@schemavaults/auth-server-sdk 0.17.2 → 0.17.6

package/dist/JwtKeyManager/RemoteJwtKeyManager/RemoteJwtKeyManager.d.ts

@@ -1,11 +1,11 @@
 import type { IJwtKeyManager } from "../../JwtKeyManager/IJwtKeyManager";
 import type { JWKS } from "@schemavaults/jwt";
 export interface IRemoteJwtKeyManagerConstructorOpts {
-    auth_server_uri: string;
+    auth_server_uri?: string;
 }
 export declare class RemoteJwtKeyManager implements IJwtKeyManager {
     private readonly auth_server_uri;
-    constructor({ auth_server_uri }: IRemoteJwtKeyManagerConstructorOpts);
+    constructor({ auth_server_uri, }: IRemoteJwtKeyManagerConstructorOpts);
     loadJwks(audienceId: string): Promise<JWKS>;
 }
 export default RemoteJwtKeyManager;

package/dist/JwtKeyManager/RemoteJwtKeyManager/RemoteJwtKeyManager.js

@@ -1,8 +1,9 @@
 import loadRemoteJwks from "./loadRemoteJwks";
 import { apiServerIdSchema, SCHEMAVAULTS_AUTH_APP_DEFINITION, } from "@schemavaults/app-definitions";
+import getSchemaVaultsAuthServerUri from "../../get-schemavaults-auth-server-uri";
 export class RemoteJwtKeyManager {
     auth_server_uri;
-    constructor({ auth_server_uri }) {
+    constructor({ auth_server_uri = getSchemaVaultsAuthServerUri(), }) {
         this.auth_server_uri = auth_server_uri;
     }
     async loadJwks(audienceId) {

package/dist/JwtKeyManager/RemoteJwtKeyManager/RemoteJwtKeyManager.js.map

@@ -1 +1 @@
-{"version":3,"file":"RemoteJwtKeyManager.js","sourceRoot":"","sources":["../../../src/JwtKeyManager/RemoteJwtKeyManager/RemoteJwtKeyManager.ts"],"names":[],"mappings":"AAEA,OAAO,cAAc,MAAM,kBAAkB,CAAC;AAC9C,OAAO,EACL,iBAAiB,EACjB,gCAAgC,GACjC,MAAM,+BAA+B,CAAC;AAMvC,MAAM,OAAO,mBAAmB;IACb,eAAe,CAAS;IAEzC,YAAmB,EAAE,eAAe,EAAuC;QACzE,IAAI,CAAC,eAAe,GAAG,eAAe,CAAC;IACzC,CAAC;IAEM,KAAK,CAAC,QAAQ,CAAC,UAAkB;QACtC,IAAI,CAAC,iBAAiB,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC,OAAO,EAAE,CAAC;YACrD,MAAM,IAAI,KAAK,CACb,8CAA8C,UAAU,GAAG,CAC5D,CAAC;QACJ,CAAC;QAED,IAAI,UAAU,KAAK,gCAAgC,CAAC,MAAM,EAAE,CAAC;YAC3D,MAAM,IAAI,KAAK,CACb,wEAAwE,CACzE,CAAC;QACJ,CAAC;QAED,OAAO,MAAM,cAAc,CAAC;YAC1B,eAAe,EAAE,IAAI,CAAC,eAAe;SACtC,CAAC,CAAC;IACL,CAAC;CACF;AAED,eAAe,mBAAmB,CAAC"}
+{"version":3,"file":"RemoteJwtKeyManager.js","sourceRoot":"","sources":["../../../src/JwtKeyManager/RemoteJwtKeyManager/RemoteJwtKeyManager.ts"],"names":[],"mappings":"AAEA,OAAO,cAAc,MAAM,kBAAkB,CAAC;AAC9C,OAAO,EACL,iBAAiB,EACjB,gCAAgC,GACjC,MAAM,+BAA+B,CAAC;AACvC,OAAO,4BAA4B,MAAM,oCAAoC,CAAC;AAM9E,MAAM,OAAO,mBAAmB;IACb,eAAe,CAAS;IAEzC,YAAmB,EACjB,eAAe,GAAG,4BAA4B,EAAE,GACZ;QACpC,IAAI,CAAC,eAAe,GAAG,eAAe,CAAC;IACzC,CAAC;IAEM,KAAK,CAAC,QAAQ,CAAC,UAAkB;QACtC,IAAI,CAAC,iBAAiB,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC,OAAO,EAAE,CAAC;YACrD,MAAM,IAAI,KAAK,CACb,8CAA8C,UAAU,GAAG,CAC5D,CAAC;QACJ,CAAC;QAED,IAAI,UAAU,KAAK,gCAAgC,CAAC,MAAM,EAAE,CAAC;YAC3D,MAAM,IAAI,KAAK,CACb,wEAAwE,CACzE,CAAC;QACJ,CAAC;QAED,OAAO,MAAM,cAAc,CAAC;YAC1B,eAAe,EAAE,IAAI,CAAC,eAAe;SACtC,CAAC,CAAC;IACL,CAAC;CACF;AAED,eAAe,mBAAmB,CAAC"}

package/dist/JwtKeyManager/loadJwtDecodingKeys.js

@@ -1,38 +1,69 @@
 import { apiServerIdSchema } from "@schemavaults/app-definitions";
 import { importAsymmetricJWK } from "@schemavaults/jwt";
 export async function loadJwtDecodingKeysFromJwks({ keyset_id, jwks, }, debug = false) {
-    const verification_kid = `${keyset_id}-verification`;
-    const decryption_kid = `${keyset_id}-decryption`;
+    if (jwks.keys.length === 0) {
+        throw new Error("JWKS appears to be empty, cannot extract decoding keys from empty set!");
+    }
+    // Loop over keys in JWKS and find the required keys
     let verification_key = undefined;
     let decryption_key = undefined;
+    function allRequiredKeysFound() {
+        return verification_key && decryption_key ? true : false;
+    }
     for (const key of jwks.keys) {
         const kid = key.kid;
         if (typeof kid !== "string") {
             throw new TypeError(`Invalid JWK in JWKS; missing 'kid' string!`);
         }
-        if (kid === verification_kid) {
+        if (kid === `${keyset_id}-verification`) {
             verification_key = await importAsymmetricJWK(key);
+            if (allRequiredKeysFound()) {
+                break; // exit early if keys have been found
+            }
+            else {
+                continue;
+            }
         }
-        else if (kid === decryption_kid) {
+        else if (kid === `${keyset_id}-decryption`) {
             decryption_key = await importAsymmetricJWK(key);
+            if (allRequiredKeysFound()) {
+                break; // exit early if keys have been found
+            }
+            else {
+                continue;
+            }
         }
         else {
             continue; // not a match
         }
     }
-    if (!verification_key || !decryption_key) {
-        if (debug) {
-            console.group(`loadJwtDecodingKeysFromJwks(keyset_id=${keyset_id}) failed due to missing verification_key or decryption_key`);
-            console.error("jwks.keys[].kid = ", jwks.keys.map((k) => `'${k.kid}'`).join(", "));
-            console.groupEnd();
-        }
-        throw new Error(`Missing verification or decryption key for keyset '${keyset_id}'`);
+    const foundRequiredDecodingKeys = allRequiredKeysFound();
+    if (foundRequiredDecodingKeys && verification_key && decryption_key) {
+        return {
+            keyset_id,
+            verification_key,
+            decryption_key,
+        };
+    }
+    // Else, not all keys were found-- handle failure gracefully
+    const listOfKidsInJwks = jwks.keys
+        .map((k) => `'${k.kid}'`)
+        .join(", ");
+    if (!verification_key && !decryption_key) {
+        console.error(`Missing both verification and decryption keys for keyset '${keyset_id}' from available keys: `, listOfKidsInJwks);
+        throw new Error(`Missing both verification and decryption keys for keyset '${keyset_id}'`);
+    }
+    else if (!verification_key) {
+        console.error(`Missing verification key for keyset '${keyset_id}' from available keys: `, listOfKidsInJwks);
+        throw new Error(`Missing verification key for keyset '${keyset_id}'`);
+    }
+    else if (!decryption_key) {
+        console.error(`Missing decryption key for keyset '${keyset_id}' from available keys: `, listOfKidsInJwks);
+        throw new Error(`Missing decryption key for keyset '${keyset_id}'`);
+    }
+    else {
+        throw new Error("Error handling missing JWT decoding keys gracefully!");
     }
-    return {
-        keyset_id,
-        verification_key,
-        decryption_key,
-    };
 }
 export async function loadJwtDecodingKeys({ keys_manager, keyset_id, audience_id, ...opts }) {
     const debug = opts.debug ?? false;
@@ -46,7 +77,8 @@ export async function loadJwtDecodingKeys({ keys_manager, keyset_id, audience_id
         !Array.isArray(jwks.keys)) {
         throw new TypeError("Invalid JWKS; not an object or missing 'keys' array!");
     }
-    return await loadJwtDecodingKeysFromJwks({ keyset_id, jwks }, debug);
+    const jwt_decoding_keys = await loadJwtDecodingKeysFromJwks({ keyset_id, jwks }, debug);
+    return jwt_decoding_keys;
 }
 export default loadJwtDecodingKeys;
 //# sourceMappingURL=loadJwtDecodingKeys.js.map

package/dist/JwtKeyManager/loadJwtDecodingKeys.js.map

@@ -1 +1 @@
-{"version":3,"file":"loadJwtDecodingKeys.js","sourceRoot":"","sources":["../../src/JwtKeyManager/loadJwtDecodingKeys.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,iBAAiB,EAAE,MAAM,+BAA+B,CAAC;AAClE,OAAO,EAAa,mBAAmB,EAAE,MAAM,mBAAmB,CAAC;AAenE,MAAM,CAAC,KAAK,UAAU,2BAA2B,CAC/C,EACE,SAAS,EACT,IAAI,GAIL,EACD,QAAiB,KAAK;IAEtB,MAAM,gBAAgB,GAAW,GAAG,SAAS,eAAe,CAAC;IAC7D,MAAM,cAAc,GAAW,GAAG,SAAS,aAAa,CAAC;IACzD,IAAI,gBAAgB,GAA0B,SAAS,CAAC;IACxD,IAAI,cAAc,GAA0B,SAAS,CAAC;IACtD,KAAK,MAAM,GAAG,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;QAC5B,MAAM,GAAG,GAAG,GAAG,CAAC,GAAG,CAAC;QACpB,IAAI,OAAO,GAAG,KAAK,QAAQ,EAAE,CAAC;YAC5B,MAAM,IAAI,SAAS,CAAC,4CAA4C,CAAC,CAAC;QACpE,CAAC;QACD,IAAI,GAAG,KAAK,gBAAgB,EAAE,CAAC;YAC7B,gBAAgB,GAAG,MAAM,mBAAmB,CAAC,GAAG,CAAC,CAAC;QACpD,CAAC;aAAM,IAAI,GAAG,KAAK,cAAc,EAAE,CAAC;YAClC,cAAc,GAAG,MAAM,mBAAmB,CAAC,GAAG,CAAC,CAAC;QAClD,CAAC;aAAM,CAAC;YACN,SAAS,CAAC,cAAc;QAC1B,CAAC;IACH,CAAC;IAED,IAAI,CAAC,gBAAgB,IAAI,CAAC,cAAc,EAAE,CAAC;QACzC,IAAI,KAAK,EAAE,CAAC;YACV,OAAO,CAAC,KAAK,CACX,yCAAyC,SAAS,4DAA4D,CAC/G,CAAC;YACF,OAAO,CAAC,KAAK,CACX,oBAAoB,EACpB,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,GAAG,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAC9C,CAAC;YACF,OAAO,CAAC,QAAQ,EAAE,CAAC;QACrB,CAAC;QACD,MAAM,IAAI,KAAK,CACb,sDAAsD,SAAS,GAAG,CACnE,CAAC;IACJ,CAAC;IAED,OAAO;QACL,SAAS;QACT,gBAAgB;QAChB,cAAc;KACf,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,mBAAmB,CAAC,EACxC,YAAY,EACZ,SAAS,EACT,WAAW,EACX,GAAG,IAAI,EACqB;IAC5B,MAAM,KAAK,GAAY,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC;IAE3C,IAAI,CAAC,iBAAiB,CAAC,SAAS,CAAC,WAAW,CAAC,CAAC,OAAO,EAAE,CAAC;QACtD,MAAM,IAAI,KAAK,CACb,uDAAuD,WAAW,GAAG,CACtE,CAAC;IACJ,CAAC;IAED,MAAM,IAAI,GAAS,MAAM,YAAY,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;IAC5D,IACE,CAAC,IAAI;QACL,OAAO,IAAI,KAAK,QAAQ;QACxB,CAAC,CAAC,MAAM,IAAI,IAAI,CAAC;QACjB,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EACzB,CAAC;QACD,MAAM,IAAI,SAAS,CAAC,sDAAsD,CAAC,CAAC;IAC9E,CAAC;IAED,OAAO,MAAM,2BAA2B,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,EAAE,KAAK,CAAC,CAAC;AACvE,CAAC;AAED,eAAe,mBAAmB,CAAC"}
+{"version":3,"file":"loadJwtDecodingKeys.js","sourceRoot":"","sources":["../../src/JwtKeyManager/loadJwtDecodingKeys.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,iBAAiB,EAAE,MAAM,+BAA+B,CAAC;AAClE,OAAO,EAAa,mBAAmB,EAAE,MAAM,mBAAmB,CAAC;AAenE,MAAM,CAAC,KAAK,UAAU,2BAA2B,CAC/C,EACE,SAAS,EACT,IAAI,GAIL,EACD,QAAiB,KAAK;IAEtB,IAAI,IAAI,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC3B,MAAM,IAAI,KAAK,CACb,wEAAwE,CACzE,CAAC;IACJ,CAAC;IAED,oDAAoD;IACpD,IAAI,gBAAgB,GAA0B,SAAS,CAAC;IACxD,IAAI,cAAc,GAA0B,SAAS,CAAC;IACtD,SAAS,oBAAoB;QAC3B,OAAO,gBAAgB,IAAI,cAAc,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC;IAC3D,CAAC;IACD,KAAK,MAAM,GAAG,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;QAC5B,MAAM,GAAG,GAAG,GAAG,CAAC,GAAG,CAAC;QACpB,IAAI,OAAO,GAAG,KAAK,QAAQ,EAAE,CAAC;YAC5B,MAAM,IAAI,SAAS,CAAC,4CAA4C,CAAC,CAAC;QACpE,CAAC;QACD,IAAI,GAAG,KAAK,GAAG,SAAS,eAAe,EAAE,CAAC;YACxC,gBAAgB,GAAG,MAAM,mBAAmB,CAAC,GAAG,CAAC,CAAC;YAClD,IAAI,oBAAoB,EAAE,EAAE,CAAC;gBAC3B,MAAM,CAAC,qCAAqC;YAC9C,CAAC;iBAAM,CAAC;gBACN,SAAS;YACX,CAAC;QACH,CAAC;aAAM,IAAI,GAAG,KAAK,GAAG,SAAS,aAAa,EAAE,CAAC;YAC7C,cAAc,GAAG,MAAM,mBAAmB,CAAC,GAAG,CAAC,CAAC;YAChD,IAAI,oBAAoB,EAAE,EAAE,CAAC;gBAC3B,MAAM,CAAC,qCAAqC;YAC9C,CAAC;iBAAM,CAAC;gBACN,SAAS;YACX,CAAC;QACH,CAAC;aAAM,CAAC;YACN,SAAS,CAAC,cAAc;QAC1B,CAAC;IACH,CAAC;IAED,MAAM,yBAAyB,GAAY,oBAAoB,EAAE,CAAC;IAClE,IAAI,yBAAyB,IAAI,gBAAgB,IAAI,cAAc,EAAE,CAAC;QACpE,OAAO;YACL,SAAS;YACT,gBAAgB;YAChB,cAAc;SACgB,CAAC;IACnC,CAAC;IAED,4DAA4D;IAE5D,MAAM,gBAAgB,GAAW,IAAI,CAAC,IAAI;SACvC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,GAAG,GAAG,CAAC;SACxB,IAAI,CAAC,IAAI,CAAC,CAAC;IACd,IAAI,CAAC,gBAAgB,IAAI,CAAC,cAAc,EAAE,CAAC;QACzC,OAAO,CAAC,KAAK,CACX,6DAA6D,SAAS,yBAAyB,EAC/F,gBAAgB,CACjB,CAAC;QACF,MAAM,IAAI,KAAK,CACb,6DAA6D,SAAS,GAAG,CAC1E,CAAC;IACJ,CAAC;SAAM,IAAI,CAAC,gBAAgB,EAAE,CAAC;QAC7B,OAAO,CAAC,KAAK,CACX,wCAAwC,SAAS,yBAAyB,EAC1E,gBAAgB,CACjB,CAAC;QACF,MAAM,IAAI,KAAK,CAAC,wCAAwC,SAAS,GAAG,CAAC,CAAC;IACxE,CAAC;SAAM,IAAI,CAAC,cAAc,EAAE,CAAC;QAC3B,OAAO,CAAC,KAAK,CACX,sCAAsC,SAAS,yBAAyB,EACxE,gBAAgB,CACjB,CAAC;QACF,MAAM,IAAI,KAAK,CAAC,sCAAsC,SAAS,GAAG,CAAC,CAAC;IACtE,CAAC;SAAM,CAAC;QACN,MAAM,IAAI,KAAK,CAAC,sDAAsD,CAAC,CAAC;IAC1E,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,mBAAmB,CAAC,EACxC,YAAY,EACZ,SAAS,EACT,WAAW,EACX,GAAG,IAAI,EACqB;IAC5B,MAAM,KAAK,GAAY,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC;IAE3C,IAAI,CAAC,iBAAiB,CAAC,SAAS,CAAC,WAAW,CAAC,CAAC,OAAO,EAAE,CAAC;QACtD,MAAM,IAAI,KAAK,CACb,uDAAuD,WAAW,GAAG,CACtE,CAAC;IACJ,CAAC;IAED,MAAM,IAAI,GAAS,MAAM,YAAY,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;IAC5D,IACE,CAAC,IAAI;QACL,OAAO,IAAI,KAAK,QAAQ;QACxB,CAAC,CAAC,MAAM,IAAI,IAAI,CAAC;QACjB,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EACzB,CAAC;QACD,MAAM,IAAI,SAAS,CAAC,sDAAsD,CAAC,CAAC;IAC9E,CAAC;IAED,MAAM,iBAAiB,GACrB,MAAM,2BAA2B,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,EAAE,KAAK,CAAC,CAAC;IAEhE,OAAO,iBAAiB,CAAC;AAC3B,CAAC;AAED,eAAe,mBAAmB,CAAC"}

