@webiny/api-file-manager 0.0.0-unstable.99666aeb00 → 0.0.0-unstable.9bd236cf5e

package/delivery/AssetDelivery/abstractions/AssetReply.js

@@ -0,0 +1,38 @@
+"use strict";
+
+Object.defineProperty(exports, "__esModule", {
+  value: true
+});
+exports.AssetReply = void 0;
+var _handler = require("@webiny/handler");
+const defaultBody = () => "";
+class AssetReply {
+  constructor(params = {
+    code: 200
+  }) {
+    this.code = params.code;
+    this.headers = params.headers || _handler.ResponseHeaders.create();
+    this.body = params.body || defaultBody;
+  }
+  setHeaders(cb) {
+    this.headers = cb(this.headers);
+  }
+  getHeaders() {
+    return this.headers;
+  }
+  setCode(code) {
+    this.code = code;
+  }
+  getCode() {
+    return this.code;
+  }
+  setBody(body) {
+    this.body = body;
+  }
+  getBody() {
+    return this.body();
+  }
+}
+exports.AssetReply = AssetReply;
+
+//# sourceMappingURL=AssetReply.js.map

package/delivery/AssetDelivery/abstractions/AssetReply.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["_handler","require","defaultBody","AssetReply","constructor","params","code","headers","ResponseHeaders","create","body","setHeaders","cb","getHeaders","setCode","getCode","setBody","getBody","exports"],"sources":["AssetReply.ts"],"sourcesContent":["import { ResponseHeaders } from \"@webiny/handler\";\n\ninterface HeadersSetter {\n    (headers: ResponseHeaders): ResponseHeaders;\n}\n\ninterface AssetReplyParams {\n    code: number;\n    headers?: ResponseHeaders;\n    body?: AssetReplyBody;\n}\n\ninterface AssetReplyBody {\n    (): Promise<unknown> | unknown;\n}\n\nconst defaultBody = () => \"\";\n\nexport class AssetReply {\n    private headers: ResponseHeaders;\n    private code: number;\n    private body: AssetReplyBody;\n\n    constructor(params: AssetReplyParams = { code: 200 }) {\n        this.code = params.code;\n        this.headers = params.headers || ResponseHeaders.create();\n        this.body = params.body || defaultBody;\n    }\n\n    setHeaders(cb: HeadersSetter) {\n        this.headers = cb(this.headers);\n    }\n\n    getHeaders() {\n        return this.headers;\n    }\n\n    setCode(code: number) {\n        this.code = code;\n    }\n\n    getCode() {\n        return this.code;\n    }\n\n    setBody(body: AssetReplyBody) {\n        this.body = body;\n    }\n\n    getBody() {\n        return this.body();\n    }\n}\n"],"mappings":";;;;;;AAAA,IAAAA,QAAA,GAAAC,OAAA;AAgBA,MAAMC,WAAW,GAAGA,CAAA,KAAM,EAAE;AAErB,MAAMC,UAAU,CAAC;EAKpBC,WAAWA,CAACC,MAAwB,GAAG;IAAEC,IAAI,EAAE;EAAI,CAAC,EAAE;IAClD,IAAI,CAACA,IAAI,GAAGD,MAAM,CAACC,IAAI;IACvB,IAAI,CAACC,OAAO,GAAGF,MAAM,CAACE,OAAO,IAAIC,wBAAe,CAACC,MAAM,CAAC,CAAC;IACzD,IAAI,CAACC,IAAI,GAAGL,MAAM,CAACK,IAAI,IAAIR,WAAW;EAC1C;EAEAS,UAAUA,CAACC,EAAiB,EAAE;IAC1B,IAAI,CAACL,OAAO,GAAGK,EAAE,CAAC,IAAI,CAACL,OAAO,CAAC;EACnC;EAEAM,UAAUA,CAAA,EAAG;IACT,OAAO,IAAI,CAACN,OAAO;EACvB;EAEAO,OAAOA,CAACR,IAAY,EAAE;IAClB,IAAI,CAACA,IAAI,GAAGA,IAAI;EACpB;EAEAS,OAAOA,CAAA,EAAG;IACN,OAAO,IAAI,CAACT,IAAI;EACpB;EAEAU,OAAOA,CAACN,IAAoB,EAAE;IAC1B,IAAI,CAACA,IAAI,GAAGA,IAAI;EACpB;EAEAO,OAAOA,CAAA,EAAG;IACN,OAAO,IAAI,CAACP,IAAI,CAAC,CAAC;EACtB;AACJ;AAACQ,OAAA,CAAAf,UAAA,GAAAA,UAAA","ignoreList":[]}

package/delivery/AssetDelivery/abstractions/AssetRequestResolver.d.ts

@@ -0,0 +1,5 @@
+import type { Request } from "@webiny/handler/types";
+import type { AssetRequest } from "../..";
+export interface AssetRequestResolver {
+    resolve(request: Request): Promise<AssetRequest | undefined>;
+}

package/delivery/AssetDelivery/abstractions/AssetRequestResolver.js

@@ -0,0 +1,7 @@
+"use strict";
+
+Object.defineProperty(exports, "__esModule", {
+  value: true
+});
+
+//# sourceMappingURL=AssetRequestResolver.js.map

package/delivery/AssetDelivery/abstractions/AssetRequestResolver.js.map

@@ -0,0 +1 @@
+{"version":3,"names":[],"sources":["AssetRequestResolver.ts"],"sourcesContent":["import type { Request } from \"@webiny/handler/types\";\nimport type { AssetRequest } from \"~/delivery\";\n\nexport interface AssetRequestResolver {\n    resolve(request: Request): Promise<AssetRequest | undefined>;\n}\n"],"mappings":"","ignoreList":[]}

package/delivery/AssetDelivery/abstractions/AssetResolver.d.ts

@@ -0,0 +1,4 @@
+import type { Asset, AssetRequest } from "../..";
+export interface AssetResolver {
+    resolve(request: AssetRequest): Promise<Asset | undefined>;
+}

package/delivery/AssetDelivery/abstractions/AssetResolver.js

@@ -0,0 +1,7 @@
+"use strict";
+
+Object.defineProperty(exports, "__esModule", {
+  value: true
+});
+
+//# sourceMappingURL=AssetResolver.js.map

package/delivery/AssetDelivery/abstractions/AssetResolver.js.map

@@ -0,0 +1 @@
+{"version":3,"names":[],"sources":["AssetResolver.ts"],"sourcesContent":["import type { Asset, AssetRequest } from \"~/delivery\";\n\nexport interface AssetResolver {\n    resolve(request: AssetRequest): Promise<Asset | undefined>;\n}\n"],"mappings":"","ignoreList":[]}

package/delivery/AssetDelivery/abstractions/AssetTransformationStrategy.d.ts

@@ -0,0 +1,4 @@
+import type { Asset, AssetRequest } from "../..";
+export interface AssetTransformationStrategy {
+    transform(assetRequest: AssetRequest, asset: Asset): Promise<Asset>;
+}

package/delivery/AssetDelivery/abstractions/AssetTransformationStrategy.js

@@ -0,0 +1,7 @@
+"use strict";
+
+Object.defineProperty(exports, "__esModule", {
+  value: true
+});
+
+//# sourceMappingURL=AssetTransformationStrategy.js.map

