@webiny/api-core 0.0.0-unstable.61c048f412

package/features/security/apiKeys/shared/ApiKeysRepository.js

@@ -0,0 +1,153 @@
+import { createImplementation } from "@webiny/feature/api";
+import { Result } from "@webiny/feature/api";
+import { ApiKeysRepository as RepositoryAbstraction } from "./abstractions.js";
+import { ApiKeyProvider } from "./abstractions.js";
+import { SecurityStorageOperations } from "../../shared/abstractions.js";
+import { TenantContext } from "../../../tenancy/TenantContext/index.js";
+import { ApiKeyNotFoundError, ApiKeyPersistenceError, ApiKeyValidationError } from "./errors.js";
+
+// TODO: create an ApiKeyMapper
+
+class ApiKeysRepositoryImpl {
+  constructor(tenantContext, storageOperations, apiKeyProvider) {
+    this.tenantContext = tenantContext;
+    this.storageOperations = storageOperations;
+    this.apiKeyProvider = apiKeyProvider;
+  }
+  async get(id) {
+    try {
+      const tenant = this.tenantContext.getTenant();
+      const apiKey = await this.storageOperations.getApiKey({
+        id,
+        tenant: tenant.id
+      });
+      if (apiKey) {
+        return Result.ok(apiKey);
+      }
+      return Result.fail(new ApiKeyNotFoundError());
+    } catch (error) {
+      return Result.fail(error);
+    }
+  }
+  async getByToken(token) {
+    try {
+      // First, check the database (database keys have priority over factory keys)
+      const tenant = this.tenantContext.getTenant();
+      const apiKey = await this.storageOperations.getApiKeyByToken({
+        token,
+        tenant: tenant.id
+      });
+      if (apiKey) {
+        return Result.ok(apiKey);
+      }
+
+      // If not found in database, check if the API key is provided by a factory
+      const factoryApiKey = await this.apiKeyProvider.getByToken(token);
+      if (factoryApiKey) {
+        return Result.ok(factoryApiKey);
+      }
+      return Result.fail(new ApiKeyNotFoundError());
+    } catch (error) {
+      return Result.fail(new ApiKeyPersistenceError(error));
+    }
+  }
+  async getBySlug(slug) {
+    try {
+      // First, check the database (database keys have priority over factory keys)
+      const tenant = this.tenantContext.getTenant();
+      const apiKey = await this.storageOperations.getApiKeyBySlug({
+        slug,
+        tenant: tenant.id
+      });
+      if (apiKey) {
+        return Result.ok(apiKey);
+      }
+
+      // If not found in database, check if the API key is provided by a factory
+      const factoryApiKey = await this.apiKeyProvider.getBySlug(slug);
+      if (factoryApiKey) {
+        return Result.ok(factoryApiKey);
+      }
+      return Result.fail(new ApiKeyNotFoundError());
+    } catch (error) {
+      return Result.fail(new ApiKeyPersistenceError(error));
+    }
+  }
+  async list(params) {
+    try {
+      const tenant = this.tenantContext.getTenant();
+      const result = await this.storageOperations.listApiKeys({
+        where: {
+          tenant: tenant.id
+        },
+        ...params
+      });
+      return Result.ok(result);
+    } catch (error) {
+      return Result.fail(new ApiKeyPersistenceError(error));
+    }
+  }
+  async create(apiKey) {
+    try {
+      // Check if an API key with the same slug already exists
+      const existingKeyResult = await this.getBySlug(apiKey.slug);
+
+      // If we found a key, it's a duplicate slug - return validation error
+      if (existingKeyResult.isOk()) {
+        return Result.fail(new ApiKeyValidationError(`API key with slug "${apiKey.slug}" already exists.`));
+      }
+
+      // "NotFound" error is ok. Everything else is not ok.
+      if (existingKeyResult.error.code !== "ApiKey/NotFound") {
+        return Result.fail(existingKeyResult.error);
+      }
+
+      // Slug is unique, proceed with creation
+      const tenant = this.tenantContext.getTenant();
+      await this.storageOperations.createApiKey({
+        apiKey: {
+          ...apiKey,
+          tenant: tenant.id
+        }
+      });
+      return Result.ok();
+    } catch (error) {
+      return Result.fail(new ApiKeyPersistenceError(error));
+    }
+  }
+  async update(apiKey) {
+    try {
+      const tenant = this.tenantContext.getTenant();
+      await this.storageOperations.updateApiKey({
+        apiKey: {
+          ...apiKey,
+          tenant: tenant.id
+        }
+      });
+      return Result.ok();
+    } catch (error) {
+      return Result.fail(new ApiKeyPersistenceError(error));
+    }
+  }
+  async delete(apiKey) {
+    try {
+      const tenant = this.tenantContext.getTenant();
+      await this.storageOperations.deleteApiKey({
+        apiKey: {
+          ...apiKey,
+          tenant: tenant.id
+        }
+      });
+      return Result.ok();
+    } catch (error) {
+      return Result.fail(new ApiKeyPersistenceError(error));
+    }
+  }
+}
+export const ApiKeysRepository = createImplementation({
+  abstraction: RepositoryAbstraction,
+  implementation: ApiKeysRepositoryImpl,
+  dependencies: [TenantContext, SecurityStorageOperations, ApiKeyProvider]
+});
+
+//# sourceMappingURL=ApiKeysRepository.js.map

