@webiny/api-core 0.0.0-unstable.e2758ee1cf → 0.0.0-unstable.e6f0dc8ca7

package/features/security/apiKeys/shared/abstractions.js.map

@@ -1 +1 @@
-{"version":3,"names":["createAbstraction","ApiKeysRepository","ApiKeyFactory","ApiKeyProvider"],"sources":["abstractions.ts"],"sourcesContent":["import { createAbstraction } from \"@webiny/feature/api\";\nimport { Result } from \"@webiny/feature/api\";\nimport type { ApiKey, ListApiKeysInput } from \"./types.js\";\nimport {\n    type ApiKeyNotFoundError,\n    ApiKeyPersistenceError,\n    ApiKeyValidationError\n} from \"./errors.js\";\n\nexport interface IApiKeysRepositoryErrors {\n    base: ApiKeyNotFoundError | ApiKeyPersistenceError | ApiKeyValidationError;\n}\n\ntype RepositoryError = IApiKeysRepositoryErrors[keyof IApiKeysRepositoryErrors];\n\nexport interface IApiKeysRepository {\n    get(id: string): Promise<Result<ApiKey, RepositoryError>>;\n    getByToken(token: string): Promise<Result<ApiKey, RepositoryError>>;\n    getBySlug(token: string): Promise<Result<ApiKey, RepositoryError>>;\n    list(params: ListApiKeysInput): Promise<Result<ApiKey[], RepositoryError>>;\n    create(data: ApiKey): Promise<Result<void, RepositoryError>>;\n    update(data: ApiKey): Promise<Result<void, RepositoryError>>;\n    delete(apiKey: ApiKey): Promise<Result<void, RepositoryError>>;\n}\n\nexport const ApiKeysRepository = createAbstraction<IApiKeysRepository>(\"ApiKeysRepository\");\n\nexport namespace ApiKeysRepository {\n    export type Interface = IApiKeysRepository;\n    export type Error = RepositoryError;\n}\n\nexport type CodeApiKey = Pick<ApiKey, \"name\" | \"permissions\" | \"slug\"> & {\n    token: `wat_${string}`;\n};\n\nexport interface IApiKeyFactory {\n    execute(): Promise<CodeApiKey[]> | CodeApiKey[];\n}\n\nexport const ApiKeyFactory = createAbstraction<IApiKeyFactory>(\"ApiKeyFactory\");\n\nexport namespace ApiKeyFactory {\n    export type Interface = IApiKeyFactory;\n    export type Return = Promise<CodeApiKey[]> | CodeApiKey[];\n    export type ApiKey = CodeApiKey;\n}\n\nexport interface IApiKeyProvider {\n    getByToken(token: string): Promise<ApiKey | null>;\n    getBySlug(slug: string): Promise<ApiKey | null>;\n}\n\nexport const ApiKeyProvider = createAbstraction<IApiKeyProvider>(\"ApiKeyProvider\");\n\nexport namespace ApiKeyProvider {\n    export type Interface = IApiKeyProvider;\n}\n"],"mappings":"AAAA,SAASA,iBAAiB,QAAQ,qBAAqB;AAyBvD,OAAO,MAAMC,iBAAiB,GAAGD,iBAAiB,CAAqB,mBAAmB,CAAC;AAe3F,OAAO,MAAME,aAAa,GAAGF,iBAAiB,CAAiB,eAAe,CAAC;AAa/E,OAAO,MAAMG,cAAc,GAAGH,iBAAiB,CAAkB,gBAAgB,CAAC","ignoreList":[]}
+{"version":3,"names":["createAbstraction","ApiKeysRepository","ApiKeyFactory","ApiKeyProvider"],"sources":["abstractions.ts"],"sourcesContent":["import { createAbstraction } from \"@webiny/feature/api\";\nimport { Result } from \"@webiny/feature/api\";\nimport type { ApiKey, ListApiKeysInput } from \"./types.js\";\nimport {\n    type ApiKeyNotFoundError,\n    ApiKeyPersistenceError,\n    ApiKeyValidationError\n} from \"./errors.js\";\n\nexport interface IApiKeysRepositoryErrors {\n    base: ApiKeyNotFoundError | ApiKeyPersistenceError | ApiKeyValidationError;\n}\n\ntype RepositoryError = IApiKeysRepositoryErrors[keyof IApiKeysRepositoryErrors];\n\nexport interface IApiKeysRepository {\n    get(id: string): Promise<Result<ApiKey, RepositoryError>>;\n    getByToken(token: string): Promise<Result<ApiKey, RepositoryError>>;\n    getBySlug(token: string): Promise<Result<ApiKey, RepositoryError>>;\n    list(params: ListApiKeysInput): Promise<Result<ApiKey[], RepositoryError>>;\n    create(data: ApiKey): Promise<Result<void, RepositoryError>>;\n    update(data: ApiKey): Promise<Result<void, RepositoryError>>;\n    delete(apiKey: ApiKey): Promise<Result<void, RepositoryError>>;\n}\n\n/** Persist and retrieve API keys. */\nexport const ApiKeysRepository = createAbstraction<IApiKeysRepository>(\"ApiKeysRepository\");\n\nexport namespace ApiKeysRepository {\n    export type Interface = IApiKeysRepository;\n    export type Error = RepositoryError;\n}\n\nexport type CodeApiKey = Pick<ApiKey, \"name\" | \"permissions\" | \"slug\"> & {\n    token: `wat_${string}`;\n};\n\nexport interface IApiKeyFactory {\n    execute(): Promise<CodeApiKey[]>;\n}\n\n/** Provide code-defined API keys. */\nexport const ApiKeyFactory = createAbstraction<IApiKeyFactory>(\"ApiKeyFactory\");\n\nexport namespace ApiKeyFactory {\n    export type Interface = IApiKeyFactory;\n    export type Return = Promise<CodeApiKey[]>;\n    export type ApiKey = CodeApiKey;\n}\n\nexport interface IApiKeyProvider {\n    getByToken(token: string): Promise<ApiKey | null>;\n    getBySlug(slug: string): Promise<ApiKey | null>;\n}\n\n/** Retrieve API keys by token or slug. */\nexport const ApiKeyProvider = createAbstraction<IApiKeyProvider>(\"ApiKeyProvider\");\n\nexport namespace ApiKeyProvider {\n    export type Interface = IApiKeyProvider;\n}\n"],"mappings":"AAAA,SAASA,iBAAiB,QAAQ,qBAAqB;AAyBvD;AACA,OAAO,MAAMC,iBAAiB,GAAGD,iBAAiB,CAAqB,mBAAmB,CAAC;AAe3F;AACA,OAAO,MAAME,aAAa,GAAGF,iBAAiB,CAAiB,eAAe,CAAC;AAa/E;AACA,OAAO,MAAMG,cAAc,GAAGH,iBAAiB,CAAkB,gBAAgB,CAAC","ignoreList":[]}

package/features/security/apiKeys/shared/schemas.d.ts

@@ -5,87 +5,26 @@ export declare const createApiKeyInputSchema: z.ZodObject<{
     description: z.ZodString;
     permissions: z.ZodDefault<z.ZodOptional<z.ZodArray<z.ZodObject<{
         name: z.ZodString;
-    }, "passthrough", z.ZodTypeAny, z.objectOutputType<{
-        name: z.ZodString;
-    }, z.ZodTypeAny, "passthrough">, z.objectInputType<{
-        name: z.ZodString;
-    }, z.ZodTypeAny, "passthrough">>, "many">>>;
-}, "strip", z.ZodTypeAny, {
-    permissions: z.objectOutputType<{
-        name: z.ZodString;
-    }, z.ZodTypeAny, "passthrough">[];
-    name: string;
-    description: string;
-    slug: string;
-}, {
-    name: string;
-    description: string;
-    slug: string;
-    permissions?: z.objectInputType<{
-        name: z.ZodString;
-    }, z.ZodTypeAny, "passthrough">[] | undefined;
-}>;
+    }, z.core.$loose>>>>;
+}, z.core.$strip>;
 export declare const updateApiKeyInputSchema: z.ZodObject<{
     name: z.ZodOptional<z.ZodString>;
     description: z.ZodOptional<z.ZodString>;
     permissions: z.ZodDefault<z.ZodOptional<z.ZodArray<z.ZodObject<{
         name: z.ZodString;
-    }, "passthrough", z.ZodTypeAny, z.objectOutputType<{
-        name: z.ZodString;
-    }, z.ZodTypeAny, "passthrough">, z.objectInputType<{
-        name: z.ZodString;
-    }, z.ZodTypeAny, "passthrough">>, "many">>>;
-}, "strip", z.ZodTypeAny, {
-    permissions: z.objectOutputType<{
-        name: z.ZodString;
-    }, z.ZodTypeAny, "passthrough">[];
-    name?: string | undefined;
-    description?: string | undefined;
-}, {
-    permissions?: z.objectInputType<{
-        name: z.ZodString;
-    }, z.ZodTypeAny, "passthrough">[] | undefined;
-    name?: string | undefined;
-    description?: string | undefined;
-}>;
+    }, z.core.$loose>>>>;
+}, z.core.$strip>;
 export declare const listApiKeysInputSchema: z.ZodObject<{
     where: z.ZodOptional<z.ZodObject<{
         name: z.ZodOptional<z.ZodString>;
         name_contains: z.ZodOptional<z.ZodString>;
         description: z.ZodOptional<z.ZodString>;
         description_contains: z.ZodOptional<z.ZodString>;
-    }, "strip", z.ZodTypeAny, {
-        name?: string | undefined;
-        description?: string | undefined;
-        name_contains?: string | undefined;
-        description_contains?: string | undefined;
-    }, {
-        name?: string | undefined;
-        description?: string | undefined;
-        name_contains?: string | undefined;
-        description_contains?: string | undefined;
-    }>>;
+    }, z.core.$strip>>;
     limit: z.ZodOptional<z.ZodNumber>;
     after: z.ZodOptional<z.ZodString>;
-    sort: z.ZodOptional<z.ZodArray<z.ZodEnum<["createdOn_ASC", "createdOn_DESC"]>, "many">>;
-}, "strip", z.ZodTypeAny, {
-    sort?: ("createdOn_ASC" | "createdOn_DESC")[] | undefined;
-    where?: {
-        name?: string | undefined;
-        description?: string | undefined;
-        name_contains?: string | undefined;
-        description_contains?: string | undefined;
-    } | undefined;
-    limit?: number | undefined;
-    after?: string | undefined;
-}, {
-    sort?: ("createdOn_ASC" | "createdOn_DESC")[] | undefined;
-    where?: {
-        name?: string | undefined;
-        description?: string | undefined;
-        name_contains?: string | undefined;
-        description_contains?: string | undefined;
-    } | undefined;
-    limit?: number | undefined;
-    after?: string | undefined;
-}>;
+    sort: z.ZodOptional<z.ZodArray<z.ZodEnum<{
+        createdOn_ASC: "createdOn_ASC";
+        createdOn_DESC: "createdOn_DESC";
+    }>>>;
+}, z.core.$strip>;

