@toa.io/extensions.exposition 1.0.0-alpha.108 → 1.0.0-alpha.109
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/documentation/access.md +20 -0
- package/features/auth.incept.feature +32 -0
- package/features/auth.input.feature +59 -0
- package/features/cache.feature +4 -4
- package/features/identity.feature +0 -32
- package/package.json +2 -2
- package/source/HTTP/Context.ts +5 -4
- package/source/directives/auth/Anonymous.ts +3 -3
- package/source/directives/auth/Anyone.ts +3 -3
- package/source/directives/auth/Authorization.ts +13 -9
- package/source/directives/auth/Delegate.ts +2 -3
- package/source/directives/auth/Echo.ts +5 -5
- package/source/directives/auth/Federation.ts +4 -4
- package/source/directives/auth/Id.ts +1 -1
- package/source/directives/auth/Incept.ts +8 -8
- package/source/directives/auth/Input.ts +72 -0
- package/source/directives/auth/Rule.ts +3 -5
- package/source/directives/auth/Scheme.ts +4 -4
- package/source/directives/auth/types.ts +8 -4
- package/transpiled/HTTP/Context.js +4 -4
- package/transpiled/HTTP/Context.js.map +1 -1
- package/transpiled/directives/auth/Anonymous.d.ts +2 -2
- package/transpiled/directives/auth/Anonymous.js +2 -2
- package/transpiled/directives/auth/Anonymous.js.map +1 -1
- package/transpiled/directives/auth/Anyone.d.ts +2 -2
- package/transpiled/directives/auth/Anyone.js +2 -2
- package/transpiled/directives/auth/Anyone.js.map +1 -1
- package/transpiled/directives/auth/Authorization.d.ts +3 -3
- package/transpiled/directives/auth/Authorization.js +10 -7
- package/transpiled/directives/auth/Authorization.js.map +1 -1
- package/transpiled/directives/auth/Delegate.d.ts +2 -3
- package/transpiled/directives/auth/Delegate.js.map +1 -1
- package/transpiled/directives/auth/Echo.d.ts +3 -3
- package/transpiled/directives/auth/Echo.js +3 -3
- package/transpiled/directives/auth/Echo.js.map +1 -1
- package/transpiled/directives/auth/Federation.d.ts +2 -2
- package/transpiled/directives/auth/Federation.js.map +1 -1
- package/transpiled/directives/auth/Id.d.ts +1 -1
- package/transpiled/directives/auth/Id.js.map +1 -1
- package/transpiled/directives/auth/Incept.d.ts +4 -4
- package/transpiled/directives/auth/Incept.js +5 -5
- package/transpiled/directives/auth/Incept.js.map +1 -1
- package/transpiled/directives/auth/Input.d.ts +14 -0
- package/transpiled/directives/auth/Input.js +49 -0
- package/transpiled/directives/auth/Input.js.map +1 -0
- package/transpiled/directives/auth/Rule.d.ts +2 -4
- package/transpiled/directives/auth/Rule.js +2 -2
- package/transpiled/directives/auth/Rule.js.map +1 -1
- package/transpiled/directives/auth/Scheme.d.ts +2 -2
- package/transpiled/directives/auth/Scheme.js +3 -3
- package/transpiled/directives/auth/Scheme.js.map +1 -1
- package/transpiled/directives/auth/types.d.ts +6 -4
- package/transpiled/tsconfig.tsbuildinfo +1 -1
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"Context.js","sourceRoot":"","sources":["../../source/HTTP/Context.ts"],"names":[],"mappings":";;;;;;AAAA,4DAAmC;AACnC,uCAAkC;AAClC,qCAAiC;AACjC,uCAAuD;AACvD,yCAAiC;AAIjC,MAAa,OAAO;IACF,SAAS,CAAQ;IACjB,OAAO,CAAiB;IACxB,GAAG,CAAK;IACR,OAAO,GAAkB,IAAI,CAAA;IAC7B,OAAO,GAAkB,IAAI,CAAA;IAC7B,MAAM,CAAQ;IACd,KAAK,CAAS;IAEd,SAAS,GAAc;QACrC,IAAI,EAAE,EAAE;QACR,QAAQ,EAAE,EAAE;KACb,CAAA;IAED,YAAoB,SAAiB,EAAE,OAAwB,EAAE,UAAsB;QACrF,IAAI,CAAC,SAAS,GAAG,SAAS,CAAA;QAC1B,IAAI,CAAC,OAAO,GAAG,OAAO,CAAA;QAEtB,IAAI,CAAC,GAAG,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,EAAE,WAAW,OAAO,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,CAAA;QAClE,IAAI,CAAC,MAAM,GAAG,IAAI,eAAM,CAAC,UAAU,CAAC,KAAK,CAAC,CAAA;QAC1C,IAAI,CAAC,KAAK,GAAG,UAAU,CAAC,KAAK,CAAA;QAE7B,IAAI,IAAI,CAAC,KAAK;YACZ,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,CAAA;QAEnB,IAAI,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;YAC9C,MAAM,KAAK,GAAG,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,CAAA;YAEvD,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;gBACnB,MAAM,EACJ,IAAI,EACJ,OAAO,EACP,MAAM,EACP,GAAG,KAAK,CAAC,MAAO,CAAA;gBAEjB,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,GAAG,GAAG,IAAI,IAAI,MAAM,EAAE,CAAA;gBACjD,IAAI,CAAC,OAAO,GAAG,OAAO,CAAA;YACxB,CAAC;QACH,CAAC;QAED,MAAM,UAAU,GAAG,IAAI,oBAAU,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;QAC/C,MAAM,SAAS,GAAG,UAAU,CAAC,SAAS,CAAC,eAAK,CAAC,CAAA;QAE7C,IAAI,SAAS,KAAK,SAAS;YACzB,IAAI,CAAC,OAAO,GAAG,iBAAO,CAAC,SAAS,CAAC,CAAA;IACrC,CAAC;IAEM,KAAK,CAAC,IAAI;QACf,
|
|
1
|
+
{"version":3,"file":"Context.js","sourceRoot":"","sources":["../../source/HTTP/Context.ts"],"names":[],"mappings":";;;;;;AAAA,4DAAmC;AACnC,uCAAkC;AAClC,qCAAiC;AACjC,uCAAuD;AACvD,yCAAiC;AAIjC,MAAa,OAAO;IACF,SAAS,CAAQ;IACjB,OAAO,CAAiB;IACxB,GAAG,CAAK;IACR,OAAO,GAAkB,IAAI,CAAA;IAC7B,OAAO,GAAkB,IAAI,CAAA;IAC7B,MAAM,CAAQ;IACd,KAAK,CAAS;IAEd,SAAS,GAAc;QACrC,IAAI,EAAE,EAAE;QACR,QAAQ,EAAE,EAAE;KACb,CAAA;IAED,YAAoB,SAAiB,EAAE,OAAwB,EAAE,UAAsB;QACrF,IAAI,CAAC,SAAS,GAAG,SAAS,CAAA;QAC1B,IAAI,CAAC,OAAO,GAAG,OAAO,CAAA;QAEtB,IAAI,CAAC,GAAG,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,EAAE,WAAW,OAAO,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,CAAA;QAClE,IAAI,CAAC,MAAM,GAAG,IAAI,eAAM,CAAC,UAAU,CAAC,KAAK,CAAC,CAAA;QAC1C,IAAI,CAAC,KAAK,GAAG,UAAU,CAAC,KAAK,CAAA;QAE7B,IAAI,IAAI,CAAC,KAAK;YACZ,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,CAAA;QAEnB,IAAI,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;YAC9C,MAAM,KAAK,GAAG,