grm-shared-library 1.1.196 → 1.1.197
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/dist/cjs/modules/partner/dtos/create-partner-integration.dto.js +15 -1
- package/dist/cjs/modules/partner/dtos/create-partner-integration.dto.js.map +1 -1
- package/dist/cjs/modules/partner/utils/partner-payload.util.js +14 -3
- package/dist/cjs/modules/partner/utils/partner-payload.util.js.map +1 -1
- package/dist/esm/modules/partner/dtos/create-partner-integration.dto.js +16 -2
- package/dist/esm/modules/partner/dtos/create-partner-integration.dto.js.map +1 -1
- package/dist/esm/modules/partner/utils/partner-payload.util.js +12 -2
- package/dist/esm/modules/partner/utils/partner-payload.util.js.map +1 -1
- package/dist/types/modules/partner/utils/partner-payload.util.d.ts +10 -0
- package/package.json +1 -1
|
@@ -86,7 +86,21 @@ __decorate([
|
|
|
86
86
|
example: 'RESCUE_CO_GARDAWORLD_API_KEY',
|
|
87
87
|
}),
|
|
88
88
|
(0, class_validator_1.IsString)(),
|
|
89
|
-
(0, class_validator_1.MaxLength)(
|
|
89
|
+
(0, class_validator_1.MaxLength)(128)
|
|
90
|
+
/**
|
|
91
|
+
* Constrained to a secret NAME, not free text.
|
|
92
|
+
*
|
|
93
|
+
* clarion-partner-services interpolates this straight into a Secret Manager
|
|
94
|
+
* resource path, and it is set by a tenant admin through the web admin - so
|
|
95
|
+
* a slash would be enough to reach a secret belonging to another service.
|
|
96
|
+
* The service enforces the same rule independently; this is here so the
|
|
97
|
+
* caller gets a useful message instead of a 500, and so a future consumer
|
|
98
|
+
* inherits the constraint.
|
|
99
|
+
*/
|
|
100
|
+
,
|
|
101
|
+
(0, class_validator_1.Matches)(/^[A-Za-z0-9_-]+$/, {
|
|
102
|
+
message: 'credentialReference must be a secret NAME: letters, digits, underscores and hyphens only.',
|
|
103
|
+
}),
|
|
90
104
|
__metadata("design:type", String)
|
|
91
105
|
], CreatePartnerIntegrationDto.prototype, "credentialReference", void 0);
|
|
92
106
|
__decorate([
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"create-partner-integration.dto.js","sourceRoot":"","sources":["../../../../../src/modules/partner/dtos/create-partner-integration.dto.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,6CAAmE;AACnE,yDAAyC;AACzC,
|
|
1
|
+
{"version":3,"file":"create-partner-integration.dto.js","sourceRoot":"","sources":["../../../../../src/modules/partner/dtos/create-partner-integration.dto.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,6CAAmE;AACnE,yDAAyC;AACzC,qDAgByB;AACzB,6EAAoE;AACpE,wGAA8F;AAC9F,oFAA0E;AAC1E,kFAAwE;AACxE,8FAAoF;AAEpF;;;;;;GAMG;AACH,MAAa,2BAA2B;CAiJvC;AAjJD,kEAiJC;AAxIG;IARC,IAAA,6BAAmB,EAAC;QACjB,WAAW,EAAE,2FAA2F;QACxG,OAAO,EAAE,EAAE;KACd,CAAC;IACD,IAAA,wBAAI,EAAC,GAAG,EAAE,CAAC,MAAM,CAAC;IAClB,IAAA,uBAAK,GAAE;IACP,IAAA,4BAAU,GAAE;IACZ,IAAA,4BAAU,GAAE;;mEACW;AAUxB;IARC,IAAA,6BAAmB,EAAC;QACjB,WAAW,EAAE,iFAAiF;QAC9F,OAAO,EAAE,EAAE;KACd,CAAC;IACD,IAAA,wBAAI,EAAC,GAAG,EAAE,CAAC,MAAM,CAAC;IAClB,IAAA,uBAAK,GAAE;IACP,IAAA,4BAAU,GAAE;IACZ,IAAA,4BAAU,GAAE;;oEACY;AAIzB;IAFC,IAAA,qBAAW,EAAC,EAAE,IAAI,EAAE,gDAAmB,EAAE,WAAW,EAAE,oCAAoC,EAAE,CAAC;IAC7F,IAAA,wBAAM,EAAC,gDAAmB,CAAC;;iEACO;AAKnC;IAHC,IAAA,qBAAW,EAAC,EAAE,WAAW,EAAE,wBAAwB,EAAE,OAAO,EAAE,kCAAkC,EAAE,CAAC;IACnG,IAAA,0BAAQ,GAAE;IACV,IAAA,2BAAS,EAAC,GAAG,CAAC;;yDACD;AAQd;IANC,IAAA,6BAAmB,EAAC;QACjB,IAAI,EAAE,oEAA6B;QACnC,WAAW,EAAE,+DAA+D;KAC/E,CAAC;IACD,IAAA,wBAAM,EAAC,oEAA6B,CAAC;IACrC,IAAA,4BAAU,GAAE;;gEAC+B;AAS5C;IAPC,IAAA,6BAAmB,EAAC;QACjB,WAAW,EAAE,oFAAoF;QACjG,OAAO,EAAE,uBAAuB;KACnC,CAAC;IACD,IAAA,uBAAK,EAAC,EAAE,WAAW,EAAE,KAAK,EAAE,CAAC;IAC7B,IAAA,2BAAS,EAAC,GAAG,CAAC;IACd,IAAA,4BAAU,GAAE;;4DACI;AAuBjB;IArBC,IAAA,qBAAW,EAAC;QACT,WAAW,EACP,uJAAuJ;QAC3J,OAAO,EAAE,8BAA8B;KAC1C,CAAC;IACD,IAAA,0BAAQ,GAAE;IACV,IAAA,2BAAS,EAAC,GAAG,CAAC;IACf;;;;;;;;;OASG;;IACF,IAAA,yBAAO,EAAC,kBAAkB,EAAE;QACzB,OAAO,EACH,2FAA2F;KAClG,CAAC;;wEAC2B;AAQ7B;IANC,IAAA,6BAAmB,EAAC;QACjB,WAAW,EAAE,8EAA8E;QAC3F,OAAO,EAAE,EAAE,MAAM,EAAE,YAAY,EAAE;KACpC,CAAC;IACD,IAAA,0BAAQ,GAAE;IACV,IAAA,4BAAU,GAAE;;kEAC2B;AAWxC;IATC,IAAA,qBAAW,EAAC;QACT,IAAI,EAAE,0DAAwB;QAC9B,OAAO,EAAE,IAAI;QACb,WAAW,EAAE,2EAA2E;QACxF,OAAO,EAAE,CAAC,0DAAwB,CAAC,SAAS,CAAC;KAChD,CAAC;IACD,IAAA,yBAAO,GAAE;IACT,IAAA,+BAAa,GAAE;IACf,IAAA,wBAAM,EAAC,0DAAwB,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;;iEACP;AAQ1C;IANC,IAAA,6BAAmB,EAAC;QACjB,IAAI,EAAE,8CAAkB;QACxB,WAAW,EAAE,6FAA6F;KAC7G,CAAC;IACD,IAAA,wBAAM,EAAC,8CAAkB,CAAC;IAC1B,IAAA,4BAAU,GAAE;;gEACoB;AAWjC;IATC,IAAA,6BAAmB,EAAC;QACjB,WAAW,EAAE,gGAAgG;QAC7G,OAAO,EAAE,EAAE;KACd,CAAC;IACD,IAAA,wBAAI,EAAC,GAAG,EAAE,CAAC,MAAM,CAAC;IAClB,IAAA,uBAAK,GAAE;IACP,IAAA,qBAAG,EAAC,CAAC,CAAC;IACN,IAAA,qBAAG,EAAC,IAAI,CAAC;IACT,IAAA,4BAAU,GAAE;;0EACkB;AAK/B;IAHC,IAAA,6BAAmB,EAAC,EAAE,WAAW,EAAE,4CAA4C,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IACjG,IAAA,2BAAS,GAAE;IACX,IAAA,4BAAU,GAAE;;4DACK;AAUlB;IARC,IAAA,6BAAmB,EAAC;QACjB,WAAW,EAAE,4EAA4E;QACzF,OAAO,EAAE,GAAG;KACf,CAAC;IACD,IAAA,wBAAI,EAAC,GAAG,EAAE,CAAC,MAAM,CAAC;IAClB,IAAA,uBAAK,GAAE;IACP,IAAA,qBAAG,EAAC,CAAC,CAAC;IACN,IAAA,4BAAU,GAAE;;6DACK;AAKlB;IAHC,IAAA,6BAAmB,EAAC,EAAE,IAAI,EAAE,+BAAW,EAAE,WAAW,EAAE,sDAAsD,EAAE,CAAC;IAC/G,IAAA,wBAAM,EAAC,+BAAW,CAAC;IACnB,IAAA,4BAAU,GAAE;;gEACa;AAM1B;IAJC,IAAA,6BAAmB,EAAC,EAAE,WAAW,EAAE,+CAA+C,EAAE,OAAO,EAAE,wBAAwB,EAAE,CAAC;IACxH,IAAA,0BAAQ,GAAE;IACV,IAAA,2BAAS,EAAC,GAAG,CAAC;IACd,IAAA,4BAAU,GAAE;;uEACe;AAM5B;IAJC,IAAA,6BAAmB,EAAC,EAAE,WAAW,EAAE,oCAAoC,EAAE,OAAO,EAAE,eAAe,EAAE,CAAC;IACpG,IAAA,0BAAQ,GAAE;IACV,IAAA,2BAAS,EAAC,EAAE,CAAC;IACb,IAAA,4BAAU,GAAE;;wEACgB;AAM7B;IAJC,IAAA,6BAAmB,EAAC,EAAE,WAAW,EAAE,6BAA6B,EAAE,OAAO,EAAE,eAAe,EAAE,CAAC;IAC7F,IAAA,yBAAO,GAAE;IACT,IAAA,2BAAS,EAAC,GAAG,CAAC;IACd,IAAA,4BAAU,GAAE;;wEACgB"}
|
|
@@ -1,5 +1,6 @@
|
|
|
1
1
|
"use strict";
|
|
2
2
|
Object.defineProperty(exports, "__esModule", { value: true });
|
|
3
|
+
exports.SECRET_KEY_FRAGMENTS = void 0;
|
|
3
4
|
