@tsed/oidc-provider 7.0.0-alpha.1 → 7.0.0-beta.3

package/lib/esm/middlewares/OidcNoCacheMiddleware.js

@@ -0,0 +1,19 @@
+import { __decorate, __metadata, __param } from "tslib";
+import { Context, Middleware } from "@tsed/common";
+let OidcNoCacheMiddleware = class OidcNoCacheMiddleware {
+    use(ctx) {
+        ctx.response.setHeader("Pragma", "no-cache");
+        ctx.response.setHeader("Cache-Control", "no-cache, no-store");
+    }
+};
+__decorate([
+    __param(0, Context()),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [Object]),
+    __metadata("design:returntype", void 0)
+], OidcNoCacheMiddleware.prototype, "use", null);
+OidcNoCacheMiddleware = __decorate([
+    Middleware()
+], OidcNoCacheMiddleware);
+export { OidcNoCacheMiddleware };
+//# sourceMappingURL=OidcNoCacheMiddleware.js.map

package/lib/esm/middlewares/OidcNoCacheMiddleware.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"OidcNoCacheMiddleware.js","sourceRoot":"","sources":["../../../src/middlewares/OidcNoCacheMiddleware.ts"],"names":[],"mappings":";AAAA,OAAO,EAAC,OAAO,EAAE,UAAU,EAAoB,MAAM,cAAc,CAAC;AAGpE,IAAa,qBAAqB,GAAlC,MAAa,qBAAqB;IAChC,GAAG,CAAY,GAAY;QACzB,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;QAC7C,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,eAAe,EAAE,oBAAoB,CAAC,CAAC;IAChE,CAAC;CACF,CAAA;AAJC;IAAK,WAAA,OAAO,EAAE,CAAA;;;;gDAGb;AAJU,qBAAqB;IADjC,UAAU,EAAE;GACA,qBAAqB,CAKjC;SALY,qBAAqB","sourcesContent":["import {Context, Middleware, MiddlewareMethods} from \"@tsed/common\";\n\n@Middleware()\nexport class OidcNoCacheMiddleware implements MiddlewareMethods {\n  use(@Context() ctx: Context) {\n    ctx.response.setHeader(\"Pragma\", \"no-cache\");\n    ctx.response.setHeader(\"Cache-Control\", \"no-cache, no-store\");\n  }\n}\n"]}

package/lib/esm/middlewares/OidcSecureMiddleware.js

@@ -0,0 +1,35 @@
+import { __decorate, __metadata, __param } from "tslib";
+import { Context, Middleware } from "@tsed/common";
+import { BadRequest } from "@tsed/exceptions";
+import url from "url";
+let OidcSecureMiddleware = class OidcSecureMiddleware {
+    use(ctx) {
+        const req = ctx.request;
+        if (!req.secure) {
+            if (req.method === "GET" || req.method === "HEAD") {
+                ctx.response.redirect(302, url.format({
+                    protocol: "https",
+                    host: req.get("host"),
+                    pathname: req.url
+                }));
+            }
+            else {
+                throw new BadRequest("InvalidRequest", {
+                    error: "invalid_request",
+                    error_description: "Do yourself a favor and only use https"
+                });
+            }
+        }
+    }
+};
+__decorate([
+    __param(0, Context()),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [Object]),
+    __metadata("design:returntype", void 0)
+], OidcSecureMiddleware.prototype, "use", null);
+OidcSecureMiddleware = __decorate([
+    Middleware()
+], OidcSecureMiddleware);
+export { OidcSecureMiddleware };
+//# sourceMappingURL=OidcSecureMiddleware.js.map

package/lib/esm/middlewares/OidcSecureMiddleware.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"OidcSecureMiddleware.js","sourceRoot":"","sources":["../../../src/middlewares/OidcSecureMiddleware.ts"],"names":[],"mappings":";AAAA,OAAO,EAAC,OAAO,EAAE,UAAU,EAAoB,MAAM,cAAc,CAAC;AACpE,OAAO,EAAC,UAAU,EAAC,MAAM,kBAAkB,CAAC;AAC5C,OAAO,GAAG,MAAM,KAAK,CAAC;AAGtB,IAAa,oBAAoB,GAAjC,MAAa,oBAAoB;IAC/B,GAAG,CAAY,GAAY;QACzB,MAAM,GAAG,GAAG,GAAG,CAAC,OAAO,CAAC;QAExB,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE;YACf,IAAI,GAAG,CAAC,MAAM,KAAK,KAAK,IAAI,GAAG,CAAC,MAAM,KAAK,MAAM,EAAE;gBACjD,GAAG,CAAC,QAAQ,CAAC,QAAQ,CACnB,GAAG,EACH,GAAG,CAAC,MAAM,CAAC;oBACT,QAAQ,EAAE,OAAO;oBACjB,IAAI,EAAE,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC;oBACrB,QAAQ,EAAE,GAAG,CAAC,GAAG;iBAClB,CAAC,CACH,CAAC;aACH;iBAAM;gBACL,MAAM,IAAI,UAAU,CAAC,gBAAgB,EAAE;oBACrC,KAAK,EAAE,iBAAiB;oBACxB,iBAAiB,EAAE,wCAAwC;iBAC5D,CAAC,CAAC;aACJ;SACF;IACH,CAAC;CACF,CAAA;AArBC;IAAK,WAAA,OAAO,EAAE,CAAA;;;;+CAoBb;AArBU,oBAAoB;IADhC,UAAU,EAAE;GACA,oBAAoB,CAsBhC;SAtBY,oBAAoB","sourcesContent":["import {Context, Middleware, MiddlewareMethods} from \"@tsed/common\";\nimport {BadRequest} from \"@tsed/exceptions\";\nimport url from \"url\";\n\n@Middleware()\nexport class OidcSecureMiddleware implements MiddlewareMethods {\n  use(@Context() ctx: Context) {\n    const req = ctx.request;\n\n    if (!req.secure) {\n      if (req.method === \"GET\" || req.method === \"HEAD\") {\n        ctx.response.redirect(\n          302,\n          url.format({\n            protocol: \"https\",\n            host: req.get(\"host\"),\n            pathname: req.url\n          })\n        );\n      } else {\n        throw new BadRequest(\"InvalidRequest\", {\n          error: \"invalid_request\",\n          error_description: \"Do yourself a favor and only use https\"\n        });\n      }\n    }\n  }\n}\n"]}

package/lib/esm/services/OidcAdapters.js

@@ -0,0 +1,54 @@
+import { __decorate, __metadata } from "tslib";
+import { Adapters } from "@tsed/adapters";
+import { Inject, Injectable } from "@tsed/di";
+let OidcAdapters = class OidcAdapters {
+    createAdapterClass() {
+        const self = this;
+        return class CustomAdapter {
+            constructor(name) {
+                this.adapter = self.adapters.invokeAdapter({
+                    collectionName: name,
+                    model: Object
+                });
+            }
+            async upsert(id, payload, expiresIn) {
+                let expiresAt;
+                if (expiresIn) {
+                    expiresAt = new Date(Date.now() + expiresIn * 1000);
+                }
+                await this.adapter.upsert(id, payload, expiresAt);
+            }
+            async find(id) {
+                return this.adapter.findById(id);
+            }
+            async findByUserCode(userCode) {
+                return this.adapter.findOne({
+                    userCode
+                });
+            }
+            async findByUid(uid) {
+                return this.adapter.findOne({
+                    uid
+                });
+            }
+            async destroy(id) {
+                await this.adapter.deleteById(id);
+            }
+            async revokeByGrantId(grantId) {
+                await this.adapter.deleteMany({ grantId });
+            }
+            async consume(grantId) {
+                await this.adapter.update(grantId, { consumed: Math.floor(Date.now() / 1000) });
+            }
+        };
+    }
+};
+__decorate([
+    Inject(),
+    __metadata("design:type", Adapters)
+], OidcAdapters.prototype, "adapters", void 0);
+OidcAdapters = __decorate([
+    Injectable()
+], OidcAdapters);
+export { OidcAdapters };
+//# sourceMappingURL=OidcAdapters.js.map

