@toa.io/extensions.exposition 1.0.0-alpha.27 → 1.0.0-alpha.271

package/components/identity.federation/operations/lib/discovery.d.ts

@@ -0,0 +1,5 @@
+import type * as jose from 'jose';
+import type { Configuration } from './Configuration';
+import type { Fetch } from '../types/context';
+export declare function discover(iss: string, fetch: Fetch): Promise<Configuration>;
+export declare function createRemoteJWKSet(iss: string, fetch: Fetch): Promise<jose.RemoteJWKSet>;

package/components/identity.federation/operations/lib/discovery.js

@@ -0,0 +1,39 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.createRemoteJWKSet = exports.discover = void 0;
+const jose_1 = require("./jose");
+const cache = new Map();
+const resolvers = new WeakMap();
+async function discover(iss, fetch) {
+    if (!cache.has(iss)) {
+        const configuration = await fetchConfiguration(iss, fetch);
+        cache.set(iss, configuration);
+    }
+    return cache.get(iss);
+}
+exports.discover = discover;
+async function fetchConfiguration(iss, fetch) {
+    const response = await fetch(`${iss}/.well-known/openid-configuration`);
+    if (!response.ok)
+        throw new Error('Failed to fetch OIDC configuration');
+    return await response.json();
+}
+async function createRemoteJWKSet(iss, fetch) {
+    let entries = resolvers.get(fetch);
+    if (entries === undefined) {
+        entries = new Map();
+        resolvers.set(fetch, entries);
+    }
+    if (!entries.has(iss))
+        entries.set(iss, create(iss, fetch));
+    return await entries.get(iss);
+}
+exports.createRemoteJWKSet = createRemoteJWKSet;
+async function create(iss, fetch) {
+    const jose = await (0, jose_1.load)();
+    const configuration = await discover(iss, fetch);
+    return jose.createRemoteJWKSet(new URL(configuration.jwks_uri), {
+        [jose.customFetch]: fetch
+    });
+}
+//# sourceMappingURL=discovery.js.map

package/components/identity.federation/operations/lib/discovery.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"discovery.js","sourceRoot":"","sources":["../../source/lib/discovery.ts"],"names":[],"mappings":";;;AAAA,iCAA6B;AAK7B,MAAM,KAAK,GAAG,IAAI,GAAG,EAAyB,CAAA;AAC9C,MAAM,SAAS,GAAG,IAAI,OAAO,EAAkD,CAAA;AAExE,KAAK,UAAU,QAAQ,CAAE,GAAW,EAAE,KAAY;IACvD,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;QACpB,MAAM,aAAa,GAAG,MAAM,kBAAkB,CAAC,GAAG,EAAE,KAAK,CAAC,CAAA;QAE1D,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE,aAAa,CAAC,CAAA;IAC/B,CAAC;IAED,OAAO,KAAK,CAAC,GAAG,CAAC,GAAG,CAAE,CAAA;AACxB,CAAC;AARD,4BAQC;AAED,KAAK,UAAU,kBAAkB,CAAE,GAAW,EAAE,KAAY;IAC1D,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,GAAG,mCAAmC,CAAC,CAAA;IAEvE,IAAI,CAAC,QAAQ,CAAC,EAAE;QACd,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAA;IAEvD,OAAO,MAAM,QAAQ,CAAC,IAAI,EAAmB,CAAA;AAC/C,CAAC;AAEM,KAAK,UAAU,kBAAkB,CAAE,GAAW,EAAE,KAAY;IACjE,IAAI,OAAO,GAAG,SAAS,CAAC,GAAG,CAAC,KAAK,CAAC,CAAA;IAElC,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;QAC1B,OAAO,GAAG,IAAI,GAAG,EAAE,CAAA;QACnB,SAAS,CAAC,GAAG,CAAC,KAAK,EAAE,OAAO,CAAC,CAAA;IAC/B,CAAC;IAED,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC;QACnB,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC,CAAA;IAEtC,OAAO,MAAM,OAAO,CAAC,GAAG,CAAC,GAAG,CAAE,CAAA;AAChC,CAAC;AAZD,gDAYC;AAED,KAAK,UAAU,MAAM,CAAE,GAAW,EAAE,KAAY;IAC9C,MAAM,IAAI,GAAG,MAAM,IAAA,WAAI,GAAE,CAAA;IACzB,MAAM,aAAa,GAAG,MAAM,QAAQ,CAAC,GAAG,EAAE,KAAK,CAAC,CAAA;IAEhD,OAAO,IAAI,CAAC,kBAAkB,CAAC,IAAI,GAAG,CAAC,aAAa,CAAC,QAAQ,CAAC,EAAE;QAC9D,CAAC,IAAI,CAAC,WAAW,CAAC,EAAE,KAAK;KAC1B,CAAC,CAAA;AACJ,CAAC"}