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,CAAA;YAEvD,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;gBACnB,MAAM,EACJ,IAAI,EACJ,OAAO,EACP,MAAM,EACP,GAAG,KAAK,CAAC,MAAO,CAAA;gBAEjB,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,GAAG,GAAG,IAAI,IAAI,MAAM,EAAE,CAAA;gBACjD,IAAI,CAAC,OAAO,GAAG,OAAO,CAAA;YACxB,CAAC;QACH,CAAC;QAED,MAAM,UAAU,GAAG,IAAI,oBAAU,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;QAC/C,MAAM,SAAS,GAAG,UAAU,CAAC,SAAS,CAAC,eAAK,CAAC,CAAA;QAE7C,IAAI,SAAS,KAAK,SAAS;YACzB,IAAI,CAAC,OAAO,GAAG,iBAAO,CAAC,SAAS,CAAC,CAAA;IACrC,CAAC;IAEM,KAAK,CAAC,IAAI;QACf,IAAI,KAAK,GAAG,MAAM,IAAA,eAAI,EAAC,IAAI,CAAC,CAAA;QAE5B,KAAK,MAAM,SAAS,IAAI,IAAI,CAAC,SAAS,CAAC,IAAI;YACzC,KAAK,GAAG,MAAM,SAAS,CAAC,KAAK,CAAC,CAAA;QAEhC,OAAO,KAAK,CAAA;IACd,CAAC;IAEO,GAAG,CAAE,OAAwB;QACnC,MAAM,OAAO,GAAG,EAAE,GAAG,OAAO,CAAC,OAAO,EAAE,CAAA;QAEtC,IAAI,OAAO,CAAC,aAAa,KAAK,SAAS;YACrC,cAAc;YACd,OAAO,CAAC,aAAa,GAAG,OAAO,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC,EAAE,OAAO,CAAC,aAAa,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAA;QAE5F,kBAAO,CAAC,KAAK,CAAC,kBAAkB,EAAE,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,OAAO,EAAE,CAAC,CAAA;IAC1F,CAAC;CACF;AAjED,0BAiEC;AAiBD,MAAM,OAAO,GAAG,4EAA4E,CAAA"}
|
|
@@ -1,6 +1,6 @@
|
|
|
1
|
-
import { type Directive, type
|
|
1
|
+
import { type Directive, type Context } from './types';
|
|
2
2
|
export declare class Anonymous implements Directive {
|
|
3
3
|
private readonly allow;
|
|
4
4
|
constructor(allow: boolean);
|
|
5
|
-
authorize(_: any,
|
|
5
|
+
authorize(_: any, context: Context): boolean;
|
|
6
6
|
}
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"Anonymous.js","sourceRoot":"","sources":["../../../source/directives/auth/Anonymous.ts"],"names":[],"mappings":";;;AAEA,MAAa,SAAS;IACH,KAAK,CAAS;IAE/B,YAAoB,KAAc;QAChC,IAAI,CAAC,KAAK,GAAG,KAAK,CAAA;IACpB,CAAC;IAEM,SAAS,CAAE,CAAM,EAAE,
|
|
1
|
+
{"version":3,"file":"Anonymous.js","sourceRoot":"","sources":["../../../source/directives/auth/Anonymous.ts"],"names":[],"mappings":";;;AAEA,MAAa,SAAS;IACH,KAAK,CAAS;IAE/B,YAAoB,KAAc;QAChC,IAAI,CAAC,KAAK,GAAG,KAAK,CAAA;IACpB,CAAC;IAEM,SAAS,CAAE,CAAM,EAAE,OAAgB;QACxC,OAAO,eAAe,IAAI,OAAO,CAAC,OAAO,CAAC,OAAO;YAC/C,CAAC,CAAC,KAAK;YACP,CAAC,CAAC,IAAI,CAAC,KAAK,CAAA;IAChB,CAAC;CACF;AAZD,8BAYC"}
|
|
@@ -1,6 +1,6 @@
|
|
|
1
|
-
import { type Directive, type
|
|
1
|
+
import { type Directive, type Context } from './types';
|
|
2
2
|
export declare class Anyone implements Directive {
|
|
3
3
|
private readonly allow;
|
|
4
4
|
constructor(allow: boolean);
|
|
5
|
-
authorize(_: any,
|
|
5
|
+
authorize(_: any, context: Context): boolean;
|
|
6
6
|
}
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"Anyone.js","sourceRoot":"","sources":["../../../source/directives/auth/Anyone.ts"],"names":[],"mappings":";;;AAEA,MAAa,MAAM;IACA,KAAK,CAAS;IAE/B,YAAoB,KAAc;QAChC,IAAI,CAAC,KAAK,GAAG,KAAK,CAAA;IACpB,CAAC;IAEM,SAAS,CAAE,CAAM,EAAE,
|
|
1
|
+
{"version":3,"file":"Anyone.js","sourceRoot":"","sources":["../../../source/directives/auth/Anyone.ts"],"names":[],"mappings":";;;AAEA,MAAa,MAAM;IACA,KAAK,CAAS;IAE/B,YAAoB,KAAc;QAChC,IAAI,CAAC,KAAK,GAAG,KAAK,CAAA;IACpB,CAAC;IAEM,SAAS,CAAE,CAAM,EAAE,OAAgB;QACxC,OAAO,OAAO,CAAC,QAAQ,KAAK,IAAI,IAAI,IAAI,CAAC,KAAK,CAAA;IAChD,CAAC;CACF;AAVD,wBAUC"}
|
|
@@ -2,7 +2,7 @@ import * as http from '../../HTTP';
|
|
|
2
2
|
import type { Output } from '../../io';
|
|
3
3
|
import type { Remotes } from '../../Remotes';
|
|
4
4
|
import type { Parameter, DirectiveFamily } from '../../RTD';
|
|
5
|
-
import type { Directive, Extension,
|
|
5
|
+
import type { Directive, Extension, Context } from './types';
|
|
6
6
|
export declare class Authorization implements DirectiveFamily<Directive, Extension> {
|
|
7
7
|
readonly depends: string[];
|
|
8
8
|
readonly name: string;
|
|
@@ -12,8 +12,8 @@ export declare class Authorization implements DirectiveFamily<Directive, Extensi
|
|
|
12
12
|
private tokens;
|
|
13
13
|
private bans;
|
|
14
14
|
create(name: string, value: any, remotes: Remotes): Directive;
|
|
15
|
-
preflight(directives: Directive[], context:
|
|
16
|
-
settle(directives: Directive[],
|
|
15
|
+
preflight(directives: Directive[], context: Context, parameters: Parameter[]): Promise<Output>;
|
|
16
|
+
settle(directives: Directive[], context: Context, response: http.OutgoingMessage): Promise<void>;
|
|
17
17
|
private resolve;
|
|
18
18
|
private permitted;
|
|
19
19
|
private banned;
|
|
@@ -41,9 +41,10 @@ const Echo_1 = require("./Echo");
|
|
|
41
41
|
const Scheme_1 = require("./Scheme");
|
|
42
42
|
const Delegate_1 = require("./Delegate");
|
|
43
43
|
const Federation_1 = require("./Federation");
|
|
44
|
+
const Anyone_1 = require("./Anyone");
|
|
45
|
+
const Input_1 = require("./Input");
|
|
44
46
|
const split_1 = require("./split");
|
|
45
47
|
const schemes_1 = require("./schemes");
|
|
46
|
-
const Anyone_1 = require("./Anyone");
|
|
47
48
|
class Authorization {
|
|
48
49
|
depends = ['Vary'];
|
|
49
50
|
name = 'auth';
|
|
@@ -57,10 +58,11 @@ class Authorization {
|
|
|
57
58
|
const Class = constructors[name];
|
|
58
59
|
for (const name of REMOTES)
|
|
59
60
|
this.discovery[name] ??= remotes.discover('identity', name);
|
|
60
|
-
return (0, matchacho_1.match)(Class, Role_1.Role, () => new Role_1.Role(value, this.discovery.roles), Rule_1.Rule, () => new Rule_1.Rule(value, this.create.bind(this)), Incept_1.Incept, () => new Incept_1.Incept(value, this.discovery), Delegate_1.Delegate, () => new Delegate_1.Delegate(value, this.discovery.roles), () => new Class(value));
