@venizia/ignis-kernel 0.4.3 → 0.4.4

package/dist/cjs/base/auth/authenticate/common/types/service.d.ts

@@ -1,95 +0,0 @@
-import type { TContext } from '../../../../controllers/common/types';
-import type { TNullable, ValueOrPromise } from '@venizia/ignis-helpers/common';
-import type { Env } from 'hono';
-import type { JWTPayload } from 'jose';
-import type { TJWKSKeyDriver, TJWKSKeyFormat } from '../constants';
-import type { IAuthUser } from './strategy';
-/**
- * The request binding, following RFC 9449's `htm`/`htu`. A captured assertion cannot be replayed
- * against a different method or path.
- *
- * `htu` is the percent-ENCODED pathname on both ends. Compare it against
- * `new URL(context.req.url).pathname`, never `context.req.path` - Hono hands that one back DECODED,
- * so any route carrying a space or a non-ASCII slug would never match what the caller signed.
- */
-export interface IServiceAssertionClaims extends JWTPayload {
-    htm: string;
-    htu: string;
-}
-/**
- * One entry in the caller allowlist: the JWKS url, or that url plus settings for this caller alone.
- */
-export type TServiceCallerEntry = string | {
-    jwksUrl: string;
-    /** Widens the accepted age for THIS caller only. Falls back to the service-wide setting. */
-    acceptMaxAgeSeconds?: number;
-};
-/** Service-to-service authentication: an Ed25519 assertion per request, verified against the caller's JWKS. */
-export interface IServiceAuthOptions<E extends Env = Env> {
-    /** What this service calls itself: the `iss` it stamps, and the `aud` it demands. */
-    name: string;
-    /**
-     * Present only on a service that CALLS OUT. Absent means verify-only, and no certs route is
-     * mounted - which is the common case, since most services are called and never call.
-     */
-    keys?: {
-        driver: TJWKSKeyDriver;
-        format: TJWKSKeyFormat;
-        /** PEM or JWK by `format`; content for the `text` driver, a path for `file`. */
-        private: string;
-        public: string;
-        kid?: string;
-    };
-    /**
-     * Caller name to its JWKS url. THIS IS ALSO THE ALLOWLIST - a name absent from the map cannot
-     * call, and an empty map correctly allows nobody.
-     *
-     * The bare-string form is the common case. The object form exists to widen the accepted age for
-     * ONE caller: a nightly batch may legitimately need more slack than an interactive service, and
-     * granting it per caller keeps the concession named and visible in config.
-     */
-    callers?: Record<string, TServiceCallerEntry>;
-    /** Where the certs route is mounted. Defaults to `ServiceAssertion.DEFAULT_REST_PATH`. */
-    rest?: {
-        path: string;
-    };
-    /**
-     * How long the assertions this service MINTS stay valid. Only meaningful where `keys` is set.
-     */
-    signLifetimeSeconds?: number;
-    /**
-     * The oldest assertion this service ACCEPTS, measured from `iat`.
-     *
-     * Deliberately separate from `signLifetimeSeconds`, and deliberately not requestable by the
-     * caller. The caller already controls `exp` - it signs the token - so this is the only bound that
-     * survives a compromised caller. A per-caller override belongs in {@link callers}, never in the
-     * assertion.
-     *
-     * Composes with `clockToleranceSeconds`: the real acceptance window is the sum of the two.
-     */
-    acceptMaxAgeSeconds?: number;
-    /**
-     * Clock skew allowance. A SECURITY knob, not an operational one.
-     *
-     * Its job is the future case: two machines never agree to the second, and without it a caller one
-     * second ahead is refused outright. But it also widens the REPLAY window second for second - a
-     * callee accepting an `iat` 5s in its own future keeps accepting that token for the rest of the
-     * window too. Measured at the defaults: 65s accepted on our clock, 70s of wall-clock life for a
-     * capture minted by a caller running the full tolerance fast.
-     */
-    clockToleranceSeconds?: number;
-    jwks?: {
-        cacheMaxAgeMs?: number;
-        cooldownMs?: number;
-    };
-    /**
-     * WHO a verified assertion acts as. The framework has already proven the caller; this only maps a
-     * caller name onto an application principal. Return `null` to refuse a caller the allowlist
-     * admits but the application does not recognise.
-     */
-    resolvePrincipal: (opts: {
-        issuer: string;
-        context: TContext<E, string>;
-    }) => ValueOrPromise<TNullable<IAuthUser>>;
-}
-//# sourceMappingURL=service.d.ts.map

package/dist/cjs/base/auth/authenticate/common/types/service.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"service.d.ts","sourceRoot":"","sources":["../../../../../../../src/base/auth/authenticate/common/types/service.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,iCAAiC,CAAC;AAChE,OAAO,KAAK,EAAE,SAAS,EAAE,cAAc,EAAE,MAAM,+BAA+B,CAAC;AAC/E,OAAO,KAAK,EAAE,GAAG,EAAE,MAAM,MAAM,CAAC;AAChC,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,MAAM,CAAC;AACvC,OAAO,KAAK,EAAE,cAAc,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AACnE,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,YAAY,CAAC;AAE5C;;;;;;;GAOG;AACH,MAAM,WAAW,uBAAwB,SAAQ,UAAU;IACzD,GAAG,EAAE,MAAM,CAAC;IACZ,GAAG,EAAE,MAAM,CAAC;CACb;AAED;;GAEG;AACH,MAAM,MAAM,mBAAmB,GAC3B,MAAM,GACN;IACE,OAAO,EAAE,MAAM,CAAC;IAChB,4FAA4F;IAC5F,mBAAmB,CAAC,EAAE,MAAM,CAAC;CAC9B,CAAC;AAEN,+GAA+G;AAC/G,MAAM,WAAW,mBAAmB,CAAC,CAAC,SAAS,GAAG,GAAG,GAAG;IACtD,qFAAqF;IACrF,IAAI,EAAE,MAAM,CAAC;IAEb;;;OAGG;IACH,IAAI,CAAC,EAAE;QACL,MAAM,EAAE,cAAc,CAAC;QACvB,MAAM,EAAE,cAAc,CAAC;QACvB,gFAAgF;QAChF,OAAO,EAAE,MAAM,CAAC;QAChB,MAAM,EAAE,MAAM,CAAC;QACf,GAAG,CAAC,EAAE,MAAM,CAAC;KACd,CAAC;IAEF;;;;;;;OAOG;IACH,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,mBAAmB,CAAC,CAAC;IAE9C,0FAA0F;IAC1F,IAAI,CAAC,EAAE;QAAE,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC;IAExB;;OAEG;IACH,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAE7B;;;;;;;;;OASG;IACH,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAE7B;;;;;;;;OAQG;IACH,qBAAqB,CAAC,EAAE,MAAM,CAAC;IAE/B,IAAI,CAAC,EAAE;QAAE,aAAa,CAAC,EAAE,MAAM,CAAC;QAAC,UAAU,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IAEvD;;;;OAIG;IACH,gBAAgB,EAAE,CAAC,IAAI,EAAE;QACvB,MAAM,EAAE,MAAM,CAAC;QACf,OAAO,EAAE,QAAQ,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;KAC9B,KAAK,cAAc,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC,CAAC;CAC5C"}

