@signalk/charts-plugin 3.6.2 → 3.8.0

package/plugin/tokenProvider.js

@@ -0,0 +1,258 @@
+"use strict";
+/**
+ * Declarative token-based chart providers.
+ *
+ * Providers that need runtime-computed URLs (Navionics, ArcGIS-style key
+ * rotation, OAuth client_credentials) typically just need: fetch a
+ * token from a known URL, cache it for some TTL, template it into the
+ * tile URL and request headers. That shape is expressed here as JSON
+ * config — no executable code, no admin-supplied modules.
+ *
+ * Providers that need request signing or HMAC are out of scope; the
+ * right answer for those is a sandboxed extension point
+ * (worker_threads with a fixed message API), not arbitrary code
+ * execution.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.TokenProvider = void 0;
+exports.chartProviderFromTokenConfig = chartProviderFromTokenConfig;
+exports.validateTokenProviderConfig = validateTokenProviderConfig;
+// Random-range placeholder used for sharded tile hostnames like
+// `tile{1-5}.host.com`. Inclusive on both ends.
+const RANGE_PLACEHOLDER = /\{(\d+)-(\d+)\}/g;
+const TOKEN_PLACEHOLDER = /\{token\.([a-zA-Z0-9_]+)\}/g;
+// Strip query string and userinfo from a URL before logging. Token
+// endpoints commonly carry secrets in query params (?api_key=...) or
+// userinfo (https://user:pass@host); the host alone is enough context
+// for an admin to recognise which provider failed without the secrets
+// landing in shared logs.
+function redactUrl(raw) {
+    try {
+        const u = new URL(raw);
+        return `${u.protocol}//${u.host}${u.pathname}`;
+    }
+    catch {
+        return '<unparseable url>';
+    }
+}
+const DEFAULT_CLOCK = {
+    now: () => Date.now(),
+    rand: () => Math.random()
+};
+class TokenProvider {
+    config;
+    clock;
+    // Resolved token fields (string-valued only; non-strings from the JSON
+    // response are dropped during fetchToken to keep template substitution
+    // unambiguous).
+    token = {};
+    // Epoch-millis at which the cached token is considered stale. Zero forces
+    // a fetch on the first ensureFreshToken() call.
+    tokenExpiry = 0;
+    // Coalesces concurrent refresh attempts: the first caller wins, the rest
+    // await the same in-flight promise instead of triggering parallel fetches
+    // (which would all race to write `this.token`).
+    inFlight = null;
+    constructor(config, clock = DEFAULT_CLOCK) {
+        this.config = config;
+        this.clock = clock;
+    }
+    /**
+     * Refresh the cached token if it has expired. Safe to call on the hot
+     * path: a fresh-enough token short-circuits without I/O. Concurrent
+     * callers share the same in-flight fetch.
+     *
+     * Errors are swallowed to a console warning rather than thrown: a token
+     * fetch failure shouldn't take down a tile request that might still
+     * succeed against a stale token (worst case the upstream returns 401
+     * and the next request will re-attempt the refresh).
+     */
+    async ensureFreshToken() {
+        if (this.clock.now() < this.tokenExpiry)
+            return;
+        if (this.inFlight)
+            return this.inFlight;
+        this.inFlight = this.fetchToken()
+            .catch((err) => {
+            console.warn(`Token provider ${this.config.identifier}: token fetch failed: ${err.message}`);
+        })
+            .finally(() => {
+            this.inFlight = null;
+        });
+        return this.inFlight;
+    }
+    async fetchToken() {
+        const ep = this.config.tokenEndpoint;
+        const timeoutMs = ep.timeoutMs ?? 10000;
+        const controller = new AbortController();
+        const timer = setTimeout(() => controller.abort(), timeoutMs);
+        let res;
+        try {
+            res = await fetch(ep.url, {
+                method: ep.method ?? 'GET',
+                headers: ep.headers,
+                body: ep.body,
+                signal: controller.signal
+            });
+        }
+        finally {
+            clearTimeout(timer);
+        }
+        if (!res.ok) {
+            // Avoid embedding the full URL in the error: token endpoints often
+            // carry secrets in query params, and this message lands in
+            // ensureFreshToken's console.warn.
+            throw new Error(`token endpoint ${redactUrl(ep.url)} returned ${res.status}`);
+        }
+        const data = (await res.json());
+        if (typeof data !== 'object' || data === null) {
+            throw new Error(`token endpoint ${redactUrl(ep.url)} returned non-object`);
+        }
+        const next = {};
+        for (const [k, v] of Object.entries(data)) {
+            if (typeof v === 'string')
+                next[k] = v;
+        }
+        this.token = next;
+        this.tokenExpiry = this.clock.now() + ep.ttlSeconds * 1000;
+    }
+    /**
+     * Force-invalidate the cached token. Used by the proxy fetch path when
+     * the upstream returns 401: next request will re-fetch the token rather
+     * than hammering with the stale one.
