@things-factory/oauth2-client 4.3.671 → 4.3.672

package/dist-server/controllers/index.js

@@ -0,0 +1 @@
+//# sourceMappingURL=index.js.map

package/dist-server/controllers/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../server/controllers/index.ts"],"names":[],"mappings":""}

package/dist-server/entities/index.js

@@ -0,0 +1,9 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.Oauth2Client = exports.entities = void 0;
+const oauth2_client_1 = require("./oauth2-client");
+Object.defineProperty(exports, "Oauth2Client", { enumerable: true, get: function () { return oauth2_client_1.Oauth2Client; } });
+exports.entities = [
+    oauth2_client_1.Oauth2Client
+];
+//# sourceMappingURL=index.js.map

package/dist-server/entities/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../server/entities/index.ts"],"names":[],"mappings":";;;AAAA,mDAA8C;AAO7C,6FAPQ,4BAAY,OAOR;AALA,QAAA,QAAQ,GAAG;IACvB,4BAAY;CACZ,CAAA"}

package/dist-server/entities/oauth2-client.js

@@ -0,0 +1,190 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+var _a, _b, _c;
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.Oauth2Client = void 0;
+const typeorm_1 = require("typeorm");
+const shell_1 = require("@things-factory/shell");
+const auth_base_1 = require("@things-factory/auth-base");
+let Oauth2Client = class Oauth2Client {
+    getAuthHeaders() {
+        if (this.tokenType == 'bearer') {
+            return {
+                Authorization: `Bearer ${this.accessToken}`
+            };
+        }
+        else if (this.tokenType == 'basic' || !this.tokenType) {
+            const encoded = Buffer.from(`${this.username}:${this.password}`).toString('base64');
+            return {
+                Authorization: `Basic ${encoded}`
+            };
+        }
+        return {};
+    }
+};
+__decorate([
+    (0, typeorm_1.PrimaryGeneratedColumn)('uuid'),
+    __metadata("design:type", String)
+], Oauth2Client.prototype, "id", void 0);
+__decorate([
+    (0, typeorm_1.ManyToOne)(type => shell_1.Domain),
+    __metadata("design:type", typeof (_a = typeof shell_1.Domain !== "undefined" && shell_1.Domain) === "function" ? _a : Object)
+], Oauth2Client.prototype, "domain", void 0);
+__decorate([
+    (0, typeorm_1.Column)(),
+    __metadata("design:type", String)
+], Oauth2Client.prototype, "name", void 0);
+__decorate([
+    (0, typeorm_1.Column)({
+        nullable: true
+    }),
+    __metadata("design:type", String)
+], Oauth2Client.prototype, "description", void 0);
+__decorate([
+    (0, typeorm_1.Column)({
+        nullable: true
+    }),
+    __metadata("design:type", String)
+], Oauth2Client.prototype, "icon", void 0);
+__decorate([
+    (0, typeorm_1.Column)({
+        nullable: true
+    }),
+    __metadata("design:type", String)
+], Oauth2Client.prototype, "grantType", void 0);
+__decorate([
+    (0, typeorm_1.Column)({
+        nullable: true
+    }),
+    __metadata("design:type", String)
+], Oauth2Client.prototype, "clientId", void 0);
+__decorate([
+    (0, typeorm_1.Column)({
+        nullable: true
+    }),
+    __metadata("design:type", String)
+], Oauth2Client.prototype, "clientSecret", void 0);
+__decorate([
+    (0, typeorm_1.Column)({
+        nullable: true
+    }),
+    __metadata("design:type", String)
+], Oauth2Client.prototype, "accessTokenUrl", void 0);
+__decorate([
+    (0, typeorm_1.Column)({
+        nullable: true
+    }),
+    __metadata("design:type", String)
+], Oauth2Client.prototype, "authUrl", void 0);
+__decorate([
+    (0, typeorm_1.Column)({
+        nullable: true
+    }),
+    __metadata("design:type", String)
+], Oauth2Client.prototype, "callbackUrl", void 0);
+__decorate([
+    (0, typeorm_1.Column)({
+        nullable: true
+    }),
+    __metadata("design:type", String)
+], Oauth2Client.prototype, "webhook", void 0);
+__decorate([
+    (0, typeorm_1.Column)({
+        nullable: true
+    }),
+    __metadata("design:type", String)
+], Oauth2Client.prototype, "username", void 0);
+__decorate([
+    (0, typeorm_1.Column)({
+        nullable: true
+    }),
+    __metadata("design:type", String)
+], Oauth2Client.prototype, "password", void 0);
+__decorate([
+    (0, typeorm_1.Column)({
+        nullable: true
+    }),
+    __metadata("design:type", String)
+], Oauth2Client.prototype, "codeChallengeMethod", void 0);
+__decorate([
+    (0, typeorm_1.Column)({
+        nullable: true
+    }),
+    __metadata("design:type", String)
+], Oauth2Client.prototype, "codeVerifier", void 0);
+__decorate([
+    (0, typeorm_1.Column)({
+        nullable: true
+    }),
+    __metadata("design:type", String)
+], Oauth2Client.prototype, "scopes", void 0);
+__decorate([
+    (0, typeorm_1.Column)({
+        nullable: true
+    }),
+    __metadata("design:type", String)
+], Oauth2Client.prototype, "accessToken", void 0);
+__decorate([
+    (0, typeorm_1.Column)({
+        nullable: true
+    }),
+    __metadata("design:type", String)
+], Oauth2Client.prototype, "refreshToken", void 0);
+__decorate([
+    (0, typeorm_1.Column)({
+        nullable: true
+    }),
+    __metadata("design:type", Date)
+], Oauth2Client.prototype, "expires", void 0);
+__decorate([
+    (0, typeorm_1.Column)({
+        nullable: true
+    }),
+    __metadata("design:type", String)
+], Oauth2Client.prototype, "state", void 0);
+__decorate([
+    (0, typeorm_1.Column)({
+        nullable: true
+    }),
+    __metadata("design:type", String)
+], Oauth2Client.prototype, "jwtToken", void 0);
+__decorate([
+    (0, typeorm_1.Column)({
+        nullable: true
+    }),
+    __metadata("design:type", String)
+], Oauth2Client.prototype, "tokenType", void 0);
+__decorate([
+    (0, typeorm_1.CreateDateColumn)(),
+    __metadata("design:type", Date)
+], Oauth2Client.prototype, "createdAt", void 0);
+__decorate([
+    (0, typeorm_1.UpdateDateColumn)(),
+    __metadata("design:type", Date)
+], Oauth2Client.prototype, "updatedAt", void 0);
+__decorate([
+    (0, typeorm_1.ManyToOne)(type => auth_base_1.User, {
+        nullable: true
+    }),
+    __metadata("design:type", typeof (_b = typeof auth_base_1.User !== "undefined" && auth_base_1.User) === "function" ? _b : Object)
+], Oauth2Client.prototype, "creator", void 0);
+__decorate([
+    (0, typeorm_1.ManyToOne)(type => auth_base_1.User, {
+        nullable: true
+    }),
+    __metadata("design:type", typeof (_c = typeof auth_base_1.User !== "undefined" && auth_base_1.User) === "function" ? _c : Object)
+], Oauth2Client.prototype, "updater", void 0);
+Oauth2Client = __decorate([
+    (0, typeorm_1.Entity)(),
+    (0, typeorm_1.Index)('ix_oauth2_client_0', (oauth2Client) => [oauth2Client.domain, oauth2Client.name], { unique: true })
+], Oauth2Client);
+exports.Oauth2Client = Oauth2Client;
+//# sourceMappingURL=oauth2-client.js.map

