@takaro/auth 0.0.1 → 0.0.4

package/dist/config.d.ts

@@ -4,12 +4,7 @@ export interface IAuthConfig extends IBaseConfig {
         publicUrl: string;
         adminUrl: string;
     };
-    hydra: {
-        publicUrl: string;
-        adminUrl: string;
-        adminClientId: string;
-        adminClientSecret: string;
-    };
+    adminClientSecret: string;
     takaro: {
         url: string;
     };
@@ -29,31 +24,11 @@ export declare const configSchema: {
             env: string;
         };
     };
-    hydra: {
-        publicUrl: {
-            doc: string;
-            format: StringConstructor;
-            default: string;
-            env: string;
-        };
-        adminUrl: {
-            doc: string;
-            format: StringConstructor;
-            default: string;
-            env: string;
-        };
-        adminClientId: {
-            doc: string;
-            format: StringConstructor;
-            default: null;
-            env: string;
-        };
-        adminClientSecret: {
-            doc: string;
-            format: StringConstructor;
-            default: null;
-            env: string;
-        };
+    adminClientSecret: {
+        doc: string;
+        format: StringConstructor;
+        default: null;
+        env: string;
     };
     takaro: {
         url: {

package/dist/config.js

@@ -14,31 +14,11 @@ export const configSchema = {
             env: 'KRATOS_ADMIN_URL',
         },
     },
-    hydra: {
-        publicUrl: {
-            doc: 'The URL of the Takaro OAuth server',
-            format: String,
-            default: 'http://hydra:4444',
-            env: 'TAKARO_OAUTH_HOST',
-        },
-        adminUrl: {
-            doc: 'The URL of the Takaro OAuth admin server',
-            format: String,
-            default: 'http://hydra:4445',
-            env: 'TAKARO_OAUTH_ADMIN_HOST',
-        },
-        adminClientId: {
-            doc: 'The client ID to use when authenticating with the Takaro server',
-            format: String,
-            default: null,
-            env: 'ADMIN_CLIENT_ID',
-        },
-        adminClientSecret: {
-            doc: 'The client secret to use when authenticating with the Takaro server',
-            format: String,
-            default: null,
-            env: 'ADMIN_CLIENT_SECRET',
-        },
+    adminClientSecret: {
+        doc: 'The client secret to use when authenticating with the Takaro server',
+        format: String,
+        default: null,
+        env: 'ADMIN_CLIENT_SECRET',
     },
     takaro: {
         url: {

package/dist/config.js.map

@@ -1 +1 @@
-{"version":3,"file":"config.js","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAe,MAAM,gBAAgB,CAAC;AAkBrD,MAAM,CAAC,MAAM,YAAY,GAAG;IAC1B,MAAM,EAAE;QACN,SAAS,EAAE;YACT,GAAG,EAAE,kCAAkC;YACvC,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,oBAAoB;YAC7B,GAAG,EAAE,YAAY;SAClB;QACD,QAAQ,EAAE;YACR,GAAG,EAAE,iCAAiC;YACtC,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,oBAAoB;YAC7B,GAAG,EAAE,kBAAkB;SACxB;KACF;IACD,KAAK,EAAE;QACL,SAAS,EAAE;YACT,GAAG,EAAE,oCAAoC;YACzC,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,mBAAmB;YAC5B,GAAG,EAAE,mBAAmB;SACzB;QACD,QAAQ,EAAE;YACR,GAAG,EAAE,0CAA0C;YAC/C,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,mBAAmB;YAC5B,GAAG,EAAE,yBAAyB;SAC/B;QACD,aAAa,EAAE;YACb,GAAG,EAAE,iEAAiE;YACtE,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,IAAI;YACb,GAAG,EAAE,iBAAiB;SACvB;QACD,iBAAiB,EAAE;YACjB,GAAG,EAAE,qEAAqE;YAC1E,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,IAAI;YACb,GAAG,EAAE,qBAAqB;SAC3B;KACF;IACD,MAAM,EAAE;QACN,GAAG,EAAE;YACH,GAAG,EAAE,8BAA8B;YACnC,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,uBAAuB;YAChC,GAAG,EAAE,aAAa;SACnB;KACF;CACF,CAAC;AAEF,MAAM,CAAC,MAAM,MAAM,GAAG,IAAI,MAAM,CAAc,CAAC,YAAY,CAAC,CAAC,CAAC"}
+{"version":3,"file":"config.js","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAe,MAAM,gBAAgB,CAAC;AAarD,MAAM,CAAC,MAAM,YAAY,GAAG;IAC1B,MAAM,EAAE;QACN,SAAS,EAAE;YACT,GAAG,EAAE,kCAAkC;YACvC,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,oBAAoB;YAC7B,GAAG,EAAE,YAAY;SAClB;QACD,QAAQ,EAAE;YACR,GAAG,EAAE,iCAAiC;YACtC,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,oBAAoB;YAC7B,GAAG,EAAE,kBAAkB;SACxB;KACF;IACD,iBAAiB,EAAE;QACjB,GAAG,EAAE,qEAAqE;QAC1E,MAAM,EAAE,MAAM;QACd,OAAO,EAAE,IAAI;QACb,GAAG,EAAE,qBAAqB;KAC3B;IACD,MAAM,EAAE;QACN,GAAG,EAAE;YACH,GAAG,EAAE,8BAA8B;YACnC,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,uBAAuB;YAChC,GAAG,EAAE,aAAa;SACnB;KACF;CACF,CAAC;AAEF,MAAM,CAAC,MAAM,MAAM,GAAG,IAAI,MAAM,CAAc,CAAC,YAAY,CAAC,CAAC,CAAC"}

package/dist/lib/ory.d.ts

@@ -1,42 +1,20 @@
-import { TakaroDTO } from '@takaro/util';
 import { Request } from 'express';
-export declare enum AUDIENCES {
-    TAKARO_API_ADMIN = "t:api:admin"
-}
 export interface ITakaroIdentity {
     id: string;
     email: string;
-    domainId: string;
-}
-export declare class TakaroTokenDTO extends TakaroDTO<TakaroTokenDTO> {
-    active: boolean;
-    clientId: string;
-    exp: number;
-    iat: number;
-    iss: string;
-    sub: string;
-    aud: string[];
 }
 declare class Ory {
-    private authToken;
     private log;
-    private adminClient;
     private identityClient;
     private frontendClient;
     constructor();
-    get OAuth2URL(): string;
-    deleteIdentitiesForDomain(domainId: string): Promise<void>;
     getIdentity(id: string): Promise<ITakaroIdentity>;
-    createIdentity(email: string, domainId: string, password?: string): Promise<ITakaroIdentity>;
+    getIdentityByEmail(email: string): Promise<ITakaroIdentity | null>;
+    createIdentity(email: string, password?: string): Promise<ITakaroIdentity>;
     deleteIdentity(id: string): Promise<void>;
-    getIdentityFromReq(req: Request): Promise<ITakaroIdentity>;
+    getIdentityFromReq(req: Request): Promise<ITakaroIdentity | null>;
     submitApiLogin(username: string, password: string): Promise<import("axios").AxiosResponse<import("@ory/client").SuccessfulNativeLogin, any>>;
     apiLogout(req: Request): Promise<true | import("axios").AxiosResponse<void, any>>;
-    introspectToken(token: string): Promise<TakaroTokenDTO>;
-    createOIDCClient(): Promise<{
-        clientId: string;
-        clientSecret: string;
-    }>;
     getRecoveryFlow(id: string): Promise<import("@ory/client").RecoveryLinkForIdentity>;
 }
 export declare const ory: Ory;

