@venizia/ignis-kernel 0.4.2 → 0.4.4

package/dist/cjs/base/auth/authenticate/common/errors.js

@@ -1,121 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.AuthenticationErrors = void 0;
-const common_1 = require("@venizia/ignis-helpers/common");
-const core_1 = require("@venizia/ignis-helpers/core");
-/** Codes a client branches on for a failed authentication. A throw site may override `message` for detail; the code and status come from here. */
-exports.AuthenticationErrors = {
-    HEADER_MISSING: {
-        message: {
-            text: 'Missing authorization header',
-            code: 'core.authentication.header_missing',
-        },
-        statusCode: common_1.HTTP.ResultCodes.RS_4.Unauthorized,
-        category: core_1.ErrorScopes.AUTH,
-    },
-    SCHEME_INVALID: {
-        message: {
-            text: 'Unsupported authorization scheme',
-            code: 'core.authentication.scheme_invalid',
-        },
-        statusCode: common_1.HTTP.ResultCodes.RS_4.Unauthorized,
-        category: core_1.ErrorScopes.AUTH,
-    },
-    HEADER_MALFORMED: {
-        message: {
-            text: 'Malformed authorization header',
-            code: 'core.authentication.header_malformed',
-        },
-        statusCode: common_1.HTTP.ResultCodes.RS_4.Unauthorized,
-        category: core_1.ErrorScopes.AUTH,
-    },
-    TOKEN_MISSING: {
-        message: { text: 'Missing request token', code: 'core.authentication.token_missing' },
-        statusCode: common_1.HTTP.ResultCodes.RS_4.Unauthorized,
-        category: core_1.ErrorScopes.AUTH,
-    },
-    /** Covers expiry, a bad signature and a malformed token alike - the reason rides in `cause`, never in the code a client sees. */
-    TOKEN_INVALID: {
-        message: { text: 'Invalid or expired token', code: 'core.authentication.token_invalid' },
-        statusCode: common_1.HTTP.ResultCodes.RS_4.Unauthorized,
-        category: core_1.ErrorScopes.AUTH,
-    },
-    TOKEN_PAYLOAD_INVALID: {
-        message: {
-            text: 'Invalid token payload',
-            code: 'core.authentication.token_payload_invalid',
-        },
-        statusCode: common_1.HTTP.ResultCodes.RS_4.Unauthorized,
-        category: core_1.ErrorScopes.AUTH,
-    },
-    CREDENTIALS_MALFORMED: {
-        message: {
-            text: 'Malformed credentials',
-            code: 'core.authentication.credentials_malformed',
-        },
-        statusCode: common_1.HTTP.ResultCodes.RS_4.Unauthorized,
-        category: core_1.ErrorScopes.AUTH,
-    },
-    CREDENTIALS_INVALID: {
-        message: {
-            text: 'Invalid username or password',
-            code: 'core.authentication.credentials_invalid',
-        },
-        statusCode: common_1.HTTP.ResultCodes.RS_4.Unauthorized,
-        category: core_1.ErrorScopes.AUTH,
-    },
-    FAILED: {
-        message: { text: 'Authentication failed', code: 'core.authentication.failed' },
-        statusCode: common_1.HTTP.ResultCodes.RS_4.Unauthorized,
-        category: core_1.ErrorScopes.AUTH,
-    },
-    USER_UNRESOLVED: {
-        message: {
-            text: 'Failed to identify authenticated user',
-            code: 'core.authentication.user_unresolved',
-        },
-        statusCode: common_1.HTTP.ResultCodes.RS_4.Unauthorized,
-        category: core_1.ErrorScopes.AUTH,
-    },
-    ASSERTION_MISSING: {
-        message: {
-            text: 'Missing service assertion',
-            code: 'core.authentication.service.assertion_missing',
-        },
-        statusCode: common_1.HTTP.ResultCodes.RS_4.Unauthorized,
-        category: core_1.ErrorScopes.AUTH,
-    },
-    ASSERTION_INVALID: {
-        message: {
-            text: 'Invalid service assertion',
-            code: 'core.authentication.service.assertion_invalid',
-        },
-        statusCode: common_1.HTTP.ResultCodes.RS_4.Unauthorized,
-        category: core_1.ErrorScopes.AUTH,
-    },
-    CALLER_NOT_ALLOWED: {
-        message: {
-            text: 'Service caller is not allowed',
-            code: 'core.authentication.service.caller_not_allowed',
-        },
-        statusCode: common_1.HTTP.ResultCodes.RS_4.Unauthorized,
-        category: core_1.ErrorScopes.AUTH,
-    },
-    REQUEST_BINDING_MISMATCH: {
-        message: {
-            text: 'Service assertion does not match this request',
-            code: 'core.authentication.service.request_binding_mismatch',
-        },
-        statusCode: common_1.HTTP.ResultCodes.RS_4.Unauthorized,
-        category: core_1.ErrorScopes.AUTH,
-    },
-    PRINCIPAL_UNRESOLVED: {
-        message: {
-            text: 'Service caller resolved to no principal',
-            code: 'core.authentication.service.principal_unresolved',
-        },
-        statusCode: common_1.HTTP.ResultCodes.RS_4.Unauthorized,
-        category: core_1.ErrorScopes.AUTH,
-    },
-};
-//# sourceMappingURL=errors.js.map

