@vendure/core 3.7.4-master-202610010222 → 3.7.4-master-202610020217

package/dist/api/resolvers/admin/api-key.resolver.js

@@ -40,7 +40,13 @@ let ApiKeyResolver = class ApiKeyResolver {
         return this.apiKeyService.update(ctx, input, relations);
     }
     async deleteApiKeys(ctx, { ids }) {
-        return Promise.all(ids.map(id => this.apiKeyService.softDelete(ctx, id)));
+        // Delete sequentially: all softDeletes share one transactional query runner, so running them
+        // concurrently on a single connection can interleave.
+        const results = [];
+        for (const id of ids) {
+            results.push(await this.apiKeyService.softDelete(ctx, id));
+        }
+        return results;
     }
     async rotateApiKey(ctx, { id }) {
         return this.apiKeyService.rotate(ctx, id);

package/dist/api/resolvers/admin/api-key.resolver.js.map

@@ -1 +1 @@
-{"version":3,"file":"api-key.resolver.js","sourceRoot":"","sources":["../../../../src/api/resolvers/admin/api-key.resolver.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;AAAA,6CAAkE;AAClE,yEAW6C;AAG7C,6BAAsE;AACtE,4CAAkE;AAClE,2EAAgE;AAChE,+EAA0E;AAC1E,sEAAyD;AACzD,kFAAqE;AAG9D,IAAM,cAAc,GAApB,MAAM,cAAc;IACvB,YAAoB,aAA4B;QAA5B,kBAAa,GAAb,aAAa,CAAe;IAAG,CAAC;IAI9C,AAAN,KAAK,CAAC,MAAM,CACD,GAAmB,EAClB,EAAE,EAAE,EAAmB,EACZ,SAAgC;QAEnD,OAAO,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,EAAE,SAAS,CAAC,CAAC;IAC1D,CAAC;IAIK,AAAN,KAAK,CAAC,OAAO,CACF,GAAmB,EAClB,EAAE,OAAO,EAAoB,EAClB,SAAgC;QAEnD,OAAO,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC,GAAG,EAAE,OAAO,EAAE,SAAS,CAAC,CAAC;IAC/D,CAAC;IAKK,AAAN,KAAK,CAAC,YAAY,CACP,GAAmB,EAClB,EAAE,KAAK,EAA4B;QAE3C,IAAI,CAAC,GAAG,CAAC,YAAY;YACjB,MAAM,IAAI,4BAAmB,CAAC,wDAAwD,CAAC,CAAC;QAE5F,OAAO,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC,GAAG,EAAE,KAAK,EAAE,GAAG,CAAC,YAAY,CAAC,CAAC;IACnE,CAAC;IAKK,AAAN,KAAK,CAAC,YAAY,CACP,GAAmB,EAClB,EAAE,KAAK,EAA4B,EACxB,SAAgC;QAEnD,OAAO,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC,GAAG,EAAE,KAAK,EAAE,SAAS,CAAC,CAAC;IAC5D,CAAC;IAKK,AAAN,KAAK,CAAC,aAAa,CACR,GAAmB,EAClB,EAAE,GAAG,EAA6B;QAE1C,OAAO,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,CAAC,IAAI,CAAC,aAAa,CAAC,UAAU,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC;IAC9E,CAAC;IAKK,AAAN,KAAK,CAAC,YAAY,CACP,GAAmB,EAClB,EAAE,EAAE,EAA4B;QAExC,OAAO,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;IAC9C,CAAC;CACJ,CAAA;AAlEY,wCAAc;AAKjB;IAFL,IAAA,eAAK,GAAE;IACP,IAAA,uBAAK,EAAC,4BAAU,CAAC,UAAU,CAAC;IAExB,WAAA,IAAA,OAAG,GAAE,CAAA;IACL,WAAA,IAAA,cAAI,GAAE,CAAA;IACN,WAAA,IAAA,aAAS,EAAC,uBAAM,CAAC,CAAA;;qCAFN,kBAAc;;4CAK7B;AAIK;IAFL,IAAA,eAAK,GAAE;IACP,IAAA,uBAAK,EAAC,4BAAU,CAAC,UAAU,CAAC;IAExB,WAAA,IAAA,OAAG,GAAE,CAAA;IACL,WAAA,IAAA,cAAI,GAAE,CAAA;IACN,WAAA,IAAA,aAAS,EAAC,uBAAM,CAAC,CAAA;;qCAFN,kBAAc;;6CAK7B;AAKK;IAHL,IAAA,mCAAW,GAAE;IACb,IAAA,kBAAQ,GAAE;IACV,IAAA,uBAAK,EAAC,4BAAU,CAAC,YAAY,CAAC;IAE1B,WAAA,IAAA,OAAG,GAAE,CAAA;IACL,WAAA,IAAA,cAAI,GAAE,CAAA;;qCADK,kBAAc;;kDAO7B;AAKK;IAHL,IAAA,mCAAW,GAAE;IACb,IAAA,kBAAQ,GAAE;IACV,IAAA,uBAAK,EAAC,4BAAU,CAAC,YAAY,CAAC;IAE1B,WAAA,IAAA,OAAG,GAAE,CAAA;IACL,WAAA,IAAA,cAAI,GAAE,CAAA;IACN,WAAA,IAAA,aAAS,EAAC,uBAAM,CAAC,CAAA;;qCAFN,kBAAc;;kDAK7B;AAKK;IAHL,IAAA,mCAAW,GAAE;IACb,IAAA,kBAAQ,GAAE;IACV,IAAA,uBAAK,EAAC,4BAAU,CAAC,YAAY,CAAC;IAE1B,WAAA,IAAA,OAAG,GAAE,CAAA;IACL,WAAA,IAAA,cAAI,GAAE,CAAA;;qCADK,kBAAc;;mDAI7B;AAKK;IAHL,IAAA,mCAAW,GAAE;IACb,IAAA,kBAAQ,GAAE;IACV,IAAA,uBAAK,EAAC,4BAAU,CAAC,YAAY,CAAC;IAE1B,WAAA,IAAA,OAAG,GAAE,CAAA;IACL,WAAA,IAAA,cAAI,GAAE,CAAA;;qCADK,kBAAc;;kDAI7B;yBAjEQ,cAAc;IAD1B,IAAA,kBAAQ,EAAC,QAAQ,CAAC;qCAEoB,+BAAa;GADvC,cAAc,CAkE1B"}
+{"version":3,"file":"api-key.resolver.js","sourceRoot":"","sources":["../../../../src/api/resolvers/admin/api-key.resolver.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;AAAA,6CAAkE;AAClE,yEAW6C;AAG7C,6BAAsE;AACtE,4CAAkE;AAClE,2EAAgE;AAChE,+EAA0E;AAC1E,sEAAyD;AACzD,kFAAqE;AAG9D,IAAM,cAAc,GAApB,MAAM,cAAc;IACvB,YAAoB,aAA4B;QAA5B,kBAAa,GAAb,aAAa,CAAe;IAAG,CAAC;IAI9C,AAAN,KAAK,CAAC,MAAM,CACD,GAAmB,EAClB,EAAE,EAAE,EAAmB,EACZ,SAAgC;QAEnD,OAAO,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,EAAE,SAAS,CAAC,CAAC;IAC1D,CAAC;IAIK,AAAN,KAAK,CAAC,OAAO,CACF,GAAmB,EAClB,EAAE,OAAO,EAAoB,EAClB,SAAgC;QAEnD,OAAO,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC,GAAG,EAAE,OAAO,EAAE,SAAS,CAAC,CAAC;IAC/D,CAAC;IAKK,AAAN,KAAK,CAAC,YAAY,CACP,GAAmB,EAClB,EAAE,KAAK,EAA4B;QAE3C,IAAI,CAAC,GAAG,CAAC,YAAY;YACjB,MAAM,IAAI,4BAAmB,CAAC,wDAAwD,CAAC,CAAC;QAE5F,OAAO,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC,GAAG,EAAE,KAAK,EAAE,GAAG,CAAC,YAAY,CAAC,CAAC;IACnE,CAAC;IAKK,AAAN,KAAK,CAAC,YAAY,CACP,GAAmB,EAClB,EAAE,KAAK,EAA4B,EACxB,SAAgC;QAEnD,OAAO,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC,GAAG,EAAE,KAAK,EAAE,SAAS,CAAC,CAAC;IAC5D,CAAC;IAKK,AAAN,KAAK,CAAC,aAAa,CACR,GAAmB,EAClB,EAAE,GAAG,EAA6B;QAE1C,6FAA6F;QAC7F,sDAAsD;QACtD,MAAM,OAAO,GAAuB,EAAE,CAAC;QACvC,KAAK,MAAM,EAAE,IAAI,GAAG,EAAE,CAAC;YACnB,OAAO,CAAC,IAAI,CAAC,MAAM,IAAI,CAAC,aAAa,CAAC,UAAU,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,CAAC;QAC/D,CAAC;QACD,OAAO,OAAO,CAAC;IACnB,CAAC;IAKK,AAAN,KAAK,CAAC,YAAY,CACP,GAAmB,EAClB,EAAE,EAAE,EAA4B;QAExC,OAAO,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;IAC9C,CAAC;CACJ,CAAA;AAxEY,wCAAc;AAKjB;IAFL,IAAA,eAAK,GAAE;IACP,IAAA,uBAAK,EAAC,4BAAU,CAAC,UAAU,CAAC;IAExB,WAAA,IAAA,OAAG,GAAE,CAAA;IACL,WAAA,IAAA,cAAI,GAAE,CAAA;IACN,WAAA,IAAA,aAAS,EAAC,uBAAM,CAAC,CAAA;;qCAFN,kBAAc;;4CAK7B;AAIK;IAFL,IAAA,eAAK,GAAE;IACP,IAAA,uBAAK,EAAC,4BAAU,CAAC,UAAU,CAAC;IAExB,WAAA,IAAA,OAAG,GAAE,CAAA;IACL,WAAA,IAAA,cAAI,GAAE,CAAA;IACN,WAAA,IAAA,aAAS,EAAC,uBAAM,CAAC,CAAA;;qCAFN,kBAAc;;6CAK7B;AAKK;IAHL,IAAA,mCAAW,GAAE;IACb,IAAA,kBAAQ,GAAE;IACV,IAAA,uBAAK,EAAC,4BAAU,CAAC,YAAY,CAAC;IAE1B,WAAA,IAAA,OAAG,GAAE,CAAA;IACL,WAAA,IAAA,cAAI,GAAE,CAAA;;qCADK,kBAAc;;kDAO7B;AAKK;IAHL,IAAA,mCAAW,GAAE;IACb,IAAA,kBAAQ,GAAE;IACV,IAAA,uBAAK,EAAC,4BAAU,CAAC,YAAY,CAAC;IAE1B,WAAA,IAAA,OAAG,GAAE,CAAA;IACL,WAAA,IAAA,cAAI,GAAE,CAAA;IACN,WAAA,IAAA,aAAS,EAAC,uBAAM,CAAC,CAAA;;qCAFN,kBAAc;;kDAK7B;AAKK;IAHL,IAAA,mCAAW,GAAE;IACb,IAAA,kBAAQ,GAAE;IACV,IAAA,uBAAK,EAAC,4BAAU,CAAC,YAAY,CAAC;IAE1B,WAAA,IAAA,OAAG,GAAE,CAAA;IACL,WAAA,IAAA,cAAI,GAAE,CAAA;;qCADK,kBAAc;;mDAU7B;AAKK;IAHL,IAAA,mCAAW,GAAE;IACb,IAAA,kBAAQ,GAAE;IACV,IAAA,uBAAK,EAAC,4BAAU,CAAC,YAAY,CAAC;IAE1B,WAAA,IAAA,OAAG,GAAE,CAAA;IACL,WAAA,IAAA,cAAI,GAAE,CAAA;;qCADK,kBAAc;;kDAI7B;yBAvEQ,cAAc;IAD1B,IAAA,kBAAQ,EAAC,QAAQ,CAAC;qCAEoB,+BAAa;GADvC,cAAc,CAwE1B"}

