@webiny/api-core 0.0.0-unstable.ac6ebf63c6 → 0.0.0-unstable.b6d7105cee

package/graphql/users/user.gql.js

@@ -3,10 +3,10 @@ import { GraphQLSchemaPlugin } from "@webiny/handler-graphql/plugins/GraphQLSche
 import { GetUserUseCase } from "../../features/users/GetUser/index.js";
 import NotAuthorizedResponse from "../security/NotAuthorizedResponse.js";
 import { ListUsersUseCase } from "../../features/users/ListUsers/index.js";
-const emptyResolver = () => ({});
-export const createUsersGraphQL = () => {
-  return [new GraphQLSchemaPlugin({
-    typeDefs: /* GraphQL */`
+const emptyResolver = ()=>({});
+const createUsersGraphQL = ()=>[
+        new GraphQLSchemaPlugin({
+            typeDefs: `
                 type AdminUsersQuery {
                     _empty: String
                 }
@@ -40,16 +40,17 @@ export const createUsersGraphQL = () => {
                     error: AdminUsersError
                 }
             `,
-    resolvers: {
-      Query: {
-        adminUsers: emptyResolver
-      },
-      Mutation: {
-        adminUsers: emptyResolver
-      }
-    }
-  }), new GraphQLSchemaPlugin({
-    typeDefs: /* GraphQL */`
+            resolvers: {
+                Query: {
+                    adminUsers: emptyResolver
+                },
+                Mutation: {
+                    adminUsers: emptyResolver
+                }
+            }
+        }),
+        new GraphQLSchemaPlugin({
+            typeDefs: `
                 type AdminUser {
                     id: ID!
                     displayName: String!
@@ -84,102 +85,83 @@ export const createUsersGraphQL = () => {
                     listUsers: AdminUsersListResponse
                 }
             `,
-    resolvers: {
-      AdminUser: {
-        roles(user, _, context) {
-          if (!user.roles) {
-            return null;
-          }
-          return context.security.listRoles({
-            where: {
-              id_in: user.roles
-            }
-          });
-        }
-      },
-      AdminUsersQuery: {
-        getUser: async (_, {
-          where
-        }, context) => {
-          const getUser = context.container.resolve(GetUserUseCase);
-          const userResult = await getUser.execute({
-            id: where.id,
-            email: where.email
-          });
-          if (userResult.isFail()) {
-            const error = userResult.error;
-            if (error.code === "AdminUser/NotFound") {
-              return new NotFoundResponse(`User "${JSON.stringify(where)}" was not found!`);
-            }
-            return new ErrorResponse({
-              message: error.message,
-              code: error.code,
-              data: error.data
-            });
-          }
-          return new Response(userResult.value);
-        },
-        getCurrentUser: async (_, __, context) => {
-          const identity = context.security.getIdentity();
-          if (!identity.isAdmin()) {
-            throw new NotAuthorizedResponse();
-          }
-
-          // Current user might not have permissions to execute `getUser` (this method can load any user in the system),
-          // but loading your own user record should be allowed. For that reason, let's temporarily disable authorization.
-
-          const getUser = context.container.resolve(GetUserUseCase);
-          const userResponse = await context.security.withoutAuthorization(async () => {
-            // Get user record using the identity ID.
-            return await getUser.execute({
-              id: identity.id
-            });
-          });
-          if (userResponse.isFail()) {
-            const error = userResponse.error;
-            if (error.code === "AdminUser/NotFound") {
-              return new NotFoundResponse(`User with ID ${identity.id} was not found!`);
+            resolvers: {
+                AdminUser: {
+                    roles (user, _, context) {
+                        if (!user.roles) return null;
+                        return context.security.listRoles({
+                            where: {
+                                id_in: user.roles
+                            }
+                        });
+                    }
+                },
+                AdminUsersQuery: {
+                    getUser: async (_, { where }, context)=>{
+                        const getUser = context.container.resolve(GetUserUseCase);
+                        const userResult = await getUser.execute({
+                            id: where.id,
+                            email: where.email
+                        });
+                        if (userResult.isFail()) {
+                            const error = userResult.error;
+                            if ("AdminUser/NotFound" === error.code) return new NotFoundResponse(`User "${JSON.stringify(where)}" was not found!`);
+                            return new ErrorResponse({
+                                message: error.message,
+                                code: error.code,
+                                data: error.data
+                            });
+                        }
+                        return new Response(userResult.value);
+                    },
+                    getCurrentUser: async (_, __, context)=>{
+                        const identity = context.security.getIdentity();
+                        if (!identity.isAdmin()) throw new NotAuthorizedResponse();
+                        const getUser = context.container.resolve(GetUserUseCase);
+                        const userResponse = await context.security.withoutAuthorization(async ()=>await getUser.execute({
+                                id: identity.id
+                            }));
+                        if (userResponse.isFail()) {
+                            const error = userResponse.error;
+                            if ("AdminUser/NotFound" === error.code) return new NotFoundResponse(`User with ID ${identity.id} was not found!`);
+                            return new ErrorResponse({
+                                message: error.message,
+                                code: error.code,
+                                data: error.data
+                            });
+                        }
+                        return new Response(userResponse.value);
+                    },
+                    listUsers: async (_, __, context)=>{
+                        const listUsers = context.container.resolve(ListUsersUseCase);
+                        const users = await listUsers.execute();
+                        if (users.isFail()) return new ListErrorResponse(users.error);
+                        return new ListResponse(users.value);
+                    }
+                }
             }
-            return new ErrorResponse({
-              message: error.message,
-              code: error.code,
-              data: error.data
-            });
-          }
-          return new Response(userResponse.value);
-        },
-        listUsers: async (_, __, context) => {
-          const listUsers = context.container.resolve(ListUsersUseCase);
-          const users = await listUsers.execute();
-          if (users.isFail()) {
-            return new ListErrorResponse(users.error);
-          }
-          return new ListResponse(users.value);
-        }
-      }
-    }
-  }), new GraphQLSchemaPlugin({
-    typeDefs: /* GraphQL */`
+        }),
+        new GraphQLSchemaPlugin({
+            typeDefs: `
                 extend type AdminUser {
                     teams: [SecurityTeam]
                 }
             `,
-    resolvers: {
-      AdminUser: {
-        teams(user, _, context) {
-          const hasTeams = Array.isArray(user.teams) && user.teams.length > 0;
-          if (!hasTeams) {
-            return [];
-          }
-          return context.security.listTeams({
-            where: {
-              id_in: user.teams
+            resolvers: {
+                AdminUser: {
+                    teams (user, _, context) {
+                        const hasTeams = Array.isArray(user.teams) && user.teams.length > 0;
+                        if (!hasTeams) return [];
+                        return context.security.listTeams({
+                            where: {
+                                id_in: user.teams
+                            }
+                        });
+                    }
+                }
             }
-          });
-        }
-      }
-    }
-  })].filter(Boolean);
-};
+        })
+    ].filter(Boolean);
+export { createUsersGraphQL };
 
