@venizia/ignis 0.4.3 → 0.4.5

package/dist/components/auth/authenticate/controllers/factory.js

@@ -1,230 +0,0 @@
-"use strict";
-var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
-    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
-    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
-    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
-    return c > 3 && r && Object.defineProperty(target, key, r), r;
-};
-var __metadata = (this && this.__metadata) || function (k, v) {
-    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
-};
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.defineAuthController = exports.JWTTokenPayloadSchema = void 0;
-const ignis_kernel_1 = require("@venizia/ignis-kernel");
-const ignis_kernel_2 = require("@venizia/ignis-kernel");
-const ignis_kernel_3 = require("@venizia/ignis-kernel");
-const ignis_kernel_4 = require("@venizia/ignis-kernel");
-const utilities_1 = require("../../../../utilities");
-const ignis_kernel_5 = require("@venizia/ignis-kernel");
-const zod_openapi_1 = require("@hono/zod-openapi");
-const core_1 = require("@venizia/ignis-helpers/core");
-const common_1 = require("@venizia/ignis-helpers/common");
-const ignis_kernel_6 = require("@venizia/ignis-kernel");
-const ignis_kernel_7 = require("@venizia/ignis-kernel");
-exports.JWTTokenPayloadSchema = zod_openapi_1.z.object({
-    userId: zod_openapi_1.z.string().or(zod_openapi_1.z.number()),
-    roles: zod_openapi_1.z.array(zod_openapi_1.z.object({
-        id: zod_openapi_1.z.string().or(zod_openapi_1.z.number()),
-        identifier: zod_openapi_1.z.string(),
-        priority: zod_openapi_1.z.number().int(),
-    })),
-    clientId: zod_openapi_1.z.string().optional(),
-    provider: zod_openapi_1.z.string().optional(),
-    email: zod_openapi_1.z.email().optional(),
-});
-const defineAuthController = (opts) => {
-    var AuthController_1;
-    const { restPath = '/auth', serviceKey, requireAuthenticatedSignUp = false, payload = {} } = opts;
-    let AuthController = AuthController_1 = class AuthController extends ignis_kernel_1.BaseRestController {
-        constructor(authService) {
-            super({
-                scope: AuthController_1.name,
-                path: restPath,
-                isStrict: true,
-            });
-            if (!authService) {
-                throw (0, core_1.getError)({
-                    message: '[AuthController] Failed to init auth controller | Invalid injectable authentication service!',
-                });
-            }
-            this.service = authService;
-        }
-        binding() {
-            this.defineRoute({
-                configs: {
-                    description: 'Sign In',
-                    path: '/sign-in',
-                    method: common_1.HTTP.Methods.POST,
-                    request: {
-                        body: (0, ignis_kernel_4.jsonContent)({
-                            description: 'Sign-in request body',
-                            required: true,
-                            schema: payload?.signIn?.request?.schema ?? ignis_kernel_6.SignInRequestSchema,
-                        }),
-                    },
-                    responses: (0, ignis_kernel_4.jsonResponse)({
-                        schema: payload?.signIn?.response?.schema ?? ignis_kernel_5.AnyObjectSchema,
-                        description: 'Success Response',
-                    }),
-                },
-                handler: async (context) => {
-                    const body = await context.req.json();
-                    const rs = await this.service.signIn(context, body);
-                    return context.json(rs, common_1.HTTP.ResultCodes.RS_2.Ok);
-                },
-            });
-            this.defineRoute({
-                configs: {
-                    description: 'Sign Up',
-                    path: '/sign-up',
-                    method: common_1.HTTP.Methods.POST,
-                    authenticate: {
-                        strategies: !requireAuthenticatedSignUp ? [] : [ignis_kernel_7.Authentication.STRATEGY_JWT],
-                    },
-                    request: {
-                        body: (0, ignis_kernel_4.jsonContent)({
-                            description: 'Sign-up request body',
-                            required: true,
-                            schema: payload?.signUp?.request?.schema ?? ignis_kernel_6.SignUpRequestSchema,
-                        }),
-                    },
-                    responses: (0, ignis_kernel_4.jsonResponse)({
-                        schema: payload?.signUp?.response?.schema ?? ignis_kernel_5.AnyObjectSchema,
-                        description: 'Success Response',
-                    }),
-                },
-                handler: async (context) => {
-                    const body = await context.req.json();
-                    const rs = await this.service.signUp(context, body);
-                    return context.json(rs, common_1.HTTP.ResultCodes.RS_2.Ok);
-                },
-            });
-            this.defineRoute({
-                configs: {
-                    description: 'Change password',
-                    path: '/change-password',
-                    method: common_1.HTTP.Methods.POST,
-                    request: {
-                        body: (0, ignis_kernel_4.jsonContent)({
-                            description: 'Change password request body',
-                            required: true,
-                            schema: payload?.changePassword?.request?.schema ?? ignis_kernel_6.ChangePasswordRequestSchema,
-                        }),
-                    },
-                    responses: (0, ignis_kernel_4.jsonResponse)({
-                        schema: payload?.changePassword?.response?.schema ?? ignis_kernel_5.AnyObjectSchema,
-                        description: 'Success Response',
-                    }),
-                    authenticate: { strategies: [ignis_kernel_7.Authentication.STRATEGY_JWT] },
-                },
-                handler: async (context) => {
-                    const body = await context.req.json();
-                    const rs = await this.service.changePassword(context, body);
-                    return context.json(rs, common_1.HTTP.ResultCodes.RS_2.Ok);
-                },
-            });
-            // Re-issues an access token using the caller's currently valid JWT — no separate refresh token. Implementers must enforce their own rotation/revocation policy if needed.
-            this.defineRoute({
-                configs: {
-                    description: 'Refresh access token',
-                    path: '/token/refresh',
-                    method: common_1.HTTP.Methods.POST,
-                    responses: (0, ignis_kernel_4.jsonResponse)({
-                        schema: payload?.refreshToken?.response?.schema ?? ignis_kernel_5.AnyObjectSchema,
-                        description: 'Success Response',
-                    }),
-                    authenticate: { strategies: [ignis_kernel_7.Authentication.STRATEGY_JWT] },
-                },
-                handler: async (context) => {
-                    if (!this.service.refreshToken) {
-                        return (0, utilities_1.throwNotSupported)({
-                            scope: AuthController_1.name,
-                            feature: 'refreshToken',
-                            logger: this.logger,
-                        });
-                    }
-                    const rs = await this.service.refreshToken(context);
-                    return context.json(rs, common_1.HTTP.ResultCodes.RS_2.Ok);
-                },
-            });
-            this.defineRoute({
-                configs: {
-                    path: '/who-am-i',
-                    method: common_1.HTTP.Methods.GET,
-                    request: {
-                        query: zod_openapi_1.z.object({
-                            withUserInformation: zod_openapi_1.z
-                                .enum(['true', 'false', '1', '0'])
-                                .transform((value) => value === 'true' || value === '1')
-                                .optional()
-                                .openapi({
-                                description: 'Whether to attach user information to currentUser',
-                            }),
-                        }),
-                    },
-                    responses: {
-                        [common_1.HTTP.ResultCodes.RS_2.Ok]: (0, ignis_kernel_4.jsonContent)({
-                            description: 'Success Response',
-                            schema: exports.JWTTokenPayloadSchema.extend({
-                                userInformation: (payload?.getUserInformation?.response?.schema ?? ignis_kernel_5.AnyObjectSchema)
-                                    .optional()
-                                    .openapi({
-                                    description: 'Attached when withUserInformation is truthy',
-                                }),
-                            }),
-                        }),
-                    },
-                    authenticate: { strategies: [ignis_kernel_7.Authentication.STRATEGY_JWT] },
-                },
-                handler: async (context) => {
-                    const { withUserInformation = false } = context.req.valid('query');
-                    const currentUser = context.get(ignis_kernel_7.Authentication.CURRENT_USER);
-                    let rs = currentUser;
-                    if (withUserInformation) {
-                        if (!this.service.getUserInformation) {
-                            return (0, utilities_1.throwNotSupported)({
-                                scope: AuthController_1.name,
-                                feature: 'getUserInformation',
-                                logger: this.logger,
-                            });
-                        }
-                        const userInformation = await this.service.getUserInformation(context, {});
-                        rs = Object.assign({}, currentUser, { userInformation });
-                    }
-                    return context.json(rs, common_1.HTTP.ResultCodes.RS_2.Ok);
-                },
-            });
-            this.defineRoute({
-                configs: {
-                    description: 'Get current user information',
-                    path: '/me',
-                    method: common_1.HTTP.Methods.GET,
-                    responses: (0, ignis_kernel_4.jsonResponse)({
-                        schema: payload?.getUserInformation?.response?.schema ?? ignis_kernel_5.AnyObjectSchema,
-                        description: 'Success Response',
-                    }),
-                    authenticate: { strategies: [ignis_kernel_7.Authentication.STRATEGY_JWT] },
-                },
-                handler: async (context) => {
-                    if (!this.service.getUserInformation) {
-                        return (0, utilities_1.throwNotSupported)({
-                            scope: AuthController_1.name,
-                            feature: 'getUserInformation',
-                            logger: this.logger,
-                        });
-                    }
-                    const rs = await this.service.getUserInformation(context, {});
-                    return context.json(rs, common_1.HTTP.ResultCodes.RS_2.Ok);
-                },
-            });
-        }
-    };
-    AuthController = AuthController_1 = __decorate([
-        (0, ignis_kernel_3.controller)({ path: restPath }),
-        __metadata("design:paramtypes", [Object])
-    ], AuthController);
-    (0, ignis_kernel_2.inject)({ key: serviceKey })(AuthController, undefined, 0);
-    return AuthController;
-};
-exports.defineAuthController = defineAuthController;
-//# sourceMappingURL=factory.js.map

