@tstdl/base 0.81.35 → 0.82.0

package/api/client/client.d.ts

@@ -2,8 +2,8 @@ import type { Injectable } from "../../container";
 import type { HttpClientOptions } from "../../http/client";
 import { HttpClient } from "../../http/client";
 import type { ApiClientImplementation, ApiDefinition, ApiEndpointDefinition } from '../types';
-export declare type ApiClient<T extends ApiDefinition> = new (httpClient: HttpClient) => ApiClientImplementation<T> & Injectable<HttpClientOptions>;
-export declare type ClientOptions = {
+export type ApiClient<T extends ApiDefinition> = new (httpClient: HttpClient) => ApiClientImplementation<T> & Injectable<HttpClientOptions>;
+export type ClientOptions = {
     /**
      * url prefix
      * @default `api/`
@@ -11,7 +11,7 @@ export declare type ClientOptions = {
     prefix?: string;
     defaultHttpClientOptions?: HttpClientOptions;
 };
-export declare type ApiClientHttpRequestContext = {
+export type ApiClientHttpRequestContext = {
     endpoint: ApiEndpointDefinition;
 };
 export declare const httpClientSymbol: unique symbol;

package/api/default-error-handlers.d.ts

@@ -1,5 +1,5 @@
 import { SchemaError } from "../schema";
-export declare type SerializedSchemaError = {
+export type SerializedSchemaError = {
     message: string;
     details?: any;
     path: string;

package/api/response.d.ts

@@ -1,21 +1,21 @@
 import type { CustomError, CustomErrorStatic } from '../error';
 import type { UndefinableJson } from '../types';
-export declare type ErrorHandlerData = undefined | UndefinableJson;
-export declare type ErrorSerializer<T extends CustomError, TData extends ErrorHandlerData> = (error: T) => TData;
-export declare type ErrorDeserializer<T extends CustomError, TData extends ErrorHandlerData> = (data: TData, responseError: ResponseError) => T;
-export declare type ErrorHandler<T extends CustomError = CustomError, TData extends ErrorHandlerData = undefined> = {
+export type ErrorHandlerData = undefined | UndefinableJson;
+export type ErrorSerializer<T extends CustomError, TData extends ErrorHandlerData> = (error: T) => TData;
+export type ErrorDeserializer<T extends CustomError, TData extends ErrorHandlerData> = (data: TData, responseError: ResponseError) => T;
+export type ErrorHandler<T extends CustomError = CustomError, TData extends ErrorHandlerData = undefined> = {
     statusCode: number;
     serializer: ErrorSerializer<T, TData>;
     deserializer: ErrorDeserializer<T, TData>;
 };
-export declare type ResultResponse<T> = {
+export type ResultResponse<T> = {
     result: T;
 };
-export declare type ErrorResponse = {
+export type ErrorResponse = {
     error: ResponseError;
 };
-export declare type Response<T> = ResultResponse<T> | ErrorResponse;
-export declare type ResponseError = {
+export type Response<T> = ResultResponse<T> | ErrorResponse;
+export type ResponseError = {
     name: string;
     message: string;
     details?: any;

package/api/server/api-controller.d.ts

@@ -1,7 +1,7 @@
 import type { InjectableOptionsWithoutLifecycle } from "../../container";
 import type { Constructor, Type } from "../../types";
 import type { ApiController, ApiDefinition } from '../types';
-declare type ApiDefinitionProvider = () => ApiDefinition;
+type ApiDefinitionProvider = () => ApiDefinition;
 export declare const apiControllerDefinition: unique symbol;
 export declare function getApiControllerDefinition(controller: Type): ApiDefinition;
 export declare function isApiController(controller: Type): boolean;

package/api/server/gateway.d.ts

@@ -9,15 +9,15 @@ import type { AsyncMiddleware, AsyncMiddlewareNext } from "../../utils/middlewar
 import 'urlpattern-polyfill';
 import type { ApiController, ApiDefinition, ApiEndpointDefinition, ApiEndpointMethod, ApiEndpointServerImplementation } from '../types';
 import type { CorsMiddlewareOptions } from './middlewares';
-export declare type ApiGatewayMiddlewareContext = {
+export type ApiGatewayMiddlewareContext = {
     api: ApiItem;
     /** can be undefined if used before allowedMethods middleware */
     endpoint: GatewayEndpoint;
     resourcePatternResult: URLPatternResult;
 };
-export declare type ApiGatewayMiddlewareNext = AsyncMiddlewareNext<HttpServerRequest, HttpServerResponse>;
-export declare type ApiGatewayMiddleware = AsyncMiddleware<HttpServerRequest, HttpServerResponse, ApiGatewayMiddlewareContext>;
-export declare type ApiGatewayOptions = {
+export type ApiGatewayMiddlewareNext = AsyncMiddlewareNext<HttpServerRequest, HttpServerResponse>;
+export type ApiGatewayMiddleware = AsyncMiddleware<HttpServerRequest, HttpServerResponse, ApiGatewayMiddlewareContext>;
+export type ApiGatewayOptions = {
     /**
      * Api prefix. Pass `null` to disable prefix.
      * @default api
@@ -35,18 +35,18 @@ export declare type ApiGatewayOptions = {
      */
     defaultMaxBytes?: number;
 };
-export declare type GatewayEndpoint = {
+export type GatewayEndpoint = {
     definition: ApiEndpointDefinition;
     implementation: ApiEndpointServerImplementation;
 };
-export declare type ApiItem = {
+export type ApiItem = {
     resource: string;
     pattern: URLPattern;
     endpoints: Map<ApiEndpointMethod, GatewayEndpoint>;
 };
-export declare type EndpointMetadataBodyType = 'none' | 'text' | 'json' | 'buffer' | 'stream';
-export declare type ApiGatewayArgument = ApiGatewayOptions;
-export declare type ApiMetadata = {
+export type EndpointMetadataBodyType = 'none' | 'text' | 'json' | 'buffer' | 'stream';
+export type ApiGatewayArgument = ApiGatewayOptions;
+export type ApiMetadata = {
     api: ApiItem;
     patternResult: URLPatternResult;
 };