exports.truncateForPartner = truncateForPartner;
|
|
4
5
|
exports.buildPartnerIssueText = buildPartnerIssueText;
|
|
5
6
|
exports.maskPartnerIdentifier = maskPartnerIdentifier;
|
|
@@ -80,8 +81,16 @@ function sanitizePartnerPayload(value, depth = 0) {
|
|
|
80
81
|
}
|
|
81
82
|
return result;
|
|
82
83
|
}
|
|
83
|
-
/**
|
|
84
|
-
|
|
84
|
+
/**
|
|
85
|
+
* Substrings that mark a key as carrying a secret.
|
|
86
|
+
*
|
|
87
|
+
* Deliberately broad, including a bare `key` and `bearer`. Over-redacting a
|
|
88
|
+
* field in an audit record costs a little diagnostic detail; under-redacting
|
|
89
|
+
* one writes a partner's API key into a table an operator can read. Partners do
|
|
90
|
+
* not agree on a name for a secret, so the list matches on substring and
|
|
91
|
+
* case-insensitively.
|
|
92
|
+
*/
|
|
93
|
+
exports.SECRET_KEY_FRAGMENTS = [
|
|
85
94
|
'apikey',
|
|
86
95
|
'api_key',
|
|
87
96
|
'secret',
|
|
@@ -90,14 +99,16 @@ const SECRET_KEY_FRAGMENTS = [
|
|
|
90
99
|
'token',
|
|
91
100
|
'authorization',
|
|
92
101
|
'auth',
|
|
102
|
+
'bearer',
|
|
93
103
|
'credential',
|
|
94
104
|
'signature',
|
|
95
105
|
'privatekey',
|
|
96
106
|
'private_key',
|
|
107
|
+
'key',
|
|
97
108
|
];
|
|
98
109
|
function isSecretKey(key) {
|
|
99
110
|
const normalized = key.toLowerCase();
|
|
100
|
-
return SECRET_KEY_FRAGMENTS.some((fragment) => normalized.includes(fragment));
|
|
111
|
+
return exports.SECRET_KEY_FRAGMENTS.some((fragment) => normalized.includes(fragment));
|
|
101
112
|
}
|
|
102
113
|
/**
|
|
103
114
|
* A URL safe to store on an attempt record: origin and path only, with any
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"partner-payload.util.js","sourceRoot":"","sources":["../../../../../src/modules/partner/utils/partner-payload.util.ts"],"names":[],"mappings":"
|
|
1
|
+
{"version":3,"file":"partner-payload.util.js","sourceRoot":"","sources":["../../../../../src/modules/partner/utils/partner-payload.util.ts"],"names":[],"mappings":";;;AASA,gDAKC;AASD,sDAeC;AAUD,sDAMC;AAYD,wDAUC;AAwCD,wCAKC;AAzHD,gFAA2E;AAE3E;;;;;;GAMG;AACH,SAAgB,kBAAkB,CAAC,KAAgC,EAAE,SAAiB;IAClF,IAAI,KAAK,IAAI,IAAI;QAAE,OAAO,SAAS,CAAC;IACpC,MAAM,OAAO,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,CAAC;IACrC,IAAI,OAAO,KAAK,EAAE;QAAE,OAAO,SAAS,CAAC;IACrC,OAAO,OAAO,CAAC,MAAM,IAAI,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC;AAC/E,CAAC;AAED;;;;;;GAMG;AACH,SAAgB,qBAAqB,CAAC,KAKrC;;IACG,MAAM,SAAS,GAAG,MAAA,KAAK,CAAC,SAAS,mCAAI,6CAAoB,CAAC,gBAAgB,CAAC;IAC3E,MAAM,QAAQ,GAAG,CAAC,KAAK,CAAC,QAAQ,EAAE,KAAK,CAAC,YAAY,CAAC;SAChD,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;SAC/C,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC;SACvB,IAAI,CAAC,KAAK,CAAC,CAAC;IACjB,MAAM,WAAW,GAAG,KAAK,CAAC,WAAW,IAAI,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,IAAI,EAAE,CAAC;IAEtF,MAAM,QAAQ,GAAG,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC7E,OAAO,kBAAkB,