@venizia/ignis-kernel 0.2.0-0

package/dist/cjs/base/auth/authenticate/common/types.d.ts

@@ -0,0 +1,166 @@
+import type { TContext } from '../../../../base/controllers/common/types';
+import type { IdType } from '../../../../base/models/common/types';
+import type { TAnyObjectSchema } from '../../../../utilities/schema.utility';
+import type { AnyObject, ValueOrPromise } from '@venizia/ignis-helpers/common';
+import type { AESAlgorithmType, IPayloadCipher } from '@venizia/ignis-helpers/core';
+import type { Env } from 'hono';
+import { type MiddlewareHandler } from 'hono';
+import type { JWTPayload } from 'jose';
+import type { TChangePasswordRequest, TSignInRequest, TSignUpRequest } from '../../models/requests';
+import type { JOSEStandards, JWKSModes } from './constants';
+import { type TAuthMode, type TJWKSKeyDriver, type TJWKSKeyFormat } from './constants';
+export type TDefineAuthControllerOpts = {
+    restPath?: string;
+    serviceKey: string;
+    requireAuthenticatedSignUp?: boolean;
+    payload?: {
+        signIn?: {
+            request: {
+                schema: TAnyObjectSchema;
+            };
+            response: {
+                schema: TAnyObjectSchema;
+            };
+        };
+        signUp?: {
+            request: {
+                schema: TAnyObjectSchema;
+            };
+            response: {
+                schema: TAnyObjectSchema;
+            };
+        };
+        changePassword?: {
+            request: {
+                schema?: TAnyObjectSchema;
+            };
+            response: {
+                schema: TAnyObjectSchema;
+            };
+        };
+        refreshToken?: {
+            response: {
+                schema: TAnyObjectSchema;
+            };
+        };
+        getUserInformation?: {
+            response: {
+                schema: TAnyObjectSchema;
+            };
+        };
+    };
+};
+export type TAuthenticationRestOptions = {} & ({
+    useAuthController?: false | undefined;
+} | {
+    useAuthController: true;
+    controllerOpts: TDefineAuthControllerOpts;
+});
+export interface IJWSTokenServiceOptions {
+    headerAlgorithm?: string;
+    jwtSecret: string;
+    getTokenExpiresFn: TGetTokenExpiresFn;
+    aesAlgorithm?: AESAlgorithmType;
+    applicationSecret?: string;
+    fieldCodecs?: IPayloadFieldCodec[];
+    /** Overrides the payload cipher - pass `LegacyAES` to keep reading tokens issued before the PBKDF2 envelope. */
+    cipher?: IPayloadCipher;
+}
+export type TJWKSAlgorithm = 'ES256' | 'RS256' | 'EdDSA';
+export interface IJWKSIssuerOptions {
+    mode: typeof JWKSModes.ISSUER;
+    algorithm: TJWKSAlgorithm;
+    rest?: {
+        path: string;
+    };
+    keys: {
+        driver: TJWKSKeyDriver;
+        format: TJWKSKeyFormat;
+        private: string;
+        public: string;
+    };
+    kid: string;
+    getTokenExpiresFn: TGetTokenExpiresFn;
+    aesAlgorithm?: AESAlgorithmType;
+    applicationSecret?: string;
+    fieldCodecs?: IPayloadFieldCodec[];
+    /** Overrides the payload cipher - pass `LegacyAES` to keep reading tokens issued before the PBKDF2 envelope. */
+    cipher?: IPayloadCipher;
+}
+export interface IJWKSVerifierOptions {
+    mode: typeof JWKSModes.VERIFIER;
+    jwksUrl: string;
+    cacheTtlMs?: number;
+    cooldownMs?: number;
+    aesAlgorithm?: AESAlgorithmType;
+    applicationSecret?: string;
+    fieldCodecs?: IPayloadFieldCodec[];
+    /** Overrides the payload cipher - pass `LegacyAES` to keep reading tokens issued before the PBKDF2 envelope. */
+    cipher?: IPayloadCipher;
+}
+export type TJWKSTokenServiceOptions = IJWKSIssuerOptions | IJWKSVerifierOptions;
+export type TJWTTokenServiceOptions = {
+    standard: typeof JOSEStandards.JWS;
+    options: IJWSTokenServiceOptions;
+} | {
+    standard: typeof JOSEStandards.JWKS;
+    options: TJWKSTokenServiceOptions;
+};
+export type TBasicTokenServiceOptions<E extends Env = Env> = {
+    /** Callback to verify basic auth credentials. Returns IAuthUser if valid, null otherwise. */
+    verifyCredentials: (opts: {
+        credentials: {
+            username: string;
+            password: string;
+        };
+        context: TContext<E, string>;
+    }) => Promise<IAuthUser | null>;
+};
+export interface IAuthenticateOptions {
+    restOptions?: TAuthenticationRestOptions;
+    jwtOptions?: TJWTTokenServiceOptions;
+    basicOptions?: TBasicTokenServiceOptions;
+}
+export interface IAuthUser {
+    userId: IdType;
+    [extra: string | symbol]: any;
+}
+export interface IJWTTokenPayload extends JWTPayload, IAuthUser {
+    userId: IdType;
+    roles: {
+        id: IdType;
+        identifier: string;
+        priority: number;
+    }[];
+    clientId?: string;
+    provider?: string;
+    email?: string;
+    name?: string;
+    [extra: string | symbol]: any;
+}
+export interface IPayloadFieldCodec<T = unknown> {
+    key: string;
+    serialize(opts: {
+        value: T;
+    }): string;
+    deserialize(opts: {
+        raw: string;
+    }): T;
+}
+export type TGetTokenExpiresFn = () => ValueOrPromise<number>;
+export interface IAuthenticationStrategy<E extends Env = Env> {
+    name: string;
+    authenticate(context: TContext<E, string>): Promise<IAuthUser>;
+}
+export type TAuthenticateFn<RouteEnv extends Env = Env> = (opts: {
+    strategies: string[];
+    mode?: TAuthMode;
+}) => MiddlewareHandler<RouteEnv>;
+export interface IAuthService<E extends Env = Env, SIRQ extends TSignInRequest = TSignInRequest, SIRS = AnyObject, SURQ extends TSignUpRequest = TSignUpRequest, SURS = AnyObject, CPRQ extends TChangePasswordRequest = TChangePasswordRequest, CPRS = AnyObject, UIRQ = AnyObject, UIRS = AnyObject, RTRS = AnyObject> {
+    signIn(context: TContext<E>, opts: SIRQ): Promise<SIRS>;
+    signUp(context: TContext<E>, opts: SURQ): Promise<SURS>;
+    changePassword(context: TContext<E>, opts: CPRQ): Promise<CPRS>;
+    getUserInformation?(context: TContext<E>, opts: UIRQ): Promise<UIRS>;
+    refreshToken?(context: TContext<E>): Promise<RTRS>;
+}
+//# sourceMappingURL=types.d.ts.map