package/components/identity.federation/operations/lib/errors.d.ts

@@ -0,0 +1,11 @@
+import { Err } from 'error-value';
+export declare const ERR_TRUST: Err<"TRUST", any>;
+export declare const ERR_RESPONSE: Err<"RESPONSE", any>;
+export declare const ERR_CONFIG: Err<"CONFIG", any>;
+export declare const ERR_NO_TOKEN: Err<"NO_TOKEN", any>;
+export declare const ERR_ISS: Err<"ISS", any>;
+export declare const ERR_SUB: Err<"SUB", any>;
+export declare const ERR_EXP: Err<"EXP", any>;
+export declare const ERR_REPLAY: Err<"REPLAY", any>;
+export declare const ERR_CODE_NOT_ENABLED: Err<"CODE_NOT_ENABLED", any>;
+export declare const ERR_CODE_SCHEMA: Err<"CODE_SCHEMA", any>;

package/components/identity.federation/operations/lib/errors.js

@@ -0,0 +1,15 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ERR_CODE_SCHEMA = exports.ERR_CODE_NOT_ENABLED = exports.ERR_REPLAY = exports.ERR_EXP = exports.ERR_SUB = exports.ERR_ISS = exports.ERR_NO_TOKEN = exports.ERR_CONFIG = exports.ERR_RESPONSE = exports.ERR_TRUST = void 0;
+const error_value_1 = require("error-value");
+exports.ERR_TRUST = new error_value_1.Err('TRUST', 'Issuer not trusted');
+exports.ERR_RESPONSE = new error_value_1.Err('RESPONSE', 'Request to IDP failed');
+exports.ERR_CONFIG = new error_value_1.Err('CONFIG', 'Invalid OpenID configuration');
+exports.ERR_NO_TOKEN = new error_value_1.Err('NO_TOKEN', 'No ID token received');
+exports.ERR_ISS = new error_value_1.Err('ISS', 'Invalid issuer claim');
+exports.ERR_SUB = new error_value_1.Err('SUB', 'Invalid subject claim');
+exports.ERR_EXP = new error_value_1.Err('EXP', 'Token does not have an expiration time');
+exports.ERR_REPLAY = new error_value_1.Err('REPLAY', 'Token has already been used');
+exports.ERR_CODE_NOT_ENABLED = new error_value_1.Err('CODE_NOT_ENABLED', 'Authorization code flow is not configured');
+exports.ERR_CODE_SCHEMA = new error_value_1.Err('CODE_SCHEMA', 'Invalid code credentials');
+//# sourceMappingURL=errors.js.map

package/components/identity.federation/operations/lib/errors.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.js","sourceRoot":"","sources":["../../source/lib/errors.ts"],"names":[],"mappings":";;;AAAA,6CAAiC;AAEpB,QAAA,SAAS,GAAG,IAAI,iBAAG,CAAC,OAAO,EAAE,oBAAoB,CAAC,CAAA;AAClD,QAAA,YAAY,GAAG,IAAI,iBAAG,CAAC,UAAU,EAAE,uBAAuB,CAAC,CAAA;AAC3D,QAAA,UAAU,GAAG,IAAI,iBAAG,CAAC,QAAQ,EAAE,8BAA8B,CAAC,CAAA;AAC9D,QAAA,YAAY,GAAG,IAAI,iBAAG,CAAC,UAAU,EAAE,sBAAsB,CAAC,CAAA;AAC1D,QAAA,OAAO,GAAG,IAAI,iBAAG,CAAC,KAAK,EAAE,sBAAsB,CAAC,CAAA;AAChD,QAAA,OAAO,GAAG,IAAI,iBAAG,CAAC,KAAK,EAAE,uBAAuB,CAAC,CAAA;AACjD,QAAA,OAAO,GAAG,IAAI,iBAAG,CAAC,KAAK,EAAE,wCAAwC,CAAC,CAAA;AAClE,QAAA,UAAU,GAAG,IAAI,iBAAG,CAAC,QAAQ,EAAE,6BAA6B,CAAC,CAAA;AAC7D,QAAA,oBAAoB,GAAG,IAAI,iBAAG,CAAC,kBAAkB,EAAE,2CAA2C,CAAC,CAAA;AAC/F,QAAA,eAAe,GAAG,IAAI,iBAAG,CAAC,aAAa,EAAE,0BAA0B,CAAC,CAAA"}

