n8n 1.110.1 → 1.112.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (148) hide show
  1. package/dist/auth/auth.service.js +2 -0
  2. package/dist/auth/auth.service.js.map +1 -1
  3. package/dist/build.tsbuildinfo +1 -1
  4. package/dist/commands/start.d.ts +1 -0
  5. package/dist/commands/start.js +17 -0
  6. package/dist/commands/start.js.map +1 -1
  7. package/dist/constants.d.ts +2 -0
  8. package/dist/constants.js +3 -1
  9. package/dist/constants.js.map +1 -1
  10. package/dist/controllers/dynamic-node-parameters.controller.js +6 -16
  11. package/dist/controllers/dynamic-node-parameters.controller.js.map +1 -1
  12. package/dist/controllers/e2e.controller.js +1 -0
  13. package/dist/controllers/e2e.controller.js.map +1 -1
  14. package/dist/controllers/folder.controller.d.ts +7 -2
  15. package/dist/controllers/folder.controller.js +24 -3
  16. package/dist/controllers/folder.controller.js.map +1 -1
  17. package/dist/controllers/role.controller.d.ts +5 -4
  18. package/dist/controllers/role.controller.js +21 -15
  19. package/dist/controllers/role.controller.js.map +1 -1
  20. package/dist/environments.ee/source-control/source-control.service.ee.js +2 -5
  21. package/dist/environments.ee/source-control/source-control.service.ee.js.map +1 -1
  22. package/dist/events/maps/relay.event-map.d.ts +4 -0
  23. package/dist/execution-lifecycle/execution-lifecycle-hooks.js +8 -1
  24. package/dist/execution-lifecycle/execution-lifecycle-hooks.js.map +1 -1
  25. package/dist/executions/execution-recovery.service.js +2 -1
  26. package/dist/executions/execution-recovery.service.js.map +1 -1
  27. package/dist/executions/execution.service.d.ts +2 -2
  28. package/dist/executions/execution.service.js +14 -1
  29. package/dist/executions/execution.service.js.map +1 -1
  30. package/dist/executions/execution.types.d.ts +2 -5
  31. package/dist/executions/executions.controller.d.ts +2 -2
  32. package/dist/middlewares/list-query/dtos/workflow.filter.dto.d.ts +1 -0
  33. package/dist/middlewares/list-query/dtos/workflow.filter.dto.js +6 -0
  34. package/dist/middlewares/list-query/dtos/workflow.filter.dto.js.map +1 -1
  35. package/dist/modules/community-packages/npm-utils.js +10 -0
  36. package/dist/modules/community-packages/npm-utils.js.map +1 -1
  37. package/dist/modules/data-table/data-store-aggregate.controller.d.ts +7 -1
  38. package/dist/modules/data-table/data-store-aggregate.controller.js +15 -2
  39. package/dist/modules/data-table/data-store-aggregate.controller.js.map +1 -1
  40. package/dist/modules/data-table/data-store-column.repository.js +1 -1
  41. package/dist/modules/data-table/data-store-column.repository.js.map +1 -1
  42. package/dist/modules/data-table/data-store-proxy.service.d.ts +3 -3
  43. package/dist/modules/data-table/data-store-proxy.service.js +13 -13
  44. package/dist/modules/data-table/data-store-proxy.service.js.map +1 -1
  45. package/dist/modules/data-table/data-store-rows.repository.d.ts +13 -20
  46. package/dist/modules/data-table/data-store-rows.repository.js +144 -125
  47. package/dist/modules/data-table/data-store-rows.repository.js.map +1 -1
  48. package/dist/modules/data-table/data-store-size-validator.service.d.ts +16 -0
  49. package/dist/modules/data-table/data-store-size-validator.service.js +79 -0
  50. package/dist/modules/data-table/data-store-size-validator.service.js.map +1 -0
  51. package/dist/modules/data-table/data-store.controller.d.ts +9 -9
  52. package/dist/modules/data-table/data-store.controller.js +16 -14
  53. package/dist/modules/data-table/data-store.controller.js.map +1 -1
  54. package/dist/modules/data-table/data-store.repository.d.ts +4 -1
  55. package/dist/modules/data-table/data-store.repository.js +47 -5
  56. package/dist/modules/data-table/data-store.repository.js.map +1 -1
  57. package/dist/modules/data-table/data-store.service.d.ts +19 -11
  58. package/dist/modules/data-table/data-store.service.js +102 -73
  59. package/dist/modules/data-table/data-store.service.js.map +1 -1
  60. package/dist/modules/data-table/data-store.types.d.ts +2 -0
  61. package/dist/modules/data-table/data-store.types.js +7 -0
  62. package/dist/modules/data-table/data-store.types.js.map +1 -1
  63. package/dist/modules/data-table/data-table.module.js +1 -1
  64. package/dist/modules/data-table/utils/sql-utils.d.ts +2 -5
  65. package/dist/modules/data-table/utils/sql-utils.js +7 -17
  66. package/dist/modules/data-table/utils/sql-utils.js.map +1 -1
  67. package/dist/public-api/types.d.ts +5 -0
  68. package/dist/public-api/v1/handlers/executions/executions.handler.d.ts +1 -0
  69. package/dist/public-api/v1/handlers/executions/executions.handler.js +34 -1
  70. package/dist/public-api/v1/handlers/executions/executions.handler.js.map +1 -1
  71. package/dist/public-api/v1/openapi.yml +60 -7
  72. package/dist/push/abstract.push.d.ts +2 -2
  73. package/dist/push/abstract.push.js +4 -4
  74. package/dist/push/abstract.push.js.map +1 -1
  75. package/dist/push/index.d.ts +3 -2
  76. package/dist/push/index.js +30 -26
  77. package/dist/push/index.js.map +1 -1
  78. package/dist/push/origin-validator.d.ts +13 -0
  79. package/dist/push/origin-validator.js +145 -0
  80. package/dist/push/origin-validator.js.map +1 -0
  81. package/dist/push/websocket.push.d.ts +1 -1
  82. package/dist/push/websocket.push.js +2 -2
  83. package/dist/push/websocket.push.js.map +1 -1
  84. package/dist/scaling/constants.d.ts +2 -2
  85. package/dist/scaling/pubsub/pubsub.event-map.d.ts +2 -0
  86. package/dist/scaling/pubsub/pubsub.registry.d.ts +1 -0
  87. package/dist/scaling/pubsub/pubsub.registry.js +9 -2
  88. package/dist/scaling/pubsub/pubsub.registry.js.map +1 -1
  89. package/dist/scaling/pubsub/pubsub.types.d.ts +2 -1
  90. package/dist/scaling/scaling.service.d.ts +1 -1
  91. package/dist/scaling/scaling.service.js +0 -4
  92. package/dist/scaling/scaling.service.js.map +1 -1
  93. package/dist/server.js +22 -23
  94. package/dist/server.js.map +1 -1
  95. package/dist/services/dynamic-node-parameters.service.d.ts +7 -1
  96. package/dist/services/dynamic-node-parameters.service.js +15 -2
  97. package/dist/services/dynamic-node-parameters.service.js.map +1 -1
  98. package/dist/services/frontend.service.js +5 -0
  99. package/dist/services/frontend.service.js.map +1 -1
  100. package/dist/services/ownership.service.d.ts +1 -0
  101. package/dist/services/ownership.service.js +6 -0
  102. package/dist/services/ownership.service.js.map +1 -1
  103. package/dist/services/public-api-key.service.js +2 -0
  104. package/dist/services/public-api-key.service.js.map +1 -1
  105. package/dist/services/role.service.d.ts +2 -2
  106. package/dist/services/role.service.js +3 -3
  107. package/dist/services/role.service.js.map +1 -1
  108. package/dist/sso.ee/oidc/oidc.service.ee.d.ts +25 -4
  109. package/dist/sso.ee/oidc/oidc.service.ee.js +167 -22
  110. package/dist/sso.ee/oidc/oidc.service.ee.js.map +1 -1
  111. package/dist/sso.ee/oidc/routes/oidc.controller.ee.d.ts +6 -2
  112. package/dist/sso.ee/oidc/routes/oidc.controller.ee.js +41 -7
  113. package/dist/sso.ee/oidc/routes/oidc.controller.ee.js.map +1 -1
  114. package/dist/sso.ee/sso-helpers.d.ts +1 -0
  115. package/dist/sso.ee/sso-helpers.js +19 -0
  116. package/dist/sso.ee/sso-helpers.js.map +1 -1
  117. package/dist/task-runners/errors/missing-requirements.error.d.ts +6 -0
  118. package/dist/task-runners/errors/missing-requirements.error.js +17 -0
  119. package/dist/task-runners/errors/missing-requirements.error.js.map +1 -0
  120. package/dist/task-runners/internal-task-runner-disconnect-analyzer.d.ts +2 -2
  121. package/dist/task-runners/internal-task-runner-disconnect-analyzer.js +2 -2
  122. package/dist/task-runners/internal-task-runner-disconnect-analyzer.js.map +1 -1
  123. package/dist/task-runners/task-runner-module.d.ts +5 -3
  124. package/dist/task-runners/task-runner-module.js +25 -13
  125. package/dist/task-runners/task-runner-module.js.map +1 -1
  126. package/dist/task-runners/task-runner-process-base.d.ts +39 -0
  127. package/dist/task-runners/task-runner-process-base.js +111 -0
  128. package/dist/task-runners/task-runner-process-base.js.map +1 -0
  129. package/dist/task-runners/task-runner-process-js.d.ts +21 -0
  130. package/dist/task-runners/{task-runner-process.js → task-runner-process-js.js} +35 -108
  131. package/dist/task-runners/task-runner-process-js.js.map +1 -0
  132. package/dist/task-runners/task-runner-process-py.d.ts +15 -0
  133. package/dist/task-runners/task-runner-process-py.js +76 -0
  134. package/dist/task-runners/task-runner-process-py.js.map +1 -0
  135. package/dist/task-runners/task-runner-process-restart-loop-detector.d.ts +2 -2
  136. package/dist/task-runners/task-runner-process-restart-loop-detector.js.map +1 -1
  137. package/dist/user-management/email/templates/credentials-shared.handlebars +48 -40
  138. package/dist/user-management/email/templates/n8n-logo.png +0 -0