|
|
61
|
+
return (0, matchacho_1.match)(Class, Role_1.Role, () => new Role_1.Role(value, this.discovery.roles), Rule_1.Rule, () => new Rule_1.Rule(value, this.create.bind(this)), Input_1.Input, () => new Input_1.Input(value, this.create.bind(this)), Incept_1.Incept, () => new Incept_1.Incept(value, this.discovery), Delegate_1.Delegate, () => new Delegate_1.Delegate(value, this.discovery.roles), () => new Class(value));
|
|
61
62
|
}
|
|
62
63
|
async preflight(directives, context, parameters) {
|
|
63
64
|
context.identity = await this.resolve(context.authority, context.request.headers.authorization);
|
|
65
|
+
directives.sort((a, b) => (a.priority ?? 1) - (b.priority ?? 1));
|
|
64
66
|
for (const directive of directives) {
|
|
65
67
|
const allow = await directive.authorize(context.identity, context, parameters);
|
|
66
68
|
if (allow)
|
|
@@ -74,9 +76,9 @@ class Authorization {
|
|
|
74
76
|
else
|
|
75
77
|
throw new http.Forbidden();
|
|
76
78
|
}
|
|
77
|
-
async settle(directives,
|
|
78
|
-
await Promise.all(directives.map(async (directive) => directive.settle?.(
|
|
79
|
-
const identity =
|
|
79
|
+
async settle(directives, context, response) {
|
|
80
|
+
await Promise.all(directives.map(async (directive) => directive.settle?.(context, response)));
|
|
81
|
+
const identity = context.identity;
|
|
80
82
|
if (identity === null)
|
|
81
83
|
return;
|
|
82
84
|
if (identity.scheme === schemes_1.PRIMARY && !identity.refresh)
|
|
@@ -85,7 +87,7 @@ class Authorization {
|
|
|
85
87
|
identity.roles ??= await Role_1.Role.get(identity, this.discovery.roles);
|
|
86
88
|
this.tokens ??= await this.discovery.tokens;
|
|
87
89
|
const token = await this.tokens.invoke('encrypt', {
|
|
88
|
-
input: { authority:
|
|
90
|
+
input: { authority: context.authority, identity }
|
|
89
91
|
});
|
|
90
92
|
const authorization = `Token ${token}`;
|
|
91
93
|
response.headers ??= new Headers();
|
|
@@ -145,7 +147,8 @@ const constructors = {
|
|
|
145
147
|
scheme: Scheme_1.Scheme,
|
|
146
148
|
echo: Echo_1.Echo,
|
|
147
149
|
delegate: Delegate_1.Delegate,
|
|
148
|
-
claims: Federation_1.Federation
|
|
150
|
+
claims: Federation_1.Federation,
|
|
151
|
+
input: Input_1.Input
|
|
149
152
|
};
|
|
150
153
|
const REMOTES = ['basic', 'federation', 'tokens', 'roles', 'bans'];
|
|
151
154
|
//# sourceMappingURL=Authorization.js.map
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"Authorization.js","sourceRoot":"","sources":["../../../source/directives/auth/Authorization.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,8DAAgC;AAChC,yCAAiC;AACjC,uCAAkC;AAClC,yCAAqC;AACrC,iDAAkC;AAClC,2CAAuC;AACvC,6BAAyB;AACzB,iCAA6B;AAC7B,iCAA6B;AAC7B,qCAAiC;AACjC,iCAA6B;AAC7B,qCAAiC;AACjC,yCAAqC;AACrC,6CAAyC;AACzC,mCAA+B;AAC/B,
|
|
1
|
+
{"version":3,"file":"Authorization.js","sourceRoot":"","sources":["../../../source/directives/auth/Authorization.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,8DAAgC;AAChC,yCAAiC;AACjC,uCAAkC;AAClC,yCAAqC;AACrC,iDAAkC;AAClC,2CAAuC;AACvC,6BAAyB;AACzB,iCAA6B;AAC7B,iCAA6B;AAC7B,qCAAiC;AACjC,iCAA6B;AAC7B,qCAAiC;AACjC,yCAAqC;AACrC,6CAAyC;AACzC,qCAAiC;AACjC,mCAA+B;AAC/B,mCAA+B;AAC/B,uCAA8C;AAiB9C,MAAa,aAAa;IACR,OAAO,GAAa,CAAC,MAAM,CAAC,CAAA;IAC5B,IAAI,GAAW,MAAM,CAAA;IACrB,SAAS,GAAY,IAAI,CAAA;IAExB,OAAO,GAAG,EAAwB,CAAA;IAClC,SAAS,GAAG,EAA0B,CAAA;IAC/C,MAAM,GAAqB,IAAI,CAAA;IAC/B,IAAI,GAAqB,IAAI,CAAA;IAE9B,MAAM,CAAE,IAAY,EAAE,KAAU,EAAE,OAAgB;QACvD,qBAAM,CAAC,EAAE,CAAC,IAAI,IAAI,YAAY,EAC5B,mBAAmB,IAAI,sBAAsB,CAAC,CAAA;QAEhD,MAAM,KAAK,GAAG,YAAY,CAAC,IAAI,CAAC,CAAA;QAEhC,KAAK,MAAM,IAAI,IAAI,OAAO;YACxB,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,KAAK,OAAO,CAAC,QAAQ,CAAC,UAAU,EAAE,IAAI,CAAC,CAAA;QAE7D,OAAO,IAAA,iBAAK,EAAC,KAAK,EAChB,WAAI,EAAE,GAAG,EAAE,CAAC,IAAI,WAAI,CAAC,KAA0B,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,EACtE,WAAI,EAAE,GAAG,EAAE,CAAC,IAAI,WAAI,CAAC,KAA+B,EAAE,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,EAC7E,aAAK,EAAE,GAAG,EAAE,CAAC,IAAI,aAAK,CAAC,KAAK,EAAE,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,EACrD,eAAM,EAAE,GAAG,EAAE,CAAC,IAAI,eAAM,CAAC,KAAe,EAAE,IAAI,CAAC,SAAS,CAAC,EACzD,mBAAQ,EAAE,GAAG,EAAE,CAAC,IAAI,mBAAQ,CAAC,KAAe,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,EACnE,GAAG,EAAE,CAAC,IAAI,KAAK,CAAC,KAAK,CAAC,CAAC,CAAA;IAC3B,CAAC;IAEM,KAAK,CAAC,SAAS,CAAE,UAAuB,EAC7C,OAAgB,EAChB,UAAuB;QACvB,OAAO,CAAC,QAAQ,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,SAAS,EAAE,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,aAAa,CAAC,CAAA;QAC/F,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,QAAQ,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,QAAQ,IAAI,CAAC,CAAC,CAAC,CAAA;QAEhE,KAAK,MAAM,SAAS,IAAI,UAAU,EAAE,CAAC;YACnC,MAAM,KAAK,GAAG,MAAM,SAAS,CAAC,SAAS,CAAC,OAAO,CAAC,QAAQ,EAAE,OAAO,EAAE,UAAU,CAAC,CAAA;YAE9E,IAAI,KAAK;gBACP,IAAI,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC;oBACzB,OAAO,SAAS,CAAC,KAAK,EAAE,CAAC,OAAO,CAAC,IAAI,IAAI,CAAA;;oBAEzC,MAAM,IAAI,IAAI,CAAC,SAAS,EAAE,CAAA;QAChC,CAAC;QAED,IAAI,OAAO,CAAC,QAAQ,KAAK,IAAI;YAC3B,MAAM,IAAI,IAAI,CAAC,YAAY,EAAE,CAAA;;YAE7B,MAAM,IAAI,IAAI,CAAC,SAAS,EAAE,CAAA;IAC9B,CAAC;IAEM,KAAK,CAAC,MAAM,CAAE,UAAuB,EAC1C,OAAgB,EAChB,QAA8B;QAC9B,MAAM,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,KAAK,EAAE,SAAS,EAAE,EAAE,CACnD,SAAS,CAAC,MAAM,EAAE,