@voltro/plugin-scim 0.85.0 → 0.87.0

package/dist/scim.js

@@ -0,0 +1,238 @@
+//#region src/scim.ts
+var e = "urn:ietf:params:scim:schemas:core:2.0:User", t = "urn:ietf:params:scim:schemas:core:2.0:Group", n = "urn:ietf:params:scim:api:messages:2.0:ListResponse", r = "urn:ietf:params:scim:api:messages:2.0:Error", i = (e) => new Date(e).toISOString(), a = (e, t) => {
+	if (typeof e == "boolean") return e;
+	if (typeof e == "number") return Number.isFinite(e) && e !== 0;
+	if (typeof e == "string") {
+		let t = e.trim().toLowerCase();
+		if (t === "true" || t === "1") return !0;
+		if (t === "false" || t === "0" || t === "") return !1;
+	}
+	return t;
+}, o = (e) => {
+	let t = (e ?? "").trim();
+	return (t.toLowerCase().startsWith("urn:") ? t.slice(t.lastIndexOf(":") + 1) : t).toLowerCase();
+}, s = (t, n) => ({
+	schemas: [e],
+	id: t.id,
+	...t.externalId ? { externalId: t.externalId } : {},
+	userName: t.userName,
+	name: {
+		givenName: t.givenName ?? "",
+		familyName: t.familyName ?? ""
+	},
+	...t.email ? { emails: [{
+		value: t.email,
+		primary: !0
+	}] } : {},
+	active: t.active,
+	meta: {
+		resourceType: "User",
+		created: i(t.createdAt),
+		lastModified: i(t.updatedAt),
+		location: `${n}/${t.id}`
+	}
+}), c = (e) => {
+	let t = e.name ?? {}, n = e.emails ?? [], r = n.find((e) => e.primary)?.value ?? n[0]?.value ?? null;
+	return {
+		userName: String(e.userName ?? ""),
+		givenName: t.givenName ?? null,
+		familyName: t.familyName ?? null,
+		email: r,
+		active: e.active === void 0 || e.active === null || a(e.active, !1),
+		externalId: e.externalId ?? null
+	};
+}, l = (e, t) => {
+	let n = t.Operations ?? t.operations ?? [], r = { ...e };
+	for (let e of n) {
+		let t = (e.op ?? "").toLowerCase();
+		if (t !== "replace" && t !== "add") continue;
+		let n = o(e.path);
+		if (n === "active") r = {
+			...r,
+			active: a(e.value, !1)
+		};
+		else if (n === "username") r = {
+			...r,
+			userName: String(e.value)
+		};
+		else if (n === "" && e.value && typeof e.value == "object") for (let [t, n] of Object.entries(e.value)) {
+			let e = t.toLowerCase();
+			e === "active" ? r = {
+				...r,
+				active: a(n, !1)
+			} : e === "username" && (r = {
+				...r,
+				userName: String(n)
+			});
+		}
+	}
+	return r;
+}, u = (e, t) => ({
+	schemas: [n],
+	totalResults: t?.totalResults ?? e.length,
+	startIndex: t?.startIndex ?? 1,
+	itemsPerPage: e.length,
+	Resources: e
+}), d = (e, t, n) => ({
+	schemas: [r],
+	status: String(e),
+	...n ? { scimType: n } : {},
+	detail: t
+}), f = (e, t) => {
+	if (!e) return { kind: "none" };
+	let n = /^\s*([A-Za-z][A-Za-z0-9]*)\s+eq\s+"([^"]*)"\s*$/i.exec(e);
+	if (!n) return { kind: "invalid" };
+	let r = t.find((e) => e.toLowerCase() === n[1].toLowerCase());
+	return r === void 0 ? { kind: "invalid" } : {
+		kind: "filter",
+		attribute: r,
+		value: n[2]
+	};
+}, p = (e) => {
+	let t = Number(e.get("startIndex")), n = Number(e.get("count"));
+	return {
+		startIndex: Number.isSafeInteger(t) && t >= 1 ? t : 1,
+		count: e.get("count") !== null && Number.isSafeInteger(n) && n >= 0 ? n : null
+	};
+}, m = (e, t) => {
+	let n = t.Operations ?? t.operations ?? [], r = (e) => (Array.isArray(e) ? e : e === void 0 ? [] : [e]).map((e) => String(e?.value ?? e)).filter((e) => e !== "" && e !== "undefined"), i = e;
+	for (let e of n) {
+		let t = (e.op ?? "").toLowerCase(), n = e.path ?? "", a = /^members\[value\s+eq\s+"([^"]*)"\]$/i.exec(n);