package/api/server/middlewares/cors.middleware.d.ts

@@ -1,6 +1,6 @@
 import type { ApiEndpointDefinitionCors } from "../../types";
 import type { ApiGatewayMiddleware } from '../gateway';
-export declare type CorsMiddlewareOptions = {
+export type CorsMiddlewareOptions = {
     default?: ApiEndpointDefinitionCors;
 };
 export declare function corsMiddleware(options?: CorsMiddlewareOptions): ApiGatewayMiddleware;

package/api/server/module.d.ts

@@ -1,6 +1,6 @@
 import type { Type } from "../../types";
 import type { ApiGatewayOptions } from './gateway';
-export declare type ApiModuleOptions = {
+export type ApiModuleOptions = {
     controllers: Type[];
     gatewayOptions?: ApiGatewayOptions;
 };

package/api/types.d.ts

@@ -3,26 +3,26 @@ import type { HttpMethod } from "../http/types";
 import type { SchemaOutput, SchemaTestable } from "../schema";
 import type { NonUndefinable, OneOrMany, Record, ReturnTypeOrT } from "../types";
 import type { ApiGatewayMiddlewareContext } from './server';
-export declare type ApiRegistrationOptions = {
+export type ApiRegistrationOptions = {
     name?: string;
     prefix?: string;
 };
-export declare type ApiRegistration = {
+export type ApiRegistration = {
     target: object;
     name: string;
     path: string;
     prefix: string;
 };
-export declare type EndpointRegistrationOptions = {
+export type EndpointRegistrationOptions = {
     path?: string;
     description?: string;
 };
-export declare type ApiEndpointMethod = HttpMethod;
-export declare type ApiEndpointDefinitionParameters = SchemaTestable;
-export declare type ApiEndpointDefinitionBody = SchemaTestable | typeof String | typeof Uint8Array | typeof Blob | typeof ReadableStream;
-export declare type ApiEndpointDefinitionResult = SchemaTestable | typeof String | typeof Uint8Array | typeof Blob | typeof ReadableStream;
-export declare type ApiEndpointDataProvider<T> = T | ((request: HttpServerRequest, context: ApiGatewayMiddlewareContext) => T | Promise<T>);
-export declare type ApiEndpointDefinitionCors = {
+export type ApiEndpointMethod = HttpMethod;
+export type ApiEndpointDefinitionParameters = SchemaTestable;
+export type ApiEndpointDefinitionBody = SchemaTestable | typeof String | typeof Uint8Array | typeof Blob | typeof ReadableStream;
+export type ApiEndpointDefinitionResult = SchemaTestable | typeof String | typeof Uint8Array | typeof Blob | typeof ReadableStream;
+export type ApiEndpointDataProvider<T> = T | ((request: HttpServerRequest, context: ApiGatewayMiddlewareContext) => T | Promise<T>);
+export type ApiEndpointDefinitionCors = {
     accessControlAllowCredentials?: ApiEndpointDataProvider<boolean | undefined>;
     accessControlAllowHeaders?: ApiEndpointDataProvider<OneOrMany<string> | undefined>;
     accessControlAllowMethods?: ApiEndpointDataProvider<OneOrMany<HttpMethod> | undefined>;
@@ -31,7 +31,7 @@ export declare type ApiEndpointDefinitionCors = {
     accessControlExposeHeaders?: ApiEndpointDataProvider<OneOrMany<string> | undefined>;
     accessControlMaxAge?: ApiEndpointDataProvider<number | undefined>;
 };
-export declare type ApiEndpointDefinition = {
+export type ApiEndpointDefinition = {
     /**
      * Http Method
      * @default GET
@@ -67,7 +67,7 @@ export declare type ApiEndpointDefinition = {
     data?: any;
     cors?: ApiEndpointDefinitionCors;
 };
-export declare type ApiDefinition = {
+export type ApiDefinition = {
     /**
      * Default root resource for endpoints.
      */
@@ -78,33 +78,33 @@ export declare type ApiDefinition = {
     prefix?: string | null;
     endpoints: Record<string, ApiEndpointDefinition | (() => ApiEndpointDefinition)>;
 };
-export declare type ApiEndpointKeys<T extends ApiDefinition> = keyof T['endpoints'];
-export declare type NormalizedApiEndpoints<T extends ApiDefinition['endpoints']> = {
+export type ApiEndpointKeys<T extends ApiDefinition> = keyof T['endpoints'];
+export type NormalizedApiEndpoints<T extends ApiDefinition['endpoints']> = {
     [P in keyof T]: ReturnTypeOrT<T[P]>;
 };
-export declare type ApiEndpoint<T extends ApiDefinition, K extends ApiEndpointKeys<T>> = NormalizedApiEndpoints<T['endpoints']>[K];
-export declare type ApiEndpointParametersSchema<T extends ApiDefinition, K extends ApiEndpointKeys<T>> = NonUndefinable<ApiEndpoint<T, K>['parameters']>;
-export declare type ApiEndpointBodySchema<T extends ApiDefinition, K extends ApiEndpointKeys<T>> = NonUndefinable<ApiEndpoint<T, K>['body']>;
-export declare type ApiEndpointResultSchema<T extends ApiDefinition, K extends ApiEndpointKeys<T>> = NonUndefinable<ApiEndpoint<T, K>['result']>;
-export declare type ApiBinaryType = typeof Uint8Array | typeof Blob | typeof ReadableStream;
-export declare type ApiInputType<T extends SchemaTestable> = T extends ApiBinaryType ? (Uint8Array | Blob | ReadableStream<Uint8Array>) : T extends SchemaTestable ? SchemaOutput<T> : never;
