@webiny/api-core 0.0.0-unstable.61c048f412

package/idp/feature.d.ts

@@ -0,0 +1 @@
+export declare const IdpAuthenticatorFeature: import("@webiny/feature/api/createFeature.js").FeatureDefinition<unknown>;

package/idp/feature.js

@@ -0,0 +1,15 @@
+import { createFeature } from "@webiny/feature/api";
+import { JwtAuthenticator } from "./JwtAuthenticator.js";
+import { JwkCache } from "./abstractions.js";
+import { JwksCache } from "./JwksCache.js";
+import { OidcJwtIdentityProvider } from "./OidcJwtIdentityProvider.js";
+export const IdpAuthenticatorFeature = createFeature({
+  name: "IdpAuthenticator",
+  register(container) {
+    container.register(JwtAuthenticator);
+    container.register(OidcJwtIdentityProvider);
+    container.registerInstance(JwkCache, new JwksCache());
+  }
+});
+
+//# sourceMappingURL=feature.js.map

package/idp/feature.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["createFeature","JwtAuthenticator","JwkCache","JwksCache","OidcJwtIdentityProvider","IdpAuthenticatorFeature","name","register","container","registerInstance"],"sources":["feature.ts"],"sourcesContent":["import { createFeature } from \"@webiny/feature/api\";\nimport { JwtAuthenticator } from \"./JwtAuthenticator.js\";\nimport { JwkCache } from \"./abstractions.js\";\nimport { JwksCache } from \"./JwksCache.js\";\nimport { OidcJwtIdentityProvider } from \"~/idp/OidcJwtIdentityProvider.js\";\n\nexport const IdpAuthenticatorFeature = createFeature({\n    name: \"IdpAuthenticator\",\n    register(container) {\n        container.register(JwtAuthenticator);\n        container.register(OidcJwtIdentityProvider);\n        container.registerInstance(JwkCache, new JwksCache());\n    }\n});\n"],"mappings":"AAAA,SAASA,aAAa,QAAQ,qBAAqB;AACnD,SAASC,gBAAgB;AACzB,SAASC,QAAQ;AACjB,SAASC,SAAS;AAClB,SAASC,uBAAuB;AAEhC,OAAO,MAAMC,uBAAuB,GAAGL,aAAa,CAAC;EACjDM,IAAI,EAAE,kBAAkB;EACxBC,QAAQA,CAACC,SAAS,EAAE;IAChBA,SAAS,CAACD,QAAQ,CAACN,gBAAgB,CAAC;IACpCO,SAAS,CAACD,QAAQ,CAACH,uBAAuB,CAAC;IAC3CI,SAAS,CAACC,gBAAgB,CAACP,QAAQ,EAAE,IAAIC,SAAS,CAAC,CAAC,CAAC;EACzD;AACJ,CAAC,CAAC","ignoreList":[]}

package/idp/index.d.ts

@@ -0,0 +1,2 @@
+export { IdentityProvider, OidcIdentityProvider, JwtIdentityProvider } from "./abstractions.js";
+export type { IdentityData } from "./types.js";

package/idp/index.js

@@ -0,0 +1,3 @@
+export { IdentityProvider, OidcIdentityProvider, JwtIdentityProvider } from "./abstractions.js";
+
+//# sourceMappingURL=index.js.map

package/idp/index.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["IdentityProvider","OidcIdentityProvider","JwtIdentityProvider"],"sources":["index.ts"],"sourcesContent":["export { IdentityProvider, OidcIdentityProvider, JwtIdentityProvider } from \"./abstractions.js\";\nexport type { IdentityData } from \"./types.js\";\n"],"mappings":"AAAA,SAASA,gBAAgB,EAAEC,oBAAoB,EAAEC,mBAAmB","ignoreList":[]}

package/idp/types.d.ts

@@ -0,0 +1,3 @@
+export type { IdentityData } from "../features/security/IdentityContext/Identity.js";
+export type { Jwk } from "../features/security/utils/verifyJwtUsingJwk.js";
+export type { JwtPayload } from "jsonwebtoken";

package/idp/types.js

@@ -0,0 +1,3 @@
+export {};
+
+//# sourceMappingURL=types.js.map

package/idp/types.js.map

@@ -0,0 +1 @@
+{"version":3,"names":[],"sources":["types.ts"],"sourcesContent":["export type { IdentityData } from \"~/features/security/IdentityContext/Identity.js\";\nexport type { Jwk } from \"~/features/security/utils/verifyJwtUsingJwk.js\";\nexport type { JwtPayload } from \"jsonwebtoken\";\n"],"mappings":"","ignoreList":[]}

package/index.d.ts

@@ -0,0 +1 @@
+export { createApiCore } from "./createApiCore.js";

package/index.js

@@ -0,0 +1,3 @@
+export { createApiCore } from "./createApiCore.js";
+
+//# sourceMappingURL=index.js.map

package/index.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["createApiCore"],"sources":["index.ts"],"sourcesContent":["export { createApiCore } from \"./createApiCore.js\";\n"],"mappings":"AAAA,SAASA,aAAa","ignoreList":[]}

package/legacy/security/LegacyContext.d.ts

@@ -0,0 +1,36 @@
+import { type Container } from "@webiny/di";
+import type { SecurityIdentity, SecurityPermission } from "../../types/security.js";
+import { Authenticator } from "../../features/security/authentication/Authenticator/index.js";
+/**
+ * Legacy bridge that implements the old Security interface.
+ * As we implement each phase, we'll replace forwarding with delegation.
+ */
+export declare class LegacyContext {
+    private container;
+    constructor(container: Container);
+    private get identityContext();
+    private get authenticationContext();
+    addAuthenticator(authenticator: Authenticator.Interface["authenticate"]): void;
+    authenticate(token: string): Promise<void>;
+    getIdentity(): SecurityIdentity;
+    setIdentity(identity: SecurityIdentity): void;
+    getToken(): string | undefined;
+    isAuthorizationEnabled(): boolean;
+    withoutAuthorization<T = any>(cb: () => Promise<T>): Promise<T>;
+    withIdentity<T = any>(identity: SecurityIdentity | undefined, cb: () => Promise<T>): Promise<T>;
+    getPermission<TPermission extends SecurityPermission = SecurityPermission>(permission: string): Promise<TPermission | null>;
+    getPermissions<TPermission extends SecurityPermission = SecurityPermission>(permission: string): Promise<TPermission[]>;
+    listPermissions(): Promise<SecurityPermission[]>;
+    hasFullAccess(): Promise<boolean>;
+    getRole(params: any): Promise<import("~/types/security.js").Role>;
+    listRoles(params?: any): Promise<import("~/types/security.js").Role[]>;
+    createRole(input: any): Promise<import("~/types/security.js").Role>;
+    updateRole(id: string, input: any): Promise<import("~/types/security.js").Role>;
+    deleteRole(id: string): Promise<void>;
+    addAuthorizer(authorizer: any): void;
+    getTeam(params: any): Promise<import("~/types/security.js").Team>;
+    listTeams(params?: any): Promise<import("~/types/security.js").Team[]>;
+    createTeam(input: any): Promise<import("~/types/security.js").Team>;
+    updateTeam(id: string, input: any): Promise<import("~/types/security.js").Team>;
+    deleteTeam(id: string): Promise<void>;
+}

