@toa.io/extensions.exposition 1.0.0-alpha.251 → 1.0.0-alpha.253

package/components/identity.federation/operations/types/context.d.ts

@@ -1,12 +1,14 @@
 import type { JWTPayload } from 'jose';
-import type { Call, Observation, Query, telemetry } from '@toa.io/types';
+import type { Call, Observation, Query, telemetry, Transition } from '@toa.io/types';
 import type { Entity } from './entity';
 import type { Configuration } from './configuration';
 export interface Context {
     local: {
         observe: Observation<Entity>;
+        enumerate: Observation<Entity[], never, Entity>;
+        terminate: Transition<void, void, Entity>;
         transit: Call<TransitOutput, TransitInput>;
-        ensure: Call<EnsureOutput>;
+        ensure: Call<Entity>;
         decode: Call<JWTPayload, string>;
     };
     remote: {
@@ -23,13 +25,11 @@ export interface TransitInput {
     readonly authority: string;
     readonly iss: string;
     readonly sub: string;
+    readonly identity?: string;
 }
 export interface TransitOutput {
     id: string;
 }
-export interface EnsureOutput {
-    id: string;
-}
 interface IdentityTokensRevokeInput {
     query: Query;
 }

package/components/identity.federation/operations/types/entity.d.ts

@@ -3,4 +3,6 @@ export interface Entity {
     authority: string;
     iss: string;
     sub: string;
+    identity?: string;
+    _created: number;
 }

package/components/identity.federation/source/authenticate.ts

@@ -34,7 +34,7 @@ export async function effect ({ scheme, authority, credentials }: Input, context
   if (identity instanceof Error)
     return identity
 
-  return { identity: { id: identity.id, claims } }
+  return { identity: { id: identity.identity ?? identity.id, claims } }
 }
 
 const ERR_NOT_FOUND = new Err('NOT_FOUND')

package/components/identity.federation/source/delete.ts

@@ -0,0 +1,16 @@
+import type { Context } from './types'
+
+export async function effect ({ authority, identity, id }: Input, context: Context): Promise<void | null> {
+  const object = await context.local.observe({ query: { id } })
+
+  if (object === null || object.authority !== authority || (object.identity ?? object.id) !== identity)
+    return null
+
+  return await context.local.terminate({ query: { id } })
+}
+
+interface Input {
+  authority: string
+  identity: string
+  id: string
+}

package/components/identity.federation/source/incept.ts

@@ -1,3 +1,4 @@
+import { Err } from 'error-value'
 import { decode, exchange, type Ctx } from './lib'
 import type { Request } from '@toa.io/types'
 import type { Context, TransitInput, Scheme } from './types'
@@ -16,12 +17,23 @@ export async function effect (input: Input, context: Context): Promise<Output |
     return claims
 
   const { iss, sub } = claims
-  const request: Request<TransitInput> = { input: { authority: input.authority, iss, sub } }
 
-  if (input.id !== undefined)
-    request.query = { id: input.id }
+  if (input.id === undefined) {
+    const request: Request<TransitInput> = { input: { authority: input.authority, iss, sub } }
 
-  return await context.local.transit(request)
+    return await context.local.transit(request)
+  }
+
+  const existent = await context.local.observe({
+    query: { criteria: `authority==${input.authority};iss==${iss};sub==${sub}` }
+  })
+
+  if (existent !== null)
+    return (existent.identity ?? existent.id) === input.id ? { id: input.id } : ERR_EXISTS
+
+  return await context.local.transit({
+    input: { authority: input.authority, iss, sub, identity: input.id }
+  })
 }
 
 export interface Input {
@@ -34,3 +46,5 @@ export interface Input {
 export interface Output {
   id: string
 }
+
+const ERR_EXISTS = new Err('EXISTS', 'Federation credentials are associated with another Identity')

package/components/identity.federation/source/list.test.ts

@@ -0,0 +1,23 @@
+import { computation } from './list'
+
+it('lists indexed credentials and a legacy associated credential', async () => {
+  const current = { id: 'credential', authority: 'nex', identity: 'identity', iss: 'apple', sub: '1', _created: 2 }
+  const legacy = { id: 'identity', authority: 'nex', iss: 'google', sub: '2', _created: 1 }
+
+  const context = {
+    local: {
+      enumerate: jest.fn(async () => [current]),
+      observe: jest.fn(async () => legacy)
+    }
+  }
+
+  await expect(computation({ authority: 'nex', identity: 'identity' }, context as never))
+    .resolves.toEqual([current, legacy])
+  expect(context.local.enumerate).toHaveBeenCalledWith({
+    query: {
+      criteria: 'authority==nex;identity==identity',
+      projection: ['iss'],
+      sort: ['_created:desc']
+    }
+  })
+})

package/components/identity.federation/source/list.ts

@@ -0,0 +1,23 @@
+import type { Context, Entity } from './types'
+
+export async function computation ({ authority, identity }: Input, context: Context): Promise<Entity[]> {
+  const objects = await context.local.enumerate({
+    query: {
+      criteria: `authority==${authority};identity==${identity}`,
+      projection: ['iss'],
+      sort: ['_created:desc']
+    }
+  })
+
+  const legacy = await context.local.observe({ query: { id: identity } })
+
+  if (legacy !== null && legacy.authority === authority && legacy.identity === undefined)
+    objects.push(legacy)
+
+  return objects.sort((a, b) => b._created - a._created)
+}
+
+interface Input {
+  authority: string
+  identity: string
+}

package/components/identity.federation/source/types/context.ts

@@ -1,13 +1,15 @@
 import type { JWTPayload } from 'jose'
-import type { Call, Observation, Query, telemetry } from '@toa.io/types'
+import type { Call, Observation, Query, telemetry, Transition } from '@toa.io/types'
 import type { Entity } from './entity'
 import type { Configuration } from './configuration'
 
 export interface Context {
   local: {
     observe: Observation<Entity>
+    enumerate: Observation<Entity[], never, Entity>
+    terminate: Transition<void, void, Entity>
     transit: Call<TransitOutput, TransitInput>
-    ensure: Call<EnsureOutput>
+    ensure: Call<Entity>
     decode: Call<JWTPayload, string>
   }
   remote: {
@@ -25,16 +27,13 @@ export interface TransitInput {
   readonly authority: string
   readonly iss: string
   readonly sub: string
+  readonly identity?: string
 }
 
 export interface TransitOutput {
   id: string
 }
 
-export interface EnsureOutput {
-  id: string
-}
-
 interface IdentityTokensRevokeInput {
   query: Query
 }

package/components/identity.federation/source/types/entity.ts

@@ -3,4 +3,6 @@ export interface Entity {
   authority: string
   iss: string
   sub: string
+  identity?: string
+  _created: number
 }