@xemahq/platform-common 0.2.16 → 0.2.18
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/dist/lib/redaction/default-rules.d.ts.map +1 -1
- package/dist/lib/redaction/default-rules.js +12 -0
- package/dist/lib/redaction/default-rules.js.map +1 -1
- package/dist/lib/tool-usage-counter.d.ts.map +1 -1
- package/dist/lib/tool-usage-counter.js.map +1 -1
- package/dist/nestjs/auth/idp-tenant-resolver.d.ts +9 -0
- package/dist/nestjs/auth/idp-tenant-resolver.d.ts.map +1 -0
- package/dist/nestjs/auth/idp-tenant-resolver.js +28 -0
- package/dist/nestjs/auth/idp-tenant-resolver.js.map +1 -0
- package/dist/nestjs/auth/org-claim.d.ts.map +1 -1
- package/dist/nestjs/auth/org-claim.js.map +1 -1
- package/dist/nestjs/auth/service-token.guard.d.ts.map +1 -1
- package/dist/nestjs/auth/service-token.guard.js.map +1 -1
- package/dist/nestjs/cors.config.d.ts.map +1 -1
- package/dist/nestjs/cors.config.js +12 -0
- package/dist/nestjs/cors.config.js.map +1 -1
- package/dist/nestjs/index.d.ts +3 -3
- package/dist/nestjs/index.d.ts.map +1 -1
- package/dist/nestjs/index.js +9 -5
- package/dist/nestjs/index.js.map +1 -1
- package/dist/nestjs/integration-webhooks/integration-webhook-envelope.dto.d.ts.map +1 -1
- package/dist/nestjs/integration-webhooks/integration-webhook-envelope.dto.js.map +1 -1
- package/dist/nestjs/jwt-verification.guard.d.ts +3 -3
- package/dist/nestjs/jwt-verification.guard.d.ts.map +1 -1
- package/dist/nestjs/jwt-verification.guard.js +56 -73
- package/dist/nestjs/jwt-verification.guard.js.map +1 -1
- package/dist/nestjs/public.decorator.d.ts +1 -0
- package/dist/nestjs/public.decorator.d.ts.map +1 -1
- package/dist/nestjs/public.decorator.js +4 -1
- package/dist/nestjs/public.decorator.js.map +1 -1
- package/dist/nestjs/response-envelope.interceptor.js +1 -1
- package/dist/nestjs/response-envelope.interceptor.js.map +1 -1
- package/package.json +13 -3
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"default-rules.d.ts","sourceRoot":"","sources":["../../../src/lib/redaction/default-rules.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AAYtD,eAAO,MAAM,uBAAuB,EAAE,SAAS,aAAa,
|
|
1
|
+
{"version":3,"file":"default-rules.d.ts","sourceRoot":"","sources":["../../../src/lib/redaction/default-rules.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AAYtD,eAAO,MAAM,uBAAuB,EAAE,SAAS,aAAa,EAyE3D,CAAC"}
|
|
@@ -8,6 +8,12 @@ exports.DEFAULT_REDACTION_RULES = [
|
|
|
8
8
|
stringPattern: /(\bBearer\s+)([A-Za-z0-9\-_=.+/]{8,})/gi,
|
|
9
9
|
replacement: '$1[redacted]',
|
|
10
10
|
},
|
|
11
|
+
{
|
|
12
|
+
name: 'basic-auth',
|
|
13
|
+
description: 'HTTP Authorization: Basic <base64> in any string value.',
|
|
14
|
+
stringPattern: /(\bBasic\s+)([A-Za-z0-9+/]{8,}={0,2})/gi,
|
|
15
|
+
replacement: '$1[redacted]',
|
|
16
|
+
},
|
|
11
17
|
{
|
|
12
18
|
name: 'jwt',
|
|
13
19
|
description: 'JWT-shaped triple-segment base64url tokens.',
|
|
@@ -56,6 +62,12 @@ exports.DEFAULT_REDACTION_RULES = [
|
|
|
56
62
|
fieldName: /^(api[-_]?key|access[-_]?token|refresh[-_]?token|auth[-_]?token|bearer)$/i,
|
|
57
63
|
replacement: '[redacted]',
|
|
58
64
|
},
|
|
65
|
+
{
|
|
66
|
+
name: 'field:auth-headers',
|
|
67
|
+
description: 'HTTP credential-carrying header field names (authorization, cookie, set-cookie).',
|
|
68
|
+
fieldName: /^(authorization|cookie|set-cookie)$/i,
|
|
69
|
+
replacement: '[redacted]',
|
|
70
|
+
},
|
|
59
71
|
{
|
|
60
72
|
name: 'field:private-key',
|
|
61
73
|
description: 'Object key matching private_key / private-key.',
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"default-rules.js","sourceRoot":"","sources":["../../../src/lib/redaction/default-rules.ts"],"names":[],"mappings":";;;AAYa,QAAA,uBAAuB,GAA6B;IAC/D;QACE,IAAI,EAAE,cAAc;QACpB,WAAW,EAAE,yDAAyD;QACtE,aAAa,EAAE,yCAAyC;QACxD,WAAW,EAAE,cAAc;KAC5B;IACD;QACE,IAAI,EAAE,KAAK;QACX,WAAW,EAAE,6CAA6C;QAC1D,aAAa,EAAE,gEAAgE;QAC/E,WAAW,EAAE,gBAAgB;KAC9B;IACD;QACE,IAAI,EAAE,cAAc;QACpB,WAAW,EAAE,6CAA6C;QAC1D,aAAa,EAAE,sDAAsD;QACrE,WAAW,EAAE,mBAAmB;KACjC;IACD;QACE,IAAI,EAAE,gBAAgB;QACtB,WAAW,EAAE,oCAAoC;QACjD,aAAa,EAAE,mBAAmB;QAClC,WAAW,EAAE,gBAAgB;KAC9B;IACD;QACE,IAAI,EAAE,aAAa;QACnB,WAAW,EAAE,4BAA4B;QACzC,aAAa,EAAE,2BAA2B;QAC1C,WAAW,EAAE,kBAAkB;KAChC;IACD;QACE,IAAI,EAAE,gBAAgB;QACtB,WAAW,EAAE,0CAA0C;QACvD,SAAS,EAAE,0BAA0B;QACrC,WAAW,EAAE,YAAY;KAC1B;IACD;QACE,IAAI,EAAE,cAAc;QACpB,WAAW,EAAE,+CAA+C;QAC5D,SAAS,EAAE,SAAS;QACpB,WAAW,EAAE,YAAY;KAC1B;IACD;QACE,IAAI,EAAE,kBAAkB;QACxB,WAAW,EAAE,mDAAmD;QAChE,SAAS,EAAE,aAAa;QACxB,WAAW,EAAE,YAAY;KAC1B;IACD;QACE,IAAI,EAAE,YAAY;QAClB,WAAW,EAAE,qFAAqF;QAClG,SAAS,EAAE,2EAA2E;QACtF,WAAW,EAAE,YAAY;KAC1B;IACD;QACE,IAAI,EAAE,mBAAmB;QACzB,WAAW,EAAE,gDAAgD;QAC7D,SAAS,EAAE,oBAAoB;QAC/B,WAAW,EAAE,YAAY;KAC1B;CACF,CAAC"}
|
|
1
|
+
{"version":3,"file":"default-rules.js","sourceRoot":"","sources":["../../../src/lib/redaction/default-rules.ts"],"names":[],"mappings":";;;AAYa,QAAA,uBAAuB,GAA6B;IAC/D;QACE,IAAI,EAAE,cAAc;QACpB,WAAW,EAAE,yDAAyD;QACtE,aAAa,EAAE,yCAAyC;QACxD,WAAW,EAAE,cAAc;KAC5B;IACD;QACE,IAAI,EAAE,YAAY;QAClB,WAAW,EAAE,yDAAyD;QACtE,aAAa,EAAE,yCAAyC;QACxD,WAAW,EAAE,cAAc;KAC5B;IACD;QACE,IAAI,EAAE,KAAK;QACX,WAAW,EAAE,6CAA6C;QAC1D,aAAa,EAAE,gEAAgE;QAC/E,WAAW,EAAE,gBAAgB;KAC9B;IACD;QACE,IAAI,EAAE,cAAc;QACpB,WAAW,EAAE,6CAA6C;QAC1D,aAAa,EAAE,sDAAsD;QACrE,WAAW,EAAE,mBAAmB;KACjC;IACD;QACE,IAAI,EAAE,gBAAgB;QACtB,WAAW,EAAE,oCAAoC;QACjD,aAAa,EAAE,mBAAmB;QAClC,WAAW,EAAE,gBAAgB;KAC9B;IACD;QACE,IAAI,EAAE,aAAa;QACnB,WAAW,EAAE,4BAA4B;QACzC,aAAa,EAAE,2BAA2B;QAC1C,WAAW,EAAE,kBAAkB;KAChC;IACD;QACE,IAAI,EAAE,gBAAgB;QACtB,WAAW,EAAE,0CAA0C;QACvD,SAAS,EAAE,0BAA0B;QACrC,WAAW,EAAE,YAAY;KAC1B;IACD;QACE,IAAI,EAAE,cAAc;QACpB,WAAW,EAAE,+CAA+C;QAC5D,SAAS,EAAE,SAAS;QACpB,WAAW,EAAE,YAAY;KAC1B;IACD;QACE,IAAI,EAAE,kBAAkB;QACxB,WAAW,EAAE,mDAAmD;QAChE,SAAS,EAAE,aAAa;QACxB,WAAW,EAAE,YAAY;KAC1B;IACD;QACE,IAAI,EAAE,YAAY;QAClB,WAAW,EAAE,qFAAqF;QAClG,SAAS,EAAE,2EAA2E;QACtF,WAAW,EAAE,YAAY;KAC1B;IACD;QACE,IAAI,EAAE,oBAAoB;QAC1B,WAAW,EAAE,kFAAkF;QAC/F,SAAS,EAAE,sCAAsC;QACjD,WAAW,EAAE,YAAY;KAC1B;IACD;QACE,IAAI,EAAE,mBAAmB;QACzB,WAAW,EAAE,gDAAgD;QAC7D,SAAS,EAAE,oBAAoB;QAC/B,WAAW,EAAE,YAAY;KAC1B;CACF,CAAC"}
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"tool-usage-counter.d.ts","sourceRoot":"","sources":["../../src/lib/tool-usage-counter.ts"],"names":[],"mappings":"
|
|
1
|
+
{"version":3,"file":"tool-usage-counter.d.ts","sourceRoot":"","sources":["../../src/lib/tool-usage-counter.ts"],"names":[],"mappings":"AA4BA,eAAO,MAAM,qBAAqB,wBAAwB,CAAC;AAS3D,eAAO,MAAM,sBAAsB,QAAoB,CAAC;AAMxD,wBAAgB,iBAAiB,CAAC,KAAK,EAAE;IACvC,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,EAAE,MAAM,CAAC;IAClB,cAAc,EAAE,MAAM,CAAC;IACvB,OAAO,EAAE,MAAM,CAAC;CACjB,GAAG,MAAM,CAeT;AAMD,wBAAgB,gCAAgC,CAAC,KAAK,EAAE;IACtD,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,EAAE,MAAM,CAAC;CACnB,GAAG,MAAM,CAST;AAED,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;CAC1B;AAkBD,wBAAgB,iBAAiB,CAAC,GAAG,EAAE,MAAM,GAAG,kBAAkB,GAAG,IAAI,CAaxE"}
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"tool-usage-counter.js","sourceRoot":"","sources":["../../src/lib/tool-usage-counter.ts"],"names":[],"mappings":";;;
|
|
1
|
+
{"version":3,"file":"tool-usage-counter.js","sourceRoot":"","sources":["../../src/lib/tool-usage-counter.ts"],"names":[],"mappings":";;;AA2CA,8CAoBC;AAMD,4EAYC;AAyBD,8CAaC;AA3FY,QAAA,qBAAqB,GAAG,qBAAqB,CAAC;AAS9C,QAAA,sBAAsB,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC;AAMxD,SAAgB,iBAAiB,CAAC,KAKjC;IACC,MAAM,EAAE,KAAK,EAAE,SAAS,EAAE,cAAc,EAAE,OAAO,EAAE,GAAG,KAAK,CAAC;IAC5D,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;IAC1D,CAAC;IACD,IAAI,CAAC,SAAS,EAAE,CAAC;QACf,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAC;IAC9D,CAAC;IACD,IAAI,CAAC,cAAc,EAAE,CAAC;QACpB,MAAM,IAAI,KAAK,CAAC,+CAA+C,CAAC,CAAC;IACnE,CAAC;IACD,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC;IAC5D,CAAC;IACD,OAAO,GAAG,6BAAqB,IAAI,KAAK,IAAI,SAAS,IAAI,cAAc,IAAI,OAAO,EAAE,CAAC;AACvF,CAAC;AAMD,SAAgB,gCAAgC,CAAC,KAGhD;IACC,MAAM,EAAE,KAAK,EAAE,SAAS,EAAE,GAAG,KAAK,CAAC;IACnC,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,MAAM,IAAI,KAAK,CAAC,qDAAqD,CAAC,CAAC;IACzE,CAAC;IACD,IAAI,CAAC,SAAS,EAAE,CAAC;QACf,MAAM,IAAI,KAAK,CAAC,yDAAyD,CAAC,CAAC;IAC7E,CAAC;IACD,OAAO,GAAG,6BAAqB,IAAI,KAAK,IAAI,SAAS,MAAM,CAAC;AAC9D,CAAC;AAyBD,SAAgB,iBAAiB,CAAC,GAAW;IAC3C,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAE7B,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IAClC,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,MAAM,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,KAAK,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,YAAY,EAAE,CAAC;QAC3E,OAAO,IAAI,CAAC;IACd,CAAC;IACD,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;IACvB,MAAM,SAAS,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;IAC3B,MAAM,OAAO,GAAG,KAAK,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IACxC,MAAM,cAAc,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAClE,IAAI,CAAC,KAAK,IAAI,CAAC,SAAS,IAAI,CAAC,cAAc,IAAI,CAAC,OAAO;QAAE,OAAO,IAAI,CAAC;IACrE,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,cAAc,EAAE,OAAO,EAAE,CAAC;AACvD,CAAC"}