package/dist/components/auth/authenticate/controllers/factory.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"factory.js","sourceRoot":"","sources":["../../../../../src/components/auth/authenticate/controllers/factory.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,wDAA2D;AAC3D,wDAA+C;AAC/C,wDAAmD;AACnD,wDAAkE;AAClE,2CAAgD;AAChD,wDAAwD;AACxD,mDAAsC;AACtC,sDAAuD;AACvD,0DAA0E;AAC1E,wDAI+B;AAC/B,wDAI+B;AAElB,QAAA,qBAAqB,GAAG,eAAC,CAAC,MAAM,CAAC;IAC5C,MAAM,EAAE,eAAC,CAAC,MAAM,EAAE,CAAC,EAAE,CAAC,eAAC,CAAC,MAAM,EAAE,CAAC;IACjC,KAAK,EAAE,eAAC,CAAC,KAAK,CACZ,eAAC,CAAC,MAAM,CAAC;QACP,EAAE,EAAE,eAAC,CAAC,MAAM,EAAE,CAAC,EAAE,CAAC,eAAC,CAAC,MAAM,EAAE,CAAC;QAC7B,UAAU,EAAE,eAAC,CAAC,MAAM,EAAE;QACtB,QAAQ,EAAE,eAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE;KAC3B,CAAC,CACH;IACD,QAAQ,EAAE,eAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC/B,QAAQ,EAAE,eAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC/B,KAAK,EAAE,eAAC,CAAC,KAAK,EAAE,CAAC,QAAQ,EAAE;CAC5B,CAAC,CAAC;AAEI,MAAM,oBAAoB,GAAG,CAAC,IAA+B,EAAE,EAAE;;IACtE,MAAM,EAAE,QAAQ,GAAG,OAAO,EAAE,UAAU,EAAE,0BAA0B,GAAG,KAAK,EAAE,OAAO,GAAG,EAAE,EAAE,GAAG,IAAI,CAAC;IAElG,IACM,cAAc,sBADpB,MACM,cAAe,SAAQ,iCAAkB;QAG7C,YAAY,WAAyB;YACnC,KAAK,CAAC;gBACJ,KAAK,EAAE,gBAAc,CAAC,IAAI;gBAC1B,IAAI,EAAE,QAAQ;gBACd,QAAQ,EAAE,IAAI;aACf,CAAC,CAAC;YAEH,IAAI,CAAC,WAAW,EAAE,CAAC;gBACjB,MAAM,IAAA,eAAQ,EAAC;oBACb,OAAO,EACL,8FAA8F;iBACjG,CAAC,CAAC;YACL,CAAC;YAED,IAAI,CAAC,OAAO,GAAG,WAAW,CAAC;QAC7B,CAAC;QAEQ,OAAO;YACd,IAAI,CAAC,WAAW,CAAC;gBACf,OAAO,EAAE;oBACP,WAAW,EAAE,SAAS;oBACtB,IAAI,EAAE,UAAU;oBAChB,MAAM,EAAE,aAAI,CAAC,OAAO,CAAC,IAAI;oBACzB,OAAO,EAAE;wBACP,IAAI,EAAE,IAAA,0BAAW,EAAC;4BAChB,WAAW,EAAE,sBAAsB;4BACnC,QAAQ,EAAE,IAAI;4BACd,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,IAAI,kCAAmB;yBAChE,CAAC;qBACH;oBACD,SAAS,EAAE,IAAA,2BAAY,EAAC;wBACtB,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,IAAI,8BAAe;wBAC5D,WAAW,EAAE,kBAAkB;qBAChC,CAAC;iBACH;gBACD,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE;oBACzB,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC;oBACtC,MAAM,EAAE,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;oBACpD,OAAO,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,aAAI,CAAC,WAAW,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;gBACpD,CAAC;aACF,CAAC,CAAC;YAEH,IAAI,CAAC,WAAW,CAAC;gBACf,OAAO,EAAE;oBACP,WAAW,EAAE,SAAS;oBACtB,IAAI,EAAE,UAAU;oBAChB,MAAM,EAAE,aAAI,CAAC,OAAO,CAAC,IAAI;oBACzB,YAAY,EAAE;wBACZ,UAAU,EAAE,CAAC,0BAA0B,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,6BAAc,CAAC,YAAY,CAAC;qBAC7E;oBACD,OAAO,EAAE;wBACP,IAAI,EAAE,IAAA,0BAAW,EAAC;4BAChB,WAAW,EAAE,sBAAsB;4BACnC,QAAQ,EAAE,IAAI;4BACd,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,IAAI,kCAAmB;yBAChE,CAAC;qBACH;oBACD,SAAS,EAAE,IAAA,2BAAY,EAAC;wBACtB,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,IAAI,8BAAe;wBAC5D,WAAW,EAAE,kBAAkB;qBAChC,CAAC;iBACH;gBACD,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE;oBACzB,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC;oBACtC,MAAM,EAAE,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;oBACpD,OAAO,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,aAAI,CAAC,WAAW,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;gBACpD,CAAC;aACF,CAAC,CAAC;YAEH,IAAI,CAAC,WAAW,CAAC;gBACf,OAAO,EAAE;oBACP,WAAW,EAAE,iBAAiB;oBAC9B,IAAI,EAAE,kBAAkB;oBACxB,MAAM,EAAE,aAAI,CAAC,OAAO,CAAC,IAAI;oBACzB,OAAO,EAAE;wBACP,IAAI,EAAE,IAAA,0BAAW,EAAC;4BAChB,WAAW,EAAE,8BAA8B;4BAC3C,QAAQ,EAAE,IAAI;4BACd,MAAM,EAAE,OAAO,EAAE,cAAc,EAAE,OAAO,EAAE,MAAM,IAAI,0CAA2B;yBAChF,CAAC;qBACH;oBACD,SAAS,EAAE,IAAA,2BAAY,EAAC;wBACtB,MAAM,EAAE,OAAO,EAAE,cAAc,EAAE,QAAQ,EAAE,MAAM,IAAI,8BAAe;wBACpE,WAAW,EAAE,kBAAkB;qBAChC,CAAC;oBACF,YAAY,EAAE,EAAE,UAAU,EAAE,CAAC,6BAAc,CAAC,YAAY,CAAC,EAAE;iBAC5D;gBACD,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE;oBACzB,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC;oBACtC,MAAM,EAAE,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,cAAc,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;oBAC5D,OAAO,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,aAAI,CAAC,WAAW,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;gBACpD,CAAC;aACF,CAAC,CAAC;YAEH,0KAA0K;YAC1K,IAAI,CAAC,WAAW,CAAC;gBACf,OAAO,EAAE;oBACP,WAAW,EAAE,sBAAsB;oBACnC,IAAI,EAAE,gBAAgB;oBACtB,MAAM,EAAE,aAAI,CAAC,OAAO,CAAC,IAAI;oBACzB,SAAS,EAAE,IAAA,2BAAY,EAAC;wBACtB,MAAM,EAAE,OAAO,EAAE,YAAY,EAAE,QAAQ,EAAE,MAAM,IAAI,8BAAe;wBAClE,WAAW,EAAE,kBAAkB;qBAChC,CAAC;oBACF,YAAY,EAAE,EAAE,UAAU,EAAE,CAAC,6BAAc,CAAC,YAAY,CAAC,EAAE;iBAC5D;gBACD,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE;oBACzB,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,YAAY,EAAE,CAAC;wBAC/B,OAAO,IAAA,6BAAiB,EAAC;4BACvB,KAAK,EAAE,gBAAc,CAAC,IAAI;4BAC1B,OAAO,EAAE,cAAc;4BACvB,MAAM,EAAE,IAAI,CAAC,MAAM;yBACpB,CAAC,CAAC;oBACL,CAAC;oBAED,MAAM,EAAE,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC;oBACpD,OAAO,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,aAAI,CAAC,WAAW,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;gBACpD,CAAC;aACF,CAAC,CAAC;YAEH,IAAI,CAAC,WAAW,CAAC;gBACf,OAAO,EAAE;oBACP,IAAI,EAAE,WAAW;oBACjB,MAAM,EAAE,aAAI,CAAC,OAAO,CAAC,GAAG;oBACxB,OAAO,EAAE;wBACP,KAAK,EAAE,eAAC,CAAC,MAAM,CAAC;4BACd,mBAAmB,EAAE,eAAC;iCACnB,IAAI,CAAC,CAAC,MAAM,EAAE,OAAO,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC;iCACjC,SAAS,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,KAAK,MAAM,IAAI,KAAK,KAAK,GAAG,CAAC;iCACvD,QAAQ,EAAE;iCACV,OAAO,CAAC;gCACP,WAAW,EAAE,mDAAmD;6BACjE,CAAC;yBACL,CAAC;qBACH;oBACD,SAAS,EAAE;wBACT,CAAC,aAAI,CAAC,WAAW,