@xemahq/platform-common 0.39.0 → 0.41.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/dist/index.d.ts +1 -0
- package/dist/index.d.ts.map +1 -1
- package/dist/index.js +1 -0
- package/dist/index.js.map +1 -1
- package/dist/lib/request-context.d.ts +1 -0
- package/dist/lib/request-context.d.ts.map +1 -1
- package/dist/lib/request-context.js.map +1 -1
- package/dist/lib/untrusted-content/fence.d.ts +29 -0
- package/dist/lib/untrusted-content/fence.d.ts.map +1 -0
- package/dist/lib/untrusted-content/fence.js +98 -0
- package/dist/lib/untrusted-content/fence.js.map +1 -0
- package/dist/lib/untrusted-content/index.d.ts +4 -0
- package/dist/lib/untrusted-content/index.d.ts.map +1 -0
- package/dist/lib/untrusted-content/index.js +20 -0
- package/dist/lib/untrusted-content/index.js.map +1 -0
- package/dist/lib/untrusted-content/notice.d.ts +3 -0
- package/dist/lib/untrusted-content/notice.d.ts.map +1 -0
- package/dist/lib/untrusted-content/notice.js +11 -0
- package/dist/lib/untrusted-content/notice.js.map +1 -0
- package/dist/lib/untrusted-content/origin.d.ts +9 -0
- package/dist/lib/untrusted-content/origin.d.ts.map +1 -0
- package/dist/lib/untrusted-content/origin.js +13 -0
- package/dist/lib/untrusted-content/origin.js.map +1 -0
- package/dist/nestjs/auth/actor-classification.d.ts +1 -0
- package/dist/nestjs/auth/actor-classification.d.ts.map +1 -1
- package/dist/nestjs/auth/actor-classification.js +22 -0
- package/dist/nestjs/auth/actor-classification.js.map +1 -1
- package/dist/nestjs/auth/boundary-context-brand.d.ts +5 -0
- package/dist/nestjs/auth/boundary-context-brand.d.ts.map +1 -0
- package/dist/nestjs/auth/boundary-context-brand.js +17 -0
- package/dist/nestjs/auth/boundary-context-brand.js.map +1 -0
- package/dist/nestjs/auth/claim-authority.d.ts +25 -0
- package/dist/nestjs/auth/claim-authority.d.ts.map +1 -0
- package/dist/nestjs/auth/claim-authority.js +178 -0
- package/dist/nestjs/auth/claim-authority.js.map +1 -0
- package/dist/nestjs/auth/declared-subject-class.d.ts.map +1 -1
- package/dist/nestjs/auth/declared-subject-class.js +9 -6
- package/dist/nestjs/auth/declared-subject-class.js.map +1 -1
- package/dist/nestjs/auth/index.d.ts +2 -0
- package/dist/nestjs/auth/index.d.ts.map +1 -1
- package/dist/nestjs/auth/index.js +13 -1
- package/dist/nestjs/auth/index.js.map +1 -1
- package/dist/nestjs/auth/org-authority-fence.d.ts +16 -0
- package/dist/nestjs/auth/org-authority-fence.d.ts.map +1 -0
- package/dist/nestjs/auth/org-authority-fence.js +77 -0
- package/dist/nestjs/auth/org-authority-fence.js.map +1 -0
- package/dist/nestjs/auth/service-token.guard.d.ts.map +1 -1
- package/dist/nestjs/auth/service-token.guard.js +3 -1
- package/dist/nestjs/auth/service-token.guard.js.map +1 -1
- package/dist/nestjs/cors.config.d.ts +1 -0
- package/dist/nestjs/cors.config.d.ts.map +1 -1
- package/dist/nestjs/cors.config.js +72 -27
- package/dist/nestjs/cors.config.js.map +1 -1
- package/dist/nestjs/index.d.ts +2 -2
- package/dist/nestjs/index.d.ts.map +1 -1
- package/dist/nestjs/index.js +15 -4
- package/dist/nestjs/index.js.map +1 -1
- package/dist/nestjs/jwt-verification.guard.d.ts +1 -1
- package/dist/nestjs/jwt-verification.guard.d.ts.map +1 -1
- package/dist/nestjs/jwt-verification.guard.js +48 -8
- package/dist/nestjs/jwt-verification.guard.js.map +1 -1
- package/dist/nestjs/request-context.middleware.d.ts +0 -2
- package/dist/nestjs/request-context.middleware.d.ts.map +1 -1
- package/dist/nestjs/request-context.middleware.js +4 -69
- package/dist/nestjs/request-context.middleware.js.map +1 -1
- package/package.json +4 -4
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"cors.config.js","sourceRoot":"","sources":["../../src/nestjs/cors.config.ts"],"names":[],"mappings":";;
|
|
1
|
+
{"version":3,"file":"cors.config.js","sourceRoot":"","sources":["../../src/nestjs/cors.config.ts"],"names":[],"mappings":";;AAuGA,0CASC;AASD,sCAqDC;AAqBD,gDAwCC;AA3OD,2CAAwC;AACxC,mFAAuF;AAIvF,MAAM,MAAM,GAAG,IAAI,eAAM,CAAC,MAAM,CAAC,CAAC;AAQlC,MAAM,aAAa,GAAG,MAAM,CAAC;AAY7B,MAAM,gBAAgB,GAAa,EAAE,CAAC;AAMtC,MAAM,WAAW,GAAG;IAClB,WAAW,EAAE,IAAI;IACjB,OAAO,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,SAAS,CAAC;IAM7D,cAAc,EAAE;QACd,cAAc;QACd,eAAe;QACf,kBAAkB;QAClB,QAAQ;QACR,QAAQ;QACR,eAAe;QASf,UAAU;QACV,cAAc;QACd,kBAAkB;QAClB,cAAc;QACd,sBAAsB;QACtB,eAAe;QACf,iBAAiB;QAGjB,UAAU;QACV,WAAW;QACX,kBAAkB;QAGlB,oDAA4B;KAC7B;IACD,cAAc,EAAE;QACd,mBAAmB;QACnB,uBAAuB;QACvB,mBAAmB;QAGnB,MAAM;KACP;CACoC,CAAC;AAOxC,SAAS,oBAAoB,CAAC,MAAc,EAAE,OAAe;IAC3D,MAAM,cAAc,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC;IAEtC,IAAI,cAAc,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;QACjC,MAAM,YAAY,GAAG,cAAc;aAChC,OAAO,CAAC,oBAAoB,EAAE,MAAM,CAAC;aACrC,OAAO,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;QACxB,MAAM,KAAK,GAAG,IAAI,MAAM,CAAC,aAAa,YAAY,GAAG,CAAC,CAAC;QACvD,OAAO,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAC5B,CAAC;IAED,OAAO,CACL,MAAM,KAAK,UAAU,cAAc,EAAE;QACrC,MAAM,KAAK,WAAW,cAAc,EAAE;QACtC,MAAM,KAAK,cAAc,CAC1B,CAAC;AACJ,CAAC;AAED,SAAgB,eAAe,CAAC,MAAc,EAAE,cAAuB;IACrE,IAAI,CAAC,cAAc,IAAI,MAAM,KAAK,aAAa,EAAE,CAAC;QAChD,OAAO,KAAK,CAAC;IACf,CAAC;IAED,OAAO,cAAc;SAClB,KAAK,CAAC,GAAG,CAAC;SACV,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;SAChC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,oBAAoB,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;AAC9D,CAAC;AASD,SAAgB,aAAa,CAAC,cAAuB;IACnD,IAAI,CAAC,cAAc,EAAE,CAAC;QACpB,MAAM,IAAI,KAAK,CACb,yDAAyD;YACvD,yFAAyF,CAC5F,CAAC;IACJ,CAAC;IAOD,MAAM,QAAQ,GAAG,cAAc;SAC5B,KAAK,CAAC,GAAG,CAAC;SACV,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;SAChC,MAAM,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IAC3C,MAAM,iBAAiB,GAAG,CAAC,OAAe,EAAW,EAAE,CACrD,OAAO,KAAK,GAAG;QACf,OAAO,KAAK,OAAO;QACnB,OAAO,KAAK,UAAU;QACtB,OAAO,KAAK,WAAW,CAAC;IAC1B,IAAI,QAAQ,CAAC,IAAI,CAAC,iBAAiB,CAAC,EAAE,CAAC;QACrC,MAAM,IAAI,KAAK,CACb,yEAAyE;YACvE,sFAAsF,CACzF,CAAC;IACJ,CAAC;IAED,OAAO;QACL,MAAM,EAAE,CAAC,MAAM,EAAE,QAAQ,EAAE,EAAE;YAC3B,IAAI,CAAC,MAAM,EAAE,CAAC;gBACZ,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;gBACrB,OAAO;YACT,CAAC;YAED,MAAM,SAAS,GAAG,eAAe,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC;YAE1D,IAAI,SAAS,EAAE,CAAC;gBACd,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;YACvB,CAAC;iBAAM,CAAC;gBAON,MAAM,CAAC,IAAI,CAAC,wBAAwB,MAAM,EAAE,CAAC,CAAC;gBAC9C,QAAQ,CAAC,IAAI,EAAE,gBAAgB,CAAC,CAAC;YACnC,CAAC;QACH,CAAC;QACD,GAAG,WAAW;KACf,CAAC;AACJ,CAAC;AAqBD,SAAgB,kBAAkB,CAAC,OAA0B;IAC3D,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACzB,MAAM,IAAI,KAAK,CAAC,+CAA+C,CAAC,CAAC;IACnE,CAAC;IACD,MAAM,OAAO,GAAG,IAAI,GAAG,EAAkB,CAAC;IAC1C,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;QAC5B,IAAI,SAAiB,CAAC;QACtB,IAAI,CAAC;YACH,SAAS,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC;QACpC,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,IAAI,KAAK,CAAC,gBAAgB,KAAK,wBAAwB,CAAC,CAAC;QACjE,CAAC;QAGD,IAAI,SAAS,KAAK,KAAK,IAAI,SAAS,KAAK,aAAa,IAAI,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;YAC9E,MAAM,IAAI,KAAK,CACb,gBAAgB,KAAK,wDAAwD;gBAC3E,iEAAiE,CACpE,CAAC;QACJ,CAAC;QACD,IAAI,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;YACvB,MAAM,IAAI,KAAK,CAAC,gBAAgB,KAAK,oBAAoB,CAAC,CAAC;QAC7D,CAAC;QACD,OAAO,CAAC,GAAG,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;IAC5B,CAAC;IAED,OAAO;QACL,MAAM,EAAE,CAAC,MAAM,EAAE,QAAQ,EAAE,EAAE;YAC3B,MAAM,KAAK,GAAG,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;YACrE,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;gBACxB,QAAQ,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;gBACtB,OAAO;YACT,CAAC;YACD,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;gBACzB,MAAM,CAAC,IAAI,CAAC,wBAAwB,MAAM,EAAE,CAAC,CAAC;YAChD,CAAC;YACD,QAAQ,CAAC,IAAI,EAAE,gBAAgB,CAAC,CAAC;QACnC,CAAC;QACD,GAAG,WAAW;KACf,CAAC;AACJ,CAAC"}
