@venizia/ignis-kernel 0.2.0-0

package/dist/esm/base/auth/authenticate/common/errors.js

@@ -0,0 +1,78 @@
+import { ErrorScopes } from '@venizia/ignis-helpers/core';
+import { HTTP } from '@venizia/ignis-helpers/common';
+/** Codes a client branches on for a failed authentication. A throw site may override `message` for detail; the code and status come from here. */
+export const AuthenticationErrors = {
+    HEADER_MISSING: {
+        message: {
+            text: 'Missing authorization header',
+            code: 'core.authentication.header_missing',
+        },
+        statusCode: HTTP.ResultCodes.RS_4.Unauthorized,
+        category: ErrorScopes.AUTH,
+    },
+    SCHEME_INVALID: {
+        message: {
+            text: 'Unsupported authorization scheme',
+            code: 'core.authentication.scheme_invalid',
+        },
+        statusCode: HTTP.ResultCodes.RS_4.Unauthorized,
+        category: ErrorScopes.AUTH,
+    },
+    HEADER_MALFORMED: {
+        message: {
+            text: 'Malformed authorization header',
+            code: 'core.authentication.header_malformed',
+        },
+        statusCode: HTTP.ResultCodes.RS_4.Unauthorized,
+        category: ErrorScopes.AUTH,
+    },
+    TOKEN_MISSING: {
+        message: { text: 'Missing request token', code: 'core.authentication.token_missing' },
+        statusCode: HTTP.ResultCodes.RS_4.Unauthorized,
+        category: ErrorScopes.AUTH,
+    },
+    /** Covers expiry, a bad signature and a malformed token alike - the reason rides in `cause`, never in the code a client sees. */
+    TOKEN_INVALID: {
+        message: { text: 'Invalid or expired token', code: 'core.authentication.token_invalid' },
+        statusCode: HTTP.ResultCodes.RS_4.Unauthorized,
+        category: ErrorScopes.AUTH,
+    },
+    TOKEN_PAYLOAD_INVALID: {
+        message: {
+            text: 'Invalid token payload',
+            code: 'core.authentication.token_payload_invalid',
+        },
+        statusCode: HTTP.ResultCodes.RS_4.Unauthorized,
+        category: ErrorScopes.AUTH,
+    },
+    CREDENTIALS_MALFORMED: {
+        message: {
+            text: 'Malformed credentials',
+            code: 'core.authentication.credentials_malformed',
+        },
+        statusCode: HTTP.ResultCodes.RS_4.Unauthorized,
+        category: ErrorScopes.AUTH,
+    },
+    CREDENTIALS_INVALID: {
+        message: {
+            text: 'Invalid username or password',
+            code: 'core.authentication.credentials_invalid',
+        },
+        statusCode: HTTP.ResultCodes.RS_4.Unauthorized,
+        category: ErrorScopes.AUTH,
+    },
+    FAILED: {
+        message: { text: 'Authentication failed', code: 'core.authentication.failed' },
+        statusCode: HTTP.ResultCodes.RS_4.Unauthorized,
+        category: ErrorScopes.AUTH,
+    },
+    USER_UNRESOLVED: {
+        message: {
+            text: 'Failed to identify authenticated user',
+            code: 'core.authentication.user_unresolved',
+        },
+        statusCode: HTTP.ResultCodes.RS_4.Unauthorized,
+        category: ErrorScopes.AUTH,
+    },
+};
+//# sourceMappingURL=errors.js.map

package/dist/esm/base/auth/authenticate/common/errors.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.js","sourceRoot":"","sources":["../../../../../../src/base/auth/authenticate/common/errors.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,WAAW,EAAE,MAAM,6BAA6B,CAAC;AAC1D,OAAO,EAAE,IAAI,EAAE,MAAM,+BAA+B,CAAC;AAErD,kJAAkJ;AAClJ,MAAM,CAAC,MAAM,oBAAoB,GAAG;IAClC,cAAc,EAAE;QACd,OAAO,EAAE;YACP,IAAI,EAAE,8BAA8B;YACpC,IAAI,EAAE,oCAAoC;SAC3C;QACD,UAAU,EAAE,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,YAAY;QAC9C,QAAQ,EAAE,WAAW,CAAC,IAAI;KAC3B;IACD,cAAc,EAAE;QACd,OAAO,EAAE;YACP,IAAI,EAAE,kCAAkC;YACxC,IAAI,EAAE,oCAAoC;SAC3C;QACD,UAAU,EAAE,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,YAAY;QAC9C,QAAQ,EAAE,WAAW,CAAC,IAAI;KAC3B;IACD,gBAAgB,EAAE;QAChB,OAAO,EAAE;YACP,IAAI,EAAE,gCAAgC;YACtC,IAAI,EAAE,sCAAsC;SAC7C;QACD,UAAU,EAAE,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,YAAY;QAC9C,QAAQ,EAAE,WAAW,CAAC,IAAI;KAC3B;IACD,aAAa,EAAE;QACb,OAAO,EAAE,EAAE,IAAI,EAAE,uBAAuB,EAAE,IAAI,EAAE,mCAAmC,EAAE;QACrF,UAAU,EAAE,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,YAAY;QAC9C,QAAQ,EAAE,WAAW,CAAC,IAAI;KAC3B;IACD,iIAAiI;IACjI,aAAa,EAAE;QACb,OAAO,EAAE,EAAE,IAAI,EAAE,0BAA0B,EAAE,IAAI,EAAE,mCAAmC,EAAE;QACxF,UAAU,EAAE,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,YAAY;QAC9C,QAAQ,EAAE,WAAW,CAAC,IAAI;KAC3B;IACD,qBAAqB,EAAE;QACrB,OAAO,EAAE;YACP,IAAI,EAAE,uBAAuB;YAC7B,IAAI,EAAE,2CAA2C;SAClD;QACD,UAAU,EAAE,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,YAAY;QAC9C,QAAQ,EAAE,WAAW,CAAC,IAAI;KAC3B;IACD,qBAAqB,EAAE;QACrB,OAAO,EAAE;YACP,IAAI,EAAE,uBAAuB;YAC7B,IAAI,EAAE,2CAA2C;SAClD;QACD,UAAU,EAAE,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,YAAY;QAC9C,QAAQ,EAAE,WAAW,CAAC,IAAI;KAC3B;IACD,mBAAmB,EAAE;QACnB,OAAO,EAAE;YACP,IAAI,EAAE,8BAA8B;YACpC,IAAI,EAAE,yCAAyC;SAChD;QACD,UAAU,EAAE,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,YAAY;QAC9C,QAAQ,EAAE,WAAW,CAAC,IAAI;KAC3B;IACD,MAAM,EAAE;QACN,OAAO,EAAE,EAAE,IAAI,EAAE,uBAAuB,EAAE,IAAI,EAAE,4BAA4B,EAAE;QAC9E,UAAU,EAAE,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,YAAY;QAC9C,QAAQ,EAAE,WAAW,CAAC,IAAI;KAC3B;IACD,eAAe,EAAE;QACf,OAAO,EAAE;YACP,IAAI,EAAE,uCAAuC;YAC7C,IAAI,EAAE,qCAAqC;SAC5C;QACD,UAAU,EAAE,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,YAAY;QAC9C,QAAQ,EAAE,WAAW,CAAC,IAAI;KAC3B;CACkD,CAAC"}

