@schemavaults/auth-server-sdk 0.17.2

package/dist/middleware/middlewares/BaseMiddleware.d.ts

@@ -0,0 +1,24 @@
+import type { ISchemaVaultsMiddleware, ISchemaVaultsMiddlewareFnInputs } from "../middleware_types";
+import { type SchemaVaultsAppEnvironment } from "@schemavaults/app-definitions";
+import type { NextResponse } from "next/server";
+export interface IBaseMiddlewareInitOptions {
+    next: ISchemaVaultsMiddleware | undefined;
+    name: string;
+    debug?: boolean;
+    environment?: SchemaVaultsAppEnvironment;
+}
+export declare abstract class BaseMiddleware implements ISchemaVaultsMiddleware {
+    protected readonly next: ISchemaVaultsMiddleware | undefined;
+    readonly name: string;
+    readonly type: "middleware";
+    private readonly _debug;
+    private readonly _environment;
+    protected get debug(): boolean;
+    protected get environment(): SchemaVaultsAppEnvironment;
+    protected static hasNextMiddleware(next: ISchemaVaultsMiddleware | undefined): next is ISchemaVaultsMiddleware;
+    get height(): number;
+    protected constructor(opts: IBaseMiddlewareInitOptions);
+    abstract handle(inputs: ISchemaVaultsMiddlewareFnInputs): Promise<NextResponse | Response>;
+    toMiddlewareFlowString(): string;
+}
+export default BaseMiddleware;

package/dist/middleware/middlewares/BaseMiddleware.js

@@ -0,0 +1,53 @@
+import { getAppEnvironment, } from "@schemavaults/app-definitions";
+export class BaseMiddleware {
+    next;
+    name;
+    type = "middleware";
+    _debug;
+    _environment;
+    get debug() {
+        return this._debug;
+    }
+    get environment() {
+        return this._environment;
+    }
+    static hasNextMiddleware(next) {
+        if (!!next && next.type === "middleware")
+            return true;
+        return false;
+    }
+    get height() {
+        if (!this.next)
+            return 0;
+        return this.next.height + 1;
+    }
+    constructor(opts) {
+        this.name = opts.name;
+        if (opts.next) {
+            if (typeof opts.next.type !== "string" ||
+                opts.next.type !== "middleware") {
+                throw new Error("Expected 'next' to be a SchemaVaults middleware instance, but the 'type' property was not equal to 'middleware'!");
+            }
+        }
+        this.next = opts.next;
+        const environment = opts.environment ?? getAppEnvironment();
+        this._environment = environment;
+        this._debug =
+            typeof opts.debug === "boolean"
+                ? opts.debug
+                : environment === "development" ||
+                    environment === "test" ||
+                    environment === "staging";
+    }
+    toMiddlewareFlowString() {
+        const next = this.next;
+        if (!next) {
+            return `"${this.name}"`;
+        }
+        else {
+            return `"${this.name}" -> ${next.toMiddlewareFlowString()}`;
+        }
+    }
+}
+export default BaseMiddleware;
+//# sourceMappingURL=BaseMiddleware.js.map

package/dist/middleware/middlewares/BaseMiddleware.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"BaseMiddleware.js","sourceRoot":"","sources":["../../../src/middleware/middlewares/BaseMiddleware.ts"],"names":[],"mappings":"AAIA,OAAO,EACL,iBAAiB,GAElB,MAAM,+BAA+B,CAAC;AAUvC,MAAM,OAAgB,cAAc;IACf,IAAI,CAAsC;IAC7C,IAAI,CAAS;IACb,IAAI,GAAG,YAAqB,CAAC;IAC5B,MAAM,CAAU;IAChB,YAAY,CAA6B;IAE1D,IAAc,KAAK;QACjB,OAAO,IAAI,CAAC,MAAM,CAAC;IACrB,CAAC;IAED,IAAc,WAAW;QACvB,OAAO,IAAI,CAAC,YAAY,CAAC;IAC3B,CAAC;IAES,MAAM,CAAC,iBAAiB,CAChC,IAAyC;QAEzC,IAAI,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,IAAI,KAAK,YAAY;YAAE,OAAO,IAAI,CAAC;QACtD,OAAO,KAAK,CAAC;IACf,CAAC;IAED,IAAW,MAAM;QACf,IAAI,CAAC,IAAI,CAAC,IAAI;YAAE,OAAO,CAAC,CAAC;QACzB,OAAO,IAAI,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC;IAC9B,CAAC;IAED,YAAsB,IAAgC;QACpD,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC;QACtB,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;YACd,IACE,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,KAAK,QAAQ;gBAClC,IAAI,CAAC,IAAI,CAAC,IAAI,KAAK,YAAY,EAC/B,CAAC;gBACD,MAAM,IAAI,KAAK,CACb,kHAAkH,CACnH,CAAC;YACJ,CAAC;QACH,CAAC;QACD,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC;QACtB,MAAM,WAAW,GACf,IAAI,CAAC,WAAW,IAAI,iBAAiB,EAAE,CAAC;QAC1C,IAAI,CAAC,YAAY,GAAG,WAAW,CAAC;QAChC,IAAI,CAAC,MAAM;YACT,OAAO,IAAI,CAAC,KAAK,KAAK,SAAS;gBAC7B,CAAC,CAAC,IAAI,CAAC,KAAK;gBACZ,CAAC,CAAC,WAAW,KAAK,aAAa;oBAC7B,WAAW,KAAK,MAAM;oBACtB,WAAW,KAAK,SAAS,CAAC;IAClC,CAAC;IAMM,sBAAsB;QAC3B,MAAM,IAAI,GAAwC,IAAI,CAAC,IAAI,CAAC;QAC5D,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,OAAO,IAAI,IAAI,CAAC,IAAI,GAAY,CAAC;QACnC,CAAC;aAAM,CAAC;YACN,OAAO,IAAI,IAAI,CAAC,IAAI,QAAQ,IAAI,CAAC,sBAAsB,EAAE,EAAW,CAAC;QACvE,CAAC;IACH,CAAC;CACF;AAED,eAAe,cAAc,CAAC"}

package/dist/middleware/middlewares/default_middleware.d.ts

@@ -0,0 +1,10 @@
+import type { ISchemaVaultsMiddleware, ISchemaVaultsMiddlewareFactory, ISchemaVaultsMiddlewareFnInputs } from "../middleware_types";
+import { BaseMiddleware } from "./BaseMiddleware";
+export declare class DefaultMiddleware extends BaseMiddleware implements ISchemaVaultsMiddleware {
+    constructor(next?: ISchemaVaultsMiddleware);
+    handle(inputs: ISchemaVaultsMiddlewareFnInputs): Promise<Response>;
+}
+export declare class DefaultMiddlewareFactory implements ISchemaVaultsMiddlewareFactory {
+    readonly type: "middleware-factory";
+    create(next: ISchemaVaultsMiddleware): ISchemaVaultsMiddleware;
+}

