@venizia/ignis 0.4.3 → 0.4.4

package/dist/components/auth/authenticate/component.js

@@ -1,274 +0,0 @@
-"use strict";
-var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
-    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
-    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
-    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
-    return c > 3 && r && Object.defineProperty(target, key, r), r;
-};
-var __metadata = (this && this.__metadata) || function (k, v) {
-    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
-};
-var __param = (this && this.__param) || function (paramIndex, decorator) {
-    return function (target, key) { decorator(target, key, paramIndex); }
-};
-var AuthenticateComponent_1;
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.AuthenticateComponent = void 0;
-const core_1 = require("@venizia/ignis-helpers/core");
-const ignis_inversion_1 = require("@venizia/ignis-inversion");
-const ignis_kernel_1 = require("@venizia/ignis-kernel");
-const controllers_1 = require("./controllers");
-const service_certs_1 = require("./controllers/service-certs");
-const services_1 = require("./services");
-const jose_loader_1 = require("./services/jose-loader");
-const signer_service_1 = require("./services/service/signer.service");
-const verifier_service_1 = require("./services/service/verifier.service");
-const service_strategy_1 = require("./strategies/service.strategy");
-const DEFAULT_SECRET = 'unknown_secret';
-let AuthenticateComponent = AuthenticateComponent_1 = class AuthenticateComponent extends ignis_kernel_1.BaseComponent {
-    constructor(application) {
-        super({
-            scope: AuthenticateComponent_1.name,
-            initDefault: { enable: true, container: application },
-            bindings: {
-                [ignis_kernel_1.AuthenticateBindingKeys.REST_OPTIONS]: ignis_inversion_1.Binding.bind({
-                    key: ignis_kernel_1.AuthenticateBindingKeys.REST_OPTIONS,
-                }).toValue({ useAuthController: false }),
-            },
-        });
-        this.application = application;
-    }
-    binding() {
-        const jwtOptions = this.application.get({
-            key: ignis_kernel_1.AuthenticateBindingKeys.JWT_OPTIONS,
-            isOptional: true,
-        });
-        const basicOptions = this.application.get({
-            key: ignis_kernel_1.AuthenticateBindingKeys.BASIC_OPTIONS,
-            isOptional: true,
-        });
-        const restOptions = this.application.get({
-            key: ignis_kernel_1.AuthenticateBindingKeys.REST_OPTIONS,
-            isOptional: true,
-        });
-        const serviceOptions = this.application.get({
-            key: ignis_kernel_1.AuthenticateBindingKeys.SERVICE_OPTIONS,
-            isOptional: true,
-        });
-        // A service that only VERIFIES assertions needs neither jwt nor basic - and that application,
-        // an IGNIS app consuming no user tokens at all, is exactly what the service strategy is for.
-        if (!jwtOptions && !basicOptions && !serviceOptions) {
-            throw (0, core_1.getError)({
-                message: '[AuthenticateComponent] At least one of jwtOptions, basicOptions or serviceOptions must be provided',
-            });
-        }
-        const options = { restOptions, jwtOptions, basicOptions, serviceOptions };
-        if (jwtOptions) {
-            switch (jwtOptions.standard) {
-                case ignis_kernel_1.JOSEStandards.JWS: {
-                    this.defineJWSAuth({ options: jwtOptions.options });
-                    break;
-                }
-                case ignis_kernel_1.JOSEStandards.JWKS: {
-                    this.defineJWKSAuth({ options: jwtOptions.options });
-                    break;
-                }
-                default: {
-                    throw (0, core_1.getError)({
-                        message: `[AuthenticateComponent] Unknown JOSE standard: ${jwtOptions.standard}`,
-                    });
-                }
-            }
-        }
-        this.defineBasicAuth({ basicOptions });
-        this.defineServiceAuth({ serviceOptions });
-        this.defineControllers({ options });
-        this.defineOAuth2();
-        return this.preloadJose({ options });
-    }
-    /**
-     * Loads `jose` at boot when a configured service signs or verifies with it, so a missing or broken
-     * install fails the boot instead of answering every token check with a 401.
-     */
-    async preloadJose(opts) {
-        const { jwtOptions, serviceOptions } = opts.options;
-        if (!jwtOptions && !serviceOptions) {
-            return;
-        }
-        try {
-            await jose_loader_1.JoseLoader.load();
-        }
-        catch (error) {
-            const reason = error instanceof Error ? error.message : String(error);
-            this.logger.for(this.preloadJose.name).error("Failed to load 'jose' | Error: %s", reason);
-            throw (0, core_1.getError)({
-                message: `[AuthenticateComponent] Cannot load 'jose', which JWT and service authentication need. Please install it | Error: ${reason}`,
-                cause: error,
-            });
-        }
-    }
-    defineJWSAuth(opts) {
-        const { options: jwsOptions } = opts;
-        const { jwtSecret, getTokenExpiresFn } = jwsOptions;
-        if (!jwtSecret || jwtSecret === DEFAULT_SECRET) {
-            throw (0, core_1.getError)({
-                message: `[defineJWSAuth] Invalid jwtSecret | Provided: ${jwtSecret}`,
-            });
-        }
-        if (!getTokenExpiresFn) {
-            throw (0, core_1.getError)({
-                message: '[defineJWSAuth] getTokenExpiresFn is required',
-            });
-        }
-        this.application
-            .bind({ key: ignis_kernel_1.AuthenticateBindingKeys.JWT_OPTIONS })
-            .toValue(jwsOptions);
-        this.application.service(services_1.JWSTokenService);
-        this.logger.for(this.defineJWSAuth.name).info('JWS authentication configured');
-    }
-    defineJWKSAuth(opts) {
-        const { options: jwksOptions } = opts;
-        switch (jwksOptions.mode) {
-            case ignis_kernel_1.JWKSModes.ISSUER: {
-                const issuerOpts = jwksOptions;
-                if (!issuerOpts.keys?.private || !issuerOpts.keys?.public) {
-                    throw (0, core_1.getError)({
-                        message: '[defineJWKSAuth] keys.private and keys.public are required for issuer mode',
-                    });
-                }
-                if (!issuerOpts.keys?.format || !ignis_kernel_1.JWKSKeyFormats.isValid(issuerOpts.keys.format)) {
-                    throw (0, core_1.getError)({
-                        message: `[defineJWKSAuth] keys.format is required and must be one of: ${[...ignis_kernel_1.JWKSKeyFormats.SCHEME_SET].join(', ')}`,
-                    });
-                }
-                if (!issuerOpts.kid) {
-                    throw (0, core_1.getError)({ message: '[defineJWKSAuth] kid is required for issuer mode' });
-                }
-                if (!issuerOpts.getTokenExpiresFn) {
-                    throw (0, core_1.getError)({
-                        message: '[defineJWKSAuth] getTokenExpiresFn is required for issuer mode',
-                    });
-                }
-                this.application
-                    .bind({ key: ignis_kernel_1.AuthenticateBindingKeys.JWKS_OPTIONS })
-                    .toValue(issuerOpts);
-                this.application.service(services_1.JWKSIssuerTokenService);
-                // Path depends on a runtime option, so @controller can't be applied statically — decorate here instead.
