@things-factory/oauth2-client 10.0.18 → 10.1.0

package/dist-server/service/oauth2-client/oauth2-client-mutation.js

@@ -6,32 +6,19 @@ const client_oauth2_1 = tslib_1.__importDefault(require("client-oauth2"));
 const crypto_1 = tslib_1.__importDefault(require("crypto"));
 const type_graphql_1 = require("type-graphql");
 const typeorm_1 = require("typeorm");
-const env_1 = require("@things-factory/env");
+const auth_base_1 = require("@things-factory/auth-base");
 const oauth2_client_1 = require("./oauth2-client");
 const oauth2_client_type_1 = require("./oauth2-client-type");
-const protocol = env_1.config.get('protocol');
 let Oauth2ClientMutation = class Oauth2ClientMutation {
     async createOauth2Client(oauth2Client, context) {
         const { domain, user, tx } = context.state;
-        const originalProtocol = context.headers['x-forwarded-proto'];
-        const originalHost = context.headers['x-forwarded-host'];
-        const originalPort = context.headers['x-forwarded-port'];
-        if (originalProtocol && originalHost) {
-            var url = new URL(`${originalProtocol}://${originalHost}`);
-            if (originalPort) {
-                url.port = originalPort;
-            }
-        }
-        else {
-            var url = new URL(context.request.origin);
-        }
-        if (protocol) {
-            url.protocol = protocol;
-        }
-        url.pathname = '/oauth2-client/callback';
         return await tx.getRepository(oauth2_client_1.Oauth2Client).save({
             ...oauth2Client,
-            callbackUrl: oauth2Client.callbackUrl || url.href,
+            /*
+             * 주소는 auth-base 가 만든다 — 이 열두 줄이 그쪽 buildAuthURL 과 **똑같이 베껴져**
+             * 있었다. 한쪽만 고치는 일이 실제로 났다(request.origin, 2026-09-04).
+             */
+            callbackUrl: oauth2Client.callbackUrl || (0, auth_base_1.buildAuthURL)('/oauth2-client/callback', context),
             domain,
             creator: user,
             updater: user

package/dist-server/service/oauth2-client/oauth2-client-mutation.js.map

@@ -1 +1 @@
-{"version":3,"file":"oauth2-client-mutation.js","sourceRoot":"","sources":["../../../server/service/oauth2-client/oauth2-client-mutation.ts"],"names":[],"mappings":";;;;AAAA,0EAAwC;AACxC,4DAA2B;AAC3B,+CAAsE;AACtE,qCAA4B;AAE5B,6CAA4C;AAE5C,mDAA8C;AAC9C,6DAAyE;AAEzE,MAAM,QAAQ,GAAW,YAAM,CAAC,GAAG,CAAC,UAAU,CAAC,CAAA;AAGxC,IAAM,oBAAoB,GAA1B,MAAM,oBAAoB;IAGzB,AAAN,KAAK,CAAC,kBAAkB,CACD,YAA6B,EAC3C,OAAwB;QAE/B,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE,EAAE,GAAG,OAAO,CAAC,KAAK,CAAA;QAE1C,MAAM,gBAAgB,GAAG,OAAO,CAAC,OAAO,CAAC,mBAAmB,CAAC,CAAA;QAC7D,MAAM,YAAY,GAAG,OAAO,CAAC,OAAO,CAAC,kBAAkB,CAAC,CAAA;QACxD,MAAM,YAAY,GAAG,OAAO,CAAC,OAAO,CAAC,kBAAkB,CAAC,CAAA;QAExD,IAAI,gBAAgB,IAAI,YAAY,EAAE,CAAC;YACrC,IAAI,GAAG,GAAQ,IAAI,GAAG,CAAC,GAAG,gBAAgB,MAAM,YAAY,EAAE,CAAC,CAAA;YAC/D,IAAI,YAAY,EAAE,CAAC;gBACjB,GAAG,CAAC,IAAI,GAAG,YAAY,CAAA;YACzB,CAAC;QACH,CAAC;aAAM,CAAC;YACN,IAAI,GAAG,GAAQ,IAAI,GAAG,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,CAAA;QAChD,CAAC;QAED,IAAI,QAAQ,EAAE,CAAC;YACb,GAAG,CAAC,QAAQ,GAAG,QAAQ,CAAA;QACzB,CAAC;QAED,GAAG,CAAC,QAAQ,GAAG,yBAAyB,CAAA;QAExC,OAAO,MAAM,EAAE,CAAC,aAAa,CAAC,4BAAY,CAAC,CAAC,IAAI,CAAC;YAC/C,GAAG,YAAY;YACf,WAAW,EAAE,YAAY,CAAC,WAAW,IAAI,GAAG,CAAC,IAAI;YACjD,MAAM;YACN,OAAO,EAAE,IAAI;YACb,OAAO,EAAE,IAAI;SACd,CAAC