@sphereon/ssi-express-support 0.33.1-feature.vcdm2.tsup.31 → 0.33.1-next.2

package/dist/auth-utils.d.ts

@@ -0,0 +1,21 @@
+import express, { NextFunction, RequestHandler } from 'express';
+import { ParamsDictionary } from 'express-serve-static-core';
+import { ParsedQs } from 'qs';
+import { EndpointArgs, HasEndpointOpts } from './types';
+export declare const checkUserIsInRole: (opts: {
+    roles: string | string[];
+}) => (req: express.Request, res: express.Response, next: NextFunction) => void | express.Response<any, Record<string, any>>;
+export declare const checkAuthenticationOnly: (opts?: EndpointArgs) => (req: express.Request, res: express.Response, next: express.NextFunction) => void | express.Response<any, Record<string, any>>;
+export declare const checkAuthorizationOnly: (opts?: EndpointArgs) => (req: express.Request, res: express.Response, next: express.NextFunction) => void | express.Response<any, Record<string, any>>;
+export declare const isUserNotAuthenticated: (req: express.Request, res: express.Response, next: express.NextFunction) => void;
+export declare const isUserAuthenticated: (req: express.Request, res: express.Response, next: express.NextFunction) => void | express.Response<any, Record<string, any>>;
+export declare const checkAuth: (opts?: EndpointArgs) => RequestHandler<ParamsDictionary, any, any, ParsedQs, Record<string, any>>[];
+export declare function copyGlobalAuthToEndpoint(args?: {
+    opts?: HasEndpointOpts;
+    key: string;
+}): void;
+export declare function copyGlobalAuthToEndpoints(args?: {
+    opts?: HasEndpointOpts;
+    keys: string[];
+}): void;
+//# sourceMappingURL=auth-utils.d.ts.map

package/dist/auth-utils.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth-utils.d.ts","sourceRoot":"","sources":["../src/auth-utils.ts"],"names":[],"mappings":"AAAA,OAAO,OAAO,EAAE,EAAE,YAAY,EAAE,cAAc,EAAE,MAAM,SAAS,CAAA;AAC/D,OAAO,EAAE,gBAAgB,EAAE,MAAM,2BAA2B,CAAA;AAE5D,OAAO,EAAE,QAAQ,EAAE,MAAM,IAAI,CAAA;AAE7B,OAAO,EAAE,YAAY,EAAmB,eAAe,EAAE,MAAM,SAAS,CAAA;AAExE,eAAO,MAAM,iBAAiB,SAAU;IAAE,KAAK,EAAE,MAAM,GAAG,MAAM,EAAE,CAAA;CAAE,WAAW,OAAO,CAAC,OAAO,OAAO,OAAO,CAAC,QAAQ,QAAQ,YAAY,sDAgBxI,CAAA;AAgFD,eAAO,MAAM,uBAAuB,UAAW,YAAY,WAAW,OAAO,CAAC,OAAO,OAAO,OAAO,CAAC,QAAQ,QAAQ,OAAO,CAAC,YAAY,sDAGvI,CAAA;AAED,eAAO,MAAM,sBAAsB,UAAW,YAAY,WAAW,OAAO,CAAC,OAAO,OAAO,OAAO,CAAC,QAAQ,QAAQ,OAAO,CAAC,YAAY,sDAGtI,CAAA;AAED,eAAO,MAAM,sBAAsB,QAAS,OAAO,CAAC,OAAO,OAAO,OAAO,CAAC,QAAQ,QAAQ,OAAO,CAAC,YAAY,SAI7G,CAAA;AAED,eAAO,MAAM,mBAAmB,QAAS,OAAO,CAAC,OAAO,OAAO,OAAO,CAAC,QAAQ,QAAQ,OAAO,CAAC,YAAY,sDAM1G,CAAA;AAED,eAAO,MAAM,SAAS,UAAW,YAAY,KAAG,cAAc,CAAC,gBAAgB,EAAE,GAAG,EAAE,GAAG,EAAE,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,EAMxH,CAAA;AAED,wBAAgB,wBAAwB,CAAC,IAAI,CAAC,EAAE;IAAE,IAAI,CAAC,EAAE,eAAe,CAAC;IAAC,GAAG,EAAE,MAAM,CAAA;CAAE,QAmBtF;AAED,wBAAgB,yBAAyB,CAAC,IAAI,CAAC,EAAE;IAAE,IAAI,CAAC,EAAE,eAAe,CAAC;IAAC,IAAI,EAAE,MAAM,EAAE,CAAA;CAAE,QAE1F"}