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,IAAA,0BAAW,EAAC;4BACtC,WAAW,EAAE,kBAAkB;4BAC/B,MAAM,EAAE,6BAAqB,CAAC,MAAM,CAAC;gCACnC,eAAe,EAAE,CAAC,OAAO,EAAE,kBAAkB,EAAE,QAAQ,EAAE,MAAM,IAAI,8BAAe,CAAC;qCAChF,QAAQ,EAAE;qCACV,OAAO,CAAC;oCACP,WAAW,EAAE,6CAA6C;iCAC3D,CAAC;6BACL,CAAC;yBACH,CAAC;qBACH;oBACD,YAAY,EAAE,EAAE,UAAU,EAAE,CAAC,6BAAc,CAAC,YAAY,CAAC,EAAE;iBAC5D;gBACD,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE;oBACzB,MAAM,EAAE,mBAAmB,GAAG,KAAK,EAAE,GAAG,OAAO,CAAC,GAAG,CAAC,KAAK,CAEtD,OAAO,CAAC,CAAC;oBAEZ,MAAM,WAAW,GAAG,OAAO,CAAC,GAAG,CAAC,6BAAc,CAAC,YAAY,CAAC,CAAC;oBAC7D,IAAI,EAAE,GAAG,WAAW,CAAC;oBAErB,IAAI,mBAAmB,EAAE,CAAC;wBACxB,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,kBAAkB,EAAE,CAAC;4BACrC,OAAO,IAAA,6BAAiB,EAAC;gCACvB,KAAK,EAAE,gBAAc,CAAC,IAAI;gCAC1B,OAAO,EAAE,oBAAoB;gCAC7B,MAAM,EAAE,IAAI,CAAC,MAAM;6BACpB,CAAC,CAAC;wBACL,CAAC;wBAED,MAAM,eAAe,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,kBAAkB,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;wBAC3E,EAAE,GAAG,MAAM,CAAC,MAAM,CAAC,EAAE,EAAE,WAAW,EAAE,EAAE,eAAe,EAAE,CAAC,CAAC;oBAC3D,CAAC;oBAED,OAAO,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,aAAI,CAAC,WAAW,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;gBACpD,CAAC;aACF,CAAC,CAAC;YAEH,IAAI,CAAC,WAAW,CAAC;gBACf,OAAO,EAAE;oBACP,WAAW,EAAE,8BAA8B;oBAC3C,IAAI,EAAE,KAAK;oBACX,MAAM,EAAE,aAAI,CAAC,OAAO,CAAC,GAAG;oBACxB,SAAS,EAAE,IAAA,2BAAY,EAAC;wBACtB,MAAM,EAAE,OAAO,EAAE,kBAAkB,EAAE,QAAQ,EAAE,MAAM,IAAI,8BAAe;wBACxE,WAAW,EAAE,kBAAkB;qBAChC,CAAC;oBACF,YAAY,EAAE,EAAE,UAAU,EAAE,CAAC,6BAAc,CAAC,YAAY,CAAC,EAAE;iBAC5D;gBACD,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE;oBACzB,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,kBAAkB,EAAE,CAAC;wBACrC,OAAO,IAAA,6BAAiB,EAAC;4BACvB,KAAK,EAAE,gBAAc,CAAC,IAAI;4BAC1B,OAAO,EAAE,oBAAoB;4BAC7B,MAAM,EAAE,IAAI,CAAC,MAAM;yBACpB,CAAC,CAAC;oBACL,CAAC;oBAED,MAAM,EAAE,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,kBAAkB,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;oBAC9D,OAAO,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,aAAI,CAAC,WAAW,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;gBACpD,CAAC;aACF,CAAC,CAAC;QACL,CAAC;KACF,CAAA;IA1MK,cAAc;QADnB,IAAA,yBAAU,EAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC;;OACzB,cAAc,CA0MnB;IAED,IAAA,qBAAM,EAAC,EAAE,GAAG,EAAE,UAAU,EAAE,CAAC,CAAC,cAAc,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC;IAE1D,OAAO,cAAc,CAAC;AACxB,CAAC,CAAC;AAnNW,QAAA,oBAAoB,wBAmN/B","sourcesContent":["import { BaseRestController } from '@venizia/ignis-kernel';\nimport { inject } from '@venizia/ignis-kernel';\nimport { controller } from '@venizia/ignis-kernel';\nimport { jsonContent, jsonResponse } from '@venizia/ignis-kernel';\nimport { throwNotSupported } from '@/utilities';\nimport { AnyObjectSchema } from '@venizia/ignis-kernel';\nimport { z } from '@hono/zod-openapi';\nimport { getError } from '@venizia/ignis-helpers/core';\nimport { HTTP, type ValueOrPromise } from '@venizia/ignis-helpers/common';\nimport {\n  ChangePasswordRequestSchema,\n  SignInRequestSchema,\n  SignUpRequestSchema,\n} from '@venizia/ignis-kernel';\nimport {\n  Authentication,\n  type IAuthService,\n  type TDefineAuthControllerOpts,\n} from '@venizia/ignis-kernel';\n\nexport const JWTTokenPayloadSchema = z.object({\n  userId: z.string().or(z.number()),\n  roles: z.array(\n    z.object({\n      id: z.string().or(z.number()),\n      identifier: z.string(),\n      priority: z.number().int(),\n    }),\n  ),\n  clientId: z.string().optional(),\n  provider: z.string().optional(),\n  email: z.email().optional(),\n});\n\nexport const defineAuthController = (opts: TDefineAuthControllerOpts) => {\n  const { restPath = '/auth', serviceKey, requireAuthenticatedSignUp = false, payload = {} } = opts;\n\n  @controller({ path: restPath })\n  class AuthController extends BaseRestController {\n    service: IAuthService;\n\n    constructor(authService: IAuthService) {\n      super({\n        scope: AuthController.name,\n        path: restPath,\n        isStrict: true,\n      });\n\n      if (!authService) {\n        throw getError({\n          message:\n            '[AuthController] Failed to init auth controller | Invalid injectable authentication service!',\n        });\n      }\n\n      this.service = authService;\n    }\n\n    override binding(): ValueOrPromise<void> {\n      this.defineRoute({\n        configs: {\n          description: 'Sign In',\n          path: '/sign-in',\n          method: HTTP.Methods.POST,\n          request: {\n            body: jsonContent({\n              description: 'Sign-in request body',\n              required: true,\n              schema: payload?.signIn?.request?.schema ?? SignInRequestSchema,\n            }),\n          },\n          responses: jsonResponse({\n            schema: payload?.signIn?.response?.schema ?? AnyObjectSchema,\n            description: 'Success Response',\n          }),\n        },\n        handler: async (context) => {\n          const body = await context.req.json();\n          const rs = await this.service.signIn(context, body);\n          return context.json(rs, HTTP.ResultCodes.RS_2.Ok);\n        },\n      });\n\n      this.defineRoute({\n        configs: {\n          description: 'Sign Up',\n          path: '/sign-up',\n          method: HTTP.Methods.POST,\n          authenticate: {\n            strategies: !requireAuthenticatedSignUp ? [] : [Authentication.STRATEGY_JWT],\n          },\n          request: {\n            body: jsonContent({\n              description: 