package/features/security/apiKeys/shared/ApiKeysRepository.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["createImplementation","Result","ApiKeysRepository","RepositoryAbstraction","ApiKeyProvider","SecurityStorageOperations","TenantContext","ApiKeyNotFoundError","ApiKeyPersistenceError","ApiKeyValidationError","ApiKeysRepositoryImpl","constructor","tenantContext","storageOperations","apiKeyProvider","get","id","tenant","getTenant","apiKey","getApiKey","ok","fail","error","getByToken","token","getApiKeyByToken","factoryApiKey","getBySlug","slug","getApiKeyBySlug","list","params","result","listApiKeys","where","create","existingKeyResult","isOk","code","createApiKey","update","updateApiKey","delete","deleteApiKey","abstraction","implementation","dependencies"],"sources":["ApiKeysRepository.ts"],"sourcesContent":["import { createImplementation } from \"@webiny/feature/api\";\nimport { Result } from \"@webiny/feature/api\";\nimport { ApiKeysRepository as RepositoryAbstraction } from \"./abstractions.js\";\nimport { ApiKeyProvider } from \"./abstractions.js\";\nimport type { ApiKey, ListApiKeysInput } from \"./types.js\";\nimport { SecurityStorageOperations } from \"~/features/security/shared/abstractions.js\";\nimport { TenantContext } from \"~/features/tenancy/TenantContext/index.js\";\nimport { ApiKeyNotFoundError, ApiKeyPersistenceError, ApiKeyValidationError } from \"./errors.js\";\n\n// TODO: create an ApiKeyMapper\n\nclass ApiKeysRepositoryImpl implements RepositoryAbstraction.Interface {\n    constructor(\n        private tenantContext: TenantContext.Interface,\n        private storageOperations: SecurityStorageOperations.Interface,\n        private apiKeyProvider: ApiKeyProvider.Interface\n    ) {}\n\n    async get(id: string): Promise<Result<ApiKey, RepositoryAbstraction.Error>> {\n        try {\n            const tenant = this.tenantContext.getTenant();\n            const apiKey = await this.storageOperations.getApiKey({ id, tenant: tenant.id });\n            if (apiKey) {\n                return Result.ok(apiKey);\n            }\n\n            return Result.fail(new ApiKeyNotFoundError());\n        } catch (error) {\n            return Result.fail(error);\n        }\n    }\n\n    async getByToken(token: string): Promise<Result<ApiKey, RepositoryAbstraction.Error>> {\n        try {\n            // First, check the database (database keys have priority over factory keys)\n            const tenant = this.tenantContext.getTenant();\n            const apiKey = await this.storageOperations.getApiKeyByToken({\n                token,\n                tenant: tenant.id\n            });\n\n            if (apiKey) {\n                return Result.ok(apiKey);\n            }\n\n            // If not found in database, check if the API key is provided by a factory\n            const factoryApiKey = await this.apiKeyProvider.getByToken(token);\n            if (factoryApiKey) {\n                return Result.ok(factoryApiKey);\n            }\n\n            return Result.fail(new ApiKeyNotFoundError());\n        } catch (error) {\n            return Result.fail(new ApiKeyPersistenceError(error));\n        }\n    }\n\n    async getBySlug(slug: string): Promise<Result<ApiKey, RepositoryAbstraction.Error>> {\n        try {\n            // First, check the database (database keys have priority over factory keys)\n            const tenant = this.tenantContext.getTenant();\n            const apiKey = await this.storageOperations.getApiKeyBySlug({\n                slug,\n                tenant: tenant.id\n            });\n\n            if (apiKey) {\n                return Result.ok(apiKey);\n            }\n\n            // If not found in database, check if the API key is provided by a factory\n            const factoryApiKey = await this.apiKeyProvider.getBySlug(slug);\n            if (factoryApiKey) {\n                return Result.ok(factoryApiKey);\n            }\n\n            return Result.fail(new ApiKeyNotFoundError());\n        } catch (error) {\n            return Result.fail(new ApiKeyPersistenceError(error));\n        }\n    }\n\n    async list(params: ListApiKeysInput): Promise<Result<ApiKey[], RepositoryAbstraction.Error>> {\n        try {\n            const tenant = this.tenantContext.getTenant();\n            const result = await this.storageOperations.listApiKeys({\n                where: { tenant: tenant.id },\n                ...params\n            });\n            return Result.ok(result);\n        } catch (error) {\n            return Result.fail(new ApiKeyPersistenceError(error));\n        }\n    }\n\n    async create(apiKey: ApiKey): Promise<Result<void, RepositoryAbstraction.Error>> {\n        try {\n            // Check if an API key with the same slug already exists\n            const existingKeyResult = await this.getBySlug(apiKey.slug);\n\n            // If we found a key, it's a duplicate slug - return validation error\n            if (existingKeyResult.isOk()) {\n                return Result.fail(\n                    new ApiKeyValidationError(`API key with slug \"${apiKey.slug}\" already exists.`)\n                );\n            }\n\n            // \"NotFound\" error is ok. Everything else is not ok.\n            if (existingKeyResult.error.code !