@xemahq/authorization-nest 0.8.0 → 0.9.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/dist/authzen.transport.d.ts +4 -0
- package/dist/authzen.transport.d.ts.map +1 -1
- package/dist/authzen.transport.js +20 -11
- package/dist/authzen.transport.js.map +1 -1
- package/dist/durable-delegation/holder-client.d.ts +1 -1
- package/dist/durable-delegation/holder-client.d.ts.map +1 -1
- package/dist/durable-delegation/holder-client.js +12 -6
- package/dist/durable-delegation/holder-client.js.map +1 -1
- package/dist/durable-delegation/holder-lifecycle.d.ts +3 -1
- package/dist/durable-delegation/holder-lifecycle.d.ts.map +1 -1
- package/dist/durable-delegation/holder-lifecycle.js +10 -2
- package/dist/durable-delegation/holder-lifecycle.js.map +1 -1
- package/dist/durable-delegation/router-replay.d.ts +21 -0
- package/dist/durable-delegation/router-replay.d.ts.map +1 -0
- package/dist/durable-delegation/router-replay.js +27 -0
- package/dist/durable-delegation/router-replay.js.map +1 -0
- package/dist/ephemeral-delegation/ephemeral-delegation.d.ts +10 -5
- package/dist/ephemeral-delegation/ephemeral-delegation.d.ts.map +1 -1
- package/dist/ephemeral-delegation/ephemeral-delegation.js +11 -3
- package/dist/ephemeral-delegation/ephemeral-delegation.js.map +1 -1
- package/dist/ephemeral-delegation/held-ephemeral-delegation.d.ts +5 -0
- package/dist/ephemeral-delegation/held-ephemeral-delegation.d.ts.map +1 -0
- package/dist/ephemeral-delegation/held-ephemeral-delegation.js +17 -0
- package/dist/ephemeral-delegation/held-ephemeral-delegation.js.map +1 -0
- package/dist/ephemeral-delegation/issued-ref.d.ts +9 -0
- package/dist/ephemeral-delegation/issued-ref.d.ts.map +1 -0
- package/dist/ephemeral-delegation/issued-ref.js +14 -0
- package/dist/ephemeral-delegation/issued-ref.js.map +1 -0
- package/dist/grant-version.reader.d.ts +1 -0
- package/dist/grant-version.reader.d.ts.map +1 -1
- package/dist/grant-version.reader.js +8 -6
- package/dist/grant-version.reader.js.map +1 -1
- package/dist/index.d.ts +2 -0
- package/dist/index.d.ts.map +1 -1
- package/dist/index.js +2 -0
- package/dist/index.js.map +1 -1
- package/dist/organization-delegation-admission.d.ts +1 -0
- package/dist/organization-delegation-admission.d.ts.map +1 -1
- package/dist/organization-delegation-admission.js +8 -0
- package/dist/organization-delegation-admission.js.map +1 -1
- package/package.json +4 -4
|
@@ -25,11 +25,15 @@ export declare class AuthzenPdpError extends Error {
|
|
|
25
25
|
export declare class AuthzenCallerContextRequiredError extends AuthzenPdpError {
|
|
26
26
|
constructor(path: string);
|
|
27
27
|
}
|
|
28
|
+
export declare class AuthzenCallerOrgMismatchError extends AuthzenPdpError {
|
|
29
|
+
constructor(path: string);
|
|
30
|
+
}
|
|
28
31
|
export declare class HttpAuthzenPdpTransport implements AuthzenPdpTransport {
|
|
29
32
|
private readonly registry;
|
|
30
33
|
private readonly identityBootstrap;
|
|
31
34
|
private readonly options;
|
|
32
35
|
constructor(registry: ServiceRegistry, identityBootstrap: IdentityBootstrapService, options: XemaAuthorizationOptions);
|
|
36
|
+
private readonly own;
|
|
33
37
|
evaluation(orgId: string | null, request: AccessEvaluationRequest, options?: AuthzenPdpCallOptions): Promise<AccessEvaluationResponse>;
|
|
34
38
|
evaluations(orgId: string, request: AccessEvaluationsRequest, options?: AuthzenPdpCallOptions): Promise<AccessEvaluationsResponse>;
|
|
35
39
|
searchResource(orgId: string, request: ResourceSearchRequest, options?: AuthzenPdpCallOptions): Promise<ResourceSearchResponse>;
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"authzen.transport.d.ts","sourceRoot":"","sources":["../src/authzen.transport.ts"],"names":[],"mappings":"AACA,OAAO,EAOL,KAAK,uBAAuB,EAC5B,KAAK,wBAAwB,EAC7B,KAAK,wBAAwB,EAC7B,KAAK,yBAAyB,EAC9B,KAAK,mBAAmB,EACxB,KAAK,oBAAoB,EACzB,KAAK,qBAAqB,EAC1B,KAAK,sBAAsB,EAC3B,KAAK,oBAAoB,EACzB,KAAK,qBAAqB,EAC3B,MAAM,2BAA2B,CAAC;AACnC,OAAO,
|
|
1
|
+
{"version":3,"file":"authzen.transport.d.ts","sourceRoot":"","sources":["../src/authzen.transport.ts"],"names":[],"mappings":"AACA,OAAO,EAOL,KAAK,uBAAuB,EAC5B,KAAK,wBAAwB,EAC7B,KAAK,wBAAwB,EAC7B,KAAK,yBAAyB,EAC9B,KAAK,mBAAmB,EACxB,KAAK,oBAAoB,EACzB,KAAK,qBAAqB,EAC1B,KAAK,sBAAsB,EAC3B,KAAK,oBAAoB,EACzB,KAAK,qBAAqB,EAC3B,MAAM,2BAA2B,CAAC;AACnC,OAAO,EAAE,KAAK,sBAAsB,EAAE,MAAM,kCAAkC,CAAC;AAC/E,OAAO,EAEL,KAAK,eAAe,EACrB,MAAM,oCAAoC,CAAC;AAC5C,OAAO,EAAE,wBAAwB,EAAE,MAAM,yBAAyB,CAAC;AAWnE,OAAO,EAEL,KAAK,wBAAwB,EAC9B,MAAM,yBAAyB,CAAC;AAsBjC,eAAO,MAAM,2BAA2B,wBAAwB,CAAC;AAGjE,MAAM,WAAW,qBAAqB;IASpC,QAAQ,CAAC,eAAe,CAAC,EAAE,sBAAsB,CAAC;IAElD,QAAQ,CAAC,MAAM,CAAC,EAAE,WAAW,CAAC;IAK9B,QAAQ,CAAC,aAAa,CAAC,EAAE,CAAC,WAAW,EAAE,MAAM,GAAG,SAAS,KAAK,IAAI,CAAC;CACpE;AAED,MAAM,WAAW,mBAAmB;IAClC,UAAU,CACR,KAAK,EAAE,MAAM,GAAG,IAAI,EACpB,OAAO,EAAE,uBAAuB,EAChC,OAAO,CAAC,EAAE,qBAAqB,GAC9B,OAAO,CAAC,wBAAwB,CAAC,CAAC;IACrC,WAAW,CACT,KAAK,EAAE,MAAM,EACb,OAAO,EAAE,wBAAwB,EACjC,OAAO,CAAC,EAAE,qBAAqB,GAC9B,OAAO,CAAC,yBAAyB,CAAC,CAAC;IACtC,cAAc,CACZ,KAAK,EAAE,MAAM,EACb,OAAO,EAAE,qBAAqB,EAC9B,OAAO,CAAC,EAAE,qBAAqB,GAC9B,OAAO,CAAC,sBAAsB,CAAC,CAAC;IACnC,aAAa,CACX,KAAK,EAAE,MAAM,EACb,OAAO,EAAE,oBAAoB,EAC7B,OAAO,CAAC,EAAE,qBAAqB,GAC9B,OAAO,CAAC,qBAAqB,CAAC,CAAC;IAClC,YAAY,CACV,KAAK,EAAE,MAAM,EACb,OAAO,EAAE,mBAAmB,EAC5B,OAAO,CAAC,EAAE,qBAAqB,GAC9B,OAAO,CAAC,oBAAoB,CAAC,CAAC;CAClC;AAED,eAAO,MAAM,qBAAqB,eAAkC,CAAC;AAGrE,qBAAa,eAAgB,SAAQ,KAAK;aAGtB,MAAM,EAAE,MAAM;aACd,IAAI,EAAE,MAAM,GAAG,SAAS;gBAFxC,OAAO,EAAE,MAAM,EACC,MAAM,EAAE,MAAM,EACd,IAAI,EAAE,MAAM,GAAG,SAAS;CAK3C;AAOD,qBAAa,iCAAkC,SAAQ,eAAe;gBACjD,IAAI,EAAE,MAAM;CAQhC;AAMD,qBAAa,6BAA8B,SAAQ,eAAe;gBAC7C,IAAI,EAAE,MAAM;CAQhC;AAED,qBACa,uBAAwB,YAAW,mBAAmB;IAG/D,OAAO,CAAC,QAAQ,CAAC,QAAQ;IACzB,OAAO,CAAC,QAAQ,CAAC,iBAAiB;IAElC,OAAO,CAAC,QAAQ,CAAC,OAAO;gBAHP,QAAQ,EAAE,eAAe,EACzB,iBAAiB,EAAE,wBAAwB,EAE3C,OAAO,EAAE,wBAAwB;IAKpD,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAuC;IAEpD,UAAU,CACf,KAAK,EAAE,MAAM,GAAG,IAAI,EACpB,OAAO,EAAE,uBAAuB,EAChC,OAAO,CAAC,EAAE,qBAAqB,GAC9B,OAAO,CAAC,wBAAwB,CAAC;IAU7B,WAAW,CAChB,KAAK,EAAE,MAAM,EACb,OAAO,EAAE,wBAAwB,EACjC,OAAO,CAAC,EAAE,qBAAqB,GAC9B,OAAO,CAAC,yBAAyB,CAAC;IAU9B,cAAc,CACnB,KAAK,EAAE,MAAM,EACb,OAAO,EAAE,qBAAqB,EAC9B,OAAO,CAAC,EAAE,qBAAqB,GAC9B,OAAO,CAAC,sBAAsB,CAAC;IAU3B,aAAa,CAClB,KAAK,EAAE,MAAM,EACb,OAAO,EAAE,oBAAoB,EAC7B,OAAO,CAAC,EAAE,qBAAqB,GAC9B,OAAO,CAAC,qBAAqB,CAAC;IAU1B,YAAY,CACjB,KAAK,EAAE,MAAM,EACb,OAAO,EAAE,mBAAmB,EAC5B,OAAO,CAAC,EAAE,qBAAqB,GAC9B,OAAO,CAAC,oBAAoB,CAAC;YAUlB,IAAI;CA0DnB"}
|
|
@@ -12,13 +12,13 @@ var __param = (this && this.__param) || function (paramIndex, decorator) {
|
|
|
12
12
|
return function (target, key) { decorator(target, key, paramIndex); }
|
|
13
13
|
};
|
|
14
14
|
Object.defineProperty(exports, "__esModule", { value: true });
|
|
15
|
-
exports.HttpAuthzenPdpTransport = exports.AuthzenCallerContextRequiredError = exports.AuthzenPdpError = exports.AUTHZEN_PDP_TRANSPORT = exports.AUTHZEN_POLICY_MODEL_HEADER = void 0;
|
|
15
|
+
exports.HttpAuthzenPdpTransport = exports.AuthzenCallerOrgMismatchError = exports.AuthzenCallerContextRequiredError = exports.AuthzenPdpError = exports.AUTHZEN_PDP_TRANSPORT = exports.AUTHZEN_POLICY_MODEL_HEADER = void 0;
|
|
16
16
|
const common_1 = require("@nestjs/common");
|
|
17
17
|
const authzen_1 = require("@xemahq/contracts/authzen");
|
|
18
|
-
const caller_context_1 = require("@xemahq/contracts/caller-context");
|
|
19
18
|
const service_registry_1 = require("@xemahq/contracts/service-registry");
|
|
20
19
|
const identity_client_1 = require("@xemahq/identity-client");
|
|
21
20
|
const service_registry_nest_1 = require("@xemahq/service-registry-nest");
|
|
21
|
+
const xema_service_nest_1 = require("@xemahq/xema-service-nest");
|
|
22
22
|
const authorization_options_1 = require("./authorization.options");
|
|
23
23
|
exports.AUTHZEN_POLICY_MODEL_HEADER = 'X-Xema-Policy-Model';
|
|
24
24
|
exports.AUTHZEN_PDP_TRANSPORT = Symbol('AUTHZEN_PDP_TRANSPORT');
|
|
@@ -40,6 +40,13 @@ class AuthzenCallerContextRequiredError extends AuthzenPdpError {
|
|
|
40
40
|
}
|
|
41
41
|
}
|
|
42
42
|
exports.AuthzenCallerContextRequiredError = AuthzenCallerContextRequiredError;
|
|
43
|
+
class AuthzenCallerOrgMismatchError extends AuthzenPdpError {
|
|
44
|
+
constructor(path) {
|
|
45
|
+
super(`authorization-api ${path} refused: the call's org is not the relayed caller's org.`, 403, 'caller_org_mismatch');
|
|
46
|
+
this.name = AuthzenCallerOrgMismatchError.name;
|
|
47
|
+
}
|
|
48
|
+
}
|
|
49
|
+
exports.AuthzenCallerOrgMismatchError = AuthzenCallerOrgMismatchError;
|
|
43
50
|
let HttpAuthzenPdpTransport = class HttpAuthzenPdpTransport {
|
|
44
51
|
registry;
|
|
45
52
|
identityBootstrap;
|
|
@@ -48,7 +55,9 @@ let HttpAuthzenPdpTransport = class HttpAuthzenPdpTransport {
|
|
|
48
55
|
this.registry = registry;
|
|
49
56
|
this.identityBootstrap = identityBootstrap;
|
|
50
57
|
this.options = options;
|
|
58
|
+
this.own = (0, xema_service_nest_1.ownTokenSourceFor)(this.identityBootstrap);
|
|
51
59
|
}
|
|
60
|
+
own;
|
|
52
61
|
evaluation(orgId, request, options) {
|
|
53
62
|
return this.post(orgId, authzen_1.AuthzenEndpointPath.Evaluation, request, authzen_1.AccessEvaluationResponseSchema, options);
|
|
54
63
|
}
|
|
@@ -65,22 +74,22 @@ let HttpAuthzenPdpTransport = class HttpAuthzenPdpTransport {
|
|
|
65
74
|
return this.post(orgId, authzen_1.AuthzenEndpointPath.SearchAction, request, authzen_1.ActionSearchResponseSchema, options);
|
|
66
75
|
}
|
|
67
76
|
async post(orgId, path, body, schema, options = {}) {
|
|
68
|
-
const
|
|
69
|
-
if (
|
|
77
|
+
const caller = options.forwardedCaller;
|
|
78
|
+
if (caller === undefined) {
|
|
70
79
|
throw new AuthzenCallerContextRequiredError(path);
|
|
71
80
|
}
|
|
72
|
-
|
|
81
|
+
if (orgId !== caller.orgId) {
|
|
82
|
+
throw new AuthzenCallerOrgMismatchError(path);
|
|
83
|
+
}
|
|
84
|
+
const baseUrl = await (0, service_registry_nest_1.resolveHttpUrl)(this.registry, service_registry_1.ServiceName.AUTHORIZATION_API);
|
|
73
85
|
const timeout = AbortSignal.timeout(this.options.requestTimeoutMs);
|
|
74
|
-
const
|
|
86
|
+
const init = await (0, xema_service_nest_1.peerCallInit)((0, xema_service_nest_1.peerAuthorityForCaller)(caller, this.own), service_registry_1.ServiceName.AUTHORIZATION_API, {
|
|
75
87
|
method: 'POST',
|
|
76
|
-
headers: {
|
|
77
|
-
...authorization,
|
|
78
|
-
'Content-Type': 'application/json',
|
|
79
|
-
...(orgId === null ? {} : { 'X-Xema-Org-Id': orgId }),
|
|
80
|
-
},
|
|
88
|
+
headers: { 'Content-Type': 'application/json' },
|
|
81
89
|
body: JSON.stringify(body),
|
|
82
90
|
signal: options.signal === undefined ? timeout : AbortSignal.any([options.signal, timeout]),
|
|
83
91
|
});
|
|
92
|
+
const response = await fetch(`${baseUrl.replace(/\/+$/, '')}${path}`, init);
|
|
84
93
|
const text = await response.text();
|
|
85
94
|
const parsed = parseJson(text);
|
|
86
95
|
if (response.ok) {
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"authzen.transport.js","sourceRoot":"","sources":["../src/authzen.transport.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;AAAA,2CAAoD;AACpD,uDAiBmC;
|
|
1
|
+