package/delivery/AssetDelivery/abstractions/AssetTransformationStrategy.js.map

@@ -0,0 +1 @@
+{"version":3,"names":[],"sources":["AssetTransformationStrategy.ts"],"sourcesContent":["import type { Asset, AssetRequest } from \"~/delivery\";\n\nexport interface AssetTransformationStrategy {\n    transform(assetRequest: AssetRequest, asset: Asset): Promise<Asset>;\n}\n"],"mappings":"","ignoreList":[]}

package/delivery/AssetDelivery/createAssetDeliveryPluginLoader.d.ts

@@ -0,0 +1,2 @@
+import type { PluginFactory } from "@webiny/plugins/types";
+export declare const createAssetDeliveryPluginLoader: (cb: PluginFactory) => PluginFactory;

package/delivery/AssetDelivery/createAssetDeliveryPluginLoader.js

@@ -0,0 +1,15 @@
+"use strict";
+
+Object.defineProperty(exports, "__esModule", {
+  value: true
+});
+exports.createAssetDeliveryPluginLoader = void 0;
+const createAssetDeliveryPluginLoader = cb => {
+  if (process.env.WEBINY_FUNCTION_TYPE === "asset-delivery") {
+    return () => cb();
+  }
+  return () => Promise.resolve([]);
+};
+exports.createAssetDeliveryPluginLoader = createAssetDeliveryPluginLoader;
+
+//# sourceMappingURL=createAssetDeliveryPluginLoader.js.map

package/delivery/AssetDelivery/createAssetDeliveryPluginLoader.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["createAssetDeliveryPluginLoader","cb","process","env","WEBINY_FUNCTION_TYPE","Promise","resolve","exports"],"sources":["createAssetDeliveryPluginLoader.ts"],"sourcesContent":["import type { PluginFactory } from \"@webiny/plugins/types\";\n\nexport const createAssetDeliveryPluginLoader = (cb: PluginFactory): PluginFactory => {\n    if (process.env.WEBINY_FUNCTION_TYPE === \"asset-delivery\") {\n        return () => cb();\n    }\n\n    return () => Promise.resolve([]);\n};\n"],"mappings":";;;;;;AAEO,MAAMA,+BAA+B,GAAIC,EAAiB,IAAoB;EACjF,IAAIC,OAAO,CAACC,GAAG,CAACC,oBAAoB,KAAK,gBAAgB,EAAE;IACvD,OAAO,MAAMH,EAAE,CAAC,CAAC;EACrB;EAEA,OAAO,MAAMI,OAAO,CAACC,OAAO,CAAC,EAAE,CAAC;AACpC,CAAC;AAACC,OAAA,CAAAP,+BAAA,GAAAA,+BAAA","ignoreList":[]}

package/delivery/AssetDelivery/privateFiles/AssetAuthorizer.d.ts

@@ -0,0 +1,4 @@
+import type { File } from "../../../types";
+export interface AssetAuthorizer {
+    authorize(file: File): Promise<void>;
+}

package/delivery/AssetDelivery/privateFiles/AssetAuthorizer.js

@@ -0,0 +1,7 @@
+"use strict";
+
+Object.defineProperty(exports, "__esModule", {
+  value: true
+});
+
+//# sourceMappingURL=AssetAuthorizer.js.map

package/delivery/AssetDelivery/privateFiles/AssetAuthorizer.js.map

@@ -0,0 +1 @@
+{"version":3,"names":[],"sources":["AssetAuthorizer.ts"],"sourcesContent":["import type { File } from \"~/types\";\n\nexport interface AssetAuthorizer {\n    authorize(file: File): Promise<void>;\n}\n"],"mappings":"","ignoreList":[]}

package/delivery/AssetDelivery/privateFiles/NotAuthorizedAssetReply.d.ts

@@ -0,0 +1,4 @@
+import { AssetReply } from "../..";
+export declare class NotAuthorizedAssetReply extends AssetReply {
+    constructor();
+}

package/delivery/AssetDelivery/privateFiles/NotAuthorizedAssetReply.js

@@ -0,0 +1,26 @@
+"use strict";
+
+Object.defineProperty(exports, "__esModule", {
+  value: true
+});
+exports.NotAuthorizedAssetReply = void 0;
+var _handler = require("@webiny/handler");
+var _ = require("../..");
+class NotAuthorizedAssetReply extends _.AssetReply {
+  constructor() {
+    super({
+      code: 403,
+      headers: _handler.ResponseHeaders.create({
+        "cache-control": "no-store",
+        "content-type": "application/json; charset=utf-8"
+      }),
+      body: () => ({
+        error: "Not authorized!",
+        code: "NOT_AUTHORIZED"
+      })
+    });
+  }
+}
+exports.NotAuthorizedAssetReply = NotAuthorizedAssetReply;
+
+//# sourceMappingURL=NotAuthorizedAssetReply.js.map

package/delivery/AssetDelivery/privateFiles/NotAuthorizedAssetReply.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["_handler","require","_","NotAuthorizedAssetReply","AssetReply","constructor","code","headers","ResponseHeaders","create","body","error","exports"],"sources":["NotAuthorizedAssetReply.ts"],"sourcesContent":["import { ResponseHeaders } from \"@webiny/handler\";\nimport { AssetReply } from \"~/delivery\";\n\nexport class NotAuthorizedAssetReply extends AssetReply {\n    constructor() {\n        super({\n            code: 403,\n            headers: ResponseHeaders.create({\n                \"cache-control\": \"no-store\",\n                \"content-type\": \"application/json; charset=utf-8\"\n            }),\n            body: () => ({ error: \"Not authorized!\", code: \"NOT_AUTHORIZED\" })\n        });\n    }\n}\n"],"mappings":";;;;;;AAAA,IAAAA,QAAA,GAAAC,OAAA;AACA,IAAAC,CAAA,GAAAD,OAAA;AAEO,MAAME,uBAAuB,SAASC,YAAU,CAAC;EACpDC,WAAWA,CAAA,EAAG;IACV,KAAK,CAAC;MACFC,IAAI,EAAE,GAAG;MACTC,OAAO,EAAEC,wBAAe,CAACC,MAAM,CAAC;QAC5B,eAAe,EAAE,UAAU;QAC3B,cAAc,EAAE;MACpB,CAAC,CAAC;MACFC,IAAI,EAAEA,CAAA,MAAO;QAAEC,KAAK,EAAE,iBAAiB;QAAEL,IAAI,EAAE;MAAiB,CAAC;IACrE,CAAC,CAAC;EACN;AACJ;AAACM,OAAA,CAAAT,uBAAA,GAAAA,uBAAA","ignoreList":[]}

package/delivery/AssetDelivery/privateFiles/NotAuthorizedOutputStrategy.d.ts

@@ -0,0 +1,4 @@
+import type { AssetOutputStrategy, AssetReply } from "../..";
+export declare class NotAuthorizedOutputStrategy implements AssetOutputStrategy {
+    output(): Promise<AssetReply>;
+}