== \"ApiKey/NotFound\") {\n                return Result.fail(existingKeyResult.error);\n            }\n\n            // Slug is unique, proceed with creation\n            const tenant = this.tenantContext.getTenant();\n            await this.storageOperations.createApiKey({ apiKey: { ...apiKey, tenant: tenant.id } });\n            return Result.ok();\n        } catch (error) {\n            return Result.fail(new ApiKeyPersistenceError(error));\n        }\n    }\n\n    async update(apiKey: ApiKey): Promise<Result<void, RepositoryAbstraction.Error>> {\n        try {\n            const tenant = this.tenantContext.getTenant();\n            await this.storageOperations.updateApiKey({ apiKey: { ...apiKey, tenant: tenant.id } });\n\n            return Result.ok();\n        } catch (error) {\n            return Result.fail(new ApiKeyPersistenceError(error));\n        }\n    }\n\n    async delete(apiKey: ApiKey): Promise<Result<void, RepositoryAbstraction.Error>> {\n        try {\n            const tenant = this.tenantContext.getTenant();\n            await this.storageOperations.deleteApiKey({ apiKey: { ...apiKey, tenant: tenant.id } });\n\n            return Result.ok();\n        } catch (error) {\n            return Result.fail(new ApiKeyPersistenceError(error));\n        }\n    }\n}\n\nexport const ApiKeysRepository = createImplementation({\n    abstraction: RepositoryAbstraction,\n    implementation: ApiKeysRepositoryImpl,\n    dependencies: [TenantContext, SecurityStorageOperations, ApiKeyProvider]\n});\n"],"mappings":"AAAA,SAASA,oBAAoB,QAAQ,qBAAqB;AAC1D,SAASC,MAAM,QAAQ,qBAAqB;AAC5C,SAASC,iBAAiB,IAAIC,qBAAqB;AACnD,SAASC,cAAc;AAEvB,SAASC,yBAAyB;AAClC,SAASC,aAAa;AACtB,SAASC,mBAAmB,EAAEC,sBAAsB,EAAEC,qBAAqB;;AAE3E;;AAEA,MAAMC,qBAAqB,CAA4C;EACnEC,WAAWA,CACCC,aAAsC,EACtCC,iBAAsD,EACtDC,cAAwC,EAClD;IAAA,KAHUF,aAAsC,GAAtCA,aAAsC;IAAA,KACtCC,iBAAsD,GAAtDA,iBAAsD;IAAA,KACtDC,cAAwC,GAAxCA,cAAwC;EACjD;EAEH,MAAMC,GAAGA,CAACC,EAAU,EAAwD;IACxE,IAAI;MACA,MAAMC,MAAM,GAAG,IAAI,CAACL,aAAa,CAACM,SAAS,CAAC,CAAC;MAC7C,MAAMC,MAAM,GAAG,MAAM,IAAI,CAACN,iBAAiB,CAACO,SAAS,CAAC;QAAEJ,EAAE;QAAEC,MAAM,EAAEA,MAAM,CAACD;MAAG,CAAC,CAAC;MAChF,IAAIG,MAAM,EAAE;QACR,OAAOlB,MAAM,CAACoB,EAAE,CAACF,MAAM,CAAC;MAC5B;MAEA,OAAOlB,MAAM,CAACqB,IAAI,CAAC,IAAIf,mBAAmB,CAAC,CAAC,CAAC;IACjD,CAAC,CAAC,OAAOgB,KAAK,EAAE;MACZ,OAAOtB,MAAM,CAACqB,IAAI,CAACC,KAAK,CAAC;IAC7B;EACJ;EAEA,MAAMC,UAAUA,CAACC,KAAa,EAAwD;IAClF,IAAI;MACA;MACA,MAAMR,MAAM,GAAG,IAAI,CAACL,aAAa,CAACM,SAAS,CAAC,CAAC;MAC7C,MAAMC,MAAM,GAAG,MAAM,IAAI,CAACN,iBAAiB,CAACa,gBAAgB,CAAC;QACzDD,KAAK;QACLR,MAAM,EAAEA,MAAM,CAACD;MACnB,CAAC,CAAC;MAEF,IAAIG,MAAM,EAAE;QACR,OAAOlB,MAAM,CAACoB,EAAE,CAACF,MAAM,CAAC;MAC5B;;MAEA;MACA,MAAMQ,aAAa,GAAG,MAAM,IAAI,CAACb,cAAc,CAACU,UAAU,CAACC,KAAK,CAAC;MACjE,IAAIE,aAAa,EAAE;QACf,OAAO1B,MAAM,CAACoB,EAAE,CAACM,aAAa,CAAC;MACnC;MAEA,OAAO1B,MAAM,CAACqB,IAAI,CAAC,IAAIf,mBAAmB,CAAC,CAAC,CAAC;IACjD,CAAC,CAAC,OAAOgB,KAAK,EAAE;MACZ,OAAOtB,MAAM,CAACqB,IAAI,CAAC,IAAId,sBAAsB,CAACe,KAAK,CAAC,CAAC;IACzD;EACJ;EAEA,MAAMK,SAASA,CAACC,IAAY,EAAwD;IAChF,IAAI;MACA;MACA,MAAMZ,MAAM,GAAG,IAAI,CAACL,aAAa,CAACM,SAAS,CAAC,CAAC;MAC7C,MAAMC,MAAM,GAAG,MAAM,IAAI,CAACN,iBAAiB,CAACiB,eAAe,CAAC;QACxDD,IAAI;QACJZ,MAAM,EAAEA,MAAM,CAACD;MACnB,CAAC,CAAC;MAEF,IAAIG,MAAM,EAAE;QACR,OAAOlB,MAAM,CAACoB,EAAE,CAACF,MAAM,CAAC;MAC5B;;MAEA;MACA,MAAMQ,aAAa,GAAG,MAAM,IAAI,CAACb,cAAc,CAACc,SAAS,CAACC,IAAI,CAAC;MAC/D,IAAIF,aAAa,EAAE;QACf,OAAO1B,MAAM,CAACoB,EAAE,CAACM,aAAa,CAAC;MACnC;MAEA,OAAO1B,MAAM,CAACqB,IAAI,CAAC,IAAIf,mBAAmB,CAAC,CAAC,CAAC;IACjD,CAAC,CAAC,OAAOgB,KAAK,EAAE;MACZ,OAAOtB,MAAM,CAACqB,IAAI,CAAC,IAAId,sBAAsB,CAACe,KAAK,CAAC,CAAC;IACzD;EACJ;EAEA,MAAMQ,IAAIA,CAACC,MAAwB,EAA0D;IACzF,IAAI;MACA,MAAMf,MAAM,GAAG,IAAI,CAACL,aAAa,CAACM,SAAS,CAAC,CAAC;MAC7C,MAAMe,MAAM,GAAG,MAAM,IAAI,CAACpB,iBAAiB,CAACqB,WAAW,CAAC;QACpDC,KAAK,EAAE;UAAElB,MAAM,EAAEA,MAAM,CAACD;QAAG,CAAC;QAC5B,GAAGgB;MACP,CAAC,CAAC;MACF,OAAO/B,MAAM,CAACoB,EAAE,CAACY,MAAM,CAAC;IAC5B,CAAC,CAAC,OAAOV,KAAK,EAAE;MACZ,OAAOtB,MAAM,CAACqB,IAAI,CAAC,IAAId,sBAAsB,CAACe,KAAK,CAAC,CAAC;IACzD;EACJ;EAEA,MAAMa,MAAMA,CAACjB,MAAc,EAAsD;IAC7E,IAAI;MACA;MACA,MAAMkB,iBAAiB,GAAG,MAAM,IAAI,CAACT,SAAS,CAACT,MAAM,CAACU,IAAI,CAAC;;MAE3D;MACA,IAAIQ,iBAAiB,CAACC,IAAI,CAAC,CAAC,EAAE;QAC1B,OAAOrC,MAAM,CAACqB,IAAI,CACd,IAAIb,qBAAqB,CAAC,sBAAsBU,MAAM,CAACU,IAAI,mBAAmB,CAClF,CAAC;MACL;;MAEA;MACA,IAAIQ,iBAAiB,CAACd,KAAK,CAACgB,IAAI,KAAK,iBAAiB,EAAE;QACpD,OAAOtC,MAAM,CAACqB,IAAI,CAACe,iBAAiB,CAACd,KAAK,CAAC;MAC/C;;MAEA;MACA,MAAMN,MAAM,GAAG,IAAI,CAACL,aAAa,CAACM,SAAS,CAAC,CAAC;MAC7C,MAAM,IAAI,CAACL,iBAAiB,CAAC2B,YAAY,CAAC;QAAErB,MAAM,EAAE;UAAE,GAAGA,MAAM;UAAEF,MAAM,EAAEA,MAAM,CAACD;QAAG;MAAE,CAAC,CAAC;MACvF,OAAOf,MAAM,CAACoB,EAAE,CAAC,CAAC;IACtB,CAAC,CAAC,OAAOE,KAAK,EAAE;MACZ,OAAOtB,MAAM,CAACqB,IAAI,CAAC,IAAId,sBAAsB,CAACe,KAAK,CAAC,CAAC;IACzD;EACJ;EAEA,MAAMkB,MAAMA,CAACtB,MAAc,EAAsD;IAC7E,IAAI;MACA,MAAMF,MAAM,GAAG,IAAI,CAACL,aAAa,CAACM,SAAS,CAAC,CAAC;MAC7C,MAAM,IAAI,CAACL,iBAAiB,CAAC6B,YAAY,CAAC;QAAEvB,MAAM,EAAE;UAAE,GAAGA,MAAM;UAAEF,MAAM,EAAEA,MAAM,CAACD;QAAG;MAAE,CAAC,CAAC;MAEvF,OAAOf,MAAM,CAACoB,EAAE,CAAC,CAAC;IACtB,CAAC,CAAC,OAAOE,KAAK,EAAE;MACZ,OAAOtB,MAAM,CAACqB,IAAI,CAAC,IAAId,sBAAsB,CAACe,KAAK,CAAC,CAAC;IACzD;EACJ;EAEA,MAAMoB,MAAMA,CAACxB,MAAc,EAAsD;IAC7E,IAAI;MACA,MAAMF,MAAM,GAAG,IAAI,CAACL,aAAa,CAACM,SAAS,CAAC,CAAC;MAC7C,MAAM,IAAI,CAACL,iBAAiB,CAAC+B,YAAY,CAAC;QAAEzB,MAAM,EAAE;UAAE,GAAGA,MAAM;UAAEF,MAAM,EAAEA,MAAM,CAACD;QAAG;MAAE,CAAC,CAAC;MAEvF,OAAOf,MAAM,CAACoB,EAAE,CAAC,CAAC;IACtB,CAAC,CAAC,OAAOE,KAAK,EAAE;MACZ,OAAOtB,MAAM,CAACqB,IAAI,CAAC,IAAId,sBAAsB,CAACe,KAAK,CAAC,CAAC;IACzD;EACJ;AACJ;AAEA,OAAO,MAAMrB,iBAAiB,GAAGF,oBAAoB,CAAC;EAClD6C,WAAW,EAAE1C,qBAAqB;EAClC2C,cAAc,EAAEpC,qBAAqB;EACrCqC,YAAY,EAAE,CAACzC,aAAa,EAAED,yBAAyB,EAAED,cAAc;AAC3E,CAAC,CAAC","ignoreList":[]}

