@venizia/ignis 0.0.7-8 → 0.0.7

package/dist/components/auth/authenticate/services/bearer/jwks/verifier.service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"verifier.service.js","sourceRoot":"","sources":["../../../../../../../src/components/auth/authenticate/services/bearer/jwks/verifier.service.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,yDAAmD;AACnD,0DAAwD;AAExD,+BAA8D;AAC9D,4CAKyB;AACzB,yDAA8D;AAE9D,IAAa,wBAAwB,gCAArC,MAAa,wBAA8C,SAAQ,2CAA2B;IAG5F,YAEE,OAAuC;QAEvC,KAAK,CAAC,EAAE,KAAK,EAAE,0BAAwB,CAAC,IAAI,EAAE,CAAC,CAAC;QAFtC,YAAO,GAAP,OAAO,CAAsB;QAJ/B,iBAAY,GAAiD,IAAI,CAAC;QAO1E,IAAI,CAAC,0BAA0B,CAAC;YAC9B,YAAY,EAAE,IAAI,CAAC,OAAO,CAAC,YAAY;YACvC,iBAAiB,EAAE,IAAI,CAAC,OAAO,CAAC,iBAAiB;YACjD,WAAW,EAAE,IAAI,CAAC,OAAO,CAAC,WAAW;SACtC,CAAC,CAAC;IACL,CAAC;IAEkB,KAAK,CAAC,UAAU;QACjC,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;QAC9C,IAAI,CAAC,YAAY,GAAG,IAAA,yBAAkB,EAAC,OAAO,EAAE;YAC9C,WAAW,EAAE,IAAI,CAAC,OAAO,CAAC,UAAU,IAAI,UAAU;YAClD,gBAAgB,EAAE,IAAI,CAAC,OAAO,CAAC,UAAU,IAAI,MAAM;SACpD,CAAC,CAAC;QAEH,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC;QAExB,IAAI,CAAC,MAAM;aACR,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;aACzB,IAAI,CAAC,qCAAqC,EAAE,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;IACvE,CAAC;IAEkB,KAAK,CAAC,QAAQ,CAAC,KAAa;QAC7C,MAAM,IAAI,CAAC,iBAAiB,EAAE,CAAC;QAC/B,MAAM,MAAM,GAAG,MAAM,IAAA,gBAAS,EAAmB,KAAK,EAAE,IAAI,CAAC,YAAa,CAAC,CAAC;QAC5E,OAAO,IAAI,CAAC,cAAc,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC;IACzC,CAAC;IAEQ,KAAK,CAAC,SAAS,CAAC,KAGxB;QACC,MAAM,IAAA,wBAAQ,EAAC;YACb,UAAU,EAAE,oBAAI,CAAC,WAAW,CAAC,IAAI,CAAC,mBAAmB;YACrD,OAAO,EAAE,6DAA6D;SACvE,CAAC,CAAC;IACL,CAAC;IAEkB,aAAa;QAC9B,MAAM,IAAA,wBAAQ,EAAC;YACb,UAAU,EAAE,oBAAI,CAAC,WAAW,CAAC,IAAI,CAAC,mBAAmB;YACrD,OAAO,EAAE,6DAA6D;SACvE,CAAC,CAAC;IACL,CAAC;IAEkB,wBAAwB;QACzC,MAAM,IAAA,wBAAQ,EAAC;YACb,UAAU,EAAE,oBAAI,CAAC,WAAW,CAAC,IAAI,CAAC,mBAAmB;YACrD,OAAO,EAAE,8DAA8D;SACxE,CAAC,CAAC;IACL,CAAC;CACF,CAAA;AA1DY,4DAAwB;mCAAxB,wBAAwB;IAIhC,WAAA,IAAA,kBAAM,EAAC,EAAE,GAAG,EAAE,gCAAuB,CAAC,YAAY,EAAE,CAAC,CAAA;;GAJ7C,wBAAwB,CA0DpC"}

package/dist/components/auth/authenticate/services/bearer/jws.service.d.ts

@@ -0,0 +1,19 @@
+import { ValueOrPromise } from '@venizia/ignis-helpers';
+import { Env } from 'hono';
+import { SignJWT } from 'jose';
+import { IJWSTokenServiceOptions, IJWTTokenPayload, TGetTokenExpiresFn } from '../../common';
+import { AbstractBearerTokenService } from './abstract.service';
+/** Symmetric JWT (JWS) token service with optional AES-encrypted payloads. */
+export declare class JWSTokenService<E extends Env = Env> extends AbstractBearerTokenService<E> {
+    protected options: IJWSTokenServiceOptions;
+    protected jwtSecret: Uint8Array;
+    constructor(options: IJWSTokenServiceOptions);
+    protected doVerify(token: string): Promise<IJWTTokenPayload>;
+    getSigner(opts: {
+        payload: IJWTTokenPayload;
+        getTokenExpiresFn: TGetTokenExpiresFn;
+    }): Promise<SignJWT>;
+    protected getSigningKey(): ValueOrPromise<Uint8Array>;
+    protected getDefaultTokenExpiresFn(): TGetTokenExpiresFn;
+}
+//# sourceMappingURL=jws.service.d.ts.map

package/dist/components/auth/authenticate/services/bearer/jws.service.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"jws.service.d.ts","sourceRoot":"","sources":["../../../../../../src/components/auth/authenticate/services/bearer/jws.service.ts"],"names":[],"mappings":"AACA,OAAO,EAAkB,cAAc,EAAE,MAAM,wBAAwB,CAAC;AACxE,OAAO,EAAE,GAAG,EAAE,MAAM,MAAM,CAAC;AAC3B,OAAO,EAAa,OAAO,EAAE,MAAM,MAAM,CAAC;AAC1C,OAAO,EAEL,uBAAuB,EACvB,gBAAgB,EAChB,kBAAkB,EACnB,MAAM,cAAc,CAAC;AACtB,OAAO,EAAE,0BAA0B,EAAE,MAAM,oBAAoB,CAAC;AAEhE,8EAA8E;AAC9E,qBAAa,eAAe,CAAC,CAAC,SAAS,GAAG,GAAG,GAAG,CAAE,SAAQ,0BAA0B,CAAC,CAAC,CAAC;IAKnF,SAAS,CAAC,OAAO,EAAE,uBAAuB;IAJ5C,SAAS,CAAC,SAAS,EAAE,UAAU,CAAC;gBAIpB,OAAO,EAAE,uBAAuB;cA4BnB,QAAQ,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,gBAAgB,CAAC;IAK5D,SAAS,CAAC,IAAI,EAAE;QAC7B,OAAO,EAAE,gBAAgB,CAAC;QAC1B,iBAAiB,EAAE,kBAAkB,CAAC;KACvC;cAakB,aAAa,IAAI,cAAc,CAAC,UAAU,CAAC;cAQ3C,wBAAwB,IAAI,kBAAkB;CAGlE"}

