@yalehwang/cloudpit 2.0.0 → 3.0.0

package/dist-server/server/modules/oauth/tests/access-token-scopes.test.js

@@ -8,10 +8,10 @@
  * temp directory. Covers:
  *   (a) any non-empty subset of the vocabulary issues 201, the response scopes
  *       equal the requested set with no duplicates, and the stored scopes match;
- *   (b) a mistyped scope, an unprefixed `read`, `cloudcli:admin`, an empty list
+ *   (b) a mistyped scope, an unprefixed `read`, `cloudpit:admin`, an empty list
  *       and a non-string element are all 400 with the same `INVALID_SCOPE` code
  *       and write no row;
- *   (c) an omitted scope list still defaults to `cloudcli:read`;
+ *   (c) an omitted scope list still defaults to `cloudpit:read`;
  *   (d) the service's own `issueToken` rejects the same illegal scopes and still
  *       issues a valid one — bypassing the route cannot mint a bad scope.
  */
@@ -25,53 +25,54 @@ import test from 'node:test';
 import express from 'express';
 import { accessTokensDb, closeConnection, getConnection, initializeDatabase } from '../../../modules/database/index.js';
 import { ACCESS_TOKEN_SCOPES, createAccessTokensService } from '../../../modules/oauth/index.js';
+import { CLOUDPIT_ACCESS_TOKEN_SCOPES } from '../../../shared/mcp-contract/index.js';
 import { createSettingsRouter, createSettingsService } from '../../../modules/settings/index.js';
 import { AppError } from '../../../shared/utils.js';
 const OWNER_ID = 1;
 /**
  * The eight issuable scopes written out literally, so a source change that adds
- * `cloudcli:admin` (or drops a scope) is caught here rather than silently
+ * `cloudpit:admin` (or drops a scope) is caught here rather than silently
  * changing what the criterion expects.
  */
 const VOCABULARY = [
-    'cloudcli:read',
-    'cloudcli:session:send',
-    'cloudcli:session:create',
-    'cloudcli:session:control',
-    'cloudcli:approve',
+    'cloudpit:read',
+    'cloudpit:session:send',
+    'cloudpit:session:create',
+    'cloudpit:session:control',
+    'cloudpit:approve',
     // gap-mcp-ui-open-session: appended last, so the five positional reads in the
     // gateway's write-tool table keep their index.
-    'cloudcli:navigate',
+    'cloudpit:navigate',
     // gap-ui-visible-context-extended-fields: appended after navigate for the same
     // reason — every positional read in the gateway keeps its index.
-    'cloudcli:selection',
+    'cloudpit:selection',
     // gap-mcp-cockpit-card-tools: the confirm scope for cockpit cards, appended
-    // LAST for the same positional reason. There is no `cloudcli:cockpit:read`:
-    // the three cockpit read tools use `cloudcli:read`.
-    'cloudcli:cockpit:act',
+    // LAST for the same positional reason. There is no `cloudpit:cockpit:read`:
+    // the three cockpit read tools use the canonical read scope.
+    'cloudpit:cockpit:act',
 ];
 /** A non-empty subset request and the unique scopes it must resolve to. */
 const SUBSET_REQUESTS = [
-    { requested: ['cloudcli:read'], expectedUnique: ['cloudcli:read'] },
-    { requested: ['cloudcli:session:send'], expectedUnique: ['cloudcli:session:send'] },
-    { requested: ['cloudcli:session:create'], expectedUnique: ['cloudcli:session:create'] },
-    { requested: ['cloudcli:session:control'], expectedUnique: ['cloudcli:session:control'] },
-    { requested: ['cloudcli:approve'], expectedUnique: ['cloudcli:approve'] },
-    { requested: ['cloudcli:read', 'cloudcli:approve'], expectedUnique: ['cloudcli:read', 'cloudcli:approve'] },
+    { requested: ['cloudpit:read'], expectedUnique: ['cloudpit:read'] },
+    { requested: ['cloudpit:session:send'], expectedUnique: ['cloudpit:session:send'] },
+    { requested: ['cloudpit:session:create'], expectedUnique: ['cloudpit:session:create'] },
+    { requested: ['cloudpit:session:control'], expectedUnique: ['cloudpit:session:control'] },
+    { requested: ['cloudpit:approve'], expectedUnique: ['cloudpit:approve'] },
+    { requested: ['cloudpit:read', 'cloudpit:approve'], expectedUnique: ['cloudpit:read', 'cloudpit:approve'] },
     { requested: [...VOCABULARY], expectedUnique: [...VOCABULARY] },
     {
         // First-occurrence order is preserved: read then approve.
-        requested: ['cloudcli:read', 'cloudcli:read', 'cloudcli:approve'],
-        expectedUnique: ['cloudcli:read', 'cloudcli:approve'],
+        requested: ['cloudpit:read', 'cloudpit:read', 'cloudpit:approve'],
+        expectedUnique: ['cloudpit:read', 'cloudpit:approve'],
     },
 ];
 /** The five illegal scope payloads that must all share one 400 code. */
 const ILLEGAL_SCOPES = [
-    ['cloudcli:reed'],
+    ['cloudpit:reed'],
     ['read'],
-    ['cloudcli:admin'],
+    ['cloudpit:admin'],
     [],
-    ['cloudcli:read', 42],
+    ['cloudpit:read', 42],
 ];
 /** POSTs a JSON body over `node:http` and returns the raw status/body/text. */
 function postJson(harness, pathname, payload) {
@@ -193,10 +194,13 @@ async function withSettingsServer(run) {
         await rm(tempDirectory, { recursive: true, force: true });
     }
 }
-test('(vocabulary) ACCESS_TOKEN_SCOPES is exactly the eight issuable scopes, admin absent', () => {
-    assert.deepEqual([...ACCESS_TOKEN_SCOPES], [...VOCABULARY]);
+test('(vocabulary) the eight issuable scopes are the cloudpit:* spellings, admin absent', () => {
+    assert.deepEqual([...CLOUDPIT_ACCESS_TOKEN_SCOPES], [...VOCABULARY]);
+    assert.equal(CLOUDPIT_ACCESS_TOKEN_SCOPES.includes('cloudpit:admin'), false);
+    // The canonical table is internal, still eight names, and never the request vocabulary.
+    assert.equal(ACCESS_TOKEN_SCOPES.length, 8);
     assert.equal(ACCESS_TOKEN_SCOPES.includes('cloudcli:admin'), false);
-    console.log(`(vocabulary) ACCESS_TOKEN_SCOPES = ${JSON.stringify(ACCESS_TOKEN_SCOPES)}`);
+    console.log(`(vocabulary) CLOUDPIT_ACCESS_TOKEN_SCOPES = ${JSON.stringify(CLOUDPIT_ACCESS_TOKEN_SCOPES)}`);
 });
 test('(a) any non-empty vocabulary subset issues 201 with set-equal, deduplicated, stored scopes', async () => {
     await withSettingsServer(async (harness) => {
@@ -247,7 +251,23 @@ test('(b) the five illegal scope payloads are all 400 INVALID_SCOPE and write no
         assert.equal(codes[0], 'INVALID_SCOPE');
     });
 });
-test('(c) an omitted scope list still defaults to cloudcli:read', async () => {
+test('(b2) the retired cloudcli:* spelling is a 400 INVALID_SCOPE and writes no row', async () => {
+    await withSettingsServer(async (harness) => {
+        for (const scopes of [['cloudcli:read'], ['cloudcli:session:send'], ['cloudcli:cockpit:act']]) {
+            const beforeCount = harness.countRows();
+            const response = await postJson(harness, '/api/settings/access-tokens', {
+                name: 'retired',
+                expiresInDays: 30,
+                scopes,
+            });
+            assert.equal(response.status, 400);
+            assert.equal(errorCode(response.body), 'INVALID_SCOPE');
+            assert.equal(harness.countRows(), beforeCount);
+            console.log(`(b2) scopes=${JSON.stringify(scopes)} status=${response.status} code=${errorCode(response.body)}`);
+        }
+    });
+});
+test('(c) an omitted scope list still defaults to cloudpit:read', async () => {
     await withSettingsServer(async (harness) => {
         const response = await postJson(harness, '/api/settings/access-tokens', {
             name: 'default-scope',
@@ -255,9 +275,9 @@ test('(c) an omitted scope list still defaults to cloudcli:read', async () => {
         });
         const scopes = responseScopes(response.body);
         assert.equal(response.status, 201);
-        assert.deepEqual(scopes, ['cloudcli:read']);
+        assert.deepEqual(scopes, ['cloudpit:read']);
         const stored = harness.storedScopes(response.body.token.id);
-        assert.deepEqual(stored, ['cloudcli:read']);
+        assert.deepEqual(stored, ['cloudpit:read']);
         console.log(`(c) status=${response.status} token.scopes=${JSON.stringify(scopes)} stored=${JSON.stringify(stored)}`);
     });
 });
@@ -265,8 +285,8 @@ test('(d) service-level issueToken rejects illegal scopes and still issues a val
     await withSettingsServer(async (harness) => {
         const beforeCount = harness.countRows();
         const illegal = [
-            { scopes: ['cloudcli:reed'] },
-            { scopes: ['cloudcli:admin'] },
+            { scopes: ['cloudpit:reed'] },
+            { scopes: ['cloudpit:admin'] },
             { scopes: [] },
         ];
         for (const { scopes } of illegal) {
@@ -275,10 +295,10 @@ test('(d) service-level issueToken rejects illegal scopes and still issues a val
             console.log(`(d) issueToken(${JSON.stringify(scopes)}) = ${JSON.stringify(result)} rows=${harness.countRows()}`);
         }
         assert.equal(harness.countRows(), beforeCount);
-        const valid = harness.tokens.issueToken({ userId: OWNER_ID, scopes: ['cloudcli:read'] });