 //# sourceMappingURL=user.gql.js.map

package/graphql/users/user.gql.js.map

@@ -1 +1 @@
-{"version":3,"names":["ErrorResponse","ListErrorResponse","ListResponse","NotFoundResponse","Response","GraphQLSchemaPlugin","GetUserUseCase","NotAuthorizedResponse","ListUsersUseCase","emptyResolver","createUsersGraphQL","typeDefs","resolvers","Query","adminUsers","Mutation","AdminUser","roles","user","_","context","security","listRoles","where","id_in","AdminUsersQuery","getUser","container","resolve","userResult","execute","id","email","isFail","error","code","JSON","stringify","message","data","value","getCurrentUser","__","identity","getIdentity","isAdmin","userResponse","withoutAuthorization","listUsers","users","teams","hasTeams","Array","isArray","length","listTeams","filter","Boolean"],"sources":["user.gql.ts"],"sourcesContent":["import {\n    ErrorResponse,\n    ListErrorResponse,\n    ListResponse,\n    NotFoundResponse,\n    Response\n} from \"@webiny/handler-graphql/responses.js\";\nimport { GraphQLSchemaPlugin } from \"@webiny/handler-graphql/plugins/GraphQLSchemaPlugin.js\";\nimport type { ApiCoreContext } from \"~/types/core.js\";\nimport { AdminUser } from \"~/types/users.js\";\nimport { GetUserUseCase } from \"~/features/users/GetUser/index.js\";\nimport NotAuthorizedResponse from \"~/graphql/security/NotAuthorizedResponse.js\";\nimport { ListUsersUseCase } from \"~/features/users/ListUsers/index.js\";\n\nconst emptyResolver = () => ({});\n\nexport const createUsersGraphQL = () => {\n    return [\n        new GraphQLSchemaPlugin<ApiCoreContext>({\n            typeDefs: /* GraphQL */ `\n                type AdminUsersQuery {\n                    _empty: String\n                }\n\n                type AdminUsersMutation {\n                    _empty: String\n                }\n\n                extend type Query {\n                    adminUsers: AdminUsersQuery\n                }\n\n                extend type Mutation {\n                    adminUsers: AdminUsersMutation\n                }\n\n                type AdminUsersCreatedBy {\n                    id: ID\n                    displayName: String\n                }\n\n                type AdminUsersError {\n                    code: String\n                    message: String\n                    data: JSON\n                    stack: String\n                }\n\n                type AdminUsersBooleanResponse {\n                    data: Boolean\n                    error: AdminUsersError\n                }\n            `,\n            resolvers: {\n                Query: {\n                    adminUsers: emptyResolver\n                },\n                Mutation: {\n                    adminUsers: emptyResolver\n                }\n            }\n        }),\n        new GraphQLSchemaPlugin<ApiCoreContext>({\n            typeDefs: /* GraphQL */ `\n                type AdminUser {\n                    id: ID!\n                    displayName: String!\n                    email: String!\n\n                    roles: [SecurityRole]\n                    firstName: String\n                    lastName: String\n                    avatar: JSON\n                    external: Boolean\n                    createdOn: DateTime\n                }\n\n                type AdminUsersResponse {\n                    data: AdminUser\n                    error: AdminUsersError\n                }\n\n                type AdminUsersListResponse {\n                    data: [AdminUser]\n                    error: AdminUsersError\n                }\n\n                input AdminUsersGetUserWhereInput {\n                    id: ID\n                    email: String\n                }\n\n                extend type AdminUsersQuery {\n                    getUser(where: AdminUsersGetUserWhereInput): AdminUsersResponse\n                    getCurrentUser: AdminUsersResponse\n                    listUsers: AdminUsersListResponse\n                }\n            `,\n            resolvers: {\n                AdminUser: {\n                    roles(user: AdminUser, _, context) {\n                        if (!user.roles) {\n                            return null;\n                        }\n\n                        return context.security.listRoles({ where: { id_in: user.roles } });\n                    }\n                },\n                AdminUsersQuery: {\n                    getUser: async (_, { where }: any, context) => {\n                        const getUser = context.container.resolve(GetUserUseCase);\n\n                        const userResult = await getUser.execute({\n                            id: where.id,\n                            email: where.email\n                        });\n\n                        if (userResult.isFail()) {\n                            const error = userResult.error;\n                            if (error.code === \"AdminUser/NotFound\") {\n                                return new NotFoundResponse(\n                                    `User \"${JSON.stringify(where)}\" was not found!`\n                                );\n                            }\n\n                            return new ErrorResponse({\n                                message: error.message,\n                                code: error.code,\n                                data: error.data\n                            });\n                        }\n\n                        return new Response(userResult.value);\n                    },\n                    getCurrentUser: async (_, __, context) => {\n                        const identity = context.security.getIdentity();\n\n                        if (!identity.isAdmin()) {\n                            throw new NotAuthorizedResponse();\n                        }\n\n                        // Current user might not have permissions to execute `getUser` (this method can load any user in the system),\n                        // but loading your own user record should be allowed. For that reason, let's temporarily disable authorization.\n\n                        const getUser = context.container.resolve(GetUserUseCase);\n\n                        const userResponse = await context.security.withoutAuthorization(\n                            async () => {\n                                // Get user record using the identity ID.\n                                return await getUser.execute({ id: identity.id });\n                            }\n                        );\n\n                        if (userResponse.isFail()) {\n                            const error = userResponse.error;\n                            if (error.code === \"AdminUser/NotFound\") {\n                                return new NotFoundResponse(\n                                    `User with ID ${identity.id} was not found!