|
package/dist/nestjs/index.d.ts
CHANGED
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
export { applyStandardBodyParsers, type StandardBodyParserOptions, } from './body-parsers';
|
|
2
2
|
export { readDecoratorOverride, type DecoratorWithKey, } from './decorator-metadata';
|
|
3
|
-
export { getCorsConfig } from './cors.config';
|
|
3
|
+
export { getCorsConfig, getExactCorsConfig } from './cors.config';
|
|
4
4
|
export { getEnvOrThrow } from './get-env-or-throw';
|
|
5
5
|
export { ResponseEnvelopeInterceptor } from './response-envelope.interceptor';
|
|
6
6
|
export { RequestContextMiddleware } from './request-context.middleware';
|
|
@@ -32,7 +32,7 @@ export { RolesGuard } from './roles.guard';
|
|
|
32
32
|
export { GlobalExceptionFilter, sendProblemResponse, } from './global-exception.filter';
|
|
33
33
|
export { problemDetailsFor, problemFieldIssuesFromZod, refusalFrom, titleForCode, isZodError, type Refusal, } from './refusal';
|
|
34
34
|
export { DroppedProblemExtensionReason, sanitizeProblemExtensions, describeDroppedProblemExtensions, type DroppedProblemExtension, type SanitizedProblemExtensions, } from './problem-extensions';
|
|
35
|
-
export { AuthModule, AUTH_MODULE_OPTIONS, type AuthModuleOptions, type AuthModuleAsyncOptions, RealmTokenVerifier, type MultiRealmKeySource, type VerifiedTokenSource, claimsWithDeclaredSubjectClass, UnknownDeclaredSubjectClassError, ServiceTokenGuard, InternalCallerGuard, ServiceActorGuard, isDirectServiceActor, TokenClassGuard, RequireTokenClass, REQUIRE_TOKEN_CLASS, OrgRoleGuard, RequireOrgRole, REQUIRE_ORG_ROLE, ServiceOrOrgRoleGuard, OrgRolesClaimKey, ORG_ROLES_CLAIM_KEYS, resolveOrgRoles, resolveOrgRoleForOrg, orgRoleSatisfies, PlatformRole, hasPlatformRole, PlatformAdminGuard, holdsOrgAuthority, resolveOrgAuthorityInstrument, type OrgAuthorityInstrument, configureAuthMiddleware, type ConfigureAuthMiddlewareOptions, OrgClaimKey, OrgHeaderName, ORG_CLAIM_KEYS, resolveOrgClaim, RequireProvenOrgAuthority, REQUIRE_PROVEN_ORG_AUTHORITY, OrgAuthoritySource, type OrgAuthorityVerdict, type OrgAuthorityCallerFacts, resolveOrgAuthority, isOrgAuthorityProven, orgAuthorityRequiresProof, ORG_AUTHORITY_OBSERVATION_LIMIT, UNKNOWN_CLIENT_ID, type OrgAuthorityObservation, type OrgAuthorityCensus, recordUnprovenOrgAuthority, orgAuthorityCensus, resetOrgAuthorityCensus, OrgScopeProvenance, type OrgScopeWitness, type OrgScopedTokenMinter, UnprovenOrgScopeError, orgScopeFromProvenRequest, orgScopeFromOwningRow, orgScopeFromPlatformSweep, describeOrgScopeWitness, mintOrgScopedToken, type OrgScopedClaimDescriptor, orgScopedClaim, } from './auth';
|
|
35
|
+
export { AuthModule, AUTH_MODULE_OPTIONS, type AuthModuleOptions, type AuthModuleAsyncOptions, RealmTokenVerifier, type MultiRealmKeySource, type VerifiedTokenSource, claimsWithDeclaredSubjectClass, UnknownDeclaredSubjectClassError, BoundarySubjectKind, CONTEXT_VERSION_CLAIM, DELEGATION_ID_CLAIM, FOREIGN_CALLER_IDENTITY_CLAIMS, InvalidBoundaryContextError, PLATFORM_AUTHORITY_CLAIMS, PLATFORM_ROLES_CLAIM, SUPPORTED_CONTEXT_VERSION, UnsupportedContextVersionError, kernelSubjectKindForBoundary, ServiceTokenGuard, InternalCallerGuard, ServiceActorGuard, isDirectServiceActor, TokenClassGuard, RequireTokenClass, REQUIRE_TOKEN_CLASS, OrgRoleGuard, RequireOrgRole, REQUIRE_ORG_ROLE, ServiceOrOrgRoleGuard, OrgRolesClaimKey, ORG_ROLES_CLAIM_KEYS, resolveOrgRoles, resolveOrgRoleForOrg, orgRoleSatisfies, PlatformRole, hasPlatformRole, PlatformAdminGuard, holdsOrgAuthority, resolveOrgAuthorityInstrument, type OrgAuthorityInstrument, configureAuthMiddleware, type ConfigureAuthMiddlewareOptions, OrgClaimKey, OrgHeaderName, ORG_CLAIM_KEYS, resolveOrgClaim, RequireProvenOrgAuthority, REQUIRE_PROVEN_ORG_AUTHORITY, OrgAuthoritySource, type OrgAuthorityVerdict, type OrgAuthorityCallerFacts, resolveOrgAuthority, isOrgAuthorityProven, orgAuthorityRequiresProof, ORG_AUTHORITY_OBSERVATION_LIMIT, UNKNOWN_CLIENT_ID, type OrgAuthorityObservation, type OrgAuthorityCensus, recordUnprovenOrgAuthority, orgAuthorityCensus, resetOrgAuthorityCensus, OrgScopeProvenance, type OrgScopeWitness, type OrgScopedTokenMinter, UnprovenOrgScopeError, orgScopeFromProvenRequest, orgScopeFromOwningRow, orgScopeFromPlatformSweep, describeOrgScopeWitness, mintOrgScopedToken, type OrgScopedClaimDescriptor, orgScopedClaim, } from './auth';
|
|
36
36
|
export { ConnectorWebhookEnvelopeDto, ConnectorEnvelopePipe, ApiConnectorEnvelope, type ApiConnectorEnvelopeOptions, type ConnectorEnvelopeVariant, } from './connector-webhooks';
|
|
37
37
|
export { type IdempotencyService, type IdempotencyOutcome, IDEMPOTENCY_RECORD_MODEL, DataStoreIdempotencyService, IDEMPOTENCY_DATA_STORE_CLIENT, type IdempotencyDataStoreClient, type IdempotencyDataStoreDelegate, IDEMPOTENCY_SERVICE, } from './idempotency';
|
|
38
38
|
export { RedactionService, RedactionInterceptor, RedactResponse, REDACT_RESPONSE_KEY, } from './redaction';
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/nestjs/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,wBAAwB,EACxB,KAAK,yBAAyB,GAC/B,MAAM,gBAAgB,CAAC;AAQxB,OAAO,EACL,qBAAqB,EACrB,KAAK,gBAAgB,GACtB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;
|
|
1
|
+
{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/nestjs/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,wBAAwB,EACxB,KAAK,yBAAyB,GAC/B,MAAM,gBAAgB,CAAC;AAQxB,OAAO,EACL,qBAAqB,EACrB,KAAK,gBAAgB,GACtB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAAE,aAAa,EAAE,kBAAkB,EAAE,MAAM,eAAe,CAAC;AAClE,OAAO,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AACnD,OAAO,EAAE,2BAA2B,EAAE,MAAM,iCAAiC,CAAC;AAC9E,OAAO,EAAE,wBAAwB,EAAE,MAAM,8BAA8B,CAAC;AACxE,OAAO,EACL,yBAAyB,EACzB,uBAAuB,EACvB,YAAY,EAKZ,yBAAyB,EAGzB,sBAAsB,EACtB,sBAAsB,EACtB,sBAAsB,EAGtB,yBAAyB,EAGzB,4BAA4B,EAG5B,kBAAkB,EAClB,uBAAuB,EACvB,gBAAgB,EAChB,KAAK,mBAAmB,GACzB,MAAM,6BAA6B,CAAC;AAKrC,OAAO,EACL,2BAA2B,EAC3B,2BAA2B,EAC3B,+BAA+B,EAC/B,8BAA8B,EAC9B,sBAAsB,GACvB,MAAM,yBAAyB,CAAC;AAIjC,OAAO,EACL,iCAAiC,EACjC,uBAAuB,EACvB,wBAAwB,EACxB,qBAAqB,EACrB,0BAA0B,EAC1B,KAAK,kBAAkB,GACxB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAAE,2BAA2B,EAAE,MAAM,kCAAkC,CAAC;AAC/E,OAAO,EAAE,iBAAiB,EAAE,oBAAoB,EAAE,MAAM,uBAAuB,CAAC;AAChF,OAAO,EACL,oBAAoB,EACpB,eAAe,EACf,oBAAoB,EACpB,sBAAsB,EACtB,uBAAuB,EACvB,oBAAoB,EACpB,iBAAiB,EACjB,kBAAkB,GACnB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EACL,2BAA2B,EAC3B,KAAK,wBAAwB,GAC9B,MAAM,yBAAyB,CAAC;AACjC,OAAO,EACL,