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAA;QAEzC,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAA;QAEjC,IAAI,QAAQ,KAAK,IAAI;YACnB,OAAM;QAER,IAAI,QAAQ,CAAC,MAAM,KAAK,iBAAO,IAAI,CAAC,QAAQ,CAAC,OAAO;YAClD,OAAM;QAER,gDAAgD;QAChD,QAAQ,CAAC,KAAK,KAAK,MAAM,WAAI,CAAC,GAAG,CAAC,QAAQ,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAA;QACjE,IAAI,CAAC,MAAM,KAAK,MAAM,IAAI,CAAC,SAAS,CAAC,MAAM,CAAA;QAE3C,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,MAAM,CAAS,SAAS,EAAE;YACxD,KAAK,EAAE,EAAE,SAAS,EAAE,OAAO,CAAC,SAAS,EAAE,QAAQ,EAAE;SAClD,CAAC,CAAA;QAEF,MAAM,aAAa,GAAG,SAAS,KAAK,EAAE,CAAA;QAEtC,QAAQ,CAAC,OAAO,KAAK,IAAI,OAAO,EAAE,CAAA;QAClC,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,eAAe,EAAE,aAAa,CAAC,CAAA;QACpD,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,eAAe,EAAE,UAAU,CAAC,CAAA;IACnD,CAAC;IAEO,KAAK,CAAC,OAAO,CAAE,SAAiB,EAAE,aAAiC;QACzE,IAAI,aAAa,KAAK,SAAS;YAC7B,OAAO,IAAI,CAAA;QAEb,MAAM,CAAC,MAAM,EAAE,WAAW,CAAC,GAAG,IAAA,aAAK,EAAC,aAAa,CAAC,CAAA;QAClD,MAAM,QAAQ,GAAG,mBAAS,CAAC,MAAM,CAAC,CAAA;QAElC,IAAI,CAAC,CAAC,QAAQ,IAAI,IAAI,CAAC,SAAS,CAAC;YAC/B,MAAM,IAAI,IAAI,CAAC,YAAY,CAAC,kCAAkC,MAAM,GAAG,CAAC,CAAA;QAE1E,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,MAAM,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAA;QAEvD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,MAAM,CAAuB,cAAc,EAAE;YACrF,KAAK,EAAE;gBACL,SAAS;gBACT,WAAW;aACZ;SACF,CAAC,CAAA;QAEF,IAAI,MAAM,YAAY,KAAK,EAAE,CAAC;YAC5B,MAAM,IAAI,GAAsB,MAAsC,CAAC,IAAI,CAAA;YAE3E,IAAI,OAAO,IAAI,KAAK,QAAQ;gBAC1B,kBAAO,CAAC,IAAI,CAAC,uBAAuB,EAAE,EAAE,IAAI,EAAE,CAAC,CAAA;YAEjD,OAAO,IAAI,CAAA;QACb,CAAC;QAED,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAA;QAEhC,IAAI,MAAM,KAAK,iBAAO,IAAI,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;YAAE,MAAM,IAAI,IAAI,CAAC,YAAY,EAAE,CAAA;QAEtF,QAAQ,CAAC,MAAM,GAAG,MAAM,CAAA;QACxB,QAAQ,CAAC,OAAO,GAAG,MAAM,CAAC,OAAO,CAAA;QAEjC,OAAO,QAAQ,CAAA;IACjB,CAAC;IAEO,SAAS,CAAE,OAAgB;QACjC,MAAM,WAAW,GAAG,OAAO,CAAC,QAAQ,EAAE,WAAW,CAAA;QAEjD,IAAI,WAAW,KAAK,SAAS;YAC3B,OAAO,IAAI,CAAA;QAEb,OAAO,MAAM,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,EAAE,OAAO,CAAC,EAAE,EAAE;YAC7D,OAAO,OAAO,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,KAAK,GAAG,IAAI,MAAM,KAAK,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC;gBAClF,IAAA,qBAAS,EAAC,OAAO,CAAC,OAAO,CAAC,GAAG,EAAE,OAAO,CAAC,CAAA;QAC3C,CAAC,CAAC,CAAA;IACJ,CAAC;IAEO,KAAK,CAAC,MAAM,CAAE,QAAkB;QACtC,IAAI,CAAC,IAAI,KAAK,MAAM,IAAI,CAAC,SAAS,CAAC,IAAI,CAAA;QAEvC,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,MAAM,CAAM,SAAS,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE,QAAQ,CAAC,EAAE,EAAE,EAAE,CAAC,CAAA;QAElF,OAAO,GAAG,CAAC,MAAM,CAAA;IACnB,CAAC;CACF;AAxID,sCAwIC;AAED,MAAM,YAAY,GAAkE;IAClF,SAAS,EAAE,qBAAS;IACpB,MAAM,EAAE,eAAM;IACd,EAAE,EAAE,OAAE;IACN,IAAI,EAAE,WAAI;IACV,IAAI,EAAE,WAAI;IACV,MAAM,EAAE,eAAM;IACd,MAAM,EAAE,eAAM;IACd,IAAI,EAAE,WAAI;IACV,QAAQ,EAAE,mBAAQ;IAClB,MAAM,EAAE,uBAAU;IAClB,KAAK,EAAE,aAAK;CACb,CAAA;AAED,MAAM,OAAO,GAAa,CAAC,OAAO,EAAE,YAAY,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,CAAC,CAAA"}
|
|
@@ -1,10 +1,9 @@
|
|
|
1
|
-
import {
|
|
1
|
+
import type { Context, Directive, Identity } from './types';
|
|
2
2
|
import type { Component } from '@toa.io/core';
|
|
3
|
-
import type { Input } from '../../io';
|
|
4
3
|
export declare class Delegate implements Directive {
|
|
5
4
|
private readonly property;
|
|
6
5
|
private readonly discovery;
|
|
7
6
|
constructor(property: string, discovery: Promise<Component>);
|
|
8
|
-
authorize(identity: Identity | null, context:
|
|
7
|
+
authorize(identity: Identity | null, context: Context): Promise<boolean>;
|
|
9
8
|
private embed;
|
|
10
9
|
}
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"Delegate.js","sourceRoot":"","sources":["../../../source/directives/auth/Delegate.ts"],"names":[],"mappings":";;;AAAA,qCAAuC;
|
|
1
|
+
{"version":3,"file":"Delegate.js","sourceRoot":"","sources":["../../../source/directives/auth/Delegate.ts"],"names":[],"mappings":";;;AAAA,qCAAuC;AACvC,iCAA6B;AAI7B,MAAa,QAAQ;IACF,QAAQ,CAAQ;IAChB,SAAS,CAAoB;IAE9C,YAAoB,QAAgB,EAAE,SAA6B;QACjE,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAA;QACxB,IAAI,CAAC,SAAS,GAAG,SAAS,CAAA;IAC5B,CAAC;IAEM,KAAK,CAAC,SAAS,CAAE,QAAyB,EAAE,OAAgB;QACjE,IAAI,QAAQ,KAAK,IAAI;YACnB,OAAO,KAAK,CAAA;QAEd,QAAQ,CAAC,KAAK,KAAK,MAAM,WAAI,CAAC,GAAG,CAAC,QAAQ,EAAE,IAAI,CAAC,SAAS,CAAC,CAAA;QAC3D,OAAO,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC,CAAA;QAEjE,OAAO,IAAI,CAAA;IACb,CAAC;IAEO,KAAK,CAAE,IAAa,EAAE,QAAkB;QAC9C,IAAI,IAAI,KAAK,SAAS;YACpB,IAAI,GAAG,EAAE,CAAA;QAEX,KAAK,CAAC,IAAI,CAAC,CAAA;QACX,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,eAAe,CAAC,QAAQ,CAAC,CAAA;QAE/C,OAAO,IAAI,CAAA;IACb,CAAC;CACF;AA5BD,4BA4BC;AAED,SAAS,KAAK,CAAE,IAAa;IAC3B,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,IAAI;QAC3C,MAAM,IAAI,iBAAU,CAAC,sBAAsB,CAAC,CAAA;AAChD,CAAC"}
|
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
import type { OutgoingMessage } from '../../HTTP';
|
|
2
|
-
import type { Directive, Identity,
|
|
2
|
+
import type { Directive, Identity, Context } from './types';
|
|
3
3
|
export declare class Echo implements Directive {
|
|
4
|
-
authorize(identity: Identity | null,
|
|
5
|
-
reply(context:
|
|
4
|
+
authorize(identity: Identity | null, context: Context): boolean;
|
|
5
|
+
reply(context: Context): OutgoingMessage;
|
|
6
6
|
}
|
|
@@ -3,10 +3,10 @@ Object.defineProperty(exports, "__esModule", { value: true });
