@versori/run 0.2.29 → 0.3.0-beta.3

package/script/src/services/credentials/generated/versori/credential/oauth2/v1/token_service_pb.d.ts

@@ -0,0 +1,471 @@
+import type { GenFile, GenMessage, GenService } from "@bufbuild/protobuf/codegenv2";
+import type { Duration, Timestamp } from "@bufbuild/protobuf/wkt";
+import type { Token } from "./token_pb.js";
+import type { Credential, CredentialDataOAuth2Client_AuthStyle } from "../../v1alpha1/credential_pb.js";
+import type { Message } from "@bufbuild/protobuf";
+/**
+ * Describes the file versori/credential/oauth2/v1/token_service.proto.
+ */
+export declare const file_versori_credential_oauth2_v1_token_service: GenFile;
+/**
+ * @generated from message versori.credential.oauth2.v1.GetAccessTokenRequest
+ */
+export type GetAccessTokenRequest = Message<"versori.credential.oauth2.v1.GetAccessTokenRequest"> & {
+    /**
+     * @generated from field: string credential_id = 1;
+     */
+    credentialId: string;
+};
+/**
+ * Describes the message versori.credential.oauth2.v1.GetAccessTokenRequest.
+ * Use `create(GetAccessTokenRequestSchema)` to create a new message.
+ */
+export declare const GetAccessTokenRequestSchema: GenMessage<GetAccessTokenRequest>;
+/**
+ * @generated from message versori.credential.oauth2.v1.GetAccessTokenResponse
+ */
+export type GetAccessTokenResponse = Message<"versori.credential.oauth2.v1.GetAccessTokenResponse"> & {
+    /**
+     * @generated from field: versori.credential.oauth2.v1.Token token = 1;
+     */
+    token?: Token;
+};
+/**
+ * Describes the message versori.credential.oauth2.v1.GetAccessTokenResponse.
+ * Use `create(GetAccessTokenResponseSchema)` to create a new message.
+ */
+export declare const GetAccessTokenResponseSchema: GenMessage<GetAccessTokenResponse>;
+/**
+ * @generated from message versori.credential.oauth2.v1.HandleAuthorizationCallbackRequest
+ */
+export type HandleAuthorizationCallbackRequest = Message<"versori.credential.oauth2.v1.HandleAuthorizationCallbackRequest"> & {
+    /**
+     * ClientCredentialID is the ID of a Credential of type OAuth2Client, so that the server can exchange the
+     * authorization code for an access token using the correct client ID/client secret.
+     * +required
+     *
+     * @generated from field: string client_credential_id = 1;
+     */
+    clientCredentialId: string;
+    /**
+     * RefreshCredentialID is the Credential of type OAuth2Token for where the resultant refresh_token should be stored.
+     * If this field is not provided, a new credential will be created.
+     *
+     * @generated from field: string refresh_credential_id = 2;
+     */
+    refreshCredentialId: string;
+    /**
+     * OrganisationID is the owner of this Authorization Code flow. If RefreshCredentialId is defined, the referenced
+     * Credential must be owned by this organisation else an error will be returned. Otherwise, the newly-created
+     * credential will be owned by this organisation.
+     *
+     * @generated from field: string organisation_id = 3;
+     */
+    organisationId: string;
+    /**
+     * Code is the authorization code provided by the OAuth 2.0 Authorization Server which can be exchanged for an
+     * access_token.
+     *
+     * @generated from field: string code = 4;
+     */
+    code: string;
+    /**
+     * Name is the name of the refresh credential to be saved. If RefreshCredentialId is defined, it will be updated with
+     * this name.
+     *
+     * @generated from field: string name = 5;
+     */
+    name: string;
+    /**
+     * RedirectURI if set, must be sent to the /token endpoint. This is to comply with the OIDC Core 1.0 spec, documented
+     * here: https://openid.net/specs/openid-connect-core-1_0.html#TokenRequestValidation.
+     *
+     * It's not required for Authorization Servers to error if only one redirect_uri is configured for the Client, however
+     * since this will always be set on the /authorize endpoint (due to Switchboard's implementation), then in reality it
+     * should always be included here.
+     *
+     * @generated from field: string redirect_uri = 6;
+     */
+    redirectUri: string;
+    /**
+     * AdditionalParams is a URL-encoded query string containing additional parameters which were sent in the
+     * Authorization Response as defined by
+     * [RFC-6749 §4.1.2](https://datatracker.ietf.org/doc/html/rfc6749#section-4.1.2).
+     *
+     * Only parameters which are defined in the owning OAuth 2.0 Client will be persisted, unrecognized parameters will be
+     * ignored.
+     *
+     * Once processed, the resultant string is persisted in the CredentialDataOAuth2Token in the `additional_params`
+     * field.
+     *
+     * @generated from field: string additional_params = 7;
+     */
+    additionalParams: string;
+    /**
+     * @generated from field: bool skip_storage = 8;
+     */
+    skipStorage: boolean;
+    /**
+     * @generated from field: bool return_unredacted = 9;
+     */
+    returnUnredacted: boolean;
+};
+/**
+ * Describes the message versori.credential.oauth2.v1.HandleAuthorizationCallbackRequest.
+ * Use `create(HandleAuthorizationCallbackRequestSchema)` to create a new message.