package/features/security/apiKeys/shared/schemas.js

@@ -3,16 +3,16 @@ export const createApiKeyInputSchema = z.object({
   name: z.string().min(1),
   slug: z.string().min(1),
   description: z.string(),
-  permissions: z.array(z.object({
+  permissions: z.array(z.looseObject({
     name: z.string()
-  }).passthrough()).optional().default([])
+  })).optional().default([])
 });
 export const updateApiKeyInputSchema = z.object({
   name: z.string().min(1).optional(),
   description: z.string().optional(),
-  permissions: z.array(z.object({
+  permissions: z.array(z.looseObject({
     name: z.string()
-  }).passthrough()).optional().default([])
+  })).optional().default([])
 });
 export const listApiKeysInputSchema = z.object({
   where: z.object({

package/features/security/apiKeys/shared/schemas.js.map

@@ -1 +1 @@
-{"version":3,"names":["z","createApiKeyInputSchema","object","name","string","min","slug","description","permissions","array","passthrough","optional","default","updateApiKeyInputSchema","listApiKeysInputSchema","where","name_contains","description_contains","limit","number","int","positive","max","after","sort","enum"],"sources":["schemas.ts"],"sourcesContent":["import { z } from \"zod\";\n\nexport const createApiKeyInputSchema = z.object({\n    name: z.string().min(1),\n    slug: z.string().min(1),\n    description: z.string(),\n    permissions: z\n        .array(z.object({ name: z.string() }).passthrough())\n        .optional()\n        .default([])\n});\n\nexport const updateApiKeyInputSchema = z.object({\n    name: z.string().min(1).optional(),\n    description: z.string().optional(),\n    permissions: z\n        .array(z.object({ name: z.string() }).passthrough())\n        .optional()\n        .default([])\n});\n\nexport const listApiKeysInputSchema = z.object({\n    where: z\n        .object({\n            name: z.string().optional(),\n            name_contains: z.string().optional(),\n            description: z.string().optional(),\n            description_contains: z.string().optional()\n        })\n        .optional(),\n    limit: z.number().int().positive().max(100).optional(),\n    after: z.string().optional(),\n    sort: z.array(z.enum([\"createdOn_ASC\", \"createdOn_DESC\"])).optional()\n});\n"],"mappings":"AAAA,SAASA,CAAC,QAAQ,KAAK;AAEvB,OAAO,MAAMC,uBAAuB,GAAGD,CAAC,CAACE,MAAM,CAAC;EAC5CC,IAAI,EAAEH,CAAC,CAACI,MAAM,CAAC,CAAC,CAACC,GAAG,CAAC,CAAC,CAAC;EACvBC,IAAI,EAAEN,CAAC,CAACI,MAAM,CAAC,CAAC,CAACC,GAAG,CAAC,CAAC,CAAC;EACvBE,WAAW,EAAEP,CAAC,CAACI,MAAM,CAAC,CAAC;EACvBI,WAAW,EAAER,CAAC,CACTS,KAAK,CAACT,CAAC,CAACE,MAAM,CAAC;IAAEC,IAAI,EAAEH,CAAC,CAACI,MAAM,CAAC;EAAE,CAAC,CAAC,CAACM,WAAW,CAAC,CAAC,CAAC,CACnDC,QAAQ,CAAC,CAAC,CACVC,OAAO,CAAC,EAAE;AACnB,CAAC,CAAC;AAEF,OAAO,MAAMC,uBAAuB,GAAGb,CAAC,CAACE,MAAM,CAAC;EAC5CC,IAAI,EAAEH,CAAC,CAACI,MAAM,CAAC,CAAC,CAACC,GAAG,CAAC,CAAC,CAAC,CAACM,QAAQ,CAAC,CAAC;EAClCJ,WAAW,EAAEP,CAAC,CAACI,MAAM,CAAC,CAAC,CAACO,QAAQ,CAAC,CAAC;EAClCH,WAAW,EAAER,CAAC,CACTS,KAAK,CAACT,CAAC,CAACE,MAAM,CAAC;IAAEC,IAAI,EAAEH,CAAC,CAACI,MAAM,CAAC;EAAE,CAAC,CAAC,CAACM,WAAW,CAAC,CAAC,CAAC,CACnDC,QAAQ,CAAC,CAAC,CACVC,OAAO,CAAC,EAAE;AACnB,CAAC,CAAC;AAEF,OAAO,MAAME,sBAAsB,GAAGd,CAAC,CAACE,MAAM,CAAC;EAC3Ca,KAAK,EAAEf,CAAC,CACHE,MAAM,CAAC;IACJC,IAAI,EAAEH,CAAC,CAACI,MAAM,CAAC,CAAC,CAACO,QAAQ,CAAC,CAAC;IAC3BK,aAAa,EAAEhB,CAAC,CAACI,MAAM,CAAC,CAAC,CAACO,QAAQ,CAAC,CAAC;IACpCJ,WAAW,EAAEP,CAAC,CAACI,MAAM,CAAC,CAAC,CAACO,QAAQ,CAAC,CAAC;IAClCM,oBAAoB,EAAEjB,CAAC,CAACI,MAAM,CAAC,CAAC,CAACO,QAAQ,CAAC;EAC9C,CAAC,CAAC,CACDA,QAAQ,CAAC,CAAC;EACfO,KAAK,EAAElB,CAAC,CAACmB,MAAM,CAAC,CAAC,CAACC,GAAG,CAAC,CAAC,CAACC,QAAQ,CAAC,CAAC,CAACC,GAAG,CAAC,GAAG,CAAC,CAACX,QAAQ,CAAC,CAAC;EACtDY,KAAK,EAAEvB,CAAC,CAACI,MAAM,CAAC,CAAC,CAACO,QAAQ,CAAC,CAAC;EAC5Ba,IAAI,EAAExB,CAAC,CAACS,KAAK,CAACT,CAAC,CAACyB,IAAI,CAAC,CAAC,eAAe,EAAE,gBAAgB,CAAC,CAAC,CAAC,CAACd,QAAQ,CAAC;AACxE,CAAC,CAAC","ignoreList":[]}
+{"version":3,"names":["z","createApiKeyInputSchema","object","name","string","min","slug","description","permissions","array","looseObject","optional","default","updateApiKeyInputSchema","listApiKeysInputSchema","where","name_contains","description_contains","limit","number","int","positive","max","after","sort","enum"],"sources":["schemas.ts"],"sourcesContent":["import { z } from \"zod\";\n\nexport const createApiKeyInputSchema = z.object({\n    name: z.string().min(1),\n    slug: z.string().min(1),\n    description: z.string(),\n    permissions: z\n        .array(z.looseObject({ name: z.string() }))\n        .optional()\n        .default([])\n});\n\nexport const updateApiKeyInputSchema = z.object({\n    name: z.string().min(1).optional(),\n    description: z.string().optional(),\n    permissions: z\n        .array(z.looseObject({ name: z.string() }))\n        .optional()\n        .default([])\n});\n\nexport const listApiKeysInputSchema = z.object({\n    where: z\n        .object({\n            name: z.string().optional(),\n            name_contains: z.string().optional(),\n            description: z.string().optional(),\n            description_contains: z.string().optional()\n        })\n        .optional(),\n    limit: z.number().int().positive().max(100).optional(),\n    after: z.string().optional(),\n    sort: z.array(z.enum([\"createdOn_ASC\", \"createdOn_DESC\"])).optional()\n});\n"],"mappings":"AAAA,SAASA,CAAC,QAAQ,KAAK;AAEvB,OAAO,MAAMC,uBAAuB,GAAGD,CAAC,CAACE,MAAM,CAAC;EAC5CC,IAAI,EAAEH,CAAC,CAACI,MAAM,CAAC,CAAC,CAACC,GAAG,CAAC,CAAC,CAAC;EACvBC,IAAI,EAAEN,CAAC,CAACI,MAAM,CAAC,CAAC,CAACC,GAAG,CAAC,CAAC,CAAC;EACvBE,WAAW,EAAEP,CAAC,CAACI,MAAM,CAAC,CAAC;EACvBI,WAAW,EAAER,CAAC,CACTS,KAAK,CAACT,CAAC,CAACU,WAAW,CAAC;IAAEP,IAAI,EAAEH,CAAC,CAACI,MAAM,CAAC;EAAE,CAAC,CAAC,CAAC,CAC1CO,QAAQ,CAAC,CAAC,CACVC,OAAO,CAAC,EAAE;AACnB,CAAC,CAAC;AAEF,OAAO,MAAMC,uBAAuB,GAAGb,CAAC,CAACE,MAAM,CAAC;EAC5CC,IAAI,EAAEH,CAAC,CAACI,MAAM,CAAC,CAAC,CAACC,GAAG,CAAC,CAAC,CAAC,CAACM,QAAQ,CAAC,CAAC;EAClCJ,WAAW,EAAEP,CAAC,CAACI,MAAM,CAAC,CAAC,CAACO,QAAQ,CAAC,CAAC;EAClCH,WAAW,EAAER,CAAC,CACTS,KAAK,CAACT,CAAC,CAACU,WAAW,CAAC;IAAEP,IAAI,EAAEH,CAAC,CAACI,MAAM,CAAC;EAAE,CAAC,CAAC,CAAC,CAC1CO,QAAQ,CAAC,CAAC,CACVC,OAAO,CAAC,EAAE;AACnB,CAAC,CAAC;AAEF,OAAO,MAAME,sBAAsB,GAAGd,CAAC,CAACE,MAAM,CAAC;EAC3Ca,KAAK,EAAEf,CAAC,CACHE,MAAM,CAAC;IACJC,IAAI,EAAEH,CAAC,CAACI,MAAM,CAAC,CAAC,CAACO,QAAQ,CAAC,CAAC;IAC3BK,aAAa,EAAEhB,CAAC,CAACI,MAAM,CAAC,CAAC,CAACO,QAAQ,CAAC,CAAC;IACpCJ,WAAW,EAAEP,CAAC,CAACI,MAAM,CAAC,CAAC,CAACO,QAAQ,CAAC,CAAC;IAClCM,oBAAoB,EAAEjB,CAAC,CAACI,MAAM,CAAC,CAAC,CAACO,QAAQ,CAAC;EAC9C,CAAC,CAAC,CACDA,QAAQ,CAAC,CAAC;EACfO,KAAK,EAAElB,CAAC,CAACmB,MAAM,CAAC,CAAC,CAACC,GAAG,CAAC,CAAC,CAACC,QAAQ,CAAC,CAAC,CAACC,GAAG,CAAC,GAAG,CAAC,CAACX,QAAQ,CAAC,CAAC;EACtDY,KAAK,EAAEvB,CAAC,CAACI,MAAM,CAAC,CAAC,CAACO,QAAQ,CAAC,CAAC;EAC5Ba,IAAI,EAAExB,CAAC,CAACS,KAAK,CAACT,CAAC,CAACyB,IAAI,CAAC,CAAC,eAAe,EAAE,gBAAgB,CAAC,CAAC,CAAC,CAACd,QAAQ,CAAC;AACxE,CAAC,CAAC","ignoreList":[]}

package/features/security/authentication/AuthenticationContext/SetIdTokenCookie.d.ts

