@wazobiatech/auth-middleware 1.0.0

package/dist/nestjs/strategies/jwt-strategy.js

@@ -0,0 +1,381 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.JwtStrategy = void 0;
+const common_1 = require("@nestjs/common");
+const passport_1 = require("@nestjs/passport");
+const passport_jwt_1 = require("passport-jwt");
+const jose = __importStar(require("node-jose"));
+const axios_1 = __importDefault(require("axios"));
+const crypto = __importStar(require("crypto"));
+const redis_connection_1 = __importDefault(require("../../utils/redis.connection"));
+const jsonwebtoken = __importStar(require("jsonwebtoken"));
+require("dotenv/config");
+let JwtStrategy = class JwtStrategy extends (0, passport_1.PassportStrategy)(passport_jwt_1.Strategy) {
+    constructor() {
+        super({
+            jwtFromRequest: passport_jwt_1.ExtractJwt.fromAuthHeaderAsBearerToken(),
+            ignoreExpiration: false,
+            secretOrKeyProvider: (request, rawJwtToken, done) => {
+                // Store the raw token in the request object instead of instance variable
+                request.rawJwtToken = rawJwtToken;
+                this.getSigningKey(rawJwtToken)
+                    .then((key) => {
+                    done(null, key);
+                })
+                    .catch((error) => {
+                    done(error, undefined);
+                });
+            },
+            algorithms: ['RS512'],
+            passReqToCallback: true, // This ensures the request object is passed to validate
+        });
+        this.jwksCache = new Map();
+        const domain = process.env?.MERCURY_BASE_URL ?? 'http://localhost:4000';
+        this.expectedIssuer = domain;
+    }
+    decodeJWTTokenForProjectUuid(rawJwtToken) {
+        try {
+            // Validate JWT structure first
+            const parts = rawJwtToken.split('.');
+            if (parts.length !== 3) {
+                return null;
+            }
+            // Decode without verification (we just need the payload for project_uuid)
+            const decoded = jsonwebtoken.decode(rawJwtToken);
+            if (!decoded) {
+                return null;
+            }
+            // Return project_uuid if it exists, otherwise null
+            if (typeof decoded === 'object' &&
+                decoded !== null &&
+                'project_uuid' in decoded) {
+                const projectUuid = decoded.project_uuid || null;
+                return projectUuid;
+            }
+            return null;
+        }
+        catch (error) {
+            return null;
+        }
+    }
+    getJwksUriAndPath(projectUuid) {
+        const domain = process.env?.MERCURY_BASE_URL ?? 'localhost';
+        let path;
+        if (projectUuid) {
+            path = `auth/projects/${projectUuid}/.well-known/jwks.json`;
+        }
+        else {
+            // Fallback to default project UUID from environment
+            const defaultProjectUuid = process.env?.NEXUS_ID;
+            if (!defaultProjectUuid) {
+                throw new common_1.UnauthorizedException('No project UUID found in token and no default project UUID configured');
+            }
+            path = `auth/projects/${defaultProjectUuid}/.well-known/jwks.json`;
+        }
+        const uri = `${domain}/${path}`;