`\n                                );\n                            }\n\n                            return new ErrorResponse({\n                                message: error.message,\n                                code: error.code,\n                                data: error.data\n                            });\n                        }\n\n                        return new Response(userResponse.value);\n                    },\n                    listUsers: async (_, __, context) => {\n                        const listUsers = context.container.resolve(ListUsersUseCase);\n                        const users = await listUsers.execute();\n\n                        if (users.isFail()) {\n                            return new ListErrorResponse(users.error);\n                        }\n\n                        return new ListResponse(users.value);\n                    }\n                }\n            }\n        }),\n        new GraphQLSchemaPlugin<ApiCoreContext>({\n            typeDefs: /* GraphQL */ `\n                extend type AdminUser {\n                    teams: [SecurityTeam]\n                }\n            `,\n            resolvers: {\n                AdminUser: {\n                    teams(user: AdminUser, _, context) {\n                        const hasTeams = Array.isArray(user.teams) && user.teams.length > 0;\n                        if (!hasTeams) {\n                            return [];\n                        }\n\n                        return context.security.listTeams({ where: { id_in: user.teams } });\n                    }\n                }\n            }\n        })\n    ].filter(Boolean);\n};\n"],"mappings":"AAAA,SACIA,aAAa,EACbC,iBAAiB,EACjBC,YAAY,EACZC,gBAAgB,EAChBC,QAAQ,QACL,sCAAsC;AAC7C,SAASC,mBAAmB,QAAQ,wDAAwD;AAG5F,SAASC,cAAc;AACvB,OAAOC,qBAAqB;AAC5B,SAASC,gBAAgB;AAEzB,MAAMC,aAAa,GAAGA,CAAA,MAAO,CAAC,CAAC,CAAC;AAEhC,OAAO,MAAMC,kBAAkB,GAAGA,CAAA,KAAM;EACpC,OAAO,CACH,IAAIL,mBAAmB,CAAiB;IACpCM,QAAQ,EAAE,aAAc;AACpC;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,aAAa;IACDC,SAAS,EAAE;MACPC,KAAK,EAAE;QACHC,UAAU,EAAEL;MAChB,CAAC;MACDM,QAAQ,EAAE;QACND,UAAU,EAAEL;MAChB;IACJ;EACJ,CAAC,CAAC,EACF,IAAIJ,mBAAmB,CAAiB;IACpCM,QAAQ,EAAE,aAAc;AACpC;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,aAAa;IACDC,SAAS,EAAE;MACPI,SAAS,EAAE;QACPC,KAAKA,CAACC,IAAe,EAAEC,CAAC,EAAEC,OAAO,EAAE;UAC/B,IAAI,CAACF,IAAI,CAACD,KAAK,EAAE;YACb,OAAO,IAAI;UACf;UAEA,OAAOG,OAAO,CAACC,QAAQ,CAACC,SAAS,CAAC;YAAEC,KAAK,EAAE;cAAEC,KAAK,EAAEN,IAAI,CAACD;YAAM;UAAE,CAAC,CAAC;QACvE;MACJ,CAAC;MACDQ,eAAe,EAAE;QACbC,OAAO,EAAE,MAAAA,CAAOP,CAAC,EAAE;UAAEI;QAAW,CAAC,EAAEH,OAAO,KAAK;UAC3C,MAAMM,OAAO,GAAGN,OAAO,CAACO,SAAS,CAACC,OAAO,CAACtB,cAAc,CAAC;UAEzD,MAAMuB,UAAU,GAAG,MAAMH,OAAO,CAACI,OAAO,CAAC;YACrCC,EAAE,EAAER,KAAK,CAACQ,EAAE;YACZC,KAAK,EAAET,KAAK,CAACS;UACjB,CAAC,CAAC;UAEF,IAAIH,UAAU,CAACI,MAAM,CAAC,CAAC,EAAE;YACrB,MAAMC,KAAK,GAAGL,UAAU,CAACK,KAAK;YAC9B,IAAIA,KAAK,CAACC,IAAI,KAAK,oBAAoB,EAAE;cACrC,OAAO,IAAIhC,gBAAgB,CACvB,SAASiC,IAAI,CAACC,SAAS,CAACd,KAAK,CAAC,kBAClC,CAAC;YACL;YAEA,OAAO,IAAIvB,aAAa,CAAC;cACrBsC,OAAO,EAAEJ,KAAK,CAACI,OAAO;cACtBH,IAAI,EAAED,KAAK,CAACC,IAAI;cAChBI,IAAI,EAAEL,KAAK,CAACK;YAChB,CAAC,CAAC;UACN;UAEA,OAAO,IAAInC,QAAQ,CAACyB,UAAU,CAACW,KAAK,CAAC;QACzC,CAAC;QACDC,cAAc,EAAE,MAAAA,CAAOtB,CAAC,EAAEuB,EAAE,EAAEtB,OAAO,KAAK;UACtC,MAAMuB,QAAQ,GAAGvB,OAAO,CAACC,QAAQ,CAACuB,WAAW,CAAC,CAAC;UAE/C,IAAI,CAACD,QAAQ,CAACE,OAAO,CAAC,CAAC,EAAE;YACrB,MAAM,IAAItC,qBAAqB,CAAC,CAAC;UACrC;;UAEA;UACA;;UAEA,MAAMmB,OAAO,GAAGN,OAAO,CAACO,SAAS,CAACC,OAAO,CAACtB,cAAc,CAAC;UAEzD,MAAMwC,YAAY,GAAG,MAAM1B,OAAO,CAACC,QAAQ,CAAC0B,oBAAoB,CAC5D,YAAY;YACR;YACA,OAAO,MAAMrB,OAAO,CAACI,OAAO,CAAC;cAAEC,EAAE,EAAEY,QAAQ,CAACZ;YAAG,CAAC,CAAC;UACrD,CACJ,CAAC;UAED,IAAIe,YAAY,CAACb,MAAM,CAAC,CAAC,EAAE;YACvB,MAAMC,KAAK,GAAGY,YAAY,CAACZ,KAAK;YAChC,IAAIA,KAAK,CAACC,IAAI,KAAK,oBAAoB,EAAE;cACrC,OAAO,IAAIhC,gBAAgB,CACvB,gBAAgBwC,QAAQ,CAACZ,EAAE,iBAC/B,CAAC;YACL;YAEA,OAAO,IAAI/B,aAAa,CAAC;cACrBsC,OAAO,EAAEJ,KAAK,CAACI,OAAO;cACtBH,IAAI,EAAED,KAAK,CAACC,IAAI;cAChBI,IAAI,EAAEL,KAAK,CAACK;YAChB,CAAC,CAAC;UACN;UAEA,OAAO,IAAInC,QAAQ,CAAC0C,YAAY,CAACN,KAAK,CAAC;QAC3C,CAAC;QACDQ,SAAS,EAAE,MAAAA,CAAO7B,CAAC,EAAEuB,EAAE,EAAEtB,OAAO,KAAK;UACjC,MAAM4B,SAAS,GAAG5B,OAAO,CAACO,SAAS,CAACC,OAAO,CAACpB,gBAAgB,CAAC;UAC7D,MAAMyC,KAAK,GAAG,MAAMD,SAAS,CAAClB,OAAO,CAAC,CAAC;UAEvC,IAAImB,KAAK,CAAChB,MAAM,CAAC,CAAC,EAAE;YAChB,OAAO,IAAIhC,iBAAiB,CAACgD,KAAK,CAACf,KAAK,CAAC;UAC7C;UAEA,OAAO,IAAIhC,YAAY,CAAC+C,KAAK,CAACT,KAAK,CAAC;QACxC;MACJ;IACJ;EACJ,CAAC,CAAC,EACF,IAAInC,mBAAmB,CAAiB;IACpCM,QAAQ,EAAE,aAAc;AACpC;AACA;AACA;AACA,aAAa;IACDC,SAAS,EAAE;MACPI,SAAS,EAAE;QACPkC,KAAKA,CAAChC,IAAe,EAAEC,CAAC,EAAEC,OAAO,EAAE;UAC/B,MAAM+B,QAAQ,GAAGC,KAAK,CAACC,OAAO,CAACnC,IAAI,CAACgC,KAAK,CAAC,IAAIhC,IAAI,CAACgC,KAAK,CAACI,MAAM,GAAG,CAAC;UACnE,IAAI,CAACH,QAAQ,EAAE;YACX,OAAO,EAAE;UACb;UAEA,OAAO/B,OAAO,CAACC,QAAQ,CAACkC,SAAS,CAAC;YAAEhC,KAAK,EAAE;cAAEC,KAAK,EAAEN,IAAI,CAACgC;YAAM;UAAE,CAAC,CAAC;QACvE;MACJ;IACJ;EACJ,CAAC,CAAC,CACL,CAACM,MAAM,CAACC,OAAO,CAAC;AACrB,CAAC","ignoreList":[]}
+{"version":3,"file":"graphql/users/user.gql.js","sources":["../../../src/graphql/users/user.gql.ts"],"sourcesContent":["import {\n    ErrorResponse,\n    ListErrorResponse,\n    ListResponse,\n    NotFoundResponse,\n    Response\n} from \"@webiny/handler-graphql/responses.js\";\nimport { GraphQLSchemaPlugin } from \"@webiny/handler-graphql/plugins/GraphQLSchemaPlugin.js\";\nimport type { ApiCoreContext } from \"~/types/core.js\";\nimport { AdminUser } from \"~/types/users.js\";\nimport { GetUserUseCase } from \"~/features/users/GetUser/index.js\";\nimport NotAuthorizedResponse from \"~/graphql/security/NotAuthorizedResponse.js\";\nimport { ListUsersUseCase } from \"~/features/users/ListUsers/index.js\";\n\nconst emptyResolver = () => ({});\n\nexport const createUsersGraphQL = () => {\n    return [\n        new GraphQLSchemaPlugin<ApiCoreContext>({\n            typeDefs: /* GraphQL */ `\n                type AdminUsersQuery {\n                    _empty: String\n                }\n\n                type AdminUsersMutation {\n                    _empty: String\n                }\n\n                extend type Query {\n                    adminUsers: AdminUsersQuery\n                }\n\n                extend type Mutation {\n                    adminUsers: AdminUsersMutation\n                }\n\n                type AdminUsersCreatedBy {\n                    id: ID\n                    displayName: String\n                }\n\n                type AdminUsersError {\n                    code: String\n                    message: String\n                    data: JSON\n                    stack: String\n                }\n\n                type AdminUsersBooleanResponse {\n                    data: Boolean\n                    error: AdminUsersError\n                }\n            `,\n            resolvers: {\n                Query: {\n                    adminUsers: emptyResolver\n                },\n                Mutation: {\n                    adminUsers: emptyResolver\n                }\n            }\n        }),\n        new GraphQLSchemaPlugin<ApiCoreContext>({\n            typeDefs: /* GraphQL */ `\n                type AdminUser {\n                    id: ID!\n                    displayName: String!\n                    email: String!