-export declare type ApiOutputType<T extends SchemaTestable> = T extends typeof ReadableStream ? ReadableStream<Uint8Array> : T extends SchemaTestable ? SchemaOutput<T> : never;
-export declare type ApiParameters<T extends ApiDefinition, K extends ApiEndpointKeys<T>> = ApiInputType<ApiEndpointParametersSchema<T, K>>;
-export declare type ApiClientBody<T extends ApiDefinition, K extends ApiEndpointKeys<T>> = ApiInputType<ApiEndpointBodySchema<T, K>>;
-export declare type ApiServerBody<T extends ApiDefinition, K extends ApiEndpointKeys<T>> = ApiOutputType<ApiEndpointBodySchema<T, K>>;
-export declare type ApiServerResult<T extends ApiDefinition, K extends ApiEndpointKeys<T>> = ApiInputType<ApiEndpointResultSchema<T, K>> | HttpServerResponse;
-export declare type ApiClientResult<T extends ApiDefinition, K extends ApiEndpointKeys<T>> = ApiOutputType<ApiEndpointResultSchema<T, K>>;
-export declare type ApiRequestData<T extends ApiDefinition = ApiDefinition, K extends ApiEndpointKeys<T> = ApiEndpointKeys<T>> = {
+export type ApiEndpoint<T extends ApiDefinition, K extends ApiEndpointKeys<T>> = NormalizedApiEndpoints<T['endpoints']>[K];
+export type ApiEndpointParametersSchema<T extends ApiDefinition, K extends ApiEndpointKeys<T>> = NonUndefinable<ApiEndpoint<T, K>['parameters']>;
+export type ApiEndpointBodySchema<T extends ApiDefinition, K extends ApiEndpointKeys<T>> = NonUndefinable<ApiEndpoint<T, K>['body']>;
+export type ApiEndpointResultSchema<T extends ApiDefinition, K extends ApiEndpointKeys<T>> = NonUndefinable<ApiEndpoint<T, K>['result']>;
+export type ApiBinaryType = typeof Uint8Array | typeof Blob | typeof ReadableStream;
+export type ApiInputType<T extends SchemaTestable> = T extends ApiBinaryType ? (Uint8Array | Blob | ReadableStream<Uint8Array>) : T extends SchemaTestable ? SchemaOutput<T> : never;
+export type ApiOutputType<T extends SchemaTestable> = T extends typeof ReadableStream ? ReadableStream<Uint8Array> : T extends SchemaTestable ? SchemaOutput<T> : never;
+export type ApiParameters<T extends ApiDefinition, K extends ApiEndpointKeys<T>> = ApiInputType<ApiEndpointParametersSchema<T, K>>;
+export type ApiClientBody<T extends ApiDefinition, K extends ApiEndpointKeys<T>> = ApiInputType<ApiEndpointBodySchema<T, K>>;
+export type ApiServerBody<T extends ApiDefinition, K extends ApiEndpointKeys<T>> = ApiOutputType<ApiEndpointBodySchema<T, K>>;
+export type ApiServerResult<T extends ApiDefinition, K extends ApiEndpointKeys<T>> = ApiInputType<ApiEndpointResultSchema<T, K>> | HttpServerResponse;
+export type ApiClientResult<T extends ApiDefinition, K extends ApiEndpointKeys<T>> = ApiOutputType<ApiEndpointResultSchema<T, K>>;
+export type ApiRequestData<T extends ApiDefinition = ApiDefinition, K extends ApiEndpointKeys<T> = ApiEndpointKeys<T>> = {
     parameters: ApiParameters<T, K>;
     body: ApiServerBody<T, K>;
     request: HttpServerRequest;
 };
-export declare type ApiEndpointServerImplementation<T extends ApiDefinition = ApiDefinition, K extends ApiEndpointKeys<T> = ApiEndpointKeys<T>> = (requestData: ApiRequestData<T, K>) => ApiServerResult<T, K> | Promise<ApiServerResult<T, K>>;
-export declare type ApiEndpointClientImplementation<T extends ApiDefinition = ApiDefinition, K extends ApiEndpointKeys<T> = ApiEndpointKeys<T>> = ApiClientBody<T, K> extends never ? ApiParameters<T, K> extends never ? () => Promise<ApiClientResult<T, K>> : (parameters: ApiParameters<T, K>) => Promise<ApiClientResult<T, K>> : (parameters: ApiParameters<T, K> extends never ? undefined | Record<never, never> : ApiParameters<T, K>, body: ApiClientBody<T, K>) => Promise<ApiClientResult<T, K>>;
-export declare type ApiController<T extends ApiDefinition = any> = {
+export type ApiEndpointServerImplementation<T extends ApiDefinition = ApiDefinition, K extends ApiEndpointKeys<T> = ApiEndpointKeys<T>> = (requestData: ApiRequestData<T, K>) => ApiServerResult<T, K> | Promise<ApiServerResult<T, K>>;
+export type ApiEndpointClientImplementation<T extends ApiDefinition = ApiDefinition, K extends ApiEndpointKeys<T> = ApiEndpointKeys<T>> = ApiClientBody<T, K> extends never ? ApiParameters<T, K> extends never ? () => Promise<ApiClientResult<T, K>> : (parameters: ApiParameters<T, K>) => Promise<ApiClientResult<T, K>> : (parameters: ApiParameters<T, K> extends never ? undefined | Record<never, never> : ApiParameters<T, K>, body: ApiClientBody<T, K>) => Promise<ApiClientResult<T, K>>;
+export type ApiController<T extends ApiDefinition = any> = {
     [P in ApiEndpointKeys<T>]: ApiEndpointServerImplementation<T, P>;
 };
-export declare type ApiClientImplementation<T extends ApiDefinition = any> = {
+export type ApiClientImplementation<T extends ApiDefinition = any> = {
     [P in ApiEndpointKeys<T>]: ApiEndpointClientImplementation<T, P>;
 };
 export declare function defineApi<T extends ApiDefinition>(definition: T): T;