  139. package/dist/user-management/email/templates/password-reset-requested.handlebars +68 -60
  140. package/dist/user-management/email/templates/project-shared.handlebars +43 -35
  141. package/dist/user-management/email/templates/user-invited.handlebars +48 -40
  142. package/dist/user-management/email/templates/workflow-shared.handlebars +48 -40
  143. package/dist/workflows/workflow.request.d.ts +1 -0
  144. package/dist/workflows/workflow.service.ee.js +1 -0
  145. package/dist/workflows/workflow.service.ee.js.map +1 -1
  146. package/package.json +24 -18
  147. package/dist/task-runners/task-runner-process.d.ts +0 -36
  148. package/dist/task-runners/task-runner-process.js.map +0 -1
package/dist/services/role.service.js.map CHANGED
@@ -1 +1 @@
1
- {"version":3,"file":"role.service.js","sourceRoot":"","sources":["../../src/services/role.service.ts"],"names":[],"mappings":";;;;;;;;;;;;AACA,gCAaiB;AACjB,gCAAkC;AAElC,kDAQ0B;AAC1B,+CAA0D;AAE1D,kFAA6E;AAC7E,8EAAyE;AACzE,uCAAoC;AAG7B,IAAM,WAAW,GAAjB,MAAM,WAAW;IACvB,YACkB,OAAgB,EAChB,cAA8B,EAC9B,eAAgC;QAFhC,YAAO,GAAP,OAAO,CAAS;QAChB,mBAAc,GAAd,cAAc,CAAgB;QAC9B,oBAAe,GAAf,eAAe,CAAiB;IAC/C,CAAC;IAEI,eAAe,CAAC,IAAU;QACjC,OAAO;YACN,GAAG,IAAI;YACP,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;YACtC,QAAQ,EAAE,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC;SACxC,CAAC;IACH,CAAC;IAED,KAAK,CAAC,WAAW;QAChB,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,OAAO,EAAE,CAAC;QAClD,OAAO,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,CAAC;IAClD,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,IAAY;QACzB,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;QACxD,IAAI,IAAI,EAAE,CAAC;YACV,OAAO,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC;QACnC,CAAC;QACD,MAAM,IAAI,+BAAa,CAAC,gBAAgB,CAAC,CAAC;IAC3C,CAAC;IAED,KAAK,CAAC,gBAAgB,CAAC,IAAY;QAClC,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;QACxD,IAAI,CAAC,IAAI,EAAE,CAAC;YACX,MAAM,IAAI,+BAAa,CAAC,gBAAgB,CAAC,CAAC;QAC3C,CAAC;QACD,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;YACrB,MAAM,IAAI,mCAAe,CAAC,4BAA4B,CAAC,CAAC;QACzD,CAAC;QACD,MAAM,IAAI,CAAC,cAAc,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC;QAC7C,OAAO,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC;IACnC,CAAC;IAEO,KAAK,CAAC,aAAa,CAAC,UAAgC;QAC3D,IAAI,CAAC,UAAU,EAAE,CAAC;YACjB,OAAO,SAAS,CAAC;QAClB,CAAC;QAED,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC7B,OAAO,EAAE,CAAC;QACX,CAAC;QAED,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,eAAe,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC;QACjE,IAAI,MAAM,CAAC,MAAM,KAAK,UAAU,CAAC,MAAM,EAAE,CAAC;YACzC,MAAM,aAAa,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC,CAAC;YACxF,MAAM,IAAI,KAAK,CAAC,qCAAqC,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAClF,CAAC;QAED,OAAO,MAAM,CAAC;IACf,CAAC;IAED,KAAK,CAAC,gBAAgB,CAAC,IAAY,EAAE,OAAsB;QAC1D,MAAM,EAAE,WAAW,EAAE,WAAW,EAAE,MAAM,EAAE,UAAU,EAAE,GAAG,OAAO,CAAC;QAEjE,IAAI,CAAC;YACJ,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,UAAU,CAAC,IAAI,EAAE;gBAC9D,WAAW;gBACX,WAAW;gBACX,MAAM,EAAE,MAAM,IAAI,CAAC,aAAa,CAAC,UAAU,CAAC;aAC5C,CAAC,CAAC;YAEH,OAAO,IAAI,CAAC,eAAe,CAAC,WAAW,CAAC,CAAC;QAC1C,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,IAAI,KAAK,YAAY,wBAAS,IAAI,KAAK,CAAC,OAAO,KAAK,gBAAgB,EAAE,CAAC;gBACtE,MAAM,IAAI,+BAAa,CAAC,gBAAgB,CAAC,CAAC;YAC3C,CAAC;YAED,IAAI,KAAK,YAAY,wBAAS,IAAI,KAAK,CAAC,OAAO,KAAK,4BAA4B,EAAE,CAAC;gBAClF,MAAM,IAAI,mCAAe,CAAC,4BAA4B,CAAC,CAAC;YACzD,CAAC;YACD,MAAM,KAAK,CAAC;QACb,CAAC;IACF,CAAC;IAED,KAAK,CAAC,gBAAgB,CAAC,OAAsB;QAC5C,MAAM,IAAI,GAAG,IAAI,SAAI,EAAE,CAAC;QACxB,IAAI,CAAC,WAAW,GAAG,OAAO,CAAC,WAAW,CAAC;QACvC,IAAI,OAAO,CAAC,WAAW,EAAE,CAAC;YACzB,IAAI,CAAC,WAAW,GAAG,OAAO,CAAC,WAAW,CAAC;QACxC,CAAC;QACD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QACxD,IAAI,MAAM,KAAK,SAAS;YAAE,MAAM,IAAI,mCAAe,CAAC,qBAAqB,CAAC,CAAC;QAC3E,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QACrB,IAAI,CAAC,UAAU,GAAG,KAAK,CAAC;QACxB,IAAI,CAAC,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC;QACjC,IAAI,CAAC,IAAI,GAAG,GAAG,OAAO,CAAC,QAAQ,IAAI,OAAO,CAAC,WAAW,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,aAAa,EAAE,GAAG,CAAC,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC;QACjJ,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACzD,OAAO,IAAI,CAAC,eAAe,CAAC,WAAW,CAAC,CAAC;IAC1C,CAAC;IAED,KAAK,CAAC,eAAe,CACpB,SAAmB,EACnB,QAA0D;QAE1D,MAAM,eAAe,GAAG,IAAI,GAAG,CAAC,SAAS,CAAC,CAAC;QAC3C,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,WAAW,CAAC,KAAK,CAAC,IAAI,CAAC,eAAe,CAAC,EAAE,QAAQ,CAAC,CAAC;QAE3F,IAAI,KAAK,CAAC,MAAM,GAAG,eAAe,CAAC,IAAI,EAAE,CAAC;YACzC,MAAM,gBAAgB,GAAG,KAAK,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC,MAAM,CAC1D,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,KAAK,IAAI,CAAC,CACnD,CAAC;YACF,MAAM,IAAI,mCAAe,CACxB,gBAAgB,CAAC,MAAM,KAAK,CAAC;gBAC5B,CAAC,CAAC,QAAQ,gBAAgB,CAAC,CAAC,CAAC,iBAAiB;gBAC9C,CAAC,CAAC,SAAS,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC,eAAe,CACtD,CAAC;QACH,CAAC;IACF,CAAC;IAmBD,SAAS,CACR,SAKgD,EAChD,IAAU,EACV,oBAAuC;QAKvC,MAAM,MAAM,GAAG,SAAS,CAAC,MAAM,CAAC;QAChC,MAAM,MAAM,GAAG,SAGsB,CAAC;QAEtC,MAAM,CAAC,MAAM,GAAG,EAAE,CAAC;QAEnB,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;YAC1B,OAAO,MAAM,CAAC;QACf,CAAC;QAED,IAAI,CAAC,CAAC,QAAQ,IAAI,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM,IAAI,MAAM,CAAC,EAAE,CAAC;YAClD,MAAM,IAAI,8BAAe,CAAC,sDAAsD,CAAC,CAAC;QACnF,CAAC;QAED,MAAM,CAAC,MAAM,GAAG,IAAI,CAAC,qBAAqB,CACzC,QAAQ,IAAI,MAAM,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,YAAY,EAC9C,IAAI,EACJ,MAAM,EACN,oBAAoB,CACpB,CAAC;QAEF,OAAO,MAAM,CAAC;IACf,CAAC;IAED,qBAAqB,CACpB,IAA+B,EAC/B,IAAU,EACV,MAA8C,EAC9C,oBAAuC;QAEvC,MAAM,YAAY,GAAG,IAAA,oCAAsB,EAAC,IAAI,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC;QAC1D,MAAM,SAAS,GAAe,IAAI,GAAG,CAAC,YAAY,CAAC,CAAC;QACpD,KAAK,MAAM,YAAY,IAAI,MAAM,EAAE,CAAC;YACnC,MAAM,EAAE,GAAG,oBAAoB,CAAC,IAAI,CACnC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,KAAK,CAAC,YAAY,CAAC,SAAS,IAAI,YAAY,CAAC,OAAO,CAAC,EAAE,CAAC,CAC1E,CAAC;YACF,IAAI,aAAa,GAAY,EAAE,CAAC;YAChC,IAAI,EAAE,EAAE,CAAC;gBACR,aAAa,GAAG,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;YACnD,CAAC;YACD,MAAM,YAAY,GAAG,IAAA,2BAAa,EAAC,YAAY,CAAC,IAAI,CAAC,CAAC;YACtD,MAAM,YAAY,GAAG,IAAA,2BAAa,EACjC;gBACC,MAAM,EAAE,YAAY;gBACpB,OAAO,EAAE,aAAa;aACtB,EACD,EAAE,OAAO,EAAE,YAAY,EAAE,CACzB,CAAC;YACF,YAAY,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;QAC/C,CAAC;QACD,OAAO,CAAC,GAAG,SAAS,CAAC,CAAC,IAAI,EAAE,CAAC;IAC9B,CAAC;IAED,cAAc,CAAC,IAA2B;QAGzC,IAAI,CAAC,IAAA,2BAAa,EAAC,IAAI,CAAC,EAAE,CAAC;YAI1B,OAAO,IAAI,CAAC;QACb,CAAC;QAED,QAAQ,IAAI,EAAE,CAAC;YACd,KAAK,qCAAuB;gBAC3B,OAAO,IAAI,CAAC,OAAO,CAAC,0BAA0B,EAAE,CAAC;YAClD,KAAK,sCAAwB;gBAC5B,OAAO,IAAI,CAAC,OAAO,CAAC,2BAA2B,EAAE,CAAC;YACnD,KAAK,sCAAwB;gBAC5B,OAAO,IAAI,CAAC,OAAO,CAAC,2BAA2B,EAAE,CAAC;YACnD,KAAK,sBAAiB,CAAC,IAAI;gBAC1B,OAAO,IAAI,CAAC,OAAO,CAAC,6BAA6B,EAAE,CAAC;YACrD;gBAEC,OAAO,IAAI,CAAC;QACd,CAAC;IACF,CAAC;CACD,CAAA;AAjOY,kCAAW;sBAAX,WAAW;IADvB,IAAA,YAAO,GAAE;qCAGkB,iBAAO;QACA,mBAAc;QACb,oBAAe;GAJtC,WAAW,CAiOvB"}
1
+ {"version":3,"file":"role.service.js","sourceRoot":"","sources":["../../src/services/role.service.ts"],"names":[],"mappings":";;;;;;;;;;;;AACA,wDAAmD;AACnD,gCAaiB;AACjB,gCAAkC;AAElC,kDAQ0B;AAC1B,+CAA0D;AAE1D,kFAA6E;AAC7E,8EAAyE;AAGlE,IAAM,WAAW,GAAjB,MAAM,WAAW;IACvB,YACkB,OAAqB,EACrB,cAA8B,EAC9B,eAAgC;QAFhC,YAAO,GAAP,OAAO,CAAc;QACrB,mBAAc,GAAd,cAAc,CAAgB;QAC9B,oBAAe,GAAf,eAAe,CAAiB;IAC/C,CAAC;IAEI,eAAe,CAAC,IAAU;QACjC,OAAO;YACN,GAAG,IAAI;YACP,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;YACtC,QAAQ,EAAE,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC;SACxC,CAAC;IACH,CAAC;IAED,KAAK,CAAC,WAAW;QAChB,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,OAAO,EAAE,CAAC;QAClD,OAAO,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,CAAC;IAClD,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,IAAY;QACzB,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;QACxD,IAAI,IAAI,EAAE,CAAC;YACV,OAAO,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC;QACnC,CAAC;QACD,MAAM,IAAI,+BAAa,CAAC,gBAAgB,CAAC,CAAC;IAC3C,CAAC;IAED,KAAK,CAAC,gBAAgB,CAAC,IAAY;QAClC,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;QACxD,IAAI,CAAC,IAAI,EAAE,CAAC;YACX,MAAM,IAAI,+BAAa,CAAC,gBAAgB,CAAC,CAAC;QAC3C,CAAC;QACD,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;YACrB,MAAM,IAAI,mCAAe,CAAC,4BAA4B,CAAC,CAAC;QACzD,CAAC;QACD,MAAM,IAAI,CAAC,cAAc,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC;QAC7C,OAAO,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC;IACnC,CAAC;IAEO,KAAK,CAAC,aAAa,CAAC,UAAgC;QAC3D,IAAI,CAAC,UAAU,EAAE,CAAC;YACjB,OAAO,SAAS,CAAC;QAClB,CAAC;QAED,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC7B,OAAO,EAAE,CAAC;QACX,CAAC;QAED,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,eAAe,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC;QACjE,IAAI,MAAM,CAAC,MAAM,KAAK,UAAU,CAAC,MAAM,EAAE,CAAC;YACzC,MAAM,aAAa,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC,CAAC;YACxF,MAAM,IAAI,KAAK,CAAC,qCAAqC,