package/lib/esm/services/OidcAdapters.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"OidcAdapters.js","sourceRoot":"","sources":["../../../src/services/OidcAdapters.ts"],"names":[],"mappings":";AAAA,OAAO,EAAU,QAAQ,EAAC,MAAM,gBAAgB,CAAC;AACjD,OAAO,EAAC,MAAM,EAAE,UAAU,EAAC,MAAM,UAAU,CAAC;AAI5C,IAAa,YAAY,GAAzB,MAAa,YAAY;IAIvB,kBAAkB;QAChB,MAAM,IAAI,GAAG,IAAI,CAAC;QAElB,OAAO,MAAM,aAAa;YAGxB,YAAY,IAAY;gBACtB,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,aAAa,CAAM;oBAC9C,cAAc,EAAE,IAAI;oBACpB,KAAK,EAAE,MAAM;iBACd,CAAC,CAAC;YACL,CAAC;YAED,KAAK,CAAC,MAAM,CAAC,EAAU,EAAE,OAAY,EAAE,SAAiB;gBACtD,IAAI,SAAS,CAAC;gBAEd,IAAI,SAAS,EAAE;oBACb,SAAS,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,GAAG,IAAI,CAAC,CAAC;iBACrD;gBAED,MAAM,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,EAAE,OAAO,EAAE,SAAS,CAAC,CAAC;YACpD,CAAC;YAED,KAAK,CAAC,IAAI,CAAC,EAAU;gBACnB,OAAO,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;YACnC,CAAC;YAED,KAAK,CAAC,cAAc,CAAC,QAAgB;gBACnC,OAAO,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC;oBAC1B,QAAQ;iBACT,CAAC,CAAC;YACL,CAAC;YAED,KAAK,CAAC,SAAS,CAAC,GAAW;gBACzB,OAAO,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC;oBAC1B,GAAG;iBACJ,CAAC,CAAC;YACL,CAAC;YAED,KAAK,CAAC,OAAO,CAAC,EAAU;gBACtB,MAAM,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC;YACpC,CAAC;YAED,KAAK,CAAC,eAAe,CAAC,OAAe;gBACnC,MAAM,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,EAAC,OAAO,EAAC,CAAC,CAAC;YAC3C,CAAC;YAED,KAAK,CAAC,OAAO,CAAC,OAAe;gBAC3B,MAAM,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,OAAO,EAAE,EAAC,QAAQ,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,EAAC,CAAC,CAAC;YAChF,CAAC;SACF,CAAC;IACJ,CAAC;CACF,CAAA;AAtDC;IADC,MAAM,EAAE;8BACW,QAAQ;8CAAC;AAFlB,YAAY;IADxB,UAAU,EAAE;GACA,YAAY,CAwDxB;SAxDY,YAAY","sourcesContent":["import {Adapter, Adapters} from \"@tsed/adapters\";\nimport {Inject, Injectable} from \"@tsed/di\";\nimport {Adapter as OidcAdapter, AdapterConstructor} from \"oidc-provider\";\n\n@Injectable()\nexport class OidcAdapters {\n  @Inject()\n  protected adapters: Adapters;\n\n  createAdapterClass(): AdapterConstructor {\n    const self = this;\n\n    return class CustomAdapter implements OidcAdapter {\n      adapter: Adapter<any>;\n\n      constructor(name: string) {\n        this.adapter = self.adapters.invokeAdapter<any>({\n          collectionName: name,\n          model: Object\n        });\n      }\n\n      async upsert(id: string, payload: any, expiresIn: number): Promise<void> {\n        let expiresAt;\n\n        if (expiresIn) {\n          expiresAt = new Date(Date.now() + expiresIn * 1000);\n        }\n\n        await this.adapter.upsert(id, payload, expiresAt);\n      }\n\n      async find(id: string) {\n        return this.adapter.findById(id);\n      }\n\n      async findByUserCode(userCode: string) {\n        return this.adapter.findOne({\n          userCode\n        });\n      }\n\n      async findByUid(uid: string) {\n        return this.adapter.findOne({\n          uid\n        });\n      }\n\n      async destroy(id: string) {\n        await this.adapter.deleteById(id);\n      }\n\n      async revokeByGrantId(grantId: string) {\n        await this.adapter.deleteMany({grantId});\n      }\n\n      async consume(grantId: string) {\n        await this.adapter.update(grantId, {consumed: Math.floor(Date.now() / 1000)});\n      }\n    };\n  }\n}\n"]}

package/lib/esm/services/OidcInteractionContext.js

@@ -0,0 +1,110 @@
+import { __decorate, __metadata } from "tslib";
+import { Constant, PlatformContext, ProviderScope, Scope } from "@tsed/common";
+import { Env } from "@tsed/core";
+import { Inject, Injectable } from "@tsed/di";
+import { debug } from "../utils/debug";
+import { OidcInteractions } from "./OidcInteractions";
+import { OidcProvider } from "./OidcProvider";
+let OidcInteractionContext = class OidcInteractionContext {
+    get session() {
+        return this.raw.session;
+    }
+    get prompt() {
+        return this.raw.prompt;
+    }
+    get params() {
+        return this.raw.params;
+    }
+    get uid() {
+        return this.raw.uid;
+    }
+    get grantId() {
+        return this.raw.grantId;
+    }
+    async runInteraction(name = this.prompt.name) {
+        const handler = this.oidcInteractions.getInteractionHandler(name);
+        if (handler) {
+            await handler(this.context);
+        }
+    }
+    async interactionDetails() {
+        this.raw = await this.oidcProvider.get().interactionDetails(this.context.getReq(), this.context.getRes());
+        return this.raw;
+    }
+    async interactionFinished(result, options = { mergeWithLastSubmission: false }) {
+        return this.oidcProvider.get().interactionFinished(this.context.getReq(), this.context.getRes(), result, options);
+    }
+    async interactionResult(result, options = { mergeWithLastSubmission: false }) {
+        return this.oidcProvider.get().interactionResult(this.context.getReq(), this.context.getRes(), result, options);
+    }
+    async render(view, result) {
+        return this.context.response.render(view, result);
+    }
+    async save(ttl) {
+        return this.raw.save(ttl);
+    }
+    async findClient(clientId = this.params.client_id) {
+        return this.oidcProvider.get().Client.find(clientId);
+    }
+    async findAccount(sub, token) {
+        var _a;
+        if (!sub && this.session) {
+            sub = (_a = this.session) === null || _a === void 0 ? void 0 : _a.accountId;
+        }
+        if (!sub) {
+            return;
+        }
+        return this.oidcProvider.get().Account.findAccount(undefined, sub, token);
+    }
+    async getGrant() {
+        var _a;
+        const { Grant } = this.oidcProvider.get();
+        if (this.grantId) {
+            // we'll be modifying existing grant in existing session
+            // @ts-ignore
+            return await (this.oidcProvider.get().find || Grant.find)(this.grantId);
+        }
+        return new Grant({
+            accountId: (_a = this.session) === null || _a === void 0 ? void 0 : _a.accountId,
+            clientId: this.params.client_id
+        });
+    }
+    debug(obj) {
+        /* istanbul ignore next */
+        if (this.env === Env.PROD) {
+            return { session: undefined, dbg: { params: undefined, prompt: undefined } };
+        }
+        if (obj) {
+            return debug(obj);
+        }
+        return {
+            session: this.session ? this.debug(this.session) : undefined,
+            dbg: {
+                params: this.debug(this.params),
+                prompt: this.debug(this.prompt)
+            }
+        };
+    }
+};
+__decorate([
+    Constant("env"),
+    __metadata("design:type", String)
+], OidcInteractionContext.prototype, "env", void 0);
+__decorate([
+    Inject(),
+    __metadata("design:type", OidcProvider)
+], OidcInteractionContext.prototype, "oidcProvider", void 0);
+__decorate([
+    Inject(),
+    __metadata("design:type", OidcInteractions)
+], OidcInteractionContext.prototype, "oidcInteractions", void 0);
+__decorate([
+    Inject(),
+    __metadata("design:type", PlatformContext)
+], OidcInteractionContext.prototype, "context", void 0);
+OidcInteractionContext = __decorate([
+    Injectable(),
+    Scope(ProviderScope.REQUEST)
+], OidcInteractionContext);
+export { OidcInteractionContext };
+//# sourceMappingURL=OidcInteractionContext.js.map