package/dist/cjs/base/auth/authenticate/common/errors.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"errors.js","sourceRoot":"","sources":["../../../../../../src/base/auth/authenticate/common/errors.ts"],"names":[],"mappings":";;;AAAA,0DAAqD;AAErD,sDAA0D;AAE1D,kJAAkJ;AACrI,QAAA,oBAAoB,GAAG;IAClC,cAAc,EAAE;QACd,OAAO,EAAE;YACP,IAAI,EAAE,8BAA8B;YACpC,IAAI,EAAE,oCAAoC;SAC3C;QACD,UAAU,EAAE,aAAI,CAAC,WAAW,CAAC,IAAI,CAAC,YAAY;QAC9C,QAAQ,EAAE,kBAAW,CAAC,IAAI;KAC3B;IACD,cAAc,EAAE;QACd,OAAO,EAAE;YACP,IAAI,EAAE,kCAAkC;YACxC,IAAI,EAAE,oCAAoC;SAC3C;QACD,UAAU,EAAE,aAAI,CAAC,WAAW,CAAC,IAAI,CAAC,YAAY;QAC9C,QAAQ,EAAE,kBAAW,CAAC,IAAI;KAC3B;IACD,gBAAgB,EAAE;QAChB,OAAO,EAAE;YACP,IAAI,EAAE,gCAAgC;YACtC,IAAI,EAAE,sCAAsC;SAC7C;QACD,UAAU,EAAE,aAAI,CAAC,WAAW,CAAC,IAAI,CAAC,YAAY;QAC9C,QAAQ,EAAE,kBAAW,CAAC,IAAI;KAC3B;IACD,aAAa,EAAE;QACb,OAAO,EAAE,EAAE,IAAI,EAAE,uBAAuB,EAAE,IAAI,EAAE,mCAAmC,EAAE;QACrF,UAAU,EAAE,aAAI,CAAC,WAAW,CAAC,IAAI,CAAC,YAAY;QAC9C,QAAQ,EAAE,kBAAW,CAAC,IAAI;KAC3B;IACD,iIAAiI;IACjI,aAAa,EAAE;QACb,OAAO,EAAE,EAAE,IAAI,EAAE,0BAA0B,EAAE,IAAI,EAAE,mCAAmC,EAAE;QACxF,UAAU,EAAE,aAAI,CAAC,WAAW,CAAC,IAAI,CAAC,YAAY;QAC9C,QAAQ,EAAE,kBAAW,CAAC,IAAI;KAC3B;IACD,qBAAqB,EAAE;QACrB,OAAO,EAAE;YACP,IAAI,EAAE,uBAAuB;YAC7B,IAAI,EAAE,2CAA2C;SAClD;QACD,UAAU,EAAE,aAAI,CAAC,WAAW,CAAC,IAAI,CAAC,YAAY;QAC9C,QAAQ,EAAE,kBAAW,CAAC,IAAI;KAC3B;IACD,qBAAqB,EAAE;QACrB,OAAO,EAAE;YACP,IAAI,EAAE,uBAAuB;YAC7B,IAAI,EAAE,2CAA2C;SAClD;QACD,UAAU,EAAE,aAAI,CAAC,WAAW,CAAC,IAAI,CAAC,YAAY;QAC9C,QAAQ,EAAE,kBAAW,CAAC,IAAI;KAC3B;IACD,mBAAmB,EAAE;QACnB,OAAO,EAAE;YACP,IAAI,EAAE,8BAA8B;YACpC,IAAI,EAAE,yCAAyC;SAChD;QACD,UAAU,EAAE,aAAI,CAAC,WAAW,CAAC,IAAI,CAAC,YAAY;QAC9C,QAAQ,EAAE,kBAAW,CAAC,IAAI;KAC3B;IACD,MAAM,EAAE;QACN,OAAO,EAAE,EAAE,IAAI,EAAE,uBAAuB,EAAE,IAAI,EAAE,4BAA4B,EAAE;QAC9E,UAAU,EAAE,aAAI,CAAC,WAAW,CAAC,IAAI,CAAC,YAAY;QAC9C,QAAQ,EAAE,kBAAW,CAAC,IAAI;KAC3B;IACD,eAAe,EAAE;QACf,OAAO,EAAE;YACP,IAAI,EAAE,uCAAuC;YAC7C,IAAI,EAAE,qCAAqC;SAC5C;QACD,UAAU,EAAE,aAAI,CAAC,WAAW,CAAC,IAAI,CAAC,YAAY;QAC9C,QAAQ,EAAE,kBAAW,CAAC,IAAI;KAC3B;IACD,iBAAiB,EAAE;QACjB,OAAO,EAAE;YACP,IAAI,EAAE,2BAA2B;YACjC,IAAI,EAAE,+CAA+C;SACtD;QACD,UAAU,EAAE,aAAI,CAAC,WAAW,CAAC,IAAI,CAAC,YAAY;QAC9C,QAAQ,EAAE,kBAAW,CAAC,IAAI;KAC3B;IACD,iBAAiB,EAAE;QACjB,OAAO,EAAE;YACP,IAAI,EAAE,2BAA2B;YACjC,IAAI,EAAE,+CAA+C;SACtD;QACD,UAAU,EAAE,aAAI,CAAC,WAAW,CAAC,IAAI,CAAC,YAAY;QAC9C,QAAQ,EAAE,kBAAW,CAAC,IAAI;KAC3B;IACD,kBAAkB,EAAE;QAClB,OAAO,EAAE;YACP,IAAI,EAAE,+BAA+B;YACrC,IAAI,EAAE,gDAAgD;SACvD;QACD,UAAU,EAAE,aAAI,CAAC,WAAW,CAAC,IAAI,CAAC,YAAY;QAC9C,QAAQ,EAAE,kBAAW,CAAC,IAAI;KAC3B;IACD,wBAAwB,EAAE;QACxB,OAAO,EAAE;YACP,IAAI,EAAE,+CAA+C;YACrD,IAAI,EAAE,sDAAsD;SAC7D;QACD,UAAU,EAAE,aAAI,CAAC,WAAW,CAAC,IAAI,CAAC,YAAY;QAC9C,QAAQ,EAAE,kBAAW,CAAC,IAAI;KAC3B;IACD,oBAAoB,EAAE;QACpB,OAAO,EAAE;YACP,IAAI,EAAE,yCAAyC;YAC/C,IAAI,EAAE,kDAAkD;SACzD;QACD,UAAU,EAAE,aAAI,CAAC,WAAW,CAAC,IAAI,CAAC,YAAY;QAC9C,QAAQ,EAAE,kBAAW,CAAC,IAAI;KAC3B;CACkD,CAAC","sourcesContent":["import { HTTP } from '@venizia/ignis-helpers/common';\nimport type { TErrorDefinition, TRegisterErrors } from '@venizia/ignis-helpers/core';\nimport { ErrorScopes } from '@venizia/ignis-helpers/core';\n\n/** Codes a client branches on for a failed authentication. A throw site may override `message` for detail; the code and status come from here. */\nexport const AuthenticationErrors = {\n  HEADER_MISSING: {\n    message: {\n      text: 'Missing authorization header',\n      code: 'core.authentication.header_missing',\n    },\n    statusCode: HTTP.ResultCodes.RS_4.Unauthorized,\n    category: ErrorScopes.AUTH,\n  },\n  SCHEME_INVALID: {\n    message: {\n      text: 'Unsupported authorization scheme',\n      code: 'core.authentication.scheme_invalid',\n    },\n    statusCode: HTTP.ResultCodes.RS_4.Unauthorized,\n    category: ErrorScopes.AUTH,\n  },\n  HEADER_MALFORMED: {\n    message: {\n      text: 'Malformed authorization header',\n      code: 'core.authentication.header_malformed',\n    },\n    statusCode: HTTP.ResultCodes.RS_4.Unauthorized,\n    category: ErrorScopes.AUTH,\n  },\n  TOKEN_MISSING: {\n    message: { text: 'Missing request token', code: 'core.authentication.token_missing' },\n    statusCode: HTTP.ResultCodes.RS_4.Unauthorized,\n    category: ErrorScopes.AUTH,\n  },\n  /** Covers expiry, a bad signature and a malformed token alike - the reason rides in `cause`, never in the code a client sees. */\n  TOKEN_INVALID: {\n    message: { text: 'Invalid or expired token', code: 'core.authentication.token_invalid' },\n    statusCode: HTTP.ResultCodes.RS_4.Unauthorized,\n    category: ErrorScopes.AUTH,\n  },\n  TOKEN_PAYLOAD_INVALID: {\n    message: {\n      text: 'Invalid token payload',\n      code: 'core.authentication.token_payload_invalid',\n    },\n    statusCode: HTTP.ResultCodes.RS_4.Unauthorized,\n    category: ErrorScopes.AUTH,\n  },\n  CREDENTIALS_MALFORMED: {\n    message: {\n      text: 'Malformed credentials',\n      code: 'core.authentication.credentials_malformed',\n    },\n    statusCode: HTTP.ResultCodes.RS_4.Unauthorized,\n    category: ErrorScopes.AUTH,\n  },\n  CREDENTIALS_INVALID: {\n    message: {\n      text: 'Invalid username or password',\n      code: 'core.authentication.credentials_invalid',\n    },\n    statusCode: HTTP.ResultCodes.RS_4.Unauthorized,\n    category: ErrorScopes.AUTH,\n  },\n  FAILED: {\n    message: { text: 'Authentication failed', code: 'core.authentication.failed' },\n    statusCode: HTTP.ResultCodes.RS_4.Unauthorized,\n    category: ErrorScopes.AUTH,\n  },\n  USER_UNRESOLVED: {\n    message: {\n      text: 'Failed to identify authenticated user',\n      code: 'core.authentication.user_unresolved',\n    },\n    statusCode: HTTP.ResultCodes.RS_4.Unauthorized,\n    category: ErrorScopes.AUTH,\n  },\n  ASSERTION_MISSING: {\n    message: {\n      text: 'Missing service assertion',\n      code: 'core.authentication.service.assertion_missing',\n    },\n    statusCode: HTTP.ResultCodes.RS_4.Unauthorized,\n    category: ErrorScopes.AUTH,\n  },\n  ASSERTION_INVALID: {\n    message: {\n      text: 'Invalid service assertion',\n      code: 'core.authentication.service.assertion_invalid',\n    },\n    statusCode: HTTP.ResultCodes.RS_4.Unauthorized,\n    category: ErrorScopes.AUTH,\n  },\n  CALLER_NOT_ALLOWED: {\n    message: {\n      text: 'Service caller is not allowed',\n      code: 'core.authentication.service.caller_not_allowed',\n    },\n    statusCode: HTTP.ResultCodes.RS_4.Unauthorized,\n    category: ErrorScopes.AUTH,\n  },\n  REQUEST_BINDING_MISMATCH: {\n    message: {\n      text: 'Service assertion does not match this request',\n      code: 'core.authentication.service.request_binding_mismatch',\n    },\n    statusCode: HTTP.ResultCodes.RS_4.Unauthorized,\n    category: ErrorScopes.AUTH,\n  },\n  PRINCIPAL_UNRESOLVED: {\n    message: {\n      text: 'Service caller resolved to no principal',\n      code: 'core.authentication.service.principal_unresolved',\n    },\n    statusCode: HTTP.ResultCodes.RS_4.Unauthorized,\n    category: ErrorScopes.AUTH,\n  },\n} as const satisfies Record<string, TErrorDefinition>;\n\ndeclare module '@venizia/ignis-helpers/core' {\n  interface IErrorKeyRegistry extends TRegisterErrors<typeof AuthenticationErrors> {}\n}\n"]}