package/dist/components/auth/authenticate/services/bearer/jws.service.js

@@ -0,0 +1,76 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+var __param = (this && this.__param) || function (paramIndex, decorator) {
+    return function (target, key) { decorator(target, key, paramIndex); }
+};
+var JWSTokenService_1;
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.JWSTokenService = void 0;
+const injectors_1 = require("../../../../../base/metadata/injectors");
+const ignis_helpers_1 = require("@venizia/ignis-helpers");
+const jose_1 = require("jose");
+const common_1 = require("../../common");
+const abstract_service_1 = require("./abstract.service");
+/** Symmetric JWT (JWS) token service with optional AES-encrypted payloads. */
+let JWSTokenService = JWSTokenService_1 = class JWSTokenService extends abstract_service_1.AbstractBearerTokenService {
+    constructor(options) {
+        super({ scope: JWSTokenService_1.name });
+        this.options = options;
+        const { aesAlgorithm, jwtSecret, applicationSecret, getTokenExpiresFn } = options ?? {};
+        if (!jwtSecret) {
+            throw (0, ignis_helpers_1.getError)({
+                statusCode: ignis_helpers_1.HTTP.ResultCodes.RS_5.InternalServerError,
+                message: '[JWSTokenService] Invalid jwtSecret',
+            });
+        }
+        if (!getTokenExpiresFn) {
+            throw (0, ignis_helpers_1.getError)({
+                statusCode: ignis_helpers_1.HTTP.ResultCodes.RS_5.InternalServerError,
+                message: '[JWSTokenService] Invalid getTokenExpiresFn',
+            });
+        }
+        this.configurePayloadEncryption({
+            aesAlgorithm,
+            applicationSecret,
+            fieldCodecs: options.fieldCodecs,
+        });
+        this.jwtSecret = new TextEncoder().encode(this.options.jwtSecret);
+    }
+    async doVerify(token) {
+        const decodedToken = await (0, jose_1.jwtVerify)(token, this.jwtSecret, {});
+        return this.decryptPayload({ result: decodedToken });
+    }
+    async getSigner(opts) {
+        const now = Math.floor(Date.now() / 1000);
+        const expiresIn = await opts.getTokenExpiresFn();
+        const encryptedPayload = this.encryptPayload(opts.payload);
+        return new jose_1.SignJWT(Object.assign({}, encryptedPayload))
+            .setProtectedHeader({ alg: this.options.headerAlgorithm ?? 'HS256' })
+            .setIssuedAt()
+            .setExpirationTime(now + expiresIn)
+            .setNotBefore(now);
+    }
+    getSigningKey() {
+        if (!this.jwtSecret) {
+            throw (0, ignis_helpers_1.getError)({ message: '[getSigningKey] Invalid jwtSecret!' });
+        }
+        return this.jwtSecret;
+    }
+    getDefaultTokenExpiresFn() {
+        return this.options.getTokenExpiresFn;
+    }
+};
+exports.JWSTokenService = JWSTokenService;
+exports.JWSTokenService = JWSTokenService = JWSTokenService_1 = __decorate([
+    __param(0, (0, injectors_1.inject)({ key: common_1.AuthenticateBindingKeys.JWT_OPTIONS })),
+    __metadata("design:paramtypes", [Object])
+], JWSTokenService);
+//# sourceMappingURL=jws.service.js.map

package/dist/components/auth/authenticate/services/bearer/jws.service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"jws.service.js","sourceRoot":"","sources":["../../../../../../src/components/auth/authenticate/services/bearer/jws.service.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,yDAAmD;AACnD,0DAAwE;AAExE,+BAA0C;AAC1C,yCAKsB;AACtB,yDAAgE;AAEhE,8EAA8E;AAC9E,IAAa,eAAe,uBAA5B,MAAa,eAAqC,SAAQ,6CAA6B;IAGrF,YAEY,OAAgC;QAE1C,KAAK,CAAC,EAAE,KAAK,EAAE,iBAAe,CAAC,IAAI,EAAE,CAAC,CAAC;QAF7B,YAAO,GAAP,OAAO,CAAyB;QAI1C,MAAM,EAAE,YAAY,EAAE,SAAS,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,GAAG,OAAO,IAAI,EAAE,CAAC;QAExF,IAAI,CAAC,SAAS,EAAE,CAAC;YACf,MAAM,IAAA,wBAAQ,EAAC;gBACb,UAAU,EAAE,oBAAI,CAAC,WAAW,CAAC,IAAI,CAAC,mBAAmB;gBACrD,OAAO,EAAE,qCAAqC;aAC/C,CAAC,CAAC;QACL,CAAC;QAED,IAAI,CAAC,iBAAiB,EAAE,CAAC;YACvB,MAAM,IAAA,wBAAQ,EAAC;gBACb,UAAU,EAAE,oBAAI,CAAC,WAAW,CAAC,IAAI,CAAC,mBAAmB;gBACrD,OAAO,EAAE,6CAA6C;aACvD,CAAC,CAAC;QACL,CAAC;QAED,IAAI,CAAC,0BAA0B,CAAC;YAC9B,YAAY;YACZ,iBAAiB;YACjB,WAAW,EAAE,OAAO,CAAC,WAAW;SACjC,CAAC,CAAC;QACH,IAAI,CAAC,SAAS,GAAG,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IACpE,CAAC;IAEkB,KAAK,CAAC,QAAQ,CAAC,KAAa;QAC7C,MAAM,YAAY,GAAG,MAAM,IAAA,gBAAS,EAAmB,KAAK,EAAE,IAAI,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC;QAClF,OAAO,IAAI,CAAC,cAAc,CAAC,EAAE,MAAM,EAAE,YAAY,EAAE,CAAC,CAAC;IACvD,CAAC;IAEQ,KAAK,CAAC,SAAS,CAAC,IAGxB;QACC,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;QAC1C,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,iBAAiB,EAAE,CAAC;QAEjD,MAAM,gBAAgB,GAAG,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAE3D,OAAO,IAAI,cAAO,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,EAAE,gBAAgB,CAAC,CAAC;aACpD,kBAAkB,CAAC,EAAE,GAAG,EAAE,IAAI,CAAC,OAAO,CAAC,eAAe,IAAI,OAAO,EAAE,CAAC;aACpE,WAAW,EAAE;aACb,iBAAiB,CAAC,GAAG,GAAG,SAAS,CAAC;aAClC,YAAY,CAAC,GAAG,CAAC,CAAC;IACvB,CAAC;IAEkB,aAAa;QAC9B,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC;YACpB,MAAM,IAAA,wBAAQ,EAAC,EAAE,OAAO,EAAE,oCAAoC,EAAE,CAAC,CAAC;QACpE,CAAC;QAED,OAAO,IAAI,CAAC,SAAS,CAAC;IACxB,CAAC;IAEkB,wBAAwB;QACzC,OAAO,IAAI,CAAC,OAAO,CAAC,iBAAiB,CAAC;IACxC,CAAC;CACF,CAAA;AAjEY,0CAAe;0BAAf,eAAe;IAIvB,WAAA,IAAA,kBAAM,EAAC,EAAE,GAAG,EAAE,gCAAuB,CAAC,WAAW,EAAE,CAAC,CAAA;;GAJ5C,eAAe,CAiE3B"}

package/dist/components/auth/authenticate/services/index.d.ts

@@ -1,3 +1,3 @@
-export * from './basic-token.service';
-export * from './jwt-token.service';
+export * from './basic';
+export * from './bearer';
 //# sourceMappingURL=index.d.ts.map