\n\n                    roles: [SecurityRole]\n                    firstName: String\n                    lastName: String\n                    avatar: JSON\n                    external: Boolean\n                    createdOn: DateTime\n                }\n\n                type AdminUsersResponse {\n                    data: AdminUser\n                    error: AdminUsersError\n                }\n\n                type AdminUsersListResponse {\n                    data: [AdminUser]\n                    error: AdminUsersError\n                }\n\n                input AdminUsersGetUserWhereInput {\n                    id: ID\n                    email: String\n                }\n\n                extend type AdminUsersQuery {\n                    getUser(where: AdminUsersGetUserWhereInput): AdminUsersResponse\n                    getCurrentUser: AdminUsersResponse\n                    listUsers: AdminUsersListResponse\n                }\n            `,\n            resolvers: {\n                AdminUser: {\n                    roles(user: AdminUser, _, context) {\n                        if (!user.roles) {\n                            return null;\n                        }\n\n                        return context.security.listRoles({ where: { id_in: user.roles } });\n                    }\n                },\n                AdminUsersQuery: {\n                    getUser: async (_, { where }: any, context) => {\n                        const getUser = context.container.resolve(GetUserUseCase);\n\n                        const userResult = await getUser.execute({\n                            id: where.id,\n                            email: where.email\n                        });\n\n                        if (userResult.isFail()) {\n                            const error = userResult.error;\n                            if (error.code === \"AdminUser/NotFound\") {\n                                return new NotFoundResponse(\n                                    `User \"${JSON.stringify(where)}\" was not found!`\n                                );\n                            }\n\n                            return new ErrorResponse({\n                                message: error.message,\n                                code: error.code,\n                                data: error.data\n                            });\n                        }\n\n                        return new Response(userResult.value);\n                    },\n                    getCurrentUser: async (_, __, context) => {\n                        const identity = context.security.getIdentity();\n\n                        if (!identity.isAdmin()) {\n                            throw new NotAuthorizedResponse();\n                        }\n\n                        // Current user might not have permissions to execute `getUser` (this method can load any user in the system),\n                        // but loading your own user record should be allowed. For that reason, let's temporarily disable authorization.\n\n                        const getUser = context.container.resolve(GetUserUseCase);\n\n                        const userResponse = await context.security.withoutAuthorization(\n                            async () => {\n                                // Get user record using the identity ID.\n                                return await getUser.execute({ id: identity.id });\n                            }\n                        );\n\n                        if (userResponse.isFail()) {\n                            const error = userResponse.error;\n                            if (error.code === \"AdminUser/NotFound\") {\n                                return new NotFoundResponse(\n                                    `User with ID ${identity.id} was not found!`\n                                );\n                            }\n\n                            return new ErrorResponse({\n                                message: error.message,\n                                code: error.code,\n                                data: error.data\n                            });\n                        }\n\n                        return new Response(userResponse.value);\n                    },\n                    listUsers: async (_, __, context) => {\n                        const listUsers = context.container.resolve(ListUsersUseCase);\n                        const users = await listUsers.execute();\n\n                        if (users.isFail()) {\n                            return new ListErrorResponse(users.error);\n                        }\n\n                        return new ListResponse(users.value);\n                    }\n                }\n            }\n        }),\n        new GraphQLSchemaPlugin<ApiCoreContext>({\n            typeDefs: /* GraphQL */ `\n                extend type AdminUser {\n                    teams: [SecurityTeam]\n                }\n            `,\n            resolvers: {\n                AdminUser: {\n                    teams(user: AdminUser, _, context) {\n                        const hasTeams = Array.isArray(user.teams) && user.teams.length > 0;\n                        if (!hasTeams) {\n                            return [];\n                        }\n\n                        return context.security.listTeams({ where: { id_in: user.teams } });\n                    }\n                }\n            }\n        })\n    ].filter(Boolean);\n};\n"],"names":["emptyResolver","createUsersGraphQL","GraphQLSchemaPlugin","user","_","context","where","getUser","GetUserUseCase","userResult","error","NotFoundResponse","JSON","ErrorResponse","Response","__","identity","NotAuthorizedResponse","userResponse","listUsers","ListUsersUseCase","users","ListErrorResponse","ListResponse","hasTeams","Array","Boolean"],"mappings":";;;;;AAcA,MAAMA,gBAAgB,IAAO,EAAC;AAEvB,MAAMC,qBAAqB,IACvB;QACH,IAAIC,oBAAoC;YACpC,UAAwB,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;YAiCzB,CAAC;YACD,WAAW;gBACP,OAAO;oBACH,YAAYF;gBAChB;gBACA,UAAU;oBACN,YAAYA;gBAChB;YACJ;QACJ;QACA,IAAIE,oBAAoC;YACpC,UAAwB,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;YAkCzB,CAAC;YACD,WAAW;gBACP,WAAW;oBACP,OAAMC,IAAe,EAAEC,CAAC,EAAEC,OAAO;wBAC7B,IAAI,CAACF,KAAK,KAAK,EACX,OAAO;wBAGX,OAAOE,QAAQ,QAAQ,CAAC,SAAS,CAAC;4BAAE,OAAO;gCAAE,OAAOF,KAAK,KAAK;4BAAC;wBAAE;oBACrE;gBACJ;gBACA,iBAAiB;oBACb,SAAS,OAAOC,GAAG,EAAEE,KAAK,EAAO,EAAED;wBAC/B,MAAME,UAAUF,QAAQ,SAAS,CAAC,OAAO,CAACG;wBAE1C,MAAMC,aAAa,MAAMF,QAAQ,OAAO,CAAC;4BACrC,IAAID,MAAM,EAAE;4BACZ,OAAOA,MAAM,KAAK;wBACtB;wBAEA,IAAIG,WAAW,MAAM,IAAI;4BACrB,MAAMC,QAAQD,WAAW,KAAK;4BAC9B,IAAIC,AAAe,yBAAfA,MAAM,IAAI,EACV,OAAO,IAAIC,iBACP,CAAC,MAAM,EAAEC,KAAK,SAAS,CAACN,OAAO,gBAAgB,CAAC;4BAIxD,OAAO,IAAIO,cAAc;gCACrB,SAASH,MAAM,OAAO;gCACtB,MAAMA,MAAM,IAAI;gCAChB,MAAMA,MAAM,IAAI;4BACpB;wBACJ;wBAEA,OAAO,IAAII,SAASL,WAAW,KAAK;oBACxC;oBACA,gBAAgB,OAAOL,GAAGW,IAAIV;wBAC1B,MAAMW,WAAWX,QAAQ,QAAQ,CAAC,WAAW;wBAE7C,IAAI,CAACW,SAAS,OAAO,IACjB,MAAM,IAAIC;wBAMd,MAAMV,UAAUF,QAAQ,SAAS,CAAC,OAAO,CAACG;wBAE1C,MAAMU,eAAe,MAAMb,QAAQ,QAAQ,CAAC,oBAAoB,CAC5D,UAEW,MAAME,QAAQ,OAAO,CAAC;gCAAE,IAAIS,SAAS,EAAE;4BAAC;wBAIvD,IAAIE,aAAa,MAAM,IAAI;4BACvB,MAAMR,QAAQQ,aAAa,KAAK;4BAChC,IAAIR,AAAe,yBAAfA,MAAM,IAAI,EACV,OAAO,IAAIC,iBACP,CAAC,aAAa,EAAEK,SAAS,EAAE,CAAC,eAAe,CAAC;4BAIpD,OAAO,IAAIH,cAAc;gCACrB,SAASH,MAAM,OAAO;gCACtB,MAAMA,MAAM,IAAI;gCAChB,MAAMA,MAAM,IAAI;4BACpB;wBACJ;wBAEA,OAAO,IAAII,SAASI,aAAa,KAAK;oBAC1C;oBACA,WAAW,OAAOd,GAAGW,IAAIV;wBACrB,MAAMc,YAAYd,QAAQ,SAAS,CAAC,OAAO,CAACe;wBAC5C,MAAMC,QAAQ,MAAMF,UAAU,OAAO;wBAErC,IAAIE,MAAM,MAAM,IACZ,OAAO,IAAIC,kBAAkBD,MAAM,KAAK;wBAG5C,OAAO,IAAIE,aAAaF,MAAM,KAAK;oBACvC;gBACJ;YACJ;QACJ;QACA,IAAInB,oBAAoC;YACpC,UAAwB,CAAC;;;;YAIzB,CAAC;YACD,WAAW;gBACP,WAAW;oBACP,OAAMC,IAAe,EAAEC,CAAC,EAAEC,OAAO;wBAC7B,MAAMmB,WAAWC,MAAM,OAAO,CAACtB,KAAK,KAAK,KAAKA,KAAK,KAAK,CAAC,MAAM,GAAG;wBAClE,IAAI,CAACqB,UACD,OAAO,EAAE;wBAGb,OAAOnB,QAAQ,QAAQ,CAAC,SAAS,CAAC;4BAAE,OAAO;gCAAE,OAAOF,KAAK,KAAK;4BAAC;wBAAE;oBACrE;gBACJ;YACJ;QACJ;KACH,CAAC,MAAM,CAACuB"}