package/dist/lib/ory.js

@@ -1,63 +1,13 @@
-var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
-    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
-    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
-    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
-    return c > 3 && r && Object.defineProperty(target, key, r), r;
-};
-var __metadata = (this && this.__metadata) || function (k, v) {
-    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
-};
-import { Configuration, FrontendApi, IdentityApi, OAuth2Api } from '@ory/client';
+import { Configuration, FrontendApi, IdentityApi } from '@ory/client';
 import { config } from '../config.js';
-import { errors, logger, TakaroDTO } from '@takaro/util';
+import { logger } from '@takaro/util';
 import { createAxiosClient } from './oryAxiosClient.js';
-import { paginateIdentities } from './paginationHelpers.js';
-import { IsBoolean, IsNumber, IsString } from 'class-validator';
 var IDENTITY_SCHEMA;
 (function (IDENTITY_SCHEMA) {
     IDENTITY_SCHEMA["USER"] = "user_v0";
 })(IDENTITY_SCHEMA || (IDENTITY_SCHEMA = {}));
-export var AUDIENCES;
-(function (AUDIENCES) {
-    // Used for various sysadmin tasks in the Takaro API
-    AUDIENCES["TAKARO_API_ADMIN"] = "t:api:admin";
-})(AUDIENCES || (AUDIENCES = {}));
-export class TakaroTokenDTO extends TakaroDTO {
-}
-__decorate([
-    IsBoolean(),
-    __metadata("design:type", Boolean)
-], TakaroTokenDTO.prototype, "active", void 0);
-__decorate([
-    IsString(),
-    __metadata("design:type", String)
-], TakaroTokenDTO.prototype, "clientId", void 0);
-__decorate([
-    IsNumber(),
-    __metadata("design:type", Number)
-], TakaroTokenDTO.prototype, "exp", void 0);
-__decorate([
-    IsNumber(),
-    __metadata("design:type", Number)
-], TakaroTokenDTO.prototype, "iat", void 0);
-__decorate([
-    IsString(),
-    __metadata("design:type", String)
-], TakaroTokenDTO.prototype, "iss", void 0);
-__decorate([
-    IsString(),
-    __metadata("design:type", String)
-], TakaroTokenDTO.prototype, "sub", void 0);
-__decorate([
-    IsString({ each: true }),
-    __metadata("design:type", Array)
-], TakaroTokenDTO.prototype, "aud", void 0);
-function metadataTypeguard(metadata) {
-    return typeof metadata === 'object' && metadata !== null && 'domainId' in metadata;
-}
 class Ory {
     constructor() {
-        this.authToken = null;
         this.log = logger('ory');
         this.identityClient = new IdentityApi(new Configuration({
             basePath: config.get('kratos.adminUrl'),
@@ -65,53 +15,39 @@ class Ory {
         this.frontendClient = new FrontendApi(new Configuration({
             basePath: config.get('kratos.publicUrl'),
         }), undefined, createAxiosClient(config.get('kratos.publicUrl')));
-        this.adminClient = new OAuth2Api(new Configuration({
-            basePath: config.get('hydra.adminUrl'),
-        }), undefined, createAxiosClient(config.get('hydra.adminUrl')));
-    }
-    get OAuth2URL() {
-        return config.get('hydra.publicUrl');
-    }
-    async deleteIdentitiesForDomain(domainId) {
-        for await (const identities of paginateIdentities(this.identityClient)) {
-            for (const identity of identities) {
-                if (identity.metadata_public &&
-                    metadataTypeguard(identity.metadata_public) &&
-                    identity.metadata_public.domainId === domainId) {
-                    await this.deleteIdentity(identity.id);
-                }
-            }
-        }
     }
     async getIdentity(id) {
         const res = await this.identityClient.getIdentity({
             id,
         });
-        if (!res.data.metadata_public) {
-            this.log.warn('Identity has no metadata_public', {
-                identity: res.data.id,
-            });
-            throw new errors.ForbiddenError();
-        }
-        if (!metadataTypeguard(res.data.metadata_public)) {
-            this.log.warn('Identity metadata_public is not of type {domainId: string}', { identity: res.data.id });
-            throw new errors.ForbiddenError();
-        }
         return {
             id: res.data.id,
             email: res.data.traits.email,
-            domainId: res.data.metadata_public.domainId,
         };
     }
-    async createIdentity(email, domainId, password) {
+    async getIdentityByEmail(email) {
+        const identity = await this.identityClient.listIdentities({ credentialsIdentifier: email });
+        if (!identity.data.length)
+            return null;
+        return {
+            id: identity.data[0].id,
+            email: identity.data[0].traits.email,
+        };
+    }
+    async createIdentity(email, password) {
+        const existing = await this.identityClient.listIdentities({ credentialsIdentifier: email });
+        if (existing.data.length) {
+            this.log.warn('Identity already exists, returning existing one.', { email });
+            return {
+                id: existing.data[0].id,
+                email: existing.data[0].traits.email,
+            };
+        }
         const body = {
             schema_id: IDENTITY_SCHEMA.USER,
             traits: {
                 email,
             },
-            metadata_public: {
-                domainId,
-            },
         };
         if (password) {
             body.credentials = {
@@ -128,7 +64,6 @@ class Ory {
         return {
             id: res.data.id,
             email: res.data.traits.email,
-            domainId,
         };
     }
     async deleteIdentity(id) {
@@ -138,27 +73,20 @@ class Ory {
     }
     async getIdentityFromReq(req) {
         const tokenFromAuthHeader = req.headers['authorization']?.replace('Bearer ', '');
-        const sessionRes = await this.frontendClient.toSession({
-            cookie: req.headers.cookie,
-            xSessionToken: tokenFromAuthHeader,
-        });
-        if (!sessionRes.data.identity.metadata_public) {
-            this.log.warn('Identity has no metadata_public', {
-                identity: sessionRes.data.identity.id,
+        try {
+            const sessionRes = await this.frontendClient.toSession({
+                cookie: req.headers.cookie,
+                xSessionToken: tokenFromAuthHeader,
             });
-            throw new errors.ForbiddenError();
+            return {
+                id: sessionRes.data.identity.id,
+                email: sessionRes.data.identity.traits.email,
+            };
         }
-        if (!metadataTypeguard(sessionRes.data.identity.metadata_public)) {
-            this.log.warn('Identity metadata_public is not of type {domainId: string}', {
-                identity: sessionRes.data.identity.id,
-            });
-            throw new errors.ForbiddenError();
+        catch (error) {
+            this.log.warn('Could not get identity from request', { error });
+            return null;
         }
-        return {
-            id: sessionRes.data.identity.id,
-            email: sessionRes.data.identity.traits.email,
-            domainId: sessionRes.data.identity.metadata_public.domainId,
-        };
     }
     async submitApiLogin(username, password) {
         const flow = await this.frontendClient.createNativeLoginFlow({
@@ -183,49 +111,6 @@ class Ory {
             },
         });
     }
-    async introspectToken(token) {
-        const introspectRes = await this.adminClient.introspectOAuth2Token({
-            token,
-        });
-        const data = new TakaroTokenDTO({
-            active: introspectRes.data.active,
-            clientId: introspectRes.data.client_id,
-            aud: introspectRes.data.aud,
-            exp: introspectRes.data.exp,
-            iat: introspectRes.data.iat,
-            iss: introspectRes.data.iss,
-            sub: introspectRes.data.sub,
-        });
-        try {
-            // Check for correctness of the data
-            // DOES NOT CHECK FOR EXPIRATION
-            await data.validate();
-        }
-        catch (error) {
-            this.log.warn('Introspected token has invalid shape', { error });
-            throw new errors.ForbiddenError();
-        }
-        return data;
-    }
-    // Currently, this is only used for creating the admin-auth client.
-    // ...In the future we should make this more generic and allow for
-    // creating any API client perhaps?
-    async createOIDCClient() {
-        const client = await this.adminClient.createOAuth2Client({
-            oAuth2Client: {
-                grant_types: ['client_credentials'],
-                audience: [AUDIENCES.TAKARO_API_ADMIN],
-            },
-        });
-        if (!client.data.client_id || !client.data.client_secret) {
-            this.log.error('Could not create OIDC client', { client });
-            throw new errors.InternalServerError();
-        }
-        return {
-            clientId: client.data.client_id,
-            clientSecret: client.data.client_secret,
-        };
-    }
     async getRecoveryFlow(id) {
         const recoveryRes = await this.identityClient.createRecoveryLinkForIdentity({
             createRecoveryLinkForIdentityBody: {