@@ -1,7 +1,7 @@
 import { Reply } from "@webiny/handler";
-import { AfterAuthenticationHandler } from "../../../../features/security/authentication/AuthenticationContext/index.js";
+import { AfterAuthenticationEventHandler } from "../../../../features/security/authentication/AuthenticationContext/index.js";
 import { AuthenticationContext } from "../../../../features/security/authentication/AuthenticationContext/index.js";
-declare class SetIdTokenCookieImpl implements AfterAuthenticationHandler.Interface {
+declare class SetIdTokenCookieImpl implements AfterAuthenticationEventHandler.Interface {
     private authenticationContext;
     private reply;
     constructor(authenticationContext: AuthenticationContext.Interface, reply: Reply.Interface);

package/features/security/authentication/AuthenticationContext/SetIdTokenCookie.js

@@ -1,7 +1,7 @@
 import jwt from "jsonwebtoken";
 import { createImplementation } from "@webiny/feature/api";
 import { Reply } from "@webiny/handler";
-import { AfterAuthenticationHandler } from "./index.js";
+import { AfterAuthenticationEventHandler } from "./index.js";
 import { AuthenticationContext } from "./index.js";
 const get24HoursFromNow = () => {
   const oneHour = 1000 * 60 * 60;
@@ -44,7 +44,7 @@ class SetIdTokenCookieImpl {
   }
 }
 export const SetIdTokenCookie = createImplementation({
-  abstraction: AfterAuthenticationHandler,
+  abstraction: AfterAuthenticationEventHandler,
   implementation: SetIdTokenCookieImpl,
   dependencies: [AuthenticationContext, Reply]
 });

package/features/security/authentication/AuthenticationContext/SetIdTokenCookie.js.map

@@ -1 +1 @@
-{"version":3,"names":["jwt","createImplementation","Reply","AfterAuthenticationHandler","AuthenticationContext","get24HoursFromNow","oneHour","Date","getTime","toDate","timestamp","SetIdTokenCookieImpl","constructor","authenticationContext","reply","handle","token","getAuthToken","tokenData","decode","json","expiresOn","exp","setCookie","path","expires","sameSite","secure","httpOnly","header","SetIdTokenCookie","abstraction","implementation","dependencies"],"sources":["SetIdTokenCookie.ts"],"sourcesContent":["import jwt from \"jsonwebtoken\";\nimport { createImplementation } from \"@webiny/feature/api\";\nimport { Reply } from \"@webiny/handler\";\nimport { AfterAuthenticationHandler } from \"~/features/security/authentication/AuthenticationContext/index.js\";\nimport { AuthenticationContext } from \"~/features/security/authentication/AuthenticationContext/index.js\";\n\nconst get24HoursFromNow = () => {\n    const oneHour = 1000 * 60 * 60;\n    return new Date(new Date().getTime() + oneHour * 24);\n};\n\nconst toDate = (timestamp: number | undefined) => {\n    return timestamp ? new Date(timestamp * 1000) : get24HoursFromNow();\n};\n\nclass SetIdTokenCookieImpl implements AfterAuthenticationHandler.Interface {\n    constructor(\n        private authenticationContext: AuthenticationContext.Interface,\n        private reply: Reply.Interface\n    ) {}\n\n    async handle(): Promise<void> {\n        const token = this.authenticationContext.getAuthToken();\n\n        if (!token) {\n            return;\n        }\n\n        // Attempt to acquire expiration from the token; fall back to \"expire in 24 hours\".\n        // In most cases the token will be a JWT token, but it can also be a custom token, or an API key.\n        const tokenData = jwt.decode(token, { json: true });\n        const expiresOn = tokenData ? toDate(tokenData.exp) : get24HoursFromNow();\n\n        // @see https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Set-Cookie\n        this.reply.setCookie(\"wby-id-token\", token, {\n            path: \"/\",\n            expires: expiresOn,\n            // Allow this cookie to be sent with cross-origin requests.\n            sameSite: \"none\",\n            // Only send this cookie to the server when HTTPS is used.\n            // NOTE: `https` requirement is ignored for `localhost.\n            secure: true,\n            // Forbids JavaScript from accessing the cookie.\n            httpOnly: true\n        });\n\n        this.reply.header(\"cache-control\", `no-cache=\"Set-Cookie\"`);\n    }\n}\n\nexport const SetIdTokenCookie = createImplementation({\n    abstraction: AfterAuthenticationHandler,\n    implementation: SetIdTokenCookieImpl,\n    dependencies: [AuthenticationContext, Reply]\n});\n"],"mappings":"AAAA,OAAOA,GAAG,MAAM,cAAc;AAC9B,SAASC,oBAAoB,QAAQ,qBAAqB;AAC1D,SAASC,KAAK,QAAQ,iBAAiB;AACvC,SAASC,0BAA0B;AACnC,SAASC,qBAAqB;AAE9B,MAAMC,iBAAiB,GAAGA,CAAA,KAAM;EAC5B,MAAMC,OAAO,GAAG,IAAI,GAAG,EAAE,GAAG,EAAE;EAC9B,OAAO,IAAIC,IAAI,CAAC,IAAIA,IAAI,CAAC,CAAC,CAACC,OAAO,CAAC,CAAC,GAAGF,OAAO,GAAG,EAAE,CAAC;AACxD,CAAC;AAED,MAAMG,MAAM,GAAIC,SAA6B,IAAK;EAC9C,OAAOA,SAAS,GAAG,IAAIH,IAAI,CAACG,SAAS,GAAG,IAAI,CAAC,GAAGL,iBAAiB,CAAC,CAAC;AACvE,CAAC;AAED,MAAMM,oBAAoB,CAAiD;EACvEC,WAAWA,CACCC,qBAAsD,EACtDC,KAAsB,EAChC;IAAA,KAFUD,qBAAsD,GAAtDA,qBAAsD;IAAA,KACtDC,KAAsB,GAAtBA,KAAsB;EAC/B;EAEH,MAAMC,MAAMA,CAAA,EAAkB;IAC1B,MAAMC,KAAK,GAAG,IAAI,CAACH,qBAAqB,CAACI,YAAY,CAAC,CAAC;IAEvD,IAAI,CAACD,KAAK,EAAE;MACR;IACJ;;IAEA;IACA;IACA,MAAME,SAAS,GAAGlB,GAAG,CAACmB,MAAM,CAACH,KAAK,EAAE;MAAEI,IAAI,EAAE;IAAK,CAAC,CAAC;IACnD,MAAMC,SAAS,GAAGH,SAAS,GAAGT,MAAM,CAACS,SAAS,CAACI,GAAG,CAAC,GAAGjB,iBAAiB,CAAC,CAAC;;IAEzE;IACA,IAAI,CAACS,KAAK,CAACS,SAAS,CAAC,cAAc,EAAEP,KAAK,EAAE;MACxCQ,IAAI,EAAE,GAAG;MACTC,OAAO,EAAEJ,SAAS;MAClB;MACAK,QAAQ,EAAE,MAAM;MAChB;MACA;MACAC,MAAM,EAAE,IAAI;MACZ;MACAC,QAAQ,EAAE;IACd,CAAC,CAAC;IAEF,IAAI,CAACd,KAAK,CAACe,MAAM,CAAC,eAAe,EAAE,uBAAuB,CAAC;EAC/D;AACJ;AAEA,OAAO,MAAMC,gBAAgB,GAAG7B,oBAAoB,CAAC;EACjD8B,WAAW,EAAE5B,0BAA0B;EACvC6B,cAAc,EAAErB,oBAAoB;EACpCsB,YAAY,EAAE,CAAC7B,qBAAqB,EAAEF,KAAK;AAC/C,CAAC,CAAC","ignoreList":[]}
+{"version":3,"names":["jwt","createImplementation","Reply","AfterAuthenticationEventHandler","AuthenticationContext","get24HoursFromNow","oneHour","Date","getTime","toDate","timestamp","SetIdTokenCookieImpl","constructor","authenticationContext","reply","handle","token","getAuthToken","tokenData","decode","json","expiresOn","exp","setCookie","path","expires","sameSite","secure","httpOnly","header","SetIdTokenCookie","abstraction","implementation","dependencies"],"sources":["SetIdTokenCookie.ts"],"sourcesContent":["import jwt from \"jsonwebtoken\";\nimport { createImplementation } from \"@webiny/feature/api\";\nimport { Reply } from \"@webiny/handler\";\nimport { AfterAuthenticationEventHandler } from \"~/features/security/authentication/AuthenticationContext/index.js\";\nimport { AuthenticationContext } from \"~/features/security/authentication/AuthenticationContext/index.js\";\n\nconst get24HoursFromNow = () => {\n    const oneHour = 1000 * 60 * 60;\n    return new Date(new Date().getTime() + oneHour * 24);\n};\n\nconst toDate = (timestamp: number | undefined) => {\n    return timestamp ? new Date(timestamp * 1000) : get24HoursFromNow();\n};\n\nclass SetIdTokenCookieImpl implements AfterAuthenticationEventHandler.Interface {\n    constructor(\n        private authenticationContext: AuthenticationContext.Interface,\n        private reply: Reply.Interface\n    ) {}\n\n    async handle(): Promise<void> {\n        const token = this.authenticationContext.getAuthToken();\n\n        if (!token) {\n            return;\n        }\n\n        // Attempt to acquire expiration from the token; fall back to \"expire in 24 hours\".\n        // In most cases the token will be a JWT token, but it can also be a custom token, or an API key.\n        const tokenData = jwt.decode(token, { json: true });\n        const expiresOn = tokenData ? toDate(tokenData.exp) : get24HoursFromNow();\n\n        // @see https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Set-Cookie\n        this.reply.setCookie(\"wby-id-token\", token, {\n            path: \"/\",\n            expires: expiresOn,\n            // Allow this cookie to be sent with cross-origin requests.\n            sameSite: \"none\",\n            // Only send this cookie to the server when HTTPS is used.\n            // NOTE: `https` requirement is ignored for `localhost.\n            secure: true,\n            // Forbids JavaScript from accessing the cookie.\n            httpOnly: true\n        });\n\n        this.reply.header(\"cache-control\", `no-cache=\"Set-Cookie\"`);\n    }\n}\n\nexport const SetIdTokenCookie = createImplementation({\n    abstraction: AfterAuthenticationEventHandler,\n    implementation: SetIdTokenCookieImpl,\n    dependencies: [AuthenticationContext, Reply]\n});\n"],"mappings":"AAAA,OAAOA,GAAG,MAAM,cAAc;AAC9B,SAASC,oBAAoB,QAAQ,qBAAqB;AAC1D,SAASC,KAAK,QAAQ,iBAAiB;AACvC,SAASC,+BAA+B;AACxC,SAASC,qBAAqB;AAE9B,MAAMC,iBAAiB,GAAGA,CAAA,KAAM;EAC5B,MAAMC,OAAO,GAAG,IAAI,GAAG,EAAE,GAAG,EAAE;EAC9B,OAAO,IAAIC,IAAI,CAAC,IAAIA,IAAI,CAAC,CAAC,CAACC,OAAO,CAAC,CAAC,GAAGF,OAAO,GAAG,EAAE,CAAC;AACxD,CAAC;AAED,MAAMG,MAAM,GAAIC,SAA6B,IAAK;EAC9C,OAAOA,SAAS,GAAG,IAAIH,IAAI,CAACG,SAAS,GAAG,IAAI,CAAC,GAAGL,iBAAiB,CAAC,CAAC;AACvE,CAAC;AAED,MAAMM,oBAAoB,CAAsD;EAC5EC,WAAWA,CACCC,qBAAsD,EACtDC,KAAsB,EAChC;IAAA,KAFUD,qBAAsD,GAAtDA,qBAAsD;IAAA,KACtDC,KAAsB,GAAtBA,KAAsB;EAC/B;EAEH,MAAMC,MAAMA,CAAA,EAAkB;IAC1B,MAAMC,KAAK,GAAG,IAAI,CAACH,qBAAqB,CAACI,YAAY,CAAC,CAAC;IAEvD,IAAI,CAACD,KAAK,EAAE;MACR;IACJ;;IAEA;IACA;IACA,MAAME,SAAS,GAAGlB,GAAG,CAACmB,MAAM,CAACH,KAAK,EAAE;MAAEI,IAAI,EAAE;IAAK,CAAC,CAAC;IACnD,MAAMC,SAAS,GAAGH,SAAS,GAAGT,MAAM,CAACS,SAAS,CAACI,GAAG,CAAC,GAAGjB,iBAAiB,CAAC,CAAC;;IAEzE;IACA,IAAI,CAACS,KAAK,CAACS,SAAS,CAAC,cAAc,EAAEP,KAAK,EAAE;MACxCQ,IAAI,EAAE,GAAG;MACTC,OAAO,EAAEJ,SAAS;MAClB;MACAK,QAAQ,EAAE,MAAM;MAChB;MACA;MACAC,MAAM,EAAE,IAAI;MACZ;MACAC,QAAQ,EAAE;IACd,CAAC,CAAC;IAEF,IAAI,CAACd,KAAK,CAACe,MAAM,CAAC,eAAe,EAAE,uBAAuB,CAAC;EAC/D;AACJ;AAEA,OAAO,MAAMC,gBAAgB,GAAG7B,oBAAoB,CAAC;EACjD8B,WAAW,EAAE5B,+BAA+B;EAC5C6B,cAAc,EAAErB,oBAAoB;EACpCsB,YAAY,EAAE,CAAC7B,qBAAqB,EAAEF,KAAK;AAC/C,CAAC,CAAC","ignoreList":[]}