package/dist-server/entities/oauth2-client.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"oauth2-client.js","sourceRoot":"","sources":["../../server/entities/oauth2-client.ts"],"names":[],"mappings":";;;;;;;;;;;;;AAAA,qCASgB;AAChB,iDAA8C;AAC9C,yDAAgD;AAIzC,IAAM,YAAY,GAAlB,MAAM,YAAY;IA8HvB,cAAc;QACZ,IAAI,IAAI,CAAC,SAAS,IAAI,QAAQ,EAAE;YAC9B,OAAO;gBACL,aAAa,EAAE,UAAU,IAAI,CAAC,WAAW,EAAE;aAC5C,CAAA;SACF;aAAM,IAAI,IAAI,CAAC,SAAS,IAAI,OAAO,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE;YACvD,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,QAAQ,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAA;YACnF,OAAO;gBACL,aAAa,EAAE,SAAS,OAAO,EAAE;aAClC,CAAA;SACF;QAED,OAAO,EAAE,CAAA;IACX,CAAC;CACF,CAAA;AA3IC;IAAC,IAAA,gCAAsB,EAAC,MAAM,CAAC;;wCACrB;AAEV;IAAC,IAAA,mBAAS,EAAC,IAAI,CAAC,EAAE,CAAC,cAAM,CAAC;kDAClB,cAAM,oBAAN,cAAM;4CAAA;AAEd;IAAC,IAAA,gBAAM,GAAE;;0CACG;AAEZ;IAAC,IAAA,gBAAM,EAAC;QACN,QAAQ,EAAE,IAAI;KACf,CAAC;;iDACiB;AAEnB;IAAC,IAAA,gBAAM,EAAC;QACN,QAAQ,EAAE,IAAI;KACf,CAAC;;0CACU;AAEZ;IAAC,IAAA,gBAAM,EAAC;QACN,QAAQ,EAAE,IAAI;KACf,CAAC;;+CACe;AAEjB;IAAC,IAAA,gBAAM,EAAC;QACN,QAAQ,EAAE,IAAI;KACf,CAAC;;8CACc;AAEhB;IAAC,IAAA,gBAAM,EAAC;QACN,QAAQ,EAAE,IAAI;KACf,CAAC;;kDACkB;AAEpB;IAAC,IAAA,gBAAM,EAAC;QACN,QAAQ,EAAE,IAAI;KACf,CAAC;;oDACoB;AAEtB;IAAC,IAAA,gBAAM,EAAC;QACN,QAAQ,EAAE,IAAI;KACf,CAAC;;6CACa;AAEf;IAAC,IAAA,gBAAM,EAAC;QACN,QAAQ,EAAE,IAAI;KACf,CAAC;;iDACiB;AAEnB;IAAC,IAAA,gBAAM,EAAC;QACN,QAAQ,EAAE,IAAI;KACf,CAAC;;6CACa;AAEf;IAAC,IAAA,gBAAM,EAAC;QACN,QAAQ,EAAE,IAAI;KACf,CAAC;;8CACc;AAEhB;IAAC,IAAA,gBAAM,EAAC;QACN,QAAQ,EAAE,IAAI;KACf,CAAC;;8CACc;AAEhB;IAAC,IAAA,gBAAM,EAAC;QACN,QAAQ,EAAE,IAAI;KACf,CAAC;;yDACyB;AAE3B;IAAC,IAAA,gBAAM,EAAC;QACN,QAAQ,EAAE,IAAI;KACf,CAAC;;kDACkB;AAEpB;IAAC,IAAA,gBAAM,EAAC;QACN,QAAQ,EAAE,IAAI;KACf,CAAC;;4CACY;AAEd;IAAC,IAAA,gBAAM,EAAC;QACN,QAAQ,EAAE,IAAI;KACf,CAAC;;iDACiB;AAEnB;IAAC,IAAA,gBAAM,EAAC;QACN,QAAQ,EAAE,IAAI;KACf,CAAC;;kDACkB;AAEpB;IAAC,IAAA,gBAAM,EAAC;QACN,QAAQ,EAAE,IAAI;KACf,CAAC;8BACO,IAAI;6CAAA;AAEb;IAAC,IAAA,gBAAM,EAAC;QACN,QAAQ,EAAE,IAAI;KACf,CAAC;;2CACW;AAEb;IAAC,IAAA,gBAAM,EAAC;QACN,QAAQ,EAAE,IAAI;KACf,CAAC;;8CACc;AAEhB;IAAC,IAAA,gBAAM,EAAC;QACN,QAAQ,EAAE,IAAI;KACf,CAAC;;+CACe;AAEjB;IAAC,IAAA,0BAAgB,GAAE;8BACR,IAAI;+CAAA;AAEf;IAAC,IAAA,0BAAgB,GAAE;8BACR,IAAI;+CAAA;AAEf;IAAC,IAAA,mBAAS,EAAC,IAAI,CAAC,EAAE,CAAC,gBAAI,EAAE;QACvB,QAAQ,EAAE,IAAI;KACf,CAAC;kDACO,gBAAI,oBAAJ,gBAAI;6CAAA;AAEb;IAAC,IAAA,mBAAS,EAAC,IAAI,CAAC,EAAE,CAAC,gBAAI,EAAE;QACvB,QAAQ,EAAE,IAAI;KACf,CAAC;kDACO,gBAAI,oBAAJ,gBAAI;6CAAA;AA5HF,YAAY;IAFxB,IAAA,gBAAM,GAAE;IACR,IAAA,eAAK,EAAC,oBAAoB,EAAE,CAAC,YAA0B,EAAE,EAAE,CAAC,CAAC,YAAY,CAAC,MAAM,EAAE,YAAY,CAAC,IAAI,CAAC,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;GAC3G,YAAY,CA4IxB;AA5IY,oCAAY"}

package/dist-server/graphql/index.js

@@ -0,0 +1,34 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || function (mod) {
+    if (mod && mod.__esModule) return mod;
+    var result = {};
+    if (mod != null) for (var k in mod) if (k !== "default" && Object.prototype.hasOwnProperty.call(mod, k)) __createBinding(result, mod, k);
+    __setModuleDefault(result, mod);
+    return result;
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.schema = void 0;
+const utils_1 = require("@things-factory/utils");
+const resolvers = __importStar(require("./resolvers"));
+const typeDefs = __importStar(require("./types"));
+exports.schema = {
+    typeDefs,
+    resolvers: utils_1.deepMerge.apply(null, Object.values(resolvers))
+};
+//# sourceMappingURL=index.js.map

package/dist-server/graphql/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../server/graphql/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,iDAAiD;AAEjD,uDAAwC;AACxC,kDAAmC;AAEtB,QAAA,MAAM,GAAG;IACpB,QAAQ;IACR,SAAS,EAAE,iBAAS,CAAC,KAAK,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;CAC3D,CAAA"}

package/dist-server/graphql/resolvers/index.js

@@ -0,0 +1,18 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __exportStar = (this && this.__exportStar) || function(m, exports) {
+    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+__exportStar(require("./oauth2-client"), exports);
+//# sourceMappingURL=index.js.map

package/dist-server/graphql/resolvers/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../server/graphql/resolvers/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,kDAA+B"}

package/dist-server/graphql/resolvers/oauth2-client/create-oauth2-client.js

@@ -0,0 +1,19 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.createOauth2Client = void 0;
+const env_1 = require("@things-factory/env");
+const typeorm_1 = require("typeorm");
+const url_1 = require("url");
+const entities_1 = require("../../../entities");
+const protocol = env_1.config.get('protocol');
+exports.createOauth2Client = {
+    async createOauth2Client(_, { oauth2Client }, context) {
+        const { origin } = context;
+        let url = new url_1.URL(origin);
+        url.protocol = protocol || url.protocol;
+        url.pathname = '/oauth2-client/callback';
+        const { domain, user } = context.state;
+        return await (0, typeorm_1.getRepository)(entities_1.Oauth2Client).save(Object.assign(Object.assign({}, oauth2Client), { callbackUrl: oauth2Client.callbackUrl || url.href, domain: domain, creator: user, updater: user }));
+    }
+};
+//# sourceMappingURL=create-oauth2-client.js.map