+        const valid = harness.tokens.issueToken({ userId: OWNER_ID, scopes: ['cloudpit:read'] });
         assert.equal(valid.ok, true);
         assert.equal(harness.countRows(), beforeCount + 1);
-        console.log(`(d) issueToken(['cloudcli:read']) = ok=${valid.ok} id=${valid.ok ? valid.token.id : '-'} `
+        console.log(`(d) issueToken(['cloudpit:read']) = ok=${valid.ok} id=${valid.ok ? valid.token.id : '-'} `
             + `rows ${beforeCount}->${harness.countRows()}`);
     });
 });

package/dist-server/server/modules/oauth/tests/access-token-scopes.test.js.map

@@ -1 +1 @@
-{"version":3,"file":"access-token-scopes.test.js","sourceRoot":"","sources":["../../../../../server/modules/oauth/tests/access-token-scopes.test.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAEH,OAAO,MAAM,MAAM,oBAAoB,CAAC;AACxC,OAAO,EAAE,IAAI,EAAE,MAAM,aAAa,CAAC;AACnC,OAAO,EAAE,OAAO,EAAE,EAAE,EAAE,MAAM,kBAAkB,CAAC;AAC/C,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,OAAO,OAAO,MAAM,SAAS,CAAC;AAE9B,OAAO,EAAE,cAAc,EAAE,eAAe,EAAE,aAAa,EAAE,kBAAkB,EAAE,MAAM,6BAA6B,CAAC;AACjH,OAAO,EAAE,mBAAmB,EAAE,yBAAyB,EAAE,MAAM,0BAA0B,CAAC;AAE1F,OAAO,EAAE,oBAAoB,EAAE,qBAAqB,EAAE,MAAM,6BAA6B,CAAC;AAC1F,OAAO,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAC;AAE7C,MAAM,QAAQ,GAAG,CAAC,CAAC;AAEnB;;;;GAIG;AACH,MAAM,UAAU,GAAG;IACjB,eAAe;IACf,uBAAuB;IACvB,yBAAyB;IACzB,0BAA0B;IAC1B,kBAAkB;IAClB,8EAA8E;IAC9E,+CAA+C;IAC/C,mBAAmB;IACnB,+EAA+E;IAC/E,iEAAiE;IACjE,oBAAoB;IACpB,4EAA4E;IAC5E,4EAA4E;IAC5E,oDAAoD;IACpD,sBAAsB;CACd,CAAC;AAEX,2EAA2E;AAC3E,MAAM,eAAe,GAAwD;IAC3E,EAAE,SAAS,EAAE,CAAC,eAAe,CAAC,EAAE,cAAc,EAAE,CAAC,eAAe,CAAC,EAAE;IACnE,EAAE,SAAS,EAAE,CAAC,uBAAuB,CAAC,EAAE,cAAc,EAAE,CAAC,uBAAuB,CAAC,EAAE;IACnF,EAAE,SAAS,EAAE,CAAC,yBAAyB,CAAC,EAAE,cAAc,EAAE,CAAC,yBAAyB,CAAC,EAAE;IACvF,EAAE,SAAS,EAAE,CAAC,0BAA0B,CAAC,EAAE,cAAc,EAAE,CAAC,0BAA0B,CAAC,EAAE;IACzF,EAAE,SAAS,EAAE,CAAC,kBAAkB,CAAC,EAAE,cAAc,EAAE,CAAC,kBAAkB,CAAC,EAAE;IACzE,EAAE,SAAS,EAAE,CAAC,eAAe,EAAE,kBAAkB,CAAC,EAAE,cAAc,EAAE,CAAC,eAAe,EAAE,kBAAkB,CAAC,EAAE;IAC3G,EAAE,SAAS,EAAE,CAAC,GAAG,UAAU,CAAC,EAAE,cAAc,EAAE,CAAC,GAAG,UAAU,CAAC,EAAE;IAC/D;QACE,0DAA0D;QAC1D,SAAS,EAAE,CAAC,eAAe,EAAE,eAAe,EAAE,kBAAkB,CAAC;QACjE,cAAc,EAAE,CAAC,eAAe,EAAE,kBAAkB,CAAC;KACtD;CACF,CAAC;AAEF,wEAAwE;AACxE,MAAM,cAAc,GAAc;IAChC,CAAC,eAAe,CAAC;IACjB,CAAC,MAAM,CAAC;IACR,CAAC,gBAAgB,CAAC;IAClB,EAAE;IACF,CAAC,eAAe,EAAE,EAAE,CAAC;CACtB,CAAC;AAiBF,+EAA+E;AAC/E,SAAS,QAAQ,CAAC,OAAgB,EAAE,QAAgB,EAAE,OAAgB;IACpE,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC,CAAC;IAC1D,OAAO,IAAI,OAAO,CAAe,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACnD,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAC1B;YACE,IAAI,EAAE,WAAW;YACjB,IAAI,EAAE,OAAO,CAAC,IAAI;YAClB,IAAI,EAAE,QAAQ;YACd,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,gBAAgB,EAAE,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE;SACvF,EACD,CAAC,QAAQ,EAAE,EAAE;YACX,MAAM,MAAM,GAAa,EAAE,CAAC;YAC5B,QAAQ,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;YAC3D,QAAQ,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE;gBACtB,MAAM,IAAI,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;gBACpD,MAAM,IAAI,GAAG,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAE,IAAI,CAAC,KAAK,CAAC,IAAI,CAA6B,CAAC,CAAC,CAAC,EAAE,CAAC;gBAClF,OAAO,CAAC,EAAE,MAAM,EAAE,QAAQ,CAAC,UAAU,IAAI,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;YAC5D,CAAC,CAAC,CAAC;QACL,CAAC,CACF,CAAC;QACF,OAAO,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QAC5B,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QACpB,OAAO,CAAC,GAAG,EAAE,CAAC;IAChB,CAAC,CAAC,CAAC;AACL,CAAC;AAED,+DAA+D;AAC/D,SAAS,cAAc,CAAC,IAA6B;IACnD,MAAM,KAAK,GAAG,IAAI,CAAC,KAAqD,CAAC;IACzE,MAAM,CAAC,QAAQ,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC;IAClC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,KAAM,CAAC,MAAM,CAAC,EAAE,IAAI,CAAC,CAAC;IACjD,OAAO,KAAM,CAAC,MAAM,CAAC;AACvB,CAAC;AAED,uDAAuD;AACvD,SAAS,SAAS,CAAC,IAA6B;IAC9C,OAAQ,IAAI,CAAC,KAAuC,EAAE,IAAI,CAAC;AAC7D,CAAC;AAED;;;GAGG;AACH,KAAK,UAAU,kBAAkB,CAAC,GAAwC;IACxE,MAAM,oBAAoB,GAAG,OAAO,CAAC,GAAG,CAAC,aAAa,CAAC;IACvD,MAAM,aAAa,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,EAAE,sBAAsB,CAAC,CAAC,CAAC;IACpF,MAAM,YAAY,GAAG,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,SAAS,CAAC,CAAC;IAEzD,eAAe,EAAE,CAAC;IAClB,OAAO,CAAC,GAAG,CAAC,aAAa,GAAG,YAAY,CAAC;IACzC,MAAM,kBAAkB,EAAE,CAAC;IAE3B,MAAM,UAAU,GAAG,aAAa,EAAE,CAAC;IACnC,UAAU;SACP,OAAO,CAAC,kEAAkE,CAAC;SAC3E,GAAG,CAAC,QAAQ,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC;IAElC,MAAM,KAAK,GAAG,EAAE,OAAO,EAAE,IAAI,IAAI,CAAC,0BAA0B,CAAC,EAAE,CAAC;IAChE,MAAM,MAAM,GAAG,yBAAyB,CAAC,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC,EAAE,CAAC,CAAC;IAE3F,yFAAyF;IACzF,MAAM,OAAO,GAAG,qBAAqB,CAAC;QACpC,WAAW,EAAE,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,KAAK,EAAE;QAC7F,aAAa,EAAE;YACb,cAAc,EAAE,GAAG,EAAE,CAAC,SAAS;YAC/B,iBAAiB,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,CAAC;YAC7B,kBAAkB,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,CAAC;YAC9B,UAAU,EAAE,GAAG,EAAE,CAAC,SAAS;SAC5B;QACD,iBAAiB,EAAE,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,SAAS,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,SAAS,EAAE;QACrE,iBAAiB,EAAE,GAAG,EAAE,CAAC,IAAI;QAC7B,YAAY,EAAE;YACZ,IAAI,EAAE,CAAC,MAAM,EAAE,EAAE,CAAC,cAAc,CAAC,UAAU,CAAC,MAAM,CAAC;YACnD,QAAQ,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC,cAAc,CAAC,QAAQ,CAAC,OAAO,CAAC;YACvD,KAAK,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,MAAM,CAAC,UAAU,CAAC,KAAK,CAAC;YAC1C,MAAM,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC,MAAM,CAAC,WAAW,CAAC,OAAO,CAAC;SACjD;KACF,CAAC,CAAC;IACH,MAAM,MAAM,GAAG,oBAAoB,CAAC,OAAO,CAAC,CAAC;IAE7C,IAAI,aAAa,GAAG,QAAQ,CAAC;IAC7B,MAAM,GAAG,GAAG,OAAO,EAAE,CAAC;IACtB,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC;IACxB,GAAG,CAAC,GAAG,CACL,eAAe,EACf,CAAC,GAAoB,EAAE,IAAsB,EAAE,IAA0B,EAAE,EAAE;QAC1E,GAAmD,CAAC,IAAI,GAAG,EAAE,EAAE,EAAE,aAAa,EAAE,CAAC;QAClF,IAAI,EAAE,CAAC;IACT,CAAC,EACD,MAAM,CACP,CAAC;IACF,kEAAkE;IAClE,GAAG,CAAC,GAAG,CAAC,CAAC,KAAc,EAAE,IAAqB,EAAE,GAAqB,EAAE,KAA2B,EAAE,EAAE;QACpG,IAAI,KAAK,YAAY,QAAQ,EAAE,CAAC;YAC9B,OAAO,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC;gBACvC,OAAO,EAAE,KAAK;gBACd,KAAK,EAAE,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE;aAC5E,CAAC,CAAC;QACL,CAAC;QACD,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;YAC1B,OAAO,EAAE,KAAK;YACd,KAAK,EAAE,EAAE,IAAI,EAAE,gBAAgB,EAAE,OAAO,EAAE,uBAAuB,EAAE;SACpE,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,MAAM,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC,CAAC,EAAE,WAAW,CAAC,CAAC;IAC1C,MAAM,IAAI,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;IAChC,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,EAAiB,CAAC;IAEhD,IAAI,CAAC;QACH,MAAM,GAAG,CAAC;YACR,IAAI,EAAE,OAAO,CAAC,IAAI;YAClB,MAAM;YACN,SAAS,EAAE,GAAG,EAAE,CACb,UAAU,CAAC,OAAO,CAAC,6CAA6C,CAAC,CAAC,GAAG,EAAwB,CAAC,KAAK;YACtG,YAAY,EAAE,CAAC,OAAO,EAAE,EAAE;gBACxB,MAAM,GAAG,GAAG,cAAc,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;gBAC7C,IAAI,GAAG,KAAK,SAAS;oBAAE,OAAO,IAAI,CAAC;gBACnC,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,CAAa,CAAC;YAC5C,CAAC;YACD,OAAO,EAAE,CAAC,MAAM,EAAE,EAAE,GAAG,aAAa,GAAG,MAAM,CAAC,CAAC,CAAC;SACjD,CAAC,CAAC;IACL,CAAC;YAAS,CAAC;QACT,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;QACpE,eAAe,EAAE,CAAC;QAClB,IAAI,oBAAoB,KAAK,SAAS,EAAE,CAAC;YACvC,OAAO,OAAO,CAAC,GAAG,CAAC,aAAa,CAAC;QACnC,CAAC;aAAM,CAAC;YACN,OAAO,CAAC,GAAG,CAAC,aAAa,GAAG,oBAAoB,CAAC;QACnD,CAAC;QACD,MAAM,EAAE,CAAC,aAAa,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IAC5D,CAAC;AACH,CAAC;AAED,IAAI,CAAC,qFAAqF,EAAE,GAAG,EAAE;IAC/F,MAAM,CAAC,SAAS,CAAC,CAAC,GAAG,mBAAmB,CAAC,EAAE,CAAC,GAAG,UAAU,CAAC,CAAC,CAAC;IAC5D,MAAM,CAAC,KAAK,CAAE,mBAAyC,CAAC,QAAQ,CAAC,gBAAgB,CAAC,EAAE,KAAK,CAAC,CAAC;IAC3F,OAAO,CAAC,GAAG,CAAC,sCAAsC,IAAI,CAAC,SAAS,CAAC,mBAAmB,CAAC,EAAE,CAAC,CAAC;AAC3F,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,4FAA4F,EAAE,KAAK,IAAI,EAAE;IAC5G,MAAM,kBAAkB,CAAC,KAAK,EAAE,OAAO,EAAE,EAAE;QACzC,KAAK,MAAM,EAAE,SAAS,EAAE,cAAc,EAAE,IAAI,eAAe,EAAE,CAAC;YAC5D,MAAM,QAAQ,GAAG,MAAM,QAAQ,CAAC,OAAO,EAAE,6BAA6B,EAAE;gBACtE,IAAI,EAAE,UAAU,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE;gBACrC,aAAa,EAAE,EAAE;gBACjB,MAAM,EAAE,SAAS;aAClB,CAAC,CAAC;YACH,MAAM,MAAM,GAAG,cAAc,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;YAC7C,MAAM,KAAK,GAAG,QAAQ,CAAC,IAAI,CAAC,KAAuB,CAAC;YAEpD,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;YACnC,kDAAkD;YAClD,MAAM,CAAC,SAAS,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC;YACzC,MAAM,CAAC,KAAK,CAAC,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC;YAClD,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,IAAI,GAAG,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,CAAC;YACrD,uDAAuD;YACvD,MAAM,CAAC,SAAS,CAAC,CAAC,GAAG,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,GAAG,IAAI,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;YAErE,MAAM,