@tsed/oidc-provider 7.18.0 → 7.18.2

package/lib/cjs/services/OidcInteractionContext.js

@@ -67,10 +67,11 @@ let OidcInteractionContext = class OidcInteractionContext {
     }
     async interactionPrompt({ client, ...options }) {
         client = client || (await this.findClient());
+        const newClient = (0, json_mapper_1.serialize)(client, { useAlias: false, groups: ["render"] });
         // remove client secret from
-        delete client.clientSecret;
+        delete newClient.clientSecret;
         return {
-            client: (0, json_mapper_1.serialize)(client, { useAlias: false, groups: ["render"] }),
+            client: newClient,
             uid: this.uid,
             grantId: this.grantId,
             details: this.prompt.details,

package/lib/cjs/services/OidcInteractionContext.js.map

@@ -1 +1 @@
-{"version":3,"file":"OidcInteractionContext.js","sourceRoot":"","sources":["../../../src/services/OidcInteractionContext.ts"],"names":[],"mappings":";;;;AAAA,yCAAsE;AACtE,qCAA+B;AAC/B,iCAA4C;AAC5C,iDAA8C;AAC9C,mDAA4C;AAE5C,sDAQgC;AAGhC,6EAAwE;AAGxE,0CAAqC;AACrC,yDAAoD;AACpD,iDAA4C;AAG5C,IAAa,sBAAsB,GAAnC,MAAa,sBAAsB;IAEjC,GAAG,CAAM;IAGC,YAAY,CAAe;IAG3B,gBAAgB,CAAmB;IAGnC,IAAI,CAAkB;IAEhC,IAAI,GAAG;QACL,OAAO,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,+BAAmB,CAAE,CAAC;IAC7C,CAAC;IAED,IAAI,OAAO;QACT,OAAO,IAAI,CAAC,GAAG,CAAC,OAAc,CAAC;IACjC,CAAC;IAED,IAAI,MAAM;QACR,OAAO,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC;IACzB,CAAC;IAED,IAAI,MAAM;QACR,OAAO,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC;IACzB,CAAC;IAED,IAAI,GAAG;QACL,OAAO,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;IACtB,CAAC;IAED,IAAI,OAAO;QACT,OAAQ,IAAI,CAAC,GAAW,CAAC,OAAO,CAAC;IACnC,CAAC;IAED,KAAK,CAAC,cAAc,CAAC,IAAa;QAChC,IAAI,GAAG,IAAI,IAAI,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC;QAEhC,MAAM,OAAO,GAAG,IAAI,CAAC,gBAAgB,CAAC,qBAAqB,CAAC,IAAI,CAAC,CAAC;QAElE,IAAI,OAAO,EAAE;YACX,IAAI,CAAC,GAAG,CAAC,MAAM,GAAG;gBAChB,GAAG,IAAI,CAAC,GAAG,CAAC,MAAM;gBAClB,IAAI;gBACJ,OAAO,EAAE,CAAC,IAAI,CAAC;aAChB,CAAC;YAEF,MAAM,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;SAC1B;IACH,CAAC;IAED,KAAK,CAAC,kBAAkB;QACtB,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,GAAG,EAAE,CAAC,kBAAkB,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;QACrG,MAAM,EAAC,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,EAAC,GAAG,GAAU,CAAC;QAE3D,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,+BAAmB,EAAE,IAAI,CAAC,CAAC;QACzC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,+BAAmB,EAAE,GAAG,CAAC,CAAC;QACxC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,2BAAe,EAAE,GAAG,CAAC,CAAC;QACpC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,8BAAkB,EAAE,MAAM,CAAC,CAAC;QAC1C,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,8BAAkB,EAAE,MAAM,CAAC,CAAC;QAC1C,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,gCAAoB,EAAE,OAAO,CAAC,CAAC;QAC7C,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,+BAAmB,EAAE,OAAO,CAAC,CAAC;QAE5C,OAAO,GAAG,CAAC;IACb,CAAC;IAED,KAAK,CAAC,mBAAmB,CAAC,MAA0B,EAAE,UAA+C,EAAC,uBAAuB,EAAE,KAAK,EAAC;QACnI,OAAO,IAAI,CAAC,YAAY,CAAC,GAAG,EAAE,CAAC,mBAAmB,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC;IAC9G,CAAC;IAED,KAAK,CAAC,iBAAiB,CAAC,MAA0B,EAAE,UAA+C,EAAC,uBAAuB,EAAE,KAAK,EAAC;QACjI,OAAO,IAAI,CAAC,YAAY,CAAC,GAAG,EAAE,CAAC,iBAAiB,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC;IAC5G,CAAC;IAED,KAAK,CAAC,iBAAiB,CAAC,EAAC,MAAM,EAAE,GAAG,OAAO,EAAsB;QAC/D,MAAM,GAAG,MAAM,IAAI,CAAC,MAAM,IAAI,CAAC,UAAU,EAAE,CAAC,CAAC;QAE7C,4BAA4B;QAC5B,OAAO,MAAM,CAAC,YAAY,CAAC;QAE3B,OAAO;YACL,MAAM,EAAE,IAAA,uBAAS,EAAC,MAAM,EAAE,EAAC,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,QAAQ,CAAC,EAAC,CAAC;YAChE,GAAG,EAAE,IAAI,CAAC,GAAG;YACb,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,OAAO,EAAE,IAAI,CAAC,MAAM,CAAC,OAAO;YAC5B,MAAM,EAAE;gBACN,GAAG,IAAI,CAAC,MAAM;gBACd,GAAG,OAAO,CAAC,MAAM;aAClB;YACD,GAAG,OAAO;YACV,GAAG,IAAI,CAAC,KAAK,EAAE;SAChB,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,IAAY,EAAE,MAAW;QACpC,OAAO,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IACjD,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,GAAW;QACpB,OAAO,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC5B,CAAC;IAED,KAAK,CAAC,UAAU,CAAC,WAAmB,IAAI,CAAC,MAAM,CAAC,SAAS;QACvD,MAAM,GAAG,GAAG,WAAW,QAAQ,EAAE,CAAC;QAElC,OAAO,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,YAAY,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC;IACxF,CAAC;IAED,KAAK,CAAC,WAAW,CAAC,GAAY,EAAE,KAAW;QACzC,IAAI,CAAC,GAAG,IAAI,IAAI,CAAC,OAAO,EAAE;YACxB,GAAG,GAAG,IAAI,CAAC,OAAO,EAAE,SAAgB,CAAC;SACtC;QAED,IAAI,CAAC,GAAG,EAAE;YACR,OAAO;SACR;QAED,MAAM,GAAG,GAAG,YAAY,GAAG,EAAE,CAAC;QAE9B,OAAO,IAAI,CAAC,IAAI,CAAC,UAAU,CAAsB,GAAG,EAAE,CAAC,GAAG,EAAE;YAC1D,OAAO,IAAI,CAAC,YAAY,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,WAAW,CAAC,SAAgB,EAAE,GAAI,EAAE,KAAK,CAAC,CAAC;QACpF,CAAC,CAAQ,CAAC,CAAC;IACb,CAAC;IAED,KAAK,CAAC,QAAQ;QACZ,MAAM,EAAC,KAAK,EAAC,GAAG,IAAI,CAAC,YAAY,CAAC,GAAG,EAAS,CAAC;QAE/C,IAAI,IAAI,CAAC,OAAO,EAAE;YAChB,wDAAwD;YACxD,aAAa;YACb,OAAO,MAAM,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;SACvC;QAED,OAAO,IAAI,KAAK,CAAC;YACf,SAAS,EAAE,IAAI,CAAC,OAAO,EAAE,SAAS;YAClC,QAAQ,EAAE,IAAI,CAAC,MAAM,CAAC,SAAS;SAChC,CAAC,CAAC;IACL,CAAC;IAED,oBAAoB,CAAC,IAAY;QAC/B,IAAI,IAAI,CAAC,MAAM,CAAC,IAAI,KAAK,IAAI,EAAE;YAC7B,MAAM,IAAI,+CAAsB,CAAC,sBAAsB,CAAC,CAAC;SAC1D;IACH,CAAC;IAED,KAAK,CAAC,aAAa,CAAC,QAAQ,GAAG,IAAI,CAAC,MAAM,CAAC,SAAS;QAClD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC;QAE/C,IAAI,CAAC,MAAM,EAAE;YACX,MAAM,IAAI,yBAAY,CAAC,qBAAqB,QAAQ,EAAE,CAAC,CAAC;SACzD;IACH,CAAC;IAED,KAAK,CAAC,GAAS;QACb,0BAA0B;QAC1B,IAAI,IAAI,CAAC,GAAG,KAAK,UAAG,CAAC,IAAI,EAAE;YACzB,OAAO,EAAC,OAAO,EAAE,SAAS,EAAE,GAAG,EAAE,EAAC,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,SAAS,EAAC,EAAC,CAAC;SAC1E;QAED,IAAI,GAAG,EAAE;YACP,OAAO,IAAA,aAAK,EAAC,GAAG,CAAC,CAAC;SACnB;QAED,OAAO;YACL,OAAO,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,SAAS;YAC5D,GAAG,EAAE;gBACH,MAAM,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC;gBAC/B,MAAM,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC;aAChC;SACF,CAAC;IACJ,CAAC;CACF,CAAA;AA3KC;IADC,IAAA,iBAAQ,EAAC,KAAK,CAAC;;mDACP;AAGT;IADC,IAAA,WAAM,GAAE;sCACe,2BAAY;4DAAC;AAGrC;IADC,IAAA,WAAM,GAAE;sCACmB,mCAAgB;gEAAC;AAG7C;IADC,IAAA,sBAAa,GAAE;sCACA,wBAAe;oDAAC;AAXrB,sBAAsB;IADlC,IAAA,eAAU,GAAE;GACA,sBAAsB,CA6KlC;AA7KY,wDAAsB","sourcesContent":["import {Constant, InjectContext, PlatformContext} from \"@tsed/common\";\nimport {Env} from \"@tsed/core\";\nimport {Inject, Injectable} from \"@tsed/di\";\nimport {Unauthorized} from \"@tsed/exceptions\";\nimport {serialize} from \"@tsed/json-mapper\";\nimport {Account, InteractionResults, PromptDetail, Provider} from \"oidc-provider\";\nimport {\n  INTERACTION_CONTEXT,\n  INTERACTION_DETAILS,\n  INTERACTION_GRANT_ID,\n  INTERACTION_PARAMS,\n  INTERACTION_PROMPT,\n  INTERACTION_SESSION,\n  INTERACTION_UID\n} from \"../constants/constants\";\nimport {OidcSession} from \"../decorators/oidcSession\";\nimport {OidcClient} from \"../domain/interfaces\";\nimport {OidcBadInteractionName} from \"../domain/OidcBadInteractionName\";\nimport {OidcInteraction} from \"../domain/OidcInteraction\";\nimport {OidcInteractionPromptProps} from \"../domain/OidcInteractionPromptProps\";\nimport {debug} from \"../utils/debug\";\nimport {OidcInteractions} from \"./OidcInteractions\";\nimport {OidcProvider} from \"./OidcProvider\";\n\n@Injectable()\nexport class OidcInteractionContext {\n  @Constant(\"env\")\n  env: Env;\n\n  @Inject()\n  protected oidcProvider: OidcProvider;\n\n  @Inject()\n  protected oidcInteractions: OidcInteractions;\n\n  @InjectContext()\n  protected $ctx: PlatformContext;\n\n  get raw(): OidcInteraction {\n    return this.$ctx.get(INTERACTION_DETAILS)!;\n  }\n\n  get session(): OidcSession | undefined {\n    return this.raw.session as any;\n  }\n\n  get prompt(): PromptDetail {\n    return this.raw.prompt;\n  }\n\n  get params(): Record<string, any> {\n    return this.raw.params;\n  }\n\n  get uid(): string {\n    return this.raw.uid;\n  }\n\n  get grantId(): string {\n    return (this.raw as any).grantId;\n  }\n\n  async runInteraction(name?: string) {\n    name = name || this.prompt.name;\n\n    const handler = this.oidcInteractions.getInteractionHandler(name);\n\n    if (handler) {\n      this.raw.prompt = {\n        ...this.raw.prompt,\n        name,\n        reasons: [name]\n      };\n\n      await handler(this.$ctx);\n    }\n  }\n\n  async interactionDetails(): Promise<OidcInteraction> {\n    const raw = await this.oidcProvider.get().interactionDetails(this.$ctx.getReq(), this.$ctx.getRes());\n    const {uid, prompt, params, session, grantId} = raw as any;\n\n    this.$ctx.set(INTERACTION_CONTEXT, this);\n    this.$ctx.set(INTERACTION_DETAILS, raw);\n    this.$ctx.set(INTERACTION_UID, uid);\n    this.$ctx.set(INTERACTION_PROMPT, prompt);\n    this.$ctx.set(INTERACTION_PARAMS, params);\n    this.$ctx.set(INTERACTION_GRANT_ID, grantId);\n    this.$ctx.set(INTERACTION_SESSION, session);\n\n    return raw;\n  }\n\n  async interactionFinished(result: InteractionResults, options: {mergeWithLastSubmission?: boolean} = {mergeWithLastSubmission: false}) {\n    return this.oidcProvider.get().interactionFinished(this.$ctx.getReq(), this.$ctx.getRes(), result, options);\n  }\n\n  async interactionResult(result: InteractionResults, options: {mergeWithLastSubmission?: boolean} = {mergeWithLastSubmission: false}) {\n    return this.oidcProvider.get().interactionResult(this.$ctx.getReq(), this.$ctx.getRes(), result, options);\n  }\n\n  async interactionPrompt({client, ...options}: Record<string, any>): Promise<OidcInteractionPromptProps> {\n    client = client || (await this.findClient());\n\n    // remove client secret from\n    delete client.clientSecret;\n\n    return {\n      client: serialize(client, {useAlias: false, groups: [\"render\"]}),\n      uid: this.uid,\n      grantId: this.grantId,\n      details: this.prompt.details,\n      params: {\n        ...this.params,\n        ...options.params\n      },\n      ...options,\n      ...this.debug()\n    };\n  }\n\n  async render(view: string, result: any): Promise<string> {\n    return this.$ctx.response.render(view, result);\n  }\n\n  async save(ttl: number): Promise<string> {\n    return this.raw.save(ttl);\n  }\n\n  async findClient(clientId: string = this.params.client_id): Promise<OidcClient | undefined> {\n    const key = `$client:${clientId}`;\n\n    return this.$ctx.cacheAsync(key, () => this.oidcProvider.get().Client.find(clientId));\n  }\n\n  async findAccount(sub?: string, token?: any): Promise<Account | undefined> {\n    if (!sub && this.session) {\n      sub = this.session?.accountId as any;\n    }\n\n    if (!sub) {\n      return;\n    }\n\n    const key = `$account:${sub}`;\n\n    return this.$ctx.cacheAsync<Account | undefined>(key, (() => {\n      return this.oidcProvider.get().Account.findAccount(undefined as any, sub!, token);\n    }) as any);\n  }\n\n  async getGrant(): Promise<InstanceType<Provider[\"Grant\"]>> {\n    const {Grant} = this.oidcProvider.get() as any;\n\n    if (this.grantId) {\n      // we'll be modifying existing grant in existing session\n      // @ts-ignore\n      return await Grant.find(this.grantId);\n    }\n\n    return new Grant({\n      accountId: this.session?.accountId,\n      clientId: this.params.client_id\n    });\n  }\n\n  checkInteractionName(name: string) {\n    if (this.prompt.name !== name) {\n      throw new OidcBadInteractionName(\"Bad interaction name\");\n    }\n  }\n\n  async checkClientId(clientId = this.params.client_id) {\n    const client = await this.findClient(clientId);\n\n    if (!client) {\n      throw new Unauthorized(`Unknown client_id ${clientId}`);\n    }\n  }\n\n  debug(obj?: any): any {\n    /* istanbul ignore next */\n    if (this.env === Env.PROD) {\n      return {session: undefined, dbg: {params: undefined, prompt: undefined}};\n    }\n\n    if (obj) {\n      return debug(obj);\n    }\n\n    return {\n      session: this.session ? this.debug(this.session) : undefined,\n      dbg: {\n        params: this.debug(this.params),\n        prompt: this.debug(this.prompt)\n      }\n    };\n  }\n}\n"]}