package/dist-server/graphql/resolvers/oauth2-client/create-oauth2-client.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"create-oauth2-client.js","sourceRoot":"","sources":["../../../../server/graphql/resolvers/oauth2-client/create-oauth2-client.ts"],"names":[],"mappings":";;;AAAA,6CAA4C;AAC5C,qCAAuC;AACvC,6BAAyB;AACzB,gDAAgD;AAChD,MAAM,QAAQ,GAAW,YAAM,CAAC,GAAG,CAAC,UAAU,CAAC,CAAA;AAElC,QAAA,kBAAkB,GAAG;IAChC,KAAK,CAAC,kBAAkB,CAAC,CAAM,EAAE,EAAE,YAAY,EAAE,EAAE,OAAY;QAC7D,MAAM,EAAE,MAAM,EAAE,GAAG,OAAO,CAAA;QAC1B,IAAI,GAAG,GAAQ,IAAI,SAAG,CAAC,MAAM,CAAC,CAAA;QAC9B,GAAG,CAAC,QAAQ,GAAG,QAAQ,IAAI,GAAG,CAAC,QAAQ,CAAA;QACvC,GAAG,CAAC,QAAQ,GAAG,yBAAyB,CAAA;QAExC,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,OAAO,CAAC,KAAK,CAAA;QAEtC,OAAO,MAAM,IAAA,uBAAa,EAAC,uBAAY,CAAC,CAAC,IAAI,iCACxC,YAAY,KACf,WAAW,EAAE,YAAY,CAAC,WAAW,IAAI,GAAG,CAAC,IAAI,EACjD,MAAM,EAAE,MAAM,EACd,OAAO,EAAE,IAAI,EACb,OAAO,EAAE,IAAI,IACb,CAAA;IACJ,CAAC;CACF,CAAA"}

package/dist-server/graphql/resolvers/oauth2-client/delete-oauth2-client.js

@@ -0,0 +1,12 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.deleteOauth2Client = void 0;
+const typeorm_1 = require("typeorm");
+const entities_1 = require("../../../entities");
+exports.deleteOauth2Client = {
+    async deleteOauth2Client(_, { id }, context) {
+        await (0, typeorm_1.getRepository)(entities_1.Oauth2Client).delete({ domain: context.state.domain, id });
+        return true;
+    }
+};
+//# sourceMappingURL=delete-oauth2-client.js.map

package/dist-server/graphql/resolvers/oauth2-client/delete-oauth2-client.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"delete-oauth2-client.js","sourceRoot":"","sources":["../../../../server/graphql/resolvers/oauth2-client/delete-oauth2-client.ts"],"names":[],"mappings":";;;AAAA,qCAAuC;AACvC,gDAAgD;AAEnC,QAAA,kBAAkB,GAAG;IAChC,KAAK,CAAC,kBAAkB,CAAC,CAAM,EAAE,EAAE,EAAE,EAAE,EAAE,OAAY;QACnD,MAAM,IAAA,uBAAa,EAAC,uBAAY,CAAC,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,KAAK,CAAC,MAAM,EAAE,EAAE,EAAE,CAAC,CAAA;QAC9E,OAAO,IAAI,CAAA;IACb,CAAC;CACF,CAAA"}

package/dist-server/graphql/resolvers/oauth2-client/delete-oauth2-clients.js

@@ -0,0 +1,15 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.deleteOauth2Clients = void 0;
+const typeorm_1 = require("typeorm");
+const entities_1 = require("../../../entities");
+exports.deleteOauth2Clients = {
+    async deleteOauth2Clients(_, { ids }, context) {
+        await (0, typeorm_1.getRepository)(entities_1.Oauth2Client).delete({
+            domain: context.state.domain,
+            id: (0, typeorm_1.In)(ids)
+        });
+        return true;
+    }
+};
+//# sourceMappingURL=delete-oauth2-clients.js.map

package/dist-server/graphql/resolvers/oauth2-client/delete-oauth2-clients.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"delete-oauth2-clients.js","sourceRoot":"","sources":["../../../../server/graphql/resolvers/oauth2-client/delete-oauth2-clients.ts"],"names":[],"mappings":";;;AAAA,qCAA2C;AAC3C,gDAAgD;AAEnC,QAAA,mBAAmB,GAAG;IACjC,KAAK,CAAC,mBAAmB,CAAC,CAAM,EAAE,EAAE,GAAG,EAAE,EAAE,OAAY;QACrD,MAAM,IAAA,uBAAa,EAAC,uBAAY,CAAC,CAAC,MAAM,CAAC;YACrC,MAAM,EAAE,OAAO,CAAC,KAAK,CAAC,MAAM;YAC5B,EAAE,EAAE,IAAA,YAAE,EAAC,GAAG,CAAC;SACd,CAAC,CAAA;QACF,OAAO,IAAI,CAAA;IACb,CAAC;CACF,CAAA"}

package/dist-server/graphql/resolvers/oauth2-client/get-oauth2-access-token.js

@@ -0,0 +1,49 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.getOauth2AccessToken = void 0;
+const client_oauth2_1 = __importDefault(require("client-oauth2"));
+const typeorm_1 = require("typeorm");
+const entities_1 = require("../../../entities");
+const debug = require('debug')('thins-factory:oauth2-client:get-oauth2-access-token');
+exports.getOauth2AccessToken = {
+    async getOauth2AccessToken(_, { id }, context) {
+        const repository = (0, typeorm_1.getRepository)(entities_1.Oauth2Client);
+        const oauth2Client = await repository.findOne(id);
+        const { grantType, clientId, clientSecret, accessTokenUrl: accessTokenUri, authUrl: authorizationUri, username, password, jwtToken, scopes } = oauth2Client;
+        var auth = new client_oauth2_1.default({
+            clientId,
+            clientSecret,
+            accessTokenUri,
+            authorizationUri,
+            scopes: scopes.split(' ')
+        });
+        debug('grant-type', grantType);
+        var getTokenParams = [];
+        switch (grantType) {
+            case 'owner':
+                getTokenParams = [username, password];
+                break;
+            case 'credentials':
+                getTokenParams = [];
+                break;
+            case 'jwt':
+                getTokenParams = [jwtToken];
+                break;
+            case 'code':
+            default:
+                throw new Error(`unsupported grant type: ${grantType}`);
+        }
+        const token = await auth[grantType].getToken.call(auth[grantType], getTokenParams);
+        const { tokenType: newTokenType, accessToken, refreshToken, data } = token;
+        const expires = (data === null || data === void 0 ? void 0 : data.expires_in) ? token.expiresIn(data === null || data === void 0 ? void 0 : data.expires_in) : null;
+        return await repository.save(Object.assign(Object.assign({}, oauth2Client), { tokenType: newTokenType, accessToken,
+            refreshToken,
+            expires
+            // state: ''
+         }));
+    }
+};
+//# sourceMappingURL=get-oauth2-access-token.js.map