+     */
+    invalidateToken() {
+        this.tokenExpiry = 0;
+    }
+    /** Templated tile URL with the current token and any range placeholders. */
+    resolveUrl() {
+        return this.applyTemplates(this.config.tile.url);
+    }
+    /** Templated tile request headers with the current token. */
+    resolveHeaders() {
+        const out = {};
+        for (const [k, v] of Object.entries(this.config.tile.headers ?? {})) {
+            out[k] = this.applyTemplates(v);
+        }
+        return out;
+    }
+    // Substitute {token.<field>} from the cached token, then {<a>-<b>} with a
+    // random integer in [a, b]. Token comes first so a sharded hostname
+    // referenced inside a token field still randomises correctly.
+    applyTemplates(s) {
+        return s
+            .replace(TOKEN_PLACEHOLDER, (_, key) => this.token[key] ?? '')
+            .replace(RANGE_PLACEHOLDER, (_, lo, hi) => {
+            const a = parseInt(lo, 10);
+            const b = parseInt(hi, 10);
+            const span = b - a + 1;
+            return String(a + Math.floor(this.clock.rand() * span));
+        });
+    }
+}
+exports.TokenProvider = TokenProvider;
+/**
+ * Build a ChartProvider view of a token-provider config. The returned
+ * object has property getters for `remoteUrl` and `headers` so the
+ * existing tile-serving code keeps reading provider.remoteUrl /
+ * provider.headers without knowing about token rotation. The proxy path
+ * is responsible for awaiting `_tokenProvider.ensureFreshToken()`
+ * before the fetch.
+ */
+function chartProviderFromTokenConfig(cfg) {
+    const tp = new TokenProvider(cfg);
+    const provider = {
+        identifier: cfg.identifier,
+        name: cfg.name,
+        description: cfg.description ?? '',
+        type: cfg.type ?? 'tilelayer',
+        scale: cfg.scale ?? 250000,
+        proxy: true,
+        _filePath: '',
+        _tokenProvider: tp
+    };
+    if (cfg.format !== undefined)
+        provider.format = cfg.format;
+    if (cfg.minzoom !== undefined)
+        provider.minzoom = cfg.minzoom;
+    if (cfg.maxzoom !== undefined)
+        provider.maxzoom = cfg.maxzoom;
+    if (cfg.bounds !== undefined)
+        provider.bounds = cfg.bounds;
+    // Defining as accessors rather than data properties so every read pulls
+    // a freshly-templated string from the current token. The plain
+    // ChartProvider interface declares these as `string` / `object`; the
+    // getter shape is compatible at the call site.
+    Object.defineProperty(provider, 'remoteUrl', {
+        enumerable: true,
+        configurable: false,
+        get: () => tp.resolveUrl()
+    });
+    Object.defineProperty(provider, 'headers', {
+        enumerable: true,
+        configurable: false,
+        get: () => tp.resolveHeaders()
+    });
+    provider.v1 = {
+        tilemapUrl: `~tilePath~/${cfg.identifier}/{z}/{x}/{y}`,
+        chartLayers: []
+    };
+    provider.v2 = {
+        url: `~tilePath~/${cfg.identifier}/{z}/{x}/{y}`,
+        layers: []
+    };
+    return provider;
+}
+/**
+ * Lightweight validation of a parsed token-provider config. Returns the
+ * config on success and throws with a human-readable message on the first
+ * problem found. Validates the fields the implementation actually relies
+ * on; admins can still pass extra fields without error.
+ */
+// Identifier shape: URL-safe characters only. Identifier flows into
+// filename construction (export mbtiles), tile-route URLs
+// (~tilePath~/{id}/...), and chartProviders dict keys; an identifier
+// containing slashes, dots, or whitespace produces malformed URLs and
+// confused-deputy lookups, even though the export-path traversal is
+// caught downstream. Defensive check at the validator.