+{"version":3,"file":"OidcInteractionContext.js","sourceRoot":"","sources":["../../../src/services/OidcInteractionContext.ts"],"names":[],"mappings":";;;;AAAA,yCAAsE;AACtE,qCAA+B;AAC/B,iCAA4C;AAC5C,iDAA8C;AAC9C,mDAA4C;AAE5C,sDAQgC;AAGhC,6EAAwE;AAGxE,0CAAqC;AACrC,yDAAoD;AACpD,iDAA4C;AAG5C,IAAa,sBAAsB,GAAnC,MAAa,sBAAsB;IAEjC,GAAG,CAAM;IAGC,YAAY,CAAe;IAG3B,gBAAgB,CAAmB;IAGnC,IAAI,CAAkB;IAEhC,IAAI,GAAG;QACL,OAAO,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,+BAAmB,CAAE,CAAC;IAC7C,CAAC;IAED,IAAI,OAAO;QACT,OAAO,IAAI,CAAC,GAAG,CAAC,OAAc,CAAC;IACjC,CAAC;IAED,IAAI,MAAM;QACR,OAAO,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC;IACzB,CAAC;IAED,IAAI,MAAM;QACR,OAAO,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC;IACzB,CAAC;IAED,IAAI,GAAG;QACL,OAAO,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;IACtB,CAAC;IAED,IAAI,OAAO;QACT,OAAQ,IAAI,CAAC,GAAW,CAAC,OAAO,CAAC;IACnC,CAAC;IAED,KAAK,CAAC,cAAc,CAAC,IAAa;QAChC,IAAI,GAAG,IAAI,IAAI,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC;QAEhC,MAAM,OAAO,GAAG,IAAI,CAAC,gBAAgB,CAAC,qBAAqB,CAAC,IAAI,CAAC,CAAC;QAElE,IAAI,OAAO,EAAE;YACX,IAAI,CAAC,GAAG,CAAC,MAAM,GAAG;gBAChB,GAAG,IAAI,CAAC,GAAG,CAAC,MAAM;gBAClB,IAAI;gBACJ,OAAO,EAAE,CAAC,IAAI,CAAC;aAChB,CAAC;YAEF,MAAM,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;SAC1B;IACH,CAAC;IAED,KAAK,CAAC,kBAAkB;QACtB,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,GAAG,EAAE,CAAC,kBAAkB,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;QACrG,MAAM,EAAC,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,EAAC,GAAG,GAAU,CAAC;QAE3D,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,+BAAmB,EAAE,IAAI,CAAC,CAAC;QACzC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,+BAAmB,EAAE,GAAG,CAAC,CAAC;QACxC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,2BAAe,EAAE,GAAG,CAAC,CAAC;QACpC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,8BAAkB,EAAE,MAAM,CAAC,CAAC;QAC1C,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,8BAAkB,EAAE,MAAM,CAAC,CAAC;QAC1C,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,gCAAoB,EAAE,OAAO,CAAC,CAAC;QAC7C,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,+BAAmB,EAAE,OAAO,CAAC,CAAC;QAE5C,OAAO,GAAG,CAAC;IACb,CAAC;IAED,KAAK,CAAC,mBAAmB,CAAC,MAA0B,EAAE,UAA+C,EAAC,uBAAuB,EAAE,KAAK,EAAC;QACnI,OAAO,IAAI,CAAC,YAAY,CAAC,GAAG,EAAE,CAAC,mBAAmB,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC;IAC9G,CAAC;IAED,KAAK,CAAC,iBAAiB,CAAC,MAA0B,EAAE,UAA+C,EAAC,uBAAuB,EAAE,KAAK,EAAC;QACjI,OAAO,IAAI,CAAC,YAAY,CAAC,GAAG,EAAE,CAAC,iBAAiB,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC;IAC5G,CAAC;IAED,KAAK,CAAC,iBAAiB,CAAC,EAAC,MAAM,EAAE,GAAG,OAAO,EAAsB;QAC/D,MAAM,GAAG,MAAM,IAAI,CAAC,MAAM,IAAI,CAAC,UAAU,EAAE,CAAC,CAAC;QAE7C,MAAM,SAAS,GAAG,IAAA,uBAAS,EAAC,MAAM,EAAE,EAAC,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,QAAQ,CAAC,EAAC,CAAC,CAAC;QAE3E,4BAA4B;QAC5B,OAAO,SAAS,CAAC,YAAY,CAAC;QAE9B,OAAO;YACL,MAAM,EAAE,SAAS;YACjB,GAAG,EAAE,IAAI,CAAC,GAAG;YACb,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,OAAO,EAAE,IAAI,CAAC,MAAM,CAAC,OAAO;YAC5B,MAAM,EAAE;gBACN,GAAG,IAAI,CAAC,MAAM;gBACd,GAAG,OAAO,CAAC,MAAM;aAClB;YACD,GAAG,OAAO;YACV,GAAG,IAAI,CAAC,KAAK,EAAE;SAChB,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,IAAY,EAAE,MAAW;QACpC,OAAO,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IACjD,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,GAAW;QACpB,OAAO,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC5B,CAAC;IAED,KAAK,CAAC,UAAU,CAAC,WAAmB,IAAI,CAAC,MAAM,CAAC,SAAS;QACvD,MAAM,GAAG,GAAG,WAAW,QAAQ,EAAE,CAAC;QAElC,OAAO,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,YAAY,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC;IACxF,CAAC;IAED,KAAK,CAAC,WAAW,CAAC,GAAY,EAAE,KAAW;QACzC,IAAI,CAAC,GAAG,IAAI,IAAI,CAAC,OAAO,EAAE;YACxB,GAAG,GAAG,IAAI,CAAC,OAAO,EAAE,SAAgB,CAAC;SACtC;QAED,IAAI,CAAC,GAAG,EAAE;YACR,OAAO;SACR;QAED,MAAM,GAAG,GAAG,YAAY,GAAG,EAAE,CAAC;QAE9B,OAAO,IAAI,CAAC,IAAI,CAAC,UAAU,CAAsB,GAAG,EAAE,CAAC,GAAG,EAAE;YAC1D,OAAO,IAAI,CAAC,YAAY,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,WAAW,CAAC,SAAgB,EAAE,GAAI,EAAE,KAAK,CAAC,CAAC;QACpF,CAAC,CAAQ,CAAC,CAAC;IACb,CAAC;IAED,KAAK,CAAC,QAAQ;QACZ,MAAM,EAAC,KAAK,EAAC,GAAG,IAAI,CAAC,YAAY,CAAC,GAAG,EAAS,CAAC;QAE/C,IAAI,IAAI,CAAC,OAAO,EAAE;YAChB,wDAAwD;YACxD,aAAa;YACb,OAAO,MAAM,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;SACvC;QAED,OAAO,IAAI,KAAK,CAAC;YACf,SAAS,EAAE,IAAI,CAAC,OAAO,EAAE,SAAS;YAClC,QAAQ,EAAE,IAAI,CAAC,MAAM,CAAC,SAAS;SAChC,CAAC,CAAC;IACL,CAAC;IAED,oBAAoB,CAAC,IAAY;QAC/B,IAAI,IAAI,CAAC,MAAM,CAAC,IAAI,KAAK,IAAI,EAAE;YAC7B,MAAM,IAAI,+CAAsB,CAAC,sBAAsB,CAAC,CAAC;SAC1D;IACH,CAAC;IAED,KAAK,CAAC,aAAa,CAAC,QAAQ,GAAG,IAAI,CAAC,MAAM,CAAC,SAAS;QAClD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC;QAE/C,IAAI,CAAC,MAAM,EAAE;YACX,MAAM,IAAI,yBAAY,CAAC,qBAAqB,QAAQ,EAAE,CAAC,CAAC;SACzD;IACH,CAAC;IAED,KAAK,CAAC,GAAS;QACb,0BAA0B;QAC1B,IAAI,IAAI,CAAC,GAAG,KAAK,UAAG,CAAC,IAAI,EAAE;YACzB,OAAO,EAAC,OAAO,EAAE,SAAS,EAAE,GAAG,EAAE,EAAC,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,SAAS,EAAC,EAAC,CAAC;SAC1E;QAED,IAAI,GAAG,EAAE;YACP,OAAO,IAAA,aAAK,EAAC,GAAG,CAAC,CAAC;SACnB;QAED,OAAO;YACL,OAAO,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,SAAS;YAC5D,GAAG,EAAE;gBACH,MAAM,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC;gBAC/B,MAAM,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC;aAChC;SACF,CAAC;IACJ,CAAC;CACF,CAAA;AA7KC;IADC,IAAA,iBAAQ,EAAC,KAAK,CAAC;;mDACP;AAGT;IADC,IAAA,WAAM,GAAE;sCACe,2BAAY;4DAAC;AAGrC;IADC,IAAA,WAAM,GAAE;sCACmB,mCAAgB;gEAAC;AAG7C;IADC,IAAA,sBAAa,GAAE;sCACA,wBAAe;oDAAC;AAXrB,sBAAsB;IADlC,IAAA,eAAU,GAAE;GACA,sBAAsB,CA+KlC;AA/KY,wDAAsB","sourcesContent":["import {Constant, InjectContext, PlatformContext} from \"@tsed/common\";\nimport {Env} from \"@tsed/core\";\nimport {Inject, Injectable} from \"@tsed/di\";\nimport {Unauthorized} from \"@tsed/exceptions\";\nimport {serialize} from \"@tsed/json-mapper\";\nimport {Account, InteractionResults, PromptDetail, Provider} from \"oidc-provider\";\nimport {\n  INTERACTION_CONTEXT,\n  INTERACTION_DETAILS,\n  INTERACTION_GRANT_ID,\n  INTERACTION_PARAMS,\n  INTERACTION_PROMPT,\n  INTERACTION_SESSION,\n  INTERACTION_UID\n} from \"../constants/constants\";\nimport {OidcSession} from \"../decorators/oidcSession\";\nimport {OidcClient} from \"../domain/interfaces\";\nimport {OidcBadInteractionName} from \"../domain/OidcBadInteractionName\";\nimport {OidcInteraction} from \"../domain/OidcInteraction\";\nimport {OidcInteractionPromptProps} from \"../domain/OidcInteractionPromptProps\";\nimport {debug} from \"../utils/debug\";\nimport {OidcInteractions} from \"./OidcInteractions\";\nimport {OidcProvider} from \"./OidcProvider\";\n\n@Injectable()\nexport class OidcInteractionContext {\n  @Constant(\"env\")\n  env: Env;\n\n  @Inject()\n  protected oidcProvider: OidcProvider;\n\n  @Inject()\n  protected oidcInteractions: OidcInteractions;\n\n  @InjectContext()\n  protected $ctx: PlatformContext;\n\n  get raw(): OidcInteraction {\n    return this.$ctx.get(INTERACTION_DETAILS)!;\n  }\n\n  get session(): OidcSession | undefined {\n    return this.raw.session as any;\n  }\n\n  get prompt(): PromptDetail {\n    return this.raw.prompt;\n  }\n\n  get params(): Record<string, any> {\n    return this.raw.params;\n  }\n\n  get uid(): string {\n    return this.raw.uid;\n  }\n\n  get grantId(): string {\n    return (this.raw as any).grantId;\n  }\n\n  async runInteraction(name?: string) {\n    name = name || this.prompt.name;\n\n    const handler = this.oidcInteractions.getInteractionHandler(name);\n\n    if (handler) {\n      this.raw.prompt = {\n        ...this.raw.prompt,\n        name,\n        reasons: [name]\n      };\n\n      await handler(this.$ctx);\n    }\n  }\n\n  async interactionDetails(): Promise<OidcInteraction> {\n    const raw = await this.oidcProvider.get().interactionDetails(this.$ctx.getReq(), this.$ctx.getRes());\n    const {uid, prompt, params, session, grantId} = raw as any;\n\n    this.$ctx.set(INTERACTION_CONTEXT, this);\n    this.$ctx.set(INTERACTION_DETAILS, raw);\n    this.$ctx.set(INTERACTION_UID, uid);\n    this.$ctx.set(INTERACTION_PROMPT, prompt);\n    this.$ctx.set(INTERACTION_PARAMS, params);\n    this.$ctx.set(INTERACTION_GRANT_ID, grantId);\n    this.$ctx.set(INTERACTION_SESSION, session);\n\n    return raw;\n  }\n\n  async interactionFinished(result: InteractionResults, options: {mergeWithLastSubmission?: boolean} = {mergeWithLastSubmission: false}) {\n    return this.oidcProvider.get().interactionFinished(this.$ctx.getReq(), this.$ctx.getRes(), result, options);\n  }\n\n  async interactionResult(result: InteractionResults, options: {mergeWithLastSubmission?: boolean} = {mergeWithLastSubmission: false}) {\n    return this.oidcProvider.get().interactionResult(this.$ctx.getReq(), this.$ctx.getRes(), result, options);\n  }\n\n  async interactionPrompt({client, ...options}: Record<string, any>): Promise<OidcInteractionPromptProps> {\n    client = client || (await this.findClient());\n\n    const newClient = serialize(client, {useAlias: false, groups: [\"render\"]});\n\n    // remove client secret from\n    delete newClient.clientSecret;\n\n    return {\n      client: newClient,\n      uid: this.uid,\n      grantId: this.grantId,\n      details: this.prompt.details,\n      params: {\n        ...this.params,\n        ...options.params\n      },\n      ...options,\n      ...this.debug()\n    };\n  }\n\n  async render(view: string, result: any): Promise<string> {\n    return this.$ctx.response.render(view, result);\n  }\n\n  async save(ttl: number): Promise<string> {\n    return this.raw.save(ttl);\n  }\n\n  async findClient(clientId: string = this.params.client_id): Promise<OidcClient | undefined> {\n    const key = `$client:${clientId}`;\n\n    return this.$ctx.cacheAsync(key, () => this.oidcProvider.get().Client.find(clientId));\n  }\n\n  async findAccount(sub?: string, token?: any): Promise<Account | undefined> {\n    if (!sub && this.session) {\n      sub = this.session?.accountId as any;\n    }\n\n    if (!sub) {\n      return;\n    }\n\n    const key = `$account:${sub}`;\n\n    return this.$ctx.cacheAsync<Account | undefined>(key, (() => {\n      return this.oidcProvider.get().Account.findAccount(undefined as any, sub!, token);\n    }) as any);\n  }\n\n  async getGrant(): Promise<InstanceType<Provider[\"Grant\"]>> {\n    const {Grant} = this.oidcProvider.get() as any;\n\n    if (this.grantId) {\n      // we'll be modifying existing grant in existing session\n      // @ts-ignore\n      return await Grant.find(this.grantId);\n    }\n\n    return new Grant({\n      accountId: this.session?.accountId,\n      clientId: this.params.client_id\n    });\n  }\n\n  checkInteractionName(name: string) {\n    if (this.prompt.name !== name) {\n      throw new OidcBadInteractionName(\"Bad interaction name\");\n    }\n  }\n\n  async checkClientId(clientId = this.params.client_id) {\n    const client = await this.findClient(clientId);\n\n    if (!client) {\n      throw new Unauthorized(`Unknown client_id ${clientId}`);\n    }\n  }\n\n  debug(obj?: any): any {\n    /* istanbul ignore next */\n    if (this.env === Env.PROD) {\n      return {session: undefined, dbg: {params: undefined, prompt: undefined}};\n    }\n\n    if (obj) {\n      return debug(obj);\n    }\n\n    return {\n      session: this.session ? this.debug(this.session) : undefined,\n      dbg: {\n        params: this.debug(this.params),\n        prompt: this.debug(this.prompt)\n      }\n    };\n  }\n}\n"]}