+ */
+export declare const HandleAuthorizationCallbackRequestSchema: GenMessage<HandleAuthorizationCallbackRequest>;
+/**
+ * @generated from message versori.credential.oauth2.v1.HandleAuthorizationCallbackResponse
+ */
+export type HandleAuthorizationCallbackResponse = Message<"versori.credential.oauth2.v1.HandleAuthorizationCallbackResponse"> & {
+    /**
+     * TokenCredential is the Credential created by exchanging the authorization code for a token. It will be of type
+     * OAuth2Token
+     *
+     * @generated from field: versori.credential.v1alpha1.Credential token_credential = 1;
+     */
+    tokenCredential?: Credential;
+    /**
+     * ClientCredential is the Credential of type OAuth2Client which was used for exchanging the authorization code for an
+     * access_token (and optionally a refresh_token). This is useful in the response so that clients can query the
+     * userinfo endpoint immediately after authenticating a user.
+     *
+     * @generated from field: versori.credential.v1alpha1.Credential client_credential = 2;
+     */
+    clientCredential?: Credential;
+    /**
+     * Token is the access_token obtained by exchanging the authorization code.
+     *
+     * @generated from field: versori.credential.oauth2.v1.Token token = 3;
+     */
+    token?: Token;
+};
+/**
+ * Describes the message versori.credential.oauth2.v1.HandleAuthorizationCallbackResponse.
+ * Use `create(HandleAuthorizationCallbackResponseSchema)` to create a new message.
+ */
+export declare const HandleAuthorizationCallbackResponseSchema: GenMessage<HandleAuthorizationCallbackResponse>;
+/**
+ * @generated from message versori.credential.oauth2.v1.CheckExpiryRequest
+ */
+export type CheckExpiryRequest = Message<"versori.credential.oauth2.v1.CheckExpiryRequest"> & {
+    /**
+     * CredentialID is the OAuth2Token to check for expiry
+     *
+     * @generated from field: string credential_id = 1;
+     */
+    credentialId: string;
+    /**
+     * ExpiryBuffer can be used to treat a token as expired if it expires within the provided Duration. If not defined
+     * then the fallback value is configurable by the service deployment, which defaults to 5 minutes. Set to a negative
+     * duration to disable the buffer.
+     *
+     * @generated from field: google.protobuf.Duration expiry_buffer = 2;
+     */
+    expiryBuffer?: Duration;
+    /**
+     * NoRefresh disables automatic refreshing of expired tokens, defaults to false.
+     *
+     * @generated from field: bool no_refresh = 3;
+     */
+    noRefresh: boolean;
+};
+/**
+ * Describes the message versori.credential.oauth2.v1.CheckExpiryRequest.
+ * Use `create(CheckExpiryRequestSchema)` to create a new message.
+ */
+export declare const CheckExpiryRequestSchema: GenMessage<CheckExpiryRequest>;
+/**
+ * @generated from message versori.credential.oauth2.v1.CheckExpiryResponse
+ */
+export type CheckExpiryResponse = Message<"versori.credential.oauth2.v1.CheckExpiryResponse"> & {
+    /**
+     * ExpiresAt is the expiry of the current token after this request has executed,
+     *
+     * @generated from field: google.protobuf.Timestamp expires_at = 1;
+     */
+    expiresAt?: Timestamp;
+    /**
+     * DidRefresh indicates whether the CheckExpiry request triggered a new token to be issued. Will only be false if the
+     * token hadn't expired or if CheckExpiryRequest.NoRefresh was set, a failure in an attempt to refresh will result in
+     * an error response.
+     *
+     * @generated from field: bool did_refresh = 2;
+     */
+    didRefresh: boolean;
+};
+/**
+ * Describes the message versori.credential.oauth2.v1.CheckExpiryResponse.
+ * Use `create(CheckExpiryResponseSchema)` to create a new message.
+ */
+export declare const CheckExpiryResponseSchema: GenMessage<CheckExpiryResponse>;
+/**
+ * @generated from message versori.credential.oauth2.v1.CreateClientCredentialTokenRequest
+ */
+export type CreateClientCredentialTokenRequest = Message<"versori.credential.oauth2.v1.CreateClientCredentialTokenRequest"> & {
+    /**
+     * OrganisationID is the organisation which owns the Credential
+     *
+     * @generated from field: string organisation_id = 1;
+     */
+    organisationId: string;
+    /**
+     * Name is a human-friendly name for the Credential.
+     *
+     * @generated from field: string name = 2;
+     */
+    name: string;
+    /**
+     * ClientConfig contains the configuration for the OAuth2 client.
+     *
+     * @generated from field: versori.credential.oauth2.v1.CreateClientCredentialTokenRequest.ClientConfig client_config = 3;
+     */
+    clientConfig?: CreateClientCredentialTokenRequest_ClientConfig;
+    /**
+     * IssueToken indicates whether the created OAuth2Token should be issued immediately. If this is false, the
+     * OAuth2Token will still be created but will be marked as expired.
+     *
+     * @generated from field: bool issue_token = 5;
+     */
+    issueToken: boolean;
+};
+/**
+ * Describes the message versori.credential.oauth2.v1.CreateClientCredentialTokenRequest.
+ * Use `create(CreateClientCredentialTokenRequestSchema)` to create a new message.
+ */
+export declare const CreateClientCredentialTokenRequestSchema: GenMessage<CreateClientCredentialTokenRequest>;
+/**
+ * @generated from message versori.credential.oauth2.v1.CreateClientCredentialTokenRequest.ClientConfig
+ */
+export type CreateClientCredentialTokenRequest_ClientConfig = Message<"versori.credential.oauth2.v1.CreateClientCredentialTokenRequest.ClientConfig"> & {
+    /**
+     * ClientID is the identifier for the OAuth2 client.