sBAAsB,EACtB,iCAAiC,EACjC,6BAA6B,EAC7B,KAAK,mBAAmB,EACxB,KAAK,gCAAgC,EACrC,KAAK,6BAA6B,EAClC,KAAK,wBAAwB,GAC9B,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EACL,oBAAoB,EAIpB,gCAAgC,GACjC,MAAM,0BAA0B,CAAC;AAClC,OAAO,EACL,OAAO,EACP,gBAAgB,EAChB,oBAAoB,GACrB,MAAM,4BAA4B,CAAC;AAIpC,OAAO,EACL,YAAY,EACZ,qBAAqB,EACrB,sBAAsB,EACtB,iBAAiB,EACjB,4BAA4B,EAC5B,iCAAiC,EACjC,sBAAsB,EACtB,KAAK,gBAAgB,EACrB,KAAK,iBAAiB,EACtB,KAAK,oBAAoB,EACzB,KAAK,GAAG,EACR,KAAK,iBAAiB,EACtB,KAAK,gBAAgB,GACtB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AAG3D,OAAO,EACL,sBAAsB,EACtB,YAAY,EACZ,gBAAgB,EAChB,sBAAsB,EACtB,aAAa,GACd,MAAM,uBAAuB,CAAC;AAK/B,OAAO,EACL,8BAA8B,EAC9B,0BAA0B,GAC3B,MAAM,yBAAyB,CAAC;AACjC,OAAO,EAAE,WAAW,EAAE,gBAAgB,EAAE,MAAM,0BAA0B,CAAC;AACzE,OAAO,EAAE,gBAAgB,EAAE,MAAM,sBAAsB,CAAC;AACxD,OAAO,EACL,0BAA0B,EAC1B,wBAAwB,EACxB,KAAK,iBAAiB,GACvB,MAAM,2BAA2B,CAAC;AACnC,OAAO,EAAE,oBAAoB,EAAE,MAAM,2BAA2B,CAAC;AACjE,OAAO,EAAE,GAAG,EAAE,MAAM,iBAAiB,CAAC;AACtC,OAAO,EACL,kBAAkB,EAClB,cAAc,EACd,oBAAoB,EACpB,wBAAwB,EACxB,oBAAoB,EACpB,mBAAmB,EACnB,eAAe,EACf,sBAAsB,EACtB,wBAAwB,EACxB,oBAAoB,EACpB,4BAA4B,GAC7B,MAAM,cAAc,CAAC;AACtB,OAAO,EAAE,cAAc,EAAE,KAAK,YAAY,EAAE,MAAM,oBAAoB,CAAC;AACvE,OAAO,EACL,mBAAmB,EACnB,UAAU,EACV,UAAU,EACV,aAAa,GACd,MAAM,yBAAyB,CAAC;AACjC,OAAO,EACL,aAAa,EACb,qBAAqB,EACrB,SAAS,GACV,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,MAAM,mBAAmB,CAAC;AACrD,OAAO,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AAC3C,OAAO,EACL,qBAAqB,EAIrB,mBAAmB,GACpB,MAAM,2BAA2B,CAAC;AAMnC,OAAO,EACL,iBAAiB,EACjB,yBAAyB,EACzB,WAAW,EACX,YAAY,EACZ,UAAU,EACV,KAAK,OAAO,GACb,MAAM,WAAW,CAAC;AAGnB,OAAO,EACL,6BAA6B,EAC7B,yBAAyB,EACzB,gCAAgC,EAChC,KAAK,uBAAuB,EAC5B,KAAK,0BAA0B,GAChC,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EACL,UAAU,EACV,mBAAmB,EACnB,KAAK,iBAAiB,EACtB,KAAK,sBAAsB,EAQ3B,kBAAkB,EAClB,KAAK,mBAAmB,EACxB,KAAK,mBAAmB,EAKxB,8BAA8B,EAC9B,gCAAgC,EAChC,mBAAmB,EACnB,qBAAqB,EACrB,mBAAmB,EACnB,8BAA8B,EAC9B,2BAA2B,EAC3B,yBAAyB,EACzB,oBAAoB,EACpB,yBAAyB,EACzB,8BAA8B,EAC9B,4BAA4B,EAC5B,iBAAiB,EACjB,mBAAmB,EACnB,iBAAiB,EACjB,oBAAoB,EAKpB,eAAe,EACf,iBAAiB,EACjB,mBAAmB,EAGnB,YAAY,EACZ,cAAc,EACd,gBAAgB,EAGhB,qBAAqB,EACrB,gBAAgB,EAChB,oBAAoB,EACpB,eAAe,EACf,oBAAoB,EACpB,gBAAgB,EAIhB,YAAY,EACZ,eAAe,EACf,kBAAkB,EAKlB,iBAAiB,EAKjB,6BAA6B,EAC7B,KAAK,sBAAsB,EAC3B,uBAAuB,EACvB,KAAK,8BAA8B,EAKnC,WAAW,EACX,aAAa,EACb,cAAc,EACd,eAAe,EAIf,yBAAyB,EACzB,4BAA4B,EAQ5B,kBAAkB,EAClB,KAAK,mBAAmB,EACxB,KAAK,uBAAuB,EAC5B,mBAAmB,EACnB,oBAAoB,EACpB,yBAAyB,EACzB,+BAA+B,EAC/B,iBAAiB,EACjB,KAAK,uBAAuB,EAC5B,KAAK,kBAAkB,EACvB,0BAA0B,EAC1B,kBAAkB,EAClB,uBAAuB,EAMvB,kBAAkB,EAClB,KAAK,eAAe,EACpB,KAAK,oBAAoB,EACzB,qBAAqB,EACrB,yBAAyB,EACzB,qBAAqB,EACrB,yBAAyB,EACzB,uBAAuB,EACvB,kBAAkB,EAClB,KAAK,wBAAwB,EAC7B,cAAc,GACf,MAAM,QAAQ,CAAC;AAChB,OAAO,EACL,2BAA2B,EAC3B,qBAAqB,EACrB,oBAAoB,EACpB,KAAK,2BAA2B,EAChC,KAAK,wBAAwB,GAC9B,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EACL,KAAK,kBAAkB,EACvB,KAAK,kBAAkB,EACvB,wBAAwB,EACxB,2BAA2B,EAC3B,6BAA6B,EAC7B,KAAK,0BAA0B,EAC/B,KAAK,4BAA4B,EACjC,mBAAmB,GACpB,MAAM,eAAe,CAAC;AAGvB,OAAO,EACL,gBAAgB,EAChB,oBAAoB,EACpB,cAAc,EACd,mBAAmB,GACpB,MAAM,aAAa,CAAC;AAGrB,cAAc,gCAAgC,CAAC;AAK/C,OAAO,EAAE,qBAAqB,EAAE,MAAM,oBAAoB,CAAC;AAQ3D,OAAO,EACL,iBAAiB,EACjB,qBAAqB,EACrB,cAAc,GACf,MAAM,aAAa,CAAC"}
|
package/dist/nestjs/index.js
CHANGED
|
@@ -14,16 +14,17 @@ var __exportStar = (this && this.__exportStar) || function(m, exports) {
|
|
|
14
14
|
for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
|
|
15
15
|
};
|
|
16
16
|
Object.defineProperty(exports, "__esModule", { value: true });
|
|
17
|
-
exports.
|
|
18
|
-
exports.
|
|
19
|
-
exports.
|
|
20
|
-
exports.assertOrgScope = exports.OrgScopeRequiredError = exports.OrgScopeErrorCode = exports.resolveCallerOrgScope = exports.REDACT_RESPONSE_KEY = exports.RedactResponse = exports.RedactionInterceptor = exports.RedactionService = exports.IDEMPOTENCY_SERVICE = exports.IDEMPOTENCY_DATA_STORE_CLIENT = exports.DataStoreIdempotencyService = exports.IDEMPOTENCY_RECORD_MODEL = exports.ApiConnectorEnvelope = exports.ConnectorEnvelopePipe = exports.ConnectorWebhookEnvelopeDto = exports.orgScopedClaim = exports.mintOrgScopedToken = exports.describeOrgScopeWitness = void 0;
|
|
17
|
+
exports.JwksVerifier = exports.selectTenantResolver = exports.DEFAULT_IDP_KIND = exports.IdpKind = exports.UnclassifiableForeignBearerError = exports.JwtVerificationGuard = exports.buildKeycloakSwaggerUiOptions = exports.enrichOpenApiWithKeycloakSecurity = exports.getKeycloakSwaggerUrls = exports.enhanceOpenApiDocumentation = exports.ApiProblemResponse = exports.ApiStandardErrors = exports.ApiPaginatedResponse = exports.ApiAcceptedDataResponse = exports.ApiCreatedDataResponse = exports.ApiDataArrayResponse = exports.ApiDataResponse = exports.ApiStandardOperation = exports.ProblemFieldIssueDto = exports.ProblemDetailsDto = exports.AmbientOrgContextMiddleware = exports.parseTrustedIssuersFromEnv = exports.TrustedIssuerRegistry = exports.TrustedIssuerConfigError = exports.TRUSTED_ISSUERS_ENV_VAR = exports.DEFAULT_TRUSTED_ISSUER_ALGORITHMS = exports.MalformedActorHopError = exports.ContradictoryActorHopKindError = exports.UnknownActorHopSubjectKindError = exports.UnclassifiableActorHopError = exports.resolveActorChainFromClaims = exports.asNonEmptyString = exports.readDeclaredSubjectKind = exports.SUBJECT_KIND_CLAIM = exports.resolvePrincipalIdFromClaims = exports.resolveClientIdFromClaims = exports.resolveActAsFromClaims = exports.resolveRolesFromClaims = exports.UnknownTokenClassError = exports.tryResolveSubjectAndClass = exports.actorTypeFor = exports.actorTypeForSubjectKind = exports.deriveActorClassification = exports.RequestContextMiddleware = exports.ResponseEnvelopeInterceptor = exports.getEnvOrThrow = exports.getExactCorsConfig = exports.getCorsConfig = exports.readDecoratorOverride = exports.applyStandardBodyParsers = void 0;
|
|
18
|
+
exports.titleForCode = exports.refusalFrom = exports.problemFieldIssuesFromZod = exports.problemDetailsFor = exports.sendProblemResponse = exports.GlobalExceptionFilter = exports.RolesGuard = exports.ROLES_KEY = exports.Roles = exports.fetchJson = exports.fetchEnvelopeOptional = exports.fetchEnvelope = exports.SA_TOKEN_PATH = exports.SA_NS_PATH = exports.SA_CA_PATH = exports.ClusterCaDispatcher = exports.fetchWithRetry = exports.buildCursorPaginatedResponse = exports.CursorPaginationMeta = exports.CursorPaginationQueryDto = exports.buildPaginatedResponse = exports.parsePagination = exports.PAGINATION_MAX_PAGE = exports.PAGINATION_MAX_LIMIT = exports.PAGINATION_DEFAULT_LIMIT = exports.PaginationRangeError = exports.PaginationMeta = exports.PaginationQueryDto = exports.Ctx = exports.requirePipelineRunId = exports.resolveCapabilityTenancy = exports.CapabilityEdgeTenancyError = exports.requireProjectId = exports.RAW_RESPONSE_KEY = exports.RawResponse = exports.collectPublicRouteExcludes = exports.registerPublicRouteDeclaration = exports.joinNestPaths = exports.readSwaggerOperationId = exports.readNestHttpVerb = exports.readNestPath = exports.readNestControllerPath = exports.IS_PUBLIC_KEY = exports.Public = exports.extractRealmFromIssuer = exports.OidcDiscoveryIssuerTenantResolver = exports.KeycloakIssuerTenantResolver = exports.OidcTokenVerifier = exports.IssuerMetadataResolver = exports.JwksVerificationError = void 0;