package/dist-server/graphql/resolvers/oauth2-client/get-oauth2-access-token.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"get-oauth2-access-token.js","sourceRoot":"","sources":["../../../../server/graphql/resolvers/oauth2-client/get-oauth2-access-token.ts"],"names":[],"mappings":";;;;;;AAAA,kEAAwC;AAExC,qCAAuC;AACvC,gDAAgD;AAEhD,MAAM,KAAK,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC,qDAAqD,CAAC,CAAA;AAExE,QAAA,oBAAoB,GAAG;IAClC,KAAK,CAAC,oBAAoB,CAAC,CAAM,EAAE,EAAE,EAAE,EAAE,EAAE,OAAY;QACrD,MAAM,UAAU,GAAG,IAAA,uBAAa,EAAC,uBAAY,CAAC,CAAA;QAC9C,MAAM,YAAY,GAAG,MAAM,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC,CAAA;QAEjD,MAAM,EACJ,SAAS,EACT,QAAQ,EACR,YAAY,EACZ,cAAc,EAAE,cAAc,EAC9B,OAAO,EAAE,gBAAgB,EACzB,QAAQ,EACR,QAAQ,EACR,QAAQ,EACR,MAAM,EACP,GAAG,YAAY,CAAA;QAEhB,IAAI,IAAI,GAAG,IAAI,uBAAY,CAAC;YAC1B,QAAQ;YACR,YAAY;YACZ,cAAc;YACd,gBAAgB;YAChB,MAAM,EAAE,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC;SAC1B,CAAC,CAAA;QAEF,KAAK,CAAC,YAAY,EAAE,SAAS,CAAC,CAAA;QAE9B,IAAI,cAAc,GAAG,EAAE,CAAA;QACvB,QAAQ,SAAS,EAAE;YACjB,KAAK,OAAO;gBACV,cAAc,GAAG,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAA;gBACrC,MAAK;YACP,KAAK,aAAa;gBAChB,cAAc,GAAG,EAAE,CAAA;gBACnB,MAAK;YACP,KAAK,KAAK;gBACR,cAAc,GAAG,CAAC,QAAQ,CAAC,CAAA;gBAC3B,MAAK;YACP,KAAK,MAAM,CAAC;YACZ;gBACE,MAAM,IAAI,KAAK,CAAC,2BAA2B,SAAS,EAAE,CAAC,CAAA;SAC1D;QAED,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,cAAc,CAAC,CAAA;QAClF,MAAM,EAAE,SAAS,EAAE,YAAY,EAAE,WAAW,EAAE,YAAY,EAAE,IAAI,EAAE,GAAG,KAAK,CAAA;QAC1E,MAAM,OAAO,GAAG,CAAA,IAAI,aAAJ,IAAI,uBAAJ,IAAI,CAAE,UAAU,EAAC,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC,IAAI,aAAJ,IAAI,uBAAJ,IAAI,CAAE,UAAiB,CAAC,CAAC,CAAC,CAAC,IAAI,CAAA;QAElF,OAAO,MAAM,UAAU,CAAC,IAAI,iCACvB,YAAY,KACf,SAAS,EAAE,YAAY,EACvB,WAAW;YACX,YAAY;YACZ,OAAO;YACP,YAAY;YACZ,CAAA;IACJ,CAAC;CACF,CAAA"}

package/dist-server/graphql/resolvers/oauth2-client/index.js

@@ -0,0 +1,15 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.Oauth2ClientResolver = void 0;
+const oauth2_client_query_1 = require("./oauth2-client-query");
+const update_oauth2_client_1 = require("./update-oauth2-client");
+const create_oauth2_client_1 = require("./create-oauth2-client");
+const delete_oauth2_client_1 = require("./delete-oauth2-client");
+const delete_oauth2_clients_1 = require("./delete-oauth2-clients");
+const get_oauth2_access_token_1 = require("./get-oauth2-access-token");
+const refresh_oauth2_access_token_1 = require("./refresh-oauth2-access-token");
+exports.Oauth2ClientResolver = {
+    Query: oauth2_client_query_1.Query,
+    Mutation: Object.assign(Object.assign(Object.assign(Object.assign(Object.assign(Object.assign({}, update_oauth2_client_1.updateOauth2Client), create_oauth2_client_1.createOauth2Client), delete_oauth2_client_1.deleteOauth2Client), delete_oauth2_clients_1.deleteOauth2Clients), get_oauth2_access_token_1.getOauth2AccessToken), refresh_oauth2_access_token_1.refreshOauth2AccessToken)
+};
+//# sourceMappingURL=index.js.map

package/dist-server/graphql/resolvers/oauth2-client/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../server/graphql/resolvers/oauth2-client/index.ts"],"names":[],"mappings":";;;AAAA,+DAA6C;AAE7C,iEAA2D;AAC3D,iEAA2D;AAC3D,iEAA2D;AAC3D,mEAA6D;AAE7D,uEAAgE;AAChE,+EAAwE;AAE3D,QAAA,oBAAoB,GAAG;IAClC,KAAK,EAAL,2BAAK;IACL,QAAQ,0FACH,yCAAkB,GAClB,yCAAkB,GAClB,yCAAkB,GAClB,2CAAmB,GACnB,8CAAoB,GACpB,sDAAwB,CAC5B;CACF,CAAA"}

package/dist-server/graphql/resolvers/oauth2-client/oauth2-client-query.js

@@ -0,0 +1,46 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.Query = void 0;
+const shell_1 = require("@things-factory/shell");
+const client_oauth2_1 = __importDefault(require("client-oauth2"));
+const typeorm_1 = require("typeorm");
+const crypto_1 = __importDefault(require("crypto"));
+const entities_1 = require("../../../entities");
+exports.Query = {
+    async oauth2Client(_, { id }, context) {
+        const repository = (0, typeorm_1.getRepository)(entities_1.Oauth2Client);
+        return await repository.findOne({
+            where: { domain: context.state.domain, id },
+            relations: ['domain', 'creator', 'updater']
+        });
+    },
+    async oauth2Clients(_, params, context) {
+        const convertedParams = (0, shell_1.convertListParams)(params);
+        const [items, total] = await (0, typeorm_1.getRepository)(entities_1.Oauth2Client).findAndCount(Object.assign(Object.assign({}, convertedParams), { relations: ['domain', 'creator', 'updater'] }));
+        return { items, total };
+    },
+    async getOauth2AuthUrl(_, { id }, context) {
+        const repository = (0, typeorm_1.getRepository)(entities_1.Oauth2Client);
+        const oauth2Client = await repository.findOne(id);
+        const { grantType, clientId, clientSecret, callbackUrl, accessTokenUrl: accessTokenUri, authUrl: authorizationUri, scopes } = oauth2Client;
+        if (grantType !== 'code') {
+            throw new Error(`unsupported grant type: ${grantType}`);
+        }
+        const state = crypto_1.default.randomBytes(16).toString('hex');
+        await repository.save(Object.assign(Object.assign({}, oauth2Client), { state }));
+        var auth = new client_oauth2_1.default({
+            clientId,
+            clientSecret,
+            accessTokenUri,
+            authorizationUri,
+            redirectUri: callbackUrl || `${context.origin}/oauth2-client/callback`,
+            scopes: (scopes === null || scopes === void 0 ? void 0 : scopes.split(' ')) || [],
+            state
+        });
+        return await auth[grantType].getUri();
+    }
+};
+//# sourceMappingURL=oauth2-client-query.js.map