{"version":3,"file":"authzen.transport.js","sourceRoot":"","sources":["../src/authzen.transport.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;AAAA,2CAAoD;AACpD,uDAiBmC;AAEnC,yEAG4C;AAC5C,6DAAmE;AACnE,yEAGuC;AACvC,iEAImC;AAEnC,mEAGiC;AAsBpB,QAAA,2BAA2B,GAAG,qBAAqB,CAAC;AAkDpD,QAAA,qBAAqB,GAAG,MAAM,CAAC,uBAAuB,CAAC,CAAC;AAGrE,MAAa,eAAgB,SAAQ,KAAK;IAGtB;IACA;IAHlB,YACE,OAAe,EACC,MAAc,EACd,IAAwB;QAExC,KAAK,CAAC,OAAO,CAAC,CAAC;QAHC,WAAM,GAAN,MAAM,CAAQ;QACd,SAAI,GAAJ,IAAI,CAAoB;QAGxC,IAAI,CAAC,IAAI,GAAG,eAAe,CAAC,IAAI,CAAC;IACnC,CAAC;CACF;AATD,0CASC;AAOD,MAAa,iCAAkC,SAAQ,eAAe;IACpE,YAAmB,IAAY;QAC7B,KAAK,CACH,0BAA0B,IAAI,4DAA4D,EAC1F,GAAG,EACH,yBAAyB,CAC1B,CAAC;QACF,IAAI,CAAC,IAAI,GAAG,iCAAiC,CAAC,IAAI,CAAC;IACrD,CAAC;CACF;AATD,8EASC;AAMD,MAAa,6BAA8B,SAAQ,eAAe;IAChE,YAAmB,IAAY;QAC7B,KAAK,CACH,qBAAqB,IAAI,2DAA2D,EACpF,GAAG,EACH,qBAAqB,CACtB,CAAC;QACF,IAAI,CAAC,IAAI,GAAG,6BAA6B,CAAC,IAAI,CAAC;IACjD,CAAC;CACF;AATD,sEASC;AAGM,IAAM,uBAAuB,GAA7B,MAAM,uBAAuB;IAGf;IACA;IAEA;IALnB,YAEmB,QAAyB,EACzB,iBAA2C,EAE3C,OAAiC;QAHjC,aAAQ,GAAR,QAAQ,CAAiB;QACzB,sBAAiB,GAAjB,iBAAiB,CAA0B;QAE3C,YAAO,GAAP,OAAO,CAA0B;QAElD,IAAI,CAAC,GAAG,GAAG,IAAA,qCAAiB,EAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC;IACvD,CAAC;IAEgB,GAAG,CAAuC;IAEpD,UAAU,CACf,KAAoB,EACpB,OAAgC,EAChC,OAA+B;QAE/B,OAAO,IAAI,CAAC,IAAI,CACd,KAAK,EACL,6BAAmB,CAAC,UAAU,EAC9B,OAAO,EACP,wCAA8B,EAC9B,OAAO,CACR,CAAC;IACJ,CAAC;IAEM,WAAW,CAChB,KAAa,EACb,OAAiC,EACjC,OAA+B;QAE/B,OAAO,IAAI,CAAC,IAAI,CACd,KAAK,EACL,6BAAmB,CAAC,WAAW,EAC/B,OAAO,EACP,yCAA+B,EAC/B,OAAO,CACR,CAAC;IACJ,CAAC;IAEM,cAAc,CACnB,KAAa,EACb,OAA8B,EAC9B,OAA+B;QAE/B,OAAO,IAAI,CAAC,IAAI,CACd,KAAK,EACL,6BAAmB,CAAC,cAAc,EAClC,OAAO,EACP,sCAA4B,EAC5B,OAAO,CACR,CAAC;IACJ,CAAC;IAEM,aAAa,CAClB,KAAa,EACb,OAA6B,EAC7B,OAA+B;QAE/B,OAAO,IAAI,CAAC,IAAI,CACd,KAAK,EACL,6BAAmB,CAAC,aAAa,EACjC,OAAO,EACP,qCAA2B,EAC3B,OAAO,CACR,CAAC;IACJ,CAAC;IAEM,YAAY,CACjB,KAAa,EACb,OAA4B,EAC5B,OAA+B;QAE/B,OAAO,IAAI,CAAC,IAAI,CACd,KAAK,EACL,6BAAmB,CAAC,YAAY,EAChC,OAAO,EACP,oCAA0B,EAC1B,OAAO,CACR,CAAC;IACJ,CAAC;IAEO,KAAK,CAAC,IAAI,CAChB,KAAoB,EACpB,IAAyB,EACzB,IAAY,EACZ,MAAS,EACT,UAAiC,EAAE;QAMnC,MAAM,MAAM,GAAG,OAAO,CAAC,eAAe,CAAC;QACvC,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;YACzB,MAAM,IAAI,iCAAiC,CAAC,IAAI,CAAC,CAAC;QACpD,CAAC;QACD,IAAI,KAAK,KAAK,MAAM,CAAC,KAAK,EAAE,CAAC;YAC3B,MAAM,IAAI,6BAA6B,CAAC,IAAI,CAAC,CAAC;QAChD,CAAC;QACD,MAAM,OAAO,GAAG,MAAM,IAAA,sCAAc,EAClC,IAAI,CAAC,QAAQ,EACb,8BAAW,CAAC,iBAAiB,CAC9B,CAAC;QACF,MAAM,OAAO,GAAG,WAAW,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAC;QACnE,MAAM,IAAI,GAAG,MAAM,IAAA,gCAAY,EAC7B,IAAA,0CAAsB,EAAC,MAAM,EAAE,IAAI,CAAC,GAAG,CAAC,EACxC,8BAAW,CAAC,iBAAiB,EAC7B;YACE,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;YAC/C,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC;YAC1B,MAAM,EAAE,OAAO,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;SAC5F,CACF,CAAC;QACF,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,OAAO,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,GAAG,IAAI,EAAE,EAAE,IAAI,CAAC,CAAC;QAC5E,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;QACnC,MAAM,MAAM,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;QAC/B,IAAI,QAAQ,CAAC,EAAE,EAAE,CAAC;YAChB,OAAO,CAAC,aAAa,EAAE,CAAC,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,mCAA2B,CAAC,IAAI,SAAS,CAAC,CAAC;QAC1F,CAAC;QACD,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YACjB,MAAM,IAAI,eAAe,CACvB,0BAA0B,IAAI,qBAAqB,QAAQ,CAAC,MAAM,KAAK,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,EAAE,EAC5F,QAAQ,CAAC,MAAM,EACf,SAAS,CAAC,MAAM,CAAC,CAClB,CAAC;QACJ,CAAC;QAGD,MAAM,MAAM,GAAG,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;QACxC,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACpB,MAAM,IAAI,eAAe,CACvB,0BAA0B,IAAI,mDAAmD,MAAM,CAAC,KAAK,CAAC,OAAO,EAAE,EACvG,GAAG,EACH,SAAS,CACV,CAAC;QACJ,CAAC;QACD,OAAO,MAAM,CAAC,IAAI,CAAC;IACrB,CAAC;CACF,CAAA;AA7IY,0DAAuB;kCAAvB,uBAAuB;IADnC,IAAA,mBAAU,GAAE;IAGR,WAAA,IAAA,eAAM,EAAC,8CAAsB,CAAC,CAAA;IAG9B,WAAA,IAAA,eAAM,EAAC,kDAA0B,CAAC,CAAA;6CADC,0CAAwB;GAJnD,uBAAuB,CA6InC;AAED,SAAS,SAAS,CAAC,IAAY;IAC7B,IAAI,CAAC;QACH,OAAO,IAAI,KAAK,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAa,CAAC;IACjE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED,SAAS,SAAS,CAAC,IAAa;IAC9B,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,IAAI,IAAI,MAAM,IAAI,IAAI,EAAE,CAAC;QAChE,MAAM,IAAI,GAAG,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC;QACzB,OAAO,OAAO,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;IACrD,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC"}
|
|
@@ -105,7 +105,7 @@ export declare class DurableDelegationHolderClient {
|
|
|
105
105
|
revoke(orgId: string, delegationId: string): Promise<DurableDelegationView>;
|
|
106
106
|
supersede(orgId: string, delegationId: string, original?: unknown): Promise<DurableDelegationView>;
|
|
107
107
|
renewCarrier(orgId: string, delegationId: string): Promise<CarrierRenewalOutcome>;
|
|
108
|
-
|
|
108
|
+
mintContextFor(carrierId: string, receiver: string): Promise<string>;
|
|
109
109
|
mintDelegatedContext(params: {
|
|
110
110
|
delegationId: string;
|
|
111
111
|
audience?: string;
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"holder-client.d.ts","sourceRoot":"","sources":["../../src/durable-delegation/holder-client.ts"],"names":[],"mappings":"AACA,OAAO,
|
|
1
|
+
{"version":3,"file":"holder-client.d.ts","sourceRoot":"","sources":["../../src/durable-delegation/holder-client.ts"],"names":[],"mappings":"AACA,OAAO,EACL,KAAK,sBAAsB,EAE5B,MAAM,kCAAkC,CAAC;AAE1C,OAAO,EAEL,KAAK,eAAe,EACrB,MAAM,oCAAoC,CAAC;AAC5C,OAAO,EAAoB,wBAAwB,EAAE,KAAK,iBAAiB,EAAE,MAAM,yBAAyB,CAAC;AAgB7G,OAAO,EAAE,qBAAqB,EAA2B,MAAM,kBAAkB,CAAC;AAclF,oBAAY,0BAA0B;IACpC,IAAI,SAAS;IACb,GAAG,QAAQ;CACZ;AAGD,oBAAY,4BAA4B;IACtC,YAAY,iBAAiB;IAC7B,MAAM,WAAW;IACjB,OAAO,YAAY;IACnB,OAAO,YAAY;CACpB;AAGD,oBAAY,0BAA0B;IACpC,QAAQ,aAAa;IACrB,cAAc,oBAAoB;IAClC,aAAa,mBAAmB;IAChC,YAAY,kBAAkB;IAC9B,OAAO,YAAY;IAEnB,WAAW,iBAAiB;CAC7B;AAGD,oBAAY,0BAA0B;IACpC,eAAe,wCAAwC;IACvD,QAAQ,iCAAiC;IACzC,SAAS,kCAAkC;IAC3C,kBAAkB,2CAA2C;IAC7D,sBAAsB,gDAAgD;IACtE,cAAc,+CAA+C;IAC7D,kBAAkB,4CAA4C;IAE9D,mBAAmB,6CAA6C;IAChE,qBAAqB,wCAAwC;IAE7D,4BAA4B,+CAA+C;IAC3E,YAAY,8BAA8B;IAE1C,KAAK,6BAA6B;IAElC,iBAAiB,2CAA2C;IAE5D,8BAA8B,0DAA0D;IAExF,wBAAwB,0CAA0C;IAElE,2BAA2B,6CAA6C;CACzE;AASD,MAAM,WAAW,+BAA+B;IAE9C,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAE5B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAE1B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAE5B,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAO/B,QAAQ,CAAC,YAAY,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAE1C,QAAQ,CAAC,WAAW,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;CAC1C;AAMD,MAAM,WAAW,4BAA4B;IAE3C,QAAQ,CAAC,KAAK,EAAE,SAAS,MAAM,EAAE,CAAC;IAElC,QAAQ,CAAC,YAAY,EAAE,SAAS,MAAM,EAAE,CAAC;IAEzC,QAAQ,CAAC,WAAW,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAEzC,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC;IAE/B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAE5B,QAAQ,CAAC,SAAS,CAAC,EAAE,IAAI,CAAC;CAC3B;AAGD,MAAM,WAAW,qBAAqB;IACpC,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,KAAK,EAAE,4BAA4B,CAAC;IAC7C,QAAQ,CAAC,SAAS,CAAC,EAAE,0BAA0B,CAAC;IAChD,QAAQ,CAAC,KAAK,EAAE;QAAE,QAAQ,CAAC,IAAI,EAAE,0BAA0B,CAAC;QAAC,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAA;KAAE,CAAC;IACnF,QAAQ,CAAC,KAAK,EAAE,SAAS,MAAM,EAAE,CAAC;IAClC,QAAQ,CAAC,YAAY,EAAE,SAAS,MAAM,EAAE,CAAC;IACzC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAE1B,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAE3B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IAExB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IAEvB,QAAQ,CAAC,WAAW,EAAE,SAAS,MAAM,EAAE,CAAC;IACxC,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAEhC,QAAQ,CAAC,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAEpC,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,UAAU,CAAC,EAAE;QACpB,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;QACpB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;QACvB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;QACvB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;KACxB,CAAC;CACH;AAMD,MAAM,WAAW,8BAA8B;IAC7C,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAE3B,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAC;IAKlC,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAC;CAClC;AAED,qBAAa,6BAA8B,SAAQ,KAAK;aAGpC,MAAM,EAAE,MAAM;aACd,IAAI,EAAE,MAAM,GAAG,SAAS;gBAFxC,OAAO,EAAE,MAAM,EACC,MAAM,EAAE,MAAM,EACd,IAAI,EAAE,MAAM,GAAG,SAAS;CAK3C;AAkBD,qBACa,6BAA6B;IAIN,OAAO,CAAC,QAAQ,CAAC,QAAQ;IACzD,OAAO,CAAC,QAAQ,CAAC,QAAQ;IAJ3B,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAkD;gBAGtB,QAAQ,EAAE,eAAe,EACzD,QAAQ,EAAE,wBAAwB;IAGxC,SAAS,CACpB,MAAM,EAAE,sBAAsB,EAC9B,KAAK,EAAE,+BAA+B,GACrC,OAAO,CAAC,qBAAqB,CAAC;IAyDpB,WAAW,CACtB,KAAK,EAAE,MAAM,EACb,QAAQ,EAAE,MAAM,EAChB,OAAO,EAAE,4BAA4B,GACpC,OAAO,CAAC,qBAAqB,CAAC;IA+BpB,IAAI,CAAC,KAAK,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,GAAG,OAAO,CAAC,qBAAqB,CAAC;IASzE,MAAM,CAAC,KAAK,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,GAAG,OAAO,CAAC,qBAAqB,CAAC;IAkB3E,SAAS,CAAC,KAAK,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,OAAO,GAAG,OAAO,CAAC,qBAAqB,CAAC;IAmClG,YAAY,CAAC,KAAK,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,GAAG,OAAO,CAAC,qBAAqB,CAAC;IAwCjF,cAAc,CAAC,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAa1E,oBAAoB,CAAC,MAAM,EAAE;QAClC,YAAY,EAAE,MAAM,CAAC;QACrB,QAAQ,CAAC,EAAE,MAAM,CAAC;QAClB,KAAK,CAAC,EAAE,MAAM,CAAC;KAChB,GAAG,OAAO,CAAC,iBAAiB,CAAC;YAIhB,YAAY;YAqDZ,oBAAoB;YAapB,SAAS;YA2BT,mBAAmB;YAenB,cAAc;YAId,IAAI;CA8BnB"}
|
|
@@ -20,6 +20,7 @@ const http_1 = require("@xemahq/contracts/http");
|
|
|
20
20
|
const service_registry_1 = require("@xemahq/contracts/service-registry");
|
|
21
21
|
const identity_client_1 = require("@xemahq/identity-client");
|
|
22
22
|
const service_registry_nest_1 = require("@xemahq/service-registry-nest");
|
|
23
|
+
const xema_service_nest_1 = require("@xemahq/xema-service-nest");
|
|
23
24
|
const carrier_shape_1 = require("./carrier-shape");
|
|
24
25
|
const carrier_window_1 = require("./carrier-window");
|
|
25
26
|
const holder_errors_1 = require("./holder-errors");
|
|
@@ -74,7 +75,6 @@ class DurableDelegationRequestError extends Error {
|
|
|
74
75
|
}
|
|
75
76
|
}
|
|
76
77
|
exports.DurableDelegationRequestError = DurableDelegationRequestError;
|
|
77
|
-
const DELEGATED_CONTEXT_AUDIENCE = service_registry_1.ServiceName.XEMA_CAPABILITY_ROUTER;
|
|
78
78
|
let DurableDelegationHolderClient = DurableDelegationHolderClient_1 = class DurableDelegationHolderClient {
|
|
79
79
|
registry;
|
|
80
80
|
identity;
|
|
@@ -84,9 +84,15 @@ let DurableDelegationHolderClient = DurableDelegationHolderClient_1 = class Dura
|
|
|
84
84
|
this.identity = identity;
|
|
85
85
|
}
|
|
86
86
|
async originate(author, input) {
|
|
87
|
-
|
|
88
|
-
|
|
89
|
-
|
|
87
|
+
const relay = new Headers((await (0, xema_service_nest_1.peerCallInit)((0, xema_service_nest_1.peerAuthorityForCaller)(author, (0, xema_service_nest_1.ownTokenSourceFor)(this.identity)), service_registry_1.ServiceName.AUTHORIZATION_API)).headers);
|
|
88
|
+
const relayed = {};
|
|
89
|
+
for (const name of ['Authorization', 'X-Xema-Presenter-Context']) {
|
|
90
|
+
const value = relay.get(name);
|
|
91
|
+
if (value !== null) {
|
|
92
|
+
relayed[name] = value;
|
|
93
|
+
}
|
|
94
|
+
}
|
|
95
|
+
return this.send('POST', '/durable-delegations/originate', author.orgId, relayed, {
|
|
90
96
|
anchorType: input.anchorType,
|
|
91
97
|
anchorId: input.anchorId,
|
|
92
98
|
requestKey: input.requestKey,
|
|
@@ -164,10 +170,10 @@ let DurableDelegationHolderClient = DurableDelegationHolderClient_1 = class Dura
|
|
|
164
170
|
await this.reportCarrierWindow(orgId, view.id, carrierId, renewed.expiresAt ?? plan.expiresAt.toISOString());
|
|
165
171
|
return carrier_window_1.CarrierRenewalOutcome.Renewed;
|
|
166
172
|
}
|
|
167
|
-
async
|
|
173
|
+
async mintContextFor(carrierId, receiver) {
|
|
168
174
|
const minted = await this.mintDelegatedContext({
|
|
169
175
|
delegationId: carrierId,
|
|
170
|
-
audience:
|
|
176
|
+
audience: (0, caller_context_1.receiverAudienceOf)(receiver),
|
|
171
177
|
});
|
|
172
178
|
return minted.accessToken;
|
|
173
179
|
}
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"holder-client.js","sourceRoot":"","sources":["../../src/durable-delegation/holder-client.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,2CAA4D;AAC5D,qEAG0C;AAC1C,iDAAwE;AACxE,yEAG4C;AAC5C,6DAA6G;AAC7G,yEAGuC;AAEvC,mDAIyB;AACzB,qDAAkF;AAClF,mDAMyB;AAOzB,IAAY,0BAGX;AAHD,WAAY,0BAA0B;IACpC,2CAAa,CAAA;IACb,yCAAW,CAAA;AACb,CAAC,EAHW,0BAA0B,0CAA1B,0BAA0B,QAGrC;AAGD,IAAY,4BAKX;AALD,WAAY,4BAA4B;IACtC,6DAA6B,CAAA;IAC7B,iDAAiB,CAAA;IACjB,mDAAmB,CAAA;IACnB,mDAAmB,CAAA;AACrB,CAAC,EALW,4BAA4B,4CAA5B,4BAA4B,QAKvC;AAGD,IAAY,0BAQX;AARD,WAAY,0BAA0B;IACpC,mDAAqB,CAAA;IACrB,gEAAkC,CAAA;IAClC,8DAAgC,CAAA;IAChC,4DAA8B,CAAA;IAC9B,iDAAmB,CAAA;IAEnB,0DAA4B,CAAA;AAC9B,CAAC,EARW,0BAA0B,0CAA1B,0BAA0B,QAQrC;AAGD,IAAY,0BAwBX;AAxBD,WAAY,0BAA0B;IACpC,qFAAuD,CAAA;IACvD,uEAAyC,CAAA;IACzC,yEAA2C,CAAA;IAC3C,2FAA6D,CAAA;IAC7D,oGAAsE,CAAA;IACtE,2FAA6D,CAAA;IAC7D,4FAA8D,CAAA;IAE9D,8FAAgE,CAAA;IAChE,2FAA6D,CAAA;IAE7D,yGAA2E,CAAA;IAC3E,wEAA0C,CAAA;IAE1C,gEAAkC,CAAA;IAElC,0FAA4D,CAAA;IAE5D,sHAAwF,CAAA;IAExF,gGAAkE,CAAA;IAElE,sGAAwE,CAAA;AAC1E,CAAC,EAxBW,0BAA0B,0CAA1B,0BAA0B,QAwBrC;AAkGD,MAAa,6BAA8B,SAAQ,KAAK;IAGpC;IACA;IAHlB,YACE,OAAe,EACC,MAAc,EACd,IAAwB;QAExC,KAAK,CAAC,OAAO,CAAC,CAAC;QAHC,WAAM,GAAN,MAAM,CAAQ;QACd,SAAI,GAAJ,IAAI,CAAoB;QAGxC,IAAI,CAAC,IAAI,GAAG,+BAA+B,CAAC;IAC9C,CAAC;CACF;AATD,sEASC;AAGD,MAAM,0BAA0B,GAAG,8BAAW,CAAC,sBAAsB,CAAC;AAmB/D,IAAM,6BAA6B,qCAAnC,MAAM,6BAA6B;IAIW;IAChC;IAJF,MAAM,GAAG,IAAI,eAAM,CAAC,+BAA6B,CAAC,IAAI,CAAC,CAAC;IAEzE,YACmD,QAAyB,EACzD,QAAkC;QADF,aAAQ,GAAR,QAAQ,CAAiB;QACzD,aAAQ,GAAR,QAAQ,CAA0B;IAClD,CAAC;IAEG,KAAK,CAAC,SAAS,CACpB,MAA8B,EAC9B,KAAsC;QAEtC,OAAO,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,gCAAgC,EAAE,MAAM,CAAC,KAAK,EAAE;YACvE,GAAG,CAAC,MAAM,IAAA,uCAAsB,EAAC,MAAM,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC;SACzD,EAAE;YACD,UAAU,EAAE,KAAK,CAAC,UAAU;YAC5B,QAAQ,EAAE,KAAK,CAAC,QAAQ;YACxB,UAAU,EAAE,KAAK,CAAC,UAAU;YAC5B,aAAa,EAAE,KAAK,CAAC,aAAa;YAClC,GAAG,CAAC,KAAK,CAAC,YAAY,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,CAAC,GAAG,KAAK,CAAC,YAAY,CAAC,EAAE,CAAC;YACtF,GAAG,CAAC,KAAK,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC,GAAG,KAAK,CAAC,WAAW,CAAC,EAAE,CAAC;SACpF,CAAC,CAAC;IACL,CAAC;IAiCM,KAAK,CAAC,WAAW,CACtB,KAAa,EACb,QAAgB,EAChB,OAAqC;QAErC,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC;QAC7D,IAAI,KAAK,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;YAClC,OAAO,KAAK,CAAC;QACf,CAAC;QACD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;QAChD,IAAI,MAAM,CAAC,KAAK,KAAK,4BAA4B,CAAC,MAAM,EAAE,CAAC;YACzD,MAAM,IAAI,oCAAoB,CAAC,MAAM,CAAC,EAAE,EAAE,MAAM,CAAC,SAAS,CAAC,CAAC;QAC9D,CAAC;QACD,IAAI,MAAM,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;YAGnC,MAAM,IAAI,uCAAuB,CAAC,wCAAwB,CAAC,aAAa,EAAE,sBAAsB,MAAM,CAAC,EAAE,EAAE,CAAC,CAAC;QAC/G,CAAC;QACD,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,gBAAgB,CAAC;YACnD,QAAQ,EAAE,MAAM,CAAC,SAAS;YAC1B,cAAc,EAAE,KAAK;YACrB,gBAAgB,EAAE,KAAK,CAAC,cAAc;YACtC,GAAG,CAAC,OAAO,CAAC,YAAY,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,OAAO,CAAC,YAAY,EAAE,CAAC;YACvF,YAAY,EAAE,CAAC,GAAG,KAAK,CAAC,YAAY,CAAC;YACrC,uBAAuB,EAAE,CAAC,GAAG,KAAK,CAAC,WAAW,CAAC;YAC/C,aAAa,EAAE,CAAC,GAAG,KAAK,CAAC,KAAK,EAAE,IAAA,2CAA2B,EAAC,KAAK,CAAC,MAAM,CAAC,CAAC;YAC1E,KAAK,EAAE,IAAA,sCAAsB,EAAC,KAAK,CAAC,EAAE,CAAC;YACvC,iBAAiB,EAAE,+CAA+B;YAElD,SAAS,EAAE,IAAI;YACf,GAAG,CAAC,KAAK,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,CAAC;SACzE,CAAC,CAAC;QACH,OAAO,IAAI,CAAC,YAAY,CAAC,KAAK,EAAE,QAAQ,EAAE,OAAO,EAAE,KAAK,CAAC,EAAE,EAAE,OAAO,CAAC,EAAE,CAAC,CAAC;IAC3E,CAAC;IAEM,KAAK,CAAC,IAAI,CAAC,KAAa,EAAE,YAAoB;QACnD,OAAO,IAAI,CAAC,IAAI,CACd,KAAK,EACL,iCAAiC,kBAAkB,CAAC,YAAY,CAAC,EAAE,EACnE,KAAK,EACL,MAAM,IAAI,CAAC,cAAc,EAAE,CAC5B,CAAC;IACJ,CAAC;IAEM,KAAK,CAAC,MAAM,CAAC,KAAa,EAAE,YAAoB;QACrD,OAAO,IAAI,CAAC,IAAI,CACd,MAAM,EACN,iCAAiC,kBAAkB,CAAC,YAAY,CAAC,SAAS,EAC1E,KAAK,EACL,MAAM,IAAI,CAAC,cAAc,EAAE,CAC5B,CAAC;IACJ,CAAC;IAWM,KAAK,CAAC,SAAS,CAAC,KAAa,EAAE,YAAoB,EAAE,QAAkB;QAC5E,IAAI,CAAC;YACH,OAAO,MAAM,IAAI,CAAC,IAAI,CACpB,MAAM,EACN,iCAAiC,kBAAkB,CAAC,YAAY,CAAC,YAAY,EAC7E,KAAK,EACL,MAAM,IAAI,CAAC,cAAc,EAAE,CAC5B,CAAC;QACJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,IAAI,8CAA8B,CAAC,YAAY,EAAE,QAAQ,EAAE,KAAK,CAAC,CAAC;QAC1E,CAAC;IACH,CAAC;IAwBM,KAAK,CAAC,YAAY,CAAC,KAAa,EAAE,YAAoB;QAC3D,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,YAAY,CAAC,CAAC;QAClD,IAAI,IAAI,CAAC,KAAK,KAAK,4BAA4B,CAAC,OAAO,IAAI,IAAI,CAAC,KAAK,KAAK,4BAA4B,CAAC,OAAO,EAAE,CAAC;YAC/G,MAAM,IAAI,oCAAoB,CAAC,IAAI,CAAC,EAAE,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC;QAC1D,CAAC;QACD,IAAI,IAAI,CAAC,KAAK,KAAK,4BAA4B,CAAC,MAAM,IAAI,IAAI,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;YACvF,MAAM,IAAI,uCAAuB,CAAC,wCAAwB,CAAC,aAAa,EAAE,sBAAsB,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC;QAC7G,CAAC;QACD,IAAI,IAAI,CAAC,QAAQ,KAAK,SAAS,EAAE,CAAC;YAChC,OAAO,sCAAqB,CAAC,yBAAyB,CAAC;QACzD,CAAC;QACD,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,CAAC;QACjC,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,aAAa,CAAC,SAAS,CAAC,CAAC;QAC7D,IAAI,OAAO,CAAC,MAAM,KAAK,kCAAgB,CAAC,MAAM,EAAE,CAAC;YAC/C,MAAM,IAAI,wCAAwB,CAAC,IAAI,CAAC,EAAE,EAAE,eAAe,SAAS,OAAO,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;QAC/F,CAAC;QACD,IAAI,OAAO,CAAC,SAAS,KAAK,IAAI,EAAE,CAAC;YAC/B,OAAO,sCAAqB,CAAC,MAAM,CAAC;QACtC,CAAC;QACD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,mBAAmB,CAAC,KAAK,EAAE,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,OAAO,CAAC,SAAS,CAAC,CAAC;QAC5F,MAAM,IAAI,GAAG,IAAA,wCAAuB,EAClC,IAAI,IAAI,EAAE,EACV,IAAI,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,EAC3B,MAAM,CAAC,cAAc,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,MAAM,CAAC,cAAc,CAAC,CAClF,CAAC;QACF,IAAI,IAAI,CAAC,OAAO,KAAK,sCAAqB,CAAC,OAAO,EAAE,CAAC;YACnD,OAAO,IAAI,CAAC,OAAO,CAAC;QACtB,CAAC;QACD,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,eAAe,CAAC,SAAS,EAAE,IAAI,CAAC,SAAS,CAAC,WAAW,EAAE,CAAC,CAAC;QAC7F,MAAM,IAAI,CAAC,mBAAmB,CAAC,KAAK,EAAE,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,OAAO,CAAC,SAAS,IAAI,IAAI,CAAC,SAAS,CAAC,WAAW,EAAE,CAAC,CAAC;QAC7G,OAAO,sCAAqB,CAAC,OAAO,CAAC;IACvC,CAAC;IAOM,KAAK,CAAC,WAAW,CAAC,SAAiB;QACxC,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,oBAAoB,CAAC;YAC7C,YAAY,EAAE,SAAS;YACvB,QAAQ,EAAE,0BAA0B;SACrC,CAAC,CAAC;QACH,OAAO,MAAM,CAAC,WAAW,CAAC;IAC5B,CAAC;IAOM,oBAAoB,CAAC,MAI3B;QACC,OAAO,IAAI,CAAC,QAAQ,CAAC,oBAAoB,CAAC,MAAM,CAAC,CAAC;IACpD,CAAC;IAEO,KAAK,CAAC,YAAY,CACxB,KAAa,EACb,QAAgB,EAChB,OAAqC,EACrC,OAAe,EACf,SAAiB;QAEjB,IAAI,CAAC;YACH,OAAO,MAAM,IAAI,CAAC,IAAI,CACpB,MAAM,EACN,iCAAiC,kBAAkB,CAAC,OAAO,CAAC,UAAU,EACtE,KAAK,EACL,MAAM,IAAI,CAAC,cAAc,EAAE,EAC3B,EAAE,SAAS,EAAE,CACd,CAAC;QACJ,CAAC;QAAC,OAAO,SAAS,EAAE,CAAC;YACnB,IAAI,SAAS,YAAY,6BAA6B,IAAI,SAAS,CAAC,IAAI,KAAK,0BAA0B,CAAC,mBAAmB,EAAE,CAAC;gBAE5H,MAAM,SAAS,CAAC;YAClB,CAAC;YACD,IAAI,OAA8B,CAAC;YACnC,IAAI,CAAC;gBACH,OAAO,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC;YAC3D,CAAC;YAAC,OAAO,WAAW,EAAE,CAAC;gBACrB,IAAI,WAAW,YAAY,6BAA6B,IAAI,WAAW,CAAC,IAAI,KAAK,0BAA0B,CAAC,KAAK,EAAE,CAAC;oBAClH,MAAM,IAAI,CAAC,oBAAoB,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;oBACpD,MAAM,WAAW,CAAC;gBACpB,CAAC;gBACD,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC;oBAChB,OAAO,EAAE,8CAA8C;oBACvD,OAAO;oBACP,SAAS;oBACT,KAAK,EAAE,SAAS,YAAY,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC;iBAC1E,CAAC,CAAC;gBACH,MAAM,SAAS,CAAC;YAClB,CAAC;YACD,IAAI,OAAO,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;gBACpC,OAAO,OAAO,CAAC;YACjB,CAAC;YACD,MAAM,IAAI,CAAC,oBAAoB,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;YACpD,IAAI,OAAO,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;gBACpC,OAAO,OAAO,CAAC;YACjB,CAAC;YACD,MAAM,SAAS,CAAC;QAClB,CAAC;IACH,CAAC;IAQO,KAAK,CAAC,oBAAoB,CAAC,OAAe,EAAE,SAAiB;QACnE,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,QAAQ,CAAC,gBAAgB,CAAC,SAAS,CAAC,CAAC;QAClD,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC;gBAChB,OAAO,EAAE,gDAAgD;gBACzD,OAAO;gBACP,SAAS;gBACT,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;aAC9D,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,SAAS,CACrB,KAAa,EACb,QAAgB,EAChB,OAAqC;QAErC,OAAO,IAAI,CAAC,IAAI,CACd,MAAM,EACN,iCAAiC,kBAAkB,CAAC,QAAQ,CAAC,WAAW,EACxE,KAAK,EACL,MAAM,IAAI,CAAC,cAAc,EAAE,EAC3B;YACE,KAAK,EAAE,CAAC,GAAG,OAAO,CAAC,KAAK,CAAC;YACzB,YAAY,EAAE,CAAC,GAAG,OAAO,CAAC,YAAY,CAAC;YACvC,GAAG,CAAC,OAAO,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC,GAAG,OAAO,CAAC,WAAW,CAAC,EAAE,CAAC;YACvF,cAAc,EAAE,OAAO,CAAC,cAAc;YACtC,GAAG,CAAC,OAAO,CAAC,YAAY,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,OAAO,CAAC,YAAY,EAAE,CAAC;YACrF,UAAU,EAAE,OAAO,CAAC,UAAU;YAC9B,GAAG,CAAC,OAAO,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,OAAO,CAAC,SAAS,CAAC,WAAW,EAAE,EAAE,CAAC;SAC3F,CACF,CAAC;IACJ,CAAC;IAOO,KAAK,CAAC,mBAAmB,CAC/B,KAAa,EACb,YAAoB,EACpB,SAAiB,EACjB,SAAiB;QAEjB,OAAO,IAAI,CAAC,IAAI,CACd,MAAM,EACN,iCAAiC,kBAAkB,CAAC,YAAY,CAAC,iBAAiB,EAClF,KAAK,EACL,MAAM,IAAI,CAAC,cAAc,EAAE,EAC3B,EAAE,SAAS,EAAE,SAAS,EAAE,CACzB,CAAC;IACJ,CAAC;IAEO,KAAK,CAAC,cAAc;QAC1B,OAAO,EAAE,aAAa,EAAE,UAAU,MAAM,IAAI,CAAC,QAAQ,CAAC,cAAc,EAAE,EAAE,EAAE,CAAC;IAC7E,CAAC;IAEO,KAAK,CAAC,IAAI,CAChB,MAAsB,EACtB,IAAY,EACZ,KAAa,EACb,OAA+B,EAC/B,IAAc;QAEd,MAAM,OAAO,GAAG,MAAM,IAAA,sCAAc,EAAC,IAAI,CAAC,QAAQ,EAAE,8BAAW,CAAC,iBAAiB,CAAC,CAAC;QACnF,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,OAAO,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,GAAG,IAAI,EAAE,EAAE;YACpE,MAAM;YACN,OAAO,EAAE;gBACP,GAAG,OAAO;gBACV,eAAe,EAAE,KAAK;gBACtB,GAAG,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC;aACtE;YACD,GAAG,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC;SAC9D,CAAC,CAAC;QACH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YACjB,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;YACnC,MAAM,IAAI,6BAA6B,CACrC,qBAAqB,MAAM,IAAI,IAAI,qBAAqB,QAAQ,CAAC,MAAM,KAAK,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,EAAE,EACjG,QAAQ,CAAC,MAAM,EACf,MAAM,CAAC,IAAI,CAAC,CACb,CAAC;QACJ,CAAC;QACD,OAAO,IAAA,qCAA8B,EACnC,MAAM,QAAQ,CAAC,IAAI,EAAE,EACrB,qBAAqB,MAAM,IAAI,IAAI,EAAE,CACtC,CAAC;IACJ,CAAC;CACF,CAAA;AAjWY,sEAA6B;wCAA7B,6BAA6B;IADzC,IAAA,mBAAU,GAAE;IAKR,WAAA,IAAA,eAAM,EAAC,8CAAsB,CAAC,CAAA;6CACJ,0CAAwB;GAL1C,6BAA6B,CAiWzC;AAED,SAAS,MAAM,CAAC,IAAY;IAC1B,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAuB,CAAC;QACtD,OAAO,OAAO,MAAM,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;IACnE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC"}
|
|
1
|
+
{"version":3,"file":"holder-client.js","sourceRoot":"","sources":["../../src/durable-delegation/holder-client.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,2CAA4D;AAC5D,qEAG0C;AAC1C,iDAAwE;AACxE,yEAG4C;AAC5C,6DAA6G;AAC7G,yEAGuC;AACvC,iEAImC;AAEnC,mDAIyB;AACzB,qDAAkF;AAClF,mDAMyB;AAOzB,IAAY,0BAGX;AAHD,WAAY,0BAA0B;IACpC,2CAAa,CAAA;IACb,yCAAW,CAAA;AACb,CAAC,EAHW,0BAA0B,0CAA1B,0BAA0B,QAGrC;AAGD,IAAY,4BAKX;AALD,WAAY,4BAA4B;IACtC,6DAA6B,CAAA;IAC7B,iDAAiB,CAAA;IACjB,mDAAmB,CAAA;IACnB,mDAAmB,CAAA;AACrB,CAAC,EALW,4BAA4B,4CAA5B,4BAA4B,QAKvC;AAGD,IAAY,0BAQX;AARD,WAAY,0BAA0B;IACpC,mDAAqB,CAAA;IACrB,gEAAkC,CAAA;IAClC,8DAAgC,CAAA;IAChC,4DAA8B,CAAA;IAC9B,iDAAmB,CAAA;IAEnB,0DAA4B,CAAA;AAC9B,CAAC,EARW,0BAA0B,0CAA1B,0BAA0B,QAQrC;AAGD,IAAY,0BAwBX;AAxBD,WAAY,0BAA0B;IACpC,qFAAuD,CAAA;IACvD,uEAAyC,CAAA;IACzC,yEAA2C,CAAA;IAC3C,2FAA6D,CAAA;IAC7D,oGAAsE,CAAA;IACtE,2FAA6D,CAAA;IAC7D,4FAA8D,CAAA;IAE9D,8FAAgE,CAAA;IAChE,2FAA6D,CAAA;IAE7D,yGAA2E,CAAA;IAC3E,wEAA0C,CAAA;IAE1C,gEAAkC,CAAA;IAElC,0FAA4D,CAAA;IAE5D,sHAAwF,CAAA;IAExF,gGAAkE,CAAA;IAElE,sGAAwE,CAAA;AAC1E,CAAC,EAxBW,0BAA0B,0CAA1B,0BAA0B,QAwBrC;AAkGD,MAAa,6BAA8B,SAAQ,KAAK;IAGpC;IACA;IAHlB,YACE,OAAe,EACC,MAAc,EACd,IAAwB;QAExC,KAAK,CAAC,OAAO,CAAC,CAAC;QAHC,WAAM,GAAN,MAAM,CAAQ;QACd,SAAI,GAAJ,IAAI,CAAoB;QAGxC,IAAI,CAAC,IAAI,GAAG,+BAA+B,CAAC;IAC9C,CAAC;CACF;AATD,sEASC;AAmBM,IAAM,6BAA6B,qCAAnC,MAAM,6BAA6B;IAIW;IAChC;IAJF,MAAM,GAAG,IAAI,eAAM,CAAC,+BAA6B,CAAC,IAAI,CAAC,CAAC;IAEzE,YACmD,QAAyB,EACzD,QAAkC;QADF,aAAQ,GAAR,QAAQ,CAAiB;QACzD,aAAQ,GAAR,QAAQ,CAA0B;IAClD,CAAC;IAEG,KAAK,CAAC,SAAS,CACpB,MAA8B,EAC9B,KAAsC;QAItC,MAAM,KAAK,GAAG,IAAI,OAAO,CACvB,CACE,MAAM,IAAA,gCAAY,EAChB,IAAA,0CAAsB,EAAC,MAAM,EAAE,IAAA,qCAAiB,EAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,EAChE,8BAAW,CAAC,iBAAiB,CAC9B,CACF,CAAC,OAAO,CACV,CAAC;QACF,MAAM,OAAO,GAA2B,EAAE,CAAC;QAC3C,KAAK,MAAM,IAAI,IAAI,CAAC,eAAe,EAAE,0BAA0B,CAAC,EAAE,CAAC;YACjE,MAAM,KAAK,GAAG,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YAC9B,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;gBAAA,OAAO,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC;YAAA,CAAC;QAC9C,CAAC;QACD,OAAO,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,gCAAgC,EAAE,MAAM,CAAC,KAAK,EAAE,OAAO,EAAE;YAChF,UAAU,EAAE,KAAK,CAAC,UAAU;YAC5B,QAAQ,EAAE,KAAK,CAAC,QAAQ;YACxB,UAAU,EAAE,KAAK,CAAC,UAAU;YAC5B,aAAa,EAAE,KAAK,CAAC,aAAa;YAClC,GAAG,CAAC,KAAK,CAAC,YAAY,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,CAAC,GAAG,KAAK,CAAC,YAAY,CAAC,EAAE,CAAC;YACtF,GAAG,CAAC,KAAK,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC,GAAG,KAAK,CAAC,WAAW,CAAC,EAAE,CAAC;SACpF,CAAC,CAAC;IACL,CAAC;IAiCM,KAAK,CAAC,WAAW,CACtB,KAAa,EACb,QAAgB,EAChB,OAAqC;QAErC,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC;QAC7D,IAAI,KAAK,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;YAClC,OAAO,KAAK,CAAC;QACf,CAAC;QACD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;QAChD,IAAI,MAAM,CAAC,KAAK,KAAK,4BAA4B,CAAC,MAAM,EAAE,CAAC;YACzD,MAAM,IAAI,oCAAoB,CAAC,MAAM,CAAC,EAAE,EAAE,MAAM,CAAC,SAAS,CAAC,CAAC;QAC9D,CAAC;QACD,IAAI,MAAM,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;YAGnC,MAAM,IAAI,uCAAuB,CAAC,wCAAwB,CAAC,aAAa,EAAE,sBAAsB,MAAM,CAAC,EAAE,EAAE,CAAC,CAAC;QAC/G,CAAC;QACD,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,gBAAgB,CAAC;YACnD,QAAQ,EAAE,MAAM,CAAC,SAAS;YAC1B,cAAc,EAAE,KAAK;YACrB,gBAAgB,EAAE,KAAK,CAAC,cAAc;YACtC,GAAG,CAAC,OAAO,CAAC,YAAY,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,OAAO,CAAC,YAAY,EAAE,CAAC;YACvF,YAAY,EAAE,CAAC,GAAG,KAAK,CAAC,YAAY,CAAC;YACrC,uBAAuB,EAAE,CAAC,GAAG,KAAK,CAAC,WAAW,CAAC;YAC/C,aAAa,EAAE,CAAC,GAAG,KAAK,CAAC,KAAK,EAAE,IAAA,2CAA2B,EAAC,KAAK,CAAC,MAAM,CAAC,CAAC;YAC1E,KAAK,EAAE,IAAA,sCAAsB,EAAC,KAAK,CAAC,EAAE,CAAC;YACvC,iBAAiB,EAAE,+CAA+B;YAElD,SAAS,EAAE,IAAI;YACf,GAAG,CAAC,KAAK,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,CAAC;SACzE,CAAC,CAAC;QACH,OAAO,IAAI,CAAC,YAAY,CAAC,KAAK,EAAE,QAAQ,EAAE,OAAO,EAAE,KAAK,CAAC,EAAE,EAAE,OAAO,CAAC,EAAE,CAAC,CAAC;IAC3E,CAAC;IAEM,KAAK,CAAC,IAAI,CAAC,KAAa,EAAE,YAAoB;QACnD,OAAO,IAAI,CAAC,IAAI,CACd,KAAK,EACL,iCAAiC,kBAAkB,CAAC,YAAY,CAAC,EAAE,EACnE,KAAK,EACL,MAAM,IAAI,CAAC,cAAc,EAAE,CAC5B,CAAC;IACJ,CAAC;IAEM,KAAK,CAAC,MAAM,CAAC,KAAa,EAAE,YAAoB;QACrD,OAAO,IAAI,CAAC,IAAI,CACd,MAAM,EACN,iCAAiC,kBAAkB,CAAC,YAAY,CAAC,SAAS,EAC1E,KAAK,EACL,MAAM,IAAI,CAAC,cAAc,EAAE,CAC5B,CAAC;IACJ,CAAC;IAWM,KAAK,CAAC,SAAS,CAAC,KAAa,EAAE,YAAoB,EAAE,QAAkB;QAC5E,IAAI,CAAC;YACH,OAAO,MAAM,IAAI,CAAC,IAAI,CACpB,MAAM,EACN,iCAAiC,kBAAkB,CAAC,YAAY,CAAC,YAAY,EAC7E,KAAK,EACL,MAAM,IAAI,CAAC,cAAc,EAAE,CAC5B,CAAC;QACJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,IAAI,8CAA8B,CAAC,YAAY,EAAE,QAAQ,EAAE,KAAK,CAAC,CAAC;QAC1E,CAAC;IACH,CAAC;IAwBM,KAAK,CAAC,YAAY,CAAC,KAAa,EAAE,YAAoB;QAC3D,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,YAAY,CAAC,CAAC;QAClD,IAAI,IAAI,CAAC,KAAK,KAAK,4BAA4B,CAAC,OAAO,IAAI,IAAI,CAAC,KAAK,KAAK,4BAA4B,CAAC,OAAO,EAAE,CAAC;YAC/G,MAAM,IAAI,oCAAoB,CAAC,IAAI,CAAC,EAAE,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC;QAC1D,CAAC;QACD,IAAI,IAAI,CAAC,KAAK,KAAK,4BAA4B,CAAC,MAAM,IAAI,IAAI,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;YACvF,MAAM,IAAI,uCAAuB,CAAC,wCAAwB,CAAC,aAAa,EAAE,sBAAsB,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC;QAC7G,CAAC;QACD,IAAI,IAAI,CAAC,QAAQ,KAAK,SAAS,EAAE,CAAC;YAChC,OAAO,sCAAqB,CAAC,yBAAyB,CAAC;QACzD,CAAC;QACD,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,CAAC;QACjC,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,aAAa,CAAC,SAAS,CAAC,CAAC;QAC7D,IAAI,OAAO,CAAC,MAAM,KAAK,kCAAgB,CAAC,MAAM,EAAE,CAAC;YAC/C,MAAM,IAAI,wCAAwB,CAAC,IAAI,CAAC,EAAE,EAAE,eAAe,SAAS,OAAO,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;QAC/F,CAAC;QACD,IAAI,OAAO,CAAC,SAAS,KAAK,IAAI,EAAE,CAAC;YAC/B,OAAO,sCAAqB,CAAC,MAAM,CAAC;QACtC,CAAC;QACD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,mBAAmB,CAAC,KAAK,EAAE,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,OAAO,CAAC,SAAS,CAAC,CAAC;QAC5F,MAAM,IAAI,GAAG,IAAA,wCAAuB,EAClC,IAAI,IAAI,EAAE,EACV,IAAI,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,EAC3B,MAAM,CAAC,cAAc,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,MAAM,CAAC,cAAc,CAAC,CAClF,CAAC;QACF,IAAI,IAAI,CAAC,OAAO,KAAK,sCAAqB,CAAC,OAAO,EAAE,CAAC;YACnD,OAAO,IAAI,CAAC,OAAO,CAAC;QACtB,CAAC;QACD,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,eAAe,CAAC,SAAS,EAAE,IAAI,CAAC,SAAS,CAAC,WAAW,EAAE,CAAC,CAAC;QAC7F,MAAM,IAAI,CAAC,mBAAmB,CAAC,KAAK,EAAE,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,OAAO,CAAC,SAAS,IAAI,IAAI,CAAC,SAAS,CAAC,WAAW,EAAE,CAAC,CAAC;QAC7G,OAAO,sCAAqB,CAAC,OAAO,CAAC;IACvC,CAAC;IASM,KAAK,CAAC,cAAc,CAAC,SAAiB,EAAE,QAAgB;QAC7D,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,oBAAoB,CAAC;YAC7C,YAAY,EAAE,SAAS;YACvB,QAAQ,EAAE,IAAA,mCAAkB,EAAC,QAAQ,CAAC;SACvC,CAAC,CAAC;QACH,OAAO,MAAM,CAAC,WAAW,CAAC;IAC5B,CAAC;IAOM,oBAAoB,CAAC,MAI3B;QACC,OAAO,IAAI,CAAC,QAAQ,CAAC,oBAAoB,CAAC,MAAM,CAAC,CAAC;IACpD,CAAC;IAEO,KAAK,CAAC,YAAY,CACxB,KAAa,EACb,QAAgB,EAChB,OAAqC,EACrC,OAAe,EACf,SAAiB;QAEjB,IAAI,CAAC;YACH,OAAO,MAAM,IAAI,CAAC,IAAI,CACpB,MAAM,EACN,iCAAiC,kBAAkB,CAAC,OAAO,CAAC,UAAU,EACtE,KAAK,EACL,MAAM,IAAI,CAAC,cAAc,EAAE,EAC3B,EAAE,SAAS,EAAE,CACd,CAAC;QACJ,CAAC;QAAC,OAAO,SAAS,EAAE,CAAC;YACnB,IAAI,SAAS,YAAY,6BAA6B,IAAI,SAAS,CAAC,IAAI,KAAK,0BAA0B,CAAC,mBAAmB,EAAE,CAAC;gBAE5H,MAAM,SAAS,CAAC;YAClB,CAAC;YACD,IAAI,OAA8B,CAAC;YACnC,IAAI,CAAC;gBACH,OAAO,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC;YAC3D,CAAC;YAAC,OAAO,WAAW,EAAE,CAAC;gBACrB,IAAI,WAAW,YAAY,6BAA6B,IAAI,WAAW,CAAC,IAAI,KAAK,0BAA0B,CAAC,KAAK,EAAE,CAAC;oBAClH,MAAM,IAAI,CAAC,oBAAoB,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;oBACpD,MAAM,WAAW,CAAC;gBACpB,CAAC;gBACD,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC;oBAChB,OAAO,EAAE,8CAA8C;oBACvD,OAAO;oBACP,SAAS;oBACT,KAAK,EAAE,SAAS,YAAY,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC;iBAC1E,CAAC,CAAC;gBACH,MAAM,SAAS,CAAC;YAClB,CAAC;YACD,IAAI,OAAO,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;gBACpC,OAAO,OAAO,CAAC;YACjB,CAAC;YACD,MAAM,IAAI,CAAC,oBAAoB,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;YACpD,IAAI,OAAO,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;gBACpC,OAAO,OAAO,CAAC;YACjB,CAAC;YACD,MAAM,SAAS,CAAC;QAClB,CAAC;IACH,CAAC;IAQO,KAAK,CAAC,oBAAoB,CAAC,OAAe,EAAE,SAAiB;QACnE,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,QAAQ,CAAC,gBAAgB,CAAC,SAAS,CAAC,CAAC;QAClD,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC;gBAChB,OAAO,EAAE,gDAAgD;gBACzD,OAAO;gBACP,SAAS;gBACT,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;aAC9D,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,SAAS,CACrB,KAAa,EACb,QAAgB,EAChB,OAAqC;QAErC,OAAO,IAAI,CAAC,IAAI,CACd,MAAM,EACN,iCAAiC,kBAAkB,CAAC,QAAQ,CAAC,WAAW,EACxE,KAAK,EACL,MAAM,IAAI,CAAC,cAAc,EAAE,EAC3B;YACE,KAAK,EAAE,CAAC,GAAG,OAAO,CAAC,KAAK,CAAC;YACzB,YAAY,EAAE,CAAC,GAAG,OAAO,CAAC,YAAY,CAAC;YACvC,GAAG,CAAC,OAAO,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC,GAAG,OAAO,CAAC,WAAW,CAAC,EAAE,CAAC;YACvF,cAAc,EAAE,OAAO,CAAC,cAAc;YACtC,GAAG,CAAC,OAAO,CAAC,YAAY,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,OAAO,CAAC,YAAY,EAAE,CAAC;YACrF,UAAU,EAAE,OAAO,CAAC,UAAU;YAC9B,GAAG,CAAC,OAAO,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,OAAO,CAAC,SAAS,CAAC,WAAW,EAAE,EAAE,CAAC;SAC3F,CACF,CAAC;IACJ,CAAC;IAOO,KAAK,CAAC,mBAAmB,CAC/B,KAAa,EACb,YAAoB,EACpB,SAAiB,EACjB,SAAiB;QAEjB,OAAO,IAAI,CAAC,IAAI,CACd,MAAM,EACN,iCAAiC,kBAAkB,CAAC,YAAY,CAAC,iBAAiB,EAClF,KAAK,EACL,MAAM,IAAI,CAAC,cAAc,EAAE,EAC3B,EAAE,SAAS,EAAE,SAAS,EAAE,CACzB,CAAC;IACJ,CAAC;IAEO,KAAK,CAAC,cAAc;QAC1B,OAAO,EAAE,aAAa,EAAE,UAAU,MAAM,IAAI,CAAC,QAAQ,CAAC,cAAc,EAAE,EAAE,EAAE,CAAC;IAC7E,CAAC;IAEO,KAAK,CAAC,IAAI,CAChB,MAAsB,EACtB,IAAY,EACZ,KAAa,EACb,OAA+B,EAC/B,IAAc;QAEd,MAAM,OAAO,GAAG,MAAM,IAAA,sCAAc,EAAC,IAAI,CAAC,QAAQ,EAAE,8BAAW,CAAC,iBAAiB,CAAC,CAAC;QACnF,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,OAAO,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,GAAG,IAAI,EAAE,EAAE;YACpE,MAAM;YACN,OAAO,EAAE;gBACP,GAAG,OAAO;gBACV,eAAe,EAAE,KAAK;gBACtB,GAAG,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC;aACtE;YACD,GAAG,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC;SAC9D,CAAC,CAAC;QACH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YACjB,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;YACnC,MAAM,IAAI,6BAA6B,CACrC,qBAAqB,MAAM,IAAI,IAAI,qBAAqB,QAAQ,CAAC,MAAM,KAAK,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,EAAE,EACjG,QAAQ,CAAC,MAAM,EACf,MAAM,CAAC,IAAI,CAAC,CACb,CAAC;QACJ,CAAC;QACD,OAAO,IAAA,qCAA8B,EACnC,MAAM,QAAQ,CAAC,IAAI,EAAE,EACrB,qBAAqB,MAAM,IAAI,IAAI,EAAE,CACtC,CAAC;IACJ,CAAC;CACF,CAAA;AAhXY,sEAA6B;wCAA7B,6BAA6B;IADzC,IAAA,mBAAU,GAAE;IAKR,WAAA,IAAA,eAAM,EAAC,8CAAsB,CAAC,CAAA;6CACJ,0CAAwB;GAL1C,6BAA6B,CAgXzC;AAED,SAAS,MAAM,CAAC,IAAY;IAC1B,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAuB,CAAC;QACtD,OAAO,OAAO,MAAM,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;IACnE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC"}
|
|
@@ -2,6 +2,7 @@ import { type DurableDelegationCarrierRef } from './carrier-mint';
|
|
|
2
2
|
import { CarrierRenewalOutcome } from './carrier-window';
|
|
3
3
|
import { type OriginateDurableDelegationInput, DurableDelegationHolderClient, type DurableDelegationView } from './holder-client';
|
|
4
4
|
import { DelegationEndedError, DelegationUseDeniedError } from './holder-errors';
|
|
5
|
+
import { type RouterReplayCall } from './router-replay';
|
|
5
6
|
import type { ForwardedCallerContext } from '@xemahq/contracts/caller-context';
|
|
6
7
|
import type { HeldDurableDelegation } from '@xemahq/xema-service-nest';
|
|
7
8
|
export declare enum HolderDelegationState {
|
|
@@ -31,13 +32,14 @@ export interface HeldAuthority {
|
|
|
31
32
|
readonly delegationId: string;
|
|
32
33
|
readonly orgId: string;
|
|
33
34
|
readonly authorization: string;
|
|
35
|
+
readonly replayDelegationId: string;
|
|
34
36
|
}
|
|
35
37
|
export declare class DurableDelegationHolder {
|
|
36
38
|
private readonly client;
|
|
37
39
|
constructor(client: DurableDelegationHolderClient);
|
|
38
40
|
reconcileNeed(store: HolderDelegationStore, orgId: string, need: HolderDelegationNeed | null): Promise<HolderDelegationRow>;
|
|
39
41
|
authorize(store: HolderDelegationStore, author: ForwardedCallerContext, input: OriginateDurableDelegationInput): Promise<HolderDelegationRow>;
|
|
40
|
-
authority(row: HolderDelegationRow, orgId: string, subject: string): Promise<HeldAuthority>;
|
|
42
|
+
authority(row: HolderDelegationRow, orgId: string, subject: string, call: RouterReplayCall): Promise<HeldAuthority>;
|
|
41
43
|
carrierRef(row: HolderDelegationRow, orgId: string, subject: string): DurableDelegationCarrierRef;
|
|
42
44
|
held(row: HolderDelegationRow, orgId: string, subject: string): HeldDurableDelegation;
|
|
43
45
|
onDenied(store: HolderDelegationStore, row: HolderDelegationRow, reason: string | undefined, detail: string): Promise<DelegationUseDeniedError | DelegationEndedError | undefined>;
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"holder-lifecycle.d.ts","sourceRoot":"","sources":["../../src/durable-delegation/holder-lifecycle.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,KAAK,2BAA2B,EAAyB,MAAM,gBAAgB,CAAC;AACzF,OAAO,EAAE,qBAAqB,EAAE,MAAM,kBAAkB,CAAC;AAKzD,OAAO,EACL,KAAK,+BAA+B,EACpC,6BAA6B,EAE7B,KAAK,qBAAqB,EAC3B,MAAM,iBAAiB,CAAC;AACzB,OAAO,EACL,oBAAoB,EAGpB,wBAAwB,EACzB,MAAM,iBAAiB,CAAC;
|
|
1
|
+
{"version":3,"file":"holder-lifecycle.d.ts","sourceRoot":"","sources":["../../src/durable-delegation/holder-lifecycle.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,KAAK,2BAA2B,EAAyB,MAAM,gBAAgB,CAAC;AACzF,OAAO,EAAE,qBAAqB,EAAE,MAAM,kBAAkB,CAAC;AAKzD,OAAO,EACL,KAAK,+BAA+B,EACpC,6BAA6B,EAE7B,KAAK,qBAAqB,EAC3B,MAAM,iBAAiB,CAAC;AACzB,OAAO,EACL,oBAAoB,EAGpB,wBAAwB,EACzB,MAAM,iBAAiB,CAAC;AACzB,OAAO,EAA4B,KAAK,gBAAgB,EAAE,MAAM,iBAAiB,CAAC;AAElF,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,kCAAkC,CAAC;AAC/E,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,2BAA2B,CAAC;AAWvE,oBAAY,qBAAqB;IAE/B,WAAW,iBAAiB;IAE5B,QAAQ,aAAa;IAErB,aAAa,kBAAkB;IAE/B,IAAI,SAAS;IAEb,KAAK,UAAU;CAChB;AAGD,oBAAY,aAAa;IAEvB,OAAO,aAAa;CACrB;AAGD,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,KAAK,EAAE,qBAAqB,CAAC;IACtC,QAAQ,CAAC,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IACrC,QAAQ,CAAC,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IAElC,QAAQ,CAAC,YAAY,EAAE,SAAS,MAAM,EAAE,CAAC;CAC1C;AAQD,MAAM,WAAW,qBAAqB;IACpC,IAAI,IAAI,OAAO,CAAC,mBAAmB,GAAG,IAAI,CAAC,CAAC;IAC5C,OAAO,CACL,QAAQ,EAAE,IAAI,CAAC,mBAAmB,EAAE,OAAO,GAAG,cAAc,CAAC,EAC7D,IAAI,EAAE,mBAAmB,GACxB,OAAO,CAAC,OAAO,CAAC,CAAC;CACrB;AAGD,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,YAAY,EAAE,SAAS,MAAM,EAAE,CAAC;CAC1C;AAGD,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IAEvB,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAE/B,QAAQ,CAAC,kBAAkB,EAAE,MAAM,CAAC;CACrC;AAkCD,qBACa,uBAAuB;IACf,OAAO,CAAC,QAAQ,CAAC,MAAM;gBAAN,MAAM,EAAE,6BAA6B;IAE5D,aAAa,CACxB,KAAK,EAAE,qBAAqB,EAC5B,KAAK,EAAE,MAAM,EACb,IAAI,EAAE,oBAAoB,GAAG,IAAI,GAChC,OAAO,CAAC,mBAAmB,CAAC;IAoBlB,SAAS,CACpB,KAAK,EAAE,qBAAqB,EAC5B,MAAM,EAAE,sBAAsB,EAC9B,KAAK,EAAE,+BAA+B,GACrC,OAAO,CAAC,mBAAmB,CAAC;IAwBlB,SAAS,CACpB,GAAG,EAAE,mBAAmB,EACxB,KAAK,EAAE,MAAM,EACb,OAAO,EAAE,MAAM,EACf,IAAI,EAAE,gBAAgB,GACrB,OAAO,CAAC,aAAa,CAAC;IAyBlB,UAAU,CAAC,GAAG,EAAE,mBAAmB,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,2BAA2B;IAuBjG,IAAI,CAAC,GAAG,EAAE,mBAAmB,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,qBAAqB;IAS/E,QAAQ,CACnB,KAAK,EAAE,qBAAqB,EAC5B,GAAG,EAAE,mBAAmB,EACxB,MAAM,EAAE,MAAM,GAAG,SAAS,EAC1B,MAAM,EAAE,MAAM,GACb,OAAO,CAAC,wBAAwB,GAAG,oBAAoB,GAAG,SAAS,CAAC;IAW1D,OAAO,CAAC,KAAK,EAAE,qBAAqB,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,mBAAmB,GAAG,IAAI,CAAC;IAqBzF,YAAY,CAAC,KAAK,EAAE,qBAAqB,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,qBAAqB,GAAG,aAAa,CAAC;IAezG,MAAM,CAAC,GAAG,EAAE,mBAAmB,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;CAK5E;AAGD,wBAAgB,KAAK,CAAC,IAAI,EAAE,qBAAqB,GAAG,mBAAmB,CAetE;AAGD,wBAAgB,cAAc,CAC5B,GAAG,EAAE,mBAAmB,EACxB,IAAI,EAAE,oBAAoB,GAAG,IAAI,GAChC,mBAAmB,GAAG,IAAI,CAgB5B"}
|
|
@@ -17,6 +17,7 @@ const carrier_mint_1 = require("./carrier-mint");
|
|
|
17
17
|
const decision_codes_1 = require("./decision-codes");
|
|
18
18
|
const holder_client_1 = require("./holder-client");
|
|
19
19
|
const holder_errors_1 = require("./holder-errors");
|
|
20
|
+
const router_replay_1 = require("./router-replay");
|
|
20
21
|
var HolderDelegationState;
|
|
21
22
|
(function (HolderDelegationState) {
|
|
22
23
|
HolderDelegationState["NotRequired"] = "not_required";
|
|
@@ -76,12 +77,19 @@ let DurableDelegationHolder = class DurableDelegationHolder {
|
|
|
76
77
|
}
|
|
77
78
|
throw new common_1.ConflictException('The holder row kept changing while it was being authorised.');
|
|
78
79
|
}
|
|
79
|
-
async authority(row, orgId, subject) {
|
|
80
|
+
async authority(row, orgId, subject, call) {
|
|
80
81
|
const ref = this.carrierRef(row, orgId, subject);
|
|
82
|
+
const view = await this.client.read(orgId, ref.delegationId);
|
|
83
|
+
const { bearer, replayDelegationId } = await (0, router_replay_1.delegatedRouterAuthority)(this.client, {
|
|
84
|
+
...ref,
|
|
85
|
+
scope: view.scope,
|
|
86
|
+
...(view.expiresAt === undefined ? {} : { expiresAt: view.expiresAt }),
|
|
87
|
+
}, call);
|
|
81
88