|
|
19
|
+
exports.isOrgAuthorityProven = exports.resolveOrgAuthority = exports.OrgAuthoritySource = exports.REQUIRE_PROVEN_ORG_AUTHORITY = exports.RequireProvenOrgAuthority = exports.resolveOrgClaim = exports.ORG_CLAIM_KEYS = exports.OrgHeaderName = exports.OrgClaimKey = exports.configureAuthMiddleware = exports.resolveOrgAuthorityInstrument = exports.holdsOrgAuthority = exports.PlatformAdminGuard = exports.hasPlatformRole = exports.PlatformRole = exports.orgRoleSatisfies = exports.resolveOrgRoleForOrg = exports.resolveOrgRoles = exports.ORG_ROLES_CLAIM_KEYS = exports.OrgRolesClaimKey = exports.ServiceOrOrgRoleGuard = exports.REQUIRE_ORG_ROLE = exports.RequireOrgRole = exports.OrgRoleGuard = exports.REQUIRE_TOKEN_CLASS = exports.RequireTokenClass = exports.TokenClassGuard = exports.isDirectServiceActor = exports.ServiceActorGuard = exports.InternalCallerGuard = exports.ServiceTokenGuard = exports.kernelSubjectKindForBoundary = exports.UnsupportedContextVersionError = exports.SUPPORTED_CONTEXT_VERSION = exports.PLATFORM_ROLES_CLAIM = exports.PLATFORM_AUTHORITY_CLAIMS = exports.InvalidBoundaryContextError = exports.FOREIGN_CALLER_IDENTITY_CLAIMS = exports.DELEGATION_ID_CLAIM = exports.CONTEXT_VERSION_CLAIM = exports.BoundarySubjectKind = exports.UnknownDeclaredSubjectClassError = exports.claimsWithDeclaredSubjectClass = exports.RealmTokenVerifier = exports.AUTH_MODULE_OPTIONS = exports.AuthModule = exports.describeDroppedProblemExtensions = exports.sanitizeProblemExtensions = exports.DroppedProblemExtensionReason = exports.isZodError = void 0;
|
|
20
|
+
exports.assertOrgScope = exports.OrgScopeRequiredError = exports.OrgScopeErrorCode = exports.resolveCallerOrgScope = exports.REDACT_RESPONSE_KEY = exports.RedactResponse = exports.RedactionInterceptor = exports.RedactionService = exports.IDEMPOTENCY_SERVICE = exports.IDEMPOTENCY_DATA_STORE_CLIENT = exports.DataStoreIdempotencyService = exports.IDEMPOTENCY_RECORD_MODEL = exports.ApiConnectorEnvelope = exports.ConnectorEnvelopePipe = exports.ConnectorWebhookEnvelopeDto = exports.orgScopedClaim = exports.mintOrgScopedToken = exports.describeOrgScopeWitness = exports.orgScopeFromPlatformSweep = exports.orgScopeFromOwningRow = exports.orgScopeFromProvenRequest = exports.UnprovenOrgScopeError = exports.OrgScopeProvenance = exports.resetOrgAuthorityCensus = exports.orgAuthorityCensus = exports.recordUnprovenOrgAuthority = exports.UNKNOWN_CLIENT_ID = exports.ORG_AUTHORITY_OBSERVATION_LIMIT = exports.orgAuthorityRequiresProof = void 0;
|
|
21
21
|
var body_parsers_1 = require("./body-parsers");
|
|
22
22
|
Object.defineProperty(exports, "applyStandardBodyParsers", { enumerable: true, get: function () { return body_parsers_1.applyStandardBodyParsers; } });
|
|
23
23
|
var decorator_metadata_1 = require("./decorator-metadata");
|
|
24
24
|
Object.defineProperty(exports, "readDecoratorOverride", { enumerable: true, get: function () { return decorator_metadata_1.readDecoratorOverride; } });
|
|
25
25
|
var cors_config_1 = require("./cors.config");
|
|
26
26
|
Object.defineProperty(exports, "getCorsConfig", { enumerable: true, get: function () { return cors_config_1.getCorsConfig; } });
|
|
27
|
+
Object.defineProperty(exports, "getExactCorsConfig", { enumerable: true, get: function () { return cors_config_1.getExactCorsConfig; } });
|
|
27
28
|
var get_env_or_throw_1 = require("./get-env-or-throw");
|
|
28
29
|
Object.defineProperty(exports, "getEnvOrThrow", { enumerable: true, get: function () { return get_env_or_throw_1.getEnvOrThrow; } });
|
|
29
30
|
var response_envelope_interceptor_1 = require("./response-envelope.interceptor");
|
|
@@ -161,6 +162,16 @@ Object.defineProperty(exports, "AUTH_MODULE_OPTIONS", { enumerable: true, get: f
|
|
|
161
162
|
Object.defineProperty(exports, "RealmTokenVerifier", { enumerable: true, get: function () { return auth_1.RealmTokenVerifier; } });
|
|
162
163
|
Object.defineProperty(exports, "claimsWithDeclaredSubjectClass", { enumerable: true, get: function () { return auth_1.claimsWithDeclaredSubjectClass; } });
|
|
163
164
|
Object.defineProperty(exports, "UnknownDeclaredSubjectClassError", { enumerable: true, get: function () { return auth_1.UnknownDeclaredSubjectClassError; } });
|
|
165
|
+
Object.defineProperty(exports, "BoundarySubjectKind", { enumerable: true, get: function () { return auth_1.BoundarySubjectKind; } });
|
|
166
|
+
Object.defineProperty(exports, "CONTEXT_VERSION_CLAIM", { enumerable: true, get: function () { return auth_1.CONTEXT_VERSION_CLAIM; } });
|
|
167
|
+
Object.defineProperty(exports, "DELEGATION_ID_CLAIM", { enumerable: true, get: function () { return auth_1.DELEGATION_ID_CLAIM; } });
|
|
168
|
+
Object.defineProperty(exports, "FOREIGN_CALLER_IDENTITY_CLAIMS", { enumerable: true, get: function () { return auth_1.FOREIGN_CALLER_IDENTITY_CLAIMS; } });
|
|
169
|
+
Object.defineProperty(exports, "InvalidBoundaryContextError", { enumerable: true, get: function () { return auth_1.InvalidBoundaryContextError; } });
|
|
170
|
+
Object.defineProperty(exports, "PLATFORM_AUTHORITY_CLAIMS", { enumerable: true, get: function () { return auth_1.PLATFORM_AUTHORITY_CLAIMS; } });
|
|
171
|
+
Object.defineProperty(exports, "PLATFORM_ROLES_CLAIM", { enumerable: true, get: function () { return auth_1.PLATFORM_ROLES_CLAIM; } });
|
|
172
|
+
Object.defineProperty(exports, "SUPPORTED_CONTEXT_VERSION", { enumerable: true, get: function () { return auth_1.SUPPORTED_CONTEXT_VERSION; } });
|
|
173
|
+
Object.defineProperty(exports, "UnsupportedContextVersionError", { enumerable: true, get: function () { return auth_1.UnsupportedContextVersionError; } });
|
|
174
|
+
Object.defineProperty(exports, "kernelSubjectKindForBoundary", { enumerable: true, get: function () { return auth_1.kernelSubjectKindForBoundary; } });
|
|
164
175
|
Object.defineProperty(exports, "ServiceTokenGuard", { enumerable: true, get: function () { return auth_1.ServiceTokenGuard; } });
|
|
165
176
|
Object.defineProperty(exports, "InternalCallerGuard", { enumerable: true, get: function () { return auth_1.InternalCallerGuard; } });
|
|
166
177
|
Object.defineProperty(exports, "ServiceActorGuard", { enumerable: true, get: function () { return auth_1.ServiceActorGuard; } });
|
package/dist/nestjs/index.js.map
CHANGED
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/nestjs/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;AAAA,+CAGwB;AAFtB,wHAAA,wBAAwB,OAAA;AAU1B,2DAG8B;AAF5B,2HAAA,qBAAqB,OAAA;AAGvB,
|
|
1
|
+