package/dist/esm/base/auth/authenticate/common/index.d.ts

@@ -0,0 +1,6 @@
+export * from './errors.js';
+export * from './codecs.js';
+export * from './constants.js';
+export * from './keys.js';
+export * from './types.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/esm/base/auth/authenticate/common/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../../src/base/auth/authenticate/common/index.ts"],"names":[],"mappings":"AAAA,cAAc,UAAU,CAAC;AACzB,cAAc,UAAU,CAAC;AACzB,cAAc,aAAa,CAAC;AAC5B,cAAc,QAAQ,CAAC;AACvB,cAAc,SAAS,CAAC"}

package/dist/esm/base/auth/authenticate/common/index.js

@@ -0,0 +1,6 @@
+export * from './errors.js';
+export * from './codecs.js';
+export * from './constants.js';
+export * from './keys.js';
+export * from './types.js';
+//# sourceMappingURL=index.js.map

package/dist/esm/base/auth/authenticate/common/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../../../src/base/auth/authenticate/common/index.ts"],"names":[],"mappings":"AAAA,cAAc,UAAU,CAAC;AACzB,cAAc,UAAU,CAAC;AACzB,cAAc,aAAa,CAAC;AAC5B,cAAc,QAAQ,CAAC;AACvB,cAAc,SAAS,CAAC"}

package/dist/esm/base/auth/authenticate/common/keys.d.ts

@@ -0,0 +1,7 @@
+export declare class AuthenticateBindingKeys {
+    static readonly REST_OPTIONS = "@app/authenticate/rest-options";
+    static readonly JWT_OPTIONS = "@app/authenticate/jwt-options";
+    static readonly JWKS_OPTIONS = "@app/authenticate/jwks-options";
+    static readonly BASIC_OPTIONS = "@app/authenticate/basic-options";
+}
+//# sourceMappingURL=keys.d.ts.map

package/dist/esm/base/auth/authenticate/common/keys.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"keys.d.ts","sourceRoot":"","sources":["../../../../../../src/base/auth/authenticate/common/keys.ts"],"names":[],"mappings":"AAAA,qBAAa,uBAAuB;IAClC,MAAM,CAAC,QAAQ,CAAC,YAAY,oCAAoC;IAChE,MAAM,CAAC,QAAQ,CAAC,WAAW,mCAAmC;IAC9D,MAAM,CAAC,QAAQ,CAAC,YAAY,oCAAoC;IAChE,MAAM,CAAC,QAAQ,CAAC,aAAa,qCAAqC;CACnE"}

package/dist/esm/base/auth/authenticate/common/keys.js

@@ -0,0 +1,7 @@
+export class AuthenticateBindingKeys {
+    static { this.REST_OPTIONS = '@app/authenticate/rest-options'; }
+    static { this.JWT_OPTIONS = '@app/authenticate/jwt-options'; }
+    static { this.JWKS_OPTIONS = '@app/authenticate/jwks-options'; }
+    static { this.BASIC_OPTIONS = '@app/authenticate/basic-options'; }
+}
+//# sourceMappingURL=keys.js.map

package/dist/esm/base/auth/authenticate/common/keys.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"keys.js","sourceRoot":"","sources":["../../../../../../src/base/auth/authenticate/common/keys.ts"],"names":[],"mappings":"AAAA,MAAM,OAAO,uBAAuB;aAClB,iBAAY,GAAG,gCAAgC,CAAC;aAChD,gBAAW,GAAG,+BAA+B,CAAC;aAC9C,iBAAY,GAAG,gCAAgC,CAAC;aAChD,kBAAa,GAAG,iCAAiC,CAAC"}