-                Reflect.decorate([(0, ignis_kernel_1.controller)({ path: issuerOpts?.rest?.path ?? '/certs' })], controllers_1.JWKSController);
-                this.application.controller(controllers_1.JWKSController);
-                this.logger
-                    .for(this.defineJWKSAuth.name)
-                    .info('JWKS issuer configured with /certs endpoint');
-                break;
-            }
-            case ignis_kernel_1.JWKSModes.VERIFIER: {
-                const verifierOpts = jwksOptions;
-                if (!verifierOpts.jwksUrl) {
-                    throw (0, core_1.getError)({ message: '[defineJWKSAuth] jwksUrl is required for verifier mode' });
-                }
-                this.application
-                    .bind({ key: ignis_kernel_1.AuthenticateBindingKeys.JWKS_OPTIONS })
-                    .toValue(verifierOpts);
-                this.application.service(services_1.JWKSVerifierTokenService);
-                this.logger.for(this.defineJWKSAuth.name).info('JWKS verifier configured');
-                break;
-            }
-            default: {
-                // Same exhaustive-switch-narrows-to-never situation as the JOSE standard default above.
-                throw (0, core_1.getError)({
-                    message: `[defineJWKSAuth] Invalid JWKS mode: ${jwksOptions.mode}`,
-                });
-            }
-        }
-    }
-    /**
-     * Service-to-service authentication. Absent options mean no strategy is registered and no route is
-     * mounted, so an application that never sets them is byte-identical to today.
-     *
-     * The certs route is mounted only when SIGNING keys are present. Most services are called and
-     * never call; publishing a key set for a service that signs nothing advertises a capability it
-     * does not have.
-     */
-    defineServiceAuth(opts) {
-        const { serviceOptions } = opts;
-        if (!serviceOptions) {
-            this.logger
-                .for(this.defineServiceAuth.name)
-                .debug('serviceOptions not provided, skipping service authentication');
-            return;
-        }
-        if (!serviceOptions.name) {
-            throw (0, core_1.getError)({
-                message: '[defineServiceAuth] name is required | it is the issuer this service stamps and the audience it demands',
-            });
-        }
-        if (!serviceOptions.resolvePrincipal) {
-            throw (0, core_1.getError)({
-                message: '[defineServiceAuth] resolvePrincipal is required | the framework proves WHICH SERVICE called, the application decides who that acts as',
-            });
-        }
-        this.application.service(verifier_service_1.ServiceAssertionVerifierService);
-        if (serviceOptions.keys) {
-            this.application.service(signer_service_1.ServiceAssertionSignerService);
-            const restPath = serviceOptions.rest?.path ?? ignis_kernel_1.ServiceAssertion.DEFAULT_REST_PATH;
-            this.application
-                .bind({ key: ignis_kernel_1.AuthenticateBindingKeys.SERVICE_CERTS_PATH })
-                .toValue(restPath);
-            // Path depends on a runtime option, so @controller cannot be applied statically.
-            Reflect.decorate([(0, ignis_kernel_1.controller)({ path: restPath })], service_certs_1.ServiceCertsController);
-            this.application.controller(service_certs_1.ServiceCertsController);
-        }
-        ignis_kernel_1.AuthenticationStrategyRegistry.getInstance().register({
-            container: this.application,
-            strategies: [
-                { name: ignis_kernel_1.Authentication.STRATEGY_SERVICE, strategy: service_strategy_1.ServiceAuthenticationStrategy },
-            ],
-        });
-        this.logger
-            .for(this.defineServiceAuth.name)
-            .info('Service authentication configured | name: %s | signs: %s | callers: %s', serviceOptions.name, Boolean(serviceOptions.keys), Object.keys(serviceOptions.callers ?? {}).join(', ') || 'none');
-    }
-    defineBasicAuth(opts) {
-        const { basicOptions } = opts;
-        if (!basicOptions) {
-            this.logger
-                .for(this.defineBasicAuth.name)
-                .debug('basicOptions not provided, skipping Basic configuration');
-            return;
-        }
-        if (!basicOptions.verifyCredentials) {
-            throw (0, core_1.getError)({
-                message: '[defineBasicAuth] verifyCredentials function is required',
-            });
-        }
-        this.application
-            .bind({ key: ignis_kernel_1.AuthenticateBindingKeys.BASIC_OPTIONS })
-            .toValue(basicOptions);
-        this.application.service(services_1.BasicTokenService);
-        this.logger.for(this.defineBasicAuth.name).info('Basic authentication configured');
-    }
-    defineControllers(opts) {
-        const { restOptions, jwtOptions } = opts.options;
-        if (!restOptions?.useAuthController) {
-            this.logger.for(this.defineControllers.name).debug('Auth controller disabled');
-            return;
-        }
-        if (!jwtOptions) {
-            throw (0, core_1.getError)({
-                message: '[defineControllers] Auth controller requires jwtOptions to be configured',
-            });
-        }
-        const AuthController = (0, controllers_1.defineAuthController)(restOptions.controllerOpts);
-        this.application.controller(AuthController);