package/dist/cjs/base/auth/authenticate/common/types/service.js

@@ -1,3 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-//# sourceMappingURL=service.js.map

package/dist/cjs/base/auth/authenticate/common/types/service.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"service.js","sourceRoot":"","sources":["../../../../../../../src/base/auth/authenticate/common/types/service.ts"],"names":[],"mappings":"","sourcesContent":["import type { TContext } from '@/base/controllers/common/types';\nimport type { TNullable, ValueOrPromise } from '@venizia/ignis-helpers/common';\nimport type { Env } from 'hono';\nimport type { JWTPayload } from 'jose';\nimport type { TJWKSKeyDriver, TJWKSKeyFormat } from '../constants';\nimport type { IAuthUser } from './strategy';\n\n/**\n * The request binding, following RFC 9449's `htm`/`htu`. A captured assertion cannot be replayed\n * against a different method or path.\n *\n * `htu` is the percent-ENCODED pathname on both ends. Compare it against\n * `new URL(context.req.url).pathname`, never `context.req.path` - Hono hands that one back DECODED,\n * so any route carrying a space or a non-ASCII slug would never match what the caller signed.\n */\nexport interface IServiceAssertionClaims extends JWTPayload {\n  htm: string;\n  htu: string;\n}\n\n/**\n * One entry in the caller allowlist: the JWKS url, or that url plus settings for this caller alone.\n */\nexport type TServiceCallerEntry =\n  | string\n  | {\n      jwksUrl: string;\n      /** Widens the accepted age for THIS caller only. Falls back to the service-wide setting. */\n      acceptMaxAgeSeconds?: number;\n    };\n\n/** Service-to-service authentication: an Ed25519 assertion per request, verified against the caller's JWKS. */\nexport interface IServiceAuthOptions<E extends Env = Env> {\n  /** What this service calls itself: the `iss` it stamps, and the `aud` it demands. */\n  name: string;\n\n  /**\n   * Present only on a service that CALLS OUT. Absent means verify-only, and no certs route is\n   * mounted - which is the common case, since most services are called and never call.\n   */\n  keys?: {\n    driver: TJWKSKeyDriver;\n    format: TJWKSKeyFormat;\n    /** PEM or JWK by `format`; content for the `text` driver, a path for `file`. */\n    private: string;\n    public: string;\n    kid?: string;\n  };\n\n  /**\n   * Caller name to its JWKS url. THIS IS ALSO THE ALLOWLIST - a name absent from the map cannot\n   * call, and an empty map correctly allows nobody.\n   *\n   * The bare-string form is the common case. The object form exists to widen the accepted age for\n   * ONE caller: a nightly batch may legitimately need more slack than an interactive service, and\n   * granting it per caller keeps the concession named and visible in config.\n   */\n  callers?: Record<string, TServiceCallerEntry>;\n\n  /** Where the certs route is mounted. Defaults to `ServiceAssertion.DEFAULT_REST_PATH`. */\n  rest?: { path: string };\n\n  /**\n   * How long the assertions this service MINTS stay valid. Only meaningful where `keys` is set.\n   */\n  signLifetimeSeconds?: number;\n\n  /**\n   * The oldest assertion this service ACCEPTS, measured from `iat`.\n   *\n   * Deliberately separate from `signLifetimeSeconds`, and deliberately not requestable by the\n   * caller. The caller already controls `exp` - it signs the token - so this is the only bound that\n   * survives a compromised caller. A per-caller override belongs in {@link callers}, never in the\n   * assertion.\n   *\n   * Composes with `clockToleranceSeconds`: the real acceptance window is the sum of the two.\n   */\n  acceptMaxAgeSeconds?: number;\n\n  /**\n   * Clock skew allowance. A SECURITY knob, not an operational one.\n   *\n   * Its job is the future case: two machines never agree to the second, and without it a caller one\n   * second ahead is refused outright. But it also widens the REPLAY window second for second - a\n   * callee accepting an `iat` 5s in its own future keeps accepting that token for the rest of the\n   * window too. Measured at the defaults: 65s accepted on our clock, 70s of wall-clock life for a\n   * capture minted by a caller running the full tolerance fast.\n   */\n  clockToleranceSeconds?: number;\n\n  jwks?: { cacheMaxAgeMs?: number; cooldownMs?: number };\n\n  /**\n   * WHO a verified assertion acts as. The framework has already proven the caller; this only maps a\n   * caller name onto an application principal. Return `null` to refuse a caller the allowlist\n   * admits but the application does not recognise.\n   */\n  resolvePrincipal: (opts: {\n    issuer: string;\n    context: TContext<E, string>;\n  }) => ValueOrPromise<TNullable<IAuthUser>>;\n}\n"]}