package/features/security/apiKeys/shared/abstractions.d.ts

@@ -0,0 +1,42 @@
+import { Result } from "@webiny/feature/api";
+import type { ApiKey, ListApiKeysInput } from "./types.js";
+import { type ApiKeyNotFoundError, ApiKeyPersistenceError, ApiKeyValidationError } from "./errors.js";
+export interface IApiKeysRepositoryErrors {
+    base: ApiKeyNotFoundError | ApiKeyPersistenceError | ApiKeyValidationError;
+}
+type RepositoryError = IApiKeysRepositoryErrors[keyof IApiKeysRepositoryErrors];
+export interface IApiKeysRepository {
+    get(id: string): Promise<Result<ApiKey, RepositoryError>>;
+    getByToken(token: string): Promise<Result<ApiKey, RepositoryError>>;
+    getBySlug(token: string): Promise<Result<ApiKey, RepositoryError>>;
+    list(params: ListApiKeysInput): Promise<Result<ApiKey[], RepositoryError>>;
+    create(data: ApiKey): Promise<Result<void, RepositoryError>>;
+    update(data: ApiKey): Promise<Result<void, RepositoryError>>;
+    delete(apiKey: ApiKey): Promise<Result<void, RepositoryError>>;
+}
+export declare const ApiKeysRepository: import("@webiny/di").Abstraction<IApiKeysRepository>;
+export declare namespace ApiKeysRepository {
+    type Interface = IApiKeysRepository;
+    type Error = RepositoryError;
+}
+export type CodeApiKey = Pick<ApiKey, "name" | "permissions" | "slug"> & {
+    token: `wat_${string}`;
+};
+export interface IApiKeyFactory {
+    execute(): Promise<CodeApiKey[]> | CodeApiKey[];
+}
+export declare const ApiKeyFactory: import("@webiny/di").Abstraction<IApiKeyFactory>;
+export declare namespace ApiKeyFactory {
+    type Interface = IApiKeyFactory;
+    type Return = Promise<CodeApiKey[]> | CodeApiKey[];
+    type ApiKey = CodeApiKey;
+}
+export interface IApiKeyProvider {
+    getByToken(token: string): Promise<ApiKey | null>;
+    getBySlug(slug: string): Promise<ApiKey | null>;
+}
+export declare const ApiKeyProvider: import("@webiny/di").Abstraction<IApiKeyProvider>;
+export declare namespace ApiKeyProvider {
+    type Interface = IApiKeyProvider;
+}
+export {};

package/features/security/apiKeys/shared/abstractions.js

@@ -0,0 +1,6 @@
+import { createAbstraction } from "@webiny/feature/api";
+export const ApiKeysRepository = createAbstraction("ApiKeysRepository");
+export const ApiKeyFactory = createAbstraction("ApiKeyFactory");
+export const ApiKeyProvider = createAbstraction("ApiKeyProvider");
+
+//# sourceMappingURL=abstractions.js.map

package/features/security/apiKeys/shared/abstractions.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["createAbstraction","ApiKeysRepository","ApiKeyFactory","ApiKeyProvider"],"sources":["abstractions.ts"],"sourcesContent":["import { createAbstraction } from \"@webiny/feature/api\";\nimport { Result } from \"@webiny/feature/api\";\nimport type { ApiKey, ListApiKeysInput } from \"./types.js\";\nimport {\n    type ApiKeyNotFoundError,\n    ApiKeyPersistenceError,\n    ApiKeyValidationError\n} from \"./errors.js\";\n\nexport interface IApiKeysRepositoryErrors {\n    base: ApiKeyNotFoundError | ApiKeyPersistenceError | ApiKeyValidationError;\n}\n\ntype RepositoryError = IApiKeysRepositoryErrors[keyof IApiKeysRepositoryErrors];\n\nexport interface IApiKeysRepository {\n    get(id: string): Promise<Result<ApiKey, RepositoryError>>;\n    getByToken(token: string): Promise<Result<ApiKey, RepositoryError>>;\n    getBySlug(token: string): Promise<Result<ApiKey, RepositoryError>>;\n    list(params: ListApiKeysInput): Promise<Result<ApiKey[], RepositoryError>>;\n    create(data: ApiKey): Promise<Result<void, RepositoryError>>;\n    update(data: ApiKey): Promise<Result<void, RepositoryError>>;\n    delete(apiKey: ApiKey): Promise<Result<void, RepositoryError>>;\n}\n\nexport const ApiKeysRepository = createAbstraction<IApiKeysRepository>(\"ApiKeysRepository\");\n\nexport namespace ApiKeysRepository {\n    export type Interface = IApiKeysRepository;\n    export type Error = RepositoryError;\n}\n\nexport type CodeApiKey = Pick<ApiKey, \"name\" | \"permissions\" | \"slug\"> & {\n    token: `wat_${string}`;\n};\n\nexport interface IApiKeyFactory {\n    execute(): Promise<CodeApiKey[]> | CodeApiKey[];\n}\n\nexport const ApiKeyFactory = createAbstraction<IApiKeyFactory>(\"ApiKeyFactory\");\n\nexport namespace ApiKeyFactory {\n    export type Interface = IApiKeyFactory;\n    export type Return = Promise<CodeApiKey[]> | CodeApiKey[];\n    export type ApiKey = CodeApiKey;\n}\n\nexport interface IApiKeyProvider {\n    getByToken(token: string): Promise<ApiKey | null>;\n    getBySlug(slug: string): Promise<ApiKey | null>;\n}\n\nexport const ApiKeyProvider = createAbstraction<IApiKeyProvider>(\"ApiKeyProvider\");\n\nexport namespace ApiKeyProvider {\n    export type Interface = IApiKeyProvider;\n}\n"],"mappings":"AAAA,SAASA,iBAAiB,QAAQ,qBAAqB;AAyBvD,OAAO,MAAMC,iBAAiB,GAAGD,iBAAiB,CAAqB,mBAAmB,CAAC;AAe3F,OAAO,MAAME,aAAa,GAAGF,iBAAiB,CAAiB,eAAe,CAAC;AAa/E,OAAO,MAAMG,cAAc,GAAGH,iBAAiB,CAAkB,gBAAgB,CAAC","ignoreList":[]}

package/features/security/apiKeys/shared/errors.d.ts

@@ -0,0 +1,24 @@
+import { BaseError } from "@webiny/feature/api";
+export declare class ApiKeyPersistenceError extends BaseError {
+    readonly code: "ApiKey/Persistence";
+    constructor(error: Error);
+}
+export declare class ApiKeyNotFoundError extends BaseError {
+    readonly code: "ApiKey/NotFound";
+    constructor();
+}
+type NotAuthorizedErrorData = {
+    message?: string;
+};
+export declare class ApiKeyNotAuthorizedError extends BaseError<NotAuthorizedErrorData> {
+    readonly code: "ApiKey/NotAuthorized";
+    constructor(data?: NotAuthorizedErrorData);
+}
+type ApiKeyValidationErrorData = {
+    message: string;
+};
+export declare class ApiKeyValidationError extends BaseError<ApiKeyValidationErrorData> {
+    readonly code: "ApiKey/Validation";
+    constructor(message: string);
+}
+export {};