package/legacy/security/LegacyContext.js

@@ -0,0 +1,205 @@
+import { AuthenticationContext } from "../../features/security/authentication/AuthenticationContext/index.js";
+import { Authenticator } from "../../features/security/authentication/Authenticator/index.js";
+import { Authorizer } from "../../features/security/authorization/Authorizer/abstractions.js";
+import { AuthenticatedIdentity, IdentityContext } from "../../features/security/IdentityContext/index.js";
+import { GetRoleUseCase } from "../../features/security/roles/GetRole/index.js";
+import { ListRolesUseCase } from "../../features/security/roles/ListRoles/index.js";
+import { CreateRoleUseCase } from "../../features/security/roles/CreateRole/index.js";
+import { UpdateRoleUseCase } from "../../features/security/roles/UpdateRole/index.js";
+import { DeleteRoleUseCase } from "../../features/security/roles/DeleteRole/index.js";
+import { GetTeamUseCase } from "../../features/security/teams/GetTeam/index.js";
+import { ListTeamsUseCase } from "../../features/security/teams/ListTeams/index.js";
+import { CreateTeam } from "../../features/security/teams/CreateTeam/index.js";
+import { UpdateTeam } from "../../features/security/teams/UpdateTeam/index.js";
+import { DeleteTeam } from "../../features/security/teams/DeleteTeam/index.js";
+
+/**
+ * Legacy bridge that implements the old Security interface.
+ * As we implement each phase, we'll replace forwarding with delegation.
+ */
+export class LegacyContext {
+  constructor(container) {
+    this.container = container;
+  }
+  get identityContext() {
+    return this.container.resolve(IdentityContext);
+  }
+  get authenticationContext() {
+    return this.container.resolve(AuthenticationContext);
+  }
+  addAuthenticator(authenticator) {
+    this.container.registerFactory(Authenticator, () => {
+      return {
+        authenticate(token) {
+          return authenticator(token);
+        }
+      };
+    });
+  }
+  async authenticate(token) {
+    // Authenticate using new context
+    const identity = await this.authenticationContext.authenticate(token);
+
+    // Set identity in IdentityContext
+    this.identityContext.setIdentity(identity);
+  }
+  getIdentity() {
+    const identity = this.identityContext.getIdentity();
+
+    // Convert our Identity class to old SecurityIdentity format
+    if (identity.isAnonymous()) {
+      return undefined;
+    }
+    return identity;
+  }
+  setIdentity(identity) {
+    if (!identity) {
+      this.identityContext.setIdentity(undefined);
+      return;
+    }
+
+    // Wrap old identity format in AuthenticatedIdentity
+    const {
+      id,
+      displayName,
+      type,
+      ...rest
+    } = identity;
+    const authenticatedIdentity = new AuthenticatedIdentity({
+      id,
+      displayName,
+      type,
+      ...rest
+    });
+    this.identityContext.setIdentity(authenticatedIdentity);
+  }
+  getToken() {
+    return this.authenticationContext.getAuthToken();
+  }
+  isAuthorizationEnabled() {
+    return this.identityContext.isAuthorizationEnabled();
+  }
+  withoutAuthorization(cb) {
+    return this.identityContext.withoutAuthorization(cb);
+  }
+  withIdentity(identity, cb) {
+    if (!identity) {
+      return this.identityContext.withIdentity(undefined, cb);
+    }
+    const {
+      id,
+      displayName,
+      type,
+      ...rest
+    } = identity;
+    const authenticatedIdentity = new AuthenticatedIdentity({
+      id,
+      displayName,
+      type,
+      ...rest
+    });
+    return this.identityContext.withIdentity(authenticatedIdentity, cb);
+  }
+  async getPermission(permission) {
+    return this.identityContext.getPermission(permission);
+  }
+  async getPermissions(permission) {
+    return this.identityContext.getPermissions(permission);
+  }
+  async listPermissions() {
+    return this.identityContext.listPermissions();
+  }
+  async hasFullAccess() {
+    return this.identityContext.hasFullAccess();
+  }
+  async getRole(params) {
+    const useCase = this.container.resolve(GetRoleUseCase);
+    const result = await useCase.execute(params.where);
+    if (result.isFail()) {
+      throw result.error;
+    }
+    return result.value;
+  }
+  async listRoles(params) {
+    const useCase = this.container.resolve(ListRolesUseCase);
+    const result = await useCase.execute(params);
+    if (result.isFail()) {
+      throw result.error;
+    }
+    return result.value;
+  }
+  async createRole(input) {
+    const useCase = this.container.resolve(CreateRoleUseCase);
+    const result = await useCase.execute(input);
+    if (result.isFail()) {
+      throw result.error;
+    }
+    return result.value;
+  }
+  async updateRole(id, input) {
+    const useCase = this.container.resolve(UpdateRoleUseCase);
+    const result = await useCase.execute(id, input);
+    if (result.isFail()) {
+      throw result.error;
+    }
+    return result.value;
+  }
+  async deleteRole(id) {
+    const useCase = this.container.resolve(DeleteRoleUseCase);
+    const result = await useCase.execute(id);
+    if (result.isFail()) {
+      throw result.error;
+    }
+  }
+  addAuthorizer(authorizer) {
+    // @ts-expect-error
+    this.container.registerFactory(Authorizer, () => {
+      return {
+        authorize() {
+          return authorizer();
+        }
+      };
+    });
+  }
+  async getTeam(params) {
+    const useCase = this.container.resolve(GetTeamUseCase);
+    const result = await useCase.execute(params.where);
+    if (result.isFail()) {
+      throw result.error;
+    }
+    return result.value;
+  }
+  async listTeams(params) {
+    const useCase = this.container.resolve(ListTeamsUseCase);
+    const result = await useCase.execute(params);
+    if (result.isFail()) {
+      throw result.error;
+    }
+    return result.value;
+  }
+  async createTeam(input) {
+    const useCase = this.container.resolve(CreateTeam);
+    const result = await useCase.execute(input);
+    if (result.isFail()) {
+      throw result.error;
+    }
+    return result.value;
+  }
+  async updateTeam(id, input) {
+    const useCase = this.container.resolve(UpdateTeam);
+    const result = await useCase.execute(id, input);
+    if (result.isFail()) {
+      throw result.error;
+    }
+    return result.value;
+  }
+  async deleteTeam(id) {
+    const useCase = this.container.resolve(DeleteTeam);
+    const result = await useCase.execute(id);
+    if (result.isFail()) {
+      throw result.error;
+    }
+  }
+}
+
+//# sourceMappingURL=LegacyContext.js.map

