@webiny/api-core 6.4.11 → 6.6.0-alpha.1

package/features/security/IdentityContext/IdentityContext.d.ts

@@ -2,12 +2,12 @@ import { IdentityContext as Abstraction } from "./abstractions.js";
 import { Identity } from "./Identity.js";
 import { AuthorizationContext } from "../authorization/AuthorizationContext/index.js";
 import type { SecurityPermission } from "../../../types/security.js";
-import { WcpContext } from "../../wcp/WcpContext/index.js";
+import { FeatureFlags } from "../../featureFlags/abstractions.js";
 declare class IdentityContextImpl implements Abstraction.Interface {
     private authorizationContext;
-    private wcpContext;
+    private featureFlags;
     private identity;
-    constructor(authorizationContext: AuthorizationContext.Interface, wcpContext: WcpContext.Interface);
+    constructor(authorizationContext: AuthorizationContext.Interface, featureFlags: FeatureFlags.Interface);
     getIdentity(): Identity;
     setIdentity(identity: Identity | undefined): void;
     withIdentity<T>(identity: Identity | undefined, cb: () => Promise<T>): Promise<T>;

package/features/security/IdentityContext/IdentityContext.js

@@ -5,12 +5,12 @@ import { IdentityContext } from "./abstractions.js";
 import { AnonymousIdentity } from "./AnonymousIdentity.js";
 import { AuthorizationContext } from "../authorization/AuthorizationContext/index.js";
 import { filterOutCustomWbyAppsPermissions } from "../utils/filterOutCustomWbyAppsPermissions.js";
-import { WcpContext } from "../../wcp/WcpContext/index.js";
+import { FeatureFlags } from "../../featureFlags/abstractions.js";
 const identityStorage = new AsyncLocalStorage();
 class IdentityContextImpl {
-    constructor(authorizationContext, wcpContext){
+    constructor(authorizationContext, featureFlags){
         this.authorizationContext = authorizationContext;
-        this.wcpContext = wcpContext;
+        this.featureFlags = featureFlags;
         this.identity = new AnonymousIdentity();
     }
     getIdentity() {
@@ -63,8 +63,8 @@ class IdentityContextImpl {
         return permissions.some((p)=>"*" === p.name);
     }
     applyAaclLogic(permissions) {
-        const aaclEnabled = this.wcpContext.canUseAacl();
-        const teamsEnabled = this.wcpContext.canUseTeams();
+        const aaclEnabled = this.featureFlags.get().isEnabled("advancedAccessControlLayer");
+        const teamsEnabled = this.featureFlags.get().isEnabled("advancedAccessControlLayer.teams");
         if (aaclEnabled) return [
             ...permissions,
             {
@@ -80,7 +80,7 @@ const IdentityContext_IdentityContext = createImplementation({
     implementation: IdentityContextImpl,
     dependencies: [
         AuthorizationContext,
-        WcpContext
+        FeatureFlags
     ]
 });
 export { IdentityContext_IdentityContext as IdentityContext };

package/features/security/IdentityContext/IdentityContext.js.map

@@ -1 +1 @@
-{"version":3,"file":"features/security/IdentityContext/IdentityContext.js","sources":["../../../../src/features/security/IdentityContext/IdentityContext.ts"],"sourcesContent":["import { AsyncLocalStorage } from \"async_hooks\";\nimport { minimatch } from \"minimatch\";\nimport { createImplementation } from \"@webiny/di\";\nimport { IdentityContext as Abstraction } from \"./abstractions.js\";\nimport { Identity } from \"./Identity.js\";\nimport { AnonymousIdentity } from \"./AnonymousIdentity.js\";\nimport { AuthorizationContext } from \"../authorization/AuthorizationContext/index.js\";\nimport { filterOutCustomWbyAppsPermissions } from \"../utils/filterOutCustomWbyAppsPermissions.js\";\nimport type { SecurityPermission } from \"~/types/security.js\";\nimport type { AaclPermission } from \"../../wcp/WcpContext/types.js\";\nimport { WcpContext } from \"../../wcp/WcpContext/index.js\";\n\nconst identityStorage = new AsyncLocalStorage<Identity | undefined>();\n\nclass IdentityContextImpl implements Abstraction.Interface {\n    private identity: Identity = new AnonymousIdentity();\n\n    constructor(\n        private authorizationContext: AuthorizationContext.Interface,\n        private wcpContext: WcpContext.Interface\n    ) {}\n\n    // ========================================================================\n    // Identity Methods\n    // ========================================================================\n\n    getIdentity(): Identity {\n        // Check for identity override first (from withIdentity())\n        const override = identityStorage.getStore();\n        if (override !== undefined) {\n            return override;\n        }\n        return this.identity;\n    }\n\n    setIdentity(identity: Identity | undefined): void {\n        // If undefined, set to anonymous identity\n        this.identity = identity ?? new AnonymousIdentity();\n\n        // Clear permissions cache when identity changes\n        this.authorizationContext.clearPermissionsCache();\n    }\n\n    withIdentity<T>(identity: Identity | undefined, cb: () => Promise<T>): Promise<T> {\n        return identityStorage.run(identity, cb);\n    }\n\n    // ========================================================================\n    // Authorization State Methods\n    // ========================================================================\n\n    withoutAuthorization<T>(cb: () => Promise<T>): Promise<T> {\n        return this.authorizationContext.withoutAuthorization(cb);\n    }\n\n    isAuthorizationEnabled(): boolean {\n        return this.authorizationContext.isAuthorizationEnabled();\n    }\n\n    // ========================================================================\n    // Permission Methods\n    // ========================================================================\n\n    async getPermission<TPermission extends SecurityPermission = SecurityPermission>(\n        name: string\n    ): Promise<TPermission | null> {\n        if (!this.isAuthorizationEnabled()) {\n            return { name: \"*\" } as TPermission;\n        }\n\n        const permissions = await this.listPermissions();\n\n        // Try exact match first\n        const exactMatch = permissions.find(p => p.name === name);\n        if (exactMatch) {\n            return exactMatch as TPermission;\n        }\n\n        // Try pattern matching\n        const patternMatch = permissions.find(p => minimatch(name, p.name));\n        if (patternMatch) {\n            return patternMatch as TPermission;\n        }\n\n        return null;\n    }\n\n    async getPermissions<TPermission extends SecurityPermission = SecurityPermission>(\n        name: string\n    ): Promise<TPermission[]> {\n        if (!this.isAuthorizationEnabled()) {\n            return [{ name: \"*\" }] as TPermission[];\n        }\n\n        const permissions = await this.listPermissions();\n\n        return permissions.filter(p => {\n            if (p.name === name) {\n                return true;\n            }\n            return minimatch(name, p.name);\n        }) as TPermission[];\n    }\n\n    async listPermissions(): Promise<SecurityPermission[]> {\n        const permissions = await this.authorizationContext.loadPermissions(this.getIdentity());\n        // TODO: extract this into a decorator\n        return this.applyAaclLogic(permissions);\n    }\n\n    async hasFullAccess(): Promise<boolean> {\n        const permissions = await this.listPermissions();\n        return permissions.some(p => p.name === \"*\");\n    }\n\n    // ========================================================================\n    // Private Helper Methods\n    // ========================================================================\n\n    private applyAaclLogic(permissions: SecurityPermission[]): SecurityPermission[] {\n        const aaclEnabled = this.wcpContext.canUseAacl();\n        const teamsEnabled = this.wcpContext.canUseTeams();\n\n        if (aaclEnabled) {\n            // Add AACL metadata permission\n            return [\n                ...permissions,\n                {\n                    name: \"aacl\",\n                    teams: teamsEnabled\n                } as AaclPermission\n            ];\n        }\n\n        // If AACL is not enabled, filter out custom Webiny apps permissions\n        return filterOutCustomWbyAppsPermissions(permissions);\n    }\n}\n\nexport const IdentityContext = createImplementation({\n    abstraction: Abstraction,\n    implementation: IdentityContextImpl,\n    dependencies: [AuthorizationContext, WcpContext]\n});\n"],"names":["identityStorage","AsyncLocalStorage","IdentityContextImpl","authorizationContext","wcpContext","AnonymousIdentity","override","undefined","identity","cb","name","permissions","exactMatch","p","patternMatch","minimatch","aaclEnabled","teamsEnabled","filterOutCustomWbyAppsPermissions","IdentityContext","createImplementation","Abstraction","AuthorizationContext","WcpContext"],"mappings":";;;;;;;;AAYA,MAAMA,kBAAkB,IAAIC;AAE5B,MAAMC;IAGF,YACYC,oBAAoD,EACpDC,UAAgC,CAC1C;aAFUD,oBAAoB,GAApBA;aACAC,UAAU,GAAVA;aAJJ,QAAQ,GAAa,IAAIC;IAK9B;IAMH,cAAwB;QAEpB,MAAMC,WAAWN,gBAAgB,QAAQ;QACzC,IAAIM,AAAaC,WAAbD,UACA,OAAOA;QAEX,OAAO,IAAI,CAAC,QAAQ;IACxB;IAEA,YAAYE,QAA8B,EAAQ;QAE9C,IAAI,CAAC,QAAQ,GAAGA,YAAY,IAAIH;QAGhC,IAAI,CAAC,oBAAoB,CAAC,qBAAqB;IACnD;IAEA,aAAgBG,QAA8B,EAAEC,EAAoB,EAAc;QAC9E,OAAOT,gBAAgB,GAAG,CAACQ,UAAUC;IACzC;IAMA,qBAAwBA,EAAoB,EAAc;QACtD,OAAO,IAAI,CAAC,oBAAoB,CAAC,oBAAoB,CAACA;IAC1D;IAEA,yBAAkC;QAC9B,OAAO,IAAI,CAAC,oBAAoB,CAAC,sBAAsB;IAC3D;IAMA,MAAM,cACFC,IAAY,EACe;QAC3B,IAAI,CAAC,IAAI,CAAC,sBAAsB,IAC5B,OAAO;YAAE,MAAM;QAAI;QAGvB,MAAMC,cAAc,MAAM,IAAI,CAAC,eAAe;QAG9C,MAAMC,aAAaD,YAAY,IAAI,CAACE,CAAAA,IAAKA,EAAE,IAAI,KAAKH;QACpD,IAAIE,YACA,OAAOA;QAIX,MAAME,eAAeH,YAAY,IAAI,CAACE,CAAAA,IAAKE,UAAUL,MAAMG,EAAE,IAAI;QACjE,IAAIC,cACA,OAAOA;QAGX,OAAO;IACX;IAEA,MAAM,eACFJ,IAAY,EACU;QACtB,IAAI,CAAC,IAAI,CAAC,sBAAsB,IAC5B,OAAO;YAAC;gBAAE,MAAM;YAAI;SAAE;QAG1B,MAAMC,cAAc,MAAM,IAAI,CAAC,eAAe;QAE9C,OAAOA,YAAY,MAAM,CAACE,CAAAA;YACtB,IAAIA,EAAE,IAAI,KAAKH,MACX,OAAO;YAEX,OAAOK,UAAUL,MAAMG,EAAE,IAAI;QACjC;IACJ;IAEA,MAAM,kBAAiD;QACnD,MAAMF,cAAc,MAAM,IAAI,CAAC,oBAAoB,CAAC,eAAe,CAAC,IAAI,CAAC,WAAW;QAEpF,OAAO,IAAI,CAAC,cAAc,CAACA;IAC/B;IAEA,MAAM,gBAAkC;QACpC,MAAMA,cAAc,MAAM,IAAI,CAAC,eAAe;QAC9C,OAAOA,YAAY,IAAI,CAACE,CAAAA,IAAKA,AAAW,QAAXA,EAAE,IAAI;IACvC;IAMQ,eAAeF,WAAiC,EAAwB;QAC5E,MAAMK,cAAc,IAAI,CAAC,UAAU,CAAC,UAAU;QAC9C,MAAMC,eAAe,IAAI,CAAC,UAAU,CAAC,WAAW;QAEhD,IAAID,aAEA,OAAO;eACAL;YACH;gBACI,MAAM;gBACN,OAAOM;YACX;SACH;QAIL,OAAOC,kCAAkCP;IAC7C;AACJ;AAEO,MAAMQ,kCAAkBC,qBAAqB;IAChD,aAAaC;IACb,gBAAgBnB;IAChB,cAAc;QAACoB;QAAsBC;KAAW;AACpD"}
+{"version":3,"file":"features/security/IdentityContext/IdentityContext.js","sources":["../../../../src/features/security/IdentityContext/IdentityContext.ts"],"sourcesContent":["import { AsyncLocalStorage } from \"async_hooks\";\nimport { minimatch } from \"minimatch\";\nimport { createImplementation } from \"@webiny/di\";\nimport { IdentityContext as Abstraction } from \"./abstractions.js\";\nimport { Identity } from \"./Identity.js\";\nimport { AnonymousIdentity } from \"./AnonymousIdentity.js\";\nimport { AuthorizationContext } from \"../authorization/AuthorizationContext/index.js\";\nimport { filterOutCustomWbyAppsPermissions } from \"../utils/filterOutCustomWbyAppsPermissions.js\";\nimport type { SecurityPermission } from \"~/types/security.js\";\nimport type { AaclPermission } from \"../../wcp/WcpContext/types.js\";\nimport { FeatureFlags } from \"../../featureFlags/abstractions.js\";\n\nconst identityStorage = new AsyncLocalStorage<Identity | undefined>();\n\nclass IdentityContextImpl implements Abstraction.Interface {\n    private identity: Identity = new AnonymousIdentity();\n\n    constructor(\n        private authorizationContext: AuthorizationContext.Interface,\n        private featureFlags: FeatureFlags.Interface\n    ) {}\n\n    // ========================================================================\n    // Identity Methods\n    // ========================================================================\n\n    getIdentity(): Identity {\n        // Check for identity override first (from withIdentity())\n        const override = identityStorage.getStore();\n        if (override !== undefined) {\n            return override;\n        }\n        return this.identity;\n    }\n\n    setIdentity(identity: Identity | undefined): void {\n        // If undefined, set to anonymous identity\n        this.identity = identity ?? new AnonymousIdentity();\n\n        // Clear permissions cache when identity changes\n        this.authorizationContext.clearPermissionsCache();\n    }\n\n    withIdentity<T>(identity: Identity | undefined, cb: () => Promise<T>): Promise<T> {\n        return identityStorage.run(identity, cb);\n    }\n\n    // ========================================================================\n    // Authorization State Methods\n    // ========================================================================\n\n    withoutAuthorization<T>(cb: () => Promise<T>): Promise<T> {\n        return this.authorizationContext.withoutAuthorization(cb);\n    }\n\n    isAuthorizationEnabled(): boolean {\n        return this.authorizationContext.isAuthorizationEnabled();\n    }\n\n    // ========================================================================\n    // Permission Methods\n    // ========================================================================\n\n    async getPermission<TPermission extends SecurityPermission = SecurityPermission>(\n        name: string\n    ): Promise<TPermission | null> {\n        if (!this.isAuthorizationEnabled()) {\n            return { name: \"*\" } as TPermission;\n        }\n\n        const permissions = await this.listPermissions();\n\n        // Try exact match first\n        const exactMatch = permissions.find(p => p.name === name);\n        if (exactMatch) {\n            return exactMatch as TPermission;\n        }\n\n        // Try pattern matching\n        const patternMatch = permissions.find(p => minimatch(name, p.name));\n        if (patternMatch) {\n            return patternMatch as TPermission;\n        }\n\n        return null;\n    }\n\n    async getPermissions<TPermission extends SecurityPermission = SecurityPermission>(\n        name: string\n    ): Promise<TPermission[]> {\n        if (!this.isAuthorizationEnabled()) {\n            return [{ name: \"*\" }] as TPermission[];\n        }\n\n        const permissions = await this.listPermissions();\n\n        return permissions.filter(p => {\n            if (p.name === name) {\n                return true;\n            }\n            return minimatch(name, p.name);\n        }) as TPermission[];\n    }\n\n    async listPermissions(): Promise<SecurityPermission[]> {\n        const permissions = await this.authorizationContext.loadPermissions(this.getIdentity());\n        // TODO: extract this into a decorator\n        return this.applyAaclLogic(permissions);\n    }\n\n    async hasFullAccess(): Promise<boolean> {\n        const permissions = await this.listPermissions();\n        return permissions.some(p => p.name === \"*\");\n    }\n\n    // ========================================================================\n    // Private Helper Methods\n    // ========================================================================\n\n    private applyAaclLogic(permissions: SecurityPermission[]): SecurityPermission[] {\n        const aaclEnabled = this.featureFlags.get().isEnabled(\"advancedAccessControlLayer\");\n        const teamsEnabled = this.featureFlags.get().isEnabled(\"advancedAccessControlLayer.teams\");\n\n        if (aaclEnabled) {\n            // Add AACL metadata permission\n            return [\n                ...permissions,\n                {\n                    name: \"aacl\",\n                    teams: teamsEnabled\n                } as AaclPermission\n            ];\n        }\n\n        // If AACL is not enabled, filter out custom Webiny apps permissions\n        return filterOutCustomWbyAppsPermissions(permissions);\n    }\n}\n\nexport const IdentityContext = createImplementation({\n    abstraction: Abstraction,\n    implementation: IdentityContextImpl,\n    dependencies: [AuthorizationContext, FeatureFlags]\n});\n"],"names":["identityStorage","AsyncLocalStorage","IdentityContextImpl","authorizationContext","featureFlags","AnonymousIdentity","override","undefined","identity","cb","name","permissions","exactMatch","p","patternMatch","minimatch","aaclEnabled","teamsEnabled","filterOutCustomWbyAppsPermissions","IdentityContext","createImplementation","Abstraction","AuthorizationContext","FeatureFlags"],"mappings":";;;;;;;;AAYA,MAAMA,kBAAkB,IAAIC;AAE5B,MAAMC;IAGF,YACYC,oBAAoD,EACpDC,YAAoC,CAC9C;aAFUD,oBAAoB,GAApBA;aACAC,YAAY,GAAZA;aAJJ,QAAQ,GAAa,IAAIC;IAK9B;IAMH,cAAwB;QAEpB,MAAMC,WAAWN,gBAAgB,QAAQ;QACzC,IAAIM,AAAaC,WAAbD,UACA,OAAOA;QAEX,OAAO,IAAI,CAAC,QAAQ;IACxB;IAEA,YAAYE,QAA8B,EAAQ;QAE9C,IAAI,CAAC,QAAQ,GAAGA,YAAY,IAAIH;QAGhC,IAAI,CAAC,oBAAoB,CAAC,qBAAqB;IACnD;IAEA,aAAgBG,QAA8B,EAAEC,EAAoB,EAAc;QAC9E,OAAOT,gBAAgB,GAAG,CAACQ,UAAUC;IACzC;IAMA,qBAAwBA,EAAoB,EAAc;QACtD,OAAO,IAAI,CAAC,oBAAoB,CAAC,oBAAoB,CAACA;IAC1D;IAEA,yBAAkC;QAC9B,OAAO,IAAI,CAAC,oBAAoB,CAAC,sBAAsB;IAC3D;IAMA,MAAM,cACFC,IAAY,EACe;QAC3B,IAAI,CAAC,IAAI,CAAC,sBAAsB,IAC5B,OAAO;YAAE,MAAM;QAAI;QAGvB,MAAMC,cAAc,MAAM,IAAI,CAAC,eAAe;QAG9C,MAAMC,aAAaD,YAAY,IAAI,CAACE,CAAAA,IAAKA,EAAE,IAAI,KAAKH;QACpD,IAAIE,YACA,OAAOA;QAIX,MAAME,eAAeH,YAAY,IAAI,CAACE,CAAAA,IAAKE,UAAUL,MAAMG,EAAE,IAAI;QACjE,IAAIC,cACA,OAAOA;QAGX,OAAO;IACX;IAEA,MAAM,eACFJ,IAAY,EACU;QACtB,IAAI,CAAC,IAAI,CAAC,sBAAsB,IAC5B,OAAO;YAAC;gBAAE,MAAM;YAAI;SAAE;QAG1B,MAAMC,cAAc,MAAM,IAAI,CAAC,eAAe;QAE9C,OAAOA,YAAY,MAAM,CAACE,CAAAA;YACtB,IAAIA,EAAE,IAAI,KAAKH,MACX,OAAO;YAEX,OAAOK,UAAUL,MAAMG,EAAE,IAAI;QACjC;IACJ;IAEA,MAAM,kBAAiD;QACnD,MAAMF,cAAc,MAAM,IAAI,CAAC,oBAAoB,CAAC,eAAe,CAAC,IAAI,CAAC,WAAW;QAEpF,OAAO,IAAI,CAAC,cAAc,CAACA;IAC/B;IAEA,MAAM,gBAAkC;QACpC,MAAMA,cAAc,MAAM,IAAI,CAAC,eAAe;QAC9C,OAAOA,YAAY,IAAI,CAACE,CAAAA,IAAKA,AAAW,QAAXA,EAAE,IAAI;IACvC;IAMQ,eAAeF,WAAiC,EAAwB;QAC5E,MAAMK,cAAc,IAAI,CAAC,YAAY,CAAC,GAAG,GAAG,SAAS,CAAC;QACtD,MAAMC,eAAe,IAAI,CAAC,YAAY,CAAC,GAAG,GAAG,SAAS,CAAC;QAEvD,IAAID,aAEA,OAAO;eACAL;YACH;gBACI,MAAM;gBACN,OAAOM;YACX;SACH;QAIL,OAAOC,kCAAkCP;IAC7C;AACJ;AAEO,MAAMQ,kCAAkBC,qBAAqB;IAChD,aAAaC;IACb,gBAAgBnB;IAChB,cAAc;QAACoB;QAAsBC;KAAa;AACtD"}

