@webiny/api-core 6.3.0-beta.4 → 6.4.0-beta.0

package/features/security/apiKeys/shared/schemas.js

@@ -1,29 +1,33 @@
 import { z } from "zod";
-export const createApiKeyInputSchema = z.object({
-  name: z.string().min(1),
-  slug: z.string().min(1),
-  description: z.string(),
-  permissions: z.array(z.looseObject({
-    name: z.string()
-  })).optional().default([])
+const createApiKeyInputSchema = z.object({
+    name: z.string().min(1),
+    slug: z.string().min(1),
+    description: z.string(),
+    permissions: z.array(z.looseObject({
+        name: z.string()
+    })).optional().default([])
 });
-export const updateApiKeyInputSchema = z.object({
-  name: z.string().min(1).optional(),
-  description: z.string().optional(),
-  permissions: z.array(z.looseObject({
-    name: z.string()
-  })).optional().default([])
-});
-export const listApiKeysInputSchema = z.object({
-  where: z.object({
-    name: z.string().optional(),
-    name_contains: z.string().optional(),
+const updateApiKeyInputSchema = z.object({
+    name: z.string().min(1).optional(),
     description: z.string().optional(),
-    description_contains: z.string().optional()
-  }).optional(),
-  limit: z.number().int().positive().max(100).optional(),
-  after: z.string().optional(),
-  sort: z.array(z.enum(["createdOn_ASC", "createdOn_DESC"])).optional()
+    permissions: z.array(z.looseObject({
+        name: z.string()
+    })).optional().default([])
+});
+const listApiKeysInputSchema = z.object({
+    where: z.object({
+        name: z.string().optional(),
+        name_contains: z.string().optional(),
+        description: z.string().optional(),
+        description_contains: z.string().optional()
+    }).optional(),
+    limit: z.number().int().positive().max(100).optional(),
+    after: z.string().optional(),
+    sort: z.array(z["enum"]([
+        "createdOn_ASC",
+        "createdOn_DESC"
+    ])).optional()
 });
+export { createApiKeyInputSchema, listApiKeysInputSchema, updateApiKeyInputSchema };
 
 //# sourceMappingURL=schemas.js.map

package/features/security/apiKeys/shared/schemas.js.map

@@ -1 +1 @@
-{"version":3,"names":["z","createApiKeyInputSchema","object","name","string","min","slug","description","permissions","array","looseObject","optional","default","updateApiKeyInputSchema","listApiKeysInputSchema","where","name_contains","description_contains","limit","number","int","positive","max","after","sort","enum"],"sources":["schemas.ts"],"sourcesContent":["import { z } from \"zod\";\n\nexport const createApiKeyInputSchema = z.object({\n    name: z.string().min(1),\n    slug: z.string().min(1),\n    description: z.string(),\n    permissions: z\n        .array(z.looseObject({ name: z.string() }))\n        .optional()\n        .default([])\n});\n\nexport const updateApiKeyInputSchema = z.object({\n    name: z.string().min(1).optional(),\n    description: z.string().optional(),\n    permissions: z\n        .array(z.looseObject({ name: z.string() }))\n        .optional()\n        .default([])\n});\n\nexport const listApiKeysInputSchema = z.object({\n    where: z\n        .object({\n            name: z.string().optional(),\n            name_contains: z.string().optional(),\n            description: z.string().optional(),\n            description_contains: z.string().optional()\n        })\n        .optional(),\n    limit: z.number().int().positive().max(100).optional(),\n    after: z.string().optional(),\n    sort: z.array(z.enum([\"createdOn_ASC\", \"createdOn_DESC\"])).optional()\n});\n"],"mappings":"AAAA,SAASA,CAAC,QAAQ,KAAK;AAEvB,OAAO,MAAMC,uBAAuB,GAAGD,CAAC,CAACE,MAAM,CAAC;EAC5CC,IAAI,EAAEH,CAAC,CAACI,MAAM,CAAC,CAAC,CAACC,GAAG,CAAC,CAAC,CAAC;EACvBC,IAAI,EAAEN,CAAC,CAACI,MAAM,CAAC,CAAC,CAACC,GAAG,CAAC,CAAC,CAAC;EACvBE,WAAW,EAAEP,CAAC,CAACI,MAAM,CAAC,CAAC;EACvBI,WAAW,EAAER,CAAC,CACTS,KAAK,CAACT,CAAC,CAACU,WAAW,CAAC;IAAEP,IAAI,EAAEH,CAAC,CAACI,MAAM,CAAC;EAAE,CAAC,CAAC,CAAC,CAC1CO,QAAQ,CAAC,CAAC,CACVC,OAAO,CAAC,EAAE;AACnB,CAAC,CAAC;AAEF,OAAO,MAAMC,uBAAuB,GAAGb,CAAC,CAACE,MAAM,CAAC;EAC5CC,IAAI,EAAEH,CAAC,CAACI,MAAM,CAAC,CAAC,CAACC,GAAG,CAAC,CAAC,CAAC,CAACM,QAAQ,CAAC,CAAC;EAClCJ,WAAW,EAAEP,CAAC,CAACI,MAAM,CAAC,CAAC,CAACO,QAAQ,CAAC,CAAC;EAClCH,WAAW,EAAER,CAAC,CACTS,KAAK,CAACT,CAAC,CAACU,WAAW,CAAC;IAAEP,IAAI,EAAEH,CAAC,CAACI,MAAM,CAAC;EAAE,CAAC,CAAC,CAAC,CAC1CO,QAAQ,CAAC,CAAC,CACVC,OAAO,CAAC,EAAE;AACnB,CAAC,CAAC;AAEF,OAAO,MAAME,sBAAsB,GAAGd,CAAC,CAACE,MAAM,CAAC;EAC3Ca,KAAK,EAAEf,CAAC,CACHE,MAAM,CAAC;IACJC,IAAI,EAAEH,CAAC,CAACI,MAAM,CAAC,CAAC,CAACO,QAAQ,CAAC,CAAC;IAC3BK,aAAa,EAAEhB,CAAC,CAACI,MAAM,CAAC,CAAC,CAACO,QAAQ,CAAC,CAAC;IACpCJ,WAAW,EAAEP,CAAC,CAACI,MAAM,CAAC,CAAC,CAACO,QAAQ,CAAC,CAAC;IAClCM,oBAAoB,EAAEjB,CAAC,CAACI,MAAM,CAAC,CAAC,CAACO,QAAQ,CAAC;EAC9C,CAAC,CAAC,CACDA,QAAQ,CAAC,CAAC;EACfO,KAAK,EAAElB,CAAC,CAACmB,MAAM,CAAC,CAAC,CAACC,GAAG,CAAC,CAAC,CAACC,QAAQ,CAAC,CAAC,CAACC,GAAG,CAAC,GAAG,CAAC,CAACX,QAAQ,CAAC,CAAC;EACtDY,KAAK,EAAEvB,CAAC,CAACI,MAAM,CAAC,CAAC,CAACO,QAAQ,CAAC,CAAC;EAC5Ba,IAAI,EAAExB,CAAC,CAACS,KAAK,CAACT,CAAC,CAACyB,IAAI,CAAC,CAAC,eAAe,EAAE,gBAAgB,CAAC,CAAC,CAAC,CAACd,QAAQ,CAAC;AACxE,CAAC,CAAC","ignoreList":[]}
+{"version":3,"file":"features/security/apiKeys/shared/schemas.js","sources":["../../../../../src/features/security/apiKeys/shared/schemas.ts"],"sourcesContent":["import { z } from \"zod\";\n\nexport const createApiKeyInputSchema = z.object({\n    name: z.string().min(1),\n    slug: z.string().min(1),\n    description: z.string(),\n    permissions: z\n        .array(z.looseObject({ name: z.string() }))\n        .optional()\n        .default([])\n});\n\nexport const updateApiKeyInputSchema = z.object({\n    name: z.string().min(1).optional(),\n    description: z.string().optional(),\n    permissions: z\n        .array(z.looseObject({ name: z.string() }))\n        .optional()\n        .default([])\n});\n\nexport const listApiKeysInputSchema = z.object({\n    where: z\n        .object({\n            name: z.string().optional(),\n            name_contains: z.string().optional(),\n            description: z.string().optional(),\n            description_contains: z.string().optional()\n        })\n        .optional(),\n    limit: z.number().int().positive().max(100).optional(),\n    after: z.string().optional(),\n    sort: z.array(z.enum([\"createdOn_ASC\", \"createdOn_DESC\"])).optional()\n});\n"],"names":["createApiKeyInputSchema","z","updateApiKeyInputSchema","listApiKeysInputSchema"],"mappings":";AAEO,MAAMA,0BAA0BC,EAAE,MAAM,CAAC;IAC5C,MAAMA,EAAE,MAAM,GAAG,GAAG,CAAC;IACrB,MAAMA,EAAE,MAAM,GAAG,GAAG,CAAC;IACrB,aAAaA,EAAE,MAAM;IACrB,aAAaA,EAAAA,KACH,CAACA,EAAE,WAAW,CAAC;QAAE,MAAMA,EAAE,MAAM;IAAG,IACvC,QAAQ,GACR,OAAO,CAAC,EAAE;AACnB;AAEO,MAAMC,0BAA0BD,EAAE,MAAM,CAAC;IAC5C,MAAMA,EAAE,MAAM,GAAG,GAAG,CAAC,GAAG,QAAQ;IAChC,aAAaA,EAAE,MAAM,GAAG,QAAQ;IAChC,aAAaA,EAAAA,KACH,CAACA,EAAE,WAAW,CAAC;QAAE,MAAMA,EAAE,MAAM;IAAG,IACvC,QAAQ,GACR,OAAO,CAAC,EAAE;AACnB;AAEO,MAAME,yBAAyBF,EAAE,MAAM,CAAC;IAC3C,OAAOA,EAAAA,MACI,CAAC;QACJ,MAAMA,EAAE,MAAM,GAAG,QAAQ;QACzB,eAAeA,EAAE,MAAM,GAAG,QAAQ;QAClC,aAAaA,EAAE,MAAM,GAAG,QAAQ;QAChC,sBAAsBA,EAAE,MAAM,GAAG,QAAQ;IAC7C,GACC,QAAQ;IACb,OAAOA,EAAE,MAAM,GAAG,GAAG,GAAG,QAAQ,GAAG,GAAG,CAAC,KAAK,QAAQ;IACpD,OAAOA,EAAE,MAAM,GAAG,QAAQ;IAC1B,MAAMA,EAAE,KAAK,CAACA,CAAC,CAADA,OAAM,CAAC;QAAC;QAAiB;KAAiB,GAAG,QAAQ;AACvE"}

