@webiny/api-core 6.3.0 → 6.4.0-beta.1

package/legacy/security/LegacyContext.js

@@ -12,194 +12,141 @@ import { ListTeamsUseCase } from "../../features/security/teams/ListTeams/index.
 import { CreateTeam } from "../../features/security/teams/CreateTeam/index.js";
 import { UpdateTeam } from "../../features/security/teams/UpdateTeam/index.js";
 import { DeleteTeam } from "../../features/security/teams/DeleteTeam/index.js";
-
-/**
- * Legacy bridge that implements the old Security interface.
- * As we implement each phase, we'll replace forwarding with delegation.
- */
-export class LegacyContext {
-  constructor(container) {
-    this.container = container;
-  }
-  get identityContext() {
-    return this.container.resolve(IdentityContext);
-  }
-  get authenticationContext() {
-    return this.container.resolve(AuthenticationContext);
-  }
-  addAuthenticator(authenticator) {
-    this.container.registerFactory(Authenticator, () => {
-      return {
-        authenticate(token) {
-          return authenticator(token);
-        }
-      };
-    });
-  }
-  async authenticate(token) {
-    // Authenticate using new context
-    const identity = await this.authenticationContext.authenticate(token);
-
-    // Set identity in IdentityContext
-    this.identityContext.setIdentity(identity);
-  }
-  getIdentity() {
-    const identity = this.identityContext.getIdentity();
-
-    // Convert our Identity class to old SecurityIdentity format
-    if (identity.isAnonymous()) {
-      return undefined;
+class LegacyContext {
+    constructor(container){
+        this.container = container;
     }
-    return identity;
-  }
-  setIdentity(identity) {
-    if (!identity) {
-      this.identityContext.setIdentity(undefined);
-      return;
+    get identityContext() {
+        return this.container.resolve(IdentityContext);
+    }
+    get authenticationContext() {
+        return this.container.resolve(AuthenticationContext);
+    }
+    addAuthenticator(authenticator) {
+        this.container.registerFactory(Authenticator, ()=>({
+                authenticate (token) {
+                    return authenticator(token);
+                }
+            }));
+    }
+    async authenticate(token) {
+        const identity = await this.authenticationContext.authenticate(token);
+        this.identityContext.setIdentity(identity);
+    }
+    getIdentity() {
+        const identity = this.identityContext.getIdentity();
+        if (identity.isAnonymous()) return;
+        return identity;
+    }
+    setIdentity(identity) {
+        if (!identity) return void this.identityContext.setIdentity(void 0);
+        const { id, displayName, type, ...rest } = identity;
+        const authenticatedIdentity = new AuthenticatedIdentity({
+            id,
+            displayName,
+            type,
+            ...rest
+        });
+        this.identityContext.setIdentity(authenticatedIdentity);
+    }
+    getToken() {
+        return this.authenticationContext.getAuthToken();
+    }
+    isAuthorizationEnabled() {
+        return this.identityContext.isAuthorizationEnabled();
+    }
+    withoutAuthorization(cb) {
+        return this.identityContext.withoutAuthorization(cb);
+    }
+    withIdentity(identity, cb) {
+        if (!identity) return this.identityContext.withIdentity(void 0, cb);
+        const { id, displayName, type, ...rest } = identity;
+        const authenticatedIdentity = new AuthenticatedIdentity({
+            id,
+            displayName,
+            type,
+            ...rest
+        });
+        return this.identityContext.withIdentity(authenticatedIdentity, cb);
+    }
+    async getPermission(permission) {
+        return this.identityContext.getPermission(permission);
+    }
+    async getPermissions(permission) {
+        return this.identityContext.getPermissions(permission);
+    }
+    async listPermissions() {
+        return this.identityContext.listPermissions();
+    }
+    async hasFullAccess() {
+        return this.identityContext.hasFullAccess();
+    }
+    async getRole(params) {
+        const useCase = this.container.resolve(GetRoleUseCase);
+        const result = await useCase.execute(params.where);
+        if (result.isFail()) throw result.error;
+        return result.value;
+    }
+    async listRoles(params) {
+        const useCase = this.container.resolve(ListRolesUseCase);
+        const result = await useCase.execute(params);
+        if (result.isFail()) throw result.error;
+        return result.value;
+    }
+    async createRole(input) {
+        const useCase = this.container.resolve(CreateRoleUseCase);
+        const result = await useCase.execute(input);
+        if (result.isFail()) throw result.error;
+        return result.value;
+    }
+    async updateRole(id, input) {
+        const useCase = this.container.resolve(UpdateRoleUseCase);
+        const result = await useCase.execute(id, input);
+        if (result.isFail()) throw result.error;
+        return result.value;
+    }
+    async deleteRole(id) {
+        const useCase = this.container.resolve(DeleteRoleUseCase);
+        const result = await useCase.execute(id);
+        if (result.isFail()) throw result.error;
+    }
+    addAuthorizer(authorizer) {
+        this.container.registerFactory(Authorizer, ()=>({
+                authorize () {
+                    return authorizer();
+                }
+            }));
+    }
+    async getTeam(params) {
+        const useCase = this.container.resolve(GetTeamUseCase);
+        const result = await useCase.execute(params.where);
+        if (result.isFail()) throw result.error;
+        return result.value;
+    }
+    async listTeams(params) {
+        const useCase = this.container.resolve(ListTeamsUseCase);
+        const result = await useCase.execute(params);
+        if (result.isFail()) throw result.error;
+        return result.value;
+    }
+    async createTeam(input) {
+        const useCase = this.container.resolve(CreateTeam);
+        const result = await useCase.execute(input);
+        if (result.isFail()) throw result.error;
+        return result.value;
+    }
+    async updateTeam(id, input) {
+        const useCase = this.container.resolve(UpdateTeam);
+        const result = await useCase.execute(id, input);
+        if (result.isFail()) throw result.error;
+        return result.value;
+    }
+    async deleteTeam(id) {
+        const useCase = this.container.resolve(DeleteTeam);
+        const result = await useCase.execute(id);
+        if (result.isFail()) throw result.error;
     }
-
-    // Wrap old identity format in AuthenticatedIdentity
-    const {
-      id,
-      displayName,
-      type,
-      ...rest
-    } = identity;
-    const authenticatedIdentity = new AuthenticatedIdentity({
-      id,
-      displayName,
-      type,
-      ...rest
-    });
-    this.identityContext.setIdentity(authenticatedIdentity);
-  }
-  getToken() {
-    return this.authenticationContext.getAuthToken();
-  }
-  isAuthorizationEnabled() {
-    return this.identityContext.isAuthorizationEnabled();
-  }
-  withoutAuthorization(cb) {
-    return this.identityContext.withoutAuthorization(cb);
-  }
-  withIdentity(identity, cb) {
-    if (!identity) {
-      return this.identityContext.withIdentity(undefined, cb);
-    }
-    const {
-      id,
-      displayName,
-      type,
-      ...rest
-    } = identity;
-    const authenticatedIdentity = new AuthenticatedIdentity({
-      id,
-      displayName,
-      type,
-      ...rest
-    });
-    return this.identityContext.withIdentity(authenticatedIdentity, cb);
-  }
-  async getPermission(permission) {
-    return this.identityContext.getPermission(permission);
-  }
-  async getPermissions(permission) {
-    return this.identityContext.getPermissions(permission);
-  }
-  async listPermissions() {
-    return this.identityContext.listPermissions();
-  }
-  async hasFullAccess() {
-    return this.identityContext.hasFullAccess();
-  }
-  async getRole(params) {
-    const useCase = this.container.resolve(GetRoleUseCase);
-    const result = await useCase.execute(params.where);
-    if (result.isFail()) {
-      throw result.error;
-    }
-    return result.value;
-  }
-  async listRoles(params) {
-    const useCase = this.container.resolve(ListRolesUseCase);
-    const result = await useCase.execute(params);
-    if (result.isFail()) {
-      throw result.error;
-    }
-    return result.value;
-  }
-  async createRole(input) {
-    const useCase = this.container.resolve(CreateRoleUseCase);
-    const result = await useCase.execute(input);
-    if (result.isFail()) {
-      throw result.error;
-    }
-    return result.value;
-  }
-  async updateRole(id, input) {
-    const useCase = this.container.resolve(UpdateRoleUseCase);
-    const result = await useCase.execute(id, input);
-    if (result.isFail()) {
-      throw result.error;
-    }
-    return result.value;
-  }
-  async deleteRole(id) {
-    const useCase = this.container.resolve(DeleteRoleUseCase);
-    const result = await useCase.execute(id);
-    if (result.isFail()) {
-      throw result.error;
-    }
-  }
-  addAuthorizer(authorizer) {
-    // @ts-expect-error
-    this.container.registerFactory(Authorizer, () => {
-      return {
-        authorize() {
-          return authorizer();
-        }
-      };
-    });
-  }
-  async getTeam(params) {
-    const useCase = this.container.resolve(GetTeamUseCase);
-    const result = await useCase.execute(params.where);
-    if (result.isFail()) {
-      throw result.error;
-    }
-    return result.value;
-  }
-  async listTeams(params) {
-    const useCase = this.container.resolve(ListTeamsUseCase);
-    const result = await useCase.execute(params);
-    if (result.isFail()) {
-      throw result.error;
-    }
-    return result.value;
-  }
-  async createTeam(input) {
-    const useCase = this.container.resolve(CreateTeam);
-    const result = await useCase.execute(input);
-    if (result.isFail()) {
-      throw result.error;
-    }
-    return result.value;
-  }
-  async updateTeam(id, input) {
-    const useCase = this.container.resolve(UpdateTeam);
-    const result = await useCase.execute(id, input);
-    if (result.isFail()) {
-      throw result.error;
-    }
-    return result.value;
-  }
-  async deleteTeam(id) {
-    const useCase = this.container.resolve(DeleteTeam);
-    const result = await useCase.execute(id);
-    if (result.isFail()) {
-      throw result.error;
-    }
-  }
 }
+export { LegacyContext };
 