package/dist/cjs/base/auth/authenticate/common/types/strategy.d.ts

@@ -1,26 +0,0 @@
-import type { TContext } from '../../../../controllers/common/types';
-import type { IdType } from '../../../../models/common';
-import type { AnyObject } from '@venizia/ignis-helpers/common';
-import type { Env, MiddlewareHandler } from 'hono';
-import type { TChangePasswordRequest, TSignInRequest, TSignUpRequest } from '../../../models/requests';
-import type { TAuthMode } from '../constants';
-export interface IAuthUser {
-    userId: IdType;
-    [extra: string | symbol]: any;
-}
-export interface IAuthenticationStrategy<E extends Env = Env> {
-    name: string;
-    authenticate(context: TContext<E, string>): Promise<IAuthUser>;
-}
-export type TAuthenticateFn<RouteEnv extends Env = Env> = (opts: {
-    strategies: string[];
-    mode?: TAuthMode;
-}) => MiddlewareHandler<RouteEnv>;
-export interface IAuthService<E extends Env = Env, SIRQ extends TSignInRequest = TSignInRequest, SIRS = AnyObject, SURQ extends TSignUpRequest = TSignUpRequest, SURS = AnyObject, CPRQ extends TChangePasswordRequest = TChangePasswordRequest, CPRS = AnyObject, UIRQ = AnyObject, UIRS = AnyObject, RTRS = AnyObject> {
-    signIn(context: TContext<E>, opts: SIRQ): Promise<SIRS>;
-    signUp(context: TContext<E>, opts: SURQ): Promise<SURS>;
-    changePassword(context: TContext<E>, opts: CPRQ): Promise<CPRS>;
-    getUserInformation?(context: TContext<E>, opts: UIRQ): Promise<UIRS>;
-    refreshToken?(context: TContext<E>): Promise<RTRS>;
-}
-//# sourceMappingURL=strategy.d.ts.map

package/dist/cjs/base/auth/authenticate/common/types/strategy.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"strategy.d.ts","sourceRoot":"","sources":["../../../../../../../src/base/auth/authenticate/common/types/strategy.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,iCAAiC,CAAC;AAChE,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,sBAAsB,CAAC;AACnD,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,+BAA+B,CAAC;AAC/D,OAAO,KAAK,EAAE,GAAG,EAAE,iBAAiB,EAAE,MAAM,MAAM,CAAC;AACnD,OAAO,KAAK,EACV,sBAAsB,EACtB,cAAc,EACd,cAAc,EACf,MAAM,0BAA0B,CAAC;AAClC,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AAE9C,MAAM,WAAW,SAAS;IACxB,MAAM,EAAE,MAAM,CAAC;IACf,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,GAAG,GAAG,CAAC;CAC/B;AAED,MAAM,WAAW,uBAAuB,CAAC,CAAC,SAAS,GAAG,GAAG,GAAG;IAC1D,IAAI,EAAE,MAAM,CAAC;IACb,YAAY,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC,EAAE,MAAM,CAAC,GAAG,OAAO,CAAC,SAAS,CAAC,CAAC;CAChE;AAED,MAAM,MAAM,eAAe,CAAC,QAAQ,SAAS,GAAG,GAAG,GAAG,IAAI,CAAC,IAAI,EAAE;IAC/D,UAAU,EAAE,MAAM,EAAE,CAAC;IACrB,IAAI,CAAC,EAAE,SAAS,CAAC;CAClB,KAAK,iBAAiB,CAAC,QAAQ,CAAC,CAAC;AAElC,MAAM,WAAW,YAAY,CAC3B,CAAC,SAAS,GAAG,GAAG,GAAG,EAEnB,IAAI,SAAS,cAAc,GAAG,cAAc,EAC5C,IAAI,GAAG,SAAS,EAEhB,IAAI,SAAS,cAAc,GAAG,cAAc,EAC5C,IAAI,GAAG,SAAS,EAEhB,IAAI,SAAS,sBAAsB,GAAG,sBAAsB,EAC5D,IAAI,GAAG,SAAS,EAEhB,IAAI,GAAG,SAAS,EAChB,IAAI,GAAG,SAAS,EAEhB,IAAI,GAAG,SAAS;IAEhB,MAAM,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACxD,MAAM,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACxD,cAAc,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAChE,kBAAkB,CAAC,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACrE,YAAY,CAAC,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CACpD"}

package/dist/cjs/base/auth/authenticate/common/types/strategy.js

@@ -1,3 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-//# sourceMappingURL=strategy.js.map

package/dist/cjs/base/auth/authenticate/common/types/strategy.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"strategy.js","sourceRoot":"","sources":["../../../../../../../src/base/auth/authenticate/common/types/strategy.ts"],"names":[],"mappings":"","sourcesContent":["import type { TContext } from '@/base/controllers/common/types';\nimport type { IdType } from '@/base/models/common';\nimport type { AnyObject } from '@venizia/ignis-helpers/common';\nimport type { Env, MiddlewareHandler } from 'hono';\nimport type {\n  TChangePasswordRequest,\n  TSignInRequest,\n  TSignUpRequest,\n} from '../../../models/requests';\nimport type { TAuthMode } from '../constants';\n\nexport interface IAuthUser {\n  userId: IdType;\n  [extra: string | symbol]: any;\n}\n\nexport interface IAuthenticationStrategy<E extends Env = Env> {\n  name: string;\n  authenticate(context: TContext<E, string>): Promise<IAuthUser>;\n}\n\nexport type TAuthenticateFn<RouteEnv extends Env = Env> = (opts: {\n  strategies: string[];\n  mode?: TAuthMode;\n}) => MiddlewareHandler<RouteEnv>;\n\nexport interface IAuthService<\n  E extends Env = Env,\n  // SignIn types\n  SIRQ extends TSignInRequest = TSignInRequest,\n  SIRS = AnyObject,\n  // SignUp types\n  SURQ extends TSignUpRequest = TSignUpRequest,\n  SURS = AnyObject,\n  // ChangePassword types\n  CPRQ extends TChangePasswordRequest = TChangePasswordRequest,\n  CPRS = AnyObject,\n  // UserInformation types\n  UIRQ = AnyObject,\n  UIRS = AnyObject,\n  // RefreshToken types\n  RTRS = AnyObject,\n> {\n  signIn(context: TContext<E>, opts: SIRQ): Promise<SIRS>;\n  signUp(context: TContext<E>, opts: SURQ): Promise<SURS>;\n  changePassword(context: TContext<E>, opts: CPRQ): Promise<CPRS>;\n  getUserInformation?(context: TContext<E>, opts: UIRQ): Promise<UIRS>;\n  refreshToken?(context: TContext<E>): Promise<RTRS>;\n}\n"]}

