@toa.io/extensions.exposition 1.0.0-alpha.272 → 1.0.0-alpha.274

package/components/identity.federation/manifest.toa.yaml

@@ -36,40 +36,94 @@ operations:
   transit:
     concurrency: retry
     input:
-      authority*: string
-      iss*: string
-      sub*: string
-      identity*: string
+      properties:
+        authority:
+          type: string
+        iss:
+          type: string
+        sub:
+          type: string
+        identity:
+          type: string
+      type: object
+      required:
+        - authority
+        - iss
+        - sub
+        - identity
   create:
     input:
-      scheme*: [bearer, code]
-      authority*: string
-      credentials*: string
-      id*: string
+      properties:
+        scheme:
+          type: string
+          enum:
+            - bearer
+            - code
+        authority:
+          type: string
+        credentials:
+          type: string
+        id:
+          type: string
+      type: object
+      required:
+        - scheme
+        - authority
+        - credentials
+        - id
     errors:
       - EXISTS
   incept:
     input:
-      scheme*: [bearer, code]
-      authority*: string
-      credentials*: string
-      id*: string
+      properties:
+        scheme:
+          type: string
+          enum:
+            - bearer
+            - code
+        authority:
+          type: string
+        credentials:
+          type: string
+        id:
+          type: string
+      type: object
+      required:
+        - scheme
+        - authority
+        - credentials
+        - id
     output:
-      id: string
+      properties:
+        id:
+          type: string
+      type: object
     errors:
       - EXISTS
   authenticate:
     input:
-      scheme*: [bearer, code]
-      authority*: string
-      credentials*: string
+      properties:
+        scheme:
+          type: string
+          enum:
+            - bearer
+            - code
+        authority:
+          type: string
+        credentials:
+          type: string
+      type: object
+      required:
+        - scheme
+        - authority
+        - credentials
     output:
       properties:
         identity:
           properties:
             id:
               type: string
-            claims: &claims
+            claims:
               properties:
                 iss:
                   type: string
@@ -81,23 +135,55 @@ operations:
               required:
                 - iss
                 - sub
+              type: object
           required:
             - id
             - claims
+          type: object
+      type: object
     errors:
       - ERR_NOT_FOUND
   decode:
-    input: string
-    output: *claims
+    input:
+      type: string
+    output:
+      properties:
+        iss:
+          type: string
+        aud:
+          type: string
+        sub:
+          type: string
+      additionalProperties: true
+      required:
+        - iss
+        - sub
+      type: object
   list:
     input:
-      authority*: string
-      identity*: string
+      properties:
+        authority:
+          type: string
+        identity:
+          type: string
+      type: object
+      required:
+        - authority
+        - identity
   delete:
     input:
-      authority*: string
-      identity*: string
-      credential*: string
+      properties:
+        authority:
+          type: string
+        identity:
+          type: string
+        credential:
+          type: string
+      type: object
+      required:
+        - authority
+        - identity
+        - credential
 
 configuration:
   schema:
@@ -119,17 +205,23 @@ configuration:
               anyOf:
                 - type: string
                 - type: array
-                  items: { type: string }
+                  items:
+                    type: string
                   uniqueItems: true
                   minItems: 1
             signature:
               properties:
-                iss: { type: string }
-                kid: { type: string }
+                iss:
+                  type: string
+                kid:
+                  type: string
                 key:
                   description: PKCS8 private key in PEM form
                   type: string
-              required: [iss, kid, key]
+              required:
+                - iss
+                - kid
+                - key
             secret:
               description: Client secret for the Identity Provider. Required for Authorization Code Flow.
               type: string

package/components/identity.federation/operations/authenticate.js

@@ -1,7 +1,6 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.effect = void 0;
-const error_value_1 = require("error-value");
 const generic_1 = require("@toa.io/generic");
 const lib_1 = require("./lib");
 async function effect({ scheme, authority, credentials }, context) {
@@ -25,5 +24,7 @@ async function effect({ scheme, authority, credentials }, context) {
     return { identity: { id: credential.identity, claims } };
 }
 exports.effect = effect;
-const ERR_NOT_FOUND = new error_value_1.Err('NOT_FOUND');
+const ERR_NOT_FOUND = new (class NotFoundError extends Error {
+    code = 'NOT_FOUND';
+})();
 //# sourceMappingURL=authenticate.js.map

