@venizia/ignis-kernel 0.2.0-8 → 0.2.0

package/dist/esm/base/auth/authenticate/common/constants/authentication.d.ts

@@ -0,0 +1,34 @@
+import type { TConstValue } from '@venizia/ignis-helpers/common';
+export declare class AuthenticateStrategy {
+    static readonly BASIC = "basic";
+    static readonly JWT = "jwt";
+    static readonly SERVICE = "service";
+    /** The strategies the FRAMEWORK ships. An application registers its own beyond these. */
+    static readonly SCHEME_SET: Set<string>;
+    static isValid(input: string): boolean;
+}
+export type TAuthStrategy = TConstValue<typeof AuthenticateStrategy> | (string & {});
+export declare class Authentication {
+    static readonly STRATEGY_BASIC = "basic";
+    static readonly STRATEGY_JWT = "jwt";
+    static readonly STRATEGY_SERVICE = "service";
+    static readonly TYPE_BASIC = "Basic";
+    static readonly TYPE_BEARER = "Bearer";
+    static readonly AUTHENTICATION_STRATEGY = "authentication.strategy";
+    static readonly SKIP_AUTHENTICATION = "authentication.skip";
+    static readonly CURRENT_USER = "auth.current.user";
+    static readonly AUDIT_USER_ID = "audit.user.id";
+}
+export declare class AuthenticationTokenTypes {
+    static readonly TYPE_AUTHORIZATION_CODE = "000_AUTHORIZATION_CODE";
+    static readonly TYPE_ACCESS_TOKEN = "100_ACCESS_TOKEN";
+    static readonly TYPE_REFRESH_TOKEN = "200_REFRESH_TOKEN";
+}
+export declare class AuthenticationModes {
+    static readonly ANY = "any";
+    static readonly ALL = "all";
+    static readonly SCHEME_SET: Set<string>;
+    static isValid(input: string): boolean;
+}
+export type TAuthMode = TConstValue<typeof AuthenticationModes>;
+//# sourceMappingURL=authentication.d.ts.map

package/dist/esm/base/auth/authenticate/common/constants/authentication.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"authentication.d.ts","sourceRoot":"","sources":["../../../../../../../src/base/auth/authenticate/common/constants/authentication.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,+BAA+B,CAAC;AAEjE,qBAAa,oBAAoB;IAC/B,MAAM,CAAC,QAAQ,CAAC,KAAK,WAAW;IAChC,MAAM,CAAC,QAAQ,CAAC,GAAG,SAAS;IAC5B,MAAM,CAAC,QAAQ,CAAC,OAAO,aAAa;IAEpC,yFAAyF;IACzF,MAAM,CAAC,QAAQ,CAAC,UAAU,cAAiD;IAE3E,MAAM,CAAC,OAAO,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO;CAGvC;AAID,MAAM,MAAM,aAAa,GAAG,WAAW,CAAC,OAAO,oBAAoB,CAAC,GAAG,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC;AAErF,qBAAa,cAAc;IAEzB,MAAM,CAAC,QAAQ,CAAC,cAAc,WAA8B;IAC5D,MAAM,CAAC,QAAQ,CAAC,YAAY,SAA4B;IACxD,MAAM,CAAC,QAAQ,CAAC,gBAAgB,aAAgC;IAGhE,MAAM,CAAC,QAAQ,CAAC,UAAU,WAAW;IACrC,MAAM,CAAC,QAAQ,CAAC,WAAW,YAAY;IAEvC,MAAM,CAAC,QAAQ,CAAC,uBAAuB,6BAA6B;IACpE,MAAM,CAAC,QAAQ,CAAC,mBAAmB,yBAAyB;IAE5D,MAAM,CAAC,QAAQ,CAAC,YAAY,uBAAuB;IACnD,MAAM,CAAC,QAAQ,CAAC,aAAa,mBAAmB;CACjD;AAED,qBAAa,wBAAwB;IACnC,MAAM,CAAC,QAAQ,CAAC,uBAAuB,4BAA4B;IACnE,MAAM,CAAC,QAAQ,CAAC,iBAAiB,sBAAsB;IACvD,MAAM,CAAC,QAAQ,CAAC,kBAAkB,uBAAuB;CAC1D;AAED,qBAAa,mBAAmB;IAC9B,MAAM,CAAC,QAAQ,CAAC,GAAG,SAAS;IAC5B,MAAM,CAAC,QAAQ,CAAC,GAAG,SAAS;IAE5B,MAAM,CAAC,QAAQ,CAAC,UAAU,cAAiC;IAE3D,MAAM,CAAC,OAAO,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO;CAGvC;AAED,MAAM,MAAM,SAAS,GAAG,WAAW,CAAC,OAAO,mBAAmB,CAAC,CAAC"}

package/dist/esm/base/auth/authenticate/common/constants/authentication.js

@@ -0,0 +1,37 @@
+export class AuthenticateStrategy {
+    static { this.BASIC = 'basic'; }
+    static { this.JWT = 'jwt'; }
+    static { this.SERVICE = 'service'; }
+    /** The strategies the FRAMEWORK ships. An application registers its own beyond these. */
+    static { this.SCHEME_SET = new Set([this.BASIC, this.JWT, this.SERVICE]); }
+    static isValid(input) {
+        return this.SCHEME_SET.has(input);
+    }
+}
+export class Authentication {
+    // Strategy
+    static { this.STRATEGY_BASIC = AuthenticateStrategy.BASIC; }
+    static { this.STRATEGY_JWT = AuthenticateStrategy.JWT; }
+    static { this.STRATEGY_SERVICE = AuthenticateStrategy.SERVICE; }
+    // Token type
+    static { this.TYPE_BASIC = 'Basic'; }
+    static { this.TYPE_BEARER = 'Bearer'; }
+    static { this.AUTHENTICATION_STRATEGY = 'authentication.strategy'; }
+    static { this.SKIP_AUTHENTICATION = 'authentication.skip'; }
+    static { this.CURRENT_USER = 'auth.current.user'; }
+    static { this.AUDIT_USER_ID = 'audit.user.id'; }
+}
+export class AuthenticationTokenTypes {
+    static { this.TYPE_AUTHORIZATION_CODE = '000_AUTHORIZATION_CODE'; }
+    static { this.TYPE_ACCESS_TOKEN = '100_ACCESS_TOKEN'; }
+    static { this.TYPE_REFRESH_TOKEN = '200_REFRESH_TOKEN'; }
+}
+export class AuthenticationModes {
+    static { this.ANY = 'any'; }
+    static { this.ALL = 'all'; }
+    static { this.SCHEME_SET = new Set([this.ANY, this.ALL]); }
+    static isValid(input) {
+        return this.SCHEME_SET.has(input);
+    }
+}
+//# sourceMappingURL=authentication.js.map