package/dist/auth-utils.js

@@ -0,0 +1,148 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.checkAuth = exports.isUserAuthenticated = exports.isUserNotAuthenticated = exports.checkAuthorizationOnly = exports.checkAuthenticationOnly = exports.checkUserIsInRole = void 0;
+exports.copyGlobalAuthToEndpoint = copyGlobalAuthToEndpoint;
+exports.copyGlobalAuthToEndpoints = copyGlobalAuthToEndpoints;
+const passport_1 = __importDefault(require("passport"));
+const express_utils_1 = require("./express-utils");
+const types_1 = require("./types");
+const checkUserIsInRole = (opts) => (req, res, next) => {
+    if (!(opts === null || opts === void 0 ? void 0 : opts.roles) || opts.roles.length === 0) {
+        return next();
+    }
+    const roles = Array.isArray(opts.roles) ? opts.roles : [opts.roles];
+    if (!(req === null || req === void 0 ? void 0 : req.user) || !('role' in req.user)) {
+        return res.status(401).end();
+    }
+    // @ts-ignore
+    const hasRole = roles.find((role) => req.user.role.toLowerCase() === role.toLowerCase());
+    if (!hasRole) {
+        return res.status(403).end();
+    }
+    return next();
+};
+exports.checkUserIsInRole = checkUserIsInRole;
+const checkAuthenticationImpl = (req, res, next, opts) => {
+    var _a, _b, _c, _d, _e, _f;
+    const defaultCallback = (err, user, _info, _status) => {
+        if (err) {
+            const message = 'message' in err ? err.message : err;
+            console.log('Authentication failed, error: ' + JSON.stringify(message));
+            return next({ statusCode: 403, message });
+        }
+        else if (!user) {
+            console.log('Authentication failed, no user object present in request. Redirecting to /login');
+            // todo: configuration option
+            return res.redirect('/authentication/login');
+        }
+        if (options.session) {
+            req.logIn(user, function (err) {
+                if (err) {
+                    return next(err);
+                }
+            });
+        }
+        /*       /!*if (options.session) {
+                   req.logIn(user, function (err) {
+                       if (err) {
+                           return next(err)
+                       }
+                       return res.redirect('/')
+                   })
+               }*!/*/
+        return next();
+    };
+    if (!opts || !opts.authentication || opts.authentication.enabled === false) {
+        return next();
+    }
+    if (!opts.authentication.strategy) {
+        console.log(`Authentication enabled, but no strategy configured. All auth request will be denied!`);
+        return res.status(401).end();
+    }
+    const options = Object.assign(Object.assign({}, (_a = opts === null || opts === void 0 ? void 0 : opts.authentication) === null || _a === void 0 ? void 0 : _a.strategyOptions), { authInfo: ((_b = opts === null || opts === void 0 ? void 0 : opts.authentication) === null || _b === void 0 ? void 0 : _b.authInfo) !== false, session: ((_c = opts === null || opts === void 0 ? void 0 : opts.authentication) === null || _c === void 0 ? void 0 : _c.session) !== false });
+    const callback = (_e = (_d = opts === null || opts === void 0 ? void 0 : opts.authentication) === null || _d === void 0 ? void 0 : _d.callback) !== null && _e !== void 0 ? _e : (((_f = opts === null || opts === void 0 ? void 0 : opts.authentication) === null || _f === void 0 ? void 0 : _f.useDefaultCallback) ? defaultCallback : undefined);
+    passport_1.default.authenticate(opts.authentication.strategy, options, callback).call(this, req, res, next);
+};
+const checkAuthorizationImpl = (req, res, next, opts) => {
+    if (!opts || !opts.authentication || !opts.authorization || opts.authentication.enabled === false || (opts === null || opts === void 0 ? void 0 : opts.authorization.enabled) === false) {
+        return next();
+    }
+    /*if (!req.isAuthenticated()) {
+            return sendErrorResponse(res, 403, 'Authorization with an unauthenticated request is not possible')
+        }*/
+    const authorization = opts.authorization;
+    if (!authorization.enforcer && (!authorization.requireUserInRoles || authorization.requireUserInRoles.length === 0)) {
+        console.log(`Authorization enabled for endpoint, but no enforcer or roles supplied`);
+        return res.status(401).end();
+    }
+    if (authorization.requireUserInRoles && authorization.requireUserInRoles.length > 0) {
+        (0, exports.checkUserIsInRole)({ roles: authorization.requireUserInRoles });
+    }
+    if (authorization.enforcer) {
+        const enforcer = authorization.enforcer;
+        const permitted = enforcer.enforceSync(req.user, opts.resource, opts.operation);
+        if (!permitted) {
+            console.log(`Access to ${opts.resource} and op ${opts.operation} not allowed for ${req.user}`);
+            return res.status(403).end();
+        }
+    }
+    return next();
+};
+const checkAuthenticationOnly = (opts) => (req, res, next) => {
+    // executeRequestHandlers(req, res, next, opts)
+    return checkAuthenticationImpl(req, res, next, opts);
+};
+exports.checkAuthenticationOnly = checkAuthenticationOnly;
+const checkAuthorizationOnly = (opts) => (req, res, next) => {
+    // executeRequestHandlers(req, res, next, opts)
+    return checkAuthorizationImpl(req, res, next, opts);
+};
+exports.checkAuthorizationOnly = checkAuthorizationOnly;
+const isUserNotAuthenticated = (req, res, next) => {
+    if (!req.user) {
+        next();
+    }
+};
+exports.isUserNotAuthenticated = isUserNotAuthenticated;
+const isUserAuthenticated = (req, res, next) => {
+    if (!req.user) {
+        return (0, express_utils_1.sendErrorResponse)(res, 401, 'Authentication required');
+    }
+    else {
+        return next();
+    }
+};
+exports.isUserAuthenticated = isUserAuthenticated;
+const checkAuth = (opts) => {
+    const handlers = [];
+    handlers.push((0, exports.checkAuthenticationOnly)(opts));
+    handlers.push((0, exports.checkAuthorizationOnly)(opts));
+    (opts === null || opts === void 0 ? void 0 : opts.handlers) && handlers.push(...opts.handlers);
+    return handlers;
+};
+exports.checkAuth = checkAuth;
+function copyGlobalAuthToEndpoint(args) {
+    var _a, _b, _c;
+    const opts = args === null || args === void 0 ? void 0 : args.opts;
+    const key = args === null || args === void 0 ? void 0 : args.key;
+    if (!opts || !key || !(0, types_1.hasEndpointOpts)(opts)) {
+        return;
+    }
+    if (key === 'basePath') {
+        // make sure to not copy base path over, as we use these at the global router, and this would repeat the path
+        return;
+    }
+    if ((_a = opts.endpointOpts) === null || _a === void 0 ? void 0 : _a.globalAuth) {
+        if (((_b = opts.endpointOpts[key]) === null || _b === void 0 ? void 0 : _b.disableGlobalAuth) === true) {
+            return;
+        }
+        opts.endpointOpts[key] = Object.assign(Object.assign({}, opts.endpointOpts[key]), { endpoint: Object.assign(Object.assign({}, opts.endpointOpts.globalAuth), (_c = opts.endpointOpts[key]) === null || _c === void 0 ? void 0 : _c.endpoint) });
+    }
+}
+function copyGlobalAuthToEndpoints(args) {
+    args === null || args === void 0 ? void 0 : args.keys.forEach((key) => copyGlobalAuthToEndpoint({ opts: args === null || args === void 0 ? void 0 : args.opts, key }));
+}
+//# sourceMappingURL=auth-utils.js.map

