@xemahq/platform-common 0.7.0 → 0.7.2
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/dist/lib/request-context.d.ts +2 -0
- package/dist/lib/request-context.d.ts.map +1 -1
- package/dist/lib/request-context.js.map +1 -1
- package/dist/lib/run-events/event-families.d.ts +0 -1
- package/dist/lib/run-events/event-families.d.ts.map +1 -1
- package/dist/nestjs/auth/index.d.ts +2 -0
- package/dist/nestjs/auth/index.d.ts.map +1 -1
- package/dist/nestjs/auth/index.js +16 -1
- package/dist/nestjs/auth/index.js.map +1 -1
- package/dist/nestjs/auth/org-authority-observations.d.ts +15 -0
- package/dist/nestjs/auth/org-authority-observations.d.ts.map +1 -0
- package/dist/nestjs/auth/org-authority-observations.js +47 -0
- package/dist/nestjs/auth/org-authority-observations.js.map +1 -0
- package/dist/nestjs/auth/org-authority.d.ts +32 -0
- package/dist/nestjs/auth/org-authority.d.ts.map +1 -0
- package/dist/nestjs/auth/org-authority.js +102 -0
- package/dist/nestjs/auth/org-authority.js.map +1 -0
- package/dist/nestjs/auth/service-token.guard.d.ts.map +1 -1
- package/dist/nestjs/auth/service-token.guard.js.map +1 -1
- package/dist/nestjs/cluster-ca-dispatcher.d.ts +13 -0
- package/dist/nestjs/cluster-ca-dispatcher.d.ts.map +1 -0
- package/dist/nestjs/cluster-ca-dispatcher.js +43 -0
- package/dist/nestjs/cluster-ca-dispatcher.js.map +1 -0
- package/dist/nestjs/index.d.ts +2 -1
- package/dist/nestjs/index.d.ts.map +1 -1
- package/dist/nestjs/index.js +20 -1
- package/dist/nestjs/index.js.map +1 -1
- package/dist/nestjs/request-context.middleware.d.ts +1 -0
- package/dist/nestjs/request-context.middleware.d.ts.map +1 -1
- package/dist/nestjs/request-context.middleware.js +38 -0
- package/dist/nestjs/request-context.middleware.js.map +1 -1
- package/package.json +3 -2
|
@@ -1,10 +1,12 @@
|
|
|
1
1
|
import { SubjectKind, TokenClass } from '@xemahq/kernel-contracts/subject';
|
|
2
2
|
import type { SubjectRef, ActingForRef } from '@xemahq/kernel-contracts/subject';
|
|
3
|
+
import type { OrgAuthorityVerdict } from '../nestjs/auth/org-authority';
|
|
3
4
|
import type { OrgRole } from '../nestjs/auth/org-role';
|
|
4
5
|
import type { PipelineApprovalMode } from './approval-mode';
|
|
5
6
|
export type WorkScopeType = 'project' | 'pipeline_run' | 'agent_session';
|
|
6
7
|
export interface RequestContext {
|
|
7
8
|
orgId: string;
|
|
9
|
+
orgAuthority?: OrgAuthorityVerdict;
|
|
8
10
|
projectId?: string;
|
|
9
11
|
subject: SubjectRef;
|
|
10
12
|
tokenClass: TokenClass;
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"request-context.d.ts","sourceRoot":"","sources":["../../src/lib/request-context.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,kCAAkC,CAAC;AAC3E,OAAO,KAAK,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,kCAAkC,CAAC;AACjF,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,yBAAyB,CAAC;AACvD,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,iBAAiB,CAAC;AAO5D,MAAM,MAAM,aAAa,GACrB,SAAS,GACT,cAAc,GACd,eAAe,CAAC;AAEpB,MAAM,WAAW,cAAc;
|
|
1
|
+
{"version":3,"file":"request-context.d.ts","sourceRoot":"","sources":["../../src/lib/request-context.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,kCAAkC,CAAC;AAC3E,OAAO,KAAK,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,kCAAkC,CAAC;AACjF,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,8BAA8B,CAAC;AACxE,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,yBAAyB,CAAC;AACvD,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,iBAAiB,CAAC;AAO5D,MAAM,MAAM,aAAa,GACrB,SAAS,GACT,cAAc,GACd,eAAe,CAAC;AAEpB,MAAM,WAAW,cAAc;IAQ7B,KAAK,EAAE,MAAM,CAAC;IAsBd,YAAY,CAAC,EAAE,mBAAmB,CAAC;IACnC,SAAS,CAAC,EAAE,MAAM,CAAC;IAMnB,OAAO,EAAE,UAAU,CAAC;IAOpB,UAAU,EAAE,UAAU,CAAC;IAMvB,UAAU,EAAE,YAAY,EAAE,CAAC;IAE3B,OAAO,EAAE,MAAM,CAAC;IAMhB,SAAS,EAAE,OAAO,GAAG,OAAO,GAAG,SAAS,CAAC;IASzC,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IASnC,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,aAAa,EAAE,MAAM,CAAC;IACtB,WAAW,CAAC,EAAE,MAAM,CAAC;IAErB,aAAa,CAAC,EAAE,MAAM,CAAC;IAEvB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAE1B,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAE3B,aAAa,CAAC,EAAE,aAAa,CAAC;IAE9B,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,oBAAoB,CAAC,EAAE,oBAAoB,CAAC;IAsB5C,QAAQ,CAAC,EAAE,MAAM,CAAC;IAElB,KAAK,EAAE,MAAM,EAAE,CAAC;IAEhB,OAAO,CAAC,EAAE,MAAM,CAAC;IAYjB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAeD,eAAO,MAAM,eAAe,eAAqD,CAAC;AAalF,wBAAgB,iBAAiB,CAAC,GAAG,EAAE,MAAM,GAAG,cAAc,CAQ7D;AASD,wBAAgB,oBAAoB,CAAC,GAAG,EAAE,MAAM,GAAG,cAAc,GAAG,SAAS,CA+B5E;AAQD,OAAO,EAAE,WAAW,EAAE,UAAU,EAAE,CAAC;AACnC,YAAY,EAAE,UAAU,EAAE,YAAY,EAAE,CAAC;AACzC,OAAO,EAAE,OAAO,EAAE,MAAM,yBAAyB,CAAC"}
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"request-context.js","sourceRoot":"","sources":["../../src/lib/request-context.ts"],"names":[],"mappings":";;;
|
|
1
|
+
{"version":3,"file":"request-context.js","sourceRoot":"","sources":["../../src/lib/request-context.ts"],"names":[],"mappings":";;;AA8KA,8CAQC;AASD,oDA+BC;AA9ND,8DAA2E;AAsOlE,4FAtOA,qBAAW,OAsOA;AAAE,2FAtOA,oBAAU,OAsOA;AArEnB,QAAA,eAAe,GAAG,MAAM,CAAC,GAAG,CAAC,sCAAsC,CAAC,CAAC;AAalF,SAAgB,iBAAiB,CAAC,GAAW;IAC3C,MAAM,GAAG,GAAG,oBAAoB,CAAC,GAAG,CAAC,CAAC;IACtC,IAAI,CAAC,GAAG,EAAE,CAAC;QACT,MAAM,IAAI,KAAK,CACb,kFAAkF,CACnF,CAAC;IACJ,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AASD,SAAgB,oBAAoB,CAAC,GAAW;IAC9C,MAAM,MAAM,GAAI,GAA+B,CAAC,uBAAe,CAAC,CAAC;IACjE,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;QACzB,OAAO,MAAwB,CAAC;IAClC,CAAC;IAoBD,MAAM,GAAG,GAAI,GAAyB,CAAC,GAAG,CAAC;IAC3C,IAAI,GAAG,KAAK,IAAI,IAAI,OAAO,GAAG,KAAK,QAAQ,EAAE,CAAC;QAC5C,OAAQ,GAA+B,CAAC,uBAAe,CAE1C,CAAC;IAChB,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAUD,oDAAkD;AAAzC,mGAAA,OAAO,OAAA"}
|
|
@@ -43,7 +43,6 @@ export interface AdmissionTimeoutPayload {
|
|
|
43
43
|
waitDurationMs: number;
|
|
44
44
|
maxWaitMs: number;
|
|
45
45
|
}
|
|
46
|
-
export type AllocationStatus = 'requested' | 'queued' | 'provisioning' | 'initializing' | 'ready' | 'running' | 'idle' | 'finishing' | 'completed' | 'failed' | 'cancelled';
|
|
47
46
|
export interface WorkerProvisioningPayload {
|
|
48
47
|
backendType: string;
|
|
49
48
|
startedAt: string;
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"event-families.d.ts","sourceRoot":"","sources":["../../../src/lib/run-events/event-families.ts"],"names":[],"mappings":"AAOA,eAAO,MAAM,oBAAoB,iiGAkLvB,CAAC;AAEX,MAAM,MAAM,iBAAiB,GAAG,CAAC,OAAO,oBAAoB,CAAC,CAAC,MAAM,CAAC,CAAC;AAEtE,eAAO,MAAM,uBAAuB,EAAE,WAAW,CAAC,MAAM,CAEvD,CAAC;AAEF,wBAAgB,mBAAmB,CACjC,KAAK,EAAE,OAAO,GACb,KAAK,IAAI,iBAAiB,CAE5B;AAID,eAAO,MAAM,iBAAiB,siBAkCpB,CAAC;AAEX,MAAM,MAAM,cAAc,GAAG,CAAC,OAAO,iBAAiB,CAAC,CAAC,MAAM,CAAC,CAAC;AAEhE,eAAO,MAAM,oBAAoB,EAAE,WAAW,CAAC,MAAM,CAEpD,CAAC;AAEF,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,cAAc,CAExE;AAID,eAAO,MAAM,eAAe,4jHAGlB,CAAC;AAEX,MAAM,MAAM,YAAY,GAAG,iBAAiB,GAAG,cAAc,CAAC;AAE9D,eAAO,MAAM,kBAAkB,EAAE,WAAW,CAAC,MAAM,CAA4B,CAAC;AAEhF,wBAAgB,cAAc,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,YAAY,CAEpE;AAKD,eAAO,MAAM,kBAAkB,wbA+BrB,CAAC;AAEX,MAAM,MAAM,cAAc,GAAG,CAAC,OAAO,kBAAkB,CAAC,CAAC,MAAM,CAAC,CAAC;AAEjE,eAAO,MAAM,oBAAoB,EAAE,WAAW,CAAC,MAAM,CAEpD,CAAC;AAEF,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,cAAc,CAExE;AAKD,eAAO,MAAM,6BAA6B,EAAE,WAAW,CAAC,MAAM,CAiI5D,CAAC;AAIH,MAAM,WAAW,mBAAmB;IAClC,cAAc,EAAE,MAAM,CAAC;IACvB,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,0BAA0B;IACzC,aAAa,EAAE,MAAM,CAAC;IACtB,eAAe,EAAE,MAAM,GAAG,IAAI,CAAC;CAChC;AAED,MAAM,WAAW,2BAA2B;IAC1C,UAAU,EAAE,KAAK,GAAG,SAAS,CAAC;IAC9B,YAAY,EAAE,MAAM,CAAC;IACrB,UAAU,EAAE,MAAM,CAAC;CACpB;AAID,MAAM,WAAW,sBAAsB;IACrC,aAAa,EAAE,MAAM,CAAC;IACtB,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,wBAAwB;IACvC,cAAc,EAAE,MAAM,CAAC;CACxB;AAED,MAAM,WAAW,wBAAwB;IACvC,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,EAAE,KAAK,GAAG,SAAS,CAAC;CAC/B;AAED,MAAM,WAAW,uBAAuB;IACtC,cAAc,EAAE,MAAM,CAAC;IACvB,SAAS,EAAE,MAAM,CAAC;CACnB;AAID,MAAM,
|
|
1
|
+
{"version":3,"file":"event-families.d.ts","sourceRoot":"","sources":["../../../src/lib/run-events/event-families.ts"],"names":[],"mappings":"AAOA,eAAO,MAAM,oBAAoB,iiGAkLvB,CAAC;AAEX,MAAM,MAAM,iBAAiB,GAAG,CAAC,OAAO,oBAAoB,CAAC,CAAC,MAAM,CAAC,CAAC;AAEtE,eAAO,MAAM,uBAAuB,EAAE,WAAW,CAAC,MAAM,CAEvD,CAAC;AAEF,wBAAgB,mBAAmB,CACjC,KAAK,EAAE,OAAO,GACb,KAAK,IAAI,iBAAiB,CAE5B;AAID,eAAO,MAAM,iBAAiB,siBAkCpB,CAAC;AAEX,MAAM,MAAM,cAAc,GAAG,CAAC,OAAO,iBAAiB,CAAC,CAAC,MAAM,CAAC,CAAC;AAEhE,eAAO,MAAM,oBAAoB,EAAE,WAAW,CAAC,MAAM,CAEpD,CAAC;AAEF,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,cAAc,CAExE;AAID,eAAO,MAAM,eAAe,4jHAGlB,CAAC;AAEX,MAAM,MAAM,YAAY,GAAG,iBAAiB,GAAG,cAAc,CAAC;AAE9D,eAAO,MAAM,kBAAkB,EAAE,WAAW,CAAC,MAAM,CAA4B,CAAC;AAEhF,wBAAgB,cAAc,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,YAAY,CAEpE;AAKD,eAAO,MAAM,kBAAkB,wbA+BrB,CAAC;AAEX,MAAM,MAAM,cAAc,GAAG,CAAC,OAAO,kBAAkB,CAAC,CAAC,MAAM,CAAC,CAAC;AAEjE,eAAO,MAAM,oBAAoB,EAAE,WAAW,CAAC,MAAM,CAEpD,CAAC;AAEF,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,cAAc,CAExE;AAKD,eAAO,MAAM,6BAA6B,EAAE,WAAW,CAAC,MAAM,CAiI5D,CAAC;AAIH,MAAM,WAAW,mBAAmB;IAClC,cAAc,EAAE,MAAM,CAAC;IACvB,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,0BAA0B;IACzC,aAAa,EAAE,MAAM,CAAC;IACtB,eAAe,EAAE,MAAM,GAAG,IAAI,CAAC;CAChC;AAED,MAAM,WAAW,2BAA2B;IAC1C,UAAU,EAAE,KAAK,GAAG,SAAS,CAAC;IAC9B,YAAY,EAAE,MAAM,CAAC;IACrB,UAAU,EAAE,MAAM,CAAC;CACpB;AAID,MAAM,WAAW,sBAAsB;IACrC,aAAa,EAAE,MAAM,CAAC;IACtB,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,wBAAwB;IACvC,cAAc,EAAE,MAAM,CAAC;CACxB;AAED,MAAM,WAAW,wBAAwB;IACvC,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,EAAE,KAAK,GAAG,SAAS,CAAC;CAC/B;AAED,MAAM,WAAW,uBAAuB;IACtC,cAAc,EAAE,MAAM,CAAC;IACvB,SAAS,EAAE,MAAM,CAAC;CACnB;AAID,MAAM,WAAW,yBAAyB;IACxC,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE,MAAM,CAAC;CACnB;AAYD,MAAM,WAAW,8BAA8B;IAC7C,KAAK,EAAE,MAAM,CAAC;IACd,aAAa,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,aAAa,CAAC,EAAE,MAAM,CAAC;IAEvB,cAAc,CAAC,EAAE,MAAM,CAAC;IAExB,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB;AAED,MAAM,WAAW,yBAAyB;IACxC,mBAAmB,EAAE,MAAM,CAAC;CAC7B;AAED,MAAM,WAAW,iBAAiB;IAChC,WAAW,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,sBAAsB;IACrC,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,wBAAwB;IACvC,SAAS,EAAE,MAAM,CAAC;IAClB,aAAa,EAAE,MAAM,CAAC;IACtB,WAAW,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,wBAAwB;IACvC,KAAK,EAAE,MAAM,CAAC;IACd,eAAe,EAAE,MAAM,GAAG,IAAI,CAAC;CAChC;AAID,MAAM,WAAW,uBAAuB;IACtC,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,eAAe,EAAE,MAAM,GAAG,IAAI,CAAC;CAChC;AAID,MAAM,WAAW,kBAAkB;IACjC,WAAW,EACP,UAAU,GACV,KAAK,GACL,sBAAsB,GACtB,UAAU,GACV,OAAO,GACP,eAAe,CAAC;IACpB,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,SAAS,GAAG,YAAY,GAAG,SAAS,CAAC;IAC/C,MAAM,EAAE,MAAM,CAAC;IACf,iBAAiB,CAAC,EAAE,MAAM,EAAE,CAAC;IAC7B,mBAAmB,CAAC,EAAE,MAAM,EAAE,CAAC;IAC/B,QAAQ,CAAC,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,EAAE,EAAE,MAAM,CAAA;KAAE,CAAC;CACzC"}
