@venizia/ignis 0.4.7-0 → 0.4.7-1

package/dist/esm/components/auth/authenticate/component.js.map

@@ -1 +1 @@
-{"version":3,"file":"component.js","sourceRoot":"","sources":["../../../../../src/components/auth/authenticate/component.ts"],"names":[],"mappings":";;;;;;;;;;;;;AAEA,OAAO,EAAE,QAAQ,EAAE,MAAM,6BAA6B,CAAC;AACvD,OAAO,EAAE,OAAO,EAAE,MAAM,0BAA0B,CAAC;AACnD,OAAO,EACL,uBAAuB,EACvB,cAAc,EACd,8BAA8B,EAC9B,aAAa,EACb,UAAU,EACV,YAAY,EAKZ,MAAM,EAEN,aAAa,EACb,cAAc,EACd,SAAS,EACT,gBAAgB,GAKjB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAAE,oBAAoB,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AACrE,OAAO,EAAE,sBAAsB,EAAE,MAAM,6BAA6B,CAAC;AACrE,OAAO,EACL,iBAAiB,EACjB,sBAAsB,EACtB,wBAAwB,EACxB,eAAe,GAChB,MAAM,YAAY,CAAC;AACpB,OAAO,EAAE,UAAU,EAAE,MAAM,wBAAwB,CAAC;AACpD,OAAO,EAAE,6BAA6B,EAAE,MAAM,mCAAmC,CAAC;AAClF,OAAO,EAAE,+BAA+B,EAAE,MAAM,qCAAqC,CAAC;AACtF,OAAO,EAAE,6BAA6B,EAAE,MAAM,+BAA+B,CAAC;AAE9E,MAAM,cAAc,GAAG,gBAAgB,CAAC;AAExC,IAAa,qBAAqB,6BAAlC,MAAa,qBAAsB,SAAQ,aAAa;IACtD,YAC8D,WAA4B;QAExF,KAAK,CAAC;YACJ,KAAK,EAAE,uBAAqB,CAAC,IAAI;YACjC,WAAW,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,WAAW,EAAE;YACrD,QAAQ,EAAE;gBACR,CAAC,uBAAuB,CAAC,YAAY,CAAC,EAAE,OAAO,CAAC,IAAI,CAA6B;oBAC/E,GAAG,EAAE,uBAAuB,CAAC,YAAY;iBAC1C,CAAC,CAAC,OAAO,CAAC,EAAE,iBAAiB,EAAE,KAAK,EAAE,CAAC;aACzC;SACF,CAAC,CAAC;QAVyD,gBAAW,GAAX,WAAW,CAAiB;IAW1F,CAAC;IAEQ,OAAO;QACd,MAAM,UAAU,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAA0B;YAC/D,GAAG,EAAE,uBAAuB,CAAC,WAAW;YACxC,UAAU,EAAE,IAAI;SACjB,CAAC,CAAC;QACH,MAAM,YAAY,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAA4B;YACnE,GAAG,EAAE,uBAAuB,CAAC,aAAa;YAC1C,UAAU,EAAE,IAAI;SACjB,CAAC,CAAC;QACH,MAAM,WAAW,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAA6B;YACnE,GAAG,EAAE,uBAAuB,CAAC,YAAY;YACzC,UAAU,EAAE,IAAI;SACjB,CAAC,CAAC;QACH,MAAM,cAAc,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAsB;YAC/D,GAAG,EAAE,uBAAuB,CAAC,eAAe;YAC5C,UAAU,EAAE,IAAI;SACjB,CAAC,CAAC;QAEH,8FAA8F;QAC9F,6FAA6F;QAC7F,IAAI,CAAC,UAAU,IAAI,CAAC,YAAY,IAAI,CAAC,cAAc,EAAE,CAAC;YACpD,MAAM,QAAQ,CAAC;gBACb,OAAO,EACL,qGAAqG;aACxG,CAAC,CAAC;QACL,CAAC;QAED,MAAM,OAAO,GAAyB,EAAE,WAAW,EAAE,UAAU,EAAE,YAAY,EAAE,cAAc,EAAE,CAAC;QAEhG,IAAI,UAAU,EAAE,CAAC;YACf,QAAQ,UAAU,CAAC,QAAQ,EAAE,CAAC;gBAC5B,KAAK,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC;oBACvB,IAAI,CAAC,aAAa,CAAC,EAAE,OAAO,EAAE,UAAU,CAAC,OAAO,EAAE,CAAC,CAAC;oBACpD,MAAM;gBACR,CAAC;gBACD,KAAK,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC;oBACxB,IAAI,CAAC,cAAc,CAAC,EAAE,OAAO,EAAE,UAAU,CAAC,OAAO,EAAE,CAAC,CAAC;oBACrD,MAAM;gBACR,CAAC;gBACD,OAAO,CAAC,CAAC,CAAC;oBACR,MAAM,QAAQ,CAAC;wBACb,OAAO,EAAE,kDAAmD,UAAkB,CAAC,QAAQ,EAAE;qBAC1F,CAAC,CAAC;gBACL,CAAC;YACH,CAAC;QACH,CAAC;QAED,IAAI,CAAC,eAAe,CAAC,EAAE,YAAY,EAAE,CAAC,CAAC;QACvC,IAAI,CAAC,iBAAiB,CAAC,EAAE,cAAc,EAAE,CAAC,CAAC;QAE3C,IAAI,CAAC,iBAAiB,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC;QAEpC,IAAI,CAAC,YAAY,EAAE,CAAC;QAEpB,OAAO,IAAI,CAAC,WAAW,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC;IACvC,CAAC;IAED;;;OAGG;IACK,KAAK,CAAC,WAAW,CAAC,IAAuC;QAC/D,MAAM,EAAE,UAAU,EAAE,cAAc,EAAE,GAAG,IAAI,CAAC,OAAO,CAAC;QACpD,IAAI,CAAC,UAAU,IAAI,CAAC,cAAc,EAAE,CAAC;YACnC,OAAO;QACT,CAAC;QAED,IAAI,CAAC;YACH,MAAM,UAAU,CAAC,IAAI,EAAE,CAAC;QAC1B,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,MAAM,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YACtE,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,mCAAmC,EAAE,MAAM,CAAC,CAAC;YAE1F,MAAM,QAAQ,CAAC;gBACb,OAAO,EAAE,qHAAqH,MAAM,EAAE;gBACtI,KAAK,EAAE,KAAK;aACb,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAEO,aAAa,CAAC,IAA0C;QAC9D,MAAM,EAAE,OAAO,EAAE,UAAU,EAAE,GAAG,IAAI,CAAC;QAErC,MAAM,EAAE,SAAS,EAAE,iBAAiB,EAAE,GAAG,UAAU,CAAC;QAEpD,IAAI,CAAC,SAAS,IAAI,SAAS,KAAK,cAAc,EAAE,CAAC;YAC/C,MAAM,QAAQ,CAAC;gBACb,OAAO,EAAE,iDAAiD,SAAS,EAAE;aACtE,CAAC,CAAC;QACL,CAAC;QAED,IAAI,CAAC,iBAAiB,EAAE,CAAC;YACvB,MAAM,QAAQ,CAAC;gBACb,OAAO,EAAE,+CAA+C;aACzD,CAAC,CAAC;QACL,CAAC;QAED,IAAI,CAAC,WAAW;aACb,IAAI,CAA0B,EAAE,GAAG,EAAE,uBAAuB,CAAC,WAAW,EAAE,CAAC;aAC3E,OAAO,CAAC,UAAU,CAAC,CAAC;QACvB,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC;QAE1C,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,+BAA+B,CAAC,CAAC;IACjF,CAAC;IAEO,cAAc,CAAC,IAA2C;QAChE,MAAM,EAAE,OAAO,EAAE,WAAW,EAAE,GAAG,IAAI,CAAC;QAEtC,QAAQ,WAAW,CAAC,IAAI,EAAE,CAAC;YACzB,KAAK,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC;gBACtB,MAAM,UAAU,GAAG,WAAW,CAAC;gBAE/B,IAAI,CAAC,UAAU,CAAC,IAAI,EAAE,OAAO,IAAI,CAAC,UAAU,CAAC,IAAI,EAAE,MAAM,EAAE,CAAC;oBAC1D,MAAM,QAAQ,CAAC;wBACb,OAAO,EAAE,4EAA4E;qBACtF,CAAC,CAAC;gBACL,CAAC;gBAED,IAAI,CAAC,UAAU,CAAC,IAAI,EAAE,MAAM,IAAI,CAAC,cAAc,CAAC,OAAO,CAAC,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;oBAChF,MAAM,QAAQ,CAAC;wBACb,OAAO,EAAE,gEAAgE,CAAC,GAAG,cAAc,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;qBACrH,CAAC,CAAC;gBACL,CAAC;gBAED,IAAI,CAAC,UAAU,CAAC,GAAG,EAAE,CAAC;oBACpB,MAAM,QAAQ,CAAC,EAAE,OAAO,EAAE,kDAAkD,EAAE,CAAC,CAAC;gBAClF,CAAC;gBAED,IAAI,CAAC,UAAU,CAAC,iBAAiB,EAAE,CAAC;oBAClC,MAAM,QAAQ,CAAC;wBACb,OAAO,EAAE,gEAAgE;qBAC1E,CAAC,CAAC;gBACL,CAAC;gBAED,IAAI,CAAC,WAAW;qBACb,IAAI,CAAqB,EAAE,GAAG,EAAE,uBAAuB,CAAC,YAAY,EAAE,CAAC;qBACvE,OAAO,CAAC,UAAU,CAAC,CAAC;gBACvB,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC,sBAAsB,CAAC,CAAC;gBAEjD,wGAAwG;gBACxG,OAAO,CAAC,QAAQ,CACd,CAAC,UAAU,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,IAAI,IAAI,QAAQ,EAAE,CAAC,CAAC,EAC1D,cAAc,CACf,CAAC;gBACF,IAAI,CAAC,WAAW,CAAC,UAAU,CAAC,cAAc,CAAC,CAAC;gBAE5C,IAAI,CAAC,MAAM;qBACR,GAAG,CAAC,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC;qBAC7B,IAAI,CAAC,6CAA6C,CAAC,CAAC;gBACvD,MAAM;YACR,CAAC;YAED,KAAK,SAAS,CAAC,QAAQ,CAAC,CAAC,CAAC;gBACxB,MAAM,YAAY,GAAG,WAAW,CAAC;gBAEjC,IAAI,CAAC,YAAY,CAAC,OAAO,EAAE,CAAC;oBAC1B,MAAM,QAAQ,CAAC,EAAE,OAAO,EAAE,wDAAwD,EAAE,CAAC,CAAC;gBACxF,CAAC;gBAED,IAAI,CAAC,WAAW;qBACb,IAAI,CAAuB,EAAE,GAAG,EAAE,uBAAuB,CAAC,YAAY,EAAE,CAAC;qBACzE,OAAO,CAAC,YAAY,CAAC,CAAC;gBACzB,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC,wBAAwB,CAAC,CAAC;gBAEnD,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,0BAA0B,CAAC,CAAC;gBAC3E,MAAM;YACR,CAAC;YAED,OAAO,CAAC,CAAC,CAAC;gBACR,wFAAwF;gBACxF,MAAM,QAAQ,CAAC;oBACb,OAAO,EAAE,uCAAwC,WAAkC,CAAC,IAAI,EAAE;iBAC3F,CAAC,CAAC;YACL,CAAC;QACH,CAAC;IACH,CAAC;IAED;;;;;;;OAOG;IACK,iBAAiB,CAAC,IAA8C;QACtE,MAAM,EAAE,cAAc,EAAE,GAAG,IAAI,CAAC;QAEhC,IAAI,CAAC,cAAc,EAAE,CAAC;YACpB,IAAI,CAAC,MAAM;iBACR,GAAG,CAAC,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC;iBAChC,KAAK,CAAC,8DAA8D,CAAC,CAAC;YACzE,OAAO;QACT,CAAC;QAED,IAAI,CAAC,cAAc,CAAC,IAAI,EAAE,CAAC;YACzB,MAAM,QAAQ,CAAC;gBACb,OAAO,EACL,yGAAyG;aAC5G,CAAC,CAAC;QACL,CAAC;QAED,IAAI,CAAC,cAAc,CAAC,gBAAgB,EAAE,CAAC;YACrC,MAAM,QAAQ,CAAC;gBACb,OAAO,EACL,wIAAwI;aAC3I,CAAC,CAAC;QACL,CAAC;QAED,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC,+BAA+B,CAAC,CAAC;QAE1D,IAAI,cAAc,CAAC,IAAI,EAAE,CAAC;YACxB,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC,6BAA6B,CAAC,CAAC;YAExD,MAAM,QAAQ,GAAG,cAAc,CAAC,IAAI,EAAE,IAAI,IAAI,gBAAgB,CAAC,iBAAiB,CAAC;YACjF,IAAI,CAAC,WAAW;iBACb,IAAI,CAAS,EAAE,GAAG,EAAE,uBAAuB,CAAC,kBAAkB,EAAE,CAAC;iBACjE,OAAO,CAAC,QAAQ,CAAC,CAAC;YAErB,iFAAiF;YACjF,OAAO,CAAC,QAAQ,CAAC,CAAC,UAAU,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC,EAAE,sBAAsB,CAAC,CAAC;YAC3E,IAAI,CAAC,WAAW,CAAC,UAAU,CAAC,sBAAsB,CAAC,CAAC;QACtD,CAAC;QAED,8BAA8B,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC;YACpD,SAAS,EAAE,IAAI,CAAC,WAAW;YAC3B,UAAU,EAAE;gBACV,EAAE,IAAI,EAAE,cAAc,CAAC,gBAAgB,EAAE,QAAQ,EAAE,6BAA6B,EAAE;aACnF;SACF,CAAC,CAAC;QAEH,IAAI,CAAC,MAAM;aACR,GAAG,CAAC,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC;aAChC,IAAI,CACH,wEAAwE,EACxE,cAAc,CAAC,IAAI,EACnB,OAAO,CAAC,cAAc,CAAC,IAAI,CAAC,EAC5B,MAAM,CAAC,IAAI,CAAC,cAAc,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,MAAM,CAC/D,CAAC;IACN,CAAC;IAEO,eAAe,CAAC,IAAkD;QACxE,MAAM,EAAE,YAAY,EAAE,GAAG,IAAI,CAAC;QAE9B,IAAI,CAAC,YAAY,EAAE,CAAC;YAClB,IAAI,CAAC,MAAM;iBACR,GAAG,CAAC,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC;iBAC9B,KAAK,CAAC,yDAAyD,CAAC,CAAC;YACpE,OAAO;QACT,CAAC;QAED,IAAI,CAAC,YAAY,CAAC,iBAAiB,EAAE,CAAC;YACpC,MAAM,QAAQ,CAAC;gBACb,OAAO,EAAE,0DAA0D;aACpE,CAAC,CAAC;QACL,CAAC;QAED,IAAI,CAAC,WAAW;aACb,IAAI,CAA4B,EAAE,GAAG,EAAE,uBAAuB,CAAC,aAAa,EAAE,CAAC;aAC/E,OAAO,CAAC,YAAY,CAAC,CAAC;QACzB,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC,iBAAiB,CAAC,CAAC;QAE5C,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,iCAAiC,CAAC,CAAC;IACrF,CAAC;IAEO,iBAAiB,CAAC,IAAuC;QAC/D,MAAM,EAAE,WAAW,EAAE,UAAU,EAAE,GAAG,IAAI,CAAC,OAAO,CAAC;QAEjD,IAAI,CAAC,WAAW,EAAE,iBAAiB,EAAE,CAAC;YACpC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,0BAA0B,CAAC,CAAC;YAC/E,OAAO;QACT,CAAC;QAED,IAAI,CAAC,UAAU,EAAE,CAAC;YAChB,MAAM,QAAQ,CAAC;gBACb,OAAO,EAAE,0EAA0E;aACpF,CAAC,CAAC;QACL,CAAC;QAED,MAAM,cAAc,GAAG,oBAAoB,CAAC,WAAW,CAAC,cAAc,CAAC,CAAC;QACxE,IAAI,CAAC,WAAW,CAAC,UAAU,CAAC,cAAc,CAAC,CAAC;QAE5C,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,4BAA4B,CAAC,CAAC;IAClF,CAAC;IAED,YAAY;QACV,wBAAwB;IAC1B,CAAC;CACF,CAAA;AA/SY,qBAAqB;IAE7B,WAAA,MAAM,CAAC,EAAE,GAAG,EAAE,YAAY,CAAC,oBAAoB,EAAE,CAAC,CAAA;;GAF1C,qBAAqB,CA+SjC","sourcesContent":["import