package/lib/esm/services/OidcInteractionContext.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"OidcInteractionContext.js","sourceRoot":"","sources":["../../../src/services/OidcInteractionContext.ts"],"names":[],"mappings":";AAAA,OAAO,EAAC,QAAQ,EAAE,eAAe,EAAE,aAAa,EAAE,KAAK,EAAC,MAAM,cAAc,CAAC;AAC7E,OAAO,EAAC,GAAG,EAAC,MAAM,YAAY,CAAC;AAC/B,OAAO,EAAC,MAAM,EAAE,UAAU,EAAC,MAAM,UAAU,CAAC;AAI5C,OAAO,EAAC,KAAK,EAAC,MAAM,gBAAgB,CAAC;AACrC,OAAO,EAAC,gBAAgB,EAAC,MAAM,oBAAoB,CAAC;AACpD,OAAO,EAAC,YAAY,EAAC,MAAM,gBAAgB,CAAC;AAI5C,IAAa,sBAAsB,GAAnC,MAAa,sBAAsB;IAejC,IAAI,OAAO;QACT,OAAO,IAAI,CAAC,GAAG,CAAC,OAAc,CAAC;IACjC,CAAC;IAED,IAAI,MAAM;QACR,OAAO,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC;IACzB,CAAC;IAED,IAAI,MAAM;QACR,OAAO,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC;IACzB,CAAC;IAED,IAAI,GAAG;QACL,OAAO,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;IACtB,CAAC;IAED,IAAI,OAAO;QACT,OAAQ,IAAI,CAAC,GAAW,CAAC,OAAO,CAAC;IACnC,CAAC;IAED,KAAK,CAAC,cAAc,CAAC,OAAe,IAAI,CAAC,MAAM,CAAC,IAAI;QAClD,MAAM,OAAO,GAAG,IAAI,CAAC,gBAAgB,CAAC,qBAAqB,CAAC,IAAI,CAAC,CAAC;QAElE,IAAI,OAAO,EAAE;YACX,MAAM,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;SAC7B;IACH,CAAC;IAED,KAAK,CAAC,kBAAkB;QACtB,IAAI,CAAC,GAAG,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,GAAG,EAAE,CAAC,kBAAkB,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;QAE1G,OAAO,IAAI,CAAC,GAAG,CAAC;IAClB,CAAC;IAED,KAAK,CAAC,mBAAmB,CAAC,MAA0B,EAAE,UAA+C,EAAC,uBAAuB,EAAE,KAAK,EAAC;QACnI,OAAO,IAAI,CAAC,YAAY,CAAC,GAAG,EAAE,CAAC,mBAAmB,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC;IACpH,CAAC;IAED,KAAK,CAAC,iBAAiB,CAAC,MAA0B,EAAE,UAA+C,EAAC,uBAAuB,EAAE,KAAK,EAAC;QACjI,OAAO,IAAI,CAAC,YAAY,CAAC,GAAG,EAAE,CAAC,iBAAiB,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC;IAClH,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,IAAY,EAAE,MAAW;QACpC,OAAO,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IACpD,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,GAAW;QACpB,OAAO,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC5B,CAAC;IAED,KAAK,CAAC,UAAU,CAAC,WAAmB,IAAI,CAAC,MAAM,CAAC,SAAS;QACvD,OAAO,IAAI,CAAC,YAAY,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IACvD,CAAC;IAED,KAAK,CAAC,WAAW,CAAC,GAAY,EAAE,KAAW;;QACzC,IAAI,CAAC,GAAG,IAAI,IAAI,CAAC,OAAO,EAAE;YACxB,GAAG,GAAG,MAAA,IAAI,CAAC,OAAO,0CAAE,SAAgB,CAAC;SACtC;QAED,IAAI,CAAC,GAAG,EAAE;YACR,OAAO;SACR;QAED,OAAO,IAAI,CAAC,YAAY,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,WAAW,CAAC,SAAgB,EAAE,GAAI,EAAE,KAAK,CAAC,CAAC;IACpF,CAAC;IAED,KAAK,CAAC,QAAQ;;QACZ,MAAM,EAAC,KAAK,EAAC,GAAG,IAAI,CAAC,YAAY,CAAC,GAAG,EAAS,CAAC;QAE/C,IAAI,IAAI,CAAC,OAAO,EAAE;YAChB,wDAAwD;YACxD,aAAa;YACb,OAAO,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,GAAG,EAAE,CAAC,IAAI,IAAI,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;SACzE;QAED,OAAO,IAAI,KAAK,CAAC;YACf,SAAS,EAAE,MAAA,IAAI,CAAC,OAAO,0CAAE,SAAS;YAClC,QAAQ,EAAE,IAAI,CAAC,MAAM,CAAC,SAAS;SAChC,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,GAAS;QACb,0BAA0B;QAC1B,IAAI,IAAI,CAAC,GAAG,KAAK,GAAG,CAAC,IAAI,EAAE;YACzB,OAAO,EAAC,OAAO,EAAE,SAAS,EAAE,GAAG,EAAE,EAAC,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,SAAS,EAAC,EAAC,CAAC;SAC1E;QAED,IAAI,GAAG,EAAE;YACP,OAAO,KAAK,CAAC,GAAG,CAAC,CAAC;SACnB;QAED,OAAO;YACL,OAAO,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,SAAS;YAC5D,GAAG,EAAE;gBACH,MAAM,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC;gBAC/B,MAAM,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC;aAChC;SACF,CAAC;IACJ,CAAC;CACF,CAAA;AAhHC;IADC,QAAQ,CAAC,KAAK,CAAC;;mDACP;AAGT;IADC,MAAM,EAAE;8BACe,YAAY;4DAAC;AAGrC;IADC,MAAM,EAAE;8BACmB,gBAAgB;gEAAC;AAG7C;IADC,MAAM,EAAE;8BACU,eAAe;uDAAC;AAXxB,sBAAsB;IAFlC,UAAU,EAAE;IACZ,KAAK,CAAC,aAAa,CAAC,OAAO,CAAC;GAChB,sBAAsB,CAkHlC;SAlHY,sBAAsB","sourcesContent":["import {Constant, PlatformContext, ProviderScope, Scope} from \"@tsed/common\";\nimport {Env} from \"@tsed/core\";\nimport {Inject, Injectable} from \"@tsed/di\";\nimport {Account, InteractionResults, PromptDetail, Provider} from \"oidc-provider\";\nimport {OidcSession} from \"../decorators\";\nimport {OidcClient, OidcInteraction} from \"../domain\";\nimport {debug} from \"../utils/debug\";\nimport {OidcInteractions} from \"./OidcInteractions\";\nimport {OidcProvider} from \"./OidcProvider\";\n\n@Injectable()\n@Scope(ProviderScope.REQUEST)\nexport class OidcInteractionContext {\n  @Constant(\"env\")\n  env: Env;\n\n  @Inject()\n  protected oidcProvider: OidcProvider;\n\n  @Inject()\n  protected oidcInteractions: OidcInteractions;\n\n  @Inject()\n  protected context: PlatformContext;\n\n  protected raw: OidcInteraction;\n\n  get session(): OidcSession | undefined {\n    return this.raw.session as any;\n  }\n\n  get prompt(): PromptDetail {\n    return this.raw.prompt;\n  }\n\n  get params(): Record<string, any> {\n    return this.raw.params;\n  }\n\n  get uid(): string {\n    return this.raw.uid;\n  }\n\n  get grantId(): string {\n    return (this.raw as any).grantId;\n  }\n\n  async runInteraction(name: string = this.prompt.name) {\n    const handler = this.oidcInteractions.getInteractionHandler(name);\n\n    if (handler) {\n      await handler(this.context);\n    }\n  }\n\n  async interactionDetails(): Promise<OidcInteraction> {\n    this.raw = await this.oidcProvider.get().interactionDetails(this.context.getReq(), this.context.getRes());\n\n    return this.raw;\n  }\n\n  async interactionFinished(result: InteractionResults, options: {mergeWithLastSubmission?: boolean} = {mergeWithLastSubmission: false}) {\n    return this.oidcProvider.get().interactionFinished(this.context.getReq(), this.context.getRes(), result, options);\n  }\n\n  async interactionResult(result: InteractionResults, options: {mergeWithLastSubmission?: boolean} = {mergeWithLastSubmission: false}) {\n    return this.oidcProvider.get().interactionResult(this.context.getReq(), this.context.getRes(), result, options);\n  }\n\n  async render(view: string, result: any): Promise<string> {\n    return this.context.response.render(view, result);\n  }\n\n  async save(ttl: number): Promise<string> {\n    return this.raw.save(ttl);\n  }\n\n  async findClient(clientId: string = this.params.client_id): Promise<OidcClient | undefined> {\n    return this.oidcProvider.get().Client.find(clientId);\n  }\n\n  async findAccount(sub?: string, token?: any): Promise<Account | undefined> {\n    if (!sub && this.session) {\n      sub = this.session?.accountId as any;\n    }\n\n    if (!sub) {\n      return;\n    }\n\n    return this.oidcProvider.get().Account.findAccount(undefined as any, sub!, token);\n  }\n\n  async getGrant(): Promise<InstanceType<Provider[\"Grant\"]>> {\n    const {Grant} = this.oidcProvider.get() as any;\n\n    if (this.grantId) {\n      // we'll be modifying existing grant in existing session\n      // @ts-ignore\n      return await (this.oidcProvider.get().find || Grant.find)(this.grantId);\n    }\n\n    return new Grant({\n      accountId: this.session?.accountId,\n      clientId: this.params.client_id\n    });\n  }\n\n  debug(obj?: any): any {\n    /* istanbul ignore next */\n    if (this.env === Env.PROD) {\n      return {session: undefined, dbg: {params: undefined, prompt: undefined}};\n    }\n\n    if (obj) {\n      return debug(obj);\n    }\n\n    return {\n      session: this.session ? this.debug(this.session) : undefined,\n      dbg: {\n        params: this.debug(this.params),\n        prompt: this.debug(this.prompt)\n      }\n    };\n  }\n}\n"]}