|
|
@@ -11,5 +11,7 @@ export { PlatformAdminGuard } from './platform-admin.guard';
|
|
|
11
11
|
export { configureAuthMiddleware, type ConfigureAuthMiddlewareOptions, } from './configure-auth-middleware';
|
|
12
12
|
export { OrgClaimKey, OrgHeaderName, ORG_CLAIM_KEYS, resolveOrgClaim, } from './org-claim';
|
|
13
13
|
export { RequireOrgClaim, REQUIRE_ORG_CLAIM } from './org-claim-required';
|
|
14
|
+
export { OrgAuthoritySource, type OrgAuthorityVerdict, type OrgAuthorityCallerFacts, resolveOrgAuthority, isOrgAuthorityProven, orgAuthorityRequiresProof, OrgAuthorityMode, ORG_AUTHORITY_MODE_ENV, InvalidOrgAuthorityModeError, resolveOrgAuthorityMode, } from './org-authority';
|
|
15
|
+
export { ORG_AUTHORITY_OBSERVATION_LIMIT, UNKNOWN_CLIENT_ID, type OrgAuthorityObservation, type OrgAuthorityCensus, recordUnprovenOrgAuthority, orgAuthorityCensus, resetOrgAuthorityCensus, } from './org-authority-observations';
|
|
14
16
|
export { resolveActorChainFromClaims, UnclassifiableActorHopError, MalformedActorHopError, } from './delegation-chain';
|
|
15
17
|
//# sourceMappingURL=index.d.ts.map
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/nestjs/auth/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AAC3C,OAAO,EACL,mBAAmB,EACnB,KAAK,iBAAiB,EACtB,KAAK,sBAAsB,GAC5B,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAAE,iBAAiB,EAAE,MAAM,uBAAuB,CAAC;AAC1D,OAAO,EAAE,mBAAmB,EAAE,MAAM,yBAAyB,CAAC;AAC9D,OAAO,EAAE,iBAAiB,EAAE,MAAM,uBAAuB,CAAC;AAC1D,OAAO,EACL,eAAe,EACf,iBAAiB,EACjB,mBAAmB,GACpB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EACL,YAAY,EACZ,cAAc,EACd,gBAAgB,GACjB,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EACL,OAAO,EACP,gBAAgB,EAChB,oBAAoB,EACpB,eAAe,EACf,oBAAoB,EACpB,gBAAgB,GACjB,MAAM,YAAY,CAAC;AACpB,OAAO,EAAE,YAAY,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAC;AAChE,OAAO,EAAE,kBAAkB,EAAE,MAAM,wBAAwB,CAAC;AAC5D,OAAO,EACL,uBAAuB,EACvB,KAAK,8BAA8B,GACpC,MAAM,6BAA6B,CAAC;AACrC,OAAO,EACL,WAAW,EACX,aAAa,EACb,cAAc,EACd,eAAe,GAChB,MAAM,aAAa,CAAC;AACrB,OAAO,EAAE,eAAe,EAAE,iBAAiB,EAAE,MAAM,sBAAsB,CAAC;AAC1E,OAAO,EACL,2BAA2B,EAC3B,2BAA2B,EAC3B,sBAAsB,GACvB,MAAM,oBAAoB,CAAC"}
|
|
1
|
+
{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/nestjs/auth/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AAC3C,OAAO,EACL,mBAAmB,EACnB,KAAK,iBAAiB,EACtB,KAAK,sBAAsB,GAC5B,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAAE,iBAAiB,EAAE,MAAM,uBAAuB,CAAC;AAC1D,OAAO,EAAE,mBAAmB,EAAE,MAAM,yBAAyB,CAAC;AAC9D,OAAO,EAAE,iBAAiB,EAAE,MAAM,uBAAuB,CAAC;AAC1D,OAAO,EACL,eAAe,EACf,iBAAiB,EACjB,mBAAmB,GACpB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EACL,YAAY,EACZ,cAAc,EACd,gBAAgB,GACjB,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EACL,OAAO,EACP,gBAAgB,EAChB,oBAAoB,EACpB,eAAe,EACf,oBAAoB,EACpB,gBAAgB,GACjB,MAAM,YAAY,CAAC;AACpB,OAAO,EAAE,YAAY,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAC;AAChE,OAAO,EAAE,kBAAkB,EAAE,MAAM,wBAAwB,CAAC;AAC5D,OAAO,EACL,uBAAuB,EACvB,KAAK,8BAA8B,GACpC,MAAM,6BAA6B,CAAC;AACrC,OAAO,EACL,WAAW,EACX,aAAa,EACb,cAAc,EACd,eAAe,GAChB,MAAM,aAAa,CAAC;AACrB,OAAO,EAAE,eAAe,EAAE,iBAAiB,EAAE,MAAM,sBAAsB,CAAC;AAC1E,OAAO,EACL,kBAAkB,EAClB,KAAK,mBAAmB,EACxB,KAAK,uBAAuB,EAC5B,mBAAmB,EACnB,oBAAoB,EACpB,yBAAyB,EACzB,gBAAgB,EAChB,sBAAsB,EACtB,4BAA4B,EAC5B,uBAAuB,GACxB,MAAM,iBAAiB,CAAC;AACzB,OAAO,EACL,+BAA+B,EAC/B,iBAAiB,EACjB,KAAK,uBAAuB,EAC5B,KAAK,kBAAkB,EACvB,0BAA0B,EAC1B,kBAAkB,EAClB,uBAAuB,GACxB,MAAM,8BAA8B,CAAC;AACtC,OAAO,EACL,2BAA2B,EAC3B,2BAA2B,EAC3B,sBAAsB,GACvB,MAAM,oBAAoB,CAAC"}
|
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
"use strict";
|
|
2
2
|
Object.defineProperty(exports, "__esModule", { value: true });
|
|
3
|
-
exports.MalformedActorHopError = exports.UnclassifiableActorHopError = exports.resolveActorChainFromClaims = exports.REQUIRE_ORG_CLAIM = exports.RequireOrgClaim = exports.resolveOrgClaim = exports.ORG_CLAIM_KEYS = exports.OrgHeaderName = exports.OrgClaimKey = exports.configureAuthMiddleware = exports.PlatformAdminGuard = exports.hasPlatformRole = exports.PlatformRole = exports.orgRoleSatisfies = exports.resolveOrgRoleForOrg = exports.resolveOrgRoles = exports.ORG_ROLES_CLAIM_KEYS = exports.OrgRolesClaimKey = exports.OrgRole = exports.REQUIRE_ORG_ROLE = exports.RequireOrgRole = exports.OrgRoleGuard = exports.REQUIRE_TOKEN_CLASS = exports.RequireTokenClass = exports.TokenClassGuard = exports.ServiceActorGuard = exports.InternalCallerGuard = exports.ServiceTokenGuard = exports.AUTH_MODULE_OPTIONS = exports.AuthModule = void 0;
|
|
3
|
+
exports.MalformedActorHopError = exports.UnclassifiableActorHopError = exports.resolveActorChainFromClaims = exports.resetOrgAuthorityCensus = exports.orgAuthorityCensus = exports.recordUnprovenOrgAuthority = exports.UNKNOWN_CLIENT_ID = exports.ORG_AUTHORITY_OBSERVATION_LIMIT = exports.resolveOrgAuthorityMode = exports.InvalidOrgAuthorityModeError = exports.ORG_AUTHORITY_MODE_ENV = exports.OrgAuthorityMode = exports.orgAuthorityRequiresProof = exports.isOrgAuthorityProven = exports.resolveOrgAuthority = exports.OrgAuthoritySource = exports.REQUIRE_ORG_CLAIM = exports.RequireOrgClaim = exports.resolveOrgClaim = exports.ORG_CLAIM_KEYS = exports.OrgHeaderName = exports.OrgClaimKey = exports.configureAuthMiddleware = exports.PlatformAdminGuard = exports.hasPlatformRole = exports.PlatformRole = exports.orgRoleSatisfies = exports.resolveOrgRoleForOrg = exports.resolveOrgRoles = exports.ORG_ROLES_CLAIM_KEYS = exports.OrgRolesClaimKey = exports.OrgRole = exports.REQUIRE_ORG_ROLE = exports.RequireOrgRole = exports.OrgRoleGuard = exports.REQUIRE_TOKEN_CLASS = exports.RequireTokenClass = exports.TokenClassGuard = exports.ServiceActorGuard = exports.InternalCallerGuard = exports.ServiceTokenGuard = exports.AUTH_MODULE_OPTIONS = exports.AuthModule = void 0;
|
|
4
4
|
var auth_module_1 = require("./auth.module");
|
|
5
5
|
Object.defineProperty(exports, "AuthModule", { enumerable: true, get: function () { return auth_module_1.AuthModule; } });
|
|
6
6
|
var auth_module_options_1 = require("./auth-module-options");
|
|
@@ -41,6 +41,21 @@ Object.defineProperty(exports, "resolveOrgClaim", { enumerable: true, get: funct
|
|
|
41
41
|
var org_claim_required_1 = require("./org-claim-required");
|
|
42
42
|
Object.defineProperty(exports, "RequireOrgClaim", { enumerable: true, get: function () { return org_claim_required_1.RequireOrgClaim; } });
|
|
43
43
|
Object.defineProperty(exports, "REQUIRE_ORG_CLAIM", { enumerable: true, get: function () { return org_claim_required_1.REQUIRE_ORG_CLAIM; } });
|
|
44
|
+
var org_authority_1 = require("./org-authority");
|
|
45
|
+
Object.defineProperty(exports, "OrgAuthoritySource", { enumerable: true, get: function () { return org_authority_1.OrgAuthoritySource; } });
|
|
46
|
+
Object.defineProperty(exports, "resolveOrgAuthority", { enumerable: true, get: function () { return org_authority_1.resolveOrgAuthority; } });
|
|
47
|
+
Object.defineProperty(exports, "isOrgAuthorityProven", { enumerable: true, get: function () { return org_authority_1.isOrgAuthorityProven; } });
|
|
48
|
+
Object.defineProperty(exports, "orgAuthorityRequiresProof", { enumerable: true, get: function () { return org_authority_1.orgAuthorityRequiresProof; } });
|
|
49
|
+
Object.defineProperty(exports, "OrgAuthorityMode", { enumerable: true, get: function () { return org_authority_1.OrgAuthorityMode; } });
|
|
50
|
+
Object.defineProperty(exports, "ORG_AUTHORITY_MODE_ENV", { enumerable: true, get: function () { return org_authority_1.ORG_AUTHORITY_MODE_ENV; } });
|
|
51
|
+
Object.defineProperty(exports, "InvalidOrgAuthorityModeError", { enumerable: true, get: function () { return org_authority_1.InvalidOrgAuthorityModeError; } });
|
|
52
|
+
Object.defineProperty(exports, "resolveOrgAuthorityMode", { enumerable: true, get: function () { return org_authority_1.resolveOrgAuthorityMode; } });
|
|
53
|
+
var org_authority_observations_1 = require("./org-authority-observations");
|
|
54
|
+
Object.defineProperty(exports, "ORG_AUTHORITY_OBSERVATION_LIMIT", { enumerable: true, get: function () { return org_authority_observations_1.ORG_AUTHORITY_OBSERVATION_LIMIT; } });
|
|
55
|
+
Object.defineProperty(exports, "UNKNOWN_CLIENT_ID", { enumerable: true, get: function () { return org_authority_observations_1.UNKNOWN_CLIENT_ID; } });
|
|
56
|
+
Object.defineProperty(exports, "recordUnprovenOrgAuthority", { enumerable: true, get: function () { return org_authority_observations_1.recordUnprovenOrgAuthority; } });
|
|
57
|
+
Object.defineProperty(exports, "orgAuthorityCensus", { enumerable: true, get: function () { return org_authority_observations_1.orgAuthorityCensus; } });
|
|
58
|
+
Object.defineProperty(exports, "resetOrgAuthorityCensus", { enumerable: true, get: function () { return org_authority_observations_1.resetOrgAuthorityCensus; } });
|
|
44
59
|
var delegation_chain_1 = require("./delegation-chain");
|
|
45
60
|
Object.defineProperty(exports, "resolveActorChainFromClaims", { enumerable: true, get: function () { return delegation_chain_1.resolveActorChainFromClaims; } });
|
|
46
61
|
Object.defineProperty(exports, "UnclassifiableActorHopError", { enumerable: true, get: function () { return delegation_chain_1.UnclassifiableActorHopError; } });