package/features/security/apiKeys/shared/errors.js

@@ -0,0 +1,39 @@
+import { BaseError } from "@webiny/feature/api";
+export class ApiKeyPersistenceError extends BaseError {
+  code = "ApiKey/Persistence";
+  constructor(error) {
+    super({
+      message: error.message
+    });
+  }
+}
+export class ApiKeyNotFoundError extends BaseError {
+  code = "ApiKey/NotFound";
+  constructor() {
+    super({
+      message: `API key was not found!`
+    });
+  }
+}
+export class ApiKeyNotAuthorizedError extends BaseError {
+  code = "ApiKey/NotAuthorized";
+  constructor(data = {}) {
+    super({
+      message: data.message || "Not authorized!",
+      data
+    });
+  }
+}
+export class ApiKeyValidationError extends BaseError {
+  code = "ApiKey/Validation";
+  constructor(message) {
+    super({
+      message,
+      data: {
+        message
+      }
+    });
+  }
+}
+
+//# sourceMappingURL=errors.js.map

package/features/security/apiKeys/shared/errors.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["BaseError","ApiKeyPersistenceError","code","constructor","error","message","ApiKeyNotFoundError","ApiKeyNotAuthorizedError","data","ApiKeyValidationError"],"sources":["errors.ts"],"sourcesContent":["import { BaseError } from \"@webiny/feature/api\";\n\nexport class ApiKeyPersistenceError extends BaseError {\n    override readonly code = \"ApiKey/Persistence\" as const;\n\n    constructor(error: Error) {\n        super({\n            message: error.message\n        });\n    }\n}\n\nexport class ApiKeyNotFoundError extends BaseError {\n    override readonly code = \"ApiKey/NotFound\" as const;\n\n    constructor() {\n        super({\n            message: `API key was not found!`\n        });\n    }\n}\n\ntype NotAuthorizedErrorData = {\n    message?: string;\n};\n\nexport class ApiKeyNotAuthorizedError extends BaseError<NotAuthorizedErrorData> {\n    override readonly code = \"ApiKey/NotAuthorized\" as const;\n\n    constructor(data: NotAuthorizedErrorData = {}) {\n        super({\n            message: data.message || \"Not authorized!\",\n            data\n        });\n    }\n}\n\ntype ApiKeyValidationErrorData = {\n    message: string;\n};\n\nexport class ApiKeyValidationError extends BaseError<ApiKeyValidationErrorData> {\n    override readonly code = \"ApiKey/Validation\" as const;\n\n    constructor(message: string) {\n        super({\n            message,\n            data: { message }\n        });\n    }\n}\n"],"mappings":"AAAA,SAASA,SAAS,QAAQ,qBAAqB;AAE/C,OAAO,MAAMC,sBAAsB,SAASD,SAAS,CAAC;EAChCE,IAAI,GAAG,oBAAoB;EAE7CC,WAAWA,CAACC,KAAY,EAAE;IACtB,KAAK,CAAC;MACFC,OAAO,EAAED,KAAK,CAACC;IACnB,CAAC,CAAC;EACN;AACJ;AAEA,OAAO,MAAMC,mBAAmB,SAASN,SAAS,CAAC;EAC7BE,IAAI,GAAG,iBAAiB;EAE1CC,WAAWA,CAAA,EAAG;IACV,KAAK,CAAC;MACFE,OAAO,EAAE;IACb,CAAC,CAAC;EACN;AACJ;AAMA,OAAO,MAAME,wBAAwB,SAASP,SAAS,CAAyB;EAC1DE,IAAI,GAAG,sBAAsB;EAE/CC,WAAWA,CAACK,IAA4B,GAAG,CAAC,CAAC,EAAE;IAC3C,KAAK,CAAC;MACFH,OAAO,EAAEG,IAAI,CAACH,OAAO,IAAI,iBAAiB;MAC1CG;IACJ,CAAC,CAAC;EACN;AACJ;AAMA,OAAO,MAAMC,qBAAqB,SAAST,SAAS,CAA4B;EAC1DE,IAAI,GAAG,mBAAmB;EAE5CC,WAAWA,CAACE,OAAe,EAAE;IACzB,KAAK,CAAC;MACFA,OAAO;MACPG,IAAI,EAAE;QAAEH;MAAQ;IACpB,CAAC,CAAC;EACN;AACJ","ignoreList":[]}

package/features/security/apiKeys/shared/generateToken.d.ts

@@ -0,0 +1,7 @@
+/**
+ * Generates a random token for API keys.
+ * API Keys are prefixed with letter "wat_" to make token verification easier.
+ * When authentication plugins kick in, they will be able to tell if they should handle
+ * the token by checking the first letter.
+ */
+export declare const generateToken: (tokenLength?: number) => string;

package/features/security/apiKeys/shared/generateToken.js

@@ -0,0 +1,19 @@
+import crypto from "crypto";
+
+/**
+ * Generates a random token for API keys.
+ * API Keys are prefixed with letter "wat_" to make token verification easier.
+ * When authentication plugins kick in, they will be able to tell if they should handle
+ * the token by checking the first letter.
+ */
+export const generateToken = (tokenLength = 40) => {
+  const token = crypto.randomBytes(Math.ceil(tokenLength / 2)).toString("hex");
+
+  // API Keys are prefixed with letters "wat_" to make token verification easier
+  if (token.startsWith("wat_")) {
+    return token;
+  }
+  return `wat_${token.slice(0, tokenLength - 4)}`;
+};
+
+//# sourceMappingURL=generateToken.js.map

package/features/security/apiKeys/shared/generateToken.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["crypto","generateToken","tokenLength","token","randomBytes","Math","ceil","toString","startsWith","slice"],"sources":["generateToken.ts"],"sourcesContent":["import crypto from \"crypto\";\n\n/**\n * Generates a random token for API keys.\n * API Keys are prefixed with letter \"wat_\" to make token verification easier.\n * When authentication plugins kick in, they will be able to tell if they should handle\n * the token by checking the first letter.\n */\nexport const generateToken = (tokenLength = 40): string => {\n    const token = crypto.randomBytes(Math.ceil(tokenLength / 2)).toString(\"hex\");\n\n    // API Keys are prefixed with letters \"wat_\" to make token verification easier\n    if (token.startsWith(\"wat_\")) {\n        return token;\n    }\n\n    return `wat_${token.slice(0, tokenLength - 4)}`;\n};\n"],"mappings":"AAAA,OAAOA,MAAM,MAAM,QAAQ;;AAE3B;AACA;AACA;AACA;AACA;AACA;AACA,OAAO,MAAMC,aAAa,GAAGA,CAACC,WAAW,GAAG,EAAE,KAAa;EACvD,MAAMC,KAAK,GAAGH,MAAM,CAACI,WAAW,CAACC,IAAI,CAACC,IAAI,CAACJ,WAAW,GAAG,CAAC,CAAC,CAAC,CAACK,QAAQ,CAAC,KAAK,CAAC;;EAE5E;EACA,IAAIJ,KAAK,CAACK,UAAU,CAAC,MAAM,CAAC,EAAE;IAC1B,OAAOL,KAAK;EAChB;EAEA,OAAO,OAAOA,KAAK,CAACM,KAAK,CAAC,CAAC,EAAEP,WAAW,GAAG,CAAC,CAAC,EAAE;AACnD,CAAC","ignoreList":[]}