package/delivery/AssetDelivery/privateFiles/NotAuthorizedOutputStrategy.js

@@ -0,0 +1,15 @@
+"use strict";
+
+Object.defineProperty(exports, "__esModule", {
+  value: true
+});
+exports.NotAuthorizedOutputStrategy = void 0;
+var _NotAuthorizedAssetReply = require("./NotAuthorizedAssetReply");
+class NotAuthorizedOutputStrategy {
+  async output() {
+    return new _NotAuthorizedAssetReply.NotAuthorizedAssetReply();
+  }
+}
+exports.NotAuthorizedOutputStrategy = NotAuthorizedOutputStrategy;
+
+//# sourceMappingURL=NotAuthorizedOutputStrategy.js.map

package/delivery/AssetDelivery/privateFiles/NotAuthorizedOutputStrategy.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["_NotAuthorizedAssetReply","require","NotAuthorizedOutputStrategy","output","NotAuthorizedAssetReply","exports"],"sources":["NotAuthorizedOutputStrategy.ts"],"sourcesContent":["import type { AssetOutputStrategy, AssetReply } from \"~/delivery\";\nimport { NotAuthorizedAssetReply } from \"./NotAuthorizedAssetReply\";\n\nexport class NotAuthorizedOutputStrategy implements AssetOutputStrategy {\n    async output(): Promise<AssetReply> {\n        return new NotAuthorizedAssetReply();\n    }\n}\n"],"mappings":";;;;;;AACA,IAAAA,wBAAA,GAAAC,OAAA;AAEO,MAAMC,2BAA2B,CAAgC;EACpE,MAAMC,MAAMA,CAAA,EAAwB;IAChC,OAAO,IAAIC,gDAAuB,CAAC,CAAC;EACxC;AACJ;AAACC,OAAA,CAAAH,2BAAA,GAAAA,2BAAA","ignoreList":[]}

package/delivery/AssetDelivery/privateFiles/PrivateAuthenticatedAuthorizer.d.ts

@@ -0,0 +1,7 @@
+import type { File, FileManagerContext } from "../../../types";
+import type { AssetAuthorizer } from "./AssetAuthorizer";
+export declare class PrivateAuthenticatedAuthorizer implements AssetAuthorizer {
+    private context;
+    constructor(context: FileManagerContext);
+    authorize(file: File): Promise<void>;
+}

package/delivery/AssetDelivery/privateFiles/PrivateAuthenticatedAuthorizer.js

@@ -0,0 +1,28 @@
+"use strict";
+
+var _interopRequireDefault = require("@babel/runtime/helpers/interopRequireDefault").default;
+Object.defineProperty(exports, "__esModule", {
+  value: true
+});
+exports.PrivateAuthenticatedAuthorizer = void 0;
+var _error = _interopRequireDefault(require("@webiny/error"));
+class PrivateAuthenticatedAuthorizer {
+  constructor(context) {
+    this.context = context;
+  }
+  async authorize(file) {
+    if (file.accessControl && file.accessControl.type === "private-authenticated") {
+      // Make sure there's a valid identity!
+      const identity = this.context.security.getIdentity();
+      if (!identity) {
+        throw new _error.default({
+          code: "NOT_AUTHORIZED",
+          message: "You're not authorized to access this asset!"
+        });
+      }
+    }
+  }
+}
+exports.PrivateAuthenticatedAuthorizer = PrivateAuthenticatedAuthorizer;
+
+//# sourceMappingURL=PrivateAuthenticatedAuthorizer.js.map

package/delivery/AssetDelivery/privateFiles/PrivateAuthenticatedAuthorizer.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["_error","_interopRequireDefault","require","PrivateAuthenticatedAuthorizer","constructor","context","authorize","file","accessControl","type","identity","security","getIdentity","Error","code","message","exports"],"sources":["PrivateAuthenticatedAuthorizer.ts"],"sourcesContent":["import Error from \"@webiny/error\";\nimport type { File, FileManagerContext } from \"~/types\";\nimport type { AssetAuthorizer } from \"./AssetAuthorizer\";\n\nexport class PrivateAuthenticatedAuthorizer implements AssetAuthorizer {\n    private context: FileManagerContext;\n\n    constructor(context: FileManagerContext) {\n        this.context = context;\n    }\n\n    async authorize(file: File) {\n        if (file.accessControl && file.accessControl.type === \"private-authenticated\") {\n            // Make sure there's a valid identity!\n            const identity = this.context.security.getIdentity();\n\n            if (!identity) {\n                throw new Error({\n                    code: \"NOT_AUTHORIZED\",\n                    message: \"You're not authorized to access this asset!\"\n                });\n            }\n        }\n    }\n}\n"],"mappings":";;;;;;;AAAA,IAAAA,MAAA,GAAAC,sBAAA,CAAAC,OAAA;AAIO,MAAMC,8BAA8B,CAA4B;EAGnEC,WAAWA,CAACC,OAA2B,EAAE;IACrC,IAAI,CAACA,OAAO,GAAGA,OAAO;EAC1B;EAEA,MAAMC,SAASA,CAACC,IAAU,EAAE;IACxB,IAAIA,IAAI,CAACC,aAAa,IAAID,IAAI,CAACC,aAAa,CAACC,IAAI,KAAK,uBAAuB,EAAE;MAC3E;MACA,MAAMC,QAAQ,GAAG,IAAI,CAACL,OAAO,CAACM,QAAQ,CAACC,WAAW,CAAC,CAAC;MAEpD,IAAI,CAACF,QAAQ,EAAE;QACX,MAAM,IAAIG,cAAK,CAAC;UACZC,IAAI,EAAE,gBAAgB;UACtBC,OAAO,EAAE;QACb,CAAC,CAAC;MACN;IACJ;EACJ;AACJ;AAACC,OAAA,CAAAb,8BAAA,GAAAA,8BAAA","ignoreList":[]}

package/delivery/AssetDelivery/privateFiles/PrivateCache.d.ts

@@ -0,0 +1,6 @@
+import type { Asset, AssetOutputStrategy, AssetReply } from "../..";
+export declare class PrivateCache implements AssetOutputStrategy {
+    private strategy;
+    constructor(strategy: AssetOutputStrategy);
+    output(asset: Asset): Promise<AssetReply>;
+}

package/delivery/AssetDelivery/privateFiles/PrivateCache.js

@@ -0,0 +1,28 @@
+"use strict";
+
+Object.defineProperty(exports, "__esModule", {
+  value: true
+});
+exports.PrivateCache = void 0;
+var _cacheControlParser = require("cache-control-parser");
+class PrivateCache {
+  constructor(strategy) {
+    this.strategy = strategy;
+  }
+  async output(asset) {
+    const reply = await this.strategy.output(asset);
+    reply.setHeaders(headers => {
+      headers.set("cache-control", (value = "") => {
+        const cacheControl = (0, _cacheControlParser.parse)(value);
+        cacheControl["private"] = true;
+        cacheControl["public"] = false;
+        return (0, _cacheControlParser.stringify)(cacheControl);
+      });
+      return headers;
+    });
+    return reply;
+  }
+}
+exports.PrivateCache = PrivateCache;
+
+//# sourceMappingURL=PrivateCache.js.map