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/nestjs/auth/index.ts"],"names":[],"mappings":";;;AAAA,6CAA2C;AAAlC,yGAAA,UAAU,OAAA;AACnB,6DAI+B;AAH7B,0HAAA,mBAAmB,OAAA;AAIrB,6DAA0D;AAAjD,wHAAA,iBAAiB,OAAA;AAC1B,iEAA8D;AAArD,4HAAA,mBAAmB,OAAA;AAC5B,6DAA0D;AAAjD,wHAAA,iBAAiB,OAAA;AAC1B,yDAI6B;AAH3B,oHAAA,eAAe,OAAA;AACf,sHAAA,iBAAiB,OAAA;AACjB,wHAAA,mBAAmB,OAAA;AAErB,mDAI0B;AAHxB,8GAAA,YAAY,OAAA;AACZ,gHAAA,cAAc,OAAA;AACd,kHAAA,gBAAgB,OAAA;AAElB,uCAOoB;AANlB,mGAAA,OAAO,OAAA;AACP,4GAAA,gBAAgB,OAAA;AAChB,gHAAA,oBAAoB,OAAA;AACpB,2GAAA,eAAe,OAAA;AACf,gHAAA,oBAAoB,OAAA;AACpB,4GAAA,gBAAgB,OAAA;AAElB,iDAAgE;AAAvD,6GAAA,YAAY,OAAA;AAAE,gHAAA,eAAe,OAAA;AACtC,+DAA4D;AAAnD,0HAAA,kBAAkB,OAAA;AAC3B,yEAGqC;AAFnC,oIAAA,uBAAuB,OAAA;AAGzB,yCAKqB;AAJnB,wGAAA,WAAW,OAAA;AACX,0GAAA,aAAa,OAAA;AACb,2GAAA,cAAc,OAAA;AACd,4GAAA,eAAe,OAAA;AAEjB,2DAA0E;AAAjE,qHAAA,eAAe,OAAA;AAAE,uHAAA,iBAAiB,OAAA;AAC3C,uDAI4B;AAH1B,+HAAA,2BAA2B,OAAA;AAC3B,+HAAA,2BAA2B,OAAA;AAC3B,0HAAA,sBAAsB,OAAA"}
|
|
1
|
+
{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/nestjs/auth/index.ts"],"names":[],"mappings":";;;AAAA,6CAA2C;AAAlC,yGAAA,UAAU,OAAA;AACnB,6DAI+B;AAH7B,0HAAA,mBAAmB,OAAA;AAIrB,6DAA0D;AAAjD,wHAAA,iBAAiB,OAAA;AAC1B,iEAA8D;AAArD,4HAAA,mBAAmB,OAAA;AAC5B,6DAA0D;AAAjD,wHAAA,iBAAiB,OAAA;AAC1B,yDAI6B;AAH3B,oHAAA,eAAe,OAAA;AACf,sHAAA,iBAAiB,OAAA;AACjB,wHAAA,mBAAmB,OAAA;AAErB,mDAI0B;AAHxB,8GAAA,YAAY,OAAA;AACZ,gHAAA,cAAc,OAAA;AACd,kHAAA,gBAAgB,OAAA;AAElB,uCAOoB;AANlB,mGAAA,OAAO,OAAA;AACP,4GAAA,gBAAgB,OAAA;AAChB,gHAAA,oBAAoB,OAAA;AACpB,2GAAA,eAAe,OAAA;AACf,gHAAA,oBAAoB,OAAA;AACpB,4GAAA,gBAAgB,OAAA;AAElB,iDAAgE;AAAvD,6GAAA,YAAY,OAAA;AAAE,gHAAA,eAAe,OAAA;AACtC,+DAA4D;AAAnD,0HAAA,kBAAkB,OAAA;AAC3B,yEAGqC;AAFnC,oIAAA,uBAAuB,OAAA;AAGzB,yCAKqB;AAJnB,wGAAA,WAAW,OAAA;AACX,0GAAA,aAAa,OAAA;AACb,2GAAA,cAAc,OAAA;AACd,4GAAA,eAAe,OAAA;AAEjB,2DAA0E;AAAjE,qHAAA,eAAe,OAAA;AAAE,uHAAA,iBAAiB,OAAA;AAC3C,iDAWyB;AAVvB,mHAAA,kBAAkB,OAAA;AAGlB,oHAAA,mBAAmB,OAAA;AACnB,qHAAA,oBAAoB,OAAA;AACpB,0HAAA,yBAAyB,OAAA;AACzB,iHAAA,gBAAgB,OAAA;AAChB,uHAAA,sBAAsB,OAAA;AACtB,6HAAA,4BAA4B,OAAA;AAC5B,wHAAA,uBAAuB,OAAA;AAEzB,2EAQsC;AAPpC,6IAAA,+BAA+B,OAAA;AAC/B,+HAAA,iBAAiB,OAAA;AAGjB,wIAAA,0BAA0B,OAAA;AAC1B,gIAAA,kBAAkB,OAAA;AAClB,qIAAA,uBAAuB,OAAA;AAEzB,uDAI4B;AAH1B,+HAAA,2BAA2B,OAAA;AAC3B,+HAAA,2BAA2B,OAAA;AAC3B,0HAAA,sBAAsB,OAAA"}
|
|
@@ -0,0 +1,15 @@
|
|
|
1
|
+
import type { OrgAuthorityCallerFacts } from './org-authority';
|
|
2
|
+
export declare const ORG_AUTHORITY_OBSERVATION_LIMIT = 512;
|
|
3
|
+
export interface OrgAuthorityObservation extends OrgAuthorityCallerFacts {
|
|
4
|
+
readonly count: number;
|
|
5
|
+
readonly firstSeenAt: string;
|
|
6
|
+
}
|
|
7
|
+
export interface OrgAuthorityCensus {
|
|
8
|
+
readonly observations: readonly OrgAuthorityObservation[];
|
|
9
|
+
readonly droppedByLimit: number;
|
|
10
|
+
}
|
|
11
|
+
export declare const UNKNOWN_CLIENT_ID = "<unknown>";
|
|
12
|
+
export declare function recordUnprovenOrgAuthority(facts: OrgAuthorityCallerFacts): boolean;
|
|
13
|
+
export declare function orgAuthorityCensus(): OrgAuthorityCensus;
|
|
14
|
+
export declare function resetOrgAuthorityCensus(): void;
|
|
15
|
+
//# sourceMappingURL=org-authority-observations.d.ts.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"org-authority-observations.d.ts","sourceRoot":"","sources":["../../../src/nestjs/auth/org-authority-observations.ts"],"names":[],"mappings":"AAgCA,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,iBAAiB,CAAC;AAO/D,eAAO,MAAM,+BAA+B,MAAM,CAAC;AAGnD,MAAM,WAAW,uBAAwB,SAAQ,uBAAuB;IAEtE,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IAEvB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;CAC9B;AAGD,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,YAAY,EAAE,SAAS,uBAAuB,EAAE,CAAC;IAM1D,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;CACjC;AAWD,eAAO,MAAM,iBAAiB,cAAc,CAAC;AAmB7C,wBAAgB,0BAA0B,CACxC,KAAK,EAAE,uBAAuB,GAC7B,OAAO,CAiBT;AAGD,wBAAgB,kBAAkB,IAAI,kBAAkB,CAKvD;AAMD,wBAAgB,uBAAuB,IAAI,IAAI,CAG9C"}
|
|
@@ -0,0 +1,47 @@
|
|
|
1
|
+
"use strict";
|
|
2
|
+
Object.defineProperty(exports, "__esModule", { value: true });
|
|
3
|
+
exports.UNKNOWN_CLIENT_ID = exports.ORG_AUTHORITY_OBSERVATION_LIMIT = void 0;
|
|
4
|
+
exports.recordUnprovenOrgAuthority = recordUnprovenOrgAuthority;
|
|
5
|
+
exports.orgAuthorityCensus = orgAuthorityCensus;
|
|
6
|
+
exports.resetOrgAuthorityCensus = resetOrgAuthorityCensus;
|
|
7
|
+
exports.ORG_AUTHORITY_OBSERVATION_LIMIT = 512;
|
|
8
|
+
const observations = new Map();
|
|
9
|
+
let droppedByLimit = 0;
|
|
10
|
+
exports.UNKNOWN_CLIENT_ID = '<unknown>';
|
|
11
|
+
function keyFor(facts) {
|
|
12
|
+
return [
|
|
13
|
+
facts.clientId,
|
|
14
|
+
facts.tokenClass,
|
|
15
|
+
facts.subjectKind,
|
|
16
|
+
facts.delegated ? 'delegated' : 'direct',
|
|
17
|
+
].join('|');
|
|
18
|
+
}
|
|
19
|
+
function recordUnprovenOrgAuthority(facts) {
|
|
20
|
+
const key = keyFor(facts);
|
|
21
|
+
const existing = observations.get(key);
|
|
22
|
+
if (existing) {
|
|
23
|
+
existing.count += 1;
|
|
24
|
+
return false;
|
|
25
|
+
}
|
|
26
|
+
if (observations.size >= exports.ORG_AUTHORITY_OBSERVATION_LIMIT) {
|
|
27
|
+
droppedByLimit += 1;
|
|
28
|
+
return false;
|
|
29
|
+
}
|
|
30
|
+
observations.set(key, {
|
|
31
|
+
...facts,
|
|
32
|
+
count: 1,
|
|
33
|
+
firstSeenAt: new Date().toISOString(),
|
|
34
|
+
});
|
|
35
|
+
return true;
|
|
36
|
+
}
|
|
37
|
+
function orgAuthorityCensus() {
|
|
38
|
+
return {
|
|
39
|
+
observations: [...observations.values()].map((entry) => ({ ...entry })),
|
|
40
|
+
droppedByLimit,
|
|
41
|
+
};
|
|
42
|
+
}
|
|
43
|
+
function resetOrgAuthorityCensus() {
|
|
44
|
+
observations.clear();
|
|
45
|
+
droppedByLimit = 0;
|
|
46
|
+
}
|
|
47
|
+
//# sourceMappingURL=org-authority-observations.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"org-authority-observations.js","sourceRoot":"","sources":["../../../src/nestjs/auth/org-authority-observations.ts"],"names":[],"mappings":";;;AAwFA,gEAmBC;AAGD,gDAKC;AAMD,0DAGC;AArFY,QAAA,+BAA+B,GAAG,GAAG,CAAC;AA0BnD,MAAM,YAAY,GAAG,IAAI,GAAG,EAA8B,CAAC;AAC3D,IAAI,cAAc,GAAG,CAAC,CAAC;AAGV,QAAA,iBAAiB,GAAG,WAAW,CAAC;AAE7C,SAAS,MAAM,CAAC,KAA8B;IAC5C,OAAO;QACL,KAAK,CAAC,QAAQ;QACd,KAAK,CAAC,UAAU;QAChB,KAAK,CAAC,WAAW;QACjB,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,QAAQ;KACzC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AACd,CAAC;AAUD,SAAgB,0BAA0B,CACxC,KAA8B;IAE9B,MAAM,GAAG,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;IAC1B,MAAM,QAAQ,GAAG,YAAY,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IACvC,IAAI,QAAQ,EAAE,CAAC;QACb,QAAQ,CAAC,KAAK,IAAI,CAAC,CAAC;QACpB,OAAO,KAAK,CAAC;IACf,CAAC;IACD,IAAI,YAAY,CAAC,IAAI,IAAI,uCAA+B,EAAE,CAAC;QACzD,cAAc,IAAI,CAAC,CAAC;QACpB,OAAO,KAAK,CAAC;IACf,CAAC;IACD,YAAY,CAAC,GAAG,CAAC,GAAG,EAAE;QACpB,GAAG,KAAK;QACR,KAAK,EAAE,CAAC;QACR,WAAW,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;KACtC,CAAC,CAAC;IACH,OAAO,IAAI,CAAC;AACd,CAAC;AAGD,SAAgB,kBAAkB;IAChC,OAAO;QACL,YAAY,EAAE,CAAC,GAAG,YAAY,CAAC,MAAM,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,KAAK,EAAE,CAAC,CAAC;QACvE,cAAc;KACf,CAAC;AACJ,CAAC;AAMD,SAAgB,uBAAuB;IACrC,YAAY,CAAC,KAAK,EAAE,CAAC;IACrB,cAAc,GAAG,CAAC,CAAC;AACrB,CAAC"}
|
|
@@ -0,0 +1,32 @@
|
|
|
1
|
+
import type { SubjectKind, TokenClass } from '@xemahq/kernel-contracts/subject';
|
|
2
|
+
export declare enum OrgAuthoritySource {
|
|
3
|
+
OrgClaim = "org_claim",
|
|
4
|
+
OrgMembership = "org_membership",
|
|
5
|
+
NoOrgAsserted = "no_org_asserted",
|
|
6
|
+
ClaimMismatch = "claim_mismatch",
|
|
7
|
+
Unproven = "unproven_header"
|
|
8
|
+
}
|
|
9
|
+
export interface OrgAuthorityVerdict {
|
|
10
|
+
readonly source: OrgAuthoritySource;
|
|
11
|
+
readonly assertedOrgId: string;
|
|
12
|
+
readonly tokenOrgId?: string;
|
|
13
|
+
}
|
|
14
|
+
export declare function resolveOrgAuthority(claims: Record<string, unknown>, assertedOrgId: string): OrgAuthorityVerdict;
|
|
15
|
+
export declare function isOrgAuthorityProven(verdict: OrgAuthorityVerdict): boolean;
|
|
16
|
+
export declare function orgAuthorityRequiresProof(verdict: OrgAuthorityVerdict): boolean;
|
|
17
|
+
export declare enum OrgAuthorityMode {
|
|
18
|
+
Observe = "observe",
|
|
19
|
+
Enforce = "enforce"
|
|
20
|
+
}
|
|
21
|
+
export declare const ORG_AUTHORITY_MODE_ENV = "XEMA_ORG_AUTHORITY_MODE";
|
|
22
|
+
export declare class InvalidOrgAuthorityModeError extends Error {
|
|
23
|
+
constructor(value: string);
|
|
24
|
+
}
|
|
25
|
+
export declare function resolveOrgAuthorityMode(env?: NodeJS.ProcessEnv): OrgAuthorityMode;
|
|
26
|
+
export interface OrgAuthorityCallerFacts {
|
|
27
|
+
readonly clientId: string;
|
|
28
|
+
readonly tokenClass: TokenClass;
|
|
29
|
+
readonly subjectKind: SubjectKind;
|
|
30
|
+
readonly delegated: boolean;
|
|
31
|
+
}
|
|
32
|
+
//# sourceMappingURL=org-authority.d.ts.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"org-authority.d.ts","sourceRoot":"","sources":["../../../src/nestjs/auth/org-authority.ts"],"names":[],"mappings":"AA+CA,OAAO,KAAK,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,kCAAkC,CAAC;AAahF,oBAAY,kBAAkB;IAE5B,QAAQ,cAAc;IAEtB,aAAa,mBAAmB;IAKhC,aAAa,oBAAoB;IAYjC,aAAa,mBAAmB;IAKhC,QAAQ,oBAAoB;CAC7B;AAGD,MAAM,WAAW,mBAAmB;IAElC,QAAQ,CAAC,MAAM,EAAE,kBAAkB,CAAC;IAEpC,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAO/B,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;CAC9B;AAYD,wBAAgB,mBAAmB,CACjC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC/B,aAAa,EAAE,MAAM,GACpB,mBAAmB,CAuCrB;AAGD,wBAAgB,oBAAoB,CAAC,OAAO,EAAE,mBAAmB,GAAG,OAAO,CAU1E;AAUD,wBAAgB,yBAAyB,CACvC,OAAO,EAAE,mBAAmB,GAC3B,OAAO,CAUT;AAiBD,oBAAY,gBAAgB;IAE1B,OAAO,YAAY;IAEnB,OAAO,YAAY;CACpB;AAGD,eAAO,MAAM,sBAAsB,4BAA4B,CAAC;AAGhE,qBAAa,4BAA6B,SAAQ,KAAK;gBACzC,KAAK,EAAE,MAAM;CAO1B;AAYD,wBAAgB,uBAAuB,CACrC,GAAG,GAAE,MAAM,CAAC,UAAwB,GACnC,gBAAgB,CAelB;AAQD,MAAM,WAAW,uBAAuB;IAEtC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,UAAU,EAAE,UAAU,CAAC;IAChC,QAAQ,CAAC,WAAW,EAAE,WAAW,CAAC;IAElC,QAAQ,CAAC,SAAS,EAAE,OAAO,CAAC;CAC7B"}
|
|
@@ -0,0 +1,102 @@
|
|
|
1
|
+
"use strict";
|
|
2
|
+
Object.defineProperty(exports, "__esModule", { value: true });
