@tsed/oidc-provider 7.14.0 → 7.14.2

package/lib/cjs/index.js

@@ -33,4 +33,5 @@ tslib_1.__exportStar(require("./services/OidcInteractions"), exports);
 tslib_1.__exportStar(require("./services/OidcJwks"), exports);
 tslib_1.__exportStar(require("./services/OidcProvider"), exports);
 tslib_1.__exportStar(require("./utils/debug"), exports);
+tslib_1.__exportStar(require("./utils/events"), exports);
 //# sourceMappingURL=index.js.map

package/lib/cjs/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/index.ts"],"names":[],"mappings":";AAAA;;GAEG;;;AAEH,uDAA6B;AAC7B,gEAAsC;AACtC,+DAAqC;AACrC,mEAAyC;AACzC,oEAA0C;AAC1C,+DAAqC;AACrC,+DAAqC;AACrC,mEAAyC;AACzC,8DAAoC;AACpC,8DAAoC;AACpC,2DAAiC;AACjC,sEAA4C;AAC5C,uEAA6C;AAC7C,0EAAgD;AAChD,mEAAyC;AACzC,0EAAgD;AAChD,0EAAgD;AAChD,8EAAoD;AACpD,gEAAsC;AACtC,8DAAoC;AACpC,kFAAwD;AACxD,8EAAoD;AACpD,6EAAmD;AACnD,kEAAwC;AACxC,4EAAkD;AAClD,sEAA4C;AAC5C,8DAAoC;AACpC,kEAAwC;AACxC,wDAA8B","sourcesContent":["/**\n * @file Automatically generated by barrelsby.\n */\n\nexport * from \"./OidcModule\";\nexport * from \"./constants/constants\";\nexport * from \"./decorators/grantId\";\nexport * from \"./decorators/interaction\";\nexport * from \"./decorators/interactions\";\nexport * from \"./decorators/noCache\";\nexport * from \"./decorators/oidcCtx\";\nexport * from \"./decorators/oidcSession\";\nexport * from \"./decorators/params\";\nexport * from \"./decorators/prompt\";\nexport * from \"./decorators/uid\";\nexport * from \"./domain/InteractionMethods\";\nexport * from \"./domain/OidcAccountsMethods\";\nexport * from \"./domain/OidcBadInteractionName\";\nexport * from \"./domain/OidcInteraction\";\nexport * from \"./domain/OidcInteractionMethods\";\nexport * from \"./domain/OidcInteractionOptions\";\nexport * from \"./domain/OidcInteractionPromptProps\";\nexport * from \"./domain/OidcSettings\";\nexport * from \"./domain/interfaces\";\nexport * from \"./middlewares/OidcInteractionMiddleware\";\nexport * from \"./middlewares/OidcNoCacheMiddleware\";\nexport * from \"./middlewares/OidcSecureMiddleware\";\nexport * from \"./services/OidcAdapters\";\nexport * from \"./services/OidcInteractionContext\";\nexport * from \"./services/OidcInteractions\";\nexport * from \"./services/OidcJwks\";\nexport * from \"./services/OidcProvider\";\nexport * from \"./utils/debug\";\n"]}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/index.ts"],"names":[],"mappings":";AAAA;;GAEG;;;AAEH,uDAA6B;AAC7B,gEAAsC;AACtC,+DAAqC;AACrC,mEAAyC;AACzC,oEAA0C;AAC1C,+DAAqC;AACrC,+DAAqC;AACrC,mEAAyC;AACzC,8DAAoC;AACpC,8DAAoC;AACpC,2DAAiC;AACjC,sEAA4C;AAC5C,uEAA6C;AAC7C,0EAAgD;AAChD,mEAAyC;AACzC,0EAAgD;AAChD,0EAAgD;AAChD,8EAAoD;AACpD,gEAAsC;AACtC,8DAAoC;AACpC,kFAAwD;AACxD,8EAAoD;AACpD,6EAAmD;AACnD,kEAAwC;AACxC,4EAAkD;AAClD,sEAA4C;AAC5C,8DAAoC;AACpC,kEAAwC;AACxC,wDAA8B;AAC9B,yDAA+B","sourcesContent":["/**\n * @file Automatically generated by barrelsby.\n */\n\nexport * from \"./OidcModule\";\nexport * from \"./constants/constants\";\nexport * from \"./decorators/grantId\";\nexport * from \"./decorators/interaction\";\nexport * from \"./decorators/interactions\";\nexport * from \"./decorators/noCache\";\nexport * from \"./decorators/oidcCtx\";\nexport * from \"./decorators/oidcSession\";\nexport * from \"./decorators/params\";\nexport * from \"./decorators/prompt\";\nexport * from \"./decorators/uid\";\nexport * from \"./domain/InteractionMethods\";\nexport * from \"./domain/OidcAccountsMethods\";\nexport * from \"./domain/OidcBadInteractionName\";\nexport * from \"./domain/OidcInteraction\";\nexport * from \"./domain/OidcInteractionMethods\";\nexport * from \"./domain/OidcInteractionOptions\";\nexport * from \"./domain/OidcInteractionPromptProps\";\nexport * from \"./domain/OidcSettings\";\nexport * from \"./domain/interfaces\";\nexport * from \"./middlewares/OidcInteractionMiddleware\";\nexport * from \"./middlewares/OidcNoCacheMiddleware\";\nexport * from \"./middlewares/OidcSecureMiddleware\";\nexport * from \"./services/OidcAdapters\";\nexport * from \"./services/OidcInteractionContext\";\nexport * from \"./services/OidcInteractions\";\nexport * from \"./services/OidcJwks\";\nexport * from \"./services/OidcProvider\";\nexport * from \"./utils/debug\";\nexport * from \"./utils/events\";\n"]}

package/lib/cjs/services/OidcProvider.js

@@ -7,6 +7,7 @@ const core_1 = require("@tsed/core");
 const di_1 = require("@tsed/di");
 const oidc_provider_1 = require("oidc-provider");
 const constants_1 = require("../constants/constants");
+const events_1 = require("../utils/events");
 const OidcAdapters_1 = require("./OidcAdapters");
 const OidcInteractions_1 = require("./OidcInteractions");
 const OidcJwks_1 = require("./OidcJwks");
@@ -23,6 +24,7 @@ let OidcProvider = class OidcProvider {
     adapters;
     injector;
     app;
+    $ctx;
     hasConfiguration() {
         return !!this.oidc;
     }
@@ -95,9 +97,31 @@ let OidcProvider = class OidcProvider {
         if (allowHttpLocalhost) {
             this.allowHttpLocalhost();
         }
+        events_1.OIDC_ERROR_EVENTS.map((event) => {
+            this.raw.on(event, this.createErrorHandler(event));
+        });
         await this.injector.emit("$onCreateOIDC", this.raw);
         return this.raw;
     }
+    createErrorHandler(event) {
+        return (ctx, error, accountId, sid) => {
+            this.logger.error({
+                event: "OIDC_ERROR",
+                type: event,
+                error: {
+                    error_name: error.error,
+                    error_description: error.error_description,
+                    error_detail: error.error_detail
+                },
+                account_id: accountId,
+                params: ctx.oidc.params,
+                headers: ctx.headers,
+                sid
+            });
+            // TODO see if we need to call platformExceptions
+            // this.platformExceptions.catch(error, ctx.request.$ctx);
+        };
+    }
     createPrompt(instance, options) {
         const { checks: originalChecks = [], details, ...promptOptions } = options;
         const checks = [...(instance.checks ? instance.checks() : originalChecks)].filter(Boolean);
@@ -140,6 +164,9 @@ let OidcProvider = class OidcProvider {
         }
         return this.injector.alter("$alterOidcPolicy", policy);
     }
+    get logger() {
+        return this.$ctx?.logger || this.injector.logger;
+    }
 };
 tslib_1.__decorate([
     (0, di_1.Constant)("env"),
@@ -185,6 +212,10 @@ tslib_1.__decorate([
     (0, di_1.Inject)(),
     tslib_1.__metadata("design:type", common_1.PlatformApplication)
 ], OidcProvider.prototype, "app", void 0);
+tslib_1.__decorate([
+    (0, common_1.InjectContext)(),
+    tslib_1.__metadata("design:type", common_1.PlatformContext)
+], OidcProvider.prototype, "$ctx", void 0);
 OidcProvider = tslib_1.__decorate([
     (0, di_1.Injectable)()
 ], OidcProvider);