,CAAA;IACJ,CAAC;IAIK,AAAN,KAAK,CAAC,kBAAkB,CACX,EAAU,EACP,KAAwB,EAC/B,OAAwB;QAE/B,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE,EAAE,GAAG,OAAO,CAAC,KAAK,CAAA;QAE1C,MAAM,UAAU,GAAG,EAAE,CAAC,aAAa,CAAC,4BAAY,CAAC,CAAA;QACjD,MAAM,YAAY,GAAG,MAAM,UAAU,CAAC,OAAO,CAAC;YAC5C,KAAK,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,MAAM,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE;SACzC,CAAC,CAAA;QAEF,OAAO,MAAM,UAAU,CAAC,IAAI,CAAC;YAC3B,GAAG,YAAY;YACf,GAAG,KAAK;YACR,OAAO,EAAE,IAAI;SACd,CAAC,CAAA;IACJ,CAAC;IAIK,AAAN,KAAK,CAAC,kBAAkB,CAAY,EAAU,EAAS,OAAwB;QAC7E,MAAM,EAAE,MAAM,EAAE,EAAE,EAAE,GAAG,OAAO,CAAC,KAAK,CAAA;QAEpC,MAAM,EAAE,CAAC,aAAa,CAAC,4BAAY,CAAC,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,MAAM,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,CAAA;QAE9E,OAAO,IAAI,CAAA;IACb,CAAC;IAIK,AAAN,KAAK,CAAC,mBAAmB,CACO,GAAa,EACpC,OAAwB;QAE/B,MAAM,EAAE,MAAM,EAAE,EAAE,EAAE,GAAG,OAAO,CAAC,KAAK,CAAA;QAEpC,MAAM,EAAE,CAAC,aAAa,CAAC,4BAAY,CAAC,CAAC,MAAM,CAAC;YAC1C,MAAM,EAAE,EAAE,EAAE,EAAE,MAAM,CAAC,EAAE,EAAE;YACzB,EAAE,EAAE,IAAA,YAAE,EAAC,GAAG,CAAC;SACZ,CAAC,CAAA;QAEF,OAAO,IAAI,CAAA;IACb,CAAC;IAIK,AAAN,KAAK,CAAC,mBAAmB,CAC4B,aAAkC,EAC9E,OAAwB;QAE/B,MAAM,EAAE,MAAM,EAAE,EAAE,EAAE,GAAG,OAAO,CAAC,KAAK,CAAA;QAEpC,MAAM,OAAO,CAAC,GAAG,CACf,aAAa,CAAC,GAAG,CAAC,KAAK,EAAE,YAA+B,EAAE,EAAE;YAC1D,MAAM,mBAAmB,GAAiB,MAAM,EAAE,CAAC,aAAa,CAAC,4BAAY,CAAC,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,GAAG,YAAY,EAAE,CAAC,CAAA;QAClH,CAAC,CAAC,CACH,CAAA;QAED,OAAO,IAAI,CAAA;IACb,CAAC;IAIK,AAAN,KAAK,CAAC,gBAAgB,CAAY,EAAU,EAAS,OAAwB;QAC3E,MAAM,EAAE,EAAE,EAAE,GAAG,OAAO,CAAC,KAAK,CAAA;QAC5B,MAAM,UAAU,GAAG,EAAE,CAAC,aAAa,CAAC,4BAAY,CAAC,CAAA;QACjD,MAAM,YAAY,GAAG,MAAM,UAAU,CAAC,SAAS,CAAC,EAAE,EAAE,EAAE,CAAC,CAAA;QAEvD,MAAM,EACJ,SAAS,EACT,QAAQ,EACR,YAAY,EACZ,WAAW,EACX,cAAc,EAAE,cAAc,EAC9B,OAAO,EAAE,gBAAgB,EACzB,MAAM,EACP,GAAG,YAAY,CAAA;QAEhB,IAAI,SAAS,KAAK,MAAM,EAAE,CAAC;YACzB,MAAM,IAAI,KAAK,CAAC,2BAA2B,SAAS,EAAE,CAAC,CAAA;QACzD,CAAC;QAED,MAAM,KAAK,GAAG,gBAAM,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAA;QACpD,MAAM,UAAU,CAAC,IAAI,CAAC;YACpB,GAAG,YAAY;YACf,KAAK;SACN,CAAC,CAAA;QAEF,IAAI,IAAI,GAAG,IAAI,uBAAY,CAAC;YAC1B,QAAQ;YACR,YAAY;YACZ,cAAc;YACd,gBAAgB;YAChB,WAAW,EAAE,WAAW,IAAI,GAAG,OAAO,CAAC,MAAM,yBAAyB;YACtE,MAAM,EAAE,MAAM,EAAE,KAAK,CAAC,GAAG,CAAC,IAAI,EAAE;YAChC,KAAK;SACN,CAAC,CAAA;QAEF,OAAO,MAAO,IAAI,CAAC,SAAS,CAAS,CAAC,MAAM,EAAE,CAAA;IAChD,CAAC;IAIK,AAAN,KAAK,CAAC,wBAAwB,CAAY,EAAU,EAAS,OAAwB;QACnF,MAAM,EAAE,EAAE,EAAE,GAAG,OAAO,CAAC,KAAK,CAAA;QAC5B,MAAM,UAAU,GAAG,EAAE,CAAC,aAAa,CAAC,4BAAY,CAAC,CAAA;QACjD,MAAM,YAAY,GAAG,MAAM,UAAU,CAAC,SAAS,CAAC,EAAE,EAAE,EAAE,CAAC,CAAA;QAEvD,MAAM,EACJ,QAAQ,EACR,YAAY,EACZ,cAAc,EAAE,cAAc,EAC9B,OAAO,EAAE,gBAAgB,EACzB,MAAM,EACN,SAAS,EACT,WAAW,EACX,YAAY,EACb,GAAG,YAAY,CAAA;QAEhB,IAAI,CAAC,YAAY,EAAE,CAAC;YAClB,MAAM,IAAI,KAAK,CAAC,wBAAwB,CAAC,CAAA;QAC3C,CAAC;QAED,IAAI,IAAI,GAAG,IAAI,uBAAY,CAAC;YAC1B,QAAQ;YACR,YAAY;YACZ,cAAc;YACd,gBAAgB;YAChB,MAAM,EAAE,MAAM,EAAE,KAAK,CAAC,GAAG,CAAC;SAC3B,CAAC,CAAA;QAEF,IAAI,CAAC;YACH,IAAI,KAAK,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,WAAW,EAAE,YAAY,EAAE,SAAS,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE,CAAA;QACxF,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,GAAG,CAAA;QACX,CAAC;QAED,MAAM,EAAE,WAAW,EAAE,cAAc,EAAE,YAAY,EAAE,eAAe,EAAE,SAAS,EAAE,YAAY,EAAE,IAAI,EAAE,GAAG,KAAK,CAAA;QAC3G,MAAM,OAAO,GAAG,IAAI,EAAE,UAAU,CAAC,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC,IAAI,EAAE,UAAiB,CAAC,CAAC,CAAC,CAAC,IAAI,CAAA;QAElF,OAAO,MAAM,UAAU,CAAC,IAAI,CAAC;YAC3B,GAAG,YAAY;YACf,WAAW,EAAE,cAAc;YAC3B,YAAY,EAAE,eAAe;YAC7B,SAAS,EAAE,YAAY;YACvB,OAAO;SACR,CAAC,CAAA;IACJ,CAAC;CACF,CAAA;AA5LY,oDAAoB;AAGzB;IAFL,IAAA,wBAAS,EAAC,cAAc,CAAC;IACzB,IAAA,uBAAQ,EAAC,OAAO,CAAC,EAAE,CAAC,4BAAY,EAAE,EAAE,WAAW,EAAE,4BAA4B,EAAE,CAAC;IAE9E,mBAAA,IAAA,kBAAG,EAAC,cAAc,CAAC,CAAA;IACnB,mBAAA,IAAA,kBAAG,GAAE,CAAA;;6CAD6B,oCAAe;;8DA+BnD;AAIK;IAFL,IAAA,wBAAS,EAAC,cAAc,CAAC;IACzB,IAAA,uBAAQ,EAAC,OAAO,CAAC,EAAE,CAAC,4BAAY,EAAE,EAAE,WAAW,EAAE,oCAAoC,EAAE,CAAC;IAEtF,mBAAA,IAAA,kBAAG,EAAC,IAAI,CAAC,CAAA;IACT,mBAAA,IAAA,kBAAG,EAAC,OAAO,CAAC,CAAA;IACZ,mBAAA,IAAA,kBAAG,GAAE,CAAA;;qDADe,sCAAiB;;8DAevC;AAIK;IAFL,IAAA,wBAAS,EAAC,cAAc,CAAC;IACzB,IAAA,uBAAQ,EAAC,OAAO,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,WAAW,EAAE,wBAAwB,EAAE,CAAC;IAC9C,mBAAA,IAAA,kBAAG,EAAC,IAAI,CAAC,CAAA;IAAc,mBAAA,IAAA,kBAAG,GAAE,CAAA;;;;8DAMrD;AAIK;IAFL,IAAA,wBAAS,EAAC,cAAc,CAAC;IACzB,IAAA,uBAAQ,EAAC,OAAO,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,WAAW,EAAE,kCAAkC,EAAE,CAAC;IAE/E,mBAAA,IAAA,kBAAG,EAAC,KAAK,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAA;IAC5B,mBAAA,IAAA,kBAAG,GAAE,CAAA;;;;+DAUP;AAIK;IAFL,IAAA,wBAAS,EAAC,cAAc,CAAC;IACzB,IAAA,uBAAQ,EAAC,OAAO,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,WAAW,EAAE,kCAAkC,EAAE,CAAC;IAE/E,mBAAA,IAAA,kBAAG,EAAC,eAAe,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC,sCAAiB,CAAC,CAAC,CAAA;IACjD,mBAAA,IAAA,kBAAG,GAAE,CAAA;;;;+DAWP;AAIK;IAFL,IAAA,wBAAS,EAAC,cAAc,CAAC;IACzB,IAAA,uBAAQ,EAAC,OAAO,CAAC,EAAE,CAAC,MAAM,EAAE,EAAE,WAAW,EAAE,wBAAwB,EAAE,CAAC;IAC/C,mBAAA,IAAA,kBAAG,EAAC,IAAI,CAAC,CAAA;IAAc,mBAAA,IAAA,kBAAG,GAAE,CAAA;;;;4DAoCnD;AAIK;IAFL,IAAA,wBAAS,EAAC,cAAc,CAAC;IACzB,IAAA,uBAAQ,EAAC,OAAO,CAAC,EAAE,CAAC,4BAAY,EAAE,EAAE,WAAW,EAAE,gCAAgC,EAAE,CAAC;IACrD,mBAAA,IAAA,kBAAG,EAAC,IAAI,CAAC,CAAA;IAAc,mBAAA,IAAA,kBAAG,GAAE,CAAA;;;;oEA4C3D;+BA3LU,oBAAoB;IADhC,IAAA,uBAAQ,EAAC,4BAAY,CAAC;GACV,oBAAoB,CA4LhC","sourcesContent":["import ClientOAuth2 from 'client-oauth2'\nimport crypto from 'crypto'\nimport { Arg, Ctx, Directive, Mutation, Resolver } from 'type-graphql'\nimport { In } from 'typeorm'\n\nimport { config } from '@things-factory/env'\n\nimport { Oauth2Client } from './oauth2-client'\nimport { NewOauth2Client, Oauth2ClientPatch } from './oauth2-client-type'\n\nconst protocol: string = config.get('protocol')\n\n@Resolver(Oauth2Client)\nexport class Oauth2ClientMutation {\n  @Directive('@transaction')\n  @Mutation(returns => Oauth2Client, { description: 'To create new Oauth2Client' })\n  async createOauth2Client(\n    @Arg('oauth2Client') oauth2Client: NewOauth2Client,\n    @Ctx() context: ResolverContext\n  ): Promise<Oauth2Client> {\n    const { domain, user, tx } = context.state\n\n    const originalProtocol = context.headers['x-forwarded-proto']\n    const originalHost = context.headers['x-forwarded-host']\n    const originalPort = context.headers['x-forwarded-port']\n\n    if (originalProtocol && originalHost) {\n      var url: URL = new URL(`${originalProtocol}://${originalHost}`)\n      if (originalPort) {\n        url.port = originalPort\n      }\n    } else {\n      var url: URL = new URL(context.request.origin)\n    }\n\n    