 //# sourceMappingURL=LegacyContext.js.map

package/legacy/security/LegacyContext.js.map

@@ -1 +1 @@
-{"version":3,"names":["AuthenticationContext","Authenticator","Authorizer","AuthenticatedIdentity","IdentityContext","GetRoleUseCase","ListRolesUseCase","CreateRoleUseCase","UpdateRoleUseCase","DeleteRoleUseCase","GetTeamUseCase","ListTeamsUseCase","CreateTeam","UpdateTeam","DeleteTeam","LegacyContext","constructor","container","identityContext","resolve","authenticationContext","addAuthenticator","authenticator","registerFactory","authenticate","token","identity","setIdentity","getIdentity","isAnonymous","undefined","id","displayName","type","rest","authenticatedIdentity","getToken","getAuthToken","isAuthorizationEnabled","withoutAuthorization","cb","withIdentity","getPermission","permission","getPermissions","listPermissions","hasFullAccess","getRole","params","useCase","result","execute","where","isFail","error","value","listRoles","createRole","input","updateRole","deleteRole","addAuthorizer","authorizer","authorize","getTeam","listTeams","createTeam","updateTeam","deleteTeam"],"sources":["LegacyContext.ts"],"sourcesContent":["import { type Container } from \"@webiny/di\";\nimport type { SecurityIdentity, SecurityPermission } from \"~/types/security.js\";\nimport { AuthenticationContext } from \"~/features/security/authentication/AuthenticationContext/index.js\";\nimport { Authenticator } from \"~/features/security/authentication/Authenticator/index.js\";\nimport { Authorizer } from \"~/features/security/authorization/Authorizer/abstractions.js\";\nimport {\n    AuthenticatedIdentity,\n    IdentityContext,\n    IdentityData\n} from \"~/features/security/IdentityContext/index.js\";\nimport { GetRoleUseCase } from \"~/features/security/roles/GetRole/index.js\";\nimport { ListRolesUseCase } from \"~/features/security/roles/ListRoles/index.js\";\nimport { CreateRoleUseCase } from \"~/features/security/roles/CreateRole/index.js\";\nimport { UpdateRoleUseCase } from \"~/features/security/roles/UpdateRole/index.js\";\nimport { DeleteRoleUseCase } from \"~/features/security/roles/DeleteRole/index.js\";\nimport { GetTeamUseCase } from \"~/features/security/teams/GetTeam/index.js\";\nimport { ListTeamsUseCase } from \"~/features/security/teams/ListTeams/index.js\";\nimport { CreateTeam } from \"~/features/security/teams/CreateTeam/index.js\";\nimport { UpdateTeam } from \"~/features/security/teams/UpdateTeam/index.js\";\nimport { DeleteTeam } from \"~/features/security/teams/DeleteTeam/index.js\";\n\n/**\n * Legacy bridge that implements the old Security interface.\n * As we implement each phase, we'll replace forwarding with delegation.\n */\nexport class LegacyContext {\n    constructor(private container: Container) {}\n\n    private get identityContext() {\n        return this.container.resolve(IdentityContext);\n    }\n\n    private get authenticationContext() {\n        return this.container.resolve(AuthenticationContext);\n    }\n\n    addAuthenticator(authenticator: Authenticator.Interface[\"authenticate\"]): void {\n        this.container.registerFactory(Authenticator, () => {\n            return {\n                authenticate(token: string): Promise<IdentityData | null> {\n                    return authenticator(token);\n                }\n            };\n        });\n    }\n\n    async authenticate(token: string): Promise<void> {\n        // Authenticate using new context\n        const identity = await this.authenticationContext.authenticate(token);\n\n        // Set identity in IdentityContext\n        this.identityContext.setIdentity(identity);\n    }\n\n    getIdentity(): SecurityIdentity {\n        const identity = this.identityContext.getIdentity();\n\n        // Convert our Identity class to old SecurityIdentity format\n        if (identity.isAnonymous()) {\n            return undefined as any;\n        }\n\n        return identity;\n    }\n\n    setIdentity(identity: SecurityIdentity): void {\n        if (!identity) {\n            this.identityContext.setIdentity(undefined);\n            return;\n        }\n\n        // Wrap old identity format in AuthenticatedIdentity\n        const { id, displayName, type, ...rest } = identity;\n        const authenticatedIdentity = new AuthenticatedIdentity({\n            id,\n            displayName,\n            type,\n            ...rest\n        });\n\n        this.identityContext.setIdentity(authenticatedIdentity);\n    }\n\n    getToken() {\n        return this.authenticationContext.getAuthToken();\n    }\n\n    isAuthorizationEnabled(): boolean {\n        return this.identityContext.isAuthorizationEnabled();\n    }\n\n    withoutAuthorization<T = any>(cb: () => Promise<T>): Promise<T> {\n        return this.identityContext.withoutAuthorization(cb);\n    }\n\n    withIdentity<T = any>(\n        identity: SecurityIdentity | undefined,\n        cb: () => Promise<T>\n    ): Promise<T> {\n        if (!identity) {\n            return this.identityContext.withIdentity(undefined, cb);\n        }\n\n        const { id, displayName, type, ...rest } = identity;\n        const authenticatedIdentity = new AuthenticatedIdentity({\n            id,\n            displayName,\n            type,\n            ...rest\n        });\n\n        return this.identityContext.withIdentity(authenticatedIdentity, cb);\n    }\n\n    async getPermission<TPermission extends SecurityPermission = SecurityPermission>(\n        permission: string\n    ) {\n        return this.identityContext.getPermission<TPermission>(permission);\n    }\n\n    async getPermissions<TPermission extends SecurityPermission = SecurityPermission>(\n        permission: string\n    ) {\n        return this.identityContext.getPermissions<TPermission>(permission);\n    }\n\n    async listPermissions() {\n        return this.identityContext.listPermissions();\n    }\n\n    async hasFullAccess(): Promise<boolean> {\n        return this.identityContext.hasFullAccess();\n    }\n\n    async getRole(params: any) {\n        const useCase = this.container.resolve(GetRoleUseCase);\n        const result = await useCase.execute(params.where);\n\n        if (result.isFail()) {\n            throw result.error;\n        }\n\n        return result.value;\n    }\n\n    async listRoles(params?: any) {\n        const useCase = this.container.resolve(ListRolesUseCase);\n        const result = await useCase.execute(params);\n\n        if (result.isFail()) {\n            throw result.error;\n        }\n\n        return result.value;\n    }\n\n    async createRole(input: any) {\n        const useCase = this.container.resolve(CreateRoleUseCase);\n        const result = await useCase.execute(input);\n\n        if (result.isFail()) {\n            throw result.error;\n        }\n\n        return result.value;\n    }\n\n    async updateRole(id: string, input: any) {\n        const useCase = this.container.resolve(UpdateRoleUseCase);\n        const result = await useCase.execute(id, input);\n\n        if (result.isFail()) {\n            throw result.error;\n        }\n\n        return result.value;\n    }\n\n    async deleteRole(id: string) {\n        const useCase = this.container.resolve(DeleteRoleUseCase);\n        const result = await useCase.execute(id);\n\n        if (result.isFail()) {\n            throw result.error;\n        }\n    }\n\n    addAuthorizer(authorizer: any) {\n        // @ts-expect-error\n        this.container.registerFactory(Authorizer, () => {\n            return {\n                authorize(): Promise<Permissions[]> {\n                    return authorizer();\n                }\n            };\n        });\n    }\n\n    async getTeam(params: any) {\n        const useCase = this.container.resolve(GetTeamUseCase);\n        const result = await useCase.execute(params.where);\n\n        if (result.isFail()) {\n            throw result.error;\n        }\n\n        return result.value;\n    }\n\n    async listTeams(params?: any) {\n        const useCase = this.container.resolve(ListTeamsUseCase);\n        const result = await useCase.execute(params);\n\n        if (result.isFail()) {\n            throw result.error;\n        }\n\n        return result.value;\n    }\n\n    async createTeam(input: any) {\n        const useCase = this.container.resolve(CreateTeam);\n        const result = await useCase.execute(input);\n\n        if (result.isFail()) {\n            throw result.error;\n        }\n\n        return result.value;\n    }\n\n    async updateTeam(id: string, input: any) {\n        const useCase = this.container.resolve(UpdateTeam);\n        const result = await useCase.execute(id, input);\n\n        if (result.isFail()) {\n            throw result.error;\n        }\n\n        return result.value;\n    }\n\n    async deleteTeam(id: string) {\n        const useCase = this.container.resolve(DeleteTeam);\n        const result = await useCase.execute(id);\n\n        if (result.isFail()) {\n            throw result.error;\n        }\n    }\n}\n"],"mappings":"AAEA,SAASA,qBAAqB;AAC9B,SAASC,aAAa;AACtB,SAASC,UAAU;AACnB,SACIC,qBAAqB,EACrBC,eAAe;AAGnB,SAASC,cAAc;AACvB,SAASC,gBAAgB;AACzB,SAASC,iBAAiB;AAC1B,SAASC,iBAAiB;AAC1B,SAASC,iBAAiB;AAC1B,SAASC,cAAc;AACvB,SAASC,gBAAgB;AACzB,SAASC,UAAU;AACnB,SAASC,UAAU;AACnB,SAASC,UAAU;;AAEnB;AACA;AACA;AACA;AACA,OAAO,MAAMC,aAAa,CAAC;EACvBC,WAAWA,CAASC,SAAoB,EAAE;IAAA,KAAtBA,SAAoB,GAApBA,SAAoB;EAAG;EAE3C,IAAYC,eAAeA,CAAA,EAAG;IAC1B,OAAO,IAAI,CAACD,SAAS,CAACE,OAAO,CAACf,eAAe,CAAC;EAClD;EAEA,IAAYgB,qBAAqBA,CAAA,EAAG;IAChC,OAAO,IAAI,CAACH,SAAS,CAACE,OAAO,CAACnB,qBAAqB,CAAC;EACxD;EAEAqB,gBAAgBA,CAACC,aAAsD,EAAQ;IAC3E,IAAI,CAACL,SAAS,CAACM,eAAe,CAACtB,aAAa,EAAE,MAAM;MAChD,OAAO;QACHuB,YAAYA,CAACC,KAAa,EAAgC;UACtD,OAAOH,aAAa,CAACG,KAAK,CAAC;QAC/B;MACJ,CAAC;IACL,CAAC,CAAC;EACN;EAEA,MAAMD,YAAYA,CAACC,KAAa,EAAiB;IAC7C;IACA,MAAMC,QAAQ,GAAG,MAAM,IAAI,CAACN,qBAAqB,CAACI,YAAY,CAACC,KAAK,CAAC;;IAErE;IACA,IAAI,CAACP,eAAe,CAACS,WAAW,CAACD,QAAQ,CAAC;EAC9C;EAEAE,WAAWA,CAAA,EAAqB;IAC5B,MAAMF,QAAQ,GAAG,IAAI,CAACR,eAAe,CAACU,WAAW,CAAC,CAAC;;IAEnD;IACA,IAAIF,QAAQ,CAACG,WAAW,CAAC,CAAC,EAAE;MACxB,OAAOC,SAAS;IACpB;IAEA,OAAOJ,QAAQ;EACnB;EAEAC,WAAWA,CAACD,QAA0B,EAAQ;IAC1C,IAAI,CAACA,QAAQ,EAAE;MACX,IAAI,CAACR,eAAe,CAACS,WAAW,CAACG,SAAS,CAAC;MAC3C;IACJ;;IAEA;IACA,MAAM;MAAEC,EAAE;MAAEC,WAAW;MAAEC,IAAI;MAAE,GAAGC;IAAK,CAAC,GAAGR,QAAQ;IACnD,MAAMS,qBAAqB,GAAG,IAAIhC,qBAAqB,CAAC;MACpD4B,EAAE;MACFC,WAAW;MACXC,IAAI;MACJ,GAAGC;IACP,CAAC,CAAC;IAEF,IAAI,CAAChB,eAAe,CAACS,WAAW,CAACQ,qBAAqB,CAAC;EAC3D;EAEAC,QAAQA,CAAA,EAAG;IACP,OAAO,IAAI,CAAChB,qBAAqB,CAACiB,YAAY,CAAC,CAAC;EACpD;EAEAC,sBAAsBA,CAAA,EAAY;IAC9B,OAAO,IAAI,CAACpB,eAAe,CAACoB,sBAAsB,CAAC,CAAC;EACxD;EAEAC,oBAAoBA,CAAUC,EAAoB,EAAc;IAC5D,OAAO,IAAI,CAACtB,eAAe,CAACqB,oBAAoB,CAACC,EAAE,CAAC;EACxD;EAEAC,YAAYA,CACRf,QAAsC,EACtCc,EAAoB,EACV;IACV,IAAI,CAACd,QAAQ,EAAE;MACX,OAAO,IAAI,CAACR,eAAe,CAACuB,YAAY,CAACX,SAAS,EAAEU,EAAE,CAAC;IAC3D;IAEA,MAAM;MAAET,EAAE;MAAEC,WAAW;MAAEC,IAAI;MAAE,GAAGC;IAAK,CAAC,GAAGR,QAAQ;IACnD,MAAMS,qBAAqB,GAAG,IAAIhC,qBAAqB,CAAC;MACpD4B,EAAE;MACFC,WAAW;MACXC,IAAI;MACJ,GAAGC;IACP,CAAC,CAAC;IAEF,OAAO,IAAI,CAAChB,eAAe,CAACuB,YAAY,CAACN,qBAAqB,EAAEK,EAAE,CAAC;EACvE;EAEA,MAAME,aAAaA,CACfC,UAAkB,EACpB;IACE,OAAO,IAAI,CAACzB,eAAe,CAACwB,aAAa,CAAcC,UAAU,CAAC;EACtE;EAEA,MAAMC,cAAcA,CAChBD,UAAkB,EACpB;IACE,OAAO,IAAI,CAACzB,eAAe,CAAC0B,cAAc,CAAcD,UAAU,CAAC;EACvE;EAEA,MAAME,eAAeA,CAAA,EAAG;IACpB,OAAO,IAAI,CAAC3B,eAAe,CAAC2B,eAAe,CAAC,CAAC;EACjD;EAEA,MAAMC,aAAaA,CAAA,EAAqB;IACpC,OAAO,IAAI,CAAC5B,eAAe,CAAC4B,aAAa,CAAC,CAAC;EAC/C;EAEA,MAAMC,OAAOA,CAACC,MAAW,EAAE;IACvB,MAAMC,OAAO,GAAG,IAAI,CAAChC,SAAS,CAACE,OAAO,CAACd,cAAc,CAAC;IACtD,MAAM6C,MAAM,GAAG,MAAMD,OAAO,CAACE,OAAO,CAACH,MAAM,CAACI,KAAK,CAAC;IAElD,IAAIF,MAAM,CAACG,MAAM,CAAC,CAAC,EAAE;MACjB,MAAMH,MAAM,CAACI,KAAK;IACtB;IAEA,OAAOJ,MAAM,CAACK,KAAK;EACvB;EAEA,MAAMC,SAASA,CAACR,MAAY,EAAE;IAC1B,MAAMC,OAAO,GAAG,IAAI,CAAChC,SAAS,CAACE,OAAO,CAACb,gBAAgB,CAAC;IACxD,MAAM4C,MAAM,GAAG,MAAMD,OAAO,CAACE,OAAO,CAACH,MAAM,CAAC;IAE5C,IAAIE,MAAM,CAACG,MAAM,CAAC,CAAC,EAAE;MACjB,MAAMH,MAAM,CAACI,KAAK;IACtB;IAEA,OAAOJ,MAAM,CAACK,KAAK;EACvB;EAEA,MAAME,UAAUA,CAACC,KAAU,EAAE;IACzB,MAAMT,OAAO,GAAG,IAAI,CAAChC,SAAS,CAACE,OAAO,CAACZ,iBAAiB,CAAC;IACzD,MAAM2C,MAAM,GAAG,MAAMD,OAAO,CAACE,OAAO,CAACO,KAAK,CAAC;IAE3C,IAAIR,MAAM,CAACG,MAAM,CAAC,CAAC,EAAE;MACjB,MAAMH,MAAM,CAACI,KAAK;IACtB;IAEA,OAAOJ,MAAM,CAACK,KAAK;EACvB;EAEA,MAAMI,UAAUA,CAAC5B,EAAU,EAAE2B,KAAU,EAAE;IACrC,MAAMT,OAAO,GAAG,IAAI,CAAChC,SAAS,CAACE,OAAO,CAACX,iBAAiB,CAAC;IACzD,MAAM0C,MAAM,GAAG,MAAMD,OAAO,CAACE,OAAO,CAACpB,EAAE,EAAE2B,KAAK,CAAC;IAE/C,IAAIR,MAAM,CAACG,MAAM,CAAC,CAAC,EAAE;MACjB,MAAMH,MAAM,CAACI,KAAK;IACtB;IAEA,OAAOJ,MAAM,CAACK,KAAK;EACvB;EAEA,MAAMK,UAAUA,CAAC7B,EAAU,EAAE;IACzB,MAAMkB,OAAO,GAAG,IAAI,CAAChC,SAAS,CAACE,OAAO,CAACV,iBAAiB,CAAC;IACzD,MAAMyC,MAAM,GAAG,MAAMD,OAAO,CAACE,OAAO,CAACpB,EAAE,CAAC;IAExC,IAAImB,MAAM,CAACG,MAAM,CAAC,CAAC,EAAE;MACjB,MAAMH,MAAM,CAACI,KAAK;IACtB;EACJ;EAEAO,aAAaA,CAACC,UAAe,EAAE;IAC3B;IACA,IAAI,CAAC7C,SAAS,CAACM,eAAe,CAACrB,UAAU,EAAE,MAAM;MAC7C,OAAO;QACH6D,SAASA,CAAA,EAA2B;UAChC,OAAOD,UAAU,CAAC,CAAC;QACvB;MACJ,CAAC;IACL,CAAC,CAAC;EACN;EAEA,MAAME,OAAOA,CAAChB,MAAW,EAAE;IACvB,MAAMC,OAAO,GAAG,IAAI,CAAChC,SAAS,CAACE,OAAO,CAACT,cAAc,CAAC;IACtD,MAAMwC,MAAM,GAAG,MAAMD,OAAO,CAACE,OAAO,CAACH,MAAM,CAACI,KAAK,CAAC;IAElD,IAAIF,MAAM,CAACG,MAAM,CAAC,CAAC,EAAE;MACjB,MAAMH,MAAM,CAACI,KAAK;IACtB;IAEA,OAAOJ,MAAM,CAACK,KAAK;EACvB;EAEA,MAAMU,SAASA,CAACjB,MAAY,EAAE;IAC1B,MAAMC,OAAO,GAAG,IAAI,CAAChC,SAAS,CAACE,OAAO,CAACR,gBAAgB,CAAC;IACxD,MAAMuC,MAAM,GAAG,MAAMD,OAAO,CAACE,OAAO,CAACH,MAAM,CAAC;IAE5C,IAAIE,MAAM,CAACG,MAAM,CAAC,CAAC,EAAE;MACjB,MAAMH,MAAM,CAACI,KAAK;IACtB;IAEA,OAAOJ,MAAM,CAACK,KAAK;EACvB;EAEA,MAAMW,UAAUA,CAACR,KAAU,EAAE;IACzB,MAAMT,OAAO,GAAG,IAAI,CAAChC,SAAS,CAACE,OAAO,CAACP,UAAU,CAAC;IAClD,MAAMsC,MAAM,GAAG,MAAMD,OAAO,CAACE,OAAO,CAACO,KAAK,CAAC;IAE3C,IAAIR,MAAM,CAACG,MAAM,CAAC,CAAC,EAAE;MACjB,MAAMH,MAAM,CAACI,KAAK;IACtB;IAEA,OAAOJ,MAAM,CAACK,KAAK;EACvB;EAEA,MAAMY,UAAUA,CAACpC,EAAU,EAAE2B,KAAU,EAAE;IACrC,MAAMT,OAAO,GAAG,IAAI,CAAChC,SAAS,CAACE,OAAO,CAACN,UAAU,CAAC;IAClD,MAAMqC,MAAM,GAAG,MAAMD,OAAO,CAACE,OAAO,CAACpB,EAAE,EAAE2B,KAAK,CAAC;IAE/C,IAAIR,MAAM,CAACG,MAAM,CAAC,CAAC,EAAE;MACjB,MAAMH,MAAM,CAACI,KAAK;IACtB;IAEA,OAAOJ,MAAM,CAACK,KAAK;EACvB;EAEA,MAAMa,UAAUA,CAACrC,EAAU,EAAE;IACzB,MAAMkB,OAAO,GAAG,IAAI,CAAChC,SAAS,CAACE,OAAO,CAACL,UAAU,CAAC;IAClD,MAAMoC,MAAM,GAAG,MAAMD,OAAO,CAACE,OAAO,CAACpB,EAAE,CAAC;IAExC,IAAImB,MAAM,CAACG,MAAM,CAAC,CAAC,EAAE;MACjB,MAAMH,MAAM,CAACI,KAAK;IACtB;EACJ;AACJ","ignoreList":[]}
+{"version":3,"file":"legacy/security/LegacyContext.js","sources":["../../../src/legacy/security/LegacyContext.ts"],"sourcesContent":["import { type Container } from \"@webiny/di\";\nimport type { SecurityIdentity, SecurityPermission } from \"~/types/security.js\";\nimport { AuthenticationContext } from \"~/features/security/authentication/AuthenticationContext/index.js\";\nimport { Authenticator } from \"~/features/security/authentication/Authenticator/index.js\";\nimport { Authorizer } from \"~/features/security/authorization/Authorizer/abstractions.js\";\nimport {\n    AuthenticatedIdentity,\n    IdentityContext,\n    IdentityData\n} from \"~/features/security/IdentityContext/index.js\";\nimport { GetRoleUseCase } from \"~/features/security/roles/GetRole/index.js\";\nimport { ListRolesUseCase } from \"~/features/security/roles/ListRoles/index.js\";\nimport { CreateRoleUseCase } from \"~/features/security/roles/CreateRole/index.js\";\nimport { UpdateRoleUseCase } from \"~/features/security/roles/UpdateRole/index.js\";\nimport { DeleteRoleUseCase } from \"~/features/security/roles/DeleteRole/index.js\";\nimport { GetTeamUseCase } from \"~/features/security/teams/GetTeam/index.js\";\nimport { ListTeamsUseCase } from \"~/features/security/teams/ListTeams/index.js\";\nimport { CreateTeam } from \"~/features/security/teams/CreateTeam/index.js\";\nimport { UpdateTeam } from \"~/features/security/teams/UpdateTeam/index.js\";\nimport { DeleteTeam } from \"~/features/security/teams/DeleteTeam/index.js\";\n\n/**\n * Legacy bridge that implements the old Security interface.\n * As we implement each phase, we'll replace forwarding with delegation.\n */\nexport class LegacyContext {\n    constructor(private container: Container) {}\n\n    private get identityContext() {\n        return this.container.resolve(IdentityContext);\n    }\n\n    private get authenticationContext() {\n        return this.container.resolve(AuthenticationContext);\n    }\n\n    addAuthenticator(authenticator: Authenticator.Interface[\"authenticate\"]): void {\n        this.container.registerFactory(Authenticator, () => {\n            return {\n                authenticate(token: string): Promise<IdentityData | null> {\n                    return authenticator(token);\n                }\n            };\n        });\n    }\n\n    async authenticate(token: string): Promise<void> {\n        // Authenticate using new context\n        const identity = await this.authenticationContext.authenticate(token);\n\n        // Set identity in IdentityContext\n        this.identityContext.setIdentity(identity);\n    }\n\n    getIdentity(): SecurityIdentity {\n        const identity = this.identityContext.getIdentity();\n\n        // Convert our Identity class to old SecurityIdentity format\n        if (identity.isAnonymous()) {\n            return undefined as any;\n        }\n\n        return identity;\n    }\n\n    setIdentity(identity: SecurityIdentity): void {\n        if (!identity) {\n            this.identityContext.setIdentity(undefined);\n            return;\n        }\n\n        // Wrap old identity format in AuthenticatedIdentity\n        const { id, displayName, type, ...rest } = identity;\n        const authenticatedIdentity = new AuthenticatedIdentity({\n            id,\n            displayName,\n            type,\n            ...rest\n        });\n\n        this.identityContext.setIdentity(authenticatedIdentity);\n    }\n\n    getToken() {\n        return this.authenticationContext.getAuthToken();\n    }\n\n    isAuthorizationEnabled(): boolean {\n        return this.identityContext.isAuthorizationEnabled();\n    }\n\n    withoutAuthorization<T = any>(cb: () => Promise<T>): Promise<T> {\n        return this.identityContext.withoutAuthorization(cb);\n    }\n\n    withIdentity<T = any>(\n        identity: SecurityIdentity | undefined,\n        cb: () => Promise<T>\n    ): Promise<T> {\n        if (!identity) {\n            return this.identityContext.withIdentity(undefined, cb);\n        }\n\n        const { id, displayName, type, ...rest } = identity;\n        const authenticatedIdentity = new AuthenticatedIdentity({\n            id,\n            displayName,\n            type,\n            ...rest\n        });\n\n        return this.identityContext.withIdentity(authenticatedIdentity, cb);\n    }\n\n    async getPermission<TPermission extends SecurityPermission = SecurityPermission>(\n        permission: string\n    ) {\n        return this.identityContext.getPermission<TPermission>(permission);\n    }\n\n    async getPermissions<TPermission extends SecurityPermission = SecurityPermission>(\n        permission: string\n    ) {\n        return this.identityContext.getPermissions<TPermission>(permission);\n    }\n\n    async listPermissions() {\n        return this.identityContext.listPermissions();\n    }\n\n    async hasFullAccess(): Promise<boolean> {\n        return this.identityContext.hasFullAccess();\n    }\n\n    async getRole(params: any) {\n        const useCase = this.container.resolve(GetRoleUseCase);\n        const result = await useCase.execute(params.where);\n\n        if (result.isFail()) {\n            throw result.error;\n        }\n\n        return result.value;\n    }\n\n    async listRoles(params?: any) {\n        const useCase = this.container.resolve(ListRolesUseCase);\n        const result = await