package/dist/esm/base/auth/authenticate/common/constants/authentication.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"authentication.js","sourceRoot":"","sources":["../../../../../../../src/base/auth/authenticate/common/constants/authentication.ts"],"names":[],"mappings":"AAEA,MAAM,OAAO,oBAAoB;aACf,UAAK,GAAG,OAAO,CAAC;aAChB,QAAG,GAAG,KAAK,CAAC;aACZ,YAAO,GAAG,SAAS,CAAC;IAEpC,yFAAyF;aACzE,eAAU,GAAG,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC;IAE3E,MAAM,CAAC,OAAO,CAAC,KAAa;QAC1B,OAAO,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IACpC,CAAC;;AAOH,MAAM,OAAO,cAAc;IACzB,WAAW;aACK,mBAAc,GAAG,oBAAoB,CAAC,KAAK,CAAC;aAC5C,iBAAY,GAAG,oBAAoB,CAAC,GAAG,CAAC;aACxC,qBAAgB,GAAG,oBAAoB,CAAC,OAAO,CAAC;IAEhE,aAAa;aACG,eAAU,GAAG,OAAO,CAAC;aACrB,gBAAW,GAAG,QAAQ,CAAC;aAEvB,4BAAuB,GAAG,yBAAyB,CAAC;aACpD,wBAAmB,GAAG,qBAAqB,CAAC;aAE5C,iBAAY,GAAG,mBAAmB,CAAC;aACnC,kBAAa,GAAG,eAAe,CAAC;;AAGlD,MAAM,OAAO,wBAAwB;aACnB,4BAAuB,GAAG,wBAAwB,CAAC;aACnD,sBAAiB,GAAG,kBAAkB,CAAC;aACvC,uBAAkB,GAAG,mBAAmB,CAAC;;AAG3D,MAAM,OAAO,mBAAmB;aACd,QAAG,GAAG,KAAK,CAAC;aACZ,QAAG,GAAG,KAAK,CAAC;aAEZ,eAAU,GAAG,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;IAE3D,MAAM,CAAC,OAAO,CAAC,KAAa;QAC1B,OAAO,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IACpC,CAAC"}

package/dist/esm/base/auth/authenticate/common/constants/index.d.ts

@@ -0,0 +1,4 @@
+export * from './authentication.js';
+export * from './jose.js';
+export * from './service-assertion.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/esm/base/auth/authenticate/common/constants/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../../../src/base/auth/authenticate/common/constants/index.ts"],"names":[],"mappings":"AAAA,cAAc,kBAAkB,CAAC;AACjC,cAAc,QAAQ,CAAC;AACvB,cAAc,qBAAqB,CAAC"}

package/dist/esm/base/auth/authenticate/common/constants/index.js

@@ -0,0 +1,4 @@
+export * from './authentication.js';
+export * from './jose.js';
+export * from './service-assertion.js';
+//# sourceMappingURL=index.js.map

package/dist/esm/base/auth/authenticate/common/constants/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../../../../src/base/auth/authenticate/common/constants/index.ts"],"names":[],"mappings":"AAAA,cAAc,kBAAkB,CAAC;AACjC,cAAc,QAAQ,CAAC;AACvB,cAAc,qBAAqB,CAAC"}

package/dist/esm/base/auth/authenticate/common/constants/jose.d.ts

@@ -0,0 +1,30 @@
+import type { TConstValue } from '@venizia/ignis-helpers/common';
+export declare class JOSEStandards {
+    static readonly JWS = "JWS";
+    static readonly JWKS = "JWKS";
+    static readonly SCHEME_SET: Set<string>;
+    static isValid(input: string): boolean;
+}
+export type TJOSEStandard = TConstValue<typeof JOSEStandards>;
+export declare class JWKSModes {
+    static readonly ISSUER = "issuer";
+    static readonly VERIFIER = "verifier";
+    static readonly SCHEME_SET: Set<string>;
+    static isValid(input: string): boolean;
+}
+export type TJWKSMode = TConstValue<typeof JWKSModes>;
+export declare class JWKSKeyDrivers {
+    static readonly TEXT = "text";
+    static readonly FILE = "file";
+    static readonly SCHEME_SET: Set<string>;
+    static isValid(input: string): boolean;
+}
+export type TJWKSKeyDriver = TConstValue<typeof JWKSKeyDrivers>;
+export declare class JWKSKeyFormats {
+    static readonly PEM = "pem";
+    static readonly JWK = "jwk";
+    static readonly SCHEME_SET: Set<string>;
+    static isValid(input: string): boolean;
+}
+export type TJWKSKeyFormat = TConstValue<typeof JWKSKeyFormats>;
+//# sourceMappingURL=jose.d.ts.map