-        this.logger.for(this.defineControllers.name).info('Auth controller registered');
-    }
-    defineOAuth2() {
-        // TODO Implement OAuth2
-    }
-};
-exports.AuthenticateComponent = AuthenticateComponent;
-exports.AuthenticateComponent = AuthenticateComponent = AuthenticateComponent_1 = __decorate([
-    __param(0, (0, ignis_kernel_1.inject)({ key: ignis_kernel_1.CoreBindings.APPLICATION_INSTANCE })),
-    __metadata("design:paramtypes", [Function])
-], AuthenticateComponent);
-//# sourceMappingURL=component.js.map

package/dist/components/auth/authenticate/component.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"component.js","sourceRoot":"","sources":["../../../../src/components/auth/authenticate/component.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAEA,sDAAuD;AACvD,8DAAmD;AACnD,wDAqB+B;AAC/B,+CAAqE;AACrE,+DAAqE;AACrE,yCAKoB;AACpB,wDAAoD;AACpD,sEAAkF;AAClF,0EAAsF;AACtF,oEAA8E;AAE9E,MAAM,cAAc,GAAG,gBAAgB,CAAC;AAExC,IAAa,qBAAqB,6BAAlC,MAAa,qBAAsB,SAAQ,4BAAa;IACtD,YAC8D,WAA4B;QAExF,KAAK,CAAC;YACJ,KAAK,EAAE,uBAAqB,CAAC,IAAI;YACjC,WAAW,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,WAAW,EAAE;YACrD,QAAQ,EAAE;gBACR,CAAC,sCAAuB,CAAC,YAAY,CAAC,EAAE,yBAAO,CAAC,IAAI,CAA6B;oBAC/E,GAAG,EAAE,sCAAuB,CAAC,YAAY;iBAC1C,CAAC,CAAC,OAAO,CAAC,EAAE,iBAAiB,EAAE,KAAK,EAAE,CAAC;aACzC;SACF,CAAC,CAAC;QAVyD,gBAAW,GAAX,WAAW,CAAiB;IAW1F,CAAC;IAEQ,OAAO;QACd,MAAM,UAAU,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAA0B;YAC/D,GAAG,EAAE,sCAAuB,CAAC,WAAW;YACxC,UAAU,EAAE,IAAI;SACjB,CAAC,CAAC;QACH,MAAM,YAAY,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAA4B;YACnE,GAAG,EAAE,sCAAuB,CAAC,aAAa;YAC1C,UAAU,EAAE,IAAI;SACjB,CAAC,CAAC;QACH,MAAM,WAAW,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAA6B;YACnE,GAAG,EAAE,sCAAuB,CAAC,YAAY;YACzC,UAAU,EAAE,IAAI;SACjB,CAAC,CAAC;QACH,MAAM,cAAc,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAsB;YAC/D,GAAG,EAAE,sCAAuB,CAAC,eAAe;YAC5C,UAAU,EAAE,IAAI;SACjB,CAAC,CAAC;QAEH,8FAA8F;QAC9F,6FAA6F;QAC7F,IAAI,CAAC,UAAU,IAAI,CAAC,YAAY,IAAI,CAAC,cAAc,EAAE,CAAC;YACpD,MAAM,IAAA,eAAQ,EAAC;gBACb,OAAO,EACL,qGAAqG;aACxG,CAAC,CAAC;QACL,CAAC;QAED,MAAM,OAAO,GAAyB,EAAE,WAAW,EAAE,UAAU,EAAE,YAAY,EAAE,cAAc,EAAE,CAAC;QAEhG,IAAI,UAAU,EAAE,CAAC;YACf,QAAQ,UAAU,CAAC,QAAQ,EAAE,CAAC;gBAC5B,KAAK,4BAAa,CAAC,GAAG,CAAC,CAAC,CAAC;oBACvB,IAAI,CAAC,aAAa,CAAC,EAAE,OAAO,EAAE,UAAU,CAAC,OAAO,EAAE,CAAC,CAAC;oBACpD,MAAM;gBACR,CAAC;gBACD,KAAK,4BAAa,CAAC,IAAI,CAAC,CAAC,CAAC;oBACxB,IAAI,CAAC,cAAc,CAAC,EAAE,OAAO,EAAE,UAAU,CAAC,OAAO,EAAE,CAAC,CAAC;oBACrD,MAAM;gBACR,CAAC;gBACD,OAAO,CAAC,CAAC,CAAC;oBACR,MAAM,IAAA,eAAQ,EAAC;wBACb,OAAO,EAAE,kDAAmD,UAAkB,CAAC,QAAQ,EAAE;qBAC1F,CAAC,CAAC;gBACL,CAAC;YACH,CAAC;QACH,CAAC;QAED,IAAI,CAAC,eAAe,CAAC,EAAE,YAAY,EAAE,CAAC,CAAC;QACvC,IAAI,CAAC,iBAAiB,CAAC,EAAE,cAAc,EAAE,CAAC,CAAC;QAE3C,IAAI,CAAC,iBAAiB,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC;QAEpC,IAAI,CAAC,YAAY,EAAE,CAAC;QAEpB,OAAO,IAAI,CAAC,WAAW,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC;IACvC,CAAC;IAED;;;OAGG;IACK,KAAK,CAAC,WAAW,CAAC,IAAuC;QAC/D,MAAM,EAAE,UAAU,EAAE,cAAc,EAAE,GAAG,IAAI,CAAC,OAAO,CAAC;QACpD,IAAI,CAAC,UAAU,IAAI,CAAC,cAAc,EAAE,CAAC;YACnC,OAAO;QACT,CAAC;QAED,IAAI,CAAC;YACH,MAAM,wBAAU,CAAC,IAAI,EAAE,CAAC;QAC1B,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,MAAM,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YACtE,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,mCAAmC,EAAE,MAAM,CAAC,CAAC;YAE1F,MAAM,IAAA,eAAQ,EAAC;gBACb,OAAO,EAAE,qHAAqH,MAAM,EAAE;gBACtI,KAAK,EAAE,KAAK;aACb,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAEO,aAAa,CAAC,IAA0C;QAC9D,MAAM,EAAE,OAAO,EAAE,UAAU,EAAE,GAAG,IAAI,CAAC;QAErC,MAAM,EAAE,SAAS,EAAE,iBAAiB,EAAE,GAAG,UAAU,CAAC;QAEpD,IAAI,CAAC,SAAS,IAAI,SAAS,KAAK,cAAc,EAAE,CAAC;YAC/C,MAAM,IAAA,eAAQ,EAAC;gBACb,OAAO,EAAE,iDAAiD,SAAS,EAAE;aACtE,CAAC,CAAC;QACL,CAAC;QAED,IAAI,CAAC,iBAAiB,EAAE,CAAC;YACvB,MAAM,IAAA,eAAQ,EAAC;gBACb,OAAO,EAAE,+CAA+C;aACzD,CAAC,CAAC;QACL,CAAC;QAED,IAAI,CAAC,WAAW;aACb,IAAI,CAA0B,EAAE,GAAG,EAAE,sCAAuB,CAAC,WAAW,EAAE,CAAC;aAC3E,OAAO,CAAC,UAAU,CAAC,CAAC;QACvB,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC,0BAAe,CAAC,CAAC;QAE1C,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,+BAA+B,CAAC,CAAC;IACjF,CAAC;IAEO,cAAc,CAAC,IAA2C;QAChE,MAAM,EAAE,OAAO,EAAE,WAAW,EAAE,GAAG,IAAI,CAAC;QAEtC,QAAQ,WAAW,CAAC,IAAI,EAAE,CAAC;YACzB,KAAK,wBAAS,CAAC,MAAM,CAAC,CAAC,CAAC;gBACtB,MAAM,UAAU,GAAG,WAAW,CAAC;gBAE/B,IAAI,CAAC,UAAU,CAAC,IAAI,EAAE,OAAO,IAAI,CAAC,UAAU,CAAC,IAAI,EAAE,MAAM,EAAE,CAAC;oBAC1D,MAAM,IAAA,eAAQ,EAAC;wBACb,OAAO,EAAE,4EAA4E;qBACtF,CAAC,CAAC;gBACL,CAAC;gBAED,IAAI,CAAC,UAAU,CAAC,IAAI,EAAE,MAAM,IAAI,CAAC,6BAAc,CAAC,OAAO,CAAC,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;oBAChF,MAAM,IAAA,eAAQ,EAAC;wBACb,OAAO,EAAE,gEAAgE,CAAC,GAAG,6BAAc,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;qBACrH,CAAC,CAAC;gBACL,CAAC;gBAED,IAAI,CAAC,UAAU,CAAC,GAAG,EAAE,CAAC;oBACpB,MAAM,IAAA,eAAQ,EAAC,EAAE,OAAO,EAAE,kDAAkD,EAAE,CAAC,CAAC;gBAClF,CAAC;gBAED,IAAI,CAAC,UAAU,CAAC,iBAAiB,EAAE,CAAC;oBAClC,MAAM,IAAA,eAAQ,EAAC;wBACb,OAAO,EAAE,gEAAgE;qBAC1E,CAAC,CAAC;gBACL,CAAC;gBAED,IAAI,CAAC,WAAW;qBACb,IAAI,CAAqB,EAAE,GAAG,EAAE,sCAAuB,CAAC,YAAY,EAAE,CAAC;qBACvE,OAAO,CAAC,UAAU,CAAC,CAAC;gBACvB,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC,iCAAsB,CAAC,CAAC;gBAEjD,wGAAwG;gBACxG,OAAO,CAAC,QAAQ,CACd,CAAC,IAAA,yBAAU,EAAC,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,IAAI,IAAI,QAAQ,EAAE,CAAC,CAAC,EAC1D,4BAAc,CACf,CAAC;gBACF,IAAI,CAAC,WAAW,CAAC,UAAU,CAAC,4BAAc,CAAC,CAAC;gBAE5C,IAAI,CAAC,MAAM;qBACR,GAAG,CAAC,