useCase.execute(params);\n\n        if (result.isFail()) {\n            throw result.error;\n        }\n\n        return result.value;\n    }\n\n    async createRole(input: any) {\n        const useCase = this.container.resolve(CreateRoleUseCase);\n        const result = await useCase.execute(input);\n\n        if (result.isFail()) {\n            throw result.error;\n        }\n\n        return result.value;\n    }\n\n    async updateRole(id: string, input: any) {\n        const useCase = this.container.resolve(UpdateRoleUseCase);\n        const result = await useCase.execute(id, input);\n\n        if (result.isFail()) {\n            throw result.error;\n        }\n\n        return result.value;\n    }\n\n    async deleteRole(id: string) {\n        const useCase = this.container.resolve(DeleteRoleUseCase);\n        const result = await useCase.execute(id);\n\n        if (result.isFail()) {\n            throw result.error;\n        }\n    }\n\n    addAuthorizer(authorizer: any) {\n        // @ts-expect-error\n        this.container.registerFactory(Authorizer, () => {\n            return {\n                authorize(): Promise<Permissions[]> {\n                    return authorizer();\n                }\n            };\n        });\n    }\n\n    async getTeam(params: any) {\n        const useCase = this.container.resolve(GetTeamUseCase);\n        const result = await useCase.execute(params.where);\n\n        if (result.isFail()) {\n            throw result.error;\n        }\n\n        return result.value;\n    }\n\n    async listTeams(params?: any) {\n        const useCase = this.container.resolve(ListTeamsUseCase);\n        const result = await useCase.execute(params);\n\n        if (result.isFail()) {\n            throw result.error;\n        }\n\n        return result.value;\n    }\n\n    async createTeam(input: any) {\n        const useCase = this.container.resolve(CreateTeam);\n        const result = await useCase.execute(input);\n\n        if (result.isFail()) {\n            throw result.error;\n        }\n\n        return result.value;\n    }\n\n    async updateTeam(id: string, input: any) {\n        const useCase = this.container.resolve(UpdateTeam);\n        const result = await useCase.execute(id, input);\n\n        if (result.isFail()) {\n            throw result.error;\n        }\n\n        return result.value;\n    }\n\n    async deleteTeam(id: string) {\n        const useCase = this.container.resolve(DeleteTeam);\n        const result = await useCase.execute(id);\n\n        if (result.isFail()) {\n            throw result.error;\n        }\n    }\n}\n"],"names":["LegacyContext","container","IdentityContext","AuthenticationContext","authenticator","Authenticator","token","identity","undefined","id","displayName","type","rest","authenticatedIdentity","AuthenticatedIdentity","cb","permission","params","useCase","GetRoleUseCase","result","ListRolesUseCase","input","CreateRoleUseCase","UpdateRoleUseCase","DeleteRoleUseCase","authorizer","Authorizer","GetTeamUseCase","ListTeamsUseCase","CreateTeam","UpdateTeam","DeleteTeam"],"mappings":";;;;;;;;;;;;;;AAyBO,MAAMA;IACT,YAAoBC,SAAoB,CAAE;aAAtBA,SAAS,GAATA;IAAuB;IAE3C,IAAY,kBAAkB;QAC1B,OAAO,IAAI,CAAC,SAAS,CAAC,OAAO,CAACC;IAClC;IAEA,IAAY,wBAAwB;QAChC,OAAO,IAAI,CAAC,SAAS,CAAC,OAAO,CAACC;IAClC;IAEA,iBAAiBC,aAAsD,EAAQ;QAC3E,IAAI,CAAC,SAAS,CAAC,eAAe,CAACC,eAAe,IACnC;gBACH,cAAaC,KAAa;oBACtB,OAAOF,cAAcE;gBACzB;YACJ;IAER;IAEA,MAAM,aAAaA,KAAa,EAAiB;QAE7C,MAAMC,WAAW,MAAM,IAAI,CAAC,qBAAqB,CAAC,YAAY,CAACD;QAG/D,IAAI,CAAC,eAAe,CAAC,WAAW,CAACC;IACrC;IAEA,cAAgC;QAC5B,MAAMA,WAAW,IAAI,CAAC,eAAe,CAAC,WAAW;QAGjD,IAAIA,SAAS,WAAW,IACpB;QAGJ,OAAOA;IACX;IAEA,YAAYA,QAA0B,EAAQ;QAC1C,IAAI,CAACA,UAAU,YACX,IAAI,CAAC,eAAe,CAAC,WAAW,CAACC;QAKrC,MAAM,EAAEC,EAAE,EAAEC,WAAW,EAAEC,IAAI,EAAE,GAAGC,MAAM,GAAGL;QAC3C,MAAMM,wBAAwB,IAAIC,sBAAsB;YACpDL;YACAC;YACAC;YACA,GAAGC,IAAI;QACX;QAEA,IAAI,CAAC,eAAe,CAAC,WAAW,CAACC;IACrC;IAEA,WAAW;QACP,OAAO,IAAI,CAAC,qBAAqB,CAAC,YAAY;IAClD;IAEA,yBAAkC;QAC9B,OAAO,IAAI,CAAC,eAAe,CAAC,sBAAsB;IACtD;IAEA,qBAA8BE,EAAoB,EAAc;QAC5D,OAAO,IAAI,CAAC,eAAe,CAAC,oBAAoB,CAACA;IACrD;IAEA,aACIR,QAAsC,EACtCQ,EAAoB,EACV;QACV,IAAI,CAACR,UACD,OAAO,IAAI,CAAC,eAAe,CAAC,YAAY,CAACC,QAAWO;QAGxD,MAAM,EAAEN,EAAE,EAAEC,WAAW,EAAEC,IAAI,EAAE,GAAGC,MAAM,GAAGL;QAC3C,MAAMM,wBAAwB,IAAIC,sBAAsB;YACpDL;YACAC;YACAC;YACA,GAAGC,IAAI;QACX;QAEA,OAAO,IAAI,CAAC,eAAe,CAAC,YAAY,CAACC,uBAAuBE;IACpE;IAEA,MAAM,cACFC,UAAkB,EACpB;QACE,OAAO,IAAI,CAAC,eAAe,CAAC,aAAa,CAAcA;IAC3D;IAEA,MAAM,eACFA,UAAkB,EACpB;QACE,OAAO,IAAI,CAAC,eAAe,CAAC,cAAc,CAAcA;IAC5D;IAEA,MAAM,kBAAkB;QACpB,OAAO,IAAI,CAAC,eAAe,CAAC,eAAe;IAC/C;IAEA,MAAM,gBAAkC;QACpC,OAAO,IAAI,CAAC,eAAe,CAAC,aAAa;IAC7C;IAEA,MAAM,QAAQC,MAAW,EAAE;QACvB,MAAMC,UAAU,IAAI,CAAC,SAAS,CAAC,OAAO,CAACC;QACvC,MAAMC,SAAS,MAAMF,QAAQ,OAAO,CAACD,OAAO,KAAK;QAEjD,IAAIG,OAAO,MAAM,IACb,MAAMA,OAAO,KAAK;QAGtB,OAAOA,OAAO,KAAK;IACvB;IAEA,MAAM,UAAUH,MAAY,EAAE;QAC1B,MAAMC,UAAU,IAAI,CAAC,SAAS,CAAC,OAAO,CAACG;QACvC,MAAMD,SAAS,MAAMF,QAAQ,OAAO,CAACD;QAErC,IAAIG,OAAO,MAAM,IACb,MAAMA,OAAO,KAAK;QAGtB,OAAOA,OAAO,KAAK;IACvB;IAEA,MAAM,WAAWE,KAAU,EAAE;QACzB,MAAMJ,UAAU,IAAI,CAAC,SAAS,CAAC,OAAO,CAACK;QACvC,MAAMH,SAAS,MAAMF,QAAQ,OAAO,CAACI;QAErC,IAAIF,OAAO,MAAM,IACb,MAAMA,OAAO,KAAK;QAGtB,OAAOA,OAAO,KAAK;IACvB;IAEA,MAAM,WAAWX,EAAU,EAAEa,KAAU,EAAE;QACrC,MAAMJ,UAAU,IAAI,CAAC,SAAS,CAAC,OAAO,CAACM;QACvC,MAAMJ,SAAS,MAAMF,QAAQ,OAAO,CAACT,IAAIa;QAEzC,IAAIF,OAAO,MAAM,IACb,MAAMA,OAAO,KAAK;QAGtB,OAAOA,OAAO,KAAK;IACvB;IAEA,MAAM,WAAWX,EAAU,EAAE;QACzB,MAAMS,UAAU,IAAI,CAAC,SAAS,CAAC,OAAO,CAACO;QACvC,MAAML,SAAS,MAAMF,QAAQ,OAAO,CAACT;QAErC,IAAIW,OAAO,MAAM,IACb,MAAMA,OAAO,KAAK;IAE1B;IAEA,cAAcM,UAAe,EAAE;QAE3B,IAAI,CAAC,SAAS,CAAC,eAAe,CAACC,YAAY,IAChC;gBACH;oBACI,OAAOD;gBACX;YACJ;IAER;IAEA,MAAM,QAAQT,MAAW,EAAE;QACvB,MAAMC,UAAU,IAAI,CAAC,SAAS,CAAC,OAAO,CAACU;QACvC,MAAMR,SAAS,MAAMF,QAAQ,OAAO,CAACD,OAAO,KAAK;QAEjD,IAAIG,OAAO,MAAM,IACb,MAAMA,OAAO,KAAK;QAGtB,OAAOA,OAAO,KAAK;IACvB;IAEA,MAAM,UAAUH,MAAY,EAAE;QAC1B,MAAMC,UAAU,IAAI,CAAC,SAAS,CAAC,OAAO,CAACW;QACvC,MAAMT,SAAS,MAAMF,QAAQ,OAAO,CAACD;QAErC,IAAIG,OAAO,MAAM,IACb,MAAMA,OAAO,KAAK;QAGtB,OAAOA,OAAO,KAAK;IACvB;IAEA,MAAM,WAAWE,KAAU,EAAE;QACzB,MAAMJ,UAAU,IAAI,CAAC,SAAS,CAAC,OAAO,CAACY;QACvC,MAAMV,SAAS,MAAMF,QAAQ,OAAO,CAACI;QAErC,IAAIF,OAAO,MAAM,IACb,MAAMA,OAAO,KAAK;QAGtB,OAAOA,OAAO,KAAK;IACvB;IAEA,MAAM,WAAWX,EAAU,EAAEa,KAAU,EAAE;QACrC,MAAMJ,UAAU,IAAI,CAAC,SAAS,CAAC,OAAO,CAACa;QACvC,MAAMX,SAAS,MAAMF,QAAQ,OAAO,CAACT,IAAIa;QAEzC,IAAIF,OAAO,MAAM,IACb,MAAMA,OAAO,KAAK;QAGtB,OAAOA,OAAO,KAAK;IACvB;IAEA,MAAM,WAAWX,EAAU,EAAE;QACzB,MAAMS,UAAU,IAAI,CAAC,SAAS,CAAC,OAAO,CAACc;QACvC,MAAMZ,SAAS,MAAMF,QAAQ,OAAO,CAACT;QAErC,IAAIW,OAAO,MAAM,IACb,MAAMA,OAAO,KAAK;IAE1B;AACJ"}