+		if (t === "add" && n.toLowerCase() === "members") {
+			let t = r(e.value), n = t.length > 4 ? new Set(i.members) : void 0, a = t.filter((e) => !(n === void 0 ? i.members.includes(e) : n.has(e)));
+			i = {
+				...i,
+				members: [...i.members, ...a]
+			};
+		} else if (t === "remove" && a) i = {
+			...i,
+			members: i.members.filter((e) => e !== a[1])
+		};
+		else if (t === "remove" && n.toLowerCase() === "members") {
+			let t = new Set(r(e.value));
+			i = {
+				...i,
+				members: t.size === 0 ? [] : i.members.filter((e) => !t.has(e))
+			};
+		} else if (t === "replace" && n.toLowerCase() === "members") i = {
+			...i,
+			members: [...r(e.value)]
+		};
+		else if (t === "replace" && n === "displayName") i = {
+			...i,
+			displayName: String(e.value)
+		};
+		else if (t === "replace" && n === "" && e.value && typeof e.value == "object") {
+			let t = e.value;
+			"displayName" in t && (i = {
+				...i,
+				displayName: String(t.displayName)
+			}), "members" in t && (i = {
+				...i,
+				members: [...r(t.members)]
+			});
+		}
+	}
+	return i;
+}, h = (e) => ({
+	schemas: ["urn:ietf:params:scim:schemas:core:2.0:ServiceProviderConfig"],
+	documentationUri: "https://voltro.dev",
+	patch: { supported: !0 },
+	bulk: {
+		supported: !1,
+		maxOperations: 0,
+		maxPayloadSize: 0
+	},
+	filter: {
+		supported: !0,
+		maxResults: 200
+	},
+	changePassword: { supported: !1 },
+	sort: { supported: !1 },
+	etag: { supported: !1 },
+	authenticationSchemes: [{
+		type: "oauthbearertoken",
+		name: "Bearer token",
+		description: "Static bearer token configured in the IdP SCIM settings"
+	}],
+	meta: {
+		resourceType: "ServiceProviderConfig",
+		location: e
+	}
+}), g = (e, t = {}) => ({
+	name: e,
+	type: "string",
+	multiValued: !1,
+	required: !1,
+	caseExact: !1,
+	mutability: "readWrite",
+	returned: "default",
+	uniqueness: "none",
+	...t
+}), _ = (n) => [{
+	schemas: ["urn:ietf:params:scim:schemas:core:2.0:Schema"],
+	id: e,
+	name: "User",
+	description: "SCIM core User",
+	attributes: [
+		g("userName", {
+			required: !0,
+			uniqueness: "server"
+		}),
+		g("name", {
+			type: "complex",
+			subAttributes: [g("givenName"), g("familyName")]
+		}),
+		g("emails", {
+			type: "complex",
+			multiValued: !0,
+			subAttributes: [g("value"), g("primary", { type: "boolean" })]
+		}),
+		g("active", { type: "boolean" }),
+		g("externalId")
+	],
+	meta: {
+		resourceType: "Schema",
+		location: `${n}/${e}`
+	}
+}, {
+	schemas: ["urn:ietf:params:scim:schemas:core:2.0:Schema"],
+	id: t,
+	name: "Group",
+	description: "SCIM core Group",
+	attributes: [
+		g("displayName", { required: !0 }),
+		g("members", {
+			type: "complex",
+			multiValued: !0,
+			subAttributes: [g("value")]
+		}),
+		g("externalId")
+	],
+	meta: {
+		resourceType: "Schema",
+		location: `${n}/${t}`
+	}
+}], v = (n) => [{
+	schemas: ["urn:ietf:params:scim:schemas:core:2.0:ResourceType"],
+	id: "User",
+	name: "User",
+	endpoint: "/Users",
+	schema: e,
+	meta: {
+		resourceType: "ResourceType",
+		location: `${n}/ResourceTypes/User`
+	}
+}, {
+	schemas: ["urn:ietf:params:scim:schemas:core:2.0:ResourceType"],
+	id: "Group",
+	name: "Group",
+	endpoint: "/Groups",
+	schema: t,
+	meta: {
+		resourceType: "ResourceType",
+		location: `${n}/ResourceTypes/Group`
+	}
+}];
+//#endregion