package/dist/middleware/middlewares/default_middleware.js

@@ -0,0 +1,25 @@
+import { BaseMiddleware } from "./BaseMiddleware";
+export class DefaultMiddleware extends BaseMiddleware {
+    constructor(next) {
+        super({
+            next,
+            name: "Passthrough",
+        });
+    }
+    async handle(inputs) {
+        if (this.environment === "development") {
+            console.log("[DefaultMiddleware] Forwarding to endpoint or next middleware...");
+        }
+        if (this.next) {
+            return this.next.handle(inputs);
+        }
+        return inputs.next();
+    }
+}
+export class DefaultMiddlewareFactory {
+    type = "middleware-factory";
+    create(next) {
+        return new DefaultMiddleware(next);
+    }
+}
+//# sourceMappingURL=default_middleware.js.map

package/dist/middleware/middlewares/default_middleware.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"default_middleware.js","sourceRoot":"","sources":["../../../src/middleware/middlewares/default_middleware.ts"],"names":[],"mappings":"AAKA,OAAO,EAAE,cAAc,EAAE,MAAM,8BAA8B,CAAC;AAE9D,MAAM,OAAO,iBACX,SAAQ,cAAc;IAGtB,YAAmB,IAA8B;QAC/C,KAAK,CAAC;YACJ,IAAI;YACJ,IAAI,EAAE,aAAa;SACpB,CAAC,CAAC;IACL,CAAC;IAEM,KAAK,CAAC,MAAM,CAAC,MAAuC;QACzD,IAAI,IAAI,CAAC,WAAW,KAAK,aAAa,EAAE,CAAC;YACvC,OAAO,CAAC,GAAG,CACT,kEAAkE,CACnE,CAAC;QACJ,CAAC;QACD,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;YACd,OAAO,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QAClC,CAAC;QACD,OAAO,MAAM,CAAC,IAAI,EAAE,CAAC;IACvB,CAAC;CACF;AAED,MAAM,OAAO,wBAAwB;IAGnB,IAAI,GAAG,oBAA6B,CAAC;IAE9C,MAAM,CAAC,IAA6B;QACzC,OAAO,IAAI,iBAAiB,CAAC,IAAI,CAAC,CAAC;IACrC,CAAC;CACF"}

package/dist/middleware/middlewares/withAuthJwtValidation/index.d.ts

@@ -0,0 +1 @@
+export { AuthJwtValidationMiddlewareFactory, default as default } from './withAuthJwtValidation';

package/dist/middleware/middlewares/withAuthJwtValidation/index.js

@@ -0,0 +1,2 @@
+export { AuthJwtValidationMiddlewareFactory, default as default } from './withAuthJwtValidation';
+//# sourceMappingURL=index.js.map

package/dist/middleware/middlewares/withAuthJwtValidation/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../src/middleware/middlewares/withAuthJwtValidation/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,kCAAkC,EAAE,OAAO,IAAI,OAAO,EAAE,MAAM,yBAAyB,CAAC"}

package/dist/middleware/middlewares/withAuthJwtValidation/withAuthJwtValidation.d.ts

@@ -0,0 +1,32 @@
+import type { NextResponse } from "next/server";
+import { type AuthMiddlewareRules } from "@schemavaults/auth-common";
+import { type SchemaVaultsAppEnvironment } from "@schemavaults/app-definitions";
+import type { ISchemaVaultsMiddleware, ISchemaVaultsMiddlewareFactory, ISchemaVaultsMiddlewareFnInputs } from "../../middleware_types";
+import BaseMiddleware from "../BaseMiddleware";
+import type { IJwtKeyManager } from "../../../JwtKeyManager";
+import { type IDecodeAuthTokenKeys } from "../../../JwtKeyManager/loadJwtDecodingKeys";
+export interface AuthJwtValidationMiddlewareOptions {
+    audience: string;
+    middleware_rules?: AuthMiddlewareRules;
+    debug?: boolean;
+    environment: SchemaVaultsAppEnvironment;
+    keys_manager: IJwtKeyManager;
+}
+interface IAuthJwtValidationMiddlewareOpts extends AuthJwtValidationMiddlewareOptions {
+    next: ISchemaVaultsMiddleware;
+}
+declare class AuthJwtValidationMiddleware extends BaseMiddleware implements ISchemaVaultsMiddleware {
+    private readonly audience;
+    private readonly middleware_rules;
+    private readonly keys_manager;
+    constructor({ next, audience, ...opts }: IAuthJwtValidationMiddlewareOpts);
+    protected loadJwtDecodingKeys(keyset_id: string): Promise<IDecodeAuthTokenKeys>;
+    handle({ req, json, redirect, ...inputs }: ISchemaVaultsMiddlewareFnInputs): Promise<NextResponse | Response>;
+}
+export declare class AuthJwtValidationMiddlewareFactory implements ISchemaVaultsMiddlewareFactory {
+    readonly type: "middleware-factory";
+    private middlewareOpts;
+    constructor(opts: AuthJwtValidationMiddlewareOptions);
+    create(next: ISchemaVaultsMiddleware): AuthJwtValidationMiddleware;
+}
+export default AuthJwtValidationMiddlewareFactory;

package/dist/middleware/middlewares/withAuthJwtValidation/withAuthJwtValidation.js