package/features/security/apiKeys/shared/schemas.d.ts

@@ -0,0 +1,91 @@
+import { z } from "zod";
+export declare const createApiKeyInputSchema: z.ZodObject<{
+    name: z.ZodString;
+    slug: z.ZodString;
+    description: z.ZodString;
+    permissions: z.ZodDefault<z.ZodOptional<z.ZodArray<z.ZodObject<{
+        name: z.ZodString;
+    }, "passthrough", z.ZodTypeAny, z.objectOutputType<{
+        name: z.ZodString;
+    }, z.ZodTypeAny, "passthrough">, z.objectInputType<{
+        name: z.ZodString;
+    }, z.ZodTypeAny, "passthrough">>, "many">>>;
+}, "strip", z.ZodTypeAny, {
+    permissions: z.objectOutputType<{
+        name: z.ZodString;
+    }, z.ZodTypeAny, "passthrough">[];
+    name: string;
+    description: string;
+    slug: string;
+}, {
+    name: string;
+    description: string;
+    slug: string;
+    permissions?: z.objectInputType<{
+        name: z.ZodString;
+    }, z.ZodTypeAny, "passthrough">[] | undefined;
+}>;
+export declare const updateApiKeyInputSchema: z.ZodObject<{
+    name: z.ZodOptional<z.ZodString>;
+    description: z.ZodOptional<z.ZodString>;
+    permissions: z.ZodDefault<z.ZodOptional<z.ZodArray<z.ZodObject<{
+        name: z.ZodString;
+    }, "passthrough", z.ZodTypeAny, z.objectOutputType<{
+        name: z.ZodString;
+    }, z.ZodTypeAny, "passthrough">, z.objectInputType<{
+        name: z.ZodString;
+    }, z.ZodTypeAny, "passthrough">>, "many">>>;
+}, "strip", z.ZodTypeAny, {
+    permissions: z.objectOutputType<{
+        name: z.ZodString;
+    }, z.ZodTypeAny, "passthrough">[];
+    name?: string | undefined;
+    description?: string | undefined;
+}, {
+    permissions?: z.objectInputType<{
+        name: z.ZodString;
+    }, z.ZodTypeAny, "passthrough">[] | undefined;
+    name?: string | undefined;
+    description?: string | undefined;
+}>;
+export declare const listApiKeysInputSchema: z.ZodObject<{
+    where: z.ZodOptional<z.ZodObject<{
+        name: z.ZodOptional<z.ZodString>;
+        name_contains: z.ZodOptional<z.ZodString>;
+        description: z.ZodOptional<z.ZodString>;
+        description_contains: z.ZodOptional<z.ZodString>;
+    }, "strip", z.ZodTypeAny, {
+        name?: string | undefined;
+        description?: string | undefined;
+        name_contains?: string | undefined;
+        description_contains?: string | undefined;
+    }, {
+        name?: string | undefined;
+        description?: string | undefined;
+        name_contains?: string | undefined;
+        description_contains?: string | undefined;
+    }>>;
+    limit: z.ZodOptional<z.ZodNumber>;
+    after: z.ZodOptional<z.ZodString>;
+    sort: z.ZodOptional<z.ZodArray<z.ZodEnum<["createdOn_ASC", "createdOn_DESC"]>, "many">>;
+}, "strip", z.ZodTypeAny, {
+    sort?: ("createdOn_ASC" | "createdOn_DESC")[] | undefined;
+    where?: {
+        name?: string | undefined;
+        description?: string | undefined;
+        name_contains?: string | undefined;
+        description_contains?: string | undefined;
+    } | undefined;
+    limit?: number | undefined;
+    after?: string | undefined;
+}, {
+    sort?: ("createdOn_ASC" | "createdOn_DESC")[] | undefined;
+    where?: {
+        name?: string | undefined;
+        description?: string | undefined;
+        name_contains?: string | undefined;
+        description_contains?: string | undefined;
+    } | undefined;
+    limit?: number | undefined;
+    after?: string | undefined;
+}>;

package/features/security/apiKeys/shared/schemas.js

@@ -0,0 +1,29 @@
+import { z } from "zod";
+export const createApiKeyInputSchema = z.object({
+  name: z.string().min(1),
+  slug: z.string().min(1),
+  description: z.string(),
+  permissions: z.array(z.object({
+    name: z.string()
+  }).passthrough()).optional().default([])
+});
+export const updateApiKeyInputSchema = z.object({
+  name: z.string().min(1).optional(),
+  description: z.string().optional(),
+  permissions: z.array(z.object({
+    name: z.string()
+  }).passthrough()).optional().default([])
+});
+export const listApiKeysInputSchema = z.object({
+  where: z.object({
+    name: z.string().optional(),
+    name_contains: z.string().optional(),
+    description: z.string().optional(),
+    description_contains: z.string().optional()
+  }).optional(),
+  limit: z.number().int().positive().max(100).optional(),
+  after: z.string().optional(),
+  sort: z.array(z.enum(["createdOn_ASC", "createdOn_DESC"])).optional()
+});
+
+//# sourceMappingURL=schemas.js.map