+        return { uri, path };
+    }
+    async fetchJWKS(jwksUri, path) {
+        try {
+            const timestamp = Date.now().toString();
+            const signatureInput = 'GET' + `/${path}` + timestamp;
+            const sharedSecret = process.env?.SIGNATURE_SHARED_SECRET;
+            const signature = crypto
+                .createHmac('sha256', sharedSecret)
+                .update(signatureInput)
+                .digest('hex');
+            const headers = {
+                Accept: 'application/json',
+                'User-Agent': 'Service-JWT-Strategy/1.0',
+                'X-Timestamp': timestamp,
+                'X-Signature': signature,
+            };
+            const response = await axios_1.default.get(jwksUri, {
+                timeout: 10000, // 10 second timeout
+                headers,
+            });
+            if (!response.data || !response.data.keys) {
+                throw new Error('Invalid JWKS response: missing keys');
+            }
+            // Handle both standard JWKS format and your custom format
+            let jwksData;
+            if (Array.isArray(response.data.keys)) {
+                // Standard JWKS format: { "keys": [key1, key2, ...] }
+                jwksData = response.data;
+            }
+            else {
+                jwksData = {
+                    keys: [response.data.keys], // Convert single key object to array
+                };
+            }
+            // Create keystore from normalized JWKS data
+            const keyStore = await jose.JWK.asKeyStore(jwksData);
+            return keyStore;
+        }
+        catch (error) {
+            // Type guard for axios errors
+            if (axios_1.default.isAxiosError(error)) {
+                const axiosError = error;
+                // Handle network errors
+                if (axiosError.code === 'ENOTFOUND') {
+                    throw new common_1.UnauthorizedException('JWKS endpoint not reachable');
+                }
+                else if (axiosError.code === 'ETIMEDOUT') {
+                    throw new common_1.UnauthorizedException('JWKS endpoint timeout');
+                }
+                else if (axiosError.code === 'CERT_REQUIRED' ||
+                    axiosError.code === 'UNABLE_TO_GET_LOCAL_ISSUER_CERT') {
+                    throw new common_1.UnauthorizedException('Client certificate authentication failed');
+                }
+                else if (axiosError.response?.status) {
+                    throw new common_1.UnauthorizedException(`JWKS endpoint returned ${axiosError.response.status}: ${axiosError.response.statusText}`);
+                }
+                else {
+                    const message = axiosError.message || 'Unknown error';
+                    throw new common_1.UnauthorizedException(`Failed to fetch JWKS: ${message}`);
+                }
+            }
+            else {
+                // Handle non-axios errors
+                const errorMessage = error instanceof Error ? error.message : String(error);
+                throw new common_1.UnauthorizedException(`Failed to fetch JWKS: ${errorMessage}`);
+            }
+        }
+    }
+    async getSigningKey(rawJwtToken) {
+        try {
+            // Validate JWT format
+            const parts = rawJwtToken.split('.');