if (protocol) {\n      url.protocol = protocol\n    }\n\n    url.pathname = '/oauth2-client/callback'\n\n    return await tx.getRepository(Oauth2Client).save({\n      ...oauth2Client,\n      callbackUrl: oauth2Client.callbackUrl || url.href,\n      domain,\n      creator: user,\n      updater: user\n    })\n  }\n\n  @Directive('@transaction')\n  @Mutation(returns => Oauth2Client, { description: 'To modify Oauth2Client information' })\n  async updateOauth2Client(\n    @Arg('id') id: string,\n    @Arg('patch') patch: Oauth2ClientPatch,\n    @Ctx() context: ResolverContext\n  ): Promise<Oauth2Client> {\n    const { domain, user, tx } = context.state\n\n    const repository = tx.getRepository(Oauth2Client)\n    const oauth2Client = await repository.findOne({\n      where: { domain: { id: domain.id }, id }\n    })\n\n    return await repository.save({\n      ...oauth2Client,\n      ...patch,\n      updater: user\n    })\n  }\n\n  @Directive('@transaction')\n  @Mutation(returns => Boolean, { description: 'To delete Oauth2Client' })\n  async deleteOauth2Client(@Arg('id') id: string, @Ctx() context: ResolverContext): Promise<boolean> {\n    const { domain, tx } = context.state\n\n    await tx.getRepository(Oauth2Client).delete({ domain: { id: domain.id }, id })\n\n    return true\n  }\n\n  @Directive('@transaction')\n  @Mutation(returns => Boolean, { description: 'To delete multiple Oauth2Clients' })\n  async deleteOauth2Clients(\n    @Arg('ids', type => [String]) ids: string[],\n    @Ctx() context: ResolverContext\n  ): Promise<boolean> {\n    const { domain, tx } = context.state\n\n    await tx.getRepository(Oauth2Client).delete({\n      domain: { id: domain.id },\n      id: In(ids)\n    })\n\n    return true\n  }\n\n  @Directive('@transaction')\n  @Mutation(returns => Boolean, { description: 'To import multiple Oauth2Clients' })\n  async importOauth2Clients(\n    @Arg('oauth2Clients', type => [Oauth2ClientPatch]) oauth2Clients: Oauth2ClientPatch[],\n    @Ctx() context: ResolverContext\n  ): Promise<boolean> {\n    const { domain, tx } = context.state\n\n    await Promise.all(\n      oauth2Clients.map(async (oauth2Client: Oauth2ClientPatch) => {\n        const createdOauth2Client: Oauth2Client = await tx.getRepository(Oauth2Client).save({ domain, ...oauth2Client })\n      })\n    )\n\n    return true\n  }\n\n  @Directive('@transaction')\n  @Mutation(returns => String, { description: 'To get oauth2 auth URL' })\n  async getOauth2AuthUrl(@Arg('id') id: string, @Ctx() context: ResolverContext): Promise<string> {\n    const { tx } = context.state\n    const repository = tx.getRepository(Oauth2Client)\n    const oauth2Client = await repository.findOneBy({ id })\n\n    const {\n      grantType,\n      clientId,\n      clientSecret,\n      callbackUrl,\n      accessTokenUrl: accessTokenUri,\n      authUrl: authorizationUri,\n      scopes\n    } = oauth2Client\n\n    if (grantType !