MAAM,GAAG,OAAO,CAAC,YAAY,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;YAC9C,MAAM,CAAC,SAAS,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;YAEjC,OAAO,CAAC,GAAG,CACT,eAAe,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,WAAW,QAAQ,CAAC,MAAM,GAAG;kBACnE,YAAY,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,WAAW,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,CACxE,CAAC;QACJ,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,gFAAgF,EAAE,KAAK,IAAI,EAAE;IAChG,MAAM,kBAAkB,CAAC,KAAK,EAAE,OAAO,EAAE,EAAE;QACzC,MAAM,KAAK,GAA2B,EAAE,CAAC;QACzC,KAAK,MAAM,MAAM,IAAI,cAAc,EAAE,CAAC;YACpC,MAAM,WAAW,GAAG,OAAO,CAAC,SAAS,EAAE,CAAC;YACxC,MAAM,QAAQ,GAAG,MAAM,QAAQ,CAAC,OAAO,EAAE,6BAA6B,EAAE;gBACtE,IAAI,EAAE,SAAS;gBACf,aAAa,EAAE,EAAE;gBACjB,MAAM;aACP,CAAC,CAAC;YACH,MAAM,UAAU,GAAG,OAAO,CAAC,SAAS,EAAE,CAAC;YACvC,MAAM,IAAI,GAAG,SAAS,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;YACtC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAEjB,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;YACnC,MAAM,CAAC,KAAK,CAAC,IAAI,EAAE,eAAe,CAAC,CAAC;YACpC,MAAM,CAAC,KAAK,CAAC,UAAU,EAAE,WAAW,CAAC,CAAC;YAEtC,OAAO,CAAC,GAAG,CACT,cAAc,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,WAAW,QAAQ,CAAC,MAAM,SAAS,IAAI,GAAG;kBAC5E,QAAQ,WAAW,KAAK,UAAU,SAAS,QAAQ,CAAC,IAAI,EAAE,CAC7D,CAAC;QACJ,CAAC;QACD,gEAAgE;QAChE,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;QAC9B,MAAM,CAAC,KAAK,CAAC,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;QACrC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,eAAe,CAAC,CAAC;IAC1C,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,2DAA2D,EAAE,KAAK,IAAI,EAAE;IAC3E,MAAM,kBAAkB,CAAC,KAAK,EAAE,OAAO,EAAE,EAAE;QACzC,MAAM,QAAQ,GAAG,MAAM,QAAQ,CAAC,OAAO,EAAE,6BAA6B,EAAE;YACtE,IAAI,EAAE,eAAe;YACrB,aAAa,EAAE,EAAE;SAClB,CAAC,CAAC;QACH,MAAM,MAAM,GAAG,cAAc,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;QAC7C,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;QACnC,MAAM,CAAC,SAAS,CAAC,MAAM,EAAE,CAAC,eAAe,CAAC,CAAC,CAAC;QAE5C,MAAM,MAAM,GAAG,OAAO,CAAC,YAAY,CAAE,QAAQ,CAAC,IAAI,CAAC,KAAwB,CAAC,EAAE,CAAC,CAAC;QAChF,MAAM,CAAC,SAAS,CAAC,MAAM,EAAE,CAAC,eAAe,CAAC,CAAC,CAAC;QAE5C,OAAO,CAAC,GAAG,CAAC,cAAc,QAAQ,CAAC,MAAM,iBAAiB,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,WAAW,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IACvH,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,kFAAkF,EAAE,KAAK,IAAI,EAAE;IAClG,MAAM,kBAAkB,CAAC,KAAK,EAAE,OAAO,EAAE,EAAE;QACzC,MAAM,WAAW,GAAG,OAAO,CAAC,SAAS,EAAE,CAAC;QAExC,MAAM,OAAO,GAAG;YACd,EAAE,MAAM,EAAE,CAAC,eAAe,CAAC,EAAE;YAC7B,EAAE,MAAM,EAAE,CAAC,gBAAgB,CAAC,EAAE;YAC9B,EAAE,MAAM,EAAE,EAAE,EAAE;SACf,CAAC;QACF,KAAK,MAAM,EAAE,MAAM,EAAE,IAAI,OAAO,EAAE,CAAC;YACjC,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,UAAU,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC,CAAC;YACvE,MAAM,CAAC,SAAS,CAAC,MAAM,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,eAAe,EAAE,CAAC,CAAC;YACjE,OAAO,CAAC,GAAG,CAAC,kBAAkB,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,OAAO,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,SAAS,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC;QACnH,CAAC;QACD,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,WAAW,CAAC,CAAC;QAE/C,MAAM,KAAK,GAAG,OAAO,CAAC,MAAM,CAAC,UAAU,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC,eAAe,CAAC,EAAE,CAAC,CAAC;QACzF,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;QAC7B,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,WAAW,GAAG,CAAC,CAAC,CAAC;QACnD,OAAO,CAAC,GAAG,CACT,0CAA0C,KAAK,CAAC,EAAE,OAAO,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,GAAG;cACzF,QAAQ,WAAW,KAAK,OAAO,CAAC,SAAS,EAAE,EAAE,CAChD,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}
+{"version":3,"file":"access-token-scopes.test.js","sourceRoot":"","sources":["../../../../../server/modules/oauth/tests/access-token-scopes.test.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAEH,OAAO,MAAM,MAAM,oBAAoB,CAAC;AACxC,OAAO,EAAE,IAAI,EAAE,MAAM,aAAa,CAAC;AACnC,OAAO,EAAE,OAAO,EAAE,EAAE,EAAE,MAAM,kBAAkB,CAAC;AAC/C,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,OAAO,OAAO,MAAM,SAAS,CAAC;AAE9B,OAAO,EAAE,cAAc,EAAE,eAAe,EAAE,aAAa,EAAE,kBAAkB,EAAE,MAAM,6BAA6B,CAAC;AACjH,OAAO,EAAE,mBAAmB,EAAE,yBAAyB,EAAE,MAAM,0BAA0B,CAAC;AAC1F,OAAO,EAAE,4BAA4B,EAAE,MAAM,gCAAgC,CAAC;AAE9E,OAAO,EAAE,oBAAoB,EAAE,qBAAqB,EAAE,MAAM,6BAA6B,CAAC;AAC1F,OAAO,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAC;AAE7C,MAAM,QAAQ,GAAG,CAAC,CAAC;AAEnB;;;;GAIG;AACH,MAAM,UAAU,GAAG;IACjB,eAAe;IACf,uBAAuB;IACvB,yBAAyB;IACzB,0BAA0B;IAC1B,kBAAkB;IAClB,8EAA8E;IAC9E,+CAA+C;IAC/C,mBAAmB;IACnB,+EAA+E;IAC/E,iEAAiE;IACjE,oBAAoB;IACpB,4EAA4E;IAC5E,4EAA4E;IAC5E,6DAA6D;IAC7D,sBAAsB;CACd,CAAC;AAEX,2EAA2E;AAC3E,MAAM,eAAe,GAAwD;IAC3E,EAAE,SAAS,EAAE,CAAC,eAAe,CAAC,EAAE,cAAc,EAAE,CAAC,eAAe,CAAC,EAAE;IACnE,EAAE,SAAS,EAAE,CAAC,uBAAuB,CAAC,EAAE,cAAc,EAAE,CAAC,uBAAuB,CAAC,EAAE;IACnF,EAAE,SAAS,EAAE,CAAC,yBAAyB,CAAC,EAAE,cAAc,EAAE,CAAC,yBAAyB,CAAC,EAAE;IACvF,EAAE,SAAS,EAAE,CAAC,0BAA0B,CAAC,EAAE,cAAc,EAAE,CAAC,0BAA0B,CAAC,EAAE;IACzF,EAAE,SAAS,EAAE,CAAC,kBAAkB,CAAC,EAAE,cAAc,EAAE,CAAC,kBAAkB,CAAC,EAAE;IACzE,EAAE,SAAS,EAAE,CAAC,eAAe,EAAE,kBAAkB,CAAC,EAAE,cAAc,EAAE,CAAC,eAAe,EAAE,kBAAkB,CAAC,EAAE;IAC3G,EAAE,SAAS,EAAE,CAAC,GAAG,UAAU,CAAC,EAAE,cAAc,EAAE,CAAC,GAAG,UAAU,CAAC,EAAE;IAC/D;QACE,0DAA0D;QAC1D,SAAS,EAAE,CAAC,eAAe,EAAE,eAAe,EAAE,kBAAkB,CAAC;QACjE,cAAc,EAAE,CAAC,eAAe,EAAE,kBAAkB,CAAC;KACtD;CACF,CAAC;AAEF,wEAAwE;AACxE,MAAM,cAAc,GAAc;IAChC,CAAC,eAAe,CAAC;IACjB,CAAC,MAAM,CAAC;IACR,CAAC,gBAAgB,CAAC;IAClB,EAAE;IACF,CAAC,eAAe,EAAE,EAAE,CAAC;CACtB,CAAC;AAiBF,+EAA+E;AAC/E,SAAS,QAAQ,CAAC,OAAgB,EAAE,QAAgB,EAAE,OAAgB;IACpE,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC,CAAC;IAC1D,OAAO,IAAI,OAAO,CAAe,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACnD,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAC1B;YACE,IAAI,EAAE,WAAW;YACjB,IAAI,EAAE,OAAO,CAAC,IAAI;YAClB,IAAI,EAAE,QAAQ;YACd,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,gBAAgB,EAAE,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE;SACvF,EACD,CAAC,QAAQ,EAAE,EAAE;YACX,MAAM,MAAM,GAAa,EAAE,CAAC;YAC5B,QAAQ,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;YAC3D,QAAQ,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE;gBACtB,MAAM,IAAI,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;gBACpD,MAAM,IAAI,GAAG,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAE,IAAI,CAAC,KAAK,CAAC,IAAI,CAA6B,CAAC,CAAC,CAAC,EAAE,CAAC;gBAClF,OAAO,CAAC,EAAE,MAAM,EAAE,QAAQ,CAAC,UAAU,IAAI,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;YAC5D,CAAC,CAAC,CAAC;QACL,CAAC,CACF,CAAC;QACF,OAAO,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QAC5B,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QACpB,OAAO,CAAC,GAAG,EAAE,CAAC;IAChB,CAAC,CAAC,CAAC;AACL,CAAC;AAED,+DAA+D;AAC/D,SAAS,cAAc,CAAC,IAA6B;IACnD,MAAM,KAAK,GAAG,IAAI,CAAC,KAAqD,CAAC;IACzE,MAAM,CAAC,QAAQ,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC;IAClC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,KAAM,CAAC,MAAM,CAAC,EAAE,IAAI,CAAC,CAAC;IACjD,OAAO,KAAM,CAAC,MAAM,CAAC;AACvB,CAAC;AAED,uDAAuD;AACvD,SAAS,SAAS,CAAC,IAA6B;IAC9C,OAAQ,IAAI,CAAC,KAAuC,EAAE,IAAI,CAAC;AAC7D,CAAC;AAED;;;GAGG;AACH,KAAK,UAAU,kBAAkB,CAAC,GAAwC;IACxE,MAAM,oBAAoB,GAAG,OAAO,CAAC,GAAG,CAAC,aAAa,CAAC;IACvD,MAAM,aAAa,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,EAAE,sBAAsB,CAAC,CAAC,CAAC;IACpF,MAAM,YAAY,GAAG,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,SAAS,CAAC,CAAC;IAEzD,eAAe,EAAE,CAAC;IAClB,OAAO,CAAC,GAAG,CAAC,aAAa,GAAG,YAAY,CAAC;IACzC,MAAM,kBAAkB,EAAE,CAAC;IAE3B,MAAM,UAAU,GAAG,aAAa,EAAE,CAAC;IACnC,UAAU;SACP,OAAO,CAAC,kEAAkE,CAAC;SAC3E,GAAG,CAAC,QAAQ,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC;IAElC,MAAM,KAAK,GAAG,EAAE,OAAO,EAAE,IAAI,IAAI,CAAC,0BAA0B,CAAC,EAAE,CAAC;IAChE,MAAM,MAAM,GAAG,yBAAyB,CAAC,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC,EAAE,CAAC,CAAC;IAE3F,yFAAyF;IACzF,MAAM,OAAO,GAAG,qBAAqB,CAAC;QACpC,WAAW,EAAE,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,KAAK,EAAE;QAC7F,aAAa,EAAE;YACb,cAAc,EAAE,GAAG,EAAE,CAAC,SAAS;YAC/B,iBAAiB,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,CAAC;YAC7B,kBAAkB,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,CAAC;YAC9B,UAAU,EAAE,GAAG,EAAE,CAAC,SAAS;SAC5B;QACD,iBAAiB,EAAE,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,SAAS,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,SAAS,EAAE;QACrE,iBAAiB,EAAE,GAAG,EAAE,CAAC,IAAI;QAC7B,YAAY,EAAE;YACZ,IAAI,EAAE,CAAC,MAAM,EAAE,EAAE,CAAC,cAAc,CAAC,UAAU,CAAC,MAAM,CAAC;YACnD,QAAQ,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC,cAAc,CAAC,QAAQ,CAAC,OAAO,CAAC;YACvD,KAAK,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,MAAM,CAAC,UAAU,CAAC,KAAK,CAAC;YAC1C,MAAM,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC,MAAM,CAAC,WAAW,CAAC,OAAO,CAAC;SACjD;KACF,CAAC,CAAC;IACH,MAAM,MAAM,GAAG,oBAAoB,CAAC,OAAO,CAAC,CAAC;IAE7C,IAAI,aAAa,GAAG,QAAQ,CAAC;IAC7B,MAAM,GAAG,GAAG,OAAO,EAAE,CAAC;IACtB,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC;IACxB,GAAG,CAAC,GAAG,CACL,eAAe,EACf,CAAC,GAAoB,EAAE,IAAsB,EAAE,IAA0B,EAAE,EAAE;QAC1E,GAAmD,CAAC,IAAI,GAAG,EAAE,EAAE,EAAE,aAAa,EAAE,CAAC;QAClF,IAAI,EAAE,CAAC;IACT,CAAC,EACD,MAAM,CACP,CAAC;IACF,kEAAkE;IAClE,GAAG,CAAC,GAAG,CAAC,CAAC,KAAc,EAAE,IAAqB,EAAE,GAAqB,EAAE,KAA2B,EAAE,EAAE;QACpG,IAAI,KAAK,YAAY,QAAQ,EAAE,CAAC;YAC9B,OAAO,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC;gBACvC,OAAO,EAAE,KAAK;gBACd,KAAK,EAAE,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE;aAC5E,CAAC,CAAC;QACL,CAAC;QACD,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;YAC1B,OAAO,EAAE,KAAK;YACd,KAAK,EAAE,EAAE,IAAI,EAAE,gBAAgB,EAAE,OAAO,EAAE,uBAAuB,EAAE;SACpE,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,MAAM,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC,CAAC,EAAE,WAAW,CAAC,CAAC;IAC1C,MAAM,IAAI,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;IAChC,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,EAAiB,CAAC;IAEhD,IAAI,CAAC;QACH,MAAM,GAAG,CAAC;YACR,IAAI,EAAE,OAAO,CAAC,IAAI;YAClB,MAAM;YACN,SAAS,EAAE,GAAG,EAAE,CACb,UAAU,CAAC,OAAO,CAAC,6CAA6C,CAAC,CAAC,GAAG,EAAwB,CAAC,KAAK;YACtG,YAAY,EAAE,CAAC,OAAO,EAAE,EAAE;gBACxB,MAAM,GAAG,GAAG,cAAc,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;gBAC7C,IAAI,GAAG,KAAK,SAAS;oBAAE,OAAO,IAAI,CAAC;gBACnC,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,CAAa,CAAC;YAC5C,CAAC;YACD,OAAO,EAAE,CAAC,MAAM,EAAE,EAAE,GAAG,aAAa,GAAG,MAAM,CAAC,CAAC,CAAC;SACjD,CAAC,CAAC;IACL,CAAC;YAAS,CAAC;QACT,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;QACpE,eAAe,EAAE,CAAC;QAClB,IAAI,oBAAoB,KAAK,SAAS,EAAE,CAAC;YACvC,OAAO,OAAO,CAAC,GAAG,CAAC,aAAa,CAAC;QACnC,CAAC;aAAM,CAAC;YACN,OAAO,CAAC,GAAG,CAAC,aAAa,GAAG,oBAAoB,CAAC;QACnD,CAAC;QACD,MAAM,EAAE,CAAC,aAAa,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IAC5D,CAAC;AACH,CAAC;AAED,IAAI,CAAC,mFAAmF,EAAE,GAAG,EAAE;IAC7F,MAAM,CAAC,SAAS,CAAC,CAAC,GAAG,4BAA4B,CAAC,EAAE,CAAC,GAAG,UAAU,CAAC,CAAC,CAAC;IACrE,MAAM,CAAC,KAAK,CAAE,4BAAkD,CAAC,QAAQ,CAAC,gBAAgB,CAAC,EAAE,KAAK,CAAC,CAAC;IACpG,wFAAwF;IACxF,MAAM,CAAC,KAAK,CAAC,mBAAmB,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;IAC5C,MAAM,CAAC,KAAK,CAAE,mBAAyC,CAAC,QAAQ,CAAC,gBAAgB,CAAC,EAAE,KAAK,CAAC,CAAC;IAC3F,OAAO,CAAC,GAAG,CAAC,+CAA+C,IAAI,CAAC,SAAS,CAAC,4BAA4B,CAAC,EAAE,CAAC,CAAC;AAC7G,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,4FAA4F,EAAE,KAAK,IAAI,EAAE;IAC5G,MAAM,kBAAkB,CAAC,KAAK,EAAE,OAAO,EAAE,EAAE;QACzC,KAAK,MAAM,EAAE,SAAS,EAAE,cAAc,EAAE,IAAI,eAAe,EAAE,CAAC;YAC5D,MAAM,QAAQ,GAAG,MAAM,QAAQ,CAAC,OAAO,EAAE,6BAA6B,EAAE;gBACtE,IAAI,EAAE,UAAU,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE;gBACrC,aAAa,EAAE,EAAE;gBACjB,MAAM,EAAE,SAAS;aAClB,CAAC,CAAC;YACH,MAAM,MAAM,GAAG,cAAc,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;YAC7C,MAAM,KAAK,GAAG,QAAQ,CAAC,IAAI,CAAC,KAAuB,CAAC;YAEpD,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;YACnC,kDAAkD;YAClD,MAAM,CAAC,SAAS,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC;YACzC,MAAM,CAAC,KAAK,CAAC,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC;YAClD,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,IAAI,GAAG,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,CAAC;YACrD,uDAAuD;YACvD,MAAM,CAAC,SAAS,CAAC,CAAC,GAAG,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,GAAG,IAAI,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;YAErE,MAAM,MAAM,GAAG,OAAO,CAAC,YAAY,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;YAC9C,MAAM,CAAC,SAAS,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;YAEjC,OAAO,CAAC,GAAG,CACT,eAAe,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,WAAW,QAAQ,CAAC,MAAM,GAAG;kBACnE,YAAY,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,WAAW,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,CACxE,CAAC;QACJ,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,gFAAgF,EAAE,KAAK,IAAI,EAAE;IAChG,MAAM,kBAAkB,CAAC,KAAK,EAAE,OAAO,EAAE,EAAE;QACzC,MAAM,KAAK,GAA2B,EAAE,CAAC;QACzC,KAAK,MAAM,MAAM,IAAI,cAAc,EAAE,CAAC;YACpC,MAAM,WAAW,GAAG,OAAO,CAAC,SAAS,EAAE,CAAC;YACxC,MAAM,QAAQ,GAAG,MAAM,QAAQ,CAAC,OAAO,EAAE,6BAA6B,EAAE;gBACtE,IAAI,EAAE,SAAS;gBACf,aAAa,EAAE,EAAE;gBACjB,MAAM;aACP,CAAC,CAAC;YACH,MAAM,UAAU,GAAG,OAAO,CAAC,SAAS,EAAE,CAAC;YACvC,MAAM,IAAI,GAAG,SAAS,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;YACtC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAEjB,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;YACnC,MAAM,CAAC,KAAK,CAAC,IAAI,EAAE,eAAe,CAAC,CAAC;YACpC,MAAM,CAAC,KAAK,CAAC,UAAU,EAAE,WAAW,CAAC,CAAC;YAEtC,OAAO,CAAC,GAAG,CACT,cAAc,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,WAAW,QAAQ,CAAC,MAAM,SAAS,IAAI,GAAG;kBAC5E,QAAQ,WAAW,KAAK,UAAU,SAAS,QAAQ,CAAC,IAAI,EAAE,CAC7D,CAAC;QACJ,CAAC;QACD,gEAAgE;QAChE,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;QAC9B,MAAM,CAAC,KAAK,CAAC,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;QACrC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,eAAe,CAAC,CAAC;IAC1C,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,+EAA+E,EAAE,KAAK,IAAI,EAAE;IAC/F,MAAM,kBAAkB,CAAC,KAAK,EAAE,OAAO,EAAE,EAAE;QACzC,KAAK,MAAM,MAAM,IAAI,CAAC,CAAC,eAAe,CAAC,EAAE,CAAC,uBAAuB,CAAC,EAAE,CAAC,sBAAsB,CAAC,CAAC,EAAE,CAAC;YAC9F,MAAM,WAAW,GAAG,OAAO,CAAC,SAAS,EAAE,CAAC;YACxC,MAAM,QAAQ,GAAG,MAAM,QAAQ,CAAC,OAAO,EAAE,6BAA6B,EAAE;gBACtE,IAAI,EAAE,SAAS;gBACf,aAAa,EAAE,EAAE;gBACjB,MAAM;aACP,CAAC,CAAC;YACH,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;YACnC,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,eAAe,CAAC,CAAC;YACxD,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,WAAW,CAAC,CAAC;YAC/C,OAAO,CAAC,GAAG,CAAC,eAAe,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,WAAW,QAAQ,CAAC,MAAM,SAAS,SAAS,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAClH,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,2DAA2D,EAAE,KAAK,IAAI,EAAE;IAC3E,MAAM,kBAAkB,CAAC,KAAK,EAAE,OAAO,EAAE,EAAE;QACzC,MAAM,QAAQ,GAAG,MAAM,QAAQ,CAAC,OAAO,EAAE,6BAA6B,EAAE;YACtE,IAAI,EAAE,eAAe;YACrB,aAAa,EAAE,EAAE;SAClB,CAAC,CAAC;QACH,MAAM,MAAM,GAAG,cAAc,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;QAC7C,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;QACnC,MAAM,CAAC,SAAS,CAAC,MAAM,EAAE,CAAC,eAAe,CAAC,CAAC,CAAC;QAE5C,MAAM,MAAM,GAAG,OAAO,CAAC,YAAY,CAAE,QAAQ,CAAC,IAAI,CAAC,KAAwB,CAAC,EAAE,CAAC,CAAC;QAChF,MAAM,CAAC,SAAS,CAAC,MAAM,EAAE,CAAC,eAAe,CAAC,CAAC,CAAC;QAE5C,OAAO,CAAC,GAAG,CAAC,cAAc,QAAQ,CAAC,MAAM,iBAAiB,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,WAAW,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IACvH,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,kFAAkF,EAAE,KAAK,IAAI,EAAE;IAClG,MAAM,kBAAkB,CAAC,KAAK,EAAE,OAAO,EAAE,EAAE;QACzC,MAAM,WAAW,GAAG,OAAO,CAAC,SAAS,EAAE,CAAC;QAExC,MAAM,OAAO,GAAG;YACd,EAAE,MAAM,EAAE,CAAC,eAAe,CAAC,EAAE;YAC7B,EAAE,MAAM,EAAE,CAAC,gBAAgB,CAAC,EAAE;YAC9B,EAAE,MAAM,EAAE,EAAE,EAAE;SACf,CAAC;QACF,KAAK,MAAM,EAAE,MAAM,EAAE,IAAI,OAAO,EAAE,CAAC;YACjC,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,UAAU,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC,CAAC;YACvE,MAAM,CAAC,SAAS,CAAC,MAAM,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,eAAe,EAAE,CAAC,CAAC;YACjE,OAAO,CAAC,GAAG,CAAC,kBAAkB,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,OAAO,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,SAAS,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC;QACnH,CAAC;QACD,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,WAAW,CAAC,CAAC;QAE/C,MAAM,KAAK,GAAG,OAAO,CAAC,MAAM,CAAC,UAAU,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC,eAAe,CAAC,EAAE,CAAC,CAAC;QACzF,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;QAC7B,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,WAAW,GAAG,CAAC,CAAC,CAAC;QACnD,OAAO,CAAC,GAAG,CACT,0CAA0C,KAAK,CAAC,EAAE,OAAO,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,GAAG;cACzF,QAAQ,WAAW,KAAK,OAAO,CAAC,SAAS,EAAE,EAAE,CAChD,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist-server/server/modules/oauth/tests/access-tokens.service.test.js

@@ -78,7 +78,7 @@ function tokenRowCount() {
 }
 test('(a) plaintext appears once in the issue result and zero times in the database', async () => {
     await withAccessTokenDb(async ({ service, userId, dbPath }) => {
-        const issued = service.issueToken({ userId, name: 'laptop', scopes: ['cloudcli:read'] });
+        const issued = service.issueToken({ userId, name: 'laptop', scopes: ['cloudpit:read'] });
         assert.equal(issued.ok, true);
         if (!issued.ok)
             return;
@@ -125,7 +125,7 @@ test('(b) a live token verifies and stamps last_used from the injected clock, th
         const issued = service.issueToken({
             userId,
             name: 'laptop',
-            scopes: ['cloudcli:read', 'cloudcli:session:send'],
+            scopes: ['cloudpit:read', 'cloudpit:session:send'],
         });
         assert.equal(issued.ok, true);
         if (!issued.ok)
@@ -134,22 +134,22 @@ test('(b) a live token verifies and stamps last_used from the injected clock, th
             .prepare('SELECT last_used FROM access_tokens WHERE id = ?')