package/components/identity.federation/operations/authenticate.js.map

@@ -1 +1 @@
-{"version":3,"file":"authenticate.js","sourceRoot":"","sources":["../source/authenticate.ts"],"names":[],"mappings":";;;AAAA,6CAAiC;AACjC,6CAAuC;AACvC,+BAA+B;AAKxB,KAAK,UAAU,MAAM,CAAE,EAAE,MAAM,EAAE,SAAS,EAAE,WAAW,EAAS,EAAE,OAAgB;IACvF,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,gBAAgB,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE,WAAW,EAAE,CAAC,CAAA;IAExE,MAAM,MAAM,GAAG,MAAM,IAAA,aAAO,EAAC,MAAM,EAAE,WAAW,EAAE,OAAO,CAAC,CAAA;IAE1D,IAAI,MAAM,YAAY,KAAK;QACzB,OAAO,MAAM,CAAA;IAEf,MAAM,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,MAAM,CAAA;IAE3B,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,cAAc,EAAE,MAAM,CAAC,CAAA;IAE1C,MAAM,KAAK,GAAG,EAAE,QAAQ,EAAE,cAAc,SAAS,SAAS,GAAG,SAAS,GAAG,EAAE,EAAE,CAAA;IAE7E,MAAM,UAAU,GAAG,OAAO,CAAC,aAAa,CAAC,MAAM,KAAK,KAAK;QACvD,CAAC,CAAC,MAAM,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC;YAC3B,KAAK;YACL,MAAM,EAAE,EAAE,SAAS,EAAE,GAAG,EAAE,GAAG,EAAE,QAAQ,EAAE,IAAA,eAAK,GAAE,EAAE;SACnD,CAAC;QACF,CAAC,CAAC,MAAM,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,KAAK,EAAE,CAAC,CAAA;IAE1C,IAAI,UAAU,KAAK,IAAI;QACrB,OAAO,aAAa,CAAA;IAEtB,IAAI,UAAU,YAAY,KAAK;QAC7B,OAAO,UAAU,CAAA;IAEnB,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,EAAE,UAAU,CAAC,QAAQ,EAAE,MAAM,EAAE,EAAE,CAAA;AAC1D,CAAC;AA5BD,wBA4BC;AAED,MAAM,aAAa,GAAG,IAAI,iBAAG,CAAC,WAAW,CAAC,CAAA"}
+{"version":3,"file":"authenticate.js","sourceRoot":"","sources":["../source/authenticate.ts"],"names":[],"mappings":";;;AAAA,6CAAuC;AACvC,+BAA+B;AAKxB,KAAK,UAAU,MAAM,CAAE,EAAE,MAAM,EAAE,SAAS,EAAE,WAAW,EAAS,EAAE,OAAgB;IACvF,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,gBAAgB,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE,WAAW,EAAE,CAAC,CAAA;IAExE,MAAM,MAAM,GAAG,MAAM,IAAA,aAAO,EAAC,MAAM,EAAE,WAAW,EAAE,OAAO,CAAC,CAAA;IAE1D,IAAI,MAAM,YAAY,KAAK;QACzB,OAAO,MAAM,CAAA;IAEf,MAAM,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,MAAM,CAAA;IAE3B,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,cAAc,EAAE,MAAM,CAAC,CAAA;IAE1C,MAAM,KAAK,GAAG,EAAE,QAAQ,EAAE,cAAc,SAAS,SAAS,GAAG,SAAS,GAAG,EAAE,EAAE,CAAA;IAE7E,MAAM,UAAU,GAAG,OAAO,CAAC,aAAa,CAAC,MAAM,KAAK,KAAK;QACvD,CAAC,CAAC,MAAM,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC;YAC3B,KAAK;YACL,MAAM,EAAE,EAAE,SAAS,EAAE,GAAG,EAAE,GAAG,EAAE,QAAQ,EAAE,IAAA,eAAK,GAAE,EAAE;SACnD,CAAC;QACF,CAAC,CAAC,MAAM,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,KAAK,EAAE,CAAC,CAAA;IAE1C,IAAI,UAAU,KAAK,IAAI;QACrB,OAAO,aAAa,CAAA;IAEtB,IAAI,UAAU,YAAY,KAAK;QAC7B,OAAO,UAAU,CAAA;IAEnB,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,EAAE,UAAU,CAAC,QAAQ,EAAE,MAAM,EAAE,EAAE,CAAA;AAC1D,CAAC;AA5BD,wBA4BC;AAED,MAAM,aAAa,GAAG,IAAI,CAAC,MAAM,aAAc,SAAQ,KAAK;IAC1C,IAAI,GAAG,WAAW,CAAA;CACnC,CAAC,EAAE,CAAA"}

package/components/identity.federation/operations/create.js

@@ -1,7 +1,6 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.effect = void 0;
-const error_value_1 = require("error-value");
 const lib_1 = require("./lib");
 async function effect(input, context) {
     const claims = await (0, lib_1.resolve)(input.scheme, input.credentials, context);
@@ -23,5 +22,8 @@ async function effect(input, context) {
     });
 }
 exports.effect = effect;
-const ERR_EXISTS = new error_value_1.Err('EXISTS', 'Federation credentials are associated with another Identity');
+const ERR_EXISTS = new (class ExistsError extends Error {
+    code = 'EXISTS';
+    message = 'Federation credentials are associated with another Identity';
+})();
 //# sourceMappingURL=create.js.map