package/legacy/security/createSecurityContext.js

@@ -1,14 +1,10 @@
 import { ContextPlugin } from "@webiny/api";
 import { LegacyContext } from "./LegacyContext.js";
 import { createSecurityGraphQL } from "../../graphql/security/index.js";
-export const createSecurityContext = () => {
-  return new ContextPlugin(async context => {
-    // Create a legacy context that delegates to new features
-    context.security = new LegacyContext(context.container);
-
-    // Register GraphQL plugins
-    context.plugins.register(createSecurityGraphQL());
-  });
-};
+const createSecurityContext = ()=>new ContextPlugin(async (context)=>{
+        context.security = new LegacyContext(context.container);
+        context.plugins.register(createSecurityGraphQL());
+    });
+export { createSecurityContext };
 
 //# sourceMappingURL=createSecurityContext.js.map

package/legacy/security/createSecurityContext.js.map

@@ -1 +1 @@
-{"version":3,"names":["ContextPlugin","LegacyContext","createSecurityGraphQL","createSecurityContext","context","security","container","plugins","register"],"sources":["createSecurityContext.ts"],"sourcesContent":["import { ContextPlugin } from \"@webiny/api\";\nimport type { ApiCoreContext } from \"~/types/core.js\";\nimport { LegacyContext } from \"~/legacy/security/LegacyContext.js\";\nimport { createSecurityGraphQL } from \"~/graphql/security/index.js\";\n\nexport const createSecurityContext = () => {\n    return new ContextPlugin<ApiCoreContext>(async context => {\n        // Create a legacy context that delegates to new features\n        context.security = new LegacyContext(context.container);\n\n        // Register GraphQL plugins\n        context.plugins.register(createSecurityGraphQL());\n    });\n};\n"],"mappings":"AAAA,SAASA,aAAa,QAAQ,aAAa;AAE3C,SAASC,aAAa;AACtB,SAASC,qBAAqB;AAE9B,OAAO,MAAMC,qBAAqB,GAAGA,CAAA,KAAM;EACvC,OAAO,IAAIH,aAAa,CAAiB,MAAMI,OAAO,IAAI;IACtD;IACAA,OAAO,CAACC,QAAQ,GAAG,IAAIJ,aAAa,CAACG,OAAO,CAACE,SAAS,CAAC;;IAEvD;IACAF,OAAO,CAACG,OAAO,CAACC,QAAQ,CAACN,qBAAqB,CAAC,CAAC,CAAC;EACrD,CAAC,CAAC;AACN,CAAC","ignoreList":[]}
+{"version":3,"file":"legacy/security/createSecurityContext.js","sources":["../../../src/legacy/security/createSecurityContext.ts"],"sourcesContent":["import { ContextPlugin } from \"@webiny/api\";\nimport type { ApiCoreContext } from \"~/types/core.js\";\nimport { LegacyContext } from \"~/legacy/security/LegacyContext.js\";\nimport { createSecurityGraphQL } from \"~/graphql/security/index.js\";\n\nexport const createSecurityContext = () => {\n    return new ContextPlugin<ApiCoreContext>(async context => {\n        // Create a legacy context that delegates to new features\n        context.security = new LegacyContext(context.container);\n\n        // Register GraphQL plugins\n        context.plugins.register(createSecurityGraphQL());\n    });\n};\n"],"names":["createSecurityContext","ContextPlugin","context","LegacyContext","createSecurityGraphQL"],"mappings":";;;AAKO,MAAMA,wBAAwB,IAC1B,IAAIC,cAA8B,OAAMC;QAE3CA,QAAQ,QAAQ,GAAG,IAAIC,cAAcD,QAAQ,SAAS;QAGtDA,QAAQ,OAAO,CAAC,QAAQ,CAACE;IAC7B"}

package/legacy/security/plugins/apiKeyAuthentication.js

@@ -1,29 +1,20 @@
 import { ContextPlugin } from "@webiny/api";
 import { ApiKeysRepository } from "../../../features/security/apiKeys/shared/abstractions.js";
-export default ({
-  identityType
-}) => {
-  return new ContextPlugin(context => {
-    context.security.addAuthenticator(async token => {
-      if (typeof token !== "string" || !token.startsWith("wat_")) {
-        return null;
-      }
-      const repository = context.container.resolve(ApiKeysRepository);
-      const result = await repository.getByToken(token);
-      if (!result.isOk()) {
-        return null;
-      }
-      const apiKey = result.value;
-      return {
-        id: apiKey.id,
-        displayName: apiKey.name,
-        type: identityType || "api-key",
-        // Add permissions directly to the identity so we don't have to load them
-        // again when authorization kicks in.
-        permissions: apiKey.permissions
-      };
+const apiKeyAuthentication = ({ identityType })=>new ContextPlugin((context)=>{
+        context.security.addAuthenticator(async (token)=>{
+            if ("string" != typeof token || !token.startsWith("wat_")) return null;
+            const repository = context.container.resolve(ApiKeysRepository);
+            const result = await repository.getByToken(token);
+            if (!result.isOk()) return null;
+            const apiKey = result.value;
+            return {
+                id: apiKey.id,
+                displayName: apiKey.name,
+                type: identityType || "api-key",
+                permissions: apiKey.permissions
+            };
+        });
     });
-  });
-};
+export default apiKeyAuthentication;
 