package/legacy/security/LegacyContext.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["AuthenticationContext","Authenticator","Authorizer","AuthenticatedIdentity","IdentityContext","GetRoleUseCase","ListRolesUseCase","CreateRoleUseCase","UpdateRoleUseCase","DeleteRoleUseCase","GetTeamUseCase","ListTeamsUseCase","CreateTeam","UpdateTeam","DeleteTeam","LegacyContext","constructor","container","identityContext","resolve","authenticationContext","addAuthenticator","authenticator","registerFactory","authenticate","token","identity","setIdentity","getIdentity","isAnonymous","undefined","id","displayName","type","rest","authenticatedIdentity","getToken","getAuthToken","isAuthorizationEnabled","withoutAuthorization","cb","withIdentity","getPermission","permission","getPermissions","listPermissions","hasFullAccess","getRole","params","useCase","result","execute","where","isFail","error","value","listRoles","createRole","input","updateRole","deleteRole","addAuthorizer","authorizer","authorize","getTeam","listTeams","createTeam","updateTeam","deleteTeam"],"sources":["LegacyContext.ts"],"sourcesContent":["import { type Container } from \"@webiny/di\";\nimport type { SecurityIdentity, SecurityPermission } from \"~/types/security.js\";\nimport { AuthenticationContext } from \"~/features/security/authentication/AuthenticationContext/index.js\";\nimport { Authenticator } from \"~/features/security/authentication/Authenticator/index.js\";\nimport { Authorizer } from \"~/features/security/authorization/Authorizer/abstractions.js\";\nimport {\n    AuthenticatedIdentity,\n    IdentityContext,\n    IdentityData\n} from \"~/features/security/IdentityContext/index.js\";\nimport { GetRoleUseCase } from \"~/features/security/roles/GetRole/index.js\";\nimport { ListRolesUseCase } from \"~/features/security/roles/ListRoles/index.js\";\nimport { CreateRoleUseCase } from \"~/features/security/roles/CreateRole/index.js\";\nimport { UpdateRoleUseCase } from \"~/features/security/roles/UpdateRole/index.js\";\nimport { DeleteRoleUseCase } from \"~/features/security/roles/DeleteRole/index.js\";\nimport { GetTeamUseCase } from \"~/features/security/teams/GetTeam/index.js\";\nimport { ListTeamsUseCase } from \"~/features/security/teams/ListTeams/index.js\";\nimport { CreateTeam } from \"~/features/security/teams/CreateTeam/index.js\";\nimport { UpdateTeam } from \"~/features/security/teams/UpdateTeam/index.js\";\nimport { DeleteTeam } from \"~/features/security/teams/DeleteTeam/index.js\";\n\n/**\n * Legacy bridge that implements the old Security interface.\n * As we implement each phase, we'll replace forwarding with delegation.\n */\nexport class LegacyContext {\n    constructor(private container: Container) {}\n\n    private get identityContext() {\n        return this.container.resolve(IdentityContext);\n    }\n\n    private get authenticationContext() {\n        return this.container.resolve(AuthenticationContext);\n    }\n\n    addAuthenticator(authenticator: Authenticator.Interface[\"authenticate\"]): void {\n        this.container.registerFactory(Authenticator, () => {\n            return {\n                authenticate(token: string): Promise<IdentityData | null> {\n                    return authenticator(token);\n                }\n            };\n        });\n    }\n\n    async authenticate(token: string): Promise<void> {\n        // Authenticate using new context\n        const identity = await this.authenticationContext.authenticate(token);\n\n        // Set identity in IdentityContext\n        this.identityContext.setIdentity(identity);\n    }\n\n    getIdentity(): SecurityIdentity {\n        const identity = this.identityContext.getIdentity();\n\n        // Convert our Identity class to old SecurityIdentity format\n        if (identity.isAnonymous()) {\n            return undefined as any;\n        }\n\n        return identity;\n    }\n\n    setIdentity(identity: SecurityIdentity): void {\n        if (!identity) {\n            this.identityContext.setIdentity(undefined);\n            return;\n        }\n\n        // Wrap old identity format in AuthenticatedIdentity\n        const { id, displayName, type, ...rest } = identity;\n        const authenticatedIdentity = new AuthenticatedIdentity({\n            id,\n            displayName,\n            type,\n            ...rest\n        });\n\n        this.identityContext.setIdentity(authenticatedIdentity);\n    }\n\n    getToken() {\n        return this.authenticationContext.getAuthToken();\n    }\n\n    isAuthorizationEnabled(): boolean {\n        return this.identityContext.isAuthorizationEnabled();\n    }\n\n    withoutAuthorization<T = any>(cb: () => Promise<T>): Promise<T> {\n        return this.identityContext.withoutAuthorization(cb);\n    }\n\n    withIdentity<T = any>(\n        identity: SecurityIdentity | undefined,\n        cb: () => Promise<T>\n    ): Promise<T> {\n        if (!identity) {\n            return this.identityContext.withIdentity(undefined, cb);\n        }\n\n        const { id, displayName, type, ...rest } = identity;\n        const authenticatedIdentity = new AuthenticatedIdentity({\n            id,\n            displayName,\n            type,\n            ...rest\n        });\n\n        return this.identityContext.withIdentity(authenticatedIdentity, cb);\n    }\n\n    async getPermission<TPermission extends SecurityPermission = SecurityPermission>(\n        permission: string\n    ) {\n        return this.identityContext.getPermission<TPermission>(permission);\n    }\n\n    async getPermissions<TPermission extends SecurityPermission = SecurityPermission>(\n        permission: string\n    ) {\n        return this.identityContext.getPermissions<TPermission>(permission);\n    }\n\n    async listPermissions() {\n        return this.identityContext.listPermissions();\n    }\n\n    async hasFullAccess(): Promise<boolean> {\n        return this.identityContext.hasFullAccess();\n    }\n\n    async getRole(params: any) {\n        const useCase = this.container.resolve(GetRoleUseCase);\n        const result = await useCase.execute(params.where);\n\n        if (result.isFail()) {\n            throw result.error;\n        }\n\n        return result.value;\n    }\n\n    async listRoles(params?: any) {\n        const useCase = this.container.resolve(ListRolesUseCase);\n        const result = await useCase.execute(params);\n\n        if (result.isFail()) {\n            throw result.error;\n        }\n\n        return result.value;\n    }\n\n    async createRole(input: any) {\n        const useCase = this.container.resolve(CreateRoleUseCase);\n        const result = await useCase.execute(input);\n\n        if (result.isFail()) {\n            throw result.error;\n        }\n\n        return result.value;\n    }\n\n    async updateRole(id: string, input: any) {\n        const useCase = this.container.resolve(UpdateRoleUseCase);\n        const result = await useCase.execute(id, input);\n\n        if (result.isFail()) {\n            throw result.error;\n        }\n\n        return result.value;\n    }\n\n    async deleteRole(id: string) {\n        const useCase = this.container.resolve(DeleteRoleUseCase);\n        const result = await useCase.execute(id);\n\n        if (result.isFail()) {\n            throw result.error;\n        }\n    }\n\n    addAuthorizer(authorizer: any) {\n        // @ts-expect-error\n        this.container.registerFactory(Authorizer, () => {\n            return {\n                authorize(): Promise<Permissions[]> {\n                    return authorizer();\n                }\n            };\n        });\n    }\n\n    async getTeam(params: any) {\n        const useCase = this.container.resolve(GetTeamUseCase);\n        const result = await useCase.execute(params.where);\n\n        if (result.isFail()) {\n            throw result.error;\n        }\n\n        return result.value;\n    }\n\n    async listTeams(params?: any) {\n        const useCase = this.container.resolve(ListTeamsUseCase);\n        const result = await useCase.execute(params);\n\n        if (result.isFail()) {\n            throw result.error;\n        }\n\n        return result.value;\n    }\n\n    async createTeam(input: any) {\n        const useCase = this.container.resolve(CreateTeam);\n        const result = await useCase.execute(input);\n\n        if (result.isFail()) {\n            throw result.error;\n        }\n\n        return result.value;\n    }\n\n    async updateTeam(id: string, input: any) {\n        const useCase = this.container.resolve(UpdateTeam);\n        const result = await useCase.execute(id, input);\n\n        if (result.isFail()) {\n            throw result.error;\n        }\n\n        return result.value;\n    }\n\n    async deleteTeam(id: string) {\n        const useCase = this.container.resolve(DeleteTeam);\n        const result = await useCase.execute(id);\n\n        if (result.isFail()) {\n            throw result.error;\n        }\n    }\n}\n"],"mappings":"AAEA,SAASA,qBAAqB;AAC9B,SAASC,aAAa;AACtB,SAASC,UAAU;AACnB,SACIC,qBAAqB,EACrBC,eAAe;AAGnB,SAASC,cAAc;AACvB,SAASC,gBAAgB;AACzB,SAASC,iBAAiB;AAC1B,SAASC,iBAAiB;AAC1B,SAASC,iBAAiB;AAC1B,SAASC,cAAc;AACvB,SAASC,gBAAgB;AACzB,SAASC,UAAU;AACnB,SAASC,UAAU;AACnB,SAASC,UAAU;;AAEnB;AACA;AACA;AACA;AACA,OAAO,MAAMC,aAAa,CAAC;EACvBC,WAAWA,CAASC,SAAoB,EAAE;IAAA,KAAtBA,SAAoB,GAApBA,SAAoB;EAAG;EAE3C,IAAYC,eAAeA,CAAA,EAAG;IAC1B,OAAO,IAAI,CAACD,SAAS,CAACE,OAAO,CAACf,eAAe,CAAC;EAClD;EAEA,IAAYgB,qBAAqBA,CAAA,EAAG;IAChC,OAAO,IAAI,CAACH,SAAS,CAACE,OAAO,CAACnB,qBAAqB,CAAC;EACxD;EAEAqB,gBAAgBA,CAACC,aAAsD,EAAQ;IAC3E,IAAI,CAACL,SAAS,CAACM,eAAe,CAACtB,aAAa,EAAE,MAAM;MAChD,OAAO;QACHuB,YAAYA,CAACC,KAAa,EAAgC;UACtD,OAAOH,aAAa,CAACG,KAAK,CAAC;QAC/B;MACJ,CAAC;IACL,CAAC,CAAC;EACN;EAEA,MAAMD,YAAYA,CAACC,KAAa,EAAiB;IAC7C;IACA,MAAMC,QAAQ,GAAG,MAAM,IAAI,CAACN,qBAAqB,CAACI,YAAY,CAACC,KAAK,CAAC;;IAErE;IACA,IAAI,CAACP,eAAe,CAACS,WAAW,CAACD,QAAQ,CAAC;EAC9C;EAEAE,WAAWA,CAAA,EAAqB;IAC5B,MAAMF,QAAQ,GAAG,IAAI,CAACR,eAAe,CAACU,WAAW,CAAC,CAAC;;IAEnD;IACA,IAAIF,QAAQ,CAACG,WAAW,CAAC,CAAC,EAAE;MACxB,OAAOC,SAAS;IACpB;IAEA,OAAOJ,QAAQ;EACnB;EAEAC,WAAWA,CAACD,QAA0B,EAAQ;IAC1C,IAAI,CAACA,QAAQ,EAAE;MACX,IAAI,CAACR,eAAe,CAACS,WAAW,CAACG,SAAS,CAAC;MAC3C;IACJ;;IAEA;IACA,MAAM;MAAEC,EAAE;MAAEC,WAAW;MAAEC,IAAI;MAAE,GAAGC;IAAK,CAAC,GAAGR,QAAQ;IACnD,MAAMS,qBAAqB,GAAG,IAAIhC,qBAAqB,CAAC;MACpD4B,EAAE;MACFC,WAAW;MACXC,IAAI;MACJ,GAAGC;IACP,CAAC,CAAC;IAEF,IAAI,CAAChB,eAAe,CAACS,WAAW,CAACQ,qBAAqB,CAAC;EAC3D;EAEAC,QAAQA,CAAA,EAAG;IACP,OAAO,IAAI,CAAChB,qBAAqB,CAACiB,YAAY,CAAC,CAAC;EACpD;EAEAC,sBAAsBA,CAAA,EAAY;IAC9B,OAAO,IAAI,CAACpB,eAAe,CAACoB,sBAAsB,CAAC,CAAC;EACxD;EAEAC,oBAAoBA,CAAUC,EAAoB,EAAc;IAC5D,OAAO,IAAI,CAACtB,eAAe,CAACqB,oBAAoB,CAACC,EAAE,CAAC;EACxD;EAEAC,YAAYA,CACRf,QAAsC,EACtCc,EAAoB,EACV;IACV,IAAI,CAACd,QAAQ,EAAE;MACX,OAAO,IAAI,CAACR,eAAe,CAACuB,YAAY,CAACX,SAAS,EAAEU,EAAE,CAAC;IAC3D;IAEA,MAAM;MAAET,EAAE;MAAEC,WAAW;MAAEC,IAAI;MAAE,GAAGC;IAAK,CAAC,GAAGR,QAAQ;IACnD,MAAMS,qBAAqB,GAAG,IAAIhC,qBAAqB,CAAC;MACpD4B,EAAE;MACFC,WAAW;MACXC,IAAI;MACJ,GAAGC;IACP,CAAC,CAAC;IAEF,OAAO,IAAI,CAAChB,eAAe,CAACuB,YAAY,CAACN,qBAAqB,EAAEK,EAAE,CAAC;EACvE;EAEA,MAAME,aAAaA,CACfC,UAAkB,EACpB;IACE,OAAO,IAAI,CAACzB,eAAe,CAACwB,aAAa,CAAcC,UAAU,CAAC;EACtE;EAEA,MAAMC,cAAcA,CAChBD,UAAkB,EACpB;IACE,OAAO,IAAI,CAACzB,eAAe,CAAC0B,cAAc,CAAcD,UAAU,CAAC;EACvE;EAEA,MAAME,eAAeA,CAAA,EAAG;IACpB,OAAO,IAAI,CAAC3B,eAAe,CAAC2B,eAAe,CAAC,CAAC;EACjD;EAEA,MAAMC,aAAaA,CAAA,EAAqB;IACpC,OAAO,IAAI,CAAC5B,eAAe,CAAC4B,aAAa,CAAC,CAAC;EAC/C;EAEA,MAAMC,OAAOA,CAACC,MAAW,EAAE;IACvB,MAAMC,OAAO,GAAG,IAAI,CAAChC,SAAS,CAACE,OAAO,CAACd,cAAc,CAAC;IACtD,MAAM6C,MAAM,GAAG,MAAMD,OAAO,CAACE,OAAO,CAACH,MAAM,CAACI,KAAK,CAAC;IAElD,IAAIF,MAAM,CAACG,MAAM,CAAC,CAAC,EAAE;MACjB,MAAMH,MAAM,CAACI,KAAK;IACtB;IAEA,OAAOJ,MAAM,CAACK,KAAK;EACvB;EAEA,MAAMC,SAASA,CAACR,MAAY,EAAE;IAC1B,MAAMC,OAAO,GAAG,IAAI,CAAChC,SAAS,CAACE,OAAO,CAACb,gBAAgB,CAAC;IACxD,MAAM4C,MAAM,GAAG,MAAMD,OAAO,CAACE,OAAO,CAACH,MAAM,CAAC;IAE5C,IAAIE,MAAM,CAACG,MAAM,CAAC,CAAC,EAAE;MACjB,MAAMH,MAAM,CAACI,KAAK;IACtB;IAEA,OAAOJ,MAAM,CAACK,KAAK;EACvB;EAEA,MAAME,UAAUA,CAACC,KAAU,EAAE;IACzB,MAAMT,OAAO,GAAG,IAAI,CAAChC,SAAS,CAACE,OAAO,CAACZ,iBAAiB,CAAC;IACzD,MAAM2C,MAAM,GAAG,MAAMD,OAAO,CAACE,OAAO,CAACO,KAAK,CAAC;IAE3C,IAAIR,MAAM,CAACG,MAAM,CAAC,CAAC,EAAE;MACjB,MAAMH,MAAM,CAACI,KAAK;IACtB;IAEA,OAAOJ,MAAM,CAACK,KAAK;EACvB;EAEA,MAAMI,UAAUA,CAAC5B,EAAU,EAAE2B,KAAU,EAAE;IACrC,MAAMT,OAAO,GAAG,IAAI,CAAChC,SAAS,CAACE,OAAO,CAACX,iBAAiB,CAAC;IACzD,MAAM0C,MAAM,GAAG,MAAMD,OAAO,CAACE,OAAO,CAACpB,EAAE,EAAE2B,KAAK,CAAC;IAE/C,IAAIR,MAAM,CAACG,MAAM,CAAC,CAAC,EAAE;MACjB,MAAMH,MAAM,CAACI,KAAK;IACtB;IAEA,OAAOJ,MAAM,CAACK,KAAK;EACvB;EAEA,MAAMK,UAAUA,CAAC7B,EAAU,EAAE;IACzB,MAAMkB,OAAO,GAAG,IAAI,CAAChC,SAAS,CAACE,OAAO,CAACV,iBAAiB,CAAC;IACzD,MAAMyC,MAAM,GAAG,MAAMD,OAAO,CAACE,OAAO,CAACpB,EAAE,CAAC;IAExC,IAAImB,MAAM,CAACG,MAAM,CAAC,CAAC,EAAE;MACjB,MAAMH,MAAM,CAACI,KAAK;IACtB;EACJ;EAEAO,aAAaA,CAACC,UAAe,EAAE;IAC3B;IACA,IAAI,CAAC7C,SAAS,CAACM,eAAe,CAACrB,UAAU,EAAE,MAAM;MAC7C,OAAO;QACH6D,SAASA,CAAA,EAA2B;UAChC,OAAOD,UAAU,CAAC,CAAC;QACvB;MACJ,CAAC;IACL,CAAC,CAAC;EACN;EAEA,MAAME,OAAOA,CAAChB,MAAW,EAAE;IACvB,MAAMC,OAAO,GAAG,IAAI,CAAChC,SAAS,CAACE,OAAO,CAACT,cAAc,CAAC;IACtD,MAAMwC,MAAM,GAAG,MAAMD,OAAO,CAACE,OAAO,CAACH,MAAM,CAACI,KAAK,CAAC;IAElD,IAAIF,MAAM,CAACG,MAAM,CAAC,CAAC,EAAE;MACjB,MAAMH,MAAM,CAACI,KAAK;IACtB;IAEA,OAAOJ,MAAM,CAACK,KAAK;EACvB;EAEA,MAAMU,SAASA,CAACjB,MAAY,EAAE;IAC1B,MAAMC,OAAO,GAAG,IAAI,CAAChC,SAAS,CAACE,OAAO,CAACR,gBAAgB,CAAC;IACxD,MAAMuC,MAAM,GAAG,MAAMD,OAAO,CAACE,OAAO,CAACH,MAAM,CAAC;IAE5C,IAAIE,MAAM,CAACG,MAAM,CAAC,CAAC,EAAE;MACjB,MAAMH,MAAM,CAACI,KAAK;IACtB;IAEA,OAAOJ,MAAM,CAACK,KAAK;EACvB;EAEA,MAAMW,UAAUA,CAACR,KAAU,EAAE;IACzB,MAAMT,OAAO,GAAG,IAAI,CAAChC,SAAS,CAACE,OAAO,CAACP,UAAU,CAAC;IAClD,MAAMsC,MAAM,GAAG,MAAMD,OAAO,CAACE,OAAO,CAACO,KAAK,CAAC;IAE3C,IAAIR,MAAM,CAACG,MAAM,CAAC,CAAC,EAAE;MACjB,MAAMH,MAAM,CAACI,KAAK;IACtB;IAEA,OAAOJ,MAAM,CAACK,KAAK;EACvB;EAEA,MAAMY,UAAUA,CAACpC,EAAU,EAAE2B,KAAU,EAAE;IACrC,MAAMT,OAAO,GAAG,IAAI,CAAChC,SAAS,CAACE,OAAO,CAACN,UAAU,CAAC;IAClD,MAAMqC,MAAM,GAAG,MAAMD,OAAO,CAACE,OAAO,CAACpB,EAAE,EAAE2B,KAAK,CAAC;IAE/C,IAAIR,MAAM,CAACG,MAAM,CAAC,CAAC,EAAE;MACjB,MAAMH,MAAM,CAACI,KAAK;IACtB;IAEA,OAAOJ,MAAM,CAACK,KAAK;EACvB;EAEA,MAAMa,UAAUA,CAACrC,EAAU,EAAE;IACzB,MAAMkB,OAAO,GAAG,IAAI,CAAChC,SAAS,CAACE,OAAO,CAACL,UAAU,CAAC;IAClD,MAAMoC,MAAM,GAAG,MAAMD,OAAO,CAACE,OAAO,CAACpB,EAAE,CAAC;IAExC,IAAImB,MAAM,CAACG,MAAM,CAAC,CAAC,EAAE;MACjB,MAAMH,MAAM,CAACI,KAAK;IACtB;EACJ;AACJ","ignoreList":[]}