@@ -0,0 +1,245 @@
+import { AuthMiddleware, defaultAuthMiddlewareRules, determineAuthStatus, audienceSchema, } from "@schemavaults/auth-common";
+import { decodeJWT, getKeysetIdFromToken, } from "@schemavaults/jwt";
+import { apiServerIdSchema, } from "@schemavaults/app-definitions";
+import BaseMiddleware from "../BaseMiddleware";
+import loadJwtDecodingKeys from "../../../JwtKeyManager/loadJwtDecodingKeys";
+class AuthJwtValidationMiddleware extends BaseMiddleware {
+    audience;
+    middleware_rules;
+    keys_manager;
+    constructor({ next, audience, ...opts }) {
+        super({
+            ...opts,
+            name: "AuthJwtValidationMiddleware",
+            next,
+        });
+        if (typeof audience !== "string") {
+            throw new Error("AuthJwtValidationMiddleware did not receive an 'audience' to enforce for received JWTs!");
+        }
+        else if (!apiServerIdSchema.safeParse(audience).success) {
+            throw new TypeError("Invalid 'audience'; should be a valid API server ID!");
+        }
+        this.audience = audience;
+        this.middleware_rules = opts.middleware_rules ?? defaultAuthMiddlewareRules;
+        this.keys_manager = opts.keys_manager;
+    }
+    async loadJwtDecodingKeys(keyset_id) {
+        const audience_id = this.audience;
+        const decoding_keys = await loadJwtDecodingKeys({
+            keyset_id,
+            keys_manager: this.keys_manager,
+            audience_id,
+            debug: this.debug,
+        });
+        return decoding_keys;
+    }
+    async handle({ req, json, redirect, ...inputs }) {
+        const environment = this.environment;
+        if (this.debug) {
+            console.log(`[${this.name}] Running auth middleware on path: "${req.nextUrl.pathname}"`);
+        }
+        if (req.cookies.size > 20) {
+            console.error(`[${this.name}] Too many cookies: `, req.cookies.size);
+            return json({
+                error: true,
+                success: false,
+                message: "Too many cookies attached to request!",
+            }, { status: 400 });
+        }
+        // Initialize array to store tokens from different sources
+        const token_sources = [];
+        // Load Tokens from cookies
+        let refresh_token = req.cookies.get("refresh_token")?.value;
+        let access_token = req.cookies.get("access_token")?.value;
+        if (typeof refresh_token === "string") {
+            token_sources.push({
+                token: refresh_token,
+                type: "refresh",
+                sourceHint: "Refresh Token Cookie",
+            });
+        }
+        if (typeof access_token === "string") {
+            token_sources.push({
+                token: access_token,
+                type: "access",
+                sourceHint: "Access Token Cookie",
+            });
+        }
+        let authorizationHeaderToken = undefined;
+        const authorizationHeader = req.headers.get("Authorization") ??
+            req.headers.get("authorization") ??
+            null;
+        if (typeof authorizationHeader === "string") {
+            const bearerPrefix = "Bearer ";
+            if (authorizationHeader.startsWith(bearerPrefix)) {
+                if (authorizationHeader.length > bearerPrefix.length) {
+                    const withoutPrefix = authorizationHeader.slice(bearerPrefix.length);
+                    authorizationHeaderToken = withoutPrefix;
+                }
+            }
+        }
+        if (typeof authorizationHeaderToken === "string") {
+            token_sources.push({
+                token: authorizationHeaderToken,
+                type: "access",
+                sourceHint: "Authorization Bearer Header Access Token",
+            });
+        }
+        const jwt_audience = this.audience;
+        const parsed_jwt_audience = await audienceSchema.safeParseAsync(jwt_audience);
+        if (!parsed_jwt_audience.success) {
+            console.error(parsed_jwt_audience.error);
+            throw new Error("[withAuthJwtValidation] Received invalid JWT audience to enforce!");
+        }
+        let authStatus;
+        try {
+            const baseAuthStatusDeterminationInputs = {
+                client_type: "server",
+                token_sources,
+                debug: this.debug,
+            };
+            if (this.debug) {
+                console.log("[withAuthJwtValidation] Determining auth status with input options: ", baseAuthStatusDeterminationInputs);
+            }
+            authStatus = await determineAuthStatus({
+                ...baseAuthStatusDeterminationInputs,
+                decodeJWT: async ({ token, type, jwt_audience, }) => {
+                    let keyset_id;
+                    try {
+                        keyset_id = getKeysetIdFromToken(token);
+                    }
+                    catch (e) {
+                        console.error("Failed to load 'keyset_id' from auth token: ", e);
+                        throw new Error("Failed to load 'keyset_id' from auth token!");
+                    }
+                    let decodingKeys;
+                    try {
+                        decodingKeys = await this.loadJwtDecodingKeys(keyset_id);
+                        if (decodingKeys.keyset_id !== keyset_id) {
+                            throw new Error("Mismatch between the keyset ID of result and what was requested!");
+                        }
+                    }
+                    catch (e) {
+                        console.error(`Failed to load keys associated with token-associated keyset '${keyset_id}': `, e);
+                        throw new Error("Failed to load keys associated with token-associated keyset!");
+                    }
+                    const { decryption_key, verification_key } = decodingKeys;
+                    try {
+                        const decoded = await decodeJWT({
+                            jwt: token,
+                            type,
+                            audience: jwt_audience,
+                            env: environment,
+                            decryption_key,
+                            verification_key,
+                            keyset_id,
+                        });
+                        return { ...decoded };
+                    }
+                    catch (e) {
+                        if (this.debug) {
+                            console.error("[withAuthJwtValidation] Failed to decode JWT: ", e);
+                        }
+                        throw new Error("Failed to decode JWT to determine auth status!");
+                    }
+                },
+                jwt_audience,
+            });
+        }
+        catch (e) {
+            console.error("[withAuthJwtValidation] Middleware failed to determine authentication status: ", e);
+            throw new Error("Failed to determine authentication status!");
+        }
+        let authMiddlewareResult;
+        try {
+            authMiddlewareResult = AuthMiddleware({
+                path: req.nextUrl.pathname,
+                authStatus,
+                rules: this.middleware_rules,
+                authedOnUnauthedRouteRedirectTo: "/account",
+                unauthedOnAuthedRouteRedirectTo: "/auth/login",
+                authorize_uri: "/auth/authorize",
+                successful_logout_redirect_uri: "/",
+                environment: this.environment,
+                debug: this.debug,
+            });
+            if (this.debug) {
+                console.log("[Middleware] Auth middleware result: ", authMiddlewareResult);
+                if (authMiddlewareResult &&
+                    authMiddlewareResult.remain &&
+                    req?.nextUrl?.pathname) {
+                    console.log("[Middleware] Not redirecting. Remaining on:", req.nextUrl.pathname);
+                }
+            }
+        }
+        catch (e) {
+            console.error("[Middleware] Error running auth middleware: ", e);
+            return json({
+                success: false,
+                message: "Error running auth middleware",
+            }, { status: 500 });
+        }
+        if (authMiddlewareResult.remain) {
+            const next = this.next;
+            if (!AuthJwtValidationMiddleware.hasNextMiddleware(next)) {
+                throw new Error("Expected AuthJwtValidationMiddleware to have child middleware(s)!");
+            }
+            return await next.handle({ req, json, redirect, ...inputs });
+        }
+        else {
+            if (this.debug) {
+                console.log("[Middleware] Not remaining on: ", req.nextUrl.pathname);
+            }
+        }
+        if (authMiddlewareResult.redirect) {
+            // Relative redirect path
+            const relativeRedirectTo = authMiddlewareResult.redirectTo;
+            const host = req.nextUrl.host;
+            let protocol = "https";
+            if (this.environment === "development" || this.environment === "test") {
+                protocol = "http";
+            }
+            const redirectTo = protocol + "://" + host + relativeRedirectTo;
+            if (this.environment === "development") {
+                console.log('[Middleware] Redirecting to: "' + redirectTo + '"');
+            }
+            return redirect(redirectTo);
+        }
+        if (this.debug) {
+            console.log("[Middleware] Not remaining or redirecting on: ", req.nextUrl.pathname);
+        }
+        if (authMiddlewareResult.error) {
+            const errorType = authMiddlewareResult.error;
+            if (errorType === "Unauthorized") {
+                return json({
+                    error: "Unauthorized",
+                }, { status: 401 });
+            }
+            else if (errorType === "Forbidden") {
+                return json({
+                    error: "Forbidden",
+                }, { status: 403 });
+            }
+            console.error("Unknown auth middleware error: ", errorType);
+            return json({
+                error: "Unknown auth middleware error",
+            }, { status: 500 });
+        }
+        throw new Error("Unhandled auth middleware result");
+    }
+}
+export class AuthJwtValidationMiddlewareFactory {
+    type = "middleware-factory";
+    middlewareOpts;
+    constructor(opts) {
+        this.middlewareOpts = opts;
+    }
+    create(next) {
+        return new AuthJwtValidationMiddleware({
+            ...this.middlewareOpts,
+            next,
+        });
+    }
+}
+export default AuthJwtValidationMiddlewareFactory;
+//# sourceMappingURL=withAuthJwtValidation.js.map