package/dist/MaximumBrowserCookieSize.d.ts

@@ -0,0 +1,3 @@
+declare const MaximumBrowserCookieSize = 4096;
+export { MaximumBrowserCookieSize };
+export default MaximumBrowserCookieSize;

package/dist/MaximumBrowserCookieSize.js

@@ -0,0 +1,4 @@
+const MaximumBrowserCookieSize = 4096; // 4KB
+export { MaximumBrowserCookieSize };
+export default MaximumBrowserCookieSize;
+//# sourceMappingURL=MaximumBrowserCookieSize.js.map

package/dist/MaximumBrowserCookieSize.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"MaximumBrowserCookieSize.js","sourceRoot":"","sources":["../src/MaximumBrowserCookieSize.ts"],"names":[],"mappings":"AAAA,MAAM,wBAAwB,GAAG,IAAI,CAAC,CAAC,MAAM;AAE7C,OAAO,EAAE,wBAAwB,EAAE,CAAC;AACpC,eAAe,wBAAwB,CAAC"}

package/dist/RefreshTokenCookieNames.d.ts

@@ -0,0 +1,3 @@
+export declare const RefreshTokenCookieName: "refresh_token";
+export declare const RefreshTokenExpiryCookieName: "refresh_token_expiry";
+export default RefreshTokenCookieName;

package/dist/RefreshTokenCookieNames.js

@@ -0,0 +1,4 @@
+export const RefreshTokenCookieName = "refresh_token";
+export const RefreshTokenExpiryCookieName = "refresh_token_expiry";
+export default RefreshTokenCookieName;
+//# sourceMappingURL=RefreshTokenCookieNames.js.map

package/dist/RefreshTokenCookieNames.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"RefreshTokenCookieNames.js","sourceRoot":"","sources":["../src/RefreshTokenCookieNames.ts"],"names":[],"mappings":"AACA,MAAM,CAAC,MAAM,sBAAsB,GAAG,eAAyC,CAAC;AAChF,MAAM,CAAC,MAAM,4BAA4B,GAAG,sBAAgD,CAAC;AAE7F,eAAe,sBAAsB,CAAC"}

package/dist/auth-server-error-message-catalog.d.ts

@@ -0,0 +1,5 @@
+declare const ERROR_IDS: readonly ["unknown", "app_id_not_found", "unauthenticated", "forbidden", "load_user_data_failure", "internal_server_error"];
+export type SchemaVaultsAuthErrorId = (typeof ERROR_IDS)[number];
+export declare const ERROR_MESSAGE_CATALOG: Record<SchemaVaultsAuthErrorId, string>;
+export declare function isValidErrorId(id: string): id is SchemaVaultsAuthErrorId;
+export {};

package/dist/auth-server-error-message-catalog.js

@@ -0,0 +1,20 @@
+const ERROR_IDS = [
+    "unknown",
+    "app_id_not_found",
+    "unauthenticated",
+    "forbidden",
+    "load_user_data_failure",
+    "internal_server_error",
+];
+export const ERROR_MESSAGE_CATALOG = {
+    unknown: "An unknown error occurred",
+    app_id_not_found: "App with specified ID not found!",
+    unauthenticated: "Failed to authenticate to figure out who you are! Try logging in again or contacting support...",
+    forbidden: "Oops! You don't have permission to do that action! Get in touch with support if you believe this is a mistake!",
+    load_user_data_failure: "There was an error loading data associated with your SchemaVaults account!",
+    internal_server_error: "There was a problem in the SchemaVaults backend logic and something caused a crash!",
+};
+export function isValidErrorId(id) {
+    return ERROR_IDS.includes(id);
+}
+//# sourceMappingURL=auth-server-error-message-catalog.js.map

package/dist/auth-server-error-message-catalog.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth-server-error-message-catalog.js","sourceRoot":"","sources":["../src/auth-server-error-message-catalog.ts"],"names":[],"mappings":"AAAA,MAAM,SAAS,GAAG;IAChB,SAAS;IACT,kBAAkB;IAClB,iBAAiB;IACjB,WAAW;IACX,wBAAwB;IACxB,uBAAuB;CACa,CAAC;AAIvC,MAAM,CAAC,MAAM,qBAAqB,GAA4C;IAC5E,OAAO,EAAE,2BAA2B;IACpC,gBAAgB,EAAE,kCAAkC;IACpD,eAAe,EACb,iGAAiG;IACnG,SAAS,EACP,gHAAgH;IAClH,sBAAsB,EACpB,4EAA4E;IAC9E,qBAAqB,EACnB,qFAAqF;CACxF,CAAC;AAEF,MAAM,UAAU,cAAc,CAAC,EAAU;IACvC,OAAO,SAAS,CAAC,QAAQ,CAAC,EAA8C,CAAC,CAAC;AAC5E,CAAC"}

package/dist/get-schemavaults-api-server-id.d.ts

@@ -0,0 +1,8 @@
+import { type ApiServerId } from "@schemavaults/app-definitions";
+export { type ApiServerId } from "@schemavaults/app-definitions";
+/**
+ * @returns Parsed value of process.env.SCHEMAVAULTS_API_SERVER_ID
+ */
+declare function getSchemavaultsApiServerId(): ApiServerId;
+export { getSchemavaultsApiServerId };
+export default getSchemavaultsApiServerId;

package/dist/get-schemavaults-api-server-id.js

@@ -0,0 +1,19 @@
+import { apiServerIdSchema, } from "@schemavaults/app-definitions";
+/**
+ * @returns Parsed value of process.env.SCHEMAVAULTS_API_SERVER_ID
+ */
+function getSchemavaultsApiServerId() {
+    const apiServerIdEnvVar = process.env.SCHEMAVAULTS_API_SERVER_ID;
+    if (apiServerIdEnvVar && typeof apiServerIdEnvVar === "string") {
+        if (!apiServerIdSchema.safeParse(apiServerIdEnvVar).success) {
+            throw new TypeError("Invalid API server ID to use from 'SCHEMAVAULTS_API_SERVER_ID' environment variable!");
+        }
+        return apiServerIdEnvVar;
+    }
+    else {
+        throw new TypeError("Environment variable 'SCHEMAVAULTS_API_SERVER_ID' is not set!");
+    }
+}
+export { getSchemavaultsApiServerId };
+export default getSchemavaultsApiServerId;
+//# sourceMappingURL=get-schemavaults-api-server-id.js.map

package/dist/get-schemavaults-api-server-id.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"get-schemavaults-api-server-id.js","sourceRoot":"","sources":["../src/get-schemavaults-api-server-id.ts"],"names":[],"mappings":"AAAA,OAAO,EAEL,iBAAiB,GAClB,MAAM,+BAA+B,CAAC;AAGvC;;GAEG;AACH,SAAS,0BAA0B;IACjC,MAAM,iBAAiB,GACrB,OAAO,CAAC,GAAG,CAAC,0BAA0B,CAAC;IACzC,IAAI,iBAAiB,IAAI,OAAO,iBAAiB,KAAK,QAAQ,EAAE,CAAC;QAC/D,IAAI,CAAC,iBAAiB,CAAC,SAAS,CAAC,iBAAiB,CAAC,CAAC,OAAO,EAAE,CAAC;YAC5D,MAAM,IAAI,SAAS,CACjB,sFAAsF,CACvF,CAAC;QACJ,CAAC;QACD,OAAO,iBAAiB,CAAC;IAC3B,CAAC;SAAM,CAAC;QACN,MAAM,IAAI,SAAS,CACjB,+DAA+D,CAChE,CAAC;IACJ,CAAC;AACH,CAAC;AAED,OAAO,EAAE,0BAA0B,EAAE,CAAC;AACtC,eAAe,0BAA0B,CAAC"}

package/dist/get-schemavaults-auth-server-uri.d.ts

@@ -0,0 +1 @@
+export default function getSchemaVaultsAuthServerUri(): string;

package/dist/get-schemavaults-auth-server-uri.js

@@ -0,0 +1,21 @@
+import { getAppEnvironment, } from "@schemavaults/app-definitions/get-app-environment";
+import { getHardcodedClientWebAppDomain, SCHEMAVAULTS_AUTH_APP_DEFINITION, } from "@schemavaults/app-definitions";
+export default function getSchemaVaultsAuthServerUri() {
+    const environment = getAppEnvironment();
+    if (process.env.SCHEMAVAULTS_AUTH_SERVER_URI &&
+        typeof process.env.SCHEMAVAULTS_AUTH_SERVER_URI === "string" &&
+        process.env.SCHEMAVAULTS_AUTH_SERVER_URI.length > 0) {
+        if (!process.env.SCHEMAVAULTS_AUTH_SERVER_URI.startsWith("http://") &&
+            !process.env.SCHEMAVAULTS_AUTH_SERVER_URI.startsWith("https://")) {
+            throw new TypeError("Expected auth server URI to to use HTTP or HTTPS!");
+        }
+        if (environment !== "development" &&
+            environment !== "test" &&
+            !process.env.SCHEMAVAULTS_AUTH_SERVER_URI.startsWith("https://")) {
+            throw new Error("Expected auth server URI to use https in production/staging environments!");
+        }
+        return process.env.SCHEMAVAULTS_AUTH_SERVER_URI;
+    }
+    return getHardcodedClientWebAppDomain(SCHEMAVAULTS_AUTH_APP_DEFINITION.app_id, environment);
+}
+//# sourceMappingURL=get-schemavaults-auth-server-uri.js.map

package/dist/get-schemavaults-auth-server-uri.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"get-schemavaults-auth-server-uri.js","sourceRoot":"","sources":["../src/get-schemavaults-auth-server-uri.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,iBAAiB,GAElB,MAAM,mDAAmD,CAAC;AAC3D,OAAO,EACL,8BAA8B,EAC9B,gCAAgC,GACjC,MAAM,+BAA+B,CAAC;AAEvC,MAAM,CAAC,OAAO,UAAU,4BAA4B;IAClD,MAAM,WAAW,GAA+B,iBAAiB,EAAE,CAAC;IACpE,IACE,OAAO,CAAC,GAAG,CAAC,4BAA4B;QACxC,OAAO,OAAO,CAAC,GAAG,CAAC,4BAA4B,KAAK,QAAQ;QAC5D,OAAO,CAAC,GAAG,CAAC,4BAA4B,CAAC,MAAM,GAAG,CAAC,EACnD,CAAC;QACD,IACE,CAAC,OAAO,CAAC,GAAG,CAAC,4BAA4B,CAAC,UAAU,CAAC,SAAS,CAAC;YAC/D,CAAC,OAAO,CAAC,GAAG,CAAC,4BAA4B,CAAC,UAAU,CAAC,UAAU,CAAC,EAChE,CAAC;YACD,MAAM,IAAI,SAAS,CAAC,mDAAmD,CAAC,CAAC;QAC3E,CAAC;QAED,IACE,WAAW,KAAK,aAAa;YAC7B,WAAW,KAAK,MAAM;YACtB,CAAC,OAAO,CAAC,GAAG,CAAC,4BAA4B,CAAC,UAAU,CAAC,UAAU,CAAC,EAChE,CAAC;YACD,MAAM,IAAI,KAAK,CACb,2EAA2E,CAC5E,CAAC;QACJ,CAAC;QACD,OAAO,OAAO,CAAC,GAAG,CAAC,4BAA4B,CAAC;IAClD,CAAC;IAED,OAAO,8BAA8B,CACnC,gCAAgC,CAAC,MAAM,EACvC,WAAW,CACZ,CAAC;AACJ,CAAC"}

package/dist/getStringByteSize.d.ts

@@ -0,0 +1 @@
+export default function getStringByteSize(str: string): number;

package/dist/getStringByteSize.js

@@ -0,0 +1,4 @@
+export default function getStringByteSize(str) {
+    return new Blob([str]).size;
+}
+//# sourceMappingURL=getStringByteSize.js.map

package/dist/getStringByteSize.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"getStringByteSize.js","sourceRoot":"","sources":["../src/getStringByteSize.ts"],"names":[],"mappings":"AAAA,MAAM,CAAC,OAAO,UAAU,iBAAiB,CAAC,GAAW;IACnD,OAAO,IAAI,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC;AAC9B,CAAC"}

package/dist/index.d.ts

@@ -6,3 +6,13 @@ export * from "./JwtKeyManager";
 export type * from "./JwtKeyManager";
 export * from "./DatabaseResourceGroup";
 export type * from "./DatabaseResourceGroup";
+export { redirectWithError } from "./redirect-with-error";
+export type * from "./redirect-with-error";
+export { ERROR_MESSAGE_CATALOG, isValidErrorId, } from "./auth-server-error-message-catalog";
+export type { SchemaVaultsAuthErrorId } from "./auth-server-error-message-catalog";
+import MaximumBrowserCookieSize from "./MaximumBrowserCookieSize";
+export { MaximumBrowserCookieSize };
+export { getSchemavaultsApiServerId } from "./get-schemavaults-api-server-id";
+export type { ApiServerId } from "@schemavaults/app-definitions";
+export { RefreshTokenCookieName, RefreshTokenExpiryCookieName, } from "./RefreshTokenCookieNames";
+export { default as getStringByteSize } from "./getStringByteSize";

package/dist/index.js

@@ -2,4 +2,11 @@ export * from "./middleware";
 export * from "./route_guards";
 export * from "./JwtKeyManager";
 export * from "./DatabaseResourceGroup";
+export { redirectWithError } from "./redirect-with-error";
+export { ERROR_MESSAGE_CATALOG, isValidErrorId, } from "./auth-server-error-message-catalog";
+import MaximumBrowserCookieSize from "./MaximumBrowserCookieSize";
+export { MaximumBrowserCookieSize };
+export { getSchemavaultsApiServerId } from "./get-schemavaults-api-server-id";
+export { RefreshTokenCookieName, RefreshTokenExpiryCookieName, } from "./RefreshTokenCookieNames";
+export { default as getStringByteSize } from "./getStringByteSize";
 //# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,cAAc,cAAc,CAAC;AAG7B,cAAc,gBAAgB,CAAC;AAG/B,cAAc,iBAAiB,CAAC;AAGhC,cAAc,yBAAyB,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,cAAc,cAAc,CAAC;AAG7B,cAAc,gBAAgB,CAAC;AAG/B,cAAc,iBAAiB,CAAC;AAGhC,cAAc,yBAAyB,CAAC;AAGxC,OAAO,EAAE,iBAAiB,EAAE,MAAM,uBAAuB,CAAC;AAG1D,OAAO,EACL,qBAAqB,EACrB,cAAc,GACf,MAAM,qCAAqC,CAAC;AAG7C,OAAO,wBAAwB,MAAM,4BAA4B,CAAC;AAClE,OAAO,EAAE,wBAAwB,EAAE,CAAC;AAEpC,OAAO,EAAE,0BAA0B,EAAE,MAAM,kCAAkC,CAAC;AAG9E,OAAO,EACL,sBAAsB,EACtB,4BAA4B,GAC7B,MAAM,2BAA2B,CAAC;AAEnC,OAAO,EAAE,OAAO,IAAI,iBAAiB,EAAE,MAAM,qBAAqB,CAAC"}

package/dist/middleware/middlewares/withAuthJwtValidation/withAuthJwtValidation.js

@@ -2,7 +2,7 @@ import { AuthMiddleware, defaultAuthMiddlewareRules, determineAuthStatus, audien
 import { decodeJWT, getKeysetIdFromToken, } from "@schemavaults/jwt";
 import { apiServerIdSchema, } from "@schemavaults/app-definitions";
 import BaseMiddleware from "../BaseMiddleware";
-import loadJwtDecodingKeys from "../../../JwtKeyManager/loadJwtDecodingKeys";
+import doLoadJwtDecodingKeys from "../../../JwtKeyManager/loadJwtDecodingKeys";
 class AuthJwtValidationMiddleware extends BaseMiddleware {
     audience;
     middleware_rules;
@@ -25,11 +25,12 @@ class AuthJwtValidationMiddleware extends BaseMiddleware {
     }
     async loadJwtDecodingKeys(keyset_id) {
         const audience_id = this.audience;
-        const decoding_keys = await loadJwtDecodingKeys({
+        const debug = this.debug;
+        const decoding_keys = await doLoadJwtDecodingKeys({
             keyset_id,
             keys_manager: this.keys_manager,
             audience_id,
-            debug: this.debug,
+            debug,
         });
         return decoding_keys;
     }

package/dist/middleware/middlewares/withAuthJwtValidation/withAuthJwtValidation.js.map

