@xemahq/platform-common 0.41.0 → 0.42.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/dist/lib/request-context.d.ts +2 -1
- package/dist/lib/request-context.d.ts.map +1 -1
- package/dist/lib/request-context.js.map +1 -1
- package/dist/nestjs/auth/actor-classification.d.ts.map +1 -1
- package/dist/nestjs/auth/actor-classification.js +3 -0
- package/dist/nestjs/auth/actor-classification.js.map +1 -1
- package/dist/nestjs/auth/claim-authority.d.ts +8 -2
- package/dist/nestjs/auth/claim-authority.d.ts.map +1 -1
- package/dist/nestjs/auth/claim-authority.js +99 -1
- package/dist/nestjs/auth/claim-authority.js.map +1 -1
- package/dist/nestjs/auth/declared-subject-class.d.ts +3 -0
- package/dist/nestjs/auth/declared-subject-class.d.ts.map +1 -1
- package/dist/nestjs/auth/declared-subject-class.js +18 -2
- package/dist/nestjs/auth/declared-subject-class.js.map +1 -1
- package/dist/nestjs/auth/delegation-chain.d.ts +5 -1
- package/dist/nestjs/auth/delegation-chain.d.ts.map +1 -1
- package/dist/nestjs/auth/delegation-chain.js +16 -2
- package/dist/nestjs/auth/delegation-chain.js.map +1 -1
- package/dist/nestjs/auth/index.d.ts +3 -3
- package/dist/nestjs/auth/index.d.ts.map +1 -1
- package/dist/nestjs/auth/index.js +6 -1
- package/dist/nestjs/auth/index.js.map +1 -1
- package/dist/nestjs/index.d.ts +1 -1
- package/dist/nestjs/index.d.ts.map +1 -1
- package/dist/nestjs/index.js +6 -2
- package/dist/nestjs/index.js.map +1 -1
- package/dist/nestjs/jwt-verification.guard.d.ts.map +1 -1
- package/dist/nestjs/jwt-verification.guard.js +4 -0
- package/dist/nestjs/jwt-verification.guard.js.map +1 -1
- package/package.json +2 -2
|
@@ -1,5 +1,5 @@
|
|
|
1
1
|
import { SubjectKind, TokenClass } from '@xemahq/contracts/subject';
|
|
2
|
-
import type { SubjectRef, ActingForRef } from '@xemahq/contracts/subject';
|
|
2
|
+
import type { SubjectRef, ActingForRef, DelegatedAuthority } from '@xemahq/contracts/subject';
|
|
3
3
|
import type { OrgAuthorityVerdict } from './auth/org-authority';
|
|
4
4
|
import type { OrgRole } from './auth/org-role';
|
|
5
5
|
import type { PipelineApprovalMode } from './approval-mode';
|
|
@@ -28,6 +28,7 @@ export interface RequestContext {
|
|
|
28
28
|
realmId?: string;
|
|
29
29
|
actAs?: string;
|
|
30
30
|
delegationId?: string;
|
|
31
|
+
delegation?: DelegatedAuthority;
|
|
31
32
|
}
|
|
32
33
|
export declare const REQUEST_CONTEXT: unique symbol;
|
|
33
34
|
export declare function getRequestContext(req: object): RequestContext;
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"request-context.d.ts","sourceRoot":"","sources":["../../src/lib/request-context.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,2BAA2B,CAAC;AACpE,OAAO,KAAK,
|
|
1
|
+
{"version":3,"file":"request-context.d.ts","sourceRoot":"","sources":["../../src/lib/request-context.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,2BAA2B,CAAC;AACpE,OAAO,KAAK,EACV,UAAU,EACV,YAAY,EACZ,kBAAkB,EACnB,MAAM,2BAA2B,CAAC;AACnC,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,sBAAsB,CAAC;AAChE,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,iBAAiB,CAAC;AAC/C,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,iBAAiB,CAAC;AAE5D,MAAM,WAAW,cAAc;IAQ7B,KAAK,EAAE,MAAM,CAAC;IAyBd,YAAY,CAAC,EAAE,mBAAmB,CAAC;IACnC,SAAS,CAAC,EAAE,MAAM,CAAC;IAMnB,OAAO,EAAE,UAAU,CAAC;IAOpB,UAAU,EAAE,UAAU,CAAC;IAMvB,UAAU,EAAE,YAAY,EAAE,CAAC;IAE3B,OAAO,EAAE,MAAM,CAAC;IAMhB,SAAS,EAAE,OAAO,GAAG,OAAO,GAAG,SAAS,CAAC;IASzC,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IASnC,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,aAAa,EAAE,MAAM,CAAC;IACtB,WAAW,CAAC,EAAE,MAAM,CAAC;IAErB,aAAa,CAAC,EAAE,MAAM,CAAC;IAEvB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAE1B,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,oBAAoB,CAAC,EAAE,oBAAoB,CAAC;IAmC5C,QAAQ,CAAC,EAAE,MAAM,CAAC;IAyBlB,WAAW,CAAC,EAAE,MAAM,CAAC;IAErB,KAAK,EAAE,MAAM,EAAE,CAAC;IAEhB,OAAO,CAAC,EAAE,MAAM,CAAC;IAYjB,KAAK,CAAC,EAAE,MAAM,CAAC;IAgBf,YAAY,CAAC,EAAE,MAAM,CAAC;IA2BtB,UAAU,CAAC,EAAE,kBAAkB,CAAC;CACjC;AAeD,eAAO,MAAM,eAAe,eAAqD,CAAC;AAalF,wBAAgB,iBAAiB,CAAC,GAAG,EAAE,MAAM,GAAG,cAAc,CAQ7D;AASD,wBAAgB,oBAAoB,CAAC,GAAG,EAAE,MAAM,GAAG,cAAc,GAAG,SAAS,CA+B5E;AAQD,OAAO,EAAE,WAAW,EAAE,UAAU,EAAE,CAAC;AACnC,YAAY,EAAE,UAAU,EAAE,YAAY,EAAE,CAAC;AACzC,OAAO,EAAE,OAAO,EAAE,MAAM,iBAAiB,CAAC"}
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"request-context.js","sourceRoot":"","sources":["../../src/lib/request-context.ts"],"names":[],"mappings":";;;
|
|
1
|
+
{"version":3,"file":"request-context.js","sourceRoot":"","sources":["../../src/lib/request-context.ts"],"names":[],"mappings":";;;AAwPA,8CAQC;AASD,oDA+BC;AAxSD,uDAAoE;AAgT3D,4FAhTA,qBAAW,OAgTA;AAAE,2FAhTA,oBAAU,OAgTA;AArEnB,QAAA,eAAe,GAAG,MAAM,CAAC,GAAG,CAAC,sCAAsC,CAAC,CAAC;AAalF,SAAgB,iBAAiB,CAAC,GAAW;IAC3C,MAAM,GAAG,GAAG,oBAAoB,CAAC,GAAG,CAAC,CAAC;IACtC,IAAI,CAAC,GAAG,EAAE,CAAC;QACT,MAAM,IAAI,KAAK,CACb,kFAAkF,CACnF,CAAC;IACJ,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AASD,SAAgB,oBAAoB,CAAC,GAAW;IAC9C,MAAM,MAAM,GAAI,GAA+B,CAAC,uBAAe,CAAC,CAAC;IACjE,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;QACzB,OAAO,MAAwB,CAAC;IAClC,CAAC;IAoBD,MAAM,GAAG,GAAI,GAAyB,CAAC,GAAG,CAAC;IAC3C,IAAI,GAAG,KAAK,IAAI,IAAI,OAAO,GAAG,KAAK,QAAQ,EAAE,CAAC;QAC5C,OAAQ,GAA+B,CAAC,uBAAe,CAE1C,CAAC;IAChB,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAUD,4CAA0C;AAAjC,mGAAA,OAAO,OAAA"}
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"actor-classification.d.ts","sourceRoot":"","sources":["../../../src/nestjs/auth/actor-classification.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,mBAAmB,EAAE,MAAM,gBAAgB,CAAC;AAErD,OAAO,EACL,WAAW,EAEX,UAAU,EACX,MAAM,2BAA2B,CAAC;AACnC,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,2BAA2B,CAAC;AAkBhE,MAAM,WAAW,mBAAmB;IAElC,QAAQ,CAAC,KAAK,EAAE,MAAM,EAAE,CAAC;IAEzB,QAAQ,CAAC,KAAK,EAAE,MAAM,GAAG,SAAS,CAAC;IAEnC,QAAQ,CAAC,WAAW,EAAE,WAAW,CAAC;IAElC,QAAQ,CAAC,UAAU,EAAE,UAAU,CAAC;IAKhC,QAAQ,CAAC,SAAS,EAAE,cAAc,CAAC,WAAW,CAAC,CAAC;CACjD;AAED,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,GAAG,SAAS,CAInE;AAGD,wBAAgB,sBAAsB,CACpC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC9B,MAAM,EAAE,CAYV;AAuBD,wBAAgB,yBAAyB,CACvC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC9B,MAAM,GAAG,SAAS,CAEpB;AA+BD,wBAAgB,4BAA4B,CAC1C,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC9B,MAAM,GAAG,SAAS,CAEpB;AAYD,wBAAgB,sBAAsB,CACpC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC9B,MAAM,GAAG,SAAS,CAMpB;AAsBD,eAAO,MAAM,kBAAkB,iBAAiB,CAAC;AAajD,wBAAgB,uBAAuB,CACrC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC9B,WAAW,GAAG,IAAI,GAAG,SAAS,CAMhC;AAiBD,qBAAa,sBAAuB,SAAQ,mBAAmB;gBACjD,QAAQ,EAAE,MAAM;CAQ7B;AAOD,wBAAgB,wBAAwB,CAAC,UAAU,EAAE,UAAU,GAAG,WAAW,
|
|
1
|
+
{"version":3,"file":"actor-classification.d.ts","sourceRoot":"","sources":["../../../src/nestjs/auth/actor-classification.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,mBAAmB,EAAE,MAAM,gBAAgB,CAAC;AAErD,OAAO,EACL,WAAW,EAEX,UAAU,EACX,MAAM,2BAA2B,CAAC;AACnC,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,2BAA2B,CAAC;AAkBhE,MAAM,WAAW,mBAAmB;IAElC,QAAQ,CAAC,KAAK,EAAE,MAAM,EAAE,CAAC;IAEzB,QAAQ,CAAC,KAAK,EAAE,MAAM,GAAG,SAAS,CAAC;IAEnC,QAAQ,CAAC,WAAW,EAAE,WAAW,CAAC;IAElC,QAAQ,CAAC,UAAU,EAAE,UAAU,CAAC;IAKhC,QAAQ,CAAC,SAAS,EAAE,cAAc,CAAC,WAAW,CAAC,CAAC;CACjD;AAED,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,GAAG,SAAS,CAInE;AAGD,wBAAgB,sBAAsB,CACpC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC9B,MAAM,EAAE,CAYV;AAuBD,wBAAgB,yBAAyB,CACvC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC9B,MAAM,GAAG,SAAS,CAEpB;AA+BD,wBAAgB,4BAA4B,CAC1C,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC9B,MAAM,GAAG,SAAS,CAEpB;AAYD,wBAAgB,sBAAsB,CACpC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC9B,MAAM,GAAG,SAAS,CAMpB;AAsBD,eAAO,MAAM,kBAAkB,iBAAiB,CAAC;AAajD,wBAAgB,uBAAuB,CACrC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC9B,WAAW,GAAG,IAAI,GAAG,SAAS,CAMhC;AAiBD,qBAAa,sBAAuB,SAAQ,mBAAmB;gBACjD,QAAQ,EAAE,MAAM;CAQ7B;AAOD,wBAAgB,wBAAwB,CAAC,UAAU,EAAE,UAAU,GAAG,WAAW,CAa5E;AA0BD,wBAAgB,yBAAyB,CACvC,KAAK,EAAE,MAAM,EAAE,EACf,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC/B,KAAK,EAAE,MAAM,GAAG,SAAS,GACxB;IAAE,IAAI,EAAE,WAAW,CAAC;IAAC,UAAU,EAAE,UAAU,CAAA;CAAE,GAAG,SAAS,CAqB3D;AAgDD,wBAAgB,uBAAuB,CACrC,IAAI,EAAE,WAAW,GAChB,cAAc,CAAC,WAAW,CAAC,CAsB7B;AAUD,wBAAgB,YAAY,CAC1B,WAAW,EAAE,WAAW,EACxB,KAAK,EAAE,MAAM,GAAG,SAAS,GACxB,cAAc,CAAC,WAAW,CAAC,CAK7B;AA8CD,wBAAgB,yBAAyB,CACvC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC9B,mBAAmB,CAerB"}
|
|
@@ -71,6 +71,8 @@ function subjectKindForTokenClass(tokenClass) {
|
|
|
71
71
|
return subject_1.SubjectKind.ExternalSubject;
|
|
72
72
|
case subject_1.TokenClass.UserJwt:
|
|
73
73
|
return subject_1.SubjectKind.User;
|
|
74
|
+
case subject_1.TokenClass.OrganizationDelegation:
|
|
75
|
+
return subject_1.SubjectKind.Organization;
|
|
74
76
|
}
|
|
75
77
|
}
|
|
76
78
|
function tryResolveSubjectAndClass(roles, claims, actAs) {
|
|
@@ -113,6 +115,7 @@ function actorTypeForSubjectKind(kind) {
|
|
|
113
115
|
case subject_1.SubjectKind.Group:
|
|
114
116
|
case subject_1.SubjectKind.Role:
|
|
115
117
|
case subject_1.SubjectKind.Anon:
|
|
118
|
+
case subject_1.SubjectKind.Organization:
|
|
116
119
|
return 'human';
|
|
117
120
|
}
|
|
118
121
|
}
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"actor-classification.js","sourceRoot":"","sources":["../../../src/nestjs/auth/actor-classification.ts"],"names":[],"mappings":";;;AAyCA,4CAIC;AAGD,wDAcC;AAuBD,8DAIC;AA+BD,oEAIC;AAYD,wDAQC;AAmCD,0DAQC;AAiCD,
|
|
1
|
+
{"version":3,"file":"actor-classification.js","sourceRoot":"","sources":["../../../src/nestjs/auth/actor-classification.ts"],"names":[],"mappings":";;;AAyCA,4CAIC;AAGD,wDAcC;AAuBD,8DAIC;AA+BD,oEAIC;AAYD,wDAQC;AAmCD,0DAQC;AAiCD,4DAaC;AA0BD,8DAyBC;AAgDD,0DAwBC;AAUD,oCAQC;AA8CD,8DAiBC;AArbD,2CAAqD;AACrD,6DAA6D;AAC7D,uDAImC;AAEnC,qEAGkC;AA8BlC,SAAgB,gBAAgB,CAAC,KAAc;IAC7C,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,SAAS,CAAC;IAChD,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;IAC7B,OAAO,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;AAClD,CAAC;AAGD,SAAgB,sBAAsB,CACpC,MAA+B;IAE/B,MAAM,WAAW,GAAG,MAAM,CAAC,YAAY,CAAC;IACxC,IACE,WAAW;QACX,OAAO,WAAW,KAAK,QAAQ;QAC/B,KAAK,CAAC,OAAO,CAAE,WAAmC,CAAC,KAAK,CAAC,EACzD,CAAC;QACD,OAAQ,WAAoC,CAAC,KAAK,CAAC,MAAM,CACvD,CAAC,IAAI,EAAkB,EAAE,CAAC,OAAO,IAAI,KAAK,QAAQ,CACnD,CAAC;IACJ,CAAC;IACD,OAAO,EAAE,CAAC;AACZ,CAAC;AAuBD,SAAgB,yBAAyB,CACvC,MAA+B;IAE/B,OAAO,gBAAgB,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,gBAAgB,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;AAC5E,CAAC;AA+BD,SAAgB,4BAA4B,CAC1C,MAA+B;IAE/B,OAAO,gBAAgB,CAAC,MAAM,CAAC,oCAAkB,CAAC,CAAC,CAAC;AACtD,CAAC;AAYD,SAAgB,sBAAsB,CACpC,MAA+B;IAE/B,MAAM,GAAG,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;IAC1B,IAAI,CAAC,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;QAC1D,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,OAAO,gBAAgB,CAAE,GAA+B,CAAC,KAAK,CAAC,CAAC,CAAC;AACnE,CAAC;AAsBY,QAAA,kBAAkB,GAAG,cAAc,CAAC;AAajD,SAAgB,uBAAuB,CACrC,MAA+B;IAE/B,IAAI,CAAC,CAAC,0BAAkB,IAAI,MAAM,CAAC,EAAE,CAAC;QACpC,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,MAAM,MAAM,GAAG,2BAAiB,CAAC,SAAS,CAAC,MAAM,CAAC,0BAAkB,CAAC,CAAC,CAAC;IACvE,OAAO,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;AAC7C,CAAC;AAiBD,MAAa,sBAAuB,SAAQ,4BAAmB;IAC7D,YAAY,QAAgB;QAC1B,KAAK,CACH,4CAA4C,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,IAAI;YACtE,qEAAqE;YACrE,gEAAgE;YAChE,gCAAgC,CACnC,CAAC;IACJ,CAAC;CACF;AATD,wDASC;AAOD,SAAgB,wBAAwB,CAAC,UAAsB;IAC7D,QAAQ,UAAU,EAAE,CAAC;QACnB,KAAK,oBAAU,CAAC,UAAU;YACxB,OAAO,qBAAW,CAAC,OAAO,CAAC;QAC7B,KAAK,oBAAU,CAAC,iBAAiB;YAC/B,OAAO,qBAAW,CAAC,KAAK,CAAC;QAC3B,KAAK,oBAAU,CAAC,oBAAoB;YAClC,OAAO,qBAAW,CAAC,eAAe,CAAC;QACrC,KAAK,oBAAU,CAAC,OAAO;YACrB,OAAO,qBAAW,CAAC,IAAI,CAAC;QAC1B,KAAK,oBAAU,CAAC,sBAAsB;YACpC,OAAO,qBAAW,CAAC,YAAY,CAAC;IACpC,CAAC;AACH,CAAC;AA0BD,SAAgB,yBAAyB,CACvC,KAAe,EACf,MAA+B,EAC/B,KAAyB;IAEzB,MAAM,QAAQ,GAAG,gBAAgB,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;IACtD,IAAI,QAAQ,EAAE,CAAC;QACb,MAAM,OAAO,GAAI,MAAM,CAAC,MAAM,CAAC,oBAAU,CAAc,CAAC,QAAQ,CAAC,QAAQ,CAAC;YACxE,CAAC,CAAE,QAAuB;YAC1B,CAAC,CAAC,SAAS,CAAC;QACd,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,MAAM,IAAI,sBAAsB,CAAC,QAAQ,CAAC,CAAC;QAC7C,CAAC;QACD,OAAO,EAAE,IAAI,EAAE,wBAAwB,CAAC,OAAO,CAAC,EAAE,UAAU,EAAE,OAAO,EAAE,CAAC;IAC1E,CAAC;IACD,IAAI,KAAK,EAAE,CAAC;QACV,OAAO,EAAE,IAAI,EAAE,qBAAW,CAAC,IAAI,EAAE,UAAU,EAAE,oBAAU,CAAC,OAAO,EAAE,CAAC;IACpE,CAAC;IACD,IAAI,KAAK,CAAC,QAAQ,CAAC,eAAe,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,iBAAiB,CAAC,EAAE,CAAC;QACzE,OAAO,EAAE,IAAI,EAAE,qBAAW,CAAC,OAAO,EAAE,UAAU,EAAE,oBAAU,CAAC,UAAU,EAAE,CAAC;IAC1E,CAAC;IACD,IAAI,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;QAC5B,OAAO,EAAE,IAAI,EAAE,qBAAW,CAAC,KAAK,EAAE,UAAU,EAAE,oBAAU,CAAC,iBAAiB,EAAE,CAAC;IAC/E,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAgCD,MAAM,wBAAwB,GAG1B;IACF,IAAI,EAAE,qBAAW,CAAC,IAAI;IACtB,UAAU,EAAE,oBAAU,CAAC,OAAO;CAC/B,CAAC;AAUF,SAAgB,uBAAuB,CACrC,IAAiB;IAEjB,QAAQ,IAAI,EAAE,CAAC;QACb,KAAK,qBAAW,CAAC,OAAO,CAAC;QACzB,KAAK,qBAAW,CAAC,MAAM;YACrB,OAAO,SAAS,CAAC;QACnB,KAAK,qBAAW,CAAC,KAAK;YACpB,OAAO,OAAO,CAAC;QACjB,KAAK,qBAAW,CAAC,IAAI,CAAC;QACtB,KAAK,qBAAW,CAAC,eAAe,CAAC;QACjC,KAAK,qBAAW,CAAC,GAAG,CAAC;QACrB,KAAK,qBAAW,CAAC,SAAS,CAAC;QAC3B,KAAK,qBAAW,CAAC,KAAK,CAAC;QACvB,KAAK,qBAAW,CAAC,IAAI,CAAC;QACtB,KAAK,qBAAW,CAAC,IAAI,CAAC;QAMtB,KAAK,qBAAW,CAAC,YAAY;YAC3B,OAAO,OAAO,CAAC;IACnB,CAAC;AACH,CAAC;AAUD,SAAgB,YAAY,CAC1B,WAAwB,EACxB,KAAyB;IAEzB,IAAI,KAAK,EAAE,CAAC;QACV,OAAO,OAAO,CAAC;IACjB,CAAC;IACD,OAAO,uBAAuB,CAAC,WAAW,CAAC,CAAC;AAC9C,CAAC;AAWD,SAAS,4BAA4B,CACnC,MAA+B;IAE/B,MAAM,KAAK,GAAG,IAAA,wDAA+B,EAAC,MAAM,CAAC,CAAC;IACtD,MAAM,KAAK,GAAG,sBAAsB,CAAC,MAAM,CAAC,CAAC;IAC7C,MAAM,UAAU,GAAG,gBAAgB,CAAC,MAAM,CAAC,WAAW,CAEzC,CAAC;IACd,MAAM,WAAW,GAAG,2BAAiB,CAAC,SAAS,CAAC,MAAM,CAAC,0BAAkB,CAAC,CAAC,CAAC;IAC5E,IAAI,CAAC,UAAU,IAAI,CAAC,WAAW,CAAC,OAAO,EAAE,CAAC;QACxC,MAAM,IAAI,KAAK,CACb,8DAA8D;YAC5D,iFAAiF,CACpF,CAAC;IACJ,CAAC;IACD,OAAO;QACL,KAAK;QACL,KAAK;QACL,WAAW,EAAE,WAAW,CAAC,IAAI;QAC7B,UAAU;QACV,SAAS,EAAE,YAAY,CAAC,WAAW,CAAC,IAAI,EAAE,KAAK,CAAC;KACjD,CAAC;AACJ,CAAC;AAaD,SAAgB,yBAAyB,CACvC,MAA+B;IAE/B,IAAI,IAAA,gDAAuB,EAAC,MAAM,CAAC,EAAE,CAAC;QACpC,OAAO,4BAA4B,CAAC,MAAM,CAAC,CAAC;IAC9C,CAAC;IACD,MAAM,KAAK,GAAG,sBAAsB,CAAC,MAAM,CAAC,CAAC;IAC7C,MAAM,KAAK,GAAG,sBAAsB,CAAC,MAAM,CAAC,CAAC;IAC7C,MAAM,EAAE,IAAI,EAAE,WAAW,EAAE,UAAU,EAAE,GACrC,yBAAyB,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,CAAC,IAAI,wBAAwB,CAAC;IAC9E,OAAO;QACL,KAAK;QACL,KAAK;QACL,WAAW;QACX,UAAU;QACV,SAAS,EAAE,YAAY,CAAC,WAAW,EAAE,KAAK,CAAC;KAC5C,CAAC;AACJ,CAAC"}
|
|
@@ -1,16 +1,20 @@
|
|
|
1
1
|
import { UnauthorizedException } from '@nestjs/common';
|
|
2
|
-
import { SubjectKind } from '@xemahq/contracts/subject';
|
|
2
|
+
import { SubjectKind, type ActingForRef, type DelegatedAuthority } from '@xemahq/contracts/subject';
|