package/dist/cjs/base/auth/authenticate/common/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../../../../src/base/auth/authenticate/common/types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,iCAAiC,CAAC;AAChE,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,4BAA4B,CAAC;AACzD,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,4BAA4B,CAAC;AACnE,OAAO,KAAK,EAAE,SAAS,EAAE,cAAc,EAAE,MAAM,+BAA+B,CAAC;AAC/E,OAAO,KAAK,EAAE,gBAAgB,EAAE,cAAc,EAAE,MAAM,6BAA6B,CAAC;AACpF,OAAO,KAAK,EAAE,GAAG,EAAE,MAAM,MAAM,CAAC;AAChC,OAAO,EAAE,KAAK,iBAAiB,EAAE,MAAM,MAAM,CAAC;AAC9C,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,MAAM,CAAC;AACvC,OAAO,KAAK,EAAE,sBAAsB,EAAE,cAAc,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AACpG,OAAO,KAAK,EAAE,aAAa,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AAC5D,OAAO,EAAE,KAAK,SAAS,EAAE,KAAK,cAAc,EAAE,KAAK,cAAc,EAAE,MAAM,aAAa,CAAC;AAEvF,MAAM,MAAM,yBAAyB,GAAG;IACtC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,MAAM,CAAC;IACnB,0BAA0B,CAAC,EAAE,OAAO,CAAC;IACrC,OAAO,CAAC,EAAE;QACR,MAAM,CAAC,EAAE;YACP,OAAO,EAAE;gBAAE,MAAM,EAAE,gBAAgB,CAAA;aAAE,CAAC;YACtC,QAAQ,EAAE;gBAAE,MAAM,EAAE,gBAAgB,CAAA;aAAE,CAAC;SACxC,CAAC;QACF,MAAM,CAAC,EAAE;YACP,OAAO,EAAE;gBAAE,MAAM,EAAE,gBAAgB,CAAA;aAAE,CAAC;YACtC,QAAQ,EAAE;gBAAE,MAAM,EAAE,gBAAgB,CAAA;aAAE,CAAC;SACxC,CAAC;QACF,cAAc,CAAC,EAAE;YACf,OAAO,EAAE;gBAAE,MAAM,CAAC,EAAE,gBAAgB,CAAA;aAAE,CAAC;YACvC,QAAQ,EAAE;gBAAE,MAAM,EAAE,gBAAgB,CAAA;aAAE,CAAC;SACxC,CAAC;QACF,YAAY,CAAC,EAAE;YACb,QAAQ,EAAE;gBAAE,MAAM,EAAE,gBAAgB,CAAA;aAAE,CAAC;SACxC,CAAC;QACF,kBAAkB,CAAC,EAAE;YACnB,QAAQ,EAAE;gBAAE,MAAM,EAAE,gBAAgB,CAAA;aAAE,CAAC;SACxC,CAAC;KACH,CAAC;CACH,CAAC;AAEF,MAAM,MAAM,0BAA0B,GAAG,EAAE,GAAG,CAC1C;IAAE,iBAAiB,CAAC,EAAE,KAAK,GAAG,SAAS,CAAA;CAAE,GACzC;IACE,iBAAiB,EAAE,IAAI,CAAC;IACxB,cAAc,EAAE,yBAAyB,CAAC;CAC3C,CACJ,CAAC;AAEF,MAAM,WAAW,uBAAuB;IACtC,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,SAAS,EAAE,MAAM,CAAC;IAClB,iBAAiB,EAAE,kBAAkB,CAAC;IACtC,YAAY,CAAC,EAAE,gBAAgB,CAAC;IAChC,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,WAAW,CAAC,EAAE,kBAAkB,EAAE,CAAC;IACnC,gHAAgH;IAChH,MAAM,CAAC,EAAE,cAAc,CAAC;CACzB;AAED,MAAM,MAAM,cAAc,GAAG,OAAO,GAAG,OAAO,GAAG,OAAO,CAAC;AAEzD,MAAM,WAAW,kBAAkB;IACjC,IAAI,EAAE,OAAO,SAAS,CAAC,MAAM,CAAC;IAC9B,SAAS,EAAE,cAAc,CAAC;IAC1B,IAAI,CAAC,EAAE;QAAE,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC;IACxB,IAAI,EAAE;QACJ,MAAM,EAAE,cAAc,CAAC;QACvB,MAAM,EAAE,cAAc,CAAC;QACvB,OAAO,EAAE,MAAM,CAAC;QAChB,MAAM,EAAE,MAAM,CAAC;KAChB,CAAC;IACF,GAAG,EAAE,MAAM,CAAC;IACZ,iBAAiB,EAAE,kBAAkB,CAAC;IACtC,YAAY,CAAC,EAAE,gBAAgB,CAAC;IAChC,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,WAAW,CAAC,EAAE,kBAAkB,EAAE,CAAC;IACnC,gHAAgH;IAChH,MAAM,CAAC,EAAE,cAAc,CAAC;CACzB;AAED,MAAM,WAAW,oBAAoB;IACnC,IAAI,EAAE,OAAO,SAAS,CAAC,QAAQ,CAAC;IAChC,OAAO,EAAE,MAAM,CAAC;IAChB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,YAAY,CAAC,EAAE,gBAAgB,CAAC;IAChC,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,WAAW,CAAC,EAAE,kBAAkB,EAAE,CAAC;IACnC,gHAAgH;IAChH,MAAM,CAAC,EAAE,cAAc,CAAC;CACzB;AAED,MAAM,MAAM,wBAAwB,GAAG,kBAAkB,GAAG,oBAAoB,CAAC;AAEjF,MAAM,MAAM,uBAAuB,GAC/B;IAAE,QAAQ,EAAE,OAAO,aAAa,CAAC,GAAG,CAAC;IAAC,OAAO,EAAE,uBAAuB,CAAA;CAAE,GACxE;IAAE,QAAQ,EAAE,OAAO,aAAa,CAAC,IAAI,CAAC;IAAC,OAAO,EAAE,wBAAwB,CAAA;CAAE,CAAC;AAE/E,MAAM,MAAM,yBAAyB,CAAC,CAAC,SAAS,GAAG,GAAG,GAAG,IAAI;IAC3D,6FAA6F;IAC7F,iBAAiB,EAAE,CAAC,IAAI,EAAE;QACxB,WAAW,EAAE;YAAE,QAAQ,EAAE,MAAM,CAAC;YAAC,QAAQ,EAAE,MAAM,CAAA;SAAE,CAAC;QACpD,OAAO,EAAE,QAAQ,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;KAC9B,KAAK,OAAO,CAAC,SAAS,GAAG,IAAI,CAAC,CAAC;CACjC,CAAC;AACF,MAAM,WAAW,oBAAoB;IACnC,WAAW,CAAC,EAAE,0BAA0B,CAAC;IACzC,UAAU,CAAC,EAAE,uBAAuB,CAAC;IACrC,YAAY,CAAC,EAAE,yBAAyB,CAAC;CAC1C;AAED,MAAM,WAAW,SAAS;IACxB,MAAM,EAAE,MAAM,CAAC;IACf,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,GAAG,GAAG,CAAC;CAC/B;AAED,MAAM,WAAW,gBAAiB,SAAQ,UAAU,EAAE,SAAS;IAC7D,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,UAAU,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAA;KAAE,EAAE,CAAC;IAE9D,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,IAAI,CAAC,EAAE,MAAM,CAAC;IAEd,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,GAAG,GAAG,CAAC;CAC/B;AAED,MAAM,WAAW,kBAAkB,CAAC,CAAC,GAAG,OAAO;IAC7C,GAAG,EAAE,MAAM,CAAC;IACZ,SAAS,CAAC,IAAI,EAAE;QAAE,KAAK,EAAE,CAAC,CAAA;KAAE,GAAG,MAAM,CAAC;IACtC,WAAW,CAAC,IAAI,EAAE;QAAE,GAAG,EAAE,MAAM,CAAA;KAAE,GAAG,CAAC,CAAC;CACvC;AAED,MAAM,MAAM,kBAAkB,GAAG,MAAM,cAAc,CAAC,MAAM,CAAC,CAAC;AAE9D,MAAM,WAAW,uBAAuB,CAAC,CAAC,SAAS,GAAG,GAAG,GAAG;IAC1D,IAAI,EAAE,MAAM,CAAC;IACb,YAAY,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC,EAAE,MAAM,CAAC,GAAG,OAAO,CAAC,SAAS,CAAC,CAAC;CAChE;AAED,MAAM,MAAM,eAAe,CAAC,QAAQ,SAAS,GAAG,GAAG,GAAG,IAAI,CAAC,IAAI,EAAE;IAC/D,UAAU,EAAE,MAAM,EAAE,CAAC;IACrB,IAAI,CAAC,EAAE,SAAS,CAAC;CAClB,KAAK,iBAAiB,CAAC,QAAQ,CAAC,CAAC;AAElC,MAAM,WAAW,YAAY,CAC3B,CAAC,SAAS,GAAG,GAAG,GAAG,EAEnB,IAAI,SAAS,cAAc,GAAG,cAAc,EAC5C,IAAI,GAAG,SAAS,EAEhB,IAAI,SAAS,cAAc,GAAG,cAAc,EAC5C,IAAI,GAAG,SAAS,EAEhB,IAAI,SAAS,sBAAsB,GAAG,sBAAsB,EAC5D,IAAI,GAAG,SAAS,EAEhB,IAAI,GAAG,SAAS,EAChB,IAAI,GAAG,SAAS,EAEhB,IAAI,GAAG,SAAS;IAEhB,MAAM,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACxD,MAAM,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACxD,cAAc,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAChE,kBAAkB,CAAC,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACrE,YAAY,CAAC,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CACpD"}

