@xemahq/identity-client 0.3.2

package/dist/nestjs/org-auth/org-admin.guard.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"org-admin.guard.js","sourceRoot":"","sources":["../../../src/nestjs/org-auth/org-admin.guard.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,2CAQwB;AACxB,yCAAiD;AACjD,uCAAuD;AACvD,qDAAmD;AAMnD,MAAM,oBAAoB,GAAG,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC;AAG3C,MAAM,cAAc,GAAG,MAAM,CAAC;AA4BvB,IAAM,aAAa,qBAAnB,MAAM,aAAa;IACP,MAAM,GAAG,IAAI,eAAM,CAAC,eAAa,CAAC,IAAI,CAAC,CAAC;IACxC,cAAc,CAAoB;IAClC,UAAU,CAAS;IACnB,KAAK,GAAG,IAAI,GAAG,EAAsB,CAAC;IAEvD,YAEE,MAAqB;QAErB,IAAI,CAAC,cAAc,GAAG,IAAI,0BAAiB,CAAC;YAC1C,OAAO,EAAE,MAAM,CAAC,cAAc;YAC9B,aAAa,EAAE,MAAM,CAAC,wBAAwB;SAC/C,CAAC,CAAC;QACH,IAAI,CAAC,UAAU,GAAG,MAAM,CAAC,UAAU,IAAI,oBAAoB,CAAC;IAC9D,CAAC;IAED,KAAK,CAAC,WAAW,CAAC,OAAyB;QACzC,MAAM,OAAO,GAAG,OAAO,CAAC,YAAY,EAAE,CAAC,UAAU,EAAE,CAAC;QACpD,MAAM,GAAG,GAAG,IAAI,CAAC,cAAc,CAAC,OAAO,CAAC,CAAC;QAEzC,IAAI,CAAC,GAAG,EAAE,CAAC;YACT,MAAM,IAAI,2BAAkB,CAAC,+BAA+B,CAAC,CAAC;QAChE,CAAC;QAGD,IAAI,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,gBAAgB,CAAC,EAAE,CAAC;YACzC,OAAO,IAAI,CAAC;QACd,CAAC;QAED,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,GAAG,GAAG,CAAC;QAC/B,IAAI,CAAC,KAAK,IAAI,CAAC,OAAO,EAAE,CAAC;YACvB,MAAM,IAAI,2BAAkB,CAAC,+BAA+B,CAAC,CAAC;QAChE,CAAC;QAED,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,KAAK,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,CAAC,CAAC;QAEpE,IAAI,CAAC,IAAI,IAAI,CAAC,uBAAe,CAAC,GAAG,CAAC,IAAe,CAAC,EAAE,CAAC;YACnD,IAAI,CAAC,MAAM,CAAC,IAAI,CACd,qCAAqC,OAAO,WAAW,KAAK,WAAW,IAAI,IAAI,MAAM,GAAG,CACzF,CAAC;YACF,MAAM,IAAI,2BAAkB,CAC1B,gDAAgD,CACjD,CAAC;QACJ,CAAC;QAED,OAAO,IAAI,CAAC;IACd,CAAC;IAEO,KAAK,CAAC,cAAc,CAC1B,KAAa,EACb,OAAe,EACf,KAAc;QAEd,MAAM,QAAQ,GAAG,GAAG,KAAK,IAAI,OAAO,EAAE,CAAC;QAEvC,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QACxC,IAAI,MAAM,IAAI,MAAM,CAAC,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC;YAC5C,OAAO,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC;QAC9B,CAAC;QAED,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,gBAAgB,CACzD,OAAO,EACP,KAAK,EACL,KAAK,CACN,CAAC;YAEF,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,QAAQ,EAAE;gBACvB,QAAQ;gBACR,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,UAAU;aACxC,CAAC,CAAC;YAEH,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,GAAG,cAAc,EAAE,CAAC;gBACrC,IAAI,CAAC,mBAAmB,EAAE,CAAC;YAC7B,CAAC;YAED,OAAO,QAAQ,CAAC,IAAI,CAAC;QACvB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,OAAO,GACX,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe,CAAC;YAC3D,IAAI,CAAC,MAAM,CAAC,KAAK,CACf,6CAA6C,OAAO,WAAW,KAAK,KAAK,OAAO,EAAE,CACnF,CAAC;YACF,MAAM,IAAI,oCAA2B,CACnC,6DAA6D,CAC9D,CAAC;QACJ,CAAC;IACH,CAAC;IAOO,cAAc,CACpB,OAAyC;QAKzC,MAAM,OAAO,GAAG,MAAM,CAAC,qBAAqB,CAAC,OAAO,CAAC,CAAC;QACtD,KAAK,MAAM,GAAG,IAAI,OAAO,EAAE,CAAC;YAC1B,IAAI,GAAG,CAAC,WAAW,KAAK,iBAAiB,EAAE,CAAC;gBAC1C,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAkC,CAAC;gBAC1D,OAAO,GAAG,CAAC;YACb,CAAC;QACH,CAAC;QACD,OAAO,SAAS,CAAC;IACnB,CAAC;IAEO,mBAAmB;QACzB,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;YACtC,IAAI,KAAK,CAAC,SAAS,IAAI,GAAG,EAAE,CAAC;gBAC3B,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YACzB,CAAC;QACH,CAAC;IACH,CAAC;CACF,CAAA;AAvHY,sCAAa;wBAAb,aAAa;IADzB,IAAA,mBAAU,GAAE;IAQR,WAAA,IAAA,eAAM,EAAC,gCAAe,CAAC,CAAA;;GAPf,aAAa,CAuHzB"}