== 'code') {\n      throw new Error(`unsupported grant type: ${grantType}`)\n    }\n\n    const state = crypto.randomBytes(16).toString('hex')\n    await repository.save({\n      ...oauth2Client,\n      state\n    })\n\n    var auth = new ClientOAuth2({\n      clientId,\n      clientSecret,\n      accessTokenUri,\n      authorizationUri,\n      redirectUri: callbackUrl || `${context.origin}/oauth2-client/callback`,\n      scopes: scopes?.split(' ') || [],\n      state\n    })\n\n    return await (auth[grantType] as any).getUri()\n  }\n\n  @Directive('@transaction')\n  @Mutation(returns => Oauth2Client, { description: 'To refresh oauth2 access token' })\n  async refreshOauth2AccessToken(@Arg('id') id: string, @Ctx() context: ResolverContext): Promise<Oauth2Client> {\n    const { tx } = context.state\n    const repository = tx.getRepository(Oauth2Client)\n    const oauth2Client = await repository.findOneBy({ id })\n\n    const {\n      clientId,\n      clientSecret,\n      accessTokenUrl: accessTokenUri,\n      authUrl: authorizationUri,\n      scopes,\n      tokenType,\n      accessToken,\n      refreshToken\n    } = oauth2Client\n\n    if (!refreshToken) {\n      throw new Error('refreshToken not found')\n    }\n\n    var auth = new ClientOAuth2({\n      clientId,\n      clientSecret,\n      accessTokenUri,\n      authorizationUri,\n      scopes: scopes?.split(' ')\n    })\n\n    try {\n      var token = await auth.createToken(accessToken, refreshToken, tokenType, {}).refresh()\n    } catch (err) {\n      throw err\n    }\n\n    const { accessToken: newAccessToken, refreshToken: newRefreshToken, tokenType: newTokenType, data } = token\n    const expires = data?.expires_in ? token.expiresIn(data?.expires_in as any) : null\n\n    return await repository.save({\n      ...oauth2Client,\n      accessToken: newAccessToken,\n      refreshToken: newRefreshToken,\n      tokenType: newTokenType,\n      expires\n    })\n  }\n}\n"]}
+{"version":3,"file":"oauth2-client-mutation.js","sourceRoot":"","sources":["../../../server/service/oauth2-client/oauth2-client-mutation.ts"],"names":[],"mappings":";;;;AAAA,0EAAwC;AACxC,4DAA2B;AAC3B,+CAAsE;AACtE,qCAA4B;AAE5B,yDAAwD;AAExD,mDAA8C;AAC9C,6DAAyE;AAGlE,IAAM,oBAAoB,GAA1B,MAAM,oBAAoB;IAGzB,AAAN,KAAK,CAAC,kBAAkB,CACD,YAA6B,EAC3C,OAAwB;QAE/B,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE,EAAE,GAAG,OAAO,CAAC,KAAK,CAAA;QAE1C,OAAO,MAAM,EAAE,CAAC,aAAa,CAAC,4BAAY,CAAC,CAAC,IAAI,CAAC;YAC/C,GAAG,YAAY;YACf;;;eAGG;YACH,WAAW,EAAE,YAAY,CAAC,WAAW,IAAI,IAAA,wBAAY,EAAC,yBAAyB,EAAE,OAAO,CAAC;YACzF,MAAM;YACN,OAAO,EAAE,IAAI;YACb,OAAO,EAAE,IAAI;SACd,CAAC,CAAA;IACJ,CAAC;IAIK,AAAN,KAAK,CAAC,kBAAkB,CACX,EAAU,EACP,KAAwB,EAC/B,OAAwB;QAE/B,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE,EAAE,GAAG,OAAO,CAAC,KAAK,CAAA;QAE1C,MAAM,UAAU,GAAG,EAAE,CAAC,aAAa,CAAC,4BAAY,CAAC,CAAA;QACjD,MAAM,YAAY,GAAG,MAAM,UAAU,CAAC,OAAO,CAAC;YAC5C,KAAK,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,MAAM,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE;SACzC,CAAC,CAAA;QAEF,OAAO,MAAM,UAAU,CAAC,IAAI,CAAC;YAC3B,GAAG,YAAY;YACf,GAAG,KAAK;YACR,OAAO,EAAE,IAAI;SACd,CAAC,CAAA;IACJ,CAAC;IAIK,AAAN,KAAK,CAAC,kBAAkB,CAAY,EAAU,EAAS,OAAwB;QAC7E,MAAM,EAAE,MAAM,EAAE,EAAE,EAAE,GAAG,OAAO,CAAC,KAAK,CAAA;QAEpC,MAAM,EAAE,CAAC,aAAa,CAAC,4BAAY,CAAC,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,MAAM,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,CAAA;QAE9E,OAAO,IAAI,CAAA;IACb,CAAC;IAIK,AAAN,KAAK,CAAC,mBAAmB,CACO,GAAa,EACpC,OAAwB;QAE/B,MAAM,EAAE,MAAM,EAAE,EAAE,EAAE,GAAG,OAAO,CAAC,KAAK,CAAA;QAEpC,MAAM,EAAE,CAAC,aAAa,CAAC,4BAAY,CAAC,CAAC,MAAM,CAAC;YAC1C,MAAM,EAAE,EAAE,EAAE,EAAE,MAAM,CAAC,EAAE,EAAE;YACzB,EAAE,EAAE,IAAA,YAAE,EAAC,GAAG,CAAC;SACZ,CAAC,CAAA;QAEF,OAAO,IAAI,CAAA;IACb,CAAC;IAIK,