package/lib/esm/services/OidcInteractions.js

@@ -0,0 +1,61 @@
+import { __decorate, __metadata } from "tslib";
+import { Constant, EndpointMetadata, PlatformHandler } from "@tsed/common";
+import { Env } from "@tsed/core";
+import { Inject, Injectable, InjectorService } from "@tsed/di";
+import { INTERACTION, INTERACTION_OPTIONS, INTERACTIONS } from "../constants";
+let OidcInteractions = class OidcInteractions {
+    constructor() {
+        this.interactions = new Map();
+    }
+    $onInit() {
+        const platformHandler = this.injector.get(PlatformHandler);
+        this.getInteractions().forEach((provider) => {
+            var _a;
+            const { name } = provider.store.get(INTERACTION_OPTIONS);
+            this.interactions.set(name, provider);
+            if ((_a = this.injector.get(provider.token)) === null || _a === void 0 ? void 0 : _a.$prompt) {
+                provider.store.set("$prompt", platformHandler.createCustomHandler(provider, "$prompt"));
+            }
+        });
+    }
+    getInteractions() {
+        const interactionsProvider = this.injector.getProviders().find((provider) => provider.subType === INTERACTIONS);
+        /* istanbul ignore next */
+        if (!interactionsProvider) {
+            return [];
+        }
+        return interactionsProvider.children
+            .map((token) => this.injector.getProvider(token))
+            .filter((provider) => (provider === null || provider === void 0 ? void 0 : provider.subType) === INTERACTION);
+    }
+    getInteractionProvider(name) {
+        return this.interactions.get(name);
+    }
+    getInteractionHandler(name) {
+        const interaction = this.getInteractionProvider(name);
+        if (interaction) {
+            return (ctx) => {
+                // Add current endpoint metadata to ctx
+                ctx.endpoint = EndpointMetadata.get(interaction.useClass, "$prompt");
+                return interaction.store.get("$prompt")(ctx);
+            };
+        }
+    }
+};
+__decorate([
+    Inject(),
+    __metadata("design:type", InjectorService)
+], OidcInteractions.prototype, "injector", void 0);
+__decorate([
+    Constant("env"),
+    __metadata("design:type", String)
+], OidcInteractions.prototype, "env", void 0);
+__decorate([
+    Constant("oidc"),
+    __metadata("design:type", Object)
+], OidcInteractions.prototype, "oidcSettings", void 0);
+OidcInteractions = __decorate([
+    Injectable()
+], OidcInteractions);
+export { OidcInteractions };
+//# sourceMappingURL=OidcInteractions.js.map

