@ya-accelerators/web-backend-framework 0.0.142 → 0.0.143
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
|
@@ -24,6 +24,19 @@ export declare const googleIdTokenAuth: (wifConfigBase64: string, audience: stri
|
|
|
24
24
|
bearer: () => Promise<string>;
|
|
25
25
|
withAuth: <T>(fn: () => Promise<T>) => Promise<T>;
|
|
26
26
|
};
|
|
27
|
+
export declare const googleIdTokenVerify: ({ token, audience, issuer, jwksCacheKey, jwksCacheTtlSec, }: {
|
|
28
|
+
token: string;
|
|
29
|
+
audience: string | string[];
|
|
30
|
+
issuer: string | string[];
|
|
31
|
+
jwksCacheKey: string;
|
|
32
|
+
jwksCacheTtlSec: number;
|
|
33
|
+
}) => Promise<{
|
|
34
|
+
sub: string;
|
|
35
|
+
aud?: string | string[] | undefined;
|
|
36
|
+
email?: string | undefined;
|
|
37
|
+
email_verified?: boolean | undefined;
|
|
38
|
+
hd?: string | undefined;
|
|
39
|
+
}>;
|
|
27
40
|
export declare const googleImpersonatedAuth: (wifConfigBase64: string, { label, lifetime, targetScopes }: {
|
|
28
41
|
label: string;
|
|
29
42
|
lifetime: number;
|
|
@@ -1,7 +1,40 @@
|
|
|
1
|
+
import { z } from 'zod';
|
|
1
2
|
import { constants } from '../../constants.js';
|
|
2
3
|
import { runWithRequestHeaders } from '../../context/request/index.js';
|
|
3
4
|
import { awsSecurityCredentialsSupplier, impersonatedClient, parseWifConfig } from '../../internal/federation/index.js';
|
|
4
5
|
import { logger } from '../../logger/index.js';
|
|
6
|
+
import { redis } from '../../repository/redis/index.js';
|
|
7
|
+
const JwkParametersSchema = z.object({
|
|
8
|
+
alg: z.string().optional(),
|
|
9
|
+
key_ops: z.array(z.string()).optional(),
|
|
10
|
+
ext: z.boolean().optional(),
|
|
11
|
+
use: z.string().optional(),
|
|
12
|
+
x5c: z.array(z.string()).optional(),
|
|
13
|
+
x5t: z.string().optional(),
|
|
14
|
+
'x5t#S256': z.string().optional(),
|
|
15
|
+
x5u: z.string().optional(),
|
|
16
|
+
kid: z.string().optional(),
|
|
17
|
+
});
|
|
18
|
+
const AnyPublicJwkSchema = z.discriminatedUnion('kty', [
|
|
19
|
+
JwkParametersSchema.extend({ kty: z.literal('RSA'), e: z.string(), n: z.string() }),
|
|
20
|
+
JwkParametersSchema.extend({ kty: z.literal('EC'), crv: z.string(), x: z.string(), y: z.string() }),
|
|
21
|
+
JwkParametersSchema.extend({ kty: z.literal('OKP'), crv: z.string(), x: z.string() }),
|
|
22
|
+
JwkParametersSchema.extend({ kty: z.literal('AKP'), alg: z.string(), pub: z.string() }),
|
|
23
|
+
]);
|
|
24
|
+
const JwksResponseSchema = z.object({ keys: z.array(z.unknown()) }).transform(({ keys }) => ({
|
|
25
|
+
keys: keys.flatMap((key) => {
|
|
26
|
+
const result = AnyPublicJwkSchema.safeParse(key);
|
|
27
|
+