package/features/security/apiKeys/ApiKeyAuthenticator.d.ts

@@ -0,0 +1,14 @@
+import { Logger } from "../../../features/logger/index.js";
+import type { IAuthenticator } from "../../../features/security/authentication/Authenticator/abstractions.js";
+import type { IApiKeysRepository } from "./shared/abstractions.js";
+import type { IdentityData } from "../../../features/security/IdentityContext/Identity.js";
+declare class ApiKeyAuthenticatorImpl implements IAuthenticator {
+    private repository;
+    private logger;
+    constructor(repository: IApiKeysRepository, logger: Logger.Interface);
+    authenticate(token: string): Promise<IdentityData | null>;
+}
+export declare const ApiKeyAuthenticator: typeof ApiKeyAuthenticatorImpl & {
+    __abstraction: import("@webiny/di").Abstraction<IAuthenticator>;
+};
+export {};

package/features/security/apiKeys/ApiKeyAuthenticator.js

@@ -0,0 +1,36 @@
+import { Authenticator } from "../authentication/Authenticator/abstractions.js";
+import { ApiKeysRepository } from "./shared/abstractions.js";
+import { Logger } from "../../logger/index.js";
+class ApiKeyAuthenticatorImpl {
+    constructor(repository, logger){
+        this.repository = repository;
+        this.logger = logger;
+    }
+    async authenticate(token) {
+        if ("string" != typeof token || !token.startsWith("wat_")) return null;
+        const result = await this.repository.getByToken(token);
+        if (!result.isOk()) {
+            this.logger.warn({
+                error: result.error
+            }, "API key authentication failed; request will proceed as anonymous.");
+            return null;
+        }
+        const apiKey = result.value;
+        return {
+            id: apiKey.id,
+            displayName: apiKey.name,
+            type: "api-key",
+            permissions: apiKey.permissions
+        };
+    }
+}
+const ApiKeyAuthenticator = Authenticator.createImplementation({
+    implementation: ApiKeyAuthenticatorImpl,
+    dependencies: [
+        ApiKeysRepository,
+        Logger
+    ]
+});
+export { ApiKeyAuthenticator };
+
+//# sourceMappingURL=ApiKeyAuthenticator.js.map

package/features/security/apiKeys/ApiKeyAuthenticator.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"features/security/apiKeys/ApiKeyAuthenticator.js","sources":["../../../../src/features/security/apiKeys/ApiKeyAuthenticator.ts"],"sourcesContent":["import { Authenticator } from \"~/features/security/authentication/Authenticator/abstractions.js\";\nimport { ApiKeysRepository } from \"./shared/abstractions.js\";\nimport { Logger } from \"~/features/logger/index.js\";\nimport type { IAuthenticator } from \"~/features/security/authentication/Authenticator/abstractions.js\";\nimport type { IApiKeysRepository } from \"./shared/abstractions.js\";\nimport type { IdentityData } from \"~/features/security/IdentityContext/Identity.js\";\n\nclass ApiKeyAuthenticatorImpl implements IAuthenticator {\n    constructor(\n        private repository: IApiKeysRepository,\n        private logger: Logger.Interface\n    ) {}\n\n    async authenticate(token: string): Promise<IdentityData | null> {\n        if (typeof token !== \"string\" || !token.startsWith(\"wat_\")) {\n            return null;\n        }\n        const result = await this.repository.getByToken(token);\n        if (!result.isOk()) {\n            // The token looked like an API key (\"wat_\") but could not be resolved. Log it — otherwise\n            // this degrades silently to an anonymous request (which is what made the tenant-ordering\n            // bug so hard to find). A genuine unknown/revoked key logs here too, which is acceptable.\n            this.logger.warn(\n                { error: result.error },\n                \"API key authentication failed; request will proceed as anonymous.\"\n            );\n            return null;\n        }\n        const apiKey = result.value;\n        return {\n            id: apiKey.id,\n            displayName: apiKey.name,\n            type: \"api-key\",\n            permissions: apiKey.permissions\n        };\n    }\n}\n\nexport const ApiKeyAuthenticator = Authenticator.createImplementation({\n    implementation: ApiKeyAuthenticatorImpl,\n    dependencies: [ApiKeysRepository, Logger]\n});\n"],"names":["ApiKeyAuthenticatorImpl","repository","logger","token","result","apiKey","ApiKeyAuthenticator","Authenticator","ApiKeysRepository","Logger"],"mappings":";;;AAOA,MAAMA;IACF,YACYC,UAA8B,EAC9BC,MAAwB,CAClC;aAFUD,UAAU,GAAVA;aACAC,MAAM,GAANA;IACT;IAEH,MAAM,aAAaC,KAAa,EAAgC;QAC5D,IAAI,AAAiB,YAAjB,OAAOA,SAAsB,CAACA,MAAM,UAAU,CAAC,SAC/C,OAAO;QAEX,MAAMC,SAAS,MAAM,IAAI,CAAC,UAAU,CAAC,UAAU,CAACD;QAChD,IAAI,CAACC,OAAO,IAAI,IAAI;YAIhB,IAAI,CAAC,MAAM,CAAC,IAAI,CACZ;gBAAE,OAAOA,OAAO,KAAK;YAAC,GACtB;YAEJ,OAAO;QACX;QACA,MAAMC,SAASD,OAAO,KAAK;QAC3B,OAAO;YACH,IAAIC,OAAO,EAAE;YACb,aAAaA,OAAO,IAAI;YACxB,MAAM;YACN,aAAaA,OAAO,WAAW;QACnC;IACJ;AACJ;AAEO,MAAMC,sBAAsBC,cAAc,oBAAoB,CAAC;IAClE,gBAAgBP;IAChB,cAAc;QAACQ;QAAmBC;KAAO;AAC7C"}