package/dist/middleware/middlewares/withAuthJwtValidation/withAuthJwtValidation.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"withAuthJwtValidation.js","sourceRoot":"","sources":["../../../../src/middleware/middlewares/withAuthJwtValidation/withAuthJwtValidation.ts"],"names":[],"mappings":"AACA,OAAO,EACL,cAAc,EAGd,0BAA0B,EAC1B,mBAAmB,EAGnB,cAAc,GAGf,MAAM,2BAA2B,CAAC;AACnC,OAAO,EAEL,SAAS,EACT,oBAAoB,GACrB,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EACL,iBAAiB,GAElB,MAAM,+BAA+B,CAAC;AAMvC,OAAO,cAAc,MAAM,8BAA8B,CAAC;AAE1D,OAAO,mBAEN,MAAM,qCAAqC,CAAC;AAe7C,MAAM,2BACJ,SAAQ,cAAc;IAGL,QAAQ,CAAS;IACjB,gBAAgB,CAAsB;IACtC,YAAY,CAAiB;IAE9C,YAAmB,EACjB,IAAI,EACJ,QAAQ,EACR,GAAG,IAAI,EAC0B;QACjC,KAAK,CAAC;YACJ,GAAG,IAAI;YACP,IAAI,EAAE,6BAAsC;YAC5C,IAAI;SACL,CAAC,CAAC;QAEH,IAAI,OAAO,QAAQ,KAAK,QAAQ,EAAE,CAAC;YACjC,MAAM,IAAI,KAAK,CACb,yFAAyF,CAC1F,CAAC;QACJ,CAAC;aAAM,IAAI,CAAC,iBAAiB,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC,OAAO,EAAE,CAAC;YAC1D,MAAM,IAAI,SAAS,CACjB,sDAAsD,CACvD,CAAC;QACJ,CAAC;QAED,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAC;QACzB,IAAI,CAAC,gBAAgB,GAAG,IAAI,CAAC,gBAAgB,IAAI,0BAA0B,CAAC;QAC5E,IAAI,CAAC,YAAY,GAAG,IAAI,CAAC,YAAY,CAAC;IACxC,CAAC;IAES,KAAK,CAAC,mBAAmB,CACjC,SAAiB;QAEjB,MAAM,WAAW,GAAW,IAAI,CAAC,QAAQ,CAAC;QAC1C,MAAM,aAAa,GAAyB,MAAM,mBAAmB,CAAC;YACpE,SAAS;YACT,YAAY,EAAE,IAAI,CAAC,YAAY;YAC/B,WAAW;YACX,KAAK,EAAE,IAAI,CAAC,KAAK;SAClB,CAAC,CAAC;QACH,OAAO,aAAa,CAAC;IACvB,CAAC;IAEM,KAAK,CAAC,MAAM,CAAC,EAClB,GAAG,EACH,IAAI,EACJ,QAAQ,EACR,GAAG,MAAM,EACuB;QAChC,MAAM,WAAW,GAA+B,IAAI,CAAC,WAAW,CAAC;QACjE,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;YACf,OAAO,CAAC,GAAG,CACT,IAAI,IAAI,CAAC,IAAI,uCAAuC,GAAG,CAAC,OAAO,CAAC,QAAQ,GAAG,CAC5E,CAAC;QACJ,CAAC;QAED,IAAI,GAAG,CAAC,OAAO,CAAC,IAAI,GAAG,EAAE,EAAE,CAAC;YAC1B,OAAO,CAAC,KAAK,CAAC,IAAI,IAAI,CAAC,IAAI,sBAAsB,EAAE,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;YACrE,OAAO,IAAI,CACT;gBACE,KAAK,EAAE,IAAI;gBACX,OAAO,EAAE,KAAK;gBACd,OAAO,EAAE,uCAAuC;aACjD,EACD,EAAE,MAAM,EAAE,GAAG,EAAE,CAChB,CAAC;QACJ,CAAC;QAED,0DAA0D;QAC1D,MAAM,aAAa,GAAkC,EAAE,CAAC;QAExD,2BAA2B;QAC3B,IAAI,aAAa,GACf,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC,EAAE,KAAK,CAAC;QAC1C,IAAI,YAAY,GACd,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,EAAE,KAAK,CAAC;QAEzC,IAAI,OAAO,aAAa,KAAK,QAAQ,EAAE,CAAC;YACtC,aAAa,CAAC,IAAI,CAAC;gBACjB,KAAK,EAAE,aAAa;gBACpB,IAAI,EAAE,SAAS;gBACf,UAAU,EAAE,sBAAsB;aACnC,CAAC,CAAC;QACL,CAAC;QAED,IAAI,OAAO,YAAY,KAAK,QAAQ,EAAE,CAAC;YACrC,aAAa,CAAC,IAAI,CAAC;gBACjB,KAAK,EAAE,YAAY;gBACnB,IAAI,EAAE,QAAQ;gBACd,UAAU,EAAE,qBAAqB;aAClC,CAAC,CAAC;QACL,CAAC;QAED,IAAI,wBAAwB,GAAuB,SAAS,CAAC;QAC7D,MAAM,mBAAmB,GACvB,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC;YAChC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC;YAChC,IAAI,CAAC;QACP,IAAI,OAAO,mBAAmB,KAAK,QAAQ,EAAE,CAAC;YAC5C,MAAM,YAAY,GAAG,SAAkB,CAAC;YACxC,IAAI,mBAAmB,CAAC,UAAU,CAAC,YAAY,CAAC,EAAE,CAAC;gBACjD,IAAI,mBAAmB,CAAC,MAAM,GAAG,YAAY,CAAC,MAAM,EAAE,CAAC;oBACrD,MAAM,aAAa,GAAW,mBAAmB,CAAC,KAAK,CACrD,YAAY,CAAC,MAAM,CACpB,CAAC;oBACF,wBAAwB,GAAG,aAA8B,CAAC;gBAC5D,CAAC;YACH,CAAC;QACH,CAAC;QAED,IAAI,OAAO,wBAAwB,KAAK,QAAQ,EAAE,CAAC;YACjD,aAAa,CAAC,IAAI,CAAC;gBACjB,KAAK,EAAE,wBAAwB;gBAC/B,IAAI,EAAE,QAAQ;gBACd,UAAU,EAAE,0CAA0C;aACvD,CAAC,CAAC;QACL,CAAC;QAED,MAAM,YAAY,GAAG,IAAI,CAAC,QAAQ,CAAC;QACnC,MAAM,mBAAmB,GACvB,MAAM,cAAc,CAAC,cAAc,CAAC,YAAY,CAAC,CAAC;QACpD,IAAI,CAAC,mBAAmB,CAAC,OAAO,EAAE,CAAC;YACjC,OAAO,CAAC,KAAK,CAAC,mBAAmB,CAAC,KAAK,CAAC,CAAC;YACzC,MAAM,IAAI,KAAK,CACb,mEAAmE,CACpE,CAAC;QACJ,CAAC;QAED,IAAI,UAA+C,CAAC;QACpD,IAAI,CAAC;YACH,MAAM,iCAAiC,GAAG;gBACxC,WAAW,EAAE,QAAiB;gBAC9B,aAAa;gBACb,KAAK,EAAE,IAAI,CAAC,KAAuB;aACkC,CAAC;YAExE,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;gBACf,OAAO,CAAC,GAAG,CACT,sEAAsE,EACtE,iCAAiC,CAClC,CAAC;YACJ,CAAC;YAED,UAAU,GAAG,MAAM,mBAAmB,CAAC;gBACrC,GAAG,iCAAiC;gBACpC,SAAS,EAAE,KAAK,EAAE,EAChB,KAAK,EACL,IAAI,EACJ,YAAY,GACb,EAA+C,EAAE;oBAChD,IAAI,SAAiB,CAAC;oBACtB,IAAI,CAAC;wBACH,SAAS,GAAG,oBAAoB,CAAC,KAAK,CAAC,CAAC;oBAC1C,CAAC;oBAAC,OAAO,CAAU,EAAE,CAAC;wBACpB,OAAO,CAAC,KAAK,CAAC,8CAA8C,EAAE,CAAC,CAAC,CAAC;wBACjE,MAAM,IAAI,KAAK,CAAC,6CAA6C,CAAC,CAAC;oBACjE,CAAC;oBAED,IAAI,YAAkC,CAAC;oBACvC,IAAI,CAAC;wBACH,YAAY,GAAG,MAAM,IAAI,CAAC,mBAAmB,CAAC,SAAS,CAAC,CAAC;wBACzD,IAAI,YAAY,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;4BACzC,MAAM,IAAI,KAAK,CACb,kEAAkE,CACnE,CAAC;wBACJ,CAAC;oBACH,CAAC;oBAAC,OAAO,CAAU,EAAE,CAAC;wBACpB,OAAO,CAAC,KAAK,CACX,gEAAgE,SAAS,KAAK,EAC9E,CAAC,CACF,CAAC;wBACF,MAAM,IAAI,KAAK,CACb,8DAA8D,CAC/D,CAAC;oBACJ,CAAC;oBACD,MAAM,EAAE,cAAc,EAAE,gBAAgB,EAAE,GAAG,YAAY,CAAC;oBAE1D,IAAI,CAAC;wBACH,MAAM,OAAO,GAAqB,MAAM,SAAS,CAAC;4BAChD,GAAG,EAAE,KAAK;4BACV,IAAI;4BACJ,QAAQ,EAAE,YAAY;4BACtB,GAAG,EAAE,WAAW;4BAChB,cAAc;4BACd,gBAAgB;4BAChB,SAAS;yBACV,CAAC,CAAC;wBACH,OAAO,EAAE,GAAG,OAAO,EAAE,CAAC;oBACxB,CAAC;oBAAC,OAAO,CAAU,EAAE,CAAC;wBACpB,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;4BACf,OAAO,CAAC,KAAK,CACX,gDAAgD,EAChD,CAAC,CACF,CAAC;wBACJ,CAAC;wBACD,MAAM,IAAI,KAAK,CAAC,gDAAgD,CAAC,CAAC;oBACpE,CAAC;gBACH,CAAC;gBACD,YAAY;aACb,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,CAAU,EAAE,CAAC;YACpB,OAAO,CAAC,KAAK,CACX,gFAAgF,EAChF,CAAC,CACF,CAAC;YACF,MAAM,IAAI,KAAK,CAAC,4CAA4C,CAAC,CAAC;QAChE,CAAC;QAED,IAAI,oBAA0C,CAAC;QAC/C,IAAI,CAAC;YACH,oBAAoB,GAAG,cAAc,CAAC;gBACpC,IAAI,EAAE,GAAG,CAAC,OAAO,CAAC,QAAQ;gBAC1B,UAAU;gBACV,KAAK,EAAE,IAAI,CAAC,gBAAgB;gBAC5B,+BAA+B,EAAE,UAAmB;gBACpD,+BAA