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC;qBAC7B,IAAI,CAAC,6CAA6C,CAAC,CAAC;gBACvD,MAAM;YACR,CAAC;YAED,KAAK,wBAAS,CAAC,QAAQ,CAAC,CAAC,CAAC;gBACxB,MAAM,YAAY,GAAG,WAAW,CAAC;gBAEjC,IAAI,CAAC,YAAY,CAAC,OAAO,EAAE,CAAC;oBAC1B,MAAM,IAAA,eAAQ,EAAC,EAAE,OAAO,EAAE,wDAAwD,EAAE,CAAC,CAAC;gBACxF,CAAC;gBAED,IAAI,CAAC,WAAW;qBACb,IAAI,CAAuB,EAAE,GAAG,EAAE,sCAAuB,CAAC,YAAY,EAAE,CAAC;qBACzE,OAAO,CAAC,YAAY,CAAC,CAAC;gBACzB,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC,mCAAwB,CAAC,CAAC;gBAEnD,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,0BAA0B,CAAC,CAAC;gBAC3E,MAAM;YACR,CAAC;YAED,OAAO,CAAC,CAAC,CAAC;gBACR,wFAAwF;gBACxF,MAAM,IAAA,eAAQ,EAAC;oBACb,OAAO,EAAE,uCAAwC,WAAkC,CAAC,IAAI,EAAE;iBAC3F,CAAC,CAAC;YACL,CAAC;QACH,CAAC;IACH,CAAC;IAED;;;;;;;OAOG;IACK,iBAAiB,CAAC,IAA8C;QACtE,MAAM,EAAE,cAAc,EAAE,GAAG,IAAI,CAAC;QAEhC,IAAI,CAAC,cAAc,EAAE,CAAC;YACpB,IAAI,CAAC,MAAM;iBACR,GAAG,CAAC,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC;iBAChC,KAAK,CAAC,8DAA8D,CAAC,CAAC;YACzE,OAAO;QACT,CAAC;QAED,IAAI,CAAC,cAAc,CAAC,IAAI,EAAE,CAAC;YACzB,MAAM,IAAA,eAAQ,EAAC;gBACb,OAAO,EACL,yGAAyG;aAC5G,CAAC,CAAC;QACL,CAAC;QAED,IAAI,CAAC,cAAc,CAAC,gBAAgB,EAAE,CAAC;YACrC,MAAM,IAAA,eAAQ,EAAC;gBACb,OAAO,EACL,wIAAwI;aAC3I,CAAC,CAAC;QACL,CAAC;QAED,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC,kDAA+B,CAAC,CAAC;QAE1D,IAAI,cAAc,CAAC,IAAI,EAAE,CAAC;YACxB,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC,8CAA6B,CAAC,CAAC;YAExD,MAAM,QAAQ,GAAG,cAAc,CAAC,IAAI,EAAE,IAAI,IAAI,+BAAgB,CAAC,iBAAiB,CAAC;YACjF,IAAI,CAAC,WAAW;iBACb,IAAI,CAAS,EAAE,GAAG,EAAE,sCAAuB,CAAC,kBAAkB,EAAE,CAAC;iBACjE,OAAO,CAAC,QAAQ,CAAC,CAAC;YAErB,iFAAiF;YACjF,OAAO,CAAC,QAAQ,CAAC,CAAC,IAAA,yBAAU,EAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC,EAAE,sCAAsB,CAAC,CAAC;YAC3E,IAAI,CAAC,WAAW,CAAC,UAAU,CAAC,sCAAsB,CAAC,CAAC;QACtD,CAAC;QAED,6CAA8B,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC;YACpD,SAAS,EAAE,IAAI,CAAC,WAAW;YAC3B,UAAU,EAAE;gBACV,EAAE,IAAI,EAAE,6BAAc,CAAC,gBAAgB,EAAE,QAAQ,EAAE,gDAA6B,EAAE;aACnF;SACF,CAAC,CAAC;QAEH,IAAI,CAAC,MAAM;aACR,GAAG,CAAC,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC;aAChC,IAAI,CACH,wEAAwE,EACxE,cAAc,CAAC,IAAI,EACnB,OAAO,CAAC,cAAc,CAAC,IAAI,CAAC,EAC5B,MAAM,CAAC,IAAI,CAAC,cAAc,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,MAAM,CAC/D,CAAC;IACN,CAAC;IAEO,eAAe,CAAC,IAAkD;QACxE,MAAM,EAAE,YAAY,EAAE,GAAG,IAAI,CAAC;QAE9B,IAAI,CAAC,YAAY,EAAE,CAAC;YAClB,IAAI,CAAC,MAAM;iBACR,GAAG,CAAC,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC;iBAC9B,KAAK,CAAC,yDAAyD,CAAC,CAAC;YACpE,OAAO;QACT,CAAC;QAED,IAAI,CAAC,YAAY,CAAC,iBAAiB,EAAE,CAAC;YACpC,MAAM,IAAA,eAAQ,EAAC;gBACb,OAAO,EAAE,0DAA0D;aACpE,CAAC,CAAC;QACL,CAAC;QAED,IAAI,CAAC,WAAW;aACb,IAAI,CAA4B,EAAE,GAAG,EAAE,sCAAuB,CAAC,aAAa,EAAE,CAAC;aAC/E,OAAO,CAAC,YAAY,CAAC,CAAC;QACzB,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC,4BAAiB,CAAC,CAAC;QAE5C,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,iCAAiC,CAAC,CAAC;IACrF,CAAC;IAEO,iBAAiB,CAAC,IAAuC;QAC/D,MAAM,EAAE,WAAW,EAAE,UAAU,EAAE,GAAG,IAAI,CAAC,OAAO,CAAC;QAEjD,IAAI,CAAC,WAAW,EAAE,iBAAiB,EAAE,CAAC;YACpC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,0BAA0B,CAAC,CAAC;YAC/E,OAAO;QACT,CAAC;QAED,IAAI,CAAC,UAAU,EAAE,CAAC;YAChB,MAAM,IAAA,eAAQ,EAAC;gBACb,OAAO,EAAE,0EAA0E;aACpF,CAAC,CAAC;QACL,CAAC;QAED,MAAM,cAAc,GAAG,IAAA,kCAAoB,EAAC,WAAW,CAAC,cAAc,CAAC,CAAC;QACxE,IAAI,CAAC,WAAW,CAAC,UAAU,CAAC,cAAc,CAAC,CAAC;QAE5C,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,4BAA4B,CAAC,CAAC;IAClF,CAAC;IAED,YAAY;QACV,wBAAwB;IAC1B,CAAC;CACF,CAAA;AA/SY,sDAAqB;gCAArB,qBAAqB;IAE7B,WAAA,IAAA,qBAAM,EAAC,EAAE,GAAG,EAAE,2BAAY,CAAC,oBAAoB,EAAE,CAAC,CAAA;;GAF1C,qBAAqB,CA+SjC","sourcesContent":["import type { BaseApplication } from '@/base/applications/base';\nimport { type ValueOrPromise } from '@venizia/ignis-helpers/common';\nimport { getError } from '@venizia/ignis-helpers/core';\nimport { Binding } from '@venizia/ignis-inversion';\nimport {\n  AuthenticateBindingKeys,\n  Authentication,\n  AuthenticationStrategyRegistry,\n  BaseComponent,\n  controller,\n  CoreBindings,\n  type IAuthenticateOptions,\n  type IJWKSIssuerOptions,\n  type IJWKSVerifierOptions,\n  type IJWSTokenServiceOptions,\n  inject,\n  type IServiceAuthOptions,\n  JOSEStandards,\n  JWKSKeyFormats,\n  JWKSModes,\n  ServiceAssertion,\n  type TAuthenticationRestOptions,\n  type TBasicTokenServiceOptions,\n  type TJWKSTokenServiceOptions,\n  type TJWTTokenServiceOptions,\n} from '@venizia/ignis-kernel';\nimport { defineAuthController, JWKSController } from './controllers';\nimport { ServiceCertsController } from './controllers/service-certs';\nimport {\n  BasicTokenService,\n  JWKSIssuerTokenService,\n  JWKSVerifierTokenService,\n  JWSTokenService,\n} from './services';\nimport { JoseLoader } from './services/jose-loader';\nimport { ServiceAssertionSignerService } from './services/service/signer.service';\nimport { ServiceAssertionVerifierService } from './services/service/verifier.service';\nimport { ServiceAuthenticationStrategy } from './strategies/service.strategy';\n\nconst DEFAULT_SECRET = 'unknown_secret';\n\nexport class AuthenticateComponent extends BaseComponent {\n  constructor(\n    @inject({ key: CoreBindings.APPLICATION_INSTANCE }) private application: BaseApplication,\n  ) {\n    super({\n      scope: AuthenticateComponent.name,\n      initDefault: { enable: true, container: application },\n      bindings: {\n        [AuthenticateBindingKeys.REST_OPTIONS]: Binding.bind<TAuthenticationRestOptions>({\n          key: AuthenticateBindingKeys.REST_OPTIONS,\n        }).toValue({ useAuthController: false }),\n      },\n    });\n  }\n\n  override binding(): ValueOrPromise<void> {\n    const jwtOptions = this.application.get<TJWTTokenServiceOptions>({\n      key: AuthenticateBindingKeys.JWT_OPTIONS,\n      isOptional: true,\n    });\n    const basicOptions = this.application.get<TBasicTokenServiceOptions>({\n      key: AuthenticateBindingKeys.BASIC_OPTIONS,\n      isOptional: true,\n    });\n    const restOptions = this.application.get<TAuthenticationRestOptions>({\n      key: AuthenticateBindingKeys.REST_OPTIONS,\n      isOptional: true,\n    });\n    const serviceOptions = this.application.get<IServiceAuthOptions>({\n      key: AuthenticateBindingKeys.SERVICE_OPTIONS,\n      isOptional: true,\n    });\n\n    // A service that only VERIFIES assertions needs neither jwt nor basic - and that application,\n    // an IGNIS app consuming no user tokens at all, is exactly what the service strategy is for.\n    if (!jwtOptions && !basicOptions && !serviceOptions) {\n      throw getError({\n        message:\n          '[AuthenticateComponent] At least one of jwtOptions, basicOptions or serviceOptions must be provided',\n      });\n    }\n\n    const options: IAuthenticateOptions = { restOptions, jwtOptions, basicOptions, serviceOptions };\n\n    if (jwtOptions) {\n      switch (jwtOptions.standard) {\n        case JOSEStandards.JWS: {\n          this.defineJWSAuth({ options: jwtOptions.options });\n          break;\n        }\n        case JOSEStandards.JWKS: {\n          this.defineJWKSAuth({ options: jwtOptions.options });\n          break;\n        }\n        default: {\n          throw getError({\n            message: `[AuthenticateComponent] Unknown JOSE standard: ${(jwtOptions as any).standard}`,\n          });\n        }\n      }\n    }\n\n    this.defineBasicAuth({ basicOptions });\n    this.defineServiceAuth({ serviceOptions });\n\n    this.defineControllers({ options });\n\n    this.defineOAuth2();\n\n    return this.preloadJose({ options });\n  }\n\n  /**\n   * Loads `jose` at boot when a configured service signs or verifies with it, so a missing or broken\n   * install fails the boot instead of answering every token check with a 401.\n   */\n  private async preloadJose(opts: { options: IAuthenticateOptions }): Promise<void> {\n    const { jwtOptions, serviceOptions } = opts.options;\n    if (!jwtOptions && !serviceOptions) {\n      return;\n    }\n\n    try {\n      await JoseLoader.load();\n    } catch (error) {\n      const reason = error instanceof Error ? error.message : String(error);\n      this.logger.for(this.preloadJose.name).error(\"Failed to load 'jose' | Error: %s\", reason);\n\n      throw getError({\n        message: `[AuthenticateComponent] Cannot load 'jose', which JWT and service authentication need. Please install it | Error: ${reason}`,\n        cause: error,\n      });\n    }\n  }\n\n  private defineJWSAuth(opts: { options: IJWSTokenServiceOptions }): void {\n    const { options: jwsOptions } = opts;\n\n    const { jwtSecret, getTokenExpiresFn } = jwsOptions;\n\n    if (!jwtSecret || jwtSecret === DEFAULT_SECRET) {\n      throw getError({\n        message: `[defineJWSAuth] Invalid jwtSecret | Provided: ${jwtSecret}`,\n      });\n    }\n\n    if (!getTokenExpiresFn) {\n      throw getError({\n        message: '[defineJWSAuth] getTokenExpiresFn is required',\n      });\n    }\n\n    this.application\n      .bind<IJWSTokenServiceOptions>({ key: AuthenticateBindingKeys.JWT_OPTIONS })\n      .toValue(jwsOptions);\n    this.application.service(JWSTokenService);\n\n    this.logger.for(this.defineJWSAuth.name).info('JWS authentication configured');\n  }\n\n  private defineJWKSAuth(opts: { options: TJWKSTokenServiceOptions }): void {\n    const { options: jwksOptions } = opts;\n\n    switch (jwksOptions.mode) {\n      case JWKSModes.ISSUER: {\n        const issuerOpts = jwksOptions;\n\n        if (!issuerOpts.keys?.private || !issuerOpts.keys?.public) {\n          throw getError({\n            message: '[defineJWKSAuth] keys.private and keys.public are required for issuer mode',\n          });\n        }\n\n        if (!issuerOpts.keys?.format || !JWKSKeyFormats.isValid(issuerOpts.keys.format)) {\n          throw getError({\n            message: `[defineJWKSAuth] keys.format is required and must be one of: ${[...JWKSKeyFormats.SCHEME_SET].join(', ')}`,\n          });\n        }\n\n        if (!issuerOpts.kid) {\n          throw getError({ message: '[defineJWKSAuth] kid is required for issuer mode' });\n        }\n\n        if (!issuerOpts.getTokenExpiresFn) {\n          throw getError({\n            message: '[defineJWKSAuth] getTokenExpiresFn is required for issuer mode',\n          });\n        }\n\n        this.application\n          .bind<IJWKSIssuerOptions>({ key: AuthenticateBindingKeys.JWKS_OPTIONS })\n          .toValue(issuerOpts);\n        this.application.service(JWKSIssuerTokenService);\n\n        // Path depends on a runtime option, so @controller can't be applied statically — decorate here instead.