package/dist/service/index.d.ts

@@ -31,6 +31,7 @@ export * from './helpers/utils/patch-entity';
 export * from './helpers/utils/translate-entity';
 export * from './helpers/verification-token-generator/verification-token-generator';
 export * from './services/administrator.service';
+export * from './services/api-key.service';
 export * from './services/asset.service';
 export * from './services/auth.service';
 export * from './services/channel.service';

package/dist/service/index.js

@@ -47,6 +47,7 @@ __exportStar(require("./helpers/utils/patch-entity"), exports);
 __exportStar(require("./helpers/utils/translate-entity"), exports);
 __exportStar(require("./helpers/verification-token-generator/verification-token-generator"), exports);
 __exportStar(require("./services/administrator.service"), exports);
+__exportStar(require("./services/api-key.service"), exports);
 __exportStar(require("./services/asset.service"), exports);
 __exportStar(require("./services/auth.service"), exports);
 __exportStar(require("./services/channel.service"), exports);

package/dist/service/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/service/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,8EAA4D;AAC5D,0EAAwD;AACxD,gGAA8E;AAC9E,wFAAsE;AACtE,oFAAkE;AAClE,uEAAqD;AACrD,gEAA8C;AAC9C,oGAAkF;AAClF,oFAAkE;AAClE,wFAAsE;AACtE,kFAAgE;AAChE,0FAAwE;AACxE,8EAA4D;AAC5D,qEAAmD;AACnD,sEAAoD;AACpD,0EAAwD;AACxD,0EAAwD;AACxD,4EAA0D;AAC1D,oFAAkE;AAClE,4EAA0D;AAC1D,gFAA8D;AAC9D,8FAA4E;AAC5E,8EAA4D;AAC5D,oFAAkE;AAClE,kFAAgE;AAChE,yDAAuC;AACvC,kFAAgE;AAChE,0EAAwD;AACxD,8DAA4C;AAC5C,+DAA6C;AAC7C,mEAAiD;AACjD,sGAAoF;AACpF,mEAAiD;AACjD,2DAAyC;AACzC,0DAAwC;AACxC,6DAA2C;AAC3C,gEAA8C;AAC9C,6DAA2C;AAC3C,oEAAkD;AAClD,8DAA4C;AAC5C,iEAA+C;AAC/C,2DAAyC;AACzC,iEAA+C;AAC/C,qEAAmD;AACnD,6DAA2C;AAC3C,mEAAiD;AACjD,2DAAyC;AACzC,oEAAkD;AAClD,6DAA2C;AAC3C,0EAAwD;AACxD,oEAAkD;AAClD,qEAAmD;AACnD,6DAA2C;AAC3C,+DAA6C;AAC7C,8DAA4C;AAC5C,0DAAwC;AACxC,4DAA0C;AAC1C,4DAA0C;AAC1C,6DAA2C;AAC3C,qEAAmD;AACnD,iEAA+C;AAC/C,oEAAkD;AAClD,oEAAkD;AAClD,yDAAuC;AACvC,kEAAgD;AAChD,8DAA4C;AAC5C,0DAAwC;AACxC,0DAAwC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/service/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,8EAA4D;AAC5D,0EAAwD;AACxD,gGAA8E;AAC9E,wFAAsE;AACtE,oFAAkE;AAClE,uEAAqD;AACrD,gEAA8C;AAC9C,oGAAkF;AAClF,oFAAkE;AAClE,wFAAsE;AACtE,kFAAgE;AAChE,0FAAwE;AACxE,8EAA4D;AAC5D,qEAAmD;AACnD,sEAAoD;AACpD,0EAAwD;AACxD,0EAAwD;AACxD,4EAA0D;AAC1D,oFAAkE;AAClE,4EAA0D;AAC1D,gFAA8D;AAC9D,8FAA4E;AAC5E,8EAA4D;AAC5D,oFAAkE;AAClE,kFAAgE;AAChE,yDAAuC;AACvC,kFAAgE;AAChE,0EAAwD;AACxD,8DAA4C;AAC5C,+DAA6C;AAC7C,mEAAiD;AACjD,sGAAoF;AACpF,mEAAiD;AACjD,6DAA2C;AAC3C,2DAAyC;AACzC,0DAAwC;AACxC,6DAA2C;AAC3C,gEAA8C;AAC9C,6DAA2C;AAC3C,oEAAkD;AAClD,8DAA4C;AAC5C,iEAA+C;AAC/C,2DAAyC;AACzC,iEAA+C;AAC/C,qEAAmD;AACnD,6DAA2C;AAC3C,mEAAiD;AACjD,2DAAyC;AACzC,oEAAkD;AAClD,6DAA2C;AAC3C,0EAAwD;AACxD,oEAAkD;AAClD,qEAAmD;AACnD,6DAA2C;AAC3C,+DAA6C;AAC7C,8DAA4C;AAC5C,0DAAwC;AACxC,4DAA0C;AAC1C,4DAA0C;AAC1C,6DAA2C;AAC3C,qEAAmD;AACnD,iEAA+C;AAC/C,oEAAkD;AAClD,oEAAkD;AAClD,yDAAuC;AACvC,kEAAgD;AAChD,8DAA4C;AAC5C,0DAAwC;AACxC,0DAAwC"}

