@taico/taico 0.0.2

package/dist/authorization-server/token-exchange.service.spec.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"token-exchange.service.spec.js","sourceRoot":"","sources":["../../src/authorization-server/token-exchange.service.spec.ts"],"names":[],"mappings":";;AAAA,6CAAsD;AACtD,6CAAqD;AAErD,2CAIwB;AACxB,qEAAgE;AAChE,0FAAqF;AACrF,gGAA0F;AAC1F,yHAAmH;AACnH,8DAA0D;AAE1D,gIAAsH;AAEtH,QAAQ,CAAC,sBAAsB,EAAE,GAAG,EAAE;IACpC,IAAI,OAA6B,CAAC;IAClC,IAAI,uBAAqE,CAAC;IAC1E,IAAI,yBAAyE,CAAC;IAC9E,IAAI,qCAEH,CAAC;IACF,IAAI,WAAqC,CAAC;IAE1C,MAAM,cAAc,GAAwB;QAC1C,EAAE,EAAE,iBAAiB;QACrB,QAAQ,EAAE,aAAa;QACvB,YAAY,EAAE,iBAAiB;QAC/B,UAAU,EAAE,iBAAiB;QAC7B,QAAQ,EAAE,gBAAgB;QAC1B,YAAY,EAAE,oBAAoB;QAClC,YAAY,EAAE,+BAA+B;QAC7C,QAAQ,EAAE,2BAA2B;QACrC,SAAS,EAAE,IAAI,IAAI,EAAE;QACrB,SAAS,EAAE,IAAI,IAAI,EAAE;KACC,CAAC;IAEzB,MAAM,YAAY,GAAsC;QACtD,EAAE,EAAE,WAAW;QACf,eAAe,EAAE,iBAAiB;QAClC,MAAM,EAAE,6EAAiC,CAAC,UAAU;QACpD,WAAW,EAAE,yBAAyB;QACtC,YAAY,EAAE,0BAA0B;QACxC,cAAc,EAAE,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO,CAAC;QAC9C,SAAS,EAAE,IAAI,IAAI,EAAE;QACrB,SAAS,EAAE,IAAI,IAAI,EAAE;KACe,CAAC;IAEvC,UAAU,CAAC,KAAK,IAAI,EAAE;QACpB,MAAM,MAAM,GAAkB,MAAM,cAAI,CAAC,mBAAmB,CAAC;YAC3D,SAAS,EAAE;gBACT,6CAAoB;gBACpB;oBACE,OAAO,EAAE,IAAA,4BAAkB,EAAC,2CAAmB,CAAC;oBAChD,QAAQ,EAAE;wBACR,OAAO,EAAE,IAAI,CAAC,EAAE,EAAE;qBACnB;iBACF;gBACD;oBACE,OAAO,EAAE,IAAA,4BAAkB,EAAC,gDAAqB,CAAC;oBAClD,QAAQ,EAAE;wBACR,IAAI,EAAE,IAAI,CAAC,EAAE,EAAE;qBAChB;iBACF;gBACD;oBACE,OAAO,EAAE,IAAA,4BAAkB,EAAC,wEAAiC,CAAC;oBAC9D,QAAQ,EAAE;wBACR,OAAO,EAAE,IAAI,CAAC,EAAE,EAAE;wBAClB,IAAI,EAAE,IAAI,CAAC,EAAE,EAAE;qBAChB;iBACF;gBACD;oBACE,OAAO,EAAE,0BAAW;oBACpB,QAAQ,EAAE;wBACR,aAAa,EAAE,IAAI,CAAC,EAAE,EAAE;qBACzB;iBACF;aACF;SACF,CAAC,CAAC,OAAO,EAAE,CAAC;QAEb,OAAO,GAAG,MAAM,CAAC,GAAG,CAAuB,6CAAoB,CAAC,CAAC;QACjE,uBAAuB,GAAG,MAAM,CAAC,GAAG,CAClC,IAAA,4BAAkB,EAAC,2CAAmB,CAAC,CACxC,CAAC;QACF,yBAAyB,GAAG,MAAM,CAAC,GAAG,CACpC,IAAA,4BAAkB,EAAC,gDAAqB,CAAC,CAC1C,CAAC;QACF,qCAAqC,GAAG,MAAM,CAAC,GAAG,CAChD,IAAA,4BAAkB,EAAC,wEAAiC,CAAC,CACtD,CAAC;QACF,WAAW,GAAG,MAAM,CAAC,GAAG,CAAC,0BAAW,CAAC,CAAC;IACxC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,mBAAmB,EAAE,GAAG,EAAE;QAC3B,MAAM,CAAC,OAAO,CAAC,CAAC,WAAW,EAAE,CAAC;IAChC,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,4BAA4B,EAAE,GAAG,EAAE;QAC1C,EAAE,CAAC,6DAA6D,EAAE,KAAK,IAAI,EAAE;YAC3E,MAAM,OAAO,GAA4B;gBACvC,UAAU,EAAE,iDAAiD;gBAC7D,aAAa,EAAE,aAAa;gBAC5B,kBAAkB,EAAE,+CAA+C;gBACnE,QAAQ,EAAE,yBAAyB;aACpC,CAAC;YAEF,uBAAuB,CAAC,OAAO,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC;YACxD,WAAW,CAAC,aAAa,CAAC,iBAAiB,CAAC;gBAC1C;oBACE,GAAG,EAAE,UAAU;oBACf,GAAG,EAAE,KAAK;oBACV,GAAG,EAAE,OAAO;oBACZ,GAAG,EAAE,KAAK;oBACV,CAAC,EAAE,QAAQ;oBACX,CAAC,EAAE,QAAQ;iBACZ;aACK,CAAC,CAAC;YAGV,MAAM,MAAM,CACV,OAAO,CAAC,aAAa,CAAC,OAAO,EAAE,aAAa,CAAC,CAC9C,CAAC,OAAO,CAAC,OAAO,CAAC,8BAAqB,CAAC,CAAC;QAC3C,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,sEAAsE,EAAE,KAAK,IAAI,EAAE;YAGpF,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC1B,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,kBAAkB,EAAE,GAAG,EAAE;QAChC,EAAE,CAAC,kDAAkD,EAAE,KAAK,IAAI,EAAE;YAChE,MAAM,YAAY,GAA4B;gBAC5C;oBACE,EAAE,EAAE,WAAW;oBACf,OAAO,EAAE,YAAY;oBACrB,YAAY,EAAE,iBAAiB;oBAC/B,QAAQ,EAAE,aAAa;oBACvB,eAAe,EAAE,gDAAgD;iBACzC;gBAC1B;oBACE,EAAE,EAAE,WAAW;oBACf,OAAO,EAAE,aAAa;oBACtB,YAAY,EAAE,iBAAiB;oBAC/B,QAAQ,EAAE,aAAa;oBACvB,eAAe,EAAE,uCAAuC;iBAChC;aAC3B,CAAC;YAEF,yBAAyB,CAAC,IAAI,CAAC,iBAAiB,CAAC,YAAY,CAAC,CAAC;YAG/D,MAAM,aAAa,GAAI,OAAe,CAAC,uBAAuB,CAAC,IAAI,CACjE,OAAO,CACR,CAAC;YACF,MAAM,MAAM,GAAG,MAAM,aAAa,CAChC,CAAC,YAAY,EAAE,aAAa,CAAC,EAC7B,iBAAiB,CAClB,CAAC;YAEF,MAAM,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC;gBACrB,gDAAgD;gBAChD,uCAAuC;aACxC,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,2CAA2C,EAAE,KAAK,IAAI,EAAE;YACzD,MAAM,YAAY,GAA4B;gBAC5C;oBACE,EAAE,EAAE,WAAW;oBACf,OAAO,EAAE,YAAY;oBACrB,YAAY,EAAE,iBAAiB;oBAC/B,QAAQ,EAAE,aAAa;oBACvB,eAAe,EAAE,uCAAuC;iBAChC;gBAC1B;oBACE,EAAE,EAAE,WAAW;oBACf,OAAO,EAAE,aAAa;oBACtB,YAAY,EAAE,iBAAiB;oBAC/B,QAAQ,EAAE,aAAa;oBACvB,eAAe,EAAE,uCAAuC;iBAChC;aAC3B,CAAC;YAEF,yBAAyB,CAAC,IAAI,CAAC,iBAAiB,CAAC,YAAY,CAAC,CAAC;YAE/D,MAAM,aAAa,GAAI,OAAe,CAAC,uBAAuB,CAAC,IAAI,CACjE,OAAO,CACR,CAAC;YACF,MAAM,MAAM,GAAG,MAAM,aAAa,CAChC,CAAC,YAAY,EAAE,aAAa,CAAC,EAC7B,iBAAiB,CAClB,CAAC;YAEF,MAAM,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,CAAC,uCAAuC,CAAC,CAAC,CAAC;YAClE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAChC,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,kBAAkB,EAAE,GAAG,EAAE;QAChC,EAAE,CAAC,wCAAwC,EAAE,GAAG,EAAE;YAChD,MAAM,cAAc,GAAI,OAAe,CAAC,wBAAwB,CAAC,IAAI,CACnE,OAAO,CACR,CAAC;YACF,MAAM,eAAe,GAAG,CAAC,QAAQ,CAAC,CAAC;YACnC,MAAM,cAAc,GAAG,CAAC,QAAQ,EAAE,QAAQ,EAAE,QAAQ,CAAC,CAAC;YAEtD,MAAM,CAAC,GAAG,EAAE,CACV,cAAc,CAAC,eAAe,EAAE,cAAc