package/api/utils.d.ts

@@ -1,5 +1,5 @@
 import type { ApiDefinition, ApiEndpointDefinition } from './types';
-declare type GetApiEndpointUrlData = {
+type GetApiEndpointUrlData = {
     api: ApiDefinition;
     endpoint: ApiEndpointDefinition;
     defaultPrefix: string | undefined | null;

package/authentication/authentication-credentials.service.d.ts

@@ -0,0 +1,6 @@
+import type { AuthenticationCredentials } from './models';
+export declare abstract class AuthenticationCredentialsService {
+    abstract has(subject: string): Promise<boolean>;
+    abstract tryGet(subject: string): Promise<AuthenticationCredentials | undefined>;
+    abstract save(credentials: AuthenticationCredentials): Promise<void>;
+}

package/authentication/authentication-credentials.service.js

@@ -0,0 +1,17 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.AuthenticationCredentialsService = void 0;
+const reflection_1 = require("../reflection");
+let AuthenticationCredentialsService = class AuthenticationCredentialsService {
+};
+AuthenticationCredentialsService = __decorate([
+    (0, reflection_1.Class)()
+], AuthenticationCredentialsService);
+exports.AuthenticationCredentialsService = AuthenticationCredentialsService;
+//# sourceMappingURL=authentication-credentials.service.js.map

package/authentication/authentication-credentials.service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"authentication-credentials.service.js","sourceRoot":"","sources":["../../source/authentication/authentication-credentials.service.ts"],"names":[],"mappings":";;;;;;;;;AAAA,8CAAqC;AAI9B,IAAe,gCAAgC,GAA/C,MAAe,gCAAgC;CAIrD,CAAA;AAJqB,gCAAgC;IADrD,IAAA,kBAAK,GAAE;GACc,gCAAgC,CAIrD;AAJqB,4EAAgC"}

package/authentication/authentication-session.service.d.ts

@@ -0,0 +1,6 @@
+import type { AuthenticationSession } from './models';
+export declare abstract class AuthenticationSessionService {
+    abstract has(subject: string): Promise<boolean>;
+    abstract tryGet(subject: string, tokenId: string): Promise<AuthenticationSession | undefined>;
+    abstract save(refreshToken: AuthenticationSession): Promise<void>;
+}

package/authentication/authentication-session.service.js

@@ -0,0 +1,17 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.AuthenticationSessionService = void 0;
+const reflection_1 = require("../reflection");
+let AuthenticationSessionService = class AuthenticationSessionService {
+};
+AuthenticationSessionService = __decorate([
+    (0, reflection_1.Class)()
+], AuthenticationSessionService);
+exports.AuthenticationSessionService = AuthenticationSessionService;
+//# sourceMappingURL=authentication-session.service.js.map