package/dist/service/services/api-key.service.d.ts

@@ -37,14 +37,26 @@ export declare class ApiKeyService {
     getApiKeyStrategyByApiType(apiType: ApiType): ApiKeyStrategy;
     /**
      * @description
-     * Checks that the active user is allowed to grant the specified Roles for an API-Key
-     *
-     * // TODO this is taken & slightly modified from adminservice, could merge to not repeat logic
+     * Checks that the active user holds every Permission of the specified Roles, using the shared
+     * {@link RoleService.activeUserHasPermissionsOfRoles} rule so this and {@link AdministratorService}
+     * enforce it in one place. The Roles are either those being granted to an API-Key's User or those
+     * its User currently holds. Returns the loaded Roles (with their Channels) for callers that assign
+     * them to the API-Key's User.
      *
      * @throws {UserInputError} If the active User has insufficient permissions
      * @returns Role-Entities with relations to Channels
      */
-    private assertActiveUserCanGrantRoles;
+    private assertActiveUserHasPermissionsOfRoles;
+    /**
+     * @description
+     * Loads an API-Key in the active Channel, with its User's Roles and their Channels, if the active
+     * User may manage it: they must hold every Permission of the key's User. A key they may not manage
+     * throws the same error as a key which does not exist, since {@link ApiKeyService.findOne} hides it
+     * and a different error would disclose that it exists. (GHSA-37xp-mjp8-6f9x)
+     *
+     * @throws {EntityNotFoundError} If the API-Key does not exist or the active User may not manage it
+     */
+    private getManageableApiKeyOrThrow;
     /**
      * @description
      * Simple user identifier generation function because it is a non-nullable field on User.
@@ -86,7 +98,8 @@ export declare class ApiKeyService {
      * @description
      * Soft-Deletes an API-Key and removes its session. Is Channel-Aware.
      *
-     * @throws {EntityNotFoundError} If API-Key cannot be found
+     * @throws {EntityNotFoundError} If API-Key cannot be found, or the active User does not hold every
+     * Permission granted by the key's User
      */
     softDelete(ctx: RequestContext, id: ID): Promise<DeletionResponse>;
     /**
@@ -96,7 +109,8 @@ export declare class ApiKeyService {
      * This is a convenience method to invalidate an API-Key without
      * deleting the underlying roles and permissions.
      *
-     * @throws {EntityNotFoundError} If API-Key cannot be found
+     * @throws {EntityNotFoundError} If API-Key cannot be found, or the active User does not hold every
+     * Permission granted by the key's User
      */
     rotate(ctx: RequestContext, id: ID): Promise<RotateApiKeyResult>;
     /**
@@ -109,6 +123,13 @@ export declare class ApiKeyService {
      * Is channel-/ and soft-delete aware, translates the entity as well.
      */
     findAll(ctx: RequestContext, options?: ListQueryOptions<ApiKey>, relations?: RelationPaths<ApiKey>): Promise<PaginatedList<Translated<ApiKey>>>;
+    /**
+     * Restricts a list query to the API-Keys visible to the active user, by the same
+     * {@link RoleService.activeUserHasPermissionsOfRoles} rule that gates the mutations. Applied to the
+     * query rather than its result, so totalItems, sorting, filtering and pagination all operate over
+     * the visible keys only. Mirrors {@link AdministratorService}'s administrator visibility.
+     */
+    private restrictToVisibleApiKeys;
     /**
      * @description
      * Is channel-/ and soft-delete aware, translates the entity as well.