|
|
@@ -0,0 +1,9 @@
|
|
|
1
|
+
import type { IssuerTenantResolver } from '@xemahq/oidc-guard';
|
|
2
|
+
export declare enum IdpKind {
|
|
3
|
+
Keycloak = "keycloak",
|
|
4
|
+
Oidc = "oidc",
|
|
5
|
+
Entra = "entra"
|
|
6
|
+
}
|
|
7
|
+
export declare const DEFAULT_IDP_KIND = IdpKind.Keycloak;
|
|
8
|
+
export declare function selectTenantResolver(rawIdpKind: string | undefined): IssuerTenantResolver;
|
|
9
|
+
//# sourceMappingURL=idp-tenant-resolver.d.ts.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"idp-tenant-resolver.d.ts","sourceRoot":"","sources":["../../../src/nestjs/auth/idp-tenant-resolver.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,oBAAoB,CAAC;AAY/D,oBAAY,OAAO;IAKjB,QAAQ,aAAa;IAKrB,IAAI,SAAS;IAMb,KAAK,UAAU;CAChB;AAGD,eAAO,MAAM,gBAAgB,mBAAmB,CAAC;AAejD,wBAAgB,oBAAoB,CAClC,UAAU,EAAE,MAAM,GAAG,SAAS,GAC7B,oBAAoB,CAwBtB"}
|
|
@@ -0,0 +1,28 @@
|
|
|
1
|
+
"use strict";
|
|
2
|
+
Object.defineProperty(exports, "__esModule", { value: true });
|
|
3
|
+
exports.DEFAULT_IDP_KIND = exports.IdpKind = void 0;
|
|
4
|
+
exports.selectTenantResolver = selectTenantResolver;
|
|
5
|
+
const oidc_guard_1 = require("@xemahq/oidc-guard");
|
|
6
|
+
var IdpKind;
|
|
7
|
+
(function (IdpKind) {
|
|
8
|
+
IdpKind["Keycloak"] = "keycloak";
|
|
9
|
+
IdpKind["Oidc"] = "oidc";
|
|
10
|
+
IdpKind["Entra"] = "entra";
|
|
11
|
+
})(IdpKind || (exports.IdpKind = IdpKind = {}));
|
|
12
|
+
exports.DEFAULT_IDP_KIND = IdpKind.Keycloak;
|
|
13
|
+
const IDP_KIND_VALUES = new Set(Object.values(IdpKind));
|
|
14
|
+
function selectTenantResolver(rawIdpKind) {
|
|
15
|
+
const trimmed = rawIdpKind?.trim();
|
|
16
|
+
const value = (trimmed && trimmed.length > 0 ? trimmed : exports.DEFAULT_IDP_KIND).toLowerCase();
|
|
17
|
+
if (!IDP_KIND_VALUES.has(value)) {
|
|
18
|
+
throw new Error(`Unknown IDP_KIND '${rawIdpKind}'. Expected one of: ${Object.values(IdpKind).join(', ')}.`);
|
|
19
|
+
}
|
|
20
|
+
switch (value) {
|
|
21
|
+
case IdpKind.Keycloak:
|
|
22
|
+
return new oidc_guard_1.KeycloakIssuerTenantResolver();
|
|
23
|
+
case IdpKind.Oidc:
|
|
24
|
+
case IdpKind.Entra:
|
|
25
|
+
return new oidc_guard_1.OidcDiscoveryIssuerTenantResolver();
|
|
26
|
+
}
|
|
27
|
+
}
|
|
28
|
+
//# sourceMappingURL=idp-tenant-resolver.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"idp-tenant-resolver.js","sourceRoot":"","sources":["../../../src/nestjs/auth/idp-tenant-resolver.ts"],"names":[],"mappings":";;;AAmDA,oDA0BC;AA7ED,mDAG4B;AAa5B,IAAY,OAiBX;AAjBD,WAAY,OAAO;IAKjB,gCAAqB,CAAA;IAKrB,wBAAa,CAAA;IAMb,0BAAe,CAAA;AACjB,CAAC,EAjBW,OAAO,uBAAP,OAAO,QAiBlB;AAGY,QAAA,gBAAgB,GAAG,OAAO,CAAC,QAAQ,CAAC;AAEjD,MAAM,eAAe,GAAwB,IAAI,GAAG,CAClD,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CACvB,CAAC;AAWF,SAAgB,oBAAoB,CAClC,UAA8B;IAE9B,MAAM,OAAO,GAAG,UAAU,EAAE,IAAI,EAAE,CAAC;IACnC,MAAM,KAAK,GAAG,CACZ,OAAO,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,wBAAgB,CAC3D,CAAC,WAAW,EAAE,CAAC;IAEhB,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;QAChC,MAAM,IAAI,KAAK,CACb,qBAAqB,UAAU,uBAAuB,MAAM,CAAC,MAAM,CACjE,OAAO,CACR,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAChB,CAAC;IACJ,CAAC;IAED,QAAQ,KAAgB,EAAE,CAAC;QACzB,KAAK,OAAO,CAAC,QAAQ;YACnB,OAAO,IAAI,yCAA4B,EAAE,CAAC;QAC5C,KAAK,OAAO,CAAC,IAAI,CAAC;QAClB,KAAK,OAAO,CAAC,KAAK;YAIhB,OAAO,IAAI,8CAAiC,EAAE,CAAC;IACnD,CAAC;AACH,CAAC"}
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"org-claim.d.ts","sourceRoot":"","sources":["../../../src/nestjs/auth/org-claim.ts"],"names":[],"mappings":"
|
|
1
|
+
{"version":3,"file":"org-claim.d.ts","sourceRoot":"","sources":["../../../src/nestjs/auth/org-claim.ts"],"names":[],"mappings":"AA8BA,oBAAY,WAAW;IAErB,SAAS,gBAAgB;CAC1B;AAOD,eAAO,MAAM,cAAc,EAAE,SAAS,WAAW,EAEvC,CAAC;AAQX,oBAAY,aAAa;IAEvB,SAAS,kBAAkB;CAC5B;AAUD,wBAAgB,eAAe,CAC7B,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC9B;IAAE,GAAG,EAAE,WAAW,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,GAAG,IAAI,CAQ5C"}
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"org-claim.js","sourceRoot":"","sources":["../../../src/nestjs/auth/org-claim.ts"],"names":[],"mappings":";;;
|
|
1
|
+
{"version":3,"file":"org-claim.js","sourceRoot":"","sources":["../../../src/nestjs/auth/org-claim.ts"],"names":[],"mappings":";;;AA+DA,0CAUC;AA3CD,IAAY,WAGX;AAHD,WAAY,WAAW;IAErB,wCAAyB,CAAA;AAC3B,CAAC,EAHW,WAAW,2BAAX,WAAW,QAGtB;AAOY,QAAA,cAAc,GAA2B;IACpD,WAAW,CAAC,SAAS;CACb,CAAC;AAQX,IAAY,aAGX;AAHD,WAAY,aAAa;IAEvB,4CAA2B,CAAA;AAC7B,CAAC,EAHW,aAAa,6BAAb,aAAa,QAGxB;AAUD,SAAgB,eAAe,CAC7B,MAA+B;IAE/B,KAAK,MAAM,GAAG,IAAI,sBAAc,EAAE,CAAC;QACjC,MAAM,GAAG,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;QACxB,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC9C,OAAO,EAAE,GAAG,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC;QAC7B,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC"}
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"service-token.guard.d.ts","sourceRoot":"","sources":["../../../src/nestjs/auth/service-token.guard.ts"],"names":[],"mappings":"AAiBA,OAAO,EACL,WAAW,EACX,gBAAgB,EAKjB,MAAM,gBAAgB,CAAC;AACxB,OAAO,EAAE,cAAc,EAAE,MAAM,0BAA0B,CAAC;AAwB1D,qBACa,iBAAkB,YAAW,WAAW;IAKvC,OAAO,CAAC,QAAQ,CAAC,cAAc;IAJ3C,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAsC;IAC7D,OAAO,CAAC,UAAU,CAAmC;IACrD,OAAO,CAAC,cAAc,CAAuB;gBAEhB,cAAc,EAAE,cAAc;IAE3D,OAAO,CAAC,cAAc;IAuBhB,WAAW,CAAC,OAAO,EAAE,gBAAgB,GAAG,OAAO,CAAC,OAAO,CAAC;
|
|
1
|
+
{"version":3,"file":"service-token.guard.d.ts","sourceRoot":"","sources":["../../../src/nestjs/auth/service-token.guard.ts"],"names":[],"mappings":"AAiBA,OAAO,EACL,WAAW,EACX,gBAAgB,EAKjB,MAAM,gBAAgB,CAAC;AACxB,OAAO,EAAE,cAAc,EAAE,MAAM,0BAA0B,CAAC;AAwB1D,qBACa,iBAAkB,YAAW,WAAW;IAKvC,OAAO,CAAC,QAAQ,CAAC,cAAc;IAJ3C,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAsC;IAC7D,OAAO,CAAC,UAAU,CAAmC;IACrD,OAAO,CAAC,cAAc,CAAuB;gBAEhB,cAAc,EAAE,cAAc;IAE3D,OAAO,CAAC,cAAc;IAuBhB,WAAW,CAAC,OAAO,EAAE,gBAAgB,GAAG,OAAO,CAAC,OAAO,CAAC;IAwE9D,OAAO,CAAC,uBAAuB;YAiBjB,WAAW;IAmEzB,OAAO,CAAC,WAAW;IA0BnB,OAAO,CAAC,2BAA2B;CA6CpC"}
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"service-token.guard.js","sourceRoot":"","sources":["../../../src/nestjs/auth/service-token.guard.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAiBA,2CAOwB;AACxB,+DAA0D;AAC1D,8DAA8D;AAC9D,kDAAoC;AAEpC,2CAA6D;AAC7D,6DAAyD;AACzD,8DAA8D;AAmBvD,IAAM,iBAAiB,yBAAvB,MAAM,iBAAiB;IAKC;IAJZ,MAAM,GAAG,IAAI,eAAM,CAAC,mBAAiB,CAAC,IAAI,CAAC,CAAC;IACrD,UAAU,GAA8B,IAAI,CAAC;IAC7C,cAAc,GAAkB,IAAI,CAAC;IAE7C,YAA6B,cAA8B;QAA9B,mBAAc,GAAd,cAAc,CAAgB;IAAG,CAAC;IAEvD,cAAc;QACpB,MAAM,QAAQ,GAAG,IAAI,CAAC,cAAc,CAAC,WAAW,EAAE,CAAC;QACnD,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,MAAM,IAAI,8BAAqB,CAC7B,iEAAiE;gBAC/D,6DAA6D,CAChE,CAAC;QACJ,CAAC;QAED,IAAI,CAAC,UAAU,GAAG,OAAO,CAAC,OAAO,CAAC;YAChC,OAAO,EAAE,QAAQ,CAAC,OAAO;YACzB,KAAK,EAAE,IAAI;YACX,WAAW,EAAE,OAAO;YACpB,SAAS,EAAE,IAAI;YACf,qBAAqB,EAAE,EAAE;SAC1B,CAAC,CAAC;QACH,IAAI,CAAC,cAAc,GAAG,QAAQ,CAAC,MAAM,CAAC;QAEtC,IAAI,CAAC,MAAM,CAAC,GAAG,CACb,0CAA0C,QAAQ,CAAC,OAAO,EAAE,CAC7D,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,WAAW,CAAC,OAAyB;QACzC,MAAM,OAAO,GAAG,OAAO,CAAC,YAAY,EAAE,CAAC,UAAU,EAAE,CAAC;QACpD,MAAM,UAAU,GAAG,OAAO,CAAC,OAAO,CAAC,aAAmC,CAAC;QAEvE,IAAI,CAAC,UAAU,EAAE,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;YACvC,MAAM,IAAI,8BAAqB,CAC7B,yCAAyC,CAC1C,CAAC;QACJ,CAAC;QAED,MAAM,KAAK,GAAG,UAAU,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;QAEtC,IAAI,CAAC;YACH,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,CAAC;gBACrB,IAAI,CAAC,cAAc,EAAE,CAAC;YACxB,CAAC;YAED,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC;
