@webex/webex-core 2.59.1-next.0 → 2.59.2

package/dist/lib/credentials/credentials.js

@@ -20,12 +20,15 @@ var _now = _interopRequireDefault(require("@babel/runtime-corejs2/core-js/date/n
 var _getOwnPropertyDescriptor = _interopRequireDefault(require("@babel/runtime-corejs2/core-js/object/get-own-property-descriptor"));
 var _defineProperty2 = _interopRequireDefault(require("@babel/runtime-corejs2/helpers/defineProperty"));
 var _applyDecoratedDescriptor2 = _interopRequireDefault(require("@babel/runtime-corejs2/helpers/applyDecoratedDescriptor"));
+var _isEmpty2 = _interopRequireDefault(require("lodash/isEmpty"));
+var _isObject2 = _interopRequireDefault(require("lodash/isObject"));
+var _cloneDeep2 = _interopRequireDefault(require("lodash/cloneDeep"));
+var _clone2 = _interopRequireDefault(require("lodash/clone"));
 var _querystring = _interopRequireDefault(require("querystring"));
 var _url = _interopRequireDefault(require("url"));
 var _jsonwebtoken = _interopRequireDefault(require("jsonwebtoken"));
 var _common = require("@webex/common");
 var _commonTimers = require("@webex/common-timers");
-var _lodash = require("lodash");
 var _webexPlugin = _interopRequireDefault(require("../webex-plugin"));
 var _decorators = require("../storage/decorators");
 var _grantErrors = _interopRequireDefault(require("./grant-errors"));
@@ -106,19 +109,19 @@ var Credentials = _webexPlugin.default.extend((_dec = (0, _common.oneFlight)({
       clientType: 'public'
     };
     /* eslint-disable camelcase */
-    if (options.state && !(0, _lodash.isObject)(options.state)) {
+    if (options.state && !(0, _isObject2.default)(options.state)) {
       throw new Error('if specified, `options.state` must be an object');
     }
     options.client_id = this.config.client_id;
     options.redirect_uri = this.config.redirect_uri;
     options.scope = this.config.scope;
-    options = (0, _lodash.cloneDeep)(options);
+    options = (0, _cloneDeep2.default)(options);
     if (!options.response_type) {
       options.response_type = options.clientType === 'public' ? 'token' : 'code';
     }
     (0, _deleteProperty.default)(options, 'clientType');
     if (options.state) {
-      if (!(0, _lodash.isEmpty)(options.state)) {
+      if (!(0, _isEmpty2.default)(options.state)) {
         options.state = _common.base64.toBase64Url((0, _stringify.default)(options.state));
       } else {
         delete options.state;
@@ -226,7 +229,7 @@ var Credentials = _webexPlugin.default.extend((_dec = (0, _common.oneFlight)({
     var _this = this;
     // HACK to deal with the fact that AmpersandState#dataTypes#set is a pure
     // function.
-    this._dataTypes = (0, _lodash.cloneDeep)(this._dataTypes);
+    this._dataTypes = (0, _cloneDeep2.default)(this._dataTypes);
     (0, _keys.default)(this._dataTypes).forEach(function (key) {
       if (_this._dataTypes[key].set) {
         _this._dataTypes[key].set = _this._dataTypes[key].set.bind(_this);
@@ -437,7 +440,7 @@ var Credentials = _webexPlugin.default.extend((_dec = (0, _common.oneFlight)({
     var _this6 = this;
     this.logger.info('credentials: refresh requested');
     var supertoken = this.supertoken;
-    var tokens = (0, _lodash.clone)(this.userTokens.models);
+    var tokens = (0, _clone2.default)(this.userTokens.models);
 
     // This is kind of a leaky abstraction, since it relies on the authorization
     // plugin, but the only alternatives I see are
@@ -516,7 +519,7 @@ var Credentials = _webexPlugin.default.extend((_dec = (0, _common.oneFlight)({
       this.refresh();
     }
   },
-  version: "modern"
+  version: "2.59.2"
 }, ((0, _applyDecoratedDescriptor2.default)(_obj, "getUserToken", [_dec, _dec2], (0, _getOwnPropertyDescriptor.default)(_obj, "getUserToken"), _obj), (0, _applyDecoratedDescriptor2.default)(_obj, "initialize", [_dec3], (0, _getOwnPropertyDescriptor.default)(_obj, "initialize"), _obj), (0, _applyDecoratedDescriptor2.default)(_obj, "invalidate", [_common.oneFlight, _dec4], (0, _getOwnPropertyDescriptor.default)(_obj, "invalidate"), _obj), (0, _applyDecoratedDescriptor2.default)(_obj, "refresh", [_common.oneFlight, _dec5, _dec6], (0, _getOwnPropertyDescriptor.default)(_obj, "refresh"), _obj)), _obj)));
 var _default = Credentials;
 exports.default = _default;