|
|
|
3
3
|
exports.Echo = void 0;
|
|
4
4
|
const create_1 = require("./create");
|
|
5
5
|
class Echo {
|
|
6
|
-
authorize(identity,
|
|
7
|
-
if (identity === null && 'authorization' in
|
|
6
|
+
authorize(identity, context) {
|
|
7
|
+
if (identity === null && 'authorization' in context.request.headers)
|
|
8
8
|
return false;
|
|
9
|
-
|
|
9
|
+
context.identity ??= (0, create_1.create)();
|
|
10
10
|
return true;
|
|
11
11
|
}
|
|
12
12
|
reply(context) {
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"Echo.js","sourceRoot":"","sources":["../../../source/directives/auth/Echo.ts"],"names":[],"mappings":";;;AAAA,qCAAiC;AAIjC,MAAa,IAAI;IACR,SAAS,CAAE,QAAyB,EAAE,
|
|
1
|
+
{"version":3,"file":"Echo.js","sourceRoot":"","sources":["../../../source/directives/auth/Echo.ts"],"names":[],"mappings":";;;AAAA,qCAAiC;AAIjC,MAAa,IAAI;IACR,SAAS,CAAE,QAAyB,EAAE,OAAgB;QAC3D,IAAI,QAAQ,KAAK,IAAI,IAAI,eAAe,IAAI,OAAO,CAAC,OAAO,CAAC,OAAO;YACjE,OAAO,KAAK,CAAA;QAEd,OAAO,CAAC,QAAQ,KAAK,IAAA,eAAM,GAAE,CAAA;QAE7B,OAAO,IAAI,CAAA;IACb,CAAC;IAEM,KAAK,CAAE,OAAgB;QAC5B,MAAM,IAAI,GAAG,OAAO,CAAC,QAAS,CAAA;QAE9B,OAAO,IAAI,CAAC,MAAM,KAAK,IAAI;YACzB,CAAC,CAAC,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE;YACvB,CAAC,CAAC,EAAE,IAAI,EAAE,CAAA;IACd,CAAC;CACF;AAjBD,oBAiBC"}
|
|
@@ -1,9 +1,9 @@
|
|
|
1
|
-
import type { Directive, Identity,
|
|
1
|
+
import type { Directive, Identity, Context } from './types';
|
|
2
2
|
import type { Parameter } from '../../RTD';
|
|
3
3
|
export declare class Federation implements Directive {
|
|
4
4
|
private readonly matchers;
|
|
5
5
|
constructor(options: Options);
|
|
6
|
-
authorize(identity: Identity | null, context:
|
|
6
|
+
authorize(identity: Identity | null, context: Context, parameters: Parameter[]): boolean;
|
|
7
7
|
}
|
|
8
8
|
interface Claims {
|
|
9
9
|
iss: string;
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"Federation.js","sourceRoot":"","sources":["../../../source/directives/auth/Federation.ts"],"names":[],"mappings":";;;;;;AAAA,8DAAgC;AAIhC,MAAa,UAAU;IACJ,QAAQ,CAAgC;IAEzD,YAAoB,OAAgB;QAClC,IAAI,CAAC,QAAQ,GAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAmC;aACvE,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,EAAE,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,CAAA;QAEjD,qBAAM,CAAC,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,sDAAsD,CAAC,CAAA;IAC7F,CAAC;IAEM,SAAS,CAAE,QAAyB,EAAE,
|
|
1
|
+
{"version":3,"file":"Federation.js","sourceRoot":"","sources":["../../../source/directives/auth/Federation.ts"],"names":[],"mappings":";;;;;;AAAA,8DAAgC;AAIhC,MAAa,UAAU;IACJ,QAAQ,CAAgC;IAEzD,YAAoB,OAAgB;QAClC,IAAI,CAAC,QAAQ,GAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAmC;aACvE,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,EAAE,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,CAAA;QAEjD,qBAAM,CAAC,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,sDAAsD,CAAC,CAAA;IAC7F,CAAC;IAEM,SAAS,CAAE,QAAyB,EAAE,OAAgB,EAAE,UAAuB;QACpF,IAAI,QAAQ,KAAK,IAAI,IAAI,CAAC,CAAC,QAAQ,IAAI,QAAQ,CAAC;YAC9C,OAAO,KAAK,CAAA;QAEd,MAAM,MAAM,GAAI,QAA8B,CAAC,MAAM,CAAA;QAErD,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,IAAI,CAAC,QAAQ;YACtC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,OAAO,EAAE,UAAU,CAAC;gBAC1C,OAAO,KAAK,CAAA;QAEhB,OAAO,IAAI,CAAA;IACb,CAAC;CACF;AAtBD,gCAsBC;AAED,SAAS,SAAS,CAAE,UAAkB;IACpC,IAAI,UAAU,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QAC/B,MAAM,GAAG,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC,CAAgB,CAAA;QAE9C,IAAI,GAAG,KAAK,WAAW;YACrB,OAAO,CAAC,KAAK,EAAE,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC,CAAA;QAEzD,IAAI,GAAG,KAAK,QAAQ;YAClB,OAAO,CAAC,KAAK,EAAE,OAAO,EAAE,EAAE;gBACxB,OAAO,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;oBACzB,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,QAAQ,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;oBAC7C,CAAC,CAAC,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAC,CAAA;YAC9B,CAAC,CAAA;QAEH,MAAM,IAAI,KAAK,CAAC,gCAAgC,GAAG,UAAU,CAAC,CAAA;IAChE,CAAC;IAED,IAAI,UAAU,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;QAChC,MAAM,IAAI,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,CAAA;QAEhC,OAAO,CAAC,KAAK,EAAE,CAAC,EAAE,UAAU,EAAE,EAAE,CAAC,UAAU;aACxC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,IAAI,KAAK,IAAI,IAAI,OAAO,CAAC,KAAK,EAAE,SAAS,CAAC,KAAK,CAAC,CAAC,CAAA;IACpF,CAAC;IAED,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,EAAE,UAAU,CAAC,CAAA;AAC9C,CAAC;AAED,SAAS,OAAO,CAAE,KAAwB,EAAE,SAAiB;IAC3D,OAAO,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QACzB,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,SAAS,CAAC;QAC3B,CAAC,CAAC,KAAK,KAAK,SAAS,CAAA;AACzB,CAAC;AAED,SAAS,QAAQ,CAAE,GAAW,EAAE,OAAgB;IAC9C,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAA;IACtC,MAAM,GAAG,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,CAAA;IACjC,MAAM,QAAQ,GAAG,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAA;IAE5D,OAAO,OAAO,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,KAAK,QAAQ,CAAA;AAC/D,CAAC"}
|
|
@@ -3,5 +3,5 @@ import { type Directive, type Identity } from './types';
|
|
|
3
3
|
export declare class Id implements Directive {
|
|
4
4
|
private readonly parameter;
|
|
5
5
|
constructor(parameter: string);
|
|
6
|
-
authorize(identity: Identity | null, _:
|
|
6
|
+
authorize(identity: Identity | null, _: unknown, parameters: Parameter[]): boolean;
|
|
7
7
|
}