package/lib/cjs/services/OidcProvider.js.map

@@ -1 +1 @@
-{"version":3,"file":"OidcProvider.js","sourceRoot":"","sources":["../../../src/services/OidcProvider.ts"],"names":[],"mappings":";;;;AAAA,yCAAiD;AACjD,qCAAyC;AACzC,iCAAuE;AACvE,iDAAyF;AACzF,sDAAoD;AAKpD,iDAA4C;AAC5C,yDAAoD;AACpD,yCAAoC;AAGpC,IAAa,YAAY,GAAzB,MAAa,YAAY;IACvB,GAAG,CAAe;IAGR,GAAG,CAAM;IAGT,QAAQ,CAAkB;IAG1B,SAAS,CAAkB;IAG3B,MAAM,CAAS;IAGf,IAAI,CAAe;IAGnB,YAAY,CAAS;IAGrB,QAAQ,CAAW;IAGnB,gBAAgB,CAAmB;IAGnC,QAAQ,CAAe;IAGvB,QAAQ,CAAkB;IAG1B,GAAG,CAAsB;IAEnC,gBAAgB;QACd,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC;IACrB,CAAC;IAED,KAAK,CAAC,gBAAgB;QACpB,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,EAAE,IAAI,CAAC,QAAQ,CAAC,kBAAkB,EAAE,CAAC,CAAC,CAAC;QACzG,MAAM,EACJ,MAAM,EACN,QAAQ,EACR,SAAS,EACT,KAAK,EACL,QAAQ,EACR,aAAa,GAAG,IAAI,CAAC,GAAG,IAAI,UAAG,CAAC,IAAI,EACpC,OAAO,EACP,cAAc,EACd,GAAG,OAAO,EACX,GAAG,IAAI,CAAC,IAAI,CAAC;QAEd,MAAM,aAAa,GAAkB;YACnC,YAAY,EAAE;gBACZ,0BAA0B;gBAC1B,GAAG,EAAE,CAAC,GAAG,EAAE,WAAW,EAAE,EAAE,CAAC,eAAe,WAAW,CAAC,GAAG,EAAE;aAC5D;YACD,GAAG,OAAO;YACV,OAAO;YACP,IAAI;SACL,CAAC;QAEF,IAAI,QAAQ,EAAE;YACZ,aAAa,CAAC,WAAW,GAAG,CAAC,GAAG,EAAE,EAAE,EAAE,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAsB,QAAQ,CAAE,CAAC,WAAW,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC;SAC1H;QAED,IAAI,aAAa,EAAE;YACjB,IAAA,eAAQ,EAAC,aAAa,EAAE,sBAAsB,EAAE,IAAI,CAAC,CAAC;YACtD,IAAA,eAAQ,EAAC,aAAa,EAAE,qBAAqB,EAAE,IAAI,CAAC,CAAC;SACtD;QAED,MAAM,MAAM,GAAG,IAAI,CAAC,SAAS,EAAE,CAAC;QAChC,IAAI,MAAM,EAAE;YACV,IAAA,eAAQ,EAAC,aAAa,EAAE,qBAAqB,EAAE,MAAM,CAAC,CAAC;SACxD;QAED,MAAM,GAAG,GAAG,IAAI,CAAC,kBAAkB,EAAE,CAAC;QACtC,IAAI,GAAG,EAAE;YACP,IAAA,eAAQ,EAAC,aAAa,EAAE,kBAAkB,EAAE,GAAG,CAAC,CAAC;SAClD;QAED,OAAO,aAAa,CAAC;IACvB,CAAC;IAED,SAAS;QACP,IAAI,IAAI,CAAC,MAAM,EAAE;YACf,OAAO,IAAI,CAAC,MAAM,CAAC;SACpB;QAED,uBAAuB;QACvB,IAAI,IAAI,CAAC,SAAS,EAAE;YAClB,OAAO,qBAAqB,IAAI,CAAC,SAAS,EAAE,CAAC;SAC9C;QAED,OAAO,oBAAoB,IAAI,CAAC,QAAQ,EAAE,CAAC;IAC7C,CAAC;IAED,GAAG;QACD,OAAO,IAAI,CAAC,GAAG,CAAC;IAClB,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,MAAM;QACV,MAAM,EAAC,KAAK,GAAG,IAAI,CAAC,GAAG,KAAK,UAAG,CAAC,IAAI,EAAE,SAAS,EAAE,kBAAkB,GAAG,IAAI,CAAC,GAAG,KAAK,UAAG,CAAC,IAAI,EAAC,GAAG,IAAI,CAAC,IAAI,CAAC;QACzG,MAAM,aAAa,GAAG,MAAM,IAAI,CAAC,gBAAgB,EAAE,CAAC;QAEpD,MAAM,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,yBAAyB,EAAE,aAAa,CAAC,CAAC;QAEzE,MAAM,YAAY,GAAG,IAAI,wBAAY,CAAC,IAAI,CAAC,SAAS,EAAE,EAAE,aAAa,CAAC,CAAC;QAEvE,IAAI,KAAK,EAAE;YACT,uBAAuB;YACvB,QAAQ,IAAI,CAAC,YAAY,EAAE;gBACzB,QAAQ;gBACR,KAAK,SAAS;oBACZ,YAAY,CAAC,KAAK,GAAG,IAAI,CAAC;oBAC1B,MAAM;gBACR,KAAK,KAAK;oBACP,IAAI,CAAC,GAAG,CAAC,MAAc,CAAC,KAAK,GAAG,IAAI,CAAC;oBACtC,MAAM;aACT;SACF;QAED,IAAI,SAAS,EAAE;YACb,YAAY,CAAC,GAAG,CAAC,IAAI,GAAG,SAAS,CAAC;SACnC;QAED,IAAI,CAAC,GAAG,GAAG,YAAY,CAAC;QAExB,IAAI,kBAAkB,EAAE;YACtB,IAAI,CAAC,kBAAkB,EAAE,CAAC;SAC3B;QAED,MAAM,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,eAAe,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC;QAEpD,OAAO,IAAI,CAAC,GAAG,CAAC;IAClB,CAAC;IAEM,YAAY,CAAC,QAA4B,EAAE,OAA+B;QAC/E,MAAM,EAAC,MAAM,EAAE,cAAc,GAAG,EAAE,EAAE,OAAO,EAAE,GAAG,aAAa,EAAC,GAAG,OAAO,CAAC;QACzE,MAAM,MAAM,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QAE3F,OAAO,IAAI,iCAAiB,CAAC,MAAM,CAAC,aAAa,EAAE,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,OAAO,EAAE,GAAG,MAAM,CAAC,CAAC;IAC9H,CAAC;IAEO,kBAAkB;QACxB,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,YAAY,EAAE,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,OAAO,KAAK,wBAAY,CAAC,CAAC;QAEpG,IAAI,QAAQ,EAAE;YACZ,OAAO,CAAC,GAAQ,EAAE,WAAgB,EAAE,EAAE;gBACpC,qCAAqC;gBACrC,OAAO,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,WAAW,CAAC,GAAG,CAAC,CAAC;YACxD,CAAC,CAAC;SACH;IACH,CAAC;IAEO,kBAAkB;QACxB,MAAM,EAAC,UAAU,EAAE,IAAI,EAAC,GAAI,IAAI,CAAC,GAAG,CAAC,MAAc,CAAC,MAAM,CAAC,SAAS,CAAC;QAEpE,IAAI,CAAC,GAAG,CAAC,MAAc,CAAC,MAAM,CAAC,SAAS,CAAC,UAAU,GAAG,SAAS,UAAU,CAAC,OAAe,EAAE,IAAY;YACtG,IAAI,IAAI,KAAK,sBAAsB,IAAI,IAAI,KAAK,2BAA2B,EAAE;gBAC3E,OAAO;aACR;YAED,0BAA0B;YAC1B,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QAClC,CAAC,CAAC;IACJ,CAAC;IAEO,SAAS;QACf,MAAM,MAAM,GAAG,iCAAiB,CAAC,IAAI,EAAE,CAAC;QACxC,MAAM,YAAY,GAAG,IAAI,CAAC,gBAAgB,CAAC,eAAe,EAAE,CAAC;QAE7D,IAAI,YAAY,CAAC,MAAM,EAAE;YACvB,YAAY,CAAC,OAAO,CAAC,CAAC,QAAQ,EAAE,EAAE;gBAChC,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAqB,QAAQ,CAAC,KAAK,CAAE,CAAC;gBACxE,MAAM,OAAO,GAAG,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,oBAAoB,CAAC,CAAC;gBAEzD,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE;oBAC7B,MAAM,MAAM,GAAG,IAAI,CAAC,YAAY,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;oBAEpD,MAAM,CAAC,GAAG,CAAC,MAAM,EAAE,OAAO,CAAC,QAAQ,CAAC,CAAC;iBACtC;gBAED,IAAI,QAAQ,CAAC,SAAS,EAAE;oBACtB,QAAQ,CAAC,SAAS,CAAC,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,CAAE,CAAC,CAAC;iBAC/C;YACH,CAAC,CAAC,CAAC;SACJ;QAED,OAAO,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,kBAAkB,EAAE,MAAM,CAAC,CAAC;IACzD,CAAC;CACF,CAAA;AAhMC;IADC,IAAA,aAAQ,EAAC,KAAK,CAAC;;yCACG;AAGnB;IADC,IAAA,aAAQ,EAAC,UAAU,CAAC;;8CACe;AAGpC;IADC,IAAA,aAAQ,EAAC,WAAW,CAAC;;+CACe;AAGrC;IADC,IAAA,aAAQ,EAAC,aAAa,EAAE,EAAE,CAAC;;4CACH;AAGzB;IADC,IAAA,aAAQ,EAAC,MAAM,CAAC;;0CACY;AAG7B;IADC,IAAA,aAAQ,EAAC,eAAe,CAAC;;kDACK;AAG/B;IADC,IAAA,WAAM,GAAE;sCACW,mBAAQ;8CAAC;AAG7B;IADC,IAAA,WAAM,GAAE;sCACmB,mCAAgB;sDAAC;AAG7C;IADC,IAAA,WAAM,GAAE;sCACW,2BAAY;8CAAC;AAGjC;IADC,IAAA,WAAM,GAAE;sCACW,oBAAe;8CAAC;AAGpC;IADC,IAAA,WAAM,GAAE;sCACM,4BAAmB;yCAAC;AAlCxB,YAAY;IADxB,IAAA,eAAU,GAAE;GACA,YAAY,CAoMxB;AApMY,oCAAY","sourcesContent":["import {PlatformApplication} from \"@tsed/common\";\nimport {Env, setValue} from \"@tsed/core\";\nimport {Constant, Inject, Injectable, InjectorService} from \"@tsed/di\";\nimport {Configuration, interactionPolicy, Provider as OIDCProvider} from \"oidc-provider\";\nimport {INTERACTIONS} from \"../constants/constants\";\nimport {InteractionMethods} from \"../domain/InteractionMethods\";\nimport {OidcAccountsMethods} from \"../domain/OidcAccountsMethods\";\nimport {OidcInteractionOptions} from \"../domain/OidcInteractionOptions\";\nimport {OidcSettings} from \"../domain/OidcSettings\";\nimport {OidcAdapters} from \"./OidcAdapters\";\nimport {OidcInteractions} from \"./OidcInteractions\";\nimport {OidcJwks} from \"./OidcJwks\";\n\n@Injectable()\nexport class OidcProvider {\n  raw: OIDCProvider;\n\n  @Constant(\"env\")\n  protected env: Env;\n\n  @Constant(\"httpPort\")\n  protected httpPort: number | string;\n\n  @Constant(\"httpsPort\")\n  protected httpsPort: number | string;\n\n  @Constant(\"oidc.issuer\", \"\")\n  protected issuer: string;\n\n  @Constant(\"oidc\")\n  protected oidc: OidcSettings;\n\n  @Constant(\"PLATFORM_NAME\")\n  protected platformName: string;\n\n  @Inject()\n  protected oidcJwks: OidcJwks;\n\n  @Inject()\n  protected oidcInteractions: OidcInteractions;\n\n  @Inject()\n  protected adapters: OidcAdapters;\n\n  @Inject()\n  protected injector: InjectorService;\n\n  @Inject()\n  protected app: PlatformApplication;\n\n  hasConfiguration() {\n    return !!this.oidc;\n  }\n\n  async getConfiguration(): Promise<Configuration> {\n    const [jwks, adapter] = await Promise.all([this.oidcJwks.getJwks(), this.adapters.createAdapterClass()]);\n    const {\n      issuer,\n      jwksPath,\n      secureKey,\n      proxy,\n      Accounts,\n      secureCookies = this.env == Env.PROD,\n      Adapter,\n      connectionName,\n      ...options\n    } = this.oidc;\n\n    const configuration: Configuration = {\n      interactions: {\n        /* istanbul ignore next */\n        url: (ctx, interaction) => `interaction/${interaction.uid}`\n      },\n      ...options,\n      adapter,\n      jwks\n    };\n\n    if (Accounts) {\n      configuration.findAccount = (ctx, id, token) => this.injector.get<OidcAccountsMethods>(Accounts)!.findAccount(id, token);\n    }\n\n    if (secureCookies) {\n      setValue(configuration, \"cookies.short.secure\", true);\n      setValue(configuration, \"cookies.long.secure\", true);\n    }\n\n    const policy = this.getPolicy();\n    if (policy) {\n      setValue(configuration, \"interactions.policy\", policy);\n    }\n\n    const url = this.getInteractionsUrl();\n    if (url) {\n      setValue(configuration, \"interactions.url\", url);\n    }\n\n    return configuration;\n  }\n\n  getIssuer() {\n    if (this.issuer) {\n      return this.issuer;\n    }\n\n    // istanbul ignore next\n    if (this.httpsPort) {\n      return `https://localhost:${this.httpsPort}`;\n    }\n\n    return `http://localhost:${this.httpPort}`;\n  }\n\n  get(): OIDCProvider {\n    return this.raw;\n  }\n\n  /**\n   * Create a new instance of OidcProvider\n   */\n  async create(): Promise<void | OIDCProvider> {\n    const {proxy = this.env === Env.PROD, secureKey, allowHttpLocalhost = this.env !== Env.PROD} = this.oidc;\n    const configuration = await this.getConfiguration();\n\n    await this.injector.alterAsync(\"$alterOidcConfiguration\", configuration);\n\n    const oidcProvider = new OIDCProvider(this.getIssuer(), configuration);\n\n    if (proxy) {\n      // istanbul ignore next\n      switch (this.platformName) {\n        default:\n        case \"express\":\n          oidcProvider.proxy = true;\n          break;\n        case \"koa\":\n          (this.app.rawApp as any).proxy = true;\n          break;\n      }\n    }\n\n    if (secureKey) {\n      oidcProvider.app.keys = secureKey;\n    }\n\n    this.raw = oidcProvider;\n\n    if (allowHttpLocalhost) {\n      this.allowHttpLocalhost();\n    }\n\n    await this.injector.emit(\"$onCreateOIDC\", this.raw);\n\n    return this.raw;\n  }\n\n  public createPrompt(instance: InteractionMethods, options: OidcInteractionOptions) {\n    const {checks: originalChecks = [], details, ...promptOptions} = options;\n    const checks = [...(instance.checks ? instance.checks() : originalChecks)].filter(Boolean);\n\n    return new interactionPolicy.Prompt(promptOptions, instance.details ? instance.details.bind(instance) : details, ...checks);\n  }\n\n  private getInteractionsUrl() {\n    const provider = this.injector.getProviders().find((provider) => provider.subType === INTERACTIONS);\n\n    if (provider) {\n      return (ctx: any, interaction: any) => {\n        // eslint-disable-line no-unused-vars\n        return provider.path.replace(/:uid/, interaction.uid);\n      };\n    }\n  }\n\n  private allowHttpLocalhost() {\n    const {invalidate: orig} = (this.raw.Client as any).Schema.prototype;\n\n    (this.raw.Client as any).Schema.prototype.invalidate = function invalidate(message: string, code: string) {\n      if (code === \"implicit-force-https\" || code === \"implicit-forbid-localhost\") {\n        return;\n      }\n\n      /* istanbul ignore next */\n      return orig.call(this, message);\n    };\n  }\n\n  private getPolicy() {\n    const policy = interactionPolicy.base();\n    const interactions = this.oidcInteractions.getInteractions();\n\n    if (interactions.length) {\n      interactions.forEach((provider) => {\n        const instance = this.injector.get<InteractionMethods>(provider.token)!;\n        const options = provider.store.get(\"interactionOptions\");\n\n        if (!policy.get(options.name)) {\n          const prompt = this.createPrompt(instance, options);\n\n          policy.add(prompt, options.priority);\n        }\n\n        if (instance.$onCreate) {\n          instance.$onCreate(policy.get(options.name)!);\n        }\n      });\n    }\n\n    return this.injector.alter(\"$alterOidcPolicy\", policy);\n  }\n}\n"]}