package/dist/nestjs/org-auth/org-auth.module.d.ts

@@ -0,0 +1,6 @@
+import { DynamicModule } from '@nestjs/common';
+import type { OrgAuthConfig, OrgAuthModuleAsyncOptions } from './org-auth.types';
+export declare class OrgAuthModule {
+    static forRoot(config: OrgAuthConfig): DynamicModule;
+    static forRootAsync(options: OrgAuthModuleAsyncOptions): DynamicModule;
+}

package/dist/nestjs/org-auth/org-auth.module.js

@@ -0,0 +1,46 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var OrgAuthModule_1;
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.OrgAuthModule = void 0;
+const common_1 = require("@nestjs/common");
+const org_admin_guard_1 = require("./org-admin.guard");
+const org_auth_types_1 = require("./org-auth.types");
+let OrgAuthModule = OrgAuthModule_1 = class OrgAuthModule {
+    static forRoot(config) {
+        const configProvider = {
+            provide: org_auth_types_1.ORG_AUTH_CONFIG,
+            useValue: config,
+        };
+        return {
+            module: OrgAuthModule_1,
+            global: true,
+            providers: [configProvider, org_admin_guard_1.OrgAdminGuard],
+            exports: [org_auth_types_1.ORG_AUTH_CONFIG, org_admin_guard_1.OrgAdminGuard],
+        };
+    }
+    static forRootAsync(options) {
+        const configProvider = {
+            provide: org_auth_types_1.ORG_AUTH_CONFIG,
+            useFactory: options.useFactory,
+            inject: options.inject || [],
+        };
+        return {
+            module: OrgAuthModule_1,
+            global: true,
+            imports: options.imports || [],
+            providers: [configProvider, org_admin_guard_1.OrgAdminGuard],
+            exports: [org_auth_types_1.ORG_AUTH_CONFIG, org_admin_guard_1.OrgAdminGuard],
+        };
+    }
+};
+exports.OrgAuthModule = OrgAuthModule;
+exports.OrgAuthModule = OrgAuthModule = OrgAuthModule_1 = __decorate([
+    (0, common_1.Module)({})
+], OrgAuthModule);
+//# sourceMappingURL=org-auth.module.js.map

package/dist/nestjs/org-auth/org-auth.module.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"org-auth.module.js","sourceRoot":"","sources":["../../../src/nestjs/org-auth/org-auth.module.ts"],"names":[],"mappings":";;;;;;;;;;AAAA,2CAAiE;AAEjE,uDAAkD;AAClD,qDAAmD;AAwC5C,IAAM,aAAa,qBAAnB,MAAM,aAAa;IAIxB,MAAM,CAAC,OAAO,CAAC,MAAqB;QAClC,MAAM,cAAc,GAAa;YAC/B,OAAO,EAAE,gCAAe;YACxB,QAAQ,EAAE,MAAM;SACjB,CAAC;QAEF,OAAO;YACL,MAAM,EAAE,eAAa;YACrB,MAAM,EAAE,IAAI;YACZ,SAAS,EAAE,CAAC,cAAc,EAAE,+BAAa,CAAC;YAC1C,OAAO,EAAE,CAAC,gCAAe,EAAE,+BAAa,CAAC;SAC1C,CAAC;IACJ,CAAC;IAKD,MAAM,CAAC,YAAY,CAAC,OAAkC;QACpD,MAAM,cAAc,GAAa;YAC/B,OAAO,EAAE,gCAAe;YACxB,UAAU,EAAE,OAAO,CAAC,UAAU;YAC9B,MAAM,EAAE,OAAO,CAAC,MAAM,IAAI,EAAE;SAC7B,CAAC;QAEF,OAAO;YACL,MAAM,EAAE,eAAa;YACrB,MAAM,EAAE,IAAI;YACZ,OAAO,EAAE,OAAO,CAAC,OAAO,IAAI,EAAE;YAC9B,SAAS,EAAE,CAAC,cAAc,EAAE,+BAAa,CAAC;YAC1C,OAAO,EAAE,CAAC,gCAAe,EAAE,+BAAa,CAAC;SAC1C,CAAC;IACJ,CAAC;CACF,CAAA;AApCY,sCAAa;wBAAb,aAAa;IADzB,IAAA,eAAM,EAAC,EAAE,CAAC;GACE,aAAa,CAoCzB"}