package/dist/lib/ory.js.map

@@ -1 +1 @@
-{"version":3,"file":"ory.js","sourceRoot":"","sources":["../../src/lib/ory.ts"],"names":[],"mappings":";;;;;;;;;AAAA,OAAO,EAAE,aAAa,EAAsB,WAAW,EAAE,WAAW,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AACrG,OAAO,EAAE,MAAM,EAAE,MAAM,cAAc,CAAC;AACtC,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AACzD,OAAO,EAAE,iBAAiB,EAAE,MAAM,qBAAqB,CAAC;AACxD,OAAO,EAAE,kBAAkB,EAAE,MAAM,wBAAwB,CAAC;AAE5D,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,iBAAiB,CAAC;AAEhE,IAAK,eAEJ;AAFD,WAAK,eAAe;IAClB,mCAAgB,CAAA;AAClB,CAAC,EAFI,eAAe,KAAf,eAAe,QAEnB;AAED,MAAM,CAAN,IAAY,SAGX;AAHD,WAAY,SAAS;IACnB,oDAAoD;IACpD,6CAAgC,CAAA;AAClC,CAAC,EAHW,SAAS,KAAT,SAAS,QAGpB;AAQD,MAAM,OAAO,cAAe,SAAQ,SAAyB;CAe5D;AAbC;IADC,SAAS,EAAE;;8CACI;AAEhB;IADC,QAAQ,EAAE;;gDACM;AAEjB;IADC,QAAQ,EAAE;;2CACC;AAEZ;IADC,QAAQ,EAAE;;2CACC;AAEZ;IADC,QAAQ,EAAE;;2CACC;AAEZ;IADC,QAAQ,EAAE;;2CACC;AAEZ;IADC,QAAQ,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;;2CACX;AAGhB,SAAS,iBAAiB,CAAC,QAAiB;IAC1C,OAAO,OAAO,QAAQ,KAAK,QAAQ,IAAI,QAAQ,KAAK,IAAI,IAAI,UAAU,IAAI,QAAQ,CAAC;AACrF,CAAC;AAED,MAAM,GAAG;IAQP;QAPQ,cAAS,GAAkB,IAAI,CAAC;QAChC,QAAG,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;QAO1B,IAAI,CAAC,cAAc,GAAG,IAAI,WAAW,CACnC,IAAI,aAAa,CAAC;YAChB,QAAQ,EAAE,MAAM,CAAC,GAAG,CAAC,iBAAiB,CAAC;SACxC,CAAC,EACF,SAAS,EACT,iBAAiB,CAAC,MAAM,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAAC,CACjD,CAAC;QAEF,IAAI,CAAC,cAAc,GAAG,IAAI,WAAW,CACnC,IAAI,aAAa,CAAC;YAChB,QAAQ,EAAE,MAAM,CAAC,GAAG,CAAC,kBAAkB,CAAC;SACzC,CAAC,EACF,SAAS,EACT,iBAAiB,CAAC,MAAM,CAAC,GAAG,CAAC,kBAAkB,CAAC,CAAC,CAClD,CAAC;QACF,IAAI,CAAC,WAAW,GAAG,IAAI,SAAS,CAC9B,IAAI,aAAa,CAAC;YAChB,QAAQ,EAAE,MAAM,CAAC,GAAG,CAAC,gBAAgB,CAAC;SACvC,CAAC,EACF,SAAS,EACT,iBAAiB,CAAC,MAAM,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC,CAChD,CAAC;IACJ,CAAC;IAED,IAAI,SAAS;QACX,OAAO,MAAM,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAAC;IACvC,CAAC;IAED,KAAK,CAAC,yBAAyB,CAAC,QAAgB;QAC9C,IAAI,KAAK,EAAE,MAAM,UAAU,IAAI,kBAAkB,CAAC,IAAI,CAAC,cAAc,CAAC,EAAE,CAAC;YACvE,KAAK,MAAM,QAAQ,IAAI,UAAU,EAAE,CAAC;gBAClC,IACE,QAAQ,CAAC,eAAe;oBACxB,iBAAiB,CAAC,QAAQ,CAAC,eAAe,CAAC;oBAC3C,QAAQ,CAAC,eAAe,CAAC,QAAQ,KAAK,QAAQ,EAC9C,CAAC;oBACD,MAAM,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;gBACzC,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC;IAED,KAAK,CAAC,WAAW,CAAC,EAAU;QAC1B,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,WAAW,CAAC;YAChD,EAAE;SACH,CAAC,CAAC;QAEH,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,eAAe,EAAE,CAAC;YAC9B,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,iCAAiC,EAAE;gBAC/C,QAAQ,EAAE,GAAG,CAAC,IAAI,CAAC,EAAE;aACtB,CAAC,CAAC;YACH,MAAM,IAAI,MAAM,CAAC,cAAc,EAAE,CAAC;QACpC,CAAC;QAED,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,IAAI,CAAC,eAAe,CAAC,EAAE,CAAC;YACjD,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,4DAA4D,EAAE,EAAE,QAAQ,EAAE,GAAG,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC;YACvG,MAAM,IAAI,MAAM,CAAC,cAAc,EAAE,CAAC;QACpC,CAAC;QAED,OAAO;YACL,EAAE,EAAE,GAAG,CAAC,IAAI,CAAC,EAAE;YACf,KAAK,EAAE,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK;YAC5B,QAAQ,EAAE,GAAG,CAAC,IAAI,CAAC,eAAe,CAAC,QAAQ;SAC5C,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,cAAc,CAAC,KAAa,EAAE,QAAgB,EAAE,QAAiB;QACrE,MAAM,IAAI,GAAuB;YAC/B,SAAS,EAAE,eAAe,CAAC,IAAI;YAC/B,MAAM,EAAE;gBACN,KAAK;aACN;YACD,eAAe,EAAE;gBACf,QAAQ;aACT;SACF,CAAC;QAEF,IAAI,QAAQ,EAAE,CAAC;YACb,IAAI,CAAC,WAAW,GAAG;gBACjB,QAAQ,EAAE;oBACR,MAAM,EAAE;wBACN,QAAQ;qBACT;iBACF;aACF,CAAC;QACJ,CAAC;QAED,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,cAAc,CAAC;YACnD,kBAAkB,EAAE,IAAI;SACzB,CAAC,CAAC;QAEH,OAAO;YACL,EAAE,EAAE,GAAG,CAAC,IAAI,CAAC,EAAE;YACf,KAAK,EAAE,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK;YAC5B,QAAQ;SACT,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,cAAc,CAAC,EAAU;QAC7B,MAAM,IAAI,CAAC,cAAc,CAAC,cAAc,CAAC;YACvC,EAAE;SACH,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,kBAAkB,CAAC,GAAY;QACnC,MAAM,mBAAmB,GAAG,GAAG,CAAC,OAAO,CAAC,eAAe,CAAC,EAAE,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC;QAEjF,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,SAAS,CAAC;YACrD,MAAM,EAAE,GAAG,CAAC,OAAO,CAAC,MAAM;YAC1B,aAAa,EAAE,mBAAmB;SACnC,CAAC,CAAC;QAEH,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,QAAS,CAAC,eAAe,EAAE,CAAC;YAC/C,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,iCAAiC,EAAE;gBAC/C,QAAQ,EAAE,UAAU,CAAC,IAAI,CAAC,QAAS,CAAC,EAAE;aACvC,CAAC,CAAC;YACH,MAAM,IAAI,MAAM,CAAC,cAAc,EAAE,CAAC;QACpC,CAAC;QAED,IAAI,CAAC,iBAAiB,CAAC,UAAU,CAAC,IAAI,CAAC,QAAS,CAAC,eAAe,CAAC,EAAE,CAAC;YAClE,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,4DAA4D,EAAE;gBAC1E,QAAQ,EAAE,UAAU,CAAC,IAAI,CAAC,QAAS,CAAC,EAAE;aACvC,CAAC,CAAC;YACH,MAAM,IAAI,MAAM,CAAC,cAAc,EAAE,CAAC;QACpC,CAAC;QAED,OAAO;YACL,EAAE,EAAE,UAAU,CAAC,IAAI,CAAC,QAAS,CAAC,EAAE;YAChC,KAAK,EAAE,UAAU,CAAC,IAAI,CAAC,QAAS,CAAC,MAAM,CAAC,KAAK;YAC7C,QAAQ,EAAE,UAAU,CAAC,IAAI,CAAC,QAAS,CAAC,eAAe,CAAC,QAAQ;SAC7D,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,cAAc,CAAC,QAAgB,EAAE,QAAgB;QACrD,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,qBAAqB,CAAC;YAC3D,OAAO,EAAE,IAAI;SACd,CAAC,CAAC;QACH,OAAO,IAAI,CAAC,cAAc,CAAC,eAAe,CAAC;YACzC,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,EAAE;YAClB,mBAAmB,EAAE;gBACnB,QAAQ;gBACR,UAAU,EAAE,QAAQ;gBACpB,MAAM,EAAE,UAAU;aACnB;SACF,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,SAAS,CAAC,GAAY;QAC1B,MAAM,mBAAmB,GAAG,GAAG,CAAC,OAAO,CAAC,eAAe,CAAC,EAAE,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC;QAEjF,IAAI,CAAC,mBAAmB;YAAE,OAAO,IAAI,CAAC;QAEtC,OAAO,IAAI,CAAC,cAAc,CAAC,mBAAmB,CAAC;YAC7C,uBAAuB,EAAE;gBACvB,aAAa,EAAE,mBAAmB;aACnC;SACF,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,eAAe,CAAC,KAAa;QACjC,MAAM,aAAa,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,qBAAqB,CAAC;YACjE,KAAK;SACN,CAAC,CAAC;QAEH,MAAM,IAAI,GAAG,IAAI,cAAc,CAAC;