package/dist/cjs/base/auth/authenticate/common/types.js

@@ -0,0 +1,3 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+//# sourceMappingURL=types.js.map

package/dist/cjs/base/auth/authenticate/common/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../../../../../src/base/auth/authenticate/common/types.ts"],"names":[],"mappings":""}

package/dist/cjs/base/auth/authenticate/index.d.ts

@@ -0,0 +1,5 @@
+export * from './common';
+export * from './middlewares';
+export * from './providers';
+export * from './strategies';
+//# sourceMappingURL=index.d.ts.map

package/dist/cjs/base/auth/authenticate/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../src/base/auth/authenticate/index.ts"],"names":[],"mappings":"AAAA,cAAc,UAAU,CAAC;AACzB,cAAc,eAAe,CAAC;AAC9B,cAAc,aAAa,CAAC;AAC5B,cAAc,cAAc,CAAC"}

package/dist/cjs/base/auth/authenticate/index.js

@@ -0,0 +1,21 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __exportStar = (this && this.__exportStar) || function(m, exports) {
+    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+__exportStar(require("./common"), exports);
+__exportStar(require("./middlewares"), exports);
+__exportStar(require("./providers"), exports);
+__exportStar(require("./strategies"), exports);
+//# sourceMappingURL=index.js.map

package/dist/cjs/base/auth/authenticate/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../../src/base/auth/authenticate/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,2CAAyB;AACzB,gDAA8B;AAC9B,8CAA4B;AAC5B,+CAA6B"}

package/dist/cjs/base/auth/authenticate/middlewares/authenticate.middleware.d.ts

@@ -0,0 +1,7 @@
+import type { Env } from 'hono';
+import type { TAuthMode } from '../common';
+export declare const authenticate: (opts: {
+    strategies: string[];
+    mode?: TAuthMode;
+}) => import("hono").MiddlewareHandler<Env>;
+//# sourceMappingURL=authenticate.middleware.d.ts.map