+     *
+     * @generated from field: string client_id = 1;
+     */
+    clientId: string;
+    /**
+     * ClientSecret is the credential for the OAuth2 client.
+     *
+     * @generated from field: string client_secret = 2;
+     */
+    clientSecret: string;
+    /**
+     * TokenEndpoint is where requests should be made to issue an access token in exchange for a refresh token or
+     * authorization code.
+     * +required
+     *
+     * @generated from field: string token_endpoint = 3;
+     */
+    tokenEndpoint: string;
+    /**
+     * Scopes is a space-separated list of scopes to use when requesting an access token.
+     *
+     * @generated from field: string scopes = 4;
+     */
+    scopes: string;
+    /**
+     * AdditionalParams is a URL-encoded query string which will be appended to the token endpoint URL when issuing a
+     * token. Only applies to tokens issued by a client_credentials flow.
+     *
+     * @generated from field: string additional_params = 5;
+     */
+    additionalParams: string;
+    /**
+     * Username is the username for the user to authenticate as when using the password grant type.
+     *
+     * Deprecated: Use CreateResourceOwnerCredential to create `password` grant token instead.
+     *
+     * @generated from field: string username = 6;
+     */
+    username: string;
+    /**
+     * Password is the password for the user to authenticate as when using the password grant type.
+     *
+     * Deprecated: Use CreateResourceOwnerCredential to create `password` grant token instead.
+     *
+     * @generated from field: string password = 7;
+     */
+    password: string;
+    /**
+     * MtlsCredentialId is an optional field that points a CredentialDataCertificate credential
+     * If set the certificates from that credential will be used when refreshing the credential
+     *
+     * @generated from field: string mtls_credential_id = 8;
+     */
+    mtlsCredentialId: string;
+    /**
+     * AuthStyle denotes how the client ID and secret should be sent to the token URL. The default is to auto-detect.
+     *
+     * @generated from field: versori.credential.v1alpha1.CredentialDataOAuth2Client.AuthStyle auth_style = 16;
+     */
+    authStyle: CredentialDataOAuth2Client_AuthStyle;
+};
+/**
+ * Describes the message versori.credential.oauth2.v1.CreateClientCredentialTokenRequest.ClientConfig.
+ * Use `create(CreateClientCredentialTokenRequest_ClientConfigSchema)` to create a new message.
+ */
+export declare const CreateClientCredentialTokenRequest_ClientConfigSchema: GenMessage<CreateClientCredentialTokenRequest_ClientConfig>;
+/**
+ * @generated from message versori.credential.oauth2.v1.CreateClientCredentialTokenResponse
+ */
+export type CreateClientCredentialTokenResponse = Message<"versori.credential.oauth2.v1.CreateClientCredentialTokenResponse"> & {
+    /**
+     * ClientCredential is the Credential of type OAuth2Client which was created to own the client_credentials flow.
+     *
+     * @generated from field: versori.credential.v1alpha1.Credential client_credential = 1;
+     */
+    clientCredential?: Credential;
+    /**
+     * TokenCredential is the Credential created by performing a client_credentials flow. It will be of type OAuth2Token.
+     *
+     * @generated from field: versori.credential.v1alpha1.Credential token_credential = 2;
+     */
+    tokenCredential?: Credential;
+};
+/**
+ * Describes the message versori.credential.oauth2.v1.CreateClientCredentialTokenResponse.
+ * Use `create(CreateClientCredentialTokenResponseSchema)` to create a new message.
+ */
+export declare const CreateClientCredentialTokenResponseSchema: GenMessage<CreateClientCredentialTokenResponse>;
+/**
+ * @generated from message versori.credential.oauth2.v1.CreateResourceOwnerCredentialRequest
+ */
+export type CreateResourceOwnerCredentialRequest = Message<"versori.credential.oauth2.v1.CreateResourceOwnerCredentialRequest"> & {
+    /**
+     * OrganisationID is the organisation which owns the Credential
+     *
+     * @generated from field: string organisation_id = 1;
+     */
+    organisationId: string;
+    /**
+     * Name is a human-friendly name for the Credential.
+     *
+     * @generated from field: string name = 2;
+     */
+    name: string;
+    /**
+     * IssueToken indicates whether the created OAuth2Token should be issued immediately. If this is false, the
+     * OAuth2Token will still be created but will be marked as expired.
+     *
+     * @generated from field: bool issue_token = 3;
+     */
+    issueToken: boolean;
+    /**
+     * ClientCredentialID is the ID of a Credential of type OAuth2Client, so that the server can perform perform
+     * the `password` flow using the correct client ID/client secret.
+     * +required
+     *
+     * @generated from field: string client_credential_id = 4;
+     */
+    clientCredentialId: string;
+    /**
+     * Username is the username for the user to authenticate as.
+     *
+     * @generated from field: string username = 5;
+     */
+    username: string;
+    /**
+     * Password is the password for the user to authenticate as.
+     *
+     * @generated from field: string password = 6;
+     */
+    password: string;
+    /**
+     * Scopes contains a list of scopes to request when exchanging the user credentials for a token.
+     *
+     * @generated from field: repeated string scopes = 7;
+     */
+    scopes: string[];
+};
+/**
+ * Describes the message versori.credential.oauth2.v1.CreateResourceOwnerCredentialRequest.
+ * Use `create(CreateResourceOwnerCredentialRequestSchema)` to create a new message.