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC;AACnD,CAAC;AAED;;;;;;;GAOG;AACH,SAAgB,qBAAqB,CAAC,KAAgC;IAClE,IAAI,KAAK,IAAI,IAAI;QAAE,OAAO,SAAS,CAAC;IACpC,MAAM,GAAG,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,CAAC;IACjC,IAAI,GAAG,KAAK,EAAE;QAAE,OAAO,SAAS,CAAC;IACjC,IAAI,GAAG,CAAC,MAAM,IAAI,CAAC;QAAE,OAAO,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC;IACpD,OAAO,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,MAAM,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;AACnD,CAAC;AAED;;;;;;;;;GASG;AACH,SAAgB,sBAAsB,CAAC,KAAc,EAAE,KAAK,GAAG,CAAC;IAC5D,IAAI,KAAK,GAAG,CAAC,IAAI,KAAK,IAAI,IAAI;QAAE,OAAO,KAAK,CAAC;IAC7C,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,sBAAsB,CAAC,IAAI,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC;IAC9F,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IAE5C,MAAM,MAAM,GAA4B,EAAE,CAAC;IAC3C,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAgC,CAAC,EAAE,CAAC;QAC1E,MAAM,CAAC,GAAG,CAAC,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,sBAAsB,CAAC,KAAK,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC;IAC7F,CAAC;IACD,OAAO,MAAM,CAAC;AAClB,CAAC;AAED;;;;;;;;GAQG;AACU,QAAA,oBAAoB,GAAG;IAChC,QAAQ;IACR,SAAS;IACT,QAAQ;IACR,UAAU;IACV,QAAQ;IACR,OAAO;IACP,eAAe;IACf,MAAM;IACN,QAAQ;IACR,YAAY;IACZ,WAAW;IACX,YAAY;IACZ,aAAa;IACb,KAAK;CACR,CAAC;AAEF,SAAS,WAAW,CAAC,GAAW;IAC5B,MAAM,UAAU,GAAG,GAAG,CAAC,WAAW,EAAE,CAAC;IACrC,OAAO,4BAAoB,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC;AAClF,CAAC;AAED;;;;;;GAMG;AACH,SAAgB,cAAc,CAAC,GAA8B;IACzD,IAAI,GAAG,IAAI,IAAI;QAAE,OAAO,EAAE,CAAC;IAC3B,MAAM,GAAG,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;IACxB,MAAM,UAAU,GAAG,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IACpC,OAAO,UAAU,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,UAAU,CAAC,aAAa,CAAC;AAC9E,CAAC"}
|
|
@@ -9,7 +9,7 @@ var __metadata = (this && this.__metadata) || function (k, v) {
|
|
|
9
9
|
};
|
|
10
10
|
import { ApiProperty, ApiPropertyOptional } from '@nestjs/swagger';
|
|
11
11
|
import { Type } from 'class-transformer';
|
|
12
|
-
import { ArrayNotEmpty, IsArray, IsBoolean, IsEmail, IsEnum, IsInt, IsObject, IsOptional, IsPositive, IsString, IsUrl, Max, MaxLength, Min, } from 'class-validator';
|
|
12
|
+
import { ArrayNotEmpty, IsArray, IsBoolean, IsEmail, IsEnum, IsInt, IsObject, IsOptional, IsPositive, IsString, IsUrl, Matches, Max, MaxLength, Min, } from 'class-validator';
|
|
13
13
|
import { CountryCode } from '../../country/enums/country-code.enum';
|
|
14
14
|
import { PartnerIntegrationEnvironment } from '../enums/partner-integration-environment.enum';
|
|
15
15
|
import { PartnerProviderCode } from '../enums/partner-provider-code.enum';
|
|
@@ -82,7 +82,21 @@ __decorate([
|
|
|
82
82
|
example: 'RESCUE_CO_GARDAWORLD_API_KEY',
|
|
83
83
|
}),
|
|
84
84
|
IsString(),
|
|
85
|
-
MaxLength(
|
|
85
|
+
MaxLength(128)
|
|
86
|
+
/**
|
|
87
|
+
* Constrained to a secret NAME, not free text.