type { BaseApplication } from '@/base/applications/base';\nimport { type ValueOrPromise } from '@venizia/ignis-helpers/common';\nimport { getError } from '@venizia/ignis-helpers/core';\nimport { Binding } from '@venizia/ignis-inversion';\nimport {\n  AuthenticateBindingKeys,\n  Authentication,\n  AuthenticationStrategyRegistry,\n  BaseComponent,\n  controller,\n  CoreBindings,\n  type IAuthenticateOptions,\n  type IJWKSIssuerOptions,\n  type IJWKSVerifierOptions,\n  type IJWSTokenServiceOptions,\n  inject,\n  type IServiceAuthOptions,\n  JOSEStandards,\n  JWKSKeyFormats,\n  JWKSModes,\n  ServiceAssertion,\n  type TAuthenticationRestOptions,\n  type TBasicTokenServiceOptions,\n  type TJWKSTokenServiceOptions,\n  type TJWTTokenServiceOptions,\n} from '@venizia/ignis-kernel';\nimport { defineAuthController, JWKSController } from './controllers';\nimport { ServiceCertsController } from './controllers/service-certs';\nimport {\n  BasicTokenService,\n  JWKSIssuerTokenService,\n  JWKSVerifierTokenService,\n  JWSTokenService,\n} from './services';\nimport { JoseLoader } from './services/jose-loader';\nimport { ServiceAssertionSignerService } from './services/service/signer.service';\nimport { ServiceAssertionVerifierService } from './services/service/verifier.service';\nimport { ServiceAuthenticationStrategy } from './strategies/service.strategy';\n\nconst DEFAULT_SECRET = 'unknown_secret';\n\nexport class AuthenticateComponent extends BaseComponent {\n  constructor(\n    @inject({ key: CoreBindings.APPLICATION_INSTANCE }) private application: BaseApplication,\n  ) {\n    super({\n      scope: AuthenticateComponent.name,\n      initDefault: { enable: true, container: application },\n      bindings: {\n        [AuthenticateBindingKeys.REST_OPTIONS]: Binding.bind<TAuthenticationRestOptions>({\n          key: AuthenticateBindingKeys.REST_OPTIONS,\n        }).toValue({ useAuthController: false }),\n      },\n    });\n  }\n\n  override binding(): ValueOrPromise<void> {\n    const jwtOptions = this.application.get<TJWTTokenServiceOptions>({\n      key: AuthenticateBindingKeys.JWT_OPTIONS,\n      isOptional: true,\n    });\n    const basicOptions = this.application.get<TBasicTokenServiceOptions>({\n      key: AuthenticateBindingKeys.BASIC_OPTIONS,\n      isOptional: true,\n    });\n    const restOptions = this.application.get<TAuthenticationRestOptions>({\n      key: AuthenticateBindingKeys.REST_OPTIONS,\n      isOptional: true,\n    });\n    const serviceOptions = this.application.get<IServiceAuthOptions>({\n      key: AuthenticateBindingKeys.SERVICE_OPTIONS,\n      isOptional: true,\n    });\n\n    // A service that only VERIFIES assertions needs neither jwt nor basic - and that application,\n    // an IGNIS app consuming no user tokens at all, is exactly what the service strategy is for.\n    if (!jwtOptions && !basicOptions && !serviceOptions) {\n      throw getError({\n        message:\n          '[AuthenticateComponent] At least one of jwtOptions, basicOptions or serviceOptions must be provided',\n      });\n    }\n\n    const options: IAuthenticateOptions = { restOptions, jwtOptions, basicOptions, serviceOptions };\n\n    if (jwtOptions) {\n      switch (jwtOptions.standard) {\n        case JOSEStandards.JWS: {\n          this.defineJWSAuth({ options: jwtOptions.options });\n          break;\n        }\n        case JOSEStandards.JWKS: {\n          this.defineJWKSAuth({ options: jwtOptions.options });\n          break;\n        }\n        default: {\n          throw getError({\n            message: `[AuthenticateComponent] Unknown JOSE standard: ${(jwtOptions as any).standard}`,\n          });\n        }\n      }\n    }\n\n    this.defineBasicAuth({ basicOptions });\n    this.defineServiceAuth({ serviceOptions });\n\n    this.defineControllers({ options });\n\n    this.defineOAuth2();\n\n    return this.preloadJose({ options });\n  }\n\n  /**\n   * Loads `jose` at boot when a configured service signs or verifies with it, so a missing or broken\n   * install fails the boot instead of answering every token check with a 401.\n   */\n  private async preloadJose(opts: { options: IAuthenticateOptions }): Promise<void> {\n    const { jwtOptions, serviceOptions } = opts.options;\n    if (!jwtOptions && !serviceOptions) {\n      return;\n    }\n\n    try {\n      await JoseLoader.load();\n    } catch (error) {\n      const reason = error instanceof Error ? error.message : String(error);\n      this.logger.for(this.preloadJose.name).error(\"Failed to load 'jose' | Error: %s\", reason);\n\n      throw getError({\n        message: `[AuthenticateComponent] Cannot load 'jose', which JWT and service authentication need. Please install it | Error: ${reason}`,\n        cause: error,\n      });\n    }\n  }\n\n  private defineJWSAuth(opts: { options: IJWSTokenServiceOptions }): void {\n    const { options: jwsOptions } = opts;\n\n    const { jwtSecret, getTokenExpiresFn } = jwsOptions;\n\n    if (!jwtSecret || jwtSecret === DEFAULT_SECRET) {\n      throw getError({\n        message: `[defineJWSAuth] Invalid jwtSecret | Provided: ${jwtSecret}`,\n      });\n    }\n\n    if (!getTokenExpiresFn) {\n      throw getError({\n        message: '[defineJWSAuth] getTokenExpiresFn is required',\n      });\n    }\n\n    this.application\n      .bind<IJWSTokenServiceOptions>({ key: AuthenticateBindingKeys.JWT_OPTIONS })\n      .toValue(jwsOptions);\n    this.application.service(JWSTokenService);\n\n    this.logger.for(this.defineJWSAuth.name).info('JWS authentication configured');\n  }\n\n  private defineJWKSAuth(opts: { options: TJWKSTokenServiceOptions }): void {\n    const { options: jwksOptions } = opts;\n\n    switch (jwksOptions.mode) {\n      case JWKSModes.ISSUER: {\n        const issuerOpts = jwksOptions;\n\n        if (!issuerOpts.keys?.private || !issuerOpts.keys?.public) {\n          throw getError({\n            message: '[defineJWKSAuth] keys.private and keys.public are required for issuer mode',\n          });\n        }\n\n        if (!issuerOpts.keys?.format || !JWKSKeyFormats.isValid(issuerOpts.keys.format)) {\n          throw getError({\n            message: `[defineJWKSAuth] keys.format is required and must be one of: ${[...JWKSKeyFormats.SCHEME_SET].join(', ')}`,\n          });\n        }\n\n        if (!issuerOpts.kid) {\n          throw getError({ message: '[defineJWKSAuth] kid is required for issuer mode' });\n        }\n\n        if (!issuerOpts.getTokenExpiresFn) {\n          throw getError({\n            message: '[defineJWKSAuth] getTokenExpiresFn is required for issuer mode',\n          });\n        }\n\n        this.application\n          .bind<IJWKSIssuerOptions>({ key: AuthenticateBindingKeys.JWKS_OPTIONS })\n          .toValue(issuerOpts);\n        this.application.service(JWKSIssuerTokenService);\n\n        // Path depends on a runtime option, so @controller can't be applied statically — decorate here instead.