|
|
1
|
+
{"version":3,"file":"service-token.guard.js","sourceRoot":"","sources":["../../../src/nestjs/auth/service-token.guard.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAiBA,2CAOwB;AACxB,+DAA0D;AAC1D,8DAA8D;AAC9D,kDAAoC;AAEpC,2CAA6D;AAC7D,6DAAyD;AACzD,8DAA8D;AAmBvD,IAAM,iBAAiB,yBAAvB,MAAM,iBAAiB;IAKC;IAJZ,MAAM,GAAG,IAAI,eAAM,CAAC,mBAAiB,CAAC,IAAI,CAAC,CAAC;IACrD,UAAU,GAA8B,IAAI,CAAC;IAC7C,cAAc,GAAkB,IAAI,CAAC;IAE7C,YAA6B,cAA8B;QAA9B,mBAAc,GAAd,cAAc,CAAgB;IAAG,CAAC;IAEvD,cAAc;QACpB,MAAM,QAAQ,GAAG,IAAI,CAAC,cAAc,CAAC,WAAW,EAAE,CAAC;QACnD,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,MAAM,IAAI,8BAAqB,CAC7B,iEAAiE;gBAC/D,6DAA6D,CAChE,CAAC;QACJ,CAAC;QAED,IAAI,CAAC,UAAU,GAAG,OAAO,CAAC,OAAO,CAAC;YAChC,OAAO,EAAE,QAAQ,CAAC,OAAO;YACzB,KAAK,EAAE,IAAI;YACX,WAAW,EAAE,OAAO;YACpB,SAAS,EAAE,IAAI;YACf,qBAAqB,EAAE,EAAE;SAC1B,CAAC,CAAC;QACH,IAAI,CAAC,cAAc,GAAG,QAAQ,CAAC,MAAM,CAAC;QAEtC,IAAI,CAAC,MAAM,CAAC,GAAG,CACb,0CAA0C,QAAQ,CAAC,OAAO,EAAE,CAC7D,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,WAAW,CAAC,OAAyB;QACzC,MAAM,OAAO,GAAG,OAAO,CAAC,YAAY,EAAE,CAAC,UAAU,EAAE,CAAC;QACpD,MAAM,UAAU,GAAG,OAAO,CAAC,OAAO,CAAC,aAAmC,CAAC;QAEvE,IAAI,CAAC,UAAU,EAAE,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;YACvC,MAAM,IAAI,8BAAqB,CAC7B,yCAAyC,CAC1C,CAAC;QACJ,CAAC;QAED,MAAM,KAAK,GAAG,UAAU,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;QAEtC,IAAI,CAAC;YACH,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,CAAC;gBACrB,IAAI,CAAC,cAAc,EAAE,CAAC;YACxB,CAAC;YAED,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC;YAe9C,MAAM,eAAe,GACnB,IAAA,0CAAqB,EAAU,sCAAiB,EAAE;gBAChD,OAAO,CAAC,UAAU,EAAE;gBACpB,OAAO,CAAC,QAAQ,EAAE;aACnB,CAAC,KAAK,IAAI,CAAC;YACd,IAAI,CAAC,2BAA2B,CAAC,OAAO,EAAE,OAAO,EAAE,eAAe,CAAC,CAAC;YACpE,IAAI,CAAC,uBAAuB,CAAC,OAAO,CAAC,CAAC;YAGrC,OAAmC,CAAC,WAAW,GAAG,OAAO,CAAC;YAE3D,OAAO,IAAI,CAAC;QACd,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAKf,IACE,KAAK,YAAY,8BAAqB;gBACtC,KAAK,YAAY,2BAAkB,EACnC,CAAC;gBACD,MAAM,KAAK,CAAC;YACd,CAAC;YACD,MAAM,GAAG,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YACnE,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC;gBAChB,OAAO,EAAE,mCAAmC;gBAC5C,KAAK,EAAE,GAAG;aACX,CAAC,CAAC;YACH,MAAM,IAAI,8BAAqB,CAAC,uBAAuB,CAAC,CAAC;QAC3D,CAAC;IACH,CAAC;IAUO,uBAAuB,CAAC,OAAmB;QACjD,MAAM,UAAU,GAAG,OAAO,CAAC,aAAa,CAAC,CAAC;QAC1C,IACE,OAAO,UAAU,KAAK,QAAQ;YAC9B,UAAU,KAAK,oBAAU,CAAC,UAAU,EACpC,CAAC;YACD,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC;gBACf,OAAO,EAAE,8BAA8B;gBACvC,UAAU;aACX,CAAC,CAAC;YACH,MAAM,IAAI,2BAAkB,CAAC;gBAC3B,IAAI,EAAE,yBAAyB;gBAC/B,OAAO,EAAE,2DAA2D;aACrE,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,WAAW,CAAC,KAAa;QACrC,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,CAAC;YACrB,MAAM,IAAI,KAAK,CAAC,6BAA6B,CAAC,CAAC;QACjD,CAAC;QAED,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC/B,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACvB,MAAM,IAAI,KAAK,CAAC,sBAAsB,CAAC,CAAC;QAC1C,CAAC;QACD,MAAM,CAAC,SAAS,EAAE,UAAU,EAAE,SAAS,CAAC,GAAG,KAAK,CAAC;QACjD,IAAI,CAAC,SAAS,IAAI,CAAC,UAAU,IAAI,CAAC,SAAS,EAAE,CAAC;YAC5C,MAAM,IAAI,KAAK,CAAC,sBAAsB,CAAC,CAAC;QAC1C,CAAC;QAED,MAAM,MAAM,GAAc,IAAI,CAAC,KAAK,CAClC,MAAM,CAAC,IAAI,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CACrD,CAAC;QACF,MAAM,OAAO,GAAe,IAAI,CAAC,KAAK,CACpC,MAAM,CAAC,IAAI,CAAC,UAAU,EAAE,WAAW,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CACtD,CAAC;QAEF,IAAI,OAAO,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,EAAE,IAAI,OAAO,CAAC,GAAG,GAAG,IAAI,EAAE,CAAC;YACpD,MAAM,IAAI,KAAK,CAAC,eAAe,CAAC,CAAC;QACnC,CAAC;QAED,IAAI,IAAI,CAAC,cAAc,IAAI,OAAO,CAAC,GAAG,KAAK,IAAI,CAAC,cAAc,EAAE,CAAC;YAC/D,MAAM,IAAI,KAAK,CAAC,mBAAmB,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC;QACpD,CAAC;QAED,IAAI,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC;YAChB,MAAM,IAAI,KAAK,CAAC,6BAA6B,CAAC,CAAC;QACjD,CAAC;QAED,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,aAAa,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAC5D,MAAM,SAAS,GAAG,GAAG,CAAC,YAAY,EAAE,CAAC;QAErC,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,aAAa,CAAC,CAAC;QAC3C,MAAM,IAAI,GAAG,GAAG,SAAS,IAAI,UAAU,EAAE,CAAC;QAC1C,MAAM,eAAe,GAAG,MAAM,CAAC,IAAI,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC;QAE5D,MAAM,MAAM,GAA2B;YACrC,KAAK,EAAE,YAAY;YACnB,KAAK,EAAE,YAAY;YACnB,KAAK,EAAE,YAAY;SACpB,CAAC;QACF,MAAM,SAAS,GAAG,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QACrC,IAAI,CAAC,SAAS,EAAE,CAAC;YACf,MAAM,IAAI,KAAK,CAAC,0BAA0B,MAAM,CAAC,GAAG,EAAE,CAAC,CAAC;QAC1D,CAAC;QAED,MAAM,OAAO,GAAG,MAAM;aACnB,YAAY,CAAC,SAAS,CAAC;aACvB,MAAM,CAAC,IAAI,CAAC;aACZ,MAAM,CAAC,SAAS,EAAE,eAAe,CAAC,CAAC;QAEtC,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,MAAM,IAAI,KAAK,CAAC,mBAAmB,CAAC,CAAC;QACvC,CAAC;QAED,OAAO,OAAO,CAAC;IACjB,CAAC;IAOO,WAAW,CACjB,OAA8C,EAC9C,IAAY;QAEZ,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,IAAI,EAAE,CAAC;QACtC,MAAM,KAAK,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;QAC5B,MAAM,KAAK,GAAG,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,eAAe,EAAE,CAAC,EAAE,EAAE,GAAG,EAAE,EAAU,EAAE,EAAE,CAC1E,GAAG,GAAG,GAAG,EAAE,CAAC,WAAW,EAAE,EAAE,CAC5B,CAAC,CAAC;QACH,MAAM,GAAG,GAAG,KAAK,IAAI,KAAK,CAAC;QAC3B,IAAI,OAAO,GAAG,KAAK,QAAQ,EAAE,CAAC;YAC5B,OAAO,GAAG,CAAC;QACb,CAAC;QACD,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,OAAO,GAAG,CAAC,CAAC,CAAC,KAAK,QAAQ,EAAE,CAAC;YACrD,OAAO,GAAG,CAAC,CAAC,CAAC,CAAC;QAChB,CAAC;QACD,OAAO,EAAE,CAAC;IACZ,CAAC;IASO,2BAA2B,CACjC,MAAkB,EAClB,OAA8C,EAC9C,QAAQ,GAAG,KAAK;QAEhB,MAAM,QAAQ,GAAG,IAAA,2BAAe,EAAC,MAAM,CAAC,CAAC;QACzC,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,IAAI,QAAQ,EAAE,CAAC;gBACb,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,6CAA6C,EAAE,CAAC,CAAC;gBAC7E,MAAM,IAAI,2BAAkB,CAAC;oBAC3B,IAAI,EAAE,oBAAoB;oBAC1B,OAAO,EACL,gEAAgE;wBAChE,qBAAqB;iBACxB,CAAC,CAAC;YACL,CAAC;YACD,OAAO;QACT,CAAC;QAED,MAAM,UAAU,GAAG,yBAAa,CAAC,SAAS,CAAC;QAC3C,MAAM,WAAW,GAAG,IAAI,CAAC,WAAW,CAAC,OAAO,EAAE,eAAe,CAAC,CAAC;QAC/D,IAAI,CAAC,WAAW,EAAE,CAAC;YACjB,IAAI,QAAQ,EAAE,CAAC;gBACb,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,8CAA8C,EAAE,CAAC,CAAC;gBAC9E,MAAM,IAAI,2BAAkB,CAAC;oBAC3B,IAAI,EAAE,qBAAqB;oBAC3B,OAAO,EAAE,8BAA8B,UAAU,iBAAiB;iBACnE,CAAC,CAAC;YACL,CAAC;YACD,OAAO;QACT,CAAC;QAED,IAAI,QAAQ,CAAC,KAAK,CAAC,WAAW,EAAE,KAAK,WAAW,CAAC,WAAW,EAAE,EAAE,CAAC;YAC/D,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC;gBACf,OAAO,EAAE,qCAAqC;gBAC9C,KAAK,EAAE,QAAQ,CAAC,GAAG;gBACnB,UAAU,EAAE,QAAQ,CAAC,KAAK;gBAC1B,MAAM,EAAE,UAAU;gBAClB,WAAW;aACZ,CAAC,CAAC;YACH,MAAM,IAAI,2BAAkB,CAC1B,GAAG,UAAU,KAAK,WAAW,wBAAwB,QAAQ,CAAC,GAAG,8BAA8B,CAChG,CAAC;QACJ,CAAC;IACH,CAAC;CACF,CAAA;AAjQY,8CAAiB;4BAAjB,iBAAiB;IAD7B,IAAA,mBAAU,GAAE;qCAMkC,iCAAc;GALhD,iBAAiB,CAiQ7B"}
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"cors.config.d.ts","sourceRoot":"","sources":["../../src/nestjs/cors.config.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,2DAA2D,CAAC;AA2B7F,wBAAgB,eAAe,CAAC,MAAM,EAAE,MAAM,EAAE,cAAc,CAAC,EAAE,MAAM,GAAG,OAAO,CAShF;AASD,wBAAgB,aAAa,CAAC,cAAc,CAAC,EAAE,MAAM,GAAG,WAAW,
|
|
1
|
+
{"version":3,"file":"cors.config.d.ts","sourceRoot":"","sources":["../../src/nestjs/cors.config.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,2DAA2D,CAAC;AA2B7F,wBAAgB,eAAe,CAAC,MAAM,EAAE,MAAM,EAAE,cAAc,CAAC,EAAE,MAAM,GAAG,OAAO,CAShF;AASD,wBAAgB,aAAa,CAAC,cAAc,CAAC,EAAE,MAAM,GAAG,WAAW,CA2ElE"}
|
|
@@ -31,6 +31,18 @@ function getCorsConfig(allowedOrigins) {
|
|
|
31
31
|
throw new Error('CORS_ALLOWED_ORIGINS environment variable is required. ' +
|
|
32
32
|
'Set it to a comma-separated list of allowed origins (e.g., "example.com,*.example.com")');
|
|
33
33
|
}
|
|
34
|
+
const patterns = allowedOrigins
|
|
35
|
+
.split(',')
|
|
36
|
+
.map((pattern) => pattern.trim())