package/dist/esm/base/auth/authenticate/common/types.d.ts

@@ -0,0 +1,166 @@
+import type { TContext } from '../../../../base/controllers/common/types.js';
+import type { IdType } from '../../../../base/models/common/types.js';
+import type { TAnyObjectSchema } from '../../../../utilities/schema.utility.js';
+import type { AnyObject, ValueOrPromise } from '@venizia/ignis-helpers/common';
+import type { AESAlgorithmType, IPayloadCipher } from '@venizia/ignis-helpers/core';
+import type { Env } from 'hono';
+import { type MiddlewareHandler } from 'hono';
+import type { JWTPayload } from 'jose';
+import type { TChangePasswordRequest, TSignInRequest, TSignUpRequest } from '../../models/requests/index.js';
+import type { JOSEStandards, JWKSModes } from './constants.js';
+import { type TAuthMode, type TJWKSKeyDriver, type TJWKSKeyFormat } from './constants.js';
+export type TDefineAuthControllerOpts = {
+    restPath?: string;
+    serviceKey: string;
+    requireAuthenticatedSignUp?: boolean;
+    payload?: {
+        signIn?: {
+            request: {
+                schema: TAnyObjectSchema;
+            };
+            response: {
+                schema: TAnyObjectSchema;
+            };
+        };
+        signUp?: {
+            request: {
+                schema: TAnyObjectSchema;
+            };
+            response: {
+                schema: TAnyObjectSchema;
+            };
+        };
+        changePassword?: {
+            request: {
+                schema?: TAnyObjectSchema;
+            };
+            response: {
+                schema: TAnyObjectSchema;
+            };
+        };
+        refreshToken?: {
+            response: {
+                schema: TAnyObjectSchema;
+            };
+        };
+        getUserInformation?: {
+            response: {
+                schema: TAnyObjectSchema;
+            };
+        };
+    };
+};
+export type TAuthenticationRestOptions = {} & ({
+    useAuthController?: false | undefined;
+} | {
+    useAuthController: true;
+    controllerOpts: TDefineAuthControllerOpts;
+});
+export interface IJWSTokenServiceOptions {
+    headerAlgorithm?: string;
+    jwtSecret: string;
+    getTokenExpiresFn: TGetTokenExpiresFn;
+    aesAlgorithm?: AESAlgorithmType;
+    applicationSecret?: string;
+    fieldCodecs?: IPayloadFieldCodec[];
+    /** Overrides the payload cipher - pass `LegacyAES` to keep reading tokens issued before the PBKDF2 envelope. */
+    cipher?: IPayloadCipher;
+}
+export type TJWKSAlgorithm = 'ES256' | 'RS256' | 'EdDSA';
+export interface IJWKSIssuerOptions {
+    mode: typeof JWKSModes.ISSUER;
+    algorithm: TJWKSAlgorithm;
+    rest?: {
+        path: string;
+    };
+    keys: {
+        driver: TJWKSKeyDriver;
+        format: TJWKSKeyFormat;
+        private: string;
+        public: string;
+    };
+    kid: string;
+    getTokenExpiresFn: TGetTokenExpiresFn;
+    aesAlgorithm?: AESAlgorithmType;
+    applicationSecret?: string;
+    fieldCodecs?: IPayloadFieldCodec[];
+    /** Overrides the payload cipher - pass `LegacyAES` to keep reading tokens issued before the PBKDF2 envelope. */
+    cipher?: IPayloadCipher;
+}
+export interface IJWKSVerifierOptions {
+    mode: typeof JWKSModes.VERIFIER;
+    jwksUrl: string;
+    cacheTtlMs?: number;
+    cooldownMs?: number;
+    aesAlgorithm?: AESAlgorithmType;
+    applicationSecret?: string;
+    fieldCodecs?: IPayloadFieldCodec[];
+    /** Overrides the payload cipher - pass `LegacyAES` to keep reading tokens issued before the PBKDF2 envelope. */
+    cipher?: IPayloadCipher;
+}
+export type TJWKSTokenServiceOptions = IJWKSIssuerOptions | IJWKSVerifierOptions;
+export type TJWTTokenServiceOptions = {
+    standard: typeof JOSEStandards.JWS;
+    options: IJWSTokenServiceOptions;
+} | {
+    standard: typeof JOSEStandards.JWKS;
+    options: TJWKSTokenServiceOptions;
+};
+export type TBasicTokenServiceOptions<E extends Env = Env> = {
+    /** Callback to verify basic auth credentials. Returns IAuthUser if valid, null otherwise. */
+    verifyCredentials: (opts: {
+        credentials: {
+            username: string;
+            password: string;
+        };
+        context: TContext<E, string>;
+    }) => Promise<IAuthUser | null>;
+};
+export interface IAuthenticateOptions {
+    restOptions?: TAuthenticationRestOptions;
+    jwtOptions?: TJWTTokenServiceOptions;
+    basicOptions?: TBasicTokenServiceOptions;
+}
+export interface IAuthUser {
+    userId: IdType;
+    [extra: string | symbol]: any;
+}
+export interface IJWTTokenPayload extends JWTPayload, IAuthUser {
+    userId: IdType;
+    roles: {
+        id: IdType;
+        identifier: string;
+        priority: number;
+    }[];
+    clientId?: string;
+    provider?: string;
+    email?: string;
+    name?: string;
+    [extra: string | symbol]: any;
+}
+export interface IPayloadFieldCodec<T = unknown> {
+    key: string;
+    serialize(opts: {
+        value: T;
+    }): string;
+    deserialize(opts: {
+        raw: string;
+    }): T;
+}
+export type TGetTokenExpiresFn = () => ValueOrPromise<number>;
+export interface IAuthenticationStrategy<E extends Env = Env> {
+    name: string;
+    authenticate(context: TContext<E, string>): Promise<IAuthUser>;
+}
+export type TAuthenticateFn<RouteEnv extends Env = Env> = (opts: {
+    strategies: string[];
+    mode?: TAuthMode;
+}) => MiddlewareHandler<RouteEnv>;
+export interface IAuthService<E extends Env = Env, SIRQ extends TSignInRequest = TSignInRequest, SIRS = AnyObject, SURQ extends TSignUpRequest = TSignUpRequest, SURS = AnyObject, CPRQ extends TChangePasswordRequest = TChangePasswordRequest, CPRS = AnyObject, UIRQ = AnyObject, UIRS = AnyObject, RTRS = AnyObject> {
+    signIn(context: TContext<E>, opts: SIRQ): Promise<SIRS>;
+    signUp(context: TContext<E>, opts: SURQ): Promise<SURS>;
+    changePassword(context: TContext<E>, opts: CPRQ): Promise<CPRS>;
+    getUserInformation?(context: TContext<E>, opts: UIRQ): Promise<UIRS>;
+    refreshToken?(context: TContext<E>): Promise<RTRS>;
+}
+//# sourceMappingURL=types.d.ts.map