package/dist/esm/base/auth/authenticate/common/constants/jose.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"jose.d.ts","sourceRoot":"","sources":["../../../../../../../src/base/auth/authenticate/common/constants/jose.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,+BAA+B,CAAC;AAEjE,qBAAa,aAAa;IACxB,MAAM,CAAC,QAAQ,CAAC,GAAG,SAAS;IAC5B,MAAM,CAAC,QAAQ,CAAC,IAAI,UAAU;IAE9B,MAAM,CAAC,QAAQ,CAAC,UAAU,cAAkC;IAE5D,MAAM,CAAC,OAAO,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO;CAGvC;AAED,MAAM,MAAM,aAAa,GAAG,WAAW,CAAC,OAAO,aAAa,CAAC,CAAC;AAE9D,qBAAa,SAAS;IACpB,MAAM,CAAC,QAAQ,CAAC,MAAM,YAAY;IAClC,MAAM,CAAC,QAAQ,CAAC,QAAQ,cAAc;IAEtC,MAAM,CAAC,QAAQ,CAAC,UAAU,cAAyC;IAEnE,MAAM,CAAC,OAAO,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO;CAGvC;AAED,MAAM,MAAM,SAAS,GAAG,WAAW,CAAC,OAAO,SAAS,CAAC,CAAC;AAEtD,qBAAa,cAAc;IACzB,MAAM,CAAC,QAAQ,CAAC,IAAI,UAAU;IAC9B,MAAM,CAAC,QAAQ,CAAC,IAAI,UAAU;IAE9B,MAAM,CAAC,QAAQ,CAAC,UAAU,cAAmC;IAE7D,MAAM,CAAC,OAAO,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO;CAGvC;AAED,MAAM,MAAM,cAAc,GAAG,WAAW,CAAC,OAAO,cAAc,CAAC,CAAC;AAEhE,qBAAa,cAAc;IACzB,MAAM,CAAC,QAAQ,CAAC,GAAG,SAAS;IAC5B,MAAM,CAAC,QAAQ,CAAC,GAAG,SAAS;IAE5B,MAAM,CAAC,QAAQ,CAAC,UAAU,cAAiC;IAE3D,MAAM,CAAC,OAAO,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO;CAGvC;AAED,MAAM,MAAM,cAAc,GAAG,WAAW,CAAC,OAAO,cAAc,CAAC,CAAC"}

package/dist/esm/base/auth/authenticate/common/constants/jose.js

@@ -0,0 +1,33 @@
+export class JOSEStandards {
+    static { this.JWS = 'JWS'; }
+    static { this.JWKS = 'JWKS'; }
+    static { this.SCHEME_SET = new Set([this.JWS, this.JWKS]); }
+    static isValid(input) {
+        return this.SCHEME_SET.has(input);
+    }
+}
+export class JWKSModes {
+    static { this.ISSUER = 'issuer'; }
+    static { this.VERIFIER = 'verifier'; }
+    static { this.SCHEME_SET = new Set([this.ISSUER, this.VERIFIER]); }
+    static isValid(input) {
+        return this.SCHEME_SET.has(input);
+    }
+}
+export class JWKSKeyDrivers {
+    static { this.TEXT = 'text'; }
+    static { this.FILE = 'file'; }
+    static { this.SCHEME_SET = new Set([this.TEXT, this.FILE]); }
+    static isValid(input) {
+        return this.SCHEME_SET.has(input);
+    }
+}
+export class JWKSKeyFormats {
+    static { this.PEM = 'pem'; }
+    static { this.JWK = 'jwk'; }
+    static { this.SCHEME_SET = new Set([this.PEM, this.JWK]); }
+    static isValid(input) {
+        return this.SCHEME_SET.has(input);
+    }
+}
+//# sourceMappingURL=jose.js.map

package/dist/esm/base/auth/authenticate/common/constants/jose.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"jose.js","sourceRoot":"","sources":["../../../../../../../src/base/auth/authenticate/common/constants/jose.ts"],"names":[],"mappings":"AAEA,MAAM,OAAO,aAAa;aACR,QAAG,GAAG,KAAK,CAAC;aACZ,SAAI,GAAG,MAAM,CAAC;aAEd,eAAU,GAAG,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;IAE5D,MAAM,CAAC,OAAO,CAAC,KAAa;QAC1B,OAAO,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IACpC,CAAC;;AAKH,MAAM,OAAO,SAAS;aACJ,WAAM,GAAG,QAAQ,CAAC;aAClB,aAAQ,GAAG,UAAU,CAAC;aAEtB,eAAU,GAAG,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC;IAEnE,MAAM,CAAC,OAAO,CAAC,KAAa;QAC1B,OAAO,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IACpC,CAAC;;AAKH,MAAM,OAAO,cAAc;aACT,SAAI,GAAG,MAAM,CAAC;aACd,SAAI,GAAG,MAAM,CAAC;aAEd,eAAU,GAAG,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;IAE7D,MAAM,CAAC,OAAO,CAAC,KAAa;QAC1B,OAAO,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IACpC,CAAC;;AAKH,MAAM,OAAO,cAAc;aACT,QAAG,GAAG,KAAK,CAAC;aACZ,QAAG,GAAG,KAAK,CAAC;aAEZ,eAAU,GAAG,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;IAE3D,MAAM,CAAC,OAAO,CAAC,KAAa;QAC1B,OAAO,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IACpC,CAAC"}

