,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IACnC,4DAA4D;IAC5D,MAAM,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IACnC,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;CAC9C;AAED,MAAM,WAAW,QAAQ;IACvB,IAAI,EAAE,MAAM,CAAA;IACZ,YAAY,EAAE,MAAM,CAAA;IACpB,QAAQ,EAAE,OAAO,CAAA;IACjB,QAAQ,EAAE,QAAQ,EAAE,CAAA;CACrB"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@sasjs/api",
-  "version": "0.3.0",
+  "version": "0.4.0",
   "description": "The SASjs Server API, described once - a generated route table, the services behind it, and the conformance corpus both hosts run",
   "license": "MIT",
   "author": "SASjs",