,CAAC,CAChD,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC;QAClB,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,sDAAsD,EAAE,GAAG,EAAE;YAC9D,MAAM,cAAc,GAAI,OAAe,CAAC,wBAAwB,CAAC,IAAI,CACnE,OAAO,CACR,CAAC;YACF,MAAM,eAAe,GAAG,CAAC,QAAQ,EAAE,QAAQ,EAAE,oBAAoB,CAAC,CAAC;YACnE,MAAM,cAAc,GAAG,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;YAE5C,MAAM,CAAC,GAAG,EAAE,CAAC,cAAc,CAAC,eAAe,EAAE,cAAc,CAAC,CAAC,CAAC,OAAO,CACnE,2BAAkB,CACnB,CAAC;QACJ,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,qCAAqC,EAAE,GAAG,EAAE;YAC7C,MAAM,cAAc,GAAI,OAAe,CAAC,wBAAwB,CAAC,IAAI,CACnE,OAAO,CACR,CAAC;YACF,MAAM,eAAe,GAAa,EAAE,CAAC;YACrC,MAAM,cAAc,GAAG,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;YAE5C,MAAM,CAAC,GAAG,EAAE,CACV,cAAc,CAAC,eAAe,EAAE,cAAc,CAAC,CAChD,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC;QAClB,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,mBAAmB,EAAE,GAAG,EAAE;QACjC,EAAE,CAAC,gCAAgC,EAAE,KAAK,IAAI,EAAE;YAC9C,uBAAuB,CAAC,OAAO,CAAC,iBAAiB,CAAC,cAAc,CAAC,CAAC;YAElE,MAAM,UAAU,GAAI,OAAe,CAAC,cAAc,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YACjE,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,iBAAiB,EAAE,aAAa,CAAC,CAAC;YAElE,MAAM,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC;YACvC,MAAM,CAAC,uBAAuB,CAAC,OAAO,CAAC,CAAC,oBAAoB,CAAC;gBAC3D,KAAK,EAAE,EAAE,EAAE,EAAE,iBAAiB,EAAE,QAAQ,EAAE,aAAa,EAAE;aAC1D,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,sCAAsC,EAAE,KAAK,IAAI,EAAE;YACpD,uBAAuB,CAAC,OAAO;iBAC5B,qBAAqB,CAAC,IAAI,CAAC;iBAC3B,qBAAqB,CAAC,cAAc,CAAC,CAAC;YAEzC,MAAM,UAAU,GAAI,OAAe,CAAC,cAAc,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YACjE,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,iBAAiB,EAAE,aAAa,CAAC,CAAC;YAElE,MAAM,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC;YACvC,MAAM,CAAC,uBAAuB,CAAC,OAAO,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC;QACnE,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,iDAAiD,EAAE,KAAK,IAAI,EAAE;YAC/D,uBAAuB,CAAC,OAAO,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC;YAExD,MAAM,UAAU,GAAI,OAAe,CAAC,cAAc,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YACjE,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,cAAc,EAAE,aAAa,CAAC,CAAC;YAE/D,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,EAAE,CAAC;QAC5B,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,iBAAiB,EAAE,GAAG,EAAE;QAC/B,EAAE,CAAC,6BAA6B,EAAE,GAAG,EAAE;YACrC,MAAM,YAAY,GAAI,OAAe,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YAE3D,MAAM,CAAC,YAAY,CAAC,sCAAsC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACxE,MAAM,CAAC,YAAY,CAAC,sCAAsC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC1E,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,6BAA6B,EAAE,GAAG,EAAE;YACrC,MAAM,YAAY,GAAI,OAAe,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YAE3D,MAAM,CAAC,YAAY,CAAC,iBAAiB,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACpD,MAAM,CAAC,YAAY,CAAC,YAAY,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YAC/C,MAAM,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YAC3C,MAAM,CAAC,YAAY,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACvC,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,wBAAwB,EAAE,GAAG,EAAE;QACtC,EAAE,CAAC,sDAAsD,EAAE,GAAG,EAAE;YAC9D,MAAM,eAAe,GAAI,OAAe,CAAC,kBAAkB,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YAC1E,MAAM,UAAU,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO,CAAC,CAAC;YAElD,MAAM,MAAM,GAAG,eAAe,CAAC,UAAU,CAAC,CAAC;YAE3C,MAAM,CAAC,MAAM,CAAC,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC;YACrC,MAAM,CAAC,MAAM,CAAC,CAAC,mBAAmB,CAAC,IAAI,CAAC,CAAC;QAC3C,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,gCAAgC,EAAE,GAAG,EAAE;YACxC,MAAM,eAAe,GAAI,OAAe,CAAC,kBAAkB,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YAC1E,MAAM,QAAQ,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO,CAAC,CAAC;YAEhD,MAAM,MAAM,GAAG,eAAe,CAAC,QAAQ,CAAC,CAAC;YAEzC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACzB,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,6DAA6D,EAAE,GAAG,EAAE;YACrE,MAAM,eAAe,GAAI,OAAe,CAAC,kBAAkB,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YAE1E,MAAM,MAAM,GAAG,eAAe,CAAC,SAAS,CAAC,CAAC;YAE1C,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC5B,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,eAAe,EAAE,GAAG,EAAE;QAC7B,EAAE,CAAC,oEAAoE,EAAE,KAAK,IAAI,EAAE;YAClF,MAAM,2BAA2B,GAAG;gBAClC,GAAG,YAAY;gBACf,YAAY,EAAE,SAAS;aACxB,CAAC;YAEF,MAAM,aAAa,GAAI,OAAe,CAAC,sBAAsB,CAAC,IAAI,CAChE,OAAO,CACR,CAAC;YAEF,MAAM,MAAM,CACV,aAAa,CAAC,2BAA2B,EAAE,cAAc,CAAC,CAC3D,CAAC,OAAO,CAAC,OAAO,CAAC,8BAAqB,CAAC,CAAC;QAC3C,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/authorization-server/token.service.d.ts

@@ -0,0 +1,25 @@
+import { Repository } from 'typeorm';