package/dist/esm/base/auth/authenticate/common/constants/service-assertion.d.ts

@@ -0,0 +1,25 @@
+/**
+ * Wire-level constants of the service assertion. Fixed rather than configurable: both ends of a
+ * call must agree on them, and a knob here would let two services disagree silently.
+ */
+export declare class ServiceAssertion {
+    /** Its own header, so the end user's token keeps `Authorization` on the same request. */
+    static readonly HEADER = "x-service-assertion";
+    /** The JWS `typ`. What stops a user token being replayed as an assertion when one JWKS serves both. */
+    static readonly TYP = "svc+jwt";
+    static readonly ALGORITHM = "EdDSA";
+    static readonly DEFAULT_REST_PATH = "/svc-certs";
+    /** How long a minted assertion stays valid. */
+    static readonly DEFAULT_SIGN_LIFETIME_SECONDS = 60;
+    /** The oldest assertion a callee accepts, measured from `iat`. Its own decision, not the caller's. */
+    static readonly DEFAULT_ACCEPT_MAX_AGE_SECONDS = 60;
+    static readonly DEFAULT_CLOCK_TOLERANCE_SECONDS = 5;
+    /** Resolves the accepted age for one caller: its own override, then the service default. */
+    static resolveAcceptMaxAge(opts: {
+        callerOverride?: number;
+        serviceDefault?: number;
+    }): number;
+    static readonly DEFAULT_JWKS_CACHE_MAX_AGE_MS: number;
+    static readonly DEFAULT_JWKS_COOLDOWN_MS: number;
+}
+//# sourceMappingURL=service-assertion.d.ts.map

package/dist/esm/base/auth/authenticate/common/constants/service-assertion.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"service-assertion.d.ts","sourceRoot":"","sources":["../../../../../../../src/base/auth/authenticate/common/constants/service-assertion.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,qBAAa,gBAAgB;IAC3B,yFAAyF;IACzF,MAAM,CAAC,QAAQ,CAAC,MAAM,yBAAyB;IAE/C,uGAAuG;IACvG,MAAM,CAAC,QAAQ,CAAC,GAAG,aAAa;IAEhC,MAAM,CAAC,QAAQ,CAAC,SAAS,WAAW;IAEpC,MAAM,CAAC,QAAQ,CAAC,iBAAiB,gBAAgB;IACjD,+CAA+C;IAC/C,MAAM,CAAC,QAAQ,CAAC,6BAA6B,MAAM;IAEnD,sGAAsG;IACtG,MAAM,CAAC,QAAQ,CAAC,8BAA8B,MAAM;IACpD,MAAM,CAAC,QAAQ,CAAC,+BAA+B,KAAK;IAEpD,4FAA4F;IAC5F,MAAM,CAAC,mBAAmB,CAAC,IAAI,EAAE;QAAE,cAAc,CAAC,EAAE,MAAM,CAAC;QAAC,cAAc,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,MAAM;IAM9F,MAAM,CAAC,QAAQ,CAAC,6BAA6B,SAAkB;IAC/D,MAAM,CAAC,QAAQ,CAAC,wBAAwB,SAAa;CACtD"}

package/dist/esm/base/auth/authenticate/common/constants/service-assertion.js

@@ -0,0 +1,24 @@
+/**
+ * Wire-level constants of the service assertion. Fixed rather than configurable: both ends of a
+ * call must agree on them, and a knob here would let two services disagree silently.
+ */
+export class ServiceAssertion {
+    /** Its own header, so the end user's token keeps `Authorization` on the same request. */
+    static { this.HEADER = 'x-service-assertion'; }
+    /** The JWS `typ`. What stops a user token being replayed as an assertion when one JWKS serves both. */
+    static { this.TYP = 'svc+jwt'; }
+    static { this.ALGORITHM = 'EdDSA'; }
+    static { this.DEFAULT_REST_PATH = '/svc-certs'; }
+    /** How long a minted assertion stays valid. */
+    static { this.DEFAULT_SIGN_LIFETIME_SECONDS = 60; }
+    /** The oldest assertion a callee accepts, measured from `iat`. Its own decision, not the caller's. */
+    static { this.DEFAULT_ACCEPT_MAX_AGE_SECONDS = 60; }
+    static { this.DEFAULT_CLOCK_TOLERANCE_SECONDS = 5; }
+    /** Resolves the accepted age for one caller: its own override, then the service default. */
+    static resolveAcceptMaxAge(opts) {
+        return (opts.callerOverride ?? opts.serviceDefault ?? ServiceAssertion.DEFAULT_ACCEPT_MAX_AGE_SECONDS);
+    }
+    static { this.DEFAULT_JWKS_CACHE_MAX_AGE_MS = 10 * 60 * 1000; }
+    static { this.DEFAULT_JWKS_COOLDOWN_MS = 30 * 1000; }
+}
+//# sourceMappingURL=service-assertion.js.map

package/dist/esm/base/auth/authenticate/common/constants/service-assertion.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"service-assertion.js","sourceRoot":"","sources":["../../../../../../../src/base/auth/authenticate/common/constants/service-assertion.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,MAAM,OAAO,gBAAgB;IAC3B,yFAAyF;aACzE,WAAM,GAAG,qBAAqB,CAAC;IAE/C,uGAAuG;aACvF,QAAG,GAAG,SAAS,CAAC;aAEhB,cAAS,GAAG,OAAO,CAAC;aAEpB,sBAAiB,GAAG,YAAY,CAAC;IACjD,+CAA+C;aAC/B,kCAA6B,GAAG,EAAE,CAAC;IAEnD,sGAAsG;aACtF,mCAA8B,GAAG,EAAE,CAAC;aACpC,oCAA+B,GAAG,CAAC,CAAC;IAEpD,4FAA4F;IAC5F,MAAM,CAAC,mBAAmB,CAAC,IAA0D;QACnF,OAAO,CACL,IAAI,CAAC,cAAc,IAAI,IAAI,CAAC,cAAc,IAAI,gBAAgB,CAAC,8BAA8B,CAC9F,CAAC;IACJ,CAAC;aAEe,kCAA6B,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;aAC/C,6BAAwB,GAAG,EAAE,GAAG,IAAI,CAAC"}

package/dist/esm/base/auth/authenticate/common/index.d.ts

@@ -1,6 +1,6 @@
 export * from './errors.js';
 export * from './codecs.js';
-export * from './constants.js';
+export * from './constants/index.js';
 export * from './keys.js';
-export * from './types.js';
+export * from './types/index.js';
 //# sourceMappingURL=index.d.ts.map