package/graphql/wcp/graphql.js

@@ -1,10 +1,9 @@
 import { GraphQLSchemaPlugin } from "@webiny/handler-graphql/plugins/index.js";
 import { ErrorResponse, Response } from "@webiny/handler-graphql/responses.js";
 import { WcpContext } from "../../features/wcp/WcpContext/index.js";
-const emptyResolver = () => ({});
-export const createWcpGraphQL = () => {
-  return new GraphQLSchemaPlugin({
-    typeDefs: /* GraphQL */`
+const emptyResolver = ()=>({});
+const createWcpGraphQL = ()=>new GraphQLSchemaPlugin({
+        typeDefs: `
             type WcpProjectPackageFeaturesFeature {
                 enabled: Boolean
                 options: JSON
@@ -18,6 +17,8 @@ export const createWcpGraphQL = () => {
                 auditLogs: WcpProjectPackageFeaturesFeature
                 recordLocking: WcpProjectPackageFeaturesFeature
                 fileManager: WcpProjectPackageFeaturesFeature
+                aiPowerups: WcpProjectPackageFeaturesFeature
+                abTesting: WcpProjectPackageFeaturesFeature
             }
 
             type WcpProjectPackage {
@@ -58,31 +59,29 @@ export const createWcpGraphQL = () => {
                 wcp: WcpMutation
             }
         `,
-    resolvers: {
-      Query: {
-        wcp: emptyResolver
-      },
-      WcpQuery: {
-        getProject: async (_, __, context) => {
-          try {
-            const wcpContext = context.container.resolve(WcpContext);
-            const project = wcpContext.getProject();
-            if (!project) {
-              throw Error(`Could not get project!`);
+        resolvers: {
+            Query: {
+                wcp: emptyResolver
+            },
+            WcpQuery: {
+                getProject: async (_, __, context)=>{
+                    try {
+                        const wcpContext = context.container.resolve(WcpContext);
+                        const project = wcpContext.getProjectWithFeatureFlags();
+                        if (!project) throw Error("Could not get project!");
+                        return new Response(project);
+                    } catch (e) {
+                        return new ErrorResponse({
+                            code: "COULD_NOT_GET_PROJECT",
+                            message: e.message,
+                            data: null,
+                            stack: e.stack
+                        });
+                    }
+                }
             }
-            return new Response(project);
-          } catch (e) {
-            return new ErrorResponse({
-              code: "COULD_NOT_GET_PROJECT",
-              message: e.message,
-              data: null,
-              stack: e.stack
-            });
-          }
         }
-      }
-    }
-  });
-};
+    });
+export { createWcpGraphQL };
 
 //# sourceMappingURL=graphql.js.map

package/graphql/wcp/graphql.js.map

@@ -1 +1 @@
-{"version":3,"names":["GraphQLSchemaPlugin","ErrorResponse","Response","WcpContext","emptyResolver","createWcpGraphQL","typeDefs","resolvers","Query","wcp","WcpQuery","getProject","_","__","context","wcpContext","container","resolve","project","Error","e","code","message","data","stack"],"sources":["graphql.ts"],"sourcesContent":["import { GraphQLSchemaPlugin } from \"@webiny/handler-graphql/plugins/index.js\";\nimport { ErrorResponse, Response } from \"@webiny/handler-graphql/responses.js\";\nimport { WcpContext } from \"~/features/wcp/WcpContext/index.js\";\n\nconst emptyResolver = () => ({});\n\nexport const createWcpGraphQL = () => {\n    return new GraphQLSchemaPlugin({\n        typeDefs: /* GraphQL */ `\n            type WcpProjectPackageFeaturesFeature {\n                enabled: Boolean\n                options: JSON\n            }\n\n            type WcpProjectPackageFeatures {\n                seats: WcpProjectPackageFeaturesFeature\n                multiTenancy: WcpProjectPackageFeaturesFeature\n                advancedPublishingWorkflow: WcpProjectPackageFeaturesFeature\n                advancedAccessControlLayer: WcpProjectPackageFeaturesFeature\n                auditLogs: WcpProjectPackageFeaturesFeature\n                recordLocking: WcpProjectPackageFeaturesFeature\n                fileManager: WcpProjectPackageFeaturesFeature\n            }\n\n            type WcpProjectPackage {\n                features: WcpProjectPackageFeatures\n            }\n\n            type WcpProject {\n                orgId: ID\n                projectId: ID\n                package: WcpProjectPackage\n            }\n\n            type WcpError {\n                code: String\n                message: String\n                data: JSON\n                stack: String\n            }\n\n            type WcpProjectResponse {\n                data: WcpProject\n                error: WcpError\n            }\n\n            type WcpQuery {\n                getProject: WcpProjectResponse\n            }\n\n            type WcpMutation {\n                updateProject: WcpProjectResponse\n            }\n\n            extend type Query {\n                wcp: WcpQuery\n            }\n\n            extend type Mutation {\n                wcp: WcpMutation\n            }\n        `,\n        resolvers: {\n            Query: {\n                wcp: emptyResolver\n            },\n            WcpQuery: {\n                getProject: async (_, __, context) => {\n                    try {\n                        const wcpContext = context.container.resolve(WcpContext);\n                        const project = wcpContext.getProject();\n\n                        if (!project) {\n                            throw Error(`Could not get project!`);\n                        }\n\n                        return new Response(project);\n                    } catch (e) {\n                        return new ErrorResponse({\n                            code: \"COULD_NOT_GET_PROJECT\",\n                            message: e.message,\n                            data: null,\n                            stack: e.stack\n                        });\n                    }\n                }\n            }\n        }\n    });\n};\n"],"mappings":"AAAA,SAASA,mBAAmB,QAAQ,0CAA0C;AAC9E,SAASC,aAAa,EAAEC,QAAQ,QAAQ,sCAAsC;AAC9E,SAASC,UAAU;AAEnB,MAAMC,aAAa,GAAGA,CAAA,MAAO,CAAC,CAAC,CAAC;AAEhC,OAAO,MAAMC,gBAAgB,GAAGA,CAAA,KAAM;EAClC,OAAO,IAAIL,mBAAmB,CAAC;IAC3BM,QAAQ,EAAE,aAAc;AAChC;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,SAAS;IACDC,SAAS,EAAE;MACPC,KAAK,EAAE;QACHC,GAAG,EAAEL;MACT,CAAC;MACDM,QAAQ,EAAE;QACNC,UAAU,EAAE,MAAAA,CAAOC,CAAC,EAAEC,EAAE,EAAEC,OAAO,KAAK;UAClC,IAAI;YACA,MAAMC,UAAU,GAAGD,OAAO,CAACE,SAAS,CAACC,OAAO,CAACd,UAAU,CAAC;YACxD,MAAMe,OAAO,GAAGH,UAAU,CAACJ,UAAU,CAAC,CAAC;YAEvC,IAAI,CAACO,OAAO,EAAE;cACV,MAAMC,KAAK,CAAC,wBAAwB,CAAC;YACzC;YAEA,OAAO,IAAIjB,QAAQ,CAACgB,OAAO,CAAC;UAChC,CAAC,CAAC,OAAOE,CAAC,EAAE;YACR,OAAO,IAAInB,aAAa,CAAC;cACrBoB,IAAI,EAAE,uBAAuB;cAC7BC,OAAO,EAAEF,CAAC,CAACE,OAAO;cAClBC,IAAI,EAAE,IAAI;cACVC,KAAK,EAAEJ,CAAC,CAACI;YACb,CAAC,CAAC;UACN;QACJ;MACJ;IACJ;EACJ,CAAC,CAAC;AACN,CAAC","ignoreList":[]}
+{"version":3,"file":"graphql/wcp/graphql.js","sources":["../../../src/graphql/wcp/graphql.ts"],"sourcesContent":["import { GraphQLSchemaPlugin } from \"@webiny/handler-graphql/plugins/index.js\";\nimport { ErrorResponse, Response } from \"@webiny/handler-graphql/responses.js\";\nimport { WcpContext } from \"~/features/wcp/WcpContext/index.js\";\n\nconst emptyResolver = () => ({});\n\nexport const createWcpGraphQL = () => {\n    return new GraphQLSchemaPlugin({\n        typeDefs: /* GraphQL */ `\n            type WcpProjectPackageFeaturesFeature {\n                enabled: Boolean\n                options: JSON\n            }\n\n            type WcpProjectPackageFeatures {\n                seats: WcpProjectPackageFeaturesFeature\n                multiTenancy: WcpProjectPackageFeaturesFeature\n                advancedPublishingWorkflow: WcpProjectPackageFeaturesFeature\n                advancedAccessControlLayer: WcpProjectPackageFeaturesFeature\n                auditLogs: WcpProjectPackageFeaturesFeature\n                recordLocking: WcpProjectPackageFeaturesFeature\n                fileManager: WcpProjectPackageFeaturesFeature\n                aiPowerups: WcpProjectPackageFeaturesFeature\n                abTesting: WcpProjectPackageFeaturesFeature\n            }\n\n            type WcpProjectPackage {\n                features: WcpProjectPackageFeatures\n            }\n\n            type WcpProject {\n                orgId: ID\n                projectId: ID\n                package: WcpProjectPackage\n            }\n\n            type WcpError {\n                code: String\n                message: String\n                data: JSON\n                stack: String\n            }\n\n            type WcpProjectResponse {\n                data: WcpProject\n                error: WcpError\n            }\n\n            type WcpQuery {\n                getProject: WcpProjectResponse\n            }\n\n            type WcpMutation {\n                updateProject: WcpProjectResponse\n            }\n\n            extend type Query {\n                wcp: WcpQuery\n            }\n\n            extend type Mutation {\n                wcp: WcpMutation\n            }\n        `,\n        resolvers: {\n            Query: {\n                wcp: emptyResolver\n            },\n            WcpQuery: {\n                getProject: async (_, __, context) => {\n                    try {\n                        const wcpContext = context.container.resolve(WcpContext);\n                        const project = wcpContext.getProjectWithFeatureFlags();\n\n                        if (!project) {\n                            throw Error(`Could not get project!`);\n                        }\n\n                        return new Response(project);\n                    } catch (e) {\n                        return new ErrorResponse({\n                            code: \"COULD_NOT_GET_PROJECT\",\n                            message: e.message,\n                            data: null,\n                            stack: e.stack\n                        });\n                    }\n                }\n            }\n        }\n    });\n};\n"],"names":["emptyResolver","createWcpGraphQL","GraphQLSchemaPlugin","_","__","context","wcpContext","WcpContext","project","Error","Response","e","ErrorResponse"],"mappings":";;;AAIA,MAAMA,gBAAgB,IAAO,EAAC;AAEvB,MAAMC,mBAAmB,IACrB,IAAIC,oBAAoB;QAC3B,UAAwB,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;QAuDzB,CAAC;QACD,WAAW;YACP,OAAO;gBACH,KAAKF;YACT;YACA,UAAU;gBACN,YAAY,OAAOG,GAAGC,IAAIC;oBACtB,IAAI;wBACA,MAAMC,aAAaD,QAAQ,SAAS,CAAC,OAAO,CAACE;wBAC7C,MAAMC,UAAUF,WAAW,0BAA0B;wBAErD,IAAI,CAACE,SACD,MAAMC,MAAM;wBAGhB,OAAO,IAAIC,SAASF;oBACxB,EAAE,OAAOG,GAAG;wBACR,OAAO,IAAIC,cAAc;4BACrB,MAAM;4BACN,SAASD,EAAE,OAAO;4BAClB,MAAM;4BACN,OAAOA,EAAE,KAAK;wBAClB;oBACJ;gBACJ;YACJ;QACJ;IACJ"}

