@venizia/ignis 0.0.7-9 → 0.0.7

package/dist/components/auth/authenticate/controllers/jwks/controller.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"controller.js","sourceRoot":"","sources":["../../../../../../src/components/auth/authenticate/controllers/jwks/controller.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,kDAAyD;AACzD,yDAAmD;AACnD,gDAAsD;AACtD,0DAA8D;AAC9D,8DAAuD;AACvD,6CAAwD;AACxD,+CAA6C;AAE7C,IAAa,cAAc,sBAA3B,MAAa,cAAe,SAAQ,qBAAc;IAChD,YAOU,WAAmC;QAE3C,KAAK,CAAC;YACJ,KAAK,EAAE,gBAAc,CAAC,IAAI;YAC1B,IAAI,EAAE,QAAQ;YACd,QAAQ,EAAE,IAAI;SACf,CAAC,CAAC;QANK,gBAAW,GAAX,WAAW,CAAwB;IAO7C,CAAC;IAEQ,OAAO;QACd,IAAI,CAAC,WAAW,CAAC;YACf,OAAO,EAAE,0BAAY,CAAC,cAAc;YACpC,OAAO,EAAE,KAAK,EAAC,OAAO,EAAC,EAAE;gBACvB,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,YAAY,EAAE,CAAC;gBACnD,OAAO,CAAC,MAAM,CAAC,eAAe,EAAE,oDAAoD,CAAC,CAAC;gBACtF,OAAO,OAAO,CAAC,IAAI,CAAC,IAAI,EAAE,oBAAI,CAAC,WAAW,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YACtD,CAAC;SACF,CAAC,CAAC;IACL,CAAC;CACF,CAAA;AA3BY,wCAAc;yBAAd,cAAc;IAEtB,WAAA,IAAA,kBAAM,EAAC;QACN,GAAG,EAAE,6BAAW,CAAC,KAAK,CAAC;YACrB,SAAS,EAAE,4BAAiB,CAAC,OAAO;YACpC,GAAG,EAAE,iCAAsB,CAAC,IAAI;SACjC,CAAC;KACH,CAAC,CAAA;qCACmB,iCAAsB;GARlC,cAAc,CA2B1B"}

package/dist/components/auth/authenticate/controllers/jwks/definitions.d.ts

@@ -0,0 +1,66 @@
+import { z } from '@hono/zod-openapi';
+export declare const RouteConfigs: {
+    readonly GET_JWKS_CERTS: {
+        readonly path: "/";
+        readonly method: "get";
+        readonly responses: {
+            200: {
+                description: string;
+                content: {
+                    'application/json': {
+                        schema: z.ZodObject<{
+                            keys: z.ZodArray<z.ZodObject<{
+                                kty: z.ZodString;
+                                kid: z.ZodOptional<z.ZodString>;
+                                use: z.ZodOptional<z.ZodString>;
+                                alg: z.ZodOptional<z.ZodString>;
+                                crv: z.ZodOptional<z.ZodString>;
+                                x: z.ZodOptional<z.ZodString>;
+                                y: z.ZodOptional<z.ZodString>;
+                                n: z.ZodOptional<z.ZodString>;
+                                e: z.ZodOptional<z.ZodString>;
+                            }, z.core.$strip>>;
+                        }, z.core.$strip>;
+                    };
+                };
+                required: boolean | undefined;
+            } | {
+                headers: never;
+                description: string;
+                content: {
+                    'application/json': {
+                        schema: z.ZodObject<{
+                            keys: z.ZodArray<z.ZodObject<{
+                                kty: z.ZodString;
+                                kid: z.ZodOptional<z.ZodString>;
+                                use: z.ZodOptional<z.ZodString>;
+                                alg: z.ZodOptional<z.ZodString>;
+                                crv: z.ZodOptional<z.ZodString>;
+                                x: z.ZodOptional<z.ZodString>;
+                                y: z.ZodOptional<z.ZodString>;
+                                n: z.ZodOptional<z.ZodString>;
+                                e: z.ZodOptional<z.ZodString>;
+                            }, z.core.$strip>>;
+                        }, z.core.$strip>;
+                    };
+                };
+                required: boolean | undefined;
+            };
+            "4xx | 5xx": {
+                description: string;
+                content: {
+                    'application/json': {
+                        schema: z.ZodObject<{
+                            name: z.ZodOptional<z.ZodString>;
+                            statusCode: z.ZodOptional<z.ZodNumber>;
+                            messageCode: z.ZodOptional<z.ZodString>;
+                            message: z.ZodString;
+                        }, z.core.$catchall<z.ZodAny>>;
+                    };
+                };
+                required: boolean | undefined;
+            };
+        };
+    };
+};
+//# sourceMappingURL=definitions.d.ts.map

package/dist/components/auth/authenticate/controllers/jwks/definitions.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"definitions.d.ts","sourceRoot":"","sources":["../../../../../../src/components/auth/authenticate/controllers/jwks/definitions.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,CAAC,EAAE,MAAM,mBAAmB,CAAC;AAItC,eAAO,MAAM,YAAY;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CA0Bf,CAAC"}

package/dist/components/auth/authenticate/controllers/jwks/definitions.js

@@ -0,0 +1,32 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.RouteConfigs = void 0;
+const types_1 = require("../../../../../base/models/common/types");
+const zod_openapi_1 = require("@hono/zod-openapi");
+// The /certs endpoint is intentionally unauthenticated — it serves the public
+// JWKS needed by external verifiers to validate tokens issued by this service.
+exports.RouteConfigs = {
+    GET_JWKS_CERTS: {
+        path: '/',
+        method: 'get',
+        responses: (0, types_1.jsonResponse)({
+            schema: zod_openapi_1.z
+                .object({
+                keys: zod_openapi_1.z.array(zod_openapi_1.z.object({
+                    kty: zod_openapi_1.z.string(),
+                    kid: zod_openapi_1.z.string().optional(),
+                    use: zod_openapi_1.z.string().optional(),
+                    alg: zod_openapi_1.z.string().optional(),
+                    crv: zod_openapi_1.z.string().optional(),
+                    x: zod_openapi_1.z.string().optional(),
+                    y: zod_openapi_1.z.string().optional(),
+                    n: zod_openapi_1.z.string().optional(),
+                    e: zod_openapi_1.z.string().optional(),
+                })),
+            })
+                .openapi({ description: 'JSON Web Key Set' }),
+            description: 'JSON Web Key Set',
+        }),
+    },
+};
+//# sourceMappingURL=definitions.js.map

package/dist/components/auth/authenticate/controllers/jwks/definitions.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"definitions.js","sourceRoot":"","sources":["../../../../../../src/components/auth/authenticate/controllers/jwks/definitions.ts"],"names":[],"mappings":";;;AAAA,sDAA0D;AAC1D,mDAAsC;AAEtC,8EAA8E;AAC9E,+EAA+E;AAClE,QAAA,YAAY,GAAG;IAC1B,cAAc,EAAE;QACd,IAAI,EAAE,GAAG;QACT,MAAM,EAAE,KAAK;QACb,SAAS,EAAE,IAAA,oBAAY,EAAC;YACtB,MAAM,EAAE,eAAC;iBACN,MAAM,CAAC;gBACN,IAAI,EAAE,eAAC,CAAC,KAAK,CACX,eAAC,CAAC,MAAM,CAAC;oBACP,GAAG,EAAE,eAAC,CAAC,MAAM,EAAE;oBACf,GAAG,EAAE,eAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;oBAC1B,GAAG,EAAE,eAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;oBAC1B,GAAG,EAAE,eAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;oBAC1B,GAAG,EAAE,eAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;oBAC1B,CAAC,EAAE,eAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;oBACxB,CAAC,EAAE,eAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;oBACxB,CAAC,EAAE,eAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;oBACxB,CAAC,EAAE,eAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;iBACzB,CAAC,CACH;aACF,CAAC;iBACD,OAAO,CAAC,EAAE,WAAW,EAAE,kBAAkB,EAAE,CAAC;YAE/C,WAAW,EAAE,kBAAkB;SAChC,CAAC;KACH;CACO,CAAC"}