package/dist/esm/base/auth/authenticate/common/index.js

@@ -1,6 +1,6 @@
 export * from './errors.js';
 export * from './codecs.js';
-export * from './constants.js';
+export * from './constants/index.js';
 export * from './keys.js';
-export * from './types.js';
+export * from './types/index.js';
 //# sourceMappingURL=index.js.map

package/dist/esm/base/auth/authenticate/common/types/basic.d.ts

@@ -0,0 +1,14 @@
+import type { TContext } from '../../../../controllers/common/types/index.js';
+import type { Env } from 'hono';
+import type { IAuthUser } from './strategy.js';
+export type TBasicTokenServiceOptions<E extends Env = Env> = {
+    /** Callback to verify basic auth credentials. Returns IAuthUser if valid, null otherwise. */
+    verifyCredentials: (opts: {
+        credentials: {
+            username: string;
+            password: string;
+        };
+        context: TContext<E, string>;
+    }) => Promise<IAuthUser | null>;
+};
+//# sourceMappingURL=basic.d.ts.map

package/dist/esm/base/auth/authenticate/common/types/basic.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"basic.d.ts","sourceRoot":"","sources":["../../../../../../../src/base/auth/authenticate/common/types/basic.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,iCAAiC,CAAC;AAChE,OAAO,KAAK,EAAE,GAAG,EAAE,MAAM,MAAM,CAAC;AAChC,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,YAAY,CAAC;AAE5C,MAAM,MAAM,yBAAyB,CAAC,CAAC,SAAS,GAAG,GAAG,GAAG,IAAI;IAC3D,6FAA6F;IAC7F,iBAAiB,EAAE,CAAC,IAAI,EAAE;QACxB,WAAW,EAAE;YAAE,QAAQ,EAAE,MAAM,CAAC;YAAC,QAAQ,EAAE,MAAM,CAAA;SAAE,CAAC;QACpD,OAAO,EAAE,QAAQ,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;KAC9B,KAAK,OAAO,CAAC,SAAS,GAAG,IAAI,CAAC,CAAC;CACjC,CAAC"}

package/dist/esm/base/auth/authenticate/common/types/basic.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=basic.js.map

package/dist/esm/base/auth/authenticate/common/types/basic.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"basic.js","sourceRoot":"","sources":["../../../../../../../src/base/auth/authenticate/common/types/basic.ts"],"names":[],"mappings":""}

package/dist/esm/base/auth/authenticate/common/types/index.d.ts

@@ -0,0 +1,7 @@
+export * from './basic.js';
+export * from './jwt.js';
+export * from './options.js';
+export * from './rest.js';
+export * from './service.js';
+export * from './strategy.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/esm/base/auth/authenticate/common/types/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../../../src/base/auth/authenticate/common/types/index.ts"],"names":[],"mappings":"AAAA,cAAc,SAAS,CAAC;AACxB,cAAc,OAAO,CAAC;AACtB,cAAc,WAAW,CAAC;AAC1B,cAAc,QAAQ,CAAC;AACvB,cAAc,WAAW,CAAC;AAC1B,cAAc,YAAY,CAAC"}

package/dist/esm/base/auth/authenticate/common/types/index.js

@@ -0,0 +1,7 @@
+export * from './basic.js';
+export * from './jwt.js';
+export * from './options.js';
+export * from './rest.js';
+export * from './service.js';
+export * from './strategy.js';
+//# sourceMappingURL=index.js.map

package/dist/esm/base/auth/authenticate/common/types/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../../../../src/base/auth/authenticate/common/types/index.ts"],"names":[],"mappings":"AAAA,cAAc,SAAS,CAAC;AACxB,cAAc,OAAO,CAAC;AACtB,cAAc,WAAW,CAAC;AAC1B,cAAc,QAAQ,CAAC;AACvB,cAAc,WAAW,CAAC;AAC1B,cAAc,YAAY,CAAC"}