package/legacy/security/createSecurityContext.d.ts

@@ -0,0 +1,3 @@
+import { ContextPlugin } from "@webiny/api";
+import type { ApiCoreContext } from "../../types/core.js";
+export declare const createSecurityContext: () => ContextPlugin<ApiCoreContext>;

package/legacy/security/createSecurityContext.js

@@ -0,0 +1,25 @@
+import { ContextPlugin } from "@webiny/api";
+import { RolesProvider, TeamsProvider } from "../../features/security/shared/abstractions.js";
+import { SecurityRolePlugin } from "./plugins/SecurityRolePlugin.js";
+import { SecurityTeamPlugin } from "./plugins/SecurityTeamPlugin.js";
+import { LegacyContext } from "./LegacyContext.js";
+import { createSecurityGraphQL } from "../../graphql/security/index.js";
+export const createSecurityContext = () => {
+  return new ContextPlugin(async context => {
+    // Register roles and teams providers for plugin-defined roles/teams
+    context.container.registerFactory(RolesProvider, () => {
+      return async () => context.plugins.byType(SecurityRolePlugin.type).map(plugin => plugin.securityRole);
+    });
+    context.container.registerFactory(TeamsProvider, () => {
+      return async () => context.plugins.byType(SecurityTeamPlugin.type).map(plugin => plugin.securityTeam);
+    });
+
+    // Create a legacy context that delegates to new features
+    context.security = new LegacyContext(context.container);
+
+    // Register GraphQL plugins
+    context.plugins.register(createSecurityGraphQL());
+  });
+};
+
+//# sourceMappingURL=createSecurityContext.js.map

package/legacy/security/createSecurityContext.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["ContextPlugin","RolesProvider","TeamsProvider","SecurityRolePlugin","SecurityTeamPlugin","LegacyContext","createSecurityGraphQL","createSecurityContext","context","container","registerFactory","plugins","byType","type","map","plugin","securityRole","securityTeam","security","register"],"sources":["createSecurityContext.ts"],"sourcesContent":["import { ContextPlugin } from \"@webiny/api\";\nimport type { ApiCoreContext } from \"~/types/core.js\";\nimport { RolesProvider, TeamsProvider } from \"~/features/security/shared/abstractions.js\";\nimport { SecurityRolePlugin } from \"~/legacy/security/plugins/SecurityRolePlugin.js\";\nimport { SecurityTeamPlugin } from \"~/legacy/security/plugins/SecurityTeamPlugin.js\";\nimport { LegacyContext } from \"~/legacy/security/LegacyContext.js\";\nimport { createSecurityGraphQL } from \"~/graphql/security/index.js\";\n\nexport const createSecurityContext = () => {\n    return new ContextPlugin<ApiCoreContext>(async context => {\n        // Register roles and teams providers for plugin-defined roles/teams\n        context.container.registerFactory(RolesProvider, () => {\n            return async () =>\n                context.plugins\n                    .byType<SecurityRolePlugin>(SecurityRolePlugin.type)\n                    .map(plugin => plugin.securityRole);\n        });\n\n        context.container.registerFactory(TeamsProvider, () => {\n            return async () =>\n                context.plugins\n                    .byType<SecurityTeamPlugin>(SecurityTeamPlugin.type)\n                    .map(plugin => plugin.securityTeam);\n        });\n\n        // Create a legacy context that delegates to new features\n        context.security = new LegacyContext(context.container);\n\n        // Register GraphQL plugins\n        context.plugins.register(createSecurityGraphQL());\n    });\n};\n"],"mappings":"AAAA,SAASA,aAAa,QAAQ,aAAa;AAE3C,SAASC,aAAa,EAAEC,aAAa;AACrC,SAASC,kBAAkB;AAC3B,SAASC,kBAAkB;AAC3B,SAASC,aAAa;AACtB,SAASC,qBAAqB;AAE9B,OAAO,MAAMC,qBAAqB,GAAGA,CAAA,KAAM;EACvC,OAAO,IAAIP,aAAa,CAAiB,MAAMQ,OAAO,IAAI;IACtD;IACAA,OAAO,CAACC,SAAS,CAACC,eAAe,CAACT,aAAa,EAAE,MAAM;MACnD,OAAO,YACHO,OAAO,CAACG,OAAO,CACVC,MAAM,CAAqBT,kBAAkB,CAACU,IAAI,CAAC,CACnDC,GAAG,CAACC,MAAM,IAAIA,MAAM,CAACC,YAAY,CAAC;IAC/C,CAAC,CAAC;IAEFR,OAAO,CAACC,SAAS,CAACC,eAAe,CAACR,aAAa,EAAE,MAAM;MACnD,OAAO,YACHM,OAAO,CAACG,OAAO,CACVC,MAAM,CAAqBR,kBAAkB,CAACS,IAAI,CAAC,CACnDC,GAAG,CAACC,MAAM,IAAIA,MAAM,CAACE,YAAY,CAAC;IAC/C,CAAC,CAAC;;IAEF;IACAT,OAAO,CAACU,QAAQ,GAAG,IAAIb,aAAa,CAACG,OAAO,CAACC,SAAS,CAAC;;IAEvD;IACAD,OAAO,CAACG,OAAO,CAACQ,QAAQ,CAACb,qBAAqB,CAAC,CAAC,CAAC;EACrD,CAAC,CAAC;AACN,CAAC","ignoreList":[]}