+import { AuthJourneysService } from '../auth-journeys/auth-journeys.service';
+import { TokenRequestDto } from './dto/token-request.dto';
+import { TokenResponseDto } from './dto/token-response.dto';
+import { IntrospectTokenRequestDto } from './dto/introspect-token-request.dto';
+import { IntrospectTokenResponseDto } from './dto/introspect-token-response.dto';
+import { TokenVerifierService } from '../auth/crypto/token-verifier.service';
+import { TokenSignerService } from '../auth/crypto/token-signer.service';
+import { McpRefreshTokenEntity } from './entities/mcp-refresh-token.entity';
+export declare class TokenService {
+    private readonly authJourneysService;
+    private readonly tokenVerifierService;
+    private readonly tokenSignerService;
+    private readonly mcpRefreshTokenRepository;
+    private readonly logger;
+    constructor(authJourneysService: AuthJourneysService, tokenVerifierService: TokenVerifierService, tokenSignerService: TokenSignerService, mcpRefreshTokenRepository: Repository<McpRefreshTokenEntity>);
+    handleTokenRequest(tokenRequest: TokenRequestDto): Promise<TokenResponseDto>;
+    exchangeAuthorizationCode(tokenRequest: TokenRequestDto): Promise<TokenResponseDto>;
+    private handleAuthorizationCodeGrant;
+    private handleRefreshTokenGrant;
+    private validatePkceVerifier;
+    private generateAccessToken;
+    private generateAndStoreRefreshToken;
+    introspectToken(request: IntrospectTokenRequestDto): Promise<IntrospectTokenResponseDto>;
+}

package/dist/authorization-server/token.service.js

@@ -0,0 +1,272 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+var __param = (this && this.__param) || function (paramIndex, decorator) {
+    return function (target, key) { decorator(target, key, paramIndex); }
+};
+var TokenService_1;
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.TokenService = void 0;
+const common_1 = require("@nestjs/common");
+const typeorm_1 = require("@nestjs/typeorm");
+const typeorm_2 = require("typeorm");
+const crypto_1 = require("crypto");
+const auth_journeys_service_1 = require("../auth-journeys/auth-journeys.service");
+const grant_type_enum_1 = require("./enums/grant-type.enum");
+const token_type_enum_1 = require("./enums/token-type.enum");
+const mcp_authorization_flow_status_enum_1 = require("../auth-journeys/enums/mcp-authorization-flow-status.enum");
+const env_config_1 = require("../config/env.config");
+const token_errors_1 = require("./errors/token.errors");
+const token_verifier_service_1 = require("../auth/crypto/token-verifier.service");
+const token_signer_service_1 = require("../auth/crypto/token-signer.service");
+const auth_journey_status_enum_1 = require("../auth-journeys/enums/auth-journey-status.enum");
+const mcp_refresh_token_entity_1 = require("./entities/mcp-refresh-token.entity");
+let TokenService = TokenService_1 = class TokenService {
+    authJourneysService;
+    tokenVerifierService;
+    tokenSignerService;
+    mcpRefreshTokenRepository;
+    logger = new common_1.Logger(TokenService_1.name);
+    constructor(authJourneysService, tokenVerifierService, tokenSignerService, mcpRefreshTokenRepository) {
+        this.authJourneysService = authJourneysService;
+        this.tokenVerifierService = tokenVerifierService;
+        this.tokenSignerService = tokenSignerService;
+        this.mcpRefreshTokenRepository = mcpRefreshTokenRepository;
+    }
+    async handleTokenRequest(tokenRequest) {
+        this.logger.debug(`Processing token request for client: ${tokenRequest.client_id}, grant_type: ${tokenRequest.grant_type}`);
+        switch (tokenRequest.grant_type) {
+            case grant_type_enum_1.GrantType.AUTHORIZATION_CODE:
+                return this.handleAuthorizationCodeGrant(tokenRequest);
+            case grant_type_enum_1.GrantType.REFRESH_TOKEN:
+                return this.handleRefreshTokenGrant(tokenRequest);
+            default:
+                throw new token_errors_1.InvalidGrantTypeError(tokenRequest.grant_type);
+        }
+    }
+    async exchangeAuthorizationCode(tokenRequest) {
+        return this.handleTokenRequest(tokenRequest);
+    }
+    async handleAuthorizationCodeGrant(tokenRequest) {
+        if (!tokenRequest.code ||
+            !tokenRequest.code_verifier ||
+            !tokenRequest.redirect_uri) {
+            throw new token_errors_1.MissingRequiredParametersError(tokenRequest.grant_type);
+        }
+        const mcpAuthFlow = await this.authJourneysService.findMcpAuthFlowByAuthorizationCode(tokenRequest.code, [
+            'client',
+            'server',
+            'authJourney',
+            'authJourney.actor',
+            'authJourney.actor.user',
+        ]);
+        if (!mcpAuthFlow) {
+            this.logger.warn(`Authorization code not found: ${tokenRequest.code}`);