package/dist/lib/credentials/credentials.js.map

@@ -1 +1 @@
-{"version":3,"names":["_querystring","_interopRequireDefault","require","_url","_jsonwebtoken","_common","_commonTimers","_lodash","_webexPlugin","_decorators","_grantErrors","_scope","_token","_tokenCollection","_dec","_dec2","_dec3","_dec4","_dec5","_dec6","_obj","ownKeys","object","enumerableOnly","keys","_Object$keys2","_Object$getOwnPropertySymbols","symbols","filter","sym","_Object$getOwnPropertyDescriptor2","enumerable","push","apply","_objectSpread","target","i","arguments","length","source","Object","forEach","key","_defineProperty2","default","_Object$getOwnPropertyDescriptors","_Object$defineProperties","_Object$defineProperty","Credentials","WebexPlugin","extend","oneFlight","keyFactory","scope","waitForValue","persist","whileInFlight","collections","userTokens","TokenCollection","dataTypes","token","makeStateDataType","Token","dataType","derived","canAuthorize","deps","fn","Boolean","supertoken","canRefresh","config","jwtRefreshCallback","props","prop","namespace","session","isRefreshing","type","ready","refreshTimer","undefined","buildLoginUrl","options","clientType","state","isObject","Error","client_id","redirect_uri","cloneDeep","response_type","_deleteProperty","isEmpty","base64","toBase64Url","_stringify","concat","authorizeUrl","querystring","stringify","getOrgId","logger","info","extractOrgIdFromJWT","access_token","e","_this$supertoken","extractOrgIdFromUserToken","f","decodedJWT","jwt","decode","realm","fields","split","buildLogoutUrl","logoutUrl","cisService","service","goto","calcRefreshTimeout","expiration","Math","floor","random","constructor","_this","_dataTypes","_keys","set","bind","_len","args","Array","_key","_apply","downscope","_this2","catch","reason","trace","_promise","resolve","serialize","parent","getClientToken","_this3","webex","request","method","uri","tokenUrl","form","grant_type","self_contained_token","auth","user","pass","client_secret","sendImmediately","shouldRefreshAccessToken","then","res","body","statusCode","reject","ErrorConstructor","grantErrors","select","error","_res","getUserToken","_this4","once","filterScope","sortScope","get","tap","t","add","initialize","attrs","_this5","authorization","expires","scheduleRefresh","prototype","listenToOnce","authorizationString","parsed","url","parse","query","href","substr","indexOf","invalidate","clearTimeout","unset","err","warn","models","remove","refresh","_this6","tokens","clone","requestAccessTokenFromJwt","internal","services","updateCredentialsConfig","st","all","map","revoke","InvalidRequestError","trigger","_this7","expiresIn","_now","timeoutLength","safeSetTimeout","version","_applyDecoratedDescriptor2","_getOwnPropertyDescriptor","_default","exports"],"sources":["credentials.js"],"sourcesContent":["/*!\n * Copyright (c) 2015-2020 Cisco Systems, Inc. See LICENSE file.\n */\n\nimport querystring from 'querystring';\nimport url from 'url';\n\nimport jwt from 'jsonwebtoken';\nimport {base64, makeStateDataType, oneFlight, tap, whileInFlight} from '@webex/common';\nimport {safeSetTimeout} from '@webex/common-timers';\nimport {clone, cloneDeep, isObject, isEmpty} from 'lodash';\n\nimport WebexPlugin from '../webex-plugin';\nimport {persist, waitForValue} from '../storage/decorators';\n\nimport grantErrors from './grant-errors';\nimport {filterScope, sortScope} from './scope';\nimport Token from './token';\nimport TokenCollection from './token-collection';\n\n/**\n * @class\n */\nconst Credentials = WebexPlugin.extend({\n  collections: {\n    userTokens: TokenCollection,\n  },\n\n  dataTypes: {\n    token: makeStateDataType(Token, 'token').dataType,\n  },\n\n  derived: {\n    canAuthorize: {\n      deps: ['supertoken', 'supertoken.canAuthorize', 'canRefresh'],\n      fn() {\n        return Boolean((this.supertoken && this.supertoken.canAuthorize) || this.canRefresh);\n      },\n    },\n    canRefresh: {\n      deps: ['supertoken', 'supertoken.canRefresh'],\n      fn() {\n        // If we're operating in JWT mode, we have to delegate to the consumer\n        if (this.config.jwtRefreshCallback) {\n          return true;\n        }\n\n        return Boolean(this.supertoken && this.supertoken.canRefresh);\n      },\n    },\n  },\n\n  props: {\n    supertoken: makeStateDataType(Token, 'token').prop,\n  },\n\n  namespace: 'Credentials',\n\n  session: {\n    isRefreshing: {\n      default: false,\n      type: 'boolean',\n    },\n    /**\n     * Becomes `true` once the {@link loaded} event fires.\n     * @see {@link WebexPlugin#ready}\n     * @instance\n     * @memberof Credentials\n     * @type {boolean}\n     */\n    ready: {\n      default: false,\n      type: 'boolean',\n    },\n    refreshTimer: {\n      default: undefined,\n      type: 'any',\n    },\n  },\n\n  /**\n   * Generates an OAuth Login URL. Prefers the api.ciscospark.com proxy if the\n   * instance is initialize with an authorizatUrl, but fallsback to idbroker\n   * as the base otherwise.\n   * @instance\n   * @memberof Credentials\n   * @param {Object} [options={}]\n   * @returns {string}\n   */\n  buildLoginUrl(options = {clientType: 'public'}) {\n    /* eslint-disable camelcase */\n    if (options.state && !isObject(options.state)) {\n      throw new Error('if specified, `options.state` must be an object');\n    }\n\n    options.client_id = this.config.client_id;\n    options.redirect_uri = this.config.redirect_uri;\n    options.scope = this.config.scope;\n\n    options = cloneDeep(options);\n\n    if (!options.response_type) {\n      options.response_type = options.clientType === 'public' ? 'token' : 'code';\n    }\n    Reflect.deleteProperty(options, 'clientType');\n\n    if (options.state) {\n      if (!isEmpty(options.state)) {\n        options.state = base64.toBase64Url(JSON.stringify(options.state));\n      } else {\n        delete options.state;\n      }\n    }\n\n    return `${this.config.authorizeUrl}?${querystring.stringify(options)}`;\n    /* eslint-enable camelcase */\n  },\n\n  /**\n   * Get the determined OrgId.\n   *\n   * @throws {Error} - If the OrgId could not be determined.\n   * @returns {string} - The OrgId.\n   */\n  getOrgId() {\n    this.logger.info('credentials: attempting to retrieve the OrgId from token');\n\n    try {\n      // Attempt to extract a client-authenticated token's OrgId.\n      this.logger.info('credentials: trying to extract OrgId from JWT');\n\n      return this.extractOrgIdFromJWT(this.supertoken.access_token);\n    } catch (e) {\n      // Attempt to extract a user token's OrgId.\n      this.logger.info('credentials: could not extract OrgId from JWT');\n      this.logger.info('credentials: attempting to extract OrgId from user token');\n\n      try {\n        return this.extractOrgIdFromUserToken(this.supertoken?.access_token);\n      } catch (f) {\n        this.logger.info('credentials: could not extract OrgId from user token');\n        throw f;\n      }\n    }\n  },\n\n  /**\n   * Extract the OrgId [realm] from a provided JWT.\n   *\n   * @private\n   * @param {string} token - The JWT to extract the OrgId from.\n   * @throws {Error} - If the token does not pass JWT general/realm validation.\n   * @returns {string} - The OrgId.\n   */\n  extractOrgIdFromJWT(token = '') {\n    // Decoded the provided token.\n    const decodedJWT = jwt.decode(token);\n\n    // Validate that the provided token is a JWT.\n    if (!decodedJWT) {\n      throw new Error('unable to extract the OrgId from the provided JWT');\n    }\n\n    if (!decodedJWT.realm) {\n      throw new Error('the provided JWT does not contain an OrgId');\n    }\n\n    // Return the OrgId [realm].\n    return decodedJWT.realm;\n  },\n\n  /**\n   * Extract the OrgId [realm] from a provided user token.\n   *\n   * @private\n   * @param {string} token - The user token to extract the OrgId from.\n   * @throws {Error} - Will throw an error if the provided token is invalid.\n   * @returns {string} - The OrgId.\n   */\n  extractOrgIdFromUserToken(token = '') {\n    // Split the provided token into subsections.\n    const fields = token.split('_');\n\n    // Validate that the provided token has the proper amount of sections.\n    if (fields.length !== 3) {\n      throw new Error('the provided token is not a valid format');\n    }\n\n    // Return the token section that contains the OrgId.\n    return fields[2];\n  },\n\n  /**\n   * Generates a Logout URL\n   * @instance\n   * @memberof Credentials\n   * @param {Object} [options={}]\n   * @returns {[type]}\n   */\n  buildLogoutUrl(options = {}) {\n    return `${this.config.logoutUrl}?${querystring.stringify({\n      cisService: this.config.service,\n      goto: this.config.redirect_uri,\n      ...options,\n    })}`;\n  },\n\n  /**\n   * Generates a number between 60% - 90% of expired value\n   * @instance\n   * @memberof Credentials\n   * @param {number} expiration\n   * @private\n   * @returns {number}\n   */\n  calcRefreshTimeout(expiration) {\n    return Math.floor(((Math.floor(Math.random() * 4) + 6) / 10) * expiration);\n  },\n\n  constructor(...args) {\n    // HACK to deal with the fact that AmpersandState#dataTypes#set is a pure\n    // function.\n    this._dataTypes = cloneDeep(this._dataTypes);\n    Object.keys(this._dataTypes).forEach((key) => {\n      if (this._dataTypes[key].set) {\n        this._dataTypes[key].set = this._dataTypes[key].set.bind(this);\n      }\n    });\n    // END HACK\n    Reflect.apply(WebexPlugin, this, args);\n  },\n\n  /**\n   * Downscopes a token\n   * @instance\n   * @memberof Credentials\n   * @param {string} scope\n   * @private\n   * @returns {Promise<Token>}\n   */\n  downscope(scope) {\n    return this.supertoken.downscope(scope).catch((reason) => {\n      this.logger.trace(`credentials: failed to downscope supertoken to ${scope}`, reason);\n      this.logger.trace(`credentials: falling back to supertoken for ${scope}`);\n\n      return Promise.resolve(new Token({scope, ...this.supertoken.serialize()}), {\n        parent: this,\n      });\n    });\n  },\n\n  /**\n   * Requests a client credentials grant and returns the token. Given the\n   * limited use for such tokens as this time, this method does not cache its\n   * token.\n   * @instance\n   * @memberof Credentials\n   * @param {Object} options\n   * @returns {Promise<Token>}\n   */\n  getClientToken(options = {}) {\n    this.logger.info('credentials: requesting client credentials grant');\n\n    return this.webex\n      .request({\n        /* eslint-disable camelcase */\n        method: 'POST',\n        uri: options.uri || this.config.tokenUrl,\n        form: {\n          grant_type: 'client_credentials',\n          scope: options.scope || 'webexsquare:admin',\n          self_contained_token: true,\n        },\n        auth: {\n          user: this.config.client_id,\n          pass: this.config.client_secret,\n          sendImmediately: true,\n        },\n        shouldRefreshAccessToken: false,\n        /* eslint-enable camelcase */\n      })\n      .then((res) => new Token(res.body, {parent: this}))\n      .catch((res) => {\n        if (res.statusCode !== 400) {\n          return Promise.reject(res);\n        }\n\n        const ErrorConstructor = grantErrors.select(res.body.error);\n\n        return Promise.reject(new ErrorConstructor(res._res || res));\n      });\n  },\n\n  @oneFlight({keyFactory: (scope) => scope})\n  @waitForValue('@')\n  /**\n   * Resolves with a token with the specified scopes. If no scope is specified,\n   * defaults to omit(webex.credentials.scope, 'spark:kms'). If no such token is\n   * available, downscopes the supertoken to that scope.\n   * @instance\n   * @memberof Credentials\n   * @param {string} scope\n   * @returns {Promise<Token>}\n   */\n  getUserToken(scope) {\n    return Promise.resolve(\n      !this.isRefreshing ||\n        new Promise((resolve) => {\n          this.logger.info(\n            'credentials: token refresh inflight; delaying getUserToken until refresh completes'\n          );\n          this.once('change:isRefreshing', () => {\n            this.logger.info('credentials: token refresh complete; reinvoking getUserToken');\n            resolve();\n          });\n        })\n    ).then(() => {\n      if (!this.canAuthorize) {\n        this.logger.info('credentials: cannot produce an access token from current state');\n\n        return Promise.reject(new Error('Current state cannot produce an access token'));\n      }\n\n      if (!scope) {\n        scope = filterScope('spark:kms', this.config.scope);\n      }\n\n      scope = sortScope(scope);\n\n      if (scope === sortScope(this.config.scope)) {\n        return Promise.resolve(this.supertoken);\n      }\n\n      const token = this.userTokens.get(scope);\n\n      // we should also check for the token.access_token since token object does\n      // not get cleared on unsetting while logging out.\n      if (!token || !token.access_token) {\n        return this.downscope(scope).then(tap((t) => this.userTokens.add(t)));\n      }\n\n      return Promise.resolve(token);\n    });\n  },\n\n  @persist('@')\n  /**\n   * Initializer\n   * @instance\n   * @memberof Credentials\n   * @param {Object} attrs\n   * @param {Object} options\n   * @private\n   * @returns {Credentials}\n   */\n  initialize(attrs, options) {\n    if (attrs) {\n      if (typeof attrs === 'string') {\n        this.supertoken = attrs;\n      }\n\n      if (attrs.access_token) {\n        this.supertoken = attrs;\n      }\n\n      if (attrs.authorization) {\n        if (attrs.authorization.supertoken) {\n          this.supertoken = attrs.authorization.supertoken;\n        } else {\n          this.supertoken = attrs.authorization;\n        }\n      }\n\n      // schedule refresh\n      if (this.supertoken && this.supertoken.expires) {\n        this.scheduleRefresh(this.supertoken.expires);\n      }\n    }\n\n    Reflect.apply(WebexPlugin.prototype.initialize, this, [attrs, options]);\n\n    this.listenToOnce(this.parent, 'change:config', () => {\n      if (this.config.authorizationString) {\n        const parsed = url.parse(this.config.authorizationString, true);\n\n        /* eslint-disable camelcase */\n        this.config.client_id = parsed.query.client_id;\n        this.config.redirect_uri = parsed.query.redirect_uri;\n        this.config.scope = parsed.query.scope;\n        this.config.authorizeUrl = parsed.href.substr(0, parsed.href.indexOf('?'));\n        /* eslint-enable camelcase */\n      }\n    });\n\n    this.webex.once('loaded', () => {\n      this.ready = true;\n    });\n  },\n\n  @oneFlight\n  @waitForValue('@')\n  /**\n   * Clears all tokens from store them from the stores.\n   *\n   * This is no longer quite the right name for this method, but all of the\n   * alternatives I'm coming up with are already taken.\n   * @instance\n   * @memberof Credentials\n   * @returns {Promise}\n   */\n  invalidate() {\n    this.logger.info('credentials: invalidating tokens');\n\n    // clear refresh timer\n    if (this.refreshTimer) {\n      clearTimeout(this.refreshTimer);\n      this.unset('refreshTimer');\n    }\n\n    try {\n      this.unset('supertoken');\n    } catch (err) {\n      this.logger.warn('credentials: failed to clear supertoken', err);\n    }\n\n    while (this.userTokens.models.length) {\n      try {\n        this.userTokens.remove(this.userTokens.models[0]);\n      } catch (err) {\n        this.logger.warn('credentials: failed to remove user token', err);\n      }\n    }\n\n    this.logger.info('credentials: finished removing tokens');\n\n    // Return a promise to give the storage layer a tick or two to clear\n    // localStorage\n    return Promise.resolve();\n  },\n\n  @oneFlight\n  @whileInFlight('isRefreshing')\n  @waitForValue('@')\n  /**\n   * Removes the supertoken and child tokens, then refreshes the supertoken;\n   * subsequent calls to {@link Credentials#getUserToken()} will re-downscope\n   * child tokens. Enqueus revocation of previous previousTokens. Yes, that's\n   * the correct number of \"previous\"es.\n   * @instance\n   * @memberof Credentials\n   * @returns {Promise}\n   */\n  refresh() {\n    this.logger.info('credentials: refresh requested');\n\n    const {supertoken} = this;\n    const tokens = clone(this.userTokens.models);\n\n    // This is kind of a leaky abstraction, since it relies on the authorization\n    // plugin, but the only alternatives I see are\n    // 1. put all JWT support in core\n    // 2. have separate jwt and non-jwt auth plugins\n    // while I like #2 from a code simplicity standpoint, the third-party DX\n    // isn't great\n    if (this.config.jwtRefreshCallback) {\n      return (\n        this.config\n          .jwtRefreshCallback(this.webex)\n          // eslint-disable-next-line no-shadow\n          .then((jwt) => this.webex.authorization.requestAccessTokenFromJwt({jwt}))\n      );\n    }\n\n    if (this.webex.internal.services) {\n      this.webex.internal.services.updateCredentialsConfig();\n    }\n\n    return supertoken\n      .refresh()\n      .then((st) => {\n        // clear refresh timer\n        if (this.refreshTimer) {\n          clearTimeout(this.refreshTimer);\n          this.unset('refreshTimer');\n        }\n        this.supertoken = st;\n\n        return Promise.all(\n          tokens.map((token) =>\n            this.downscope(token.scope)\n              // eslint-disable-next-line max-nested-callbacks\n              .then((t) => {\n                this.logger.info(`credentials: revoking token for ${token.scope}`);\n\n                return token\n                  .revoke()\n                  .catch((err) => {\n                    this.logger.warn('credentials: failed to revoke user token', err);\n                  })\n                  .then(() => {\n                    this.userTokens.remove(token.scope);\n                    this.userTokens.add(t);\n                  });\n              })\n          )\n        );\n      })\n      .then(() => {\n        this.scheduleRefresh(this.supertoken.expires);\n      })\n      .catch((error) => {\n        const {InvalidRequestError} = grantErrors;\n\n        if (error instanceof InvalidRequestError) {\n          // Error: The refresh token provided is expired, revoked, malformed, or invalid. Hence emit an event to the client, an opportunity to logout.\n          this.unset('supertoken');\n          while (this.userTokens.models.length) {\n            try {\n              this.userTokens.remove(this.userTokens.models[0]);\n            } catch (err) {\n              this.logger.warn('credentials: failed to remove user token', err);\n            }\n          }\n          this.webex.trigger('client:InvalidRequestError');\n        }\n\n        return Promise.reject(error);\n      });\n  },\n\n  /**\n   * Schedules a token refresh or refreshes the token if token has expired\n   * @instance\n   * @memberof Credentials\n   * @param {number} expires\n   * @private\n   * @returns {undefined}\n   */\n  scheduleRefresh(expires) {\n    const expiresIn = expires - Date.now();\n\n    if (expiresIn > 0) {\n      const timeoutLength = this.calcRefreshTimeout(expiresIn);\n\n      this.refreshTimer = safeSetTimeout(() => this.refresh(), timeoutLength);\n    } else {\n      this.refresh();\n    }\n  },\n});\n\nexport default