package/features/security/apiKeys/shared/schemas.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["z","createApiKeyInputSchema","object","name","string","min","slug","description","permissions","array","passthrough","optional","default","updateApiKeyInputSchema","listApiKeysInputSchema","where","name_contains","description_contains","limit","number","int","positive","max","after","sort","enum"],"sources":["schemas.ts"],"sourcesContent":["import { z } from \"zod\";\n\nexport const createApiKeyInputSchema = z.object({\n    name: z.string().min(1),\n    slug: z.string().min(1),\n    description: z.string(),\n    permissions: z\n        .array(z.object({ name: z.string() }).passthrough())\n        .optional()\n        .default([])\n});\n\nexport const updateApiKeyInputSchema = z.object({\n    name: z.string().min(1).optional(),\n    description: z.string().optional(),\n    permissions: z\n        .array(z.object({ name: z.string() }).passthrough())\n        .optional()\n        .default([])\n});\n\nexport const listApiKeysInputSchema = z.object({\n    where: z\n        .object({\n            name: z.string().optional(),\n            name_contains: z.string().optional(),\n            description: z.string().optional(),\n            description_contains: z.string().optional()\n        })\n        .optional(),\n    limit: z.number().int().positive().max(100).optional(),\n    after: z.string().optional(),\n    sort: z.array(z.enum([\"createdOn_ASC\", \"createdOn_DESC\"])).optional()\n});\n"],"mappings":"AAAA,SAASA,CAAC,QAAQ,KAAK;AAEvB,OAAO,MAAMC,uBAAuB,GAAGD,CAAC,CAACE,MAAM,CAAC;EAC5CC,IAAI,EAAEH,CAAC,CAACI,MAAM,CAAC,CAAC,CAACC,GAAG,CAAC,CAAC,CAAC;EACvBC,IAAI,EAAEN,CAAC,CAACI,MAAM,CAAC,CAAC,CAACC,GAAG,CAAC,CAAC,CAAC;EACvBE,WAAW,EAAEP,CAAC,CAACI,MAAM,CAAC,CAAC;EACvBI,WAAW,EAAER,CAAC,CACTS,KAAK,CAACT,CAAC,CAACE,MAAM,CAAC;IAAEC,IAAI,EAAEH,CAAC,CAACI,MAAM,CAAC;EAAE,CAAC,CAAC,CAACM,WAAW,CAAC,CAAC,CAAC,CACnDC,QAAQ,CAAC,CAAC,CACVC,OAAO,CAAC,EAAE;AACnB,CAAC,CAAC;AAEF,OAAO,MAAMC,uBAAuB,GAAGb,CAAC,CAACE,MAAM,CAAC;EAC5CC,IAAI,EAAEH,CAAC,CAACI,MAAM,CAAC,CAAC,CAACC,GAAG,CAAC,CAAC,CAAC,CAACM,QAAQ,CAAC,CAAC;EAClCJ,WAAW,EAAEP,CAAC,CAACI,MAAM,CAAC,CAAC,CAACO,QAAQ,CAAC,CAAC;EAClCH,WAAW,EAAER,CAAC,CACTS,KAAK,CAACT,CAAC,CAACE,MAAM,CAAC;IAAEC,IAAI,EAAEH,CAAC,CAACI,MAAM,CAAC;EAAE,CAAC,CAAC,CAACM,WAAW,CAAC,CAAC,CAAC,CACnDC,QAAQ,CAAC,CAAC,CACVC,OAAO,CAAC,EAAE;AACnB,CAAC,CAAC;AAEF,OAAO,MAAME,sBAAsB,GAAGd,CAAC,CAACE,MAAM,CAAC;EAC3Ca,KAAK,EAAEf,CAAC,CACHE,MAAM,CAAC;IACJC,IAAI,EAAEH,CAAC,CAACI,MAAM,CAAC,CAAC,CAACO,QAAQ,CAAC,CAAC;IAC3BK,aAAa,EAAEhB,CAAC,CAACI,MAAM,CAAC,CAAC,CAACO,QAAQ,CAAC,CAAC;IACpCJ,WAAW,EAAEP,CAAC,CAACI,MAAM,CAAC,CAAC,CAACO,QAAQ,CAAC,CAAC;IAClCM,oBAAoB,EAAEjB,CAAC,CAACI,MAAM,CAAC,CAAC,CAACO,QAAQ,CAAC;EAC9C,CAAC,CAAC,CACDA,QAAQ,CAAC,CAAC;EACfO,KAAK,EAAElB,CAAC,CAACmB,MAAM,CAAC,CAAC,CAACC,GAAG,CAAC,CAAC,CAACC,QAAQ,CAAC,CAAC,CAACC,GAAG,CAAC,GAAG,CAAC,CAACX,QAAQ,CAAC,CAAC;EACtDY,KAAK,EAAEvB,CAAC,CAACI,MAAM,CAAC,CAAC,CAACO,QAAQ,CAAC,CAAC;EAC5Ba,IAAI,EAAExB,CAAC,CAACS,KAAK,CAACT,CAAC,CAACyB,IAAI,CAAC,CAAC,eAAe,EAAE,gBAAgB,CAAC,CAAC,CAAC,CAACd,QAAQ,CAAC;AACxE,CAAC,CAAC","ignoreList":[]}

package/features/security/apiKeys/shared/types.d.ts

@@ -0,0 +1,25 @@
+import type { CreatedBy, SecurityPermission } from "../../../../types/security.js";
+export interface ApiKey {
+    id: string;
+    name: string;
+    slug: string;
+    description: string;
+    token: string;
+    permissions: SecurityPermission[];
+    createdBy: CreatedBy;
+    createdOn: string;
+}
+export interface CreateApiKeyInput {
+    name: string;
+    slug: string;
+    description: string;
+    permissions: SecurityPermission[];
+}
+export interface UpdateApiKeyInput {
+    name?: string;
+    description?: string;
+    permissions?: SecurityPermission[];
+}
+export interface ListApiKeysInput {
+    sort?: string[];
+}

package/features/security/apiKeys/shared/types.js

@@ -0,0 +1,3 @@
+export {};
+
+//# sourceMappingURL=types.js.map

package/features/security/apiKeys/shared/types.js.map

@@ -0,0 +1 @@
+{"version":3,"names":[],"sources":["types.ts"],"sourcesContent":["import type { CreatedBy, SecurityPermission } from \"~/types/security.js\";\n\nexport interface ApiKey {\n    id: string;\n    name: string;\n    slug: string;\n    description: string;\n    token: string;\n    permissions: SecurityPermission[];\n    createdBy: CreatedBy;\n    createdOn: string;\n}\n\nexport interface CreateApiKeyInput {\n    name: string;\n    slug: string;\n    description: string;\n    permissions: SecurityPermission[];\n}\n\nexport interface UpdateApiKeyInput {\n    name?: string;\n    description?: string;\n    permissions?: SecurityPermission[];\n}\n\nexport interface ListApiKeysInput {\n    sort?: string[];\n}\n"],"mappings":"","ignoreList":[]}

package/features/security/authentication/AuthenticationContext/AuthenticationContext.d.ts

@@ -0,0 +1,15 @@
+import { EventPublisher } from "../../../../features/eventPublisher/index.js";
+import { AuthenticationContext as Abstraction } from "./abstractions.js";
+import { Authenticator } from "../Authenticator/index.js";
+import type { Identity } from "../../../../features/security/IdentityContext/Identity.js";
+declare class AuthenticationContextImpl implements Abstraction.Interface {
+    private authenticators;
+    private eventPublisher;
+    private authToken?;
+    constructor(authenticators: Authenticator.Interface[], eventPublisher: EventPublisher.Interface);
+    authenticate(token: string): Promise<Identity>;
+    getAuthToken(): string | undefined;
+    private processAuthenticators;
+}
+export declare const AuthenticationContext: import("@webiny/di").Implementation<typeof AuthenticationContextImpl>;
+export {};

package/features/security/authentication/AuthenticationContext/AuthenticationContext.js

@@ -0,0 +1,51 @@
+import { createImplementation } from "@webiny/di";
+import { EventPublisher } from "../../../eventPublisher/index.js";
+import { AuthenticationContext as Abstraction } from "./abstractions.js";
+import { Authenticator } from "../Authenticator/index.js";
+import { BeforeAuthenticationEvent, AfterAuthenticationEvent } from "./events.js";
+import { AnonymousIdentity, AuthenticatedIdentity } from "../../IdentityContext/index.js";
+import { AuthenticationError } from "./errors.js";
+class AuthenticationContextImpl {
+  constructor(authenticators, eventPublisher) {
+    this.authenticators = authenticators;
+    this.eventPublisher = eventPublisher;
+  }
+  async authenticate(token) {
+    await this.eventPublisher.publish(new BeforeAuthenticationEvent({
+      token
+    }));
+    try {
+      return await this.processAuthenticators(token);
+    } catch (error) {
+      throw AuthenticationError.from(error);
+    }
+  }
+  getAuthToken() {
+    return this.authToken;
+  }
+  async processAuthenticators(token) {
+    // Try each authenticator until one succeeds
+    for (const authenticator of this.authenticators) {
+      const identityData = await authenticator.authenticate(token);
+      if (identityData) {
+        this.authToken = token;
+        const identity = new AuthenticatedIdentity(identityData);
+        await this.eventPublisher.publish(new AfterAuthenticationEvent({
+          identity,
+          token
+        }));
+        return identity;
+      }
+    }
+    return new AnonymousIdentity();
+  }
+}
+export const AuthenticationContext = createImplementation({
+  abstraction: Abstraction,
+  implementation: AuthenticationContextImpl,
+  dependencies: [[Authenticator, {
+    multiple: true
+  }], EventPublisher]
+});
+
+//# sourceMappingURL=AuthenticationContext.js.map