package/dist-server/graphql/resolvers/oauth2-client/oauth2-client-query.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"oauth2-client-query.js","sourceRoot":"","sources":["../../../../server/graphql/resolvers/oauth2-client/oauth2-client-query.ts"],"names":[],"mappings":";;;;;;AAAA,iDAAoE;AACpE,kEAAwC;AACxC,qCAAuC;AACvC,oDAA2B;AAC3B,gDAAgD;AAEnC,QAAA,KAAK,GAAG;IACnB,KAAK,CAAC,YAAY,CAAC,CAAM,EAAE,EAAE,EAAE,EAAE,EAAE,OAAY;QAC7C,MAAM,UAAU,GAAG,IAAA,uBAAa,EAAC,uBAAY,CAAC,CAAA;QAE9C,OAAO,MAAM,UAAU,CAAC,OAAO,CAAC;YAC9B,KAAK,EAAE,EAAE,MAAM,EAAE,OAAO,CAAC,KAAK,CAAC,MAAM,EAAE,EAAE,EAAE;YAC3C,SAAS,EAAE,CAAC,QAAQ,EAAE,SAAS,EAAE,SAAS,CAAC;SAC5C,CAAC,CAAA;IACJ,CAAC;IAED,KAAK,CAAC,aAAa,CAAC,CAAM,EAAE,MAAiB,EAAE,OAAY;QACzD,MAAM,eAAe,GAAG,IAAA,yBAAiB,EAAC,MAAM,CAAC,CAAA;QACjD,MAAM,CAAC,KAAK,EAAE,KAAK,CAAC,GAAG,MAAM,IAAA,uBAAa,EAAC,uBAAY,CAAC,CAAC,YAAY,iCAChE,eAAe,KAClB,SAAS,EAAE,CAAC,QAAQ,EAAE,SAAS,EAAE,SAAS,CAAC,IAC3C,CAAA;QACF,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,CAAA;IACzB,CAAC;IAED,KAAK,CAAC,gBAAgB,CAAC,CAAM,EAAE,EAAE,EAAE,EAAE,EAAE,OAAY;QACjD,MAAM,UAAU,GAAG,IAAA,uBAAa,EAAC,uBAAY,CAAC,CAAA;QAC9C,MAAM,YAAY,GAAG,MAAM,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC,CAAA;QAEjD,MAAM,EACJ,SAAS,EACT,QAAQ,EACR,YAAY,EACZ,WAAW,EACX,cAAc,EAAE,cAAc,EAC9B,OAAO,EAAE,gBAAgB,EACzB,MAAM,EACP,GAAG,YAAY,CAAA;QAEhB,IAAI,SAAS,KAAK,MAAM,EAAE;YACxB,MAAM,IAAI,KAAK,CAAC,2BAA2B,SAAS,EAAE,CAAC,CAAA;SACxD;QAED,MAAM,KAAK,GAAG,gBAAM,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAA;QACpD,MAAM,UAAU,CAAC,IAAI,iCAChB,YAAY,KACf,KAAK,IACL,CAAA;QAEF,IAAI,IAAI,GAAG,IAAI,uBAAY,CAAC;YAC1B,QAAQ;YACR,YAAY;YACZ,cAAc;YACd,gBAAgB;YAChB,WAAW,EAAE,WAAW,IAAI,GAAG,OAAO,CAAC,MAAM,yBAAyB;YACtE,MAAM,EAAE,CAAA,MAAM,aAAN,MAAM,uBAAN,MAAM,CAAE,KAAK,CAAC,GAAG,CAAC,KAAI,EAAE;YAChC,KAAK;SACN,CAAC,CAAA;QAEF,OAAO,MAAO,IAAI,CAAC,SAAS,CAAS,CAAC,MAAM,EAAE,CAAA;IAChD,CAAC;CACF,CAAA"}

package/dist-server/graphql/resolvers/oauth2-client/refresh-oauth2-access-token.js

@@ -0,0 +1,38 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.refreshOauth2AccessToken = void 0;
+const client_oauth2_1 = __importDefault(require("client-oauth2"));
+const typeorm_1 = require("typeorm");
+const entities_1 = require("../../../entities");
+const debug = require('debug')('things-factory:oauth2-client:refresh-oauth2-access-token');
+exports.refreshOauth2AccessToken = {
+    async refreshOauth2AccessToken(_, { id }, context) {
+        const repository = (0, typeorm_1.getRepository)(entities_1.Oauth2Client);
+        const oauth2Client = await repository.findOne(id);
+        const { clientId, clientSecret, accessTokenUrl: accessTokenUri, authUrl: authorizationUri, scopes, tokenType, accessToken, refreshToken } = oauth2Client;
+        if (!refreshToken) {
+            throw new Error('refreshToken not found');
+        }
+        var auth = new client_oauth2_1.default({
+            clientId,
+            clientSecret,
+            accessTokenUri,
+            authorizationUri,
+            scopes: scopes === null || scopes === void 0 ? void 0 : scopes.split(' ')
+        });
+        try {
+            var token = await auth.createToken(accessToken, refreshToken, tokenType, {}).refresh();
+        }
+        catch (err) {
+            debug('getting refresh-token error', err);
+            throw err;
+        }
+        const { accessToken: newAccessToken, refreshToken: newRefreshToken, tokenType: newTokenType, data } = token;
+        const expires = (data === null || data === void 0 ? void 0 : data.expires_in) ? token.expiresIn(data === null || data === void 0 ? void 0 : data.expires_in) : null;
+        return await repository.save(Object.assign(Object.assign({}, oauth2Client), { accessToken: newAccessToken, refreshToken: newRefreshToken, tokenType: newTokenType, expires }));
+    }
+};
+//# sourceMappingURL=refresh-oauth2-access-token.js.map

package/dist-server/graphql/resolvers/oauth2-client/refresh-oauth2-access-token.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"refresh-oauth2-access-token.js","sourceRoot":"","sources":["../../../../server/graphql/resolvers/oauth2-client/refresh-oauth2-access-token.ts"],"names":[],"mappings":";;;;;;AAAA,kEAAwC;AAExC,qCAAuC;AACvC,gDAAgD;AAEhD,MAAM,KAAK,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC,0DAA0D,CAAC,CAAA;AAE7E,QAAA,wBAAwB,GAAG;IACtC,KAAK,CAAC,wBAAwB,CAAC,CAAM,EAAE,EAAE,EAAE,EAAE,EAAE,OAAY;QACzD,MAAM,UAAU,GAAG,IAAA,uBAAa,EAAC,uBAAY,CAAC,CAAA;QAC9C,MAAM,YAAY,GAAG,MAAM,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC,CAAA;QAEjD,MAAM,EACJ,QAAQ,EACR,YAAY,EACZ,cAAc,EAAE,cAAc,EAC9B,OAAO,EAAE,gBAAgB,EACzB,MAAM,EACN,SAAS,EACT,WAAW,EACX,YAAY,EACb,GAAG,YAAY,CAAA;QAEhB,IAAI,CAAC,YAAY,EAAE;YACjB,MAAM,IAAI,KAAK,CAAC,wBAAwB,CAAC,CAAA;SAC1C;QAED,IAAI,IAAI,GAAG,IAAI,uBAAY,CAAC;YAC1B,QAAQ;YACR,YAAY;YACZ,cAAc;YACd,gBAAgB;YAChB,MAAM,EAAE,MAAM,aAAN,MAAM,uBAAN,MAAM,CAAE,KAAK,CAAC,GAAG,CAAC;SAC3B,CAAC,CAAA;QAEF,IAAI;YACF,IAAI,KAAK,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,WAAW,EAAE,YAAY,EAAE,SAAS,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE,CAAA;SACvF;QAAC,OAAO,GAAG,EAAE;YACZ,KAAK,CAAC,6BAA6B,EAAE,GAAG,CAAC,CAAA;YACzC,MAAM,GAAG,CAAA;SACV;QAED,MAAM,EAAE,WAAW,EAAE,cAAc,EAAE,YAAY,EAAE,eAAe,EAAE,SAAS,EAAE,YAAY,EAAE,IAAI,EAAE,GAAG,KAAK,CAAA;QAC3G,MAAM,OAAO,GAAG,CAAA,IAAI,aAAJ,IAAI,uBAAJ,IAAI,CAAE,UAAU,EAAC,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC,IAAI,aAAJ,IAAI,uBAAJ,IAAI,CAAE,UAAiB,CAAC,CAAC,CAAC,CAAC,IAAI,CAAA;QAElF,OAAO,MAAM,UAAU,CAAC,IAAI,iCACvB,YAAY,KACf,WAAW,EAAE,cAAc,EAC3B,YAAY,EAAE,eAAe,EAC7B,SAAS,EAAE,YAAY,EACvB,OAAO,IACP,CAAA;IACJ,CAAC;CACF,CAAA"}