+ */
+export declare const CreateResourceOwnerCredentialRequestSchema: GenMessage<CreateResourceOwnerCredentialRequest>;
+/**
+ * @generated from message versori.credential.oauth2.v1.CreateResourceOwnerCredentialResponse
+ */
+export type CreateResourceOwnerCredentialResponse = Message<"versori.credential.oauth2.v1.CreateResourceOwnerCredentialResponse"> & {
+    /**
+     * TokenCredential is the Credential created by performing a password flow. It will be of type OAuth2ResourceOwner.
+     *
+     * @generated from field: versori.credential.v1alpha1.Credential token_credential = 2;
+     */
+    tokenCredential?: Credential;
+};
+/**
+ * Describes the message versori.credential.oauth2.v1.CreateResourceOwnerCredentialResponse.
+ * Use `create(CreateResourceOwnerCredentialResponseSchema)` to create a new message.
+ */
+export declare const CreateResourceOwnerCredentialResponseSchema: GenMessage<CreateResourceOwnerCredentialResponse>;
+/**
+ * OAuth2TokenService wraps the CredentialService and provides capability specifically around OAuth 2.0.
+ *
+ * This service should never be exposed to the outside world and is only for internal use of configuring new connections
+ * between Apps and organisations, and the execution of boards on behalf of organisations.
+ *
+ * @generated from service versori.credential.oauth2.v1.OAuth2TokenService
+ */
+export declare const OAuth2TokenService: GenService<{
+    /**
+     * GetAccessToken uses an existing Credential to obtain an OAuth2 access token. The credential must be of
+     * type OAuth2Refresh else an error will be returned. Other credential types may be supported in the future.
+     *
+     * @generated from rpc versori.credential.oauth2.v1.OAuth2TokenService.GetAccessToken
+     */
+    getAccessToken: {
+        methodKind: "unary";
+        input: typeof GetAccessTokenRequestSchema;
+        output: typeof GetAccessTokenResponseSchema;
+    };
+    /**
+     * HandleAuthorizationCallback handles the authorization response in an Authorization Code flow, as defined
+     * by RFC-6749 [4.1.2](https://datatracker.ietf.org/doc/html/rfc6749#section-4.1.2). The downstream system is
+     * responsible for handling the actual HTTP redirect, which will validate the state parameter and any other
+     * requirements, and then use this endpoint to exchange the Authorization Code for a token and persist the
+     * refresh_token in a credential.
+     *
+     * @generated from rpc versori.credential.oauth2.v1.OAuth2TokenService.HandleAuthorizationCallback
+     */
+    handleAuthorizationCallback: {
+        methodKind: "unary";
+        input: typeof HandleAuthorizationCallbackRequestSchema;
+        output: typeof HandleAuthorizationCallbackResponseSchema;
+    };
+    /**
+     * CheckExpiry returns the expiry of an active OAuth2Token credential, potentially refreshing it if not disabled and
+     * if the token is close to expiry. Returns an error if the credential is not of type OAuth2Token, if there is no
+     * refresh token, or any other error occurs while attempting a refresh request.
+     *
+     * @generated from rpc versori.credential.oauth2.v1.OAuth2TokenService.CheckExpiry
+     */
+    checkExpiry: {
+        methodKind: "unary";
+        input: typeof CheckExpiryRequestSchema;
+        output: typeof CheckExpiryResponseSchema;
+    };
+    /**
+     * CreateClientCredentialToken creates both an OAuth2Client credential and an OAuth2Token credential, where the
+     * OAuth2Token credential is issued by the OAuth2Client credential.
+     *
+     * @generated from rpc versori.credential.oauth2.v1.OAuth2TokenService.CreateClientCredentialToken