+            throw new token_errors_1.InvalidAuthorizationCodeError(tokenRequest.code);
+        }
+        if (mcpAuthFlow.client.clientId !== tokenRequest.client_id) {
+            this.logger.warn(`Client ID mismatch for authorization code`);
+            throw new token_errors_1.ClientIdMismatchError();
+        }
+        if (mcpAuthFlow.authorizationCodeUsed) {
+            this.logger.warn(`Authorization code already used: ${tokenRequest.code}`);
+            throw new token_errors_1.AuthorizationCodeUsedError();
+        }
+        if (!mcpAuthFlow.authorizationCodeExpiresAt ||
+            new Date() > mcpAuthFlow.authorizationCodeExpiresAt) {
+            this.logger.warn(`Authorization code expired`);
+            throw new token_errors_1.AuthorizationCodeExpiredError();
+        }
+        if (mcpAuthFlow.redirectUri !== tokenRequest.redirect_uri) {
+            this.logger.warn(`Redirect URI mismatch`);
+            throw new token_errors_1.RedirectUriMismatchError();
+        }
+        if (!mcpAuthFlow.codeChallenge || !mcpAuthFlow.codeChallengeMethod) {
+            this.logger.warn(`Missing PKCE parameters in authorization flow`);
+            throw new token_errors_1.MissingPkceParametersError();
+        }
+        const isValidVerifier = this.validatePkceVerifier(tokenRequest.code_verifier, mcpAuthFlow.codeChallenge, mcpAuthFlow.codeChallengeMethod);
+        if (!isValidVerifier) {
+            this.logger.warn(`Invalid PKCE code_verifier`);
+            throw new token_errors_1.InvalidCodeVerifierError();
+        }
+        mcpAuthFlow.authorizationCodeUsed = true;
+        mcpAuthFlow.status =
+            mcp_authorization_flow_status_enum_1.McpAuthorizationFlowStatus.AUTHORIZATION_CODE_EXCHANGED;
+        await this.authJourneysService.saveMcpAuthFlow(mcpAuthFlow);
+        await this.authJourneysService.updateAuthJourneyStatus(mcpAuthFlow.authorizationJourneyId, auth_journey_status_enum_1.AuthJourneyStatus.AUTHORIZATION_CODE_EXCHANGED);
+        const config = (0, env_config_1.getConfig)();
+        const accessToken = await this.generateAccessToken(mcpAuthFlow);
+        const refreshToken = await this.generateAndStoreRefreshToken(mcpAuthFlow, tokenRequest.client_id);
+        const tokenResponse = {
+            access_token: accessToken,
+            token_type: token_type_enum_1.TokenType.BEARER,
+            expires_in: config.mcpAccessTokenDurationSeconds,
+            refresh_token: refreshToken,
+            scope: mcpAuthFlow.client.scopes
+                ? mcpAuthFlow.client.scopes.join(' ')
+                : undefined,
+        };
+        this.logger.log(`Issued access token for client: ${tokenRequest.client_id}`);
+        return tokenResponse;
+    }
+    async handleRefreshTokenGrant(tokenRequest) {
+        this.logger.debug('refresh token request');
+        if (!tokenRequest.refresh_token) {
+            throw new token_errors_1.MissingRequiredParametersError(tokenRequest.grant_type);
+        }
+        const tokenHash = (0, crypto_1.createHash)('sha256')
+            .update(tokenRequest.refresh_token)
+            .digest('hex');
+        const storedToken = await this.mcpRefreshTokenRepository.findOne({
+            where: { tokenHash },
+            relations: [
+                'mcpAuthorizationFlow',
+                'mcpAuthorizationFlow.client',
+                'mcpAuthorizationFlow.server',
+                'mcpAuthorizationFlow.authJourney',
+                'mcpAuthorizationFlow.authJourney.actor',
+                'mcpAuthorizationFlow.authJourney.actor.user',
+            ],
+        });
+        if (!storedToken) {
+            this.logger.warn('Refresh token not found');
+            throw new token_errors_1.InvalidRefreshTokenError();
+        }
+        if (storedToken.clientId !== tokenRequest.client_id) {
+            this.logger.warn('Client ID mismatch for refresh token');
+            throw new token_errors_1.ClientIdMismatchError();
+        }
+        if (storedToken.revokedAt) {
+            this.logger.warn('Refresh token has been revoked');
+            throw new token_errors_1.RefreshTokenRevokedError();
+        }
+        if (new Date() > storedToken.expiresAt) {
+            this.logger.warn('Refresh token expired');
+            throw new token_errors_1.RefreshTokenExpiredError();
+        }
+        const mcpAuthFlow = storedToken.mcpAuthorizationFlow;
+        storedToken.revokedAt = new Date();
+        await this.mcpRefreshTokenRepository.save(storedToken);
+        const config = (0, env_config_1.getConfig)();
+        const accessToken = await this.generateAccessToken(mcpAuthFlow);
+        const newRefreshToken = await this.generateAndStoreRefreshToken(mcpAuthFlow, tokenRequest.client_id);