package/features/security/authentication/AuthenticationContext/abstractions.d.ts

@@ -3,6 +3,7 @@ export interface IAuthenticationContext {
     authenticate(token: string): Promise<Identity>;
     getAuthToken(): string | undefined;
 }
+/** Authenticate incoming requests and resolve the current identity. */
 export declare const AuthenticationContext: import("@webiny/di").Abstraction<IAuthenticationContext>;
 export declare namespace AuthenticationContext {
     type Interface = IAuthenticationContext;

package/features/security/authentication/AuthenticationContext/abstractions.js

@@ -1,4 +1,5 @@
 import { createAbstraction } from "@webiny/feature/api";
+/** Authenticate incoming requests and resolve the current identity. */
 export const AuthenticationContext = createAbstraction("AuthenticationContext");
 
 //# sourceMappingURL=abstractions.js.map

package/features/security/authentication/AuthenticationContext/abstractions.js.map

@@ -1 +1 @@
-{"version":3,"names":["createAbstraction","AuthenticationContext"],"sources":["abstractions.ts"],"sourcesContent":["import { createAbstraction } from \"@webiny/feature/api\";\nimport type { Identity } from \"~/features/security/IdentityContext/Identity.js\";\n\nexport interface IAuthenticationContext {\n    authenticate(token: string): Promise<Identity>;\n    getAuthToken(): string | undefined;\n}\n\nexport const AuthenticationContext =\n    createAbstraction<IAuthenticationContext>(\"AuthenticationContext\");\n\nexport namespace AuthenticationContext {\n    export type Interface = IAuthenticationContext;\n}\n"],"mappings":"AAAA,SAASA,iBAAiB,QAAQ,qBAAqB;AAQvD,OAAO,MAAMC,qBAAqB,GAC9BD,iBAAiB,CAAyB,uBAAuB,CAAC","ignoreList":[]}
+{"version":3,"names":["createAbstraction","AuthenticationContext"],"sources":["abstractions.ts"],"sourcesContent":["import { createAbstraction } from \"@webiny/feature/api\";\nimport type { Identity } from \"~/features/security/IdentityContext/Identity.js\";\n\nexport interface IAuthenticationContext {\n    authenticate(token: string): Promise<Identity>;\n    getAuthToken(): string | undefined;\n}\n\n/** Authenticate incoming requests and resolve the current identity. */\nexport const AuthenticationContext =\n    createAbstraction<IAuthenticationContext>(\"AuthenticationContext\");\n\nexport namespace AuthenticationContext {\n    export type Interface = IAuthenticationContext;\n}\n"],"mappings":"AAAA,SAASA,iBAAiB,QAAQ,qBAAqB;AAQvD;AACA,OAAO,MAAMC,qBAAqB,GAC9BD,iBAAiB,CAAyB,uBAAuB,CAAC","ignoreList":[]}

package/features/security/authentication/AuthenticationContext/events.d.ts

@@ -8,8 +8,9 @@ export declare class BeforeAuthenticationEvent extends DomainEvent<BeforeAuthent
     eventType: "authentication.beforeAuthentication";
     getHandlerAbstraction(): import("@webiny/di").Abstraction<IEventHandler<BeforeAuthenticationEvent>>;
 }
-export declare const BeforeAuthenticationHandler: import("@webiny/di").Abstraction<IEventHandler<BeforeAuthenticationEvent>>;
-export declare namespace BeforeAuthenticationHandler {
+/** Hook into authentication lifecycle before authentication occurs. */
+export declare const BeforeAuthenticationEventHandler: import("@webiny/di").Abstraction<IEventHandler<BeforeAuthenticationEvent>>;
+export declare namespace BeforeAuthenticationEventHandler {
     type Interface = IEventHandler<BeforeAuthenticationEvent>;
     type Event = BeforeAuthenticationEvent;
 }
@@ -21,8 +22,9 @@ export declare class AfterAuthenticationEvent extends DomainEvent<AfterAuthentic
     eventType: "authentication.afterAuthentication";
     getHandlerAbstraction(): import("@webiny/di").Abstraction<IEventHandler<AfterAuthenticationEvent>>;
 }
-export declare const AfterAuthenticationHandler: import("@webiny/di").Abstraction<IEventHandler<AfterAuthenticationEvent>>;
-export declare namespace AfterAuthenticationHandler {
+/** Hook into authentication lifecycle after authentication occurs. */
+export declare const AfterAuthenticationEventHandler: import("@webiny/di").Abstraction<IEventHandler<AfterAuthenticationEvent>>;
+export declare namespace AfterAuthenticationEventHandler {
     type Interface = IEventHandler<AfterAuthenticationEvent>;
     type Event = AfterAuthenticationEvent;
 }

package/features/security/authentication/AuthenticationContext/events.js

@@ -3,16 +3,20 @@ import { createAbstraction } from "@webiny/feature/api";
 export class BeforeAuthenticationEvent extends DomainEvent {
   eventType = "authentication.beforeAuthentication";
   getHandlerAbstraction() {
-    return BeforeAuthenticationHandler;
+    return BeforeAuthenticationEventHandler;
   }
 }
-export const BeforeAuthenticationHandler = createAbstraction("BeforeAuthenticationHandler");
+
+/** Hook into authentication lifecycle before authentication occurs. */
+export const BeforeAuthenticationEventHandler = createAbstraction("BeforeAuthenticationEventHandler");
 export class AfterAuthenticationEvent extends DomainEvent {
   eventType = "authentication.afterAuthentication";
   getHandlerAbstraction() {
-    return AfterAuthenticationHandler;
+    return AfterAuthenticationEventHandler;
   }
 }
-export const AfterAuthenticationHandler = createAbstraction("AfterAuthenticationHandler");
+
+/** Hook into authentication lifecycle after authentication occurs. */
+export const AfterAuthenticationEventHandler = createAbstraction("AfterAuthenticationEventHandler");
 