package/delivery/AssetDelivery/privateFiles/PrivateCache.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["_cacheControlParser","require","PrivateCache","constructor","strategy","output","asset","reply","setHeaders","headers","set","value","cacheControl","parse","stringify","exports"],"sources":["PrivateCache.ts"],"sourcesContent":["import { parse, stringify } from \"cache-control-parser\";\nimport type { Asset, AssetOutputStrategy, AssetReply } from \"~/delivery\";\n\nexport class PrivateCache implements AssetOutputStrategy {\n    private strategy: AssetOutputStrategy;\n\n    constructor(strategy: AssetOutputStrategy) {\n        this.strategy = strategy;\n    }\n\n    async output(asset: Asset): Promise<AssetReply> {\n        const reply = await this.strategy.output(asset);\n\n        reply.setHeaders(headers => {\n            headers.set(\"cache-control\", (value = \"\") => {\n                const cacheControl = parse(value);\n                cacheControl[\"private\"] = true;\n                cacheControl[\"public\"] = false;\n                return stringify(cacheControl);\n            });\n            return headers;\n        });\n\n        return reply;\n    }\n}\n"],"mappings":";;;;;;AAAA,IAAAA,mBAAA,GAAAC,OAAA;AAGO,MAAMC,YAAY,CAAgC;EAGrDC,WAAWA,CAACC,QAA6B,EAAE;IACvC,IAAI,CAACA,QAAQ,GAAGA,QAAQ;EAC5B;EAEA,MAAMC,MAAMA,CAACC,KAAY,EAAuB;IAC5C,MAAMC,KAAK,GAAG,MAAM,IAAI,CAACH,QAAQ,CAACC,MAAM,CAACC,KAAK,CAAC;IAE/CC,KAAK,CAACC,UAAU,CAACC,OAAO,IAAI;MACxBA,OAAO,CAACC,GAAG,CAAC,eAAe,EAAE,CAACC,KAAK,GAAG,EAAE,KAAK;QACzC,MAAMC,YAAY,GAAG,IAAAC,yBAAK,EAACF,KAAK,CAAC;QACjCC,YAAY,CAAC,SAAS,CAAC,GAAG,IAAI;QAC9BA,YAAY,CAAC,QAAQ,CAAC,GAAG,KAAK;QAC9B,OAAO,IAAAE,6BAAS,EAACF,YAAY,CAAC;MAClC,CAAC,CAAC;MACF,OAAOH,OAAO;IAClB,CAAC,CAAC;IAEF,OAAOF,KAAK;EAChB;AACJ;AAACQ,OAAA,CAAAb,YAAA,GAAAA,YAAA","ignoreList":[]}

package/delivery/AssetDelivery/privateFiles/PrivateFileAssetRequestResolver.d.ts

@@ -0,0 +1,8 @@
+import type { AssetRequestResolver } from "../..";
+import { AssetRequest } from "../..";
+import type { Request } from "@webiny/handler/types";
+export declare class PrivateFileAssetRequestResolver implements AssetRequestResolver {
+    private readonly resolver;
+    constructor(resolver: AssetRequestResolver);
+    resolve(request: Request): Promise<AssetRequest | undefined>;
+}

package/delivery/AssetDelivery/privateFiles/PrivateFileAssetRequestResolver.js

@@ -0,0 +1,37 @@
+"use strict";
+
+Object.defineProperty(exports, "__esModule", {
+  value: true
+});
+exports.PrivateFileAssetRequestResolver = void 0;
+var _ = require("../..");
+class PrivateFileAssetRequestResolver {
+  constructor(resolver) {
+    this.resolver = resolver;
+  }
+  async resolve(request) {
+    // Example: /private/65722cb5c7824a0008d05963/image-48.jpg?width=300
+    if (!request.url.startsWith("/private/")) {
+      return this.resolver.resolve(request);
+    }
+    const params = request.params ?? {};
+    const query = request.query ?? {};
+
+    // Example: { '*': '/private/65722cb5c7824a0008d05963/image-48.jpg' },
+    const path = params["*"];
+    return new _.AssetRequest({
+      key: decodeURI(path).replace("/private/", ""),
+      context: {
+        url: request.url,
+        private: true
+      },
+      options: {
+        ...query,
+        width: query.width ? parseInt(query.width) : undefined
+      }
+    });
+  }
+}
+exports.PrivateFileAssetRequestResolver = PrivateFileAssetRequestResolver;
+
+//# sourceMappingURL=PrivateFileAssetRequestResolver.js.map

package/delivery/AssetDelivery/privateFiles/PrivateFileAssetRequestResolver.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["_","require","PrivateFileAssetRequestResolver","constructor","resolver","resolve","request","url","startsWith","params","query","path","AssetRequest","key","decodeURI","replace","context","private","options","width","parseInt","undefined","exports"],"sources":["PrivateFileAssetRequestResolver.ts"],"sourcesContent":["import type { AssetRequestResolver } from \"~/delivery\";\nimport { AssetRequest } from \"~/delivery\";\nimport type { Request } from \"@webiny/handler/types\";\n\nexport class PrivateFileAssetRequestResolver implements AssetRequestResolver {\n    private readonly resolver: AssetRequestResolver;\n\n    constructor(resolver: AssetRequestResolver) {\n        this.resolver = resolver;\n    }\n\n    async resolve(request: Request): Promise<AssetRequest | undefined> {\n        // Example: /private/65722cb5c7824a0008d05963/image-48.jpg?width=300\n        if (!request.url.startsWith(\"/private/\")) {\n            return this.resolver.resolve(request);\n        }\n\n        const params = (request.params ?? {}) as Record<string, any>;\n        const query = (request.query ?? {}) as Record<string, any>;\n\n        // Example: { '*': '/private/65722cb5c7824a0008d05963/image-48.jpg' },\n        const path = params[\"*\"];\n\n        return new AssetRequest({\n            key: decodeURI(path).replace(\"/private/\", \"\"),\n            context: {\n                url: request.url,\n                private: true\n            },\n            options: {\n                ...query,\n                width: query.width ? parseInt(query.width) : undefined\n            }\n        });\n    }\n}\n"],"mappings":";;;;;;AACA,IAAAA,CAAA,GAAAC,OAAA;AAGO,MAAMC,+BAA+B,CAAiC;EAGzEC,WAAWA,CAACC,QAA8B,EAAE;IACxC,IAAI,CAACA,QAAQ,GAAGA,QAAQ;EAC5B;EAEA,MAAMC,OAAOA,CAACC,OAAgB,EAAqC;IAC/D;IACA,IAAI,CAACA,OAAO,CAACC,GAAG,CAACC,UAAU,CAAC,WAAW,CAAC,EAAE;MACtC,OAAO,IAAI,CAACJ,QAAQ,CAACC,OAAO,CAACC,OAAO,CAAC;IACzC;IAEA,MAAMG,MAAM,GAAIH,OAAO,CAACG,MAAM,IAAI,CAAC,CAAyB;IAC5D,MAAMC,KAAK,GAAIJ,OAAO,CAACI,KAAK,IAAI,CAAC,CAAyB;;IAE1D;IACA,MAAMC,IAAI,GAAGF,MAAM,CAAC,GAAG,CAAC;IAExB,OAAO,IAAIG,cAAY,CAAC;MACpBC,GAAG,EAAEC,SAAS,CAACH,IAAI,CAAC,CAACI,OAAO,CAAC,WAAW,EAAE,EAAE,CAAC;MAC7CC,OAAO,EAAE;QACLT,GAAG,EAAED,OAAO,CAACC,GAAG;QAChBU,OAAO,EAAE;MACb,CAAC;MACDC,OAAO,EAAE;QACL,GAAGR,KAAK;QACRS,KAAK,EAAET,KAAK,CAACS,KAAK,GAAGC,QAAQ,CAACV,KAAK,CAACS,KAAK,CAAC,GAAGE;MACjD;IACJ,CAAC,CAAC;EACN;AACJ;AAACC,OAAA,CAAApB,+BAAA,GAAAA,+BAAA","ignoreList":[]}