package/lib/esm/services/OidcInteractions.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"OidcInteractions.js","sourceRoot":"","sources":["../../../src/services/OidcInteractions.ts"],"names":[],"mappings":";AAAA,OAAO,EAAC,QAAQ,EAAE,gBAAgB,EAAmB,eAAe,EAA0B,MAAM,cAAc,CAAC;AACnH,OAAO,EAAC,GAAG,EAAC,MAAM,YAAY,CAAC;AAC/B,OAAO,EAAC,MAAM,EAAE,UAAU,EAAE,eAAe,EAAC,MAAM,UAAU,CAAC;AAC7D,OAAO,EAAC,WAAW,EAAE,mBAAmB,EAAE,YAAY,EAAC,MAAM,cAAc,CAAC;AAI5E,IAAa,gBAAgB,GAA7B,MAAa,gBAAgB;IAA7B;QAUY,iBAAY,GAA0B,IAAI,GAAG,EAAE,CAAC;IA4C5D,CAAC;IA1CC,OAAO;QACL,MAAM,eAAe,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAkB,eAAe,CAAE,CAAC;QAE7E,IAAI,CAAC,eAAe,EAAE,CAAC,OAAO,CAAC,CAAC,QAAkB,EAAE,EAAE;;YACpD,MAAM,EAAC,IAAI,EAAC,GAAG,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAyB,mBAAmB,CAAC,CAAC;YAC/E,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;YAEtC,IAAI,MAAA,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,0CAAE,OAAO,EAAE;gBAC9C,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,SAAS,EAAE,eAAe,CAAC,mBAAmB,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC,CAAC;aACzF;QACH,CAAC,CAAC,CAAC;IACL,CAAC;IAED,eAAe;QACb,MAAM,oBAAoB,GAAG,IAAI,CAAC,QAAQ,CAAC,YAAY,EAAE,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,OAAO,KAAK,YAAY,CAAC,CAAC;QAEhH,0BAA0B;QAC1B,IAAI,CAAC,oBAAoB,EAAE;YACzB,OAAO,EAAE,CAAC;SACX;QAED,OAAO,oBAAoB,CAAC,QAAQ;aACjC,GAAG,CAAC,CAAC,KAAoB,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,KAAK,CAAE,CAAC;aAChE,MAAM,CAAC,CAAC,QAAkB,EAAE,EAAE,CAAC,CAAA,QAAQ,aAAR,QAAQ,uBAAR,QAAQ,CAAE,OAAO,MAAK,WAAW,CAAC,CAAC;IACvE,CAAC;IAED,sBAAsB,CAAC,IAAY;QACjC,OAAO,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IACrC,CAAC;IAED,qBAAqB,CAAC,IAAY;QAChC,MAAM,WAAW,GAAG,IAAI,CAAC,sBAAsB,CAAC,IAAI,CAAC,CAAC;QAEtD,IAAI,WAAW,EAAE;YACf,OAAO,CAAC,GAAoB,EAAE,EAAE;gBAC9B,uCAAuC;gBACvC,GAAG,CAAC,QAAQ,GAAG,gBAAgB,CAAC,GAAG,CAAC,WAAW,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC;gBAErE,OAAO,WAAW,CAAC,KAAK,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,GAAG,CAAC,CAAC;YAC/C,CAAC,CAAC;SACH;IACH,CAAC;CACF,CAAA;AApDC;IADC,MAAM,EAAE;8BACC,eAAe;kDAAC;AAG1B;IADC,QAAQ,CAAC,KAAK,CAAC;;6CACP;AAGT;IADC,QAAQ,CAAC,MAAM,CAAC;;sDACU;AARhB,gBAAgB;IAD5B,UAAU,EAAE;GACA,gBAAgB,CAsD5B;SAtDY,gBAAgB","sourcesContent":["import {Constant, EndpointMetadata, PlatformContext, PlatformHandler, Provider, TokenProvider} from \"@tsed/common\";\nimport {Env} from \"@tsed/core\";\nimport {Inject, Injectable, InjectorService} from \"@tsed/di\";\nimport {INTERACTION, INTERACTION_OPTIONS, INTERACTIONS} from \"../constants\";\nimport {OidcInteractionOptions, OidcSettings} from \"../domain\";\n\n@Injectable()\nexport class OidcInteractions {\n  @Inject()\n  injector: InjectorService;\n\n  @Constant(\"env\")\n  env: Env;\n\n  @Constant(\"oidc\")\n  oidcSettings: OidcSettings;\n\n  protected interactions: Map<string, Provider> = new Map();\n\n  $onInit(): void {\n    const platformHandler = this.injector.get<PlatformHandler>(PlatformHandler)!;\n\n    this.getInteractions().forEach((provider: Provider) => {\n      const {name} = provider.store.get<OidcInteractionOptions>(INTERACTION_OPTIONS);\n      this.interactions.set(name, provider);\n\n      if (this.injector.get(provider.token)?.$prompt) {\n        provider.store.set(\"$prompt\", platformHandler.createCustomHandler(provider, \"$prompt\"));\n      }\n    });\n  }\n\n  getInteractions(): Provider[] {\n    const interactionsProvider = this.injector.getProviders().find((provider) => provider.subType === INTERACTIONS);\n\n    /* istanbul ignore next */\n    if (!interactionsProvider) {\n      return [];\n    }\n\n    return interactionsProvider.children\n      .map((token: TokenProvider) => this.injector.getProvider(token)!)\n      .filter((provider: Provider) => provider?.subType === INTERACTION);\n  }\n\n  getInteractionProvider(name: string): Provider | undefined {\n    return this.interactions.get(name);\n  }\n\n  getInteractionHandler(name: string) {\n    const interaction = this.getInteractionProvider(name);\n\n    if (interaction) {\n      return (ctx: PlatformContext) => {\n        // Add current endpoint metadata to ctx\n        ctx.endpoint = EndpointMetadata.get(interaction.useClass, \"$prompt\");\n\n        return interaction.store.get(\"$prompt\")(ctx);\n      };\n    }\n  }\n}\n"]}

package/lib/esm/services/OidcJwks.js

@@ -0,0 +1,28 @@
+import { __decorate, __metadata } from "tslib";
+import { Constant, Injectable } from "@tsed/di";
+import { join } from "path";
+import { getJwks } from "@tsed/jwks";
+let OidcJwks = class OidcJwks {
+    async $onInit() {
+        return this.getJwks();
+    }
+    getJwks() {
+        return getJwks({
+            path: this.jwksPath,
+            certificates: this.certificates
+        });
+    }
+};
+__decorate([
+    Constant("oidc.jwksPath", join(process.cwd(), "keys", "jwks.json")),
+    __metadata("design:type", String)
+], OidcJwks.prototype, "jwksPath", void 0);
+__decorate([
+    Constant("oidc.certificates"),
+    __metadata("design:type", Array)
+], OidcJwks.prototype, "certificates", void 0);
+OidcJwks = __decorate([
+    Injectable()
+], OidcJwks);
+export { OidcJwks };
+//# sourceMappingURL=OidcJwks.js.map

package/lib/esm/services/OidcJwks.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"OidcJwks.js","sourceRoot":"","sources":["../../../src/services/OidcJwks.ts"],"names":[],"mappings":";AAAA,OAAO,EAAC,QAAQ,EAAE,UAAU,EAAC,MAAM,UAAU,CAAC;AAC9C,OAAO,EAAC,IAAI,EAAC,MAAM,MAAM,CAAC;AAC1B,OAAO,EAAC,OAAO,EAAoB,MAAM,YAAY,CAAC;AAGtD,IAAa,QAAQ,GAArB,MAAa,QAAQ;IASnB,KAAK,CAAC,OAAO;QACX,OAAO,IAAI,CAAC,OAAO,EAAE,CAAC;IACxB,CAAC;IAED,OAAO;QACL,OAAO,OAAO,CAAC;YACb,IAAI,EAAE,IAAI,CAAC,QAAQ;YACnB,YAAY,EAAE,IAAI,CAAC,YAAY;SAChC,CAAC,CAAC;IACL,CAAC;CACF,CAAA;AAjBC;IADC,QAAQ,CAAC,eAAe,EAAE,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,MAAM,EAAE,WAAW,CAAC,CAAC;;0CACnD;AAGjB;IADC,QAAQ,CAAC,mBAAmB,CAAC;;8CACK;AALxB,QAAQ;IADpB,UAAU,EAAE;GACA,QAAQ,CAmBpB;SAnBY,QAAQ","sourcesContent":["import {Constant, Injectable} from \"@tsed/di\";\nimport {join} from \"path\";\nimport {getJwks, JwksKeyParameters} from \"@tsed/jwks\";\n\n@Injectable()\nexport class OidcJwks {\n  @Constant(\"oidc.jwksPath\", join(process.cwd(), \"keys\", \"jwks.json\"))\n  jwksPath: string;\n\n  @Constant(\"oidc.certificates\")\n  certificates?: JwksKeyParameters[];\n\n  keys: string;\n\n  async $onInit() {\n    return this.getJwks();\n  }\n\n  getJwks() {\n    return getJwks({\n      path: this.jwksPath,\n      certificates: this.certificates\n    });\n  }\n}\n"]}