|
|
3
|
+
exports.InvalidOrgAuthorityModeError = exports.ORG_AUTHORITY_MODE_ENV = exports.OrgAuthorityMode = exports.OrgAuthoritySource = void 0;
|
|
4
|
+
exports.resolveOrgAuthority = resolveOrgAuthority;
|
|
5
|
+
exports.isOrgAuthorityProven = isOrgAuthorityProven;
|
|
6
|
+
exports.orgAuthorityRequiresProof = orgAuthorityRequiresProof;
|
|
7
|
+
exports.resolveOrgAuthorityMode = resolveOrgAuthorityMode;
|
|
8
|
+
const org_claim_1 = require("./org-claim");
|
|
9
|
+
const org_role_1 = require("./org-role");
|
|
10
|
+
var OrgAuthoritySource;
|
|
11
|
+
(function (OrgAuthoritySource) {
|
|
12
|
+
OrgAuthoritySource["OrgClaim"] = "org_claim";
|
|
13
|
+
OrgAuthoritySource["OrgMembership"] = "org_membership";
|
|
14
|
+
OrgAuthoritySource["NoOrgAsserted"] = "no_org_asserted";
|
|
15
|
+
OrgAuthoritySource["ClaimMismatch"] = "claim_mismatch";
|
|
16
|
+
OrgAuthoritySource["Unproven"] = "unproven_header";
|
|
17
|
+
})(OrgAuthoritySource || (exports.OrgAuthoritySource = OrgAuthoritySource = {}));
|
|
18
|
+
function resolveOrgAuthority(claims, assertedOrgId) {
|
|
19
|
+
const asserted = assertedOrgId.trim();
|
|
20
|
+
if (asserted.length === 0) {
|
|
21
|
+
return {
|
|
22
|
+
source: OrgAuthoritySource.NoOrgAsserted,
|
|
23
|
+
assertedOrgId: '',
|
|
24
|
+
};
|
|
25
|
+
}
|
|
26
|
+
const claim = (0, org_claim_1.resolveOrgClaim)(claims);
|
|
27
|
+
if (claim) {
|
|
28
|
+
return claim.value.toLowerCase() === asserted.toLowerCase()
|
|
29
|
+
? {
|
|
30
|
+
source: OrgAuthoritySource.OrgClaim,
|
|
31
|
+
assertedOrgId: asserted,
|
|
32
|
+
tokenOrgId: claim.value,
|
|
33
|
+
}
|
|
34
|
+
: {
|
|
35
|
+
source: OrgAuthoritySource.ClaimMismatch,
|
|
36
|
+
assertedOrgId: asserted,
|
|
37
|
+
tokenOrgId: claim.value,
|
|
38
|
+
};
|
|
39
|
+
}
|
|
40
|
+
const orgRoles = (0, org_role_1.resolveOrgRoles)(claims);
|
|
41
|
+
const assertedLower = asserted.toLowerCase();
|
|
42
|
+
for (const memberOrgId of Object.keys(orgRoles)) {
|
|
43
|
+
if (memberOrgId.toLowerCase() === assertedLower) {
|
|
44
|
+
return {
|
|
45
|
+
source: OrgAuthoritySource.OrgMembership,
|
|
46
|
+
assertedOrgId: asserted,
|
|
47
|
+
};
|
|
48
|
+
}
|
|
49
|
+
}
|
|
50
|
+
return { source: OrgAuthoritySource.Unproven, assertedOrgId: asserted };
|
|
51
|
+
}
|
|
52
|
+
function isOrgAuthorityProven(verdict) {
|
|
53
|
+
switch (verdict.source) {
|
|
54
|
+
case OrgAuthoritySource.OrgClaim:
|
|
55
|
+
case OrgAuthoritySource.OrgMembership:
|
|
56
|
+
return true;
|
|
57
|
+
case OrgAuthoritySource.NoOrgAsserted:
|
|
58
|
+
case OrgAuthoritySource.ClaimMismatch:
|
|
59
|
+
case OrgAuthoritySource.Unproven:
|
|
60
|
+
return false;
|
|
61
|
+
}
|
|
62
|
+
}
|
|
63
|
+
function orgAuthorityRequiresProof(verdict) {
|
|
64
|
+
switch (verdict.source) {
|
|
65
|
+
case OrgAuthoritySource.Unproven:
|
|
66
|
+
return true;
|
|
67
|
+
case OrgAuthoritySource.OrgClaim:
|
|
68
|
+
case OrgAuthoritySource.OrgMembership:
|
|
69
|
+
case OrgAuthoritySource.NoOrgAsserted:
|
|
70
|
+
case OrgAuthoritySource.ClaimMismatch:
|
|
71
|
+
return false;
|
|
72
|
+
}
|
|
73
|
+
}
|
|
74
|
+
var OrgAuthorityMode;
|
|
75
|
+
(function (OrgAuthorityMode) {
|
|
76
|
+
OrgAuthorityMode["Observe"] = "observe";
|
|
77
|
+
OrgAuthorityMode["Enforce"] = "enforce";
|
|
78
|
+
})(OrgAuthorityMode || (exports.OrgAuthorityMode = OrgAuthorityMode = {}));
|
|
79
|
+
exports.ORG_AUTHORITY_MODE_ENV = 'XEMA_ORG_AUTHORITY_MODE';
|
|
80
|
+
class InvalidOrgAuthorityModeError extends Error {
|
|
81
|
+
constructor(value) {
|
|
82
|
+
super(`${exports.ORG_AUTHORITY_MODE_ENV}="${value}" is not a valid org-authority mode. ` +
|
|
83
|
+
`Expected one of: ${Object.values(OrgAuthorityMode).join(', ')}. ` +
|
|
84
|
+
`Leave it unset for "${OrgAuthorityMode.Observe}".`);
|
|
85
|
+
}
|
|
86
|
+
}
|
|
87
|
+
exports.InvalidOrgAuthorityModeError = InvalidOrgAuthorityModeError;
|
|
88
|
+
function resolveOrgAuthorityMode(env = process.env) {
|
|
89
|
+
const raw = env[exports.ORG_AUTHORITY_MODE_ENV];
|
|
90
|
+
if (raw === undefined || raw.trim().length === 0) {
|
|
91
|
+
return OrgAuthorityMode.Observe;
|
|
92
|
+
}
|
|
93
|
+
const normalized = raw.trim().toLowerCase();
|
|
94
|
+
const matched = Object.values(OrgAuthorityMode).includes(normalized)
|
|
95
|
+
? normalized
|
|
96
|
+
: undefined;
|
|
97
|
+
if (!matched) {
|
|
98
|
+
throw new InvalidOrgAuthorityModeError(raw);
|
|
99
|
+
}
|
|
100
|
+
return matched;
|
|
101
|
+
}
|
|
102
|
+
//# sourceMappingURL=org-authority.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"org-authority.js","sourceRoot":"","sources":["../../../src/nestjs/auth/org-authority.ts"],"names":[],"mappings":";;;AAkHA,kDA0CC;AAGD,oDAUC;AAUD,8DAYC;AAgDD,0DAiBC;AA/MD,2CAA8C;AAC9C,yCAA6C;AAU7C,IAAY,kBA2BX;AA3BD,WAAY,kBAAkB;IAE5B,4CAAsB,CAAA;IAEtB,sDAAgC,CAAA;IAKhC,uDAAiC,CAAA;IAYjC,sDAAgC,CAAA;IAKhC,kDAA4B,CAAA;AAC9B,CAAC,EA3BW,kBAAkB,kCAAlB,kBAAkB,QA2B7B;AA2BD,SAAgB,mBAAmB,CACjC,MAA+B,EAC/B,aAAqB;IAErB,MAAM,QAAQ,GAAG,aAAa,CAAC,IAAI,EAAE,CAAC;IACtC,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC1B,OAAO;YACL,MAAM,EAAE,kBAAkB,CAAC,aAAa;YACxC,aAAa,EAAE,EAAE;SAClB,CAAC;IACJ,CAAC;IAED,MAAM,KAAK,GAAG,IAAA,2BAAe,EAAC,MAAM,CAAC,CAAC;IACtC,IAAI,KAAK,EAAE,CAAC;QACV,OAAO,KAAK,CAAC,KAAK,CAAC,WAAW,EAAE,KAAK,QAAQ,CAAC,WAAW,EAAE;YACzD,CAAC,CAAC;gBACE,MAAM,EAAE,kBAAkB,CAAC,QAAQ;gBACnC,aAAa,EAAE,QAAQ;gBACvB,UAAU,EAAE,KAAK,CAAC,KAAK;aACxB;YACH,CAAC,CAAC;gBACE,MAAM,EAAE,kBAAkB,CAAC,aAAa;gBACxC,aAAa,EAAE,QAAQ;gBACvB,UAAU,EAAE,KAAK,CAAC,KAAK;aACxB,CAAC;IACR,CAAC;IAKD,MAAM,QAAQ,GAAG,IAAA,0BAAe,EAAC,MAAM,CAAC,CAAC;IACzC,MAAM,aAAa,GAAG,QAAQ,CAAC,WAAW,EAAE,CAAC;IAC7C,KAAK,MAAM,WAAW,IAAI,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;QAChD,IAAI,WAAW,CAAC,WAAW,EAAE,KAAK,aAAa,EAAE,CAAC;YAChD,OAAO;gBACL,MAAM,EAAE,kBAAkB,CAAC,aAAa;gBACxC,aAAa,EAAE,QAAQ;aACxB,CAAC;QACJ,CAAC;IACH,CAAC;IAED,OAAO,EAAE,MAAM,EAAE,kBAAkB,CAAC,QAAQ,EAAE,aAAa,EAAE,QAAQ,EAAE,CAAC;AAC1E,CAAC;AAGD,SAAgB,oBAAoB,CAAC,OAA4B;IAC/D,QAAQ,OAAO,CAAC,MAAM,EAAE,CAAC;QACvB,KAAK,kBAAkB,CAAC,QAAQ,CAAC;QACjC,KAAK,kBAAkB,CAAC,aAAa;YACnC,OAAO,IAAI,CAAC;QACd,KAAK,kBAAkB,CAAC,aAAa,CAAC;QACtC,KAAK,kBAAkB,CAAC,aAAa,CAAC;QACtC,KAAK,kBAAkB,CAAC,QAAQ;YAC9B,OAAO,KAAK,CAAC;IACjB,CAAC;AACH,CAAC;AAUD,SAAgB,yBAAyB,CACvC,OAA4B;IAE5B,QAAQ,OAAO,CAAC,MAAM,EAAE,CAAC;QACvB,KAAK,kBAAkB,CAAC,QAAQ;YAC9B,OAAO,IAAI,CAAC;QACd,KAAK,kBAAkB,CAAC,QAAQ,CAAC;QACjC,KAAK,kBAAkB,CAAC,aAAa,CAAC;QACtC,KAAK,kBAAkB,CAAC,aAAa,CAAC;QACtC,KAAK,kBAAkB,CAAC,aAAa;YACnC,OAAO,KAAK,CAAC;IACjB,CAAC;AACH,CAAC;AAiBD,IAAY,gBAKX;AALD,WAAY,gBAAgB;IAE1B,uCAAmB,CAAA;IAEnB,uCAAmB,CAAA;AACrB,CAAC,EALW,gBAAgB,gCAAhB,gBAAgB,QAK3B;AAGY,QAAA,sBAAsB,GAAG,yBAAyB,CAAC;AAGhE,MAAa,4BAA6B,SAAQ,KAAK;IACrD,YAAY,KAAa;QACvB,KAAK,CACH,GAAG,8BAAsB,KAAK,KAAK,uCAAuC;YACxE,oBAAoB,MAAM,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI;YAClE,uBAAuB,gBAAgB,CAAC,OAAO,IAAI,CACtD,CAAC;IACJ,CAAC;CACF;AARD,oEAQC;AAYD,SAAgB,uBAAuB,CACrC,MAAyB,OAAO,CAAC,GAAG;IAEpC,MAAM,GAAG,GAAG,GAAG,CAAC,8BAAsB,CAAC,CAAC;IACxC,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACjD,OAAO,gBAAgB,CAAC,OAAO,CAAC;IAClC,CAAC;IACD,MAAM,UAAU,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAC5C,MAAM,OAAO,GAAI,MAAM,CAAC,MAAM,CAAC,gBAAgB,CAAc,CAAC,QAAQ,CACpE,UAAU,CACX;QACC,CAAC,CAAE,UAA+B;QAClC,CAAC,CAAC,SAAS,CAAC;IACd,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,MAAM,IAAI,4BAA4B,CAAC,GAAG,CAAC,CAAC;IAC9C,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC"}
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"service-token.guard.d.ts","sourceRoot":"","sources":["../../../src/nestjs/auth/service-token.guard.ts"],"names":[],"mappings":"
|
|
1
|
+
{"version":3,"file":"service-token.guard.d.ts","sourceRoot":"","sources":["../../../src/nestjs/auth/service-token.guard.ts"],"names":[],"mappings":"AA4CA,OAAO,EACL,WAAW,EACX,gBAAgB,EAKjB,MAAM,gBAAgB,CAAC;AACxB,OAAO,EAAE,cAAc,EAAE,MAAM,0BAA0B,CAAC;AAwB1D,qBACa,iBAAkB,YAAW,WAAW;IAKvC,OAAO,CAAC,QAAQ,CAAC,cAAc;IAJ3C,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAsC;IAC7D,OAAO,CAAC,UAAU,CAAmC;IACrD,OAAO,CAAC,cAAc,CAAuB;gBAEhB,cAAc,EAAE,cAAc;IAE3D,OAAO,CAAC,cAAc;IAuBhB,WAAW,CAAC,OAAO,EAAE,gBAAgB,GAAG,OAAO,CAAC,OAAO,CAAC;IAwE9D,OAAO,CAAC,uBAAuB;YAiBjB,WAAW;IAmEzB,OAAO,CAAC,WAAW;IA0BnB,OAAO,CAAC,2BAA2B;CA6CpC"}
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"service-token.guard.js","sourceRoot":"","sources":["../../../src/nestjs/auth/service-token.guard.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;
|
|
1
|
+
{"version":3,"file":"service-token.guard.js","sourceRoot":"","sources":["../../../src/nestjs/auth/service-token.guard.