@@ -1 +1 @@
-{"version":3,"file":"withAuthJwtValidation.js","sourceRoot":"","sources":["../../../../src/middleware/middlewares/withAuthJwtValidation/withAuthJwtValidation.ts"],"names":[],"mappings":"AACA,OAAO,EACL,cAAc,EAGd,0BAA0B,EAC1B,mBAAmB,EAGnB,cAAc,GAGf,MAAM,2BAA2B,CAAC;AACnC,OAAO,EAEL,SAAS,EACT,oBAAoB,GACrB,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EACL,iBAAiB,GAElB,MAAM,+BAA+B,CAAC;AAMvC,OAAO,cAAc,MAAM,8BAA8B,CAAC;AAE1D,OAAO,mBAEN,MAAM,qCAAqC,CAAC;AAe7C,MAAM,2BACJ,SAAQ,cAAc;IAGL,QAAQ,CAAS;IACjB,gBAAgB,CAAsB;IACtC,YAAY,CAAiB;IAE9C,YAAmB,EACjB,IAAI,EACJ,QAAQ,EACR,GAAG,IAAI,EAC0B;QACjC,KAAK,CAAC;YACJ,GAAG,IAAI;YACP,IAAI,EAAE,6BAAsC;YAC5C,IAAI;SACL,CAAC,CAAC;QAEH,IAAI,OAAO,QAAQ,KAAK,QAAQ,EAAE,CAAC;YACjC,MAAM,IAAI,KAAK,CACb,yFAAyF,CAC1F,CAAC;QACJ,CAAC;aAAM,IAAI,CAAC,iBAAiB,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC,OAAO,EAAE,CAAC;YAC1D,MAAM,IAAI,SAAS,CACjB,sDAAsD,CACvD,CAAC;QACJ,CAAC;QAED,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAC;QACzB,IAAI,CAAC,gBAAgB,GAAG,IAAI,CAAC,gBAAgB,IAAI,0BAA0B,CAAC;QAC5E,IAAI,CAAC,YAAY,GAAG,IAAI,CAAC,YAAY,CAAC;IACxC,CAAC;IAES,KAAK,CAAC,mBAAmB,CACjC,SAAiB;QAEjB,MAAM,WAAW,GAAW,IAAI,CAAC,QAAQ,CAAC;QAC1C,MAAM,aAAa,GAAyB,MAAM,mBAAmB,CAAC;YACpE,SAAS;YACT,YAAY,EAAE,IAAI,CAAC,YAAY;YAC/B,WAAW;YACX,KAAK,EAAE,IAAI,CAAC,KAAK;SAClB,CAAC,CAAC;QACH,OAAO,aAAa,CAAC;IACvB,CAAC;IAEM,KAAK,CAAC,MAAM,CAAC,EAClB,GAAG,EACH,IAAI,EACJ,QAAQ,EACR,GAAG,MAAM,EACuB;QAChC,MAAM,WAAW,GAA+B,IAAI,CAAC,WAAW,CAAC;QACjE,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;YACf,OAAO,CAAC,GAAG,CACT,IAAI,IAAI,CAAC,IAAI,uCAAuC,GAAG,CAAC,OAAO,CAAC,QAAQ,GAAG,CAC5E,CAAC;QACJ,CAAC;QAED,IAAI,GAAG,CAAC,OAAO,CAAC,IAAI,GAAG,EAAE,EAAE,CAAC;YAC1B,OAAO,CAAC,KAAK,CAAC,IAAI,IAAI,CAAC,IAAI,sBAAsB,EAAE,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;YACrE,OAAO,IAAI,CACT;gBACE,KAAK,EAAE,IAAI;gBACX,OAAO,EAAE,KAAK;gBACd,OAAO,EAAE,uCAAuC;aACjD,EACD,EAAE,MAAM,EAAE,GAAG,EAAE,CAChB,CAAC;QACJ,CAAC;QAED,0DAA0D;QAC1D,MAAM,aAAa,GAAkC,EAAE,CAAC;QAExD,2BAA2B;QAC3B,IAAI,aAAa,GACf,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC,EAAE,KAAK,CAAC;QAC1C,IAAI,YAAY,GACd,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,EAAE,KAAK,CAAC;QAEzC,IAAI,OAAO,aAAa,KAAK,QAAQ,EAAE,CAAC;YACtC,aAAa,CAAC,IAAI,CAAC;gBACjB,KAAK,EAAE,aAAa;gBACpB,IAAI,EAAE,SAAS;gBACf,UAAU,EAAE,sBAAsB;aACnC,CAAC,CAAC;QACL,CAAC;QAED,IAAI,OAAO,YAAY,KAAK,QAAQ,EAAE,CAAC;YACrC,aAAa,CAAC,IAAI,CAAC;gBACjB,KAAK,EAAE,YAAY;gBACnB,IAAI,EAAE,QAAQ;gBACd,UAAU,EAAE,qBAAqB;aAClC,CAAC,CAAC;QACL,CAAC;QAED,IAAI,wBAAwB,GAAuB,SAAS,CAAC;QAC7D,MAAM,mBAAmB,GACvB,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC;YAChC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC;YAChC,IAAI,CAAC;QACP,IAAI,OAAO,mBAAmB,KAAK,QAAQ,EAAE,CAAC;YAC5C,MAAM,YAAY,GAAG,SAAkB,CAAC;YACxC,IAAI,mBAAmB,CAAC,UAAU,CAAC,YAAY,CAAC,EAAE,CAAC;gBACjD,IAAI,mBAAmB,CAAC,MAAM,GAAG,YAAY,CAAC,MAAM,EAAE,CAAC;oBACrD,MAAM,aAAa,GAAW,mBAAmB,CAAC,KAAK,CACrD,YAAY,CAAC,MAAM,CACpB,CAAC;oBACF,wBAAwB,GAAG,aAA8B,CAAC;gBAC5D,CAAC;YACH,CAAC;QACH,CAAC;QAED,IAAI,OAAO,wBAAwB,KAAK,QAAQ,EAAE,CAAC;YACjD,aAAa,CAAC,IAAI,CAAC;gBACjB,KAAK,EAAE,wBAAwB;gBAC/B,IAAI,EAAE,QAAQ;gBACd,UAAU,EAAE,0CAA0C;aACvD,CAAC,CAAC;QACL,CAAC;QAED,MAAM,YAAY,GAAG,IAAI,CAAC,QAAQ,CAAC;QACnC,MAAM,mBAAmB,GACvB,MAAM,cAAc,CAAC,cAAc,CAAC,YAAY,CAAC,CAAC;QACpD,IAAI,CAAC,mBAAmB,CAAC,OAAO,EAAE,CAAC;YACjC,OAAO,CAAC,KAAK,CAAC,mBAAmB,CAAC,KAAK,CAAC,CAAC;YACzC,MAAM,IAAI,KAAK,CACb,mEAAmE,CACpE,CAAC;QACJ,CAAC;QAED,IAAI,UAA+C,CAAC;QACpD,IAAI,CAAC;YACH,MAAM,iCAAiC,GAAG;gBACxC,WAAW,EAAE,QAAiB;gBAC9B,aAAa;gBACb,KAAK,EAAE,IAAI,CAAC,KAAuB;aACkC,CAAC;YAExE,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;gBACf,OAAO,CAAC,GAAG,CACT,sEAAsE,EACtE,iCAAiC,CAClC,CAAC;YACJ,CAAC;YAED,UAAU,GAAG,MAAM,mBAAmB,CAAC;gBACrC,GAAG,iCAAiC;gBACpC,SAAS,EAAE,KAAK,EAAE,EAChB,KAAK,EACL,IAAI,EACJ,YAAY,GACb,EAA+C,EAAE;oBAChD,IAAI,SAAiB,CAAC;oBACtB,IAAI,CAAC;wBACH,SAAS,GAAG,oBAAoB,CAAC,KAAK,CAAC,CAAC;oBAC1C,CAAC;oBAAC,OAAO,CAAU,EAAE,CAAC;wBACpB,OAAO,CAAC,KAAK,CAAC,8CAA8C,EAAE,CAAC,CAAC,CAAC;wBACjE,MAAM,IAAI,KAAK,CAAC,6CAA6C,CAAC,CAAC;oBACjE,CAAC;oBAED,IAAI,YAAkC,CAAC;oBACvC,IAAI,CAAC;wBACH,YAAY,GAAG,MAAM,IAAI,CAAC,mBAAmB,CAAC,SAAS,CAAC,CAAC;wBACzD,IAAI,YAAY,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;4BACzC,MAAM,IAAI,KAAK,CACb,kEAAkE,CACnE,CAAC;wBACJ,CAAC;oBACH,CAAC;oBAAC,OAAO,CAAU,EAAE,CAAC;wBACpB,OAAO,CAAC,KAAK,CACX,gEAAgE,SAAS,KAAK,EAC9E,CAAC,CACF,CAAC;wBACF,MAAM,IAAI,KAAK,CACb,8DAA8D,CAC/D,CAAC;oBACJ,CAAC;oBACD,MAAM,EAAE,cAAc,EAAE,gBAAgB,EAAE,GAAG,YAAY,CAAC;oBAE1D,IAAI,CAAC;wBACH,MAAM,OAAO,GAAqB,MAAM,SAAS,CAAC;4BAChD,GAAG,EAAE,KAAK;4BACV,IAAI;4BACJ,QAAQ,EAAE,YAAY;4BACtB,GAAG,EAAE,WAAW;4BAChB,cAAc;4BACd,gBAAgB;4BAChB,SAAS;yBACV,CAAC,CAAC;wBACH,OAAO,EAAE,GAAG,OAAO,EAAE,CAAC;oBACxB,CAAC;oBAAC,OAAO,CAAU,EAAE,CAAC;wBACpB,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;4BACf,OAAO,CAAC,KAAK,CACX,gDAAgD,EAChD,CAAC,CACF,CAAC;wBACJ,CAAC;wBACD,MAAM,IAAI,KAAK,CAAC,gDAAgD,CAAC,CAAC;oBACpE,CAAC;gBACH,CAAC;gBACD,YAAY;aACb,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,CAAU,EAAE,CAAC;YACpB,OAAO,CAAC,KAAK,CACX,gFAAgF,EAChF,CAAC,CACF,CAAC;YACF,MAAM,IAAI,KAAK,CAAC,4CAA4C,CAAC,CAAC;QAChE,CAAC;QAED,IAAI,oBAA0C,CAAC;QAC/C,IAAI,CAAC;YACH,oBAAoB,GAAG,cAAc,CAAC;gBACpC,IAAI,EAAE,GAAG,CAAC,OAAO,CAAC,QAAQ;gBAC1B,UAAU;gBACV,KAAK,EAAE,IAAI,CAAC,gBAAgB;gBAC5B,+BAA+B,EAAE,UAAmB;gBACpD,+BAA+B,EAAE,aAAsB;gBACvD,aAAa,EAAE,iBAA0B;gBACzC,8BAA8B,EAAE,GAAY;gBAC5C,WAAW,EAAE,IAAI,CAAC,WAAW;gBAC7B,KAAK,EAAE,IAAI,CAAC,KAAK;aAClB,CAAC,CAAC;YACH,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;gBACf,OAAO,CAAC,GAAG,CACT,uCAAuC,EACvC,oBAAoB,CACrB,CAAC;gBACF,IACE,oBAAoB;oBACpB,oBAAoB,CAAC,MAAM;oBAC3B,GAAG,EAAE,OAAO,EAAE,QAAQ,EACtB,CAAC;oBACD,OAAO,CAAC,GAAG,CACT,6CAA6C,EAC7C,GAAG,CAAC,OAAO,CAAC,QAAQ,CACrB,CAAC;gBACJ,CAAC;YACH,CAAC;QACH,CAAC;QAAC,OAAO,CAAU,EAAE,CAAC;YACpB,OAAO,CAAC,KAAK,CAAC,8CAA8C,EAAE,CAAC,CAAC,CAAC;YACjE,OAAO,IAAI,CACT;gBACE,OAAO,EAAE,KAAK;gBACd,OAAO,EAAE,+BAA+B;aACzC,EACD,EAAE,MAAM,EAAE,GAAG,EAAE,CAChB,CAAC;QACJ,CAAC;QAED,IAAI,oBAAoB,CAAC,MAAM,EAAE,CAAC;YAChC,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC;YACvB,IAAI,CAAC,2BAA2B,CAAC,iBAAiB,CAAC,IAAI,CAAC,EAAE,CAAC;gBACzD,MAAM,IAAI,KAAK,CACb,mEAAmE,CACpE,CAAC;YACJ,CAAC;YACD,OAAO,MAAM,IAAI,CAAC,MAAM,CAAC,EAAE,GAAG,EAAE,IAAI,EAAE,QAAQ,EAAE,GAAG,MAAM,EAAE,CAAC,CAAC;QAC/D,CAAC;aAAM,CAAC;YACN,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;gBACf,OAAO,CAAC,GAAG,CAAC,iCAAiC,EAAE,GAAG,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;YACvE,CAAC;QACH,CAAC;QAED,IAAI,oBAAoB,CAAC,QAAQ,EAAE,CAAC;YAClC,yBAAyB;YACzB,MAAM,kBAAkB,GAAW,oBAAoB,CAAC,UAAU,CAAC;YAEnE,MAAM,IAAI,GAAW,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC;YAEtC,IAAI,QAAQ,GAAqB,OAAO,CAAC;YAEzC,IAAI,IAAI,CAAC,WAAW,KAAK,aAAa,IAAI,IAAI,CAAC,WAAW,KAAK,MAAM,EAAE,CAAC;gBACtE,QAAQ,GAAG,MAAM,CAAC;YACpB,CAAC;YACD,MAAM,UAAU,GAAW,QAAQ,GAAG,KAAK,GAAG,IAAI,GAAG,kBAAkB,CAAC;YACxE,IAAI,IAAI,CAAC,WAAW,KAAK,aAAa,EAAE,CAAC;gBACvC,OAAO,CAAC,GAAG,CAAC,gCAAgC,GAAG,UAAU,GAAG,GAAG,CAAC,CAAC;YACnE,CAAC;YACD,OAAO,QAAQ,CAAC,UAAU,CAAC,CAAC;QAC9B,CAAC;QAED,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;YACf,OAAO,CAAC,GAAG,CACT,gDAAgD,EAChD,GAAG,CAAC,OAAO,CAAC,QAAQ,CACrB,CAAC;QACJ,CAAC;QAED,IAAI,oBAAoB,CAAC,KAAK,EAAE,CAAC;YAC/B,MAAM,SAAS,GAAwB,oBAAoB,CAAC,KAAK,CAAC;YAClE,IAAI,SAAS,KAAK,cAAc,EAAE,CAAC;gBACjC,OAAO,IAAI,CACT;oBACE,KAAK,EAAE,cAAc;iBACtB,EACD,EAAE,MAAM,EAAE,GAAG,EAAE,CAChB,CAAC;YACJ,CAAC;iBAAM,IAAI,SAAS,KAAK,WAAW,EAAE,CAAC;gBACrC,OAAO,IAAI,CACT;oBACE,KAAK,EAAE,WAAW;iBACnB,EACD,EAAE,MAAM,EAAE,GAAG,EAAE,CAChB,CAAC;YACJ,CAAC;YAED,OAAO,CAAC,KAAK,CAAC,iCAAiC,EAAE,SAAS,CAAC,CAAC;YAC5D,OAAO,IAAI,CACT;gBACE,KAAK,EAAE,+BAA+B;aACvC,EACD,EAAE,MAAM,EAAE,GAAG,EAAE,CAChB,CAAC;QACJ,CAAC;QAED,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC;IACtD,CAAC;CACF;AAED,MAAM,OAAO,kCAAkC;IAG7B,IAAI,GAAG,oBAA6B,CAAC;IAE7C,cAAc,CAAqC;IAE3D,YAAmB,IAAwC;QACzD,IAAI,CAAC,cAAc,GAAG,IAAI,CAAC;IAC7B,CAAC;IAEM,MAAM,CAAC,IAA6B;QACzC,OAAO,IAAI,2BAA2B,CAAC;YACrC,GAAG,IAAI,CAAC,cAAc;YACtB,IAAI;SACL,CAAC,CAAC;IACL,CAAC;CACF;AAED,eAAe,kCAAkC,CAAC"}
+{"version":3,"file":"withAuthJwtValidation.js","sourceRoot":"","sources":["../../../../src/middleware/middlewares/withAuthJwtValidation/withAuthJwtValidation.ts"],"names":[],"mappings":"AACA,OAAO,EACL,cAAc,EAGd,0BAA0B,EAC1B,mBAAmB,EAGnB,cAAc,GAGf,MAAM,2BAA2B,CAAC;AACnC,OAAO,EAEL,SAAS,EACT,oBAAoB,GACrB,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EACL,iBAAiB,GAElB,MAAM,+BAA+B,CAAC;AAMvC,OAAO,cAAc,MAAM,8BAA8B,CAAC;AAE1D,OAAO,qBAEN,MAAM,qCAAqC,CAAC;AAe7C,MAAM,2BACJ,SAAQ,cAAc;IAGL,QAAQ,CAAS;IACjB,gBAAgB,CAAsB;IACtC,YAAY,CAAiB;IAE9C,YAAmB,EACjB,IAAI,EACJ,QAAQ,EACR,GAAG,IAAI,EAC0B;QACjC,KAAK,CAAC;YACJ,GAAG,IAAI;YACP,IAAI,EAAE,6BAAsC;YAC5C,IAAI;SACL,CAAC,CAAC;QAEH,IAAI,OAAO,QAAQ,KAAK,QAAQ,EAAE,CAAC;YACjC,MAAM,IAAI,KAAK,CACb,yFAAyF,CAC1F,CAAC;QACJ,CAAC;aAAM,IAAI,CAAC,iBAAiB,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC,OAAO,EAAE,CAAC;YAC1D,MAAM,IAAI,SAAS,CACjB,sDAAsD,CACvD,CAAC;QACJ,CAAC;QAED,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAC;QACzB,IAAI,CAAC,gBAAgB,GAAG,IAAI,CAAC,gBAAgB,IAAI,0BAA0B,CAAC;QAC5E,IAAI,CAAC,YAAY,GAAG,IAAI,CAAC,YAAY,CAAC;IACxC,CAAC;IAES,KAAK,CAAC,mBAAmB,CACjC,SAAiB;QAEjB,MAAM,WAAW,GAAW,IAAI,CAAC,QAAQ,CAAC;QAC1C,MAAM,KAAK,GAAY,IAAI,CAAC,KAAK,CAAC;QAClC,MAAM,aAAa,GAAyB,MAAM,qBAAqB,CAAC;YACtE,SAAS;YACT,YAAY,EAAE,IAAI,CAAC,YAAY;YAC/B,WAAW;YACX,KAAK;SACN,CAAC,CAAC;QACH,OAAO,aAAa,CAAC;IACvB,CAAC;IAEM,KAAK,CAAC,MAAM,CAAC,EAClB,GAAG,EACH,IAAI,EACJ,QAAQ,EACR,GAAG,MAAM,EACuB;QAChC,MAAM,WAAW,GAA+B,IAAI,CAAC,WAAW,CAAC;QACjE,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;YACf,OAAO,CAAC,GAAG,CACT,IAAI,IAAI,CAAC,IAAI,uCAAuC,GAAG,CAAC,OAAO,CAAC,QAAQ,GAAG,CAC5E,CAAC;QACJ,CAAC;QAED,IAAI,GAAG,CAAC,OAAO,CAAC,IAAI,GAAG,EAAE,EAAE,CAAC;YAC1B,OAAO,CAAC,KAAK,CAAC,IAAI,IAAI,CAAC,IAAI,sBAAsB,EAAE,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;YACrE,OAAO,IAAI,CACT;gBACE,KAAK,EAAE,IAAI;gBACX,OAAO,EAAE,KAAK;gBACd,OAAO,EAAE,uCAAuC;aACjD,EACD,EAAE,MAAM,EAAE,GAAG,EAAE,CAChB,CAAC;QACJ,CAAC;QAED,0DAA0D;QAC1D,MAAM,aAAa,GAAkC,EAAE,CAAC;QAExD,2BAA2B;QAC3B,IAAI,aAAa,GACf,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC,EAAE,KAAK,CAAC;QAC1C,IAAI,YAAY,GACd,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,EAAE,KAAK,CAAC;QAEzC,IAAI,OAAO,aAAa,KAAK,QAAQ,EAAE,CAAC;YACtC,aAAa,CAAC,IAAI,CAAC;gBACjB,KAAK,EAAE,aAAa;gBACpB,IAAI,EAAE,SAAS;gBACf,UAAU,EAAE,sBAAsB;aACnC,CAAC,CAAC;QACL,CAAC;QAED,IAAI,OAAO,YAAY,KAAK,QAAQ,EAAE,CAAC;YACrC,aAAa,CAAC,IAAI,CAAC;gBACjB,KAAK,EAAE,YAAY;gBACnB,IAAI,EAAE,QAAQ;gBACd,UAAU,EAAE,qBAAqB;aAClC,CAAC,CAAC;QACL,CAAC;QAED,IAAI,wBAAwB,GAAuB,SAAS,CAAC;QAC7D,MAAM,mBAAmB,GACvB,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC;YAChC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC;YAChC,IAAI,CAAC;QACP,IAAI,OAAO,mBAAmB,KAAK,QAAQ,EAAE,CAAC;YAC5C,MAAM,YAAY,GAAG,SAAkB,CAAC;YACxC,IAAI,mBAAmB,CAAC,UAAU,CAAC,YAAY,CAAC,EAAE,CAAC;gBACjD,IAAI,mBAAmB,CAAC,MAAM,GAAG,YAAY,CAAC,MAAM,EAAE,CAAC;oBACrD,MAAM,aAAa,GAAW,mBAAmB,CAAC,KAAK,CACrD,YAAY,CAAC,MAAM,CACpB,CAAC;oBACF,wBAAwB,GAAG,aAA8B,CAAC;gBAC5D,CAAC;YACH,CAAC;QACH,CAAC;QAED,IAAI,OAAO,wBAAwB,KAAK,QAAQ,EAAE,CAAC;YACjD,aAAa,CAAC,IAAI,CAAC;gBACjB,KAAK,EAAE,wBAAwB;gBAC/B,IAAI,EAAE,QAAQ;gBACd,UAAU,EAAE,0CAA0C;aACvD,CAAC,CAAC;QACL,CAAC;QAED,MAAM,YAAY,GAAG,IAAI,CAAC,QAAQ,CAAC;QACnC,MAAM,mBAAmB,GACvB,MAAM,cAAc,CAAC,cAAc,CAAC,YAAY,CAAC,CAAC;QACpD,IAAI,CAAC,mBAAmB,CAAC,OAAO,EAAE,CAAC;YACjC,OAAO,CAAC,KAAK,CAAC,mBAAmB,CAAC,KAAK,CAAC,CAAC;YACzC,MAAM,IAAI,KAAK,CACb,mEAAmE,CACpE,CAAC;QACJ,CAAC;QAED,IAAI,UAA+C,CAAC;QACpD,IAAI,CAAC;YACH,MAAM,iCAAiC,GAAG;gBACxC,WAAW,EAAE,QAAiB;gBAC9B,aAAa;gBACb,KAAK,EAAE,IAAI,CAAC,KAAuB;aACkC,CAAC;YAExE,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;gBACf,OAAO,CAAC,GAAG,CACT,sEAAsE,EACtE,iCAAiC,CAClC,CAAC;YACJ,CAAC;YAED,UAAU,GAAG,MAAM,mBAAmB,CAAC;gBACrC,GAAG,iCAAiC;gBACpC,SAAS,EAAE,KAAK,EAAE,EAChB,KAAK,EACL,IAAI,EACJ,YAAY,GACb,EAA+C,EAAE;oBAChD,IAAI,SAAiB,CAAC;oBACtB,IAAI,CAAC;wBACH,SAAS,GAAG,oBAAoB,CAAC,KAAK,CAAC,CAAC;oBAC1C,CAAC;oBAAC,OAAO,CAAU,EAAE,CAAC;wBACpB,OAAO,CAAC,KAAK,CAAC,8CAA8C,EAAE,CAAC,CAAC,CAAC;wBACjE,MAAM,IAAI,KAAK,CAAC,6CAA6C,CAAC,CAAC;oBACjE,CAAC;oBAED,IAAI,YAAkC,CAAC;oBACvC,IAAI,CAAC;wBACH,YAAY,GAAG,MAAM,IAAI,CAAC,mBAAmB,CAAC,SAAS,CAAC,CAAC;wBACzD,IAAI,YAAY,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;4BACzC,MAAM,IAAI,KAAK,CACb,kEAAkE,CACnE,CAAC;wBACJ,CAAC;oBACH,CAAC;oBAAC,OAAO,CAAU,EAAE,CAAC;wBACpB,OAAO,CAAC,KAAK,CACX,gEAAgE,SAAS,KAAK,EAC9E,CAAC,CACF,CAAC;wBACF,MAAM,IAAI,KAAK,CACb,8DAA8D,CAC/D,CAAC;oBACJ,CAAC;oBACD,MAAM,EAAE,cAAc,EAAE,gBAAgB,EAAE,GAAG,YAAY,CAAC;oBAE1D,IAAI,CAAC;wBACH,MAAM,OAAO,GAAqB,MAAM,SAAS,CAAC;4BAChD,GAAG,EAAE,KAAK;4BACV,IAAI;4BACJ,QAAQ,EAAE,YAAY;4BACtB,GAAG,EAAE,WAAW;4BAChB,cAAc;4BACd,gBAAgB;4BAChB,SAAS;yBACV,CAAC,CAAC;wBACH,OAAO,EAAE,GAAG,OAAO,EAAE,CAAC;oBACxB,CAAC;oBAAC,OAAO,CAAU,EAAE,CAAC;wBACpB,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;4BACf,OAAO,CAAC,KAAK,CACX,gDAAgD,EAChD,CAAC,CACF,CAAC;wBACJ,CAAC;wBACD,MAAM,IAAI,KAAK,CAAC,gDAAgD,CAAC,CAAC;oBACpE,CAAC;gBACH,CAAC;gBACD,YAAY;aACb,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,CAAU,EAAE,CAAC;YACpB,OAAO,CAAC,KAAK,CACX,gFAAgF,EAChF,CAAC,CACF,CAAC;YACF,MAAM,IAAI,KAAK,CAAC,4CAA4C,CAAC,CAAC;QAChE,CAAC;QAED,IAAI,oBAA0C,CAAC;QAC/C,IAAI,CAAC;YACH,oBAAoB,GAAG,cAAc,CAAC;gBACpC,IAAI,EAAE,GAAG,CAAC,OAAO,CAAC,QAAQ;gBAC1B,UAAU;gBACV,KAAK,EAAE,IAAI,CAAC,gBAAgB;gBAC5B,+BAA+B,EAAE,UAAmB;gBACpD,+BAA+B,EAAE,aAAsB;gBACvD,aAAa,EAAE,iBAA0B;gBACzC,8BAA8B,EAAE,GAAY;gBAC5C,WAAW,EAAE,IAAI,CAAC,WAAW;gBAC7B,KAAK,EAAE,IAAI,CAAC,KAAK;aAClB,CAAC,CAAC;YACH,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;gBACf,OAAO,CAAC,GAAG,CACT,uCAAuC,EACvC,oBAAoB,CACrB,CAAC;gBACF,IACE,oBAAoB;oBACpB,oBAAoB,CAAC,MAAM;oBAC3B,GAAG,EAAE,OAAO,EAAE,QAAQ,EACtB,CAAC;oBACD,OAAO,CAAC,GAAG,CACT,6CAA6C,EAC7C,GAAG,CAAC,OAAO,CAAC,QAAQ,CACrB,CAAC;gBACJ,CAAC;YACH,CAAC;QACH,CAAC;QAAC,OAAO,CAAU,EAAE,CAAC;YACpB,OAAO,CAAC,KAAK,CAAC,8CAA8C,EAAE,CAAC,CAAC,CAAC;YACjE,OAAO,IAAI,CACT;gBACE,OAAO,EAAE,KAAK;gBACd,OAAO,EAAE,+BAA+B;aACzC,EACD,EAAE,MAAM,EAAE,GAAG,EAAE,CAChB,CAAC;QACJ,CAAC;QAED,IAAI,oBAAoB,CAAC,MAAM,EAAE,CAAC;YAChC,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC;YACvB,IAAI,CAAC,2BAA2B,CAAC,iBAAiB,CAAC,IAAI,CAAC,EAAE,CAAC;gBACzD,MAAM,IAAI,KAAK,CACb,mEAAmE,CACpE,CAAC;YACJ,CAAC;YACD,OAAO,MAAM,IAAI,CAAC,MAAM,CAAC,EAAE,GAAG,EAAE,IAAI,EAAE,QAAQ,EAAE,GAAG,MAAM,EAAE,CAAC,CAAC;QAC/D,CAAC;aAAM,CAAC;YACN,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;gBACf,OAAO,CAAC,GAAG,CAAC,iCAAiC,EAAE,GAAG,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;YACvE,CAAC;QACH,CAAC;QAED,IAAI,oBAAoB,CAAC,QAAQ,EAAE,CAAC;YAClC,yBAAyB;YACzB,MAAM,kBAAkB,GAAW,oBAAoB,CAAC,UAAU,CAAC;YAEnE,MAAM,IAAI,GAAW,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC;YAEtC,IAAI,QAAQ,GAAqB,OAAO,CAAC;YAEzC,IAAI,IAAI,CAAC,WAAW,KAAK,aAAa,IAAI,IAAI,CAAC,WAAW,KAAK,MAAM,EAAE,CAAC;gBACtE,QAAQ,GAAG,MAAM,CAAC;YACpB,CAAC;YACD,MAAM,UAAU,GAAW,QAAQ,GAAG,KAAK,GAAG,IAAI,GAAG,kBAAkB,CAAC;YACxE,IAAI,IAAI,CAAC,WAAW,KAAK,aAAa,EAAE,CAAC;gBACvC,OAAO,CAAC,GAAG,CAAC,gCAAgC,GAAG,UAAU,GAAG,GAAG,CAAC,CAAC;YACnE,CAAC;YACD,OAAO,QAAQ,CAAC,UAAU,CAAC,CAAC;QAC9B,CAAC;QAED,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;YACf,OAAO,CAAC,GAAG,CACT,gDAAgD,EAChD,GAAG,CAAC,OAAO,CAAC,QAAQ,CACrB,CAAC;QACJ,CAAC;QAED,IAAI,oBAAoB,CAAC,KAAK,EAAE,CAAC;YAC/B,MAAM,SAAS,GAAwB,oBAAoB,CAAC,KAAK,CAAC;YAClE,IAAI,SAAS,KAAK,cAAc,EAAE,CAAC;gBACjC,OAAO,IAAI,CACT;oBACE,KAAK,EAAE,cAAc;iBACtB,EACD,EAAE,MAAM,EAAE,GAAG,EAAE,CAChB,CAAC;YACJ,CAAC;iBAAM,IAAI,SAAS,KAAK,WAAW,EAAE,CAAC;gBACrC,OAAO,IAAI,CACT;oBACE,KAAK,EAAE,WAAW;iBACnB,EACD,EAAE,MAAM,EAAE,GAAG,EAAE,CAChB,CAAC;YACJ,CAAC;YAED,OAAO,CAAC,KAAK,CAAC,iCAAiC,EAAE,SAAS,CAAC,CAAC;YAC5D,OAAO,IAAI,CACT;gBACE,KAAK,EAAE,+BAA+B;aACvC,EACD,EAAE,MAAM,EAAE,GAAG,EAAE,CAChB,CAAC;QACJ,CAAC;QAED,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC;IACtD,CAAC;CACF;AAED,MAAM,OAAO,kCAAkC;IAG7B,IAAI,GAAG,oBAA6B,CAAC;IAE7C,cAAc,CAAqC;IAE3D,YAAmB,IAAwC;QACzD,IAAI,CAAC,cAAc,GAAG,IAAI,CAAC;IAC7B,CAAC;IAEM,MAAM,CAAC,IAA6B;QACzC,OAAO,IAAI,2BAA2B,CAAC;YACrC,GAAG,IAAI,CAAC,cAAc;YACtB,IAAI;SACL,CAAC,CAAC;IACL,CAAC;CACF;AAED,eAAe,kCAAkC,CAAC"}