+export { r as SCIM_ERROR_SCHEMA, t as SCIM_GROUP_SCHEMA, n as SCIM_LIST_SCHEMA, e as SCIM_USER_SCHEMA, m as applyScimGroupPatch, l as applyScimPatch, c as fromScimUser, p as parsePagination, f as parseScimFilter, v as resourceTypes, d as scimError, u as scimList, _ as scimSchemas, h as serviceProviderConfig, s as toScimUser };

package/dist/store.js

@@ -0,0 +1,195 @@
+import { tsMs as e } from "@voltro/protocol";
+import { boolean as t, eq as n, generateId as r, id as i, json as a, queryFor as o, table as s, text as c, timestamp as l } from "@voltro/database";
+//#region src/store.ts
+var u = s("_voltro_scim_users", {
+	id: i({ prefix: "scimuser" }),
+	userName: c(),
+	givenName: c().nullable(),
+	familyName: c().nullable(),
+	email: c().nullable(),
+	active: t().default(!0),
+	externalId: c().nullable(),
+	createdAt: l().default("now"),
+	updatedAt: l().default("now").onUpdate("now")
+}).renamedFrom("scim_users").unique("byScimUserName", ["userName"]), d = s("_voltro_scim_groups", {
+	id: i({ prefix: "scimgroup" }),
+	displayName: c(),
+	externalId: c().nullable(),
+	members: a().nullable(),
+	createdAt: l().default("now"),
+	updatedAt: l().default("now").onUpdate("now")
+}).renamedFrom("scim_groups"), f = (e) => {
+	if (!Number.isSafeInteger(e.startIndex) || e.startIndex < 1 || !Number.isSafeInteger(e.count) || e.count < 0) throw RangeError("SCIM pages require a positive startIndex and a non-negative count, both safe integers");
+}, p = (e, t) => t === null || e[t.attribute] === t.value, m = (e = Date.now) => {
+	let t = /* @__PURE__ */ new Map(), n = /* @__PURE__ */ new Map(), r = 0, i = 0, a = (e) => `${e}_${++r}`, o = (e) => {
+		let t = -1, n = [];
+		return (r, a) => {
+			f(a), t !== i && (n = [...e.keys()].sort(), t = i);
+			let o = [], s = 0;
+			for (let t of n) {
+				let n = e.get(t);
+				p(n, r) && (s >= a.startIndex - 1 && o.length < a.count && o.push(n), s++);
+			}
+			return {
+				rows: o,
+				totalResults: s
+			};
+		};
+	}, s = o(t), c = o(n);
+	return {
+		listUsers: async (e) => [...t.values()].filter((t) => p(t, e)),
+		pageUsers: async (e, t) => s(e, t),
+		getUser: async (e) => t.get(e) ?? null,
+		createUser: async (n) => {
+			let r = {
+				...n,
+				id: a("user"),
+				createdAt: e(),
+				updatedAt: e()
+			};
+			return t.set(r.id, r), i++, r;
+		},
+		putUser: async (n, r) => {
+			if (!t.has(n)) return null;
+			let i = {
+				...r,
+				id: n,
+				updatedAt: e()
+			};
+			return t.set(n, i), i;
+		},
+		deleteUser: async (e) => {
+			let n = t.delete(e);
+			return n && i++, n;
+		},
+		listGroups: async (e) => [...n.values()].filter((t) => p(t, e)),
+		pageGroups: async (e, t) => c(e, t),
+		getGroup: async (e) => n.get(e) ?? null,
+		createGroup: async (t) => {
+			let r = {
+				...t,
+				id: a("group"),
+				createdAt: e(),
+				updatedAt: e()
+			};
+			return n.set(r.id, r), i++, r;
+		},
+		putGroup: async (t, r) => {
+			if (!n.has(t)) return null;
+			let i = {
+				...r,
+				id: t,
+				updatedAt: e()
+			};
+			return n.set(t, i), i;
+		},
+		deleteGroup: async (e) => {
+			let t = n.delete(e);
+			return t && i++, t;
+		}
+	};
+}, h = (t) => {
+	let i = async (e, n) => {
+		let r = o(e);
+		return t.query((n ? r.where(n) : r).descriptor);
+	}, a = (t) => ({
+		id: String(t.id),
+		userName: String(t.userName),
+		givenName: t.givenName ?? null,
+		familyName: t.familyName ?? null,
+		email: t.email ?? null,
+		active: !!t.active,
+		externalId: t.externalId ?? null,
+		createdAt: e(t.createdAt),
+		updatedAt: e(t.updatedAt)
+	}), s = (t) => ({
+		id: String(t.id),