|
3
3
|
export declare const CONTEXT_VERSION_CLAIM = "ctx_ver";
|
|
4
4
|
export declare const SUPPORTED_CONTEXT_VERSION = 1;
|
|
5
5
|
export declare const DELEGATION_ID_CLAIM = "did";
|
|
6
6
|
export declare const TOKEN_CLASS_CLAIM = "token_class";
|
|
7
7
|
export declare const ACT_CLAIM = "act";
|
|
8
|
+
export declare const DELEGATED_CAPABILITIES_CLAIM = "delegated_capabilities";
|
|
9
|
+
export declare const DELEGATED_RESOURCE_SCOPE_CLAIM = "delegated_resource_scope";
|
|
10
|
+
export declare const AUTHORIZED_BY_CLAIM = "authorized_by";
|
|
8
11
|
export declare const PLATFORM_AUTHORITY_CLAIMS: readonly string[];
|
|
9
12
|
export declare const FOREIGN_CALLER_IDENTITY_CLAIMS: readonly string[];
|
|
10
13
|
export declare enum BoundarySubjectKind {
|
|
11
14
|
User = "user",
|
|
12
15
|
Workload = "workload",
|
|
13
|
-
Agent = "agent"
|
|
16
|
+
Agent = "agent",
|
|
17
|
+
Organization = "organization"
|
|
14
18
|
}
|
|
15
19
|
export declare function kernelSubjectKindForBoundary(kind: BoundarySubjectKind): SubjectKind;
|
|
16
20
|
export declare class InvalidBoundaryContextError extends UnauthorizedException {
|
|
@@ -22,4 +26,6 @@ export declare class UnsupportedContextVersionError extends InvalidBoundaryConte
|
|
|
22
26
|
export declare function normalizeClaimAuthorityClaims<T extends Record<string, unknown>>(payload: T, issuer: string): T;
|
|
23
27
|
export declare function withoutPlatformAuthorityClaims<T extends Record<string, unknown>>(payload: T): T;
|
|
24
28
|
export declare function resolveDelegationIdFromBoundaryClaims(claims: Record<string, unknown>): string | undefined;
|
|
29
|
+
export declare function assertDelegationClaims(payload: Record<string, unknown>, issuer: string, kind: BoundarySubjectKind, delegated: boolean): void;
|
|
30
|
+
export declare function resolveDelegatedAuthorityFromBoundaryClaims(claims: Record<string, unknown>, actorChain: readonly ActingForRef[]): DelegatedAuthority | undefined;
|
|
25
31
|
//# sourceMappingURL=claim-authority.d.ts.map
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"claim-authority.d.ts","sourceRoot":"","sources":["../../../src/nestjs/auth/claim-authority.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,qBAAqB,EAAE,MAAM,gBAAgB,CAAC;AAEvD,OAAO,
|
|
1
|
+
{"version":3,"file":"claim-authority.d.ts","sourceRoot":"","sources":["../../../src/nestjs/auth/claim-authority.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,qBAAqB,EAAE,MAAM,gBAAgB,CAAC;AAEvD,OAAO,EACL,WAAW,EAEX,KAAK,YAAY,EACjB,KAAK,kBAAkB,EACxB,MAAM,2BAA2B,CAAC;AAqCnC,eAAO,MAAM,qBAAqB,YAAY,CAAC;AAG/C,eAAO,MAAM,yBAAyB,IAAI,CAAC;AAG3C,eAAO,MAAM,mBAAmB,QAAQ,CAAC;AAGzC,eAAO,MAAM,iBAAiB,gBAAgB,CAAC;AAG/C,eAAO,MAAM,SAAS,QAAQ,CAAC;AAO/B,eAAO,MAAM,4BAA4B,2BAA2B,CAAC;AAGrE,eAAO,MAAM,8BAA8B,6BAA6B,CAAC;AAMzE,eAAO,MAAM,mBAAmB,kBAAkB,CAAC;AAanD,eAAO,MAAM,yBAAyB,EAAE,SAAS,MAAM,EActD,CAAC;AAiBF,eAAO,MAAM,8BAA8B,EAAE,SAAS,MAAM,EAG3D,CAAC;AAQF,oBAAY,mBAAmB;IAC7B,IAAI,SAAS;IACb,QAAQ,aAAa;IACrB,KAAK,UAAU;IAOf,YAAY,iBAAiB;CAC9B;AASD,wBAAgB,4BAA4B,CAC1C,IAAI,EAAE,mBAAmB,GACxB,WAAW,CAWb;AAUD,qBAAa,2BAA4B,SAAQ,qBAAqB;gBACxD,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM;CAO3C;AAOD,qBAAa,8BAA+B,SAAQ,2BAA2B;gBACjE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,OAAO;CAS9C;AA8BD,wBAAgB,6BAA6B,CAC3C,CAAC,SAAS,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EACjC,OAAO,EAAE,CAAC,EAAE,MAAM,EAAE,MAAM,GAAG,CAAC,CAwF/B;AAQD,wBAAgB,8BAA8B,CAC5C,CAAC,SAAS,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EACjC,OAAO,EAAE,CAAC,GAAG,CAAC,CASf;AAQD,wBAAgB,qCAAqC,CACnD,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC9B,MAAM,GAAG,SAAS,CAEpB;AAuFD,wBAAgB,sBAAsB,CACpC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAChC,MAAM,EAAE,MAAM,EACd,IAAI,EAAE,mBAAmB,EACzB,SAAS,EAAE,OAAO,GACjB,IAAI,CA4EN;AAaD,wBAAgB,2CAA2C,CACzD,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC/B,UAAU,EAAE,SAAS,YAAY,EAAE,GAClC,kBAAkB,GAAG,SAAS,CAqBhC"}
|
|
@@ -1,10 +1,12 @@
|
|
|
1
1
|
"use strict";
|
|
2
2
|
Object.defineProperty(exports, "__esModule", { value: true });
|
|
3
|
-
exports.UnsupportedContextVersionError = exports.InvalidBoundaryContextError = exports.BoundarySubjectKind = exports.FOREIGN_CALLER_IDENTITY_CLAIMS = exports.PLATFORM_AUTHORITY_CLAIMS = exports.ACT_CLAIM = exports.TOKEN_CLASS_CLAIM = exports.DELEGATION_ID_CLAIM = exports.SUPPORTED_CONTEXT_VERSION = exports.CONTEXT_VERSION_CLAIM = void 0;
|
|
3
|
+
exports.UnsupportedContextVersionError = exports.InvalidBoundaryContextError = exports.BoundarySubjectKind = exports.FOREIGN_CALLER_IDENTITY_CLAIMS = exports.PLATFORM_AUTHORITY_CLAIMS = exports.AUTHORIZED_BY_CLAIM = exports.DELEGATED_RESOURCE_SCOPE_CLAIM = exports.DELEGATED_CAPABILITIES_CLAIM = exports.ACT_CLAIM = exports.TOKEN_CLASS_CLAIM = exports.DELEGATION_ID_CLAIM = exports.SUPPORTED_CONTEXT_VERSION = exports.CONTEXT_VERSION_CLAIM = void 0;
|
|
4
4
|
exports.kernelSubjectKindForBoundary = kernelSubjectKindForBoundary;
|
|
5
5
|
exports.normalizeClaimAuthorityClaims = normalizeClaimAuthorityClaims;
|
|
6
6
|
exports.withoutPlatformAuthorityClaims = withoutPlatformAuthorityClaims;
|
|
7
7
|
exports.resolveDelegationIdFromBoundaryClaims = resolveDelegationIdFromBoundaryClaims;
|
|
8
|
+
exports.assertDelegationClaims = assertDelegationClaims;
|
|
9
|
+
exports.resolveDelegatedAuthorityFromBoundaryClaims = resolveDelegatedAuthorityFromBoundaryClaims;
|
|
8
10
|
const common_1 = require("@nestjs/common");
|
|
9
11
|
const identity_client_1 = require("@xemahq/identity-client");
|
|
10
12
|
const subject_1 = require("@xemahq/contracts/subject");
|
|
@@ -17,6 +19,9 @@ exports.SUPPORTED_CONTEXT_VERSION = 1;
|
|
|
17
19
|
exports.DELEGATION_ID_CLAIM = 'did';
|
|
18
20
|
exports.TOKEN_CLASS_CLAIM = 'token_class';
|
|
19
21
|
exports.ACT_CLAIM = 'act';
|
|
22
|
+
exports.DELEGATED_CAPABILITIES_CLAIM = 'delegated_capabilities';
|
|
23
|
+
exports.DELEGATED_RESOURCE_SCOPE_CLAIM = 'delegated_resource_scope';
|
|
24
|
+
exports.AUTHORIZED_BY_CLAIM = 'authorized_by';
|
|
20
25
|
exports.PLATFORM_AUTHORITY_CLAIMS = [
|
|
21
26
|
'realm_access',
|
|
22
27
|
boundary_context_brand_1.PLATFORM_ROLES_CLAIM,
|
|
@@ -26,6 +31,9 @@ exports.PLATFORM_AUTHORITY_CLAIMS = [
|
|
|
26
31
|
actor_classification_1.SUBJECT_KIND_CLAIM,
|
|
27
32
|
exports.ACT_CLAIM,
|
|
28
33
|
exports.DELEGATION_ID_CLAIM,
|
|
34
|
+
exports.DELEGATED_CAPABILITIES_CLAIM,
|
|
35
|
+
exports.DELEGATED_RESOURCE_SCOPE_CLAIM,
|
|
36
|
+
exports.AUTHORIZED_BY_CLAIM,
|
|
29
37
|
exports.CONTEXT_VERSION_CLAIM,
|
|
30
38
|
identity_client_1.PRINCIPAL_ID_CLAIM,
|
|
31
39
|
];
|
|
@@ -38,6 +46,7 @@ var BoundarySubjectKind;
|
|
|
38
46
|
BoundarySubjectKind["User"] = "user";
|
|
39
47
|
BoundarySubjectKind["Workload"] = "workload";
|
|
40
48
|
BoundarySubjectKind["Agent"] = "agent";
|
|
49
|
+
BoundarySubjectKind["Organization"] = "organization";
|
|
41
50
|
})(BoundarySubjectKind || (exports.BoundarySubjectKind = BoundarySubjectKind = {}));
|
|
42
51
|
function kernelSubjectKindForBoundary(kind) {
|
|
43
52
|
switch (kind) {
|
|
@@ -47,6 +56,8 @@ function kernelSubjectKindForBoundary(kind) {
|
|
|
47
56
|
return subject_1.SubjectKind.Service;
|
|
48
57
|
case BoundarySubjectKind.Agent:
|
|
49
58
|
return subject_1.SubjectKind.Agent;
|
|
59
|
+
case BoundarySubjectKind.Organization:
|
|
60
|
+
return subject_1.SubjectKind.Organization;
|
|
50
61
|
}
|
|
51
62
|
}
|
|
52
63
|
function parseBoundarySubjectKind(value) {
|
|
@@ -116,6 +127,7 @@ function normalizeClaimAuthorityClaims(payload, issuer) {
|
|
|
116
127
|
`delegation with no validated record.`
|
|
117
128
|
: `it carries "${exports.DELEGATION_ID_CLAIM}" with no "${exports.ACT_CLAIM}".`);
|
|
118
129
|
}
|
|
130
|
+
assertDelegationClaims(payload, issuer, boundaryKind, hasAct);
|
|
119
131
|
const normalized = { ...payload };
|
|
120
132
|
delete normalized['realm_access'];
|
|
121
133
|
normalized[exports.TOKEN_CLASS_CLAIM] = tokenClass;
|
|
@@ -168,6 +180,10 @@ function normalizeActHops(act, issuer) {
|
|
|
168
180
|
throw new InvalidBoundaryContextError(issuer, `a delegation hop states "${actor_classification_1.SUBJECT_KIND_CLAIM}" ` +
|
|
169
181
|
`${JSON.stringify(hop[actor_classification_1.SUBJECT_KIND_CLAIM])}, outside the boundary vocabulary.`);
|
|
170
182
|
}
|
|
183
|
+
if (kind === BoundarySubjectKind.Organization) {
|
|
184
|
+
throw new InvalidBoundaryContextError(issuer, `a delegation hop states "${actor_classification_1.SUBJECT_KIND_CLAIM}" 'organization' — an ` +
|
|
185
|
+
`organization is a delegator, never the party that acts.`);
|
|
186
|
+
}
|
|
171
187
|
hop[actor_classification_1.SUBJECT_KIND_CLAIM] = kernelSubjectKindForBoundary(kind);
|
|
172
188
|
}
|
|
173
189
|
if (hop[exports.ACT_CLAIM] !== undefined) {
|
|
@@ -175,4 +191,86 @@ function normalizeActHops(act, issuer) {
|
|
|
175
191
|
}
|
|
176
192
|
return hop;
|
|
177
193
|
}
|
|
194
|
+
function nonEmptyStringList(value) {
|
|
195
|
+
if (!Array.isArray(value) || value.length === 0)
|
|
196
|
+
return null;
|
|
197
|
+
for (const entry of value) {
|
|
198
|
+
if (typeof entry !== 'string' || entry.length === 0)
|
|
199
|
+
return null;
|
|
200
|
+
}
|
|
201
|
+
return [...value];
|
|
202
|
+
}
|
|
203
|
+
function assertDelegationClaims(payload, issuer, kind, delegated) {
|
|
204
|
+
const has = (claim) => payload[claim] !== undefined;
|
|
205
|
+
if (!delegated) {
|
|
206
|
+
const stray = [
|
|
207
|
+
exports.DELEGATED_CAPABILITIES_CLAIM,
|
|
208
|
+
exports.DELEGATED_RESOURCE_SCOPE_CLAIM,
|
|
209
|
+
exports.AUTHORIZED_BY_CLAIM,
|
|
210
|
+
].filter(has);
|
|
211
|
+
if (stray.length > 0) {
|
|
212
|
+
throw new InvalidBoundaryContextError(issuer, `it carries ${stray.map((c) => `"${c}"`).join(', ')} but is not ` +
|
|
213
|
+
`delegated (no "${exports.ACT_CLAIM}"/"${exports.DELEGATION_ID_CLAIM}").`);
|
|
214
|
+
}
|
|
215
|
+
}
|
|
216
|
+
else {
|
|
217
|
+
if (nonEmptyStringList(payload[exports.DELEGATED_CAPABILITIES_CLAIM]) === null) {
|
|
218
|
+
throw new InvalidBoundaryContextError(issuer, `a delegated context must carry "${exports.DELEGATED_CAPABILITIES_CLAIM}" as a ` +
|
|
219
|
+
`non-empty list of non-empty strings — a delegation that lends ` +
|
|
220
|
+
`nothing is not authority.`);
|
|
221
|
+
}
|
|
222
|
+
if (has(exports.DELEGATED_RESOURCE_SCOPE_CLAIM) &&
|
|
223
|
+
nonEmptyStringList(payload[exports.DELEGATED_RESOURCE_SCOPE_CLAIM]) === null) {
|
|
224
|
+
throw new InvalidBoundaryContextError(issuer, `"${exports.DELEGATED_RESOURCE_SCOPE_CLAIM}" must be a non-empty list of ` +
|
|
225
|
+
`non-empty strings when present.`);
|
|
226
|
+
}
|
|
227
|
+
}
|
|
228
|
+
const isOrganization = kind === BoundarySubjectKind.Organization;
|
|
229
|
+
if (has(exports.AUTHORIZED_BY_CLAIM) !== isOrganization) {
|
|
230
|
+
throw new InvalidBoundaryContextError(issuer, isOrganization
|
|
231
|
+
? `an organization context must carry "${exports.AUTHORIZED_BY_CLAIM}" — the ` +
|
|
232
|
+
`administrator who authorized the delegation.`
|
|
233
|
+
: `"${exports.AUTHORIZED_BY_CLAIM}" is stated only on an organization context.`);
|
|
234
|
+
}
|
|
235
|
+
if (!isOrganization)
|
|
236
|
+
return;
|
|
237
|
+
if (!(0, actor_classification_1.asNonEmptyString)(payload[exports.AUTHORIZED_BY_CLAIM])) {
|
|
238
|
+
throw new InvalidBoundaryContextError(issuer, `"${exports.AUTHORIZED_BY_CLAIM}" must be a non-empty string.`);
|
|
239
|
+
}
|
|
240
|
+
if (!delegated) {
|
|
241
|
+
throw new InvalidBoundaryContextError(issuer, `an organization context exists only under a delegation, and it ` +
|
|
242
|
+
`carries no "${exports.ACT_CLAIM}"/"${exports.DELEGATION_ID_CLAIM}".`);
|
|
243
|
+
}
|
|
244
|
+
const organizationId = (0, actor_classification_1.asNonEmptyString)(payload['sub']);
|
|
245
|
+
const tenant = (0, org_claim_1.resolveOrgClaim)(payload)?.value;
|
|
246
|
+
if (!organizationId || !tenant || tenant !== organizationId) {
|
|
247
|
+
throw new InvalidBoundaryContextError(issuer, `an organization context must name its organization as "sub" and in ` +
|
|
248
|
+
`"${org_claim_1.OrgClaimKey.Canonical}", and the two must be the same.`);
|
|
249
|
+
}
|
|
250
|
+
if (payload[org_role_1.OrgRolesClaimKey.Canonical] !== undefined) {
|
|
251
|
+
throw new InvalidBoundaryContextError(issuer, `an organization context carries "${org_role_1.OrgRolesClaimKey.Canonical}" — an ` +
|
|
252
|
+
`organization is not a member of anything.`);
|
|
253
|
+
}
|
|
254
|
+
}
|
|
255
|
+
function resolveDelegatedAuthorityFromBoundaryClaims(claims, actorChain) {
|
|
256
|
+
const delegationId = resolveDelegationIdFromBoundaryClaims(claims);
|
|
257
|
+
if (delegationId === undefined)
|
|
258
|
+
return undefined;
|
|
259
|
+
const actor = actorChain[0];
|
|
260
|
+
const capabilities = nonEmptyStringList(claims[exports.DELEGATED_CAPABILITIES_CLAIM]);
|
|
261
|
+
if (actor === undefined || capabilities === null) {
|
|
262
|
+
throw new Error('A delegated claim-authority context reached projection without its ' +
|
|
263
|
+
'validated actor or capabilities; normalizeClaimAuthorityClaims must run first.');
|
|
264
|
+
}
|
|
265
|
+
const resourceScope = nonEmptyStringList(claims[exports.DELEGATED_RESOURCE_SCOPE_CLAIM]);
|
|
266
|
+
const authorizedBy = (0, actor_classification_1.asNonEmptyString)(claims[exports.AUTHORIZED_BY_CLAIM]);
|
|
267
|
+
return Object.freeze({
|
|
268
|
+
delegationId,
|
|
269
|
+
actor: Object.freeze({ ...actor }),
|
|
270
|
+
actorChain: Object.freeze(actorChain.map((hop) => Object.freeze({ ...hop }))),
|
|
271
|
+
capabilities: Object.freeze(capabilities),
|
|
272
|
+
...(resourceScope !== null ? { resourceScope: Object.freeze(resourceScope) } : {}),
|
|
273
|
+
...(authorizedBy !== undefined ? { authorizedBy } : {}),
|
|
274
|
+
});
|
|
275
|
+
}
|
|
178
276
|
//# sourceMappingURL=claim-authority.js.map
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"claim-authority.js","sourceRoot":"","sources":["../../../src/nestjs/auth/claim-authority.ts"],"names":[],"mappings":";;;
|
|
1
|
+