package/dist/esm/base/auth/authenticate/common/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../../../../src/base/auth/authenticate/common/types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,iCAAiC,CAAC;AAChE,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,4BAA4B,CAAC;AACzD,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,4BAA4B,CAAC;AACnE,OAAO,KAAK,EAAE,SAAS,EAAE,cAAc,EAAE,MAAM,+BAA+B,CAAC;AAC/E,OAAO,KAAK,EAAE,gBAAgB,EAAE,cAAc,EAAE,MAAM,6BAA6B,CAAC;AACpF,OAAO,KAAK,EAAE,GAAG,EAAE,MAAM,MAAM,CAAC;AAChC,OAAO,EAAE,KAAK,iBAAiB,EAAE,MAAM,MAAM,CAAC;AAC9C,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,MAAM,CAAC;AACvC,OAAO,KAAK,EAAE,sBAAsB,EAAE,cAAc,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AACpG,OAAO,KAAK,EAAE,aAAa,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AAC5D,OAAO,EAAE,KAAK,SAAS,EAAE,KAAK,cAAc,EAAE,KAAK,cAAc,EAAE,MAAM,aAAa,CAAC;AAEvF,MAAM,MAAM,yBAAyB,GAAG;IACtC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,MAAM,CAAC;IACnB,0BAA0B,CAAC,EAAE,OAAO,CAAC;IACrC,OAAO,CAAC,EAAE;QACR,MAAM,CAAC,EAAE;YACP,OAAO,EAAE;gBAAE,MAAM,EAAE,gBAAgB,CAAA;aAAE,CAAC;YACtC,QAAQ,EAAE;gBAAE,MAAM,EAAE,gBAAgB,CAAA;aAAE,CAAC;SACxC,CAAC;QACF,MAAM,CAAC,EAAE;YACP,OAAO,EAAE;gBAAE,MAAM,EAAE,gBAAgB,CAAA;aAAE,CAAC;YACtC,QAAQ,EAAE;gBAAE,MAAM,EAAE,gBAAgB,CAAA;aAAE,CAAC;SACxC,CAAC;QACF,cAAc,CAAC,EAAE;YACf,OAAO,EAAE;gBAAE,MAAM,CAAC,EAAE,gBAAgB,CAAA;aAAE,CAAC;YACvC,QAAQ,EAAE;gBAAE,MAAM,EAAE,gBAAgB,CAAA;aAAE,CAAC;SACxC,CAAC;QACF,YAAY,CAAC,EAAE;YACb,QAAQ,EAAE;gBAAE,MAAM,EAAE,gBAAgB,CAAA;aAAE,CAAC;SACxC,CAAC;QACF,kBAAkB,CAAC,EAAE;YACnB,QAAQ,EAAE;gBAAE,MAAM,EAAE,gBAAgB,CAAA;aAAE,CAAC;SACxC,CAAC;KACH,CAAC;CACH,CAAC;AAEF,MAAM,MAAM,0BAA0B,GAAG,EAAE,GAAG,CAC1C;IAAE,iBAAiB,CAAC,EAAE,KAAK,GAAG,SAAS,CAAA;CAAE,GACzC;IACE,iBAAiB,EAAE,IAAI,CAAC;IACxB,cAAc,EAAE,yBAAyB,CAAC;CAC3C,CACJ,CAAC;AAEF,MAAM,WAAW,uBAAuB;IACtC,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,SAAS,EAAE,MAAM,CAAC;IAClB,iBAAiB,EAAE,kBAAkB,CAAC;IACtC,YAAY,CAAC,EAAE,gBAAgB,CAAC;IAChC,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,WAAW,CAAC,EAAE,kBAAkB,EAAE,CAAC;IACnC,gHAAgH;IAChH,MAAM,CAAC,EAAE,cAAc,CAAC;CACzB;AAED,MAAM,MAAM,cAAc,GAAG,OAAO,GAAG,OAAO,GAAG,OAAO,CAAC;AAEzD,MAAM,WAAW,kBAAkB;IACjC,IAAI,EAAE,OAAO,SAAS,CAAC,MAAM,CAAC;IAC9B,SAAS,EAAE,cAAc,CAAC;IAC1B,IAAI,CAAC,EAAE;QAAE,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC;IACxB,IAAI,EAAE;QACJ,MAAM,EAAE,cAAc,CAAC;QACvB,MAAM,EAAE,cAAc,CAAC;QACvB,OAAO,EAAE,MAAM,CAAC;QAChB,MAAM,EAAE,MAAM,CAAC;KAChB,CAAC;IACF,GAAG,EAAE,MAAM,CAAC;IACZ,iBAAiB,EAAE,kBAAkB,CAAC;IACtC,YAAY,CAAC,EAAE,gBAAgB,CAAC;IAChC,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,WAAW,CAAC,EAAE,kBAAkB,EAAE,CAAC;IACnC,gHAAgH;IAChH,MAAM,CAAC,EAAE,cAAc,CAAC;CACzB;AAED,MAAM,WAAW,oBAAoB;IACnC,IAAI,EAAE,OAAO,SAAS,CAAC,QAAQ,CAAC;IAChC,OAAO,EAAE,MAAM,CAAC;IAChB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,YAAY,CAAC,EAAE,gBAAgB,CAAC;IAChC,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,WAAW,CAAC,EAAE,kBAAkB,EAAE,CAAC;IACnC,gHAAgH;IAChH,MAAM,CAAC,EAAE,cAAc,CAAC;CACzB;AAED,MAAM,MAAM,wBAAwB,GAAG,kBAAkB,GAAG,oBAAoB,CAAC;AAEjF,MAAM,MAAM,uBAAuB,GAC/B;IAAE,QAAQ,EAAE,OAAO,aAAa,CAAC,GAAG,CAAC;IAAC,OAAO,EAAE,uBAAuB,CAAA;CAAE,GACxE;IAAE,QAAQ,EAAE,OAAO,aAAa,CAAC,IAAI,CAAC;IAAC,OAAO,EAAE,wBAAwB,CAAA;CAAE,CAAC;AAE/E,MAAM,MAAM,yBAAyB,CAAC,CAAC,SAAS,GAAG,GAAG,GAAG,IAAI;IAC3D,6FAA6F;IAC7F,iBAAiB,EAAE,CAAC,IAAI,EAAE;QACxB,WAAW,EAAE;YAAE,QAAQ,EAAE,MAAM,CAAC;YAAC,QAAQ,EAAE,MAAM,CAAA;SAAE,CAAC;QACpD,OAAO,EAAE,QAAQ,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;KAC9B,KAAK,OAAO,CAAC,SAAS,GAAG,IAAI,CAAC,CAAC;CACjC,CAAC;AACF,MAAM,WAAW,oBAAoB;IACnC,WAAW,CAAC,EAAE,0BAA0B,CAAC;IACzC,UAAU,CAAC,EAAE,uBAAuB,CAAC;IACrC,YAAY,CAAC,EAAE,yBAAyB,CAAC;CAC1C;AAED,MAAM,WAAW,SAAS;IACxB,MAAM,EAAE,MAAM,CAAC;IACf,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,GAAG,GAAG,CAAC;CAC/B;AAED,MAAM,WAAW,gBAAiB,SAAQ,UAAU,EAAE,SAAS;IAC7D,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,UAAU,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAA;KAAE,EAAE,CAAC;IAE9D,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,IAAI,CAAC,EAAE,MAAM,CAAC;IAEd,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,GAAG,GAAG,CAAC;CAC/B;AAED,MAAM,WAAW,kBAAkB,CAAC,CAAC,GAAG,OAAO;IAC7C,GAAG,EAAE,MAAM,CAAC;IACZ,SAAS,CAAC,IAAI,EAAE;QAAE,KAAK,EAAE,CAAC,CAAA;KAAE,GAAG,MAAM,CAAC;IACtC,WAAW,CAAC,IAAI,EAAE;QAAE,GAAG,EAAE,MAAM,CAAA;KAAE,GAAG,CAAC,CAAC;CACvC;AAED,MAAM,MAAM,kBAAkB,GAAG,MAAM,cAAc,CAAC,MAAM,CAAC,CAAC;AAE9D,MAAM,WAAW,uBAAuB,CAAC,CAAC,SAAS,GAAG,GAAG,GAAG;IAC1D,IAAI,EAAE,MAAM,CAAC;IACb,YAAY,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC,EAAE,MAAM,CAAC,GAAG,OAAO,CAAC,SAAS,CAAC,CAAC;CAChE;AAED,MAAM,MAAM,eAAe,CAAC,QAAQ,SAAS,GAAG,GAAG,GAAG,IAAI,CAAC,IAAI,EAAE;IAC/D,UAAU,EAAE,MAAM,EAAE,CAAC;IACrB,IAAI,CAAC,EAAE,SAAS,CAAC;CAClB,KAAK,iBAAiB,CAAC,QAAQ,CAAC,CAAC;AAElC,MAAM,WAAW,YAAY,CAC3B,CAAC,SAAS,GAAG,GAAG,GAAG,EAEnB,IAAI,SAAS,cAAc,GAAG,cAAc,EAC5C,IAAI,GAAG,SAAS,EAEhB,IAAI,SAAS,cAAc,GAAG,cAAc,EAC5C,IAAI,GAAG,SAAS,EAEhB,IAAI,SAAS,sBAAsB,GAAG,sBAAsB,EAC5D,IAAI,GAAG,SAAS,EAEhB,IAAI,GAAG,SAAS,EAChB,IAAI,GAAG,SAAS,EAEhB,IAAI,GAAG,SAAS;IAEhB,MAAM,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACxD,MAAM,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACxD,cAAc,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAChE,kBAAkB,CAAC,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACrE,YAAY,CAAC,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CACpD"}