+const IDENTIFIER_RE = /^[A-Za-z0-9_-]+$/;
+function validateTokenProviderConfig(raw, index) {
+    const where = `token provider #${index}`;
+    if (typeof raw !== 'object' || raw === null) {
+        throw new Error(`${where}: expected an object`);
+    }
+    const c = raw;
+    if (typeof c['identifier'] !== 'string' || c['identifier'].length === 0) {
+        throw new Error(`${where}: identifier is required (non-empty string)`);
+    }
+    if (!IDENTIFIER_RE.test(c['identifier'])) {
+        throw new Error(`${where}: identifier "${c['identifier']}" must match /[A-Za-z0-9_-]+/ ` +
+            `(used as a URL path segment and filename component)`);
+    }
+    if (typeof c['name'] !== 'string' || c['name'].length === 0) {
+        throw new Error(`${where}: name is required (non-empty string)`);
+    }
+    const ep = c['tokenEndpoint'];
+    if (typeof ep !== 'object' || ep === null) {
+        throw new Error(`${where}: tokenEndpoint is required (object)`);
+    }
+    const epRec = ep;
+    if (typeof epRec['url'] !== 'string' || epRec['url'].length === 0) {
+        throw new Error(`${where}: tokenEndpoint.url is required (non-empty string)`);
+    }
+    if (typeof epRec['ttlSeconds'] !== 'number' ||
+        !Number.isFinite(epRec['ttlSeconds']) ||
+        epRec['ttlSeconds'] <= 0) {
+        throw new Error(`${where}: tokenEndpoint.ttlSeconds must be a positive number`);
+    }
+    const tile = c['tile'];
+    if (typeof tile !== 'object' || tile === null) {
+        throw new Error(`${where}: tile is required (object)`);
+    }
+    const tileRec = tile;
+    if (typeof tileRec['url'] !== 'string' || tileRec['url'].length === 0) {
+        throw new Error(`${where}: tile.url is required (non-empty string)`);
+    }
+    return c;
+}
+//# sourceMappingURL=tokenProvider.js.map

package/plugin/tokenProvider.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tokenProvider.js","sourceRoot":"","sources":["../src/tokenProvider.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;GAaG;;;;;AAIH,gEAAgE;AAChE,gDAAgD;AAChD,MAAM,iBAAiB,GAAG,kBAAkB,CAAA;AAC5C,MAAM,iBAAiB,GAAG,6BAA6B,CAAA;AAEvD,mEAAmE;AACnE,qEAAqE;AACrE,sEAAsE;AACtE,sEAAsE;AACtE,0BAA0B;AAC1B,SAAS,SAAS,CAAC,GAAW;IAC5B,IAAI,CAAC;QACH,MAAM,CAAC,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAA;QACtB,OAAO,GAAG,CAAC,CAAC,QAAQ,KAAK,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,QAAQ,EAAE,CAAA;IAChD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,mBAAmB,CAAA;IAC5B,CAAC;AACH,CAAC;AAUD,MAAM,aAAa,GAAuB;IACxC,GAAG,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE;IACrB,IAAI,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,MAAM,EAAE;CAC1B,CAAA;AAED;IAcY,MAAM;IACN,KAAK;IAdf,uEAAuE;IACvE,uEAAuE;IACvE,gBAAgB;IACR,KAAK,GAA8B,EAAE,CAAA;IAC7C,0EAA0E;IAC1E,gDAAgD;IACxC,WAAW,