package/components/identity.federation/operations/create.js.map

@@ -1 +1 @@
-{"version":3,"file":"create.js","sourceRoot":"","sources":["../source/create.ts"],"names":[],"mappings":";;;AAAA,6CAAiC;AACjC,+BAA+B;AAGxB,KAAK,UAAU,MAAM,CAAE,KAAY,EAAE,OAAgB;IAC1D,MAAM,MAAM,GAAG,MAAM,IAAA,aAAO,EAAC,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,WAAW,EAAE,OAAO,CAAC,CAAA;IAEtE,IAAI,MAAM,YAAY,KAAK;QACzB,OAAO,MAAM,CAAA;IAEf,MAAM,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,MAAM,CAAA;IAE3B,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC;QAC3C,KAAK,EAAE,EAAE,QAAQ,EAAE,cAAc,KAAK,CAAC,SAAS,SAAS,GAAG,SAAS,GAAG,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE;KAC5F,CAAC,CAAA;IAEF,MAAM,MAAM,GAAG,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,GAAG,EAAE,GAAG,EAAE,QAAQ,EAAE,KAAK,CAAC,EAAE,EAAE,CAAA;IAE3E,IAAI,QAAQ,KAAK,IAAI;QACnB,OAAO,MAAM,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAA;IAEvD,IAAI,QAAQ,CAAC,QAAQ,KAAK,SAAS,IAAI,QAAQ,CAAC,QAAQ,KAAK,IAAI;QAC/D,OAAO,QAAQ,CAAC,QAAQ,KAAK,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,UAAU,CAAA;IAE/D,iFAAiF;IACjF,OAAO,MAAM,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC;QACjC,KAAK,EAAE,MAAM;QACb,KAAK,EAAE,EAAE,EAAE,EAAE,QAAQ,CAAC,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE;KAC1C,CAAC,CAAA;AACJ,CAAC;AAzBD,wBAyBC;AASD,MAAM,UAAU,GAAG,IAAI,iBAAG,CAAC,QAAQ,EAAE,6DAA6D,CAAC,CAAA"}
+{"version":3,"file":"create.js","sourceRoot":"","sources":["../source/create.ts"],"names":[],"mappings":";;;AAAA,+BAA+B;AAGxB,KAAK,UAAU,MAAM,CAAE,KAAY,EAAE,OAAgB;IAC1D,MAAM,MAAM,GAAG,MAAM,IAAA,aAAO,EAAC,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,WAAW,EAAE,OAAO,CAAC,CAAA;IAEtE,IAAI,MAAM,YAAY,KAAK;QACzB,OAAO,MAAM,CAAA;IAEf,MAAM,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,MAAM,CAAA;IAE3B,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC;QAC3C,KAAK,EAAE,EAAE,QAAQ,EAAE,cAAc,KAAK,CAAC,SAAS,SAAS,GAAG,SAAS,GAAG,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE;KAC5F,CAAC,CAAA;IAEF,MAAM,MAAM,GAAG,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,GAAG,EAAE,GAAG,EAAE,QAAQ,EAAE,KAAK,CAAC,EAAE,EAAE,CAAA;IAE3E,IAAI,QAAQ,KAAK,IAAI;QACnB,OAAO,MAAM,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAA;IAEvD,IAAI,QAAQ,CAAC,QAAQ,KAAK,SAAS,IAAI,QAAQ,CAAC,QAAQ,KAAK,IAAI;QAC/D,OAAO,QAAQ,CAAC,QAAQ,KAAK,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,UAAU,CAAA;IAE/D,iFAAiF;IACjF,OAAO,MAAM,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC;QACjC,KAAK,EAAE,MAAM;QACb,KAAK,EAAE,EAAE,EAAE,EAAE,QAAQ,CAAC,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE;KAC1C,CAAC,CAAA;AACJ,CAAC;AAzBD,wBAyBC;AASD,MAAM,UAAU,GAAG,IAAI,CAAC,MAAM,WAAY,SAAQ,KAAK;IACrC,IAAI,GAAG,QAAQ,CAAA;IACN,OAAO,GAAG,6DAA6D,CAAA;CACjG,CAAC,EAAE,CAAA"}