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"Id.js","sourceRoot":"","sources":["../../../source/directives/auth/Id.ts"],"names":[],"mappings":";;;AAGA,MAAa,EAAE;IACI,SAAS,CAAQ;IAElC,YAAoB,SAAiB;QACnC,IAAI,CAAC,SAAS,GAAG,SAAS,CAAA;IAC5B,CAAC;IAEM,SAAS,CAAE,QAAyB,EAAE,
|
|
1
|
+
{"version":3,"file":"Id.js","sourceRoot":"","sources":["../../../source/directives/auth/Id.ts"],"names":[],"mappings":";;;AAGA,MAAa,EAAE;IACI,SAAS,CAAQ;IAElC,YAAoB,SAAiB;QACnC,IAAI,CAAC,SAAS,GAAG,SAAS,CAAA;IAC5B,CAAC;IAEM,SAAS,CAAE,QAAyB,EAAE,CAAU,EAAE,UAAuB;QAC9E,IAAI,QAAQ,KAAK,IAAI;YACnB,OAAO,KAAK,CAAA;QAEd,MAAM,SAAS,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,IAAI,KAAK,IAAI,CAAC,SAAS,CAAC,CAAA;QAEnF,OAAO,SAAS,EAAE,KAAK,KAAK,QAAQ,CAAC,EAAE,CAAA;IACzC,CAAC;CACF;AAfD,gBAeC"}
|
|
@@ -1,11 +1,11 @@
|
|
|
1
1
|
import * as http from '../../HTTP';
|
|
2
|
-
import { type Directive, type Discovery, type Identity, type
|
|
2
|
+
import { type Directive, type Discovery, type Identity, type Context } from './types';
|
|
3
3
|
export declare class Incept implements Directive {
|
|
4
4
|
private readonly property;
|
|
5
5
|
private readonly discovery;
|
|
6
6
|
private readonly schemes;
|
|
7
7
|
constructor(property: string, discovery: Discovery);
|
|
8
|
-
authorize(identity: Identity | null, context:
|
|
9
|
-
reply(context:
|
|
10
|
-
settle(
|
|
8
|
+
authorize(identity: Identity | null, context: Context): boolean;
|
|
9
|
+
reply(context: Context): http.OutgoingMessage | null;
|
|
10
|
+
settle(context: Context, response: http.OutgoingMessage): Promise<void>;
|
|
11
11
|
}
|
|
@@ -50,26 +50,26 @@ class Incept {
|
|
|
50
50
|
const body = (0, create_1.create)(context.request.headers.authorization);
|
|
51
51
|
return { body };
|
|
52
52
|
}
|
|
53
|
-
async settle(
|
|
53
|
+
async settle(context, response) {
|
|
54
54
|
const id = response.body?.[this.property ?? 'id'];
|
|
55
55
|
if (id === undefined)
|
|
56
56
|
throw new http.Conflict('Identity inception has failed as the response body ' +
|
|
57
57
|
`does not contain the '${this.property}' property`);
|
|
58
|
-
const [scheme, credentials] = (0, split_1.split)(
|
|
58
|
+
const [scheme, credentials] = (0, split_1.split)(context.request.headers.authorization);
|
|
59
59
|
const provider = schemes_1.PROVIDERS[scheme];
|
|
60
60
|
this.schemes[scheme] ??= await this.discovery[provider];
|
|
61
61
|
const identity = await this.schemes[scheme]
|
|
62
62
|
.invoke('incept', {
|
|
63
63
|
input: {
|
|
64
|
-
authority:
|
|
64
|
+
authority: context.authority,
|
|
65
65
|
id,
|
|
66
66
|
credentials
|
|
67
67
|
}
|
|
68
68
|
});
|
|
69
69
|
if (identity instanceof Error)
|
|
70
70
|
throw new http.UnprocessableEntity(identity);
|
|
71
|
-
|
|
72
|
-
|
|
71
|
+
context.identity = identity;
|
|
72
|
+
context.identity.scheme = scheme;
|
|
73
73
|
}
|
|
74
74
|
}
|
|
75
75
|
exports.Incept = Incept;
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"Incept.js","sourceRoot":"","sources":["../../../source/directives/auth/Incept.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,8DAAgC;AAEhC,iDAAkC;AAElC,mCAA+B;AAC/B,qCAAiC;AACjC,uCAAqC;AAErC,MAAa,MAAM;IACA,QAAQ,CAAe;IACvB,SAAS,CAAW;IACpB,OAAO,GAAY,EAAwB,CAAA;IAE5D,YAAoB,QAAgB,EAAE,SAAoB;QACxD,qBAAM,CAAC,EAAE,CAAC,QAAQ,KAAK,IAAI,IAAI,OAAO,QAAQ,KAAK,QAAQ,EACzD,8CAA8C,CAAC,CAAA;QAEjD,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAA;QACxB,IAAI,CAAC,SAAS,GAAG,SAAS,CAAA;IAC5B,CAAC;IAEM,SAAS,CAAE,QAAyB,EAAE,
|
|
1
|
+
{"version":3,"file":"Incept.js","sourceRoot":"","sources":["../../../source/directives/auth/Incept.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,8DAAgC;AAEhC,iDAAkC;AAElC,mCAA+B;AAC/B,qCAAiC;AACjC,uCAAqC;AAErC,MAAa,MAAM;IACA,QAAQ,CAAe;IACvB,SAAS,CAAW;IACpB,OAAO,GAAY,EAAwB,CAAA;IAE5D,YAAoB,QAAgB,EAAE,SAAoB;QACxD,qBAAM,CAAC,EAAE,CAAC,QAAQ,KAAK,IAAI,IAAI,OAAO,QAAQ,KAAK,QAAQ,EACzD,8CAA8C,CAAC,CAAA;QAEjD,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAA;QACxB,IAAI,CAAC,SAAS,GAAG,SAAS,CAAA;IAC5B,CAAC;IAEM,SAAS,CAAE,QAAyB,EAAE,OAAgB;QAC3D,OAAO,QAAQ,KAAK,IAAI,IAAI,eAAe,IAAI,OAAO,CAAC,OAAO,CAAC,OAAO,CAAA;IACxE,CAAC;IAEM,KAAK,CAAE,OAAgB;QAC5B,IAAI,IAAI,CAAC,QAAQ,KAAK,IAAI;YACxB,OAAO,IAAI,CAAA;QAEb,MAAM,IAAI,GAAG,IAAA,eAAM,EAAC,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,aAAa,CAAC,CAAA;QAE1D,OAAO,EAAE,IAAI,EAAE,CAAA;IACjB,CAAC;IAEM,KAAK,CAAC,MAAM,CAAE,OAAgB,EAAE,QAA8B;QACnE,MAAM,EAAE,GAAG,QAAQ,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,QAAQ,IAAI,IAAI,CAAC,CAAA;QAEjD,IAAI,EAAE,KAAK,SAAS;YAClB,MAAM,IAAI,IAAI,CAAC,QAAQ,CAAC,qDAAqD;gBAC3E,yBAAyB,IAAI,CAAC,QAAQ,YAAY,CAAC,CAAA;QAEvD,MAAM,CAAC,MAAM,EAAE,WAAW,CAAC,GAAG,IAAA,aAAK,EAAC,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,aAAc,CAAC,CAAA;QAC3E,MAAM,QAAQ,GAAG,mBAAS,CAAC,MAAM,CAAC,CAAA;QAElC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,MAAM,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAA;QAEvD,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC;aACxC,MAAM,CAAkB,QAAQ,EAAE;YACnC,KAAK,EAAE;gBACL,SAAS,EAAE,OAAO,CAAC,SAAS;gBAC5B,EAAE;gBACF,WAAW;aACZ;SACF,CAAC,CAAA;QAEF,IAAI,QAAQ,YAAY,KAAK;YAC3B,MAAM,IAAI,IAAI,CAAC,mBAAmB,CAAC,QAAQ,CAAC,CAAA;QAE9C,OAAO,CAAC,QAAQ,GAAG,QAAQ,CAAA;QAC3B,OAAO,CAAC,QAAQ,CAAC,MAAM,GAAG,MAAM,CAAA;IAClC,CAAC;CACF;AArDD,wBAqDC"}
|
|
@@ -0,0 +1,14 @@
|
|
|
1
|
+
import type { Parameter } from '../../RTD';
|
|
2
|
+
import type { Context, Directive, Identity, Create } from './types';
|
|
3
|
+
export declare class Input implements Directive {