package/dist/cjs/base/auth/authenticate/middlewares/authenticate.middleware.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"authenticate.middleware.d.ts","sourceRoot":"","sources":["../../../../../../src/base/auth/authenticate/middlewares/authenticate.middleware.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,GAAG,EAAE,MAAM,MAAM,CAAC;AAChC,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AAM3C,eAAO,MAAM,YAAY,GAAI,MAAM;IAAE,UAAU,EAAE,MAAM,EAAE,CAAC;IAAC,IAAI,CAAC,EAAE,SAAS,CAAA;CAAE,0CAE5E,CAAC"}

package/dist/cjs/base/auth/authenticate/middlewares/authenticate.middleware.js

@@ -0,0 +1,11 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.authenticate = void 0;
+const providers_1 = require("../providers");
+const authenticationProvider = new providers_1.AuthenticationProvider();
+const authenticateFn = authenticationProvider.value();
+const authenticate = (opts) => {
+    return authenticateFn(opts);
+};
+exports.authenticate = authenticate;
+//# sourceMappingURL=authenticate.middleware.js.map

package/dist/cjs/base/auth/authenticate/middlewares/authenticate.middleware.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"authenticate.middleware.js","sourceRoot":"","sources":["../../../../../../src/base/auth/authenticate/middlewares/authenticate.middleware.ts"],"names":[],"mappings":";;;AAEA,4CAAsD;AAEtD,MAAM,sBAAsB,GAAG,IAAI,kCAAsB,EAAO,CAAC;AACjE,MAAM,cAAc,GAAG,sBAAsB,CAAC,KAAK,EAAE,CAAC;AAE/C,MAAM,YAAY,GAAG,CAAC,IAAgD,EAAE,EAAE;IAC/E,OAAO,cAAc,CAAC,IAAI,CAAC,CAAC;AAC9B,CAAC,CAAC;AAFW,QAAA,YAAY,gBAEvB"}

package/dist/cjs/base/auth/authenticate/middlewares/index.d.ts

@@ -0,0 +1,2 @@
+export * from './authenticate.middleware';
+//# sourceMappingURL=index.d.ts.map

package/dist/cjs/base/auth/authenticate/middlewares/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../../src/base/auth/authenticate/middlewares/index.ts"],"names":[],"mappings":"AAAA,cAAc,2BAA2B,CAAC"}

package/dist/cjs/base/auth/authenticate/middlewares/index.js

@@ -0,0 +1,18 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __exportStar = (this && this.__exportStar) || function(m, exports) {
+    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+__exportStar(require("./authenticate.middleware"), exports);
+//# sourceMappingURL=index.js.map

package/dist/cjs/base/auth/authenticate/middlewares/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../../../src/base/auth/authenticate/middlewares/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,4DAA0C"}

package/dist/cjs/base/auth/authenticate/providers/authentication.provider.d.ts

@@ -0,0 +1,13 @@
+import { BaseHelper } from '@venizia/ignis-helpers/core';
+import type { IProvider } from '@venizia/ignis-inversion';
+import type { Env } from 'hono';
+import type { TAuthenticateFn } from '../common';
+export declare class AuthenticationProvider<RouteEnv extends Env = Env> extends BaseHelper implements IProvider<TAuthenticateFn<RouteEnv>> {
+    constructor();
+    value(): TAuthenticateFn<RouteEnv>;
+    private createAuthenticateMiddleware;
+    private executeAnyMode;
+    private executeAllMode;
+    private setCurrentUser;
+}
+//# sourceMappingURL=authentication.provider.d.ts.map

package/dist/cjs/base/auth/authenticate/providers/authentication.provider.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"authentication.provider.d.ts","sourceRoot":"","sources":["../../../../../../src/base/auth/authenticate/providers/authentication.provider.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,UAAU,EAAY,MAAM,6BAA6B,CAAC;AAEnE,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,0BAA0B,CAAC;AAC1D,OAAO,KAAK,EAAE,GAAG,EAAE,MAAM,MAAM,CAAC;AAEhC,OAAO,KAAK,EAAa,eAAe,EAAa,MAAM,WAAW,CAAC;AAIvE,qBAAa,sBAAsB,CAAC,QAAQ,SAAS,GAAG,GAAG,GAAG,CAC5D,SAAQ,UACR,YAAW,SAAS,CAAC,eAAe,CAAC,QAAQ,CAAC,CAAC;;IAM/C,KAAK,IAAI,eAAe,CAAC,QAAQ,CAAC;IAMlC,OAAO,CAAC,4BAA4B;YA+CtB,cAAc;YAsCd,cAAc;IAkC5B,OAAO,CAAC,cAAc;CAQvB"}