package/features/security/apiKeys/shared/types.js

@@ -1,3 +0,0 @@
-export {};
-
-//# sourceMappingURL=types.js.map

package/features/security/authentication/AuthenticationContext/AuthenticationContext.js

@@ -1,51 +1,57 @@
 import { createImplementation } from "@webiny/di";
 import { EventPublisher } from "../../../eventPublisher/index.js";
-import { AuthenticationContext as Abstraction } from "./abstractions.js";
+import { AuthenticationContext } from "./abstractions.js";
 import { Authenticator } from "../Authenticator/index.js";
-import { BeforeAuthenticationEvent, AfterAuthenticationEvent } from "./events.js";
+import { AfterAuthenticationEvent, BeforeAuthenticationEvent } from "./events.js";
 import { AnonymousIdentity, AuthenticatedIdentity } from "../../IdentityContext/index.js";
 import { AuthenticationError } from "./errors.js";
 class AuthenticationContextImpl {
-  constructor(authenticators, eventPublisher) {
-    this.authenticators = authenticators;
-    this.eventPublisher = eventPublisher;
-  }
-  async authenticate(token) {
-    await this.eventPublisher.publish(new BeforeAuthenticationEvent({
-      token
-    }));
-    try {
-      return await this.processAuthenticators(token);
-    } catch (error) {
-      throw AuthenticationError.from(error);
+    constructor(authenticators, eventPublisher){
+        this.authenticators = authenticators;
+        this.eventPublisher = eventPublisher;
     }
-  }
-  getAuthToken() {
-    return this.authToken;
-  }
-  async processAuthenticators(token) {
-    // Try each authenticator until one succeeds
-    for (const authenticator of this.authenticators) {
-      const identityData = await authenticator.authenticate(token);
-      if (identityData) {
-        this.authToken = token;
-        const identity = new AuthenticatedIdentity(identityData);
-        await this.eventPublisher.publish(new AfterAuthenticationEvent({
-          identity,
-          token
+    async authenticate(token) {
+        await this.eventPublisher.publish(new BeforeAuthenticationEvent({
+            token
         }));
-        return identity;
-      }
+        try {
+            return await this.processAuthenticators(token);
+        } catch (error) {
+            throw AuthenticationError.from(error);
+        }
+    }
+    getAuthToken() {
+        return this.authToken;
+    }
+    async processAuthenticators(token) {
+        for (const authenticator of this.authenticators){
+            const identityData = await authenticator.authenticate(token);
+            if (identityData) {
+                this.authToken = token;
+                const identity = new AuthenticatedIdentity(identityData);
+                await this.eventPublisher.publish(new AfterAuthenticationEvent({
+                    identity,
+                    token
+                }));
+                return identity;
+            }
+        }
+        return new AnonymousIdentity();
     }
-    return new AnonymousIdentity();
-  }
 }
-export const AuthenticationContext = createImplementation({
-  abstraction: Abstraction,
-  implementation: AuthenticationContextImpl,
-  dependencies: [[Authenticator, {
-    multiple: true
-  }], EventPublisher]
+const AuthenticationContext_AuthenticationContext = createImplementation({
+    abstraction: AuthenticationContext,
+    implementation: AuthenticationContextImpl,
+    dependencies: [
+        [
+            Authenticator,
+            {
+                multiple: true
+            }
+        ],
+        EventPublisher
+    ]
 });
+export { AuthenticationContext_AuthenticationContext as AuthenticationContext };
 
 //# sourceMappingURL=AuthenticationContext.js.map

package/features/security/authentication/AuthenticationContext/AuthenticationContext.js.map