package/dist/components/auth/authenticate/controllers/jwks/index.d.ts

@@ -0,0 +1,2 @@
+export * from './controller';
+//# sourceMappingURL=index.d.ts.map

package/dist/components/auth/authenticate/controllers/jwks/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../../src/components/auth/authenticate/controllers/jwks/index.ts"],"names":[],"mappings":"AAAA,cAAc,cAAc,CAAC"}

package/dist/components/auth/authenticate/controllers/jwks/index.js

@@ -0,0 +1,18 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __exportStar = (this && this.__exportStar) || function(m, exports) {
+    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+__exportStar(require("./controller"), exports);
+//# sourceMappingURL=index.js.map

package/dist/components/auth/authenticate/controllers/jwks/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../../../src/components/auth/authenticate/controllers/jwks/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,+CAA6B"}

package/dist/components/auth/authenticate/middlewares/authenticate.middleware.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"authenticate.middleware.d.ts","sourceRoot":"","sources":["../../../../../src/components/auth/authenticate/middlewares/authenticate.middleware.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AAUtC,eAAO,MAAM,YAAY,GAAI,MAAM;IAAE,UAAU,EAAE,MAAM,EAAE,CAAC;IAAC,IAAI,CAAC,EAAE,SAAS,CAAA;CAAE,qCAE5E,CAAC"}
+{"version":3,"file":"authenticate.middleware.d.ts","sourceRoot":"","sources":["../../../../../src/components/auth/authenticate/middlewares/authenticate.middleware.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AAQtC,eAAO,MAAM,YAAY,GAAI,MAAM;IAAE,UAAU,EAAE,MAAM,EAAE,CAAC;IAAC,IAAI,CAAC,EAAE,SAAS,CAAA;CAAE,qCAE5E,CAAC"}

package/dist/components/auth/authenticate/middlewares/authenticate.middleware.js

@@ -2,9 +2,7 @@
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.authenticate = void 0;
 const providers_1 = require("../providers");
-// --------------------------------------------------------------------------------------------------------
 // Convenience function — singleton provider instance
-// --------------------------------------------------------------------------------------------------------
 const authenticationProvider = new providers_1.AuthenticationProvider();
 const authenticateFn = authenticationProvider.value();
 const authenticate = (opts) => {

package/dist/components/auth/authenticate/middlewares/authenticate.middleware.js.map

@@ -1 +1 @@
-{"version":3,"file":"authenticate.middleware.js","sourceRoot":"","sources":["../../../../../src/components/auth/authenticate/middlewares/authenticate.middleware.ts"],"names":[],"mappings":";;;AACA,4CAAsD;AAEtD,2GAA2G;AAC3G,qDAAqD;AACrD,2GAA2G;AAE3G,MAAM,sBAAsB,GAAG,IAAI,kCAAsB,EAAE,CAAC;AAC5D,MAAM,cAAc,GAAG,sBAAsB,CAAC,KAAK,EAAE,CAAC;AAE/C,MAAM,YAAY,GAAG,CAAC,IAAgD,EAAE,EAAE;IAC/E,OAAO,cAAc,CAAC,IAAI,CAAC,CAAC;AAC9B,CAAC,CAAC;AAFW,QAAA,YAAY,gBAEvB"}
+{"version":3,"file":"authenticate.middleware.js","sourceRoot":"","sources":["../../../../../src/components/auth/authenticate/middlewares/authenticate.middleware.ts"],"names":[],"mappings":";;;AACA,4CAAsD;AAEtD,qDAAqD;AAErD,MAAM,sBAAsB,GAAG,IAAI,kCAAsB,EAAE,CAAC;AAC5D,MAAM,cAAc,GAAG,sBAAsB,CAAC,KAAK,EAAE,CAAC;AAE/C,MAAM,YAAY,GAAG,CAAC,IAAgD,EAAE,EAAE;IAC/E,OAAO,cAAc,CAAC,IAAI,CAAC,CAAC;AAC9B,CAAC,CAAC;AAFW,QAAA,YAAY,gBAEvB"}

package/dist/components/auth/authenticate/providers/authentication.provider.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"authentication.provider.d.ts","sourceRoot":"","sources":["../../../../../src/components/auth/authenticate/providers/authentication.provider.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,UAAU,EAAkB,MAAM,wBAAwB,CAAC;AACpE,OAAO,EAAE,SAAS,EAAE,MAAM,0BAA0B,CAAC;AAErD,OAAO,EAIL,eAAe,EAEhB,MAAM,WAAW,CAAC;AAOnB,qBAAa,sBAAuB,SAAQ,UAAW,YAAW,SAAS,CAAC,eAAe,CAAC;;IAM1F,KAAK,IAAI,eAAe;IAOxB,OAAO,CAAC,4BAA4B;YAmDtB,cAAc;YA8Bd,cAAc;IAmC5B,OAAO,CAAC,cAAc;CAOvB"}
+{"version":3,"file":"authentication.provider.d.ts","sourceRoot":"","sources":["../../../../../src/components/auth/authenticate/providers/authentication.provider.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,UAAU,EAAkB,MAAM,wBAAwB,CAAC;AACpE,OAAO,EAAE,SAAS,EAAE,MAAM,0BAA0B,CAAC;AAErD,OAAO,EAIL,eAAe,EAEhB,MAAM,WAAW,CAAC;AAKnB,qBAAa,sBAAuB,SAAQ,UAAW,YAAW,SAAS,CAAC,eAAe,CAAC;;IAK1F,KAAK,IAAI,eAAe;IAMxB,OAAO,CAAC,4BAA4B;YAkDtB,cAAc;YA6Bd,cAAc;IAkC5B,OAAO,CAAC,cAAc;CAOvB"}

package/dist/components/auth/authenticate/providers/authentication.provider.js

@@ -5,20 +5,16 @@ const ignis_helpers_1 = require("@venizia/ignis-helpers");
 const factory_1 = require("hono/factory");
 const common_1 = require("../common");
 const strategies_1 = require("../strategies");
-// --------------------------------------------------------------------------------------------------------
 // Authentication Provider — produces middleware factory via IProvider pattern
-// --------------------------------------------------------------------------------------------------------
 class AuthenticationProvider extends ignis_helpers_1.BaseHelper {
     constructor() {
         super({ scope: AuthenticationProvider.name });
     }
-    // ---------------------------------------------------------------------------
     value() {
         return opts => {
             return this.createAuthenticateMiddleware(opts);
         };
     }
-    // ---------------------------------------------------------------------------
     createAuthenticateMiddleware(opts) {
         const { strategies, mode = common_1.AuthenticationModes.ANY } = opts;
         const registry = strategies_1.AuthenticationStrategyRegistry.getInstance();
@@ -65,7 +61,6 @@ class AuthenticationProvider extends ignis_helpers_1.BaseHelper {
             }
         });
     }
-    // ---------------------------------------------------------------------------
     async executeAnyMode(opts) {
         const { context, strategies, registry, next } = opts;
         for (const strategyName of strategies) {
@@ -88,7 +83,6 @@ class AuthenticationProvider extends ignis_helpers_1.BaseHelper {
             message: `Authentication failed. Tried strategies: ${strategies.join(', ')}`,
         });
     }
-    // ---------------------------------------------------------------------------
     async executeAllMode(opts) {
         const { context, strategies, registry, next } = opts;
         let authUser = null;
@@ -111,7 +105,6 @@ class AuthenticationProvider extends ignis_helpers_1.BaseHelper {
         }
         return next();
     }
-    // ---------------------------------------------------------------------------
     setCurrentUser(opts) {
         const { context, user } = opts;
         context.set(common_1.Authentication.CURRENT_USER, user);

package/dist/components/auth/authenticate/providers/authentication.provider.js.map