|
|
37
|
+
.filter((pattern) => pattern.length > 0);
|
|
38
|
+
const matchesAllOrigins = (pattern) => pattern === '*' ||
|
|
39
|
+
pattern === '*://*' ||
|
|
40
|
+
pattern === 'http://*' ||
|
|
41
|
+
pattern === 'https://*';
|
|
42
|
+
if (patterns.some(matchesAllOrigins)) {
|
|
43
|
+
throw new Error('CORS_ALLOWED_ORIGINS must not be a bare "*" wildcard while credentials ' +
|
|
44
|
+
'are enabled. Enumerate explicit origins or scoped wildcards (e.g., "*.example.com").');
|
|
45
|
+
}
|
|
34
46
|
return {
|
|
35
47
|
origin: (origin, callback) => {
|
|
36
48
|
if (!origin) {
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"cors.config.js","sourceRoot":"","sources":["../../src/nestjs/cors.config.ts"],"names":[],"mappings":";;AA6BA,0CASC;AASD,
|
|
1
|
+
{"version":3,"file":"cors.config.js","sourceRoot":"","sources":["../../src/nestjs/cors.config.ts"],"names":[],"mappings":";;AA6BA,0CASC;AASD,sCA2EC;AA1HD,2CAAwC;AAIxC,MAAM,MAAM,GAAG,IAAI,eAAM,CAAC,MAAM,CAAC,CAAC;AAOlC,SAAS,oBAAoB,CAAC,MAAc,EAAE,OAAe;IAC3D,MAAM,cAAc,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC;IAEtC,IAAI,cAAc,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;QACjC,MAAM,YAAY,GAAG,cAAc;aAChC,OAAO,CAAC,oBAAoB,EAAE,MAAM,CAAC;aACrC,OAAO,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;QACxB,MAAM,KAAK,GAAG,IAAI,MAAM,CAAC,aAAa,YAAY,GAAG,CAAC,CAAC;QACvD,OAAO,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAC5B,CAAC;IAED,OAAO,CACL,MAAM,KAAK,UAAU,cAAc,EAAE;QACrC,MAAM,KAAK,WAAW,cAAc,EAAE;QACtC,MAAM,KAAK,cAAc,CAC1B,CAAC;AACJ,CAAC;AAED,SAAgB,eAAe,CAAC,MAAc,EAAE,cAAuB;IACrE,IAAI,CAAC,cAAc,EAAE,CAAC;QACpB,OAAO,KAAK,CAAC;IACf,CAAC;IAED,OAAO,cAAc;SAClB,KAAK,CAAC,GAAG,CAAC;SACV,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;SAChC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,oBAAoB,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;AAC9D,CAAC;AASD,SAAgB,aAAa,CAAC,cAAuB;IACnD,IAAI,CAAC,cAAc,EAAE,CAAC;QACpB,MAAM,IAAI,KAAK,CACb,yDAAyD;YACvD,yFAAyF,CAC5F,CAAC;IACJ,CAAC;IAOD,MAAM,QAAQ,GAAG,cAAc;SAC5B,KAAK,CAAC,GAAG,CAAC;SACV,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;SAChC,MAAM,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IAC3C,MAAM,iBAAiB,GAAG,CAAC,OAAe,EAAW,EAAE,CACrD,OAAO,KAAK,GAAG;QACf,OAAO,KAAK,OAAO;QACnB,OAAO,KAAK,UAAU;QACtB,OAAO,KAAK,WAAW,CAAC;IAC1B,IAAI,QAAQ,CAAC,IAAI,CAAC,iBAAiB,CAAC,EAAE,CAAC;QACrC,MAAM,IAAI,KAAK,CACb,yEAAyE;YACvE,sFAAsF,CACzF,CAAC;IACJ,CAAC;IAED,OAAO;QACL,MAAM,EAAE,CAAC,MAAM,EAAE,QAAQ,EAAE,EAAE;YAC3B,IAAI,CAAC,MAAM,EAAE,CAAC;gBACZ,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;gBACrB,OAAO;YACT,CAAC;YAED,MAAM,SAAS,GAAG,eAAe,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC;YAE1D,IAAI,SAAS,EAAE,CAAC;gBACd,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;YACvB,CAAC;iBAAM,CAAC;gBAON,MAAM,CAAC,IAAI,CAAC,wBAAwB,MAAM,EAAE,CAAC,CAAC;gBAC9C,QAAQ,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;YACxB,CAAC;QACH,CAAC;QACD,WAAW,EAAE,IAAI;QACjB,OAAO,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,SAAS,CAAC;QAC7D,cAAc,EAAE;YACd,cAAc;YACd,eAAe;YACf,kBAAkB;YAClB,QAAQ;YACR,QAAQ;YACR,eAAe;YACf,cAAc;YACd,kBAAkB;YAClB,cAAc;YACd,sBAAsB;YACtB,eAAe;YACf,iBAAiB;YACjB,WAAW;YACX,kBAAkB;SACnB;QACD,cAAc,EAAE;YACd,mBAAmB;YACnB,uBAAuB;YACvB,mBAAmB;SACpB;KACF,CAAC;AACJ,CAAC"}
|
package/dist/nestjs/index.d.ts
CHANGED
|
@@ -8,9 +8,9 @@ export { ApiStandardOperation, ApiDataResponse, ApiDataArrayResponse, ApiCreated
|
|
|
8
8
|
export { enhanceOpenApiDocumentation, type OpenApiEnrichmentOptions, } from './openapi-docs.enricher';
|
|
9
9
|
export { getKeycloakSwaggerUrls, enrichOpenApiWithKeycloakSecurity, buildKeycloakSwaggerUiOptions, type KeycloakSwaggerUrls, type KeycloakOpenApiEnrichmentOptions, type KeycloakSwaggerUiOptionsInput, type KeycloakSwaggerUiOptions, } from './swagger-keycloak';
|
|
10
10
|
export { JwtVerificationGuard } from './jwt-verification.guard';
|
|
11
|
-
export {
|
|
12
|
-
export {
|
|
13
|
-
export {
|
|
11
|
+
export { IdpKind, DEFAULT_IDP_KIND, selectTenantResolver, } from './auth/idp-tenant-resolver';
|
|
12
|
+
export { JwksVerifier, JwksVerificationError, IssuerMetadataResolver, OidcTokenVerifier, KeycloakIssuerTenantResolver, OidcDiscoveryIssuerTenantResolver, extractRealmFromIssuer, type DecodedJwtHeader, type DecodedJwtPayload, type IssuerTenantResolver, type Jwk, type JwksVerifyOptions, type OidcVerifyConfig, } from '@xemahq/oidc-guard';
|
|
13
|
+
export { Public, IS_PUBLIC_KEY } from './public.decorator';
|
|
14
14
|
export { RawResponse, RAW_RESPONSE_KEY } from './raw-response.decorator';
|
|
15
15
|
export { requireProjectId } from './require-project-id';
|
|
16
16
|
export { requirePipelineRunId } from './require-pipeline-run-id';
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/nestjs/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,wBAAwB,EACxB,KAAK,yBAAyB,GAC/B,MAAM,gBAAgB,CAAC;AACxB,OAAO,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AAC9C,OAAO,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AACnD,OAAO,EAAE,2BAA2B,EAAE,MAAM,iCAAiC,CAAC;AAC9E,OAAO,EAAE,wBAAwB,EAAE,MAAM,8BAA8B,CAAC;AACxE,OAAO,EAAE,gBAAgB,EAAE,MAAM,sBAAsB,CAAC;AACxD,OAAO,EACL,oBAAoB,EACpB,eAAe,EACf,oBAAoB,EACpB,sBAAsB,EACtB,oBAAoB,EACpB,iBAAiB,GAClB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EACL,2BAA2B,EAC3B,KAAK,wBAAwB,GAC9B,MAAM,yBAAyB,CAAC;AACjC,OAAO,EACL,sBAAsB,EACtB,iCAAiC,EACjC,6BAA6B,EAC7B,KAAK,mBAAmB,EACxB,KAAK,gCAAgC,EACrC,KAAK,6BAA6B,EAClC,KAAK,wBAAwB,GAC9B,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAAE,oBAAoB,EAAE,MAAM,0BAA0B,CAAC;
|
|
1
|
+
{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/nestjs/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,wBAAwB,EACxB,KAAK,yBAAyB,GAC/B,MAAM,gBAAgB,CAAC;AACxB,OAAO,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AAC9C,OAAO,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AACnD,OAAO,EAAE,2BAA2B,EAAE,MAAM,iCAAiC,CAAC;AAC9E,OAAO,EAAE,wBAAwB,EAAE,MAAM,8BAA8B,CAAC;AACxE,OAAO,EAAE,gBAAgB,EAAE,MAAM,sBAAsB,CAAC;AACxD,OAAO,EACL,oBAAoB,EACpB,eAAe,EACf,oBAAoB,EACpB,sBAAsB,EACtB,oBAAoB,EACpB,iBAAiB,GAClB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EACL,2BAA2B,EAC3B,KAAK,wBAAwB,GAC9B,MAAM,yBAAyB,CAAC;AACjC,OAAO,EACL,sBAAsB,EACtB,iCAAiC,EACjC,6BAA6B,EAC7B,KAAK,mBAAmB,EACxB,KAAK,gCAAgC,EACrC,KAAK,6BAA6B,EAClC,KAAK,wBAAwB,GAC9B,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAAE,oBAAoB,EAAE,MAAM,0BAA0B,CAAC;AAChE,OAAO,EACL,OAAO,EACP,gBAAgB,EAChB,oBAAoB,GACrB,MAAM,4BAA4B,CAAC;AAIpC,OAAO,EACL,YAAY,EACZ,qBAAqB,EACrB,sBAAsB,EACtB,iBAAiB,EACjB,4BAA4B,EAC5B,iCAAiC,EACjC,sBAAsB,EACtB,KAAK,gBAAgB,EACrB,KAAK,iBAAiB,EACtB,KAAK,oBAAoB,EACzB,KAAK,GAAG,EACR,KAAK,iBAAiB,EACtB,KAAK,gBAAgB,GACtB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AAC3D,OAAO,EAAE,WAAW,EAAE,gBAAgB,EAAE,MAAM,0BAA0B,CAAC;AACzE,OAAO,EAAE,gBAAgB,EAAE,MAAM,sBAAsB,CAAC;AACxD,OAAO,EAAE,oBAAoB,EAAE,MAAM,2BAA2B,CAAC;AACjE,OAAO,EAAE,GAAG,EAAE,MAAM,iBAAiB,CAAC;AACtC,OAAO,EACL,kBAAkB,EAClB,cAAc,EACd,eAAe,EACf,sBAAsB,GACvB,MAAM,cAAc,CAAC;AACtB,OAAO,EAAE,cAAc,EAAE,KAAK,YAAY,EAAE,MAAM,oBAAoB,CAAC;AACvE,OAAO,EACL,aAAa,EACb,qBAAqB,EACrB,SAAS,GACV,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,MAAM,mBAAmB,CAAC;AACrD,OAAO,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AAC3C,OAAO,EAAE,qBAAqB,EAAE,MAAM,2BAA2B,CAAC;AAClE,OAAO,EACL,UAAU,EACV,mBAAmB,EACnB,KAAK,iBAAiB,EACtB,KAAK,sBAAsB,EAC3B,iBAAiB,EACjB,mBAAmB,EACnB,iBAAiB,EAKjB,eAAe,EACf,iBAAiB,EACjB,mBAAmB,EAGnB,YAAY,EACZ,cAAc,EACd,gBAAgB,EAChB,gBAAgB,EAChB,oBAAoB,EACpB,eAAe,EACf,oBAAoB,EACpB,gBAAgB,EAIhB,YAAY,EACZ,eAAe,EACf,kBAAkB,EAClB,uBAAuB,EACvB,KAAK,8BAA8B,EAKnC,WAAW,EACX,aAAa,EACb,cAAc,EACd,eAAe,EAIf,eAAe,EACf,iBAAiB,GAClB,MAAM,QAAQ,CAAC;AAChB,OAAO,EACL,6BAA6B,EAC7B,uBAAuB,EACvB,sBAAsB,EACtB,KAAK,6BAA6B,EAClC,KAAK,0BAA0B,GAChC,MAAM,wBAAwB,CAAC;AAChC,OAAO,EACL,KAAK,kBAAkB,EACvB,KAAK,kBAAkB,EACvB,+BAA+B,EAC/B,wBAAwB,EACxB,yBAAyB,EACzB,KAAK,uBAAuB,EAC5B,KAAK,yBAAyB,EAC9B,mBAAmB,GACpB,MAAM,eAAe,CAAC"}
|
package/dist/nestjs/index.js
CHANGED
|
@@ -1,7 +1,7 @@
|
|
|
1
1
|
"use strict";
|
|
2
2
|
Object.defineProperty(exports, "__esModule", { value: true });
|
|
3
|
-
exports.