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AA4CA,2CAOwB;AACxB,+DAA0D;AAC1D,8DAA8D;AAC9D,kDAAoC;AAEpC,2CAA6D;AAC7D,6DAAyD;AACzD,8DAA8D;AAmBvD,IAAM,iBAAiB,yBAAvB,MAAM,iBAAiB;IAKC;IAJZ,MAAM,GAAG,IAAI,eAAM,CAAC,mBAAiB,CAAC,IAAI,CAAC,CAAC;IACrD,UAAU,GAA8B,IAAI,CAAC;IAC7C,cAAc,GAAkB,IAAI,CAAC;IAE7C,YAA6B,cAA8B;QAA9B,mBAAc,GAAd,cAAc,CAAgB;IAAG,CAAC;IAEvD,cAAc;QACpB,MAAM,QAAQ,GAAG,IAAI,CAAC,cAAc,CAAC,WAAW,EAAE,CAAC;QACnD,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,MAAM,IAAI,8BAAqB,CAC7B,iEAAiE;gBAC/D,6DAA6D,CAChE,CAAC;QACJ,CAAC;QAED,IAAI,CAAC,UAAU,GAAG,OAAO,CAAC,OAAO,CAAC;YAChC,OAAO,EAAE,QAAQ,CAAC,OAAO;YACzB,KAAK,EAAE,IAAI;YACX,WAAW,EAAE,OAAO;YACpB,SAAS,EAAE,IAAI;YACf,qBAAqB,EAAE,EAAE;SAC1B,CAAC,CAAC;QACH,IAAI,CAAC,cAAc,GAAG,QAAQ,CAAC,MAAM,CAAC;QAEtC,IAAI,CAAC,MAAM,CAAC,GAAG,CACb,0CAA0C,QAAQ,CAAC,OAAO,EAAE,CAC7D,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,WAAW,CAAC,OAAyB;QACzC,MAAM,OAAO,GAAG,OAAO,CAAC,YAAY,EAAE,CAAC,UAAU,EAAE,CAAC;QACpD,MAAM,UAAU,GAAG,OAAO,CAAC,OAAO,CAAC,aAAmC,CAAC;QAEvE,IAAI,CAAC,UAAU,EAAE,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;YACvC,MAAM,IAAI,8BAAqB,CAC7B,yCAAyC,CAC1C,CAAC;QACJ,CAAC;QAED,MAAM,KAAK,GAAG,UAAU,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;QAEtC,IAAI,CAAC;YACH,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,CAAC;gBACrB,IAAI,CAAC,cAAc,EAAE,CAAC;YACxB,CAAC;YAED,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC;YAe9C,MAAM,eAAe,GACnB,IAAA,0CAAqB,EAAU,sCAAiB,EAAE;gBAChD,OAAO,CAAC,UAAU,EAAE;gBACpB,OAAO,CAAC,QAAQ,EAAE;aACnB,CAAC,KAAK,IAAI,CAAC;YACd,IAAI,CAAC,2BAA2B,CAAC,OAAO,EAAE,OAAO,EAAE,eAAe,CAAC,CAAC;YACpE,IAAI,CAAC,uBAAuB,CAAC,OAAO,CAAC,CAAC;YAGrC,OAAmC,CAAC,WAAW,GAAG,OAAO,CAAC;YAE3D,OAAO,IAAI,CAAC;QACd,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAKf,IACE,KAAK,YAAY,8BAAqB;gBACtC,KAAK,YAAY,2BAAkB,EACnC,CAAC;gBACD,MAAM,KAAK,CAAC;YACd,CAAC;YACD,MAAM,GAAG,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YACnE,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC;gBAChB,OAAO,EAAE,mCAAmC;gBAC5C,KAAK,EAAE,GAAG;aACX,CAAC,CAAC;YACH,MAAM,IAAI,8BAAqB,CAAC,uBAAuB,CAAC,CAAC;QAC3D,CAAC;IACH,CAAC;IAUO,uBAAuB,CAAC,OAAmB;QACjD,MAAM,UAAU,GAAG,OAAO,CAAC,aAAa,CAAC,CAAC;QAC1C,IACE,OAAO,UAAU,KAAK,QAAQ;YAC9B,UAAU,KAAK,oBAAU,CAAC,UAAU,EACpC,CAAC;YACD,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC;gBACf,OAAO,EAAE,8BAA8B;gBACvC,UAAU;aACX,CAAC,CAAC;YACH,MAAM,IAAI,2BAAkB,CAAC;gBAC3B,IAAI,EAAE,yBAAyB;gBAC/B,OAAO,EAAE,2DAA2D;aACrE,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,WAAW,CAAC,KAAa;QACrC,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,CAAC;YACrB,MAAM,IAAI,KAAK,CAAC,6BAA6B,CAAC,CAAC;QACjD,CAAC;QAED,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC/B,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACvB,MAAM,IAAI,KAAK,CAAC,sBAAsB,CAAC,CAAC;QAC1C,CAAC;QACD,MAAM,CAAC,SAAS,EAAE,UAAU,EAAE,SAAS,CAAC,GAAG,KAAK,CAAC;QACjD,IAAI,CAAC,SAAS,IAAI,CAAC,UAAU,IAAI,CAAC,SAAS,EAAE,CAAC;YAC5C,MAAM,IAAI,KAAK,CAAC,sBAAsB,CAAC,CAAC;QAC1C,CAAC;QAED,MAAM,MAAM,GAAc,IAAI,CAAC,KAAK,CAClC,MAAM,CAAC,IAAI,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CACrD,CAAC;QACF,MAAM,OAAO,GAAe,IAAI,CAAC,KAAK,CACpC,MAAM,CAAC,IAAI,CAAC,UAAU,EAAE,WAAW,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CACtD,CAAC;QAEF,IAAI,OAAO,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,EAAE,IAAI,OAAO,CAAC,GAAG,GAAG,IAAI,EAAE,CAAC;YACpD,MAAM,IAAI,KAAK,CAAC,eAAe,CAAC,CAAC;QACnC,CAAC;QAED,IAAI,IAAI,CAAC,cAAc,IAAI,OAAO,CAAC,GAAG,KAAK,IAAI,CAAC,cAAc,EAAE,CAAC;YAC/D,MAAM,IAAI,KAAK,CAAC,mBAAmB,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC;QACpD,CAAC;QAED,IAAI,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC;YAChB,MAAM,IAAI,KAAK,CAAC,6BAA6B,CAAC,CAAC;QACjD,CAAC;QAED,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,aAAa,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAC5D,MAAM,SAAS,GAAG,GAAG,CAAC,YAAY,EAAE,CAAC;QAErC,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,aAAa,CAAC,CAAC;QAC3C,MAAM,IAAI,GAAG,GAAG,SAAS,IAAI,UAAU,EAAE,CAAC;QAC1C,MAAM,eAAe,GAAG,MAAM,CAAC,IAAI,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC;QAE5D,MAAM,MAAM,GAA2B;YACrC,KAAK,EAAE,YAAY;YACnB,KAAK,EAAE,YAAY;YACnB,KAAK,EAAE,YAAY;SACpB,CAAC;QACF,MAAM,SAAS,GAAG,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QACrC,IAAI,CAAC,SAAS,EAAE,CAAC;YACf,MAAM,IAAI,KAAK,CAAC,0BAA0B,MAAM,CAAC,GAAG,EAAE,CAAC,CAAC;QAC1D,CAAC;QAED,MAAM,OAAO,GAAG,MAAM;aACnB,YAAY,CAAC,SAAS,CAAC;aACvB,MAAM,CAAC,IAAI,CAAC;aACZ,MAAM,CAAC,SAAS,EAAE,eAAe,CAAC,CAAC;QAEtC,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,MAAM,IAAI,KAAK,CAAC,mBAAmB,CAAC,CAAC;QACvC,CAAC;QAED,OAAO,OAAO,CAAC;IACjB,CAAC;IAOO,WAAW,CACjB,OAA8C,EAC9C,IAAY;QAEZ,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,IAAI,EAAE,CAAC;QACtC,MAAM,KAAK,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;QAC5B,MAAM,KAAK,GAAG,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,eAAe,EAAE,CAAC,EAAE,EAAE,GAAG,EAAE,EAAU,EAAE,EAAE,CAC1E,GAAG,GAAG,GAAG,EAAE,CAAC,WAAW,EAAE,EAAE,CAC5B,CAAC,CAAC;QACH,MAAM,GAAG,GAAG,KAAK,IAAI,KAAK,CAAC;QAC3B,IAAI,OAAO,GAAG,KAAK,QAAQ,EAAE,CAAC;YAC5B,OAAO,GAAG,CAAC;QACb,CAAC;QACD,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,OAAO,GAAG,CAAC,CAAC,CAAC,KAAK,QAAQ,EAAE,CAAC;YACrD,OAAO,GAAG,CAAC,CAAC,CAAC,CAAC;QAChB,CAAC;QACD,OAAO,EAAE,CAAC;IACZ,CAAC;IASO,2BAA2B,CACjC,MAAkB,EAClB,OAA8C,EAC9C,QAAQ,GAAG,KAAK;QAEhB,MAAM,QAAQ,GAAG,IAAA,2BAAe,EAAC,MAAM,CAAC,CAAC;QACzC,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,IAAI,QAAQ,EAAE,CAAC;gBACb,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,6CAA6C,EAAE,CAAC,CAAC;gBAC7E,MAAM,IAAI,2BAAkB,CAAC;oBAC3B,IAAI,EAAE,oBAAoB;oBAC1B,OAAO,EACL,gEAAgE;wBAChE,qBAAqB;iBACxB,CAAC,CAAC;YACL,CAAC;YACD,OAAO;QACT,CAAC;QAED,MAAM,UAAU,GAAG,yBAAa,CAAC,SAAS,CAAC;QAC3C,MAAM,WAAW,GAAG,IAAI,CAAC,WAAW,CAAC,OAAO,EAAE,eAAe,CAAC,CAAC;QAC/D,IAAI,CAAC,WAAW,EAAE,CAAC;YACjB,IAAI,QAAQ,EAAE,CAAC;gBACb,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,8CAA8C,EAAE,CAAC,CAAC;gBAC9E,MAAM,IAAI,2BAAkB,CAAC;oBAC3B,IAAI,EAAE,qBAAqB;oBAC3B,OAAO,EAAE,8BAA8B,UAAU,iBAAiB;iBACnE,CAAC,CAAC;YACL,CAAC;YACD,OAAO;QACT,CAAC;QAED,IAAI,QAAQ,CAAC,KAAK,CAAC,WAAW,EAAE,KAAK,WAAW,CAAC,WAAW,EAAE,EAAE,CAAC;YAC/D,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC;gBACf,OAAO,EAAE,qCAAqC;gBAC9C,KAAK,EAAE,QAAQ,CAAC,GAAG;gBACnB,UAAU,EAAE,QAAQ,CAAC,KAAK;gBAC1B,MAAM,EAAE,UAAU;gBAClB,WAAW;aACZ,CAAC,CAAC;YACH,MAAM,IAAI,2BAAkB,CAC1B,GAAG,UAAU,KAAK,WAAW,wBAAwB,QAAQ,CAAC,GAAG,8BAA8B,CAChG,CAAC;QACJ,CAAC;IACH,CAAC;CACF,CAAA;AAjQY,8CAAiB;4BAAjB,iBAAiB;IAD7B,IAAA,mBAAU,GAAE;qCAMkC,iCAAc;GALhD,iBAAiB,CAiQ7B"}
|
|
@@ -0,0 +1,13 @@
|
|
|
1
|
+
import { Agent } from 'undici';
|
|
2
|
+
export declare const SA_TOKEN_PATH = "/var/run/secrets/kubernetes.io/serviceaccount/token";
|
|
3
|
+
export declare const SA_CA_PATH = "/var/run/secrets/kubernetes.io/serviceaccount/ca.crt";
|
|
4
|
+
export declare const SA_NS_PATH = "/var/run/secrets/kubernetes.io/serviceaccount/namespace";
|
|
5
|
+
export declare class ClusterCaDispatcher {
|
|
6
|
+
private readonly logger;
|
|
7
|
+
private agent;
|
|
8
|
+
private ca;
|
|
9
|
+
acquire(): Agent;
|
|
10
|
+
close(): Promise<void>;
|
|
11
|
+
private drain;
|
|
12
|
+
}
|
|
13
|
+
//# sourceMappingURL=cluster-ca-dispatcher.d.ts.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"cluster-ca-dispatcher.d.ts","sourceRoot":"","sources":["../../src/nestjs/cluster-ca-dispatcher.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,KAAK,EAAE,MAAM,QAAQ,CAAC;AAO/B,eAAO,MAAM,aAAa,wDAC6B,CAAC;AACxD,eAAO,MAAM,UAAU,yDAAyD,CAAC;AACjF,eAAO,MAAM,UAAU,4DACoC,CAAC;AA8B5D,qBAAa,mBAAmB;IAC9B,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAwC;IAC/D,OAAO,CAAC,KAAK,CAAoB;IACjC,OAAO,CAAC,EAAE,CAAqB;IAQxB,OAAO,IAAI,KAAK;IAkBV,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;IAanC,OAAO,CAAC,KAAK;CAWd"}
|
|
@@ -0,0 +1,43 @@
|
|
|
1
|
+
"use strict";
|
|
2
|
+
Object.defineProperty(exports, "__esModule", { value: true });
|
|
3
|
+
exports.ClusterCaDispatcher = exports.SA_NS_PATH = exports.SA_CA_PATH = exports.SA_TOKEN_PATH = void 0;
|
|
4
|
+
const node_fs_1 = require("node:fs");
|
|
5
|
+
const common_1 = require("@nestjs/common");
|
|
6
|
+
const undici_1 = require("undici");
|
|
7
|
+
exports.SA_TOKEN_PATH = '/var/run/secrets/kubernetes.io/serviceaccount/token';
|
|
8
|
+
exports.SA_CA_PATH = '/var/run/secrets/kubernetes.io/serviceaccount/ca.crt';
|
|
9
|
+
exports.SA_NS_PATH = '/var/run/secrets/kubernetes.io/serviceaccount/namespace';
|
|
10
|
+
class ClusterCaDispatcher {
|
|
11
|
+
logger = new common_1.Logger(ClusterCaDispatcher.name);
|
|
12
|
+
agent;
|
|
13
|
+
ca;
|
|
14
|
+
acquire() {
|
|
15
|
+
const ca = (0, node_fs_1.readFileSync)(exports.SA_CA_PATH);
|
|
16
|
+
if (this.agent !== undefined && this.ca !== undefined) {
|
|
17
|
+
if (this.ca.equals(ca)) {
|
|
18
|
+
return this.agent;
|
|
19
|
+
}
|
|
20
|
+
this.logger.log('Cluster CA bundle changed on disk — rebuilding the apiserver dispatcher');
|
|
21
|
+
this.drain(this.agent);
|
|
22
|
+
}
|
|
23
|
+
const agent = new undici_1.Agent({ connect: { ca } });
|
|
24
|
+
this.agent = agent;
|
|
25
|
+
this.ca = ca;
|
|
26
|
+
return agent;
|
|
27
|
+
}
|
|
28
|
+
async close() {
|
|
29
|
+
const agent = this.agent;
|
|
30
|
+
this.agent = undefined;
|
|
31
|
+
this.ca = undefined;
|
|
32
|
+
await agent?.close();
|
|
33
|
+
}
|
|
34
|
+
drain(stale) {
|
|
35
|
+
this.agent = undefined;
|
|
36
|
+
this.ca = undefined;
|
|
37
|
+
void stale.close().catch((cause) => {
|
|
38
|
+
this.logger.warn(`Failed to drain the superseded apiserver dispatcher: ${cause instanceof Error ? cause.message : String(cause)}`);
|
|
39
|
+
});
|
|
40
|
+
}
|
|
41
|
+
}
|
|
42
|
+
exports.ClusterCaDispatcher = ClusterCaDispatcher;
|
|
43
|
+
//# sourceMappingURL=cluster-ca-dispatcher.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"cluster-ca-dispatcher.js","sourceRoot":"","sources":["../../src/nestjs/cluster-ca-dispatcher.ts"],"names":[],"mappings":";;;AAAA,qCAAuC;AAEvC,2CAAwC;AACxC,mCAA+B;AAOlB,QAAA,aAAa,GACxB,qDAAqD,CAAC;AAC3C,QAAA,UAAU,GAAG,sDAAsD,CAAC;AACpE,QAAA,UAAU,GACrB,yDAAyD,CAAC;AA8B5D,MAAa,mBAAmB;IACb,MAAM,GAAG,IAAI,eAAM,CAAC,mBAAmB,CAAC,IAAI,CAAC,CAAC;IACvD,KAAK,CAAoB;IACzB,EAAE,CAAqB;IAQxB,OAAO;QACZ,MAAM,EAAE,GAAG,IAAA,sBAAY,EAAC,kBAAU,CAAC,CAAC;QACpC,IAAI,IAAI,CAAC,KAAK,KAAK,SAAS,IAAI,IAAI,CAAC,EAAE,KAAK,SAAS,EAAE,CAAC;YACtD,IAAI,IAAI,CAAC,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,CAAC;gBACvB,OAAO,IAAI,CAAC,KAAK,CAAC;YACpB,CAAC;YACD,IAAI,CAAC,MAAM,CAAC,GAAG,CACb,yEAAyE,CAC1E,CAAC;YACF,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACzB,CAAC;QACD,MAAM,KAAK,GAAG,IAAI,cAAK,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC;QAC7C,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC;QACnB,IAAI,CAAC,EAAE,GAAG,EAAE,CAAC;QACb,OAAO,KAAK,CAAC;IACf,CAAC;IAGM,KAAK,CAAC,KAAK;QAChB,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC;QACzB,IAAI,CAAC,KAAK,GAAG,SAAS,CAAC;QACvB,IAAI,CAAC,EAAE,GAAG,SAAS,CAAC;QACpB,MAAM,KAAK,EAAE,KAAK,EAAE,CAAC;IACvB,CAAC;IAQO,KAAK,CAAC,KAAY;QACxB,IAAI,CAAC,KAAK,GAAG,SAAS,CAAC;QACvB,IAAI,CAAC,EAAE,GAAG,SAAS,CAAC;QACpB,KAAK,KAAK,CAAC,KAAK,EAAE,CAAC,KAAK,CAAC,CAAC,KAAc,EAAE,EAAE;YAC1C,IAAI,CAAC,MAAM,CAAC,IAAI,CACd,wDACE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CACvD,EAAE,CACH,CAAC;QACJ,CAAC,CAAC,CAAC;IACL,CAAC;CACF;AArDD,kDAqDC"}
|
package/dist/nestjs/index.d.ts
CHANGED
|
@@ -22,11 +22,12 @@ export { requirePipelineRunId } from './require-pipeline-run-id';
|
|
|
22
22
|
export { Ctx } from './ctx.decorator';
|
|
23
23
|
export { PaginationQueryDto, PaginationMeta, parsePagination, buildPaginatedResponse, } from './pagination';
|
|
24
24