package/lib/cjs/services/OidcProvider.js

@@ -11,6 +11,14 @@ const events_1 = require("../utils/events");
 const OidcAdapters_1 = require("./OidcAdapters");
 const OidcInteractions_1 = require("./OidcInteractions");
 const OidcJwks_1 = require("./OidcJwks");
+function mapError(error) {
+    return Object.getOwnPropertyNames(error).reduce((obj, key) => {
+        return {
+            ...obj,
+            [key]: error[key]
+        };
+    }, {});
+}
 let OidcProvider = class OidcProvider {
     raw;
     env;
@@ -108,11 +116,7 @@ let OidcProvider = class OidcProvider {
             this.logger.error({
                 event: "OIDC_ERROR",
                 type: event,
-                error: {
-                    error_name: error.error,
-                    error_description: error.error_description,
-                    error_detail: error.error_detail
-                },
+                error: mapError(error),
                 account_id: accountId,
                 params: ctx.oidc.params,
                 headers: ctx.headers,

package/lib/cjs/services/OidcProvider.js.map

@@ -1 +1 @@
-{"version":3,"file":"OidcProvider.js","sourceRoot":"","sources":["../../../src/services/OidcProvider.ts"],"names":[],"mappings":";;;;AAAA,yCAAiF;AACjF,qCAAyC;AACzC,iCAAuE;AACvE,iDAA6G;AAC7G,sDAAoD;AAKpD,4CAAkD;AAClD,iDAA4C;AAC5C,yDAAoD;AACpD,yCAAoC;AAGpC,IAAa,YAAY,GAAzB,MAAa,YAAY;IACvB,GAAG,CAAe;IAGR,GAAG,CAAM;IAGT,QAAQ,CAAkB;IAG1B,SAAS,CAAkB;IAG3B,MAAM,CAAS;IAGf,IAAI,CAAe;IAGnB,YAAY,CAAS;IAGrB,QAAQ,CAAW;IAGnB,gBAAgB,CAAmB;IAGnC,QAAQ,CAAe;IAGvB,QAAQ,CAAkB;IAG1B,GAAG,CAAsB;IAGzB,IAAI,CAAmB;IAEjC,gBAAgB;QACd,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC;IACrB,CAAC;IAED,KAAK,CAAC,gBAAgB;QACpB,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,EAAE,IAAI,CAAC,QAAQ,CAAC,kBAAkB,EAAE,CAAC,CAAC,CAAC;QACzG,MAAM,EACJ,MAAM,EACN,QAAQ,EACR,SAAS,EACT,KAAK,EACL,QAAQ,EACR,aAAa,GAAG,IAAI,CAAC,GAAG,IAAI,UAAG,CAAC,IAAI,EACpC,OAAO,EACP,cAAc,EACd,GAAG,OAAO,EACX,GAAG,IAAI,CAAC,IAAI,CAAC;QAEd,MAAM,aAAa,GAAkB;YACnC,YAAY,EAAE;gBACZ,0BAA0B;gBAC1B,GAAG,EAAE,CAAC,GAAG,EAAE,WAAW,EAAE,EAAE,CAAC,eAAe,WAAW,CAAC,GAAG,EAAE;aAC5D;YACD,GAAG,OAAO;YACV,OAAO;YACP,IAAI;SACL,CAAC;QAEF,IAAI,QAAQ,EAAE;YACZ,aAAa,CAAC,WAAW,GAAG,CAAC,GAAG,EAAE,EAAE,EAAE,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAsB,QAAQ,CAAE,CAAC,WAAW,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC;SAC1H;QAED,IAAI,aAAa,EAAE;YACjB,IAAA,eAAQ,EAAC,aAAa,EAAE,sBAAsB,EAAE,IAAI,CAAC,CAAC;YACtD,IAAA,eAAQ,EAAC,aAAa,EAAE,qBAAqB,EAAE,IAAI,CAAC,CAAC;SACtD;QAED,MAAM,MAAM,GAAG,IAAI,CAAC,SAAS,EAAE,CAAC;QAChC,IAAI,MAAM,EAAE;YACV,IAAA,eAAQ,EAAC,aAAa,EAAE,qBAAqB,EAAE,MAAM,CAAC,CAAC;SACxD;QAED,MAAM,GAAG,GAAG,IAAI,CAAC,kBAAkB,EAAE,CAAC;QACtC,IAAI,GAAG,EAAE;YACP,IAAA,eAAQ,EAAC,aAAa,EAAE,kBAAkB,EAAE,GAAG,CAAC,CAAC;SAClD;QAED,OAAO,aAAa,CAAC;IACvB,CAAC;IAED,SAAS;QACP,IAAI,IAAI,CAAC,MAAM,EAAE;YACf,OAAO,IAAI,CAAC,MAAM,CAAC;SACpB;QAED,uBAAuB;QACvB,IAAI,IAAI,CAAC,SAAS,EAAE;YAClB,OAAO,qBAAqB,IAAI,CAAC,SAAS,EAAE,CAAC;SAC9C;QAED,OAAO,oBAAoB,IAAI,CAAC,QAAQ,EAAE,CAAC;IAC7C,CAAC;IAED,GAAG;QACD,OAAO,IAAI,CAAC,GAAG,CAAC;IAClB,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,MAAM;QACV,MAAM,EAAC,KAAK,GAAG,IAAI,CAAC,GAAG,KAAK,UAAG,CAAC,IAAI,EAAE,SAAS,EAAE,kBAAkB,GAAG,IAAI,CAAC,GAAG,KAAK,UAAG,CAAC,IAAI,EAAC,GAAG,IAAI,CAAC,IAAI,CAAC;QACzG,MAAM,aAAa,GAAG,MAAM,IAAI,CAAC,gBAAgB,EAAE,CAAC;QAEpD,MAAM,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,yBAAyB,EAAE,aAAa,CAAC,CAAC;QAEzE,MAAM,YAAY,GAAG,IAAI,wBAAY,CAAC,IAAI,CAAC,SAAS,EAAE,EAAE,aAAa,CAAC,CAAC;QAEvE,IAAI,KAAK,EAAE;YACT,uBAAuB;YACvB,QAAQ,IAAI,CAAC,YAAY,EAAE;gBACzB,QAAQ;gBACR,KAAK,SAAS;oBACZ,YAAY,CAAC,KAAK,GAAG,IAAI,CAAC;oBAC1B,MAAM;gBACR,KAAK,KAAK;oBACP,IAAI,CAAC,GAAG,CAAC,MAAc,CAAC,KAAK,GAAG,IAAI,CAAC;oBACtC,MAAM;aACT;SACF;QAED,IAAI,SAAS,EAAE;YACb,YAAY,CAAC,GAAG,CAAC,IAAI,GAAG,SAAS,CAAC;SACnC;QAED,IAAI,CAAC,GAAG,GAAG,YAAY,CAAC;QAExB,IAAI,kBAAkB,EAAE;YACtB,IAAI,CAAC,kBAAkB,EAAE,CAAC;SAC3B;QAED,0BAAiB,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE;YAC9B,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,KAAK,EAAE,IAAI,CAAC,kBAAkB,CAAC,KAAK,CAAC,CAAC,CAAC;QACrD,CAAC,CAAC,CAAC;QAEH,MAAM,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,eAAe,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC;QAEpD,OAAO,IAAI,CAAC,GAAG,CAAC;IAClB,CAAC;IAEO,kBAAkB,CAAC,KAAa;QACtC,OAAO,CAAC,GAAuB,EAAE,KAAU,EAAE,SAAkB,EAAE,GAAY,EAAE,EAAE;YAC/E,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC;gBAChB,KAAK,EAAE,YAAY;gBACnB,IAAI,EAAE,KAAK;gBACX,KAAK,EAAE;oBACL,UAAU,EAAE,KAAK,CAAC,KAAK;oBACvB,iBAAiB,EAAE,KAAK,CAAC,iBAAiB;oBAC1C,YAAY,EAAE,KAAK,CAAC,YAAY;iBACjC;gBACD,UAAU,EAAE,SAAS;gBACrB,MAAM,EAAE,GAAG,CAAC,IAAI,CAAC,MAAM;gBACvB,OAAO,EAAE,GAAG,CAAC,OAAO;gBACpB,GAAG;aACJ,CAAC,CAAC;YAEH,iDAAiD;YACjD,0DAA0D;QAC5D,CAAC,CAAC;IACJ,CAAC;IAEM,YAAY,CAAC,QAA4B,EAAE,OAA+B;QAC/E,MAAM,EAAC,MAAM,EAAE,cAAc,GAAG,EAAE,EAAE,OAAO,EAAE,GAAG,aAAa,EAAC,GAAG,OAAO,CAAC;QACzE,MAAM,MAAM,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QAE3F,OAAO,IAAI,iCAAiB,CAAC,MAAM,CAAC,aAAa,EAAE,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,OAAO,EAAE,GAAG,MAAM,CAAC,CAAC;IAC9H,CAAC;IAEO,kBAAkB;QACxB,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,YAAY,EAAE,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,OAAO,KAAK,wBAAY,CAAC,CAAC;QAEpG,IAAI,QAAQ,EAAE;YACZ,OAAO,CAAC,GAAQ,EAAE,WAAgB,EAAE,EAAE;gBACpC,qCAAqC;gBACrC,OAAO,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,WAAW,CAAC,GAAG,CAAC,CAAC;YACxD,CAAC,CAAC;SACH;IACH,CAAC;IAEO,kBAAkB;QACxB,MAAM,EAAC,UAAU,EAAE,IAAI,EAAC,GAAI,IAAI,CAAC,GAAG,CAAC,MAAc,CAAC,MAAM,CAAC,SAAS,CAAC;QAEpE,IAAI,CAAC,GAAG,CAAC,MAAc,CAAC,MAAM,CAAC,SAAS,CAAC,UAAU,GAAG,SAAS,UAAU,CAAC,OAAe,EAAE,IAAY;YACtG,IAAI,IAAI,KAAK,sBAAsB,IAAI,IAAI,KAAK,2BAA2B,EAAE;gBAC3E,OAAO;aACR;YAED,0BAA0B;YAC1B,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QAClC,CAAC,CAAC;IACJ,CAAC;IAEO,SAAS;QACf,MAAM,MAAM,GAAG,iCAAiB,CAAC,IAAI,EAAE,CAAC;QACxC,MAAM,YAAY,GAAG,IAAI,CAAC,gBAAgB,CAAC,eAAe,EAAE,CAAC;QAE7D,IAAI,YAAY,CAAC,MAAM,EAAE;YACvB,YAAY,CAAC,OAAO,CAAC,CAAC,QAAQ,EAAE,EAAE;gBAChC,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAqB,QAAQ,CAAC,KAAK,CAAE,CAAC;gBACxE,MAAM,OAAO,GAAG,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,oBAAoB,CAAC,CAAC;gBAEzD,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE;oBAC7B,MAAM,MAAM,GAAG,IAAI,CAAC,YAAY,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;oBAEpD,MAAM,CAAC,GAAG,CAAC,MAAM,EAAE,OAAO,CAAC,QAAQ,CAAC,CAAC;iBACtC;gBAED,IAAI,QAAQ,CAAC,SAAS,EAAE;oBACtB,QAAQ,CAAC,SAAS,CAAC,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,CAAE,CAAC,CAAC;iBAC/C;YACH,CAAC,CAAC,CAAC;SACJ;QAED,OAAO,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,kBAAkB,EAAE,MAAM,CAAC,CAAC;IACzD,CAAC;IAED,IAAI,MAAM;QACR,OAAO,IAAI,CAAC,IAAI,EAAE,MAAM,IAAI,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC;IACnD,CAAC;CACF,CAAA;AAhOC;IADC,IAAA,aAAQ,EAAC,KAAK,CAAC;;yCACG;AAGnB;IADC,IAAA,aAAQ,EAAC,UAAU,CAAC;;8CACe;AAGpC;IADC,IAAA,aAAQ,EAAC,WAAW,CAAC;;+CACe;AAGrC;IADC,IAAA,aAAQ,EAAC,aAAa,EAAE,EAAE,CAAC;;4CACH;AAGzB;IADC,IAAA,aAAQ,EAAC,MAAM,CAAC;;0CACY;AAG7B;IADC,IAAA,aAAQ,EAAC,eAAe,CAAC;;kDACK;AAG/B;IADC,IAAA,WAAM,GAAE;sCACW,mBAAQ;8CAAC;AAG7B;IADC,IAAA,WAAM,GAAE;sCACmB,mCAAgB;sDAAC;AAG7C;IADC,IAAA,WAAM,GAAE;sCACW,2BAAY;8CAAC;AAGjC;IADC,IAAA,WAAM,GAAE;sCACW,oBAAe;8CAAC;AAGpC;IADC,IAAA,WAAM,GAAE;sCACM,4BAAmB;yCAAC;AAGnC;IADC,IAAA,sBAAa,GAAE;sCACC,wBAAe;0CAAC;AArCtB,YAAY;IADxB,IAAA,eAAU,GAAE;GACA,YAAY,CAoOxB;AApOY,oCAAY","sourcesContent":["import {InjectContext, PlatformApplication, PlatformContext} from \"@tsed/common\";\nimport {Env, setValue} from \"@tsed/core\";\nimport {Constant, Inject, Injectable, InjectorService} from \"@tsed/di\";\nimport {Configuration, interactionPolicy, KoaContextWithOIDC, Provider as OIDCProvider} from \"oidc-provider\";\nimport {INTERACTIONS} from \"../constants/constants\";\nimport {InteractionMethods} from \"../domain/InteractionMethods\";\nimport {OidcAccountsMethods} from \"../domain/OidcAccountsMethods\";\nimport {OidcInteractionOptions} from \"../domain/OidcInteractionOptions\";\nimport {OidcSettings} from \"../domain/OidcSettings\";\nimport {OIDC_ERROR_EVENTS} from \"../utils/events\";\nimport {OidcAdapters} from \"./OidcAdapters\";\nimport {OidcInteractions} from \"./OidcInteractions\";\nimport {OidcJwks} from \"./OidcJwks\";\n\n@Injectable()\nexport class OidcProvider {\n  raw: OIDCProvider;\n\n  @Constant(\"env\")\n  protected env: Env;\n\n  @Constant(\"httpPort\")\n  protected httpPort: number | string;\n\n  @Constant(\"httpsPort\")\n  protected httpsPort: number | string;\n\n  @Constant(\"oidc.issuer\", \"\")\n  protected issuer: string;\n\n  @Constant(\"oidc\")\n  protected oidc: OidcSettings;\n\n  @Constant(\"PLATFORM_NAME\")\n  protected platformName: string;\n\n  @Inject()\n  protected oidcJwks: OidcJwks;\n\n  @Inject()\n  protected oidcInteractions: OidcInteractions;\n\n  @Inject()\n  protected adapters: OidcAdapters;\n\n  @Inject()\n  protected injector: InjectorService;\n\n  @Inject()\n  protected app: PlatformApplication;\n\n  @InjectContext()\n  protected $ctx?: PlatformContext;\n\n  hasConfiguration() {\n    return !!this.oidc;\n  }\n\n  async getConfiguration(): Promise<Configuration> {\n    const [jwks, adapter] = await Promise.all([this.oidcJwks.getJwks(), this.adapters.createAdapterClass()]);\n    const {\n      issuer,\n      jwksPath,\n      secureKey,\n      proxy,\n      Accounts,\n      secureCookies = this.env == Env.PROD,\n      Adapter,\n      connectionName,\n      ...options\n    } = this.oidc;\n\n    const configuration: Configuration = {\n      interactions: {\n        /* istanbul ignore next */\n        url: (ctx, interaction) => `interaction/${interaction.uid}`\n      },\n      ...options,\n      adapter,\n      jwks\n    };\n\n    if (Accounts) {\n      configuration.findAccount = (ctx, id, token) => this.injector.get<OidcAccountsMethods>(Accounts)!.findAccount(id, token);\n    }\n\n    if (secureCookies) {\n      setValue(configuration, \"cookies.short.secure\", true);\n      setValue(configuration, \"cookies.long.secure\", true);\n    }\n\n    const policy = this.getPolicy();\n    if (policy) {\n      setValue(configuration, \"interactions.policy\", policy);\n    }\n\n    const url = this.getInteractionsUrl();\n    if (url) {\n      setValue(configuration, \"interactions.url\", url);\n    }\n\n    return configuration;\n  }\n\n  getIssuer() {\n    if (this.issuer) {\n      return this.issuer;\n    }\n\n    // istanbul ignore next\n    if (this.httpsPort) {\n      return `https://localhost:${this.httpsPort}`;\n    }\n\n    return `http://localhost:${this.httpPort}`;\n  }\n\n  get(): OIDCProvider {\n    return this.raw;\n  }\n\n  /**\n   * Create a new instance of OidcProvider\n   */\n  async create(): Promise<void | OIDCProvider> {\n    const {proxy = this.env === Env.PROD, secureKey, allowHttpLocalhost = this.env !== Env.PROD} = this.oidc;\n    const configuration = await this.getConfiguration();\n\n    await this.injector.alterAsync(\"$alterOidcConfiguration\", configuration);\n\n    const oidcProvider = new OIDCProvider(this.getIssuer(), configuration);\n\n    if (proxy) {\n      // istanbul ignore next\n      switch (this.platformName) {\n        default:\n        case \"express\":\n          oidcProvider.proxy = true;\n          break;\n        case \"koa\":\n          (this.app.rawApp as any).proxy = true;\n          break;\n      }\n    }\n\n    if (secureKey) {\n      oidcProvider.app.keys = secureKey;\n    }\n\n    this.raw = oidcProvider;\n\n    if (allowHttpLocalhost) {\n      this.allowHttpLocalhost();\n    }\n\n    OIDC_ERROR_EVENTS.map((event) => {\n      this.raw.on(event, this.createErrorHandler(event));\n    });\n\n    await this.injector.emit(\"$onCreateOIDC\", this.raw);\n\n    return this.raw;\n  }\n\n  private createErrorHandler(event: string) {\n    return (ctx: KoaContextWithOIDC, error: any, accountId?: string, sid?: string) => {\n      this.logger.error({\n        event: \"OIDC_ERROR\",\n        type: event,\n        error: {\n          error_name: error.error,\n          error_description: error.error_description,\n          error_detail: error.error_detail\n        },\n        account_id: accountId,\n        params: ctx.oidc.params,\n        headers: ctx.headers,\n        sid\n      });\n\n      // TODO see if we need to call platformExceptions\n      // this.platformExceptions.catch(error, ctx.request.$ctx);\n    };\n  }\n\n  public createPrompt(instance: InteractionMethods, options: OidcInteractionOptions) {\n    const {checks: originalChecks = [], details, ...promptOptions} = options;\n    const checks = [...(instance.checks ? instance.checks() : originalChecks)].filter(Boolean);\n\n    return new interactionPolicy.Prompt(promptOptions, instance.details ? instance.details.bind(instance) : details, ...checks);\n  }\n\n  private getInteractionsUrl() {\n    const provider = this.injector.getProviders().find((provider) => provider.subType === INTERACTIONS);\n\n    if (provider) {\n      return (ctx: any, interaction: any) => {\n        // eslint-disable-line no-unused-vars\n        return provider.path.replace(/:uid/, interaction.uid);\n      };\n    }\n  }\n\n  private allowHttpLocalhost() {\n    const {invalidate: orig} = (this.raw.Client as any).Schema.prototype;\n\n    (this.raw.Client as any).Schema.prototype.invalidate = function invalidate(message: string, code: string) {\n      if (code === \"implicit-force-https\" || code === \"implicit-forbid-localhost\") {\n        return;\n      }\n\n      /* istanbul ignore next */\n      return orig.call(this, message);\n    };\n  }\n\n  private getPolicy() {\n    const policy = interactionPolicy.base();\n    const interactions = this.oidcInteractions.getInteractions();\n\n    if (interactions.length) {\n      interactions.forEach((provider) => {\n        const instance = this.injector.get<InteractionMethods>(provider.token)!;\n        const options = provider.store.get(\"interactionOptions\");\n\n        if (!policy.get(options.name)) {\n          const prompt = this.createPrompt(instance, options);\n\n          policy.add(prompt, options.priority);\n        }\n\n        if (instance.$onCreate) {\n          instance.$onCreate(policy.get(options.name)!);\n        }\n      });\n    }\n\n    return this.injector.alter(\"$alterOidcPolicy\", policy);\n  }\n\n  get logger() {\n    return this.$ctx?.logger || this.injector.logger;\n  }\n}\n"]}