package/components/identity.federation/operations/lib/errors.d.ts

@@ -1,11 +1,70 @@
-import { Err } from 'error-value';
-export declare const ERR_TRUST: Err<"TRUST", any>;
-export declare const ERR_RESPONSE: Err<"RESPONSE", any>;
-export declare const ERR_CONFIG: Err<"CONFIG", any>;
-export declare const ERR_NO_TOKEN: Err<"NO_TOKEN", any>;
-export declare const ERR_ISS: Err<"ISS", any>;
-export declare const ERR_SUB: Err<"SUB", any>;
-export declare const ERR_EXP: Err<"EXP", any>;
-export declare const ERR_REPLAY: Err<"REPLAY", any>;
-export declare const ERR_CODE_NOT_ENABLED: Err<"CODE_NOT_ENABLED", any>;
-export declare const ERR_CODE_SCHEMA: Err<"CODE_SCHEMA", any>;
+export declare const ERR_TRUST: {
+    readonly code: "TRUST";
+    readonly message: "Issuer not trusted";
+    name: string;
+    stack?: string | undefined;
+    cause?: unknown;
+};
+export declare const ERR_RESPONSE: {
+    readonly code: "RESPONSE";
+    readonly message: "Request to IDP failed";
+    name: string;
+    stack?: string | undefined;
+    cause?: unknown;
+};
+export declare const ERR_CONFIG: {
+    readonly code: "CONFIG";
+    readonly message: "Invalid OpenID configuration";
+    name: string;
+    stack?: string | undefined;
+    cause?: unknown;
+};
+export declare const ERR_NO_TOKEN: {
+    readonly code: "NO_TOKEN";
+    readonly message: "No ID token received";
+    name: string;
+    stack?: string | undefined;
+    cause?: unknown;
+};
+export declare const ERR_ISS: {
+    readonly code: "ISS";
+    readonly message: "Invalid issuer claim";
+    name: string;
+    stack?: string | undefined;
+    cause?: unknown;
+};
+export declare const ERR_SUB: {
+    readonly code: "SUB";
+    readonly message: "Invalid subject claim";
+    name: string;
+    stack?: string | undefined;
+    cause?: unknown;
+};
+export declare const ERR_EXP: {
+    readonly code: "EXP";
+    readonly message: "Token does not have an expiration time";
+    name: string;
+    stack?: string | undefined;
+    cause?: unknown;
+};
+export declare const ERR_REPLAY: {
+    readonly code: "REPLAY";
+    readonly message: "Token has already been used";
+    name: string;
+    stack?: string | undefined;
+    cause?: unknown;
+};
+export declare const ERR_CODE_NOT_ENABLED: {
+    readonly code: "CODE_NOT_ENABLED";
+    readonly message: "Authorization code flow is not configured";
+    name: string;
+    stack?: string | undefined;
+    cause?: unknown;
+};
+export declare const ERR_CODE_SCHEMA: {
+    readonly code: "CODE_SCHEMA";
+    readonly message: "Invalid code credentials";
+    name: string;
+    stack?: string | undefined;
+    cause?: unknown;
+};

package/components/identity.federation/operations/lib/errors.js

@@ -1,15 +1,44 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.ERR_CODE_SCHEMA = exports.ERR_CODE_NOT_ENABLED = exports.ERR_REPLAY = exports.ERR_EXP = exports.ERR_SUB = exports.ERR_ISS = exports.ERR_NO_TOKEN = exports.ERR_CONFIG = exports.ERR_RESPONSE = exports.ERR_TRUST = void 0;
-const error_value_1 = require("error-value");
-exports.ERR_TRUST = new error_value_1.Err('TRUST', 'Issuer not trusted');
-exports.ERR_RESPONSE = new error_value_1.Err('RESPONSE', 'Request to IDP failed');
-exports.ERR_CONFIG = new error_value_1.Err('CONFIG', 'Invalid OpenID configuration');
-exports.ERR_NO_TOKEN = new error_value_1.Err('NO_TOKEN', 'No ID token received');
-exports.ERR_ISS = new error_value_1.Err('ISS', 'Invalid issuer claim');
-exports.ERR_SUB = new error_value_1.Err('SUB', 'Invalid subject claim');
-exports.ERR_EXP = new error_value_1.Err('EXP', 'Token does not have an expiration time');
-exports.ERR_REPLAY = new error_value_1.Err('REPLAY', 'Token has already been used');
-exports.ERR_CODE_NOT_ENABLED = new error_value_1.Err('CODE_NOT_ENABLED', 'Authorization code flow is not configured');
-exports.ERR_CODE_SCHEMA = new error_value_1.Err('CODE_SCHEMA', 'Invalid code credentials');
+exports.ERR_TRUST = new (class TrustError extends Error {
+    code = 'TRUST';
+    message = 'Issuer not trusted';
+})();
+exports.ERR_RESPONSE = new (class ResponseError extends Error {
+    code = 'RESPONSE';
+    message = 'Request to IDP failed';
+})();
+exports.ERR_CONFIG = new (class ConfigError extends Error {
+    code = 'CONFIG';
+    message = 'Invalid OpenID configuration';
+})();
+exports.ERR_NO_TOKEN = new (class NoTokenError extends Error {
+    code = 'NO_TOKEN';
+    message = 'No ID token received';
+})();
+exports.ERR_ISS = new (class IssError extends Error {
+    code = 'ISS';
+    message = 'Invalid issuer claim';
+})();
+exports.ERR_SUB = new (class SubError extends Error {
+    code = 'SUB';
+    message = 'Invalid subject claim';
+})();
+exports.ERR_EXP = new (class ExpError extends Error {
+    code = 'EXP';
+    message = 'Token does not have an expiration time';
+})();
+exports.ERR_REPLAY = new (class ReplayError extends Error {
+    code = 'REPLAY';
+    message = 'Token has already been used';
+})();
+exports.ERR_CODE_NOT_ENABLED = new (class CodeNotEnabledError extends Error {
+    code = 'CODE_NOT_ENABLED';
+    message = 'Authorization code flow is not configured';
+})();
+exports.ERR_CODE_SCHEMA = new (class CodeSchemaError extends Error {
+    code = 'CODE_SCHEMA';
+    message = 'Invalid code credentials';
+})();
 //# sourceMappingURL=errors.js.map