|
export { fetchWithRetry, type RetryOptions } from './fetch-with-retry';
|
|
25
|
+
export { ClusterCaDispatcher, SA_CA_PATH, SA_NS_PATH, SA_TOKEN_PATH, } from './cluster-ca-dispatcher';
|
|
25
26
|
export { fetchEnvelope, fetchEnvelopeOptional, fetchJson, } from './fetch-envelope';
|
|
26
27
|
export { Roles, ROLES_KEY } from './roles.decorator';
|
|
27
28
|
export { RolesGuard } from './roles.guard';
|
|
28
29
|
export { GlobalExceptionFilter } from './global-exception.filter';
|
|
29
|
-
export { AuthModule, AUTH_MODULE_OPTIONS, type AuthModuleOptions, type AuthModuleAsyncOptions, ServiceTokenGuard, InternalCallerGuard, ServiceActorGuard, TokenClassGuard, RequireTokenClass, REQUIRE_TOKEN_CLASS, OrgRoleGuard, RequireOrgRole, REQUIRE_ORG_ROLE, OrgRolesClaimKey, ORG_ROLES_CLAIM_KEYS, resolveOrgRoles, resolveOrgRoleForOrg, orgRoleSatisfies, PlatformRole, hasPlatformRole, PlatformAdminGuard, configureAuthMiddleware, type ConfigureAuthMiddlewareOptions, OrgClaimKey, OrgHeaderName, ORG_CLAIM_KEYS, resolveOrgClaim, RequireOrgClaim, REQUIRE_ORG_CLAIM, } from './auth';
|
|
30
|
+
export { AuthModule, AUTH_MODULE_OPTIONS, type AuthModuleOptions, type AuthModuleAsyncOptions, ServiceTokenGuard, InternalCallerGuard, ServiceActorGuard, TokenClassGuard, RequireTokenClass, REQUIRE_TOKEN_CLASS, OrgRoleGuard, RequireOrgRole, REQUIRE_ORG_ROLE, OrgRolesClaimKey, ORG_ROLES_CLAIM_KEYS, resolveOrgRoles, resolveOrgRoleForOrg, orgRoleSatisfies, PlatformRole, hasPlatformRole, PlatformAdminGuard, configureAuthMiddleware, type ConfigureAuthMiddlewareOptions, OrgClaimKey, OrgHeaderName, ORG_CLAIM_KEYS, resolveOrgClaim, RequireOrgClaim, REQUIRE_ORG_CLAIM, OrgAuthoritySource, type OrgAuthorityVerdict, type OrgAuthorityCallerFacts, resolveOrgAuthority, isOrgAuthorityProven, orgAuthorityRequiresProof, OrgAuthorityMode, ORG_AUTHORITY_MODE_ENV, InvalidOrgAuthorityModeError, resolveOrgAuthorityMode, ORG_AUTHORITY_OBSERVATION_LIMIT, UNKNOWN_CLIENT_ID, type OrgAuthorityObservation, type OrgAuthorityCensus, recordUnprovenOrgAuthority, orgAuthorityCensus, resetOrgAuthorityCensus, } from './auth';
|
|
30
31
|
export { ConnectorWebhookEnvelopeDto, ConnectorEnvelopePipe, ApiConnectorEnvelope, type ApiConnectorEnvelopeOptions, type ConnectorEnvelopeVariant, } from './connector-webhooks';
|
|
31
32
|
export { type IdempotencyService, type IdempotencyOutcome, IDEMPOTENCY_RECORD_PRISMA_MODEL, PrismaIdempotencyService, IDEMPOTENCY_PRISMA_CLIENT, type IdempotencyPrismaClient, type IdempotencyPrismaDelegate, IDEMPOTENCY_SERVICE, } from './idempotency';
|
|
32
33
|
//# sourceMappingURL=index.d.ts.map
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/nestjs/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,wBAAwB,EACxB,KAAK,yBAAyB,GAC/B,MAAM,gBAAgB,CAAC;AACxB,OAAO,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AAC9C,OAAO,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AACnD,OAAO,EAAE,2BAA2B,EAAE,MAAM,iCAAiC,CAAC;AAC9E,OAAO,EAAE,wBAAwB,EAAE,MAAM,8BAA8B,CAAC;AACxE,OAAO,EACL,yBAAyB,EACzB,uBAAuB,EACvB,YAAY,EACZ,sBAAsB,EACtB,yBAAyB,EACzB,sBAAsB,EACtB,sBAAsB,EAGtB,yBAAyB,EACzB,gBAAgB,EAChB,KAAK,mBAAmB,GACzB,MAAM,6BAA6B,CAAC;AAKrC,OAAO,EACL,2BAA2B,EAC3B,2BAA2B,EAC3B,sBAAsB,GACvB,MAAM,yBAAyB,CAAC;AACjC,OAAO,EAAE,2BAA2B,EAAE,MAAM,kCAAkC,CAAC;AAC/E,OAAO,EAAE,gBAAgB,EAAE,MAAM,sBAAsB,CAAC;AACxD,OAAO,EACL,oBAAoB,EACpB,eAAe,EACf,oBAAoB,EACpB,sBAAsB,EACtB,uBAAuB,EACvB,oBAAoB,EACpB,iBAAiB,GAClB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EACL,2BAA2B,EAC3B,KAAK,wBAAwB,GAC9B,MAAM,yBAAyB,CAAC;AACjC,OAAO,EACL,sBAAsB,EACtB,iCAAiC,EACjC,6BAA6B,EAC7B,KAAK,mBAAmB,EACxB,KAAK,gCAAgC,EACrC,KAAK,6BAA6B,EAClC,KAAK,wBAAwB,GAC9B,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAAE,oBAAoB,EAAE,MAAM,0BAA0B,CAAC;AAChE,OAAO,EACL,OAAO,EACP,gBAAgB,EAChB,oBAAoB,GACrB,MAAM,4BAA4B,CAAC;AAIpC,OAAO,EACL,YAAY,EACZ,qBAAqB,EACrB,sBAAsB,EACtB,iBAAiB,EACjB,4BAA4B,EAC5B,iCAAiC,EACjC,sBAAsB,EACtB,KAAK,gBAAgB,EACrB,KAAK,iBAAiB,EACtB,KAAK,oBAAoB,EACzB,KAAK,GAAG,EACR,KAAK,iBAAiB,EACtB,KAAK,gBAAgB,GACtB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AAG3D,OAAO,EACL,sBAAsB,EACtB,YAAY,EACZ,gBAAgB,EAChB,sBAAsB,EACtB,aAAa,GACd,MAAM,uBAAuB,CAAC;AAK/B,OAAO,EACL,8BAA8B,EAC9B,0BAA0B,GAC3B,MAAM,yBAAyB,CAAC;AACjC,OAAO,EAAE,WAAW,EAAE,gBAAgB,EAAE,MAAM,0BAA0B,CAAC;AACzE,OAAO,EAAE,gBAAgB,EAAE,MAAM,sBAAsB,CAAC;AACxD,OAAO,EAAE,oBAAoB,EAAE,MAAM,2BAA2B,CAAC;AACjE,OAAO,EAAE,GAAG,EAAE,MAAM,iBAAiB,CAAC;AACtC,OAAO,EACL,kBAAkB,EAClB,cAAc,EACd,eAAe,EACf,sBAAsB,GACvB,MAAM,cAAc,CAAC;AACtB,OAAO,EAAE,cAAc,EAAE,KAAK,YAAY,EAAE,MAAM,oBAAoB,CAAC;AACvE,OAAO,EACL,aAAa,EACb,qBAAqB,EACrB,SAAS,GACV,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,MAAM,mBAAmB,CAAC;AACrD,OAAO,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AAC3C,OAAO,EAAE,qBAAqB,EAAE,MAAM,2BAA2B,CAAC;AAClE,OAAO,EACL,UAAU,EACV,mBAAmB,EACnB,KAAK,iBAAiB,EACtB,KAAK,sBAAsB,EAC3B,iBAAiB,EACjB,mBAAmB,EACnB,iBAAiB,EAKjB,eAAe,EACf,iBAAiB,EACjB,mBAAmB,EAGnB,YAAY,EACZ,cAAc,EACd,gBAAgB,EAChB,gBAAgB,EAChB,oBAAoB,EACpB,eAAe,EACf,oBAAoB,EACpB,gBAAgB,EAIhB,YAAY,EACZ,eAAe,EACf,kBAAkB,EAClB,uBAAuB,EACvB,KAAK,8BAA8B,EAKnC,WAAW,EACX,aAAa,EACb,cAAc,EACd,eAAe,EAIf,eAAe,EACf,iBAAiB,
|
|
1
|
+
{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/nestjs/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,wBAAwB,EACxB,KAAK,yBAAyB,GAC/B,MAAM,gBAAgB,CAAC;AACxB,OAAO,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AAC9C,OAAO,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AACnD,OAAO,EAAE,2BAA2B,EAAE,MAAM,iCAAiC,CAAC;AAC9E,OAAO,EAAE,wBAAwB,EAAE,MAAM,8BAA8B,CAAC;AACxE,OAAO,EACL,yBAAyB,EACzB,uBAAuB,EACvB,YAAY,EACZ,sBAAsB,EACtB,yBAAyB,EACzB,sBAAsB,EACtB,sBAAsB,EAGtB,yBAAyB,EACzB,gBAAgB,EAChB,KAAK,mBAAmB,GACzB,MAAM,6BAA6B,CAAC;AAKrC,OAAO,EACL,2BAA2B,EAC3B,2BAA2B,EAC3B,sBAAsB,GACvB,MAAM,yBAAyB,CAAC;AACjC,OAAO,EAAE,2BAA2B,EAAE,MAAM,kCAAkC,CAAC;AAC/E,OAAO,EAAE,gBAAgB,EAAE,MAAM,sBAAsB,CAAC;AACxD,OAAO,EACL,oBAAoB,EACpB,eAAe,EACf,oBAAoB,EACpB,sBAAsB,EACtB,uBAAuB,EACvB,oBAAoB,EACpB,iBAAiB,GAClB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EACL,2BAA2B,EAC3B,KAAK,wBAAwB,GAC9B,MAAM,yBAAyB,CAAC;AACjC,OAAO,EACL,sBAAsB,EACtB,iCAAiC,EACjC,6BAA6B,EAC7B,KAAK,mBAAmB,EACxB,KAAK,gCAAgC,EACrC,KAAK,6BAA6B,EAClC,KAAK,wBAAwB,GAC9B,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAAE,oBAAoB,EAAE,MAAM,0BAA0B,CAAC;AAChE,OAAO,EACL,OAAO,EACP,gBAAgB,EAChB,oBAAoB,GACrB,MAAM,4BAA4B,CAAC;AAIpC,OAAO,EACL,YAAY,EACZ,qBAAqB,EACrB,sBAAsB,EACtB,iBAAiB,EACjB,4BAA4B,EAC5B,iCAAiC,EACjC,sBAAsB,EACtB,KAAK,gBAAgB,EACrB,KAAK,iBAAiB,EACtB,KAAK,oBAAoB,EACzB,KAAK,GAAG,EACR,KAAK,iBAAiB,EACtB,KAAK,gBAAgB,GACtB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AAG3D,OAAO,EACL,sBAAsB,EACtB,YAAY,EACZ,gBAAgB,EAChB,sBAAsB,EACtB,aAAa,GACd,MAAM,uBAAuB,CAAC;AAK/B,OAAO,EACL,8BAA8B,EAC9B,0BAA0B,GAC3B,MAAM,yBAAyB,CAAC;AACjC,OAAO,EAAE,WAAW,EAAE,gBAAgB,EAAE,MAAM,0BAA0B,CAAC;AACzE,OAAO,EAAE,gBAAgB,EAAE,MAAM,sBAAsB,CAAC;AACxD,OAAO,EAAE,oBAAoB,EAAE,MAAM,2BAA2B,CAAC;AACjE,OAAO,EAAE,GAAG,EAAE,MAAM,iBAAiB,CAAC;AACtC,OAAO,EACL,kBAAkB,EAClB,cAAc,EACd,eAAe,EACf,sBAAsB,GACvB,MAAM,cAAc,CAAC;AACtB,OAAO,EAAE,cAAc,EAAE,KAAK,YAAY,EAAE,MAAM,oBAAoB,CAAC;AACvE,OAAO,EACL,mBAAmB,EACnB,UAAU,EACV,UAAU,EACV,aAAa,GACd,MAAM,yBAAyB,CAAC;AACjC,OAAO,EACL,aAAa,EACb,qBAAqB,EACrB,SAAS,GACV,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,MAAM,mBAAmB,CAAC;AACrD,OAAO,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AAC3C,OAAO,EAAE,qBAAqB,EAAE,MAAM,2BAA2B,CAAC;AAClE,OAAO,EACL,UAAU,EACV,mBAAmB,EACnB,KAAK,iBAAiB,EACtB,KAAK,sBAAsB,EAC3B,iBAAiB,EACjB,mBAAmB,EACnB,iBAAiB,EAKjB,eAAe,EACf,iBAAiB,EACjB,mBAAmB,EAGnB,YAAY,EACZ,cAAc,EACd,gBAAgB,EAChB,gBAAgB,EAChB,oBAAoB,EACpB,eAAe,EACf,oBAAoB,EACpB,gBAAgB,EAIhB,YAAY,EACZ,eAAe,EACf,kBAAkB,EAClB,uBAAuB,EACvB,KAAK,8BAA8B,EAKnC,WAAW,EACX,aAAa,EACb,cAAc,EACd,eAAe,EAIf,eAAe,EACf,iBAAiB,EAOjB,kBAAkB,EAClB,KAAK,mBAAmB,EACxB,KAAK,uBAAuB,EAC5B,mBAAmB,EACnB,oBAAoB,EACpB,yBAAyB,EACzB,gBAAgB,EAChB,sBAAsB,EACtB,4BAA4B,EAC5B,uBAAuB,EACvB,+BAA+B,EAC/B,iBAAiB,EACjB,KAAK,uBAAuB,EAC5B,KAAK,kBAAkB,EACvB,0BAA0B,EAC1B,kBAAkB,EAClB,uBAAuB,GACxB,MAAM,QAAQ,CAAC;AAChB,OAAO,EACL,2BAA2B,EAC3B,qBAAqB,EACrB,oBAAoB,EACpB,KAAK,2BAA2B,EAChC,KAAK,wBAAwB,GAC9B,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EACL,KAAK,kBAAkB,EACvB,KAAK,kBAAkB,EACvB,+BAA+B,EAC/B,wBAAwB,EACxB,yBAAyB,EACzB,KAAK,uBAAuB,EAC5B,KAAK,yBAAyB,EAC9B,mBAAmB,GACpB,MAAM,eAAe,CAAC"}
|
package/dist/nestjs/index.js
CHANGED
|
@@ -1,7 +1,8 @@
|
|
|
1
1
|
"use strict";
|
|
2
2
|
Object.defineProperty(exports, "__esModule", { value: true });
|
|
3
3
|
exports.collectPublicRouteExcludes = exports.registerPublicRouteDeclaration = exports.joinNestPaths = exports.readSwaggerOperationId = exports.readNestHttpVerb = exports.readNestPath = exports.readNestControllerPath = exports.IS_PUBLIC_KEY = exports.Public = exports.extractRealmFromIssuer = exports.OidcDiscoveryIssuerTenantResolver = exports.KeycloakIssuerTenantResolver = exports.OidcTokenVerifier = exports.IssuerMetadataResolver = exports.JwksVerificationError = exports.JwksVerifier = exports.selectTenantResolver = exports.DEFAULT_IDP_KIND = exports.IdpKind = exports.JwtVerificationGuard = exports.buildKeycloakSwaggerUiOptions = exports.enrichOpenApiWithKeycloakSecurity = exports.getKeycloakSwaggerUrls = exports.enhanceOpenApiDocumentation = exports.ApiStandardErrors = exports.ApiPaginatedResponse = exports.ApiAcceptedDataResponse = exports.ApiCreatedDataResponse = exports.ApiDataArrayResponse = exports.ApiDataResponse = exports.ApiStandardOperation = exports.ErrorResponseDto = exports.AmbientOrgContextMiddleware = exports.MalformedActorHopError = exports.UnclassifiableActorHopError = exports.resolveActorChainFromClaims = exports.asNonEmptyString = exports.resolveClientIdFromClaims = exports.resolveActAsFromClaims = exports.resolveRolesFromClaims = exports.tryResolveSubjectAndClass = exports.resolveSubjectAndClass = exports.actorTypeFor = exports.actorTypeForSubjectKind = exports.deriveActorClassification = exports.RequestContextMiddleware = exports.ResponseEnvelopeInterceptor = exports.getEnvOrThrow = exports.getCorsConfig = exports.applyStandardBodyParsers = void 0;
|
|
4
|
-
exports.