package/dist/cjs/base/auth/authenticate/providers/authentication.provider.js

@@ -0,0 +1,119 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.AuthenticationProvider = void 0;
+const core_1 = require("@venizia/ignis-helpers/core");
+const common_1 = require("@venizia/ignis-helpers/common");
+const factory_1 = require("hono/factory");
+const common_2 = require("../common");
+const strategy_registry_1 = require("../strategies/strategy-registry");
+class AuthenticationProvider extends core_1.BaseHelper {
+    constructor() {
+        super({ scope: AuthenticationProvider.name });
+    }
+    value() {
+        return opts => {
+            return this.createAuthenticateMiddleware(opts);
+        };
+    }
+    createAuthenticateMiddleware(opts) {
+        const { strategies, mode = common_2.AuthenticationModes.ANY } = opts;
+        const registry = strategy_registry_1.AuthenticationStrategyRegistry.getInstance();
+        return (0, factory_1.createMiddleware)(async (context, next) => {
+            const isSkipAuthenticate = context.get(common_2.Authentication.SKIP_AUTHENTICATION);
+            if (isSkipAuthenticate) {
+                this.logger
+                    .for(this.createAuthenticateMiddleware.name)
+                    .debug('SKIP checking authentication | path: %s', context.req.path);
+                return next();
+            }
+            const isAuthenticated = context.get(common_2.Authentication.CURRENT_USER);
+            if (isAuthenticated) {
+                return next();
+            }
+            switch (mode) {
+                case common_2.AuthenticationModes.ANY: {
+                    await this.executeAnyMode({
+                        context: context,
+                        strategies,
+                        registry,
+                        next,
+                    });
+                    return;
+                }
+                case common_2.AuthenticationModes.ALL: {
+                    await this.executeAllMode({
+                        context: context,
+                        strategies,
+                        registry,
+                        next,
+                    });
+                    return;
+                }
+                default: {
+                    throw (0, core_1.getError)({
+                        statusCode: common_1.HTTP.ResultCodes.RS_5.InternalServerError,
+                        message: `Invalid authentication mode | mode: ${mode}`,
+                    });
+                }
+            }
+        });
+    }
+    async executeAnyMode(opts) {
+        const { context, strategies, registry, next } = opts;
+        // The first strategy's failure is the primary one - kept so the 401 carries WHY, instead of only which strategies were tried.
+        let primaryFailure;
+        for (const strategyName of strategies) {
+            try {
+                const strategy = registry.resolveStrategy({ name: strategyName });
+                const user = await strategy.authenticate(context);
+                this.setCurrentUser({ context, user });
+                break;
+            }
+            catch (error) {
+                primaryFailure ??= error;
+                this.logger
+                    .for(this.executeAnyMode.name)
+                    .debug('Strategy %s failed, trying next... | Error: %s', strategyName, error);
+            }
+        }
+        const currentUser = context.get(common_2.Authentication.CURRENT_USER);
+        if (!currentUser) {
+            throw (0, core_1.getError)({
+                error: common_2.AuthenticationErrors.FAILED,
+                message: `Authentication failed. Tried strategies: ${strategies.join(', ')}`,
+                logLevel: 'warn',
+                cause: primaryFailure,
+            });
+        }
+        await next();
+    }
+    async executeAllMode(opts) {
+        const { context, strategies, registry, next } = opts;
+        // Use the first strategy's user as the identity source - all must succeed but first wins for identity
+        let authUser = null;
+        for (const strategyName of strategies) {
+            const strategy = registry.resolveStrategy({ name: strategyName });
+            const user = await strategy.authenticate(context);
+            authUser ??= user;
+        }
+        if (authUser?.userId) {
+            this.setCurrentUser({ context, user: authUser });
+        }
+        else {
+            this.logger
+                .for(this.executeAllMode.name)
+                .error('Failed to identify authenticated user | user: %j | userId: %s', authUser, authUser?.userId);
+            throw (0, core_1.getError)({ error: common_2.AuthenticationErrors.USER_UNRESOLVED });
+        }
+        return next();
+    }
+    setCurrentUser(opts) {
+        const { context, user } = opts;
+        context.set(common_2.Authentication.CURRENT_USER, user);
+        if (user?.userId) {
+            context.set(common_2.Authentication.AUDIT_USER_ID, user.userId);
+        }
+    }
+}
+exports.AuthenticationProvider = AuthenticationProvider;
+//# sourceMappingURL=authentication.provider.js.map