{"version":3,"file":"claim-authority.js","sourceRoot":"","sources":["../../../src/nestjs/auth/claim-authority.ts"],"names":[],"mappings":";;;AAmJA,oEAaC;AAiED,sEA0FC;AAQD,wEAWC;AAQD,sFAIC;AAuFD,wDAiFC;AAaD,kGAwBC;AAviBD,2CAAuD;AACvD,6DAA6D;AAC7D,uDAKmC;AAEnC,wDAAwE;AACxE,sDAA4E;AAC5E,iEAIgC;AAChC,qEAGkC;AAyBrB,QAAA,qBAAqB,GAAG,SAAS,CAAC;AAGlC,QAAA,yBAAyB,GAAG,CAAC,CAAC;AAG9B,QAAA,mBAAmB,GAAG,KAAK,CAAC;AAG5B,QAAA,iBAAiB,GAAG,aAAa,CAAC;AAGlC,QAAA,SAAS,GAAG,KAAK,CAAC;AAOlB,QAAA,4BAA4B,GAAG,wBAAwB,CAAC;AAGxD,QAAA,8BAA8B,GAAG,0BAA0B,CAAC;AAM5D,QAAA,mBAAmB,GAAG,eAAe,CAAC;AAatC,QAAA,yBAAyB,GAAsB;IAC1D,cAAc;IACd,6CAAoB;IACpB,2BAAgB,CAAC,SAAS;IAC1B,uBAAW,CAAC,SAAS;IACrB,yBAAiB;IACjB,yCAAkB;IAClB,iBAAS;IACT,2BAAmB;IACnB,oCAA4B;IAC5B,sCAA8B;IAC9B,2BAAmB;IACnB,6BAAqB;IACrB,oCAAkB;CACnB,CAAC;AAiBW,QAAA,8BAA8B,GAAsB;IAC/D,KAAK;IACL,WAAW;CACZ,CAAC;AAQF,IAAY,mBAWX;AAXD,WAAY,mBAAmB;IAC7B,oCAAa,CAAA;IACb,4CAAqB,CAAA;IACrB,sCAAe,CAAA;IAOf,oDAA6B,CAAA;AAC/B,CAAC,EAXW,mBAAmB,mCAAnB,mBAAmB,QAW9B;AASD,SAAgB,4BAA4B,CAC1C,IAAyB;IAEzB,QAAQ,IAAI,EAAE,CAAC;QACb,KAAK,mBAAmB,CAAC,IAAI;YAC3B,OAAO,qBAAW,CAAC,IAAI,CAAC;QAC1B,KAAK,mBAAmB,CAAC,QAAQ;YAC/B,OAAO,qBAAW,CAAC,OAAO,CAAC;QAC7B,KAAK,mBAAmB,CAAC,KAAK;YAC5B,OAAO,qBAAW,CAAC,KAAK,CAAC;QAC3B,KAAK,mBAAmB,CAAC,YAAY;YACnC,OAAO,qBAAW,CAAC,YAAY,CAAC;IACpC,CAAC;AACH,CAAC;AAED,SAAS,wBAAwB,CAAC,KAAc;IAC9C,OAAO,OAAO,KAAK,KAAK,QAAQ;QAC7B,MAAM,CAAC,MAAM,CAAC,mBAAmB,CAAc,CAAC,QAAQ,CAAC,KAAK,CAAC;QAChE,CAAC,CAAE,KAA6B;QAChC,CAAC,CAAC,IAAI,CAAC;AACX,CAAC;AAGD,MAAa,2BAA4B,SAAQ,8BAAqB;IACpE,YAAY,MAAc,EAAE,MAAc;QACxC,KAAK,CACH,0CAA0C,MAAM,iBAAiB,MAAM,GAAG;YACxE,mEAAmE;YACnE,uCAAuC,CAC1C,CAAC;IACJ,CAAC;CACF;AARD,kEAQC;AAOD,MAAa,8BAA+B,SAAQ,2BAA2B;IAC7E,YAAY,MAAc,EAAE,QAAiB;QAC3C,KAAK,CACH,MAAM,EACN,QAAQ,KAAK,SAAS;YACpB,CAAC,CAAC,kBAAkB,6BAAqB,UAAU;YACnD,CAAC,CAAC,IAAI,6BAAqB,QAAQ,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,SAAS;gBAChE,wBAAwB,iCAAyB,QAAQ,CAChE,CAAC;IACJ,CAAC;CACF;AAVD,wEAUC;AA8BD,SAAgB,6BAA6B,CAE3C,OAAU,EAAE,MAAc;IAC1B,MAAM,MAAM,GAAG,OAAO,CAAC,6BAAqB,CAAC,CAAC;IAC9C,IAAI,MAAM,KAAK,iCAAyB,EAAE,CAAC;QACzC,MAAM,IAAI,8BAA8B,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC3D,CAAC;IAED,MAAM,aAAa,GAAG,IAAA,uCAAgB,EAAC,OAAO,CAAC,yBAAiB,CAAC,CAAC,CAAC;IACnE,IAAI,CAAC,aAAa,EAAE,CAAC;QACnB,MAAM,IAAI,2BAA2B,CACnC,MAAM,EACN,kBAAkB,yBAAiB,UAAU,CAC9C,CAAC;IACJ,CAAC;IACD,IAAI,CAAE,MAAM,CAAC,MAAM,CAAC,oBAAU,CAAc,CAAC,QAAQ,CAAC,aAAa,CAAC,EAAE,CAAC;QACrE,MAAM,IAAI,2BAA2B,CACnC,MAAM,EACN,IAAI,yBAAiB,KAAK,IAAI,CAAC,SAAS,CAAC,aAAa,CAAC,6BAA6B,CACrF,CAAC;IACJ,CAAC;IACD,MAAM,UAAU,GAAG,aAA2B,CAAC;IAE/C,IAAI,CAAC,CAAC,yCAAkB,IAAI,OAAO,CAAC,EAAE,CAAC;QACrC,MAAM,IAAI,2BAA2B,CACnC,MAAM,EACN,kBAAkB,yCAAkB,UAAU,CAC/C,CAAC;IACJ,CAAC;IACD,MAAM,YAAY,GAAG,wBAAwB,CAAC,OAAO,CAAC,yCAAkB,CAAC,CAAC,CAAC;IAC3E,IAAI,CAAC,YAAY,EAAE,CAAC;QAClB,MAAM,IAAI,2BAA2B,CACnC,MAAM,EACN,IAAI,yCAAkB,KAAK,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,yCAAkB,CAAC,CAAC,GAAG;YACvE,iBAAiB,MAAM,CAAC,MAAM,CAAC,mBAAmB,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CACrE,CAAC;IACJ,CAAC;IACD,MAAM,WAAW,GAAG,4BAA4B,CAAC,YAAY,CAAC,CAAC;IAC/D,IAAI,IAAA,+CAAwB,EAAC,UAAU,CAAC,KAAK,WAAW,EAAE,CAAC;QACzD,MAAM,IAAI,2BAA2B,CACnC,MAAM,EACN,IAAI,yBAAiB,MAAM,UAAU,UAAU,yCAAkB,IAAI;YACnE,IAAI,YAAY,oCAAoC,CACvD,CAAC;IACJ,CAAC;IAED,MAAM,QAAQ,GAAG,OAAO,CAAC,6CAAoB,CAAC,CAAC;IAC/C,IACE,QAAQ,KAAK,SAAS;QACtB,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC,EACzE,CAAC;QACD,MAAM,IAAI,2BAA2B,CACnC,MAAM,EACN,IAAI,6CAAoB,gCAAgC,CACzD,CAAC;IACJ,CAAC;IACD,MAAM,aAAa,GAAI,QAAiC,IAAI,EAAE,CAAC;IAE/D,oBAAoB,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;IAEtC,MAAM,MAAM,GAAG,OAAO,CAAC,iBAAS,CAAC,KAAK,SAAS,CAAC;IAChD,MAAM,MAAM,GAAG,OAAO,CAAC,2BAAmB,CAAC,KAAK,SAAS,CAAC;IAC1D,IAAI,MAAM,IAAI,CAAC,IAAA,uCAAgB,EAAC,OAAO,CAAC,2BAAmB,CAAC,CAAC,EAAE,CAAC;QAC9D,MAAM,IAAI,2BAA2B,CACnC,MAAM,EACN,IAAI,2BAAmB,+BAA+B,CACvD,CAAC;IACJ,CAAC;IACD,IAAI,MAAM,KAAK,MAAM,EAAE,CAAC;QACtB,MAAM,IAAI,2BAA2B,CACnC,MAAM,EACN,MAAM;YACJ,CAAC,CAAC,eAAe,iBAAS,cAAc,2BAAmB,QAAQ;gBAC/D,sCAAsC;YAC1C,CAAC,CAAC,eAAe,2BAAmB,cAAc,iBAAS,IAAI,CAClE,CAAC;IACJ,CAAC;IAED,sBAAsB,CAAC,OAAO,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,CAAC,CAAC;IAE9D,MAAM,UAAU,GAAqC,EAAE,GAAG,OAAO,EAAE,CAAC;IACpE,OAAO,UAAU,CAAC,cAAc,CAAC,CAAC;IAClC,UAAU,CAAC,yBAAiB,CAAC,GAAG,UAAU,CAAC;IAC3C,UAAU,CAAC,yCAAkB,CAAC,GAAG,WAAW,CAAC;IAC7C,UAAU,CAAC,6CAAoB,CAAC,GAAG,CAAC,GAAG,aAAa,CAAC,CAAC;IACtD,IAAI,MAAM,EAAE,CAAC;QACX,UAAU,CAAC,iBAAS,CAAC,GAAG,gBAAgB,CAAC,OAAO,CAAC,iBAAS,CAAC,EAAE,MAAM,CAAC,CAAC;IACvE,CAAC;IACD,UAAU,CAAC,gDAAuB,CAAC,GAAG,IAAI,CAAC;IAC3C,OAAO,UAAe,CAAC;AACzB,CAAC;AAQD,SAAgB,8BAA8B,CAE5C,OAAU;IACV,MAAM,QAAQ,GAA4B,EAAE,GAAG,OAAO,EAAE,CAAC;IACzD,KAAK,MAAM,KAAK,IAAI;QAClB,GAAG,iCAAyB;QAC5B,GAAG,sCAA8B;KAClC,EAAE,CAAC;QACF,OAAO,QAAQ,CAAC,KAAK,CAAC,CAAC;IACzB,CAAC;IACD,OAAO,QAAa,CAAC;AACvB,CAAC;AAQD,SAAgB,qCAAqC,CACnD,MAA+B;IAE/B,OAAO,IAAA,uCAAgB,EAAC,MAAM,CAAC,2BAAmB,CAAC,CAAC,CAAC;AACvD,CAAC;AAED,SAAS,oBAAoB,CAC3B,OAAgC,EAChC,MAAc;IAEd,MAAM,QAAQ,GAAG,IAAA,0BAAe,EAAC,OAAO,CAAC,CAAC;IAC1C,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IACrC,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO;IAChC,MAAM,MAAM,GAAG,IAAA,2BAAe,EAAC,OAAO,CAAC,EAAE,KAAK,CAAC;IAC/C,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,MAAM,IAAI,2BAA2B,CACnC,MAAM,EACN,eAAe,2BAAgB,CAAC,SAAS,WAAW;YAClD,IAAI,uBAAW,CAAC,SAAS,sCAAsC,CAClE,CAAC;IACJ,CAAC;IACD,MAAM,OAAO,GAAG,MAAM,CAAC,MAAM,CAC3B,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,WAAW,EAAE,KAAK,MAAM,CAAC,WAAW,EAAE,CACxD,CAAC;IACF,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACvB,MAAM,IAAI,2BAA2B,CACnC,MAAM,EACN,IAAI,2BAAgB,CAAC,SAAS,gCAAgC;YAC5D,IAAI,uBAAW,CAAC,SAAS,0CAA0C;YACnE,+CAA+C,CAClD,CAAC;IACJ,CAAC;AACH,CAAC;AAED,SAAS,gBAAgB,CAAC,GAAY,EAAE,MAAc;IACpD,IAAI,CAAC,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;QAG1D,OAAO,GAAG,CAAC;IACb,CAAC;IACD,MAAM,GAAG,GAA4B,EAAE,GAAI,GAA+B,EAAE,CAAC;IAC7E,IAAI,yCAAkB,IAAI,GAAG,EAAE,CAAC;QAC9B,MAAM,IAAI,GAAG,wBAAwB,CAAC,GAAG,CAAC,yCAAkB,CAAC,CAAC,CAAC;QAC/D,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,MAAM,IAAI,2BAA2B,CACnC,MAAM,EACN,4BAA4B,yCAAkB,IAAI;gBAChD,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,yCAAkB,CAAC,CAAC,oCAAoC,CACjF,CAAC;QACJ,CAAC;QACD,IAAI,IAAI,KAAK,mBAAmB,CAAC,YAAY,EAAE,CAAC;YAC9C,MAAM,IAAI,2BAA2B,CACnC,MAAM,EACN,4BAA4B,yCAAkB,wBAAwB;gBACpE,yDAAyD,CAC5D,CAAC;QACJ,CAAC;QACD,GAAG,CAAC,yCAAkB,CAAC,GAAG,4BAA4B,CAAC,IAAI,CAAC,CAAC;IAC/D,CAAC;IACD,IAAI,GAAG,CAAC,iBAAS,CAAC,KAAK,SAAS,EAAE,CAAC;QACjC,GAAG,CAAC,iBAAS,CAAC,GAAG,gBAAgB,CAAC,GAAG,CAAC,iBAAS,CAAC,EAAE,MAAM,CAAC,CAAC;IAC5D,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,kBAAkB,CAAC,KAAc;IACxC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IAC7D,KAAK,MAAM,KAAK,IAAI,KAAK,EAAE,CAAC;QAC1B,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,IAAI,CAAC;IACnE,CAAC;IACD,OAAO,CAAC,GAAI,KAAkB,CAAC,CAAC;AAClC,CAAC;AAoBD,SAAgB,sBAAsB,CACpC,OAAgC,EAChC,MAAc,EACd,IAAyB,EACzB,SAAkB;IAElB,MAAM,GAAG,GAAG,CAAC,KAAa,EAAW,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,SAAS,CAAC;IACrE,IAAI,CAAC,SAAS,EAAE,CAAC;QACf,MAAM,KAAK,GAAG;YACZ,oCAA4B;YAC5B,sCAA8B;YAC9B,2BAAmB;SACpB,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QACd,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACrB,MAAM,IAAI,2BAA2B,CACnC,MAAM,EACN,cAAc,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,cAAc;gBAC/D,kBAAkB,iBAAS,MAAM,2BAAmB,KAAK,CAC5D,CAAC;QACJ,CAAC;IACH,CAAC;SAAM,CAAC;QACN,IAAI,kBAAkB,CAAC,OAAO,CAAC,oCAA4B,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;YACvE,MAAM,IAAI,2BAA2B,CACnC,MAAM,EACN,mCAAmC,oCAA4B,SAAS;gBACtE,gEAAgE;gBAChE,2BAA2B,CAC9B,CAAC;QACJ,CAAC;QACD,IACE,GAAG,CAAC,sCAA8B,CAAC;YACnC,kBAAkB,CAAC,OAAO,CAAC,sCAA8B,CAAC,CAAC,KAAK,IAAI,EACpE,CAAC;YACD,MAAM,IAAI,2BAA2B,CACnC,MAAM,EACN,IAAI,sCAA8B,gCAAgC;gBAChE,iCAAiC,CACpC,CAAC;QACJ,CAAC;IACH,CAAC;IAED,MAAM,cAAc,GAAG,IAAI,KAAK,mBAAmB,CAAC,YAAY,CAAC;IACjE,IAAI,GAAG,CAAC,2BAAmB,CAAC,KAAK,cAAc,EAAE,CAAC;QAChD,MAAM,IAAI,2BAA2B,CACnC,MAAM,EACN,cAAc;YACZ,CAAC,CAAC,uCAAuC,2BAAmB,UAAU;gBAClE,8CAA8C;YAClD,CAAC,CAAC,IAAI,2BAAmB,8CAA8C,CAC1E,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,cAAc;QAAE,OAAO;IAC5B,IAAI,CAAC,IAAA,uCAAgB,EAAC,OAAO,CAAC,2BAAmB,CAAC,CAAC,EAAE,CAAC;QACpD,MAAM,IAAI,2BAA2B,CACnC,MAAM,EACN,IAAI,2BAAmB,+BAA+B,CACvD,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,SAAS,EAAE,CAAC;QACf,MAAM,IAAI,2BAA2B,CACnC,MAAM,EACN,iEAAiE;YAC/D,eAAe,iBAAS,MAAM,2BAAmB,IAAI,CACxD,CAAC;IACJ,CAAC;IACD,MAAM,cAAc,GAAG,IAAA,uCAAgB,EAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC;IACxD,MAAM,MAAM,GAAG,IAAA,2BAAe,EAAC,OAAO,CAAC,EAAE,KAAK,CAAC;IAC/C,IAAI,CAAC,cAAc,IAAI,CAAC,MAAM,IAAI,MAAM,KAAK,cAAc,EAAE,CAAC;QAC5D,MAAM,IAAI,2BAA2B,CACnC,MAAM,EACN,qEAAqE;YACnE,IAAI,uBAAW,CAAC,SAAS,kCAAkC,CAC9D,CAAC;IACJ,CAAC;IACD,IAAI,OAAO,CAAC,2BAAgB,CAAC,SAAS,CAAC,KAAK,SAAS,EAAE,CAAC;QACtD,MAAM,IAAI,2BAA2B,CACnC,MAAM,EACN,oCAAoC,2BAAgB,CAAC,SAAS,SAAS;YACrE,2CAA2C,CAC9C,CAAC;IACJ,CAAC;AACH,CAAC;AAaD,SAAgB,2CAA2C,CACzD,MAA+B,EAC/B,UAAmC;IAEnC,MAAM,YAAY,GAAG,qCAAqC,CAAC,MAAM,CAAC,CAAC;IACnE,IAAI,YAAY,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IACjD,MAAM,KAAK,GAAG,UAAU,CAAC,CAAC,CAAC,CAAC;IAC5B,MAAM,YAAY,GAAG,kBAAkB,CAAC,MAAM,CAAC,oCAA4B,CAAC,CAAC,CAAC;IAC9E,IAAI,KAAK,KAAK,SAAS,IAAI,YAAY,KAAK,IAAI,EAAE,CAAC;QACjD,MAAM,IAAI,KAAK,CACb,qEAAqE;YACnE,gFAAgF,CACnF,CAAC;IACJ,CAAC;IACD,MAAM,aAAa,GAAG,kBAAkB,CAAC,MAAM,CAAC,sCAA8B,CAAC,CAAC,CAAC;IACjF,MAAM,YAAY,GAAG,IAAA,uCAAgB,EAAC,MAAM,CAAC,2BAAmB,CAAC,CAAC,CAAC;IACnE,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,YAAY;QACZ,KAAK,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,GAAG,KAAK,EAAE,CAAC;QAClC,UAAU,EAAE,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,GAAG,GAAG,EAAE,CAAC,CAAC,CAAC;QAC7E,YAAY,EAAE,MAAM,CAAC,MAAM,CAAC,YAAY,CAAC;QACzC,GAAG,CAAC,aAAa,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,MAAM,CAAC,MAAM,CAAC,aAAa,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAClF,GAAG,CAAC,YAAY,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACxD,CAAC,CAAC;AACL,CAAC"}
|
|
@@ -6,5 +6,8 @@ export declare class UnclassifiableForeignBearerError extends UnauthorizedExcept
|
|
|
6
6
|
export declare class UnknownDeclaredSubjectClassError extends UnauthorizedException {
|
|
7
7
|
constructor(issuer: string, declared: string);
|
|
8
8
|
}
|
|
9
|
+
export declare class OrganizationDelegationRequiresClaimAuthorityError extends UnauthorizedException {
|
|
10
|
+
constructor(source: string);
|
|
11
|
+
}
|
|
9
12
|
export declare function claimsWithDeclaredSubjectClass<T extends Record<string, unknown>>(payload: T, source: VerifiedTokenSource): T;
|
|
10
13
|
//# sourceMappingURL=declared-subject-class.d.ts.map
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"declared-subject-class.d.ts","sourceRoot":"","sources":["../../../src/nestjs/auth/declared-subject-class.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,qBAAqB,EAAE,MAAM,gBAAgB,CAAC;AAOvD,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,wBAAwB,CAAC;AAiClE,qBAAa,gCAAiC,SAAQ,qBAAqB;gBAC7D,MAAM,EAAE,MAAM;CAY3B;AAWD,qBAAa,gCAAiC,SAAQ,qBAAqB;gBAC7D,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM;CAM7C;
|
|
1
|
+
{"version":3,"file":"declared-subject-class.d.ts","sourceRoot":"","sources":["../../../src/nestjs/auth/declared-subject-class.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,qBAAqB,EAAE,MAAM,gBAAgB,CAAC;AAOvD,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,wBAAwB,CAAC;AAiClE,qBAAa,gCAAiC,SAAQ,qBAAqB;gBAC7D,MAAM,EAAE,MAAM;CAY3B;AAWD,qBAAa,gCAAiC,SAAQ,qBAAqB;gBAC7D,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM;CAM7C;AAcD,qBAAa,iDAAkD,SAAQ,qBAAqB;gBAC9E,MAAM,EAAE,MAAM;CAQ3B;AAuCD,wBAAgB,8BAA8B,CAC5C,CAAC,SAAS,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EACjC,OAAO,EAAE,CAAC,EAAE,MAAM,EAAE,mBAAmB,GAAG,CAAC,CA2B5C"}
|
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
"use strict";
|
|
2
2
|
Object.defineProperty(exports, "__esModule", { value: true });
|
|
3
|
-
exports.UnknownDeclaredSubjectClassError = exports.UnclassifiableForeignBearerError = void 0;
|
|
3
|
+
exports.OrganizationDelegationRequiresClaimAuthorityError = exports.UnknownDeclaredSubjectClassError = exports.UnclassifiableForeignBearerError = void 0;
|
|
4
4
|
exports.claimsWithDeclaredSubjectClass = claimsWithDeclaredSubjectClass;
|
|
5
5
|
const common_1 = require("@nestjs/common");
|
|
6
6
|
const subject_1 = require("@xemahq/contracts/subject");
|
|
@@ -25,9 +25,22 @@ class UnknownDeclaredSubjectClassError extends common_1.UnauthorizedException {
|
|
|
25
25
|
}
|
|
26
26
|
}
|
|
27
27
|
exports.UnknownDeclaredSubjectClassError = UnknownDeclaredSubjectClassError;
|
|
28
|
+
class OrganizationDelegationRequiresClaimAuthorityError extends common_1.UnauthorizedException {
|
|
29
|
+
constructor(source) {
|
|
30
|
+
super(`The access token from ${source} states the ` +
|
|
31
|
+
`"${subject_1.TokenClass.OrganizationDelegation}" class, which only the identity ` +
|
|
32
|
+
`boundary (the claim authority) may state — nothing else can have ` +
|
|
33
|
+
`validated the delegation it implies.`);
|
|
34
|
+
}
|
|
35
|
+
}
|
|
36
|
+
exports.OrganizationDelegationRequiresClaimAuthorityError = OrganizationDelegationRequiresClaimAuthorityError;
|
|
28
37
|
function claimsWithDeclaredSubjectClass(payload, source) {
|
|
29
|
-
if (source.kind !== 'trusted-issuer')
|
|
38
|
+
if (source.kind !== 'trusted-issuer') {
|
|
39
|
+
if (payload['token_class'] === subject_1.TokenClass.OrganizationDelegation) {
|
|
40
|
+
throw new OrganizationDelegationRequiresClaimAuthorityError("the deployment's own realm");
|
|
41
|
+
}
|
|
30
42
|
return payload;
|
|
43
|
+
}
|
|
31
44
|
if (source.entry.claimAuthority === true) {
|
|
32
45
|
return (0, claim_authority_1.normalizeClaimAuthorityClaims)(payload, source.entry.issuer);
|
|
33
46
|
}
|
|
@@ -40,6 +53,9 @@ function claimsWithDeclaredSubjectClass(payload, source) {
|
|
|
40
53
|
if (!parsed.success) {
|
|
41
54
|
throw new UnknownDeclaredSubjectClassError(source.entry.issuer, declared);
|
|
42
55
|
}
|
|
56
|
+
if (parsed.data === subject_1.TokenClass.OrganizationDelegation) {
|
|
57
|
+
throw new OrganizationDelegationRequiresClaimAuthorityError(`trusted issuer '${source.entry.issuer}' (its declared subjectClass)`);
|
|
58
|
+
}
|
|
43
59
|
return { ...foreign, token_class: parsed.data };
|
|
44
60
|
}
|
|
45
61
|
//# sourceMappingURL=declared-subject-class.js.map
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"declared-subject-class.js","sourceRoot":"","sources":["../../../src/nestjs/auth/declared-subject-class.ts"],"names":[],"mappings":";;;
|
|
1
|
+
{"version":3,"file":"declared-subject-class.js","sourceRoot":"","sources":["../../../src/nestjs/auth/declared-subject-class.ts"],"names":[],"mappings":";;;AAqIA,wEA6BC;AAlKD,2CAAuD;AACvD,uDAAyE;AAEzE,uDAG2B;AAkC3B,MAAa,gCAAiC,SAAQ,8BAAqB;IACzE,YAAY,MAAc;QACxB,KAAK,CACH,kDAAkD,MAAM,WAAW;YACjE,sEAAsE;YACtE,gEAAgE;YAChE,6BAA6B;YAC7B,mEAAmE;YACnE,uEAAuE;YACvE,qEAAqE;YACrE,2EAA2E,CAC9E,CAAC;IACJ,CAAC;CACF;AAbD,4EAaC;AAWD,MAAa,gCAAiC,SAAQ,8BAAqB;IACzE,YAAY,MAAc,EAAE,QAAgB;QAC1C,KAAK,CACH,mBAAmB,MAAM,0BAA0B;YACjD,IAAI,QAAQ,qCAAqC,CACpD,CAAC;IACJ,CAAC;CACF;AAPD,4EAOC;AAcD,MAAa,iDAAkD,SAAQ,8BAAqB;IAC1F,YAAY,MAAc;QACxB,KAAK,CACH,yBAAyB,MAAM,cAAc;YAC3C,IAAI,oBAAU,CAAC,sBAAsB,mCAAmC;YACxE,mEAAmE;YACnE,sCAAsC,CACzC,CAAC;IACJ,CAAC;CACF;AATD,8GASC;AAuCD,SAAgB,8BAA8B,CAE5C,OAAU,EAAE,MAA2B;IACvC,IAAI,MAAM,CAAC,IAAI,KAAK,gBAAgB,EAAE,CAAC;QACrC,IAAI,OAAO,CAAC,aAAa,CAAC,KAAK,oBAAU,CAAC,sBAAsB,EAAE,CAAC;YACjE,MAAM,IAAI,iDAAiD,CACzD,4BAA4B,CAC7B,CAAC;QACJ,CAAC;QACD,OAAO,OAAO,CAAC;IACjB,CAAC;IACD,IAAI,MAAM,CAAC,KAAK,CAAC,cAAc,KAAK,IAAI,EAAE,CAAC;QACzC,OAAO,IAAA,+CAA6B,EAAC,OAAO,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IACrE,CAAC;IACD,MAAM,OAAO,GAAG,IAAA,gDAA8B,EAAC,OAAO,CAAC,CAAC;IACxD,MAAM,QAAQ,GAAG,MAAM,CAAC,KAAK,CAAC,YAAY,CAAC;IAC3C,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,MAAM,IAAI,gCAAgC,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IAClE,CAAC;IACD,MAAM,MAAM,GAAG,0BAAgB,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;IACpD,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACpB,MAAM,IAAI,gCAAgC,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;IAC5E,CAAC;IACD,IAAI,MAAM,CAAC,IAAI,KAAK,oBAAU,CAAC,sBAAsB,EAAE,CAAC;QACtD,MAAM,IAAI,iDAAiD,CACzD,mBAAmB,MAAM,CAAC,KAAK,CAAC,MAAM,+BAA+B,CACtE,CAAC;IACJ,CAAC;IACD,OAAO,EAAE,GAAG,OAAO,EAAE,WAAW,EAAE,MAAM,CAAC,IAAI,EAAE,CAAC;AAClD,CAAC"}