@@ -1 +1 @@
-{"version":3,"file":"authentication.provider.js","sourceRoot":"","sources":["../../../../../src/components/auth/authenticate/providers/authentication.provider.ts"],"names":[],"mappings":";;;AACA,0DAAoE;AAEpE,0CAAgD;AAChD,sCAMmB;AACnB,8CAA+D;AAE/D,2GAA2G;AAC3G,8EAA8E;AAC9E,2GAA2G;AAE3G,MAAa,sBAAuB,SAAQ,0BAAU;IACpD;QACE,KAAK,CAAC,EAAE,KAAK,EAAE,sBAAsB,CAAC,IAAI,EAAE,CAAC,CAAC;IAChD,CAAC;IAED,8EAA8E;IAC9E,KAAK;QACH,OAAO,IAAI,CAAC,EAAE;YACZ,OAAO,IAAI,CAAC,4BAA4B,CAAC,IAAI,CAAC,CAAC;QACjD,CAAC,CAAC;IACJ,CAAC;IAED,8EAA8E;IACtE,4BAA4B,CAAC,IAAgD;QACnF,MAAM,EAAE,UAAU,EAAE,IAAI,GAAG,4BAAmB,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC;QAC5D,MAAM,QAAQ,GAAG,2CAA8B,CAAC,WAAW,EAAE,CAAC;QAE9D,OAAO,IAAA,0BAAgB,EAAC,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE;YAC9C,qBAAqB;YACrB,MAAM,kBAAkB,GAAG,OAAO,CAAC,GAAG,CAAC,uBAAc,CAAC,mBAAmB,CAAC,CAAC;YAC3E,IAAI,kBAAkB,EAAE,CAAC;gBACvB,IAAI,CAAC,MAAM;qBACR,GAAG,CAAC,IAAI,CAAC,4BAA4B,CAAC,IAAI,CAAC;qBAC3C,KAAK,CAAC,yCAAyC,EAAE,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;gBACtE,OAAO,IAAI,EAAE,CAAC;YAChB,CAAC;YAED,oCAAoC;YACpC,MAAM,eAAe,GAAG,OAAO,CAAC,GAAG,CAAC,uBAAc,CAAC,YAAY,CAAC,CAAC;YACjE,IAAI,eAAe,EAAE,CAAC;gBACpB,OAAO,IAAI,EAAE,CAAC;YAChB,CAAC;YAED,sCAAsC;YACtC,QAAQ,IAAI,EAAE,CAAC;gBACb,KAAK,4BAAmB,CAAC,GAAG,CAAC,CAAC,CAAC;oBAC7B,MAAM,IAAI,CAAC,cAAc,CAAC;wBACxB,OAAO,EAAE,OAA8B;wBACvC,UAAU;wBACV,QAAQ;wBACR,IAAI;qBACL,CAAC,CAAC;oBACH,OAAO;gBACT,CAAC;gBACD,KAAK,4BAAmB,CAAC,GAAG,CAAC,CAAC,CAAC;oBAC7B,MAAM,IAAI,CAAC,cAAc,CAAC;wBACxB,OAAO,EAAE,OAA8B;wBACvC,UAAU;wBACV,QAAQ;wBACR,IAAI;qBACL,CAAC,CAAC;oBACH,OAAO;gBACT,CAAC;gBACD,OAAO,CAAC,CAAC,CAAC;oBACR,MAAM,IAAA,wBAAQ,EAAC;wBACb,UAAU,EAAE,oBAAI,CAAC,WAAW,CAAC,IAAI,CAAC,mBAAmB;wBACrD,OAAO,EAAE,uCAAuC,IAAI,EAAE;qBACvD,CAAC,CAAC;gBACL,CAAC;YACH,CAAC;QACH,CAAC,CAAC,CAAC;IACL,CAAC;IAED,8EAA8E;IACtE,KAAK,CAAC,cAAc,CAAC,IAK5B;QACC,MAAM,EAAE,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,IAAI,EAAE,GAAG,IAAI,CAAC;QAErD,KAAK,MAAM,YAAY,IAAI,UAAU,EAAE,CAAC;YACtC,IAAI,CAAC;gBACH,MAAM,QAAQ,GAAG,QAAQ,CAAC,eAAe,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,CAAC,CAAC;gBAClE,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC;gBAClD,IAAI,CAAC,cAAc,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;gBACvC,MAAM,IAAI,EAAE,CAAC;gBACb,OAAO;YACT,CAAC;YAAC,OAAO,MAAM,EAAE,CAAC;gBAChB,IAAI,CAAC,MAAM;qBACR,GAAG,CAAC,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC;qBAC7B,KAAK,CAAC,oCAAoC,EAAE,YAAY,CAAC,CAAC;YAC/D,CAAC;QACH,CAAC;QAED,wBAAwB;QACxB,MAAM,IAAA,wBAAQ,EAAC;YACb,UAAU,EAAE,oBAAI,CAAC,WAAW,CAAC,IAAI,CAAC,YAAY;YAC9C,OAAO,EAAE,4CAA4C,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;SAC7E,CAAC,CAAC;IACL,CAAC;IAED,8EAA8E;IACtE,KAAK,CAAC,cAAc,CAAC,IAK5B;QACC,MAAM,EAAE,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,IAAI,EAAE,GAAG,IAAI,CAAC;QACrD,IAAI,QAAQ,GAAqB,IAAI,CAAC;QAEtC,KAAK,MAAM,YAAY,IAAI,UAAU,EAAE,CAAC;YACtC,MAAM,QAAQ,GAAG,QAAQ,CAAC,eAAe,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,CAAC,CAAC;YAClE,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC;YAClD,QAAQ,GAAG,IAAI,CAAC;QAClB,CAAC;QAED,IAAI,QAAQ,EAAE,MAAM,EAAE,CAAC;YACrB,IAAI,CAAC,cAAc,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC;QACnD,CAAC;aAAM,CAAC;YACN,IAAI,CAAC,MAAM;iBACR,GAAG,CAAC,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC;iBAC7B,KAAK,CACJ,+DAA+D,EAC/D,QAAQ,EACR,QAAQ,EAAE,MAAM,CACjB,CAAC;YACJ,MAAM,IAAA,wBAAQ,EAAC;gBACb,UAAU,EAAE,oBAAI,CAAC,WAAW,CAAC,IAAI,CAAC,YAAY;gBAC9C,OAAO,EAAE,wCAAwC;aAClD,CAAC,CAAC;QACL,CAAC;QAED,OAAO,IAAI,EAAE,CAAC;IAChB,CAAC;IAED,8EAA8E;IACtE,cAAc,CAAC,IAA4C;QACjE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,GAAG,IAAI,CAAC;QAC/B,OAAO,CAAC,GAAG,CAAC,uBAAc,CAAC,YAAY,EAAE,IAAI,CAAC,CAAC;QAC/C,IAAI,IAAI,EAAE,MAAM,EAAE,CAAC;YACjB,OAAO,CAAC,GAAG,CAAC,uBAAc,CAAC,aAAa,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;QACzD,CAAC;IACH,CAAC;CACF;AAxID,wDAwIC"}
+{"version":3,"file":"authentication.provider.js","sourceRoot":"","sources":["../../../../../src/components/auth/authenticate/providers/authentication.provider.ts"],"names":[],"mappings":";;;AACA,0DAAoE;AAEpE,0CAAgD;AAChD,sCAMmB;AACnB,8CAA+D;AAE/D,8EAA8E;AAE9E,MAAa,sBAAuB,SAAQ,0BAAU;IACpD;QACE,KAAK,CAAC,EAAE,KAAK,EAAE,sBAAsB,CAAC,IAAI,EAAE,CAAC,CAAC;IAChD,CAAC;IAED,KAAK;QACH,OAAO,IAAI,CAAC,EAAE;YACZ,OAAO,IAAI,CAAC,4BAA4B,CAAC,IAAI,CAAC,CAAC;QACjD,CAAC,CAAC;IACJ,CAAC;IAEO,4BAA4B,CAAC,IAAgD;QACnF,MAAM,EAAE,UAAU,EAAE,IAAI,GAAG,4BAAmB,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC;QAC5D,MAAM,QAAQ,GAAG,2CAA8B,CAAC,WAAW,EAAE,CAAC;QAE9D,OAAO,IAAA,0BAAgB,EAAC,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE;YAC9C,qBAAqB;YACrB,MAAM,kBAAkB,GAAG,OAAO,CAAC,GAAG,CAAC,uBAAc,CAAC,mBAAmB,CAAC,CAAC;YAC3E,IAAI,kBAAkB,EAAE,CAAC;gBACvB,IAAI,CAAC,MAAM;qBACR,GAAG,CAAC,IAAI,CAAC,4BAA4B,CAAC,IAAI,CAAC;qBAC3C,KAAK,CAAC,yCAAyC,EAAE,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;gBACtE,OAAO,IAAI,EAAE,CAAC;YAChB,CAAC;YAED,oCAAoC;YACpC,MAAM,eAAe,GAAG,OAAO,CAAC,GAAG,CAAC,uBAAc,CAAC,YAAY,CAAC,CAAC;YACjE,IAAI,eAAe,EAAE,CAAC;gBACpB,OAAO,IAAI,EAAE,CAAC;YAChB,CAAC;YAED,sCAAsC;YACtC,QAAQ,IAAI,EAAE,CAAC;gBACb,KAAK,4BAAmB,CAAC,GAAG,CAAC,CAAC,CAAC;oBAC7B,MAAM,IAAI,CAAC,cAAc,CAAC;wBACxB,OAAO,EAAE,OAA8B;wBACvC,UAAU;wBACV,QAAQ;wBACR,IAAI;qBACL,CAAC,CAAC;oBACH,OAAO;gBACT,CAAC;gBACD,KAAK,4BAAmB,CAAC,GAAG,CAAC,CAAC,CAAC;oBAC7B,MAAM,IAAI,CAAC,cAAc,CAAC;wBACxB,OAAO,EAAE,OAA8B;wBACvC,UAAU;wBACV,QAAQ;wBACR,IAAI;qBACL,CAAC,CAAC;oBACH,OAAO;gBACT,CAAC;gBACD,OAAO,CAAC,CAAC,CAAC;oBACR,MAAM,IAAA,wBAAQ,EAAC;wBACb,UAAU,EAAE,oBAAI,CAAC,WAAW,CAAC,IAAI,CAAC,mBAAmB;wBACrD,OAAO,EAAE,uCAAuC,IAAI,EAAE;qBACvD,CAAC,CAAC;gBACL,CAAC;YACH,CAAC;QACH,CAAC,CAAC,CAAC;IACL,CAAC;IAEO,KAAK,CAAC,cAAc,CAAC,IAK5B;QACC,MAAM,EAAE,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,IAAI,EAAE,GAAG,IAAI,CAAC;QAErD,KAAK,MAAM,YAAY,IAAI,UAAU,EAAE,CAAC;YACtC,IAAI,CAAC;gBACH,MAAM,QAAQ,GAAG,QAAQ,CAAC,eAAe,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,CAAC,CAAC;gBAClE,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC;gBAClD,IAAI,CAAC,cAAc,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;gBACvC,MAAM,IAAI,EAAE,CAAC;gBACb,OAAO;YACT,CAAC;YAAC,OAAO,MAAM,EAAE,CAAC;gBAChB,IAAI,CAAC,MAAM;qBACR,GAAG,CAAC,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC;qBAC7B,KAAK,CAAC,oCAAoC,EAAE,YAAY,CAAC,CAAC;YAC/D,CAAC;QACH,CAAC;QAED,wBAAwB;QACxB,MAAM,IAAA,wBAAQ,EAAC;YACb,UAAU,EAAE,oBAAI,CAAC,WAAW,CAAC,IAAI,CAAC,YAAY;YAC9C,OAAO,EAAE,4CAA4C,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;SAC7E,CAAC,CAAC;IACL,CAAC;IAEO,KAAK,CAAC,cAAc,CAAC,IAK5B;QACC,MAAM,EAAE,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,IAAI,EAAE,GAAG,IAAI,CAAC;QACrD,IAAI,QAAQ,GAAqB,IAAI,CAAC;QAEtC,KAAK,MAAM,YAAY,IAAI,UAAU,EAAE,CAAC;YACtC,MAAM,QAAQ,GAAG,QAAQ,CAAC,eAAe,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,CAAC,CAAC;YAClE,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC;YAClD,QAAQ,GAAG,IAAI,CAAC;QAClB,CAAC;QAED,IAAI,QAAQ,EAAE,MAAM,EAAE,CAAC;YACrB,IAAI,CAAC,cAAc,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC;QACnD,CAAC;aAAM,CAAC;YACN,IAAI,CAAC,MAAM;iBACR,GAAG,CAAC,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC;iBAC7B,KAAK,CACJ,+DAA+D,EAC/D,QAAQ,EACR,QAAQ,EAAE,MAAM,CACjB,CAAC;YACJ,MAAM,IAAA,wBAAQ,EAAC;gBACb,UAAU,EAAE,oBAAI,CAAC,WAAW,CAAC,IAAI,CAAC,YAAY;gBAC9C,OAAO,EAAE,wCAAwC;aAClD,CAAC,CAAC;QACL,CAAC;QAED,OAAO,IAAI,EAAE,CAAC;IAChB,CAAC;IAEO,cAAc,CAAC,IAA4C;QACjE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,GAAG,IAAI,CAAC;QAC/B,OAAO,CAAC,GAAG,CAAC,uBAAc,CAAC,YAAY,EAAE,IAAI,CAAC,CAAC;QAC/C,IAAI,IAAI,EAAE,MAAM,EAAE,CAAC;YACjB,OAAO,CAAC,GAAG,CAAC,uBAAc,CAAC,aAAa,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;QACzD,CAAC;IACH,CAAC;CACF;AAnID,wDAmIC"}