AAAN,KAAK,CAAC,mBAAmB,CAC4B,aAAkC,EAC9E,OAAwB;QAE/B,MAAM,EAAE,MAAM,EAAE,EAAE,EAAE,GAAG,OAAO,CAAC,KAAK,CAAA;QAEpC,MAAM,OAAO,CAAC,GAAG,CACf,aAAa,CAAC,GAAG,CAAC,KAAK,EAAE,YAA+B,EAAE,EAAE;YAC1D,MAAM,mBAAmB,GAAiB,MAAM,EAAE,CAAC,aAAa,CAAC,4BAAY,CAAC,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,GAAG,YAAY,EAAE,CAAC,CAAA;QAClH,CAAC,CAAC,CACH,CAAA;QAED,OAAO,IAAI,CAAA;IACb,CAAC;IAIK,AAAN,KAAK,CAAC,gBAAgB,CAAY,EAAU,EAAS,OAAwB;QAC3E,MAAM,EAAE,EAAE,EAAE,GAAG,OAAO,CAAC,KAAK,CAAA;QAC5B,MAAM,UAAU,GAAG,EAAE,CAAC,aAAa,CAAC,4BAAY,CAAC,CAAA;QACjD,MAAM,YAAY,GAAG,MAAM,UAAU,CAAC,SAAS,CAAC,EAAE,EAAE,EAAE,CAAC,CAAA;QAEvD,MAAM,EACJ,SAAS,EACT,QAAQ,EACR,YAAY,EACZ,WAAW,EACX,cAAc,EAAE,cAAc,EAC9B,OAAO,EAAE,gBAAgB,EACzB,MAAM,EACP,GAAG,YAAY,CAAA;QAEhB,IAAI,SAAS,KAAK,MAAM,EAAE,CAAC;YACzB,MAAM,IAAI,KAAK,CAAC,2BAA2B,SAAS,EAAE,CAAC,CAAA;QACzD,CAAC;QAED,MAAM,KAAK,GAAG,gBAAM,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAA;QACpD,MAAM,UAAU,CAAC,IAAI,CAAC;YACpB,GAAG,YAAY;YACf,KAAK;SACN,CAAC,CAAA;QAEF,IAAI,IAAI,GAAG,IAAI,uBAAY,CAAC;YAC1B,QAAQ;YACR,YAAY;YACZ,cAAc;YACd,gBAAgB;YAChB,WAAW,EAAE,WAAW,IAAI,GAAG,OAAO,CAAC,MAAM,yBAAyB;YACtE,MAAM,EAAE,MAAM,EAAE,KAAK,CAAC,GAAG,CAAC,IAAI,EAAE;YAChC,KAAK;SACN,CAAC,CAAA;QAEF,OAAO,MAAO,IAAI,CAAC,SAAS,CAAS,CAAC,MAAM,EAAE,CAAA;IAChD,CAAC;IAIK,AAAN,KAAK,CAAC,wBAAwB,CAAY,EAAU,EAAS,OAAwB;QACnF,MAAM,EAAE,EAAE,EAAE,GAAG,OAAO,CAAC,KAAK,CAAA;QAC5B,MAAM,UAAU,GAAG,EAAE,CAAC,aAAa,CAAC,4BAAY,CAAC,CAAA;QACjD,MAAM,YAAY,GAAG,MAAM,UAAU,CAAC,SAAS,CAAC,EAAE,EAAE,EAAE,CAAC,CAAA;QAEvD,MAAM,EACJ,QAAQ,EACR,YAAY,EACZ,cAAc,EAAE,cAAc,EAC9B,OAAO,EAAE,gBAAgB,EACzB,MAAM,EACN,SAAS,EACT,WAAW,EACX,YAAY,EACb,GAAG,YAAY,CAAA;QAEhB,IAAI,CAAC,YAAY,EAAE,CAAC;YAClB,MAAM,IAAI,KAAK,CAAC,wBAAwB,CAAC,CAAA;QAC3C,CAAC;QAED,IAAI,IAAI,GAAG,IAAI,uBAAY,CAAC;YAC1B,QAAQ;YACR,YAAY;YACZ,cAAc;YACd,gBAAgB;YAChB,MAAM,EAAE,MAAM,EAAE,KAAK,CAAC,GAAG,CAAC;SAC3B,CAAC,CAAA;QAEF,IAAI,CAAC;YACH,IAAI,KAAK,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,WAAW,EAAE,YAAY,EAAE,SAAS,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE,CAAA;QACxF,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,GAAG,CAAA;QACX,CAAC;QAED,MAAM,EAAE,WAAW,EAAE,cAAc,EAAE,YAAY,EAAE,eAAe,EAAE,SAAS,EAAE,YAAY,EAAE,IAAI,EAAE,GAAG,KAAK,CAAA;QAC3G,MAAM,OAAO,GAAG,IAAI,EAAE,UAAU,CAAC,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC,IAAI,EAAE,UAAiB,CAAC,CAAC,CAAC,CAAC,IAAI,CAAA;QAElF,OAAO,MAAM,UAAU,CAAC,IAAI,CAAC;YAC3B,GAAG,YAAY;YACf,WAAW,EAAE,cAAc;YAC3B,YAAY,EAAE,eAAe;YAC7B,SAAS,EAAE,YAAY;YACvB,OAAO;SACR,CAAC,CAAA;IACJ,CAAC;CACF,CAAA;AA7KY,oDAAoB;AAGzB;IAFL,IAAA,wBAAS,EAAC,cAAc,CAAC;IACzB,IAAA,uBAAQ,EAAC,OAAO,CAAC,EAAE,CAAC,4BAAY,EAAE,EAAE,WAAW,EAAE,4BAA4B,EAAE,CAAC;IAE9E,mBAAA,IAAA,kBAAG,EAAC,cAAc,CAAC,CAAA;IACnB,mBAAA,IAAA,kBAAG,GAAE,CAAA;;6CAD6B,oCAAe;;8DAgBnD;AAIK;IAFL,IAAA,wBAAS,EAAC,cAAc,CAAC;IACzB,IAAA,uBAAQ,EAAC,OAAO,CAAC,EAAE,CAAC,4BAAY,EAAE,EAAE,WAAW,EAAE,oCAAoC,EAAE,CAAC;IAEtF,mBAAA,IAAA,kBAAG,EAAC,IAAI,CAAC,CAAA;IACT,mBAAA,IAAA,kBAAG,EAAC,OAAO,CAAC,CAAA;IACZ,mBAAA,IAAA,kBAAG,GAAE,CAAA;;qDADe,sCAAiB;;8DAevC;AAIK;IAFL,IAAA,wBAAS,EAAC,cAAc,CAAC;IACzB,IAAA,uBAAQ,EAAC,OAAO,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,WAAW,EAAE,wBAAwB,EAAE,CAAC;IAC9C,mBAAA,IAAA,kBAAG,EAAC,IAAI,CAAC,CAAA;IAAc,mBAAA,IAAA,kBAAG,GAAE,CAAA;;;;8DAMrD;AAIK;IAFL,IAAA,wBAAS,EAAC,cAAc,CAAC;IACzB,IAAA,uBAAQ,EAAC,OAAO,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