\n        Reflect.decorate(\n          [controller({ path: issuerOpts?.rest?.path ?? '/certs' })],\n          JWKSController,\n        );\n        this.application.controller(JWKSController);\n\n        this.logger\n          .for(this.defineJWKSAuth.name)\n          .info('JWKS issuer configured with /certs endpoint');\n        break;\n      }\n\n      case JWKSModes.VERIFIER: {\n        const verifierOpts = jwksOptions;\n\n        if (!verifierOpts.jwksUrl) {\n          throw getError({ message: '[defineJWKSAuth] jwksUrl is required for verifier mode' });\n        }\n\n        this.application\n          .bind<IJWKSVerifierOptions>({ key: AuthenticateBindingKeys.JWKS_OPTIONS })\n          .toValue(verifierOpts);\n        this.application.service(JWKSVerifierTokenService);\n\n        this.logger.for(this.defineJWKSAuth.name).info('JWKS verifier configured');\n        break;\n      }\n\n      default: {\n        // Same exhaustive-switch-narrows-to-never situation as the JOSE standard default above.\n        throw getError({\n          message: `[defineJWKSAuth] Invalid JWKS mode: ${(jwksOptions as { mode?: unknown }).mode}`,\n        });\n      }\n    }\n  }\n\n  /**\n   * Service-to-service authentication. Absent options mean no strategy is registered and no route is\n   * mounted, so an application that never sets them is byte-identical to today.\n   *\n   * The certs route is mounted only when SIGNING keys are present. Most services are called and\n   * never call; publishing a key set for a service that signs nothing advertises a capability it\n   * does not have.\n   */\n  private defineServiceAuth(opts: { serviceOptions?: IServiceAuthOptions }): void {\n    const { serviceOptions } = opts;\n\n    if (!serviceOptions) {\n      this.logger\n        .for(this.defineServiceAuth.name)\n        .debug('serviceOptions not provided, skipping service authentication');\n      return;\n    }\n\n    if (!serviceOptions.name) {\n      throw getError({\n        message:\n          '[defineServiceAuth] name is required | it is the issuer this service stamps and the audience it demands',\n      });\n    }\n\n    if (!serviceOptions.resolvePrincipal) {\n      throw getError({\n        message:\n          '[defineServiceAuth] resolvePrincipal is required | the framework proves WHICH SERVICE called, the application decides who that acts as',\n      });\n    }\n\n    this.application.service(ServiceAssertionVerifierService);\n\n    if (serviceOptions.keys) {\n      this.application.service(ServiceAssertionSignerService);\n\n      const restPath = serviceOptions.rest?.path ?? ServiceAssertion.DEFAULT_REST_PATH;\n      this.application\n        .bind<string>({ key: AuthenticateBindingKeys.SERVICE_CERTS_PATH })\n        .toValue(restPath);\n\n      // Path depends on a runtime option, so @controller cannot be applied statically.\n      Reflect.decorate([controller({ path: restPath })], ServiceCertsController);\n      this.application.controller(ServiceCertsController);\n    }\n\n    AuthenticationStrategyRegistry.getInstance().register({\n      container: this.application,\n      strategies: [\n        { name: Authentication.STRATEGY_SERVICE, strategy: ServiceAuthenticationStrategy },\n      ],\n    });\n\n    this.logger\n      .for(this.defineServiceAuth.name)\n      .info(\n        'Service authentication configured | name: %s | signs: %s | callers: %s',\n        serviceOptions.name,\n        Boolean(serviceOptions.keys),\n        Object.keys(serviceOptions.callers ?? {}).join(', ') || 'none',\n      );\n  }\n\n  private defineBasicAuth(opts: { basicOptions?: TBasicTokenServiceOptions }): void {\n    const { basicOptions } = opts;\n\n    if (!basicOptions) {\n      this.logger\n        .for(this.defineBasicAuth.name)\n        .debug('basicOptions not provided, skipping Basic configuration');\n      return;\n    }\n\n    if (!basicOptions.verifyCredentials) {\n      throw getError({\n        message: '[defineBasicAuth] verifyCredentials function is required',\n      });\n    }\n\n    this.application\n      .bind<TBasicTokenServiceOptions>({ key: AuthenticateBindingKeys.BASIC_OPTIONS })\n      .toValue(basicOptions);\n    this.application.service(BasicTokenService);\n\n    this.logger.for(this.defineBasicAuth.name).info('Basic authentication configured');\n  }\n\n  private defineControllers(opts: { options: IAuthenticateOptions }): void {\n    const { restOptions, jwtOptions } = opts.options;\n\n    if (!restOptions?.useAuthController) {\n      this.logger.for(this.defineControllers.name).debug('Auth controller disabled');\n      return;\n    }\n\n    if (!jwtOptions) {\n      throw getError({\n        message: '[defineControllers] Auth controller requires jwtOptions to be configured',\n      });\n    }\n\n    const AuthController = defineAuthController(restOptions.controllerOpts);\n    this.application.controller(AuthController);\n\n    this.logger.for(this.defineControllers.name).info('Auth controller registered');\n  }\n\n  defineOAuth2() {\n    // TODO Implement OAuth2\n  }\n}\n"]}
+{"version":3,"file":"component.js","sourceRoot":"","sources":["../../../../../src/components/auth/authenticate/component.ts"],"names":[],"mappings":";;;;;;;;;;;;;AAEA,OAAO,EAAE,QAAQ,EAAE,MAAM,6BAA6B,CAAC;AACvD,OAAO,EAAE,OAAO,EAAE,MAAM,0BAA0B,CAAC;AACnD,OAAO,EACL,uBAAuB,EACvB,cAAc,EACd,8BAA8B,EAC9B,aAAa,EACb,UAAU,EACV,YAAY,EAKZ,MAAM,EAEN,aAAa,EACb,cAAc,EACd,SAAS,EACT,gBAAgB,GAKjB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAAE,qBAAqB,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AACtE,OAAO,EAAE,sBAAsB,EAAE,MAAM,6BAA6B,CAAC;AACrE,OAAO,EACL,iBAAiB,EACjB,sBAAsB,EACtB,wBAAwB,EACxB,eAAe,GAChB,MAAM,YAAY,CAAC;AACpB,OAAO,EAAE,UAAU,EAAE,MAAM,wBAAwB,CAAC;AACpD,OAAO,EAAE,6BAA6B,EAAE,MAAM,mCAAmC,CAAC;AAClF,OAAO,EAAE,+BAA+B,EAAE,MAAM,qCAAqC,CAAC;AACtF,OAAO,EAAE,6BAA6B,EAAE,MAAM,+BAA+B,CAAC;AAE9E,MAAM,cAAc,GAAG,gBAAgB,CAAC;AAExC,IAAa,qBAAqB,6BAAlC,MAAa,qBAAsB,SAAQ,aAAa;IACtD,YAC8D,WAA4B;QAExF,KAAK,CAAC;YACJ,KAAK,EAAE,uBAAqB,CAAC,IAAI;YACjC,WAAW,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,WAAW,EAAE;YACrD,QAAQ,EAAE;gBACR,CAAC,uBAAuB,CAAC,YAAY,CAAC,EAAE,OAAO,CAAC,IAAI,CAA6B;oBAC/E,GAAG,EAAE,uBAAuB,CAAC,YAAY;iBAC1C,CAAC,CAAC,OAAO,CAAC,EAAE,iBAAiB,EAAE,KAAK,EAAE,CAAC;aACzC;SACF,CAAC,CAAC;QAVyD,gBAAW,GAAX,WAAW,CAAiB;IAW1F,CAAC;IAEQ,OAAO;QACd,MAAM,UAAU,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAA0B;YAC/D,GAAG,EAAE,uBAAuB,CAAC,WAAW;YACxC,UAAU,EAAE,IAAI;SACjB,CAAC,CAAC;QACH,MAAM,YAAY,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAA4B;YACnE,GAAG,EAAE,uBAAuB,CAAC,aAAa;YAC1C,UAAU,EAAE,IAAI;SACjB,CAAC,CAAC;QACH,MAAM,WAAW,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAA6B;YACnE,GAAG,EAAE,uBAAuB,CAAC,YAAY;YACzC,UAAU,EAAE,IAAI;SACjB,CAAC,CAAC;QACH,MAAM,cAAc,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAsB;YAC/D,GAAG,EAAE,uBAAuB,CAAC,eAAe;YAC5C,UAAU,EAAE,IAAI;SACjB,CAAC,CAAC;QAEH,8FAA8F;QAC9F,6FAA6F;QAC7F,IAAI,CAAC,UAAU,IAAI,CAAC,YAAY,IAAI,CAAC,cAAc,EAAE,CAAC;YACpD,MAAM,QAAQ,CAAC;gBACb,OAAO,EACL,qGAAqG;aACxG,CAAC,CAAC;QACL,CAAC;QAED,MAAM,OAAO,GAAyB,EAAE,WAAW,EAAE,UAAU,EAAE,YAAY,EAAE,cAAc,EAAE,CAAC;QAEhG,IAAI,UAAU,EAAE,CAAC;YACf,QAAQ,UAAU,CAAC,QAAQ,EAAE,CAAC;gBAC5B,KAAK,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC;oBACvB,IAAI,CAAC,aAAa,CAAC,EAAE,OAAO,EAAE,UAAU,CAAC,OAAO,EAAE,CAAC,CAAC;oBACpD,MAAM;gBACR,CAAC;gBACD,KAAK,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC;oBACxB,IAAI,CAAC,cAAc,CAAC,EAAE,OAAO,EAAE,UAAU,CAAC,OAAO,EAAE,CAAC,CAAC;oBACrD,MAAM;gBACR,CAAC;gBACD,OAAO,CAAC,CAAC,CAAC;oBACR,MAAM,QAAQ,CAAC;wBACb,OAAO,EAAE,kDAAmD,UAAkB,CAAC,QAAQ,EAAE;qBAC1F,CAAC,CAAC;gBACL,CAAC;YACH,CAAC;QACH,CAAC;QAED,IAAI,CAAC,eAAe,CAAC,EAAE,YAAY,EAAE,CAAC,CAAC;QACvC,IAAI,CAAC,iBAAiB,CAAC,EAAE,cAAc,EAAE,CAAC,CAAC;QAE3C,IAAI,CAAC,iBAAiB,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC;QAEpC,IAAI,CAAC,YAAY,EAAE,CAAC;QAEpB,OAAO,IAAI,CAAC,WAAW,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC;IACvC,CAAC;IAED;;;OAGG;IACK,KAAK,CAAC,WAAW,CAAC,IAAuC;QAC/D,MAAM,EAAE,UAAU,EAAE,cAAc,EAAE,GAAG,IAAI,CAAC,OAAO,CAAC;QACpD,IAAI,CAAC,UAAU,IAAI,CAAC,cAAc,EAAE,CAAC;YACnC,OAAO;QACT,CAAC;QAED,IAAI,CAAC;YACH,MAAM,UAAU,CAAC,IAAI,EAAE,CAAC;QAC1B,