|
|
@@ -1,5 +1,6 @@
|
|
|
1
1
|
import { BadRequestException } from '@nestjs/common';
|
|
2
|
-
import
|
|
2
|
+
import { SubjectKind } from '@xemahq/contracts/subject';
|
|
3
|
+
import type { ActingForRef } from '@xemahq/contracts/subject';
|
|
3
4
|
export declare class UnclassifiableActorHopError extends BadRequestException {
|
|
4
5
|
constructor(hopIndex: number, hopSub: string);
|
|
5
6
|
}
|
|
@@ -9,6 +10,9 @@ export declare class UnknownActorHopSubjectKindError extends BadRequestException
|
|
|
9
10
|
export declare class ContradictoryActorHopKindError extends BadRequestException {
|
|
10
11
|
constructor(hopIndex: number, hopSub: string, declared: SubjectKind, derived: SubjectKind);
|
|
11
12
|
}
|
|
13
|
+
export declare class OrganizationActorHopError extends BadRequestException {
|
|
14
|
+
constructor(hopIndex: number, hopSub: string);
|
|
15
|
+
}
|
|
12
16
|
export declare class MalformedActorHopError extends BadRequestException {
|
|
13
17
|
constructor(hopIndex: number);
|
|
14
18
|
}
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"delegation-chain.d.ts","sourceRoot":"","sources":["../../../src/nestjs/auth/delegation-chain.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,mBAAmB,EAAE,MAAM,gBAAgB,CAAC;AACrD,OAAO,KAAK,
|
|
1
|
+
{"version":3,"file":"delegation-chain.d.ts","sourceRoot":"","sources":["../../../src/nestjs/auth/delegation-chain.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,mBAAmB,EAAE,MAAM,gBAAgB,CAAC;AACrD,OAAO,EAAE,WAAW,EAAE,MAAM,2BAA2B,CAAC;AACxD,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,2BAA2B,CAAC;AA+B9D,qBAAa,2BAA4B,SAAQ,mBAAmB;gBACtD,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM;CAS7C;AAWD,qBAAa,+BAAgC,SAAQ,mBAAmB;gBAC1D,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,OAAO;CAQhE;AAaD,qBAAa,8BAA+B,SAAQ,mBAAmB;gBAEnE,QAAQ,EAAE,MAAM,EAChB,MAAM,EAAE,MAAM,EACd,QAAQ,EAAE,WAAW,EACrB,OAAO,EAAE,WAAW;CASvB;AAQD,qBAAa,yBAA0B,SAAQ,mBAAmB;gBACpD,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM;CAM7C;AAgBD,qBAAa,sBAAuB,SAAQ,mBAAmB;gBACjD,QAAQ,EAAE,MAAM;CAO7B;AAkGD,wBAAgB,2BAA2B,CACzC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC9B,YAAY,EAAE,CAyBhB"}
|
|
@@ -1,8 +1,9 @@
|
|
|
1
1
|
"use strict";
|
|
2
2
|
Object.defineProperty(exports, "__esModule", { value: true });
|
|
3
|
-
exports.MalformedActorHopError = exports.ContradictoryActorHopKindError = exports.UnknownActorHopSubjectKindError = exports.UnclassifiableActorHopError = void 0;
|
|
3
|
+
exports.MalformedActorHopError = exports.OrganizationActorHopError = exports.ContradictoryActorHopKindError = exports.UnknownActorHopSubjectKindError = exports.UnclassifiableActorHopError = void 0;
|
|
4
4
|
exports.resolveActorChainFromClaims = resolveActorChainFromClaims;
|
|
5
5
|
const common_1 = require("@nestjs/common");
|
|
6
|
+
const subject_1 = require("@xemahq/contracts/subject");
|
|
6
7
|
const actor_classification_1 = require("./actor-classification");
|
|
7
8
|
class UnclassifiableActorHopError extends common_1.BadRequestException {
|
|
8
9
|
constructor(hopIndex, hopSub) {
|
|
@@ -32,6 +33,14 @@ class ContradictoryActorHopKindError extends common_1.BadRequestException {
|
|
|
32
33
|
}
|
|
33
34
|
}
|
|
34
35
|
exports.ContradictoryActorHopKindError = ContradictoryActorHopKindError;
|
|
36
|
+
class OrganizationActorHopError extends common_1.BadRequestException {
|
|
37
|
+
constructor(hopIndex, hopSub) {
|
|
38
|
+
super(`Delegation hop #${hopIndex} (act.sub='${hopSub}') names an ` +
|
|
39
|
+
`organization as the acting party. An organization delegates; it never acts.`);
|
|
40
|
+
}
|
|
41
|
+
}
|
|
42
|
+
exports.OrganizationActorHopError = OrganizationActorHopError;
|
|
43
|
+
const BOUNDARY_WORKLOAD_HOP_KIND = 'workload';
|
|
35
44
|
class MalformedActorHopError extends common_1.BadRequestException {
|
|
36
45
|
constructor(hopIndex) {
|
|
37
46
|
super(`Delegation hop #${hopIndex} has no non-empty "sub" claim. An RFC 8693 ` +
|
|
@@ -46,7 +55,9 @@ function asClaimObject(value) {
|
|
|
46
55
|
: undefined;
|
|
47
56
|
}
|
|
48
57
|
function classifyHop(hop, hopIndex, hopSub) {
|
|
49
|
-
const declared =
|
|
58
|
+
const declared = hop[actor_classification_1.SUBJECT_KIND_CLAIM] === BOUNDARY_WORKLOAD_HOP_KIND
|
|
59
|
+
? subject_1.SubjectKind.Service
|
|
60
|
+
: (0, actor_classification_1.readDeclaredSubjectKind)(hop);
|
|
50
61
|
if (declared === null) {
|
|
51
62
|
throw new UnknownActorHopSubjectKindError(hopIndex, hopSub, hop[actor_classification_1.SUBJECT_KIND_CLAIM]);
|
|
52
63
|
}
|
|
@@ -58,6 +69,9 @@ function classifyHop(hop, hopIndex, hopSub) {
|
|
|
58
69
|
if (kind === undefined) {
|
|
59
70
|
throw new UnclassifiableActorHopError(hopIndex, hopSub);
|
|
60
71
|
}
|
|
72
|
+
if (kind === subject_1.SubjectKind.Organization) {
|
|
73
|
+
throw new OrganizationActorHopError(hopIndex, hopSub);
|
|
74
|
+
}
|
|
61
75
|
return kind;
|
|
62
76
|
}
|
|
63
77
|
function resolveActorChainFromClaims(claims) {
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"delegation-chain.js","sourceRoot":"","sources":["../../../src/nestjs/auth/delegation-chain.ts"],"names":[],"mappings":";;;
|
|
1
|
+
{"version":3,"file":"delegation-chain.js","sourceRoot":"","sources":["../../../src/nestjs/auth/delegation-chain.ts"],"names":[],"mappings":";;;AAmOA,kEA2BC;AA9PD,2CAAqD;AACrD,uDAAwD;AAGxD,iEASgC;AAoBhC,MAAa,2BAA4B,SAAQ,4BAAmB;IAClE,YAAY,QAAgB,EAAE,MAAc;QAC1C,KAAK,CACH,mBAAmB,QAAQ,cAAc,MAAM,gBAAgB;YAC7D,uEAAuE;YACvE,4EAA4E;YAC5E,mEAAmE;YACnE,8BAA8B,CACjC,CAAC;IACJ,CAAC;CACF;AAVD,kEAUC;AAWD,MAAa,+BAAgC,SAAQ,4BAAmB;IACtE,YAAY,QAAgB,EAAE,MAAc,EAAE,QAAiB;QAC7D,KAAK,CACH,mBAAmB,QAAQ,cAAc,MAAM,cAAc;YAC3D,IAAI,yCAAkB,MAAM,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,mBAAmB;YACvE,sEAAsE;YACtE,4EAA4E,CAC/E,CAAC;IACJ,CAAC;CACF;AATD,0EASC;AAaD,MAAa,8BAA+B,SAAQ,4BAAmB;IACrE,YACE,QAAgB,EAChB,MAAc,EACd,QAAqB,EACrB,OAAoB;QAEpB,KAAK,CACH,mBAAmB,QAAQ,cAAc,MAAM,yBAAyB;YACtE,IAAI,yCAAkB,eAAe,QAAQ,kBAAkB;YAC/D,6CAA6C,OAAO,gBAAgB;YACpE,6DAA6D,CAChE,CAAC;IACJ,CAAC;CACF;AAdD,wEAcC;AAQD,MAAa,yBAA0B,SAAQ,4BAAmB;IAChE,YAAY,QAAgB,EAAE,MAAc;QAC1C,KAAK,CACH,mBAAmB,QAAQ,cAAc,MAAM,cAAc;YAC3D,6EAA6E,CAChF,CAAC;IACJ,CAAC;CACF;AAPD,8DAOC;AAaD,MAAM,0BAA0B,GAAG,UAAU,CAAC;AAG9C,MAAa,sBAAuB,SAAQ,4BAAmB;IAC7D,YAAY,QAAgB;QAC1B,KAAK,CACH,mBAAmB,QAAQ,6CAA6C;YACtE,sEAAsE;YACtE,+BAA+B,CAClC,CAAC;IACJ,CAAC;CACF;AARD,wDAQC;AAED,SAAS,aAAa,CAAC,KAAc;IACnC,OAAO,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAChE,CAAC,CAAE,KAAiC;QACpC,CAAC,CAAC,SAAS,CAAC;AAChB,CAAC;AAwBD,SAAS,WAAW,CAClB,GAA4B,EAC5B,QAAgB,EAChB,MAAc;IAEd,MAAM,QAAQ,GACZ,GAAG,CAAC,yCAAkB,CAAC,KAAK,0BAA0B;QACpD,CAAC,CAAC,qBAAW,CAAC,OAAO;QACrB,CAAC,CAAC,IAAA,8CAAuB,EAAC,GAAG,CAAC,CAAC;IACnC,IAAI,QAAQ,KAAK,IAAI,EAAE,CAAC;QACtB,MAAM,IAAI,+BAA+B,CACvC,QAAQ,EACR,MAAM,EACN,GAAG,CAAC,yCAAkB,CAAC,CACxB,CAAC;IACJ,CAAC;IACD,MAAM,OAAO,GAAG,IAAA,gDAAyB,EACvC,IAAA,6CAAsB,EAAC,GAAG,CAAC,EAC3B,GAAG,EACH,IAAA,6CAAsB,EAAC,GAAG,CAAC,CAC5B,EAAE,IAAI,CAAC;IAER,IAAI,QAAQ,KAAK,SAAS,IAAI,OAAO,KAAK,SAAS,IAAI,QAAQ,KAAK,OAAO,EAAE,CAAC;QAC5E,MAAM,IAAI,8BAA8B,CACtC,QAAQ,EACR,MAAM,EACN,QAAQ,EACR,OAAO,CACR,CAAC;IACJ,CAAC;IAED,MAAM,IAAI,GAAG,QAAQ,IAAI,OAAO,CAAC;IACjC,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;QACvB,MAAM,IAAI,2BAA2B,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IAC1D,CAAC;IACD,IAAI,IAAI,KAAK,qBAAW,CAAC,YAAY,EAAE,CAAC;QACtC,MAAM,IAAI,yBAAyB,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IACxD,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AA6BD,SAAgB,2BAA2B,CACzC,MAA+B;IAE/B,MAAM,KAAK,GAAmB,EAAE,CAAC;IACjC,IAAI,IAAI,GAAG,aAAa,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;IACxC,IAAI,QAAQ,GAAG,CAAC,CAAC;IACjB,OAAO,IAAI,EAAE,CAAC;QACZ,MAAM,GAAG,GAAG,IAAA,uCAAgB,EAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;QAC1C,IAAI,CAAC,GAAG,EAAE,CAAC;YACT,MAAM,IAAI,sBAAsB,CAAC,QAAQ,CAAC,CAAC;QAC7C,CAAC;QACD,MAAM,QAAQ,GAAG,IAAA,gDAAyB,EAAC,IAAI,CAAC,CAAC;QAKjD,MAAM,WAAW,GAAG,IAAA,mDAA4B,EAAC,IAAI,CAAC,CAAC;QACvD,KAAK,CAAC,IAAI,CAAC;YACT,IAAI,EAAE,WAAW,CAAC,IAAI,EAAE,QAAQ,EAAE,GAAG,CAAC;YACtC,EAAE,EAAE,GAAG;YACP,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACjC,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACxC,CAAC,CAAC;QACH,IAAI,GAAG,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;QAClC,QAAQ,IAAI,CAAC,CAAC;IAChB,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC"}
|
|
@@ -16,11 +16,11 @@ export { RequireProvenOrgAuthority, REQUIRE_PROVEN_ORG_AUTHORITY } from './prove
|
|
|
16
16
|
export { OrgAuthoritySource, type OrgAuthorityVerdict, type OrgAuthorityCaller, type OrgAuthorityCallerFacts, resolveOrgAuthority, isOrgAuthorityProven, orgAuthorityRequiresProof, } from '../../lib/auth/org-authority';
|
|
17
17
|
export { OrgScopeProvenance, type OrgScopeWitness, type OrgScopedTokenMinter, UnprovenOrgScopeError, orgScopeFromProvenRequest, orgScopeFromOwningRow, orgScopeFromPlatformSweep, describeOrgScopeWitness, mintOrgScopedToken, type OrgScopedClaimDescriptor, orgScopedClaim, } from '../../lib/auth/org-scope-mint';
|
|
18
18
|
export { ORG_AUTHORITY_OBSERVATION_LIMIT, UNKNOWN_CLIENT_ID, type OrgAuthorityObservation, type OrgAuthorityCensus, recordUnprovenOrgAuthority, recordServiceRelayedOrgAuthority, orgAuthorityCensus, orgAuthorityRelayCensus, resetOrgAuthorityCensus, } from '../../lib/auth/org-authority-observations';
|
|
19
|
-
export { resolveActorChainFromClaims, UnclassifiableActorHopError, UnknownActorHopSubjectKindError, ContradictoryActorHopKindError, MalformedActorHopError, } from './delegation-chain';
|
|
19
|
+
export { resolveActorChainFromClaims, UnclassifiableActorHopError, UnknownActorHopSubjectKindError, ContradictoryActorHopKindError, MalformedActorHopError, OrganizationActorHopError, } from './delegation-chain';
|
|
20
20
|
export { SUBJECT_KIND_CLAIM, readDeclaredSubjectKind, UnknownTokenClassError, } from './actor-classification';
|
|
21
21
|
export { RealmTokenVerifier, type MultiRealmKeySource, type VerifiedTokenSource, } from './realm-token-verifier';
|
|
22
|
-
export { UnclassifiableForeignBearerError, UnknownDeclaredSubjectClassError, claimsWithDeclaredSubjectClass, } from './declared-subject-class';
|
|
23
|
-
export { BoundarySubjectKind, CONTEXT_VERSION_CLAIM, DELEGATION_ID_CLAIM, FOREIGN_CALLER_IDENTITY_CLAIMS, InvalidBoundaryContextError, PLATFORM_AUTHORITY_CLAIMS, SUPPORTED_CONTEXT_VERSION, UnsupportedContextVersionError, kernelSubjectKindForBoundary, } from './claim-authority';
|
|
22
|
+
export { UnclassifiableForeignBearerError, UnknownDeclaredSubjectClassError, OrganizationDelegationRequiresClaimAuthorityError, claimsWithDeclaredSubjectClass, } from './declared-subject-class';
|
|
23
|
+
export { BoundarySubjectKind, AUTHORIZED_BY_CLAIM, CONTEXT_VERSION_CLAIM, DELEGATED_CAPABILITIES_CLAIM, DELEGATED_RESOURCE_SCOPE_CLAIM, DELEGATION_ID_CLAIM, FOREIGN_CALLER_IDENTITY_CLAIMS, InvalidBoundaryContextError, PLATFORM_AUTHORITY_CLAIMS, SUPPORTED_CONTEXT_VERSION, UnsupportedContextVersionError, kernelSubjectKindForBoundary, } from './claim-authority';
|
|
24
24
|
export { PLATFORM_ROLES_CLAIM } from './boundary-context-brand';
|
|
25
25
|
export { DEFAULT_TRUSTED_ISSUER_ALGORITHMS, TRUSTED_ISSUERS_ENV_VAR, TrustedIssuerConfigError, TrustedIssuerRegistry, parseTrustedIssuersFromEnv, type TrustedIssuerEntry, } from '@xemahq/oidc-guard';
|
|
26
26
|
//# sourceMappingURL=index.d.ts.map
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/nestjs/auth/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AAC3C,OAAO,EACL,mBAAmB,EACnB,KAAK,iBAAiB,EACtB,KAAK,sBAAsB,GAC5B,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAAE,iBAAiB,EAAE,MAAM,uBAAuB,CAAC;AAC1D,OAAO,EAAE,mBAAmB,EAAE,MAAM,yBAAyB,CAAC;AAC9D,OAAO,EACL,iBAAiB,EACjB,oBAAoB,GACrB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EACL,eAAe,EACf,iBAAiB,EACjB,mBAAmB,GACpB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EACL,YAAY,EACZ,cAAc,EACd,gBAAgB,GACjB,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAAE,qBAAqB,EAAE,MAAM,6BAA6B,CAAC;AACpE,OAAO,EACL,OAAO,EACP,gBAAgB,EAChB,oBAAoB,EACpB,eAAe,EACf,oBAAoB,EACpB,gBAAgB,GACjB,MAAM,yBAAyB,CAAC;AACjC,OAAO,EAAE,YAAY,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAC;AAChE,OAAO,EACL,iBAAiB,EACjB,6BAA6B,EAC7B,KAAK,sBAAsB,GAC5B,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAAE,kBAAkB,EAAE,MAAM,wBAAwB,CAAC;AAC5D,OAAO,EACL,uBAAuB,EACvB,KAAK,8BAA8B,GACpC,MAAM,6BAA6B,CAAC;AACrC,OAAO,EACL,WAAW,EACX,aAAa,EACb,cAAc,EACd,eAAe,GAChB,MAAM,0BAA0B,CAAC;AAClC,OAAO,EAAE,yBAAyB,EAAE,4BAA4B,EAAE,MAAM,iCAAiC,CAAC;AAC1G,OAAO,EACL,kBAAkB,EAClB,KAAK,mBAAmB,EACxB,KAAK,kBAAkB,EACvB,KAAK,uBAAuB,EAC5B,mBAAmB,EACnB,oBAAoB,EACpB,yBAAyB,GAC1B,MAAM,8BAA8B,CAAC;AACtC,OAAO,EACL,kBAAkB,EAClB,KAAK,eAAe,EACpB,KAAK,oBAAoB,EACzB,qBAAqB,EACrB,yBAAyB,EACzB,qBAAqB,EACrB,yBAAyB,EACzB,uBAAuB,EACvB,kBAAkB,EAClB,KAAK,wBAAwB,EAC7B,cAAc,GACf,MAAM,+BAA+B,CAAC;AACvC,OAAO,EACL,+BAA+B,EAC/B,iBAAiB,EACjB,KAAK,uBAAuB,EAC5B,KAAK,kBAAkB,EACvB,0BAA0B,EAC1B,gCAAgC,EAChC,kBAAkB,EAClB,uBAAuB,EACvB,uBAAuB,GACxB,MAAM,2CAA2C,CAAC;AACnD,OAAO,EACL,2BAA2B,EAC3B,2BAA2B,EAC3B,+BAA+B,EAC/B,8BAA8B,EAC9B,sBAAsB,
|
|
1
|
+
{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/nestjs/auth/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AAC3C,OAAO,EACL,mBAAmB,EACnB,KAAK,iBAAiB,EACtB,KAAK,sBAAsB,GAC5B,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAAE,iBAAiB,EAAE,MAAM,uBAAuB,CAAC;AAC1D,OAAO,EAAE,mBAAmB,EAAE,MAAM,yBAAyB,CAAC;AAC9D,OAAO,EACL,iBAAiB,EACjB,oBAAoB,GACrB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EACL,eAAe,EACf,iBAAiB,EACjB,mBAAmB,GACpB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EACL,YAAY,EACZ,cAAc,EACd,gBAAgB,GACjB,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAAE,qBAAqB,EAAE,MAAM,6BAA6B,CAAC;AACpE,OAAO,EACL,OAAO,EACP,gBAAgB,EAChB,oBAAoB,EACpB,eAAe,EACf,oBAAoB,EACpB,gBAAgB,GACjB,MAAM,yBAAyB,CAAC;AACjC,OAAO,EAAE,YAAY,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAC;AAChE,OAAO,EACL,iBAAiB,EACjB,6BAA6B,EAC7B,KAAK,sBAAsB,GAC5B,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAAE,kBAAkB,EAAE,MAAM,wBAAwB,CAAC;AAC5D,OAAO,EACL,uBAAuB,EACvB,KAAK,8BAA8B,GACpC,MAAM,6BAA6B,CAAC;AACrC,OAAO,EACL,WAAW,EACX,aAAa,EACb,cAAc,EACd,eAAe,GAChB,MAAM,0BAA0B,CAAC;AAClC,OAAO,EAAE,yBAAyB,EAAE,4BAA4B,EAAE,MAAM,iCAAiC,CAAC;AAC1G,OAAO,EACL,kBAAkB,EAClB,KAAK,mBAAmB,EACxB,KAAK,kBAAkB,EACvB,KAAK,uBAAuB,EAC5B,mBAAmB,EACnB,oBAAoB,EACpB,yBAAyB,GAC1B,MAAM,8BAA8B,CAAC;AACtC,OAAO,EACL,kBAAkB,EAClB,KAAK,eAAe,EACpB,KAAK,oBAAoB,EACzB,qBAAqB,EACrB,yBAAyB,EACzB,qBAAqB,EACrB,yBAAyB,EACzB,uBAAuB,EACvB,kBAAkB,EAClB,KAAK,wBAAwB,EAC7B,cAAc,GACf,MAAM,+BAA+B,CAAC;AACvC,OAAO,EACL,+BAA+B,EAC/B,iBAAiB,EACjB,KAAK,uBAAuB,EAC5B,KAAK,kBAAkB,EACvB,0BAA0B,EAC1B,gCAAgC,EAChC,kBAAkB,EAClB,uBAAuB,EACvB,uBAAuB,GACxB,MAAM,2CAA2C,CAAC;AACnD,OAAO,EACL,2BAA2B,EAC3B,2BAA2B,EAC3B,+BAA+B,EAC/B,8BAA8B,EAC9B,sBAAsB,EACtB,yBAAyB,GAC1B,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EACL,kBAAkB,EAClB,uBAAuB,EACvB,sBAAsB,GACvB,MAAM,wBAAwB,CAAC;AAChC,OAAO,EACL,kBAAkB,EAClB,KAAK,mBAAmB,EACxB,KAAK,mBAAmB,GACzB,MAAM,wBAAwB,CAAC;AAChC,OAAO,EACL,gCAAgC,EAChC,gCAAgC,EAChC,iDAAiD,EACjD,8BAA8B,GAC/B,MAAM,0BAA0B,CAAC;AAClC,OAAO,EACL,mBAAmB,EACnB,mBAAmB,EACnB,qBAAqB,EACrB,4BAA4B,EAC5B,8BAA8B,EAC9B,mBAAmB,EACnB,8BAA8B,EAC9B,2BAA2B,EAC3B,yBAAyB,EACzB,yBAAyB,EACzB,8BAA8B,EAC9B,4BAA4B,GAC7B,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EAAE,oBAAoB,EAAE,MAAM,0BAA0B,CAAC;AAOhE,OAAO,EACL,iCAAiC,EACjC,uBAAuB,EACvB,wBAAwB,EACxB,qBAAqB,EACrB,0BAA0B,EAC1B,KAAK,kBAAkB,GACxB,MAAM,oBAAoB,CAAC"}