+{"version":3,"file":"OidcProvider.js","sourceRoot":"","sources":["../../../src/services/OidcProvider.ts"],"names":[],"mappings":";;;;AAAA,yCAAiF;AACjF,qCAAyC;AACzC,iCAAuE;AACvE,iDAA6G;AAC7G,sDAAoD;AAKpD,4CAAkD;AAClD,iDAA4C;AAC5C,yDAAoD;AACpD,yCAAoC;AAEpC,SAAS,QAAQ,CAAC,KAAU;IAC1B,OAAO,MAAM,CAAC,mBAAmB,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,CAAC,GAAQ,EAAE,GAAG,EAAE,EAAE;QAChE,OAAO;YACL,GAAG,GAAG;YACN,CAAC,GAAG,CAAC,EAAE,KAAK,CAAC,GAAG,CAAC;SAClB,CAAC;IACJ,CAAC,EAAE,EAAE,CAAC,CAAC;AACT,CAAC;AAGD,IAAa,YAAY,GAAzB,MAAa,YAAY;IACvB,GAAG,CAAe;IAGR,GAAG,CAAM;IAGT,QAAQ,CAAkB;IAG1B,SAAS,CAAkB;IAG3B,MAAM,CAAS;IAGf,IAAI,CAAe;IAGnB,YAAY,CAAS;IAGrB,QAAQ,CAAW;IAGnB,gBAAgB,CAAmB;IAGnC,QAAQ,CAAe;IAGvB,QAAQ,CAAkB;IAG1B,GAAG,CAAsB;IAGzB,IAAI,CAAmB;IAEjC,gBAAgB;QACd,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC;IACrB,CAAC;IAED,KAAK,CAAC,gBAAgB;QACpB,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,EAAE,IAAI,CAAC,QAAQ,CAAC,kBAAkB,EAAE,CAAC,CAAC,CAAC;QACzG,MAAM,EACJ,MAAM,EACN,QAAQ,EACR,SAAS,EACT,KAAK,EACL,QAAQ,EACR,aAAa,GAAG,IAAI,CAAC,GAAG,IAAI,UAAG,CAAC,IAAI,EACpC,OAAO,EACP,cAAc,EACd,GAAG,OAAO,EACX,GAAG,IAAI,CAAC,IAAI,CAAC;QAEd,MAAM,aAAa,GAAkB;YACnC,YAAY,EAAE;gBACZ,0BAA0B;gBAC1B,GAAG,EAAE,CAAC,GAAG,EAAE,WAAW,EAAE,EAAE,CAAC,eAAe,WAAW,CAAC,GAAG,EAAE;aAC5D;YACD,GAAG,OAAO;YACV,OAAO;YACP,IAAI;SACL,CAAC;QAEF,IAAI,QAAQ,EAAE;YACZ,aAAa,CAAC,WAAW,GAAG,CAAC,GAAG,EAAE,EAAE,EAAE,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAsB,QAAQ,CAAE,CAAC,WAAW,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC;SAC1H;QAED,IAAI,aAAa,EAAE;YACjB,IAAA,eAAQ,EAAC,aAAa,EAAE,sBAAsB,EAAE,IAAI,CAAC,CAAC;YACtD,IAAA,eAAQ,EAAC,aAAa,EAAE,qBAAqB,EAAE,IAAI,CAAC,CAAC;SACtD;QAED,MAAM,MAAM,GAAG,IAAI,CAAC,SAAS,EAAE,CAAC;QAChC,IAAI,MAAM,EAAE;YACV,IAAA,eAAQ,EAAC,aAAa,EAAE,qBAAqB,EAAE,MAAM,CAAC,CAAC;SACxD;QAED,MAAM,GAAG,GAAG,IAAI,CAAC,kBAAkB,EAAE,CAAC;QACtC,IAAI,GAAG,EAAE;YACP,IAAA,eAAQ,EAAC,aAAa,EAAE,kBAAkB,EAAE,GAAG,CAAC,CAAC;SAClD;QAED,OAAO,aAAa,CAAC;IACvB,CAAC;IAED,SAAS;QACP,IAAI,IAAI,CAAC,MAAM,EAAE;YACf,OAAO,IAAI,CAAC,MAAM,CAAC;SACpB;QAED,uBAAuB;QACvB,IAAI,IAAI,CAAC,SAAS,EAAE;YAClB,OAAO,qBAAqB,IAAI,CAAC,SAAS,EAAE,CAAC;SAC9C;QAED,OAAO,oBAAoB,IAAI,CAAC,QAAQ,EAAE,CAAC;IAC7C,CAAC;IAED,GAAG;QACD,OAAO,IAAI,CAAC,GAAG,CAAC;IAClB,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,MAAM;QACV,MAAM,EAAC,KAAK,GAAG,IAAI,CAAC,GAAG,KAAK,UAAG,CAAC,IAAI,EAAE,SAAS,EAAE,kBAAkB,GAAG,IAAI,CAAC,GAAG,KAAK,UAAG,CAAC,IAAI,EAAC,GAAG,IAAI,CAAC,IAAI,CAAC;QACzG,MAAM,aAAa,GAAG,MAAM,IAAI,CAAC,gBAAgB,EAAE,CAAC;QAEpD,MAAM,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,yBAAyB,EAAE,aAAa,CAAC,CAAC;QAEzE,MAAM,YAAY,GAAG,IAAI,wBAAY,CAAC,IAAI,CAAC,SAAS,EAAE,EAAE,aAAa,CAAC,CAAC;QAEvE,IAAI,KAAK,EAAE;YACT,uBAAuB;YACvB,QAAQ,IAAI,CAAC,YAAY,EAAE;gBACzB,QAAQ;gBACR,KAAK,SAAS;oBACZ,YAAY,CAAC,KAAK,GAAG,IAAI,CAAC;oBAC1B,MAAM;gBACR,KAAK,KAAK;oBACP,IAAI,CAAC,GAAG,CAAC,MAAc,CAAC,KAAK,GAAG,IAAI,CAAC;oBACtC,MAAM;aACT;SACF;QAED,IAAI,SAAS,EAAE;YACb,YAAY,CAAC,GAAG,CAAC,IAAI,GAAG,SAAS,CAAC;SACnC;QAED,IAAI,CAAC,GAAG,GAAG,YAAY,CAAC;QAExB,IAAI,kBAAkB,EAAE;YACtB,IAAI,CAAC,kBAAkB,EAAE,CAAC;SAC3B;QAED,0BAAiB,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE;YAC9B,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,KAAK,EAAE,IAAI,CAAC,kBAAkB,CAAC,KAAK,CAAC,CAAC,CAAC;QACrD,CAAC,CAAC,CAAC;QAEH,MAAM,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,eAAe,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC;QAEpD,OAAO,IAAI,CAAC,GAAG,CAAC;IAClB,CAAC;IAEO,kBAAkB,CAAC,KAAa;QACtC,OAAO,CAAC,GAAuB,EAAE,KAAU,EAAE,SAAkB,EAAE,GAAY,EAAE,EAAE;YAC/E,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC;gBAChB,KAAK,EAAE,YAAY;gBACnB,IAAI,EAAE,KAAK;gBACX,KAAK,EAAE,QAAQ,CAAC,KAAK,CAAC;gBACtB,UAAU,EAAE,SAAS;gBACrB,MAAM,EAAE,GAAG,CAAC,IAAI,CAAC,MAAM;gBACvB,OAAO,EAAE,GAAG,CAAC,OAAO;gBACpB,GAAG;aACJ,CAAC,CAAC;YAEH,iDAAiD;YACjD,0DAA0D;QAC5D,CAAC,CAAC;IACJ,CAAC;IAEM,YAAY,CAAC,QAA4B,EAAE,OAA+B;QAC/E,MAAM,EAAC,MAAM,EAAE,cAAc,GAAG,EAAE,EAAE,OAAO,EAAE,GAAG,aAAa,EAAC,GAAG,OAAO,CAAC;QACzE,MAAM,MAAM,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QAE3F,OAAO,IAAI,iCAAiB,CAAC,MAAM,CAAC,aAAa,EAAE,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,OAAO,EAAE,GAAG,MAAM,CAAC,CAAC;IAC9H,CAAC;IAEO,kBAAkB;QACxB,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,YAAY,EAAE,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,OAAO,KAAK,wBAAY,CAAC,CAAC;QAEpG,IAAI,QAAQ,EAAE;YACZ,OAAO,CAAC,GAAQ,EAAE,WAAgB,EAAE,EAAE;gBACpC,qCAAqC;gBACrC,OAAO,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,WAAW,CAAC,GAAG,CAAC,CAAC;YACxD,CAAC,CAAC;SACH;IACH,CAAC;IAEO,kBAAkB;QACxB,MAAM,EAAC,UAAU,EAAE,IAAI,EAAC,GAAI,IAAI,CAAC,GAAG,CAAC,MAAc,CAAC,MAAM,CAAC,SAAS,CAAC;QAEpE,IAAI,CAAC,GAAG,CAAC,MAAc,CAAC,MAAM,CAAC,SAAS,CAAC,UAAU,GAAG,SAAS,UAAU,CAAC,OAAe,EAAE,IAAY;YACtG,IAAI,IAAI,KAAK,sBAAsB,IAAI,IAAI,KAAK,2BAA2B,EAAE;gBAC3E,OAAO;aACR;YAED,0BAA0B;YAC1B,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QAClC,CAAC,CAAC;IACJ,CAAC;IAEO,SAAS;QACf,MAAM,MAAM,GAAG,iCAAiB,CAAC,IAAI,EAAE,CAAC;QACxC,MAAM,YAAY,GAAG,IAAI,CAAC,gBAAgB,CAAC,eAAe,EAAE,CAAC;QAE7D,IAAI,YAAY,CAAC,MAAM,EAAE;YACvB,YAAY,CAAC,OAAO,CAAC,CAAC,QAAQ,EAAE,EAAE;gBAChC,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAqB,QAAQ,CAAC,KAAK,CAAE,CAAC;gBACxE,MAAM,OAAO,GAAG,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,oBAAoB,CAAC,CAAC;gBAEzD,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE;oBAC7B,MAAM,MAAM,GAAG,IAAI,CAAC,YAAY,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;oBAEpD,MAAM,CAAC,GAAG,CAAC,MAAM,EAAE,OAAO,CAAC,QAAQ,CAAC,CAAC;iBACtC;gBAED,IAAI,QAAQ,CAAC,SAAS,EAAE;oBACtB,QAAQ,CAAC,SAAS,CAAC,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,CAAE,CAAC,CAAC;iBAC/C;YACH,CAAC,CAAC,CAAC;SACJ;QAED,OAAO,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,kBAAkB,EAAE,MAAM,CAAC,CAAC;IACzD,CAAC;IAED,IAAI,MAAM;QACR,OAAO,IAAI,CAAC,IAAI,EAAE,MAAM,IAAI,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC;IACnD,CAAC;CACF,CAAA;AA5NC;IADC,IAAA,aAAQ,EAAC,KAAK,CAAC;;yCACG;AAGnB;IADC,IAAA,aAAQ,EAAC,UAAU,CAAC;;8CACe;AAGpC;IADC,IAAA,aAAQ,EAAC,WAAW,CAAC;;+CACe;AAGrC;IADC,IAAA,aAAQ,EAAC,aAAa,EAAE,EAAE,CAAC;;4CACH;AAGzB;IADC,IAAA,aAAQ,EAAC,MAAM,CAAC;;0CACY;AAG7B;IADC,IAAA,aAAQ,EAAC,eAAe,CAAC;;kDACK;AAG/B;IADC,IAAA,WAAM,GAAE;sCACW,mBAAQ;8CAAC;AAG7B;IADC,IAAA,WAAM,GAAE;sCACmB,mCAAgB;sDAAC;AAG7C;IADC,IAAA,WAAM,GAAE;sCACW,2BAAY;8CAAC;AAGjC;IADC,IAAA,WAAM,GAAE;sCACW,oBAAe;8CAAC;AAGpC;IADC,IAAA,WAAM,GAAE;sCACM,4BAAmB;yCAAC;AAGnC;IADC,IAAA,sBAAa,GAAE;sCACC,wBAAe;0CAAC;AArCtB,YAAY;IADxB,IAAA,eAAU,GAAE;GACA,YAAY,CAgOxB;AAhOY,oCAAY","sourcesContent":["import {InjectContext, PlatformApplication, PlatformContext} from \"@tsed/common\";\nimport {Env, setValue} from \"@tsed/core\";\nimport {Constant, Inject, Injectable, InjectorService} from \"@tsed/di\";\nimport {Configuration, interactionPolicy, KoaContextWithOIDC, Provider as OIDCProvider} from \"oidc-provider\";\nimport {INTERACTIONS} from \"../constants/constants\";\nimport {InteractionMethods} from \"../domain/InteractionMethods\";\nimport {OidcAccountsMethods} from \"../domain/OidcAccountsMethods\";\nimport {OidcInteractionOptions} from \"../domain/OidcInteractionOptions\";\nimport {OidcSettings} from \"../domain/OidcSettings\";\nimport {OIDC_ERROR_EVENTS} from \"../utils/events\";\nimport {OidcAdapters} from \"./OidcAdapters\";\nimport {OidcInteractions} from \"./OidcInteractions\";\nimport {OidcJwks} from \"./OidcJwks\";\n\nfunction mapError(error: any) {\n  return Object.getOwnPropertyNames(error).reduce((obj: any, key) => {\n    return {\n      ...obj,\n      [key]: error[key]\n    };\n  }, {});\n}\n\n@Injectable()\nexport class OidcProvider {\n  raw: OIDCProvider;\n\n  @Constant(\"env\")\n  protected env: Env;\n\n  @Constant(\"httpPort\")\n  protected httpPort: number | string;\n\n  @Constant(\"httpsPort\")\n  protected httpsPort: number | string;\n\n  @Constant(\"oidc.issuer\", \"\")\n  protected issuer: string;\n\n  @Constant(\"oidc\")\n  protected oidc: OidcSettings;\n\n  @Constant(\"PLATFORM_NAME\")\n  protected platformName: string;\n\n  @Inject()\n  protected oidcJwks: OidcJwks;\n\n  @Inject()\n  protected oidcInteractions: OidcInteractions;\n\n  @Inject()\n  protected adapters: OidcAdapters;\n\n  @Inject()\n  protected injector: InjectorService;\n\n  @Inject()\n  protected app: PlatformApplication;\n\n  @InjectContext()\n  protected $ctx?: PlatformContext;\n\n  hasConfiguration() {\n    return !!this.oidc;\n  }\n\n  async getConfiguration(): Promise<Configuration> {\n    const [jwks, adapter] = await Promise.all([this.oidcJwks.getJwks(), this.adapters.createAdapterClass()]);\n    const {\n      issuer,\n      jwksPath,\n      secureKey,\n      proxy,\n      Accounts,\n      secureCookies = this.env == Env.PROD,\n      Adapter,\n      connectionName,\n      ...options\n    } = this.oidc;\n\n    const configuration: Configuration = {\n      interactions: {\n        /* istanbul ignore next */\n        url: (ctx, interaction) => `interaction/${interaction.uid}`\n      },\n      ...options,\n      adapter,\n      jwks\n    };\n\n    if (Accounts) {\n      configuration.findAccount = (ctx, id, token) => this.injector.get<OidcAccountsMethods>(Accounts)!.findAccount(id, token);\n    }\n\n    if (secureCookies) {\n      setValue(configuration, \"cookies.short.secure\", true);\n      setValue(configuration, \"cookies.long.secure\", true);\n    }\n\n    const policy = this.getPolicy();\n    if (policy) {\n      setValue(configuration, \"interactions.policy\", policy);\n    }\n\n    const url = this.getInteractionsUrl();\n    if (url) {\n      setValue(configuration, \"interactions.url\", url);\n    }\n\n    return configuration;\n  }\n\n  getIssuer() {\n    if (this.issuer) {\n      return this.issuer;\n    }\n\n    // istanbul ignore next\n    if (this.httpsPort) {\n      return `https://localhost:${this.httpsPort}`;\n    }\n\n    return `http://localhost:${this.httpPort}`;\n  }\n\n  get(): OIDCProvider {\n    return this.raw;\n  }\n\n  /**\n   * Create a new instance of OidcProvider\n   */\n  async create(): Promise<void | OIDCProvider> {\n    const {proxy = this.env === Env.PROD, secureKey, allowHttpLocalhost = this.env !== Env.PROD} = this.oidc;\n    const configuration = await this.getConfiguration();\n\n    await this.injector.alterAsync(\"$alterOidcConfiguration\", configuration);\n\n    const oidcProvider = new OIDCProvider(this.getIssuer(), configuration);\n\n    if (proxy) {\n      // istanbul ignore next\n      switch (this.platformName) {\n        default:\n        case \"express\":\n          oidcProvider.proxy = true;\n          break;\n        case \"koa\":\n          (this.app.rawApp as any).proxy = true;\n          break;\n      }\n    }\n\n    if (secureKey) {\n      oidcProvider.app.keys = secureKey;\n    }\n\n    this.raw = oidcProvider;\n\n    if (allowHttpLocalhost) {\n      this.allowHttpLocalhost();\n    }\n\n    OIDC_ERROR_EVENTS.map((event) => {\n      this.raw.on(event, this.createErrorHandler(event));\n    });\n\n    await this.injector.emit(\"$onCreateOIDC\", this.raw);\n\n    return this.raw;\n  }\n\n  private createErrorHandler(event: string) {\n    return (ctx: KoaContextWithOIDC, error: any, accountId?: string, sid?: string) => {\n      this.logger.error({\n        event: \"OIDC_ERROR\",\n        type: event,\n        error: mapError(error),\n        account_id: accountId,\n        params: ctx.oidc.params,\n        headers: ctx.headers,\n        sid\n      });\n\n      // TODO see if we need to call platformExceptions\n      // this.platformExceptions.catch(error, ctx.request.$ctx);\n    };\n  }\n\n  public createPrompt(instance: InteractionMethods, options: OidcInteractionOptions) {\n    const {checks: originalChecks = [], details, ...promptOptions} = options;\n    const checks = [...(instance.checks ? instance.checks() : originalChecks)].filter(Boolean);\n\n    return new interactionPolicy.Prompt(promptOptions, instance.details ? instance.details.bind(instance) : details, ...checks);\n  }\n\n  private getInteractionsUrl() {\n    const provider = this.injector.getProviders().find((provider) => provider.subType === INTERACTIONS);\n\n    if (provider) {\n      return (ctx: any, interaction: any) => {\n        // eslint-disable-line no-unused-vars\n        return provider.path.replace(/:uid/, interaction.uid);\n      };\n    }\n  }\n\n  private allowHttpLocalhost() {\n    const {invalidate: orig} = (this.raw.Client as any).Schema.prototype;\n\n    (this.raw.Client as any).Schema.prototype.invalidate = function invalidate(message: string, code: string) {\n      if (code === \"implicit-force-https\" || code === \"implicit-forbid-localhost\") {\n        return;\n      }\n\n      /* istanbul ignore next */\n      return orig.call(this, message);\n    };\n  }\n\n  private getPolicy() {\n    const policy = interactionPolicy.base();\n    const interactions = this.oidcInteractions.getInteractions();\n\n    if (interactions.length) {\n      interactions.forEach((provider) => {\n        const instance = this.injector.get<InteractionMethods>(provider.token)!;\n        const options = provider.store.get(\"interactionOptions\");\n\n        if (!policy.get(options.name)) {\n          const prompt = this.createPrompt(instance, options);\n\n          policy.add(prompt, options.priority);\n        }\n\n        if (instance.$onCreate) {\n          instance.$onCreate(policy.get(options.name)!);\n        }\n      });\n    }\n\n    return this.injector.alter(\"$alterOidcPolicy\", policy);\n  }\n\n  get logger() {\n    return this.$ctx?.logger || this.injector.logger;\n  }\n}\n"]}