 //# sourceMappingURL=apiKeyAuthentication.js.map

package/legacy/security/plugins/apiKeyAuthentication.js.map

@@ -1 +1 @@
-{"version":3,"names":["ContextPlugin","ApiKeysRepository","identityType","context","security","addAuthenticator","token","startsWith","repository","container","resolve","result","getByToken","isOk","apiKey","value","id","displayName","name","type","permissions"],"sources":["apiKeyAuthentication.ts"],"sourcesContent":["import { ContextPlugin } from \"@webiny/api\";\nimport type { ApiCoreContext } from \"~/types/core.js\";\nimport { ApiKeysRepository } from \"~/features/security/apiKeys/shared/abstractions.js\";\n\nexport interface Config {\n    identityType?: string;\n}\n\nexport default ({ identityType }: Config) => {\n    return new ContextPlugin<ApiCoreContext>(context => {\n        context.security.addAuthenticator(async token => {\n            if (typeof token !== \"string\" || !token.startsWith(\"wat_\")) {\n                return null;\n            }\n\n            const repository = context.container.resolve(ApiKeysRepository);\n            const result = await repository.getByToken(token);\n\n            if (!result.isOk()) {\n                return null;\n            }\n\n            const apiKey = result.value;\n\n            return {\n                id: apiKey.id,\n                displayName: apiKey.name,\n                type: identityType || \"api-key\",\n                // Add permissions directly to the identity so we don't have to load them\n                // again when authorization kicks in.\n                permissions: apiKey.permissions\n            };\n        });\n    });\n};\n"],"mappings":"AAAA,SAASA,aAAa,QAAQ,aAAa;AAE3C,SAASC,iBAAiB;AAM1B,eAAe,CAAC;EAAEC;AAAqB,CAAC,KAAK;EACzC,OAAO,IAAIF,aAAa,CAAiBG,OAAO,IAAI;IAChDA,OAAO,CAACC,QAAQ,CAACC,gBAAgB,CAAC,MAAMC,KAAK,IAAI;MAC7C,IAAI,OAAOA,KAAK,KAAK,QAAQ,IAAI,CAACA,KAAK,CAACC,UAAU,CAAC,MAAM,CAAC,EAAE;QACxD,OAAO,IAAI;MACf;MAEA,MAAMC,UAAU,GAAGL,OAAO,CAACM,SAAS,CAACC,OAAO,CAACT,iBAAiB,CAAC;MAC/D,MAAMU,MAAM,GAAG,MAAMH,UAAU,CAACI,UAAU,CAACN,KAAK,CAAC;MAEjD,IAAI,CAACK,MAAM,CAACE,IAAI,CAAC,CAAC,EAAE;QAChB,OAAO,IAAI;MACf;MAEA,MAAMC,MAAM,GAAGH,MAAM,CAACI,KAAK;MAE3B,OAAO;QACHC,EAAE,EAAEF,MAAM,CAACE,EAAE;QACbC,WAAW,EAAEH,MAAM,CAACI,IAAI;QACxBC,IAAI,EAAEjB,YAAY,IAAI,SAAS;QAC/B;QACA;QACAkB,WAAW,EAAEN,MAAM,CAACM;MACxB,CAAC;IACL,CAAC,CAAC;EACN,CAAC,CAAC;AACN,CAAC","ignoreList":[]}
+{"version":3,"file":"legacy/security/plugins/apiKeyAuthentication.js","sources":["../../../../src/legacy/security/plugins/apiKeyAuthentication.ts"],"sourcesContent":["import { ContextPlugin } from \"@webiny/api\";\nimport type { ApiCoreContext } from \"~/types/core.js\";\nimport { ApiKeysRepository } from \"~/features/security/apiKeys/shared/abstractions.js\";\n\nexport interface Config {\n    identityType?: string;\n}\n\nexport default ({ identityType }: Config) => {\n    return new ContextPlugin<ApiCoreContext>(context => {\n        context.security.addAuthenticator(async token => {\n            if (typeof token !== \"string\" || !token.startsWith(\"wat_\")) {\n                return null;\n            }\n\n            const repository = context.container.resolve(ApiKeysRepository);\n            const result = await repository.getByToken(token);\n\n            if (!result.isOk()) {\n                return null;\n            }\n\n            const apiKey = result.value;\n\n            return {\n                id: apiKey.id,\n                displayName: apiKey.name,\n                type: identityType || \"api-key\",\n                // Add permissions directly to the identity so we don't have to load them\n                // again when authorization kicks in.\n                permissions: apiKey.permissions\n            };\n        });\n    });\n};\n"],"names":["identityType","ContextPlugin","context","token","repository","ApiKeysRepository","result","apiKey"],"mappings":";;AAQA,6BAAgB,GAAEA,YAAY,EAAU,GAC7B,IAAIC,cAA8BC,CAAAA;QACrCA,QAAQ,QAAQ,CAAC,gBAAgB,CAAC,OAAMC;YACpC,IAAI,AAAiB,YAAjB,OAAOA,SAAsB,CAACA,MAAM,UAAU,CAAC,SAC/C,OAAO;YAGX,MAAMC,aAAaF,QAAQ,SAAS,CAAC,OAAO,CAACG;YAC7C,MAAMC,SAAS,MAAMF,WAAW,UAAU,CAACD;YAE3C,IAAI,CAACG,OAAO,IAAI,IACZ,OAAO;YAGX,MAAMC,SAASD,OAAO,KAAK;YAE3B,OAAO;gBACH,IAAIC,OAAO,EAAE;gBACb,aAAaA,OAAO,IAAI;gBACxB,MAAMP,gBAAgB;gBAGtB,aAAaO,OAAO,WAAW;YACnC;QACJ;IACJ"}

package/legacy/security/plugins/apiKeyAuthorization.js

@@ -1,22 +1,13 @@
 import { createContextPlugin } from "@webiny/api";
-export default config => {
-  return createContextPlugin(({
-    security
-  }) => {
-    security.addAuthorizer(async () => {
-      const identityType = config.identityType || "api-key";
-      const identity = security.getIdentity();
-      if (!identity || identity.type !== identityType) {
-        return null;
-      }
-      // We can expect `permissions` to exist on the identity, because api-key authentication
-      // plugin sets them on the identity instance to avoid loading them from DB here.
-      if (Array.isArray(identity.permissions) === false) {
-        return [];
-      }
-      return identity.permissions;
+const apiKeyAuthorization = (config)=>createContextPlugin(({ security })=>{
+        security.addAuthorizer(async ()=>{
+            const identityType = config.identityType || "api-key";
+            const identity = security.getIdentity();
+            if (!identity || identity.type !== identityType) return null;
+            if (false === Array.isArray(identity.permissions)) return [];
+            return identity.permissions;
+        });
     });
-  });
-};
+export default apiKeyAuthorization;
 
 //# sourceMappingURL=apiKeyAuthorization.js.map

package/legacy/security/plugins/apiKeyAuthorization.js.map

@@ -1 +1 @@
-{"version":3,"names":["createContextPlugin","config","security","addAuthorizer","identityType","identity","getIdentity","type","Array","isArray","permissions"],"sources":["apiKeyAuthorization.ts"],"sourcesContent":["import { createContextPlugin } from \"@webiny/api\";\nimport type { SecurityPermission } from \"~/types/security.js\";\nimport type { ApiCoreContext } from \"~/types/core.js\";\n\nexport interface Config {\n    identityType?: string;\n}\n\nexport default (config: Config) => {\n    return createContextPlugin<ApiCoreContext>(({ security }) => {\n        security.addAuthorizer(async () => {\n            const identityType = config.identityType || \"api-key\";\n\n            const identity = security.getIdentity();\n\n            if (!identity || identity.type !== identityType) {\n                return null;\n            }\n            // We can expect `permissions` to exist on the identity, because api-key authentication\n            // plugin sets them on the identity instance to avoid loading them from DB here.\n            if (Array.isArray(identity.permissions) === false) {\n                return [];\n            }\n            return identity.permissions as SecurityPermission[];\n        });\n    });\n};\n"],"mappings":"AAAA,SAASA,mBAAmB,QAAQ,aAAa;AAQjD,eAAgBC,MAAc,IAAK;EAC/B,OAAOD,mBAAmB,CAAiB,CAAC;IAAEE;EAAS,CAAC,KAAK;IACzDA,QAAQ,CAACC,aAAa,CAAC,YAAY;MAC/B,MAAMC,YAAY,GAAGH,MAAM,CAACG,YAAY,IAAI,SAAS;MAErD,MAAMC,QAAQ,GAAGH,QAAQ,CAACI,WAAW,CAAC,CAAC;MAEvC,IAAI,CAACD,QAAQ,IAAIA,QAAQ,CAACE,IAAI,KAAKH,YAAY,EAAE;QAC7C,OAAO,IAAI;MACf;MACA;MACA;MACA,IAAII,KAAK,CAACC,OAAO,CAACJ,QAAQ,CAACK,WAAW,CAAC,KAAK,KAAK,EAAE;QAC/C,OAAO,EAAE;MACb;MACA,OAAOL,QAAQ,CAACK,WAAW;IAC/B,CAAC,CAAC;EACN,CAAC,CAAC;AACN,CAAC","ignoreList":[]}
+{"version":3,"file":"legacy/security/plugins/apiKeyAuthorization.js","sources":["../../../../src/legacy/security/plugins/apiKeyAuthorization.ts"],"sourcesContent":["import { createContextPlugin } from \"@webiny/api\";\nimport type { SecurityPermission } from \"~/types/security.js\";\nimport type { ApiCoreContext } from \"~/types/core.js\";\n\nexport interface Config {\n    identityType?: string;\n}\n\nexport default (config: Config) => {\n    return createContextPlugin<ApiCoreContext>(({ security }) => {\n        security.addAuthorizer(async () => {\n            const identityType = config.identityType || \"api-key\";\n\n            const identity = security.getIdentity();\n\n            if (!identity || identity.type !== identityType) {\n                return null;\n            }\n            // We can expect `permissions` to exist on the identity, because api-key authentication\n            // plugin sets them on the identity instance to avoid loading them from DB here.\n            if (Array.isArray(identity.permissions) === false) {\n                return [];\n            }\n            return identity.permissions as SecurityPermission[];\n        });\n    });\n};\n"],"names":["config","createContextPlugin","security","identityType","identity","Array"],"mappings":";AAQA,4BAAgB,CAAAA,SACLC,oBAAoC,CAAC,EAAEC,QAAQ,EAAE;QACpDA,SAAS,aAAa,CAAC;YACnB,MAAMC,eAAeH,OAAO,YAAY,IAAI;YAE5C,MAAMI,WAAWF,SAAS,WAAW;YAErC,IAAI,CAACE,YAAYA,SAAS,IAAI,KAAKD,cAC/B,OAAO;YAIX,IAAIE,AAAwC,UAAxCA,MAAM,OAAO,CAACD,SAAS,WAAW,GAClC,OAAO,EAAE;YAEb,OAAOA,SAAS,WAAW;QAC/B;IACJ"}

package/legacy/security/plugins/authenticateUsingCookie.js

@@ -1,27 +1,23 @@
 import { createContextPlugin } from "@webiny/api";
-import { createBeforeHandlerPlugin, Request } from "@webiny/handler";
+import { Request, createBeforeHandlerPlugin } from "@webiny/handler";
 import { SetIdTokenCookie } from "../../../features/security/authentication/AuthenticationContext/SetIdTokenCookie.js";
-
-/**
- * @internal
- */
-export function authenticateUsingCookie() {
-  return [createBeforeHandlerPlugin(async context => {
-    const request = context.container.resolve(Request);
-    const {
-      cookies
-    } = request;
-    const token = cookies["wby-id-token"];
-    if (!context.security.getIdentity() && token) {
-      try {
-        await context.security.authenticate(token);
-      } catch (err) {
-        console.log(err);
-      }
-    }
-  }), createContextPlugin(context => {
-    context.container.register(SetIdTokenCookie);
-  })];
+function authenticateUsingCookie() {
+    return [
+        createBeforeHandlerPlugin(async (context)=>{
+            const request = context.container.resolve(Request);
+            const { cookies } = request;
+            const token = cookies["wby-id-token"];
+            if (!context.security.getIdentity() && token) try {
+                await context.security.authenticate(token);
+            } catch (err) {
+                console.log(err);
+            }
+        }),
+        createContextPlugin((context)=>{
+            context.container.register(SetIdTokenCookie);
+        })
+    ];
 }
+export { authenticateUsingCookie };
 