package/components/identity.federation/operations/lib/exchange.d.ts

@@ -0,0 +1,3 @@
+import type { Ctx } from './Ctx';
+import type { Payload } from './Payload';
+export declare function exchange(credentials: string, ctx: Ctx): Promise<Payload | Error>;

package/components/identity.federation/operations/lib/exchange.js

@@ -0,0 +1,108 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || function (mod) {
+    if (mod && mod.__esModule) return mod;
+    var result = {};
+    if (mod != null) for (var k in mod) if (k !== "default" && Object.prototype.hasOwnProperty.call(mod, k)) __createBinding(result, mod, k);
+    __setModuleDefault(result, mod);
+    return result;
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.exchange = void 0;
+const jose_1 = require("./jose");
+const discovery_1 = require("./discovery");
+const errors = __importStar(require("./errors"));
+async function exchange(credentials, ctx) {
+    const jose = await (0, jose_1.load)();
+    const properties = decode(credentials);
+    if (properties instanceof Error)
+        return properties;
+    const { code, iss, for: redirect } = properties;
+    const trusted = ctx.trust.find((trust) => trust.iss === iss);
+    if (trusted === undefined)
+        return errors.ERR_TRUST;
+    if (trusted.aud === undefined || (trusted.secret === undefined && trusted.signature === undefined))
+        return errors.ERR_CODE_NOT_ENABLED;
+    const configuration = await (0, discovery_1.discover)(iss, ctx.fetch);
+    if (configuration.token_endpoint === undefined)
+        return errors.ERR_CONFIG;
+    // array actually is not expected here, but it is a valid format
+    const aud = Array.isArray(trusted.aud) ? trusted.aud[0] : trusted.aud;
+    const secret = trusted.secret ?? await sign(trusted);
+    const params = new URLSearchParams();
+    params.append('grant_type', 'authorization_code');
+    params.append('code', code);
+    params.append('client_id', aud);
+    params.append('client_secret', secret);
+    params.append('redirect_uri', redirect);
+    ctx.logs.debug('Exchanging code', {
+        iss,
+        aud,
+        for: redirect,
+        auth: trusted.secret === undefined ? 'signature' : 'secret',
+        code
+    });
+    const response = await ctx.fetch(configuration.token_endpoint, {
+        method: 'POST',
+        headers: {
+            'Content-Type': 'application/x-www-form-urlencoded'
+        },
+        body: params
+    });
+    if (!response.ok) {
+        ctx.logs.error('Code exchange failed', { status: response.status, text: await response.text() });
+        return errors.ERR_RESPONSE;
+    }
+    const tokens = await response.json();
+    if (tokens.id_token === undefined)
+        return errors.ERR_NO_TOKEN;
+    const jwks = await (0, discovery_1.createRemoteJWKSet)(iss, ctx.fetch);
+    const { payload } = await jose.jwtVerify(tokens.id_token, jwks, {
+        audience: trusted.aud,
+        issuer: iss
+    });
+    return payload;
+}
+exports.exchange = exchange;
+function decode(credentials) {
+    const json = Buffer.from(credentials, 'base64').toString('utf8');
+    const properties = JSON.parse(json);
+    if (typeof properties.code !== 'string' ||
+        typeof properties.iss !== 'string' ||
+        typeof properties.for !== 'string' ||
+        Object.keys(properties).length !== CREDENTIAL_PROPERTIES.length)
+        return errors.ERR_CODE_SCHEMA;
+    return properties;
+}
+async function sign(trust) {
+    const jose = await (0, jose_1.load)();
+    const signature = trust.signature;
+    const aud = Array.isArray(trust.aud) ? trust.aud[0] : trust.aud;
+    const now = Math.floor(Date.now() / 1000);
+    const key = await jose.importPKCS8(signature.key, 'ES256');
+    return await new jose.SignJWT({})
+        .setProtectedHeader({ alg: 'ES256', kid: signature.kid })
+        .setIssuedAt(now)
+        .setExpirationTime(now + 300)
+        .setIssuer(signature.iss)
+        .setSubject(aud)
+        .setAudience(trust.iss)
+        .sign(key);
+}
+const CREDENTIAL_PROPERTIES = ['for', 'iss', 'code'];
+//# sourceMappingURL=exchange.js.map