+{"version":3,"file":"OidcProvider.js","sourceRoot":"","sources":["../../../src/services/OidcProvider.ts"],"names":[],"mappings":";;;;AAAA,yCAAiF;AACjF,qCAAyC;AACzC,iCAAuE;AACvE,iDAA6G;AAC7G,sDAAoD;AAKpD,4CAAkD;AAClD,iDAA4C;AAC5C,yDAAoD;AACpD,yCAAoC;AAGpC,IAAa,YAAY,GAAzB,MAAa,YAAY;IACvB,GAAG,CAAe;IAGR,GAAG,CAAM;IAGT,QAAQ,CAAkB;IAG1B,SAAS,CAAkB;IAG3B,MAAM,CAAS;IAGf,IAAI,CAAe;IAGnB,YAAY,CAAS;IAGrB,QAAQ,CAAW;IAGnB,gBAAgB,CAAmB;IAGnC,QAAQ,CAAe;IAGvB,QAAQ,CAAkB;IAG1B,GAAG,CAAsB;IAGzB,IAAI,CAAmB;IAEjC,gBAAgB;QACd,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC;IACrB,CAAC;IAED,KAAK,CAAC,gBAAgB;QACpB,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,EAAE,IAAI,CAAC,QAAQ,CAAC,kBAAkB,EAAE,CAAC,CAAC,CAAC;QACzG,MAAM,EACJ,MAAM,EACN,QAAQ,EACR,SAAS,EACT,KAAK,EACL,QAAQ,EACR,aAAa,GAAG,IAAI,CAAC,GAAG,IAAI,UAAG,CAAC,IAAI,EACpC,OAAO,EACP,cAAc,EACd,GAAG,OAAO,EACX,GAAG,IAAI,CAAC,IAAI,CAAC;QAEd,MAAM,aAAa,GAAkB;YACnC,YAAY,EAAE;gBACZ,0BAA0B;gBAC1B,GAAG,EAAE,CAAC,GAAG,EAAE,WAAW,EAAE,EAAE,CAAC,eAAe,WAAW,CAAC,GAAG,EAAE;aAC5D;YACD,GAAG,OAAO;YACV,OAAO;YACP,IAAI;SACL,CAAC;QAEF,IAAI,QAAQ,EAAE;YACZ,aAAa,CAAC,WAAW,GAAG,CAAC,GAAG,EAAE,EAAE,EAAE,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAsB,QAAQ,CAAE,CAAC,WAAW,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC;SAC1H;QAED,IAAI,aAAa,EAAE;YACjB,IAAA,eAAQ,EAAC,aAAa,EAAE,sBAAsB,EAAE,IAAI,CAAC,CAAC;YACtD,IAAA,eAAQ,EAAC,aAAa,EAAE,qBAAqB,EAAE,IAAI,CAAC,CAAC;SACtD;QAED,MAAM,MAAM,GAAG,IAAI,CAAC,SAAS,EAAE,CAAC;QAChC,IAAI,MAAM,EAAE;YACV,IAAA,eAAQ,EAAC,aAAa,EAAE,qBAAqB,EAAE,MAAM,CAAC,CAAC;SACxD;QAED,MAAM,GAAG,GAAG,IAAI,CAAC,kBAAkB,EAAE,CAAC;QACtC,IAAI,GAAG,EAAE;YACP,IAAA,eAAQ,EAAC,aAAa,EAAE,kBAAkB,EAAE,GAAG,CAAC,CAAC;SAClD;QAED,OAAO,aAAa,CAAC;IACvB,CAAC;IAED,SAAS;QACP,IAAI,IAAI,CAAC,MAAM,EAAE;YACf,OAAO,IAAI,CAAC,MAAM,CAAC;SACpB;QAED,uBAAuB;QACvB,IAAI,IAAI,CAAC,SAAS,EAAE;YAClB,OAAO,qBAAqB,IAAI,CAAC,SAAS,EAAE,CAAC;SAC9C;QAED,OAAO,oBAAoB,IAAI,CAAC,QAAQ,EAAE,CAAC;IAC7C,CAAC;IAED,GAAG;QACD,OAAO,IAAI,CAAC,GAAG,CAAC;IAClB,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,MAAM;QACV,MAAM,EAAC,KAAK,GAAG,IAAI,CAAC,GAAG,KAAK,UAAG,CAAC,IAAI,EAAE,SAAS,EAAE,kBAAkB,GAAG,IAAI,CAAC,GAAG,KAAK,UAAG,CAAC,IAAI,EAAC,GAAG,IAAI,CAAC,IAAI,CAAC;QACzG,MAAM,aAAa,GAAG,MAAM,IAAI,CAAC,gBAAgB,EAAE,CAAC;QAEpD,MAAM,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,yBAAyB,EAAE,aAAa,CAAC,CAAC;QAEzE,MAAM,YAAY,GAAG,IAAI,wBAAY,CAAC,IAAI,CAAC,SAAS,EAAE,EAAE,aAAa,CAAC,CAAC;QAEvE,IAAI,KAAK,EAAE;YACT,uBAAuB;YACvB,QAAQ,IAAI,CAAC,YAAY,EAAE;gBACzB,QAAQ;gBACR,KAAK,SAAS;oBACZ,YAAY,CAAC,KAAK,GAAG,IAAI,CAAC;oBAC1B,MAAM;gBACR,KAAK,KAAK;oBACP,IAAI,CAAC,GAAG,CAAC,MAAc,CAAC,KAAK,GAAG,IAAI,CAAC;oBACtC,MAAM;aACT;SACF;QAED,IAAI,SAAS,EAAE;YACb,YAAY,CAAC,GAAG,CAAC,IAAI,GAAG,SAAS,CAAC;SACnC;QAED,IAAI,CAAC,GAAG,GAAG,YAAY,CAAC;QAExB,IAAI,kBAAkB,EAAE;YACtB,IAAI,CAAC,kBAAkB,EAAE,CAAC;SAC3B;QAED,0BAAiB,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE;YAC9B,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,KAAK,EAAE,IAAI,CAAC,kBAAkB,CAAC,KAAK,CAAC,CAAC,CAAC;QACrD,CAAC,CAAC,CAAC;QAEH,MAAM,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,eAAe,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC;QAEpD,OAAO,IAAI,CAAC,GAAG,CAAC;IAClB,CAAC;IAEO,kBAAkB,CAAC,KAAa;QACtC,OAAO,CAAC,GAAuB,EAAE,KAAU,EAAE,SAAkB,EAAE,GAAY,EAAE,EAAE;YAC/E,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC;gBAChB,KAAK,EAAE,YAAY;gBACnB,IAAI,EAAE,KAAK;gBACX,KAAK,EAAE;oBACL,UAAU,EAAE,KAAK,CAAC,KAAK;oBACvB,iBAAiB,EAAE,KAAK,CAAC,iBAAiB;oBAC1C,YAAY,EAAE,KAAK,CAAC,YAAY;iBACjC;gBACD,UAAU,EAAE,SAAS;gBACrB,MAAM,EAAE,GAAG,CAAC,IAAI,CAAC,MAAM;gBACvB,OAAO,EAAE,GAAG,CAAC,OAAO;gBACpB,GAAG;aACJ,CAAC,CAAC;YAEH,iDAAiD;YACjD,0DAA0D;QAC5D,CAAC,CAAC;IACJ,CAAC;IAEM,YAAY,CAAC,QAA4B,EAAE,OAA+B;QAC/E,MAAM,EAAC,MAAM,EAAE,cAAc,GAAG,EAAE,EAAE,OAAO,EAAE,GAAG,aAAa,EAAC,GAAG,OAAO,CAAC;QACzE,MAAM,MAAM,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QAE3F,OAAO,IAAI,iCAAiB,CAAC,MAAM,CAAC,aAAa,EAAE,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,OAAO,EAAE,GAAG,MAAM,CAAC,CAAC;IAC9H,CAAC;IAEO,kBAAkB;QACxB,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,YAAY,EAAE,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,OAAO,KAAK,wBAAY,CAAC,CAAC;QAEpG,IAAI,QAAQ,EAAE;YACZ,OAAO,CAAC,GAAQ,EAAE,WAAgB,EAAE,EAAE;gBACpC,qCAAqC;gBACrC,OAAO,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,WAAW,CAAC,GAAG,CAAC,CAAC;YACxD,CAAC,CAAC;SACH;IACH,CAAC;IAEO,kBAAkB;QACxB,MAAM,EAAC,UAAU,EAAE,IAAI,EAAC,GAAI,IAAI,CAAC,GAAG,CAAC,MAAc,CAAC,MAAM,CAAC,SAAS,CAAC;QAEpE,IAAI,CAAC,GAAG,CAAC,MAAc,CAAC,MAAM,CAAC,SAAS,CAAC,UAAU,GAAG,SAAS,UAAU,CAAC,OAAe,EAAE,IAAY;YACtG,IAAI,IAAI,KAAK,sBAAsB,IAAI,IAAI,KAAK,2BAA2B,EAAE;gBAC3E,OAAO;aACR;YAED,0BAA0B;YAC1B,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QAClC,CAAC,CAAC;IACJ,CAAC;IAEO,SAAS;QACf,MAAM,MAAM,GAAG,iCAAiB,CAAC,IAAI,EAAE,CAAC;QACxC,MAAM,YAAY,GAAG,IAAI,CAAC,gBAAgB,CAAC,eAAe,EAAE,CAAC;QAE7D,IAAI,YAAY,CAAC,MAAM,EAAE;YACvB,YAAY,CAAC,OAAO,CAAC,CAAC,QAAQ,EAAE,EAAE;gBAChC,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAqB,QAAQ,CAAC,KAAK,CAAE,CAAC;gBACxE,MAAM,OAAO,GAAG,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,oBAAoB,CAAC,CAAC;gBAEzD,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE;oBAC7B,MAAM,MAAM,GAAG,IAAI,CAAC,YAAY,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;oBAEpD,MAAM,CAAC,GAAG,CAAC,MAAM,EAAE,OAAO,CAAC,QAAQ,CAAC,CAAC;iBACtC;gBAED,IAAI,QAAQ,CAAC,SAAS,EAAE;oBACtB,QAAQ,CAAC,SAAS,CAAC,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,CAAE,CAAC,CAAC;iBAC/C;YACH,CAAC,CAAC,CAAC;SACJ;QAED,OAAO,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,kBAAkB,EAAE,MAAM,CAAC,CAAC;IACzD,CAAC;IAED,IAAI,MAAM;QACR,OAAO,IAAI,CAAC,IAAI,EAAE,MAAM,IAAI,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC;IACnD,CAAC;CACF,CAAA;AAhOC;IADC,IAAA,aAAQ,EAAC,KAAK,CAAC;;yCACG;AAGnB;IADC,IAAA,aAAQ,EAAC,UAAU,CAAC;;8CACe;AAGpC;IADC,IAAA,aAAQ,EAAC,WAAW,CAAC;;+CACe;AAGrC;IADC,IAAA,aAAQ,EAAC,aAAa,EAAE,EAAE,CAAC;;4CACH;AAGzB;IADC,IAAA,aAAQ,EAAC,MAAM,CAAC;;0CACY;AAG7B;IADC,IAAA,aAAQ,EAAC,eAAe,CAAC;;kDACK;AAG/B;IADC,IAAA,WAAM,GAAE;sCACW,mBAAQ;8CAAC;AAG7B;IADC,IAAA,WAAM,GAAE;sCACmB,mCAAgB;sDAAC;AAG7C;IADC,IAAA,WAAM,GAAE;sCACW,2BAAY;8CAAC;AAGjC;IADC,IAAA,WAAM,GAAE;sCACW,oBAAe;8CAAC;AAGpC;IADC,IAAA,WAAM,GAAE;sCACM,4BAAmB;yCAAC;AAGnC;IADC,IAAA,sBAAa,GAAE;sCACC,wBAAe;0CAAC;AArCtB,YAAY;IADxB,IAAA,eAAU,GAAE;GACA,YAAY,CAoOxB;AApOY,oCAAY","sourcesContent":["import {InjectContext, PlatformApplication, PlatformContext} from \"@tsed/common\";\nimport {Env, setValue} from \"@tsed/core\";\nimport {Constant, Inject, Injectable, InjectorService} from \"@tsed/di\";\nimport {Configuration, interactionPolicy, KoaContextWithOIDC, Provider as OIDCProvider} from \"oidc-provider\";\nimport {INTERACTIONS} from \"../constants/constants\";\nimport {InteractionMethods} from \"../domain/InteractionMethods\";\nimport {OidcAccountsMethods} from \"../domain/OidcAccountsMethods\";\nimport {OidcInteractionOptions} from \"../domain/OidcInteractionOptions\";\nimport {OidcSettings} from \"../domain/OidcSettings\";\nimport {OIDC_ERROR_EVENTS} from \"../utils/events\";\nimport {OidcAdapters} from \"./OidcAdapters\";\nimport {OidcInteractions} from \"./OidcInteractions\";\nimport {OidcJwks} from \"./OidcJwks\";\n\n@Injectable()\nexport class OidcProvider {\n  raw: OIDCProvider;\n\n  @Constant(\"env\")\n  protected env: Env;\n\n  @Constant(\"httpPort\")\n  protected httpPort: number | string;\n\n  @Constant(\"httpsPort\")\n  protected httpsPort: number | string;\n\n  @Constant(\"oidc.issuer\", \"\")\n  protected issuer: string;\n\n  @Constant(\"oidc\")\n  protected oidc: OidcSettings;\n\n  @Constant(\"PLATFORM_NAME\")\n  protected platformName: string;\n\n  @Inject()\n  protected oidcJwks: OidcJwks;\n\n  @Inject()\n  protected oidcInteractions: OidcInteractions;\n\n  @Inject()\n  protected adapters: OidcAdapters;\n\n  @Inject()\n  protected injector: InjectorService;\n\n  @Inject()\n  protected app: PlatformApplication;\n\n  @InjectContext()\n  protected $ctx?: PlatformContext;\n\n  hasConfiguration() {\n    return !!this.oidc;\n  }\n\n  async getConfiguration(): Promise<Configuration> {\n    const [jwks, adapter] = await Promise.all([this.oidcJwks.getJwks(), this.adapters.createAdapterClass()]);\n    const {\n      issuer,\n      jwksPath,\n      secureKey,\n      proxy,\n      Accounts,\n      secureCookies = this.env == Env.PROD,\n      Adapter,\n      connectionName,\n      ...options\n    } = this.oidc;\n\n    const configuration: Configuration = {\n      interactions: {\n        /* istanbul ignore next */\n        url: (ctx, interaction) => `interaction/${interaction.uid}`\n      },\n      ...options,\n      adapter,\n      jwks\n    };\n\n    if (Accounts) {\n      configuration.findAccount = (ctx, id, token) => this.injector.get<OidcAccountsMethods>(Accounts)!.findAccount(id, token);\n    }\n\n    if (secureCookies) {\n      setValue(configuration, \"cookies.short.secure\", true);\n      setValue(configuration, \"cookies.long.secure\", true);\n    }\n\n    const policy = this.getPolicy();\n    if (policy) {\n      setValue(configuration, \"interactions.policy\", policy);\n    }\n\n    const url = this.getInteractionsUrl();\n    if (url) {\n      setValue(configuration, \"interactions.url\", url);\n    }\n\n    return configuration;\n  }\n\n  getIssuer() {\n    if (this.issuer) {\n      return this.issuer;\n    }\n\n    // istanbul ignore next\n    if (this.httpsPort) {\n      return `https://localhost:${this.httpsPort}`;\n    }\n\n    return `http://localhost:${this.httpPort}`;\n  }\n\n  get(): OIDCProvider {\n    return this.raw;\n  }\n\n  /**\n   * Create a new instance of OidcProvider\n   */\n  async create(): Promise<void | OIDCProvider> {\n    const {proxy = this.env === Env.PROD, secureKey, allowHttpLocalhost = this.env !== Env.PROD} = this.oidc;\n    const configuration = await this.getConfiguration();\n\n    await this.injector.alterAsync(\"$alterOidcConfiguration\", configuration);\n\n    const oidcProvider = new OIDCProvider(this.getIssuer(), configuration);\n\n    if (proxy) {\n      // istanbul ignore next\n      switch (this.platformName) {\n        default:\n        case \"express\":\n          oidcProvider.proxy = true;\n          break;\n        case \"koa\":\n          (this.app.rawApp as any).proxy = true;\n          break;\n      }\n    }\n\n    if (secureKey) {\n      oidcProvider.app.keys = secureKey;\n    }\n\n    this.raw = oidcProvider;\n\n    if (allowHttpLocalhost) {\n      this.allowHttpLocalhost();\n    }\n\n    OIDC_ERROR_EVENTS.map((event) => {\n      this.raw.on(event, this.createErrorHandler(event));\n    });\n\n    await this.injector.emit(\"$onCreateOIDC\", this.raw);\n\n    return this.raw;\n  }\n\n  private createErrorHandler(event: string) {\n    return (ctx: KoaContextWithOIDC, error: any, accountId?: string, sid?: string) => {\n      this.logger.error({\n        event: \"OIDC_ERROR\",\n        type: event,\n        error: {\n          error_name: error.error,\n          error_description: error.error_description,\n          error_detail: error.error_detail\n        },\n        account_id: accountId,\n        params: ctx.oidc.params,\n        headers: ctx.headers,\n        sid\n      });\n\n      // TODO see if we need to call platformExceptions\n      // this.platformExceptions.catch(error, ctx.request.$ctx);\n    };\n  }\n\n  public createPrompt(instance: InteractionMethods, options: OidcInteractionOptions) {\n    const {checks: originalChecks = [], details, ...promptOptions} = options;\n    const checks = [...(instance.checks ? instance.checks() : originalChecks)].filter(Boolean);\n\n    return new interactionPolicy.Prompt(promptOptions, instance.details ? instance.details.bind(instance) : details, ...checks);\n  }\n\n  private getInteractionsUrl() {\n    const provider = this.injector.getProviders().find((provider) => provider.subType === INTERACTIONS);\n\n    if (provider) {\n      return (ctx: any, interaction: any) => {\n        // eslint-disable-line no-unused-vars\n        return provider.path.replace(/:uid/, interaction.uid);\n      };\n    }\n  }\n\n  private allowHttpLocalhost() {\n    const {invalidate: orig} = (this.raw.Client as any).Schema.prototype;\n\n    (this.raw.Client as any).Schema.prototype.invalidate = function invalidate(message: string, code: string) {\n      if (code === \"implicit-force-https\" || code === \"implicit-forbid-localhost\") {\n        return;\n      }\n\n      /* istanbul ignore next */\n      return orig.call(this, message);\n    };\n  }\n\n  private getPolicy() {\n    const policy = interactionPolicy.base();\n    const interactions = this.oidcInteractions.getInteractions();\n\n    if (interactions.length) {\n      interactions.forEach((provider) => {\n        const instance = this.injector.get<InteractionMethods>(provider.token)!;\n        const options = provider.store.get(\"interactionOptions\");\n\n        if (!policy.get(options.name)) {\n          const prompt = this.createPrompt(instance, options);\n\n          policy.add(prompt, options.priority);\n        }\n\n        if (instance.$onCreate) {\n          instance.$onCreate(policy.get(options.name)!);\n        }\n      });\n    }\n\n    return this.injector.alter(\"$alterOidcPolicy\", policy);\n  }\n\n  get logger() {\n    return this.$ctx?.logger || this.injector.logger;\n  }\n}\n"]}