package/dist/esm/base/auth/authenticate/common/types/jwt.d.ts

@@ -0,0 +1,137 @@
+import type { IdType } from '../../../../models/common/index.js';
+import type { ValueOrPromise } from '@venizia/ignis-helpers/common';
+import type { AESAlgorithmType, IPayloadCipher } from '@venizia/ignis-helpers/core';
+import type { JWTPayload } from 'jose';
+import type { JOSEStandards, JWKSModes, TJWKSKeyDriver, TJWKSKeyFormat } from '../constants/index.js';
+import type { IAuthUser } from './strategy.js';
+/**
+ * Claim checks applied when VERIFYING a JWT. Field names and types mirror jose's `JWTVerifyOptions`
+ * exactly, so this is a pass-through with no translation layer.
+ *
+ * Every field is optional and unset by default, which is today's behaviour: nothing is checked
+ * beyond the signature and the time claims. In a fleet where every verifier points at the same
+ * issuer JWKS, that means a token minted for one service is accepted verbatim by every other -
+ * `audience` is what makes "this token was meant for me" a cryptographic statement rather than a
+ * convention.
+ */
+export interface IJWTVerifyOptions {
+    /** Expected `aud`. Setting it makes the claim required. Matching is jose's OVERLAP semantics, not equality: a token carrying `['a','b']` satisfies `audience: 'a'`. Enforce single-valued audiences at issue time if that matters. */
+    audience?: string | string[];
+    /** Expected `iss`. Setting it makes the claim required. */
+    issuer?: string | string[];
+    /** Expected `sub`. Setting it makes the claim required. */
+    subject?: string;
+    /** Clock skew tolerance: seconds, or a jose duration string such as `'30 seconds'`. */
+    clockTolerance?: string | number;
+    /** Accepted JWS `alg` header values. Unset means the accepted algorithm is decided entirely by what the JWKS serves. */
+    algorithms?: string[];
+    /** Caps elapsed time since `iat`. The real replay window for a short-lived assertion, independent of whatever `exp` the caller chose to stamp. */
+    maxTokenAge?: string | number;
+    /** Expected JWS `typ` header. The standard defence against cross-token-type confusion when one JWKS serves more than one kind of token. */
+    typ?: string;
+    /** Claims that must be present, beyond those implied by the checks above. */
+    requiredClaims?: string[];
+}
+/** Default `iss` / `aud` stamped on every issued token. Configured values are AUTHORITATIVE - see {@link IJWTIssueClaims}. */
+export interface IJWTSignOptions {
+    issuer?: string;
+    audience?: string | string[];
+}
+/**
+ * Per-token registered claims, passed to `generate()`.
+ *
+ * This is the supported way to vary `aud` or `sub` per token. Putting them on the payload used to
+ * work by accident - `iss`, `aud`, `sub` and `jti` ride through the AES envelope in the clear
+ * because they are standard JWT fields - but a claim the payload can set is a claim any caller who
+ * shapes the payload can forge. These win over {@link IJWTSignOptions}; the payload never does.
+ */
+export interface IJWTIssueClaims {
+    issuer?: string;
+    audience?: string | string[];
+    subject?: string;
+    jwtId?: string;
+}
+export interface IJWSTokenServiceOptions {
+    headerAlgorithm?: string;
+    jwtSecret: string;
+    getTokenExpiresFn: TGetTokenExpiresFn;
+    aesAlgorithm?: AESAlgorithmType;
+    applicationSecret?: string;
+    fieldCodecs?: IPayloadFieldCodec[];
+    /** Overrides the payload cipher - pass `LegacyAES` to keep reading tokens issued before the PBKDF2 envelope. */
+    cipher?: IPayloadCipher;
+    /** Claim checks applied on verify. Unset means signature and time claims only. */
+    verify?: IJWTVerifyOptions;
+    /** Claims stamped on every issued token. A configured value WINS over one supplied in the payload. */
+    sign?: IJWTSignOptions;
+}
+export type TJWKSAlgorithm = 'ES256' | 'RS256' | 'EdDSA';
+export interface IJWKSIssuerOptions {
+    mode: typeof JWKSModes.ISSUER;
+    algorithm: TJWKSAlgorithm;
+    rest?: {
+        path: string;
+    };
+    keys: {
+        driver: TJWKSKeyDriver;
+        format: TJWKSKeyFormat;
+        private: string;
+        public: string;
+    };
+    kid: string;
+    getTokenExpiresFn: TGetTokenExpiresFn;
+    aesAlgorithm?: AESAlgorithmType;
+    applicationSecret?: string;
+    fieldCodecs?: IPayloadFieldCodec[];
+    /** Overrides the payload cipher - pass `LegacyAES` to keep reading tokens issued before the PBKDF2 envelope. */
+    cipher?: IPayloadCipher;
+    /** Claim checks applied on verify. Unset means signature and time claims only. */
+    verify?: IJWTVerifyOptions;
+    /** Claims stamped on every issued token. A configured value WINS over one supplied in the payload. */
+    sign?: IJWTSignOptions;
+}
+export interface IJWKSVerifierOptions {
+    mode: typeof JWKSModes.VERIFIER;
+    jwksUrl: string;
+    cacheTtlMs?: number;
+    cooldownMs?: number;
+    aesAlgorithm?: AESAlgorithmType;
+    applicationSecret?: string;
+    fieldCodecs?: IPayloadFieldCodec[];
+    /** Overrides the payload cipher - pass `LegacyAES` to keep reading tokens issued before the PBKDF2 envelope. */
+    cipher?: IPayloadCipher;
+    /** Claim checks applied on verify. Unset means signature and time claims only. */
+    verify?: IJWTVerifyOptions;
+}
+export type TJWKSTokenServiceOptions = IJWKSIssuerOptions | IJWKSVerifierOptions;
+export type TJWTTokenServiceOptions = {
+    standard: typeof JOSEStandards.JWS;
+    options: IJWSTokenServiceOptions;
+} | {
+    standard: typeof JOSEStandards.JWKS;
+    options: TJWKSTokenServiceOptions;
+};
+export interface IJWTTokenPayload extends JWTPayload, IAuthUser {
+    userId: IdType;
+    roles: {
+        id: IdType;
+        identifier: string;
+        priority: number;
+    }[];
+    clientId?: string;
+    provider?: string;
+    email?: string;
+    name?: string;
+    [extra: string | symbol]: any;
+}
+export interface IPayloadFieldCodec<T = unknown> {
+    key: string;
+    serialize(opts: {
+        value: T;
+    }): string;
+    deserialize(opts: {
+        raw: string;
+    }): T;
+}
+export type TGetTokenExpiresFn = () => ValueOrPromise<number>;
+//# sourceMappingURL=jwt.d.ts.map