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAClF,CAAC;QAED,OAAO,MAAM,CAAC;IACf,CAAC;IAED,KAAK,CAAC,gBAAgB,CAAC,IAAY,EAAE,OAAsB;QAC1D,MAAM,EAAE,WAAW,EAAE,WAAW,EAAE,MAAM,EAAE,UAAU,EAAE,GAAG,OAAO,CAAC;QAEjE,IAAI,CAAC;YACJ,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,UAAU,CAAC,IAAI,EAAE;gBAC9D,WAAW;gBACX,WAAW;gBACX,MAAM,EAAE,MAAM,IAAI,CAAC,aAAa,CAAC,UAAU,CAAC;aAC5C,CAAC,CAAC;YAEH,OAAO,IAAI,CAAC,eAAe,CAAC,WAAW,CAAC,CAAC;QAC1C,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,IAAI,KAAK,YAAY,wBAAS,IAAI,KAAK,CAAC,OAAO,KAAK,gBAAgB,EAAE,CAAC;gBACtE,MAAM,IAAI,+BAAa,CAAC,gBAAgB,CAAC,CAAC;YAC3C,CAAC;YAED,IAAI,KAAK,YAAY,wBAAS,IAAI,KAAK,CAAC,OAAO,KAAK,4BAA4B,EAAE,CAAC;gBAClF,MAAM,IAAI,mCAAe,CAAC,4BAA4B,CAAC,CAAC;YACzD,CAAC;YACD,MAAM,KAAK,CAAC;QACb,CAAC;IACF,CAAC;IAED,KAAK,CAAC,gBAAgB,CAAC,OAAsB;QAC5C,MAAM,IAAI,GAAG,IAAI,SAAI,EAAE,CAAC;QACxB,IAAI,CAAC,WAAW,GAAG,OAAO,CAAC,WAAW,CAAC;QACvC,IAAI,OAAO,CAAC,WAAW,EAAE,CAAC;YACzB,IAAI,CAAC,WAAW,GAAG,OAAO,CAAC,WAAW,CAAC;QACxC,CAAC;QACD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QACxD,IAAI,MAAM,KAAK,SAAS;YAAE,MAAM,IAAI,mCAAe,CAAC,qBAAqB,CAAC,CAAC;QAC3E,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QACrB,IAAI,CAAC,UAAU,GAAG,KAAK,CAAC;QACxB,IAAI,CAAC,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC;QACjC,IAAI,CAAC,IAAI,GAAG,GAAG,OAAO,CAAC,QAAQ,IAAI,OAAO,CAAC,WAAW,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,aAAa,EAAE,GAAG,CAAC,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC;QACjJ,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACzD,OAAO,IAAI,CAAC,eAAe,CAAC,WAAW,CAAC,CAAC;IAC1C,CAAC;IAED,KAAK,CAAC,eAAe,CACpB,SAAmB,EACnB,QAA0D;QAE1D,MAAM,eAAe,GAAG,IAAI,GAAG,CAAC,SAAS,CAAC,CAAC;QAC3C,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,WAAW,CAAC,KAAK,CAAC,IAAI,CAAC,eAAe,CAAC,EAAE,QAAQ,CAAC,CAAC;QAE3F,IAAI,KAAK,CAAC,MAAM,GAAG,eAAe,CAAC,IAAI,EAAE,CAAC;YACzC,MAAM,gBAAgB,GAAG,KAAK,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC,MAAM,CAC1D,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,KAAK,IAAI,CAAC,CACnD,CAAC;YACF,MAAM,IAAI,mCAAe,CACxB,gBAAgB,CAAC,MAAM,KAAK,CAAC;gBAC5B,CAAC,CAAC,QAAQ,gBAAgB,CAAC,CAAC,CAAC,iBAAiB;gBAC9C,CAAC,CAAC,SAAS,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC,eAAe,CACtD,CAAC;QACH,CAAC;IACF,CAAC;IAmBD,SAAS,CACR,SAKgD,EAChD,IAAU,EACV,oBAAuC;QAKvC,MAAM,MAAM,GAAG,SAAS,CAAC,MAAM,CAAC;QAChC,MAAM,MAAM,GAAG,SAGsB,CAAC;QAEtC,MAAM,CAAC,MAAM,GAAG,EAAE,CAAC;QAEnB,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;YAC1B,OAAO,MAAM,CAAC;QACf,CAAC;QAED,IAAI,CAAC,CAAC,QAAQ,IAAI,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM,IAAI,MAAM,CAAC,EAAE,CAAC;YAClD,MAAM,IAAI,8BAAe,CAAC,sDAAsD,CAAC,CAAC;QACnF,CAAC;QAED,MAAM,CAAC,MAAM,GAAG,IAAI,CAAC,qBAAqB,CACzC,QAAQ,IAAI,MAAM,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,YAAY,EAC9C,IAAI,EACJ,MAAM,EACN,oBAAoB,CACpB,CAAC;QAEF,OAAO,MAAM,CAAC;IACf,CAAC;IAED,qBAAqB,CACpB,IAA+B,EAC/B,IAAU,EACV,MAA8C,EAC9C,oBAAuC;QAEvC,MAAM,YAAY,GAAG,IAAA,oCAAsB,EAAC,IAAI,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC;QAC1D,MAAM,SAAS,GAAe,IAAI,GAAG,CAAC,YAAY,CAAC,CAAC;QACpD,KAAK,MAAM,YAAY,IAAI,MAAM,EAAE,CAAC;YACnC,MAAM,EAAE,GAAG,oBAAoB,CAAC,IAAI,CACnC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,KAAK,CAAC,YAAY,CAAC,SAAS,IAAI,YAAY,CAAC,OAAO,CAAC,EAAE,CAAC,CAC1E,CAAC;YACF,IAAI,aAAa,GAAY,EAAE,CAAC;YAChC,IAAI,EAAE,EAAE,CAAC;gBACR,aAAa,GAAG,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;YACnD,CAAC;YACD,MAAM,YAAY,GAAG,IAAA,2BAAa,EAAC,YAAY,CAAC,IAAI,CAAC,CAAC;YACtD,MAAM,YAAY,GAAG,IAAA,2BAAa,EACjC;gBACC,MAAM,EAAE,YAAY;gBACpB,OAAO,EAAE,aAAa;aACtB,EACD,EAAE,OAAO,EAAE,YAAY,EAAE,CACzB,CAAC;YACF,YAAY,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;QAC/C,CAAC;QACD,OAAO,CAAC,GAAG,SAAS,CAAC,CAAC,IAAI,EAAE,CAAC;IAC9B,CAAC;IAED,cAAc,CAAC,IAA2B;QAGzC,IAAI,CAAC,IAAA,2BAAa,EAAC,IAAI,CAAC,EAAE,CAAC;YAG1B,OAAO,IAAI,CAAC,OAAO,CAAC,qBAAqB,EAAE,CAAC;QAC7C,CAAC;QAED,QAAQ,IAAI,EAAE,CAAC;YACd,KAAK,qCAAuB;gBAC3B,OAAO,IAAI,CAAC,OAAO,CAAC,0BAA0B,EAAE,CAAC;YAClD,KAAK,sCAAwB;gBAC5B,OAAO,IAAI,CAAC,OAAO,CAAC,2BAA2B,EAAE,CAAC;YACnD,KAAK,sCAAwB;gBAC5B,OAAO,IAAI,CAAC,OAAO,CAAC,2BAA2B,EAAE,CAAC;YACnD,KAAK,sBAAiB,CAAC,IAAI;gBAC1B,OAAO,IAAI,CAAC,OAAO,CAAC,6BAA6B,EAAE,CAAC;YACrD;gBAEC,OAAO,IAAI,CAAC;QACd,CAAC;IACF,CAAC;CACD,CAAA;AAhOY,kCAAW;sBAAX,WAAW;IADvB,IAAA,YAAO,GAAE;qCAGkB,6BAAY;QACL,mBAAc;QACb,oBAAe;GAJtC,WAAW,CAgOvB"}
package/dist/sso.ee/oidc/oidc.service.ee.d.ts CHANGED
@@ -2,7 +2,8 @@ import type { OidcConfigDto } from '@n8n/api-types';
2
2
  import { Logger } from '@n8n/backend-common';
3
3
  import { GlobalConfig } from '@n8n/config';
4
4
  import { AuthIdentityRepository, SettingsRepository, type User, UserRepository } from '@n8n/db';
5
- import { Cipher } from 'n8n-core';
5
+ import { Cipher, InstanceSettings } from 'n8n-core';
6
+ import { JwtService } from '../../services/jwt.service';
6
7
  import { UrlService } from '../../services/url.service';
7
8
  type OidcRuntimeConfig = Pick<OidcConfigDto, 'clientId' | 'clientSecret' | 'loginEnabled'> & {
8
9
  discoveryEndpoint: URL;
@@ -15,13 +16,33 @@ export declare class OidcService {
15
16
  private readonly userRepository;
16
17
  private readonly cipher;
17
18
  private readonly logger;
19
+ private readonly jwtService;
20
+ private readonly instanceSettings;
18
21
  private oidcConfig;
19
- constructor(settingsRepository: SettingsRepository, authIdentityRepository: AuthIdentityRepository, urlService: UrlService, globalConfig: GlobalConfig, userRepository: UserRepository, cipher: Cipher, logger: Logger);
22
+ constructor(settingsRepository: SettingsRepository, authIdentityRepository: AuthIdentityRepository, urlService: UrlService, globalConfig: GlobalConfig, userRepository: UserRepository, cipher: Cipher, logger: Logger, jwtService: JwtService, instanceSettings: InstanceSettings);
20
23
  init(): Promise<void>;
21
24
  getCallbackUrl(): string;
22
25
  getRedactedConfig(): OidcConfigDto;
23
- generateLoginUrl(): Promise<URL>;
24
- loginUser(callbackUrl: URL): Promise<User>;
26
+ generateState(): {
27
+ signed: string;
28
+ plaintext: string;
29
+ };
30
+ verifyState(signedState: string): string;
31
+ generateNonce(): {
32
+ signed: string;
33
+ plaintext: string;
34
+ };
35
+ verifyNonce(signedNonce: string): string;
36
+ generateLoginUrl(): Promise<{
37
+ url: URL;
38
+ state: string;
39
+ nonce: string;
40
+ }>;
41
+ loginUser(callbackUrl: URL, storedState: string, storedNonce: string): Promise<User>;
42
+ private broadcastReloadOIDCConfigurationCommand;
43
+ private isReloading;
44
+ reload(): Promise<void>;
45
+ loadConfigurationFromDatabase(decryptSecret?: boolean): Promise<OidcRuntimeConfig | undefined>;
25
46
  loadConfig(decryptSecret?: boolean): Promise<OidcRuntimeConfig>;
26
47
  updateConfig(newConfig: OidcConfigDto): Promise<void>;
27
48
  private setOidcLoginEnabled;
package/dist/sso.ee/oidc/oidc.service.ee.js CHANGED
@@ -47,15 +47,18 @@ const backend_common_1 = require("@n8n/backend-common");
47
47
  const config_1 = require("@n8n/config");
48
48
  const db_1 = require("@n8n/db");
49
49
  const di_1 = require("@n8n/di");
50
+ const crypto_1 = require("crypto");
50
51
  const n8n_core_1 = require("n8n-core");
51
52
  const n8n_workflow_1 = require("n8n-workflow");
52
53
  const client = __importStar(require("openid-client"));
53
54
  const bad_request_error_1 = require("../../errors/response-errors/bad-request.error");
54
55
  const forbidden_error_1 = require("../../errors/response-errors/forbidden.error");
55
56
  const internal_server_error_1 = require("../../errors/response-errors/internal-server.error");
57
+ const jwt_service_1 = require("../../services/jwt.service");
56
58
  const url_service_1 = require("../../services/url.service");
57
- const constants_1 = require("./constants");
58
59
  const sso_helpers_1 = require("../sso-helpers");
60
+ const constants_1 = require("./constants");
61
+ const decorators_1 = require("@n8n/decorators");
59
62
  const DEFAULT_OIDC_CONFIG = {
60
63
  clientId: '',
61
64
  clientSecret: '',
@@ -67,7 +70,7 @@ const DEFAULT_OIDC_RUNTIME_CONFIG = {
67
70
  discoveryEndpoint: new URL('http://n8n.io/not-set'),
68
71
  };
69
72
  let OidcService = class OidcService {
70
- constructor(settingsRepository, authIdentityRepository, urlService, globalConfig, userRepository, cipher, logger) {
73
+ constructor(settingsRepository, authIdentityRepository, urlService, globalConfig, userRepository, cipher, logger, jwtService, instanceSettings) {
71
74
  this.settingsRepository = settingsRepository;
72
75
  this.authIdentityRepository = authIdentityRepository;
73
76
  this.urlService = urlService;
@@ -75,7 +78,10 @@ let OidcService = class OidcService {
75
78
  this.userRepository = userRepository;
76
79
  this.cipher = cipher;
77
80
  this.logger = logger;
81
+ this.jwtService = jwtService;
82
+ this.instanceSettings = instanceSettings;
78
83
  this.oidcConfig = DEFAULT_OIDC_RUNTIME_CONFIG;
84
+ this.isReloading = false;
79
85
  }
80
86
  async init() {
81
87
  this.oidcConfig = await this.loadConfig(true);