'Sign-up request body',\n              required: true,\n              schema: payload?.signUp?.request?.schema ?? SignUpRequestSchema,\n            }),\n          },\n          responses: jsonResponse({\n            schema: payload?.signUp?.response?.schema ?? AnyObjectSchema,\n            description: 'Success Response',\n          }),\n        },\n        handler: async (context) => {\n          const body = await context.req.json();\n          const rs = await this.service.signUp(context, body);\n          return context.json(rs, HTTP.ResultCodes.RS_2.Ok);\n        },\n      });\n\n      this.defineRoute({\n        configs: {\n          description: 'Change password',\n          path: '/change-password',\n          method: HTTP.Methods.POST,\n          request: {\n            body: jsonContent({\n              description: 'Change password request body',\n              required: true,\n              schema: payload?.changePassword?.request?.schema ?? ChangePasswordRequestSchema,\n            }),\n          },\n          responses: jsonResponse({\n            schema: payload?.changePassword?.response?.schema ?? AnyObjectSchema,\n            description: 'Success Response',\n          }),\n          authenticate: { strategies: [Authentication.STRATEGY_JWT] },\n        },\n        handler: async (context) => {\n          const body = await context.req.json();\n          const rs = await this.service.changePassword(context, body);\n          return context.json(rs, HTTP.ResultCodes.RS_2.Ok);\n        },\n      });\n\n      // Re-issues an access token using the caller's currently valid JWT — no separate refresh token. Implementers must enforce their own rotation/revocation policy if needed.\n      this.defineRoute({\n        configs: {\n          description: 'Refresh access token',\n          path: '/token/refresh',\n          method: HTTP.Methods.POST,\n          responses: jsonResponse({\n            schema: payload?.refreshToken?.response?.schema ?? AnyObjectSchema,\n            description: 'Success Response',\n          }),\n          authenticate: { strategies: [Authentication.STRATEGY_JWT] },\n        },\n        handler: async (context) => {\n          if (!this.service.refreshToken) {\n            return throwNotSupported({\n              scope: AuthController.name,\n              feature: 'refreshToken',\n              logger: this.logger,\n            });\n          }\n\n          const rs = await this.service.refreshToken(context);\n          return context.json(rs, HTTP.ResultCodes.RS_2.Ok);\n        },\n      });\n\n      this.defineRoute({\n        configs: {\n          path: '/who-am-i',\n          method: HTTP.Methods.GET,\n          request: {\n            query: z.object({\n              withUserInformation: z\n                .enum(['true', 'false', '1', '0'])\n                .transform((value) => value === 'true' || value === '1')\n                .optional()\n                .openapi({\n                  description: 'Whether to attach user information to currentUser',\n                }),\n            }),\n          },\n          responses: {\n            [HTTP.ResultCodes.RS_2.Ok]: jsonContent({\n              description: 'Success Response',\n              schema: JWTTokenPayloadSchema.extend({\n                userInformation: (payload?.getUserInformation?.response?.schema ?? AnyObjectSchema)\n                  .optional()\n                  .openapi({\n                    description: 'Attached when withUserInformation is truthy',\n                  }),\n              }),\n            }),\n          },\n          authenticate: { strategies: [Authentication.STRATEGY_JWT] },\n        },\n        handler: async (context) => {\n          const { withUserInformation = false } = context.req.valid<{\n            withUserInformation?: boolean;\n          }>('query');\n\n          const currentUser = context.get(Authentication.CURRENT_USER);\n          let rs = currentUser;\n\n          if (withUserInformation) {\n            if (!this.service.getUserInformation) {\n              return throwNotSupported({\n                scope: AuthController.name,\n                feature: 'getUserInformation',\n                logger: this.logger,\n              });\n            }\n\n            const userInformation = await this.service.getUserInformation(context, {});\n            rs = Object.assign({}, currentUser, { userInformation });\n          }\n\n          return context.json(rs, HTTP.ResultCodes.RS_2.Ok);\n        },\n      });\n\n      this.defineRoute({\n        configs: {\n          description: 'Get current user information',\n          path: '/me',\n          method: HTTP.Methods.GET,\n          responses: jsonResponse({\n            schema: payload?.getUserInformation?.response?.schema ?? AnyObjectSchema,\n            description: 'Success Response',\n          }),\n          authenticate: { strategies: [Authentication.STRATEGY_JWT] },\n        },\n        handler: async (context) => {\n          if (!this.service.getUserInformation) {\n            return throwNotSupported({\n              scope: AuthController.name,\n              feature: 'getUserInformation',\n              logger: this.logger,\n            });\n          }\n\n          const rs = await this.service.getUserInformation(context, {});\n          return context.json(rs, HTTP.ResultCodes.RS_2.Ok);\n        },\n      });\n    }\n  }\n\n  inject({ key: serviceKey })(AuthController, undefined, 0);\n\n  return AuthController;\n};\n"]}