+            if (parts.length !== 3) {
+                throw new Error(`Invalid JWT format: expected 3 parts, got ${parts.length}`);
+            }
+            // Parse JWT header to get key ID
+            const headerBase64 = parts[0];
+            const headerJson = Buffer.from(headerBase64, 'base64').toString();
+            const header = JSON.parse(headerJson);
+            if (!header.kid) {
+                throw new Error('Missing key ID (kid) in token header');
+            }
+            // Extract project UUID from token
+            const projectUuid = this.decodeJWTTokenForProjectUuid(rawJwtToken);
+            const { uri: jwksUri, path } = this.getJwksUriAndPath(projectUuid);
+            // Create cache key based on project UUID (or 'default' if no project)
+            const cacheKey = projectUuid || 'default';
+            // Check cache and refresh if needed
+            const cachedEntry = this.jwksCache.get(cacheKey);
+            let keyStore;
+            if (!cachedEntry || Date.now() > cachedEntry.expiry) {
+                keyStore = await this.fetchJWKS(jwksUri, path);
+                // Cache for 10 minutes
+                const expiryTime = Date.now() + 600000;
+                this.jwksCache.set(cacheKey, {
+                    keyStore: keyStore,
+                    expiry: expiryTime,
+                });
+            }
+            else {
+                keyStore = cachedEntry.keyStore;
+            }
+            // Find the key in the keystore
+            const key = keyStore.get(header.kid);
+            if (!key) {
+                throw new Error(`Key ${header.kid} not found in JWKS for project ${projectUuid || 'default'}`);
+            }
+            // Convert to PEM format (public key only)
+            const publicKey = key.toPEM(false);
+            return publicKey;
+        }
+        catch (error) {
+            const errorMessage = error instanceof Error ? error.message : String(error);
+            throw new common_1.UnauthorizedException(`Unable to get signing key: ${errorMessage}`);
+        }
+    }
+    createTokenCacheKey(rawToken) {
+        // Create a more unique cache key using token hash + first 32 chars
+        const tokenHash = crypto
+            .createHash('sha256')
+            .update(rawToken)
+            .digest('hex')
+            .substring(0, 32);
+        const cacheKey = `validated_token:${tokenHash}`;
+        return cacheKey;
+    }
+    async cacheValidatedToken(payload, rawToken) {
+        try {
+            const redis = await redis_connection_1.default.getInstance();
+            const cacheExpiryTime = process.env?.CACHE_EXPIRY_TIME || 3600; // Default 1 hour
+            const cacheKey = this.createTokenCacheKey(rawToken);
+            // Cache the validated payload with additional metadata for debugging
+            const cacheData = {
+                payload,
+                cachedAt: Date.now(),
+                tokenPreview: rawToken.substring(0, 50) + '...', // For debugging
+            };
+            const cacheDataString = JSON.stringify(cacheData);
+            await redis.set(cacheKey, cacheDataString, {
+                EX: cacheExpiryTime,
+            });
+        }
+        catch (error) { }
+    }