package/lib/esm/services/OidcInteractionContext.js

@@ -64,10 +64,11 @@ let OidcInteractionContext = class OidcInteractionContext {
     }
     async interactionPrompt({ client, ...options }) {
         client = client || (await this.findClient());
+        const newClient = serialize(client, { useAlias: false, groups: ["render"] });
         // remove client secret from
-        delete client.clientSecret;
+        delete newClient.clientSecret;
         return {
-            client: serialize(client, { useAlias: false, groups: ["render"] }),
+            client: newClient,
             uid: this.uid,
             grantId: this.grantId,
             details: this.prompt.details,

package/lib/esm/services/OidcInteractionContext.js.map

@@ -1 +1 @@
-{"version":3,"file":"OidcInteractionContext.js","sourceRoot":"","sources":["../../../src/services/OidcInteractionContext.ts"],"names":[],"mappings":";AAAA,OAAO,EAAC,QAAQ,EAAE,aAAa,EAAE,eAAe,EAAC,MAAM,cAAc,CAAC;AACtE,OAAO,EAAC,GAAG,EAAC,MAAM,YAAY,CAAC;AAC/B,OAAO,EAAC,MAAM,EAAE,UAAU,EAAC,MAAM,UAAU,CAAC;AAC5C,OAAO,EAAC,YAAY,EAAC,MAAM,kBAAkB,CAAC;AAC9C,OAAO,EAAC,SAAS,EAAC,MAAM,mBAAmB,CAAC;AAE5C,OAAO,EACL,mBAAmB,EACnB,mBAAmB,EACnB,oBAAoB,EACpB,kBAAkB,EAClB,kBAAkB,EAClB,mBAAmB,EACnB,eAAe,EAChB,MAAM,wBAAwB,CAAC;AAGhC,OAAO,EAAC,sBAAsB,EAAC,MAAM,kCAAkC,CAAC;AAGxE,OAAO,EAAC,KAAK,EAAC,MAAM,gBAAgB,CAAC;AACrC,OAAO,EAAC,gBAAgB,EAAC,MAAM,oBAAoB,CAAC;AACpD,OAAO,EAAC,YAAY,EAAC,MAAM,gBAAgB,CAAC;AAG5C,IAAa,sBAAsB,GAAnC,MAAa,sBAAsB;IAEjC,GAAG,CAAM;IAGC,YAAY,CAAe;IAG3B,gBAAgB,CAAmB;IAGnC,IAAI,CAAkB;IAEhC,IAAI,GAAG;QACL,OAAO,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,mBAAmB,CAAE,CAAC;IAC7C,CAAC;IAED,IAAI,OAAO;QACT,OAAO,IAAI,CAAC,GAAG,CAAC,OAAc,CAAC;IACjC,CAAC;IAED,IAAI,MAAM;QACR,OAAO,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC;IACzB,CAAC;IAED,IAAI,MAAM;QACR,OAAO,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC;IACzB,CAAC;IAED,IAAI,GAAG;QACL,OAAO,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;IACtB,CAAC;IAED,IAAI,OAAO;QACT,OAAQ,IAAI,CAAC,GAAW,CAAC,OAAO,CAAC;IACnC,CAAC;IAED,KAAK,CAAC,cAAc,CAAC,IAAa;QAChC,IAAI,GAAG,IAAI,IAAI,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC;QAEhC,MAAM,OAAO,GAAG,IAAI,CAAC,gBAAgB,CAAC,qBAAqB,CAAC,IAAI,CAAC,CAAC;QAElE,IAAI,OAAO,EAAE;YACX,IAAI,CAAC,GAAG,CAAC,MAAM,GAAG;gBAChB,GAAG,IAAI,CAAC,GAAG,CAAC,MAAM;gBAClB,IAAI;gBACJ,OAAO,EAAE,CAAC,IAAI,CAAC;aAChB,CAAC;YAEF,MAAM,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;SAC1B;IACH,CAAC;IAED,KAAK,CAAC,kBAAkB;QACtB,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,GAAG,EAAE,CAAC,kBAAkB,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;QACrG,MAAM,EAAC,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,EAAC,GAAG,GAAU,CAAC;QAE3D,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,mBAAmB,EAAE,IAAI,CAAC,CAAC;QACzC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,mBAAmB,EAAE,GAAG,CAAC,CAAC;QACxC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,eAAe,EAAE,GAAG,CAAC,CAAC;QACpC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,kBAAkB,EAAE,MAAM,CAAC,CAAC;QAC1C,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,kBAAkB,EAAE,MAAM,CAAC,CAAC;QAC1C,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,oBAAoB,EAAE,OAAO,CAAC,CAAC;QAC7C,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,mBAAmB,EAAE,OAAO,CAAC,CAAC;QAE5C,OAAO,GAAG,CAAC;IACb,CAAC;IAED,KAAK,CAAC,mBAAmB,CAAC,MAA0B,EAAE,UAA+C,EAAC,uBAAuB,EAAE,KAAK,EAAC;QACnI,OAAO,IAAI,CAAC,YAAY,CAAC,GAAG,EAAE,CAAC,mBAAmB,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC;IAC9G,CAAC;IAED,KAAK,CAAC,iBAAiB,CAAC,MAA0B,EAAE,UAA+C,EAAC,uBAAuB,EAAE,KAAK,EAAC;QACjI,OAAO,IAAI,CAAC,YAAY,CAAC,GAAG,EAAE,CAAC,iBAAiB,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC;IAC5G,CAAC;IAED,KAAK,CAAC,iBAAiB,CAAC,EAAC,MAAM,EAAE,GAAG,OAAO,EAAsB;QAC/D,MAAM,GAAG,MAAM,IAAI,CAAC,MAAM,IAAI,CAAC,UAAU,EAAE,CAAC,CAAC;QAE7C,4BAA4B;QAC5B,OAAO,MAAM,CAAC,YAAY,CAAC;QAE3B,OAAO;YACL,MAAM,EAAE,SAAS,CAAC,MAAM,EAAE,EAAC,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,QAAQ,CAAC,EAAC,CAAC;YAChE,GAAG,EAAE,IAAI,CAAC,GAAG;YACb,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,OAAO,EAAE,IAAI,CAAC,MAAM,CAAC,OAAO;YAC5B,MAAM,EAAE;gBACN,GAAG,IAAI,CAAC,MAAM;gBACd,GAAG,OAAO,CAAC,MAAM;aAClB;YACD,GAAG,OAAO;YACV,GAAG,IAAI,CAAC,KAAK,EAAE;SAChB,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,IAAY,EAAE,MAAW;QACpC,OAAO,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IACjD,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,GAAW;QACpB,OAAO,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC5B,CAAC;IAED,KAAK,CAAC,UAAU,CAAC,WAAmB,IAAI,CAAC,MAAM,CAAC,SAAS;QACvD,MAAM,GAAG,GAAG,WAAW,QAAQ,EAAE,CAAC;QAElC,OAAO,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,YAAY,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC;IACxF,CAAC;IAED,KAAK,CAAC,WAAW,CAAC,GAAY,EAAE,KAAW;QACzC,IAAI,CAAC,GAAG,IAAI,IAAI,CAAC,OAAO,EAAE;YACxB,GAAG,GAAG,IAAI,CAAC,OAAO,EAAE,SAAgB,CAAC;SACtC;QAED,IAAI,CAAC,GAAG,EAAE;YACR,OAAO;SACR;QAED,MAAM,GAAG,GAAG,YAAY,GAAG,EAAE,CAAC;QAE9B,OAAO,IAAI,CAAC,IAAI,CAAC,UAAU,CAAsB,GAAG,EAAE,CAAC,GAAG,EAAE;YAC1D,OAAO,IAAI,CAAC,YAAY,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,WAAW,CAAC,SAAgB,EAAE,GAAI,EAAE,KAAK,CAAC,CAAC;QACpF,CAAC,CAAQ,CAAC,CAAC;IACb,CAAC;IAED,KAAK,CAAC,QAAQ;QACZ,MAAM,EAAC,KAAK,EAAC,GAAG,IAAI,CAAC,YAAY,CAAC,GAAG,EAAS,CAAC;QAE/C,IAAI,IAAI,CAAC,OAAO,EAAE;YAChB,wDAAwD;YACxD,aAAa;YACb,OAAO,MAAM,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;SACvC;QAED,OAAO,IAAI,KAAK,CAAC;YACf,SAAS,EAAE,IAAI,CAAC,OAAO,EAAE,SAAS;YAClC,QAAQ,EAAE,IAAI,CAAC,MAAM,CAAC,SAAS;SAChC,CAAC,CAAC;IACL,CAAC;IAED,oBAAoB,CAAC,IAAY;QAC/B,IAAI,IAAI,CAAC,MAAM,CAAC,IAAI,KAAK,IAAI,EAAE;YAC7B,MAAM,IAAI,sBAAsB,CAAC,sBAAsB,CAAC,CAAC;SAC1D;IACH,CAAC;IAED,KAAK,CAAC,aAAa,CAAC,QAAQ,GAAG,IAAI,CAAC,MAAM,CAAC,SAAS;QAClD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC;QAE/C,IAAI,CAAC,MAAM,EAAE;YACX,MAAM,IAAI,YAAY,CAAC,qBAAqB,QAAQ,EAAE,CAAC,CAAC;SACzD;IACH,CAAC;IAED,KAAK,CAAC,GAAS;QACb,0BAA0B;QAC1B,IAAI,IAAI,CAAC,GAAG,KAAK,GAAG,CAAC,IAAI,EAAE;YACzB,OAAO,EAAC,OAAO,EAAE,SAAS,EAAE,GAAG,EAAE,EAAC,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,SAAS,EAAC,EAAC,CAAC;SAC1E;QAED,IAAI,GAAG,EAAE;YACP,OAAO,KAAK,CAAC,GAAG,CAAC,CAAC;SACnB;QAED,OAAO;YACL,OAAO,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,SAAS;YAC5D,GAAG,EAAE;gBACH,MAAM,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC;gBAC/B,MAAM,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC;aAChC;SACF,CAAC;IACJ,CAAC;CACF,CAAA;AA3KC;IADC,QAAQ,CAAC,KAAK,CAAC;;mDACP;AAGT;IADC,MAAM,EAAE;8BACe,YAAY;4DAAC;AAGrC;IADC,MAAM,EAAE;8BACmB,gBAAgB;gEAAC;AAG7C;IADC,aAAa,EAAE;8BACA,eAAe;oDAAC;AAXrB,sBAAsB;IADlC,UAAU,EAAE;GACA,sBAAsB,CA6KlC;SA7KY,sBAAsB","sourcesContent":["import {Constant, InjectContext, PlatformContext} from \"@tsed/common\";\nimport {Env} from \"@tsed/core\";\nimport {Inject, Injectable} from \"@tsed/di\";\nimport {Unauthorized} from \"@tsed/exceptions\";\nimport {serialize} from \"@tsed/json-mapper\";\nimport {Account, InteractionResults, PromptDetail, Provider} from \"oidc-provider\";\nimport {\n  INTERACTION_CONTEXT,\n  INTERACTION_DETAILS,\n  INTERACTION_GRANT_ID,\n  INTERACTION_PARAMS,\n  INTERACTION_PROMPT,\n  INTERACTION_SESSION,\n  INTERACTION_UID\n} from \"../constants/constants\";\nimport {OidcSession} from \"../decorators/oidcSession\";\nimport {OidcClient} from \"../domain/interfaces\";\nimport {OidcBadInteractionName} from \"../domain/OidcBadInteractionName\";\nimport {OidcInteraction} from \"../domain/OidcInteraction\";\nimport {OidcInteractionPromptProps} from \"../domain/OidcInteractionPromptProps\";\nimport {debug} from \"../utils/debug\";\nimport {OidcInteractions} from \"./OidcInteractions\";\nimport {OidcProvider} from \"./OidcProvider\";\n\n@Injectable()\nexport class OidcInteractionContext {\n  @Constant(\"env\")\n  env: Env;\n\n  @Inject()\n  protected oidcProvider: OidcProvider;\n\n  @Inject()\n  protected oidcInteractions: OidcInteractions;\n\n  @InjectContext()\n  protected $ctx: PlatformContext;\n\n  get raw(): OidcInteraction {\n    return this.$ctx.get(INTERACTION_DETAILS)!;\n  }\n\n  get session(): OidcSession | undefined {\n    return this.raw.session as any;\n  }\n\n  get prompt(): PromptDetail {\n    return this.raw.prompt;\n  }\n\n  get params(): Record<string, any> {\n    return this.raw.params;\n  }\n\n  get uid(): string {\n    return this.raw.uid;\n  }\n\n  get grantId(): string {\n    return (this.raw as any).grantId;\n  }\n\n  async runInteraction(name?: string) {\n    name = name || this.prompt.name;\n\n    const handler = this.oidcInteractions.getInteractionHandler(name);\n\n    if (handler) {\n      this.raw.prompt = {\n        ...this.raw.prompt,\n        name,\n        reasons: [name]\n      };\n\n      await handler(this.$ctx);\n    }\n  }\n\n  async interactionDetails(): Promise<OidcInteraction> {\n    const raw = await this.oidcProvider.get().interactionDetails(this.$ctx.getReq(), this.$ctx.getRes());\n    const {uid, prompt, params, session, grantId} = raw as any;\n\n    this.$ctx.set(INTERACTION_CONTEXT, this);\n    this.$ctx.set(INTERACTION_DETAILS, raw);\n    this.$ctx.set(INTERACTION_UID, uid);\n    this.$ctx.set(INTERACTION_PROMPT, prompt);\n    this.$ctx.set(INTERACTION_PARAMS, params);\n    this.$ctx.set(INTERACTION_GRANT_ID, grantId);\n    this.$ctx.set(INTERACTION_SESSION, session);\n\n    return raw;\n  }\n\n  async interactionFinished(result: InteractionResults, options: {mergeWithLastSubmission?: boolean} = {mergeWithLastSubmission: false}) {\n    return this.oidcProvider.get().interactionFinished(this.$ctx.getReq(), this.$ctx.getRes(), result, options);\n  }\n\n  async interactionResult(result: InteractionResults, options: {mergeWithLastSubmission?: boolean} = {mergeWithLastSubmission: false}) {\n    return this.oidcProvider.get().interactionResult(this.$ctx.getReq(), this.$ctx.getRes(), result, options);\n  }\n\n  async interactionPrompt({client, ...options}: Record<string, any>): Promise<OidcInteractionPromptProps> {\n    client = client || (await this.findClient());\n\n    // remove client secret from\n    delete client.clientSecret;\n\n    return {\n      client: serialize(client, {useAlias: false, groups: [\"render\"]}),\n      uid: this.uid,\n      grantId: this.grantId,\n      details: this.prompt.details,\n      params: {\n        ...this.params,\n        ...options.params\n      },\n      ...options,\n      ...this.debug()\n    };\n  }\n\n  async render(view: string, result: any): Promise<string> {\n    return this.$ctx.response.render(view, result);\n  }\n\n  async save(ttl: number): Promise<string> {\n    return this.raw.save(ttl);\n  }\n\n  async findClient(clientId: string = this.params.client_id): Promise<OidcClient | undefined> {\n    const key = `$client:${clientId}`;\n\n    return this.$ctx.cacheAsync(key, () => this.oidcProvider.get().Client.find(clientId));\n  }\n\n  async findAccount(sub?: string, token?: any): Promise<Account | undefined> {\n    if (!sub && this.session) {\n      sub = this.session?.accountId as any;\n    }\n\n    if (!sub) {\n      return;\n    }\n\n    const key = `$account:${sub}`;\n\n    return this.$ctx.cacheAsync<Account | undefined>(key, (() => {\n      return this.oidcProvider.get().Account.findAccount(undefined as any, sub!, token);\n    }) as any);\n  }\n\n  async getGrant(): Promise<InstanceType<Provider[\"Grant\"]>> {\n    const {Grant} = this.oidcProvider.get() as any;\n\n    if (this.grantId) {\n      // we'll be modifying existing grant in existing session\n      // @ts-ignore\n      return await Grant.find(this.grantId);\n    }\n\n    return new Grant({\n      accountId: this.session?.accountId,\n      clientId: this.params.client_id\n    });\n  }\n\n  checkInteractionName(name: string) {\n    if (this.prompt.name !== name) {\n      throw new OidcBadInteractionName(\"Bad interaction name\");\n    }\n  }\n\n  async checkClientId(clientId = this.params.client_id) {\n    const client = await this.findClient(clientId);\n\n    if (!client) {\n      throw new Unauthorized(`Unknown client_id ${clientId}`);\n    }\n  }\n\n  debug(obj?: any): any {\n    /* istanbul ignore next */\n    if (this.env === Env.PROD) {\n      return {session: undefined, dbg: {params: undefined, prompt: undefined}};\n    }\n\n    if (obj) {\n      return debug(obj);\n    }\n\n    return {\n      session: this.session ? this.debug(this.session) : undefined,\n      dbg: {\n        params: this.debug(this.params),\n        prompt: this.debug(this.prompt)\n      }\n    };\n  }\n}\n"]}