|
|
4
|
-
exports.IDEMPOTENCY_SERVICE = exports.IDEMPOTENCY_PRISMA_CLIENT = exports.PrismaIdempotencyService = exports.IDEMPOTENCY_RECORD_PRISMA_MODEL = exports.ApiIntegrationEnvelope = exports.IntegrationEnvelopePipe = exports.IntegrationWebhookEnvelopeDto = exports.REQUIRE_ORG_CLAIM = exports.RequireOrgClaim = exports.resolveOrgClaim = exports.ORG_CLAIM_KEYS = exports.OrgHeaderName = exports.OrgClaimKey = exports.configureAuthMiddleware = exports.PlatformAdminGuard = exports.hasPlatformRole = exports.PlatformRole = exports.orgRoleSatisfies = exports.resolveOrgRoleForOrg = exports.resolveOrgRoles = exports.ORG_ROLES_CLAIM_KEYS = exports.OrgRolesClaimKey = exports.REQUIRE_ORG_ROLE = exports.RequireOrgRole = exports.OrgRoleGuard = void 0;
|
|
3
|
+
exports.InternalCallerGuard = exports.ServiceTokenGuard = exports.AUTH_MODULE_OPTIONS = exports.AuthModule = exports.GlobalExceptionFilter = exports.RolesGuard = exports.ROLES_KEY = exports.Roles = exports.fetchJson = exports.fetchEnvelopeOptional = exports.fetchEnvelope = exports.fetchWithRetry = exports.buildPaginatedResponse = exports.parsePagination = exports.PaginationMeta = exports.PaginationQueryDto = exports.Ctx = exports.requirePipelineRunId = exports.requireProjectId = exports.RAW_RESPONSE_KEY = exports.RawResponse = exports.IS_PUBLIC_KEY = exports.Public = exports.extractRealmFromIssuer = exports.OidcDiscoveryIssuerTenantResolver = exports.KeycloakIssuerTenantResolver = exports.OidcTokenVerifier = exports.IssuerMetadataResolver = exports.JwksVerificationError = exports.JwksVerifier = exports.selectTenantResolver = exports.DEFAULT_IDP_KIND = exports.IdpKind = exports.JwtVerificationGuard = exports.buildKeycloakSwaggerUiOptions = exports.enrichOpenApiWithKeycloakSecurity = exports.getKeycloakSwaggerUrls = exports.enhanceOpenApiDocumentation = exports.ApiStandardErrors = exports.ApiPaginatedResponse = exports.ApiCreatedDataResponse = exports.ApiDataArrayResponse = exports.ApiDataResponse = exports.ApiStandardOperation = exports.ErrorResponseDto = exports.RequestContextMiddleware = exports.ResponseEnvelopeInterceptor = exports.getEnvOrThrow = exports.getCorsConfig = exports.applyStandardBodyParsers = void 0;
|
|
4
|
+
exports.IDEMPOTENCY_SERVICE = exports.IDEMPOTENCY_PRISMA_CLIENT = exports.PrismaIdempotencyService = exports.IDEMPOTENCY_RECORD_PRISMA_MODEL = exports.ApiIntegrationEnvelope = exports.IntegrationEnvelopePipe = exports.IntegrationWebhookEnvelopeDto = exports.REQUIRE_ORG_CLAIM = exports.RequireOrgClaim = exports.resolveOrgClaim = exports.ORG_CLAIM_KEYS = exports.OrgHeaderName = exports.OrgClaimKey = exports.configureAuthMiddleware = exports.PlatformAdminGuard = exports.hasPlatformRole = exports.PlatformRole = exports.orgRoleSatisfies = exports.resolveOrgRoleForOrg = exports.resolveOrgRoles = exports.ORG_ROLES_CLAIM_KEYS = exports.OrgRolesClaimKey = exports.REQUIRE_ORG_ROLE = exports.RequireOrgRole = exports.OrgRoleGuard = exports.REQUIRE_TOKEN_CLASS = exports.RequireTokenClass = exports.TokenClassGuard = exports.ServiceActorGuard = void 0;
|
|
5
5
|
var body_parsers_1 = require("./body-parsers");
|
|
6
6
|
Object.defineProperty(exports, "applyStandardBodyParsers", { enumerable: true, get: function () { return body_parsers_1.applyStandardBodyParsers; } });
|
|
7
7
|
var cors_config_1 = require("./cors.config");
|
|
@@ -29,17 +29,21 @@ Object.defineProperty(exports, "enrichOpenApiWithKeycloakSecurity", { enumerable
|
|
|
29
29
|
Object.defineProperty(exports, "buildKeycloakSwaggerUiOptions", { enumerable: true, get: function () { return swagger_keycloak_1.buildKeycloakSwaggerUiOptions; } });
|
|
30
30
|
var jwt_verification_guard_1 = require("./jwt-verification.guard");
|
|
31
31
|
Object.defineProperty(exports, "JwtVerificationGuard", { enumerable: true, get: function () { return jwt_verification_guard_1.JwtVerificationGuard; } });
|
|
32
|
+
var idp_tenant_resolver_1 = require("./auth/idp-tenant-resolver");
|
|
33
|
+
Object.defineProperty(exports, "IdpKind", { enumerable: true, get: function () { return idp_tenant_resolver_1.IdpKind; } });
|
|
34
|
+
Object.defineProperty(exports, "DEFAULT_IDP_KIND", { enumerable: true, get: function () { return idp_tenant_resolver_1.DEFAULT_IDP_KIND; } });
|
|
35
|
+
Object.defineProperty(exports, "selectTenantResolver", { enumerable: true, get: function () { return idp_tenant_resolver_1.selectTenantResolver; } });
|
|
32
36
|
var oidc_guard_1 = require("@xemahq/oidc-guard");
|
|
33
37
|
Object.defineProperty(exports, "JwksVerifier", { enumerable: true, get: function () { return oidc_guard_1.JwksVerifier; } });
|
|
34
38
|
Object.defineProperty(exports, "JwksVerificationError", { enumerable: true, get: function () { return oidc_guard_1.JwksVerificationError; } });
|
|
35
39
|
Object.defineProperty(exports, "IssuerMetadataResolver", { enumerable: true, get: function () { return oidc_guard_1.IssuerMetadataResolver; } });
|
|
36
40
|
Object.defineProperty(exports, "OidcTokenVerifier", { enumerable: true, get: function () { return oidc_guard_1.OidcTokenVerifier; } });
|
|
41
|
+
Object.defineProperty(exports, "KeycloakIssuerTenantResolver", { enumerable: true, get: function () { return oidc_guard_1.KeycloakIssuerTenantResolver; } });
|
|
42
|
+
Object.defineProperty(exports, "OidcDiscoveryIssuerTenantResolver", { enumerable: true, get: function () { return oidc_guard_1.OidcDiscoveryIssuerTenantResolver; } });
|
|
37
43
|
Object.defineProperty(exports, "extractRealmFromIssuer", { enumerable: true, get: function () { return oidc_guard_1.extractRealmFromIssuer; } });
|
|
38
44
|
var public_decorator_1 = require("./public.decorator");
|
|
45
|
+
Object.defineProperty(exports, "Public", { enumerable: true, get: function () { return public_decorator_1.Public; } });
|
|
39
46
|
Object.defineProperty(exports, "IS_PUBLIC_KEY", { enumerable: true, get: function () { return public_decorator_1.IS_PUBLIC_KEY; } });
|
|
40
|
-
var route_metadata_keys_1 = require("./route-metadata-keys");
|
|
41
|
-
Object.defineProperty(exports, "XEMA_PUBLIC_ROUTE", { enumerable: true, get: function () { return route_metadata_keys_1.XEMA_PUBLIC_ROUTE; } });
|
|
42
|
-
Object.defineProperty(exports, "XEMA_INTERNAL_ROUTE", { enumerable: true, get: function () { return route_metadata_keys_1.XEMA_INTERNAL_ROUTE; } });
|
|
43
47
|
var raw_response_decorator_1 = require("./raw-response.decorator");
|
|
44
48
|
Object.defineProperty(exports, "RawResponse", { enumerable: true, get: function () { return raw_response_decorator_1.RawResponse; } });
|
|
45
49
|
Object.defineProperty(exports, "RAW_RESPONSE_KEY", { enumerable: true, get: function () { return raw_response_decorator_1.RAW_RESPONSE_KEY; } });
|
package/dist/nestjs/index.js.map
CHANGED
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/nestjs/index.ts"],"names":[],"mappings":";;;;AAAA,+CAGwB;AAFtB,wHAAA,wBAAwB,OAAA;AAG1B,6CAA8C;AAArC,4GAAA,aAAa,OAAA;AACtB,uDAAmD;AAA1C,iHAAA,aAAa,OAAA;AACtB,iFAA8E;AAArE,4IAAA,2BAA2B,OAAA;AACpC,2EAAwE;AAA/D,sIAAA,wBAAwB,OAAA;AACjC,2DAAwD;AAA/C,sHAAA,gBAAgB,OAAA;AACzB,2DAO8B;AAN5B,0HAAA,oBAAoB,OAAA;AACpB,qHAAA,eAAe,OAAA;AACf,0HAAA,oBAAoB,OAAA;AACpB,4HAAA,sBAAsB,OAAA;AACtB,0HAAA,oBAAoB,OAAA;AACpB,uHAAA,iBAAiB,OAAA;AAEnB,iEAGiC;AAF/B,oIAAA,2BAA2B,OAAA;AAG7B,uDAQ4B;AAP1B,0HAAA,sBAAsB,OAAA;AACtB,qIAAA,iCAAiC,OAAA;AACjC,iIAAA,6BAA6B,OAAA;AAM/B,mEAAgE;AAAvD,8HAAA,oBAAoB,OAAA;
|
|
1
|
+
{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/nestjs/index.ts"],"names":[],"mappings":";;;;AAAA,+CAGwB;AAFtB,wHAAA,wBAAwB,OAAA;AAG1B,6CAA8C;AAArC,4GAAA,aAAa,OAAA;AACtB,uDAAmD;AAA1C,iHAAA,aAAa,OAAA;AACtB,iFAA8E;AAArE,4IAAA,2BAA2B,OAAA;AACpC,2EAAwE;AAA/D,sIAAA,wBAAwB,OAAA;AACjC,2DAAwD;AAA/C,sHAAA,gBAAgB,OAAA;AACzB,2DAO8B;AAN5B,0HAAA,oBAAoB,OAAA;AACpB,qHAAA,eAAe,OAAA;AACf,0HAAA,oBAAoB,OAAA;AACpB,4HAAA,sBAAsB,OAAA;AACtB,0HAAA,oBAAoB,OAAA;AACpB,uHAAA,iBAAiB,OAAA;AAEnB,iEAGiC;AAF/B,oIAAA,2BAA2B,OAAA;AAG7B,uDAQ4B;AAP1B,0HAAA,sBAAsB,OAAA;AACtB,qIAAA,iCAAiC,OAAA;AACjC,iIAAA,6BAA6B,OAAA;AAM/B,mEAAgE;AAAvD,8HAAA,oBAAoB,OAAA;AAC7B,kEAIoC;AAHlC,8GAAA,OAAO,OAAA;AACP,uHAAA,gBAAgB,OAAA;AAChB,2HAAA,oBAAoB,OAAA;AAKtB,iDAc4B;AAb1B,0GAAA,YAAY,OAAA;AACZ,mHAAA,qBAAqB,OAAA;AACrB,oHAAA,sBAAsB,OAAA;AACtB,+GAAA,iBAAiB,OAAA;AACjB,0HAAA,4BAA4B,OAAA;AAC5B,+HAAA,iCAAiC,OAAA;AACjC,oHAAA,sBAAsB,OAAA;AAQxB,uDAA2D;AAAlD,0GAAA,MAAM,OAAA;AAAE,iHAAA,aAAa,OAAA;AAC9B,mEAAyE;AAAhE,qHAAA,WAAW,OAAA;AAAE,0HAAA,gBAAgB,OAAA;AACtC,2DAAwD;AAA/C,sHAAA,gBAAgB,OAAA;AACzB,qEAAiE;AAAxD,+HAAA,oBAAoB,OAAA;AAC7B,iDAAsC;AAA7B,oGAAA,GAAG,OAAA;AACZ,2CAKsB;AAJpB,gHAAA,kBAAkB,OAAA;AAClB,4GAAA,cAAc,OAAA;AACd,6GAAA,eAAe,OAAA;AACf,oHAAA,sBAAsB,OAAA;AAExB,uDAAuE;AAA9D,kHAAA,cAAc,OAAA;AACvB,mDAI0B;AAHxB,+GAAA,aAAa,OAAA;AACb,uHAAA,qBAAqB,OAAA;AACrB,2GAAA,SAAS,OAAA;AAEX,qDAAqD;AAA5C,wGAAA,KAAK,OAAA;AAAE,4GAAA,SAAS,OAAA;AACzB,6CAA2C;AAAlC,yGAAA,UAAU,OAAA;AACnB,qEAAkE;AAAzD,gIAAA,qBAAqB,OAAA;AAC9B,+BA8CgB;AA7Cd,kGAAA,UAAU,OAAA;AACV,2GAAA,mBAAmB,OAAA;AAGnB,yGAAA,iBAAiB,OAAA;AACjB,2GAAA,mBAAmB,OAAA;AACnB,yGAAA,iBAAiB,OAAA;AAKjB,uGAAA,eAAe,OAAA;AACf,yGAAA,iBAAiB,OAAA;AACjB,2GAAA,mBAAmB,OAAA;AAGnB,oGAAA,YAAY,OAAA;AACZ,sGAAA,cAAc,OAAA;AACd,wGAAA,gBAAgB,OAAA;AAChB,wGAAA,gBAAgB,OAAA;AAChB,4GAAA,oBAAoB,OAAA;AACpB,uGAAA,eAAe,OAAA;AACf,4GAAA,oBAAoB,OAAA;AACpB,wGAAA,gBAAgB,OAAA;AAIhB,oGAAA,YAAY,OAAA;AACZ,uGAAA,eAAe,OAAA;AACf,0GAAA,kBAAkB,OAAA;AAClB,+GAAA,uBAAuB,OAAA;AAMvB,mGAAA,WAAW,OAAA;AACX,qGAAA,aAAa,OAAA;AACb,sGAAA,cAAc,OAAA;AACd,uGAAA,eAAe,OAAA;AAIf,uGAAA,eAAe,OAAA;AACf,yGAAA,iBAAiB,OAAA;AAEnB,+DAMgC;AAL9B,qIAAA,6BAA6B,OAAA;AAC7B,+HAAA,uBAAuB,OAAA;AACvB,8HAAA,sBAAsB,OAAA;AAIxB,6CASuB;AANrB,8HAAA,+BAA+B,OAAA;AAC/B,uHAAA,wBAAwB,OAAA;AACxB,wHAAA,yBAAyB,OAAA;AAGzB,kHAAA,mBAAmB,OAAA"}
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"integration-webhook-envelope.dto.d.ts","sourceRoot":"","sources":["../../../src/nestjs/integration-webhooks/integration-webhook-envelope.dto.ts"],"names":[],"mappings":"AASA,OAAO,EACL,UAAU,EACV,aAAa,EACb,iBAAiB,EAClB,MAAM,gCAAgC,CAAC;
|
|
1
|
+
{"version":3,"file":"integration-webhook-envelope.dto.d.ts","sourceRoot":"","sources":["../../../src/nestjs/integration-webhooks/integration-webhook-envelope.dto.ts"],"names":[],"mappings":"AASA,OAAO,EACL,UAAU,EACV,aAAa,EACb,iBAAiB,EAClB,MAAM,gCAAgC,CAAC;AAqBxC,qBAAa,6BAA6B,CAAC,QAAQ,GAAG,OAAO;IAQ3D,QAAQ,EAAG,aAAa,CAAC;IASzB,UAAU,EAAG,UAAU,CAAC;IAQxB,KAAK,EAAG,MAAM,CAAC;IAIf,UAAU,EAAG,iBAAiB,CAAC;IAQ/B,UAAU,EAAG,MAAM,CAAC;IAOpB,UAAU,EAAG,MAAM,CAAC;IAQpB,aAAa,EAAG,MAAM,CAAC;IASvB,UAAU,CAAC,EAAE,MAAM,CAAC;IASpB,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAK1B,OAAO,EAAG,QAAQ,CAAC;CACpB"}
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"integration-webhook-envelope.dto.js","sourceRoot":"","sources":["../../../src/nestjs/integration-webhooks/integration-webhook-envelope.dto.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,6CAAmE;AACnE,qDAMyB;AAEzB,yEAIwC;
|
|
1
|
+