|
return {
|
|
82
89
|
delegationId: ref.delegationId,
|
|
83
90
|
orgId,
|
|
84
|
-
authorization: `Bearer ${
|
|
91
|
+
authorization: `Bearer ${bearer}`,
|
|
92
|
+
replayDelegationId,
|
|
85
93
|
};
|
|
86
94
|
}
|
|
87
95
|
carrierRef(row, orgId, subject) {
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"holder-lifecycle.js","sourceRoot":"","sources":["../../src/durable-delegation/holder-lifecycle.ts"],"names":[],"mappings":";;;;;;;;;;;;
|
|
1
|
+
{"version":3,"file":"holder-lifecycle.js","sourceRoot":"","sources":["../../src/durable-delegation/holder-lifecycle.ts"],"names":[],"mappings":";;;;;;;;;;;;AA6SA,sBAeC;AAGD,wCAmBC;AAlVD,2CAA+D;AAE/D,iDAAyF;AAEzF,qDAG0B;AAC1B,mDAKyB;AACzB,mDAKyB;AACzB,mDAAkF;AAclF,IAAY,qBAWX;AAXD,WAAY,qBAAqB;IAE/B,qDAA4B,CAAA;IAE5B,8CAAqB,CAAA;IAErB,wDAA+B,CAAA;IAE/B,sCAAa,CAAA;IAEb,wCAAe,CAAA;AACjB,CAAC,EAXW,qBAAqB,qCAArB,qBAAqB,QAWhC;AAGD,IAAY,aAGX;AAHD,WAAY,aAAa;IAEvB,qCAAoB,CAAA;AACtB,CAAC,EAHW,aAAa,6BAAb,aAAa,QAGxB;AAwCD,MAAM,gBAAgB,GAAG,CAAC,CAAC;AAiCpB,IAAM,uBAAuB,GAA7B,MAAM,uBAAuB;IACE;IAApC,YAAoC,MAAqC;QAArC,WAAM,GAAN,MAAM,CAA+B;IAAG,CAAC;IAEtE,KAAK,CAAC,aAAa,CACxB,KAA4B,EAC5B,KAAa,EACb,IAAiC;QAEjC,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,GAAG,gBAAgB,EAAE,OAAO,IAAI,CAAC,EAAE,CAAC;YAC/D,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,IAAI,EAAE,CAAC;YAC/B,IAAI,GAAG,KAAK,IAAI,EAAE,CAAC;gBACjB,MAAM,IAAI,0BAAiB,CAAC,6DAA6D,CAAC,CAAC;YAC7F,CAAC;YACD,MAAM,IAAI,GAAG,cAAc,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;YACvC,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;gBAClB,OAAO,GAAG,CAAC;YACb,CAAC;YACD,IAAI,MAAM,KAAK,CAAC,OAAO,CAAC,GAAG,EAAE,IAAI,CAAC,EAAE,CAAC;gBACnC,IAAI,GAAG,CAAC,YAAY,KAAK,IAAI,IAAI,IAAI,CAAC,YAAY,KAAK,IAAI,EAAE,CAAC;oBAC5D,MAAM,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,EAAE,GAAG,CAAC,YAAY,CAAC,CAAC;gBACvD,CAAC;gBACD,OAAO,IAAI,CAAC;YACd,CAAC;QACH,CAAC;QACD,MAAM,IAAI,0BAAiB,CAAC,+DAA+D,CAAC,CAAC;IAC/F,CAAC;IAEM,KAAK,CAAC,SAAS,CACpB,KAA4B,EAC5B,MAA8B,EAC9B,KAAsC;QAEtC,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;QACxD,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC;QACzB,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,GAAG,gBAAgB,EAAE,OAAO,IAAI,CAAC,EAAE,CAAC;YAC/D,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,IAAI,EAAE,CAAC;YAC/B,IAAI,GAAG,KAAK,IAAI,EAAE,CAAC;gBACjB,MAAM,QAAQ,GAAG,IAAI,0BAAiB,CAAC,2DAA2D,CAAC,CAAC;gBACpG,MAAM,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,KAAK,EAAE,IAAI,CAAC,EAAE,EAAE,QAAQ,CAAC,CAAC;gBAC7D,MAAM,QAAQ,CAAC;YACjB,CAAC;YACD,IAAI,GAAG,CAAC,YAAY,KAAK,IAAI,CAAC,EAAE,EAAE,CAAC;gBAEjC,OAAO,GAAG,CAAC;YACb,CAAC;YACD,IAAI,MAAM,KAAK,CAAC,OAAO,CAAC,GAAG,EAAE,IAAI,CAAC,EAAE,CAAC;gBACnC,IAAI,GAAG,CAAC,YAAY,KAAK,IAAI,EAAE,CAAC;oBAC9B,MAAM,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,KAAK,EAAE,GAAG,CAAC,YAAY,CAAC,CAAC;gBAC9D,CAAC;gBACD,OAAO,IAAI,CAAC;YACd,CAAC;QACH,CAAC;QACD,MAAM,IAAI,0BAAiB,CAAC,6DAA6D,CAAC,CAAC;IAC7F,CAAC;IAEM,KAAK,CAAC,SAAS,CACpB,GAAwB,EACxB,KAAa,EACb,OAAe,EACf,IAAsB;QAEtB,MAAM,GAAG,GAAG,IAAI,CAAC,UAAU,CAAC,GAAG,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC;QACjD,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,GAAG,CAAC,YAAY,CAAC,CAAC;QAC7D,MAAM,EAAE,MAAM,EAAE,kBAAkB,EAAE,GAAG,MAAM,IAAA,wCAAwB,EACnE,IAAI,CAAC,MAAM,EACX;YACE,GAAG,GAAG;YACN,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,GAAG,CAAC,IAAI,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,CAAC;SACvE,EACD,IAAI,CACL,CAAC;QACF,OAAO;YACL,YAAY,EAAE,GAAG,CAAC,YAAY;YAC9B,KAAK;YACL,aAAa,EAAE,UAAU,MAAM,EAAE;YACjC,kBAAkB;SACnB,CAAC;IACJ,CAAC;IAOM,UAAU,CAAC,GAAwB,EAAE,KAAa,EAAE,OAAe;QACxE,QAAQ,GAAG,CAAC,KAAK,EAAE,CAAC;YAClB,KAAK,qBAAqB,CAAC,IAAI;gBAC7B,MAAM;YACR,KAAK,qBAAqB,CAAC,WAAW,CAAC;YACvC,KAAK,qBAAqB,CAAC,QAAQ;gBACjC,MAAM,IAAI,uCAAuB,CAAC,wCAAwB,CAAC,eAAe,EAAE,OAAO,CAAC,CAAC;YACvF,KAAK,qBAAqB,CAAC,aAAa;gBACtC,MAAM,IAAI,uCAAuB,CAAC,wCAAwB,CAAC,aAAa,EAAE,OAAO,CAAC,CAAC;YACrF,KAAK,qBAAqB,CAAC,KAAK;gBAC9B,MAAM,IAAI,uCAAuB,CAAC,wCAAwB,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;QAC/E,CAAC;QACD,IAAI,GAAG,CAAC,YAAY,KAAK,IAAI,IAAI,GAAG,CAAC,SAAS,KAAK,IAAI,EAAE,CAAC;YACxD,MAAM,IAAI,uCAAuB,CAAC,wCAAwB,CAAC,aAAa,EAAE,OAAO,CAAC,CAAC;QACrF,CAAC;QACD,OAAO,EAAE,YAAY,EAAE,GAAG,CAAC,YAAY,EAAE,cAAc,EAAE,KAAK,EAAE,SAAS,EAAE,GAAG,CAAC,SAAS,EAAE,CAAC;IAC7F,CAAC;IAOM,IAAI,CAAC,GAAwB,EAAE,KAAa,EAAE,OAAe;QAClE,OAAO,IAAA,oCAAqB,EAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,UAAU,CAAC,GAAG,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC,CAAC;IAClF,CAAC;IAOM,KAAK,CAAC,QAAQ,CACnB,KAA4B,EAC5B,GAAwB,EACxB,MAA0B,EAC1B,MAAc;QAEd,IAAI,CAAC,IAAA,gDAA+B,EAAC,MAAM,CAAC,IAAI,GAAG,CAAC,YAAY,KAAK,IAAI,EAAE,CAAC;YAC1E,OAAO,SAAS,CAAC;QACnB,CAAC;QACD,IAAI,MAAM,KAAK,8CAA6B,CAAC,oBAAoB,EAAE,CAAC;YAClE,OAAO,IAAI,wCAAwB,CAAC,GAAG,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC;QAChE,CAAC;QACD,MAAM,KAAK,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,GAAG,GAAG,EAAE,KAAK,EAAE,qBAAqB,CAAC,KAAK,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC1F,OAAO,IAAI,oCAAoB,CAAC,GAAG,CAAC,YAAY,EAAE,SAAS,CAAC,CAAC;IAC/D,CAAC;IAEM,KAAK,CAAC,OAAO,CAAC,KAA4B,EAAE,KAAa;QAC9D,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,IAAI,EAAE,CAAC;QAC/B,IAAI,GAAG,KAAK,IAAI,IAAI,GAAG,CAAC,YAAY,KAAK,IAAI,EAAE,CAAC;YAC9C,OAAO,GAAG,CAAC;QACb,CAAC;QACD,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,GAAG,CAAC,YAAY,CAAC,CAAC;QAC7D,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC;QACzB,IAAI,IAAI,CAAC,KAAK,KAAK,GAAG,CAAC,KAAK,IAAI,IAAI,CAAC,SAAS,KAAK,GAAG,CAAC,SAAS,EAAE,CAAC;YACjE,OAAO,GAAG,CAAC;QACb,CAAC;QACD,OAAO,CAAC,MAAM,KAAK,CAAC,OAAO,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;IAChE,CAAC;IAUM,KAAK,CAAC,YAAY,CAAC,KAA4B,EAAE,KAAa;QACnE,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,IAAI,EAAE,CAAC;QAC/B,IAAI,GAAG,KAAK,IAAI,IAAI,GAAG,CAAC,KAAK,KAAK,qBAAqB,CAAC,IAAI,IAAI,GAAG,CAAC,YAAY,KAAK,IAAI,EAAE,CAAC;YAC1F,OAAO,aAAa,CAAC,OAAO,CAAC;QAC/B,CAAC;QACD,IAAI,CAAC;YACH,OAAO,MAAM,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,KAAK,EAAE,GAAG,CAAC,YAAY,CAAC,CAAC;QACjE,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,KAAK,YAAY,oCAAoB,EAAE,CAAC;gBAC1C,MAAM,KAAK,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,GAAG,GAAG,EAAE,KAAK,EAAE,qBAAqB,CAAC,KAAK,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;YAC5F,CAAC;YACD,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC;IAEM,KAAK,CAAC,MAAM,CAAC,GAAwB,EAAE,KAAa;QACzD,IAAI,GAAG,CAAC,YAAY,KAAK,IAAI,EAAE,CAAC;YAC9B,MAAM,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,GAAG,CAAC,YAAY,CAAC,CAAC;QACpD,CAAC;IACH,CAAC;CACF,CAAA;AA9KY,0DAAuB;kCAAvB,uBAAuB;IADnC,IAAA,mBAAU,GAAE;qCAEiC,6CAA6B;GAD9D,uBAAuB,CA8KnC;AAGD,SAAgB,KAAK,CAAC,IAA2B;IAC/C,QAAQ,IAAI,CAAC,KAAK,EAAE,CAAC;QACnB,KAAK,4CAA4B,CAAC,MAAM;YACtC,OAAO;gBACL,KAAK,EAAE,IAAI,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,qBAAqB,CAAC,aAAa,CAAC,CAAC,CAAC,qBAAqB,CAAC,IAAI;gBACtG,YAAY,EAAE,IAAI,CAAC,EAAE;gBACrB,SAAS,EAAE,IAAI,CAAC,SAAS,IAAI,IAAI;gBACjC,YAAY,EAAE,CAAC,GAAG,IAAI,CAAC,YAAY,CAAC;aACrC,CAAC;QACJ,KAAK,4CAA4B,CAAC,YAAY;YAC5C,OAAO,EAAE,KAAK,EAAE,qBAAqB,CAAC,aAAa,EAAE,YAAY,EAAE,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,YAAY,EAAE,CAAC,GAAG,IAAI,CAAC,YAAY,CAAC,EAAE,CAAC;QACtI,KAAK,4CAA4B,CAAC,OAAO,CAAC;QAC1C,KAAK,4CAA4B,CAAC,OAAO;YACvC,OAAO,EAAE,KAAK,EAAE,qBAAqB,CAAC,KAAK,EAAE,YAAY,EAAE,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,YAAY,EAAE,CAAC,GAAG,IAAI,CAAC,YAAY,CAAC,EAAE,CAAC;IAChI,CAAC;AACH,CAAC;AAGD,SAAgB,cAAc,CAC5B,GAAwB,EACxB,IAAiC;IAEjC,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;QAClB,OAAO,GAAG,CAAC,KAAK,KAAK,qBAAqB,CAAC,WAAW,IAAI,GAAG,CAAC,YAAY,KAAK,IAAI;YACjF,CAAC,CAAC,IAAI;YACN,CAAC,CAAC,EAAE,KAAK,EAAE,qBAAqB,CAAC,WAAW,EAAE,YAAY,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,YAAY,EAAE,EAAE,EAAE,CAAC;IAC1G,CAAC;IACD,MAAM,YAAY,GAChB,GAAG,CAAC,YAAY,CAAC,MAAM,KAAK,IAAI,CAAC,YAAY,CAAC,MAAM;QACpD,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC;IAC/D,IAAI,GAAG,CAAC,YAAY,KAAK,IAAI,IAAI,YAAY,EAAE,CAAC;QAC9C,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,GAAG,CAAC,KAAK,KAAK,qBAAqB,CAAC,QAAQ,IAAI,GAAG,CAAC,YAAY,KAAK,IAAI,EAAE,CAAC;QAC9E,OAAO,IAAI,CAAC;IACd,CAAC;IACD,OAAO,EAAE,KAAK,EAAE,qBAAqB,CAAC,QAAQ,EAAE,YAAY,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,YAAY,EAAE,EAAE,EAAE,CAAC;AAC1G,CAAC"}
|
|
@@ -0,0 +1,21 @@
|
|
|
1
|
+
import { type DurableDelegationHolderClient } from './holder-client';
|
|
2
|
+
export declare const CAPABILITY_ROUTER_WORKLOAD: "xema-capability-router";
|
|
3
|
+
export interface RouterReplayParent {
|
|
4
|
+
readonly organizationId: string;
|
|
5
|
+
readonly delegationId: string;
|
|
6
|
+
readonly carrierId: string;
|
|
7
|
+
readonly scope: readonly string[];
|
|
8
|
+
readonly expiresAt?: string;
|
|
9
|
+
}
|
|
10
|
+
export interface RouterReplayCall {
|
|
11
|
+
readonly ref: string;
|
|
12
|
+
readonly requestKey: string;
|
|
13
|
+
}
|
|
14
|
+
export interface DelegatedRouterAuthority {
|
|
15
|
+
readonly bearer: string;
|
|
16
|
+
readonly replayDelegationId: string;
|
|
17
|
+
}
|
|
18
|
+
export declare function routerReplayRequestKey(correlationId: string, ref: string): string;
|
|
19
|
+
export declare function lendRouterReplayChild(client: DurableDelegationHolderClient, parent: RouterReplayParent, call: RouterReplayCall): Promise<string>;
|
|
20
|
+
export declare function delegatedRouterAuthority(client: DurableDelegationHolderClient, parent: RouterReplayParent, call: RouterReplayCall): Promise<DelegatedRouterAuthority>;
|
|
21
|
+
//# sourceMappingURL=router-replay.d.ts.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"router-replay.d.ts","sourceRoot":"","sources":["../../src/durable-delegation/router-replay.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,KAAK,6BAA6B,EAAE,MAAM,iBAAiB,CAAC;AAOrE,eAAO,MAAM,0BAA0B,0BAAqC,CAAC;AAM7E,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,KAAK,EAAE,SAAS,MAAM,EAAE,CAAC;IAElC,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;CAC7B;AAGD,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IAMrB,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;CAC7B;AAGD,MAAM,WAAW,wBAAwB;IAEvC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IAExB,QAAQ,CAAC,kBAAkB,EAAE,MAAM,CAAC;CACrC;AAGD,wBAAgB,sBAAsB,CAAC,aAAa,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,MAAM,CAEjF;AAQD,wBAAsB,qBAAqB,CACzC,MAAM,EAAE,6BAA6B,EACrC,MAAM,EAAE,kBAAkB,EAC1B,IAAI,EAAE,gBAAgB,GACrB,OAAO,CAAC,MAAM,CAAC,CASjB;AAQD,wBAAsB,wBAAwB,CAC5C,MAAM,EAAE,6BAA6B,EACrC,MAAM,EAAE,kBAAkB,EAC1B,IAAI,EAAE,gBAAgB,GACrB,OAAO,CAAC,wBAAwB,CAAC,CAInC"}
|
|
@@ -0,0 +1,27 @@
|
|
|
1
|
+
"use strict";
|
|
2
|
+
Object.defineProperty(exports, "__esModule", { value: true });
|
|
3
|
+
exports.CAPABILITY_ROUTER_WORKLOAD = void 0;
|
|
4
|
+
exports.routerReplayRequestKey = routerReplayRequestKey;
|
|
5
|
+
exports.lendRouterReplayChild = lendRouterReplayChild;
|
|
6
|
+
exports.delegatedRouterAuthority = delegatedRouterAuthority;
|
|
7
|
+
const service_registry_1 = require("@xemahq/contracts/service-registry");
|
|
8
|
+
exports.CAPABILITY_ROUTER_WORKLOAD = service_registry_1.ServiceName.XEMA_CAPABILITY_ROUTER;
|
|
9
|
+
function routerReplayRequestKey(correlationId, ref) {
|
|
10
|
+
return `replay:${correlationId}:${ref}`;
|
|
11
|
+
}
|
|
12
|
+
async function lendRouterReplayChild(client, parent, call) {
|
|
13
|
+
const child = await client.createChild(parent.organizationId, parent.delegationId, {
|
|
14
|
+
scope: parent.scope,
|
|
15
|
+
capabilities: [call.ref],
|
|
16
|
+
holderWorkload: exports.CAPABILITY_ROUTER_WORKLOAD,
|
|
17
|
+
requestKey: call.requestKey,
|
|
18
|
+
...(parent.expiresAt === undefined ? {} : { expiresAt: new Date(parent.expiresAt) }),
|
|
19
|
+
});
|
|
20
|
+
return child.id;
|
|
21
|
+
}
|
|
22
|
+
async function delegatedRouterAuthority(client, parent, call) {
|
|
23
|
+
const replayDelegationId = await lendRouterReplayChild(client, parent, call);
|
|
24
|
+
const bearer = await client.mintContextFor(parent.carrierId, exports.CAPABILITY_ROUTER_WORKLOAD);
|
|
25
|
+
return { bearer, replayDelegationId };
|
|
26
|
+
}
|
|
27
|
+
//# sourceMappingURL=router-replay.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"router-replay.js","sourceRoot":"","sources":["../../src/durable-delegation/router-replay.ts"],"names":[],"mappings":";;;AA4CA,wDAEC;AAQD,sDAaC;AAQD,4DAQC;AAnFD,yEAAiE;AASpD,QAAA,0BAA0B,GAAG,8BAAW,CAAC,sBAAsB,CAAC;AAmC7E,SAAgB,sBAAsB,CAAC,aAAqB,EAAE,GAAW;IACvE,OAAO,UAAU,aAAa,IAAI,GAAG,EAAE,CAAC;AAC1C,CAAC;AAQM,KAAK,UAAU,qBAAqB,CACzC,MAAqC,EACrC,MAA0B,EAC1B,IAAsB;IAEtB,MAAM,KAAK,GAAG,MAAM,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,cAAc,EAAE,MAAM,CAAC,YAAY,EAAE;QACjF,KAAK,EAAE,MAAM,CAAC,KAAK;QACnB,YAAY,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC;QACxB,cAAc,EAAE,kCAA0B;QAC1C,UAAU,EAAE,IAAI,CAAC,UAAU;QAC3B,GAAG,CAAC,MAAM,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,IAAI,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE,CAAC;KACrF,CAAC,CAAC;IACH,OAAO,KAAK,CAAC,EAAE,CAAC;AAClB,CAAC;AAQM,KAAK,UAAU,wBAAwB,CAC5C,MAAqC,EACrC,MAA0B,EAC1B,IAAsB;IAEtB,MAAM,kBAAkB,GAAG,MAAM,qBAAqB,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,CAAC,CAAC;IAC7E,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,cAAc,CAAC,MAAM,CAAC,SAAS,EAAE,kCAA0B,CAAC,CAAC;IACzF,OAAO,EAAE,MAAM,EAAE,kBAAkB,EAAE,CAAC;AACxC,CAAC"}