Credentials;\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;AAIA,IAAAA,YAAA,GAAAC,sBAAA,CAAAC,OAAA;AACA,IAAAC,IAAA,GAAAF,sBAAA,CAAAC,OAAA;AAEA,IAAAE,aAAA,GAAAH,sBAAA,CAAAC,OAAA;AACA,IAAAG,OAAA,GAAAH,OAAA;AACA,IAAAI,aAAA,GAAAJ,OAAA;AACA,IAAAK,OAAA,GAAAL,OAAA;AAEA,IAAAM,YAAA,GAAAP,sBAAA,CAAAC,OAAA;AACA,IAAAO,WAAA,GAAAP,OAAA;AAEA,IAAAQ,YAAA,GAAAT,sBAAA,CAAAC,OAAA;AACA,IAAAS,MAAA,GAAAT,OAAA;AACA,IAAAU,MAAA,GAAAX,sBAAA,CAAAC,OAAA;AACA,IAAAW,gBAAA,GAAAZ,sBAAA,CAAAC,OAAA;AAAiD,IAAAY,IAAA,EAAAC,KAAA,EAAAC,KAAA,EAAAC,KAAA,EAAAC,KAAA,EAAAC,KAAA,EAAAC,IAAA;AAAA,SAAAC,QAAAC,MAAA,EAAAC,cAAA,QAAAC,IAAA,GAAAC,aAAA,CAAAH,MAAA,OAAAI,6BAAA,QAAAC,OAAA,GAAAD,6BAAA,CAAAJ,MAAA,GAAAC,cAAA,KAAAI,OAAA,GAAAA,OAAA,CAAAC,MAAA,WAAAC,GAAA,WAAAC,iCAAA,CAAAR,MAAA,EAAAO,GAAA,EAAAE,UAAA,OAAAP,IAAA,CAAAQ,IAAA,CAAAC,KAAA,CAAAT,IAAA,EAAAG,OAAA,YAAAH,IAAA;AAAA,SAAAU,cAAAC,MAAA,aAAAC,CAAA,MAAAA,CAAA,GAAAC,SAAA,CAAAC,MAAA,EAAAF,CAAA,UAAAG,MAAA,WAAAF,SAAA,CAAAD,CAAA,IAAAC,SAAA,CAAAD,CAAA,QAAAA,CAAA,OAAAf,OAAA,CAAAmB,MAAA,CAAAD,MAAA,OAAAE,OAAA,WAAAC,GAAA,QAAAC,gBAAA,CAAAC,OAAA,EAAAT,MAAA,EAAAO,GAAA,EAAAH,MAAA,CAAAG,GAAA,SAAAG,iCAAA,GAAAC,wBAAA,CAAAX,MAAA,EAAAU,iCAAA,CAAAN,MAAA,KAAAlB,OAAA,CAAAmB,MAAA,CAAAD,MAAA,GAAAE,OAAA,WAAAC,GAAA,IAAAK,sBAAA,CAAAZ,MAAA,EAAAO,GAAA,EAAAZ,iCAAA,CAAAS,MAAA,EAAAG,GAAA,iBAAAP,MAAA;AAEjD;AACA;AACA;AACA,IAAMa,WAAW,GAAGC,oBAAW,CAACC,MAAM,EAAApC,IAAA,GA8QnC,IAAAqC,iBAAS,EAAC;EAACC,UAAU,EAAE,SAAAA,WAACC,KAAK;IAAA,OAAKA,KAAK;EAAA;AAAA,CAAC,CAAC,EAAAtC,KAAA,GACzC,IAAAuC,wBAAY,EAAC,GAAG,CAAC,EAAAtC,KAAA,GAmDjB,IAAAuC,mBAAO,EAAC,GAAG,CAAC,EAAAtC,KAAA,GAuDZ,IAAAqC,wBAAY,EAAC,GAAG,CAAC,EAAApC,KAAA,GAyCjB,IAAAsC,qBAAa,EAAC,cAAc,CAAC,EAAArC,KAAA,GAC7B,IAAAmC,wBAAY,EAAC,GAAG,CAAC,GAAAlC,IAAA,GAnamB;EACrCqC,WAAW,EAAE;IACXC,UAAU,EAAEC;EACd,CAAC;EAEDC,SAAS,EAAE;IACTC,KAAK,EAAE,IAAAC,yBAAiB,EAACC,cAAK,EAAE,OAAO,CAAC,CAACC;EAC3C,CAAC;EAEDC,OAAO,EAAE;IACPC,YAAY,EAAE;MACZC,IAAI,EAAE,CAAC,YAAY,EAAE,yBAAyB,EAAE,YAAY,CAAC;MAC7DC,EAAE,WAAAA,GAAA,EAAG;QACH,OAAOC,OAAO,CAAE,IAAI,CAACC,UAAU,IAAI,IAAI,CAACA,UAAU,CAACJ,YAAY,IAAK,IAAI,CAACK,UAAU,CAAC;MACtF;IACF,CAAC;IACDA,UAAU,EAAE;MACVJ,IAAI,EAAE,CAAC,YAAY,EAAE,uBAAuB,CAAC;MAC7CC,EAAE,WAAAA,GAAA,EAAG;QACH;QACA,IAAI,IAAI,CAACI,MAAM,CAACC,kBAAkB,EAAE;UAClC,OAAO,IAAI;QACb;QAEA,OAAOJ,OAAO,CAAC,IAAI,CAACC,UAAU,IAAI,IAAI,CAACA,UAAU,CAACC,UAAU,CAAC;MAC/D;IACF;EACF,CAAC;EAEDG,KAAK,EAAE;IACLJ,UAAU,EAAE,IAAAR,yBAAiB,EAACC,cAAK,EAAE,OAAO,CAAC,CAACY;EAChD,CAAC;EAEDC,SAAS,EAAE,aAAa;EAExBC,OAAO,EAAE;IACPC,YAAY,EAAE;MACZlC,OAAO,EAAE,KAAK;MACdmC,IAAI,EAAE;IACR,CAAC;IACD;AACJ;AACA;AACA;AACA;AACA;AACA;IACIC,KAAK,EAAE;MACLpC,OAAO,EAAE,KAAK;MACdmC,IAAI,EAAE;IACR,CAAC;IACDE,YAAY,EAAE;MACZrC,OAAO,EAAEsC,SAAS;MAClBH,IAAI,EAAE;IACR;EACF,CAAC;EAED;AACF;AACA;AACA;AACA;AACA;AACA;AACA;AACA;EACEI,aAAa,WAAAA,cAAA,EAAmC;IAAA,IAAlCC,OAAO,GAAA/C,SAAA,CAAAC,MAAA,QAAAD,SAAA,QAAA6C,SAAA,GAAA7C,SAAA,MAAG;MAACgD,UAAU,EAAE;IAAQ,CAAC;IAC5C;IACA,IAAID,OAAO,CAACE,KAAK,IAAI,CAAC,IAAAC,gBAAQ,EAACH,OAAO,CAACE,KAAK,CAAC,EAAE;MAC7C,MAAM,IAAIE,KAAK,CAAC,iDAAiD,CAAC;IACpE;IAEAJ,OAAO,CAACK,SAAS,GAAG,IAAI,CAACjB,MAAM,CAACiB,SAAS;IACzCL,OAAO,CAACM,YAAY,GAAG,IAAI,CAAClB,MAAM,CAACkB,YAAY;IAC/CN,OAAO,CAAC/B,KAAK,GAAG,IAAI,CAACmB,MAAM,CAACnB,KAAK;IAEjC+B,OAAO,GAAG,IAAAO,iBAAS,EAACP,OAAO,CAAC;IAE5B,IAAI,CAACA,OAAO,CAACQ,aAAa,EAAE;MAC1BR,OAAO,CAACQ,aAAa,GAAGR,OAAO,CAACC,UAAU,KAAK,QAAQ,GAAG,OAAO,GAAG,MAAM;IAC5E;IACA,IAAAQ,eAAA,CAAAjD,OAAA,EAAuBwC,OAAO,EAAE,YAAY,CAAC;IAE7C,IAAIA,OAAO,CAACE,KAAK,EAAE;MACjB,IAAI,CAAC,IAAAQ,eAAO,EAACV,OAAO,CAACE,KAAK,CAAC,EAAE;QAC3BF,OAAO,CAACE,KAAK,GAAGS,cAAM,CAACC,WAAW,CAAC,IAAAC,UAAA,CAAArD,OAAA,EAAewC,OAAO,CAACE,KAAK,CAAC,CAAC;MACnE,CAAC,MAAM;QACL,OAAOF,OAAO,CAACE,KAAK;MACtB;IACF;IAEA,UAAAY,MAAA,CAAU,IAAI,CAAC1B,MAAM,CAAC2B,YAAY,OAAAD,MAAA,CAAIE,oBAAW,CAACC,SAAS,CAACjB,OAAO,CAAC;IACpE;EACF,CAAC;EAED;AACF;AACA;AACA;AACA;AACA;EACEkB,QAAQ,WAAAA,SAAA,EAAG;IACT,IAAI,CAACC,MAAM,CAACC,IAAI,CAAC,0DAA0D,CAAC;IAE5E,IAAI;MACF;MACA,IAAI,CAACD,MAAM,CAACC,IAAI,CAAC,+CAA+C,CAAC;MAEjE,OAAO,IAAI,CAACC,mBAAmB,CAAC,IAAI,CAACnC,UAAU,CAACoC,YAAY,CAAC;IAC/D,CAAC,CAAC,OAAOC,CAAC,EAAE;MACV;MACA,IAAI,CAACJ,MAAM,CAACC,IAAI,CAAC,+CAA+C,CAAC;MACjE,IAAI,CAACD,MAAM,CAACC,IAAI,CAAC,0DAA0D,CAAC;MAE5E,IAAI;QAAA,IAAAI,gBAAA;QACF,OAAO,IAAI,CAACC,yBAAyB,EAAAD,gBAAA,GAAC,IAAI,CAACtC,UAAU,cAAAsC,gBAAA,uBAAfA,gBAAA,CAAiBF,YAAY,CAAC;MACtE,CAAC,CAAC,OAAOI,CAAC,EAAE;QACV,IAAI,CAACP,MAAM,CAACC,IAAI,CAAC,sDAAsD,CAAC;QACxE,MAAMM,CAAC;MACT;IACF;EACF,CAAC;EAED;AACF;AACA;AACA;AACA;AACA;AACA;AACA;EACEL,mBAAmB,WAAAA,oBAAA,EAAa;IAAA,IAAZ5C,KAAK,GAAAxB,SAAA,CAAAC,MAAA,QAAAD,SAAA,QAAA6C,SAAA,GAAA7C,SAAA,MAAG,EAAE;IAC5B;IACA,IAAM0E,UAAU,GAAGC,qBAAG,CAACC,MAAM,CAACpD,KAAK,CAAC;;IAEpC;IACA,IAAI,CAACkD,UAAU,EAAE;MACf,MAAM,IAAIvB,KAAK,CAAC,mDAAmD,CAAC;IACtE;IAEA,IAAI,CAACuB,UAAU,CAACG,KAAK,EAAE;MACrB,MAAM,IAAI1B,KAAK,CAAC,4CAA4C,CAAC;IAC/D;;IAEA;IACA,OAAOuB,UAAU,CAACG,KAAK;EACzB,CAAC;EAED;AACF;AACA;AACA;AACA;AACA;AACA;AACA;EACEL,yBAAyB,WAAAA,0BAAA,EAAa;IAAA,IAAZhD,KAAK,GAAAxB,SAAA,CAAAC,MAAA,QAAAD,SAAA,QAAA6C,SAAA,GAAA7C,SAAA,MAAG,EAAE;IAClC;IACA,IAAM8E,MAAM,GAAGtD,KAAK,CAACuD,KAAK,CAAC,GAAG,CAAC;;IAE/B;IACA,IAAID,MAAM,CAAC7E,MAAM,KAAK,CAAC,EAAE;MACvB,MAAM,IAAIkD,KAAK,CAAC,0CAA0C,CAAC;IAC7D;;IAEA;IACA,OAAO2B,MAAM,CAAC,CAAC,CAAC;EAClB,CAAC;EAED;AACF;AACA;AACA;AACA;AACA;AACA;EACEE,cAAc,WAAAA,eAAA,EAAe;IAAA,IAAdjC,OAAO,GAAA/C,SAAA,CAAAC,MAAA,QAAAD,SAAA,QAAA6C,SAAA,GAAA7C,SAAA,MAAG,CAAC,CAAC;IACzB,UAAA6D,MAAA,CAAU,IAAI,CAAC1B,MAAM,CAAC8C,SAAS,OAAApB,MAAA,CAAIE,oBAAW,CAACC,SAAS,CAAAnE,aAAA;MACtDqF,UAAU,EAAE,IAAI,CAAC/C,MAAM,CAACgD,OAAO;MAC/BC,IAAI,EAAE,IAAI,CAACjD,MAAM,CAACkB;IAAY,GAC3BN,OAAO,EACV;EACJ,CAAC;EAED;AACF;AACA;AACA;AACA;AACA;AACA;AACA;EACEsC,kBAAkB,WAAAA,mBAACC,UAAU,EAAE;IAC7B,OAAOC,IAAI,CAACC,KAAK,CAAE,CAACD,IAAI,CAACC,KAAK,CAACD,IAAI,CAACE,MAAM,EAAE,GAAG,CAAC,CAAC,GAAG,CAAC,IAAI,EAAE,GAAIH,UAAU,CAAC;EAC5E,CAAC;EAEDI,WAAW,WAAAA,YAAA,EAAU;IAAA,IAAAC,KAAA;IACnB;IACA;IACA,IAAI,CAACC,UAAU,GAAG,IAAAtC,iBAAS,EAAC,IAAI,CAACsC,UAAU,CAAC;IAC5C,IAAAC,KAAA,CAAAtF,OAAA,EAAY,IAAI,CAACqF,UAAU,CAAC,CAACxF,OAAO,CAAC,UAACC,GAAG,EAAK;MAC5C,IAAIsF,KAAI,CAACC,UAAU,CAACvF,GAAG,CAAC,CAACyF,GAAG,EAAE;QAC5BH,KAAI,CAACC,UAAU,CAACvF,GAAG,CAAC,CAACyF,GAAG,GAAGH,KAAI,CAACC,UAAU,CAACvF,GAAG,CAAC,CAACyF,GAAG,CAACC,IAAI,CAACJ,KAAI,CAAC;MAChE;IACF,CAAC,CAAC;IACF;IAAA,SAAAK,IAAA,GAAAhG,SAAA,CAAAC,MAAA,EATagG,IAAI,OAAAC,KAAA,CAAAF,IAAA,GAAAG,IAAA,MAAAA,IAAA,GAAAH,IAAA,EAAAG,IAAA;MAAJF,IAAI,CAAAE,IAAA,IAAAnG,SAAA,CAAAmG,IAAA;IAAA;IAUjB,IAAAC,MAAA,CAAA7F,OAAA,EAAcK,oBAAW,EAAE,IAAI,EAAEqF,IAAI,CAAC;EACxC,CAAC;EAED;AACF;AACA;AACA;AACA;AACA;AACA;AACA;EACEI,SAAS,WAAAA,UAACrF,KAAK,EAAE;IAAA,IAAAsF,MAAA;IACf,OAAO,IAAI,CAACrE,UAAU,CAACoE,SAAS,CAACrF,KAAK,CAAC,CAACuF,KAAK,CAAC,UAACC,MAAM,EAAK;MACxDF,MAAI,CAACpC,MAAM,CAACuC,KAAK,mDAAA5C,MAAA,CAAmD7C,KAAK,GAAIwF,MAAM,CAAC;MACpFF,MAAI,CAACpC,MAAM,CAACuC,KAAK,gDAAA5C,MAAA,CAAgD7C,KAAK,EAAG;MAEzE,OAAO0F,QAAA,CAAAnG,OAAA,CAAQoG,OAAO,CAAC,IAAIjF,cAAK,CAAA7B,aAAA;QAAEmB,KAAK,EAALA;MAAK,GAAKsF,MAAI,CAACrE,UAAU,CAAC2E,SAAS,EAAE,EAAE,EAAE;QACzEC,MAAM,EAAEP;MACV,CAAC,CAAC;IACJ,CAAC,CAAC;EACJ,CAAC;EAED;AACF;AACA;AACA;AACA;AACA;AACA;AACA;AACA;EACEQ,cAAc,WAAAA,eAAA,EAAe;IAAA,IAAAC,MAAA;IAAA,IAAdhE,OAAO,GAAA/C,SAAA,CAAAC,MAAA,QAAAD,SAAA,QAAA6C,SAAA,GAAA7C,SAAA,MAAG,CAAC,CAAC;IACzB,IAAI,CAACkE,MAAM,CAACC,IAAI,CAAC,kDAAkD,CAAC;IAEpE,OAAO,IAAI,CAAC6C,KAAK,CACdC,OAAO,CAAC;MACP;MACAC,MAAM,EAAE,MAAM;MACdC,GAAG,EAAEpE,OAAO,CAACoE,GAAG,IAAI,IAAI,CAAChF,MAAM,CAACiF,QAAQ;MACxCC,IAAI,EAAE;QACJC,UAAU,EAAE,oBAAoB;QAChCtG,KAAK,EAAE+B,OAAO,CAAC/B,KAAK,IAAI,mBAAmB;QAC3CuG,oBAAoB,EAAE;MACxB,CAAC;MACDC,IAAI,EAAE;QACJC,IAAI,EAAE,IAAI,CAACtF,MAAM,CAACiB,SAAS;QAC3BsE,IAAI,EAAE,IAAI,CAACvF,MAAM,CAACwF,aAAa;QAC/BC,eAAe,EAAE;MACnB,CAAC;MACDC,wBAAwB,EAAE;MAC1B;IACF,CAAC,CAAC,CACDC,IAAI,CAAC,UAACC,GAAG;MAAA,OAAK,IAAIrG,cAAK,CAACqG,GAAG,CAACC,IAAI,EAAE;QAACnB,MAAM,EAAEE;MAAI,CAAC,CAAC;IAAA,EAAC,CAClDR,KAAK,CAAC,UAACwB,GAAG,EAAK;MACd,IAAIA,GAAG,CAACE,UAAU,KAAK,GAAG,EAAE;QAC1B,OAAOvB,QAAA,CAAAnG,OAAA,CAAQ2H,MAAM,CAACH,GAAG,CAAC;MAC5B;MAEA,IAAMI,gBAAgB,GAAGC,oBAAW,CAACC,MAAM,CAACN,GAAG,CAACC,IAAI,CAACM,KAAK,CAAC;MAE3D,OAAO5B,QAAA,CAAAnG,OAAA,CAAQ2H,MAAM,CAAC,IAAIC,gBAAgB,CAACJ,GAAG,CAACQ,IAAI,IAAIR,GAAG,CAAC,CAAC;IAC9D,CAAC,CAAC;EACN,CAAC;EAID;AACF;AACA;AACA;AACA;AACA;AACA;AACA;AACA;EACES,YAAY,WAAAA,aAACxH,KAAK,EAAE;IAAA,IAAAyH,MAAA;IAClB,OAAO/B,QAAA,CAAAnG,OAAA,CAAQoG,OAAO,CACpB,CAAC,IAAI,CAAClE,YAAY,IAChB,IAAAiE,QAAA,CAAAnG,OAAA,CAAY,UAACoG,OAAO,EAAK;MACvB8B,MAAI,CAACvE,MAAM,CAACC,IAAI,CACd,oFAAoF,CACrF;MACDsE,MAAI,CAACC,IAAI,CAAC,qBAAqB,EAAE,YAAM;QACrCD,MAAI,CAACvE,MAAM,CAACC,IAAI,CAAC,8DAA8D,CAAC;QAChFwC,OAAO,EAAE;MACX,CAAC,CAAC;IACJ,CAAC,CAAC,CACL,CAACmB,IAAI,CAAC,YAAM;MACX,IAAI,CAACW,MAAI,CAAC5G,YAAY,EAAE;QACtB4G,MAAI,CAACvE,MAAM,CAACC,IAAI,CAAC,gEAAgE,CAAC;QAElF,OAAOuC,QAAA,CAAAnG,OAAA,CAAQ2H,MAAM,CAAC,IAAI/E,KAAK,CAAC,8CAA8C,CAAC,CAAC;MAClF;MAEA,IAAI,CAACnC,KAAK,EAAE;QACVA,KAAK,GAAG,IAAA2H,kBAAW,EAAC,WAAW,EAAEF,MAAI,CAACtG,MAAM,CAACnB,KAAK,CAAC;MACrD;MAEAA,KAAK,GAAG,IAAA4H,gBAAS,EAAC5H,KAAK,CAAC;MAExB,IAAIA,KAAK,KAAK,IAAA4H,gBAAS,EAACH,MAAI,CAACtG,MAAM,CAACnB,KAAK,CAAC,EAAE;QAC1C,OAAO0F,QAAA,CAAAnG,OAAA,CAAQoG,OAAO,CAAC8B,MAAI,CAACxG,UAAU,CAAC;MACzC;MAEA,IAAMT,KAAK,GAAGiH,MAAI,CAACpH,UAAU,CAACwH,GAAG,CAAC7H,KAAK,CAAC;;MAExC;MACA;MACA,IAAI,CAACQ,KAAK,IAAI,CAACA,KAAK,CAAC6C,YAAY,EAAE;QACjC,OAAOoE,MAAI,CAACpC,SAAS,CAACrF,KAAK,CAAC,CAAC8G,IAAI,CAAC,IAAAgB,WAAG,EAAC,UAACC,CAAC;UAAA,OAAKN,MAAI,CAACpH,UAAU,CAAC2H,GAAG,CAACD,CAAC,CAAC;QAAA,EAAC,CAAC;MACvE;MAEA,OAAOrC,QAAA,CAAAnG,OAAA,CAAQoG,OAAO,CAACnF,KAAK,CAAC;IAC/B,CAAC,CAAC;EACJ,CAAC;EAGD;AACF;AACA;AACA;AACA;AACA;AACA;AACA;AACA;EACEyH,UAAU,WAAAA,WAACC,KAAK,EAAEnG,OAAO,EAAE;IAAA,IAAAoG,MAAA;IACzB,IAAID,KAAK,EAAE;MACT,IAAI,OAAOA,KAAK,KAAK,QAAQ,EAAE;QAC7B,IAAI,CAACjH,UAAU,GAAGiH,KAAK;MACzB;MAEA,IAAIA,KAAK,CAAC7E,YAAY,EAAE;QACtB,IAAI,CAACpC,UAAU,GAAGiH,KAAK;MACzB;MAEA,IAAIA,KAAK,CAACE,aAAa,EAAE;QACvB,IAAIF,KAAK,CAACE,aAAa,CAACnH,UAAU,EAAE;UAClC,IAAI,CAACA,UAAU,GAAGiH,KAAK,CAACE,aAAa,CAACnH,UAAU;QAClD,CAAC,MAAM;UACL,IAAI,CAACA,UAAU,GAAGiH,KAAK,CAACE,aAAa;QACvC;MACF;;MAEA;MACA,IAAI,IAAI,CAACnH,UAAU,IAAI,IAAI,CAACA,UAAU,CAACoH,OAAO,EAAE;QAC9C,IAAI,CAACC,eAAe,CAAC,IAAI,CAACrH,UAAU,CAACoH,OAAO,CAAC;MAC/C;IACF;IAEA,IAAAjD,MAAA,CAAA7F,OAAA,EAAcK,oBAAW,CAAC2I,SAAS,CAACN,UAAU,EAAE,IAAI,EAAE,CAACC,KAAK,EAAEnG,OAAO,CAAC,CAAC;IAEvE,IAAI,CAACyG,YAAY,CAAC,IAAI,CAAC3C,MAAM,EAAE,eAAe,EAAE,YAAM;MACpD,IAAIsC,MAAI,CAAChH,MAAM,CAACsH,mBAAmB,EAAE;QACnC,IAAMC,MAAM,GAAGC,YAAG,CAACC,KAAK,CAACT,MAAI,CAAChH,MAAM,CAACsH,mBAAmB,EAAE,IAAI,CAAC;;QAE/D;QACAN,MAAI,CAAChH,MAAM,CAACiB,SAAS,GAAGsG,MAAM,CAACG,KAAK,CAACzG,SAAS;QAC9C+F,MAAI,CAAChH,MAAM,CAACkB,YAAY,GAAGqG,MAAM,CAACG,KAAK,CAACxG,YAAY;QACpD8F,MAAI,CAAChH,MAAM,CAACnB,KAAK,GAAG0I,MAAM,CAACG,KAAK,CAAC7I,KAAK;QACtCmI,MAAI,CAAChH,MAAM,CAAC2B,YAAY,GAAG4F,MAAM,CAACI,IAAI,CAACC,MAAM,CAAC,CAAC,EAAEL,MAAM,CAACI,IAAI,CAACE,OAAO,CAAC,GAAG,CAAC,CAAC;QAC1E;MACF;IACF,CAAC,CAAC;;IAEF,IAAI,CAAChD,KAAK,CAAC0B,IAAI,CAAC,QAAQ,EAAE,YAAM;MAC9BS,MAAI,CAACxG,KAAK,GAAG,IAAI;IACnB,CAAC,CAAC;EACJ,CAAC;EAID;AACF;AACA;AACA;AACA;AACA;AACA;AACA;AACA;EACEsH,UAAU,WAAAA,WAAA,EAAG;IACX,IAAI,CAAC/F,MAAM,CAACC,IAAI,CAAC,kCAAkC,CAAC;;IAEpD;IACA,IAAI,IAAI,CAACvB,YAAY,EAAE;MACrBsH,YAAY,CAAC,IAAI,CAACtH,YAAY,CAAC;MAC/B,IAAI,CAACuH,KAAK,CAAC,cAAc,CAAC;IAC5B;IAEA,IAAI;MACF,IAAI,CAACA,KAAK,CAAC,YAAY,CAAC;IAC1B,CAAC,CAAC,OAAOC,GAAG,EAAE;MACZ,IAAI,CAAClG,MAAM,CAACmG,IAAI,CAAC,yCAAyC,EAAED,GAAG,CAAC;IAClE;IAEA,OAAO,IAAI,CAAC/I,UAAU,CAACiJ,MAAM,CAACrK,MAAM,EAAE;MACpC,IAAI;QACF,IAAI,CAACoB,UAAU,CAACkJ,MAAM,CAAC,IAAI,CAAClJ,UAAU,CAACiJ,MAAM,CAAC,CAAC,CAAC,CAAC;MACnD,CAAC,CAAC,OAAOF,GAAG,EAAE;QACZ,IAAI,CAAClG,MAAM,CAACmG,IAAI,CAAC,0CAA0C,EAAED,GAAG,CAAC;MACnE;IACF;IAEA,IAAI,CAAClG,MAAM,CAACC,IAAI,CAAC,uCAAuC,CAAC;;IAEzD;IACA;IACA,OAAOuC,QAAA,CAAAnG,OAAA,CAAQoG,OAAO,EAAE;EAC1B,CAAC;EAKD;AACF;AACA;AACA;AACA;AACA;AACA;AACA;AACA;EACE6D,OAAO,WAAAA,QAAA,EAAG;IAAA,IAAAC,MAAA;IACR,IAAI,CAACvG,MAAM,CAACC,IAAI,CAAC,gCAAgC,CAAC;IAElD,IAAOlC,UAAU,GAAI,IAAI,CAAlBA,UAAU;IACjB,IAAMyI,MAAM,GAAG,IAAAC,aAAK,EAAC,IAAI,CAACtJ,UAAU,CAACiJ,MAAM,CAAC;;IAE5C;IACA;IACA;IACA;IACA;IACA;IACA,IAAI,IAAI,CAACnI,MAAM,CAACC,kBAAkB,EAAE;MAClC,OACE,IAAI,CAACD,MAAM,CACRC,kBAAkB,CAAC,IAAI,CAAC4E,KAAK;MAC9B;MAAA,CACCc,IAAI,CAAC,UAACnD,GAAG;QAAA,OAAK8F,MAAI,CAACzD,KAAK,CAACoC,aAAa,CAACwB,yBAAyB,CAAC;UAACjG,GAAG,EAAHA;QAAG,CAAC,CAAC;MAAA,EAAC;IAE/E;IAEA,IAAI,IAAI,CAACqC,KAAK,CAAC6D,QAAQ,CAACC,QAAQ,EAAE;MAChC,IAAI,CAAC9D,KAAK,CAAC6D,QAAQ,CAACC,QAAQ,CAACC,uBAAuB,EAAE;IACxD;IAEA,OAAO9I,UAAU,CACduI,OAAO,EAAE,CACT1C,IAAI,CAAC,UAACkD,EAAE,EAAK;MACZ;MACA,IAAIP,MAAI,CAAC7H,YAAY,EAAE;QACrBsH,YAAY,CAACO,MAAI,CAAC7H,YAAY,CAAC;QAC/B6H,MAAI,CAACN,KAAK,CAAC,cAAc,CAAC;MAC5B;MACAM,MAAI,CAACxI,UAAU,GAAG+I,EAAE;MAEpB,OAAOtE,QAAA,CAAAnG,OAAA,CAAQ0K,GAAG,CAChBP,MAAM,CAACQ,GAAG,CAAC,UAAC1J,KAAK;QAAA,OACfiJ,MAAI,CAACpE,SAAS,CAAC7E,KAAK,CAACR,KAAK;QACxB;QAAA,CACC8G,IAAI,CAAC,UAACiB,CAAC,EAAK;UACX0B,MAAI,CAACvG,MAAM,CAACC,IAAI,oCAAAN,MAAA,CAAoCrC,KAAK,CAACR,KAAK,EAAG;UAElE,OAAOQ,KAAK,CACT2J,MAAM,EAAE,CACR5E,KAAK,CAAC,UAAC6D,GAAG,EAAK;YACdK,MAAI,CAACvG,MAAM,CAACmG,IAAI,CAAC,0CAA0C,EAAED,GAAG,CAAC;UACnE,CAAC,CAAC,CACDtC,IAAI,CAAC,YAAM;YACV2C,MAAI,CAACpJ,UAAU,CAACkJ,MAAM,CAAC/I,KAAK,CAACR,KAAK,CAAC;YACnCyJ,MAAI,CAACpJ,UAAU,CAAC2H,GAAG,CAACD,CAAC,CAAC;UACxB,CAAC,CAAC;QACN,CAAC,CAAC;MAAA,EACL,CACF;IACH,CAAC,CAAC,CACDjB,IAAI,CAAC,YAAM;MACV2C,MAAI,CAACnB,eAAe,CAACmB,MAAI,CAACxI,UAAU,CAACoH,OAAO,CAAC;IAC/C,CAAC,CAAC,CACD9C,KAAK,CAAC,UAAC+B,KAAK,EAAK;MAChB,IAAO8C,mBAAmB,GAAIhD,oBAAW,CAAlCgD,mBAAmB;MAE1B,IAAI9C,KAAK,YAAY8C,mBAAmB,EAAE;QACxC;QACAX,MAAI,CAACN,KAAK,CAAC,YAAY,CAAC;QACxB,OAAOM,MAAI,CAACpJ,UAAU,CAACiJ,MAAM,CAACrK,MAAM,EAAE;UACpC,IAAI;YACFwK,MAAI,CAACpJ,UAAU,CAACkJ,MAAM,CAACE,MAAI,CAACpJ,UAAU,CAACiJ,MAAM,CAAC,CAAC,CAAC,CAAC;UACnD,CAAC,CAAC,OAAOF,GAAG,EAAE;YACZK,MAAI,CAACvG,MAAM,CAACmG,IAAI,CAAC,0CAA0C,EAAED,GAAG,CAAC;UACnE;QACF;QACAK,MAAI,CAACzD,KAAK,CAACqE,OAAO,CAAC,4BAA4B,CAAC;MAClD;MAEA,OAAO3E,QAAA,CAAAnG,OAAA,CAAQ2H,MAAM,CAACI,KAAK,CAAC;IAC9B,CAAC,CAAC;EACN,CAAC;EAED;AACF;AACA;AACA;AACA;AACA;AACA;AACA;EACEgB,eAAe,WAAAA,gBAACD,OAAO,EAAE;IAAA,IAAAiC,MAAA;IACvB,IAAMC,SAAS,GAAGlC,OAAO,GAAG,IAAAmC,IAAA,CAAAjL,OAAA,GAAU;IAEtC,IAAIgL,SAAS,GAAG,CAAC,EAAE;MACjB,IAAME,aAAa,GAAG,IAAI,CAACpG,kBAAkB,CAACkG,SAAS,CAAC;MAExD,IAAI,CAAC3I,YAAY,GAAG,IAAA8I,4BAAc,EAAC;QAAA,OAAMJ,MAAI,CAACd,OAAO,EAAE;MAAA,GAAEiB,aAAa,CAAC;IACzE,CAAC,MAAM;MACL,IAAI,CAACjB,OAAO,EAAE;IAChB;EACF,CAAC;EAAAmB,OAAA;AACH,CAAC,OAAAC,0BAAA,CAAArL,OAAA,EAAAxB,IAAA,mBAAAN,IAAA,EAAAC,KAAA,OAAAmN,yBAAA,CAAAtL,OAAA,EAAAxB,IAAA,mBAAAA,IAAA,OAAA6M,0BAAA,CAAArL,OAAA,EAAAxB,IAAA,iBAAAJ,KAAA,OAAAkN,yBAAA,CAAAtL,OAAA,EAAAxB,IAAA,iBAAAA,IAAA,OAAA6M,0BAAA,CAAArL,OAAA,EAAAxB,IAAA,iBAtJE+B,iBAAS,EAAAlC,KAAA,OAAAiN,yBAAA,CAAAtL,OAAA,EAAAxB,IAAA,iBAAAA,IAAA,OAAA6M,0BAAA,CAAArL,OAAA,EAAAxB,IAAA,cAyCT+B,iBAAS,EAAAjC,KAAA,EAAAC,KAAA,OAAA+M,yBAAA,CAAAtL,OAAA,EAAAxB,IAAA,cAAAA,IAAA,IAAAA,IAAA,GA6GV;AAAC,IAAA+M,QAAA,GAEYnL,WAAW;AAAAoL,OAAA,CAAAxL,OAAA,GAAAuL,QAAA"}
+{"version":3,"names":["_querystring","_interopRequireDefault","require","_url","_jsonwebtoken","_common","_commonTimers","_webexPlugin","_decorators","_grantErrors","_scope","_token","_tokenCollection","_dec","_dec2","_dec3","_dec4","_dec5","_dec6","_obj","ownKeys","object","enumerableOnly","keys","_Object$keys2","_Object$getOwnPropertySymbols","symbols","filter","sym","_Object$getOwnPropertyDescriptor2","enumerable","push","apply","_objectSpread","target","i","arguments","length","source","Object","forEach","key","_defineProperty2","default","_Object$getOwnPropertyDescriptors","_Object$defineProperties","_Object$defineProperty","Credentials","WebexPlugin","extend","oneFlight","keyFactory","scope","waitForValue","persist","whileInFlight","collections","userTokens","TokenCollection","dataTypes","token","makeStateDataType","Token","dataType","derived","canAuthorize","deps","fn","Boolean","supertoken","canRefresh","config","jwtRefreshCallback","props","prop","namespace","session","isRefreshing","type","ready","refreshTimer","undefined","buildLoginUrl","options","clientType","state","_isObject2","Error","client_id","redirect_uri","_cloneDeep2","response_type","_deleteProperty","_isEmpty2","base64","toBase64Url","_stringify","concat","authorizeUrl","querystring","stringify","getOrgId","logger","info","extractOrgIdFromJWT","access_token","e","_this$supertoken","extractOrgIdFromUserToken","f","decodedJWT","jwt","decode","realm","fields","split","buildLogoutUrl","logoutUrl","cisService","service","goto","calcRefreshTimeout","expiration","Math","floor","random","constructor","_this","_dataTypes","_keys","set","bind","_len","args","Array","_key","_apply","downscope","_this2","catch","reason","trace","_promise","resolve","serialize","parent","getClientToken","_this3","webex","request","method","uri","tokenUrl","form","grant_type","self_contained_token","auth","user","pass","client_secret","sendImmediately","shouldRefreshAccessToken","then","res","body","statusCode","reject","ErrorConstructor","grantErrors","select","error","_res","getUserToken","_this4","once","filterScope","sortScope","get","tap","t","add","initialize","attrs","_this5","authorization","expires","scheduleRefresh","prototype","listenToOnce","authorizationString","parsed","url","parse","query","href","substr","indexOf","invalidate","clearTimeout","unset","err","warn","models","remove","refresh","_this6","tokens","_clone2","requestAccessTokenFromJwt","internal","services","updateCredentialsConfig","st","all","map","revoke","InvalidRequestError","trigger","_this7","expiresIn","_now","timeoutLength","safeSetTimeout","version","_applyDecoratedDescriptor2","_getOwnPropertyDescriptor","_default","exports"],"sources":["credentials.js"],"sourcesContent":["/*!\n * Copyright (c) 2015-2020 Cisco Systems, Inc. See LICENSE file.\n */\n\nimport querystring from 'querystring';\nimport url from 'url';\n\nimport jwt from 'jsonwebtoken';\nimport {base64, makeStateDataType, oneFlight, tap, whileInFlight} from '@webex/common';\nimport {safeSetTimeout} from '@webex/common-timers';\nimport {clone, cloneDeep, isObject, isEmpty} from 'lodash';\n\nimport WebexPlugin from '../webex-plugin';\nimport {persist, waitForValue} from '../storage/decorators';\n\nimport grantErrors from './grant-errors';\nimport {filterScope, sortScope} from './scope';\nimport Token from './token';\nimport TokenCollection from './token-collection';\n\n/**\n * @class\n */\nconst Credentials = WebexPlugin.extend({\n  collections: {\n    userTokens: TokenCollection,\n  },\n\n  dataTypes: {\n    token: makeStateDataType(Token, 'token').dataType,\n  },\n\n  derived: {\n    canAuthorize: {\n      deps: ['supertoken', 'supertoken.canAuthorize', 'canRefresh'],\n      fn() {\n        return Boolean((this.supertoken && this.supertoken.canAuthorize) || this.canRefresh);\n      },\n    },\n    canRefresh: {\n      deps: ['supertoken', 'supertoken.canRefresh'],\n      fn() {\n        // If we're operating in JWT mode, we have to delegate to the consumer\n        if (this.config.jwtRefreshCallback) {\n          return true;\n        }\n\n        return Boolean(this.supertoken && this.supertoken.canRefresh);\n      },\n    },\n  },\n\n  props: {\n    supertoken: makeStateDataType(Token, 'token').prop,\n  },\n\n  namespace: 'Credentials',\n\n  session: {\n    isRefreshing: {\n      default: false,\n      type: 'boolean',\n    },\n    /**\n     * Becomes `true` once the {@link loaded} event fires.\n     * @see {@link WebexPlugin#ready}\n     * @instance\n     * @memberof Credentials\n     * @type {boolean}\n     */\n    ready: {\n      default: false,\n      type: 'boolean',\n    },\n    refreshTimer: {\n      default: undefined,\n      type: 'any',\n    },\n  },\n\n  /**\n   * Generates an OAuth Login URL. Prefers the api.ciscospark.com proxy if the\n   * instance is initialize with an authorizatUrl, but fallsback to idbroker\n   * as the base otherwise.\n   * @instance\n   * @memberof Credentials\n   * @param {Object} [options={}]\n   * @returns {string}\n   */\n  buildLoginUrl(options = {clientType: 'public'}) {\n    /* eslint-disable camelcase */\n    if (options.state && !isObject(options.state)) {\n      throw new Error('if specified, `options.state` must be an object');\n    }\n\n    options.client_id = this.config.client_id;\n    options.redirect_uri = this.config.redirect_uri;\n    options.scope = this.config.scope;\n\n    options = cloneDeep(options);\n\n    if (!options.response_type) {\n      options.response_type = options.clientType === 'public' ? 'token' : 'code';\n    }\n    Reflect.deleteProperty(options, 'clientType');\n\n    if (options.state) {\n      if (!isEmpty(options.state)) {\n        options.state = base64.toBase64Url(JSON.stringify(options.state));\n      } else {\n        delete options.state;\n      }\n    }\n\n    return `${this.config.authorizeUrl}?${querystring.stringify(options)}`;\n    /* eslint-enable camelcase */\n  },\n\n  /**\n   * Get the determined OrgId.\n   *\n   * @throws {Error} - If the OrgId could not be determined.\n   * @returns {string} - The OrgId.\n   */\n  getOrgId() {\n    this.logger.info('credentials: attempting to retrieve the OrgId from token');\n\n    try {\n      // Attempt to extract a client-authenticated token's OrgId.\n      this.logger.info('credentials: trying to extract OrgId from JWT');\n\n      return this.extractOrgIdFromJWT(this.supertoken.access_token);\n    } catch (e) {\n      // Attempt to extract a user token's OrgId.\n      this.logger.info('credentials: could not extract OrgId from JWT');\n      this.logger.info('credentials: attempting to extract OrgId from user token');\n\n      try {\n        return this.extractOrgIdFromUserToken(this.supertoken?.access_token);\n      } catch (f) {\n        this.logger.info('credentials: could not extract OrgId from user token');\n        throw f;\n      }\n    }\n  },\n\n  /**\n   * Extract the OrgId [realm] from a provided JWT.\n   *\n   * @private\n   * @param {string} token - The JWT to extract the OrgId from.\n   * @throws {Error} - If the token does not pass JWT general/realm validation.\n   * @returns {string} - The OrgId.\n   */\n  extractOrgIdFromJWT(token = '') {\n    // Decoded the provided token.\n    const decodedJWT = jwt.decode(token);\n\n    // Validate that the provided token is a JWT.\n    if (!decodedJWT) {\n      throw new Error('unable to extract the OrgId from the provided JWT');\n    }\n\n    if (!decodedJWT.realm) {\n      throw new Error('the provided JWT does not contain an OrgId');\n    }\n\n    // Return the OrgId [realm].\n    return decodedJWT.realm;\n  },\n\n  /**\n   * Extract the OrgId [realm] from a provided user token.\n   *\n   * @private\n   * @param {string} token - The user token to extract the OrgId from.\n   * @throws {Error} - Will throw an error if the provided token is invalid.\n   * @returns {string} - The OrgId.\n   */\n  extractOrgIdFromUserToken(token = '') {\n    // Split the provided token into subsections.\n    const fields = token.split('_');\n\n    // Validate that the provided token has the proper amount of sections.\n    if (fields.length !== 3) {\n      throw new Error('the provided token is not a valid format');\n    }\n\n    // Return the token section that contains the OrgId.\n    return fields[2];\n  },\n\n  /**\n   * Generates a Logout URL\n   * @instance\n   * @memberof Credentials\n   * @param {Object} [options={}]\n   * @returns {[type]}\n   */\n  buildLogoutUrl(options = {}) {\n    return `${this.config.logoutUrl}?${querystring.stringify({\n      cisService: this.config.service,\n      goto: this.config.redirect_uri,\n      ...options,\n    })}`;\n  },\n\n  /**\n   * Generates a number between 60% - 90% of expired value\n   * @instance\n   * @memberof Credentials\n   * @param {number} expiration\n   * @private\n   * @returns {number}\n   */\n  calcRefreshTimeout(expiration) {\n    return Math.floor(((Math.floor(Math.random() * 4) + 6) / 10) * expiration);\n  },\n\n  constructor(...args) {\n    // HACK to deal with the fact that AmpersandState#dataTypes#set is a pure\n    // function.\n    this._dataTypes = cloneDeep(this._dataTypes);\n    Object.keys(this._dataTypes).forEach((key) => {\n      if (this._dataTypes[key].set) {\n        this._dataTypes[key].set = this._dataTypes[key].set.bind(this);\n      }\n    });\n    // END HACK\n    Reflect.apply(WebexPlugin, this, args);\n  },\n\n  /**\n   * Downscopes a token\n   * @instance\n   * @memberof Credentials\n   * @param {string} scope\n   * @private\n   * @returns {Promise<Token>}\n   */\n  downscope(scope) {\n    return this.supertoken.downscope(scope).catch((reason) => {\n      this.logger.trace(`credentials: failed to downscope supertoken to ${scope}`, reason);\n      this.logger.trace(`credentials: falling back to supertoken for ${scope}`);\n\n      return Promise.resolve(new Token({scope, ...this.supertoken.serialize()}), {\n        parent: this,\n      });\n    });\n  },\n\n  /**\n   * Requests a client credentials grant and returns the token. Given the\n   * limited use for such tokens as this time, this method does not cache its\n   * token.\n   * @instance\n   * @memberof Credentials\n   * @param {Object} options\n   * @returns {Promise<Token>}\n   */\n  getClientToken(options = {}) {\n    this.logger.info('credentials: requesting client credentials grant');\n\n    return this.webex\n      .request({\n        /* eslint-disable camelcase */\n        method: 'POST',\n        uri: options.uri || this.config.tokenUrl,\n        form: {\n          grant_type: 'client_credentials',\n          scope: options.scope || 'webexsquare:admin',\n          self_contained_token: true,\n        },\n        auth: {\n          user: this.config.client_id,\n          pass: this.config.client_secret,\n          sendImmediately: true,\n        },\n        shouldRefreshAccessToken: false,\n        /* eslint-enable camelcase */\n      })\n      .then((res) => new Token(res.body, {parent: this}))\n      .catch((res) => {\n        if (res.statusCode !== 400) {\n          return Promise.reject(res);\n        }\n\n        const ErrorConstructor = grantErrors.select(res.body.error);\n\n        return Promise.reject(new ErrorConstructor(res._res || res));\n      });\n  },\n\n  @oneFlight({keyFactory: (scope) => scope})\n  @waitForValue('@')\n  /**\n   * Resolves with a token with the specified scopes. If no scope is specified,\n   * defaults to omit(webex.credentials.scope, 'spark:kms'). If no such token is\n   * available, downscopes the supertoken to that scope.