package/dist/cjs/base/auth/authenticate/providers/authentication.provider.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"authentication.provider.js","sourceRoot":"","sources":["../../../../../../src/base/auth/authenticate/providers/authentication.provider.ts"],"names":[],"mappings":";;;AACA,sDAAmE;AACnE,0DAAqD;AAGrD,0CAAgD;AAEhD,sCAAsF;AACtF,uEAAiF;AAEjF,MAAa,sBACX,SAAQ,iBAAU;IAGlB;QACE,KAAK,CAAC,EAAE,KAAK,EAAE,sBAAsB,CAAC,IAAI,EAAE,CAAC,CAAC;IAChD,CAAC;IAED,KAAK;QACH,OAAO,IAAI,CAAC,EAAE;YACZ,OAAO,IAAI,CAAC,4BAA4B,CAAC,IAAI,CAAC,CAAC;QACjD,CAAC,CAAC;IACJ,CAAC;IAEO,4BAA4B,CAAC,IAAgD;QACnF,MAAM,EAAE,UAAU,EAAE,IAAI,GAAG,4BAAmB,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC;QAC5D,MAAM,QAAQ,GAAG,kDAA8B,CAAC,WAAW,EAAE,CAAC;QAE9D,OAAO,IAAA,0BAAgB,EAAC,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE;YAC9C,MAAM,kBAAkB,GAAG,OAAO,CAAC,GAAG,CAAC,uBAAc,CAAC,mBAAmB,CAAC,CAAC;YAC3E,IAAI,kBAAkB,EAAE,CAAC;gBACvB,IAAI,CAAC,MAAM;qBACR,GAAG,CAAC,IAAI,CAAC,4BAA4B,CAAC,IAAI,CAAC;qBAC3C,KAAK,CAAC,yCAAyC,EAAE,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;gBACtE,OAAO,IAAI,EAAE,CAAC;YAChB,CAAC;YAED,MAAM,eAAe,GAAG,OAAO,CAAC,GAAG,CAAC,uBAAc,CAAC,YAAY,CAAC,CAAC;YACjE,IAAI,eAAe,EAAE,CAAC;gBACpB,OAAO,IAAI,EAAE,CAAC;YAChB,CAAC;YAED,QAAQ,IAAI,EAAE,CAAC;gBACb,KAAK,4BAAmB,CAAC,GAAG,CAAC,CAAC,CAAC;oBAC7B,MAAM,IAAI,CAAC,cAAc,CAAC;wBACxB,OAAO,EAAE,OAAmB;wBAC5B,UAAU;wBACV,QAAQ;wBACR,IAAI;qBACL,CAAC,CAAC;oBACH,OAAO;gBACT,CAAC;gBACD,KAAK,4BAAmB,CAAC,GAAG,CAAC,CAAC,CAAC;oBAC7B,MAAM,IAAI,CAAC,cAAc,CAAC;wBACxB,OAAO,EAAE,OAAmB;wBAC5B,UAAU;wBACV,QAAQ;wBACR,IAAI;qBACL,CAAC,CAAC;oBACH,OAAO;gBACT,CAAC;gBACD,OAAO,CAAC,CAAC,CAAC;oBACR,MAAM,IAAA,eAAQ,EAAC;wBACb,UAAU,EAAE,aAAI,CAAC,WAAW,CAAC,IAAI,CAAC,mBAAmB;wBACrD,OAAO,EAAE,uCAAuC,IAAI,EAAE;qBACvD,CAAC,CAAC;gBACL,CAAC;YACH,CAAC;QACH,CAAC,CAAC,CAAC;IACL,CAAC;IAEO,KAAK,CAAC,cAAc,CAAC,IAK5B;QACC,MAAM,EAAE,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,IAAI,EAAE,GAAG,IAAI,CAAC;QAErD,8HAA8H;QAC9H,IAAI,cAAuB,CAAC;QAE5B,KAAK,MAAM,YAAY,IAAI,UAAU,EAAE,CAAC;YACtC,IAAI,CAAC;gBACH,MAAM,QAAQ,GAAG,QAAQ,CAAC,eAAe,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,CAAC,CAAC;gBAClE,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC;gBAClD,IAAI,CAAC,cAAc,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;gBACvC,MAAM;YACR,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,cAAc,KAAK,KAAK,CAAC;gBACzB,IAAI,CAAC,MAAM;qBACR,GAAG,CAAC,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC;qBAC7B,KAAK,CAAC,gDAAgD,EAAE,YAAY,EAAE,KAAK,CAAC,CAAC;YAClF,CAAC;QACH,CAAC;QAED,MAAM,WAAW,GAAG,OAAO,CAAC,GAAG,CAAC,uBAAc,CAAC,YAAY,CAAC,CAAC;QAC7D,IAAI,CAAC,WAAW,EAAE,CAAC;YACjB,MAAM,IAAA,eAAQ,EAAC;gBACb,KAAK,EAAE,6BAAoB,CAAC,MAAM;gBAClC,OAAO,EAAE,4CAA4C,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;gBAC5E,QAAQ,EAAE,MAAM;gBAChB,KAAK,EAAE,cAAc;aACtB,CAAC,CAAC;QACL,CAAC;QAED,MAAM,IAAI,EAAE,CAAC;IACf,CAAC;IAEO,KAAK,CAAC,cAAc,CAAC,IAK5B;QACC,MAAM,EAAE,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,IAAI,EAAE,GAAG,IAAI,CAAC;QAErD,sGAAsG;QACtG,IAAI,QAAQ,GAAqB,IAAI,CAAC;QAEtC,KAAK,MAAM,YAAY,IAAI,UAAU,EAAE,CAAC;YACtC,MAAM,QAAQ,GAAG,QAAQ,CAAC,eAAe,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,CAAC,CAAC;YAClE,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC;YAElD,QAAQ,KAAK,IAAI,CAAC;QACpB,CAAC;QAED,IAAI,QAAQ,EAAE,MAAM,EAAE,CAAC;YACrB,IAAI,CAAC,cAAc,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC;QACnD,CAAC;aAAM,CAAC;YACN,IAAI,CAAC,MAAM;iBACR,GAAG,CAAC,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC;iBAC7B,KAAK,CACJ,+DAA+D,EAC/D,QAAQ,EACR,QAAQ,EAAE,MAAM,CACjB,CAAC;YACJ,MAAM,IAAA,eAAQ,EAAC,EAAE,KAAK,EAAE,6BAAoB,CAAC,eAAe,EAAE,CAAC,CAAC;QAClE,CAAC;QAED,OAAO,IAAI,EAAE,CAAC;IAChB,CAAC;IAEO,cAAc,CAAC,IAA4C;QACjE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,GAAG,IAAI,CAAC;QAC/B,OAAO,CAAC,GAAG,CAAC,uBAAc,CAAC,YAAY,EAAE,IAAI,CAAC,CAAC;QAE/C,IAAI,IAAI,EAAE,MAAM,EAAE,CAAC;YACjB,OAAO,CAAC,GAAG,CAAC,uBAAc,CAAC,aAAa,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;QACzD,CAAC;IACH,CAAC;CACF;AA7ID,wDA6IC"}

package/dist/cjs/base/auth/authenticate/providers/index.d.ts

@@ -0,0 +1,2 @@
+export * from './authentication.provider';
+//# sourceMappingURL=index.d.ts.map

package/dist/cjs/base/auth/authenticate/providers/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../../src/base/auth/authenticate/providers/index.ts"],"names":[],"mappings":"AAAA,cAAc,2BAA2B,CAAC"}

package/dist/cjs/base/auth/authenticate/providers/index.js

@@ -0,0 +1,18 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __exportStar = (this && this.__exportStar) || function(m, exports) {
+    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+__exportStar(require("./authentication.provider"), exports);
+//# sourceMappingURL=index.js.map

package/dist/cjs/base/auth/authenticate/providers/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../../../src/base/auth/authenticate/providers/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,4DAA0C"}

package/dist/cjs/base/auth/authenticate/strategies/index.d.ts

@@ -0,0 +1,2 @@
+export * from './strategy-registry';
+//# sourceMappingURL=index.d.ts.map

package/dist/cjs/base/auth/authenticate/strategies/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../../src/base/auth/authenticate/strategies/index.ts"],"names":[],"mappings":"AAAA,cAAc,qBAAqB,CAAC"}

package/dist/cjs/base/auth/authenticate/strategies/index.js

@@ -0,0 +1,18 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __exportStar = (this && this.__exportStar) || function(m, exports) {
+    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+__exportStar(require("./strategy-registry"), exports);
+//# sourceMappingURL=index.js.map

package/dist/cjs/base/auth/authenticate/strategies/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../../../src/base/auth/authenticate/strategies/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,sDAAoC"}

package/dist/cjs/base/auth/authenticate/strategies/strategy-registry.d.ts

@@ -0,0 +1,21 @@
+import type { Container } from '../../../../helpers/inversion/container';
+import type { TClass } from '@venizia/ignis-helpers/common';
+import { AbstractAuthRegistry } from '../../base';
+import type { IAuthenticationStrategy } from '../common';
+export declare class AuthenticationStrategyRegistry extends AbstractAuthRegistry<IAuthenticationStrategy> {
+    static readonly SINGLETON_REAL_KEY = "authentication-strategy-registry";
+    constructor();
+    static getInstance(): AuthenticationStrategyRegistry;
+    protected getBindingPrefix(): string;
+    register(opts: {
+        container: Container;
+        strategies: {
+            strategy: TClass<IAuthenticationStrategy>;
+            name: string;
+        }[];
+    }): this;
+    resolveStrategy(opts: {
+        name: string;
+    }): IAuthenticationStrategy;
+}
+//# sourceMappingURL=strategy-registry.d.ts.map