|
|
@@ -1,7 +1,7 @@
|
|
|
1
1
|
"use strict";
|
|
2
2
|
Object.defineProperty(exports, "__esModule", { value: true });
|
|
3
3
|
exports.resetOrgAuthorityCensus = exports.orgAuthorityRelayCensus = exports.orgAuthorityCensus = exports.recordServiceRelayedOrgAuthority = exports.recordUnprovenOrgAuthority = exports.UNKNOWN_CLIENT_ID = exports.ORG_AUTHORITY_OBSERVATION_LIMIT = exports.orgScopedClaim = exports.mintOrgScopedToken = exports.describeOrgScopeWitness = exports.orgScopeFromPlatformSweep = exports.orgScopeFromOwningRow = exports.orgScopeFromProvenRequest = exports.UnprovenOrgScopeError = exports.OrgScopeProvenance = exports.orgAuthorityRequiresProof = exports.isOrgAuthorityProven = exports.resolveOrgAuthority = exports.OrgAuthoritySource = exports.REQUIRE_PROVEN_ORG_AUTHORITY = exports.RequireProvenOrgAuthority = exports.resolveOrgClaim = exports.ORG_CLAIM_KEYS = exports.OrgHeaderName = exports.OrgClaimKey = exports.configureAuthMiddleware = exports.PlatformAdminGuard = exports.resolveOrgAuthorityInstrument = exports.holdsOrgAuthority = exports.hasPlatformRole = exports.PlatformRole = exports.orgRoleSatisfies = exports.resolveOrgRoleForOrg = exports.resolveOrgRoles = exports.ORG_ROLES_CLAIM_KEYS = exports.OrgRolesClaimKey = exports.OrgRole = exports.ServiceOrOrgRoleGuard = exports.REQUIRE_ORG_ROLE = exports.RequireOrgRole = exports.OrgRoleGuard = exports.REQUIRE_TOKEN_CLASS = exports.RequireTokenClass = exports.TokenClassGuard = exports.isDirectServiceActor = exports.ServiceActorGuard = exports.InternalCallerGuard = exports.ServiceTokenGuard = exports.AUTH_MODULE_OPTIONS = exports.AuthModule = void 0;
|
|
4
|
-
exports.parseTrustedIssuersFromEnv = exports.TrustedIssuerRegistry = exports.TrustedIssuerConfigError = exports.TRUSTED_ISSUERS_ENV_VAR = exports.DEFAULT_TRUSTED_ISSUER_ALGORITHMS = exports.PLATFORM_ROLES_CLAIM = exports.kernelSubjectKindForBoundary = exports.UnsupportedContextVersionError = exports.SUPPORTED_CONTEXT_VERSION = exports.PLATFORM_AUTHORITY_CLAIMS = exports.InvalidBoundaryContextError = exports.FOREIGN_CALLER_IDENTITY_CLAIMS = exports.DELEGATION_ID_CLAIM = exports.CONTEXT_VERSION_CLAIM = exports.BoundarySubjectKind = exports.claimsWithDeclaredSubjectClass = exports.UnknownDeclaredSubjectClassError = exports.UnclassifiableForeignBearerError = exports.RealmTokenVerifier = exports.UnknownTokenClassError = exports.readDeclaredSubjectKind = exports.SUBJECT_KIND_CLAIM = exports.MalformedActorHopError = exports.ContradictoryActorHopKindError = exports.UnknownActorHopSubjectKindError = exports.UnclassifiableActorHopError = exports.resolveActorChainFromClaims = void 0;
|
|
4
|
+
exports.parseTrustedIssuersFromEnv = exports.TrustedIssuerRegistry = exports.TrustedIssuerConfigError = exports.TRUSTED_ISSUERS_ENV_VAR = exports.DEFAULT_TRUSTED_ISSUER_ALGORITHMS = exports.PLATFORM_ROLES_CLAIM = exports.kernelSubjectKindForBoundary = exports.UnsupportedContextVersionError = exports.SUPPORTED_CONTEXT_VERSION = exports.PLATFORM_AUTHORITY_CLAIMS = exports.InvalidBoundaryContextError = exports.FOREIGN_CALLER_IDENTITY_CLAIMS = exports.DELEGATION_ID_CLAIM = exports.DELEGATED_RESOURCE_SCOPE_CLAIM = exports.DELEGATED_CAPABILITIES_CLAIM = exports.CONTEXT_VERSION_CLAIM = exports.AUTHORIZED_BY_CLAIM = exports.BoundarySubjectKind = exports.claimsWithDeclaredSubjectClass = exports.OrganizationDelegationRequiresClaimAuthorityError = exports.UnknownDeclaredSubjectClassError = exports.UnclassifiableForeignBearerError = exports.RealmTokenVerifier = exports.UnknownTokenClassError = exports.readDeclaredSubjectKind = exports.SUBJECT_KIND_CLAIM = exports.OrganizationActorHopError = exports.MalformedActorHopError = exports.ContradictoryActorHopKindError = exports.UnknownActorHopSubjectKindError = exports.UnclassifiableActorHopError = exports.resolveActorChainFromClaims = void 0;
|
|
5
5
|
var auth_module_1 = require("./auth.module");
|
|
6
6
|
Object.defineProperty(exports, "AuthModule", { enumerable: true, get: function () { return auth_module_1.AuthModule; } });
|
|
7
7
|
var auth_module_options_1 = require("./auth-module-options");
|
|
@@ -76,6 +76,7 @@ Object.defineProperty(exports, "UnclassifiableActorHopError", { enumerable: true
|
|
|
76
76
|
Object.defineProperty(exports, "UnknownActorHopSubjectKindError", { enumerable: true, get: function () { return delegation_chain_1.UnknownActorHopSubjectKindError; } });
|
|
77
77
|
Object.defineProperty(exports, "ContradictoryActorHopKindError", { enumerable: true, get: function () { return delegation_chain_1.ContradictoryActorHopKindError; } });
|
|
78
78
|
Object.defineProperty(exports, "MalformedActorHopError", { enumerable: true, get: function () { return delegation_chain_1.MalformedActorHopError; } });
|
|
79
|
+
Object.defineProperty(exports, "OrganizationActorHopError", { enumerable: true, get: function () { return delegation_chain_1.OrganizationActorHopError; } });
|
|
79
80
|
var actor_classification_1 = require("./actor-classification");
|
|
80
81
|
Object.defineProperty(exports, "SUBJECT_KIND_CLAIM", { enumerable: true, get: function () { return actor_classification_1.SUBJECT_KIND_CLAIM; } });
|
|
81
82
|
Object.defineProperty(exports, "readDeclaredSubjectKind", { enumerable: true, get: function () { return actor_classification_1.readDeclaredSubjectKind; } });
|
|
@@ -85,10 +86,14 @@ Object.defineProperty(exports, "RealmTokenVerifier", { enumerable: true, get: fu
|
|
|
85
86
|
var declared_subject_class_1 = require("./declared-subject-class");
|
|
86
87
|
Object.defineProperty(exports, "UnclassifiableForeignBearerError", { enumerable: true, get: function () { return declared_subject_class_1.UnclassifiableForeignBearerError; } });
|
|
87
88
|
Object.defineProperty(exports, "UnknownDeclaredSubjectClassError", { enumerable: true, get: function () { return declared_subject_class_1.UnknownDeclaredSubjectClassError; } });
|
|
89
|
+
Object.defineProperty(exports, "OrganizationDelegationRequiresClaimAuthorityError", { enumerable: true, get: function () { return declared_subject_class_1.OrganizationDelegationRequiresClaimAuthorityError; } });
|
|
88
90
|
Object.defineProperty(exports, "claimsWithDeclaredSubjectClass", { enumerable: true, get: function () { return declared_subject_class_1.claimsWithDeclaredSubjectClass; } });
|
|
89
91
|
var claim_authority_1 = require("./claim-authority");
|
|
90
92
|
Object.defineProperty(exports, "BoundarySubjectKind", { enumerable: true, get: function () { return claim_authority_1.BoundarySubjectKind; } });
|
|
93
|
+
Object.defineProperty(exports, "AUTHORIZED_BY_CLAIM", { enumerable: true, get: function () { return claim_authority_1.AUTHORIZED_BY_CLAIM; } });
|
|
91
94
|
Object.defineProperty(exports, "CONTEXT_VERSION_CLAIM", { enumerable: true, get: function () { return claim_authority_1.CONTEXT_VERSION_CLAIM; } });
|
|
95
|
+
Object.defineProperty(exports, "DELEGATED_CAPABILITIES_CLAIM", { enumerable: true, get: function () { return claim_authority_1.DELEGATED_CAPABILITIES_CLAIM; } });
|
|
96
|
+
Object.defineProperty(exports, "DELEGATED_RESOURCE_SCOPE_CLAIM", { enumerable: true, get: function () { return claim_authority_1.DELEGATED_RESOURCE_SCOPE_CLAIM; } });
|
|
92
97
|
Object.defineProperty(exports, "DELEGATION_ID_CLAIM", { enumerable: true, get: function () { return claim_authority_1.DELEGATION_ID_CLAIM; } });
|
|
93
98
|
Object.defineProperty(exports, "FOREIGN_CALLER_IDENTITY_CLAIMS", { enumerable: true, get: function () { return claim_authority_1.FOREIGN_CALLER_IDENTITY_CLAIMS; } });
|
|
94
99
|
Object.defineProperty(exports, "InvalidBoundaryContextError", { enumerable: true, get: function () { return claim_authority_1.InvalidBoundaryContextError; } });
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/nestjs/auth/index.ts"],"names":[],"mappings":";;;;AAAA,6CAA2C;AAAlC,yGAAA,UAAU,OAAA;AACnB,6DAI+B;AAH7B,0HAAA,mBAAmB,OAAA;AAIrB,6DAA0D;AAAjD,wHAAA,iBAAiB,OAAA;AAC1B,iEAA8D;AAArD,4HAAA,mBAAmB,OAAA;AAC5B,6DAG+B;AAF7B,wHAAA,iBAAiB,OAAA;AACjB,2HAAA,oBAAoB,OAAA;AAEtB,yDAI6B;AAH3B,oHAAA,eAAe,OAAA;AACf,sHAAA,iBAAiB,OAAA;AACjB,wHAAA,mBAAmB,OAAA;AAErB,mDAI0B;AAHxB,8GAAA,YAAY,OAAA;AACZ,gHAAA,cAAc,OAAA;AACd,kHAAA,gBAAgB,OAAA;AAElB,yEAAoE;AAA3D,kIAAA,qBAAqB,OAAA;AAC9B,oDAOiC;AAN/B,mGAAA,OAAO,OAAA;AACP,4GAAA,gBAAgB,OAAA;AAChB,gHAAA,oBAAoB,OAAA;AACpB,2GAAA,eAAe,OAAA;AACf,gHAAA,oBAAoB,OAAA;AACpB,4GAAA,gBAAgB,OAAA;AAElB,iDAAgE;AAAvD,6GAAA,YAAY,OAAA;AAAE,gHAAA,eAAe,OAAA;AACtC,6DAI+B;AAH7B,wHAAA,iBAAiB,OAAA;AACjB,oIAAA,6BAA6B,OAAA;AAG/B,+DAA4D;AAAnD,0HAAA,kBAAkB,OAAA;AAC3B,yEAGqC;AAFnC,oIAAA,uBAAuB,OAAA;AAGzB,sDAKkC;AAJhC,wGAAA,WAAW,OAAA;AACX,0GAAA,aAAa,OAAA;AACb,2GAAA,cAAc,OAAA;AACd,4GAAA,eAAe,OAAA;AAEjB,iFAA0G;AAAjG,0IAAA,yBAAyB,OAAA;AAAE,6IAAA,4BAA4B,OAAA;AAChE,8DAQsC;AAPpC,mHAAA,kBAAkB,OAAA;AAIlB,oHAAA,mBAAmB,OAAA;AACnB,qHAAA,oBAAoB,OAAA;AACpB,0HAAA,yBAAyB,OAAA;AAE3B,gEAYuC;AAXrC,oHAAA,kBAAkB,OAAA;AAGlB,uHAAA,qBAAqB,OAAA;AACrB,2HAAA,yBAAyB,OAAA;AACzB,uHAAA,qBAAqB,OAAA;AACrB,2HAAA,yBAAyB,OAAA;AACzB,yHAAA,uBAAuB,OAAA;AACvB,oHAAA,kBAAkB,OAAA;AAElB,gHAAA,cAAc,OAAA;AAEhB,wFAUmD;AATjD,6IAAA,+BAA+B,OAAA;AAC/B,+HAAA,iBAAiB,OAAA;AAGjB,wIAAA,0BAA0B,OAAA;AAC1B,8IAAA,gCAAgC,OAAA;AAChC,gIAAA,kBAAkB,OAAA;AAClB,qIAAA,uBAAuB,OAAA;AACvB,qIAAA,uBAAuB,OAAA;AAEzB,
|
|
1
|
+
{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/nestjs/auth/index.ts"],"names":[],"mappings":";;;;AAAA,6CAA2C;AAAlC,yGAAA,UAAU,OAAA;AACnB,6DAI+B;AAH7B,0HAAA,mBAAmB,OAAA;AAIrB,6DAA0D;AAAjD,wHAAA,iBAAiB,OAAA;AAC1B,iEAA8D;AAArD,4HAAA,mBAAmB,OAAA;AAC5B,6DAG+B;AAF7B,wHAAA,iBAAiB,OAAA;AACjB,2HAAA,oBAAoB,OAAA;AAEtB,yDAI6B;AAH3B,oHAAA,eAAe,OAAA;AACf,sHAAA,iBAAiB,OAAA;AACjB,wHAAA,mBAAmB,OAAA;AAErB,mDAI0B;AAHxB,8GAAA,YAAY,OAAA;AACZ,gHAAA,cAAc,OAAA;AACd,kHAAA,gBAAgB,OAAA;AAElB,yEAAoE;AAA3D,kIAAA,qBAAqB,OAAA;AAC9B,oDAOiC;AAN/B,mGAAA,OAAO,OAAA;AACP,4GAAA,gBAAgB,OAAA;AAChB,gHAAA,oBAAoB,OAAA;AACpB,2GAAA,eAAe,OAAA;AACf,gHAAA,oBAAoB,OAAA;AACpB,4GAAA,gBAAgB,OAAA;AAElB,iDAAgE;AAAvD,6GAAA,YAAY,OAAA;AAAE,gHAAA,eAAe,OAAA;AACtC,6DAI+B;AAH7B,wHAAA,iBAAiB,OAAA;AACjB,oIAAA,6BAA6B,OAAA;AAG/B,+DAA4D;AAAnD,0HAAA,kBAAkB,OAAA;AAC3B,yEAGqC;AAFnC,oIAAA,uBAAuB,OAAA;AAGzB,sDAKkC;AAJhC,wGAAA,WAAW,OAAA;AACX,0GAAA,aAAa,OAAA;AACb,2GAAA,cAAc,OAAA;AACd,4GAAA,eAAe,OAAA;AAEjB,iFAA0G;AAAjG,0IAAA,yBAAyB,OAAA;AAAE,6IAAA,4BAA4B,OAAA;AAChE,8DAQsC;AAPpC,mHAAA,kBAAkB,OAAA;AAIlB,oHAAA,mBAAmB,OAAA;AACnB,qHAAA,oBAAoB,OAAA;AACpB,0HAAA,yBAAyB,OAAA;AAE3B,gEAYuC;AAXrC,oHAAA,kBAAkB,OAAA;AAGlB,uHAAA,qBAAqB,OAAA;AACrB,2HAAA,yBAAyB,OAAA;AACzB,uHAAA,qBAAqB,OAAA;AACrB,2HAAA,yBAAyB,OAAA;AACzB,yHAAA,uBAAuB,OAAA;AACvB,oHAAA,kBAAkB,OAAA;AAElB,gHAAA,cAAc,OAAA;AAEhB,wFAUmD;AATjD,6IAAA,+BAA+B,OAAA;AAC/B,+HAAA,iBAAiB,OAAA;AAGjB,wIAAA,0BAA0B,OAAA;AAC1B,8IAAA,gCAAgC,OAAA;AAChC,gIAAA,kBAAkB,OAAA;AAClB,qIAAA,uBAAuB,OAAA;AACvB,qIAAA,uBAAuB,OAAA;AAEzB,uDAO4B;AAN1B,+HAAA,2BAA2B,OAAA;AAC3B,+HAAA,2BAA2B,OAAA;AAC3B,mIAAA,+BAA+B,OAAA;AAC/B,kIAAA,8BAA8B,OAAA;AAC9B,0HAAA,sBAAsB,OAAA;AACtB,6HAAA,yBAAyB,OAAA;AAE3B,+DAIgC;AAH9B,0HAAA,kBAAkB,OAAA;AAClB,+HAAA,uBAAuB,OAAA;AACvB,8HAAA,sBAAsB,OAAA;AAExB,+DAIgC;AAH9B,0HAAA,kBAAkB,OAAA;AAIpB,mEAKkC;AAJhC,0IAAA,gCAAgC,OAAA;AAChC,0IAAA,gCAAgC,OAAA;AAChC,2JAAA,iDAAiD,OAAA;AACjD,wIAAA,8BAA8B,OAAA;AAEhC,qDAa2B;AAZzB,sHAAA,mBAAmB,OAAA;AACnB,sHAAA,mBAAmB,OAAA;AACnB,wHAAA,qBAAqB,OAAA;AACrB,+HAAA,4BAA4B,OAAA;AAC5B,iIAAA,8BAA8B,OAAA;AAC9B,sHAAA,mBAAmB,OAAA;AACnB,iIAAA,8BAA8B,OAAA;AAC9B,8HAAA,2BAA2B,OAAA;AAC3B,4HAAA,yBAAyB,OAAA;AACzB,4HAAA,yBAAyB,OAAA;AACzB,iIAAA,8BAA8B,OAAA;AAC9B,+HAAA,4BAA4B,OAAA;AAE9B,mEAAgE;AAAvD,8HAAA,oBAAoB,OAAA;AAO7B,iDAO4B;AAN1B,+HAAA,iCAAiC,OAAA;AACjC,qHAAA,uBAAuB,OAAA;AACvB,sHAAA,wBAAwB,OAAA;AACxB,mHAAA,qBAAqB,OAAA;AACrB,wHAAA,0BAA0B,OAAA"}
|
package/dist/nestjs/index.d.ts
CHANGED
|
@@ -32,7 +32,7 @@ export { RolesGuard } from './roles.guard';
|
|
|
32
32
|
export { GlobalExceptionFilter, sendProblemResponse, } from './global-exception.filter';
|
|
33
33
|
export { problemDetailsFor, problemFieldIssuesFromZod, refusalFrom, titleForCode, isZodError, type Refusal, } from './refusal';
|
|
34
34
|
export { DroppedProblemExtensionReason, sanitizeProblemExtensions, describeDroppedProblemExtensions, type DroppedProblemExtension, type SanitizedProblemExtensions, } from './problem-extensions';
|
|
35
|
-
export { AuthModule, AUTH_MODULE_OPTIONS, type AuthModuleOptions, type AuthModuleAsyncOptions, RealmTokenVerifier, type MultiRealmKeySource, type VerifiedTokenSource, claimsWithDeclaredSubjectClass, UnknownDeclaredSubjectClassError, BoundarySubjectKind, CONTEXT_VERSION_CLAIM, DELEGATION_ID_CLAIM, FOREIGN_CALLER_IDENTITY_CLAIMS, InvalidBoundaryContextError, PLATFORM_AUTHORITY_CLAIMS, PLATFORM_ROLES_CLAIM, SUPPORTED_CONTEXT_VERSION, UnsupportedContextVersionError, kernelSubjectKindForBoundary, ServiceTokenGuard, InternalCallerGuard, ServiceActorGuard, isDirectServiceActor, TokenClassGuard, RequireTokenClass, REQUIRE_TOKEN_CLASS, OrgRoleGuard, RequireOrgRole, REQUIRE_ORG_ROLE, ServiceOrOrgRoleGuard, OrgRolesClaimKey, ORG_ROLES_CLAIM_KEYS, resolveOrgRoles, resolveOrgRoleForOrg, orgRoleSatisfies, PlatformRole, hasPlatformRole, PlatformAdminGuard, holdsOrgAuthority, resolveOrgAuthorityInstrument, type OrgAuthorityInstrument, configureAuthMiddleware, type ConfigureAuthMiddlewareOptions, OrgClaimKey, OrgHeaderName, ORG_CLAIM_KEYS, resolveOrgClaim, RequireProvenOrgAuthority, REQUIRE_PROVEN_ORG_AUTHORITY, OrgAuthoritySource, type OrgAuthorityVerdict, type OrgAuthorityCallerFacts, resolveOrgAuthority, isOrgAuthorityProven, orgAuthorityRequiresProof, ORG_AUTHORITY_OBSERVATION_LIMIT, UNKNOWN_CLIENT_ID, type OrgAuthorityObservation, type OrgAuthorityCensus, recordUnprovenOrgAuthority, orgAuthorityCensus, resetOrgAuthorityCensus, OrgScopeProvenance, type OrgScopeWitness, type OrgScopedTokenMinter, UnprovenOrgScopeError, orgScopeFromProvenRequest, orgScopeFromOwningRow, orgScopeFromPlatformSweep, describeOrgScopeWitness, mintOrgScopedToken, type OrgScopedClaimDescriptor, orgScopedClaim, } from './auth';