@@ -1 +1 @@
-{"version":3,"names":["createImplementation","EventPublisher","AuthenticationContext","Abstraction","Authenticator","BeforeAuthenticationEvent","AfterAuthenticationEvent","AnonymousIdentity","AuthenticatedIdentity","AuthenticationError","AuthenticationContextImpl","constructor","authenticators","eventPublisher","authenticate","token","publish","processAuthenticators","error","from","getAuthToken","authToken","authenticator","identityData","identity","abstraction","implementation","dependencies","multiple"],"sources":["AuthenticationContext.ts"],"sourcesContent":["import { createImplementation } from \"@webiny/di\";\nimport { EventPublisher } from \"~/features/eventPublisher/index.js\";\nimport { AuthenticationContext as Abstraction } from \"./abstractions.js\";\nimport { Authenticator } from \"../Authenticator/index.js\";\nimport { BeforeAuthenticationEvent, AfterAuthenticationEvent } from \"./events.js\";\nimport type { Identity } from \"~/features/security/IdentityContext/Identity.js\";\nimport {\n    AnonymousIdentity,\n    AuthenticatedIdentity\n} from \"~/features/security/IdentityContext/index.js\";\nimport { AuthenticationError } from \"./errors.js\";\n\nclass AuthenticationContextImpl implements Abstraction.Interface {\n    private authToken?: string;\n\n    constructor(\n        private authenticators: Authenticator.Interface[],\n        private eventPublisher: EventPublisher.Interface\n    ) {}\n\n    async authenticate(token: string): Promise<Identity> {\n        await this.eventPublisher.publish(new BeforeAuthenticationEvent({ token }));\n\n        try {\n            return await this.processAuthenticators(token);\n        } catch (error) {\n            throw AuthenticationError.from(error);\n        }\n    }\n\n    getAuthToken(): string | undefined {\n        return this.authToken;\n    }\n\n    private async processAuthenticators(token: string): Promise<Identity> {\n        // Try each authenticator until one succeeds\n        for (const authenticator of this.authenticators) {\n            const identityData = await authenticator.authenticate(token);\n            if (identityData) {\n                this.authToken = token;\n\n                const identity = new AuthenticatedIdentity(identityData);\n\n                await this.eventPublisher.publish(\n                    new AfterAuthenticationEvent({ identity, token })\n                );\n\n                return identity;\n            }\n        }\n\n        return new AnonymousIdentity();\n    }\n}\n\nexport const AuthenticationContext = createImplementation({\n    abstraction: Abstraction,\n    implementation: AuthenticationContextImpl,\n    dependencies: [[Authenticator, { multiple: true }], EventPublisher]\n});\n"],"mappings":"AAAA,SAASA,oBAAoB,QAAQ,YAAY;AACjD,SAASC,cAAc;AACvB,SAASC,qBAAqB,IAAIC,WAAW;AAC7C,SAASC,aAAa;AACtB,SAASC,yBAAyB,EAAEC,wBAAwB;AAE5D,SACIC,iBAAiB,EACjBC,qBAAqB;AAEzB,SAASC,mBAAmB;AAE5B,MAAMC,yBAAyB,CAAkC;EAG7DC,WAAWA,CACCC,cAAyC,EACzCC,cAAwC,EAClD;IAAA,KAFUD,cAAyC,GAAzCA,cAAyC;IAAA,KACzCC,cAAwC,GAAxCA,cAAwC;EACjD;EAEH,MAAMC,YAAYA,CAACC,KAAa,EAAqB;IACjD,MAAM,IAAI,CAACF,cAAc,CAACG,OAAO,CAAC,IAAIX,yBAAyB,CAAC;MAAEU;IAAM,CAAC,CAAC,CAAC;IAE3E,IAAI;MACA,OAAO,MAAM,IAAI,CAACE,qBAAqB,CAACF,KAAK,CAAC;IAClD,CAAC,CAAC,OAAOG,KAAK,EAAE;MACZ,MAAMT,mBAAmB,CAACU,IAAI,CAACD,KAAK,CAAC;IACzC;EACJ;EAEAE,YAAYA,CAAA,EAAuB;IAC/B,OAAO,IAAI,CAACC,SAAS;EACzB;EAEA,MAAcJ,qBAAqBA,CAACF,KAAa,EAAqB;IAClE;IACA,KAAK,MAAMO,aAAa,IAAI,IAAI,CAACV,cAAc,EAAE;MAC7C,MAAMW,YAAY,GAAG,MAAMD,aAAa,CAACR,YAAY,CAACC,KAAK,CAAC;MAC5D,IAAIQ,YAAY,EAAE;QACd,IAAI,CAACF,SAAS,GAAGN,KAAK;QAEtB,MAAMS,QAAQ,GAAG,IAAIhB,qBAAqB,CAACe,YAAY,CAAC;QAExD,MAAM,IAAI,CAACV,cAAc,CAACG,OAAO,CAC7B,IAAIV,wBAAwB,CAAC;UAAEkB,QAAQ;UAAET;QAAM,CAAC,CACpD,CAAC;QAED,OAAOS,QAAQ;MACnB;IACJ;IAEA,OAAO,IAAIjB,iBAAiB,CAAC,CAAC;EAClC;AACJ;AAEA,OAAO,MAAML,qBAAqB,GAAGF,oBAAoB,CAAC;EACtDyB,WAAW,EAAEtB,WAAW;EACxBuB,cAAc,EAAEhB,yBAAyB;EACzCiB,YAAY,EAAE,CAAC,CAACvB,aAAa,EAAE;IAAEwB,QAAQ,EAAE;EAAK,CAAC,CAAC,EAAE3B,cAAc;AACtE,CAAC,CAAC","ignoreList":[]}
+{"version":3,"file":"features/security/authentication/AuthenticationContext/AuthenticationContext.js","sources":["../../../../../src/features/security/authentication/AuthenticationContext/AuthenticationContext.ts"],"sourcesContent":["import { createImplementation } from \"@webiny/di\";\nimport { EventPublisher } from \"~/features/eventPublisher/index.js\";\nimport { AuthenticationContext as Abstraction } from \"./abstractions.js\";\nimport { Authenticator } from \"../Authenticator/index.js\";\nimport { BeforeAuthenticationEvent, AfterAuthenticationEvent } from \"./events.js\";\nimport type { Identity } from \"~/features/security/IdentityContext/Identity.js\";\nimport {\n    AnonymousIdentity,\n    AuthenticatedIdentity\n} from \"~/features/security/IdentityContext/index.js\";\nimport { AuthenticationError } from \"./errors.js\";\n\nclass AuthenticationContextImpl implements Abstraction.Interface {\n    private authToken?: string;\n\n    constructor(\n        private authenticators: Authenticator.Interface[],\n        private eventPublisher: EventPublisher.Interface\n    ) {}\n\n    async authenticate(token: string): Promise<Identity> {\n        await this.eventPublisher.publish(new BeforeAuthenticationEvent({ token }));\n\n        try {\n            return await this.processAuthenticators(token);\n        } catch (error) {\n            throw AuthenticationError.from(error);\n        }\n    }\n\n    getAuthToken(): string | undefined {\n        return this.authToken;\n    }\n\n    private async processAuthenticators(token: string): Promise<Identity> {\n        // Try each authenticator until one succeeds\n        for (const authenticator of this.authenticators) {\n            const identityData = await authenticator.authenticate(token);\n            if (identityData) {\n                this.authToken = token;\n\n                const identity = new AuthenticatedIdentity(identityData);\n\n                await this.eventPublisher.publish(\n                    new AfterAuthenticationEvent({ identity, token })\n                );\n\n                return identity;\n            }\n        }\n\n        return new AnonymousIdentity();\n    }\n}\n\nexport const AuthenticationContext = createImplementation({\n    abstraction: Abstraction,\n    implementation: AuthenticationContextImpl,\n    dependencies: [[Authenticator, { multiple: true }], EventPublisher]\n});\n"],"names":["AuthenticationContextImpl","authenticators","eventPublisher","token","BeforeAuthenticationEvent","error","AuthenticationError","authenticator","identityData","identity","AuthenticatedIdentity","AfterAuthenticationEvent","AnonymousIdentity","AuthenticationContext","createImplementation","Abstraction","Authenticator","EventPublisher"],"mappings":";;;;;;;AAYA,MAAMA;IAGF,YACYC,cAAyC,EACzCC,cAAwC,CAClD;aAFUD,cAAc,GAAdA;aACAC,cAAc,GAAdA;IACT;IAEH,MAAM,aAAaC,KAAa,EAAqB;QACjD,MAAM,IAAI,CAAC,cAAc,CAAC,OAAO,CAAC,IAAIC,0BAA0B;YAAED;QAAM;QAExE,IAAI;YACA,OAAO,MAAM,IAAI,CAAC,qBAAqB,CAACA;QAC5C,EAAE,OAAOE,OAAO;YACZ,MAAMC,oBAAoB,IAAI,CAACD;QACnC;IACJ;IAEA,eAAmC;QAC/B,OAAO,IAAI,CAAC,SAAS;IACzB;IAEA,MAAc,sBAAsBF,KAAa,EAAqB;QAElE,KAAK,MAAMI,iBAAiB,IAAI,CAAC,cAAc,CAAE;YAC7C,MAAMC,eAAe,MAAMD,cAAc,YAAY,CAACJ;YACtD,IAAIK,cAAc;gBACd,IAAI,CAAC,SAAS,GAAGL;gBAEjB,MAAMM,WAAW,IAAIC,sBAAsBF;gBAE3C,MAAM,IAAI,CAAC,cAAc,CAAC,OAAO,CAC7B,IAAIG,yBAAyB;oBAAEF;oBAAUN;gBAAM;gBAGnD,OAAOM;YACX;QACJ;QAEA,OAAO,IAAIG;IACf;AACJ;AAEO,MAAMC,8CAAwBC,qBAAqB;IACtD,aAAaC;IACb,gBAAgBf;IAChB,cAAc;QAAC;YAACgB;YAAe;gBAAE,UAAU;YAAK;SAAE;QAAEC;KAAe;AACvE"}

package/features/security/authentication/AuthenticationContext/SetIdTokenCookie.js

@@ -1,52 +1,42 @@
-import jwt from "jsonwebtoken";
+import jsonwebtoken from "jsonwebtoken";
 import { createImplementation } from "@webiny/feature/api";
 import { Reply } from "@webiny/handler";
-import { AfterAuthenticationEventHandler } from "./index.js";
-import { AuthenticationContext } from "./index.js";
-const get24HoursFromNow = () => {
-  const oneHour = 1000 * 60 * 60;
-  return new Date(new Date().getTime() + oneHour * 24);
-};
-const toDate = timestamp => {
-  return timestamp ? new Date(timestamp * 1000) : get24HoursFromNow();
+import { AfterAuthenticationEventHandler, AuthenticationContext } from "./index.js";
+const get24HoursFromNow = ()=>{
+    const oneHour = 3600000;
+    return new Date(new Date().getTime() + 24 * oneHour);
 };
+const toDate = (timestamp)=>timestamp ? new Date(1000 * timestamp) : get24HoursFromNow();
 class SetIdTokenCookieImpl {
-  constructor(authenticationContext, reply) {
-    this.authenticationContext = authenticationContext;
-    this.reply = reply;
-  }
-  async handle() {
-    const token = this.authenticationContext.getAuthToken();
-    if (!token) {
-      return;
+    constructor(authenticationContext, reply){
+        this.authenticationContext = authenticationContext;
+        this.reply = reply;
+    }
+    async handle() {
+        const token = this.authenticationContext.getAuthToken();
+        if (!token) return;
+        const tokenData = jsonwebtoken.decode(token, {
+            json: true
+        });
+        const expiresOn = tokenData ? toDate(tokenData.exp) : get24HoursFromNow();
+        this.reply.setCookie("wby-id-token", token, {
+            path: "/",
+            expires: expiresOn,
+            sameSite: "none",
+            secure: true,
+            httpOnly: true
+        });
+        this.reply.header("cache-control", 'no-cache="Set-Cookie"');
     }
-
-    // Attempt to acquire expiration from the token; fall back to "expire in 24 hours".
-    // In most cases the token will be a JWT token, but it can also be a custom token, or an API key.
-    const tokenData = jwt.decode(token, {
-      json: true
-    });
-    const expiresOn = tokenData ? toDate(tokenData.exp) : get24HoursFromNow();
-
-    // @see https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Set-Cookie
-    this.reply.setCookie("wby-id-token", token, {
-      path: "/",
-      expires: expiresOn,
-      // Allow this cookie to be sent with cross-origin requests.
-      sameSite: "none",
-      // Only send this cookie to the server when HTTPS is used.
-      // NOTE: `https` requirement is ignored for `localhost.
-      secure: true,
-      // Forbids JavaScript from accessing the cookie.
-      httpOnly: true
-    });
-    this.reply.header("cache-control", `no-cache="Set-Cookie"`);
-  }
 }
-export const SetIdTokenCookie = createImplementation({
-  abstraction: AfterAuthenticationEventHandler,
-  implementation: SetIdTokenCookieImpl,
-  dependencies: [AuthenticationContext, Reply]
+const SetIdTokenCookie = createImplementation({
+    abstraction: AfterAuthenticationEventHandler,
+    implementation: SetIdTokenCookieImpl,
+    dependencies: [
+        AuthenticationContext,
+        Reply
+    ]
 });
+export { SetIdTokenCookie };
 