+B,EAAE,aAAsB;gBACvD,aAAa,EAAE,iBAA0B;gBACzC,8BAA8B,EAAE,GAAY;gBAC5C,WAAW,EAAE,IAAI,CAAC,WAAW;gBAC7B,KAAK,EAAE,IAAI,CAAC,KAAK;aAClB,CAAC,CAAC;YACH,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;gBACf,OAAO,CAAC,GAAG,CACT,uCAAuC,EACvC,oBAAoB,CACrB,CAAC;gBACF,IACE,oBAAoB;oBACpB,oBAAoB,CAAC,MAAM;oBAC3B,GAAG,EAAE,OAAO,EAAE,QAAQ,EACtB,CAAC;oBACD,OAAO,CAAC,GAAG,CACT,6CAA6C,EAC7C,GAAG,CAAC,OAAO,CAAC,QAAQ,CACrB,CAAC;gBACJ,CAAC;YACH,CAAC;QACH,CAAC;QAAC,OAAO,CAAU,EAAE,CAAC;YACpB,OAAO,CAAC,KAAK,CAAC,8CAA8C,EAAE,CAAC,CAAC,CAAC;YACjE,OAAO,IAAI,CACT;gBACE,OAAO,EAAE,KAAK;gBACd,OAAO,EAAE,+BAA+B;aACzC,EACD,EAAE,MAAM,EAAE,GAAG,EAAE,CAChB,CAAC;QACJ,CAAC;QAED,IAAI,oBAAoB,CAAC,MAAM,EAAE,CAAC;YAChC,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC;YACvB,IAAI,CAAC,2BAA2B,CAAC,iBAAiB,CAAC,IAAI,CAAC,EAAE,CAAC;gBACzD,MAAM,IAAI,KAAK,CACb,mEAAmE,CACpE,CAAC;YACJ,CAAC;YACD,OAAO,MAAM,IAAI,CAAC,MAAM,CAAC,EAAE,GAAG,EAAE,IAAI,EAAE,QAAQ,EAAE,GAAG,MAAM,EAAE,CAAC,CAAC;QAC/D,CAAC;aAAM,CAAC;YACN,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;gBACf,OAAO,CAAC,GAAG,CAAC,iCAAiC,EAAE,GAAG,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;YACvE,CAAC;QACH,CAAC;QAED,IAAI,oBAAoB,CAAC,QAAQ,EAAE,CAAC;YAClC,yBAAyB;YACzB,MAAM,kBAAkB,GAAW,oBAAoB,CAAC,UAAU,CAAC;YAEnE,MAAM,IAAI,GAAW,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC;YAEtC,IAAI,QAAQ,GAAqB,OAAO,CAAC;YAEzC,IAAI,IAAI,CAAC,WAAW,KAAK,aAAa,IAAI,IAAI,CAAC,WAAW,KAAK,MAAM,EAAE,CAAC;gBACtE,QAAQ,GAAG,MAAM,CAAC;YACpB,CAAC;YACD,MAAM,UAAU,GAAW,QAAQ,GAAG,KAAK,GAAG,IAAI,GAAG,kBAAkB,CAAC;YACxE,IAAI,IAAI,CAAC,WAAW,KAAK,aAAa,EAAE,CAAC;gBACvC,OAAO,CAAC,GAAG,CAAC,gCAAgC,GAAG,UAAU,GAAG,GAAG,CAAC,CAAC;YACnE,CAAC;YACD,OAAO,QAAQ,CAAC,UAAU,CAAC,CAAC;QAC9B,CAAC;QAED,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;YACf,OAAO,CAAC,GAAG,CACT,gDAAgD,EAChD,GAAG,CAAC,OAAO,CAAC,QAAQ,CACrB,CAAC;QACJ,CAAC;QAED,IAAI,oBAAoB,CAAC,KAAK,EAAE,CAAC;YAC/B,MAAM,SAAS,GAAwB,oBAAoB,CAAC,KAAK,CAAC;YAClE,IAAI,SAAS,KAAK,cAAc,EAAE,CAAC;gBACjC,OAAO,IAAI,CACT;oBACE,KAAK,EAAE,cAAc;iBACtB,EACD,EAAE,MAAM,EAAE,GAAG,EAAE,CAChB,CAAC;YACJ,CAAC;iBAAM,IAAI,SAAS,KAAK,WAAW,EAAE,CAAC;gBACrC,OAAO,IAAI,CACT;oBACE,KAAK,EAAE,WAAW;iBACnB,EACD,EAAE,MAAM,EAAE,GAAG,EAAE,CAChB,CAAC;YACJ,CAAC;YAED,OAAO,CAAC,KAAK,CAAC,iCAAiC,EAAE,SAAS,CAAC,CAAC;YAC5D,OAAO,IAAI,CACT;gBACE,KAAK,EAAE,+BAA+B;aACvC,EACD,EAAE,MAAM,EAAE,GAAG,EAAE,CAChB,CAAC;QACJ,CAAC;QAED,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC;IACtD,CAAC;CACF;AAED,MAAM,OAAO,kCAAkC;IAG7B,IAAI,GAAG,oBAA6B,CAAC;IAE7C,cAAc,CAAqC;IAE3D,YAAmB,IAAwC;QACzD,IAAI,CAAC,cAAc,GAAG,IAAI,CAAC;IAC7B,CAAC;IAEM,MAAM,CAAC,IAA6B;QACzC,OAAO,IAAI,2BAA2B,CAAC;YACrC,GAAG,IAAI,CAAC,cAAc;YACtB,IAAI;SACL,CAAC,CAAC;IACL,CAAC;CACF;AAED,eAAe,kCAAkC,CAAC"}