{"version":3,"file":"integration-webhook-envelope.dto.js","sourceRoot":"","sources":["../../../src/nestjs/integration-webhooks/integration-webhook-envelope.dto.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,6CAAmE;AACnE,qDAMyB;AAEzB,yEAIwC;AAqBxC,MAAa,6BAA6B;IAQxC,QAAQ,CAAiB;IASzB,UAAU,CAAc;IAQxB,KAAK,CAAU;IAIf,UAAU,CAAqB;IAQ/B,UAAU,CAAU;IAOpB,UAAU,CAAU;IAQpB,aAAa,CAAU;IASvB,UAAU,CAAU;IASpB,gBAAgB,CAAU;IAK1B,OAAO,CAAY;CACpB;AA5ED,sEA4EC;AApEC;IAPC,IAAA,qBAAW,EAAC;QACX,IAAI,EAAE,oCAAa;QACnB,QAAQ,EAAE,eAAe;QACzB,WAAW,EAAE,6CAA6C;QAC1D,OAAO,EAAE,oCAAa,CAAC,MAAM;KAC9B,CAAC;IACD,IAAA,wBAAM,EAAC,oCAAa,CAAC;;+DACG;AASzB;IADC,IAAA,wBAAM,EAAC,iCAAU,CAAC;;iEACK;AAQxB;IANC,IAAA,qBAAW,EAAC;QACX,WAAW,EACT,2HAA2H;QAC7H,OAAO,EAAE,kBAAkB;KAC5B,CAAC;IACD,IAAA,0BAAQ,GAAE;;4DACI;AAIf;IADC,IAAA,wBAAM,EAAC,wCAAiB,CAAC;;iEACK;AAQ/B;IANC,IAAA,qBAAW,EAAC;QACX,WAAW,EACT,yHAAyH;QAC3H,OAAO,EAAE,sCAAsC;KAChD,CAAC;IACD,IAAA,0BAAQ,GAAE;;iEACS;AAOpB;IALC,IAAA,qBAAW,EAAC;QACX,WAAW,EAAE,0DAA0D;QACvE,OAAO,EAAE,0BAA0B;KACpC,CAAC;IACD,IAAA,2BAAS,GAAE;;iEACQ;AAQpB;IANC,IAAA,qBAAW,EAAC;QACX,WAAW,EACT,uFAAuF;QACzF,OAAO,EAAE,sCAAsC;KAChD,CAAC;IACD,IAAA,wBAAM,GAAE;;oEACc;AASvB;IAPC,IAAA,6BAAmB,EAAC;QACnB,WAAW,EACT,4EAA4E;QAC9E,OAAO,EAAE,WAAW;KACrB,CAAC;IACD,IAAA,4BAAU,GAAE;IACZ,IAAA,0BAAQ,GAAE;;iEACS;AASpB;IAPC,IAAA,6BAAmB,EAAC;QACnB,WAAW,EACT,gGAAgG;QAClG,OAAO,EAAE,cAAc;KACxB,CAAC;IACD,IAAA,4BAAU,GAAE;IACZ,IAAA,0BAAQ,GAAE;;uEACe"}
|
|
@@ -5,6 +5,8 @@ export declare class JwtVerificationGuard implements CanActivate {
|
|
|
5
5
|
private readonly logger;
|
|
6
6
|
private readonly jwks;
|
|
7
7
|
private readonly issuerMetadata;
|
|
8
|
+
private readonly tenantResolver;
|
|
9
|
+
private readonly oidcVerifier;
|
|
8
10
|
private static readonly SINGLE_REALM_CACHE_KEY;
|
|
9
11
|
private multiRealmConfig;
|
|
10
12
|
private resolvingConfig;
|
|
@@ -12,14 +14,12 @@ export declare class JwtVerificationGuard implements CanActivate {
|
|
|
12
14
|
canActivate(context: ExecutionContext): Promise<boolean>;
|
|
13
15
|
private verifyToken;
|
|
14
16
|
private decodeOrThrow;
|
|
15
|
-
private verifyWithJwks;
|
|
16
17
|
private verifyMultiRealm;
|
|
17
18
|
private verifySingleRealm;
|
|
19
|
+
private configuredIssuers;
|
|
18
20
|
private resolveMultiRealmConfig;
|
|
19
21
|
private resolveKeycloakBaseUrl;
|
|
20
22
|
private resolveAllowedRealms;
|
|
21
|
-
private appendIssuerBaseUrls;
|
|
22
|
-
private extractRealmFromIssuer;
|
|
23
23
|
private attachRealmToContext;
|
|
24
24
|
private isPublicPath;
|
|
25
25
|
}
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"jwt-verification.guard.d.ts","sourceRoot":"","sources":["../../src/nestjs/jwt-verification.guard.ts"],"names":[],"mappings":"AAAA,OAAO,EAEL,WAAW,EACX,gBAAgB,EAKjB,MAAM,gBAAgB,CAAC;
|
|
1
|
+
{"version":3,"file":"jwt-verification.guard.d.ts","sourceRoot":"","sources":["../../src/nestjs/jwt-verification.guard.ts"],"names":[],"mappings":"AAAA,OAAO,EAEL,WAAW,EACX,gBAAgB,EAKjB,MAAM,gBAAgB,CAAC;AAKxB,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,4BAA4B,CAAC;AAqDpE,qBACa,oBAAqB,YAAW,WAAW;IAiDpD,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAC;IAhD/B,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAyC;IAQhE,OAAO,CAAC,QAAQ,CAAC,IAAI,CAA6B;IAMlD,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAgC;IAQ/D,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAuB;IAOtD,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAoB;IAGjD,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,sBAAsB,CAAgB;IAG9D,OAAO,CAAC,gBAAgB,CAGR;IAEhB,OAAO,CAAC,eAAe,CAGC;gBAKL,WAAW,CAAC,EAAE,iBAAiB,YAAA;IAa5C,WAAW,CAAC,OAAO,EAAE,gBAAgB,GAAG,OAAO,CAAC,OAAO,CAAC;YAwChD,WAAW;IAqBzB,OAAO,CAAC,aAAa;YAuBP,gBAAgB;YAsBhB,iBAAiB;IAoD/B,OAAO,CAAC,iBAAiB;YAWX,uBAAuB;YA2CvB,sBAAsB;YAStB,oBAAoB;IAelC,OAAO,CAAC,oBAAoB;IAa5B,OAAO,CAAC,YAAY;CAYrB"}
|
|
@@ -17,8 +17,8 @@ exports.JwtVerificationGuard = void 0;
|
|
|
17
17
|
const common_1 = require("@nestjs/common");
|
|
18
18
|
const decorator_metadata_1 = require("./decorator-metadata");
|
|
19
19
|
const public_decorator_1 = require("./public.decorator");
|
|
20
|
-
const route_metadata_keys_1 = require("./route-metadata-keys");
|
|
21
20
|
const auth_module_options_1 = require("./auth/auth-module-options");
|
|
21
|
+
const idp_tenant_resolver_1 = require("./auth/idp-tenant-resolver");
|
|
22
22
|
const request_context_1 = require("../lib/request-context");
|
|
23
23
|
const oidc_guard_1 = require("@xemahq/oidc-guard");
|
|
24
24
|
const PUBLIC_PATH_PREFIXES = ['/health', '/api/docs', '/api/openapi.json'];
|
|
@@ -29,20 +29,26 @@ let JwtVerificationGuard = class JwtVerificationGuard {
|
|
|
29
29
|
logger = new common_1.Logger(JwtVerificationGuard_1.name);
|
|
30
30
|
jwks = new oidc_guard_1.JwksVerifier(600_000);
|
|
31
31
|
issuerMetadata = new oidc_guard_1.IssuerMetadataResolver();
|
|
32
|
+
tenantResolver;
|
|
33
|
+
oidcVerifier;
|
|
32
34
|
static SINGLE_REALM_CACHE_KEY = '__single__';
|
|
33
35
|
multiRealmConfig = null;
|
|
34
36
|
resolvingConfig = null;
|
|
35
37
|
constructor(authOptions) {
|
|
36
38
|
this.authOptions = authOptions;
|
|
39
|
+
this.tenantResolver = (0, idp_tenant_resolver_1.selectTenantResolver)(process.env.IDP_KIND);
|
|
40
|
+
this.oidcVerifier = new oidc_guard_1.OidcTokenVerifier({
|
|
41
|
+
jwks: this.jwks,
|
|
42
|
+
issuerMetadata: this.issuerMetadata,
|
|
43
|
+
tenantResolver: this.tenantResolver,
|
|
44
|
+
});
|
|
37
45
|
}
|
|
38
46
|
async canActivate(context) {
|
|
39
|
-
const
|
|
40
|
-
|
|
41
|
-
|
|
42
|
-
|
|
43
|
-
|
|
44
|
-
(0, decorator_metadata_1.readDecoratorOverride)(public_decorator_1.IS_PUBLIC_KEY, targets) === true;
|
|
45
|
-
if (bypassesUserAuth)
|
|
47
|
+
const isPublic = (0, decorator_metadata_1.readDecoratorOverride)(public_decorator_1.IS_PUBLIC_KEY, [
|
|
48
|
+
context.getHandler(),
|
|
49
|
+
context.getClass(),
|
|
50
|
+
]);
|
|
51
|
+
if (isPublic)
|
|
46
52
|
return true;
|
|
47
53
|
const request = context.switchToHttp().getRequest();
|
|
48
54
|
const path = request.path ?? request.url?.split('?')[0] ?? '';
|
|
@@ -70,7 +76,7 @@ let JwtVerificationGuard = class JwtVerificationGuard {
|
|
|
70
76
|
const { payload } = this.decodeOrThrow(token);
|
|
71
77
|
const multiRealm = await this.resolveMultiRealmConfig();
|
|
72
78
|
if (multiRealm) {
|
|
73
|
-
await this.verifyMultiRealm(token,
|
|
79
|
+
await this.verifyMultiRealm(token, multiRealm);
|
|
74
80
|
}
|
|
75
81
|
else {
|
|
76
82
|
await this.verifySingleRealm(token, payload);
|
|
@@ -88,9 +94,13 @@ let JwtVerificationGuard = class JwtVerificationGuard {
|
|
|
88
94
|
throw error;
|
|
89
95
|
}
|
|
90
96
|
}
|
|
91
|
-
async
|
|
97
|
+
async verifyMultiRealm(token, config) {
|
|
92
98
|
try {
|
|
93
|
-
await this.
|
|
99
|
+
await this.oidcVerifier.verify(token, {
|
|
100
|
+
discoveryBaseUrls: config.discoveryBaseUrls,
|
|
101
|
+
allowedRealms: config.allowedRealms,
|
|
102
|
+
expectedIssuers: this.configuredIssuers(),
|
|
103
|
+
});
|
|
94
104
|
}
|
|
95
105
|
catch (error) {
|
|
96
106
|
if (error instanceof oidc_guard_1.JwksVerificationError) {
|
|
@@ -99,49 +109,20 @@ let JwtVerificationGuard = class JwtVerificationGuard {
|
|
|
99
109
|
throw error;
|
|
100
110
|
}
|
|
101
111
|
}
|
|
102
|
-
async verifyMultiRealm(token, payload, config) {
|
|
103
|
-
if (!payload.iss) {
|
|
104
|
-
throw new common_1.UnauthorizedException('Token missing required issuer claim');
|
|
105
|
-
}
|
|
106
|
-
const realmName = this.extractRealmFromIssuer(payload.iss);
|
|
107
|
-
if (!realmName) {
|
|
108
|
-
throw new common_1.UnauthorizedException('Cannot determine realm from token issuer');
|
|
109
|
-
}
|
|
110
|
-
if (!config.allowedRealms.has(realmName)) {
|
|
111
|
-
throw new common_1.UnauthorizedException(`Realm '${realmName}' is not allowed`);
|
|
112
|
-
}
|
|
113
|
-
const validIssuers = config.keycloakBaseUrls.map((base) => `${base}/realms/${realmName}`);
|
|
114
|
-
if (!validIssuers.includes(payload.iss) && !payload.iss.endsWith(`/realms/${realmName}`)) {
|
|
115
|
-
throw new common_1.UnauthorizedException('Invalid token issuer');
|
|
116
|
-
}
|
|
117
|
-
const discoveryUrl = `${config.keycloakBaseUrls[0]}/realms/${realmName}/.well-known/openid-configuration`;
|
|
118
|
-
let jwksUrl;
|
|
119
|
-
try {
|
|
120
|
-
jwksUrl = await this.issuerMetadata.resolveJwksUri(discoveryUrl);
|
|
121
|
-
}
|
|
122
|
-
catch (error) {
|
|
123
|
-
if (error instanceof oidc_guard_1.JwksVerificationError) {
|
|
124
|
-
throw new common_1.UnauthorizedException(error.message);
|
|
125
|
-
}
|
|
126
|
-
throw error;
|
|
127
|
-
}
|
|
128
|
-
await this.verifyWithJwks(token, realmName, jwksUrl);
|
|
129
|
-
}
|
|
130
112
|
async verifySingleRealm(token, payload) {
|
|
131
113
|
const expectedIssuer = this.authOptions?.issuer;
|
|
132
114
|
if (expectedIssuer) {
|
|
133
115
|
if (!payload.iss) {
|
|
134
116
|
throw new common_1.UnauthorizedException('Token missing required issuer claim');
|
|
135
117
|
}
|
|
136
|
-
const allowedIssuers =
|
|
137
|
-
const
|
|
138
|
-
...new Set(allowedIssuers
|
|
139
|
-
|
|
140
|
-
|
|
141
|
-
}).filter(Boolean)),
|
|
118
|
+
const allowedIssuers = this.configuredIssuers();
|
|
119
|
+
const tenants = [
|
|
120
|
+
...new Set(allowedIssuers
|
|
121
|
+
.map((iss) => this.tenantResolver.tenantFromIssuer(iss))
|
|
122
|
+
.filter((tenant) => tenant !== null)),
|
|
142
123
|
];
|
|
143
124
|
const issuerMatched = allowedIssuers.includes(payload.iss) ||
|
|
144
|
-
|
|
125
|
+
tenants.some((tenant) => this.tenantResolver.issuerBelongsToTenant(payload.iss, tenant));
|
|
145
126
|
if (!issuerMatched) {
|
|
146
127
|
throw new common_1.UnauthorizedException('Invalid token issuer');
|
|
147
128
|
}
|
|
@@ -150,7 +131,27 @@ let JwtVerificationGuard = class JwtVerificationGuard {
|
|
|
150
131
|
if (!jwksUrl) {
|
|
151
132
|
throw new Error('AuthModule jwksUrl is not configured');
|
|
152
133
|
}
|
|
153
|
-
|
|
134
|
+
try {
|
|
135
|
+
await this.jwks.verify(token, {
|
|
136
|
+
cacheKey: JwtVerificationGuard_1.SINGLE_REALM_CACHE_KEY,
|
|
137
|
+
jwksUrl,
|
|
138
|
+
});
|
|
139
|
+
}
|
|
140
|
+
catch (error) {
|
|
141
|
+
if (error instanceof oidc_guard_1.JwksVerificationError) {
|
|
142
|
+
throw new common_1.UnauthorizedException(error.message);
|
|
143
|
+
}
|
|
144
|
+
throw error;
|
|
145
|
+
}
|
|
146
|
+
}
|
|
147
|
+
configuredIssuers() {
|
|
148
|
+
const raw = this.authOptions?.issuer;
|
|
149
|
+
if (!raw)
|
|
150
|
+
return [];
|
|
151
|
+
return raw
|
|
152
|
+
.split(',')
|
|
153
|
+
.map((s) => s.trim())
|
|
154
|
+
.filter((s) => s.length > 0);
|
|
154
155
|
}
|
|
155
156
|
async resolveMultiRealmConfig() {
|
|
156
157
|
if (this.multiRealmConfig)
|
|
@@ -160,17 +161,13 @@ let JwtVerificationGuard = class JwtVerificationGuard {
|
|
|
160
161
|
this.resolvingConfig = (async () => {
|
|
161
162
|
try {
|
|
162
163
|
const keycloakBaseUrl = await this.resolveKeycloakBaseUrl();
|
|
163
|
-
const
|
|
164
|
-
if (keycloakBaseUrl &&
|
|
165
|
-
const
|
|
164
|
+
const allowedRealms = await this.resolveAllowedRealms();
|
|
165
|
+
if (keycloakBaseUrl && allowedRealms.length > 0) {
|
|
166
|
+
const discoveryBaseUrls = keycloakBaseUrl
|
|
166
167
|
.split(',')
|
|
167
168
|
.map((s) => s.trim().replace(/\/$/, ''));
|
|
168
|
-
this.