 //# sourceMappingURL=SetIdTokenCookie.js.map

package/features/security/authentication/AuthenticationContext/SetIdTokenCookie.js.map

@@ -1 +1 @@
-{"version":3,"names":["jwt","createImplementation","Reply","AfterAuthenticationEventHandler","AuthenticationContext","get24HoursFromNow","oneHour","Date","getTime","toDate","timestamp","SetIdTokenCookieImpl","constructor","authenticationContext","reply","handle","token","getAuthToken","tokenData","decode","json","expiresOn","exp","setCookie","path","expires","sameSite","secure","httpOnly","header","SetIdTokenCookie","abstraction","implementation","dependencies"],"sources":["SetIdTokenCookie.ts"],"sourcesContent":["import jwt from \"jsonwebtoken\";\nimport { createImplementation } from \"@webiny/feature/api\";\nimport { Reply } from \"@webiny/handler\";\nimport { AfterAuthenticationEventHandler } from \"~/features/security/authentication/AuthenticationContext/index.js\";\nimport { AuthenticationContext } from \"~/features/security/authentication/AuthenticationContext/index.js\";\n\nconst get24HoursFromNow = () => {\n    const oneHour = 1000 * 60 * 60;\n    return new Date(new Date().getTime() + oneHour * 24);\n};\n\nconst toDate = (timestamp: number | undefined) => {\n    return timestamp ? new Date(timestamp * 1000) : get24HoursFromNow();\n};\n\nclass SetIdTokenCookieImpl implements AfterAuthenticationEventHandler.Interface {\n    constructor(\n        private authenticationContext: AuthenticationContext.Interface,\n        private reply: Reply.Interface\n    ) {}\n\n    async handle(): Promise<void> {\n        const token = this.authenticationContext.getAuthToken();\n\n        if (!token) {\n            return;\n        }\n\n        // Attempt to acquire expiration from the token; fall back to \"expire in 24 hours\".\n        // In most cases the token will be a JWT token, but it can also be a custom token, or an API key.\n        const tokenData = jwt.decode(token, { json: true });\n        const expiresOn = tokenData ? toDate(tokenData.exp) : get24HoursFromNow();\n\n        // @see https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Set-Cookie\n        this.reply.setCookie(\"wby-id-token\", token, {\n            path: \"/\",\n            expires: expiresOn,\n            // Allow this cookie to be sent with cross-origin requests.\n            sameSite: \"none\",\n            // Only send this cookie to the server when HTTPS is used.\n            // NOTE: `https` requirement is ignored for `localhost.\n            secure: true,\n            // Forbids JavaScript from accessing the cookie.\n            httpOnly: true\n        });\n\n        this.reply.header(\"cache-control\", `no-cache=\"Set-Cookie\"`);\n    }\n}\n\nexport const SetIdTokenCookie = createImplementation({\n    abstraction: AfterAuthenticationEventHandler,\n    implementation: SetIdTokenCookieImpl,\n    dependencies: [AuthenticationContext, Reply]\n});\n"],"mappings":"AAAA,OAAOA,GAAG,MAAM,cAAc;AAC9B,SAASC,oBAAoB,QAAQ,qBAAqB;AAC1D,SAASC,KAAK,QAAQ,iBAAiB;AACvC,SAASC,+BAA+B;AACxC,SAASC,qBAAqB;AAE9B,MAAMC,iBAAiB,GAAGA,CAAA,KAAM;EAC5B,MAAMC,OAAO,GAAG,IAAI,GAAG,EAAE,GAAG,EAAE;EAC9B,OAAO,IAAIC,IAAI,CAAC,IAAIA,IAAI,CAAC,CAAC,CAACC,OAAO,CAAC,CAAC,GAAGF,OAAO,GAAG,EAAE,CAAC;AACxD,CAAC;AAED,MAAMG,MAAM,GAAIC,SAA6B,IAAK;EAC9C,OAAOA,SAAS,GAAG,IAAIH,IAAI,CAACG,SAAS,GAAG,IAAI,CAAC,GAAGL,iBAAiB,CAAC,CAAC;AACvE,CAAC;AAED,MAAMM,oBAAoB,CAAsD;EAC5EC,WAAWA,CACCC,qBAAsD,EACtDC,KAAsB,EAChC;IAAA,KAFUD,qBAAsD,GAAtDA,qBAAsD;IAAA,KACtDC,KAAsB,GAAtBA,KAAsB;EAC/B;EAEH,MAAMC,MAAMA,CAAA,EAAkB;IAC1B,MAAMC,KAAK,GAAG,IAAI,CAACH,qBAAqB,CAACI,YAAY,CAAC,CAAC;IAEvD,IAAI,CAACD,KAAK,EAAE;MACR;IACJ;;IAEA;IACA;IACA,MAAME,SAAS,GAAGlB,GAAG,CAACmB,MAAM,CAACH,KAAK,EAAE;MAAEI,IAAI,EAAE;IAAK,CAAC,CAAC;IACnD,MAAMC,SAAS,GAAGH,SAAS,GAAGT,MAAM,CAACS,SAAS,CAACI,GAAG,CAAC,GAAGjB,iBAAiB,CAAC,CAAC;;IAEzE;IACA,IAAI,CAACS,KAAK,CAACS,SAAS,CAAC,cAAc,EAAEP,KAAK,EAAE;MACxCQ,IAAI,EAAE,GAAG;MACTC,OAAO,EAAEJ,SAAS;MAClB;MACAK,QAAQ,EAAE,MAAM;MAChB;MACA;MACAC,MAAM,EAAE,IAAI;MACZ;MACAC,QAAQ,EAAE;IACd,CAAC,CAAC;IAEF,IAAI,CAACd,KAAK,CAACe,MAAM,CAAC,eAAe,EAAE,uBAAuB,CAAC;EAC/D;AACJ;AAEA,OAAO,MAAMC,gBAAgB,GAAG7B,oBAAoB,CAAC;EACjD8B,WAAW,EAAE5B,+BAA+B;EAC5C6B,cAAc,EAAErB,oBAAoB;EACpCsB,YAAY,EAAE,CAAC7B,qBAAqB,EAAEF,KAAK;AAC/C,CAAC,CAAC","ignoreList":[]}
+{"version":3,"file":"features/security/authentication/AuthenticationContext/SetIdTokenCookie.js","sources":["../../../../../src/features/security/authentication/AuthenticationContext/SetIdTokenCookie.ts"],"sourcesContent":["import jwt from \"jsonwebtoken\";\nimport { createImplementation } from \"@webiny/feature/api\";\nimport { Reply } from \"@webiny/handler\";\nimport { AfterAuthenticationEventHandler } from \"~/features/security/authentication/AuthenticationContext/index.js\";\nimport { AuthenticationContext } from \"~/features/security/authentication/AuthenticationContext/index.js\";\n\nconst get24HoursFromNow = () => {\n    const oneHour = 1000 * 60 * 60;\n    return new Date(new Date().getTime() + oneHour * 24);\n};\n\nconst toDate = (timestamp: number | undefined) => {\n    return timestamp ? new Date(timestamp * 1000) : get24HoursFromNow();\n};\n\nclass SetIdTokenCookieImpl implements AfterAuthenticationEventHandler.Interface {\n    constructor(\n        private authenticationContext: AuthenticationContext.Interface,\n        private reply: Reply.Interface\n    ) {}\n\n    async handle(): Promise<void> {\n        const token = this.authenticationContext.getAuthToken();\n\n        if (!token) {\n            return;\n        }\n\n        // Attempt to acquire expiration from the token; fall back to \"expire in 24 hours\".\n        // In most cases the token will be a JWT token, but it can also be a custom token, or an API key.\n        const tokenData = jwt.decode(token, { json: true });\n        const expiresOn = tokenData ? toDate(tokenData.exp) : get24HoursFromNow();\n\n        // @see https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Set-Cookie\n        this.reply.setCookie(\"wby-id-token\", token, {\n            path: \"/\",\n            expires: expiresOn,\n            // Allow this cookie to be sent with cross-origin requests.\n            sameSite: \"none\",\n            // Only send this cookie to the server when HTTPS is used.\n            // NOTE: `https` requirement is ignored for `localhost.\n            secure: true,\n            // Forbids JavaScript from accessing the cookie.\n            httpOnly: true\n        });\n\n        this.reply.header(\"cache-control\", `no-cache=\"Set-Cookie\"`);\n    }\n}\n\nexport const SetIdTokenCookie = createImplementation({\n    abstraction: AfterAuthenticationEventHandler,\n    implementation: SetIdTokenCookieImpl,\n    dependencies: [AuthenticationContext, Reply]\n});\n"],"names":["get24HoursFromNow","oneHour","Date","toDate","timestamp","SetIdTokenCookieImpl","authenticationContext","reply","token","tokenData","jwt","expiresOn","SetIdTokenCookie","createImplementation","AfterAuthenticationEventHandler","AuthenticationContext","Reply"],"mappings":";;;;AAMA,MAAMA,oBAAoB;IACtB,MAAMC,UAAU;IAChB,OAAO,IAAIC,KAAK,IAAIA,OAAO,OAAO,KAAKD,AAAU,KAAVA;AAC3C;AAEA,MAAME,SAAS,CAACC,YACLA,YAAY,IAAIF,KAAKE,AAAY,OAAZA,aAAoBJ;AAGpD,MAAMK;IACF,YACYC,qBAAsD,EACtDC,KAAsB,CAChC;aAFUD,qBAAqB,GAArBA;aACAC,KAAK,GAALA;IACT;IAEH,MAAM,SAAwB;QAC1B,MAAMC,QAAQ,IAAI,CAAC,qBAAqB,CAAC,YAAY;QAErD,IAAI,CAACA,OACD;QAKJ,MAAMC,YAAYC,aAAAA,MAAU,CAACF,OAAO;YAAE,MAAM;QAAK;QACjD,MAAMG,YAAYF,YAAYN,OAAOM,UAAU,GAAG,IAAIT;QAGtD,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,gBAAgBQ,OAAO;YACxC,MAAM;YACN,SAASG;YAET,UAAU;YAGV,QAAQ;YAER,UAAU;QACd;QAEA,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,iBAAiB;IACvC;AACJ;AAEO,MAAMC,mBAAmBC,qBAAqB;IACjD,aAAaC;IACb,gBAAgBT;IAChB,cAAc;QAACU;QAAuBC;KAAM;AAChD"}