\n   * @instance\n   * @memberof Credentials\n   * @param {string} scope\n   * @returns {Promise<Token>}\n   */\n  getUserToken(scope) {\n    return Promise.resolve(\n      !this.isRefreshing ||\n        new Promise((resolve) => {\n          this.logger.info(\n            'credentials: token refresh inflight; delaying getUserToken until refresh completes'\n          );\n          this.once('change:isRefreshing', () => {\n            this.logger.info('credentials: token refresh complete; reinvoking getUserToken');\n            resolve();\n          });\n        })\n    ).then(() => {\n      if (!this.canAuthorize) {\n        this.logger.info('credentials: cannot produce an access token from current state');\n\n        return Promise.reject(new Error('Current state cannot produce an access token'));\n      }\n\n      if (!scope) {\n        scope = filterScope('spark:kms', this.config.scope);\n      }\n\n      scope = sortScope(scope);\n\n      if (scope === sortScope(this.config.scope)) {\n        return Promise.resolve(this.supertoken);\n      }\n\n      const token = this.userTokens.get(scope);\n\n      // we should also check for the token.access_token since token object does\n      // not get cleared on unsetting while logging out.\n      if (!token || !token.access_token) {\n        return this.downscope(scope).then(tap((t) => this.userTokens.add(t)));\n      }\n\n      return Promise.resolve(token);\n    });\n  },\n\n  @persist('@')\n  /**\n   * Initializer\n   * @instance\n   * @memberof Credentials\n   * @param {Object} attrs\n   * @param {Object} options\n   * @private\n   * @returns {Credentials}\n   */\n  initialize(attrs, options) {\n    if (attrs) {\n      if (typeof attrs === 'string') {\n        this.supertoken = attrs;\n      }\n\n      if (attrs.access_token) {\n        this.supertoken = attrs;\n      }\n\n      if (attrs.authorization) {\n        if (attrs.authorization.supertoken) {\n          this.supertoken = attrs.authorization.supertoken;\n        } else {\n          this.supertoken = attrs.authorization;\n        }\n      }\n\n      // schedule refresh\n      if (this.supertoken && this.supertoken.expires) {\n        this.scheduleRefresh(this.supertoken.expires);\n      }\n    }\n\n    Reflect.apply(WebexPlugin.prototype.initialize, this, [attrs, options]);\n\n    this.listenToOnce(this.parent, 'change:config', () => {\n      if (this.config.authorizationString) {\n        const parsed = url.parse(this.config.authorizationString, true);\n\n        /* eslint-disable camelcase */\n        this.config.client_id = parsed.query.client_id;\n        this.config.redirect_uri = parsed.query.redirect_uri;\n        this.config.scope = parsed.query.scope;\n        this.config.authorizeUrl = parsed.href.substr(0, parsed.href.indexOf('?'));\n        /* eslint-enable camelcase */\n      }\n    });\n\n    this.webex.once('loaded', () => {\n      this.ready = true;\n    });\n  },\n\n  @oneFlight\n  @waitForValue('@')\n  /**\n   * Clears all tokens from store them from the stores.\n   *\n   * This is no longer quite the right name for this method, but all of the\n   * alternatives I'm coming up with are already taken.\n   * @instance\n   * @memberof Credentials\n   * @returns {Promise}\n   */\n  invalidate() {\n    this.logger.info('credentials: invalidating tokens');\n\n    // clear refresh timer\n    if (this.refreshTimer) {\n      clearTimeout(this.refreshTimer);\n      this.unset('refreshTimer');\n    }\n\n    try {\n      this.unset('supertoken');\n    } catch (err) {\n      this.logger.warn('credentials: failed to clear supertoken', err);\n    }\n\n    while (this.userTokens.models.length) {\n      try {\n        this.userTokens.remove(this.userTokens.models[0]);\n      } catch (err) {\n        this.logger.warn('credentials: failed to remove user token', err);\n      }\n    }\n\n    this.logger.info('credentials: finished removing tokens');\n\n    // Return a promise to give the storage layer a tick or two to clear\n    // localStorage\n    return Promise.resolve();\n  },\n\n  @oneFlight\n  @whileInFlight('isRefreshing')\n  @waitForValue('@')\n  /**\n   * Removes the supertoken and child tokens, then refreshes the supertoken;\n   * subsequent calls to {@link Credentials#getUserToken()} will re-downscope\n   * child tokens. Enqueus revocation of previous previousTokens. Yes, that's\n   * the correct number of \"previous\"es.\n   * @instance\n   * @memberof Credentials\n   * @returns {Promise}\n   */\n  refresh() {\n    this.logger.info('credentials: refresh requested');\n\n    const {supertoken} = this;\n    const tokens = clone(this.userTokens.models);\n\n    // This is kind of a leaky abstraction, since it relies on the authorization\n    // plugin, but the only alternatives I see are\n    // 1. put all JWT support in core\n    // 2. have separate jwt and non-jwt auth plugins\n    // while I like #2 from a code simplicity standpoint, the third-party DX\n    // isn't great\n    if (this.config.jwtRefreshCallback) {\n      return (\n        this.config\n          .jwtRefreshCallback(this.webex)\n          // eslint-disable-next-line no-shadow\n          .then((jwt) => this.webex.authorization.requestAccessTokenFromJwt({jwt}))\n      );\n    }\n\n    if (this.webex.internal.services) {\n      this.webex.internal.services.updateCredentialsConfig();\n    }\n\n    return supertoken\n      .refresh()\n      .then((st) => {\n        // clear refresh timer\n        if (this.refreshTimer) {\n          clearTimeout(this.refreshTimer);\n          this.unset('refreshTimer');\n        }\n        this.supertoken = st;\n\n        return Promise.all(\n          tokens.map((token) =>\n            this.downscope(token.scope)\n              // eslint-disable-next-line max-nested-callbacks\n              .then((t) => {\n                this.logger.info(`credentials: revoking token for ${token.scope}`);\n\n                return token\n                  .revoke()\n                  .catch((err) => {\n                    this.logger.warn('credentials: failed to revoke user token', err);\n                  })\n                  .then(() => {\n                    this.userTokens.remove(token.scope);\n                    this.userTokens.add(t);\n                  });\n              })\n          )\n        );\n      })\n      .then(() => {\n        this.scheduleRefresh(this.supertoken.expires);\n      })\n      .catch((error) => {\n        const {InvalidRequestError} = grantErrors;\n\n        if (error instanceof InvalidRequestError) {\n          // Error: The refresh token provided is expired, revoked, malformed, or invalid. Hence emit an event to the client, an opportunity to logout.\n          this.unset('supertoken');\n          while (this.userTokens.models.length) {\n            try {\n              this.userTokens.remove(this.userTokens.models[0]);\n            } catch (err) {\n              this.logger.warn('credentials: failed to remove user token', err);\n            }\n          }\n          this.webex.trigger('client:InvalidRequestError');\n        }\n\n        return Promise.reject(error);\n      });\n  },\n\n  /**\n   * Schedules a token refresh or refreshes the token if token has expired\n   * @instance\n   * @memberof Credentials\n   * @param {number} expires\n   * @private\n   * @returns {undefined}\n   */\n  scheduleRefresh(expires) {\n    const expiresIn = expires - Date.now();\n\n    if (expiresIn > 0) {\n      const timeoutLength = this.calcRefreshTimeout(expiresIn);\n\n      this.refreshTimer = safeSetTimeout(() => this.refresh(), timeoutLength);\n    } else {\n      this.refresh();\n    }\n  },\n});\n\nexport default Credentials;\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;AAIA,IAAAA,YAAA,GAAAC,sBAAA,CAAAC,OAAA;AACA,IAAAC,IAAA,GAAAF,sBAAA,CAAAC,OAAA;AAEA,IAAAE,aAAA,GAAAH,sBAAA,CAAAC,OAAA;AACA,IAAAG,OAAA,GAAAH,OAAA;AACA,IAAAI,aAAA,GAAAJ,OAAA;AAGA,IAAAK,YAAA,GAAAN,sBAAA,CAAAC,OAAA;AACA,IAAAM,WAAA,GAAAN,OAAA;AAEA,IAAAO,YAAA,GAAAR,sBAAA,CAAAC,OAAA;AACA,IAAAQ,MAAA,GAAAR,OAAA;AACA,IAAAS,MAAA,GAAAV,sBAAA,CAAAC,OAAA;AACA,IAAAU,gBAAA,GAAAX,sBAAA,CAAAC,OAAA;AAAiD,IAAAW,IAAA,EAAAC,KAAA,EAAAC,KAAA,EAAAC,KAAA,EAAAC,KAAA,EAAAC,KAAA,EAAAC,IAAA;AAAA,SAAAC,QAAAC,MAAA,EAAAC,cAAA,QAAAC,IAAA,GAAAC,aAAA,CAAAH,MAAA,OAAAI,6BAAA,QAAAC,OAAA,GAAAD,6BAAA,CAAAJ,MAAA,GAAAC,cAAA,KAAAI,OAAA,GAAAA,OAAA,CAAAC,MAAA,WAAAC,GAAA,WAAAC,iCAAA,CAAAR,MAAA,EAAAO,GAAA,EAAAE,UAAA,OAAAP,IAAA,CAAAQ,IAAA,CAAAC,KAAA,CAAAT,IAAA,EAAAG,OAAA,YAAAH,IAAA;AAAA,SAAAU,cAAAC,MAAA,aAAAC,CAAA,MAAAA,CAAA,GAAAC,SAAA,CAAAC,MAAA,EAAAF,CAAA,UAAAG,MAAA,WAAAF,SAAA,CAAAD,CAAA,IAAAC,SAAA,CAAAD,CAAA,QAAAA,CAAA,OAAAf,OAAA,CAAAmB,MAAA,CAAAD,MAAA,OAAAE,OAAA,WAAAC,GAAA,QAAAC,gBAAA,CAAAC,OAAA,EAAAT,MAAA,EAAAO,GAAA,EAAAH,MAAA,CAAAG,GAAA,SAAAG,iCAAA,GAAAC,wBAAA,CAAAX,MAAA,EAAAU,iCAAA,CAAAN,MAAA,KAAAlB,OAAA,CAAAmB,MAAA,CAAAD,MAAA,GAAAE,OAAA,WAAAC,GAAA,IAAAK,sBAAA,CAAAZ,MAAA,EAAAO,GAAA,EAAAZ,iCAAA,CAAAS,MAAA,EAAAG,GAAA,iBAAAP,MAAA;AAEjD;AACA;AACA;AACA,IAAMa,WAAW,GAAGC,oBAAW,CAACC,MAAM,EAAApC,IAAA,GA8QnC,IAAAqC,iBAAS,EAAC;EAACC,UAAU,EAAE,SAAAA,WAACC,KAAK;IAAA,OAAKA,KAAK;EAAA;AAAA,CAAC,CAAC,EAAAtC,KAAA,GACzC,IAAAuC,wBAAY,EAAC,GAAG,CAAC,EAAAtC,KAAA,GAmDjB,IAAAuC,mBAAO,EAAC,GAAG,CAAC,EAAAtC,KAAA,GAuDZ,IAAAqC,wBAAY,EAAC,GAAG,CAAC,EAAApC,KAAA,GAyCjB,IAAAsC,qBAAa,EAAC,cAAc,CAAC,EAAArC,KAAA,GAC7B,IAAAmC,wBAAY,EAAC,GAAG,CAAC,GAAAlC,IAAA,GAnamB;EACrCqC,WAAW,EAAE;IACXC,UAAU,EAAEC;EACd,CAAC;EAEDC,SAAS,EAAE;IACTC,KAAK,EAAE,IAAAC,yBAAiB,EAACC,cAAK,EAAE,OAAO,CAAC,CAACC;EAC3C,CAAC;EAEDC,OAAO,EAAE;IACPC,YAAY,EAAE;MACZC,IAAI,EAAE,CAAC,YAAY,EAAE,yBAAyB,EAAE,YAAY,CAAC;MAC7DC,EAAE,WAAAA,GAAA,EAAG;QACH,OAAOC,OAAO,CAAE,IAAI,CAACC,UAAU,IAAI,IAAI,CAACA,UAAU,CAACJ,YAAY,IAAK,IAAI,CAACK,UAAU,CAAC;MACtF;IACF,CAAC;IACDA,UAAU,EAAE;MACVJ,IAAI,EAAE,CAAC,YAAY,EAAE,uBAAuB,CAAC;MAC7CC,EAAE,WAAAA,GAAA,EAAG;QACH;QACA,IAAI,IAAI,CAACI,MAAM,CAACC,kBAAkB,EAAE;UAClC,OAAO,IAAI;QACb;QAEA,OAAOJ,OAAO,CAAC,IAAI,CAACC,UAAU,IAAI,IAAI,CAACA,UAAU,CAACC,UAAU,CAAC;MAC/D;IACF;EACF,CAAC;EAEDG,KAAK,EAAE;IACLJ,UAAU,EAAE,IAAAR,yBAAiB,EAACC,cAAK,EAAE,OAAO,CAAC,CAACY;EAChD,CAAC;EAEDC,SAAS,EAAE,aAAa;EAExBC,OAAO,EAAE;IACPC,YAAY,EAAE;MACZlC,OAAO,EAAE,KAAK;MACdmC,IAAI,EAAE;IACR,CAAC;IACD;AACJ;AACA;AACA;AACA;AACA;AACA;IACIC,KAAK,EAAE;MACLpC,OAAO,EAAE,KAAK;MACdmC,IAAI,EAAE;IACR,CAAC;IACDE,YAAY,EAAE;MACZrC,OAAO,EAAEsC,SAAS;MAClBH,IAAI,EAAE;IACR;EACF,CAAC;EAED;AACF;AACA;AACA;AACA;AACA;AACA;AACA;AACA;EACEI,aAAa,WAAAA,cAAA,EAAmC;IAAA,IAAlCC,OAAO,GAAA/C,SAAA,CAAAC,MAAA,QAAAD,SAAA,QAAA6C,SAAA,GAAA7C,SAAA,MAAG;MAACgD,UAAU,EAAE;IAAQ,CAAC;IAC5C;IACA,IAAID,OAAO,CAACE,KAAK,IAAI,CAAC,IAAAC,UAAA,CAAA3C,OAAA,EAASwC,OAAO,CAACE,KAAK,CAAC,EAAE;MAC7C,MAAM,IAAIE,KAAK,CAAC,iDAAiD,CAAC;IACpE;IAEAJ,OAAO,CAACK,SAAS,GAAG,IAAI,CAACjB,MAAM,CAACiB,SAAS;IACzCL,OAAO,CAACM,YAAY,GAAG,IAAI,CAAClB,MAAM,CAACkB,YAAY;IAC/CN,OAAO,CAAC/B,KAAK,GAAG,IAAI,CAACmB,MAAM,CAACnB,KAAK;IAEjC+B,OAAO,GAAG,IAAAO,WAAA,CAAA/C,OAAA,EAAUwC,OAAO,CAAC;IAE5B,IAAI,CAACA,OAAO,CAACQ,aAAa,EAAE;MAC1BR,OAAO,CAACQ,aAAa,GAAGR,OAAO,CAACC,UAAU,KAAK,QAAQ,GAAG,OAAO,GAAG,MAAM;IAC5E;IACA,IAAAQ,eAAA,CAAAjD,OAAA,EAAuBwC,OAAO,EAAE,YAAY,CAAC;IAE7C,IAAIA,OAAO,CAACE,KAAK,EAAE;MACjB,IAAI,CAAC,IAAAQ,SAAA,CAAAlD,OAAA,EAAQwC,OAAO,CAACE,KAAK,CAAC,EAAE;QAC3BF,OAAO,CAACE,KAAK,GAAGS,cAAM,CAACC,WAAW,CAAC,IAAAC,UAAA,CAAArD,OAAA,EAAewC,OAAO,CAACE,KAAK,CAAC,CAAC;MACnE,CAAC,MAAM;QACL,OAAOF,OAAO,CAACE,KAAK;MACtB;IACF;IAEA,UAAAY,MAAA,CAAU,IAAI,CAAC1B,MAAM,CAAC2B,YAAY,OAAAD,MAAA,CAAIE,oBAAW,CAACC,SAAS,CAACjB,OAAO,CAAC;IACpE;EACF,CAAC;EAED;AACF;AACA;AACA;AACA;AACA;EACEkB,QAAQ,WAAAA,SAAA,EAAG;IACT,IAAI,CAACC,MAAM,CAACC,IAAI,CAAC,0DAA0D,CAAC;IAE5E,IAAI;MACF;MACA,IAAI,CAACD,MAAM,CAACC,IAAI,CAAC,+CAA+C,CAAC;MAEjE,OAAO,IAAI,CAACC,mBAAmB,CAAC,IAAI,CAACnC,UAAU,CAACoC,YAAY,CAAC;IAC/D,CAAC,CAAC,OAAOC,CAAC,EAAE;MACV;MACA,IAAI,CAACJ,MAAM,CAACC,IAAI,CAAC,+CAA+C,CAAC;MACjE,IAAI,CAACD,MAAM,CAACC,IAAI,CAAC,0DAA0D,CAAC;MAE5E,IAAI;QAAA,IAAAI,gBAAA;QACF,OAAO,IAAI,CAACC,yBAAyB,EAAAD,gBAAA,GAAC,IAAI,CAACtC,UAAU,cAAAsC,gBAAA,uBAAfA,gBAAA,CAAiBF,YAAY,CAAC;MACtE,CAAC,CAAC,OAAOI,CAAC,EAAE;QACV,IAAI,CAACP,MAAM,CAACC,IAAI,CAAC,sDAAsD,CAAC;QACxE,MAAMM,CAAC;MACT;IACF;EACF,CAAC;EAED;AACF;AACA;AACA;AACA;AACA;AACA;AACA;EACEL,mBAAmB,WAAAA,oBAAA,EAAa;IAAA,IAAZ5C,KAAK,GAAAxB,SAAA,CAAAC,MAAA,QAAAD,SAAA,QAAA6C,SAAA,GAAA7C,SAAA,MAAG,EAAE;IAC5B;IACA,IAAM0E,UAAU,GAAGC,qBAAG,CAACC,MAAM,CAACpD,KAAK,CAAC;;IAEpC;IACA,IAAI,CAACkD,UAAU,EAAE;MACf,MAAM,IAAIvB,KAAK,CAAC,mDAAmD,CAAC;IACtE;IAEA,IAAI,CAACuB,UAAU,CAACG,KAAK,EAAE;MACrB,MAAM,IAAI1B,KAAK,CAAC,4CAA4C,CAAC;IAC/D;;IAEA;IACA,OAAOuB,UAAU,CAACG,KAAK;EACzB,CAAC;EAED;AACF;AACA;AACA;AACA;AACA;AACA;AACA;EACEL,yBAAyB,WAAAA,0BAAA,EAAa;IAAA,IAAZhD,KAAK,GAAAxB,SAAA,CAAAC,MAAA,QAAAD,SAAA,QAAA6C,SAAA,GAAA7C,SAAA,MAAG,EAAE;IAClC;IACA,IAAM8E,MAAM,GAAGtD,KAAK,CAACuD,KAAK,CAAC,GAAG,CAAC;;IAE/B;IACA,IAAID,MAAM,CAAC7E,MAAM,KAAK,CAAC,EAAE;MACvB,MAAM,IAAIkD,KAAK,CAAC,0CAA0C,CAAC;IAC7D;;IAEA;IACA,OAAO2B,MAAM,CAAC,CAAC,CAAC;EAClB,CAAC;EAED;AACF;AACA;AACA;AACA;AACA;AACA;EACEE,cAAc,WAAAA,eAAA,EAAe;IAAA,IAAdjC,OAAO,GAAA/C,SAAA,CAAAC,MAAA,QAAAD,SAAA,QAAA6C,SAAA,GAAA7C,SAAA,MAAG,CAAC,CAAC;IACzB,UAAA6D,MAAA,CAAU,IAAI,CAAC1B,MAAM,CAAC8C,SAAS,OAAApB,MAAA,CAAIE,oBAAW,CAACC,SAAS,CAAAnE,aAAA;MACtDqF,UAAU,EAAE,IAAI,CAAC/C,MAAM,CAACgD,OAAO;MAC/BC,IAAI,EAAE,IAAI,CAACjD,MAAM,CAACkB;IAAY,GAC3BN,OAAO,EACV;EACJ,CAAC;EAED;AACF;AACA;AACA;AACA;AACA;AACA;AACA;EACEsC,kBAAkB,WAAAA,mBAACC,UAAU,EAAE;IAC7B,OAAOC,IAAI,CAACC,KAAK,CAAE,CAACD,IAAI,CAACC,KAAK,CAACD,IAAI,CAACE,MAAM,EAAE,GAAG,CAAC,CAAC,GAAG,CAAC,IAAI,EAAE,GAAIH,UAAU,CAAC;EAC5E,CAAC;EAEDI,WAAW,WAAAA,YAAA,EAAU;IAAA,IAAAC,KAAA;IACnB;IACA;IACA,IAAI,CAACC,UAAU,GAAG,IAAAtC,WAAA,CAAA/C,OAAA,EAAU,IAAI,CAACqF,UAAU,CAAC;IAC5C,IAAAC,KAAA,CAAAtF,OAAA,EAAY,IAAI,CAACqF,UAAU,CAAC,CAACxF,OAAO,CAAC,UAACC,GAAG,EAAK;MAC5C,IAAIsF,KAAI,CAACC,UAAU,CAACvF,GAAG,CAAC,CAACyF,GAAG,EAAE;QAC5BH,KAAI,CAACC,UAAU,CAACvF,GAAG,CAAC,CAACyF,GAAG,GAAGH,KAAI,CAACC,UAAU,CAACvF,GAAG,CAAC,CAACyF,GAAG,CAACC,IAAI,CAACJ,KAAI,CAAC;MAChE;IACF,CAAC,CAAC;IACF;IAAA,SAAAK,IAAA,GAAAhG,SAAA,CAAAC,MAAA,EATagG,IAAI,OAAAC,KAAA,CAAAF,IAAA,GAAAG,IAAA,MAAAA,IAAA,GAAAH,IAAA,EAAAG,IAAA;MAAJF,IAAI,CAAAE,IAAA,IAAAnG,SAAA,CAAAmG,IAAA;IAAA;IAUjB,IAAAC,MAAA,CAAA7F,OAAA,EAAcK,oBAAW,EAAE,IAAI,EAAEqF,IAAI,CAAC;EACxC,CAAC;EAED;AACF;AACA;AACA;AACA;AACA;AACA;AACA;EACEI,SAAS,WAAAA,UAACrF,KAAK,EAAE;IAAA,IAAAsF,MAAA;IACf,OAAO,IAAI,CAACrE,UAAU,CAACoE,SAAS,CAACrF,KAAK,CAAC,CAACuF,KAAK,CAAC,UAACC,MAAM,EAAK;MACxDF,MAAI,CAACpC,MAAM,CAACuC,KAAK,mDAAA5C,MAAA,CAAmD7C,KAAK,GAAIwF,MAAM,CAAC;MACpFF,MAAI,CAACpC,MAAM,CAACuC,KAAK,gDAAA5C,MAAA,CAAgD7C,KAAK,EAAG;MAEzE,OAAO0F,QAAA,CAAAnG,OAAA,CAAQoG,OAAO,CAAC,IAAIjF,cAAK,CAAA7B,aAAA;QAAEmB,KAAK,EAALA;MAAK,GAAKsF,MAAI,CAACrE,UAAU,CAAC2E,SAAS,EAAE,EAAE,EAAE;QACzEC,MAAM,EAAEP;MACV,CAAC,CAAC;IACJ,CAAC,CAAC;EACJ,CAAC;EAED;AACF;AACA;AACA;AACA;AACA;AACA;AACA;AACA;EACEQ,cAAc,WAAAA,eAAA,EAAe;IAAA,IAAAC,MAAA;IAAA,IAAdhE,OAAO,GAAA/C,SAAA,CAAAC,MAAA,QAAAD,SAAA,QAAA6C,SAAA,GAAA7C,SAAA,MAAG,CAAC,CAAC;IACzB,IAAI,CAACkE,MAAM,CAACC,IAAI,CAAC,kDAAkD,CAAC;IAEpE,OAAO,IAAI,CAAC6C,KAAK,CACdC,OAAO,CAAC;MACP;MACAC,MAAM,EAAE,MAAM;MACdC,GAAG,EAAEpE,OAAO,CAACoE,GAAG,IAAI,IAAI,CAAChF,MAAM,CAACiF,QAAQ;MACxCC,IAAI,EAAE;QACJC,UAAU,EAAE,oBAAoB;QAChCtG,KAAK,EAAE+B,OAAO,CAAC/B,KAAK,IAAI,mBAAmB;QAC3CuG,oBAAoB,EAAE;MACxB,CAAC;MACDC,IAAI,EAAE;QACJC,IAAI,EAAE,IAAI,CAACtF,MAAM,CAACiB,SAAS;QAC3BsE,IAAI,EAAE,IAAI,CAACvF,MAAM,CAACwF,aAAa;QAC/BC,eAAe,EAAE;MACnB,CAAC;MACDC,wBAAwB,EAAE;MAC1B;IACF,CAAC,CAAC,CACDC,IAAI,CAAC,UAACC,GAAG;MAAA,OAAK,IAAIrG,cAAK,CAACqG,GAAG,CAACC,IAAI,EAAE;QAACnB,MAAM,EAAEE;MAAI,CAAC,CAAC;IAAA,EAAC,CAClDR,KAAK,CAAC,UAACwB,GAAG,EAAK;MACd,IAAIA,GAAG,CAACE,UAAU,KAAK,GAAG,EAAE;QAC1B,OAAOvB,QAAA,CAAAnG,OAAA,CAAQ2H,MAAM,CAACH,GAAG,CAAC;MAC5B;MAEA,IAAMI,gBAAgB,GAAGC,oBAAW,CAACC,MAAM,CAACN,GAAG,CAACC,IAAI,CAACM,KAAK,CAAC;MAE3D,OAAO5B,QAAA,CAAAnG,OAAA,CAAQ2H,MAAM,CAAC,IAAIC,gBAAgB,CAACJ,GAAG,CAACQ,IAAI,IAAIR,GAAG,CAAC,CAAC;IAC9D,CAAC,CAAC;EACN,CAAC;EAID;AACF;AACA;AACA;AACA;AACA;AACA;AACA;AACA;EACES,YAAY,WAAAA,aAACxH,KAAK,EAAE;IAAA,IAAAyH,MAAA;IAClB,OAAO/B,QAAA,CAAAnG,OAAA,CAAQoG,OAAO,CACpB,CAAC,IAAI,CAAClE,YAAY,IAChB,IAAAiE,QAAA,CAAAnG,OAAA,CAAY,UAACoG,OAAO,EAAK;MACvB8B,MAAI,CAACvE,MAAM,CAACC,IAAI,CACd,oFAAoF,CACrF;MACDsE,MAAI,CAACC,IAAI,CAAC,qBAAqB,EAAE,YAAM;QACrCD,MAAI,CAACvE,MAAM,CAACC,IAAI,CAAC,8DAA8D,CAAC;QAChFwC,OAAO,EAAE;MACX,CAAC,CAAC;IACJ,CAAC,CAAC,CACL,CAACmB,IAAI,CAAC,YAAM;MACX,IAAI,CAACW,MAAI,CAAC5G,YAAY,EAAE;QACtB4G,MAAI,CAACvE,MAAM,CAACC,IAAI,CAAC,gEAAgE,CAAC;QAElF,OAAOuC,QAAA,CAAAnG,OAAA,CAAQ2H,MAAM,CAAC,IAAI/E,KAAK,CAAC,8CAA8C,CAAC,CAAC;MAClF;MAEA,IAAI,CAACnC,KAAK,EAAE;QACVA,KAAK,GAAG,IAAA2H,kBAAW,EAAC,WAAW,EAAEF,MAAI,CAACtG,MAAM,CAACnB,KAAK,CAAC;MACrD;MAEAA,KAAK,GAAG,IAAA4H,gBAAS,EAAC5H,KAAK,CAAC;MAExB,IAAIA,KAAK,KAAK,IAAA4H,gBAAS,EAACH,MAAI,CAACtG,MAAM,CAACnB,KAAK,CAAC,EAAE;QAC1C,OAAO0F,QAAA,CAAAnG,OAAA,CAAQoG,OAAO,CAAC8B,MAAI,CAACxG,UAAU,CAAC;MACzC;MAEA,IAAMT,KAAK,GAAGiH,MAAI,CAACpH,UAAU,CAACwH,GAAG,CAAC7H,KAAK,CAAC;;MAExC;MACA;MACA,IAAI,CAACQ,KAAK,IAAI,CAACA,KAAK,CAAC6C,YAAY,EAAE;QACjC,OAAOoE,MAAI,CAACpC,SAAS,CAACrF,KAAK,CAAC,CAAC8G,IAAI,CAAC,IAAAgB,WAAG,EAAC,UAACC,CAAC;UAAA,OAAKN,MAAI,CAACpH,UAAU,CAAC2H,GAAG,CAACD,CAAC,CAAC;QAAA,EAAC,CAAC;MACvE;MAEA,OAAOrC,QAAA,CAAAnG,OAAA,CAAQoG,OAAO,CAACnF,KAAK,CAAC;IAC/B,CAAC,CAAC;EACJ,CAAC;EAGD;AACF;AACA;AACA;AACA;AACA;AACA;AACA;AACA;EACEyH,UAAU,WAAAA,WAACC,KAAK,EAAEnG,OAAO,EAAE;IAAA,IAAAoG,MAAA;IACzB,IAAID,KAAK,EAAE;MACT,IAAI,OAAOA,KAAK,KAAK,QAAQ,EAAE;QAC7B,IAAI,CAACjH,UAAU,GAAGiH,KAAK;MACzB;MAEA,IAAIA,KAAK,CAAC7E,YAAY,EAAE;QACtB,IAAI,CAACpC,UAAU,GAAGiH,KAAK;MACzB;MAEA,IAAIA,KAAK,CAACE,aAAa,EAAE;QACvB,IAAIF,KAAK,CAACE,aAAa,CAACnH,UAAU,EAAE;UAClC,IAAI,CAACA,UAAU,GAAGiH,KAAK,CAACE,aAAa,CAACnH,UAAU;QAClD,CAAC,MAAM;UACL,IAAI,CAACA,UAAU,GAAGiH,KAAK,CAACE,aAAa;QACvC;MACF;;MAEA;MACA,IAAI,IAAI,CAACnH,UAAU,IAAI,IAAI,CAACA,UAAU,CAACoH,OAAO,EAAE;QAC9C,IAAI,CAACC,eAAe,CAAC,IAAI,CAACrH,UAAU,CAACoH,OAAO,CAAC;MAC/C;IACF;IAEA,IAAAjD,MAAA,CAAA7F,OAAA,EAAcK,oBAAW,CAAC2I,SAAS,CAACN,UAAU,EAAE,IAAI,EAAE,CAACC,KAAK,EAAEnG,OAAO,CAAC,CAAC;IAEvE,IAAI,CAACyG,YAAY,CAAC,IAAI,CAAC3C,MAAM,EAAE,eAAe,EAAE,YAAM;MACpD,IAAIsC,MAAI,CAAChH,MAAM,CAACsH,mBAAmB,EAAE;QACnC,IAAMC,MAAM,GAAGC,YAAG,CAACC,KAAK,CAACT,MAAI,CAAChH,MAAM,CAACsH,mBAAmB,EAAE,IAAI,CAAC;;QAE/D;QACAN,MAAI,CAAChH,MAAM,CAACiB,SAAS,GAAGsG,MAAM,CAACG,KAAK,CAACzG,SAAS;QAC9C+F,MAAI,CAAChH,MAAM,CAACkB,YAAY,GAAGqG,MAAM,CAACG,KAAK,CAACxG,YAAY;QACpD8F,MAAI,CAAChH,MAAM,CAACnB,KAAK,GAAG0I,MAAM,CAACG,KAAK,CAAC7I,KAAK;QACtCmI,MAAI,CAAChH,MAAM,CAAC2B,YAAY,GAAG4F,MAAM,CAACI,IAAI,CAACC,MAAM,CAAC,CAAC,EAAEL,MAAM,CAACI,IAAI,CAACE,OAAO,CAAC,GAAG,CAAC,CAAC;QAC1E;MACF;IACF,CAAC,CAAC;;IAEF,IAAI,CAAChD,KAAK,CAAC0B,IAAI,CAAC,QAAQ,EAAE,YAAM;MAC9BS,MAAI,CAACxG,KAAK,GAAG,IAAI;IACnB,CAAC,CAAC;EACJ,CAAC;EAID;AACF;AACA;AACA;AACA;AACA;AACA;AACA;AACA;EACEsH,UAAU,WAAAA,WAAA,EAAG;IACX,IAAI,CAAC/F,MAAM,CAACC,IAAI,CAAC,kCAAkC,CAAC;;IAEpD;IACA,IAAI,IAAI,CAACvB,YAAY,EAAE;MACrBsH,YAAY,CAAC,IAAI,CAACtH,YAAY,CAAC;MAC/B,IAAI,CAACuH,KAAK,CAAC,cAAc,CAAC;IAC5B;IAEA,IAAI;MACF,IAAI,CAACA,KAAK,CAAC,YAAY,CAAC;IAC1B,CAAC,CAAC,OAAOC,GAAG,EAAE;MACZ,IAAI,CAAClG,MAAM,CAACmG,IAAI,CAAC,yCAAyC,EAAED,GAAG,CAAC;IAClE;IAEA,OAAO,IAAI,CAAC/I,UAAU,CAACiJ,MAAM,CAACrK,MAAM,EAAE;MACpC,IAAI;QACF,IAAI,CAACoB,UAAU,CAACkJ,MAAM,CAAC,IAAI,CAAClJ,UAAU,CAACiJ,MAAM,CAAC,CAAC,CAAC,CAAC;MACnD,CAAC,CAAC,OAAOF,GAAG,EAAE;QACZ,IAAI,CAAClG,MAAM,CAACmG,IAAI,CAAC,0CAA0C,EAAED,GAAG,CAAC;MACnE;IACF;IAEA,IAAI,CAAClG,MAAM,CAACC,IAAI,CAAC,uCAAuC,CAAC;;IAEzD;IACA;IACA,OAAOuC,QAAA,CAAAnG,OAAA,CAAQoG,OAAO,EAAE;EAC1B,CAAC;EAKD;AACF;AACA;AACA;AACA;AACA;AACA;AACA;AACA;EACE6D,OAAO,WAAAA,QAAA,EAAG;IAAA,IAAAC,MAAA;IACR,IAAI,CAACvG,MAAM,CAACC,IAAI,CAAC,gCAAgC,CAAC;IAElD,IAAOlC,UAAU,GAAI,IAAI,CAAlBA,UAAU;IACjB,IAAMyI,MAAM,GAAG,IAAAC,OAAA,CAAApK,OAAA,EAAM,IAAI,CAACc,UAAU,CAACiJ,MAAM,CAAC;;IAE5C;IACA;IACA;IACA;IACA;IACA;IACA,IAAI,IAAI,CAACnI,MAAM,CAACC,kBAAkB,EAAE;MAClC,OACE,IAAI,CAACD,MAAM,CACRC,kBAAkB,CAAC,IAAI,CAAC4E,KAAK;MAC9B;MAAA,CACCc,IAAI,CAAC,UAACnD,GAAG;QAAA,OAAK8F,MAAI,CAACzD,KAAK,CAACoC,aAAa,CAACwB,yBAAyB,CAAC;UAACjG,GAAG,EAAHA;QAAG,CAAC,CAAC;MAAA,EAAC;IAE/E;IAEA,IAAI,IAAI,CAACqC,KAAK,CAAC6D,QAAQ,CAACC,QAAQ,EAAE;MAChC,IAAI,CAAC9D,KAAK,CAAC6D,QAAQ,CAACC,QAAQ,CAACC,uBAAuB,EAAE;IACxD;IAEA,OAAO9I,UAAU,CACduI,OAAO,EAAE,CACT1C,IAAI,CAAC,UAACkD,EAAE,EAAK;MACZ;MACA,IAAIP,MAAI,CAAC7H,YAAY,EAAE;QACrBsH,YAAY,CAACO,MAAI,CAAC7H,YAAY,CAAC;QAC/B6H,MAAI,CAACN,KAAK,CAAC,cAAc,CAAC;MAC5B;MACAM,MAAI,CAACxI,UAAU,GAAG+I,EAAE;MAEpB,OAAOtE,QAAA,CAAAnG,OAAA,CAAQ0K,GAAG,CAChBP,MAAM,CAACQ,GAAG,CAAC,UAAC1J,KAAK;QAAA,OACfiJ,MAAI,CAACpE,SAAS,CAAC7E,KAAK,CAACR,KAAK;QACxB;QAAA,CACC8G,IAAI,CAAC,UAACiB,CAAC,EAAK;UACX0B,MAAI,CAACvG,MAAM,CAACC,IAAI,oCAAAN,MAAA,CAAoCrC,KAAK,CAACR,KAAK,EAAG;UAElE,OAAOQ,KAAK,CACT2J,MAAM,EAAE,CACR5E,KAAK,CAAC,UAAC6D,GAAG,EAAK;YACdK,MAAI,CAACvG,MAAM,CAACmG,IAAI,CAAC,0CAA0C,EAAED,GAAG,CAAC;UACnE,CAAC,CAAC,CACDtC,IAAI,CAAC,YAAM;YACV2C,MAAI,CAACpJ,UAAU,CAACkJ,MAAM,CAAC/I,KAAK,CAACR,KAAK,CAAC;YACnCyJ,MAAI,CAACpJ,UAAU,CAAC2H,GAAG,CAACD,CAAC,CAAC;UACxB,CAAC,CAAC;QACN,CAAC,CAAC;MAAA,EACL,CACF;IACH,CAAC,CAAC,CACDjB,IAAI,CAAC,YAAM;MACV2C,MAAI,CAACnB,eAAe,CAACmB,MAAI,CAACxI,UAAU,CAACoH,OAAO,CAAC;IAC/C,CAAC,CAAC,CACD9C,KAAK,CAAC,UAAC+B,KAAK,EAAK;MAChB,IAAO8C,mBAAmB,GAAIhD,oBAAW,CAAlCgD,mBAAmB;MAE1B,IAAI9C,KAAK,YAAY8C,mBAAmB,EAAE;QACxC;QACAX,MAAI,CAACN,KAAK,CAAC,YAAY,CAAC;QACxB,OAAOM,MAAI,CAACpJ,UAAU,CAACiJ,MAAM,CAACrK,MAAM,EAAE;UACpC,IAAI;YACFwK,MAAI,CAACpJ,UAAU,CAACkJ,MAAM,CAACE,MAAI,CAACpJ,UAAU,CAACiJ,MAAM,CAAC,CAAC,CAAC,CAAC;UACnD,CAAC,CAAC,OAAOF,GAAG,EAAE;YACZK,MAAI,CAACvG,MAAM,CAACmG,IAAI,CAAC,0CAA0C,EAAED,GAAG,CAAC;UACnE;QACF;QACAK,MAAI,CAACzD,KAAK,CAACqE,OAAO,CAAC,4BAA4B,CAAC;MAClD;MAEA,OAAO3E,QAAA,CAAAnG,OAAA,CAAQ2H,MAAM,CAACI,KAAK,CAAC;IAC9B,CAAC,CAAC;EACN,CAAC;EAED;AACF;AACA;AACA;AACA;AACA;AACA;AACA;EACEgB,eAAe,WAAAA,gBAACD,OAAO,EAAE;IAAA,IAAAiC,MAAA;IACvB,IAAMC,SAAS,GAAGlC,OAAO,GAAG,IAAAmC,IAAA,CAAAjL,OAAA,GAAU;IAEtC,IAAIgL,SAAS,GAAG,CAAC,EAAE;MACjB,IAAME,aAAa,GAAG,IAAI,CAACpG,kBAAkB,CAACkG,SAAS,CAAC;MAExD,IAAI,CAAC3I,YAAY,GAAG,IAAA8I,4BAAc,EAAC;QAAA,OAAMJ,MAAI,CAACd,OAAO,EAAE;MAAA,GAAEiB,aAAa,CAAC;IACzE,CAAC,MAAM;MACL,IAAI,CAACjB,OAAO,EAAE;IAChB;EACF,CAAC;EAAAmB,OAAA;AACH,CAAC,OAAAC,0BAAA,CAAArL,OAAA,EAAAxB,IAAA,mBAAAN,IAAA,EAAAC,KAAA,OAAAmN,yBAAA,CAAAtL,OAAA,EAAAxB,IAAA,mBAAAA,IAAA,OAAA6M,0BAAA,CAAArL,OAAA,EAAAxB,IAAA,iBAAAJ,KAAA,OAAAkN,yBAAA,CAAAtL,OAAA,EAAAxB,IAAA,iBAAAA,IAAA,OAAA6M,0BAAA,CAAArL,OAAA,EAAAxB,IAAA,iBAtJE+B,iBAAS,EAAAlC,KAAA,OAAAiN,yBAAA,CAAAtL,OAAA,EAAAxB,IAAA,iBAAAA,IAAA,OAAA6M,0BAAA,CAAArL,OAAA,EAAAxB,IAAA,cAyCT+B,iBAAS,EAAAjC,KAAA,EAAAC,KAAA,OAAA+M,yBAAA,CAAAtL,OAAA,EAAAxB,IAAA,cAAAA,IAAA,IAAAA,IAAA,GA6GV;AAAC,IAAA+M,QAAA,GAEYnL,WAAW;AAAAoL,OAAA,CAAAxL,OAAA,GAAAuL,QAAA"}