package/dist/components/auth/authenticate/controllers/index.d.ts

@@ -1,4 +0,0 @@
-export * from './factory';
-export * from './jwks';
-export * from './service-certs';
-//# sourceMappingURL=index.d.ts.map

package/dist/components/auth/authenticate/controllers/index.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../src/components/auth/authenticate/controllers/index.ts"],"names":[],"mappings":"AAAA,cAAc,WAAW,CAAC;AAC1B,cAAc,QAAQ,CAAC;AACvB,cAAc,iBAAiB,CAAC"}

package/dist/components/auth/authenticate/controllers/index.js

@@ -1,20 +0,0 @@
-"use strict";
-var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    var desc = Object.getOwnPropertyDescriptor(m, k);
-    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
-      desc = { enumerable: true, get: function() { return m[k]; } };
-    }
-    Object.defineProperty(o, k2, desc);
-}) : (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    o[k2] = m[k];
-}));
-var __exportStar = (this && this.__exportStar) || function(m, exports) {
-    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
-};
-Object.defineProperty(exports, "__esModule", { value: true });
-__exportStar(require("./factory"), exports);
-__exportStar(require("./jwks"), exports);
-__exportStar(require("./service-certs"), exports);
-//# sourceMappingURL=index.js.map

package/dist/components/auth/authenticate/controllers/index.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../../src/components/auth/authenticate/controllers/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,4CAA0B;AAC1B,yCAAuB;AACvB,kDAAgC","sourcesContent":["export * from './factory';\nexport * from './jwks';\nexport * from './service-certs';\n"]}

package/dist/components/auth/authenticate/controllers/jwks/controller.d.ts

@@ -1,9 +0,0 @@
-import { BaseRestController } from '@venizia/ignis-kernel';
-import { type ValueOrPromise } from '@venizia/ignis-helpers/common';
-import { JWKSIssuerTokenService } from '../../services';
-export declare class JWKSController extends BaseRestController {
-    private jwksService;
-    constructor(jwksService: JWKSIssuerTokenService);
-    binding(): ValueOrPromise<void>;
-}
-//# sourceMappingURL=controller.d.ts.map

package/dist/components/auth/authenticate/controllers/jwks/controller.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"controller.d.ts","sourceRoot":"","sources":["../../../../../../src/components/auth/authenticate/controllers/jwks/controller.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,kBAAkB,EAAE,MAAM,uBAAuB,CAAC;AAG3D,OAAO,EAAQ,KAAK,cAAc,EAAE,MAAM,+BAA+B,CAAC;AAE1E,OAAO,EAAE,sBAAsB,EAAE,MAAM,gBAAgB,CAAC;AAGxD,qBAAa,cAAe,SAAQ,kBAAkB;IAQlD,OAAO,CAAC,WAAW;gBAAX,WAAW,EAAE,sBAAsB;IASpC,OAAO,IAAI,cAAc,CAAC,IAAI,CAAC;CAUzC"}

package/dist/components/auth/authenticate/controllers/jwks/controller.js

@@ -1,54 +0,0 @@
-"use strict";
-var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
-    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
-    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
-    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
-    return c > 3 && r && Object.defineProperty(target, key, r), r;
-};
-var __metadata = (this && this.__metadata) || function (k, v) {
-    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
-};
-var __param = (this && this.__param) || function (paramIndex, decorator) {
-    return function (target, key) { decorator(target, key, paramIndex); }
-};
-var JWKSController_1;
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.JWKSController = void 0;
-const ignis_kernel_1 = require("@venizia/ignis-kernel");
-const ignis_kernel_2 = require("@venizia/ignis-kernel");
-const ignis_kernel_3 = require("@venizia/ignis-kernel");
-const common_1 = require("@venizia/ignis-helpers/common");
-const ignis_inversion_1 = require("@venizia/ignis-inversion");
-const services_1 = require("../../services");
-const definitions_1 = require("./definitions");
-let JWKSController = JWKSController_1 = class JWKSController extends ignis_kernel_1.BaseRestController {
-    constructor(jwksService) {
-        super({
-            scope: JWKSController_1.name,
-            path: '/certs',
-            isStrict: true,
-        });
-        this.jwksService = jwksService;
-    }
-    binding() {
-        this.defineRoute({
-            configs: definitions_1.RouteConfigs.GET_JWKS_CERTS,
-            handler: async (context) => {
-                const jwks = await this.jwksService.getJWKSAsync();
-                context.header('Cache-Control', 'public, max-age=3600, stale-while-revalidate=86400');
-                return context.json(jwks, common_1.HTTP.ResultCodes.RS_2.Ok);
-            },
-        });
-    }
-};
-exports.JWKSController = JWKSController;
-exports.JWKSController = JWKSController = JWKSController_1 = __decorate([
-    __param(0, (0, ignis_kernel_2.inject)({
-        key: ignis_inversion_1.BindingKeys.build({
-            namespace: ignis_kernel_3.BindingNamespaces.SERVICE,
-            key: services_1.JWKSIssuerTokenService.name,
-        }),
-    })),
-    __metadata("design:paramtypes", [services_1.JWKSIssuerTokenService])
-], JWKSController);
-//# sourceMappingURL=controller.js.map