package/features/security/apiKeys/ApiKeyAuthorizer.d.ts

@@ -0,0 +1,10 @@
+import type { IAuthorizer } from "../../../features/security/authorization/Authorizer/abstractions.js";
+import type { Identity } from "../../../features/security/IdentityContext/Identity.js";
+import type { SecurityPermission } from "../../../types/security.js";
+declare class ApiKeyAuthorizerImpl implements IAuthorizer {
+    authorize(identity: Identity): Promise<SecurityPermission[] | null>;
+}
+export declare const ApiKeyAuthorizer: typeof ApiKeyAuthorizerImpl & {
+    __abstraction: import("@webiny/di").Abstraction<IAuthorizer>;
+};
+export {};

package/features/security/apiKeys/ApiKeyAuthorizer.js

@@ -0,0 +1,15 @@
+import { Authorizer } from "../authorization/Authorizer/abstractions.js";
+class ApiKeyAuthorizerImpl {
+    async authorize(identity) {
+        if (!identity || "api-key" !== identity.type) return null;
+        const permissions = identity.permissions;
+        return Array.isArray(permissions) ? permissions : [];
+    }
+}
+const ApiKeyAuthorizer = Authorizer.createImplementation({
+    implementation: ApiKeyAuthorizerImpl,
+    dependencies: []
+});
+export { ApiKeyAuthorizer };
+
+//# sourceMappingURL=ApiKeyAuthorizer.js.map

package/features/security/apiKeys/ApiKeyAuthorizer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"features/security/apiKeys/ApiKeyAuthorizer.js","sources":["../../../../src/features/security/apiKeys/ApiKeyAuthorizer.ts"],"sourcesContent":["import { Authorizer } from \"~/features/security/authorization/Authorizer/abstractions.js\";\nimport type { IAuthorizer } from \"~/features/security/authorization/Authorizer/abstractions.js\";\nimport type { Identity } from \"~/features/security/IdentityContext/Identity.js\";\nimport type { SecurityPermission } from \"~/types/security.js\";\n\nclass ApiKeyAuthorizerImpl implements IAuthorizer {\n    async authorize(identity: Identity): Promise<SecurityPermission[] | null> {\n        if (!identity || identity.type !== \"api-key\") {\n            return null;\n        }\n        const permissions = (identity as any).permissions;\n        return Array.isArray(permissions) ? (permissions as SecurityPermission[]) : [];\n    }\n}\n\nexport const ApiKeyAuthorizer = Authorizer.createImplementation({\n    implementation: ApiKeyAuthorizerImpl,\n    dependencies: []\n});\n"],"names":["ApiKeyAuthorizerImpl","identity","permissions","Array","ApiKeyAuthorizer","Authorizer"],"mappings":";AAKA,MAAMA;IACF,MAAM,UAAUC,QAAkB,EAAwC;QACtE,IAAI,CAACA,YAAYA,AAAkB,cAAlBA,SAAS,IAAI,EAC1B,OAAO;QAEX,MAAMC,cAAeD,SAAiB,WAAW;QACjD,OAAOE,MAAM,OAAO,CAACD,eAAgBA,cAAuC,EAAE;IAClF;AACJ;AAEO,MAAME,mBAAmBC,WAAW,oBAAoB,CAAC;IAC5D,gBAAgBL;IAChB,cAAc,EAAE;AACpB"}

package/features/security/apiKeys/CreateApiKey/CreateApiKeyUseCase.js

@@ -8,6 +8,7 @@ import { createApiKeyInputSchema } from "../shared/schemas.js";
 import { ApiKeyAfterCreateEvent, ApiKeyBeforeCreateEvent } from "./events.js";
 import { generateToken } from "../shared/generateToken.js";
 import { ApiKeyNotAuthorizedError, ApiKeyValidationError } from "../shared/errors.js";
+import { descriptionOnCreate } from "../../shared/description.js";
 class CreateApiKeyUseCaseImpl {
     constructor(identityContext, eventPublisher, repository){
         this.identityContext = identityContext;
@@ -22,13 +23,17 @@ class CreateApiKeyUseCaseImpl {
         const token = generateToken();
         const identity = this.identityContext.getIdentity();
         const data = validation.data;
+        const createInput = {
+            ...data,
+            description: descriptionOnCreate(data.description)
+        };
         const apiKey = {
             id: mdbid(),
-            name: data.name,
-            slug: data.slug,
-            description: data.description,
+            name: createInput.name,
+            slug: createInput.slug,
+            description: descriptionOnCreate(createInput.description),
             token,
-            permissions: data.permissions,
+            permissions: createInput.permissions,
             createdOn: new Date().toISOString(),
             createdBy: {
                 id: identity.id,
@@ -38,13 +43,13 @@ class CreateApiKeyUseCaseImpl {
         };
         await this.eventPublisher.publish(new ApiKeyBeforeCreateEvent({
             apiKey,
-            input: validation.data
+            input: createInput
         }));
         const result = await this.repository.create(apiKey);
         if (result.isFail()) return Result.fail(result.error);
         await this.eventPublisher.publish(new ApiKeyAfterCreateEvent({
             apiKey,
-            input: validation.data
+            input: createInput
         }));
         return Result.ok(apiKey);
     }

package/features/security/apiKeys/CreateApiKey/CreateApiKeyUseCase.js.map

@@ -1 +1 @@
-{"version":3,"file":"features/security/apiKeys/CreateApiKey/CreateApiKeyUseCase.js","sources":["../../../../../src/features/security/apiKeys/CreateApiKey/CreateApiKeyUseCase.ts"],"sourcesContent":["import { mdbid } from \"@webiny/utils\";\nimport { Result } from \"@webiny/feature/api\";\nimport { EventPublisher } from \"~/features/eventPublisher/index.js\";\nimport { CreateApiKeyUseCase as CreateApiKeyUseCaseAbstraction } from \"./abstractions.js\";\nimport { ApiKeysRepository } from \"../shared/abstractions.js\";\nimport { IdentityContext } from \"../../IdentityContext/abstractions.js\";\nimport { createApiKeyInputSchema } from \"../shared/schemas.js\";\nimport { ApiKeyBeforeCreateEvent, ApiKeyAfterCreateEvent } from \"./events.js\";\nimport type { ApiKey, CreateApiKeyInput } from \"../shared/types.js\";\nimport type { ApiKeyPermission } from \"~/types/security.js\";\nimport { generateToken } from \"../shared/generateToken.js\";\nimport { ApiKeyValidationError, ApiKeyNotAuthorizedError } from \"../shared/errors.js\";\n\nclass CreateApiKeyUseCaseImpl implements CreateApiKeyUseCaseAbstraction.Interface {\n    constructor(\n        private identityContext: IdentityContext.Interface,\n        private eventPublisher: EventPublisher.Interface,\n        private repository: ApiKeysRepository.Interface\n    ) {}\n\n    async execute(\n        input: CreateApiKeyInput\n    ): Promise<Result<ApiKey, CreateApiKeyUseCaseAbstraction.Error>> {\n        const hasPermission =\n            await this.identityContext.getPermission<ApiKeyPermission>(\"security.apiKey\");\n\n        if (!hasPermission) {\n            return Result.fail(new ApiKeyNotAuthorizedError());\n        }\n\n        const validation = createApiKeyInputSchema.safeParse(input);\n        if (!validation.success) {\n            return Result.fail(new ApiKeyValidationError(validation.error.issues[0].message));\n        }\n\n        const token = generateToken();\n        const identity = this.identityContext.getIdentity();\n        const data = validation.data;\n\n        const apiKey: ApiKey = {\n            id: mdbid(),\n            name: data.name,\n            slug: data.slug,\n            description: data.description,\n            token,\n            permissions: data.permissions,\n            createdOn: new Date().toISOString(),\n            createdBy: {\n                id: identity.id,\n                displayName: identity.displayName,\n                type: identity.type\n            }\n        };\n\n        await this.eventPublisher.publish(\n            new ApiKeyBeforeCreateEvent({ apiKey, input: validation.data })\n        );\n\n        const result = await this.repository.create(apiKey);\n\n        if (result.isFail()) {\n            return Result.fail(result.error);\n        }\n\n        await this.eventPublisher.publish(\n            new ApiKeyAfterCreateEvent({ apiKey, input: validation.data })\n        );\n\n        return Result.ok(apiKey);\n    }\n}\n\nexport const CreateApiKeyUseCase = CreateApiKeyUseCaseAbstraction.createImplementation({\n    implementation: CreateApiKeyUseCaseImpl,\n    dependencies: [IdentityContext, EventPublisher, ApiKeysRepository]\n});\n"],"names":["CreateApiKeyUseCaseImpl","identityContext","eventPublisher","repository","input","hasPermission","Result","ApiKeyNotAuthorizedError","validation","createApiKeyInputSchema","ApiKeyValidationError","token","generateToken","identity","data","apiKey","mdbid","Date","ApiKeyBeforeCreateEvent","result","ApiKeyAfterCreateEvent","CreateApiKeyUseCase","CreateApiKeyUseCaseAbstraction","IdentityContext","EventPublisher","ApiKeysRepository"],"mappings":";;;;;;;;;;AAaA,MAAMA;IACF,YACYC,eAA0C,EAC1CC,cAAwC,EACxCC,UAAuC,CACjD;aAHUF,eAAe,GAAfA;aACAC,cAAc,GAAdA;aACAC,UAAU,GAAVA;IACT;IAEH,MAAM,QACFC,KAAwB,EACqC;QAC7D,MAAMC,gBACF,MAAM,IAAI,CAAC,eAAe,CAAC,aAAa,CAAmB;QAE/D,IAAI,CAACA,eACD,OAAOC,OAAO,IAAI,CAAC,IAAIC;QAG3B,MAAMC,aAAaC,wBAAwB,SAAS,CAACL;QACrD,IAAI,CAACI,WAAW,OAAO,EACnB,OAAOF,OAAO,IAAI,CAAC,IAAII,sBAAsBF,WAAW,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,OAAO;QAGnF,MAAMG,QAAQC;QACd,MAAMC,WAAW,IAAI,CAAC,eAAe,CAAC,WAAW;QACjD,MAAMC,OAAON,WAAW,IAAI;QAE5B,MAAMO,SAAiB;YACnB,IAAIC;YACJ,MAAMF,KAAK,IAAI;YACf,MAAMA,KAAK,IAAI;YACf,aAAaA,KAAK,WAAW;YAC7BH;YACA,aAAaG,KAAK,WAAW;YAC7B,WAAW,IAAIG,OAAO,WAAW;YACjC,WAAW;gBACP,IAAIJ,SAAS,EAAE;gBACf,aAAaA,SAAS,WAAW;gBACjC,MAAMA,SAAS,IAAI;YACvB;QACJ;QAEA,MAAM,IAAI,CAAC,cAAc,CAAC,OAAO,CAC7B,IAAIK,wBAAwB;YAAEH;YAAQ,OAAOP,WAAW,IAAI;QAAC;QAGjE,MAAMW,SAAS,MAAM,IAAI,CAAC,UAAU,CAAC,MAAM,CAACJ;QAE5C,IAAII,OAAO,MAAM,IACb,OAAOb,OAAO,IAAI,CAACa,OAAO,KAAK;QAGnC,MAAM,IAAI,CAAC,cAAc,CAAC,OAAO,CAC7B,IAAIC,uBAAuB;YAAEL;YAAQ,OAAOP,WAAW,IAAI;QAAC;QAGhE,OAAOF,OAAO,EAAE,CAACS;IACrB;AACJ;AAEO,MAAMM,0CAAsBC,oBAAAA,oBAAmD,CAAC;IACnF,gBAAgBtB;IAChB,cAAc;QAACuB;QAAiBC;QAAgBC;KAAkB;AACtE"}
+{"version":3,"file":"features/security/apiKeys/CreateApiKey/CreateApiKeyUseCase.js","sources":["../../../../../src/features/security/apiKeys/CreateApiKey/CreateApiKeyUseCase.ts"],"sourcesContent":["import { mdbid } from \"@webiny/utils\";\nimport { Result } from \"@webiny/feature/api\";\nimport { EventPublisher } from \"~/features/eventPublisher/index.js\";\nimport { CreateApiKeyUseCase as CreateApiKeyUseCaseAbstraction } from \"./abstractions.js\";\nimport { ApiKeysRepository } from \"../shared/abstractions.js\";\nimport { IdentityContext } from \"../../IdentityContext/abstractions.js\";\nimport { createApiKeyInputSchema } from \"../shared/schemas.js\";\nimport { ApiKeyBeforeCreateEvent, ApiKeyAfterCreateEvent } from \"./events.js\";\nimport type { ApiKey, CreateApiKeyInput } from \"../shared/types.js\";\nimport type { ApiKeyPermission } from \"~/types/security.js\";\nimport { generateToken } from \"../shared/generateToken.js\";\nimport { ApiKeyValidationError, ApiKeyNotAuthorizedError } from \"../shared/errors.js\";\nimport { descriptionOnCreate } from \"../../shared/description.js\";\n\nclass CreateApiKeyUseCaseImpl implements CreateApiKeyUseCaseAbstraction.Interface {\n    constructor(\n        private identityContext: IdentityContext.Interface,\n        private eventPublisher: EventPublisher.Interface,\n        private repository: ApiKeysRepository.Interface\n    ) {}\n\n    async execute(\n        input: CreateApiKeyInput\n    ): Promise<Result<ApiKey, CreateApiKeyUseCaseAbstraction.Error>> {\n        const hasPermission =\n            await this.identityContext.getPermission<ApiKeyPermission>(\"security.apiKey\");\n\n        if (!hasPermission) {\n            return Result.fail(new ApiKeyNotAuthorizedError());\n        }\n\n        const validation = createApiKeyInputSchema.safeParse(input);\n        if (!validation.success) {\n            return Result.fail(new ApiKeyValidationError(validation.error.issues[0].message));\n        }\n\n        const token = generateToken();\n        const identity = this.identityContext.getIdentity();\n        const data = validation.data;\n\n        // Normalised up front so that null reaches neither the entity nor the published events.\n        const createInput: CreateApiKeyInput = {\n            ...data,\n            description: descriptionOnCreate(data.description)\n        };\n\n        const apiKey: ApiKey = {\n            id: mdbid(),\n            name: createInput.name,\n            slug: createInput.slug,\n            description: descriptionOnCreate(createInput.description),\n            token,\n            permissions: createInput.permissions,\n            createdOn: new Date().toISOString(),\n            createdBy: {\n                id: identity.id,\n                displayName: identity.displayName,\n                type: identity.type\n            }\n        };\n\n        await this.eventPublisher.publish(\n            new ApiKeyBeforeCreateEvent({ apiKey, input: createInput })\n        );\n\n        const result = await this.repository.create(apiKey);\n\n        if (result.isFail()) {\n            return Result.fail(result.error);\n        }\n\n        await this.eventPublisher.publish(\n            new ApiKeyAfterCreateEvent({ apiKey, input: createInput })\n        );\n\n        return Result.ok(apiKey);\n    }\n}\n\nexport const CreateApiKeyUseCase = CreateApiKeyUseCaseAbstraction.createImplementation({\n    implementation: CreateApiKeyUseCaseImpl,\n    dependencies: [IdentityContext, EventPublisher, ApiKeysRepository]\n});\n"],"names":["CreateApiKeyUseCaseImpl","identityContext","eventPublisher","repository","input","hasPermission","Result","ApiKeyNotAuthorizedError","validation","createApiKeyInputSchema","ApiKeyValidationError","token","generateToken","identity","data","createInput","descriptionOnCreate","apiKey","mdbid","Date","ApiKeyBeforeCreateEvent","result","ApiKeyAfterCreateEvent","CreateApiKeyUseCase","CreateApiKeyUseCaseAbstraction","IdentityContext","EventPublisher","ApiKeysRepository"],"mappings":";;;;;;;;;;;AAcA,MAAMA;IACF,YACYC,eAA0C,EAC1CC,cAAwC,EACxCC,UAAuC,CACjD;aAHUF,eAAe,GAAfA;aACAC,cAAc,GAAdA;aACAC,UAAU,GAAVA;IACT;IAEH,MAAM,QACFC,KAAwB,EACqC;QAC7D,MAAMC,gBACF,MAAM,IAAI,CAAC,eAAe,CAAC,aAAa,CAAmB;QAE/D,IAAI,CAACA,eACD,OAAOC,OAAO,IAAI,CAAC,IAAIC;QAG3B,MAAMC,aAAaC,wBAAwB,SAAS,CAACL;QACrD,IAAI,CAACI,WAAW,OAAO,EACnB,OAAOF,OAAO,IAAI,CAAC,IAAII,sBAAsBF,WAAW,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,OAAO;QAGnF,MAAMG,QAAQC;QACd,MAAMC,WAAW,IAAI,CAAC,eAAe,CAAC,WAAW;QACjD,MAAMC,OAAON,WAAW,IAAI;QAG5B,MAAMO,cAAiC;YACnC,GAAGD,IAAI;YACP,aAAaE,oBAAoBF,KAAK,WAAW;QACrD;QAEA,MAAMG,SAAiB;YACnB,IAAIC;YACJ,MAAMH,YAAY,IAAI;YACtB,MAAMA,YAAY,IAAI;YACtB,aAAaC,oBAAoBD,YAAY,WAAW;YACxDJ;YACA,aAAaI,YAAY,WAAW;YACpC,WAAW,IAAII,OAAO,WAAW;YACjC,WAAW;gBACP,IAAIN,SAAS,EAAE;gBACf,aAAaA,SAAS,WAAW;gBACjC,MAAMA,SAAS,IAAI;YACvB;QACJ;QAEA,MAAM,IAAI,CAAC,cAAc,CAAC,OAAO,CAC7B,IAAIO,wBAAwB;YAAEH;YAAQ,OAAOF;QAAY;QAG7D,MAAMM,SAAS,MAAM,IAAI,CAAC,UAAU,CAAC,MAAM,CAACJ;QAE5C,IAAII,OAAO,MAAM,IACb,OAAOf,OAAO,IAAI,CAACe,OAAO,KAAK;QAGnC,MAAM,IAAI,CAAC,cAAc,CAAC,OAAO,CAC7B,IAAIC,uBAAuB;YAAEL;YAAQ,OAAOF;QAAY;QAG5D,OAAOT,OAAO,EAAE,CAACW;IACrB;AACJ;AAEO,MAAMM,0CAAsBC,oBAAAA,oBAAmD,CAAC;IACnF,gBAAgBxB;IAChB,cAAc;QAACyB;QAAiBC;QAAgBC;KAAkB;AACtE"}