GAAG,CAAC,CAAA;IACvB,yEAAyE;IACzE,0EAA0E;IAC1E,gDAAgD;IACxC,QAAQ,GAAyB,IAAI,CAAA;IAE7C,YACU,MAA2B,EAC3B,KAAK,GAAuB,aAAa;sBADzC,MAAM;qBACN,KAAK;IACZ,CAAC;IAEJ;;;;;;;;;OASG;IACH,KAAK,CAAC,gBAAgB;QACpB,IAAI,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,WAAW;YAAE,OAAM;QAC/C,IAAI,IAAI,CAAC,QAAQ;YAAE,OAAO,IAAI,CAAC,QAAQ,CAAA;QACvC,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC,UAAU,EAAE;aAC9B,KAAK,CAAC,CAAC,GAAU,EAAE,EAAE;YACpB,OAAO,CAAC,IAAI,CACV,kBAAkB,IAAI,CAAC,MAAM,CAAC,UAAU,yBAAyB,GAAG,CAAC,OAAO,EAAE,CAC/E,CAAA;QACH,CAAC,CAAC;aACD,OAAO,CAAC,GAAG,EAAE;YACZ,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAA;QACtB,CAAC,CAAC,CAAA;QACJ,OAAO,IAAI,CAAC,QAAQ,CAAA;IACtB,CAAC;IAEO,KAAK,CAAC,UAAU;QACtB,MAAM,EAAE,GAAG,IAAI,CAAC,MAAM,CAAC,aAAa,CAAA;QACpC,MAAM,SAAS,GAAG,EAAE,CAAC,SAAS,IAAI,KAAK,CAAA;QACvC,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAA;QACxC,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,EAAE,SAAS,CAAC,CAAA;QAC7D,IAAI,GAAa,CAAA;QACjB,IAAI,CAAC;YACH,GAAG,GAAG,MAAM,KAAK,CAAC,EAAE,CAAC,GAAG,EAAE;gBACxB,MAAM,EAAE,EAAE,CAAC,MAAM,IAAI,KAAK;gBAC1B,OAAO,EAAE,EAAE,CAAC,OAAO;gBACnB,IAAI,EAAE,EAAE,CAAC,IAAI;gBACb,MAAM,EAAE,UAAU,CAAC,MAAM;aAC1B,CAAC,CAAA;QACJ,CAAC;gBAAS,CAAC;YACT,YAAY,CAAC,KAAK,CAAC,CAAA;QACrB,CAAC;QACD,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;YACZ,mEAAmE;YACnE,2DAA2D;YAC3D,mCAAmC;YACnC,MAAM,IAAI,KAAK,CACb,kBAAkB,SAAS,CAAC,EAAE,CAAC,GAAG,CAAC,aAAa,GAAG,CAAC,MAAM,EAAE,CAC7D,CAAA;QACH,CAAC;QACD,MAAM,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAY,CAAA;QAC1C,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;YAC9C,MAAM,IAAI,KAAK,CAAC,kBAAkB,SAAS,CAAC,EAAE,CAAC,GAAG,CAAC,sBAAsB,CAAC,CAAA;QAC5E,CAAC;QACD,MAAM,IAAI,GAA8B,EAAE,CAAA;QAC1C,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;YAC1C,IAAI,OAAO,CAAC,KAAK,QAAQ;gBAAE,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,CAAA;QACxC,CAAC;QACD,IAAI,CAAC,KAAK,GAAG,IAAI,CAAA;QACjB,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,GAAG,EAAE,CAAC,UAAU,GAAG,IAAI,CAAA;IAC5D,CAAC;IAED;;;;OAIG;IACH,eAAe;QACb,IAAI,CAAC,WAAW,GAAG,CAAC,CAAA;IACtB,CAAC;IAED,4EAA4E;IAC5E,UAAU;QACR,OAAO,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;IAClD,CAAC;IAED,6DAA6D;IAC7D,cAAc;QACZ,MAAM,GAAG,GAA8B,EAAE,CAAA;QACzC,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,IAAI,EAAE,CAAC,EAAE,CAAC;YACpE,GAAG,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC,CAAA;QACjC,CAAC;QACD,OAAO,GAAG,CAAA;IACZ,CAAC;IAED,0EAA0E;IAC1E,oEAAoE;IACpE,8DAA8D;IACtD,cAAc,CAAC,CAAS;QAC9B,OAAO,CAAC;aACL,OAAO,CAAC,iBAAiB,EAAE,CAAC,CAAC,EAAE,GAAW,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC;aACrE,OAAO,CAAC,iBAAiB,EAAE,CAAC,CAAC,EAAE,EAAU,EAAE,EAAU,EAAE,EAAE;YACxD,MAAM,CAAC,GAAG,QAAQ,CAAC,EAAE,EAAE,EAAE,CAAC,CAAA;YAC1B,MAAM,CAAC,GAAG,QAAQ,CAAC,EAAE,EAAE,EAAE,CAAC,CAAA;YAC1