|
|
88
|
+
*
|
|
89
|
+
* clarion-partner-services interpolates this straight into a Secret Manager
|
|
90
|
+
* resource path, and it is set by a tenant admin through the web admin - so
|
|
91
|
+
* a slash would be enough to reach a secret belonging to another service.
|
|
92
|
+
* The service enforces the same rule independently; this is here so the
|
|
93
|
+
* caller gets a useful message instead of a 500, and so a future consumer
|
|
94
|
+
* inherits the constraint.
|
|
95
|
+
*/
|
|
96
|
+
,
|
|
97
|
+
Matches(/^[A-Za-z0-9_-]+$/, {
|
|
98
|
+
message: 'credentialReference must be a secret NAME: letters, digits, underscores and hyphens only.',
|
|
99
|
+
}),
|
|
86
100
|
__metadata("design:type", String)
|
|
87
101
|
], CreatePartnerIntegrationDto.prototype, "credentialReference", void 0);
|
|
88
102
|
__decorate([
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"create-partner-integration.dto.js","sourceRoot":"","sources":["../../../../../src/modules/partner/dtos/create-partner-integration.dto.ts"],"names":[],"mappings":";;;;;;;;;AAAA,OAAO,EAAE,WAAW,EAAE,mBAAmB,EAAE,MAAM,iBAAiB,CAAC;AACnE,OAAO,EAAE,IAAI,EAAE,MAAM,mBAAmB,CAAC;AACzC,OAAO,EACH,aAAa,EACb,OAAO,EACP,SAAS,EACT,OAAO,EACP,MAAM,EACN,KAAK,EACL,QAAQ,EACR,UAAU,EACV,UAAU,EACV,QAAQ,EACR,KAAK,EACL,GAAG,EACH,SAAS,EACT,GAAG,GACN,MAAM,iBAAiB,CAAC;AACzB,OAAO,EAAE,WAAW,EAAE,MAAM,uCAAuC,CAAC;AACpE,OAAO,EAAE,6BAA6B,EAAE,MAAM,+CAA+C,CAAC;AAC9F,OAAO,EAAE,mBAAmB,EAAE,MAAM,qCAAqC,CAAC;AAC1E,OAAO,EAAE,kBAAkB,EAAE,MAAM,oCAAoC,CAAC;AACxE,OAAO,EAAE,wBAAwB,EAAE,MAAM,0CAA0C,CAAC;AAEpF;;;;;;GAMG;AACH,MAAM,OAAO,2BAA2B;
|
|
1
|
+
{"version":3,"file":"create-partner-integration.dto.js","sourceRoot":"","sources":["../../../../../src/modules/partner/dtos/create-partner-integration.dto.ts"],"names":[],"mappings":";;;;;;;;;AAAA,OAAO,EAAE,WAAW,EAAE,mBAAmB,EAAE,MAAM,iBAAiB,CAAC;AACnE,OAAO,EAAE,IAAI,EAAE,MAAM,mBAAmB,CAAC;AACzC,OAAO,EACH,aAAa,EACb,OAAO,EACP,SAAS,EACT,OAAO,EACP,MAAM,EACN,KAAK,EACL,QAAQ,EACR,UAAU,EACV,UAAU,EACV,QAAQ,EACR,KAAK,EACL,OAAO,EACP,GAAG,EACH,SAAS,EACT,GAAG,GACN,MAAM,iBAAiB,CAAC;AACzB,OAAO,EAAE,WAAW,EAAE,MAAM,uCAAuC,CAAC;AACpE,OAAO,EAAE,6BAA6B,EAAE,MAAM,+CAA+C,CAAC;AAC9F,OAAO,EAAE,mBAAmB,EAAE,MAAM,qCAAqC,CAAC;AAC1E,OAAO,EAAE,kBAAkB,EAAE,MAAM,oCAAoC,CAAC;AACxE,OAAO,EAAE,wBAAwB,EAAE,MAAM,0CAA0C,CAAC;AAEpF;;;;;;GAMG;AACH,MAAM,OAAO,2BAA2B;CAiJvC;AAxIG;IARC,mBAAmB,CAAC;QACjB,WAAW,EAAE,2FAA2F;QACxG,OAAO,EAAE,EAAE;KACd,CAAC;IACD,IAAI,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC;IAClB,KAAK,EAAE;IACP,UAAU,EAAE;IACZ,UAAU,EAAE;;mEACW;AAUxB;IARC,mBAAmB,CAAC;QACjB,WAAW,EAAE,iFAAiF;QAC9F,OAAO,EAAE,EAAE;KACd,CAAC;IACD,IAAI,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC;IAClB,KAAK