|
|
169
|
-
this.
|
|
170
|
-
keycloakBaseUrls,
|
|
171
|
-
allowedRealms: new Set(allowedRealmsRaw),
|
|
172
|
-
};
|
|
173
|
-
this.logger.log(`Multi-realm mode enabled: realms=[${allowedRealmsRaw.join(', ')}], base URLs=[${keycloakBaseUrls.join(', ')}]`);
|
|
169
|
+
this.multiRealmConfig = { discoveryBaseUrls, allowedRealms };
|
|
170
|
+
this.logger.log(`Multi-realm mode enabled: realms=[${allowedRealms.join(', ')}], base URLs=[${discoveryBaseUrls.join(', ')}]`);
|
|
174
171
|
return this.multiRealmConfig;
|
|
175
172
|
}
|
|
176
173
|
return null;
|
|
@@ -190,7 +187,8 @@ let JwtVerificationGuard = class JwtVerificationGuard {
|
|
|
190
187
|
return undefined;
|
|
191
188
|
}
|
|
192
189
|
async resolveAllowedRealms() {
|
|
193
|
-
if (this.authOptions?.allowedRealms &&
|
|
190
|
+
if (this.authOptions?.allowedRealms &&
|
|
191
|
+
this.authOptions.allowedRealms.length > 0) {
|
|
194
192
|
return this.authOptions.allowedRealms;
|
|
195
193
|
}
|
|
196
194
|
if (this.authOptions?.allowedRealmsProvider) {
|
|
@@ -198,25 +196,10 @@ let JwtVerificationGuard = class JwtVerificationGuard {
|
|
|
198
196
|
}
|
|
199
197
|
return [];
|
|
200
198
|
}
|
|
201
|
-
appendIssuerBaseUrls(keycloakBaseUrls) {
|
|
202
|
-
const issuerRaw = this.authOptions?.issuer;
|
|
203
|
-
if (!issuerRaw)
|
|
204
|
-
return;
|
|
205
|
-
for (const iss of issuerRaw.split(',').map((s) => s.trim())) {
|
|
206
|
-
const base = iss.replace(/\/realms\/[^/]+$/, '');
|
|
207
|
-
if (base && !keycloakBaseUrls.includes(base)) {
|
|
208
|
-
keycloakBaseUrls.push(base);
|
|
209
|
-
}
|
|
210
|
-
}
|
|
211
|
-
}
|
|
212
|
-
extractRealmFromIssuer(issuer) {
|
|
213
|
-
const match = issuer.match(/\/realms\/([^/]+)$/);
|
|
214
|
-
return match?.[1] ?? null;
|
|
215
|
-
}
|
|
216
199
|
attachRealmToContext(request, payload) {
|
|
217
200
|
if (!payload.iss)
|
|
218
201
|
return;
|
|
219
|
-
const realmName = this.
|
|
202
|
+
const realmName = this.tenantResolver.tenantFromIssuer(payload.iss);
|
|
220
203
|
if (!realmName)
|
|
221
204
|
return;
|
|
222
205
|
const ctx = request[request_context_1.REQUEST_CONTEXT];
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"jwt-verification.guard.js","sourceRoot":"","sources":["../../src/nestjs/jwt-verification.guard.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,2CAQwB;AACxB,6DAA6D;AAE7D,yDAAmD;AACnD
|
|
1
|
+
{"version":3,"file":"jwt-verification.guard.js","sourceRoot":"","sources":["../../src/nestjs/jwt-verification.guard.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,2CAQwB;AACxB,6DAA6D;AAE7D,yDAAmD;AACnD,oEAAiE;AAEjE,oEAAkE;AAClE,4DAAyD;AAEzD,mDAK4B;AAc5B,MAAM,oBAAoB,GAAG,CAAC,SAAS,EAAE,WAAW,EAAE,mBAAmB,CAAC,CAAC;AAC3E,MAAM,qBAAqB,GAAG,WAAW,CAAC;AA8BnC,IAAM,oBAAoB,GAA1B,MAAM,oBAAoB;;IAiDZ;IAhDF,MAAM,GAAG,IAAI,eAAM,CAAC,sBAAoB,CAAC,IAAI,CAAC,CAAC;IAQ/C,IAAI,GAAG,IAAI,yBAAY,CAAC,OAAO,CAAC,CAAC;IAMjC,cAAc,GAAG,IAAI,mCAAsB,EAAE,CAAC;IAQ9C,cAAc,CAAuB;IAOrC,YAAY,CAAoB;IAGzC,MAAM,CAAU,sBAAsB,GAAG,YAAY,CAAC;IAGtD,gBAAgB,GAGb,IAAI,CAAC;IAER,eAAe,GAGJ,IAAI,CAAC;IAExB,YAGmB,WAA+B;QAA/B,gBAAW,GAAX,WAAW,CAAoB;QAKhD,IAAI,CAAC,cAAc,GAAG,IAAA,0CAAoB,EAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QACjE,IAAI,CAAC,YAAY,GAAG,IAAI,8BAAiB,CAAC;YACxC,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,cAAc,EAAE,IAAI,CAAC,cAAc;YACnC,cAAc,EAAE,IAAI,CAAC,cAAc;SACpC,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,WAAW,CAAC,OAAyB;QAEzC,MAAM,QAAQ,GAAG,IAAA,0CAAqB,EAAU,gCAAa,EAAE;YAC7D,OAAO,CAAC,UAAU,EAAE;YACpB,OAAO,CAAC,QAAQ,EAAE;SACnB,CAAC,CAAC;QACH,IAAI,QAAQ;YAAE,OAAO,IAAI,CAAC;QAE1B,MAAM,OAAO,GAAG,OAAO,CAAC,YAAY,EAAE,CAAC,UAAU,EAAW,CAAC;QAG7D,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,IAAI,OAAO,CAAC,GAAG,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QAC9D,IAAI,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC;YAAE,OAAO,IAAI,CAAC;QAEzC,MAAM,UAAU,GAAG,OAAO,CAAC,OAAO,CAAC,aAAa,CAAC;QAEjD,IAAI,CAAC,UAAU,EAAE,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;YACvC,MAAM,IAAI,8BAAqB,CAC7B,yCAAyC,CAC1C,CAAC;QACJ,CAAC;QAED,MAAM,KAAK,GAAG,UAAU,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;QAEtC,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC;YAG9C,IAAI,CAAC,oBAAoB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;YAE5C,OAAO,IAAI,CAAC;QACd,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,KAAK,YAAY,8BAAqB;gBAAE,MAAM,KAAK,CAAC;YAExD,MAAM,GAAG,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YACnE,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,yBAAyB,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,CAAC;YACtE,MAAM,IAAI,8BAAqB,CAAC,eAAe,CAAC,CAAC;QACnD,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,WAAW,CAAC,KAAa;QACrC,MAAM,EAAE,OAAO,EAAE,GAAG,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC;QAE9C,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,uBAAuB,EAAE,CAAC;QAExD,IAAI,UAAU,EAAE,CAAC;YAEf,MAAM,IAAI,CAAC,gBAAgB,CAAC,KAAK,EAAE,UAAU,CAAC,CAAC;QACjD,CAAC;aAAM,CAAC;YAEN,MAAM,IAAI,CAAC,iBAAiB,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;QAC/C,CAAC;QAED,OAAO,OAAO,CAAC;IACjB,CAAC;IAOO,aAAa,CAAC,KAAa;QAIjC,IAAI,CAAC;YACH,OAAO,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACjC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,KAAK,YAAY,kCAAqB,EAAE,CAAC;gBAC3C,MAAM,IAAI,8BAAqB,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;YACjD,CAAC;YACD,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC;IAWO,KAAK,CAAC,gBAAgB,CAC5B,KAAa,EACb,MAAgE;QAEhE,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,KAAK,EAAE;gBACpC,iBAAiB,EAAE,MAAM,CAAC,iBAAiB;gBAC3C,aAAa,EAAE,MAAM,CAAC,aAAa;gBAKnC,eAAe,EAAE,IAAI,CAAC,iBAAiB,EAAE;aAC1C,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,KAAK,YAAY,kCAAqB,EAAE,CAAC;gBAC3C,MAAM,IAAI,8BAAqB,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;YACjD,CAAC;YACD,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,iBAAiB,CAC7B,KAAa,EACb,OAAmB;QAGnB,MAAM,cAAc,GAAG,IAAI,CAAC,WAAW,EAAE,MAAM,CAAC;QAChD,IAAI,cAAc,EAAE,CAAC;YACnB,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC;gBACjB,MAAM,IAAI,8BAAqB,CAAC,qCAAqC,CAAC,CAAC;YACzE,CAAC;YACD,MAAM,cAAc,GAAG,IAAI,CAAC,iBAAiB,EAAE,CAAC;YAKhD,MAAM,OAAO,GAAG;gBACd,GAAG,IAAI,GAAG,CACR,cAAc;qBACX,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,IAAI,CAAC,cAAc,CAAC,gBAAgB,CAAC,GAAG,CAAC,CAAC;qBACvD,MAAM,CAAC,CAAC,MAAM,EAAoB,EAAE,CAAC,MAAM,KAAK,IAAI,CAAC,CACzD;aACF,CAAC;YACF,MAAM,aAAa,GACjB,cAAc,CAAC,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC;gBACpC,OAAO,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CACtB,IAAI,CAAC,cAAc,CAAC,qBAAqB,CAAC,OAAO,CAAC,GAAI,EAAE,MAAM,CAAC,CAChE,CAAC;YACJ,IAAI,CAAC,aAAa,EAAE,CAAC;gBACnB,MAAM,IAAI,8BAAqB,CAAC,sBAAsB,CAAC,CAAC;YAC1D,CAAC;QACH,CAAC;QAGD,MAAM,OAAO,GAAG,IAAI,CAAC,WAAW,EAAE,OAAO,CAAC;QAC1C,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;QAC1D,CAAC;QAED,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE;gBAC5B,QAAQ,EAAE,sBAAoB,CAAC,sBAAsB;gBACrD,OAAO;aACR,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,KAAK,YAAY,kCAAqB,EAAE,CAAC;gBAC3C,MAAM,IAAI,8BAAqB,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;YACjD,CAAC;YACD,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC;IAGO,iBAAiB;QACvB,MAAM,GAAG,GAAG,IAAI,CAAC,WAAW,EAAE,MAAM,CAAC;QACrC,IAAI,CAAC,GAAG;YAAE,OAAO,EAAE,CAAC;QACpB,OAAO,GAAG;aACP,KAAK,CAAC,GAAG,CAAC;aACV,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;aACpB,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IACjC,CAAC;IAIO,KAAK,CAAC,uBAAuB;QAKnC,IAAI,IAAI,CAAC,gBAAgB;YAAE,OAAO,IAAI,CAAC,gBAAgB,CAAC;QAGxD,IAAI,IAAI,CAAC,eAAe;YAAE,OAAO,IAAI,CAAC,eAAe,CAAC;QAEtD,IAAI,CAAC,eAAe,GAAG,CAAC,KAAK,IAAI,EAAE;YACjC,IAAI,CAAC;gBACH,MAAM,eAAe,GAAG,MAAM,IAAI,CAAC,sBAAsB,EAAE,CAAC;gBAC5D,MAAM,aAAa,GAAG,MAAM,IAAI,CAAC,oBAAoB,EAAE,CAAC;gBAExD,IAAI,eAAe,IAAI,aAAa,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;oBAKhD,MAAM,iBAAiB,GAAG,eAAe;yBACtC,KAAK,CAAC,GAAG,CAAC;yBACV,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