 //# sourceMappingURL=events.js.map

package/features/security/authentication/AuthenticationContext/events.js.map

@@ -1 +1 @@
-{"version":3,"names":["DomainEvent","createAbstraction","BeforeAuthenticationEvent","eventType","getHandlerAbstraction","BeforeAuthenticationHandler","AfterAuthenticationEvent","AfterAuthenticationHandler"],"sources":["events.ts"],"sourcesContent":["import { DomainEvent } from \"~/features/eventPublisher/index.js\";\nimport { createAbstraction } from \"@webiny/feature/api\";\nimport type { IEventHandler } from \"~/features/eventPublisher/index.js\";\nimport type { Identity } from \"~/features/security/IdentityContext/Identity.js\";\n\nexport interface BeforeAuthenticationPayload {\n    token: string;\n}\n\nexport class BeforeAuthenticationEvent extends DomainEvent<BeforeAuthenticationPayload> {\n    eventType = \"authentication.beforeAuthentication\" as const;\n\n    getHandlerAbstraction() {\n        return BeforeAuthenticationHandler;\n    }\n}\n\nexport const BeforeAuthenticationHandler = createAbstraction<\n    IEventHandler<BeforeAuthenticationEvent>\n>(\"BeforeAuthenticationHandler\");\n\nexport namespace BeforeAuthenticationHandler {\n    export type Interface = IEventHandler<BeforeAuthenticationEvent>;\n    export type Event = BeforeAuthenticationEvent;\n}\n\nexport interface AfterAuthenticationPayload {\n    identity: Identity;\n    token: string;\n}\n\nexport class AfterAuthenticationEvent extends DomainEvent<AfterAuthenticationPayload> {\n    eventType = \"authentication.afterAuthentication\" as const;\n\n    getHandlerAbstraction() {\n        return AfterAuthenticationHandler;\n    }\n}\n\nexport const AfterAuthenticationHandler = createAbstraction<\n    IEventHandler<AfterAuthenticationEvent>\n>(\"AfterAuthenticationHandler\");\n\nexport namespace AfterAuthenticationHandler {\n    export type Interface = IEventHandler<AfterAuthenticationEvent>;\n    export type Event = AfterAuthenticationEvent;\n}\n"],"mappings":"AAAA,SAASA,WAAW;AACpB,SAASC,iBAAiB,QAAQ,qBAAqB;AAQvD,OAAO,MAAMC,yBAAyB,SAASF,WAAW,CAA8B;EACpFG,SAAS,GAAG,qCAAqC;EAEjDC,qBAAqBA,CAAA,EAAG;IACpB,OAAOC,2BAA2B;EACtC;AACJ;AAEA,OAAO,MAAMA,2BAA2B,GAAGJ,iBAAiB,CAE1D,6BAA6B,CAAC;AAYhC,OAAO,MAAMK,wBAAwB,SAASN,WAAW,CAA6B;EAClFG,SAAS,GAAG,oCAAoC;EAEhDC,qBAAqBA,CAAA,EAAG;IACpB,OAAOG,0BAA0B;EACrC;AACJ;AAEA,OAAO,MAAMA,0BAA0B,GAAGN,iBAAiB,CAEzD,4BAA4B,CAAC","ignoreList":[]}
+{"version":3,"names":["DomainEvent","createAbstraction","BeforeAuthenticationEvent","eventType","getHandlerAbstraction","BeforeAuthenticationEventHandler","AfterAuthenticationEvent","AfterAuthenticationEventHandler"],"sources":["events.ts"],"sourcesContent":["import { DomainEvent } from \"~/features/eventPublisher/index.js\";\nimport { createAbstraction } from \"@webiny/feature/api\";\nimport type { IEventHandler } from \"~/features/eventPublisher/index.js\";\nimport type { Identity } from \"~/features/security/IdentityContext/Identity.js\";\n\nexport interface BeforeAuthenticationPayload {\n    token: string;\n}\n\nexport class BeforeAuthenticationEvent extends DomainEvent<BeforeAuthenticationPayload> {\n    eventType = \"authentication.beforeAuthentication\" as const;\n\n    getHandlerAbstraction() {\n        return BeforeAuthenticationEventHandler;\n    }\n}\n\n/** Hook into authentication lifecycle before authentication occurs. */\nexport const BeforeAuthenticationEventHandler = createAbstraction<\n    IEventHandler<BeforeAuthenticationEvent>\n>(\"BeforeAuthenticationEventHandler\");\n\nexport namespace BeforeAuthenticationEventHandler {\n    export type Interface = IEventHandler<BeforeAuthenticationEvent>;\n    export type Event = BeforeAuthenticationEvent;\n}\n\nexport interface AfterAuthenticationPayload {\n    identity: Identity;\n    token: string;\n}\n\nexport class AfterAuthenticationEvent extends DomainEvent<AfterAuthenticationPayload> {\n    eventType = \"authentication.afterAuthentication\" as const;\n\n    getHandlerAbstraction() {\n        return AfterAuthenticationEventHandler;\n    }\n}\n\n/** Hook into authentication lifecycle after authentication occurs. */\nexport const AfterAuthenticationEventHandler = createAbstraction<\n    IEventHandler<AfterAuthenticationEvent>\n>(\"AfterAuthenticationEventHandler\");\n\nexport namespace AfterAuthenticationEventHandler {\n    export type Interface = IEventHandler<AfterAuthenticationEvent>;\n    export type Event = AfterAuthenticationEvent;\n}\n"],"mappings":"AAAA,SAASA,WAAW;AACpB,SAASC,iBAAiB,QAAQ,qBAAqB;AAQvD,OAAO,MAAMC,yBAAyB,SAASF,WAAW,CAA8B;EACpFG,SAAS,GAAG,qCAAqC;EAEjDC,qBAAqBA,CAAA,EAAG;IACpB,OAAOC,gCAAgC;EAC3C;AACJ;;AAEA;AACA,OAAO,MAAMA,gCAAgC,GAAGJ,iBAAiB,CAE/D,kCAAkC,CAAC;AAYrC,OAAO,MAAMK,wBAAwB,SAASN,WAAW,CAA6B;EAClFG,SAAS,GAAG,oCAAoC;EAEhDC,qBAAqBA,CAAA,EAAG;IACpB,OAAOG,+BAA+B;EAC1C;AACJ;;AAEA;AACA,OAAO,MAAMA,+BAA+B,GAAGN,iBAAiB,CAE9D,iCAAiC,CAAC","ignoreList":[]}

package/features/security/authentication/AuthenticationContext/feature.d.ts

@@ -1 +1,4 @@
-export declare const AuthenticationContextFeature: import("@webiny/feature/api/createFeature.js").FeatureDefinition<unknown>;
+export declare const AuthenticationContextFeature: {
+    name: string;
+    register(container: import("@webiny/di").Container): void;
+};

package/features/security/authentication/Authenticator/abstractions.d.ts

@@ -2,6 +2,7 @@ import type { IdentityData } from "../../../../features/security/IdentityContext
 export interface IAuthenticator {
     authenticate(token: string): Promise<IdentityData | null>;
 }
+/** Convert an authentication token into identity data. */
 export declare const Authenticator: import("@webiny/di").Abstraction<IAuthenticator>;
 export declare namespace Authenticator {
     type Interface = IAuthenticator;

package/features/security/authentication/Authenticator/abstractions.js

@@ -1,4 +1,5 @@
 import { createAbstraction } from "@webiny/feature/api";
+/** Convert an authentication token into identity data. */
 export const Authenticator = createAbstraction("Authenticator");
 
 //# sourceMappingURL=abstractions.js.map

package/features/security/authentication/Authenticator/abstractions.js.map

@@ -1 +1 @@
-{"version":3,"names":["createAbstraction","Authenticator"],"sources":["abstractions.ts"],"sourcesContent":["import { createAbstraction } from \"@webiny/feature/api\";\nimport type { IdentityData } from \"~/features/security/IdentityContext/Identity.js\";\n\nexport interface IAuthenticator {\n    authenticate(token: string): Promise<IdentityData | null>;\n}\n\nexport const Authenticator = createAbstraction<IAuthenticator>(\"Authenticator\");\n\nexport namespace Authenticator {\n    export type Interface = IAuthenticator;\n}\n"],"mappings":"AAAA,SAASA,iBAAiB,QAAQ,qBAAqB;AAOvD,OAAO,MAAMC,aAAa,GAAGD,iBAAiB,CAAiB,eAAe,CAAC","ignoreList":[]}
+{"version":3,"names":["createAbstraction","Authenticator"],"sources":["abstractions.ts"],"sourcesContent":["import { createAbstraction } from \"@webiny/feature/api\";\nimport type { IdentityData } from \"~/features/security/IdentityContext/Identity.js\";\n\nexport interface IAuthenticator {\n    authenticate(token: string): Promise<IdentityData | null>;\n}\n\n/** Convert an authentication token into identity data. */\nexport const Authenticator = createAbstraction<IAuthenticator>(\"Authenticator\");\n\nexport namespace Authenticator {\n    export type Interface = IAuthenticator;\n}\n"],"mappings":"AAAA,SAASA,iBAAiB,QAAQ,qBAAqB;AAOvD;AACA,OAAO,MAAMC,aAAa,GAAGD,iBAAiB,CAAiB,eAAe,CAAC","ignoreList":[]}

package/features/security/authorization/AuthorizationContext/AuthorizationContext.d.ts

@@ -13,4 +13,5 @@ export declare class AuthorizationContext implements Abstraction.Interface {
     withoutAuthorization<T>(cb: () => Promise<T>): Promise<T>;
     clearPermissionsCache(): void;
     private transformPermissions;
+    private deduplicatePermissions;
 }

package/features/security/authorization/AuthorizationContext/AuthorizationContext.js