package/lib/esm/services/OidcProvider.js

@@ -0,0 +1,173 @@
+import { __decorate, __metadata } from "tslib";
+import { Env, setValue } from "@tsed/core";
+import { Constant, Inject, Injectable, InjectorService } from "@tsed/di";
+import { Provider as OIDCProvider, interactionPolicy } from "oidc-provider";
+import { INTERACTIONS } from "../constants";
+import { OidcAdapters } from "./OidcAdapters";
+import { OidcInteractions } from "./OidcInteractions";
+import { OidcJwks } from "./OidcJwks";
+import { PlatformApplication } from "@tsed/common";
+let OidcProvider = class OidcProvider {
+    hasConfiguration() {
+        return !!this.oidc;
+    }
+    async getConfiguration() {
+        const [jwks, adapter] = await Promise.all([this.oidcJwks.getJwks(), this.adapters.createAdapterClass()]);
+        const { issuer, jwksPath, secureKey, proxy, Accounts, ...options } = this.oidc;
+        const configuration = {
+            interactions: {
+                /* istanbul ignore next */
+                url: (ctx, interaction) => `interaction/${interaction.uid}`
+            },
+            ...options,
+            adapter,
+            jwks
+        };
+        if (Accounts) {
+            configuration.findAccount = (ctx, id, token) => this.injector.get(Accounts).findAccount(id, token, ctx.req.$ctx);
+        }
+        if (this.env === Env.PROD) {
+            setValue(configuration, "cookies.short.secure", true);
+            setValue(configuration, "cookies.long.secure", true);
+        }
+        const policy = this.getPolicy();
+        if (policy) {
+            setValue(configuration, "interactions.policy", policy);
+        }
+        const url = this.getInteractionsUrl();
+        if (url) {
+            setValue(configuration, "interactions.url", url);
+        }
+        return configuration;
+    }
+    getIssuer() {
+        if (this.issuer) {
+            return this.issuer;
+        }
+        // istanbul ignore next
+        if (this.httpsPort) {
+            return `https://localhost:${this.httpsPort}`;
+        }
+        return `http://localhost:${this.httpPort}`;
+    }
+    get() {
+        return this.raw;
+    }
+    /**
+     * Create a new instance of OidcProvider
+     */
+    async create() {
+        const { proxy, secureKey } = this.oidc;
+        const configuration = await this.getConfiguration();
+        const oidcProvider = new OIDCProvider(this.getIssuer(), configuration);
+        if (proxy || this.env === Env.PROD) {
+            // istanbul ignore next
+            switch (this.platformName) {
+                default:
+                case "express":
+                    oidcProvider.proxy = true;
+                    break;
+                case "koa":
+                    this.app.rawApp.proxy = true;
+                    break;
+            }
+        }
+        if (secureKey) {
+            oidcProvider.app.keys = secureKey;
+        }
+        this.raw = oidcProvider;
+        if (this.env !== Env.PROD) {
+            this.allowHttpLocalhost();
+        }
+        await this.injector.emit("$onCreateOIDC", this.raw);
+        return this.raw;
+    }
+    getInteractionsUrl() {
+        const provider = this.injector.getProviders().find((provider) => provider.subType === INTERACTIONS);
+        if (provider) {
+            return (ctx, interaction) => {
+                // eslint-disable-line no-unused-vars
+                return provider.path.replace(/:uid/, interaction.uid);
+            };
+        }
+    }
+    allowHttpLocalhost() {
+        const { invalidate: orig } = this.raw.Client.Schema.prototype;
+        this.raw.Client.Schema.prototype.invalidate = function invalidate(message, code) {
+            if (code === "implicit-force-https" || code === "implicit-forbid-localhost") {
+                return;
+            }
+            /* istanbul ignore next */
+            return orig.call(this, message);
+        };
+    }
+    getPolicy() {
+        const policy = interactionPolicy.base();
+        const interactions = this.oidcInteractions.getInteractions();
+        if (interactions.length) {
+            interactions.forEach((provider) => {
+                const { name, ...options } = provider.store.get("interactionOptions");
+                if (!policy.get(name)) {
+                    policy.add(new interactionPolicy.Prompt({
+                        name,
+                        ...options
+                    }));
+                }
+                const instance = this.injector.get(provider.token);
+                if (instance.$onCreate) {
+                    instance.$onCreate(policy.get(name));
+                }
+            });
+        }
+        return this.injector.alter("$alterOidcPolicy", policy);
+    }
+};
+__decorate([
+    Constant("env"),
+    __metadata("design:type", String)
+], OidcProvider.prototype, "env", void 0);
+__decorate([
+    Constant("httpPort"),
+    __metadata("design:type", Object)
+], OidcProvider.prototype, "httpPort", void 0);
+__decorate([
+    Constant("httpsPort"),
+    __metadata("design:type", Object)
+], OidcProvider.prototype, "httpsPort", void 0);
+__decorate([
+    Constant("oidc.issuer", ""),
+    __metadata("design:type", String)
+], OidcProvider.prototype, "issuer", void 0);
+__decorate([
+    Constant("oidc"),
+    __metadata("design:type", Object)
+], OidcProvider.prototype, "oidc", void 0);
+__decorate([
+    Constant("PLATFORM_NAME"),
+    __metadata("design:type", String)
+], OidcProvider.prototype, "platformName", void 0);
+__decorate([
+    Inject(),
+    __metadata("design:type", OidcJwks)
+], OidcProvider.prototype, "oidcJwks", void 0);
+__decorate([
+    Inject(),
+    __metadata("design:type", OidcInteractions)
+], OidcProvider.prototype, "oidcInteractions", void 0);
+__decorate([
+    Inject(),
+    __metadata("design:type", OidcAdapters)
+], OidcProvider.prototype, "adapters", void 0);
+__decorate([
+    Inject(),
+    __metadata("design:type", InjectorService)
+], OidcProvider.prototype, "injector", void 0);
+__decorate([
+    Inject(),
+    __metadata("design:type", PlatformApplication)
+], OidcProvider.prototype, "app", void 0);
+OidcProvider = __decorate([
+    Injectable()
+], OidcProvider);
+export { OidcProvider };
+//# sourceMappingURL=OidcProvider.js.map