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,MAAM,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YACtE,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,mCAAmC,EAAE,MAAM,CAAC,CAAC;YAE1F,MAAM,QAAQ,CAAC;gBACb,OAAO,EAAE,qHAAqH,MAAM,EAAE;gBACtI,KAAK,EAAE,KAAK;aACb,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAEO,aAAa,CAAC,IAA0C;QAC9D,MAAM,EAAE,OAAO,EAAE,UAAU,EAAE,GAAG,IAAI,CAAC;QAErC,MAAM,EAAE,SAAS,EAAE,iBAAiB,EAAE,GAAG,UAAU,CAAC;QAEpD,IAAI,CAAC,SAAS,IAAI,SAAS,KAAK,cAAc,EAAE,CAAC;YAC/C,MAAM,QAAQ,CAAC;gBACb,OAAO,EAAE,iDAAiD,SAAS,EAAE;aACtE,CAAC,CAAC;QACL,CAAC;QAED,IAAI,CAAC,iBAAiB,EAAE,CAAC;YACvB,MAAM,QAAQ,CAAC;gBACb,OAAO,EAAE,+CAA+C;aACzD,CAAC,CAAC;QACL,CAAC;QAED,IAAI,CAAC,WAAW;aACb,IAAI,CAA0B,EAAE,GAAG,EAAE,uBAAuB,CAAC,WAAW,EAAE,CAAC;aAC3E,OAAO,CAAC,UAAU,CAAC,CAAC;QACvB,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC;QAE1C,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,+BAA+B,CAAC,CAAC;IACjF,CAAC;IAEO,cAAc,CAAC,IAA2C;QAChE,MAAM,EAAE,OAAO,EAAE,WAAW,EAAE,GAAG,IAAI,CAAC;QAEtC,QAAQ,WAAW,CAAC,IAAI,EAAE,CAAC;YACzB,KAAK,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC;gBACtB,MAAM,UAAU,GAAG,WAAW,CAAC;gBAE/B,IAAI,CAAC,UAAU,CAAC,IAAI,EAAE,OAAO,IAAI,CAAC,UAAU,CAAC,IAAI,EAAE,MAAM,EAAE,CAAC;oBAC1D,MAAM,QAAQ,CAAC;wBACb,OAAO,EAAE,4EAA4E;qBACtF,CAAC,CAAC;gBACL,CAAC;gBAED,IAAI,CAAC,UAAU,CAAC,IAAI,EAAE,MAAM,IAAI,CAAC,cAAc,CAAC,OAAO,CAAC,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;oBAChF,MAAM,QAAQ,CAAC;wBACb,OAAO,EAAE,gEAAgE,CAAC,GAAG,cAAc,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;qBACrH,CAAC,CAAC;gBACL,CAAC;gBAED,IAAI,CAAC,UAAU,CAAC,GAAG,EAAE,CAAC;oBACpB,MAAM,QAAQ,CAAC,EAAE,OAAO,EAAE,kDAAkD,EAAE,CAAC,CAAC;gBAClF,CAAC;gBAED,IAAI,CAAC,UAAU,CAAC,iBAAiB,EAAE,CAAC;oBAClC,MAAM,QAAQ,CAAC;wBACb,OAAO,EAAE,gEAAgE;qBAC1E,CAAC,CAAC;gBACL,CAAC;gBAED,IAAI,CAAC,WAAW;qBACb,IAAI,CAAqB,EAAE,GAAG,EAAE,uBAAuB,CAAC,YAAY,EAAE,CAAC;qBACvE,OAAO,CAAC,UAAU,CAAC,CAAC;gBACvB,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC,sBAAsB,CAAC,CAAC;gBAEjD,wGAAwG;gBACxG,OAAO,CAAC,QAAQ,CACd,CAAC,UAAU,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,IAAI,IAAI,QAAQ,EAAE,CAAC,CAAC,EAC1D,cAAc,CACf,CAAC;gBACF,IAAI,CAAC,WAAW,CAAC,UAAU,CAAC,cAAc,CAAC,CAAC;gBAE5C,IAAI,CAAC,MAAM;qBACR,GAAG,CAAC,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC;qBAC7B,IAAI,CAAC,6CAA6C,CAAC,CAAC;gBACvD,MAAM;YACR,CAAC;YAED,KAAK,SAAS,CAAC,QAAQ,CAAC,CAAC,CAAC;gBACxB,MAAM,YAAY,GAAG,WAAW,CAAC;gBAEjC,IAAI,CAAC,YAAY,CAAC,OAAO,EAAE,CAAC;oBAC1B,MAAM,QAAQ,CAAC,EAAE,OAAO,EAAE,wDAAwD,EAAE,CAAC,CAAC;gBACxF,CAAC;gBAED,IAAI,CAAC,WAAW;qBACb,IAAI,CAAuB,EAAE,GAAG,EAAE,uBAAuB,CAAC,YAAY,EAAE,CAAC;qBACzE,OAAO,CAAC,YAAY,CAAC,CAAC;gBACzB,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC,wBAAwB,CAAC,CAAC;gBAEnD,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,0BAA0B,CAAC,CAAC;gBAC3E,MAAM;YACR,CAAC;YAED,OAAO,CAAC,CAAC,CAAC;gBACR,wFAAwF;gBACxF,MAAM,QAAQ,CAAC;oBACb,OAAO,EAAE,uCAAwC,WAAkC,CAAC,IAAI,EAAE;iBAC3F,CAAC,CAAC;YACL,CAAC;QACH,CAAC;IACH,CAAC;IAED;;;;;;;OAOG;IACK,iBAAiB,CAAC,IAA8C;QACtE,MAAM,EAAE,cAAc,EAAE,GAAG,IAAI,CAAC;QAEhC,IAAI,CAAC,cAAc,EAAE,CAAC;YACpB,IAAI,CAAC,MAAM;iBACR,GAAG,CAAC,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC;iBAChC,KAAK,CAAC,8DAA8D,CAAC,CAAC;YACzE,OAAO;QACT,CAAC;QAED,IAAI,CAAC,cAAc,CAAC,IAAI,EAAE,CAAC;YACzB,MAAM,QAAQ,CAAC;gBACb,OAAO,EACL,yGAAyG;aAC5G,CAAC,CAAC;QACL,CAAC;QAED,IAAI,CAAC,cAAc,CAAC,gBAAgB,EAAE,CAAC;YACrC,MAAM,QAAQ,CAAC;gBACb,OAAO,EACL,wIAAwI;aAC3I,CAAC,CAAC;QACL,CAAC;QAED,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC,+BAA+B,CAAC,CAAC;QAE1D,IAAI,cAAc,CAAC,IAAI,EAAE,CAAC;YACxB,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC,6BAA6B,CAAC,CAAC;YAExD,MAAM,QAAQ,GAAG,cAAc,CAAC,IAAI,EAAE,IAAI,IAAI,gBAAgB,CAAC,iBAAiB,CAAC;YACjF,IAAI,CAAC,WAAW;iBACb,IAAI,CAAS,EAAE,GAAG,EAAE,uBAAuB,CAAC,kBAAkB,EAAE,CAAC;iBACjE,OAAO,CAAC,QAAQ,CAAC,CAAC;YAErB,iFAAiF;YACjF,OAAO,CAAC,QAAQ,CAAC,CAAC,UAAU,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC,EAAE,sBAAsB,CAAC,CAAC;YAC3E,IAAI,CAAC,WAAW,CAAC,UAAU,CAAC,sBAAsB,CAAC,CAAC;QACtD,CAAC;QAED,8BAA8B,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC;YACpD,SAAS,EAAE,IAAI,CAAC,WAAW;YAC3B,UAAU,EAAE;gBACV,EAAE,IAAI,EAAE,cAAc,CAAC,gBAAgB,EAAE,QAAQ,EAAE,6BAA6B,EAAE;aACnF;SACF,CAAC,CAAC;QAEH,IAAI,CAAC,MAAM;aACR,GAAG,CAAC,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC;aAChC,IAAI,CACH,wEAAwE,EACxE,cAAc,CAAC,IAAI,EACnB,OAAO,CAAC,cAAc,CAAC,IAAI,CAAC,EAC5B,MAAM,CAAC,IAAI,CAAC,cAAc,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,MAAM,CAC/D,CAAC;IACN,CAAC;IAEO,eAAe,CAAC,IAAkD;QACxE,MAAM,EAAE,YAAY,EAAE,GAAG,IAAI,CAAC;QAE9B,IAAI,CAAC,YAAY,EAAE,CAAC;YAClB,IAAI,CAAC,MAAM;iBACR,GAAG,CAAC,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC;iBAC9B,KAAK,CAAC,yDAAyD,CAAC,CAAC;YACpE,OAAO;QACT,CAAC;QAED,IAAI,CAAC,YAAY,CAAC,iBAAiB,EAAE,CAAC;YACpC,MAAM,QAAQ,CAAC;gBACb,OAAO,EAAE,0DAA0D;aACpE,CAAC,CAAC;QACL,CAAC;QAED,IAAI,CAAC,WAAW;aACb,IAAI,CAA4B,EAAE,GAAG,EAAE,uBAAuB,CAAC,aAAa,EAAE,CAAC;aAC/E,OAAO,CAAC,YAAY,CAAC,CAAC;QACzB,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC,iBAAiB,CAAC,CAAC;QAE5C,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,iCAAiC,CAAC,CAAC;IACrF,CAAC;IAEO,iBAAiB,CAAC,IAAuC;QAC/D,MAAM,EAAE,WAAW,EAAE,UAAU,EAAE,GAAG,IAAI,CAAC,OAAO,CAAC;QAEjD,IAAI,CAAC,WAAW,EAAE,iBAAiB,EAAE,CAAC;YACpC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,0BAA0B,CAAC,CAAC;YAC/E,OAAO;QACT,CAAC;QAED,IAAI,CAAC,UAAU,EAAE,CAAC;YAChB,MAAM,QAAQ,CAAC;gBACb,OAAO,EAAE,0EAA0E;aACpF,CAAC,CAAC;QACL,CAAC;QAED,MAAM,cAAc,GAAG,qBAAqB,CAAC,MAAM,CAAC,WAAW,CAAC,cAAc,CAAC,CAAC;QAChF,IAAI,CAAC,WAAW,CAAC,UAAU,CAAC,cAAc,CAAC,CAAC;QAE5C,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,4BAA4B,CAAC,CAAC;IAClF,CAAC;IAED,YAAY;QACV,wBAAwB;IAC1B,CAAC;CACF,CAAA;AA/SY,qBAAqB;IAE7B,WAAA,MAAM,CAAC,EAAE,GAAG,EAAE,YAAY,CAAC,oBAAoB,EAAE,CAAC,CAAA;;GAF1C,qBAAqB,CA+SjC","sourcesContent":["import type { BaseApplication } from '@/base/applications/base';\nimport { type ValueOrPromise } from '@venizia/ignis-helpers/common';\nimport { getError } from '@venizia/ignis-helpers/core';\nimport { Binding } from '@venizia/ignis-inversion';\nimport {\n  AuthenticateBindingKeys,\n  Authentication,\n  AuthenticationStrategyRegistry,\n  BaseComponent,\n  controller,\n  CoreBindings,\n  type IAuthenticateOptions,\n  type IJWKSIssuerOptions,\n  type IJWKSVerifierOptions,\n  type IJWSTokenServiceOptions,\n  inject,\n  type IServiceAuthOptions,\n  JOSEStandards,\n  JWKSKeyFormats,\n  JWKSModes,\n  ServiceAssertion,\n  type TAuthenticationRestOptions,\n  type TBasicTokenServiceOptions,\n  type TJWKSTokenServiceOptions,\n  type TJWTTokenServiceOptions,\n} from '@venizia/ignis-kernel';\nimport { AuthControllerFactory, JWKSController } from './controllers';\nimport { ServiceCertsController } from './controllers/service-certs';\nimport {\n  BasicTokenService,\n  JWKSIssuerTokenService,\n  JWKSVerifierTokenService,\n  JWSTokenService,\n} from './services';\nimport { JoseLoader } from './services/jose-loader';\nimport { ServiceAssertionSignerService } from './services/service/signer.service';\nimport { ServiceAssertionVerifierService } from './services/service/verifier.service';\nimport { ServiceAuthenticationStrategy } from './strategies/service.strategy';\n\nconst DEFAULT_SECRET = 'unknown_secret';\n\nexport class AuthenticateComponent extends BaseComponent {\n  constructor(\n    @inject({ key: CoreBindings.APPLICATION_INSTANCE }) private application: BaseApplication,\n  ) {\n    super({\n      scope: AuthenticateComponent.name,\n      initDefault: { enable: true, container: application },\n      bindings: {\n        [AuthenticateBindingKeys.REST_OPTIONS]: Binding.bind<TAuthenticationRestOptions>({\n          key: AuthenticateBindingKeys.REST_OPTIONS,\n        }).toValue({ useAuthController: false }),\n      },\n    });\n  }\n\n  override binding(): ValueOrPromise<void> {\n    const jwtOptions = this.application.get<TJWTTokenServiceOptions>({\n      key: AuthenticateBindingKeys.JWT_OPTIONS,\n      isOptional: true,\n    });\n    const basicOptions = this.application.get<TBasicTokenServiceOptions>({\n      key: AuthenticateBindingKeys.BASIC_OPTIONS,\n      isOptional: true,\n    });\n    const restOptions = this.application.get<TAuthenticationRestOptions>({\n      key: AuthenticateBindingKeys.REST_OPTIONS,\n      isOptional: true,\n    });\n    const serviceOptions = this.application.get<IServiceAuthOptions>({\n      key: AuthenticateBindingKeys.SERVICE_OPTIONS,\n      isOptional: true,\n    });\n\n    // A service that only VERIFIES assertions needs neither jwt nor basic - and that application,\n    // an IGNIS app consuming no user tokens at all, is exactly what the service strategy is for.