,WAAW,EAAE,kCAAkC,EAAE,CAAC;IAE/E,mBAAA,IAAA,kBAAG,EAAC,KAAK,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAA;IAC5B,mBAAA,IAAA,kBAAG,GAAE,CAAA;;;;+DAUP;AAIK;IAFL,IAAA,wBAAS,EAAC,cAAc,CAAC;IACzB,IAAA,uBAAQ,EAAC,OAAO,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,WAAW,EAAE,kCAAkC,EAAE,CAAC;IAE/E,mBAAA,IAAA,kBAAG,EAAC,eAAe,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC,sCAAiB,CAAC,CAAC,CAAA;IACjD,mBAAA,IAAA,kBAAG,GAAE,CAAA;;;;+DAWP;AAIK;IAFL,IAAA,wBAAS,EAAC,cAAc,CAAC;IACzB,IAAA,uBAAQ,EAAC,OAAO,CAAC,EAAE,CAAC,MAAM,EAAE,EAAE,WAAW,EAAE,wBAAwB,EAAE,CAAC;IAC/C,mBAAA,IAAA,kBAAG,EAAC,IAAI,CAAC,CAAA;IAAc,mBAAA,IAAA,kBAAG,GAAE,CAAA;;;;4DAoCnD;AAIK;IAFL,IAAA,wBAAS,EAAC,cAAc,CAAC;IACzB,IAAA,uBAAQ,EAAC,OAAO,CAAC,EAAE,CAAC,4BAAY,EAAE,EAAE,WAAW,EAAE,gCAAgC,EAAE,CAAC;IACrD,mBAAA,IAAA,kBAAG,EAAC,IAAI,CAAC,CAAA;IAAc,mBAAA,IAAA,kBAAG,GAAE,CAAA;;;;oEA4C3D;+BA5KU,oBAAoB;IADhC,IAAA,uBAAQ,EAAC,4BAAY,CAAC;GACV,oBAAoB,CA6KhC","sourcesContent":["import ClientOAuth2 from 'client-oauth2'\nimport crypto from 'crypto'\nimport { Arg, Ctx, Directive, Mutation, Resolver } from 'type-graphql'\nimport { In } from 'typeorm'\n\nimport { buildAuthURL } from '@things-factory/auth-base'\n\nimport { Oauth2Client } from './oauth2-client'\nimport { NewOauth2Client, Oauth2ClientPatch } from './oauth2-client-type'\n\n@Resolver(Oauth2Client)\nexport class Oauth2ClientMutation {\n  @Directive('@transaction')\n  @Mutation(returns => Oauth2Client, { description: 'To create new Oauth2Client' })\n  async createOauth2Client(\n    @Arg('oauth2Client') oauth2Client: NewOauth2Client,\n    @Ctx() context: ResolverContext\n  ): Promise<Oauth2Client> {\n    const { domain, user, tx } = context.state\n\n    return await tx.getRepository(Oauth2Client).save({\n      ...oauth2Client,\n      /*\n       * 주소는 auth-base 가 만든다 — 이 열두 줄이 그쪽 buildAuthURL 과 **똑같이 베껴져**\n       * 있었다. 한쪽만 고치는 일이 실제로 났다(request.origin, 2026-09-04).\n       */\n      callbackUrl: oauth2Client.callbackUrl || buildAuthURL('/oauth2-client/callback', context),\n      domain,\n      creator: user,\n      updater: user\n    })\n  }\n\n  @Directive('@transaction')\n  @Mutation(returns => Oauth2Client, { description: 'To modify Oauth2Client information' })\n  async updateOauth2Client(\n    @Arg('id') id: string,\n    @Arg('patch') patch: Oauth2ClientPatch,\n    @Ctx() context: ResolverContext\n  ): Promise<Oauth2Client> {\n    const { domain, user, tx } = context.state\n\n    const repository = tx.getRepository(Oauth2Client)\n    const oauth2Client = await repository.findOne({\n      where: { domain: { id: domain.id }, id }\n    })\n\n    return await repository.save({\n      ...oauth2Client,\n      ...patch,\n      updater: user\n    })\n  }\n\n  @Directive('@transaction')\n  @Mutation(returns => Boolean, { description: 'To delete Oauth2Client' })\n  async deleteOauth2Client(@Arg('id') id: string, @Ctx() context: ResolverContext): Promise<boolean> {\n    const { domain, tx } = context.state\n\n    await tx.getRepository(Oauth2Client).delete({ domain: { id: domain.id }, id })\n\n    return true\n  }\n\n  @Directive('@transaction')\n  @Mutation(returns => Boolean, { description: 'To delete multiple Oauth2Clients' })\n  async deleteOauth2Clients(\n    @Arg('ids', type => [String]) ids: string[],\n    @Ctx() context: ResolverContext\n  ): Promise<boolean> {\n    const { domain, tx } = context.state\n\n    await tx.getRepository(Oauth2Client).delete({\n      domain: { id: domain.id },\n      id: In(ids)\n    })\n\n    return true\n  }\n\n  @Directive('@transaction')\n  @Mutation(returns => Boolean, { description: 'To import multiple Oauth2Clients' })\n  async importOauth2Clients(\n    @Arg('oauth2Clients', type => [Oauth2ClientPatch]) oauth2Clients: Oauth2ClientPatch[],\n    @Ctx() context: ResolverContext\n  ): Promise<boolean> {\n    const { domain, tx } = context.state\n\n    await Promise.all(\n      oauth2Clients.map(async (oauth2Client: Oauth2ClientPatch) => {\n        const createdOauth2Client: Oauth2Client = await tx.getRepository(Oauth2Client).save({ domain, ...oauth2Client })\n      })\n    )\n\n    return true\n  }\n\n  @Directive('@transaction')\n  @Mutation(returns => String, { description: 'To get oauth2 auth URL' })\n  async getOauth2AuthUrl(@Arg('id') id: string, @Ctx() context: ResolverContext): Promise<string> {\n    const { tx } = context.state\n    const repository = tx.getRepository(Oauth2Client)\n    const oauth2Client = await repository.findOneBy({ id })\n\n    const {\n      grantType,\n      clientId,\n      clientSecret,\n      callbackUrl,\n      accessTokenUrl: accessTokenUri,\n      authUrl: authorizationUri,\n      scopes\n    } = oauth2Client\n\n    if (grantType !== 'code') {\n      throw new Error(`unsupported grant type: ${grantType}`)\n    }\n\n    const state = crypto.randomBytes(16).toString('hex')\n    await repository.save({\n      ...oauth2Client,\n      state\n    })\n\n    var auth = new ClientOAuth2({\n      clientId,\n      clientSecret,\n      accessTokenUri,\n      authorizationUri,\n      redirectUri: callbackUrl || `${context.origin}/oauth2-client/callback`,\n      scopes: scopes?.split(' ') || [],\n      state\n    })\n\n    return await (auth[grantType] as any).getUri()\n  }\n\n  @Directive('@transaction')\n  @Mutation(returns => Oauth2Client, { description: 'To refresh oauth2 access token' })\n  async refreshOauth2AccessToken(@Arg('id') id: string, @Ctx() context: ResolverContext): Promise<Oauth2Client> {\n    const { tx } = context.state\n    const repository = tx.getRepository(Oauth2Client)\n    const oauth2Client = await repository.findOneBy({ id })\n\n    const {\n      clientId,\n      clientSecret,\n      accessTokenUrl: accessTokenUri,\n      authUrl: authorizationUri,\n      scopes,\n      tokenType,\n      accessToken,\n      refreshToken\n    } = oauth2Client\n\n    if (!refreshToken) {\n      throw new Error('refreshToken not found')\n    }\n\n    var auth = new ClientOAuth2({\n      clientId,\n      clientSecret,\n      accessTokenUri,\n      authorizationUri,\n      scopes: scopes?.split(' ')\n    })\n\n    try {\n      var token = await auth.createToken(accessToken, refreshToken, tokenType, {}).refresh()\n    } catch (err) {\n      throw err\n    }\n\n    const { accessToken: newAccessToken, refreshToken: newRefreshToken, tokenType: newTokenType, data } = token\n    const expires = data?.expires_in ? token.expiresIn(data?.expires_in as any) : null\n\n    return await repository.save({\n      ...oauth2Client,\n      accessToken: newAccessToken,\n      refreshToken: newRefreshToken,\n      tokenType: newTokenType,\n      expires\n    })\n  }\n}\n"]}