,EAAE;IACP,UAAU,EAAE;IACZ,UAAU,EAAE;;oEACY;AAIzB;IAFC,WAAW,CAAC,EAAE,IAAI,EAAE,mBAAmB,EAAE,WAAW,EAAE,oCAAoC,EAAE,CAAC;IAC7F,MAAM,CAAC,mBAAmB,CAAC;;iEACO;AAKnC;IAHC,WAAW,CAAC,EAAE,WAAW,EAAE,wBAAwB,EAAE,OAAO,EAAE,kCAAkC,EAAE,CAAC;IACnG,QAAQ,EAAE;IACV,SAAS,CAAC,GAAG,CAAC;;yDACD;AAQd;IANC,mBAAmB,CAAC;QACjB,IAAI,EAAE,6BAA6B;QACnC,WAAW,EAAE,+DAA+D;KAC/E,CAAC;IACD,MAAM,CAAC,6BAA6B,CAAC;IACrC,UAAU,EAAE;;gEAC+B;AAS5C;IAPC,mBAAmB,CAAC;QACjB,WAAW,EAAE,oFAAoF;QACjG,OAAO,EAAE,uBAAuB;KACnC,CAAC;IACD,KAAK,CAAC,EAAE,WAAW,EAAE,KAAK,EAAE,CAAC;IAC7B,SAAS,CAAC,GAAG,CAAC;IACd,UAAU,EAAE;;4DACI;AAuBjB;IArBC,WAAW,CAAC;QACT,WAAW,EACP,uJAAuJ;QAC3J,OAAO,EAAE,8BAA8B;KAC1C,CAAC;IACD,QAAQ,EAAE;IACV,SAAS,CAAC,GAAG,CAAC;IACf;;;;;;;;;OASG;;IACF,OAAO,CAAC,kBAAkB,EAAE;QACzB,OAAO,EACH,2FAA2F;KAClG,CAAC;;wEAC2B;AAQ7B;IANC,mBAAmB,CAAC;QACjB,WAAW,EAAE,8EAA8E;QAC3F,OAAO,EAAE,EAAE,MAAM,EAAE,YAAY,EAAE;KACpC,CAAC;IACD,QAAQ,EAAE;IACV,UAAU,EAAE;;kEAC2B;AAWxC;IATC,WAAW,CAAC;QACT,IAAI,EAAE,wBAAwB;QAC9B,OAAO,EAAE,IAAI;QACb,WAAW,EAAE,2EAA2E;QACxF,OAAO,EAAE,CAAC,wBAAwB,CAAC,SAAS,CAAC;KAChD,CAAC;IACD,OAAO,EAAE;IACT,aAAa,EAAE;IACf,MAAM,CAAC,wBAAwB,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;;iEACP;AAQ1C;IANC,mBAAmB,CAAC;QACjB,IAAI,EAAE,kBAAkB;QACxB,WAAW,EAAE,6FAA6F;KAC7G,CAAC;IACD,MAAM,CAAC,kBAAkB,CAAC;IAC1B,UAAU,EAAE;;gEACoB;AAWjC;IATC,mBAAmB,CAAC;QACjB,WAAW,EAAE,gGAAgG;QAC7G,OAAO,EAAE,EAAE;KACd,CAAC;IACD,IAAI,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC;IAClB,KAAK,EAAE;IACP,GAAG,CAAC,CAAC,CAAC;IACN,GAAG,CAAC,IAAI,CAAC;IACT,UAAU,EAAE;;0EACkB;AAK/B;IAHC,mBAAmB,CAAC,EAAE,WAAW,EAAE,4CAA4C,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IACjG,SAAS,EAAE;IACX,UAAU,EAAE;;4DACK;AAUlB;IARC,mBAAmB,CAAC;QACjB,WAAW,EAAE,4EAA4E;QACzF,OAAO,EAAE,GAAG;KACf,CAAC;IACD,IAAI,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC;IAClB,KAAK,EAAE;IACP,GAAG,CAAC,CAAC,CAAC;IACN,UAAU,EAAE;;6DACK;AAKlB;IAHC,mBAAmB,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,WAAW,EAAE,sDAAsD,EAAE,CAAC;IAC/G,MAAM,CAAC,WAAW,CAAC;IACnB,UAAU,EAAE;;gEACa;AAM1B;IAJC,mBAAmB,CAAC,EAAE,WAAW,EAAE,+CAA+C,EAAE,OAAO,EAAE,wBAAwB,EAAE,CAAC;IACxH,QAAQ,EAAE;IACV,SAAS,CAAC,GAAG,CAAC;IACd,UAAU,EAAE;;uEACe;AAM5B;IAJC,mBAAmB,CAAC,EAAE,WAAW,EAAE,oCAAoC,EAAE,OAAO,EAAE,eAAe,EAAE,CAAC;IACpG,QAAQ,EAAE;IACV,SAAS,CAAC,EAAE,CAAC;IACb,UAAU,EAAE;;wEACgB;AAM7B;IAJC,mBAAmB,CAAC,EAAE,WAAW,EAAE,6BAA6B,EAAE,OAAO,EAAE,eAAe,EAAE,CAAC;IAC7F,OAAO,EAAE;IACT,SAAS,CAAC,GAAG,CAAC;IACd,UAAU,EAAE;;wEACgB"}
|
|
@@ -73,8 +73,16 @@ export function sanitizePartnerPayload(value, depth = 0) {
|
|
|
73
73
|
}
|
|
74
74
|
return result;
|
|
75
75
|
}
|
|
76
|
-
/**
|
|
77
|
-
|
|
76
|
+
/**
|
|
77
|
+
* Substrings that mark a key as carrying a secret.