\n    if (!jwtOptions && !basicOptions && !serviceOptions) {\n      throw getError({\n        message:\n          '[AuthenticateComponent] At least one of jwtOptions, basicOptions or serviceOptions must be provided',\n      });\n    }\n\n    const options: IAuthenticateOptions = { restOptions, jwtOptions, basicOptions, serviceOptions };\n\n    if (jwtOptions) {\n      switch (jwtOptions.standard) {\n        case JOSEStandards.JWS: {\n          this.defineJWSAuth({ options: jwtOptions.options });\n          break;\n        }\n        case JOSEStandards.JWKS: {\n          this.defineJWKSAuth({ options: jwtOptions.options });\n          break;\n        }\n        default: {\n          throw getError({\n            message: `[AuthenticateComponent] Unknown JOSE standard: ${(jwtOptions as any).standard}`,\n          });\n        }\n      }\n    }\n\n    this.defineBasicAuth({ basicOptions });\n    this.defineServiceAuth({ serviceOptions });\n\n    this.defineControllers({ options });\n\n    this.defineOAuth2();\n\n    return this.preloadJose({ options });\n  }\n\n  /**\n   * Loads `jose` at boot when a configured service signs or verifies with it, so a missing or broken\n   * install fails the boot instead of answering every token check with a 401.\n   */\n  private async preloadJose(opts: { options: IAuthenticateOptions }): Promise<void> {\n    const { jwtOptions, serviceOptions } = opts.options;\n    if (!jwtOptions && !serviceOptions) {\n      return;\n    }\n\n    try {\n      await JoseLoader.load();\n    } catch (error) {\n      const reason = error instanceof Error ? error.message : String(error);\n      this.logger.for(this.preloadJose.name).error(\"Failed to load 'jose' | Error: %s\", reason);\n\n      throw getError({\n        message: `[AuthenticateComponent] Cannot load 'jose', which JWT and service authentication need. Please install it | Error: ${reason}`,\n        cause: error,\n      });\n    }\n  }\n\n  private defineJWSAuth(opts: { options: IJWSTokenServiceOptions }): void {\n    const { options: jwsOptions } = opts;\n\n    const { jwtSecret, getTokenExpiresFn } = jwsOptions;\n\n    if (!jwtSecret || jwtSecret === DEFAULT_SECRET) {\n      throw getError({\n        message: `[defineJWSAuth] Invalid jwtSecret | Provided: ${jwtSecret}`,\n      });\n    }\n\n    if (!getTokenExpiresFn) {\n      throw getError({\n        message: '[defineJWSAuth] getTokenExpiresFn is required',\n      });\n    }\n\n    this.application\n      .bind<IJWSTokenServiceOptions>({ key: AuthenticateBindingKeys.JWT_OPTIONS })\n      .toValue(jwsOptions);\n    this.application.service(JWSTokenService);\n\n    this.logger.for(this.defineJWSAuth.name).info('JWS authentication configured');\n  }\n\n  private defineJWKSAuth(opts: { options: TJWKSTokenServiceOptions }): void {\n    const { options: jwksOptions } = opts;\n\n    switch (jwksOptions.mode) {\n      case JWKSModes.ISSUER: {\n        const issuerOpts = jwksOptions;\n\n        if (!issuerOpts.keys?.private || !issuerOpts.keys?.public) {\n          throw getError({\n            message: '[defineJWKSAuth] keys.private and keys.public are required for issuer mode',\n          });\n        }\n\n        if (!issuerOpts.keys?.format || !JWKSKeyFormats.isValid(issuerOpts.keys.format)) {\n          throw getError({\n            message: `[defineJWKSAuth] keys.format is required and must be one of: ${[...JWKSKeyFormats.SCHEME_SET].join(', ')}`,\n          });\n        }\n\n        if (!issuerOpts.kid) {\n          throw getError({ message: '[defineJWKSAuth] kid is required for issuer mode' });\n        }\n\n        if (!issuerOpts.getTokenExpiresFn) {\n          throw getError({\n            message: '[defineJWKSAuth] getTokenExpiresFn is required for issuer mode',\n          });\n        }\n\n        this.application\n          .bind<IJWKSIssuerOptions>({ key: AuthenticateBindingKeys.JWKS_OPTIONS })\n          .toValue(issuerOpts);\n        this.application.service(JWKSIssuerTokenService);\n\n        // Path depends on a runtime option, so @controller can't be applied statically — decorate here instead.\n        Reflect.decorate(\n          [controller({ path: issuerOpts?.rest?.path ?? '/certs' })],\n          JWKSController,\n        );\n        this.application.controller(JWKSController);\n\n        this.logger\n          .for(this.defineJWKSAuth.name)\n          .info('JWKS issuer configured with /certs endpoint');\n        break;\n      }\n\n      case JWKSModes.VERIFIER: {\n        const verifierOpts = jwksOptions;\n\n        if (!verifierOpts.jwksUrl) {\n          throw getError({ message: '[defineJWKSAuth] jwksUrl is required for verifier mode' });\n        }\n\n        this.application\n          .bind<IJWKSVerifierOptions>({ key: AuthenticateBindingKeys.JWKS_OPTIONS })\n          .toValue(verifierOpts);\n        this.application.service(JWKSVerifierTokenService);\n\n        this.logger.for(this.defineJWKSAuth.name).info('JWKS verifier configured');\n        break;\n      }\n\n      default: {\n        // Same exhaustive-switch-narrows-to-never situation as the JOSE standard default above.\n        throw getError({\n          message: `[defineJWKSAuth] Invalid JWKS mode: ${(jwksOptions as { mode?: unknown }).mode}`,\n        });\n      }\n    }\n  }\n\n  /**\n   * Service-to-service authentication. Absent options mean no strategy is registered and no route is\n   * mounted, so an application that never sets them is byte-identical to today.\n   *\n   * The certs route is mounted only when SIGNING keys are present. Most services are called and\n   * never call; publishing a key set for a service that signs nothing advertises a capability it\n   * does not have.\n   */\n  private defineServiceAuth(opts: { serviceOptions?: IServiceAuthOptions }): void {\n    const { serviceOptions } = opts;\n\n    if (!serviceOptions) {\n      this.logger\n        .for(this.defineServiceAuth.name)\n        .debug('serviceOptions not provided, skipping service authentication');\n      return;\n    }\n\n    if (!serviceOptions.name) {\n      throw getError({\n        message:\n          '[defineServiceAuth] name is required | it is the issuer this service stamps and the audience it demands',\n      });\n    }\n\n    if (!serviceOptions.resolvePrincipal) {\n      throw getError({\n        message:\n          '[defineServiceAuth] resolvePrincipal is required | the framework proves WHICH SERVICE called, the application decides who that acts as',\n      });\n    }\n\n    this.application.service(ServiceAssertionVerifierService);\n\n    if (serviceOptions.keys) {\n      this.application.service(ServiceAssertionSignerService);\n\n      const restPath = serviceOptions.rest?.path ?? ServiceAssertion.DEFAULT_REST_PATH;\n      this.application\n        .bind<string>({ key: AuthenticateBindingKeys.SERVICE_CERTS_PATH })\n        .toValue(restPath);\n\n      // Path depends on a runtime option, so @controller cannot be applied statically.