             .get(issued.token.id).last_used;
         assert.equal(readLastUsed(), null);
-        const verified = service.verifyToken(issued.token.token, 'cloudcli:read');
+        const verified = service.verifyToken(issued.token.token, 'cloudpit:read');
         assert.equal(verified.ok, true);
         if (!verified.ok)
             return;
         assert.equal(verified.userId, userId);
-        assert.deepEqual(verified.scopes, ['cloudcli:read', 'cloudcli:session:send']);
+        assert.deepEqual(verified.scopes, ['cloudpit:read', 'cloudpit:session:send']);
         // t0: the first use fills the NULL column with the clock's reading.
         const firstStamp = currentTime().toISOString();
         assert.equal(readLastUsed(), firstStamp);
         // t0+59s: inside the window, so the stored instant is left alone.
         advanceTo(new Date(START.getTime() + 59_000));
-        assert.equal(service.verifyToken(issued.token.token, 'cloudcli:read').ok, true);
+        assert.equal(service.verifyToken(issued.token.token, 'cloudpit:read').ok, true);
         assert.equal(readLastUsed(), firstStamp);
         // t0+61s: past the window, so the instant advances to the new reading.
         advanceTo(new Date(START.getTime() + 61_000));
-        assert.equal(service.verifyToken(issued.token.token, 'cloudcli:read').ok, true);
+        assert.equal(service.verifyToken(issued.token.token, 'cloudpit:read').ok, true);
         assert.equal(readLastUsed(), new Date(START.getTime() + 61_000).toISOString());
     });
 });
@@ -159,7 +159,7 @@ test('(c) the five rejection paths yield five pairwise-distinct reasons', async
         // always-valid falsification form has to redden all five, not just the first.
         const results = [];
         await t.test('expired', () => {
-            const issued = service.issueToken({ userId, scopes: ['cloudcli:read'], expiresInDays: 7 });
+            const issued = service.issueToken({ userId, scopes: ['cloudpit:read'], expiresInDays: 7 });
             assert.equal(issued.ok, true);
             if (!issued.ok)
                 return;
@@ -170,7 +170,7 @@ test('(c) the five rejection paths yield five pairwise-distinct reasons', async
             assert.deepEqual(result, { ok: false, reason: 'expired' });
         });
         await t.test('revoked', () => {
-            const issued = service.issueToken({ userId, scopes: ['cloudcli:read'] });
+            const issued = service.issueToken({ userId, scopes: ['cloudpit:read'] });
             assert.equal(issued.ok, true);
             if (!issued.ok)
                 return;
@@ -180,7 +180,7 @@ test('(c) the five rejection paths yield five pairwise-distinct reasons', async
             assert.deepEqual(result, { ok: false, reason: 'revoked' });
         });
         await t.test('rewritten plaintext is not found', () => {
-            const issued = service.issueToken({ userId, scopes: ['cloudcli:read'] });
+            const issued = service.issueToken({ userId, scopes: ['cloudpit:read'] });
             assert.equal(issued.ok, true);
             if (!issued.ok)
                 return;
@@ -195,7 +195,7 @@ test('(c) the five rejection paths yield five pairwise-distinct reasons', async
             assert.deepEqual(result, { ok: false, reason: 'invalid_prefix' });
         });
         await t.test('insufficient scope', () => {
-            const issued = service.issueToken({ userId, scopes: ['cloudcli:read'] });
+            const issued = service.issueToken({ userId, scopes: ['cloudpit:read'] });
             assert.equal(issued.ok, true);
             if (!issued.ok)
                 return;
@@ -213,14 +213,14 @@ test('(c) the five rejection paths yield five pairwise-distinct reasons', async
 test('(d) only 7/30/90 day lifetimes are accepted; anything else writes no row', async () => {
     await withAccessTokenDb(async ({ service, userId }) => {
         for (const days of [7, 30, 90]) {
-            const result = service.issueToken({ userId, scopes: ['cloudcli:read'], expiresInDays: days });
+            const result = service.issueToken({ userId, scopes: ['cloudpit:read'], expiresInDays: days });
             assert.equal(result.ok, true);
             if (!result.ok)
                 return;
             assert.equal(result.token.expiresAt, new Date(START.getTime() + days * MS_PER_DAY).toISOString());
         }
         // Omitted lifetime defaults to 30 days.
-        const defaulted = service.issueToken({ userId, scopes: ['cloudcli:read'] });
+        const defaulted = service.issueToken({ userId, scopes: ['cloudpit:read'] });
         assert.equal(defaulted.ok, true);
         if (!defaulted.ok)
             return;
@@ -230,14 +230,14 @@ test('(d) only 7/30/90 day lifetimes are accepted; anything else writes no row',
         // null = permanent, Infinity = unlimited; 0/negative/365 out of policy.
         const rejected = [null, Infinity, 0, -1, 365];
         for (const days of rejected) {
-            assert.deepEqual(service.issueToken({ userId, scopes: ['cloudcli:read'], expiresInDays: days }), { ok: false, reason: 'invalid_expiry' });
+            assert.deepEqual(service.issueToken({ userId, scopes: ['cloudpit:read'], expiresInDays: days }), { ok: false, reason: 'invalid_expiry' });
         }
         assert.equal(tokenRowCount(), beforeCount);
     });
 });
 test('(e) revocation takes effect on the next verify, same process, no restart', async () => {
     await withAccessTokenDb(async ({ service, userId }) => {
-        const issued = service.issueToken({ userId, scopes: ['cloudcli:read'] });
+        const issued = service.issueToken({ userId, scopes: ['cloudpit:read'] });
         assert.equal(issued.ok, true);
         if (!issued.ok)
             return;
@@ -246,4 +246,25 @@ test('(e) revocation takes effect on the next verify, same process, no restart',
         assert.deepEqual(service.verifyToken(issued.token.token), { ok: false, reason: 'revoked' });
     });
 });
+test('(f) v3.0 refuses a legacy cloudcli:* request and still verifies a pre-3.0 token row', async () => {
+    await withAccessTokenDb(async ({ service, userId }) => {
+        // The retired spelling cannot mint a new token.
+        for (const scope of ['cloudcli:read', 'cloudcli:session:send', 'cloudcli:cockpit:act']) {
+            assert.deepEqual(service.issueToken({ userId, scopes: [scope] }), { ok: false, reason: 'invalid_scope' }, `${scope} must be refused at the issue boundary`);
+        }
+        // An old token row carries the canonical spelling. Seed one directly (the 2.x writer) and
+        // verify it still authenticates against the canonical required scope — no forced revocation.
+        const token = `ccp_${'a'.repeat(64)}`;
+        const hash = crypto.createHash('sha256').update(token).digest('hex');
+        getConnection()
+            .prepare(`INSERT INTO access_tokens (user_id, token_hash, token_prefix, name, scopes, expires_at, created_at)
+         VALUES (?, ?, ?, 'legacy', ?, ?, ?)`)
+            .run(userId, hash, token.slice(0, 8), JSON.stringify(['cloudcli:read', 'cloudcli:session:send']), new Date(START.getTime() + 30 * MS_PER_DAY).toISOString(), START.toISOString());
+        const verified = service.verifyToken(token, 'cloudcli:read');
+        assert.equal(verified.ok, true, 'an old token row keeps working');
+        if (!verified.ok)
+            return;
+        assert.deepEqual(verified.scopes, ['cloudcli:read', 'cloudcli:session:send']);
+    });
+});
 //# sourceMappingURL=access-tokens.service.test.js.map

package/dist-server/server/modules/oauth/tests/access-tokens.service.test.js.map

@@ -1 +1 @@
-{"version":3,"file":"access-tokens.service.test.js","sourceRoot":"","sources":["../../../../../server/modules/oauth/tests/access-tokens.service.test.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,MAAM,MAAM,oBAAoB,CAAC;AACxC,OAAO,MAAM,MAAM,aAAa,CAAC;AACjC,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACrC,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,kBAAkB,CAAC;AACzD,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,OAAO,EAAE,eAAe,EAAE,aAAa,EAAE,kBAAkB,EAAE,MAAM,6BAA6B,CAAC;AACjG,OAAO,EAAE,yBAAyB,EAAE,MAAM,0BAA0B,CAAC;AAGrE,MAAM,OAAO,GAAG,CAAC,CAAC;AAClB,MAAM,KAAK,GAAG,IAAI,IAAI,CAAC,0BAA0B,CAAC,CAAC;AACnD,MAAM,UAAU,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;AAYvC,oFAAoF;AACpF,KAAK,UAAU,iBAAiB,CAAC,GAAwD;IACvF,MAAM,oBAAoB,GAAG,OAAO,CAAC,GAAG,CAAC,aAAa,CAAC;IACvD,MAAM,aAAa,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,EAAE,gBAAgB,CAAC,CAAC,CAAC;IAC9E,MAAM,YAAY,GAAG,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,SAAS,CAAC,CAAC;IAEzD,eAAe,EAAE,CAAC;IAClB,OAAO,CAAC,GAAG,CAAC,aAAa,GAAG,YAAY,CAAC;IACzC,MAAM,kBAAkB,EAAE,CAAC;IAE3B,0EAA0E;IAC1E,aAAa,EAAE;SACZ,OAAO,CAAC,kEAAkE,CAAC;SAC3E,GAAG,CAAC,OAAO,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAC;IAElC,IAAI,OAAO,GAAG,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;IACxC,MAAM,OAAO,GAAG,yBAAyB,CAAC,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,IAAI,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC,EAAE,CAAC,CAAC;IAEtF,IAAI,CAAC;QACH,MAAM,GAAG,CAAC;YACR,MAAM,EAAE,YAAY;YACpB,OAAO;YACP,MAAM,EAAE,OAAO;YACf,SAAS,EAAE,CAAC,IAAI,EAAE,EAAE;gBAClB,OAAO,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC;YACrC,CAAC;YACD,WAAW,EAAE,GAAG,EAAE,CAAC,IAAI,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC;SAC/C,CAAC,CAAC;IACL,CAAC;YAAS,CAAC;QACT,eAAe,EAAE,CAAC;QAClB,IAAI,oBAAoB,KAAK,SAAS,EAAE,CAAC;YACvC,OAAO,OAAO,CAAC,GAAG,CAAC,aAAa,CAAC;QACnC,CAAC;aAAM,CAAC;YACN,OAAO,CAAC,GAAG,CAAC,aAAa,GAAG,oBAAoB,CAAC;QACnD,CAAC;QACD,MAAM,EAAE,CAAC,aAAa,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IAC5D,CAAC;AACH,CAAC;AAED,oEAAoE;AACpE,SAAS,gBAAgB,CAAC,QAAgB,EAAE,MAAc;IACxD,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,CAAC,CAAC;IAClC,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,IAAI,KAAK,GAAG,QAAQ,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IACrC,OAAO,KAAK,KAAK,CAAC,CAAC,EAAE,CAAC;QACpB,KAAK,IAAI,CAAC,CAAC;QACX,KAAK,GAAG,QAAQ,CAAC,OAAO,CAAC,MAAM,EAAE,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC;IAC1D,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,iDAAiD;AACjD,SAAS,aAAa;IACpB,MAAM,GAAG,GAAG,aAAa,EAAE,CAAC,OAAO,CAAC,6CAA6C,CAAC,CAAC,GAAG,EAErF,CAAC;IACF,OAAO,GAAG,CAAC,KAAK,CAAC;AACnB,CAAC;AAED,IAAI,CAAC,+EAA+E,EAAE,KAAK,IAAI,EAAE;IAC/F,MAAM,iBAAiB,CAAC,KAAK,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,EAAE,EAAE;QAC5D,MAAM,MAAM,GAAG,OAAO,CAAC,UAAU,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC,eAAe,CAAC,EAAE,CAAC,CAAC;QACzF,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;QAC9B,IAAI,CAAC,MAAM,CAAC,EAAE;YAAE,OAAO;QAEvB,MAAM,SAAS,GAAG,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC;QACrC,MAAM,CAAC,KAAK,CAAC,SAAS,EAAE,oBAAoB,CAAC,CAAC;QAE9C,MAAM,IAAI,GAAG,aAAa,EAAE,CAAC,OAAO,CAAC,6BAA6B,CAAC,CAAC,GAAG,EAA+B,CAAC;QACvG,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;QAC7B,MAAM,GAAG,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;QAEpB,sFAAsF;QACtF,MAAM,YAAY,GAAG,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACjF,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,YAAY,CAAC,CAAC;QACnD,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,gBAAgB,CAAC,CAAC;QACvD,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,YAAY,CAAC,EAAE,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;QAE9D,yDAAyD;QACzD,IAAI,UAAU,GAAG,CAAC,CAAC;QACnB,MAAM,cAAc,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACxC,KAAK,MAAM,MAAM,IAAI,cAAc,EAAE,CAAC;YACpC,MAAM,KAAK,GAAG,GAAG,