package/dist/redirect-with-error.d.ts

@@ -0,0 +1,5 @@
+import { type RedirectType } from "next/navigation";
+import { type SchemaVaultsAuthErrorId } from "./auth-server-error-message-catalog";
+export declare function redirectWithError(redirect: (url: string, redirect_type?: RedirectType) => never, error_code?: number, error_id?: SchemaVaultsAuthErrorId, error_page_url?: string): never;
+export declare function redirectWithNextAppDirError(error_code?: number, error_id?: SchemaVaultsAuthErrorId, error_page_url?: string): never;
+export default redirectWithError;

package/dist/redirect-with-error.js

@@ -0,0 +1,22 @@
+import { redirect } from "next/navigation";
+import { isValidErrorId, } from "./auth-server-error-message-catalog";
+import { getAppEnvironment, } from "@schemavaults/app-definitions";
+export function redirectWithError(redirect, error_code = 500, error_id = "unknown", error_page_url = "/error") {
+    const environment = getAppEnvironment();
+    if (!isValidErrorId(error_id)) {
+        throw new Error("Invalid error ID to redirect to error page with!");
+    }
+    const searchParams = new URLSearchParams();
+    searchParams.set("error", `${error_code}`);
+    searchParams.set("error_id", error_id);
+    const errorPageUrl = `${error_page_url}?${searchParams.toString()}`;
+    if (environment === "development") {
+        console.log("[redirectWithError] Redirecting to URL: ", errorPageUrl);
+    }
+    redirect(errorPageUrl);
+}
+export function redirectWithNextAppDirError(error_code = 500, error_id = "unknown", error_page_url = "/error") {
+    return redirectWithError(redirect, error_code, error_id, error_page_url);
+}
+export default redirectWithError;
+//# sourceMappingURL=redirect-with-error.js.map

package/dist/redirect-with-error.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"redirect-with-error.js","sourceRoot":"","sources":["../src/redirect-with-error.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAqB,MAAM,iBAAiB,CAAC;AAC9D,OAAO,EACL,cAAc,GAEf,MAAM,qCAAqC,CAAC;AAC7C,OAAO,EACL,iBAAiB,GAElB,MAAM,+BAA+B,CAAC;AAEvC,MAAM,UAAU,iBAAiB,CAC/B,QAA8D,EAC9D,aAAqB,GAAG,EACxB,WAAoC,SAAS,EAC7C,iBAAyB,QAAQ;IAEjC,MAAM,WAAW,GAA+B,iBAAiB,EAAE,CAAC;IACpE,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC9B,MAAM,IAAI,KAAK,CAAC,kDAAkD,CAAC,CAAC;IACtE,CAAC;IAED,MAAM,YAAY,GAAG,IAAI,eAAe,EAAE,CAAC;IAE3C,YAAY,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,UAAU,EAAW,CAAC,CAAC;IACpD,YAAY,CAAC,GAAG,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC;IAEvC,MAAM,YAAY,GAAG,GAAG,cAAc,IAAI,YAAY,CAAC,QAAQ,EAAE,EAAW,CAAC;IAE7E,IAAI,WAAW,KAAK,aAAa,EAAE,CAAC;QAClC,OAAO,CAAC,GAAG,CAAC,0CAA0C,EAAE,YAAY,CAAC,CAAC;IACxE,CAAC;IACD,QAAQ,CAAC,YAAY,CAAC,CAAC;AACzB,CAAC;AAED,MAAM,UAAU,2BAA2B,CACzC,aAAqB,GAAG,EACxB,WAAoC,SAAS,EAC7C,iBAAyB,QAAQ;IAEjC,OAAO,iBAAiB,CAAC,QAAQ,EAAE,UAAU,EAAE,QAAQ,EAAE,cAAc,CAAC,CAAC;AAC3E,CAAC;AAED,eAAe,iBAAiB,CAAC"}

package/dist/route_guards/IRouteGuard.d.ts

@@ -0,0 +1,6 @@
+import type { OrganizationID, UserData } from "@schemavaults/auth-common";
+export interface IRouteGuard {
+    isAccessAllowed: () => boolean;
+    user: UserData | null;
+    user_organizations: readonly OrganizationID[];
+}

package/dist/route_guards/IRouteGuard.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=IRouteGuard.js.map

package/dist/route_guards/IRouteGuard.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"IRouteGuard.js","sourceRoot":"","sources":["../../src/route_guards/IRouteGuard.ts"],"names":[],"mappings":""}