package/delivery/AssetDelivery/privateFiles/PrivateFilesAssetProcessor.d.ts

@@ -0,0 +1,13 @@
+import type { FileManagerContext } from "../../../types";
+import type { Asset, AssetProcessor, AssetRequest } from "../..";
+import type { AssetAuthorizer } from "./AssetAuthorizer";
+export declare class PrivateFilesAssetProcessor implements AssetProcessor {
+    private readonly context;
+    private assetProcessor;
+    private assetAuthorizer;
+    constructor(context: FileManagerContext, assetAuthorizer: AssetAuthorizer, assetProcessor: AssetProcessor);
+    process(assetRequest: AssetRequest, asset: Asset): Promise<Asset>;
+    private isPrivate;
+    private requestedViaPrivateEndpoint;
+    private requestedViaPublicEndpoint;
+}

package/delivery/AssetDelivery/privateFiles/PrivateFilesAssetProcessor.js

@@ -0,0 +1,63 @@
+"use strict";
+
+Object.defineProperty(exports, "__esModule", {
+  value: true
+});
+exports.PrivateFilesAssetProcessor = void 0;
+var _NotAuthorizedOutputStrategy = require("./NotAuthorizedOutputStrategy");
+var _RedirectToPublicUrlOutputStrategy = require("./RedirectToPublicUrlOutputStrategy");
+var _RedirectToPrivateUrlOutputStrategy = require("./RedirectToPrivateUrlOutputStrategy");
+var _PrivateCache = require("./PrivateCache");
+var _PublicCache = require("./PublicCache");
+class PrivateFilesAssetProcessor {
+  constructor(context, assetAuthorizer, assetProcessor) {
+    this.assetAuthorizer = assetAuthorizer;
+    this.context = context;
+    this.assetProcessor = assetProcessor;
+  }
+  async process(assetRequest, asset) {
+    const id = asset.getId();
+    const {
+      security,
+      fileManager
+    } = this.context;
+
+    // Get file from File Manager by `id`.
+    const file = await security.withoutAuthorization(() => fileManager.getFile(id));
+    const isPrivateFile = this.isPrivate(file);
+    if (!isPrivateFile && this.requestedViaPrivateEndpoint(assetRequest)) {
+      asset.setOutputStrategy(new _RedirectToPublicUrlOutputStrategy.RedirectToPublicUrlOutputStrategy(assetRequest));
+      return asset;
+    }
+    if (isPrivateFile && this.requestedViaPublicEndpoint(assetRequest)) {
+      asset.setOutputStrategy(new _RedirectToPrivateUrlOutputStrategy.RedirectToPrivateUrlOutputStrategy(assetRequest));
+      return asset;
+    }
+    try {
+      await this.assetAuthorizer.authorize(file);
+    } catch (error) {
+      asset.setOutputStrategy(new _NotAuthorizedOutputStrategy.NotAuthorizedOutputStrategy());
+      return asset;
+    }
+    const processedAsset = await this.assetProcessor.process(assetRequest, asset);
+    processedAsset.setOutputStrategy(strategy => {
+      if (!strategy) {
+        throw Error(`No asset output strategy is configured!`);
+      }
+      return isPrivateFile ? new _PrivateCache.PrivateCache(strategy) : new _PublicCache.PublicCache(strategy);
+    });
+    return processedAsset;
+  }
+  isPrivate(file) {
+    return file.accessControl && file.accessControl.type.startsWith("private-");
+  }
+  requestedViaPrivateEndpoint(assetRequest) {
+    return assetRequest.getContext().private;
+  }
+  requestedViaPublicEndpoint(assetRequest) {
+    return !this.requestedViaPrivateEndpoint(assetRequest);
+  }
+}
+exports.PrivateFilesAssetProcessor = PrivateFilesAssetProcessor;
+
+//# sourceMappingURL=PrivateFilesAssetProcessor.js.map