{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/nestjs/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;AAAA,+CAGwB;AAFtB,wHAAA,wBAAwB,OAAA;AAU1B,2DAG8B;AAF5B,2HAAA,qBAAqB,OAAA;AAGvB,6CAAkE;AAAzD,4GAAA,aAAa,OAAA;AAAE,iHAAA,kBAAkB,OAAA;AAC1C,uDAAmD;AAA1C,iHAAA,aAAa,OAAA;AACtB,iFAA8E;AAArE,4IAAA,2BAA2B,OAAA;AACpC,2EAAwE;AAA/D,sIAAA,wBAAwB,OAAA;AACjC,oEA0BqC;AAzBnC,iIAAA,yBAAyB,OAAA;AACzB,+HAAA,uBAAuB,OAAA;AACvB,oHAAA,YAAY,OAAA;AAKZ,iIAAA,yBAAyB,OAAA;AAGzB,8HAAA,sBAAsB,OAAA;AACtB,8HAAA,sBAAsB,OAAA;AACtB,8HAAA,sBAAsB,OAAA;AAGtB,iIAAA,yBAAyB,OAAA;AAGzB,oIAAA,4BAA4B,OAAA;AAG5B,0HAAA,kBAAkB,OAAA;AAClB,+HAAA,uBAAuB,OAAA;AACvB,wHAAA,gBAAgB,OAAA;AAOlB,4DAMiC;AAL/B,+HAAA,2BAA2B,OAAA;AAC3B,+HAAA,2BAA2B,OAAA;AAC3B,mIAAA,+BAA+B,OAAA;AAC/B,kIAAA,8BAA8B,OAAA;AAC9B,0HAAA,sBAAsB,OAAA;AAKxB,iDAO4B;AAN1B,+HAAA,iCAAiC,OAAA;AACjC,qHAAA,uBAAuB,OAAA;AACvB,sHAAA,wBAAwB,OAAA;AACxB,mHAAA,qBAAqB,OAAA;AACrB,wHAAA,0BAA0B,OAAA;AAG5B,mFAA+E;AAAtE,6IAAA,2BAA2B,OAAA;AACpC,6DAAgF;AAAvE,wHAAA,iBAAiB,OAAA;AAAE,2HAAA,oBAAoB,OAAA;AAChD,2DAS8B;AAR5B,0HAAA,oBAAoB,OAAA;AACpB,qHAAA,eAAe,OAAA;AACf,0HAAA,oBAAoB,OAAA;AACpB,4HAAA,sBAAsB,OAAA;AACtB,6HAAA,uBAAuB,OAAA;AACvB,0HAAA,oBAAoB,OAAA;AACpB,uHAAA,iBAAiB,OAAA;AACjB,wHAAA,kBAAkB,OAAA;AAEpB,iEAGiC;AAF/B,oIAAA,2BAA2B,OAAA;AAG7B,uDAQ4B;AAP1B,0HAAA,sBAAsB,OAAA;AACtB,qIAAA,iCAAiC,OAAA;AACjC,iIAAA,6BAA6B,OAAA;AAM/B,mEAMkC;AALhC,8HAAA,oBAAoB,OAAA;AAIpB,0IAAA,gCAAgC,OAAA;AAElC,kEAIoC;AAHlC,8GAAA,OAAO,OAAA;AACP,uHAAA,gBAAgB,OAAA;AAChB,2HAAA,oBAAoB,OAAA;AAKtB,iDAc4B;AAb1B,0GAAA,YAAY,OAAA;AACZ,mHAAA,qBAAqB,OAAA;AACrB,oHAAA,sBAAsB,OAAA;AACtB,+GAAA,iBAAiB,OAAA;AACjB,0HAAA,4BAA4B,OAAA;AAC5B,+HAAA,iCAAiC,OAAA;AACjC,oHAAA,sBAAsB,OAAA;AAQxB,uDAA2D;AAAlD,0GAAA,MAAM,OAAA;AAAE,iHAAA,aAAa,OAAA;AAG9B,6DAM+B;AAL7B,6HAAA,sBAAsB,OAAA;AACtB,mHAAA,YAAY,OAAA;AACZ,uHAAA,gBAAgB,OAAA;AAChB,6HAAA,sBAAsB,OAAA;AACtB,oHAAA,aAAa,OAAA;AAMf,iEAGiC;AAF/B,uIAAA,8BAA8B,OAAA;AAC9B,mIAAA,0BAA0B,OAAA;AAE5B,mEAAyE;AAAhE,qHAAA,WAAW,OAAA;AAAE,0HAAA,gBAAgB,OAAA;AACtC,2DAAwD;AAA/C,sHAAA,gBAAgB,OAAA;AACzB,qEAImC;AAHjC,qIAAA,0BAA0B,OAAA;AAC1B,mIAAA,wBAAwB,OAAA;AAG1B,qEAAiE;AAAxD,+HAAA,oBAAoB,OAAA;AAC7B,iDAAsC;AAA7B,oGAAA,GAAG,OAAA;AACZ,2CAYsB;AAXpB,gHAAA,kBAAkB,OAAA;AAClB,4GAAA,cAAc,OAAA;AACd,kHAAA,oBAAoB,OAAA;AACpB,sHAAA,wBAAwB,OAAA;AACxB,kHAAA,oBAAoB,OAAA;AACpB,iHAAA,mBAAmB,OAAA;AACnB,6GAAA,eAAe,OAAA;AACf,oHAAA,sBAAsB,OAAA;AACtB,sHAAA,wBAAwB,OAAA;AACxB,kHAAA,oBAAoB,OAAA;AACpB,0HAAA,4BAA4B,OAAA;AAE9B,uDAAuE;AAA9D,kHAAA,cAAc,OAAA;AACvB,iEAKiC;AAJ/B,4HAAA,mBAAmB,OAAA;AACnB,mHAAA,UAAU,OAAA;AACV,mHAAA,UAAU,OAAA;AACV,sHAAA,aAAa,OAAA;AAEf,mDAI0B;AAHxB,+GAAA,aAAa,OAAA;AACb,uHAAA,qBAAqB,OAAA;AACrB,2GAAA,SAAS,OAAA;AAEX,qDAAqD;AAA5C,wGAAA,KAAK,OAAA;AAAE,4GAAA,SAAS,OAAA;AACzB,6CAA2C;AAAlC,yGAAA,UAAU,OAAA;AACnB,qEAMmC;AALjC,gIAAA,qBAAqB,OAAA;AAIrB,8HAAA,mBAAmB,OAAA;AAOrB,qCAOmB;AANjB,4GAAA,iBAAiB,OAAA;AACjB,oHAAA,yBAAyB,OAAA;AACzB,sGAAA,WAAW,OAAA;AACX,uGAAA,YAAY,OAAA;AACZ,qGAAA,UAAU,OAAA;AAKZ,2DAM8B;AAL5B,mIAAA,6BAA6B,OAAA;AAC7B,+HAAA,yBAAyB,OAAA;AACzB,sIAAA,gCAAgC,OAAA;AAIlC,+BA2HgB;AA1Hd,kGAAA,UAAU,OAAA;AACV,2GAAA,mBAAmB,OAAA;AAUnB,0GAAA,kBAAkB,OAAA;AAOlB,sHAAA,8BAA8B,OAAA;AAC9B,wHAAA,gCAAgC,OAAA;AAChC,2GAAA,mBAAmB,OAAA;AACnB,6GAAA,qBAAqB,OAAA;AACrB,2GAAA,mBAAmB,OAAA;AACnB,sHAAA,8BAA8B,OAAA;AAC9B,mHAAA,2BAA2B,OAAA;AAC3B,iHAAA,yBAAyB,OAAA;AACzB,4GAAA,oBAAoB,OAAA;AACpB,iHAAA,yBAAyB,OAAA;AACzB,sHAAA,8BAA8B,OAAA;AAC9B,oHAAA,4BAA4B,OAAA;AAC5B,yGAAA,iBAAiB,OAAA;AACjB,2GAAA,mBAAmB,OAAA;AACnB,yGAAA,iBAAiB,OAAA;AACjB,4GAAA,oBAAoB,OAAA;AAKpB,uGAAA,eAAe,OAAA;AACf,yGAAA,iBAAiB,OAAA;AACjB,2GAAA,mBAAmB,OAAA;AAGnB,oGAAA,YAAY,OAAA;AACZ,sGAAA,cAAc,OAAA;AACd,wGAAA,gBAAgB,OAAA;AAGhB,6GAAA,qBAAqB,OAAA;AACrB,wGAAA,gBAAgB,OAAA;AAChB,4GAAA,oBAAoB,OAAA;AACpB,uGAAA,eAAe,OAAA;AACf,4GAAA,oBAAoB,OAAA;AACpB,wGAAA,gBAAgB,OAAA;AAIhB,oGAAA,YAAY,OAAA;AACZ,uGAAA,eAAe,OAAA;AACf,0GAAA,kBAAkB,OAAA;AAKlB,yGAAA,iBAAiB,OAAA;AAKjB,qHAAA,6BAA6B,OAAA;AAE7B,+GAAA,uBAAuB,OAAA;AAMvB,mGAAA,WAAW,OAAA;AACX,qGAAA,aAAa,OAAA;AACb,sGAAA,cAAc,OAAA;AACd,uGAAA,eAAe,OAAA;AAIf,iHAAA,yBAAyB,OAAA;AACzB,oHAAA,4BAA4B,OAAA;AAQ5B,0GAAA,kBAAkB,OAAA;AAGlB,2GAAA,mBAAmB,OAAA;AACnB,4GAAA,oBAAoB,OAAA;AACpB,iHAAA,yBAAyB,OAAA;AACzB,uHAAA,+BAA+B,OAAA;AAC/B,yGAAA,iBAAiB,OAAA;AAGjB,kHAAA,0BAA0B,OAAA;AAC1B,0GAAA,kBAAkB,OAAA;AAClB,+GAAA,uBAAuB,OAAA;AAMvB,0GAAA,kBAAkB,OAAA;AAGlB,6GAAA,qBAAqB,OAAA;AACrB,iHAAA,yBAAyB,OAAA;AACzB,6GAAA,qBAAqB,OAAA;AACrB,iHAAA,yBAAyB,OAAA;AACzB,+GAAA,uBAAuB,OAAA;AACvB,0GAAA,kBAAkB,OAAA;AAElB,sGAAA,cAAc,OAAA;AAEhB,2DAM8B;AAL5B,iIAAA,2BAA2B,OAAA;AAC3B,2HAAA,qBAAqB,OAAA;AACrB,0HAAA,oBAAoB,OAAA;AAItB,6CASuB;AANrB,uHAAA,wBAAwB,OAAA;AACxB,0HAAA,2BAA2B,OAAA;AAC3B,4HAAA,6BAA6B,OAAA;AAG7B,kHAAA,mBAAmB,OAAA;AAIrB,yCAKqB;AAJnB,6GAAA,gBAAgB,OAAA;AAChB,iHAAA,oBAAoB,OAAA;AACpB,2GAAA,cAAc,OAAA;AACd,gHAAA,mBAAmB,OAAA;AAIrB,iEAA+C;AAK/C,uDAA2D;AAAlD,yHAAA,qBAAqB,OAAA;AAQ9B,yCAIqB;AAHnB,8GAAA,iBAAiB,OAAA;AACjB,kHAAA,qBAAqB,OAAA;AACrB,2GAAA,cAAc,OAAA"}
|
|
@@ -8,7 +8,7 @@ export declare class JwtVerificationGuard implements CanActivate {
|
|
|
8
8
|
canActivate(context: ExecutionContext): Promise<boolean>;
|
|
9
9
|
private verifyToken;
|
|
10
10
|
private attachRealmToContext;
|
|
11
|
-
private
|
|
11
|
+
private applyVerifiedClaims;
|
|
12
12
|
private isPublicPath;
|
|
13
13
|
}
|
|
14
14
|
//# sourceMappingURL=jwt-verification.guard.d.ts.map
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"jwt-verification.guard.d.ts","sourceRoot":"","sources":["../../src/nestjs/jwt-verification.guard.ts"],"names":[],"mappings":"AAAA,OAAO,EAEL,WAAW,EACX,gBAAgB,
|
|
1
|
+
{"version":3,"file":"jwt-verification.guard.d.ts","sourceRoot":"","sources":["../../src/nestjs/jwt-verification.guard.ts"],"names":[],"mappings":"AAAA,OAAO,EAEL,WAAW,EACX,gBAAgB,EAMjB,MAAM,gBAAgB,CAAC;AAKxB,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,4BAA4B,CAAC;AA2BpE,OAAO,EAAE,gCAAgC,EAAE,MAAM,+BAA+B,CAAC;AAuCjF,qBACa,oBAAqB,YAAW,WAAW;IACtD,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAyC;IAUhE,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAqB;gBAK5C,WAAW,CAAC,EAAE,iBAAiB;IAK3B,WAAW,CAAC,OAAO,EAAE,gBAAgB,GAAG,OAAO,CAAC,OAAO,CAAC;YAyDhD,WAAW;IA4BzB,OAAO,CAAC,oBAAoB;IAoD5B,OAAO,CAAC,mBAAmB;IA2D3B,OAAO,CAAC,YAAY;CAYrB"}
|
|
@@ -21,6 +21,12 @@ const auth_module_options_1 = require("./auth/auth-module-options");
|
|
|
21
21
|
const request_context_1 = require("../lib/request-context");
|
|
22
22
|
const oidc_guard_1 = require("@xemahq/oidc-guard");
|
|
23
23
|
const actor_classification_1 = require("./auth/actor-classification");
|
|
24
|
+
const boundary_context_brand_1 = require("./auth/boundary-context-brand");
|
|
25
|
+
const claim_authority_1 = require("./auth/claim-authority");
|
|
26
|
+
const delegation_chain_1 = require("./auth/delegation-chain");
|
|
27
|
+
const org_authority_fence_1 = require("./auth/org-authority-fence");
|
|
28
|
+
const org_claim_1 = require("../lib/auth/org-claim");
|
|
29
|
+
const org_role_1 = require("../lib/auth/org-role");
|
|
24
30
|
const realm_token_verifier_1 = require("./auth/realm-token-verifier");
|
|
25
31
|
const declared_subject_class_1 = require("./auth/declared-subject-class");
|
|
26
32
|
var declared_subject_class_2 = require("./auth/declared-subject-class");
|
|
@@ -52,11 +58,11 @@ let JwtVerificationGuard = JwtVerificationGuard_1 = class JwtVerificationGuard {
|
|
|
52
58
|
try {
|
|
53
59
|
const { payload, source } = await this.verifyToken(token);
|
|
54
60
|
this.attachRealmToContext(request, payload, source);
|
|
55
|
-
this.
|
|
61
|
+
this.applyVerifiedClaims(request, payload, source);
|
|
56
62
|
return true;
|
|
57
63
|
}
|
|
58
64
|
catch (error) {
|
|
59
|
-
if (error instanceof common_1.