package/dist/service/services/api-key.service.js

@@ -12,6 +12,7 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.ApiKeyService = void 0;
 const common_1 = require("@nestjs/common");
 const generated_types_1 = require("@vendure/common/lib/generated-types");
+const unique_1 = require("@vendure/common/lib/unique");
 const typeorm_1 = require("typeorm");
 const common_2 = require("../../common");
 const config_1 = require("../../config");
@@ -25,7 +26,6 @@ const custom_field_relation_service_1 = require("../helpers/custom-field-relatio
 const list_query_builder_1 = require("../helpers/list-query-builder/list-query-builder");
 const translatable_saver_1 = require("../helpers/translatable-saver/translatable-saver");
 const translator_service_1 = require("../helpers/translator/translator.service");
-const get_user_channels_permissions_1 = require("../helpers/utils/get-user-channels-permissions");
 const channel_service_1 = require("./channel.service");
 const role_service_1 = require("./role.service");
 const session_service_1 = require("./session.service");
@@ -56,27 +56,47 @@ let ApiKeyService = class ApiKeyService {
     }
     /**
      * @description
-     * Checks that the active user is allowed to grant the specified Roles for an API-Key
-     *
-     * // TODO this is taken & slightly modified from adminservice, could merge to not repeat logic
+     * Checks that the active user holds every Permission of the specified Roles, using the shared
+     * {@link RoleService.activeUserHasPermissionsOfRoles} rule so this and {@link AdministratorService}
+     * enforce it in one place. The Roles are either those being granted to an API-Key's User or those
+     * its User currently holds. Returns the loaded Roles (with their Channels) for callers that assign
+     * them to the API-Key's User.
      *
      * @throws {UserInputError} If the active User has insufficient permissions
      * @returns Role-Entities with relations to Channels
      */
-    async assertActiveUserCanGrantRoles(ctx, roleIds) {
-        if (roleIds.length === 0)
+    async assertActiveUserHasPermissionsOfRoles(ctx, roleIds) {
+        if (!(await this.roleService.activeUserHasPermissionsOfRoles(ctx, roleIds))) {
+            throw new common_2.UserInputError('error.active-user-does-not-have-sufficient-permissions');
+        }
+        if (roleIds.length === 0) {
             return [];
-        const roles = await this.connection.getRepository(ctx, entity_1.Role).find({
+        }
+        return this.connection.getRepository(ctx, entity_1.Role).find({
             where: { id: (0, typeorm_1.In)(roleIds) },
             relations: { channels: true },
         });
-        const permissionsRequired = (0, get_user_channels_permissions_1.getChannelPermissions)(roles);
-        for (const channelPermissions of permissionsRequired) {
-            const isAllowed = await this.roleService.userHasAllPermissionsOnChannel(ctx, channelPermissions.id, channelPermissions.permissions);
-            if (!isAllowed)
-                throw new common_2.UserInputError('error.active-user-does-not-have-sufficient-permissions');
+    }
+    /**
+     * @description
+     * Loads an API-Key in the active Channel, with its User's Roles and their Channels, if the active
+     * User may manage it: they must hold every Permission of the key's User. A key they may not manage
+     * throws the same error as a key which does not exist, since {@link ApiKeyService.findOne} hides it
+     * and a different error would disclose that it exists. (GHSA-37xp-mjp8-6f9x)
+     *
+     * @throws {EntityNotFoundError} If the API-Key does not exist or the active User may not manage it
+     */
+    async getManageableApiKeyOrThrow(ctx, id) {
+        const entity = await this.connection.getEntityOrThrow(ctx, api_key_entity_1.ApiKey, id, {
+            channelId: ctx.channelId,
+            includeSoftDeleted: false,
+            relations: { user: { roles: { channels: true } } },
+        });
+        const canManage = await this.roleService.activeUserHasPermissionsOfRoles(ctx, entity.user.roles.map(role => role.id));
+        if (!canManage) {
+            throw new common_2.EntityNotFoundError('ApiKey', id);
         }
-        return roles;
+        return entity;
     }
     /**
      * @description
@@ -110,7 +130,7 @@ let ApiKeyService = class ApiKeyService {
      * You are responsible for avoiding privilege escalation by verifying this ID.
      */
     userIdApiKeyUser) {
-        const roles = await this.assertActiveUserCanGrantRoles(ctx, input.roleIds);
+        const roles = await this.assertActiveUserHasPermissionsOfRoles(ctx, input.roleIds);
         const ownerUser = await this.connection.getEntityOrThrow(ctx, entity_1.User, userIdOwner);
         const strategy = this.getApiKeyStrategyByApiType(ctx.apiType);
         const lookupId = await strategy.generateLookupId(ctx);
@@ -120,6 +140,13 @@ let ApiKeyService = class ApiKeyService {
                 relations: { roles: { channels: true } },
             })
             : await this.userService.createApiKeyUser(ctx, roles, this.generateApiKeyUserIdentifier(lookupId));
+        if (userIdApiKeyUser) {
+            // The session binds to this existing User, whose Roles may exceed the caller's, so the
+            // returned secret would be a credential more powerful than the caller. Guard the
+            // impersonation path the same way rotate/update/softDelete do. The other branch builds a
+            // User from `roles`, already checked above. (GHSA-37xp-mjp8-6f9x)
+            await this.assertActiveUserHasPermissionsOfRoles(ctx, apiKeyUser.roles.map(role => role.id));
+        }
         const secret = await strategy.generateSecret(ctx);
         const apiKey = strategy.constructApiKey(lookupId, secret);
         const hash = await strategy.hashingStrategy.hash(apiKey);
@@ -151,12 +178,13 @@ let ApiKeyService = class ApiKeyService {
      * @throws {EntityNotFoundError} If API-Key cannot be found
      */
     async update(ctx, input, relations) {
-        const entity = await this.connection.getEntityOrThrow(ctx, api_key_entity_1.ApiKey, input.id, {
-            channelId: ctx.channelId,
-            relations: ['user'],
-        });
+        // The caller must already hold every Permission the key's user holds before they may modify
+        // the key. Without this an Administrator holding only UpdateApiKey could rename a
+        // higher-privileged key or strip its roles. The incoming-roleIds check below additionally
+        // stops them raising a key's power.
+        const entity = await this.getManageableApiKeyOrThrow(ctx, input.id);
         if (input.roleIds) {
-            entity.user.roles = await this.assertActiveUserCanGrantRoles(ctx, input.roleIds);
+            entity.user.roles = await this.assertActiveUserHasPermissionsOfRoles(ctx, input.roleIds);
         }
         const apiKey = await this.translatableSaver.update({
             ctx,
@@ -180,12 +208,12 @@ let ApiKeyService = class ApiKeyService {
      * @description
      * Soft-Deletes an API-Key and removes its session. Is Channel-Aware.
      *
-     * @throws {EntityNotFoundError} If API-Key cannot be found
+     * @throws {EntityNotFoundError} If API-Key cannot be found, or the active User does not hold every
+     * Permission granted by the key's User
      */
     async softDelete(ctx, id) {
-        const apiKey = await this.connection.getEntityOrThrow(ctx, api_key_entity_1.ApiKey, id, {
-            channelId: ctx.channelId,
-        });
+        // Without this an Administrator holding only DeleteApiKey could delete a higher-privileged key.
+        const apiKey = await this.getManageableApiKeyOrThrow(ctx, id);
         const hasAuthMethod = await this.connection.getRepository(ctx, entity_1.AuthenticationMethod).existsBy({
             user: { id: apiKey.userId },
         });
@@ -213,15 +241,16 @@ let ApiKeyService = class ApiKeyService {
      * This is a convenience method to invalidate an API-Key without
      * deleting the underlying roles and permissions.
      *
-     * @throws {EntityNotFoundError} If API-Key cannot be found
+     * @throws {EntityNotFoundError} If API-Key cannot be found, or the active User does not hold every
+     * Permission granted by the key's User
      */
     async rotate(ctx, id) {
-        const entity = await this.connection.getEntityOrThrow(ctx, api_key_entity_1.ApiKey, id, {
-            channelId: ctx.channelId,
-            includeSoftDeleted: false,
-            // Need roles and channels for session
-            relations: { user: { roles: { channels: true } } },
-        });
+        // The rotated secret authenticates as the key's underlying User, whose Roles may exceed the
+        // caller's. Without this check an Administrator holding only UpdateApiKey could rotate a
+        // higher-privileged key and receive a working credential for it. Runs before any mutation,
+        // so a rejected rotate leaves the existing secret intact. The Roles and their Channels are
+        // also needed for the new session.
+        const entity = await this.getManageableApiKeyOrThrow(ctx, id);
         const strategy = this.getApiKeyStrategyByApiType(ctx.apiType);
         const secret = await strategy.generateSecret(ctx);
         const apiKey = strategy.constructApiKey(entity.lookupId, secret);
@@ -240,11 +269,18 @@ let ApiKeyService = class ApiKeyService {
      */
     async findOne(ctx, id, relations) {
         const entity = await this.connection.findOneInChannel(ctx, api_key_entity_1.ApiKey, id, ctx.channelId, {
-            relations,
+            // The User's Roles are always loaded, since the visibility check is based on them.
+            relations: (0, unique_1.unique)([...(relations !== null && relations !== void 0 ? relations : []), 'user', 'user.roles']),
             where: { deletedAt: (0, typeorm_1.IsNull)() },
         });
         if (!entity)
             return null;
+        // Hide a key the caller could not manage, so its metadata is not disclosed by id lookup to an
+        // Administrator who does not hold the key's permissions. Same rule as the mutations, so the read
+        // and write policies cannot drift apart. (GHSA-37xp-mjp8-6f9x)
+        const visible = await this.roleService.activeUserHasPermissionsOfRoles(ctx, entity.user.roles.map(role => role.id));
+        if (!visible)
+            return null;
         return this.translator.translate(entity, ctx);
     }
     /**
@@ -252,17 +288,49 @@ let ApiKeyService = class ApiKeyService {
      * Is channel-/ and soft-delete aware, translates the entity as well.
      */
     async findAll(ctx, options, relations) {
-        return this.listQueryBuilder
-            .build(api_key_entity_1.ApiKey, options, {
+        const qb = this.listQueryBuilder.build(api_key_entity_1.ApiKey, options, {
             ctx,
             relations,
             channelId: ctx.channelId,
             where: { deletedAt: (0, typeorm_1.IsNull)() },
-        })
-            .getManyAndCount()
-            .then(([notifications, totalItems]) => {
-            const items = notifications.map(n => this.translator.translate(n, ctx));
-            return { items, totalItems };
+        });
+        // Restrict to keys the caller may manage, applied to the query so pagination and totalItems
+        // stay correct. (GHSA-37xp-mjp8-6f9x)
+        await this.restrictToVisibleApiKeys(ctx, qb);
+        const [keys, totalItems] = await qb.getManyAndCount();
+        const items = keys.map(key => this.translator.translate(key, ctx));
+        return { items, totalItems };
+    }
+    /**
+     * Restricts a list query to the API-Keys visible to the active user, by the same
+     * {@link RoleService.activeUserHasPermissionsOfRoles} rule that gates the mutations. Applied to the
+     * query rather than its result, so totalItems, sorting, filtering and pagination all operate over
+     * the visible keys only. Mirrors {@link AdministratorService}'s administrator visibility.
+     */
+    async restrictToVisibleApiKeys(ctx, qb) {
+        // A SuperAdmin sees every key; getVisibleRoleIds() returns every Role id for them, so the
+        // sub-query would exclude nobody. This early return only saves the query.
+        if (ctx.userHasPermissions([generated_types_1.Permission.SuperAdmin])) {
+            return;
+        }
+        const visibleRoleIds = await this.roleService.getVisibleRoleIds(ctx);
+        // A key is excluded as soon as its User holds a single Role the active user cannot read. A
+        // sub-query is used rather than a join, so the key rows are not duplicated by the relations.
+        qb.andWhere(outerQb => {
+            const hiddenApiKeysQuery = outerQb
+                .subQuery()
+                .select('visibility_api_key.id')
+                .from(api_key_entity_1.ApiKey, 'visibility_api_key')
+                .innerJoin('visibility_api_key.user', 'visibility_user')
+                .innerJoin('visibility_user.roles', 'visibility_role');
+            // With no visible Roles, every Role is hidden, so no condition is needed on the Role.
+            if (visibleRoleIds.length) {
+                hiddenApiKeysQuery.where('visibility_role.id NOT IN (:...visibleRoleIds)', {
+                    visibleRoleIds,
+                });
+            }
+            const apiKeyId = `${outerQb.escape(outerQb.alias)}.${outerQb.escape('id')}`;
+            return `${apiKeyId} NOT IN ${hiddenApiKeysQuery.getQuery()}`;
         });
     }
     /**