package/dist/cjs/base/auth/authenticate/strategies/strategy-registry.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"strategy-registry.d.ts","sourceRoot":"","sources":["../../../../../../src/base/auth/authenticate/strategies/strategy-registry.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,+BAA+B,CAAC;AAC/D,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,+BAA+B,CAAC;AAC5D,OAAO,EAAE,oBAAoB,EAAE,MAAM,YAAY,CAAC;AAClD,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,WAAW,CAAC;AAGzD,qBAAa,8BAA+B,SAAQ,oBAAoB,CAAC,uBAAuB,CAAC;IAC/F,MAAM,CAAC,QAAQ,CAAC,kBAAkB,sCAAsC;;IAMxE,MAAM,CAAC,WAAW;IAOlB,SAAS,CAAC,gBAAgB,IAAI,MAAM;IAIpC,QAAQ,CAAC,IAAI,EAAE;QACb,SAAS,EAAE,SAAS,CAAC;QACrB,UAAU,EAAE;YAAE,QAAQ,EAAE,MAAM,CAAC,uBAAuB,CAAC,CAAC;YAAC,IAAI,EAAE,MAAM,CAAA;SAAE,EAAE,CAAC;KAC3E;IAUD,eAAe,CAAC,IAAI,EAAE;QAAE,IAAI,EAAE,MAAM,CAAA;KAAE,GAAG,uBAAuB;CAGjE"}

package/dist/cjs/base/auth/authenticate/strategies/strategy-registry.js

@@ -0,0 +1,33 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.AuthenticationStrategyRegistry = void 0;
+const singleton_realm_1 = require("../../../../helpers/singleton-realm");
+const base_1 = require("../../base");
+const common_1 = require("../common");
+class AuthenticationStrategyRegistry extends base_1.AbstractAuthRegistry {
+    static { this.SINGLETON_REAL_KEY = 'authentication-strategy-registry'; }
+    constructor() {
+        super({ scope: AuthenticationStrategyRegistry.name });
+    }
+    static getInstance() {
+        return singleton_realm_1.SingletonRealm.resolve({
+            key: AuthenticationStrategyRegistry.SINGLETON_REAL_KEY,
+            create: () => new AuthenticationStrategyRegistry(),
+        });
+    }
+    getBindingPrefix() {
+        return common_1.Authentication.AUTHENTICATION_STRATEGY;
+    }
+    register(opts) {
+        const { container, strategies } = opts;
+        for (const { strategy, name } of strategies) {
+            this.registerDescriptor({ container, target: strategy, name });
+        }
+        return this;
+    }
+    resolveStrategy(opts) {
+        return this.resolveDescriptor(opts);
+    }
+}
+exports.AuthenticationStrategyRegistry = AuthenticationStrategyRegistry;
+//# sourceMappingURL=strategy-registry.js.map

package/dist/cjs/base/auth/authenticate/strategies/strategy-registry.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"strategy-registry.js","sourceRoot":"","sources":["../../../../../../src/base/auth/authenticate/strategies/strategy-registry.ts"],"names":[],"mappings":";;;AAAA,+DAA2D;AAG3D,qCAAkD;AAElD,sCAA2C;AAE3C,MAAa,8BAA+B,SAAQ,2BAA6C;aAC/E,uBAAkB,GAAG,kCAAkC,CAAC;IAExE;QACE,KAAK,CAAC,EAAE,KAAK,EAAE,8BAA8B,CAAC,IAAI,EAAE,CAAC,CAAC;IACxD,CAAC;IAED,MAAM,CAAC,WAAW;QAChB,OAAO,gCAAc,CAAC,OAAO,CAAC;YAC5B,GAAG,EAAE,8BAA8B,CAAC,kBAAkB;YACtD,MAAM,EAAE,GAAG,EAAE,CAAC,IAAI,8BAA8B,EAAE;SACnD,CAAC,CAAC;IACL,CAAC;IAES,gBAAgB;QACxB,OAAO,uBAAc,CAAC,uBAAuB,CAAC;IAChD,CAAC;IAED,QAAQ,CAAC,IAGR;QACC,MAAM,EAAE,SAAS,EAAE,UAAU,EAAE,GAAG,IAAI,CAAC;QAEvC,KAAK,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,IAAI,UAAU,EAAE,CAAC;YAC5C,IAAI,CAAC,kBAAkB,CAAC,EAAE,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;QACjE,CAAC;QAED,OAAO,IAAI,CAAC;IACd,CAAC;IAED,eAAe,CAAC,IAAsB;QACpC,OAAO,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC;IACtC,CAAC;;AAjCH,wEAkCC"}

package/dist/cjs/base/auth/authorize/builders/grant.builder.d.ts

@@ -0,0 +1,75 @@
+import type { IdType } from '../../../../base';
+import { BaseHelper } from '@venizia/ignis-helpers/core';
+import { type TNullable } from '@venizia/ignis-helpers/common';
+import { type TAuthorizationAction, type TAuthorizationDecision, type TGrantIntent, type TPlannedGrantRow } from '../common';
+import { type TPolicyDomainInput } from './policy.builder';
+export declare class GrantBuilder extends BaseHelper {
+    static readonly SINGLETON_REAL_KEY = "grant-builder";
+    /** Tiers a caller may ask for; `custom` is an encoding marker and is never a valid intent. */
+    private static readonly PLANNABLE_TIERS;
+    /** Tried after `manage`; disjoint from each other, since an operation has one catalogued action. */
+    private static readonly NARROW_TIERS;
+    constructor();
+    static getInstance(): GrantBuilder;
+    decodeMetadata<MetadataType = unknown>(opts: {
+        metadata: MetadataType;
+    }): any;
+    /** Read `{ ops }` off a grant row's metadata, or null when the shape is unusable. Callers treat null as a defect to log and skip - never as an empty grant. */
+    parseCustomGrantMetadata(opts: {
+        metadata: unknown;
+    }): {
+        ops: string[];
+    } | null;
+    /** Split operation names into those present in the catalog for `subject` and those that are not. Pure - the caller supplies the catalog slice; the adapter re-runs this independently at read time. */
+    validateCustomGrantOps(opts: {
+        ops: string[];
+        subject: string;
+        catalog: Array<{
+            subject: string;
+            method: string;
+        }>;
+    }): {
+        valid: string[];
+        unknown: string[];
+    };
+    /** Actions a tier confers, derived from LATTICE rather than hardcoded so the two cannot drift. */
+    actionsCoveredBy(opts: {
+        tier: TAuthorizationAction;
+    }): Set<string>;
+    /** Decide which rows express an intent: a custom row is a last resort, so as much of the selection as possible collapses into tier grants first. `exact` disables collapsing when the caller means these operations and no future ones. Pure - the caller supplies the catalog and persists. */
+    planGrant(opts: {
+        subject: {
+            type: string;
+            id: IdType;
+        };
+        resource: {
+            type: string;
+            id: IdType;
+            subject: string;
+        };
+        intent: TGrantIntent;
+        catalog: Array<{
+            subject: string;
+            method: string;
+            code: string;
+            action: string;
+        }>;
+        domain?: TNullable<TPolicyDomainInput>;
+        effect?: TAuthorizationDecision;
+        supportsCustomMetadata?: boolean;
+        exact?: boolean;
+    }): TPlannedGrantRow[];
+    /** Collapse `remaining` into the fewest tier grants, mutating `remaining` and appending to `rows`. */
+    protected collapseRemainingIntoTiers(opts: {
+        subjectCatalog: Array<{
+            subject: string;
+            method: string;
+            code: string;
+            action: string;
+        }>;
+        remaining: Set<string>;
+        rows: TPlannedGrantRow[];
+        tierRow: (tier: TAuthorizationAction) => TPlannedGrantRow;
+    }): void;
+}
+//# sourceMappingURL=grant.builder.d.ts.map