package/features/security/apiKeys/GetApiKey/GetApiKeyUseCase.d.ts

@@ -7,7 +7,7 @@ declare class GetApiKeyUseCaseImpl implements GetApiKeyUseCaseAbstraction.Interf
     private repository;
     private identityContext;
     constructor(repository: ApiKeysRepository.Interface, identityContext: IdentityContext.Interface);
-    execute(id: string): Promise<Result<ApiKey | null, GetApiKeyUseCaseAbstraction.Error>>;
+    execute(id: string): Promise<Result<ApiKey, GetApiKeyUseCaseAbstraction.Error>>;
 }
 export declare const GetApiKeyUseCase: typeof GetApiKeyUseCaseImpl & {
     __abstraction: import("@webiny/di").Abstraction<import("./abstractions.js").IGetApiKey>;

package/features/security/apiKeys/GetApiKey/GetApiKeyUseCase.js.map

@@ -1 +1 @@
-{"version":3,"file":"features/security/apiKeys/GetApiKey/GetApiKeyUseCase.js","sources":["../../../../../src/features/security/apiKeys/GetApiKey/GetApiKeyUseCase.ts"],"sourcesContent":["import { Result } from \"@webiny/feature/api\";\nimport { GetApiKeyUseCase as GetApiKeyUseCaseAbstraction } from \"./abstractions.js\";\nimport { ApiKeysRepository } from \"../shared/abstractions.js\";\nimport { IdentityContext } from \"../../IdentityContext/abstractions.js\";\nimport type { ApiKey } from \"../shared/types.js\";\nimport { ApiKeyNotAuthorizedError } from \"~/features/security/apiKeys/shared/errors.js\";\n\nclass GetApiKeyUseCaseImpl implements GetApiKeyUseCaseAbstraction.Interface {\n    private repository: ApiKeysRepository.Interface;\n    private identityContext: IdentityContext.Interface;\n\n    constructor(\n        repository: ApiKeysRepository.Interface,\n        identityContext: IdentityContext.Interface\n    ) {\n        this.repository = repository;\n        this.identityContext = identityContext;\n    }\n\n    async execute(id: string): Promise<Result<ApiKey | null, GetApiKeyUseCaseAbstraction.Error>> {\n        const hasPermission = await this.identityContext.getPermission(\"security.apiKey\");\n        if (!hasPermission) {\n            return Result.fail(new ApiKeyNotAuthorizedError());\n        }\n\n        return this.repository.get(id);\n    }\n}\n\nexport const GetApiKeyUseCase = GetApiKeyUseCaseAbstraction.createImplementation({\n    implementation: GetApiKeyUseCaseImpl,\n    dependencies: [ApiKeysRepository, IdentityContext]\n});\n"],"names":["GetApiKeyUseCaseImpl","repository","identityContext","id","hasPermission","Result","ApiKeyNotAuthorizedError","GetApiKeyUseCase","GetApiKeyUseCaseAbstraction","ApiKeysRepository","IdentityContext"],"mappings":";;;;;AAOA,MAAMA;IAIF,YACIC,UAAuC,EACvCC,eAA0C,CAC5C;QACE,IAAI,CAAC,UAAU,GAAGD;QAClB,IAAI,CAAC,eAAe,GAAGC;IAC3B;IAEA,MAAM,QAAQC,EAAU,EAAqE;QACzF,MAAMC,gBAAgB,MAAM,IAAI,CAAC,eAAe,CAAC,aAAa,CAAC;QAC/D,IAAI,CAACA,eACD,OAAOC,OAAO,IAAI,CAAC,IAAIC;QAG3B,OAAO,IAAI,CAAC,UAAU,CAAC,GAAG,CAACH;IAC/B;AACJ;AAEO,MAAMI,oCAAmBC,iBAAAA,oBAAgD,CAAC;IAC7E,gBAAgBR;IAChB,cAAc;QAACS;QAAmBC;KAAgB;AACtD"}
+{"version":3,"file":"features/security/apiKeys/GetApiKey/GetApiKeyUseCase.js","sources":["../../../../../src/features/security/apiKeys/GetApiKey/GetApiKeyUseCase.ts"],"sourcesContent":["import { Result } from \"@webiny/feature/api\";\nimport { GetApiKeyUseCase as GetApiKeyUseCaseAbstraction } from \"./abstractions.js\";\nimport { ApiKeysRepository } from \"../shared/abstractions.js\";\nimport { IdentityContext } from \"../../IdentityContext/abstractions.js\";\nimport type { ApiKey } from \"../shared/types.js\";\nimport { ApiKeyNotAuthorizedError } from \"~/features/security/apiKeys/shared/errors.js\";\n\nclass GetApiKeyUseCaseImpl implements GetApiKeyUseCaseAbstraction.Interface {\n    private repository: ApiKeysRepository.Interface;\n    private identityContext: IdentityContext.Interface;\n\n    constructor(\n        repository: ApiKeysRepository.Interface,\n        identityContext: IdentityContext.Interface\n    ) {\n        this.repository = repository;\n        this.identityContext = identityContext;\n    }\n\n    async execute(id: string): Promise<Result<ApiKey, GetApiKeyUseCaseAbstraction.Error>> {\n        const hasPermission = await this.identityContext.getPermission(\"security.apiKey\");\n        if (!hasPermission) {\n            return Result.fail(new ApiKeyNotAuthorizedError());\n        }\n\n        return this.repository.get(id);\n    }\n}\n\nexport const GetApiKeyUseCase = GetApiKeyUseCaseAbstraction.createImplementation({\n    implementation: GetApiKeyUseCaseImpl,\n    dependencies: [ApiKeysRepository, IdentityContext]\n});\n"],"names":["GetApiKeyUseCaseImpl","repository","identityContext","id","hasPermission","Result","ApiKeyNotAuthorizedError","GetApiKeyUseCase","GetApiKeyUseCaseAbstraction","ApiKeysRepository","IdentityContext"],"mappings":";;;;;AAOA,MAAMA;IAIF,YACIC,UAAuC,EACvCC,eAA0C,CAC5C;QACE,IAAI,CAAC,UAAU,GAAGD;QAClB,IAAI,CAAC,eAAe,GAAGC;IAC3B;IAEA,MAAM,QAAQC,EAAU,EAA8D;QAClF,MAAMC,gBAAgB,MAAM,IAAI,CAAC,eAAe,CAAC,aAAa,CAAC;QAC/D,IAAI,CAACA,eACD,OAAOC,OAAO,IAAI,CAAC,IAAIC;QAG3B,OAAO,IAAI,CAAC,UAAU,CAAC,GAAG,CAACH;IAC/B;AACJ;AAEO,MAAMI,oCAAmBC,iBAAAA,oBAAgD,CAAC;IAC7E,gBAAgBR;IAChB,cAAc;QAACS;QAAmBC;KAAgB;AACtD"}

package/features/security/apiKeys/GetApiKeyBySlug/GetApiKeyBySlugUseCase.d.ts

@@ -1,11 +1,9 @@
-import { Result } from "@webiny/feature/api";
 import { GetApiKeyBySlugUseCase as GetApiKeyBySlugUseCaseAbstraction } from "./abstractions.js";
 import { ApiKeysRepository } from "../shared/abstractions.js";
-import type { ApiKey } from "../shared/types.js";
 declare class GetApiKeyBySlugUseCaseImpl implements GetApiKeyBySlugUseCaseAbstraction.Interface {
     private repository;
     constructor(repository: ApiKeysRepository.Interface);
-    execute(slug: string): Promise<Result<ApiKey | null, GetApiKeyBySlugUseCaseAbstraction.Error>>;
+    execute(slug: string): Promise<import("@webiny/feature/api/Result.js").Result<import("../shared/types.js").ApiKey, import("../shared/errors.js").ApiKeyNotFoundError | import("../shared/errors.js").ApiKeyPersistenceError | import("../shared/errors.js").ApiKeyValidationError>>;
 }
 export declare const GetApiKeyBySlugUseCase: typeof GetApiKeyBySlugUseCaseImpl & {
     __abstraction: import("@webiny/di").Abstraction<import("./abstractions.js").IGetApiKeyBySlug>;