package/dist/cjs/base/auth/authenticate/common/index.d.ts

@@ -1,6 +0,0 @@
-export * from './errors';
-export * from './codecs';
-export * from './constants';
-export * from './keys';
-export * from './types';
-//# sourceMappingURL=index.d.ts.map

package/dist/cjs/base/auth/authenticate/common/index.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../../src/base/auth/authenticate/common/index.ts"],"names":[],"mappings":"AAAA,cAAc,UAAU,CAAC;AACzB,cAAc,UAAU,CAAC;AACzB,cAAc,aAAa,CAAC;AAC5B,cAAc,QAAQ,CAAC;AACvB,cAAc,SAAS,CAAC"}

package/dist/cjs/base/auth/authenticate/common/index.js

@@ -1,22 +0,0 @@
-"use strict";
-var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    var desc = Object.getOwnPropertyDescriptor(m, k);
-    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
-      desc = { enumerable: true, get: function() { return m[k]; } };
-    }
-    Object.defineProperty(o, k2, desc);
-}) : (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    o[k2] = m[k];
-}));
-var __exportStar = (this && this.__exportStar) || function(m, exports) {
-    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
-};
-Object.defineProperty(exports, "__esModule", { value: true });
-__exportStar(require("./errors"), exports);
-__exportStar(require("./codecs"), exports);
-__exportStar(require("./constants"), exports);
-__exportStar(require("./keys"), exports);
-__exportStar(require("./types"), exports);
-//# sourceMappingURL=index.js.map

package/dist/cjs/base/auth/authenticate/common/index.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../../../src/base/auth/authenticate/common/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,2CAAyB;AACzB,2CAAyB;AACzB,8CAA4B;AAC5B,yCAAuB;AACvB,0CAAwB","sourcesContent":["export * from './errors';\nexport * from './codecs';\nexport * from './constants';\nexport * from './keys';\nexport * from './types';\n"]}

package/dist/cjs/base/auth/authenticate/common/keys.d.ts

@@ -1,9 +0,0 @@
-export declare class AuthenticateBindingKeys {
-    static readonly REST_OPTIONS = "@app/authenticate/rest-options";
-    static readonly JWT_OPTIONS = "@app/authenticate/jwt-options";
-    static readonly JWKS_OPTIONS = "@app/authenticate/jwks-options";
-    static readonly BASIC_OPTIONS = "@app/authenticate/basic-options";
-    static readonly SERVICE_OPTIONS = "@app/authenticate/service-options";
-    static readonly SERVICE_CERTS_PATH = "@app/authenticate/service-certs-path";
-}
-//# sourceMappingURL=keys.d.ts.map

package/dist/cjs/base/auth/authenticate/common/keys.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"keys.d.ts","sourceRoot":"","sources":["../../../../../../src/base/auth/authenticate/common/keys.ts"],"names":[],"mappings":"AAAA,qBAAa,uBAAuB;IAClC,MAAM,CAAC,QAAQ,CAAC,YAAY,oCAAoC;IAChE,MAAM,CAAC,QAAQ,CAAC,WAAW,mCAAmC;IAC9D,MAAM,CAAC,QAAQ,CAAC,YAAY,oCAAoC;IAChE,MAAM,CAAC,QAAQ,CAAC,aAAa,qCAAqC;IAClE,MAAM,CAAC,QAAQ,CAAC,eAAe,uCAAuC;IACtE,MAAM,CAAC,QAAQ,CAAC,kBAAkB,0CAA0C;CAC7E"}