 //# sourceMappingURL=authenticateUsingCookie.js.map

package/legacy/security/plugins/authenticateUsingCookie.js.map

@@ -1 +1 @@
-{"version":3,"names":["createContextPlugin","createBeforeHandlerPlugin","Request","SetIdTokenCookie","authenticateUsingCookie","context","request","container","resolve","cookies","token","security","getIdentity","authenticate","err","console","log","register"],"sources":["authenticateUsingCookie.ts"],"sourcesContent":["import { createContextPlugin } from \"@webiny/api\";\nimport { createBeforeHandlerPlugin, Request } from \"@webiny/handler\";\nimport type { ApiCoreContext } from \"~/types/core.js\";\nimport { SetIdTokenCookie } from \"~/features/security/authentication/AuthenticationContext/SetIdTokenCookie.js\";\n\n/**\n * @internal\n */\nexport function authenticateUsingCookie() {\n    return [\n        createBeforeHandlerPlugin<ApiCoreContext>(async context => {\n            const request = context.container.resolve(Request);\n            const { cookies } = request;\n            const token = cookies[\"wby-id-token\"];\n\n            if (!context.security.getIdentity() && token) {\n                try {\n                    await context.security.authenticate(token);\n                } catch (err) {\n                    console.log(err);\n                }\n            }\n        }),\n\n        createContextPlugin<ApiCoreContext>(context => {\n            context.container.register(SetIdTokenCookie);\n        })\n    ];\n}\n"],"mappings":"AAAA,SAASA,mBAAmB,QAAQ,aAAa;AACjD,SAASC,yBAAyB,EAAEC,OAAO,QAAQ,iBAAiB;AAEpE,SAASC,gBAAgB;;AAEzB;AACA;AACA;AACA,OAAO,SAASC,uBAAuBA,CAAA,EAAG;EACtC,OAAO,CACHH,yBAAyB,CAAiB,MAAMI,OAAO,IAAI;IACvD,MAAMC,OAAO,GAAGD,OAAO,CAACE,SAAS,CAACC,OAAO,CAACN,OAAO,CAAC;IAClD,MAAM;MAAEO;IAAQ,CAAC,GAAGH,OAAO;IAC3B,MAAMI,KAAK,GAAGD,OAAO,CAAC,cAAc,CAAC;IAErC,IAAI,CAACJ,OAAO,CAACM,QAAQ,CAACC,WAAW,CAAC,CAAC,IAAIF,KAAK,EAAE;MAC1C,IAAI;QACA,MAAML,OAAO,CAACM,QAAQ,CAACE,YAAY,CAACH,KAAK,CAAC;MAC9C,CAAC,CAAC,OAAOI,GAAG,EAAE;QACVC,OAAO,CAACC,GAAG,CAACF,GAAG,CAAC;MACpB;IACJ;EACJ,CAAC,CAAC,EAEFd,mBAAmB,CAAiBK,OAAO,IAAI;IAC3CA,OAAO,CAACE,SAAS,CAACU,QAAQ,CAACd,gBAAgB,CAAC;EAChD,CAAC,CAAC,CACL;AACL","ignoreList":[]}
+{"version":3,"file":"legacy/security/plugins/authenticateUsingCookie.js","sources":["../../../../src/legacy/security/plugins/authenticateUsingCookie.ts"],"sourcesContent":["import { createContextPlugin } from \"@webiny/api\";\nimport { createBeforeHandlerPlugin, Request } from \"@webiny/handler\";\nimport type { ApiCoreContext } from \"~/types/core.js\";\nimport { SetIdTokenCookie } from \"~/features/security/authentication/AuthenticationContext/SetIdTokenCookie.js\";\n\n/**\n * @internal\n */\nexport function authenticateUsingCookie() {\n    return [\n        createBeforeHandlerPlugin<ApiCoreContext>(async context => {\n            const request = context.container.resolve(Request);\n            const { cookies } = request;\n            const token = cookies[\"wby-id-token\"];\n\n            if (!context.security.getIdentity() && token) {\n                try {\n                    await context.security.authenticate(token);\n                } catch (err) {\n                    console.log(err);\n                }\n            }\n        }),\n\n        createContextPlugin<ApiCoreContext>(context => {\n            context.container.register(SetIdTokenCookie);\n        })\n    ];\n}\n"],"names":["authenticateUsingCookie","createBeforeHandlerPlugin","context","request","Request","cookies","token","err","console","createContextPlugin","SetIdTokenCookie"],"mappings":";;;AAQO,SAASA;IACZ,OAAO;QACHC,0BAA0C,OAAMC;YAC5C,MAAMC,UAAUD,QAAQ,SAAS,CAAC,OAAO,CAACE;YAC1C,MAAM,EAAEC,OAAO,EAAE,GAAGF;YACpB,MAAMG,QAAQD,OAAO,CAAC,eAAe;YAErC,IAAI,CAACH,QAAQ,QAAQ,CAAC,WAAW,MAAMI,OACnC,IAAI;gBACA,MAAMJ,QAAQ,QAAQ,CAAC,YAAY,CAACI;YACxC,EAAE,OAAOC,KAAK;gBACVC,QAAQ,GAAG,CAACD;YAChB;QAER;QAEAE,oBAAoCP,CAAAA;YAChCA,QAAQ,SAAS,CAAC,QAAQ,CAACQ;QAC/B;KACH;AACL"}

package/legacy/security/plugins/authenticateUsingHttpHeader.d.ts

@@ -2,4 +2,4 @@ import type { ApiCoreContext } from "../../../types/core.js";
 export interface GetHeader {
     (context: ApiCoreContext): string | null | undefined;
 }
-export declare const authenticateUsingHttpHeader: () => (import("@webiny/handler").HandlerOnRequestPlugin<import("@webiny/handler/types.js").Context> | import("@webiny/handler").BeforeHandlerPlugin<ApiCoreContext> | (import("@webiny/api/index.js").ContextPlugin<ApiCoreContext> | import("@webiny/handler").BeforeHandlerPlugin<ApiCoreContext>)[])[];
+export declare const authenticateUsingHttpHeader: () => (import("@webiny/handler").BeforeHandlerPlugin<ApiCoreContext> | (import("@webiny/api/index.js").ContextPlugin<ApiCoreContext> | import("@webiny/handler").BeforeHandlerPlugin<ApiCoreContext>)[] | import("@webiny/handler").HandlerOnRequestPlugin<import("@webiny/handler/types.js").Context>)[];

package/legacy/security/plugins/authenticateUsingHttpHeader.js

@@ -1,23 +1,20 @@
-import { createBeforeHandlerPlugin, Request } from "@webiny/handler";
+import { Request, createBeforeHandlerPlugin } from "@webiny/handler";
 import { authenticateUsingCookie } from "./authenticateUsingCookie.js";
 import { setupSecureHeaders } from "./secureHeaders.js";
-const getHeader = context => {
-  const request = context.container.resolve(Request);
-  const header = request.headers["authorization"];
-  return header ? header.split(" ").pop() : null;
-};
-export const authenticateUsingHttpHeader = () => {
-  return [createBeforeHandlerPlugin(async context => {
-    const token = getHeader(context);
-    if (!token) {
-      return;
-    }
-    await context.security.authenticate(token);
-  }),
-  // Configure strict headers (this is also a requirement to use cookies).
-  setupSecureHeaders(),
-  // Finally, we add cookie-based authentication.
-  authenticateUsingCookie()];
+const getHeader = (context)=>{
+    const request = context.container.resolve(Request);
+    const header = request.headers["authorization"];
+    return header ? header.split(" ").pop() : null;
 };
+const authenticateUsingHttpHeader = ()=>[
+        createBeforeHandlerPlugin(async (context)=>{
+            const token = getHeader(context);
+            if (!token) return;
+            await context.security.authenticate(token);
+        }),
+        setupSecureHeaders(),
+        authenticateUsingCookie()
+    ];
+export { authenticateUsingHttpHeader };
 
 //# sourceMappingURL=authenticateUsingHttpHeader.js.map