CAAC,MAAM,CAAC,CAAC;YAC1B,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,SAAS;gBAAE,SAAS;YACpD,IAAI,MAAM,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,SAAS,CAAC;gBAAE,UAAU,IAAI,CAAC,CAAC;QACzD,CAAC;QACD,MAAM,CAAC,KAAK,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC;QAE5B,wEAAwE;QACxE,MAAM,YAAY,GAAa,EAAE,CAAC;QAClC,IAAI,QAAQ,GAAG,CAAC,CAAC;QACjB,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;QAC9C,KAAK,MAAM,MAAM,IAAI,CAAC,EAAE,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC;YAC1C,MAAM,IAAI,GAAG,GAAG,MAAM,GAAG,MAAM,EAAE,CAAC;YAClC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;gBAAE,SAAS;YAChC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACxB,QAAQ,IAAI,gBAAgB,CAAC,MAAM,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC,CAAC;QAC7D,CAAC;QAED,MAAM,CAAC,KAAK,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC;QAC1B,0EAA0E;QAC1E,MAAM,CAAC,KAAK,CAAC,YAAY,CAAC,MAAM,IAAI,CAAC,EAAE,IAAI,CAAC,CAAC;QAC7C,MAAM,CAAC,KAAK,CAAC,cAAc,CAAC,QAAQ,CAAC,YAAY,CAAC,EAAE,IAAI,CAAC,CAAC;IAC5D,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,2GAA2G,EAAE,KAAK,IAAI,EAAE;IAC3H,MAAM,iBAAiB,CAAC,KAAK,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,WAAW,EAAE,EAAE,EAAE;QAC5E,MAAM,MAAM,GAAG,OAAO,CAAC,UAAU,CAAC;YAChC,MAAM;YACN,IAAI,EAAE,QAAQ;YACd,MAAM,EAAE,CAAC,eAAe,EAAE,uBAAuB,CAAC;SACnD,CAAC,CAAC;QACH,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;QAC9B,IAAI,CAAC,MAAM,CAAC,EAAE;YAAE,OAAO;QAEvB,MAAM,YAAY,GAAG,GAAkB,EAAE,CACtC,aAAa,EAAE;aACb,OAAO,CAAC,kDAAkD,CAAC;aAC3D,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAkC,CAAC,SAAS,CAAC;QAErE,MAAM,CAAC,KAAK,CAAC,YAAY,EAAE,EAAE,IAAI,CAAC,CAAC;QAEnC,MAAM,QAAQ,GAAG,OAAO,CAAC,WAAW,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,EAAE,eAAe,CAAC,CAAC;QAC1E,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;QAChC,IAAI,CAAC,QAAQ,CAAC,EAAE;YAAE,OAAO;QACzB,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QACtC,MAAM,CAAC,SAAS,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC,eAAe,EAAE,uBAAuB,CAAC,CAAC,CAAC;QAE9E,oEAAoE;QACpE,MAAM,UAAU,GAAG,WAAW,EAAE,CAAC,WAAW,EAAE,CAAC;QAC/C,MAAM,CAAC,KAAK,CAAC,YAAY,EAAE,EAAE,UAAU,CAAC,CAAC;QAEzC,kEAAkE;QAClE,SAAS,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,GAAG,MAAM,CAAC,CAAC,CAAC;QAC9C,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,WAAW,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,EAAE,eAAe,CAAC,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;QAChF,MAAM,CAAC,KAAK,CAAC,YAAY,EAAE,EAAE,UAAU,CAAC,CAAC;QAEzC,uEAAuE;QACvE,SAAS,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,GAAG,MAAM,CAAC,CAAC,CAAC;QAC9C,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,WAAW,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,EAAE,eAAe,CAAC,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;QAChF,MAAM,CAAC,KAAK,CAAC,YAAY,EAAE,EAAE,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,GAAG,MAAM,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC;IACjF,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,mEAAmE,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;IACpF,MAAM,iBAAiB,CAAC,KAAK,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,EAAE,EAAE;QAC/D,6EAA6E;QAC7E,8EAA8E;QAC9E,MAAM,OAAO,GAA8B,EAAE,CAAC;QAE9C,MAAM,CAAC,CAAC,IAAI,CAAC,SAAS,EAAE,GAAG,EAAE;YAC3B,MAAM,MAAM,GAAG,OAAO,CAAC,UAAU,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,eAAe,CAAC,EAAE,aAAa,EAAE,CAAC,EAAE,CAAC,CAAC;YAC3F,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;YAC9B,IAAI,CAAC,MAAM,CAAC,EAAE;gBAAE,OAAO;YACvB,SAAS,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,GAAG,CAAC,GAAG,UAAU,CAAC,CAAC,CAAC;YACtD,MAAM,MAAM,GAAG,OAAO,CAAC,WAAW,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;YACvD,SAAS,CAAC,KAAK,CAAC,CAAC;YACjB,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YACrB,MAAM,CAAC,SAAS,CAAC,MAAM,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,CAAC;QAC7D,CAAC,CAAC,CAAC;QAEH,MAAM,CAAC,CAAC,IAAI,CAAC,SAAS,EAAE,GAAG,EAAE;YAC3B,MAAM,MAAM,GAAG,OAAO,CAAC,UAAU,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,eAAe,CAAC,EAAE,CAAC,CAAC;YACzE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;YAC9B,IAAI,CAAC,MAAM,CAAC,EAAE;gBAAE,OAAO;YACvB,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,WAAW,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,EAAE,IAAI,CAAC,CAAC;YACzD,MAAM,MAAM,GAAG,OAAO,CAAC,WAAW,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;YACvD,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YACrB,MAAM,CAAC,SAAS,CAAC,MAAM,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,CAAC;QAC7D,CAAC,CAAC,CAAC;QAEH,MAAM,CAAC,CAAC,IAAI,CAAC,kCAAkC,EAAE,GAAG,EAAE;YACpD,MAAM,MAAM,GAAG,OAAO,CAAC,UAAU,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,eAAe,CAAC,EAAE,CAAC,CAAC;YACzE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;YAC9B,IAAI,CAAC,MAAM,CAAC,EAAE;gBAAE,OAAO;YACvB,MAAM,SAAS,GACb,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;YACnF,MAAM,MAAM,GAAG,OAAO,CAAC,WAAW,CAAC,SAAS,CAAC,CAAC;YAC9C,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YACrB,MAAM,CAAC,SAAS,CAAC,MAAM,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC,CAAC;QAC/D,CAAC,CAAC,CAAC;QAEH,MAAM,CAAC,CAAC,IAAI,CAAC,gBAAgB,EAAE,GAAG,EAAE;YAClC,MAAM,MAAM,GAAG,OAAO,CAAC,WAAW,CAAC,OAAO,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;YAC5D,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YACrB,MAAM,CAAC,SAAS,CAAC,MAAM,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,gBAAgB,EAAE,CAAC,CAAC;QACpE,CAAC,CAAC,CAAC;QAEH,MAAM,CAAC,CAAC,IAAI,CAAC,oBAAoB,EAAE,GAAG,EAAE;YACtC,MAAM,MAAM,GAAG,OAAO,CAAC,UAAU,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,eAAe,CAAC,EAAE,CAAC,CAAC;YACzE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;YAC9B,IAAI,CAAC,MAAM,CAAC,EAAE;gBAAE,OAAO;YACvB,MAAM,MAAM,GAAG,OAAO,CAAC,WAAW,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,EAAE,gBAAgB,CAAC,CAAC;YACzE,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YACrB,MAAM,CAAC,SAAS,CAAC,MAAM,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,oBAAoB,EAAE,CAAC,CAAC;QACxE,CAAC,CAAC,CAAC;QAEH,6EAA6E;QAC7E,kBAAkB;QAClB,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC;QAC5E,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;QAChC,MAAM,CAAC,KAAK,CAAC,IAAI,GAAG,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;IACzC,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,0EAA0E,EAAE,KAAK,IAAI,EAAE;IAC1F,MAAM,iBAAiB,CAAC,KAAK,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,EAAE,EAAE;QACpD,KAAK,MAAM,IAAI,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC;YAC/B,MAAM,MAAM,GAAG,OAAO,CAAC,UAAU,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,eAAe,CAAC,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;YAC9F,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;YAC9B,IAAI,CAAC,MAAM,CAAC,EAAE;gBAAE,OAAO;YACvB,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,SAAS,EAAE,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,GAAG,IAAI,GAAG,UAAU,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC;QACpG,CAAC;QAED,wCAAwC;QACxC,MAAM,SAAS,GAAG,OAAO,CAAC,UAAU,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,eAAe,CAAC,EAAE,CAAC,CAAC;QAC5E,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;QACjC,IAAI,CAAC,SAAS,CAAC,EAAE;YAAE,OAAO;QAC1B,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,KAAK,CAAC,SAAS,EAAE,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,GAAG,EAAE,GAAG,UAAU,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC;QAEnG,MAAM,WAAW,GAAG,aAAa,EAAE,CAAC;QACpC,MAAM,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC;QAE7B,wEAAwE;QACxE,MAAM,QAAQ,GAAsB,CAAC,IAAI,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;QACjE,KAAK,MAAM,IAAI,IAAI,QAAQ,EAAE,CAAC;YAC5B,MAAM,CAAC,SAAS,CACd,OAAO,CAAC,UAAU,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,eAAe,CAAC,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,EAC9E,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,gBAAgB,EAAE,CACxC,CAAC;QACJ,CAAC;QAED,MAAM,CAAC,KAAK,CAAC,aAAa,EAAE,EAAE,WAAW,CAAC,CAAC;IAC7C,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,0EAA0E,EAAE,KAAK,IAAI,EAAE;IAC1F,MAAM,iBAAiB,CAAC,KAAK,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,EAAE,EAAE;QACpD,MAAM,MAAM,GAAG,OAAO,CAAC,UAAU,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,eAAe,CAAC,EAAE,CAAC,CAAC;QACzE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;QAC9B,IAAI,CAAC,MAAM,CAAC,EAAE;YAAE,OAAO;QAEvB,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,WAAW,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;QAC/D,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,WAAW,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,EAAE,IAAI,CAAC,CAAC;QACzD,MAAM,CAAC,SAAS,CAAC,OAAO,CAAC,WAAW,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,CAAC;IAC9F,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}
+{"version":3,"file":"access-tokens.service.test.js","sourceRoot":"","sources":["../../../../../server/modules/oauth/tests/access-tokens.service.test.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,MAAM,MAAM,oBAAoB,CAAC;AACxC,OAAO,MAAM,MAAM,aAAa,CAAC;AACjC,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACrC,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,kBAAkB,CAAC;AACzD,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,OAAO,EAAE,eAAe,EAAE,aAAa,EAAE,kBAAkB,EAAE,MAAM,6BAA6B,CAAC;AACjG,OAAO,EAAE,yBAAyB,EAAE,MAAM,0BAA0B,CAAC;AAGrE,MAAM,OAAO,GAAG,CAAC,CAAC;AAClB,MAAM,KAAK,GAAG,IAAI,IAAI,CAAC,0BAA0B,CAAC,CAAC;AACnD,MAAM,UAAU,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;AAYvC,oFAAoF;AACpF,KAAK,UAAU,iBAAiB,CAAC,GAAwD;IACvF,MAAM,oBAAoB,GAAG,OAAO,CAAC,GAAG,CAAC,aAAa,CAAC;IACvD,MAAM,aAAa,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,EAAE,gBAAgB,CAAC,CAAC,CAAC;IAC9E,MAAM,YAAY,GAAG,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,SAAS,CAAC,CAAC;IAEzD,eAAe,EAAE,CAAC;IAClB,OAAO,CAAC,GAAG,CAAC,aAAa,GAAG,YAAY,CAAC;IACzC,MAAM,kBAAkB,EAAE,CAAC;IAE3B,0EAA0E;IAC1E,aAAa,EAAE;SACZ,OAAO,CAAC,kEAAkE,CAAC;SAC3E,GAAG,CAAC,OAAO,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAC;IAElC,IAAI,OAAO,GAAG,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;IACxC,MAAM,OAAO,GAAG,yBAAyB,CAAC,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,IAAI,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC,EAAE,CAAC,CAAC;IAEtF,IAAI,CAAC;QACH,MAAM,GAAG,CAAC;YACR,MAAM,EAAE,YAAY;YACpB,OAAO;YACP,MAAM,EAAE,OAAO;YACf,SAAS,EAAE,CAAC,IAAI,EAAE,EAAE;gBAClB,OAAO,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC;YACrC,CAAC;YACD,WAAW,EAAE,GAAG,EAAE,CAAC,IAAI,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC;SAC/C,CAAC,CAAC;IACL,CAAC;YAAS,CAAC;QACT,eAAe,EAAE,CAAC;QAClB,IAAI,oBAAoB,KAAK,SAAS,EAAE,CAAC;YACvC,OAAO,OAAO,CAAC,GAAG,CAAC,aAAa,CAAC;QACnC,CAAC;aAAM,CAAC;YACN,OAAO,CAAC,GAAG,CAAC,aAAa,GAAG,oBAAoB,CAAC;QACnD,CAAC;QACD,MAAM,EAAE,CAAC,aAAa,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IAC5D,CAAC;AACH,CAAC;AAED,oEAAoE;AACpE,SAAS,gBAAgB,CAAC,QAAgB,EAAE,MAAc;IACxD,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,CAAC,CAAC;IAClC,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,IAAI,KAAK,GAAG,QAAQ,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IACrC,OAAO,KAAK,KAAK,CAAC,CAAC,EAAE,CAAC;QACpB,KAAK,IAAI,CAAC,CAAC;QACX,KAAK,GAAG,QAAQ,CAAC,OAAO,CAAC,MAAM,EAAE,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC;IAC1D,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,iDAAiD;AACjD,SAAS,aAAa;IACpB,MAAM,GAAG,GAAG,aAAa,EAAE,CAAC,OAAO,CAAC,6CAA6C,CAAC,CAAC,GAAG,EAErF,CAAC;IACF,OAAO,GAAG,CAAC,KAAK,CAAC;AACnB,CAAC;AAED,IAAI,CAAC,+EAA+E,EAAE,KAAK,IAAI,EAAE;IAC/F,MAAM,iBAAiB,CAAC,KAAK,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