package/legacy/security/plugins/SecurityRolePlugin.d.ts

@@ -0,0 +1,16 @@
+import { Plugin } from "@webiny/plugins";
+import type { SecurityPermission, SecurityRole } from "../../../types/security.js";
+export interface SecurityRolePluginParams {
+    id: string;
+    name: string;
+    slug?: string;
+    description?: string;
+    permissions?: SecurityPermission[];
+    tenant?: string;
+}
+export declare class SecurityRolePlugin extends Plugin {
+    static readonly type: string;
+    readonly securityRole: SecurityRole;
+    constructor(params: SecurityRolePluginParams);
+}
+export declare const createSecurityRolePlugin: (securityRole: SecurityRolePluginParams) => SecurityRolePlugin;

package/legacy/security/plugins/SecurityRolePlugin.js

@@ -0,0 +1,33 @@
+import { Plugin } from "@webiny/plugins";
+export class SecurityRolePlugin extends Plugin {
+  static type = "security-role";
+  constructor(params) {
+    super();
+    const {
+      id,
+      name,
+      slug = id,
+      description = "",
+      permissions = [],
+      tenant = null
+    } = params;
+    this.securityRole = {
+      id,
+      name,
+      slug,
+      description,
+      permissions,
+      tenant,
+      // Internal properties.
+      system: false,
+      plugin: true,
+      createdBy: null,
+      createdOn: null
+    };
+  }
+}
+export const createSecurityRolePlugin = securityRole => {
+  return new SecurityRolePlugin(securityRole);
+};
+
+//# sourceMappingURL=SecurityRolePlugin.js.map

package/legacy/security/plugins/SecurityRolePlugin.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["Plugin","SecurityRolePlugin","type","constructor","params","id","name","slug","description","permissions","tenant","securityRole","system","plugin","createdBy","createdOn","createSecurityRolePlugin"],"sources":["SecurityRolePlugin.ts"],"sourcesContent":["import { Plugin } from \"@webiny/plugins\";\nimport type { SecurityPermission, SecurityRole } from \"~/types/security.js\";\n\nexport interface SecurityRolePluginParams {\n    id: string;\n    name: string;\n    slug?: string;\n    description?: string;\n    permissions?: SecurityPermission[];\n    tenant?: string;\n}\n\nexport class SecurityRolePlugin extends Plugin {\n    public static override readonly type: string = \"security-role\";\n    public readonly securityRole: SecurityRole;\n\n    constructor(params: SecurityRolePluginParams) {\n        super();\n\n        const { id, name, slug = id, description = \"\", permissions = [], tenant = null } = params;\n\n        this.securityRole = {\n            id,\n            name,\n            slug,\n            description,\n            permissions,\n            tenant,\n\n            // Internal properties.\n            system: false,\n            plugin: true,\n            createdBy: null,\n            createdOn: null\n        };\n    }\n}\n\nexport const createSecurityRolePlugin = (\n    securityRole: SecurityRolePluginParams\n): SecurityRolePlugin => {\n    return new SecurityRolePlugin(securityRole);\n};\n"],"mappings":"AAAA,SAASA,MAAM,QAAQ,iBAAiB;AAYxC,OAAO,MAAMC,kBAAkB,SAASD,MAAM,CAAC;EAC3C,OAAgCE,IAAI,GAAW,eAAe;EAG9DC,WAAWA,CAACC,MAAgC,EAAE;IAC1C,KAAK,CAAC,CAAC;IAEP,MAAM;MAAEC,EAAE;MAAEC,IAAI;MAAEC,IAAI,GAAGF,EAAE;MAAEG,WAAW,GAAG,EAAE;MAAEC,WAAW,GAAG,EAAE;MAAEC,MAAM,GAAG;IAAK,CAAC,GAAGN,MAAM;IAEzF,IAAI,CAACO,YAAY,GAAG;MAChBN,EAAE;MACFC,IAAI;MACJC,IAAI;MACJC,WAAW;MACXC,WAAW;MACXC,MAAM;MAEN;MACAE,MAAM,EAAE,KAAK;MACbC,MAAM,EAAE,IAAI;MACZC,SAAS,EAAE,IAAI;MACfC,SAAS,EAAE;IACf,CAAC;EACL;AACJ;AAEA,OAAO,MAAMC,wBAAwB,GACjCL,YAAsC,IACjB;EACrB,OAAO,IAAIV,kBAAkB,CAACU,YAAY,CAAC;AAC/C,CAAC","ignoreList":[]}

package/legacy/security/plugins/SecurityTeamPlugin.d.ts

@@ -0,0 +1,16 @@
+import { Plugin } from "@webiny/plugins";
+import type { SecurityTeam } from "../../../types/security.js";
+export interface SecurityTeamPluginParams {
+    id: string;
+    name: string;
+    slug?: string;
+    description?: string;
+    roles?: string[];
+    tenant?: string;
+}
+export declare class SecurityTeamPlugin extends Plugin {
+    static readonly type: string;
+    readonly securityTeam: SecurityTeam;
+    constructor(params: SecurityTeamPluginParams);
+}
+export declare const createSecurityTeamPlugin: (securityTeam: SecurityTeamPluginParams) => SecurityTeamPlugin;

package/legacy/security/plugins/SecurityTeamPlugin.js

@@ -0,0 +1,33 @@
+import { Plugin } from "@webiny/plugins";
+export class SecurityTeamPlugin extends Plugin {
+  static type = "security-team";
+  constructor(params) {
+    super();
+    const {
+      id,
+      name,
+      slug = id,
+      description = "",
+      roles = [],
+      tenant = null
+    } = params;
+    this.securityTeam = {
+      id,
+      name,
+      slug,
+      description,
+      roles: roles,
+      tenant,
+      // Internal properties.
+      system: false,
+      plugin: true,
+      createdBy: null,
+      createdOn: null
+    };
+  }
+}
+export const createSecurityTeamPlugin = securityTeam => {
+  return new SecurityTeamPlugin(securityTeam);
+};
+
+//# sourceMappingURL=SecurityTeamPlugin.js.map