package/lib/cjs/utils/events.js

@@ -0,0 +1,61 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.OIDC_ERROR_EVENTS = exports.OIDC_EVENTS = void 0;
+exports.OIDC_EVENTS = [
+    "access_token.destroyed",
+    "access_token.saved",
+    "access_token.issued",
+    "authorization_code.consumed",
+    "authorization_code.destroyed",
+    "authorization_code.saved",
+    "authorization.accepted",
+    "authorization.error",
+    "authorization.success",
+    "backchannel.error",
+    "backchannel.success",
+    "jwks.error",
+    "client_credentials.destroyed",
+    "client_credentials.saved",
+    "client_credentials.issued",
+    "device_code.consumed",
+    "device_code.destroyed",
+    "device_code.saved",
+    "discovery.error",
+    "end_session.error",
+    "end_session.success",
+    "grant.error",
+    "grant.revoked",
+    "grant.success",
+    "initial_access_token.destroyed",
+    "initial_access_token.saved",
+    "interaction.destroyed",
+    "interaction.ended",
+    "interaction.saved",
+    "interaction.started",
+    "introspection.error",
+    "replay_detection.destroyed",
+    "replay_detection.saved",
+    "pushed_authorization_request.error",
+    "pushed_authorization_request.success",
+    "pushed_authorization_request.destroyed",
+    "pushed_authorization_request.saved",
+    "refresh_token.consumed",
+    "refresh_token.destroyed",
+    "refresh_token.saved",
+    "registration_access_token.destroyed",
+    "registration_access_token.saved",
+    "registration_create.error",
+    "registration_create.success",
+    "registration_delete.error",
+    "registration_delete.success",
+    "registration_read.error",
+    "registration_update.error",
+    "registration_update.success",
+    "revocation.error",
+    "server_error",
+    "session.destroyed",
+    "session.saved",
+    "userinfo.error"
+];
+exports.OIDC_ERROR_EVENTS = exports.OIDC_EVENTS.filter((e) => e.includes("error"));
+//# sourceMappingURL=events.js.map

package/lib/cjs/utils/events.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"events.js","sourceRoot":"","sources":["../../../src/utils/events.ts"],"names":[],"mappings":";;;AAAa,QAAA,WAAW,GAAG;IACzB,wBAAwB;IACxB,oBAAoB;IACpB,qBAAqB;IACrB,6BAA6B;IAC7B,8BAA8B;IAC9B,0BAA0B;IAC1B,wBAAwB;IACxB,qBAAqB;IACrB,uBAAuB;IACvB,mBAAmB;IACnB,qBAAqB;IACrB,YAAY;IACZ,8BAA8B;IAC9B,0BAA0B;IAC1B,2BAA2B;IAC3B,sBAAsB;IACtB,uBAAuB;IACvB,mBAAmB;IACnB,iBAAiB;IACjB,mBAAmB;IACnB,qBAAqB;IACrB,aAAa;IACb,eAAe;IACf,eAAe;IACf,gCAAgC;IAChC,4BAA4B;IAC5B,uBAAuB;IACvB,mBAAmB;IACnB,mBAAmB;IACnB,qBAAqB;IACrB,qBAAqB;IACrB,4BAA4B;IAC5B,wBAAwB;IACxB,oCAAoC;IACpC,sCAAsC;IACtC,wCAAwC;IACxC,oCAAoC;IACpC,wBAAwB;IACxB,yBAAyB;IACzB,qBAAqB;IACrB,qCAAqC;IACrC,iCAAiC;IACjC,2BAA2B;IAC3B,6BAA6B;IAC7B,2BAA2B;IAC3B,6BAA6B;IAC7B,yBAAyB;IACzB,2BAA2B;IAC3B,6BAA6B;IAC7B,kBAAkB;IAClB,cAAc;IACd,mBAAmB;IACnB,eAAe;IACf,gBAAgB;CACjB,CAAC;AAEW,QAAA,iBAAiB,GAAG,mBAAW,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC","sourcesContent":["export const OIDC_EVENTS = [\n  \"access_token.destroyed\",\n  \"access_token.saved\",\n  \"access_token.issued\",\n  \"authorization_code.consumed\",\n  \"authorization_code.destroyed\",\n  \"authorization_code.saved\",\n  \"authorization.accepted\",\n  \"authorization.error\",\n  \"authorization.success\",\n  \"backchannel.error\",\n  \"backchannel.success\",\n  \"jwks.error\",\n  \"client_credentials.destroyed\",\n  \"client_credentials.saved\",\n  \"client_credentials.issued\",\n  \"device_code.consumed\",\n  \"device_code.destroyed\",\n  \"device_code.saved\",\n  \"discovery.error\",\n  \"end_session.error\",\n  \"end_session.success\",\n  \"grant.error\",\n  \"grant.revoked\",\n  \"grant.success\",\n  \"initial_access_token.destroyed\",\n  \"initial_access_token.saved\",\n  \"interaction.destroyed\",\n  \"interaction.ended\",\n  \"interaction.saved\",\n  \"interaction.started\",\n  \"introspection.error\",\n  \"replay_detection.destroyed\",\n  \"replay_detection.saved\",\n  \"pushed_authorization_request.error\",\n  \"pushed_authorization_request.success\",\n  \"pushed_authorization_request.destroyed\",\n  \"pushed_authorization_request.saved\",\n  \"refresh_token.consumed\",\n  \"refresh_token.destroyed\",\n  \"refresh_token.saved\",\n  \"registration_access_token.destroyed\",\n  \"registration_access_token.saved\",\n  \"registration_create.error\",\n  \"registration_create.success\",\n  \"registration_delete.error\",\n  \"registration_delete.success\",\n  \"registration_read.error\",\n  \"registration_update.error\",\n  \"registration_update.success\",\n  \"revocation.error\",\n  \"server_error\",\n  \"session.destroyed\",\n  \"session.saved\",\n  \"userinfo.error\"\n];\n\nexport const OIDC_ERROR_EVENTS = OIDC_EVENTS.filter((e) => e.includes(\"error\"));\n"]}

package/lib/esm/index.js

@@ -30,4 +30,5 @@ export * from "./services/OidcInteractions.js";
 export * from "./services/OidcJwks.js";
 export * from "./services/OidcProvider.js";
 export * from "./utils/debug.js";
+export * from "./utils/events.js";
 //# sourceMappingURL=index.js.map