package/components/identity.federation/operations/lib/exchange.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"exchange.js","sourceRoot":"","sources":["../../source/lib/exchange.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,iCAA6B;AAC7B,2CAA0D;AAC1D,iDAAkC;AAK3B,KAAK,UAAU,QAAQ,CAAE,WAAmB,EAAE,GAAQ;IAC3D,MAAM,IAAI,GAAG,MAAM,IAAA,WAAI,GAAE,CAAA;IACzB,MAAM,UAAU,GAAG,MAAM,CAAC,WAAW,CAAC,CAAA;IAEtC,IAAI,UAAU,YAAY,KAAK;QAC7B,OAAO,UAAU,CAAA;IAEnB,MAAM,EAAE,IAAI,EAAE,GAAG,EAAE,GAAG,EAAE,QAAQ,EAAE,GAAG,UAAU,CAAA;IAE/C,MAAM,OAAO,GAAG,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,GAAG,KAAK,GAAG,CAAC,CAAA;IAE5D,IAAI,OAAO,KAAK,SAAS;QACvB,OAAO,MAAM,CAAC,SAAS,CAAA;IAEzB,IAAI,OAAO,CAAC,GAAG,KAAK,SAAS,IAAI,CAAC,OAAO,CAAC,MAAM,KAAK,SAAS,IAAI,OAAO,CAAC,SAAS,KAAK,SAAS,CAAC;QAChG,OAAO,MAAM,CAAC,oBAAoB,CAAA;IAEpC,MAAM,aAAa,GAAG,MAAM,IAAA,oBAAQ,EAAC,GAAG,EAAE,GAAG,CAAC,KAAK,CAAC,CAAA;IAEpD,IAAI,aAAa,CAAC,cAAc,KAAK,SAAS;QAC5C,OAAO,MAAM,CAAC,UAAU,CAAA;IAE1B,gEAAgE;IAChE,MAAM,GAAG,GAAG,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAA;IACrE,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,IAAI,MAAM,IAAI,CAAC,OAAO,CAAC,CAAA;IACpD,MAAM,MAAM,GAAG,IAAI,eAAe,EAAE,CAAA;IAEpC,MAAM,CAAC,MAAM,CAAC,YAAY,EAAE,oBAAoB,CAAC,CAAA;IACjD,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,IAAI,CAAC,CAAA;IAC3B,MAAM,CAAC,MAAM,CAAC,WAAW,EAAE,GAAG,CAAC,CAAA;IAC/B,MAAM,CAAC,MAAM,CAAC,eAAe,EAAE,MAAM,CAAC,CAAA;IACtC,MAAM,CAAC,MAAM,CAAC,cAAc,EAAE,QAAQ,CAAC,CAAA;IAEvC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,iBAAiB,EAAE;QAChC,GAAG;QACH,GAAG;QACH,GAAG,EAAE,QAAQ;QACb,IAAI,EAAE,OAAO,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,QAAQ;QAC3D,IAAI;KACL,CAAC,CAAA;IAEF,MAAM,QAAQ,GAAG,MAAM,GAAG,CAAC,KAAK,CAAC,aAAa,CAAC,cAAc,EAAE;QAC7D,MAAM,EAAE,MAAM;QACd,OAAO,EAAE;YACP,cAAc,EAAE,mCAAmC;SACpD;QACD,IAAI,EAAE,MAAM;KACb,CAAC,CAAA;IAEF,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