\n        Reflect.decorate(\n          [controller({ path: issuerOpts?.rest?.path ?? '/certs' })],\n          JWKSController,\n        );\n        this.application.controller(JWKSController);\n\n        this.logger\n          .for(this.defineJWKSAuth.name)\n          .info('JWKS issuer configured with /certs endpoint');\n        break;\n      }\n\n      case JWKSModes.VERIFIER: {\n        const verifierOpts = jwksOptions;\n\n        if (!verifierOpts.jwksUrl) {\n          throw getError({ message: '[defineJWKSAuth] jwksUrl is required for verifier mode' });\n        }\n\n        this.application\n          .bind<IJWKSVerifierOptions>({ key: AuthenticateBindingKeys.JWKS_OPTIONS })\n          .toValue(verifierOpts);\n        this.application.service(JWKSVerifierTokenService);\n\n        this.logger.for(this.defineJWKSAuth.name).info('JWKS verifier configured');\n        break;\n      }\n\n      default: {\n        // Same exhaustive-switch-narrows-to-never situation as the JOSE standard default above.\n        throw getError({\n          message: `[defineJWKSAuth] Invalid JWKS mode: ${(jwksOptions as { mode?: unknown }).mode}`,\n        });\n      }\n    }\n  }\n\n  /**\n   * Service-to-service authentication. Absent options mean no strategy is registered and no route is\n   * mounted, so an application that never sets them is byte-identical to today.\n   *\n   * The certs route is mounted only when SIGNING keys are present. Most services are called and\n   * never call; publishing a key set for a service that signs nothing advertises a capability it\n   * does not have.\n   */\n  private defineServiceAuth(opts: { serviceOptions?: IServiceAuthOptions }): void {\n    const { serviceOptions } = opts;\n\n    if (!serviceOptions) {\n      this.logger\n        .for(this.defineServiceAuth.name)\n        .debug('serviceOptions not provided, skipping service authentication');\n      return;\n    }\n\n    if (!serviceOptions.name) {\n      throw getError({\n        message:\n          '[defineServiceAuth] name is required | it is the issuer this service stamps and the audience it demands',\n      });\n    }\n\n    if (!serviceOptions.resolvePrincipal) {\n      throw getError({\n        message:\n          '[defineServiceAuth] resolvePrincipal is required | the framework proves WHICH SERVICE called, the application decides who that acts as',\n      });\n    }\n\n    this.application.service(ServiceAssertionVerifierService);\n\n    if (serviceOptions.keys) {\n      this.application.service(ServiceAssertionSignerService);\n\n      const restPath = serviceOptions.rest?.path ?? ServiceAssertion.DEFAULT_REST_PATH;\n      this.application\n        .bind<string>({ key: AuthenticateBindingKeys.SERVICE_CERTS_PATH })\n        .toValue(restPath);\n\n      // Path depends on a runtime option, so @controller cannot be applied statically.\n      Reflect.decorate([controller({ path: restPath })], ServiceCertsController);\n      this.application.controller(ServiceCertsController);\n    }\n\n    AuthenticationStrategyRegistry.getInstance().register({\n      container: this.application,\n      strategies: [\n        { name: Authentication.STRATEGY_SERVICE, strategy: ServiceAuthenticationStrategy },\n      ],\n    });\n\n    this.logger\n      .for(this.defineServiceAuth.name)\n      .info(\n        'Service authentication configured | name: %s | signs: %s | callers: %s',\n        serviceOptions.name,\n        Boolean(serviceOptions.keys),\n        Object.keys(serviceOptions.callers ?? {}).join(', ') || 'none',\n      );\n  }\n\n  private defineBasicAuth(opts: { basicOptions?: TBasicTokenServiceOptions }): void {\n    const { basicOptions } = opts;\n\n    if (!basicOptions) {\n      this.logger\n        .for(this.defineBasicAuth.name)\n        .debug('basicOptions not provided, skipping Basic configuration');\n      return;\n    }\n\n    if (!basicOptions.verifyCredentials) {\n      throw getError({\n        message: '[defineBasicAuth] verifyCredentials function is required',\n      });\n    }\n\n    this.application\n      .bind<TBasicTokenServiceOptions>({ key: AuthenticateBindingKeys.BASIC_OPTIONS })\n      .toValue(basicOptions);\n    this.application.service(BasicTokenService);\n\n    this.logger.for(this.defineBasicAuth.name).info('Basic authentication configured');\n  }\n\n  private defineControllers(opts: { options: IAuthenticateOptions }): void {\n    const { restOptions, jwtOptions } = opts.options;\n\n    if (!restOptions?.useAuthController) {\n      this.logger.for(this.defineControllers.name).debug('Auth controller disabled');\n      return;\n    }\n\n    if (!jwtOptions) {\n      throw getError({\n        message: '[defineControllers] Auth controller requires jwtOptions to be configured',\n      });\n    }\n\n    const AuthController = defineAuthController(restOptions.controllerOpts);\n    this.application.controller(AuthController);\n\n    this.logger.for(this.defineControllers.name).info('Auth controller registered');\n  }\n\n  defineOAuth2() {\n    // TODO Implement OAuth2\n  }\n}\n"]}

package/dist/components/auth/authenticate/controllers/factory.d.ts

@@ -1,161 +0,0 @@
-import { z } from '@hono/zod-openapi';
-import { type ValueOrPromise } from '@venizia/ignis-helpers/common';
-import { type IAuthService, type TDefineAuthControllerOpts } from '@venizia/ignis-kernel';
-export declare const JWTTokenPayloadSchema: z.ZodObject<{
-    userId: z.ZodUnion<[z.ZodString, z.ZodNumber]>;
-    roles: z.ZodArray<z.ZodObject<{
-        id: z.ZodUnion<[z.ZodString, z.ZodNumber]>;
-        identifier: z.ZodString;
-        priority: z.ZodNumber;
-    }, z.core.$strip>>;
-    clientId: z.ZodOptional<z.ZodString>;
-    provider: z.ZodOptional<z.ZodString>;
-    email: z.ZodOptional<z.ZodEmail>;
-}, z.core.$strip>;
-export declare const defineAuthController: (opts: TDefineAuthControllerOpts) => {