\n      Reflect.decorate([controller({ path: restPath })], ServiceCertsController);\n      this.application.controller(ServiceCertsController);\n    }\n\n    AuthenticationStrategyRegistry.getInstance().register({\n      container: this.application,\n      strategies: [\n        { name: Authentication.STRATEGY_SERVICE, strategy: ServiceAuthenticationStrategy },\n      ],\n    });\n\n    this.logger\n      .for(this.defineServiceAuth.name)\n      .info(\n        'Service authentication configured | name: %s | signs: %s | callers: %s',\n        serviceOptions.name,\n        Boolean(serviceOptions.keys),\n        Object.keys(serviceOptions.callers ?? {}).join(', ') || 'none',\n      );\n  }\n\n  private defineBasicAuth(opts: { basicOptions?: TBasicTokenServiceOptions }): void {\n    const { basicOptions } = opts;\n\n    if (!basicOptions) {\n      this.logger\n        .for(this.defineBasicAuth.name)\n        .debug('basicOptions not provided, skipping Basic configuration');\n      return;\n    }\n\n    if (!basicOptions.verifyCredentials) {\n      throw getError({\n        message: '[defineBasicAuth] verifyCredentials function is required',\n      });\n    }\n\n    this.application\n      .bind<TBasicTokenServiceOptions>({ key: AuthenticateBindingKeys.BASIC_OPTIONS })\n      .toValue(basicOptions);\n    this.application.service(BasicTokenService);\n\n    this.logger.for(this.defineBasicAuth.name).info('Basic authentication configured');\n  }\n\n  private defineControllers(opts: { options: IAuthenticateOptions }): void {\n    const { restOptions, jwtOptions } = opts.options;\n\n    if (!restOptions?.useAuthController) {\n      this.logger.for(this.defineControllers.name).debug('Auth controller disabled');\n      return;\n    }\n\n    if (!jwtOptions) {\n      throw getError({\n        message: '[defineControllers] Auth controller requires jwtOptions to be configured',\n      });\n    }\n\n    const AuthController = AuthControllerFactory.define(restOptions.controllerOpts);\n    this.application.controller(AuthController);\n\n    this.logger.for(this.defineControllers.name).info('Auth controller registered');\n  }\n\n  defineOAuth2() {\n    // TODO Implement OAuth2\n  }\n}\n"]}

package/dist/esm/components/auth/authenticate/controllers/factory.d.ts

@@ -12,150 +12,153 @@ export declare const JWTTokenPayloadSchema: z.ZodObject<{
     provider: z.ZodOptional<z.ZodString>;
     email: z.ZodOptional<z.ZodEmail>;
 }, z.core.$strip>;
-export declare const defineAuthController: (opts: TDefineAuthControllerOpts) => {
-    new (authService: IAuthService): {
-        service: IAuthService;
-        binding(): ValueOrPromise<void>;
-        measure<R>(opts: {
-            scope: string;
-            args: unknown;
-            task: () => Promise<R>;
-        }): Promise<any>;
-        normalizeCountData<ResponseSchema extends unknown, RequestContext extends import("@venizia/ignis-kernel").TRouteContext<import("hono").Env> = import("@venizia/ignis-kernel").TRouteContext<import("hono").Env>, ResponseData extends {
-            count: number;
-            data?: import("@venizia/ignis-helpers").TNullable<ResponseSchema>;
-        } = {
-            count: number;
-            data?: import("@venizia/ignis-helpers").TNullable<ResponseSchema>;
-        }>(opts: {
-            context: RequestContext;
-            payload: ResponseData;
-        }): ResponseData | import("@venizia/ignis-helpers").TNullable<ResponseSchema>;
-        getRequestedExtras(opts: {
-            context: import("@venizia/ignis-kernel").TRouteContext<import("hono").Env>;
-        }): Array<import("@venizia/ignis-kernel").IRequestedExtra>;
-        respond<R>(opts: {
-            context: import("@venizia/ignis-kernel").TRouteContext<import("hono").Env>;
-            format: import("@venizia/ignis-kernel").TResponseFormat;
-            payload: {
+/** Builds the decorated REST controller of the authentication routes (sign-in, sign-up, change-password, who-am-i). */
+export declare class AuthControllerFactory {
+    static define(opts: TDefineAuthControllerOpts): {
+        new (authService: IAuthService): {
+            service: IAuthService;
+            binding(): ValueOrPromise<void>;
+            measure<R>(opts: {
+                scope: string;
+                args: unknown;
+                task: () => Promise<R>;
+            }): Promise<any>;
+            normalizeCountData<ResponseSchema extends unknown, RequestContext extends import("@venizia/ignis-kernel").TRouteContext<import("hono").Env> = import("@venizia/ignis-kernel").TRouteContext<import("hono").Env>, ResponseData extends {
                 count: number;
-                data?: import("@venizia/ignis-helpers").TNullable<R>;
-            };
-            range?: import("@venizia/ignis-kernel").TDataRange;
-            extra?: never;
-        }): R | {
-            count: number;
-            data?: import("@venizia/ignis-helpers").TNullable<R>;
-        } | null | undefined;
-        respond<R, Extra extends Record<string, import("@venizia/ignis-kernel").TResponseExtra>>(opts: {
-            context: import("@venizia/ignis-kernel").TRouteContext<import("hono").Env>;
-            format: import("@venizia/ignis-kernel").TResponseFormat;
-            payload: {
+                data?: import("@venizia/ignis-helpers").TNullable<ResponseSchema>;
+            } = {
+                count: number;
+                data?: import("@venizia/ignis-helpers").TNullable<ResponseSchema>;
+            }>(opts: {
+                context: RequestContext;
+                payload: ResponseData;
+            }): ResponseData | import("@venizia/ignis-helpers").TNullable<ResponseSchema>;
+            getRequestedExtras(opts: {
+                context: import("@venizia/ignis-kernel").TRouteContext<import("hono").Env>;
+            }): Array<import("@venizia/ignis-kernel").IRequestedExtra>;
+            respond<R>(opts: {
+                context: import("@venizia/ignis-kernel").TRouteContext<import("hono").Env>;
+                format: import("@venizia/ignis-kernel").TResponseFormat;
+                payload: {
+                    count: number;
+                    data?: import("@venizia/ignis-helpers").TNullable<R>;
+                };
+                range?: import("@venizia/ignis-kernel").TDataRange;
+                extra?: never;
+            }): R | {
                 count: number;
                 data?: import("@venizia/ignis-helpers").TNullable<R>;
-            };
-            range?: import("@venizia/ignis-kernel").TDataRange;
-            extra: Extra;
-        }): Promise<R | {
-            count: number;
-            data?: import("@venizia/ignis-helpers").TNullable<R>;
-        } | {
-            count?: number;
-            data?: import("@venizia/ignis-helpers").TNullable<R>;
-            extra: Partial<Record<keyof Extra, unknown>>;
-        } | null | undefined>;
-        respond<R>(opts: {
-            context: import("@venizia/ignis-kernel").TRouteContext<import("hono").Env>;
-            format: import("@venizia/ignis-kernel").TResponseFormat;
-            payload: {
+            } | null | undefined;
+            respond<R, Extra extends Record<string, import("@venizia/ignis-kernel").TResponseExtra>>(opts: {
+                context: import("@venizia/ignis-kernel").TRouteContext<import("hono").Env>;
+                format: import("@venizia/ignis-kernel").TResponseFormat;
+                payload: {
+                    count: number;
+                    data?: import("@venizia/ignis-helpers").TNullable<R>;
+                };
+                range?: import("@venizia/ignis-kernel").TDataRange;
+                extra: Extra;
+            }): Promise<R | {
                 count: number;
                 data?: import("@venizia/ignis-helpers").TNullable<R>;
-            };
-            range?: import("@venizia/ignis-kernel").TDataRange;
-            extra?: Record<string, import("@venizia/ignis-kernel").TResponseExtra>;
-        }): ValueOrPromise<R | {
-            count?: number;
-            data?: import("@venizia/ignis-helpers").TNullable<R>;
-            extra?: Record<string, unknown>;
-        } | null | undefined>;
-        respondWithExtra<R>(opts: {
-            context: import("@venizia/ignis-kernel").TRouteContext<import("hono").Env>;
-            payload: {
+            } | {
+                count?: number;
+                data?: import("@venizia/ignis-helpers").TNullable<R>;
+                extra: Partial<Record<keyof Extra, unknown>>;