@@ -43,12 +43,24 @@ export class AuthorizationContext {
   transformPermissions(permissions) {
     const transformers = this.getTransformers();
     if (transformers.length === 0) {
-      return permissions;
+      return this.deduplicatePermissions(permissions);
     }
-    return permissions.map(permission => {
+    const transformed = permissions.map(permission => {
       // A transformer can return one or multiple permissions, so we flatten the result.
       return transformers.map(t => t.execute(permission)).flat();
     }).flat();
+    return this.deduplicatePermissions(transformed);
+  }
+  deduplicatePermissions(permissions) {
+    const seen = new Set();
+    return permissions.filter(permission => {
+      const key = JSON.stringify(permission);
+      if (seen.has(key)) {
+        return false;
+      }
+      seen.add(key);
+      return true;
+    });
   }
 }
 

package/features/security/authorization/AuthorizationContext/AuthorizationContext.js.map

@@ -1 +1 @@
-{"version":3,"names":["AsyncLocalStorage","authorizationEnabledStorage","AuthorizationContext","constructor","getAuthorizers","getTransformers","loadPermissions","identity","permissions","permissionsLoader","Promise","resolve","authorizers","authorizer","authorize","Array","isArray","transformPermissions","isAuthorizationEnabled","override","getStore","withoutAuthorization","cb","run","clearPermissionsCache","undefined","transformers","length","map","permission","t","execute","flat"],"sources":["AuthorizationContext.ts"],"sourcesContent":["import { AsyncLocalStorage } from \"async_hooks\";\nimport { AuthorizationContext as Abstraction, PermissionTransformer } from \"./abstractions.js\";\nimport { Authorizer } from \"../Authorizer/index.js\";\nimport type { SecurityPermission } from \"~/types/security.js\";\nimport { Identity } from \"~/features/security/IdentityContext/index.js\";\n\nconst authorizationEnabledStorage = new AsyncLocalStorage<boolean>();\n\nexport class AuthorizationContext implements Abstraction.Interface {\n    private permissions?: SecurityPermission[];\n    private permissionsLoader?: Promise<SecurityPermission[]>;\n\n    constructor(\n        private getAuthorizers: () => Authorizer.Interface[],\n        private getTransformers: () => PermissionTransformer.Interface[]\n    ) {}\n\n    async loadPermissions(identity: Identity): Promise<SecurityPermission[]> {\n        if (this.permissions) {\n            return this.permissions;\n        }\n\n        if (this.permissionsLoader) {\n            return this.permissionsLoader;\n        }\n\n        this.permissionsLoader = new Promise<SecurityPermission[]>(async resolve => {\n            // Execute authorizers in sequence until one returns permissions\n            const authorizers = this.getAuthorizers();\n            for (const authorizer of authorizers) {\n                const permissions = await authorizer.authorize(identity);\n                if (Array.isArray(permissions)) {\n                    this.permissions = this.transformPermissions(permissions);\n                    return resolve(this.permissions);\n                }\n            }\n\n            // No authorizer returned permissions\n            this.permissions = [];\n            resolve(this.permissions);\n        });\n\n        return this.permissionsLoader;\n    }\n\n    isAuthorizationEnabled(): boolean {\n        const override = authorizationEnabledStorage.getStore();\n        return override ?? true;\n    }\n\n    withoutAuthorization<T>(cb: () => Promise<T>): Promise<T> {\n        return authorizationEnabledStorage.run(false, cb);\n    }\n\n    clearPermissionsCache(): void {\n        this.permissions = undefined;\n        this.permissionsLoader = undefined;\n    }\n\n    private transformPermissions(permissions: SecurityPermission[]) {\n        const transformers = this.getTransformers();\n        if (transformers.length === 0) {\n            return permissions;\n        }\n\n        return permissions\n            .map(permission => {\n                // A transformer can return one or multiple permissions, so we flatten the result.\n                return transformers.map(t => t.execute(permission)).flat();\n            })\n            .flat();\n    }\n}\n"],"mappings":"AAAA,SAASA,iBAAiB,QAAQ,aAAa;AAM/C,MAAMC,2BAA2B,GAAG,IAAID,iBAAiB,CAAU,CAAC;AAEpE,OAAO,MAAME,oBAAoB,CAAkC;EAI/DC,WAAWA,CACCC,cAA4C,EAC5CC,eAAwD,EAClE;IAAA,KAFUD,cAA4C,GAA5CA,cAA4C;IAAA,KAC5CC,eAAwD,GAAxDA,eAAwD;EACjE;EAEH,MAAMC,eAAeA,CAACC,QAAkB,EAAiC;IACrE,IAAI,IAAI,CAACC,WAAW,EAAE;MAClB,OAAO,IAAI,CAACA,WAAW;IAC3B;IAEA,IAAI,IAAI,CAACC,iBAAiB,EAAE;MACxB,OAAO,IAAI,CAACA,iBAAiB;IACjC;IAEA,IAAI,CAACA,iBAAiB,GAAG,IAAIC,OAAO,CAAuB,MAAMC,OAAO,IAAI;MACxE;MACA,MAAMC,WAAW,GAAG,IAAI,CAACR,cAAc,CAAC,CAAC;MACzC,KAAK,MAAMS,UAAU,IAAID,WAAW,EAAE;QAClC,MAAMJ,WAAW,GAAG,MAAMK,UAAU,CAACC,SAAS,CAACP,QAAQ,CAAC;QACxD,IAAIQ,KAAK,CAACC,OAAO,CAACR,WAAW,CAAC,EAAE;UAC5B,IAAI,CAACA,WAAW,GAAG,IAAI,CAACS,oBAAoB,CAACT,WAAW,CAAC;UACzD,OAAOG,OAAO,CAAC,IAAI,CAACH,WAAW,CAAC;QACpC;MACJ;;MAEA;MACA,IAAI,CAACA,WAAW,GAAG,EAAE;MACrBG,OAAO,CAAC,IAAI,CAACH,WAAW,CAAC;IAC7B,CAAC,CAAC;IAEF,OAAO,IAAI,CAACC,iBAAiB;EACjC;EAEAS,sBAAsBA,CAAA,EAAY;IAC9B,MAAMC,QAAQ,GAAGlB,2BAA2B,CAACmB,QAAQ,CAAC,CAAC;IACvD,OAAOD,QAAQ,IAAI,IAAI;EAC3B;EAEAE,oBAAoBA,CAAIC,EAAoB,EAAc;IACtD,OAAOrB,2BAA2B,CAACsB,GAAG,CAAC,KAAK,EAAED,EAAE,CAAC;EACrD;EAEAE,qBAAqBA,CAAA,EAAS;IAC1B,IAAI,CAAChB,WAAW,GAAGiB,SAAS;IAC5B,IAAI,CAAChB,iBAAiB,GAAGgB,SAAS;EACtC;EAEQR,oBAAoBA,CAACT,WAAiC,EAAE;IAC5D,MAAMkB,YAAY,GAAG,IAAI,CAACrB,eAAe,CAAC,CAAC;IAC3C,IAAIqB,YAAY,CAACC,MAAM,KAAK,CAAC,EAAE;MAC3B,OAAOnB,WAAW;IACtB;IAEA,OAAOA,WAAW,CACboB,GAAG,CAACC,UAAU,IAAI;MACf;MACA,OAAOH,YAAY,CAACE,GAAG,CAACE,CAAC,IAAIA,CAAC,CAACC,OAAO,CAACF,UAAU,CAAC,CAAC,CAACG,IAAI,CAAC,CAAC;IAC9D,CAAC,CAAC,CACDA,IAAI,CAAC,CAAC;EACf;AACJ","ignoreList":[]}
+{"version":3,"names":["AsyncLocalStorage","authorizationEnabledStorage","AuthorizationContext","constructor","getAuthorizers","getTransformers","loadPermissions","identity","permissions","permissionsLoader","Promise","resolve","authorizers","authorizer","authorize","Array","isArray","transformPermissions","isAuthorizationEnabled","override","getStore","withoutAuthorization","cb","run","clearPermissionsCache","undefined","transformers","length","deduplicatePermissions","transformed","map","permission","t","execute","flat","seen","Set","filter","key","JSON","stringify","has","add"],"sources":["AuthorizationContext.ts"],"sourcesContent":["import { AsyncLocalStorage } from \"async_hooks\";\nimport { AuthorizationContext as Abstraction, PermissionTransformer } from \"./abstractions.js\";\nimport { Authorizer } from \"../Authorizer/index.js\";\nimport type { SecurityPermission } from \"~/types/security.js\";\nimport { Identity } from \"~/features/security/IdentityContext/index.js\";\n\nconst authorizationEnabledStorage = new AsyncLocalStorage<boolean>();\n\nexport class AuthorizationContext implements Abstraction.Interface {\n    private permissions?: SecurityPermission[];\n    private permissionsLoader?: Promise<SecurityPermission[]>;\n\n    constructor(\n        private getAuthorizers: () => Authorizer.Interface[],\n        private getTransformers: () => PermissionTransformer.Interface[]\n    ) {}\n\n    async loadPermissions(identity: Identity): Promise<SecurityPermission[]> {\n        if (this.permissions) {\n            return this.permissions;\n        }\n\n        if (this.permissionsLoader) {\n            return this.permissionsLoader;\n        }\n\n        this.permissionsLoader = new Promise<SecurityPermission[]>(async resolve => {\n            // Execute authorizers in sequence until one returns permissions\n            const authorizers = this.getAuthorizers();\n            for (const authorizer of authorizers) {\n                const permissions = await authorizer.authorize(identity);\n                if (Array.isArray(permissions)) {\n                    this.permissions = this.transformPermissions(permissions);\n                    return resolve(this.permissions);\n                }\n            }\n\n            // No authorizer returned permissions\n            this.permissions = [];\n            resolve(this.permissions);\n        });\n\n        return this.permissionsLoader;\n    }\n\n    isAuthorizationEnabled(): boolean {\n        const override = authorizationEnabledStorage.getStore();\n        return override ?? true;\n    }\n\n    withoutAuthorization<T>(cb: () => Promise<T>): Promise<T> {\n        return authorizationEnabledStorage.run(false, cb);\n    }\n\n    clearPermissionsCache(): void {\n        this.permissions = undefined;\n        this.permissionsLoader = undefined;\n    }\n\n    private transformPermissions(permissions: SecurityPermission[]) {\n        const transformers = this.getTransformers();\n        if (transformers.length === 0) {\n            return this.deduplicatePermissions(permissions);\n        }\n\n        const transformed = permissions\n            .map(permission => {\n                // A transformer can return one or multiple permissions, so we flatten the result.\n                return transformers.map(t => t.execute(permission)).flat();\n            })\n            .flat();\n\n        return this.deduplicatePermissions(transformed);\n    }\n\n    private deduplicatePermissions(permissions: SecurityPermission[]) {\n        const seen = new Set<string>();\n\n        return permissions.filter(permission => {\n            const key = JSON.stringify(permission);\n            if (seen.has(key)) {\n                return false;\n            }\n            seen.add(key);\n            return true;\n        });\n    }\n}\n"],"mappings":"AAAA,SAASA,iBAAiB,QAAQ,aAAa;AAM/C,MAAMC,2BAA2B,GAAG,IAAID,iBAAiB,CAAU,CAAC;AAEpE,OAAO,MAAME,oBAAoB,CAAkC;EAI/DC,WAAWA,CACCC,cAA4C,EAC5CC,eAAwD,EAClE;IAAA,KAFUD,cAA4C,GAA5CA,cAA4C;IAAA,KAC5CC,eAAwD,GAAxDA,eAAwD;EACjE;EAEH,MAAMC,eAAeA,CAACC,QAAkB,EAAiC;IACrE,IAAI,IAAI,CAACC,WAAW,EAAE;MAClB,OAAO,IAAI,CAACA,WAAW;IAC3B;IAEA,IAAI,IAAI,CAACC,iBAAiB,EAAE;MACxB,OAAO,IAAI,CAACA,iBAAiB;IACjC;IAEA,IAAI,CAACA,iBAAiB,GAAG,IAAIC,OAAO,CAAuB,MAAMC,OAAO,IAAI;MACxE;MACA,MAAMC,WAAW,GAAG,IAAI,CAACR,cAAc,CAAC,CAAC;MACzC,KAAK,MAAMS,UAAU,IAAID,WAAW,EAAE;QAClC,MAAMJ,WAAW,GAAG,MAAMK,UAAU,CAACC,SAAS,CAACP,QAAQ,CAAC;QACxD,IAAIQ,KAAK,CAACC,OAAO,CAACR,WAAW,CAAC,EAAE;UAC5B,IAAI,CAACA,WAAW,GAAG,IAAI,CAACS,oBAAoB,CAACT,WAAW,CAAC;UACzD,OAAOG,OAAO,CAAC,IAAI,CAACH,WAAW,CAAC;QACpC;MACJ;;MAEA;MACA,IAAI,CAACA,WAAW,GAAG,EAAE;MACrBG,OAAO,CAAC,IAAI,CAACH,WAAW,CAAC;IAC7B,CAAC,CAAC;IAEF,OAAO,IAAI,CAACC,iBAAiB;EACjC;EAEAS,sBAAsBA,CAAA,EAAY;IAC9B,MAAMC,QAAQ,GAAGlB,2BAA2B,CAACmB,QAAQ,CAAC,CAAC;IACvD,OAAOD,QAAQ,IAAI,IAAI;EAC3B;EAEAE,oBAAoBA,CAAIC,EAAoB,EAAc;IACtD,OAAOrB,2BAA2B,CAACsB,GAAG,CAAC,KAAK,EAAED,EAAE,CAAC;EACrD;EAEAE,qBAAqBA,CAAA,EAAS;IAC1B,IAAI,CAAChB,WAAW,GAAGiB,SAAS;IAC5B,IAAI,CAAChB,iBAAiB,GAAGgB,SAAS;EACtC;EAEQR,oBAAoBA,CAACT,WAAiC,EAAE;IAC5D,MAAMkB,YAAY,GAAG,IAAI,CAACrB,eAAe,CAAC,CAAC;IAC3C,IAAIqB,YAAY,CAACC,MAAM,KAAK,CAAC,EAAE;MAC3B,OAAO,IAAI,CAACC,sBAAsB,CAACpB,WAAW,CAAC;IACnD;IAEA,MAAMqB,WAAW,GAAGrB,WAAW,CAC1BsB,GAAG,CAACC,UAAU,IAAI;MACf;MACA,OAAOL,YAAY,CAACI,GAAG,CAACE,CAAC,IAAIA,CAAC,CAACC,OAAO,CAACF,UAAU,CAAC,CAAC,CAACG,IAAI,CAAC,CAAC;IAC9D,CAAC,CAAC,CACDA,IAAI,CAAC,CAAC;IAEX,OAAO,IAAI,CAACN,sBAAsB,CAACC,WAAW,CAAC;EACnD;EAEQD,sBAAsBA,CAACpB,WAAiC,EAAE;IAC9D,MAAM2B,IAAI,GAAG,IAAIC,GAAG,CAAS,CAAC;IAE9B,OAAO5B,WAAW,CAAC6B,MAAM,CAACN,UAAU,IAAI;MACpC,MAAMO,GAAG,GAAGC,IAAI,CAACC,SAAS,CAACT,UAAU,CAAC;MACtC,IAAII,IAAI,CAACM,GAAG,CAACH,GAAG,CAAC,EAAE;QACf,OAAO,KAAK;MAChB;MACAH,IAAI,CAACO,GAAG,CAACJ,GAAG,CAAC;MACb,OAAO,IAAI;IACf,CAAC,CAAC;EACN;AACJ","ignoreList":[]}