package/dist/esm/base/auth/authenticate/common/types.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=types.js.map

package/dist/esm/base/auth/authenticate/common/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../../../../../src/base/auth/authenticate/common/types.ts"],"names":[],"mappings":""}

package/dist/esm/base/auth/authenticate/index.d.ts

@@ -0,0 +1,5 @@
+export * from './common/index.js';
+export * from './middlewares/index.js';
+export * from './providers/index.js';
+export * from './strategies/index.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/esm/base/auth/authenticate/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../src/base/auth/authenticate/index.ts"],"names":[],"mappings":"AAAA,cAAc,UAAU,CAAC;AACzB,cAAc,eAAe,CAAC;AAC9B,cAAc,aAAa,CAAC;AAC5B,cAAc,cAAc,CAAC"}

package/dist/esm/base/auth/authenticate/index.js

@@ -0,0 +1,5 @@
+export * from './common/index.js';
+export * from './middlewares/index.js';
+export * from './providers/index.js';
+export * from './strategies/index.js';
+//# sourceMappingURL=index.js.map

package/dist/esm/base/auth/authenticate/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../../src/base/auth/authenticate/index.ts"],"names":[],"mappings":"AAAA,cAAc,UAAU,CAAC;AACzB,cAAc,eAAe,CAAC;AAC9B,cAAc,aAAa,CAAC;AAC5B,cAAc,cAAc,CAAC"}

package/dist/esm/base/auth/authenticate/middlewares/authenticate.middleware.d.ts

@@ -0,0 +1,7 @@
+import type { Env } from 'hono';
+import type { TAuthMode } from '../common/index.js';
+export declare const authenticate: (opts: {
+    strategies: string[];
+    mode?: TAuthMode;
+}) => import("hono").MiddlewareHandler<Env>;
+//# sourceMappingURL=authenticate.middleware.d.ts.map

package/dist/esm/base/auth/authenticate/middlewares/authenticate.middleware.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"authenticate.middleware.d.ts","sourceRoot":"","sources":["../../../../../../src/base/auth/authenticate/middlewares/authenticate.middleware.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,GAAG,EAAE,MAAM,MAAM,CAAC;AAChC,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AAM3C,eAAO,MAAM,YAAY,GAAI,MAAM;IAAE,UAAU,EAAE,MAAM,EAAE,CAAC;IAAC,IAAI,CAAC,EAAE,SAAS,CAAA;CAAE,0CAE5E,CAAC"}

package/dist/esm/base/auth/authenticate/middlewares/authenticate.middleware.js

@@ -0,0 +1,7 @@
+import { AuthenticationProvider } from '../providers/index.js';
+const authenticationProvider = new AuthenticationProvider();
+const authenticateFn = authenticationProvider.value();
+export const authenticate = (opts) => {
+    return authenticateFn(opts);
+};
+//# sourceMappingURL=authenticate.middleware.js.map

package/dist/esm/base/auth/authenticate/middlewares/authenticate.middleware.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"authenticate.middleware.js","sourceRoot":"","sources":["../../../../../../src/base/auth/authenticate/middlewares/authenticate.middleware.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,sBAAsB,EAAE,MAAM,cAAc,CAAC;AAEtD,MAAM,sBAAsB,GAAG,IAAI,sBAAsB,EAAO,CAAC;AACjE,MAAM,cAAc,GAAG,sBAAsB,CAAC,KAAK,EAAE,CAAC;AAEtD,MAAM,CAAC,MAAM,YAAY,GAAG,CAAC,IAAgD,EAAE,EAAE;IAC/E,OAAO,cAAc,CAAC,IAAI,CAAC,CAAC;AAC9B,CAAC,CAAC"}

package/dist/esm/base/auth/authenticate/middlewares/index.d.ts

@@ -0,0 +1,2 @@
+export * from './authenticate.middleware.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/esm/base/auth/authenticate/middlewares/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../../src/base/auth/authenticate/middlewares/index.ts"],"names":[],"mappings":"AAAA,cAAc,2BAA2B,CAAC"}

package/dist/esm/base/auth/authenticate/middlewares/index.js

@@ -0,0 +1,2 @@
+export * from './authenticate.middleware.js';
+//# sourceMappingURL=index.js.map

package/dist/esm/base/auth/authenticate/middlewares/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../../../src/base/auth/authenticate/middlewares/index.ts"],"names":[],"mappings":"AAAA,cAAc,2BAA2B,CAAC"}

package/dist/esm/base/auth/authenticate/providers/authentication.provider.d.ts

@@ -0,0 +1,13 @@
+import { BaseHelper } from '@venizia/ignis-helpers/core';
+import type { IProvider } from '@venizia/ignis-inversion';
+import type { Env } from 'hono';
+import type { TAuthenticateFn } from '../common/index.js';
+export declare class AuthenticationProvider<RouteEnv extends Env = Env> extends BaseHelper implements IProvider<TAuthenticateFn<RouteEnv>> {
+    constructor();
+    value(): TAuthenticateFn<RouteEnv>;
+    private createAuthenticateMiddleware;
+    private executeAnyMode;
+    private executeAllMode;
+    private setCurrentUser;
+}
+//# sourceMappingURL=authentication.provider.d.ts.map