return result.success ? [result.data] : [];
|
|
28
|
+
}),
|
|
29
|
+
total: keys.length,
|
|
30
|
+
}));
|
|
31
|
+
const GoogleIdTokenClaimsSchema = z.object({
|
|
32
|
+
sub: z.string(),
|
|
33
|
+
aud: z.union([z.string(), z.array(z.string())]).optional(),
|
|
34
|
+
email: z.string().optional(),
|
|
35
|
+
email_verified: z.boolean().optional(),
|
|
36
|
+
hd: z.string().optional(),
|
|
37
|
+
});
|
|
5
38
|
export const googleCloudAuth = (wifConfigBase64) => {
|
|
6
39
|
let client;
|
|
7
40
|
let inflight;
|
|
@@ -81,6 +114,65 @@ export const googleIdTokenAuth = (wifConfigBase64, audience, forHost) => {
|
|
|
81
114
|
withAuth: async (fn) => runWithRequestHeaders({ authorization: await bearer() }, fn, { forHost }),
|
|
82
115
|
};
|
|
83
116
|
};
|
|
117
|
+
export const googleIdTokenVerify = async ({ token, audience, issuer, jwksCacheKey, jwksCacheTtlSec, }) => {
|
|
118
|
+
const { createLocalJWKSet, errors, jwtVerify } = await import('jose');
|
|
119
|
+
const fetchJwks = async () => {
|
|
120
|
+
const res = await fetch('https://www.googleapis.com/oauth2/v3/certs', {
|
|
121
|
+
cache: 'no-store',
|
|
122
|
+
signal: AbortSignal.timeout(constants.GOOGLE_JWKS_FETCH_TIMEOUT_MS),
|
|
123
|
+
}).catch((e) => {
|
|
124
|
+
logger.error('google-auth', { op: 'jwks-fetch', error: e });
|
|
125
|
+
throw e;
|
|
126
|
+
});
|
|
127
|
+
if (!res.ok) {
|
|
128
|
+
logger.error('google-auth', { op: 'jwks-fetch', status: res.status });
|
|
129
|
+
throw new Error(`googleIdTokenVerify: Google JWKS fetch failed (${res.status})`);
|
|
130
|
+
}
|
|
131
|
+
const parsed = JwksResponseSchema.safeParse(await res.json().catch((e) => {
|
|
132
|
+
logger.error('google-auth', { op: 'jwks-fetch', error: e });
|
|
133
|
+
throw e;
|
|
134
|
+
}));
|
|
135
|
+
if (!parsed.success) {
|
|
136
|
+
logger.error('google-auth', { op: 'jwks-fetch', error: parsed.error });
|
|
137
|
+
throw parsed.error;
|
|
138
|
+
}
|
|
139
|
+
const { keys, total } = parsed.data;
|
|
140
|
+
if (keys.length !== total || keys.length === 0) {
|
|
141
|
+
logger.error('google-auth', { op: 'jwks-key-shape', total, kept: keys.length });
|
|
142
|
+
}
|
|
143
|
+
if (keys.length === 0) {
|
|
144
|
+
throw new Error('googleIdTokenVerify: JWKS carries no usable key');
|
|
145
|
+
}
|
|
146
|
+
const jwks = { keys };
|
|
147
|
+
await redis.set(jwksCacheKey, JSON.stringify(jwks), jwksCacheTtlSec).catch(() => undefined);
|
|
148
|
+
return jwks;
|
|
149
|
+
};
|
|
150
|
+
const cached = await redis.get(jwksCacheKey).catch(() => undefined);
|
|
151
|
+
const cachedJwks = (() => {
|
|
152
|
+
try {
|
|
153
|
+
if (cached === undefined) {
|
|
154
|
+
return undefined;
|
|
155
|
+
}
|
|