|
|
4
|
+
priority: number;
|
|
5
|
+
private readonly statements;
|
|
6
|
+
constructor(declarations: Declaration[], create: Create);
|
|
7
|
+
authorize(identity: Identity | null, context: Context, parameters: Parameter[]): Promise<boolean>;
|
|
8
|
+
private check;
|
|
9
|
+
}
|
|
10
|
+
interface Declaration {
|
|
11
|
+
[key: Exclude<string, 'prop'>]: unknown;
|
|
12
|
+
prop: string | string[];
|
|
13
|
+
}
|
|
14
|
+
export {};
|
|
@@ -0,0 +1,49 @@
|
|
|
1
|
+
"use strict";
|
|
2
|
+
Object.defineProperty(exports, "__esModule", { value: true });
|
|
3
|
+
exports.Input = void 0;
|
|
4
|
+
const HTTP_1 = require("../../HTTP");
|
|
5
|
+
class Input {
|
|
6
|
+
priority = 0;
|
|
7
|
+
statements = [];
|
|
8
|
+
constructor(declarations, create) {
|
|
9
|
+
this.statements = declarations.map((declaration) => new Statement(declaration, create));
|
|
10
|
+
}
|
|
11
|
+
async authorize(identity, context, parameters) {
|
|
12
|
+
context.pipelines.body.push(async (body) => this.check(identity, context, parameters, body));
|
|
13
|
+
return false;
|
|
14
|
+
}
|
|
15
|
+
// eslint-disable-next-line max-params
|
|
16
|
+
async check(identity, context, parameters, body) {
|
|
17
|
+
if (body === undefined || body === null || body.constructor !== Object)
|
|
18
|
+
return body;
|
|
19
|
+
const settled = await Promise.allSettled(this.statements.map(async (statement) => statement.check(identity, context, parameters, body)));
|
|
20
|
+
for (const result of settled)
|
|
21
|
+
if (result.status === 'rejected')
|
|
22
|
+
throw result.reason;
|
|
23
|
+
return body;
|
|
24
|
+
}
|
|
25
|
+
}
|
|
26
|
+
exports.Input = Input;
|
|
27
|
+
class Statement {
|
|
28
|
+
properties;
|
|
29
|
+
directives = [];
|
|
30
|
+
constructor({ prop, ...directives }, create) {
|
|
31
|
+
this.properties = typeof prop === 'string' ? [prop] : prop;
|
|
32
|
+
for (const [name, value] of Object.entries(directives)) {
|
|
33
|
+
const directive = create(name, value);
|
|
34
|
+
this.directives.push(directive);
|
|
35
|
+
}
|
|
36
|
+
}
|
|
37
|
+
// eslint-disable-next-line max-params
|
|
38
|
+
async check(identity, context, parameters, body) {
|
|
39
|
+
const match = this.properties.some((property) => property in body);
|
|
40
|
+
if (!match)
|
|
41
|
+
return;
|
|
42
|
+
for (const directive of this.directives) {
|
|
43
|
+
const authorized = await directive.authorize(identity, context, parameters);
|
|
44
|
+
if (!authorized)
|
|
45
|
+
throw new HTTP_1.Forbidden('Input property is not authorized');
|
|
46
|
+
}
|
|
47
|
+
}
|
|
48
|
+
}
|
|
49
|
+
//# sourceMappingURL=Input.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"Input.js","sourceRoot":"","sources":["../../../source/directives/auth/Input.ts"],"names":[],"mappings":";;;AAAA,qCAAsC;AAItC,MAAa,KAAK;IACT,QAAQ,GAAG,CAAC,CAAA;IACF,UAAU,GAAgB,EAAE,CAAA;IAE7C,YAAoB,YAA2B,EAAE,MAAc;QAC7D,IAAI,CAAC,UAAU,GAAG,YAAY,CAAC,GAAG,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC,IAAI,SAAS,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC,CAAA;IACzF,CAAC;IAEM,KAAK,CAAC,SAAS,CACrB,QAAyB,EAAE,OAAgB,EAAE,UAAuB;QACnE,OAAO,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,EAAE,OAAO,EAAE,UAAU,EAAE,IAAI,CAAC,CAAC,CAAA;QAE5F,OAAO,KAAK,CAAA;IACd,CAAC;IAED,sCAAsC;IAC9B,KAAK,CAAC,KAAK,CAAE,QAAyB,EAAE,OAAgB,EAAE,UAAuB,EAAE,IAAa;QACtG,IAAI,IAAI,KAAK,SAAS,IAAI,IAAI,KAAK,IAAI,IAAI,IAAI,CAAC,WAAW,KAAK,MAAM;YACpE,OAAO,IAAI,CAAA;QAEb,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,UAAU,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,KAAK,EAAE,SAAS,EAAE,EAAE,CAC/E,SAAS,CAAC,KAAK,CAAC,QAAQ,EAAE,OAAO,EAAE,UAAU,EAAE,IAAY,CAAC,CAAC,CAAC,CAAA;QAEhE,KAAK,MAAM,MAAM,IAAI,OAAO;YAC1B,IAAI,MAAM,CAAC,MAAM,KAAK,UAAU;gBAC9B,MAAM,MAAM,CAAC,MAAM,CAAA;QAEvB,OAAO,IAAI,CAAA;IACb,CAAC;CACF;AA7BD,sBA6BC;AAED,MAAM,SAAS;IACI,UAAU,CAAU;IACpB,UAAU,GAAgB,EAAE,CAAA;IAE7C,YAAoB,EAAE,IAAI,EAAE,GAAG,UAAU,EAAe,EAAE,MAAc;QACtE,IAAI,CAAC,UAAU,GAAG,OAAO,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAA;QAE1D,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,CAAC;YACvD,MAAM,SAAS,GAAG,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,CAAA;YAErC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC,CAAA;QACjC,CAAC;IACH,CAAC;IAED,sCAAsC;IAC/B,KAAK,CAAC,KAAK,CAAE,QAAyB,EAAE,OAAgB,EAAE,UAAuB,EAAE,IAAU;QAClG,MAAM,KAAK,GAAG,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,IAAI,IAAI,CAAC,CAAA;QAElE,IAAI,CAAC,KAAK;YACR,OAAM;QAER,KAAK,MAAM,SAAS,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;YACxC,MAAM,UAAU,GAAG,MAAM,SAAS,CAAC,SAAS,CAAC,QAAQ,EAAE,OAAO,EAAE,UAAU,CAAC,CAAA;YAE3E,IAAI,CAAC,UAAU;gBACb,MAAM,IAAI,gBAAS,CAAC,kCAAkC,CAAC,CAAA;QAC3D,CAAC;IACH,CAAC;CACF"}
|
|
@@ -1,9 +1,7 @@
|
|
|
1
1
|
import { type Parameter } from '../../RTD';
|
|
2
|
-
import type {
|
|
2
|
+
import type { Context, Directive, Identity, Create } from './types';
|
|
3
3
|
export declare class Rule implements Directive {
|
|
4
4
|
private readonly directives;
|
|
5
5
|
constructor(directives: Record<string, any>, create: Create);
|
|
6
|
-
authorize(identity: Identity | null,
|
|
6
|
+
authorize(identity: Identity | null, context: Context, parameters: Parameter[]): Promise<boolean>;
|
|
7
7
|
}
|
|
8
|
-
type Create = (name: string, value: any, ...args: any[]) => Directive;
|
|
9
|
-
export {};
|
|
@@ -9,9 +9,9 @@ class Rule {
|
|
|
9
9
|
this.directives.push(directive);
|
|
10
10
|
}
|
|
11
11
|
}
|
|
12
|
-
async authorize(identity,