package/dist/lib/credentials/token.js

@@ -21,7 +21,7 @@ var _assign = _interopRequireDefault(require("@babel/runtime-corejs2/core-js/obj
 var _apply = _interopRequireDefault(require("@babel/runtime-corejs2/core-js/reflect/apply"));
 var _now = _interopRequireDefault(require("@babel/runtime-corejs2/core-js/date/now"));
 var _getOwnPropertyDescriptor = _interopRequireDefault(require("@babel/runtime-corejs2/core-js/object/get-own-property-descriptor"));
-var _lodash = require("lodash");
+var _pick2 = _interopRequireDefault(require("lodash/pick"));
 var _common = require("@webex/common");
 var _commonTimers = require("@webex/common-timers");
 var _webexHttpError = _interopRequireDefault(require("../webex-http-error"));
@@ -371,7 +371,7 @@ var Token = _webexPlugin.default.extend((_dec = (0, _common.oneFlight)({
       // the current refresh token and related values to the response (note:
       // at time of implementation, CI never sends a new refresh token)
       if (!obj.refresh_token) {
-        (0, _assign.default)(obj, (0, _lodash.pick)(_this3, 'refresh_token', 'refresh_token_expires', 'refresh_token_expires_in'));
+        (0, _assign.default)(obj, (0, _pick2.default)(_this3, 'refresh_token', 'refresh_token_expires', 'refresh_token_expires_in'));
       }
 
       // If the new token is the same as the previous token, then we may have
@@ -527,7 +527,7 @@ var Token = _webexPlugin.default.extend((_dec = (0, _common.oneFlight)({
       return res.body;
     });
   },
-  version: "modern"
+  version: "2.59.2"
 }, ((0, _applyDecoratedDescriptor2.default)(_obj, "downscope", [_dec], (0, _getOwnPropertyDescriptor.default)(_obj, "downscope"), _obj), (0, _applyDecoratedDescriptor2.default)(_obj, "refresh", [_common.oneFlight], (0, _getOwnPropertyDescriptor.default)(_obj, "refresh"), _obj), (0, _applyDecoratedDescriptor2.default)(_obj, "revoke", [_common.oneFlight], (0, _getOwnPropertyDescriptor.default)(_obj, "revoke"), _obj)), _obj)));
 var _default = Token;
 exports.default = _default;