package/dist/auth-utils.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth-utils.js","sourceRoot":"","sources":["../src/auth-utils.ts"],"names":[],"mappings":";;;;;;AAuIA,4DAmBC;AAED,8DAEC;AA5JD,wDAA+B;AAE/B,mDAAmD;AACnD,mCAAwE;AAEjE,MAAM,iBAAiB,GAAG,CAAC,IAAkC,EAAE,EAAE,CAAC,CAAC,GAAoB,EAAE,GAAqB,EAAE,IAAkB,EAAE,EAAE;IAC3I,IAAI,CAAC,CAAA,IAAI,aAAJ,IAAI,uBAAJ,IAAI,CAAE,KAAK,CAAA,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC5C,OAAO,IAAI,EAAE,CAAA;IACf,CAAC;IACD,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;IACnE,IAAI,CAAC,CAAA,GAAG,aAAH,GAAG,uBAAH,GAAG,CAAE,IAAI,CAAA,IAAI,CAAC,CAAC,MAAM,IAAI,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;QACxC,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,CAAA;IAC9B,CAAC;IAED,aAAa;IACb,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,KAAK,IAAI,CAAC,WAAW,EAAE,CAAC,CAAA;IACxF,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,CAAA;IAC9B,CAAC;IAED,OAAO,IAAI,EAAE,CAAA;AACf,CAAC,CAAA;AAhBY,QAAA,iBAAiB,qBAgB7B;AAED,MAAM,uBAAuB,GAAG,CAAC,GAAoB,EAAE,GAAqB,EAAE,IAA0B,EAAE,IAAmB,EAAE,EAAE;;IAC/H,MAAM,eAAe,GAAG,CACtB,GAAQ,EACR,IAAkC,EAClC,KAAmD,EACnD,OAA4C,EAC5C,EAAE;QACF,IAAI,GAAG,EAAE,CAAC;YACR,MAAM,OAAO,GAAG,SAAS,IAAI,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,CAAA;YACpD,OAAO,CAAC,GAAG,CAAC,gCAAgC,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAA;YACvE,OAAO,IAAI,CAAC,EAAE,UAAU,EAAE,GAAG,EAAE,OAAO,EAAE,CAAC,CAAA;QAC3C,CAAC;aAAM,IAAI,CAAC,IAAI,EAAE,CAAC;YACjB,OAAO,CAAC,GAAG,CAAC,iFAAiF,CAAC,CAAA;YAC9F,6BAA6B;YAC7B,OAAO,GAAG,CAAC,QAAQ,CAAC,uBAAuB,CAAC,CAAA;QAC9C,CAAC;QACD,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;YACpB,GAAG,CAAC,KAAK,CAAC,IAAI,EAAE,UAAU,GAAG;gBAC3B,IAAI,GAAG,EAAE,CAAC;oBACR,OAAO,IAAI,CAAC,GAAG,CAAC,CAAA;gBAClB,CAAC;YACH,CAAC,CAAC,CAAA;QACJ,CAAC;QACD;;;;;;;qBAOa;QACb,OAAO,IAAI,EAAE,CAAA;IACf,CAAC,CAAA;IAED,IAAI,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,cAAc,IAAI,IAAI,CAAC,cAAc,CAAC,OAAO,KAAK,KAAK,EAAE,CAAC;QAC3E,OAAO,IAAI,EAAE,CAAA;IACf,CAAC;IACD,IAAI,CAAC,IAAI,CAAC,cAAc,CAAC,QAAQ,EAAE,CAAC;QAClC,OAAO,CAAC,GAAG,CAAC,sFAAsF,CAAC,CAAA;QACnG,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,CAAA;IAC9B,CAAC;IACD,MAAM,OAAO,mCACR,MAAA,IAAI,aAAJ,IAAI,uBAAJ,IAAI,CAAE,cAAc,0CAAE,eAAe,KACxC,QAAQ,EAAE,CAAA,MAAA,IAAI,aAAJ,IAAI,uBAAJ,IAAI,CAAE,cAAc,0CAAE,QAAQ,MAAK,KAAK,EAClD,OAAO,EAAE,CAAA,MAAA,IAAI,aAAJ,IAAI,uBAAJ,IAAI,CAAE,cAAc,0CAAE,OAAO,MAAK,KAAK,GACjD,CAAA;IAED,MAAM,QAAQ,GAAG,MAAA,MAAA,IAAI,aAAJ,IAAI,uBAAJ,IAAI,CAAE,cAAc,0CAAE,QAAQ,mCAAI,CAAC,CAAA,MAAA,IAAI,aAAJ,IAAI,uBAAJ,IAAI,CAAE,cAAc,0CAAE,kBAAkB,EAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,SAAS,CAAC,CAAA;IAE3H,kBAAQ,CAAC,YAAY,CAAC,IAAI,CAAC,cAAc,CAAC,QAAQ,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,EAAE,GAAG,EAAE,IAAI,CAAC,CAAA;AACnG,CAAC,CAAA;AACD,MAAM,sBAAsB,GAAG,CAAC,GAAoB,EAAE,GAAqB,EAAE,IAA0B,EAAE,IAAmB,EAAE,EAAE;IAC9H,IAAI,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,cAAc,IAAI,CAAC,IAAI,CAAC,aAAa,IAAI,IAAI,CAAC,cAAc,CAAC,OAAO,KAAK,KAAK,IAAI,CAAA,IAAI,aAAJ,IAAI,uBAAJ,IAAI,CAAE,aAAa,CAAC,OAAO,MAAK,KAAK,EAAE,CAAC;QAC3I,OAAO,IAAI,EAAE,CAAA;IACf,CAAC;IACD;;WAEO;IACP,MAAM,aAAa,GAAG,IAAI,CAAC,aAAa,CAAA;IAExC,IAAI,CAAC,aAAa,CAAC,QAAQ,IAAI,CAAC,CAAC,aAAa,CAAC,kBAAkB,IAAI,aAAa,CAAC,kBAAkB,CAAC,MAAM,KAAK,CAAC,CAAC,EAAE,CAAC;QACpH,OAAO,CAAC,GAAG,CAAC,uEAAuE,CAAC,CAAA;QACpF,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,CAAA;IAC9B,CAAC;IACD,IAAI,aAAa,CAAC,kBAAkB,IAAI,aAAa,CAAC,kBAAkB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACpF,IAAA,yBAAiB,EAAC,EAAE,KAAK,EAAE,aAAa,CAAC,kBAAkB,EAAE,CAAC,CAAA;IAChE,CAAC;IACD,IAAI,aAAa,CAAC,QAAQ,EAAE,CAAC;QAC3B,MAAM,QAAQ,GAAG,aAAa,CAAC,QAAQ,CAAA;QACvC,MAAM,SAAS,GAAG,QAAQ,CAAC,WAAW,CAAC,GAAG,CAAC,IAAI,EAAE,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,SAAS,CAAC,CAAA;QAC/E,IAAI,CAAC,SAAS,EAAE,CAAC;YACf,OAAO,CAAC,GAAG,CAAC,aAAa,IAAI,CAAC,QAAQ,WAAW,IAAI,CAAC,SAAS,oBAAoB,GAAG,CAAC,IAAI,EAAE,CAAC,CAAA;YAC9F,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,CAAA;QAC9B,CAAC;IACH,CAAC;IACD,OAAO,IAAI,EAAE,CAAA;AACf,CAAC,CAAA;AAEM,MAAM,uBAAuB,GAAG,CAAC,IAAmB,EAAE,EAAE,CAAC,CAAC,GAAoB,EAAE,GAAqB,EAAE,IAA0B,EAAE,EAAE;IAC1I,+CAA+C;IAC/C,OAAO,uBAAuB,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,IAAI,CAAC,CAAA;AACtD,CAAC,CAAA;AAHY,QAAA,uBAAuB,2BAGnC;AAEM,MAAM,sBAAsB,GAAG,CAAC,IAAmB,EAAE,EAAE,CAAC,CAAC,GAAoB,EAAE,GAAqB,EAAE,IAA0B,EAAE,EAAE;IACzI,+CAA+C;IAC/C,OAAO,sBAAsB,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,IAAI,CAAC,CAAA;AACrD,CAAC,CAAA;AAHY,QAAA,sBAAsB,0BAGlC;AAEM,MAAM,sBAAsB,GAAG,CAAC,GAAoB,EAAE,GAAqB,EAAE,IAA0B,EAAE,EAAE;IAChH,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC;QACd,IAAI,EAAE,CAAA;IACR,CAAC;AACH,CAAC,CAAA;AAJY,QAAA,sBAAsB,0BAIlC;AAEM,MAAM,mBAAmB,GAAG,CAAC,GAAoB,EAAE,GAAqB,EAAE,IAA0B,EAAE,EAAE;IAC7G,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC;QACd,OAAO,IAAA,iCAAiB,EAAC,GAAG,EAAE,GAAG,EAAE,yBAAyB,CAAC,CAAA;IAC/D,CAAC;SAAM,CAAC;QACN,OAAO,IAAI,EAAE,CAAA;IACf,CAAC;AACH,CAAC,CAAA;AANY,QAAA,mBAAmB,uBAM/B;AAEM,MAAM,SAAS,GAAG,CAAC,IAAmB,EAA+E,EAAE;IAC5H,MAAM,QAAQ,GAAgF,EAAE,CAAA;IAChG,QAAQ,CAAC,IAAI,CAAC,IAAA,+BAAuB,EAAC,IAAI,CAAC,CAAC,CAAA;IAC5C,QAAQ,CAAC,IAAI,CAAC,IAAA,8BAAsB,EAAC,IAAI,CAAC,CAAC,CAAA;IAC3C,CAAA,IAAI,aAAJ,IAAI,uBAAJ,IAAI,CAAE,QAAQ,KAAI,QAAQ,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,QAAQ,CAAC,CAAA;IACjD,OAAO,QAAQ,CAAA;AACjB,CAAC,CAAA;AANY,QAAA,SAAS,aAMrB;AAED,SAAgB,wBAAwB,CAAC,IAA8C;;IACrF,MAAM,IAAI,GAAG,IAAI,aAAJ,IAAI,uBAAJ,IAAI,CAAE,IAAI,CAAA;IACvB,MAAM,GAAG,GAAG,IAAI,aAAJ,IAAI,uBAAJ,IAAI,CAAE,GAAG,CAAA;IACrB,IAAI,CAAC,IAAI,IAAI,CAAC,GAAG,IAAI,CAAC,IAAA,uBAAe,EAAC,IAAI,CAAC,EAAE,CAAC;QAC5C,OAAM;IACR,CAAC;IACD,IAAI,GAAG,KAAK,UAAU,EAAE,CAAC;QACvB,6GAA6G;QAC7G,OAAM;IACR,CAAC;IACD,IAAI,MAAA,IAAI,CAAC,YAAY,0CAAE,UAAU,EAAE,CAAC;QAClC,IAAI,CAAA,MAAA,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,0CAAE,iBAAiB,MAAK,IAAI,EAAE,CAAC;YACvD,OAAM;QACR,CAAC;QACD,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,mCACjB,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,KACzB,QAAQ,kCAAO,IAAI,CAAC,YAAY,CAAC,UAAU,GAAK,MAAA,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,0CAAE,QAAQ,IACjF,CAAA;IACH,CAAC;AACH,CAAC;AAED,SAAgB,yBAAyB,CAAC,IAAiD;IACzF,IAAI,aAAJ,IAAI,uBAAJ,IAAI,CAAE,IAAI,CAAC,OAAO,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,wBAAwB,CAAC,EAAE,IAAI,EAAE,IAAI,aAAJ,IAAI,uBAAJ,IAAI,CAAE,IAAI,EAAE,GAAG,EAAE,CAAC,CAAC,CAAA;AAClF,CAAC"}

package/dist/entra-id-auth.d.ts

@@ -0,0 +1,10 @@
+import { IBearerStrategyOption, IBearerStrategyOptionWithRequest } from './types';
+export declare class EntraIDAuth {
+    private readonly strategy;
+    private options?;
+    static init(strategy: string): EntraIDAuth;
+    private constructor();
+    withOptions(options: IBearerStrategyOption | IBearerStrategyOptionWithRequest): this;
+    connectPassport(): void;
+}
+//# sourceMappingURL=entra-id-auth.d.ts.map

package/dist/entra-id-auth.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"entra-id-auth.d.ts","sourceRoot":"","sources":["../src/entra-id-auth.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,qBAAqB,EAAE,gCAAgC,EAAiC,MAAM,SAAS,CAAA;AAEhH,qBAAa,WAAW;IACtB,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAQ;IACjC,OAAO,CAAC,OAAO,CAAC,CAAkC;WAEpC,IAAI,CAAC,QAAQ,EAAE,MAAM;IAInC,OAAO;IAIA,WAAW,CAAC,OAAO,EAAE,qBAAqB,GAAG,gCAAgC,GAAG,IAAI;IAQ3F,eAAe;CAuBhB"}

package/dist/entra-id-auth.js

@@ -0,0 +1,61 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || function (mod) {
+    if (mod && mod.__esModule) return mod;
+    var result = {};
+    if (mod != null) for (var k in mod) if (k !== "default" && Object.prototype.hasOwnProperty.call(mod, k)) __createBinding(result, mod, k);
+    __setModuleDefault(result, mod);
+    return result;
+};
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.EntraIDAuth = void 0;
+const passport_1 = __importDefault(require("passport"));
+class EntraIDAuth {
+    static init(strategy) {
+        return new EntraIDAuth(strategy);
+    }
+    constructor(strategy) {
+        this.strategy = strategy;
+    }
+    withOptions(options) {
+        this.options = Object.assign(Object.assign({}, options), { passReqToCallback: 'passReqToCallback' in options ? options.passReqToCallback : false });
+        return this;
+    }
+    connectPassport() {
+        const _options = this.options;
+        if (!_options) {
+            throw Error('No options supplied for EntraID');
+        }
+        Promise.resolve().then(() => __importStar(require('passport-azure-ad'))).then((entraID) => passport_1.default.use(this.strategy, new entraID.BearerStrategy(_options, function (token, cb) {
+            if (token) {
+                // console.log(`token: ${JSON.stringify(token, null, 2)}`)
+                return cb(null, token);
+            }
+            return cb('bearer token not found or incorrect', null);
+        })))
+            .catch((reason) => {
+            console.log(reason);
+            throw Error('Could not create bearer strategy. Did you include the "passport-azure-ad/bearer-strategy" dependency in package.json?');
+        });
+    }
+}
+exports.EntraIDAuth = EntraIDAuth;
+//# sourceMappingURL=entra-id-auth.js.map