156
|
+
const { keys } = JwksResponseSchema.parse(JSON.parse(cached));
|
|
157
|
+
return keys.length === 0 ? undefined : { keys };
|
|
158
|
+
}
|
|
159
|
+
catch {
|
|
160
|
+
return undefined;
|
|
161
|
+
}
|
|
162
|
+
})();
|
|
163
|
+
let jwks = cachedJwks ?? (await fetchJwks());
|
|
164
|
+
const verify = async () => GoogleIdTokenClaimsSchema.parse((await jwtVerify(token, createLocalJWKSet(jwks), { issuer, audience })).payload);
|
|
165
|
+
try {
|
|
166
|
+
return await verify();
|
|
167
|
+
}
|
|
168
|
+
catch (e) {
|
|
169
|
+
if (e instanceof errors.JWKSNoMatchingKey && cachedJwks !== undefined) {
|
|
170
|
+
jwks = await fetchJwks();
|
|
171
|
+
return await verify();
|
|
172
|
+
}
|
|
173
|
+
throw e;
|
|
174
|
+
}
|
|
175
|
+
};
|
|
84
176
|
export const googleImpersonatedAuth = (wifConfigBase64, { label, lifetime, targetScopes }) => ({
|
|
85
177
|
accessToken: async () => {
|
|
86
178
|
const { impersonated, serviceAccountEmail } = await impersonatedClient({
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/connector/google-auth/index.ts"],"names":[],"mappings":"
|
|
1
|
+
{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/connector/google-auth/index.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAA;AAEvB,OAAO,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAA;AAC9C,OAAO,EAAE,qBAAqB,EAAE,MAAM,gCAAgC,CAAA;AACtE,OAAO,EAAE,8BAA8B,EAAE,kBAAkB,EAAE,cAAc,EAAE,MAAM,oCAAoC,CAAA;AACvH,OAAO,EAAE,MAAM,EAAE,MAAM,uBAAuB,CAAA;AAC9C,OAAO,EAAE,KAAK,EAAE,MAAM,iCAAiC,CAAA;AAEvD,MAAM,mBAAmB,GAAG,CAAC,CAAC,MAAM,CAAC;IACnC,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC1B,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;IACvC,GAAG,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IAC3B,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC1B,GAAG,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;IACnC,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC1B,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACjC,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC1B,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CAC3B,CAAC,CAAA;AACF,MAAM,kBAAkB,GAAG,CAAC,CAAC,kBAAkB,CAAC,KAAK,EAAE;IACrD,mBAAmB,CAAC,MAAM,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC;IACnF,mBAAmB,CAAC,MAAM,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC;IACnG,mBAAmB,CAAC,MAAM,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC;IACrF,mBAAmB,CAAC,MAAM,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC;CACxF,CAAC,CAAA;AACF,MAAM,kBAAkB,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,EAAE,CAAC,CAAC,SAAS,CAAC,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC;IAC3F,IAAI,