package/dist/lib/credentials/token.js.map

@@ -1 +1 @@
-{"version":3,"names":["_lodash","require","_common","_commonTimers","_webexHttpError","_interopRequireDefault","_webexPlugin","_scope","_grantErrors","_interopRequireWildcard","_dec","_obj","_getRequireWildcardCache","nodeInterop","_WeakMap","cacheBabelInterop","cacheNodeInterop","obj","__esModule","_typeof","default","cache","has","get","newObj","hasPropertyDescriptor","_Object$defineProperty","_Object$getOwnPropertyDescriptor2","key","Object","prototype","hasOwnProperty","call","desc","set","ownKeys","object","enumerableOnly","keys","_Object$keys","_Object$getOwnPropertySymbols","symbols","filter","sym","enumerable","push","apply","_objectSpread","target","i","arguments","length","source","forEach","_defineProperty2","_Object$getOwnPropertyDescriptors","_Object$defineProperties","processGrantError","res","statusCode","_promise","reject","ErrorConstructor","grantErrors","select","body","error","OAuthError","WebexHttpError","_res","Token","WebexPlugin","extend","oneFlight","keyFactory","scope","derived","canAuthorize","deps","fn","access_token","isExpired","canDownscope","config","client_id","canRefresh","inBrowser","refresh_token","refreshCallback","client_secret","expires","_isExpired","_string","token_type","concat","namespace","props","expires_in","refresh_token_expires","refresh_token_expires_in","type","session","previousToken","downscope","_this","logger","info","Error","trace","sortScope","webex","request","method","uri","tokenUrl","addAuthHeader","form","grant_type","token","self_contained_token","then","_assign","parent","initialize","_this2","attrs","undefined","options","_apply","_now","safeSetTimeout","refresh","_this3","promise","resolve","redirect_uri","auth","user","pass","sendImmediately","shouldRefreshAccessToken","pick","process","env","NODE_ENV","revoke","unset","catch","_this4","revokeUrl","token_type_hint","_this$_filterSetParam","_filterSetParameters","_this$_filterSetParam2","_slicedToArray2","includes","_attrs$access_token$s","split","_attrs$access_token$s2","now","toString","validate","_this5","service","resource","reason","convApi","CONVERSATION_SERVICE","CONVERSATION_SERVICE_URL","headers","authorization","version","_applyDecoratedDescriptor2","_getOwnPropertyDescriptor","_default","exports"],"sources":["token.js"],"sourcesContent":["/*!\n * Copyright (c) 2015-2020 Cisco Systems, Inc. See LICENSE file.\n */\n\nimport {pick} from 'lodash';\nimport {inBrowser, oneFlight} from '@webex/common';\nimport {safeSetTimeout} from '@webex/common-timers';\n\nimport WebexHttpError from '../webex-http-error';\nimport WebexPlugin from '../webex-plugin';\n\nimport {sortScope} from './scope';\nimport grantErrors, {OAuthError} from './grant-errors';\n\n/* eslint-disable camelcase */\n\n/**\n * Parse response from CI and converts to structured error when appropriate\n * @param {WebexHttpError} res\n * @private\n * @returns {GrantError}\n */\nfunction processGrantError(res) {\n  if (res.statusCode !== 400) {\n    return Promise.reject(res);\n  }\n\n  const ErrorConstructor = grantErrors.select(res.body.error);\n\n  if (ErrorConstructor === OAuthError && res instanceof WebexHttpError) {\n    return Promise.reject(res);\n  }\n  if (!ErrorConstructor) {\n    return Promise.reject(res);\n  }\n\n  return Promise.reject(new ErrorConstructor(res._res || res));\n}\n\n/**\n * @class\n */\nconst Token = WebexPlugin.extend({\n  derived: {\n    /**\n     * Indicates if this token can be used in an auth header. `true` iff\n     * {@link Token#access_token} is defined and {@link Token#isExpired} is\n     * false.\n     * @instance\n     * @memberof Token\n     * @readonly\n     * @type {boolean}\n     */\n    canAuthorize: {\n      deps: ['access_token', 'isExpired'],\n      fn() {\n        return !!this.access_token && !this.isExpired;\n      },\n    },\n\n    /**\n     * Indicates that this token can be downscoped. `true` iff\n     * {@link config.credentials.client_id} is defined and if\n     * {@link Token#canAuthorize} is true\n     *\n     * Note: since {@link config} is not evented, we can't listen for changes to\n     * {@link config.credentials.client_id}. As such,\n     * {@link config.credentials.client_id} must always be set before\n     * instantiating a {@link Token}\n     * @instance\n     * @memberof Token\n     * @readonly\n     * @type {boolean}\n     */\n    canDownscope: {\n      deps: ['canAuthorize'],\n      fn() {\n        return this.canAuthorize && !!this.config.client_id;\n      },\n    },\n\n    /**\n     * Indicates if this token can be refreshed. `true` iff\n     * {@link Token@refresh_token} is defined and\n     * {@link config.credentials.refreshCallback()} is defined\n     *\n     * Note: since {@link config} is not evented, we can't listen for changes to\n     * {@link config.credentials.refreshCallback()}. As such,\n     * {@link config.credentials.refreshCallback()} must always be set before\n     * instantiating a {@link Token}\n     * @instance\n     * @memberof Token\n     * @readonly\n     * @type {boolean}\n     */\n    canRefresh: {\n      deps: ['refresh_token'],\n      fn() {\n        if (inBrowser) {\n          return !!this.refresh_token && !!this.config.refreshCallback;\n        }\n\n        return !!this.refresh_token && !!this.config.client_secret;\n      },\n    },\n\n    /**\n     * Indicates if this `Token` is expired. `true` iff {@link Token#expires} is\n     * defined and is less than {@link Date.now()}.\n     * @instance\n     * @memberof Token\n     * @readonly\n     * @type {boolean}\n     */\n    isExpired: {\n      deps: ['expires', '_isExpired'],\n      fn() {\n        // in order to avoid setting `cache:false`, we'll use a private property\n        // and a timer rather than comparing to `Date.now()`;\n        return !!this.expires && this._isExpired;\n      },\n    },\n\n    /**\n     * Cache for toString()\n     * @instance\n     * @memberof Token\n     * @private\n     * @readonly\n     * @type {string}\n     */\n    _string: {\n      deps: ['access_token', 'token_type'],\n      fn() {\n        if (!this.access_token || !this.token_type) {\n          return '';\n        }\n\n        return `${this.token_type} ${this.access_token}`;\n      },\n    },\n  },\n\n  namespace: 'Credentials',\n\n  props: {\n    /**\n     * Used for indexing in the credentials userTokens collection\n     * @instance\n     * @memberof Token\n     * @private\n     * @type {string}\n     */\n    scope: 'string',\n    /**\n     * @instance\n     * @memberof Token\n     * @type {string}\n     */\n    access_token: 'string',\n    /**\n     * @instance\n     * @memberof Token\n     * @type {number}\n     */\n    expires: 'number',\n    /**\n     * @instance\n     * @memberof Token\n     * @type {number}\n     */\n    expires_in: 'number',\n    /**\n     * @instance\n     * @memberof Token\n     * @type {string}\n     */\n    refresh_token: 'string',\n    /**\n     * @instance\n     * @memberof Token\n     * @type {number}\n     */\n    refresh_token_expires: 'number',\n    /**\n     * @instance\n     * @memberof Token\n     * @type {number}\n     */\n    refresh_token_expires_in: 'number',\n    /**\n     * @default \"Bearer\"\n     * @instance\n     * @memberof Token\n     * @type {string}\n     */\n    token_type: {\n      default: 'Bearer',\n      type: 'string',\n    },\n  },\n\n  session: {\n    /**\n     * Used by {@link Token#isExpired} to avoid doing a Date comparison.\n     * @instance\n     * @memberof Token\n     * @private\n     * @type {boolean}\n     */\n    _isExpired: {\n      default: false,\n      type: 'boolean',\n    },\n    /**\n     * Handle to the previous token that we'll revoke when we refresh this\n     * token. The idea is to keep allow two valid tokens when a refresh occurs;\n     * we don't want revoke a token that's in the middle of being used, so when\n     * we do a token refresh, we won't revoke the token being refreshed, but\n     * we'll revoke the previous one.\n     * @instance\n     * @memberof Token\n     * @private\n     * @type {Object}\n     */\n    previousToken: {\n      type: 'state',\n    },\n  },\n\n  @oneFlight({\n    keyFactory(scope) {\n      return scope;\n    },\n  })\n  /**\n   * Uses this token to request a new Token with a subset of this Token's scopes\n   * @instance\n   * @memberof Token\n   * @param {string} scope\n   * @returns {Promise<Token>}\n   */\n  downscope(scope) {\n    this.logger.info(`token: downscoping token to ${scope}`);\n\n    if (this.isExpired) {\n      this.logger.info('token: request received to downscope expired access_token');\n\n      return Promise.reject(new Error('cannot downscope expired access token'));\n    }\n\n    if (!this.canDownscope) {\n      if (this.config.client_id) {\n        this.logger.info('token: request received to downscope invalid access_token');\n      } else {\n        this.logger.trace('token: cannot downscope without client_id');\n      }\n\n      return Promise.reject(new Error('cannot downscope access token'));\n    }\n\n    // Since we're going to use scope as the index in our token collection, it's\n    // important scopes are always deterministically specified.\n    if (scope) {\n      scope = sortScope(scope);\n    }\n\n    // Ideally, we could depend on the service to communicate this error, but\n    // all we get is \"invalid scope\", which, to the lay person, implies\n    // something wrong with *one* of the scopes, not the whole thing.\n    if (scope === sortScope(this.config.scope)) {\n      return Promise.reject(new Error('token: scope reduction requires a reduced scope'));\n    }\n\n    return this.webex\n      .request({\n        method: 'POST',\n        uri: this.config.tokenUrl,\n        addAuthHeader: false,\n        form: {\n          grant_type: 'urn:cisco:oauth:grant-type:scope-reduction',\n          token: this.access_token,\n          scope,\n          client_id: this.config.client_id,\n          self_contained_token: true,\n        },\n      })\n      .then((res) => {\n        this.logger.info(`token: downscoped token to ${scope}`);\n\n        return new Token(Object.assign(res.body, {scope}), {parent: this.parent});\n      });\n  },\n\n  /**\n   * Initializer\n   * @instance\n   * @memberof Token\n   * @param {Object} [attrs={}]\n   * @param {Object} [options={}]\n   * @see {@link WebexPlugin#initialize()}\n   * @returns {Token}\n   */\n  initialize(attrs = {}, options = {}) {\n    Reflect.apply(WebexPlugin.prototype.initialize, this, [attrs, options]);\n\n    if (typeof attrs === 'string') {\n      this.access_token = attrs;\n    }\n\n    if (!this.access_token) {\n      throw new Error('`access_token` is required');\n    }\n\n    // We don't want the derived property `isExpired` to need {cache:false}, so\n    // we'll set up a timer the runs when this token should expire.\n    if (this.expires) {\n      if (this.expires < Date.now()) {\n        this._isExpired = true;\n      } else {\n        safeSetTimeout(() => {\n          this._isExpired = true;\n        }, this.expires - Date.now());\n      }\n    }\n  },\n\n  @oneFlight\n  /**\n   * Refreshes this Token. Relies on\n   * {@link config.credentials.refreshCallback()}\n   * @instance\n   * @memberof Token\n   * @returns {Promise<Token>}\n   */\n  refresh() {\n    if (!this.canRefresh) {\n      throw new Error('Not enough information available to refresh this access token');\n    }\n\n    let promise;\n\n    if (inBrowser) {\n      if (!this.config.refreshCallback) {\n        throw new Error('Cannot refresh access token without refreshCallback');\n      }\n\n      promise = Promise.resolve(this.config.refreshCallback(this.webex, this));\n    }\n\n    return (\n      promise ||\n      this.webex\n        .request({\n          method: 'POST',\n          uri: this.config.tokenUrl,\n          form: {\n            grant_type: 'refresh_token',\n            redirect_uri: this.config.redirect_uri,\n            refresh_token: this.refresh_token,\n          },\n          auth: {\n            user: this.config.client_id,\n            pass: this.config.client_secret,\n            sendImmediately: true,\n          },\n          shouldRefreshAccessToken: false,\n        })\n        .then((res) => res.body)\n    )\n      .then((obj) => {\n        if (!obj) {\n          throw new Error('token: refreshCallback() did not produce an object');\n        }\n        // If the authentication server did not send back a refresh token, copy\n        // the current refresh token and related values to the response (note:\n        // at time of implementation, CI never sends a new refresh token)\n        if (!obj.refresh_token) {\n          Object.assign(\n            obj,\n            pick(this, 'refresh_token', 'refresh_token_expires', 'refresh_token_expires_in')\n          );\n        }\n\n        // If the new token is the same as the previous token, then we may have\n        // found a bug in CI; log the details and reject the Promise\n        if (this.access_token === obj.access_token) {\n          this.logger.error('token: new token matches current token');\n          // log the tokens if it is not production\n          if (process.env.NODE_ENV !== 'production') {\n            this.logger.error('token: current token:', this.access_token);\n            this.logger.error('token: new token:', obj.access_token);\n          }\n\n          return Promise.reject(new Error('new token matches current token'));\n        }\n\n        if (this.previousToken) {\n          this.previousToken.revoke();\n          this.unset('previousToken');\n        }\n\n        obj.previousToken = this;\n        obj.scope = this.scope;\n\n        return new Token(obj, {parent: this.parent});\n      })\n      .catch(processGrantError);\n  },\n\n  @oneFlight\n  /**\n   * Revokes this token and unsets its local properties\n   * @instance\n   * @memberof Token\n   * @returns {Promise}\n   */\n  revoke() {\n    if (this.isExpired) {\n      this.logger.info('token: already expired, not making making revocation request');\n\n      return Promise.resolve();\n    }\n\n    if (!this.canAuthorize) {\n      this.logger.info('token: no longer valid, not making revocation request');\n\n      return Promise.resolve();\n    }\n\n    // FIXME we need to use the user token revocation endpoint to revoke a token\n    // without a client_secret, but it doesn't current support using a token to\n    // revoke itself\n    // Note: I'm not making a canRevoke property because there should be changes\n    // coming to the user token revocation endpoint that allow us to do this\n    // correctly.\n    if (!this.config.client_secret) {\n      this.logger.info('token: no client secret available, not making revocation request');\n\n      return Promise.resolve();\n    }\n\n    this.logger.info('token: revoking access token');\n\n    return this.webex\n      .request({\n        method: 'POST',\n        uri: this.config.revokeUrl,\n        form: {\n          token: this.access_token,\n          token_type_hint: 'access_token',\n        },\n        auth: {\n          user: this.config.client_id,\n          pass: this.config.client_secret,\n          sendImmediately: true,\n        },\n        shouldRefreshAccessToken: false,\n      })\n      .then(() => {\n        this.unset(['access_token', 'expires', 'expires_in', 'token_type']);\n        this.logger.info('token: access token revoked');\n      })\n      .catch(processGrantError);\n  },\n\n  set(...args) {\n    // eslint-disable-next-line prefer-const\n    let [attrs, options] = this._filterSetParameters(...args);\n\n    if (!attrs.token_type && attrs.access_token && attrs.access_token.includes(' ')) {\n      const [token_type, access_token] = attrs.access_token.split(' ');\n\n      attrs = {...attrs, access_token, token_type};\n    }\n    const now = Date.now();\n\n    if (!attrs.expires && attrs.expires_in) {\n      attrs.expires = now + attrs.expires_in * 1000;\n    }\n\n    if (!attrs.refresh_token_expires && attrs.refresh_token_expires_in) {\n      attrs.refresh_token_expires = now + attrs.refresh_token_expires_in * 1000;\n    }\n\n    if (attrs.scope) {\n      attrs.scope = sortScope(attrs.scope);\n    }\n\n    return Reflect.apply(WebexPlugin.prototype.set, this, [attrs, options]);\n  },\n\n  /**\n   * Renders the token object as an HTTP Header Value\n   * @instance\n   * @memberof Token\n   * @returns {string}\n   * @see {@link Object#toString()}\n   */\n  toString() {\n    if (!this._string) {\n      throw new Error('cannot stringify Token');\n    }\n\n    return this._string;\n  },\n\n  /**\n   * Uses a non-producation api to return information about this token. This\n   * method is primarily for tests and will throw if NODE_ENV === production\n   * @instance\n   * @memberof Token\n   * @private\n   * @returns {Promise}\n   */\n  validate() {\n    if (process.env.NODE_ENV === 'production') {\n      throw new Error('Token#validate() must not be used in production');\n    }\n\n    return this.webex\n      .request({\n        method: 'POST',\n        service: 'conversation',\n        resource: 'users/validateAuthToken',\n        body: {\n          token: this.access_token,\n        },\n      })\n      .catch((reason) => {\n        if ('statusCode' in reason) {\n          return Promise.reject(reason);\n        }\n        this.logger.info(\"REMINDER: If you're investigating a network error here, it's normal\");\n\n        // If we got an error that isn't a WebexHttpError, assume the problem is\n        // that we don't have the wdm plugin loaded and service/resource isn't\n        // a valid means of identifying a request.\n        const convApi =\n          process.env.CONVERSATION_SERVICE ||\n          process.env.CONVERSATION_SERVICE_URL ||\n          'https://conv-a.wbx2.com/conversation/api/v1';\n\n        return this.webex.request({\n          method: 'POST',\n          uri: `${convApi}/users/validateAuthToken`,\n          body: {\n            token: this.access_token,\n          },\n          headers: {\n            authorization: `Bearer ${this.access_token}`,\n          },\n        });\n      })\n      .then((res) => res.body);\n  },\n});\n\nexport default Token;\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;AAIA,IAAAA,OAAA,GAAAC,OAAA;AACA,IAAAC,OAAA,GAAAD,OAAA;AACA,IAAAE,aAAA,GAAAF,OAAA;AAEA,IAAAG,eAAA,GAAAC,sBAAA,CAAAJ,OAAA;AACA,IAAAK,YAAA,GAAAD,sBAAA,CAAAJ,OAAA;AAEA,IAAAM,MAAA,GAAAN,OAAA;AACA,IAAAO,YAAA,GAAAC,uBAAA,CAAAR,OAAA;AAAuD,IAAAS,IAAA,EAAAC,IAAA;AAAA,SAAAC,yBAAAC,WAAA,eAAAC,QAAA,kCAAAC,iBAAA,OAAAD,QAAA,QAAAE,gBAAA,OAAAF,QAAA,YAAAF,wBAAA,YAAAA,yBAAAC,WAAA,WAAAA,WAAA,GAAAG,gBAAA,GAAAD,iBAAA,KAAAF,WAAA;AAAA,SAAAJ,wBAAAQ,GAAA,EAAAJ,WAAA,SAAAA,WAAA,IAAAI,GAAA,IAAAA,GAAA,CAAAC,UAAA,WAAAD,GAAA,QAAAA,GAAA,aAAAE,OAAA,CAAAF,GAAA,yBAAAA,GAAA,4BAAAG,OAAA,EAAAH,GAAA,UAAAI,KAAA,GAAAT,wBAAA,CAAAC,WAAA,OAAAQ,KAAA,IAAAA,KAAA,CAAAC,GAAA,CAAAL,GAAA,YAAAI,KAAA,CAAAE,GAAA,CAAAN,GAAA,SAAAO,MAAA,WAAAC,qBAAA,GAAAC,sBAAA,IAAAC,iCAAA,WAAAC,GAAA,IAAAX,GAAA,QAAAW,GAAA,kBAAAC,MAAA,CAAAC,SAAA,CAAAC,cAAA,CAAAC,IAAA,CAAAf,GAAA,EAAAW,GAAA,SAAAK,IAAA,GAAAR,qBAAA,GAAAE,iCAAA,CAAAV,GAAA,EAAAW,GAAA,cAAAK,IAAA,KAAAA,IAAA,CAAAV,GAAA,IAAAU,IAAA,CAAAC,GAAA,KAAAR,sBAAA,CAAAF,MAAA,EAAAI,GAAA,EAAAK,IAAA,YAAAT,MAAA,CAAAI,GAAA,IAAAX,GAAA,CAAAW,GAAA,SAAAJ,MAAA,CAAAJ,OAAA,GAAAH,GAAA,MAAAI,KAAA,IAAAA,KAAA,CAAAa,GAAA,CAAAjB,GAAA,EAAAO,MAAA,YAAAA,MAAA;AAAA,SAAAW,QAAAC,MAAA,EAAAC,cAAA,QAAAC,IAAA,GAAAC,YAAA,CAAAH,MAAA,OAAAI,6BAAA,QAAAC,OAAA,GAAAD,6BAAA,CAAAJ,MAAA,GAAAC,cAAA,KAAAI,OAAA,GAAAA,OAAA,CAAAC,MAAA,WAAAC,GAAA,WAAAhB,iCAAA,CAAAS,MAAA,EAAAO,GAAA,EAAAC,UAAA,OAAAN,IAAA,CAAAO,IAAA,CAAAC,KAAA,CAAAR,IAAA,EAAAG,OAAA,YAAAH,IAAA;AAAA,SAAAS,cAAAC,MAAA,aAAAC,CAAA,MAAAA,CAAA,GAAAC,SAAA,CAAAC,MAAA,EAAAF,CAAA,UAAAG,MAAA,WAAAF,SAAA,CAAAD,CAAA,IAAAC,SAAA,CAAAD,CAAA,QAAAA,CAAA,OAAAd,OAAA,CAAAN,MAAA,CAAAuB,MAAA,OAAAC,OAAA,WAAAzB,GAAA,QAAA0B,gBAAA,CAAAlC,OAAA,EAAA4B,MAAA,EAAApB,GAAA,EAAAwB,MAAA,CAAAxB,GAAA,SAAA2B,iCAAA,GAAAC,wBAAA,CAAAR,MAAA,EAAAO,iCAAA,CAAAH,MAAA,KAAAjB,OAAA,CAAAN,MAAA,CAAAuB,MAAA,GAAAC,OAAA,WAAAzB,GAAA,IAAAF,sBAAA,CAAAsB,MAAA,EAAApB,GAAA,EAAAD,iCAAA,CAAAyB,MAAA,EAAAxB,GAAA,iBAAAoB,MAAA;AAEvD;;AAEA;AACA;AACA;AACA;AACA;AACA;AACA,SAASS,iBAAiBA,CAACC,GAAG,EAAE;EAC9B,IAAIA,GAAG,CAACC,UAAU,KAAK,GAAG,EAAE;IAC1B,OAAOC,QAAA,CAAAxC,OAAA,CAAQyC,MAAM,CAACH,GAAG,CAAC;EAC5B;EAEA,IAAMI,gBAAgB,GAAGC,oBAAW,CAACC,MAAM,CAACN,GAAG,CAACO,IAAI,CAACC,KAAK,CAAC;EAE3D,IAAIJ,gBAAgB,KAAKK,uBAAU,IAAIT,GAAG,YAAYU,uBAAc,EAAE;IACpE,OAAOR,QAAA,CAAAxC,OAAA,CAAQyC,MAAM,CAACH,GAAG,CAAC;EAC5B;EACA,IAAI,CAACI,gBAAgB,EAAE;IACrB,OAAOF,QAAA,CAAAxC,OAAA,CAAQyC,MAAM,CAACH,GAAG,CAAC;EAC5B;EAEA,OAAOE,QAAA,CAAAxC,OAAA,CAAQyC,MAAM,CAAC,IAAIC,gBAAgB,CAACJ,GAAG,CAACW,IAAI,IAAIX,GAAG,CAAC,CAAC;AAC9D;;AAEA;AACA;AACA;AACA,IAAMY,KAAK,GAAGC,oBAAW,CAACC,MAAM,EAAA9D,IAAA,GA4L7B,IAAA+D,iBAAS,EAAC;EACTC,UAAU,WAAAA,WAACC,KAAK,EAAE;IAChB,OAAOA,KAAK;EACd;AACF,CAAC,CAAC,GAAAhE,IAAA,GAhM6B;EAC/BiE,OAAO,EAAE;IACP;AACJ;AACA;AACA;AACA;AACA;AACA;AACA;AACA;IACIC,YAAY,EAAE;MACZC,IAAI,EAAE,CAAC,cAAc,EAAE,WAAW,CAAC;MACnCC,EAAE,WAAAA,GAAA,EAAG;QACH,OAAO,CAAC,CAAC,IAAI,CAACC,YAAY,IAAI,CAAC,IAAI,CAACC,SAAS;MAC/C;IACF,CAAC;IAED;AACJ;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;IACIC,YAAY,EAAE;MACZJ,IAAI,EAAE,CAAC,cAAc,CAAC;MACtBC,EAAE,WAAAA,GAAA,EAAG;QACH,OAAO,IAAI,CAACF,YAAY,IAAI,CAAC,CAAC,IAAI,CAACM,MAAM,CAACC,SAAS;MACrD;IACF,CAAC;IAED;AACJ;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;IACIC,UAAU,EAAE;MACVP,IAAI,EAAE,CAAC,eAAe,CAAC;MACvBC,EAAE,WAAAA,GAAA,EAAG;QACH,IAAIO,iBAAS,EAAE;UACb,OAAO,CAAC,CAAC,IAAI,CAACC,aAAa,IAAI,CAAC,CAAC,IAAI,CAACJ,MAAM,CAACK,eAAe;QAC9D;QAEA,OAAO,CAAC,CAAC,IAAI,CAACD,aAAa,IAAI,CAAC,CAAC,IAAI,CAACJ,MAAM,CAACM,aAAa;MAC5D;IACF,CAAC;IAED;AACJ;AACA;AACA;AACA;AACA;AACA;AACA;IACIR,SAAS,EAAE;MACTH,IAAI,EAAE,CAAC,SAAS,EAAE,YAAY,CAAC;MAC/BC,EAAE,WAAAA,GAAA,EAAG;QACH;QACA;QACA,OAAO,CAAC,CAAC,IAAI,CAACW,OAAO,IAAI,IAAI,CAACC,UAAU;MAC1C;IACF,CAAC;IAED;AACJ;AACA;AACA;AACA;AACA;AACA;AACA;IACIC,OAAO,EAAE;MACPd,IAAI,EAAE,CAAC,cAAc,EAAE,YAAY,CAAC;MACpCC,EAAE,WAAAA,GAAA,EAAG;QACH,IAAI,CAAC,IAAI,CAACC,YAAY,IAAI,CAAC,IAAI,CAACa,UAAU,EAAE;UAC1C,OAAO,EAAE;QACX;QAEA,UAAAC,MAAA,CAAU,IAAI,CAACD,UAAU,OAAAC,MAAA,CAAI,IAAI,CAACd,YAAY;MAChD;IACF;EACF,CAAC;EAEDe,SAAS,EAAE,aAAa;EAExBC,KAAK,EAAE;IACL;AACJ;AACA;AACA;AACA;AACA;AACA;IACIrB,KAAK,EAAE,QAAQ;IACf;AACJ;AACA;AACA;AACA;IACIK,YAAY,EAAE,QAAQ;IACtB;AACJ;AACA;AACA;AACA;IACIU,OAAO,EAAE,QAAQ;IACjB;AACJ;AACA;AACA;AACA;IACIO,UAAU,EAAE,QAAQ;IACpB;AACJ;AACA;AACA;AACA;IACIV,aAAa,EAAE,QAAQ;IACvB;AACJ;AACA;AACA;AACA;IACIW,qBAAqB,EAAE,QAAQ;IAC/B;AACJ;AACA;AACA;AACA;IACIC,wBAAwB,EAAE,QAAQ;IAClC;AACJ;AACA;AACA;AACA;AACA;IACIN,UAAU,EAAE;MACVzE,OAAO,EAAE,QAAQ;MACjBgF,IAAI,EAAE;IACR;EACF,CAAC;EAEDC,OAAO,EAAE;IACP;AACJ;AACA;AACA;AACA;AACA;AACA;IACIV,UAAU,EAAE;MACVvE,OAAO,EAAE,KAAK;MACdgF,IAAI,EAAE;IACR,CAAC;IACD;AACJ;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;IACIE,aAAa,EAAE;MACbF,IAAI,EAAE;IACR;EACF,CAAC;EAOD;AACF;AACA;AACA;AACA;AACA;AACA;EACEG,SAAS,WAAAA,UAAC5B,KAAK,EAAE;IAAA,IAAA6B,KAAA;IACf,IAAI,CAACC,MAAM,CAACC,IAAI,gCAAAZ,MAAA,CAAgCnB,KAAK,EAAG;IAExD,IAAI,IAAI,CAACM,SAAS,EAAE;MAClB,IAAI,CAACwB,MAAM,CAACC,IAAI,CAAC,2DAA2D,CAAC;MAE7E,OAAO9C,QAAA,CAAAxC,OAAA,CAAQyC,MAAM,CAAC,IAAI8C,KAAK,CAAC,uCAAuC,CAAC,CAAC;IAC3E;IAEA,IAAI,CAAC,IAAI,CAACzB,YAAY,EAAE;MACtB,IAAI,IAAI,CAACC,MAAM,CAACC,SAAS,EAAE;QACzB,IAAI,CAACqB,MAAM,CAACC,IAAI,CAAC,2DAA2D,CAAC;MAC/E,CAAC,MAAM;QACL,IAAI,CAACD,MAAM,CAACG,KAAK,CAAC,2CAA2C,CAAC;MAChE;MAEA,OAAOhD,QAAA,CAAAxC,OAAA,CAAQyC,MAAM,CAAC,IAAI8C,KAAK,CAAC,+BAA+B,CAAC,CAAC;IACnE;;IAEA;IACA;IACA,IAAIhC,KAAK,EAAE;MACTA,KAAK,GAAG,IAAAkC,gBAAS,EAAClC,KAAK,CAAC;IAC1B;;IAEA;IACA;IACA;IACA,IAAIA,KAAK,KAAK,IAAAkC,gBAAS,EAAC,IAAI,CAAC1B,MAAM,CAACR,KAAK,CAAC,EAAE;MAC1C,OAAOf,QAAA,CAAAxC,OAAA,CAAQyC,MAAM,CAAC,IAAI8C,KAAK,CAAC,iDAAiD,CAAC,CAAC;IACrF;IAEA,OAAO,IAAI,CAACG,KAAK,CACdC,OAAO,CAAC;MACPC,MAAM,EAAE,MAAM;MACdC,GAAG,EAAE,IAAI,CAAC9B,MAAM,CAAC+B,QAAQ;MACzBC,aAAa,EAAE,KAAK;MACpBC,IAAI,EAAE;QACJC,UAAU,EAAE,4CAA4C;QACxDC,KAAK,EAAE,IAAI,CAACtC,YAAY;QACxBL,KAAK,EAALA,KAAK;QACLS,SAAS,EAAE,IAAI,CAACD,MAAM,CAACC,SAAS;QAChCmC,oBAAoB,EAAE;MACxB;IACF,CAAC,CAAC,CACDC,IAAI,CAAC,UAAC9D,GAAG,EAAK;MACb8C,KAAI,CAACC,MAAM,CAACC,IAAI,+BAAAZ,MAAA,CAA+BnB,KAAK,EAAG;MAEvD,OAAO,IAAIL,KAAK,CAAC,IAAAmD,OAAA,CAAArG,OAAA,EAAcsC,GAAG,CAACO,IAAI,EAAE;QAACU,KAAK,EAALA;MAAK,CAAC,CAAC,EAAE;QAAC+C,MAAM,EAAElB,KAAI,CAACkB;MAAM,CAAC,CAAC;IAC3E,CAAC,CAAC;EACN,CAAC;EAED;AACF;AACA;AACA;AACA;AACA;AACA;AACA;AACA;EACEC,UAAU,WAAAA,WAAA,EAA2B;IAAA,IAAAC,MAAA;IAAA,IAA1BC,KAAK,GAAA3E,SAAA,CAAAC,MAAA,QAAAD,SAAA,QAAA4E,SAAA,GAAA5E,SAAA,MAAG,CAAC,CAAC;IAAA,IAAE6E,OAAO,GAAA7E,SAAA,CAAAC,MAAA,QAAAD,SAAA,QAAA4E,SAAA,GAAA5E,SAAA,MAAG,CAAC,CAAC;IACjC,IAAA8E,MAAA,CAAA5G,OAAA,EAAcmD,oBAAW,CAACzC,SAAS,CAAC6F,UAAU,EAAE,IAAI,EAAE,CAACE,KAAK,EAAEE,OAAO,CAAC,CAAC;IAEvE,IAAI,OAAOF,KAAK,KAAK,QAAQ,EAAE;MAC7B,IAAI,CAAC7C,YAAY,GAAG6C,KAAK;IAC3B;IAEA,IAAI,CAAC,IAAI,CAAC7C,YAAY,EAAE;MACtB,MAAM,IAAI2B,KAAK,CAAC,4BAA4B,CAAC;IAC/C;;IAEA;IACA;IACA,IAAI,IAAI,CAACjB,OAAO,EAAE;MAChB,IAAI,IAAI,CAACA,OAAO,GAAG,IAAAuC,IAAA,CAAA7G,OAAA,GAAU,EAAE;QAC7B,IAAI,CAACuE,UAAU,GAAG,IAAI;MACxB,CAAC,MAAM;QACL,IAAAuC,4BAAc,EAAC,YAAM;UACnBN,MAAI,CAACjC,UAAU,GAAG,IAAI;QACxB,CAAC,EAAE,IAAI,CAACD,OAAO,GAAG,IAAAuC,IAAA,CAAA7G,OAAA,GAAU,CAAC;MAC/B;IACF;EACF,CAAC;EAGD;AACF;AACA;AACA;AACA;AACA;AACA;EACE+G,OAAO,WAAAA,QAAA,EAAG;IAAA,IAAAC,MAAA;IACR,IAAI,CAAC,IAAI,CAAC/C,UAAU,EAAE;MACpB,MAAM,IAAIsB,KAAK,CAAC,+DAA+D,CAAC;IAClF;IAEA,IAAI0B,OAAO;IAEX,IAAI/C,iBAAS,EAAE;MACb,IAAI,CAAC,IAAI,CAACH,MAAM,CAACK,eAAe,EAAE;QAChC,MAAM,IAAImB,KAAK,CAAC,qDAAqD,CAAC;MACxE;MAEA0B,OAAO,GAAGzE,QAAA,CAAAxC,OAAA,CAAQkH,OAAO,CAAC,IAAI,CAACnD,MAAM,CAACK,eAAe,CAAC,IAAI,CAACsB,KAAK,EAAE,IAAI,CAAC,CAAC;IAC1E;IAEA,OAAO,CACLuB,OAAO,IACP,IAAI,CAACvB,KAAK,CACPC,OAAO,CAAC;MACPC,MAAM,EAAE,MAAM;MACdC,GAAG,EAAE,IAAI,CAAC9B,MAAM,CAAC+B,QAAQ;MACzBE,IAAI,EAAE;QACJC,UAAU,EAAE,eAAe;QAC3BkB,YAAY,EAAE,IAAI,CAACpD,MAAM,CAACoD,YAAY;QACtChD,aAAa,EAAE,IAAI,CAACA;MACtB,CAAC;MACDiD,IAAI,EAAE;QACJC,IAAI,EAAE,IAAI,CAACtD,MAAM,CAACC,SAAS;QAC3BsD,IAAI,EAAE,IAAI,CAACvD,MAAM,CAACM,aAAa;QAC/BkD,eAAe,EAAE;MACnB,CAAC;MACDC,wBAAwB,EAAE;IAC5B,CAAC,CAAC,CACDpB,IAAI,CAAC,UAAC9D,GAAG;MAAA,OAAKA,GAAG,CAACO,IAAI;IAAA,EAAC,EAEzBuD,IAAI,CAAC,UAACvG,GAAG,EAAK;MACb,IAAI,CAACA,GAAG,EAAE;QACR,MAAM,IAAI0F,KAAK,CAAC,oDAAoD,CAAC;MACvE;MACA;MACA;MACA;MACA,IAAI,CAAC1F,GAAG,CAACsE,aAAa,EAAE;QACtB,IAAAkC,OAAA,CAAArG,OAAA,EACEH,GAAG,EACH,IAAA4H,YAAI,EAACT,MAAI,EAAE,eAAe,EAAE,uBAAuB,EAAE,0BAA0B,CAAC,CACjF;MACH;;MAEA;MACA;MACA,IAAIA,MAAI,CAACpD,YAAY,KAAK/D,GAAG,CAAC+D,YAAY,EAAE;QAC1CoD,MAAI,CAAC3B,MAAM,CAACvC,KAAK,CAAC,wCAAwC,CAAC;QAC3D;QACA,IAAI4E,OAAO,CAACC,GAAG,CAACC,QAAQ,KAAK,YAAY,EAAE;UACzCZ,MAAI,CAAC3B,MAAM,CAACvC,KAAK,CAAC,uBAAuB,EAAEkE,MAAI,CAACpD,YAAY,CAAC;UAC7DoD,MAAI,CAAC3B,MAAM,CAACvC,KAAK,CAAC,mBAAmB,EAAEjD,GAAG,CAAC+D,YAAY,CAAC;QAC1D;QAEA,OAAOpB,QAAA,CAAAxC,OAAA,CAAQyC,MAAM,CAAC,IAAI8C,KAAK,CAAC,iCAAiC,CAAC,CAAC;MACrE;MAEA,IAAIyB,MAAI,CAAC9B,aAAa,EAAE;QACtB8B,MAAI,CAAC9B,aAAa,CAAC2C,MAAM,EAAE;QAC3Bb,MAAI,CAACc,KAAK,CAAC,eAAe,CAAC;MAC7B;MAEAjI,GAAG,CAACqF,aAAa,GAAG8B,MAAI;MACxBnH,GAAG,CAAC0D,KAAK,GAAGyD,MAAI,CAACzD,KAAK;MAEtB,OAAO,IAAIL,KAAK,CAACrD,GAAG,EAAE;QAACyG,MAAM,EAAEU,MAAI,CAACV;MAAM,CAAC,CAAC;IAC9C,CAAC,CAAC,CACDyB,KAAK,CAAC1F,iBAAiB,CAAC;EAC7B,CAAC;EAGD;AACF;AACA;AACA;AACA;AACA;EACEwF,MAAM,WAAAA,OAAA,EAAG;IAAA,IAAAG,MAAA;IACP,IAAI,IAAI,CAACnE,SAAS,EAAE;MAClB,IAAI,CAACwB,MAAM,CAACC,IAAI,CAAC,8DAA8D,CAAC;MAEhF,OAAO9C,QAAA,CAAAxC,OAAA,CAAQkH,OAAO,EAAE;IAC1B;IAEA,IAAI,CAAC,IAAI,CAACzD,YAAY,EAAE;MACtB,IAAI,CAAC4B,MAAM,CAACC,IAAI,CAAC,uDAAuD,CAAC;MAEzE,OAAO9C,QAAA,CAAAxC,OAAA,CAAQkH,OAAO,EAAE;IAC1B;;IAEA;IACA;IACA;IACA;IACA;IACA;IACA,IAAI,CAAC,IAAI,CAACnD,MAAM,CAACM,aAAa,EAAE;MAC9B,IAAI,CAACgB,MAAM,CAACC,IAAI,CAAC,kEAAkE,CAAC;MAEpF,OAAO9C,QAAA,CAAAxC,OAAA,CAAQkH,OAAO,EAAE;IAC1B;IAEA,IAAI,CAAC7B,MAAM,CAACC,IAAI,CAAC,8BAA8B,CAAC;IAEhD,OAAO,IAAI,CAACI,KAAK,CACdC,OAAO,CAAC;MACPC,MAAM,EAAE,MAAM;MACdC,GAAG,EAAE,IAAI,CAAC9B,MAAM,CAACkE,SAAS;MAC1BjC,IAAI,EAAE;QACJE,KAAK,EAAE,IAAI,CAACtC,YAAY;QACxBsE,eAAe,EAAE;MACnB,CAAC;MACDd,IAAI,EAAE;QACJC,IAAI,EAAE,IAAI,CAACtD,MAAM,CAACC,SAAS;QAC3BsD,IAAI,EAAE,IAAI,CAACvD,MAAM,CAACM,aAAa;QAC/BkD,eAAe,EAAE;MACnB,CAAC;MACDC,wBAAwB,EAAE;IAC5B,CAAC,CAAC,CACDpB,IAAI,CAAC,YAAM;MACV4B,MAAI,CAACF,KAAK,CAAC,CAAC,cAAc,EAAE,SAAS,EAAE,YAAY,EAAE,YAAY,CAAC,CAAC;MACnEE,MAAI,CAAC3C,MAAM,CAACC,IAAI,CAAC,6BAA6B,CAAC;IACjD,CAAC,CAAC,CACDyC,KAAK,CAAC1F,iBAAiB,CAAC;EAC7B,CAAC;EAEDvB,GAAG,WAAAA,IAAA,EAAU;IACX;IACA,IAAAqH,qBAAA,GAAuB,IAAI,CAACC,oBAAoB,CAAA1G,KAAA,CAAzB,IAAI,EAAAI,SAAA,CAA8B;MAAAuG,sBAAA,OAAAC,eAAA,CAAAtI,OAAA,EAAAmI,qBAAA;MAApD1B,KAAK,GAAA4B,sBAAA;MAAE1B,OAAO,GAAA0B,sBAAA;IAEnB,IAAI,CAAC5B,KAAK,CAAChC,UAAU,IAAIgC,KAAK,CAAC7C,YAAY,IAAI6C,KAAK,CAAC7C,YAAY,CAAC2E,QAAQ,CAAC,GAAG,CAAC,EAAE;MAC/E,IAAAC,qBAAA,GAAmC/B,KAAK,CAAC7C,YAAY,CAAC6E,KAAK,CAAC,GAAG,CAAC;QAAAC,sBAAA,OAAAJ,eAAA,CAAAtI,OAAA,EAAAwI,qBAAA;QAAzD/D,UAAU,GAAAiE,sBAAA;QAAE9E,YAAY,GAAA8E,sBAAA;MAE/BjC,KAAK,GAAA9E,aAAA,CAAAA,aAAA,KAAO8E,KAAK;QAAE7C,YAAY,EAAZA,YAAY;QAAEa,UAAU,EAAVA;MAAU,EAAC;IAC9C;IACA,IAAMkE,GAAG,GAAG,IAAA9B,IAAA,CAAA7G,OAAA,GAAU;IAEtB,IAAI,CAACyG,KAAK,CAACnC,OAAO,IAAImC,KAAK,CAAC5B,UAAU,EAAE;MACtC4B,KAAK,CAACnC,OAAO,GAAGqE,GAAG,GAAGlC,KAAK,CAAC5B,UAAU,GAAG,IAAI;IAC/C;IAEA,IAAI,CAAC4B,KAAK,CAAC3B,qBAAqB,IAAI2B,KAAK,CAAC1B,wBAAwB,EAAE;MAClE0B,KAAK,CAAC3B,qBAAqB,GAAG6D,GAAG,GAAGlC,KAAK,CAAC1B,wBAAwB,GAAG,IAAI;IAC3E;IAEA,IAAI0B,KAAK,CAAClD,KAAK,EAAE;MACfkD,KAAK,CAAClD,KAAK,GAAG,IAAAkC,gBAAS,EAACgB,KAAK,CAAClD,KAAK,CAAC;IACtC;IAEA,OAAO,IAAAqD,MAAA,CAAA5G,OAAA,EAAcmD,oBAAW,CAACzC,SAAS,CAACI,GAAG,EAAE,IAAI,EAAE,CAAC2F,KAAK,EAAEE,OAAO,CAAC,CAAC;EACzE,CAAC;EAED;AACF;AACA;AACA;AACA;AACA;AACA;EACEiC,QAAQ,WAAAA,SAAA,EAAG;IACT,IAAI,CAAC,IAAI,CAACpE,OAAO,EAAE;MACjB,MAAM,IAAIe,KAAK,CAAC,wBAAwB,CAAC;IAC3C;IAEA,OAAO,IAAI,CAACf,OAAO;EACrB,CAAC;EAED;AACF;AACA;AACA;AACA;AACA;AACA;AACA;EACEqE,QAAQ,WAAAA,SAAA,EAAG;IAAA,IAAAC,MAAA;IACT,IAAIpB,OAAO,CAACC,GAAG,CAACC,QAAQ,KAAK,YAAY,EAAE;MACzC,MAAM,IAAIrC,KAAK,CAAC,iDAAiD,CAAC;IACpE;IAEA,OAAO,IAAI,CAACG,KAAK,CACdC,OAAO,CAAC;MACPC,MAAM,EAAE,MAAM;MACdmD,OAAO,EAAE,cAAc;MACvBC,QAAQ,EAAE,yBAAyB;MACnCnG,IAAI,EAAE;QACJqD,KAAK,EAAE,IAAI,CAACtC;MACd;IACF,CAAC,CAAC,CACDmE,KAAK,CAAC,UAACkB,MAAM,EAAK;MACjB,IAAI,YAAY,IAAIA,MAAM,EAAE;QAC1B,OAAOzG,QAAA,CAAAxC,OAAA,CAAQyC,MAAM,CAACwG,MAAM,CAAC;MAC/B;MACAH,MAAI,CAACzD,MAAM,CAACC,IAAI,CAAC,qEAAqE,CAAC;;MAEvF;MACA;MACA;MACA,IAAM4D,OAAO,GACXxB,OAAO,CAACC,GAAG,CAACwB,oBAAoB,IAChCzB,OAAO,CAACC,GAAG,CAACyB,wBAAwB,IACpC,6CAA6C;MAE/C,OAAON,MAAI,CAACpD,KAAK,CAACC,OAAO,CAAC;QACxBC,MAAM,EAAE,MAAM;QACdC,GAAG,KAAAnB,MAAA,CAAKwE,OAAO,6BAA0B;QACzCrG,IAAI,EAAE;UACJqD,KAAK,EAAE4C,MAAI,CAAClF;QACd,CAAC;QACDyF,OAAO,EAAE;UACPC,aAAa,YAAA5E,MAAA,CAAYoE,MAAI,CAAClF,YAAY;QAC5C;MACF,CAAC,CAAC;IACJ,CAAC,CAAC,CACDwC,IAAI,CAAC,UAAC9D,GAAG;MAAA,OAAKA,GAAG,CAACO,IAAI;IAAA,EAAC;EAC5B,CAAC;EAAA0G,OAAA;AACH,CAAC,OAAAC,0BAAA,CAAAxJ,OAAA,EAAAT,IAAA,gBAAAD,IAAA,OAAAmK,yBAAA,CAAAzJ,OAAA,EAAAT,IAAA,gBAAAA,IAAA,OAAAiK,0BAAA,CAAAxJ,OAAA,EAAAT,IAAA,cArOE8D,iBAAS,OAAAoG,yBAAA,CAAAzJ,OAAA,EAAAT,IAAA,cAAAA,IAAA,OAAAiK,0BAAA,CAAAxJ,OAAA,EAAAT,IAAA,aAmFT8D,iBAAS,OAAAoG,yBAAA,CAAAzJ,OAAA,EAAAT,IAAA,aAAAA,IAAA,IAAAA,IAAA,GAkJV;AAAC,IAAAmK,QAAA,GAEYxG,KAAK;AAAAyG,OAAA,CAAA3J,OAAA,GAAA0J,QAAA"}