package/features/security/apiKeys/GetApiKeyBySlug/GetApiKeyBySlugUseCase.js.map

@@ -1 +1 @@
-{"version":3,"file":"features/security/apiKeys/GetApiKeyBySlug/GetApiKeyBySlugUseCase.js","sources":["../../../../../src/features/security/apiKeys/GetApiKeyBySlug/GetApiKeyBySlugUseCase.ts"],"sourcesContent":["import { Result } from \"@webiny/feature/api\";\nimport { GetApiKeyBySlugUseCase as GetApiKeyBySlugUseCaseAbstraction } from \"./abstractions.js\";\nimport { ApiKeysRepository } from \"../shared/abstractions.js\";\nimport type { ApiKey } from \"../shared/types.js\";\n\nclass GetApiKeyBySlugUseCaseImpl implements GetApiKeyBySlugUseCaseAbstraction.Interface {\n    private repository: ApiKeysRepository.Interface;\n\n    constructor(repository: ApiKeysRepository.Interface) {\n        this.repository = repository;\n    }\n\n    async execute(\n        slug: string\n    ): Promise<Result<ApiKey | null, GetApiKeyBySlugUseCaseAbstraction.Error>> {\n        return this.repository.getBySlug(slug);\n    }\n}\n\nexport const GetApiKeyBySlugUseCase = GetApiKeyBySlugUseCaseAbstraction.createImplementation({\n    implementation: GetApiKeyBySlugUseCaseImpl,\n    dependencies: [ApiKeysRepository]\n});\n"],"names":["GetApiKeyBySlugUseCaseImpl","repository","slug","GetApiKeyBySlugUseCase","GetApiKeyBySlugUseCaseAbstraction","ApiKeysRepository"],"mappings":";;AAKA,MAAMA;IAGF,YAAYC,UAAuC,CAAE;QACjD,IAAI,CAAC,UAAU,GAAGA;IACtB;IAEA,MAAM,QACFC,IAAY,EAC2D;QACvE,OAAO,IAAI,CAAC,UAAU,CAAC,SAAS,CAACA;IACrC;AACJ;AAEO,MAAMC,gDAAyBC,uBAAAA,oBAAsD,CAAC;IACzF,gBAAgBJ;IAChB,cAAc;QAACK;KAAkB;AACrC"}
+{"version":3,"file":"features/security/apiKeys/GetApiKeyBySlug/GetApiKeyBySlugUseCase.js","sources":["../../../../../src/features/security/apiKeys/GetApiKeyBySlug/GetApiKeyBySlugUseCase.ts"],"sourcesContent":["import { GetApiKeyBySlugUseCase as GetApiKeyBySlugUseCaseAbstraction } from \"./abstractions.js\";\nimport { ApiKeysRepository } from \"../shared/abstractions.js\";\n\nclass GetApiKeyBySlugUseCaseImpl implements GetApiKeyBySlugUseCaseAbstraction.Interface {\n    constructor(private repository: ApiKeysRepository.Interface) {}\n\n    async execute(slug: string) {\n        return this.repository.getBySlug(slug);\n    }\n}\n\nexport const GetApiKeyBySlugUseCase = GetApiKeyBySlugUseCaseAbstraction.createImplementation({\n    implementation: GetApiKeyBySlugUseCaseImpl,\n    dependencies: [ApiKeysRepository]\n});\n"],"names":["GetApiKeyBySlugUseCaseImpl","repository","slug","GetApiKeyBySlugUseCase","GetApiKeyBySlugUseCaseAbstraction","ApiKeysRepository"],"mappings":";;AAGA,MAAMA;IACF,YAAoBC,UAAuC,CAAE;aAAzCA,UAAU,GAAVA;IAA0C;IAE9D,MAAM,QAAQC,IAAY,EAAE;QACxB,OAAO,IAAI,CAAC,UAAU,CAAC,SAAS,CAACA;IACrC;AACJ;AAEO,MAAMC,gDAAyBC,uBAAAA,oBAAsD,CAAC;IACzF,gBAAgBJ;IAChB,cAAc;QAACK;KAAkB;AACrC"}

package/features/security/apiKeys/GetApiKeyBySlug/abstractions.d.ts

@@ -5,7 +5,7 @@ export interface IGetApiKeyBySlugErrors {
 }
 type GetApiKeyBySlugError = IGetApiKeyBySlugErrors[keyof IGetApiKeyBySlugErrors] | ApiKeysRepository.Error;
 export interface IGetApiKeyBySlug {
-    execute(slug: string): Promise<Result<ApiKey | null, GetApiKeyBySlugError>>;
+    execute(slug: string): Promise<Result<ApiKey, GetApiKeyBySlugError>>;
 }
 /** Retrieve an API key by its slug. */
 export declare const GetApiKeyBySlugUseCase: import("@webiny/di").Abstraction<IGetApiKeyBySlug>;

package/features/security/apiKeys/GetApiKeyBySlug/abstractions.js.map

@@ -1 +1 @@
-{"version":3,"file":"features/security/apiKeys/GetApiKeyBySlug/abstractions.js","sources":["../../../../../src/features/security/apiKeys/GetApiKeyBySlug/abstractions.ts"],"sourcesContent":["import { createAbstraction } from \"@webiny/feature/api\";\nimport { Result } from \"@webiny/feature/api\";\nimport type { ApiKey } from \"../shared/types.js\";\nimport { ApiKeysRepository } from \"../shared/abstractions.js\";\n\nexport interface IGetApiKeyBySlugErrors {\n    // No use-case specific errors - only repository errors can occur\n}\n\ntype GetApiKeyBySlugError =\n    | IGetApiKeyBySlugErrors[keyof IGetApiKeyBySlugErrors]\n    | ApiKeysRepository.Error;\n\nexport interface IGetApiKeyBySlug {\n    execute(slug: string): Promise<Result<ApiKey | null, GetApiKeyBySlugError>>;\n}\n\n/** Retrieve an API key by its slug. */\nexport const GetApiKeyBySlugUseCase = createAbstraction<IGetApiKeyBySlug>(\"GetApiKeyBySlugUseCase\");\n\nexport namespace GetApiKeyBySlugUseCase {\n    export type Interface = IGetApiKeyBySlug;\n    export type Error = GetApiKeyBySlugError;\n}\n"],"names":["GetApiKeyBySlugUseCase","createAbstraction"],"mappings":";AAkBO,MAAMA,yBAAyBC,kBAAoC"}
+{"version":3,"file":"features/security/apiKeys/GetApiKeyBySlug/abstractions.js","sources":["../../../../../src/features/security/apiKeys/GetApiKeyBySlug/abstractions.ts"],"sourcesContent":["import { createAbstraction } from \"@webiny/feature/api\";\nimport { Result } from \"@webiny/feature/api\";\nimport type { ApiKey } from \"../shared/types.js\";\nimport { ApiKeysRepository } from \"../shared/abstractions.js\";\n\nexport interface IGetApiKeyBySlugErrors {\n    // No use-case specific errors - only repository errors can occur\n}\n\ntype GetApiKeyBySlugError =\n    | IGetApiKeyBySlugErrors[keyof IGetApiKeyBySlugErrors]\n    | ApiKeysRepository.Error;\n\nexport interface IGetApiKeyBySlug {\n    execute(slug: string): Promise<Result<ApiKey, GetApiKeyBySlugError>>;\n}\n\n/** Retrieve an API key by its slug. */\nexport const GetApiKeyBySlugUseCase = createAbstraction<IGetApiKeyBySlug>(\"GetApiKeyBySlugUseCase\");\n\nexport namespace GetApiKeyBySlugUseCase {\n    export type Interface = IGetApiKeyBySlug;\n    export type Error = GetApiKeyBySlugError;\n}\n"],"names":["GetApiKeyBySlugUseCase","createAbstraction"],"mappings":";AAkBO,MAAMA,yBAAyBC,kBAAoC"}

package/features/security/apiKeys/GetApiKeyByToken/GetApiKeyByTokenUseCase.d.ts

@@ -1,11 +1,9 @@
-import { Result } from "@webiny/feature/api";
 import { GetApiKeyByTokenUseCase as GetApiKeyByTokenUseCaseAbstraction } from "./abstractions.js";
 import { ApiKeysRepository } from "../shared/abstractions.js";
-import type { ApiKey } from "../shared/types.js";
 declare class GetApiKeyByTokenUseCaseImpl implements GetApiKeyByTokenUseCaseAbstraction.Interface {
     private repository;
     constructor(repository: ApiKeysRepository.Interface);
-    execute(token: string): Promise<Result<ApiKey | null, GetApiKeyByTokenUseCaseAbstraction.Error>>;
+    execute(token: string): Promise<import("@webiny/feature/api/Result.js").Result<import("../shared/types.js").ApiKey, import("../shared/errors.js").ApiKeyNotFoundError | import("../shared/errors.js").ApiKeyPersistenceError | import("../shared/errors.js").ApiKeyValidationError>>;
 }
 export declare const GetApiKeyByTokenUseCase: typeof GetApiKeyByTokenUseCaseImpl & {
     __abstraction: import("@webiny/di").Abstraction<import("./abstractions.js").IGetApiKeyByToken>;

package/features/security/apiKeys/GetApiKeyByToken/GetApiKeyByTokenUseCase.js.map

@@ -1 +1 @@
-{"version":3,"file":"features/security/apiKeys/GetApiKeyByToken/GetApiKeyByTokenUseCase.js","sources":["../../../../../src/features/security/apiKeys/GetApiKeyByToken/GetApiKeyByTokenUseCase.ts"],"sourcesContent":["import { Result } from \"@webiny/feature/api\";\nimport { GetApiKeyByTokenUseCase as GetApiKeyByTokenUseCaseAbstraction } from \"./abstractions.js\";\nimport { ApiKeysRepository } from \"../shared/abstractions.js\";\nimport type { ApiKey } from \"../shared/types.js\";\n\nclass GetApiKeyByTokenUseCaseImpl implements GetApiKeyByTokenUseCaseAbstraction.Interface {\n    private repository: ApiKeysRepository.Interface;\n\n    constructor(repository: ApiKeysRepository.Interface) {\n        this.repository = repository;\n    }\n\n    async execute(\n        token: string\n    ): Promise<Result<ApiKey | null, GetApiKeyByTokenUseCaseAbstraction.Error>> {\n        return this.repository.getByToken(token);\n    }\n}\n\nexport const GetApiKeyByTokenUseCase = GetApiKeyByTokenUseCaseAbstraction.createImplementation({\n    implementation: GetApiKeyByTokenUseCaseImpl,\n    dependencies: [ApiKeysRepository]\n});\n"],"names":["GetApiKeyByTokenUseCaseImpl","repository","token","GetApiKeyByTokenUseCase","GetApiKeyByTokenUseCaseAbstraction","ApiKeysRepository"],"mappings":";;AAKA,MAAMA;IAGF,YAAYC,UAAuC,CAAE;QACjD,IAAI,CAAC,UAAU,GAAGA;IACtB;IAEA,MAAM,QACFC,KAAa,EAC2D;QACxE,OAAO,IAAI,CAAC,UAAU,CAAC,UAAU,CAACA;IACtC;AACJ;AAEO,MAAMC,kDAA0BC,wBAAAA,oBAAuD,CAAC;IAC3F,gBAAgBJ;IAChB,cAAc;QAACK;KAAkB;AACrC"}
+{"version":3,"file":"features/security/apiKeys/GetApiKeyByToken/GetApiKeyByTokenUseCase.js","sources":["../../../../../src/features/security/apiKeys/GetApiKeyByToken/GetApiKeyByTokenUseCase.ts"],"sourcesContent":["import { GetApiKeyByTokenUseCase as GetApiKeyByTokenUseCaseAbstraction } from \"./abstractions.js\";\nimport { ApiKeysRepository } from \"../shared/abstractions.js\";\n\nclass GetApiKeyByTokenUseCaseImpl implements GetApiKeyByTokenUseCaseAbstraction.Interface {\n    constructor(private repository: ApiKeysRepository.Interface) {}\n\n    async execute(token: string) {\n        return this.repository.getByToken(token);\n    }\n}\n\nexport const GetApiKeyByTokenUseCase = GetApiKeyByTokenUseCaseAbstraction.createImplementation({\n    implementation: GetApiKeyByTokenUseCaseImpl,\n    dependencies: [ApiKeysRepository]\n});\n"],"names":["GetApiKeyByTokenUseCaseImpl","repository","token","GetApiKeyByTokenUseCase","GetApiKeyByTokenUseCaseAbstraction","ApiKeysRepository"],"mappings":";;AAGA,MAAMA;IACF,YAAoBC,UAAuC,CAAE;aAAzCA,UAAU,GAAVA;IAA0C;IAE9D,MAAM,QAAQC,KAAa,EAAE;QACzB,OAAO,IAAI,CAAC,UAAU,CAAC,UAAU,CAACA;IACtC;AACJ;AAEO,MAAMC,kDAA0BC,wBAAAA,oBAAuD,CAAC;IAC3F,gBAAgBJ;IAChB,cAAc;QAACK;KAAkB;AACrC"}