|
|
35
|
+
export { AuthModule, AUTH_MODULE_OPTIONS, type AuthModuleOptions, type AuthModuleAsyncOptions, RealmTokenVerifier, type MultiRealmKeySource, type VerifiedTokenSource, claimsWithDeclaredSubjectClass, UnknownDeclaredSubjectClassError, OrganizationDelegationRequiresClaimAuthorityError, BoundarySubjectKind, AUTHORIZED_BY_CLAIM, CONTEXT_VERSION_CLAIM, DELEGATED_CAPABILITIES_CLAIM, DELEGATED_RESOURCE_SCOPE_CLAIM, DELEGATION_ID_CLAIM, FOREIGN_CALLER_IDENTITY_CLAIMS, InvalidBoundaryContextError, PLATFORM_AUTHORITY_CLAIMS, PLATFORM_ROLES_CLAIM, SUPPORTED_CONTEXT_VERSION, UnsupportedContextVersionError, kernelSubjectKindForBoundary, ServiceTokenGuard, InternalCallerGuard, ServiceActorGuard, isDirectServiceActor, TokenClassGuard, RequireTokenClass, REQUIRE_TOKEN_CLASS, OrgRoleGuard, RequireOrgRole, REQUIRE_ORG_ROLE, ServiceOrOrgRoleGuard, OrgRolesClaimKey, ORG_ROLES_CLAIM_KEYS, resolveOrgRoles, resolveOrgRoleForOrg, orgRoleSatisfies, PlatformRole, hasPlatformRole, PlatformAdminGuard, holdsOrgAuthority, resolveOrgAuthorityInstrument, type OrgAuthorityInstrument, configureAuthMiddleware, type ConfigureAuthMiddlewareOptions, OrgClaimKey, OrgHeaderName, ORG_CLAIM_KEYS, resolveOrgClaim, RequireProvenOrgAuthority, REQUIRE_PROVEN_ORG_AUTHORITY, OrgAuthoritySource, type OrgAuthorityVerdict, type OrgAuthorityCallerFacts, resolveOrgAuthority, isOrgAuthorityProven, orgAuthorityRequiresProof, ORG_AUTHORITY_OBSERVATION_LIMIT, UNKNOWN_CLIENT_ID, type OrgAuthorityObservation, type OrgAuthorityCensus, recordUnprovenOrgAuthority, orgAuthorityCensus, resetOrgAuthorityCensus, OrgScopeProvenance, type OrgScopeWitness, type OrgScopedTokenMinter, UnprovenOrgScopeError, orgScopeFromProvenRequest, orgScopeFromOwningRow, orgScopeFromPlatformSweep, describeOrgScopeWitness, mintOrgScopedToken, type OrgScopedClaimDescriptor, orgScopedClaim, } from './auth';
|
|
36
36
|
export { ConnectorWebhookEnvelopeDto, ConnectorEnvelopePipe, ApiConnectorEnvelope, type ApiConnectorEnvelopeOptions, type ConnectorEnvelopeVariant, } from './connector-webhooks';
|
|
37
37
|
export { type IdempotencyService, type IdempotencyOutcome, IDEMPOTENCY_RECORD_MODEL, DataStoreIdempotencyService, IDEMPOTENCY_DATA_STORE_CLIENT, type IdempotencyDataStoreClient, type IdempotencyDataStoreDelegate, IDEMPOTENCY_SERVICE, } from './idempotency';
|
|
38
38
|
export { RedactionService, RedactionInterceptor, RedactResponse, REDACT_RESPONSE_KEY, } from './redaction';
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/nestjs/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,wBAAwB,EACxB,KAAK,yBAAyB,GAC/B,MAAM,gBAAgB,CAAC;AAQxB,OAAO,EACL,qBAAqB,EACrB,KAAK,gBAAgB,GACtB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAAE,aAAa,EAAE,kBAAkB,EAAE,MAAM,eAAe,CAAC;AAClE,OAAO,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AACnD,OAAO,EAAE,2BAA2B,EAAE,MAAM,iCAAiC,CAAC;AAC9E,OAAO,EAAE,wBAAwB,EAAE,MAAM,8BAA8B,CAAC;AACxE,OAAO,EACL,yBAAyB,EACzB,uBAAuB,EACvB,YAAY,EAKZ,yBAAyB,EAGzB,sBAAsB,EACtB,sBAAsB,EACtB,sBAAsB,EAGtB,yBAAyB,EAGzB,4BAA4B,EAG5B,kBAAkB,EAClB,uBAAuB,EACvB,gBAAgB,EAChB,KAAK,mBAAmB,GACzB,MAAM,6BAA6B,CAAC;AAKrC,OAAO,EACL,2BAA2B,EAC3B,2BAA2B,EAC3B,+BAA+B,EAC/B,8BAA8B,EAC9B,sBAAsB,GACvB,MAAM,yBAAyB,CAAC;AAIjC,OAAO,EACL,iCAAiC,EACjC,uBAAuB,EACvB,wBAAwB,EACxB,qBAAqB,EACrB,0BAA0B,EAC1B,KAAK,kBAAkB,GACxB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAAE,2BAA2B,EAAE,MAAM,kCAAkC,CAAC;AAC/E,OAAO,EAAE,iBAAiB,EAAE,oBAAoB,EAAE,MAAM,uBAAuB,CAAC;AAChF,OAAO,EACL,oBAAoB,EACpB,eAAe,EACf,oBAAoB,EACpB,sBAAsB,EACtB,uBAAuB,EACvB,oBAAoB,EACpB,iBAAiB,EACjB,kBAAkB,GACnB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EACL,2BAA2B,EAC3B,KAAK,wBAAwB,GAC9B,MAAM,yBAAyB,CAAC;AACjC,OAAO,EACL,sBAAsB,EACtB,iCAAiC,EACjC,6BAA6B,EAC7B,KAAK,mBAAmB,EACxB,KAAK,gCAAgC,EACrC,KAAK,6BAA6B,EAClC,KAAK,wBAAwB,GAC9B,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EACL,oBAAoB,EAIpB,gCAAgC,GACjC,MAAM,0BAA0B,CAAC;AAClC,OAAO,EACL,OAAO,EACP,gBAAgB,EAChB,oBAAoB,GACrB,MAAM,4BAA4B,CAAC;AAIpC,OAAO,EACL,YAAY,EACZ,qBAAqB,EACrB,sBAAsB,EACtB,iBAAiB,EACjB,4BAA4B,EAC5B,iCAAiC,EACjC,sBAAsB,EACtB,KAAK,gBAAgB,EACrB,KAAK,iBAAiB,EACtB,KAAK,oBAAoB,EACzB,KAAK,GAAG,EACR,KAAK,iBAAiB,EACtB,KAAK,gBAAgB,GACtB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AAG3D,OAAO,EACL,sBAAsB,EACtB,YAAY,EACZ,gBAAgB,EAChB,sBAAsB,EACtB,aAAa,GACd,MAAM,uBAAuB,CAAC;AAK/B,OAAO,EACL,8BAA8B,EAC9B,0BAA0B,GAC3B,MAAM,yBAAyB,CAAC;AACjC,OAAO,EAAE,WAAW,EAAE,gBAAgB,EAAE,MAAM,0BAA0B,CAAC;AACzE,OAAO,EAAE,gBAAgB,EAAE,MAAM,sBAAsB,CAAC;AACxD,OAAO,EACL,0BAA0B,EAC1B,wBAAwB,EACxB,KAAK,iBAAiB,GACvB,MAAM,2BAA2B,CAAC;AACnC,OAAO,EAAE,oBAAoB,EAAE,MAAM,2BAA2B,CAAC;AACjE,OAAO,EAAE,GAAG,EAAE,MAAM,iBAAiB,CAAC;AACtC,OAAO,EACL,kBAAkB,EAClB,cAAc,EACd,oBAAoB,EACpB,wBAAwB,EACxB,oBAAoB,EACpB,mBAAmB,EACnB,eAAe,EACf,sBAAsB,EACtB,wBAAwB,EACxB,oBAAoB,EACpB,4BAA4B,GAC7B,MAAM,cAAc,CAAC;AACtB,OAAO,EAAE,cAAc,EAAE,KAAK,YAAY,EAAE,MAAM,oBAAoB,CAAC;AACvE,OAAO,EACL,mBAAmB,EACnB,UAAU,EACV,UAAU,EACV,aAAa,GACd,MAAM,yBAAyB,CAAC;AACjC,OAAO,EACL,aAAa,EACb,qBAAqB,EACrB,SAAS,GACV,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,MAAM,mBAAmB,CAAC;AACrD,OAAO,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AAC3C,OAAO,EACL,qBAAqB,EAIrB,mBAAmB,GACpB,MAAM,2BAA2B,CAAC;AAMnC,OAAO,EACL,iBAAiB,EACjB,yBAAyB,EACzB,WAAW,EACX,YAAY,EACZ,UAAU,EACV,KAAK,OAAO,GACb,MAAM,WAAW,CAAC;AAGnB,OAAO,EACL,6BAA6B,EAC7B,yBAAyB,EACzB,gCAAgC,EAChC,KAAK,uBAAuB,EAC5B,KAAK,0BAA0B,GAChC,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EACL,UAAU,EACV,mBAAmB,EACnB,KAAK,iBAAiB,EACtB,KAAK,sBAAsB,EAQ3B,kBAAkB,EAClB,KAAK,mBAAmB,EACxB,KAAK,mBAAmB,EAKxB,8BAA8B,EAC9B,gCAAgC,EAChC,mBAAmB,EACnB,qBAAqB,EACrB,mBAAmB,EACnB,8BAA8B,EAC9B,2BAA2B,EAC3B,yBAAyB,EACzB,oBAAoB,EACpB,yBAAyB,EACzB,8BAA8B,EAC9B,4BAA4B,EAC5B,iBAAiB,EACjB,mBAAmB,EACnB,iBAAiB,EACjB,oBAAoB,EAKpB,eAAe,EACf,iBAAiB,EACjB,mBAAmB,EAGnB,YAAY,EACZ,cAAc,EACd,gBAAgB,EAGhB,qBAAqB,EACrB,gBAAgB,EAChB,oBAAoB,EACpB,eAAe,EACf,oBAAoB,EACpB,gBAAgB,EAIhB,YAAY,EACZ,eAAe,EACf,kBAAkB,EAKlB,iBAAiB,EAKjB,6BAA6B,EAC7B,KAAK,sBAAsB,EAC3B,uBAAuB,EACvB,KAAK,8BAA8B,EAKnC,WAAW,EACX,aAAa,EACb,cAAc,EACd,eAAe,EAIf,yBAAyB,EACzB,4BAA4B,EAQ5B,kBAAkB,EAClB,KAAK,mBAAmB,EACxB,KAAK,uBAAuB,EAC5B,mBAAmB,EACnB,oBAAoB,EACpB,yBAAyB,EACzB,+BAA+B,EAC/B,iBAAiB,EACjB,KAAK,uBAAuB,EAC5B,KAAK,kBAAkB,EACvB,0BAA0B,EAC1B,kBAAkB,EAClB,uBAAuB,EAMvB,kBAAkB,EAClB,KAAK,eAAe,EACpB,KAAK,oBAAoB,EACzB,qBAAqB,EACrB,yBAAyB,EACzB,qBAAqB,EACrB,yBAAyB,EACzB,uBAAuB,EACvB,kBAAkB,EAClB,KAAK,wBAAwB,EAC7B,cAAc,GACf,MAAM,QAAQ,CAAC;AAChB,OAAO,EACL,2BAA2B,EAC3B,qBAAqB,EACrB,oBAAoB,EACpB,KAAK,2BAA2B,EAChC,KAAK,wBAAwB,GAC9B,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EACL,KAAK,kBAAkB,EACvB,KAAK,kBAAkB,EACvB,wBAAwB,EACxB,2BAA2B,EAC3B,6BAA6B,EAC7B,KAAK,0BAA0B,EAC/B,KAAK,4BAA4B,EACjC,mBAAmB,GACpB,MAAM,eAAe,CAAC;AAGvB,OAAO,EACL,gBAAgB,EAChB,oBAAoB,EACpB,cAAc,EACd,mBAAmB,GACpB,MAAM,aAAa,CAAC;AAGrB,cAAc,gCAAgC,CAAC;AAK/C,OAAO,EAAE,qBAAqB,EAAE,MAAM,oBAAoB,CAAC;AAQ3D,OAAO,EACL,iBAAiB,EACjB,qBAAqB,EACrB,cAAc,GACf,MAAM,aAAa,CAAC"}
|
|
1
|
+
{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/nestjs/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,wBAAwB,EACxB,KAAK,yBAAyB,GAC/B,MAAM,gBAAgB,CAAC;AAQxB,OAAO,EACL,qBAAqB,EACrB,KAAK,gBAAgB,GACtB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAAE,aAAa,EAAE,kBAAkB,EAAE,MAAM,eAAe,CAAC;AAClE,OAAO,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AACnD,OAAO,EAAE,2BAA2B,EAAE,MAAM,iCAAiC,CAAC;AAC9E,OAAO,EAAE,wBAAwB,EAAE,MAAM,8BAA8B,CAAC;AACxE,OAAO,EACL,yBAAyB,EACzB,uBAAuB,EACvB,YAAY,EAKZ,yBAAyB,EAGzB,sBAAsB,EACtB,sBAAsB,EACtB,sBAAsB,EAGtB,yBAAyB,EAGzB,4BAA4B,EAG5B,kBAAkB,EAClB,uBAAuB,EACvB,gBAAgB,EAChB,KAAK,mBAAmB,GACzB,MAAM,6BAA6B,CAAC;AAKrC,OAAO,EACL,2BAA2B,EAC3B,2BAA2B,EAC3B,+BAA+B,EAC/B,8BAA8B,EAC9B,sBAAsB,GACvB,MAAM,yBAAyB,CAAC;AAIjC,OAAO,EACL,iCAAiC,EACjC,uBAAuB,EACvB,wBAAwB,EACxB,qBAAqB,EACrB,0BAA0B,EAC1B,KAAK,kBAAkB,GACxB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAAE,2BAA2B,EAAE,MAAM,kCAAkC,CAAC;AAC/E,OAAO,EAAE,iBAAiB,EAAE,oBAAoB,EAAE,MAAM,uBAAuB,CAAC;AAChF,OAAO,EACL,oBAAoB,EACpB,eAAe,EACf,oBAAoB,EACpB,sBAAsB,EACtB,uBAAuB,EACvB,oBAAoB,EACpB,iBAAiB,EACjB,kBAAkB,GACnB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EACL,2BAA2B,EAC3B,KAAK,wBAAwB,GAC9B,MAAM,yBAAyB,CAAC;AACjC,OAAO,EACL,sBAAsB,EACtB,iCAAiC,EACjC,6BAA6B,EAC7B,KAAK,mBAAmB,EACxB,KAAK,gCAAgC,EACrC,KAAK,6BAA6B,EAClC,KAAK,wBAAwB,GAC9B,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EACL,oBAAoB,EAIpB,gCAAgC,GACjC,MAAM,0BAA0B,CAAC;AAClC,OAAO,EACL,OAAO,EACP,gBAAgB,EAChB,oBAAoB,GACrB,MAAM,4BAA4B,CAAC;AAIpC,OAAO,EACL,YAAY,EACZ,qBAAqB,EACrB,sBAAsB,EACtB,iBAAiB,EACjB,4BAA4B,EAC5B,iCAAiC,EACjC,sBAAsB,EACtB,KAAK,gBAAgB,EACrB,KAAK,iBAAiB,EACtB,KAAK,oBAAoB,EACzB,KAAK,GAAG,EACR,KAAK,iBAAiB,EACtB,KAAK,gBAAgB,GACtB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AAG3D,OAAO,EACL,sBAAsB,EACtB,YAAY,EACZ,gBAAgB,EAChB,sBAAsB,EACtB,aAAa,GACd,MAAM,uBAAuB,CAAC;AAK/B,OAAO,EACL,8BAA8B,EAC9B,0BAA0B,GAC3B,MAAM,yBAAyB,CAAC;AACjC,OAAO,EAAE,WAAW,EAAE,gBAAgB,EAAE,MAAM,0BAA0B,CAAC;AACzE,OAAO,EAAE,gBAAgB,EAAE,MAAM,sBAAsB,CAAC;AACxD,OAAO,EACL,0BAA0B,EAC1B,wBAAwB,EACxB,KAAK,iBAAiB,GACvB,MAAM,2BAA2B,CAAC;AACnC,OAAO,EAAE,oBAAoB,EAAE,MAAM,2BAA2B,CAAC;AACjE,OAAO,EAAE,GAAG,EAAE,MAAM,iBAAiB,CAAC;AACtC,OAAO,EACL,kBAAkB,EAClB,cAAc,EACd,oBAAoB,EACpB,wBAAwB,EACxB,oBAAoB,EACpB,mBAAmB,EACnB,eAAe,EACf,sBAAsB,EACtB,wBAAwB,EACxB,oBAAoB,EACpB,4BAA4B,GAC7B,MAAM,cAAc,CAAC;AACtB,OAAO,EAAE,cAAc,EAAE,KAAK,YAAY,EAAE,MAAM,oBAAoB,CAAC;AACvE,OAAO,EACL,mBAAmB,EACnB,UAAU,EACV,UAAU,EACV,aAAa,GACd,MAAM,yBAAyB,CAAC;AACjC,OAAO,EACL,aAAa,EACb,qBAAqB,EACrB,SAAS,GACV,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,MAAM,mBAAmB,CAAC;AACrD,OAAO,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AAC3C,OAAO,EACL,qBAAqB,EAIrB,mBAAmB,GACpB,MAAM,2BAA2B,CAAC;AAMnC,OAAO,EACL,iBAAiB,EACjB,yBAAyB,EACzB,WAAW,EACX,YAAY,EACZ,UAAU,EACV,KAAK,OAAO,GACb,MAAM,WAAW,CAAC;AAGnB,OAAO,EACL,6BAA6B,EAC7B,yBAAyB,EACzB,gCAAgC,EAChC,KAAK,uBAAuB,EAC5B,KAAK,0BAA0B,GAChC,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EACL,UAAU,EACV,mBAAmB,EACnB,KAAK,iBAAiB,EACtB,KAAK,sBAAsB,EAQ3B,kBAAkB,EAClB,KAAK,mBAAmB,EACxB,KAAK,mBAAmB,EAKxB,8BAA8B,EAC9B,gCAAgC,EAChC,iDAAiD,EACjD,mBAAmB,EACnB,mBAAmB,EACnB,qBAAqB,EACrB,4BAA4B,EAC5B,8BAA8B,EAC9B,mBAAmB,EACnB,8BAA8B,EAC9B,2BAA2B,EAC3B,yBAAyB,EACzB,oBAAoB,EACpB,yBAAyB,EACzB,8BAA8B,EAC9B,4BAA4B,EAC5B,iBAAiB,EACjB,mBAAmB,EACnB,iBAAiB,EACjB,oBAAoB,EAKpB,eAAe,EACf,iBAAiB,EACjB,mBAAmB,EAGnB,YAAY,EACZ,cAAc,EACd,gBAAgB,EAGhB,qBAAqB,EACrB,gBAAgB,EAChB,oBAAoB,EACpB,eAAe,EACf,oBAAoB,EACpB,gBAAgB,EAIhB,YAAY,EACZ,eAAe,EACf,kBAAkB,EAKlB,iBAAiB,EAKjB,6BAA6B,EAC7B,KAAK,sBAAsB,EAC3B,uBAAuB,EACvB,KAAK,8BAA8B,EAKnC,WAAW,EACX,aAAa,EACb,cAAc,EACd,eAAe,EAIf,yBAAyB,EACzB,4BAA4B,EAQ5B,kBAAkB,EAClB,KAAK,mBAAmB,EACxB,KAAK,uBAAuB,EAC5B,mBAAmB,EACnB,oBAAoB,EACpB,yBAAyB,EACzB,+BAA+B,EAC/B,iBAAiB,EACjB,KAAK,uBAAuB,EAC5B,KAAK,kBAAkB,EACvB,0BAA0B,EAC1B,kBAAkB,EAClB,uBAAuB,EAMvB,kBAAkB,EAClB,KAAK,eAAe,EACpB,KAAK,oBAAoB,EACzB,qBAAqB,EACrB,yBAAyB,EACzB,qBAAqB,EACrB,yBAAyB,EACzB,uBAAuB,EACvB,kBAAkB,EAClB,KAAK,wBAAwB,EAC7B,cAAc,GACf,MAAM,QAAQ,CAAC;AAChB,OAAO,EACL,2BAA2B,EAC3B,qBAAqB,EACrB,oBAAoB,EACpB,KAAK,2BAA2B,EAChC,KAAK,wBAAwB,GAC9B,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EACL,KAAK,kBAAkB,EACvB,KAAK,kBAAkB,EACvB,wBAAwB,EACxB,2BAA2B,EAC3B,6BAA6B,EAC7B,KAAK,0BAA0B,EAC/B,KAAK,4BAA4B,EACjC,mBAAmB,GACpB,MAAM,eAAe,CAAC;AAGvB,OAAO,EACL,gBAAgB,EAChB,oBAAoB,EACpB,cAAc,EACd,mBAAmB,GACpB,MAAM,aAAa,CAAC;AAGrB,cAAc,gCAAgC,CAAC;AAK/C,OAAO,EAAE,qBAAqB,EAAE,MAAM,oBAAoB,CAAC;AAQ3D,OAAO,EACL,iBAAiB,EACjB,qBAAqB,EACrB,cAAc,GACf,MAAM,aAAa,CAAC"}
|
package/dist/nestjs/index.js
CHANGED
|
@@ -16,8 +16,8 @@ var __exportStar = (this && this.__exportStar) || function(m, exports) {
|
|
|
16
16
|
Object.defineProperty(exports, "__esModule", { value: true });
|
|
17
17
|
exports.JwksVerifier = exports.selectTenantResolver = exports.DEFAULT_IDP_KIND = exports.IdpKind = exports.UnclassifiableForeignBearerError = exports.JwtVerificationGuard = exports.buildKeycloakSwaggerUiOptions = exports.enrichOpenApiWithKeycloakSecurity = exports.getKeycloakSwaggerUrls = exports.enhanceOpenApiDocumentation = exports.ApiProblemResponse = exports.ApiStandardErrors = exports.ApiPaginatedResponse = exports.ApiAcceptedDataResponse = exports.ApiCreatedDataResponse = exports.ApiDataArrayResponse = exports.ApiDataResponse = exports.ApiStandardOperation = exports.ProblemFieldIssueDto = exports.ProblemDetailsDto = exports.AmbientOrgContextMiddleware = exports.parseTrustedIssuersFromEnv = exports.TrustedIssuerRegistry = exports.TrustedIssuerConfigError = exports.TRUSTED_ISSUERS_ENV_VAR = exports.DEFAULT_TRUSTED_ISSUER_ALGORITHMS = exports.MalformedActorHopError = exports.ContradictoryActorHopKindError = exports.UnknownActorHopSubjectKindError = exports.UnclassifiableActorHopError = exports.resolveActorChainFromClaims = exports.asNonEmptyString = exports.readDeclaredSubjectKind = exports.SUBJECT_KIND_CLAIM = exports.resolvePrincipalIdFromClaims = exports.resolveClientIdFromClaims = exports.resolveActAsFromClaims = exports.resolveRolesFromClaims = exports.UnknownTokenClassError = exports.tryResolveSubjectAndClass = exports.actorTypeFor = exports.actorTypeForSubjectKind = exports.deriveActorClassification = exports.RequestContextMiddleware = exports.ResponseEnvelopeInterceptor = exports.getEnvOrThrow = exports.getExactCorsConfig = exports.getCorsConfig = exports.readDecoratorOverride = exports.applyStandardBodyParsers = void 0;
|
|
18
18
|
exports.titleForCode = exports.refusalFrom = exports.problemFieldIssuesFromZod = exports.problemDetailsFor = exports.sendProblemResponse = exports.GlobalExceptionFilter = exports.RolesGuard = exports.ROLES_KEY = exports.Roles = exports.fetchJson = exports.fetchEnvelopeOptional = exports.fetchEnvelope = exports.SA_TOKEN_PATH = exports.SA_NS_PATH = exports.SA_CA_PATH = exports.ClusterCaDispatcher = exports.fetchWithRetry = exports.buildCursorPaginatedResponse = exports.CursorPaginationMeta = exports.CursorPaginationQueryDto = exports.buildPaginatedResponse = exports.parsePagination = exports.PAGINATION_MAX_PAGE = exports.PAGINATION_MAX_LIMIT = exports.PAGINATION_DEFAULT_LIMIT = exports.PaginationRangeError = exports.PaginationMeta = exports.PaginationQueryDto = exports.Ctx = exports.requirePipelineRunId = exports.resolveCapabilityTenancy = exports.CapabilityEdgeTenancyError = exports.requireProjectId = exports.RAW_RESPONSE_KEY = exports.RawResponse = exports.collectPublicRouteExcludes = exports.registerPublicRouteDeclaration = exports.joinNestPaths = exports.readSwaggerOperationId = exports.readNestHttpVerb = exports.readNestPath = exports.readNestControllerPath = exports.IS_PUBLIC_KEY = exports.Public = exports.extractRealmFromIssuer = exports.OidcDiscoveryIssuerTenantResolver = exports.KeycloakIssuerTenantResolver = exports.OidcTokenVerifier = exports.IssuerMetadataResolver = exports.JwksVerificationError = void 0;
|
|
19
|
-
exports.