package/dist/components/auth/authenticate/services/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../src/components/auth/authenticate/services/index.ts"],"names":[],"mappings":"AAAA,cAAc,uBAAuB,CAAC;AACtC,cAAc,qBAAqB,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../src/components/auth/authenticate/services/index.ts"],"names":[],"mappings":"AAAA,cAAc,SAAS,CAAC;AACxB,cAAc,UAAU,CAAC"}

package/dist/components/auth/authenticate/services/index.js

@@ -14,6 +14,6 @@ var __exportStar = (this && this.__exportStar) || function(m, exports) {
     for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
 };
 Object.defineProperty(exports, "__esModule", { value: true });
-__exportStar(require("./basic-token.service"), exports);
-__exportStar(require("./jwt-token.service"), exports);
+__exportStar(require("./basic"), exports);
+__exportStar(require("./bearer"), exports);
 //# sourceMappingURL=index.js.map

package/dist/components/auth/authenticate/services/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../../src/components/auth/authenticate/services/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,wDAAsC;AACtC,sDAAoC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../../src/components/auth/authenticate/services/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,0CAAwB;AACxB,2CAAyB"}

package/dist/components/auth/authenticate/strategies/basic.strategy.d.ts

@@ -3,28 +3,7 @@ import { BaseHelper } from '@venizia/ignis-helpers';
 import { Env } from 'hono';
 import { IAuthUser, IAuthenticationStrategy } from '../common';
 import { BasicTokenService } from '../services';
-/**
- * Basic Authentication Strategy.
- *
- * Implements HTTP Basic Authentication by extracting credentials from
- * the `Authorization: Basic <base64>` header and verifying them using
- * a user-provided verification function.
- *
- * @example
- * ```typescript
- * // Register the strategy
- * AuthenticationStrategyRegistry.getInstance().register({
- *   container: this,
- *   name: Authentication.STRATEGY_BASIC,
- *   strategy: BasicAuthenticationStrategy,
- * });
- *
- * // Use in routes
- * authenticate: { strategies: ['basic'] }
- * // Or with JWT fallback
- * authenticate: { strategies: ['jwt', 'basic'], mode: 'any' }
- * ```
- */
+/** HTTP Basic Authentication strategy using Authorization header credentials. */
 export declare class BasicAuthenticationStrategy<E extends Env = Env> extends BaseHelper implements IAuthenticationStrategy<E> {
     private service;
     name: string;

package/dist/components/auth/authenticate/strategies/basic.strategy.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"basic.strategy.d.ts","sourceRoot":"","sources":["../../../../../src/components/auth/authenticate/strategies/basic.strategy.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,iCAAiC,CAAC;AAE3D,OAAO,EAAE,UAAU,EAAE,MAAM,wBAAwB,CAAC;AACpD,OAAO,EAAE,GAAG,EAAE,MAAM,MAAM,CAAC;AAC3B,OAAO,EAAkB,SAAS,EAAE,uBAAuB,EAAE,MAAM,WAAW,CAAC;AAC/E,OAAO,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AAEhD;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,qBAAa,2BAA2B,CAAC,CAAC,SAAS,GAAG,GAAG,GAAG,CAC1D,SAAQ,UACR,YAAW,uBAAuB,CAAC,CAAC,CAAC;IAKY,OAAO,CAAC,OAAO;IAHhE,IAAI,SAAiC;gBAGoB,OAAO,EAAE,iBAAiB,CAAC,CAAC,CAAC;IAKhF,YAAY,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC,EAAE,MAAM,CAAC,GAAG,OAAO,CAAC,SAAS,CAAC;CAIrE"}
+{"version":3,"file":"basic.strategy.d.ts","sourceRoot":"","sources":["../../../../../src/components/auth/authenticate/strategies/basic.strategy.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,iCAAiC,CAAC;AAG3D,OAAO,EAAE,UAAU,EAAE,MAAM,wBAAwB,CAAC;AAEpD,OAAO,EAAE,GAAG,EAAE,MAAM,MAAM,CAAC;AAC3B,OAAO,EAAkB,SAAS,EAAE,uBAAuB,EAAE,MAAM,WAAW,CAAC;AAC/E,OAAO,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AAEhD,iFAAiF;AACjF,qBAAa,2BAA2B,CAAC,CAAC,SAAS,GAAG,GAAG,GAAG,CAC1D,SAAQ,UACR,YAAW,uBAAuB,CAAC,CAAC,CAAC;IAWnC,OAAO,CAAC,OAAO;IATjB,IAAI,SAAiC;gBAS3B,OAAO,EAAE,iBAAiB,CAAC,CAAC,CAAC;IAKjC,YAAY,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC,EAAE,MAAM,CAAC,GAAG,OAAO,CAAC,SAAS,CAAC;CAIrE"}

package/dist/components/auth/authenticate/strategies/basic.strategy.js

@@ -15,31 +15,12 @@ var BasicAuthenticationStrategy_1;
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.BasicAuthenticationStrategy = void 0;
 const injectors_1 = require("../../../../base/metadata/injectors");
+const bindings_1 = require("../../../../common/bindings");
 const ignis_helpers_1 = require("@venizia/ignis-helpers");
+const ignis_inversion_1 = require("@venizia/ignis-inversion");
 const common_1 = require("../common");
 const services_1 = require("../services");
-/**
- * Basic Authentication Strategy.
- *
- * Implements HTTP Basic Authentication by extracting credentials from
- * the `Authorization: Basic <base64>` header and verifying them using
- * a user-provided verification function.
- *
- * @example
- * ```typescript
- * // Register the strategy
- * AuthenticationStrategyRegistry.getInstance().register({
- *   container: this,
- *   name: Authentication.STRATEGY_BASIC,
- *   strategy: BasicAuthenticationStrategy,
- * });
- *
- * // Use in routes
- * authenticate: { strategies: ['basic'] }
- * // Or with JWT fallback
- * authenticate: { strategies: ['jwt', 'basic'], mode: 'any' }
- * ```
- */
+/** HTTP Basic Authentication strategy using Authorization header credentials. */
 let BasicAuthenticationStrategy = BasicAuthenticationStrategy_1 = class BasicAuthenticationStrategy extends ignis_helpers_1.BaseHelper {
     constructor(service) {
         super({ scope: BasicAuthenticationStrategy_1.name });
@@ -53,7 +34,12 @@ let BasicAuthenticationStrategy = BasicAuthenticationStrategy_1 = class BasicAut
 };
 exports.BasicAuthenticationStrategy = BasicAuthenticationStrategy;
 exports.BasicAuthenticationStrategy = BasicAuthenticationStrategy = BasicAuthenticationStrategy_1 = __decorate([
-    __param(0, (0, injectors_1.inject)({ key: 'services.BasicTokenService' })),
+    __param(0, (0, injectors_1.inject)({
+        key: ignis_inversion_1.BindingKeys.build({
+            namespace: bindings_1.BindingNamespaces.SERVICE,
+            key: services_1.BasicTokenService.name,
+        }),
+    })),
     __metadata("design:paramtypes", [services_1.BasicTokenService])
 ], BasicAuthenticationStrategy);
 //# sourceMappingURL=basic.strategy.js.map