package/dist/esm/base/auth/authenticate/common/types/jwt.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"jwt.d.ts","sourceRoot":"","sources":["../../../../../../../src/base/auth/authenticate/common/types/jwt.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,sBAAsB,CAAC;AACnD,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,+BAA+B,CAAC;AACpE,OAAO,KAAK,EAAE,gBAAgB,EAAE,cAAc,EAAE,MAAM,6BAA6B,CAAC;AACpF,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,MAAM,CAAC;AACvC,OAAO,KAAK,EAAE,aAAa,EAAE,SAAS,EAAE,cAAc,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AAC7F,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,YAAY,CAAC;AAE5C;;;;;;;;;GASG;AACH,MAAM,WAAW,iBAAiB;IAChC,sOAAsO;IACtO,QAAQ,CAAC,EAAE,MAAM,GAAG,MAAM,EAAE,CAAC;IAE7B,2DAA2D;IAC3D,MAAM,CAAC,EAAE,MAAM,GAAG,MAAM,EAAE,CAAC;IAE3B,2DAA2D;IAC3D,OAAO,CAAC,EAAE,MAAM,CAAC;IAEjB,uFAAuF;IACvF,cAAc,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC;IAEjC,wHAAwH;IACxH,UAAU,CAAC,EAAE,MAAM,EAAE,CAAC;IAEtB,kJAAkJ;IAClJ,WAAW,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC;IAE9B,2IAA2I;IAC3I,GAAG,CAAC,EAAE,MAAM,CAAC;IAEb,6EAA6E;IAC7E,cAAc,CAAC,EAAE,MAAM,EAAE,CAAC;CAC3B;AAED,8HAA8H;AAC9H,MAAM,WAAW,eAAe;IAC9B,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,QAAQ,CAAC,EAAE,MAAM,GAAG,MAAM,EAAE,CAAC;CAC9B;AAED;;;;;;;GAOG;AACH,MAAM,WAAW,eAAe;IAC9B,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,QAAQ,CAAC,EAAE,MAAM,GAAG,MAAM,EAAE,CAAC;IAC7B,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,uBAAuB;IACtC,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,SAAS,EAAE,MAAM,CAAC;IAClB,iBAAiB,EAAE,kBAAkB,CAAC;IACtC,YAAY,CAAC,EAAE,gBAAgB,CAAC;IAChC,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,WAAW,CAAC,EAAE,kBAAkB,EAAE,CAAC;IACnC,gHAAgH;IAChH,MAAM,CAAC,EAAE,cAAc,CAAC;IAExB,kFAAkF;IAClF,MAAM,CAAC,EAAE,iBAAiB,CAAC;IAE3B,sGAAsG;IACtG,IAAI,CAAC,EAAE,eAAe,CAAC;CACxB;AAED,MAAM,MAAM,cAAc,GAAG,OAAO,GAAG,OAAO,GAAG,OAAO,CAAC;AAEzD,MAAM,WAAW,kBAAkB;IACjC,IAAI,EAAE,OAAO,SAAS,CAAC,MAAM,CAAC;IAC9B,SAAS,EAAE,cAAc,CAAC;IAC1B,IAAI,CAAC,EAAE;QAAE,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC;IACxB,IAAI,EAAE;QACJ,MAAM,EAAE,cAAc,CAAC;QACvB,MAAM,EAAE,cAAc,CAAC;QACvB,OAAO,EAAE,MAAM,CAAC;QAChB,MAAM,EAAE,MAAM,CAAC;KAChB,CAAC;IACF,GAAG,EAAE,MAAM,CAAC;IACZ,iBAAiB,EAAE,kBAAkB,CAAC;IACtC,YAAY,CAAC,EAAE,gBAAgB,CAAC;IAChC,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,WAAW,CAAC,EAAE,kBAAkB,EAAE,CAAC;IACnC,gHAAgH;IAChH,MAAM,CAAC,EAAE,cAAc,CAAC;IAExB,kFAAkF;IAClF,MAAM,CAAC,EAAE,iBAAiB,CAAC;IAE3B,sGAAsG;IACtG,IAAI,CAAC,EAAE,eAAe,CAAC;CACxB;AAED,MAAM,WAAW,oBAAoB;IACnC,IAAI,EAAE,OAAO,SAAS,CAAC,QAAQ,CAAC;IAChC,OAAO,EAAE,MAAM,CAAC;IAChB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,YAAY,CAAC,EAAE,gBAAgB,CAAC;IAChC,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,WAAW,CAAC,EAAE,kBAAkB,EAAE,CAAC;IACnC,gHAAgH;IAChH,MAAM,CAAC,EAAE,cAAc,CAAC;IAExB,kFAAkF;IAClF,MAAM,CAAC,EAAE,iBAAiB,CAAC;CAC5B;AAED,MAAM,MAAM,wBAAwB,GAAG,kBAAkB,GAAG,oBAAoB,CAAC;AAEjF,MAAM,MAAM,uBAAuB,GAC/B;IAAE,QAAQ,EAAE,OAAO,aAAa,CAAC,GAAG,CAAC;IAAC,OAAO,EAAE,uBAAuB,CAAA;CAAE,GACxE;IAAE,QAAQ,EAAE,OAAO,aAAa,CAAC,IAAI,CAAC;IAAC,OAAO,EAAE,wBAAwB,CAAA;CAAE,CAAC;AAE/E,MAAM,WAAW,gBAAiB,SAAQ,UAAU,EAAE,SAAS;IAC7D,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,UAAU,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAA;KAAE,EAAE,CAAC;IAE9D,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,IAAI,CAAC,EAAE,MAAM,CAAC;IAEd,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,GAAG,GAAG,CAAC;CAC/B;AAED,MAAM,WAAW,kBAAkB,CAAC,CAAC,GAAG,OAAO;IAC7C,GAAG,EAAE,MAAM,CAAC;IACZ,SAAS,CAAC,IAAI,EAAE;QAAE,KAAK,EAAE,CAAC,CAAA;KAAE,GAAG,MAAM,CAAC;IACtC,WAAW,CAAC,IAAI,EAAE;QAAE,GAAG,EAAE,MAAM,CAAA;KAAE,GAAG,CAAC,CAAC;CACvC;AAED,MAAM,MAAM,kBAAkB,GAAG,MAAM,cAAc,CAAC,MAAM,CAAC,CAAC"}

package/dist/esm/base/auth/authenticate/common/types/jwt.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=jwt.js.map

package/dist/esm/base/auth/authenticate/common/types/jwt.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"jwt.js","sourceRoot":"","sources":["../../../../../../../src/base/auth/authenticate/common/types/jwt.ts"],"names":[],"mappings":""}