+		displayName: String(t.displayName),
+		externalId: t.externalId ?? null,
+		members: t.members ?? [],
+		createdAt: e(t.createdAt),
+		updatedAt: e(t.updatedAt)
+	}), c = async (e, r, i, a) => {
+		f(i);
+		let s = o(e), c = r === null ? s : s.where(n(r.attribute, r.value)), [l, u] = await Promise.all([t.query(c.count().descriptor), i.count === 0 ? Promise.resolve([]) : t.query(c.orderBy("id", "asc").offset(i.startIndex - 1).limit(i.count).descriptor)]);
+		return {
+			rows: u.map(a),
+			totalResults: Number(l[0]?.count ?? 0)
+		};
+	};
+	return {
+		listUsers: async (e) => (await i(u, e ? n(e.attribute, e.value) : void 0)).map(a),
+		pageUsers: (e, t) => c(u, e, t, a),
+		getUser: async (e) => {
+			let t = await i(u, n("id", e));
+			return t[0] ? a(t[0]) : null;
+		},
+		createUser: async (e) => {
+			let n = r({
+				kind: "typeid",
+				prefix: "scimuser"
+			}, "_voltro_scim_users"), i = /* @__PURE__ */ new Date(), a = {
+				id: n,
+				...e,
+				createdAt: i,
+				updatedAt: i
+			};
+			return await t.insert("_voltro_scim_users", a), {
+				...e,
+				id: n,
+				createdAt: i.getTime(),
+				updatedAt: i.getTime()
+			};
+		},
+		putUser: async (e, r) => (await i(u, n("id", e)))[0] ? (await t.update("_voltro_scim_users", e, {
+			userName: r.userName,
+			givenName: r.givenName,
+			familyName: r.familyName,
+			email: r.email,
+			active: r.active,
+			externalId: r.externalId,
+			updatedAt: /* @__PURE__ */ new Date()
+		}), {
+			...r,
+			id: e,
+			updatedAt: Date.now()
+		}) : null,
+		deleteUser: async (e) => (await i(u, n("id", e)))[0] ? (await t.delete("_voltro_scim_users", e), !0) : !1,
+		listGroups: async (e) => (await i(d, e ? n(e.attribute, e.value) : void 0)).map(s),
+		pageGroups: (e, t) => c(d, e, t, s),
+		getGroup: async (e) => {
+			let t = await i(d, n("id", e));
+			return t[0] ? s(t[0]) : null;
+		},
+		createGroup: async (e) => {
+			let n = r({
+				kind: "typeid",
+				prefix: "scimgroup"
+			}, "_voltro_scim_groups"), i = /* @__PURE__ */ new Date(), a = {
+				id: n,
+				...e,
+				createdAt: i,
+				updatedAt: i
+			};
+			return await t.insert("_voltro_scim_groups", a), {
+				...e,
+				id: n,
+				createdAt: i.getTime(),
+				updatedAt: i.getTime()
+			};
+		},
+		putGroup: async (e, r) => (await i(d, n("id", e)))[0] ? (await t.update("_voltro_scim_groups", e, {
+			displayName: r.displayName,
+			externalId: r.externalId,
+			members: r.members,
+			updatedAt: /* @__PURE__ */ new Date()
+		}), {
+			...r,
+			id: e,
+			updatedAt: Date.now()
+		}) : null,
+		deleteGroup: async (e) => (await i(d, n("id", e)))[0] ? (await t.delete("_voltro_scim_groups", e), !0) : !1
+	};
+};
+//#endregion
+export { h as dataStoreScimStore, m as memoryScimStore, d as scimGroupsTable, u as scimUsersTable };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@voltro/plugin-scim",
-  "version": "0.85.0",
+  "version": "0.87.0",
   "description": "SCIM 2.0 provisioning — Users + Groups REST endpoints (/scim/v2) so an enterprise IdP (Okta, Entra, OneLogin) can create/update/deactivate users in your app. Bearer-token gated; the SCIM envelope + filtering handled for you.",
   "keywords": [
     "voltro",
@@ -33,8 +33,8 @@
     "node": ">=24.0.0"
   },
   "dependencies": {
-    "@voltro/database": "0.85.0",
-    "@voltro/protocol": "0.85.0"
+    "@voltro/database": "0.87.0",
+    "@voltro/protocol": "0.87.0"
   },
   "peerDependencies": {
     "effect": "4.0.1"