package/dist/cjs/base/auth/authenticate/common/keys.js

@@ -1,13 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.AuthenticateBindingKeys = void 0;
-class AuthenticateBindingKeys {
-    static { this.REST_OPTIONS = '@app/authenticate/rest-options'; }
-    static { this.JWT_OPTIONS = '@app/authenticate/jwt-options'; }
-    static { this.JWKS_OPTIONS = '@app/authenticate/jwks-options'; }
-    static { this.BASIC_OPTIONS = '@app/authenticate/basic-options'; }
-    static { this.SERVICE_OPTIONS = '@app/authenticate/service-options'; }
-    static { this.SERVICE_CERTS_PATH = '@app/authenticate/service-certs-path'; }
-}
-exports.AuthenticateBindingKeys = AuthenticateBindingKeys;
-//# sourceMappingURL=keys.js.map

package/dist/cjs/base/auth/authenticate/common/keys.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"keys.js","sourceRoot":"","sources":["../../../../../../src/base/auth/authenticate/common/keys.ts"],"names":[],"mappings":";;;AAAA,MAAa,uBAAuB;aAClB,iBAAY,GAAG,gCAAgC,CAAC;aAChD,gBAAW,GAAG,+BAA+B,CAAC;aAC9C,iBAAY,GAAG,gCAAgC,CAAC;aAChD,kBAAa,GAAG,iCAAiC,CAAC;aAClD,oBAAe,GAAG,mCAAmC,CAAC;aACtD,uBAAkB,GAAG,sCAAsC,CAAC;;AAN9E,0DAOC","sourcesContent":["export class AuthenticateBindingKeys {\n  static readonly REST_OPTIONS = '@app/authenticate/rest-options';\n  static readonly JWT_OPTIONS = '@app/authenticate/jwt-options';\n  static readonly JWKS_OPTIONS = '@app/authenticate/jwks-options';\n  static readonly BASIC_OPTIONS = '@app/authenticate/basic-options';\n  static readonly SERVICE_OPTIONS = '@app/authenticate/service-options';\n  static readonly SERVICE_CERTS_PATH = '@app/authenticate/service-certs-path';\n}\n"]}

package/dist/cjs/base/auth/authenticate/common/types/basic.d.ts

@@ -1,14 +0,0 @@
-import type { TContext } from '../../../../controllers/common/types';
-import type { Env } from 'hono';
-import type { IAuthUser } from './strategy';
-export type TBasicTokenServiceOptions<E extends Env = Env> = {
-    /** Callback to verify basic auth credentials. Returns IAuthUser if valid, null otherwise. */
-    verifyCredentials: (opts: {
-        credentials: {
-            username: string;
-            password: string;
-        };
-        context: TContext<E, string>;
-    }) => Promise<IAuthUser | null>;
-};
-//# sourceMappingURL=basic.d.ts.map

package/dist/cjs/base/auth/authenticate/common/types/basic.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"basic.d.ts","sourceRoot":"","sources":["../../../../../../../src/base/auth/authenticate/common/types/basic.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,iCAAiC,CAAC;AAChE,OAAO,KAAK,EAAE,GAAG,EAAE,MAAM,MAAM,CAAC;AAChC,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,YAAY,CAAC;AAE5C,MAAM,MAAM,yBAAyB,CAAC,CAAC,SAAS,GAAG,GAAG,GAAG,IAAI;IAC3D,6FAA6F;IAC7F,iBAAiB,EAAE,CAAC,IAAI,EAAE;QACxB,WAAW,EAAE;YAAE,QAAQ,EAAE,MAAM,CAAC;YAAC,QAAQ,EAAE,MAAM,CAAA;SAAE,CAAC;QACpD,OAAO,EAAE,QAAQ,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;KAC9B,KAAK,OAAO,CAAC,SAAS,GAAG,IAAI,CAAC,CAAC;CACjC,CAAC"}

package/dist/cjs/base/auth/authenticate/common/types/basic.js

@@ -1,3 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-//# sourceMappingURL=basic.js.map

package/dist/cjs/base/auth/authenticate/common/types/basic.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"basic.js","sourceRoot":"","sources":["../../../../../../../src/base/auth/authenticate/common/types/basic.ts"],"names":[],"mappings":"","sourcesContent":["import type { TContext } from '@/base/controllers/common/types';\nimport type { Env } from 'hono';\nimport type { IAuthUser } from './strategy';\n\nexport type TBasicTokenServiceOptions<E extends Env = Env> = {\n  /** Callback to verify basic auth credentials. Returns IAuthUser if valid, null otherwise. */\n  verifyCredentials: (opts: {\n    credentials: { username: string; password: string };\n    context: TContext<E, string>;\n  }) => Promise<IAuthUser | null>;\n};\n"]}

package/dist/cjs/base/auth/authenticate/common/types/index.d.ts

@@ -1,7 +0,0 @@
-export * from './basic';
-export * from './jwt';
-export * from './options';
-export * from './rest';
-export * from './service';
-export * from './strategy';
-//# sourceMappingURL=index.d.ts.map

package/dist/cjs/base/auth/authenticate/common/types/index.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../../../src/base/auth/authenticate/common/types/index.ts"],"names":[],"mappings":"AAAA,cAAc,SAAS,CAAC;AACxB,cAAc,OAAO,CAAC;AACtB,cAAc,WAAW,CAAC;AAC1B,cAAc,QAAQ,CAAC;AACvB,cAAc,WAAW,CAAC;AAC1B,cAAc,YAAY,CAAC"}

package/dist/cjs/base/auth/authenticate/common/types/index.js

@@ -1,23 +0,0 @@
-"use strict";
-var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    var desc = Object.getOwnPropertyDescriptor(m, k);
-    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
-      desc = { enumerable: true, get: function() { return m[k]; } };
-    }
-    Object.defineProperty(o, k2, desc);
-}) : (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    o[k2] = m[k];
-}));
-var __exportStar = (this && this.__exportStar) || function(m, exports) {
-    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
-};
-Object.defineProperty(exports, "__esModule", { value: true });
-__exportStar(require("./basic"), exports);
-__exportStar(require("./jwt"), exports);
-__exportStar(require("./options"), exports);
-__exportStar(require("./rest"), exports);
-__exportStar(require("./service"), exports);
-__exportStar(require("./strategy"), exports);
-//# sourceMappingURL=index.js.map

package/dist/cjs/base/auth/authenticate/common/types/index.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../../../../src/base/auth/authenticate/common/types/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,0CAAwB;AACxB,wCAAsB;AACtB,4CAA0B;AAC1B,yCAAuB;AACvB,4CAA0B;AAC1B,6CAA2B","sourcesContent":["export * from './basic';\nexport * from './jwt';\nexport * from './options';\nexport * from './rest';\nexport * from './service';\nexport * from './strategy';\n"]}