package/authentication/authentication-session.service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"authentication-session.service.js","sourceRoot":"","sources":["../../source/authentication/authentication-session.service.ts"],"names":[],"mappings":";;;;;;;;;AAAA,8CAAqC;AAI9B,IAAe,4BAA4B,GAA3C,MAAe,4BAA4B;CAIjD,CAAA;AAJqB,4BAA4B;IADjD,IAAA,kBAAK,GAAE;GACc,4BAA4B,CAIjD;AAJqB,oEAA4B"}

package/authentication/authentication-token-payload.provider.d.ts

@@ -0,0 +1,3 @@
+export declare abstract class AuthenticationTokenPayloadProvider<TokenPayload, AdditionalAuthenticationData> {
+    abstract getTokenPayload(subject: string, additionalAuthenticationData: AdditionalAuthenticationData): Promise<TokenPayload>;
+}

package/authentication/authentication-token-payload.provider.js

@@ -0,0 +1,17 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.AuthenticationTokenPayloadProvider = void 0;
+const reflection_1 = require("../reflection");
+let AuthenticationTokenPayloadProvider = class AuthenticationTokenPayloadProvider {
+};
+AuthenticationTokenPayloadProvider = __decorate([
+    (0, reflection_1.Class)()
+], AuthenticationTokenPayloadProvider);
+exports.AuthenticationTokenPayloadProvider = AuthenticationTokenPayloadProvider;
+//# sourceMappingURL=authentication-token-payload.provider.js.map

package/authentication/authentication-token-payload.provider.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"authentication-token-payload.provider.js","sourceRoot":"","sources":["../../source/authentication/authentication-token-payload.provider.ts"],"names":[],"mappings":";;;;;;;;;AAAA,8CAAqC;AAG9B,IAAe,kCAAkC,GAAjD,MAAe,kCAAkC;CAEvD,CAAA;AAFqB,kCAAkC;IADvD,IAAA,kBAAK,GAAE;GACc,kCAAkC,CAEvD;AAFqB,gFAAkC"}

package/authentication/authentication.service.d.ts

@@ -0,0 +1,42 @@
+import type { JwtToken, JwtTokenHeader } from "../utils/jwt";
+import { AuthenticationCredentialsService } from './authentication-credentials.service';
+import { AuthenticationSessionService } from './authentication-session.service';
+import { AuthenticationTokenPayloadProvider } from './authentication-token-payload.provider';
+export type Token<TokenPayload> = JwtToken<TokenPayload & {
+    jti: string;
+    iat: number;
+    exp: number;
+}, JwtTokenHeader<TokenHeader>>;
+export type TokenHeader = {
+    v: number;
+};
+export type AuthenticationServiceOptions = {
+    /** Secret used for signing tokens */
+    secret: string;
+    /** Token version, forces refresh on mismatch (useful if payload changes) */
+    version?: number;
+    /** How long a token is valid */
+    tokenTimeToLive?: number;
+    /** How long a session is valid after a refreshed. Cannot be refreshed (new token issued) after it timed out. */
+    sessionTimeToLive?: number;
+};
+export type AuthenticationResult = {
+    token: string;
+    refreshToken: string;
+};
+export declare class AuthenticationService<TokenPayload, AdditionalAuthenticationData> {
+    private readonly credentialsService;
+    private readonly authenticationSessionService;
+    private readonly tokenPayloadProviderService;
+    private readonly secret;
+    private readonly tokenVersion;
+    private readonly tokenTimeToLive;
+    private readonly sessionTimeToLive;
+    constructor(credentialsService: AuthenticationCredentialsService, authenticationSessionService: AuthenticationSessionService, tokenPayloadProviderService: AuthenticationTokenPayloadProvider<TokenPayload, AdditionalAuthenticationData>, options: AuthenticationServiceOptions);
+    updateCredentials(subject: string, secret: string): Promise<void>;
+    authenticate(subject: string, secret: string, additionalAuthenticationData: AdditionalAuthenticationData): Promise<AuthenticationResult>;
+    validate(token: string): Promise<Token<TokenPayload>>;
+    private createToken;
+    private createRefreshToken;
+    private getHash;
+}