package/features/security/authentication/AuthenticationContext/abstractions.js

@@ -1,5 +1,5 @@
 import { createAbstraction } from "@webiny/feature/api";
-/** Authenticate incoming requests and resolve the current identity. */
-export const AuthenticationContext = createAbstraction("AuthenticationContext");
+const AuthenticationContext = createAbstraction("AuthenticationContext");
+export { AuthenticationContext };
 
 //# sourceMappingURL=abstractions.js.map

package/features/security/authentication/AuthenticationContext/abstractions.js.map

@@ -1 +1 @@
-{"version":3,"names":["createAbstraction","AuthenticationContext"],"sources":["abstractions.ts"],"sourcesContent":["import { createAbstraction } from \"@webiny/feature/api\";\nimport type { Identity } from \"~/features/security/IdentityContext/Identity.js\";\n\nexport interface IAuthenticationContext {\n    authenticate(token: string): Promise<Identity>;\n    getAuthToken(): string | undefined;\n}\n\n/** Authenticate incoming requests and resolve the current identity. */\nexport const AuthenticationContext =\n    createAbstraction<IAuthenticationContext>(\"AuthenticationContext\");\n\nexport namespace AuthenticationContext {\n    export type Interface = IAuthenticationContext;\n}\n"],"mappings":"AAAA,SAASA,iBAAiB,QAAQ,qBAAqB;AAQvD;AACA,OAAO,MAAMC,qBAAqB,GAC9BD,iBAAiB,CAAyB,uBAAuB,CAAC","ignoreList":[]}
+{"version":3,"file":"features/security/authentication/AuthenticationContext/abstractions.js","sources":["../../../../../src/features/security/authentication/AuthenticationContext/abstractions.ts"],"sourcesContent":["import { createAbstraction } from \"@webiny/feature/api\";\nimport type { Identity } from \"~/features/security/IdentityContext/Identity.js\";\n\nexport interface IAuthenticationContext {\n    authenticate(token: string): Promise<Identity>;\n    getAuthToken(): string | undefined;\n}\n\n/** Authenticate incoming requests and resolve the current identity. */\nexport const AuthenticationContext =\n    createAbstraction<IAuthenticationContext>(\"AuthenticationContext\");\n\nexport namespace AuthenticationContext {\n    export type Interface = IAuthenticationContext;\n}\n"],"names":["AuthenticationContext","createAbstraction"],"mappings":";AASO,MAAMA,wBACTC,kBAA0C"}

package/features/security/authentication/AuthenticationContext/errors.js

@@ -1,130 +1,65 @@
 import { BaseError } from "@webiny/feature/api";
-
-/**
- * Base class for all authentication-related errors
- */
-export class AuthenticationError extends BaseError {
-  constructor(message) {
-    super({
-      message
-    });
-  }
-  static from(error) {
-    // Check for specific jsonwebtoken error names
-    if (error.name === "TokenExpiredError") {
-      return new TokenExpiredError(error.message);
-    }
-    if (error.name === "NotBeforeError") {
-      return new TokenNotYetValidError(error.message);
-    }
-    if (error.name === "JsonWebTokenError") {
-      // Check message for specific error types
-      const message = error.message.toLowerCase();
-      if (message.includes("invalid signature")) {
-        return new InvalidTokenSignatureError(error.message);
-      }
-      if (message.includes("invalid audience") || message.includes("jwt audience")) {
-        return new InvalidAudienceError(error.message);
-      }
-      if (message.includes("invalid issuer") || message.includes("jwt issuer")) {
-        return new InvalidIssuerError(error.message);
-      }
-      if (message.includes("jwt malformed") || message.includes("invalid token")) {
-        return new InvalidTokenError(error.message);
-      }
-
-      // Generic JsonWebTokenError
-      return new InvalidTokenError(error.message);
+class AuthenticationError extends BaseError {
+    constructor(message){
+        super({
+            message
+        });
     }
-
-    // If it's already one of our errors, return as-is
-    if (error instanceof AuthenticationError) {
-      return error;
+    static from(error) {
+        if ("TokenExpiredError" === error.name) return new TokenExpiredError(error.message);
+        if ("NotBeforeError" === error.name) return new TokenNotYetValidError(error.message);
+        if ("JsonWebTokenError" === error.name) {
+            const message = error.message.toLowerCase();
+            if (message.includes("invalid signature")) return new InvalidTokenSignatureError(error.message);
+            if (message.includes("invalid audience") || message.includes("jwt audience")) return new InvalidAudienceError(error.message);
+            if (message.includes("invalid issuer") || message.includes("jwt issuer")) return new InvalidIssuerError(error.message);
+            message.includes("jwt malformed") || message.includes("invalid token");
+            return new InvalidTokenError(error.message);
+        }
+        if (error instanceof AuthenticationError) return error;
+        return new InvalidTokenError(error.message || "Authentication failed");
     }
-
-    // For any other error, wrap in InvalidTokenError
-    return new InvalidTokenError(error.message || "Authentication failed");
-  }
 }
-
-/**
- * Thrown when a JWT token has expired
- */
-export class TokenExpiredError extends AuthenticationError {
-  code = "Authentication/TokenExpired";
-  constructor(message = "Token has expired") {
-    super(message);
-  }
+class TokenExpiredError extends AuthenticationError {
+    constructor(message = "Token has expired"){
+        super(message), this.code = "Authentication/TokenExpired";
+    }
 }
-
-/**
- * Thrown when a JWT token is not yet valid (nbf claim)
- */
-export class TokenNotYetValidError extends AuthenticationError {
-  code = "Authentication/TokenNotYetValid";
-  constructor(message = "Token is not yet valid") {
-    super(message);
-  }
+class TokenNotYetValidError extends AuthenticationError {
+    constructor(message = "Token is not yet valid"){
+        super(message), this.code = "Authentication/TokenNotYetValid";
+    }
 }
-
-/**
- * Thrown when a JWT token has an invalid signature
- */
-export class InvalidTokenSignatureError extends AuthenticationError {
-  code = "Authentication/InvalidSignature";
-  constructor(message = "Invalid token signature") {
-    super(message);
-  }
+class InvalidTokenSignatureError extends AuthenticationError {
+    constructor(message = "Invalid token signature"){
+        super(message), this.code = "Authentication/InvalidSignature";
+    }
 }
-
-/**
- * Thrown when a JWT token is malformed or invalid
- */
-export class InvalidTokenError extends AuthenticationError {
-  code = "Authentication/InvalidToken";
-  constructor(message = "Invalid token") {
-    super(message);
-  }
+class InvalidTokenError extends AuthenticationError {
+    constructor(message = "Invalid token"){
+        super(message), this.code = "Authentication/InvalidToken";
+    }
 }
-
-/**
- * Thrown when the JWT audience claim doesn't match expected value
- */
-export class InvalidAudienceError extends AuthenticationError {
-  code = "Authentication/InvalidAudience";
-  constructor(message = "Invalid audience") {
-    super(message);
-  }
+class InvalidAudienceError extends AuthenticationError {
+    constructor(message = "Invalid audience"){
+        super(message), this.code = "Authentication/InvalidAudience";
+    }
 }
-
-/**
- * Thrown when the JWT issuer claim doesn't match expected value
- */
-export class InvalidIssuerError extends AuthenticationError {
-  code = "Authentication/InvalidIssuer";
-  constructor(message = "Invalid issuer") {
-    super(message);
-  }
+class InvalidIssuerError extends AuthenticationError {
+    constructor(message = "Invalid issuer"){
+        super(message), this.code = "Authentication/InvalidIssuer";
+    }
 }
-
-/**
- * Thrown when a required JWT claim is missing
- */
-export class MissingClaimError extends AuthenticationError {
-  code = "Authentication/MissingClaim";
-  constructor(claim) {
-    super(`Missing required claim: ${claim}`);
-  }
+class MissingClaimError extends AuthenticationError {
+    constructor(claim){
+        super(`Missing required claim: ${claim}`), this.code = "Authentication/MissingClaim";
+    }
 }
-
-/**
- * Generic authentication failure error
- */
-export class AuthenticationFailedError extends AuthenticationError {
-  code = "Authentication/Failed";
-  constructor(message = "Authentication failed") {
-    super(message);
-  }
+class AuthenticationFailedError extends AuthenticationError {
+    constructor(message = "Authentication failed"){
+        super(message), this.code = "Authentication/Failed";
+    }
 }
+export { AuthenticationError, AuthenticationFailedError, InvalidAudienceError, InvalidIssuerError, InvalidTokenError, InvalidTokenSignatureError, MissingClaimError, TokenExpiredError, TokenNotYetValidError };
 