package/dist/components/auth/authenticate/services/basic/index.d.ts

@@ -0,0 +1,2 @@
+export * from './service';
+//# sourceMappingURL=index.d.ts.map

package/dist/components/auth/authenticate/services/basic/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../../src/components/auth/authenticate/services/basic/index.ts"],"names":[],"mappings":"AAAA,cAAc,WAAW,CAAC"}

package/dist/components/auth/authenticate/services/basic/index.js

@@ -0,0 +1,18 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __exportStar = (this && this.__exportStar) || function(m, exports) {
+    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+__exportStar(require("./service"), exports);
+//# sourceMappingURL=index.js.map

package/dist/components/auth/authenticate/services/basic/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../../../src/components/auth/authenticate/services/basic/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,4CAA0B"}

package/dist/components/auth/authenticate/services/basic/service.d.ts

@@ -0,0 +1,24 @@
+import { TContext } from '../../../../../base/controllers/common/types';
+import { BaseService } from '../../../../../base/services/base';
+import { Env } from 'hono';
+import { IAuthUser, TBasicTokenServiceOptions } from '../../common';
+/** Extracts and verifies Basic auth credentials from the Authorization header. */
+export declare class BasicTokenService<E extends Env = Env> extends BaseService {
+    protected options: TBasicTokenServiceOptions<E>;
+    protected verifyCredentials: TBasicTokenServiceOptions<E>['verifyCredentials'];
+    constructor(options: TBasicTokenServiceOptions<E>);
+    /** Extracts username:password from Base64-encoded Authorization header. */
+    extractCredentials(context: TContext<E, string>): {
+        username: string;
+        password: string;
+    };
+    /** Verifies credentials via the user-provided verification function. */
+    verify(opts: {
+        credentials: {
+            username: string;
+            password: string;
+        };
+        context: TContext<E, string>;
+    }): Promise<IAuthUser>;
+}
+//# sourceMappingURL=service.d.ts.map

package/dist/components/auth/authenticate/services/basic/service.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"service.d.ts","sourceRoot":"","sources":["../../../../../../src/components/auth/authenticate/services/basic/service.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,iCAAiC,CAAC;AAE3D,OAAO,EAAE,WAAW,EAAE,MAAM,sBAAsB,CAAC;AAEnD,OAAO,EAAE,GAAG,EAAE,MAAM,MAAM,CAAC;AAC3B,OAAO,EAGL,SAAS,EACT,yBAAyB,EAC1B,MAAM,cAAc,CAAC;AAEtB,kFAAkF;AAClF,qBAAa,iBAAiB,CAAC,CAAC,SAAS,GAAG,GAAG,GAAG,CAAE,SAAQ,WAAW;IAKnE,SAAS,CAAC,OAAO,EAAE,yBAAyB,CAAC,CAAC,CAAC;IAJjD,SAAS,CAAC,iBAAiB,EAAE,yBAAyB,CAAC,CAAC,CAAC,CAAC,mBAAmB,CAAC,CAAC;gBAInE,OAAO,EAAE,yBAAyB,CAAC,CAAC,CAAC;IAcjD,2EAA2E;IAC3E,kBAAkB,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC,EAAE,MAAM,CAAC,GAAG;QAAE,QAAQ,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAA;KAAE;IAsDxF,wEAAwE;IAClE,MAAM,CAAC,IAAI,EAAE;QACjB,WAAW,EAAE;YAAE,QAAQ,EAAE,MAAM,CAAC;YAAC,QAAQ,EAAE,MAAM,CAAA;SAAE,CAAC;QACpD,OAAO,EAAE,QAAQ,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;KAC9B,GAAG,OAAO,CAAC,SAAS,CAAC;CAgBvB"}

package/dist/components/auth/authenticate/services/{basic-token.service.js → basic/service.js}