|
|
@@ -1,5 +1,8 @@
|
|
|
1
|
+
import { type ReceiverAudience } from '@xemahq/contracts/caller-context';
|
|
2
|
+
import { type IssuedEphemeralDelegationRef } from './issued-ref';
|
|
1
3
|
import type { CreateDelegationRequest, DelegationRecordResponse, ScopedAccessToken } from '@xemahq/identity-client';
|
|
2
4
|
export declare const EPHEMERAL_DELEGATION_MAX_LIFETIME_MS: number;
|
|
5
|
+
export type { IssuedEphemeralDelegationRef } from './issued-ref';
|
|
3
6
|
export interface EphemeralDelegationRef {
|
|
4
7
|
readonly delegationId: string;
|
|
5
8
|
readonly organizationId: string;
|
|
@@ -29,7 +32,9 @@ export declare enum EphemeralDelegationRefusal {
|
|
|
29
32
|
RedelegableNotSubset = "redelegable-not-subset",
|
|
30
33
|
ScopeRequired = "scope-required",
|
|
31
34
|
Renewable = "renewable",
|
|
32
|
-
LifetimeExceeded = "lifetime-exceeded"
|
|
35
|
+
LifetimeExceeded = "lifetime-exceeded",
|
|
36
|
+
NotIssued = "not-issued",
|
|
37
|
+
AudienceRequired = "audience-required"
|
|
33
38
|
}
|
|
34
39
|
export declare class EphemeralDelegationError extends Error {
|
|
35
40
|
readonly operation: EphemeralDelegationOperation;
|
|
@@ -62,10 +67,10 @@ export interface CreateEphemeralSubDelegationInput {
|
|
|
62
67
|
readonly expiresAt: Date;
|
|
63
68
|
readonly renewable?: false;
|
|
64
69
|
}
|
|
65
|
-
export declare function createEphemeralDelegation(client: EphemeralDelegationClient, input: CreateEphemeralDelegationInput, now?: Date): Promise<
|
|
66
|
-
export declare function createEphemeralSubDelegation(client: EphemeralDelegationClient, input: CreateEphemeralSubDelegationInput, now?: Date): Promise<
|
|
67
|
-
export declare function mintEphemeralDelegatedToken(client: Pick<EphemeralDelegationClient, 'mintDelegatedContext'>, ref: EphemeralDelegationRef, options
|
|
68
|
-
readonly audience
|
|
70
|
+
export declare function createEphemeralDelegation(client: EphemeralDelegationClient, input: CreateEphemeralDelegationInput, now?: Date): Promise<IssuedEphemeralDelegationRef>;
|
|
71
|
+
export declare function createEphemeralSubDelegation(client: EphemeralDelegationClient, input: CreateEphemeralSubDelegationInput, now?: Date): Promise<IssuedEphemeralDelegationRef>;
|
|
72
|
+
export declare function mintEphemeralDelegatedToken(client: Pick<EphemeralDelegationClient, 'mintDelegatedContext'>, ref: EphemeralDelegationRef, options: {
|
|
73
|
+
readonly audience: ReceiverAudience;
|
|
69
74
|
}): Promise<ScopedAccessToken>;
|
|
70
75
|
export declare function revokeEphemeralDelegation(client: Pick<EphemeralDelegationClient, 'revokeDelegation'>, ref: EphemeralDelegationRef): Promise<void>;
|
|
71
76
|
//# sourceMappingURL=ephemeral-delegation.d.ts.map
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"ephemeral-delegation.d.ts","sourceRoot":"","sources":["../../src/ephemeral-delegation/ephemeral-delegation.ts"],"names":[],"mappings":"
|
|
1
|
+
{"version":3,"file":"ephemeral-delegation.d.ts","sourceRoot":"","sources":["../../src/ephemeral-delegation/ephemeral-delegation.ts"],"names":[],"mappings":"AAqBA,OAAO,EAAsB,KAAK,gBAAgB,EAAE,MAAM,kCAAkC,CAAC;AAG7F,OAAO,EAAc,KAAK,4BAA4B,EAAE,MAAM,cAAc,CAAC;AAE7E,OAAO,KAAK,EACV,uBAAuB,EACvB,wBAAwB,EACxB,iBAAiB,EAClB,MAAM,yBAAyB,CAAC;AAMjC,eAAO,MAAM,oCAAoC,QAAiB,CAAC;AAEnE,YAAY,EAAE,4BAA4B,EAAE,MAAM,cAAc,CAAC;AAGjE,MAAM,WAAW,sBAAsB;IACrC,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAEhC,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;CACzB;AAOD,MAAM,WAAW,yBAAyB;IACxC,gBAAgB,CACd,OAAO,EAAE,uBAAuB,GAC/B,OAAO,CAAC,IAAI,CAAC,wBAAwB,EAAE,IAAI,GAAG,gBAAgB,CAAC,CAAC,CAAC;IACpE,oBAAoB,CAAC,MAAM,EAAE;QAC3B,YAAY,EAAE,MAAM,CAAC;QACrB,QAAQ,CAAC,EAAE,MAAM,CAAC;QAClB,KAAK,CAAC,EAAE,MAAM,CAAC;KAChB,GAAG,OAAO,CAAC,iBAAiB,CAAC,CAAC;IAC/B,gBAAgB,CAAC,YAAY,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE;QAAE,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC;QAAE,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;CACpG;AAGD,oBAAY,4BAA4B;IACtC,MAAM,WAAW;IACjB,IAAI,SAAS;IACb,MAAM,WAAW;CAClB;AAGD,oBAAY,0BAA0B;IAEpC,UAAU,eAAe;IAEzB,YAAY,kBAAkB;IAE9B,oBAAoB,2BAA2B;IAE/C,aAAa,mBAAmB;IAEhC,SAAS,cAAc;IAEvB,gBAAgB,sBAAsB;IAEtC,SAAS,eAAe;IAExB,gBAAgB,sBAAsB;CACvC;AAWD,qBAAa,wBAAyB,SAAQ,KAAK;aAI/B,SAAS,EAAE,4BAA4B;aACvC,cAAc,EAAE,MAAM;aAEtB,OAAO,CAAC,EAAE,0BAA0B;IANtD,SAAgB,SAAS,EAAE,OAAO,CAAC;gBAGjB,SAAS,EAAE,4BAA4B,EACvC,cAAc,EAAE,MAAM,EACtC,OAAO,EAAE,MAAM,EACC,OAAO,CAAC,EAAE,0BAA0B,YAAA,EACpD,OAAO,CAAC,EAAE;QAAE,KAAK,CAAC,EAAE,OAAO,CAAA;KAAE;IAU/B,IAAW,YAAY,IAAI,MAAM,GAAG,SAAS,CAG5C;CACF;AAGD,MAAM,WAAW,8BAA8B;IAE7C,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAEhC,QAAQ,CAAC,YAAY,EAAE,SAAS,MAAM,EAAE,CAAC;IAEzC,QAAQ,CAAC,uBAAuB,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAErD,QAAQ,CAAC,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAEnC,QAAQ,CAAC,aAAa,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAE3C,QAAQ,CAAC,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAEpC,QAAQ,CAAC,SAAS,EAAE,IAAI,CAAC;IAEzB,QAAQ,CAAC,SAAS,CAAC,EAAE,KAAK,CAAC;IAC3B,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;CACzB;AAGD,MAAM,WAAW,iCAAiC;IAChD,QAAQ,CAAC,MAAM,EAAE,sBAAsB,CAAC;IAExC,QAAQ,CAAC,YAAY,EAAE,SAAS,MAAM,EAAE,CAAC;IACzC,QAAQ,CAAC,uBAAuB,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAErD,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAC;IAElC,QAAQ,CAAC,aAAa,EAAE,SAAS,MAAM,EAAE,CAAC;IAE1C,QAAQ,CAAC,SAAS,EAAE,IAAI,CAAC;IAEzB,QAAQ,CAAC,SAAS,CAAC,EAAE,KAAK,CAAC;CAC5B;AAGD,wBAAsB,yBAAyB,CAC7C,MAAM,EAAE,yBAAyB,EACjC,KAAK,EAAE,8BAA8B,EACrC,GAAG,GAAE,IAAiB,GACrB,OAAO,CAAC,4BAA4B,CAAC,CAyBvC;AAOD,wBAAsB,4BAA4B,CAChD,MAAM,EAAE,yBAAyB,EACjC,KAAK,EAAE,iCAAiC,EACxC,GAAG,GAAE,IAAiB,GACrB,OAAO,CAAC,4BAA4B,CAAC,CA+BvC;AAOD,wBAAsB,2BAA2B,CAC/C,MAAM,EAAE,IAAI,CAAC,yBAAyB,EAAE,sBAAsB,CAAC,EAC/D,GAAG,EAAE,sBAAsB,EAC3B,OAAO,EAAE;IAAE,QAAQ,CAAC,QAAQ,EAAE,gBAAgB,CAAA;CAAE,GAC/C,OAAO,CAAC,iBAAiB,CAAC,CA2B5B;AAGD,wBAAsB,yBAAyB,CAC7C,MAAM,EAAE,IAAI,CAAC,yBAAyB,EAAE,kBAAkB,CAAC,EAC3D,GAAG,EAAE,sBAAsB,GAC1B,OAAO,CAAC,IAAI,CAAC,CAYf"}
|
|
@@ -5,7 +5,9 @@ exports.createEphemeralDelegation = createEphemeralDelegation;
|
|
|
5
5
|
exports.createEphemeralSubDelegation = createEphemeralSubDelegation;
|
|
6
6
|
exports.mintEphemeralDelegatedToken = mintEphemeralDelegatedToken;
|
|
7
7
|
exports.revokeEphemeralDelegation = revokeEphemeralDelegation;
|
|
8
|
+
const caller_context_1 = require("@xemahq/contracts/caller-context");
|
|
8
9
|
const identity_client_1 = require("@xemahq/identity-client");
|
|
10
|
+
const issued_ref_1 = require("./issued-ref");
|
|
9
11
|
exports.EPHEMERAL_DELEGATION_MAX_LIFETIME_MS = 10 * 60 * 1000;
|
|
10
12
|
var EphemeralDelegationOperation;
|
|
11
13
|
(function (EphemeralDelegationOperation) {
|
|
@@ -21,6 +23,8 @@ var EphemeralDelegationRefusal;
|
|
|
21
23
|
EphemeralDelegationRefusal["ScopeRequired"] = "scope-required";
|
|
22
24
|
EphemeralDelegationRefusal["Renewable"] = "renewable";
|
|
23
25
|
EphemeralDelegationRefusal["LifetimeExceeded"] = "lifetime-exceeded";
|
|
26
|
+
EphemeralDelegationRefusal["NotIssued"] = "not-issued";
|
|
27
|
+
EphemeralDelegationRefusal["AudienceRequired"] = "audience-required";
|
|
24
28
|
})(EphemeralDelegationRefusal || (exports.EphemeralDelegationRefusal = EphemeralDelegationRefusal = {}));
|
|
25
29
|
class EphemeralDelegationError extends Error {
|
|
26
30
|
operation;
|
|
@@ -89,11 +93,15 @@ async function createEphemeralSubDelegation(client, input, now = new Date()) {
|
|
|
89
93
|
...(parent.realm === undefined ? {} : { realm: parent.realm }),
|
|
90
94
|
});
|
|
91
95
|
}
|
|
92
|
-
async function mintEphemeralDelegatedToken(client, ref, options
|
|
96
|
+
async function mintEphemeralDelegatedToken(client, ref, options) {
|
|
97
|
+
const audience = options?.audience;
|
|
98
|
+
if (!(0, caller_context_1.isReceiverAudience)(audience)) {
|
|
99
|
+
throw new EphemeralDelegationError(EphemeralDelegationOperation.Mint, ref.organizationId, `A context from ephemeral delegation '${ref.delegationId}' must name the one receiver audience it is for.`, EphemeralDelegationRefusal.AudienceRequired);
|
|
100
|
+
}
|
|
93
101
|
try {
|
|
94
102
|
return await client.mintDelegatedContext({
|
|
95
103
|
delegationId: ref.delegationId,
|
|
96
|
-
|
|
104
|
+
audience,
|
|
97
105
|
...(ref.realm === undefined ? {} : { realm: ref.realm }),
|
|
98
106
|
});
|
|
99
107
|
}
|
|
@@ -139,7 +147,7 @@ async function created(client, organizationId, realm, request) {
|
|
|
139
147
|
if (record.organizationId !== organizationId) {
|
|
140
148
|
throw new EphemeralDelegationError(EphemeralDelegationOperation.Create, organizationId, `The boundary returned a delegation for '${String(record.organizationId)}', not '${organizationId}'.`);
|
|
141
149
|
}
|
|
142
|
-
return { delegationId: record.id, organizationId, ...(realm === undefined ? {} : { realm }) };
|
|
150
|
+
return (0, issued_ref_1.markIssued)({ delegationId: record.id, organizationId, ...(realm === undefined ? {} : { realm }) });
|
|
143
151
|
}
|
|
144
152
|
function refused(organizationId, refusal, message) {
|
|
145
153
|
return new EphemeralDelegationError(EphemeralDelegationOperation.Create, organizationId, message, refusal);
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"ephemeral-delegation.js","sourceRoot":"","sources":["../../src/ephemeral-delegation/ephemeral-delegation.ts"],"names":[],"mappings":";;;
|
|
1
|
+
{"version":3,"file":"ephemeral-delegation.js","sourceRoot":"","sources":["../../src/ephemeral-delegation/ephemeral-delegation.ts"],"names":[],"mappings":";;;AAoKA,8DA6BC;AAOD,oEAmCC;AAOD,kEA+BC;AAGD,8DAeC;AA9QD,qEAA6F;AAC7F,6DAA0E;AAE1E,6CAA6E;AAYhE,QAAA,oCAAoC,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;AA8BnE,IAAY,4BAIX;AAJD,WAAY,4BAA4B;IACtC,iDAAiB,CAAA;IACjB,6CAAa,CAAA;IACb,iDAAiB,CAAA;AACnB,CAAC,EAJW,4BAA4B,4CAA5B,4BAA4B,QAIvC;AAGD,IAAY,0BAiBX;AAjBD,WAAY,0BAA0B;IAEpC,uDAAyB,CAAA;IAEzB,4DAA8B,CAAA;IAE9B,6EAA+C,CAAA;IAE/C,8DAAgC,CAAA;IAEhC,qDAAuB,CAAA;IAEvB,oEAAsC,CAAA;IAEtC,sDAAwB,CAAA;IAExB,oEAAsC,CAAA;AACxC,CAAC,EAjBW,0BAA0B,0CAA1B,0BAA0B,QAiBrC;AAWD,MAAa,wBAAyB,SAAQ,KAAK;IAI/B;IACA;IAEA;IANF,SAAS,CAAU;IAEnC,YACkB,SAAuC,EACvC,cAAsB,EACtC,OAAe,EACC,OAAoC,EACpD,OAA6B;QAE7B,KAAK,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QANR,cAAS,GAAT,SAAS,CAA8B;QACvC,mBAAc,GAAd,cAAc,CAAQ;QAEtB,YAAO,GAAP,OAAO,CAA6B;QAIpD,IAAI,CAAC,IAAI,GAAG,0BAA0B,CAAC;QACvC,MAAM,KAAK,GAAG,OAAO,EAAE,KAAK,CAAC;QAC7B,IAAI,CAAC,SAAS;YACZ,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,YAAY,kCAAgB,CAAC,CAAC,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,KAAK,CAAC;IAC/F,CAAC;IAGD,IAAW,YAAY;QACrB,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC;QACzB,OAAO,KAAK,YAAY,kCAAgB,IAAI,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;IACtG,CAAC;CACF;AAtBD,4DAsBC;AAyCM,KAAK,UAAU,yBAAyB,CAC7C,MAAiC,EACjC,KAAqC,EACrC,MAAY,IAAI,IAAI,EAAE;IAEtB,MAAM,cAAc,GAAG,KAAK,CAAC,cAAc,CAAC,IAAI,EAAE,CAAC;IACnD,IAAI,cAAc,KAAK,EAAE,IAAI,KAAK,CAAC,aAAa,KAAK,EAAE,EAAE,CAAC;QACxD,MAAM,OAAO,CACX,cAAc,EACd,0BAA0B,CAAC,UAAU,EACrC,sFAAsF,CACvF,CAAC;IACJ,CAAC;IACD,cAAc,CAAC,cAAc,EAAE,KAAK,CAAC,CAAC;IACtC,OAAO,OAAO,CAAC,MAAM,EAAE,cAAc,EAAE,KAAK,CAAC,KAAK,EAAE;QAClD,cAAc,EAAE,KAAK,CAAC,aAAa;QACnC,SAAS,EAAE,+BAAa,CAAC,YAAY;QACrC,cAAc;QACd,YAAY,EAAE,CAAC,GAAG,KAAK,CAAC,YAAY,CAAC;QACrC,GAAG,CAAC,KAAK,CAAC,uBAAuB,KAAK,SAAS;YAC7C,CAAC,CAAC,EAAE;YACJ,CAAC,CAAC,EAAE,uBAAuB,EAAE,CAAC,GAAG,KAAK,CAAC,uBAAuB,CAAC,EAAE,CAAC;QACpE,GAAG,CAAC,KAAK,CAAC,gBAAgB,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,gBAAgB,EAAE,KAAK,CAAC,gBAAgB,EAAE,CAAC;QAC7F,GAAG,CAAC,KAAK,CAAC,aAAa,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,CAAC,GAAG,KAAK,CAAC,aAAa,CAAC,EAAE,CAAC;QACzF,GAAG,CAAC,KAAK,CAAC,iBAAiB,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,iBAAiB,EAAE,KAAK,CAAC,iBAAiB,EAAE,CAAC;QAChG,SAAS,EAAE,aAAa,CAAC,cAAc,EAAE,KAAK,CAAC,SAAS,EAAE,GAAG,CAAC;QAC9D,SAAS,EAAE,KAAK;QAChB,GAAG,CAAC,KAAK,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,CAAC;KAC7D,CAAC,CAAC;AACL,CAAC;AAOM,KAAK,UAAU,4BAA4B,CAChD,MAAiC,EACjC,KAAwC,EACxC,MAAY,IAAI,IAAI,EAAE;IAEtB,MAAM,EAAE,MAAM,EAAE,GAAG,KAAK,CAAC;IACzB,MAAM,cAAc,GAAG,MAAM,CAAC,cAAc,CAAC,IAAI,EAAE,CAAC;IACpD,IAAI,cAAc,KAAK,EAAE,IAAI,MAAM,CAAC,YAAY,CAAC,IAAI,EAAE,KAAK,EAAE,IAAI,KAAK,