package/lib/esm/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/index.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,cAAc,cAAc,CAAC;AAC7B,cAAc,uBAAuB,CAAC;AACtC,cAAc,sBAAsB,CAAC;AACrC,cAAc,0BAA0B,CAAC;AACzC,cAAc,2BAA2B,CAAC;AAC1C,cAAc,sBAAsB,CAAC;AACrC,cAAc,sBAAsB,CAAC;AACrC,cAAc,0BAA0B,CAAC;AACzC,cAAc,qBAAqB,CAAC;AACpC,cAAc,qBAAqB,CAAC;AACpC,cAAc,kBAAkB,CAAC;AACjC,cAAc,6BAA6B,CAAC;AAC5C,cAAc,8BAA8B,CAAC;AAC7C,cAAc,iCAAiC,CAAC;AAChD,cAAc,0BAA0B,CAAC;AACzC,cAAc,iCAAiC,CAAC;AAChD,cAAc,iCAAiC,CAAC;AAChD,cAAc,qCAAqC,CAAC;AACpD,cAAc,uBAAuB,CAAC;AACtC,cAAc,qBAAqB,CAAC;AACpC,cAAc,yCAAyC,CAAC;AACxD,cAAc,qCAAqC,CAAC;AACpD,cAAc,oCAAoC,CAAC;AACnD,cAAc,yBAAyB,CAAC;AACxC,cAAc,mCAAmC,CAAC;AAClD,cAAc,6BAA6B,CAAC;AAC5C,cAAc,qBAAqB,CAAC;AACpC,cAAc,yBAAyB,CAAC;AACxC,cAAc,eAAe,CAAC","sourcesContent":["/**\n * @file Automatically generated by barrelsby.\n */\n\nexport * from \"./OidcModule\";\nexport * from \"./constants/constants\";\nexport * from \"./decorators/grantId\";\nexport * from \"./decorators/interaction\";\nexport * from \"./decorators/interactions\";\nexport * from \"./decorators/noCache\";\nexport * from \"./decorators/oidcCtx\";\nexport * from \"./decorators/oidcSession\";\nexport * from \"./decorators/params\";\nexport * from \"./decorators/prompt\";\nexport * from \"./decorators/uid\";\nexport * from \"./domain/InteractionMethods\";\nexport * from \"./domain/OidcAccountsMethods\";\nexport * from \"./domain/OidcBadInteractionName\";\nexport * from \"./domain/OidcInteraction\";\nexport * from \"./domain/OidcInteractionMethods\";\nexport * from \"./domain/OidcInteractionOptions\";\nexport * from \"./domain/OidcInteractionPromptProps\";\nexport * from \"./domain/OidcSettings\";\nexport * from \"./domain/interfaces\";\nexport * from \"./middlewares/OidcInteractionMiddleware\";\nexport * from \"./middlewares/OidcNoCacheMiddleware\";\nexport * from \"./middlewares/OidcSecureMiddleware\";\nexport * from \"./services/OidcAdapters\";\nexport * from \"./services/OidcInteractionContext\";\nexport * from \"./services/OidcInteractions\";\nexport * from \"./services/OidcJwks\";\nexport * from \"./services/OidcProvider\";\nexport * from \"./utils/debug\";\n"]}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/index.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,cAAc,cAAc,CAAC;AAC7B,cAAc,uBAAuB,CAAC;AACtC,cAAc,sBAAsB,CAAC;AACrC,cAAc,0BAA0B,CAAC;AACzC,cAAc,2BAA2B,CAAC;AAC1C,cAAc,sBAAsB,CAAC;AACrC,cAAc,sBAAsB,CAAC;AACrC,cAAc,0BAA0B,CAAC;AACzC,cAAc,qBAAqB,CAAC;AACpC,cAAc,qBAAqB,CAAC;AACpC,cAAc,kBAAkB,CAAC;AACjC,cAAc,6BAA6B,CAAC;AAC5C,cAAc,8BAA8B,CAAC;AAC7C,cAAc,iCAAiC,CAAC;AAChD,cAAc,0BAA0B,CAAC;AACzC,cAAc,iCAAiC,CAAC;AAChD,cAAc,iCAAiC,CAAC;AAChD,cAAc,qCAAqC,CAAC;AACpD,cAAc,uBAAuB,CAAC;AACtC,cAAc,qBAAqB,CAAC;AACpC,cAAc,yCAAyC,CAAC;AACxD,cAAc,qCAAqC,CAAC;AACpD,cAAc,oCAAoC,CAAC;AACnD,cAAc,yBAAyB,CAAC;AACxC,cAAc,mCAAmC,CAAC;AAClD,cAAc,6BAA6B,CAAC;AAC5C,cAAc,qBAAqB,CAAC;AACpC,cAAc,yBAAyB,CAAC;AACxC,cAAc,eAAe,CAAC;AAC9B,cAAc,gBAAgB,CAAC","sourcesContent":["/**\n * @file Automatically generated by barrelsby.\n */\n\nexport * from \"./OidcModule\";\nexport * from \"./constants/constants\";\nexport * from \"./decorators/grantId\";\nexport * from \"./decorators/interaction\";\nexport * from \"./decorators/interactions\";\nexport * from \"./decorators/noCache\";\nexport * from \"./decorators/oidcCtx\";\nexport * from \"./decorators/oidcSession\";\nexport * from \"./decorators/params\";\nexport * from \"./decorators/prompt\";\nexport * from \"./decorators/uid\";\nexport * from \"./domain/InteractionMethods\";\nexport * from \"./domain/OidcAccountsMethods\";\nexport * from \"./domain/OidcBadInteractionName\";\nexport * from \"./domain/OidcInteraction\";\nexport * from \"./domain/OidcInteractionMethods\";\nexport * from \"./domain/OidcInteractionOptions\";\nexport * from \"./domain/OidcInteractionPromptProps\";\nexport * from \"./domain/OidcSettings\";\nexport * from \"./domain/interfaces\";\nexport * from \"./middlewares/OidcInteractionMiddleware\";\nexport * from \"./middlewares/OidcNoCacheMiddleware\";\nexport * from \"./middlewares/OidcSecureMiddleware\";\nexport * from \"./services/OidcAdapters\";\nexport * from \"./services/OidcInteractionContext\";\nexport * from \"./services/OidcInteractions\";\nexport * from \"./services/OidcJwks\";\nexport * from \"./services/OidcProvider\";\nexport * from \"./utils/debug\";\nexport * from \"./utils/events\";\n"]}

package/lib/esm/services/OidcProvider.js

@@ -1,9 +1,10 @@
 import { __decorate, __metadata } from "tslib";
-import { PlatformApplication } from "@tsed/common";
+import { InjectContext, PlatformApplication, PlatformContext } from "@tsed/common";
 import { Env, setValue } from "@tsed/core";
 import { Constant, Inject, Injectable, InjectorService } from "@tsed/di";
 import { interactionPolicy, Provider as OIDCProvider } from "oidc-provider";
 import { INTERACTIONS } from "../constants/constants.js";
+import { OIDC_ERROR_EVENTS } from "../utils/events.js";
 import { OidcAdapters } from "./OidcAdapters.js";
 import { OidcInteractions } from "./OidcInteractions.js";
 import { OidcJwks } from "./OidcJwks.js";
@@ -20,6 +21,7 @@ let OidcProvider = class OidcProvider {
     adapters;
     injector;
     app;
+    $ctx;
     hasConfiguration() {
         return !!this.oidc;
     }
@@ -92,9 +94,31 @@ let OidcProvider = class OidcProvider {
         if (allowHttpLocalhost) {
             this.allowHttpLocalhost();
         }
+        OIDC_ERROR_EVENTS.map((event) => {
+            this.raw.on(event, this.createErrorHandler(event));
+        });
         await this.injector.emit("$onCreateOIDC", this.raw);
         return this.raw;
     }
+    createErrorHandler(event) {
+        return (ctx, error, accountId, sid) => {
+            this.logger.error({
+                event: "OIDC_ERROR",
+                type: event,
+                error: {
+                    error_name: error.error,
+                    error_description: error.error_description,
+                    error_detail: error.error_detail
+                },
+                account_id: accountId,
+                params: ctx.oidc.params,
+                headers: ctx.headers,
+                sid
+            });
+            // TODO see if we need to call platformExceptions
+            // this.platformExceptions.catch(error, ctx.request.$ctx);
+        };
+    }
     createPrompt(instance, options) {
         const { checks: originalChecks = [], details, ...promptOptions } = options;
         const checks = [...(instance.checks ? instance.checks() : originalChecks)].filter(Boolean);
@@ -137,6 +161,9 @@ let OidcProvider = class OidcProvider {
         }
         return this.injector.alter("$alterOidcPolicy", policy);
     }
+    get logger() {
+        return this.$ctx?.logger || this.injector.logger;
+    }
 };
 __decorate([
     Constant("env"),
@@ -182,6 +209,10 @@ __decorate([
     Inject(),
     __metadata("design:type", PlatformApplication)
 ], OidcProvider.prototype, "app", void 0);
+__decorate([
+    InjectContext(),
+    __metadata("design:type", PlatformContext)
+], OidcProvider.prototype, "$ctx", void 0);
 OidcProvider = __decorate([
     Injectable()
 ], OidcProvider);