package/authentication/authentication.service.js

@@ -0,0 +1,133 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+var __param = (this && this.__param) || function (paramIndex, decorator) {
+    return function (target, key) { decorator(target, key, paramIndex); }
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.AuthenticationService = void 0;
+const container_1 = require("../container");
+const error_1 = require("../error");
+const invalid_token_error_1 = require("../error/invalid-token.error");
+const alphabet_1 = require("../utils/alphabet");
+const cryptography_1 = require("../utils/cryptography");
+const date_time_1 = require("../utils/date-time");
+const equals_1 = require("../utils/equals");
+const jwt_1 = require("../utils/jwt");
+const random_1 = require("../utils/random");
+const type_guards_1 = require("../utils/type-guards");
+const units_1 = require("../utils/units");
+const authentication_credentials_service_1 = require("./authentication-credentials.service");
+const authentication_session_service_1 = require("./authentication-session.service");
+const authentication_token_payload_provider_1 = require("./authentication-token-payload.provider");
+const tokens_1 = require("./tokens");
+let AuthenticationService = class AuthenticationService {
+    credentialsService;
+    authenticationSessionService;
+    tokenPayloadProviderService;
+    secret;
+    tokenVersion;
+    tokenTimeToLive;
+    sessionTimeToLive;
+    constructor(credentialsService, authenticationSessionService, tokenPayloadProviderService, options) {
+        this.credentialsService = credentialsService;
+        this.authenticationSessionService = authenticationSessionService;
+        this.tokenPayloadProviderService = tokenPayloadProviderService;
+        this.secret = options.secret;
+        this.tokenVersion = options.version ?? 1;
+        this.tokenTimeToLive = options.tokenTimeToLive ?? (5 * units_1.millisecondsPerMinute);
+        this.sessionTimeToLive = options.sessionTimeToLive ?? (5 * units_1.millisecondsPerDay);
+    }
+    async updateCredentials(subject, secret) {
+        const salt = (0, random_1.getRandomBytes)(32);
+        const hash = await this.getHash(secret, salt);
+        const credentials = {
+            subject,
+            hashVersion: 1,
+            salt,
+            hash
+        };
+        await this.credentialsService.save(credentials);
+    }
+    async authenticate(subject, secret, additionalAuthenticationData) {
+        const credentials = await this.credentialsService.tryGet(subject);
+        if ((0, type_guards_1.isUndefined)(credentials)) {
+            throw new error_1.UnauthorizedError('Invalid credentials.');
+        }
+        const hash = await this.getHash(secret, credentials.salt);
+        if (!(0, equals_1.binaryEquals)(hash, credentials.hash)) {
+            throw new error_1.UnauthorizedError('Invalid credentials.');
+        }
+        const now = (0, date_time_1.currentTimestamp)();
+        const tokenPayload = await this.tokenPayloadProviderService.getTokenPayload(subject, additionalAuthenticationData);
+        const { token, payload } = await this.createToken(tokenPayload, now);
+        const refreshToken = await this.createRefreshToken();
+        await this.authenticationSessionService.save({
+            subject,
+            begin: now,
+            end: now + this.sessionTimeToLive,
+            tokenId: payload.jti,
+            hashVersion: 1,
+            refreshTokenSalt: refreshToken.salt,
+            refreshTokenHash: refreshToken.hash
+        });
+        return { token, refreshToken: refreshToken.token };
+    }
+    /*
+    async refresh(subject: string, tokenId: string, refreshToken: string): Promise<string> {
+      const session = await this.authenticationSessionService.tryGet(subject, tokenId);
+    }
+    */
+    async validate(token) {
+        const validatedToken = await (0, jwt_1.parseAndValidateJwtTokenString)(token, 'HS256', this.secret);
+        if (validatedToken.header.v != this.tokenVersion) {
+            throw new invalid_token_error_1.InvalidTokenError('Invalid token version.');
+        }
+        return validatedToken;
+    }
+    async createToken(tokenPayload, timestamp = (0, date_time_1.currentTimestamp)()) {
+        const header = {
+            v: this.tokenVersion,
+            alg: 'HS256',
+            typ: 'JWT'
+        };
+        const payload = {
+            jti: (0, random_1.getRandomString)(24, alphabet_1.Alphabet.LowerUpperCaseNumbers),
+            iat: (0, date_time_1.timestampToTimestampSeconds)(timestamp),
+            exp: (0, date_time_1.timestampToTimestampSeconds)(timestamp + this.tokenTimeToLive),
+            ...tokenPayload
+        };
+        const token = await (0, jwt_1.createJwtTokenString)({
+            header,
+            payload
+        }, this.secret);
+        return { header, payload, token };
+    }
+    async createRefreshToken() {
+        const token = (0, random_1.getRandomString)(64, alphabet_1.Alphabet.LowerUpperCaseNumbers);
+        const salt = (0, random_1.getRandomBytes)(32);
+        const hash = await this.getHash(token, salt);
+        return { token, salt, hash: new Uint8Array(hash) };
+    }
+    async getHash(password, salt) {
+        const key = await (0, cryptography_1.importPbkdf2Key)(password);
+        const hash = await (0, cryptography_1.deriveBits)({ name: 'PBKDF2', hash: 'SHA-512', iterations: 250000, salt }, key, 384);
+        return new Uint8Array(hash);
+    }
+};
+AuthenticationService = __decorate([
+    (0, container_1.singleton)(),
+    __param(3, (0, container_1.inject)(tokens_1.AUTHENTICATION_SERVICE_OPTIONS)),
+    __metadata("design:paramtypes", [authentication_credentials_service_1.AuthenticationCredentialsService,
+        authentication_session_service_1.AuthenticationSessionService,
+        authentication_token_payload_provider_1.AuthenticationTokenPayloadProvider, Object])
+], AuthenticationService);
+exports.AuthenticationService = AuthenticationService;
+//# sourceMappingURL=authentication.service.js.map