package/dist/middleware/middlewares/withCorsSettings/applyCorsHeaders.d.ts

@@ -0,0 +1,12 @@
+import { type SchemaVaultsCORSEnforcementPolicy } from "./cors-policies";
+interface ApplyCorsHeadersOptions {
+    origin: string | null | undefined;
+    headers: Record<string, string>;
+    policy: SchemaVaultsCORSEnforcementPolicy;
+    preflight?: boolean;
+    method: string;
+    debug?: boolean;
+    allowed: boolean;
+}
+export declare function applyCorsHeaders(opts: ApplyCorsHeadersOptions): Record<string, string>;
+export {};

package/dist/middleware/middlewares/withCorsSettings/applyCorsHeaders.js

@@ -0,0 +1,46 @@
+import { SchemaVaultsCORSEnforcementPolicies as corsPolicies, } from "./cors-policies";
+export function applyCorsHeaders(opts) {
+    const withCorsHeaders = { ...opts.headers };
+    const DEBUG = opts.debug ?? false;
+    const allowed = opts.allowed;
+    if (!allowed)
+        throw new Error("applyCorsHeaders() should not be called until this origin has been validated as allowed");
+    if (DEBUG) {
+        console.log(`[applyCorsHeaders] Applying ${opts.preflight ? "preflight " : ""}CORS headers for policy "${opts.policy}".`);
+    }
+    switch (opts.policy) {
+        case corsPolicies.AllowAny:
+            withCorsHeaders["Access-Control-Allow-Origin"] = "*";
+            break;
+        case corsPolicies.EnforceValidAppIfOriginApplied:
+            if (typeof opts.origin === "string") {
+                withCorsHeaders["Access-Control-Allow-Origin"] = opts.origin;
+            }
+            else {
+                withCorsHeaders["Access-Control-Allow-Origin"] = "*";
+            }
+            break;
+        case corsPolicies.SameOriginIfOriginApplied:
+            if (typeof opts.origin === "string") {
+                withCorsHeaders["Access-Control-Allow-Origin"] = opts.origin;
+            }
+            else {
+                withCorsHeaders["Access-Control-Allow-Origin"] = "*";
+            }
+            break;
+        default:
+            throw new Error(`Invalid CORS policy: ${opts.policy}`);
+    }
+    withCorsHeaders["Access-Control-Allow-Credentials"] = "true";
+    withCorsHeaders["Access-Control-Allow-Methods"] =
+        "GET,DELETE,PATCH,POST,PUT,OPTIONS";
+    withCorsHeaders["Access-Control-Allow-Headers"] =
+        "X-CSRF-Token, X-Requested-With, Accept, Accept-Version, Content-Length, Content-MD5, Content-Type, Date, X-Api-Version, Authorization";
+    if (!opts.preflight &&
+        opts.method !== "GET" &&
+        opts.policy !== corsPolicies.AllowAny) {
+        withCorsHeaders["Vary"] = "Origin";
+    }
+    return withCorsHeaders;
+}
+//# sourceMappingURL=applyCorsHeaders.js.map

package/dist/middleware/middlewares/withCorsSettings/applyCorsHeaders.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"applyCorsHeaders.js","sourceRoot":"","sources":["../../../../src/middleware/middlewares/withCorsSettings/applyCorsHeaders.ts"],"names":[],"mappings":"AAAA,OAAO,EAEL,mCAAmC,IAAI,YAAY,GACpD,MAAM,iBAAiB,CAAC;AAYzB,MAAM,UAAU,gBAAgB,CAC9B,IAA6B;IAE7B,MAAM,eAAe,GAA2B,EAAE,GAAG,IAAI,CAAC,OAAO,EAAE,CAAC;IAEpE,MAAM,KAAK,GAAY,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC;IAC3C,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC;IAC7B,IAAI,CAAC,OAAO;QACV,MAAM,IAAI,KAAK,CACb,yFAAyF,CAC1F,CAAC;IAEJ,IAAI,KAAK,EAAE,CAAC;QACV,OAAO,CAAC,GAAG,CACT,+BAA+B,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,4BAA4B,IAAI,CAAC,MAAM,IAAI,CAC7G,CAAC;IACJ,CAAC;IAED,QAAQ,IAAI,CAAC,MAAM,EAAE,CAAC;QACpB,KAAK,YAAY,CAAC,QAAQ;YACxB,eAAe,CAAC,6BAA6B,CAAC,GAAG,GAAG,CAAC;YACrD,MAAM;QACR,KAAK,YAAY,CAAC,8BAA8B;YAC9C,IAAI,OAAO,IAAI,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;gBACpC,eAAe,CAAC,6BAA6B,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC;YAC/D,CAAC;iBAAM,CAAC;gBACN,eAAe,CAAC,6BAA6B,CAAC,GAAG,GAAG,CAAC;YACvD,CAAC;YAED,MAAM;QACR,KAAK,YAAY,CAAC,yBAAyB;YACzC,IAAI,OAAO,IAAI,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;gBACpC,eAAe,CAAC,6BAA6B,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC;YAC/D,CAAC;iBAAM,CAAC;gBACN,eAAe,CAAC,6BAA6B,CAAC,GAAG,GAAG,CAAC;YACvD,CAAC;YAED,MAAM;QACR;YACE,MAAM,IAAI,KAAK,CAAC,wBAAwB,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;IAC3D,CAAC;IAED,eAAe,CAAC,kCAAkC,CAAC,GAAG,MAAM,CAAC;IAC7D,eAAe,CAAC,8BAA8B,CAAC;QAC7C,mCAAmC,CAAC;IACtC,eAAe,CAAC,8BAA8B,CAAC;QAC7C,uIAAuI,CAAC;IAC1I,IACE,CAAC,IAAI,CAAC,SAAS;QACf,IAAI,CAAC,MAAM,KAAK,KAAK;QACrB,IAAI,CAAC,MAAM,KAAK,YAAY,CAAC,QAAQ,EACrC,CAAC;QACD,eAAe,CAAC,MAAM,CAAC,GAAG,QAAQ,CAAC;IACrC,CAAC;IACD,OAAO,eAAe,CAAC;AACzB,CAAC"}

package/dist/middleware/middlewares/withCorsSettings/assertNoOriginSet.d.ts

@@ -0,0 +1 @@
+export declare function assertNoOriginSet(origin: string | null | undefined): origin is null | undefined;

package/dist/middleware/middlewares/withCorsSettings/assertNoOriginSet.js

@@ -0,0 +1,7 @@
+export function assertNoOriginSet(origin) {
+    if (typeof origin === "string") {
+        return false;
+    }
+    return true;
+}
+//# sourceMappingURL=assertNoOriginSet.js.map

package/dist/middleware/middlewares/withCorsSettings/assertNoOriginSet.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"assertNoOriginSet.js","sourceRoot":"","sources":["../../../../src/middleware/middlewares/withCorsSettings/assertNoOriginSet.ts"],"names":[],"mappings":"AAAA,MAAM,UAAU,iBAAiB,CAC/B,MAAiC;IAEjC,IAAI,OAAO,MAAM,KAAK,QAAQ,EAAE,CAAC;QAC/B,OAAO,KAAK,CAAC;IACf,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC"}

package/dist/middleware/middlewares/withCorsSettings/cors-policies.d.ts

@@ -0,0 +1,8 @@
+declare const validSchemaVaultsCorsEnforcementPolicies: readonly ["AllowAny", "EnforceValidAppIfOriginApplied", "SameOriginIfOriginApplied"];
+export type SchemaVaultsCORSEnforcementPolicy = (typeof validSchemaVaultsCorsEnforcementPolicies)[number];
+export declare function isValidCORSEnforcementPolicy(policy: string): policy is SchemaVaultsCORSEnforcementPolicy;
+type AvailableCorsPoliciesAccessorObject = Readonly<{
+    [K in SchemaVaultsCORSEnforcementPolicy]: K;
+}>;
+export declare const SchemaVaultsCORSEnforcementPolicies: AvailableCorsPoliciesAccessorObject;
+export default SchemaVaultsCORSEnforcementPolicies;