|
|
78
|
+
*
|
|
79
|
+
* Deliberately broad, including a bare `key` and `bearer`. Over-redacting a
|
|
80
|
+
* field in an audit record costs a little diagnostic detail; under-redacting
|
|
81
|
+
* one writes a partner's API key into a table an operator can read. Partners do
|
|
82
|
+
* not agree on a name for a secret, so the list matches on substring and
|
|
83
|
+
* case-insensitively.
|
|
84
|
+
*/
|
|
85
|
+
export const SECRET_KEY_FRAGMENTS = [
|
|
78
86
|
'apikey',
|
|
79
87
|
'api_key',
|
|
80
88
|
'secret',
|
|
@@ -83,10 +91,12 @@ const SECRET_KEY_FRAGMENTS = [
|
|
|
83
91
|
'token',
|
|
84
92
|
'authorization',
|
|
85
93
|
'auth',
|
|
94
|
+
'bearer',
|
|
86
95
|
'credential',
|
|
87
96
|
'signature',
|
|
88
97
|
'privatekey',
|
|
89
98
|
'private_key',
|
|
99
|
+
'key',
|
|
90
100
|
];
|
|
91
101
|
function isSecretKey(key) {
|
|
92
102
|
const normalized = key.toLowerCase();
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"partner-payload.util.js","sourceRoot":"","sources":["../../../../../src/modules/partner/utils/partner-payload.util.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,oBAAoB,EAAE,MAAM,qCAAqC,CAAC;AAE3E;;;;;;GAMG;AACH,MAAM,UAAU,kBAAkB,CAAC,KAAgC,EAAE,SAAiB;IAClF,IAAI,KAAK,IAAI,IAAI;QAAE,OAAO,SAAS,CAAC;IACpC,MAAM,OAAO,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,CAAC;IACrC,IAAI,OAAO,KAAK,EAAE;QAAE,OAAO,SAAS,CAAC;IACrC,OAAO,OAAO,CAAC,MAAM,IAAI,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC;AAC/E,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,qBAAqB,CAAC,KAKrC;;IACG,MAAM,SAAS,GAAG,MAAA,KAAK,CAAC,SAAS,mCAAI,oBAAoB,CAAC,gBAAgB,CAAC;IAC3E,MAAM,QAAQ,GAAG,CAAC,KAAK,CAAC,QAAQ,EAAE,KAAK,CAAC,YAAY,CAAC;SAChD,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;SAC/C,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC;SACvB,IAAI,CAAC,KAAK,CAAC,CAAC;IACjB,MAAM,WAAW,GAAG,KAAK,CAAC,WAAW,IAAI,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,IAAI,EAAE,CAAC;IAEtF,MAAM,QAAQ,GAAG,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC7E,OAAO,kBAAkB,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC;AACnD,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,qBAAqB,CAAC,KAAgC;IAClE,IAAI,KAAK,IAAI,IAAI;QAAE,OAAO,SAAS,CAAC;IACpC,MAAM,GAAG,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,CAAC;IACjC,IAAI,GAAG,KAAK,EAAE;QAAE,OAAO,SAAS,CAAC;IACjC,IAAI,GAAG,CAAC,MAAM,IAAI,CAAC;QAAE,OAAO,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC;IACpD,OAAO,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,MAAM,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;AACnD,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,sBAAsB,CAAC,KAAc,EAAE,KAAK,GAAG,CAAC;IAC5D,IAAI,KAAK,GAAG,CAAC,IAAI,KAAK,IAAI,IAAI;QAAE,OAAO,KAAK,CAAC;IAC7C,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,sBAAsB,CAAC,IAAI,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC;IAC9F,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IAE5C,MAAM,MAAM,GAA4B,EAAE,CAAC;IAC3C,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAgC,CAAC,EAAE,CAAC;QAC1E,MAAM,CAAC,GAAG,CAAC,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,sBAAsB,CAAC,KAAK,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC;IAC7F,CAAC;IACD,OAAO,MAAM,CAAC;AAClB,CAAC;AAED
|
|
1
|
+