@@ -14,32 +14,11 @@ var __param = (this && this.__param) || function (paramIndex, decorator) {
 var BasicTokenService_1;
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.BasicTokenService = void 0;
-const injectors_1 = require("../../../../base/metadata/injectors");
-const base_1 = require("../../../../base/services/base");
+const injectors_1 = require("../../../../../base/metadata/injectors");
+const base_1 = require("../../../../../base/services/base");
 const ignis_helpers_1 = require("@venizia/ignis-helpers");
-const common_1 = require("../common");
-/**
- * Service for handling Basic Authentication.
- *
- * Extracts credentials from the `Authorization: Basic <base64>` header,
- * decodes them, and verifies using the provided verification function.
- *
- * @example
- * ```typescript
- * // Register with options
- * this.bind<IBasicTokenServiceOptions>({ key: AuthenticateBindingKeys.BASIC_OPTIONS })
- *   .toValue({
- *     verifyCredentials: async (creds, ctx) => {
- *       const user = await userRepo.findByUsername(creds.username);
- *       if (user && await bcrypt.compare(creds.password, user.passwordHash)) {
- *         return { userId: user.id, roles: user.roles };
- *       }
- *       return null;
- *     },
- *   });
- * this.service(BasicTokenService);
- * ```
- */
+const common_1 = require("../../common");
+/** Extracts and verifies Basic auth credentials from the Authorization header. */
 let BasicTokenService = BasicTokenService_1 = class BasicTokenService extends base_1.BaseService {
     constructor(options) {
         super({ scope: BasicTokenService_1.name });
@@ -52,16 +31,7 @@ let BasicTokenService = BasicTokenService_1 = class BasicTokenService extends ba
         }
         this.verifyCredentials = options.verifyCredentials;
     }
-    // --------------------------------------------------------------------------------------
-    /**
-     * Extract credentials from Authorization header.
-     *
-     * Expected format: `Authorization: Basic base64(username:password)`
-     *
-     * @param context - The Hono request context
-     * @returns The extracted username and password
-     * @throws 401 Unauthorized if header is missing, invalid schema, or invalid format
-     */
+    /** Extracts username:password from Base64-encoded Authorization header. */
     extractCredentials(context) {
         const authHeaderValue = context.req.header('Authorization');
         if (!authHeaderValue) {
@@ -107,15 +77,7 @@ let BasicTokenService = BasicTokenService_1 = class BasicTokenService extends ba
             });
         }
     }
-    // --------------------------------------------------------------------------------------
-    /**
-     * Verify credentials using the provided verification function.
-     *
-     * @param credentials - The extracted username and password
-     * @param context - The Hono request context
-     * @returns The authenticated user
-     * @throws 401 Unauthorized if credentials are invalid
-     */
+    /** Verifies credentials via the user-provided verification function. */
     async verify(opts) {
         const user = await this.verifyCredentials(opts);
         if (!user) {
@@ -135,4 +97,4 @@ exports.BasicTokenService = BasicTokenService = BasicTokenService_1 = __decorate
     __param(0, (0, injectors_1.inject)({ key: common_1.AuthenticateBindingKeys.BASIC_OPTIONS })),
     __metadata("design:paramtypes", [Object])
 ], BasicTokenService);
-//# sourceMappingURL=basic-token.service.js.map
+//# sourceMappingURL=service.js.map

package/dist/components/auth/authenticate/services/basic/service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"service.js","sourceRoot":"","sources":["../../../../../../src/components/auth/authenticate/services/basic/service.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AACA,yDAAmD;AACnD,+CAAmD;AACnD,0DAAwD;AAExD,yCAKsB;AAEtB,kFAAkF;AAClF,IAAa,iBAAiB,yBAA9B,MAAa,iBAAuC,SAAQ,kBAAW;IAGrE,YAEY,OAAqC;QAE/C,KAAK,CAAC,EAAE,KAAK,EAAE,mBAAiB,CAAC,IAAI,EAAE,CAAC,CAAC;QAF/B,YAAO,GAAP,OAAO,CAA8B;QAI/C,IAAI,CAAC,OAAO,EAAE,iBAAiB,EAAE,CAAC;YAChC,MAAM,IAAA,wBAAQ,EAAC;gBACb,UAAU,EAAE,oBAAI,CAAC,WAAW,CAAC,IAAI,CAAC,mBAAmB;gBACrD,OAAO,EAAE,wDAAwD;aAClE,CAAC,CAAC;QACL,CAAC;QAED,IAAI,CAAC,iBAAiB,GAAG,OAAO,CAAC,iBAAiB,CAAC;IACrD,CAAC;IAED,2EAA2E;IAC3E,kBAAkB,CAAC,OAA4B;QAC7C,MAAM,eAAe,GAAG,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC;QAE5D,IAAI,CAAC,eAAe,EAAE,CAAC;YACrB,MAAM,IAAA,wBAAQ,EAAC;gBACb,UAAU,EAAE,oBAAI,CAAC,WAAW,CAAC,IAAI,CAAC,YAAY;gBAC9C,OAAO,EAAE,4CAA4C;aACtD,CAAC,CAAC;QACL,CAAC;QAED,IAAI,CAAC,eAAe,CAAC,UAAU,CAAC,uBAAc,CAAC,UAAU,CAAC,EAAE,CAAC;YAC3D,MAAM,IAAA,wBAAQ,EAAC;gBACb,UAAU,EAAE,oBAAI,CAAC,WAAW,CAAC,IAAI,CAAC,YAAY;gBAC9C,OAAO,EAAE,4DAA4D;aACtE,CAAC,CAAC;QACL,CAAC;QAED,MAAM,KAAK,GAAG,eAAe,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QACzC,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACvB,MAAM,IAAA,wBAAQ,EAAC;gBACb,UAAU,EAAE,oBAAI,CAAC,WAAW,CAAC,IAAI,CAAC,YAAY;gBAC9C,OAAO,EAAE,mDAAmD;aAC7D,CAAC,CAAC;QACL,CAAC;QAED,MAAM,CAAC,EAAE,iBAAiB,CAAC,GAAG,KAAK,CAAC;QAEpC,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,iBAAiB,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;YAC3E,MAAM,UAAU,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;YAExC,IAAI,UAAU,KAAK,CAAC,CAAC,EAAE,CAAC;gBACtB,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAC;YAC7D,CAAC;YAED,MAAM,QAAQ,GAAG,OAAO,CAAC,SAAS,CAAC,CAAC,EAAE,UAAU,CAAC,CAAC;YAClD,MAAM,QAAQ,GAAG,OAAO,CAAC,SAAS,CAAC,UAAU,GAAG,CAAC,CAAC,CAAC;YAEnD,IAAI,CAAC,QAAQ,EAAE,CAAC;gBACd,MAAM,IAAI,KAAK,CAAC,mBAAmB,CAAC,CAAC;YACvC,CAAC;YAED,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,CAAC;QAChC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,MAAM;iBACR,GAAG,CAAC,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC;iBACjC,KAAK,CAAC,0CAA0C,EAAE,KAAK,CAAC,CAAC;YAC5D,MAAM,IAAA,wBAAQ,EAAC;gBACb,UAAU,EAAE,oBAAI,CAAC,WAAW,CAAC,IAAI,CAAC,YAAY;gBAC9C,OAAO,EAAE,iDAAiD;aAC3D,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,wEAAwE;IACxE,KAAK,CAAC,MAAM,CAAC,IAGZ;QACC,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC;QAEhD,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,IAAI,CAAC,MAAM;iBACR,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC;iBACrB,KAAK,CAAC,sCAAsC,EAAE,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAC;YAE5E,MAAM,IAAA,wBAAQ,EAAC;gBACb,UAAU,EAAE,oBAAI,CAAC,WAAW,CAAC,IAAI,CAAC,YAAY;gBAC9C,OAAO,EAAE,4CAA4C;aACtD,CAAC,CAAC;QACL,CAAC;QAED,OAAO,IAAI,CAAC;IACd,CAAC;CACF,CAAA;AA9FY,8CAAiB;4BAAjB,iBAAiB;IAIzB,WAAA,IAAA,kBAAM,EAAC,EAAE,GAAG,EAAE,gCAAuB,CAAC,aAAa,EAAE,CAAC,CAAA;;GAJ9C,iBAAiB,CA8F7B"}