package/dist-server/graphql/resolvers/oauth2-client/update-oauth2-client.js

@@ -0,0 +1,15 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.updateOauth2Client = void 0;
+const typeorm_1 = require("typeorm");
+const entities_1 = require("../../../entities");
+exports.updateOauth2Client = {
+    async updateOauth2Client(_, { id, patch }, context) {
+        const repository = (0, typeorm_1.getRepository)(entities_1.Oauth2Client);
+        const oauth2Client = await repository.findOne({
+            where: { domain: context.state.domain, id }
+        });
+        return await repository.save(Object.assign(Object.assign(Object.assign({}, oauth2Client), patch), { updater: context.state.user }));
+    }
+};
+//# sourceMappingURL=update-oauth2-client.js.map

package/dist-server/graphql/resolvers/oauth2-client/update-oauth2-client.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"update-oauth2-client.js","sourceRoot":"","sources":["../../../../server/graphql/resolvers/oauth2-client/update-oauth2-client.ts"],"names":[],"mappings":";;;AAAA,qCAAuC;AACvC,gDAAgD;AAEnC,QAAA,kBAAkB,GAAG;IAChC,KAAK,CAAC,kBAAkB,CAAC,CAAM,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,EAAE,OAAY;QAC1D,MAAM,UAAU,GAAG,IAAA,uBAAa,EAAC,uBAAY,CAAC,CAAA;QAC9C,MAAM,YAAY,GAAG,MAAM,UAAU,CAAC,OAAO,CAAC;YAC5C,KAAK,EAAE,EAAE,MAAM,EAAE,OAAO,CAAC,KAAK,CAAC,MAAM,EAAE,EAAE,EAAE;SAC5C,CAAC,CAAA;QAEF,OAAO,MAAM,UAAU,CAAC,IAAI,+CACvB,YAAY,GACZ,KAAK,KACR,OAAO,EAAE,OAAO,CAAC,KAAK,CAAC,IAAI,IAC3B,CAAA;IACJ,CAAC;CACF,CAAA"}

package/dist-server/graphql/types/index.js

@@ -0,0 +1,18 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __exportStar = (this && this.__exportStar) || function(m, exports) {
+    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+__exportStar(require("./oauth2-client"), exports);
+//# sourceMappingURL=index.js.map

package/dist-server/graphql/types/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../server/graphql/types/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,kDAA+B"}

package/dist-server/graphql/types/oauth2-client/index.js

@@ -0,0 +1,42 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __exportStar = (this && this.__exportStar) || function(m, exports) {
+    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
+};
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.Oauth2ClientResolver = void 0;
+const graphql_tag_1 = __importDefault(require("graphql-tag"));
+__exportStar(require("./oauth2-client"), exports);
+__exportStar(require("./new-oauth2-client"), exports);
+__exportStar(require("./oauth2-client-patch"), exports);
+__exportStar(require("./oauth2-client-list"), exports);
+exports.Oauth2ClientResolver = (0, graphql_tag_1.default) `
+  extend type Mutation {
+    createOauth2Client(oauth2Client: NewOauth2Client!): Oauth2Client
+    updateOauth2Client(id: String!, patch: Oauth2ClientPatch!): Oauth2Client
+    deleteOauth2Client(id: String!): Boolean
+    deleteOauth2Clients(ids: [String]!): Boolean
+    getOauth2AccessToken(id: String!): Oauth2Client
+    refreshOauth2AccessToken(id: String!): Oauth2Client
+  }
+
+  extend type Query {
+    oauth2Clients(filters: [Filter], pagination: Pagination, sortings: [Sorting]): Oauth2ClientList
+    oauth2Client(id: String!): Oauth2Client
+    getOauth2AuthUrl(id: String!): String
+  }
+`;
+//# sourceMappingURL=index.js.map

package/dist-server/graphql/types/oauth2-client/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../server/graphql/types/oauth2-client/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;AAAA,8DAA6B;AAE7B,kDAA+B;AAC/B,sDAAmC;AACnC,wDAAqC;AACrC,uDAAoC;AAEvB,QAAA,oBAAoB,GAAG,IAAA,qBAAG,EAAA;;;;;;;;;;;;;;;CAetC,CAAA"}

package/dist-server/graphql/types/oauth2-client/new-oauth2-client.js

@@ -0,0 +1,30 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.NewOauth2Client = void 0;
+const graphql_tag_1 = __importDefault(require("graphql-tag"));
+exports.NewOauth2Client = (0, graphql_tag_1.default) `
+  input NewOauth2Client {
+    name: String
+    description: String
+    icon: String
+    grantType: String
+    clientId: String
+    clientSecret: String
+    callbackUrl: String
+    authUrl: String
+    accessTokenUrl: String
+    webhook: String
+    username: String
+    password: String
+    codeChallengeMethod: String
+    codeVerifier: String
+    scopes: String
+    accessToken: String
+    refreshToken: String
+    jwtToken: String
+  }
+`;
+//# sourceMappingURL=new-oauth2-client.js.map

package/dist-server/graphql/types/oauth2-client/new-oauth2-client.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"new-oauth2-client.js","sourceRoot":"","sources":["../../../../server/graphql/types/oauth2-client/new-oauth2-client.ts"],"names":[],"mappings":";;;;;;AAAA,8DAA6B;AAEhB,QAAA,eAAe,GAAG,IAAA,qBAAG,EAAA;;;;;;;;;;;;;;;;;;;;;CAqBjC,CAAA"}

package/dist-server/graphql/types/oauth2-client/oauth2-client-list.js

@@ -0,0 +1,14 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.Oauth2ClientList = void 0;
+const graphql_tag_1 = __importDefault(require("graphql-tag"));
+exports.Oauth2ClientList = (0, graphql_tag_1.default) `
+  type Oauth2ClientList {
+    items: [Oauth2Client]
+    total: Int
+  }
+`;
+//# sourceMappingURL=oauth2-client-list.js.map

package/dist-server/graphql/types/oauth2-client/oauth2-client-list.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"oauth2-client-list.js","sourceRoot":"","sources":["../../../../server/graphql/types/oauth2-client/oauth2-client-list.ts"],"names":[],"mappings":";;;;;;AAAA,8DAA6B;AAEhB,QAAA,gBAAgB,GAAG,IAAA,qBAAG,EAAA;;;;;CAKlC,CAAA"}

package/dist-server/graphql/types/oauth2-client/oauth2-client-patch.js

@@ -0,0 +1,30 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.Oauth2ClientPatch = void 0;
+const graphql_tag_1 = __importDefault(require("graphql-tag"));
+exports.Oauth2ClientPatch = (0, graphql_tag_1.default) `
+  input Oauth2ClientPatch {
+    name: String
+    description: String
+    icon: String
+    grantType: String
+    clientId: String
+    clientSecret: String
+    callbackUrl: String
+    authUrl: String
+    accessTokenUrl: String
+    webhook: String
+    username: String
+    password: String
+    codeChallengeMethod: String
+    codeVerifier: String
+    scopes: String
+    accessToken: String
+    refreshToken: String
+    jwtToken: String
+  }
+`;
+//# sourceMappingURL=oauth2-client-patch.js.map

package/dist-server/graphql/types/oauth2-client/oauth2-client-patch.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"oauth2-client-patch.js","sourceRoot":"","sources":["../../../../server/graphql/types/oauth2-client/oauth2-client-patch.ts"],"names":[],"mappings":";;;;;;AAAA,8DAA6B;AAEhB,QAAA,iBAAiB,GAAG,IAAA,qBAAG,EAAA;;;;;;;;;;;;;;;;;;;;;CAqBnC,CAAA"}