B,MAAM,IAAI,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,CAAA;YACtB,OAAO,MAAM,CAAC,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,GAAG,IAAI,CAAC,CAAC,CAAA;QACzD,CAAC,CAAC,CAAA;IACN,CAAC;CACF;;AAED;;;;;;;GAOG;AACH,sCACE,GAAwB;IAExB,MAAM,EAAE,GAAG,IAAI,aAAa,CAAC,GAAG,CAAC,CAAA;IACjC,MAAM,QAAQ,GAAkB;QAC9B,UAAU,EAAE,GAAG,CAAC,UAAU;QAC1B,IAAI,EAAE,GAAG,CAAC,IAAI;QACd,WAAW,EAAE,GAAG,CAAC,WAAW,IAAI,EAAE;QAClC,IAAI,EAAE,GAAG,CAAC,IAAI,IAAI,WAAW;QAC7B,KAAK,EAAE,GAAG,CAAC,KAAK,IAAI,MAAM;QAC1B,KAAK,EAAE,IAAI;QACX,SAAS,EAAE,EAAE;QACb,cAAc,EAAE,EAAE;KACnB,CAAA;IACD,IAAI,GAAG,CAAC,MAAM,KAAK,SAAS;QAAE,QAAQ,CAAC,MAAM,GAAG,GAAG,CAAC,MAAM,CAAA;IAC1D,IAAI,GAAG,CAAC,OAAO,KAAK,SAAS;QAAE,QAAQ,CAAC,OAAO,GAAG,GAAG,CAAC,OAAO,CAAA;IAC7D,IAAI,GAAG,CAAC,OAAO,KAAK,SAAS;QAAE,QAAQ,CAAC,OAAO,GAAG,GAAG,CAAC,OAAO,CAAA;IAC7D,IAAI,GAAG,CAAC,MAAM,KAAK,SAAS;QAAE,QAAQ,CAAC,MAAM,GAAG,GAAG,CAAC,MAAM,CAAA;IAE1D,wEAAwE;IACxE,+DAA+D;IAC/D,qEAAqE;IACrE,+CAA+C;IAC/C,MAAM,CAAC,cAAc,CAAC,QAAQ,EAAE,WAAW,EAAE;QAC3C,UAAU,EAAE,IAAI;QAChB,YAAY,EAAE,KAAK;QACnB,GAAG,EAAE,GAAG,EAAE,CAAC,EAAE,CAAC,UAAU,EAAE;KAC3B,CAAC,CAAA;IACF,MAAM,CAAC,cAAc,CAAC,QAAQ,EAAE,SAAS,EAAE;QACzC,UAAU,EAAE,IAAI;QAChB,YAAY,EAAE,KAAK;QACnB,GAAG,EAAE,GAAG,EAAE,CAAC,EAAE,CAAC,cAAc,EAAE;KAC/B,CAAC,CAAA;IAEF,QAAQ,CAAC,EAAE,GAAG;QACZ,UAAU,EAAE,cAAc,GAAG,CAAC,UAAU,cAAc;QACtD,WAAW,EAAE,EAAE;KAChB,CAAA;IACD,QAAQ,CAAC,EAAE,GAAG;QACZ,GAAG,EAAE,cAAc,GAAG,CAAC,UAAU,cAAc;QAC/C,MAAM,EAAE,EAAE;KACX,CAAA;IACD,OAAO,QAAQ,CAAA;AACjB,CAAC;AAED;;;;;GAKG;AACH,oEAAoE;AACpE,0DAA0D;AAC1D,qEAAqE;AACrE,sEAAsE;AACtE,oEAAoE;AACpE,uDAAuD;AACvD,MAAM,aAAa,GAAG,kBAAkB,CAAA;AAExC,qCACE,GAAY,EACZ,KAAa;IAEb,MAAM,KAAK,GAAG,mBAAmB,KAAK,EAAE,CAAA;IACxC,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,KAAK,IAAI,EAAE,CAAC;QAC5C,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,sBAAsB,CAAC,CAAA;IACjD,CAAC;IACD,MAAM,CAAC,GAAG,GAA8B,CAAA;IACxC,IAAI,OAAO,CAAC,CAAC,YAAY,CAAC,KAAK,QAAQ,IAAI,CAAC,CAAC,YAAY,CAAC,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACxE,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,6CAA6C,CAAC,CAAA;IACxE,CAAC;IACD,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,EAAE,CAAC;QACzC,MAAM,IAAI,KAAK,CACb,GAAG,KAAK,iBAAiB,CAAC,CAAC,YAAY,CAAC,gCAAgC;YACtE,qDAAqD,CACxD,CAAA;IACH,CAAC;IACD,IAAI,OAAO,CAAC,CAAC,MAAM,CAAC,KAAK,QAAQ,IAAI,CAAC,CAAC,MAAM,CAAC,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC5D,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,uCAAuC,CAAC,CAAA;IAClE,CAAC;IACD,MAAM,EAAE,GAAG,CAAC,CAAC,eAAe,CAAC,CAAA;IAC7B,IAAI,OAAO,EAAE,KAAK,QAAQ,IAAI,EAAE,KAAK,IAAI,EAAE,CAAC;QAC1C,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,sCAAsC,CAAC,CAAA;IACjE,CAAC;IACD,MAAM,KAAK,GAAG,EAA6B,CAAA;IAC3C,IAAI,OAAO,KAAK,CAAC,KAAK,CAAC,KAAK,QAAQ,IAAI,KAAK,CAAC,KAAK,CAAC,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAClE,MAAM,IAAI,KAAK,CACb,GAAG,KAAK,oDAAoD,CAC7D,CAAA;IACH,CAAC;IACD,IACE,OAAO,KAAK,CAAC,YAAY,CAAC,KAAK,QAAQ;QACvC,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;QACrC,KAAK,CAAC,YAAY,CAAC,IAAI,CAAC,EACxB,CAAC;QACD,MAAM,IAAI,KAAK,CACb,GAAG,KAAK,sDAAsD,CAC/D,CAAA;IACH,CAAC;IACD,MAAM,IAAI,GAAG,CAAC,CAAC,MAAM,CAAC,CAAA;IACtB,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;QAC9C,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,6BAA6B,CAAC,CAAA;IACxD,CAAC;IACD,MAAM,OAAO,GAAG,IAA+B,CAAA;IAC/C,IAAI,OAAO,OAAO,CAAC,KAAK,CAAC,KAAK,QAAQ,IAAI,OAAO,CAAC,KAAK,CAAC,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACtE,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,2CAA2C,CAAC,CAAA;IACtE,CAAC;IACD,OAAO,CAAmC,CAAA;AAC5C,CAAC"}

package/plugin/types.d.ts

@@ -1,10 +1,15 @@
 import type { OutgoingHttpHeaders } from 'http';
-type MapSourceType = 'tilelayer' | 'S-57' | 'WMS' | 'WMTS' | 'mapstyleJSON' | 'tileJSON';
+import type { DatabaseSync } from 'node:sqlite';
+export type MapSourceType = 'tilelayer' | 'S-57' | 'WMS' | 'WMTS' | 'mapstyleJSON' | 'tileJSON';
 export interface MBTilesHandle {
+    putTile: (z: number, x: number, y: number, tile: Buffer, callback: (err: Error | null) => void) => void;
+    startWriting: (callback: (err: Error | null) => void) => void;
+    putInfo: (info: MBTilesMetadata, callback: (err: Error | null) => void) => void;
     getTile: (z: number, x: number, y: number, callback: (err: Error | null, tile: Buffer, headers: OutgoingHttpHeaders) => void) => void;
     getInfo: (callback: (err: Error | null, metadata: MBTilesMetadata) => void) => void;
     close: (callback: (err: Error | null) => void) => void;
     on: (event: 'error', listener: (err: Error) => void) => MBTilesHandle;
+    _db?: DatabaseSync;
 }
 export interface MBTilesMetadata {
     name?: string;
@@ -24,6 +29,10 @@ export interface ChartProvider {
     _filePath: string;
     _mbtilesHandle?: MBTilesHandle;
     _flipY?: boolean;
+    _tokenProvider?: {
+        ensureFreshToken: () => Promise<void>;
+        invalidateToken: () => void;
+    };
     identifier: string;
     name: string;
     description: string;
@@ -62,5 +71,31 @@ export interface OnlineChartProvider {
     style: string;
     layers: string[];
 }
-export {};
+export interface TokenProviderConfig {
+    identifier: string;
+    name: string;
+    description?: string;
+    type?: MapSourceType;
+    format?: string;
+    scale?: number;
+    minzoom?: number;
+    maxzoom?: number;
+    bounds?: number[];
+    tokenEndpoint: {
+        url: string;
+        method?: 'GET' | 'POST';
+        headers?: {
+            [key: string]: string;
+        };
+        body?: string;
+        ttlSeconds: number;
+        timeoutMs?: number;
+    };
+    tile: {
+        url: string;