+{"version":3,"file":"OidcInteractionContext.js","sourceRoot":"","sources":["../../../src/services/OidcInteractionContext.ts"],"names":[],"mappings":";AAAA,OAAO,EAAC,QAAQ,EAAE,aAAa,EAAE,eAAe,EAAC,MAAM,cAAc,CAAC;AACtE,OAAO,EAAC,GAAG,EAAC,MAAM,YAAY,CAAC;AAC/B,OAAO,EAAC,MAAM,EAAE,UAAU,EAAC,MAAM,UAAU,CAAC;AAC5C,OAAO,EAAC,YAAY,EAAC,MAAM,kBAAkB,CAAC;AAC9C,OAAO,EAAC,SAAS,EAAC,MAAM,mBAAmB,CAAC;AAE5C,OAAO,EACL,mBAAmB,EACnB,mBAAmB,EACnB,oBAAoB,EACpB,kBAAkB,EAClB,kBAAkB,EAClB,mBAAmB,EACnB,eAAe,EAChB,MAAM,wBAAwB,CAAC;AAGhC,OAAO,EAAC,sBAAsB,EAAC,MAAM,kCAAkC,CAAC;AAGxE,OAAO,EAAC,KAAK,EAAC,MAAM,gBAAgB,CAAC;AACrC,OAAO,EAAC,gBAAgB,EAAC,MAAM,oBAAoB,CAAC;AACpD,OAAO,EAAC,YAAY,EAAC,MAAM,gBAAgB,CAAC;AAG5C,IAAa,sBAAsB,GAAnC,MAAa,sBAAsB;IAEjC,GAAG,CAAM;IAGC,YAAY,CAAe;IAG3B,gBAAgB,CAAmB;IAGnC,IAAI,CAAkB;IAEhC,IAAI,GAAG;QACL,OAAO,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,mBAAmB,CAAE,CAAC;IAC7C,CAAC;IAED,IAAI,OAAO;QACT,OAAO,IAAI,CAAC,GAAG,CAAC,OAAc,CAAC;IACjC,CAAC;IAED,IAAI,MAAM;QACR,OAAO,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC;IACzB,CAAC;IAED,IAAI,MAAM;QACR,OAAO,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC;IACzB,CAAC;IAED,IAAI,GAAG;QACL,OAAO,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;IACtB,CAAC;IAED,IAAI,OAAO;QACT,OAAQ,IAAI,CAAC,GAAW,CAAC,OAAO,CAAC;IACnC,CAAC;IAED,KAAK,CAAC,cAAc,CAAC,IAAa;QAChC,IAAI,GAAG,IAAI,IAAI,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC;QAEhC,MAAM,OAAO,GAAG,IAAI,CAAC,gBAAgB,CAAC,qBAAqB,CAAC,IAAI,CAAC,CAAC;QAElE,IAAI,OAAO,EAAE;YACX,IAAI,CAAC,GAAG,CAAC,MAAM,GAAG;gBAChB,GAAG,IAAI,CAAC,GAAG,CAAC,MAAM;gBAClB,IAAI;gBACJ,OAAO,EAAE,CAAC,IAAI,CAAC;aAChB,CAAC;YAEF,MAAM,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;SAC1B;IACH,CAAC;IAED,KAAK,CAAC,kBAAkB;QACtB,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,GAAG,EAAE,CAAC,kBAAkB,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;QACrG,MAAM,EAAC,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,EAAC,GAAG,GAAU,CAAC;QAE3D,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,mBAAmB,EAAE,IAAI,CAAC,CAAC;QACzC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,mBAAmB,EAAE,GAAG,CAAC,CAAC;QACxC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,eAAe,EAAE,GAAG,CAAC,CAAC;QACpC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,kBAAkB,EAAE,MAAM,CAAC,CAAC;QAC1C,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,kBAAkB,EAAE,MAAM,CAAC,CAAC;QAC1C,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,oBAAoB,EAAE,OAAO,CAAC,CAAC;QAC7C,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,mBAAmB,EAAE,OAAO,CAAC,CAAC;QAE5C,OAAO,GAAG,CAAC;IACb,CAAC;IAED,KAAK,CAAC,mBAAmB,CAAC,MAA0B,EAAE,UAA+C,EAAC,uBAAuB,EAAE,KAAK,EAAC;QACnI,OAAO,IAAI,CAAC,YAAY,CAAC,GAAG,EAAE,CAAC,mBAAmB,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC;IAC9G,CAAC;IAED,KAAK,CAAC,iBAAiB,CAAC,MAA0B,EAAE,UAA+C,EAAC,uBAAuB,EAAE,KAAK,EAAC;QACjI,OAAO,IAAI,CAAC,YAAY,CAAC,GAAG,EAAE,CAAC,iBAAiB,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC;IAC5G,CAAC;IAED,KAAK,CAAC,iBAAiB,CAAC,EAAC,MAAM,EAAE,GAAG,OAAO,EAAsB;QAC/D,MAAM,GAAG,MAAM,IAAI,CAAC,MAAM,IAAI,CAAC,UAAU,EAAE,CAAC,CAAC;QAE7C,MAAM,SAAS,GAAG,SAAS,CAAC,MAAM,EAAE,EAAC,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,QAAQ,CAAC,EAAC,CAAC,CAAC;QAE3E,4BAA4B;QAC5B,OAAO,SAAS,CAAC,YAAY,CAAC;QAE9B,OAAO;YACL,MAAM,EAAE,SAAS;YACjB,GAAG,EAAE,IAAI,CAAC,GAAG;YACb,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,OAAO,EAAE,IAAI,CAAC,MAAM,CAAC,OAAO;YAC5B,MAAM,EAAE;gBACN,GAAG,IAAI,CAAC,MAAM;gBACd,GAAG,OAAO,CAAC,MAAM;aAClB;YACD,GAAG,OAAO;YACV,GAAG,IAAI,CAAC,KAAK,EAAE;SAChB,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,IAAY,EAAE,MAAW;QACpC,OAAO,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IACjD,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,GAAW;QACpB,OAAO,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC5B,CAAC;IAED,KAAK,CAAC,UAAU,CAAC,WAAmB,IAAI,CAAC,MAAM,CAAC,SAAS;QACvD,MAAM,GAAG,GAAG,WAAW,QAAQ,EAAE,CAAC;QAElC,OAAO,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,YAAY,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC;IACxF,CAAC;IAED,KAAK,CAAC,WAAW,CAAC,GAAY,EAAE,KAAW;QACzC,IAAI,CAAC,GAAG,IAAI,IAAI,CAAC,OAAO,EAAE;YACxB,GAAG,GAAG,IAAI,CAAC,OAAO,EAAE,SAAgB,CAAC;SACtC;QAED,IAAI,CAAC,GAAG,EAAE;YACR,OAAO;SACR;QAED,MAAM,GAAG,GAAG,YAAY,GAAG,EAAE,CAAC;QAE9B,OAAO,IAAI,CAAC,IAAI,CAAC,UAAU,CAAsB,GAAG,EAAE,CAAC,GAAG,EAAE;YAC1D,OAAO,IAAI,CAAC,YAAY,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,WAAW,CAAC,SAAgB,EAAE,GAAI,EAAE,KAAK,CAAC,CAAC;QACpF,CAAC,CAAQ,CAAC,CAAC;IACb,CAAC;IAED,KAAK,CAAC,QAAQ;QACZ,MAAM,EAAC,KAAK,EAAC,GAAG,IAAI,CAAC,YAAY,CAAC,GAAG,EAAS,CAAC;QAE/C,IAAI,IAAI,CAAC,OAAO,EAAE;YAChB,wDAAwD;YACxD,aAAa;YACb,OAAO,MAAM,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;SACvC;QAED,OAAO,IAAI,KAAK,CAAC;YACf,SAAS,EAAE,IAAI,CAAC,OAAO,EAAE,SAAS;YAClC,QAAQ,EAAE,IAAI,CAAC,MAAM,CAAC,SAAS;SAChC,CAAC,CAAC;IACL,CAAC;IAED,oBAAoB,CAAC,IAAY;QAC/B,IAAI,IAAI,CAAC,MAAM,CAAC,IAAI,KAAK,IAAI,EAAE;YAC7B,MAAM,IAAI,sBAAsB,CAAC,sBAAsB,CAAC,CAAC;SAC1D;IACH,CAAC;IAED,KAAK,CAAC,aAAa,CAAC,QAAQ,GAAG,IAAI,CAAC,MAAM,CAAC,SAAS;QAClD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC;QAE/C,IAAI,CAAC,MAAM,EAAE;YACX,MAAM,IAAI,YAAY,CAAC,qBAAqB,QAAQ,EAAE,CAAC,CAAC;SACzD;IACH,CAAC;IAED,KAAK,CAAC,GAAS;QACb,0BAA0B;QAC1B,IAAI,IAAI,CAAC,GAAG,KAAK,GAAG,CAAC,IAAI,EAAE;YACzB,OAAO,EAAC,OAAO,EAAE,SAAS,EAAE,GAAG,EAAE,EAAC,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,SAAS,EAAC,EAAC,CAAC;SAC1E;QAED,IAAI,GAAG,EAAE;YACP,OAAO,KAAK,CAAC,GAAG,CAAC,CAAC;SACnB;QAED,OAAO;YACL,OAAO,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,SAAS;YAC5D,GAAG,EAAE;gBACH,MAAM,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC;gBAC/B,MAAM,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC;aAChC;SACF,CAAC;IACJ,CAAC;CACF,CAAA;AA7KC;IADC,QAAQ,CAAC,KAAK,CAAC;;mDACP;AAGT;IADC,MAAM,EAAE;8BACe,YAAY;4DAAC;AAGrC;IADC,MAAM,EAAE;8BACmB,gBAAgB;gEAAC;AAG7C;IADC,aAAa,EAAE;8BACA,eAAe;oDAAC;AAXrB,sBAAsB;IADlC,UAAU,EAAE;GACA,sBAAsB,CA+KlC;SA/KY,sBAAsB","sourcesContent":["import {Constant, InjectContext, PlatformContext} from \"@tsed/common\";\nimport {Env} from \"@tsed/core\";\nimport {Inject, Injectable} from \"@tsed/di\";\nimport {Unauthorized} from \"@tsed/exceptions\";\nimport {serialize} from \"@tsed/json-mapper\";\nimport {Account, InteractionResults, PromptDetail, Provider} from \"oidc-provider\";\nimport {\n  INTERACTION_CONTEXT,\n  INTERACTION_DETAILS,\n  INTERACTION_GRANT_ID,\n  INTERACTION_PARAMS,\n  INTERACTION_PROMPT,\n  INTERACTION_SESSION,\n  INTERACTION_UID\n} from \"../constants/constants\";\nimport {OidcSession} from \"../decorators/oidcSession\";\nimport {OidcClient} from \"../domain/interfaces\";\nimport {OidcBadInteractionName} from \"../domain/OidcBadInteractionName\";\nimport {OidcInteraction} from \"../domain/OidcInteraction\";\nimport {OidcInteractionPromptProps} from \"../domain/OidcInteractionPromptProps\";\nimport {debug} from \"../utils/debug\";\nimport {OidcInteractions} from \"./OidcInteractions\";\nimport {OidcProvider} from \"./OidcProvider\";\n\n@Injectable()\nexport class OidcInteractionContext {\n  @Constant(\"env\")\n  env: Env;\n\n  @Inject()\n  protected oidcProvider: OidcProvider;\n\n  @Inject()\n  protected oidcInteractions: OidcInteractions;\n\n  @InjectContext()\n  protected $ctx: PlatformContext;\n\n  get raw(): OidcInteraction {\n    return this.$ctx.get(INTERACTION_DETAILS)!;\n  }\n\n  get session(): OidcSession | undefined {\n    return this.raw.session as any;\n  }\n\n  get prompt(): PromptDetail {\n    return this.raw.prompt;\n  }\n\n  get params(): Record<string, any> {\n    return this.raw.params;\n  }\n\n  get uid(): string {\n    return this.raw.uid;\n  }\n\n  get grantId(): string {\n    return (this.raw as any).grantId;\n  }\n\n  async runInteraction(name?: string) {\n    name = name || this.prompt.name;\n\n    const handler = this.oidcInteractions.getInteractionHandler(name);\n\n    if (handler) {\n      this.raw.prompt = {\n        ...this.raw.prompt,\n        name,\n        reasons: [name]\n      };\n\n      await handler(this.$ctx);\n    }\n  }\n\n  async interactionDetails(): Promise<OidcInteraction> {\n    const raw = await this.oidcProvider.get().interactionDetails(this.$ctx.getReq(), this.$ctx.getRes());\n    const {uid, prompt, params, session, grantId} = raw as any;\n\n    this.$ctx.set(INTERACTION_CONTEXT, this);\n    this.$ctx.set(INTERACTION_DETAILS, raw);\n    this.$ctx.set(INTERACTION_UID, uid);\n    this.$ctx.set(INTERACTION_PROMPT, prompt);\n    this.$ctx.set(INTERACTION_PARAMS, params);\n    this.$ctx.set(INTERACTION_GRANT_ID, grantId);\n    this.$ctx.set(INTERACTION_SESSION, session);\n\n    return raw;\n  }\n\n  async interactionFinished(result: InteractionResults, options: {mergeWithLastSubmission?: boolean} = {mergeWithLastSubmission: false}) {\n    return this.oidcProvider.get().interactionFinished(this.$ctx.getReq(), this.$ctx.getRes(), result, options);\n  }\n\n  async interactionResult(result: InteractionResults, options: {mergeWithLastSubmission?: boolean} = {mergeWithLastSubmission: false}) {\n    return this.oidcProvider.get().interactionResult(this.$ctx.getReq(), this.$ctx.getRes(), result, options);\n  }\n\n  async interactionPrompt({client, ...options}: Record<string, any>): Promise<OidcInteractionPromptProps> {\n    client = client || (await this.findClient());\n\n    const newClient = serialize(client, {useAlias: false, groups: [\"render\"]});\n\n    // remove client secret from\n    delete newClient.clientSecret;\n\n    return {\n      client: newClient,\n      uid: this.uid,\n      grantId: this.grantId,\n      details: this.prompt.details,\n      params: {\n        ...this.params,\n        ...options.params\n      },\n      ...options,\n      ...this.debug()\n    };\n  }\n\n  async render(view: string, result: any): Promise<string> {\n    return this.$ctx.response.render(view, result);\n  }\n\n  async save(ttl: number): Promise<string> {\n    return this.raw.save(ttl);\n  }\n\n  async findClient(clientId: string = this.params.client_id): Promise<OidcClient | undefined> {\n    const key = `$client:${clientId}`;\n\n    return this.$ctx.cacheAsync(key, () => this.oidcProvider.get().Client.find(clientId));\n  }\n\n  async findAccount(sub?: string, token?: any): Promise<Account | undefined> {\n    if (!sub && this.session) {\n      sub = this.session?.accountId as any;\n    }\n\n    if (!sub) {\n      return;\n    }\n\n    const key = `$account:${sub}`;\n\n    return this.$ctx.cacheAsync<Account | undefined>(key, (() => {\n      return this.oidcProvider.get().Account.findAccount(undefined as any, sub!, token);\n    }) as any);\n  }\n\n  async getGrant(): Promise<InstanceType<Provider[\"Grant\"]>> {\n    const {Grant} = this.oidcProvider.get() as any;\n\n    if (this.grantId) {\n      // we'll be modifying existing grant in existing session\n      // @ts-ignore\n      return await Grant.find(this.grantId);\n    }\n\n    return new Grant({\n      accountId: this.session?.accountId,\n      clientId: this.params.client_id\n    });\n  }\n\n  checkInteractionName(name: string) {\n    if (this.prompt.name !== name) {\n      throw new OidcBadInteractionName(\"Bad interaction name\");\n    }\n  }\n\n  async checkClientId(clientId = this.params.client_id) {\n    const client = await this.findClient(clientId);\n\n    if (!client) {\n      throw new Unauthorized(`Unknown client_id ${clientId}`);\n    }\n  }\n\n  debug(obj?: any): any {\n    /* istanbul ignore next */\n    if (this.env === Env.PROD) {\n      return {session: undefined, dbg: {params: undefined, prompt: undefined}};\n    }\n\n    if (obj) {\n      return debug(obj);\n    }\n\n    return {\n      session: this.session ? this.debug(this.session) : undefined,\n      dbg: {\n        params: this.debug(this.params),\n        prompt: this.debug(this.prompt)\n      }\n    };\n  }\n}\n"]}