@@ -92,24 +98,118 @@ let OidcService = class OidcService {
92
98
  clientSecret: constants_1.OIDC_CLIENT_SECRET_REDACTED_VALUE,
93
99
  };
94
100
  }
101
+ generateState() {
102
+ const state = `n8n_state:${(0, crypto_1.randomUUID)()}`;
103
+ return {
104
+ signed: this.jwtService.sign({ state }, { expiresIn: '15m' }),
105
+ plaintext: state,
106
+ };
107
+ }
108
+ verifyState(signedState) {
109
+ let state;
110
+ try {
111
+ const decodedState = this.jwtService.verify(signedState);
112
+ state = decodedState?.state;
113
+ }
114
+ catch (error) {
115
+ this.logger.error('Failed to verify state', { error });
116
+ throw new bad_request_error_1.BadRequestError('Invalid state');
117
+ }
118
+ if (typeof state !== 'string') {
119
+ this.logger.error('Provided state has an invalid format');
120
+ throw new bad_request_error_1.BadRequestError('Invalid state');
121
+ }
122
+ const splitState = state.split(':');
123
+ if (splitState.length !== 2 || splitState[0] !== 'n8n_state') {
124
+ this.logger.error('Provided state is missing the well-known prefix');
125
+ throw new bad_request_error_1.BadRequestError('Invalid state');
126
+ }
127
+ if (!/^[0-9a-f]{8}-[0-9a-f]{4}-[0-5][0-9a-f]{3}-[089ab][0-9a-f]{3}-[0-9a-f]{12}$/i.test(splitState[1])) {
128
+ this.logger.error('Provided state is not formatted correctly');
129
+ throw new bad_request_error_1.BadRequestError('Invalid state');
130
+ }
131
+ return state;
132
+ }
133
+ generateNonce() {
134
+ const nonce = `n8n_nonce:${(0, crypto_1.randomUUID)()}`;
135
+ return {
136
+ signed: this.jwtService.sign({ nonce }, { expiresIn: '15m' }),
137
+ plaintext: nonce,
138
+ };
139
+ }
140
+ verifyNonce(signedNonce) {
141
+ let nonce;
142
+ try {
143
+ const decodedNonce = this.jwtService.verify(signedNonce);
144
+ nonce = decodedNonce?.nonce;
145
+ }
146
+ catch (error) {
147
+ this.logger.error('Failed to verify nonce', { error });
148
+ throw new bad_request_error_1.BadRequestError('Invalid nonce');
149
+ }
150
+ if (typeof nonce !== 'string') {
151
+ this.logger.error('Provided nonce has an invalid format');
152
+ throw new bad_request_error_1.BadRequestError('Invalid nonce');
153
+ }
154
+ const splitNonce = nonce.split(':');
155
+ if (splitNonce.length !== 2 || splitNonce[0] !== 'n8n_nonce') {
156
+ this.logger.error('Provided nonce is missing the well-known prefix');
157
+ throw new bad_request_error_1.BadRequestError('Invalid nonce');
158
+ }
159
+ if (!/^[0-9a-f]{8}-[0-9a-f]{4}-[0-5][0-9a-f]{3}-[089ab][0-9a-f]{3}-[0-9a-f]{12}$/i.test(splitNonce[1])) {
160
+ this.logger.error('Provided nonce is not formatted correctly');
161
+ throw new bad_request_error_1.BadRequestError('Invalid nonce');
162
+ }
163
+ return nonce;
164
+ }
95
165
  async generateLoginUrl() {
96
166
  const configuration = await this.getOidcConfiguration();
167
+ const state = this.generateState();
168
+ const nonce = this.generateNonce();
97
169
  const authorizationURL = client.buildAuthorizationUrl(configuration, {
98
170
  redirect_uri: this.getCallbackUrl(),
99
171
  response_type: 'code',
100
172
  scope: 'openid email profile',
101
173
  prompt: 'select_account',
174
+ state: state.plaintext,
175
+ nonce: nonce.plaintext,
102
176
  });
103
- return authorizationURL;
177
+ return { url: authorizationURL, state: state.signed, nonce: nonce.signed };
104
178
  }
105
- async loginUser(callbackUrl) {
179
+ async loginUser(callbackUrl, storedState, storedNonce) {
106
180
  const configuration = await this.getOidcConfiguration();
107
- const tokens = await client.authorizationCodeGrant(configuration, callbackUrl);
108
- const claims = tokens.claims();
181
+ const expectedState = this.verifyState(storedState);
182
+ const expectedNonce = this.verifyNonce(storedNonce);
183
+ let tokens;
184
+ try {
185
+ tokens = await client.authorizationCodeGrant(configuration, callbackUrl, {
186
+ expectedState,
187
+ expectedNonce,
188
+ });
189
+ }
190
+ catch (error) {
191
+ this.logger.error('Failed to exchange authorization code for tokens', { error });
192
+ throw new bad_request_error_1.BadRequestError('Invalid authorization code');
193
+ }
194
+ let claims;
195
+ try {
196
+ claims = tokens.claims();
197
+ }
198
+ catch (error) {
199
+ this.logger.error('Failed to extract claims from tokens', { error });
200
+ throw new bad_request_error_1.BadRequestError('Invalid token');
201
+ }
109
202
  if (!claims) {
110
203
  throw new forbidden_error_1.ForbiddenError('No claims found in the OIDC token');
111
204
  }
112
- const userInfo = await client.fetchUserInfo(configuration, tokens.access_token, claims.sub);
205
+ let userInfo;
206
+ try {
207
+ userInfo = await client.fetchUserInfo(configuration, tokens.access_token, claims.sub);
208
+ }
209
+ catch (error) {
210
+ this.logger.error('Failed to fetch user info', { error });
211
+ throw new bad_request_error_1.BadRequestError('Invalid token');
212
+ }
113
213
  if (!userInfo.email) {
114
214
  throw new bad_request_error_1.BadRequestError('An email is required');
115
215
  }
@@ -158,15 +258,49 @@ let OidcService = class OidcService {
158
258
  return user;
159
259
  });
160
260
  }
161
- async loadConfig(decryptSecret = false) {
162
- const currentConfig = await this.settingsRepository.findOneBy({
163
- key: constants_1.OIDC_PREFERENCES_DB_KEY,
164
- });
165
- if (currentConfig) {
261
+ async broadcastReloadOIDCConfigurationCommand() {
262
+ if (this.instanceSettings.isMultiMain) {
263
+ const { Publisher } = await Promise.resolve().then(() => __importStar(require('../../scaling/pubsub/publisher.service')));
264
+ await di_1.Container.get(Publisher).publishCommand({ command: 'reload-oidc-config' });
265
+ }
266
+ }
267
+ async reload() {
268
+ if (this.isReloading) {
269
+ this.logger.warn('OIDC configuration reload already in progress');
270
+ return;
271
+ }
272
+ this.isReloading = true;
273
+ try {
274
+ this.logger.debug('OIDC configuration changed, starting to load it from the database');
275
+ const configFromDB = await this.loadConfigurationFromDatabase(true);
276
+ if (configFromDB) {
277
+ this.oidcConfig = configFromDB;
278
+ this.cachedOidcConfiguration = undefined;
279
+ }
280
+ else {
281
+ this.logger.warn('OIDC configuration not found in database, ignoring reload message');
282
+ }
283
+ await (0, sso_helpers_1.reloadAuthenticationMethod)();
284
+ const isOidcLoginEnabled = (0, sso_helpers_1.isOidcCurrentAuthenticationMethod)();
285
+ this.logger.debug(`OIDC login is now ${isOidcLoginEnabled ? 'enabled' : 'disabled'}.`);
286
+ di_1.Container.get(config_1.GlobalConfig).sso.oidc.loginEnabled = isOidcLoginEnabled;
287
+ }
288
+ catch (error) {
289
+ this.logger.error('OIDC configuration changed, failed to reload OIDC configuration', {
290
+ error,
291
+ });
292
+ }
293
+ finally {
294
+ this.isReloading = false;
295
+ }
296
+ }
297
+ async loadConfigurationFromDatabase(decryptSecret = false) {
298
+ const configFromDB = await this.settingsRepository.findByKey(constants_1.OIDC_PREFERENCES_DB_KEY);
299
+ if (configFromDB) {
166
300
  try {
167
- const oidcConfig = (0, n8n_workflow_1.jsonParse)(currentConfig.value);
301
+ const oidcConfig = (0, n8n_workflow_1.jsonParse)(configFromDB.value);
168
302
  if (oidcConfig.discoveryEndpoint === '')
169
- return DEFAULT_OIDC_RUNTIME_CONFIG;
303
+ return undefined;
170
304
  const discoveryUrl = new URL(oidcConfig.discoveryEndpoint);
171
305
  if (oidcConfig.clientSecret && decryptSecret) {
172
306
  oidcConfig.clientSecret = this.cipher.decrypt(oidcConfig.clientSecret);
@@ -180,11 +314,13 @@ let OidcService = class OidcService {
180
314
  this.logger.warn('Failed to load OIDC configuration from database, falling back to default configuration.', { error });
181
315
  }
182
316
  }
183
- await this.settingsRepository.save({
184
- key: constants_1.OIDC_PREFERENCES_DB_KEY,
185
- value: JSON.stringify(DEFAULT_OIDC_CONFIG),
186
- loadOnStartup: true,
187
- });
317
+ return undefined;
318
+ }
319
+ async loadConfig(decryptSecret = false) {
320
+ const currentConfig = await this.loadConfigurationFromDatabase(decryptSecret);
321
+ if (currentConfig) {
322
+ return currentConfig;
323
+ }
188
324
  return DEFAULT_OIDC_RUNTIME_CONFIG;
189
325
  }
190
326
  async updateConfig(newConfig) {
@@ -207,13 +343,13 @@ let OidcService = class OidcService {
207
343
  this.logger.error('Failed to discover OIDC metadata', { error });
208
344
  throw new n8n_workflow_1.UserError('Failed to discover OIDC metadata, based on the provided configuration');
209
345
  }
210
- await this.settingsRepository.update({
346
+ await this.settingsRepository.save({
211
347
  key: constants_1.OIDC_PREFERENCES_DB_KEY,
212
- }, {
213
348
  value: JSON.stringify({
214
349
  ...newConfig,
215
350
  clientSecret: this.cipher.encrypt(newConfig.clientSecret),
216
351
  }),
352
+ loadOnStartup: true,
217
353
  });
218
354
  this.oidcConfig = {
219
355
  ...newConfig,
@@ -222,6 +358,7 @@ let OidcService = class OidcService {
222
358
  this.cachedOidcConfiguration = undefined;
223
359