package/dist-server/graphql/types/oauth2-client/oauth2-client.js

@@ -0,0 +1,38 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.Oauth2Client = void 0;
+const graphql_tag_1 = __importDefault(require("graphql-tag"));
+exports.Oauth2Client = (0, graphql_tag_1.default) `
+  type Oauth2Client {
+    id: String
+    domain: Domain
+    name: String
+    description: String
+    icon: String
+    grantType: String
+    clientId: String
+    clientSecret: String
+    callbackUrl: String
+    authUrl: String
+    accessTokenUrl: String
+    webhook: String
+    username: String
+    password: String
+    codeChallengeMethod: String
+    codeVerifier: String
+    scopes: String
+    accessToken: String
+    refreshToken: String
+    expires: String
+    jwtToken: String
+    tokenType: String
+    updater: User
+    creator: User
+    updatedAt: String
+    createdAt: String
+  }
+`;
+//# sourceMappingURL=oauth2-client.js.map

package/dist-server/graphql/types/oauth2-client/oauth2-client.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"oauth2-client.js","sourceRoot":"","sources":["../../../../server/graphql/types/oauth2-client/oauth2-client.ts"],"names":[],"mappings":";;;;;;AAAA,8DAA6B;AAEhB,QAAA,YAAY,GAAG,IAAA,qBAAG,EAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CA6B9B,CAAA"}

package/dist-server/index.js

@@ -0,0 +1,20 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __exportStar = (this && this.__exportStar) || function(m, exports) {
+    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+__exportStar(require("./entities"), exports);
+__exportStar(require("./graphql"), exports);
+require("./routes");
+//# sourceMappingURL=index.js.map

package/dist-server/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../server/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,6CAA0B;AAC1B,4CAAyB;AAEzB,oBAAiB"}

package/dist-server/routes.js

@@ -0,0 +1,104 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+const client_oauth2_1 = __importDefault(require("client-oauth2"));
+const shell_1 = require("@things-factory/shell");
+const typeorm_1 = require("typeorm");
+const entities_1 = require("./entities");
+const crypto_1 = __importDefault(require("crypto"));
+const debug = require('debug')('things-factory:oauth2-client:routes');
+process.on('bootstrap-module-domain-private-route', (app, domainPrivateRouter) => {
+    domainPrivateRouter.get('/oauth2-client/:id/auth-uri', async (context, next) => {
+        const { params, origin } = context;
+        const { id } = params;
+        const repository = (0, typeorm_1.getRepository)(entities_1.Oauth2Client);
+        const oauth2Client = await repository.findOne(id);
+        const { grantType, clientId, clientSecret, accessTokenUrl: accessTokenUri, authUrl: authorizationUri, scopes } = oauth2Client;
+        if (grantType !== 'code') {
+            throw new Error(`unsupported grant type: ${grantType}`);
+        }
+        const state = crypto_1.default.randomBytes(16).toString('hex');
+        await repository.save(Object.assign(Object.assign({}, oauth2Client), { state }));
+        var auth = new client_oauth2_1.default({
+            clientId,
+            clientSecret,
+            accessTokenUri,
+            authorizationUri,
+            redirectUri: `${origin}/oauth2-client/callback`,
+            scopes: (scopes === null || scopes === void 0 ? void 0 : scopes.split(' ')) || [],
+            state
+        });
+        context.status = 200;
+        context.body = await auth.code.getUri();
+    });
+    domainPrivateRouter.get('/oauth2-client/:id/refresh', async (context, next) => {
+        const { params } = context;
+        const { id } = params;
+        debug('refresh', 'started');
+        const repository = (0, typeorm_1.getRepository)(entities_1.Oauth2Client);
+        const oauth2Client = await repository.findOne(id);
+        const { grantType, clientId, clientSecret, accessTokenUrl: accessTokenUri, authUrl: authorizationUri, scopes, tokenType, accessToken, refreshToken } = oauth2Client;
+        if (!refreshToken) {
+            context.status = 404;
+            context.body = 'refreshToken not found';
+            return;
+        }
+        var auth = new client_oauth2_1.default({
+            clientId,
+            clientSecret,
+            accessTokenUri,
+            authorizationUri,
+            scopes: (scopes === null || scopes === void 0 ? void 0 : scopes.split(' ')) || []
+        });
+        const { accessToken: newAccessToken, refreshToken: newRefreshToken } = await auth
+            .createToken(accessToken, refreshToken, tokenType, {})
+            .refresh();
+        debug('refresh', 'done');
+        context.status = 200;
+        context.body = await repository.save(Object.assign(Object.assign({}, oauth2Client), { accessToken: newAccessToken, refreshToken: newRefreshToken, state: '' }));
+    });
+});
+process.on('bootstrap-module-domain-public-route', (app, domainPublicRouter) => {
+    domainPublicRouter.get('/oauth2-client/callback', async (context, next) => {
+        const { state } = context.query;
+        const { originalUrl } = context;
+        const repository = (0, typeorm_1.getRepository)(entities_1.Oauth2Client);
+        const oauth2Client = await repository.findOne({
+            state
+        }, {
+            relations: ['domain']
+        });
+        const { domain, id, grantType, clientId, clientSecret, accessTokenUrl: accessTokenUri, authUrl: authorizationUri, scopes } = oauth2Client;
+        var auth = new client_oauth2_1.default({
+            clientId,
+            clientSecret,
+            accessTokenUri,
+            authorizationUri,
+            scopes: (scopes === null || scopes === void 0 ? void 0 : scopes.split(' ')) || []
+        });
+        var url = originalUrl;
+        switch (grantType) {
+            case 'credentials':
+                break;
+            case 'jwt':
+                break;
+            case 'code':
+                break;
+            case 'owner':
+            default:
+                throw new Error(`unsupported grant type: ${grantType}`);
+        }
+        const token = await auth.code.getToken(originalUrl);
+        debug('token', token);
+        const { tokenType, accessToken, refreshToken, data } = token;
+        const expires = (data === null || data === void 0 ? void 0 : data.expires_in) ? token.expiresIn(data === null || data === void 0 ? void 0 : data.expires_in) : null;
+        await repository.save(Object.assign(Object.assign({}, oauth2Client), { tokenType,
+            accessToken,
+            refreshToken,
+            expires, scopes: data === null || data === void 0 ? void 0 : data.scope.replace(',', ' '), state: '' }));
+        context.redirect((0, shell_1.getRedirectSubdomainPath)(context, domain === null || domain === void 0 ? void 0 : domain.subdomain, `/oauth2-client/${id}`));
+    });
+});
+//# sourceMappingURL=routes.js.map