YAC9B,MAAM,EAAE,aAAa,CAAC,IAAI,CAAC,MAAM;YACjC,QAAQ,EAAE,aAAa,CAAC,IAAI,CAAC,SAAS;YACtC,GAAG,EAAE,aAAa,CAAC,IAAI,CAAC,GAAG;YAC3B,GAAG,EAAE,aAAa,CAAC,IAAI,CAAC,GAAG;YAC3B,GAAG,EAAE,aAAa,CAAC,IAAI,CAAC,GAAG;YAC3B,GAAG,EAAE,aAAa,CAAC,IAAI,CAAC,GAAG;YAC3B,GAAG,EAAE,aAAa,CAAC,IAAI,CAAC,GAAG;SAC5B,CAAC,CAAC;QAEH,IAAI,CAAC;YACH,oCAAoC;YACpC,gCAAgC;YAChC,MAAM,IAAI,CAAC,QAAQ,EAAE,CAAC;QACxB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,sCAAsC,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;YACjE,MAAM,IAAI,MAAM,CAAC,cAAc,EAAE,CAAC;QACpC,CAAC;QAED,OAAO,IAAI,CAAC;IACd,CAAC;IAED,mEAAmE;IACnE,kEAAkE;IAClE,mCAAmC;IACnC,KAAK,CAAC,gBAAgB;QAIpB,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,kBAAkB,CAAC;YACvD,YAAY,EAAE;gBACZ,WAAW,EAAE,CAAC,oBAAoB,CAAC;gBACnC,QAAQ,EAAE,CAAC,SAAS,CAAC,gBAAgB,CAAC;aACvC;SACF,CAAC,CAAC;QAEH,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,aAAa,EAAE,CAAC;YACzD,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,8BAA8B,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC;YAC3D,MAAM,IAAI,MAAM,CAAC,mBAAmB,EAAE,CAAC;QACzC,CAAC;QAED,OAAO;YACL,QAAQ,EAAE,MAAM,CAAC,IAAI,CAAC,SAAS;YAC/B,YAAY,EAAE,MAAM,CAAC,IAAI,CAAC,aAAa;SACxC,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,eAAe,CAAC,EAAU;QAC9B,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,6BAA6B,CAAC;YAC1E,iCAAiC,EAAE;gBACjC,WAAW,EAAE,EAAE;gBACf,UAAU,EAAE,KAAK;aAClB;SACF,CAAC,CAAC;QAEH,OAAO,WAAW,CAAC,IAAI,CAAC;IAC1B,CAAC;CACF;AAED,MAAM,CAAC,MAAM,GAAG,GAAG,IAAI,GAAG,EAAE,CAAC"}
+{"version":3,"file":"ory.js","sourceRoot":"","sources":["../../src/lib/ory.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAsB,WAAW,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC1F,OAAO,EAAE,MAAM,EAAE,MAAM,cAAc,CAAC;AACtC,OAAO,EAAE,MAAM,EAAE,MAAM,cAAc,CAAC;AACtC,OAAO,EAAE,iBAAiB,EAAE,MAAM,qBAAqB,CAAC;AAGxD,IAAK,eAEJ;AAFD,WAAK,eAAe;IAClB,mCAAgB,CAAA;AAClB,CAAC,EAFI,eAAe,KAAf,eAAe,QAEnB;AAOD,MAAM,GAAG;IAMP;QALQ,QAAG,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;QAM1B,IAAI,CAAC,cAAc,GAAG,IAAI,WAAW,CACnC,IAAI,aAAa,CAAC;YAChB,QAAQ,EAAE,MAAM,CAAC,GAAG,CAAC,iBAAiB,CAAC;SACxC,CAAC,EACF,SAAS,EACT,iBAAiB,CAAC,MAAM,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAAC,CACjD,CAAC;QAEF,IAAI,CAAC,cAAc,GAAG,IAAI,WAAW,CACnC,IAAI,aAAa,CAAC;YAChB,QAAQ,EAAE,MAAM,CAAC,GAAG,CAAC,kBAAkB,CAAC;SACzC,CAAC,EACF,SAAS,EACT,iBAAiB,CAAC,MAAM,CAAC,GAAG,CAAC,kBAAkB,CAAC,CAAC,CAClD,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,WAAW,CAAC,EAAU;QAC1B,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,WAAW,CAAC;YAChD,EAAE;SACH,CAAC,CAAC;QAEH,OAAO;YACL,EAAE,EAAE,GAAG,CAAC,IAAI,CAAC,EAAE;YACf,KAAK,EAAE,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK;SAC7B,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,kBAAkB,CAAC,KAAa;QACpC,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,cAAc,CAAC,EAAE,qBAAqB,EAAE,KAAK,EAAE,CAAC,CAAC;QAE5F,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM;YAAE,OAAO,IAAI,CAAC;QAEvC,OAAO;YACL,EAAE,EAAE,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE;YACvB,KAAK,EAAE,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK;SACrC,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,cAAc,CAAC,KAAa,EAAE,QAAiB;QACnD,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,cAAc,CAAC,EAAE,qBAAqB,EAAE,KAAK,EAAE,CAAC,CAAC;QAE5F,IAAI,QAAQ,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;YACzB,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,kDAAkD,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;YAC7E,OAAO;gBACL,EAAE,EAAE,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE;gBACvB,KAAK,EAAE,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK;aACrC,CAAC;QACJ,CAAC;QAED,MAAM,IAAI,GAAuB;YAC/B,SAAS,EAAE,eAAe,CAAC,IAAI;YAC/B,MAAM,EAAE;gBACN,KAAK;aACN;SACF,CAAC;QAEF,IAAI,QAAQ,EAAE,CAAC;YACb,IAAI,CAAC,WAAW,GAAG;gBACjB,QAAQ,EAAE;oBACR,MAAM,EAAE;wBACN,QAAQ;qBACT;iBACF;aACF,CAAC;QACJ,CAAC;QAED,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,cAAc,CAAC;YACnD,kBAAkB,EAAE,IAAI;SACzB,CAAC,CAAC;QAEH,OAAO;YACL,EAAE,EAAE,GAAG,CAAC,IAAI,CAAC,EAAE;YACf,KAAK,EAAE,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK;SAC7B,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,cAAc,CAAC,EAAU;QAC7B,MAAM,IAAI,CAAC,cAAc,CAAC,cAAc,CAAC;YACvC,EAAE;SACH,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,kBAAkB,CAAC,GAAY;QACnC,MAAM,mBAAmB,GAAG,GAAG,CAAC,OAAO,CAAC,eAAe,CAAC,EAAE,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC;QAEjF,IAAI,CAAC;YACH,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,SAAS,CAAC;gBACrD,MAAM,EAAE,GAAG,CAAC,OAAO,CAAC,MAAM;gBAC1B,aAAa,EAAE,mBAAmB;aACnC,CAAC,CAAC;YAEH,OAAO;gBACL,EAAE,EAAE,UAAU,CAAC,IAAI,CAAC,QAAS,CAAC,EAAE;gBAChC,KAAK,EAAE,UAAU,CAAC,IAAI,CAAC,QAAS,CAAC,MAAM,CAAC,KAAK;aAC9C,CAAC;QACJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,qCAAqC,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;YAChE,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IAED,KAAK,CAAC,cAAc,CAAC,QAAgB,EAAE,QAAgB;QACrD,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,qBAAqB,CAAC;YAC3D,OAAO,EAAE,IAAI;SACd,CAAC,CAAC;QACH,OAAO,IAAI,CAAC,cAAc,CAAC,eAAe,CAAC;YACzC,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,EAAE;YAClB,mBAAmB,EAAE;gBACnB,QAAQ;gBACR,UAAU,EAAE,QAAQ;gBACpB,MAAM,EAAE,UAAU;aACnB;SACF,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,SAAS,CAAC,GAAY;QAC1B,MAAM,mBAAmB,GAAG,GAAG,CAAC,OAAO,CAAC,eAAe,CAAC,EAAE,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC;QAEjF,IAAI,CAAC,mBAAmB;YAAE,OAAO,IAAI,CAAC;QAEtC,OAAO,IAAI,CAAC,cAAc,CAAC,mBAAmB,CAAC;YAC7C,uBAAuB,EAAE;gBACvB,aAAa,EAAE,mBAAmB;aACnC;SACF,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,eAAe,CAAC,EAAU;QAC9B,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,6BAA6B,CAAC;YAC1E,iCAAiC,EAAE;gBACjC,WAAW,EAAE,EAAE;gBACf,UAAU,EAAE,KAAK;aAClB;SACF,CAAC,CAAC;QAEH,OAAO,WAAW,CAAC,IAAI,CAAC;IAC1B,CAAC;CACF;AAED,MAAM,CAAC,MAAM,GAAG,GAAG,IAAI,GAAG,EAAE,CAAC"}