package/idp/JwksCache.js

@@ -1,32 +1,26 @@
-export class JwksCache {
-  cache = new Map();
-  async getKeys(issuer) {
-    // Check cache first
-    const cached = this.cache.get(issuer);
-    if (cached) {
-      return cached.jwks;
+class JwksCache {
+    async getKeys(issuer) {
+        const cached = this.cache.get(issuer);
+        if (cached) return cached.jwks;
+        const openidUrl = new URL(issuer);
+        const pathname = openidUrl.pathname + "/.well-known/openid-configuration";
+        openidUrl.pathname = pathname.replace(/\/+/g, "/");
+        const oidcConfig = await fetch(openidUrl.toString()).then((res)=>res.json());
+        const jwksResponse = await fetch(oidcConfig.jwks_uri).then((res)=>res.json());
+        const jwks = jwksResponse.keys;
+        this.cache.set(issuer, {
+            oidcConfig,
+            jwks
+        });
+        return jwks;
+    }
+    clearCache() {
+        this.cache.clear();
+    }
+    constructor(){
+        this.cache = new Map();
     }
-
-    // Fetch OIDC configuration
-    const openidUrl = new URL(issuer);
-    const pathname = openidUrl.pathname + "/.well-known/openid-configuration";
-    openidUrl.pathname = pathname.replace(/\/+/g, "/");
-    const oidcConfig = await fetch(openidUrl.toString()).then(res => res.json());
-
-    // Fetch JWKs from jwks_uri
-    const jwksResponse = await fetch(oidcConfig.jwks_uri).then(res => res.json());
-    const jwks = jwksResponse.keys;
-
-    // Cache both config and JWKs
-    this.cache.set(issuer, {
-      oidcConfig,
-      jwks
-    });
-    return jwks;
-  }
-  clearCache() {
-    this.cache.clear();
-  }
 }
+export { JwksCache };
 