package/dist/components/auth/authenticate/controllers/jwks/controller.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"controller.js","sourceRoot":"","sources":["../../../../../../src/components/auth/authenticate/controllers/jwks/controller.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,wDAA2D;AAC3D,wDAA+C;AAC/C,wDAA0D;AAC1D,0DAA0E;AAC1E,8DAAuD;AACvD,6CAAwD;AACxD,+CAA6C;AAE7C,IAAa,cAAc,sBAA3B,MAAa,cAAe,SAAQ,iCAAkB;IACpD,YAOU,WAAmC;QAE3C,KAAK,CAAC;YACJ,KAAK,EAAE,gBAAc,CAAC,IAAI;YAC1B,IAAI,EAAE,QAAQ;YACd,QAAQ,EAAE,IAAI;SACf,CAAC,CAAC;QANK,gBAAW,GAAX,WAAW,CAAwB;IAO7C,CAAC;IAEQ,OAAO;QACd,IAAI,CAAC,WAAW,CAAC;YACf,OAAO,EAAE,0BAAY,CAAC,cAAc;YACpC,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE;gBACzB,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,YAAY,EAAE,CAAC;gBACnD,OAAO,CAAC,MAAM,CAAC,eAAe,EAAE,oDAAoD,CAAC,CAAC;gBACtF,OAAO,OAAO,CAAC,IAAI,CAAC,IAAI,EAAE,aAAI,CAAC,WAAW,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YACtD,CAAC;SACF,CAAC,CAAC;IACL,CAAC;CACF,CAAA;AA3BY,wCAAc;yBAAd,cAAc;IAEtB,WAAA,IAAA,qBAAM,EAAC;QACN,GAAG,EAAE,6BAAW,CAAC,KAAK,CAAC;YACrB,SAAS,EAAE,gCAAiB,CAAC,OAAO;YACpC,GAAG,EAAE,iCAAsB,CAAC,IAAI;SACjC,CAAC;KACH,CAAC,CAAA;qCACmB,iCAAsB;GARlC,cAAc,CA2B1B","sourcesContent":["import { BaseRestController } from '@venizia/ignis-kernel';\nimport { inject } from '@venizia/ignis-kernel';\nimport { BindingNamespaces } from '@venizia/ignis-kernel';\nimport { HTTP, type ValueOrPromise } from '@venizia/ignis-helpers/common';\nimport { BindingKeys } from '@venizia/ignis-inversion';\nimport { JWKSIssuerTokenService } from '../../services';\nimport { RouteConfigs } from './definitions';\n\nexport class JWKSController extends BaseRestController {\n  constructor(\n    @inject({\n      key: BindingKeys.build({\n        namespace: BindingNamespaces.SERVICE,\n        key: JWKSIssuerTokenService.name,\n      }),\n    })\n    private jwksService: JWKSIssuerTokenService,\n  ) {\n    super({\n      scope: JWKSController.name,\n      path: '/certs',\n      isStrict: true,\n    });\n  }\n\n  override binding(): ValueOrPromise<void> {\n    this.defineRoute({\n      configs: RouteConfigs.GET_JWKS_CERTS,\n      handler: async (context) => {\n        const jwks = await this.jwksService.getJWKSAsync();\n        context.header('Cache-Control', 'public, max-age=3600, stale-while-revalidate=86400');\n        return context.json(jwks, HTTP.ResultCodes.RS_2.Ok);\n      },\n    });\n  }\n}\n"]}

package/dist/components/auth/authenticate/controllers/jwks/definitions.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"definitions.d.ts","sourceRoot":"","sources":["../../../../../../src/components/auth/authenticate/controllers/jwks/definitions.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,CAAC,EAAE,MAAM,mBAAmB,CAAC;AAGtC,eAAO,MAAM,YAAY;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CA0Bf,CAAC"}

package/dist/components/auth/authenticate/controllers/jwks/definitions.js

@@ -1,31 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.RouteConfigs = void 0;
-const ignis_kernel_1 = require("@venizia/ignis-kernel");
-const zod_openapi_1 = require("@hono/zod-openapi");
-// The /certs endpoint is intentionally unauthenticated - it serves the public JWKS external verifiers need to validate tokens issued by this service.
-exports.RouteConfigs = {
-    GET_JWKS_CERTS: {
-        path: '/',
-        method: 'get',
-        responses: (0, ignis_kernel_1.jsonResponse)({
-            schema: zod_openapi_1.z
-                .object({
-                keys: zod_openapi_1.z.array(zod_openapi_1.z.object({
-                    kty: zod_openapi_1.z.string(),
-                    kid: zod_openapi_1.z.string().optional(),
-                    use: zod_openapi_1.z.string().optional(),
-                    alg: zod_openapi_1.z.string().optional(),
-                    crv: zod_openapi_1.z.string().optional(),
-                    x: zod_openapi_1.z.string().optional(),
-                    y: zod_openapi_1.z.string().optional(),
-                    n: zod_openapi_1.z.string().optional(),
-                    e: zod_openapi_1.z.string().optional(),
-                })),
-            })
-                .openapi({ description: 'JSON Web Key Set' }),
-            description: 'JSON Web Key Set',
-        }),
-    },
-};
-//# sourceMappingURL=definitions.js.map

package/dist/components/auth/authenticate/controllers/jwks/definitions.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"definitions.js","sourceRoot":"","sources":["../../../../../../src/components/auth/authenticate/controllers/jwks/definitions.ts"],"names":[],"mappings":";;;AAAA,wDAAqD;AACrD,mDAAsC;AAEtC,sJAAsJ;AACzI,QAAA,YAAY,GAAG;IAC1B,cAAc,EAAE;QACd,IAAI,EAAE,GAAG;QACT,MAAM,EAAE,KAAK;QACb,SAAS,EAAE,IAAA,2BAAY,EAAC;YACtB,MAAM,EAAE,eAAC;iBACN,MAAM,CAAC;gBACN,IAAI,EAAE,eAAC,CAAC,KAAK,CACX,eAAC,CAAC,MAAM,CAAC;oBACP,GAAG,EAAE,eAAC,CAAC,MAAM,EAAE;oBACf,GAAG,EAAE,eAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;oBAC1B,GAAG,EAAE,eAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;oBAC1B,GAAG,EAAE,eAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;oBAC1B,GAAG,EAAE,eAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;oBAC1B,CAAC,EAAE,eAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;oBACxB,CAAC,EAAE,eAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;oBACxB,CAAC,EAAE,eAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;oBACxB,CAAC,EAAE,eAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;iBACzB,CAAC,CACH;aACF,CAAC;iBACD,OAAO,CAAC,EAAE,WAAW,EAAE,kBAAkB,EAAE,CAAC;YAE/C,WAAW,EAAE,kBAAkB;SAChC,CAAC;KACH;CACO,CAAC","sourcesContent":["import { jsonResponse } from '@venizia/ignis-kernel';\nimport { z } from '@hono/zod-openapi';\n\n// The /certs endpoint is intentionally unauthenticated - it serves the public JWKS external verifiers need to validate tokens issued by this service.\nexport const RouteConfigs = {\n  GET_JWKS_CERTS: {\n    path: '/',\n    method: 'get',\n    responses: jsonResponse({\n      schema: z\n        .object({\n          keys: z.array(\n            z.object({\n              kty: z.string(),\n              kid: z.string().optional(),\n              use: z.string().optional(),\n              alg: z.string().optional(),\n              crv: z.string().optional(),\n              x: z.string().optional(),\n              y: z.string().optional(),\n              n: z.string().optional(),\n              e: z.string().optional(),\n            }),\n          ),\n        })\n        .openapi({ description: 'JSON Web Key Set' }),\n\n      description: 'JSON Web Key Set',\n    }),\n  },\n} as const;\n"]}

package/dist/components/auth/authenticate/controllers/jwks/index.d.ts

@@ -1,2 +0,0 @@
-export * from './controller';
-//# sourceMappingURL=index.d.ts.map

package/dist/components/auth/authenticate/controllers/jwks/index.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../../src/components/auth/authenticate/controllers/jwks/index.ts"],"names":[],"mappings":"AAAA,cAAc,cAAc,CAAC"}

package/dist/components/auth/authenticate/controllers/jwks/index.js

@@ -1,18 +0,0 @@
-"use strict";
-var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    var desc = Object.getOwnPropertyDescriptor(m, k);
-    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
-      desc = { enumerable: true, get: function() { return m[k]; } };
-    }
-    Object.defineProperty(o, k2, desc);
-}) : (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    o[k2] = m[k];
-}));
-var __exportStar = (this && this.__exportStar) || function(m, exports) {
-    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
-};
-Object.defineProperty(exports, "__esModule", { value: true });
-__exportStar(require("./controller"), exports);
-//# sourceMappingURL=index.js.map

package/dist/components/auth/authenticate/controllers/jwks/index.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../../../src/components/auth/authenticate/controllers/jwks/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,+CAA6B","sourcesContent":["export * from './controller';\n"]}

package/dist/components/auth/authenticate/controllers/service-certs/controller.d.ts