package/dist/components/auth/authenticate/services/bearer/abstract.service.d.ts

@@ -0,0 +1,52 @@
+import { TContext } from '../../../../../base/controllers/common/types';
+import { BaseService } from '../../../../../base/services/base';
+import { AES, AESAlgorithmType, ValueOrPromise } from '@venizia/ignis-helpers';
+import { Env } from 'hono';
+import { JWTPayload, JWTVerifyResult, SignJWT } from 'jose';
+import { IJWTTokenPayload, IPayloadFieldCodec, TGetTokenExpiresFn } from '../../common';
+/** Abstract base for Bearer-token services (JWS, JWKS) with optional AES payload encryption. */
+export declare abstract class AbstractBearerTokenService<E extends Env = Env> extends BaseService {
+    /** Standard JWT fields that are never encrypted. */
+    static readonly JWT_COMMON_FIELDS: Set<keyof JWTPayload>;
+    protected aes: AES | null;
+    protected applicationSecret: string | null;
+    protected fieldCodecs: Map<string, IPayloadFieldCodec>;
+    /** Configures AES payload encryption and field codecs. Both aesAlgorithm and applicationSecret required to activate encryption. */
+    protected configurePayloadEncryption(opts: {
+        aesAlgorithm?: AESAlgorithmType;
+        applicationSecret?: string;
+        fieldCodecs?: IPayloadFieldCodec[];
+    }): void;
+    extractCredentials(context: TContext<E, string>): {
+        type: string;
+        token: string;
+    };
+    verify(opts: {
+        type: string;
+        token: string;
+    }): Promise<IJWTTokenPayload>;
+    generate(opts: {
+        payload: IJWTTokenPayload;
+        getTokenExpiresFn?: TGetTokenExpiresFn;
+    }): Promise<string>;
+    protected serializeField(opts: {
+        key: string;
+        value: any;
+    }): string;
+    encryptPayload(payload: IJWTTokenPayload): Record<string, any>;
+    protected deserializeField(opts: {
+        key: string;
+        value: string;
+    }): any;
+    decryptPayload(opts: {
+        result: JWTVerifyResult<IJWTTokenPayload>;
+    }): IJWTTokenPayload;
+    protected abstract doVerify(token: string): Promise<IJWTTokenPayload>;
+    abstract getSigner(opts: {
+        payload: IJWTTokenPayload;
+        getTokenExpiresFn: TGetTokenExpiresFn;
+    }): Promise<SignJWT>;
+    protected abstract getSigningKey(): ValueOrPromise<Uint8Array | CryptoKey>;
+    protected abstract getDefaultTokenExpiresFn(): TGetTokenExpiresFn;
+}
+//# sourceMappingURL=abstract.service.d.ts.map

package/dist/components/auth/authenticate/services/bearer/abstract.service.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"abstract.service.d.ts","sourceRoot":"","sources":["../../../../../../src/components/auth/authenticate/services/bearer/abstract.service.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,iCAAiC,CAAC;AAC3D,OAAO,EAAE,WAAW,EAAE,MAAM,sBAAsB,CAAC;AACnD,OAAO,EAAE,GAAG,EAAE,gBAAgB,EAAkB,cAAc,EAAE,MAAM,wBAAwB,CAAC;AAC/F,OAAO,EAAE,GAAG,EAAE,MAAM,MAAM,CAAC;AAC3B,OAAO,EAAE,UAAU,EAAE,eAAe,EAAE,OAAO,EAAE,MAAM,MAAM,CAAC;AAC5D,OAAO,EAEL,gBAAgB,EAChB,kBAAkB,EAClB,kBAAkB,EACnB,MAAM,cAAc,CAAC;AAEtB,gGAAgG;AAChG,8BAAsB,0BAA0B,CAAC,CAAC,SAAS,GAAG,GAAG,GAAG,CAAE,SAAQ,WAAW;IACvF,oDAAoD;IACpD,MAAM,CAAC,QAAQ,CAAC,iBAAiB,wBAQ9B;IAEH,SAAS,CAAC,GAAG,EAAE,GAAG,GAAG,IAAI,CAAQ;IACjC,SAAS,CAAC,iBAAiB,EAAE,MAAM,GAAG,IAAI,CAAQ;IAClD,SAAS,CAAC,WAAW,EAAE,GAAG,CAAC,MAAM,EAAE,kBAAkB,CAAC,CAAa;IAEnE,mIAAmI;IACnI,SAAS,CAAC,0BAA0B,CAAC,IAAI,EAAE;QACzC,YAAY,CAAC,EAAE,gBAAgB,CAAC;QAChC,iBAAiB,CAAC,EAAE,MAAM,CAAC;QAC3B,WAAW,CAAC,EAAE,kBAAkB,EAAE,CAAC;KACpC,GAAG,IAAI;IAiBR,kBAAkB,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC,EAAE,MAAM,CAAC,GAAG;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE;IA8B3E,MAAM,CAAC,IAAI,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,gBAAgB,CAAC;IAqBxE,QAAQ,CAAC,IAAI,EAAE;QACnB,OAAO,EAAE,gBAAgB,CAAC;QAC1B,iBAAiB,CAAC,EAAE,kBAAkB,CAAC;KACxC,GAAG,OAAO,CAAC,MAAM,CAAC;IAwBnB,SAAS,CAAC,cAAc,CAAC,IAAI,EAAE;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,GAAG,CAAA;KAAE,GAAG,MAAM;IAWnE,cAAc,CAAC,OAAO,EAAE,gBAAgB,GAAG,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC;IAqC9D,SAAS,CAAC,gBAAgB,CAAC,IAAI,EAAE;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE;IAW/D,cAAc,CAAC,IAAI,EAAE;QAAE,MAAM,EAAE,eAAe,CAAC,gBAAgB,CAAC,CAAA;KAAE,GAAG,gBAAgB;IAiCrF,SAAS,CAAC,QAAQ,CAAC,QAAQ,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,gBAAgB,CAAC;IAErE,QAAQ,CAAC,SAAS,CAAC,IAAI,EAAE;QACvB,OAAO,EAAE,gBAAgB,CAAC;QAC1B,iBAAiB,EAAE,kBAAkB,CAAC;KACvC,GAAG,OAAO,CAAC,OAAO,CAAC;IAEpB,SAAS,CAAC,QAAQ,CAAC,aAAa,IAAI,cAAc,CAAC,UAAU,GAAG,SAAS,CAAC;IAE1E,SAAS,CAAC,QAAQ,CAAC,wBAAwB,IAAI,kBAAkB;CAClE"}