package/dist/cjs/base/auth/authenticate/index.d.ts

@@ -1,5 +0,0 @@
-export * from './common';
-export * from './middlewares';
-export * from './providers';
-export * from './strategies';
-//# sourceMappingURL=index.d.ts.map

package/dist/cjs/base/auth/authenticate/index.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../src/base/auth/authenticate/index.ts"],"names":[],"mappings":"AAAA,cAAc,UAAU,CAAC;AACzB,cAAc,eAAe,CAAC;AAC9B,cAAc,aAAa,CAAC;AAC5B,cAAc,cAAc,CAAC"}

package/dist/cjs/base/auth/authenticate/index.js

@@ -1,21 +0,0 @@
-"use strict";
-var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    var desc = Object.getOwnPropertyDescriptor(m, k);
-    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
-      desc = { enumerable: true, get: function() { return m[k]; } };
-    }
-    Object.defineProperty(o, k2, desc);
-}) : (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    o[k2] = m[k];
-}));
-var __exportStar = (this && this.__exportStar) || function(m, exports) {
-    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
-};
-Object.defineProperty(exports, "__esModule", { value: true });
-__exportStar(require("./common"), exports);
-__exportStar(require("./middlewares"), exports);
-__exportStar(require("./providers"), exports);
-__exportStar(require("./strategies"), exports);
-//# sourceMappingURL=index.js.map

package/dist/cjs/base/auth/authenticate/index.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../../src/base/auth/authenticate/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,2CAAyB;AACzB,gDAA8B;AAC9B,8CAA4B;AAC5B,+CAA6B","sourcesContent":["export * from './common';\nexport * from './middlewares';\nexport * from './providers';\nexport * from './strategies';\n"]}

package/dist/cjs/base/auth/authenticate/middlewares/authenticate.middleware.d.ts

@@ -1,7 +0,0 @@
-import type { Env } from 'hono';
-import type { TAuthMode } from '../common';
-export declare const authenticate: (opts: {
-    strategies: string[];
-    mode?: TAuthMode;
-}) => import("hono").MiddlewareHandler<Env>;
-//# sourceMappingURL=authenticate.middleware.d.ts.map

package/dist/cjs/base/auth/authenticate/middlewares/authenticate.middleware.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"authenticate.middleware.d.ts","sourceRoot":"","sources":["../../../../../../src/base/auth/authenticate/middlewares/authenticate.middleware.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,GAAG,EAAE,MAAM,MAAM,CAAC;AAChC,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AAM3C,eAAO,MAAM,YAAY,GAAI,MAAM;IAAE,UAAU,EAAE,MAAM,EAAE,CAAC;IAAC,IAAI,CAAC,EAAE,SAAS,CAAA;CAAE,0CAE5E,CAAC"}

package/dist/cjs/base/auth/authenticate/middlewares/authenticate.middleware.js

@@ -1,11 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.authenticate = void 0;
-const providers_1 = require("../providers");
-const authenticationProvider = new providers_1.AuthenticationProvider();
-const authenticateFn = authenticationProvider.value();
-const authenticate = (opts) => {
-    return authenticateFn(opts);
-};
-exports.authenticate = authenticate;
-//# sourceMappingURL=authenticate.middleware.js.map

package/dist/cjs/base/auth/authenticate/middlewares/authenticate.middleware.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"authenticate.middleware.js","sourceRoot":"","sources":["../../../../../../src/base/auth/authenticate/middlewares/authenticate.middleware.ts"],"names":[],"mappings":";;;AAEA,4CAAsD;AAEtD,MAAM,sBAAsB,GAAG,IAAI,kCAAsB,EAAO,CAAC;AACjE,MAAM,cAAc,GAAG,sBAAsB,CAAC,KAAK,EAAE,CAAC;AAE/C,MAAM,YAAY,GAAG,CAAC,IAAgD,EAAE,EAAE;IAC/E,OAAO,cAAc,CAAC,IAAI,CAAC,CAAC;AAC9B,CAAC,CAAC;AAFW,QAAA,YAAY,gBAEvB","sourcesContent":["import type { Env } from 'hono';\nimport type { TAuthMode } from '../common';\nimport { AuthenticationProvider } from '../providers';\n\nconst authenticationProvider = new AuthenticationProvider<Env>();\nconst authenticateFn = authenticationProvider.value();\n\nexport const authenticate = (opts: { strategies: string[]; mode?: TAuthMode }) => {\n  return authenticateFn(opts);\n};\n"]}

package/dist/cjs/base/auth/authenticate/middlewares/index.d.ts

@@ -1,2 +0,0 @@
-export * from './authenticate.middleware';
-//# sourceMappingURL=index.d.ts.map

package/dist/cjs/base/auth/authenticate/middlewares/index.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../../src/base/auth/authenticate/middlewares/index.ts"],"names":[],"mappings":"AAAA,cAAc,2BAA2B,CAAC"}

package/dist/cjs/base/auth/authenticate/middlewares/index.js

@@ -1,18 +0,0 @@
-"use strict";
-var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    var desc = Object.getOwnPropertyDescriptor(m, k);
-    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
-      desc = { enumerable: true, get: function() { return m[k]; } };
-    }
-    Object.defineProperty(o, k2, desc);
-}) : (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    o[k2] = m[k];
-}));
-var __exportStar = (this && this.__exportStar) || function(m, exports) {
-    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
-};
-Object.defineProperty(exports, "__esModule", { value: true });
-__exportStar(require("./authenticate.middleware"), exports);
-//# sourceMappingURL=index.js.map

package/dist/cjs/base/auth/authenticate/middlewares/index.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../../../src/base/auth/authenticate/middlewares/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,4DAA0C","sourcesContent":["export * from './authenticate.middleware';\n"]}

package/dist/cjs/base/auth/authenticate/providers/authentication.provider.d.ts

@@ -1,13 +0,0 @@
-import { BaseHelper } from '@venizia/ignis-helpers/core';
-import type { IProvider } from '@venizia/ignis-inversion';
-import type { Env } from 'hono';
-import type { TAuthenticateFn } from '../common';
-export declare class AuthenticationProvider<RouteEnv extends Env = Env> extends BaseHelper implements IProvider<TAuthenticateFn<RouteEnv>> {
-    constructor();
-    value(): TAuthenticateFn<RouteEnv>;
-    private createAuthenticateMiddleware;
-    private executeAnyMode;
-    private executeAllMode;
-    private setCurrentUser;
-}
-//# sourceMappingURL=authentication.provider.d.ts.map