 //# sourceMappingURL=JwksCache.js.map

package/idp/JwksCache.js.map

@@ -1 +1 @@
-{"version":3,"names":["JwksCache","cache","Map","getKeys","issuer","cached","get","jwks","openidUrl","URL","pathname","replace","oidcConfig","fetch","toString","then","res","json","jwksResponse","jwks_uri","keys","set","clearCache","clear"],"sources":["JwksCache.ts"],"sourcesContent":["import type { Jwk } from \"~/features/security/utils/verifyJwtUsingJwk.js\";\nimport { JwkCache } from \"./abstractions.js\";\n\ninterface OidcConfiguration {\n    jwks_uri: string;\n    [key: string]: any;\n}\n\ninterface CacheEntry {\n    oidcConfig: OidcConfiguration;\n    jwks: Jwk[];\n}\n\nexport class JwksCache implements JwkCache.Interface {\n    private cache = new Map<string, CacheEntry>();\n\n    async getKeys(issuer: string): Promise<Jwk[]> {\n        // Check cache first\n        const cached = this.cache.get(issuer);\n        if (cached) {\n            return cached.jwks;\n        }\n\n        // Fetch OIDC configuration\n        const openidUrl = new URL(issuer);\n        const pathname = openidUrl.pathname + \"/.well-known/openid-configuration\";\n        openidUrl.pathname = pathname.replace(/\\/+/g, \"/\");\n\n        const oidcConfig = await fetch(openidUrl.toString()).then(\n            res => res.json() as Promise<OidcConfiguration>\n        );\n\n        // Fetch JWKs from jwks_uri\n        const jwksResponse = await fetch(oidcConfig.jwks_uri).then(res => res.json());\n        const jwks = jwksResponse.keys as Jwk[];\n\n        // Cache both config and JWKs\n        this.cache.set(issuer, {\n            oidcConfig,\n            jwks\n        });\n\n        return jwks;\n    }\n\n    clearCache(): void {\n        this.cache.clear();\n    }\n}\n"],"mappings":"AAaA,OAAO,MAAMA,SAAS,CAA+B;EACzCC,KAAK,GAAG,IAAIC,GAAG,CAAqB,CAAC;EAE7C,MAAMC,OAAOA,CAACC,MAAc,EAAkB;IAC1C;IACA,MAAMC,MAAM,GAAG,IAAI,CAACJ,KAAK,CAACK,GAAG,CAACF,MAAM,CAAC;IACrC,IAAIC,MAAM,EAAE;MACR,OAAOA,MAAM,CAACE,IAAI;IACtB;;IAEA;IACA,MAAMC,SAAS,GAAG,IAAIC,GAAG,CAACL,MAAM,CAAC;IACjC,MAAMM,QAAQ,GAAGF,SAAS,CAACE,QAAQ,GAAG,mCAAmC;IACzEF,SAAS,CAACE,QAAQ,GAAGA,QAAQ,CAACC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC;IAElD,MAAMC,UAAU,GAAG,MAAMC,KAAK,CAACL,SAAS,CAACM,QAAQ,CAAC,CAAC,CAAC,CAACC,IAAI,CACrDC,GAAG,IAAIA,GAAG,CAACC,IAAI,CAAC,CACpB,CAAC;;IAED;IACA,MAAMC,YAAY,GAAG,MAAML,KAAK,CAACD,UAAU,CAACO,QAAQ,CAAC,CAACJ,IAAI,CAACC,GAAG,IAAIA,GAAG,CAACC,IAAI,CAAC,CAAC,CAAC;IAC7E,MAAMV,IAAI,GAAGW,YAAY,CAACE,IAAa;;IAEvC;IACA,IAAI,CAACnB,KAAK,CAACoB,GAAG,CAACjB,MAAM,EAAE;MACnBQ,UAAU;MACVL;IACJ,CAAC,CAAC;IAEF,OAAOA,IAAI;EACf;EAEAe,UAAUA,CAAA,EAAS;IACf,IAAI,CAACrB,KAAK,CAACsB,KAAK,CAAC,CAAC;EACtB;AACJ","ignoreList":[]}
+{"version":3,"file":"idp/JwksCache.js","sources":["../../src/idp/JwksCache.ts"],"sourcesContent":["import type { Jwk } from \"~/features/security/utils/verifyJwtUsingJwk.js\";\nimport { JwkCache } from \"./abstractions.js\";\n\ninterface OidcConfiguration {\n    jwks_uri: string;\n    [key: string]: any;\n}\n\ninterface CacheEntry {\n    oidcConfig: OidcConfiguration;\n    jwks: Jwk[];\n}\n\nexport class JwksCache implements JwkCache.Interface {\n    private cache = new Map<string, CacheEntry>();\n\n    async getKeys(issuer: string): Promise<Jwk[]> {\n        // Check cache first\n        const cached = this.cache.get(issuer);\n        if (cached) {\n            return cached.jwks;\n        }\n\n        // Fetch OIDC configuration\n        const openidUrl = new URL(issuer);\n        const pathname = openidUrl.pathname + \"/.well-known/openid-configuration\";\n        openidUrl.pathname = pathname.replace(/\\/+/g, \"/\");\n\n        const oidcConfig = await fetch(openidUrl.toString()).then(\n            res => res.json() as Promise<OidcConfiguration>\n        );\n\n        // Fetch JWKs from jwks_uri\n        const jwksResponse = await fetch(oidcConfig.jwks_uri).then(res => res.json());\n        const jwks = jwksResponse.keys as Jwk[];\n\n        // Cache both config and JWKs\n        this.cache.set(issuer, {\n            oidcConfig,\n            jwks\n        });\n\n        return jwks;\n    }\n\n    clearCache(): void {\n        this.cache.clear();\n    }\n}\n"],"names":["JwksCache","issuer","cached","openidUrl","URL","pathname","oidcConfig","fetch","res","jwksResponse","jwks","Map"],"mappings":"AAaO,MAAMA;IAGT,MAAM,QAAQC,MAAc,EAAkB;QAE1C,MAAMC,SAAS,IAAI,CAAC,KAAK,CAAC,GAAG,CAACD;QAC9B,IAAIC,QACA,OAAOA,OAAO,IAAI;QAItB,MAAMC,YAAY,IAAIC,IAAIH;QAC1B,MAAMI,WAAWF,UAAU,QAAQ,GAAG;QACtCA,UAAU,QAAQ,GAAGE,SAAS,OAAO,CAAC,QAAQ;QAE9C,MAAMC,aAAa,MAAMC,MAAMJ,UAAU,QAAQ,IAAI,IAAI,CACrDK,CAAAA,MAAOA,IAAI,IAAI;QAInB,MAAMC,eAAe,MAAMF,MAAMD,WAAW,QAAQ,EAAE,IAAI,CAACE,CAAAA,MAAOA,IAAI,IAAI;QAC1E,MAAME,OAAOD,aAAa,IAAI;QAG9B,IAAI,CAAC,KAAK,CAAC,GAAG,CAACR,QAAQ;YACnBK;YACAI;QACJ;QAEA,OAAOA;IACX;IAEA,aAAmB;QACf,IAAI,CAAC,KAAK,CAAC,KAAK;IACpB;;aAjCQ,KAAK,GAAG,IAAIC;;AAkCxB"}

package/idp/JwtAuthenticator.js

@@ -1,58 +1,46 @@
-import jwt from "jsonwebtoken";
+import jsonwebtoken from "jsonwebtoken";
 import { Authenticator } from "../features/security/authentication/Authenticator/abstractions.js";
 import { JwtIdentityProvider } from "./abstractions.js";
 import { isJwt } from "../features/security/utils/isJwt.js";
 class JwtAuthenticatorImpl {
-  constructor(providers) {
-    this.providers = providers;
-  }
-  async authenticate(token) {
-    if (!isJwt(token)) {
-      return null;
+    constructor(providers){
+        this.providers = providers;
     }
-
-    // Decode JWT to get payload
-    const decoded = jwt.decode(token, {
-      complete: true
-    });
-    if (!decoded || typeof decoded === "string") {
-      return null;
-    }
-    if (typeof decoded.payload === "string") {
-      return null;
-    }
-
-    // TODO: validate expiration claim and exit early if expired
-
-    for (const provider of this.providers) {
-      // Check if provider is applicable
-      if (provider.isApplicable(decoded.payload)) {
-        // Use provider to get identity
-        const identity = await provider.getIdentity(token, decoded);
-        if (identity) {
-          // We treat all IDP identities as external by default.
-          const isExternal = identity.profile?.external ?? true;
-          return {
-            ...identity,
-            type: identity.type ?? "admin",
-            profile: {
-              ...(identity.profile ?? {}),
-              external: isExternal
+    async authenticate(token) {
+        if (!isJwt(token)) return null;
+        const decoded = jsonwebtoken.decode(token, {
+            complete: true
+        });
+        if (!decoded || "string" == typeof decoded) return null;
+        if ("string" == typeof decoded.payload) return null;
+        for (const provider of this.providers)if (provider.isApplicable(decoded.payload)) {
+            const identity = await provider.getIdentity(token, decoded);
+            if (identity) {
+                const isExternal = identity.profile?.external ?? true;
+                return {
+                    ...identity,
+                    type: identity.type ?? "admin",
+                    profile: {
+                        ...identity.profile ?? {},
+                        external: isExternal
+                    }
+                };
             }
-          };
         }
-      }
+        return null;
     }
-
-    // No applicable provider found
-    return null;
-  }
 }
-export const JwtAuthenticator = Authenticator.createImplementation({
-  implementation: JwtAuthenticatorImpl,
-  dependencies: [[JwtIdentityProvider, {
-    multiple: true
-  }]]
+const JwtAuthenticator = Authenticator.createImplementation({
+    implementation: JwtAuthenticatorImpl,
+    dependencies: [
+        [
+            JwtIdentityProvider,
+            {
+                multiple: true
+            }
+        ]
+    ]
 });
+export { JwtAuthenticator };
 