+     */
+    createClientCredentialToken: {
+        methodKind: "unary";
+        input: typeof CreateClientCredentialTokenRequestSchema;
+        output: typeof CreateClientCredentialTokenResponseSchema;
+    };
+    /**
+     * CreateResourceOwnerCredential creates an credential of type OAuth2ResourceOwner following the password grant type.
+     *
+     * @generated from rpc versori.credential.oauth2.v1.OAuth2TokenService.CreateResourceOwnerCredential
+     */
+    createResourceOwnerCredential: {
+        methodKind: "unary";
+        input: typeof CreateResourceOwnerCredentialRequestSchema;
+        output: typeof CreateResourceOwnerCredentialResponseSchema;
+    };
+}>;
+//# sourceMappingURL=token_service_pb.d.ts.map

package/script/src/services/credentials/generated/versori/credential/oauth2/v1/token_service_pb.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"token_service_pb.d.ts","sourceRoot":"","sources":["../../../../../../../../../src/src/services/credentials/generated/versori/credential/oauth2/v1/token_service_pb.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,8BAA8B,CAAC;AAEpF,OAAO,KAAK,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,wBAAwB,CAAC;AAElE,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,eAAe,CAAC;AAE3C,OAAO,KAAK,EAAE,UAAU,EAAE,oCAAoC,EAAE,MAAM,iCAAiC,CAAC;AAExG,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,oBAAoB,CAAC;AAElD;;GAEG;AACH,eAAO,MAAM,+CAA+C,EAAE,OAC+zH,CAAC;AAE93H;;GAEG;AACH,MAAM,MAAM,qBAAqB,GAAG,OAAO,CAAC,oDAAoD,CAAC,GAAG;IAClG;;OAEG;IACH,YAAY,EAAE,MAAM,CAAC;CACtB,CAAC;AAEF;;;GAGG;AACH,eAAO,MAAM,2BAA2B,EAAE,UAAU,CAAC,qBAAqB,CACT,CAAC;AAElE;;GAEG;AACH,MAAM,MAAM,sBAAsB,GAAG,OAAO,CAAC,qDAAqD,CAAC,GAAG;IACpG;;OAEG;IACH,KAAK,CAAC,EAAE,KAAK,CAAC;CACf,CAAC;AAEF;;;GAGG;AACH,eAAO,MAAM,4BAA4B,EAAE,UAAU,CAAC,sBAAsB,CACX,CAAC;AAElE;;GAEG;AACH,MAAM,MAAM,kCAAkC,GAAG,OAAO,CAAC,iEAAiE,CAAC,GAAG;IAC5H;;;;;;OAMG;IACH,kBAAkB,EAAE,MAAM,CAAC;IAE3B;;;;;OAKG;IACH,mBAAmB,EAAE,MAAM,CAAC;IAE5B;;;;;;OAMG;IACH,cAAc,EAAE,MAAM,CAAC;IAEvB;;;;;OAKG;IACH,IAAI,EAAE,MAAM,CAAC;IAEb;;;;;OAKG;IACH,IAAI,EAAE,MAAM,CAAC;IAEb;;;;;;;;;OASG;IACH,WAAW,EAAE,MAAM,CAAC;IAEpB;;;;;;;;;;;;OAYG;IACH,gBAAgB,EAAE,MAAM,CAAC;IAEzB;;OAEG;IACH,WAAW,EAAE,OAAO,CAAC;IAErB;;OAEG;IACH,gBAAgB,EAAE,OAAO,CAAC;CAC3B,CAAC;AAEF;;;GAGG;AACH,eAAO,MAAM,wCAAwC,EAAE,UAAU,CAAC,kCAAkC,CACnC,CAAC;AAElE;;GAEG;AACH,MAAM,MAAM,mCAAmC,GAAG,OAAO,CAAC,kEAAkE,CAAC,GAAG;IAC9H;;;;;OAKG;IACH,eAAe,CAAC,EAAE,UAAU,CAAC;IAE7B;;;;;;OAMG;IACH,gBAAgB,CAAC,EAAE,UAAU,CAAC;IAE9B;;;;OAIG;IACH,KAAK,CAAC,EAAE,KAAK,CAAC;CACf,CAAC;AAEF;;;GAGG;AACH,eAAO,MAAM,yCAAyC,EAAE,UAAU,CAAC,mCAAmC,CACrC,CAAC;AAElE;;GAEG;AACH,MAAM,MAAM,kBAAkB,GAAG,OAAO,CAAC,iDAAiD,CAAC,GAAG;IAC5F;;;;OAIG;IACH,YAAY,EAAE,MAAM,CAAC;IAErB;;;;;;OAMG;IACH,YAAY,CAAC,EAAE,QAAQ,CAAC;IAExB;;;;OAIG;IACH,SAAS,EAAE,OAAO,CAAC;CACpB,CAAC;AAEF;;;GAGG;AACH,eAAO,MAAM,wBAAwB,EAAE,UAAU,CAAC,kBAAkB,CACH,CAAC;AAElE;;GAEG;AACH,MAAM,MAAM,mBAAmB,GAAG,OAAO,CAAC,kDAAkD,CAAC,GAAG;IAC9F;;;;OAIG;IACH,SAAS,CAAC,EAAE,SAAS,CAAC;IAEtB;;;;;;OAMG;IACH,UAAU,EAAE,OAAO,CAAC;CACrB,CAAC;AAEF;;;GAGG;AACH,eAAO,MAAM,yBAAyB,EAAE,UAAU,CAAC,mBAAmB,CACL,CAAC;AAElE;;GAEG;AACH,MAAM,MAAM,kCAAkC,GAAG,OAAO,CAAC,iEAAiE,CAAC,GAAG;IAC5H;;;;OAIG;IACH,cAAc,EAAE,MAAM,CAAC;IAEvB;;;;OAIG;IACH,IAAI,EAAE,MAAM,CAAC;IAEb;;;;OAIG;IACH,YAAY,CAAC,EAAE,+CAA+C,CAAC;IAE/D;;;;;OAKG;IACH,UAAU,EAAE,OAAO,CAAC;CACrB,CAAC;AAEF;;;GAGG;AACH,eAAO,MAAM,wCAAwC,EAAE,UAAU,CAAC,kCAAkC,CACnC,CAAC;AAElE;;GAEG;AACH,MAAM,MAAM,+CAA+C,GAAG,OAAO,CAAC,8EAA8E,CAAC,GAAG;IACtJ;;;;OAIG;IACH,QAAQ,EAAE,MAAM,CAAC;IAEjB;;;;OAIG;IACH,YAAY,EAAE,MAAM,CAAC;IAErB;;;;;;OAMG;IACH,aAAa,EAAE,MAAM,CAAC;IAEtB;;;;OAIG;IACH,MAAM,EAAE,MAAM,CAAC;IAEf;;;;;OAKG;IACH,gBAAgB,EAAE,MAAM,CAAC;IAEzB;;;;;;OAMG;IACH,QAAQ,EAAE,MAAM,CAAC;IAEjB;;;;;;OAMG;IACH,QAAQ,EAAE,MAAM,CAAC;IAEjB;;;;;OAKG;IACH,gBAAgB,EAAE,MAAM,CAAC;IAEzB;;;;OAIG;IACH,SAAS,EAAE,oCAAoC,CAAC;CACjD,CAAC;AAEF;;;GAGG;AACH,eAAO,MAAM,qDAAqD,EAAE,UAAU,CAAC,+CAA+C,CAC1D,CAAC;AAErE;;GAEG;AACH,MAAM,MAAM,mCAAmC,GAAG,OAAO,CAAC,kEAAkE,CAAC,GAAG;IAC9H;;;;OAIG;IACH,gBAAgB,CAAC,EAAE,UAAU,CAAC;IAE9B;;;;OAIG;IACH,eAAe,CAAC,EAAE,UAAU,CAAC;CAC9B,CAAC;AAEF;;;GAGG;AACH,eAAO,MAAM,yCAAyC,EAAE,UAAU,CAAC,mCAAmC,CACrC,CAAC;AAElE;;GAEG;AACH,MAAM,MAAM,oCAAoC,GAAG,OAAO,CAAC,mEAAmE,CAAC,GAAG;IAChI;;;;OAIG;IACH,cAAc,EAAE,MAAM,CAAC;IAEvB;;;;OAIG;IACH,IAAI,EAAE,MAAM,CAAC;IAEb;;;;;OAKG;IACH,UAAU,EAAE,OAAO,CAAC;IAEpB;;;;;;OAMG;IACH,kBAAkB,EAAE,MAAM,CAAC;IAE3B;;;;OAIG;IACH,QAAQ,EAAE,MAAM,CAAC;IAEjB;;;;OAIG;IACH,QAAQ,EAAE,MAAM,CAAC;IAEjB;;;;OAIG;IACH,MAAM,EAAE,MAAM,EAAE,CAAC;CAClB,CAAC;AAEF;;;GAGG;AACH,eAAO,MAAM,0CAA0C,EAAE,UAAU,CAAC,oCAAoC,CACvC,CAAC;AAElE;;GAEG;AACH,MAAM,MAAM,qCAAqC,GAAG,OAAO,CAAC,oEAAoE,CAAC,GAAG;IAClI;;;;OAIG;IACH,eAAe,CAAC,EAAE,UAAU,CAAC;CAC9B,CAAC;AAEF;;;GAGG;AACH,eAAO,MAAM,2CAA2C,EAAE,UAAU,CAAC,qCAAqC,CACzC,CAAC;AAElE;;;;;;;GAOG;AACH,eAAO,MAAM,kBAAkB,EAAE,UAAU,CAAC;IAC1C;;;;;OAKG;IACH,cAAc,EAAE;QACd,UAAU,EAAE,OAAO,CAAC;QACpB,KAAK,EAAE,OAAO,2BAA2B,CAAC;QAC1C,MAAM,EAAE,OAAO,4BAA4B,CAAC;KAC7C,CAAC;IACF;;;;;;;;OAQG;IACH,2BAA2B,EAAE;QAC3B,UAAU,EAAE,OAAO,CAAC;QACpB,KAAK,EAAE,OAAO,wCAAwC,CAAC;QACvD,MAAM,EAAE,OAAO,yCAAyC,CAAC;KAC1D,CAAC;IACF;;;;;;OAMG;IACH,WAAW,EAAE;QACX,UAAU,EAAE,OAAO,CAAC;QACpB,KAAK,EAAE,OAAO,wBAAwB,CAAC;QACvC,MAAM,EAAE,OAAO,yBAAyB,CAAC;KAC1C,CAAC;IACF;;;;;OAKG;IACH,2BAA2B,EAAE;QAC3B,UAAU,EAAE,OAAO,CAAC;QACpB,KAAK,EAAE,OAAO,wCAAwC,CAAC;QACvD,MAAM,EAAE,OAAO,yCAAyC,CAAC;KAC1D,CAAC;IACF;;;;OAIG;IACH,6BAA6B,EAAE;QAC7B,UAAU,EAAE,OAAO,CAAC;QACpB,KAAK,EAAE,OAAO,0CAA0C,CAAC;QACzD,MAAM,EAAE,OAAO,2CAA2C,CAAC;KAC5D,CAAC;CACH,CACgE,CAAC"}

package/script/src/{dsl/http → services/credentials/generated}/versori/credential/oauth2/v1/token_service_pb.js

@@ -1,5 +1,5 @@
 "use strict";
-// @generated by protoc-gen-es v2.6.2
+// @generated by protoc-gen-es v2.7.0 with parameter "target=ts,import_extension=ts"
 // @generated from file versori/credential/oauth2/v1/token_service.proto (package versori.credential.oauth2.v1, syntax proto3)
 /* eslint-disable */
 Object.defineProperty(exports, "__esModule", { value: true });

package/script/src/services/credentials/generated/versori/credential/tokens/v1/token_pb.d.ts

@@ -0,0 +1,38 @@
+import type { GenFile, GenMessage } from "@bufbuild/protobuf/codegenv2";
+import type { Timestamp } from "@bufbuild/protobuf/wkt";
+import type { Message } from "@bufbuild/protobuf";
+/**
+ * Describes the file versori/credential/tokens/v1/token.proto.
+ */
+export declare const file_versori_credential_tokens_v1_token: GenFile;
+/**
+ * Token is a credential which can be use to authenticate to services.
+ *
+ * @generated from message versori.credential.tokens.v1.Token
+ */
+export type Token = Message<"versori.credential.tokens.v1.Token"> & {
+    /**
+     * AccessToken is the literal value to be used to access an external API
+     *
+     * @generated from field: string access_token = 1;
+     */
+    accessToken: string;
+    /**
+     * TokenType is the type of token AccessToken represents. The default is "Bearer". This is empty for non-OAuth2 types.
+     *
+     * @generated from field: string token_type = 2;
+     */
+    tokenType: string;
+    /**
+     * Expiry is the timestamp for which the AccessToken expires.
+     *
+     * @generated from field: google.protobuf.Timestamp expiry = 3;
+     */
+    expiry?: Timestamp;
+};
+/**
+ * Describes the message versori.credential.tokens.v1.Token.