package/dist/esm/base/auth/authenticate/providers/authentication.provider.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"authentication.provider.d.ts","sourceRoot":"","sources":["../../../../../../src/base/auth/authenticate/providers/authentication.provider.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,UAAU,EAAY,MAAM,6BAA6B,CAAC;AAEnE,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,0BAA0B,CAAC;AAC1D,OAAO,KAAK,EAAE,GAAG,EAAE,MAAM,MAAM,CAAC;AAEhC,OAAO,KAAK,EAAa,eAAe,EAAa,MAAM,WAAW,CAAC;AAIvE,qBAAa,sBAAsB,CAAC,QAAQ,SAAS,GAAG,GAAG,GAAG,CAC5D,SAAQ,UACR,YAAW,SAAS,CAAC,eAAe,CAAC,QAAQ,CAAC,CAAC;;IAM/C,KAAK,IAAI,eAAe,CAAC,QAAQ,CAAC;IAMlC,OAAO,CAAC,4BAA4B;YA+CtB,cAAc;YAsCd,cAAc;IAkC5B,OAAO,CAAC,cAAc;CAQvB"}

package/dist/esm/base/auth/authenticate/providers/authentication.provider.js

@@ -0,0 +1,115 @@
+import { BaseHelper, getError } from '@venizia/ignis-helpers/core';
+import { HTTP } from '@venizia/ignis-helpers/common';
+import { createMiddleware } from 'hono/factory';
+import { Authentication, AuthenticationErrors, AuthenticationModes } from '../common/index.js';
+import { AuthenticationStrategyRegistry } from '../strategies/strategy-registry.js';
+export class AuthenticationProvider extends BaseHelper {
+    constructor() {
+        super({ scope: AuthenticationProvider.name });
+    }
+    value() {
+        return opts => {
+            return this.createAuthenticateMiddleware(opts);
+        };
+    }
+    createAuthenticateMiddleware(opts) {
+        const { strategies, mode = AuthenticationModes.ANY } = opts;
+        const registry = AuthenticationStrategyRegistry.getInstance();
+        return createMiddleware(async (context, next) => {
+            const isSkipAuthenticate = context.get(Authentication.SKIP_AUTHENTICATION);
+            if (isSkipAuthenticate) {
+                this.logger
+                    .for(this.createAuthenticateMiddleware.name)
+                    .debug('SKIP checking authentication | path: %s', context.req.path);
+                return next();
+            }
+            const isAuthenticated = context.get(Authentication.CURRENT_USER);
+            if (isAuthenticated) {
+                return next();
+            }
+            switch (mode) {
+                case AuthenticationModes.ANY: {
+                    await this.executeAnyMode({
+                        context: context,
+                        strategies,
+                        registry,
+                        next,
+                    });
+                    return;
+                }
+                case AuthenticationModes.ALL: {
+                    await this.executeAllMode({
+                        context: context,
+                        strategies,
+                        registry,
+                        next,
+                    });
+                    return;
+                }
+                default: {
+                    throw getError({
+                        statusCode: HTTP.ResultCodes.RS_5.InternalServerError,
+                        message: `Invalid authentication mode | mode: ${mode}`,
+                    });
+                }
+            }
+        });
+    }
+    async executeAnyMode(opts) {
+        const { context, strategies, registry, next } = opts;
+        // The first strategy's failure is the primary one - kept so the 401 carries WHY, instead of only which strategies were tried.
+        let primaryFailure;
+        for (const strategyName of strategies) {
+            try {
+                const strategy = registry.resolveStrategy({ name: strategyName });
+                const user = await strategy.authenticate(context);
+                this.setCurrentUser({ context, user });
+                break;
+            }
+            catch (error) {
+                primaryFailure ??= error;
+                this.logger
+                    .for(this.executeAnyMode.name)
+                    .debug('Strategy %s failed, trying next... | Error: %s', strategyName, error);
+            }
+        }
+        const currentUser = context.get(Authentication.CURRENT_USER);
+        if (!currentUser) {
+            throw getError({
+                error: AuthenticationErrors.FAILED,
+                message: `Authentication failed. Tried strategies: ${strategies.join(', ')}`,
+                logLevel: 'warn',
+                cause: primaryFailure,
+            });
+        }
+        await next();
+    }
+    async executeAllMode(opts) {
+        const { context, strategies, registry, next } = opts;
+        // Use the first strategy's user as the identity source - all must succeed but first wins for identity
+        let authUser = null;
+        for (const strategyName of strategies) {
+            const strategy = registry.resolveStrategy({ name: strategyName });
+            const user = await strategy.authenticate(context);
+            authUser ??= user;
+        }
+        if (authUser?.userId) {
+            this.setCurrentUser({ context, user: authUser });
+        }
+        else {
+            this.logger
+                .for(this.executeAllMode.name)
+                .error('Failed to identify authenticated user | user: %j | userId: %s', authUser, authUser?.userId);
+            throw getError({ error: AuthenticationErrors.USER_UNRESOLVED });
+        }
+        return next();
+    }
+    setCurrentUser(opts) {
+        const { context, user } = opts;
+        context.set(Authentication.CURRENT_USER, user);
+        if (user?.userId) {
+            context.set(Authentication.AUDIT_USER_ID, user.userId);
+        }
+    }
+}
+//# sourceMappingURL=authentication.provider.js.map