package/dist/components/auth/authenticate/strategies/basic.strategy.js.map

@@ -1 +1 @@
-{"version":3,"file":"basic.strategy.js","sourceRoot":"","sources":["../../../../../src/components/auth/authenticate/strategies/basic.strategy.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AACA,yDAAmD;AACnD,0DAAoD;AAEpD,sCAA+E;AAC/E,0CAAgD;AAEhD;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,IAAa,2BAA2B,mCAAxC,MAAa,2BACX,SAAQ,0BAAU;IAKlB,YACiD,OAAqC;QAEpF,KAAK,CAAC,EAAE,KAAK,EAAE,6BAA2B,CAAC,IAAI,EAAE,CAAC,CAAC;QAFI,YAAO,GAAP,OAAO,CAAsB;QAHtF,SAAI,GAAG,uBAAc,CAAC,cAAc,CAAC;IAMrC,CAAC;IAED,KAAK,CAAC,YAAY,CAAC,OAA4B;QAC7C,MAAM,WAAW,GAAG,IAAI,CAAC,OAAO,CAAC,kBAAkB,CAAC,OAAO,CAAC,CAAC;QAC7D,OAAO,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,WAAW,EAAE,OAAO,EAAE,CAAC,CAAC;IACvD,CAAC;CACF,CAAA;AAhBY,kEAA2B;sCAA3B,2BAA2B;IAOnC,WAAA,IAAA,kBAAM,EAAC,EAAE,GAAG,EAAE,4BAA4B,EAAE,CAAC,CAAA;qCAAkB,4BAAiB;GAPxE,2BAA2B,CAgBvC"}
+{"version":3,"file":"basic.strategy.js","sourceRoot":"","sources":["../../../../../src/components/auth/authenticate/strategies/basic.strategy.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AACA,yDAAmD;AACnD,gDAAsD;AACtD,0DAAoD;AACpD,8DAAuD;AAEvD,sCAA+E;AAC/E,0CAAgD;AAEhD,iFAAiF;AACjF,IAAa,2BAA2B,mCAAxC,MAAa,2BACX,SAAQ,0BAAU;IAKlB,YAOE,OAAqC;QAErC,KAAK,CAAC,EAAE,KAAK,EAAE,6BAA2B,CAAC,IAAI,EAAE,CAAC,CAAC;QAF3C,YAAO,GAAP,OAAO,CAAsB;QATvC,SAAI,GAAG,uBAAc,CAAC,cAAc,CAAC;IAYrC,CAAC;IAED,KAAK,CAAC,YAAY,CAAC,OAA4B;QAC7C,MAAM,WAAW,GAAG,IAAI,CAAC,OAAO,CAAC,kBAAkB,CAAC,OAAO,CAAC,CAAC;QAC7D,OAAO,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,WAAW,EAAE,OAAO,EAAE,CAAC,CAAC;IACvD,CAAC;CACF,CAAA;AAtBY,kEAA2B;sCAA3B,2BAA2B;IAOnC,WAAA,IAAA,kBAAM,EAAC;QACN,GAAG,EAAE,6BAAW,CAAC,KAAK,CAAC;YACrB,SAAS,EAAE,4BAAiB,CAAC,OAAO;YACpC,GAAG,EAAE,4BAAiB,CAAC,IAAI;SAC5B,CAAC;KACH,CAAC,CAAA;qCACe,4BAAiB;GAbzB,2BAA2B,CAsBvC"}

package/dist/components/auth/authenticate/strategies/index.d.ts

@@ -1,4 +1,5 @@
 export * from './basic.strategy';
-export * from './jwt.strategy';
+export * from './jws.strategy';
+export * from './jwks.strategy';
 export * from './strategy-registry';
 //# sourceMappingURL=index.d.ts.map

package/dist/components/auth/authenticate/strategies/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../src/components/auth/authenticate/strategies/index.ts"],"names":[],"mappings":"AAAA,cAAc,kBAAkB,CAAC;AACjC,cAAc,gBAAgB,CAAC;AAC/B,cAAc,qBAAqB,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../src/components/auth/authenticate/strategies/index.ts"],"names":[],"mappings":"AAAA,cAAc,kBAAkB,CAAC;AACjC,cAAc,gBAAgB,CAAC;AAC/B,cAAc,iBAAiB,CAAC;AAChC,cAAc,qBAAqB,CAAC"}

package/dist/components/auth/authenticate/strategies/index.js

@@ -15,6 +15,7 @@ var __exportStar = (this && this.__exportStar) || function(m, exports) {
 };
 Object.defineProperty(exports, "__esModule", { value: true });
 __exportStar(require("./basic.strategy"), exports);
-__exportStar(require("./jwt.strategy"), exports);
+__exportStar(require("./jws.strategy"), exports);
+__exportStar(require("./jwks.strategy"), exports);
 __exportStar(require("./strategy-registry"), exports);
 //# sourceMappingURL=index.js.map

package/dist/components/auth/authenticate/strategies/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../../src/components/auth/authenticate/strategies/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,mDAAiC;AACjC,iDAA+B;AAC/B,sDAAoC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../../src/components/auth/authenticate/strategies/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,mDAAiC;AACjC,iDAA+B;AAC/B,kDAAgC;AAChC,sDAAoC"}

package/dist/components/auth/authenticate/strategies/jwks.strategy.d.ts

@@ -0,0 +1,21 @@
+import { TContext } from '../../../../base/controllers/common/types';
+import { BaseHelper } from '@venizia/ignis-helpers';
+import { Env } from 'hono';
+import { IAuthUser, IAuthenticationStrategy } from '../common';
+import { JWKSIssuerTokenService } from '../services';
+import { JWKSVerifierTokenService } from '../services';
+export declare class JWKSIssuerAuthenticationStrategy<E extends Env = Env> extends BaseHelper implements IAuthenticationStrategy<E> {
+    private service;
+    name: string;
+    standard: string;
+    constructor(service: JWKSIssuerTokenService<E>);
+    authenticate(context: TContext<E, string>): Promise<IAuthUser>;
+}
+export declare class JWKSVerifierAuthenticationStrategy<E extends Env = Env> extends BaseHelper implements IAuthenticationStrategy<E> {
+    private service;
+    name: string;
+    standard: string;
+    constructor(service: JWKSVerifierTokenService<E>);
+    authenticate(context: TContext<E, string>): Promise<IAuthUser>;
+}
+//# sourceMappingURL=jwks.strategy.d.ts.map