package/dist/entra-id-auth.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"entra-id-auth.js","sourceRoot":"","sources":["../src/entra-id-auth.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,wDAA+B;AAG/B,MAAa,WAAW;IAIf,MAAM,CAAC,IAAI,CAAC,QAAgB;QACjC,OAAO,IAAI,WAAW,CAAC,QAAQ,CAAC,CAAA;IAClC,CAAC;IAED,YAAoB,QAAgB;QAClC,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAA;IAC1B,CAAC;IAEM,WAAW,CAAC,OAAiE;QAClF,IAAI,CAAC,OAAO,mCACP,OAAO,KACV,iBAAiB,EAAE,mBAAmB,IAAI,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,iBAAiB,CAAC,CAAC,CAAC,KAAK,GACtF,CAAA;QACD,OAAO,IAAI,CAAA;IACb,CAAC;IAED,eAAe;QACb,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAA;QAC7B,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,MAAM,KAAK,CAAC,iCAAiC,CAAC,CAAA;QAChD,CAAC;QACD,kDAAO,mBAAmB,IACvB,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAChB,kBAAQ,CAAC,GAAG,CACV,IAAI,CAAC,QAAQ,EACb,IAAI,OAAO,CAAC,cAAc,CAAC,QAAQ,EAAE,UAAU,KAAoB,EAAE,EAAkB;YACrF,IAAI,KAAK,EAAE,CAAC;gBACV,0DAA0D;gBAC1D,OAAO,EAAE,CAAC,IAAI,EAAE,KAAK,CAAC,CAAA;YACxB,CAAC;YACD,OAAO,EAAE,CAAC,qCAAqC,EAAE,IAAI,CAAC,CAAA;QACxD,CAAC,CAAC,CACH,CACF;aACA,KAAK,CAAC,CAAC,MAAM,EAAE,EAAE;YAChB,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAA;YACnB,MAAM,KAAK,CAAC,uHAAuH,CAAC,CAAA;QACtI,CAAC,CAAC,CAAA;IACN,CAAC;CACF;AA3CD,kCA2CC"}

package/dist/express-builders.d.ts

@@ -0,0 +1,99 @@
+import { Enforcer } from 'casbin';
+import express, { Express } from 'express';
+import { Application, ApplicationRequestHandler } from 'express-serve-static-core';
+import session from 'express-session';
+import http from 'http';
+import { HttpTerminator } from 'http-terminator';
+import morgan from 'morgan';
+import { InitializeOptions } from 'passport';
+import { ExpressSupport, IExpressServerOpts } from './types';
+type Handler<Request extends http.IncomingMessage, Response extends http.ServerResponse> = (req: Request, res: Response, callback: (err?: Error) => void) => void;
+export declare class ExpressBuilder {
+    private existingExpress?;
+    private hostnameOrIP?;
+    private port?;
+    private _handlers?;
+    private listenCallback?;
+    private _startListen?;
+    private readonly envVarPrefix?;
+    private _corsConfigurer?;
+    private _sessionOpts?;
+    private _usePassportAuth?;
+    private _passportInitOpts?;
+    private _userIsInRole?;
+    private _enforcer?;
+    private _server?;
+    private _terminator?;
+    private _morgan?;
+    private constructor();
+    static fromExistingExpress(opts?: {
+        existingExpress?: Express;
+        envVarPrefix?: string;
+    }): ExpressBuilder;
+    static fromServerOpts(opts: IExpressServerOpts & {
+        envVarPrefix?: string;
+    }): ExpressBuilder;
+    enableListen(startOnBuild?: boolean): this;
+    withMorganLogging(opts?: {
+        existingMorgan?: Handler<any, any>;
+        format?: string;
+        options?: morgan.Options<any, any>;
+    }): this;
+    withEnableListenOpts({ port, hostnameOrIP, callback, startOnBuild, }: {
+        port?: number;
+        hostnameOrIP?: string;
+        startOnBuild?: boolean;
+        callback?: () => void;
+    }): this;
+    withPort(port: number): this;
+    withHostname(hostnameOrIP: string): this;
+    withListenCallback(callback: () => void): this;
+    withExpress(existingExpress: Express): this;
+    withCorsConfigurer(configurer: ExpressCorsConfigurer): this;
+    withPassportAuth(usePassport: boolean, initializeOptions?: InitializeOptions): this;
+    withGlobalUserIsInRole(userIsInRole: string | string[]): this;
+    withEnforcer(enforcer: Enforcer): this;
+    startListening(express: Express): {
+        server: http.Server<typeof http.IncomingMessage, typeof http.ServerResponse>;
+        terminator: HttpTerminator;
+    };
+    getHostname(): string;
+    getPort(): number;
+    setHandlers(handlers: ApplicationRequestHandler<any> | ApplicationRequestHandler<any>[]): this;
+    addHandler(handler: ApplicationRequestHandler<any>): this;
+    withSessionOptions(sessionOpts: session.SessionOptions): this;
+    build<T extends Application>(opts?: {
+        express?: Express;
+        startListening?: boolean;
+        handlers?: ApplicationRequestHandler<T> | ApplicationRequestHandler<T>[];
+    }): ExpressSupport;
+    protected buildExpress<T extends Application>(opts?: {
+        express?: Express;
+        startListening?: boolean;
+        handlers?: ApplicationRequestHandler<T> | ApplicationRequestHandler<T>[];
+    }): express.Express;
+}
+export declare class ExpressCorsConfigurer {
+    private _disableCors?;
+    private _enablePreflightOptions?;
+    private _allowOrigin?;
+    private _allowMethods?;
+    private _allowedHeaders?;
+    private _allowCredentials?;
+    private readonly _express?;
+    private readonly _envVarPrefix?;
+    constructor(args?: {
+        existingExpress?: Express;
+        envVarPrefix?: string;
+    });
+    allowOrigin(value: string | boolean | RegExp | Array<string | boolean | RegExp>): this;
+    disableCors(value: boolean): this;
+    allowMethods(value: string | string[]): this;
+    allowedHeaders(value: string | string[]): this;
+    allowCredentials(value: boolean): this;
+    configure({ existingExpress }: {
+        existingExpress?: Express;
+    }): void;
+}
+export {};
+//# sourceMappingURL=express-builders.d.ts.map