package/dist/route_guards/base-route-guard.d.ts

@@ -1,15 +1,15 @@
-import type { UserData } from "@schemavaults/auth-common";
+import type { OrganizationID, UserData } from "@schemavaults/auth-common";
 import type { InitRouteGuardCheckOptions } from "./init_route_guard_check_options";
-export interface IRouteGuard {
-    isAccessAllowed: () => boolean;
-    user: UserData | null;
-}
+import type { IRouteGuard } from "./IRouteGuard";
+export type { IRouteGuard } from "./IRouteGuard";
 export declare abstract class BaseRouteGuard implements IRouteGuard {
-    protected _user: UserData | null;
+    protected readonly _user: UserData | null;
+    protected readonly _orgs: readonly OrganizationID[];
     private readonly environment;
-    constructor({ user, environment }: InitRouteGuardCheckOptions);
+    constructor({ user, user_organizations, environment, }: InitRouteGuardCheckOptions);
     protected get isAuthenticated(): boolean;
     protected get isAdmin(): boolean;
     abstract isAccessAllowed(): boolean;
     get user(): UserData | null;
+    get user_organizations(): readonly OrganizationID[];
 }

package/dist/route_guards/base-route-guard.js

@@ -1,8 +1,10 @@
 export class BaseRouteGuard {
     _user;
+    _orgs;
     environment;
-    constructor({ user, environment }) {
+    constructor({ user, user_organizations, environment, }) {
         this._user = user;
+        this._orgs = user_organizations ?? [];
         this.environment = environment;
     }
     get isAuthenticated() {
@@ -20,5 +22,8 @@ export class BaseRouteGuard {
     get user() {
         return this._user;
     }
+    get user_organizations() {
+        return this._orgs;
+    }
 }
 //# sourceMappingURL=base-route-guard.js.map

package/dist/route_guards/base-route-guard.js.map

@@ -1 +1 @@
-{"version":3,"file":"base-route-guard.js","sourceRoot":"","sources":["../../src/route_guards/base-route-guard.ts"],"names":[],"mappings":"AASA,MAAM,OAAgB,cAAc;IACxB,KAAK,CAAkB;IAChB,WAAW,CAA6B;IAEzD,YAAmB,EAAE,IAAI,EAAE,WAAW,EAA8B;QAClE,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC;QAClB,IAAI,CAAC,WAAW,GAAG,WAAW,CAAC;IACjC,CAAC;IAED,IAAc,eAAe;QAC3B,MAAM,SAAS,GAAY,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC;QACxC,IAAI,IAAI,CAAC,WAAW,KAAK,YAAY,EAAE,CAAC;YACtC,OAAO,CAAC,KAAK,CAAC,wBAAwB,EAAE,SAAS,EAAE,OAAO,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC;QAC1E,CAAC;QACD,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,IAAc,OAAO;QACnB,OAAO,CACL,IAAI,CAAC,eAAe;YACpB,OAAO,IAAI,CAAC,KAAK,EAAE,KAAK,KAAK,SAAS;YACtC,IAAI,CAAC,KAAK,CAAC,KAAK,CACjB,CAAC;IACJ,CAAC;IAID,IAAW,IAAI;QACb,OAAO,IAAI,CAAC,KAAK,CAAC;IACpB,CAAC;CACF"}
+{"version":3,"file":"base-route-guard.js","sourceRoot":"","sources":["../../src/route_guards/base-route-guard.ts"],"names":[],"mappings":"AAMA,MAAM,OAAgB,cAAc;IACf,KAAK,CAAkB;IACvB,KAAK,CAA4B;IACnC,WAAW,CAA6B;IAEzD,YAAmB,EACjB,IAAI,EACJ,kBAAkB,EAClB,WAAW,GACgB;QAC3B,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC;QAClB,IAAI,CAAC,KAAK,GAAG,kBAAkB,IAAI,EAAE,CAAC;QACtC,IAAI,CAAC,WAAW,GAAG,WAAW,CAAC;IACjC,CAAC;IAED,IAAc,eAAe;QAC3B,MAAM,SAAS,GAAY,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC;QACxC,IAAI,IAAI,CAAC,WAAW,KAAK,YAAY,EAAE,CAAC;YACtC,OAAO,CAAC,KAAK,CAAC,wBAAwB,EAAE,SAAS,EAAE,OAAO,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC;QAC1E,CAAC;QACD,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,IAAc,OAAO;QACnB,OAAO,CACL,IAAI,CAAC,eAAe;YACpB,OAAO,IAAI,CAAC,KAAK,EAAE,KAAK,KAAK,SAAS;YACtC,IAAI,CAAC,KAAK,CAAC,KAAK,CACjB,CAAC;IACJ,CAAC;IAID,IAAW,IAAI;QACb,OAAO,IAAI,CAAC,KAAK,CAAC;IACpB,CAAC;IAED,IAAW,kBAAkB;QAC3B,OAAO,IAAI,CAAC,KAAK,CAAC;IACpB,CAAC;CACF"}

package/dist/route_guards/index.d.ts

@@ -1,4 +1,8 @@
-export type { IRouteGuard } from "./base-route-guard";
+export type { IRouteGuard } from "./IRouteGuard";
 export { AuthenticationRequiredRouteGuard } from "./authenticated";
 export { AdminRequiredRouteGuard } from "./admin";
 export { RouteGuardFactory, RouteGuardFactory as default, } from "./route-guard-factory";
+export { withAuthenticatedServerComponentRouteGuard, withAuthenticatedApiRouteGuard, } from "./withAuthenticatedRouteGuard";
+export type * from "./withAuthenticatedRouteGuard";
+export { withAdminServerComponentRouteGuard, withAdminApiRouteGuard, } from "./withAdminRouteGuard";
+export type * from "./withAdminRouteGuard";

package/dist/route_guards/index.js

@@ -1,4 +1,6 @@
 export { AuthenticationRequiredRouteGuard } from "./authenticated";
 export { AdminRequiredRouteGuard } from "./admin";
 export { RouteGuardFactory, RouteGuardFactory as default, } from "./route-guard-factory";
+export { withAuthenticatedServerComponentRouteGuard, withAuthenticatedApiRouteGuard, } from "./withAuthenticatedRouteGuard";
+export { withAdminServerComponentRouteGuard, withAdminApiRouteGuard, } from "./withAdminRouteGuard";
 //# sourceMappingURL=index.js.map

package/dist/route_guards/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/route_guards/index.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,gCAAgC,EAAE,MAAM,iBAAiB,CAAC;AACnE,OAAO,EAAE,uBAAuB,EAAE,MAAM,SAAS,CAAC;AAElD,OAAO,EACL,iBAAiB,EACjB,iBAAiB,IAAI,OAAO,GAC7B,MAAM,uBAAuB,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/route_guards/index.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,gCAAgC,EAAE,MAAM,iBAAiB,CAAC;AACnE,OAAO,EAAE,uBAAuB,EAAE,MAAM,SAAS,CAAC;AAElD,OAAO,EACL,iBAAiB,EACjB,iBAAiB,IAAI,OAAO,GAC7B,MAAM,uBAAuB,CAAC;AAE/B,OAAO,EACL,0CAA0C,EAC1C,8BAA8B,GAC/B,MAAM,+BAA+B,CAAC;AAEvC,OAAO,EACL,kCAAkC,EAClC,sBAAsB,GACvB,MAAM,uBAAuB,CAAC"}

package/dist/route_guards/init_route_guard_check_options.d.ts

@@ -1,6 +1,7 @@
 import type { SchemaVaultsAppEnvironment } from "@schemavaults/app-definitions";
-import type { UserData } from "@schemavaults/auth-common";
+import type { OrganizationID, UserData } from "@schemavaults/auth-common";
 export interface InitRouteGuardCheckOptions {
     user: UserData | null;
+    user_organizations: readonly OrganizationID[] | null;
     environment: SchemaVaultsAppEnvironment;
 }

package/dist/route_guards/route-guard-factory.d.ts

@@ -1,4 +1,4 @@
-import type { IRouteGuard } from "./base-route-guard";
+import type { IRouteGuard } from "./IRouteGuard";
 import type { InitRouteGuardCheckOptions } from "./init_route_guard_check_options";
 import { type PotentiallyValidTokenSource } from "@schemavaults/auth-common";
 import { type SchemaVaultsAppEnvironment } from "@schemavaults/app-definitions";
@@ -18,6 +18,7 @@ export declare class RouteGuardFactory {
     private readonly is_auth_server;
     constructor({ environment, ...opts }: RouteGuardFactoryInitOptions);
     private static isValidRouteGuardType;
+    static createGuardFromOptions(type: RouteGuardType, opts: InitRouteGuardCheckOptions): IRouteGuard;
     createGuardFromOptions(type: RouteGuardType, opts: InitRouteGuardCheckOptions): IRouteGuard;
     createGuardFromTokenSources(type: RouteGuardType, token_sources: readonly PotentiallyValidTokenSource[], jwt_audience: string): Promise<IRouteGuard>;
     createGuardFromAuthHeader(type: RouteGuardType, authHeader: string | null, jwt_audience: string): Promise<IRouteGuard>;

package/dist/route_guards/route-guard-factory.js

@@ -1,7 +1,7 @@
 import AdminRequiredRouteGuard from "./admin";
 import AuthenticationRequiredRouteGuard from "./authenticated";
 import { z } from "zod";
-import { decodeFirstOfSeveralJwts, } from "@schemavaults/auth-common";
+import { decodeFirstOfSeveralJwts, organizationIdSchema, } from "@schemavaults/auth-common";
 import { decodeJWT as decodeSchemavaultsJwt, getKeysetIdFromToken, } from "@schemavaults/jwt";
 import { apiServerIdSchema, getAppEnvironment, getHardcodedClientWebAppDomain, SCHEMAVAULTS_AUTH_APP_DEFINITION, } from "@schemavaults/app-definitions";
 import loadJwtDecodingKeys from "../JwtKeyManager/loadJwtDecodingKeys";
@@ -47,7 +47,7 @@ export class RouteGuardFactory {
             return false;
         return validGuardTypeSchema.safeParse(type).success;
     }
-    createGuardFromOptions(type, opts) {
+    static createGuardFromOptions(type, opts) {
         if (!RouteGuardFactory.isValidRouteGuardType(type)) {
             throw new Error(`Invalid route guard type, should be one of: ${GUARD_TYPES.join(", ")}`);
         }
@@ -55,6 +55,9 @@ export class RouteGuardFactory {
         const GUARD = GUARD_LOADER(opts);
         return GUARD;
     }
+    createGuardFromOptions(type, opts) {
+        return RouteGuardFactory.createGuardFromOptions(type, opts);
+    }
     async createGuardFromTokenSources(type, token_sources, jwt_audience) {
         const environment = this.environment;
         const debug = this.debug;
@@ -65,6 +68,7 @@ export class RouteGuardFactory {
             throw new TypeError(`Invalid API server ID for 'jwt_audience': ${jwt_audience}`);
         }
         let user = null;
+        let user_organizations = null;
         try {
             user = await decodeFirstOfSeveralJwts({
                 token_sources,
@@ -119,16 +123,28 @@ export class RouteGuardFactory {
                     }
                 },
             }, debug);
+            if (!("orgs" in user) || !Array.isArray(user.orgs)) {
+                throw new Error("No 'orgs' field in decoded user object!");
+            }
+            if (user.orgs.every((org_id) => typeof org_id === "string" &&
+                organizationIdSchema.safeParse(org_id).success)) {
+                user_organizations = user.orgs;
+            }
+            if (!Array.isArray(user_organizations)) {
+                throw new TypeError("Failed to load user organizations associated with user from token!");
+            }
         }
         catch (e) {
             console.error("No-op error creating route-guard... Failed to decode JWTs, setting user = null", e);
             user = null;
+            user_organizations = null;
         }
         const init_opts = {
             user,
             environment: getAppEnvironment(),
+            user_organizations: user_organizations ?? [],
         };
-        if (this.environment !== "production") {
+        if (this.debug) {
             console.log(`[RouteGuardFactory] Creating route guard with init options: `, init_opts);
         }
         return this.createGuardFromOptions(type, init_opts);