package/features/security/apiKeys/GetApiKeyByToken/abstractions.d.ts

@@ -5,7 +5,7 @@ export interface IGetApiKeyByTokenErrors {
 }
 type GetApiKeyByTokenError = IGetApiKeyByTokenErrors[keyof IGetApiKeyByTokenErrors] | ApiKeysRepository.Error;
 export interface IGetApiKeyByToken {
-    execute(token: string): Promise<Result<ApiKey | null, GetApiKeyByTokenError>>;
+    execute(token: string): Promise<Result<ApiKey, GetApiKeyByTokenError>>;
 }
 /** Retrieve an API key by its token value. */
 export declare const GetApiKeyByTokenUseCase: import("@webiny/di").Abstraction<IGetApiKeyByToken>;

package/features/security/apiKeys/GetApiKeyByToken/abstractions.js.map

@@ -1 +1 @@
-{"version":3,"file":"features/security/apiKeys/GetApiKeyByToken/abstractions.js","sources":["../../../../../src/features/security/apiKeys/GetApiKeyByToken/abstractions.ts"],"sourcesContent":["import { createAbstraction } from \"@webiny/feature/api\";\nimport { Result } from \"@webiny/feature/api\";\nimport type { ApiKey } from \"../shared/types.js\";\nimport { ApiKeysRepository } from \"../shared/abstractions.js\";\n\nexport interface IGetApiKeyByTokenErrors {\n    // No use-case specific errors - only repository errors can occur\n}\n\ntype GetApiKeyByTokenError =\n    | IGetApiKeyByTokenErrors[keyof IGetApiKeyByTokenErrors]\n    | ApiKeysRepository.Error;\n\nexport interface IGetApiKeyByToken {\n    execute(token: string): Promise<Result<ApiKey | null, GetApiKeyByTokenError>>;\n}\n\n/** Retrieve an API key by its token value. */\nexport const GetApiKeyByTokenUseCase =\n    createAbstraction<IGetApiKeyByToken>(\"GetApiKeyByTokenUseCase\");\n\nexport namespace GetApiKeyByTokenUseCase {\n    export type Interface = IGetApiKeyByToken;\n    export type Error = GetApiKeyByTokenError;\n}\n"],"names":["GetApiKeyByTokenUseCase","createAbstraction"],"mappings":";AAkBO,MAAMA,0BACTC,kBAAqC"}
+{"version":3,"file":"features/security/apiKeys/GetApiKeyByToken/abstractions.js","sources":["../../../../../src/features/security/apiKeys/GetApiKeyByToken/abstractions.ts"],"sourcesContent":["import { createAbstraction } from \"@webiny/feature/api\";\nimport { Result } from \"@webiny/feature/api\";\nimport type { ApiKey } from \"../shared/types.js\";\nimport { ApiKeysRepository } from \"../shared/abstractions.js\";\n\nexport interface IGetApiKeyByTokenErrors {\n    // No use-case specific errors - only repository errors can occur\n}\n\ntype GetApiKeyByTokenError =\n    | IGetApiKeyByTokenErrors[keyof IGetApiKeyByTokenErrors]\n    | ApiKeysRepository.Error;\n\nexport interface IGetApiKeyByToken {\n    execute(token: string): Promise<Result<ApiKey, GetApiKeyByTokenError>>;\n}\n\n/** Retrieve an API key by its token value. */\nexport const GetApiKeyByTokenUseCase =\n    createAbstraction<IGetApiKeyByToken>(\"GetApiKeyByTokenUseCase\");\n\nexport namespace GetApiKeyByTokenUseCase {\n    export type Interface = IGetApiKeyByToken;\n    export type Error = GetApiKeyByTokenError;\n}\n"],"names":["GetApiKeyByTokenUseCase","createAbstraction"],"mappings":";AAkBO,MAAMA,0BACTC,kBAAqC"}

package/features/security/apiKeys/UpdateApiKey/UpdateApiKeyUseCase.js

@@ -6,6 +6,7 @@ import { EventPublisher } from "../../../eventPublisher/index.js";
 import { updateApiKeyInputSchema } from "../shared/schemas.js";
 import { ApiKeyAfterUpdateEvent, ApiKeyBeforeUpdateEvent } from "./events.js";
 import { ApiKeyNotAuthorizedError, ApiKeyValidationError } from "../shared/errors.js";
+import { descriptionOnUpdate } from "../../shared/description.js";
 class UpdateApiKeyUseCaseImpl {
     constructor(repository, identityContext, eventPublisher){
         this.repository = repository;
@@ -20,21 +21,26 @@ class UpdateApiKeyUseCaseImpl {
         const existingResult = await this.repository.get(id);
         if (existingResult.isFail()) return Result.fail(existingResult.error);
         const existingApiKey = existingResult.value;
+        const { description, ...rest } = validation.data;
+        const changes = {
+            ...rest,
+            ...descriptionOnUpdate(description)
+        };
         const updatedApiKey = {
             ...existingApiKey,
-            ...validation.data
+            ...changes
         };
         await this.eventPublisher.publish(new ApiKeyBeforeUpdateEvent({
             original: existingApiKey,
             updated: updatedApiKey,
-            input: validation.data
+            input: changes
         }));
         const result = await this.repository.update(updatedApiKey);
         if (result.isFail()) return Result.fail(result.error);
         await this.eventPublisher.publish(new ApiKeyAfterUpdateEvent({
             original: existingApiKey,
             updated: updatedApiKey,
-            input: validation.data
+            input: changes
         }));
         return Result.ok(updatedApiKey);
     }

package/features/security/apiKeys/UpdateApiKey/UpdateApiKeyUseCase.js.map

@@ -1 +1 @@
-{"version":3,"file":"features/security/apiKeys/UpdateApiKey/UpdateApiKeyUseCase.js","sources":["../../../../../src/features/security/apiKeys/UpdateApiKey/UpdateApiKeyUseCase.ts"],"sourcesContent":["import { Result } from \"@webiny/feature/api\";\nimport { UpdateApiKeyUseCase as UpdateApiKeyUseCaseAbstraction } from \"./abstractions.js\";\nimport { ApiKeysRepository } from \"../shared/abstractions.js\";\nimport { IdentityContext } from \"../../IdentityContext/abstractions.js\";\nimport { EventPublisher } from \"~/features/eventPublisher/index.js\";\nimport { updateApiKeyInputSchema } from \"../shared/schemas.js\";\nimport { ApiKeyBeforeUpdateEvent, ApiKeyAfterUpdateEvent } from \"./events.js\";\nimport type { ApiKey, UpdateApiKeyInput } from \"../shared/types.js\";\nimport { ApiKeyNotAuthorizedError, ApiKeyValidationError } from \"../shared/errors.js\";\n\nclass UpdateApiKeyUseCaseImpl implements UpdateApiKeyUseCaseAbstraction.Interface {\n    private repository: ApiKeysRepository.Interface;\n    private identityContext: IdentityContext.Interface;\n    private eventPublisher: EventPublisher.Interface;\n\n    constructor(\n        repository: ApiKeysRepository.Interface,\n        identityContext: IdentityContext.Interface,\n        eventPublisher: EventPublisher.Interface\n    ) {\n        this.repository = repository;\n        this.identityContext = identityContext;\n        this.eventPublisher = eventPublisher;\n    }\n\n    async execute(\n        id: string,\n        input: UpdateApiKeyInput\n    ): Promise<Result<ApiKey, UpdateApiKeyUseCaseAbstraction.Error>> {\n        const hasPermission = await this.identityContext.getPermission(\"security.apiKey\");\n        if (!hasPermission) {\n            return Result.fail(new ApiKeyNotAuthorizedError());\n        }\n\n        const validation = updateApiKeyInputSchema.safeParse(input);\n        if (!validation.success) {\n            return Result.fail(new ApiKeyValidationError(validation.error.issues[0].message));\n        }\n\n        const existingResult = await this.repository.get(id);\n        if (existingResult.isFail()) {\n            return Result.fail(existingResult.error);\n        }\n\n        const existingApiKey = existingResult.value;\n\n        const updatedApiKey: ApiKey = {\n            ...existingApiKey,\n            ...validation.data\n        };\n\n        await this.eventPublisher.publish(\n            new ApiKeyBeforeUpdateEvent({\n                original: existingApiKey,\n                updated: updatedApiKey,\n                input: validation.data\n            })\n        );\n\n        const result = await this.repository.update(updatedApiKey);\n\n        if (result.isFail()) {\n            return Result.fail(result.error);\n        }\n\n        await this.eventPublisher.publish(\n            new ApiKeyAfterUpdateEvent({\n                original: existingApiKey,\n                updated: updatedApiKey,\n                input: validation.data\n            })\n        );\n\n        return Result.ok(updatedApiKey);\n    }\n}\n\nexport const UpdateApiKeyUseCase = UpdateApiKeyUseCaseAbstraction.createImplementation({\n    implementation: UpdateApiKeyUseCaseImpl,\n    dependencies: [ApiKeysRepository, IdentityContext, EventPublisher]\n});\n"],"names":["UpdateApiKeyUseCaseImpl","repository","identityContext","eventPublisher","id","input","hasPermission","Result","ApiKeyNotAuthorizedError","validation","updateApiKeyInputSchema","ApiKeyValidationError","existingResult","existingApiKey","updatedApiKey","ApiKeyBeforeUpdateEvent","result","ApiKeyAfterUpdateEvent","UpdateApiKeyUseCase","UpdateApiKeyUseCaseAbstraction","ApiKeysRepository","IdentityContext","EventPublisher"],"mappings":";;;;;;;;AAUA,MAAMA;IAKF,YACIC,UAAuC,EACvCC,eAA0C,EAC1CC,cAAwC,CAC1C;QACE,IAAI,CAAC,UAAU,GAAGF;QAClB,IAAI,CAAC,eAAe,GAAGC;QACvB,IAAI,CAAC,cAAc,GAAGC;IAC1B;IAEA,MAAM,QACFC,EAAU,EACVC,KAAwB,EACqC;QAC7D,MAAMC,gBAAgB,MAAM,IAAI,CAAC,eAAe,CAAC,aAAa,CAAC;QAC/D,IAAI,CAACA,eACD,OAAOC,OAAO,IAAI,CAAC,IAAIC;QAG3B,MAAMC,aAAaC,wBAAwB,SAAS,CAACL;QACrD,IAAI,CAACI,WAAW,OAAO,EACnB,OAAOF,OAAO,IAAI,CAAC,IAAII,sBAAsBF,WAAW,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,OAAO;QAGnF,MAAMG,iBAAiB,MAAM,IAAI,CAAC,UAAU,CAAC,GAAG,CAACR;QACjD,IAAIQ,eAAe,MAAM,IACrB,OAAOL,OAAO,IAAI,CAACK,eAAe,KAAK;QAG3C,MAAMC,iBAAiBD,eAAe,KAAK;QAE3C,MAAME,gBAAwB;YAC1B,GAAGD,cAAc;YACjB,GAAGJ,WAAW,IAAI;QACtB;QAEA,MAAM,IAAI,CAAC,cAAc,CAAC,OAAO,CAC7B,IAAIM,wBAAwB;YACxB,UAAUF;YACV,SAASC;YACT,OAAOL,WAAW,IAAI;QAC1B;QAGJ,MAAMO,SAAS,MAAM,IAAI,CAAC,UAAU,CAAC,MAAM,CAACF;QAE5C,IAAIE,OAAO,MAAM,IACb,OAAOT,OAAO,IAAI,CAACS,OAAO,KAAK;QAGnC,MAAM,IAAI,CAAC,cAAc,CAAC,OAAO,CAC7B,IAAIC,uBAAuB;YACvB,UAAUJ;YACV,SAASC;YACT,OAAOL,WAAW,IAAI;QAC1B;QAGJ,OAAOF,OAAO,EAAE,CAACO;IACrB;AACJ;AAEO,MAAMI,0CAAsBC,oBAAAA,oBAAmD,CAAC;IACnF,gBAAgBnB;IAChB,cAAc;QAACoB;QAAmBC;QAAiBC;KAAe;AACtE"}
+{"version":3,"file":"features/security/apiKeys/UpdateApiKey/UpdateApiKeyUseCase.js","sources":["../../../../../src/features/security/apiKeys/UpdateApiKey/UpdateApiKeyUseCase.ts"],"sourcesContent":["import { Result } from \"@webiny/feature/api\";\nimport { UpdateApiKeyUseCase as UpdateApiKeyUseCaseAbstraction } from \"./abstractions.js\";\nimport { ApiKeysRepository } from \"../shared/abstractions.js\";\nimport { IdentityContext } from \"../../IdentityContext/abstractions.js\";\nimport { EventPublisher } from \"~/features/eventPublisher/index.js\";\nimport { updateApiKeyInputSchema } from \"../shared/schemas.js\";\nimport { ApiKeyBeforeUpdateEvent, ApiKeyAfterUpdateEvent } from \"./events.js\";\nimport type { ApiKey, UpdateApiKeyInput } from \"../shared/types.js\";\nimport { ApiKeyNotAuthorizedError, ApiKeyValidationError } from \"../shared/errors.js\";\nimport { descriptionOnUpdate } from \"../../shared/description.js\";\n\nclass UpdateApiKeyUseCaseImpl implements UpdateApiKeyUseCaseAbstraction.Interface {\n    private repository: ApiKeysRepository.Interface;\n    private identityContext: IdentityContext.Interface;\n    private eventPublisher: EventPublisher.Interface;\n\n    constructor(\n        repository: ApiKeysRepository.Interface,\n        identityContext: IdentityContext.Interface,\n        eventPublisher: EventPublisher.Interface\n    ) {\n        this.repository = repository;\n        this.identityContext = identityContext;\n        this.eventPublisher = eventPublisher;\n    }\n\n    async execute(\n        id: string,\n        input: UpdateApiKeyInput\n    ): Promise<Result<ApiKey, UpdateApiKeyUseCaseAbstraction.Error>> {\n        const hasPermission = await this.identityContext.getPermission(\"security.apiKey\");\n        if (!hasPermission) {\n            return Result.fail(new ApiKeyNotAuthorizedError());\n        }\n\n        const validation = updateApiKeyInputSchema.safeParse(input);\n        if (!validation.success) {\n            return Result.fail(new ApiKeyValidationError(validation.error.issues[0].message));\n        }\n\n        const existingResult = await this.repository.get(id);\n        if (existingResult.isFail()) {\n            return Result.fail(existingResult.error);\n        }\n\n        const existingApiKey = existingResult.value;\n\n        // `description` is pulled out of the spread because it is the one field that accepts null.\n        // Normalising it here keeps null out of both the entity and the published events, whose\n        // input type declares `description?: string`.\n        const { description, ...rest } = validation.data;\n\n        const changes: UpdateApiKeyInput = {\n            ...rest,\n            ...descriptionOnUpdate(description)\n        };\n\n        const updatedApiKey: ApiKey = {\n            ...existingApiKey,\n            ...changes\n        };\n\n        await this.eventPublisher.publish(\n            new ApiKeyBeforeUpdateEvent({\n                original: existingApiKey,\n                updated: updatedApiKey,\n                input: changes\n            })\n        );\n\n        const result = await this.repository.update(updatedApiKey);\n\n        if (result.isFail()) {\n            return Result.fail(result.error);\n        }\n\n        await this.eventPublisher.publish(\n            new ApiKeyAfterUpdateEvent({\n                original: existingApiKey,\n                updated: updatedApiKey,\n                input: changes\n            })\n        );\n\n        return Result.ok(updatedApiKey);\n    }\n}\n\nexport const UpdateApiKeyUseCase = UpdateApiKeyUseCaseAbstraction.createImplementation({\n    implementation: UpdateApiKeyUseCaseImpl,\n    dependencies: [ApiKeysRepository, IdentityContext, EventPublisher]\n});\n"],"names":["UpdateApiKeyUseCaseImpl","repository","identityContext","eventPublisher","id","input","hasPermission","Result","ApiKeyNotAuthorizedError","validation","updateApiKeyInputSchema","ApiKeyValidationError","existingResult","existingApiKey","description","rest","changes","descriptionOnUpdate","updatedApiKey","ApiKeyBeforeUpdateEvent","result","ApiKeyAfterUpdateEvent","UpdateApiKeyUseCase","UpdateApiKeyUseCaseAbstraction","ApiKeysRepository","IdentityContext","EventPublisher"],"mappings":";;;;;;;;;AAWA,MAAMA;IAKF,YACIC,UAAuC,EACvCC,eAA0C,EAC1CC,cAAwC,CAC1C;QACE,IAAI,CAAC,UAAU,GAAGF;QAClB,IAAI,CAAC,eAAe,GAAGC;QACvB,IAAI,CAAC,cAAc,GAAGC;IAC1B;IAEA,MAAM,QACFC,EAAU,EACVC,KAAwB,EACqC;QAC7D,MAAMC,gBAAgB,MAAM,IAAI,CAAC,eAAe,CAAC,aAAa,CAAC;QAC/D,IAAI,CAACA,eACD,OAAOC,OAAO,IAAI,CAAC,IAAIC;QAG3B,MAAMC,aAAaC,wBAAwB,SAAS,CAACL;QACrD,IAAI,CAACI,WAAW,OAAO,EACnB,OAAOF,OAAO,IAAI,CAAC,IAAII,sBAAsBF,WAAW,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,OAAO;QAGnF,MAAMG,iBAAiB,MAAM,IAAI,CAAC,UAAU,CAAC,GAAG,CAACR;QACjD,IAAIQ,eAAe,MAAM,IACrB,OAAOL,OAAO,IAAI,CAACK,eAAe,KAAK;QAG3C,MAAMC,iBAAiBD,eAAe,KAAK;QAK3C,MAAM,EAAEE,WAAW,EAAE,GAAGC,MAAM,GAAGN,WAAW,IAAI;QAEhD,MAAMO,UAA6B;YAC/B,GAAGD,IAAI;YACP,GAAGE,oBAAoBH,YAAY;QACvC;QAEA,MAAMI,gBAAwB;YAC1B,GAAGL,cAAc;YACjB,GAAGG,OAAO;QACd;QAEA,MAAM,IAAI,CAAC,cAAc,CAAC,OAAO,CAC7B,IAAIG,wBAAwB;YACxB,UAAUN;YACV,SAASK;YACT,OAAOF;QACX;QAGJ,MAAMI,SAAS,MAAM,IAAI,CAAC,UAAU,CAAC,MAAM,CAACF;QAE5C,IAAIE,OAAO,MAAM,IACb,OAAOb,OAAO,IAAI,CAACa,OAAO,KAAK;QAGnC,MAAM,IAAI,CAAC,cAAc,CAAC,OAAO,CAC7B,IAAIC,uBAAuB;YACvB,UAAUR;YACV,SAASK;YACT,OAAOF;QACX;QAGJ,OAAOT,OAAO,EAAE,CAACW;IACrB;AACJ;AAEO,MAAMI,0CAAsBC,oBAAAA,oBAAmD,CAAC;IACnF,gBAAgBvB;IAChB,cAAc;QAACwB;QAAmBC;QAAiBC;KAAe;AACtE"}