package/dist/lib/permissions.d.ts

@@ -17,7 +17,9 @@ export declare enum PERMISSIONS {
     'READ_EVENTS' = "READ_EVENTS",
     'MANAGE_EVENTS' = "MANAGE_EVENTS",
     'READ_ITEMS' = "READ_ITEMS",
-    'MANAGE_ITEMS' = "MANAGE_ITEMS"
+    'MANAGE_ITEMS' = "MANAGE_ITEMS",
+    'MANAGE_SHOP_LISTINGS' = "MANAGE_SHOP_LISTINGS",
+    'MANAGE_SHOP_ORDERS' = "MANAGE_SHOP_ORDERS"
 }
 export interface IPermissionDetails {
     permission: string;

package/dist/lib/permissions.js

@@ -19,6 +19,8 @@ export var PERMISSIONS;
     PERMISSIONS["MANAGE_EVENTS"] = "MANAGE_EVENTS";
     PERMISSIONS["READ_ITEMS"] = "READ_ITEMS";
     PERMISSIONS["MANAGE_ITEMS"] = "MANAGE_ITEMS";
+    PERMISSIONS["MANAGE_SHOP_LISTINGS"] = "MANAGE_SHOP_LISTINGS";
+    PERMISSIONS["MANAGE_SHOP_ORDERS"] = "MANAGE_SHOP_ORDERS";
 })(PERMISSIONS || (PERMISSIONS = {}));
 export const PERMISSION_DETAILS = {
     [PERMISSIONS.ROOT]: {
@@ -116,5 +118,15 @@ export const PERMISSION_DETAILS = {
         friendlyName: 'Manage Items',
         description: 'Can create, update, and delete items',
     },
+    [PERMISSIONS.MANAGE_SHOP_LISTINGS]: {
+        permission: PERMISSIONS.MANAGE_SHOP_LISTINGS,
+        friendlyName: 'Manage Shop Listings',
+        description: 'Can create, update, and delete shop listings',
+    },
+    [PERMISSIONS.MANAGE_SHOP_ORDERS]: {
+        permission: PERMISSIONS.MANAGE_SHOP_ORDERS,
+        friendlyName: 'Manage Shop Orders',
+        description: 'Can view orders not belonging to the themself and perform administrative actions on them',
+    },
 };
 //# sourceMappingURL=permissions.js.map

package/dist/lib/permissions.js.map

@@ -1 +1 @@
-{"version":3,"file":"permissions.js","sourceRoot":"","sources":["../../src/lib/permissions.ts"],"names":[],"mappings":"AAAA,MAAM,CAAN,IAAY,WAoBX;AApBD,WAAY,WAAW;IACrB,4BAAe,CAAA;IACf,4CAA+B,CAAA;IAC/B,wCAA2B,CAAA;IAC3B,4CAA+B,CAAA;IAC/B,wCAA2B,CAAA;IAC3B,wDAA2C,CAAA;IAC3C,oDAAuC,CAAA;IACvC,4CAA+B,CAAA;IAC/B,gDAAmC,CAAA;IACnC,4CAA+B,CAAA;IAC/B,gDAAmC,CAAA;IACnC,kDAAqC,CAAA;IACrC,8CAAiC,CAAA;IACjC,gDAAmC,CAAA;IACnC,oDAAuC,CAAA;IACvC,0CAA6B,CAAA;IAC7B,8CAAiC,CAAA;IACjC,wCAA2B,CAAA;IAC3B,4CAA+B,CAAA;AACjC,CAAC,EApBW,WAAW,KAAX,WAAW,QAoBtB;AAQD,MAAM,CAAC,MAAM,kBAAkB,GAA4C;IACzE,CAAC,WAAW,CAAC,IAAI,CAAC,EAAE;QAClB,UAAU,EAAE,WAAW,CAAC,IAAI;QAC5B,YAAY,EAAE,aAAa;QAC3B,WAAW,EAAE,0CAA0C;KACxD;IACD,CAAC,WAAW,CAAC,YAAY,CAAC,EAAE;QAC1B,UAAU,EAAE,WAAW,CAAC,YAAY;QACpC,YAAY,EAAE,cAAc;QAC5B,WAAW,EAAE,sCAAsC;KACpD;IACD,CAAC,WAAW,CAAC,UAAU,CAAC,EAAE;QACxB,UAAU,EAAE,WAAW,CAAC,UAAU;QAClC,YAAY,EAAE,YAAY;QAC1B,WAAW,EAAE,uBAAuB;KACrC;IACD,CAAC,WAAW,CAAC,YAAY,CAAC,EAAE;QAC1B,UAAU,EAAE,WAAW,CAAC,YAAY;QACpC,YAAY,EAAE,cAAc;QAC5B,WAAW,EAAE,sCAAsC;KACpD;IACD,CAAC,WAAW,CAAC,UAAU,CAAC,EAAE;QACxB,UAAU,EAAE,WAAW,CAAC,UAAU;QAClC,YAAY,EAAE,YAAY;QAC1B,WAAW,EAAE,uBAAuB;KACrC;IACD,CAAC,WAAW,CAAC,kBAAkB,CAAC,EAAE;QAChC,UAAU,EAAE,WAAW,CAAC,kBAAkB;QAC1C,YAAY,EAAE,qBAAqB;QACnC,WAAW,EAAE,6CAA6C;KAC3D;IACD,CAAC,WAAW,CAAC,gBAAgB,CAAC,EAAE;QAC9B,UAAU,EAAE,WAAW,CAAC,gBAAgB;QACxC,YAAY,EAAE,mBAAmB;QACjC,WAAW,EAAE,8BAA8B;KAC5C;IACD,CAAC,WAAW,CAAC,YAAY,CAAC,EAAE;QAC1B,UAAU,EAAE,WAAW,CAAC,YAAY;QACpC,YAAY,EAAE,cAAc;QAC5B,WAAW,EAAE,yBAAyB;KACvC;IACD,CAAC,WAAW,CAAC,cAAc,CAAC,EAAE;QAC5B,UAAU,EAAE,WAAW,CAAC,cAAc;QACtC,YAAY,EAAE,gBAAgB;QAC9B,WAAW,EAAE,wCAAwC;KACtD;IACD,CAAC,WAAW,CAAC,YAAY,CAAC,EAAE;QAC1B,UAAU,EAAE,WAAW,CAAC,YAAY;QACpC,YAAY,EAAE,cAAc;QAC5B,WAAW,EAAE,yBAAyB;KACvC;IACD,CAAC,WAAW,CAAC,cAAc,CAAC,EAAE;QAC5B,UAAU,EAAE,WAAW,CAAC,cAAc;QACtC,YAAY,EAAE,gBAAgB;QAC9B,WAAW,EAAE,wCAAwC;KACtD;IACD,CAAC,WAAW,CAAC,eAAe,CAAC,EAAE;QAC7B,UAAU,EAAE,WAAW,CAAC,eAAe;QACvC,YAAY,EAAE,iBAAiB;QAC/B,WAAW,EAAE,qBAAqB;KACnC;IACD,CAAC,WAAW,CAAC,aAAa,CAAC,EAAE;QAC3B,UAAU,EAAE,WAAW,CAAC,aAAa;QACrC,YAAY,EAAE,eAAe;QAC7B,WAAW,EAAE,mBAAmB;KACjC;IACD,CAAC,WAAW,CAAC,cAAc,CAAC,EAAE;QAC5B,UAAU,EAAE,WAAW,CAAC,cAAc;QACtC,YAAY,EAAE,gBAAgB;QAC9B,WAAW,EAAE,oBAAoB;KAClC;IACD,CAAC,WAAW,CAAC,gBAAgB,CAAC,EAAE;QAC9B,UAAU,EAAE,WAAW,CAAC,gBAAgB;QACxC,YAAY,EAAE,kBAAkB;QAChC,WAAW,EAAE,0CAA0C;KACxD;IACD,CAAC,WAAW,CAAC,WAAW,CAAC,EAAE;QACzB,UAAU,EAAE,WAAW,CAAC,WAAW;QACnC,YAAY,EAAE,aAAa;QAC3B,WAAW,EAAE,wBAAwB;KACtC;IACD,CAAC,WAAW,CAAC,aAAa,CAAC,EAAE;QAC3B,UAAU,EAAE,WAAW,CAAC,aAAa;QACrC,YAAY,EAAE,eAAe;QAC7B,WAAW,EAAE,uCAAuC;KACrD;IACD,CAAC,WAAW,CAAC,UAAU,CAAC,EAAE;QACxB,UAAU,EAAE,WAAW,CAAC,UAAU;QAClC,YAAY,EAAE,YAAY;QAC1B,WAAW,EAAE,uBAAuB;KACrC;IACD,CAAC,WAAW,CAAC,YAAY,CAAC,EAAE;QAC1B,UAAU,EAAE,WAAW,CAAC,YAAY;QACpC,YAAY,EAAE,cAAc;QAC5B,WAAW,EAAE,sCAAsC;KACpD;CACF,CAAC"}
+{"version":3,"file":"permissions.js","sourceRoot":"","sources":["../../src/lib/permissions.ts"],"names":[],"mappings":"AAAA,MAAM,CAAN,IAAY,WAsBX;AAtBD,WAAY,WAAW;IACrB,4BAAe,CAAA;IACf,4CAA+B,CAAA;IAC/B,wCAA2B,CAAA;IAC3B,4CAA+B,CAAA;IAC/B,wCAA2B,CAAA;IAC3B,wDAA2C,CAAA;IAC3C,oDAAuC,CAAA;IACvC,4CAA+B,CAAA;IAC/B,gDAAmC,CAAA;IACnC,4CAA+B,CAAA;IAC/B,gDAAmC,CAAA;IACnC,kDAAqC,CAAA;IACrC,8CAAiC,CAAA;IACjC,gDAAmC,CAAA;IACnC,oDAAuC,CAAA;IACvC,0CAA6B,CAAA;IAC7B,8CAAiC,CAAA;IACjC,wCAA2B,CAAA;IAC3B,4CAA+B,CAAA;IAC/B,4DAA+C,CAAA;IAC/C,wDAA2C,CAAA;AAC7C,CAAC,EAtBW,WAAW,KAAX,WAAW,QAsBtB;AAQD,MAAM,CAAC,MAAM,kBAAkB,GAA4C;IACzE,CAAC,WAAW,CAAC,IAAI,CAAC,EAAE;QAClB,UAAU,EAAE,WAAW,CAAC,IAAI;QAC5B,YAAY,EAAE,aAAa;QAC3B,WAAW,EAAE,0CAA0C;KACxD;IACD,CAAC,WAAW,CAAC,YAAY,CAAC,EAAE;QAC1B,UAAU,EAAE,WAAW,CAAC,YAAY;QACpC,YAAY,EAAE,cAAc;QAC5B,WAAW,EAAE,sCAAsC;KACpD;IACD,CAAC,WAAW,CAAC,UAAU,CAAC,EAAE;QACxB,UAAU,EAAE,WAAW,CAAC,UAAU;QAClC,YAAY,EAAE,YAAY;QAC1B,WAAW,EAAE,uBAAuB;KACrC;IACD,CAAC,WAAW,CAAC,YAAY,CAAC,EAAE;QAC1B,UAAU,EAAE,WAAW,CAAC,YAAY;QACpC,YAAY,EAAE,cAAc;QAC5B,WAAW,EAAE,sCAAsC;KACpD;IACD,CAAC,WAAW,CAAC,UAAU,CAAC,EAAE;QACxB,UAAU,EAAE,WAAW,CAAC,UAAU;QAClC,YAAY,EAAE,YAAY;QAC1B,WAAW,EAAE,uBAAuB;KACrC;IACD,CAAC,WAAW,CAAC,kBAAkB,CAAC,EAAE;QAChC,UAAU,EAAE,WAAW,CAAC,kBAAkB;QAC1C,YAAY,EAAE,qBAAqB;QACnC,WAAW,EAAE,6CAA6C;KAC3D;IACD,CAAC,WAAW,CAAC,gBAAgB,CAAC,EAAE;QAC9B,UAAU,EAAE,WAAW,CAAC,gBAAgB;QACxC,YAAY,EAAE,mBAAmB;QACjC,WAAW,EAAE,8BAA8B;KAC5C;IACD,CAAC,WAAW,CAAC,YAAY,CAAC,EAAE;QAC1B,UAAU,EAAE,WAAW,CAAC,YAAY;QACpC,YAAY,EAAE,cAAc;QAC5B,WAAW,EAAE,yBAAyB;KACvC;IACD,CAAC,WAAW,CAAC,cAAc,CAAC,EAAE;QAC5B,UAAU,EAAE,WAAW,CAAC,cAAc;QACtC,YAAY,EAAE,gBAAgB;QAC9B,WAAW,EAAE,wCAAwC;KACtD;IACD,CAAC,WAAW,CAAC,YAAY,CAAC,EAAE;QAC1B,UAAU,EAAE,WAAW,CAAC,YAAY;QACpC,YAAY,EAAE,cAAc;QAC5B,WAAW,EAAE,yBAAyB;KACvC;IACD,CAAC,WAAW,CAAC,cAAc,CAAC,EAAE;QAC5B,UAAU,EAAE,WAAW,CAAC,cAAc;QACtC,YAAY,EAAE,gBAAgB;QAC9B,WAAW,EAAE,wCAAwC;KACtD;IACD,CAAC,WAAW,CAAC,eAAe,CAAC,EAAE;QAC7B,UAAU,EAAE,WAAW,CAAC,eAAe;QACvC,YAAY,EAAE,iBAAiB;QAC/B,WAAW,EAAE,qBAAqB;KACnC;IACD,CAAC,WAAW,CAAC,aAAa,CAAC,EAAE;QAC3B,UAAU,EAAE,WAAW,CAAC,aAAa;QACrC,YAAY,EAAE,eAAe;QAC7B,WAAW,EAAE,mBAAmB;KACjC;IACD,CAAC,WAAW,CAAC,cAAc,CAAC,EAAE;QAC5B,UAAU,EAAE,WAAW,CAAC,cAAc;QACtC,YAAY,EAAE,gBAAgB;QAC9B,WAAW,EAAE,oBAAoB;KAClC;IACD,CAAC,WAAW,CAAC,gBAAgB,CAAC,EAAE;QAC9B,UAAU,EAAE,WAAW,CAAC,gBAAgB;QACxC,YAAY,EAAE,kBAAkB;QAChC,WAAW,EAAE,0CAA0C;KACxD;IACD,CAAC,WAAW,CAAC,WAAW,CAAC,EAAE;QACzB,UAAU,EAAE,WAAW,CAAC,WAAW;QACnC,YAAY,EAAE,aAAa;QAC3B,WAAW,EAAE,wBAAwB;KACtC;IACD,CAAC,WAAW,CAAC,aAAa,CAAC,EAAE;QAC3B,UAAU,EAAE,WAAW,CAAC,aAAa;QACrC,YAAY,EAAE,eAAe;QAC7B,WAAW,EAAE,uCAAuC;KACrD;IACD,CAAC,WAAW,CAAC,UAAU,CAAC,EAAE;QACxB,UAAU,EAAE,WAAW,CAAC,UAAU;QAClC,YAAY,EAAE,YAAY;QAC1B,WAAW,EAAE,uBAAuB;KACrC;IACD,CAAC,WAAW,CAAC,YAAY,CAAC,EAAE;QAC1B,UAAU,EAAE,WAAW,CAAC,YAAY;QACpC,YAAY,EAAE,cAAc;QAC5B,WAAW,EAAE,sCAAsC;KACpD;IACD,CAAC,WAAW,CAAC,oBAAoB,CAAC,EAAE;QAClC,UAAU,EAAE,WAAW,CAAC,oBAAoB;QAC5C,YAAY,EAAE,sBAAsB;QACpC,WAAW,EAAE,8CAA8C;KAC5D;IACD,CAAC,WAAW,CAAC,kBAAkB,CAAC,EAAE;QAChC,UAAU,EAAE,WAAW,CAAC,kBAAkB;QAC1C,YAAY,EAAE,oBAAoB;QAClC,WAAW,EAAE,0FAA0F;KACxG;CACF,CAAC"}