 //# sourceMappingURL=errors.js.map

package/features/security/authentication/AuthenticationContext/errors.js.map

@@ -1 +1 @@
-{"version":3,"names":["BaseError","AuthenticationError","constructor","message","from","error","name","TokenExpiredError","TokenNotYetValidError","toLowerCase","includes","InvalidTokenSignatureError","InvalidAudienceError","InvalidIssuerError","InvalidTokenError","code","MissingClaimError","claim","AuthenticationFailedError"],"sources":["errors.ts"],"sourcesContent":["import { BaseError } from \"@webiny/feature/api\";\n\n/**\n * Base class for all authentication-related errors\n */\nexport abstract class AuthenticationError extends BaseError {\n    protected constructor(message: string) {\n        super({ message });\n    }\n\n    static from(error: any): AuthenticationError {\n        // Check for specific jsonwebtoken error names\n        if (error.name === \"TokenExpiredError\") {\n            return new TokenExpiredError(error.message);\n        }\n\n        if (error.name === \"NotBeforeError\") {\n            return new TokenNotYetValidError(error.message);\n        }\n\n        if (error.name === \"JsonWebTokenError\") {\n            // Check message for specific error types\n            const message = error.message.toLowerCase();\n\n            if (message.includes(\"invalid signature\")) {\n                return new InvalidTokenSignatureError(error.message);\n            }\n\n            if (message.includes(\"invalid audience\") || message.includes(\"jwt audience\")) {\n                return new InvalidAudienceError(error.message);\n            }\n\n            if (message.includes(\"invalid issuer\") || message.includes(\"jwt issuer\")) {\n                return new InvalidIssuerError(error.message);\n            }\n\n            if (message.includes(\"jwt malformed\") || message.includes(\"invalid token\")) {\n                return new InvalidTokenError(error.message);\n            }\n\n            // Generic JsonWebTokenError\n            return new InvalidTokenError(error.message);\n        }\n\n        // If it's already one of our errors, return as-is\n        if (error instanceof AuthenticationError) {\n            return error;\n        }\n\n        // For any other error, wrap in InvalidTokenError\n        return new InvalidTokenError(error.message || \"Authentication failed\");\n    }\n}\n\n/**\n * Thrown when a JWT token has expired\n */\nexport class TokenExpiredError extends AuthenticationError {\n    override readonly code = \"Authentication/TokenExpired\" as const;\n\n    constructor(message: string = \"Token has expired\") {\n        super(message);\n    }\n}\n\n/**\n * Thrown when a JWT token is not yet valid (nbf claim)\n */\nexport class TokenNotYetValidError extends AuthenticationError {\n    override readonly code = \"Authentication/TokenNotYetValid\" as const;\n\n    constructor(message: string = \"Token is not yet valid\") {\n        super(message);\n    }\n}\n\n/**\n * Thrown when a JWT token has an invalid signature\n */\nexport class InvalidTokenSignatureError extends AuthenticationError {\n    override readonly code = \"Authentication/InvalidSignature\" as const;\n\n    constructor(message: string = \"Invalid token signature\") {\n        super(message);\n    }\n}\n\n/**\n * Thrown when a JWT token is malformed or invalid\n */\nexport class InvalidTokenError extends AuthenticationError {\n    override readonly code = \"Authentication/InvalidToken\" as const;\n\n    constructor(message: string = \"Invalid token\") {\n        super(message);\n    }\n}\n\n/**\n * Thrown when the JWT audience claim doesn't match expected value\n */\nexport class InvalidAudienceError extends AuthenticationError {\n    override readonly code = \"Authentication/InvalidAudience\" as const;\n\n    constructor(message: string = \"Invalid audience\") {\n        super(message);\n    }\n}\n\n/**\n * Thrown when the JWT issuer claim doesn't match expected value\n */\nexport class InvalidIssuerError extends AuthenticationError {\n    override readonly code = \"Authentication/InvalidIssuer\" as const;\n\n    constructor(message: string = \"Invalid issuer\") {\n        super(message);\n    }\n}\n\n/**\n * Thrown when a required JWT claim is missing\n */\nexport class MissingClaimError extends AuthenticationError {\n    override readonly code = \"Authentication/MissingClaim\" as const;\n\n    constructor(claim: string) {\n        super(`Missing required claim: ${claim}`);\n    }\n}\n\n/**\n * Generic authentication failure error\n */\nexport class AuthenticationFailedError extends AuthenticationError {\n    override readonly code = \"Authentication/Failed\" as const;\n\n    constructor(message: string = \"Authentication failed\") {\n        super(message);\n    }\n}\n"],"mappings":"AAAA,SAASA,SAAS,QAAQ,qBAAqB;;AAE/C;AACA;AACA;AACA,OAAO,MAAeC,mBAAmB,SAASD,SAAS,CAAC;EAC9CE,WAAWA,CAACC,OAAe,EAAE;IACnC,KAAK,CAAC;MAAEA;IAAQ,CAAC,CAAC;EACtB;EAEA,OAAOC,IAAIA,CAACC,KAAU,EAAuB;IACzC;IACA,IAAIA,KAAK,CAACC,IAAI,KAAK,mBAAmB,EAAE;MACpC,OAAO,IAAIC,iBAAiB,CAACF,KAAK,CAACF,OAAO,CAAC;IAC/C;IAEA,IAAIE,KAAK,CAACC,IAAI,KAAK,gBAAgB,EAAE;MACjC,OAAO,IAAIE,qBAAqB,CAACH,KAAK,CAACF,OAAO,CAAC;IACnD;IAEA,IAAIE,KAAK,CAACC,IAAI,KAAK,mBAAmB,EAAE;MACpC;MACA,MAAMH,OAAO,GAAGE,KAAK,CAACF,OAAO,CAACM,WAAW,CAAC,CAAC;MAE3C,IAAIN,OAAO,CAACO,QAAQ,CAAC,mBAAmB,CAAC,EAAE;QACvC,OAAO,IAAIC,0BAA0B,CAACN,KAAK,CAACF,OAAO,CAAC;MACxD;MAEA,IAAIA,OAAO,CAACO,QAAQ,CAAC,kBAAkB,CAAC,IAAIP,OAAO,CAACO,QAAQ,CAAC,cAAc,CAAC,EAAE;QAC1E,OAAO,IAAIE,oBAAoB,CAACP,KAAK,CAACF,OAAO,CAAC;MAClD;MAEA,IAAIA,OAAO,CAACO,QAAQ,CAAC,gBAAgB,CAAC,IAAIP,OAAO,CAACO,QAAQ,CAAC,YAAY,CAAC,EAAE;QACtE,OAAO,IAAIG,kBAAkB,CAACR,KAAK,CAACF,OAAO,CAAC;MAChD;MAEA,IAAIA,OAAO,CAACO,QAAQ,CAAC,eAAe,CAAC,IAAIP,OAAO,CAACO,QAAQ,CAAC,eAAe,CAAC,EAAE;QACxE,OAAO,IAAII,iBAAiB,CAACT,KAAK,CAACF,OAAO,CAAC;MAC/C;;MAEA;MACA,OAAO,IAAIW,iBAAiB,CAACT,KAAK,CAACF,OAAO,CAAC;IAC/C;;IAEA;IACA,IAAIE,KAAK,YAAYJ,mBAAmB,EAAE;MACtC,OAAOI,KAAK;IAChB;;IAEA;IACA,OAAO,IAAIS,iBAAiB,CAACT,KAAK,CAACF,OAAO,IAAI,uBAAuB,CAAC;EAC1E;AACJ;;AAEA;AACA;AACA;AACA,OAAO,MAAMI,iBAAiB,SAASN,mBAAmB,CAAC;EACrCc,IAAI,GAAG,6BAA6B;EAEtDb,WAAWA,CAACC,OAAe,GAAG,mBAAmB,EAAE;IAC/C,KAAK,CAACA,OAAO,CAAC;EAClB;AACJ;;AAEA;AACA;AACA;AACA,OAAO,MAAMK,qBAAqB,SAASP,mBAAmB,CAAC;EACzCc,IAAI,GAAG,iCAAiC;EAE1Db,WAAWA,CAACC,OAAe,GAAG,wBAAwB,EAAE;IACpD,KAAK,CAACA,OAAO,CAAC;EAClB;AACJ;;AAEA;AACA;AACA;AACA,OAAO,MAAMQ,0BAA0B,SAASV,mBAAmB,CAAC;EAC9Cc,IAAI,GAAG,iCAAiC;EAE1Db,WAAWA,CAACC,OAAe,GAAG,yBAAyB,EAAE;IACrD,KAAK,CAACA,OAAO,CAAC;EAClB;AACJ;;AAEA;AACA;AACA;AACA,OAAO,MAAMW,iBAAiB,SAASb,mBAAmB,CAAC;EACrCc,IAAI,GAAG,6BAA6B;EAEtDb,WAAWA,CAACC,OAAe,GAAG,eAAe,EAAE;IAC3C,KAAK,CAACA,OAAO,CAAC;EAClB;AACJ;;AAEA;AACA;AACA;AACA,OAAO,MAAMS,oBAAoB,SAASX,mBAAmB,CAAC;EACxCc,IAAI,GAAG,gCAAgC;EAEzDb,WAAWA,CAACC,OAAe,GAAG,kBAAkB,EAAE;IAC9C,KAAK,CAACA,OAAO,CAAC;EAClB;AACJ;;AAEA;AACA;AACA;AACA,OAAO,MAAMU,kBAAkB,SAASZ,mBAAmB,CAAC;EACtCc,IAAI,GAAG,8BAA8B;EAEvDb,WAAWA,CAACC,OAAe,GAAG,gBAAgB,EAAE;IAC5C,KAAK,CAACA,OAAO,CAAC;EAClB;AACJ;;AAEA;AACA;AACA;AACA,OAAO,MAAMa,iBAAiB,SAASf,mBAAmB,CAAC;EACrCc,IAAI,GAAG,6BAA6B;EAEtDb,WAAWA,CAACe,KAAa,EAAE;IACvB,KAAK,CAAC,2BAA2BA,KAAK,EAAE,CAAC;EAC7C;AACJ;;AAEA;AACA;AACA;AACA,OAAO,MAAMC,yBAAyB,SAASjB,mBAAmB,CAAC;EAC7Cc,IAAI,GAAG,uBAAuB;EAEhDb,WAAWA,CAACC,OAAe,GAAG,uBAAuB,EAAE;IACnD,KAAK,CAACA,OAAO,CAAC;EAClB;AACJ","ignoreList":[]}