+            } | null | undefined>;
+            respond<R>(opts: {
+                context: import("@venizia/ignis-kernel").TRouteContext<import("hono").Env>;
+                format: import("@venizia/ignis-kernel").TResponseFormat;
+                payload: {
+                    count: number;
+                    data?: import("@venizia/ignis-helpers").TNullable<R>;
+                };
+                range?: import("@venizia/ignis-kernel").TDataRange;
+                extra?: Record<string, import("@venizia/ignis-kernel").TResponseExtra>;
+            }): ValueOrPromise<R | {
+                count?: number;
+                data?: import("@venizia/ignis-helpers").TNullable<R>;
+                extra?: Record<string, unknown>;
+            } | null | undefined>;
+            respondWithExtra<R>(opts: {
+                context: import("@venizia/ignis-kernel").TRouteContext<import("hono").Env>;
+                payload: {
+                    count: number;
+                    data?: import("@venizia/ignis-helpers").TNullable<R>;
+                };
+                extra: Record<string, import("@venizia/ignis-kernel").TResponseExtra>;
+            }): Promise<R | {
                 count: number;
                 data?: import("@venizia/ignis-helpers").TNullable<R>;
+            } | {
+                count: number;
+                data: import("@venizia/ignis-helpers").TNullable<R>;
+                extra: Record<string, unknown>;
+            } | {
+                data: import("@venizia/ignis-helpers").TNullable<R>;
+                extra: Record<string, unknown>;
+                count?: undefined;
+            } | null | undefined>;
+            setListHeaders(opts: {
+                context: import("@venizia/ignis-kernel").TRouteContext<import("hono").Env>;
+                count: number;
+            } & ({
+                range: import("@venizia/ignis-kernel").TDataRange;
+            } | {
+                offset: number;
+                total: number;
+            })): void;
+            toHonoHandler<ResponseType = unknown>(opts: {
+                handler: import("@venizia/ignis-kernel").TRouteHandler<ResponseType, import("hono").Env>;
+            }): import("hono").Handler<import("hono").Env, string, import("hono").Input, (Response | Promise<Response>) | (import("@hono/zod-openapi").RouteConfigToTypedResponse<import("@hono/zod-openapi").RouteConfig> | Promise<import("@hono/zod-openapi").RouteConfigToTypedResponse<import("@hono/zod-openapi").RouteConfig>>)>;
+            bindRoute<RouteConfig extends import("@venizia/ignis-kernel").IAuthRouteConfig>(opts: {
+                configs: RouteConfig;
+            }): import("@venizia/ignis-kernel").IBindRouteOptions<RouteConfig, import("hono").Env, {}, "/">;
+            defineRoute<RouteConfig extends import("@venizia/ignis-kernel").IAuthRouteConfig, ResponseType = unknown>(opts: {
+                configs: RouteConfig;
+                handler: import("@venizia/ignis-kernel").TRouteHandler<ResponseType, import("hono").Env>;
+                hook?: import("@hono/zod-openapi").Hook<any, import("hono").Env, string, any> | undefined;
+            }): import("@venizia/ignis-kernel").IDefineRouteOptions<RouteConfig, import("hono").Env, {}, "/">;
+            defineJSXRoute<RouteConfig extends import("@venizia/ignis-kernel").IAuthRouteConfig, ResponseType = unknown>(opts: {
+                configs: RouteConfig;
+                handler: import("@venizia/ignis-kernel").TRouteHandler<ResponseType, import("hono").Env>;
+                hook?: import("@hono/zod-openapi").Hook<any, import("hono").Env, string, any> | undefined;
+            }): import("@venizia/ignis-kernel").IDefineRouteOptions<RouteConfig, import("hono").Env, {}, "/">;
+            isConfigured: boolean;
+            router: import("@hono/zod-openapi").OpenAPIHono<import("hono").Env, {}, "/">;
+            path: string;
+            definitions: Record<string, import("@venizia/ignis-kernel").IAuthRouteConfig>;
+            getRouter(): import("@hono/zod-openapi").OpenAPIHono<import("hono").Env, {}, "/">;
+            registerRoutesFromRegistry(opts?: {
+                paths?: import("@venizia/ignis-kernel").TRoutePathScope;
+            }): void;
+            configure(opts?: {} | undefined): Promise<import("@hono/zod-openapi").OpenAPIHono<import("hono").Env, {}, "/">>;
+            buildRouteMiddlewares<RouteConfig extends import("@venizia/ignis-kernel").IAuthRouteConfig>(opts: {
+                configs: RouteConfig;
+            }): {
+                restConfig: Omit<RouteConfig, "authenticate" | "authorize">;
+                security: {
+                    [x: string]: never[];
+                }[];
+                mws: import("hono").MiddlewareHandler<import("hono").Env>[];
             };
-            extra: Record<string, import("@venizia/ignis-kernel").TResponseExtra>;
-        }): Promise<R | {
-            count: number;
-            data?: import("@venizia/ignis-helpers").TNullable<R>;
-        } | {
-            count: number;
-            data: import("@venizia/ignis-helpers").TNullable<R>;
-            extra: Record<string, unknown>;
-        } | {
-            data: import("@venizia/ignis-helpers").TNullable<R>;
-            extra: Record<string, unknown>;
-            count?: undefined;
-        } | null | undefined>;
-        setListHeaders(opts: {
-            context: import("@venizia/ignis-kernel").TRouteContext<import("hono").Env>;
-            count: number;
-        } & ({
-            range: import("@venizia/ignis-kernel").TDataRange;
-        } | {
-            offset: number;
-            total: number;
-        })): void;
-        toHonoHandler<ResponseType = unknown>(opts: {
-            handler: import("@venizia/ignis-kernel").TRouteHandler<ResponseType, import("hono").Env>;
-        }): import("hono").Handler<import("hono").Env, string, import("hono").Input, (Response | Promise<Response>) | (import("@hono/zod-openapi").RouteConfigToTypedResponse<import("@hono/zod-openapi").RouteConfig> | Promise<import("@hono/zod-openapi").RouteConfigToTypedResponse<import("@hono/zod-openapi").RouteConfig>>)>;
-        bindRoute<RouteConfig extends import("@venizia/ignis-kernel").IAuthRouteConfig>(opts: {
-            configs: RouteConfig;
-        }): import("@venizia/ignis-kernel").IBindRouteOptions<RouteConfig, import("hono").Env, {}, "/">;
-        defineRoute<RouteConfig extends import("@venizia/ignis-kernel").IAuthRouteConfig, ResponseType = unknown>(opts: {
-            configs: RouteConfig;
-            handler: import("@venizia/ignis-kernel").TRouteHandler<ResponseType, import("hono").Env>;
-            hook?: import("@hono/zod-openapi").Hook<any, import("hono").Env, string, any> | undefined;
-        }): import("@venizia/ignis-kernel").IDefineRouteOptions<RouteConfig, import("hono").Env, {}, "/">;
-        defineJSXRoute<RouteConfig extends import("@venizia/ignis-kernel").IAuthRouteConfig, ResponseType = unknown>(opts: {
-            configs: RouteConfig;
-            handler: import("@venizia/ignis-kernel").TRouteHandler<ResponseType, import("hono").Env>;
-            hook?: import("@hono/zod-openapi").Hook<any, import("hono").Env, string, any> | undefined;
-        }): import("@venizia/ignis-kernel").IDefineRouteOptions<RouteConfig, import("hono").Env, {}, "/">;
-        isConfigured: boolean;
-        router: import("@hono/zod-openapi").OpenAPIHono<import("hono").Env, {}, "/">;
-        path: string;
-        definitions: Record<string, import("@venizia/ignis-kernel").IAuthRouteConfig>;
-        getRouter(): import("@hono/zod-openapi").OpenAPIHono<import("hono").Env, {}, "/">;
-        registerRoutesFromRegistry(opts?: {
-            paths?: import("@venizia/ignis-kernel").TRoutePathScope;
-        }): void;
-        configure(opts?: {} | undefined): Promise<import("@hono/zod-openapi").OpenAPIHono<import("hono").Env, {}, "/">>;
-        buildRouteMiddlewares<RouteConfig extends import("@venizia/ignis-kernel").IAuthRouteConfig>(opts: {
-            configs: RouteConfig;