package/dist/main.d.ts

@@ -1,3 +1,3 @@
 export { IAuthConfig, configSchema as authConfigSchema } from './config.js';
-export { ory, AUDIENCES } from './lib/ory.js';
+export { ory } from './lib/ory.js';
 export * from './lib/permissions.js';

package/dist/main.js

@@ -1,4 +1,4 @@
 export { configSchema as authConfigSchema } from './config.js';
-export { ory, AUDIENCES } from './lib/ory.js';
+export { ory } from './lib/ory.js';
 export * from './lib/permissions.js';
 //# sourceMappingURL=main.js.map

package/dist/main.js.map

@@ -1 +1 @@
-{"version":3,"file":"main.js","sourceRoot":"","sources":["../src/main.ts"],"names":[],"mappings":"AAAA,OAAO,EAAe,YAAY,IAAI,gBAAgB,EAAE,MAAM,aAAa,CAAC;AAE5E,OAAO,EAAE,GAAG,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AAC9C,cAAc,sBAAsB,CAAC"}
+{"version":3,"file":"main.js","sourceRoot":"","sources":["../src/main.ts"],"names":[],"mappings":"AAAA,OAAO,EAAe,YAAY,IAAI,gBAAgB,EAAE,MAAM,aAAa,CAAC;AAE5E,OAAO,EAAE,GAAG,EAAE,MAAM,cAAc,CAAC;AACnC,cAAc,sBAAsB,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@takaro/auth",
-  "version": "0.0.1",
+  "version": "0.0.4",
   "description": "An opinionated auth handler",
   "main": "dist/main.js",
   "types": "dist/main.d.ts",
@@ -19,7 +19,6 @@
     "convict": "^6.2.3"
   },
   "devDependencies": {
-    "@takaro/test": "0.0.1",
     "@types/convict": "^6.1.1"
   }
-}
+}