package/dist/route_guards/route-guard-factory.js.map

@@ -1 +1 @@
-{"version":3,"file":"route-guard-factory.js","sourceRoot":"","sources":["../../src/route_guards/route-guard-factory.ts"],"names":[],"mappings":"AAAA,OAAO,uBAAuB,MAAM,SAAS,CAAC;AAC9C,OAAO,gCAAgC,MAAM,iBAAiB,CAAC;AAE/D,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EACL,wBAAwB,GAIzB,MAAM,2BAA2B,CAAC;AACnC,OAAO,EAEL,SAAS,IAAI,qBAAqB,EAClC,oBAAoB,GACrB,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EACL,iBAAiB,EACjB,iBAAiB,EACjB,8BAA8B,EAC9B,gCAAgC,GAEjC,MAAM,+BAA+B,CAAC;AACvC,OAAO,mBAEN,MAAM,qCAAqC,CAAC;AAC7C,OAAO,EAAE,mBAAmB,EAAuB,MAAM,iBAAiB,CAAC;AAW3E,MAAM,WAAW,GAAG;IAClB,eAAe;IACf,OAAO;CAC6B,CAAC;AAGvC,MAAM,oBAAoB,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,MAAM,CAAC,CAAC,GAAG,EAAyB,EAAE;IAC5E,OACE,WACD,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;AAClB,CAAC,CAAC,CAAC;AAEH,MAAM,MAAM,GAAG;IACb,aAAa,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,gCAAgC,CAAC,IAAI,CAAC;IACnE,KAAK,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,uBAAuB,CAAC,IAAI,CAAC;CAInD,CAAC;AAEF,MAAM,OAAO,iBAAiB;IACX,gBAAgB,CAAiB;IACjC,WAAW,CAA6B;IACxC,KAAK,CAAU;IACf,cAAc,CAAU;IAEzC,YAAmB,EAAE,WAAW,EAAE,GAAG,IAAI,EAAgC;QACvE,IAAI,CAAC,WAAW,GAAG,WAAW,CAAC;QAC/B,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC;QACjC,IACE,OAAO,IAAI,CAAC,cAAc,KAAK,SAAS;YACxC,OAAO,IAAI,CAAC,cAAc,KAAK,WAAW,EAC1C,CAAC;YACD,MAAM,IAAI,SAAS,CAAC,oCAAoC,CAAC,CAAC;QAC5D,CAAC;QACD,IAAI,CAAC,cAAc,GAAG,IAAI,CAAC,cAAc,IAAI,KAAK,CAAC;QAEnD,IAAI,IAAI,CAAC,gBAAgB,EAAE,CAAC;YAC1B,IAAI,CAAC,gBAAgB,GAAG,IAAI,CAAC,gBAAgB,CAAC;QAChD,CAAC;aAAM,CAAC;YACN,IAAI,IAAI,CAAC,cAAc,EAAE,CAAC;gBACxB,MAAM,IAAI,SAAS,CACjB,8EAA8E,CAC/E,CAAC;YACJ,CAAC;YACD,IAAI,CAAC,gBAAgB,GAAG,IAAI,mBAAmB,CAAC;gBAC9C,eAAe,EAAE,8BAA8B,CAC7C,gCAAgC,CAAC,MAAM,EACvC,WAAW,CACZ;aACF,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAEO,MAAM,CAAC,qBAAqB,CAAC,IAAa;QAChD,IAAI,OAAO,IAAI,KAAK,QAAQ;YAAE,OAAO,KAAK,CAAC;QAC3C,OAAO,oBAAoB,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC;IACtD,CAAC;IAEM,sBAAsB,CAC3B,IAAoB,EACpB,IAAgC;QAEhC,IAAI,CAAC,iBAAiB,CAAC,qBAAqB,CAAC,IAAI,CAAC,EAAE,CAAC;YACnD,MAAM,IAAI,KAAK,CACb,+CAA+C,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CACxE,CAAC;QACJ,CAAC;QACD,MAAM,YAAY,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC;QAClC,MAAM,KAAK,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC;QAEjC,OAAO,KAAK,CAAC;IACf,CAAC;IAEM,KAAK,CAAC,2BAA2B,CACtC,IAAoB,EACpB,aAAqD,EACrD,YAAoB;QAEpB,MAAM,WAAW,GAA+B,IAAI,CAAC,WAAW,CAAC;QACjE,MAAM,KAAK,GAAY,IAAI,CAAC,KAAK,CAAC;QAClC,IAAI,KAAK,EAAE,CAAC;YACV,OAAO,CAAC,GAAG,CACT,mEAAmE,EACnE,aAAa,CACd,CAAC;QACJ,CAAC;QAED,IAAI,CAAC,iBAAiB,CAAC,SAAS,CAAC,YAA6B,CAAC,CAAC,OAAO,EAAE,CAAC;YACxE,MAAM,IAAI,SAAS,CACjB,6CAA6C,YAAY,EAAE,CAC5D,CAAC;QACJ,CAAC;QAED,IAAI,IAAI,GAAoB,IAAI,CAAC;QAEjC,IAAI,CAAC;YACH,IAAI,GAAG,MAAM,wBAAwB,CACnC;gBACE,aAAa;gBACb,YAAY;gBACZ,SAAS,EAAE,KAAK,EAAE,IAAI,EAAgC,EAAE;oBACtD,IAAI,WAAW,KAAK,YAAY,EAAE,CAAC;wBACjC,OAAO,CAAC,GAAG,CAAC,iDAAiD,CAAC,CAAC;oBACjE,CAAC;oBAED,IAAI,SAAiB,CAAC;oBACtB,IAAI,CAAC;wBACH,SAAS,GAAG,oBAAoB,CAAC,IAAI,CAAC,KAAsB,CAAC,CAAC;oBAChE,CAAC;oBAAC,OAAO,CAAU,EAAE,CAAC;wBACpB,OAAO,CAAC,KAAK,CAAC,8CAA8C,EAAE,CAAC,CAAC,CAAC;wBACjE,MAAM,IAAI,KAAK,CAAC,6CAA6C,CAAC,CAAC;oBACjE,CAAC;oBAED,MAAM,YAAY,GAAmB,IAAI,CAAC,gBAAgB,CAAC;oBAC3D,IAAI,CAAC,YAAY,EAAE,CAAC;wBAClB,MAAM,IAAI,KAAK,CACb,8EAA8E,CAC/E,CAAC;oBACJ,CAAC;oBAED,IAAI,YAAkC,CAAC;oBACvC,IAAI,CAAC;wBACH,YAAY,GAAG,MAAM,mBAAmB,CAAC;4BACvC,SAAS;4BACT,YAAY;4BACZ,WAAW,EAAE,YAAY;4BACzB,KAAK;yBACN,CAAC,CAAC;wBACH,IAAI,YAAY,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;4BACzC,MAAM,IAAI,KAAK,CACb,kEAAkE,CACnE,CAAC;wBACJ,CAAC;oBACH,CAAC;oBAAC,OAAO,CAAU,EAAE,CAAC;wBACpB,OAAO,CAAC,KAAK,CACX,gEAAgE,SAAS,KAAK,EAC9E,CAAC,CACF,CAAC;wBACF,MAAM,IAAI,KAAK,CACb,8DAA8D,CAC/D,CAAC;oBACJ,CAAC;oBACD,MAAM,EAAE,cAAc,EAAE,gBAAgB,EAAE,GAAG,YAAY,CAAC;oBAE1D,IAAI,CAAC;wBACH,OAAO,CAAC,MAAM,qBAAqB,CAAC;4BAClC,GAAG,EAAE,IAAI,CAAC,KAAK;4BACf,IAAI,EAAE,IAAI,CAAC,IAAI;4BACf,QAAQ,EAAE,IAAI,CAAC,YAAY;4BAC3B,cAAc;4BACd,gBAAgB;4BAChB,SAAS;4BACT,GAAG,EAAE,WAAW;yBACjB,CAAC,CAA4B,CAAC;oBACjC,CAAC;oBAAC,OAAO,CAAU,EAAE,CAAC;wBACpB,OAAO,CAAC,KAAK,CAAC,mCAAmC,EAAE,CAAC,CAAC,CAAC;wBACtD,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC;oBACtD,CAAC;gBACH,CAAC;aACF,EACD,KAAK,CACN,CAAC;QACJ,CAAC;QAAC,OAAO,CAAU,EAAE,CAAC;YACpB,OAAO,CAAC,KAAK,CACX,gFAAgF,EAChF,CAAC,CACF,CAAC;YACF,IAAI,GAAG,IAAI,CAAC;QACd,CAAC;QAED,MAAM,SAAS,GAA+B;YAC5C,IAAI;YACJ,WAAW,EAAE,iBAAiB,EAAE;SACjC,CAAC;QAEF,IAAI,IAAI,CAAC,WAAW,KAAK,YAAY,EAAE,CAAC;YACtC,OAAO,CAAC,GAAG,CACT,8DAA8D,EAC9D,SAAS,CACV,CAAC;QACJ,CAAC;QAED,OAAO,IAAI,CAAC,sBAAsB,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;IACtD,CAAC;IAEM,KAAK,CAAC,yBAAyB,CACpC,IAAoB,EACpB,UAAyB,EACzB,YAAoB;QAEpB,IAAI,CAAC,UAAU,IAAI,OAAO,UAAU,KAAK,QAAQ,EAAE,CAAC;YAClD,MAAM,IAAI,KAAK,CAAC,sBAAsB,CAAC,CAAC;QAC1C,CAAC;QACD,MAAM,YAAY,GAAG,SAAkB,CAAC;QACxC,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,YAAY,CAAC,EAAE,CAAC;YACzC,MAAM,IAAI,KAAK,CAAC,2CAA2C,CAAC,CAAC;QAC/D,CAAC;QACD,MAAM,KAAK,GAAW,UAAU,CAAC,KAAK,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC;QAE5D,OAAO,MAAM,IAAI,CAAC,2BAA2B,CAC3C,IAAI,EACJ;YACE;gBACE,UAAU,EAAE,0BAA0B;gBACtC,KAAK;gBACL,IAAI,EAAE,QAAQ;aACf;SACF,EACD,YAAY,CACb,CAAC;IACJ,CAAC;CACF;AAED,eAAe,iBAAiB,CAAC"}
+{"version":3,"file":"route-guard-factory.js","sourceRoot":"","sources":["../../src/route_guards/route-guard-factory.ts"],"names":[],"mappings":"AAAA,OAAO,uBAAuB,MAAM,SAAS,CAAC;AAC9C,OAAO,gCAAgC,MAAM,iBAAiB,CAAC;AAE/D,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EACL,wBAAwB,EAKxB,oBAAoB,GACrB,MAAM,2BAA2B,CAAC;AACnC,OAAO,EAEL,SAAS,IAAI,qBAAqB,EAClC,oBAAoB,GACrB,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EACL,iBAAiB,EACjB,iBAAiB,EACjB,8BAA8B,EAC9B,gCAAgC,GAEjC,MAAM,+BAA+B,CAAC;AACvC,OAAO,mBAEN,MAAM,qCAAqC,CAAC;AAC7C,OAAO,EAAE,mBAAmB,EAAuB,MAAM,iBAAiB,CAAC;AAW3E,MAAM,WAAW,GAAG;IAClB,eAAe;IACf,OAAO;CAC6B,CAAC;AAGvC,MAAM,oBAAoB,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,MAAM,CAAC,CAAC,GAAG,EAAyB,EAAE;IAC5E,OACE,WACD,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;AAClB,CAAC,CAAC,CAAC;AAEH,MAAM,MAAM,GAAG;IACb,aAAa,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,gCAAgC,CAAC,IAAI,CAAC;IACnE,KAAK,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,uBAAuB,CAAC,IAAI,CAAC;CAInD,CAAC;AAEF,MAAM,OAAO,iBAAiB;IACX,gBAAgB,CAAiB;IACjC,WAAW,CAA6B;IACxC,KAAK,CAAU;IACf,cAAc,CAAU;IAEzC,YAAmB,EAAE,WAAW,EAAE,GAAG,IAAI,EAAgC;QACvE,IAAI,CAAC,WAAW,GAAG,WAAW,CAAC;QAC/B,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC;QACjC,IACE,OAAO,IAAI,CAAC,cAAc,KAAK,SAAS;YACxC,OAAO,IAAI,CAAC,cAAc,KAAK,WAAW,EAC1C,CAAC;YACD,MAAM,IAAI,SAAS,CAAC,oCAAoC,CAAC,CAAC;QAC5D,CAAC;QACD,IAAI,CAAC,cAAc,GAAG,IAAI,CAAC,cAAc,IAAI,KAAK,CAAC;QAEnD,IAAI,IAAI,CAAC,gBAAgB,EAAE,CAAC;YAC1B,IAAI,CAAC,gBAAgB,GAAG,IAAI,CAAC,gBAAgB,CAAC;QAChD,CAAC;aAAM,CAAC;YACN,IAAI,IAAI,CAAC,cAAc,EAAE,CAAC;gBACxB,MAAM,IAAI,SAAS,CACjB,8EAA8E,CAC/E,CAAC;YACJ,CAAC;YACD,IAAI,CAAC,gBAAgB,GAAG,IAAI,mBAAmB,CAAC;gBAC9C,eAAe,EAAE,8BAA8B,CAC7C,gCAAgC,CAAC,MAAM,EACvC,WAAW,CACZ;aACF,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAEO,MAAM,CAAC,qBAAqB,CAAC,IAAa;QAChD,IAAI,OAAO,IAAI,KAAK,QAAQ;YAAE,OAAO,KAAK,CAAC;QAC3C,OAAO,oBAAoB,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC;IACtD,CAAC;IAEM,MAAM,CAAC,sBAAsB,CAClC,IAAoB,EACpB,IAAgC;QAEhC,IAAI,CAAC,iBAAiB,CAAC,qBAAqB,CAAC,IAAI,CAAC,EAAE,CAAC;YACnD,MAAM,IAAI,KAAK,CACb,+CAA+C,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CACxE,CAAC;QACJ,CAAC;QACD,MAAM,YAAY,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC;QAClC,MAAM,KAAK,GAAgB,YAAY,CAAC,IAAI,CAAC,CAAC;QAE9C,OAAO,KAAK,CAAC;IACf,CAAC;IAEM,sBAAsB,CAC3B,IAAoB,EACpB,IAAgC;QAEhC,OAAO,iBAAiB,CAAC,sBAAsB,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IAC9D,CAAC;IAEM,KAAK,CAAC,2BAA2B,CACtC,IAAoB,EACpB,aAAqD,EACrD,YAAoB;QAEpB,MAAM,WAAW,GAA+B,IAAI,CAAC,WAAW,CAAC;QACjE,MAAM,KAAK,GAAY,IAAI,CAAC,KAAK,CAAC;QAClC,IAAI,KAAK,EAAE,CAAC;YACV,OAAO,CAAC,GAAG,CACT,mEAAmE,EACnE,aAAa,CACd,CAAC;QACJ,CAAC;QAED,IAAI,CAAC,iBAAiB,CAAC,SAAS,CAAC,YAA6B,CAAC,CAAC,OAAO,EAAE,CAAC;YACxE,MAAM,IAAI,SAAS,CACjB,6CAA6C,YAAY,EAAE,CAC5D,CAAC;QACJ,CAAC;QAED,IAAI,IAAI,GAAoB,IAAI,CAAC;QACjC,IAAI,kBAAkB,GAAqC,IAAI,CAAC;QAChE,IAAI,CAAC;YACH,IAAI,GAAG,MAAM,wBAAwB,CACnC;gBACE,aAAa;gBACb,YAAY;gBACZ,SAAS,EAAE,KAAK,EAAE,IAAI,EAAgC,EAAE;oBACtD,IAAI,WAAW,KAAK,YAAY,EAAE,CAAC;wBACjC,OAAO,CAAC,GAAG,CAAC,iDAAiD,CAAC,CAAC;oBACjE,CAAC;oBAED,IAAI,SAAiB,CAAC;oBACtB,IAAI,CAAC;wBACH,SAAS,GAAG,oBAAoB,CAAC,IAAI,CAAC,KAAsB,CAAC,CAAC;oBAChE,CAAC;oBAAC,OAAO,CAAU,EAAE,CAAC;wBACpB,OAAO,CAAC,KAAK,CAAC,8CAA8C,EAAE,CAAC,CAAC,CAAC;wBACjE,MAAM,IAAI,KAAK,CAAC,6CAA6C,CAAC,CAAC;oBACjE,CAAC;oBAED,MAAM,YAAY,GAAmB,IAAI,CAAC,gBAAgB,CAAC;oBAC3D,IAAI,CAAC,YAAY,EAAE,CAAC;wBAClB,MAAM,IAAI,KAAK,CACb,8EAA8E,CAC/E,CAAC;oBACJ,CAAC;oBAED,IAAI,YAAkC,CAAC;oBACvC,IAAI,CAAC;wBACH,YAAY,GAAG,MAAM,mBAAmB,CAAC;4BACvC,SAAS;4BACT,YAAY;4BACZ,WAAW,EAAE,YAAY;4BACzB,KAAK;yBACN,CAAC,CAAC;wBACH,IAAI,YAAY,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;4BACzC,MAAM,IAAI,KAAK,CACb,kEAAkE,CACnE,CAAC;wBACJ,CAAC;oBACH,CAAC;oBAAC,OAAO,CAAU,EAAE,CAAC;wBACpB,OAAO,CAAC,KAAK,CACX,gEAAgE,SAAS,KAAK,EAC9E,CAAC,CACF,CAAC;wBACF,MAAM,IAAI,KAAK,CACb,8DAA8D,CAC/D,CAAC;oBACJ,CAAC;oBACD,MAAM,EAAE,cAAc,EAAE,gBAAgB,EAAE,GAAG,YAAY,CAAC;oBAE1D,IAAI,CAAC;wBACH,OAAO,CAAC,MAAM,qBAAqB,CAAC;4BAClC,GAAG,EAAE,IAAI,CAAC,KAAK;4BACf,IAAI,EAAE,IAAI,CAAC,IAAI;4BACf,QAAQ,EAAE,IAAI,CAAC,YAAY;4BAC3B,cAAc;4BACd,gBAAgB;4BAChB,SAAS;4BACT,GAAG,EAAE,WAAW;yBACjB,CAAC,CAA4B,CAAC;oBACjC,CAAC;oBAAC,OAAO,CAAU,EAAE,CAAC;wBACpB,OAAO,CAAC,KAAK,CAAC,mCAAmC,EAAE,CAAC,CAAC,CAAC;wBACtD,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC;oBACtD,CAAC;gBACH,CAAC;aACF,EACD,KAAK,CACN,CAAC;YACF,IAAI,CAAC,CAAC,MAAM,IAAI,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;gBACnD,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAC;YAC7D,CAAC;YAED,IACE,IAAI,CAAC,IAAI,CAAC,KAAK,CACb,CAAC,MAAM,EAAE,EAAE,CACT,OAAO,MAAM,KAAK,QAAQ;gBAC1B,oBAAoB,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,OAAO,CACjD,EACD,CAAC;gBACD,kBAAkB,GAAG,IAAI,CAAC,IAAI,CAAC;YACjC,CAAC;YAED,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,kBAAkB,CAAC,EAAE,CAAC;gBACvC,MAAM,IAAI,SAAS,CACjB,oEAAoE,CACrE,CAAC;YACJ,CAAC;QACH,CAAC;QAAC,OAAO,CAAU,EAAE,CAAC;YACpB,OAAO,CAAC,KAAK,CACX,gFAAgF,EAChF,CAAC,CACF,CAAC;YACF,IAAI,GAAG,IAAI,CAAC;YACZ,kBAAkB,GAAG,IAAI,CAAC;QAC5B,CAAC;QAED,MAAM,SAAS,GAA+B;YAC5C,IAAI;YACJ,WAAW,EAAE,iBAAiB,EAAE;YAChC,kBAAkB,EAAE,kBAAkB,IAAI,EAAE;SAC7C,CAAC;QAEF,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;YACf,OAAO,CAAC,GAAG,CACT,8DAA8D,EAC9D,SAAS,CACV,CAAC;QACJ,CAAC;QAED,OAAO,IAAI,CAAC,sBAAsB,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;IACtD,CAAC;IAEM,KAAK,CAAC,yBAAyB,CACpC,IAAoB,EACpB,UAAyB,EACzB,YAAoB;QAEpB,IAAI,CAAC,UAAU,IAAI,OAAO,UAAU,KAAK,QAAQ,EAAE,CAAC;YAClD,MAAM,IAAI,KAAK,CAAC,sBAAsB,CAAC,CAAC;QAC1C,CAAC;QACD,MAAM,YAAY,GAAG,SAAkB,CAAC;QACxC,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,YAAY,CAAC,EAAE,CAAC;YACzC,MAAM,IAAI,KAAK,CAAC,2CAA2C,CAAC,CAAC;QAC/D,CAAC;QACD,MAAM,KAAK,GAAW,UAAU,CAAC,KAAK,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC;QAE5D,OAAO,MAAM,IAAI,CAAC,2BAA2B,CAC3C,IAAI,EACJ;YACE;gBACE,UAAU,EAAE,0BAA0B;gBACtC,KAAK;gBACL,IAAI,EAAE,QAAQ;aACf;SACF,EACD,YAAY,CACb,CAAC;IACJ,CAAC;CACF;AAED,eAAe,iBAAiB,CAAC"}

package/dist/route_guards/withAdminRouteGuard.d.ts

@@ -0,0 +1,25 @@
+import "server-only";
+import { ApiServerId, type SchemaVaultsAppEnvironment } from "@schemavaults/app-definitions";
+import type { UserData } from "@schemavaults/auth-common";
+import type { ReactElement } from "react";
+import { type NextRequest, NextResponse } from "next/server";
+import type { SchemaVaultsPostgresNeonProxyAdapter } from "@schemavaults/dbh";
+import { IJwtKeyManager } from "../JwtKeyManager";
+interface Dbh<Db extends object> extends AsyncDisposable, SchemaVaultsPostgresNeonProxyAdapter<Db> {
+}
+export interface IProtectedAdminServerComponentPageProps<Db extends object> {
+    user: UserData;
+    dbh: Dbh<Db>;
+    environment: SchemaVaultsAppEnvironment;
+}
+export type TProtectedAdminPageServerComponent<Db extends object> = (props: IProtectedAdminServerComponentPageProps<Db>) => Promise<ReactElement>;
+export interface IProtectedAdminApiRouteProps<Db extends object> extends IProtectedAdminServerComponentPageProps<Db> {
+    req: NextRequest;
+}
+export type TProtectedAdminApiRoute<Db extends object> = (props: IProtectedAdminApiRouteProps<Db>) => Promise<NextResponse>;
+export interface IWithAdminRouteGuardUtilOpts<Db extends object> {
+    ProtectedAdminPageServerComponent: TProtectedAdminPageServerComponent<Db>;
+}
+export declare function withAdminServerComponentRouteGuard<Db extends object>(input: IWithAdminRouteGuardUtilOpts<Db> | TProtectedAdminPageServerComponent<Db>, dbh: Dbh<Db>, jwt_keys_manager: IJwtKeyManager, getApiServerId?: () => ApiServerId): Promise<ReactElement>;
+export declare function withAdminApiRouteGuard<Db extends object>(input: TProtectedAdminApiRoute<Db>, dbh: Dbh<Db>, jwt_keys_manager: IJwtKeyManager, getApiServerId?: () => ApiServerId): (req: NextRequest) => Promise<NextResponse>;
+export {};