-        }): {
-            restConfig: Omit<RouteConfig, "authenticate" | "authorize">;
-            security: {
-                [x: string]: never[];
-            }[];
-            mws: import("hono").MiddlewareHandler<import("hono").Env>[];
-        };
-        getRouteConfigs<RouteConfig extends import("@venizia/ignis-kernel").IAuthRouteConfig>(opts: {
-            configs: RouteConfig;
-        }): RouteConfig & {
-            getRoutingPath(): RouteConfig["path"] extends infer T ? T extends RouteConfig["path"] ? T extends `${infer Start}/{${infer Param}}${infer Rest}` ? `${Start}/:${Param}${Rest extends `${infer Start_1}/{${infer Param_1}}${infer Rest_1}` ? `${Start_1}/:${Param_1}${Rest_1 extends `${infer Start_2}/{${infer Param_2}}${infer Rest_2}` ? `${Start_2}/:${Param_2}${Rest_2 extends `${infer Start_3}/{${infer Param_3}}${infer Rest_3}` ? `${Start_3}/:${Param_3}${Rest_3 extends `${infer Start_4}/{${infer Param_4}}${infer Rest_4}` ? `${Start_4}/:${Param_4}${Rest_4 extends `${infer Start_5}/{${infer Param_5}}${infer Rest_5}` ? `${Start_5}/:${Param_5}${Rest_5 extends `${infer Start_6}/{${infer Param_6}}${infer Rest_6}` ? `${Start_6}/:${Param_6}${Rest_6 extends `${infer Start_7}/{${infer Param_7}}${infer Rest_7}` ? `${Start_7}/:${Param_7}${Rest_7 extends `${infer Start_8}/{${infer Param_8}}${infer Rest_8}` ? `${Start_8}/:${Param_8}${Rest_8 extends `${infer Start_9}/{${infer Param_9}}${infer Rest_9}` ? `${Start_9}/:${Param_9}${Rest_9 extends `${infer Start_10}/{${infer Param_10}}${infer Rest_10}` ? `${Start_10}/:${Param_10}${any}` : Rest_9}` : Rest_8}` : Rest_7}` : Rest_6}` : Rest_5}` : Rest_4}` : Rest_3}` : Rest_2}` : Rest_1}` : Rest}` : T : never : never;
-        };
-        getJSXRouteConfigs<RouteConfig extends import("@venizia/ignis-kernel").IAuthRouteConfig>(opts: {
-            configs: RouteConfig;
-        }): RouteConfig & {
-            getRoutingPath(): RouteConfig["path"] extends infer T ? T extends RouteConfig["path"] ? T extends `${infer Start}/{${infer Param}}${infer Rest}` ? `${Start}/:${Param}${Rest extends `${infer Start_1}/{${infer Param_1}}${infer Rest_1}` ? `${Start_1}/:${Param_1}${Rest_1 extends `${infer Start_2}/{${infer Param_2}}${infer Rest_2}` ? `${Start_2}/:${Param_2}${Rest_2 extends `${infer Start_3}/{${infer Param_3}}${infer Rest_3}` ? `${Start_3}/:${Param_3}${Rest_3 extends `${infer Start_4}/{${infer Param_4}}${infer Rest_4}` ? `${Start_4}/:${Param_4}${Rest_4 extends `${infer Start_5}/{${infer Param_5}}${infer Rest_5}` ? `${Start_5}/:${Param_5}${Rest_5 extends `${infer Start_6}/{${infer Param_6}}${infer Rest_6}` ? `${Start_6}/:${Param_6}${Rest_6 extends `${infer Start_7}/{${infer Param_7}}${infer Rest_7}` ? `${Start_7}/:${Param_7}${Rest_7 extends `${infer Start_8}/{${infer Param_8}}${infer Rest_8}` ? `${Start_8}/:${Param_8}${Rest_8 extends `${infer Start_9}/{${infer Param_9}}${infer Rest_9}` ? `${Start_9}/:${Param_9}${Rest_9 extends `${infer Start_10}/{${infer Param_10}}${infer Rest_10}` ? `${Start_10}/:${Param_10}${any}` : Rest_9}` : Rest_8}` : Rest_7}` : Rest_6}` : Rest_5}` : Rest_4}` : Rest_3}` : Rest_2}` : Rest_1}` : Rest}` : T : never : never;
+            getRouteConfigs<RouteConfig extends import("@venizia/ignis-kernel").IAuthRouteConfig>(opts: {
+                configs: RouteConfig;
+            }): RouteConfig & {
+                getRoutingPath(): RouteConfig["path"] extends infer T ? T extends RouteConfig["path"] ? T extends `${infer Start}/{${infer Param}}${infer Rest}` ? `${Start}/:${Param}${Rest extends `${infer Start_1}/{${infer Param_1}}${infer Rest_1}` ? `${Start_1}/:${Param_1}${Rest_1 extends `${infer Start_2}/{${infer Param_2}}${infer Rest_2}` ? `${Start_2}/:${Param_2}${Rest_2 extends `${infer Start_3}/{${infer Param_3}}${infer Rest_3}` ? `${Start_3}/:${Param_3}${Rest_3 extends `${infer Start_4}/{${infer Param_4}}${infer Rest_4}` ? `${Start_4}/:${Param_4}${Rest_4 extends `${infer Start_5}/{${infer Param_5}}${infer Rest_5}` ? `${Start_5}/:${Param_5}${Rest_5 extends `${infer Start_6}/{${infer Param_6}}${infer Rest_6}` ? `${Start_6}/:${Param_6}${Rest_6 extends `${infer Start_7}/{${infer Param_7}}${infer Rest_7}` ? `${Start_7}/:${Param_7}${Rest_7 extends `${infer Start_8}/{${infer Param_8}}${infer Rest_8}` ? `${Start_8}/:${Param_8}${Rest_8 extends `${infer Start_9}/{${infer Param_9}}${infer Rest_9}` ? `${Start_9}/:${Param_9}${Rest_9 extends `${infer Start_10}/{${infer Param_10}}${infer Rest_10}` ? `${Start_10}/:${Param_10}${any}` : Rest_9}` : Rest_8}` : Rest_7}` : Rest_6}` : Rest_5}` : Rest_4}` : Rest_3}` : Rest_2}` : Rest_1}` : Rest}` : T : never : never;
+            };
+            getJSXRouteConfigs<RouteConfig extends import("@venizia/ignis-kernel").IAuthRouteConfig>(opts: {
+                configs: RouteConfig;
+            }): RouteConfig & {
+                getRoutingPath(): RouteConfig["path"] extends infer T ? T extends RouteConfig["path"] ? T extends `${infer Start}/{${infer Param}}${infer Rest}` ? `${Start}/:${Param}${Rest extends `${infer Start_1}/{${infer Param_1}}${infer Rest_1}` ? `${Start_1}/:${Param_1}${Rest_1 extends `${infer Start_2}/{${infer Param_2}}${infer Rest_2}` ? `${Start_2}/:${Param_2}${Rest_2 extends `${infer Start_3}/{${infer Param_3}}${infer Rest_3}` ? `${Start_3}/:${Param_3}${Rest_3 extends `${infer Start_4}/{${infer Param_4}}${infer Rest_4}` ? `${Start_4}/:${Param_4}${Rest_4 extends `${infer Start_5}/{${infer Param_5}}${infer Rest_5}` ? `${Start_5}/:${Param_5}${Rest_5 extends `${infer Start_6}/{${infer Param_6}}${infer Rest_6}` ? `${Start_6}/:${Param_6}${Rest_6 extends `${infer Start_7}/{${infer Param_7}}${infer Rest_7}` ? `${Start_7}/:${Param_7}${Rest_7 extends `${infer Start_8}/{${infer Param_8}}${infer Rest_8}` ? `${Start_8}/:${Param_8}${Rest_8 extends `${infer Start_9}/{${infer Param_9}}${infer Rest_9}` ? `${Start_9}/:${Param_9}${Rest_9 extends `${infer Start_10}/{${infer Param_10}}${infer Rest_10}` ? `${Start_10}/:${Param_10}${any}` : Rest_9}` : Rest_8}` : Rest_7}` : Rest_6}` : Rest_5}` : Rest_4}` : Rest_3}` : Rest_2}` : Rest_1}` : Rest}` : T : never : never;
+            };
+            scope: string;
+            identifier: string;
+            get logger(): import("@venizia/ignis-helpers").ILogger;
+            set logger(value: import("@venizia/ignis-helpers").ILogger);
+            getIdentifier(): string;
+            getLogger(): import("@venizia/ignis-helpers").ILogger;
         };
-        scope: string;
-        identifier: string;
-        get logger(): import("@venizia/ignis-helpers").ILogger;
-        set logger(value: import("@venizia/ignis-helpers").ILogger);
-        getIdentifier(): string;
-        getLogger(): import("@venizia/ignis-helpers").ILogger;
     };
-};
+}
 //# sourceMappingURL=factory.d.ts.map

package/dist/esm/components/auth/authenticate/controllers/factory.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"factory.d.ts","sourceRoot":"","sources":["../../../../../../src/components/auth/authenticate/controllers/factory.ts"],"names":[],"mappings":"AAMA,OAAO,EAAE,CAAC,EAAE,MAAM,mBAAmB,CAAC;AAEtC,OAAO,EAAQ,KAAK,cAAc,EAAE,MAAM,+BAA+B,CAAC;AAM1E,OAAO,EAEL,KAAK,YAAY,EACjB,KAAK,yBAAyB,EAC/B,MAAM,uBAAuB,CAAC;AAE/B,eAAO,MAAM,qBAAqB;;;;;;;;;;iBAYhC,CAAC;AAEH,eAAO,MAAM,oBAAoB,GAAI,MAAM,yBAAyB;sBAOvC,YAAY;iBAF5B,YAAY;mBAmBD,cAAc,CAAC,IAAI,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAbpC,CAAP;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAwMA,CAAC"}
+{"version":3,"file":"factory.d.ts","sourceRoot":"","sources":["../../../../../../src/components/auth/authenticate/controllers/factory.ts"],"names":[],"mappings":"AAMA,OAAO,EAAE,CAAC,EAAE,MAAM,mBAAmB,CAAC;AAEtC,OAAO,EAAQ,KAAK,cAAc,EAAE,MAAM,+BAA+B,CAAC;AAM1E,OAAO,EAEL,KAAK,YAAY,EACjB,KAAK,yBAAyB,EAC/B,MAAM,uBAAuB,CAAC;AAE/B,eAAO,MAAM,qBAAqB;;;;;;;;;;iBAYhC,CAAC;AAEH,uHAAuH;AACvH,qBAAa,qBAAqB;IAChC,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,yBAAyB;0BAYhB,YAAY;qBAF5B,YAAY;uBAmBD,cAAc,CAAC,IAAI,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;qBApBhB,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAkN9B"}