package/dist/components/auth/authenticate/strategies/jwks.strategy.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"jwks.strategy.d.ts","sourceRoot":"","sources":["../../../../../src/components/auth/authenticate/strategies/jwks.strategy.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,iCAAiC,CAAC;AAG3D,OAAO,EAAE,UAAU,EAAE,MAAM,wBAAwB,CAAC;AAEpD,OAAO,EAAE,GAAG,EAAE,MAAM,MAAM,CAAC;AAC3B,OAAO,EAAkB,SAAS,EAAE,uBAAuB,EAAiB,MAAM,WAAW,CAAC;AAC9F,OAAO,EAAE,sBAAsB,EAAE,MAAM,aAAa,CAAC;AACrD,OAAO,EAAE,wBAAwB,EAAE,MAAM,aAAa,CAAC;AAEvD,qBAAa,gCAAgC,CAAC,CAAC,SAAS,GAAG,GAAG,GAAG,CAC/D,SAAQ,UACR,YAAW,uBAAuB,CAAC,CAAC,CAAC;IAYnC,OAAO,CAAC,OAAO;IAVjB,IAAI,SAA+B;IACnC,QAAQ,SAAsB;gBASpB,OAAO,EAAE,sBAAsB,CAAC,CAAC,CAAC;IAK5C,YAAY,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC,EAAE,MAAM,CAAC,GAAG,OAAO,CAAC,SAAS,CAAC;CAI/D;AAED,qBAAa,kCAAkC,CAAC,CAAC,SAAS,GAAG,GAAG,GAAG,CACjE,SAAQ,UACR,YAAW,uBAAuB,CAAC,CAAC,CAAC;IAYnC,OAAO,CAAC,OAAO;IAVjB,IAAI,SAA+B;IACnC,QAAQ,SAAsB;gBASpB,OAAO,EAAE,wBAAwB,CAAC,CAAC,CAAC;IAK9C,YAAY,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC,EAAE,MAAM,CAAC,GAAG,OAAO,CAAC,SAAS,CAAC;CAI/D"}

package/dist/components/auth/authenticate/strategies/jwks.strategy.js

@@ -0,0 +1,68 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+var __param = (this && this.__param) || function (paramIndex, decorator) {
+    return function (target, key) { decorator(target, key, paramIndex); }
+};
+var JWKSIssuerAuthenticationStrategy_1, JWKSVerifierAuthenticationStrategy_1;
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.JWKSVerifierAuthenticationStrategy = exports.JWKSIssuerAuthenticationStrategy = void 0;
+const injectors_1 = require("../../../../base/metadata/injectors");
+const bindings_1 = require("../../../../common/bindings");
+const ignis_helpers_1 = require("@venizia/ignis-helpers");
+const ignis_inversion_1 = require("@venizia/ignis-inversion");
+const common_1 = require("../common");
+const services_1 = require("../services");
+const services_2 = require("../services");
+let JWKSIssuerAuthenticationStrategy = JWKSIssuerAuthenticationStrategy_1 = class JWKSIssuerAuthenticationStrategy extends ignis_helpers_1.BaseHelper {
+    constructor(service) {
+        super({ scope: JWKSIssuerAuthenticationStrategy_1.name });
+        this.service = service;
+        this.name = common_1.Authentication.STRATEGY_JWT;
+        this.standard = common_1.JOSEStandards.JWKS;
+    }
+    authenticate(context) {
+        const token = this.service.extractCredentials(context);
+        return this.service.verify(token);
+    }
+};
+exports.JWKSIssuerAuthenticationStrategy = JWKSIssuerAuthenticationStrategy;
+exports.JWKSIssuerAuthenticationStrategy = JWKSIssuerAuthenticationStrategy = JWKSIssuerAuthenticationStrategy_1 = __decorate([
+    __param(0, (0, injectors_1.inject)({
+        key: ignis_inversion_1.BindingKeys.build({
+            namespace: bindings_1.BindingNamespaces.SERVICE,
+            key: services_1.JWKSIssuerTokenService.name,
+        }),
+    })),
+    __metadata("design:paramtypes", [services_1.JWKSIssuerTokenService])
+], JWKSIssuerAuthenticationStrategy);
+let JWKSVerifierAuthenticationStrategy = JWKSVerifierAuthenticationStrategy_1 = class JWKSVerifierAuthenticationStrategy extends ignis_helpers_1.BaseHelper {
+    constructor(service) {
+        super({ scope: JWKSVerifierAuthenticationStrategy_1.name });
+        this.service = service;
+        this.name = common_1.Authentication.STRATEGY_JWT;
+        this.standard = common_1.JOSEStandards.JWKS;
+    }
+    authenticate(context) {
+        const token = this.service.extractCredentials(context);
+        return this.service.verify(token);
+    }
+};
+exports.JWKSVerifierAuthenticationStrategy = JWKSVerifierAuthenticationStrategy;
+exports.JWKSVerifierAuthenticationStrategy = JWKSVerifierAuthenticationStrategy = JWKSVerifierAuthenticationStrategy_1 = __decorate([
+    __param(0, (0, injectors_1.inject)({
+        key: ignis_inversion_1.BindingKeys.build({
+            namespace: bindings_1.BindingNamespaces.SERVICE,
+            key: services_2.JWKSVerifierTokenService.name,
+        }),
+    })),
+    __metadata("design:paramtypes", [services_2.JWKSVerifierTokenService])
+], JWKSVerifierAuthenticationStrategy);
+//# sourceMappingURL=jwks.strategy.js.map

package/dist/components/auth/authenticate/strategies/jwks.strategy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"jwks.strategy.js","sourceRoot":"","sources":["../../../../../src/components/auth/authenticate/strategies/jwks.strategy.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AACA,yDAAmD;AACnD,gDAAsD;AACtD,0DAAoD;AACpD,8DAAuD;AAEvD,sCAA8F;AAC9F,0CAAqD;AACrD,0CAAuD;AAEvD,IAAa,gCAAgC,wCAA7C,MAAa,gCACX,SAAQ,0BAAU;IAMlB,YAOE,OAA0C;QAE1C,KAAK,CAAC,EAAE,KAAK,EAAE,kCAAgC,CAAC,IAAI,EAAE,CAAC,CAAC;QAFhD,YAAO,GAAP,OAAO,CAA2B;QAV5C,SAAI,GAAG,uBAAc,CAAC,YAAY,CAAC;QACnC,aAAQ,GAAG,sBAAa,CAAC,IAAI,CAAC;IAY9B,CAAC;IAED,YAAY,CAAC,OAA4B;QACvC,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,kBAAkB,CAAC,OAAO,CAAC,CAAC;QACvD,OAAO,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACpC,CAAC;CACF,CAAA;AAvBY,4EAAgC;2CAAhC,gCAAgC;IAQxC,WAAA,IAAA,kBAAM,EAAC;QACN,GAAG,EAAE,6BAAW,CAAC,KAAK,CAAC;YACrB,SAAS,EAAE,4BAAiB,CAAC,OAAO;YACpC,GAAG,EAAE,iCAAsB,CAAC,IAAI;SACjC,CAAC;KACH,CAAC,CAAA;qCACe,iCAAsB;GAd9B,gCAAgC,CAuB5C;AAED,IAAa,kCAAkC,0CAA/C,MAAa,kCACX,SAAQ,0BAAU;IAMlB,YAOE,OAA4C;QAE5C,KAAK,CAAC,EAAE,KAAK,EAAE,oCAAkC,CAAC,IAAI,EAAE,CAAC,CAAC;QAFlD,YAAO,GAAP,OAAO,CAA6B;QAV9C,SAAI,GAAG,uBAAc,CAAC,YAAY,CAAC;QACnC,aAAQ,GAAG,sBAAa,CAAC,IAAI,CAAC;IAY9B,CAAC;IAED,YAAY,CAAC,OAA4B;QACvC,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,kBAAkB,CAAC,OAAO,CAAC,CAAC;QACvD,OAAO,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACpC,CAAC;CACF,CAAA;AAvBY,gFAAkC;6CAAlC,kCAAkC;IAQ1C,WAAA,IAAA,kBAAM,EAAC;QACN,GAAG,EAAE,6BAAW,CAAC,KAAK,CAAC;YACrB,SAAS,EAAE,4BAAiB,CAAC,OAAO;YACpC,GAAG,EAAE,mCAAwB,CAAC,IAAI;SACnC,CAAC;KACH,CAAC,CAAA;qCACe,mCAAwB;GAdhC,kCAAkC,CAuB9C"}

package/dist/components/auth/authenticate/strategies/{jwt.strategy.d.ts → jws.strategy.d.ts}