package/lib/esm/services/OidcProvider.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"OidcProvider.js","sourceRoot":"","sources":["../../../src/services/OidcProvider.ts"],"names":[],"mappings":";AAAA,OAAO,EAAC,GAAG,EAAE,QAAQ,EAAC,MAAM,YAAY,CAAC;AACzC,OAAO,EAAC,QAAQ,EAAE,MAAM,EAAE,UAAU,EAAE,eAAe,EAAC,MAAM,UAAU,CAAC;AACvE,OAAO,EAAC,QAAQ,IAAI,YAAY,EAAiB,iBAAiB,EAAC,MAAM,eAAe,CAAC;AACzF,OAAO,EAAC,YAAY,EAAC,MAAM,cAAc,CAAC;AAE1C,OAAO,EAAC,YAAY,EAAC,MAAM,gBAAgB,CAAC;AAC5C,OAAO,EAAC,gBAAgB,EAAC,MAAM,oBAAoB,CAAC;AACpD,OAAO,EAAC,QAAQ,EAAC,MAAM,YAAY,CAAC;AACpC,OAAO,EAAC,mBAAmB,EAAC,MAAM,cAAc,CAAC;AAGjD,IAAa,YAAY,GAAzB,MAAa,YAAY;IAoCvB,gBAAgB;QACd,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC;IACrB,CAAC;IAED,KAAK,CAAC,gBAAgB;QACpB,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,EAAE,IAAI,CAAC,QAAQ,CAAC,kBAAkB,EAAE,CAAC,CAAC,CAAC;QACzG,MAAM,EAAC,MAAM,EAAE,QAAQ,EAAE,SAAS,EAAE,KAAK,EAAE,QAAQ,EAAE,GAAG,OAAO,EAAC,GAAG,IAAI,CAAC,IAAI,CAAC;QAE7E,MAAM,aAAa,GAAkB;YACnC,YAAY,EAAE;gBACZ,0BAA0B;gBAC1B,GAAG,EAAE,CAAC,GAAG,EAAE,WAAW,EAAE,EAAE,CAAC,eAAe,WAAW,CAAC,GAAG,EAAE;aAC5D;YACD,GAAG,OAAO;YACV,OAAO;YACP,IAAI;SACL,CAAC;QAEF,IAAI,QAAQ,EAAE;YACZ,aAAa,CAAC,WAAW,GAAG,CAAC,GAAG,EAAE,EAAE,EAAE,KAAK,EAAE,EAAE,CAC7C,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAsB,QAAQ,CAAE,CAAC,WAAW,CAAC,EAAE,EAAE,KAAK,EAAG,GAAG,CAAC,GAAW,CAAC,IAAI,CAAC,CAAC;SACnG;QAED,IAAI,IAAI,CAAC,GAAG,KAAK,GAAG,CAAC,IAAI,EAAE;YACzB,QAAQ,CAAC,aAAa,EAAE,sBAAsB,EAAE,IAAI,CAAC,CAAC;YACtD,QAAQ,CAAC,aAAa,EAAE,qBAAqB,EAAE,IAAI,CAAC,CAAC;SACtD;QAED,MAAM,MAAM,GAAG,IAAI,CAAC,SAAS,EAAE,CAAC;QAChC,IAAI,MAAM,EAAE;YACV,QAAQ,CAAC,aAAa,EAAE,qBAAqB,EAAE,MAAM,CAAC,CAAC;SACxD;QAED,MAAM,GAAG,GAAG,IAAI,CAAC,kBAAkB,EAAE,CAAC;QACtC,IAAI,GAAG,EAAE;YACP,QAAQ,CAAC,aAAa,EAAE,kBAAkB,EAAE,GAAG,CAAC,CAAC;SAClD;QAED,OAAO,aAAa,CAAC;IACvB,CAAC;IAED,SAAS;QACP,IAAI,IAAI,CAAC,MAAM,EAAE;YACf,OAAO,IAAI,CAAC,MAAM,CAAC;SACpB;QAED,uBAAuB;QACvB,IAAI,IAAI,CAAC,SAAS,EAAE;YAClB,OAAO,qBAAqB,IAAI,CAAC,SAAS,EAAE,CAAC;SAC9C;QAED,OAAO,oBAAoB,IAAI,CAAC,QAAQ,EAAE,CAAC;IAC7C,CAAC;IAED,GAAG;QACD,OAAO,IAAI,CAAC,GAAG,CAAC;IAClB,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,MAAM;QACV,MAAM,EAAC,KAAK,EAAE,SAAS,EAAC,GAAG,IAAI,CAAC,IAAI,CAAC;QACrC,MAAM,aAAa,GAAG,MAAM,IAAI,CAAC,gBAAgB,EAAE,CAAC;QACpD,MAAM,YAAY,GAAG,IAAI,YAAY,CAAC,IAAI,CAAC,SAAS,EAAE,EAAE,aAAa,CAAC,CAAC;QAEvE,IAAI,KAAK,IAAI,IAAI,CAAC,GAAG,KAAK,GAAG,CAAC,IAAI,EAAE;YAClC,uBAAuB;YACvB,QAAQ,IAAI,CAAC,YAAY,EAAE;gBACzB,QAAQ;gBACR,KAAK,SAAS;oBACZ,YAAY,CAAC,KAAK,GAAG,IAAI,CAAC;oBAC1B,MAAM;gBACR,KAAK,KAAK;oBACP,IAAI,CAAC,GAAG,CAAC,MAAc,CAAC,KAAK,GAAG,IAAI,CAAC;oBACtC,MAAM;aACT;SACF;QAED,IAAI,SAAS,EAAE;YACb,YAAY,CAAC,GAAG,CAAC,IAAI,GAAG,SAAS,CAAC;SACnC;QAED,IAAI,CAAC,GAAG,GAAG,YAAY,CAAC;QAExB,IAAI,IAAI,CAAC,GAAG,KAAK,GAAG,CAAC,IAAI,EAAE;YACzB,IAAI,CAAC,kBAAkB,EAAE,CAAC;SAC3B;QAED,MAAM,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,eAAe,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC;QAEpD,OAAO,IAAI,CAAC,GAAG,CAAC;IAClB,CAAC;IAEO,kBAAkB;QACxB,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,YAAY,EAAE,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,OAAO,KAAK,YAAY,CAAC,CAAC;QAEpG,IAAI,QAAQ,EAAE;YACZ,OAAO,CAAC,GAAQ,EAAE,WAAgB,EAAE,EAAE;gBACpC,qCAAqC;gBACrC,OAAO,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,WAAW,CAAC,GAAG,CAAC,CAAC;YACxD,CAAC,CAAC;SACH;IACH,CAAC;IAEO,kBAAkB;QACxB,MAAM,EAAC,UAAU,EAAE,IAAI,EAAC,GAAI,IAAI,CAAC,GAAG,CAAC,MAAc,CAAC,MAAM,CAAC,SAAS,CAAC;QAEpE,IAAI,CAAC,GAAG,CAAC,MAAc,CAAC,MAAM,CAAC,SAAS,CAAC,UAAU,GAAG,SAAS,UAAU,CAAC,OAAe,EAAE,IAAY;YACtG,IAAI,IAAI,KAAK,sBAAsB,IAAI,IAAI,KAAK,2BAA2B,EAAE;gBAC3E,OAAO;aACR;YAED,0BAA0B;YAC1B,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QAClC,CAAC,CAAC;IACJ,CAAC;IAEO,SAAS;QACf,MAAM,MAAM,GAAG,iBAAiB,CAAC,IAAI,EAAE,CAAC;QACxC,MAAM,YAAY,GAAG,IAAI,CAAC,gBAAgB,CAAC,eAAe,EAAE,CAAC;QAE7D,IAAI,YAAY,CAAC,MAAM,EAAE;YACvB,YAAY,CAAC,OAAO,CAAC,CAAC,QAAQ,EAAE,EAAE;gBAChC,MAAM,EAAC,IAAI,EAAE,GAAG,OAAO,EAAC,GAAG,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,oBAAoB,CAAC,CAAC;gBAEpE,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE;oBACrB,MAAM,CAAC,GAAG,CACR,IAAI,iBAAiB,CAAC,MAAM,CAAC;wBAC3B,IAAI;wBACJ,GAAG,OAAO;qBACX,CAAC,CACH,CAAC;iBACH;gBAED,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;gBAEnD,IAAI,QAAQ,CAAC,SAAS,EAAE;oBACtB,QAAQ,CAAC,SAAS,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC;iBACtC;YACH,CAAC,CAAC,CAAC;SACJ;QAED,OAAO,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,kBAAkB,EAAE,MAAM,CAAC,CAAC;IACzD,CAAC;CACF,CAAA;AAjLC;IADC,QAAQ,CAAC,KAAK,CAAC;;yCACG;AAGnB;IADC,QAAQ,CAAC,UAAU,CAAC;;8CACe;AAGpC;IADC,QAAQ,CAAC,WAAW,CAAC;;+CACe;AAGrC;IADC,QAAQ,CAAC,aAAa,EAAE,EAAE,CAAC;;4CACH;AAGzB;IADC,QAAQ,CAAC,MAAM,CAAC;;0CACY;AAG7B;IADC,QAAQ,CAAC,eAAe,CAAC;;kDACK;AAG/B;IADC,MAAM,EAAE;8BACW,QAAQ;8CAAC;AAG7B;IADC,MAAM,EAAE;8BACmB,gBAAgB;sDAAC;AAG7C;IADC,MAAM,EAAE;8BACW,YAAY;8CAAC;AAGjC;IADC,MAAM,EAAE;8BACW,eAAe;8CAAC;AAGpC;IADC,MAAM,EAAE;8BACM,mBAAmB;yCAAC;AAlCxB,YAAY;IADxB,UAAU,EAAE;GACA,YAAY,CAqLxB;SArLY,YAAY","sourcesContent":["import {Env, setValue} from \"@tsed/core\";\nimport {Constant, Inject, Injectable, InjectorService} from \"@tsed/di\";\nimport {Provider as OIDCProvider, Configuration, interactionPolicy} from \"oidc-provider\";\nimport {INTERACTIONS} from \"../constants\";\nimport {OidcAccountsMethods, OidcSettings} from \"../domain\";\nimport {OidcAdapters} from \"./OidcAdapters\";\nimport {OidcInteractions} from \"./OidcInteractions\";\nimport {OidcJwks} from \"./OidcJwks\";\nimport {PlatformApplication} from \"@tsed/common\";\n\n@Injectable()\nexport class OidcProvider {\n  raw: OIDCProvider;\n\n  @Constant(\"env\")\n  protected env: Env;\n\n  @Constant(\"httpPort\")\n  protected httpPort: number | string;\n\n  @Constant(\"httpsPort\")\n  protected httpsPort: number | string;\n\n  @Constant(\"oidc.issuer\", \"\")\n  protected issuer: string;\n\n  @Constant(\"oidc\")\n  protected oidc: OidcSettings;\n\n  @Constant(\"PLATFORM_NAME\")\n  protected platformName: string;\n\n  @Inject()\n  protected oidcJwks: OidcJwks;\n\n  @Inject()\n  protected oidcInteractions: OidcInteractions;\n\n  @Inject()\n  protected adapters: OidcAdapters;\n\n  @Inject()\n  protected injector: InjectorService;\n\n  @Inject()\n  protected app: PlatformApplication;\n\n  hasConfiguration() {\n    return !!this.oidc;\n  }\n\n  async getConfiguration(): Promise<Configuration> {\n    const [jwks, adapter] = await Promise.all([this.oidcJwks.getJwks(), this.adapters.createAdapterClass()]);\n    const {issuer, jwksPath, secureKey, proxy, Accounts, ...options} = this.oidc;\n\n    const configuration: Configuration = {\n      interactions: {\n        /* istanbul ignore next */\n        url: (ctx, interaction) => `interaction/${interaction.uid}`\n      },\n      ...options,\n      adapter,\n      jwks\n    };\n\n    if (Accounts) {\n      configuration.findAccount = (ctx, id, token) =>\n        this.injector.get<OidcAccountsMethods>(Accounts)!.findAccount(id, token, (ctx.req as any).$ctx);\n    }\n\n    if (this.env === Env.PROD) {\n      setValue(configuration, \"cookies.short.secure\", true);\n      setValue(configuration, \"cookies.long.secure\", true);\n    }\n\n    const policy = this.getPolicy();\n    if (policy) {\n      setValue(configuration, \"interactions.policy\", policy);\n    }\n\n    const url = this.getInteractionsUrl();\n    if (url) {\n      setValue(configuration, \"interactions.url\", url);\n    }\n\n    return configuration;\n  }\n\n  getIssuer() {\n    if (this.issuer) {\n      return this.issuer;\n    }\n\n    // istanbul ignore next\n    if (this.httpsPort) {\n      return `https://localhost:${this.httpsPort}`;\n    }\n\n    return `http://localhost:${this.httpPort}`;\n  }\n\n  get(): OIDCProvider {\n    return this.raw;\n  }\n\n  /**\n   * Create a new instance of OidcProvider\n   */\n  async create(): Promise<void | OIDCProvider> {\n    const {proxy, secureKey} = this.oidc;\n    const configuration = await this.getConfiguration();\n    const oidcProvider = new OIDCProvider(this.getIssuer(), configuration);\n\n    if (proxy || this.env === Env.PROD) {\n      // istanbul ignore next\n      switch (this.platformName) {\n        default:\n        case \"express\":\n          oidcProvider.proxy = true;\n          break;\n        case \"koa\":\n          (this.app.rawApp as any).proxy = true;\n          break;\n      }\n    }\n\n    if (secureKey) {\n      oidcProvider.app.keys = secureKey;\n    }\n\n    this.raw = oidcProvider;\n\n    if (this.env !== Env.PROD) {\n      this.allowHttpLocalhost();\n    }\n\n    await this.injector.emit(\"$onCreateOIDC\", this.raw);\n\n    return this.raw;\n  }\n\n  private getInteractionsUrl() {\n    const provider = this.injector.getProviders().find((provider) => provider.subType === INTERACTIONS);\n\n    if (provider) {\n      return (ctx: any, interaction: any) => {\n        // eslint-disable-line no-unused-vars\n        return provider.path.replace(/:uid/, interaction.uid);\n      };\n    }\n  }\n\n  private allowHttpLocalhost() {\n    const {invalidate: orig} = (this.raw.Client as any).Schema.prototype;\n\n    (this.raw.Client as any).Schema.prototype.invalidate = function invalidate(message: string, code: string) {\n      if (code === \"implicit-force-https\" || code === \"implicit-forbid-localhost\") {\n        return;\n      }\n\n      /* istanbul ignore next */\n      return orig.call(this, message);\n    };\n  }\n\n  private getPolicy() {\n    const policy = interactionPolicy.base();\n    const interactions = this.oidcInteractions.getInteractions();\n\n    if (interactions.length) {\n      interactions.forEach((provider) => {\n        const {name, ...options} = provider.store.get(\"interactionOptions\");\n\n        if (!policy.get(name)) {\n          policy.add(\n            new interactionPolicy.Prompt({\n              name,\n              ...options\n            })\n          );\n        }\n\n        const instance = this.injector.get(provider.token);\n\n        if (instance.$onCreate) {\n          instance.$onCreate(policy.get(name));\n        }\n      });\n    }\n\n    return this.injector.alter(\"$alterOidcPolicy\", policy);\n  }\n}\n"]}