|
|
20
|
-
exports.assertOrgScope = exports.OrgScopeRequiredError = exports.OrgScopeErrorCode = exports.resolveCallerOrgScope = exports.REDACT_RESPONSE_KEY = exports.RedactResponse = exports.RedactionInterceptor = exports.RedactionService = exports.IDEMPOTENCY_SERVICE = exports.IDEMPOTENCY_DATA_STORE_CLIENT = exports.DataStoreIdempotencyService = exports.IDEMPOTENCY_RECORD_MODEL = exports.ApiConnectorEnvelope = exports.ConnectorEnvelopePipe = exports.ConnectorWebhookEnvelopeDto = exports.orgScopedClaim = exports.mintOrgScopedToken = exports.describeOrgScopeWitness = exports.orgScopeFromPlatformSweep = exports.orgScopeFromOwningRow = exports.orgScopeFromProvenRequest = exports.UnprovenOrgScopeError = exports.OrgScopeProvenance = exports.resetOrgAuthorityCensus = exports.orgAuthorityCensus = exports.recordUnprovenOrgAuthority = exports.UNKNOWN_CLIENT_ID = exports.ORG_AUTHORITY_OBSERVATION_LIMIT = exports.orgAuthorityRequiresProof = void 0;
|
|
19
|
+
exports.RequireProvenOrgAuthority = exports.resolveOrgClaim = exports.ORG_CLAIM_KEYS = exports.OrgHeaderName = exports.OrgClaimKey = exports.configureAuthMiddleware = exports.resolveOrgAuthorityInstrument = exports.holdsOrgAuthority = exports.PlatformAdminGuard = exports.hasPlatformRole = exports.PlatformRole = exports.orgRoleSatisfies = exports.resolveOrgRoleForOrg = exports.resolveOrgRoles = exports.ORG_ROLES_CLAIM_KEYS = exports.OrgRolesClaimKey = exports.ServiceOrOrgRoleGuard = exports.REQUIRE_ORG_ROLE = exports.RequireOrgRole = exports.OrgRoleGuard = exports.REQUIRE_TOKEN_CLASS = exports.RequireTokenClass = exports.TokenClassGuard = exports.isDirectServiceActor = exports.ServiceActorGuard = exports.InternalCallerGuard = exports.ServiceTokenGuard = exports.kernelSubjectKindForBoundary = exports.UnsupportedContextVersionError = exports.SUPPORTED_CONTEXT_VERSION = exports.PLATFORM_ROLES_CLAIM = exports.PLATFORM_AUTHORITY_CLAIMS = exports.InvalidBoundaryContextError = exports.FOREIGN_CALLER_IDENTITY_CLAIMS = exports.DELEGATION_ID_CLAIM = exports.DELEGATED_RESOURCE_SCOPE_CLAIM = exports.DELEGATED_CAPABILITIES_CLAIM = exports.CONTEXT_VERSION_CLAIM = exports.AUTHORIZED_BY_CLAIM = exports.BoundarySubjectKind = exports.OrganizationDelegationRequiresClaimAuthorityError = exports.UnknownDeclaredSubjectClassError = exports.claimsWithDeclaredSubjectClass = exports.RealmTokenVerifier = exports.AUTH_MODULE_OPTIONS = exports.AuthModule = exports.describeDroppedProblemExtensions = exports.sanitizeProblemExtensions = exports.DroppedProblemExtensionReason = exports.isZodError = void 0;
|
|
20
|
+
exports.assertOrgScope = exports.OrgScopeRequiredError = exports.OrgScopeErrorCode = exports.resolveCallerOrgScope = exports.REDACT_RESPONSE_KEY = exports.RedactResponse = exports.RedactionInterceptor = exports.RedactionService = exports.IDEMPOTENCY_SERVICE = exports.IDEMPOTENCY_DATA_STORE_CLIENT = exports.DataStoreIdempotencyService = exports.IDEMPOTENCY_RECORD_MODEL = exports.ApiConnectorEnvelope = exports.ConnectorEnvelopePipe = exports.ConnectorWebhookEnvelopeDto = exports.orgScopedClaim = exports.mintOrgScopedToken = exports.describeOrgScopeWitness = exports.orgScopeFromPlatformSweep = exports.orgScopeFromOwningRow = exports.orgScopeFromProvenRequest = exports.UnprovenOrgScopeError = exports.OrgScopeProvenance = exports.resetOrgAuthorityCensus = exports.orgAuthorityCensus = exports.recordUnprovenOrgAuthority = exports.UNKNOWN_CLIENT_ID = exports.ORG_AUTHORITY_OBSERVATION_LIMIT = exports.orgAuthorityRequiresProof = exports.isOrgAuthorityProven = exports.resolveOrgAuthority = exports.OrgAuthoritySource = exports.REQUIRE_PROVEN_ORG_AUTHORITY = void 0;
|
|
21
21
|
var body_parsers_1 = require("./body-parsers");
|
|
22
22
|
Object.defineProperty(exports, "applyStandardBodyParsers", { enumerable: true, get: function () { return body_parsers_1.applyStandardBodyParsers; } });
|
|
23
23
|
var decorator_metadata_1 = require("./decorator-metadata");
|
|
@@ -162,8 +162,12 @@ Object.defineProperty(exports, "AUTH_MODULE_OPTIONS", { enumerable: true, get: f
|
|
|
162
162
|
Object.defineProperty(exports, "RealmTokenVerifier", { enumerable: true, get: function () { return auth_1.RealmTokenVerifier; } });
|
|
163
163
|
Object.defineProperty(exports, "claimsWithDeclaredSubjectClass", { enumerable: true, get: function () { return auth_1.claimsWithDeclaredSubjectClass; } });
|
|
164
164
|
Object.defineProperty(exports, "UnknownDeclaredSubjectClassError", { enumerable: true, get: function () { return auth_1.UnknownDeclaredSubjectClassError; } });
|
|
165
|
+
Object.defineProperty(exports, "OrganizationDelegationRequiresClaimAuthorityError", { enumerable: true, get: function () { return auth_1.OrganizationDelegationRequiresClaimAuthorityError; } });
|
|
165
166
|
Object.defineProperty(exports, "BoundarySubjectKind", { enumerable: true, get: function () { return auth_1.BoundarySubjectKind; } });
|
|
167
|
+
Object.defineProperty(exports, "AUTHORIZED_BY_CLAIM", { enumerable: true, get: function () { return auth_1.AUTHORIZED_BY_CLAIM; } });
|
|
166
168
|
Object.defineProperty(exports, "CONTEXT_VERSION_CLAIM", { enumerable: true, get: function () { return auth_1.CONTEXT_VERSION_CLAIM; } });
|
|
169
|
+
Object.defineProperty(exports, "DELEGATED_CAPABILITIES_CLAIM", { enumerable: true, get: function () { return auth_1.DELEGATED_CAPABILITIES_CLAIM; } });
|
|
170
|
+
Object.defineProperty(exports, "DELEGATED_RESOURCE_SCOPE_CLAIM", { enumerable: true, get: function () { return auth_1.DELEGATED_RESOURCE_SCOPE_CLAIM; } });
|
|
167
171
|
Object.defineProperty(exports, "DELEGATION_ID_CLAIM", { enumerable: true, get: function () { return auth_1.DELEGATION_ID_CLAIM; } });
|
|
168
172
|
Object.defineProperty(exports, "FOREIGN_CALLER_IDENTITY_CLAIMS", { enumerable: true, get: function () { return auth_1.FOREIGN_CALLER_IDENTITY_CLAIMS; } });
|
|
169
173
|
Object.defineProperty(exports, "InvalidBoundaryContextError", { enumerable: true, get: function () { return auth_1.InvalidBoundaryContextError; } });
|
package/dist/nestjs/index.js.map
CHANGED
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/nestjs/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;AAAA,+CAGwB;AAFtB,wHAAA,wBAAwB,OAAA;AAU1B,2DAG8B;AAF5B,2HAAA,qBAAqB,OAAA;AAGvB,6CAAkE;AAAzD,4GAAA,aAAa,OAAA;AAAE,iHAAA,kBAAkB,OAAA;AAC1C,uDAAmD;AAA1C,iHAAA,aAAa,OAAA;AACtB,iFAA8E;AAArE,4IAAA,2BAA2B,OAAA;AACpC,2EAAwE;AAA/D,sIAAA,wBAAwB,OAAA;AACjC,oEA0BqC;AAzBnC,iIAAA,yBAAyB,OAAA;AACzB,+HAAA,uBAAuB,OAAA;AACvB,oHAAA,YAAY,OAAA;AAKZ,iIAAA,yBAAyB,OAAA;AAGzB,8HAAA,sBAAsB,OAAA;AACtB,8HAAA,sBAAsB,OAAA;AACtB,8HAAA,sBAAsB,OAAA;AAGtB,iIAAA,yBAAyB,OAAA;AAGzB,oIAAA,4BAA4B,OAAA;AAG5B,0HAAA,kBAAkB,OAAA;AAClB,+HAAA,uBAAuB,OAAA;AACvB,wHAAA,gBAAgB,OAAA;AAOlB,4DAMiC;AAL/B,+HAAA,2BAA2B,OAAA;AAC3B,+HAAA,2BAA2B,OAAA;AAC3B,mIAAA,+BAA+B,OAAA;AAC/B,kIAAA,8BAA8B,OAAA;AAC9B,0HAAA,sBAAsB,OAAA;AAKxB,iDAO4B;AAN1B,+HAAA,iCAAiC,OAAA;AACjC,qHAAA,uBAAuB,OAAA;AACvB,sHAAA,wBAAwB,OAAA;AACxB,mHAAA,qBAAqB,OAAA;AACrB,wHAAA,0BAA0B,OAAA;AAG5B,mFAA+E;AAAtE,6IAAA,2BAA2B,OAAA;AACpC,6DAAgF;AAAvE,wHAAA,iBAAiB,OAAA;AAAE,2HAAA,oBAAoB,OAAA;AAChD,2DAS8B;AAR5B,0HAAA,oBAAoB,OAAA;AACpB,qHAAA,eAAe,OAAA;AACf,0HAAA,oBAAoB,OAAA;AACpB,4HAAA,sBAAsB,OAAA;AACtB,6HAAA,uBAAuB,OAAA;AACvB,0HAAA,oBAAoB,OAAA;AACpB,uHAAA,iBAAiB,OAAA;AACjB,wHAAA,kBAAkB,OAAA;AAEpB,iEAGiC;AAF/B,oIAAA,2BAA2B,OAAA;AAG7B,uDAQ4B;AAP1B,0HAAA,sBAAsB,OAAA;AACtB,qIAAA,iCAAiC,OAAA;AACjC,iIAAA,6BAA6B,OAAA;AAM/B,mEAMkC;AALhC,8HAAA,oBAAoB,OAAA;AAIpB,0IAAA,gCAAgC,OAAA;AAElC,kEAIoC;AAHlC,8GAAA,OAAO,OAAA;AACP,uHAAA,gBAAgB,OAAA;AAChB,2HAAA,oBAAoB,OAAA;AAKtB,iDAc4B;AAb1B,0GAAA,YAAY,OAAA;AACZ,mHAAA,qBAAqB,OAAA;AACrB,oHAAA,sBAAsB,OAAA;AACtB,+GAAA,iBAAiB,OAAA;AACjB,0HAAA,4BAA4B,OAAA;AAC5B,+HAAA,iCAAiC,OAAA;AACjC,oHAAA,sBAAsB,OAAA;AAQxB,uDAA2D;AAAlD,0GAAA,MAAM,OAAA;AAAE,iHAAA,aAAa,OAAA;AAG9B,6DAM+B;AAL7B,6HAAA,sBAAsB,OAAA;AACtB,mHAAA,YAAY,OAAA;AACZ,uHAAA,gBAAgB,OAAA;AAChB,6HAAA,sBAAsB,OAAA;AACtB,oHAAA,aAAa,OAAA;AAMf,iEAGiC;AAF/B,uIAAA,8BAA8B,OAAA;AAC9B,mIAAA,0BAA0B,OAAA;AAE5B,mEAAyE;AAAhE,qHAAA,WAAW,OAAA;AAAE,0HAAA,gBAAgB,OAAA;AACtC,2DAAwD;AAA/C,sHAAA,gBAAgB,OAAA;AACzB,qEAImC;AAHjC,qIAAA,0BAA0B,OAAA;AAC1B,mIAAA,wBAAwB,OAAA;AAG1B,qEAAiE;AAAxD,+HAAA,oBAAoB,OAAA;AAC7B,iDAAsC;AAA7B,oGAAA,GAAG,OAAA;AACZ,2CAYsB;AAXpB,gHAAA,kBAAkB,OAAA;AAClB,4GAAA,cAAc,OAAA;AACd,kHAAA,oBAAoB,OAAA;AACpB,sHAAA,wBAAwB,OAAA;AACxB,kHAAA,oBAAoB,OAAA;AACpB,iHAAA,mBAAmB,OAAA;AACnB,6GAAA,eAAe,OAAA;AACf,oHAAA,sBAAsB,OAAA;AACtB,sHAAA,wBAAwB,OAAA;AACxB,kHAAA,oBAAoB,OAAA;AACpB,0HAAA,4BAA4B,OAAA;AAE9B,uDAAuE;AAA9D,kHAAA,cAAc,OAAA;AACvB,iEAKiC;AAJ/B,4HAAA,mBAAmB,OAAA;AACnB,mHAAA,UAAU,OAAA;AACV,mHAAA,UAAU,OAAA;AACV,sHAAA,aAAa,OAAA;AAEf,mDAI0B;AAHxB,+GAAA,aAAa,OAAA;AACb,uHAAA,qBAAqB,OAAA;AACrB,2GAAA,SAAS,OAAA;AAEX,qDAAqD;AAA5C,wGAAA,KAAK,OAAA;AAAE,4GAAA,SAAS,OAAA;AACzB,6CAA2C;AAAlC,yGAAA,UAAU,OAAA;AACnB,qEAMmC;AALjC,gIAAA,qBAAqB,OAAA;AAIrB,8HAAA,mBAAmB,OAAA;AAOrB,qCAOmB;AANjB,4GAAA,iBAAiB,OAAA;AACjB,oHAAA,yBAAyB,OAAA;AACzB,sGAAA,WAAW,OAAA;AACX,uGAAA,YAAY,OAAA;AACZ,qGAAA,UAAU,OAAA;AAKZ,2DAM8B;AAL5B,mIAAA,6BAA6B,OAAA;AAC7B,+HAAA,yBAAyB,OAAA;AACzB,sIAAA,gCAAgC,OAAA;AAIlC,+
|
|
1
|
+
{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/nestjs/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;AAAA,+CAGwB;AAFtB,wHAAA,wBAAwB,OAAA;AAU1B,2DAG8B;AAF5B,2HAAA,qBAAqB,OAAA;AAGvB,6CAAkE;AAAzD,4GAAA,aAAa,OAAA;AAAE,iHAAA,kBAAkB,OAAA;AAC1C,uDAAmD;AAA1C,iHAAA,aAAa,OAAA;AACtB,iFAA8E;AAArE,4IAAA,2BAA2B,OAAA;AACpC,2EAAwE;AAA/D,sIAAA,wBAAwB,OAAA;AACjC,oEA0BqC;AAzBnC,iIAAA,yBAAyB,OAAA;AACzB,+HAAA,uBAAuB,OAAA;AACvB,oHAAA,YAAY,OAAA;AAKZ,iIAAA,yBAAyB,OAAA;AAGzB,8HAAA,sBAAsB,OAAA;AACtB,8HAAA,sBAAsB,OAAA;AACtB,8HAAA,sBAAsB,OAAA;AAGtB,iIAAA,yBAAyB,OAAA;AAGzB,oIAAA,4BAA4B,OAAA;AAG5B,0HAAA,kBAAkB,OAAA;AAClB,+HAAA,uBAAuB,OAAA;AACvB,wHAAA,gBAAgB,OAAA;AAOlB,4DAMiC;AAL/B,+HAAA,2BAA2B,OAAA;AAC3B,+HAAA,2BAA2B,OAAA;AAC3B,mIAAA,+BAA+B,OAAA;AAC/B,kIAAA,8BAA8B,OAAA;AAC9B,0HAAA,sBAAsB,OAAA;AAKxB,iDAO4B;AAN1B,+HAAA,iCAAiC,OAAA;AACjC,qHAAA,uBAAuB,OAAA;AACvB,sHAAA,wBAAwB,OAAA;AACxB,mHAAA,qBAAqB,OAAA;AACrB,wHAAA,0BAA0B,OAAA;AAG5B,mFAA+E;AAAtE,6IAAA,2BAA2B,OAAA;AACpC,6DAAgF;AAAvE,wHAAA,iBAAiB,OAAA;AAAE,2HAAA,oBAAoB,OAAA;AAChD,2DAS8B;AAR5B,0HAAA,oBAAoB,OAAA;AACpB,qHAAA,eAAe,OAAA;AACf,0HAAA,oBAAoB,OAAA;AACpB,4HAAA,sBAAsB,OAAA;AACtB,6HAAA,uBAAuB,OAAA;AACvB,0HAAA,oBAAoB,OAAA;AACpB,uHAAA,iBAAiB,OAAA;AACjB,wHAAA,kBAAkB,OAAA;AAEpB,iEAGiC;AAF/B,oIAAA,2BAA2B,OAAA;AAG7B,uDAQ4B;AAP1B,0HAAA,sBAAsB,OAAA;AACtB,qIAAA,iCAAiC,OAAA;AACjC,iIAAA,6BAA6B,OAAA;AAM/B,mEAMkC;AALhC,8HAAA,oBAAoB,OAAA;AAIpB,0IAAA,gCAAgC,OAAA;AAElC,kEAIoC;AAHlC,8GAAA,OAAO,OAAA;AACP,uHAAA,gBAAgB,OAAA;AAChB,2HAAA,oBAAoB,OAAA;AAKtB,iDAc4B;AAb1B,0GAAA,YAAY,OAAA;AACZ,mHAAA,qBAAqB,OAAA;AACrB,oHAAA,sBAAsB,OAAA;AACtB,+GAAA,iBAAiB,OAAA;AACjB,0HAAA,4BAA4B,OAAA;AAC5B,+HAAA,iCAAiC,OAAA;AACjC,oHAAA,sBAAsB,OAAA;AAQxB,uDAA2D;AAAlD,0GAAA,MAAM,OAAA;AAAE,iHAAA,aAAa,OAAA;AAG9B,6DAM+B;AAL7B,6HAAA,sBAAsB,OAAA;AACtB,mHAAA,YAAY,OAAA;AACZ,uHAAA,gBAAgB,OAAA;AAChB,6HAAA,sBAAsB,OAAA;AACtB,oHAAA,aAAa,OAAA;AAMf,iEAGiC;AAF/B,uIAAA,8BAA8B,OAAA;AAC9B,mIAAA,0BAA0B,OAAA;AAE5B,mEAAyE;AAAhE,qHAAA,WAAW,OAAA;AAAE,0HAAA,gBAAgB,OAAA;AACtC,2DAAwD;AAA/C,sHAAA,gBAAgB,OAAA;AACzB,qEAImC;AAHjC,qIAAA,0BAA0B,OAAA;AAC1B,mIAAA,wBAAwB,OAAA;AAG1B,qEAAiE;AAAxD,+HAAA,oBAAoB,OAAA;AAC7B,iDAAsC;AAA7B,oGAAA,GAAG,OAAA;AACZ,2CAYsB;AAXpB,gHAAA,kBAAkB,OAAA;AAClB,4GAAA,cAAc,OAAA;AACd,kHAAA,oBAAoB,OAAA;AACpB,sHAAA,wBAAwB,OAAA;AACxB,kHAAA,oBAAoB,OAAA;AACpB,iHAAA,mBAAmB,OAAA;AACnB,6GAAA,eAAe,OAAA;AACf,oHAAA,sBAAsB,OAAA;AACtB,sHAAA,wBAAwB,OAAA;AACxB,kHAAA,oBAAoB,OAAA;AACpB,0HAAA,4BAA4B,OAAA;AAE9B,uDAAuE;AAA9D,kHAAA,cAAc,OAAA;AACvB,iEAKiC;AAJ/B,4HAAA,mBAAmB,OAAA;AACnB,mHAAA,UAAU,OAAA;AACV,mHAAA,UAAU,OAAA;AACV,sHAAA,aAAa,OAAA;AAEf,mDAI0B;AAHxB,+GAAA,aAAa,OAAA;AACb,uHAAA,qBAAqB,OAAA;AACrB,2GAAA,SAAS,OAAA;AAEX,qDAAqD;AAA5C,wGAAA,KAAK,OAAA;AAAE,4GAAA,SAAS,OAAA;AACzB,6CAA2C;AAAlC,yGAAA,UAAU,OAAA;AACnB,qEAMmC;AALjC,gIAAA,qBAAqB,OAAA;AAIrB,8HAAA,mBAAmB,OAAA;AAOrB,qCAOmB;AANjB,4GAAA,iBAAiB,OAAA;AACjB,oHAAA,yBAAyB,OAAA;AACzB,sGAAA,WAAW,OAAA;AACX,uGAAA,YAAY,OAAA;AACZ,qGAAA,UAAU,OAAA;AAKZ,2DAM8B;AAL5B,mIAAA,6BAA6B,OAAA;AAC7B,+HAAA,yBAAyB,OAAA;AACzB,sIAAA,gCAAgC,OAAA;AAIlC,+BA+HgB;AA9Hd,kGAAA,UAAU,OAAA;AACV,2GAAA,mBAAmB,OAAA;AAUnB,0GAAA,kBAAkB,OAAA;AAOlB,sHAAA,8BAA8B,OAAA;AAC9B,wHAAA,gCAAgC,OAAA;AAChC,yIAAA,iDAAiD,OAAA;AACjD,2GAAA,mBAAmB,OAAA;AACnB,2GAAA,mBAAmB,OAAA;AACnB,6GAAA,qBAAqB,OAAA;AACrB,oHAAA,4BAA4B,OAAA;AAC5B,sHAAA,8BAA8B,OAAA;AAC9B,2GAAA,mBAAmB,OAAA;AACnB,sHAAA,8BAA8B,OAAA;AAC9B,mHAAA,2BAA2B,OAAA;AAC3B,iHAAA,yBAAyB,OAAA;AACzB,4GAAA,oBAAoB,OAAA;AACpB,iHAAA,yBAAyB,OAAA;AACzB,sHAAA,8BAA8B,OAAA;AAC9B,oHAAA,4BAA4B,OAAA;AAC5B,yGAAA,iBAAiB,OAAA;AACjB,2GAAA,mBAAmB,OAAA;AACnB,yGAAA,iBAAiB,OAAA;AACjB,4GAAA,oBAAoB,OAAA;AAKpB,uGAAA,eAAe,OAAA;AACf,yGAAA,iBAAiB,OAAA;AACjB,2GAAA,mBAAmB,OAAA;AAGnB,oGAAA,YAAY,OAAA;AACZ,sGAAA,cAAc,OAAA;AACd,wGAAA,gBAAgB,OAAA;AAGhB,6GAAA,qBAAqB,OAAA;AACrB,wGAAA,gBAAgB,OAAA;AAChB,4GAAA,oBAAoB,OAAA;AACpB,uGAAA,eAAe,OAAA;AACf,4GAAA,oBAAoB,OAAA;AACpB,wGAAA,gBAAgB,OAAA;AAIhB,oGAAA,YAAY,OAAA;AACZ,uGAAA,eAAe,OAAA;AACf,0GAAA,kBAAkB,OAAA;AAKlB,yGAAA,iBAAiB,OAAA;AAKjB,qHAAA,6BAA6B,OAAA;AAE7B,+GAAA,uBAAuB,OAAA;AAMvB,mGAAA,WAAW,OAAA;AACX,qGAAA,aAAa,OAAA;AACb,sGAAA,cAAc,OAAA;AACd,uGAAA,eAAe,OAAA;AAIf,iHAAA,yBAAyB,OAAA;AACzB,oHAAA,4BAA4B,OAAA;AAQ5B,0GAAA,kBAAkB,OAAA;AAGlB,2GAAA,mBAAmB,OAAA;AACnB,4GAAA,oBAAoB,OAAA;AACpB,iHAAA,yBAAyB,OAAA;AACzB,uHAAA,+BAA+B,OAAA;AAC/B,yGAAA,iBAAiB,OAAA;AAGjB,kHAAA,0BAA0B,OAAA;AAC1B,0GAAA,kBAAkB,OAAA;AAClB,+GAAA,uBAAuB,OAAA;AAMvB,0GAAA,kBAAkB,OAAA;AAGlB,6GAAA,qBAAqB,OAAA;AACrB,iHAAA,yBAAyB,OAAA;AACzB,6GAAA,qBAAqB,OAAA;AACrB,iHAAA,yBAAyB,OAAA;AACzB,+GAAA,uBAAuB,OAAA;AACvB,0GAAA,kBAAkB,OAAA;AAElB,sGAAA,cAAc,OAAA;AAEhB,2DAM8B;AAL5B,iIAAA,2BAA2B,OAAA;AAC3B,2HAAA,qBAAqB,OAAA;AACrB,0HAAA,oBAAoB,OAAA;AAItB,6CASuB;AANrB,uHAAA,wBAAwB,OAAA;AACxB,0HAAA,2BAA2B,OAAA;AAC3B,4HAAA,6BAA6B,OAAA;AAG7B,kHAAA,mBAAmB,OAAA;AAIrB,yCAKqB;AAJnB,6GAAA,gBAAgB,OAAA;AAChB,iHAAA,oBAAoB,OAAA;AACpB,2GAAA,cAAc,OAAA;AACd,gHAAA,mBAAmB,OAAA;AAIrB,iEAA+C;AAK/C,uDAA2D;AAAlD,yHAAA,qBAAqB,OAAA;AAQ9B,yCAIqB;AAHnB,8GAAA,iBAAiB,OAAA;AACjB,kHAAA,qBAAqB,OAAA;AACrB,2GAAA,cAAc,OAAA"}
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"jwt-verification.guard.d.ts","sourceRoot":"","sources":["../../src/nestjs/jwt-verification.guard.ts"],"names":[],"mappings":"AAAA,OAAO,EAEL,WAAW,EACX,gBAAgB,EAMjB,MAAM,gBAAgB,CAAC;AAKxB,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,4BAA4B,CAAC;
|
|
1
|
+
{"version":3,"file":"jwt-verification.guard.d.ts","sourceRoot":"","sources":["../../src/nestjs/jwt-verification.guard.ts"],"names":[],"mappings":"AAAA,OAAO,EAEL,WAAW,EACX,gBAAgB,EAMjB,MAAM,gBAAgB,CAAC;AAKxB,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,4BAA4B,CAAC;AA8BpE,OAAO,EAAE,gCAAgC,EAAE,MAAM,+BAA+B,CAAC;AAuCjF,qBACa,oBAAqB,YAAW,WAAW;IACtD,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAyC;IAUhE,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAqB;gBAK5C,WAAW,CAAC,EAAE,iBAAiB;IAK3B,WAAW,CAAC,OAAO,EAAE,gBAAgB,GAAG,OAAO,CAAC,OAAO,CAAC;YAyDhD,WAAW;IA4BzB,OAAO,CAAC,oBAAoB;IAoD5B,OAAO,CAAC,mBAAmB;IAkE3B,OAAO,CAAC,YAAY;CAYrB"}
|
|
@@ -109,6 +109,9 @@ let JwtVerificationGuard = JwtVerificationGuard_1 = class JwtVerificationGuard {
|
|
|
109
109
|
const delegationId = (0, boundary_context_brand_1.isBoundaryContextClaims)(claims)
|
|
110
110
|
? (0, claim_authority_1.resolveDelegationIdFromBoundaryClaims)(claims)
|
|
111
111
|
: undefined;
|
|
112
|
+
const delegation = (0, boundary_context_brand_1.isBoundaryContextClaims)(claims)
|
|
113
|
+
? (0, claim_authority_1.resolveDelegatedAuthorityFromBoundaryClaims)(claims, actorChain)
|
|
114
|
+
: undefined;
|
|
112
115
|
const orgId = ctx.orgId ?? '';
|
|
113
116
|
(0, org_authority_fence_1.assertOrgHeaderPresentForCaller)(orgId, actorType);
|
|
114
117
|
(0, org_authority_fence_1.assertOrgClaimMatchesHeader)(this.logger, claims, orgId, org_claim_1.OrgHeaderName.Canonical);
|
|
@@ -129,6 +132,7 @@ let JwtVerificationGuard = JwtVerificationGuard_1 = class JwtVerificationGuard {
|
|
|
129
132
|
assignOptional(ctx, 'clientId', clientId);
|
|
130
133
|
assignOptional(ctx, 'principalId', principalId);
|
|
131
134
|
assignOptional(ctx, 'delegationId', delegationId);
|
|
135
|
+
assignOptional(ctx, 'delegation', delegation);
|
|
132
136
|
assignOptional(ctx, 'orgRoles', Object.keys(orgRoles).length > 0 ? orgRoles : undefined);
|
|
133
137
|
assignOptional(ctx, 'orgRole', orgRoles[orgId]);
|
|
134
138
|
}
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"jwt-verification.guard.js","sourceRoot":"","sources":["../../src/nestjs/jwt-verification.guard.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,2CASwB;AACxB,6DAA6D;AAE7D,yDAAmD;AACnD,oEAAiE;AAEjE,4DAAyD;AAEzD,mDAA2D;AAE3D,sEAIqC;AACrC,0EAAwE;AACxE,
|
|
1
|
+
{"version":3,"file":"jwt-verification.guard.js","sourceRoot":"","sources":["../../src/nestjs/jwt-verification.guard.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,2CASwB;AACxB,6DAA6D;AAE7D,yDAAmD;AACnD,oEAAiE;AAEjE,4DAAyD;AAEzD,mDAA2D;AAE3D,sEAIqC;AACrC,0EAAwE;AACxE,4DAGgC;AAChC,8DAAsE;AACtE,oEAIoC;AACpC,qDAAsD;AACtD,mDAAuD;AACvD,sEAAiE;AACjE,0EAA+E;AAM/E,wEAAiF;AAAxE,0IAAA,gCAAgC,OAAA;AAMzC,MAAM,oBAAoB,GAAG,CAAC,SAAS,EAAE,WAAW,EAAE,mBAAmB,CAAC,CAAC;AAC3E,MAAM,qBAAqB,GAAG,WAAW,CAAC;AAiCnC,IAAM,oBAAoB,4BAA1B,MAAM,oBAAoB;IACd,MAAM,GAAG,IAAI,eAAM,CAAC,sBAAoB,CAAC,IAAI,CAAC,CAAC;IAU/C,QAAQ,CAAqB;IAE9C,YAGE,WAA+B;QAE/B,IAAI,CAAC,QAAQ,GAAG,IAAI,yCAAkB,CAAC,WAAW,CAAC,CAAC;IACtD,CAAC;IAED,KAAK,CAAC,WAAW,CAAC,OAAyB;QAEzC,MAAM,QAAQ,GAAG,IAAA,0CAAqB,EAAU,gCAAa,EAAE;YAC7D,OAAO,CAAC,UAAU,EAAE;YACpB,OAAO,CAAC,QAAQ,EAAE;SACnB,CAAC,CAAC;QACH,IAAI,QAAQ;YAAE,OAAO,IAAI,CAAC;QAE1B,MAAM,OAAO,GAAG,OAAO,CAAC,YAAY,EAAE,CAAC,UAAU,EAAW,CAAC;QAG7D,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,IAAI,OAAO,CAAC,GAAG,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QAC9D,IAAI,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC;YAAE,OAAO,IAAI,CAAC;QAEzC,MAAM,UAAU,GAAG,OAAO,CAAC,OAAO,CAAC,aAAa,CAAC;QAEjD,IAAI,CAAC,UAAU,EAAE,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;YACvC,MAAM,IAAI,8BAAqB,CAC7B,yCAAyC,CAC1C,CAAC;QACJ,CAAC;QAED,MAAM,KAAK,GAAG,UAAU,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;QAEtC,IAAI,CAAC;YACH,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC;YAG1D,IAAI,CAAC,oBAAoB,CAAC,OAAO,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC;YAIpD,IAAI,CAAC,mBAAmB,CAAC,OAAO,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC;YAEnD,OAAO,IAAI,CAAC;QACd,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAMf,IAAI,KAAK,YAAY,sBAAa;gBAAE,MAAM,KAAK,CAAC;YAEhD,MAAM,GAAG,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YACnE,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,yBAAyB,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,CAAC;YACtE,MAAM,IAAI,8BAAqB,CAAC,eAAe,CAAC,CAAC;QACnD,CAAC;IACH,CAAC;IAUO,KAAK,CAAC,WAAW,CACvB,KAAa;QAEb,IAAI,CAAC;YACH,OAAO,MAAM,IAAI,CAAC,QAAQ,CAAC,gBAAgB,CAAC,KAAK,CAAC,CAAC;QACrD,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,KAAK,YAAY,kCAAqB,EAAE,CAAC;gBAC3C,MAAM,IAAI,8BAAqB,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;YACjD,CAAC;YACD,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC;IAiBO,oBAAoB,CAC1B,OAAgB,EAChB,OAAmB,EACnB,MAA2B;QAE3B,MAAM,MAAM,GACV,MAAM,CAAC,IAAI,KAAK,gBAAgB;YAC9B,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM;YACrB,CAAC,CAAC,OAAO,CAAC,GAAG;gBACX,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,cAAc,CAAC,gBAAgB,CAAC,OAAO,CAAC,GAAG,CAAC;oBAC3D,SAAS,CAAC;gBACZ,CAAC,CAAC,SAAS,CAAC;QAClB,IAAI,CAAC,MAAM;YAAE,OAAO;QAEpB,MAAM,GAAG,GAAI,OAA8C,CACzD,iCAAe,CACc,CAAC;QAChC,IAAI,GAAG,EAAE,CAAC;YACR,GAAG,CAAC,OAAO,GAAG,MAAM,CAAC;QACvB,CAAC;IACH,CAAC;IAgCO,mBAAmB,CACzB,OAAgB,EAChB,OAAmB,EACnB,MAA2B;QAE3B,MAAM,MAAM,GAAG,IAAA,uDAA8B,EAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QAC/D,IAAI,MAAM,CAAC,IAAI,KAAK,OAAO;YAAE,OAAO;QAEpC,MAAM,GAAG,GAAI,OAA8C,CACzD,iCAAe,CACc,CAAC;QAChC,IAAI,CAAC,GAAG;YAAE,OAAO;QAEjB,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,WAAW,EAAE,UAAU,EAAE,SAAS,EAAE,GACxD,IAAA,gDAAyB,EAAC,MAAM,CAAC,CAAC;QACpC,MAAM,UAAU,GAAG,IAAA,8CAA2B,EAAC,MAAM,CAAC,CAAC;QACvD,MAAM,QAAQ,GAAG,IAAA,gDAAyB,EAAC,MAAM,CAAC,CAAC;QACnD,MAAM,WAAW,GAAG,IAAA,mDAA4B,EAAC,MAAM,CAAC,CAAC;QACzD,MAAM,QAAQ,GAAG,IAAA,0BAAe,EAAC,MAAM,CAAC,CAAC;QACzC,MAAM,YAAY,GAAG,IAAA,gDAAuB,EAAC,MAAM,CAAC;YAClD,CAAC,CAAC,IAAA,uDAAqC,EAAC,MAAM,CAAC;YAC/C,CAAC,CAAC,SAAS,CAAC;QAId,MAAM,UAAU,GAAG,IAAA,gDAAuB,EAAC,MAAM,CAAC;YAChD,CAAC,CAAC,IAAA,6DAA2C,EAAC,MAAM,EAAE,UAAU,CAAC;YACjE,CAAC,CAAC,SAAS,CAAC;QAEd,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,IAAI,EAAE,CAAC;QAC9B,IAAA,qDAA+B,EAAC,KAAK,EAAE,SAAS,CAAC,CAAC;QAClD,IAAA,iDAA2B,EAAC,IAAI,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,yBAAa,CAAC,SAAS,CAAC,CAAC;QACjF,MAAM,YAAY,GAAG,IAAA,uCAAiB,EACpC,IAAI,CAAC,MAAM,EACX,MAAM,EACN,KAAK,EACL,EAAE,UAAU,EAAE,WAAW,EAAE,QAAQ,EAAE,SAAS,EAAE,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,EACvE,GAAG,OAAO,CAAC,MAAM,IAAI,EAAE,IAAI,OAAO,CAAC,WAAW,IAAI,OAAO,CAAC,GAAG,IAAI,EAAE,EAAE,EACrE,GAAG,CAAC,aAAa,CAClB,CAAC;QAEF,MAAM,EAAE,SAAS,EAAE,eAAe,EAAE,GAAG,WAAW,EAAE,GAAG,GAAG,CAAC,OAAO,CAAC;QACnE,GAAG,CAAC,OAAO,GAAG;YACZ,GAAG,WAAW;YACd,IAAI,EAAE,WAAW;YACjB,KAAK;YACL,GAAG,CAAC,UAAU,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,UAAU,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC/D,CAAC;QACF,GAAG,CAAC,UAAU,GAAG,UAAU,CAAC;QAC5B,GAAG,CAAC,SAAS,GAAG,SAAS,CAAC;QAC1B,GAAG,CAAC,UAAU,GAAG,UAAU,CAAC;QAC5B,GAAG,CAAC,KAAK,GAAG,KAAK,CAAC;QAClB,GAAG,CAAC,YAAY,GAAG,YAAY,CAAC;QAChC,cAAc,CAAC,GAAG,EAAE,OAAO,EAAE,KAAK,CAAC,CAAC;QACpC,cAAc,CAAC,GAAG,EAAE,UAAU,EAAE,QAAQ,CAAC,CAAC;QAC1C,cAAc,CAAC,GAAG,EAAE,aAAa,EAAE,WAAW,CAAC,CAAC;QAChD,cAAc,CAAC,GAAG,EAAE,cAAc,EAAE,YAAY,CAAC,CAAC;QAClD,cAAc,CAAC,GAAG,EAAE,YAAY,EAAE,UAAU,CAAC,CAAC;QAC9C,cAAc,CACZ,GAAG,EACH,UAAU,EACV,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CACxD,CAAC;QACF,cAAc,CAAC,GAAG,EAAE,SAAS,EAAE,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC;IAClD,CAAC;IAEO,YAAY,CAAC,IAAY;QAC/B,KAAK,MAAM,MAAM,IAAI,oBAAoB,EAAE,CAAC;YAC1C,IAAI,IAAI,KAAK,MAAM,IAAI,IAAI,CAAC,UAAU,CAAC,MAAM,GAAG,GAAG,CAAC;gBAAE,OAAO,IAAI,CAAC;QACpE,CAAC;QACD,IACE,IAAI,KAAK,qBAAqB;YAC9B,IAAI,CAAC,UAAU,CAAC,qBAAqB,GAAG,GAAG,CAAC,EAC5C,CAAC;YACD,OAAO,IAAI,CAAC;QACd,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;CACF,CAAA;AA5OY,oDAAoB;+BAApB,oBAAoB;IADhC,IAAA,mBAAU,GAAE;IAeR,WAAA,IAAA,iBAAQ,GAAE,CAAA;IACV,WAAA,IAAA,eAAM,EAAC,yCAAmB,CAAC,CAAA;;GAfnB,oBAAoB,CA4OhC;AAOD,SAAS,cAAc,CACrB,GAAmB,EACnB,GAAM,EACN,KAAoC;IAEpC,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;QACxB,OAAO,GAAG,CAAC,GAAG,CAAC,CAAC;IAClB,CAAC;SAAM,CAAC;QACN,GAAG,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;IACnB,CAAC;AACH,CAAC"}
|
package/package.json
CHANGED
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
{
|
|
2
2
|
"name": "@xemahq/platform-common",
|
|
3
|
-
"version": "0.
|
|
3
|
+
"version": "0.42.0",
|
|
4
4
|
"description": "Shared NestJS building blocks for Xema services — auth guards, response redaction, CORS configuration, and crypto helpers.",
|
|
5
5
|
"license": "Apache-2.0",
|
|
6
6
|
"author": "Neuralchowder Inc. <developer@xema.dev> (https://xema.dev)",
|
|
@@ -65,7 +65,7 @@
|
|
|
65
65
|
"rxjs": "7.8.2",
|
|
66
66
|
"ts-jest": "^29.4.9",
|
|
67
67
|
"typescript": "5.9.3",
|
|
68
|
-
"@xemahq/contracts": "^0.
|
|
68
|
+
"@xemahq/contracts": "^0.24.0"
|
|
69
69
|
},
|
|
70
70
|
"exports": {
|
|
71
71
|
".": {
|