-    new (authService: IAuthService): {
-        service: IAuthService;
-        binding(): ValueOrPromise<void>;
-        measure<R>(opts: {
-            scope: string;
-            args: unknown;
-            task: () => Promise<R>;
-        }): Promise<any>;
-        normalizeCountData<ResponseSchema extends unknown, RequestContext extends import("@venizia/ignis-kernel").TRouteContext<import("hono").Env> = import("@venizia/ignis-kernel").TRouteContext<import("hono").Env>, ResponseData extends {
-            count: number;
-            data?: import("@venizia/ignis-helpers/common").TNullable<ResponseSchema>;
-        } = {
-            count: number;
-            data?: import("@venizia/ignis-helpers/common").TNullable<ResponseSchema>;
-        }>(opts: {
-            context: RequestContext;
-            payload: ResponseData;
-        }): ResponseData | import("@venizia/ignis-helpers/common").TNullable<ResponseSchema>;
-        getRequestedExtras(opts: {
-            context: import("@venizia/ignis-kernel").TRouteContext<import("hono").Env>;
-        }): Array<import("@venizia/ignis-kernel").IRequestedExtra>;
-        respond<R>(opts: {
-            context: import("@venizia/ignis-kernel").TRouteContext<import("hono").Env>;
-            format: import("@venizia/ignis-kernel").TResponseFormat;
-            payload: {
-                count: number;
-                data?: import("@venizia/ignis-helpers/common").TNullable<R>;
-            };
-            range?: import("@venizia/ignis-kernel").TDataRange;
-            extra?: never;
-        }): R | {
-            count: number;
-            data?: import("@venizia/ignis-helpers/common").TNullable<R>;
-        } | null | undefined;
-        respond<R, Extra extends Record<string, import("@venizia/ignis-kernel").TResponseExtra>>(opts: {
-            context: import("@venizia/ignis-kernel").TRouteContext<import("hono").Env>;
-            format: import("@venizia/ignis-kernel").TResponseFormat;
-            payload: {
-                count: number;
-                data?: import("@venizia/ignis-helpers/common").TNullable<R>;
-            };
-            range?: import("@venizia/ignis-kernel").TDataRange;
-            extra: Extra;
-        }): Promise<R | {
-            count: number;
-            data?: import("@venizia/ignis-helpers/common").TNullable<R>;
-        } | {
-            count?: number;
-            data?: import("@venizia/ignis-helpers/common").TNullable<R>;
-            extra: Partial<Record<keyof Extra, unknown>>;
-        } | null | undefined>;
-        respond<R>(opts: {
-            context: import("@venizia/ignis-kernel").TRouteContext<import("hono").Env>;
-            format: import("@venizia/ignis-kernel").TResponseFormat;
-            payload: {
-                count: number;
-                data?: import("@venizia/ignis-helpers/common").TNullable<R>;
-            };
-            range?: import("@venizia/ignis-kernel").TDataRange;
-            extra?: Record<string, import("@venizia/ignis-kernel").TResponseExtra>;
-        }): ValueOrPromise<R | {
-            count?: number;
-            data?: import("@venizia/ignis-helpers/common").TNullable<R>;
-            extra?: Record<string, unknown>;
-        } | null | undefined>;
-        respondWithExtra<R>(opts: {
-            context: import("@venizia/ignis-kernel").TRouteContext<import("hono").Env>;
-            payload: {
-                count: number;
-                data?: import("@venizia/ignis-helpers/common").TNullable<R>;
-            };
-            extra: Record<string, import("@venizia/ignis-kernel").TResponseExtra>;
-        }): Promise<R | {
-            count: number;
-            data?: import("@venizia/ignis-helpers/common").TNullable<R>;
-        } | {
-            count: number;
-            data: import("@venizia/ignis-helpers/common").TNullable<R>;
-            extra: Record<string, unknown>;
-        } | {
-            data: import("@venizia/ignis-helpers/common").TNullable<R>;
-            extra: Record<string, unknown>;
-            count?: undefined;
-        } | null | undefined>;
-        setListHeaders(opts: {
-            context: import("@venizia/ignis-kernel").TRouteContext<import("hono").Env>;
-            count: number;
-        } & ({
-            range: import("@venizia/ignis-kernel").TDataRange;
-        } | {
-            offset: number;
-            total: number;
-        })): void;
-        toHonoHandler<ResponseType = unknown>(opts: {
-            handler: import("@venizia/ignis-kernel").TRouteHandler<ResponseType, import("hono").Env>;
-        }): import("hono").Handler<import("hono").Env, string, import("hono").Input, (Response | Promise<Response>) | (import("@hono/zod-openapi").RouteConfigToTypedResponse<import("@hono/zod-openapi").RouteConfig> | Promise<import("@hono/zod-openapi").RouteConfigToTypedResponse<import("@hono/zod-openapi").RouteConfig>>)>;
-        bindRoute<RouteConfig extends import("@venizia/ignis-kernel").IAuthRouteConfig>(opts: {
-            configs: RouteConfig;
-        }): import("@venizia/ignis-kernel").IBindRouteOptions<RouteConfig, import("hono").Env, {}, "/">;
-        defineRoute<RouteConfig extends import("@venizia/ignis-kernel").IAuthRouteConfig, ResponseType = unknown>(opts: {
-            configs: RouteConfig;
-            handler: import("@venizia/ignis-kernel").TRouteHandler<ResponseType, import("hono").Env>;
-            hook?: import("@hono/zod-openapi").Hook<any, import("hono").Env, string, any> | undefined;