package/dist/cjs/base/auth/authenticate/providers/authentication.provider.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"authentication.provider.d.ts","sourceRoot":"","sources":["../../../../../../src/base/auth/authenticate/providers/authentication.provider.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,UAAU,EAAY,MAAM,6BAA6B,CAAC;AAEnE,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,0BAA0B,CAAC;AAC1D,OAAO,KAAK,EAAE,GAAG,EAAE,MAAM,MAAM,CAAC;AAEhC,OAAO,KAAK,EAAa,eAAe,EAAa,MAAM,WAAW,CAAC;AAIvE,qBAAa,sBAAsB,CAAC,QAAQ,SAAS,GAAG,GAAG,GAAG,CAC5D,SAAQ,UACR,YAAW,SAAS,CAAC,eAAe,CAAC,QAAQ,CAAC,CAAC;;IAM/C,KAAK,IAAI,eAAe,CAAC,QAAQ,CAAC;IAMlC,OAAO,CAAC,4BAA4B;YA+CtB,cAAc;YAsCd,cAAc;IAkC5B,OAAO,CAAC,cAAc;CAQvB"}

package/dist/cjs/base/auth/authenticate/providers/authentication.provider.js

@@ -1,119 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.AuthenticationProvider = void 0;
-const core_1 = require("@venizia/ignis-helpers/core");
-const common_1 = require("@venizia/ignis-helpers/common");
-const factory_1 = require("hono/factory");
-const common_2 = require("../common");
-const strategy_registry_1 = require("../strategies/strategy-registry");
-class AuthenticationProvider extends core_1.BaseHelper {
-    constructor() {
-        super({ scope: AuthenticationProvider.name });
-    }
-    value() {
-        return (opts) => {
-            return this.createAuthenticateMiddleware(opts);
-        };
-    }
-    createAuthenticateMiddleware(opts) {
-        const { strategies, mode = common_2.AuthenticationModes.ANY } = opts;
-        const registry = strategy_registry_1.AuthenticationStrategyRegistry.getInstance();
-        return (0, factory_1.createMiddleware)(async (context, next) => {
-            const isSkipAuthenticate = context.get(common_2.Authentication.SKIP_AUTHENTICATION);
-            if (isSkipAuthenticate) {
-                this.logger
-                    .for(this.createAuthenticateMiddleware.name)
-                    .debug('SKIP checking authentication | path: %s', context.req.path);
-                return next();
-            }
-            const isAuthenticated = context.get(common_2.Authentication.CURRENT_USER);
-            if (isAuthenticated) {
-                return next();
-            }
-            switch (mode) {
-                case common_2.AuthenticationModes.ANY: {
-                    await this.executeAnyMode({
-                        context: context,
-                        strategies,
-                        registry,
-                        next,
-                    });
-                    return;
-                }
-                case common_2.AuthenticationModes.ALL: {
-                    await this.executeAllMode({
-                        context: context,
-                        strategies,
-                        registry,
-                        next,
-                    });
-                    return;
-                }
-                default: {
-                    throw (0, core_1.getError)({
-                        statusCode: common_1.HTTP.ResultCodes.RS_5.InternalServerError,
-                        message: `Invalid authentication mode | mode: ${mode}`,
-                    });
-                }
-            }
-        });
-    }
-    async executeAnyMode(opts) {
-        const { context, strategies, registry, next } = opts;
-        // The first strategy's failure is the primary one - kept so the 401 carries WHY, instead of only which strategies were tried.
-        let primaryFailure;
-        for (const strategyName of strategies) {
-            try {
-                const strategy = registry.resolveStrategy({ name: strategyName });
-                const user = await strategy.authenticate(context);
-                this.setCurrentUser({ context, user });
-                break;
-            }
-            catch (error) {
-                primaryFailure ??= error;
-                this.logger
-                    .for(this.executeAnyMode.name)
-                    .debug('Strategy %s failed, trying next... | Error: %s', strategyName, error);
-            }
-        }
-        const currentUser = context.get(common_2.Authentication.CURRENT_USER);
-        if (!currentUser) {
-            throw (0, core_1.getError)({
-                error: common_2.AuthenticationErrors.FAILED,
-                message: `Authentication failed. Tried strategies: ${strategies.join(', ')}`,
-                logLevel: 'warn',
-                cause: primaryFailure,
-            });
-        }
-        await next();
-    }
-    async executeAllMode(opts) {
-        const { context, strategies, registry, next } = opts;
-        // Use the first strategy's user as the identity source - all must succeed but first wins for identity
-        let authUser = null;
-        for (const strategyName of strategies) {
-            const strategy = registry.resolveStrategy({ name: strategyName });
-            const user = await strategy.authenticate(context);
-            authUser ??= user;
-        }
-        if (authUser?.userId) {
-            this.setCurrentUser({ context, user: authUser });
-        }
-        else {
-            this.logger
-                .for(this.executeAllMode.name)
-                .error('Failed to identify authenticated user | user: %j | userId: %s', authUser, authUser?.userId);
-            throw (0, core_1.getError)({ error: common_2.AuthenticationErrors.USER_UNRESOLVED });
-        }
-        return next();
-    }
-    setCurrentUser(opts) {
-        const { context, user } = opts;
-        context.set(common_2.Authentication.CURRENT_USER, user);
-        if (user?.userId) {
-            context.set(common_2.Authentication.AUDIT_USER_ID, user.userId);
-        }
-    }
-}
-exports.AuthenticationProvider = AuthenticationProvider;
-//# sourceMappingURL=authentication.provider.js.map