package/dist/route_guards/withAdminRouteGuard.js

@@ -0,0 +1,124 @@
+import "server-only";
+import { SCHEMAVAULTS_AUTH_APP_DEFINITION, getAppEnvironment, } from "@schemavaults/app-definitions";
+import { cookies as loadCookies } from "next/headers";
+import { redirectWithNextAppDirError } from "../redirect-with-error";
+import RouteGuardFactory from "../route_guards/route-guard-factory";
+import { NextResponse } from "next/server";
+import getStringByteSize from "../getStringByteSize";
+import MaximumBrowserCookieSize from "../MaximumBrowserCookieSize";
+import RefreshTokenCookieName from "../RefreshTokenCookieNames";
+import getSchemavaultsApiServerId from "../get-schemavaults-api-server-id";
+export async function withAdminServerComponentRouteGuard(input, dbh, jwt_keys_manager, getApiServerId = getSchemavaultsApiServerId) {
+    const environment = getAppEnvironment();
+    const api_server_id = getApiServerId();
+    const cookies = await loadCookies();
+    const token_sources = [];
+    const refresh_token_cookie = cookies.get("refresh_token");
+    if (typeof refresh_token_cookie?.value === "string") {
+        token_sources.push({
+            sourceHint: "Auth Server Refresh Token",
+            type: "refresh",
+            token: refresh_token_cookie.value,
+        });
+    }
+    const route_guard_factory = new RouteGuardFactory({
+        environment,
+        is_auth_server: api_server_id === SCHEMAVAULTS_AUTH_APP_DEFINITION.app_id,
+        jwt_keys_manager,
+    });
+    const route_guard = await route_guard_factory.createGuardFromTokenSources("admin", token_sources, SCHEMAVAULTS_AUTH_APP_DEFINITION.app_id);
+    if (!route_guard.user) {
+        redirectWithNextAppDirError(401, "unauthenticated");
+    }
+    const user = route_guard.user;
+    if (!Array.isArray(route_guard.user_organizations)) {
+        redirectWithNextAppDirError(401, "unauthenticated");
+    }
+    if (!route_guard.isAccessAllowed() || !user.admin) {
+        redirectWithNextAppDirError(403, "forbidden");
+    }
+    const ProtectedAdminPageServerComponent = typeof input === "function"
+        ? input
+        : input.ProtectedAdminPageServerComponent;
+    if (typeof ProtectedAdminPageServerComponent !== "function") {
+        throw new TypeError("Expected ProtectedAdminPageServerComponent to be a function");
+    }
+    return (await ProtectedAdminPageServerComponent({
+        user,
+        dbh,
+        environment,
+    }));
+}
+export function withAdminApiRouteGuard(input, dbh, jwt_keys_manager, getApiServerId = getSchemavaultsApiServerId) {
+    const AdminApiRoute = input;
+    return async function ProtectedAdminApiRoute(req) {
+        const environment = getAppEnvironment();
+        const api_server_id = getApiServerId();
+        const token_sources = [];
+        const refresh_token_cookie = req.cookies.get(RefreshTokenCookieName);
+        if (typeof refresh_token_cookie?.value === "string" &&
+            refresh_token_cookie.value.length > 64 &&
+            getStringByteSize(refresh_token_cookie.value) <= MaximumBrowserCookieSize) {
+            token_sources.push({
+                sourceHint: "Auth Server Refresh Token",
+                type: "refresh",
+                token: refresh_token_cookie.value,
+            });
+        }
+        if (req.headers.has(RefreshTokenCookieName)) {
+            const auth_header = req.headers.get("Authorization");
+            if (!auth_header || typeof auth_header !== "string") {
+                throw new Error("Expected 'Authorization' to be non-empty string if set.");
+            }
+            if (!auth_header.startsWith("Bearer ")) {
+                throw new Error("Expected header 'Authorization' to start with 'Bearer '");
+            }
+            const refresh_token_from_header = typeof auth_header === "string" && auth_header.startsWith("Bearer ")
+                ? auth_header.slice("Bearer ".length)
+                : "";
+            if (!refresh_token_from_header) {
+                throw new Error(`Refresh token cookie from header 'Authorization' appears to be empty!`);
+            }
+            token_sources.push({
+                sourceHint: "Auth Server Access Token",
+                type: "access",
+                token: refresh_token_from_header,
+            });
+        }
+        const route_guard_factory = new RouteGuardFactory({
+            environment,
+            is_auth_server: api_server_id === SCHEMAVAULTS_AUTH_APP_DEFINITION.app_id,
+            jwt_keys_manager,
+        });
+        const route_guard = await route_guard_factory.createGuardFromTokenSources("admin", token_sources, SCHEMAVAULTS_AUTH_APP_DEFINITION.app_id);
+        if (!route_guard.user) {
+            return NextResponse.json({
+                success: false,
+                error: true,
+                message: "Authentication failed, unknown user",
+            }, { status: 401 });
+        }
+        const user = route_guard.user;
+        if (!Array.isArray(route_guard.user_organizations)) {
+            return NextResponse.json({
+                success: false,
+                error: true,
+                message: "Authentication failed, failed to load user organizations",
+            }, { status: 401 });
+        }
+        if (!route_guard.isAccessAllowed() || !route_guard.user.admin) {
+            return NextResponse.json({
+                success: false,
+                error: true,
+                message: "Access is not allowed",
+            }, { status: 403 });
+        }
+        return (await AdminApiRoute({
+            req,
+            user,
+            dbh,
+            environment,
+        }));
+    };
+}
+//# sourceMappingURL=withAdminRouteGuard.js.map

package/dist/route_guards/withAdminRouteGuard.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"withAdminRouteGuard.js","sourceRoot":"","sources":["../../src/route_guards/withAdminRouteGuard.ts"],"names":[],"mappings":"AAAA,OAAO,aAAa,CAAC;AAErB,OAAO,EAEL,gCAAgC,EAEhC,iBAAiB,GAClB,MAAM,+BAA+B,CAAC;AAMvC,OAAO,EAAE,OAAO,IAAI,WAAW,EAAE,MAAM,cAAc,CAAC;AAEtD,OAAO,EAAE,2BAA2B,EAAE,MAAM,uBAAuB,CAAC;AACpE,OAAO,iBAAiB,MAAM,oCAAoC,CAAC;AACnE,OAAO,EAAoB,YAAY,EAAE,MAAM,aAAa,CAAC;AAC7D,OAAO,iBAAiB,MAAM,qBAAqB,CAAC;AACpD,OAAO,wBAAwB,MAAM,4BAA4B,CAAC;AAClE,OAAO,sBAAsB,MAAM,2BAA2B,CAAC;AAC/D,OAAO,0BAA0B,MAAM,kCAAkC,CAAC;AA+B1E,MAAM,CAAC,KAAK,UAAU,kCAAkC,CACtD,KAE0C,EAC1C,GAAY,EACZ,gBAAgC,EAChC,iBAAoC,0BAA0B;IAE9D,MAAM,WAAW,GAA+B,iBAAiB,EAAE,CAAC;IACpE,MAAM,aAAa,GAAgB,cAAc,EAAE,CAAC;IACpD,MAAM,OAAO,GAAG,MAAM,WAAW,EAAE,CAAC;IAEpC,MAAM,aAAa,GAAkC,EAAE,CAAC;IAExD,MAAM,oBAAoB,GAAG,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC;IAC1D,IAAI,OAAO,oBAAoB,EAAE,KAAK,KAAK,QAAQ,EAAE,CAAC;QACpD,aAAa,CAAC,IAAI,CAAC;YACjB,UAAU,EAAE,2BAA2B;YACvC,IAAI,EAAE,SAAS;YACf,KAAK,EAAE,oBAAoB,CAAC,KAAK;SAClC,CAAC,CAAC;IACL,CAAC;IAED,MAAM,mBAAmB,GAAG,IAAI,iBAAiB,CAAC;QAChD,WAAW;QACX,cAAc,EAAE,aAAa,KAAK,gCAAgC,CAAC,MAAM;QACzE,gBAAgB;KACjB,CAAC,CAAC;IACH,MAAM,WAAW,GACf,MAAM,mBAAmB,CAAC,2BAA2B,CACnD,OAAO,EACP,aAAa,EACb,gCAAgC,CAAC,MAAM,CACxC,CAAC;IAEJ,IAAI,CAAC,WAAW,CAAC,IAAI,EAAE,CAAC;QACtB,2BAA2B,CAAC,GAAG,EAAE,iBAAiB,CAAC,CAAC;IACtD,CAAC;IACD,MAAM,IAAI,GAAa,WAAW,CAAC,IAAI,CAAC;IAExC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,WAAW,CAAC,kBAAkB,CAAC,EAAE,CAAC;QACnD,2BAA2B,CAAC,GAAG,EAAE,iBAAiB,CAAC,CAAC;IACtD,CAAC;IAED,IAAI,CAAC,WAAW,CAAC,eAAe,EAAE,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC;QAClD,2BAA2B,CAAC,GAAG,EAAE,WAAW,CAAC,CAAC;IAChD,CAAC;IAED,MAAM,iCAAiC,GACrC,OAAO,KAAK,KAAK,UAAU;QACzB,CAAC,CAAC,KAAK;QACP,CAAC,CAAC,KAAK,CAAC,iCAAiC,CAAC;IAC9C,IAAI,OAAO,iCAAiC,KAAK,UAAU,EAAE,CAAC;QAC5D,MAAM,IAAI,SAAS,CACjB,6DAA6D,CAC9D,CAAC;IACJ,CAAC;IACD,OAAO,CAAC,MAAM,iCAAiC,CAAC;QAC9C,IAAI;QACJ,GAAG;QACH,WAAW;KACZ,CAAC,CAAwB,CAAC;AAC7B,CAAC;AAED,MAAM,UAAU,sBAAsB,CACpC,KAAkC,EAClC,GAAY,EACZ,gBAAgC,EAChC,iBAAoC,0BAA0B;IAE9D,MAAM,aAAa,GAAgC,KAAK,CAAC;IACzD,OAAO,KAAK,UAAU,sBAAsB,CAC1C,GAAgB;QAEhB,MAAM,WAAW,GAA+B,iBAAiB,EAAE,CAAC;QACpE,MAAM,aAAa,GAAgB,cAAc,EAAE,CAAC;QAEpD,MAAM,aAAa,GAAkC,EAAE,CAAC;QAExD,MAAM,oBAAoB,GAAG,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,sBAAsB,CAAC,CAAC;QACrE,IACE,OAAO,oBAAoB,EAAE,KAAK,KAAK,QAAQ;YAC/C,oBAAoB,CAAC,KAAK,CAAC,MAAM,GAAG,EAAE;YACtC,iBAAiB,CAAC,oBAAoB,CAAC,KAAK,CAAC,IAAI,wBAAwB,EACzE,CAAC;YACD,aAAa,CAAC,IAAI,CAAC;gBACjB,UAAU,EAAE,2BAA2B;gBACvC,IAAI,EAAE,SAAS;gBACf,KAAK,EAAE,oBAAoB,CAAC,KAAsB;aACnD,CAAC,CAAC;QACL,CAAC;QAED,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,sBAAsB,CAAC,EAAE,CAAC;YAC5C,MAAM,WAAW,GAAkB,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC;YACpE,IAAI,CAAC,WAAW,IAAI,OAAO,WAAW,KAAK,QAAQ,EAAE,CAAC;gBACpD,MAAM,IAAI,KAAK,CACb,yDAAyD,CAC1D,CAAC;YACJ,CAAC;YACD,IAAI,CAAC,WAAW,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;gBACvC,MAAM,IAAI,KAAK,CACb,yDAAyD,CAC1D,CAAC;YACJ,CAAC;YACD,MAAM,yBAAyB,GAC7B,OAAO,WAAW,KAAK,QAAQ,IAAI,WAAW,CAAC,UAAU,CAAC,SAAS,CAAC;gBAClE,CAAC,CAAC,WAAW,CAAC,KAAK,CAAC,SAAS,CAAC,MAAM,CAAC;gBACrC,CAAC,CAAC,EAAE,CAAC;YACT,IAAI,CAAC,yBAAyB,EAAE,CAAC;gBAC/B,MAAM,IAAI,KAAK,CACb,uEAAuE,CACxE,CAAC;YACJ,CAAC;YACD,aAAa,CAAC,IAAI,CAAC;gBACjB,UAAU,EAAE,0BAA0B;gBACtC,IAAI,EAAE,QAAQ;gBACd,KAAK,EAAE,yBAA0C;aAClD,CAAC,CAAC;QACL,CAAC;QAED,MAAM,mBAAmB,GAAG,IAAI,iBAAiB,CAAC;YAChD,WAAW;YACX,cAAc,EAAE,aAAa,KAAK,gCAAgC,CAAC,MAAM;YACzE,gBAAgB;SACjB,CAAC,CAAC;QACH,MAAM,WAAW,GACf,MAAM,mBAAmB,CAAC,2BAA2B,CACnD,OAAO,EACP,aAAa,EACb,gCAAgC,CAAC,MAAM,CACxC,CAAC;QAEJ,IAAI,CAAC,WAAW,CAAC,IAAI,EAAE,CAAC;YACtB,OAAO,YAAY,CAAC,IAAI,CACtB;gBACE,OAAO,EAAE,KAAK;gBACd,KAAK,EAAE,IAAI;gBACX,OAAO,EAAE,qCAAqC;aAC/C,EACD,EAAE,MAAM,EAAE,GAAG,EAAE,CAChB,CAAC;QACJ,CAAC;QACD,MAAM,IAAI,GAAa,WAAW,CAAC,IAAI,CAAC;QAExC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,WAAW,CAAC,kBAAkB,CAAC,EAAE,CAAC;YACnD,OAAO,YAAY,CAAC,IAAI,CACtB;gBACE,OAAO,EAAE,KAAK;gBACd,KAAK,EAAE,IAAI;gBACX,OAAO,EAAE,0DAA0D;aACpE,EACD,EAAE,MAAM,EAAE,GAAG,EAAE,CAChB,CAAC;QACJ,CAAC;QAED,IAAI,CAAC,WAAW,CAAC,eAAe,EAAE,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC;YAC9D,OAAO,YAAY,CAAC,IAAI,CACtB;gBACE,OAAO,EAAE,KAAK;gBACd,KAAK,EAAE,IAAI;gBACX,OAAO,EAAE,uBAAuB;aACjC,EACD,EAAE,MAAM,EAAE,GAAG,EAAE,CAChB,CAAC;QACJ,CAAC;QAED,OAAO,CAAC,MAAM,aAAa,CAAC;YAC1B,GAAG;YACH,IAAI;YACJ,GAAG;YACH,WAAW;SACZ,CAAC,CAAwB,CAAC;IAC7B,CAAC,CAAC;AACJ,CAAC"}

package/dist/route_guards/withAuthenticatedRouteGuard.d.ts

@@ -0,0 +1,26 @@
+import "server-only";
+import { ApiServerId, type SchemaVaultsAppEnvironment } from "@schemavaults/app-definitions";
+import type { OrganizationID, UserData } from "@schemavaults/auth-common";
+import type { ReactElement } from "react";
+import { type NextRequest, NextResponse } from "next/server";
+import type { SchemaVaultsPostgresNeonProxyAdapter } from "@schemavaults/dbh";
+import { IJwtKeyManager } from "../JwtKeyManager";
+interface Dbh<Db extends object> extends AsyncDisposable, SchemaVaultsPostgresNeonProxyAdapter<Db> {
+}
+export interface IProtectedAuthenticatedServerComponentPageProps<Db extends object> {
+    user: UserData;
+    user_organizations: readonly OrganizationID[];
+    dbh: Dbh<Db>;
+    environment: SchemaVaultsAppEnvironment;
+}
+export type TProtectedAuthenticatedPageServerComponent<Db extends object> = (props: IProtectedAuthenticatedServerComponentPageProps<Db>) => Promise<ReactElement>;
+export interface IProtectedAuthenticatedApiRouteProps<Db extends object> extends IProtectedAuthenticatedServerComponentPageProps<Db> {
+    req: NextRequest;
+}
+export type TProtectedAuthenticatedApiRoute<Db extends object> = (props: IProtectedAuthenticatedApiRouteProps<Db>) => Promise<NextResponse>;
+export interface IWithAuthenticatedRouteGuardUtilOpts<Db extends object> {
+    ProtectedAuthenticatedPageServerComponent: TProtectedAuthenticatedPageServerComponent<Db>;
+}
+export declare function withAuthenticatedServerComponentRouteGuard<Db extends object>(input: IWithAuthenticatedRouteGuardUtilOpts<Db> | TProtectedAuthenticatedPageServerComponent<Db>, dbh: Dbh<Db>, jwt_keys_manager: IJwtKeyManager, getApiServerId?: () => ApiServerId): Promise<ReactElement>;
+export declare function withAuthenticatedApiRouteGuard<Db extends object>(input: TProtectedAuthenticatedApiRoute<Db>, dbh: Dbh<Db>, jwt_keys_manager: IJwtKeyManager, getApiServerId?: () => ApiServerId): (req: NextRequest) => Promise<NextResponse>;
+export {};