,CAAC;oBAE3C,IAAI,CAAC,gBAAgB,GAAG,EAAE,iBAAiB,EAAE,aAAa,EAAE,CAAC;oBAC7D,IAAI,CAAC,MAAM,CAAC,GAAG,CACb,qCAAqC,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,iBAAiB,iBAAiB,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAC9G,CAAC;oBACF,OAAO,IAAI,CAAC,gBAAgB,CAAC;gBAC/B,CAAC;gBAKD,OAAO,IAAI,CAAC;YACd,CAAC;oBAAS,CAAC;gBACT,IAAI,CAAC,eAAe,GAAG,IAAI,CAAC;YAC9B,CAAC;QACH,CAAC,CAAC,EAAE,CAAC;QAEL,OAAO,IAAI,CAAC,eAAe,CAAC;IAC9B,CAAC;IAEO,KAAK,CAAC,sBAAsB;QAClC,IAAI,IAAI,CAAC,WAAW,EAAE,eAAe;YACnC,OAAO,IAAI,CAAC,WAAW,CAAC,eAAe,CAAC;QAC1C,IAAI,IAAI,CAAC,WAAW,EAAE,uBAAuB,EAAE,CAAC;YAC9C,OAAO,CAAC,MAAM,IAAI,CAAC,WAAW,CAAC,uBAAuB,EAAE,CAAC,IAAI,SAAS,CAAC;QACzE,CAAC;QACD,OAAO,SAAS,CAAC;IACnB,CAAC;IAEO,KAAK,CAAC,oBAAoB;QAChC,IACE,IAAI,CAAC,WAAW,EAAE,aAAa;YAC/B,IAAI,CAAC,WAAW,CAAC,aAAa,CAAC,MAAM,GAAG,CAAC,EACzC,CAAC;YACD,OAAO,IAAI,CAAC,WAAW,CAAC,aAAa,CAAC;QACxC,CAAC;QACD,IAAI,IAAI,CAAC,WAAW,EAAE,qBAAqB,EAAE,CAAC;YAC5C,OAAO,MAAM,IAAI,CAAC,WAAW,CAAC,qBAAqB,EAAE,CAAC;QACxD,CAAC;QACD,OAAO,EAAE,CAAC;IACZ,CAAC;IAIO,oBAAoB,CAAC,OAAgB,EAAE,OAAmB;QAChE,IAAI,CAAC,OAAO,CAAC,GAAG;YAAE,OAAO;QACzB,MAAM,SAAS,GAAG,IAAI,CAAC,cAAc,CAAC,gBAAgB,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QACpE,IAAI,CAAC,SAAS;YAAE,OAAO;QAEvB,MAAM,GAAG,GAAI,OAA8C,CACzD,iCAAe,CACc,CAAC;QAChC,IAAI,GAAG,EAAE,CAAC;YACR,GAAG,CAAC,OAAO,GAAG,SAAS,CAAC;QAC1B,CAAC;IACH,CAAC;IAEO,YAAY,CAAC,IAAY;QAC/B,KAAK,MAAM,MAAM,IAAI,oBAAoB,EAAE,CAAC;YAC1C,IAAI,IAAI,KAAK,MAAM,IAAI,IAAI,CAAC,UAAU,CAAC,MAAM,GAAG,GAAG,CAAC;gBAAE,OAAO,IAAI,CAAC;QACpE,CAAC;QACD,IACE,IAAI,KAAK,qBAAqB;YAC9B,IAAI,CAAC,UAAU,CAAC,qBAAqB,GAAG,GAAG,CAAC,EAC5C,CAAC;YACD,OAAO,IAAI,CAAC;QACd,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;;AAlUU,oDAAoB;+BAApB,oBAAoB;IADhC,IAAA,mBAAU,GAAE;IAgDR,WAAA,IAAA,iBAAQ,GAAE,CAAA;IACV,WAAA,IAAA,eAAM,EAAC,yCAAmB,CAAC,CAAA;;GAhDnB,oBAAoB,CAmUhC"}
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"public.decorator.d.ts","sourceRoot":"","sources":["../../src/nestjs/public.decorator.ts"],"names":[],"mappings":"
|
|
1
|
+
{"version":3,"file":"public.decorator.d.ts","sourceRoot":"","sources":["../../src/nestjs/public.decorator.ts"],"names":[],"mappings":"AAEA,eAAO,MAAM,aAAa,aAAa,CAAC;AAYxC,eAAO,MAAM,MAAM,wDAAyC,CAAC"}
|
|
@@ -1,5 +1,8 @@
|
|
|
1
1
|
"use strict";
|
|
2
2
|
Object.defineProperty(exports, "__esModule", { value: true });
|
|
3
|
-
exports.IS_PUBLIC_KEY = void 0;
|
|
3
|
+
exports.Public = exports.IS_PUBLIC_KEY = void 0;
|
|
4
|
+
const common_1 = require("@nestjs/common");
|
|
4
5
|
exports.IS_PUBLIC_KEY = 'isPublic';
|
|
6
|
+
const Public = () => (0, common_1.SetMetadata)(exports.IS_PUBLIC_KEY, true);
|
|
7
|
+
exports.Public = Public;
|
|
5
8
|
//# sourceMappingURL=public.decorator.js.map
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"public.decorator.js","sourceRoot":"","sources":["../../src/nestjs/public.decorator.ts"],"names":[],"mappings":";;;
|
|
1
|
+
{"version":3,"file":"public.decorator.js","sourceRoot":"","sources":["../../src/nestjs/public.decorator.ts"],"names":[],"mappings":";;;AAAA,2CAA6C;AAEhC,QAAA,aAAa,GAAG,UAAU,CAAC;AAYjC,MAAM,MAAM,GAAG,GAAG,EAAE,CAAC,IAAA,oBAAW,EAAC,qBAAa,EAAE,IAAI,CAAC,CAAC;AAAhD,QAAA,MAAM,UAA0C"}
|
|
@@ -32,7 +32,7 @@ let ResponseEnvelopeInterceptor = class ResponseEnvelopeInterceptor {
|
|
|
32
32
|
return { data: items, ...rest };
|
|
33
33
|
}
|
|
34
34
|
if (Array.isArray(obj['items'])) {
|
|
35
|
-
throw new common_1.InternalServerErrorException(`Response shape violates
|
|
35
|
+
throw new common_1.InternalServerErrorException(`Response shape violates the API response-envelope contract at ${routeLabel}: ` +
|
|
36
36
|
`controller returned { items: [...] } without pagination. ` +
|
|
37
37
|
`Non-paginated lists must return the array directly so the envelope is { data: [...] }.`);
|
|
38
38
|
}
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"response-envelope.interceptor.js","sourceRoot":"","sources":["../../src/nestjs/response-envelope.interceptor.ts"],"names":[],"mappings":";;;;;;;;;AAAA,2CAMwB;AACxB,+BAAuC;AACvC,6DAA6D;AAC7D,qEAA4D;AAGrD,IAAM,2BAA2B,GAAjC,MAAM,2BAA2B;IACtC,SAAS,CAAC,OAAyB,EAAE,IAAiB;QAEpD,MAAM,KAAK,GAAG,IAAA,0CAAqB,EAAU,yCAAgB,EAAE;YAC7D,OAAO,CAAC,UAAU,EAAE;YACpB,OAAO,CAAC,QAAQ,EAAE;SACnB,CAAC,CAAC;QACH,IAAI,KAAK,EAAE,CAAC;YACV,OAAO,IAAI,CAAC,MAAM,EAAE,CAAC;QACvB,CAAC;QAED,MAAM,UAAU,GAAG,GAAG,OAAO,CAAC,QAAQ,EAAE,CAAC,IAAI,IAAI,OAAO,CAAC,UAAU,EAAE,CAAC,IAAI,EAAE,CAAC;QAE7E,OAAO,IAAI,CAAC,MAAM,EAAE,CAAC,IAAI,CACvB,IAAA,UAAG,EAAC,CAAC,KAAc,EAAE,EAAE;YACrB,IAAI,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;gBACvC,MAAM,GAAG,GAAG,KAAgC,CAAC;gBAG7C,IAAI,MAAM,IAAI,GAAG,IAAI,OAAO,IAAI,GAAG,EAAE,CAAC;oBACpC,OAAO,KAAK,CAAC;gBACf,CAAC;gBAID,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,IAAI,YAAY,IAAI,GAAG,EAAE,CAAC;oBACvD,MAAM,EAAE,KAAK,EAAE,GAAG,IAAI,EAAE,GAAG,GAAG,CAAC;oBAC/B,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,IAAI,EAAE,CAAC;gBAClC,CAAC;gBAID,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC;oBAChC,MAAM,IAAI,qCAA4B,CACpC,
|
|
1
|
+
{"version":3,"file":"response-envelope.interceptor.js","sourceRoot":"","sources":["../../src/nestjs/response-envelope.interceptor.ts"],"names":[],"mappings":";;;;;;;;;AAAA,2CAMwB;AACxB,+BAAuC;AACvC,6DAA6D;AAC7D,qEAA4D;AAGrD,IAAM,2BAA2B,GAAjC,MAAM,2BAA2B;IACtC,SAAS,CAAC,OAAyB,EAAE,IAAiB;QAEpD,MAAM,KAAK,GAAG,IAAA,0CAAqB,EAAU,yCAAgB,EAAE;YAC7D,OAAO,CAAC,UAAU,EAAE;YACpB,OAAO,CAAC,QAAQ,EAAE;SACnB,CAAC,CAAC;QACH,IAAI,KAAK,EAAE,CAAC;YACV,OAAO,IAAI,CAAC,MAAM,EAAE,CAAC;QACvB,CAAC;QAED,MAAM,UAAU,GAAG,GAAG,OAAO,CAAC,QAAQ,EAAE,CAAC,IAAI,IAAI,OAAO,CAAC,UAAU,EAAE,CAAC,IAAI,EAAE,CAAC;QAE7E,OAAO,IAAI,CAAC,MAAM,EAAE,CAAC,IAAI,CACvB,IAAA,UAAG,EAAC,CAAC,KAAc,EAAE,EAAE;YACrB,IAAI,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;gBACvC,MAAM,GAAG,GAAG,KAAgC,CAAC;gBAG7C,IAAI,MAAM,IAAI,GAAG,IAAI,OAAO,IAAI,GAAG,EAAE,CAAC;oBACpC,OAAO,KAAK,CAAC;gBACf,CAAC;gBAID,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,IAAI,YAAY,IAAI,GAAG,EAAE,CAAC;oBACvD,MAAM,EAAE,KAAK,EAAE,GAAG,IAAI,EAAE,GAAG,GAAG,CAAC;oBAC/B,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,IAAI,EAAE,CAAC;gBAClC,CAAC;gBAID,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC;oBAChC,MAAM,IAAI,qCAA4B,CACpC,iEAAiE,UAAU,IAAI;wBAC7E,2DAA2D;wBAC3D,wFAAwF,CAC3F,CAAC;gBACJ,CAAC;YACH,CAAC;YAGD,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC;QACzB,CAAC,CAAC,CACH,CAAC;IACJ,CAAC;CACF,CAAA;AA9CY,kEAA2B;sCAA3B,2BAA2B;IADvC,IAAA,mBAAU,GAAE;GACA,2BAA2B,CA8CvC"}
|
package/package.json
CHANGED
|
@@ -1,6 +1,16 @@
|
|
|
1
1
|
{
|
|
2
2
|
"name": "@xemahq/platform-common",
|
|
3
|
-
"version": "0.2.
|
|
3
|
+
"version": "0.2.18",
|
|
4
|
+
"description": "Shared NestJS building blocks for Xema services — auth guards, response redaction, CORS configuration, and crypto helpers.",
|
|
5
|
+
"license": "Apache-2.0",
|
|
6
|
+
"author": "Neuralchowder Inc. <developer@xema.dev> (https://xema.dev)",
|
|
7
|
+
"homepage": "https://xema.dev",
|
|
8
|
+
"repository": {
|
|
9
|
+
"type": "git",
|
|
10
|
+
"url": "git+https://github.com/xema-dev/xema-kernel-contracts.git",
|
|
11
|
+
"directory": "packages/kernel/platform-common"
|
|
12
|
+
},
|
|
13
|
+
"bugs": "https://github.com/xema-dev/xema-kernel-contracts/issues",
|
|
4
14
|
"publishConfig": {
|
|
5
15
|
"registry": "https://registry.npmjs.org/",
|
|
6
16
|
"access": "public"
|
|
@@ -16,7 +26,7 @@
|
|
|
16
26
|
"@nestjs/platform-express": ">=10",
|
|
17
27
|
"@nestjs/swagger": ">=7",
|
|
18
28
|
"rxjs": ">=7",
|
|
19
|
-
"@xemahq/kernel-contracts": "
|
|
29
|
+
"@xemahq/kernel-contracts": "0.22.2"
|
|
20
30
|
},
|
|
21
31
|
"peerDependenciesMeta": {
|
|
22
32
|
"@nestjs/platform-express": {
|
|
@@ -28,7 +38,7 @@
|
|
|
28
38
|
"cloudevents": "^8.0.2",
|
|
29
39
|
"jwks-rsa": "^3.2.2",
|
|
30
40
|
"zod": "^4.3.6",
|
|
31
|
-
"@xemahq/oidc-guard": "0.
|
|
41
|
+
"@xemahq/oidc-guard": "0.3.0"
|
|
32
42
|
},
|
|
33
43
|
"devDependencies": {
|
|
34
44
|
"@nestjs/common": "11.1.13",
|