|
|
4
|
+
exports.isOrgAuthorityProven = exports.resolveOrgAuthority = exports.OrgAuthoritySource = exports.REQUIRE_ORG_CLAIM = exports.RequireOrgClaim = exports.resolveOrgClaim = exports.ORG_CLAIM_KEYS = exports.OrgHeaderName = exports.OrgClaimKey = exports.configureAuthMiddleware = exports.PlatformAdminGuard = exports.hasPlatformRole = exports.PlatformRole = exports.orgRoleSatisfies = exports.resolveOrgRoleForOrg = exports.resolveOrgRoles = exports.ORG_ROLES_CLAIM_KEYS = exports.OrgRolesClaimKey = exports.REQUIRE_ORG_ROLE = exports.RequireOrgRole = exports.OrgRoleGuard = exports.REQUIRE_TOKEN_CLASS = exports.RequireTokenClass = exports.TokenClassGuard = exports.ServiceActorGuard = exports.InternalCallerGuard = exports.ServiceTokenGuard = exports.AUTH_MODULE_OPTIONS = exports.AuthModule = exports.GlobalExceptionFilter = exports.RolesGuard = exports.ROLES_KEY = exports.Roles = exports.fetchJson = exports.fetchEnvelopeOptional = exports.fetchEnvelope = exports.SA_TOKEN_PATH = exports.SA_NS_PATH = exports.SA_CA_PATH = exports.ClusterCaDispatcher = exports.fetchWithRetry = exports.buildPaginatedResponse = exports.parsePagination = exports.PaginationMeta = exports.PaginationQueryDto = exports.Ctx = exports.requirePipelineRunId = exports.requireProjectId = exports.RAW_RESPONSE_KEY = exports.RawResponse = void 0;
|
|
5
|
+
exports.IDEMPOTENCY_SERVICE = exports.IDEMPOTENCY_PRISMA_CLIENT = exports.PrismaIdempotencyService = exports.IDEMPOTENCY_RECORD_PRISMA_MODEL = exports.ApiConnectorEnvelope = exports.ConnectorEnvelopePipe = exports.ConnectorWebhookEnvelopeDto = exports.resetOrgAuthorityCensus = exports.orgAuthorityCensus = exports.recordUnprovenOrgAuthority = exports.UNKNOWN_CLIENT_ID = exports.ORG_AUTHORITY_OBSERVATION_LIMIT = exports.resolveOrgAuthorityMode = exports.InvalidOrgAuthorityModeError = exports.ORG_AUTHORITY_MODE_ENV = exports.OrgAuthorityMode = exports.orgAuthorityRequiresProof = void 0;
|
|
5
6
|
var body_parsers_1 = require("./body-parsers");
|
|
6
7
|
Object.defineProperty(exports, "applyStandardBodyParsers", { enumerable: true, get: function () { return body_parsers_1.applyStandardBodyParsers; } });
|
|
7
8
|
var cors_config_1 = require("./cors.config");
|
|
@@ -86,6 +87,11 @@ Object.defineProperty(exports, "parsePagination", { enumerable: true, get: funct
|
|
|
86
87
|
Object.defineProperty(exports, "buildPaginatedResponse", { enumerable: true, get: function () { return pagination_1.buildPaginatedResponse; } });
|
|
87
88
|
var fetch_with_retry_1 = require("./fetch-with-retry");
|
|
88
89
|
Object.defineProperty(exports, "fetchWithRetry", { enumerable: true, get: function () { return fetch_with_retry_1.fetchWithRetry; } });
|
|
90
|
+
var cluster_ca_dispatcher_1 = require("./cluster-ca-dispatcher");
|
|
91
|
+
Object.defineProperty(exports, "ClusterCaDispatcher", { enumerable: true, get: function () { return cluster_ca_dispatcher_1.ClusterCaDispatcher; } });
|
|
92
|
+
Object.defineProperty(exports, "SA_CA_PATH", { enumerable: true, get: function () { return cluster_ca_dispatcher_1.SA_CA_PATH; } });
|
|
93
|
+
Object.defineProperty(exports, "SA_NS_PATH", { enumerable: true, get: function () { return cluster_ca_dispatcher_1.SA_NS_PATH; } });
|
|
94
|
+
Object.defineProperty(exports, "SA_TOKEN_PATH", { enumerable: true, get: function () { return cluster_ca_dispatcher_1.SA_TOKEN_PATH; } });
|
|
89
95
|
var fetch_envelope_1 = require("./fetch-envelope");
|
|
90
96
|
Object.defineProperty(exports, "fetchEnvelope", { enumerable: true, get: function () { return fetch_envelope_1.fetchEnvelope; } });
|
|
91
97
|
Object.defineProperty(exports, "fetchEnvelopeOptional", { enumerable: true, get: function () { return fetch_envelope_1.fetchEnvelopeOptional; } });
|
|
@@ -124,6 +130,19 @@ Object.defineProperty(exports, "ORG_CLAIM_KEYS", { enumerable: true, get: functi
|
|
|
124
130
|
Object.defineProperty(exports, "resolveOrgClaim", { enumerable: true, get: function () { return auth_1.resolveOrgClaim; } });
|
|
125
131
|
Object.defineProperty(exports, "RequireOrgClaim", { enumerable: true, get: function () { return auth_1.RequireOrgClaim; } });
|
|
126
132
|
Object.defineProperty(exports, "REQUIRE_ORG_CLAIM", { enumerable: true, get: function () { return auth_1.REQUIRE_ORG_CLAIM; } });
|
|
133
|
+
Object.defineProperty(exports, "OrgAuthoritySource", { enumerable: true, get: function () { return auth_1.OrgAuthoritySource; } });
|
|
134
|
+
Object.defineProperty(exports, "resolveOrgAuthority", { enumerable: true, get: function () { return auth_1.resolveOrgAuthority; } });
|
|
135
|
+
Object.defineProperty(exports, "isOrgAuthorityProven", { enumerable: true, get: function () { return auth_1.isOrgAuthorityProven; } });
|
|
136
|
+
Object.defineProperty(exports, "orgAuthorityRequiresProof", { enumerable: true, get: function () { return auth_1.orgAuthorityRequiresProof; } });
|
|
137
|
+
Object.defineProperty(exports, "OrgAuthorityMode", { enumerable: true, get: function () { return auth_1.OrgAuthorityMode; } });
|
|
138
|
+
Object.defineProperty(exports, "ORG_AUTHORITY_MODE_ENV", { enumerable: true, get: function () { return auth_1.ORG_AUTHORITY_MODE_ENV; } });
|
|
139
|
+
Object.defineProperty(exports, "InvalidOrgAuthorityModeError", { enumerable: true, get: function () { return auth_1.InvalidOrgAuthorityModeError; } });
|
|
140
|
+
Object.defineProperty(exports, "resolveOrgAuthorityMode", { enumerable: true, get: function () { return auth_1.resolveOrgAuthorityMode; } });
|
|
141
|
+
Object.defineProperty(exports, "ORG_AUTHORITY_OBSERVATION_LIMIT", { enumerable: true, get: function () { return auth_1.ORG_AUTHORITY_OBSERVATION_LIMIT; } });
|
|
142
|
+
Object.defineProperty(exports, "UNKNOWN_CLIENT_ID", { enumerable: true, get: function () { return auth_1.UNKNOWN_CLIENT_ID; } });
|
|
143
|
+
Object.defineProperty(exports, "recordUnprovenOrgAuthority", { enumerable: true, get: function () { return auth_1.recordUnprovenOrgAuthority; } });
|
|
144
|
+
Object.defineProperty(exports, "orgAuthorityCensus", { enumerable: true, get: function () { return auth_1.orgAuthorityCensus; } });
|
|
145
|
+
Object.defineProperty(exports, "resetOrgAuthorityCensus", { enumerable: true, get: function () { return auth_1.resetOrgAuthorityCensus; } });
|
|
127
146
|
var connector_webhooks_1 = require("./connector-webhooks");
|
|
128
147
|
Object.defineProperty(exports, "ConnectorWebhookEnvelopeDto", { enumerable: true, get: function () { return connector_webhooks_1.ConnectorWebhookEnvelopeDto; } });
|
|
129
148
|
Object.defineProperty(exports, "ConnectorEnvelopePipe", { enumerable: true, get: function () { return connector_webhooks_1.ConnectorEnvelopePipe; } });
|
package/dist/nestjs/index.js.map
CHANGED
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/nestjs/index.ts"],"names":[],"mappings":"
|
|
1
|
+
{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/nestjs/index.ts"],"names":[],"mappings":";;;;;AAAA,+CAGwB;AAFtB,wHAAA,wBAAwB,OAAA;AAG1B,6CAA8C;AAArC,4GAAA,aAAa,OAAA;AACtB,uDAAmD;AAA1C,iHAAA,aAAa,OAAA;AACtB,iFAA8E;AAArE,4IAAA,2BAA2B,OAAA;AACpC,2EAAwE;AAA/D,sIAAA,wBAAwB,OAAA;AACjC,oEAaqC;AAZnC,iIAAA,yBAAyB,OAAA;AACzB,+HAAA,uBAAuB,OAAA;AACvB,oHAAA,YAAY,OAAA;AACZ,8HAAA,sBAAsB,OAAA;AACtB,iIAAA,yBAAyB,OAAA;AACzB,8HAAA,sBAAsB,OAAA;AACtB,8HAAA,sBAAsB,OAAA;AAGtB,iIAAA,yBAAyB,OAAA;AACzB,wHAAA,gBAAgB,OAAA;AAOlB,4DAIiC;AAH/B,+HAAA,2BAA2B,OAAA;AAC3B,+HAAA,2BAA2B,OAAA;AAC3B,0HAAA,sBAAsB,OAAA;AAExB,mFAA+E;AAAtE,6IAAA,2BAA2B,OAAA;AACpC,2DAAwD;AAA/C,sHAAA,gBAAgB,OAAA;AACzB,2DAQ8B;AAP5B,0HAAA,oBAAoB,OAAA;AACpB,qHAAA,eAAe,OAAA;AACf,0HAAA,oBAAoB,OAAA;AACpB,4HAAA,sBAAsB,OAAA;AACtB,6HAAA,uBAAuB,OAAA;AACvB,0HAAA,oBAAoB,OAAA;AACpB,uHAAA,iBAAiB,OAAA;AAEnB,iEAGiC;AAF/B,oIAAA,2BAA2B,OAAA;AAG7B,uDAQ4B;AAP1B,0HAAA,sBAAsB,OAAA;AACtB,qIAAA,iCAAiC,OAAA;AACjC,iIAAA,6BAA6B,OAAA;AAM/B,mEAAgE;AAAvD,8HAAA,oBAAoB,OAAA;AAC7B,kEAIoC;AAHlC,8GAAA,OAAO,OAAA;AACP,uHAAA,gBAAgB,OAAA;AAChB,2HAAA,oBAAoB,OAAA;AAKtB,iDAc4B;AAb1B,0GAAA,YAAY,OAAA;AACZ,mHAAA,qBAAqB,OAAA;AACrB,oHAAA,sBAAsB,OAAA;AACtB,+GAAA,iBAAiB,OAAA;AACjB,0HAAA,4BAA4B,OAAA;AAC5B,+HAAA,iCAAiC,OAAA;AACjC,oHAAA,sBAAsB,OAAA;AAQxB,uDAA2D;AAAlD,0GAAA,MAAM,OAAA;AAAE,iHAAA,aAAa,OAAA;AAG9B,6DAM+B;AAL7B,6HAAA,sBAAsB,OAAA;AACtB,mHAAA,YAAY,OAAA;AACZ,uHAAA,gBAAgB,OAAA;AAChB,6HAAA,sBAAsB,OAAA;AACtB,oHAAA,aAAa,OAAA;AAMf,iEAGiC;AAF/B,uIAAA,8BAA8B,OAAA;AAC9B,mIAAA,0BAA0B,OAAA;AAE5B,mEAAyE;AAAhE,qHAAA,WAAW,OAAA;AAAE,0HAAA,gBAAgB,OAAA;AACtC,2DAAwD;AAA/C,sHAAA,gBAAgB,OAAA;AACzB,qEAAiE;AAAxD,+HAAA,oBAAoB,OAAA;AAC7B,iDAAsC;AAA7B,oGAAA,GAAG,OAAA;AACZ,2CAKsB;AAJpB,gHAAA,kBAAkB,OAAA;AAClB,4GAAA,cAAc,OAAA;AACd,6GAAA,eAAe,OAAA;AACf,oHAAA,sBAAsB,OAAA;AAExB,uDAAuE;AAA9D,kHAAA,cAAc,OAAA;AACvB,iEAKiC;AAJ/B,4HAAA,mBAAmB,OAAA;AACnB,mHAAA,UAAU,OAAA;AACV,mHAAA,UAAU,OAAA;AACV,sHAAA,aAAa,OAAA;AAEf,mDAI0B;AAHxB,+GAAA,aAAa,OAAA;AACb,uHAAA,qBAAqB,OAAA;AACrB,2GAAA,SAAS,OAAA;AAEX,qDAAqD;AAA5C,wGAAA,KAAK,OAAA;AAAE,4GAAA,SAAS,OAAA;AACzB,6CAA2C;AAAlC,yGAAA,UAAU,OAAA;AACnB,qEAAkE;AAAzD,gIAAA,qBAAqB,OAAA;AAC9B,+BAqEgB;AApEd,kGAAA,UAAU,OAAA;AACV,2GAAA,mBAAmB,OAAA;AAGnB,yGAAA,iBAAiB,OAAA;AACjB,2GAAA,mBAAmB,OAAA;AACnB,yGAAA,iBAAiB,OAAA;AAKjB,uGAAA,eAAe,OAAA;AACf,yGAAA,iBAAiB,OAAA;AACjB,2GAAA,mBAAmB,OAAA;AAGnB,oGAAA,YAAY,OAAA;AACZ,sGAAA,cAAc,OAAA;AACd,wGAAA,gBAAgB,OAAA;AAChB,wGAAA,gBAAgB,OAAA;AAChB,4GAAA,oBAAoB,OAAA;AACpB,uGAAA,eAAe,OAAA;AACf,4GAAA,oBAAoB,OAAA;AACpB,wGAAA,gBAAgB,OAAA;AAIhB,oGAAA,YAAY,OAAA;AACZ,uGAAA,eAAe,OAAA;AACf,0GAAA,kBAAkB,OAAA;AAClB,+GAAA,uBAAuB,OAAA;AAMvB,mGAAA,WAAW,OAAA;AACX,qGAAA,aAAa,OAAA;AACb,sGAAA,cAAc,OAAA;AACd,uGAAA,eAAe,OAAA;AAIf,uGAAA,eAAe,OAAA;AACf,yGAAA,iBAAiB,OAAA;AAOjB,0GAAA,kBAAkB,OAAA;AAGlB,2GAAA,mBAAmB,OAAA;AACnB,4GAAA,oBAAoB,OAAA;AACpB,iHAAA,yBAAyB,OAAA;AACzB,wGAAA,gBAAgB,OAAA;AAChB,8GAAA,sBAAsB,OAAA;AACtB,oHAAA,4BAA4B,OAAA;AAC5B,+GAAA,uBAAuB,OAAA;AACvB,uHAAA,+BAA+B,OAAA;AAC/B,yGAAA,iBAAiB,OAAA;AAGjB,kHAAA,0BAA0B,OAAA;AAC1B,0GAAA,kBAAkB,OAAA;AAClB,+GAAA,uBAAuB,OAAA;AAEzB,2DAM8B;AAL5B,iIAAA,2BAA2B,OAAA;AAC3B,2HAAA,qBAAqB,OAAA;AACrB,0HAAA,oBAAoB,OAAA;AAItB,6CASuB;AANrB,8HAAA,+BAA+B,OAAA;AAC/B,uHAAA,wBAAwB,OAAA;AACxB,wHAAA,yBAAyB,OAAA;AAGzB,kHAAA,mBAAmB,OAAA"}
|
|
@@ -18,6 +18,7 @@ export declare class RequestContextMiddleware implements NestMiddleware {
|
|
|
18
18
|
private extractBearerToken;
|
|
19
19
|
private decodeJwtPayload;
|
|
20
20
|
private assertOrgClaimMatchesHeader;
|
|
21
|
+
private resolveAndRecordOrgAuthority;
|
|
21
22
|
private resolveActorId;
|
|
22
23
|
private extractProjectIdFromPath;
|
|
23
24
|
private parseApprovalMode;
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"request-context.middleware.d.ts","sourceRoot":"","sources":["../../src/nestjs/request-context.middleware.ts"],"names":[],"mappings":"AAAA,OAAO,EAKL,cAAc,EACf,MAAM,gBAAgB,CAAC;AAExB,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,WAAW,CAAC;AACrD,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,wBAAwB,CAAC;AAC7D,OAAO,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;
|
|
1
|
+
{"version":3,"file":"request-context.middleware.d.ts","sourceRoot":"","sources":["../../src/nestjs/request-context.middleware.ts"],"names":[],"mappings":"AAAA,OAAO,EAKL,cAAc,EACf,MAAM,gBAAgB,CAAC;AAExB,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,WAAW,CAAC;AACrD,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,wBAAwB,CAAC;AAC7D,OAAO,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AAwCzD,UAAU,wBAAwB;IAChC,QAAQ,CAAC,OAAO,EAAE,mBAAmB,CAAC;IACtC,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;CAC/B;AAED,UAAU,kBAAmB,SAAQ,wBAAwB;IAC3D,CAAC,eAAe,CAAC,CAAC,EAAE,cAAc,CAAC;CACpC;AAED,qBACa,wBAAyB,YAAW,cAAc;IAC7D,OAAO,CAAC,QAAQ,CAAC,MAAM,CAA6C;IAEpE,GAAG,CAAC,GAAG,EAAE,kBAAkB,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,IAAI,GAAG,IAAI;IAoJnE,OAAO,CAAC,UAAU;IAWlB,OAAO,CAAC,kBAAkB;IAc1B,OAAO,CAAC,gBAAgB;IAgCxB,OAAO,CAAC,2BAA2B;IAsCnC,OAAO,CAAC,4BAA4B;IAkDpC,OAAO,CAAC,cAAc;IAQtB,OAAO,CAAC,wBAAwB;IAKhC,OAAO,CAAC,iBAAiB;IAazB,OAAO,CAAC,sBAAsB;CAK/B"}
|
|
@@ -14,6 +14,8 @@ const request_context_1 = require("../lib/request-context");
|
|
|
14
14
|