package/dist/cjs/base/auth/authenticate/providers/authentication.provider.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"authentication.provider.js","sourceRoot":"","sources":["../../../../../../src/base/auth/authenticate/providers/authentication.provider.ts"],"names":[],"mappings":";;;AACA,sDAAmE;AACnE,0DAAqD;AAGrD,0CAAgD;AAEhD,sCAAsF;AACtF,uEAAiF;AAEjF,MAAa,sBACX,SAAQ,iBAAU;IAGlB;QACE,KAAK,CAAC,EAAE,KAAK,EAAE,sBAAsB,CAAC,IAAI,EAAE,CAAC,CAAC;IAChD,CAAC;IAED,KAAK;QACH,OAAO,CAAC,IAAI,EAAE,EAAE;YACd,OAAO,IAAI,CAAC,4BAA4B,CAAC,IAAI,CAAC,CAAC;QACjD,CAAC,CAAC;IACJ,CAAC;IAEO,4BAA4B,CAAC,IAAgD;QACnF,MAAM,EAAE,UAAU,EAAE,IAAI,GAAG,4BAAmB,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC;QAC5D,MAAM,QAAQ,GAAG,kDAA8B,CAAC,WAAW,EAAE,CAAC;QAE9D,OAAO,IAAA,0BAAgB,EAAC,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE;YAC9C,MAAM,kBAAkB,GAAG,OAAO,CAAC,GAAG,CAAC,uBAAc,CAAC,mBAAmB,CAAC,CAAC;YAC3E,IAAI,kBAAkB,EAAE,CAAC;gBACvB,IAAI,CAAC,MAAM;qBACR,GAAG,CAAC,IAAI,CAAC,4BAA4B,CAAC,IAAI,CAAC;qBAC3C,KAAK,CAAC,yCAAyC,EAAE,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;gBACtE,OAAO,IAAI,EAAE,CAAC;YAChB,CAAC;YAED,MAAM,eAAe,GAAG,OAAO,CAAC,GAAG,CAAC,uBAAc,CAAC,YAAY,CAAC,CAAC;YACjE,IAAI,eAAe,EAAE,CAAC;gBACpB,OAAO,IAAI,EAAE,CAAC;YAChB,CAAC;YAED,QAAQ,IAAI,EAAE,CAAC;gBACb,KAAK,4BAAmB,CAAC,GAAG,CAAC,CAAC,CAAC;oBAC7B,MAAM,IAAI,CAAC,cAAc,CAAC;wBACxB,OAAO,EAAE,OAAmB;wBAC5B,UAAU;wBACV,QAAQ;wBACR,IAAI;qBACL,CAAC,CAAC;oBACH,OAAO;gBACT,CAAC;gBACD,KAAK,4BAAmB,CAAC,GAAG,CAAC,CAAC,CAAC;oBAC7B,MAAM,IAAI,CAAC,cAAc,CAAC;wBACxB,OAAO,EAAE,OAAmB;wBAC5B,UAAU;wBACV,QAAQ;wBACR,IAAI;qBACL,CAAC,CAAC;oBACH,OAAO;gBACT,CAAC;gBACD,OAAO,CAAC,CAAC,CAAC;oBACR,MAAM,IAAA,eAAQ,EAAC;wBACb,UAAU,EAAE,aAAI,CAAC,WAAW,CAAC,IAAI,CAAC,mBAAmB;wBACrD,OAAO,EAAE,uCAAuC,IAAI,EAAE;qBACvD,CAAC,CAAC;gBACL,CAAC;YACH,CAAC;QACH,CAAC,CAAC,CAAC;IACL,CAAC;IAEO,KAAK,CAAC,cAAc,CAAC,IAK5B;QACC,MAAM,EAAE,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,IAAI,EAAE,GAAG,IAAI,CAAC;QAErD,8HAA8H;QAC9H,IAAI,cAAuB,CAAC;QAE5B,KAAK,MAAM,YAAY,IAAI,UAAU,EAAE,CAAC;YACtC,IAAI,CAAC;gBACH,MAAM,QAAQ,GAAG,QAAQ,CAAC,eAAe,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,CAAC,CAAC;gBAClE,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC;gBAClD,IAAI,CAAC,cAAc,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;gBACvC,MAAM;YACR,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,cAAc,KAAK,KAAK,CAAC;gBACzB,IAAI,CAAC,MAAM;qBACR,GAAG,CAAC,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC;qBAC7B,KAAK,CAAC,gDAAgD,EAAE,YAAY,EAAE,KAAK,CAAC,CAAC;YAClF,CAAC;QACH,CAAC;QAED,MAAM,WAAW,GAAG,OAAO,CAAC,GAAG,CAAC,uBAAc,CAAC,YAAY,CAAC,CAAC;QAC7D,IAAI,CAAC,WAAW,EAAE,CAAC;YACjB,MAAM,IAAA,eAAQ,EAAC;gBACb,KAAK,EAAE,6BAAoB,CAAC,MAAM;gBAClC,OAAO,EAAE,4CAA4C,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;gBAC5E,QAAQ,EAAE,MAAM;gBAChB,KAAK,EAAE,cAAc;aACtB,CAAC,CAAC;QACL,CAAC;QAED,MAAM,IAAI,EAAE,CAAC;IACf,CAAC;IAEO,KAAK,CAAC,cAAc,CAAC,IAK5B;QACC,MAAM,EAAE,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,IAAI,EAAE,GAAG,IAAI,CAAC;QAErD,sGAAsG;QACtG,IAAI,QAAQ,GAAqB,IAAI,CAAC;QAEtC,KAAK,MAAM,YAAY,IAAI,UAAU,EAAE,CAAC;YACtC,MAAM,QAAQ,GAAG,QAAQ,CAAC,eAAe,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,CAAC,CAAC;YAClE,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC;YAElD,QAAQ,KAAK,IAAI,CAAC;QACpB,CAAC;QAED,IAAI,QAAQ,EAAE,MAAM,EAAE,CAAC;YACrB,IAAI,CAAC,cAAc,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC;QACnD,CAAC;aAAM,CAAC;YACN,IAAI,CAAC,MAAM;iBACR,GAAG,CAAC,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC;iBAC7B,KAAK,CACJ,+DAA+D,EAC/D,QAAQ,EACR,QAAQ,EAAE,MAAM,CACjB,CAAC;YACJ,MAAM,IAAA,eAAQ,EAAC,EAAE,KAAK,EAAE,6BAAoB,CAAC,eAAe,EAAE,CAAC,CAAC;QAClE,CAAC;QAED,OAAO,IAAI,EAAE,CAAC;IAChB,CAAC;IAEO,cAAc,CAAC,IAA4C;QACjE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,GAAG,IAAI,CAAC;QAC/B,OAAO,CAAC,GAAG,CAAC,uBAAc,CAAC,YAAY,EAAE,IAAI,CAAC,CAAC;QAE/C,IAAI,IAAI,EAAE,MAAM,EAAE,CAAC;YACjB,OAAO,CAAC,GAAG,CAAC,uBAAc,CAAC,aAAa,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;QACzD,CAAC;IACH,CAAC;CACF;AA7ID,wDA6IC","sourcesContent":["import type { TContext } from '@/base/controllers/common/types';\nimport { BaseHelper, getError } from '@venizia/ignis-helpers/core';\nimport { HTTP } from '@venizia/ignis-helpers/common';\nimport type { IProvider } from '@venizia/ignis-inversion';\nimport type { Env } from 'hono';\nimport { createMiddleware } from 'hono/factory';\nimport type { IAuthUser, TAuthenticateFn, TAuthMode } from '../common';\nimport { Authentication, AuthenticationErrors, AuthenticationModes } from '../common';\nimport { AuthenticationStrategyRegistry } from '../strategies/strategy-registry';\n\nexport class AuthenticationProvider<RouteEnv extends Env = Env>\n  extends BaseHelper\n  implements IProvider<TAuthenticateFn<RouteEnv>>\n{\n  constructor() {\n    super({ scope: AuthenticationProvider.name });\n  }\n\n  value(): TAuthenticateFn<RouteEnv> {\n    return (opts) => {\n      return this.createAuthenticateMiddleware(opts);\n    };\n  }\n\n  private createAuthenticateMiddleware(opts: { strategies: string[]; mode?: TAuthMode }) {\n    const { strategies, mode = AuthenticationModes.ANY } = opts;\n    const registry = AuthenticationStrategyRegistry.getInstance();\n\n    return createMiddleware(async (context, next) => {\n      const isSkipAuthenticate = context.get(Authentication.SKIP_AUTHENTICATION);\n      if (isSkipAuthenticate) {\n        this.logger\n          .for(this.createAuthenticateMiddleware.name)\n          .debug('SKIP checking authentication | path: %s', context.req.path);\n        return next();\n      }\n\n      const isAuthenticated = context.get(Authentication.CURRENT_USER);\n      if (isAuthenticated) {\n        return next();\n      }\n\n      switch (mode) {\n        case AuthenticationModes.ANY: {\n          await this.executeAnyMode({\n            context: context as TContext,\n            strategies,\n            registry,\n            next,\n          });\n          return;\n        }\n        case AuthenticationModes.ALL: {\n          await this.executeAllMode({\n            context: context as TContext,\n            strategies,\n            registry,\n            next,\n          });\n          return;\n        }\n        default: {\n          throw getError({\n            statusCode: HTTP.ResultCodes.RS_5.InternalServerError,\n            message: `Invalid authentication mode | mode: ${mode}`,\n          });\n        }\n      }\n    });\n  }\n\n  private async executeAnyMode(opts: {\n    context: TContext;\n    strategies: string[];\n    registry: AuthenticationStrategyRegistry;\n    next: () => Promise<void>;\n  }) {\n    const { context, strategies, registry, next } = opts;\n\n    // The first strategy's failure is the primary one - kept so the 401 carries WHY, instead of only which strategies were tried.\n    let primaryFailure: unknown;\n\n    for (const strategyName of strategies) {\n      try {\n        const strategy = registry.resolveStrategy({ name: strategyName });\n        const user = await strategy.authenticate(context);\n        this.setCurrentUser({ context, user });\n        break;\n      } catch (error) {\n        primaryFailure ??= error;\n        this.logger\n          .for(this.executeAnyMode.name)\n          .debug('Strategy %s failed, trying next... | Error: %s', strategyName, error);\n      }\n    }\n\n    const currentUser = context.get(Authentication.CURRENT_USER);\n    if (!currentUser) {\n      throw getError({\n        error: AuthenticationErrors.FAILED,\n        message: `Authentication failed. Tried strategies: ${strategies.join(', ')}`,\n        logLevel: 'warn',\n        cause: primaryFailure,\n      });\n    }\n\n    await next();\n  }\n\n  private async executeAllMode(opts: {\n    context: TContext;\n    strategies: string[];\n    registry: AuthenticationStrategyRegistry;\n    next: () => Promise<void>;\n  }) {\n    const { context, strategies, registry, next } = opts;\n\n    // Use the first strategy's user as the identity source - all must succeed but first wins for identity\n    let authUser: IAuthUser | null = null;\n\n    for (const strategyName of strategies) {\n      const strategy = registry.resolveStrategy({ name: strategyName });\n      const user = await strategy.authenticate(context);\n\n      authUser ??= user;\n    }\n\n    if (authUser?.userId) {\n      this.setCurrentUser({ context, user: authUser });\n    } else {\n      this.logger\n        .for(this.executeAllMode.name)\n        .error(\n          'Failed to identify authenticated user | user: %j | userId: %s',\n          authUser,\n          authUser?.userId,\n        );\n      throw getError({ error: AuthenticationErrors.USER_UNRESOLVED });\n    }\n\n    return next();\n  }\n\n  private setCurrentUser(opts: { context: TContext; user: IAuthUser }) {\n    const { context, user } = opts;\n    context.set(Authentication.CURRENT_USER, user);\n\n    if (user?.userId) {\n      context.set(Authentication.AUDIT_USER_ID, user.userId);\n    }\n  }\n}\n"]}