package/src/config.ts

@@ -5,12 +5,7 @@ export interface IAuthConfig extends IBaseConfig {
     publicUrl: string;
     adminUrl: string;
   };
-  hydra: {
-    publicUrl: string;
-    adminUrl: string;
-    adminClientId: string;
-    adminClientSecret: string;
-  };
+  adminClientSecret: string;
   takaro: {
     url: string;
   };
@@ -31,31 +26,11 @@ export const configSchema = {
       env: 'KRATOS_ADMIN_URL',
     },
   },
-  hydra: {
-    publicUrl: {
-      doc: 'The URL of the Takaro OAuth server',
-      format: String,
-      default: 'http://hydra:4444',
-      env: 'TAKARO_OAUTH_HOST',
-    },
-    adminUrl: {
-      doc: 'The URL of the Takaro OAuth admin server',
-      format: String,
-      default: 'http://hydra:4445',
-      env: 'TAKARO_OAUTH_ADMIN_HOST',
-    },
-    adminClientId: {
-      doc: 'The client ID to use when authenticating with the Takaro server',
-      format: String,
-      default: null,
-      env: 'ADMIN_CLIENT_ID',
-    },
-    adminClientSecret: {
-      doc: 'The client secret to use when authenticating with the Takaro server',
-      format: String,
-      default: null,
-      env: 'ADMIN_CLIENT_SECRET',
-    },
+  adminClientSecret: {
+    doc: 'The client secret to use when authenticating with the Takaro server',
+    format: String,
+    default: null,
+    env: 'ADMIN_CLIENT_SECRET',
   },
   takaro: {
     url: {

package/src/lib/__tests__/ory.integration.test.ts

@@ -7,9 +7,7 @@ describe('Ory', () => {
     // First, create a bunch of identities
     const totalIdentities = 150;
     const identities = await Promise.all(
-      Array.from({ length: totalIdentities }).map(() =>
-        ory.createIdentity(faker.internet.email(), 'password', 'domainId')
-      )
+      Array.from({ length: totalIdentities }).map(() => ory.createIdentity(faker.internet.email(), 'password')),
     );
 
     // Fetch the first one by ID
@@ -18,9 +16,11 @@ describe('Ory', () => {
     expect(firstIdentity.email).to.be.eq(identities[0].email);
 
     // Delete them all
-    await ory.deleteIdentitiesForDomain('domainId');
+    await Promise.all(identities.map((i) => ory.deleteIdentity(i.id)));
 
     // Make sure they're gone
-    expect(ory.getIdentity(identities[0].id)).to.eventually.be.rejectedWith('Not Found');
+    await expect(ory.getIdentity(identities[0].id)).to.eventually.be.rejectedWith(
+      'Request failed with status code 404',
+    );
   });
 });

package/src/lib/ory.ts

@@ -1,52 +1,21 @@
-import { Configuration, CreateIdentityBody, FrontendApi, IdentityApi, OAuth2Api } from '@ory/client';
+import { Configuration, CreateIdentityBody, FrontendApi, IdentityApi } from '@ory/client';
 import { config } from '../config.js';
-import { errors, logger, TakaroDTO } from '@takaro/util';
+import { logger } from '@takaro/util';
 import { createAxiosClient } from './oryAxiosClient.js';
-import { paginateIdentities } from './paginationHelpers.js';
 import { Request } from 'express';
-import { IsBoolean, IsNumber, IsString } from 'class-validator';
 
 enum IDENTITY_SCHEMA {
   USER = 'user_v0',
 }
 
-export enum AUDIENCES {
-  // Used for various sysadmin tasks in the Takaro API
-  TAKARO_API_ADMIN = 't:api:admin',
-}
-
 export interface ITakaroIdentity {
   id: string;
   email: string;
-  domainId: string;
-}
-
-export class TakaroTokenDTO extends TakaroDTO<TakaroTokenDTO> {
-  @IsBoolean()
-  active: boolean;
-  @IsString()
-  clientId: string;
-  @IsNumber()
-  exp: number;
-  @IsNumber()
-  iat: number;
-  @IsString()
-  iss: string;
-  @IsString()
-  sub: string;
-  @IsString({ each: true })
-  aud: string[];
-}
-
-function metadataTypeguard(metadata: unknown): metadata is { domainId: string } {
-  return typeof metadata === 'object' && metadata !== null && 'domainId' in metadata;
 }
 
 class Ory {
-  private authToken: string | null = null;
   private log = logger('ory');
 
-  private adminClient: OAuth2Api;
   private identityClient: IdentityApi;
   private frontendClient: FrontendApi;
 
@@ -56,7 +25,7 @@ class Ory {
         basePath: config.get('kratos.adminUrl'),
       }),
       undefined,
-      createAxiosClient(config.get('kratos.adminUrl'))
+      createAxiosClient(config.get('kratos.adminUrl')),
     );
 
     this.frontendClient = new FrontendApi(
@@ -64,33 +33,8 @@ class Ory {
         basePath: config.get('kratos.publicUrl'),
       }),
       undefined,
-      createAxiosClient(config.get('kratos.publicUrl'))
+      createAxiosClient(config.get('kratos.publicUrl')),
     );
-    this.adminClient = new OAuth2Api(
-      new Configuration({
-        basePath: config.get('hydra.adminUrl'),
-      }),
-      undefined,
-      createAxiosClient(config.get('hydra.adminUrl'))
-    );
-  }
-
-  get OAuth2URL() {
-    return config.get('hydra.publicUrl');
-  }
-
-  async deleteIdentitiesForDomain(domainId: string) {
-    for await (const identities of paginateIdentities(this.identityClient)) {
-      for (const identity of identities) {
-        if (
-          identity.metadata_public &&
-          metadataTypeguard(identity.metadata_public) &&
-          identity.metadata_public.domainId === domainId
-        ) {
-          await this.deleteIdentity(identity.id);
-        }
-      }
-    }
   }
 
   async getIdentity(id: string): Promise<ITakaroIdentity> {
@@ -98,34 +42,39 @@ class Ory {
       id,
     });
 
-    if (!res.data.metadata_public) {
-      this.log.warn('Identity has no metadata_public', {
-        identity: res.data.id,
-      });
-      throw new errors.ForbiddenError();
-    }
-
-    if (!metadataTypeguard(res.data.metadata_public)) {
-      this.log.warn('Identity metadata_public is not of type {domainId: string}', { identity: res.data.id });
-      throw new errors.ForbiddenError();
-    }
-
     return {
       id: res.data.id,
       email: res.data.traits.email,
-      domainId: res.data.metadata_public.domainId,
     };
   }
 
-  async createIdentity(email: string, domainId: string, password?: string): Promise<ITakaroIdentity> {
+  async getIdentityByEmail(email: string): Promise<ITakaroIdentity | null> {
+    const identity = await this.identityClient.listIdentities({ credentialsIdentifier: email });
+
+    if (!identity.data.length) return null;
+
+    return {
+      id: identity.data[0].id,
+      email: identity.data[0].traits.email,
+    };
+  }
+
+  async createIdentity(email: string, password?: string): Promise<ITakaroIdentity> {
+    const existing = await this.identityClient.listIdentities({ credentialsIdentifier: email });
+
+    if (existing.data.length) {
+      this.log.warn('Identity already exists, returning existing one.', { email });
+      return {
+        id: existing.data[0].id,
+        email: existing.data[0].traits.email,
+      };
+    }
+
     const body: CreateIdentityBody = {
       schema_id: IDENTITY_SCHEMA.USER,
       traits: {
         email,
       },
-      metadata_public: {
-        domainId,
-      },
     };
 
     if (password) {
@@ -145,7 +94,6 @@ class Ory {
     return {
       id: res.data.id,
       email: res.data.traits.email,
-      domainId,
     };
   }
 
@@ -155,33 +103,23 @@ class Ory {
     });
   }
 
-  async getIdentityFromReq(req: Request): Promise<ITakaroIdentity> {
+  async getIdentityFromReq(req: Request): Promise<ITakaroIdentity | null> {
     const tokenFromAuthHeader = req.headers['authorization']?.replace('Bearer ', '');
 
-    const sessionRes = await this.frontendClient.toSession({
-      cookie: req.headers.cookie,
-      xSessionToken: tokenFromAuthHeader,
-    });
-
-    if (!sessionRes.data.identity!.metadata_public) {
-      this.log.warn('Identity has no metadata_public', {
-        identity: sessionRes.data.identity!.id,
+    try {
+      const sessionRes = await this.frontendClient.toSession({
+        cookie: req.headers.cookie,
+        xSessionToken: tokenFromAuthHeader,
       });
-      throw new errors.ForbiddenError();
-    }
 
-    if (!metadataTypeguard(sessionRes.data.identity!.metadata_public)) {
-      this.log.warn('Identity metadata_public is not of type {domainId: string}', {
-        identity: sessionRes.data.identity!.id,
-      });
-      throw new errors.ForbiddenError();
+      return {
+        id: sessionRes.data.identity!.id,
+        email: sessionRes.data.identity!.traits.email,
+      };
+    } catch (error) {
+      this.log.warn('Could not get identity from request', { error });
+      return null;
     }
-
-    return {
-      id: sessionRes.data.identity!.id,
-      email: sessionRes.data.identity!.traits.email,
-      domainId: sessionRes.data.identity!.metadata_public.domainId,
-    };
   }
 
   async submitApiLogin(username: string, password: string) {
@@ -210,58 +148,6 @@ class Ory {
     });
   }
 