@@ -1,10 +0,0 @@
-import { BaseRestController } from '@venizia/ignis-kernel';
-import { type ValueOrPromise } from '@venizia/ignis-helpers/common';
-import { ServiceAssertionSignerService } from '../../services/service/signer.service';
-/** Publishes this service's assertion-signing public key. Mounted only when signing keys are configured. */
-export declare class ServiceCertsController extends BaseRestController {
-    private readonly signer;
-    constructor(signer: ServiceAssertionSignerService, path: string);
-    binding(): ValueOrPromise<void>;
-}
-//# sourceMappingURL=controller.d.ts.map

package/dist/components/auth/authenticate/controllers/service-certs/controller.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"controller.d.ts","sourceRoot":"","sources":["../../../../../../src/components/auth/authenticate/controllers/service-certs/controller.ts"],"names":[],"mappings":"AAAA,OAAO,EAEL,kBAAkB,EAGnB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAAQ,KAAK,cAAc,EAAE,MAAM,+BAA+B,CAAC;AAE1E,OAAO,EAAE,6BAA6B,EAAE,MAAM,uCAAuC,CAAC;AAGtF,4GAA4G;AAC5G,qBAAa,sBAAuB,SAAQ,kBAAkB;IAQ1D,OAAO,CAAC,QAAQ,CAAC,MAAM;gBAAN,MAAM,EAAE,6BAA6B,EAEtD,IAAI,EAAE,MAAM;IAKL,OAAO,IAAI,cAAc,CAAC,IAAI,CAAC;CAUzC"}

package/dist/components/auth/authenticate/controllers/service-certs/controller.js

@@ -1,50 +0,0 @@
-"use strict";
-var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
-    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
-    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
-    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
-    return c > 3 && r && Object.defineProperty(target, key, r), r;
-};
-var __metadata = (this && this.__metadata) || function (k, v) {
-    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
-};
-var __param = (this && this.__param) || function (paramIndex, decorator) {
-    return function (target, key) { decorator(target, key, paramIndex); }
-};
-var ServiceCertsController_1;
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.ServiceCertsController = void 0;
-const ignis_kernel_1 = require("@venizia/ignis-kernel");
-const common_1 = require("@venizia/ignis-helpers/common");
-const ignis_inversion_1 = require("@venizia/ignis-inversion");
-const signer_service_1 = require("../../services/service/signer.service");
-const definitions_1 = require("./definitions");
-/** Publishes this service's assertion-signing public key. Mounted only when signing keys are configured. */
-let ServiceCertsController = ServiceCertsController_1 = class ServiceCertsController extends ignis_kernel_1.BaseRestController {
-    constructor(signer, path) {
-        super({ scope: ServiceCertsController_1.name, path, isStrict: true });
-        this.signer = signer;
-    }
-    binding() {
-        this.defineRoute({
-            configs: definitions_1.ServiceCertsRouteConfigs.GET_SERVICE_CERTS,
-            handler: async (context) => {
-                const jwks = await this.signer.getPublicJWKS();
-                context.header('Cache-Control', 'public, max-age=600, stale-while-revalidate=86400');
-                return context.json(jwks, common_1.HTTP.ResultCodes.RS_2.Ok);
-            },
-        });
-    }
-};
-exports.ServiceCertsController = ServiceCertsController;
-exports.ServiceCertsController = ServiceCertsController = ServiceCertsController_1 = __decorate([
-    __param(0, (0, ignis_kernel_1.inject)({
-        key: ignis_inversion_1.BindingKeys.build({
-            namespace: ignis_kernel_1.BindingNamespaces.SERVICE,
-            key: signer_service_1.ServiceAssertionSignerService.name,
-        }),
-    })),
-    __param(1, (0, ignis_kernel_1.inject)({ key: ignis_kernel_1.AuthenticateBindingKeys.SERVICE_CERTS_PATH })),
-    __metadata("design:paramtypes", [signer_service_1.ServiceAssertionSignerService, String])
-], ServiceCertsController);
-//# sourceMappingURL=controller.js.map

package/dist/components/auth/authenticate/controllers/service-certs/controller.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"controller.js","sourceRoot":"","sources":["../../../../../../src/components/auth/authenticate/controllers/service-certs/controller.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,wDAK+B;AAC/B,0DAA0E;AAC1E,8DAAuD;AACvD,0EAAsF;AACtF,+CAAyD;AAEzD,4GAA4G;AAC5G,IAAa,sBAAsB,8BAAnC,MAAa,sBAAuB,SAAQ,iCAAkB;IAC5D,YAOmB,MAAqC,EAEtD,IAAY;QAEZ,KAAK,CAAC,EAAE,KAAK,EAAE,wBAAsB,CAAC,IAAI,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;QAJnD,WAAM,GAAN,MAAM,CAA+B;IAKxD,CAAC;IAEQ,OAAO;QACd,IAAI,CAAC,WAAW,CAAC;YACf,OAAO,EAAE,sCAAwB,CAAC,iBAAiB;YACnD,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE;gBACzB,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,aAAa,EAAE,CAAC;gBAC/C,OAAO,CAAC,MAAM,CAAC,eAAe,EAAE,mDAAmD,CAAC,CAAC;gBACrF,OAAO,OAAO,CAAC,IAAI,CAAC,IAAI,EAAE,aAAI,CAAC,WAAW,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YACtD,CAAC;SACF,CAAC,CAAC;IACL,CAAC;CACF,CAAA;AAzBY,wDAAsB;iCAAtB,sBAAsB;IAE9B,WAAA,IAAA,qBAAM,EAAC;QACN,GAAG,EAAE,6BAAW,CAAC,KAAK,CAAC;YACrB,SAAS,EAAE,gCAAiB,CAAC,OAAO;YACpC,GAAG,EAAE,8CAA6B,CAAC,IAAI;SACxC,CAAC;KACH,CAAC,CAAA;IAED,WAAA,IAAA,qBAAM,EAAC,EAAE,GAAG,EAAE,sCAAuB,CAAC,kBAAkB,EAAE,CAAC,CAAA;qCADnC,8CAA6B;GAR7C,sBAAsB,CAyBlC","sourcesContent":["import {\n  AuthenticateBindingKeys,\n  BaseRestController,\n  BindingNamespaces,\n  inject,\n} from '@venizia/ignis-kernel';\nimport { HTTP, type ValueOrPromise } from '@venizia/ignis-helpers/common';\nimport { BindingKeys } from '@venizia/ignis-inversion';\nimport { ServiceAssertionSignerService } from '../../services/service/signer.service';\nimport { ServiceCertsRouteConfigs } from './definitions';\n\n/** Publishes this service's assertion-signing public key. Mounted only when signing keys are configured. */\nexport class ServiceCertsController extends BaseRestController {\n  constructor(\n    @inject({\n      key: BindingKeys.build({\n        namespace: BindingNamespaces.SERVICE,\n        key: ServiceAssertionSignerService.name,\n      }),\n    })\n    private readonly signer: ServiceAssertionSignerService,\n    @inject({ key: AuthenticateBindingKeys.SERVICE_CERTS_PATH })\n    path: string,\n  ) {\n    super({ scope: ServiceCertsController.name, path, isStrict: true });\n  }\n\n  override binding(): ValueOrPromise<void> {\n    this.defineRoute({\n      configs: ServiceCertsRouteConfigs.GET_SERVICE_CERTS,\n      handler: async (context) => {\n        const jwks = await this.signer.getPublicJWKS();\n        context.header('Cache-Control', 'public, max-age=600, stale-while-revalidate=86400');\n        return context.json(jwks, HTTP.ResultCodes.RS_2.Ok);\n      },\n    });\n  }\n}\n"]}