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC,GAAG,EAAE,EAAE;QACzB,MAAM,MAAM,GAAG,kBAAkB,CAAC,SAAS,CAAC,GAAG,CAAC,CAAA;QAChD,OAAO,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAA;IAC5C,CAAC,CAAC;IACF,KAAK,EAAE,IAAI,CAAC,MAAM;CACnB,CAAC,CAAC,CAAA;AACH,MAAM,yBAAyB,GAAG,CAAC,CAAC,MAAM,CAAC;IACzC,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE;IACf,GAAG,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IAC1D,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC5B,cAAc,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IACtC,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CAC1B,CAAC,CAAA;AAEF,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC,eAAuB,EAAE,EAAE;IACzD,IAAI,MAA8B,CAAA;IAClC,IAAI,QAAyC,CAAA;IAC7C,MAAM,sBAAsB,GAAG,GAAG,EAAE,CAAC,CAAC;QACpC,GAAG,cAAc,CAAC,eAAe,EAAE,iBAAiB,CAAC;QACrD,iBAAiB,EAAE,SAAS;QAC5B,iCAAiC,EAAE,8BAA8B;QACjE,MAAM,EAAE,CAAC,gDAAgD,CAAC;KAC3D,CAAC,CAAA;IAEF,MAAM,UAAU,GAAG,KAAK,IAAI,EAAE;QAC5B,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;YACzB,OAAO,MAAM,CAAA;QACf,CAAC;QACD,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;YAC3B,QAAQ,GAAG,CAAC,KAAK,IAAI,EAAE;gBACrB,MAAM,EAAE,SAAS,EAAE,GAAG,MAAM,MAAM,CAAC,qBAAqB,CAAC,CAAA;gBACzD,OAAO,IAAI,SAAS,CAAC,sBAAsB,EAAE,CAAC,CAAA;YAChD,CAAC,CAAC,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE;gBAChB,QAAQ,GAAG,SAAS,CAAA;YACtB,CAAC,CAAC,CAAA;QACJ,CAAC;QACD,MAAM,GAAG,MAAM,QAAQ,CAAA;QACvB,OAAO,MAAM,CAAA;IACf,CAAC,CAAA;IAED,OAAO;QACL,UAAU;QACV,gBAAgB,EAAE,sBAAsB;QACxC,MAAM,EAAE,KAAK,IAAI,EAAE;YACjB,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,CAAC,MAAM,UAAU,EAAE,CAAC,CAAC,cAAc,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE;gBACxE,MAAM,CAAC,KAAK,CAAC,aAAa,EAAE,EAAE,EAAE,EAAE,cAAc,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC,CAAA;gBAC7D,MAAM,CAAC,CAAA;YACT,CAAC,CAAC,CAAA;YACF,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;gBAC1C,MAAM,IAAI,KAAK,CAAC,2CAA2C,CAAC,CAAA;YAC9D,CAAC;YACD,OAAO,UAAU,KAAK,EAAE,CAAA;QAC1B,CAAC;KACF,CAAA;AACH,CAAC,CAAA;AAED,yGAAyG;AACzG,8GAA8G;AAC9G,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,eAAuB,EAAE,QAAgB,EAAE,OAAe,EAAE,EAAE;IAC9F,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,OAAO,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;QACzD,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAA;IAC3D,CAAC;IACD,IAAI,MAAwD,CAAA;IAC5D,IAAI,QAAmE,CAAA;IACvE,MAAM,YAAY,GAAG,KAAK,IAAI,EAAE;QAC9B,MAAM,EAAE,YAAY,EAAE,GAAG,MAAM,kBAAkB,CAAC;YAChD,eAAe;YACf,KAAK,EAAE,mBAAmB;YAC1B,QAAQ,EAAE,SAAS,CAAC,gBAAgB;YACpC,YAAY,EAAE,CAAC,gDAAgD,CAAC;SACjE,CAAC,CAAA;QACF,OAAO;YACL,KAAK,EAAE,MAAM,YAAY,CAAC,YAAY,CAAC,QAAQ,EAAE,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE;gBACnF,MAAM,CAAC,KAAK,CAAC,aAAa,EAAE,EAAE,EAAE,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC,CAAA;gBACzD,MAAM,CAAC,CAAA;YACT,CAAC,CAAC;YACF,SAAS,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,GAAG,SAAS,CAAC,gBAAgB,CAAC,GAAG,IAAI;SAC/E,CAAA;IACH,CAAC,CAAA;IACD,MAAM,MAAM,GAAG,KAAK,IAAI,EAAE;QACxB,IAAI,MAAM,KAAK,SAAS,IAAI,IAAI,CAAC,GAAG,EAAE,IAAI,MAAM,CAAC,SAAS,GAAG,SAAS,CAAC,eAAe,EAAE,CAAC;YACvF,OAAO,UAAU,MAAM,CAAC,KAAK,EAAE,CAAA;QACjC,CAAC;QACD,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;YAC3B,QAAQ,GAAG,YAAY,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE;gBACrC,QAAQ,GAAG,SAAS,CAAA;YACtB,CAAC,CAAC,CAAA;QACJ,CAAC;QACD,MAAM,GAAG,MAAM,QAAQ,CAAA;QACvB,OAAO,UAAU,MAAM,CAAC,KAAK,EAAE,CAAA;IACjC,CAAC,CAAA;IAED,OAAO;QACL,MAAM;QACN,QAAQ,EAAE,KAAK,EAAK,EAAoB,EAAE,EAAE,CAC1C,qBAAqB,CAAC,EAAE,aAAa,EAAE,MAAM,MAAM,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,OAAO,EAAE,CAAC;KAC5E,CAAA;AACH,CAAC,CAAA;AAED,MAAM,CAAC,MAAM,mBAAmB,GAAG,KAAK,EAAE,EACxC,KAAK,EACL,QAAQ,EACR,MAAM,EACN,YAAY,EACZ,eAAe,GAOhB,EAAE,EAAE;IACH,MAAM,EAAE,iBAAiB,EAAE,MAAM,EAAE,SAAS,EAAE,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,CAAA;IACrE,MAAM,SAAS,GAAG,KAAK,IAAI,EAAE;QAC3B,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,4CAA4C,EAAE;YACpE,KAAK,EAAE,UAAU;YACjB,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,SAAS,CAAC,4BAA4B,CAAC;SACpE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE;YACb,MAAM,CAAC,KAAK,CAAC,aAAa,EAAE,EAAE,EAAE,EAAE,YAAY,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC,CAAA;YAC3D,MAAM,CAAC,CAAA;QACT,CAAC,CAAC,CAAA;QACF,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;YACZ,MAAM,CAAC,KAAK,CAAC,aAAa,EAAE,EAAE,EAAE,EAAE,YAAY,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,CAAC,CAAA;YACrE,MAAM,IAAI,KAAK,CAAC,kDAAkD,GAAG,CAAC,MAAM,GAAG,CAAC,CAAA;QAClF,CAAC;QACD,MAAM,MAAM,GAAG,kBAAkB,CAAC,SAAS,CACzC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE;YAC3B,MAAM,CAAC,KAAK,CAAC,aAAa,EAAE,EAAE,EAAE,EAAE,YAAY,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC,CAAA;YAC3D,MAAM,CAAC,CAAA;QACT,CAAC,CAAC,CACH,CAAA;QACD,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACpB,MAAM,CAAC,KAAK,CAAC,aAAa,EAAE,EAAE,EAAE,EAAE,YAAY,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC,CAAA;YACtE,MAAM,MAAM,CAAC,KAAK,CAAA;QACpB,CAAC;QACD,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,MAAM,CAAC,IAAI,CAAA;QACnC,IAAI,IAAI,CAAC,MAAM,KAAK,KAAK,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC/C,MAAM,CAAC,KAAK,CAAC,aAAa,EAAE,EAAE,EAAE,EAAE,gBAAgB,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC,CAAA;QACjF,CAAC;QACD,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACtB,MAAM,IAAI,KAAK,CAAC,iDAAiD,CAAC,CAAA;QACpE,CAAC;QACD,MAAM,IAAI,GAAG,EAAE,IAAI,EAAE,CAAA;QACrB,MAAM,KAAK,CAAC,GAAG,CAAC,YAAY,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,eAAe,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAA;QAC3F,OAAO,IAAI,CAAA;IACb,CAAC,CAAA;IACD,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAA;IACnE,MAAM,UAAU,GAAG,CAAC,GAAG,EAAE;QACvB,IAAI,CAAC;YACH,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;gBACzB,OAAO,SAAS,CAAA;YAClB,CAAC;YACD,MAAM,EAAE,IAAI,EAAE,GAAG,kBAAkB,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAA;YAC7D,OAAO,IAAI,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAA;QACjD,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,SAAS,CAAA;QAClB,CAAC;IACH,CAAC,CAAC,EAAE,CAAA;IACJ,IAAI,IAAI,GAAG,UAAU,IAAI,CAAC,MAAM,SAAS,EAAE,CAAC,CAAA;IAC5C,MAAM,MAAM,GAAG,KAAK,IAAI,EAAE,CACxB,yBAAyB,CAAC,KAAK,CAAC,CAAC,MAAM,SAAS,CAAC,KAAK,EAAE,iBAAiB,CAAC,IAAI,CAAC,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAA;IAClH,IAAI,CAAC;QACH,OAAO,MAAM,MAAM,EAAE,CAAA;IACvB,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,IAAI,CAAC,YAAY,MAAM,CAAC,iBAAiB,IAAI,UAAU,KAAK,SAAS,EAAE,CAAC;YACtE,IAAI,GAAG,MAAM,SAAS,EAAE,CAAA;YACxB,OAAO,MAAM,MAAM,EAAE,CAAA;QACvB,CAAC;QACD,MAAM,CAAC,CAAA;IACT,CAAC;AACH,CAAC,CAAA;AAED,MAAM,CAAC,MAAM,sBAAsB,GAAG,CACpC,eAAuB,EACvB,EAAE,KAAK,EAAE,QAAQ,EAAE,YAAY,EAA+D,EAC9F,EAAE,CAAC,CAAC;IACJ,WAAW,EAAE,KAAK,IAAI,EAAE;QACtB,MAAM,EAAE,YAAY,EAAE,mBAAmB,EAAE,GAAG,MAAM,kBAAkB,CAAC;YACrE,eAAe;YACf,KAAK;YACL,QAAQ;YACR,YAAY;SACb,CAAC,CAAA;QACF,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,YAAY,CAAC,cAAc,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE;YAChE,MAAM,CAAC,KAAK,CAAC,aAAa,EAAE,EAAE,EAAE,EAAE,cAAc,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC,CAAA;YACpE,MAAM,CAAC,CAAA;QACT,CAAC,CAAC,CAAA;QACF,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;YAC1C,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,yCAAyC,CAAC,CAAA;QACpE,CAAC;QACD,OAAO,EAAE,KAAK,EAAE,mBAAmB,EAAE,CAAA;IACvC,CAAC;CACF,CAAC,CAAA"}
|
package/dist/constants.d.ts
CHANGED
|
@@ -5,6 +5,8 @@ export declare const constants: {
|
|
|
5
5
|
OAUTH_DEV_REDIRECTOR_URL: string;
|
|
6
6
|
ID_TOKEN_TTL_SEC: number;
|
|
7
7
|
REFRESH_SKEW_MS: number;
|
|
8
|
+
GOOGLE_ID_TOKEN_ISSUERS: string[];
|
|
9
|
+
GOOGLE_JWKS_FETCH_TIMEOUT_MS: number;
|
|
8
10
|
REQUEST_ID_PATTERN: RegExp;
|
|
9
11
|
UPLOADS_PATH: string;
|
|
10
12
|
UPLOADS_PREFIX: string;
|
package/dist/constants.js
CHANGED
|
@@ -4,6 +4,8 @@ export const constants = {
|
|
|
4
4
|
OAUTH_DEV_REDIRECTOR_URL: 'https://jbilvarnjxcewv7spngtoaowia0krqmu.lambda-url.eu-north-1.on.aws/',
|
|
5
5
|
ID_TOKEN_TTL_SEC: 3600,