  this.logger.debug(`OIDC login is now ${this.oidcConfig.loginEnabled ? 'enabled' : 'disabled'}.`);
224
360
  await this.setOidcLoginEnabled(this.oidcConfig.loginEnabled);
361
+ await this.broadcastReloadOIDCConfigurationCommand();
225
362
  }
226
363
  async setOidcLoginEnabled(enabled) {
227
364
  const currentAuthenticationMethod = (0, sso_helpers_1.getCurrentAuthenticationMethod)();
@@ -250,6 +387,12 @@ let OidcService = class OidcService {
250
387
  }
251
388
  };
252
389
  exports.OidcService = OidcService;
390
+ __decorate([
391
+ (0, decorators_1.OnPubSubEvent)('reload-oidc-config'),
392
+ __metadata("design:type", Function),
393
+ __metadata("design:paramtypes", []),
394
+ __metadata("design:returntype", Promise)
395
+ ], OidcService.prototype, "reload", null);
253
396
  exports.OidcService = OidcService = __decorate([
254
397
  (0, di_1.Service)(),
255
398
  __metadata("design:paramtypes", [db_1.SettingsRepository,
@@ -258,6 +401,8 @@ exports.OidcService = OidcService = __decorate([
258
401
  config_1.GlobalConfig,
259
402
  db_1.UserRepository,
260
403
  n8n_core_1.Cipher,
261
- backend_common_1.Logger])
404
+ backend_common_1.Logger,
405
+ jwt_service_1.JwtService,
406
+ n8n_core_1.InstanceSettings])
262
407
  ], OidcService);
263
408
  //# sourceMappingURL=oidc.service.ee.js.map
package/dist/sso.ee/oidc/oidc.service.ee.js.map CHANGED
@@ -1 +1 @@
1
- {"version":3,"file":"oidc.service.ee.js","sourceRoot":"","sources":["../../../src/sso.ee/oidc/oidc.service.ee.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AACA,wDAA6C;AAC7C,wCAA2C;AAC3C,gCAQiB;AACjB,gCAA6C;AAC7C,uCAAkC;AAClC,+CAAoD;AACpD,sDAAwC;AAExC,kFAA6E;AAC7E,8EAA0E;AAC1E,0FAAqF;AACrF,wDAAoD;AAEpD,2CAAyF;AACzF,gDAKwB;AAExB,MAAM,mBAAmB,GAAkB;IAC1C,QAAQ,EAAE,EAAE;IACZ,YAAY,EAAE,EAAE;IAChB,iBAAiB,EAAE,EAAE;IACrB,YAAY,EAAE,KAAK;CACnB,CAAC;AAMF,MAAM,2BAA2B,GAAsB;IACtD,GAAG,mBAAmB;IACtB,iBAAiB,EAAE,IAAI,GAAG,CAAC,uBAAuB,CAAC;CACnD,CAAC;AAGK,IAAM,WAAW,GAAjB,MAAM,WAAW;IAGvB,YACkB,kBAAsC,EACtC,sBAA8C,EAC9C,UAAsB,EACtB,YAA0B,EAC1B,cAA8B,EAC9B,MAAc,EACd,MAAc;QANd,uBAAkB,GAAlB,kBAAkB,CAAoB;QACtC,2BAAsB,GAAtB,sBAAsB,CAAwB;QAC9C,eAAU,GAAV,UAAU,CAAY;QACtB,iBAAY,GAAZ,YAAY,CAAc;QAC1B,mBAAc,GAAd,cAAc,CAAgB;QAC9B,WAAM,GAAN,MAAM,CAAQ;QACd,WAAM,GAAN,MAAM,CAAQ;QATxB,eAAU,GAAsB,2BAA2B,CAAC;IAUjE,CAAC;IAEJ,KAAK,CAAC,IAAI;QACT,IAAI,CAAC,UAAU,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;QAC9C,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,iBAAiB,IAAI,CAAC,UAAU,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,UAAU,GAAG,CAAC,CAAC;QAC7F,MAAM,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC,UAAU,CAAC,YAAY,CAAC,CAAC;IAC9D,CAAC;IAED,cAAc;QACb,OAAO,GAAG,IAAI,CAAC,UAAU,CAAC,kBAAkB,EAAE,IAAI,IAAI,CAAC,YAAY,CAAC,SAAS,CAAC,IAAI,oBAAoB,CAAC;IACxG,CAAC;IAED,iBAAiB;QAChB,OAAO;YACN,GAAG,IAAI,CAAC,UAAU;YAClB,iBAAiB,EAAE,IAAI,CAAC,UAAU,CAAC,iBAAiB,CAAC,QAAQ,EAAE;YAC/D,YAAY,EAAE,6CAAiC;SAC/C,CAAC;IACH,CAAC;IAED,KAAK,CAAC,gBAAgB;QACrB,MAAM,aAAa,GAAG,MAAM,IAAI,CAAC,oBAAoB,EAAE,CAAC;QAExD,MAAM,gBAAgB,GAAG,MAAM,CAAC,qBAAqB,CAAC,aAAa,EAAE;YACpE,YAAY,EAAE,IAAI,CAAC,cAAc,EAAE;YACnC,aAAa,EAAE,MAAM;YACrB,KAAK,EAAE,sBAAsB;YAC7B,MAAM,EAAE,gBAAgB;SACxB,CAAC,CAAC;QAEH,OAAO,gBAAgB,CAAC;IACzB,CAAC;IAED,KAAK,CAAC,SAAS,CAAC,WAAgB;QAC/B,MAAM,aAAa,GAAG,MAAM,IAAI,CAAC,oBAAoB,EAAE,CAAC;QAExD,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,sBAAsB,CAAC,aAAa,EAAE,WAAW,CAAC,CAAC;QAE/E,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC;QAE/B,IAAI,CAAC,MAAM,EAAE,CAAC;YACb,MAAM,IAAI,gCAAc,CAAC,mCAAmC,CAAC,CAAC;QAC/D,CAAC;QAED,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,aAAa,CAAC,aAAa,EAAE,MAAM,CAAC,YAAY,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC;QAE5F,IAAI,CAAC,QAAQ,CAAC,KAAK,EAAE,CAAC;YACrB,MAAM,IAAI,mCAAe,CAAC,sBAAsB,CAAC,CAAC;QACnD,CAAC;QAED,IAAI,CAAC,IAAA,iBAAY,EAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;YACnC,MAAM,IAAI,mCAAe,CAAC,sBAAsB,CAAC,CAAC;QACnD,CAAC;QAED,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,sBAAsB,CAAC,OAAO,CAAC;YAC5D,KAAK,EAAE,EAAE,UAAU,EAAE,MAAM,CAAC,GAAG,EAAE,YAAY,EAAE,MAAM,EAAE;YACvD,SAAS,EAAE;gBACV,IAAI,EAAE;oBACL,IAAI,EAAE,IAAI;iBACV;aACD;SACD,CAAC,CAAC;QAEH,IAAI,UAAU,EAAE,CAAC;YAChB,OAAO,UAAU,CAAC,IAAI,CAAC;QACxB,CAAC;QAED,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,OAAO,CAAC;YACnD,KAAK,EAAE,EAAE,KAAK,EAAE,QAAQ,CAAC,KAAK,EAAE;YAChC,SAAS,EAAE,CAAC,gBAAgB,EAAE,MAAM,CAAC;SACrC,CAAC,CAAC;QAEH,IAAI,SAAS,EAAE,CAAC;YACf,IAAI,CAAC,MAAM,CAAC,KAAK,CAChB,+BAA+B,QAAQ,CAAC,KAAK,yCAAyC,CACtF,CAAC;YAEF,MAAM,EAAE,GAAG,IAAI,CAAC,sBAAsB,CAAC,MAAM,CAAC;gBAC7C,UAAU,EAAE,MAAM,CAAC,GAAG;gBACtB,YAAY,EAAE,MAAM;gBACpB,MAAM,EAAE,SAAS,CAAC,EAAE;aACpB,CAAC,CAAC;YAEH,MAAM,IAAI,CAAC,sBAAsB,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YAE3C,OAAO,SAAS,CAAC;QAClB,CAAC;QAED,OAAO,MAAM,IAAI,CAAC,cAAc,CAAC,OAAO,CAAC,WAAW,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE;YAClE,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,qBAAqB,CAC/D;gBACC,SAAS,EAAE,QAAQ,CAAC,UAAU;gBAC9B,QAAQ,EAAE,QAAQ,CAAC,WAAW;gBAC9B,KAAK,EAAE,QAAQ,CAAC,KAAK;gBACrB,cAAc,EAAE,EAAE;gBAClB,IAAI,EAAE,uBAAkB;gBACxB,QAAQ,EAAE,iBAAiB;aAC3B,EACD,GAAG,CACH,CAAC;YAEF,MAAM,GAAG,CAAC,IAAI,CACb,GAAG,CAAC,MAAM,CAAC,iBAAY,EAAE;gBACxB,UAAU,EAAE,MAAM,CAAC,GAAG;gBACtB,YAAY,EAAE,MAAM;gBACpB,MAAM,EAAE,IAAI,CAAC,EAAE;aACf,CAAC,CACF,CAAC;YAEF,OAAO,IAAI,CAAC;QACb,CAAC,CAAC,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,UAAU,CAAC,aAAa,GAAG,KAAK;QACrC,MAAM,aAAa,GAAG,MAAM,IAAI,CAAC,kBAAkB,CAAC,SAAS,CAAC;YAC7D,GAAG,EAAE,mCAAuB;SAC5B,CAAC,CAAC;QAEH,IAAI,aAAa,EAAE,CAAC;YACnB,IAAI,CAAC;gBACJ,MAAM,UAAU,GAAG,IAAA,wBAAS,EAAgB,aAAa,CAAC,KAAK,CAAC,CAAC;gBAEjE,IAAI,UAAU,CAAC,iBAAiB,KAAK,EAAE;oBAAE,OAAO,2BAA2B,CAAC;gBAE5E,MAAM,YAAY,GAAG,IAAI,GAAG,CAAC,UAAU,CAAC,iBAAiB,CAAC,CAAC;gBAE3D,IAAI,UAAU,CAAC,YAAY,IAAI,aAAa,EAAE,CAAC;oBAC9C,UAAU,CAAC,YAAY,GAAG,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,YAAY,CAAC,CAAC;gBACxE,CAAC;gBACD,OAAO;oBACN,GAAG,UAAU;oBACb,iBAAiB,EAAE,YAAY;iBAC/B,CAAC;YACH,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBAChB,IAAI,CAAC,MAAM,CAAC,IAAI,CACf,yFAAyF,EAEzF,EAAE,KAAK,EAAE,CACT,CAAC;YACH,CAAC;QACF,CAAC;QAED,MAAM,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC;YAClC,GAAG,EAAE,mCAAuB;YAC5B,KAAK,EAAE,IAAI,CAAC,SAAS,CAAC,mBAAmB,CAAC;YAC1C,aAAa,EAAE,IAAI;SACnB,CAAC,CAAC;QACH,OAAO,2BAA2B,CAAC;IACpC,CAAC;IAED,KAAK,CAAC,YAAY,CAAC,SAAwB;QAC1C,IAAI,iBAAsB,CAAC;QAC3B,IAAI,CAAC;YAEJ,iBAAiB,GAAG,IAAI,GAAG,CAAC,SAAS,CAAC,iBAAiB,CAAC,CAAC;QAC1D,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,6CAA6C,SAAS,CAAC,iBAAiB,EAAE,CAAC,CAAC;YAC9F,MAAM,IAAI,wBAAS,CAAC,gDAAgD,CAAC,CAAC;QACvE,CAAC;QACD,IAAI,SAAS,CAAC,YAAY,KAAK,6CAAiC,EAAE,CAAC;YAClE,SAAS,CAAC,YAAY,GAAG,IAAI,CAAC,UAAU,CAAC,YAAY,CAAC;QACvD,CAAC;QACD,IAAI,CAAC;YACJ,MAAM,kBAAkB,GAAG,MAAM,MAAM,CAAC,SAAS,CAChD,iBAAiB,EACjB,SAAS,CAAC,QAAQ,EAClB,SAAS,CAAC,YAAY,CACtB,CAAC;YAEF,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,6BAA6B,IAAI,CAAC,SAAS,CAAC,kBAAkB,CAAC,EAAE,CAAC,CAAC;QACtF,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,kCAAkC,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;YACjE,MAAM,IAAI,wBAAS,CAAC,uEAAuE,CAAC,CAAC;QAC9F,CAAC;QACD,MAAM,IAAI,CAAC,kBAAkB,CAAC,MAAM,CACnC;YACC,GAAG,EAAE,mCAAuB;SAC5B,EACD;YACC,KAAK,EAAE,IAAI,CAAC,SAAS,CAAC;gBACrB,GAAG,SAAS;gBACZ,YAAY,EAAE,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,YAAY,CAAC;aACzD,CAAC;SACF,CACD,CAAC;QAOF,IAAI,CAAC,UAAU,GAAG;YACjB,GAAG,SAAS;YACZ,iBAAiB;SACjB,CAAC;QACF,IAAI,CAAC,uBAAuB,GAAG,SAAS,CAAC;QACzC,IAAI,CAAC,MAAM,CAAC,KAAK,CAChB,qBAAqB,IAAI,CAAC,UAAU,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,UAAU,GAAG,CAC7E,CAAC;QAEF,MAAM,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC,UAAU,CAAC,YAAY,CAAC,CAAC;IAC9D,CAAC;IAEO,KAAK,CAAC,mBAAmB,CAAC,OAAgB;QACjD,MAAM,2BAA2B,GAAG,IAAA,4CAA8B,GAAE,CAAC;QAErE,IAAI,OAAO,IAAI,CAAC,IAAA,gDAAkC,GAAE,IAAI,CAAC,IAAA,+CAAiC,GAAE,EAAE,CAAC;YAC9F,MAAM,IAAI,2CAAmB,CAC5B,qHAAqH,2BAA2B,GAAG,CACnJ,CAAC;QACH,CAAC;QAED,MAAM,0BAA0B,GAC/B,CAAC,OAAO,IAAI,2BAA2B,KAAK,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,2BAA2B,CAAC;QAE5F,cAAS,CAAC,GAAG,CAAC,qBAAY,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,YAAY,GAAG,OAAO,CAAC;QAC5D,MAAM,IAAA,4CAA8B,EAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,0BAA0B,CAAC,CAAC;IACrF,CAAC;IASO,KAAK,CAAC,oBAAoB;QACjC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,IACC,IAAI,CAAC,uBAAuB,KAAK,SAAS;YAC1C,GAAG,IAAI,IAAI,CAAC,uBAAuB,CAAC,SAAS,CAAC,OAAO,EAAE;YACvD,IAAI,CAAC,UAAU,CAAC,iBAAiB,CAAC,QAAQ,EAAE;gBAC3C,IAAI,CAAC,uBAAuB,CAAC,iBAAiB,CAAC,QAAQ,EAAE;YAC1D,IAAI,CAAC,UAAU,CAAC,QAAQ,KAAK,IAAI,CAAC,uBAAuB,CAAC,QAAQ;YAClE,IAAI,CAAC,UAAU,CAAC,YAAY,KAAK,IAAI,CAAC,uBAAuB,CAAC,YAAY,EACzE,CAAC;YACF,IAAI,CAAC,uBAAuB,GAAG;gBAC9B,GAAG,IAAI,CAAC,UAAU;gBAClB,aAAa,EAAE,MAAM,CAAC,SAAS,CAC9B,IAAI,CAAC,UAAU,CAAC,iBAAiB,EACjC,IAAI,CAAC,UAAU,CAAC,QAAQ,EACxB,IAAI,CAAC,UAAU,CAAC,YAAY,CAC5B;gBACD,SAAS,EAAE,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;aAChD,CAAC;QACH,CAAC;QAED,OAAO,MAAM,IAAI,CAAC,uBAAuB,CAAC,aAAa,CAAC;IACzD,CAAC;CACD,CAAA;AApQY,kCAAW;sBAAX,WAAW;IADvB,IAAA,YAAO,GAAE;qCAK6B,uBAAkB;QACd,2BAAsB;QAClC,wBAAU;QACR,qBAAY;QACV,mBAAc;QACtB,iBAAM;QACN,uBAAM;GAVpB,WAAW,CAoQvB"}