|
|
65
|
+
if (error instanceof common_1.HttpException)
|
|
60
66
|
throw error;
|
|
61
67
|
const msg = error instanceof Error ? error.message : String(error);
|
|
62
68
|
this.logger.error({ message: 'JWT verification failed', error: msg });
|
|
@@ -88,17 +94,43 @@ let JwtVerificationGuard = JwtVerificationGuard_1 = class JwtVerificationGuard {
|
|
|
88
94
|
ctx.realmId = tenant;
|
|
89
95
|
}
|
|
90
96
|
}
|
|
91
|
-
|
|
97
|
+
applyVerifiedClaims(request, payload, source) {
|
|
92
98
|
const claims = (0, declared_subject_class_1.claimsWithDeclaredSubjectClass)(payload, source);
|
|
93
|
-
if (
|
|
99
|
+
if (source.kind === 'realm')
|
|
94
100
|
return;
|
|
95
101
|
const ctx = request[request_context_1.REQUEST_CONTEXT];
|
|
96
102
|
if (!ctx)
|
|
97
103
|
return;
|
|
98
|
-
const
|
|
99
|
-
|
|
100
|
-
|
|
101
|
-
|
|
104
|
+
const { roles, actAs, subjectKind, tokenClass, actorType } = (0, actor_classification_1.deriveActorClassification)(claims);
|
|
105
|
+
const actorChain = (0, delegation_chain_1.resolveActorChainFromClaims)(claims);
|
|
106
|
+
const clientId = (0, actor_classification_1.resolveClientIdFromClaims)(claims);
|
|
107
|
+
const principalId = (0, actor_classification_1.resolvePrincipalIdFromClaims)(claims);
|
|
108
|
+
const orgRoles = (0, org_role_1.resolveOrgRoles)(claims);
|
|
109
|
+
const delegationId = (0, boundary_context_brand_1.isBoundaryContextClaims)(claims)
|
|
110
|
+
? (0, claim_authority_1.resolveDelegationIdFromBoundaryClaims)(claims)
|
|
111
|
+
: undefined;
|
|
112
|
+
const orgId = ctx.orgId ?? '';
|
|
113
|
+
(0, org_authority_fence_1.assertOrgHeaderPresentForCaller)(orgId, actorType);
|
|
114
|
+
(0, org_authority_fence_1.assertOrgClaimMatchesHeader)(this.logger, claims, orgId, org_claim_1.OrgHeaderName.Canonical);
|
|
115
|
+
const orgAuthority = (0, org_authority_fence_1.fenceOrgAuthority)(this.logger, claims, orgId, { tokenClass, subjectKind, clientId, delegated: actorChain.length > 0 }, `${request.method ?? ''} ${request.originalUrl ?? request.url ?? ''}`, ctx.correlationId);
|
|
116
|
+
const { actingFor: _staleActingFor, ...subjectRest } = ctx.subject;
|
|
117
|
+
ctx.subject = {
|
|
118
|
+
...subjectRest,
|
|
119
|
+
kind: subjectKind,
|
|
120
|
+
roles,
|
|
121
|
+
...(actorChain.length > 0 ? { actingFor: actorChain[0] } : {}),
|
|
122
|
+
};
|
|
123
|
+
ctx.tokenClass = tokenClass;
|
|
124
|
+
ctx.actorType = actorType;
|
|
125
|
+
ctx.actorChain = actorChain;
|
|
126
|
+
ctx.roles = roles;
|
|
127
|
+
ctx.orgAuthority = orgAuthority;
|
|
128
|
+
assignOptional(ctx, 'actAs', actAs);
|
|
129
|
+
assignOptional(ctx, 'clientId', clientId);
|
|
130
|
+
assignOptional(ctx, 'principalId', principalId);
|
|
131
|
+
assignOptional(ctx, 'delegationId', delegationId);
|
|
132
|
+
assignOptional(ctx, 'orgRoles', Object.keys(orgRoles).length > 0 ? orgRoles : undefined);
|
|
133
|
+
assignOptional(ctx, 'orgRole', orgRoles[orgId]);
|
|
102
134
|
}
|
|
103
135
|
isPublicPath(path) {
|
|
104
136
|
for (const prefix of PUBLIC_PATH_PREFIXES) {
|
|
@@ -119,4 +151,12 @@ exports.JwtVerificationGuard = JwtVerificationGuard = JwtVerificationGuard_1 = _
|
|
|
119
151
|
__param(0, (0, common_1.Inject)(auth_module_options_1.AUTH_MODULE_OPTIONS)),
|
|
120
152
|
__metadata("design:paramtypes", [Object])
|
|
121
153
|
], JwtVerificationGuard);
|
|
154
|
+
function assignOptional(ctx, key, value) {
|
|
155
|
+
if (value === undefined) {
|
|
156
|
+
delete ctx[key];
|
|
157
|
+
}
|
|
158
|
+
else {
|
|
159
|
+
ctx[key] = value;
|
|
160
|
+
}
|
|
161
|
+
}
|
|
122
162
|
//# sourceMappingURL=jwt-verification.guard.js.map
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"jwt-verification.guard.js","sourceRoot":"","sources":["../../src/nestjs/jwt-verification.guard.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,
|
|
1
|
+
{"version":3,"file":"jwt-verification.guard.js","sourceRoot":"","sources":["../../src/nestjs/jwt-verification.guard.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,2CASwB;AACxB,6DAA6D;AAE7D,yDAAmD;AACnD,oEAAiE;AAEjE,4DAAyD;AAEzD,mDAA2D;AAE3D,sEAIqC;AACrC,0EAAwE;AACxE,4DAA+E;AAC/E,8DAAsE;AACtE,oEAIoC;AACpC,qDAAsD;AACtD,mDAAuD;AACvD,sEAAiE;AACjE,0EAA+E;AAM/E,wEAAiF;AAAxE,0IAAA,gCAAgC,OAAA;AAMzC,MAAM,oBAAoB,GAAG,CAAC,SAAS,EAAE,WAAW,EAAE,mBAAmB,CAAC,CAAC;AAC3E,MAAM,qBAAqB,GAAG,WAAW,CAAC;AAiCnC,IAAM,oBAAoB,4BAA1B,MAAM,oBAAoB;IACd,MAAM,GAAG,IAAI,eAAM,CAAC,sBAAoB,CAAC,IAAI,CAAC,CAAC;IAU/C,QAAQ,CAAqB;IAE9C,YAGE,WAA+B;QAE/B,IAAI,CAAC,QAAQ,GAAG,IAAI,yCAAkB,CAAC,WAAW,CAAC,CAAC;IACtD,CAAC;IAED,KAAK,CAAC,WAAW,CAAC,OAAyB;QAEzC,MAAM,QAAQ,GAAG,IAAA,0CAAqB,EAAU,gCAAa,EAAE;YAC7D,OAAO,CAAC,UAAU,EAAE;YACpB,OAAO,CAAC,QAAQ,EAAE;SACnB,CAAC,CAAC;QACH,IAAI,QAAQ;YAAE,OAAO,IAAI,CAAC;QAE1B,MAAM,OAAO,GAAG,OAAO,CAAC,YAAY,EAAE,CAAC,UAAU,EAAW,CAAC;QAG7D,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,IAAI,OAAO,CAAC,GAAG,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QAC9D,IAAI,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC;YAAE,OAAO,IAAI,CAAC;QAEzC,MAAM,UAAU,GAAG,OAAO,CAAC,OAAO,CAAC,aAAa,CAAC;QAEjD,IAAI,CAAC,UAAU,EAAE,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;YACvC,MAAM,IAAI,8BAAqB,CAC7B,yCAAyC,CAC1C,CAAC;QACJ,CAAC;QAED,MAAM,KAAK,GAAG,UAAU,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;QAEtC,IAAI,CAAC;YACH,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC;YAG1D,IAAI,CAAC,oBAAoB,CAAC,OAAO,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC;YAIpD,IAAI,CAAC,mBAAmB,CAAC,OAAO,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC;YAEnD,OAAO,IAAI,CAAC;QACd,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAMf,IAAI,KAAK,YAAY,sBAAa;gBAAE,MAAM,KAAK,CAAC;YAEhD,MAAM,GAAG,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YACnE,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,yBAAyB,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,CAAC;YACtE,MAAM,IAAI,8BAAqB,CAAC,eAAe,CAAC,CAAC;QACnD,CAAC;IACH,CAAC;IAUO,KAAK,CAAC,WAAW,CACvB,KAAa;QAEb,IAAI,CAAC;YACH,OAAO,MAAM,IAAI,CAAC,QAAQ,CAAC,gBAAgB,CAAC,KAAK,CAAC,CAAC;QACrD,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,KAAK,YAAY,kCAAqB,EAAE,CAAC;gBAC3C,MAAM,IAAI,8BAAqB,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;YACjD,CAAC;YACD,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC;IAiBO,oBAAoB,CAC1B,OAAgB,EAChB,OAAmB,EACnB,MAA2B;QAE3B,MAAM,MAAM,GACV,MAAM,CAAC,IAAI,KAAK,gBAAgB;YAC9B,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM;YACrB,CAAC,CAAC,OAAO,CAAC,GAAG;gBACX,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,cAAc,CAAC,gBAAgB,CAAC,OAAO,CAAC,GAAG,CAAC;oBAC3D,SAAS,CAAC;gBACZ,CAAC,CAAC,SAAS,CAAC;QAClB,IAAI,CAAC,MAAM;YAAE,OAAO;QAEpB,MAAM,GAAG,GAAI,OAA8C,CACzD,iCAAe,CACc,CAAC;QAChC,IAAI,GAAG,EAAE,CAAC;YACR,GAAG,CAAC,OAAO,GAAG,MAAM,CAAC;QACvB,CAAC;IACH,CAAC;IAgCO,mBAAmB,CACzB,OAAgB,EAChB,OAAmB,EACnB,MAA2B;QAE3B,MAAM,MAAM,GAAG,IAAA,uDAA8B,EAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QAC/D,IAAI,MAAM,CAAC,IAAI,KAAK,OAAO;YAAE,OAAO;QAEpC,MAAM,GAAG,GAAI,OAA8C,CACzD,iCAAe,CACc,CAAC;QAChC,IAAI,CAAC,GAAG;YAAE,OAAO;QAEjB,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,WAAW,EAAE,UAAU,EAAE,SAAS,EAAE,GACxD,IAAA,gDAAyB,EAAC,MAAM,CAAC,CAAC;QACpC,MAAM,UAAU,GAAG,IAAA,8CAA2B,EAAC,MAAM,CAAC,CAAC;QACvD,MAAM,QAAQ,GAAG,IAAA,gDAAyB,EAAC,MAAM,CAAC,CAAC;QACnD,MAAM,WAAW,GAAG,IAAA,mDAA4B,EAAC,MAAM,CAAC,CAAC;QACzD,MAAM,QAAQ,GAAG,IAAA,0BAAe,EAAC,MAAM,CAAC,CAAC;QACzC,MAAM,YAAY,GAAG,IAAA,gDAAuB,EAAC,MAAM,CAAC;YAClD,CAAC,CAAC,IAAA,uDAAqC,EAAC,MAAM,CAAC;YAC/C,CAAC,CAAC,SAAS,CAAC;QAEd,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,IAAI,EAAE,CAAC;QAC9B,IAAA,qDAA+B,EAAC,KAAK,EAAE,SAAS,CAAC,CAAC;QAClD,IAAA,iDAA2B,EAAC,IAAI,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,yBAAa,CAAC,SAAS,CAAC,CAAC;QACjF,MAAM,YAAY,GAAG,IAAA,uCAAiB,EACpC,IAAI,CAAC,MAAM,EACX,MAAM,EACN,KAAK,EACL,EAAE,UAAU,EAAE,WAAW,EAAE,QAAQ,EAAE,SAAS,EAAE,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,EACvE,GAAG,OAAO,CAAC,MAAM,IAAI,EAAE,IAAI,OAAO,CAAC,WAAW,IAAI,OAAO,CAAC,GAAG,IAAI,EAAE,EAAE,EACrE,GAAG,CAAC,aAAa,CAClB,CAAC;QAEF,MAAM,EAAE,SAAS,EAAE,eAAe,EAAE,GAAG,WAAW,EAAE,GAAG,GAAG,CAAC,OAAO,CAAC;QACnE,GAAG,CAAC,OAAO,GAAG;YACZ,GAAG,WAAW;YACd,IAAI,EAAE,WAAW;YACjB,KAAK;YACL,GAAG,CAAC,UAAU,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,UAAU,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC/D,CAAC;QACF,GAAG