;QACjB,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,sBAAsB,EAAE,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,IAAI,EAAE,MAAM,QAAQ,CAAC,IAAI,EAAE,EAAE,CAAC,CAAA;QAEhG,OAAO,MAAM,CAAC,YAAY,CAAA;IAC5B,CAAC;IAED,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,IAAI,EAA0B,CAAA;IAE5D,IAAI,MAAM,CAAC,QAAQ,KAAK,SAAS;QAC/B,OAAO,MAAM,CAAC,YAAY,CAAA;IAE5B,MAAM,IAAI,GAAG,MAAM,IAAA,8BAAkB,EAAC,GAAG,EAAE,GAAG,CAAC,KAAK,CAAC,CAAA;IAErD,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,QAAQ,EAAE,IAAI,EAAE;QAC9D,QAAQ,EAAE,OAAO,CAAC,GAAG;QACrB,MAAM,EAAE,GAAG;KACZ,CAAC,CAAA;IAEF,OAAO,OAAkB,CAAA;AAC3B,CAAC;AApED,4BAoEC;AAED,SAAS,MAAM,CAAE,WAAmB;IAClC,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAA;IAChE,MAAM,UAAU,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAe,CAAA;IAEjD,IACE,OAAO,UAAU,CAAC,IAAI,KAAK,QAAQ;QACnC,OAAO,UAAU,CAAC,GAAG,KAAK,QAAQ;QAClC,OAAO,UAAU,CAAC,GAAG,KAAK,QAAQ;QAClC,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,MAAM,KAAK,qBAAqB,CAAC,MAAM;QAE/D,OAAO,MAAM,CAAC,eAAe,CAAA;IAE/B,OAAO,UAAU,CAAA;AACnB,CAAC;AAED,KAAK,UAAU,IAAI,CAAE,KAAY;IAC/B,MAAM,IAAI,GAAG,MAAM,IAAA,WAAI,GAAE,CAAA;IACzB,MAAM,SAAS,GAAG,KAAK,CAAC,SAAU,CAAA;IAClC,MAAM,GAAG,GAAG,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,GAAI,CAAA;IAChE,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAA;IACzC,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,SAAS,CAAC,GAAG,EAAE,OAAO,CAAC,CAAA;IAE1D,OAAO,MAAM,IAAI,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;SAC9B,kBAAkB,CAAC,EAAE,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,SAAS,CAAC,GAAG,EAAE,CAAC;SACxD,WAAW,CAAC,GAAG,CAAC;SAChB,iBAAiB,CAAC,GAAG,GAAG,GAAG,CAAC;SAC5B,SAAS,CAAC,SAAS,CAAC,GAAG,CAAC;SACxB,UAAU,CAAC,GAAG,CAAC;SACf,WAAW,CAAC,KAAK,CAAC,GAAG,CAAC;SACtB,IAAI,CAAC,GAAG,CAAC,CAAA;AACd,CAAC;AAED,MAAM,qBAAqB,GAA4B,CAAC,KAAK,EAAE,KAAK,EAAE,MAAM,CAAC,CAAA"}