package/dist/nestjs/org-auth/org-auth.types.d.ts

@@ -0,0 +1,14 @@
+import type { InjectionToken, Type, ForwardReference, DynamicModule } from '@nestjs/common';
+export declare const ORG_AUTH_CONFIG: unique symbol;
+export interface OrgAuthConfig {
+    identityApiUrl: string;
+    identityApiInternalToken: string;
+    cacheTtlMs?: number;
+}
+type ModuleImport = Type<unknown> | ForwardReference<unknown> | DynamicModule | Promise<DynamicModule>;
+export interface OrgAuthModuleAsyncOptions {
+    imports?: ModuleImport[];
+    useFactory: (...args: any[]) => Promise<OrgAuthConfig> | OrgAuthConfig;
+    inject?: InjectionToken[];
+}
+export {};

package/dist/nestjs/org-auth/org-auth.types.js

@@ -0,0 +1,5 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ORG_AUTH_CONFIG = void 0;
+exports.ORG_AUTH_CONFIG = Symbol('ORG_AUTH_CONFIG');
+//# sourceMappingURL=org-auth.types.js.map

package/dist/nestjs/org-auth/org-auth.types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"org-auth.types.js","sourceRoot":"","sources":["../../../src/nestjs/org-auth/org-auth.types.ts"],"names":[],"mappings":";;;AAOa,QAAA,eAAe,GAAG,MAAM,CAAC,iBAAiB,CAAC,CAAC"}

package/dist/types.d.ts

@@ -0,0 +1,85 @@
+export type ServiceType = 'BACKEND' | 'INTEGRATION' | 'FRONTEND' | 'MOBILE' | 'IOT' | 'OTHER';
+export declare enum InternalTokenScope {
+    SINGLE_REALM = "SINGLE_REALM",
+    MULTI_REALM = "MULTI_REALM",
+    ALL_REALMS_NAMESPACE = "ALL_REALMS_NAMESPACE"
+}
+export interface IdentityApiClientOptions {
+    baseUrl: string;
+    internalToken: string;
+    timeoutMs?: number;
+}
+export interface RegisterServiceRequest {
+    name: string;
+    displayName: string;
+    description?: string;
+    serviceType?: ServiceType;
+    regenerateSecret?: boolean;
+    realm?: string;
+}
+export interface RegisterServiceResponse {
+    id: string;
+    clientSecret: string | null;
+    tokenEndpoint: string;
+    alreadyExisted: boolean;
+    secretRegenerated: boolean;
+    roles: string[];
+    keycloakBaseUrl: string;
+    allowedRealms: string[];
+    primaryRealm: string | null;
+    internalTokenScope: InternalTokenScope;
+}
+export interface ServiceCredentials {
+    clientId: string;
+    clientSecret: string | null;
+    tokenEndpoint: string;
+    roles: string[];
+    keycloakBaseUrl: string;
+    allowedRealms: string[];
+    primaryRealm: string | null;
+    internalTokenScope: InternalTokenScope;
+}
+export interface EnsureSystemOrgRequest {
+    name: string;
+    displayName: string;
+    description?: string;
+    metadata?: Record<string, unknown>;
+}
+export interface Organization {
+    id: string;
+    name: string;
+    displayName: string;
+    description?: string;
+    metadata?: Record<string, unknown>;
+}
+export declare enum OrgRole {
+    ORG_OWNER = "org_owner",
+    ORG_ADMIN = "org_admin",
+    ORG_MEMBER = "org_member"
+}
+export declare const ORG_ADMIN_ROLES: ReadonlySet<OrgRole>;
+export interface VerifyMembershipParams {
+    userId: string;
+    orgId: string;
+    realm?: string;
+}
+export interface VerifyMembershipResponse {
+    isMember: boolean;
+    role?: OrgRole;
+}
+export interface OnBehalfOfTokenRequest {
+    userId: string;
+    orgId: string;
+    realm?: string;
+    audience?: string;
+    scopes?: string[];
+}
+export interface OnBehalfOfTokenResponse {
+    accessToken: string;
+    expiresIn: number;
+    tokenType: 'Bearer';
+    realm: string;
+}
+export interface ApiEnvelope<T> {
+    data: T;
+}