-  async introspectToken(token: string): Promise<TakaroTokenDTO> {
-    const introspectRes = await this.adminClient.introspectOAuth2Token({
-      token,
-    });
-
-    const data = new TakaroTokenDTO({
-      active: introspectRes.data.active,
-      clientId: introspectRes.data.client_id,
-      aud: introspectRes.data.aud,
-      exp: introspectRes.data.exp,
-      iat: introspectRes.data.iat,
-      iss: introspectRes.data.iss,
-      sub: introspectRes.data.sub,
-    });
-
-    try {
-      // Check for correctness of the data
-      // DOES NOT CHECK FOR EXPIRATION
-      await data.validate();
-    } catch (error) {
-      this.log.warn('Introspected token has invalid shape', { error });
-      throw new errors.ForbiddenError();
-    }
-
-    return data;
-  }
-
-  // Currently, this is only used for creating the admin-auth client.
-  // ...In the future we should make this more generic and allow for
-  // creating any API client perhaps?
-  async createOIDCClient(): Promise<{
-    clientId: string;
-    clientSecret: string;
-  }> {
-    const client = await this.adminClient.createOAuth2Client({
-      oAuth2Client: {
-        grant_types: ['client_credentials'],
-        audience: [AUDIENCES.TAKARO_API_ADMIN],
-      },
-    });
-
-    if (!client.data.client_id || !client.data.client_secret) {
-      this.log.error('Could not create OIDC client', { client });
-      throw new errors.InternalServerError();
-    }
-
-    return {
-      clientId: client.data.client_id,
-      clientSecret: client.data.client_secret,
-    };
-  }
-
   async getRecoveryFlow(id: string) {
     const recoveryRes = await this.identityClient.createRecoveryLinkForIdentity({
       createRecoveryLinkForIdentityBody: {

package/src/lib/oryAxiosClient.ts

@@ -35,7 +35,7 @@ export function createAxiosClient(baseURL: string) {
           status: response.status,
           method: response.request.method,
           url: response.request.url,
-        }
+        },
       );
 
       return response;
@@ -61,7 +61,7 @@ export function createAxiosClient(baseURL: string) {
       }
 
       return Promise.reject(error);
-    }
+    },
   );
 
   return client;

package/src/lib/permissions.ts

@@ -18,6 +18,8 @@ export enum PERMISSIONS {
   'MANAGE_EVENTS' = 'MANAGE_EVENTS',
   'READ_ITEMS' = 'READ_ITEMS',
   'MANAGE_ITEMS' = 'MANAGE_ITEMS',
+  'MANAGE_SHOP_LISTINGS' = 'MANAGE_SHOP_LISTINGS',
+  'MANAGE_SHOP_ORDERS' = 'MANAGE_SHOP_ORDERS',
 }
 
 export interface IPermissionDetails {
@@ -122,4 +124,14 @@ export const PERMISSION_DETAILS: Record<PERMISSIONS, IPermissionDetails> = {
     friendlyName: 'Manage Items',
     description: 'Can create, update, and delete items',
   },
+  [PERMISSIONS.MANAGE_SHOP_LISTINGS]: {
+    permission: PERMISSIONS.MANAGE_SHOP_LISTINGS,
+    friendlyName: 'Manage Shop Listings',
+    description: 'Can create, update, and delete shop listings',
+  },
+  [PERMISSIONS.MANAGE_SHOP_ORDERS]: {
+    permission: PERMISSIONS.MANAGE_SHOP_ORDERS,
+    friendlyName: 'Manage Shop Orders',
+    description: 'Can view orders not belonging to the themself and perform administrative actions on them',
+  },
 };

package/src/main.ts

@@ -1,4 +1,4 @@
 export { IAuthConfig, configSchema as authConfigSchema } from './config.js';
 
-export { ory, AUDIENCES } from './lib/ory.js';
+export { ory } from './lib/ory.js';
 export * from './lib/permissions.js';

package/dist/lib/paginationHelpers.d.ts

@@ -1,2 +0,0 @@
-import { IdentityApi } from '@ory/client';
-export declare function paginateIdentities(adminClient: IdentityApi, page?: undefined, perPage?: number): AsyncGenerator<import("@ory/client").Identity[], void, unknown>;

package/dist/lib/paginationHelpers.js

@@ -1,38 +0,0 @@
-import { parse, URLSearchParams } from 'url';
-export async function* paginateIdentities(adminClient, page = undefined, perPage = 100) {
-    let nextPage = page;
-    while (true) {
-        const response = await adminClient.listIdentities({
-            page: nextPage,
-            perPage,
-        });
-        if (response.data.length === 0) {
-            // Stop the iteration if there are no more items
-            break;
-        }
-        yield response.data;
-        // Parse Link header
-        const linkHeader = response.headers.link;
-        const links = linkHeader.split(',');
-        const nextLink = links.find((link) => link.includes('rel="next"'));
-        if (!nextLink) {
-            break;
-        }
-        // Extract the 'next' page URL
-        const match = nextLink.match(/<(.*)>/);
-        const url = match ? match[1] : undefined;
-        if (!url) {
-            break;
-        }
-        const parsedUrl = parse(url);
-        const params = new URLSearchParams(parsedUrl.query || '');
-        const nextPageToken = params.get('page');
-        if (nextPageToken) {
-            nextPage = parseInt(nextPageToken, 10);
-        }
-        else {
-            break; // stop if there is no next page
-        }
-    }
-}
-//# sourceMappingURL=paginationHelpers.js.map

package/dist/lib/paginationHelpers.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"paginationHelpers.js","sourceRoot":"","sources":["../../src/lib/paginationHelpers.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,KAAK,EAAE,eAAe,EAAE,MAAM,KAAK,CAAC;AAE7C,MAAM,CAAC,KAAK,SAAS,CAAC,CAAC,kBAAkB,CAAC,WAAwB,EAAE,IAAI,GAAG,SAAS,EAAE,OAAO,GAAG,GAAG;IACjG,IAAI,QAAQ,GAAuB,IAAI,CAAC;IAExC,OAAO,IAAI,EAAE,CAAC;QACZ,MAAM,QAAQ,GAAG,MAAM,WAAW,CAAC,cAAc,CAAC;YAChD,IAAI,EAAE,QAAQ;YACd,OAAO;SACR,CAAC,CAAC;QAEH,IAAI,QAAQ,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC/B,gDAAgD;YAChD,MAAM;QACR,CAAC;QAED,MAAM,QAAQ,CAAC,IAAI,CAAC;QAEpB,oBAAoB;QACpB,MAAM,UAAU,GAAG,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC;QACzC,MAAM,KAAK,GAAG,UAAU,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QACpC,MAAM,QAAQ,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,IAAY,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC,CAAC;QAE3E,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,MAAM;QACR,CAAC;QAED,8BAA8B;QAC9B,MAAM,KAAK,GAAG,QAAQ,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;QACvC,MAAM,GAAG,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QAEzC,IAAI,CAAC,GAAG,EAAE,CAAC;YACT,MAAM;QACR,CAAC;QAED,MAAM,SAAS,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC;QAC7B,MAAM,MAAM,GAAG,IAAI,eAAe,CAAC,SAAS,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC;QAC1D,MAAM,aAAa,GAAG,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QACzC,IAAI,aAAa,EAAE,CAAC;YAClB,QAAQ,GAAG,QAAQ,CAAC,aAAa,EAAE,EAAE,CAAC,CAAC;QACzC,CAAC;aAAM,CAAC;YACN,MAAM,CAAC,gCAAgC;QACzC,CAAC;IACH,CAAC;AACH,CAAC"}

package/src/lib/paginationHelpers.ts

@@ -1,46 +0,0 @@
-import { IdentityApi } from '@ory/client';
-import { parse, URLSearchParams } from 'url';
-
-export async function* paginateIdentities(adminClient: IdentityApi, page = undefined, perPage = 100) {
-  let nextPage: number | undefined = page;
-
-  while (true) {
-    const response = await adminClient.listIdentities({
-      page: nextPage,
-      perPage,
-    });
-
-    if (response.data.length === 0) {
-      // Stop the iteration if there are no more items
-      break;
-    }
-
-    yield response.data;
-
-    // Parse Link header
-    const linkHeader = response.headers.link;
-    const links = linkHeader.split(',');
-    const nextLink = links.find((link: string) => link.includes('rel="next"'));
-
-    if (!nextLink) {
-      break;
-    }
-
-    // Extract the 'next' page URL
-    const match = nextLink.match(/<(.*)>/);
-    const url = match ? match[1] : undefined;
-
-    if (!url) {
-      break;
-    }
-
-    const parsedUrl = parse(url);
-    const params = new URLSearchParams(parsedUrl.query || '');
-    const nextPageToken = params.get('page');
-    if (nextPageToken) {
-      nextPage = parseInt(nextPageToken, 10);
-    } else {
-      break; // stop if there is no next page
-    }
-  }
-}