package/features/security/apiKeys/feature.js

@@ -7,12 +7,21 @@ import { ListApiKeysFeature } from "./ListApiKeys/feature.js";
 import { CreateApiKeyFeature } from "./CreateApiKey/feature.js";
 import { UpdateApiKeyFeature } from "./UpdateApiKey/feature.js";
 import { DeleteApiKeyFeature } from "./DeleteApiKey/feature.js";
-import { ApiKeyProvider } from "./shared/ApiKeyProvider.js";
+import { ApiKeyFactory, ApiKeyProvider } from "./shared/abstractions.js";
+import { ApiKeyProvider as ApiKeyProvider_js_ApiKeyProvider } from "./shared/ApiKeyProvider.js";
+import { ApiKeyAuthenticator } from "./ApiKeyAuthenticator.js";
+import { ApiKeyAuthorizer } from "./ApiKeyAuthorizer.js";
+import { TenantContext } from "../../tenancy/TenantContext/index.js";
 const ApiKeysFeature = createFeature({
     name: "ApiKeys",
     register (container) {
         container.register(ApiKeysRepository).inSingletonScope();
-        container.register(ApiKeyProvider).inSingletonScope();
+        container.registerFactory(ApiKeyProvider, ()=>{
+            const tenantContext = container.resolve(TenantContext);
+            return new ApiKeyProvider_js_ApiKeyProvider(tenantContext, ()=>container.resolveAll(ApiKeyFactory));
+        });
+        container.register(ApiKeyAuthenticator);
+        container.register(ApiKeyAuthorizer);
         GetApiKeyFeature.register(container);
         GetApiKeyByTokenFeature.register(container);
         GetApiKeyBySlugFeature.register(container);

package/features/security/apiKeys/feature.js.map

@@ -1 +1 @@
-{"version":3,"file":"features/security/apiKeys/feature.js","sources":["../../../../src/features/security/apiKeys/feature.ts"],"sourcesContent":["import { createFeature } from \"@webiny/feature/api\";\nimport { ApiKeysRepository } from \"./shared/ApiKeysRepository.js\";\nimport { GetApiKeyFeature } from \"./GetApiKey/feature.js\";\nimport { GetApiKeyByTokenFeature } from \"./GetApiKeyByToken/feature.js\";\nimport { GetApiKeyBySlugFeature } from \"./GetApiKeyBySlug/feature.js\";\nimport { ListApiKeysFeature } from \"./ListApiKeys/feature.js\";\nimport { CreateApiKeyFeature } from \"./CreateApiKey/feature.js\";\nimport { UpdateApiKeyFeature } from \"./UpdateApiKey/feature.js\";\nimport { DeleteApiKeyFeature } from \"./DeleteApiKey/feature.js\";\nimport { ApiKeyProvider } from \"./shared/ApiKeyProvider.js\";\n\nexport const ApiKeysFeature = createFeature({\n    name: \"ApiKeys\",\n    register(container) {\n        // Register repository in singleton scope\n        container.register(ApiKeysRepository).inSingletonScope();\n        container.register(ApiKeyProvider).inSingletonScope();\n\n        // Register all use cases\n        GetApiKeyFeature.register(container);\n        GetApiKeyByTokenFeature.register(container);\n        GetApiKeyBySlugFeature.register(container);\n        ListApiKeysFeature.register(container);\n        CreateApiKeyFeature.register(container);\n        UpdateApiKeyFeature.register(container);\n        DeleteApiKeyFeature.register(container);\n    }\n});\n"],"names":["ApiKeysFeature","createFeature","container","ApiKeysRepository","ApiKeyProvider","GetApiKeyFeature","GetApiKeyByTokenFeature","GetApiKeyBySlugFeature","ListApiKeysFeature","CreateApiKeyFeature","UpdateApiKeyFeature","DeleteApiKeyFeature"],"mappings":";;;;;;;;;;AAWO,MAAMA,iBAAiBC,cAAc;IACxC,MAAM;IACN,UAASC,SAAS;QAEdA,UAAU,QAAQ,CAACC,mBAAmB,gBAAgB;QACtDD,UAAU,QAAQ,CAACE,gBAAgB,gBAAgB;QAGnDC,iBAAiB,QAAQ,CAACH;QAC1BI,wBAAwB,QAAQ,CAACJ;QACjCK,uBAAuB,QAAQ,CAACL;QAChCM,mBAAmB,QAAQ,CAACN;QAC5BO,oBAAoB,QAAQ,CAACP;QAC7BQ,oBAAoB,QAAQ,CAACR;QAC7BS,oBAAoB,QAAQ,CAACT;IACjC;AACJ"}
+{"version":3,"file":"features/security/apiKeys/feature.js","sources":["../../../../src/features/security/apiKeys/feature.ts"],"sourcesContent":["import { createFeature } from \"@webiny/feature/api\";\nimport { ApiKeysRepository } from \"./shared/ApiKeysRepository.js\";\nimport { GetApiKeyFeature } from \"./GetApiKey/feature.js\";\nimport { GetApiKeyByTokenFeature } from \"./GetApiKeyByToken/feature.js\";\nimport { GetApiKeyBySlugFeature } from \"./GetApiKeyBySlug/feature.js\";\nimport { ListApiKeysFeature } from \"./ListApiKeys/feature.js\";\nimport { CreateApiKeyFeature } from \"./CreateApiKey/feature.js\";\nimport { UpdateApiKeyFeature } from \"./UpdateApiKey/feature.js\";\nimport { DeleteApiKeyFeature } from \"./DeleteApiKey/feature.js\";\nimport {\n    ApiKeyFactory,\n    ApiKeyProvider as ApiKeyProviderAbstraction\n} from \"~/features/security/apiKeys/shared/abstractions.js\";\nimport { ApiKeyProvider } from \"./shared/ApiKeyProvider.js\";\nimport { ApiKeyAuthenticator } from \"./ApiKeyAuthenticator.js\";\nimport { ApiKeyAuthorizer } from \"./ApiKeyAuthorizer.js\";\nimport { TenantContext } from \"~/features/tenancy/TenantContext/index.js\";\n\nexport const ApiKeysFeature = createFeature({\n    name: \"ApiKeys\",\n    register(container) {\n        // Register repository in singleton scope\n        container.register(ApiKeysRepository).inSingletonScope();\n\n        container.registerFactory(ApiKeyProviderAbstraction, () => {\n            const tenantContext = container.resolve(TenantContext);\n            return new ApiKeyProvider(tenantContext, () => {\n                return container.resolveAll(ApiKeyFactory);\n            });\n        });\n        container.register(ApiKeyAuthenticator);\n        container.register(ApiKeyAuthorizer);\n\n        // Register all use cases\n        GetApiKeyFeature.register(container);\n        GetApiKeyByTokenFeature.register(container);\n        GetApiKeyBySlugFeature.register(container);\n        ListApiKeysFeature.register(container);\n        CreateApiKeyFeature.register(container);\n        UpdateApiKeyFeature.register(container);\n        DeleteApiKeyFeature.register(container);\n    }\n});\n"],"names":["ApiKeysFeature","createFeature","container","ApiKeysRepository","ApiKeyProviderAbstraction","tenantContext","TenantContext","ApiKeyProvider","ApiKeyFactory","ApiKeyAuthenticator","ApiKeyAuthorizer","GetApiKeyFeature","GetApiKeyByTokenFeature","GetApiKeyBySlugFeature","ListApiKeysFeature","CreateApiKeyFeature","UpdateApiKeyFeature","DeleteApiKeyFeature"],"mappings":";;;;;;;;;;;;;;AAkBO,MAAMA,iBAAiBC,cAAc;IACxC,MAAM;IACN,UAASC,SAAS;QAEdA,UAAU,QAAQ,CAACC,mBAAmB,gBAAgB;QAEtDD,UAAU,eAAe,CAACE,gBAA2B;YACjD,MAAMC,gBAAgBH,UAAU,OAAO,CAACI;YACxC,OAAO,IAAIC,iCAAeF,eAAe,IAC9BH,UAAU,UAAU,CAACM;QAEpC;QACAN,UAAU,QAAQ,CAACO;QACnBP,UAAU,QAAQ,CAACQ;QAGnBC,iBAAiB,QAAQ,CAACT;QAC1BU,wBAAwB,QAAQ,CAACV;QACjCW,uBAAuB,QAAQ,CAACX;QAChCY,mBAAmB,QAAQ,CAACZ;QAC5Ba,oBAAoB,QAAQ,CAACb;QAC7Bc,oBAAoB,QAAQ,CAACd;QAC7Be,oBAAoB,QAAQ,CAACf;IACjC;AACJ"}