+        headers?: {
+            [key: string]: string;
+        };
+    };
+}
 //# sourceMappingURL=types.d.ts.map

package/plugin/types.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,MAAM,CAAA;AAE/C,KAAK,aAAa,GACd,WAAW,GACX,MAAM,GACN,KAAK,GACL,MAAM,GACN,cAAc,GACd,UAAU,CAAA;AAKd,MAAM,WAAW,aAAa;IAC5B,OAAO,EAAE,CACP,CAAC,EAAE,MAAM,EACT,CAAC,EAAE,MAAM,EACT,CAAC,EAAE,MAAM,EACT,QAAQ,EAAE,CACR,GAAG,EAAE,KAAK,GAAG,IAAI,EACjB,IAAI,EAAE,MAAM,EACZ,OAAO,EAAE,mBAAmB,KACzB,IAAI,KACN,IAAI,CAAA;IACT,OAAO,EAAE,CACP,QAAQ,EAAE,CAAC,GAAG,EAAE,KAAK,GAAG,IAAI,EAAE,QAAQ,EAAE,eAAe,KAAK,IAAI,KAC7D,IAAI,CAAA;IACT,KAAK,EAAE,CAAC,QAAQ,EAAE,CAAC,GAAG,EAAE,KAAK,GAAG,IAAI,KAAK,IAAI,KAAK,IAAI,CAAA;IAGtD,EAAE,EAAE,CAAC,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAC,GAAG,EAAE,KAAK,KAAK,IAAI,KAAK,aAAa,CAAA;CACtE;AAKD,MAAM,WAAW,eAAe;IAC9B,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,EAAE,CAAC,EAAE,MAAM,CAAA;IACX,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,MAAM,CAAC,EAAE,MAAM,EAAE,GAAG,MAAM,CAAA;IAC1B,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,aAAa,CAAC,EAAE,KAAK,CAAC;QAAE,EAAE,EAAE,MAAM,CAAA;KAAE,CAAC,CAAA;CACtC;AAED,MAAM,WAAW,aAAa;IAC5B,WAAW,CAAC,EAAE,SAAS,GAAG,WAAW,CAAA;IACrC,SAAS,EAAE,MAAM,CAAA;IACjB,cAAc,CAAC,EAAE,aAAa,CAAA;IAC9B,MAAM,CAAC,EAAE,OAAO,CAAA;IAChB,UAAU,EAAE,MAAM,CAAA;IAClB,IAAI,EAAE,MAAM,CAAA;IACZ,WAAW,EAAE,MAAM,CAAA;IACnB,IAAI,EAAE,aAAa,CAAA;IACnB,KAAK,EAAE,MAAM,CAAA;IACb,EAAE,CAAC,EAAE;QACH,UAAU,EAAE,MAAM,CAAA;QAClB,WAAW,CAAC,EAAE,MAAM,EAAE,CAAA;KACvB,CAAA;IACD,EAAE,CAAC,EAAE;QACH,GAAG,EAAE,MAAM,CAAA;QACX,MAAM,CAAC,EAAE,MAAM,EAAE,CAAA;KAClB,CAAA;IACD,MAAM,CAAC,EAAE,MAAM,EAAE,CAAA;IACjB,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,MAAM,CAAC,EAAE,MAAM,EAAE,CAAA;IACjB,KAAK,CAAC,EAAE,OAAO,CAAA;IACf,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,OAAO,CAAC,EAAE;QAAE,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAAA;KAAE,CAAA;CACpC;AAED,MAAM,WAAW,mBAAmB;IAClC,IAAI,EAAE,MAAM,CAAA;IACZ,WAAW,EAAE,MAAM,CAAA;IACnB,OAAO,EAAE,MAAM,CAAA;IACf,OAAO,EAAE,MAAM,CAAA;IACf,UAAU,EAAE,aAAa,CAAA;IACzB,MAAM,EAAE,KAAK,GAAG,KAAK,CAAA;IACrB,GAAG,EAAE,MAAM,CAAA;IACX,KAAK,EAAE,OAAO,CAAA;IACd,OAAO,CAAC,EAAE,MAAM,EAAE,CAAA;IAClB,KAAK,EAAE,MAAM,CAAA;IACb,MAAM,EAAE,MAAM,EAAE,CAAA;CACjB"}
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,MAAM,CAAA;AAC/C,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,aAAa,CAAA;AAE/C,MAAM,MAAM,aAAa,GACvB,WAAW,GAAG,MAAM,GAAG,KAAK,GAAG,MAAM,GAAG,cAAc,GAAG,UAAU,CAAA;AAKrE,MAAM,WAAW,aAAa;IAC5B,OAAO,EAAE,CACP,CAAC,EAAE,MAAM,EACT,CAAC,EAAE,MAAM,EACT,CAAC,EAAE,MAAM,EACT,IAAI,EAAE,MAAM,EACZ,QAAQ,EAAE,CAAC,GAAG,EAAE,KAAK,GAAG,IAAI,KAAK,IAAI,KAClC,IAAI,CAAA;IACT,YAAY,EAAE,CAAC,QAAQ,EAAE,CAAC,GAAG,EAAE,KAAK,GAAG,IAAI,KAAK,IAAI,KAAK,IAAI,CAAA;IAC7D,OAAO,EAAE,CACP,IAAI,EAAE,eAAe,EACrB,QAAQ,EAAE,CAAC,GAAG,EAAE,KAAK,