|
|
12
|
+
async authorize(identity, context, parameters) {
|
|
13
13
|
for (const directive of this.directives) {
|
|
14
|
-
const authorized = await directive.authorize(identity,
|
|
14
|
+
const authorized = await directive.authorize(identity, context, parameters);
|
|
15
15
|
if (!authorized)
|
|
16
16
|
return false;
|
|
17
17
|
}
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"Rule.js","sourceRoot":"","sources":["../../../source/directives/auth/Rule.ts"],"names":[],"mappings":";;;AAGA,MAAa,IAAI;IACE,UAAU,GAAgB,EAAE,CAAA;IAE7C,YAAoB,UAA+B,EAAE,MAAc;QACjE,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,CAAC;YACvD,MAAM,SAAS,GAAG,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,CAAA;YAErC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC,CAAA;QACjC,CAAC;IACH,CAAC;IAEM,KAAK,CAAC,SAAS,CACrB,QAAyB,EAAE,
|
|
1
|
+
{"version":3,"file":"Rule.js","sourceRoot":"","sources":["../../../source/directives/auth/Rule.ts"],"names":[],"mappings":";;;AAGA,MAAa,IAAI;IACE,UAAU,GAAgB,EAAE,CAAA;IAE7C,YAAoB,UAA+B,EAAE,MAAc;QACjE,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,CAAC;YACvD,MAAM,SAAS,GAAG,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,CAAA;YAErC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC,CAAA;QACjC,CAAC;IACH,CAAC;IAEM,KAAK,CAAC,SAAS,CACrB,QAAyB,EAAE,OAAgB,EAAE,UAAuB;QACnE,KAAK,MAAM,SAAS,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;YACxC,MAAM,UAAU,GAAG,MAAM,SAAS,CAAC,SAAS,CAAC,QAAQ,EAAE,OAAO,EAAE,UAAU,CAAC,CAAA;YAE3E,IAAI,CAAC,UAAU;gBACb,OAAO,KAAK,CAAA;QAChB,CAAC;QAED,OAAO,IAAI,CAAA;IACb,CAAC;CACF;AAtBD,oBAsBC"}
|
|
@@ -1,7 +1,7 @@
|
|
|
1
|
-
import { type Directive, type Identity, type
|
|
1
|
+
import { type Directive, type Identity, type Context } from './types';
|
|
2
2
|
export declare class Scheme implements Directive {
|
|
3
3
|
private readonly scheme;
|
|
4
4
|
private readonly Scheme;
|
|
5
5
|
constructor(scheme: string);
|
|
6
|
-
authorize(_: Identity | null,
|
|
6
|
+
authorize(_: Identity | null, context: Context): boolean;
|
|
7
7
|
}
|
|
@@ -33,10 +33,10 @@ class Scheme {
|
|
|
33
33
|
this.scheme = scheme.toLowerCase();
|
|
34
34
|
this.Scheme = scheme[0].toUpperCase() + scheme.substring(1);
|
|
35
35
|
}
|
|
36
|
-
authorize(_,
|
|
37
|
-
if (
|
|
36
|
+
authorize(_, context) {
|
|
37
|
+
if (context.request.headers.authorization === undefined)
|
|
38
38
|
return false;
|
|
39
|
-
const [scheme] = (0, split_1.split)(
|
|
39
|
+
const [scheme] = (0, split_1.split)(context.request.headers.authorization);
|
|
40
40
|
if (scheme !== this.scheme)
|
|
41
41
|
throw new http.Forbidden(this.Scheme +
|
|
42
42
|
' authentication scheme is required to access this resource');
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"Scheme.js","sourceRoot":"","sources":["../../../source/directives/auth/Scheme.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,iDAAkC;AAElC,mCAA+B;AAE/B,MAAa,MAAM;IACA,MAAM,CAAQ;IACd,MAAM,CAAQ;IAE/B,YAAoB,MAAc;QAChC,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC,WAAW,EAAE,CAAA;QAClC,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,GAAG,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,CAAA;IAC7D,CAAC;IAEM,SAAS,CAAE,CAAkB,EAAE,
|
|
1
|
+
{"version":3,"file":"Scheme.js","sourceRoot":"","sources":["../../../source/directives/auth/Scheme.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,iDAAkC;AAElC,mCAA+B;AAE/B,MAAa,MAAM;IACA,MAAM,CAAQ;IACd,MAAM,CAAQ;IAE/B,YAAoB,MAAc;QAChC,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC,WAAW,EAAE,CAAA;QAClC,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,GAAG,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,CAAA;IAC7D,CAAC;IAEM,SAAS,CAAE,CAAkB,EAAE,OAAgB;QACpD,IAAI,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,aAAa,KAAK,SAAS;YACrD,OAAO,KAAK,CAAA;QAEd,MAAM,CAAC,MAAM,CAAC,GAAG,IAAA,aAAK,EAAC,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,aAAa,CAAC,CAAA;QAE7D,IAAI,MAAM,KAAK,IAAI,CAAC,MAAM;YACxB,MAAM,IAAI,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,MAAM;gBAClC,4DAA4D,CAAC,CAAA;QAEjE,OAAO,KAAK,CAAA;IACd,CAAC;CACF;AArBD,wBAqBC"}
|
|
@@ -4,9 +4,10 @@ import { type Parameter } from '../../RTD';
|
|
|
4
4
|
import type * as http from '../../HTTP';
|
|
5
5
|
import type * as io from '../../io';
|
|
6
6
|
export interface Directive {
|
|
7
|
-
|
|
8
|
-
|
|
9
|
-
|
|
7
|
+
priority?: number;
|
|
8
|
+
authorize: (identity: Identity | null, context: Context, parameters: Parameter[]) => boolean | Promise<boolean>;
|
|
9
|
+
reply?: (context: Context) => http.OutgoingMessage | null;
|
|
10
|
+
settle?: (context: Context, response: http.OutgoingMessage) => Promise<void>;
|
|
10
11
|
}
|
|
11
12
|
export interface Identity {
|
|
12
13
|
readonly id: string;
|
|
@@ -21,7 +22,7 @@ export interface Extension {
|
|
|
21
22
|
export interface Ban {
|
|
22
23
|
banned: boolean;
|
|
23
24
|
}
|
|
24
|
-
export type
|
|
25
|
+
export type Context = io.Input & Extension;
|
|
25
26
|
export type AuthenticationResult = Maybe<{
|
|
26
27
|
identity: Identity;
|
|
27
28
|
refresh: boolean;
|
|
@@ -30,3 +31,4 @@ export type Scheme = 'basic' | 'token' | 'bearer';
|
|
|
30
31
|
export type Remote = 'basic' | 'federation' | 'tokens' | 'roles' | 'bans';
|
|
31
32
|
export type Discovery = Record<Remote, Promise<Component>>;
|
|
32
33
|
export type Schemes = Record<Scheme, Component>;
|
|
34
|
+
export type Create = (name: string, value: any, ...args: any[]) => Directive;
|