package/dist/cjs/base/auth/authenticate/common/types/jwt.d.ts

@@ -1,137 +0,0 @@
-import type { IdType } from '../../../../models/common';
-import type { ValueOrPromise } from '@venizia/ignis-helpers/common';
-import type { AESAlgorithmType, IPayloadCipher } from '@venizia/ignis-helpers/core';
-import type { JWTPayload } from 'jose';
-import type { JOSEStandards, JWKSModes, TJWKSKeyDriver, TJWKSKeyFormat } from '../constants';
-import type { IAuthUser } from './strategy';
-/**
- * Claim checks applied when VERIFYING a JWT. Field names and types mirror jose's `JWTVerifyOptions`
- * exactly, so this is a pass-through with no translation layer.
- *
- * Every field is optional and unset by default, which is today's behaviour: nothing is checked
- * beyond the signature and the time claims. In a fleet where every verifier points at the same
- * issuer JWKS, that means a token minted for one service is accepted verbatim by every other -
- * `audience` is what makes "this token was meant for me" a cryptographic statement rather than a
- * convention.
- */
-export interface IJWTVerifyOptions {
-    /** Expected `aud`. Setting it makes the claim required. Matching is jose's OVERLAP semantics, not equality: a token carrying `['a','b']` satisfies `audience: 'a'`. Enforce single-valued audiences at issue time if that matters. */
-    audience?: string | string[];
-    /** Expected `iss`. Setting it makes the claim required. */
-    issuer?: string | string[];
-    /** Expected `sub`. Setting it makes the claim required. */
-    subject?: string;
-    /** Clock skew tolerance: seconds, or a jose duration string such as `'30 seconds'`. */
-    clockTolerance?: string | number;
-    /** Accepted JWS `alg` header values. Unset means the accepted algorithm is decided entirely by what the JWKS serves. */
-    algorithms?: string[];
-    /** Caps elapsed time since `iat`. The real replay window for a short-lived assertion, independent of whatever `exp` the caller chose to stamp. */
-    maxTokenAge?: string | number;
-    /** Expected JWS `typ` header. The standard defence against cross-token-type confusion when one JWKS serves more than one kind of token. */
-    typ?: string;
-    /** Claims that must be present, beyond those implied by the checks above. */
-    requiredClaims?: string[];
-}
-/** Default `iss` / `aud` stamped on every issued token. Configured values are AUTHORITATIVE - see {@link IJWTIssueClaims}. */
-export interface IJWTSignOptions {
-    issuer?: string;
-    audience?: string | string[];
-}
-/**
- * Per-token registered claims, passed to `generate()`.
- *
- * This is the supported way to vary `aud` or `sub` per token. Putting them on the payload used to
- * work by accident - `iss`, `aud`, `sub` and `jti` ride through the AES envelope in the clear
- * because they are standard JWT fields - but a claim the payload can set is a claim any caller who
- * shapes the payload can forge. These win over {@link IJWTSignOptions}; the payload never does.
- */
-export interface IJWTIssueClaims {
-    issuer?: string;
-    audience?: string | string[];
-    subject?: string;
-    jwtId?: string;
-}
-export interface IJWSTokenServiceOptions {
-    headerAlgorithm?: string;
-    jwtSecret: string;
-    getTokenExpiresFn: TGetTokenExpiresFn;
-    aesAlgorithm?: AESAlgorithmType;
-    applicationSecret?: string;
-    fieldCodecs?: IPayloadFieldCodec[];
-    /** Overrides the payload cipher - pass `LegacyAES` to keep reading tokens issued before the PBKDF2 envelope. */
-    cipher?: IPayloadCipher;
-    /** Claim checks applied on verify. Unset means signature and time claims only. */
-    verify?: IJWTVerifyOptions;
-    /** Claims stamped on every issued token. A configured value WINS over one supplied in the payload. */
-    sign?: IJWTSignOptions;
-}
-export type TJWKSAlgorithm = 'ES256' | 'RS256' | 'EdDSA';
-export interface IJWKSIssuerOptions {
-    mode: typeof JWKSModes.ISSUER;
-    algorithm: TJWKSAlgorithm;
-    rest?: {
-        path: string;
-    };
-    keys: {
-        driver: TJWKSKeyDriver;
-        format: TJWKSKeyFormat;
-        private: string;
-        public: string;
-    };
-    kid: string;
-    getTokenExpiresFn: TGetTokenExpiresFn;
-    aesAlgorithm?: AESAlgorithmType;
-    applicationSecret?: string;
-    fieldCodecs?: IPayloadFieldCodec[];
-    /** Overrides the payload cipher - pass `LegacyAES` to keep reading tokens issued before the PBKDF2 envelope. */
-    cipher?: IPayloadCipher;
-    /** Claim checks applied on verify. Unset means signature and time claims only. */
-    verify?: IJWTVerifyOptions;
-    /** Claims stamped on every issued token. A configured value WINS over one supplied in the payload. */
-    sign?: IJWTSignOptions;
-}
-export interface IJWKSVerifierOptions {
-    mode: typeof JWKSModes.VERIFIER;
-    jwksUrl: string;
-    cacheTtlMs?: number;
-    cooldownMs?: number;
-    aesAlgorithm?: AESAlgorithmType;
-    applicationSecret?: string;
-    fieldCodecs?: IPayloadFieldCodec[];
-    /** Overrides the payload cipher - pass `LegacyAES` to keep reading tokens issued before the PBKDF2 envelope. */
-    cipher?: IPayloadCipher;
-    /** Claim checks applied on verify. Unset means signature and time claims only. */
-    verify?: IJWTVerifyOptions;
-}
-export type TJWKSTokenServiceOptions = IJWKSIssuerOptions | IJWKSVerifierOptions;
-export type TJWTTokenServiceOptions = {
-    standard: typeof JOSEStandards.JWS;
-    options: IJWSTokenServiceOptions;
-} | {
-    standard: typeof JOSEStandards.JWKS;
-    options: TJWKSTokenServiceOptions;
-};
-export interface IJWTTokenPayload extends JWTPayload, IAuthUser {
-    userId: IdType;
-    roles: {
-        id: IdType;
-        identifier: string;
-        priority: number;
-    }[];
-    clientId?: string;
-    provider?: string;
-    email?: string;
-    name?: string;
-    [extra: string | symbol]: any;
-}
-export interface IPayloadFieldCodec<T = unknown> {
-    key: string;
-    serialize(opts: {
-        value: T;
-    }): string;
-    deserialize(opts: {
-        raw: string;
-    }): T;
-}
-export type TGetTokenExpiresFn = () => ValueOrPromise<number>;
-//# sourceMappingURL=jwt.d.ts.map