package/authentication/authentication.service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"authentication.service.js","sourceRoot":"","sources":["../../source/authentication/authentication.service.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;AAAA,4CAAgD;AAChD,oCAA4C;AAC5C,sEAAgE;AAChE,gDAA4C;AAC5C,wDAAmE;AACnE,kDAAkF;AAClF,4CAA8C;AAE9C,sCAAmF;AACnF,4CAAiE;AACjE,sDAAkD;AAClD,0CAA0E;AAC1E,6FAAwF;AACxF,qFAAgF;AAChF,mGAA6F;AAE7F,qCAA0D;AAwCnD,IAAM,qBAAqB,GAA3B,MAAM,qBAAqB;IACf,kBAAkB,CAAmC;IACrD,4BAA4B,CAA+B;IAC3D,2BAA2B,CAAiF;IAE5G,MAAM,CAAS;IACf,YAAY,CAAS;IACrB,eAAe,CAAS;IACxB,iBAAiB,CAAS;IAE3C,YACE,kBAAoD,EACpD,4BAA0D,EAC1D,2BAA2G,EACnE,OAAqC;QAE7E,IAAI,CAAC,kBAAkB,GAAG,kBAAkB,CAAC;QAC7C,IAAI,CAAC,4BAA4B,GAAG,4BAA4B,CAAC;QACjE,IAAI,CAAC,2BAA2B,GAAG,2BAA2B,CAAC;QAE/D,IAAI,CAAC,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;QAC7B,IAAI,CAAC,YAAY,GAAG,OAAO,CAAC,OAAO,IAAI,CAAC,CAAC;QACzC,IAAI,CAAC,eAAe,GAAG,OAAO,CAAC,eAAe,IAAI,CAAC,CAAC,GAAG,6BAAqB,CAAC,CAAC;QAC9E,IAAI,CAAC,iBAAiB,GAAG,OAAO,CAAC,iBAAiB,IAAI,CAAC,CAAC,GAAG,0BAAkB,CAAC,CAAC;IACjF,CAAC;IAED,KAAK,CAAC,iBAAiB,CAAC,OAAe,EAAE,MAAc;QACrD,MAAM,IAAI,GAAG,IAAA,uBAAc,EAAC,EAAE,CAAC,CAAC;QAChC,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;QAE9C,MAAM,WAAW,GAA8B;YAC7C,OAAO;YACP,WAAW,EAAE,CAAC;YACd,IAAI;YACJ,IAAI;SACL,CAAC;QAEF,MAAM,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;IAClD,CAAC;IAED,KAAK,CAAC,YAAY,CAAC,OAAe,EAAE,MAAc,EAAE,4BAA0D;QAC5G,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,kBAAkB,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QAElE,IAAI,IAAA,yBAAW,EAAC,WAAW,CAAC,EAAE;YAC5B,MAAM,IAAI,yBAAiB,CAAC,sBAAsB,CAAC,CAAC;SACrD;QAED,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,WAAW,CAAC,IAAI,CAAC,CAAC;QAE1D,IAAI,CAAC,IAAA,qBAAY,EAAC,IAAI,EAAE,WAAW,CAAC,IAAI,CAAC,EAAE;YACzC,MAAM,IAAI,yBAAiB,CAAC,sBAAsB,CAAC,CAAC;SACrD;QAED,MAAM,GAAG,GAAG,IAAA,4BAAgB,GAAE,CAAC;QAE/B,MAAM,YAAY,GAAG,MAAM,IAAI,CAAC,2BAA2B,CAAC,eAAe,CAAC,OAAO,EAAE,4BAA4B,CAAC,CAAC;QACnH,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,YAAY,EAAE,GAAG,CAAC,CAAC;QACrE,MAAM,YAAY,GAAG,MAAM,IAAI,CAAC,kBAAkB,EAAE,CAAC;QAErD,MAAM,IAAI,CAAC,4BAA4B,CAAC,IAAI,CAAC;YAC3C,OAAO;YACP,KAAK,EAAE,GAAG;YACV,GAAG,EAAE,GAAG,GAAG,IAAI,CAAC,iBAAiB;YACjC,OAAO,EAAE,OAAO,CAAC,GAAG;YACpB,WAAW,EAAE,CAAC;YACd,gBAAgB,EAAE,YAAY,CAAC,IAAI;YACnC,gBAAgB,EAAE,YAAY,CAAC,IAAI;SACpC,CAAC,CAAC;QAEH,OAAO,EAAE,KAAK,EAAE,YAAY,EAAE,YAAY,CAAC,KAAK,EAAE,CAAC;IACrD,CAAC;IAED;;;;MAIE;IAEF,KAAK,CAAC,QAAQ,CAAC,KAAa;QAC1B,MAAM,cAAc,GAAG,MAAM,IAAA,oCAA8B,EAAsB,KAAK,EAAE,OAAO,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;QAE9G,IAAI,cAAc,CAAC,MAAM,CAAC,CAAC,IAAI,IAAI,CAAC,YAAY,EAAE;YAChD,MAAM,IAAI,uCAAiB,CAAC,wBAAwB,CAAC,CAAC;SACvD;QAED,OAAO,cAAc,CAAC;IACxB,CAAC;IAEO,KAAK,CAAC,WAAW,CAAC,YAA0B,EAAE,YAAoB,IAAA,4BAAgB,GAAE;QAC1F,MAAM,MAAM,GAAkC;YAC5C,CAAC,EAAE,IAAI,CAAC,YAAY;YACpB,GAAG,EAAE,OAAO;YACZ,GAAG,EAAE,KAAK;SACX,CAAC;QAEF,MAAM,OAAO,GAAmC;YAC9C,GAAG,EAAE,IAAA,wBAAe,EAAC,EAAE,EAAE,mBAAQ,CAAC,qBAAqB,CAAC;YACxD,GAAG,EAAE,IAAA,uCAA2B,EAAC,SAAS,CAAC;YAC3C,GAAG,EAAE,IAAA,uCAA2B,EAAC,SAAS,GAAG,IAAI,CAAC,eAAe,CAAC;YAClE,GAAG,YAAY;SAChB,CAAC;QAEF,MAAM,KAAK,GAAG,MAAM,IAAA,0BAAoB,EAAsB;YAC5D,MAAM;YACN,OAAO;SACR,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;QAEhB,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;IACpC,CAAC;IAEO,KAAK,CAAC,kBAAkB;QAC9B,MAAM,KAAK,GAAG,IAAA,wBAAe,EAAC,EAAE,EAAE,mBAAQ,CAAC,qBAAqB,CAAC,CAAC;QAClE,MAAM,IAAI,GAAG,IAAA,uBAAc,EAAC,EAAE,CAAC,CAAC;QAChC,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;QAE7C,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;IACrD,CAAC;IAEO,KAAK,CAAC,OAAO,CAAC,QAAgB,EAAE,IAAgB;QACtD,MAAM,GAAG,GAAG,MAAM,IAAA,8BAAe,EAAC,QAAQ,CAAC,CAAC;QAC5C,MAAM,IAAI,GAAG,MAAM,IAAA,yBAAU,EAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,SAAS,EAAE,UAAU,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC;QAEvG,OAAO,IAAI,UAAU,CAAC,IAAI,CAAC,CAAC;IAC9B,CAAC;CACF,CAAA;AA5HY,qBAAqB;IADjC,IAAA,qBAAS,GAAE;IAeP,WAAA,IAAA,kBAAM,EAAC,uCAA8B,CAAC,CAAA;qCAHnB,qEAAgC;QACtB,6DAA4B;QAC7B,0EAAkC;GAbtD,qBAAqB,CA4HjC;AA5HY,sDAAqB"}