@@ -2,11 +2,12 @@ import { TContext } from '../../../../base/controllers/common/types';
 import { BaseHelper } from '@venizia/ignis-helpers';
 import { Env } from 'hono';
 import { IAuthUser, IAuthenticationStrategy } from '../common';
-import { JWTTokenService } from '../services';
-export declare class JWTAuthenticationStrategy<E extends Env = Env> extends BaseHelper implements IAuthenticationStrategy<E> {
+import { JWSTokenService } from '../services';
+export declare class JWSAuthenticationStrategy<E extends Env = Env> extends BaseHelper implements IAuthenticationStrategy<E> {
     private service;
     name: string;
-    constructor(service: JWTTokenService<E>);
+    standard: string;
+    constructor(service: JWSTokenService<E>);
     authenticate(context: TContext<E, string>): Promise<IAuthUser>;
 }
-//# sourceMappingURL=jwt.strategy.d.ts.map
+//# sourceMappingURL=jws.strategy.d.ts.map

package/dist/components/auth/authenticate/strategies/jws.strategy.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"jws.strategy.d.ts","sourceRoot":"","sources":["../../../../../src/components/auth/authenticate/strategies/jws.strategy.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,iCAAiC,CAAC;AAG3D,OAAO,EAAE,UAAU,EAAE,MAAM,wBAAwB,CAAC;AAEpD,OAAO,EAAE,GAAG,EAAE,MAAM,MAAM,CAAC;AAC3B,OAAO,EAAkB,SAAS,EAAE,uBAAuB,EAAiB,MAAM,WAAW,CAAC;AAC9F,OAAO,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAE9C,qBAAa,yBAAyB,CAAC,CAAC,SAAS,GAAG,GAAG,GAAG,CACxD,SAAQ,UACR,YAAW,uBAAuB,CAAC,CAAC,CAAC;IAYnC,OAAO,CAAC,OAAO;IAVjB,IAAI,SAA+B;IACnC,QAAQ,SAAqB;gBASnB,OAAO,EAAE,eAAe,CAAC,CAAC,CAAC;IAKrC,YAAY,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC,EAAE,MAAM,CAAC,GAAG,OAAO,CAAC,SAAS,CAAC;CAI/D"}

package/dist/components/auth/authenticate/strategies/{jwt.strategy.js → jws.strategy.js}

@@ -11,27 +11,35 @@ var __metadata = (this && this.__metadata) || function (k, v) {
 var __param = (this && this.__param) || function (paramIndex, decorator) {
     return function (target, key) { decorator(target, key, paramIndex); }
 };
-var JWTAuthenticationStrategy_1;
+var JWSAuthenticationStrategy_1;
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.JWTAuthenticationStrategy = void 0;
+exports.JWSAuthenticationStrategy = void 0;
 const injectors_1 = require("../../../../base/metadata/injectors");
+const bindings_1 = require("../../../../common/bindings");
 const ignis_helpers_1 = require("@venizia/ignis-helpers");
+const ignis_inversion_1 = require("@venizia/ignis-inversion");
 const common_1 = require("../common");
 const services_1 = require("../services");
-let JWTAuthenticationStrategy = JWTAuthenticationStrategy_1 = class JWTAuthenticationStrategy extends ignis_helpers_1.BaseHelper {
+let JWSAuthenticationStrategy = JWSAuthenticationStrategy_1 = class JWSAuthenticationStrategy extends ignis_helpers_1.BaseHelper {
     constructor(service) {
-        super({ scope: JWTAuthenticationStrategy_1.name });
+        super({ scope: JWSAuthenticationStrategy_1.name });
         this.service = service;
         this.name = common_1.Authentication.STRATEGY_JWT;
+        this.standard = common_1.JOSEStandards.JWS;
     }
     authenticate(context) {
         const token = this.service.extractCredentials(context);
         return this.service.verify(token);
     }
 };
-exports.JWTAuthenticationStrategy = JWTAuthenticationStrategy;
-exports.JWTAuthenticationStrategy = JWTAuthenticationStrategy = JWTAuthenticationStrategy_1 = __decorate([
-    __param(0, (0, injectors_1.inject)({ key: 'services.JWTTokenService' })),
-    __metadata("design:paramtypes", [services_1.JWTTokenService])
-], JWTAuthenticationStrategy);
-//# sourceMappingURL=jwt.strategy.js.map
+exports.JWSAuthenticationStrategy = JWSAuthenticationStrategy;
+exports.JWSAuthenticationStrategy = JWSAuthenticationStrategy = JWSAuthenticationStrategy_1 = __decorate([
+    __param(0, (0, injectors_1.inject)({
+        key: ignis_inversion_1.BindingKeys.build({
+            namespace: bindings_1.BindingNamespaces.SERVICE,
+            key: services_1.JWSTokenService.name,
+        }),
+    })),
+    __metadata("design:paramtypes", [services_1.JWSTokenService])
+], JWSAuthenticationStrategy);
+//# sourceMappingURL=jws.strategy.js.map

package/dist/components/auth/authenticate/strategies/jws.strategy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"jws.strategy.js","sourceRoot":"","sources":["../../../../../src/components/auth/authenticate/strategies/jws.strategy.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AACA,yDAAmD;AACnD,gDAAsD;AACtD,0DAAoD;AACpD,8DAAuD;AAEvD,sCAA8F;AAC9F,0CAA8C;AAE9C,IAAa,yBAAyB,iCAAtC,MAAa,yBACX,SAAQ,0BAAU;IAMlB,YAOE,OAAmC;QAEnC,KAAK,CAAC,EAAE,KAAK,EAAE,2BAAyB,CAAC,IAAI,EAAE,CAAC,CAAC;QAFzC,YAAO,GAAP,OAAO,CAAoB;QAVrC,SAAI,GAAG,uBAAc,CAAC,YAAY,CAAC;QACnC,aAAQ,GAAG,sBAAa,CAAC,GAAG,CAAC;IAY7B,CAAC;IAED,YAAY,CAAC,OAA4B;QACvC,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,kBAAkB,CAAC,OAAO,CAAC,CAAC;QACvD,OAAO,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACpC,CAAC;CACF,CAAA;AAvBY,8DAAyB;oCAAzB,yBAAyB;IAQjC,WAAA,IAAA,kBAAM,EAAC;QACN,GAAG,EAAE,6BAAW,CAAC,KAAK,CAAC;YACrB,SAAS,EAAE,4BAAiB,CAAC,OAAO;YACpC,GAAG,EAAE,0BAAe,CAAC,IAAI;SAC1B,CAAC;KACH,CAAC,CAAA;qCACe,0BAAe;GAdvB,yBAAyB,CAuBrC"}