package/legacy/security/plugins/SecurityTeamPlugin.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["Plugin","SecurityTeamPlugin","type","constructor","params","id","name","slug","description","roles","tenant","securityTeam","system","plugin","createdBy","createdOn","createSecurityTeamPlugin"],"sources":["SecurityTeamPlugin.ts"],"sourcesContent":["import { Plugin } from \"@webiny/plugins\";\nimport type { SecurityTeam } from \"~/types/security.js\";\n\nexport interface SecurityTeamPluginParams {\n    id: string;\n    name: string;\n    slug?: string;\n    description?: string;\n    roles?: string[];\n    tenant?: string;\n}\n\nexport class SecurityTeamPlugin extends Plugin {\n    public static override readonly type: string = \"security-team\";\n    public readonly securityTeam: SecurityTeam;\n\n    constructor(params: SecurityTeamPluginParams) {\n        super();\n\n        const { id, name, slug = id, description = \"\", roles = [], tenant = null } = params;\n\n        this.securityTeam = {\n            id,\n            name,\n            slug,\n            description,\n            roles: roles,\n            tenant,\n\n            // Internal properties.\n            system: false,\n            plugin: true,\n            createdBy: null,\n            createdOn: null\n        };\n    }\n}\n\nexport const createSecurityTeamPlugin = (\n    securityTeam: SecurityTeamPluginParams\n): SecurityTeamPlugin => {\n    return new SecurityTeamPlugin(securityTeam);\n};\n"],"mappings":"AAAA,SAASA,MAAM,QAAQ,iBAAiB;AAYxC,OAAO,MAAMC,kBAAkB,SAASD,MAAM,CAAC;EAC3C,OAAgCE,IAAI,GAAW,eAAe;EAG9DC,WAAWA,CAACC,MAAgC,EAAE;IAC1C,KAAK,CAAC,CAAC;IAEP,MAAM;MAAEC,EAAE;MAAEC,IAAI;MAAEC,IAAI,GAAGF,EAAE;MAAEG,WAAW,GAAG,EAAE;MAAEC,KAAK,GAAG,EAAE;MAAEC,MAAM,GAAG;IAAK,CAAC,GAAGN,MAAM;IAEnF,IAAI,CAACO,YAAY,GAAG;MAChBN,EAAE;MACFC,IAAI;MACJC,IAAI;MACJC,WAAW;MACXC,KAAK,EAAEA,KAAK;MACZC,MAAM;MAEN;MACAE,MAAM,EAAE,KAAK;MACbC,MAAM,EAAE,IAAI;MACZC,SAAS,EAAE,IAAI;MACfC,SAAS,EAAE;IACf,CAAC;EACL;AACJ;AAEA,OAAO,MAAMC,wBAAwB,GACjCL,YAAsC,IACjB;EACrB,OAAO,IAAIV,kBAAkB,CAACU,YAAY,CAAC;AAC/C,CAAC","ignoreList":[]}

package/legacy/security/plugins/apiKeyAuthentication.d.ts

@@ -0,0 +1,7 @@
+import { ContextPlugin } from "@webiny/api";
+import type { ApiCoreContext } from "../../../types/core.js";
+export interface Config {
+    identityType?: string;
+}
+declare const _default: ({ identityType }: Config) => ContextPlugin<ApiCoreContext>;
+export default _default;

package/legacy/security/plugins/apiKeyAuthentication.js

@@ -0,0 +1,29 @@
+import { ContextPlugin } from "@webiny/api";
+import { ApiKeysRepository } from "../../../features/security/apiKeys/shared/abstractions.js";
+export default ({
+  identityType
+}) => {
+  return new ContextPlugin(context => {
+    context.security.addAuthenticator(async token => {
+      if (typeof token !== "string" || !token.startsWith("wat_")) {
+        return null;
+      }
+      const repository = context.container.resolve(ApiKeysRepository);
+      const result = await repository.getByToken(token);
+      if (!result.isOk()) {
+        return null;
+      }
+      const apiKey = result.value;
+      return {
+        id: apiKey.id,
+        displayName: apiKey.name,
+        type: identityType || "api-key",
+        // Add permissions directly to the identity so we don't have to load them
+        // again when authorization kicks in.
+        permissions: apiKey.permissions
+      };
+    });
+  });
+};
+
+//# sourceMappingURL=apiKeyAuthentication.js.map

package/legacy/security/plugins/apiKeyAuthentication.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["ContextPlugin","ApiKeysRepository","identityType","context","security","addAuthenticator","token","startsWith","repository","container","resolve","result","getByToken","isOk","apiKey","value","id","displayName","name","type","permissions"],"sources":["apiKeyAuthentication.ts"],"sourcesContent":["import { ContextPlugin } from \"@webiny/api\";\nimport type { ApiCoreContext } from \"~/types/core.js\";\nimport { ApiKeysRepository } from \"~/features/security/apiKeys/shared/abstractions.js\";\n\nexport interface Config {\n    identityType?: string;\n}\n\nexport default ({ identityType }: Config) => {\n    return new ContextPlugin<ApiCoreContext>(context => {\n        context.security.addAuthenticator(async token => {\n            if (typeof token !== \"string\" || !token.startsWith(\"wat_\")) {\n                return null;\n            }\n\n            const repository = context.container.resolve(ApiKeysRepository);\n            const result = await repository.getByToken(token);\n\n            if (!result.isOk()) {\n                return null;\n            }\n\n            const apiKey = result.value;\n\n            return {\n                id: apiKey.id,\n                displayName: apiKey.name,\n                type: identityType || \"api-key\",\n                // Add permissions directly to the identity so we don't have to load them\n                // again when authorization kicks in.\n                permissions: apiKey.permissions\n            };\n        });\n    });\n};\n"],"mappings":"AAAA,SAASA,aAAa,QAAQ,aAAa;AAE3C,SAASC,iBAAiB;AAM1B,eAAe,CAAC;EAAEC;AAAqB,CAAC,KAAK;EACzC,OAAO,IAAIF,aAAa,CAAiBG,OAAO,IAAI;IAChDA,OAAO,CAACC,QAAQ,CAACC,gBAAgB,CAAC,MAAMC,KAAK,IAAI;MAC7C,IAAI,OAAOA,KAAK,KAAK,QAAQ,IAAI,CAACA,KAAK,CAACC,UAAU,CAAC,MAAM,CAAC,EAAE;QACxD,OAAO,IAAI;MACf;MAEA,MAAMC,UAAU,GAAGL,OAAO,CAACM,SAAS,CAACC,OAAO,CAACT,iBAAiB,CAAC;MAC/D,MAAMU,MAAM,GAAG,MAAMH,UAAU,CAACI,UAAU,CAACN,KAAK,CAAC;MAEjD,IAAI,CAACK,MAAM,CAACE,IAAI,CAAC,CAAC,EAAE;QAChB,OAAO,IAAI;MACf;MAEA,MAAMC,MAAM,GAAGH,MAAM,CAACI,KAAK;MAE3B,OAAO;QACHC,EAAE,EAAEF,MAAM,CAACE,EAAE;QACbC,WAAW,EAAEH,MAAM,CAACI,IAAI;QACxBC,IAAI,EAAEjB,YAAY,IAAI,SAAS;QAC/B;QACA;QACAkB,WAAW,EAAEN,MAAM,CAACM;MACxB,CAAC;IACL,CAAC,CAAC;EACN,CAAC,CAAC;AACN,CAAC","ignoreList":[]}

package/legacy/security/plugins/apiKeyAuthorization.d.ts

@@ -0,0 +1,6 @@
+import type { ApiCoreContext } from "../../../types/core.js";
+export interface Config {
+    identityType?: string;
+}
+declare const _default: (config: Config) => import("@webiny/api").ContextPlugin<ApiCoreContext>;
+export default _default;