{"version":3,"file":"partner-payload.util.js","sourceRoot":"","sources":["../../../../../src/modules/partner/utils/partner-payload.util.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,oBAAoB,EAAE,MAAM,qCAAqC,CAAC;AAE3E;;;;;;GAMG;AACH,MAAM,UAAU,kBAAkB,CAAC,KAAgC,EAAE,SAAiB;IAClF,IAAI,KAAK,IAAI,IAAI;QAAE,OAAO,SAAS,CAAC;IACpC,MAAM,OAAO,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,CAAC;IACrC,IAAI,OAAO,KAAK,EAAE;QAAE,OAAO,SAAS,CAAC;IACrC,OAAO,OAAO,CAAC,MAAM,IAAI,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC;AAC/E,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,qBAAqB,CAAC,KAKrC;;IACG,MAAM,SAAS,GAAG,MAAA,KAAK,CAAC,SAAS,mCAAI,oBAAoB,CAAC,gBAAgB,CAAC;IAC3E,MAAM,QAAQ,GAAG,CAAC,KAAK,CAAC,QAAQ,EAAE,KAAK,CAAC,YAAY,CAAC;SAChD,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;SAC/C,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC;SACvB,IAAI,CAAC,KAAK,CAAC,CAAC;IACjB,MAAM,WAAW,GAAG,KAAK,CAAC,WAAW,IAAI,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,IAAI,EAAE,CAAC;IAEtF,MAAM,QAAQ,GAAG,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC7E,OAAO,kBAAkB,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC;AACnD,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,qBAAqB,CAAC,KAAgC;IAClE,IAAI,KAAK,IAAI,IAAI;QAAE,OAAO,SAAS,CAAC;IACpC,MAAM,GAAG,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,CAAC;IACjC,IAAI,GAAG,KAAK,EAAE;QAAE,OAAO,SAAS,CAAC;IACjC,IAAI,GAAG,CAAC,MAAM,IAAI,CAAC;QAAE,OAAO,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC;IACpD,OAAO,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,MAAM,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;AACnD,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,sBAAsB,CAAC,KAAc,EAAE,KAAK,GAAG,CAAC;IAC5D,IAAI,KAAK,GAAG,CAAC,IAAI,KAAK,IAAI,IAAI;QAAE,OAAO,KAAK,CAAC;IAC7C,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,sBAAsB,CAAC,IAAI,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC;IAC9F,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IAE5C,MAAM,MAAM,GAA4B,EAAE,CAAC;IAC3C,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAgC,CAAC,EAAE,CAAC;QAC1E,MAAM,CAAC,GAAG,CAAC,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,sBAAsB,CAAC,KAAK,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC;IAC7F,CAAC;IACD,OAAO,MAAM,CAAC;AAClB,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAAG;IAChC,QAAQ;IACR,SAAS;IACT,QAAQ;IACR,UAAU;IACV,QAAQ;IACR,OAAO;IACP,eAAe;IACf,MAAM;IACN,QAAQ;IACR,YAAY;IACZ,WAAW;IACX,YAAY;IACZ,aAAa;IACb,KAAK;CACR,CAAC;AAEF,SAAS,WAAW,CAAC,GAAW;IAC5B,MAAM,UAAU,GAAG,GAAG,CAAC,WAAW,EAAE,CAAC;IACrC,OAAO,oBAAoB,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC;AAClF,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,cAAc,CAAC,GAA8B;IACzD,IAAI,GAAG,IAAI,IAAI;QAAE,OAAO,EAAE,CAAC;IAC3B,MAAM,GAAG,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;IACxB,MAAM,UAAU,GAAG,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IACpC,OAAO,UAAU,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,UAAU,CAAC,aAAa,CAAC;AAC9E,CAAC"}
|
|
@@ -39,6 +39,16 @@ export declare function maskPartnerIdentifier(value: string | null | undefined):
|
|
|
39
39
|
* shows what was sent.
|
|
40
40
|
*/
|
|
41
41
|
export declare function sanitizePartnerPayload(value: unknown, depth?: number): unknown;
|
|
42
|
+
/**
|
|
43
|
+
* Substrings that mark a key as carrying a secret.
|
|
44
|
+
*
|
|
45
|
+
* Deliberately broad, including a bare `key` and `bearer`. Over-redacting a
|
|
46
|
+
* field in an audit record costs a little diagnostic detail; under-redacting
|
|
47
|
+
* one writes a partner's API key into a table an operator can read. Partners do
|
|
48
|
+
* not agree on a name for a secret, so the list matches on substring and
|
|
49
|
+
* case-insensitively.
|
|
50
|
+
*/
|
|
51
|
+
export declare const SECRET_KEY_FRAGMENTS: string[];
|
|
42
52
|
/**
|
|
43
53
|
* A URL safe to store on an attempt record: origin and path only, with any
|
|
44
54
|
* query string replaced.
|