package/dist/components/auth/authenticate/strategies/strategy-registry.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"strategy-registry.d.ts","sourceRoot":"","sources":["../../../../../src/components/auth/authenticate/strategies/strategy-registry.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,+BAA+B,CAAC;AAC1D,OAAO,EAAE,MAAM,EAAE,MAAM,wBAAwB,CAAC;AAChD,OAAO,EAAE,oBAAoB,EAAE,MAAM,YAAY,CAAC;AAClD,OAAO,EAAkB,uBAAuB,EAAE,MAAM,WAAW,CAAC;AAMpE,qBAAa,8BAA+B,SAAQ,oBAAoB,CAAC,uBAAuB,CAAC;IAC/F,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAiC;;IAOxD,MAAM,CAAC,WAAW;IASlB,SAAS,CAAC,gBAAgB,IAAI,MAAM;IAKpC,QAAQ,CAAC,IAAI,EAAE;QACb,SAAS,EAAE,SAAS,CAAC;QACrB,UAAU,EAAE;YAAE,QAAQ,EAAE,MAAM,CAAC,uBAAuB,CAAC,CAAC;YAAC,IAAI,EAAE,MAAM,CAAA;SAAE,EAAE,CAAC;KAC3E;IAUD,eAAe,CAAC,IAAI,EAAE;QAAE,IAAI,EAAE,MAAM,CAAA;KAAE,GAAG,uBAAuB;CAGjE"}
+{"version":3,"file":"strategy-registry.d.ts","sourceRoot":"","sources":["../../../../../src/components/auth/authenticate/strategies/strategy-registry.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,+BAA+B,CAAC;AAC1D,OAAO,EAAE,MAAM,EAAE,MAAM,wBAAwB,CAAC;AAChD,OAAO,EAAE,oBAAoB,EAAE,MAAM,YAAY,CAAC;AAClD,OAAO,EAAkB,uBAAuB,EAAE,MAAM,WAAW,CAAC;AAIpE,qBAAa,8BAA+B,SAAQ,oBAAoB,CAAC,uBAAuB,CAAC;IAC/F,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAiC;;IAMxD,MAAM,CAAC,WAAW;IAQlB,SAAS,CAAC,gBAAgB,IAAI,MAAM;IAIpC,QAAQ,CAAC,IAAI,EAAE;QACb,SAAS,EAAE,SAAS,CAAC;QACrB,UAAU,EAAE;YAAE,QAAQ,EAAE,MAAM,CAAC,uBAAuB,CAAC,CAAC;YAAC,IAAI,EAAE,MAAM,CAAA;SAAE,EAAE,CAAC;KAC3E;IAUD,eAAe,CAAC,IAAI,EAAE;QAAE,IAAI,EAAE,MAAM,CAAA;KAAE,GAAG,uBAAuB;CAGjE"}

package/dist/components/auth/authenticate/strategies/strategy-registry.js

@@ -3,11 +3,8 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.AuthenticationStrategyRegistry = void 0;
 const base_1 = require("../../base");
 const common_1 = require("../common");
-// -----------------------------------------------------------------------------------------------------
 // Authentication Strategy Registry — manages strategy registration and resolution
-// -----------------------------------------------------------------------------------------------------
 class AuthenticationStrategyRegistry extends base_1.AbstractAuthRegistry {
-    // ---------------------------------------------------------------------------
     constructor() {
         super({ scope: AuthenticationStrategyRegistry.name });
     }
@@ -17,11 +14,9 @@ class AuthenticationStrategyRegistry extends base_1.AbstractAuthRegistry {
         }
         return AuthenticationStrategyRegistry.instance;
     }
-    // ---------------------------------------------------------------------------
     getBindingPrefix() {
         return common_1.Authentication.AUTHENTICATION_STRATEGY;
     }
-    // ---------------------------------------------------------------------------
     register(opts) {
         const { container, strategies } = opts;
         for (const { strategy, name } of strategies) {

package/dist/components/auth/authenticate/strategies/strategy-registry.js.map

@@ -1 +1 @@
-{"version":3,"file":"strategy-registry.js","sourceRoot":"","sources":["../../../../../src/components/auth/authenticate/strategies/strategy-registry.ts"],"names":[],"mappings":";;;AAEA,qCAAkD;AAClD,sCAAoE;AAEpE,wGAAwG;AACxG,kFAAkF;AAClF,wGAAwG;AAExG,MAAa,8BAA+B,SAAQ,2BAA6C;IAG/F,8EAA8E;IAC9E;QACE,KAAK,CAAC,EAAE,KAAK,EAAE,8BAA8B,CAAC,IAAI,EAAE,CAAC,CAAC;IACxD,CAAC;IAED,MAAM,CAAC,WAAW;QAChB,IAAI,CAAC,8BAA8B,CAAC,QAAQ,EAAE,CAAC;YAC7C,8BAA8B,CAAC,QAAQ,GAAG,IAAI,8BAA8B,EAAE,CAAC;QACjF,CAAC;QAED,OAAO,8BAA8B,CAAC,QAAQ,CAAC;IACjD,CAAC;IAED,8EAA8E;IACpE,gBAAgB;QACxB,OAAO,uBAAc,CAAC,uBAAuB,CAAC;IAChD,CAAC;IAED,8EAA8E;IAC9E,QAAQ,CAAC,IAGR;QACC,MAAM,EAAE,SAAS,EAAE,UAAU,EAAE,GAAG,IAAI,CAAC;QAEvC,KAAK,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,IAAI,UAAU,EAAE,CAAC;YAC5C,IAAI,CAAC,kBAAkB,CAAC,EAAE,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;QACjE,CAAC;QAED,OAAO,IAAI,CAAC;IACd,CAAC;IAED,eAAe,CAAC,IAAsB;QACpC,OAAO,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC;IACtC,CAAC;CACF;AAtCD,wEAsCC"}
+{"version":3,"file":"strategy-registry.js","sourceRoot":"","sources":["../../../../../src/components/auth/authenticate/strategies/strategy-registry.ts"],"names":[],"mappings":";;;AAEA,qCAAkD;AAClD,sCAAoE;AAEpE,kFAAkF;AAElF,MAAa,8BAA+B,SAAQ,2BAA6C;IAG/F;QACE,KAAK,CAAC,EAAE,KAAK,EAAE,8BAA8B,CAAC,IAAI,EAAE,CAAC,CAAC;IACxD,CAAC;IAED,MAAM,CAAC,WAAW;QAChB,IAAI,CAAC,8BAA8B,CAAC,QAAQ,EAAE,CAAC;YAC7C,8BAA8B,CAAC,QAAQ,GAAG,IAAI,8BAA8B,EAAE,CAAC;QACjF,CAAC;QAED,OAAO,8BAA8B,CAAC,QAAQ,CAAC;IACjD,CAAC;IAES,gBAAgB;QACxB,OAAO,uBAAc,CAAC,uBAAuB,CAAC;IAChD,CAAC;IAED,QAAQ,CAAC,IAGR;QACC,MAAM,EAAE,SAAS,EAAE,UAAU,EAAE,GAAG,IAAI,CAAC;QAEvC,KAAK,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,IAAI,UAAU,EAAE,CAAC;YAC5C,IAAI,CAAC,kBAAkB,CAAC,EAAE,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;QACjE,CAAC;QAED,OAAO,IAAI,CAAC;IACd,CAAC;IAED,eAAe,CAAC,IAAsB;QACpC,OAAO,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC;IACtC,CAAC;CACF;AAnCD,wEAmCC"}