GAAG,IAAI,KAAK,IAAI,KAClC,IAAI,CAAA;IAET,OAAO,EAAE,CACP,CAAC,EAAE,MAAM,EACT,CAAC,EAAE,MAAM,EACT,CAAC,EAAE,MAAM,EACT,QAAQ,EAAE,CACR,GAAG,EAAE,KAAK,GAAG,IAAI,EACjB,IAAI,EAAE,MAAM,EACZ,OAAO,EAAE,mBAAmB,KACzB,IAAI,KACN,IAAI,CAAA;IACT,OAAO,EAAE,CACP,QAAQ,EAAE,CAAC,GAAG,EAAE,KAAK,GAAG,IAAI,EAAE,QAAQ,EAAE,eAAe,KAAK,IAAI,KAC7D,IAAI,CAAA;IACT,KAAK,EAAE,CAAC,QAAQ,EAAE,CAAC,GAAG,EAAE,KAAK,GAAG,IAAI,KAAK,IAAI,KAAK,IAAI,CAAA;IAGtD,EAAE,EAAE,CAAC,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAC,GAAG,EAAE,KAAK,KAAK,IAAI,KAAK,aAAa,CAAA;IAIrE,GAAG,CAAC,EAAE,YAAY,CAAA;CACnB;AAKD,MAAM,WAAW,eAAe;IAC9B,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,EAAE,CAAC,EAAE,MAAM,CAAA;IACX,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,MAAM,CAAC,EAAE,MAAM,EAAE,GAAG,MAAM,CAAA;IAC1B,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,aAAa,CAAC,EAAE,KAAK,CAAC;QAAE,EAAE,EAAE,MAAM,CAAA;KAAE,CAAC,CAAA;CACtC;AAED,MAAM,WAAW,aAAa;IAC5B,WAAW,CAAC,EAAE,SAAS,GAAG,WAAW,CAAA;IACrC,SAAS,EAAE,MAAM,CAAA;IACjB,cAAc,CAAC,EAAE,aAAa,CAAA;IAC9B,MAAM,CAAC,EAAE,OAAO,CAAA;IAOhB,cAAc,CAAC,EAAE;QACf,gBAAgB,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAA;QACrC,eAAe,EAAE,MAAM,IAAI,CAAA;KAC5B,CAAA;IACD,UAAU,EAAE,MAAM,CAAA;IAClB,IAAI,EAAE,MAAM,CAAA;IACZ,WAAW,EAAE,MAAM,CAAA;IACnB,IAAI,EAAE,aAAa,CAAA;IACnB,KAAK,EAAE,MAAM,CAAA;IACb,EAAE,CAAC,EAAE;QACH,UAAU,EAAE,MAAM,CAAA;QAClB,WAAW,CAAC,EAAE,MAAM,EAAE,CAAA;KACvB,CAAA;IACD,EAAE,CAAC,EAAE;QACH,GAAG,EAAE,MAAM,CAAA;QACX,MAAM,CAAC,EAAE,MAAM,EAAE,CAAA;KAClB,CAAA;IACD,MAAM,CAAC,EAAE,MAAM,EAAE,CAAA;IACjB,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,MAAM,CAAC,EAAE,MAAM,EAAE,CAAA;IACjB,KAAK,CAAC,EAAE,OAAO,CAAA;IACf,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,OAAO,CAAC,EAAE;QAAE,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAAA;KAAE,CAAA;CACpC;AAED,MAAM,WAAW,mBAAmB;IAClC,IAAI,EAAE,MAAM,CAAA;IACZ,WAAW,EAAE,MAAM,CAAA;IACnB,OAAO,EAAE,MAAM,CAAA;IACf,OAAO,EAAE,MAAM,CAAA;IACf,UAAU,EAAE,aAAa,CAAA;IACzB,MAAM,EAAE,KAAK,GAAG,KAAK,CAAA;IACrB,GAAG,EAAE,MAAM,CAAA;IACX,KAAK,EAAE,OAAO,CAAA;IACd,OAAO,CAAC,EAAE,MAAM,EAAE,CAAA;IAClB,KAAK,EAAE,MAAM,CAAA;IACb,MAAM,EAAE,MAAM,EAAE,CAAA;CACjB;AAOD,MAAM,WAAW,mBAAmB;IAClC,UAAU,EAAE,MAAM,CAAA;IAClB,IAAI,EAAE,MAAM,CAAA;IACZ,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,IAAI,CAAC,EAAE,aAAa,CAAA;IACpB,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,MAAM,CAAC,EAAE,MAAM,EAAE,CAAA;IAIjB,aAAa,EAAE;QACb,GAAG,EAAE,MAAM,CAAA;QACX,MAAM,CAAC,EAAE,KAAK,GAAG,MAAM,CAAA;QACvB,OAAO,CAAC,EAAE;YAAE,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAAA;SAAE,CAAA;QACnC,IAAI,CAAC,EAAE,MAAM,CAAA;QACb,UAAU,EAAE,MAAM,CAAA;QAIlB,SAAS,CAAC,EAAE,MAAM,CAAA;KACnB,CAAA;IAKD,IAAI,EAAE;QACJ,GAAG,EAAE,MAAM,CAAA;QACX,OAAO,CAAC,EAAE;YAAE,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAAA;SAAE,CAAA;KACpC,CAAA;CACF"}