package/dist/express-builders.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"express-builders.d.ts","sourceRoot":"","sources":["../src/express-builders.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,QAAQ,EAAE,MAAM,QAAQ,CAAA;AAGjC,OAAO,OAAO,EAAE,EAAE,OAAO,EAAE,MAAM,SAAS,CAAA;AAC1C,OAAO,EAAE,WAAW,EAAE,yBAAyB,EAAE,MAAM,2BAA2B,CAAA;AAElF,OAAO,OAAO,MAAM,iBAAiB,CAAA;AACrC,OAAO,IAAI,MAAM,MAAM,CAAA;AACvB,OAAO,EAAwB,cAAc,EAAE,MAAM,iBAAiB,CAAA;AACtE,OAAO,MAAM,MAAM,QAAQ,CAAA;AAC3B,OAAiB,EAAE,iBAAiB,EAAE,MAAM,UAAU,CAAA;AAItD,OAAO,EAAE,cAAc,EAAE,kBAAkB,EAAE,MAAM,SAAS,CAAA;AAE5D,KAAK,OAAO,CAAC,OAAO,SAAS,IAAI,CAAC,eAAe,EAAE,QAAQ,SAAS,IAAI,CAAC,cAAc,IAAI,CACzF,GAAG,EAAE,OAAO,EACZ,GAAG,EAAE,QAAQ,EACb,QAAQ,EAAE,CAAC,GAAG,CAAC,EAAE,KAAK,KAAK,IAAI,KAC5B,IAAI,CAAA;AAET,qBAAa,cAAc;IACzB,OAAO,CAAC,eAAe,CAAC,CAAS;IACjC,OAAO,CAAC,YAAY,CAAC,CAAQ;IAC7B,OAAO,CAAC,IAAI,CAAC,CAAQ;IACrB,OAAO,CAAC,SAAS,CAAC,CAA+C;IACjE,OAAO,CAAC,cAAc,CAAC,CAAY;IACnC,OAAO,CAAC,YAAY,CAAC,CAAiC;IACtD,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAQ;IACtC,OAAO,CAAC,eAAe,CAAC,CAAuB;IAC/C,OAAO,CAAC,YAAY,CAAC,CAAwB;IAC7C,OAAO,CAAC,gBAAgB,CAAC,CAAiB;IAC1C,OAAO,CAAC,iBAAiB,CAAC,CAAmB;IAC7C,OAAO,CAAC,aAAa,CAAC,CAAmB;IACzC,OAAO,CAAC,SAAS,CAAC,CAAU;IAC5B,OAAO,CAAC,OAAO,CAAC,CAAyB;IACzC,OAAO,CAAC,WAAW,CAAC,CAAgB;IACpC,OAAO,CAAC,OAAO,CAAC,CAA+B;IAE/C,OAAO;WAQO,mBAAmB,CAAC,IAAI,CAAC,EAAE;QAAE,eAAe,CAAC,EAAE,OAAO,CAAC;QAAC,YAAY,CAAC,EAAE,MAAM,CAAA;KAAE;WAI/E,cAAc,CAAC,IAAI,EAAE,kBAAkB,GAAG;QAAE,YAAY,CAAC,EAAE,MAAM,CAAA;KAAE;IAK1E,YAAY,CAAC,YAAY,CAAC,EAAE,OAAO,GAAG,IAAI;IAO1C,iBAAiB,CAAC,IAAI,CAAC,EAAE;QAAE,cAAc,CAAC,EAAE,OAAO,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAC;QAAC,OAAO,CAAC,EAAE,MAAM,CAAC,OAAO,CAAC,GAAG,EAAE,GAAG,CAAC,CAAA;KAAE,GAAG,IAAI;IAQ3H,oBAAoB,CAAC,EAC1B,IAAI,EACJ,YAAY,EACZ,QAAQ,EACR,YAAY,GACb,EAAE;QACD,IAAI,CAAC,EAAE,MAAM,CAAA;QACb,YAAY,CAAC,EAAE,MAAM,CAAA;QACrB,YAAY,CAAC,EAAE,OAAO,CAAA;QACtB,QAAQ,CAAC,EAAE,MAAM,IAAI,CAAA;KACtB,GAAG,IAAI;IAUD,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI;IAK5B,YAAY,CAAC,YAAY,EAAE,MAAM,GAAG,IAAI;IAKxC,kBAAkB,CAAC,QAAQ,EAAE,MAAM,IAAI,GAAG,IAAI;IAK9C,WAAW,CAAC,eAAe,EAAE,OAAO,GAAG,IAAI;IAM3C,kBAAkB,CAAC,UAAU,EAAE,qBAAqB,GAAG,IAAI;IAK3D,gBAAgB,CAAC,WAAW,EAAE,OAAO,EAAE,iBAAiB,CAAC,EAAE,iBAAiB,GAAG,IAAI;IAMnF,sBAAsB,CAAC,YAAY,EAAE,MAAM,GAAG,MAAM,EAAE,GAAG,IAAI;IAK7D,YAAY,CAAC,QAAQ,EAAE,QAAQ,GAAG,IAAI;IAKtC,cAAc,CAAC,OAAO,EAAE,OAAO;;;;IAU/B,WAAW,IAAI,MAAM;IAIrB,OAAO,IAAI,MAAM;IAIjB,WAAW,CAAC,QAAQ,EAAE,yBAAyB,CAAC,GAAG,CAAC,GAAG,yBAAyB,CAAC,GAAG,CAAC,EAAE,GAAG,IAAI;IAe9F,UAAU,CAAC,OAAO,EAAE,yBAAyB,CAAC,GAAG,CAAC,GAAG,IAAI;IAQzD,kBAAkB,CAAC,WAAW,EAAE,OAAO,CAAC,cAAc,GAAG,IAAI;IAK7D,KAAK,CAAC,CAAC,SAAS,WAAW,EAAE,IAAI,CAAC,EAAE;QACzC,OAAO,CAAC,EAAE,OAAO,CAAA;QACjB,cAAc,CAAC,EAAE,OAAO,CAAA;QACxB,QAAQ,CAAC,EAAE,yBAAyB,CAAC,CAAC,CAAC,GAAG,yBAAyB,CAAC,CAAC,CAAC,EAAE,CAAA;KACzE,GAAG,cAAc;IAyClB,SAAS,CAAC,YAAY,CAAC,CAAC,SAAS,WAAW,EAAE,IAAI,CAAC,EAAE;QACnD,OAAO,CAAC,EAAE,OAAO,CAAA;QACjB,cAAc,CAAC,EAAE,OAAO,CAAA;QACxB,QAAQ,CAAC,EAAE,yBAAyB,CAAC,CAAC,CAAC,GAAG,yBAAyB,CAAC,CAAC,CAAC,EAAE,CAAA;KACzE,GAAG,OAAO,CAAC,OAAO;CAkCpB;AAED,qBAAa,qBAAqB;IAChC,OAAO,CAAC,YAAY,CAAC,CAAS;IAC9B,OAAO,CAAC,uBAAuB,CAAC,CAAS;IACzC,OAAO,CAAC,YAAY,CAAC,CAA8D;IACnF,OAAO,CAAC,aAAa,CAAC,CAAmB;IACzC,OAAO,CAAC,eAAe,CAAC,CAAmB;IAC3C,OAAO,CAAC,iBAAiB,CAAC,CAAS;IACnC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAS;IACnC,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAC,CAAQ;gBAE3B,IAAI,CAAC,EAAE;QAAE,eAAe,CAAC,EAAE,OAAO,CAAC;QAAC,YAAY,CAAC,EAAE,MAAM,CAAA;KAAE;IAMhE,WAAW,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,GAAG,MAAM,GAAG,KAAK,CAAC,MAAM,GAAG,OAAO,GAAG,MAAM,CAAC,GAAG,IAAI;IAKtF,WAAW,CAAC,KAAK,EAAE,OAAO,GAAG,IAAI;IAKjC,YAAY,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,EAAE,GAAG,IAAI;IAK5C,cAAc,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,EAAE,GAAG,IAAI;IAK9C,gBAAgB,CAAC,KAAK,EAAE,OAAO,GAAG,IAAI;IAKtC,SAAS,CAAC,EAAE,eAAe,EAAE,EAAE;QAAE,eAAe,CAAC,EAAE,OAAO,CAAA;KAAE;CAqCpE"}