,CAAC,UAAU,GAAG,UAAU,CAAC;QAC5B,GAAG,CAAC,SAAS,GAAG,SAAS,CAAC;QAC1B,GAAG,CAAC,UAAU,GAAG,UAAU,CAAC;QAC5B,GAAG,CAAC,KAAK,GAAG,KAAK,CAAC;QAClB,GAAG,CAAC,YAAY,GAAG,YAAY,CAAC;QAChC,cAAc,CAAC,GAAG,EAAE,OAAO,EAAE,KAAK,CAAC,CAAC;QACpC,cAAc,CAAC,GAAG,EAAE,UAAU,EAAE,QAAQ,CAAC,CAAC;QAC1C,cAAc,CAAC,GAAG,EAAE,aAAa,EAAE,WAAW,CAAC,CAAC;QAChD,cAAc,CAAC,GAAG,EAAE,cAAc,EAAE,YAAY,CAAC,CAAC;QAClD,cAAc,CACZ,GAAG,EACH,UAAU,EACV,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CACxD,CAAC;QACF,cAAc,CAAC,GAAG,EAAE,SAAS,EAAE,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC;IAClD,CAAC;IAEO,YAAY,CAAC,IAAY;QAC/B,KAAK,MAAM,MAAM,IAAI,oBAAoB,EAAE,CAAC;YAC1C,IAAI,IAAI,KAAK,MAAM,IAAI,IAAI,CAAC,UAAU,CAAC,MAAM,GAAG,GAAG,CAAC;gBAAE,OAAO,IAAI,CAAC;QACpE,CAAC;QACD,IACE,IAAI,KAAK,qBAAqB;YAC9B,IAAI,CAAC,UAAU,CAAC,qBAAqB,GAAG,GAAG,CAAC,EAC5C,CAAC;YACD,OAAO,IAAI,CAAC;QACd,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;CACF,CAAA;AArOY,oDAAoB;+BAApB,oBAAoB;IADhC,IAAA,mBAAU,GAAE;IAeR,WAAA,IAAA,iBAAQ,GAAE,CAAA;IACV,WAAA,IAAA,eAAM,EAAC,yCAAmB,CAAC,CAAA;;GAfnB,oBAAoB,CAqOhC;AAOD,SAAS,cAAc,CACrB,GAAmB,EACnB,GAAM,EACN,KAAoC;IAEpC,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;QACxB,OAAO,GAAG,CAAC,GAAG,CAAC,CAAC;IAClB,CAAC;SAAM,CAAC;QACN,GAAG,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;IACnB,CAAC;AACH,CAAC"}
|
|
@@ -19,8 +19,6 @@ export declare class RequestContextMiddleware implements NestMiddleware {
|
|
|
19
19
|
private decodeJwtPayload;
|
|
20
20
|
private assertOrgHeaderGrammar;
|
|
21
21
|
private assertProjectGrammar;
|
|
22
|
-
private assertOrgClaimMatchesHeader;
|
|
23
|
-
private resolveAndRecordOrgAuthority;
|
|
24
22
|
private resolveActorId;
|
|
25
23
|
private extractProjectIdFromPath;
|
|
26
24
|
private parseApprovalMode;
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"request-context.middleware.d.ts","sourceRoot":"","sources":["../../src/nestjs/request-context.middleware.ts"],"names":[],"mappings":"AAAA,OAAO,
|
|
1
|
+
{"version":3,"file":"request-context.middleware.d.ts","sourceRoot":"","sources":["../../src/nestjs/request-context.middleware.ts"],"names":[],"mappings":"AAAA,OAAO,EAIL,cAAc,EACf,MAAM,gBAAgB,CAAC;AAExB,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,WAAW,CAAC;AACrD,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,wBAAwB,CAAC;AAC7D,OAAO,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AAgCzD,UAAU,wBAAwB;IAChC,QAAQ,CAAC,OAAO,EAAE,mBAAmB,CAAC;IACtC,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;CAC/B;AAED,UAAU,kBAAmB,SAAQ,wBAAwB;IAC3D,CAAC,eAAe,CAAC,CAAC,EAAE,cAAc,CAAC;CACpC;AAED,qBACa,wBAAyB,YAAW,cAAc;IAC7D,OAAO,CAAC,QAAQ,CAAC,MAAM,CAA6C;IAEpE,GAAG,CAAC,GAAG,EAAE,kBAAkB,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,IAAI,GAAG,IAAI;IAiLnE,OAAO,CAAC,UAAU;IAWlB,OAAO,CAAC,kBAAkB;IAc1B,OAAO,CAAC,gBAAgB;IA+ExB,OAAO,CAAC,sBAAsB;IA+D9B,OAAO,CAAC,oBAAoB;IAyB5B,OAAO,CAAC,cAAc;IAoBtB,OAAO,CAAC,wBAAwB;IAMhC,OAAO,CAAC,iBAAiB;IAazB,OAAO,CAAC,sBAAsB;CAK/B"}
|
|
@@ -15,8 +15,7 @@ const space_1 = require("@xemahq/contracts/space");
|
|
|
15
15
|
const approval_mode_1 = require("../lib/approval-mode");
|
|
16
16
|
const org_claim_1 = require("../lib/auth/org-claim");
|
|
17
17
|
const org_role_1 = require("../lib/auth/org-role");
|
|
18
|
-
const
|
|
19
|
-
const org_authority_observations_1 = require("../lib/auth/org-authority-observations");
|
|
18
|
+
const org_authority_fence_1 = require("./auth/org-authority-fence");
|
|
20
19
|
const actor_classification_1 = require("./auth/actor-classification");
|
|
21
20
|
const delegation_chain_1 = require("./auth/delegation-chain");
|
|
22
21
|
let RequestContextMiddleware = RequestContextMiddleware_1 = class RequestContextMiddleware {
|
|
@@ -41,14 +40,12 @@ let RequestContextMiddleware = RequestContextMiddleware_1 = class RequestContext
|
|
|
41
40
|
const clientId = (0, actor_classification_1.resolveClientIdFromClaims)(claims);
|
|
42
41
|
const principalId = (0, actor_classification_1.resolvePrincipalIdFromClaims)(claims);
|
|
43
42
|
const orgRoles = (0, org_role_1.resolveOrgRoles)(claims);
|
|
44
|
-
|
|
45
|
-
throw new common_1.BadRequestException(`Missing required header: ${org_claim_1.OrgHeaderName.Canonical}`);
|
|
46
|
-
}
|
|
43
|
+
(0, org_authority_fence_1.assertOrgHeaderPresentForCaller)(orgId, actorType);
|
|
47
44
|
this.assertOrgHeaderGrammar(orgId);
|
|
48
45
|
this.assertProjectGrammar(projectId, projectHeaderValue === undefined ? 'url' : 'header');
|
|
49
46
|
const resolvedOrgId = orgId ?? '';
|
|
50
|
-
|
|
51
|
-
const orgAuthority = this.
|
|
47
|
+
(0, org_authority_fence_1.assertOrgClaimMatchesHeader)(this.logger, claims, resolvedOrgId, orgHeaderName);
|
|
48
|
+
const orgAuthority = (0, org_authority_fence_1.fenceOrgAuthority)(this.logger, claims, resolvedOrgId, { tokenClass, subjectKind, clientId, delegated: actorChain.length > 0 }, `${requestMethod} ${requestUrl}`, correlationId);
|
|
52
49
|
if (actAs) {
|
|
53
50
|
this.logger.log({
|
|
54
51
|
message: 'DELEGATED_REQUEST',
|
|
@@ -157,68 +154,6 @@ let RequestContextMiddleware = RequestContextMiddleware_1 = class RequestContext
|
|
|
157
154
|
`alphanumeric, then alphanumerics plus "_", "." or "-". No "/", no ` +
|
|
158
155
|
`whitespace, no "@".`);
|
|
159
156
|
}
|
|
160
|
-
assertOrgClaimMatchesHeader(claims, headerValue, headerName) {
|
|
161
|
-
const resolved = (0, org_claim_1.resolveOrgClaim)(claims);
|
|
162
|
-
if (!resolved) {
|
|
163
|
-
return;
|
|
164
|
-
}
|
|
165
|
-
if (resolved.value.toLowerCase() !== headerValue.toLowerCase()) {
|
|
166
|
-
this.logger.warn({
|
|
167
|
-
message: 'tenant-claim-mismatch',
|
|
168
|
-
claim: resolved.key,
|
|
169
|
-
claimValue: resolved.value,
|
|
170
|
-
header: headerName,
|
|
171
|
-
headerValue,
|
|
172
|
-
});
|
|
173
|
-
throw new common_1.ForbiddenException(`${headerName} (${headerValue || '<empty>'}) does not match ` +
|
|
174
|
-
`the ${resolved.key} claim on the access token.`);
|
|
175
|
-
}
|
|
176
|
-
}
|
|
177
|
-
resolveAndRecordOrgAuthority(claims, resolvedOrgId, facts, route, correlationId) {
|
|
178
|
-
const verdict = (0, org_authority_1.resolveOrgAuthority)(claims, resolvedOrgId, {
|
|
179
|
-
subjectKind: facts.subjectKind,
|
|
180
|
-
delegated: facts.delegated,
|
|
181
|
-
});
|
|
182
|
-
const callerFacts = {
|
|
183
|
-
clientId: facts.clientId ?? org_authority_observations_1.UNKNOWN_CLIENT_ID,
|
|
184
|
-
tokenClass: facts.tokenClass,
|
|
185
|
-
subjectKind: facts.subjectKind,
|
|
186
|
-
delegated: facts.delegated,
|
|
187
|
-
};
|
|
188
|
-
if (verdict.source === org_authority_1.OrgAuthoritySource.ServiceRelayedContext) {
|
|
189
|
-
if ((0, org_authority_observations_1.recordServiceRelayedOrgAuthority)(callerFacts)) {
|
|
190
|
-
this.logger.log({
|
|
191
|
-
message: 'ORG_AUTHORITY_SERVICE_RELAY',
|
|
192
|
-
source: verdict.source,
|
|
193
|
-
orgId: verdict.assertedOrgId,
|
|
194
|
-
...callerFacts,
|
|
195
|
-
route,
|
|
196
|
-
correlationId,
|
|
197
|
-
});
|
|
198
|
-
}
|
|
199
|
-
return verdict;
|
|
200
|
-
}
|
|
201
|
-
if (!(0, org_authority_1.orgAuthorityRequiresProof)(verdict)) {
|
|
202
|
-
return verdict;
|
|
203
|
-
}
|
|
204
|
-
if ((0, org_authority_observations_1.recordUnprovenOrgAuthority)(callerFacts)) {
|
|
205
|
-
this.logger.warn({
|
|
206
|
-
message: 'ORG_AUTHORITY_UNPROVEN',
|
|
207
|
-
source: verdict.source,
|
|
208
|
-
orgId: verdict.assertedOrgId,
|
|
209
|
-
...callerFacts,
|
|
210
|
-
route,
|
|
211
|
-
correlationId,
|
|
212
|
-
});
|
|
213
|
-
}
|
|
214
|
-
throw new common_1.ForbiddenException({
|
|
215
|
-
code: 'ORG_AUTHORITY_UNPROVEN',
|
|
216
|
-
message: `The caller asserted ${org_claim_1.OrgHeaderName.Canonical}=` +
|
|
217
|
-
`"${verdict.assertedOrgId}" but the access token carries neither an ` +
|
|
218
|
-
`${org_claim_1.OrgClaimKey.Canonical} claim for that org nor an org_roles ` +
|
|
219
|
-
`membership in it. A tenant cannot be named by header alone.`,
|
|
220
|
-
});
|
|
221
|
-
}
|
|
222
157
|
resolveActorId(claims) {
|
|
223
158
|
const actorId = (0, actor_classification_1.asNonEmptyString)(claims.sub);
|
|
224
159
|
if (!actorId) {
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"request-context.middleware.js","sourceRoot":"","sources":["../../src/nestjs/request-context.middleware.ts"],"names":[],"mappings":";;;;;;;;;;AAAA,