package/lib/esm/services/OidcProvider.js.map

@@ -1 +1 @@
-{"version":3,"file":"OidcProvider.js","sourceRoot":"","sources":["../../../src/services/OidcProvider.ts"],"names":[],"mappings":";AAAA,OAAO,EAAC,mBAAmB,EAAC,MAAM,cAAc,CAAC;AACjD,OAAO,EAAC,GAAG,EAAE,QAAQ,EAAC,MAAM,YAAY,CAAC;AACzC,OAAO,EAAC,QAAQ,EAAE,MAAM,EAAE,UAAU,EAAE,eAAe,EAAC,MAAM,UAAU,CAAC;AACvE,OAAO,EAAgB,iBAAiB,EAAE,QAAQ,IAAI,YAAY,EAAC,MAAM,eAAe,CAAC;AACzF,OAAO,EAAC,YAAY,EAAC,MAAM,wBAAwB,CAAC;AAKpD,OAAO,EAAC,YAAY,EAAC,MAAM,gBAAgB,CAAC;AAC5C,OAAO,EAAC,gBAAgB,EAAC,MAAM,oBAAoB,CAAC;AACpD,OAAO,EAAC,QAAQ,EAAC,MAAM,YAAY,CAAC;AAGpC,IAAa,YAAY,GAAzB,MAAa,YAAY;IACvB,GAAG,CAAe;IAGR,GAAG,CAAM;IAGT,QAAQ,CAAkB;IAG1B,SAAS,CAAkB;IAG3B,MAAM,CAAS;IAGf,IAAI,CAAe;IAGnB,YAAY,CAAS;IAGrB,QAAQ,CAAW;IAGnB,gBAAgB,CAAmB;IAGnC,QAAQ,CAAe;IAGvB,QAAQ,CAAkB;IAG1B,GAAG,CAAsB;IAEnC,gBAAgB;QACd,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC;IACrB,CAAC;IAED,KAAK,CAAC,gBAAgB;QACpB,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,EAAE,IAAI,CAAC,QAAQ,CAAC,kBAAkB,EAAE,CAAC,CAAC,CAAC;QACzG,MAAM,EACJ,MAAM,EACN,QAAQ,EACR,SAAS,EACT,KAAK,EACL,QAAQ,EACR,aAAa,GAAG,IAAI,CAAC,GAAG,IAAI,GAAG,CAAC,IAAI,EACpC,OAAO,EACP,cAAc,EACd,GAAG,OAAO,EACX,GAAG,IAAI,CAAC,IAAI,CAAC;QAEd,MAAM,aAAa,GAAkB;YACnC,YAAY,EAAE;gBACZ,0BAA0B;gBAC1B,GAAG,EAAE,CAAC,GAAG,EAAE,WAAW,EAAE,EAAE,CAAC,eAAe,WAAW,CAAC,GAAG,EAAE;aAC5D;YACD,GAAG,OAAO;YACV,OAAO;YACP,IAAI;SACL,CAAC;QAEF,IAAI,QAAQ,EAAE;YACZ,aAAa,CAAC,WAAW,GAAG,CAAC,GAAG,EAAE,EAAE,EAAE,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAsB,QAAQ,CAAE,CAAC,WAAW,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC;SAC1H;QAED,IAAI,aAAa,EAAE;YACjB,QAAQ,CAAC,aAAa,EAAE,sBAAsB,EAAE,IAAI,CAAC,CAAC;YACtD,QAAQ,CAAC,aAAa,EAAE,qBAAqB,EAAE,IAAI,CAAC,CAAC;SACtD;QAED,MAAM,MAAM,GAAG,IAAI,CAAC,SAAS,EAAE,CAAC;QAChC,IAAI,MAAM,EAAE;YACV,QAAQ,CAAC,aAAa,EAAE,qBAAqB,EAAE,MAAM,CAAC,CAAC;SACxD;QAED,MAAM,GAAG,GAAG,IAAI,CAAC,kBAAkB,EAAE,CAAC;QACtC,IAAI,GAAG,EAAE;YACP,QAAQ,CAAC,aAAa,EAAE,kBAAkB,EAAE,GAAG,CAAC,CAAC;SAClD;QAED,OAAO,aAAa,CAAC;IACvB,CAAC;IAED,SAAS;QACP,IAAI,IAAI,CAAC,MAAM,EAAE;YACf,OAAO,IAAI,CAAC,MAAM,CAAC;SACpB;QAED,uBAAuB;QACvB,IAAI,IAAI,CAAC,SAAS,EAAE;YAClB,OAAO,qBAAqB,IAAI,CAAC,SAAS,EAAE,CAAC;SAC9C;QAED,OAAO,oBAAoB,IAAI,CAAC,QAAQ,EAAE,CAAC;IAC7C,CAAC;IAED,GAAG;QACD,OAAO,IAAI,CAAC,GAAG,CAAC;IAClB,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,MAAM;QACV,MAAM,EAAC,KAAK,GAAG,IAAI,CAAC,GAAG,KAAK,GAAG,CAAC,IAAI,EAAE,SAAS,EAAE,kBAAkB,GAAG,IAAI,CAAC,GAAG,KAAK,GAAG,CAAC,IAAI,EAAC,GAAG,IAAI,CAAC,IAAI,CAAC;QACzG,MAAM,aAAa,GAAG,MAAM,IAAI,CAAC,gBAAgB,EAAE,CAAC;QAEpD,MAAM,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,yBAAyB,EAAE,aAAa,CAAC,CAAC;QAEzE,MAAM,YAAY,GAAG,IAAI,YAAY,CAAC,IAAI,CAAC,SAAS,EAAE,EAAE,aAAa,CAAC,CAAC;QAEvE,IAAI,KAAK,EAAE;YACT,uBAAuB;YACvB,QAAQ,IAAI,CAAC,YAAY,EAAE;gBACzB,QAAQ;gBACR,KAAK,SAAS;oBACZ,YAAY,CAAC,KAAK,GAAG,IAAI,CAAC;oBAC1B,MAAM;gBACR,KAAK,KAAK;oBACP,IAAI,CAAC,GAAG,CAAC,MAAc,CAAC,KAAK,GAAG,IAAI,CAAC;oBACtC,MAAM;aACT;SACF;QAED,IAAI,SAAS,EAAE;YACb,YAAY,CAAC,GAAG,CAAC,IAAI,GAAG,SAAS,CAAC;SACnC;QAED,IAAI,CAAC,GAAG,GAAG,YAAY,CAAC;QAExB,IAAI,kBAAkB,EAAE;YACtB,IAAI,CAAC,kBAAkB,EAAE,CAAC;SAC3B;QAED,MAAM,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,eAAe,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC;QAEpD,OAAO,IAAI,CAAC,GAAG,CAAC;IAClB,CAAC;IAEM,YAAY,CAAC,QAA4B,EAAE,OAA+B;QAC/E,MAAM,EAAC,MAAM,EAAE,cAAc,GAAG,EAAE,EAAE,OAAO,EAAE,GAAG,aAAa,EAAC,GAAG,OAAO,CAAC;QACzE,MAAM,MAAM,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QAE3F,OAAO,IAAI,iBAAiB,CAAC,MAAM,CAAC,aAAa,EAAE,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,OAAO,EAAE,GAAG,MAAM,CAAC,CAAC;IAC9H,CAAC;IAEO,kBAAkB;QACxB,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,YAAY,EAAE,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,OAAO,KAAK,YAAY,CAAC,CAAC;QAEpG,IAAI,QAAQ,EAAE;YACZ,OAAO,CAAC,GAAQ,EAAE,WAAgB,EAAE,EAAE;gBACpC,qCAAqC;gBACrC,OAAO,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,WAAW,CAAC,GAAG,CAAC,CAAC;YACxD,CAAC,CAAC;SACH;IACH,CAAC;IAEO,kBAAkB;QACxB,MAAM,EAAC,UAAU,EAAE,IAAI,EAAC,GAAI,IAAI,CAAC,GAAG,CAAC,MAAc,CAAC,MAAM,CAAC,SAAS,CAAC;QAEpE,IAAI,CAAC,GAAG,CAAC,MAAc,CAAC,MAAM,CAAC,SAAS,CAAC,UAAU,GAAG,SAAS,UAAU,CAAC,OAAe,EAAE,IAAY;YACtG,IAAI,IAAI,KAAK,sBAAsB,IAAI,IAAI,KAAK,2BAA2B,EAAE;gBAC3E,OAAO;aACR;YAED,0BAA0B;YAC1B,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QAClC,CAAC,CAAC;IACJ,CAAC;IAEO,SAAS;QACf,MAAM,MAAM,GAAG,iBAAiB,CAAC,IAAI,EAAE,CAAC;QACxC,MAAM,YAAY,GAAG,IAAI,CAAC,gBAAgB,CAAC,eAAe,EAAE,CAAC;QAE7D,IAAI,YAAY,CAAC,MAAM,EAAE;YACvB,YAAY,CAAC,OAAO,CAAC,CAAC,QAAQ,EAAE,EAAE;gBAChC,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAqB,QAAQ,CAAC,KAAK,CAAE,CAAC;gBACxE,MAAM,OAAO,GAAG,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,oBAAoB,CAAC,CAAC;gBAEzD,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE;oBAC7B,MAAM,MAAM,GAAG,IAAI,CAAC,YAAY,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;oBAEpD,MAAM,CAAC,GAAG,CAAC,MAAM,EAAE,OAAO,CAAC,QAAQ,CAAC,CAAC;iBACtC;gBAED,IAAI,QAAQ,CAAC,SAAS,EAAE;oBACtB,QAAQ,CAAC,SAAS,CAAC,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,CAAE,CAAC,CAAC;iBAC/C;YACH,CAAC,CAAC,CAAC;SACJ;QAED,OAAO,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,kBAAkB,EAAE,MAAM,CAAC,CAAC;IACzD,CAAC;CACF,CAAA;AAhMC;IADC,QAAQ,CAAC,KAAK,CAAC;;yCACG;AAGnB;IADC,QAAQ,CAAC,UAAU,CAAC;;8CACe;AAGpC;IADC,QAAQ,CAAC,WAAW,CAAC;;+CACe;AAGrC;IADC,QAAQ,CAAC,aAAa,EAAE,EAAE,CAAC;;4CACH;AAGzB;IADC,QAAQ,CAAC,MAAM,CAAC;;0CACY;AAG7B;IADC,QAAQ,CAAC,eAAe,CAAC;;kDACK;AAG/B;IADC,MAAM,EAAE;8BACW,QAAQ;8CAAC;AAG7B;IADC,MAAM,EAAE;8BACmB,gBAAgB;sDAAC;AAG7C;IADC,MAAM,EAAE;8BACW,YAAY;8CAAC;AAGjC;IADC,MAAM,EAAE;8BACW,eAAe;8CAAC;AAGpC;IADC,MAAM,EAAE;8BACM,mBAAmB;yCAAC;AAlCxB,YAAY;IADxB,UAAU,EAAE;GACA,YAAY,CAoMxB;SApMY,YAAY","sourcesContent":["import {PlatformApplication} from \"@tsed/common\";\nimport {Env, setValue} from \"@tsed/core\";\nimport {Constant, Inject, Injectable, InjectorService} from \"@tsed/di\";\nimport {Configuration, interactionPolicy, Provider as OIDCProvider} from \"oidc-provider\";\nimport {INTERACTIONS} from \"../constants/constants\";\nimport {InteractionMethods} from \"../domain/InteractionMethods\";\nimport {OidcAccountsMethods} from \"../domain/OidcAccountsMethods\";\nimport {OidcInteractionOptions} from \"../domain/OidcInteractionOptions\";\nimport {OidcSettings} from \"../domain/OidcSettings\";\nimport {OidcAdapters} from \"./OidcAdapters\";\nimport {OidcInteractions} from \"./OidcInteractions\";\nimport {OidcJwks} from \"./OidcJwks\";\n\n@Injectable()\nexport class OidcProvider {\n  raw: OIDCProvider;\n\n  @Constant(\"env\")\n  protected env: Env;\n\n  @Constant(\"httpPort\")\n  protected httpPort: number | string;\n\n  @Constant(\"httpsPort\")\n  protected httpsPort: number | string;\n\n  @Constant(\"oidc.issuer\", \"\")\n  protected issuer: string;\n\n  @Constant(\"oidc\")\n  protected oidc: OidcSettings;\n\n  @Constant(\"PLATFORM_NAME\")\n  protected platformName: string;\n\n  @Inject()\n  protected oidcJwks: OidcJwks;\n\n  @Inject()\n  protected oidcInteractions: OidcInteractions;\n\n  @Inject()\n  protected adapters: OidcAdapters;\n\n  @Inject()\n  protected injector: InjectorService;\n\n  @Inject()\n  protected app: PlatformApplication;\n\n  hasConfiguration() {\n    return !!this.oidc;\n  }\n\n  async getConfiguration(): Promise<Configuration> {\n    const [jwks, adapter] = await Promise.all([this.oidcJwks.getJwks(), this.adapters.createAdapterClass()]);\n    const {\n      issuer,\n      jwksPath,\n      secureKey,\n      proxy,\n      Accounts,\n      secureCookies = this.env == Env.PROD,\n      Adapter,\n      connectionName,\n      ...options\n    } = this.oidc;\n\n    const configuration: Configuration = {\n      interactions: {\n        /* istanbul ignore next */\n        url: (ctx, interaction) => `interaction/${interaction.uid}`\n      },\n      ...options,\n      adapter,\n      jwks\n    };\n\n    if (Accounts) {\n      configuration.findAccount = (ctx, id, token) => this.injector.get<OidcAccountsMethods>(Accounts)!.findAccount(id, token);\n    }\n\n    if (secureCookies) {\n      setValue(configuration, \"cookies.short.secure\", true);\n      setValue(configuration, \"cookies.long.secure\", true);\n    }\n\n    const policy = this.getPolicy();\n    if (policy) {\n      setValue(configuration, \"interactions.policy\", policy);\n    }\n\n    const url = this.getInteractionsUrl();\n    if (url) {\n      setValue(configuration, \"interactions.url\", url);\n    }\n\n    return configuration;\n  }\n\n  getIssuer() {\n    if (this.issuer) {\n      return this.issuer;\n    }\n\n    // istanbul ignore next\n    if (this.httpsPort) {\n      return `https://localhost:${this.httpsPort}`;\n    }\n\n    return `http://localhost:${this.httpPort}`;\n  }\n\n  get(): OIDCProvider {\n    return this.raw;\n  }\n\n  /**\n   * Create a new instance of OidcProvider\n   */\n  async create(): Promise<void | OIDCProvider> {\n    const {proxy = this.env === Env.PROD, secureKey, allowHttpLocalhost = this.env !== Env.PROD} = this.oidc;\n    const configuration = await this.getConfiguration();\n\n    await this.injector.alterAsync(\"$alterOidcConfiguration\", configuration);\n\n    const oidcProvider = new OIDCProvider(this.getIssuer(), configuration);\n\n    if (proxy) {\n      // istanbul ignore next\n      switch (this.platformName) {\n        default:\n        case \"express\":\n          oidcProvider.proxy = true;\n          break;\n        case \"koa\":\n          (this.app.rawApp as any).proxy = true;\n          break;\n      }\n    }\n\n    if (secureKey) {\n      oidcProvider.app.keys = secureKey;\n    }\n\n    this.raw = oidcProvider;\n\n    if (allowHttpLocalhost) {\n      this.allowHttpLocalhost();\n    }\n\n    await this.injector.emit(\"$onCreateOIDC\", this.raw);\n\n    return this.raw;\n  }\n\n  public createPrompt(instance: InteractionMethods, options: OidcInteractionOptions) {\n    const {checks: originalChecks = [], details, ...promptOptions} = options;\n    const checks = [...(instance.checks ? instance.checks() : originalChecks)].filter(Boolean);\n\n    return new interactionPolicy.Prompt(promptOptions, instance.details ? instance.details.bind(instance) : details, ...checks);\n  }\n\n  private getInteractionsUrl() {\n    const provider = this.injector.getProviders().find((provider) => provider.subType === INTERACTIONS);\n\n    if (provider) {\n      return (ctx: any, interaction: any) => {\n        // eslint-disable-line no-unused-vars\n        return provider.path.replace(/:uid/, interaction.uid);\n      };\n    }\n  }\n\n  private allowHttpLocalhost() {\n    const {invalidate: orig} = (this.raw.Client as any).Schema.prototype;\n\n    (this.raw.Client as any).Schema.prototype.invalidate = function invalidate(message: string, code: string) {\n      if (code === \"implicit-force-https\" || code === \"implicit-forbid-localhost\") {\n        return;\n      }\n\n      /* istanbul ignore next */\n      return orig.call(this, message);\n    };\n  }\n\n  private getPolicy() {\n    const policy = interactionPolicy.base();\n    const interactions = this.oidcInteractions.getInteractions();\n\n    if (interactions.length) {\n      interactions.forEach((provider) => {\n        const instance = this.injector.get<InteractionMethods>(provider.token)!;\n        const options = provider.store.get(\"interactionOptions\");\n\n        if (!policy.get(options.name)) {\n          const prompt = this.createPrompt(instance, options);\n\n          policy.add(prompt, options.priority);\n        }\n\n        if (instance.$onCreate) {\n          instance.$onCreate(policy.get(options.name)!);\n        }\n      });\n    }\n\n    return this.injector.alter(\"$alterOidcPolicy\", policy);\n  }\n}\n"]}