package/authentication/models/authentication-credentials.model.d.ts

@@ -0,0 +1,6 @@
+export declare class AuthenticationCredentials {
+    subject: string;
+    hashVersion: number;
+    salt: Uint8Array;
+    hash: Uint8Array;
+}

package/authentication/models/authentication-credentials.model.js

@@ -0,0 +1,37 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.AuthenticationCredentials = void 0;
+const schema_1 = require("../../schema");
+class AuthenticationCredentials {
+    subject;
+    hashVersion;
+    salt;
+    hash;
+}
+__decorate([
+    (0, schema_1.Property)(),
+    __metadata("design:type", String)
+], AuthenticationCredentials.prototype, "subject", void 0);
+__decorate([
+    (0, schema_1.Property)(),
+    __metadata("design:type", Number)
+], AuthenticationCredentials.prototype, "hashVersion", void 0);
+__decorate([
+    (0, schema_1.Property)(),
+    __metadata("design:type", Uint8Array)
+], AuthenticationCredentials.prototype, "salt", void 0);
+__decorate([
+    (0, schema_1.Property)(),
+    __metadata("design:type", Uint8Array)
+], AuthenticationCredentials.prototype, "hash", void 0);
+exports.AuthenticationCredentials = AuthenticationCredentials;
+//# sourceMappingURL=authentication-credentials.model.js.map

package/authentication/models/authentication-credentials.model.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"authentication-credentials.model.js","sourceRoot":"","sources":["../../../source/authentication/models/authentication-credentials.model.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,yCAAoC;AAEpC,MAAa,yBAAyB;IAEpC,OAAO,CAAS;IAGhB,WAAW,CAAS;IAGpB,IAAI,CAAa;IAGjB,IAAI,CAAa;CAClB;AAXC;IAAC,IAAA,iBAAQ,GAAE;;0DACK;AAEhB;IAAC,IAAA,iBAAQ,GAAE;;8DACS;AAEpB;IAAC,IAAA,iBAAQ,GAAE;8BACL,UAAU;uDAAC;AAEjB;IAAC,IAAA,iBAAQ,GAAE;8BACL,UAAU;uDAAC;AAXnB,8DAYC"}

package/authentication/models/authentication-session.model.d.ts

@@ -0,0 +1,9 @@
+export declare class AuthenticationSession {
+    subject: string;
+    begin: number;
+    end: number;
+    tokenId: string;
+    hashVersion: number;
+    refreshTokenSalt: Uint8Array;
+    refreshTokenHash: Uint8Array;
+}