|
|
1
|
+
{"version":3,"file":"request-context.middleware.js","sourceRoot":"","sources":["../../src/nestjs/request-context.middleware.ts"],"names":[],"mappings":";;;;;;;;;;AAAA,2CAKwB;AACxB,6CAAyC;AAGzC,4DAAyD;AAEzD,mDAAmE;AAEnE,wDAAkE;AAClE,qDAAsD;AACtD,mDAAuD;AACvD,oEAIoC;AACpC,sEAKqC;AACrC,8DAAsE;AA0B/D,IAAM,wBAAwB,gCAA9B,MAAM,wBAAwB;IAClB,MAAM,GAAG,IAAI,eAAM,CAAC,0BAAwB,CAAC,IAAI,CAAC,CAAC;IAEpE,GAAG,CAAC,GAAuB,EAAE,IAAa,EAAE,IAAgB;QAI1D,MAAM,KAAK,GAAG,IAAI,CAAC,UAAU,CAAC,GAAG,EAAE,yBAAa,CAAC,SAAS,CAAC,CAAC;QAC5D,MAAM,aAAa,GAAG,yBAAa,CAAC,SAAS,CAAC;QAC9C,MAAM,UAAU,GAAG,GAAG,CAAC,WAAW,IAAI,GAAG,CAAC,GAAG,IAAI,EAAE,CAAC;QACpD,MAAM,aAAa,GAAG,GAAG,CAAC,MAAM,IAAI,EAAE,CAAC;QACvC,MAAM,kBAAkB,GAAG,IAAI,CAAC,UAAU,CAAC,GAAG,EAAE,cAAc,CAAC,CAAC;QAChE,MAAM,SAAS,GACb,kBAAkB,IAAI,IAAI,CAAC,wBAAwB,CAAC,UAAU,CAAC,CAAC;QAClE,MAAM,aAAa,GAAG,IAAI,CAAC,UAAU,CAAC,GAAG,EAAE,mBAAmB,CAAC,IAAI,SAAS,CAAC;QAC7E,MAAM,gBAAgB,GAAG,IAAI,CAAC,UAAU,CAAC,GAAG,EAAE,sBAAsB,CAAC,IAAI,SAAS,CAAC;QACnF,MAAM,oBAAoB,GAAG,IAAI,CAAC,iBAAiB,CACjD,IAAI,CAAC,UAAU,CAAC,GAAG,EAAE,0BAA0B,CAAC,CACjD,CAAC;QAEF,MAAM,KAAK,GAAG,IAAI,CAAC,kBAAkB,CAAC,GAAG,CAAC,CAAC;QAC3C,MAAM,aAAa,GAAG,IAAI,CAAC,UAAU,CAAC,GAAG,EAAE,kBAAkB,CAAC,IAAI,IAAA,wBAAU,GAAE,CAAC;QAC/E,MAAM,WAAW,GAAG,IAAI,CAAC,UAAU,CAAC,GAAG,EAAE,gBAAgB,CAAC,IAAI,SAAS,CAAC;QACxE,MAAM,MAAM,GAAG,IAAI,CAAC,gBAAgB,CAAC,KAAK,CAAC,CAAC;QAC5C,MAAM,OAAO,GAAG,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC,CAAC;QAK5C,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,WAAW,EAAE,UAAU,EAAE,SAAS,EAAE,GACxD,IAAA,gDAAyB,EAAC,MAAM,CAAC,CAAC;QAIpC,MAAM,UAAU,GAAG,IAAA,8CAA2B,EAAC,MAAM,CAAC,CAAC;QAGvD,MAAM,QAAQ,GAAG,IAAA,gDAAyB,EAAC,MAAM,CAAC,CAAC;QAMnD,MAAM,WAAW,GAAG,IAAA,mDAA4B,EAAC,MAAM,CAAC,CAAC;QACzD,MAAM,QAAQ,GAAG,IAAA,0BAAe,EAAC,MAAM,CAAC,CAAC;QAazC,IAAA,qDAA+B,EAAC,KAAK,EAAE,SAAS,CAAC,CAAC;QAClD,IAAI,CAAC,sBAAsB,CAAC,KAAK,CAAC,CAAC;QACnC,IAAI,CAAC,oBAAoB,CACvB,SAAS,EACT,kBAAkB,KAAK,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,QAAQ,CACpD,CAAC;QACF,MAAM,aAAa,GAAG,KAAK,IAAI,EAAE,CAAC;QAuBlC,IAAA,iDAA2B,EAAC,IAAI,CAAC,MAAM,EAAE,MAAM,EAAE,aAAa,EAAE,aAAa,CAAC,CAAC;QAqB/E,MAAM,YAAY,GAAG,IAAA,uCAAiB,EACpC,IAAI,CAAC,MAAM,EACX,MAAM,EACN,aAAa,EACb,EAAE,UAAU,EAAE,WAAW,EAAE,QAAQ,EAAE,SAAS,EAAE,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,EACvE,GAAG,aAAa,IAAI,UAAU,EAAE,EAChC,aAAa,CACd,CAAC;QAUF,IAAI,KAAK,EAAE,CAAC;YACV,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC;gBACd,OAAO,EAAE,mBAAmB;gBAC5B,KAAK,EAAE,OAAO;gBACd,KAAK;gBACL,KAAK;gBACL,SAAS;gBACT,KAAK,EAAE,GAAG,aAAa,IAAI,UAAU,EAAE;gBACvC,aAAa;aACd,CAAC,CAAC;QACL,CAAC;QAED,MAAM,OAAO,GAAe;YAC1B,IAAI,EAAE,WAAW;YACjB,EAAE,EAAE,OAAO;YACX,KAAK;YACL,GAAG,CAAC,UAAU,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,UAAU,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC/D,CAAC;QAEF,GAAG,CAAC,iCAAe,CAAC,GAAG;YACrB,KAAK,EAAE,aAAa;YACpB,YAAY;YACZ,SAAS;YACT,OAAO;YACP,UAAU;YACV,UAAU;YACV,OAAO;YACP,SAAS;YACT,aAAa;YACb,WAAW;YACX,aAAa,EAAE,UAAU,KAAK,EAAE;YAChC,WAAW,EAAE,KAAK;YAClB,aAAa;YACb,gBAAgB;YAChB,oBAAoB;YACpB,KAAK;YACL,GAAG,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC/C,GAAG,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACrD,OAAO,EAAE,IAAI,CAAC,sBAAsB,CAAC,MAAM,CAAC,GAAyB,CAAC;YACtE,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACzD,GAAG,CAAC,QAAQ,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,QAAQ,CAAC,aAAa,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACxE,GAAG,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC1C,CAAC;QAEF,IAAI,EAAE,CAAC;IACT,CAAC;IAWO,UAAU,CAChB,GAA6B,EAC7B,IAAY;QAEZ,MAAM,GAAG,GAAG,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC;QAC5C,IAAI,GAAG,KAAK,SAAS,EAAE,CAAC;YACtB,OAAO,SAAS,CAAC;QACnB,CAAC;QACD,OAAO,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC;IAC3C,CAAC;IAEO,kBAAkB,CAAC,GAA6B;QACtD,MAAM,aAAa,GAAG,IAAI,CAAC,UAAU,CAAC,GAAG,EAAE,eAAe,CAAC,CAAC;QAC5D,IAAI,CAAC,aAAa,EAAE,CAAC;YACnB,MAAM,IAAI,4BAAmB,CAAC,wCAAwC,CAAC,CAAC;QAC1E,CAAC;QACD,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,GAAG,aAAa,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QACjD,IAAI,MAAM,KAAK,QAAQ,IAAI,CAAC,KAAK,EAAE,CAAC;YAClC,MAAM,IAAI,4BAAmB,CAC3B,+DAA+D,CAChE,CAAC;QACJ,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IAEO,gBAAgB,CAAC,KAAa;QACpC,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC/B,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;YAKpC,MAAM,IAAI,4BAAmB,CAC3B,2EAA2E,KAAK,CAAC,MAAM,GAAG;gBACxF,iBAAiB,KAAK,CAAC,MAAM,aAAa,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,KAAK,CACnE,CAAC;QACJ,CAAC;QACD,IAAI,CAAC;YACH,MAAM,WAAW,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,WAAW,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;YACxE,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;YACxC,IAAI,CAAC,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ,EAAE,CAAC;gBAC5C,MAAM,IAAI,KAAK,CAAC,uBAAuB,CAAC,CAAC;YAC3C,CAAC;YACD,OAAO,OAAkC,CAAC;QAC5C,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,IAAI,4BAAmB,CAAC,2BAA2B,CAAC,CAAC;QAC7D,CAAC;IACH,CAAC;IAyDO,sBAAsB,CAAC,KAAyB;QACtD,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC9C,OAAO;QACT,CAAC;QACD,IAAI,gCAAwB,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;YACzC,OAAO;QACT,CAAC;QAID,MAAM,KAAK,GAAG,KAAK,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC;QACnE,MAAM,IAAI,4BAAmB,CAC3B,WAAW,yBAAa,CAAC,SAAS,aAAa,KAAK,mBAAmB;YACrE,qCAAqC,gCAAwB,KAAK;YAClE,uEAAuE;YACvE,wBAAwB,CAC3B,CAAC;IACJ,CAAC;IA8CO,oBAAoB,CAC1B,SAA6B,EAC7B,MAAwB;QAExB,IAAI,SAAS,KAAK,SAAS,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACtD,OAAO;QACT,CAAC;QACD,IAAI,gCAAwB,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC;YAC7C,OAAO;QACT,CAAC;QAGD,MAAM,KAAK,GAAG,SAAS,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC,CAAC,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC;QAC/E,MAAM,MAAM,GACV,MAAM,KAAK,QAAQ;YACjB,CAAC,CAAC,yBAAyB;YAC3B,CAAC,CAAC,qCAAqC,CAAC;QAC5C,MAAM,IAAI,4BAAmB,CAC3B,2BAA2B,MAAM,MAAM,KAAK,yBAAyB;YACnE,+BAA+B,gCAAwB,WAAW;YAClE,oEAAoE;YACpE,qBAAqB,CACxB,CAAC;IACJ,CAAC;IAEO,cAAc,CAAC,MAA+B;QACpD,MAAM,OAAO,GAAG,IAAA,uCAAgB,EAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAC7C,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,MAAM,IAAI,4BAAmB,CAAC,wCAAwC,CAAC,CAAC;QAC1E,CAAC;QACD,OAAO,OAAO,CAAC;IACjB,CAAC;IAcO,wBAAwB,CAAC,IAAY;QAC3C,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QACzD,MAAM,KAAK,GAAG,QAAQ,CAAC,KAAK,CAAC,sBAAsB,CAAC,CAAC;QACrD,OAAO,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC;IACpB,CAAC;IAEO,iBAAiB,CACvB,KAAyB;QAEzB,IAAI,CAAC,KAAK;YAAE,OAAO,SAAS,CAAC;QAC7B,MAAM,KAAK,GAAG,KAAK,CAAC,WAAW,EAAE,CAAC;QAClC,IAAI,0CAA0B,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;YAC1C,OAAO,KAA6B,CAAC;QACvC,CAAC;QACD,MAAM,IAAI,4BAAmB,CAC3B,4CAA4C,KAAK,uCAAuC,CACzF,CAAC;IACJ,CAAC;IAEO,sBAAsB,CAAC,MAA0B;QACvD,IAAI,CAAC,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ;YAAE,OAAO,SAAS,CAAC;QAC5D,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,oBAAoB,CAAC,CAAC;QACjD,OAAO,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC;IACpB,CAAC;CACF,CAAA;AAhaY,4DAAwB;mCAAxB,wBAAwB;IADpC,IAAA,mBAAU,GAAE;GACA,wBAAwB,CAgapC"}
|
package/package.json
CHANGED
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
{
|
|
2
2
|
"name": "@xemahq/platform-common",
|
|
3
|
-
"version": "0.
|
|
3
|
+
"version": "0.41.0",
|
|
4
4
|
"description": "Shared NestJS building blocks for Xema services — auth guards, response redaction, CORS configuration, and crypto helpers.",
|
|
5
5
|
"license": "Apache-2.0",
|
|
6
6
|
"author": "Neuralchowder Inc. <developer@xema.dev> (https://xema.dev)",
|
|
@@ -40,8 +40,8 @@
|
|
|
40
40
|
}
|
|
41
41
|
},
|
|
42
42
|
"dependencies": {
|
|
43
|
-
"@xemahq/identity-client": "
|
|
44
|
-
"@xemahq/oidc-guard": "^0.
|
|
43
|
+
"@xemahq/identity-client": ">=0.9.7",
|
|
44
|
+
"@xemahq/oidc-guard": "^0.7.0",
|
|
45
45
|
"jwks-rsa": "^3.2.2",
|
|
46
46
|
"undici": "^7.29.0",
|
|
47
47
|
"zod": "^4.3.6"
|
|
@@ -56,7 +56,7 @@
|
|
|
56
56
|
"@types/express": "5.0.3",
|
|
57
57
|
"@types/jest": "^30.0.0",
|
|
58
58
|
"@types/node": "25.2.3",
|
|
59
|
-
"@xemahq/event-hub-client": "^8.
|
|
59
|
+
"@xemahq/event-hub-client": "^8.6.0",
|
|
60
60
|
"class-transformer": "0.5.1",
|
|
61
61
|
"class-validator": "0.14.4",
|
|
62
62
|
"jest": "^30.3.0",
|