+{"version":3,"file":"features/security/authentication/AuthenticationContext/errors.js","sources":["../../../../../src/features/security/authentication/AuthenticationContext/errors.ts"],"sourcesContent":["import { BaseError } from \"@webiny/feature/api\";\n\n/**\n * Base class for all authentication-related errors\n */\nexport abstract class AuthenticationError extends BaseError {\n    protected constructor(message: string) {\n        super({ message });\n    }\n\n    static from(error: any): AuthenticationError {\n        // Check for specific jsonwebtoken error names\n        if (error.name === \"TokenExpiredError\") {\n            return new TokenExpiredError(error.message);\n        }\n\n        if (error.name === \"NotBeforeError\") {\n            return new TokenNotYetValidError(error.message);\n        }\n\n        if (error.name === \"JsonWebTokenError\") {\n            // Check message for specific error types\n            const message = error.message.toLowerCase();\n\n            if (message.includes(\"invalid signature\")) {\n                return new InvalidTokenSignatureError(error.message);\n            }\n\n            if (message.includes(\"invalid audience\") || message.includes(\"jwt audience\")) {\n                return new InvalidAudienceError(error.message);\n            }\n\n            if (message.includes(\"invalid issuer\") || message.includes(\"jwt issuer\")) {\n                return new InvalidIssuerError(error.message);\n            }\n\n            if (message.includes(\"jwt malformed\") || message.includes(\"invalid token\")) {\n                return new InvalidTokenError(error.message);\n            }\n\n            // Generic JsonWebTokenError\n            return new InvalidTokenError(error.message);\n        }\n\n        // If it's already one of our errors, return as-is\n        if (error instanceof AuthenticationError) {\n            return error;\n        }\n\n        // For any other error, wrap in InvalidTokenError\n        return new InvalidTokenError(error.message || \"Authentication failed\");\n    }\n}\n\n/**\n * Thrown when a JWT token has expired\n */\nexport class TokenExpiredError extends AuthenticationError {\n    override readonly code = \"Authentication/TokenExpired\" as const;\n\n    constructor(message: string = \"Token has expired\") {\n        super(message);\n    }\n}\n\n/**\n * Thrown when a JWT token is not yet valid (nbf claim)\n */\nexport class TokenNotYetValidError extends AuthenticationError {\n    override readonly code = \"Authentication/TokenNotYetValid\" as const;\n\n    constructor(message: string = \"Token is not yet valid\") {\n        super(message);\n    }\n}\n\n/**\n * Thrown when a JWT token has an invalid signature\n */\nexport class InvalidTokenSignatureError extends AuthenticationError {\n    override readonly code = \"Authentication/InvalidSignature\" as const;\n\n    constructor(message: string = \"Invalid token signature\") {\n        super(message);\n    }\n}\n\n/**\n * Thrown when a JWT token is malformed or invalid\n */\nexport class InvalidTokenError extends AuthenticationError {\n    override readonly code = \"Authentication/InvalidToken\" as const;\n\n    constructor(message: string = \"Invalid token\") {\n        super(message);\n    }\n}\n\n/**\n * Thrown when the JWT audience claim doesn't match expected value\n */\nexport class InvalidAudienceError extends AuthenticationError {\n    override readonly code = \"Authentication/InvalidAudience\" as const;\n\n    constructor(message: string = \"Invalid audience\") {\n        super(message);\n    }\n}\n\n/**\n * Thrown when the JWT issuer claim doesn't match expected value\n */\nexport class InvalidIssuerError extends AuthenticationError {\n    override readonly code = \"Authentication/InvalidIssuer\" as const;\n\n    constructor(message: string = \"Invalid issuer\") {\n        super(message);\n    }\n}\n\n/**\n * Thrown when a required JWT claim is missing\n */\nexport class MissingClaimError extends AuthenticationError {\n    override readonly code = \"Authentication/MissingClaim\" as const;\n\n    constructor(claim: string) {\n        super(`Missing required claim: ${claim}`);\n    }\n}\n\n/**\n * Generic authentication failure error\n */\nexport class AuthenticationFailedError extends AuthenticationError {\n    override readonly code = \"Authentication/Failed\" as const;\n\n    constructor(message: string = \"Authentication failed\") {\n        super(message);\n    }\n}\n"],"names":["AuthenticationError","BaseError","message","error","TokenExpiredError","TokenNotYetValidError","InvalidTokenSignatureError","InvalidAudienceError","InvalidIssuerError","InvalidTokenError","MissingClaimError","claim","AuthenticationFailedError"],"mappings":";AAKO,MAAeA,4BAA4BC;IAC9C,YAAsBC,OAAe,CAAE;QACnC,KAAK,CAAC;YAAEA;QAAQ;IACpB;IAEA,OAAO,KAAKC,KAAU,EAAuB;QAEzC,IAAIA,AAAe,wBAAfA,MAAM,IAAI,EACV,OAAO,IAAIC,kBAAkBD,MAAM,OAAO;QAG9C,IAAIA,AAAe,qBAAfA,MAAM,IAAI,EACV,OAAO,IAAIE,sBAAsBF,MAAM,OAAO;QAGlD,IAAIA,AAAe,wBAAfA,MAAM,IAAI,EAA0B;YAEpC,MAAMD,UAAUC,MAAM,OAAO,CAAC,WAAW;YAEzC,IAAID,QAAQ,QAAQ,CAAC,sBACjB,OAAO,IAAII,2BAA2BH,MAAM,OAAO;YAGvD,IAAID,QAAQ,QAAQ,CAAC,uBAAuBA,QAAQ,QAAQ,CAAC,iBACzD,OAAO,IAAIK,qBAAqBJ,MAAM,OAAO;YAGjD,IAAID,QAAQ,QAAQ,CAAC,qBAAqBA,QAAQ,QAAQ,CAAC,eACvD,OAAO,IAAIM,mBAAmBL,MAAM,OAAO;YAG3CD,QAAQ,QAAQ,CAAC,oBAAoBA,QAAQ,QAAQ,CAAC;YAK1D,OAAO,IAAIO,kBAAkBN,MAAM,OAAO;QAC9C;QAGA,IAAIA,iBAAiBH,qBACjB,OAAOG;QAIX,OAAO,IAAIM,kBAAkBN,MAAM,OAAO,IAAI;IAClD;AACJ;AAKO,MAAMC,0BAA0BJ;IAGnC,YAAYE,UAAkB,mBAAmB,CAAE;QAC/C,KAAK,CAACA,UAAAA,IAAAA,CAHQ,IAAI,GAAG;IAIzB;AACJ;AAKO,MAAMG,8BAA8BL;IAGvC,YAAYE,UAAkB,wBAAwB,CAAE;QACpD,KAAK,CAACA,UAAAA,IAAAA,CAHQ,IAAI,GAAG;IAIzB;AACJ;AAKO,MAAMI,mCAAmCN;IAG5C,YAAYE,UAAkB,yBAAyB,CAAE;QACrD,KAAK,CAACA,UAAAA,IAAAA,CAHQ,IAAI,GAAG;IAIzB;AACJ;AAKO,MAAMO,0BAA0BT;IAGnC,YAAYE,UAAkB,eAAe,CAAE;QAC3C,KAAK,CAACA,UAAAA,IAAAA,CAHQ,IAAI,GAAG;IAIzB;AACJ;AAKO,MAAMK,6BAA6BP;IAGtC,YAAYE,UAAkB,kBAAkB,CAAE;QAC9C,KAAK,CAACA,UAAAA,IAAAA,CAHQ,IAAI,GAAG;IAIzB;AACJ;AAKO,MAAMM,2BAA2BR;IAGpC,YAAYE,UAAkB,gBAAgB,CAAE;QAC5C,KAAK,CAACA,UAAAA,IAAAA,CAHQ,IAAI,GAAG;IAIzB;AACJ;AAKO,MAAMQ,0BAA0BV;IAGnC,YAAYW,KAAa,CAAE;QACvB,KAAK,CAAC,CAAC,wBAAwB,EAAEA,OAAO,QAH1B,IAAI,GAAG;IAIzB;AACJ;AAKO,MAAMC,kCAAkCZ;IAG3C,YAAYE,UAAkB,uBAAuB,CAAE;QACnD,KAAK,CAACA,UAAAA,IAAAA,CAHQ,IAAI,GAAG;IAIzB;AACJ"}