package/dist/esm/base/auth/authenticate/providers/authentication.provider.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"authentication.provider.js","sourceRoot":"","sources":["../../../../../../src/base/auth/authenticate/providers/authentication.provider.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,6BAA6B,CAAC;AACnE,OAAO,EAAE,IAAI,EAAE,MAAM,+BAA+B,CAAC;AAGrD,OAAO,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAC;AAEhD,OAAO,EAAE,cAAc,EAAE,oBAAoB,EAAE,mBAAmB,EAAE,MAAM,WAAW,CAAC;AACtF,OAAO,EAAE,8BAA8B,EAAE,MAAM,iCAAiC,CAAC;AAEjF,MAAM,OAAO,sBACX,SAAQ,UAAU;IAGlB;QACE,KAAK,CAAC,EAAE,KAAK,EAAE,sBAAsB,CAAC,IAAI,EAAE,CAAC,CAAC;IAChD,CAAC;IAED,KAAK;QACH,OAAO,IAAI,CAAC,EAAE;YACZ,OAAO,IAAI,CAAC,4BAA4B,CAAC,IAAI,CAAC,CAAC;QACjD,CAAC,CAAC;IACJ,CAAC;IAEO,4BAA4B,CAAC,IAAgD;QACnF,MAAM,EAAE,UAAU,EAAE,IAAI,GAAG,mBAAmB,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC;QAC5D,MAAM,QAAQ,GAAG,8BAA8B,CAAC,WAAW,EAAE,CAAC;QAE9D,OAAO,gBAAgB,CAAC,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE;YAC9C,MAAM,kBAAkB,GAAG,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,mBAAmB,CAAC,CAAC;YAC3E,IAAI,kBAAkB,EAAE,CAAC;gBACvB,IAAI,CAAC,MAAM;qBACR,GAAG,CAAC,IAAI,CAAC,4BAA4B,CAAC,IAAI,CAAC;qBAC3C,KAAK,CAAC,yCAAyC,EAAE,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;gBACtE,OAAO,IAAI,EAAE,CAAC;YAChB,CAAC;YAED,MAAM,eAAe,GAAG,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,YAAY,CAAC,CAAC;YACjE,IAAI,eAAe,EAAE,CAAC;gBACpB,OAAO,IAAI,EAAE,CAAC;YAChB,CAAC;YAED,QAAQ,IAAI,EAAE,CAAC;gBACb,KAAK,mBAAmB,CAAC,GAAG,CAAC,CAAC,CAAC;oBAC7B,MAAM,IAAI,CAAC,cAAc,CAAC;wBACxB,OAAO,EAAE,OAAmB;wBAC5B,UAAU;wBACV,QAAQ;wBACR,IAAI;qBACL,CAAC,CAAC;oBACH,OAAO;gBACT,CAAC;gBACD,KAAK,mBAAmB,CAAC,GAAG,CAAC,CAAC,CAAC;oBAC7B,MAAM,IAAI,CAAC,cAAc,CAAC;wBACxB,OAAO,EAAE,OAAmB;wBAC5B,UAAU;wBACV,QAAQ;wBACR,IAAI;qBACL,CAAC,CAAC;oBACH,OAAO;gBACT,CAAC;gBACD,OAAO,CAAC,CAAC,CAAC;oBACR,MAAM,QAAQ,CAAC;wBACb,UAAU,EAAE,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,mBAAmB;wBACrD,OAAO,EAAE,uCAAuC,IAAI,EAAE;qBACvD,CAAC,CAAC;gBACL,CAAC;YACH,CAAC;QACH,CAAC,CAAC,CAAC;IACL,CAAC;IAEO,KAAK,CAAC,cAAc,CAAC,IAK5B;QACC,MAAM,EAAE,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,IAAI,EAAE,GAAG,IAAI,CAAC;QAErD,8HAA8H;QAC9H,IAAI,cAAuB,CAAC;QAE5B,KAAK,MAAM,YAAY,IAAI,UAAU,EAAE,CAAC;YACtC,IAAI,CAAC;gBACH,MAAM,QAAQ,GAAG,QAAQ,CAAC,eAAe,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,CAAC,CAAC;gBAClE,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC;gBAClD,IAAI,CAAC,cAAc,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;gBACvC,MAAM;YACR,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,cAAc,KAAK,KAAK,CAAC;gBACzB,IAAI,CAAC,MAAM;qBACR,GAAG,CAAC,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC;qBAC7B,KAAK,CAAC,gDAAgD,EAAE,YAAY,EAAE,KAAK,CAAC,CAAC;YAClF,CAAC;QACH,CAAC;QAED,MAAM,WAAW,GAAG,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,YAAY,CAAC,CAAC;QAC7D,IAAI,CAAC,WAAW,EAAE,CAAC;YACjB,MAAM,QAAQ,CAAC;gBACb,KAAK,EAAE,oBAAoB,CAAC,MAAM;gBAClC,OAAO,EAAE,4CAA4C,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;gBAC5E,QAAQ,EAAE,MAAM;gBAChB,KAAK,EAAE,cAAc;aACtB,CAAC,CAAC;QACL,CAAC;QAED,MAAM,IAAI,EAAE,CAAC;IACf,CAAC;IAEO,KAAK,CAAC,cAAc,CAAC,IAK5B;QACC,MAAM,EAAE,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,IAAI,EAAE,GAAG,IAAI,CAAC;QAErD,sGAAsG;QACtG,IAAI,QAAQ,GAAqB,IAAI,CAAC;QAEtC,KAAK,MAAM,YAAY,IAAI,UAAU,EAAE,CAAC;YACtC,MAAM,QAAQ,GAAG,QAAQ,CAAC,eAAe,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,CAAC,CAAC;YAClE,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC;YAElD,QAAQ,KAAK,IAAI,CAAC;QACpB,CAAC;QAED,IAAI,QAAQ,EAAE,MAAM,EAAE,CAAC;YACrB,IAAI,CAAC,cAAc,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC;QACnD,CAAC;aAAM,CAAC;YACN,IAAI,CAAC,MAAM;iBACR,GAAG,CAAC,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC;iBAC7B,KAAK,CACJ,+DAA+D,EAC/D,QAAQ,EACR,QAAQ,EAAE,MAAM,CACjB,CAAC;YACJ,MAAM,QAAQ,CAAC,EAAE,KAAK,EAAE,oBAAoB,CAAC,eAAe,EAAE,CAAC,CAAC;QAClE,CAAC;QAED,OAAO,IAAI,EAAE,CAAC;IAChB,CAAC;IAEO,cAAc,CAAC,IAA4C;QACjE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,GAAG,IAAI,CAAC;QAC/B,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,YAAY,EAAE,IAAI,CAAC,CAAC;QAE/C,IAAI,IAAI,EAAE,MAAM,EAAE,CAAC;YACjB,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,aAAa,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;QACzD,CAAC;IACH,CAAC;CACF"}

package/dist/esm/base/auth/authenticate/providers/index.d.ts

@@ -0,0 +1,2 @@
+export * from './authentication.provider.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/esm/base/auth/authenticate/providers/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../../src/base/auth/authenticate/providers/index.ts"],"names":[],"mappings":"AAAA,cAAc,2BAA2B,CAAC"}

package/dist/esm/base/auth/authenticate/providers/index.js

@@ -0,0 +1,2 @@
+export * from './authentication.provider.js';
+//# sourceMappingURL=index.js.map