package/dist/components/auth/authenticate/controllers/service-certs/definitions.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"definitions.d.ts","sourceRoot":"","sources":["../../../../../../src/components/auth/authenticate/controllers/service-certs/definitions.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,CAAC,EAAE,MAAM,mBAAmB,CAAC;AAEtC;;;;;;GAMG;AACH,eAAO,MAAM,wBAAwB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAsB3B,CAAC"}

package/dist/components/auth/authenticate/controllers/service-certs/definitions.js

@@ -1,34 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.ServiceCertsRouteConfigs = void 0;
-const ignis_kernel_1 = require("@venizia/ignis-kernel");
-const zod_openapi_1 = require("@hono/zod-openapi");
-/**
- * Unauthenticated by design: it serves the PUBLIC key a callee needs to verify this service's
- * assertions. Whoever can reach it learns only which key signs, which is what verification requires.
- *
- * The schema names public members only. That is documentation, not a filter - a zod response schema
- * does not strip anything - so the guard that private material never gets here lives in the signer.
- */
-exports.ServiceCertsRouteConfigs = {
-    GET_SERVICE_CERTS: {
-        path: '/',
-        method: 'get',
-        responses: (0, ignis_kernel_1.jsonResponse)({
-            schema: zod_openapi_1.z
-                .object({
-                keys: zod_openapi_1.z.array(zod_openapi_1.z.object({
-                    kty: zod_openapi_1.z.string(),
-                    kid: zod_openapi_1.z.string().optional(),
-                    use: zod_openapi_1.z.string().optional(),
-                    alg: zod_openapi_1.z.string().optional(),
-                    crv: zod_openapi_1.z.string().optional(),
-                    x: zod_openapi_1.z.string().optional(),
-                })),
-            })
-                .openapi({ description: 'Service assertion JSON Web Key Set' }),
-            description: 'Service assertion JSON Web Key Set',
-        }),
-    },
-};
-//# sourceMappingURL=definitions.js.map

package/dist/components/auth/authenticate/controllers/service-certs/definitions.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"definitions.js","sourceRoot":"","sources":["../../../../../../src/components/auth/authenticate/controllers/service-certs/definitions.ts"],"names":[],"mappings":";;;AAAA,wDAAqD;AACrD,mDAAsC;AAEtC;;;;;;GAMG;AACU,QAAA,wBAAwB,GAAG;IACtC,iBAAiB,EAAE;QACjB,IAAI,EAAE,GAAG;QACT,MAAM,EAAE,KAAK;QACb,SAAS,EAAE,IAAA,2BAAY,EAAC;YACtB,MAAM,EAAE,eAAC;iBACN,MAAM,CAAC;gBACN,IAAI,EAAE,eAAC,CAAC,KAAK,CACX,eAAC,CAAC,MAAM,CAAC;oBACP,GAAG,EAAE,eAAC,CAAC,MAAM,EAAE;oBACf,GAAG,EAAE,eAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;oBAC1B,GAAG,EAAE,eAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;oBAC1B,GAAG,EAAE,eAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;oBAC1B,GAAG,EAAE,eAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;oBAC1B,CAAC,EAAE,eAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;iBACzB,CAAC,CACH;aACF,CAAC;iBACD,OAAO,CAAC,EAAE,WAAW,EAAE,oCAAoC,EAAE,CAAC;YACjE,WAAW,EAAE,oCAAoC;SAClD,CAAC;KACH;CACO,CAAC","sourcesContent":["import { jsonResponse } from '@venizia/ignis-kernel';\nimport { z } from '@hono/zod-openapi';\n\n/**\n * Unauthenticated by design: it serves the PUBLIC key a callee needs to verify this service's\n * assertions. Whoever can reach it learns only which key signs, which is what verification requires.\n *\n * The schema names public members only. That is documentation, not a filter - a zod response schema\n * does not strip anything - so the guard that private material never gets here lives in the signer.\n */\nexport const ServiceCertsRouteConfigs = {\n  GET_SERVICE_CERTS: {\n    path: '/',\n    method: 'get',\n    responses: jsonResponse({\n      schema: z\n        .object({\n          keys: z.array(\n            z.object({\n              kty: z.string(),\n              kid: z.string().optional(),\n              use: z.string().optional(),\n              alg: z.string().optional(),\n              crv: z.string().optional(),\n              x: z.string().optional(),\n            }),\n          ),\n        })\n        .openapi({ description: 'Service assertion JSON Web Key Set' }),\n      description: 'Service assertion JSON Web Key Set',\n    }),\n  },\n} as const;\n"]}

package/dist/components/auth/authenticate/controllers/service-certs/index.d.ts

@@ -1,3 +0,0 @@
-export * from './controller';
-export * from './definitions';
-//# sourceMappingURL=index.d.ts.map

package/dist/components/auth/authenticate/controllers/service-certs/index.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../../src/components/auth/authenticate/controllers/service-certs/index.ts"],"names":[],"mappings":"AAAA,cAAc,cAAc,CAAC;AAC7B,cAAc,eAAe,CAAC"}

package/dist/components/auth/authenticate/controllers/service-certs/index.js

@@ -1,19 +0,0 @@
-"use strict";
-var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    var desc = Object.getOwnPropertyDescriptor(m, k);
-    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
-      desc = { enumerable: true, get: function() { return m[k]; } };
-    }
-    Object.defineProperty(o, k2, desc);
-}) : (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    o[k2] = m[k];
-}));
-var __exportStar = (this && this.__exportStar) || function(m, exports) {
-    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
-};
-Object.defineProperty(exports, "__esModule", { value: true });
-__exportStar(require("./controller"), exports);
-__exportStar(require("./definitions"), exports);
-//# sourceMappingURL=index.js.map

package/dist/components/auth/authenticate/controllers/service-certs/index.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../../../src/components/auth/authenticate/controllers/service-certs/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,+CAA6B;AAC7B,gDAA8B","sourcesContent":["export * from './controller';\nexport * from './definitions';\n"]}

package/dist/components/auth/authenticate/index.d.ts

@@ -1,6 +0,0 @@
-export * from '@venizia/ignis-kernel';
-export * from './component';
-export * from './controllers';
-export * from './services';
-export * from './strategies';
-//# sourceMappingURL=index.d.ts.map

package/dist/components/auth/authenticate/index.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/components/auth/authenticate/index.ts"],"names":[],"mappings":"AAEA,cAAc,uBAAuB,CAAC;AAEtC,cAAc,aAAa,CAAC;AAC5B,cAAc,eAAe,CAAC;AAC9B,cAAc,YAAY,CAAC;AAC3B,cAAc,cAAc,CAAC"}