+{"version":3,"names":["_common","require","_commonTimers","_webexHttpError","_interopRequireDefault","_webexPlugin","_scope","_grantErrors","_interopRequireWildcard","_dec","_obj","_getRequireWildcardCache","nodeInterop","_WeakMap","cacheBabelInterop","cacheNodeInterop","obj","__esModule","_typeof","default","cache","has","get","newObj","hasPropertyDescriptor","_Object$defineProperty","_Object$getOwnPropertyDescriptor2","key","Object","prototype","hasOwnProperty","call","desc","set","ownKeys","object","enumerableOnly","keys","_Object$keys","_Object$getOwnPropertySymbols","symbols","filter","sym","enumerable","push","apply","_objectSpread","target","i","arguments","length","source","forEach","_defineProperty2","_Object$getOwnPropertyDescriptors","_Object$defineProperties","processGrantError","res","statusCode","_promise","reject","ErrorConstructor","grantErrors","select","body","error","OAuthError","WebexHttpError","_res","Token","WebexPlugin","extend","oneFlight","keyFactory","scope","derived","canAuthorize","deps","fn","access_token","isExpired","canDownscope","config","client_id","canRefresh","inBrowser","refresh_token","refreshCallback","client_secret","expires","_isExpired","_string","token_type","concat","namespace","props","expires_in","refresh_token_expires","refresh_token_expires_in","type","session","previousToken","downscope","_this","logger","info","Error","trace","sortScope","webex","request","method","uri","tokenUrl","addAuthHeader","form","grant_type","token","self_contained_token","then","_assign","parent","initialize","_this2","attrs","undefined","options","_apply","_now","safeSetTimeout","refresh","_this3","promise","resolve","redirect_uri","auth","user","pass","sendImmediately","shouldRefreshAccessToken","_pick2","process","env","NODE_ENV","revoke","unset","catch","_this4","revokeUrl","token_type_hint","_this$_filterSetParam","_filterSetParameters","_this$_filterSetParam2","_slicedToArray2","includes","_attrs$access_token$s","split","_attrs$access_token$s2","now","toString","validate","_this5","service","resource","reason","convApi","CONVERSATION_SERVICE","CONVERSATION_SERVICE_URL","headers","authorization","version","_applyDecoratedDescriptor2","_getOwnPropertyDescriptor","_default","exports"],"sources":["token.js"],"sourcesContent":["/*!\n * Copyright (c) 2015-2020 Cisco Systems, Inc. See LICENSE file.\n */\n\nimport {pick} from 'lodash';\nimport {inBrowser, oneFlight} from '@webex/common';\nimport {safeSetTimeout} from '@webex/common-timers';\n\nimport WebexHttpError from '../webex-http-error';\nimport WebexPlugin from '../webex-plugin';\n\nimport {sortScope} from './scope';\nimport grantErrors, {OAuthError} from './grant-errors';\n\n/* eslint-disable camelcase */\n\n/**\n * Parse response from CI and converts to structured error when appropriate\n * @param {WebexHttpError} res\n * @private\n * @returns {GrantError}\n */\nfunction processGrantError(res) {\n  if (res.statusCode !== 400) {\n    return Promise.reject(res);\n  }\n\n  const ErrorConstructor = grantErrors.select(res.body.error);\n\n  if (ErrorConstructor === OAuthError && res instanceof WebexHttpError) {\n    return Promise.reject(res);\n  }\n  if (!ErrorConstructor) {\n    return Promise.reject(res);\n  }\n\n  return Promise.reject(new ErrorConstructor(res._res || res));\n}\n\n/**\n * @class\n */\nconst Token = WebexPlugin.extend({\n  derived: {\n    /**\n     * Indicates if this token can be used in an auth header. `true` iff\n     * {@link Token#access_token} is defined and {@link Token#isExpired} is\n     * false.\n     * @instance\n     * @memberof Token\n     * @readonly\n     * @type {boolean}\n     */\n    canAuthorize: {\n      deps: ['access_token', 'isExpired'],\n      fn() {\n        return !!this.access_token && !this.isExpired;\n      },\n    },\n\n    /**\n     * Indicates that this token can be downscoped. `true` iff\n     * {@link config.credentials.client_id} is defined and if\n     * {@link Token#canAuthorize} is true\n     *\n     * Note: since {@link config} is not evented, we can't listen for changes to\n     * {@link config.credentials.client_id}. As such,\n     * {@link config.credentials.client_id} must always be set before\n     * instantiating a {@link Token}\n     * @instance\n     * @memberof Token\n     * @readonly\n     * @type {boolean}\n     */\n    canDownscope: {\n      deps: ['canAuthorize'],\n      fn() {\n        return this.canAuthorize && !!this.config.client_id;\n      },\n    },\n\n    /**\n     * Indicates if this token can be refreshed. `true` iff\n     * {@link Token@refresh_token} is defined and\n     * {@link config.credentials.refreshCallback()} is defined\n     *\n     * Note: since {@link config} is not evented, we can't listen for changes to\n     * {@link config.credentials.refreshCallback()}. As such,\n     * {@link config.credentials.refreshCallback()} must always be set before\n     * instantiating a {@link Token}\n     * @instance\n     * @memberof Token\n     * @readonly\n     * @type {boolean}\n     */\n    canRefresh: {\n      deps: ['refresh_token'],\n      fn() {\n        if (inBrowser) {\n          return !!this.refresh_token && !!this.config.refreshCallback;\n        }\n\n        return !!this.refresh_token && !!this.config.client_secret;\n      },\n    },\n\n    /**\n     * Indicates if this `Token` is expired. `true` iff {@link Token#expires} is\n     * defined and is less than {@link Date.now()}.\n     * @instance\n     * @memberof Token\n     * @readonly\n     * @type {boolean}\n     */\n    isExpired: {\n      deps: ['expires', '_isExpired'],\n      fn() {\n        // in order to avoid setting `cache:false`, we'll use a private property\n        // and a timer rather than comparing to `Date.now()`;\n        return !!this.expires && this._isExpired;\n      },\n    },\n\n    /**\n     * Cache for toString()\n     * @instance\n     * @memberof Token\n     * @private\n     * @readonly\n     * @type {string}\n     */\n    _string: {\n      deps: ['access_token', 'token_type'],\n      fn() {\n        if (!this.access_token || !this.token_type) {\n          return '';\n        }\n\n        return `${this.token_type} ${this.access_token}`;\n      },\n    },\n  },\n\n  namespace: 'Credentials',\n\n  props: {\n    /**\n     * Used for indexing in the credentials userTokens collection\n     * @instance\n     * @memberof Token\n     * @private\n     * @type {string}\n     */\n    scope: 'string',\n    /**\n     * @instance\n     * @memberof Token\n     * @type {string}\n     */\n    access_token: 'string',\n    /**\n     * @instance\n     * @memberof Token\n     * @type {number}\n     */\n    expires: 'number',\n    /**\n     * @instance\n     * @memberof Token\n     * @type {number}\n     */\n    expires_in: 'number',\n    /**\n     * @instance\n     * @memberof Token\n     * @type {string}\n     */\n    refresh_token: 'string',\n    /**\n     * @instance\n     * @memberof Token\n     * @type {number}\n     */\n    refresh_token_expires: 'number',\n    /**\n     * @instance\n     * @memberof Token\n     * @type {number}\n     */\n    refresh_token_expires_in: 'number',\n    /**\n     * @default \"Bearer\"\n     * @instance\n     * @memberof Token\n     * @type {string}\n     */\n    token_type: {\n      default: 'Bearer',\n      type: 'string',\n    },\n  },\n\n  session: {\n    /**\n     * Used by {@link Token#isExpired} to avoid doing a Date comparison.\n     * @instance\n     * @memberof Token\n     * @private\n     * @type {boolean}\n     */\n    _isExpired: {\n      default: false,\n      type: 'boolean',\n    },\n    /**\n     * Handle to the previous token that we'll revoke when we refresh this\n     * token. The idea is to keep allow two valid tokens when a refresh occurs;\n     * we don't want revoke a token that's in the middle of being used, so when\n     * we do a token refresh, we won't revoke the token being refreshed, but\n     * we'll revoke the previous one.\n     * @instance\n     * @memberof Token\n     * @private\n     * @type {Object}\n     */\n    previousToken: {\n      type: 'state',\n    },\n  },\n\n  @oneFlight({\n    keyFactory(scope) {\n      return scope;\n    },\n  })\n  /**\n   * Uses this token to request a new Token with a subset of this Token's scopes\n   * @instance\n   * @memberof Token\n   * @param {string} scope\n   * @returns {Promise<Token>}\n   */\n  downscope(scope) {\n    this.logger.info(`token: downscoping token to ${scope}`);\n\n    if (this.isExpired) {\n      this.logger.info('token: request received to downscope expired access_token');\n\n      return Promise.reject(new Error('cannot downscope expired access token'));\n    }\n\n    if (!this.canDownscope) {\n      if (this.config.client_id) {\n        this.logger.info('token: request received to downscope invalid access_token');\n      } else {\n        this.logger.trace('token: cannot downscope without client_id');\n      }\n\n      return Promise.reject(new Error('cannot downscope access token'));\n    }\n\n    // Since we're going to use scope as the index in our token collection, it's\n    // important scopes are always deterministically specified.\n    if (scope) {\n      scope = sortScope(scope);\n    }\n\n    // Ideally, we could depend on the service to communicate this error, but\n    // all we get is \"invalid scope\", which, to the lay person, implies\n    // something wrong with *one* of the scopes, not the whole thing.\n    if (scope === sortScope(this.config.scope)) {\n      return Promise.reject(new Error('token: scope reduction requires a reduced scope'));\n    }\n\n    return this.webex\n      .request({\n        method: 'POST',\n        uri: this.config.tokenUrl,\n        addAuthHeader: false,\n        form: {\n          grant_type: 'urn:cisco:oauth:grant-type:scope-reduction',\n          token: this.access_token,\n          scope,\n          client_id: this.config.client_id,\n          self_contained_token: true,\n        },\n      })\n      .then((res) => {\n        this.logger.info(`token: downscoped token to ${scope}`);\n\n        return new Token(Object.assign(res.body, {scope}), {parent: this.parent});\n      });\n  },\n\n  /**\n   * Initializer\n   * @instance\n   * @memberof Token\n   * @param {Object} [attrs={}]\n   * @param {Object} [options={}]\n   * @see {@link WebexPlugin#initialize()}\n   * @returns {Token}\n   */\n  initialize(attrs = {}, options = {}) {\n    Reflect.apply(WebexPlugin.prototype.initialize, this, [attrs, options]);\n\n    if (typeof attrs === 'string') {\n      this.access_token = attrs;\n    }\n\n    if (!this.access_token) {\n      throw new Error('`access_token` is required');\n    }\n\n    // We don't want the derived property `isExpired` to need {cache:false}, so\n    // we'll set up a timer the runs when this token should expire.\n    if (this.expires) {\n      if (this.expires < Date.now()) {\n        this._isExpired = true;\n      } else {\n        safeSetTimeout(() => {\n          this._isExpired = true;\n        }, this.expires - Date.now());\n      }\n    }\n  },\n\n  @oneFlight\n  /**\n   * Refreshes this Token. Relies on\n   * {@link config.credentials.refreshCallback()}\n   * @instance\n   * @memberof Token\n   * @returns {Promise<Token>}\n   */\n  refresh() {\n    if (!this.canRefresh) {\n      throw new Error('Not enough information available to refresh this access token');\n    }\n\n    let promise;\n\n    if (inBrowser) {\n      if (!this.config.refreshCallback) {\n        throw new Error('Cannot refresh access token without refreshCallback');\n      }\n\n      promise = Promise.resolve(this.config.refreshCallback(this.webex, this));\n    }\n\n    return (\n      promise ||\n      this.webex\n        .request({\n          method: 'POST',\n          uri: this.config.tokenUrl,\n          form: {\n            grant_type: 'refresh_token',\n            redirect_uri: this.config.redirect_uri,\n            refresh_token: this.refresh_token,\n          },\n          auth: {\n            user: this.config.client_id,\n            pass: this.config.client_secret,\n            sendImmediately: true,\n          },\n          shouldRefreshAccessToken: false,\n        })\n        .then((res) => res.body)\n    )\n      .then((obj) => {\n        if (!obj) {\n          throw new Error('token: refreshCallback() did not produce an object');\n        }\n        // If the authentication server did not send back a refresh token, copy\n        // the current refresh token and related values to the response (note:\n        // at time of implementation, CI never sends a new refresh token)\n        if (!obj.refresh_token) {\n          Object.assign(\n            obj,\n            pick(this, 'refresh_token', 'refresh_token_expires', 'refresh_token_expires_in')\n          );\n        }\n\n        // If the new token is the same as the previous token, then we may have\n        // found a bug in CI; log the details and reject the Promise\n        if (this.access_token === obj.access_token) {\n          this.logger.error('token: new token matches current token');\n          // log the tokens if it is not production\n          if (process.env.NODE_ENV !== 'production') {\n            this.logger.error('token: current token:', this.access_token);\n            this.logger.error('token: new token:', obj.access_token);\n          }\n\n          return Promise.reject(new Error('new token matches current token'));\n        }\n\n        if (this.previousToken) {\n          this.previousToken.revoke();\n          this.unset('previousToken');\n        }\n\n        obj.previousToken = this;\n        obj.scope = this.scope;\n\n        return new Token(obj, {parent: this.parent});\n      })\n      .catch(processGrantError);\n  },\n\n  @oneFlight\n  /**\n   * Revokes this token and unsets its local properties\n   * @instance\n   * @memberof Token\n   * @returns {Promise}\n   */\n  revoke() {\n    if (this.isExpired) {\n      this.logger.info('token: already expired, not making making revocation request');\n\n      return Promise.resolve();\n    }\n\n    if (!this.canAuthorize) {\n      this.logger.info('token: no longer valid, not making revocation request');\n\n      return Promise.resolve();\n    }\n\n    // FIXME we need to use the user token revocation endpoint to revoke a token\n    // without a client_secret, but it doesn't current support using a token to\n    // revoke itself\n    // Note: I'm not making a canRevoke property because there should be changes\n    // coming to the user token revocation endpoint that allow us to do this\n    // correctly.\n    if (!this.config.client_secret) {\n      this.logger.info('token: no client secret available, not making revocation request');\n\n      return Promise.resolve();\n    }\n\n    this.logger.info('token: revoking access token');\n\n    return this.webex\n      .request({\n        method: 'POST',\n        uri: this.config.revokeUrl,\n        form: {\n          token: this.access_token,\n          token_type_hint: 'access_token',\n        },\n        auth: {\n          user: this.config.client_id,\n          pass: this.config.client_secret,\n          sendImmediately: true,\n        },\n        shouldRefreshAccessToken: false,\n      })\n      .then(() => {\n        this.unset(['access_token', 'expires', 'expires_in', 'token_type']);\n        this.logger.info('token: access token revoked');\n      })\n      .catch(processGrantError);\n  },\n\n  set(...args) {\n    // eslint-disable-next-line prefer-const\n    let [attrs, options] = this._filterSetParameters(...args);\n\n    if (!attrs.token_type && attrs.access_token && attrs.access_token.includes(' ')) {\n      const [token_type, access_token] = attrs.access_token.split(' ');\n\n      attrs = {...attrs, access_token, token_type};\n    }\n    const now = Date.now();\n\n    if (!attrs.expires && attrs.expires_in) {\n      attrs.expires = now + attrs.expires_in * 1000;\n    }\n\n    if (!attrs.refresh_token_expires && attrs.refresh_token_expires_in) {\n      attrs.refresh_token_expires = now + attrs.refresh_token_expires_in * 1000;\n    }\n\n    if (attrs.scope) {\n      attrs.scope = sortScope(attrs.scope);\n    }\n\n    return Reflect.apply(WebexPlugin.prototype.set, this, [attrs, options]);\n  },\n\n  /**\n   * Renders the token object as an HTTP Header Value\n   * @instance\n   * @memberof Token\n   * @returns {string}\n   * @see {@link Object#toString()}\n   */\n  toString() {\n    if (!this._string) {\n      throw new Error('cannot stringify Token');\n    }\n\n    return this._string;\n  },\n\n  /**\n   * Uses a non-producation api to return information about this token. This\n   * method is primarily for tests and will throw if NODE_ENV === production\n   * @instance\n   * @memberof Token\n   * @private\n   * @returns {Promise}\n   */\n  validate() {\n    if (process.env.NODE_ENV === 'production') {\n      throw new Error('Token#validate() must not be used in production');\n    }\n\n    return this.webex\n      .request({\n        method: 'POST',\n        service: 'conversation',\n        resource: 'users/validateAuthToken',\n        body: {\n          token: this.access_token,\n        },\n      })\n      .catch((reason) => {\n        if ('statusCode' in reason) {\n          return Promise.reject(reason);\n        }\n        this.logger.info(\"REMINDER: If you're investigating a network error here, it's normal\");\n\n        // If we got an error that isn't a WebexHttpError, assume the problem is\n        // that we don't have the wdm plugin loaded and service/resource isn't\n        // a valid means of identifying a request.\n        const convApi =\n          process.env.CONVERSATION_SERVICE ||\n          process.env.CONVERSATION_SERVICE_URL ||\n          'https://conv-a.wbx2.com/conversation/api/v1';\n\n        return this.webex.request({\n          method: 'POST',\n          uri: `${convApi}/users/validateAuthToken`,\n          body: {\n            token: this.access_token,\n          },\n          headers: {\n            authorization: `Bearer ${this.access_token}`,\n          },\n        });\n      })\n      .then((res) => res.body);\n  },\n});\n\nexport default Token;\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;AAKA,IAAAA,OAAA,GAAAC,OAAA;AACA,IAAAC,aAAA,GAAAD,OAAA;AAEA,IAAAE,eAAA,GAAAC,sBAAA,CAAAH,OAAA;AACA,IAAAI,YAAA,GAAAD,sBAAA,CAAAH,OAAA;AAEA,IAAAK,MAAA,GAAAL,OAAA;AACA,IAAAM,YAAA,GAAAC,uBAAA,CAAAP,OAAA;AAAuD,IAAAQ,IAAA,EAAAC,IAAA;AAAA,SAAAC,yBAAAC,WAAA,eAAAC,QAAA,kCAAAC,iBAAA,OAAAD,QAAA,QAAAE,gBAAA,OAAAF,QAAA,YAAAF,wBAAA,YAAAA,yBAAAC,WAAA,WAAAA,WAAA,GAAAG,gBAAA,GAAAD,iBAAA,KAAAF,WAAA;AAAA,SAAAJ,wBAAAQ,GAAA,EAAAJ,WAAA,SAAAA,WAAA,IAAAI,GAAA,IAAAA,GAAA,CAAAC,UAAA,WAAAD,GAAA,QAAAA,GAAA,aAAAE,OAAA,CAAAF,GAAA,yBAAAA,GAAA,4BAAAG,OAAA,EAAAH,GAAA,UAAAI,KAAA,GAAAT,wBAAA,CAAAC,WAAA,OAAAQ,KAAA,IAAAA,KAAA,CAAAC,GAAA,CAAAL,GAAA,YAAAI,KAAA,CAAAE,GAAA,CAAAN,GAAA,SAAAO,MAAA,WAAAC,qBAAA,GAAAC,sBAAA,IAAAC,iCAAA,WAAAC,GAAA,IAAAX,GAAA,QAAAW,GAAA,kBAAAC,MAAA,CAAAC,SAAA,CAAAC,cAAA,CAAAC,IAAA,CAAAf,GAAA,EAAAW,GAAA,SAAAK,IAAA,GAAAR,qBAAA,GAAAE,iCAAA,CAAAV,GAAA,EAAAW,GAAA,cAAAK,IAAA,KAAAA,IAAA,CAAAV,GAAA,IAAAU,IAAA,CAAAC,GAAA,KAAAR,sBAAA,CAAAF,MAAA,EAAAI,GAAA,EAAAK,IAAA,YAAAT,MAAA,CAAAI,GAAA,IAAAX,GAAA,CAAAW,GAAA,SAAAJ,MAAA,CAAAJ,OAAA,GAAAH,GAAA,MAAAI,KAAA,IAAAA,KAAA,CAAAa,GAAA,CAAAjB,GAAA,EAAAO,MAAA,YAAAA,MAAA;AAAA,SAAAW,QAAAC,MAAA,EAAAC,cAAA,QAAAC,IAAA,GAAAC,YAAA,CAAAH,MAAA,OAAAI,6BAAA,QAAAC,OAAA,GAAAD,6BAAA,CAAAJ,MAAA,GAAAC,cAAA,KAAAI,OAAA,GAAAA,OAAA,CAAAC,MAAA,WAAAC,GAAA,WAAAhB,iCAAA,CAAAS,MAAA,EAAAO,GAAA,EAAAC,UAAA,OAAAN,IAAA,CAAAO,IAAA,CAAAC,KAAA,CAAAR,IAAA,EAAAG,OAAA,YAAAH,IAAA;AAAA,SAAAS,cAAAC,MAAA,aAAAC,CAAA,MAAAA,CAAA,GAAAC,SAAA,CAAAC,MAAA,EAAAF,CAAA,UAAAG,MAAA,WAAAF,SAAA,CAAAD,CAAA,IAAAC,SAAA,CAAAD,CAAA,QAAAA,CAAA,OAAAd,OAAA,CAAAN,MAAA,CAAAuB,MAAA,OAAAC,OAAA,WAAAzB,GAAA,QAAA0B,gBAAA,CAAAlC,OAAA,EAAA4B,MAAA,EAAApB,GAAA,EAAAwB,MAAA,CAAAxB,GAAA,SAAA2B,iCAAA,GAAAC,wBAAA,CAAAR,MAAA,EAAAO,iCAAA,CAAAH,MAAA,KAAAjB,OAAA,CAAAN,MAAA,CAAAuB,MAAA,GAAAC,OAAA,WAAAzB,GAAA,IAAAF,sBAAA,CAAAsB,MAAA,EAAApB,GAAA,EAAAD,iCAAA,CAAAyB,MAAA,EAAAxB,GAAA,iBAAAoB,MAAA;AAEvD;;AAEA;AACA;AACA;AACA;AACA;AACA;AACA,SAASS,iBAAiBA,CAACC,GAAG,EAAE;EAC9B,IAAIA,GAAG,CAACC,UAAU,KAAK,GAAG,EAAE;IAC1B,OAAOC,QAAA,CAAAxC,OAAA,CAAQyC,MAAM,CAACH,GAAG,CAAC;EAC5B;EAEA,IAAMI,gBAAgB,GAAGC,oBAAW,CAACC,MAAM,CAACN,GAAG,CAACO,IAAI,CAACC,KAAK,CAAC;EAE3D,IAAIJ,gBAAgB,KAAKK,uBAAU,IAAIT,GAAG,YAAYU,uBAAc,EAAE;IACpE,OAAOR,QAAA,CAAAxC,OAAA,CAAQyC,MAAM,CAACH,GAAG,CAAC;EAC5B;EACA,IAAI,CAACI,gBAAgB,EAAE;IACrB,OAAOF,QAAA,CAAAxC,OAAA,CAAQyC,MAAM,CAACH,GAAG,CAAC;EAC5B;EAEA,OAAOE,QAAA,CAAAxC,OAAA,CAAQyC,MAAM,CAAC,IAAIC,gBAAgB,CAACJ,GAAG,CAACW,IAAI,IAAIX,GAAG,CAAC,CAAC;AAC9D;;AAEA;AACA;AACA;AACA,IAAMY,KAAK,GAAGC,oBAAW,CAACC,MAAM,EAAA9D,IAAA,GA4L7B,IAAA+D,iBAAS,EAAC;EACTC,UAAU,WAAAA,WAACC,KAAK,EAAE;IAChB,OAAOA,KAAK;EACd;AACF,CAAC,CAAC,GAAAhE,IAAA,GAhM6B;EAC/BiE,OAAO,EAAE;IACP;AACJ;AACA;AACA;AACA;AACA;AACA;AACA;AACA;IACIC,YAAY,EAAE;MACZC,IAAI,EAAE,CAAC,cAAc,EAAE,WAAW,CAAC;MACnCC,EAAE,WAAAA,GAAA,EAAG;QACH,OAAO,CAAC,CAAC,IAAI,CAACC,YAAY,IAAI,CAAC,IAAI,CAACC,SAAS;MAC/C;IACF,CAAC;IAED;AACJ;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;IACIC,YAAY,EAAE;MACZJ,IAAI,EAAE,CAAC,cAAc,CAAC;MACtBC,EAAE,WAAAA,GAAA,EAAG;QACH,OAAO,IAAI,CAACF,YAAY,IAAI,CAAC,CAAC,IAAI,CAACM,MAAM,CAACC,SAAS;MACrD;IACF,CAAC;IAED;AACJ;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;IACIC,UAAU,EAAE;MACVP,IAAI,EAAE,CAAC,eAAe,CAAC;MACvBC,EAAE,WAAAA,GAAA,EAAG;QACH,IAAIO,iBAAS,EAAE;UACb,OAAO,CAAC,CAAC,IAAI,CAACC,aAAa,IAAI,CAAC,CAAC,IAAI,CAACJ,MAAM,CAACK,eAAe;QAC9D;QAEA,OAAO,CAAC,CAAC,IAAI,CAACD,aAAa,IAAI,CAAC,CAAC,IAAI,CAACJ,MAAM,CAACM,aAAa;MAC5D;IACF,CAAC;IAED;AACJ;AACA;AACA;AACA;AACA;AACA;AACA;IACIR,SAAS,EAAE;MACTH,IAAI,EAAE,CAAC,SAAS,EAAE,YAAY,CAAC;MAC/BC,EAAE,WAAAA,GAAA,EAAG;QACH;QACA;QACA,OAAO,CAAC,CAAC,IAAI,CAACW,OAAO,IAAI,IAAI,CAACC,UAAU;MAC1C;IACF,CAAC;IAED;AACJ;AACA;AACA;AACA;AACA;AACA;AACA;IACIC,OAAO,EAAE;MACPd,IAAI,EAAE,CAAC,cAAc,EAAE,YAAY,CAAC;MACpCC,EAAE,WAAAA,GAAA,EAAG;QACH,IAAI,CAAC,IAAI,CAACC,YAAY,IAAI,CAAC,IAAI,CAACa,UAAU,EAAE;UAC1C,OAAO,EAAE;QACX;QAEA,UAAAC,MAAA,CAAU,IAAI,CAACD,UAAU,OAAAC,MAAA,CAAI,IAAI,CAACd,YAAY;MAChD;IACF;EACF,CAAC;EAEDe,SAAS,EAAE,aAAa;EAExBC,KAAK,EAAE;IACL;AACJ;AACA;AACA;AACA;AACA;AACA;IACIrB,KAAK,EAAE,QAAQ;IACf;AACJ;AACA;AACA;AACA;IACIK,YAAY,EAAE,QAAQ;IACtB;AACJ;AACA;AACA;AACA;IACIU,OAAO,EAAE,QAAQ;IACjB;AACJ;AACA;AACA;AACA;IACIO,UAAU,EAAE,QAAQ;IACpB;AACJ;AACA;AACA;AACA;IACIV,aAAa,EAAE,QAAQ;IACvB;AACJ;AACA;AACA;AACA;IACIW,qBAAqB,EAAE,QAAQ;IAC/B;AACJ;AACA;AACA;AACA;IACIC,wBAAwB,EAAE,QAAQ;IAClC;AACJ;AACA;AACA;AACA;AACA;IACIN,UAAU,EAAE;MACVzE,OAAO,EAAE,QAAQ;MACjBgF,IAAI,EAAE;IACR;EACF,CAAC;EAEDC,OAAO,EAAE;IACP;AACJ;AACA;AACA;AACA;AACA;AACA;IACIV,UAAU,EAAE;MACVvE,OAAO,EAAE,KAAK;MACdgF,IAAI,EAAE;IACR,CAAC;IACD;AACJ;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;IACIE,aAAa,EAAE;MACbF,IAAI,EAAE;IACR;EACF,CAAC;EAOD;AACF;AACA;AACA;AACA;AACA;AACA;EACEG,SAAS,WAAAA,UAAC5B,KAAK,EAAE;IAAA,IAAA6B,KAAA;IACf,IAAI,CAACC,MAAM,CAACC,IAAI,gCAAAZ,MAAA,CAAgCnB,KAAK,EAAG;IAExD,IAAI,IAAI,CAACM,SAAS,EAAE;MAClB,IAAI,CAACwB,MAAM,CAACC,IAAI,CAAC,2DAA2D,CAAC;MAE7E,OAAO9C,QAAA,CAAAxC,OAAA,CAAQyC,MAAM,CAAC,IAAI8C,KAAK,CAAC,uCAAuC,CAAC,CAAC;IAC3E;IAEA,IAAI,CAAC,IAAI,CAACzB,YAAY,EAAE;MACtB,IAAI,IAAI,CAACC,MAAM,CAACC,SAAS,EAAE;QACzB,IAAI,CAACqB,MAAM,CAACC,IAAI,CAAC,2DAA2D,CAAC;MAC/E,CAAC,MAAM;QACL,IAAI,CAACD,MAAM,CAACG,KAAK,CAAC,2CAA2C,CAAC;MAChE;MAEA,OAAOhD,QAAA,CAAAxC,OAAA,CAAQyC,MAAM,CAAC,IAAI8C,KAAK,CAAC,+BAA+B,CAAC,CAAC;IACnE;;IAEA;IACA;IACA,IAAIhC,KAAK,EAAE;MACTA,KAAK,GAAG,IAAAkC,gBAAS,EAAClC,KAAK,CAAC;IAC1B;;IAEA;IACA;IACA;IACA,IAAIA,KAAK,KAAK,IAAAkC,gBAAS,EAAC,IAAI,CAAC1B,MAAM,CAACR,KAAK,CAAC,EAAE;MAC1C,OAAOf,QAAA,CAAAxC,OAAA,CAAQyC,MAAM,CAAC,IAAI8C,KAAK,CAAC,iDAAiD,CAAC,CAAC;IACrF;IAEA,OAAO,IAAI,CAACG,KAAK,CACdC,OAAO,CAAC;MACPC,MAAM,EAAE,MAAM;MACdC,GAAG,EAAE,IAAI,CAAC9B,MAAM,CAAC+B,QAAQ;MACzBC,aAAa,EAAE,KAAK;MACpBC,IAAI,EAAE;QACJC,UAAU,EAAE,4CAA4C;QACxDC,KAAK,EAAE,IAAI,CAACtC,YAAY;QACxBL,KAAK,EAALA,KAAK;QACLS,SAAS,EAAE,IAAI,CAACD,MAAM,CAACC,SAAS;QAChCmC,oBAAoB,EAAE;MACxB;IACF,CAAC,CAAC,CACDC,IAAI,CAAC,UAAC9D,GAAG,EAAK;MACb8C,KAAI,CAACC,MAAM,CAACC,IAAI,+BAAAZ,MAAA,CAA+BnB,KAAK,EAAG;MAEvD,OAAO,IAAIL,KAAK,CAAC,IAAAmD,OAAA,CAAArG,OAAA,EAAcsC,GAAG,CAACO,IAAI,EAAE;QAACU,KAAK,EAALA;MAAK,CAAC,CAAC,EAAE;QAAC+C,MAAM,EAAElB,KAAI,CAACkB;MAAM,CAAC,CAAC;IAC3E,CAAC,CAAC;EACN,CAAC;EAED;AACF;AACA;AACA;AACA;AACA;AACA;AACA;AACA;EACEC,UAAU,WAAAA,WAAA,EAA2B;IAAA,IAAAC,MAAA;IAAA,IAA1BC,KAAK,GAAA3E,SAAA,CAAAC,MAAA,QAAAD,SAAA,QAAA4E,SAAA,GAAA5E,SAAA,MAAG,CAAC,CAAC;IAAA,IAAE6E,OAAO,GAAA7E,SAAA,CAAAC,MAAA,QAAAD,SAAA,QAAA4E,SAAA,GAAA5E,SAAA,MAAG,CAAC,CAAC;IACjC,IAAA8E,MAAA,CAAA5G,OAAA,EAAcmD,oBAAW,CAACzC,SAAS,CAAC6F,UAAU,EAAE,IAAI,EAAE,CAACE,KAAK,EAAEE,OAAO,CAAC,CAAC;IAEvE,IAAI,OAAOF,KAAK,KAAK,QAAQ,EAAE;MAC7B,IAAI,CAAC7C,YAAY,GAAG6C,KAAK;IAC3B;IAEA,IAAI,CAAC,IAAI,CAAC7C,YAAY,EAAE;MACtB,MAAM,IAAI2B,KAAK,CAAC,4BAA4B,CAAC;IAC/C;;IAEA;IACA;IACA,IAAI,IAAI,CAACjB,OAAO,EAAE;MAChB,IAAI,IAAI,CAACA,OAAO,GAAG,IAAAuC,IAAA,CAAA7G,OAAA,GAAU,EAAE;QAC7B,IAAI,CAACuE,UAAU,GAAG,IAAI;MACxB,CAAC,MAAM;QACL,IAAAuC,4BAAc,EAAC,YAAM;UACnBN,MAAI,CAACjC,UAAU,GAAG,IAAI;QACxB,CAAC,EAAE,IAAI,CAACD,OAAO,GAAG,IAAAuC,IAAA,CAAA7G,OAAA,GAAU,CAAC;MAC/B;IACF;EACF,CAAC;EAGD;AACF;AACA;AACA;AACA;AACA;AACA;EACE+G,OAAO,WAAAA,QAAA,EAAG;IAAA,IAAAC,MAAA;IACR,IAAI,CAAC,IAAI,CAAC/C,UAAU,EAAE;MACpB,MAAM,IAAIsB,KAAK,CAAC,+DAA+D,CAAC;IAClF;IAEA,IAAI0B,OAAO;IAEX,IAAI/C,iBAAS,EAAE;MACb,IAAI,CAAC,IAAI,CAACH,MAAM,CAACK,eAAe,EAAE;QAChC,MAAM,IAAImB,KAAK,CAAC,qDAAqD,CAAC;MACxE;MAEA0B,OAAO,GAAGzE,QAAA,CAAAxC,OAAA,CAAQkH,OAAO,CAAC,IAAI,CAACnD,MAAM,CAACK,eAAe,CAAC,IAAI,CAACsB,KAAK,EAAE,IAAI,CAAC,CAAC;IAC1E;IAEA,OAAO,CACLuB,OAAO,IACP,IAAI,CAACvB,KAAK,CACPC,OAAO,CAAC;MACPC,MAAM,EAAE,MAAM;MACdC,GAAG,EAAE,IAAI,CAAC9B,MAAM,CAAC+B,QAAQ;MACzBE,IAAI,EAAE;QACJC,UAAU,EAAE,eAAe;QAC3BkB,YAAY,EAAE,IAAI,CAACpD,MAAM,CAACoD,YAAY;QACtChD,aAAa,EAAE,IAAI,CAACA;MACtB,CAAC;MACDiD,IAAI,EAAE;QACJC,IAAI,EAAE,IAAI,CAACtD,MAAM,CAACC,SAAS;QAC3BsD,IAAI,EAAE,IAAI,CAACvD,MAAM,CAACM,aAAa;QAC/BkD,eAAe,EAAE;MACnB,CAAC;MACDC,wBAAwB,EAAE;IAC5B,CAAC,CAAC,CACDpB,IAAI,CAAC,UAAC9D,GAAG;MAAA,OAAKA,GAAG,CAACO,IAAI;IAAA,EAAC,EAEzBuD,IAAI,CAAC,UAACvG,GAAG,EAAK;MACb,IAAI,CAACA,GAAG,EAAE;QACR,MAAM,IAAI0F,KAAK,CAAC,oDAAoD,CAAC;MACvE;MACA;MACA;MACA;MACA,IAAI,CAAC1F,GAAG,CAACsE,aAAa,EAAE;QACtB,IAAAkC,OAAA,CAAArG,OAAA,EACEH,GAAG,EACH,IAAA4H,MAAA,CAAAzH,OAAA,EAAKgH,MAAI,EAAE,eAAe,EAAE,uBAAuB,EAAE,0BAA0B,CAAC,CACjF;MACH;;MAEA;MACA;MACA,IAAIA,MAAI,CAACpD,YAAY,KAAK/D,GAAG,CAAC+D,YAAY,EAAE;QAC1CoD,MAAI,CAAC3B,MAAM,CAACvC,KAAK,CAAC,wCAAwC,CAAC;QAC3D;QACA,IAAI4E,OAAO,CAACC,GAAG,CAACC,QAAQ,KAAK,YAAY,EAAE;UACzCZ,MAAI,CAAC3B,MAAM,CAACvC,KAAK,CAAC,uBAAuB,EAAEkE,MAAI,CAACpD,YAAY,CAAC;UAC7DoD,MAAI,CAAC3B,MAAM,CAACvC,KAAK,CAAC,mBAAmB,EAAEjD,GAAG,CAAC+D,YAAY,CAAC;QAC1D;QAEA,OAAOpB,QAAA,CAAAxC,OAAA,CAAQyC,MAAM,CAAC,IAAI8C,KAAK,CAAC,iCAAiC,CAAC,CAAC;MACrE;MAEA,IAAIyB,MAAI,CAAC9B,aAAa,EAAE;QACtB8B,MAAI,CAAC9B,aAAa,CAAC2C,MAAM,EAAE;QAC3Bb,MAAI,CAACc,KAAK,CAAC,eAAe,CAAC;MAC7B;MAEAjI,GAAG,CAACqF,aAAa,GAAG8B,MAAI;MACxBnH,GAAG,CAAC0D,KAAK,GAAGyD,MAAI,CAACzD,KAAK;MAEtB,OAAO,IAAIL,KAAK,CAACrD,GAAG,EAAE;QAACyG,MAAM,EAAEU,MAAI,CAACV;MAAM,CAAC,CAAC;IAC9C,CAAC,CAAC,CACDyB,KAAK,CAAC1F,iBAAiB,CAAC;EAC7B,CAAC;EAGD;AACF;AACA;AACA;AACA;AACA;EACEwF,MAAM,WAAAA,OAAA,EAAG;IAAA,IAAAG,MAAA;IACP,IAAI,IAAI,CAACnE,SAAS,EAAE;MAClB,IAAI,CAACwB,MAAM,CAACC,IAAI,CAAC,8DAA8D,CAAC;MAEhF,OAAO9C,QAAA,CAAAxC,OAAA,CAAQkH,OAAO,EAAE;IAC1B;IAEA,IAAI,CAAC,IAAI,CAACzD,YAAY,EAAE;MACtB,IAAI,CAAC4B,MAAM,CAACC,IAAI,CAAC,uDAAuD,CAAC;MAEzE,OAAO9C,QAAA,CAAAxC,OAAA,CAAQkH,OAAO,EAAE;IAC1B;;IAEA;IACA;IACA;IACA;IACA;IACA;IACA,IAAI,CAAC,IAAI,CAACnD,MAAM,CAACM,aAAa,EAAE;MAC9B,IAAI,CAACgB,MAAM,CAACC,IAAI,CAAC,kEAAkE,CAAC;MAEpF,OAAO9C,QAAA,CAAAxC,OAAA,CAAQkH,OAAO,EAAE;IAC1B;IAEA,IAAI,CAAC7B,MAAM,CAACC,IAAI,CAAC,8BAA8B,CAAC;IAEhD,OAAO,IAAI,CAACI,KAAK,CACdC,OAAO,CAAC;MACPC,MAAM,EAAE,MAAM;MACdC,GAAG,EAAE,IAAI,CAAC9B,MAAM,CAACkE,SAAS;MAC1BjC,IAAI,EAAE;QACJE,KAAK,EAAE,IAAI,CAACtC,YAAY;QACxBsE,eAAe,EAAE;MACnB,CAAC;MACDd,IAAI,EAAE;QACJC,IAAI,EAAE,IAAI,CAACtD,MAAM,CAACC,SAAS;QAC3BsD,IAAI,EAAE,IAAI,CAACvD,MAAM,CAACM,aAAa;QAC/BkD,eAAe,EAAE;MACnB,CAAC;MACDC,wBAAwB,EAAE;IAC5B,CAAC,CAAC,CACDpB,IAAI,CAAC,YAAM;MACV4B,MAAI,CAACF,KAAK,CAAC,CAAC,cAAc,EAAE,SAAS,EAAE,YAAY,EAAE,YAAY,CAAC,CAAC;MACnEE,MAAI,CAAC3C,MAAM,CAACC,IAAI,CAAC,6BAA6B,CAAC;IACjD,CAAC,CAAC,CACDyC,KAAK,CAAC1F,iBAAiB,CAAC;EAC7B,CAAC;EAEDvB,GAAG,WAAAA,IAAA,EAAU;IACX;IACA,IAAAqH,qBAAA,GAAuB,IAAI,CAACC,oBAAoB,CAAA1G,KAAA,CAAzB,IAAI,EAAAI,SAAA,CAA8B;MAAAuG,sBAAA,OAAAC,eAAA,CAAAtI,OAAA,EAAAmI,qBAAA;MAApD1B,KAAK,GAAA4B,sBAAA;MAAE1B,OAAO,GAAA0B,sBAAA;IAEnB,IAAI,CAAC5B,KAAK,CAAChC,UAAU,IAAIgC,KAAK,CAAC7C,YAAY,IAAI6C,KAAK,CAAC7C,YAAY,CAAC2E,QAAQ,CAAC,GAAG,CAAC,EAAE;MAC/E,IAAAC,qBAAA,GAAmC/B,KAAK,CAAC7C,YAAY,CAAC6E,KAAK,CAAC,GAAG,CAAC;QAAAC,sBAAA,OAAAJ,eAAA,CAAAtI,OAAA,EAAAwI,qBAAA;QAAzD/D,UAAU,GAAAiE,sBAAA;QAAE9E,YAAY,GAAA8E,sBAAA;MAE/BjC,KAAK,GAAA9E,aAAA,CAAAA,aAAA,KAAO8E,KAAK;QAAE7C,YAAY,EAAZA,YAAY;QAAEa,UAAU,EAAVA;MAAU,EAAC;IAC9C;IACA,IAAMkE,GAAG,GAAG,IAAA9B,IAAA,CAAA7G,OAAA,GAAU;IAEtB,IAAI,CAACyG,KAAK,CAACnC,OAAO,IAAImC,KAAK,CAAC5B,UAAU,EAAE;MACtC4B,KAAK,CAACnC,OAAO,GAAGqE,GAAG,GAAGlC,KAAK,CAAC5B,UAAU,GAAG,IAAI;IAC/C;IAEA,IAAI,CAAC4B,KAAK,CAAC3B,qBAAqB,IAAI2B,KAAK,CAAC1B,wBAAwB,EAAE;MAClE0B,KAAK,CAAC3B,qBAAqB,GAAG6D,GAAG,GAAGlC,KAAK,CAAC1B,wBAAwB,GAAG,IAAI;IAC3E;IAEA,IAAI0B,KAAK,CAAClD,KAAK,EAAE;MACfkD,KAAK,CAAClD,KAAK,GAAG,IAAAkC,gBAAS,EAACgB,KAAK,CAAClD,KAAK,CAAC;IACtC;IAEA,OAAO,IAAAqD,MAAA,CAAA5G,OAAA,EAAcmD,oBAAW,CAACzC,SAAS,CAACI,GAAG,EAAE,IAAI,EAAE,CAAC2F,KAAK,EAAEE,OAAO,CAAC,CAAC;EACzE,CAAC;EAED;AACF;AACA;AACA;AACA;AACA;AACA;EACEiC,QAAQ,WAAAA,SAAA,EAAG;IACT,IAAI,CAAC,IAAI,CAACpE,OAAO,EAAE;MACjB,MAAM,IAAIe,KAAK,CAAC,wBAAwB,CAAC;IAC3C;IAEA,OAAO,IAAI,CAACf,OAAO;EACrB,CAAC;EAED;AACF;AACA;AACA;AACA;AACA;AACA;AACA;EACEqE,QAAQ,WAAAA,SAAA,EAAG;IAAA,IAAAC,MAAA;IACT,IAAIpB,OAAO,CAACC,GAAG,CAACC,QAAQ,KAAK,YAAY,EAAE;MACzC,MAAM,IAAIrC,KAAK,CAAC,iDAAiD,CAAC;IACpE;IAEA,OAAO,IAAI,CAACG,KAAK,CACdC,OAAO,CAAC;MACPC,MAAM,EAAE,MAAM;MACdmD,OAAO,EAAE,cAAc;MACvBC,QAAQ,EAAE,yBAAyB;MACnCnG,IAAI,EAAE;QACJqD,KAAK,EAAE,IAAI,CAACtC;MACd;IACF,CAAC,CAAC,CACDmE,KAAK,CAAC,UAACkB,MAAM,EAAK;MACjB,IAAI,YAAY,IAAIA,MAAM,EAAE;QAC1B,OAAOzG,QAAA,CAAAxC,OAAA,CAAQyC,MAAM,CAACwG,MAAM,CAAC;MAC/B;MACAH,MAAI,CAACzD,MAAM,CAACC,IAAI,CAAC,qEAAqE,CAAC;;MAEvF;MACA;MACA;MACA,IAAM4D,OAAO,GACXxB,OAAO,CAACC,GAAG,CAACwB,oBAAoB,IAChCzB,OAAO,CAACC,GAAG,CAACyB,wBAAwB,IACpC,6CAA6C;MAE/C,OAAON,MAAI,CAACpD,KAAK,CAACC,OAAO,CAAC;QACxBC,MAAM,EAAE,MAAM;QACdC,GAAG,KAAAnB,MAAA,CAAKwE,OAAO,6BAA0B;QACzCrG,IAAI,EAAE;UACJqD,KAAK,EAAE4C,MAAI,CAAClF;QACd,CAAC;QACDyF,OAAO,EAAE;UACPC,aAAa,YAAA5E,MAAA,CAAYoE,MAAI,CAAClF,YAAY;QAC5C;MACF,CAAC,CAAC;IACJ,CAAC,CAAC,CACDwC,IAAI,CAAC,UAAC9D,GAAG;MAAA,OAAKA,GAAG,CAACO,IAAI;IAAA,EAAC;EAC5B,CAAC;EAAA0G,OAAA;AACH,CAAC,OAAAC,0BAAA,CAAAxJ,OAAA,EAAAT,IAAA,gBAAAD,IAAA,OAAAmK,yBAAA,CAAAzJ,OAAA,EAAAT,IAAA,gBAAAA,IAAA,OAAAiK,0BAAA,CAAAxJ,OAAA,EAAAT,IAAA,cArOE8D,iBAAS,OAAAoG,yBAAA,CAAAzJ,OAAA,EAAAT,IAAA,cAAAA,IAAA,OAAAiK,0BAAA,CAAAxJ,OAAA,EAAAT,IAAA,aAmFT8D,iBAAS,OAAAoG,yBAAA,CAAAzJ,OAAA,EAAAT,IAAA,aAAAA,IAAA,IAAAA,IAAA,GAkJV;AAAC,IAAAmK,QAAA,GAEYxG,KAAK;AAAAyG,OAAA,CAAA3J,OAAA,GAAA0J,QAAA"}