package/delivery/AssetDelivery/privateFiles/PrivateFilesAssetProcessor.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["_NotAuthorizedOutputStrategy","require","_RedirectToPublicUrlOutputStrategy","_RedirectToPrivateUrlOutputStrategy","_PrivateCache","_PublicCache","PrivateFilesAssetProcessor","constructor","context","assetAuthorizer","assetProcessor","process","assetRequest","asset","id","getId","security","fileManager","file","withoutAuthorization","getFile","isPrivateFile","isPrivate","requestedViaPrivateEndpoint","setOutputStrategy","RedirectToPublicUrlOutputStrategy","requestedViaPublicEndpoint","RedirectToPrivateUrlOutputStrategy","authorize","error","NotAuthorizedOutputStrategy","processedAsset","strategy","Error","PrivateCache","PublicCache","accessControl","type","startsWith","getContext","private","exports"],"sources":["PrivateFilesAssetProcessor.ts"],"sourcesContent":["import type { File, FileManagerContext } from \"~/types\";\nimport type { Asset, AssetProcessor, AssetRequest } from \"~/delivery\";\nimport type { AssetAuthorizer } from \"./AssetAuthorizer\";\nimport { NotAuthorizedOutputStrategy } from \"./NotAuthorizedOutputStrategy\";\nimport { RedirectToPublicUrlOutputStrategy } from \"./RedirectToPublicUrlOutputStrategy\";\nimport { RedirectToPrivateUrlOutputStrategy } from \"./RedirectToPrivateUrlOutputStrategy\";\nimport { PrivateCache } from \"./PrivateCache\";\nimport { PublicCache } from \"./PublicCache\";\n\ninterface MaybePrivate {\n    private?: boolean;\n}\n\nexport class PrivateFilesAssetProcessor implements AssetProcessor {\n    private readonly context: FileManagerContext;\n    private assetProcessor: AssetProcessor;\n    private assetAuthorizer: AssetAuthorizer;\n\n    constructor(\n        context: FileManagerContext,\n        assetAuthorizer: AssetAuthorizer,\n        assetProcessor: AssetProcessor\n    ) {\n        this.assetAuthorizer = assetAuthorizer;\n        this.context = context;\n        this.assetProcessor = assetProcessor;\n    }\n\n    async process(assetRequest: AssetRequest, asset: Asset): Promise<Asset> {\n        const id = asset.getId();\n        const { security, fileManager } = this.context;\n\n        // Get file from File Manager by `id`.\n        const file = await security.withoutAuthorization(() => fileManager.getFile(id));\n\n        const isPrivateFile = this.isPrivate(file);\n\n        if (!isPrivateFile && this.requestedViaPrivateEndpoint(assetRequest)) {\n            asset.setOutputStrategy(new RedirectToPublicUrlOutputStrategy(assetRequest));\n            return asset;\n        }\n\n        if (isPrivateFile && this.requestedViaPublicEndpoint(assetRequest)) {\n            asset.setOutputStrategy(new RedirectToPrivateUrlOutputStrategy(assetRequest));\n            return asset;\n        }\n\n        try {\n            await this.assetAuthorizer.authorize(file);\n        } catch (error) {\n            asset.setOutputStrategy(new NotAuthorizedOutputStrategy());\n\n            return asset;\n        }\n\n        const processedAsset = await this.assetProcessor.process(assetRequest, asset);\n\n        processedAsset.setOutputStrategy(strategy => {\n            if (!strategy) {\n                throw Error(`No asset output strategy is configured!`);\n            }\n            return isPrivateFile ? new PrivateCache(strategy) : new PublicCache(strategy);\n        });\n\n        return processedAsset;\n    }\n\n    private isPrivate(file: File) {\n        return file.accessControl && file.accessControl.type.startsWith(\"private-\");\n    }\n\n    private requestedViaPrivateEndpoint(assetRequest: AssetRequest) {\n        return assetRequest.getContext<MaybePrivate>().private;\n    }\n\n    private requestedViaPublicEndpoint(assetRequest: AssetRequest) {\n        return !this.requestedViaPrivateEndpoint(assetRequest);\n    }\n}\n"],"mappings":";;;;;;AAGA,IAAAA,4BAAA,GAAAC,OAAA;AACA,IAAAC,kCAAA,GAAAD,OAAA;AACA,IAAAE,mCAAA,GAAAF,OAAA;AACA,IAAAG,aAAA,GAAAH,OAAA;AACA,IAAAI,YAAA,GAAAJ,OAAA;AAMO,MAAMK,0BAA0B,CAA2B;EAK9DC,WAAWA,CACPC,OAA2B,EAC3BC,eAAgC,EAChCC,cAA8B,EAChC;IACE,IAAI,CAACD,eAAe,GAAGA,eAAe;IACtC,IAAI,CAACD,OAAO,GAAGA,OAAO;IACtB,IAAI,CAACE,cAAc,GAAGA,cAAc;EACxC;EAEA,MAAMC,OAAOA,CAACC,YAA0B,EAAEC,KAAY,EAAkB;IACpE,MAAMC,EAAE,GAAGD,KAAK,CAACE,KAAK,CAAC,CAAC;IACxB,MAAM;MAAEC,QAAQ;MAAEC;IAAY,CAAC,GAAG,IAAI,CAACT,OAAO;;IAE9C;IACA,MAAMU,IAAI,GAAG,MAAMF,QAAQ,CAACG,oBAAoB,CAAC,MAAMF,WAAW,CAACG,OAAO,CAACN,EAAE,CAAC,CAAC;IAE/E,MAAMO,aAAa,GAAG,IAAI,CAACC,SAAS,CAACJ,IAAI,CAAC;IAE1C,IAAI,CAACG,aAAa,IAAI,IAAI,CAACE,2BAA2B,CAACX,YAAY,CAAC,EAAE;MAClEC,KAAK,CAACW,iBAAiB,CAAC,IAAIC,oEAAiC,CAACb,YAAY,CAAC,CAAC;MAC5E,OAAOC,KAAK;IAChB;IAEA,IAAIQ,aAAa,IAAI,IAAI,CAACK,0BAA0B,CAACd,YAAY,CAAC,EAAE;MAChEC,KAAK,CAACW,iBAAiB,CAAC,IAAIG,sEAAkC,CAACf,YAAY,CAAC,CAAC;MAC7E,OAAOC,KAAK;IAChB;IAEA,IAAI;MACA,MAAM,IAAI,CAACJ,eAAe,CAACmB,SAAS,CAACV,IAAI,CAAC;IAC9C,CAAC,CAAC,OAAOW,KAAK,EAAE;MACZhB,KAAK,CAACW,iBAAiB,CAAC,IAAIM,wDAA2B,CAAC,CAAC,CAAC;MAE1D,OAAOjB,KAAK;IAChB;IAEA,MAAMkB,cAAc,GAAG,MAAM,IAAI,CAACrB,cAAc,CAACC,OAAO,CAACC,YAAY,EAAEC,KAAK,CAAC;IAE7EkB,cAAc,CAACP,iBAAiB,CAACQ,QAAQ,IAAI;MACzC,IAAI,CAACA,QAAQ,EAAE;QACX,MAAMC,KAAK,CAAC,yCAAyC,CAAC;MAC1D;MACA,OAAOZ,aAAa,GAAG,IAAIa,0BAAY,CAACF,QAAQ,CAAC,GAAG,IAAIG,wBAAW,CAACH,QAAQ,CAAC;IACjF,CAAC,CAAC;IAEF,OAAOD,cAAc;EACzB;EAEQT,SAASA,CAACJ,IAAU,EAAE;IAC1B,OAAOA,IAAI,CAACkB,aAAa,IAAIlB,IAAI,CAACkB,aAAa,CAACC,IAAI,CAACC,UAAU,CAAC,UAAU,CAAC;EAC/E;EAEQf,2BAA2BA,CAACX,YAA0B,EAAE;IAC5D,OAAOA,YAAY,CAAC2B,UAAU,CAAe,CAAC,CAACC,OAAO;EAC1D;EAEQd,0BAA0BA,CAACd,YAA0B,EAAE;IAC3D,OAAO,CAAC,IAAI,CAACW,2BAA2B,CAACX,YAAY,CAAC;EAC1D;AACJ;AAAC6B,OAAA,CAAAnC,0BAAA,GAAAA,0BAAA","ignoreList":[]}

package/delivery/AssetDelivery/privateFiles/PublicCache.d.ts

@@ -0,0 +1,6 @@
+import type { Asset, AssetOutputStrategy, AssetReply } from "../..";
+export declare class PublicCache implements AssetOutputStrategy {
+    private strategy;
+    constructor(strategy: AssetOutputStrategy);
+    output(asset: Asset): Promise<AssetReply>;
+}

package/delivery/AssetDelivery/privateFiles/PublicCache.js

@@ -0,0 +1,28 @@
+"use strict";
+
+Object.defineProperty(exports, "__esModule", {
+  value: true
+});
+exports.PublicCache = void 0;
+var _cacheControlParser = require("cache-control-parser");
+class PublicCache {
+  constructor(strategy) {
+    this.strategy = strategy;
+  }
+  async output(asset) {
+    const reply = await this.strategy.output(asset);
+    reply.setHeaders(headers => {
+      headers.set("cache-control", (value = "") => {
+        const cacheControl = (0, _cacheControlParser.parse)(value);
+        cacheControl["private"] = false;
+        cacheControl["public"] = true;
+        return (0, _cacheControlParser.stringify)(cacheControl);
+      });
+      return headers;
+    });
+    return reply;
+  }
+}
+exports.PublicCache = PublicCache;
+
+//# sourceMappingURL=PublicCache.js.map