package/dist/esm/base/auth/authenticate/providers/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../../../src/base/auth/authenticate/providers/index.ts"],"names":[],"mappings":"AAAA,cAAc,2BAA2B,CAAC"}

package/dist/esm/base/auth/authenticate/strategies/index.d.ts

@@ -0,0 +1,2 @@
+export * from './strategy-registry.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/esm/base/auth/authenticate/strategies/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../../src/base/auth/authenticate/strategies/index.ts"],"names":[],"mappings":"AAAA,cAAc,qBAAqB,CAAC"}

package/dist/esm/base/auth/authenticate/strategies/index.js

@@ -0,0 +1,2 @@
+export * from './strategy-registry.js';
+//# sourceMappingURL=index.js.map

package/dist/esm/base/auth/authenticate/strategies/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../../../src/base/auth/authenticate/strategies/index.ts"],"names":[],"mappings":"AAAA,cAAc,qBAAqB,CAAC"}

package/dist/esm/base/auth/authenticate/strategies/strategy-registry.d.ts

@@ -0,0 +1,21 @@
+import type { Container } from '../../../../helpers/inversion/container.js';
+import type { TClass } from '@venizia/ignis-helpers/common';
+import { AbstractAuthRegistry } from '../../base/index.js';
+import type { IAuthenticationStrategy } from '../common/index.js';
+export declare class AuthenticationStrategyRegistry extends AbstractAuthRegistry<IAuthenticationStrategy> {
+    static readonly SINGLETON_REAL_KEY = "authentication-strategy-registry";
+    constructor();
+    static getInstance(): AuthenticationStrategyRegistry;
+    protected getBindingPrefix(): string;
+    register(opts: {
+        container: Container;
+        strategies: {
+            strategy: TClass<IAuthenticationStrategy>;
+            name: string;
+        }[];
+    }): this;
+    resolveStrategy(opts: {
+        name: string;
+    }): IAuthenticationStrategy;
+}
+//# sourceMappingURL=strategy-registry.d.ts.map

package/dist/esm/base/auth/authenticate/strategies/strategy-registry.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"strategy-registry.d.ts","sourceRoot":"","sources":["../../../../../../src/base/auth/authenticate/strategies/strategy-registry.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,+BAA+B,CAAC;AAC/D,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,+BAA+B,CAAC;AAC5D,OAAO,EAAE,oBAAoB,EAAE,MAAM,YAAY,CAAC;AAClD,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,WAAW,CAAC;AAGzD,qBAAa,8BAA+B,SAAQ,oBAAoB,CAAC,uBAAuB,CAAC;IAC/F,MAAM,CAAC,QAAQ,CAAC,kBAAkB,sCAAsC;;IAMxE,MAAM,CAAC,WAAW;IAOlB,SAAS,CAAC,gBAAgB,IAAI,MAAM;IAIpC,QAAQ,CAAC,IAAI,EAAE;QACb,SAAS,EAAE,SAAS,CAAC;QACrB,UAAU,EAAE;YAAE,QAAQ,EAAE,MAAM,CAAC,uBAAuB,CAAC,CAAC;YAAC,IAAI,EAAE,MAAM,CAAA;SAAE,EAAE,CAAC;KAC3E;IAUD,eAAe,CAAC,IAAI,EAAE;QAAE,IAAI,EAAE,MAAM,CAAA;KAAE,GAAG,uBAAuB;CAGjE"}

package/dist/esm/base/auth/authenticate/strategies/strategy-registry.js

@@ -0,0 +1,29 @@
+import { SingletonRealm } from '../../../../helpers/singleton-realm.js';
+import { AbstractAuthRegistry } from '../../base/index.js';
+import { Authentication } from '../common/index.js';
+export class AuthenticationStrategyRegistry extends AbstractAuthRegistry {
+    static { this.SINGLETON_REAL_KEY = 'authentication-strategy-registry'; }
+    constructor() {
+        super({ scope: AuthenticationStrategyRegistry.name });
+    }
+    static getInstance() {
+        return SingletonRealm.resolve({
+            key: AuthenticationStrategyRegistry.SINGLETON_REAL_KEY,
+            create: () => new AuthenticationStrategyRegistry(),
+        });
+    }
+    getBindingPrefix() {
+        return Authentication.AUTHENTICATION_STRATEGY;
+    }
+    register(opts) {
+        const { container, strategies } = opts;
+        for (const { strategy, name } of strategies) {
+            this.registerDescriptor({ container, target: strategy, name });
+        }
+        return this;
+    }
+    resolveStrategy(opts) {
+        return this.resolveDescriptor(opts);
+    }
+}
+//# sourceMappingURL=strategy-registry.js.map

package/dist/esm/base/auth/authenticate/strategies/strategy-registry.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"strategy-registry.js","sourceRoot":"","sources":["../../../../../../src/base/auth/authenticate/strategies/strategy-registry.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,MAAM,2BAA2B,CAAC;AAG3D,OAAO,EAAE,oBAAoB,EAAE,MAAM,YAAY,CAAC;AAElD,OAAO,EAAE,cAAc,EAAE,MAAM,WAAW,CAAC;AAE3C,MAAM,OAAO,8BAA+B,SAAQ,oBAA6C;aAC/E,uBAAkB,GAAG,kCAAkC,CAAC;IAExE;QACE,KAAK,CAAC,EAAE,KAAK,EAAE,8BAA8B,CAAC,IAAI,EAAE,CAAC,CAAC;IACxD,CAAC;IAED,MAAM,CAAC,WAAW;QAChB,OAAO,cAAc,CAAC,OAAO,CAAC;YAC5B,GAAG,EAAE,8BAA8B,CAAC,kBAAkB;YACtD,MAAM,EAAE,GAAG,EAAE,CAAC,IAAI,8BAA8B,EAAE;SACnD,CAAC,CAAC;IACL,CAAC;IAES,gBAAgB;QACxB,OAAO,cAAc,CAAC,uBAAuB,CAAC;IAChD,CAAC;IAED,QAAQ,CAAC,IAGR;QACC,MAAM,EAAE,SAAS,EAAE,UAAU,EAAE,GAAG,IAAI,CAAC;QAEvC,KAAK,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,IAAI,UAAU,EAAE,CAAC;YAC5C,IAAI,CAAC,kBAAkB,CAAC,EAAE,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;QACjE,CAAC;QAED,OAAO,IAAI,CAAC;IACd,CAAC;IAED,eAAe,CAAC,IAAsB;QACpC,OAAO,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC;IACtC,CAAC"}