package/features/security/authentication/AuthenticationContext/events.js

@@ -1,22 +1,23 @@
 import { DomainEvent } from "../../../eventPublisher/index.js";
 import { createAbstraction } from "@webiny/feature/api";
-export class BeforeAuthenticationEvent extends DomainEvent {
-  eventType = "authentication.beforeAuthentication";
-  getHandlerAbstraction() {
-    return BeforeAuthenticationEventHandler;
-  }
+class BeforeAuthenticationEvent extends DomainEvent {
+    getHandlerAbstraction() {
+        return BeforeAuthenticationEventHandler;
+    }
+    constructor(...args){
+        super(...args), this.eventType = "authentication.beforeAuthentication";
+    }
 }
-
-/** Hook into authentication lifecycle before authentication occurs. */
-export const BeforeAuthenticationEventHandler = createAbstraction("BeforeAuthenticationEventHandler");
-export class AfterAuthenticationEvent extends DomainEvent {
-  eventType = "authentication.afterAuthentication";
-  getHandlerAbstraction() {
-    return AfterAuthenticationEventHandler;
-  }
+const BeforeAuthenticationEventHandler = createAbstraction("BeforeAuthenticationEventHandler");
+class AfterAuthenticationEvent extends DomainEvent {
+    getHandlerAbstraction() {
+        return AfterAuthenticationEventHandler;
+    }
+    constructor(...args){
+        super(...args), this.eventType = "authentication.afterAuthentication";
+    }
 }
-
-/** Hook into authentication lifecycle after authentication occurs. */
-export const AfterAuthenticationEventHandler = createAbstraction("AfterAuthenticationEventHandler");
+const AfterAuthenticationEventHandler = createAbstraction("AfterAuthenticationEventHandler");
+export { AfterAuthenticationEvent, AfterAuthenticationEventHandler, BeforeAuthenticationEvent, BeforeAuthenticationEventHandler };
 
 //# sourceMappingURL=events.js.map

package/features/security/authentication/AuthenticationContext/events.js.map

@@ -1 +1 @@
-{"version":3,"names":["DomainEvent","createAbstraction","BeforeAuthenticationEvent","eventType","getHandlerAbstraction","BeforeAuthenticationEventHandler","AfterAuthenticationEvent","AfterAuthenticationEventHandler"],"sources":["events.ts"],"sourcesContent":["import { DomainEvent } from \"~/features/eventPublisher/index.js\";\nimport { createAbstraction } from \"@webiny/feature/api\";\nimport type { IEventHandler } from \"~/features/eventPublisher/index.js\";\nimport type { Identity } from \"~/features/security/IdentityContext/Identity.js\";\n\nexport interface BeforeAuthenticationPayload {\n    token: string;\n}\n\nexport class BeforeAuthenticationEvent extends DomainEvent<BeforeAuthenticationPayload> {\n    eventType = \"authentication.beforeAuthentication\" as const;\n\n    getHandlerAbstraction() {\n        return BeforeAuthenticationEventHandler;\n    }\n}\n\n/** Hook into authentication lifecycle before authentication occurs. */\nexport const BeforeAuthenticationEventHandler = createAbstraction<\n    IEventHandler<BeforeAuthenticationEvent>\n>(\"BeforeAuthenticationEventHandler\");\n\nexport namespace BeforeAuthenticationEventHandler {\n    export type Interface = IEventHandler<BeforeAuthenticationEvent>;\n    export type Event = BeforeAuthenticationEvent;\n}\n\nexport interface AfterAuthenticationPayload {\n    identity: Identity;\n    token: string;\n}\n\nexport class AfterAuthenticationEvent extends DomainEvent<AfterAuthenticationPayload> {\n    eventType = \"authentication.afterAuthentication\" as const;\n\n    getHandlerAbstraction() {\n        return AfterAuthenticationEventHandler;\n    }\n}\n\n/** Hook into authentication lifecycle after authentication occurs. */\nexport const AfterAuthenticationEventHandler = createAbstraction<\n    IEventHandler<AfterAuthenticationEvent>\n>(\"AfterAuthenticationEventHandler\");\n\nexport namespace AfterAuthenticationEventHandler {\n    export type Interface = IEventHandler<AfterAuthenticationEvent>;\n    export type Event = AfterAuthenticationEvent;\n}\n"],"mappings":"AAAA,SAASA,WAAW;AACpB,SAASC,iBAAiB,QAAQ,qBAAqB;AAQvD,OAAO,MAAMC,yBAAyB,SAASF,WAAW,CAA8B;EACpFG,SAAS,GAAG,qCAAqC;EAEjDC,qBAAqBA,CAAA,EAAG;IACpB,OAAOC,gCAAgC;EAC3C;AACJ;;AAEA;AACA,OAAO,MAAMA,gCAAgC,GAAGJ,iBAAiB,CAE/D,kCAAkC,CAAC;AAYrC,OAAO,MAAMK,wBAAwB,SAASN,WAAW,CAA6B;EAClFG,SAAS,GAAG,oCAAoC;EAEhDC,qBAAqBA,CAAA,EAAG;IACpB,OAAOG,+BAA+B;EAC1C;AACJ;;AAEA;AACA,OAAO,MAAMA,+BAA+B,GAAGN,iBAAiB,CAE9D,iCAAiC,CAAC","ignoreList":[]}
+{"version":3,"file":"features/security/authentication/AuthenticationContext/events.js","sources":["../../../../../src/features/security/authentication/AuthenticationContext/events.ts"],"sourcesContent":["import { DomainEvent } from \"~/features/eventPublisher/index.js\";\nimport { createAbstraction } from \"@webiny/feature/api\";\nimport type { IEventHandler } from \"~/features/eventPublisher/index.js\";\nimport type { Identity } from \"~/features/security/IdentityContext/Identity.js\";\n\nexport interface BeforeAuthenticationPayload {\n    token: string;\n}\n\nexport class BeforeAuthenticationEvent extends DomainEvent<BeforeAuthenticationPayload> {\n    eventType = \"authentication.beforeAuthentication\" as const;\n\n    getHandlerAbstraction() {\n        return BeforeAuthenticationEventHandler;\n    }\n}\n\n/** Hook into authentication lifecycle before authentication occurs. */\nexport const BeforeAuthenticationEventHandler = createAbstraction<\n    IEventHandler<BeforeAuthenticationEvent>\n>(\"BeforeAuthenticationEventHandler\");\n\nexport namespace BeforeAuthenticationEventHandler {\n    export type Interface = IEventHandler<BeforeAuthenticationEvent>;\n    export type Event = BeforeAuthenticationEvent;\n}\n\nexport interface AfterAuthenticationPayload {\n    identity: Identity;\n    token: string;\n}\n\nexport class AfterAuthenticationEvent extends DomainEvent<AfterAuthenticationPayload> {\n    eventType = \"authentication.afterAuthentication\" as const;\n\n    getHandlerAbstraction() {\n        return AfterAuthenticationEventHandler;\n    }\n}\n\n/** Hook into authentication lifecycle after authentication occurs. */\nexport const AfterAuthenticationEventHandler = createAbstraction<\n    IEventHandler<AfterAuthenticationEvent>\n>(\"AfterAuthenticationEventHandler\");\n\nexport namespace AfterAuthenticationEventHandler {\n    export type Interface = IEventHandler<AfterAuthenticationEvent>;\n    export type Event = AfterAuthenticationEvent;\n}\n"],"names":["BeforeAuthenticationEvent","DomainEvent","BeforeAuthenticationEventHandler","createAbstraction","AfterAuthenticationEvent","AfterAuthenticationEventHandler"],"mappings":";;AASO,MAAMA,kCAAkCC;IAG3C,wBAAwB;QACpB,OAAOC;IACX;;QALG,qBACH,SAAS,GAAG;;AAKhB;AAGO,MAAMA,mCAAmCC,kBAE9C;AAYK,MAAMC,iCAAiCH;IAG1C,wBAAwB;QACpB,OAAOI;IACX;;QALG,qBACH,SAAS,GAAG;;AAKhB;AAGO,MAAMA,kCAAkCF,kBAE7C"}