package/dist/components/auth/authenticate/services/bearer/abstract.service.js

@@ -0,0 +1,177 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.AbstractBearerTokenService = void 0;
+const base_1 = require("../../../../../base/services/base");
+const ignis_helpers_1 = require("@venizia/ignis-helpers");
+const common_1 = require("../../common");
+/** Abstract base for Bearer-token services (JWS, JWKS) with optional AES payload encryption. */
+class AbstractBearerTokenService extends base_1.BaseService {
+    constructor() {
+        super(...arguments);
+        this.aes = null;
+        this.applicationSecret = null;
+        this.fieldCodecs = new Map();
+    }
+    /** Standard JWT fields that are never encrypted. */
+    static { this.JWT_COMMON_FIELDS = new Set([
+        'iss',
+        'sub',
+        'aud',
+        'jti',
+        'nbf',
+        'exp',
+        'iat',
+    ]); }
+    /** Configures AES payload encryption and field codecs. Both aesAlgorithm and applicationSecret required to activate encryption. */
+    configurePayloadEncryption(opts) {
+        const { aesAlgorithm = 'aes-256-cbc', applicationSecret, fieldCodecs } = opts;
+        if (fieldCodecs) {
+            for (const codec of fieldCodecs) {
+                this.fieldCodecs.set(codec.key, codec);
+            }
+        }
+        if (!applicationSecret) {
+            return;
+        }
+        this.aes = ignis_helpers_1.AES.withAlgorithm(aesAlgorithm);
+        this.applicationSecret = applicationSecret;
+    }
+    extractCredentials(context) {
+        const request = context.req;
+        const authHeaderValue = request.header('Authorization');
+        if (!authHeaderValue) {
+            throw (0, ignis_helpers_1.getError)({
+                statusCode: ignis_helpers_1.HTTP.ResultCodes.RS_4.Unauthorized,
+                message: 'Unauthorized user! Missing authorization header',
+            });
+        }
+        if (!authHeaderValue.startsWith(common_1.Authentication.TYPE_BEARER)) {
+            throw (0, ignis_helpers_1.getError)({
+                statusCode: ignis_helpers_1.HTTP.ResultCodes.RS_4.Unauthorized,
+                message: 'Unauthorized user! Invalid schema of request token!',
+            });
+        }
+        const parts = authHeaderValue.split(' ');
+        if (parts.length !== 2) {
+            throw (0, ignis_helpers_1.getError)({
+                statusCode: ignis_helpers_1.HTTP.ResultCodes.RS_4.Unauthorized,
+                message: `Authorization header value is invalid format. It must follow the pattern: 'Bearer xx.yy.zz' where xx.yy.zz is a valid JWT token.`,
+            });
+        }
+        const [tokenType, tokenValue] = parts;
+        return { type: tokenType, token: tokenValue };
+    }
+    async verify(opts) {
+        const { token } = opts;
+        if (!token) {
+            this.logger.for(this.verify.name).error('Missing token for validating request!');
+            throw (0, ignis_helpers_1.getError)({
+                statusCode: ignis_helpers_1.HTTP.ResultCodes.RS_4.Unauthorized,
+                message: '[verify] Invalid request token!',
+            });
+        }
+        try {
+            return await this.doVerify(token);
+        }
+        catch (error) {
+            this.logger.for(this.verify.name).error('Failed to verify token | Error: %s', error);
+            throw (0, ignis_helpers_1.getError)({
+                statusCode: ignis_helpers_1.HTTP.ResultCodes.RS_4.Unauthorized,
+                message: '[verify] Invalid or expired token',
+            });
+        }
+    }
+    async generate(opts) {
+        const { payload, getTokenExpiresFn = this.getDefaultTokenExpiresFn() } = opts;
+        if (!payload) {
+            throw (0, ignis_helpers_1.getError)({
+                statusCode: ignis_helpers_1.HTTP.ResultCodes.RS_4.Unauthorized,
+                message: '[generate] Invalid token payload!',
+            });
+        }
+        const signer = await this.getSigner({ payload, getTokenExpiresFn });
+        try {
+            const rs = await signer.sign(await this.getSigningKey());
+            return rs;
+        }
+        catch (error) {
+            this.logger.for(this.generate.name).error('Failed to generate token | Error: %s', error);
+            throw (0, ignis_helpers_1.getError)({
+                statusCode: ignis_helpers_1.HTTP.ResultCodes.RS_5.InternalServerError,
+                message: '[generate] Failed to generate token',
+            });
+        }
+    }
+    serializeField(opts) {
+        const { key, value } = opts;
+        const codec = this.fieldCodecs.get(key);
+        if (codec) {
+            return codec.serialize({ value });
+        }
+        return JSON.stringify(value);
+    }
+    encryptPayload(payload) {
+        if (!this.aes || !this.applicationSecret) {
+            return payload;
+        }
+        const rs = {};
+        const keys = Object.keys(payload);
+        for (const key of keys) {
+            const value = payload[key];
+            if (AbstractBearerTokenService.JWT_COMMON_FIELDS.has(key)) {
+                rs[key] = value;
+                continue;
+            }
+            // NOTE: Skip undefined or null values because they cannot be encrypted
+            if (value === undefined || value === null) {
+                continue;
+            }
+            const encryptedKey = this.aes.encrypt({
+                message: key,
+                secret: this.applicationSecret,
+            });
+            const serialized = this.serializeField({ key, value });
+            rs[encryptedKey] = this.aes.encrypt({
+                message: serialized,
+                secret: this.applicationSecret,
+            });
+        }
+        return rs;
+    }
+    deserializeField(opts) {
+        const { key, value } = opts;
+        const codec = this.fieldCodecs.get(key);
+        if (codec) {
+            return codec.deserialize({ raw: value });
+        }
+        return JSON.parse(value);
+    }
+    decryptPayload(opts) {
+        const { payload, protectedHeader } = opts.result;
+        if (!this.aes || !this.applicationSecret) {
+            return payload;
+        }
+        this.logger
+            .for(this.decryptPayload.name)
+            .debug('JWT Token | payload: %j | header: %j', payload, protectedHeader);
+        const rs = {};
+        for (const key in payload) {
+            if (AbstractBearerTokenService.JWT_COMMON_FIELDS.has(key)) {
+                rs[key] = payload[key];
+                continue;
+            }
+            const decryptedKey = this.aes.decrypt({
+                message: key,
+                secret: this.applicationSecret,
+            });
+            const decryptedValue = this.aes.decrypt({
+                message: payload[key],
+                secret: this.applicationSecret,
+            });
+            rs[decryptedKey] = this.deserializeField({ key: decryptedKey, value: decryptedValue });
+        }
+        return rs;
+    }
+}
+exports.AbstractBearerTokenService = AbstractBearerTokenService;
+//# sourceMappingURL=abstract.service.js.map