package/dist/express-builders.js

@@ -0,0 +1,281 @@
+"use strict";
+var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
+    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
+    return new (P || (P = Promise))(function (resolve, reject) {
+        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
+        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
+        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
+        step((generator = generator.apply(thisArg, _arguments || [])).next());
+    });
+};
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ExpressCorsConfigurer = exports.ExpressBuilder = void 0;
+/**
+ * @public
+ */
+const body_parser_1 = __importDefault(require("body-parser"));
+const cors_1 = __importDefault(require("cors"));
+const express_1 = __importDefault(require("express"));
+const express_session_1 = __importDefault(require("express-session"));
+const http_terminator_1 = require("http-terminator");
+const morgan_1 = __importDefault(require("morgan"));
+const passport_1 = __importDefault(require("passport"));
+const auth_utils_1 = require("./auth-utils");
+const express_utils_1 = require("./express-utils");
+const functions_1 = require("./functions");
+class ExpressBuilder {
+    constructor(opts) {
+        this._handlers = [];
+        this._startListen = undefined;
+        this._usePassportAuth = false;
+        const { existingExpress, envVarPrefix } = opts !== null && opts !== void 0 ? opts : {};
+        if (existingExpress) {
+            this.withExpress(existingExpress);
+        }
+        this.envVarPrefix = envVarPrefix !== null && envVarPrefix !== void 0 ? envVarPrefix : '';
+    }
+    static fromExistingExpress(opts) {
+        return new ExpressBuilder(opts !== null && opts !== void 0 ? opts : {});
+    }
+    static fromServerOpts(opts) {
+        var _a;
+        const builder = new ExpressBuilder({ existingExpress: opts === null || opts === void 0 ? void 0 : opts.existingExpress, envVarPrefix: opts === null || opts === void 0 ? void 0 : opts.envVarPrefix });
+        return builder.withEnableListenOpts(Object.assign(Object.assign({}, opts), { hostnameOrIP: opts.hostname, startOnBuild: (_a = opts.startListening) !== null && _a !== void 0 ? _a : false }));
+    }
+    enableListen(startOnBuild) {
+        if (startOnBuild !== undefined) {
+            this._startListen = startOnBuild;
+        }
+        return this;
+    }
+    withMorganLogging(opts) {
+        var _a, _b;
+        if ((opts === null || opts === void 0 ? void 0 : opts.existingMorgan) && (opts.format || opts.options)) {
+            throw Error('Cannot using an existing morgan with either a format or options');
+        }
+        this._morgan = (_a = opts === null || opts === void 0 ? void 0 : opts.existingMorgan) !== null && _a !== void 0 ? _a : (0, morgan_1.default)((_b = opts === null || opts === void 0 ? void 0 : opts.format) !== null && _b !== void 0 ? _b : 'dev', opts === null || opts === void 0 ? void 0 : opts.options);
+        return this;
+    }
+    withEnableListenOpts({ port, hostnameOrIP, callback, startOnBuild, }) {
+        port && this.withPort(port);
+        hostnameOrIP && this.withHostname(hostnameOrIP);
+        if (typeof callback === 'function') {
+            this.withListenCallback(callback);
+        }
+        this._startListen = startOnBuild === true;
+        return this;
+    }
+    withPort(port) {
+        this.port = port;
+        return this;
+    }
+    withHostname(hostnameOrIP) {
+        this.hostnameOrIP = hostnameOrIP;
+        return this;
+    }
+    withListenCallback(callback) {
+        this.listenCallback = callback;
+        return this;
+    }
+    withExpress(existingExpress) {
+        this.existingExpress = existingExpress;
+        this._startListen = false;
+        return this;
+    }
+    withCorsConfigurer(configurer) {
+        this._corsConfigurer = configurer;
+        return this;
+    }
+    withPassportAuth(usePassport, initializeOptions) {
+        this._usePassportAuth = usePassport;
+        this._passportInitOpts = initializeOptions;
+        return this;
+    }
+    withGlobalUserIsInRole(userIsInRole) {
+        this._userIsInRole = userIsInRole;
+        return this;
+    }
+    withEnforcer(enforcer) {
+        this._enforcer = enforcer;
+        return this;
+    }
+    startListening(express) {
+        this._server = express.listen(this.getPort(), this.getHostname(), this.listenCallback);
+        this._terminator = (0, http_terminator_1.createHttpTerminator)({
+            server: this._server,
+            // gracefulTerminationTimeout: 10
+        });
+        return { server: this._server, terminator: this._terminator };
+    }
+    getHostname() {
+        var _a, _b;
+        return (_b = (_a = this.hostnameOrIP) !== null && _a !== void 0 ? _a : (0, functions_1.env)('HOSTNAME', this.envVarPrefix)) !== null && _b !== void 0 ? _b : '0.0.0.0';
+    }
+    getPort() {
+        var _a, _b;
+        return ((_b = (_a = this.port) !== null && _a !== void 0 ? _a : (0, functions_1.env)('PORT', this.envVarPrefix)) !== null && _b !== void 0 ? _b : 5000);
+    }
+    setHandlers(handlers) {
+        if (Array.isArray(handlers)) {
+            this._handlers = handlers;
+        }
+        else if (handlers) {
+            if (!this._handlers) {
+                this._handlers = [];
+            }
+            this._handlers.push(handlers);
+        }
+        else {
+            this._handlers = [];
+        }
+        return this;
+    }
+    addHandler(handler) {
+        if (!this._handlers) {
+            this._handlers = [];
+        }
+        this._handlers.push(handler);
+        return this;
+    }
+    withSessionOptions(sessionOpts) {
+        this._sessionOpts = sessionOpts;
+        return this;
+    }
+    build(opts) {
+        const express = this.buildExpress(opts);
+        const startListening = (opts === null || opts === void 0 ? void 0 : opts.startListening) === undefined ? this._startListen !== true : opts.startListening;
+        let started = this._server !== undefined;
+        if (startListening && !started) {
+            this.startListening(express);
+            started = true;
+        }
+        return {
+            express,
+            port: this.getPort(),
+            hostname: this.getHostname(),
+            userIsInRole: this._userIsInRole,
+            startListening,
+            enforcer: this._enforcer,
+            start: (opts) => {
+                if (opts === null || opts === void 0 ? void 0 : opts.doNotStartListening) {
+                    console.log('Express will not start listening. You will have to start it yourself');
+                }
+                else {
+                    if (!started) {
+                        this.startListening(express);
+                        started = true;
+                    }
+                }
+                if ((opts === null || opts === void 0 ? void 0 : opts.disableErrorHandler) !== true) {
+                    express.use(express_utils_1.jsonErrorHandler);
+                }
+                return { server: this._server, terminator: this._terminator };
+            },
+            stop: (terminator) => __awaiter(this, void 0, void 0, function* () {
+                const term = terminator !== null && terminator !== void 0 ? terminator : this._terminator;
+                if (!term) {
+                    return false;
+                }
+                return yield term.terminate().then(() => true);
+            }),
+        };
+    }
+    buildExpress(opts) {
+        var _a, _b, _c;
+        const app = (_b = (_a = opts === null || opts === void 0 ? void 0 : opts.express) !== null && _a !== void 0 ? _a : this.existingExpress) !== null && _b !== void 0 ? _b : (0, express_1.default)();
+        if (this._morgan) {
+            app.use(this._morgan);
+        }
+        if (this._sessionOpts) {
+            const store = (_c = this._sessionOpts.store) !== null && _c !== void 0 ? _c : new express_session_1.default.MemoryStore();
+            this._sessionOpts.store = store;
+            app.use((0, express_session_1.default)(this._sessionOpts));
+        }
+        if (this._usePassportAuth) {
+            app.use(passport_1.default.initialize(this._passportInitOpts));
+            if (this._sessionOpts) {
+                // app.use(passport.authenticate('session'))
+                //_sessionOpts are not for passport session, they are for express above
+                app.use(passport_1.default.session());
+            }
+        }
+        if (this._userIsInRole) {
+            app.use((0, auth_utils_1.checkUserIsInRole)({ roles: this._userIsInRole }));
+        }
+        if (this._corsConfigurer) {
+            this._corsConfigurer.configure({ existingExpress: app });
+        }
+        // @ts-ignore
+        this._handlers && this._handlers.length > 0 && app.use(this._handlers);
+        // @ts-ignore
+        (opts === null || opts === void 0 ? void 0 : opts.handlers) && app.use(opts.handlers);
+        //fixme: this should come from the config
+        app.use(body_parser_1.default.urlencoded({ extended: true }));
+        app.use(body_parser_1.default.json({ limit: '5mb' }));
+        return app;
+    }
+}
+exports.ExpressBuilder = ExpressBuilder;
+class ExpressCorsConfigurer {
+    constructor(args) {
+        const { existingExpress, envVarPrefix } = args !== null && args !== void 0 ? args : {};
+        this._express = existingExpress;
+        this._envVarPrefix = envVarPrefix;
+    }
+    allowOrigin(value) {
+        this._allowOrigin = value;
+        return this;
+    }
+    disableCors(value) {
+        this._disableCors = value;
+        return this;
+    }
+    allowMethods(value) {
+        this._allowMethods = value;
+        return this;
+    }
+    allowedHeaders(value) {
+        this._allowedHeaders = value;
+        return this;
+    }
+    allowCredentials(value) {
+        this._allowCredentials = value;
+        return this;
+    }
+    configure({ existingExpress }) {
+        var _a, _b, _c;
+        const express = existingExpress !== null && existingExpress !== void 0 ? existingExpress : this._express;
+        if (!express) {
+            throw Error('No express passed in during construction or configure');
+        }
+        const disableCorsEnv = (0, functions_1.env)('CORS_DISABLE', this._envVarPrefix);
+        const corsDisabled = (_a = this._disableCors) !== null && _a !== void 0 ? _a : (disableCorsEnv ? /true/.test(disableCorsEnv) : false);
+        if (corsDisabled) {
+            return;
+        }
+        const envAllowOriginStr = (_b = (0, functions_1.env)('CORS_ALLOW_ORIGIN', this._envVarPrefix)) !== null && _b !== void 0 ? _b : '*';
+        let envAllowOrigin;
+        if (envAllowOriginStr.includes(',')) {
+            envAllowOrigin = envAllowOriginStr.split(',');
+        }
+        else if (envAllowOriginStr.includes(' ')) {
+            envAllowOrigin = envAllowOriginStr.split(' ');
+        }
+        else {
+            envAllowOrigin = envAllowOriginStr;
+        }
+        if (Array.isArray(envAllowOrigin) && envAllowOrigin.length === 1) {
+            envAllowOrigin = envAllowOrigin[0];
+        }
+        const corsOptions = Object.assign(Object.assign(Object.assign(Object.assign({ origin: (_c = this._allowOrigin) !== null && _c !== void 0 ? _c : envAllowOrigin }, (this._allowMethods && { methods: this._allowMethods })), (this._allowedHeaders && { allowedHeaders: this._allowedHeaders })), (this._allowCredentials !== undefined && { credentials: this._allowCredentials })), { optionsSuccessStatus: 204 });
+        if (this._enablePreflightOptions) {
+            express.options('*', (0, cors_1.default)(corsOptions));
+        }
+        express.use((0, cors_1.default)(corsOptions));
+    }
+}
+exports.ExpressCorsConfigurer = ExpressCorsConfigurer;
+//# sourceMappingURL=express-builders.js.map