package/dist/cjs/base/auth/authorize/builders/grant.builder.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"grant.builder.d.ts","sourceRoot":"","sources":["../../../../../../src/base/auth/authorize/builders/grant.builder.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AACrC,OAAO,EAAE,UAAU,EAAY,MAAM,6BAA6B,CAAC;AACnE,OAAO,EAAE,KAAK,SAAS,EAAE,MAAM,+BAA+B,CAAC;AAC/D,OAAO,EAGL,KAAK,oBAAoB,EACzB,KAAK,sBAAsB,EAC3B,KAAK,YAAY,EACjB,KAAK,gBAAgB,EACtB,MAAM,WAAW,CAAC;AACnB,OAAO,EAA8B,KAAK,kBAAkB,EAAE,MAAM,kBAAkB,CAAC;AAmBvF,qBAAa,YAAa,SAAQ,UAAU;IAC1C,MAAM,CAAC,QAAQ,CAAC,kBAAkB,mBAAmB;IAErD,8FAA8F;IAC9F,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,eAAe,CAKpC;IAEH,oGAAoG;IACpG,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,YAAY,CAIlC;;IAMF,MAAM,CAAC,WAAW;IAOlB,cAAc,CAAC,YAAY,GAAG,OAAO,EAAE,IAAI,EAAE;QAAE,QAAQ,EAAE,YAAY,CAAA;KAAE;IAevE,+JAA+J;IAC/J,wBAAwB,CAAC,IAAI,EAAE;QAAE,QAAQ,EAAE,OAAO,CAAA;KAAE,GAAG;QAAE,GAAG,EAAE,MAAM,EAAE,CAAA;KAAE,GAAG,IAAI;IA6B/E,uMAAuM;IACvM,sBAAsB,CAAC,IAAI,EAAE;QAC3B,GAAG,EAAE,MAAM,EAAE,CAAC;QACd,OAAO,EAAE,MAAM,CAAC;QAChB,OAAO,EAAE,KAAK,CAAC;YAAE,OAAO,EAAE,MAAM,CAAC;YAAC,MAAM,EAAE,MAAM,CAAA;SAAE,CAAC,CAAC;KACrD,GAAG;QAAE,KAAK,EAAE,MAAM,EAAE,CAAC;QAAC,OAAO,EAAE,MAAM,EAAE,CAAA;KAAE;IAwB1C,kGAAkG;IAClG,gBAAgB,CAAC,IAAI,EAAE;QAAE,IAAI,EAAE,oBAAoB,CAAA;KAAE,GAAG,GAAG,CAAC,MAAM,CAAC;IAWnE,gSAAgS;IAChS,SAAS,CAAC,IAAI,EAAE;QACd,OAAO,EAAE;YAAE,IAAI,EAAE,MAAM,CAAC;YAAC,EAAE,EAAE,MAAM,CAAA;SAAE,CAAC;QACtC,QAAQ,EAAE;YAAE,IAAI,EAAE,MAAM,CAAC;YAAC,EAAE,EAAE,MAAM,CAAC;YAAC,OAAO,EAAE,MAAM,CAAA;SAAE,CAAC;QACxD,MAAM,EAAE,YAAY,CAAC;QACrB,OAAO,EAAE,KAAK,CAAC;YAAE,OAAO,EAAE,MAAM,CAAC;YAAC,MAAM,EAAE,MAAM,CAAC;YAAC,IAAI,EAAE,MAAM,CAAC;YAAC,MAAM,EAAE,MAAM,CAAA;SAAE,CAAC,CAAC;QAClF,MAAM,CAAC,EAAE,SAAS,CAAC,kBAAkB,CAAC,CAAC;QACvC,MAAM,CAAC,EAAE,sBAAsB,CAAC;QAChC,sBAAsB,CAAC,EAAE,OAAO,CAAC;QACjC,KAAK,CAAC,EAAE,OAAO,CAAC;KACjB,GAAG,gBAAgB,EAAE;IA0GtB,sGAAsG;IACtG,SAAS,CAAC,0BAA0B,CAAC,IAAI,EAAE;QACzC,cAAc,EAAE,KAAK,CAAC;YAAE,OAAO,EAAE,MAAM,CAAC;YAAC,MAAM,EAAE,MAAM,CAAC;YAAC,IAAI,EAAE,MAAM,CAAC;YAAC,MAAM,EAAE,MAAM,CAAA;SAAE,CAAC,CAAC;QACzF,SAAS,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;QACvB,IAAI,EAAE,gBAAgB,EAAE,CAAC;QACzB,OAAO,EAAE,CAAC,IAAI,EAAE,oBAAoB,KAAK,gBAAgB,CAAC;KAC3D,GAAG,IAAI;CA2CT"}