|
|
6
6
|
REFRESH_SKEW_MS: 5 * 60 * 1000,
|
|
7
|
+
GOOGLE_ID_TOKEN_ISSUERS: ['https://accounts.google.com', 'accounts.google.com'],
|
|
8
|
+
GOOGLE_JWKS_FETCH_TIMEOUT_MS: 5000,
|
|
7
9
|
REQUEST_ID_PATTERN: /^[A-Za-z0-9._-]{1,128}$/,
|
|
8
10
|
UPLOADS_PATH: '/api/uploads',
|
|
9
11
|
UPLOADS_PREFIX: 'uploads/',
|
package/dist/constants.js.map
CHANGED
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"constants.js","sourceRoot":"","sources":["../src/constants.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,qBAAqB,EAAE,MAAM,yCAAyC,CAAA;AAC/E,OAAO,EAAE,YAAY,EAAE,MAAM,wCAAwC,CAAA;AAErE,MAAM,CAAC,MAAM,SAAS,GAAG;IACvB,wBAAwB,EAAE,wEAAwE;IAClG,gBAAgB,EAAE,IAAI;IACtB,eAAe,EAAE,CAAC,GAAG,EAAE,GAAG,IAAI;IAC9B,kBAAkB,EAAE,yBAAyB;IAC7C,YAAY,EAAE,cAAc;IAC5B,cAAc,EAAE,UAAU;IAC1B,mBAAmB,EAAE,CAAC;IACtB,mBAAmB,EAAE,EAAE;IACvB,wBAAwB,EAAE,EAAE;IAC5B,eAAe,EAAE,EAAE;IACnB,sBAAsB,EAAE,EAAE;IAC1B,oBAAoB,EAAE,CAAC,GAAG,EAAE;IAC5B,0BAA0B,EAAE,GAAG;IAC/B,8BAA8B,EAAE,GAAG;IACnC,0BAA0B,EAAE,0BAA0B;IACtD,gBAAgB,EAAE,GAAG,GAAG,IAAI,GAAG,IAAI;IACnC,wBAAwB,EAAE,EAAE;IAC5B,+BAA+B,EAAE,EAAE;IACnC,gCAAgC,EAAE,EAAE;IACpC,6BAA6B,EAAE,qBAAqB,CAAC,mBAAmB;IACxE,qBAAqB,EAAE,IAAI;IAE3B,2GAA2G;IAC3G,2GAA2G;IAC3G,iBAAiB;IACjB,wBAAwB,EAAE,KAAK;IAC/B,yGAAyG;IACzG,2GAA2G;IAC3G,2FAA2F;IAC3F,qBAAqB,EAAE,KAAK;IAC5B,oBAAoB,EAAE,KAAK;IAE3B,4GAA4G;IAC5G,+FAA+F;IAC/F,4GAA4G;IAC5G,+CAA+C;IAC/C,uBAAuB,EAAE;QACvB,YAAY;QACZ,WAAW;QACX,WAAW;QACX,cAAc;QACd,YAAY;QACZ,YAAY;KACJ;IAEV,GAAG,YAAY;CAChB,CAAA"}
|
|
1
|
+
{"version":3,"file":"constants.js","sourceRoot":"","sources":["../src/constants.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,qBAAqB,EAAE,MAAM,yCAAyC,CAAA;AAC/E,OAAO,EAAE,YAAY,EAAE,MAAM,wCAAwC,CAAA;AAErE,MAAM,CAAC,MAAM,SAAS,GAAG;IACvB,wBAAwB,EAAE,wEAAwE;IAClG,gBAAgB,EAAE,IAAI;IACtB,eAAe,EAAE,CAAC,GAAG,EAAE,GAAG,IAAI;IAC9B,uBAAuB,EAAE,CAAC,6BAA6B,EAAE,qBAAqB,CAAC;IAC/E,4BAA4B,EAAE,IAAI;IAClC,kBAAkB,EAAE,yBAAyB;IAC7C,YAAY,EAAE,cAAc;IAC5B,cAAc,EAAE,UAAU;IAC1B,mBAAmB,EAAE,CAAC;IACtB,mBAAmB,EAAE,EAAE;IACvB,wBAAwB,EAAE,EAAE;IAC5B,eAAe,EAAE,EAAE;IACnB,sBAAsB,EAAE,EAAE;IAC1B,oBAAoB,EAAE,CAAC,GAAG,EAAE;IAC5B,0BAA0B,EAAE,GAAG;IAC/B,8BAA8B,EAAE,GAAG;IACnC,0BAA0B,EAAE,0BAA0B;IACtD,gBAAgB,EAAE,GAAG,GAAG,IAAI,GAAG,IAAI;IACnC,wBAAwB,EAAE,EAAE;IAC5B,+BAA+B,EAAE,EAAE;IACnC,gCAAgC,EAAE,EAAE;IACpC,6BAA6B,EAAE,qBAAqB,CAAC,mBAAmB;IACxE,qBAAqB,EAAE,IAAI;IAE3B,2GAA2G;IAC3G,2GAA2G;IAC3G,iBAAiB;IACjB,wBAAwB,EAAE,KAAK;IAC/B,yGAAyG;IACzG,2GAA2G;IAC3G,2FAA2F;IAC3F,qBAAqB,EAAE,KAAK;IAC5B,oBAAoB,EAAE,KAAK;IAE3B,4GAA4G;IAC5G,+FAA+F;IAC/F,4GAA4G;IAC5G,+CAA+C;IAC/C,uBAAuB,EAAE;QACvB,YAAY;QACZ,WAAW;QACX,WAAW;QACX,cAAc;QACd,YAAY;QACZ,YAAY;KACJ;IAEV,GAAG,YAAY;CAChB,CAAA"}
|