1
+ {"version":3,"file":"oidc.service.ee.js","sourceRoot":"","sources":["../../../src/sso.ee/oidc/oidc.service.ee.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AACA,wDAA6C;AAC7C,wCAA2C;AAC3C,gCAQiB;AACjB,gCAA6C;AAC7C,mCAAoC;AACpC,uCAAoD;AACpD,+CAAoD;AACpD,sDAAwC;AAExC,kFAA6E;AAC7E,8EAA0E;AAC1E,0FAAqF;AACrF,wDAAoD;AACpD,wDAAoD;AAEpD,gDAMwB;AACxB,2CAAyF;AACzF,gDAAgD;AAEhD,MAAM,mBAAmB,GAAkB;IAC1C,QAAQ,EAAE,EAAE;IACZ,YAAY,EAAE,EAAE;IAChB,iBAAiB,EAAE,EAAE;IACrB,YAAY,EAAE,KAAK;CACnB,CAAC;AAMF,MAAM,2BAA2B,GAAsB;IACtD,GAAG,mBAAmB;IACtB,iBAAiB,EAAE,IAAI,GAAG,CAAC,uBAAuB,CAAC;CACnD,CAAC;AAGK,IAAM,WAAW,GAAjB,MAAM,WAAW;IAGvB,YACkB,kBAAsC,EACtC,sBAA8C,EAC9C,UAAsB,EACtB,YAA0B,EAC1B,cAA8B,EAC9B,MAAc,EACd,MAAc,EACd,UAAsB,EACtB,gBAAkC;QARlC,uBAAkB,GAAlB,kBAAkB,CAAoB;QACtC,2BAAsB,GAAtB,sBAAsB,CAAwB;QAC9C,eAAU,GAAV,UAAU,CAAY;QACtB,iBAAY,GAAZ,YAAY,CAAc;QAC1B,mBAAc,GAAd,cAAc,CAAgB;QAC9B,WAAM,GAAN,MAAM,CAAQ;QACd,WAAM,GAAN,MAAM,CAAQ;QACd,eAAU,GAAV,UAAU,CAAY;QACtB,qBAAgB,GAAhB,gBAAgB,CAAkB;QAX5C,eAAU,GAAsB,2BAA2B,CAAC;QAmP5D,gBAAW,GAAG,KAAK,CAAC;IAvOzB,CAAC;IAEJ,KAAK,CAAC,IAAI;QACT,IAAI,CAAC,UAAU,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;QAC9C,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,iBAAiB,IAAI,CAAC,UAAU,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,UAAU,GAAG,CAAC,CAAC;QAC7F,MAAM,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC,UAAU,CAAC,YAAY,CAAC,CAAC;IAC9D,CAAC;IAED,cAAc;QACb,OAAO,GAAG,IAAI,CAAC,UAAU,CAAC,kBAAkB,EAAE,IAAI,IAAI,CAAC,YAAY,CAAC,SAAS,CAAC,IAAI,oBAAoB,CAAC;IACxG,CAAC;IAED,iBAAiB;QAChB,OAAO;YACN,GAAG,IAAI,CAAC,UAAU;YAClB,iBAAiB,EAAE,IAAI,CAAC,UAAU,CAAC,iBAAiB,CAAC,QAAQ,EAAE;YAC/D,YAAY,EAAE,6CAAiC;SAC/C,CAAC;IACH,CAAC;IAED,aAAa;QACZ,MAAM,KAAK,GAAG,aAAa,IAAA,mBAAU,GAAE,EAAE,CAAC;QAC1C,OAAO;YACN,MAAM,EAAE,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC;YAC7D,SAAS,EAAE,KAAK;SAChB,CAAC;IACH,CAAC;IAED,WAAW,CAAC,WAAmB;QAC9B,IAAI,KAAa,CAAC;QAClB,IAAI,CAAC;YACJ,MAAM,YAAY,GAAG,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;YACzD,KAAK,GAAG,YAAY,EAAE,KAAK,CAAC;QAC7B,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,wBAAwB,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;YACvD,MAAM,IAAI,mCAAe,CAAC,eAAe,CAAC,CAAC;QAC5C,CAAC;QAED,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;YAC/B,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,sCAAsC,CAAC,CAAC;YAC1D,MAAM,IAAI,mCAAe,CAAC,eAAe,CAAC,CAAC;QAC5C,CAAC;QAED,MAAM,UAAU,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAEpC,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC,IAAI,UAAU,CAAC,CAAC,CAAC,KAAK,WAAW,EAAE,CAAC;YAC9D,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,iDAAiD,CAAC,CAAC;YACrE,MAAM,IAAI,mCAAe,CAAC,eAAe,CAAC,CAAC;QAC5C,CAAC;QAED,IACC,CAAC,6EAA6E,CAAC,IAAI,CAClF,UAAU,CAAC,CAAC,CAAC,CACb,EACA,CAAC;YACF,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,2CAA2C,CAAC,CAAC;YAC/D,MAAM,IAAI,mCAAe,CAAC,eAAe,CAAC,CAAC;QAC5C,CAAC;QACD,OAAO,KAAK,CAAC;IACd,CAAC;IAED,aAAa;QACZ,MAAM,KAAK,GAAG,aAAa,IAAA,mBAAU,GAAE,EAAE,CAAC;QAC1C,OAAO;YACN,MAAM,EAAE,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC;YAC7D,SAAS,EAAE,KAAK;SAChB,CAAC;IACH,CAAC;IAED,WAAW,CAAC,WAAmB;QAC9B,IAAI,KAAa,CAAC;QAClB,IAAI,CAAC;YACJ,MAAM,YAAY,GAAG,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;YACzD,KAAK,GAAG,YAAY,EAAE,KAAK,CAAC;QAC7B,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,wBAAwB,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;YACvD,MAAM,IAAI,mCAAe,CAAC,eAAe,CAAC,CAAC;QAC5C,CAAC;QAED,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;YAC/B,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,sCAAsC,CAAC,CAAC;YAC1D,MAAM,IAAI,mCAAe,CAAC,eAAe,CAAC,CAAC;QAC5C,CAAC;QAED,MAAM,UAAU,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAEpC,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC,IAAI,UAAU,CAAC,CAAC,CAAC,KAAK,WAAW,EAAE,CAAC;YAC9D,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,iDAAiD,CAAC,CAAC;YACrE,MAAM,IAAI,mCAAe,CAAC,eAAe,CAAC,CAAC;QAC5C,CAAC;QAED,IACC,CAAC,6EAA6E,CAAC,IAAI,CAClF,UAAU,CAAC,CAAC,CAAC,CACb,EACA,CAAC;YACF,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,2CAA2C,CAAC,CAAC;YAC/D,MAAM,IAAI,mCAAe,CAAC,eAAe,CAAC,CAAC;QAC5C,CAAC;QACD,OAAO,KAAK,CAAC;IACd,CAAC;IAED,KAAK,CAAC,gBAAgB;QACrB,MAAM,aAAa,GAAG,MAAM,IAAI,CAAC,oBAAoB,EAAE,CAAC;QAExD,MAAM,KAAK,GAAG,IAAI,CAAC,aAAa,EAAE,CAAC;QACnC,MAAM,KAAK,GAAG,IAAI,CAAC,aAAa,EAAE,CAAC;QAEnC,MAAM,gBAAgB,GAAG,MAAM,CAAC,qBAAqB,CAAC,aAAa,EAAE;YACpE,YAAY,EAAE,IAAI,CAAC,cAAc,EAAE;YACnC,aAAa,EAAE,MAAM;YACrB,KAAK,EAAE,sBAAsB;YAC7B,MAAM,EAAE,gBAAgB;YACxB,KAAK,EAAE,KAAK,CAAC,SAAS;YACtB,KAAK,EAAE,KAAK,CAAC,SAAS;SACtB,CAAC,CAAC;QAEH,OAAO,EAAE,GAAG,EAAE,gBAAgB,EAAE,KAAK,EAAE,KAAK,CAAC,MAAM,EAAE,KAAK,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC;IAC5E,CAAC;IAED,KAAK,CAAC,SAAS,CAAC,WAAgB,EAAE,WAAmB,EAAE,WAAmB;QACzE,MAAM,aAAa,GAAG,MAAM,IAAI,CAAC,oBAAoB,EAAE,CAAC;QAExD,MAAM,aAAa,GAAG,IAAI,CAAC,WAAW,CAAC,WAAW,CAAC,CAAC;QACpD,MAAM,aAAa,GAAG,IAAI,CAAC,WAAW,CAAC,WAAW,CAAC,CAAC;QAEpD,IAAI,MAAM,CAAC;QACX,IAAI,CAAC;YACJ,MAAM,GAAG,MAAM,MAAM,CAAC,sBAAsB,CAAC,aAAa,EAAE,WAAW,EAAE;gBACxE,aAAa;gBACb,aAAa;aACb,CAAC,CAAC;QACJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,kDAAkD,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;YACjF,MAAM,IAAI,mCAAe,CAAC,4BAA4B,CAAC,CAAC;QACzD,CAAC;QAED,IAAI,MAAM,CAAC;QACX,IAAI,CAAC;YACJ,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC;QAC1B,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,sCAAsC,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;YACrE,MAAM,IAAI,mCAAe,CAAC,eAAe,CAAC,CAAC;QAC5C,CAAC;QAED,IAAI,CAAC,MAAM,EAAE,CAAC;YACb,MAAM,IAAI,gCAAc,CAAC,mCAAmC,CAAC,CAAC;QAC/D,CAAC;QAED,IAAI,QAAQ,CAAC;QACb,IAAI,CAAC;YACJ,QAAQ,GAAG,MAAM,MAAM,CAAC,aAAa,CAAC,aAAa,EAAE,MAAM,CAAC,YAAY,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC;QACvF,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,2BAA2B,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;YAC1D,MAAM,IAAI,mCAAe,CAAC,eAAe,CAAC,CAAC;QAC5C,CAAC;QAED,IAAI,CAAC,QAAQ,CAAC,KAAK,EAAE,CAAC;YACrB,MAAM,IAAI,mCAAe,CAAC,sBAAsB,CAAC,CAAC;QACnD,CAAC;QAED,IAAI,CAAC,IAAA,iBAAY,EAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;YACnC,MAAM,IAAI,mCAAe,CAAC,sBAAsB,CAAC,CAAC;QACnD,CAAC;QAED,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,sBAAsB,CAAC,OAAO,CAAC;YAC5D,KAAK,EAAE,EAAE,UAAU,EAAE,MAAM,CAAC,GAAG,EAAE,YAAY,EAAE,MAAM,EAAE;YACvD,SAAS,EAAE;gBACV,IAAI,EAAE;oBACL,IAAI,EAAE,IAAI;iBACV;aACD;SACD,CAAC,CAAC;QAEH,IAAI,UAAU,EAAE,CAAC;YAChB,OAAO,UAAU,CAAC,IAAI,CAAC;QACxB,CAAC;QAED,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,OAAO,CAAC;YACnD,KAAK,EAAE,EAAE,KAAK,EAAE,QAAQ,CAAC,KAAK,EAAE;YAChC,SAAS,EAAE,CAAC,gBAAgB,EAAE,MAAM,CAAC;SACrC,CAAC,CAAC;QAEH,IAAI,SAAS,EAAE,CAAC;YACf,IAAI,CAAC,MAAM,CAAC,KAAK,CAChB,+BAA+B,QAAQ,CAAC,KAAK,yCAAyC,CACtF,CAAC;YAEF,MAAM,EAAE,GAAG,IAAI,CAAC,sBAAsB,CAAC,MAAM,CAAC;gBAC7C,UAAU,EAAE,MAAM,CAAC,GAAG;gBACtB,YAAY,EAAE,MAAM;gBACpB,MAAM,EAAE,SAAS,CAAC,EAAE;aACpB,CAAC,CAAC;YAEH,MAAM,IAAI,CAAC,sBAAsB,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YAE3C,OAAO,SAAS,CAAC;QAClB,CAAC;QAED,OAAO,MAAM,IAAI,CAAC,cAAc,CAAC,OAAO,CAAC,WAAW,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE;YAClE,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,qBAAqB,CAC/D;gBACC,SAAS,EAAE,QAAQ,CAAC,UAAU;gBAC9B,QAAQ,EAAE,QAAQ,CAAC,WAAW;gBAC9B,KAAK,EAAE,QAAQ,CAAC,KAAK;gBACrB,cAAc,EAAE,EAAE;gBAClB,IAAI,EAAE,uBAAkB;gBACxB,QAAQ,EAAE,iBAAiB;aAC3B,EACD,GAAG,CACH,CAAC;YAEF,MAAM,GAAG,CAAC,IAAI,CACb,GAAG,CAAC,MAAM,CAAC,iBAAY,EAAE;gBACxB,UAAU,EAAE,MAAM,CAAC,GAAG;gBACtB,YAAY,EAAE,MAAM;gBACpB,MAAM,EAAE,IAAI,CAAC,EAAE;aACf,CAAC,CACF,CAAC;YAEF,OAAO,IAAI,CAAC;QACb,CAAC,CAAC,CAAC;IACJ,CAAC;IAEO,KAAK,CAAC,uCAAuC;QACpD,IAAI,IAAI,CAAC,gBAAgB,CAAC,WAAW,EAAE,CAAC;YACvC,MAAM,EAAE,SAAS,EAAE,GAAG,wDAAa,oCAAoC,GAAC,CAAC;YACzE,MAAM,cAAS,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,cAAc,CAAC,EAAE,OAAO,EAAE,oBAAoB,EAAE,CAAC,CAAC;QAClF,CAAC;IACF,CAAC;IAKK,AAAN,KAAK,CAAC,MAAM;QACX,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC;YACtB,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,+CAA+C,CAAC,CAAC;YAClE,OAAO;QACR,CAAC;QACD,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC;QACxB,IAAI,CAAC;YACJ,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,mEAAmE,CAAC,CAAC;YACvF,MAAM,YAAY,GAAG,MAAM,IAAI,CAAC,6BAA6B,CAAC,IAAI,CAAC,CAAC;YACpE,IAAI,YAAY,EAAE,CAAC;gBAClB,IAAI,CAAC,UAAU,GAAG,YAAY,CAAC;gBAC/B,IAAI,CAAC,uBAAuB,GAAG,SAAS,CAAC;YAC1C,CAAC;iBAAM,CAAC;gBACP,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,mEAAmE,CAAC,CAAC;YACvF,CAAC;YACD,MAAM,IAAA,wCAA0B,GAAE,CAAC;YAEnC,MAAM,kBAAkB,GAAG,IAAA,+CAAiC,GAAE,CAAC;YAE/D,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,qBAAqB,kBAAkB,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,UAAU,GAAG,CAAC,CAAC;YAEvF,cAAS,CAAC,GAAG,CAAC,qBAAY,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,YAAY,GAAG,kBAAkB,CAAC;QACxE,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,iEAAiE,EAAE;gBACpF,KAAK;aACL,CAAC,CAAC;QACJ,CAAC;gBAAS,CAAC;YACV,IAAI,CAAC,WAAW,GAAG,KAAK,CAAC;QAC1B,CAAC;IACF,CAAC;IAED,KAAK,CAAC,6BAA6B,CAClC,aAAa,GAAG,KAAK;QAErB,MAAM,YAAY,GAAG,MAAM,IAAI,CAAC,kBAAkB,CAAC,SAAS,CAAC,mCAAuB,CAAC,CAAC;QAEtF,IAAI,YAAY,EAAE,CAAC;YAClB,IAAI,CAAC;gBACJ,MAAM,UAAU,GAAG,IAAA,wBAAS,EAAgB,YAAY,CAAC,KAAK,CAAC,CAAC;gBAEhE,IAAI,UAAU,CAAC,iBAAiB,KAAK,EAAE;oBAAE,OAAO,SAAS,CAAC;gBAE1D,MAAM,YAAY,GAAG,IAAI,GAAG,CAAC,UAAU,CAAC,iBAAiB,CAAC,CAAC;gBAE3D,IAAI,UAAU,CAAC,YAAY,IAAI,aAAa,EAAE,CAAC;oBAC9C,UAAU,CAAC,YAAY,GAAG,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,YAAY,CAAC,CAAC;gBACxE,CAAC;gBACD,OAAO;oBACN,GAAG,UAAU;oBACb,iBAAiB,EAAE,YAAY;iBAC/B,CAAC;YACH,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBAChB,IAAI,CAAC,MAAM,CAAC,IAAI,CACf,yFAAyF,EAEzF,EAAE,KAAK,EAAE,CACT,CAAC;YACH,CAAC;QACF,CAAC;QACD,OAAO,SAAS,CAAC;IAClB,CAAC;IAED,KAAK,CAAC,UAAU,CAAC,aAAa,GAAG,KAAK;QACrC,MAAM,aAAa,GAAG,MAAM,IAAI,CAAC,6BAA6B,CAAC,aAAa,CAAC,CAAC;QAE9E,IAAI,aAAa,EAAE,CAAC;YACnB,OAAO,aAAa,CAAC;QACtB,CAAC;QAED,OAAO,2BAA2B,CAAC;IACpC,CAAC;IAED,KAAK,CAAC,YAAY,CAAC,SAAwB;QAC1C,IAAI,iBAAsB,CAAC;QAC3B,IAAI,CAAC;YAEJ,iBAAiB,GAAG,IAAI,GAAG,CAAC,SAAS,CAAC,iBAAiB,CAAC,CAAC;QAC1D,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,6CAA6C,SAAS,CAAC,iBAAiB,EAAE,CAAC,CAAC;YAC9F,MAAM,IAAI,wBAAS,CAAC,gDAAgD,CAAC,CAAC;QACvE,CAAC;QACD,IAAI,SAAS,CAAC,YAAY,KAAK,6CAAiC,EAAE,CAAC;YAClE,SAAS,CAAC,YAAY,GAAG,IAAI,CAAC,UAAU,CAAC,YAAY,CAAC;QACvD,CAAC;QACD,IAAI,CAAC;YACJ,MAAM,kBAAkB,GAAG,MAAM,MAAM,CAAC,SAAS,CAChD,iBAAiB,EACjB,SAAS,CAAC,QAAQ,EAClB,SAAS,CAAC,YAAY,CACtB,CAAC;YAEF,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,6BAA6B,IAAI,CAAC,SAAS,CAAC,kBAAkB,CAAC,EAAE,CAAC,CAAC;QACtF,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,kCAAkC,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;YACjE,MAAM,IAAI,wBAAS,CAAC,uEAAuE,CAAC,CAAC;QAC9F,CAAC;QACD,MAAM,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC;YAClC,GAAG,EAAE,mCAAuB;YAC5B,KAAK,EAAE,IAAI,CAAC,SAAS,CAAC;gBACrB,GAAG,SAAS;gBACZ,YAAY,EAAE,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,YAAY,CAAC;aACzD,CAAC;YACF,aAAa,EAAE,IAAI;SACnB,CAAC,CAAC;QAOH,IAAI,CAAC,UAAU,GAAG;YACjB,GAAG,SAAS;YACZ,iBAAiB;SACjB,CAAC;QACF,IAAI,CAAC,uBAAuB,GAAG,SAAS,CAAC;QACzC,IAAI,CAAC,MAAM,CAAC,KAAK,CAChB,qBAAqB,IAAI,CAAC,UAAU,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,UAAU,GAAG,CAC7E,CAAC;QAEF,MAAM,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC,UAAU,CAAC,YAAY,CAAC,CAAC;QAE7D,MAAM,IAAI,CAAC,uCAAuC,EAAE,CAAC;IACtD,CAAC;IAEO,KAAK,CAAC,mBAAmB,CAAC,OAAgB;QACjD,MAAM,2BAA2B,GAAG,IAAA,4CAA8B,GAAE,CAAC;QAErE,IAAI,OAAO,IAAI,CAAC,IAAA,gDAAkC,GAAE,IAAI,CAAC,IAAA,+CAAiC,GAAE,EAAE,CAAC;YAC9F,MAAM,IAAI,2CAAmB,CAC5B,qHAAqH,2BAA2B,GAAG,CACnJ,CAAC;QACH,CAAC;QAED,MAAM,0BAA0B,GAC/B,CAAC,OAAO,IAAI,2BAA2B,KAAK,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,2BAA2B,CAAC;QAE5F,cAAS,CAAC,GAAG,CAAC,qBAAY,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,YAAY,GAAG,OAAO,CAAC;QAC5D,MAAM,IAAA,4CAA8B,EAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,0BAA0B,CAAC,CAAC;IACrF,CAAC;IASO,KAAK,CAAC,oBAAoB;QACjC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,IACC,IAAI,CAAC,uBAAuB,KAAK,SAAS;YAC1C,GAAG,IAAI,IAAI,CAAC,uBAAuB,CAAC,SAAS,CAAC,OAAO,EAAE;YACvD,IAAI,CAAC,UAAU,CAAC,iBAAiB,CAAC,QAAQ,EAAE;gBAC3C,IAAI,CAAC,uBAAuB,CAAC,iBAAiB,CAAC,QAAQ,EAAE;YAC1D,IAAI,CAAC,UAAU,CAAC,QAAQ,KAAK,IAAI,CAAC,uBAAuB,CAAC,QAAQ;YAClE,IAAI,CAAC,UAAU,CAAC,YAAY,KAAK,IAAI,CAAC,uBAAuB,CAAC,YAAY,EACzE,CAAC;YACF,IAAI,CAAC,uBAAuB,GAAG;gBAC9B,GAAG,IAAI,CAAC,UAAU;gBAClB,aAAa,EAAE,MAAM,CAAC,SAAS,CAC9B,IAAI,CAAC,UAAU,CAAC,iBAAiB,EACjC,IAAI,CAAC,UAAU,CAAC,QAAQ,EACxB,IAAI,CAAC,UAAU,CAAC,YAAY,CAC5B;gBACD,SAAS,EAAE,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;aAChD,CAAC;QACH,CAAC;QAED,OAAO,MAAM,IAAI,CAAC,uBAAuB,CAAC,aAAa,CAAC;IACzD,CAAC;CACD,CAAA;AAjaY,kCAAW;AAuPjB;IADL,IAAA,0BAAa,EAAC,oBAAoB,CAAC;;;;yCA8BnC;sBApRW,WAAW;IADvB,IAAA,YAAO,GAAE;qCAK6B,uBAAkB;QACd,2BAAsB;QAClC,wBAAU;QACR,qBAAY;QACV,mBAAc;QACtB,iBAAM;QACN,uBAAM;QACF,wBAAU;QACJ,2BAAgB;GAZxC,WAAW,CAiavB"}
package/dist/sso.ee/oidc/routes/oidc.controller.ee.d.ts CHANGED
@@ -1,15 +1,19 @@
1
1
  import { OidcConfigDto } from '@n8n/api-types';
2
+ import { Logger } from '@n8n/backend-common';
3
+ import { GlobalConfig } from '@n8n/config';
2
4
  import { AuthenticatedRequest } from '@n8n/db';
3
5
  import { Request, Response } from 'express';
4
6
  import { AuthService } from '../../../auth/auth.service';
7
+ import { AuthlessRequest } from '../../../requests';
5
8
  import { UrlService } from '../../../services/url.service';
6
9
  import { OidcService } from '../oidc.service.ee';
7
- import { AuthlessRequest } from '../../../requests';
8
10
  export declare class OidcController {
9
11
  private readonly oidcService;
10
12
  private readonly authService;
11
13
  private readonly urlService;
12
- constructor(oidcService: OidcService, authService: AuthService, urlService: UrlService);
14
+ private readonly globalConfig;
15
+ private readonly logger;
16
+ constructor(oidcService: OidcService, authService: AuthService, urlService: UrlService, globalConfig: GlobalConfig, logger: Logger);
13
17
  retrieveConfiguration(_req: AuthenticatedRequest): Promise<Pick<OidcConfigDto, "clientId" | "clientSecret" | "loginEnabled"> & {
14
18
  discoveryEndpoint: URL;
15
19
  }>;
package/dist/sso.ee/oidc/routes/oidc.controller.ee.js CHANGED
@@ -14,21 +14,28 @@ var __param = (this && this.__param) || function (paramIndex, decorator) {
14
14
  Object.defineProperty(exports, "__esModule", { value: true });
15
15
  exports.OidcController = void 0;
16
16
  const api_types_1 = require("@n8n/api-types");
17
+ const backend_common_1 = require("@n8n/backend-common");
18
+ const config_1 = require("@n8n/config");
19
+ const constants_1 = require("@n8n/constants");
17
20
  const decorators_1 = require("@n8n/decorators");
18
21
  const auth_service_1 = require("../../../auth/auth.service");
22
+ const constants_2 = require("../../../constants");
23
+ const bad_request_error_1 = require("../../../errors/response-errors/bad-request.error");
19
24
  const url_service_1 = require("../../../services/url.service");
20
- const constants_1 = require("../constants");
25
+ const constants_3 = require("../constants");
21
26
  const oidc_service_ee_1 = require("../oidc.service.ee");
22
27
  let OidcController = class OidcController {
23
- constructor(oidcService, authService, urlService) {
28
+ constructor(oidcService, authService, urlService, globalConfig, logger) {
24
29
  this.oidcService = oidcService;
25
30
  this.authService = authService;
26
31
  this.urlService = urlService;
32
+ this.globalConfig = globalConfig;
33
+ this.logger = logger;
27
34
  }
28
35
  async retrieveConfiguration(_req) {
29
36
  const config = await this.oidcService.loadConfig();
30
37
  if (config.clientSecret) {
31
- config.clientSecret = constants_1.OIDC_CLIENT_SECRET_REDACTED_VALUE;
38
+ config.clientSecret = constants_3.OIDC_CLIENT_SECRET_REDACTED_VALUE;
32
39
  }
33
40
  return config;
34
41
  }
@@ -38,13 +45,38 @@ let OidcController = class OidcController {
38
45
  return config;
39
46
  }
40
47
  async redirectToAuthProvider(_req, res) {
41
- const authorizationURL = await this.oidcService.generateLoginUrl();
42
- res.redirect(authorizationURL.toString());
48
+ const authorization = await this.oidcService.generateLoginUrl();
49
+ const { samesite, secure } = this.globalConfig.auth.cookie;
50
+ res.cookie(constants_2.OIDC_STATE_COOKIE_NAME, authorization.state, {
51
+ maxAge: 15 * constants_1.Time.minutes.toMilliseconds,
52
+ httpOnly: true,
53
+ sameSite: samesite,
54
+ secure,
55
+ });
56
+ res.cookie(constants_2.OIDC_NONCE_COOKIE_NAME, authorization.nonce, {
57
+ maxAge: 15 * constants_1.Time.minutes.toMilliseconds,
58
+ httpOnly: true,
59
+ sameSite: samesite,
60
+ secure,
61
+ });
62
+ res.redirect(authorization.url.toString());
43
63
  }
44
64
  async callbackHandler(req, res) {
45
65
  const fullUrl = `${this.urlService.getInstanceBaseUrl()}${req.originalUrl}`;
46
66
  const callbackUrl = new URL(fullUrl);
47
- const user = await this.oidcService.loginUser(callbackUrl);
67
+ const state = req.cookies[constants_2.OIDC_STATE_COOKIE_NAME];
68
+ if (typeof state !== 'string') {
69
+ this.logger.error('State is missing');
70
+ throw new bad_request_error_1.BadRequestError('Invalid state');
71
+ }
72
+ const nonce = req.cookies[constants_2.OIDC_NONCE_COOKIE_NAME];
73
+ if (typeof nonce !== 'string') {
74
+ this.logger.error('Nonce is missing');
75
+ throw new bad_request_error_1.BadRequestError('Invalid nonce');
76
+ }
77
+ const user = await this.oidcService.loginUser(callbackUrl, state, nonce);
78
+ res.clearCookie(constants_2.OIDC_STATE_COOKIE_NAME);
79
+ res.clearCookie(constants_2.OIDC_NONCE_COOKIE_NAME);
48
80
  this.authService.issueCookie(res, user, true, req.browserId);
49
81
  res.redirect('/');
50
82
  }
@@ -85,6 +117,8 @@ exports.OidcController = OidcController = __decorate([
85
117
  (0, decorators_1.RestController)('/sso/oidc'),
86
118