package/components/identity.federation/operations/lib/index.d.ts

@@ -0,0 +1,4 @@
+export { decode } from './decode';
+export { exchange } from './exchange';
+export { resolve } from './resolve';
+export { type Ctx } from './Ctx';

package/components/identity.federation/operations/lib/index.js

@@ -0,0 +1,10 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.resolve = exports.exchange = exports.decode = void 0;
+var decode_1 = require("./decode");
+Object.defineProperty(exports, "decode", { enumerable: true, get: function () { return decode_1.decode; } });
+var exchange_1 = require("./exchange");
+Object.defineProperty(exports, "exchange", { enumerable: true, get: function () { return exchange_1.exchange; } });
+var resolve_1 = require("./resolve");
+Object.defineProperty(exports, "resolve", { enumerable: true, get: function () { return resolve_1.resolve; } });
+//# sourceMappingURL=index.js.map

package/components/identity.federation/operations/lib/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../source/lib/index.ts"],"names":[],"mappings":";;;AAAA,mCAAiC;AAAxB,gGAAA,MAAM,OAAA;AACf,uCAAqC;AAA5B,oGAAA,QAAQ,OAAA;AACjB,qCAAmC;AAA1B,kGAAA,OAAO,OAAA"}

package/components/identity.federation/operations/lib/jose.d.ts

@@ -0,0 +1,41 @@
+export function load(): Promise<{
+    default: typeof import("jose");
+    compactDecrypt: typeof import("jose").compactDecrypt;
+    flattenedDecrypt: typeof import("jose").flattenedDecrypt;
+    generalDecrypt: typeof import("jose").generalDecrypt;
+    GeneralEncrypt: typeof import("jose").GeneralEncrypt;
+    compactVerify: typeof import("jose").compactVerify;
+    flattenedVerify: typeof import("jose").flattenedVerify;
+    generalVerify: typeof import("jose").generalVerify;
+    jwtVerify: typeof import("jose").jwtVerify;
+    jwtDecrypt: typeof import("jose").jwtDecrypt;
+    CompactEncrypt: typeof import("jose").CompactEncrypt;
+    FlattenedEncrypt: typeof import("jose").FlattenedEncrypt;
+    CompactSign: typeof import("jose").CompactSign;
+    FlattenedSign: typeof import("jose").FlattenedSign;
+    GeneralSign: typeof import("jose").GeneralSign;
+    SignJWT: typeof import("jose").SignJWT;
+    EncryptJWT: typeof import("jose").EncryptJWT;
+    calculateJwkThumbprint: typeof import("jose").calculateJwkThumbprint;
+    calculateJwkThumbprintUri: typeof import("jose").calculateJwkThumbprintUri;
+    EmbeddedJWK: typeof import("jose").EmbeddedJWK;
+    createLocalJWKSet: typeof import("jose").createLocalJWKSet;
+    createRemoteJWKSet: typeof import("jose").createRemoteJWKSet;
+    jwksCache: typeof import("jose").jwksCache;
+    customFetch: typeof import("jose").customFetch;
+    UnsecuredJWT: typeof import("jose").UnsecuredJWT;
+    exportPKCS8: typeof import("jose").exportPKCS8;
+    exportSPKI: typeof import("jose").exportSPKI;
+    exportJWK: typeof import("jose").exportJWK;
+    importSPKI: typeof import("jose").importSPKI;
+    importPKCS8: typeof import("jose").importPKCS8;
+    importX509: typeof import("jose").importX509;
+    importJWK: typeof import("jose").importJWK;
+    decodeProtectedHeader: typeof import("jose").decodeProtectedHeader;
+    decodeJwt: typeof import("jose").decodeJwt;
+    errors: typeof import("jose/dist/types/util/errors");
+    generateKeyPair: typeof import("jose").generateKeyPair;
+    generateSecret: typeof import("jose").generateSecret;
+    base64url: typeof import("jose/dist/types/util/base64url");
+    cryptoRuntime: "WebCryptoAPI";
+}>;

package/components/identity.federation/operations/lib/{assertions-as-values.js → jose.js}

@@ -1,4 +1,4 @@
-"use strict";
+'use strict';
 var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
     if (k2 === undefined) k2 = k;
     var desc = Object.getOwnPropertyDescriptor(m, k);
@@ -22,24 +22,6 @@ var __importStar = (this && this.__importStar) || function (mod) {
     __setModuleDefault(result, mod);
     return result;
 };
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.assertionsAsValues = void 0;
-const assert = __importStar(require("node:assert"));
-/**
- * Wrapping function that returns assertion errors as function return value
- */
-function assertionsAsValues(fn) {
-    return async (...args) => {
-        try {
-            return await fn(...args);
-        }
-        catch (err) {
-            console.error(err);
-            if (err instanceof assert.AssertionError)
-                return err;
-            throw err;
-        }
-    };
-}
-exports.assertionsAsValues = assertionsAsValues;
-//# sourceMappingURL=assertions-as-values.js.map
+const load = async () => await Promise.resolve().then(() => __importStar(require('jose')));
+exports.load = load;
+//# sourceMappingURL=jose.js.map