+{"version":3,"file":"OidcProvider.js","sourceRoot":"","sources":["../../../src/services/OidcProvider.ts"],"names":[],"mappings":";AAAA,OAAO,EAAC,aAAa,EAAE,mBAAmB,EAAE,eAAe,EAAC,MAAM,cAAc,CAAC;AACjF,OAAO,EAAC,GAAG,EAAE,QAAQ,EAAC,MAAM,YAAY,CAAC;AACzC,OAAO,EAAC,QAAQ,EAAE,MAAM,EAAE,UAAU,EAAE,eAAe,EAAC,MAAM,UAAU,CAAC;AACvE,OAAO,EAAgB,iBAAiB,EAAsB,QAAQ,IAAI,YAAY,EAAC,MAAM,eAAe,CAAC;AAC7G,OAAO,EAAC,YAAY,EAAC,MAAM,wBAAwB,CAAC;AAKpD,OAAO,EAAC,iBAAiB,EAAC,MAAM,iBAAiB,CAAC;AAClD,OAAO,EAAC,YAAY,EAAC,MAAM,gBAAgB,CAAC;AAC5C,OAAO,EAAC,gBAAgB,EAAC,MAAM,oBAAoB,CAAC;AACpD,OAAO,EAAC,QAAQ,EAAC,MAAM,YAAY,CAAC;AAGpC,IAAa,YAAY,GAAzB,MAAa,YAAY;IACvB,GAAG,CAAe;IAGR,GAAG,CAAM;IAGT,QAAQ,CAAkB;IAG1B,SAAS,CAAkB;IAG3B,MAAM,CAAS;IAGf,IAAI,CAAe;IAGnB,YAAY,CAAS;IAGrB,QAAQ,CAAW;IAGnB,gBAAgB,CAAmB;IAGnC,QAAQ,CAAe;IAGvB,QAAQ,CAAkB;IAG1B,GAAG,CAAsB;IAGzB,IAAI,CAAmB;IAEjC,gBAAgB;QACd,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC;IACrB,CAAC;IAED,KAAK,CAAC,gBAAgB;QACpB,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,EAAE,IAAI,CAAC,QAAQ,CAAC,kBAAkB,EAAE,CAAC,CAAC,CAAC;QACzG,MAAM,EACJ,MAAM,EACN,QAAQ,EACR,SAAS,EACT,KAAK,EACL,QAAQ,EACR,aAAa,GAAG,IAAI,CAAC,GAAG,IAAI,GAAG,CAAC,IAAI,EACpC,OAAO,EACP,cAAc,EACd,GAAG,OAAO,EACX,GAAG,IAAI,CAAC,IAAI,CAAC;QAEd,MAAM,aAAa,GAAkB;YACnC,YAAY,EAAE;gBACZ,0BAA0B;gBAC1B,GAAG,EAAE,CAAC,GAAG,EAAE,WAAW,EAAE,EAAE,CAAC,eAAe,WAAW,CAAC,GAAG,EAAE;aAC5D;YACD,GAAG,OAAO;YACV,OAAO;YACP,IAAI;SACL,CAAC;QAEF,IAAI,QAAQ,EAAE;YACZ,aAAa,CAAC,WAAW,GAAG,CAAC,GAAG,EAAE,EAAE,EAAE,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAsB,QAAQ,CAAE,CAAC,WAAW,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC;SAC1H;QAED,IAAI,aAAa,EAAE;YACjB,QAAQ,CAAC,aAAa,EAAE,sBAAsB,EAAE,IAAI,CAAC,CAAC;YACtD,QAAQ,CAAC,aAAa,EAAE,qBAAqB,EAAE,IAAI,CAAC,CAAC;SACtD;QAED,MAAM,MAAM,GAAG,IAAI,CAAC,SAAS,EAAE,CAAC;QAChC,IAAI,MAAM,EAAE;YACV,QAAQ,CAAC,aAAa,EAAE,qBAAqB,EAAE,MAAM,CAAC,CAAC;SACxD;QAED,MAAM,GAAG,GAAG,IAAI,CAAC,kBAAkB,EAAE,CAAC;QACtC,IAAI,GAAG,EAAE;YACP,QAAQ,CAAC,aAAa,EAAE,kBAAkB,EAAE,GAAG,CAAC,CAAC;SAClD;QAED,OAAO,aAAa,CAAC;IACvB,CAAC;IAED,SAAS;QACP,IAAI,IAAI,CAAC,MAAM,EAAE;YACf,OAAO,IAAI,CAAC,MAAM,CAAC;SACpB;QAED,uBAAuB;QACvB,IAAI,IAAI,CAAC,SAAS,EAAE;YAClB,OAAO,qBAAqB,IAAI,CAAC,SAAS,EAAE,CAAC;SAC9C;QAED,OAAO,oBAAoB,IAAI,CAAC,QAAQ,EAAE,CAAC;IAC7C,CAAC;IAED,GAAG;QACD,OAAO,IAAI,CAAC,GAAG,CAAC;IAClB,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,MAAM;QACV,MAAM,EAAC,KAAK,GAAG,IAAI,CAAC,GAAG,KAAK,GAAG,CAAC,IAAI,EAAE,SAAS,EAAE,kBAAkB,GAAG,IAAI,CAAC,GAAG,KAAK,GAAG,CAAC,IAAI,EAAC,GAAG,IAAI,CAAC,IAAI,CAAC;QACzG,MAAM,aAAa,GAAG,MAAM,IAAI,CAAC,gBAAgB,EAAE,CAAC;QAEpD,MAAM,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,yBAAyB,EAAE,aAAa,CAAC,CAAC;QAEzE,MAAM,YAAY,GAAG,IAAI,YAAY,CAAC,IAAI,CAAC,SAAS,EAAE,EAAE,aAAa,CAAC,CAAC;QAEvE,IAAI,KAAK,EAAE;YACT,uBAAuB;YACvB,QAAQ,IAAI,CAAC,YAAY,EAAE;gBACzB,QAAQ;gBACR,KAAK,SAAS;oBACZ,YAAY,CAAC,KAAK,GAAG,IAAI,CAAC;oBAC1B,MAAM;gBACR,KAAK,KAAK;oBACP,IAAI,CAAC,GAAG,CAAC,MAAc,CAAC,KAAK,GAAG,IAAI,CAAC;oBACtC,MAAM;aACT;SACF;QAED,IAAI,SAAS,EAAE;YACb,YAAY,CAAC,GAAG,CAAC,IAAI,GAAG,SAAS,CAAC;SACnC;QAED,IAAI,CAAC,GAAG,GAAG,YAAY,CAAC;QAExB,IAAI,kBAAkB,EAAE;YACtB,IAAI,CAAC,kBAAkB,EAAE,CAAC;SAC3B;QAED,iBAAiB,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE;YAC9B,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,KAAK,EAAE,IAAI,CAAC,kBAAkB,CAAC,KAAK,CAAC,CAAC,CAAC;QACrD,CAAC,CAAC,CAAC;QAEH,MAAM,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,eAAe,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC;QAEpD,OAAO,IAAI,CAAC,GAAG,CAAC;IAClB,CAAC;IAEO,kBAAkB,CAAC,KAAa;QACtC,OAAO,CAAC,GAAuB,EAAE,KAAU,EAAE,SAAkB,EAAE,GAAY,EAAE,EAAE;YAC/E,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC;gBAChB,KAAK,EAAE,YAAY;gBACnB,IAAI,EAAE,KAAK;gBACX,KAAK,EAAE;oBACL,UAAU,EAAE,KAAK,CAAC,KAAK;oBACvB,iBAAiB,EAAE,KAAK,CAAC,iBAAiB;oBAC1C,YAAY,EAAE,KAAK,CAAC,YAAY;iBACjC;gBACD,UAAU,EAAE,SAAS;gBACrB,MAAM,EAAE,GAAG,CAAC,IAAI,CAAC,MAAM;gBACvB,OAAO,EAAE,GAAG,CAAC,OAAO;gBACpB,GAAG;aACJ,CAAC,CAAC;YAEH,iDAAiD;YACjD,0DAA0D;QAC5D,CAAC,CAAC;IACJ,CAAC;IAEM,YAAY,CAAC,QAA4B,EAAE,OAA+B;QAC/E,MAAM,EAAC,MAAM,EAAE,cAAc,GAAG,EAAE,EAAE,OAAO,EAAE,GAAG,aAAa,EAAC,GAAG,OAAO,CAAC;QACzE,MAAM,MAAM,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QAE3F,OAAO,IAAI,iBAAiB,CAAC,MAAM,CAAC,aAAa,EAAE,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,OAAO,EAAE,GAAG,MAAM,CAAC,CAAC;IAC9H,CAAC;IAEO,kBAAkB;QACxB,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,YAAY,EAAE,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,OAAO,KAAK,YAAY,CAAC,CAAC;QAEpG,IAAI,QAAQ,EAAE;YACZ,OAAO,CAAC,GAAQ,EAAE,WAAgB,EAAE,EAAE;gBACpC,qCAAqC;gBACrC,OAAO,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,WAAW,CAAC,GAAG,CAAC,CAAC;YACxD,CAAC,CAAC;SACH;IACH,CAAC;IAEO,kBAAkB;QACxB,MAAM,EAAC,UAAU,EAAE,IAAI,EAAC,GAAI,IAAI,CAAC,GAAG,CAAC,MAAc,CAAC,MAAM,CAAC,SAAS,CAAC;QAEpE,IAAI,CAAC,GAAG,CAAC,MAAc,CAAC,MAAM,CAAC,SAAS,CAAC,UAAU,GAAG,SAAS,UAAU,CAAC,OAAe,EAAE,IAAY;YACtG,IAAI,IAAI,KAAK,sBAAsB,IAAI,IAAI,KAAK,2BAA2B,EAAE;gBAC3E,OAAO;aACR;YAED,0BAA0B;YAC1B,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QAClC,CAAC,CAAC;IACJ,CAAC;IAEO,SAAS;QACf,MAAM,MAAM,GAAG,iBAAiB,CAAC,IAAI,EAAE,CAAC;QACxC,MAAM,YAAY,GAAG,IAAI,CAAC,gBAAgB,CAAC,eAAe,EAAE,CAAC;QAE7D,IAAI,YAAY,CAAC,MAAM,EAAE;YACvB,YAAY,CAAC,OAAO,CAAC,CAAC,QAAQ,EAAE,EAAE;gBAChC,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAqB,QAAQ,CAAC,KAAK,CAAE,CAAC;gBACxE,MAAM,OAAO,GAAG,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,oBAAoB,CAAC,CAAC;gBAEzD,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE;oBAC7B,MAAM,MAAM,GAAG,IAAI,CAAC,YAAY,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;oBAEpD,MAAM,CAAC,GAAG,CAAC,MAAM,EAAE,OAAO,CAAC,QAAQ,CAAC,CAAC;iBACtC;gBAED,IAAI,QAAQ,CAAC,SAAS,EAAE;oBACtB,QAAQ,CAAC,SAAS,CAAC,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,CAAE,CAAC,CAAC;iBAC/C;YACH,CAAC,CAAC,CAAC;SACJ;QAED,OAAO,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,kBAAkB,EAAE,MAAM,CAAC,CAAC;IACzD,CAAC;IAED,IAAI,MAAM;QACR,OAAO,IAAI,CAAC,IAAI,EAAE,MAAM,IAAI,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC;IACnD,CAAC;CACF,CAAA;AAhOC;IADC,QAAQ,CAAC,KAAK,CAAC;;yCACG;AAGnB;IADC,QAAQ,CAAC,UAAU,CAAC;;8CACe;AAGpC;IADC,QAAQ,CAAC,WAAW,CAAC;;+CACe;AAGrC;IADC,QAAQ,CAAC,aAAa,EAAE,EAAE,CAAC;;4CACH;AAGzB;IADC,QAAQ,CAAC,MAAM,CAAC;;0CACY;AAG7B;IADC,QAAQ,CAAC,eAAe,CAAC;;kDACK;AAG/B;IADC,MAAM,EAAE;8BACW,QAAQ;8CAAC;AAG7B;IADC,MAAM,EAAE;8BACmB,gBAAgB;sDAAC;AAG7C;IADC,MAAM,EAAE;8BACW,YAAY;8CAAC;AAGjC;IADC,MAAM,EAAE;8BACW,eAAe;8CAAC;AAGpC;IADC,MAAM,EAAE;8BACM,mBAAmB;yCAAC;AAGnC;IADC,aAAa,EAAE;8BACC,eAAe;0CAAC;AArCtB,YAAY;IADxB,UAAU,EAAE;GACA,YAAY,CAoOxB;SApOY,YAAY","sourcesContent":["import {InjectContext, PlatformApplication, PlatformContext} from \"@tsed/common\";\nimport {Env, setValue} from \"@tsed/core\";\nimport {Constant, Inject, Injectable, InjectorService} from \"@tsed/di\";\nimport {Configuration, interactionPolicy, KoaContextWithOIDC, Provider as OIDCProvider} from \"oidc-provider\";\nimport {INTERACTIONS} from \"../constants/constants\";\nimport {InteractionMethods} from \"../domain/InteractionMethods\";\nimport {OidcAccountsMethods} from \"../domain/OidcAccountsMethods\";\nimport {OidcInteractionOptions} from \"../domain/OidcInteractionOptions\";\nimport {OidcSettings} from \"../domain/OidcSettings\";\nimport {OIDC_ERROR_EVENTS} from \"../utils/events\";\nimport {OidcAdapters} from \"./OidcAdapters\";\nimport {OidcInteractions} from \"./OidcInteractions\";\nimport {OidcJwks} from \"./OidcJwks\";\n\n@Injectable()\nexport class OidcProvider {\n  raw: OIDCProvider;\n\n  @Constant(\"env\")\n  protected env: Env;\n\n  @Constant(\"httpPort\")\n  protected httpPort: number | string;\n\n  @Constant(\"httpsPort\")\n  protected httpsPort: number | string;\n\n  @Constant(\"oidc.issuer\", \"\")\n  protected issuer: string;\n\n  @Constant(\"oidc\")\n  protected oidc: OidcSettings;\n\n  @Constant(\"PLATFORM_NAME\")\n  protected platformName: string;\n\n  @Inject()\n  protected oidcJwks: OidcJwks;\n\n  @Inject()\n  protected oidcInteractions: OidcInteractions;\n\n  @Inject()\n  protected adapters: OidcAdapters;\n\n  @Inject()\n  protected injector: InjectorService;\n\n  @Inject()\n  protected app: PlatformApplication;\n\n  @InjectContext()\n  protected $ctx?: PlatformContext;\n\n  hasConfiguration() {\n    return !!this.oidc;\n  }\n\n  async getConfiguration(): Promise<Configuration> {\n    const [jwks, adapter] = await Promise.all([this.oidcJwks.getJwks(), this.adapters.createAdapterClass()]);\n    const {\n      issuer,\n      jwksPath,\n      secureKey,\n      proxy,\n      Accounts,\n      secureCookies = this.env == Env.PROD,\n      Adapter,\n      connectionName,\n      ...options\n    } = this.oidc;\n\n    const configuration: Configuration = {\n      interactions: {\n        /* istanbul ignore next */\n        url: (ctx, interaction) => `interaction/${interaction.uid}`\n      },\n      ...options,\n      adapter,\n      jwks\n    };\n\n    if (Accounts) {\n      configuration.findAccount = (ctx, id, token) => this.injector.get<OidcAccountsMethods>(Accounts)!.findAccount(id, token);\n    }\n\n    if (secureCookies) {\n      setValue(configuration, \"cookies.short.secure\", true);\n      setValue(configuration, \"cookies.long.secure\", true);\n    }\n\n    const policy = this.getPolicy();\n    if (policy) {\n      setValue(configuration, \"interactions.policy\", policy);\n    }\n\n    const url = this.getInteractionsUrl();\n    if (url) {\n      setValue(configuration, \"interactions.url\", url);\n    }\n\n    return configuration;\n  }\n\n  getIssuer() {\n    if (this.issuer) {\n      return this.issuer;\n    }\n\n    // istanbul ignore next\n    if (this.httpsPort) {\n      return `https://localhost:${this.httpsPort}`;\n    }\n\n    return `http://localhost:${this.httpPort}`;\n  }\n\n  get(): OIDCProvider {\n    return this.raw;\n  }\n\n  /**\n   * Create a new instance of OidcProvider\n   */\n  async create(): Promise<void | OIDCProvider> {\n    const {proxy = this.env === Env.PROD, secureKey, allowHttpLocalhost = this.env !== Env.PROD} = this.oidc;\n    const configuration = await this.getConfiguration();\n\n    await this.injector.alterAsync(\"$alterOidcConfiguration\", configuration);\n\n    const oidcProvider = new OIDCProvider(this.getIssuer(), configuration);\n\n    if (proxy) {\n      // istanbul ignore next\n      switch (this.platformName) {\n        default:\n        case \"express\":\n          oidcProvider.proxy = true;\n          break;\n        case \"koa\":\n          (this.app.rawApp as any).proxy = true;\n          break;\n      }\n    }\n\n    if (secureKey) {\n      oidcProvider.app.keys = secureKey;\n    }\n\n    this.raw = oidcProvider;\n\n    if (allowHttpLocalhost) {\n      this.allowHttpLocalhost();\n    }\n\n    OIDC_ERROR_EVENTS.map((event) => {\n      this.raw.on(event, this.createErrorHandler(event));\n    });\n\n    await this.injector.emit(\"$onCreateOIDC\", this.raw);\n\n    return this.raw;\n  }\n\n  private createErrorHandler(event: string) {\n    return (ctx: KoaContextWithOIDC, error: any, accountId?: string, sid?: string) => {\n      this.logger.error({\n        event: \"OIDC_ERROR\",\n        type: event,\n        error: {\n          error_name: error.error,\n          error_description: error.error_description,\n          error_detail: error.error_detail\n        },\n        account_id: accountId,\n        params: ctx.oidc.params,\n        headers: ctx.headers,\n        sid\n      });\n\n      // TODO see if we need to call platformExceptions\n      // this.platformExceptions.catch(error, ctx.request.$ctx);\n    };\n  }\n\n  public createPrompt(instance: InteractionMethods, options: OidcInteractionOptions) {\n    const {checks: originalChecks = [], details, ...promptOptions} = options;\n    const checks = [...(instance.checks ? instance.checks() : originalChecks)].filter(Boolean);\n\n    return new interactionPolicy.Prompt(promptOptions, instance.details ? instance.details.bind(instance) : details, ...checks);\n  }\n\n  private getInteractionsUrl() {\n    const provider = this.injector.getProviders().find((provider) => provider.subType === INTERACTIONS);\n\n    if (provider) {\n      return (ctx: any, interaction: any) => {\n        // eslint-disable-line no-unused-vars\n        return provider.path.replace(/:uid/, interaction.uid);\n      };\n    }\n  }\n\n  private allowHttpLocalhost() {\n    const {invalidate: orig} = (this.raw.Client as any).Schema.prototype;\n\n    (this.raw.Client as any).Schema.prototype.invalidate = function invalidate(message: string, code: string) {\n      if (code === \"implicit-force-https\" || code === \"implicit-forbid-localhost\") {\n        return;\n      }\n\n      /* istanbul ignore next */\n      return orig.call(this, message);\n    };\n  }\n\n  private getPolicy() {\n    const policy = interactionPolicy.base();\n    const interactions = this.oidcInteractions.getInteractions();\n\n    if (interactions.length) {\n      interactions.forEach((provider) => {\n        const instance = this.injector.get<InteractionMethods>(provider.token)!;\n        const options = provider.store.get(\"interactionOptions\");\n\n        if (!policy.get(options.name)) {\n          const prompt = this.createPrompt(instance, options);\n\n          policy.add(prompt, options.priority);\n        }\n\n        if (instance.$onCreate) {\n          instance.$onCreate(policy.get(options.name)!);\n        }\n      });\n    }\n\n    return this.injector.alter(\"$alterOidcPolicy\", policy);\n  }\n\n  get logger() {\n    return this.$ctx?.logger || this.injector.logger;\n  }\n}\n"]}