package/components/identity.federation/operations/lib/errors.js.map

@@ -1 +1 @@
-{"version":3,"file":"errors.js","sourceRoot":"","sources":["../../source/lib/errors.ts"],"names":[],"mappings":";;;AAAA,6CAAiC;AAEpB,QAAA,SAAS,GAAG,IAAI,iBAAG,CAAC,OAAO,EAAE,oBAAoB,CAAC,CAAA;AAClD,QAAA,YAAY,GAAG,IAAI,iBAAG,CAAC,UAAU,EAAE,uBAAuB,CAAC,CAAA;AAC3D,QAAA,UAAU,GAAG,IAAI,iBAAG,CAAC,QAAQ,EAAE,8BAA8B,CAAC,CAAA;AAC9D,QAAA,YAAY,GAAG,IAAI,iBAAG,CAAC,UAAU,EAAE,sBAAsB,CAAC,CAAA;AAC1D,QAAA,OAAO,GAAG,IAAI,iBAAG,CAAC,KAAK,EAAE,sBAAsB,CAAC,CAAA;AAChD,QAAA,OAAO,GAAG,IAAI,iBAAG,CAAC,KAAK,EAAE,uBAAuB,CAAC,CAAA;AACjD,QAAA,OAAO,GAAG,IAAI,iBAAG,CAAC,KAAK,EAAE,wCAAwC,CAAC,CAAA;AAClE,QAAA,UAAU,GAAG,IAAI,iBAAG,CAAC,QAAQ,EAAE,6BAA6B,CAAC,CAAA;AAC7D,QAAA,oBAAoB,GAAG,IAAI,iBAAG,CAAC,kBAAkB,EAAE,2CAA2C,CAAC,CAAA;AAC/F,QAAA,eAAe,GAAG,IAAI,iBAAG,CAAC,aAAa,EAAE,0BAA0B,CAAC,CAAA"}
+{"version":3,"file":"errors.js","sourceRoot":"","sources":["../../source/lib/errors.ts"],"names":[],"mappings":";;;AAAa,QAAA,SAAS,GAAG,IAAI,CAAC,MAAM,UAAW,SAAQ,KAAK;IAC1C,IAAI,GAAG,OAAO,CAAA;IACL,OAAO,GAAG,oBAAoB,CAAA;CACxD,CAAC,EAAE,CAAA;AAES,QAAA,YAAY,GAAG,IAAI,CAAC,MAAM,aAAc,SAAQ,KAAK;IAChD,IAAI,GAAG,UAAU,CAAA;IACR,OAAO,GAAG,uBAAuB,CAAA;CAC3D,CAAC,EAAE,CAAA;AAES,QAAA,UAAU,GAAG,IAAI,CAAC,MAAM,WAAY,SAAQ,KAAK;IAC5C,IAAI,GAAG,QAAQ,CAAA;IACN,OAAO,GAAG,8BAA8B,CAAA;CAClE,CAAC,EAAE,CAAA;AAES,QAAA,YAAY,GAAG,IAAI,CAAC,MAAM,YAAa,SAAQ,KAAK;IAC/C,IAAI,GAAG,UAAU,CAAA;IACR,OAAO,GAAG,sBAAsB,CAAA;CAC1D,CAAC,EAAE,CAAA;AAES,QAAA,OAAO,GAAG,IAAI,CAAC,MAAM,QAAS,SAAQ,KAAK;IACtC,IAAI,GAAG,KAAK,CAAA;IACH,OAAO,GAAG,sBAAsB,CAAA;CAC1D,CAAC,EAAE,CAAA;AAES,QAAA,OAAO,GAAG,IAAI,CAAC,MAAM,QAAS,SAAQ,KAAK;IACtC,IAAI,GAAG,KAAK,CAAA;IACH,OAAO,GAAG,uBAAuB,CAAA;CAC3D,CAAC,EAAE,CAAA;AAES,QAAA,OAAO,GAAG,IAAI,CAAC,MAAM,QAAS,SAAQ,KAAK;IACtC,IAAI,GAAG,KAAK,CAAA;IACH,OAAO,GAAG,wCAAwC,CAAA;CAC5E,CAAC,EAAE,CAAA;AAES,QAAA,UAAU,GAAG,IAAI,CAAC,MAAM,WAAY,SAAQ,KAAK;IAC5C,IAAI,GAAG,QAAQ,CAAA;IACN,OAAO,GAAG,6BAA6B,CAAA;CACjE,CAAC,EAAE,CAAA;AAES,QAAA,oBAAoB,GAAG,IAAI,CAAC,MAAM,mBAAoB,SAAQ,KAAK;IAC9D,IAAI,GAAG,kBAAkB,CAAA;IAChB,OAAO,GAAG,2CAA2C,CAAA;CAC/E,CAAC,EAAE,CAAA;AAES,QAAA,eAAe,GAAG,IAAI,CAAC,MAAM,eAAgB,SAAQ,KAAK;IACrD,IAAI,GAAG,aAAa,CAAA;IACX,OAAO,GAAG,0BAA0B,CAAA;CAC9D,CAAC,EAAE,CAAA"}