+        const tokenResponse = {
+            access_token: accessToken,
+            token_type: token_type_enum_1.TokenType.BEARER,
+            expires_in: config.mcpAccessTokenDurationSeconds,
+            refresh_token: newRefreshToken,
+            scope: mcpAuthFlow.client.scopes
+                ? mcpAuthFlow.client.scopes.join(' ')
+                : undefined,
+        };
+        this.logger.log(`Refreshed access token for client: ${tokenRequest.client_id}`);
+        return tokenResponse;
+    }
+    validatePkceVerifier(codeVerifier, codeChallenge, codeChallengeMethod) {
+        if (codeChallengeMethod === 'S256') {
+            const hash = (0, crypto_1.createHash)('sha256').update(codeVerifier).digest();
+            const computedChallenge = hash.toString('base64url');
+            return computedChallenge === codeChallenge;
+        }
+        else if (codeChallengeMethod === 'plain') {
+            return codeVerifier === codeChallenge;
+        }
+        return false;
+    }
+    async generateAccessToken(mcpAuthFlow) {
+        if (!mcpAuthFlow.authJourney.actorId ||
+            !mcpAuthFlow.authJourney.actor ||
+            !mcpAuthFlow.authJourney.actor.user) {
+            throw new Error('Cannot generate access token. Actor or user not found.');
+        }
+        const now = Math.floor(Date.now() / 1000);
+        const config = (0, env_config_1.getConfig)();
+        const payload = {
+            iss: config.issuerUrl,
+            sub: mcpAuthFlow.authJourney.actorId,
+            actor_id: mcpAuthFlow.authJourney.actor.id,
+            actor_slug: mcpAuthFlow.authJourney.actor.slug,
+            actor_type: mcpAuthFlow.authJourney.actor.type,
+            email: mcpAuthFlow.authJourney.actor.user.email,
+            displayName: mcpAuthFlow.authJourney.actor.displayName,
+            aud: mcpAuthFlow.server.providedId,
+            exp: now + config.mcpAccessTokenDurationSeconds,
+            iat: now,
+            jti: (0, crypto_1.randomBytes)(16).toString('hex'),
+            client_id: mcpAuthFlow.client.clientId,
+            scope: mcpAuthFlow.scopes || [],
+            mcp_server_identifier: mcpAuthFlow.server.providedId,
+            resource: mcpAuthFlow.resource || '',
+            version: '1.0.0',
+        };
+        const jwt = await this.tokenSignerService.signToken(payload);
+        return jwt;
+    }
+    async generateAndStoreRefreshToken(mcpAuthFlow, clientId) {
+        const token = (0, crypto_1.randomBytes)(32).toString('base64url');
+        const tokenHash = (0, crypto_1.createHash)('sha256').update(token).digest('hex');
+        const config = (0, env_config_1.getConfig)();
+        const expiresAt = new Date();
+        expiresAt.setDate(expiresAt.getDate() + config.mcpRefreshTokenDurationDays);
+        const refreshToken = this.mcpRefreshTokenRepository.create({
+            mcpAuthorizationFlowId: mcpAuthFlow.id,
+            clientId,
+            tokenHash,
+            expiresAt,
+            revokedAt: null,
+        });
+        await this.mcpRefreshTokenRepository.save(refreshToken);
+        this.logger.debug(`Stored refresh token for flow: ${mcpAuthFlow.id}, expires: ${expiresAt.toISOString()}`);
+        return token;
+    }
+    async introspectToken(request) {
+        this.logger.debug(`Introspecting token${request.client_id ? ` for client: ${request.client_id}` : ''}`);
+        let claims;
+        try {
+            claims = await this.tokenVerifierService.verifyAndDecode(request.token);
+        }
+        catch (error) {
+            this.logger.warn(`Token introspection failed: ${error instanceof Error ? error.message : 'Unknown error'}`);
+            return { active: false };
+        }
+        if (request.client_id && claims.client_id !== request.client_id) {
+            this.logger.warn('Client ID mismatch during introspection');
+            return { active: false };
+        }
+        const response = {
+            active: true,
+            token_type: token_type_enum_1.TokenType.BEARER,
+            client_id: claims.client_id,
+            sub: claims.sub,
+            aud: claims.aud,
+            iss: claims.iss,
+            jti: claims.jti,
+            exp: claims.exp,
+            iat: claims.iat,
+            scope: claims.scope?.join(' '),
+            mcp_server_identifier: claims.mcp_server_identifier,
+            resource: claims.resource,
+            version: claims.version,
+        };
+        this.logger.log(`Token introspection successful for client: ${claims.client_id}`);
+        return response;
+    }
+};
+exports.TokenService = TokenService;
+exports.TokenService = TokenService = TokenService_1 = __decorate([
+    (0, common_1.Injectable)(),