package/lib/esm/utils/events.js

@@ -0,0 +1,58 @@
+export const OIDC_EVENTS = [
+    "access_token.destroyed",
+    "access_token.saved",
+    "access_token.issued",
+    "authorization_code.consumed",
+    "authorization_code.destroyed",
+    "authorization_code.saved",
+    "authorization.accepted",
+    "authorization.error",
+    "authorization.success",
+    "backchannel.error",
+    "backchannel.success",
+    "jwks.error",
+    "client_credentials.destroyed",
+    "client_credentials.saved",
+    "client_credentials.issued",
+    "device_code.consumed",
+    "device_code.destroyed",
+    "device_code.saved",
+    "discovery.error",
+    "end_session.error",
+    "end_session.success",
+    "grant.error",
+    "grant.revoked",
+    "grant.success",
+    "initial_access_token.destroyed",
+    "initial_access_token.saved",
+    "interaction.destroyed",
+    "interaction.ended",
+    "interaction.saved",
+    "interaction.started",
+    "introspection.error",
+    "replay_detection.destroyed",
+    "replay_detection.saved",
+    "pushed_authorization_request.error",
+    "pushed_authorization_request.success",
+    "pushed_authorization_request.destroyed",
+    "pushed_authorization_request.saved",
+    "refresh_token.consumed",
+    "refresh_token.destroyed",
+    "refresh_token.saved",
+    "registration_access_token.destroyed",
+    "registration_access_token.saved",
+    "registration_create.error",
+    "registration_create.success",
+    "registration_delete.error",
+    "registration_delete.success",
+    "registration_read.error",
+    "registration_update.error",
+    "registration_update.success",
+    "revocation.error",
+    "server_error",
+    "session.destroyed",
+    "session.saved",
+    "userinfo.error"
+];
+export const OIDC_ERROR_EVENTS = OIDC_EVENTS.filter((e) => e.includes("error"));
+//# sourceMappingURL=events.js.map

package/lib/esm/utils/events.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"events.js","sourceRoot":"","sources":["../../../src/utils/events.ts"],"names":[],"mappings":"AAAA,MAAM,CAAC,MAAM,WAAW,GAAG;IACzB,wBAAwB;IACxB,oBAAoB;IACpB,qBAAqB;IACrB,6BAA6B;IAC7B,8BAA8B;IAC9B,0BAA0B;IAC1B,wBAAwB;IACxB,qBAAqB;IACrB,uBAAuB;IACvB,mBAAmB;IACnB,qBAAqB;IACrB,YAAY;IACZ,8BAA8B;IAC9B,0BAA0B;IAC1B,2BAA2B;IAC3B,sBAAsB;IACtB,uBAAuB;IACvB,mBAAmB;IACnB,iBAAiB;IACjB,mBAAmB;IACnB,qBAAqB;IACrB,aAAa;IACb,eAAe;IACf,eAAe;IACf,gCAAgC;IAChC,4BAA4B;IAC5B,uBAAuB;IACvB,mBAAmB;IACnB,mBAAmB;IACnB,qBAAqB;IACrB,qBAAqB;IACrB,4BAA4B;IAC5B,wBAAwB;IACxB,oCAAoC;IACpC,sCAAsC;IACtC,wCAAwC;IACxC,oCAAoC;IACpC,wBAAwB;IACxB,yBAAyB;IACzB,qBAAqB;IACrB,qCAAqC;IACrC,iCAAiC;IACjC,2BAA2B;IAC3B,6BAA6B;IAC7B,2BAA2B;IAC3B,6BAA6B;IAC7B,yBAAyB;IACzB,2BAA2B;IAC3B,6BAA6B;IAC7B,kBAAkB;IAClB,cAAc;IACd,mBAAmB;IACnB,eAAe;IACf,gBAAgB;CACjB,CAAC;AAEF,MAAM,CAAC,MAAM,iBAAiB,GAAG,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC","sourcesContent":["export const OIDC_EVENTS = [\n  \"access_token.destroyed\",\n  \"access_token.saved\",\n  \"access_token.issued\",\n  \"authorization_code.consumed\",\n  \"authorization_code.destroyed\",\n  \"authorization_code.saved\",\n  \"authorization.accepted\",\n  \"authorization.error\",\n  \"authorization.success\",\n  \"backchannel.error\",\n  \"backchannel.success\",\n  \"jwks.error\",\n  \"client_credentials.destroyed\",\n  \"client_credentials.saved\",\n  \"client_credentials.issued\",\n  \"device_code.consumed\",\n  \"device_code.destroyed\",\n  \"device_code.saved\",\n  \"discovery.error\",\n  \"end_session.error\",\n  \"end_session.success\",\n  \"grant.error\",\n  \"grant.revoked\",\n  \"grant.success\",\n  \"initial_access_token.destroyed\",\n  \"initial_access_token.saved\",\n  \"interaction.destroyed\",\n  \"interaction.ended\",\n  \"interaction.saved\",\n  \"interaction.started\",\n  \"introspection.error\",\n  \"replay_detection.destroyed\",\n  \"replay_detection.saved\",\n  \"pushed_authorization_request.error\",\n  \"pushed_authorization_request.success\",\n  \"pushed_authorization_request.destroyed\",\n  \"pushed_authorization_request.saved\",\n  \"refresh_token.consumed\",\n  \"refresh_token.destroyed\",\n  \"refresh_token.saved\",\n  \"registration_access_token.destroyed\",\n  \"registration_access_token.saved\",\n  \"registration_create.error\",\n  \"registration_create.success\",\n  \"registration_delete.error\",\n  \"registration_delete.success\",\n  \"registration_read.error\",\n  \"registration_update.error\",\n  \"registration_update.success\",\n  \"revocation.error\",\n  \"server_error\",\n  \"session.destroyed\",\n  \"session.saved\",\n  \"userinfo.error\"\n];\n\nexport const OIDC_ERROR_EVENTS = OIDC_EVENTS.filter((e) => e.includes(\"error\"));\n"]}

package/lib/types/index.d.ts

@@ -30,3 +30,4 @@ export * from "./services/OidcInteractions";
 export * from "./services/OidcJwks";
 export * from "./services/OidcProvider";
 export * from "./utils/debug";
+export * from "./utils/events";

package/lib/types/services/OidcProvider.d.ts

@@ -1,4 +1,4 @@
-import { PlatformApplication } from "@tsed/common";
+import { PlatformApplication, PlatformContext } from "@tsed/common";
 import { Env } from "@tsed/core";
 import { InjectorService } from "@tsed/di";
 import { Configuration, interactionPolicy, Provider as OIDCProvider } from "oidc-provider";
@@ -21,6 +21,7 @@ export declare class OidcProvider {
     protected adapters: OidcAdapters;
     protected injector: InjectorService;
     protected app: PlatformApplication;
+    protected $ctx?: PlatformContext;
     hasConfiguration(): boolean;
     getConfiguration(): Promise<Configuration>;
     getIssuer(): string;
@@ -29,8 +30,10 @@ export declare class OidcProvider {
      * Create a new instance of OidcProvider
      */
     create(): Promise<void | OIDCProvider>;
+    private createErrorHandler;
     createPrompt(instance: InteractionMethods, options: OidcInteractionOptions): interactionPolicy.Prompt;
     private getInteractionsUrl;
     private allowHttpLocalhost;
     private getPolicy;
+    get logger(): import("@tsed/common").DILogger;
 }

package/lib/types/utils/events.d.ts

@@ -0,0 +1,2 @@
+export declare const OIDC_EVENTS: string[];
+export declare const OIDC_ERROR_EVENTS: string[];

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@tsed/oidc-provider",
-  "version": "7.14.0",
+  "version": "7.14.2",
   "description": "OIDC provider package for Ts.ED framework",
   "private": false,
   "source": "./src/index.ts",
@@ -22,7 +22,7 @@
     "test": "cross-env NODE_ENV=test yarn jest --max-workers=2"
   },
   "dependencies": {
-    "@tsed/adapters": "7.14.0",
+    "@tsed/adapters": "7.14.2",
     "express-urlrewrite": "^1.4.0",
     "jose2": "npm:jose@^2.0.4",
     "koa-mount": "^4.0.0",
@@ -31,10 +31,10 @@
     "uuid": "8.3.2"
   },
   "devDependencies": {
-    "@tsed/common": "7.14.0",
-    "@tsed/core": "7.14.0",
-    "@tsed/di": "7.14.0",
-    "@tsed/exceptions": "7.14.0",
+    "@tsed/common": "7.14.2",
+    "@tsed/core": "7.14.2",
+    "@tsed/di": "7.14.2",
+    "@tsed/exceptions": "7.14.2",
     "@types/lowdb": "1.0.11",
     "@types/oidc-provider": "^7.1.1",
     "@types/uuid": "8.3.4",
@@ -42,12 +42,12 @@
     "oidc-provider": "7.11.1"
   },
   "peerDependencies": {
-    "@tsed/ajv": "^7.14.0",
-    "@tsed/common": "^7.14.0",
-    "@tsed/core": "^7.14.0",
-    "@tsed/di": "^7.14.0",
-    "@tsed/json-mapper": "^7.14.0",
-    "@tsed/schema": "^7.14.0",
+    "@tsed/ajv": "^7.14.2",
+    "@tsed/common": "^7.14.2",
+    "@tsed/core": "^7.14.2",
+    "@tsed/di": "^7.14.2",
+    "@tsed/json-mapper": "^7.14.2",
+    "@tsed/schema": "^7.14.2",
     "oidc-provider": ">=7.3.0"
   },
   "peerDependenciesMeta": {