package/dist-server/routes.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"routes.js","sourceRoot":"","sources":["../server/routes.ts"],"names":[],"mappings":";;;;;AAAA,kEAAwC;AACxC,iDAAgE;AAChE,qCAAuC;AACvC,yCAAyC;AAEzC,oDAA2B;AAE3B,MAAM,KAAK,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC,qCAAqC,CAAC,CAAA;AAErE,OAAO,CAAC,EAAE,CAAC,uCAA8C,EAAE,CAAC,GAAG,EAAE,mBAAmB,EAAE,EAAE;IACtF,mBAAmB,CAAC,GAAG,CAAC,6BAA6B,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE;QAC7E,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,OAAO,CAAA;QAClC,MAAM,EAAE,EAAE,EAAE,GAAG,MAAM,CAAA;QAErB,MAAM,UAAU,GAAG,IAAA,uBAAa,EAAC,uBAAY,CAAC,CAAA;QAC9C,MAAM,YAAY,GAAG,MAAM,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC,CAAA;QAEjD,MAAM,EACJ,SAAS,EACT,QAAQ,EACR,YAAY,EACZ,cAAc,EAAE,cAAc,EAC9B,OAAO,EAAE,gBAAgB,EACzB,MAAM,EACP,GAAG,YAAY,CAAA;QAEhB,IAAI,SAAS,KAAK,MAAM,EAAE;YACxB,MAAM,IAAI,KAAK,CAAC,2BAA2B,SAAS,EAAE,CAAC,CAAA;SACxD;QAED,MAAM,KAAK,GAAG,gBAAM,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAA;QACpD,MAAM,UAAU,CAAC,IAAI,iCAChB,YAAY,KACf,KAAK,IACL,CAAA;QAEF,IAAI,IAAI,GAAG,IAAI,uBAAY,CAAC;YAC1B,QAAQ;YACR,YAAY;YACZ,cAAc;YACd,gBAAgB;YAChB,WAAW,EAAE,GAAG,MAAM,yBAAyB;YAC/C,MAAM,EAAE,CAAA,MAAM,aAAN,MAAM,uBAAN,MAAM,CAAE,KAAK,CAAC,GAAG,CAAC,KAAI,EAAE;YAChC,KAAK;SACN,CAAC,CAAA;QAEF,OAAO,CAAC,MAAM,GAAG,GAAG,CAAA;QACpB,OAAO,CAAC,IAAI,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,CAAA;IACzC,CAAC,CAAC,CAAA;IAEF,mBAAmB,CAAC,GAAG,CAAC,4BAA4B,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE;QAC5E,MAAM,EAAE,MAAM,EAAE,GAAG,OAAO,CAAA;QAC1B,MAAM,EAAE,EAAE,EAAE,GAAG,MAAM,CAAA;QAErB,KAAK,CAAC,SAAS,EAAE,SAAS,CAAC,CAAA;QAE3B,MAAM,UAAU,GAAG,IAAA,uBAAa,EAAC,uBAAY,CAAC,CAAA;QAC9C,MAAM,YAAY,GAAG,MAAM,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC,CAAA;QAEjD,MAAM,EACJ,SAAS,EACT,QAAQ,EACR,YAAY,EACZ,cAAc,EAAE,cAAc,EAC9B,OAAO,EAAE,gBAAgB,EACzB,MAAM,EACN,SAAS,EACT,WAAW,EACX,YAAY,EACb,GAAG,YAAY,CAAA;QAEhB,IAAI,CAAC,YAAY,EAAE;YACjB,OAAO,CAAC,MAAM,GAAG,GAAG,CAAA;YACpB,OAAO,CAAC,IAAI,GAAG,wBAAwB,CAAA;YAEvC,OAAM;SACP;QAED,IAAI,IAAI,GAAG,IAAI,uBAAY,CAAC;YAC1B,QAAQ;YACR,YAAY;YACZ,cAAc;YACd,gBAAgB;YAChB,MAAM,EAAE,CAAA,MAAM,aAAN,MAAM,uBAAN,MAAM,CAAE,KAAK,CAAC,GAAG,CAAC,KAAI,EAAE;SACjC,CAAC,CAAA;QAEF,MAAM,EAAE,WAAW,EAAE,cAAc,EAAE,YAAY,EAAE,eAAe,EAAE,GAAG,MAAM,IAAI;aAC9E,WAAW,CAAC,WAAW,EAAE,YAAY,EAAE,SAAS,EAAE,EAAE,CAAC;aACrD,OAAO,EAAE,CAAA;QAEZ,KAAK,CAAC,SAAS,EAAE,MAAM,CAAC,CAAA;QAExB,OAAO,CAAC,MAAM,GAAG,GAAG,CAAA;QACpB,OAAO,CAAC,IAAI,GAAG,MAAM,UAAU,CAAC,IAAI,iCAC/B,YAAY,KACf,WAAW,EAAE,cAAc,EAC3B,YAAY,EAAE,eAAe,EAC7B,KAAK,EAAE,EAAE,IACT,CAAA;IACJ,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA;AAEF,OAAO,CAAC,EAAE,CAAC,sCAA6C,EAAE,CAAC,GAAG,EAAE,kBAAkB,EAAE,EAAE;IACpF,kBAAkB,CAAC,GAAG,CAAC,yBAAyB,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE;QACxE,MAAM,EAAE,KAAK,EAAE,GAAG,OAAO,CAAC,KAAK,CAAA;QAC/B,MAAM,EAAE,WAAW,EAAE,GAAG,OAAO,CAAA;QAE/B,MAAM,UAAU,GAAG,IAAA,uBAAa,EAAC,uBAAY,CAAC,CAAA;QAC9C,MAAM,YAAY,GAAiB,MAAM,UAAU,CAAC,OAAO,CACzD;YACE,KAAK;SACN,EACD;YACE,SAAS,EAAE,CAAC,QAAQ,CAAC;SACtB,CACF,CAAA;QAED,MAAM,EACJ,MAAM,EACN,EAAE,EACF,SAAS,EACT,QAAQ,EACR,YAAY,EACZ,cAAc,EAAE,cAAc,EAC9B,OAAO,EAAE,gBAAgB,EACzB,MAAM,EACP,GAAG,YAAY,CAAA;QAEhB,IAAI,IAAI,GAAG,IAAI,uBAAY,CAAC;YAC1B,QAAQ;YACR,YAAY;YACZ,cAAc;YACd,gBAAgB;YAChB,MAAM,EAAE,CAAA,MAAM,aAAN,MAAM,uBAAN,MAAM,CAAE,KAAK,CAAC,GAAG,CAAC,KAAI,EAAE;SACjC,CAAC,CAAA;QAEF,IAAI,GAAG,GAAG,WAAW,CAAA;QACrB,QAAQ,SAAS,EAAE;YACjB,KAAK,aAAa;gBAChB,MAAK;YACP,KAAK,KAAK;gBACR,MAAK;YACP,KAAK,MAAM;gBACT,MAAK;YACP,KAAK,OAAO,CAAC;YACb;gBACE,MAAM,IAAI,KAAK,CAAC,2BAA2B,SAAS,EAAE,CAAC,CAAA;SAC1D;QAED,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAA;QACnD,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,CAAA;QACrB,MAAM,EAAE,SAAS,EAAE,WAAW,EAAE,YAAY,EAAE,IAAI,EAAE,GAAG,KAAK,CAAA;QAC5D,MAAM,OAAO,GAAG,CAAA,IAAI,aAAJ,IAAI,uBAAJ,IAAI,CAAE,UAAU,EAAC,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC,IAAI,aAAJ,IAAI,uBAAJ,IAAI,CAAE,UAAiB,CAAC,CAAC,CAAC,CAAC,IAAI,CAAA;QAElF,MAAM,UAAU,CAAC,IAAI,iCAChB,YAAY,KACf,SAAS;YACT,WAAW;YACX,YAAY;YACZ,OAAO,EACP,MAAM,EAAE,IAAI,aAAJ,IAAI,uBAAJ,IAAI,CAAE,KAAK,CAAC,OAAO,CAAC,GAAG,EAAE,GAAG,CAAC,EACrC,KAAK,EAAE,EAAE,IACT,CAAA;QAEF,OAAO,CAAC,QAAQ,CAAC,IAAA,gCAAwB,EAAC,OAAO,EAAE,MAAM,aAAN,MAAM,uBAAN,MAAM,CAAE,SAAS,EAAE,kBAAkB,EAAE,EAAE,CAAC,CAAC,CAAA;IAChG,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@things-factory/oauth2-client",
-  "version": "4.3.671",
+  "version": "4.3.672",
   "main": "dist-server/index.js",
   "browser": "client/index.js",
   "things-factory": true,
@@ -28,11 +28,11 @@
     "@operato/layout": "^0.4.6",
     "@operato/shell": "^0.4.6",
     "@operato/utils": "^0.4.6",
-    "@things-factory/auth-base": "^4.3.671",
-    "@things-factory/layout-base": "^4.3.671",
-    "@things-factory/shell": "^4.3.671",
+    "@things-factory/auth-base": "^4.3.672",
+    "@things-factory/layout-base": "^4.3.672",
+    "@things-factory/shell": "^4.3.672",
     "client-oauth2": "^4.3.3",
     "clipboard": "^2.0.6"
   },
-  "gitHead": "ef524cb207378186ec71917d9a8546363d4300b2"
+  "gitHead": "e15764fbf19b0a3c8408d907fc1dcff13bc0a933"
 }