package/dist/lib/services/services.js

@@ -1005,7 +1005,7 @@ var Services = _webexPlugin.default.extend({
       }
     });
   },
-  version: "modern"
+  version: "2.59.2"
 });
 /* eslint-enable no-underscore-dangle */
 var _default = Services;

package/dist/lib/storage/decorators.js

@@ -7,22 +7,20 @@ _Object$defineProperty(exports, "__esModule", {
 });
 exports.persist = persist;
 exports.waitForValue = waitForValue;
-var _defineProperty2 = _interopRequireDefault(require("@babel/runtime-corejs2/helpers/defineProperty"));
-var _typeof2 = _interopRequireDefault(require("@babel/runtime-corejs2/helpers/typeof"));
-var _toConsumableArray2 = _interopRequireDefault(require("@babel/runtime-corejs2/helpers/toConsumableArray"));
 var _apply = _interopRequireDefault(require("@babel/runtime-corejs2/core-js/reflect/apply"));
 var _promise = _interopRequireDefault(require("@babel/runtime-corejs2/core-js/promise"));
 var _map = _interopRequireDefault(require("@babel/runtime-corejs2/core-js/map"));
 var _set = _interopRequireDefault(require("@babel/runtime-corejs2/core-js/set"));
-var _lodash = require("lodash");
+var _defineProperty2 = _interopRequireDefault(require("@babel/runtime-corejs2/helpers/defineProperty"));
+var _typeof2 = _interopRequireDefault(require("@babel/runtime-corejs2/helpers/typeof"));
+var _toConsumableArray2 = _interopRequireDefault(require("@babel/runtime-corejs2/helpers/toConsumableArray"));
+var _wrap2 = _interopRequireDefault(require("lodash/wrap"));
+var _result2 = _interopRequireDefault(require("lodash/result"));
+var _identity2 = _interopRequireDefault(require("lodash/identity"));
+var _debounce2 = _interopRequireDefault(require("lodash/debounce"));
+var _curry2 = _interopRequireDefault(require("lodash/curry"));
 var _common = require("@webex/common");
 var _errors = require("./errors");
-/*!
- * Copyright (c) 2015-2020 Cisco Systems, Inc. See LICENSE file.
- */
-
-/* eslint no-invalid-this: [0] */
-
 /**
  * Stores the result of fn before returning it
  * @param  {string} key
@@ -44,7 +42,7 @@ function persist() {
       // detected here.
       throw new TypeError('@persist can only currently be applied to AmpersandState objects or their derivatives and must be applied to the initialize method');
     }
-    descriptor.value = (0, _lodash.wrap)(descriptor.value, function persistExecutor(fn) {
+    descriptor.value = (0, _wrap2.default)(descriptor.value, function persistExecutor(fn) {
       var _this = this;
       for (var _len2 = arguments.length, initializeArgs = new Array(_len2 > 1 ? _len2 - 1 : 0), _key2 = 1; _key2 < _len2; _key2++) {
         initializeArgs[_key2 - 1] = arguments[_key2];
@@ -57,7 +55,7 @@ function persist() {
       // a debounce of zero, we're effectively coalescing all the changes
       // triggered by a single call to set() and commiting them on the next tick
       // eslint-disable-next-line no-invalid-this
-      this.on(changeEvent, (0, _lodash.debounce)(function () {
+      this.on(changeEvent, (0, _debounce2.default)(function () {
         var shouldPersist = !decider || _apply.default.apply(Reflect, [decider, _this].concat(initializeArgs));
         if (!shouldPersist) {
           return _promise.default.resolve();
@@ -93,7 +91,7 @@ function waitForValue(key) {
   }
   return function waitForValueDecorator(target, prop, descriptor) {
     blockingKeys.add(target, prop, key);
-    descriptor.value = (0, _lodash.wrap)(descriptor.value, function waitForValueExecutor(fn) {
+    descriptor.value = (0, _wrap2.default)(descriptor.value, function waitForValueExecutor(fn) {
       var _this2 = this;
       for (var _len3 = arguments.length, args = new Array(_len3 > 1 ? _len3 - 1 : 0), _key3 = 1; _key3 < _len3; _key3++) {
         args[_key3 - 1] = arguments[_key3];
@@ -145,7 +143,7 @@ function prepareInitialize(target, prop) {
   if (!inited.has(id)) {
     inited.add(id);
     if (target.initialize) {
-      target.initialize = (0, _lodash.wrap)(target.initialize, function applyInit(fn) {
+      target.initialize = (0, _wrap2.default)(target.initialize, function applyInit(fn) {
         for (var _len4 = arguments.length, args = new Array(_len4 > 1 ? _len4 - 1 : 0), _key4 = 1; _key4 < _len4; _key4++) {
           args[_key4 - 1] = arguments[_key4];
         }
@@ -165,7 +163,7 @@ function prepareInitialize(target, prop) {
   function init() {
     var self = this;
     var namespace = this.getNamespace();
-    this.webex.initialize = (0, _lodash.wrap)(this.webex.initialize || _lodash.identity, function applyInit(fn) {
+    this.webex.initialize = (0, _wrap2.default)(this.webex.initialize || _identity2.default, function applyInit(fn) {
       var _this3 = this;
       // Call webex's initalize method first
       // Reminder: in order for MockWebex to accept initial storage data, the
@@ -178,11 +176,11 @@ function prepareInitialize(target, prop) {
       (0, _apply.default)(fn, this, args);
 
       // Then prepare a function for setting values retrieved from storage
-      var set = (0, _lodash.curry)(function (key, value) {
+      var set = (0, _curry2.default)(function (key, value) {
         _this3.logger.debug("storage:(".concat(namespace, "): got `").concat(key, "` for first time"));
         if (key === '@') {
           self.parent.set((0, _defineProperty2.default)({}, namespace.toLowerCase(), value));
-        } else if ((0, _lodash.result)(self[key], 'isState')) {
+        } else if ((0, _result2.default)(self[key], 'isState')) {
           self[key].set(value);
         } else {
           self.set(key, value);
@@ -191,7 +189,7 @@ function prepareInitialize(target, prop) {
       });
 
       // And prepare an error handler for when those keys can't be found
-      var handle = (0, _lodash.curry)(function (key, reason) {
+      var handle = (0, _curry2.default)(function (key, reason) {
         if (reason instanceof _errors.NotFoundError || process.env.NODE_ENV !== 'production' && reason.toString().includes('MockNotFoundError')) {
           _this3.logger.debug("storage(".concat(namespace, "): no data for `").concat(key, "`, continuing"));
           return _promise.default.resolve();