package/dist/components/auth/authenticate/services/bearer/abstract.service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"abstract.service.js","sourceRoot":"","sources":["../../../../../../src/components/auth/authenticate/services/bearer/abstract.service.ts"],"names":[],"mappings":";;;AACA,+CAAmD;AACnD,0DAA+F;AAG/F,yCAKsB;AAEtB,gGAAgG;AAChG,MAAsB,0BAAgD,SAAQ,kBAAW;IAAzF;;QAYY,QAAG,GAAe,IAAI,CAAC;QACvB,sBAAiB,GAAkB,IAAI,CAAC;QACxC,gBAAW,GAAoC,IAAI,GAAG,EAAE,CAAC;IA4MrE,CAAC;IAzNC,oDAAoD;aACpC,sBAAiB,GAAG,IAAI,GAAG,CAAmB;QAC5D,KAAK;QACL,KAAK;QACL,KAAK;QACL,KAAK;QACL,KAAK;QACL,KAAK;QACL,KAAK;KACN,CAAC,AAR+B,CAQ9B;IAMH,mIAAmI;IACzH,0BAA0B,CAAC,IAIpC;QACC,MAAM,EAAE,YAAY,GAAG,aAAa,EAAE,iBAAiB,EAAE,WAAW,EAAE,GAAG,IAAI,CAAC;QAE9E,IAAI,WAAW,EAAE,CAAC;YAChB,KAAK,MAAM,KAAK,IAAI,WAAW,EAAE,CAAC;gBAChC,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;YACzC,CAAC;QACH,CAAC;QAED,IAAI,CAAC,iBAAiB,EAAE,CAAC;YACvB,OAAO;QACT,CAAC;QAED,IAAI,CAAC,GAAG,GAAG,mBAAG,CAAC,aAAa,CAAC,YAAY,CAAC,CAAC;QAC3C,IAAI,CAAC,iBAAiB,GAAG,iBAAiB,CAAC;IAC7C,CAAC;IAED,kBAAkB,CAAC,OAA4B;QAC7C,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC;QAE5B,MAAM,eAAe,GAAG,OAAO,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC;QACxD,IAAI,CAAC,eAAe,EAAE,CAAC;YACrB,MAAM,IAAA,wBAAQ,EAAC;gBACb,UAAU,EAAE,oBAAI,CAAC,WAAW,CAAC,IAAI,CAAC,YAAY;gBAC9C,OAAO,EAAE,iDAAiD;aAC3D,CAAC,CAAC;QACL,CAAC;QAED,IAAI,CAAC,eAAe,CAAC,UAAU,CAAC,uBAAc,CAAC,WAAW,CAAC,EAAE,CAAC;YAC5D,MAAM,IAAA,wBAAQ,EAAC;gBACb,UAAU,EAAE,oBAAI,CAAC,WAAW,CAAC,IAAI,CAAC,YAAY;gBAC9C,OAAO,EAAE,qDAAqD;aAC/D,CAAC,CAAC;QACL,CAAC;QAED,MAAM,KAAK,GAAG,eAAe,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QACzC,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACvB,MAAM,IAAA,wBAAQ,EAAC;gBACb,UAAU,EAAE,oBAAI,CAAC,WAAW,CAAC,IAAI,CAAC,YAAY;gBAC9C,OAAO,EAAE,kIAAkI;aAC5I,CAAC,CAAC;QACL,CAAC;QAED,MAAM,CAAC,SAAS,EAAE,UAAU,CAAC,GAAG,KAAK,CAAC;QACtC,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,UAAU,EAAE,CAAC;IAChD,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,IAAqC;QAChD,MAAM,EAAE,KAAK,EAAE,GAAG,IAAI,CAAC;QACvB,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,uCAAuC,CAAC,CAAC;YACjF,MAAM,IAAA,wBAAQ,EAAC;gBACb,UAAU,EAAE,oBAAI,CAAC,WAAW,CAAC,IAAI,CAAC,YAAY;gBAC9C,OAAO,EAAE,iCAAiC;aAC3C,CAAC,CAAC;QACL,CAAC;QAED,IAAI,CAAC;YACH,OAAO,MAAM,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;QACpC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,oCAAoC,EAAE,KAAK,CAAC,CAAC;YACrF,MAAM,IAAA,wBAAQ,EAAC;gBACb,UAAU,EAAE,oBAAI,CAAC,WAAW,CAAC,IAAI,CAAC,YAAY;gBAC9C,OAAO,EAAE,mCAAmC;aAC7C,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,KAAK,CAAC,QAAQ,CAAC,IAGd;QACC,MAAM,EAAE,OAAO,EAAE,iBAAiB,GAAG,IAAI,CAAC,wBAAwB,EAAE,EAAE,GAAG,IAAI,CAAC;QAE9E,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,MAAM,IAAA,wBAAQ,EAAC;gBACb,UAAU,EAAE,oBAAI,CAAC,WAAW,CAAC,IAAI,CAAC,YAAY;gBAC9C,OAAO,EAAE,mCAAmC;aAC7C,CAAC,CAAC;QACL,CAAC;QAED,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,iBAAiB,EAAE,CAAC,CAAC;QAEpE,IAAI,CAAC;YACH,MAAM,EAAE,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,MAAM,IAAI,CAAC,aAAa,EAAE,CAAC,CAAC;YACzD,OAAO,EAAE,CAAC;QACZ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,sCAAsC,EAAE,KAAK,CAAC,CAAC;YACzF,MAAM,IAAA,wBAAQ,EAAC;gBACb,UAAU,EAAE,oBAAI,CAAC,WAAW,CAAC,IAAI,CAAC,mBAAmB;gBACrD,OAAO,EAAE,qCAAqC;aAC/C,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAES,cAAc,CAAC,IAAiC;QACxD,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,GAAG,IAAI,CAAC;QAC5B,MAAM,KAAK,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAExC,IAAI,KAAK,EAAE,CAAC;YACV,OAAO,KAAK,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;QACpC,CAAC;QAED,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IAC/B,CAAC;IAED,cAAc,CAAC,OAAyB;QACtC,IAAI,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC,iBAAiB,EAAE,CAAC;YACzC,OAAO,OAAO,CAAC;QACjB,CAAC;QAED,MAAM,EAAE,GAA2B,EAAE,CAAC;QAEtC,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAClC,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;YACvB,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC;YAE3B,IAAI,0BAA0B,CAAC,iBAAiB,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;gBAC1D,EAAE,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;gBAChB,SAAS;YACX,CAAC;YAED,uEAAuE;YACvE,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;gBAC1C,SAAS;YACX,CAAC;YAED,MAAM,YAAY,GAAG,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC;gBACpC,OAAO,EAAE,GAAG;gBACZ,MAAM,EAAE,IAAI,CAAC,iBAAiB;aAC/B,CAAC,CAAC;YAEH,MAAM,UAAU,GAAG,IAAI,CAAC,cAAc,CAAC,EAAE,GAAG,EAAE,KAAK,EAAE,CAAC,CAAC;YAEvD,EAAE,CAAC,YAAY,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC;gBAClC,OAAO,EAAE,UAAU;gBACnB,MAAM,EAAE,IAAI,CAAC,iBAAiB;aAC/B,CAAC,CAAC;QACL,CAAC;QAED,OAAO,EAAE,CAAC;IACZ,CAAC;IAES,gBAAgB,CAAC,IAAoC;QAC7D,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,GAAG,IAAI,CAAC;QAC5B,MAAM,KAAK,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAExC,IAAI,KAAK,EAAE,CAAC;YACV,OAAO,KAAK,CAAC,WAAW,CAAC,EAAE,GAAG,EAAE,KAAK,EAAE,CAAC,CAAC;QAC3C,CAAC;QAED,OAAO,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IAC3B,CAAC;IAED,cAAc,CAAC,IAAmD;QAChE,MAAM,EAAE,OAAO,EAAE,eAAe,EAAE,GAAG,IAAI,CAAC,MAAM,CAAC;QAEjD,IAAI,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC,iBAAiB,EAAE,CAAC;YACzC,OAAO,OAA2B,CAAC;QACrC,CAAC;QAED,IAAI,CAAC,MAAM;aACR,GAAG,CAAC,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC;aAC7B,KAAK,CAAC,sCAAsC,EAAE,OAAO,EAAE,eAAe,CAAC,CAAC;QAE3E,MAAM,EAAE,GAAQ,EAAE,CAAC;QACnB,KAAK,MAAM,GAAG,IAAI,OAAO,EAAE,CAAC;YAC1B,IAAI,0BAA0B,CAAC,iBAAiB,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;gBAC1D,EAAE,CAAC,GAAG,CAAC,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC;gBACvB,SAAS;YACX,CAAC;YAED,MAAM,YAAY,GAAG,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC;gBACpC,OAAO,EAAE,GAAG;gBACZ,MAAM,EAAE,IAAI,CAAC,iBAAiB;aAC/B,CAAC,CAAC;YACH,MAAM,cAAc,GAAG,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC;gBACtC,OAAO,EAAE,OAAO,CAAC,GAAG,CAAC;gBACrB,MAAM,EAAE,IAAI,CAAC,iBAAiB;aAC/B,CAAC,CAAC;YAEH,EAAE,CAAC,YAAY,CAAC,GAAG,IAAI,CAAC,gBAAgB,CAAC,EAAE,GAAG,EAAE,YAAY,EAAE,KAAK,EAAE,cAAc,EAAE,CAAC,CAAC;QACzF,CAAC;QAED,OAAO,EAAE,CAAC;IACZ,CAAC;;AA9MH,gEA0NC"}