 //# sourceMappingURL=JwtAuthenticator.js.map

package/idp/JwtAuthenticator.js.map

@@ -1 +1 @@
-{"version":3,"names":["jwt","Authenticator","JwtIdentityProvider","isJwt","JwtAuthenticatorImpl","constructor","providers","authenticate","token","decoded","decode","complete","payload","provider","isApplicable","identity","getIdentity","isExternal","profile","external","type","JwtAuthenticator","createImplementation","implementation","dependencies","multiple"],"sources":["JwtAuthenticator.ts"],"sourcesContent":["import jwt from \"jsonwebtoken\";\nimport { Authenticator } from \"~/features/security/authentication/Authenticator/abstractions.js\";\nimport { IdentityProvider, JwtIdentityProvider } from \"./abstractions.js\";\nimport { isJwt } from \"~/features/security/utils/isJwt.js\";\nimport type { IdentityData } from \"~/features/security/IdentityContext/Identity.js\";\n\nclass JwtAuthenticatorImpl implements Authenticator.Interface {\n    constructor(private providers: JwtIdentityProvider.Interface[]) {}\n\n    async authenticate(token: string): Promise<IdentityData | null> {\n        if (!isJwt(token)) {\n            return null;\n        }\n\n        // Decode JWT to get payload\n        const decoded = jwt.decode(token, { complete: true });\n        if (!decoded || typeof decoded === \"string\") {\n            return null;\n        }\n\n        if (typeof decoded.payload === \"string\") {\n            return null;\n        }\n\n        // TODO: validate expiration claim and exit early if expired\n\n        for (const provider of this.providers) {\n            // Check if provider is applicable\n            if (provider.isApplicable(decoded.payload as IdentityProvider.JwtPayload)) {\n                // Use provider to get identity\n                const identity = await provider.getIdentity(\n                    token,\n                    decoded as JwtIdentityProvider.Jwt\n                );\n\n                if (identity) {\n                    // We treat all IDP identities as external by default.\n                    const isExternal = identity.profile?.external ?? true;\n                    return {\n                        ...identity,\n                        type: identity.type ?? \"admin\",\n                        profile: {\n                            ...(identity.profile ?? {}),\n                            external: isExternal\n                        }\n                    };\n                }\n            }\n        }\n\n        // No applicable provider found\n        return null;\n    }\n}\n\nexport const JwtAuthenticator = Authenticator.createImplementation({\n    implementation: JwtAuthenticatorImpl,\n    dependencies: [[JwtIdentityProvider, { multiple: true }]]\n});\n"],"mappings":"AAAA,OAAOA,GAAG,MAAM,cAAc;AAC9B,SAASC,aAAa;AACtB,SAA2BC,mBAAmB;AAC9C,SAASC,KAAK;AAGd,MAAMC,oBAAoB,CAAoC;EAC1DC,WAAWA,CAASC,SAA0C,EAAE;IAAA,KAA5CA,SAA0C,GAA1CA,SAA0C;EAAG;EAEjE,MAAMC,YAAYA,CAACC,KAAa,EAAgC;IAC5D,IAAI,CAACL,KAAK,CAACK,KAAK,CAAC,EAAE;MACf,OAAO,IAAI;IACf;;IAEA;IACA,MAAMC,OAAO,GAAGT,GAAG,CAACU,MAAM,CAACF,KAAK,EAAE;MAAEG,QAAQ,EAAE;IAAK,CAAC,CAAC;IACrD,IAAI,CAACF,OAAO,IAAI,OAAOA,OAAO,KAAK,QAAQ,EAAE;MACzC,OAAO,IAAI;IACf;IAEA,IAAI,OAAOA,OAAO,CAACG,OAAO,KAAK,QAAQ,EAAE;MACrC,OAAO,IAAI;IACf;;IAEA;;IAEA,KAAK,MAAMC,QAAQ,IAAI,IAAI,CAACP,SAAS,EAAE;MACnC;MACA,IAAIO,QAAQ,CAACC,YAAY,CAACL,OAAO,CAACG,OAAsC,CAAC,EAAE;QACvE;QACA,MAAMG,QAAQ,GAAG,MAAMF,QAAQ,CAACG,WAAW,CACvCR,KAAK,EACLC,OACJ,CAAC;QAED,IAAIM,QAAQ,EAAE;UACV;UACA,MAAME,UAAU,GAAGF,QAAQ,CAACG,OAAO,EAAEC,QAAQ,IAAI,IAAI;UACrD,OAAO;YACH,GAAGJ,QAAQ;YACXK,IAAI,EAAEL,QAAQ,CAACK,IAAI,IAAI,OAAO;YAC9BF,OAAO,EAAE;cACL,IAAIH,QAAQ,CAACG,OAAO,IAAI,CAAC,CAAC,CAAC;cAC3BC,QAAQ,EAAEF;YACd;UACJ,CAAC;QACL;MACJ;IACJ;;IAEA;IACA,OAAO,IAAI;EACf;AACJ;AAEA,OAAO,MAAMI,gBAAgB,GAAGpB,aAAa,CAACqB,oBAAoB,CAAC;EAC/DC,cAAc,EAAEnB,oBAAoB;EACpCoB,YAAY,EAAE,CAAC,CAACtB,mBAAmB,EAAE;IAAEuB,QAAQ,EAAE;EAAK,CAAC,CAAC;AAC5D,CAAC,CAAC","ignoreList":[]}
+{"version":3,"file":"idp/JwtAuthenticator.js","sources":["../../src/idp/JwtAuthenticator.ts"],"sourcesContent":["import jwt from \"jsonwebtoken\";\nimport { Authenticator } from \"~/features/security/authentication/Authenticator/abstractions.js\";\nimport { IdentityProvider, JwtIdentityProvider } from \"./abstractions.js\";\nimport { isJwt } from \"~/features/security/utils/isJwt.js\";\nimport type { IdentityData } from \"~/features/security/IdentityContext/Identity.js\";\n\nclass JwtAuthenticatorImpl implements Authenticator.Interface {\n    constructor(private providers: JwtIdentityProvider.Interface[]) {}\n\n    async authenticate(token: string): Promise<IdentityData | null> {\n        if (!isJwt(token)) {\n            return null;\n        }\n\n        // Decode JWT to get payload\n        const decoded = jwt.decode(token, { complete: true });\n        if (!decoded || typeof decoded === \"string\") {\n            return null;\n        }\n\n        if (typeof decoded.payload === \"string\") {\n            return null;\n        }\n\n        // TODO: validate expiration claim and exit early if expired\n\n        for (const provider of this.providers) {\n            // Check if provider is applicable\n            if (provider.isApplicable(decoded.payload as IdentityProvider.JwtPayload)) {\n                // Use provider to get identity\n                const identity = await provider.getIdentity(\n                    token,\n                    decoded as JwtIdentityProvider.Jwt\n                );\n\n                if (identity) {\n                    // We treat all IDP identities as external by default.\n                    const isExternal = identity.profile?.external ?? true;\n                    return {\n                        ...identity,\n                        type: identity.type ?? \"admin\",\n                        profile: {\n                            ...(identity.profile ?? {}),\n                            external: isExternal\n                        }\n                    };\n                }\n            }\n        }\n\n        // No applicable provider found\n        return null;\n    }\n}\n\nexport const JwtAuthenticator = Authenticator.createImplementation({\n    implementation: JwtAuthenticatorImpl,\n    dependencies: [[JwtIdentityProvider, { multiple: true }]]\n});\n"],"names":["JwtAuthenticatorImpl","providers","token","isJwt","decoded","jwt","provider","identity","isExternal","JwtAuthenticator","Authenticator","JwtIdentityProvider"],"mappings":";;;;AAMA,MAAMA;IACF,YAAoBC,SAA0C,CAAE;aAA5CA,SAAS,GAATA;IAA6C;IAEjE,MAAM,aAAaC,KAAa,EAAgC;QAC5D,IAAI,CAACC,MAAMD,QACP,OAAO;QAIX,MAAME,UAAUC,aAAAA,MAAU,CAACH,OAAO;YAAE,UAAU;QAAK;QACnD,IAAI,CAACE,WAAW,AAAmB,YAAnB,OAAOA,SACnB,OAAO;QAGX,IAAI,AAA2B,YAA3B,OAAOA,QAAQ,OAAO,EACtB,OAAO;QAKX,KAAK,MAAME,YAAY,IAAI,CAAC,SAAS,CAEjC,IAAIA,SAAS,YAAY,CAACF,QAAQ,OAAO,GAAkC;YAEvE,MAAMG,WAAW,MAAMD,SAAS,WAAW,CACvCJ,OACAE;YAGJ,IAAIG,UAAU;gBAEV,MAAMC,aAAaD,SAAS,OAAO,EAAE,YAAY;gBACjD,OAAO;oBACH,GAAGA,QAAQ;oBACX,MAAMA,SAAS,IAAI,IAAI;oBACvB,SAAS;wBACL,GAAIA,SAAS,OAAO,IAAI,CAAC,CAAC;wBAC1B,UAAUC;oBACd;gBACJ;YACJ;QACJ;QAIJ,OAAO;IACX;AACJ;AAEO,MAAMC,mBAAmBC,cAAc,oBAAoB,CAAC;IAC/D,gBAAgBV;IAChB,cAAc;QAAC;YAACW;YAAqB;gBAAE,UAAU;YAAK;SAAE;KAAC;AAC7D"}