package/components/identity.federation/operations/lib/jose.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"jose.js","sourceRoot":"","sources":["../../source/lib/jose.js"],"names":[],"mappings":"AAAA,YAAY,CAAA;;;;;;;;;;;;;;;;;;;;;;;;AAEZ,MAAM,IAAI,GAAG,KAAK,IAAI,EAAE,CAAC,wDAAa,MAAM,GAAC,CAAA;AAE7C,OAAO,CAAC,IAAI,GAAG,IAAI,CAAA"}

package/components/identity.federation/operations/lib/resolve.d.ts

@@ -0,0 +1,3 @@
+import type { Payload } from './Payload';
+import type { Context, Scheme } from '../types';
+export declare function resolve(scheme: Scheme, credentials: string, context: Context): Promise<Payload | Error>;

package/components/identity.federation/operations/lib/resolve.js

@@ -0,0 +1,17 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.resolve = void 0;
+const decode_1 = require("./decode");
+const exchange_1 = require("./exchange");
+async function resolve(scheme, credentials, context) {
+    const ctx = {
+        trust: context.configuration.trust,
+        logs: context.logs,
+        fetch: context.fetch
+    };
+    return scheme === 'bearer'
+        ? await (0, decode_1.decode)(credentials, ctx)
+        : await (0, exchange_1.exchange)(credentials, ctx);
+}
+exports.resolve = resolve;
+//# sourceMappingURL=resolve.js.map

package/components/identity.federation/operations/lib/resolve.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"resolve.js","sourceRoot":"","sources":["../../source/lib/resolve.ts"],"names":[],"mappings":";;;AAAA,qCAAiC;AACjC,yCAAqC;AAK9B,KAAK,UAAU,OAAO,CAAE,MAAc,EAAE,WAAmB,EAAE,OAAgB;IAClF,MAAM,GAAG,GAAQ;QACf,KAAK,EAAE,OAAO,CAAC,aAAa,CAAC,KAAK;QAClC,IAAI,EAAE,OAAO,CAAC,IAAI;QAClB,KAAK,EAAE,OAAO,CAAC,KAAK;KACrB,CAAA;IAED,OAAO,MAAM,KAAK,QAAQ;QACxB,CAAC,CAAC,MAAM,IAAA,eAAM,EAAC,WAAW,EAAE,GAAG,CAAC;QAChC,CAAC,CAAC,MAAM,IAAA,mBAAQ,EAAC,WAAW,EAAE,GAAG,CAAC,CAAA;AACtC,CAAC;AAVD,0BAUC"}

package/components/identity.federation/operations/list.d.ts

@@ -0,0 +1,7 @@
+import type { Context, Entity } from './types';
+export declare function computation({ authority, identity }: Input, context: Context): Promise<Entity[]>;
+interface Input {
+    authority: string;
+    identity: string;
+}
+export {};

package/components/identity.federation/operations/list.js

@@ -0,0 +1,15 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.computation = void 0;
+async function computation({ authority, identity }, context) {
+    return await context.local.enumerate({
+        query: {
+            criteria: `authority==${authority};identity==${identity}`,
+            projection: ['iss'],
+            sort: ['_created:desc'],
+            limit: 100
+        }
+    });
+}
+exports.computation = computation;
+//# sourceMappingURL=list.js.map

package/components/identity.federation/operations/list.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"list.js","sourceRoot":"","sources":["../source/list.ts"],"names":[],"mappings":";;;AAEO,KAAK,UAAU,WAAW,CAAE,EAAE,SAAS,EAAE,QAAQ,EAAS,EAAE,OAAgB;IACjF,OAAO,MAAM,OAAO,CAAC,KAAK,CAAC,SAAS,CAAC;QACnC,KAAK,EAAE;YACL,QAAQ,EAAE,cAAc,SAAS,cAAc,QAAQ,EAAE;YACzD,UAAU,EAAE,CAAC,KAAK,CAAC;YACnB,IAAI,EAAE,CAAC,eAAe,CAAC;YACvB,KAAK,EAAE,GAAG;SACX;KACF,CAAC,CAAA;AACJ,CAAC;AATD,kCASC"}