+    async getCachedToken(rawToken) {
+        try {
+            const redis = await redis_connection_1.default.getInstance();
+            const cacheKey = this.createTokenCacheKey(rawToken);
+            const cachedData = await redis.get(cacheKey);
+            if (cachedData && typeof cachedData === 'string') {
+                const { payload, cachedAt } = JSON.parse(cachedData);
+                // Validate cached payload structure BEFORE using it
+                if (!payload || !payload.sub || !payload.sub.uuid || !payload.sub.email) {
+                    await redis.del(cacheKey);
+                    return null;
+                }
+                // Double check expiration (in case cache TTL and token TTL differ)
+                const now = Math.floor(Date.now() / 1000);
+                if (payload.exp && payload.exp < now) {
+                    // Token expired, remove from cache
+                    await redis.del(cacheKey);
+                    return null;
+                }
+                return payload;
+            }
+            return null;
+        }
+        catch (error) {
+            // Clean up potentially corrupted cache entry
+            try {
+                const cacheKey = this.createTokenCacheKey(rawToken);
+                const redis = await redis_connection_1.default.getInstance();
+                await redis.del(cacheKey);
+            }
+            catch (cleanupError) { }
+            return null;
+        }
+    }
+    // Extract raw token from request instead of using instance variable
+    extractRawTokenFromRequest(request) {
+        // Check if we stored it during secretOrKeyProvider
+        if (request.rawJwtToken) {
+            const token = request.rawJwtToken;
+            return token;
+        }
+        // Fallback: extract from Authorization header
+        const authHeader = request.headers.authorization;
+        if (authHeader && authHeader.startsWith('Bearer ')) {
+            const token = authHeader.substring(7);
+            return token;
+        }
+        return null;
+    }
+    // Modified validate method - now receives the request object
+    async validate(request, payload) {
+        // Get the raw token from the request instead of instance variable
+        const rawToken = this.extractRawTokenFromRequest(request);
+        // First, try to get from cache if we have the raw token
+        if (rawToken) {
+            const cachedPayload = await this.getCachedToken(rawToken);
+            if (cachedPayload) {
+                // Return cleaned user object from cache
+                const user = {
+                    uuid: cachedPayload.sub.uuid,
+                    email: cachedPayload.sub.email,
+                    name: cachedPayload.sub.name,
+                };
+                return user;
+            }
+        }
+        // Validate issuer
+        if (payload.iss !== process.env?.MERCURY_BASE_URL) {
+            throw new common_1.UnauthorizedException(`Invalid issuer. Expected: ${this.expectedIssuer}, Got: ${payload.iss}`);
+        }
+        // Validate subject (userUuid)
+        if (!payload.sub) {
+            throw new common_1.UnauthorizedException('Missing subject (userUuid)');
+        }
+        // Validate timestamps
+        const now = Math.floor(Date.now() / 1000);