package/legacy/security/plugins/apiKeyAuthorization.js

@@ -0,0 +1,22 @@
+import { createContextPlugin } from "@webiny/api";
+export default config => {
+  return createContextPlugin(({
+    security
+  }) => {
+    security.addAuthorizer(async () => {
+      const identityType = config.identityType || "api-key";
+      const identity = security.getIdentity();
+      if (!identity || identity.type !== identityType) {
+        return null;
+      }
+      // We can expect `permissions` to exist on the identity, because api-key authentication
+      // plugin sets them on the identity instance to avoid loading them from DB here.
+      if (Array.isArray(identity.permissions) === false) {
+        return [];
+      }
+      return identity.permissions;
+    });
+  });
+};
+
+//# sourceMappingURL=apiKeyAuthorization.js.map

package/legacy/security/plugins/apiKeyAuthorization.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["createContextPlugin","config","security","addAuthorizer","identityType","identity","getIdentity","type","Array","isArray","permissions"],"sources":["apiKeyAuthorization.ts"],"sourcesContent":["import { createContextPlugin } from \"@webiny/api\";\nimport type { SecurityPermission } from \"~/types/security.js\";\nimport type { ApiCoreContext } from \"~/types/core.js\";\n\nexport interface Config {\n    identityType?: string;\n}\n\nexport default (config: Config) => {\n    return createContextPlugin<ApiCoreContext>(({ security }) => {\n        security.addAuthorizer(async () => {\n            const identityType = config.identityType || \"api-key\";\n\n            const identity = security.getIdentity();\n\n            if (!identity || identity.type !== identityType) {\n                return null;\n            }\n            // We can expect `permissions` to exist on the identity, because api-key authentication\n            // plugin sets them on the identity instance to avoid loading them from DB here.\n            if (Array.isArray(identity.permissions) === false) {\n                return [];\n            }\n            return identity.permissions as SecurityPermission[];\n        });\n    });\n};\n"],"mappings":"AAAA,SAASA,mBAAmB,QAAQ,aAAa;AAQjD,eAAgBC,MAAc,IAAK;EAC/B,OAAOD,mBAAmB,CAAiB,CAAC;IAAEE;EAAS,CAAC,KAAK;IACzDA,QAAQ,CAACC,aAAa,CAAC,YAAY;MAC/B,MAAMC,YAAY,GAAGH,MAAM,CAACG,YAAY,IAAI,SAAS;MAErD,MAAMC,QAAQ,GAAGH,QAAQ,CAACI,WAAW,CAAC,CAAC;MAEvC,IAAI,CAACD,QAAQ,IAAIA,QAAQ,CAACE,IAAI,KAAKH,YAAY,EAAE;QAC7C,OAAO,IAAI;MACf;MACA;MACA;MACA,IAAII,KAAK,CAACC,OAAO,CAACJ,QAAQ,CAACK,WAAW,CAAC,KAAK,KAAK,EAAE;QAC/C,OAAO,EAAE;MACb;MACA,OAAOL,QAAQ,CAACK,WAAW;IAC/B,CAAC,CAAC;EACN,CAAC,CAAC;AACN,CAAC","ignoreList":[]}

package/legacy/security/plugins/authenticateUsingCookie.d.ts

@@ -0,0 +1,5 @@
+import type { ApiCoreContext } from "../../../types/core.js";
+/**
+ * @internal
+ */
+export declare function authenticateUsingCookie(): (import("@webiny/api").ContextPlugin<ApiCoreContext> | import("@webiny/handler").BeforeHandlerPlugin<ApiCoreContext>)[];

package/legacy/security/plugins/authenticateUsingCookie.js

@@ -0,0 +1,27 @@
+import { createContextPlugin } from "@webiny/api";
+import { createBeforeHandlerPlugin, Request } from "@webiny/handler";
+import { SetIdTokenCookie } from "../../../features/security/authentication/AuthenticationContext/SetIdTokenCookie.js";
+
+/**
+ * @internal
+ */
+export function authenticateUsingCookie() {
+  return [createBeforeHandlerPlugin(async context => {
+    const request = context.container.resolve(Request);
+    const {
+      cookies
+    } = request;
+    const token = cookies["wby-id-token"];
+    if (!context.security.getIdentity() && token) {
+      try {
+        await context.security.authenticate(token);
+      } catch (err) {
+        console.log(err);
+      }
+    }
+  }), createContextPlugin(context => {
+    context.container.register(SetIdTokenCookie);
+  })];
+}
+
+//# sourceMappingURL=authenticateUsingCookie.js.map

package/legacy/security/plugins/authenticateUsingCookie.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["createContextPlugin","createBeforeHandlerPlugin","Request","SetIdTokenCookie","authenticateUsingCookie","context","request","container","resolve","cookies","token","security","getIdentity","authenticate","err","console","log","register"],"sources":["authenticateUsingCookie.ts"],"sourcesContent":["import { createContextPlugin } from \"@webiny/api\";\nimport { createBeforeHandlerPlugin, Request } from \"@webiny/handler\";\nimport type { ApiCoreContext } from \"~/types/core.js\";\nimport { SetIdTokenCookie } from \"~/features/security/authentication/AuthenticationContext/SetIdTokenCookie.js\";\n\n/**\n * @internal\n */\nexport function authenticateUsingCookie() {\n    return [\n        createBeforeHandlerPlugin<ApiCoreContext>(async context => {\n            const request = context.container.resolve(Request);\n            const { cookies } = request;\n            const token = cookies[\"wby-id-token\"];\n\n            if (!context.security.getIdentity() && token) {\n                try {\n                    await context.security.authenticate(token);\n                } catch (err) {\n                    console.log(err);\n                }\n            }\n        }),\n\n        createContextPlugin<ApiCoreContext>(context => {\n            context.container.register(SetIdTokenCookie);\n        })\n    ];\n}\n"],"mappings":"AAAA,SAASA,mBAAmB,QAAQ,aAAa;AACjD,SAASC,yBAAyB,EAAEC,OAAO,QAAQ,iBAAiB;AAEpE,SAASC,gBAAgB;;AAEzB;AACA;AACA;AACA,OAAO,SAASC,uBAAuBA,CAAA,EAAG;EACtC,OAAO,CACHH,yBAAyB,CAAiB,MAAMI,OAAO,IAAI;IACvD,MAAMC,OAAO,GAAGD,OAAO,CAACE,SAAS,CAACC,OAAO,CAACN,OAAO,CAAC;IAClD,MAAM;MAAEO;IAAQ,CAAC,GAAGH,OAAO;IAC3B,MAAMI,KAAK,GAAGD,OAAO,CAAC,cAAc,CAAC;IAErC,IAAI,CAACJ,OAAO,CAACM,QAAQ,CAACC,WAAW,CAAC,CAAC,IAAIF,KAAK,EAAE;MAC1C,IAAI;QACA,MAAML,OAAO,CAACM,QAAQ,CAACE,YAAY,CAACH,KAAK,CAAC;MAC9C,CAAC,CAAC,OAAOI,GAAG,EAAE;QACVC,OAAO,CAACC,GAAG,CAACF,GAAG,CAAC;MACpB;IACJ;EACJ,CAAC,CAAC,EAEFd,mBAAmB,CAAiBK,OAAO,IAAI;IAC3CA,OAAO,CAACE,SAAS,CAACU,QAAQ,CAACd,gBAAgB,CAAC;EAChD,CAAC,CAAC,CACL;AACL","ignoreList":[]}

package/legacy/security/plugins/authenticateUsingHttpHeader.d.ts

@@ -0,0 +1,5 @@
+import type { ApiCoreContext } from "../../../types/core.js";
+export interface GetHeader {
+    (context: ApiCoreContext): string | null | undefined;
+}
+export declare const authenticateUsingHttpHeader: () => (import("@webiny/handler").HandlerOnRequestPlugin<import("@webiny/handler/types.js").Context> | import("@webiny/handler").BeforeHandlerPlugin<ApiCoreContext> | (import("@webiny/api/index.js").ContextPlugin<ApiCoreContext> | import("@webiny/handler").BeforeHandlerPlugin<ApiCoreContext>)[])[];