package/dist/cjs/base/auth/authenticate/providers/index.d.ts

@@ -1,2 +0,0 @@
-export * from './authentication.provider';
-//# sourceMappingURL=index.d.ts.map

package/dist/cjs/base/auth/authenticate/providers/index.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../../src/base/auth/authenticate/providers/index.ts"],"names":[],"mappings":"AAAA,cAAc,2BAA2B,CAAC"}

package/dist/cjs/base/auth/authenticate/providers/index.js

@@ -1,18 +0,0 @@
-"use strict";
-var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    var desc = Object.getOwnPropertyDescriptor(m, k);
-    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
-      desc = { enumerable: true, get: function() { return m[k]; } };
-    }
-    Object.defineProperty(o, k2, desc);
-}) : (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    o[k2] = m[k];
-}));
-var __exportStar = (this && this.__exportStar) || function(m, exports) {
-    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
-};
-Object.defineProperty(exports, "__esModule", { value: true });
-__exportStar(require("./authentication.provider"), exports);
-//# sourceMappingURL=index.js.map

package/dist/cjs/base/auth/authenticate/providers/index.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../../../src/base/auth/authenticate/providers/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,4DAA0C","sourcesContent":["export * from './authentication.provider';\n"]}

package/dist/cjs/base/auth/authenticate/strategies/index.d.ts

@@ -1,2 +0,0 @@
-export * from './strategy-registry';
-//# sourceMappingURL=index.d.ts.map

package/dist/cjs/base/auth/authenticate/strategies/index.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../../src/base/auth/authenticate/strategies/index.ts"],"names":[],"mappings":"AAAA,cAAc,qBAAqB,CAAC"}

package/dist/cjs/base/auth/authenticate/strategies/index.js

@@ -1,18 +0,0 @@
-"use strict";
-var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    var desc = Object.getOwnPropertyDescriptor(m, k);
-    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
-      desc = { enumerable: true, get: function() { return m[k]; } };
-    }
-    Object.defineProperty(o, k2, desc);
-}) : (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    o[k2] = m[k];
-}));
-var __exportStar = (this && this.__exportStar) || function(m, exports) {
-    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
-};
-Object.defineProperty(exports, "__esModule", { value: true });
-__exportStar(require("./strategy-registry"), exports);
-//# sourceMappingURL=index.js.map

package/dist/cjs/base/auth/authenticate/strategies/index.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../../../src/base/auth/authenticate/strategies/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,sDAAoC","sourcesContent":["export * from './strategy-registry';\n"]}

package/dist/cjs/base/auth/authenticate/strategies/strategy-registry.d.ts

@@ -1,58 +0,0 @@
-import type { Container } from '../../../../helpers/inversion/container';
-import type { TClass } from '@venizia/ignis-helpers/common';
-import { AbstractAuthRegistry } from '../../base';
-import type { IAuthenticationStrategy } from '../common';
-export declare class AuthenticationStrategyRegistry extends AbstractAuthRegistry<IAuthenticationStrategy> {
-    static readonly SINGLETON_REAL_KEY = "authentication-strategy-registry";
-    constructor();
-    static getInstance(): AuthenticationStrategyRegistry;
-    protected getBindingPrefix(): string;
-    register(opts: {
-        container: Container;
-        strategies: {
-            strategy: TClass<IAuthenticationStrategy>;
-            name: string;
-        }[];
-    }): this;
-    resolveStrategy(opts: {
-        name: string;
-    }): IAuthenticationStrategy;
-    /**
-     * The names on this list that no registered strategy answers to.
-     *
-     * An EMPTY list yields nothing - it is the framework's own encoding of
-     * `authenticate: { skip: true }`, so treating it as a problem would flag every public route.
-     *
-     * Nothing is reported while the registry is empty. Route configs are built during
-     * `registerControllers()`, after `preConfigure()` and `registerComponents()`, so a real
-     * application has registered by then; an empty registry means this is running outside that
-     * lifecycle - a unit test on a controller - where no name could resolve either way.
-     */
-    findUnregistered(opts: {
-        names: string[];
-    }): string[];
-    /**
-     * Refuses to continue past an unregistered name. For an APPLICATION's own startup check.
-     *
-     * The framework does NOT call this - it reports instead. A hard failure cannot be the default
-     * here: a route listing several strategies in ANY mode tolerates one that does not resolve, and
-     * `defineAuthController` hard-codes `'jwt'` on four of its routes, so an application that
-     * registers its JWT strategy under a different name works today and would stop booting.
-     */
-    assertRegistered(opts: {
-        names: string[];
-        scope?: string;
-    }): void;
-    /**
-     * Names an unregistered strategy at boot, at a level someone sees. Never throws.
-     *
-     * This is what replaces the guard the open `TAuthStrategy` gave up: `resolveStrategy` throws at
-     * request time, the provider's ANY mode swallows it at DEBUG, and the route 401s with nothing to
-     * explain why.
-     */
-    reportUnregistered(opts: {
-        names: string[];
-        scope?: string;
-    }): void;
-}
-//# sourceMappingURL=strategy-registry.d.ts.map

package/dist/cjs/base/auth/authenticate/strategies/strategy-registry.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"strategy-registry.d.ts","sourceRoot":"","sources":["../../../../../../src/base/auth/authenticate/strategies/strategy-registry.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,+BAA+B,CAAC;AAE/D,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,+BAA+B,CAAC;AAE5D,OAAO,EAAE,oBAAoB,EAAE,MAAM,YAAY,CAAC;AAClD,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,WAAW,CAAC;AAGzD,qBAAa,8BAA+B,SAAQ,oBAAoB,CAAC,uBAAuB,CAAC;IAC/F,MAAM,CAAC,QAAQ,CAAC,kBAAkB,sCAAsC;;IAMxE,MAAM,CAAC,WAAW;IAOlB,SAAS,CAAC,gBAAgB,IAAI,MAAM;IAIpC,QAAQ,CAAC,IAAI,EAAE;QACb,SAAS,EAAE,SAAS,CAAC;QACrB,UAAU,EAAE;YAAE,QAAQ,EAAE,MAAM,CAAC,uBAAuB,CAAC,CAAC;YAAC,IAAI,EAAE,MAAM,CAAA;SAAE,EAAE,CAAC;KAC3E;IAUD,eAAe,CAAC,IAAI,EAAE;QAAE,IAAI,EAAE,MAAM,CAAA;KAAE,GAAG,uBAAuB;IAIhE;;;;;;;;;;OAUG;IACH,gBAAgB,CAAC,IAAI,EAAE;QAAE,KAAK,EAAE,MAAM,EAAE,CAAA;KAAE,GAAG,MAAM,EAAE;IAUrD;;;;;;;OAOG;IACH,gBAAgB,CAAC,IAAI,EAAE;QAAE,KAAK,EAAE,MAAM,EAAE,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI;IAajE;;;;;;OAMG;IACH,kBAAkB,CAAC,IAAI,EAAE;QAAE,KAAK,EAAE,MAAM,EAAE,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI;CAiBpE"}