package/features/security/authorization/AuthorizationContext/abstractions.d.ts

@@ -6,6 +6,7 @@ export interface IAuthorizationContext {
     withoutAuthorization<T>(cb: () => Promise<T>): Promise<T>;
     clearPermissionsCache(): void;
 }
+/** Load and cache security permissions for the current identity. */
 export declare const AuthorizationContext: import("@webiny/di").Abstraction<IAuthorizationContext>;
 export declare namespace AuthorizationContext {
     type Interface = IAuthorizationContext;
@@ -13,6 +14,7 @@ export declare namespace AuthorizationContext {
 export interface IPermissionTransformer {
     execute(permission: SecurityPermission): SecurityPermission | SecurityPermission[];
 }
+/** Transform security permissions before they are applied. */
 export declare const PermissionTransformer: import("@webiny/di").Abstraction<IPermissionTransformer>;
 export declare namespace PermissionTransformer {
     type Interface = IPermissionTransformer;

package/features/security/authorization/AuthorizationContext/abstractions.js

@@ -1,5 +1,7 @@
 import { createAbstraction } from "@webiny/feature/api";
+/** Load and cache security permissions for the current identity. */
 export const AuthorizationContext = createAbstraction("AuthorizationContext");
+/** Transform security permissions before they are applied. */
 export const PermissionTransformer = createAbstraction("PermissionTransformer");
 
 //# sourceMappingURL=abstractions.js.map

package/features/security/authorization/AuthorizationContext/abstractions.js.map

@@ -1 +1 @@
-{"version":3,"names":["createAbstraction","AuthorizationContext","PermissionTransformer"],"sources":["abstractions.ts"],"sourcesContent":["import { createAbstraction } from \"@webiny/feature/api\";\nimport type { SecurityPermission } from \"~/types/security.js\";\nimport { Identity } from \"~/features/security/IdentityContext/index.js\";\n\nexport interface IAuthorizationContext {\n    loadPermissions(identity: Identity): Promise<SecurityPermission[]>;\n    isAuthorizationEnabled(): boolean;\n    withoutAuthorization<T>(cb: () => Promise<T>): Promise<T>;\n    clearPermissionsCache(): void;\n}\n\nexport const AuthorizationContext =\n    createAbstraction<IAuthorizationContext>(\"AuthorizationContext\");\n\nexport namespace AuthorizationContext {\n    export type Interface = IAuthorizationContext;\n}\n\nexport interface IPermissionTransformer {\n    execute(permission: SecurityPermission): SecurityPermission | SecurityPermission[];\n}\n\nexport const PermissionTransformer =\n    createAbstraction<IPermissionTransformer>(\"PermissionTransformer\");\n\nexport namespace PermissionTransformer {\n    export type Interface = IPermissionTransformer;\n    export type Permission = SecurityPermission;\n    export type Return = SecurityPermission | SecurityPermission[];\n}\n"],"mappings":"AAAA,SAASA,iBAAiB,QAAQ,qBAAqB;AAWvD,OAAO,MAAMC,oBAAoB,GAC7BD,iBAAiB,CAAwB,sBAAsB,CAAC;AAUpE,OAAO,MAAME,qBAAqB,GAC9BF,iBAAiB,CAAyB,uBAAuB,CAAC","ignoreList":[]}
+{"version":3,"names":["createAbstraction","AuthorizationContext","PermissionTransformer"],"sources":["abstractions.ts"],"sourcesContent":["import { createAbstraction } from \"@webiny/feature/api\";\nimport type { SecurityPermission } from \"~/types/security.js\";\nimport { Identity } from \"~/features/security/IdentityContext/index.js\";\n\nexport interface IAuthorizationContext {\n    loadPermissions(identity: Identity): Promise<SecurityPermission[]>;\n    isAuthorizationEnabled(): boolean;\n    withoutAuthorization<T>(cb: () => Promise<T>): Promise<T>;\n    clearPermissionsCache(): void;\n}\n\n/** Load and cache security permissions for the current identity. */\nexport const AuthorizationContext =\n    createAbstraction<IAuthorizationContext>(\"AuthorizationContext\");\n\nexport namespace AuthorizationContext {\n    export type Interface = IAuthorizationContext;\n}\n\nexport interface IPermissionTransformer {\n    execute(permission: SecurityPermission): SecurityPermission | SecurityPermission[];\n}\n\n/** Transform security permissions before they are applied. */\nexport const PermissionTransformer =\n    createAbstraction<IPermissionTransformer>(\"PermissionTransformer\");\n\nexport namespace PermissionTransformer {\n    export type Interface = IPermissionTransformer;\n    export type Permission = SecurityPermission;\n    export type Return = SecurityPermission | SecurityPermission[];\n}\n"],"mappings":"AAAA,SAASA,iBAAiB,QAAQ,qBAAqB;AAWvD;AACA,OAAO,MAAMC,oBAAoB,GAC7BD,iBAAiB,CAAwB,sBAAsB,CAAC;AAUpE;AACA,OAAO,MAAME,qBAAqB,GAC9BF,iBAAiB,CAAyB,uBAAuB,CAAC","ignoreList":[]}

package/features/security/authorization/AuthorizationContext/feature.d.ts

@@ -1 +1,4 @@
-export declare const AuthorizationContextFeature: import("@webiny/feature/api/createFeature.js").FeatureDefinition<unknown>;
+export declare const AuthorizationContextFeature: {
+    name: string;
+    register(container: import("@webiny/di").Container): void;
+};

package/features/security/authorization/Authorizer/abstractions.d.ts

@@ -3,6 +3,7 @@ import { Identity } from "../../../../features/security/IdentityContext/index.js
 export interface IAuthorizer {
     authorize(identity: Identity): Promise<SecurityPermission[] | null>;
 }
+/** Retrieve permissions for an identity. */
 export declare const Authorizer: import("@webiny/di").Abstraction<IAuthorizer>;
 export declare namespace Authorizer {
     type Interface = IAuthorizer;

package/features/security/authorization/Authorizer/abstractions.js

@@ -1,4 +1,5 @@
 import { createAbstraction } from "@webiny/feature/api";
+/** Retrieve permissions for an identity. */
 export const Authorizer = createAbstraction("Authorizer");
 