const approval_mode_1 = require("../lib/approval-mode");
|
|
15
15
|
const org_claim_1 = require("./auth/org-claim");
|
|
16
16
|
const org_role_1 = require("./auth/org-role");
|
|
17
|
+
const org_authority_1 = require("./auth/org-authority");
|
|
18
|
+
const org_authority_observations_1 = require("./auth/org-authority-observations");
|
|
17
19
|
const actor_classification_1 = require("./auth/actor-classification");
|
|
18
20
|
const delegation_chain_1 = require("./auth/delegation-chain");
|
|
19
21
|
let RequestContextMiddleware = RequestContextMiddleware_1 = class RequestContextMiddleware {
|
|
@@ -42,6 +44,7 @@ let RequestContextMiddleware = RequestContextMiddleware_1 = class RequestContext
|
|
|
42
44
|
}
|
|
43
45
|
const resolvedOrgId = orgId ?? '';
|
|
44
46
|
this.assertOrgClaimMatchesHeader(claims, resolvedOrgId, orgHeaderName);
|
|
47
|
+
const orgAuthority = this.resolveAndRecordOrgAuthority(claims, resolvedOrgId, { tokenClass, subjectKind, clientId, delegated: actorChain.length > 0 }, `${requestMethod} ${requestUrl}`, correlationId);
|
|
45
48
|
if (actAs) {
|
|
46
49
|
this.logger.log({
|
|
47
50
|
message: 'DELEGATED_REQUEST',
|
|
@@ -61,6 +64,7 @@ let RequestContextMiddleware = RequestContextMiddleware_1 = class RequestContext
|
|
|
61
64
|
};
|
|
62
65
|
req[request_context_1.REQUEST_CONTEXT] = {
|
|
63
66
|
orgId: resolvedOrgId,
|
|
67
|
+
orgAuthority,
|
|
64
68
|
projectId,
|
|
65
69
|
subject,
|
|
66
70
|
tokenClass,
|
|
@@ -136,6 +140,40 @@ let RequestContextMiddleware = RequestContextMiddleware_1 = class RequestContext
|
|
|
136
140
|
`the ${resolved.key} claim on the access token.`);
|
|
137
141
|
}
|
|
138
142
|
}
|
|
143
|
+
resolveAndRecordOrgAuthority(claims, resolvedOrgId, facts, route, correlationId) {
|
|
144
|
+
const verdict = (0, org_authority_1.resolveOrgAuthority)(claims, resolvedOrgId);
|
|
145
|
+
if (!(0, org_authority_1.orgAuthorityRequiresProof)(verdict)) {
|
|
146
|
+
return verdict;
|
|
147
|
+
}
|
|
148
|
+
const mode = (0, org_authority_1.resolveOrgAuthorityMode)();
|
|
149
|
+
const callerFacts = {
|
|
150
|
+
clientId: facts.clientId ?? org_authority_observations_1.UNKNOWN_CLIENT_ID,
|
|
151
|
+
tokenClass: facts.tokenClass,
|
|
152
|
+
subjectKind: facts.subjectKind,
|
|
153
|
+
delegated: facts.delegated,
|
|
154
|
+
};
|
|
155
|
+
if ((0, org_authority_observations_1.recordUnprovenOrgAuthority)(callerFacts)) {
|
|
156
|
+
this.logger.warn({
|
|
157
|
+
message: 'ORG_AUTHORITY_UNPROVEN',
|
|
158
|
+
mode,
|
|
159
|
+
source: verdict.source,
|
|
160
|
+
orgId: verdict.assertedOrgId,
|
|
161
|
+
...callerFacts,
|
|
162
|
+
route,
|
|
163
|
+
correlationId,
|
|
164
|
+
});
|
|
165
|
+
}
|
|
166
|
+
if (mode === org_authority_1.OrgAuthorityMode.Enforce) {
|
|
167
|
+
throw new common_1.ForbiddenException({
|
|
168
|
+
code: 'ORG_AUTHORITY_UNPROVEN',
|
|
169
|
+
message: `The caller asserted ${org_claim_1.OrgHeaderName.Canonical}=` +
|
|
170
|
+
`"${verdict.assertedOrgId}" but the access token carries neither an ` +
|
|
171
|
+
`${org_claim_1.OrgClaimKey.Canonical} claim for that org nor an org_roles ` +
|
|
172
|
+
`membership in it. A tenant cannot be named by header alone.`,
|
|
173
|
+
});
|
|
174
|
+
}
|
|
175
|
+
return verdict;
|
|
176
|
+
}
|
|
139
177
|
resolveActorId(claims) {
|
|
140
178
|
const actorId = (0, actor_classification_1.asNonEmptyString)(claims.sub);
|
|
141
179
|
if (!actorId) {
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"request-context.middleware.js","sourceRoot":"","sources":["../../src/nestjs/request-context.middleware.ts"],"names":[],"mappings":";;;;;;;;;;AAAA,2CAMwB;AACxB,6CAAyC;AAGzC,4DAAyD;
|
|
1
|
+
{"version":3,"file":"request-context.middleware.js","sourceRoot":"","sources":["../../src/nestjs/request-context.middleware.ts"],"names":[],"mappings":";;;;;;;;;;AAAA,2CAMwB;AACxB,6CAAyC;AAGzC,4DAAyD;AAOzD,wDAAkE;AAClE,gDAA+E;AAC/E,8CAAkD;AAClD,wDAM8B;AAC9B,kFAG2C;AAC3C,sEAIqC;AACrC,8DAAsE;AA0B/D,IAAM,wBAAwB,gCAA9B,MAAM,wBAAwB;IAClB,MAAM,GAAG,IAAI,eAAM,CAAC,0BAAwB,CAAC,IAAI,CAAC,CAAC;IAEpE,GAAG,CAAC,GAAuB,EAAE,IAAa,EAAE,IAAgB;QAI1D,MAAM,KAAK,GAAG,IAAI,CAAC,UAAU,CAAC,GAAG,EAAE,yBAAa,CAAC,SAAS,CAAC,CAAC;QAC5D,MAAM,aAAa,GAAG,yBAAa,CAAC,SAAS,CAAC;QAC9C,MAAM,UAAU,GAAG,GAAG,CAAC,WAAW,IAAI,GAAG,CAAC,GAAG,IAAI,EAAE,CAAC;QACpD,MAAM,aAAa,GAAG,GAAG,CAAC,MAAM,IAAI,EAAE,CAAC;QACvC,MAAM,SAAS,GACb,IAAI,CAAC,UAAU,CAAC,GAAG,EAAE,cAAc,CAAC;YACpC,IAAI,CAAC,wBAAwB,CAAC,UAAU,CAAC,CAAC;QAC5C,MAAM,aAAa,GAAG,IAAI,CAAC,UAAU,CAAC,GAAG,EAAE,mBAAmB,CAAC,IAAI,SAAS,CAAC;QAC7E,MAAM,gBAAgB,GAAG,IAAI,CAAC,UAAU,CAAC,GAAG,EAAE,sBAAsB,CAAC,IAAI,SAAS,CAAC;QACnF,MAAM,oBAAoB,GAAG,IAAI,CAAC,iBAAiB,CACjD,IAAI,CAAC,UAAU,CAAC,GAAG,EAAE,0BAA0B,CAAC,CACjD,CAAC;QAEF,MAAM,KAAK,GAAG,IAAI,CAAC,kBAAkB,CAAC,GAAG,CAAC,CAAC;QAC3C,MAAM,aAAa,GAAG,IAAI,CAAC,UAAU,CAAC,GAAG,EAAE,kBAAkB,CAAC,IAAI,IAAA,wBAAU,GAAE,CAAC;QAC/E,MAAM,WAAW,GAAG,IAAI,CAAC,UAAU,CAAC,GAAG,EAAE,gBAAgB,CAAC,IAAI,SAAS,CAAC;QACxE,MAAM,MAAM,GAAG,IAAI,CAAC,gBAAgB,CAAC,KAAK,CAAC,CAAC;QAC5C,MAAM,OAAO,GAAG,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC,CAAC;QAK5C,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,WAAW,EAAE,UAAU,EAAE,SAAS,EAAE,GACxD,IAAA,gDAAyB,EAAC,MAAM,CAAC,CAAC;QAIpC,MAAM,UAAU,GAAG,IAAA,8CAA2B,EAAC,MAAM,CAAC,CAAC;QAGvD,MAAM,QAAQ,GAAG,IAAA,gDAAyB,EAAC,MAAM,CAAC,CAAC;QACnD,MAAM,QAAQ,GAAG,IAAA,0BAAe,EAAC,MAAM,CAAC,CAAC;QAazC,IAAI,CAAC,KAAK,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;YACtC,MAAM,IAAI,4BAAmB,CAC3B,4BAA4B,yBAAa,CAAC,SAAS,EAAE,CACtD,CAAC;QACJ,CAAC;QACD,MAAM,aAAa,GAAG,KAAK,IAAI,EAAE,CAAC;QAWlC,IAAI,CAAC,2BAA2B,CAAC,MAAM,EAAE,aAAa,EAAE,aAAa,CAAC,CAAC;QAavE,MAAM,YAAY,GAAG,IAAI,CAAC,4BAA4B,CACpD,MAAM,EACN,aAAa,EACb,EAAE,UAAU,EAAE,WAAW,EAAE,QAAQ,EAAE,SAAS,EAAE,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,EACvE,GAAG,aAAa,IAAI,UAAU,EAAE,EAChC,aAAa,CACd,CAAC;QAUF,IAAI,KAAK,EAAE,CAAC;YACV,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC;gBACd,OAAO,EAAE,mBAAmB;gBAC5B,KAAK,EAAE,OAAO;gBACd,KAAK;gBACL,KAAK;gBACL,SAAS;gBACT,KAAK,EAAE,GAAG,aAAa,IAAI,UAAU,EAAE;gBACvC,aAAa;aACd,CAAC,CAAC;QACL,CAAC;QAED,MAAM,OAAO,GAAe;YAC1B,IAAI,EAAE,WAAW;YACjB,EAAE,EAAE,OAAO;YACX,KAAK;YACL,GAAG,CAAC,UAAU,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,UAAU,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC/D,CAAC;QAEF,GAAG,CAAC,iCAAe,CAAC,GAAG;YACrB,KAAK,EAAE,aAAa;YACpB,YAAY;YACZ,SAAS;YACT,OAAO;YACP,UAAU;YACV,UAAU;YACV,OAAO;YACP,SAAS;YACT,aAAa;YACb,WAAW;YACX,aAAa,EAAE,UAAU,KAAK,EAAE;YAChC,WAAW,EAAE,KAAK;YAClB,aAAa;YACb,gBAAgB;YAChB,oBAAoB;YACpB,KAAK;YACL,GAAG,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC/C,OAAO,EAAE,IAAI,CAAC,sBAAsB,CAAC,MAAM,CAAC,GAAyB,CAAC;YACtE,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACzD,GAAG,CAAC,QAAQ,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,QAAQ,CAAC,aAAa,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACxE,GAAG,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC1C,CAAC;QAEF,IAAI,EAAE,CAAC;IACT,CAAC;IAWO,UAAU,CAChB,GAA6B,EAC7B,IAAY;QAEZ,MAAM,GAAG,GAAG,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC;QAC5C,IAAI,GAAG,KAAK,SAAS,EAAE,CAAC;YACtB,OAAO,SAAS,CAAC;QACnB,CAAC;QACD,OAAO,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC;IAC3C,CAAC;IAEO,kBAAkB,CAAC,GAA6B;QACtD,MAAM,aAAa,GAAG,IAAI,CAAC,UAAU,CAAC,GAAG,EAAE,eAAe,CAAC,CAAC;QAC5D,IAAI,CAAC,aAAa,EAAE,CAAC;YACnB,MAAM,IAAI,4BAAmB,CAAC,wCAAwC,CAAC,CAAC;QAC1E,CAAC;QACD,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,GAAG,aAAa,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QACjD,IAAI,MAAM,KAAK,QAAQ,IAAI,CAAC,KAAK,EAAE,CAAC;YAClC,MAAM,IAAI,4BAAmB,CAC3B,+DAA+D,CAChE,CAAC;QACJ,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IAEO,gBAAgB,CAAC,KAAa;QACpC,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC/B,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;YAKpC,MAAM,IAAI,4BAAmB,CAC3B,2EAA2E,KAAK,CAAC,MAAM,GAAG;gBACxF,iBAAiB,KAAK,CAAC,MAAM,aAAa,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,KAAK,CACnE,CAAC;QACJ,CAAC;QACD,IAAI,CAAC;YACH,MAAM,WAAW,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,WAAW,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;YACxE,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;YACxC,IAAI,CAAC,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ,EAAE,CAAC;gBAC5C,MAAM,IAAI,KAAK,CAAC,uBAAuB,CAAC,CAAC;YAC3C,CAAC;YACD,OAAO,OAAkC,CAAC;QAC5C,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,IAAI,4BAAmB,CAAC,2BAA2B,CAAC,CAAC;QAC7D,CAAC;IACH,CAAC;IAUO,2BAA2B,CACjC,MAA+B,EAC/B,WAAmB,EACnB,UAAyB;QAEzB,MAAM,QAAQ,GAAG,IAAA,2BAAe,EAAC,MAAM,CAAC,CAAC;QACzC,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,OAAO;QACT,CAAC;QACD,IAAI,QAAQ,CAAC,KAAK,CAAC,WAAW,EAAE,KAAK,WAAW,CAAC,WAAW,EAAE,EAAE,CAAC;YAC/D,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC;gBACf,OAAO,EAAE,uBAAuB;gBAChC,KAAK,EAAE,QAAQ,CAAC,GAAG;gBACnB,UAAU,EAAE,QAAQ,CAAC,KAAK;gBAC1B,MAAM,EAAE,UAAU;gBAClB,WAAW;aACZ,CAAC,CAAC;YACH,MAAM,IAAI,2BAAkB,CAC1B,GAAG,UAAU,KAAK,WAAW,IAAI,SAAS,mBAAmB;gBAC3D,OAAO,QAAQ,CAAC,GAAG,6BAA6B,CACnD,CAAC;QACJ,CAAC;IACH,CAAC;IAgBO,4BAA4B,CAClC,MAA+B,EAC/B,aAAqB,EACrB,KAKC,EACD,KAAa,EACb,aAAqB;QAErB,MAAM,OAAO,GAAG,IAAA,mCAAmB,EAAC,MAAM,EAAE,aAAa,CAAC,CAAC;QAC3D,IAAI,CAAC,IAAA,yCAAyB,EAAC,OAAO,CAAC,EAAE,CAAC;YACxC,OAAO,OAAO,CAAC;QACjB,CAAC;QAED,MAAM,IAAI,GAAG,IAAA,uCAAuB,GAAE,CAAC;QACvC,MAAM,WAAW,GAAG;YAClB,QAAQ,EAAE,KAAK,CAAC,QAAQ,IAAI,8CAAiB;YAC7C,UAAU,EAAE,KAAK,CAAC,UAAU;YAC5B,WAAW,EAAE,KAAK,CAAC,WAAW;YAC9B,SAAS,EAAE,KAAK,CAAC,SAAS;SAC3B,CAAC;QACF,IAAI,IAAA,uDAA0B,EAAC,WAAW,CAAC,EAAE,CAAC;YAC5C,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC;gBACf,OAAO,EAAE,wBAAwB;gBACjC,IAAI;gBACJ,MAAM,EAAE,OAAO,CAAC,MAAM;gBACtB,KAAK,EAAE,OAAO,CAAC,aAAa;gBAC5B,GAAG,WAAW;gBACd,KAAK;gBACL,aAAa;aACd,CAAC,CAAC;QACL,CAAC;QAED,IAAI,IAAI,KAAK,gCAAgB,CAAC,OAAO,EAAE,CAAC;YACtC,MAAM,IAAI,2BAAkB,CAAC;gBAC3B,IAAI,EAAE,wBAAwB;gBAC9B,OAAO,EACL,uBAAuB,yBAAa,CAAC,SAAS,GAAG;oBACjD,IAAI,OAAO,CAAC,aAAa,4CAA4C;oBACrE,GAAG,uBAAW,CAAC,SAAS,uCAAuC;oBAC/D,6DAA6D;aAChE,CAAC,CAAC;QACL,CAAC;QAED,OAAO,OAAO,CAAC;IACjB,CAAC;IAEO,cAAc,CAAC,MAA+B;QACpD,MAAM,OAAO,GAAG,IAAA,uCAAgB,EAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAC7C,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,MAAM,IAAI,4BAAmB,CAAC,wCAAwC,CAAC,CAAC;QAC1E,CAAC;QACD,OAAO,OAAO,CAAC;IACjB,CAAC;IAEO,wBAAwB,CAAC,IAAY;QAC3C,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,sBAAsB,CAAC,CAAC;QACjD,OAAO,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC;IACpB,CAAC;IAEO,iBAAiB,CACvB,KAAyB;QAEzB,IAAI,CAAC,KAAK;YAAE,OAAO,SAAS,CAAC;QAC7B,MAAM,KAAK,GAAG,KAAK,CAAC,WAAW,EAAE,CAAC;QAClC,IAAI,0CAA0B,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;YAC1C,OAAO,KAA6B,CAAC;QACvC,CAAC;QACD,MAAM,IAAI,4BAAmB,CAC3B,4CAA4C,KAAK,uCAAuC,CACzF,CAAC;IACJ,CAAC;IAEO,sBAAsB,CAAC,MAA0B;QACvD,IAAI,CAAC,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ;YAAE,OAAO,SAAS,CAAC;QAC5D,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,oBAAoB,CAAC,CAAC;QACjD,OAAO,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC;IACpB,CAAC;CACF,CAAA;AAvUY,4DAAwB;mCAAxB,wBAAwB;IADpC,IAAA,mBAAU,GAAE;GACA,wBAAwB,CAuUpC"}
|
package/package.json
CHANGED
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
{
|
|
2
2
|
"name": "@xemahq/platform-common",
|
|
3
|
-
"version": "0.7.
|
|
3
|
+
"version": "0.7.2",
|
|
4
4
|
"description": "Shared NestJS building blocks for Xema services — auth guards, response redaction, CORS configuration, and crypto helpers.",
|
|
5
5
|
"license": "Apache-2.0",
|
|
6
6
|
"author": "Neuralchowder Inc. <developer@xema.dev> (https://xema.dev)",
|
|
@@ -40,6 +40,7 @@
|
|
|
40
40
|
"dependencies": {
|
|
41
41
|
"cloudevents": "^8.0.2",
|
|
42
42
|
"jwks-rsa": "^3.2.2",
|
|
43
|
+
"undici": "^7.22.0",
|
|
43
44
|
"zod": "^4.3.6",
|
|
44
45
|
"@xemahq/oidc-guard": "0.3.0"
|
|
45
46
|
},
|
|
@@ -62,7 +63,7 @@
|
|
|
62
63
|
"rxjs": "7.8.2",
|
|
63
64
|
"ts-jest": "^29.4.9",
|
|
64
65
|
"typescript": "5.9.3",
|
|
65
|
-
"@xemahq/kernel-contracts": "^
|
|
66
|
+
"@xemahq/kernel-contracts": "^5.0.0"
|
|
66
67
|
},
|
|
67
68
|
"exports": {
|
|
68
69
|
".": {
|