CAAC,gBAAgB,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;QACvG,MAAM,OAAO,CACX,cAAc,EACd,0BAA0B,CAAC,UAAU,EACrC,gGAAgG,CACjG,CAAC;IACJ,CAAC;IACD,IAAI,KAAK,CAAC,aAAa,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACrC,MAAM,OAAO,CACX,cAAc,EACd,0BAA0B,CAAC,aAAa,EACxC,uGAAuG,CACxG,CAAC;IACJ,CAAC;IACD,cAAc,CAAC,cAAc,EAAE,KAAK,CAAC,CAAC;IACtC,OAAO,OAAO,CAAC,MAAM,EAAE,cAAc,EAAE,MAAM,CAAC,KAAK,EAAE;QACnD,QAAQ,EAAE,MAAM,CAAC,YAAY;QAC7B,cAAc;QACd,YAAY,EAAE,CAAC,GAAG,KAAK,CAAC,YAAY,CAAC;QACrC,GAAG,CAAC,KAAK,CAAC,uBAAuB,KAAK,SAAS;YAC7C,CAAC,CAAC,EAAE;YACJ,CAAC,CAAC,EAAE,uBAAuB,EAAE,CAAC,GAAG,KAAK,CAAC,uBAAuB,CAAC,EAAE,CAAC;QACpE,gBAAgB,EAAE,KAAK,CAAC,gBAAgB;QACxC,aAAa,EAAE,CAAC,GAAG,KAAK,CAAC,aAAa,CAAC;QACvC,SAAS,EAAE,aAAa,CAAC,cAAc,EAAE,KAAK,CAAC,SAAS,EAAE,GAAG,CAAC;QAC9D,SAAS,EAAE,KAAK;QAChB,GAAG,CAAC,MAAM,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC;KAC/D,CAAC,CAAC;AACL,CAAC;AAOM,KAAK,UAAU,2BAA2B,CAC/C,MAA+D,EAC/D,GAA2B,EAC3B,OAAgD;IAIhD,MAAM,QAAQ,GAAa,OAAuD,EAAE,QAAQ,CAAC;IAC7F,IAAI,CAAC,IAAA,mCAAkB,EAAC,QAAQ,CAAC,EAAE,CAAC;QAClC,MAAM,IAAI,wBAAwB,CAChC,4BAA4B,CAAC,IAAI,EACjC,GAAG,CAAC,cAAc,EAClB,wCAAwC,GAAG,CAAC,YAAY,kDAAkD,EAC1G,0BAA0B,CAAC,gBAAgB,CAC5C,CAAC;IACJ,CAAC;IACD,IAAI,CAAC;QACH,OAAO,MAAM,MAAM,CAAC,oBAAoB,CAAC;YACvC,YAAY,EAAE,GAAG,CAAC,YAAY;YAC9B,QAAQ;YACR,GAAG,CAAC,GAAG,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,EAAE,CAAC;SACzD,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,IAAI,wBAAwB,CAChC,4BAA4B,CAAC,IAAI,EACjC,GAAG,CAAC,cAAc,EAClB,mEAAmE,GAAG,CAAC,YAAY,IAAI,EACvF,SAAS,EACT,EAAE,KAAK,EAAE,CACV,CAAC;IACJ,CAAC;AACH,CAAC;AAGM,KAAK,UAAU,yBAAyB,CAC7C,MAA2D,EAC3D,GAA2B;IAE3B,IAAI,CAAC;QACH,MAAM,MAAM,CAAC,gBAAgB,CAAC,GAAG,CAAC,YAAY,EAAE,GAAG,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,EAAE,CAAC,CAAC;IACvG,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,IAAI,wBAAwB,CAChC,4BAA4B,CAAC,MAAM,EACnC,GAAG,CAAC,cAAc,EAClB,yBAAyB,GAAG,CAAC,YAAY,yBAAyB,EAClE,SAAS,EACT,EAAE,KAAK,EAAE,CACV,CAAC;IACJ,CAAC;AACH,CAAC;AAED,SAAS,cAAc,CACrB,cAAsB,EACtB,KAIC;IAED,IAAI,KAAK,CAAC,SAAS,KAAK,IAAI,EAAE,CAAC;QAC7B,MAAM,OAAO,CACX,cAAc,EACd,0BAA0B,CAAC,SAAS,EACpC,qGAAqG,CACtG,CAAC;IACJ,CAAC;IACD,IAAI,KAAK,CAAC,YAAY,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACpC,MAAM,OAAO,CAAC,cAAc,EAAE,0BAA0B,CAAC,YAAY,EAAE,4DAA4D,CAAC,CAAC;IACvI,CAAC;IACD,MAAM,KAAK,GAAG,CAAC,KAAK,CAAC,uBAAuB,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC;IACnG,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACrB,MAAM,OAAO,CACX,cAAc,EACd,0BAA0B,CAAC,oBAAoB,EAC/C,oDAAoD,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CACxE,CAAC;IACJ,CAAC;AACH,CAAC;AAGD,SAAS,aAAa,CAAC,cAAsB,EAAE,SAAe,EAAE,GAAS;IACvE,MAAM,EAAE,GAAG,SAAS,CAAC,OAAO,EAAE,CAAC;IAC/B,IAAI,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,IAAI,EAAE,IAAI,GAAG,CAAC,OAAO,EAAE,IAAI,EAAE,GAAG,GAAG,CAAC,OAAO,EAAE,GAAG,4CAAoC,EAAE,CAAC;QACzG,MAAM,OAAO,CACX,cAAc,EACd,0BAA0B,CAAC,gBAAgB,EAC3C,4DAA4D,4CAAoC,GAAG,MAAM,8CAA8C,CACxJ,CAAC;IACJ,CAAC;IACD,OAAO,SAAS,CAAC,WAAW,EAAE,CAAC;AACjC,CAAC;AAED,KAAK,UAAU,OAAO,CACpB,MAAiC,EACjC,cAAsB,EACtB,KAAyB,EACzB,OAAgC;IAEhC,IAAI,MAA+D,CAAC;IACpE,IAAI,CAAC;QACH,MAAM,GAAG,MAAM,MAAM,CAAC,gBAAgB,CAAC,OAAO,CAAC,CAAC;IAClD,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,IAAI,wBAAwB,CAChC,4BAA4B,CAAC,MAAM,EACnC,cAAc,EACd,8DAA8D,cAAc,IAAI,EAChF,SAAS,EACT,EAAE,KAAK,EAAE,CACV,CAAC;IACJ,CAAC;IACD,IAAI,MAAM,CAAC,cAAc,KAAK,cAAc,EAAE,CAAC;QAE7C,MAAM,IAAI,wBAAwB,CAChC,4BAA4B,CAAC,MAAM,EACnC,cAAc,EACd,2CAA2C,MAAM,CAAC,MAAM,CAAC,cAAc,CAAC,WAAW,cAAc,IAAI,CACtG,CAAC;IACJ,CAAC;IACD,OAAO,IAAA,uBAAU,EAAC,EAAE,YAAY,EAAE,MAAM,CAAC,EAAE,EAAE,cAAc,EAAE,GAAG,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC,CAAC;AAC5G,CAAC;AAED,SAAS,OAAO,CACd,cAAsB,EACtB,OAAmC,EACnC,OAAe;IAEf,OAAO,IAAI,wBAAwB,CAAC,4BAA4B,CAAC,MAAM,EAAE,cAAc,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;AAC7G,CAAC"}
|
|
@@ -0,0 +1,5 @@
|
|
|
1
|
+
import { type HeldEphemeralDelegation } from '@xemahq/xema-service-nest';
|
|
2
|
+
import { type IssuedEphemeralDelegationRef } from './issued-ref';
|
|
3
|
+
import type { EphemeralDelegationClient } from './ephemeral-delegation';
|
|
4
|
+
export declare function heldEphemeralDelegation(minter: Pick<EphemeralDelegationClient, 'mintDelegatedContext'>, ref: IssuedEphemeralDelegationRef): HeldEphemeralDelegation;
|
|
5
|
+
//# sourceMappingURL=held-ephemeral-delegation.d.ts.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"held-ephemeral-delegation.d.ts","sourceRoot":"","sources":["../../src/ephemeral-delegation/held-ephemeral-delegation.ts"],"names":[],"mappings":"AAAA,OAAO,EAAmC,KAAK,uBAAuB,EAAE,MAAM,2BAA2B,CAAC;AAQ1G,OAAO,EAAY,KAAK,4BAA4B,EAAE,MAAM,cAAc,CAAC;AAE3E,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,wBAAwB,CAAC;AAYxE,wBAAgB,uBAAuB,CACrC,MAAM,EAAE,IAAI,CAAC,yBAAyB,EAAE,sBAAsB,CAAC,EAC/D,GAAG,EAAE,4BAA4B,GAChC,uBAAuB,CAczB"}
|
|
@@ -0,0 +1,17 @@
|
|
|
1
|
+
"use strict";
|
|
2
|
+
Object.defineProperty(exports, "__esModule", { value: true });
|
|
3
|
+
exports.heldEphemeralDelegation = heldEphemeralDelegation;
|
|
4
|
+
const xema_service_nest_1 = require("@xemahq/xema-service-nest");
|
|
5
|
+
const ephemeral_delegation_1 = require("./ephemeral-delegation");
|
|
6
|
+
const issued_ref_1 = require("./issued-ref");
|
|
7
|
+
function heldEphemeralDelegation(minter, ref) {
|
|
8
|
+
if (!(0, issued_ref_1.isIssued)(ref)) {
|
|
9
|
+
throw new ephemeral_delegation_1.EphemeralDelegationError(ephemeral_delegation_1.EphemeralDelegationOperation.Mint, ref.organizationId, 'A held ephemeral delegation is produced only from the ref the create call returned in this process.', ephemeral_delegation_1.EphemeralDelegationRefusal.NotIssued);
|
|
10
|
+
}
|
|
11
|
+
return {
|
|
12
|
+
brand: xema_service_nest_1.HELD_EPHEMERAL_DELEGATION_BRAND,
|
|
13
|
+
organizationId: ref.organizationId,
|
|
14
|
+
mintDelegatedContext: ({ audience }) => (0, ephemeral_delegation_1.mintEphemeralDelegatedToken)(minter, ref, { audience }),
|
|
15
|
+
};
|
|
16
|
+
}
|
|
17
|
+
//# sourceMappingURL=held-ephemeral-delegation.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"held-ephemeral-delegation.js","sourceRoot":"","sources":["../../src/ephemeral-delegation/held-ephemeral-delegation.ts"],"names":[],"mappings":";;AAsBA,0DAiBC;AAvCD,iEAA0G;AAE1G,iEAKgC;AAChC,6CAA2E;AAc3E,SAAgB,uBAAuB,CACrC,MAA+D,EAC/D,GAAiC;IAEjC,IAAI,CAAC,IAAA,qBAAQ,EAAC,GAAG,CAAC,EAAE,CAAC;QACnB,MAAM,IAAI,+CAAwB,CAChC,mDAA4B,CAAC,IAAI,EACjC,GAAG,CAAC,cAAc,EAClB,qGAAqG,EACrG,iDAA0B,CAAC,SAAS,CACrC,CAAC;IACJ,CAAC;IACD,OAAO;QACL,KAAK,EAAE,mDAA+B;QACtC,cAAc,EAAE,GAAG,CAAC,cAAc;QAClC,oBAAoB,EAAE,CAAC,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC,IAAA,kDAA2B,EAAC,MAAM,EAAE,GAAG,EAAE,EAAE,QAAQ,EAAE,CAAC;KAC/F,CAAC;AACJ,CAAC"}
|
|
@@ -0,0 +1,9 @@
|
|
|
1
|
+
import type { EphemeralDelegationRef } from './ephemeral-delegation';
|
|
2
|
+
declare const ISSUED_BY_AUTHORIZATION_API: unique symbol;
|
|
3
|
+
export interface IssuedEphemeralDelegationRef extends EphemeralDelegationRef {
|
|
4
|
+
readonly [ISSUED_BY_AUTHORIZATION_API]: true;
|
|
5
|
+
}
|
|
6
|
+
export declare function markIssued(ref: EphemeralDelegationRef): IssuedEphemeralDelegationRef;
|
|
7
|
+
export declare function isIssued(ref: EphemeralDelegationRef): boolean;
|
|
8
|
+
export {};
|
|
9
|
+
//# sourceMappingURL=issued-ref.d.ts.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"issued-ref.d.ts","sourceRoot":"","sources":["../../src/ephemeral-delegation/issued-ref.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,wBAAwB,CAAC;AAErE,OAAO,CAAC,MAAM,2BAA2B,EAAE,OAAO,MAAM,CAAC;AASzD,MAAM,WAAW,4BAA6B,SAAQ,sBAAsB;IAC1E,QAAQ,CAAC,CAAC,2BAA2B,CAAC,EAAE,IAAI,CAAC;CAC9C;AAMD,wBAAgB,UAAU,CAAC,GAAG,EAAE,sBAAsB,GAAG,4BAA4B,CAIpF;AAED,wBAAgB,QAAQ,CAAC,GAAG,EAAE,sBAAsB,GAAG,OAAO,CAE7D"}
|
|
@@ -0,0 +1,14 @@
|
|
|
1
|
+
"use strict";
|
|
2
|
+
Object.defineProperty(exports, "__esModule", { value: true });
|
|
3
|
+
exports.markIssued = markIssued;
|
|
4
|
+
exports.isIssued = isIssued;
|
|
5
|
+
const issued = new WeakSet();
|
|
6
|
+
function markIssued(ref) {
|
|
7
|
+
const frozen = Object.freeze({ ...ref });
|
|
8
|
+
issued.add(frozen);
|
|
9
|
+
return frozen;
|
|
10
|
+
}
|
|
11
|
+
function isIssued(ref) {
|
|
12
|
+
return issued.has(ref);
|
|
13
|
+
}
|
|
14
|
+
//# sourceMappingURL=issued-ref.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"issued-ref.js","sourceRoot":"","sources":["../../src/ephemeral-delegation/issued-ref.ts"],"names":[],"mappings":";;AAmBA,gCAIC;AAED,4BAEC;AAXD,MAAM,MAAM,GAAG,IAAI,OAAO,EAAU,CAAC;AAGrC,SAAgB,UAAU,CAAC,GAA2B;IACpD,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,EAAE,GAAG,GAAG,EAAE,CAAC,CAAC;IACzC,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IACnB,OAAO,MAAsC,CAAC;AAChD,CAAC;AAED,SAAgB,QAAQ,CAAC,GAA2B;IAClD,OAAO,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;AACzB,CAAC"}
|
|
@@ -11,6 +11,7 @@ export declare class HttpAuthorizationGrantVersionReader implements Authorizatio
|
|
|
11
11
|
private readonly identityBootstrap;
|
|
12
12
|
private readonly options;
|
|
13
13
|
constructor(registry: ServiceRegistry, identityBootstrap: IdentityBootstrapService, options: XemaAuthorizationOptions);
|
|
14
|
+
private readonly own;
|
|
14
15
|
read(orgId: string, forwardedCaller?: ForwardedCallerContext): Promise<number>;
|
|
15
16
|
}
|
|
16
17
|
export declare function assertGrantVersion(orgId: string, body: {
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"grant-version.reader.d.ts","sourceRoot":"","sources":["../src/grant-version.reader.ts"],"names":[],"mappings":"AACA,OAAO,
|
|
1
|
+
{"version":3,"file":"grant-version.reader.d.ts","sourceRoot":"","sources":["../src/grant-version.reader.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,KAAK,sBAAsB,EAAE,MAAM,kCAAkC,CAAC;AAE/E,OAAO,EAEL,KAAK,eAAe,EACrB,MAAM,oCAAoC,CAAC;AAC5C,OAAO,EAAE,wBAAwB,EAAE,MAAM,yBAAyB,CAAC;AAWnE,OAAO,EAEL,KAAK,wBAAwB,EAC9B,MAAM,yBAAyB,CAAC;AAcjC,MAAM,WAAW,+BAA+B;IAC9C,IAAI,CAAC,KAAK,EAAE,MAAM,EAAE,eAAe,CAAC,EAAE,sBAAsB,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;CAChF;AAED,eAAO,MAAM,kCAAkC,eAE9C,CAAC;AAKF,qBACa,mCACX,YAAW,+BAA+B;IAIxC,OAAO,CAAC,QAAQ,CAAC,QAAQ;IACzB,OAAO,CAAC,QAAQ,CAAC,iBAAiB;IAElC,OAAO,CAAC,QAAQ,CAAC,OAAO;gBAHP,QAAQ,EAAE,eAAe,EACzB,iBAAiB,EAAE,wBAAwB,EAE3C,OAAO,EAAE,wBAAwB;IAKpD,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAuC;IAE9C,IAAI,CACf,KAAK,EAAE,MAAM,EACb,eAAe,CAAC,EAAE,sBAAsB,GACvC,OAAO,CAAC,MAAM,CAAC;CAmCnB;AAGD,wBAAgB,kBAAkB,CAChC,KAAK,EAAE,MAAM,EACb,IAAI,EAAE;IAAE,QAAQ,CAAC,KAAK,CAAC,EAAE,OAAO,CAAC;IAAC,QAAQ,CAAC,YAAY,CAAC,EAAE,OAAO,CAAA;CAAE,GAClE,MAAM,CAaR"}
|
|
@@ -15,11 +15,11 @@ Object.defineProperty(exports, "__esModule", { value: true });
|
|
|
15
15
|
exports.HttpAuthorizationGrantVersionReader = exports.AUTHORIZATION_GRANT_VERSION_READER = void 0;
|
|
16
16
|
exports.assertGrantVersion = assertGrantVersion;
|
|
17
17
|
const common_1 = require("@nestjs/common");
|
|
18
|
-
const caller_context_1 = require("@xemahq/contracts/caller-context");
|
|
19
18
|
const http_1 = require("@xemahq/contracts/http");
|
|
20
19
|
const service_registry_1 = require("@xemahq/contracts/service-registry");
|
|
21
20
|
const identity_client_1 = require("@xemahq/identity-client");
|
|
22
21
|
const service_registry_nest_1 = require("@xemahq/service-registry-nest");
|
|
22
|
+
const xema_service_nest_1 = require("@xemahq/xema-service-nest");
|
|
23
23
|
const authorization_options_1 = require("./authorization.options");
|
|
24
24
|
const authzen_transport_1 = require("./authzen.transport");
|
|
25
25
|
exports.AUTHORIZATION_GRANT_VERSION_READER = Symbol('AUTHORIZATION_GRANT_VERSION_READER');
|
|
@@ -32,21 +32,23 @@ let HttpAuthorizationGrantVersionReader = class HttpAuthorizationGrantVersionRea
|
|
|
32
32
|
this.registry = registry;
|
|
33
33
|
this.identityBootstrap = identityBootstrap;
|
|
34
34
|
this.options = options;
|
|
35
|
+
this.own = (0, xema_service_nest_1.ownTokenSourceFor)(this.identityBootstrap);
|
|
35
36
|
}
|
|
37
|
+
own;
|
|
36
38
|
async read(orgId, forwardedCaller) {
|
|
37
39
|
const path = `${GRANT_VERSION_PATH}${encodeURIComponent(orgId)}`;
|
|
38
40
|
if (forwardedCaller === undefined) {
|
|
39
41
|
throw new authzen_transport_1.AuthzenCallerContextRequiredError(path);
|
|
40
42
|
}
|
|
43
|
+
if (forwardedCaller.orgId !== orgId) {
|
|
44
|
+
throw new authzen_transport_1.AuthzenCallerOrgMismatchError(path);
|
|
45
|
+
}
|
|
41
46
|
const baseUrl = await (0, service_registry_nest_1.resolveHttpUrl)(this.registry, service_registry_1.ServiceName.AUTHORIZATION_API);
|
|
42
|
-
const
|
|
47
|
+
const init = await (0, xema_service_nest_1.peerCallInit)((0, xema_service_nest_1.peerAuthorityForCaller)(forwardedCaller, this.own), service_registry_1.ServiceName.AUTHORIZATION_API, {
|