-        }): import("@venizia/ignis-kernel").IDefineRouteOptions<RouteConfig, import("hono").Env, {}, "/">;
-        defineJSXRoute<RouteConfig extends import("@venizia/ignis-kernel").IAuthRouteConfig, ResponseType = unknown>(opts: {
-            configs: RouteConfig;
-            handler: import("@venizia/ignis-kernel").TRouteHandler<ResponseType, import("hono").Env>;
-            hook?: import("@hono/zod-openapi").Hook<any, import("hono").Env, string, any> | undefined;
-        }): import("@venizia/ignis-kernel").IDefineRouteOptions<RouteConfig, import("hono").Env, {}, "/">;
-        isConfigured: boolean;
-        router: import("@hono/zod-openapi").OpenAPIHono<import("hono").Env, {}, "/">;
-        path: string;
-        definitions: Record<string, import("@venizia/ignis-kernel").IAuthRouteConfig>;
-        getRouter(): import("@hono/zod-openapi").OpenAPIHono<import("hono").Env, {}, "/">;
-        registerRoutesFromRegistry(opts?: {
-            paths?: import("@venizia/ignis-kernel").TRoutePathScope;
-        }): void;
-        configure(opts?: {} | undefined): Promise<import("@hono/zod-openapi").OpenAPIHono<import("hono").Env, {}, "/">>;
-        buildRouteMiddlewares<RouteConfig extends import("@venizia/ignis-kernel").IAuthRouteConfig>(opts: {
-            configs: RouteConfig;
-        }): {
-            restConfig: Omit<RouteConfig, "authenticate" | "authorize">;
-            security: {
-                [x: string]: never[];
-            }[];
-            mws: import("hono").MiddlewareHandler<import("hono").Env>[];
-        };
-        getRouteConfigs<RouteConfig extends import("@venizia/ignis-kernel").IAuthRouteConfig>(opts: {
-            configs: RouteConfig;
-        }): RouteConfig & {
-            getRoutingPath(): RouteConfig["path"] extends infer T ? T extends RouteConfig["path"] ? T extends `${infer Start}/{${infer Param}}${infer Rest}` ? `${Start}/:${Param}${Rest extends `${infer Start_1}/{${infer Param_1}}${infer Rest_1}` ? `${Start_1}/:${Param_1}${Rest_1 extends `${infer Start_2}/{${infer Param_2}}${infer Rest_2}` ? `${Start_2}/:${Param_2}${Rest_2 extends `${infer Start_3}/{${infer Param_3}}${infer Rest_3}` ? `${Start_3}/:${Param_3}${Rest_3 extends `${infer Start_4}/{${infer Param_4}}${infer Rest_4}` ? `${Start_4}/:${Param_4}${Rest_4 extends `${infer Start_5}/{${infer Param_5}}${infer Rest_5}` ? `${Start_5}/:${Param_5}${Rest_5 extends `${infer Start_6}/{${infer Param_6}}${infer Rest_6}` ? `${Start_6}/:${Param_6}${Rest_6 extends `${infer Start_7}/{${infer Param_7}}${infer Rest_7}` ? `${Start_7}/:${Param_7}${Rest_7 extends `${infer Start_8}/{${infer Param_8}}${infer Rest_8}` ? `${Start_8}/:${Param_8}${Rest_8 extends `${infer Start_9}/{${infer Param_9}}${infer Rest_9}` ? `${Start_9}/:${Param_9}${Rest_9 extends `${infer Start_10}/{${infer Param_10}}${infer Rest_10}` ? `${Start_10}/:${Param_10}${any}` : Rest_9}` : Rest_8}` : Rest_7}` : Rest_6}` : Rest_5}` : Rest_4}` : Rest_3}` : Rest_2}` : Rest_1}` : Rest}` : T : never : never;
-        };
-        getJSXRouteConfigs<RouteConfig extends import("@venizia/ignis-kernel").IAuthRouteConfig>(opts: {
-            configs: RouteConfig;
-        }): RouteConfig & {
-            getRoutingPath(): RouteConfig["path"] extends infer T ? T extends RouteConfig["path"] ? T extends `${infer Start}/{${infer Param}}${infer Rest}` ? `${Start}/:${Param}${Rest extends `${infer Start_1}/{${infer Param_1}}${infer Rest_1}` ? `${Start_1}/:${Param_1}${Rest_1 extends `${infer Start_2}/{${infer Param_2}}${infer Rest_2}` ? `${Start_2}/:${Param_2}${Rest_2 extends `${infer Start_3}/{${infer Param_3}}${infer Rest_3}` ? `${Start_3}/:${Param_3}${Rest_3 extends `${infer Start_4}/{${infer Param_4}}${infer Rest_4}` ? `${Start_4}/:${Param_4}${Rest_4 extends `${infer Start_5}/{${infer Param_5}}${infer Rest_5}` ? `${Start_5}/:${Param_5}${Rest_5 extends `${infer Start_6}/{${infer Param_6}}${infer Rest_6}` ? `${Start_6}/:${Param_6}${Rest_6 extends `${infer Start_7}/{${infer Param_7}}${infer Rest_7}` ? `${Start_7}/:${Param_7}${Rest_7 extends `${infer Start_8}/{${infer Param_8}}${infer Rest_8}` ? `${Start_8}/:${Param_8}${Rest_8 extends `${infer Start_9}/{${infer Param_9}}${infer Rest_9}` ? `${Start_9}/:${Param_9}${Rest_9 extends `${infer Start_10}/{${infer Param_10}}${infer Rest_10}` ? `${Start_10}/:${Param_10}${any}` : Rest_9}` : Rest_8}` : Rest_7}` : Rest_6}` : Rest_5}` : Rest_4}` : Rest_3}` : Rest_2}` : Rest_1}` : Rest}` : T : never : never;
-        };
-        scope: string;
-        identifier: string;
-        get logger(): import("@venizia/ignis-helpers/core").ILogger;
-        set logger(value: import("@venizia/ignis-helpers/core").ILogger);
-        getIdentifier(): string;
-        getLogger(): import("@venizia/ignis-helpers/core").ILogger;
-    };
-};
-//# sourceMappingURL=factory.d.ts.map

package/dist/components/auth/authenticate/controllers/factory.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"factory.d.ts","sourceRoot":"","sources":["../../../../../src/components/auth/authenticate/controllers/factory.ts"],"names":[],"mappings":"AAMA,OAAO,EAAE,CAAC,EAAE,MAAM,mBAAmB,CAAC;AAEtC,OAAO,EAAQ,KAAK,cAAc,EAAE,MAAM,+BAA+B,CAAC;AAM1E,OAAO,EAEL,KAAK,YAAY,EACjB,KAAK,yBAAyB,EAC/B,MAAM,uBAAuB,CAAC;AAE/B,eAAO,MAAM,qBAAqB;;;;;;;;;;iBAYhC,CAAC;AAEH,eAAO,MAAM,oBAAoB,GAAI,MAAM,yBAAyB;sBAOvC,YAAY;iBAF5B,YAAY;mBAmBD,cAAc,CAAC,IAAI,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAdhC,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAyMZ,CAAC"}