package/dist/components/auth/authorize/adapters/base-filtered.d.ts

@@ -0,0 +1,73 @@
+import { BaseHelper, ValueOrPromise } from '@venizia/ignis-helpers';
+import { type FilteredAdapter, type Model } from 'casbin';
+export interface IBaseFilteredAdapterEntities {
+    role: {
+        principalType: string;
+    };
+    domain?: {
+        principalType: string;
+    };
+}
+export interface ICasbinPolicyFilter {
+    principalType: string;
+    principalValue: string | number;
+}
+/**
+ * Base policy row shape.
+ *
+ * Declared as `type` (not `interface`) so it carries an implicit index signature —
+ * required by Drizzle's `connector.execute<T>()` which constrains `T extends Record<string, unknown>`.
+ */
+export type TBasePolicyRow = {
+    variant: string;
+    code: string;
+    action: string | null;
+    subjectType: string;
+    subjectId: string | number;
+    effect: string | null;
+    domain: string | null;
+};
+export declare abstract class BaseFilteredAdapter<TEntities extends IBaseFilteredAdapterEntities = IBaseFilteredAdapterEntities, TFilter = ICasbinPolicyFilter, TPolicyRow extends TBasePolicyRow = TBasePolicyRow> extends BaseHelper implements FilteredAdapter {
+    protected readonly entities: TEntities;
+    constructor(opts: {
+        scope: string;
+        entities: TEntities;
+    });
+    loadPolicy(): Promise<void>;
+    loadFilteredPolicy(model: Model, filter: TFilter): Promise<void>;
+    isFiltered(): boolean;
+    savePolicy(): Promise<boolean>;
+    addPolicy(): Promise<void>;
+    removePolicy(): Promise<void>;
+    removeFilteredPolicy(): Promise<void>;
+    /** Query direct permission policies assigned to the principal. Return casbin `p` lines. */
+    protected abstract buildDirectPolicies(opts: {
+        filter: TFilter;
+        rolePrincipal: string;
+    }): ValueOrPromise<string[]>;
+    /** Query role assignments for the principal. Return casbin `g` lines + role IDs. */
+    protected abstract buildGroupPolicies(opts: {
+        filter: TFilter;
+    }): ValueOrPromise<{
+        lines: string[];
+        roleIds: (string | number)[];
+    }>;
+    /** Query permission policies inherited through roles. Return casbin `p` lines. */
+    protected abstract buildRolePolicies(opts: {
+        roleIds: (string | number)[];
+        rolePrincipal: string;
+    }): ValueOrPromise<string[]>;
+    /** Format a domain value with optional entity prefix (e.g., `"Organization_<uuid>"`). */
+    protected formatDomain(domain: string | null): string | null;
+    /** Format a casbin grouping line: `g, <subject>, <role>[, <domain>]`. */
+    protected toGroupLine(opts: {
+        subject: string;
+        role: string;
+        domain: string | null;
+    }): string;
+    /** Format a casbin policy line: `p, <subject>, [<domain>,] <resource>, <action>, <effect>`. */
+    protected toPolicyLine(opts: {
+        row: TPolicyRow;
+    }): string | null;
+}
+//# sourceMappingURL=base-filtered.d.ts.map

package/dist/components/auth/authorize/adapters/base-filtered.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"base-filtered.d.ts","sourceRoot":"","sources":["../../../../../src/components/auth/authorize/adapters/base-filtered.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,cAAc,EAAE,MAAM,wBAAwB,CAAC;AACpE,OAAO,EAAE,KAAK,eAAe,EAAE,KAAK,KAAK,EAAE,MAAM,QAAQ,CAAC;AAE1D,MAAM,WAAW,4BAA4B;IAC3C,IAAI,EAAE;QAAE,aAAa,EAAE,MAAM,CAAA;KAAE,CAAC;IAChC,MAAM,CAAC,EAAE;QAAE,aAAa,EAAE,MAAM,CAAA;KAAE,CAAC;CACpC;AAED,MAAM,WAAW,mBAAmB;IAClC,aAAa,EAAE,MAAM,CAAC;IACtB,cAAc,EAAE,MAAM,GAAG,MAAM,CAAC;CACjC;AAED;;;;;GAKG;AACH,MAAM,MAAM,cAAc,GAAG;IAC3B,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE,MAAM,GAAG,MAAM,CAAC;IAC3B,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;CACvB,CAAC;AAYF,8BAAsB,mBAAmB,CACvC,SAAS,SAAS,4BAA4B,GAAG,4BAA4B,EAC7E,OAAO,GAAG,mBAAmB,EAC7B,UAAU,SAAS,cAAc,GAAG,cAAc,CAElD,SAAQ,UACR,YAAW,eAAe;IAE1B,SAAS,CAAC,QAAQ,CAAC,QAAQ,EAAE,SAAS,CAAC;gBAE3B,IAAI,EAAE;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,SAAS,CAAA;KAAE;IAOlD,UAAU,IAAI,OAAO,CAAC,IAAI,CAAC;IAI3B,kBAAkB,CAAC,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC;IAoBtE,UAAU,IAAI,OAAO;IAMf,UAAU,IAAI,OAAO,CAAC,OAAO,CAAC;IAI9B,SAAS,IAAI,OAAO,CAAC,IAAI,CAAC;IAI1B,YAAY,IAAI,OAAO,CAAC,IAAI,CAAC;IAI7B,oBAAoB,IAAI,OAAO,CAAC,IAAI,CAAC;IAM3C,2FAA2F;IAC3F,SAAS,CAAC,QAAQ,CAAC,mBAAmB,CAAC,IAAI,EAAE;QAC3C,MAAM,EAAE,OAAO,CAAC;QAChB,aAAa,EAAE,MAAM,CAAC;KACvB,GAAG,cAAc,CAAC,MAAM,EAAE,CAAC;IAE5B,oFAAoF;IACpF,SAAS,CAAC,QAAQ,CAAC,kBAAkB,CAAC,IAAI,EAAE;QAC1C,MAAM,EAAE,OAAO,CAAC;KACjB,GAAG,cAAc,CAAC;QAAE,KAAK,EAAE,MAAM,EAAE,CAAC;QAAC,OAAO,EAAE,CAAC,MAAM,GAAG,MAAM,CAAC,EAAE,CAAA;KAAE,CAAC;IAErE,kFAAkF;IAClF,SAAS,CAAC,QAAQ,CAAC,iBAAiB,CAAC,IAAI,EAAE;QACzC,OAAO,EAAE,CAAC,MAAM,GAAG,MAAM,CAAC,EAAE,CAAC;QAC7B,aAAa,EAAE,MAAM,CAAC;KACvB,GAAG,cAAc,CAAC,MAAM,EAAE,CAAC;IAI5B,yFAAyF;IACzF,SAAS,CAAC,YAAY,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI;IAS5C,yEAAyE;IACzE,SAAS,CAAC,WAAW,CAAC,IAAI,EAAE;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE;IASpF,+FAA+F;IAC/F,SAAS,CAAC,YAAY,CAAC,IAAI,EAAE;QAAE,GAAG,EAAE,UAAU,CAAA;KAAE;CAkBjD"}