+ * Use `create(TokenSchema)` to create a new message.
+ */
+export declare const TokenSchema: GenMessage<Token>;
+//# sourceMappingURL=token_pb.d.ts.map

package/script/src/services/credentials/generated/versori/credential/tokens/v1/token_pb.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"token_pb.d.ts","sourceRoot":"","sources":["../../../../../../../../../src/src/services/credentials/generated/versori/credential/tokens/v1/token_pb.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,OAAO,EAAE,UAAU,EAAE,MAAM,8BAA8B,CAAC;AAExE,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,wBAAwB,CAAC;AAExD,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,oBAAoB,CAAC;AAElD;;GAEG;AACH,eAAO,MAAM,uCAAuC,EAAE,OAC6hB,CAAC;AAEplB;;;;GAIG;AACH,MAAM,MAAM,KAAK,GAAG,OAAO,CAAC,oCAAoC,CAAC,GAAG;IAClE;;;;OAIG;IACH,WAAW,EAAE,MAAM,CAAC;IAEpB;;;;OAIG;IACH,SAAS,EAAE,MAAM,CAAC;IAElB;;;;OAIG;IACH,MAAM,CAAC,EAAE,SAAS,CAAC;CACpB,CAAC;AAEF;;;GAGG;AACH,eAAO,MAAM,WAAW,EAAE,UAAU,CAAC,KAAK,CACe,CAAC"}

package/script/src/{dsl/http → services/credentials/generated}/versori/credential/tokens/v1/token_pb.js

@@ -1,5 +1,5 @@
 "use strict";
-// @generated by protoc-gen-es v2.6.2
+// @generated by protoc-gen-es v2.7.0 with parameter "target=ts,import_extension=ts"
 // @generated from file versori/credential/tokens/v1/token.proto (package versori.credential.tokens.v1, syntax proto3)
 /* eslint-disable */
 Object.defineProperty(exports, "__esModule", { value: true });

package/script/src/services/credentials/generated/versori/credential/tokens/v1/token_service_pb.d.ts

@@ -0,0 +1,128 @@
+import type { GenFile, GenMessage, GenService } from "@bufbuild/protobuf/codegenv2";
+import type { Duration, Timestamp } from "@bufbuild/protobuf/wkt";
+import type { Token } from "./token_pb.js";
+import type { Message } from "@bufbuild/protobuf";
+/**
+ * Describes the file versori/credential/tokens/v1/token_service.proto.
+ */
+export declare const file_versori_credential_tokens_v1_token_service: GenFile;
+/**
+ * @generated from message versori.credential.tokens.v1.GetTokenRequest
+ */
+export type GetTokenRequest = Message<"versori.credential.tokens.v1.GetTokenRequest"> & {
+    /**
+     * @generated from field: string credential_id = 1;
+     */
+    credentialId: string;
+    /**
+     * @generated from field: bool force_refresh = 2;
+     */
+    forceRefresh: boolean;
+};
+/**
+ * Describes the message versori.credential.tokens.v1.GetTokenRequest.
+ * Use `create(GetTokenRequestSchema)` to create a new message.
+ */
+export declare const GetTokenRequestSchema: GenMessage<GetTokenRequest>;
+/**
+ * @generated from message versori.credential.tokens.v1.GetTokenResponse
+ */
+export type GetTokenResponse = Message<"versori.credential.tokens.v1.GetTokenResponse"> & {
+    /**
+     * @generated from field: versori.credential.tokens.v1.Token token = 1;
+     */
+    token?: Token;
+};
+/**
+ * Describes the message versori.credential.tokens.v1.GetTokenResponse.
+ * Use `create(GetTokenResponseSchema)` to create a new message.
+ */
+export declare const GetTokenResponseSchema: GenMessage<GetTokenResponse>;
+/**
+ * @generated from message versori.credential.tokens.v1.CheckExpiryRequest
+ */
+export type CheckExpiryRequest = Message<"versori.credential.tokens.v1.CheckExpiryRequest"> & {
+    /**
+     * CredentialID is the credential to check for expiry
+     *
+     * @generated from field: string credential_id = 1;
+     */
+    credentialId: string;
+    /**
+     * ExpiryBuffer can be used to treat a token as expired if it expires within the provided Duration. If not defined
+     * then the fallback value is configurable by the service deployment, which defaults to 5 minutes. Set to a negative
+     * duration to disable the buffer.
+     *
+     * @generated from field: google.protobuf.Duration expiry_buffer = 2;
+     */
+    expiryBuffer?: Duration;
+    /**
+     * NoRefresh disables automatic refreshing of expired tokens, defaults to false.
+     *
+     * @generated from field: bool no_refresh = 3;
+     */
+    noRefresh: boolean;
+};
+/**
+ * Describes the message versori.credential.tokens.v1.CheckExpiryRequest.
+ * Use `create(CheckExpiryRequestSchema)` to create a new message.
+ */
+export declare const CheckExpiryRequestSchema: GenMessage<CheckExpiryRequest>;
+/**
+ * @generated from message versori.credential.tokens.v1.CheckExpiryResponse
+ */
+export type CheckExpiryResponse = Message<"versori.credential.tokens.v1.CheckExpiryResponse"> & {
+    /**
+     * ExpiresAt is the expiry of the current token after this request has executed,
+     *
+     * @generated from field: google.protobuf.Timestamp expires_at = 1;
+     */
+    expiresAt?: Timestamp;
+    /**
+     * DidRefresh indicates whether the CheckExpiry request triggered a new token to be issued. Will only be false if the
+     * token hadn't expired or if CheckExpiryRequest.NoRefresh was set, a failure in an attempt to refresh will result in
+     * an error response.