+    __param(3, (0, typeorm_1.InjectRepository)(mcp_refresh_token_entity_1.McpRefreshTokenEntity)),
+    __metadata("design:paramtypes", [auth_journeys_service_1.AuthJourneysService,
+        token_verifier_service_1.TokenVerifierService,
+        token_signer_service_1.TokenSignerService,
+        typeorm_2.Repository])
+], TokenService);
+//# sourceMappingURL=token.service.js.map

package/dist/authorization-server/token.service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"token.service.js","sourceRoot":"","sources":["../../src/authorization-server/token.service.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,2CAAoD;AACpD,6CAAmD;AACnD,qCAAqC;AACrC,mCAAiD;AAEjD,kFAA6E;AAK7E,6DAAoD;AACpD,6DAAoD;AACpD,kHAAuG;AACvG,qDAAiD;AACjD,wDAa+B;AAC/B,kFAA6E;AAE7E,8EAAyE;AACzE,8FAAqF;AACrF,kFAA4E;AAGrE,IAAM,YAAY,oBAAlB,MAAM,YAAY;IAIJ;IACA;IACA;IAEA;IAPF,MAAM,GAAG,IAAI,eAAM,CAAC,cAAY,CAAC,IAAI,CAAC,CAAC;IAExD,YACmB,mBAAwC,EACxC,oBAA0C,EAC1C,kBAAsC,EAEtC,yBAA4D;QAJ5D,wBAAmB,GAAnB,mBAAmB,CAAqB;QACxC,yBAAoB,GAApB,oBAAoB,CAAsB;QAC1C,uBAAkB,GAAlB,kBAAkB,CAAoB;QAEtC,8BAAyB,GAAzB,yBAAyB,CAAmC;IAC5E,CAAC;IAMJ,KAAK,CAAC,kBAAkB,CACtB,YAA6B;QAE7B,IAAI,CAAC,MAAM,CAAC,KAAK,CACf,wCAAwC,YAAY,CAAC,SAAS,iBAAiB,YAAY,CAAC,UAAU,EAAE,CACzG,CAAC;QAEF,QAAQ,YAAY,CAAC,UAAU,EAAE,CAAC;YAChC,KAAK,2BAAS,CAAC,kBAAkB;gBAC/B,OAAO,IAAI,CAAC,4BAA4B,CAAC,YAAY,CAAC,CAAC;YACzD,KAAK,2BAAS,CAAC,aAAa;gBAC1B,OAAO,IAAI,CAAC,uBAAuB,CAAC,YAAY,CAAC,CAAC;YACpD;gBACE,MAAM,IAAI,oCAAqB,CAAC,YAAY,CAAC,UAAU,CAAC,CAAC;QAC7D,CAAC;IACH,CAAC;IAOD,KAAK,CAAC,yBAAyB,CAC7B,YAA6B;QAE7B,OAAO,IAAI,CAAC,kBAAkB,CAAC,YAAY,CAAC,CAAC;IAC/C,CAAC;IAKO,KAAK,CAAC,4BAA4B,CACxC,YAA6B;QAG7B,IACE,CAAC,YAAY,CAAC,IAAI;YAClB,CAAC,YAAY,CAAC,aAAa;YAC3B,CAAC,YAAY,CAAC,YAAY,EAC1B,CAAC;YACD,MAAM,IAAI,6CAA8B,CAAC,YAAY,CAAC,UAAU,CAAC,CAAC;QACpE,CAAC;QAGD,MAAM,WAAW,GACf,MAAM,IAAI,CAAC,mBAAmB,CAAC,kCAAkC,CAC/D,YAAY,CAAC,IAAI,EACjB;YACE,QAAQ;YACR,QAAQ;YACR,aAAa;YACb,mBAAmB;YACnB,wBAAwB;SACzB,CACF,CAAC;QAEJ,IAAI,CAAC,WAAW,EAAE,CAAC;YACjB,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,iCAAiC,YAAY,CAAC,IAAI,EAAE,CAAC,CAAC;YACvE,MAAM,IAAI,4CAA6B,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC;QAC7D,CAAC;QAGD,IAAI,WAAW,CAAC,MAAM,CAAC,QAAQ,KAAK,YAAY,CAAC,SAAS,EAAE,CAAC;YAC3D,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,2CAA2C,CAAC,CAAC;YAC9D,MAAM,IAAI,oCAAqB,EAAE,CAAC;QACpC,CAAC;QAGD,IAAI,WAAW,CAAC,qBAAqB,EAAE,CAAC;YACtC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,oCAAoC,YAAY,CAAC,IAAI,EAAE,CAAC,CAAC;YAC1E,MAAM,IAAI,yCAA0B,EAAE,CAAC;QACzC,CAAC;QAGD,IACE,CAAC,WAAW,CAAC,0BAA0B;YACvC,IAAI,IAAI,EAAE,GAAG,WAAW,CAAC,0BAA0B,EACnD,CAAC;YACD,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,4BAA4B,CAAC,CAAC;YAC/C,MAAM,IAAI,4CAA6B,EAAE,CAAC;QAC5C,CAAC;QAGD,IAAI,WAAW,CAAC,WAAW,KAAK,YAAY,CAAC,YAAY,EAAE,CAAC;YAC1D,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,uBAAuB,CAAC,CAAC;YAC1C,MAAM,IAAI,uCAAwB,EAAE,CAAC;QACvC,CAAC;QAGD,IAAI,CAAC,WAAW,CAAC,aAAa,IAAI,CAAC,WAAW,CAAC,mBAAmB,EAAE,CAAC;YACnE,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,+CAA+C,CAAC,CAAC;YAClE,MAAM,IAAI,yCAA0B,EAAE,CAAC;QACzC,CAAC;QAED,MAAM,eAAe,GAAG,IAAI,CAAC,oBAAoB,CAC/C,YAAY,CAAC,aAAa,EAC1B,WAAW,CAAC,aAAa,EACzB,WAAW,CAAC,mBAAmB,CAChC,CAAC;QAEF,IAAI,CAAC,eAAe,EAAE,CAAC;YACrB,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,4BAA4B,CAAC,CAAC;YAC/C,MAAM,IAAI,uCAAwB,EAAE,CAAC;QACvC,CAAC;QAGD,WAAW,CAAC,qBAAqB,GAAG,IAAI,CAAC;QACzC,WAAW,CAAC,MAAM;YAChB,+DAA0B,CAAC,4BAA4B,CAAC;QAC1D,MAAM,IAAI,CAAC,mBAAmB,CAAC,eAAe,CAAC,WAAW,CAAC,CAAC;QAC5D,MAAM,IAAI,CAAC,mBAAmB,CAAC,uBAAuB,CACpD,WAAW,CAAC,sBAAsB,EAClC,4CAAiB,CAAC,4BAA4B,CAC/C,CAAC;QAGF,MAAM,MAAM,GAAG,IAAA,sBAAS,GAAE,CAAC;QAC3B,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,mBAAmB,CAAC,WAAW,CAAC,CAAC;QAChE,MAAM,YAAY,GAAG,MAAM,IAAI,CAAC,4BAA4B,CAC1D,WAAW,EACX,YAAY,CAAC,SAAS,CACvB,CAAC;QAGF,MAAM,aAAa,GAAqB;YACtC,YAAY,EAAE,WAAW;YACzB,UAAU,EAAE,2BAAS,CAAC,MAAM;YAC5B,UAAU,EAAE,MAAM,CAAC,6BAA6B;YAChD,aAAa,EAAE,YAAY;YAC3B,KAAK,EAAE,WAAW,CAAC,MAAM,CAAC,MAAM;gBAC9B,CAAC,CAAC,WAAW,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC;gBACrC,CAAC,CAAC,SAAS;SACd,CAAC;QAEF,IAAI,CAAC,MAAM,CAAC,GAAG,CACb,mCAAmC,YAAY,CAAC,SAAS,EAAE,CAC5D,CAAC;QAEF,OAAO,aAAa,CAAC;IACvB,CAAC;IAMO,KAAK,CAAC,uBAAuB,CACnC,YAA6B;QAE7B,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,uBAAuB,CAAC,CAAC;QAE3C,IAAI,CAAC,YAAY,CAAC,aAAa,EAAE,CAAC;YAChC,MAAM,IAAI,6CAA8B,CAAC,YAAY,CAAC,UAAU,CAAC,CAAC;QACpE,CAAC;QAGD,MAAM,SAAS,GAAG,IAAA,mBAAU,EAAC,QAAQ,CAAC;aACnC,MAAM,CAAC,YAAY,CAAC,aAAa,CAAC;aAClC,MAAM,CAAC,KAAK,CAAC,CAAC;QAGjB,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,yBAAyB,CAAC,OAAO,CAAC;YAC/D,KAAK,EAAE,EAAE,SAAS,EAAE;YACpB,SAAS,EAAE;gBACT,sBAAsB;gBACtB,6BAA6B;gBAC7B,6BAA6B;gBAC7B,kCAAkC;gBAClC,wCAAwC;gBACxC,6CAA6C;aAC9C;SACF,CAAC,CAAC;QAEH,IAAI,CAAC,WAAW,EAAE,CAAC;YACjB,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,yBAAyB,CAAC,CAAC;YAC5C,MAAM,IAAI,uCAAwB,EAAE,CAAC;QACvC,CAAC;QAGD,IAAI,WAAW,CAAC,QAAQ,KAAK,YAAY,CAAC,SAAS,EAAE,CAAC;YACpD,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,sCAAsC,CAAC,CAAC;YACzD,MAAM,IAAI,oCAAqB,EAAE,CAAC;QACpC,CAAC;QAGD,IAAI,WAAW,CAAC,SAAS,EAAE,CAAC;YAC1B,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,gCAAgC,CAAC,CAAC;YACnD,MAAM,IAAI,uCAAwB,EAAE,CAAC;QACvC,CAAC;QAGD,IAAI,IAAI,IAAI,EAAE,GAAG,WAAW,CAAC,SAAS,EAAE,CAAC;YACvC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,uBAAuB,CAAC,CAAC;YAC1C,MAAM,IAAI,uCAAwB,EAAE,CAAC;QACvC,CAAC;QAED,MAAM,WAAW,GAAG,WAAW,CAAC,oBAAoB,CAAC;QAGrD,WAAW,CAAC,SAAS,GAAG,IAAI,IAAI,EAAE,CAAC;QACnC,MAAM,IAAI,CAAC,yBAAyB,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;QAGvD,MAAM,MAAM,GAAG,IAAA,sBAAS,GAAE,CAAC;QAC3B,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,mBAAmB,CAAC,WAAW,CAAC,CAAC;QAChE,MAAM,eAAe,GAAG,MAAM,IAAI,CAAC,4BAA4B,CAC7D,WAAW,EACX,YAAY,CAAC,SAAS,CACvB,CAAC;QAGF,MAAM,aAAa,GAAqB;YACtC,YAAY,EAAE,WAAW;YACzB,UAAU,EAAE,2BAAS,CAAC,MAAM;YAC5B,UAAU,EAAE,MAAM,CAAC,6BAA6B;YAChD,aAAa,EAAE,eAAe;YAC9B,KAAK,EAAE,WAAW,CAAC,MAAM,CAAC,MAAM;gBAC9B,CAAC,CAAC,WAAW,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC;gBACrC,CAAC,CAAC,SAAS;SACd,CAAC;QAEF,IAAI,CAAC,MAAM,CAAC,GAAG,CACb,sCAAsC,YAAY,CAAC,SAAS,EAAE,CAC/D,CAAC;QAEF,OAAO,aAAa,CAAC;IACvB,CAAC;IAMO,oBAAoB,CAC1B,YAAoB,EACpB,aAAqB,EACrB,mBAA2B;QAE3B,IAAI,mBAAmB,KAAK,MAAM,EAAE,CAAC;YAEnC,MAAM,IAAI,GAAG,IAAA,mBAAU,EAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,MAAM,EAAE,CAAC;YAChE,MAAM,iBAAiB,GAAG,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;YACrD,OAAO,iBAAiB,KAAK,aAAa,CAAC;QAC7C,CAAC;aAAM,IAAI,mBAAmB,KAAK,OAAO,EAAE,CAAC;YAE3C,OAAO,YAAY,KAAK,aAAa,CAAC;QACxC,CAAC;QAED,OAAO,KAAK,CAAC;IACf,CAAC;IAKO,KAAK,CAAC,mBAAmB,CAC/B,WAAuC;QAEvC,IACE,CAAC,WAAW,CAAC,WAAW,CAAC,OAAO;YAChC,CAAC,WAAW,CAAC,WAAW,CAAC,KAAK;YAC9B,CAAC,WAAW,CAAC,WAAW,CAAC,KAAK,CAAC,IAAI,EACnC,CAAC;YAED,MAAM,IAAI,KAAK,CAAC,wDAAwD,CAAC,CAAC;QAC5E,CAAC;QAGD,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;QAC1C,MAAM,MAAM,GAAG,IAAA,sBAAS,GAAE,CAAC;QAC3B,MAAM,OAAO,GAAsB;YACjC,GAAG,EAAE,MAAM,CAAC,SAAS;YACrB,GAAG,EAAE,WAAW,CAAC,WAAW,CAAC,OAAO;YACpC,QAAQ,EAAE,WAAW,CAAC,WAAW,CAAC,KAAK,CAAC,EAAE;YAC1C,UAAU,EAAE,WAAW,CAAC,WAAW,CAAC,KAAK,CAAC,IAAI;YAC9C,UAAU,EAAE,WAAW,CAAC,WAAW,CAAC,KAAK,CAAC,IAAI;YAC9C,KAAK,EAAE,WAAW,CAAC,WAAW,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK;YAC/C,WAAW,EAAE,WAAW,CAAC,WAAW,CAAC,KAAK,CAAC,WAAW;YACtD,GAAG,EAAE,WAAW,CAAC,MAAM,CAAC,UAAU;YAClC,GAAG,EAAE,GAAG,GAAG,MAAM,CAAC,6BAA6B;YAC/C,GAAG,EAAE,GAAG;YACR,GAAG,EAAE,IAAA,oBAAW,EAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC;YACpC,SAAS,EAAE,WAAW,CAAC,MAAM,CAAC,QAAQ;YACtC,KAAK,EAAE,WAAW,CAAC,MAAM,IAAI,EAAE;YAC/B,qBAAqB,EAAE,WAAW,CAAC,MAAM,CAAC,UAAU;YACpD,QAAQ,EAAE,WAAW,CAAC,QAAQ,IAAI,EAAE;YACpC,OAAO,EAAE,OAAO;SACjB,CAAC;QAGF,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,kBAAkB,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;QAE7D,OAAO,GAAG,CAAC;IACb,CAAC;IAMO,KAAK,CAAC,4BAA4B,CACxC,WAAuC,EACvC,QAAgB;QAGhB,MAAM,KAAK,GAAG,IAAA,oBAAW,EAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;QAGpD,MAAM,SAAS,GAAG,IAAA,mBAAU,EAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QAGnE,MAAM,MAAM,GAAG,IAAA,sBAAS,GAAE,CAAC;QAC3B,MAAM,SAAS,GAAG,IAAI,IAAI,EAAE,CAAC;QAC7B,SAAS,CAAC,OAAO,CAAC,SAAS,CAAC,OAAO,EAAE,GAAG,MAAM,CAAC,2BAA2B,CAAC,CAAC;QAG5E,MAAM,YAAY,GAAG,IAAI,CAAC,yBAAyB,CAAC,MAAM,CAAC;YACzD,sBAAsB,EAAE,WAAW,CAAC,EAAE;YACtC,QAAQ;YACR,SAAS;YACT,SAAS;YACT,SAAS,EAAE,IAAI;SAChB,CAAC,CAAC;QAEH,MAAM,IAAI,CAAC,yBAAyB,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;QAExD,IAAI,CAAC,MAAM,CAAC,KAAK,CACf,kCAAkC,WAAW,CAAC,EAAE,cAAc,SAAS,CAAC,WAAW,EAAE,EAAE,CACxF,CAAC;QAGF,OAAO,KAAK,CAAC;IACf,CAAC;IAOD,KAAK,CAAC,eAAe,CACnB,OAAkC;QAElC,IAAI,CAAC,MAAM,CAAC,KAAK,CACf,sBAAsB,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,gBAAgB,OAAO,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CACrF,CAAC;QAEF,IAAI,MAAyB,CAAC;QAC9B,IAAI,CAAC;YACH,MAAM,GAAG,MAAM,IAAI,CAAC,oBAAoB,CAAC,eAAe,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;QAC1E,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,MAAM,CAAC,IAAI,CACd,+BAA+B,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe,EAAE,CAC1F,CAAC;YACF,OAAO,EAAE,MAAM,EAAE,KAAK,EAAgC,CAAC;QACzD,CAAC;QAID,IAAI,OAAO,CAAC,SAAS,IAAI,MAAM,CAAC,SAAS,KAAK,OAAO,CAAC,SAAS,EAAE,CAAC;YAChE,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,yCAAyC,CAAC,CAAC;YAC5D,OAAO,EAAE,MAAM,EAAE,KAAK,EAAgC,CAAC;QACzD,CAAC;QAGD,MAAM,QAAQ,GAA+B;YAC3C,MAAM,EAAE,IAAI;YACZ,UAAU,EAAE,2BAAS,CAAC,MAAM;YAC5B,SAAS,EAAE,MAAM,CAAC,SAAS;YAC3B,GAAG,EAAE,MAAM,CAAC,GAAG;YACf,GAAG,EAAE,MAAM,CAAC,GAAG;YACf,GAAG,EAAE,MAAM,CAAC,GAAG;YACf,GAAG,EAAE,MAAM,CAAC,GAAG;YACf,GAAG,EAAE,MAAM,CAAC,GAAG;YACf,GAAG,EAAE,MAAM,CAAC,GAAG;YACf,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,IAAI,CAAC,GAAG,CAAC;YAC9B,qBAAqB,EAAE,MAAM,CAAC,qBAAqB;YACnD,QAAQ,EAAE,MAAM,CAAC,QAAQ;YACzB,OAAO,EAAE,MAAM,CAAC,OAAO;SACxB,CAAC;QAEF,IAAI,CAAC,MAAM,CAAC,GAAG,CACb,8CAA8C,MAAM,CAAC,SAAS,EAAE,CACjE,CAAC;QACF,OAAO,QAAQ,CAAC;IAClB,CAAC;CACF,CAAA;AA5YY,oCAAY;uBAAZ,YAAY;IADxB,IAAA,mBAAU,GAAE;IAQR,WAAA,IAAA,0BAAgB,EAAC,gDAAqB,CAAC,CAAA;qCAHF,2CAAmB;QAClB,6CAAoB;QACtB,yCAAkB;QAEX,oBAAU;GAR7C,YAAY,CA4YxB"}