package/dist/cjs/base/auth/authenticate/common/types/jwt.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"jwt.d.ts","sourceRoot":"","sources":["../../../../../../../src/base/auth/authenticate/common/types/jwt.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,sBAAsB,CAAC;AACnD,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,+BAA+B,CAAC;AACpE,OAAO,KAAK,EAAE,gBAAgB,EAAE,cAAc,EAAE,MAAM,6BAA6B,CAAC;AACpF,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,MAAM,CAAC;AACvC,OAAO,KAAK,EAAE,aAAa,EAAE,SAAS,EAAE,cAAc,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AAC7F,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,YAAY,CAAC;AAE5C;;;;;;;;;GASG;AACH,MAAM,WAAW,iBAAiB;IAChC,sOAAsO;IACtO,QAAQ,CAAC,EAAE,MAAM,GAAG,MAAM,EAAE,CAAC;IAE7B,2DAA2D;IAC3D,MAAM,CAAC,EAAE,MAAM,GAAG,MAAM,EAAE,CAAC;IAE3B,2DAA2D;IAC3D,OAAO,CAAC,EAAE,MAAM,CAAC;IAEjB,uFAAuF;IACvF,cAAc,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC;IAEjC,wHAAwH;IACxH,UAAU,CAAC,EAAE,MAAM,EAAE,CAAC;IAEtB,kJAAkJ;IAClJ,WAAW,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC;IAE9B,2IAA2I;IAC3I,GAAG,CAAC,EAAE,MAAM,CAAC;IAEb,6EAA6E;IAC7E,cAAc,CAAC,EAAE,MAAM,EAAE,CAAC;CAC3B;AAED,8HAA8H;AAC9H,MAAM,WAAW,eAAe;IAC9B,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,QAAQ,CAAC,EAAE,MAAM,GAAG,MAAM,EAAE,CAAC;CAC9B;AAED;;;;;;;GAOG;AACH,MAAM,WAAW,eAAe;IAC9B,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,QAAQ,CAAC,EAAE,MAAM,GAAG,MAAM,EAAE,CAAC;IAC7B,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,uBAAuB;IACtC,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,SAAS,EAAE,MAAM,CAAC;IAClB,iBAAiB,EAAE,kBAAkB,CAAC;IACtC,YAAY,CAAC,EAAE,gBAAgB,CAAC;IAChC,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,WAAW,CAAC,EAAE,kBAAkB,EAAE,CAAC;IACnC,gHAAgH;IAChH,MAAM,CAAC,EAAE,cAAc,CAAC;IAExB,kFAAkF;IAClF,MAAM,CAAC,EAAE,iBAAiB,CAAC;IAE3B,sGAAsG;IACtG,IAAI,CAAC,EAAE,eAAe,CAAC;CACxB;AAED,MAAM,MAAM,cAAc,GAAG,OAAO,GAAG,OAAO,GAAG,OAAO,CAAC;AAEzD,MAAM,WAAW,kBAAkB;IACjC,IAAI,EAAE,OAAO,SAAS,CAAC,MAAM,CAAC;IAC9B,SAAS,EAAE,cAAc,CAAC;IAC1B,IAAI,CAAC,EAAE;QAAE,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC;IACxB,IAAI,EAAE;QACJ,MAAM,EAAE,cAAc,CAAC;QACvB,MAAM,EAAE,cAAc,CAAC;QACvB,OAAO,EAAE,MAAM,CAAC;QAChB,MAAM,EAAE,MAAM,CAAC;KAChB,CAAC;IACF,GAAG,EAAE,MAAM,CAAC;IACZ,iBAAiB,EAAE,kBAAkB,CAAC;IACtC,YAAY,CAAC,EAAE,gBAAgB,CAAC;IAChC,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,WAAW,CAAC,EAAE,kBAAkB,EAAE,CAAC;IACnC,gHAAgH;IAChH,MAAM,CAAC,EAAE,cAAc,CAAC;IAExB,kFAAkF;IAClF,MAAM,CAAC,EAAE,iBAAiB,CAAC;IAE3B,sGAAsG;IACtG,IAAI,CAAC,EAAE,eAAe,CAAC;CACxB;AAED,MAAM,WAAW,oBAAoB;IACnC,IAAI,EAAE,OAAO,SAAS,CAAC,QAAQ,CAAC;IAChC,OAAO,EAAE,MAAM,CAAC;IAChB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,YAAY,CAAC,EAAE,gBAAgB,CAAC;IAChC,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,WAAW,CAAC,EAAE,kBAAkB,EAAE,CAAC;IACnC,gHAAgH;IAChH,MAAM,CAAC,EAAE,cAAc,CAAC;IAExB,kFAAkF;IAClF,MAAM,CAAC,EAAE,iBAAiB,CAAC;CAC5B;AAED,MAAM,MAAM,wBAAwB,GAAG,kBAAkB,GAAG,oBAAoB,CAAC;AAEjF,MAAM,MAAM,uBAAuB,GAC/B;IAAE,QAAQ,EAAE,OAAO,aAAa,CAAC,GAAG,CAAC;IAAC,OAAO,EAAE,uBAAuB,CAAA;CAAE,GACxE;IAAE,QAAQ,EAAE,OAAO,aAAa,CAAC,IAAI,CAAC;IAAC,OAAO,EAAE,wBAAwB,CAAA;CAAE,CAAC;AAE/E,MAAM,WAAW,gBAAiB,SAAQ,UAAU,EAAE,SAAS;IAC7D,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,UAAU,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAA;KAAE,EAAE,CAAC;IAE9D,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,IAAI,CAAC,EAAE,MAAM,CAAC;IAEd,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,GAAG,GAAG,CAAC;CAC/B;AAED,MAAM,WAAW,kBAAkB,CAAC,CAAC,GAAG,OAAO;IAC7C,GAAG,EAAE,MAAM,CAAC;IACZ,SAAS,CAAC,IAAI,EAAE;QAAE,KAAK,EAAE,CAAC,CAAA;KAAE,GAAG,MAAM,CAAC;IACtC,WAAW,CAAC,IAAI,EAAE;QAAE,GAAG,EAAE,MAAM,CAAA;KAAE,GAAG,CAAC,CAAC;CACvC;AAED,MAAM,MAAM,kBAAkB,GAAG,MAAM,cAAc,CAAC,MAAM,CAAC,CAAC"}

package/dist/cjs/base/auth/authenticate/common/types/jwt.js

@@ -1,3 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-//# sourceMappingURL=jwt.js.map