package/components/identity.federation/operations/lib/exchange.js

@@ -43,7 +43,7 @@ async function exchange(credentials, ctx) {
         return errors.ERR_CONFIG;
     // array actually is not expected here, but it is a valid format
     const aud = Array.isArray(trusted.aud) ? trusted.aud[0] : trusted.aud;
-    const secret = trusted.secret ?? await sign(trusted);
+    const secret = trusted.secret === undefined ? await sign(trusted) : trusted.secret.unwrap();
     const params = new URLSearchParams();
     params.append('grant_type', 'authorization_code');
     params.append('code', code);
@@ -94,7 +94,7 @@ async function sign(trust) {
     const signature = trust.signature;
     const aud = Array.isArray(trust.aud) ? trust.aud[0] : trust.aud;
     const now = Math.floor(Date.now() / 1000);
-    const key = await jose.importPKCS8(signature.key, 'ES256');
+    const key = await jose.importPKCS8(signature.key.unwrap(), 'ES256');
     return await new jose.SignJWT({})
         .setProtectedHeader({ alg: 'ES256', kid: signature.kid })
         .setIssuedAt(now)

package/components/identity.federation/operations/lib/exchange.js.map

@@ -1 +1 @@
-{"version":3,"file":"exchange.js","sourceRoot":"","sources":["../../source/lib/exchange.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,iCAA6B;AAC7B,2CAA0D;AAC1D,iDAAkC;AAK3B,KAAK,UAAU,QAAQ,CAAE,WAAmB,EAAE,GAAQ;IAC3D,MAAM,IAAI,GAAG,MAAM,IAAA,WAAI,GAAE,CAAA;IACzB,MAAM,UAAU,GAAG,MAAM,CAAC,WAAW,CAAC,CAAA;IAEtC,IAAI,UAAU,YAAY,KAAK;QAC7B,OAAO,UAAU,CAAA;IAEnB,MAAM,EAAE,IAAI,EAAE,GAAG,EAAE,GAAG,EAAE,QAAQ,EAAE,GAAG,UAAU,CAAA;IAE/C,MAAM,OAAO,GAAG,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,GAAG,KAAK,GAAG,CAAC,CAAA;IAE5D,IAAI,OAAO,KAAK,SAAS;QACvB,OAAO,MAAM,CAAC,SAAS,CAAA;IAEzB,IAAI,OAAO,CAAC,GAAG,KAAK,SAAS,IAAI,CAAC,OAAO,CAAC,MAAM,KAAK,SAAS,IAAI,OAAO,CAAC,SAAS,KAAK,SAAS,CAAC;QAChG,OAAO,MAAM,CAAC,oBAAoB,CAAA;IAEpC,MAAM,aAAa,GAAG,MAAM,IAAA,oBAAQ,EAAC,GAAG,EAAE,GAAG,CAAC,KAAK,CAAC,CAAA;IAEpD,IAAI,aAAa,CAAC,cAAc,KAAK,SAAS;QAC5C,OAAO,MAAM,CAAC,UAAU,CAAA;IAE1B,gEAAgE;IAChE,MAAM,GAAG,GAAG,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAA;IACrE,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,IAAI,MAAM,IAAI,CAAC,OAAO,CAAC,CAAA;IACpD,MAAM,MAAM,GAAG,IAAI,eAAe,EAAE,CAAA;IAEpC,MAAM,CAAC,MAAM,CAAC,YAAY,EAAE,oBAAoB,CAAC,CAAA;IACjD,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,IAAI,CAAC,CAAA;IAC3B,MAAM,CAAC,MAAM,CAAC,WAAW,EAAE,GAAG,CAAC,CAAA;IAC/B,MAAM,CAAC,MAAM,CAAC,eAAe,EAAE,MAAM,CAAC,CAAA;IACtC,MAAM,CAAC,MAAM,CAAC,cAAc,EAAE,QAAQ,CAAC,CAAA;IAEvC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,iBAAiB,EAAE;QAChC,GAAG;QACH,GAAG;QACH,GAAG,EAAE,QAAQ;QACb,IAAI,EAAE,OAAO,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,QAAQ;QAC3D,IAAI;KACL,CAAC,CAAA;IAEF,MAAM,QAAQ,GAAG,MAAM,GAAG,CAAC,KAAK,CAAC,aAAa,CAAC,cAAc,EAAE;QAC7D,MAAM,EAAE,MAAM;QACd,OAAO,EAAE;YACP,cAAc,EAAE,mCAAmC;SACpD;QACD,IAAI,EAAE,MAAM;KACb,CAAC,CAAA;IAEF,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;QACjB,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,sBAAsB,EAAE,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,IAAI,EAAE,MAAM,QAAQ,CAAC,IAAI,EAAE,EAAE,CAAC,CAAA;QAEhG,OAAO,MAAM,CAAC,YAAY,CAAA;IAC5B,CAAC;IAED,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,IAAI,EAA0B,CAAA;IAE5D,IAAI,MAAM,CAAC,QAAQ,KAAK,SAAS;QAC/B,OAAO,MAAM,CAAC,YAAY,CAAA;IAE5B,MAAM,IAAI,GAAG,MAAM,IAAA,8BAAkB,EAAC,GAAG,EAAE,GAAG,CAAC,KAAK,CAAC,CAAA;IAErD,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,QAAQ,EAAE,IAAI,EAAE;QAC9D,QAAQ,EAAE,OAAO,CAAC,GAAG;QACrB,MAAM,EAAE,GAAG;KACZ,CAAC,CAAA;IAEF,OAAO,OAAkB,CAAA;AAC3B,CAAC;AApED,4BAoEC;AAED,SAAS,MAAM,CAAE,WAAmB;IAClC,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAA;IAChE,MAAM,UAAU,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAe,CAAA;IAEjD,IACE,OAAO,UAAU,CAAC,IAAI,KAAK,QAAQ;QACnC,OAAO,UAAU,CAAC,GAAG,KAAK,QAAQ;QAClC,OAAO,UAAU,CAAC,GAAG,KAAK,QAAQ;QAClC,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,MAAM,KAAK,qBAAqB,CAAC,MAAM;QAE/D,OAAO,MAAM,CAAC,eAAe,CAAA;IAE/B,OAAO,UAAU,CAAA;AACnB,CAAC;AAED,KAAK,UAAU,IAAI,CAAE,KAAY;IAC/B,MAAM,IAAI,GAAG,MAAM,IAAA,WAAI,GAAE,CAAA;IACzB,MAAM,SAAS,GAAG,KAAK,CAAC,SAAU,CAAA;IAClC,MAAM,GAAG,GAAG,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,GAAI,CAAA;IAChE,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAA;IACzC,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,SAAS,CAAC,GAAG,EAAE,OAAO,CAAC,CAAA;IAE1D,OAAO,MAAM,IAAI,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;SAC9B,kBAAkB,CAAC,EAAE,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,SAAS,CAAC,GAAG,EAAE,CAAC;SACxD,WAAW,CAAC,GAAG,CAAC;SAChB,iBAAiB,CAAC,GAAG,GAAG,GAAG,CAAC;SAC5B,SAAS,CAAC,SAAS,CAAC,GAAG,CAAC;SACxB,UAAU,CAAC,GAAG,CAAC;SACf,WAAW,CAAC,KAAK,CAAC,GAAG,CAAC;SACtB,IAAI,CAAC,GAAG,CAAC,CAAA;AACd,CAAC;AAED,MAAM,qBAAqB,GAA4B,CAAC,KAAK,EAAE,KAAK,EAAE,MAAM,CAAC,CAAA"}
+{"version":3,"file":"exchange.js","sourceRoot":"","sources":["../../source/lib/exchange.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,iCAA6B;AAC7B,2CAA0D;AAC1D,iDAAkC;AAK3B,KAAK,UAAU,QAAQ,CAAE,WAAmB,EAAE,GAAQ;IAC3D,MAAM,IAAI,GAAG,MAAM,IAAA,WAAI,GAAE,CAAA;IACzB,MAAM,UAAU,GAAG,MAAM,CAAC,WAAW,CAAC,CAAA;IAEtC,IAAI,UAAU,YAAY,KAAK;QAC7B,OAAO,UAAU,CAAA;IAEnB,MAAM,EAAE,IAAI,EAAE,GAAG,EAAE,GAAG,EAAE,QAAQ,EAAE,GAAG,UAAU,CAAA;IAE/C,MAAM,OAAO,GAAG,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,GAAG,KAAK,GAAG,CAAC,CAAA;IAE5D,IAAI,OAAO,KAAK,SAAS;QACvB,OAAO,MAAM,CAAC,SAAS,CAAA;IAEzB,IAAI,OAAO,CAAC,GAAG,KAAK,SAAS,IAAI,CAAC,OAAO,CAAC,MAAM,KAAK,SAAS,IAAI,OAAO,CAAC,SAAS,KAAK,SAAS,CAAC;QAChG,OAAO,MAAM,CAAC,oBAAoB,CAAA;IAEpC,MAAM,aAAa,GAAG,MAAM,IAAA,oBAAQ,EAAC,GAAG,EAAE,GAAG,CAAC,KAAK,CAAC,CAAA;IAEpD,IAAI,aAAa,CAAC,cAAc,KAAK,SAAS;QAC5C,OAAO,MAAM,CAAC,UAAU,CAAA;IAE1B,gEAAgE;IAChE,MAAM,GAAG,GAAG,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAA;IACrE,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,CAAA;IAC3F,MAAM,MAAM,GAAG,IAAI,eAAe,EAAE,CAAA;IAEpC,MAAM,CAAC,MAAM,CAAC,YAAY,EAAE,oBAAoB,CAAC,CAAA;IACjD,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,IAAI,CAAC,CAAA;IAC3B,MAAM,CAAC,MAAM,CAAC,WAAW,EAAE,GAAG,CAAC,CAAA;IAC/B,MAAM,CAAC,MAAM,CAAC,eAAe,EAAE,MAAM,CAAC,CAAA;IACtC,MAAM,CAAC,MAAM,CAAC,cAAc,EAAE,QAAQ,CAAC,CAAA;IAEvC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,iBAAiB,EAAE;QAChC,GAAG;QACH,GAAG;QACH,GAAG,EAAE,QAAQ;QACb,IAAI,EAAE,OAAO,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,QAAQ;QAC3D,IAAI;KACL,CAAC,CAAA;IAEF,MAAM,QAAQ,GAAG,MAAM,GAAG,CAAC,KAAK,CAAC,aAAa,CAAC,cAAc,EAAE;QAC7D,MAAM,EAAE,MAAM;QACd,OAAO,EAAE;YACP,cAAc,EAAE,mCAAmC;SACpD;QACD,IAAI,EAAE,MAAM;KACb,CAAC,CAAA;IAEF,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;QACjB,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,sBAAsB,EAAE,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,IAAI,EAAE,MAAM,QAAQ,CAAC,IAAI,EAAE,EAAE,CAAC,CAAA;QAEhG,OAAO,MAAM,CAAC,YAAY,CAAA;IAC5B,CAAC;IAED,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,IAAI,EAA0B,CAAA;IAE5D,IAAI,MAAM,CAAC,QAAQ,KAAK,SAAS;QAC/B,OAAO,MAAM,CAAC,YAAY,CAAA;IAE5B,MAAM,IAAI,GAAG,MAAM,IAAA,8BAAkB,EAAC,GAAG,EAAE,GAAG,CAAC,KAAK,CAAC,CAAA;IAErD,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,QAAQ,EAAE,IAAI,EAAE;QAC9D,QAAQ,EAAE,OAAO,CAAC,GAAG;QACrB,MAAM,EAAE,GAAG;KACZ,CAAC,CAAA;IAEF,OAAO,OAAkB,CAAA;AAC3B,CAAC;AApED,4BAoEC;AAED,SAAS,MAAM,CAAE,WAAmB;IAClC,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAA;IAChE,MAAM,UAAU,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAe,CAAA;IAEjD,IACE,OAAO,UAAU,CAAC,IAAI,KAAK,QAAQ;QACnC,OAAO,UAAU,CAAC,GAAG,KAAK,QAAQ;QAClC,OAAO,UAAU,CAAC,GAAG,KAAK,QAAQ;QAClC,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,MAAM,KAAK,qBAAqB,CAAC,MAAM;QAE/D,OAAO,MAAM,CAAC,eAAe,CAAA;IAE/B,OAAO,UAAU,CAAA;AACnB,CAAC;AAED,KAAK,UAAU,IAAI,CAAE,KAAY;IAC/B,MAAM,IAAI,GAAG,MAAM,IAAA,WAAI,GAAE,CAAA;IACzB,MAAM,SAAS,GAAG,KAAK,CAAC,SAAU,CAAA;IAClC,MAAM,GAAG,GAAG,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,GAAI,CAAA;IAChE,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAA;IACzC,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,SAAS,CAAC,GAAG,CAAC,MAAM,EAAE,EAAE,OAAO,CAAC,CAAA;IAEnE,OAAO,MAAM,IAAI,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;SAC9B,kBAAkB,CAAC,EAAE,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,SAAS,CAAC,GAAG,EAAE,CAAC;SACxD,WAAW,CAAC,GAAG,CAAC;SAChB,iBAAiB,CAAC,GAAG,GAAG,GAAG,CAAC;SAC5B,SAAS,CAAC,SAAS,CAAC,GAAG,CAAC;SACxB,UAAU,CAAC,GAAG,CAAC;SACf,WAAW,CAAC,KAAK,CAAC,GAAG,CAAC;SACtB,IAAI,CAAC,GAAG,CAAC,CAAA;AACd,CAAC;AAED,MAAM,qBAAqB,GAA4B,CAAC,KAAK,EAAE,KAAK,EAAE,MAAM,CAAC,CAAA"}