+     *
+     * @generated from field: bool did_refresh = 2;
+     */
+    didRefresh: boolean;
+};
+/**
+ * Describes the message versori.credential.tokens.v1.CheckExpiryResponse.
+ * Use `create(CheckExpiryResponseSchema)` to create a new message.
+ */
+export declare const CheckExpiryResponseSchema: GenMessage<CheckExpiryResponse>;
+/**
+ * TokenService wraps the CredentialService and provides capability specifically around OAuth 2.0.
+ *
+ * This service should never be exposed to the outside world and is only for internal use of configuring new connections
+ * between Apps and organisations, and the execution of boards on behalf of organisations.
+ *
+ * @generated from service versori.credential.tokens.v1.TokenService
+ */
+export declare const TokenService: GenService<{
+    /**
+     * GetToken uses an existing Credential to obtain an access token for OAuth2 or HTTP Refresh.
+     * The credential must be of a valid else an error will be returned. Other credential types may be supported in the future.
+     *
+     * @generated from rpc versori.credential.tokens.v1.TokenService.GetToken
+     */
+    getToken: {
+        methodKind: "unary";
+        input: typeof GetTokenRequestSchema;
+        output: typeof GetTokenResponseSchema;
+    };
+    /**
+     * CheckExpiry returns the expiry of an active credential, potentially refreshing it if not disabled and if the token
+     * is close to expiry. Returns an error if the credential is of wrong type, if there is no refresh token, or any other
+     * error occurs while attempting a refresh request.
+     *
+     * @generated from rpc versori.credential.tokens.v1.TokenService.CheckExpiry
+     */
+    checkExpiry: {
+        methodKind: "unary";
+        input: typeof CheckExpiryRequestSchema;
+        output: typeof CheckExpiryResponseSchema;
+    };
+}>;
+//# sourceMappingURL=token_service_pb.d.ts.map

package/script/src/services/credentials/generated/versori/credential/tokens/v1/token_service_pb.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"token_service_pb.d.ts","sourceRoot":"","sources":["../../../../../../../../../src/src/services/credentials/generated/versori/credential/tokens/v1/token_service_pb.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,8BAA8B,CAAC;AAEpF,OAAO,KAAK,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,wBAAwB,CAAC;AAElE,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,eAAe,CAAC;AAG3C,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,oBAAoB,CAAC;AAElD;;GAEG;AACH,eAAO,MAAM,+CAA+C,EAAE,OAC0yC,CAAC;AAEz2C;;GAEG;AACH,MAAM,MAAM,eAAe,GAAG,OAAO,CAAC,8CAA8C,CAAC,GAAG;IACtF;;OAEG;IACH,YAAY,EAAE,MAAM,CAAC;IAErB;;OAEG;IACH,YAAY,EAAE,OAAO,CAAC;CACvB,CAAC;AAEF;;;GAGG;AACH,eAAO,MAAM,qBAAqB,EAAE,UAAU,CAAC,eAAe,CACG,CAAC;AAElE;;GAEG;AACH,MAAM,MAAM,gBAAgB,GAAG,OAAO,CAAC,+CAA+C,CAAC,GAAG;IACxF;;OAEG;IACH,KAAK,CAAC,EAAE,KAAK,CAAC;CACf,CAAC;AAEF;;;GAGG;AACH,eAAO,MAAM,sBAAsB,EAAE,UAAU,CAAC,gBAAgB,CACC,CAAC;AAElE;;GAEG;AACH,MAAM,MAAM,kBAAkB,GAAG,OAAO,CAAC,iDAAiD,CAAC,GAAG;IAC5F;;;;OAIG;IACH,YAAY,EAAE,MAAM,CAAC;IAErB;;;;;;OAMG;IACH,YAAY,CAAC,EAAE,QAAQ,CAAC;IAExB;;;;OAIG;IACH,SAAS,EAAE,OAAO,CAAC;CACpB,CAAC;AAEF;;;GAGG;AACH,eAAO,MAAM,wBAAwB,EAAE,UAAU,CAAC,kBAAkB,CACH,CAAC;AAElE;;GAEG;AACH,MAAM,MAAM,mBAAmB,GAAG,OAAO,CAAC,kDAAkD,CAAC,GAAG;IAC9F;;;;OAIG;IACH,SAAS,CAAC,EAAE,SAAS,CAAC;IAEtB;;;;;;OAMG;IACH,UAAU,EAAE,OAAO,CAAC;CACrB,CAAC;AAEF;;;GAGG;AACH,eAAO,MAAM,yBAAyB,EAAE,UAAU,CAAC,mBAAmB,CACL,CAAC;AAElE;;;;;;;GAOG;AACH,eAAO,MAAM,YAAY,EAAE,UAAU,CAAC;IACpC;;;;;OAKG;IACH,QAAQ,EAAE;QACR,UAAU,EAAE,OAAO,CAAC;QACpB,KAAK,EAAE,OAAO,qBAAqB,CAAC;QACpC,MAAM,EAAE,OAAO,sBAAsB,CAAC;KACvC,CAAC;IACF;;;;;;OAMG;IACH,WAAW,EAAE;QACX,UAAU,EAAE,OAAO,CAAC;QACpB,KAAK,EAAE,OAAO,wBAAwB,CAAC;QACvC,MAAM,EAAE,OAAO,yBAAyB,CAAC;KAC1C,CAAC;CACH,CACgE,CAAC"}