package/dist/cjs/base/auth/authenticate/common/types/jwt.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"jwt.js","sourceRoot":"","sources":["../../../../../../../src/base/auth/authenticate/common/types/jwt.ts"],"names":[],"mappings":"","sourcesContent":["import type { IdType } from '@/base/models/common';\nimport type { ValueOrPromise } from '@venizia/ignis-helpers/common';\nimport type { AESAlgorithmType, IPayloadCipher } from '@venizia/ignis-helpers/core';\nimport type { JWTPayload } from 'jose';\nimport type { JOSEStandards, JWKSModes, TJWKSKeyDriver, TJWKSKeyFormat } from '../constants';\nimport type { IAuthUser } from './strategy';\n\n/**\n * Claim checks applied when VERIFYING a JWT. Field names and types mirror jose's `JWTVerifyOptions`\n * exactly, so this is a pass-through with no translation layer.\n *\n * Every field is optional and unset by default, which is today's behaviour: nothing is checked\n * beyond the signature and the time claims. In a fleet where every verifier points at the same\n * issuer JWKS, that means a token minted for one service is accepted verbatim by every other -\n * `audience` is what makes \"this token was meant for me\" a cryptographic statement rather than a\n * convention.\n */\nexport interface IJWTVerifyOptions {\n  /** Expected `aud`. Setting it makes the claim required. Matching is jose's OVERLAP semantics, not equality: a token carrying `['a','b']` satisfies `audience: 'a'`. Enforce single-valued audiences at issue time if that matters. */\n  audience?: string | string[];\n\n  /** Expected `iss`. Setting it makes the claim required. */\n  issuer?: string | string[];\n\n  /** Expected `sub`. Setting it makes the claim required. */\n  subject?: string;\n\n  /** Clock skew tolerance: seconds, or a jose duration string such as `'30 seconds'`. */\n  clockTolerance?: string | number;\n\n  /** Accepted JWS `alg` header values. Unset means the accepted algorithm is decided entirely by what the JWKS serves. */\n  algorithms?: string[];\n\n  /** Caps elapsed time since `iat`. The real replay window for a short-lived assertion, independent of whatever `exp` the caller chose to stamp. */\n  maxTokenAge?: string | number;\n\n  /** Expected JWS `typ` header. The standard defence against cross-token-type confusion when one JWKS serves more than one kind of token. */\n  typ?: string;\n\n  /** Claims that must be present, beyond those implied by the checks above. */\n  requiredClaims?: string[];\n}\n\n/** Default `iss` / `aud` stamped on every issued token. Configured values are AUTHORITATIVE - see {@link IJWTIssueClaims}. */\nexport interface IJWTSignOptions {\n  issuer?: string;\n  audience?: string | string[];\n}\n\n/**\n * Per-token registered claims, passed to `generate()`.\n *\n * This is the supported way to vary `aud` or `sub` per token. Putting them on the payload used to\n * work by accident - `iss`, `aud`, `sub` and `jti` ride through the AES envelope in the clear\n * because they are standard JWT fields - but a claim the payload can set is a claim any caller who\n * shapes the payload can forge. These win over {@link IJWTSignOptions}; the payload never does.\n */\nexport interface IJWTIssueClaims {\n  issuer?: string;\n  audience?: string | string[];\n  subject?: string;\n  jwtId?: string;\n}\n\nexport interface IJWSTokenServiceOptions {\n  headerAlgorithm?: string;\n  jwtSecret: string;\n  getTokenExpiresFn: TGetTokenExpiresFn;\n  aesAlgorithm?: AESAlgorithmType;\n  applicationSecret?: string;\n  fieldCodecs?: IPayloadFieldCodec[];\n  /** Overrides the payload cipher - pass `LegacyAES` to keep reading tokens issued before the PBKDF2 envelope. */\n  cipher?: IPayloadCipher;\n\n  /** Claim checks applied on verify. Unset means signature and time claims only. */\n  verify?: IJWTVerifyOptions;\n\n  /** Claims stamped on every issued token. A configured value WINS over one supplied in the payload. */\n  sign?: IJWTSignOptions;\n}\n\nexport type TJWKSAlgorithm = 'ES256' | 'RS256' | 'EdDSA';\n\nexport interface IJWKSIssuerOptions {\n  mode: typeof JWKSModes.ISSUER;\n  algorithm: TJWKSAlgorithm;\n  rest?: { path: string };\n  keys: {\n    driver: TJWKSKeyDriver;\n    format: TJWKSKeyFormat;\n    private: string; // Key content (text) or file path (file) — PEM or JWK based on format\n    public: string; // Key content (text) or file path (file) — PEM or JWK based on format\n  };\n  kid: string;\n  getTokenExpiresFn: TGetTokenExpiresFn;\n  aesAlgorithm?: AESAlgorithmType;\n  applicationSecret?: string;\n  fieldCodecs?: IPayloadFieldCodec[];\n  /** Overrides the payload cipher - pass `LegacyAES` to keep reading tokens issued before the PBKDF2 envelope. */\n  cipher?: IPayloadCipher;\n\n  /** Claim checks applied on verify. Unset means signature and time claims only. */\n  verify?: IJWTVerifyOptions;\n\n  /** Claims stamped on every issued token. A configured value WINS over one supplied in the payload. */\n  sign?: IJWTSignOptions;\n}\n\nexport interface IJWKSVerifierOptions {\n  mode: typeof JWKSModes.VERIFIER;\n  jwksUrl: string;\n  cacheTtlMs?: number; // Default: 43_200_000 (12h)\n  cooldownMs?: number; // Default: 30_000 (30s)\n  aesAlgorithm?: AESAlgorithmType;\n  applicationSecret?: string;\n  fieldCodecs?: IPayloadFieldCodec[];\n  /** Overrides the payload cipher - pass `LegacyAES` to keep reading tokens issued before the PBKDF2 envelope. */\n  cipher?: IPayloadCipher;\n\n  /** Claim checks applied on verify. Unset means signature and time claims only. */\n  verify?: IJWTVerifyOptions;\n}\n\nexport type TJWKSTokenServiceOptions = IJWKSIssuerOptions | IJWKSVerifierOptions;\n\nexport type TJWTTokenServiceOptions =\n  | { standard: typeof JOSEStandards.JWS; options: IJWSTokenServiceOptions }\n  | { standard: typeof JOSEStandards.JWKS; options: TJWKSTokenServiceOptions };\n\nexport interface IJWTTokenPayload extends JWTPayload, IAuthUser {\n  userId: IdType;\n  roles: { id: IdType; identifier: string; priority: number }[];\n\n  clientId?: string;\n  provider?: string;\n  email?: string;\n  name?: string;\n\n  [extra: string | symbol]: any;\n}\n\nexport interface IPayloadFieldCodec<T = unknown> {\n  key: string;\n  serialize(opts: { value: T }): string;\n  deserialize(opts: { raw: string }): T;\n}\n\nexport type TGetTokenExpiresFn = () => ValueOrPromise<number>;\n"]}

package/dist/cjs/base/auth/authenticate/common/types/options.d.ts

@@ -1,15 +0,0 @@
-import type { TBasicTokenServiceOptions } from './basic';
-import type { TJWTTokenServiceOptions } from './jwt';
-import type { TAuthenticationRestOptions } from './rest';
-import type { IServiceAuthOptions } from './service';
-/**
- * Composes the four topic option types into the framework's single authenticate config knob.
- * The only file in this folder allowed more than one sibling import - it is their parent.
- */
-export interface IAuthenticateOptions {
-    restOptions?: TAuthenticationRestOptions;
-    jwtOptions?: TJWTTokenServiceOptions;
-    basicOptions?: TBasicTokenServiceOptions;
-    serviceOptions?: IServiceAuthOptions;
-}
-//# sourceMappingURL=options.d.ts.map