package/dist/types.js

@@ -0,0 +1,20 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ORG_ADMIN_ROLES = exports.OrgRole = exports.InternalTokenScope = void 0;
+var InternalTokenScope;
+(function (InternalTokenScope) {
+    InternalTokenScope["SINGLE_REALM"] = "SINGLE_REALM";
+    InternalTokenScope["MULTI_REALM"] = "MULTI_REALM";
+    InternalTokenScope["ALL_REALMS_NAMESPACE"] = "ALL_REALMS_NAMESPACE";
+})(InternalTokenScope || (exports.InternalTokenScope = InternalTokenScope = {}));
+var OrgRole;
+(function (OrgRole) {
+    OrgRole["ORG_OWNER"] = "org_owner";
+    OrgRole["ORG_ADMIN"] = "org_admin";
+    OrgRole["ORG_MEMBER"] = "org_member";
+})(OrgRole || (exports.OrgRole = OrgRole = {}));
+exports.ORG_ADMIN_ROLES = new Set([
+    OrgRole.ORG_OWNER,
+    OrgRole.ORG_ADMIN,
+]);
+//# sourceMappingURL=types.js.map

package/dist/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":";;;AAgBA,IAAY,kBAIX;AAJD,WAAY,kBAAkB;IAC5B,mDAA6B,CAAA;IAC7B,iDAA2B,CAAA;IAC3B,mEAA6C,CAAA;AAC/C,CAAC,EAJW,kBAAkB,kCAAlB,kBAAkB,QAI7B;AAwFD,IAAY,OAIX;AAJD,WAAY,OAAO;IACjB,kCAAuB,CAAA;IACvB,kCAAuB,CAAA;IACvB,oCAAyB,CAAA;AAC3B,CAAC,EAJW,OAAO,uBAAP,OAAO,QAIlB;AAGY,QAAA,eAAe,GAAyB,IAAI,GAAG,CAAC;IAC3D,OAAO,CAAC,SAAS;IACjB,OAAO,CAAC,SAAS;CAClB,CAAC,CAAC"}

package/package.json

@@ -0,0 +1,53 @@
+{
+  "name": "@xemahq/identity-client",
+  "version": "0.3.2",
+  "description": "NestJS client library and standalone HTTP client for Identity API - service registration, credential management, and JWT token lifecycle",
+  "author": "xemahq",
+  "license": "MIT",
+  "main": "dist/index.js",
+  "types": "dist/index.d.ts",
+  "files": [
+    "dist"
+  ],
+  "publishConfig": {
+    "registry": "https://registry.npmjs.org/",
+    "access": "public"
+  },
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/xema-dev/identity-api.git",
+    "directory": "packages/identity-client"
+  },
+  "keywords": [
+    "nestjs",
+    "identity",
+    "service-account",
+    "authentication",
+    "keycloak",
+    "microservices"
+  ],
+  "scripts": {
+    "build": "tsc -p tsconfig.build.json",
+    "build:watch": "tsc -p tsconfig.build.json --watch",
+    "clean": "rm -rf dist",
+    "prepublishOnly": "npm run build"
+  },
+  "peerDependencies": {
+    "@nestjs/common": "^10.0.0 || ^11.0.0",
+    "reflect-metadata": "^0.1.12 || ^0.2.0"
+  },
+  "peerDependenciesMeta": {
+    "@nestjs/common": {
+      "optional": true
+    },
+    "reflect-metadata": {
+      "optional": true
+    }
+  },
+  "devDependencies": {
+    "@nestjs/common": "^11.0.0",
+    "@types/node": "^22.0.0",
+    "reflect-metadata": "^0.2.2",
+    "typescript": "^5.9.0"
+  }
+}