package/features/security/apiKeys/shared/ApiKeyProvider.d.ts

@@ -2,14 +2,12 @@ import { TenantContext } from "../../../../features/tenancy/TenantContext/index.
 import { ApiKeyFactory } from "./abstractions.js";
 import { ApiKeyProvider as ProviderAbstraction } from "./abstractions.js";
 import type { ApiKey } from "./types.js";
-declare class ApiKeyProviderImpl implements ProviderAbstraction.Interface {
+export declare class ApiKeyProvider implements ProviderAbstraction.Interface {
     private tenantContext;
-    private apiKeyFactories;
+    private getApiKeyFactories;
     private cache;
-    constructor(tenantContext: TenantContext.Interface, apiKeyFactories: ApiKeyFactory.Interface[]);
+    constructor(tenantContext: TenantContext.Interface, getApiKeyFactories: () => ApiKeyFactory.Interface[]);
     getByToken(token: string): Promise<ApiKey | null>;
     getBySlug(slug: string): Promise<ApiKey | null>;
     private getCache;
 }
-export declare const ApiKeyProvider: import("@webiny/di").Implementation<typeof ApiKeyProviderImpl>;
-export {};

package/features/security/apiKeys/shared/ApiKeyProvider.js

@@ -1,11 +1,8 @@
-import { createImplementation } from "@webiny/feature/api";
-import { TenantContext } from "../../../tenancy/TenantContext/index.js";
-import { ApiKeyFactory, ApiKeyProvider } from "./abstractions.js";
 import { SystemIdentityValue } from "../../../../domain/identity/SystemIdentityValue.js";
-class ApiKeyProviderImpl {
-    constructor(tenantContext, apiKeyFactories){
+class ApiKeyProvider {
+    constructor(tenantContext, getApiKeyFactories){
         this.tenantContext = tenantContext;
-        this.apiKeyFactories = apiKeyFactories;
+        this.getApiKeyFactories = getApiKeyFactories;
     }
     async getByToken(token) {
         const cache = await this.getCache();
@@ -19,7 +16,8 @@ class ApiKeyProviderImpl {
     }
     async getCache() {
         if (void 0 === this.cache) {
-            const results = await Promise.all(this.apiKeyFactories.map((factory)=>factory.execute()));
+            const apiKeyFactories = this.getApiKeyFactories();
+            const results = await Promise.all(apiKeyFactories.map((factory)=>factory.execute()));
             this.cache = results.flat().map((codeKey)=>({
                     ...codeKey,
                     id: codeKey.slug,
@@ -33,19 +31,6 @@ class ApiKeyProviderImpl {
         return this.cache;
     }
 }
-const ApiKeyProvider_ApiKeyProvider = createImplementation({
-    abstraction: ApiKeyProvider,
-    implementation: ApiKeyProviderImpl,
-    dependencies: [
-        TenantContext,
-        [
-            ApiKeyFactory,
-            {
-                multiple: true
-            }
-        ]
-    ]
-});
-export { ApiKeyProvider_ApiKeyProvider as ApiKeyProvider };
+export { ApiKeyProvider };
 
 //# sourceMappingURL=ApiKeyProvider.js.map

package/features/security/apiKeys/shared/ApiKeyProvider.js.map

@@ -1 +1 @@
-{"version":3,"file":"features/security/apiKeys/shared/ApiKeyProvider.js","sources":["../../../../../src/features/security/apiKeys/shared/ApiKeyProvider.ts"],"sourcesContent":["import { createImplementation } from \"@webiny/feature/api\";\nimport { TenantContext } from \"~/features/tenancy/TenantContext/index.js\";\nimport { ApiKeyFactory } from \"./abstractions.js\";\nimport { ApiKeyProvider as ProviderAbstraction } from \"./abstractions.js\";\nimport type { ApiKey } from \"./types.js\";\nimport { SystemIdentityValue } from \"~/domain/identity/SystemIdentityValue.js\";\n\nclass ApiKeyProviderImpl implements ProviderAbstraction.Interface {\n    private cache: ApiKey[] | undefined;\n\n    constructor(\n        private tenantContext: TenantContext.Interface,\n        private apiKeyFactories: ApiKeyFactory.Interface[]\n    ) {}\n\n    async getByToken(token: string): Promise<ApiKey | null> {\n        const cache = await this.getCache();\n\n        // Search for the API key by token in the cached array\n        const apiKey = cache.find(key => key.token === token);\n        return apiKey || null;\n    }\n\n    async getBySlug(slug: string): Promise<ApiKey | null> {\n        const cache = await this.getCache();\n\n        // Search for the API key by token in the cached array\n        const apiKey = cache.find(key => key.slug === slug);\n        return apiKey || null;\n    }\n\n    private async getCache(): Promise<ApiKey[]> {\n        if (this.cache === undefined) {\n            const results = await Promise.all(\n                this.apiKeyFactories.map(factory => factory.execute())\n            );\n            this.cache = results.flat().map<ApiKey>(codeKey => {\n                return {\n                    ...codeKey,\n                    id: codeKey.slug,\n                    slug: codeKey.slug,\n                    description: \"\",\n                    tenant: this.tenantContext.getTenant().id,\n                    createdOn: new Date().toISOString(),\n                    createdBy: SystemIdentityValue.create()\n                };\n            });\n        }\n\n        return this.cache;\n    }\n}\n\nexport const ApiKeyProvider = createImplementation({\n    abstraction: ProviderAbstraction,\n    implementation: ApiKeyProviderImpl,\n    dependencies: [TenantContext, [ApiKeyFactory, { multiple: true }]]\n});\n"],"names":["ApiKeyProviderImpl","tenantContext","apiKeyFactories","token","cache","apiKey","key","slug","undefined","results","Promise","factory","codeKey","Date","SystemIdentityValue","ApiKeyProvider","createImplementation","ProviderAbstraction","TenantContext","ApiKeyFactory"],"mappings":";;;;AAOA,MAAMA;IAGF,YACYC,aAAsC,EACtCC,eAA0C,CACpD;aAFUD,aAAa,GAAbA;aACAC,eAAe,GAAfA;IACT;IAEH,MAAM,WAAWC,KAAa,EAA0B;QACpD,MAAMC,QAAQ,MAAM,IAAI,CAAC,QAAQ;QAGjC,MAAMC,SAASD,MAAM,IAAI,CAACE,CAAAA,MAAOA,IAAI,KAAK,KAAKH;QAC/C,OAAOE,UAAU;IACrB;IAEA,MAAM,UAAUE,IAAY,EAA0B;QAClD,MAAMH,QAAQ,MAAM,IAAI,CAAC,QAAQ;QAGjC,MAAMC,SAASD,MAAM,IAAI,CAACE,CAAAA,MAAOA,IAAI,IAAI,KAAKC;QAC9C,OAAOF,UAAU;IACrB;IAEA,MAAc,WAA8B;QACxC,IAAI,AAAeG,WAAf,IAAI,CAAC,KAAK,EAAgB;YAC1B,MAAMC,UAAU,MAAMC,QAAQ,GAAG,CAC7B,IAAI,CAAC,eAAe,CAAC,GAAG,CAACC,CAAAA,UAAWA,QAAQ,OAAO;YAEvD,IAAI,CAAC,KAAK,GAAGF,QAAQ,IAAI,GAAG,GAAG,CAASG,CAAAA,UAC7B;oBACH,GAAGA,OAAO;oBACV,IAAIA,QAAQ,IAAI;oBAChB,MAAMA,QAAQ,IAAI;oBAClB,aAAa;oBACb,QAAQ,IAAI,CAAC,aAAa,CAAC,SAAS,GAAG,EAAE;oBACzC,WAAW,IAAIC,OAAO,WAAW;oBACjC,WAAWC,oBAAoB,MAAM;gBACzC;QAER;QAEA,OAAO,IAAI,CAAC,KAAK;IACrB;AACJ;AAEO,MAAMC,gCAAiBC,qBAAqB;IAC/C,aAAaC;IACb,gBAAgBjB;IAChB,cAAc;QAACkB;QAAe;YAACC;YAAe;gBAAE,UAAU;YAAK;SAAE;KAAC;AACtE"}
+{"version":3,"file":"features/security/apiKeys/shared/ApiKeyProvider.js","sources":["../../../../../src/features/security/apiKeys/shared/ApiKeyProvider.ts"],"sourcesContent":["import { TenantContext } from \"~/features/tenancy/TenantContext/index.js\";\nimport { ApiKeyFactory } from \"./abstractions.js\";\nimport { ApiKeyProvider as ProviderAbstraction } from \"./abstractions.js\";\nimport type { ApiKey } from \"./types.js\";\nimport { SystemIdentityValue } from \"~/domain/identity/SystemIdentityValue.js\";\n\nexport class ApiKeyProvider implements ProviderAbstraction.Interface {\n    private cache: ApiKey[] | undefined;\n\n    constructor(\n        private tenantContext: TenantContext.Interface,\n        private getApiKeyFactories: () => ApiKeyFactory.Interface[]\n    ) {}\n\n    async getByToken(token: string): Promise<ApiKey | null> {\n        const cache = await this.getCache();\n\n        // Search for the API key by token in the cached array\n        const apiKey = cache.find(key => key.token === token);\n        return apiKey || null;\n    }\n\n    async getBySlug(slug: string): Promise<ApiKey | null> {\n        const cache = await this.getCache();\n\n        // Search for the API key by token in the cached array\n        const apiKey = cache.find(key => key.slug === slug);\n        return apiKey || null;\n    }\n\n    private async getCache(): Promise<ApiKey[]> {\n        if (this.cache === undefined) {\n            const apiKeyFactories = this.getApiKeyFactories();\n            const results = await Promise.all(apiKeyFactories.map(factory => factory.execute()));\n            this.cache = results.flat().map<ApiKey>(codeKey => {\n                return {\n                    ...codeKey,\n                    id: codeKey.slug,\n                    slug: codeKey.slug,\n                    description: \"\",\n                    tenant: this.tenantContext.getTenant().id,\n                    createdOn: new Date().toISOString(),\n                    createdBy: SystemIdentityValue.create()\n                };\n            });\n        }\n\n        return this.cache;\n    }\n}\n"],"names":["ApiKeyProvider","tenantContext","getApiKeyFactories","token","cache","apiKey","key","slug","undefined","apiKeyFactories","results","Promise","factory","codeKey","Date","SystemIdentityValue"],"mappings":";AAMO,MAAMA;IAGT,YACYC,aAAsC,EACtCC,kBAAmD,CAC7D;aAFUD,aAAa,GAAbA;aACAC,kBAAkB,GAAlBA;IACT;IAEH,MAAM,WAAWC,KAAa,EAA0B;QACpD,MAAMC,QAAQ,MAAM,IAAI,CAAC,QAAQ;QAGjC,MAAMC,SAASD,MAAM,IAAI,CAACE,CAAAA,MAAOA,IAAI,KAAK,KAAKH;QAC/C,OAAOE,UAAU;IACrB;IAEA,MAAM,UAAUE,IAAY,EAA0B;QAClD,MAAMH,QAAQ,MAAM,IAAI,CAAC,QAAQ;QAGjC,MAAMC,SAASD,MAAM,IAAI,CAACE,CAAAA,MAAOA,IAAI,IAAI,KAAKC;QAC9C,OAAOF,UAAU;IACrB;IAEA,MAAc,WAA8B;QACxC,IAAI,AAAeG,WAAf,IAAI,CAAC,KAAK,EAAgB;YAC1B,MAAMC,kBAAkB,IAAI,CAAC,kBAAkB;YAC/C,MAAMC,UAAU,MAAMC,QAAQ,GAAG,CAACF,gBAAgB,GAAG,CAACG,CAAAA,UAAWA,QAAQ,OAAO;YAChF,IAAI,CAAC,KAAK,GAAGF,QAAQ,IAAI,GAAG,GAAG,CAASG,CAAAA,UAC7B;oBACH,GAAGA,OAAO;oBACV,IAAIA,QAAQ,IAAI;oBAChB,MAAMA,QAAQ,IAAI;oBAClB,aAAa;oBACb,QAAQ,IAAI,CAAC,aAAa,CAAC,SAAS,GAAG,EAAE;oBACzC,WAAW,IAAIC,OAAO,WAAW;oBACjC,WAAWC,oBAAoB,MAAM;gBACzC;QAER;QAEA,OAAO,IAAI,CAAC,KAAK;IACrB;AACJ"}

package/features/security/apiKeys/shared/ApiKeysRepository.d.ts

@@ -8,6 +8,7 @@ declare class ApiKeysRepositoryImpl implements RepositoryAbstraction.Interface {
     private tenantContext;
     private storageOperations;
     private apiKeyProvider;
+    private resolving;
     constructor(tenantContext: TenantContext.Interface, storageOperations: SecurityStorageOperations.Interface, apiKeyProvider: ApiKeyProvider.Interface);
     get(id: string): Promise<Result<ApiKey, RepositoryAbstraction.Error>>;
     getByToken(token: string): Promise<Result<ApiKey, RepositoryAbstraction.Error>>;