package/dist/esm/base/auth/authenticate/common/types/options.d.ts

@@ -0,0 +1,15 @@
+import type { TBasicTokenServiceOptions } from './basic.js';
+import type { TJWTTokenServiceOptions } from './jwt.js';
+import type { TAuthenticationRestOptions } from './rest.js';
+import type { IServiceAuthOptions } from './service.js';
+/**
+ * Composes the four topic option types into the framework's single authenticate config knob.
+ * The only file in this folder allowed more than one sibling import - it is their parent.
+ */
+export interface IAuthenticateOptions {
+    restOptions?: TAuthenticationRestOptions;
+    jwtOptions?: TJWTTokenServiceOptions;
+    basicOptions?: TBasicTokenServiceOptions;
+    serviceOptions?: IServiceAuthOptions;
+}
+//# sourceMappingURL=options.d.ts.map

package/dist/esm/base/auth/authenticate/common/types/options.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"options.d.ts","sourceRoot":"","sources":["../../../../../../../src/base/auth/authenticate/common/types/options.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,SAAS,CAAC;AACzD,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,OAAO,CAAC;AACrD,OAAO,KAAK,EAAE,0BAA0B,EAAE,MAAM,QAAQ,CAAC;AACzD,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,WAAW,CAAC;AAErD;;;GAGG;AACH,MAAM,WAAW,oBAAoB;IACnC,WAAW,CAAC,EAAE,0BAA0B,CAAC;IACzC,UAAU,CAAC,EAAE,uBAAuB,CAAC;IACrC,YAAY,CAAC,EAAE,yBAAyB,CAAC;IACzC,cAAc,CAAC,EAAE,mBAAmB,CAAC;CACtC"}

package/dist/esm/base/auth/authenticate/common/types/options.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=options.js.map

package/dist/esm/base/auth/authenticate/common/types/options.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"options.js","sourceRoot":"","sources":["../../../../../../../src/base/auth/authenticate/common/types/options.ts"],"names":[],"mappings":""}

package/dist/esm/base/auth/authenticate/common/types/rest.d.ts

@@ -0,0 +1,49 @@
+import type { TAnyObjectSchema } from '../../../../controllers/common/schema-builders.js';
+export type TDefineAuthControllerOpts = {
+    restPath?: string;
+    serviceKey: string;
+    requireAuthenticatedSignUp?: boolean;
+    payload?: {
+        signIn?: {
+            request: {
+                schema: TAnyObjectSchema;
+            };
+            response: {
+                schema: TAnyObjectSchema;
+            };
+        };
+        signUp?: {
+            request: {
+                schema: TAnyObjectSchema;
+            };
+            response: {
+                schema: TAnyObjectSchema;
+            };
+        };
+        changePassword?: {
+            request: {
+                schema?: TAnyObjectSchema;
+            };
+            response: {
+                schema: TAnyObjectSchema;
+            };
+        };
+        refreshToken?: {
+            response: {
+                schema: TAnyObjectSchema;
+            };
+        };
+        getUserInformation?: {
+            response: {
+                schema: TAnyObjectSchema;
+            };
+        };
+    };
+};
+export type TAuthenticationRestOptions = {} & ({
+    useAuthController?: false | undefined;
+} | {
+    useAuthController: true;
+    controllerOpts: TDefineAuthControllerOpts;
+});
+//# sourceMappingURL=rest.d.ts.map

package/dist/esm/base/auth/authenticate/common/types/rest.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"rest.d.ts","sourceRoot":"","sources":["../../../../../../../src/base/auth/authenticate/common/types/rest.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,2CAA2C,CAAC;AAElF,MAAM,MAAM,yBAAyB,GAAG;IACtC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,MAAM,CAAC;IACnB,0BAA0B,CAAC,EAAE,OAAO,CAAC;IACrC,OAAO,CAAC,EAAE;QACR,MAAM,CAAC,EAAE;YACP,OAAO,EAAE;gBAAE,MAAM,EAAE,gBAAgB,CAAA;aAAE,CAAC;YACtC,QAAQ,EAAE;gBAAE,MAAM,EAAE,gBAAgB,CAAA;aAAE,CAAC;SACxC,CAAC;QACF,MAAM,CAAC,EAAE;YACP,OAAO,EAAE;gBAAE,MAAM,EAAE,gBAAgB,CAAA;aAAE,CAAC;YACtC,QAAQ,EAAE;gBAAE,MAAM,EAAE,gBAAgB,CAAA;aAAE,CAAC;SACxC,CAAC;QACF,cAAc,CAAC,EAAE;YACf,OAAO,EAAE;gBAAE,MAAM,CAAC,EAAE,gBAAgB,CAAA;aAAE,CAAC;YACvC,QAAQ,EAAE;gBAAE,MAAM,EAAE,gBAAgB,CAAA;aAAE,CAAC;SACxC,CAAC;QACF,YAAY,CAAC,EAAE;YACb,QAAQ,EAAE;gBAAE,MAAM,EAAE,gBAAgB,CAAA;aAAE,CAAC;SACxC,CAAC;QACF,kBAAkB,CAAC,EAAE;YACnB,QAAQ,EAAE;gBAAE,MAAM,EAAE,gBAAgB,CAAA;aAAE,CAAC;SACxC,CAAC;KACH,CAAC;CACH,CAAC;AAEF,MAAM,MAAM,0BAA0B,GAAG,EAAE,GAAG,CAC1C;IAAE,iBAAiB,CAAC,EAAE,KAAK,GAAG,SAAS,CAAA;CAAE,GACzC;IACE,iBAAiB,EAAE,IAAI,CAAC;IACxB,cAAc,EAAE,yBAAyB,CAAC;CAC3C,CACJ,CAAC"}

package/dist/esm/base/auth/authenticate/common/types/rest.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=rest.js.map

package/dist/esm/base/auth/authenticate/common/types/rest.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"rest.js","sourceRoot":"","sources":["../../../../../../../src/base/auth/authenticate/common/types/rest.ts"],"names":[],"mappings":""}