package/delivery/AssetDelivery/privateFiles/PublicCache.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["_cacheControlParser","require","PublicCache","constructor","strategy","output","asset","reply","setHeaders","headers","set","value","cacheControl","parse","stringify","exports"],"sources":["PublicCache.ts"],"sourcesContent":["import { parse, stringify } from \"cache-control-parser\";\nimport type { Asset, AssetOutputStrategy, AssetReply } from \"~/delivery\";\n\nexport class PublicCache implements AssetOutputStrategy {\n    private strategy: AssetOutputStrategy;\n\n    constructor(strategy: AssetOutputStrategy) {\n        this.strategy = strategy;\n    }\n\n    async output(asset: Asset): Promise<AssetReply> {\n        const reply = await this.strategy.output(asset);\n\n        reply.setHeaders(headers => {\n            headers.set(\"cache-control\", (value = \"\") => {\n                const cacheControl = parse(value);\n                cacheControl[\"private\"] = false;\n                cacheControl[\"public\"] = true;\n                return stringify(cacheControl);\n            });\n            return headers;\n        });\n\n        return reply;\n    }\n}\n"],"mappings":";;;;;;AAAA,IAAAA,mBAAA,GAAAC,OAAA;AAGO,MAAMC,WAAW,CAAgC;EAGpDC,WAAWA,CAACC,QAA6B,EAAE;IACvC,IAAI,CAACA,QAAQ,GAAGA,QAAQ;EAC5B;EAEA,MAAMC,MAAMA,CAACC,KAAY,EAAuB;IAC5C,MAAMC,KAAK,GAAG,MAAM,IAAI,CAACH,QAAQ,CAACC,MAAM,CAACC,KAAK,CAAC;IAE/CC,KAAK,CAACC,UAAU,CAACC,OAAO,IAAI;MACxBA,OAAO,CAACC,GAAG,CAAC,eAAe,EAAE,CAACC,KAAK,GAAG,EAAE,KAAK;QACzC,MAAMC,YAAY,GAAG,IAAAC,yBAAK,EAACF,KAAK,CAAC;QACjCC,YAAY,CAAC,SAAS,CAAC,GAAG,KAAK;QAC/BA,YAAY,CAAC,QAAQ,CAAC,GAAG,IAAI;QAC7B,OAAO,IAAAE,6BAAS,EAACF,YAAY,CAAC;MAClC,CAAC,CAAC;MACF,OAAOH,OAAO;IAClB,CAAC,CAAC;IAEF,OAAOF,KAAK;EAChB;AACJ;AAACQ,OAAA,CAAAb,WAAA,GAAAA,WAAA","ignoreList":[]}

package/delivery/AssetDelivery/privateFiles/RedirectToPrivateUrlOutputStrategy.d.ts

@@ -0,0 +1,7 @@
+import type { Asset, AssetOutputStrategy, AssetRequest } from "../..";
+import { AssetReply } from "../..";
+export declare class RedirectToPrivateUrlOutputStrategy implements AssetOutputStrategy {
+    private assetRequest;
+    constructor(assetRequest: AssetRequest);
+    output(asset: Asset): Promise<AssetReply>;
+}

package/delivery/AssetDelivery/privateFiles/RedirectToPrivateUrlOutputStrategy.js

@@ -0,0 +1,27 @@
+"use strict";
+
+Object.defineProperty(exports, "__esModule", {
+  value: true
+});
+exports.RedirectToPrivateUrlOutputStrategy = void 0;
+var _ = require("../..");
+var _handler = require("@webiny/handler");
+class RedirectToPrivateUrlOutputStrategy {
+  constructor(assetRequest) {
+    this.assetRequest = assetRequest;
+  }
+  async output(asset) {
+    const requestUrl = this.assetRequest.getContext().url;
+    return new _.AssetReply({
+      code: 301,
+      headers: _handler.ResponseHeaders.create({
+        location: requestUrl.replace("/files/", "/private/"),
+        "content-type": asset.getContentType(),
+        "cache-control": `public, max-age=${86400 * 30}`
+      })
+    });
+  }
+}
+exports.RedirectToPrivateUrlOutputStrategy = RedirectToPrivateUrlOutputStrategy;
+
+//# sourceMappingURL=RedirectToPrivateUrlOutputStrategy.js.map

package/delivery/AssetDelivery/privateFiles/RedirectToPrivateUrlOutputStrategy.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["_","require","_handler","RedirectToPrivateUrlOutputStrategy","constructor","assetRequest","output","asset","requestUrl","getContext","url","AssetReply","code","headers","ResponseHeaders","create","location","replace","getContentType","exports"],"sources":["RedirectToPrivateUrlOutputStrategy.ts"],"sourcesContent":["import type { Asset, AssetOutputStrategy, AssetRequest } from \"~/delivery\";\nimport { AssetReply } from \"~/delivery\";\nimport { ResponseHeaders } from \"@webiny/handler\";\n\nexport class RedirectToPrivateUrlOutputStrategy implements AssetOutputStrategy {\n    private assetRequest: AssetRequest;\n\n    constructor(assetRequest: AssetRequest) {\n        this.assetRequest = assetRequest;\n    }\n\n    async output(asset: Asset): Promise<AssetReply> {\n        const requestUrl = this.assetRequest.getContext().url;\n\n        return new AssetReply({\n            code: 301,\n            headers: ResponseHeaders.create({\n                location: requestUrl.replace(\"/files/\", \"/private/\"),\n                \"content-type\": asset.getContentType(),\n                \"cache-control\": `public, max-age=${86400 * 30}`\n            })\n        });\n    }\n}\n"],"mappings":";;;;;;AACA,IAAAA,CAAA,GAAAC,OAAA;AACA,IAAAC,QAAA,GAAAD,OAAA;AAEO,MAAME,kCAAkC,CAAgC;EAG3EC,WAAWA,CAACC,YAA0B,EAAE;IACpC,IAAI,CAACA,YAAY,GAAGA,YAAY;EACpC;EAEA,MAAMC,MAAMA,CAACC,KAAY,EAAuB;IAC5C,MAAMC,UAAU,GAAG,IAAI,CAACH,YAAY,CAACI,UAAU,CAAC,CAAC,CAACC,GAAG;IAErD,OAAO,IAAIC,YAAU,CAAC;MAClBC,IAAI,EAAE,GAAG;MACTC,OAAO,EAAEC,wBAAe,CAACC,MAAM,CAAC;QAC5BC,QAAQ,EAAER,UAAU,CAACS,OAAO,CAAC,SAAS,EAAE,WAAW,CAAC;QACpD,cAAc,EAAEV,KAAK,CAACW,cAAc,CAAC,CAAC;QACtC,eAAe,EAAE,mBAAmB,KAAK,GAAG,EAAE;MAClD,CAAC;IACL,CAAC,CAAC;EACN;AACJ;AAACC,OAAA,CAAAhB,kCAAA,GAAAA,kCAAA","ignoreList":[]}

package/delivery/AssetDelivery/privateFiles/RedirectToPublicUrlOutputStrategy.d.ts