,EAAE,EAAE;QAC5D,MAAM,MAAM,GAAG,OAAO,CAAC,UAAU,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC,eAAe,CAAC,EAAE,CAAC,CAAC;QACzF,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;QAC9B,IAAI,CAAC,MAAM,CAAC,EAAE;YAAE,OAAO;QAEvB,MAAM,SAAS,GAAG,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC;QACrC,MAAM,CAAC,KAAK,CAAC,SAAS,EAAE,oBAAoB,CAAC,CAAC;QAE9C,MAAM,IAAI,GAAG,aAAa,EAAE,CAAC,OAAO,CAAC,6BAA6B,CAAC,CAAC,GAAG,EAA+B,CAAC;QACvG,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;QAC7B,MAAM,GAAG,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;QAEpB,sFAAsF;QACtF,MAAM,YAAY,GAAG,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACjF,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,YAAY,CAAC,CAAC;QACnD,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,gBAAgB,CAAC,CAAC;QACvD,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,YAAY,CAAC,EAAE,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;QAE9D,yDAAyD;QACzD,IAAI,UAAU,GAAG,CAAC,CAAC;QACnB,MAAM,cAAc,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACxC,KAAK,MAAM,MAAM,IAAI,cAAc,EAAE,CAAC;YACpC,MAAM,KAAK,GAAG,GAAG,CAAC,MAAM,CAAC,CAAC;YAC1B,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,SAAS;gBAAE,SAAS;YACpD,IAAI,MAAM,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,SAAS,CAAC;gBAAE,UAAU,IAAI,CAAC,CAAC;QACzD,CAAC;QACD,MAAM,CAAC,KAAK,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC;QAE5B,wEAAwE;QACxE,MAAM,YAAY,GAAa,EAAE,CAAC;QAClC,IAAI,QAAQ,GAAG,CAAC,CAAC;QACjB,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;QAC9C,KAAK,MAAM,MAAM,IAAI,CAAC,EAAE,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC;YAC1C,MAAM,IAAI,GAAG,GAAG,MAAM,GAAG,MAAM,EAAE,CAAC;YAClC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;gBAAE,SAAS;YAChC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACxB,QAAQ,IAAI,gBAAgB,CAAC,MAAM,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC,CAAC;QAC7D,CAAC;QAED,MAAM,CAAC,KAAK,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC;QAC1B,0EAA0E;QAC1E,MAAM,CAAC,KAAK,CAAC,YAAY,CAAC,MAAM,IAAI,CAAC,EAAE,IAAI,CAAC,CAAC;QAC7C,MAAM,CAAC,KAAK,CAAC,cAAc,CAAC,QAAQ,CAAC,YAAY,CAAC,EAAE,IAAI,CAAC,CAAC;IAC5D,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,2GAA2G,EAAE,KAAK,IAAI,EAAE;IAC3H,MAAM,iBAAiB,CAAC,KAAK,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,WAAW,EAAE,EAAE,EAAE;QAC5E,MAAM,MAAM,GAAG,OAAO,CAAC,UAAU,CAAC;YAChC,MAAM;YACN,IAAI,EAAE,QAAQ;YACd,MAAM,EAAE,CAAC,eAAe,EAAE,uBAAuB,CAAC;SACnD,CAAC,CAAC;QACH,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;QAC9B,IAAI,CAAC,MAAM,CAAC,EAAE;YAAE,OAAO;QAEvB,MAAM,YAAY,GAAG,GAAkB,EAAE,CACtC,aAAa,EAAE;aACb,OAAO,CAAC,kDAAkD,CAAC;aAC3D,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAkC,CAAC,SAAS,CAAC;QAErE,MAAM,CAAC,KAAK,CAAC,YAAY,EAAE,EAAE,IAAI,CAAC,CAAC;QAEnC,MAAM,QAAQ,GAAG,OAAO,CAAC,WAAW,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,EAAE,eAAe,CAAC,CAAC;QAC1E,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;QAChC,IAAI,CAAC,QAAQ,CAAC,EAAE;YAAE,OAAO;QACzB,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QACtC,MAAM,CAAC,SAAS,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC,eAAe,EAAE,uBAAuB,CAAC,CAAC,CAAC;QAE9E,oEAAoE;QACpE,MAAM,UAAU,GAAG,WAAW,EAAE,CAAC,WAAW,EAAE,CAAC;QAC/C,MAAM,CAAC,KAAK,CAAC,YAAY,EAAE,EAAE,UAAU,CAAC,CAAC;QAEzC,kEAAkE;QAClE,SAAS,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,GAAG,MAAM,CAAC,CAAC,CAAC;QAC9C,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,WAAW,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,EAAE,eAAe,CAAC,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;QAChF,MAAM,CAAC,KAAK,CAAC,YAAY,EAAE,EAAE,UAAU,CAAC,CAAC;QAEzC,uEAAuE;QACvE,SAAS,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,GAAG,MAAM,CAAC,CAAC,CAAC;QAC9C,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,WAAW,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,EAAE,eAAe,CAAC,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;QAChF,MAAM,CAAC,KAAK,CAAC,YAAY,EAAE,EAAE,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,GAAG,MAAM,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC;IACjF,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,mEAAmE,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;IACpF,MAAM,iBAAiB,CAAC,KAAK,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,EAAE,EAAE;QAC/D,6EAA6E;QAC7E,8EAA8E;QAC9E,MAAM,OAAO,GAA8B,EAAE,CAAC;QAE9C,MAAM,CAAC,CAAC,IAAI,CAAC,SAAS,EAAE,GAAG,EAAE;YAC3B,MAAM,MAAM,GAAG,OAAO,CAAC,UAAU,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,eAAe,CAAC,EAAE,aAAa,EAAE,CAAC,EAAE,CAAC,CAAC;YAC3F,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;YAC9B,IAAI,CAAC,MAAM,CAAC,EAAE;gBAAE,OAAO;YACvB,SAAS,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,GAAG,CAAC,GAAG,UAAU,CAAC,CAAC,CAAC;YACtD,MAAM,MAAM,GAAG,OAAO,CAAC,WAAW,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;YACvD,SAAS,CAAC,KAAK,CAAC,CAAC;YACjB,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YACrB,MAAM,CAAC,SAAS,CAAC,MAAM,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,CAAC;QAC7D,CAAC,CAAC,CAAC;QAEH,MAAM,CAAC,CAAC,IAAI,CAAC,SAAS,EAAE,GAAG,EAAE;YAC3B,MAAM,MAAM,GAAG,OAAO,CAAC,UAAU,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,eAAe,CAAC,EAAE,CAAC,CAAC;YACzE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;YAC9B,IAAI,CAAC,MAAM,CAAC,EAAE;gBAAE,OAAO;YACvB,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,WAAW,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,EAAE,IAAI,CAAC,CAAC;YACzD,MAAM,MAAM,GAAG,OAAO,CAAC,WAAW,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;YACvD,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YACrB,MAAM,CAAC,SAAS,CAAC,MAAM,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,CAAC;QAC7D,CAAC,CAAC,CAAC;QAEH,MAAM,CAAC,CAAC,IAAI,CAAC,kCAAkC,EAAE,GAAG,EAAE;YACpD,MAAM,MAAM,GAAG,OAAO,CAAC,UAAU,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,eAAe,CAAC,EAAE,CAAC,CAAC;YACzE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;YAC9B,IAAI,CAAC,MAAM,CAAC,EAAE;gBAAE,OAAO;YACvB,MAAM,SAAS,GACb,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;YACnF,MAAM,MAAM,GAAG,OAAO,CAAC,WAAW,CAAC,SAAS,CAAC,CAAC;YAC9C,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YACrB,MAAM,CAAC,SAAS,CAAC,MAAM,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC,CAAC;QAC/D,CAAC,CAAC,CAAC;QAEH,MAAM,CAAC,CAAC,IAAI,CAAC,gBAAgB,EAAE,GAAG,EAAE;YAClC,MAAM,MAAM,GAAG,OAAO,CAAC,WAAW,CAAC,OAAO,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;YAC5D,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YACrB,MAAM,CAAC,SAAS,CAAC,MAAM,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,gBAAgB,EAAE,CAAC,CAAC;QACpE,CAAC,CAAC,CAAC;QAEH,MAAM,CAAC,CAAC,IAAI,CAAC,oBAAoB,EAAE,GAAG,EAAE;YACtC,MAAM,MAAM,GAAG,OAAO,CAAC,UAAU,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,eAAe,CAAC,EAAE,CAAC,CAAC;YACzE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;YAC9B,IAAI,CAAC,MAAM,CAAC,EAAE;gBAAE,OAAO;YACvB,MAAM,MAAM,GAAG,OAAO,CAAC,WAAW,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,EAAE,gBAAgB,CAAC,CAAC;YACzE,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YACrB,MAAM,CAAC,SAAS,CAAC,MAAM,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,oBAAoB,EAAE,CAAC,CAAC;QACxE,CAAC,CAAC,CAAC;QAEH,6EAA6E;QAC7E,kBAAkB;QAClB,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC;QAC5E,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;QAChC,MAAM,CAAC,KAAK,CAAC,IAAI,GAAG,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;IACzC,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,0EAA0E,EAAE,KAAK,IAAI,EAAE;IAC1F,MAAM,iBAAiB,CAAC,KAAK,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,EAAE,EAAE;QACpD,KAAK,MAAM,IAAI,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC;YAC/B,MAAM,MAAM,GAAG,OAAO,CAAC,UAAU,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,eAAe,CAAC,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;YAC9F,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;YAC9B,IAAI,CAAC,MAAM,CAAC,EAAE;gBAAE,OAAO;YACvB,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,SAAS,EAAE,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,GAAG,IAAI,GAAG,UAAU,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC;QACpG,CAAC;QAED,wCAAwC;QACxC,MAAM,SAAS,GAAG,OAAO,CAAC,UAAU,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,eAAe,CAAC,EAAE,CAAC,CAAC;QAC5E,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;QACjC,IAAI,CAAC,SAAS,CAAC,EAAE;YAAE,OAAO;QAC1B,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,KAAK,CAAC,SAAS,EAAE,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,GAAG,EAAE,GAAG,UAAU,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC;QAEnG,MAAM,WAAW,GAAG,aAAa,EAAE,CAAC;QACpC,MAAM,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC;QAE7B,wEAAwE;QACxE,MAAM,QAAQ,GAAsB,CAAC,IAAI,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;QACjE,KAAK,MAAM,IAAI,IAAI,QAAQ,EAAE,CAAC;YAC5B,MAAM,CAAC,SAAS,CACd,OAAO,CAAC,UAAU,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,eAAe,CAAC,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,EAC9E,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,gBAAgB,EAAE,CACxC,CAAC;QACJ,CAAC;QAED,MAAM,CAAC,KAAK,CAAC,aAAa,EAAE,EAAE,WAAW,CAAC,CAAC;IAC7C,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,0EAA0E,EAAE,KAAK,IAAI,EAAE;IAC1F,MAAM,iBAAiB,CAAC,KAAK,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,EAAE,EAAE;QACpD,MAAM,MAAM,GAAG,OAAO,CAAC,UAAU,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,eAAe,CAAC,EAAE,CAAC,CAAC;QACzE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;QAC9B,IAAI,CAAC,MAAM,CAAC,EAAE;YAAE,OAAO;QAEvB,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,WAAW,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;QAC/D,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,WAAW,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,EAAE,IAAI,CAAC,CAAC;QACzD,MAAM,CAAC,SAAS,CAAC,OAAO,CAAC,WAAW,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,CAAC;IAC9F,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,qFAAqF,EAAE,KAAK,IAAI,EAAE;IACrG,MAAM,iBAAiB,CAAC,KAAK,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,EAAE,EAAE;QACpD,gDAAgD;QAChD,KAAK,MAAM,KAAK,IAAI,CAAC,eAAe,EAAE,uBAAuB,EAAE,sBAAsB,CAAC,EAAE,CAAC;YACvF,MAAM,CAAC,SAAS,CACd,OAAO,CAAC,UAAU,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,KAAK,CAAC,EAAE,CAAC,EAC/C,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,eAAe,EAAE,EACtC,GAAG,KAAK,wCAAwC,CACjD,CAAC;QACJ,CAAC;QAED,0FAA0F;QAC1F,6FAA6F;QAC7F,MAAM,KAAK,GAAG,OAAO,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,CAAC;QACtC,MAAM,IAAI,GAAG,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACrE,aAAa,EAAE;aACZ,OAAO,CACN;6CACqC,CACtC;aACA,GAAG,CACF,MAAM,EACN,IAAI,EACJ,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,EACjB,IAAI,CAAC,SAAS,CAAC,CAAC,eAAe,EAAE,uBAAuB,CAAC,CAAC,EAC1D,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,GAAG,EAAE,GAAG,UAAU,CAAC,CAAC,WAAW,EAAE,EACzD,KAAK,CAAC,WAAW,EAAE,CACpB,CAAC;QAEJ,MAAM,QAAQ,GAAG,OAAO,CAAC,WAAW,CAAC,KAAK,EAAE,eAAe,CAAC,CAAC;QAC7D,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,EAAE,IAAI,EAAE,gCAAgC,CAAC,CAAC;QAClE,IAAI,CAAC,QAAQ,CAAC,EAAE;YAAE,OAAO;QACzB,MAAM,CAAC,SAAS,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC,eAAe,EAAE,uBAAuB,CAAC,CAAC,CAAC;IAChF,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist-server/server/modules/oauth/tests/oauth-consent-page.test.js

@@ -21,14 +21,14 @@
  *       contains HTML — plus the correct callback host (AC4). [was the AC-260 (a)
  *       HTML-escaping leg: the server renders no HTML any more, so escaping has no
  *       subject; the honest translation is that the value is structured data.]