package/dist/cjs/base/auth/authenticate/common/types/options.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"options.d.ts","sourceRoot":"","sources":["../../../../../../../src/base/auth/authenticate/common/types/options.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,SAAS,CAAC;AACzD,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,OAAO,CAAC;AACrD,OAAO,KAAK,EAAE,0BAA0B,EAAE,MAAM,QAAQ,CAAC;AACzD,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,WAAW,CAAC;AAErD;;;GAGG;AACH,MAAM,WAAW,oBAAoB;IACnC,WAAW,CAAC,EAAE,0BAA0B,CAAC;IACzC,UAAU,CAAC,EAAE,uBAAuB,CAAC;IACrC,YAAY,CAAC,EAAE,yBAAyB,CAAC;IACzC,cAAc,CAAC,EAAE,mBAAmB,CAAC;CACtC"}

package/dist/cjs/base/auth/authenticate/common/types/options.js

@@ -1,3 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-//# sourceMappingURL=options.js.map

package/dist/cjs/base/auth/authenticate/common/types/options.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"options.js","sourceRoot":"","sources":["../../../../../../../src/base/auth/authenticate/common/types/options.ts"],"names":[],"mappings":"","sourcesContent":["import type { TBasicTokenServiceOptions } from './basic';\nimport type { TJWTTokenServiceOptions } from './jwt';\nimport type { TAuthenticationRestOptions } from './rest';\nimport type { IServiceAuthOptions } from './service';\n\n/**\n * Composes the four topic option types into the framework's single authenticate config knob.\n * The only file in this folder allowed more than one sibling import - it is their parent.\n */\nexport interface IAuthenticateOptions {\n  restOptions?: TAuthenticationRestOptions;\n  jwtOptions?: TJWTTokenServiceOptions;\n  basicOptions?: TBasicTokenServiceOptions;\n  serviceOptions?: IServiceAuthOptions;\n}\n"]}

package/dist/cjs/base/auth/authenticate/common/types/rest.d.ts

@@ -1,49 +0,0 @@
-import type { TAnyObjectSchema } from '../../../../controllers/common/schema-builders';
-export type TDefineAuthControllerOpts = {
-    restPath?: string;
-    serviceKey: string;
-    requireAuthenticatedSignUp?: boolean;
-    payload?: {
-        signIn?: {
-            request: {
-                schema: TAnyObjectSchema;
-            };
-            response: {
-                schema: TAnyObjectSchema;
-            };
-        };
-        signUp?: {
-            request: {
-                schema: TAnyObjectSchema;
-            };
-            response: {
-                schema: TAnyObjectSchema;
-            };
-        };
-        changePassword?: {
-            request: {
-                schema?: TAnyObjectSchema;
-            };
-            response: {
-                schema: TAnyObjectSchema;
-            };
-        };
-        refreshToken?: {
-            response: {
-                schema: TAnyObjectSchema;
-            };
-        };
-        getUserInformation?: {
-            response: {
-                schema: TAnyObjectSchema;
-            };
-        };
-    };
-};
-export type TAuthenticationRestOptions = {} & ({
-    useAuthController?: false | undefined;
-} | {
-    useAuthController: true;
-    controllerOpts: TDefineAuthControllerOpts;
-});
-//# sourceMappingURL=rest.d.ts.map

package/dist/cjs/base/auth/authenticate/common/types/rest.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"rest.d.ts","sourceRoot":"","sources":["../../../../../../../src/base/auth/authenticate/common/types/rest.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,2CAA2C,CAAC;AAElF,MAAM,MAAM,yBAAyB,GAAG;IACtC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,MAAM,CAAC;IACnB,0BAA0B,CAAC,EAAE,OAAO,CAAC;IACrC,OAAO,CAAC,EAAE;QACR,MAAM,CAAC,EAAE;YACP,OAAO,EAAE;gBAAE,MAAM,EAAE,gBAAgB,CAAA;aAAE,CAAC;YACtC,QAAQ,EAAE;gBAAE,MAAM,EAAE,gBAAgB,CAAA;aAAE,CAAC;SACxC,CAAC;QACF,MAAM,CAAC,EAAE;YACP,OAAO,EAAE;gBAAE,MAAM,EAAE,gBAAgB,CAAA;aAAE,CAAC;YACtC,QAAQ,EAAE;gBAAE,MAAM,EAAE,gBAAgB,CAAA;aAAE,CAAC;SACxC,CAAC;QACF,cAAc,CAAC,EAAE;YACf,OAAO,EAAE;gBAAE,MAAM,CAAC,EAAE,gBAAgB,CAAA;aAAE,CAAC;YACvC,QAAQ,EAAE;gBAAE,MAAM,EAAE,gBAAgB,CAAA;aAAE,CAAC;SACxC,CAAC;QACF,YAAY,CAAC,EAAE;YACb,QAAQ,EAAE;gBAAE,MAAM,EAAE,gBAAgB,CAAA;aAAE,CAAC;SACxC,CAAC;QACF,kBAAkB,CAAC,EAAE;YACnB,QAAQ,EAAE;gBAAE,MAAM,EAAE,gBAAgB,CAAA;aAAE,CAAC;SACxC,CAAC;KACH,CAAC;CACH,CAAC;AAEF,MAAM,MAAM,0BAA0B,GAAG,EAAE,GAAG,CAC1C;IAAE,iBAAiB,CAAC,EAAE,KAAK,GAAG,SAAS,CAAA;CAAE,GACzC;IACE,iBAAiB,EAAE,IAAI,CAAC;IACxB,cAAc,EAAE,yBAAyB,CAAC;CAC3C,CACJ,CAAC"}

package/dist/cjs/base/auth/authenticate/common/types/rest.js

@@ -1,3 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-//# sourceMappingURL=rest.js.map

package/dist/cjs/base/auth/authenticate/common/types/rest.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"rest.js","sourceRoot":"","sources":["../../../../../../../src/base/auth/authenticate/common/types/rest.ts"],"names":[],"mappings":"","sourcesContent":["import type { TAnyObjectSchema } from '@/base/controllers/common/schema-builders';\n\nexport type TDefineAuthControllerOpts = {\n  restPath?: string;\n  serviceKey: string;\n  requireAuthenticatedSignUp?: boolean;\n  payload?: {\n    signIn?: {\n      request: { schema: TAnyObjectSchema };\n      response: { schema: TAnyObjectSchema };\n    };\n    signUp?: {\n      request: { schema: TAnyObjectSchema };\n      response: { schema: TAnyObjectSchema };\n    };\n    changePassword?: {\n      request: { schema?: TAnyObjectSchema };\n      response: { schema: TAnyObjectSchema };\n    };\n    refreshToken?: {\n      response: { schema: TAnyObjectSchema };\n    };\n    getUserInformation?: {\n      response: { schema: TAnyObjectSchema };\n    };\n  };\n};\n\nexport type TAuthenticationRestOptions = {} & (\n  | { useAuthController?: false | undefined }\n  | {\n      useAuthController: true;\n      controllerOpts: TDefineAuthControllerOpts;\n    }\n);\n"]}