|
43
48
|
method: 'GET',
|
|
44
|
-
headers: {
|
|
45
|
-
...(await (0, caller_context_1.forwardedCallerHeaders)(forwardedCaller, this.identityBootstrap)),
|
|
46
|
-
'X-Xema-Org-Id': orgId,
|
|
47
|
-
},
|
|
48
49
|
signal: AbortSignal.timeout(this.options.requestTimeoutMs),
|
|
49
50
|
});
|
|
51
|
+
const response = await fetch(`${baseUrl.replace(/\/+$/, '')}${path}`, init);
|
|
50
52
|
if (!response.ok) {
|
|
51
53
|
const text = await response.text();
|
|
52
54
|
throw new authzen_transport_1.AuthzenPdpError(`authorization-api GET ${path} failed with HTTP ${response.status}: ${text.slice(0, 2000)}`, response.status, undefined);
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"grant-version.reader.js","sourceRoot":"","sources":["../src/grant-version.reader.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;
|
|
1
|
+
{"version":3,"file":"grant-version.reader.js","sourceRoot":"","sources":["../src/grant-version.reader.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;AAuGA,gDAgBC;AAvHD,2CAAoD;AAEpD,iDAAwE;AACxE,yEAG4C;AAC5C,6DAAmE;AACnE,yEAGuC;AACvC,iEAImC;AAEnC,mEAGiC;AACjC,2DAI6B;AAahB,QAAA,kCAAkC,GAAG,MAAM,CACtD,oCAAoC,CACrC,CAAC;AAGF,MAAM,kBAAkB,GAAG,+BAA+B,CAAC;AAGpD,IAAM,mCAAmC,GAAzC,MAAM,mCAAmC;IAK3B;IACA;IAEA;IALnB,YAEmB,QAAyB,EACzB,iBAA2C,EAE3C,OAAiC;QAHjC,aAAQ,GAAR,QAAQ,CAAiB;QACzB,sBAAiB,GAAjB,iBAAiB,CAA0B;QAE3C,YAAO,GAAP,OAAO,CAA0B;QAElD,IAAI,CAAC,GAAG,GAAG,IAAA,qCAAiB,EAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC;IACvD,CAAC;IAEgB,GAAG,CAAuC;IAEpD,KAAK,CAAC,IAAI,CACf,KAAa,EACb,eAAwC;QAExC,MAAM,IAAI,GAAG,GAAG,kBAAkB,GAAG,kBAAkB,CAAC,KAAK,CAAC,EAAE,CAAC;QACjE,IAAI,eAAe,KAAK,SAAS,EAAE,CAAC;YAClC,MAAM,IAAI,qDAAiC,CAAC,IAAI,CAAC,CAAC;QACpD,CAAC;QACD,IAAI,eAAe,CAAC,KAAK,KAAK,KAAK,EAAE,CAAC;YACpC,MAAM,IAAI,iDAA6B,CAAC,IAAI,CAAC,CAAC;QAChD,CAAC;QACD,MAAM,OAAO,GAAG,MAAM,IAAA,sCAAc,EAClC,IAAI,CAAC,QAAQ,EACb,8BAAW,CAAC,iBAAiB,CAC9B,CAAC;QACF,MAAM,IAAI,GAAG,MAAM,IAAA,gCAAY,EAC7B,IAAA,0CAAsB,EAAC,eAAe,EAAE,IAAI,CAAC,GAAG,CAAC,EACjD,8BAAW,CAAC,iBAAiB,EAC7B;YACE,MAAM,EAAE,KAAK;YACb,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,gBAAgB,CAAC;SAC3D,CACF,CAAC;QACF,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,OAAO,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,GAAG,IAAI,EAAE,EAAE,IAAI,CAAC,CAAC;QAC5E,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YACjB,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;YACnC,MAAM,IAAI,mCAAe,CACvB,yBAAyB,IAAI,qBAAqB,QAAQ,CAAC,MAAM,KAAK,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,EAAE,EAC3F,QAAQ,CAAC,MAAM,EACf,SAAS,CACV,CAAC;QACJ,CAAC;QACD,MAAM,IAAI,GAAG,IAAA,qCAA8B,EAGxC,MAAM,QAAQ,CAAC,IAAI,EAAE,EAAE,yBAAyB,IAAI,EAAE,CAAC,CAAC;QAC3D,OAAO,kBAAkB,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;IACzC,CAAC;CACF,CAAA;AArDY,kFAAmC;8CAAnC,mCAAmC;IAD/C,IAAA,mBAAU,GAAE;IAKR,WAAA,IAAA,eAAM,EAAC,8CAAsB,CAAC,CAAA;IAG9B,WAAA,IAAA,eAAM,EAAC,kDAA0B,CAAC,CAAA;6CADC,0CAAwB;GANnD,mCAAmC,CAqD/C;AAGD,SAAgB,kBAAkB,CAChC,KAAa,EACb,IAAmE;IAEnE,MAAM,OAAO,GAAG,IAAI,CAAC,YAAY,CAAC;IAClC,IACE,IAAI,CAAC,KAAK,KAAK,KAAK;QACpB,OAAO,OAAO,KAAK,QAAQ;QAC3B,CAAC,MAAM,CAAC,aAAa,CAAC,OAAO,CAAC;QAC9B,OAAO,GAAG,CAAC,EACX,CAAC;QACD,MAAM,IAAI,KAAK,CACb,mEAAmE,KAAK,IAAI,CAC7E,CAAC;IACJ,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC"}
|
package/dist/index.d.ts
CHANGED
|
@@ -18,5 +18,7 @@ export * from './durable-delegation/decision-codes';
|
|
|
18
18
|
export * from './durable-delegation/holder-client';
|
|
19
19
|
export * from './durable-delegation/holder-errors';
|
|
20
20
|
export * from './durable-delegation/holder-lifecycle';
|
|
21
|
+
export * from './durable-delegation/router-replay';
|
|
21
22
|
export * from './ephemeral-delegation/ephemeral-delegation';
|
|
23
|
+
export * from './ephemeral-delegation/held-ephemeral-delegation';
|
|
22
24
|
//# sourceMappingURL=index.d.ts.map
|
package/dist/index.d.ts.map
CHANGED
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,cAAc,oBAAoB,CAAC;AACnC,cAAc,wBAAwB,CAAC;AACvC,cAAc,yBAAyB,CAAC;AACxC,cAAc,uBAAuB,CAAC;AACtC,cAAc,qBAAqB,CAAC;AACpC,cAAc,wBAAwB,CAAC;AACvC,cAAc,sBAAsB,CAAC;AACrC,cAAc,oBAAoB,CAAC;AACnC,cAAc,wBAAwB,CAAC;AACvC,cAAc,0BAA0B,CAAC;AACzC,cAAc,2CAA2C,CAAC;AAC1D,cAAc,qCAAqC,CAAC;AACpD,cAAc,oBAAoB,CAAC;AACnC,cAAc,mCAAmC,CAAC;AAClD,cAAc,oCAAoC,CAAC;AACnD,cAAc,qCAAqC,CAAC;AACpD,cAAc,qCAAqC,CAAC;AACpD,cAAc,oCAAoC,CAAC;AACnD,cAAc,oCAAoC,CAAC;AACnD,cAAc,uCAAuC,CAAC;AACtD,cAAc,6CAA6C,CAAC"}
|
|
1
|
+
{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,cAAc,oBAAoB,CAAC;AACnC,cAAc,wBAAwB,CAAC;AACvC,cAAc,yBAAyB,CAAC;AACxC,cAAc,uBAAuB,CAAC;AACtC,cAAc,qBAAqB,CAAC;AACpC,cAAc,wBAAwB,CAAC;AACvC,cAAc,sBAAsB,CAAC;AACrC,cAAc,oBAAoB,CAAC;AACnC,cAAc,wBAAwB,CAAC;AACvC,cAAc,0BAA0B,CAAC;AACzC,cAAc,2CAA2C,CAAC;AAC1D,cAAc,qCAAqC,CAAC;AACpD,cAAc,oBAAoB,CAAC;AACnC,cAAc,mCAAmC,CAAC;AAClD,cAAc,oCAAoC,CAAC;AACnD,cAAc,qCAAqC,CAAC;AACpD,cAAc,qCAAqC,CAAC;AACpD,cAAc,oCAAoC,CAAC;AACnD,cAAc,oCAAoC,CAAC;AACnD,cAAc,uCAAuC,CAAC;AACtD,cAAc,oCAAoC,CAAC;AACnD,cAAc,6CAA6C,CAAC;AAC5D,cAAc,kDAAkD,CAAC"}
|
package/dist/index.js
CHANGED
|
@@ -34,5 +34,7 @@ __exportStar(require("./durable-delegation/decision-codes"), exports);
|
|
|
34
34
|
__exportStar(require("./durable-delegation/holder-client"), exports);
|
|
35
35
|
__exportStar(require("./durable-delegation/holder-errors"), exports);
|
|
36
36
|
__exportStar(require("./durable-delegation/holder-lifecycle"), exports);
|
|
37
|
+
__exportStar(require("./durable-delegation/router-replay"), exports);
|
|
37
38
|
__exportStar(require("./ephemeral-delegation/ephemeral-delegation"), exports);
|
|
39
|
+
__exportStar(require("./ephemeral-delegation/held-ephemeral-delegation"), exports);
|
|
38
40
|
//# sourceMappingURL=index.js.map
|
package/dist/index.js.map
CHANGED
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,qDAAmC;AACnC,yDAAuC;AACvC,0DAAwC;AACxC,wDAAsC;AACtC,sDAAoC;AACpC,yDAAuC;AACvC,uDAAqC;AACrC,qDAAmC;AACnC,yDAAuC;AACvC,2DAAyC;AACzC,4EAA0D;AAC1D,sEAAoD;AACpD,qDAAmC;AACnC,oEAAkD;AAClD,qEAAmD;AACnD,sEAAoD;AACpD,sEAAoD;AACpD,qEAAmD;AACnD,qEAAmD;AACnD,wEAAsD;AACtD,8EAA4D"}
|
|
1
|
+
{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,qDAAmC;AACnC,yDAAuC;AACvC,0DAAwC;AACxC,wDAAsC;AACtC,sDAAoC;AACpC,yDAAuC;AACvC,uDAAqC;AACrC,qDAAmC;AACnC,yDAAuC;AACvC,2DAAyC;AACzC,4EAA0D;AAC1D,sEAAoD;AACpD,qDAAmC;AACnC,oEAAkD;AAClD,qEAAmD;AACnD,sEAAoD;AACpD,sEAAoD;AACpD,qEAAmD;AACnD,qEAAmD;AACnD,wEAAsD;AACtD,qEAAmD;AACnD,8EAA4D;AAC5D,mFAAiE"}
|
|
@@ -7,4 +7,5 @@ export declare enum OrganizationDelegationRefusalCode {
|
|
|
7
7
|
}
|
|
8
8
|
export declare function AcceptOrganizationDelegationFor(capability: string): MethodDecorator & ClassDecorator;
|
|
9
9
|
export declare function assertOrganizationDelegationAdmitted(ctx: RequestContext, operation: string | undefined): void;
|
|
10
|
+
export declare function admitsAsOrganizationDelegate(ctx: RequestContext, operation: string): boolean;
|
|
10
11
|
//# sourceMappingURL=organization-delegation-admission.d.ts.map
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"organization-delegation-admission.d.ts","sourceRoot":"","sources":["../src/organization-delegation-admission.ts"],"names":[],"mappings":"AACA,OAAO,EAEL,KAAK,cAAc,EACpB,MAAM,kCAAkC,CAAC;AAQ1C,eAAO,MAAM,kCAAkC,4CAA4C,CAAC;AAG5F,oBAAY,iCAAiC;IAE3C,WAAW,yCAAyC;IAEpD,kBAAkB,iDAAiD;IAEnE,gBAAgB,+CAA+C;CAChE;AAOD,wBAAgB,+BAA+B,CAAC,UAAU,EAAE,MAAM,GAAG,eAAe,GAAG,cAAc,CAKpG;AAiBD,wBAAgB,oCAAoC,CAClD,GAAG,EAAE,cAAc,EACnB,SAAS,EAAE,MAAM,GAAG,SAAS,GAC5B,IAAI,CAgCN"}
|
|
1
|
+
{"version":3,"file":"organization-delegation-admission.d.ts","sourceRoot":"","sources":["../src/organization-delegation-admission.ts"],"names":[],"mappings":"AACA,OAAO,EAEL,KAAK,cAAc,EACpB,MAAM,kCAAkC,CAAC;AAQ1C,eAAO,MAAM,kCAAkC,4CAA4C,CAAC;AAG5F,oBAAY,iCAAiC;IAE3C,WAAW,yCAAyC;IAEpD,kBAAkB,iDAAiD;IAEnE,gBAAgB,+CAA+C;CAChE;AAOD,wBAAgB,+BAA+B,CAAC,UAAU,EAAE,MAAM,GAAG,eAAe,GAAG,cAAc,CAKpG;AAiBD,wBAAgB,oCAAoC,CAClD,GAAG,EAAE,cAAc,EACnB,SAAS,EAAE,MAAM,GAAG,SAAS,GAC5B,IAAI,CAgCN;AAUD,wBAAgB,4BAA4B,CAAC,GAAG,EAAE,cAAc,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAM5F"}
|
|
@@ -3,6 +3,7 @@ Object.defineProperty(exports, "__esModule", { value: true });
|
|
|
3
3
|
exports.OrganizationDelegationRefusalCode = exports.ACCEPT_ORGANIZATION_DELEGATION_FOR = void 0;
|
|
4
4
|
exports.AcceptOrganizationDelegationFor = AcceptOrganizationDelegationFor;
|
|
5
5
|
exports.assertOrganizationDelegationAdmitted = assertOrganizationDelegationAdmitted;
|
|
6
|
+
exports.admitsAsOrganizationDelegate = admitsAsOrganizationDelegate;
|
|
6
7
|
const common_1 = require("@nestjs/common");
|
|
7
8
|
const caller_context_1 = require("@xemahq/contracts/caller-context");
|
|
8
9
|
const subject_1 = require("@xemahq/contracts/subject");
|
|
@@ -41,6 +42,13 @@ function assertOrganizationDelegationAdmitted(ctx, operation) {
|
|
|
41
42
|
throw refusal(OrganizationDelegationRefusalCode.OperationNotLent, `The organization's delegation does not lend ${operation}.`);
|
|
42
43
|
}
|
|
43
44
|
}
|
|
45
|
+
function admitsAsOrganizationDelegate(ctx, operation) {
|
|
46
|
+
if (ctx.subject.kind !== subject_1.SubjectKind.Organization) {
|
|
47
|
+
return false;
|
|
48
|
+
}
|
|
49
|
+
assertOrganizationDelegationAdmitted(ctx, operation);
|
|
50
|
+
return true;
|
|
51
|
+
}
|
|
44
52
|
function refusal(code, message) {
|
|
45
53
|
return new common_1.ForbiddenException({ code, message });
|
|
46
54
|
}
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"organization-delegation-admission.js","sourceRoot":"","sources":["../src/organization-delegation-admission.ts"],"names":[],"mappings":";;;AA6BA,0EAKC;AAiBD,oFAmCC;
|
|
1
|
+
{"version":3,"file":"organization-delegation-admission.js","sourceRoot":"","sources":["../src/organization-delegation-admission.ts"],"names":[],"mappings":";;;AA6BA,0EAKC;AAiBD,oFAmCC;AAUD,oEAMC;AAtGD,2CAAiE;AACjE,qEAG0C;AAC1C,uDAImC;AAGtB,QAAA,kCAAkC,GAAG,yCAAyC,CAAC;AAG5F,IAAY,iCAOX;AAPD,WAAY,iCAAiC;IAE3C,yFAAoD,CAAA;IAEpD,wGAAmE,CAAA;IAEnE,oGAA+D,CAAA;AACjE,CAAC,EAPW,iCAAiC,iDAAjC,iCAAiC,QAO5C;AAOD,SAAgB,+BAA+B,CAAC,UAAkB;IAChE,IAAI,UAAU,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;QAC7B,MAAM,IAAI,KAAK,CAAC,4DAA4D,CAAC,CAAC;IAChF,CAAC;IACD,OAAO,IAAA,oBAAW,EAAC,0CAAkC,EAAE,UAAU,CAAC,CAAC;AACrE,CAAC;AAiBD,SAAgB,oCAAoC,CAClD,GAAmB,EACnB,SAA6B;IAE7B,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;QAC5B,MAAM,OAAO,CACX,iCAAiC,CAAC,WAAW,EAC7C,qDAAqD,CACtD,CAAC;IACJ,CAAC;IACD,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;IAC/B,IACE,GAAG,CAAC,OAAO,CAAC,IAAI,KAAK,qBAAW,CAAC,YAAY;QAC7C,GAAG,CAAC,UAAU,KAAK,SAAS;QAC5B,KAAK,CAAC,MAAM,KAAK,CAAC;QAClB,GAAG,CAAC,OAAO,CAAC,EAAE,KAAK,KAAK;QACxB,GAAG,CAAC,YAAY,KAAK,SAAS;QAC9B,CAAC,IAAA,qCAAoB,EAAC,GAAG,CAAC,YAAY,CAAC,EACvC,CAAC;QACD,MAAM,OAAO,CACX,iCAAiC,CAAC,kBAAkB,EACpD,6GAA6G,CAC9G,CAAC;IACJ,CAAC;IACD,MAAM,OAAO,GAAG,IAAA,oCAA0B,EAAC;QACzC,WAAW,EAAE,GAAG,CAAC,OAAO,CAAC,IAAI;QAC7B,UAAU,EAAE,GAAG,CAAC,UAAU;QAC1B,UAAU,EAAE,SAAS;KACtB,CAAC,CAAC;IACH,IAAI,OAAO,KAAK,mCAAyB,CAAC,QAAQ,EAAE,CAAC;QACnD,MAAM,OAAO,CACX,iCAAiC,CAAC,gBAAgB,EAClD,+CAA+C,SAAS,GAAG,CAC5D,CAAC;IACJ,CAAC;AACH,CAAC;AAUD,SAAgB,4BAA4B,CAAC,GAAmB,EAAE,SAAiB;IACjF,IAAI,GAAG,CAAC,OAAO,CAAC,IAAI,KAAK,qBAAW,CAAC,YAAY,EAAE,CAAC;QAClD,OAAO,KAAK,CAAC;IACf,CAAC;IACD,oCAAoC,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;IACrD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,OAAO,CAAC,IAAuC,EAAE,OAAe;IACvE,OAAO,IAAI,2BAAkB,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC;AACnD,CAAC"}
|
package/package.json
CHANGED
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
{
|
|
2
2
|
"name": "@xemahq/authorization-nest",
|
|
3
|
-
"version": "0.
|
|
3
|
+
"version": "0.9.0",
|
|
4
4
|
"description": "AuthZEN 1.0 PEP for Xema services: one Nest module, an AuthZEN client against authorization-api, and the @Authorize route guard.",
|
|
5
5
|
"publishConfig": {
|
|
6
6
|
"registry": "https://registry.npmjs.org/",
|
|
@@ -25,12 +25,12 @@
|
|
|
25
25
|
"@nestjs/common": "11.1.18",
|
|
26
26
|
"@nestjs/core": "11.1.18",
|
|
27
27
|
"@nestjs/testing": "11.1.18",
|
|
28
|
-
"@xemahq/contracts": "^0.
|
|
28
|
+
"@xemahq/contracts": "^0.91.0",
|
|
29
29
|
"@xemahq/eslint-config": "^0.14.1",
|
|
30
30
|
"@xemahq/identity-client": "^0.28.0",
|
|
31
31
|
"@xemahq/platform-common": "^0.83.1",
|
|
32
32
|
"@xemahq/service-registry-nest": "^1.1.0",
|
|
33
|
-
"@xemahq/xema-service-nest": "^
|
|
33
|
+
"@xemahq/xema-service-nest": "^14.1.1",
|
|
34
34
|
"@types/jest": "^30.0.0",
|
|
35
35
|
"@types/node": "25.2.3",
|
|
36
36
|
"eslint": "^9.39.4",
|
|
@@ -64,6 +64,6 @@
|
|
|
64
64
|
"test": "jest --config jest.config.ts"
|
|
65
65
|
},
|
|
66
66
|
"xemaRelease": {
|
|
67
|
-
"sourceDigest": "sha256:
|
|
67
|
+
"sourceDigest": "sha256:bc1b1600484372049b3ee88307ea83e6bc0ca710e7e971a23d02531ae6fa0baa"
|
|
68
68
|
}
|
|
69
69
|
}
|