package/features/security/authentication/AuthenticationContext/AuthenticationContext.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["createImplementation","EventPublisher","AuthenticationContext","Abstraction","Authenticator","BeforeAuthenticationEvent","AfterAuthenticationEvent","AnonymousIdentity","AuthenticatedIdentity","AuthenticationError","AuthenticationContextImpl","constructor","authenticators","eventPublisher","authenticate","token","publish","processAuthenticators","error","from","getAuthToken","authToken","authenticator","identityData","identity","abstraction","implementation","dependencies","multiple"],"sources":["AuthenticationContext.ts"],"sourcesContent":["import { createImplementation } from \"@webiny/di\";\nimport { EventPublisher } from \"~/features/eventPublisher/index.js\";\nimport { AuthenticationContext as Abstraction } from \"./abstractions.js\";\nimport { Authenticator } from \"../Authenticator/index.js\";\nimport { BeforeAuthenticationEvent, AfterAuthenticationEvent } from \"./events.js\";\nimport type { Identity } from \"~/features/security/IdentityContext/Identity.js\";\nimport {\n    AnonymousIdentity,\n    AuthenticatedIdentity\n} from \"~/features/security/IdentityContext/index.js\";\nimport { AuthenticationError } from \"./errors.js\";\n\nclass AuthenticationContextImpl implements Abstraction.Interface {\n    private authToken?: string;\n\n    constructor(\n        private authenticators: Authenticator.Interface[],\n        private eventPublisher: EventPublisher.Interface\n    ) {}\n\n    async authenticate(token: string): Promise<Identity> {\n        await this.eventPublisher.publish(new BeforeAuthenticationEvent({ token }));\n\n        try {\n            return await this.processAuthenticators(token);\n        } catch (error) {\n            throw AuthenticationError.from(error);\n        }\n    }\n\n    getAuthToken(): string | undefined {\n        return this.authToken;\n    }\n\n    private async processAuthenticators(token: string): Promise<Identity> {\n        // Try each authenticator until one succeeds\n        for (const authenticator of this.authenticators) {\n            const identityData = await authenticator.authenticate(token);\n            if (identityData) {\n                this.authToken = token;\n\n                const identity = new AuthenticatedIdentity(identityData);\n\n                await this.eventPublisher.publish(\n                    new AfterAuthenticationEvent({ identity, token })\n                );\n\n                return identity;\n            }\n        }\n\n        return new AnonymousIdentity();\n    }\n}\n\nexport const AuthenticationContext = createImplementation({\n    abstraction: Abstraction,\n    implementation: AuthenticationContextImpl,\n    dependencies: [[Authenticator, { multiple: true }], EventPublisher]\n});\n"],"mappings":"AAAA,SAASA,oBAAoB,QAAQ,YAAY;AACjD,SAASC,cAAc;AACvB,SAASC,qBAAqB,IAAIC,WAAW;AAC7C,SAASC,aAAa;AACtB,SAASC,yBAAyB,EAAEC,wBAAwB;AAE5D,SACIC,iBAAiB,EACjBC,qBAAqB;AAEzB,SAASC,mBAAmB;AAE5B,MAAMC,yBAAyB,CAAkC;EAG7DC,WAAWA,CACCC,cAAyC,EACzCC,cAAwC,EAClD;IAAA,KAFUD,cAAyC,GAAzCA,cAAyC;IAAA,KACzCC,cAAwC,GAAxCA,cAAwC;EACjD;EAEH,MAAMC,YAAYA,CAACC,KAAa,EAAqB;IACjD,MAAM,IAAI,CAACF,cAAc,CAACG,OAAO,CAAC,IAAIX,yBAAyB,CAAC;MAAEU;IAAM,CAAC,CAAC,CAAC;IAE3E,IAAI;MACA,OAAO,MAAM,IAAI,CAACE,qBAAqB,CAACF,KAAK,CAAC;IAClD,CAAC,CAAC,OAAOG,KAAK,EAAE;MACZ,MAAMT,mBAAmB,CAACU,IAAI,CAACD,KAAK,CAAC;IACzC;EACJ;EAEAE,YAAYA,CAAA,EAAuB;IAC/B,OAAO,IAAI,CAACC,SAAS;EACzB;EAEA,MAAcJ,qBAAqBA,CAACF,KAAa,EAAqB;IAClE;IACA,KAAK,MAAMO,aAAa,IAAI,IAAI,CAACV,cAAc,EAAE;MAC7C,MAAMW,YAAY,GAAG,MAAMD,aAAa,CAACR,YAAY,CAACC,KAAK,CAAC;MAC5D,IAAIQ,YAAY,EAAE;QACd,IAAI,CAACF,SAAS,GAAGN,KAAK;QAEtB,MAAMS,QAAQ,GAAG,IAAIhB,qBAAqB,CAACe,YAAY,CAAC;QAExD,MAAM,IAAI,CAACV,cAAc,CAACG,OAAO,CAC7B,IAAIV,wBAAwB,CAAC;UAAEkB,QAAQ;UAAET;QAAM,CAAC,CACpD,CAAC;QAED,OAAOS,QAAQ;MACnB;IACJ;IAEA,OAAO,IAAIjB,iBAAiB,CAAC,CAAC;EAClC;AACJ;AAEA,OAAO,MAAML,qBAAqB,GAAGF,oBAAoB,CAAC;EACtDyB,WAAW,EAAEtB,WAAW;EACxBuB,cAAc,EAAEhB,yBAAyB;EACzCiB,YAAY,EAAE,CAAC,CAACvB,aAAa,EAAE;IAAEwB,QAAQ,EAAE;EAAK,CAAC,CAAC,EAAE3B,cAAc;AACtE,CAAC,CAAC","ignoreList":[]}

package/features/security/authentication/AuthenticationContext/SetIdTokenCookie.d.ts

@@ -0,0 +1,11 @@
+import { Reply } from "@webiny/handler";
+import { AfterAuthenticationHandler } from "../../../../features/security/authentication/AuthenticationContext/index.js";
+import { AuthenticationContext } from "../../../../features/security/authentication/AuthenticationContext/index.js";
+declare class SetIdTokenCookieImpl implements AfterAuthenticationHandler.Interface {
+    private authenticationContext;
+    private reply;
+    constructor(authenticationContext: AuthenticationContext.Interface, reply: Reply.Interface);
+    handle(): Promise<void>;
+}
+export declare const SetIdTokenCookie: import("@webiny/di").Implementation<typeof SetIdTokenCookieImpl>;
+export {};