package/dist/service/services/api-key.service.js.map

@@ -1 +1 @@
-{"version":3,"file":"api-key.service.js","sourceRoot":"","sources":["../../../src/service/services/api-key.service.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,2CAA4C;AAC5C,yEAO6C;AAE7C,qCAAmD;AAGnD,yCAOsB;AACtB,yCAAiF;AAEjF,iDAA2D;AAC3D,yCAAgE;AAChE,gGAAoF;AACpF,wEAA6D;AAC7D,+CAA2C;AAC3C,wEAAmE;AACnE,kHAA4G;AAC5G,yFAAoF;AACpF,yFAAqF;AACrF,iFAA6E;AAC7E,kGAAuF;AAEvF,uDAAmD;AACnD,iDAA6C;AAC7C,uDAAmD;AACnD,iDAA6C;AAItC,IAAM,aAAa,GAAnB,MAAM,aAAa;IACtB,YACY,cAA8B,EAC9B,aAA4B,EAC5B,UAAmC,EACnC,0BAAsD,EACtD,QAAkB,EAClB,gBAAkC,EAClC,WAAwB,EACxB,cAA8B,EAC9B,iBAAoC,EACpC,UAA6B,EAC7B,WAAwB;QAVxB,mBAAc,GAAd,cAAc,CAAgB;QAC9B,kBAAa,GAAb,aAAa,CAAe;QAC5B,eAAU,GAAV,UAAU,CAAyB;QACnC,+BAA0B,GAA1B,0BAA0B,CAA4B;QACtD,aAAQ,GAAR,QAAQ,CAAU;QAClB,qBAAgB,GAAhB,gBAAgB,CAAkB;QAClC,gBAAW,GAAX,WAAW,CAAa;QACxB,mBAAc,GAAd,cAAc,CAAgB;QAC9B,sBAAiB,GAAjB,iBAAiB,CAAmB;QACpC,eAAU,GAAV,UAAU,CAAmB;QAC7B,gBAAW,GAAX,WAAW,CAAa;IACjC,CAAC;IAEJ;;;;OAIG;IACH,0BAA0B,CAAC,OAAgB;QACvC,OAAO,OAAO,KAAK,OAAO;YACtB,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,WAAW,CAAC,mBAAmB;YACpD,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,WAAW,CAAC,kBAAkB,CAAC;IAC5D,CAAC;IAED;;;;;;;;OAQG;IACK,KAAK,CAAC,6BAA6B,CAAC,GAAmB,EAAE,OAAa;QAC1E,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,EAAE,CAAC;QAEpC,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,aAAa,CAAC,GAAG,EAAE,aAAI,CAAC,CAAC,IAAI,CAAC;YAC9D,KAAK,EAAE,EAAE,EAAE,EAAE,IAAA,YAAE,EAAC,OAAO,CAAC,EAAE;YAC1B,SAAS,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE;SAChC,CAAC,CAAC;QACH,MAAM,mBAAmB,GAAG,IAAA,qDAAqB,EAAC,KAAK,CAAC,CAAC;QACzD,KAAK,MAAM,kBAAkB,IAAI,mBAAmB,EAAE,CAAC;YACnD,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,8BAA8B,CACnE,GAAG,EACH,kBAAkB,CAAC,EAAE,EACrB,kBAAkB,CAAC,WAAW,CACjC,CAAC;YAEF,IAAI,CAAC,SAAS;gBACV,MAAM,IAAI,uBAAc,CAAC,wDAAwD,CAAC,CAAC;QAC3F,CAAC;QAED,OAAO,KAAK,CAAC;IACjB,CAAC;IAED;;;;;;;;;OASG;IACK,4BAA4B,CAAC,QAAgB;QACjD,OAAO,eAAe,QAAQ,EAAE,CAAC;IACrC,CAAC;IAED;;;;;;;;;;;OAWG;IACH,KAAK,CAAC,MAAM,CACR,GAAmB,EACnB,KAAwB,EACxB,WAAe;IACf;;;;OAIG;IACH,gBAAqB;QAErB,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,6BAA6B,CAAC,GAAG,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;QAE3E,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,gBAAgB,CAAC,GAAG,EAAE,aAAI,EAAE,WAAW,CAAC,CAAC;QACjF,MAAM,QAAQ,GAAG,IAAI,CAAC,0BAA0B,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QAC9D,MAAM,QAAQ,GAAG,MAAM,QAAQ,CAAC,gBAAgB,CAAC,GAAG,CAAC,CAAC;QACtD,MAAM,UAAU,GAAG,gBAAgB;YAC/B,CAAC,CAAC,MAAM,IAAI,CAAC,UAAU,CAAC,gBAAgB,CAAC,GAAG,EAAE,aAAI,EAAE,gBAAgB,EAAE;gBAChE,sFAAsF;gBACtF,SAAS,EAAE,EAAE,KAAK,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,EAAE;aAC3C,CAAC;YACJ,CAAC,CAAC,MAAM,IAAI,CAAC,WAAW,CAAC,gBAAgB,CACnC,GAAG,EACH,KAAK,EACL,IAAI,CAAC,4BAA4B,CAAC,QAAQ,CAAC,CAC9C,CAAC;QAER,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC;QAClD,MAAM,MAAM,GAAG,QAAQ,CAAC,eAAe,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;QAC1D,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,eAAe,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAEzD,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,iBAAiB,CAAC,MAAM,CAAC;YAClD,GAAG;YACH,KAAK;YACL,UAAU,EAAE,uBAAM;YAClB,eAAe,EAAE,8CAAiB;YAClC,UAAU,EAAE,KAAK,EAAC,CAAC,EAAC,EAAE;gBAClB,CAAC,CAAC,OAAO,GAAG,SAAS,CAAC,EAAE,CAAC;gBACzB,CAAC,CAAC,MAAM,GAAG,UAAU,CAAC,EAAE,CAAC;gBACzB,CAAC,CAAC,UAAU,GAAG,IAAI,CAAC;gBACpB,CAAC,CAAC,QAAQ,GAAG,QAAQ,CAAC;gBACtB,MAAM,IAAI,CAAC,cAAc,CAAC,sBAAsB,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;YAC7D,CAAC;SACJ,CAAC,CAAC;QAEH,MAAM,IAAI,CAAC,0BAA0B,CAAC,eAAe,CAAC,GAAG,EAAE,uBAAM,EAAE,KAAK,EAAE,SAAS,CAAC,CAAC;QAErF,4GAA4G;QAC5G,+FAA+F;QAC/F,MAAM,IAAI,CAAC,cAAc,CAAC,6BAA6B,CACnD,GAAG,EACH,UAAU,EACV,mCAA0B,EAC1B,IAAI,CACP,CAAC;QAEF,eAAM,CAAC,OAAO,CACV,mBAAmB,SAAS,CAAC,EAAE,eAAe,WAAW,sBAAsB,UAAU,CAAC,EAAE,KAAK,UAAU,CAAC,UAAU,GAAG,CAC5H,CAAC;QACF,MAAM,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,2BAAW,CAAC,GAAG,EAAE,SAAS,EAAE,SAAS,EAAE,KAAK,CAAC,CAAC,CAAC;QAE/E,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,SAAS,CAAC,EAAE,EAAE,CAAC;IAC9C,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,MAAM,CACR,GAAmB,EACnB,KAAwB,EACxB,SAAiC;QAEjC,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,gBAAgB,CAAC,GAAG,EAAE,uBAAM,EAAE,KAAK,CAAC,EAAE,EAAE;YACzE,SAAS,EAAE,GAAG,CAAC,SAAS;YACxB,SAAS,EAAE,CAAC,MAAM,CAAC;SACtB,CAAC,CAAC;QAEH,IAAI,KAAK,CAAC,OAAO,EAAE,CAAC;YAChB,MAAM,CAAC,IAAI,CAAC,KAAK,GAAG,MAAM,IAAI,CAAC,6BAA6B,CAAC,GAAG,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;QACrF,CAAC;QAED,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,iBAAiB,CAAC,MAAM,CAAC;YAC/C,GAAG;YACH,KAAK;YACL,UAAU,EAAE,uBAAM;YAClB,eAAe,EAAE,8CAAiB;YAClC,UAAU,EAAE,KAAK,IAAI,EAAE;gBACnB,qEAAqE;gBACrE,wDAAwD;gBACxD,IAAI,KAAK,CAAC,OAAO,EAAE,CAAC;oBAChB,MAAM,IAAI,CAAC,UAAU,CAAC,aAAa,CAAC,GAAG,EAAE,aAAI,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;gBACxF,CAAC;YACL,CAAC;SACJ,CAAC,CAAC;QACH,MAAM,IAAI,CAAC,0BAA0B,CAAC,eAAe,CAAC,GAAG,EAAE,uBAAM,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC;QAElF,eAAM,CAAC,OAAO,CAAC,mBAAmB,MAAM,CAAC,EAAE,cAAc,MAAM,CAAC,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC;QACtF,MAAM,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,2BAAW,CAAC,GAAG,EAAE,MAAM,EAAE,SAAS,EAAE,KAAK,CAAC,CAAC,CAAC;QAE5E,OAAO,IAAA,oBAAW,EAAC,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,EAAE,SAAS,CAAC,CAAC,CAAC;IAC/D,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,UAAU,CAAC,GAAmB,EAAE,EAAM