 //# sourceMappingURL=abstractions.js.map

package/features/security/authorization/Authorizer/abstractions.js.map

@@ -1 +1 @@
-{"version":3,"names":["createAbstraction","Authorizer"],"sources":["abstractions.ts"],"sourcesContent":["import { createAbstraction } from \"@webiny/feature/api\";\nimport type { SecurityPermission } from \"~/types/security.js\";\nimport { Identity } from \"~/features/security/IdentityContext/index.js\";\n\nexport interface IAuthorizer {\n    authorize(identity: Identity): Promise<SecurityPermission[] | null>;\n}\n\nexport const Authorizer = createAbstraction<IAuthorizer>(\"Authorizer\");\n\nexport namespace Authorizer {\n    export type Interface = IAuthorizer;\n}\n"],"mappings":"AAAA,SAASA,iBAAiB,QAAQ,qBAAqB;AAQvD,OAAO,MAAMC,UAAU,GAAGD,iBAAiB,CAAc,YAAY,CAAC","ignoreList":[]}
+{"version":3,"names":["createAbstraction","Authorizer"],"sources":["abstractions.ts"],"sourcesContent":["import { createAbstraction } from \"@webiny/feature/api\";\nimport type { SecurityPermission } from \"~/types/security.js\";\nimport { Identity } from \"~/features/security/IdentityContext/index.js\";\n\nexport interface IAuthorizer {\n    authorize(identity: Identity): Promise<SecurityPermission[] | null>;\n}\n\n/** Retrieve permissions for an identity. */\nexport const Authorizer = createAbstraction<IAuthorizer>(\"Authorizer\");\n\nexport namespace Authorizer {\n    export type Interface = IAuthorizer;\n}\n"],"mappings":"AAAA,SAASA,iBAAiB,QAAQ,qBAAqB;AAQvD;AACA,OAAO,MAAMC,UAAU,GAAGD,iBAAiB,CAAc,YAAY,CAAC","ignoreList":[]}

package/features/security/authorization/GroupsTeamsAuthorizer/feature.d.ts

@@ -1 +1,4 @@
-export declare const GroupsTeamsAuthorizerFeature: import("@webiny/feature/api/createFeature.js").FeatureDefinition<unknown>;
+export declare const GroupsTeamsAuthorizerFeature: {
+    name: string;
+    register(container: import("@webiny/di").Container): void;
+};

package/features/security/login/abstractions.d.ts

@@ -8,8 +8,9 @@ export declare class AfterLoginEvent extends DomainEvent<AfterLoginPayload> {
     eventType: "login.afterLogin";
     getHandlerAbstraction(): import("@webiny/di").Abstraction<IEventHandler<AfterLoginEvent>>;
 }
-export declare const AfterLoginHandler: import("@webiny/di").Abstraction<IEventHandler<AfterLoginEvent>>;
-export declare namespace AfterLoginHandler {
+/** Hook into login lifecycle after a user logs in. */
+export declare const AfterLoginEventHandler: import("@webiny/di").Abstraction<IEventHandler<AfterLoginEvent>>;
+export declare namespace AfterLoginEventHandler {
     type Interface = IEventHandler<AfterLoginEvent>;
     type Event = AfterLoginEvent;
 }

package/features/security/login/abstractions.js

@@ -3,9 +3,11 @@ import { createAbstraction } from "@webiny/feature/api";
 export class AfterLoginEvent extends DomainEvent {
   eventType = "login.afterLogin";
   getHandlerAbstraction() {
-    return AfterLoginHandler;
+    return AfterLoginEventHandler;
   }
 }
-export const AfterLoginHandler = createAbstraction("AfterLoginHandler");
+
+/** Hook into login lifecycle after a user logs in. */
+export const AfterLoginEventHandler = createAbstraction("AfterLoginEventHandler");
 
 //# sourceMappingURL=abstractions.js.map

package/features/security/login/abstractions.js.map

@@ -1 +1 @@
-{"version":3,"names":["DomainEvent","createAbstraction","AfterLoginEvent","eventType","getHandlerAbstraction","AfterLoginHandler"],"sources":["abstractions.ts"],"sourcesContent":["import { DomainEvent } from \"~/features/eventPublisher/index.js\";\nimport type { IEventHandler } from \"~/features/eventPublisher/index.js\";\nimport { createAbstraction } from \"@webiny/feature/api\";\nimport { Identity } from \"~/features/security/IdentityContext/index.js\";\n\nexport interface AfterLoginPayload {\n    identity: Identity;\n}\n\nexport class AfterLoginEvent extends DomainEvent<AfterLoginPayload> {\n    eventType = \"login.afterLogin\" as const;\n\n    getHandlerAbstraction() {\n        return AfterLoginHandler;\n    }\n}\n\nexport const AfterLoginHandler =\n    createAbstraction<IEventHandler<AfterLoginEvent>>(\"AfterLoginHandler\");\n\nexport namespace AfterLoginHandler {\n    export type Interface = IEventHandler<AfterLoginEvent>;\n    export type Event = AfterLoginEvent;\n}\n"],"mappings":"AAAA,SAASA,WAAW;AAEpB,SAASC,iBAAiB,QAAQ,qBAAqB;AAOvD,OAAO,MAAMC,eAAe,SAASF,WAAW,CAAoB;EAChEG,SAAS,GAAG,kBAAkB;EAE9BC,qBAAqBA,CAAA,EAAG;IACpB,OAAOC,iBAAiB;EAC5B;AACJ;AAEA,OAAO,MAAMA,iBAAiB,GAC1BJ,iBAAiB,CAAiC,mBAAmB,CAAC","ignoreList":[]}
+{"version":3,"names":["DomainEvent","createAbstraction","AfterLoginEvent","eventType","getHandlerAbstraction","AfterLoginEventHandler"],"sources":["abstractions.ts"],"sourcesContent":["import { DomainEvent } from \"~/features/eventPublisher/index.js\";\nimport type { IEventHandler } from \"~/features/eventPublisher/index.js\";\nimport { createAbstraction } from \"@webiny/feature/api\";\nimport { Identity } from \"~/features/security/IdentityContext/index.js\";\n\nexport interface AfterLoginPayload {\n    identity: Identity;\n}\n\nexport class AfterLoginEvent extends DomainEvent<AfterLoginPayload> {\n    eventType = \"login.afterLogin\" as const;\n\n    getHandlerAbstraction() {\n        return AfterLoginEventHandler;\n    }\n}\n\n/** Hook into login lifecycle after a user logs in. */\nexport const AfterLoginEventHandler =\n    createAbstraction<IEventHandler<AfterLoginEvent>>(\"AfterLoginEventHandler\");\n\nexport namespace AfterLoginEventHandler {\n    export type Interface = IEventHandler<AfterLoginEvent>;\n    export type Event = AfterLoginEvent;\n}\n"],"mappings":"AAAA,SAASA,WAAW;AAEpB,SAASC,iBAAiB,QAAQ,qBAAqB;AAOvD,OAAO,MAAMC,eAAe,SAASF,WAAW,CAAoB;EAChEG,SAAS,GAAG,kBAAkB;EAE9BC,qBAAqBA,CAAA,EAAG;IACpB,OAAOC,sBAAsB;EACjC;AACJ;;AAEA;AACA,OAAO,MAAMA,sBAAsB,GAC/BJ,iBAAiB,CAAiC,wBAAwB,CAAC","ignoreList":[]}

package/features/security/permissions/createPermissionSchema.d.ts

@@ -0,0 +1,2 @@
+import type { PermissionSchemaConfig } from "./types.js";
+export declare function createPermissionSchema<const T extends PermissionSchemaConfig>(config: T): T;

package/features/security/permissions/createPermissionSchema.js

@@ -0,0 +1,8 @@
+export function createPermissionSchema(config) {
+  return {
+    ...config,
+    entities: config.entities ?? []
+  };
+}
+
+//# sourceMappingURL=createPermissionSchema.js.map

package/features/security/permissions/createPermissionSchema.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["createPermissionSchema","config","entities"],"sources":["createPermissionSchema.ts"],"sourcesContent":["import type { PermissionSchemaConfig } from \"./types.js\";\n\nexport function createPermissionSchema<const T extends PermissionSchemaConfig>(config: T): T {\n    return {\n        ...config,\n        entities: config.entities ?? []\n    };\n}\n"],"mappings":"AAEA,OAAO,SAASA,sBAAsBA,CAAyCC,MAAS,EAAK;EACzF,OAAO;IACH,GAAGA,MAAM;IACTC,QAAQ,EAAED,MAAM,CAACC,QAAQ,IAAI;EACjC,CAAC;AACL","ignoreList":[]}

package/features/security/permissions/createPermissions.d.ts

@@ -1,8 +1,8 @@
+import type { Abstraction } from "@webiny/di";
 import type { PermissionSchemaConfig } from "./types.js";
 import type { Permissions } from "./types.js";
-export declare function createPermissions<const S extends PermissionSchemaConfig>(schema: S): {
-    Abstraction: import("@webiny/di").Abstraction<Permissions<S>>;
-    Implementation: import("@webiny/di").Constructor<Permissions<S>> & {
-        __abstraction: import("@webiny/di").Abstraction<Permissions<S>>;
-    };
+export declare function createPermissionsAbstraction<const S extends PermissionSchemaConfig>(schema: S): Abstraction<Permissions<S>>;
+export declare function createPermissionsFeature<const S extends PermissionSchemaConfig>(schema: S, abstraction: Abstraction<Permissions<S>>): {
+    name: string;
+    register(container: import("@webiny/di").Container): void;
 };