package/lib/esm/utils/debug.js

@@ -0,0 +1,20 @@
+import { isEmpty } from "@tsed/core";
+import qs from "querystring";
+import { inspect } from "util";
+const keys = new Set();
+function serialize(obj) {
+    return Object.entries(obj).reduce((acc, [key, value]) => {
+        keys.add(key);
+        if (isEmpty(value)) {
+            return acc;
+        }
+        acc[key] = inspect(value, { depth: null });
+        return acc;
+    }, {});
+}
+export const debug = (obj) => qs.stringify(serialize(obj), "<br/>", ": ", {
+    encodeURIComponent(value) {
+        return keys.has(value) ? `<strong>${value}</strong>` : value;
+    }
+});
+//# sourceMappingURL=debug.js.map

package/lib/esm/utils/debug.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"debug.js","sourceRoot":"","sources":["../../../src/utils/debug.ts"],"names":[],"mappings":"AAAA,OAAO,EAAC,OAAO,EAAC,MAAM,YAAY,CAAC;AACnC,OAAO,EAAE,MAAM,aAAa,CAAC;AAC7B,OAAO,EAAC,OAAO,EAAC,MAAM,MAAM,CAAC;AAE7B,MAAM,IAAI,GAAG,IAAI,GAAG,EAAE,CAAC;AAEvB,SAAS,SAAS,CAAC,GAAQ;IACzB,OAAO,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,GAAQ,EAAE,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,EAAE;QAC3D,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAEd,IAAI,OAAO,CAAC,KAAK,CAAC,EAAE;YAClB,OAAO,GAAG,CAAC;SACZ;QAED,GAAG,CAAC,GAAG,CAAC,GAAG,OAAO,CAAC,KAAK,EAAE,EAAC,KAAK,EAAE,IAAI,EAAC,CAAC,CAAC;QACzC,OAAO,GAAG,CAAC;IACb,CAAC,EAAE,EAAE,CAAC,CAAC;AACT,CAAC;AAED,MAAM,CAAC,MAAM,KAAK,GAAG,CAAC,GAAQ,EAAE,EAAE,CAChC,EAAE,CAAC,SAAS,CAAC,SAAS,CAAC,GAAG,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE;IAC1C,kBAAkB,CAAC,KAAK;QACtB,OAAO,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,WAAW,KAAK,WAAW,CAAC,CAAC,CAAC,KAAK,CAAC;IAC/D,CAAC;CACF,CAAC,CAAC","sourcesContent":["import {isEmpty} from \"@tsed/core\";\nimport qs from \"querystring\";\nimport {inspect} from \"util\";\n\nconst keys = new Set();\n\nfunction serialize(obj: any) {\n  return Object.entries(obj).reduce((acc: any, [key, value]) => {\n    keys.add(key);\n\n    if (isEmpty(value)) {\n      return acc;\n    }\n\n    acc[key] = inspect(value, {depth: null});\n    return acc;\n  }, {});\n}\n\nexport const debug = (obj: any) =>\n  qs.stringify(serialize(obj), \"<br/>\", \": \", {\n    encodeURIComponent(value) {\n      return keys.has(value) ? `<strong>${value}</strong>` : value;\n    }\n  });\n"]}