package/dist/middleware/middlewares/withCorsSettings/cors-policies.js

@@ -0,0 +1,21 @@
+const validSchemaVaultsCorsEnforcementPolicies = [
+    "AllowAny",
+    "EnforceValidAppIfOriginApplied",
+    "SameOriginIfOriginApplied",
+];
+export function isValidCORSEnforcementPolicy(policy) {
+    if (typeof policy === "string") {
+        const validPolicies = validSchemaVaultsCorsEnforcementPolicies;
+        if (validPolicies.includes(policy)) {
+            return true;
+        }
+    }
+    return false;
+}
+export const SchemaVaultsCORSEnforcementPolicies = {
+    EnforceValidAppIfOriginApplied: "EnforceValidAppIfOriginApplied",
+    AllowAny: "AllowAny",
+    SameOriginIfOriginApplied: "SameOriginIfOriginApplied",
+};
+export default SchemaVaultsCORSEnforcementPolicies;
+//# sourceMappingURL=cors-policies.js.map

package/dist/middleware/middlewares/withCorsSettings/cors-policies.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cors-policies.js","sourceRoot":"","sources":["../../../../src/middleware/middlewares/withCorsSettings/cors-policies.ts"],"names":[],"mappings":"AAAA,MAAM,wCAAwC,GAAG;IAC/C,UAAU;IACV,gCAAgC;IAChC,2BAA2B;CACS,CAAC;AAKvC,MAAM,UAAU,4BAA4B,CAC1C,MAAc;IAEd,IAAI,OAAO,MAAM,KAAK,QAAQ,EAAE,CAAC;QAC/B,MAAM,aAAa,GACjB,wCAAwC,CAAC;QAC3C,IAAI,aAAa,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;YACnC,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAMD,MAAM,CAAC,MAAM,mCAAmC,GAC9C;IACE,8BAA8B,EAAE,gCAAgC;IAChE,QAAQ,EAAE,UAAU;IACpB,yBAAyB,EAAE,2BAA2B;CAC9C,CAAC;AAEb,eAAe,mCAAmC,CAAC"}

package/dist/middleware/middlewares/withCorsSettings/ensureHttpsInProd.d.ts

@@ -0,0 +1,3 @@
+import type { ISchemaVaultsMiddlewareFnInputs } from "../../../middleware/middleware_types";
+import type { NextRequest, NextResponse } from "next/server";
+export declare function ensureHttpsInProduction(request: NextRequest, origin: string, json: ISchemaVaultsMiddlewareFnInputs["json"]): NextResponse | undefined;

package/dist/middleware/middlewares/withCorsSettings/ensureHttpsInProd.js

@@ -0,0 +1,22 @@
+import { getAppEnvironment, } from "@schemavaults/app-definitions";
+function isHttpsOrigin(origin) {
+    return origin.startsWith("https://");
+}
+export function ensureHttpsInProduction(request, origin, json) {
+    const environment = getAppEnvironment();
+    if (
+    // Ensure that origin uses https:// in production
+    origin &&
+        environment !== "development" &&
+        environment !== "test" &&
+        request.method !== "GET" &&
+        !isHttpsOrigin(origin)) {
+        console.error("Origins must be HTTPS in production environment.");
+        return json({
+            message: "Origin must be HTTPS",
+            success: false,
+        }, { status: 400 });
+    } // End of HTTPS origins in production check
+    return undefined;
+}
+//# sourceMappingURL=ensureHttpsInProd.js.map

package/dist/middleware/middlewares/withCorsSettings/ensureHttpsInProd.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ensureHttpsInProd.js","sourceRoot":"","sources":["../../../../src/middleware/middlewares/withCorsSettings/ensureHttpsInProd.ts"],"names":[],"mappings":"AACA,OAAO,EACL,iBAAiB,GAElB,MAAM,+BAA+B,CAAC;AAIvC,SAAS,aAAa,CAAC,MAAc;IACnC,OAAO,MAAM,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC;AACvC,CAAC;AAED,MAAM,UAAU,uBAAuB,CACrC,OAAoB,EACpB,MAAc,EACd,IAA6C;IAE7C,MAAM,WAAW,GAA+B,iBAAiB,EAAE,CAAC;IAEpE;IACE,iDAAiD;IACjD,MAAM;QACN,WAAW,KAAK,aAAa;QAC7B,WAAW,KAAK,MAAM;QACtB,OAAO,CAAC,MAAM,KAAK,KAAK;QACxB,CAAC,aAAa,CAAC,MAAM,CAAC,EACtB,CAAC;QACD,OAAO,CAAC,KAAK,CAAC,kDAAkD,CAAC,CAAC;QAClE,OAAO,IAAI,CACT;YACE,OAAO,EAAE,sBAAsB;YAC/B,OAAO,EAAE,KAAK;SACc,EAC9B,EAAE,MAAM,EAAE,GAAG,EAAE,CAChB,CAAC;IACJ,CAAC,CAAC,2CAA2C;IAC7C,OAAO,SAAS,CAAC;AACnB,CAAC"}

package/dist/middleware/middlewares/withCorsSettings/index.d.ts

@@ -0,0 +1,4 @@
+export { CorsMiddlewareFactory, CorsMiddlewareFactory as default } from "./withCorsSettings";
+export type * from "./withCorsSettings";
+export type { SchemaVaultsCORSEnforcementPolicy } from "./cors-policies";
+export { SchemaVaultsCORSEnforcementPolicies } from "./cors-policies";

package/dist/middleware/middlewares/withCorsSettings/index.js

@@ -0,0 +1,3 @@
+export { CorsMiddlewareFactory, CorsMiddlewareFactory as default } from "./withCorsSettings";
+export { SchemaVaultsCORSEnforcementPolicies } from "./cors-policies";
+//# sourceMappingURL=index.js.map

package/dist/middleware/middlewares/withCorsSettings/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../src/middleware/middlewares/withCorsSettings/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,qBAAqB,EAAE,qBAAqB,IAAI,OAAO,EAAE,MAAM,oBAAoB,CAAC;AAG7F,OAAO,EAAE,mCAAmC,EAAE,MAAM,iBAAiB,CAAC"}

package/dist/middleware/middlewares/withCorsSettings/isAllowedOrigin.d.ts

@@ -0,0 +1,11 @@
+import { type SchemaVaultsAppEnvironment } from "@schemavaults/app-definitions";
+import { type SchemaVaultsCORSEnforcementPolicy } from "./cors-policies";
+interface CheckIfIsAllowedOriginOptions {
+    origin: string | null | undefined;
+    policy: SchemaVaultsCORSEnforcementPolicy;
+    audience: string;
+    environment: SchemaVaultsAppEnvironment;
+    debug?: boolean;
+}
+export declare function isAllowedOrigin(opts: CheckIfIsAllowedOriginOptions): Promise<boolean>;
+export {};