package/lib/esm/services/OidcProvider.js

@@ -8,6 +8,14 @@ import { OIDC_ERROR_EVENTS } from "../utils/events.js";
 import { OidcAdapters } from "./OidcAdapters.js";
 import { OidcInteractions } from "./OidcInteractions.js";
 import { OidcJwks } from "./OidcJwks.js";
+function mapError(error) {
+    return Object.getOwnPropertyNames(error).reduce((obj, key) => {
+        return {
+            ...obj,
+            [key]: error[key]
+        };
+    }, {});
+}
 let OidcProvider = class OidcProvider {
     raw;
     env;
@@ -105,11 +113,7 @@ let OidcProvider = class OidcProvider {
             this.logger.error({
                 event: "OIDC_ERROR",
                 type: event,
-                error: {
-                    error_name: error.error,
-                    error_description: error.error_description,
-                    error_detail: error.error_detail
-                },
+                error: mapError(error),
                 account_id: accountId,
                 params: ctx.oidc.params,
                 headers: ctx.headers,

package/lib/esm/services/OidcProvider.js.map

@@ -1 +1 @@
-{"version":3,"file":"OidcProvider.js","sourceRoot":"","sources":["../../../src/services/OidcProvider.ts"],"names":[],"mappings":";AAAA,OAAO,EAAC,aAAa,EAAE,mBAAmB,EAAE,eAAe,EAAC,MAAM,cAAc,CAAC;AACjF,OAAO,EAAC,GAAG,EAAE,QAAQ,EAAC,MAAM,YAAY,CAAC;AACzC,OAAO,EAAC,QAAQ,EAAE,MAAM,EAAE,UAAU,EAAE,eAAe,EAAC,MAAM,UAAU,CAAC;AACvE,OAAO,EAAgB,iBAAiB,EAAsB,QAAQ,IAAI,YAAY,EAAC,MAAM,eAAe,CAAC;AAC7G,OAAO,EAAC,YAAY,EAAC,MAAM,wBAAwB,CAAC;AAKpD,OAAO,EAAC,iBAAiB,EAAC,MAAM,iBAAiB,CAAC;AAClD,OAAO,EAAC,YAAY,EAAC,MAAM,gBAAgB,CAAC;AAC5C,OAAO,EAAC,gBAAgB,EAAC,MAAM,oBAAoB,CAAC;AACpD,OAAO,EAAC,QAAQ,EAAC,MAAM,YAAY,CAAC;AAGpC,IAAa,YAAY,GAAzB,MAAa,YAAY;IACvB,GAAG,CAAe;IAGR,GAAG,CAAM;IAGT,QAAQ,CAAkB;IAG1B,SAAS,CAAkB;IAG3B,MAAM,CAAS;IAGf,IAAI,CAAe;IAGnB,YAAY,CAAS;IAGrB,QAAQ,CAAW;IAGnB,gBAAgB,CAAmB;IAGnC,QAAQ,CAAe;IAGvB,QAAQ,CAAkB;IAG1B,GAAG,CAAsB;IAGzB,IAAI,CAAmB;IAEjC,gBAAgB;QACd,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC;IACrB,CAAC;IAED,KAAK,CAAC,gBAAgB;QACpB,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,EAAE,IAAI,CAAC,QAAQ,CAAC,kBAAkB,EAAE,CAAC,CAAC,CAAC;QACzG,MAAM,EACJ,MAAM,EACN,QAAQ,EACR,SAAS,EACT,KAAK,EACL,QAAQ,EACR,aAAa,GAAG,IAAI,CAAC,GAAG,IAAI,GAAG,CAAC,IAAI,EACpC,OAAO,EACP,cAAc,EACd,GAAG,OAAO,EACX,GAAG,IAAI,CAAC,IAAI,CAAC;QAEd,MAAM,aAAa,GAAkB;YACnC,YAAY,EAAE;gBACZ,0BAA0B;gBAC1B,GAAG,EAAE,CAAC,GAAG,EAAE,WAAW,EAAE,EAAE,CAAC,eAAe,WAAW,CAAC,GAAG,EAAE;aAC5D;YACD,GAAG,OAAO;YACV,OAAO;YACP,IAAI;SACL,CAAC;QAEF,IAAI,QAAQ,EAAE;YACZ,aAAa,CAAC,WAAW,GAAG,CAAC,GAAG,EAAE,EAAE,EAAE,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAsB,QAAQ,CAAE,CAAC,WAAW,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC;SAC1H;QAED,IAAI,aAAa,EAAE;YACjB,QAAQ,CAAC,aAAa,EAAE,sBAAsB,EAAE,IAAI,CAAC,CAAC;YACtD,QAAQ,CAAC,aAAa,EAAE,qBAAqB,EAAE,IAAI,CAAC,CAAC;SACtD;QAED,MAAM,MAAM,GAAG,IAAI,CAAC,SAAS,EAAE,CAAC;QAChC,IAAI,MAAM,EAAE;YACV,QAAQ,CAAC,aAAa,EAAE,qBAAqB,EAAE,MAAM,CAAC,CAAC;SACxD;QAED,MAAM,GAAG,GAAG,IAAI,CAAC,kBAAkB,EAAE,CAAC;QACtC,IAAI,GAAG,EAAE;YACP,QAAQ,CAAC,aAAa,EAAE,kBAAkB,EAAE,GAAG,CAAC,CAAC;SAClD;QAED,OAAO,aAAa,CAAC;IACvB,CAAC;IAED,SAAS;QACP,IAAI,IAAI,CAAC,MAAM,EAAE;YACf,OAAO,IAAI,CAAC,MAAM,CAAC;SACpB;QAED,uBAAuB;QACvB,IAAI,IAAI,CAAC,SAAS,EAAE;YAClB,OAAO,qBAAqB,IAAI,CAAC,SAAS,EAAE,CAAC;SAC9C;QAED,OAAO,oBAAoB,IAAI,CAAC,QAAQ,EAAE,CAAC;IAC7C,CAAC;IAED,GAAG;QACD,OAAO,IAAI,CAAC,GAAG,CAAC;IAClB,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,MAAM;QACV,MAAM,EAAC,KAAK,GAAG,IAAI,CAAC,GAAG,KAAK,GAAG,CAAC,IAAI,EAAE,SAAS,EAAE,kBAAkB,GAAG,IAAI,CAAC,GAAG,KAAK,GAAG,CAAC,IAAI,EAAC,GAAG,IAAI,CAAC,IAAI,CAAC;QACzG,MAAM,aAAa,GAAG,MAAM,IAAI,CAAC,gBAAgB,EAAE,CAAC;QAEpD,MAAM,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,yBAAyB,EAAE,aAAa,CAAC,CAAC;QAEzE,MAAM,YAAY,GAAG,IAAI,YAAY,CAAC,IAAI,CAAC,SAAS,EAAE,EAAE,aAAa,CAAC,CAAC;QAEvE,IAAI,KAAK,EAAE;YACT,uBAAuB;YACvB,QAAQ,IAAI,CAAC,YAAY,EAAE;gBACzB,QAAQ;gBACR,KAAK,SAAS;oBACZ,YAAY,CAAC,KAAK,GAAG,IAAI,CAAC;oBAC1B,MAAM;gBACR,KAAK,KAAK;oBACP,IAAI,CAAC,GAAG,CAAC,MAAc,CAAC,KAAK,GAAG,IAAI,CAAC;oBACtC,MAAM;aACT;SACF;QAED,IAAI,SAAS,EAAE;YACb,YAAY,CAAC,GAAG,CAAC,IAAI,GAAG,SAAS,CAAC;SACnC;QAED,IAAI,CAAC,GAAG,GAAG,YAAY,CAAC;QAExB,IAAI,kBAAkB,EAAE;YACtB,IAAI,CAAC,kBAAkB,EAAE,CAAC;SAC3B;QAED,iBAAiB,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE;YAC9B,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,KAAK,EAAE,IAAI,CAAC,kBAAkB,CAAC,KAAK,CAAC,CAAC,CAAC;QACrD,CAAC,CAAC,CAAC;QAEH,MAAM,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,eAAe,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC;QAEpD,OAAO,IAAI,CAAC,GAAG,CAAC;IAClB,CAAC;IAEO,kBAAkB,CAAC,KAAa;QACtC,OAAO,CAAC,GAAuB,EAAE,KAAU,EAAE,SAAkB,EAAE,GAAY,EAAE,EAAE;YAC/E,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC;gBAChB,KAAK,EAAE,YAAY;gBACnB,IAAI,EAAE,KAAK;gBACX,KAAK,EAAE;oBACL,UAAU,EAAE,KAAK,CAAC,KAAK;oBACvB,iBAAiB,EAAE,KAAK,CAAC,iBAAiB;oBAC1C,YAAY,EAAE,KAAK,CAAC,YAAY;iBACjC;gBACD,UAAU,EAAE,SAAS;gBACrB,MAAM,EAAE,GAAG,CAAC,IAAI,CAAC,MAAM;gBACvB,OAAO,EAAE,GAAG,CAAC,OAAO;gBACpB,GAAG;aACJ,CAAC,CAAC;YAEH,iDAAiD;YACjD,0DAA0D;QAC5D,CAAC,CAAC;IACJ,CAAC;IAEM,YAAY,CAAC,QAA4B,EAAE,OAA+B;QAC/E,MAAM,EAAC,MAAM,EAAE,cAAc,GAAG,EAAE,EAAE,OAAO,EAAE,GAAG,aAAa,EAAC,GAAG,OAAO,CAAC;QACzE,MAAM,MAAM,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QAE3F,OAAO,IAAI,iBAAiB,CAAC,MAAM,CAAC,aAAa,EAAE,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,OAAO,EAAE,GAAG,MAAM,CAAC,CAAC;IAC9H,CAAC;IAEO,kBAAkB;QACxB,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,YAAY,EAAE,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,OAAO,KAAK,YAAY,CAAC,CAAC;QAEpG,IAAI,QAAQ,EAAE;YACZ,OAAO,CAAC,GAAQ,EAAE,WAAgB,EAAE,EAAE;gBACpC,qCAAqC;gBACrC,OAAO,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,WAAW,CAAC,GAAG,CAAC,CAAC;YACxD,CAAC,CAAC;SACH;IACH,CAAC;IAEO,kBAAkB;QACxB,MAAM,EAAC,UAAU,EAAE,IAAI,EAAC,GAAI,IAAI,CAAC,GAAG,CAAC,MAAc,CAAC,MAAM,CAAC,SAAS,CAAC;QAEpE,IAAI,CAAC,GAAG,CAAC,MAAc,CAAC,MAAM,CAAC,SAAS,CAAC,UAAU,GAAG,SAAS,UAAU,CAAC,OAAe,EAAE,IAAY;YACtG,IAAI,IAAI,KAAK,sBAAsB,IAAI,IAAI,KAAK,2BAA2B,EAAE;gBAC3E,OAAO;aACR;YAED,0BAA0B;YAC1B,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QAClC,CAAC,CAAC;IACJ,CAAC;IAEO,SAAS;QACf,MAAM,MAAM,GAAG,iBAAiB,CAAC,IAAI,EAAE,CAAC;QACxC,MAAM,YAAY,GAAG,IAAI,CAAC,gBAAgB,CAAC,eAAe,EAAE,CAAC;QAE7D,IAAI,YAAY,CAAC,MAAM,EAAE;YACvB,YAAY,CAAC,OAAO,CAAC,CAAC,QAAQ,EAAE,EAAE;gBAChC,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAqB,QAAQ,CAAC,KAAK,CAAE,CAAC;gBACxE,MAAM,OAAO,GAAG,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,oBAAoB,CAAC,CAAC;gBAEzD,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE;oBAC7B,MAAM,MAAM,GAAG,IAAI,CAAC,YAAY,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;oBAEpD,MAAM,CAAC,GAAG,CAAC,MAAM,EAAE,OAAO,CAAC,QAAQ,CAAC,CAAC;iBACtC;gBAED,IAAI,QAAQ,CAAC,SAAS,EAAE;oBACtB,QAAQ,CAAC,SAAS,CAAC,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,CAAE,CAAC,CAAC;iBAC/C;YACH,CAAC,CAAC,CAAC;SACJ;QAED,OAAO,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,kBAAkB,EAAE,MAAM,CAAC,CAAC;IACzD,CAAC;IAED,IAAI,MAAM;QACR,OAAO,IAAI,CAAC,IAAI,EAAE,MAAM,IAAI,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC;IACnD,CAAC;CACF,CAAA;AAhOC;IADC,QAAQ,CAAC,KAAK,CAAC;;yCACG;AAGnB;IADC,QAAQ,CAAC,UAAU,CAAC;;8CACe;AAGpC;IADC,QAAQ,CAAC,WAAW,CAAC;;+CACe;AAGrC;IADC,QAAQ,CAAC,aAAa,EAAE,EAAE,CAAC;;4CACH;AAGzB;IADC,QAAQ,CAAC,MAAM,CAAC;;0CACY;AAG7B;IADC,QAAQ,CAAC,eAAe,CAAC;;kDACK;AAG/B;IADC,MAAM,EAAE;8BACW,QAAQ;8CAAC;AAG7B;IADC,MAAM,EAAE;8BACmB,gBAAgB;sDAAC;AAG7C;IADC,MAAM,EAAE;8BACW,YAAY;8CAAC;AAGjC;IADC,MAAM,EAAE;8BACW,eAAe;8CAAC;AAGpC;IADC,MAAM,EAAE;8BACM,mBAAmB;yCAAC;AAGnC;IADC,aAAa,EAAE;8BACC,eAAe;0CAAC;AArCtB,YAAY;IADxB,UAAU,EAAE;GACA,YAAY,CAoOxB;SApOY,YAAY","sourcesContent":["import {InjectContext, PlatformApplication, PlatformContext} from \"@tsed/common\";\nimport {Env, setValue} from \"@tsed/core\";\nimport {Constant, Inject, Injectable, InjectorService} from \"@tsed/di\";\nimport {Configuration, interactionPolicy, KoaContextWithOIDC, Provider as OIDCProvider} from \"oidc-provider\";\nimport {INTERACTIONS} from \"../constants/constants\";\nimport {InteractionMethods} from \"../domain/InteractionMethods\";\nimport {OidcAccountsMethods} from \"../domain/OidcAccountsMethods\";\nimport {OidcInteractionOptions} from \"../domain/OidcInteractionOptions\";\nimport {OidcSettings} from \"../domain/OidcSettings\";\nimport {OIDC_ERROR_EVENTS} from \"../utils/events\";\nimport {OidcAdapters} from \"./OidcAdapters\";\nimport {OidcInteractions} from \"./OidcInteractions\";\nimport {OidcJwks} from \"./OidcJwks\";\n\n@Injectable()\nexport class OidcProvider {\n  raw: OIDCProvider;\n\n  @Constant(\"env\")\n  protected env: Env;\n\n  @Constant(\"httpPort\")\n  protected httpPort: number | string;\n\n  @Constant(\"httpsPort\")\n  protected httpsPort: number | string;\n\n  @Constant(\"oidc.issuer\", \"\")\n  protected issuer: string;\n\n  @Constant(\"oidc\")\n  protected oidc: OidcSettings;\n\n  @Constant(\"PLATFORM_NAME\")\n  protected platformName: string;\n\n  @Inject()\n  protected oidcJwks: OidcJwks;\n\n  @Inject()\n  protected oidcInteractions: OidcInteractions;\n\n  @Inject()\n  protected adapters: OidcAdapters;\n\n  @Inject()\n  protected injector: InjectorService;\n\n  @Inject()\n  protected app: PlatformApplication;\n\n  @InjectContext()\n  protected $ctx?: PlatformContext;\n\n  hasConfiguration() {\n    return !!this.oidc;\n  }\n\n  async getConfiguration(): Promise<Configuration> {\n    const [jwks, adapter] = await Promise.all([this.oidcJwks.getJwks(), this.adapters.createAdapterClass()]);\n    const {\n      issuer,\n      jwksPath,\n      secureKey,\n      proxy,\n      Accounts,\n      secureCookies = this.env == Env.PROD,\n      Adapter,\n      connectionName,\n      ...options\n    } = this.oidc;\n\n    const configuration: Configuration = {\n      interactions: {\n        /* istanbul ignore next */\n        url: (ctx, interaction) => `interaction/${interaction.uid}`\n      },\n      ...options,\n      adapter,\n      jwks\n    };\n\n    if (Accounts) {\n      configuration.findAccount = (ctx, id, token) => this.injector.get<OidcAccountsMethods>(Accounts)!.findAccount(id, token);\n    }\n\n    if (secureCookies) {\n      setValue(configuration, \"cookies.short.secure\", true);\n      setValue(configuration, \"cookies.long.secure\", true);\n    }\n\n    const policy = this.getPolicy();\n    if (policy) {\n      setValue(configuration, \"interactions.policy\", policy);\n    }\n\n    const url = this.getInteractionsUrl();\n    if (url) {\n      setValue(configuration, \"interactions.url\", url);\n    }\n\n    return configuration;\n  }\n\n  getIssuer() {\n    if (this.issuer) {\n      return this.issuer;\n    }\n\n    // istanbul ignore next\n    if (this.httpsPort) {\n      return `https://localhost:${this.httpsPort}`;\n    }\n\n    return `http://localhost:${this.httpPort}`;\n  }\n\n  get(): OIDCProvider {\n    return this.raw;\n  }\n\n  /**\n   * Create a new instance of OidcProvider\n   */\n  async create(): Promise<void | OIDCProvider> {\n    const {proxy = this.env === Env.PROD, secureKey, allowHttpLocalhost = this.env !== Env.PROD} = this.oidc;\n    const configuration = await this.getConfiguration();\n\n    await this.injector.alterAsync(\"$alterOidcConfiguration\", configuration);\n\n    const oidcProvider = new OIDCProvider(this.getIssuer(), configuration);\n\n    if (proxy) {\n      // istanbul ignore next\n      switch (this.platformName) {\n        default:\n        case \"express\":\n          oidcProvider.proxy = true;\n          break;\n        case \"koa\":\n          (this.app.rawApp as any).proxy = true;\n          break;\n      }\n    }\n\n    if (secureKey) {\n      oidcProvider.app.keys = secureKey;\n    }\n\n    this.raw = oidcProvider;\n\n    if (allowHttpLocalhost) {\n      this.allowHttpLocalhost();\n    }\n\n    OIDC_ERROR_EVENTS.map((event) => {\n      this.raw.on(event, this.createErrorHandler(event));\n    });\n\n    await this.injector.emit(\"$onCreateOIDC\", this.raw);\n\n    return this.raw;\n  }\n\n  private createErrorHandler(event: string) {\n    return (ctx: KoaContextWithOIDC, error: any, accountId?: string, sid?: string) => {\n      this.logger.error({\n        event: \"OIDC_ERROR\",\n        type: event,\n        error: {\n          error_name: error.error,\n          error_description: error.error_description,\n          error_detail: error.error_detail\n        },\n        account_id: accountId,\n        params: ctx.oidc.params,\n        headers: ctx.headers,\n        sid\n      });\n\n      // TODO see if we need to call platformExceptions\n      // this.platformExceptions.catch(error, ctx.request.$ctx);\n    };\n  }\n\n  public createPrompt(instance: InteractionMethods, options: OidcInteractionOptions) {\n    const {checks: originalChecks = [], details, ...promptOptions} = options;\n    const checks = [...(instance.checks ? instance.checks() : originalChecks)].filter(Boolean);\n\n    return new interactionPolicy.Prompt(promptOptions, instance.details ? instance.details.bind(instance) : details, ...checks);\n  }\n\n  private getInteractionsUrl() {\n    const provider = this.injector.getProviders().find((provider) => provider.subType === INTERACTIONS);\n\n    if (provider) {\n      return (ctx: any, interaction: any) => {\n        // eslint-disable-line no-unused-vars\n        return provider.path.replace(/:uid/, interaction.uid);\n      };\n    }\n  }\n\n  private allowHttpLocalhost() {\n    const {invalidate: orig} = (this.raw.Client as any).Schema.prototype;\n\n    (this.raw.Client as any).Schema.prototype.invalidate = function invalidate(message: string, code: string) {\n      if (code === \"implicit-force-https\" || code === \"implicit-forbid-localhost\") {\n        return;\n      }\n\n      /* istanbul ignore next */\n      return orig.call(this, message);\n    };\n  }\n\n  private getPolicy() {\n    const policy = interactionPolicy.base();\n    const interactions = this.oidcInteractions.getInteractions();\n\n    if (interactions.length) {\n      interactions.forEach((provider) => {\n        const instance = this.injector.get<InteractionMethods>(provider.token)!;\n        const options = provider.store.get(\"interactionOptions\");\n\n        if (!policy.get(options.name)) {\n          const prompt = this.createPrompt(instance, options);\n\n          policy.add(prompt, options.priority);\n        }\n\n        if (instance.$onCreate) {\n          instance.$onCreate(policy.get(options.name)!);\n        }\n      });\n    }\n\n    return this.injector.alter(\"$alterOidcPolicy\", policy);\n  }\n\n  get logger() {\n    return this.$ctx?.logger || this.injector.logger;\n  }\n}\n"]}