@@ -0,0 +1,7 @@
+import type { Asset, AssetOutputStrategy, AssetRequest } from "../..";
+import { AssetReply } from "../..";
+export declare class RedirectToPublicUrlOutputStrategy implements AssetOutputStrategy {
+    private assetRequest;
+    constructor(assetRequest: AssetRequest);
+    output(asset: Asset): Promise<AssetReply>;
+}

package/delivery/AssetDelivery/privateFiles/RedirectToPublicUrlOutputStrategy.js

@@ -0,0 +1,27 @@
+"use strict";
+
+Object.defineProperty(exports, "__esModule", {
+  value: true
+});
+exports.RedirectToPublicUrlOutputStrategy = void 0;
+var _ = require("../..");
+var _handler = require("@webiny/handler");
+class RedirectToPublicUrlOutputStrategy {
+  constructor(assetRequest) {
+    this.assetRequest = assetRequest;
+  }
+  async output(asset) {
+    const requestUrl = this.assetRequest.getContext().url;
+    return new _.AssetReply({
+      code: 301,
+      headers: _handler.ResponseHeaders.create({
+        location: requestUrl.replace("/private/", "/files/"),
+        "content-type": asset.getContentType(),
+        "cache-control": `public, max-age=${86400 * 30}`
+      })
+    });
+  }
+}
+exports.RedirectToPublicUrlOutputStrategy = RedirectToPublicUrlOutputStrategy;
+
+//# sourceMappingURL=RedirectToPublicUrlOutputStrategy.js.map

package/delivery/AssetDelivery/privateFiles/RedirectToPublicUrlOutputStrategy.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["_","require","_handler","RedirectToPublicUrlOutputStrategy","constructor","assetRequest","output","asset","requestUrl","getContext","url","AssetReply","code","headers","ResponseHeaders","create","location","replace","getContentType","exports"],"sources":["RedirectToPublicUrlOutputStrategy.ts"],"sourcesContent":["import type { Asset, AssetOutputStrategy, AssetRequest } from \"~/delivery\";\nimport { AssetReply } from \"~/delivery\";\nimport { ResponseHeaders } from \"@webiny/handler\";\n\nexport class RedirectToPublicUrlOutputStrategy implements AssetOutputStrategy {\n    private assetRequest: AssetRequest;\n\n    constructor(assetRequest: AssetRequest) {\n        this.assetRequest = assetRequest;\n    }\n\n    async output(asset: Asset): Promise<AssetReply> {\n        const requestUrl = this.assetRequest.getContext().url;\n\n        return new AssetReply({\n            code: 301,\n            headers: ResponseHeaders.create({\n                location: requestUrl.replace(\"/private/\", \"/files/\"),\n                \"content-type\": asset.getContentType(),\n                \"cache-control\": `public, max-age=${86400 * 30}`\n            })\n        });\n    }\n}\n"],"mappings":";;;;;;AACA,IAAAA,CAAA,GAAAC,OAAA;AACA,IAAAC,QAAA,GAAAD,OAAA;AAEO,MAAME,iCAAiC,CAAgC;EAG1EC,WAAWA,CAACC,YAA0B,EAAE;IACpC,IAAI,CAACA,YAAY,GAAGA,YAAY;EACpC;EAEA,MAAMC,MAAMA,CAACC,KAAY,EAAuB;IAC5C,MAAMC,UAAU,GAAG,IAAI,CAACH,YAAY,CAACI,UAAU,CAAC,CAAC,CAACC,GAAG;IAErD,OAAO,IAAIC,YAAU,CAAC;MAClBC,IAAI,EAAE,GAAG;MACTC,OAAO,EAAEC,wBAAe,CAACC,MAAM,CAAC;QAC5BC,QAAQ,EAAER,UAAU,CAACS,OAAO,CAAC,WAAW,EAAE,SAAS,CAAC;QACpD,cAAc,EAAEV,KAAK,CAACW,cAAc,CAAC,CAAC;QACtC,eAAe,EAAE,mBAAmB,KAAK,GAAG,EAAE;MAClD,CAAC;IACL,CAAC,CAAC;EACN;AACJ;AAACC,OAAA,CAAAhB,iCAAA,GAAAA,iCAAA","ignoreList":[]}

package/delivery/AssetDelivery/privateFiles/internalIdentity.d.ts

@@ -0,0 +1,7 @@
+import type { SecurityIdentity } from "@webiny/api-security/types";
+/**
+ * This identity is used to bypass the current behavior of FLP. Even when using `withoutAuthorization`,
+ * FLP will complain, if the identity is `undefined`. Using this mock identity and `security.withIdentity`,
+ * we set this temporary identity for the duration of the callback execution, and FLP is happy.
+ */
+export declare const internalIdentity: SecurityIdentity;

package/delivery/AssetDelivery/privateFiles/internalIdentity.js

@@ -0,0 +1,18 @@
+"use strict";
+
+Object.defineProperty(exports, "__esModule", {
+  value: true
+});
+exports.internalIdentity = void 0;
+/**
+ * This identity is used to bypass the current behavior of FLP. Even when using `withoutAuthorization`,
+ * FLP will complain, if the identity is `undefined`. Using this mock identity and `security.withIdentity`,
+ * we set this temporary identity for the duration of the callback execution, and FLP is happy.
+ */
+const internalIdentity = exports.internalIdentity = {
+  id: "asset-delivery",
+  type: "asset-delivery",
+  displayName: ""
+};
+
+//# sourceMappingURL=internalIdentity.js.map

package/delivery/AssetDelivery/privateFiles/internalIdentity.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["internalIdentity","exports","id","type","displayName"],"sources":["internalIdentity.ts"],"sourcesContent":["import type { SecurityIdentity } from \"@webiny/api-security/types\";\n\n/**\n * This identity is used to bypass the current behavior of FLP. Even when using `withoutAuthorization`,\n * FLP will complain, if the identity is `undefined`. Using this mock identity and `security.withIdentity`,\n * we set this temporary identity for the duration of the callback execution, and FLP is happy.\n */\nexport const internalIdentity: SecurityIdentity = {\n    id: \"asset-delivery\",\n    type: \"asset-delivery\",\n    displayName: \"\"\n};\n"],"mappings":";;;;;;AAEA;AACA;AACA;AACA;AACA;AACO,MAAMA,gBAAkC,GAAAC,OAAA,CAAAD,gBAAA,GAAG;EAC9CE,EAAE,EAAE,gBAAgB;EACpBC,IAAI,EAAE,gBAAgB;EACtBC,WAAW,EAAE;AACjB,CAAC","ignoreList":[]}

package/delivery/AssetDelivery/transformation/PassthroughAssetProcessor.d.ts

@@ -0,0 +1,4 @@
+import type { Asset, AssetProcessor, AssetRequest } from "../..";
+export declare class PassthroughAssetProcessor implements AssetProcessor {
+    process(assetRequest: AssetRequest, asset: Asset): Promise<Asset>;
+}