;QACxC,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,gBAAgB,CAAC,GAAG,EAAE,uBAAM,EAAE,EAAE,EAAE;YACnE,SAAS,EAAE,GAAG,CAAC,SAAS;SAC3B,CAAC,CAAC;QAEH,MAAM,aAAa,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,aAAa,CAAC,GAAG,EAAE,6BAAoB,CAAC,CAAC,QAAQ,CAAC;YAC1F,IAAI,EAAE,EAAE,EAAE,EAAE,MAAM,CAAC,MAAM,EAAE;SAC9B,CAAC,CAAC;QAEH,6EAA6E;QAC7E,IAAI,aAAa,EAAE,CAAC;YAChB,MAAM,IAAI,CAAC,cAAc,CAAC,mBAAmB,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;QAC/D,CAAC;QACD,2EAA2E;aACtE,CAAC;YACF,6DAA6D;YAC7D,MAAM,IAAI,CAAC,WAAW,CAAC,UAAU,CAAC,GAAG,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC;QAC1D,CAAC;QAED,MAAM,CAAC,SAAS,GAAG,IAAI,IAAI,EAAE,CAAC;QAC9B,MAAM,IAAI,CAAC,UAAU;aAChB,aAAa,CAAC,GAAG,EAAE,uBAAM,CAAC;aAC1B,MAAM,CAAC,EAAE,EAAE,EAAE,MAAM,CAAC,EAAE,EAAE,EAAE,EAAE,SAAS,EAAE,MAAM,CAAC,SAAS,EAAE,CAAC,CAAC;QAEhE,eAAM,CAAC,OAAO,CAAC,mBAAmB,EAAE,cAAc,MAAM,CAAC,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC;QAC/E,MAAM,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,2BAAW,CAAC,GAAG,EAAE,MAAM,EAAE,SAAS,EAAE,EAAE,CAAC,CAAC,CAAC;QAEzE,OAAO,EAAE,MAAM,EAAE,gCAAc,CAAC,OAAO,EAAE,CAAC;IAC9C,CAAC;IAED;;;;;;;;OAQG;IACH,KAAK,CAAC,MAAM,CAAC,GAAmB,EAAE,EAAM;QACpC,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,gBAAgB,CAAC,GAAG,EAAE,uBAAM,EAAE,EAAE,EAAE;YACnE,SAAS,EAAE,GAAG,CAAC,SAAS;YACxB,kBAAkB,EAAE,KAAK;YACzB,sCAAsC;YACtC,SAAS,EAAE,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,EAAE,EAAE;SACrD,CAAC,CAAC;QAEH,MAAM,QAAQ,GAAG,IAAI,CAAC,0BAA0B,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QAC9D,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC;QAClD,MAAM,MAAM,GAAG,QAAQ,CAAC,eAAe,CAAC,MAAM,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;QACjE,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,eAAe,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAEzD,MAAM,IAAI,CAAC,cAAc,CAAC,mBAAmB,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;QAC3D,MAAM,IAAI,CAAC,cAAc,CAAC,6BAA6B,CACnD,GAAG,EACH,MAAM,CAAC,IAAI,EACX,mCAA0B,EAC1B,IAAI,CACP,CAAC;QAEF,MAAM,CAAC,UAAU,GAAG,IAAI,CAAC;QACzB,MAAM,IAAI,CAAC,UAAU,CAAC,aAAa,CAAC,GAAG,EAAE,uBAAM,CAAC,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;QAEjF,eAAM,CAAC,OAAO,CAAC,mBAAmB,MAAM,CAAC,EAAE,cAAc,MAAM,CAAC,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC;QACtF,MAAM,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,2BAAW,CAAC,GAAG,EAAE,MAAM,EAAE,SAAS,EAAE,EAAE,CAAC,CAAC,CAAC;QAEzE,OAAO,EAAE,MAAM,EAAE,CAAC;IACtB,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,OAAO,CACT,GAAmB,EACnB,EAAM,EACN,SAAiC;QAEjC,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,gBAAgB,CAAC,GAAG,EAAE,uBAAM,EAAE,EAAE,EAAE,GAAG,CAAC,SAAS,EAAE;YAClF,SAAS;YACT,KAAK,EAAE,EAAE,SAAS,EAAE,IAAA,gBAAM,GAAE,EAAE;SACjC,CAAC,CAAC;QACH,IAAI,CAAC,MAAM;YAAE,OAAO,IAAI,CAAC;QACzB,OAAO,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IAClD,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,OAAO,CACT,GAAmB,EACnB,OAAkC,EAClC,SAAiC;QAEjC,OAAO,IAAI,CAAC,gBAAgB;aACvB,KAAK,CAAC,uBAAM,EAAE,OAAO,EAAE;YACpB,GAAG;YACH,SAAS;YACT,SAAS,EAAE,GAAG,CAAC,SAAS;YACxB,KAAK,EAAE,EAAE,SAAS,EAAE,IAAA,gBAAM,GAAE,EAAE;SACjC,CAAC;aACD,eAAe,EAAE;aACjB,IAAI,CAAC,CAAC,CAAC,aAAa,EAAE,UAAU,CAAC,EAAE,EAAE;YAClC,MAAM,KAAK,GAAG,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC;YACxE,OAAO,EAAE,KAAK,EAAE,UAAU,EAAE,CAAC;QACjC,CAAC,CAAC,CAAC;IACX,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,iBAAiB,CACnB,GAAmB,EACnB,QAA4B,EAC5B,SAAiC;QAEjC,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,aAAa,CAAC,GAAG,EAAE,uBAAM,CAAC,CAAC,OAAO,CAAC;YACpE,SAAS,EAAE,CAAC,GAAG,CAAC,SAAS,aAAT,SAAS,cAAT,SAAS,GAAI,EAAE,CAAC,EAAE,UAAU,CAAC;YAC7C,KAAK,EAAE;gBACH,QAAQ;gBACR,SAAS,EAAE,IAAA,gBAAM,GAAE;gBACnB,QAAQ,EAAE,EAAE,EAAE,EAAE,GAAG,CAAC,SAAS,EAAE;aAClC;SACJ,CAAC,CAAC;QACH,IAAI,CAAC,MAAM;YAAE,OAAO,IAAI,CAAC;QACzB,OAAO,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IAClD,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,0BAA0B,CAAC,QAA4B;QACzD,OAAO,IAAI,CAAC,UAAU,CAAC,aAAa;aAC/B,aAAa,CAAC,uBAAM,CAAC;aACrB,MAAM,CAAC,EAAE,QAAQ,EAAE,EAAE,EAAE,UAAU,EAAE,IAAI,IAAI,EAAE,EAAE,CAAC,CAAC;IAC1D,CAAC;CACJ,CAAA;AA7UY,sCAAa;wBAAb,aAAa;IAFzB,IAAA,mBAAU,GAAE;IACZ,IAAA,mBAAU,GAAE;qCAGmB,gCAAc;QACf,sBAAa;QAChB,oCAAuB;QACP,0DAA0B;QAC5C,oBAAQ;QACA,qCAAgB;QACrB,0BAAW;QACR,gCAAc;QACX,sCAAiB;QACxB,sCAAiB;QAChB,0BAAW;GAZ3B,aAAa,CA6UzB"}
+{"version":3,"file":"api-key.service.js","sourceRoot":"","sources":["../../../src/service/services/api-key.service.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,2CAA4C;AAC5C,yEAQ6C;AAE7C,uDAAoD;AACpD,qCAAuE;AAGvE,yCAOsB;AACtB,yCAAiF;AAEjF,iDAA2D;AAC3D,yCAAgE;AAChE,gGAAoF;AACpF,wEAA6D;AAC7D,+CAA2C;AAC3C,wEAAmE;AACnE,kHAA4G;AAC5G,yFAAoF;AACpF,yFAAqF;AACrF,iFAA6E;AAE7E,uDAAmD;AACnD,iDAA6C;AAC7C,uDAAmD;AACnD,iDAA6C;AAItC,IAAM,aAAa,GAAnB,MAAM,aAAa;IACtB,YACY,cAA8B,EAC9B,aAA4B,EAC5B,UAAmC,EACnC,0BAAsD,EACtD,QAAkB,EAClB,gBAAkC,EAClC,WAAwB,EACxB,cAA8B,EAC9B,iBAAoC,EACpC,UAA6B,EAC7B,WAAwB;QAVxB,mBAAc,GAAd,cAAc,CAAgB;QAC9B,kBAAa,GAAb,aAAa,CAAe;QAC5B,eAAU,GAAV,UAAU,CAAyB;QACnC,+BAA0B,GAA1B,0BAA0B,CAA4B;QACtD,aAAQ,GAAR,QAAQ,CAAU;QAClB,qBAAgB,GAAhB,gBAAgB,CAAkB;QAClC,gBAAW,GAAX,WAAW,CAAa;QACxB,mBAAc,GAAd,cAAc,CAAgB;QAC9B,sBAAiB,GAAjB,iBAAiB,CAAmB;QACpC,eAAU,GAAV,UAAU,CAAmB;QAC7B,gBAAW,GAAX,WAAW,CAAa;IACjC,CAAC;IAEJ;;;;OAIG;IACH,0BAA0B,CAAC,OAAgB;QACvC,OAAO,OAAO,KAAK,OAAO;YACtB,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,WAAW,CAAC,mBAAmB;YACpD,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,WAAW,CAAC,kBAAkB,CAAC;IAC5D,CAAC;IAED;;;;;;;;;;OAUG;IACK,KAAK,CAAC,qCAAqC,CAAC,GAAmB,EAAE,OAAa;QAClF,IAAI,CAAC,CAAC,MAAM,IAAI,CAAC,WAAW,CAAC,+BAA+B,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC,EAAE,CAAC;YAC1E,MAAM,IAAI,uBAAc,CAAC,wDAAwD,CAAC,CAAC;QACvF,CAAC;QACD,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACvB,OAAO,EAAE,CAAC;QACd,CAAC;QACD,OAAO,IAAI,CAAC,UAAU,CAAC,aAAa,CAAC,GAAG,EAAE,aAAI,CAAC,CAAC,IAAI,CAAC;YACjD,KAAK,EAAE,EAAE,EAAE,EAAE,IAAA,YAAE,EAAC,OAAO,CAAC,EAAE;YAC1B,SAAS,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE;SAChC,CAAC,CAAC;IACP,CAAC;IAED;;;;;;;;OAQG;IACK,KAAK,CAAC,0BAA0B,CAAC,GAAmB,EAAE,EAAM;QAChE,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,gBAAgB,CAAC,GAAG,EAAE,uBAAM,EAAE,EAAE,EAAE;YACnE,SAAS,EAAE,GAAG,CAAC,SAAS;YACxB,kBAAkB,EAAE,KAAK;YACzB,SAAS,EAAE,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,EAAE,EAAE;SACrD,CAAC,CAAC;QACH,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,+BAA+B,CACpE,GAAG,EACH,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,CACzC,CAAC;QACF,IAAI,CAAC,SAAS,EAAE,CAAC;YACb,MAAM,IAAI,4BAAmB,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;QAChD,CAAC;QACD,OAAO,MAAM,CAAC;IAClB,CAAC;IAED;;;;;;;;;OASG;IACK,4BAA4B,CAAC,QAAgB;QACjD,OAAO,eAAe,QAAQ,EAAE,CAAC;IACrC,CAAC;IAED;;;;;;;;;;;OAWG;IACH,KAAK,CAAC,MAAM,CACR,GAAmB,EACnB,KAAwB,EACxB,WAAe;IACf;;;;OAIG;IACH,gBAAqB;QAErB,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,qCAAqC,CAAC,GAAG,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;QAEnF,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,gBAAgB,CAAC,GAAG,EAAE,aAAI,EAAE,WAAW,CAAC,CAAC;QACjF,MAAM,QAAQ,GAAG,IAAI,CAAC,0BAA0B,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QAC9D,MAAM,QAAQ,GAAG,MAAM,QAAQ,CAAC,gBAAgB,CAAC,GAAG,CAAC,CAAC;QACtD,MAAM,UAAU,GAAG,gBAAgB;YAC/B,CAAC,CAAC,MAAM,IAAI,CAAC,UAAU,CAAC,gBAAgB,CAAC,GAAG,EAAE,aAAI,EAAE,gBAAgB,EAAE;gBAChE,sFAAsF;gBACtF,SAAS,EAAE,EAAE,KAAK,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,EAAE;aAC3C,CAAC;YACJ,CAAC,CAAC,MAAM,IAAI,CAAC,WAAW,CAAC,gBAAgB,CACnC,GAAG,EACH,KAAK,EACL,IAAI,CAAC,4BAA4B,CAAC,QAAQ,CAAC,CAC9C,CAAC;QAER,IAAI,gBAAgB,EAAE,CAAC;YACnB,uFAAuF;YACvF,iFAAiF;YACjF,yFAAyF;YACzF,kEAAkE;YAClE,MAAM,IAAI,CAAC,qCAAqC,CAC5C,GAAG,EACH,UAAU,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,CACxC,CAAC;QACN,CAAC;QAED,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC;QAClD,MAAM,MAAM,GAAG,QAAQ,CAAC,eAAe,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;QAC1D,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,eAAe,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAEzD,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,iBAAiB,CAAC,MAAM,CAAC;YAClD,GAAG;YACH,KAAK;YACL,UAAU,EAAE,uBAAM;YAClB,eAAe,EAAE,8CAAiB;YAClC,UAAU,EAAE,KAAK,EAAC,CAAC,EAAC,EAAE;gBAClB,CAAC,CAAC,OAAO,GAAG,SAAS,CAAC,EAAE,CAAC;gBACzB,CAAC,CAAC,MAAM,GAAG,UAAU,CAAC,EAAE,CAAC;gBACzB,CAAC,CAAC,UAAU,GAAG,IAAI,CAAC;gBACpB,CAAC,CAAC,QAAQ,GAAG,QAAQ,CAAC;gBACtB,MAAM,IAAI,CAAC,cAAc,CAAC,sBAAsB,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;YAC7D,CAAC;SACJ,CAAC,CAAC;QAEH,MAAM,IAAI,CAAC,0BAA0B,CAAC,eAAe,CAAC,GAAG,EAAE,uBAAM,EAAE,KAAK,EAAE,SAAS,CAAC,CAAC;QAErF,4GAA4G;QAC5G,+FAA+F;QAC/F,MAAM,IAAI,CAAC,cAAc,CAAC,6BAA6B,CACnD,GAAG,EACH,UAAU,EACV,mCAA0B,EAC1B,IAAI,CACP,CAAC;QAEF,eAAM,CAAC,OAAO,CACV,mBAAmB,SAAS,CAAC,EAAE,eAAe,WAAW,sBAAsB,UAAU,CAAC,EAAE,KAAK,UAAU,CAAC,UAAU,GAAG,CAC5H,CAAC;QACF,MAAM,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,2BAAW,CAAC,GAAG,EAAE,SAAS,EAAE,SAAS,EAAE,KAAK,CAAC,CAAC,CAAC;QAE/E,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,SAAS,CAAC,EAAE,EAAE,CAAC;IAC9C,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,MAAM,CACR,GAAmB,EACnB,KAAwB,EACxB,SAAiC;QAEjC,4FAA4F;QAC5F,kFAAkF;QAClF,0FAA0F;QAC1F,oCAAoC;QACpC,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,0BAA0B,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,CAAC,CAAC;QAEpE,IAAI,KAAK,CAAC,OAAO,EAAE,CAAC;YAChB,MAAM,CAAC,IAAI,CAAC,KAAK,GAAG,MAAM,IAAI,CAAC,qCAAqC,CAAC,GAAG,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;QAC7F,CAAC;QAED,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,iBAAiB,CAAC,MAAM,CAAC;YAC/C,GAAG;YACH,KAAK;YACL,UAAU,EAAE,uBAAM;YAClB,eAAe,EAAE,8CAAiB;YAClC,UAAU,EAAE,KAAK,IAAI,EAAE;gBACnB,qEAAqE;gBACrE,wDAAwD;gBACxD,IAAI,KAAK,CAAC,OAAO,EAAE,CAAC;oBAChB,MAAM,IAAI,CAAC,UAAU,CAAC,aAAa,CAAC,GAAG,EAAE,aAAI,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;gBACxF,CAAC;YACL,CAAC;SACJ,CAAC,CAAC;QACH,MAAM,IAAI,CAAC,0BAA0B,CAAC,eAAe,CAAC,GAAG,EAAE,uBAAM,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC;QAElF,eAAM,CAAC,OAAO,CAAC,mBAAmB,MAAM,CAAC,EAAE,cAAc,MAAM,CAAC,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC;QACtF,MAAM,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,2BAAW,CAAC,GAAG,EAAE,MAAM,EAAE,SAAS,EAAE,KAAK,CAAC,CAAC,CAAC;QAE5E,OAAO,IAAA,oBAAW,EAAC,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,EAAE,SAAS,CAAC,CAAC,CAAC;IAC/D,CAAC;IAED;;;;;;OAMG;IACH,KAAK,CAAC,UAAU,CAAC,GAAmB,EAAE,EAAM;QACxC,gGAAgG;QAChG,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,0BAA0B,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;QAE9D,MAAM,aAAa,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,aAAa,CAAC,GAAG,EAAE,6BAAoB,CAAC,CAAC,QAAQ,CAAC;YAC1F,IAAI,EAAE,EAAE,EAAE,EAAE,MAAM,CAAC,MAAM,EAAE;SAC9B,CAAC,CAAC;QAEH,6EAA6E;QAC7E,IAAI,aAAa,EAAE,CAAC;YAChB,MAAM,IAAI,CAAC,cAAc,CAAC,mBAAmB,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;QAC/D,CAAC;QACD,2EAA2E;aACtE,CAAC;YACF,6DAA6D;YAC7D,MAAM,IAAI,CAAC,WAAW,CAAC,UAAU,CAAC,GAAG,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC;QAC1D,CAAC;QAED,MAAM,CAAC,SAAS,GAAG,IAAI,IAAI,EAAE,CAAC;QAC9B,MAAM,IAAI,CAAC,UAAU;aAChB,aAAa,CAAC,GAAG,EAAE,uBAAM,CAAC;aAC1B,MAAM,CAAC,EAAE,EAAE,EAAE,MAAM,CAAC,EAAE,EAAE,EAAE,EAAE,SAAS,EAAE,MAAM,CAAC,SAAS,EAAE,CAAC,CAAC;QAEhE,eAAM,CAAC,OAAO,CAAC,mBAAmB,EAAE,cAAc,MAAM,CAAC,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC;QAC/E,MAAM,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,2BAAW,CAAC,GAAG,EAAE,MAAM,EAAE,SAAS,EAAE,EAAE,CAAC,CAAC,CAAC;QAEzE,OAAO,EAAE,MAAM,EAAE,gCAAc,CAAC,OAAO,EAAE,CAAC;IAC9C,CAAC;IAED;;;;;;;;;OASG;IACH,KAAK,CAAC,MAAM,CAAC,GAAmB,EAAE,EAAM;QACpC,4FAA4F;QAC5F,yFAAyF;QACzF,2FAA2F;QAC3F,2FAA2F;QAC3F,mCAAmC;QACnC,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,0BAA0B,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;QAE9D,MAAM,QAAQ,GAAG,IAAI,CAAC,0BAA0B,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QAC9D,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC;QAClD,MAAM,MAAM,GAAG,QAAQ,CAAC,eAAe,CAAC,MAAM,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;QACjE,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,eAAe,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAEzD,MAAM,IAAI,CAAC,cAAc,CAAC,mBAAmB,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;QAC3D,MAAM,IAAI,CAAC,cAAc,CAAC,6BAA6B,CACnD,GAAG,EACH,MAAM,CAAC,IAAI,EACX,mCAA0B,EAC1B,IAAI,CACP,CAAC;QAEF,MAAM,CAAC,UAAU,GAAG,IAAI,CAAC;QACzB,MAAM,IAAI,CAAC,UAAU,CAAC,aAAa,CAAC,GAAG,EAAE,uBAAM,CAAC,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;QAEjF,eAAM,CAAC,OAAO,CAAC,mBAAmB,MAAM,CAAC,EAAE,cAAc,MAAM,CAAC,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC;QACtF,MAAM,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,2BAAW,CAAC,GAAG,EAAE,MAAM,EAAE,SAAS,EAAE,EAAE,CAAC,CAAC,CAAC;QAEzE,OAAO,EAAE,MAAM,EAAE,CAAC;IACtB,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,OAAO,CACT,GAAmB,EACnB,EAAM,EACN,SAAiC;QAEjC,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,gBAAgB,CAAC,GAAG,EAAE,uBAAM,EAAE,EAAE,EAAE,GAAG,CAAC,SAAS,EAAE;YAClF,mFAAmF;YACnF,SAAS,EAAE,IAAA,eAAM,EAAC,CAAC,GAAG,CAAC,SAAS,aAAT,SAAS,cAAT,SAAS,GAAI,EAAE,CAAC,EAAE,MAAM,EAAE,YAAY,CAAC,CAAC;YAC/D,KAAK,EAAE,EAAE,SAAS,EAAE,IAAA,gBAAM,GAAE,EAAE;SACjC,CAAC,CAAC;QACH,IAAI,CAAC,MAAM;YAAE,OAAO,IAAI,CAAC;QACzB,8FAA8F;QAC9F,iGAAiG;QACjG,+DAA+D;QAC/D,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,+BAA+B,CAClE,GAAG,EACH,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,CACzC,CAAC;QACF,IAAI,CAAC,OAAO;YAAE,OAAO,IAAI,CAAC;QAC1B,OAAO,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IAClD,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,OAAO,CACT,GAAmB,EACnB,OAAkC,EAClC,SAAiC;QAEjC,MAAM,EAAE,GAAG,IAAI,CAAC,gBAAgB,CAAC,KAAK,CAAC,uBAAM,EAAE,OAAO,EAAE;YACpD,GAAG;YACH,SAAS;YACT,SAAS,EAAE,GAAG,CAAC,SAAS;YACxB,KAAK,EAAE,EAAE,SAAS,EAAE,IAAA,gBAAM,GAAE,EAAE;SACjC,CAAC,CAAC;QACH,4FAA4F;QAC5F,sCAAsC;QACtC,MAAM,IAAI,CAAC,wBAAwB,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;QAC7C,MAAM,CAAC,IAAI,EAAE,UAAU,CAAC,GAAG,MAAM,EAAE,CAAC,eAAe,EAAE,CAAC;QACtD,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC;QACnE,OAAO,EAAE,KAAK,EAAE,UAAU,EAAE,CAAC;IACjC,CAAC;IAED;;;;;OAKG;IACK,KAAK,CAAC,wBAAwB,CAAC,GAAmB,EAAE,EAA8B;QACtF,0FAA0F;QAC1F,0EAA0E;QAC1E,IAAI,GAAG,CAAC,kBAAkB,CAAC,CAAC,4BAAU,CAAC,UAAU,CAAC,CAAC,EAAE,CAAC;YAClD,OAAO;QACX,CAAC;QACD,MAAM,cAAc,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,iBAAiB,CAAC,GAAG,CAAC,CAAC;QACrE,2FAA2F;QAC3F,6FAA6F;QAC7F,EAAE,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE;YAClB,MAAM,kBAAkB,GAAG,OAAO;iBAC7B,QAAQ,EAAE;iBACV,MAAM,CAAC,uBAAuB,CAAC;iBAC/B,IAAI,CAAC,uBAAM,EAAE,oBAAoB,CAAC;iBAClC,SAAS,CAAC,yBAAyB,EAAE,iBAAiB,CAAC;iBACvD,SAAS,CAAC,uBAAuB,EAAE,iBAAiB,CAAC,CAAC;YAC3D,sFAAsF;YACtF,IAAI,cAAc,CAAC,MAAM,EAAE,CAAC;gBACxB,kBAAkB,CAAC,KAAK,CAAC,gDAAgD,EAAE;oBACvE,cAAc;iBACjB,CAAC,CAAC;YACP,CAAC;YACD,MAAM,QAAQ,GAAG,GAAG,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC;YAC5E,OAAO,GAAG,QAAQ,WAAW,kBAAkB,CAAC,QAAQ,EAAE,EAAE,CAAC;QACjE,CAAC,CAAC,CAAC;IACP,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,iBAAiB,CACnB,GAAmB,EACnB,QAA4B,EAC5B,SAAiC;QAEjC,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,aAAa,CAAC,GAAG,EAAE,uBAAM,CAAC,CAAC,OAAO,CAAC;YACpE,SAAS,EAAE,CAAC,GAAG,CAAC,SAAS,aAAT,SAAS,cAAT,SAAS,GAAI,EAAE,CAAC,EAAE,UAAU,CAAC;YAC7C,KAAK,EAAE;gBACH,QAAQ;gBACR,SAAS,EAAE,IAAA,gBAAM,GAAE;gBACnB,QAAQ,EAAE,EAAE,EAAE,EAAE,GAAG,CAAC,SAAS,EAAE;aAClC;SACJ,CAAC,CAAC;QACH,IAAI,CAAC,MAAM;YAAE,OAAO,IAAI,CAAC;QACzB,OAAO,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IAClD,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,0BAA0B,CAAC,QAA4B;QACzD,OAAO,IAAI,CAAC,UAAU,CAAC,aAAa;aAC/B,aAAa,CAAC,uBAAM,CAAC;aACrB,MAAM,CAAC,EAAE,QAAQ,EAAE,EAAE,EAAE,UAAU,EAAE,IAAI,IAAI,EAAE,EAAE,CAAC,CAAC;IAC1D,CAAC;CACJ,CAAA;AAtZY,sCAAa;wBAAb,aAAa;IAFzB,IAAA,mBAAU,GAAE;IACZ,IAAA,mBAAU,GAAE;qCAGmB,gCAAc;QACf,sBAAa;QAChB,oCAAuB;QACP,0DAA0B;QAC5C,oBAAQ;QACA,qCAAgB;QACrB,0BAAW;QACR,gCAAc;QACX,sCAAiB;QACxB,sCAAiB;QAChB,0BAAW;GAZ3B,aAAa,CAsZzB"}

package/package.json

@@ -1,6 +1,6 @@
 {
     "name": "@vendure/core",
-    "version": "3.7.4-master-202610010222",
+    "version": "3.7.4-master-202610020217",
     "description": "A modern, headless ecommerce framework",
     "repository": {
         "type": "git",
@@ -51,7 +51,7 @@
         "@nestjs/platform-express": "^11.0.12",
         "@nestjs/typeorm": "^11.0.0",
         "@types/express": "^5.0.1",
-        "@vendure/common": "^3.7.4-master-202610010222",
+        "@vendure/common": "^3.7.4-master-202610020217",
         "bcrypt": "^6.0.0",
         "cookie-session": "^2.1.0",
         "cron-time-generator": "^2.0.3",