+{"version":3,"file":"OidcProvider.js","sourceRoot":"","sources":["../../../src/services/OidcProvider.ts"],"names":[],"mappings":";AAAA,OAAO,EAAC,aAAa,EAAE,mBAAmB,EAAE,eAAe,EAAC,MAAM,cAAc,CAAC;AACjF,OAAO,EAAC,GAAG,EAAE,QAAQ,EAAC,MAAM,YAAY,CAAC;AACzC,OAAO,EAAC,QAAQ,EAAE,MAAM,EAAE,UAAU,EAAE,eAAe,EAAC,MAAM,UAAU,CAAC;AACvE,OAAO,EAAgB,iBAAiB,EAAsB,QAAQ,IAAI,YAAY,EAAC,MAAM,eAAe,CAAC;AAC7G,OAAO,EAAC,YAAY,EAAC,MAAM,wBAAwB,CAAC;AAKpD,OAAO,EAAC,iBAAiB,EAAC,MAAM,iBAAiB,CAAC;AAClD,OAAO,EAAC,YAAY,EAAC,MAAM,gBAAgB,CAAC;AAC5C,OAAO,EAAC,gBAAgB,EAAC,MAAM,oBAAoB,CAAC;AACpD,OAAO,EAAC,QAAQ,EAAC,MAAM,YAAY,CAAC;AAEpC,SAAS,QAAQ,CAAC,KAAU;IAC1B,OAAO,MAAM,CAAC,mBAAmB,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,CAAC,GAAQ,EAAE,GAAG,EAAE,EAAE;QAChE,OAAO;YACL,GAAG,GAAG;YACN,CAAC,GAAG,CAAC,EAAE,KAAK,CAAC,GAAG,CAAC;SAClB,CAAC;IACJ,CAAC,EAAE,EAAE,CAAC,CAAC;AACT,CAAC;AAGD,IAAa,YAAY,GAAzB,MAAa,YAAY;IACvB,GAAG,CAAe;IAGR,GAAG,CAAM;IAGT,QAAQ,CAAkB;IAG1B,SAAS,CAAkB;IAG3B,MAAM,CAAS;IAGf,IAAI,CAAe;IAGnB,YAAY,CAAS;IAGrB,QAAQ,CAAW;IAGnB,gBAAgB,CAAmB;IAGnC,QAAQ,CAAe;IAGvB,QAAQ,CAAkB;IAG1B,GAAG,CAAsB;IAGzB,IAAI,CAAmB;IAEjC,gBAAgB;QACd,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC;IACrB,CAAC;IAED,KAAK,CAAC,gBAAgB;QACpB,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,EAAE,IAAI,CAAC,QAAQ,CAAC,kBAAkB,EAAE,CAAC,CAAC,CAAC;QACzG,MAAM,EACJ,MAAM,EACN,QAAQ,EACR,SAAS,EACT,KAAK,EACL,QAAQ,EACR,aAAa,GAAG,IAAI,CAAC,GAAG,IAAI,GAAG,CAAC,IAAI,EACpC,OAAO,EACP,cAAc,EACd,GAAG,OAAO,EACX,GAAG,IAAI,CAAC,IAAI,CAAC;QAEd,MAAM,aAAa,GAAkB;YACnC,YAAY,EAAE;gBACZ,0BAA0B;gBAC1B,GAAG,EAAE,CAAC,GAAG,EAAE,WAAW,EAAE,EAAE,CAAC,eAAe,WAAW,CAAC,GAAG,EAAE;aAC5D;YACD,GAAG,OAAO;YACV,OAAO;YACP,IAAI;SACL,CAAC;QAEF,IAAI,QAAQ,EAAE;YACZ,aAAa,CAAC,WAAW,GAAG,CAAC,GAAG,EAAE,EAAE,EAAE,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAsB,QAAQ,CAAE,CAAC,WAAW,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC;SAC1H;QAED,IAAI,aAAa,EAAE;YACjB,QAAQ,CAAC,aAAa,EAAE,sBAAsB,EAAE,IAAI,CAAC,CAAC;YACtD,QAAQ,CAAC,aAAa,EAAE,qBAAqB,EAAE,IAAI,CAAC,CAAC;SACtD;QAED,MAAM,MAAM,GAAG,IAAI,CAAC,SAAS,EAAE,CAAC;QAChC,IAAI,MAAM,EAAE;YACV,QAAQ,CAAC,aAAa,EAAE,qBAAqB,EAAE,MAAM,CAAC,CAAC;SACxD;QAED,MAAM,GAAG,GAAG,IAAI,CAAC,kBAAkB,EAAE,CAAC;QACtC,IAAI,GAAG,EAAE;YACP,QAAQ,CAAC,aAAa,EAAE,kBAAkB,EAAE,GAAG,CAAC,CAAC;SAClD;QAED,OAAO,aAAa,CAAC;IACvB,CAAC;IAED,SAAS;QACP,IAAI,IAAI,CAAC,MAAM,EAAE;YACf,OAAO,IAAI,CAAC,MAAM,CAAC;SACpB;QAED,uBAAuB;QACvB,IAAI,IAAI,CAAC,SAAS,EAAE;YAClB,OAAO,qBAAqB,IAAI,CAAC,SAAS,EAAE,CAAC;SAC9C;QAED,OAAO,oBAAoB,IAAI,CAAC,QAAQ,EAAE,CAAC;IAC7C,CAAC;IAED,GAAG;QACD,OAAO,IAAI,CAAC,GAAG,CAAC;IAClB,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,MAAM;QACV,MAAM,EAAC,KAAK,GAAG,IAAI,CAAC,GAAG,KAAK,GAAG,CAAC,IAAI,EAAE,SAAS,EAAE,kBAAkB,GAAG,IAAI,CAAC,GAAG,KAAK,GAAG,CAAC,IAAI,EAAC,GAAG,IAAI,CAAC,IAAI,CAAC;QACzG,MAAM,aAAa,GAAG,MAAM,IAAI,CAAC,gBAAgB,EAAE,CAAC;QAEpD,MAAM,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,yBAAyB,EAAE,aAAa,CAAC,CAAC;QAEzE,MAAM,YAAY,GAAG,IAAI,YAAY,CAAC,IAAI,CAAC,SAAS,EAAE,EAAE,aAAa,CAAC,CAAC;QAEvE,IAAI,KAAK,EAAE;YACT,uBAAuB;YACvB,QAAQ,IAAI,CAAC,YAAY,EAAE;gBACzB,QAAQ;gBACR,KAAK,SAAS;oBACZ,YAAY,CAAC,KAAK,GAAG,IAAI,CAAC;oBAC1B,MAAM;gBACR,KAAK,KAAK;oBACP,IAAI,CAAC,GAAG,CAAC,MAAc,CAAC,KAAK,GAAG,IAAI,CAAC;oBACtC,MAAM;aACT;SACF;QAED,IAAI,SAAS,EAAE;YACb,YAAY,CAAC,GAAG,CAAC,IAAI,GAAG,SAAS,CAAC;SACnC;QAED,IAAI,CAAC,GAAG,GAAG,YAAY,CAAC;QAExB,IAAI,kBAAkB,EAAE;YACtB,IAAI,CAAC,kBAAkB,EAAE,CAAC;SAC3B;QAED,iBAAiB,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE;YAC9B,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,KAAK,EAAE,IAAI,CAAC,kBAAkB,CAAC,KAAK,CAAC,CAAC,CAAC;QACrD,CAAC,CAAC,CAAC;QAEH,MAAM,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,eAAe,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC;QAEpD,OAAO,IAAI,CAAC,GAAG,CAAC;IAClB,CAAC;IAEO,kBAAkB,CAAC,KAAa;QACtC,OAAO,CAAC,GAAuB,EAAE,KAAU,EAAE,SAAkB,EAAE,GAAY,EAAE,EAAE;YAC/E,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC;gBAChB,KAAK,EAAE,YAAY;gBACnB,IAAI,EAAE,KAAK;gBACX,KAAK,EAAE,QAAQ,CAAC,KAAK,CAAC;gBACtB,UAAU,EAAE,SAAS;gBACrB,MAAM,EAAE,GAAG,CAAC,IAAI,CAAC,MAAM;gBACvB,OAAO,EAAE,GAAG,CAAC,OAAO;gBACpB,GAAG;aACJ,CAAC,CAAC;YAEH,iDAAiD;YACjD,0DAA0D;QAC5D,CAAC,CAAC;IACJ,CAAC;IAEM,YAAY,CAAC,QAA4B,EAAE,OAA+B;QAC/E,MAAM,EAAC,MAAM,EAAE,cAAc,GAAG,EAAE,EAAE,OAAO,EAAE,GAAG,aAAa,EAAC,GAAG,OAAO,CAAC;QACzE,MAAM,MAAM,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QAE3F,OAAO,IAAI,iBAAiB,CAAC,MAAM,CAAC,aAAa,EAAE,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,OAAO,EAAE,GAAG,MAAM,CAAC,CAAC;IAC9H,CAAC;IAEO,kBAAkB;QACxB,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,YAAY,EAAE,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,OAAO,KAAK,YAAY,CAAC,CAAC;QAEpG,IAAI,QAAQ,EAAE;YACZ,OAAO,CAAC,GAAQ,EAAE,WAAgB,EAAE,EAAE;gBACpC,qCAAqC;gBACrC,OAAO,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,WAAW,CAAC,GAAG,CAAC,CAAC;YACxD,CAAC,CAAC;SACH;IACH,CAAC;IAEO,kBAAkB;QACxB,MAAM,EAAC,UAAU,EAAE,IAAI,EAAC,GAAI,IAAI,CAAC,GAAG,CAAC,MAAc,CAAC,MAAM,CAAC,SAAS,CAAC;QAEpE,IAAI,CAAC,GAAG,CAAC,MAAc,CAAC,MAAM,CAAC,SAAS,CAAC,UAAU,GAAG,SAAS,UAAU,CAAC,OAAe,EAAE,IAAY;YACtG,IAAI,IAAI,KAAK,sBAAsB,IAAI,IAAI,KAAK,2BAA2B,EAAE;gBAC3E,OAAO;aACR;YAED,0BAA0B;YAC1B,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QAClC,CAAC,CAAC;IACJ,CAAC;IAEO,SAAS;QACf,MAAM,MAAM,GAAG,iBAAiB,CAAC,IAAI,EAAE,CAAC;QACxC,MAAM,YAAY,GAAG,IAAI,CAAC,gBAAgB,CAAC,eAAe,EAAE,CAAC;QAE7D,IAAI,YAAY,CAAC,MAAM,EAAE;YACvB,YAAY,CAAC,OAAO,CAAC,CAAC,QAAQ,EAAE,EAAE;gBAChC,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAqB,QAAQ,CAAC,KAAK,CAAE,CAAC;gBACxE,MAAM,OAAO,GAAG,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,oBAAoB,CAAC,CAAC;gBAEzD,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE;oBAC7B,MAAM,MAAM,GAAG,IAAI,CAAC,YAAY,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;oBAEpD,MAAM,CAAC,GAAG,CAAC,MAAM,EAAE,OAAO,CAAC,QAAQ,CAAC,CAAC;iBACtC;gBAED,IAAI,QAAQ,CAAC,SAAS,EAAE;oBACtB,QAAQ,CAAC,SAAS,CAAC,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,CAAE,CAAC,CAAC;iBAC/C;YACH,CAAC,CAAC,CAAC;SACJ;QAED,OAAO,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,kBAAkB,EAAE,MAAM,CAAC,CAAC;IACzD,CAAC;IAED,IAAI,MAAM;QACR,OAAO,IAAI,CAAC,IAAI,EAAE,MAAM,IAAI,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC;IACnD,CAAC;CACF,CAAA;AA5NC;IADC,QAAQ,CAAC,KAAK,CAAC;;yCACG;AAGnB;IADC,QAAQ,CAAC,UAAU,CAAC;;8CACe;AAGpC;IADC,QAAQ,CAAC,WAAW,CAAC;;+CACe;AAGrC;IADC,QAAQ,CAAC,aAAa,EAAE,EAAE,CAAC;;4CACH;AAGzB;IADC,QAAQ,CAAC,MAAM,CAAC;;0CACY;AAG7B;IADC,QAAQ,CAAC,eAAe,CAAC;;kDACK;AAG/B;IADC,MAAM,EAAE;8BACW,QAAQ;8CAAC;AAG7B;IADC,MAAM,EAAE;8BACmB,gBAAgB;sDAAC;AAG7C;IADC,MAAM,EAAE;8BACW,YAAY;8CAAC;AAGjC;IADC,MAAM,EAAE;8BACW,eAAe;8CAAC;AAGpC;IADC,MAAM,EAAE;8BACM,mBAAmB;yCAAC;AAGnC;IADC,aAAa,EAAE;8BACC,eAAe;0CAAC;AArCtB,YAAY;IADxB,UAAU,EAAE;GACA,YAAY,CAgOxB;SAhOY,YAAY","sourcesContent":["import {InjectContext, PlatformApplication, PlatformContext} from \"@tsed/common\";\nimport {Env, setValue} from \"@tsed/core\";\nimport {Constant, Inject, Injectable, InjectorService} from \"@tsed/di\";\nimport {Configuration, interactionPolicy, KoaContextWithOIDC, Provider as OIDCProvider} from \"oidc-provider\";\nimport {INTERACTIONS} from \"../constants/constants\";\nimport {InteractionMethods} from \"../domain/InteractionMethods\";\nimport {OidcAccountsMethods} from \"../domain/OidcAccountsMethods\";\nimport {OidcInteractionOptions} from \"../domain/OidcInteractionOptions\";\nimport {OidcSettings} from \"../domain/OidcSettings\";\nimport {OIDC_ERROR_EVENTS} from \"../utils/events\";\nimport {OidcAdapters} from \"./OidcAdapters\";\nimport {OidcInteractions} from \"./OidcInteractions\";\nimport {OidcJwks} from \"./OidcJwks\";\n\nfunction mapError(error: any) {\n  return Object.getOwnPropertyNames(error).reduce((obj: any, key) => {\n    return {\n      ...obj,\n      [key]: error[key]\n    };\n  }, {});\n}\n\n@Injectable()\nexport class OidcProvider {\n  raw: OIDCProvider;\n\n  @Constant(\"env\")\n  protected env: Env;\n\n  @Constant(\"httpPort\")\n  protected httpPort: number | string;\n\n  @Constant(\"httpsPort\")\n  protected httpsPort: number | string;\n\n  @Constant(\"oidc.issuer\", \"\")\n  protected issuer: string;\n\n  @Constant(\"oidc\")\n  protected oidc: OidcSettings;\n\n  @Constant(\"PLATFORM_NAME\")\n  protected platformName: string;\n\n  @Inject()\n  protected oidcJwks: OidcJwks;\n\n  @Inject()\n  protected oidcInteractions: OidcInteractions;\n\n  @Inject()\n  protected adapters: OidcAdapters;\n\n  @Inject()\n  protected injector: InjectorService;\n\n  @Inject()\n  protected app: PlatformApplication;\n\n  @InjectContext()\n  protected $ctx?: PlatformContext;\n\n  hasConfiguration() {\n    return !!this.oidc;\n  }\n\n  async getConfiguration(): Promise<Configuration> {\n    const [jwks, adapter] = await Promise.all([this.oidcJwks.getJwks(), this.adapters.createAdapterClass()]);\n    const {\n      issuer,\n      jwksPath,\n      secureKey,\n      proxy,\n      Accounts,\n      secureCookies = this.env == Env.PROD,\n      Adapter,\n      connectionName,\n      ...options\n    } = this.oidc;\n\n    const configuration: Configuration = {\n      interactions: {\n        /* istanbul ignore next */\n        url: (ctx, interaction) => `interaction/${interaction.uid}`\n      },\n      ...options,\n      adapter,\n      jwks\n    };\n\n    if (Accounts) {\n      configuration.findAccount = (ctx, id, token) => this.injector.get<OidcAccountsMethods>(Accounts)!.findAccount(id, token);\n    }\n\n    if (secureCookies) {\n      setValue(configuration, \"cookies.short.secure\", true);\n      setValue(configuration, \"cookies.long.secure\", true);\n    }\n\n    const policy = this.getPolicy();\n    if (policy) {\n      setValue(configuration, \"interactions.policy\", policy);\n    }\n\n    const url = this.getInteractionsUrl();\n    if (url) {\n      setValue(configuration, \"interactions.url\", url);\n    }\n\n    return configuration;\n  }\n\n  getIssuer() {\n    if (this.issuer) {\n      return this.issuer;\n    }\n\n    // istanbul ignore next\n    if (this.httpsPort) {\n      return `https://localhost:${this.httpsPort}`;\n    }\n\n    return `http://localhost:${this.httpPort}`;\n  }\n\n  get(): OIDCProvider {\n    return this.raw;\n  }\n\n  /**\n   * Create a new instance of OidcProvider\n   */\n  async create(): Promise<void | OIDCProvider> {\n    const {proxy = this.env === Env.PROD, secureKey, allowHttpLocalhost = this.env !== Env.PROD} = this.oidc;\n    const configuration = await this.getConfiguration();\n\n    await this.injector.alterAsync(\"$alterOidcConfiguration\", configuration);\n\n    const oidcProvider = new OIDCProvider(this.getIssuer(), configuration);\n\n    if (proxy) {\n      // istanbul ignore next\n      switch (this.platformName) {\n        default:\n        case \"express\":\n          oidcProvider.proxy = true;\n          break;\n        case \"koa\":\n          (this.app.rawApp as any).proxy = true;\n          break;\n      }\n    }\n\n    if (secureKey) {\n      oidcProvider.app.keys = secureKey;\n    }\n\n    this.raw = oidcProvider;\n\n    if (allowHttpLocalhost) {\n      this.allowHttpLocalhost();\n    }\n\n    OIDC_ERROR_EVENTS.map((event) => {\n      this.raw.on(event, this.createErrorHandler(event));\n    });\n\n    await this.injector.emit(\"$onCreateOIDC\", this.raw);\n\n    return this.raw;\n  }\n\n  private createErrorHandler(event: string) {\n    return (ctx: KoaContextWithOIDC, error: any, accountId?: string, sid?: string) => {\n      this.logger.error({\n        event: \"OIDC_ERROR\",\n        type: event,\n        error: mapError(error),\n        account_id: accountId,\n        params: ctx.oidc.params,\n        headers: ctx.headers,\n        sid\n      });\n\n      // TODO see if we need to call platformExceptions\n      // this.platformExceptions.catch(error, ctx.request.$ctx);\n    };\n  }\n\n  public createPrompt(instance: InteractionMethods, options: OidcInteractionOptions) {\n    const {checks: originalChecks = [], details, ...promptOptions} = options;\n    const checks = [...(instance.checks ? instance.checks() : originalChecks)].filter(Boolean);\n\n    return new interactionPolicy.Prompt(promptOptions, instance.details ? instance.details.bind(instance) : details, ...checks);\n  }\n\n  private getInteractionsUrl() {\n    const provider = this.injector.getProviders().find((provider) => provider.subType === INTERACTIONS);\n\n    if (provider) {\n      return (ctx: any, interaction: any) => {\n        // eslint-disable-line no-unused-vars\n        return provider.path.replace(/:uid/, interaction.uid);\n      };\n    }\n  }\n\n  private allowHttpLocalhost() {\n    const {invalidate: orig} = (this.raw.Client as any).Schema.prototype;\n\n    (this.raw.Client as any).Schema.prototype.invalidate = function invalidate(message: string, code: string) {\n      if (code === \"implicit-force-https\" || code === \"implicit-forbid-localhost\") {\n        return;\n      }\n\n      /* istanbul ignore next */\n      return orig.call(this, message);\n    };\n  }\n\n  private getPolicy() {\n    const policy = interactionPolicy.base();\n    const interactions = this.oidcInteractions.getInteractions();\n\n    if (interactions.length) {\n      interactions.forEach((provider) => {\n        const instance = this.injector.get<InteractionMethods>(provider.token)!;\n        const options = provider.store.get(\"interactionOptions\");\n\n        if (!policy.get(options.name)) {\n          const prompt = this.createPrompt(instance, options);\n\n          policy.add(prompt, options.priority);\n        }\n\n        if (instance.$onCreate) {\n          instance.$onCreate(policy.get(options.name)!);\n        }\n      });\n    }\n\n    return this.injector.alter(\"$alterOidcPolicy\", policy);\n  }\n\n  get logger() {\n    return this.$ctx?.logger || this.injector.logger;\n  }\n}\n"]}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@tsed/oidc-provider",
-  "version": "7.18.0",
+  "version": "7.18.2",
   "description": "OIDC provider package for Ts.ED framework",
   "private": false,
   "source": "./src/index.ts",
@@ -22,7 +22,7 @@
     "test": "cross-env NODE_ENV=test yarn jest --max-workers=2"
   },
   "dependencies": {
-    "@tsed/adapters": "7.18.0",
+    "@tsed/adapters": "7.18.2",
     "express-urlrewrite": "^1.4.0",
     "jose2": "npm:jose@^2.0.4",
     "koa-mount": "^4.0.0",
@@ -31,10 +31,10 @@
     "uuid": "8.3.2"
   },
   "devDependencies": {
-    "@tsed/common": "7.18.0",
-    "@tsed/core": "7.18.0",
-    "@tsed/di": "7.18.0",
-    "@tsed/exceptions": "7.18.0",
+    "@tsed/common": "7.18.2",
+    "@tsed/core": "7.18.2",
+    "@tsed/di": "7.18.2",
+    "@tsed/exceptions": "7.18.2",
     "@types/lowdb": "1.0.11",
     "@types/oidc-provider": "^7.1.1",
     "@types/uuid": "8.3.4",
@@ -42,12 +42,12 @@
     "oidc-provider": "7.11.1"
   },
   "peerDependencies": {
-    "@tsed/ajv": "^7.18.0",
-    "@tsed/common": "^7.18.0",
-    "@tsed/core": "^7.18.0",
-    "@tsed/di": "^7.18.0",
-    "@tsed/json-mapper": "^7.18.0",
-    "@tsed/schema": "^7.18.0",
+    "@tsed/ajv": "^7.18.2",
+    "@tsed/common": "^7.18.2",
+    "@tsed/core": "^7.18.2",
+    "@tsed/di": "^7.18.2",
+    "@tsed/json-mapper": "^7.18.2",
+    "@tsed/schema": "^7.18.2",
     "oidc-provider": ">=7.3.0"
   },
   "peerDependenciesMeta": {