+        if (payload.exp && payload.exp < now) {
+            throw new common_1.UnauthorizedException('Token expired');
+        }
+        if (payload.nbf && payload.nbf > now) {
+            throw new common_1.UnauthorizedException('Token not yet valid');
+        }
+        // Check Redis for token revocation
+        if (payload.jti) {
+            try {
+                const redis = await redis_connection_1.default.getInstance();
+                const revocationKey = `revoked_token:${payload.jti}`;
+                const isRevoked = await redis.get(revocationKey);
+                if (isRevoked) {
+                    throw new common_1.UnauthorizedException('Token has been revoked');
+                }
+            }
+            catch (error) {
+                const errorMessage = error instanceof Error ? error.message : String(error);
+                throw new common_1.UnauthorizedException(`Redis error: ${errorMessage}`);
+            }
+        }
+        // Cache the validated token
+        if (rawToken) {
+            await this.cacheValidatedToken(payload, rawToken);
+        }
+        const user = {
+            uuid: payload.sub.uuid,
+            email: payload.sub.email,
+            name: payload.sub.name,
+        };
+        // Return cleaned user object (this becomes req.user)
+        return user;
+    }
+};
+exports.JwtStrategy = JwtStrategy;
+exports.JwtStrategy = JwtStrategy = __decorate([
+    (0, common_1.Injectable)(),
+    __metadata("design:paramtypes", [])
+], JwtStrategy);
+//# sourceMappingURL=jwt-strategy.js.map

package/dist/nestjs/strategies/jwt-strategy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"jwt-strategy.js","sourceRoot":"","sources":["../../../src/nestjs/strategies/jwt-strategy.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,2CAAmE;AACnE,+CAAoD;AACpD,+CAAoD;AACpD,gDAAkC;AAClC,kDAA0C;AAE1C,+CAAiC;AACjC,oFAAkE;AAElE,2DAA6C;AAC7C,yBAAuB;AAGhB,IAAM,WAAW,GAAjB,MAAM,WAAY,SAAQ,IAAA,2BAAgB,EAAC,uBAAQ,CAAC;IAOzD;QACE,KAAK,CAAC;YACJ,cAAc,EAAE,yBAAU,CAAC,2BAA2B,EAAE;YACxD,gBAAgB,EAAE,KAAK;YACvB,mBAAmB,EAAE,CACnB,OAAgB,EAChB,WAAmB,EACnB,IAA2D,EAC3D,EAAE;gBACF,yEAAyE;gBACxE,OAAe,CAAC,WAAW,GAAG,WAAW,CAAC;gBAC3C,IAAI,CAAC,aAAa,CAAC,WAAW,CAAC;qBAC5B,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE;oBACZ,IAAI,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;gBAClB,CAAC,CAAC;qBACD,KAAK,CAAC,CAAC,KAAY,EAAE,EAAE;oBACtB,IAAI,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC;gBACzB,CAAC,CAAC,CAAC;YACP,CAAC;YACD,UAAU,EAAE,CAAC,OAAO,CAAC;YACrB,iBAAiB,EAAE,IAAI,EAAE,wDAAwD;SAClF,CAAC,CAAC;QA1BG,cAAS,GAGb,IAAI,GAAG,EAAE,CAAC;QAyBZ,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,EAAE,gBAAgB,IAAI,uBAAuB,CAAC;QACxE,IAAI,CAAC,cAAc,GAAG,MAAM,CAAC;IAC/B,CAAC;IAEO,4BAA4B,CAAC,WAAmB;QACtD,IAAI,CAAC;YACH,+BAA+B;YAC/B,MAAM,KAAK,GAAG,WAAW,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YACrC,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBACvB,OAAO,IAAI,CAAC;YACd,CAAC;YACD,0EAA0E;YAC1E,MAAM,OAAO,GAAG,YAAY,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;YAEjD,IAAI,CAAC,OAAO,EAAE,CAAC;gBACb,OAAO,IAAI,CAAC;YACd,CAAC;YACD,mDAAmD;YACnD,IACE,OAAO,OAAO,KAAK,QAAQ;gBAC3B,OAAO,KAAK,IAAI;gBAChB,cAAc,IAAI,OAAO,EACzB,CAAC;gBACD,MAAM,WAAW,GAAI,OAAqC,CAAC,YAAY,IAAI,IAAI,CAAC;gBAChF,OAAO,WAAW,CAAC;YACrB,CAAC;YACD,OAAO,IAAI,CAAC;QACd,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IAEO,iBAAiB,CAAC,WAA0B;QAClD,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,EAAE,gBAAgB,IAAI,WAAW,CAAC;QAC5D,IAAI,IAAY,CAAC;QAEjB,IAAI,WAAW,EAAE,CAAC;YAChB,IAAI,GAAG,iBAAiB,WAAW,wBAAwB,CAAC;QAC9D,CAAC;aAAM,CAAC;YACN,oDAAoD;YACpD,MAAM,kBAAkB,GAAG,OAAO,CAAC,GAAG,EAAE,QAAQ,CAAC;YACjD,IAAI,CAAC,kBAAkB,EAAE,CAAC;gBACxB,MAAM,IAAI,8BAAqB,CAC7B,uEAAuE,CACxE,CAAC;YACJ,CAAC;YAED,IAAI,GAAG,iBAAiB,kBAAkB,wBAAwB,CAAC;QACrE,CAAC;QAED,MAAM,GAAG,GAAG,GAAG,MAAM,IAAI,IAAI,EAAE,CAAC;QAChC,OAAO,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC;IACvB,CAAC;IAEO,KAAK,CAAC,SAAS,CAAC,OAAe,EAAE,IAAY;QACnD,IAAI,CAAC;YACH,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC;YACxC,MAAM,cAAc,GAAG,KAAK,GAAG,IAAI,IAAI,EAAE,GAAG,SAAS,CAAC;YACtD,MAAM,YAAY,GAAG,OAAO,CAAC,GAAG,EAAE,uBAAuB,CAAC;YAE1D,MAAM,SAAS,GAAG,MAAM;iBACrB,UAAU,CAAC,QAAQ,EAAE,YAAY,CAAC;iBAClC,MAAM,CAAC,cAAc,CAAC;iBACtB,MAAM,CAAC,KAAK,CAAC,CAAC;YAEjB,MAAM,OAAO,GAAG;gBACd,MAAM,EAAE,kBAAkB;gBAC1B,YAAY,EAAE,0BAA0B;gBACxC,aAAa,EAAE,SAAS;gBACxB,aAAa,EAAE,SAAS;aACzB,CAAC;YACF,MAAM,QAAQ,GAAG,MAAM,eAAK,CAAC,GAAG,CAE7B,OAAO,EAAE;gBACV,OAAO,EAAE,KAAK,EAAE,oBAAoB;gBACpC,OAAO;aACR,CAAC,CAAC;YAEH,IAAI,CAAC,QAAQ,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;gBAC1C,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAC;YACzD,CAAC;YAED,0DAA0D;YAC1D,IAAI,QAAkC,CAAC;YAEvC,IAAI,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;gBACtC,sDAAsD;gBACtD,QAAQ,GAAG,QAAQ,CAAC,IAAgC,CAAC;YACvD,CAAC;iBAAM,CAAC;gBACN,QAAQ,GAAG;oBACT,IAAI,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,qCAAqC;iBAClE,CAAC;YACJ,CAAC;YACD,4CAA4C;YAC5C,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC;YAErD,OAAO,QAAQ,CAAC;QAClB,CAAC;QAAC,OAAO,KAAc,EAAE,CAAC;YACxB,8BAA8B;YAC9B,IAAI,eAAK,CAAC,YAAY,CAAC,KAAK,CAAC,EAAE,CAAC;gBAC9B,MAAM,UAAU,GAAG,KAAmB,CAAC;gBAEvC,wBAAwB;gBACxB,IAAI,UAAU,CAAC,IAAI,KAAK,WAAW,EAAE,CAAC;oBACpC,MAAM,IAAI,8BAAqB,CAAC,6BAA6B,CAAC,CAAC;gBACjE,CAAC;qBAAM,IAAI,UAAU,CAAC,IAAI,KAAK,WAAW,EAAE,CAAC;oBAC3C,MAAM,IAAI,8BAAqB,CAAC,uBAAuB,CAAC,CAAC;gBAC3D,CAAC;qBAAM,IACL,UAAU,CAAC,IAAI,KAAK,eAAe;oBACnC,UAAU,CAAC,IAAI,KAAK,iCAAiC,EACrD,CAAC;oBACD,MAAM,IAAI,8BAAqB,CAC7B,0CAA0C,CAC3C,CAAC;gBACJ,CAAC;qBAAM,IAAI,UAAU,CAAC,QAAQ,EAAE,MAAM,EAAE,CAAC;oBACvC,MAAM,IAAI,8BAAqB,CAC7B,0BAA0B,UAAU,CAAC,QAAQ,CAAC,MAAM,KAAK,UAAU,CAAC,QAAQ,CAAC,UAAU,EAAE,CAC1F,CAAC;gBACJ,CAAC;qBAAM,CAAC;oBACN,MAAM,OAAO,GAAG,UAAU,CAAC,OAAO,IAAI,eAAe,CAAC;oBACtD,MAAM,IAAI,8BAAqB,CAAC,yBAAyB,OAAO,EAAE,CAAC,CAAC;gBACtE,CAAC;YACH,CAAC;iBAAM,CAAC;gBACN,0BAA0B;gBAC1B,MAAM,YAAY,GAChB,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;gBACzD,MAAM,IAAI,8BAAqB,CAC7B,yBAAyB,YAAY,EAAE,CACxC,CAAC;YACJ,CAAC;QACH,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,aAAa,CAAC,WAAmB;QAC7C,IAAI,CAAC;YACH,sBAAsB;YACtB,MAAM,KAAK,GAAG,WAAW,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YACrC,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBACvB,MAAM,IAAI,KAAK,CACb,6CAA6C,KAAK,CAAC,MAAM,EAAE,CAC5D,CAAC;YACJ,CAAC;YAOD,iCAAiC;YACjC,MAAM,YAAY,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;YAC9B,MAAM,UAAU,GAAG,MAAM,CAAC,IAAI,CAAC,YAAY,EAAE,QAAQ,CAAC,CAAC,QAAQ,EAAE,CAAC;YAClE,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,UAAU,CAAc,CAAC;YAEnD,IAAI,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC;gBAChB,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;YAC1D,CAAC;YAED,kCAAkC;YAClC,MAAM,WAAW,GAAG,IAAI,CAAC,4BAA4B,CAAC,WAAW,CAAC,CAAC;YACnE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,IAAI,EAAE,GAAG,IAAI,CAAC,iBAAiB,CAAC,WAAW,CAAC,CAAC;YAEnE,sEAAsE;YACtE,MAAM,QAAQ,GAAG,WAAW,IAAI,SAAS,CAAC;YAE1C,oCAAoC;YACpC,MAAM,WAAW,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;YAEjD,IAAI,QAA2B,CAAC;YAEhC,IAAI,CAAC,WAAW,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,WAAW,CAAC,MAAM,EAAE,CAAC;gBACpD,QAAQ,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;gBAE/C,uBAAuB;gBACvB,MAAM,UAAU,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,MAAM,CAAC;gBAEvC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,QAAQ,EAAE;oBAC3B,QAAQ,EAAE,QAAQ;oBAClB,MAAM,EAAE,UAAU;iBACnB,CAAC,CAAC;YACL,CAAC;iBAAM,CAAC;gBACN,QAAQ,GAAG,WAAW,CAAC,QAAQ,CAAC;YAClC,CAAC;YAED,+BAA+B;YAC/B,MAAM,GAAG,GAAG,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,CAA6B,CAAC;YAEjE,IAAI,CAAC,GAAG,EAAE,CAAC;gBACT,MAAM,IAAI,KAAK,CACb,OAAO,MAAM,CAAC,GAAG,kCAAkC,WAAW,IAAI,SAAS,EAAE,CAC9E,CAAC;YACJ,CAAC;YAED,0CAA0C;YAC1C,MAAM,SAAS,GAAG,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;YAEnC,OAAO,SAAS,CAAC;QACnB,CAAC;QAAC,OAAO,KAAc,EAAE,CAAC;YACxB,MAAM,YAAY,GAChB,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YACzD,MAAM,IAAI,8BAAqB,CAC7B,8BAA8B,YAAY,EAAE,CAC7C,CAAC;QACJ,CAAC;IACH,CAAC;IAEO,mBAAmB,CAAC,QAAgB;QAC1C,mEAAmE;QACnE,MAAM,SAAS,GAAG,MAAM;aACrB,UAAU,CAAC,QAAQ,CAAC;aACpB,MAAM,CAAC,QAAQ,CAAC;aAChB,MAAM,CAAC,KAAK,CAAC;aACb,SAAS,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QAEpB,MAAM,QAAQ,GAAG,mBAAmB,SAAS,EAAE,CAAC;QAChD,OAAO,QAAQ,CAAC;IAClB,CAAC;IAEO,KAAK,CAAC,mBAAmB,CAC/B,OAAmB,EACnB,QAAgB;QAEhB,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,MAAM,0BAAsB,CAAC,WAAW,EAAE,CAAC;YACzD,MAAM,eAAe,GAAG,OAAO,CAAC,GAAG,EAAE,iBAAiB,IAAI,IAAI,CAAC,CAAC,iBAAiB;YACjF,MAAM,QAAQ,GAAG,IAAI,CAAC,mBAAmB,CAAC,QAAQ,CAAC,CAAC;YAEpD,qEAAqE;YACrE,MAAM,SAAS,GAAG;gBAChB,OAAO;gBACP,QAAQ,EAAE,IAAI,CAAC,GAAG,EAAE;gBACpB,YAAY,EAAE,QAAQ,CAAC,SAAS,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,KAAK,EAAE,gBAAgB;aAClE,CAAC;YAEF,MAAM,eAAe,GAAG,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC;YAClD,MAAM,KAAK,CAAC,GAAG,CAAC,QAAQ,EAAE,eAAe,EAAE;gBACzC,EAAE,EAAE,eAAyB;aAC9B,CAAC,CAAC;QAEL,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC,CAAA,CAAC;IACpB,CAAC;IAEO,KAAK,CAAC,cAAc,CAAC,QAAgB;QAC3C,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,MAAM,0BAAsB,CAAC,WAAW,EAAE,CAAC;YACzD,MAAM,QAAQ,GAAG,IAAI,CAAC,mBAAmB,CAAC,QAAQ,CAAC,CAAC;YACpD,MAAM,UAAU,GAAG,MAAM,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;YAC7C,IAAI,UAAU,IAAI,OAAO,UAAU,KAAK,QAAQ,EAAE,CAAC;gBACjD,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,UAAU,CAGlD,CAAC;gBAEF,oDAAoD;gBACpD,IAAI,CAAC,OAAO,IAAI,CAAC,OAAO,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC;oBACxE,MAAM,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;oBAC1B,OAAO,IAAI,CAAC;gBACd,CAAC;gBAED,mEAAmE;gBACnE,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;gBAC1C,IAAI,OAAO,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,GAAG,GAAG,EAAE,CAAC;oBACrC,mCAAmC;oBACnC,MAAM,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;oBAC1B,OAAO,