- *   (c) GET context returns the whole scope vocabulary, `cloudcli:read` flagged
+ *   (c) GET context returns the whole scope vocabulary, `cloudpit:read` flagged
  *       `required:true`/`writable:false`, the rest `required:false`/`writable:true`,
  *       and never `cloudcli:admin` (AC4; old (b)/(m)'s intent).
  *   (d) decision deny → `redirectTo` carries `error=access_denied` and the verbatim
  *       state, no code, no new code row (AC6; old (d)).
  *   (e) decision allow → `redirectTo` carries a non-empty code and the verbatim
  *       state, and the grant row's scopes are exactly the submitted set ∪
- *       `cloudcli:read`, once each (AC5; old (c)/(e)).
+ *       the canonical `cloudcli:read`, once each (AC5; old (c)/(e)).
  *   (f) an unregistered `redirect_uri` is refused at GET /oauth/authorize (400
  *       error page, NO Location), at context (400 JSON) and at decision for BOTH
  *       allow and deny (400, no `redirectTo`, no code row) — the deny branch is
@@ -89,6 +89,9 @@ import { OAUTH_CONSENT_SPA_PATH } from '../../../../shared/oauthConsent.js';
 const PUBLIC_BASE_URL = 'https://cli.example';
 const REDIRECT_URI = 'https://app.example/cb';
 const START_MS = Date.UTC(2026, 0, 1, 0, 0, 0);
+// 3.0 splits the two vocabularies: the consent screen OFFERS the wire spelling
+// (`cloudpit:*`), while a granted decision is STORED under the canonical name
+// (`cloudcli:*`) so the existing `requiredScopes` literals keep matching.
 const READ_SCOPE = 'cloudcli:read';
 const WRITE_SCOPE = 'cloudcli:session:send';
 const CREATE_SCOPE = 'cloudcli:session:create';
@@ -96,12 +99,13 @@ const CONTROL_SCOPE = 'cloudcli:session:control';
 const NAVIGATE_SCOPE = 'cloudcli:navigate';
 const APPROVE_SCOPE = 'cloudcli:approve';
 // gap-ui-visible-context-extended-fields: the appended content scope, offered by
-// the consent screen since it maps the whole ACCESS_TOKEN_SCOPES vocabulary.
+// the consent screen since it maps the whole wire vocabulary.
 const SELECTION_SCOPE = 'cloudcli:selection';
 // gap-mcp-cockpit-card-tools: the appended confirm scope. It is a WRITE scope —
 // confirming a card runs the option's declared executor — so leg (c) requires it
 // to carry a `write` group and a non-empty risk badge, which it does.
 const COCKPIT_ACT_SCOPE = 'cloudcli:cockpit:act';
+/** The wire spelling of each canonical constant: what the consent screen offers and accepts. */
 const VOCABULARY = [
     READ_SCOPE,
     WRITE_SCOPE,
@@ -111,7 +115,8 @@ const VOCABULARY = [
     NAVIGATE_SCOPE,
     SELECTION_SCOPE,
     COCKPIT_ACT_SCOPE,
-];
+].map((scope) => scope.replace('cloudcli:', 'cloudpit:'));
+const [READ_WIRE, WRITE_WIRE, CREATE_WIRE, , , NAVIGATE_WIRE] = VOCABULARY;
 const USER_ID = 1;
 const OWNER = 'owner';
 /**
@@ -224,7 +229,7 @@ function latestGrantScopes() {
     return JSON.parse(row.scopes);
 }
 /** Builds the `/oauth/authorize` query string a client would send. */
-function authorizeQuery(clientId, challenge, scopes = [READ_SCOPE], state = 'xyz', redirectUri = REDIRECT_URI) {
+function authorizeQuery(clientId, challenge, scopes = [READ_WIRE], state = 'xyz', redirectUri = REDIRECT_URI) {
     const params = new URLSearchParams({
         client_id: clientId,
         redirect_uri: redirectUri,
@@ -271,7 +276,7 @@ test('(a) GET /oauth/authorize 302s to the relative SPA route, query preserved i
     await withConsentServer(async (harness) => {
         const clientId = harness.registerClient('consent-app');
         const pair = pkcePair();
-        const query = authorizeQuery(clientId, pair.challenge, [READ_SCOPE, WRITE_SCOPE], 'state-abc');
+        const query = authorizeQuery(clientId, pair.challenge, [READ_WIRE, WRITE_WIRE], 'state-abc');
         const response = await fetch(`${harness.baseUrl}/oauth/authorize?${query}`, { redirect: 'manual' });
         assert.equal(response.status, 302);
         const location = response.headers.get('location') ?? '';
@@ -301,7 +306,7 @@ test('(b) GET context returns the client name as JSON data (verbatim) and the ri
         console.log(`(b) clientName=${JSON.stringify(body.clientName)} callbackHost=${body.callbackHost} state=${body.state}`);
     });
 });
-test('(c) GET context returns the whole vocabulary with cloudcli:read required and non-writable', async () => {
+test('(c) GET context returns the whole wire vocabulary with cloudpit:read required and non-writable', async () => {
     await withConsentServer(async (harness) => {
         const clientId = harness.registerClient('consent-app');
         const reading = await getContext(harness, clientId);
@@ -310,7 +315,7 @@ test('(c) GET context returns the whole vocabulary with cloudcli:read required a
         assert.deepEqual(scopes.map((entry) => entry.scope), VOCABULARY, 'the whole vocabulary, in order');
         for (const entry of scopes) {
             assert.ok(entry.description.length > 0, `${entry.scope} must carry an English description`);
-            if (entry.scope === READ_SCOPE) {
+            if (entry.scope === READ_WIRE) {
                 assert.equal(entry.required, true, 'the read-only scope is pinned');
                 assert.equal(entry.writable, false, 'the read-only scope is not removable');
             }
@@ -324,7 +329,7 @@ test('(c) GET context returns the whole vocabulary with cloudcli:read required a
         // and, for a state-changing scope, a risk code the badge renders from. The
         // existing assertions above are untouched; these are additive.
         for (const entry of scopes) {
-            if (entry.scope === READ_SCOPE) {
+            if (entry.scope === READ_WIRE) {
                 assert.equal(entry.group, 'read', 'the pinned scope is filed under the read group');
                 assert.equal(entry.risk, null, 'a read scope carries no risk badge');
             }
@@ -346,7 +351,7 @@ test('(d) decision deny returns error=access_denied with the verbatim state and
             state: 'state-deny-1',
             code_challenge: pkcePair().challenge,
             code_challenge_method: 'S256',
-            scopes: [READ_SCOPE],
+            scopes: [READ_WIRE],
             action: 'deny',
         });
         assert.equal(denied.status, 200);
@@ -359,7 +364,7 @@ test('(d) decision deny returns error=access_denied with the verbatim state and
         console.log(`(d) redirectTo=${redirectTo} codes ${before}->${codeCount()}`);
     });
 });
-test('(e) decision allow returns a code and stores the submitted set plus cloudcli:read', async () => {
+test('(e) decision allow returns a code and stores the canonical set plus the read scope', async () => {
     await withConsentServer(async (harness) => {
         const clientId = harness.registerClient('consent-app');
         const pair = pkcePair();
@@ -372,7 +377,7 @@ test('(e) decision allow returns a code and stores the submitted set plus cloudc
             code_challenge_method: 'S256',
             // The read-only box is pinned on the client, so it is not submitted; the
             // control scope was left unchecked.
-            scopes: [WRITE_SCOPE],
+            scopes: [WRITE_WIRE],
             action: 'allow',
         });
         assert.equal(allowed.status, 200);
@@ -391,7 +396,7 @@ test('(f) an unregistered redirect_uri is refused at authorize, context and deci
         const clientId = harness.registerClient('consent-app');
         const evil = 'https://evil.example/steal';
         // GET /oauth/authorize: an error page and NO Location header.
-        const getResponse = await fetch(`${harness.baseUrl}/oauth/authorize?${authorizeQuery(clientId, pkcePair().challenge, [READ_SCOPE], 'xyz', evil)}`, { redirect: 'manual' });
+        const getResponse = await fetch(`${harness.baseUrl}/oauth/authorize?${authorizeQuery(clientId, pkcePair().challenge, [READ_WIRE], 'xyz', evil)}`, { redirect: 'manual' });
         const getBody = await getResponse.text();
         assert.equal(getResponse.status, 400);
         assert.equal(getResponse.headers.get('location'), null, 'an unregistered callback must never be redirected to');
@@ -410,7 +415,7 @@ test('(f) an unregistered redirect_uri is refused at authorize, context and deci
                 state: 'xyz',
                 code_challenge: pkcePair().challenge,
                 code_challenge_method: 'S256',
-                scopes: [READ_SCOPE],
+                scopes: [READ_WIRE],
                 action,
             });
             assert.equal(response.status, 400, `decision ${action} to an unregistered callback must be refused`);
@@ -435,7 +440,7 @@ test('(g) the JSON API carries the anti-framing and no-store headers', async ()
             state: 'xyz',
             code_challenge: pkcePair().challenge,
             code_challenge_method: 'S256',
-            scopes: [READ_SCOPE],
+            scopes: [READ_WIRE],
             action: 'deny',
         });
         assert.equal(decision.headers.get('x-frame-options'), 'DENY');
@@ -456,7 +461,7 @@ test('(g) the JSON API carries the anti-framing and no-store headers', async ()
 test('(h) the SPA document at /oauth/consent carries the three headers over the static layer', async () => {
     await withConsentServer(async (harness) => {
         const clientId = harness.registerClient('consent-app');
-        const query = authorizeQuery(clientId, pkcePair().challenge, [READ_SCOPE], 'state-doc');
+        const query = authorizeQuery(clientId, pkcePair().challenge, [READ_WIRE], 'state-doc');
         const response = await fetch(`${harness.baseUrl}${OAUTH_CONSENT_SPA_PATH}?${query}`);
         assert.equal(response.status, 200, 'the SPA document is served from dist/index.html');
         assert.match(response.headers.get('content-type') ?? '', /text\/html/);
@@ -516,7 +521,7 @@ test('(k) context and decision without a JWT are 401 and create no code row', as
             state: 'xyz',
             code_challenge: pkcePair().challenge,
             code_challenge_method: 'S256',
-            scopes: [READ_SCOPE],
+            scopes: [READ_WIRE],
             action: 'allow',
         }, null);
         assert.equal(decision.status, 401, 'decision without a bearer JWT must be refused');
@@ -534,7 +539,7 @@ test('(m) a forged scope outside the vocabulary never reaches the grant', async
             state: 'xyz',
             code_challenge: pkcePair().challenge,
             code_challenge_method: 'S256',
-            scopes: ['cloudcli:admin', 'bogus', CREATE_SCOPE, CREATE_SCOPE, NAVIGATE_SCOPE],
+            scopes: ['cloudcli:admin', 'bogus', CREATE_WIRE, CREATE_WIRE, NAVIGATE_WIRE],
             action: 'allow',
         });
         assert.equal(allowed.status, 200);
@@ -572,7 +577,7 @@ test('(o) a read-only allow with no password and no injected verifier mints a co
             state: 'state-readonly',
             code_challenge: pkcePair().challenge,
             code_challenge_method: 'S256',
-            scopes: [READ_SCOPE],
+            scopes: [READ_WIRE],
             action: 'allow',
             password: '',
         });
@@ -595,7 +600,7 @@ test('(p) a deny carrying a write scope and no password is still access_denied',
             state: 'state-deny-write',
             code_challenge: pkcePair().challenge,
             code_challenge_method: 'S256',
-            scopes: [WRITE_SCOPE],
+            scopes: [WRITE_WIRE],
             action: 'deny',
             password: '',
         });
@@ -645,7 +650,7 @@ test('(l) in a real browser the 302 lands on the SPA route and the window.locati
       body: JSON.stringify({
         client_id: q.get('client_id'), redirect_uri: q.get('redirect_uri'), state: q.get('state'),
         code_challenge: q.get('code_challenge'), code_challenge_method: 'S256',
-        scopes: ['cloudcli:read'], action: 'allow',
+        scopes: ['cloudpit:read'], action: 'allow',
       }),
     }).then((r) => r.json());
     window.location.href = decision.redirectTo;
@@ -671,7 +676,7 @@ test('(l) in a real browser the 302 lands on the SPA route and the window.locati
             const callback = `${callbackOrigin}/cb`;
             const clientId = harness.registerClient('browser-app', callback);
             const pair = pkcePair();
-            const query = authorizeQuery(clientId, pair.challenge, [READ_SCOPE], 'state-browser', callback);
+            const query = authorizeQuery(clientId, pair.challenge, [READ_WIRE], 'state-browser', callback);
             const page = await browser.newPage();
             await page.goto(`${harness.baseUrl}/oauth/authorize?${query}`);
             // The server 302 must have landed the browser on the SPA route.