package/dist/authorization-server/utils/basic-auth.extractor.d.ts

@@ -0,0 +1,6 @@
+import type { IncomingHttpHeaders } from 'http';
+export interface BasicAuthCredentials {
+    clientId: string;
+    clientSecret: string;
+}
+export declare function extractBasicAuth(headers: IncomingHttpHeaders): BasicAuthCredentials | null;

package/dist/authorization-server/utils/basic-auth.extractor.js

@@ -0,0 +1,31 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.extractBasicAuth = extractBasicAuth;
+function extractBasicAuth(headers) {
+    const authHeader = headers.authorization;
+    if (!authHeader) {
+        return null;
+    }
+    const parts = authHeader.split(' ');
+    if (parts.length !== 2 || parts[0].toLowerCase() !== 'basic') {
+        return null;
+    }
+    const base64Credentials = parts[1];
+    try {
+        const decoded = Buffer.from(base64Credentials, 'base64').toString('utf-8');
+        const colonIndex = decoded.indexOf(':');
+        if (colonIndex === -1) {
+            return null;
+        }
+        const clientId = decoded.substring(0, colonIndex);
+        const clientSecret = decoded.substring(colonIndex + 1);
+        return {
+            clientId: decodeURIComponent(clientId),
+            clientSecret: decodeURIComponent(clientSecret),
+        };
+    }
+    catch {
+        return null;
+    }
+}
+//# sourceMappingURL=basic-auth.extractor.js.map

package/dist/authorization-server/utils/basic-auth.extractor.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"basic-auth.extractor.js","sourceRoot":"","sources":["../../../src/authorization-server/utils/basic-auth.extractor.ts"],"names":[],"mappings":";;AAeA,4CAuCC;AAvCD,SAAgB,gBAAgB,CAC9B,OAA4B;IAE5B,MAAM,UAAU,GAAG,OAAO,CAAC,aAAa,CAAC;IAEzC,IAAI,CAAC,UAAU,EAAE,CAAC;QAChB,OAAO,IAAI,CAAC;IACd,CAAC;IAGD,MAAM,KAAK,GAAG,UAAU,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACpC,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,KAAK,OAAO,EAAE,CAAC;QAC7D,OAAO,IAAI,CAAC;IACd,CAAC;IAED,MAAM,iBAAiB,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;IAEnC,IAAI,CAAC;QAEH,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,iBAAiB,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;QAG3E,MAAM,UAAU,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QACxC,IAAI,UAAU,KAAK,CAAC,CAAC,EAAE,CAAC;YACtB,OAAO,IAAI,CAAC;QACd,CAAC;QAED,MAAM,QAAQ,GAAG,OAAO,CAAC,SAAS,CAAC,CAAC,EAAE,UAAU,CAAC,CAAC;QAClD,MAAM,YAAY,GAAG,OAAO,CAAC,SAAS,CAAC,UAAU,GAAG,CAAC,CAAC,CAAC;QAGvD,OAAO;YACL,QAAQ,EAAE,kBAAkB,CAAC,QAAQ,CAAC;YACtC,YAAY,EAAE,kBAAkB,CAAC,YAAY,CAAC;SAC/C,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QAEP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC"}

package/dist/authorization-server/web-auth.controller.d.ts

@@ -0,0 +1,26 @@
+import type { Request, Response } from 'express';
+import { IdentityProviderService } from '../identity-provider/identity-provider.service';
+import { LoginRequestDto } from './dto/login-request.dto';
+import { LoginResponseDto } from './dto/login-response.dto';
+import { UserResponseDto } from './dto/user-response.dto';
+import { ChangePasswordRequestDto } from './dto/change-password-request.dto';
+import { TokenVerifierService } from '../auth/crypto/token-verifier.service';
+import { WebAuthService } from './web-auth.service';
+import { ActorService } from 'src/identity-provider/actor.service';
+export declare class WebAuthController {
+    private readonly webAuthService;
+    private readonly tokenVerifierService;
+    private readonly identityProviderService;
+    private readonly actorService;
+    private logger;
+    constructor(webAuthService: WebAuthService, tokenVerifierService: TokenVerifierService, identityProviderService: IdentityProviderService, actorService: ActorService);
+    login(loginDto: LoginRequestDto, response: Response): Promise<LoginResponseDto>;
+    refresh(request: Request, response: Response): Promise<LoginResponseDto>;
+    logout(request: Request, response: Response): Promise<{
+        ok: boolean;
+    }>;
+    me(request: Request): Promise<UserResponseDto>;
+    changePassword(request: Request, changePasswordDto: ChangePasswordRequestDto): Promise<{
+        ok: boolean;
+    }>;
+}