IAAI,CAAC;gBACd,CAAC;gBACD,OAAO,OAAO,CAAC;YACjB,CAAC;YACD,OAAO,IAAI,CAAC;QACd,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAEf,6CAA6C;YAC7C,IAAI,CAAC;gBACH,MAAM,QAAQ,GAAG,IAAI,CAAC,mBAAmB,CAAC,QAAQ,CAAC,CAAC;gBACpD,MAAM,KAAK,GAAG,MAAM,0BAAsB,CAAC,WAAW,EAAE,CAAC;gBACzD,MAAM,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;YAC5B,CAAC;YAAC,OAAO,YAAY,EAAE,CAAC,CAAA,CAAC;YACzB,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IAED,oEAAoE;IAC5D,0BAA0B,CAAC,OAAgB;QACjD,mDAAmD;QACnD,IAAK,OAAe,CAAC,WAAW,EAAE,CAAC;YACjC,MAAM,KAAK,GAAI,OAAe,CAAC,WAAW,CAAC;YAC3C,OAAO,KAAK,CAAC;QACf,CAAC;QACD,8CAA8C;QAC9C,MAAM,UAAU,GAAG,OAAO,CAAC,OAAO,CAAC,aAAa,CAAC;QAEjD,IAAI,UAAU,IAAI,UAAU,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;YACnD,MAAM,KAAK,GAAG,UAAU,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;YACtC,OAAO,KAAK,CAAC;QACf,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAED,6DAA6D;IAC7D,KAAK,CAAC,QAAQ,CAAC,OAAgB,EAAE,OAAmB;QAClD,kEAAkE;QAClE,MAAM,QAAQ,GAAG,IAAI,CAAC,0BAA0B,CAAC,OAAO,CAAC,CAAC;QAE1D,wDAAwD;QACxD,IAAI,QAAQ,EAAE,CAAC;YACb,MAAM,aAAa,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC,CAAC;YAC1D,IAAI,aAAa,EAAE,CAAC;gBAClB,wCAAwC;gBACxC,MAAM,IAAI,GAAG;oBACX,IAAI,EAAE,aAAa,CAAC,GAAG,CAAC,IAAI;oBAC5B,KAAK,EAAE,aAAa,CAAC,GAAG,CAAC,KAAK;oBAC9B,IAAI,EAAE,aAAa,CAAC,GAAG,CAAC,IAAI;iBAC7B,CAAC;gBACF,OAAO,IAAI,CAAC;YACd,CAAC;QACH,CAAC;QAED,kBAAkB;QAClB,IAAI,OAAO,CAAC,GAAG,KAAK,OAAO,CAAC,GAAG,EAAE,gBAAgB,EAAE,CAAC;YAClD,MAAM,IAAI,8BAAqB,CAC7B,6BAA6B,IAAI,CAAC,cAAc,UAAU,OAAO,CAAC,GAAG,EAAE,CACxE,CAAC;QACJ,CAAC;QAED,8BAA8B;QAC9B,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC;YACjB,MAAM,IAAI,8BAAqB,CAAC,4BAA4B,CAAC,CAAC;QAChE,CAAC;QAED,sBAAsB;QACtB,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;QAE1C,IAAI,OAAO,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,GAAG,GAAG,EAAE,CAAC;YACrC,MAAM,IAAI,8BAAqB,CAAC,eAAe,CAAC,CAAC;QACnD,CAAC;QAED,IAAI,OAAO,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,GAAG,GAAG,EAAE,CAAC;YACrC,MAAM,IAAI,8BAAqB,CAAC,qBAAqB,CAAC,CAAC;QACzD,CAAC;QAED,mCAAmC;QACnC,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC;YAChB,IAAI,CAAC;gBACH,MAAM,KAAK,GAAG,MAAM,0BAAsB,CAAC,WAAW,EAAE,CAAC;gBAEzD,MAAM,aAAa,GAAG,iBAAiB,OAAO,CAAC,GAAG,EAAE,CAAC;gBACrD,MAAM,SAAS,GAAG,MAAM,KAAK,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC;gBAEjD,IAAI,SAAS,EAAE,CAAC;oBACd,MAAM,IAAI,8BAAqB,CAAC,wBAAwB,CAAC,CAAC;gBAC5D,CAAC;YACH,CAAC;YAAC,OAAO,KAAc,EAAE,CAAC;gBACxB,MAAM,YAAY,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;gBAC5E,MAAM,IAAI,8BAAqB,CAAC,gBAAgB,YAAY,EAAE,CAAC,CAAC;YAClE,CAAC;QACH,CAAC;QAED,4BAA4B;QAC5B,IAAI,QAAQ,EAAE,CAAC;YACb,MAAM,IAAI,CAAC,mBAAmB,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;QACpD,CAAC;QAED,MAAM,IAAI,GAAG;YACX,IAAI,EAAE,OAAO,CAAC,GAAG,CAAC,IAAI;YACtB,KAAK,EAAE,OAAO,CAAC,GAAG,CAAC,KAAK;YACxB,IAAI,EAAE,OAAO,CAAC,GAAG,CAAC,IAAI;SACvB,CAAC;QAEF,qDAAqD;QACrD,OAAO,IAAI,CAAC;IACd,CAAC;CACF,CAAA;AAhZY,kCAAW;sBAAX,WAAW;IADvB,IAAA,mBAAU,GAAE;;GACA,WAAW,CAgZvB"}

package/dist/test/middleware.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=middleware.test.d.ts.map

package/dist/test/middleware.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"middleware.test.d.ts","sourceRoot":"","sources":["../../src/test/middleware.test.ts"],"names":[],"mappings":""}