package/dist/route_guards/withAuthenticatedRouteGuard.js

@@ -0,0 +1,124 @@
+import "server-only";
+import { SCHEMAVAULTS_AUTH_APP_DEFINITION, getAppEnvironment, } from "@schemavaults/app-definitions";
+import { cookies as loadCookies } from "next/headers";
+import { redirectWithNextAppDirError } from "../redirect-with-error";
+import RouteGuardFactory from "../route_guards/route-guard-factory";
+import { NextResponse } from "next/server";
+import getStringByteSize from "../getStringByteSize";
+import MaximumBrowserCookieSize from "../MaximumBrowserCookieSize";
+import RefreshTokenCookieName from "../RefreshTokenCookieNames";
+import getSchemavaultsApiServerId from "../get-schemavaults-api-server-id";
+export async function withAuthenticatedServerComponentRouteGuard(input, dbh, jwt_keys_manager, getApiServerId = getSchemavaultsApiServerId) {
+    const environment = getAppEnvironment();
+    const api_server_id = getApiServerId();
+    const cookies = await loadCookies();
+    const token_sources = [];
+    const refresh_token_cookie = cookies.get("refresh_token");
+    if (typeof refresh_token_cookie?.value === "string") {
+        token_sources.push({
+            sourceHint: "Auth Server Refresh Token",
+            type: "refresh",
+            token: refresh_token_cookie.value,
+        });
+    }
+    const route_guard_factory = new RouteGuardFactory({
+        environment,
+        is_auth_server: api_server_id === SCHEMAVAULTS_AUTH_APP_DEFINITION.app_id,
+        jwt_keys_manager,
+    });
+    const route_guard = await route_guard_factory.createGuardFromTokenSources("authenticated", token_sources, api_server_id);
+    if (!route_guard.user) {
+        redirectWithNextAppDirError(401, "unauthenticated");
+    }
+    const user = route_guard.user;
+    if (!route_guard.isAccessAllowed()) {
+        redirectWithNextAppDirError(403, "forbidden");
+    }
+    const ProtectedAuthenticatedPageServerComponent = typeof input === "function"
+        ? input
+        : input.ProtectedAuthenticatedPageServerComponent;
+    if (typeof ProtectedAuthenticatedPageServerComponent !== "function") {
+        throw new TypeError("Expected ProtectedAuthenticatedPageServerComponent to be a function");
+    }
+    return (await ProtectedAuthenticatedPageServerComponent({
+        user,
+        dbh,
+        environment,
+        user_organizations: route_guard.user_organizations,
+    }));
+}
+export function withAuthenticatedApiRouteGuard(input, dbh, jwt_keys_manager, getApiServerId = getSchemavaultsApiServerId) {
+    const AuthenticatedApiRoute = input;
+    return async function ProtectedAuthenticatedApiRoute(req) {
+        const environment = getAppEnvironment();
+        const api_server_id = getApiServerId();
+        const token_sources = [];
+        const refresh_token_cookie = req.cookies.get(RefreshTokenCookieName);
+        if (typeof refresh_token_cookie?.value === "string" &&
+            refresh_token_cookie.value.length > 64 &&
+            getStringByteSize(refresh_token_cookie.value) <= MaximumBrowserCookieSize) {
+            token_sources.push({
+                sourceHint: "Auth Server Refresh Token",
+                type: "refresh",
+                token: refresh_token_cookie.value,
+            });
+        }
+        if (req.headers.has(RefreshTokenCookieName)) {
+            const auth_header = req.headers.get("Authorization");
+            if (!auth_header || typeof auth_header !== "string") {
+                throw new Error("Expected 'Authorization' to be non-empty string if set.");
+            }
+            if (!auth_header.startsWith("Bearer ")) {
+                throw new Error("Expected header 'Authorization' to start with 'Bearer '");
+            }
+            const refresh_token_from_header = typeof auth_header === "string" && auth_header.startsWith("Bearer ")
+                ? auth_header.slice("Bearer ".length)
+                : "";
+            if (!refresh_token_from_header) {
+                throw new Error(`Refresh token cookie from header 'Authorization' appears to be empty!`);
+            }
+            token_sources.push({
+                sourceHint: "Auth Server Access Token",
+                type: "access",
+                token: refresh_token_from_header,
+            });
+        }
+        const route_guard_factory = new RouteGuardFactory({
+            environment,
+            is_auth_server: api_server_id === SCHEMAVAULTS_AUTH_APP_DEFINITION.app_id,
+            jwt_keys_manager,
+        });
+        const route_guard = await route_guard_factory.createGuardFromTokenSources("authenticated", token_sources, SCHEMAVAULTS_AUTH_APP_DEFINITION.app_id);
+        if (!route_guard.user) {
+            return NextResponse.json({
+                success: false,
+                error: true,
+                message: "Authentication failed, unknown user",
+            }, { status: 401 });
+        }
+        const user = route_guard.user;
+        if (!Array.isArray(route_guard.user_organizations)) {
+            return NextResponse.json({
+                success: false,
+                error: true,
+                message: "Authentication failed, failed to load associated user organizations",
+            }, { status: 401 });
+        }
+        if (!route_guard.isAccessAllowed() || !route_guard.user) {
+            return NextResponse.json({
+                success: false,
+                error: true,
+                message: "Access is not allowed",
+            }, { status: 403 });
+        }
+        const user_organizations = route_guard.user_organizations;
+        return (await AuthenticatedApiRoute({
+            req,
+            user,
+            dbh,
+            environment,
+            user_organizations,
+        }));
+    };
+}
+//# sourceMappingURL=withAuthenticatedRouteGuard.js.map

package/dist/route_guards/withAuthenticatedRouteGuard.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"withAuthenticatedRouteGuard.js","sourceRoot":"","sources":["../../src/route_guards/withAuthenticatedRouteGuard.ts"],"names":[],"mappings":"AAAA,OAAO,aAAa,CAAC;AAErB,OAAO,EAEL,gCAAgC,EAEhC,iBAAiB,GAClB,MAAM,+BAA+B,CAAC;AAOvC,OAAO,EAAE,OAAO,IAAI,WAAW,EAAE,MAAM,cAAc,CAAC;AAEtD,OAAO,EAAE,2BAA2B,EAAE,MAAM,uBAAuB,CAAC;AACpE,OAAO,iBAAiB,MAAM,oCAAoC,CAAC;AACnE,OAAO,EAAoB,YAAY,EAAE,MAAM,aAAa,CAAC;AAC7D,OAAO,iBAAiB,MAAM,qBAAqB,CAAC;AACpD,OAAO,wBAAwB,MAAM,4BAA4B,CAAC;AAClE,OAAO,sBAAsB,MAAM,2BAA2B,CAAC;AAE/D,OAAO,0BAA0B,MAAM,kCAAkC,CAAC;AAiC1E,MAAM,CAAC,KAAK,UAAU,0CAA0C,CAG9D,KAEkD,EAClD,GAAY,EACZ,gBAAgC,EAChC,iBAAoC,0BAA0B;IAE9D,MAAM,WAAW,GAA+B,iBAAiB,EAAE,CAAC;IACpE,MAAM,aAAa,GAAgB,cAAc,EAAE,CAAC;IACpD,MAAM,OAAO,GAAG,MAAM,WAAW,EAAE,CAAC;IAEpC,MAAM,aAAa,GAAkC,EAAE,CAAC;IAExD,MAAM,oBAAoB,GAAG,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC;IAC1D,IAAI,OAAO,oBAAoB,EAAE,KAAK,KAAK,QAAQ,EAAE,CAAC;QACpD,aAAa,CAAC,IAAI,CAAC;YACjB,UAAU,EAAE,2BAA2B;YACvC,IAAI,EAAE,SAAS;YACf,KAAK,EAAE,oBAAoB,CAAC,KAAK;SAClC,CAAC,CAAC;IACL,CAAC;IAED,MAAM,mBAAmB,GAAG,IAAI,iBAAiB,CAAC;QAChD,WAAW;QACX,cAAc,EAAE,aAAa,KAAK,gCAAgC,CAAC,MAAM;QACzE,gBAAgB;KACjB,CAAC,CAAC;IACH,MAAM,WAAW,GACf,MAAM,mBAAmB,CAAC,2BAA2B,CACnD,eAAe,EACf,aAAa,EACb,aAAa,CACd,CAAC;IAEJ,IAAI,CAAC,WAAW,CAAC,IAAI,EAAE,CAAC;QACtB,2BAA2B,CAAC,GAAG,EAAE,iBAAiB,CAAC,CAAC;IACtD,CAAC;IACD,MAAM,IAAI,GAAa,WAAW,CAAC,IAAI,CAAC;IAExC,IAAI,CAAC,WAAW,CAAC,eAAe,EAAE,EAAE,CAAC;QACnC,2BAA2B,CAAC,GAAG,EAAE,WAAW,CAAC,CAAC;IAChD,CAAC;IAED,MAAM,yCAAyC,GAC7C,OAAO,KAAK,KAAK,UAAU;QACzB,CAAC,CAAC,KAAK;QACP,CAAC,CAAC,KAAK,CAAC,yCAAyC,CAAC;IACtD,IAAI,OAAO,yCAAyC,KAAK,UAAU,EAAE,CAAC;QACpE,MAAM,IAAI,SAAS,CACjB,qEAAqE,CACtE,CAAC;IACJ,CAAC;IACD,OAAO,CAAC,MAAM,yCAAyC,CAAC;QACtD,IAAI;QACJ,GAAG;QACH,WAAW;QACX,kBAAkB,EAAE,WAAW,CAAC,kBAAkB;KACnD,CAAC,CAAwB,CAAC;AAC7B,CAAC;AAED,MAAM,UAAU,8BAA8B,CAC5C,KAA0C,EAC1C,GAAY,EACZ,gBAAgC,EAChC,iBAAoC,0BAA0B;IAE9D,MAAM,qBAAqB,GAAwC,KAAK,CAAC;IACzE,OAAO,KAAK,UAAU,8BAA8B,CAClD,GAAgB;QAEhB,MAAM,WAAW,GAA+B,iBAAiB,EAAE,CAAC;QACpE,MAAM,aAAa,GAAgB,cAAc,EAAE,CAAC;QAEpD,MAAM,aAAa,GAAkC,EAAE,CAAC;QAExD,MAAM,oBAAoB,GAAG,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,sBAAsB,CAAC,CAAC;QACrE,IACE,OAAO,oBAAoB,EAAE,KAAK,KAAK,QAAQ;YAC/C,oBAAoB,CAAC,KAAK,CAAC,MAAM,GAAG,EAAE;YACtC,iBAAiB,CAAC,oBAAoB,CAAC,KAAK,CAAC,IAAI,wBAAwB,EACzE,CAAC;YACD,aAAa,CAAC,IAAI,CAAC;gBACjB,UAAU,EAAE,2BAA2B;gBACvC,IAAI,EAAE,SAAS;gBACf,KAAK,EAAE,oBAAoB,CAAC,KAAsB;aACnD,CAAC,CAAC;QACL,CAAC;QAED,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,sBAAsB,CAAC,EAAE,CAAC;YAC5C,MAAM,WAAW,GAAkB,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC;YACpE,IAAI,CAAC,WAAW,IAAI,OAAO,WAAW,KAAK,QAAQ,EAAE,CAAC;gBACpD,MAAM,IAAI,KAAK,CACb,yDAAyD,CAC1D,CAAC;YACJ,CAAC;YACD,IAAI,CAAC,WAAW,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;gBACvC,MAAM,IAAI,KAAK,CACb,yDAAyD,CAC1D,CAAC;YACJ,CAAC;YACD,MAAM,yBAAyB,GAC7B,OAAO,WAAW,KAAK,QAAQ,IAAI,WAAW,CAAC,UAAU,CAAC,SAAS,CAAC;gBAClE,CAAC,CAAC,WAAW,CAAC,KAAK,CAAC,SAAS,CAAC,MAAM,CAAC;gBACrC,CAAC,CAAC,EAAE,CAAC;YACT,IAAI,CAAC,yBAAyB,EAAE,CAAC;gBAC/B,MAAM,IAAI,KAAK,CACb,uEAAuE,CACxE,CAAC;YACJ,CAAC;YACD,aAAa,CAAC,IAAI,CAAC;gBACjB,UAAU,EAAE,0BAA0B;gBACtC,IAAI,EAAE,QAAQ;gBACd,KAAK,EAAE,yBAA0C;aAClD,CAAC,CAAC;QACL,CAAC;QAED,MAAM,mBAAmB,GAAG,IAAI,iBAAiB,CAAC;YAChD,WAAW;YACX,cAAc,EAAE,aAAa,KAAK,gCAAgC,CAAC,MAAM;YACzE,gBAAgB;SACjB,CAAC,CAAC;QACH,MAAM,WAAW,GACf,MAAM,mBAAmB,CAAC,2BAA2B,CACnD,eAAe,EACf,aAAa,EACb,gCAAgC,CAAC,MAAM,CACxC,CAAC;QAEJ,IAAI,CAAC,WAAW,CAAC,IAAI,EAAE,CAAC;YACtB,OAAO,YAAY,CAAC,IAAI,CACtB;gBACE,OAAO,EAAE,KAAK;gBACd,KAAK,EAAE,IAAI;gBACX,OAAO,EAAE,qCAAqC;aAC/C,EACD,EAAE,MAAM,EAAE,GAAG,EAAE,CAChB,CAAC;QACJ,CAAC;QACD,MAAM,IAAI,GAAa,WAAW,CAAC,IAAI,CAAC;QAExC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,WAAW,CAAC,kBAAkB,CAAC,EAAE,CAAC;YACnD,OAAO,YAAY,CAAC,IAAI,CACtB;gBACE,OAAO,EAAE,KAAK;gBACd,KAAK,EAAE,IAAI;gBACX,OAAO,EACL,qEAAqE;aACxE,EACD,EAAE,MAAM,EAAE,GAAG,EAAE,CAChB,CAAC;QACJ,CAAC;QAED,IAAI,CAAC,WAAW,CAAC,eAAe,EAAE,IAAI,CAAC,WAAW,CAAC,IAAI,EAAE,CAAC;YACxD,OAAO,YAAY,CAAC,IAAI,CACtB;gBACE,OAAO,EAAE,KAAK;gBACd,KAAK,EAAE,IAAI;gBACX,OAAO,EAAE,uBAAuB;aACjC,EACD,EAAE,MAAM,EAAE,GAAG,EAAE,CAChB,CAAC;QACJ,CAAC;QAED,MAAM,kBAAkB,GACtB,WAAW,CAAC,kBAAkB,CAAC;QAEjC,OAAO,CAAC,MAAM,qBAAqB,CAAC;YAClC,GAAG;YACH,IAAI;YACJ,GAAG;YACH,WAAW;YACX,kBAAkB;SACnB,CAAC,CAAwB,CAAC;IAC7B,CAAC,CAAC;AACJ,CAAC"}

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@schemavaults/auth-server-sdk",
   "description": "TypeScript SDK for building authenticated endpoints/middlewares for the Auth Server and Resource Servers",
-  "version": "0.17.2",
+  "version": "0.17.6",
   "license": "UNLICENSED",
   "private": false,
   "repository": {
@@ -15,9 +15,9 @@
   "types": "dist/index.d.ts",
   "dependencies": {
     "zod": "3.23.8",
-    "@schemavaults/jwt": "0.6.13",
-    "@schemavaults/auth-common": "0.7.27",
-    "@schemavaults/app-definitions": "0.6.1"
+    "@schemavaults/jwt": "0.6.15",
+    "@schemavaults/auth-common": "0.7.29",
+    "@schemavaults/app-definitions": "0.6.11"
   },
   "scripts": {
     "build": "tsc --project tsconfig.json && tsc-alias --project tsconfig.json",
@@ -28,10 +28,12 @@
     "lint": "eslint src --ext .ts,.tsx"
   },
   "devDependencies": {
+    "@schemavaults/dbh": "0.7.1",
     "typescript": "5.9.3",
     "bun-types": "1.3.6",
+    "@types/react": "19.0.0",
     "tsc-alias": "1.8.15",
-    "next": "16.0.10",
+    "next": "16.1.4",
     "eslint": "9.39.1",
     "@eslint/js": "9.39.1",
     "globals": "16.5.0",
@@ -41,5 +43,77 @@
   "publishConfig": {
     "access": "public"
   },
-  "packageManager": "bun@1.3.6"
+  "packageManager": "bun@1.3.6",
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "import": "./dist/index.js",
+      "require": "./dist/index.cjs"
+    },
+    "./*": {
+      "types": "./dist/*",
+      "import": "./dist/*",
+      "require": "./dist/*"
+    },
+    "./dist/*": {
+      "types": "./dist/*",
+      "import": "./dist/*",
+      "require": "./dist/*"
+    },
+    "./auth-server-error-message-catalog": {
+      "types": "./dist/auth-server-error-message-catalog.d.ts",
+      "import": "./dist/auth-server-error-message-catalog.js",
+      "require": "./dist/auth-server-error-message-catalog.js"
+    },
+    "./redirect-with-error": {
+      "types": "./dist/redirect-with-error.d.ts",
+      "import": "./dist/redirect-with-error.js",
+      "require": "./dist/redirect-with-error.js"
+    },
+    "./route_guards": {
+      "types": "./dist/route_guards/index.d.ts",
+      "import": "./dist/route_guards/index.js",
+      "require": "./dist/route_guards/index.js"
+    },
+    "./route_guards/*": {
+      "types": "./dist/route_guards/*",
+      "import": "./dist/route_guards/*",
+      "require": "./dist/route_guards/*"
+    },
+    "./middleware": {
+      "types": "./dist/middleware/index.d.ts",
+      "import": "./dist/middleware/index.js",
+      "require": "./dist/middleware/index.js"
+    },
+    "./middleware/*": {
+      "types": "./dist/middleware/*",
+      "import": "./dist/middleware/*",
+      "require": "./dist/middleware/*"
+    },
+    "./MaximumBrowserCookieSize": {
+      "types": "./dist/MaximumBrowserCookieSize.d.ts",
+      "import": "./dist/MaximumBrowserCookieSize.js",
+      "require": "./dist/MaximumBrowserCookieSize.js"
+    },
+    "./get-schemavaults-api-server-id": {
+      "types": "./dist/get-schemavaults-api-server-id.d.ts",
+      "import": "./dist/get-schemavaults-api-server-id.js",
+      "require": "./dist/get-schemavaults-api-server-id.js"
+    },
+    "./get-schemavaults-auth-server-uri": {
+      "types": "./dist/get-schemavaults-auth-server-uri.d.ts",
+      "import": "./dist/get-schemavaults-auth-server-uri.js",
+      "require": "./dist/get-schemavaults-auth-server-uri.js"
+    },
+    "./RefreshTokenCookieNames": {
+      "types": "./dist/RefreshTokenCookieNames.d.ts",
+      "import": "./dist/RefreshTokenCookieNames.js",
+      "require": "./dist/RefreshTokenCookieNames.js"
+    },
+    "./getStringByteSize": {
+      "types": "./dist/getStringByteSize.d.ts",
+      "import": "./dist/getStringByteSize.js",
+      "require": "./dist/getStringByteSize.js"
+    }
+  }
 }