  __metadata("design:paramtypes", [oidc_service_ee_1.OidcService,
87
119
  auth_service_1.AuthService,
88
- url_service_1.UrlService])
120
+ url_service_1.UrlService,
121
+ config_1.GlobalConfig,
122
+ backend_common_1.Logger])
89
123
  ], OidcController);
90
124
  //# sourceMappingURL=oidc.controller.ee.js.map
package/dist/sso.ee/oidc/routes/oidc.controller.ee.js.map CHANGED
@@ -1 +1 @@
1
- {"version":3,"file":"oidc.controller.ee.js","sourceRoot":"","sources":["../../../../src/sso.ee/oidc/routes/oidc.controller.ee.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;AAAA,8CAA+C;AAE/C,gDAAyF;AAGzF,sDAAkD;AAClD,wDAAoD;AAEpD,4CAAiE;AACjE,wDAAiD;AAI1C,IAAM,cAAc,GAApB,MAAM,cAAc;IAC1B,YACkB,WAAwB,EACxB,WAAwB,EACxB,UAAsB;QAFtB,gBAAW,GAAX,WAAW,CAAa;QACxB,gBAAW,GAAX,WAAW,CAAa;QACxB,eAAU,GAAV,UAAU,CAAY;IACrC,CAAC;IAKE,AAAN,KAAK,CAAC,qBAAqB,CAAC,IAA0B;QACrD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,UAAU,EAAE,CAAC;QACnD,IAAI,MAAM,CAAC,YAAY,EAAE,CAAC;YACzB,MAAM,CAAC,YAAY,GAAG,6CAAiC,CAAC;QACzD,CAAC;QACD,OAAO,MAAM,CAAC;IACf,CAAC;IAKK,AAAN,KAAK,CAAC,iBAAiB,CACtB,IAA0B,EAC1B,IAAc,EACR,OAAsB;QAE5B,MAAM,IAAI,CAAC,WAAW,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC;QAC7C,MAAM,MAAM,GAAG,IAAI,CAAC,WAAW,CAAC,iBAAiB,EAAE,CAAC;QACpD,OAAO,MAAM,CAAC;IACf,CAAC;IAIK,AAAN,KAAK,CAAC,sBAAsB,CAAC,IAAa,EAAE,GAAa;QACxD,MAAM,gBAAgB,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,gBAAgB,EAAE,CAAC;QAEnE,GAAG,CAAC,QAAQ,CAAC,gBAAgB,CAAC,QAAQ,EAAE,CAAC,CAAC;IAC3C,CAAC;IAIK,AAAN,KAAK,CAAC,eAAe,CAAC,GAAoB,EAAE,GAAa;QACxD,MAAM,OAAO,GAAG,GAAG,IAAI,CAAC,UAAU,CAAC,kBAAkB,EAAE,GAAG,GAAG,CAAC,WAAW,EAAE,CAAC;QAC5E,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,CAAC;QAErC,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,SAAS,CAAC,WAAW,CAAC,CAAC;QAE3D,IAAI,CAAC,WAAW,CAAC,WAAW,CAAC,GAAG,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,CAAC,SAAS,CAAC,CAAC;QAE7D,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;IACnB,CAAC;CACD,CAAA;AAnDY,wCAAc;AAUpB;IAHL,IAAA,gBAAG,EAAC,SAAS,CAAC;IACd,IAAA,qBAAQ,EAAC,WAAW,CAAC;IACrB,IAAA,wBAAW,EAAC,aAAa,CAAC;;;;2DAO1B;AAKK;IAHL,IAAA,iBAAI,EAAC,SAAS,CAAC;IACf,IAAA,qBAAQ,EAAC,WAAW,CAAC;IACrB,IAAA,wBAAW,EAAC,aAAa,CAAC;IAIzB,WAAA,iBAAI,CAAA;;qDAAU,yBAAa;;uDAK5B;AAIK;IAFL,IAAA,gBAAG,EAAC,QAAQ,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;IACjC,IAAA,qBAAQ,EAAC,WAAW,CAAC;;;;4DAKrB;AAIK;IAFL,IAAA,gBAAG,EAAC,WAAW,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;IACpC,IAAA,qBAAQ,EAAC,WAAW,CAAC;;;;qDAUrB;yBAlDW,cAAc;IAD1B,IAAA,2BAAc,EAAC,WAAW,CAAC;qCAGI,6BAAW;QACX,0BAAW;QACZ,wBAAU;GAJ5B,cAAc,CAmD1B"}
1
+ {"version":3,"file":"oidc.controller.ee.js","sourceRoot":"","sources":["../../../../src/sso.ee/oidc/routes/oidc.controller.ee.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;AAAA,8CAA+C;AAC/C,wDAA6C;AAC7C,wCAA2C;AAC3C,8CAAsC;AAEtC,gDAAyF;AAGzF,sDAAkD;AAClD,2CAA6E;AAC7E,kFAA6E;AAE7E,wDAAoD;AAEpD,4CAAiE;AACjE,wDAAiD;AAG1C,IAAM,cAAc,GAApB,MAAM,cAAc;IAC1B,YACkB,WAAwB,EACxB,WAAwB,EACxB,UAAsB,EACtB,YAA0B,EAC1B,MAAc;QAJd,gBAAW,GAAX,WAAW,CAAa;QACxB,gBAAW,GAAX,WAAW,CAAa;QACxB,eAAU,GAAV,UAAU,CAAY;QACtB,iBAAY,GAAZ,YAAY,CAAc;QAC1B,WAAM,GAAN,MAAM,CAAQ;IAC7B,CAAC;IAKE,AAAN,KAAK,CAAC,qBAAqB,CAAC,IAA0B;QACrD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,UAAU,EAAE,CAAC;QACnD,IAAI,MAAM,CAAC,YAAY,EAAE,CAAC;YACzB,MAAM,CAAC,YAAY,GAAG,6CAAiC,CAAC;QACzD,CAAC;QACD,OAAO,MAAM,CAAC;IACf,CAAC;IAKK,AAAN,KAAK,CAAC,iBAAiB,CACtB,IAA0B,EAC1B,IAAc,EACR,OAAsB;QAE5B,MAAM,IAAI,CAAC,WAAW,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC;QAC7C,MAAM,MAAM,GAAG,IAAI,CAAC,WAAW,CAAC,iBAAiB,EAAE,CAAC;QACpD,OAAO,MAAM,CAAC;IACf,CAAC;IAIK,AAAN,KAAK,CAAC,sBAAsB,CAAC,IAAa,EAAE,GAAa;QACxD,MAAM,aAAa,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,gBAAgB,EAAE,CAAC;QAChE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,MAAM,CAAC;QAE3D,GAAG,CAAC,MAAM,CAAC,kCAAsB,EAAE,aAAa,CAAC,KAAK,EAAE;YACvD,MAAM,EAAE,EAAE,GAAG,gBAAI,CAAC,OAAO,CAAC,cAAc;YACxC,QAAQ,EAAE,IAAI;YACd,QAAQ,EAAE,QAAQ;YAClB,MAAM;SACN,CAAC,CAAC;QACH,GAAG,CAAC,MAAM,CAAC,kCAAsB,EAAE,aAAa,CAAC,KAAK,EAAE;YACvD,MAAM,EAAE,EAAE,GAAG,gBAAI,CAAC,OAAO,CAAC,cAAc;YACxC,QAAQ,EAAE,IAAI;YACd,QAAQ,EAAE,QAAQ;YAClB,MAAM;SACN,CAAC,CAAC;QACH,GAAG,CAAC,QAAQ,CAAC,aAAa,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC,CAAC;IAC5C,CAAC;IAIK,AAAN,KAAK,CAAC,eAAe,CAAC,GAAoB,EAAE,GAAa;QACxD,MAAM,OAAO,GAAG,GAAG,IAAI,CAAC,UAAU,CAAC,kBAAkB,EAAE,GAAG,GAAG,CAAC,WAAW,EAAE,CAAC;QAC5E,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,CAAC;QACrC,MAAM,KAAK,GAAG,GAAG,CAAC,OAAO,CAAC,kCAAsB,CAAC,CAAC;QAElD,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;YAC/B,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,kBAAkB,CAAC,CAAC;YACtC,MAAM,IAAI,mCAAe,CAAC,eAAe,CAAC,CAAC;QAC5C,CAAC;QAED,MAAM,KAAK,GAAG,GAAG,CAAC,OAAO,CAAC,kCAAsB,CAAC,CAAC;QAElD,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;YAC/B,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,kBAAkB,CAAC,CAAC;YACtC,MAAM,IAAI,mCAAe,CAAC,eAAe,CAAC,CAAC;QAC5C,CAAC;QAED,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,SAAS,CAAC,WAAW,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC;QAEzE,GAAG,CAAC,WAAW,CAAC,kCAAsB,CAAC,CAAC;QACxC,GAAG,CAAC,WAAW,CAAC,kCAAsB,CAAC,CAAC;QACxC,IAAI,CAAC,WAAW,CAAC,WAAW,CAAC,GAAG,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,CAAC,SAAS,CAAC,CAAC;QAE7D,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;IACnB,CAAC;CACD,CAAA;AAjFY,wCAAc;AAYpB;IAHL,IAAA,gBAAG,EAAC,SAAS,CAAC;IACd,IAAA,qBAAQ,EAAC,WAAW,CAAC;IACrB,IAAA,wBAAW,EAAC,aAAa,CAAC;;;;2DAO1B;AAKK;IAHL,IAAA,iBAAI,EAAC,SAAS,CAAC;IACf,IAAA,qBAAQ,EAAC,WAAW,CAAC;IACrB,IAAA,wBAAW,EAAC,aAAa,CAAC;IAIzB,WAAA,iBAAI,CAAA;;qDAAU,yBAAa;;uDAK5B;AAIK;IAFL,IAAA,gBAAG,EAAC,QAAQ,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;IACjC,IAAA,qBAAQ,EAAC,WAAW,CAAC;;;;4DAkBrB;AAIK;IAFL,IAAA,gBAAG,EAAC,WAAW,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;IACpC,IAAA,qBAAQ,EAAC,WAAW,CAAC;;;;qDAyBrB;yBAhFW,cAAc;IAD1B,IAAA,2BAAc,EAAC,WAAW,CAAC;qCAGI,6BAAW;QACX,0BAAW;QACZ,wBAAU;QACR,qBAAY;QAClB,uBAAM;GANpB,cAAc,CAiF1B"}
package/dist/sso.ee/sso-helpers.d.ts CHANGED
@@ -1,5 +1,6 @@
1
1
  import { type AuthProviderType } from '@n8n/db';
2
2
  export declare function setCurrentAuthenticationMethod(authenticationMethod: AuthProviderType): Promise<void>;
3
+ export declare function reloadAuthenticationMethod(): Promise<void>;
3
4
  export declare function getCurrentAuthenticationMethod(): AuthProviderType;
4
5
  export declare function isSamlCurrentAuthenticationMethod(): boolean;
5
6
  export declare function isLdapCurrentAuthenticationMethod(): boolean;
package/dist/sso.ee/sso-helpers.js CHANGED
@@ -4,6 +4,7 @@ var __importDefault = (this && this.__importDefault) || function (mod) {
4
4
  };
5
5
  Object.defineProperty(exports, "__esModule", { value: true });
6
6
  exports.setCurrentAuthenticationMethod = setCurrentAuthenticationMethod;
7
+ exports.reloadAuthenticationMethod = reloadAuthenticationMethod;
7
8
  exports.getCurrentAuthenticationMethod = getCurrentAuthenticationMethod;
8
9
  exports.isSamlCurrentAuthenticationMethod = isSamlCurrentAuthenticationMethod;
9
10
  exports.isLdapCurrentAuthenticationMethod = isLdapCurrentAuthenticationMethod;
@@ -15,6 +16,7 @@ const config_1 = require("@n8n/config");
15
16
  const db_1 = require("@n8n/db");
16
17
  const di_1 = require("@n8n/di");
17
18
  const config_2 = __importDefault(require("../config"));
19
+ const backend_common_1 = require("@n8n/backend-common");
18
20
  async function setCurrentAuthenticationMethod(authenticationMethod) {
19
21
  config_2.default.set('userManagement.authenticationMethod', authenticationMethod);
20
22
  await di_1.Container.get(db_1.SettingsRepository).save({
@@ -23,6 +25,23 @@ async function setCurrentAuthenticationMethod(authenticationMethod) {
23
25
  loadOnStartup: true,
24
26
  }, { transaction: false });
25
27
  }
28
+ async function reloadAuthenticationMethod() {
29
+ const settings = await di_1.Container.get(db_1.SettingsRepository).findByKey('userManagement.authenticationMethod');
30
+ if (settings) {
31
+ if ((0, db_1.isAuthProviderType)(settings.value)) {
32
+ const authenticationMethod = settings.value;
33
+ config_2.default.set('userManagement.authenticationMethod', authenticationMethod);
34
+ di_1.Container.get(backend_common_1.Logger).debug('Reloaded authentication method from the database', {
35
+ authenticationMethod,
36
+ });
37
+ }
38
+ else {
39
+ di_1.Container.get(backend_common_1.Logger).warn('Invalid authentication method read from the database', {
40
+ value: settings.value,
41
+ });
42
+ }
43
+ }
44
+ }
26
45
  function getCurrentAuthenticationMethod() {
27
46
  return config_2.default.getEnv('userManagement.authenticationMethod');
28
47
  }
package/dist/sso.ee/sso-helpers.js.map CHANGED
@@ -1 +1 @@
1
- {"version":3,"file":"sso-helpers.js","sourceRoot":"","sources":["../../src/sso.ee/sso-helpers.ts"],"names":[],"mappings":";;;;;AAYA,wEAYC;AAED,wEAEC;AAED,8EAEC;AAED,8EAEC;AAED,8EAEC;AAED,gFAEC;AAED,gFAEC;AAED,8EAEC;AApDD,wCAA2C;AAC3C,gCAAoE;AACpE,gCAAoC;AAEpC,sDAA8B;AAQvB,KAAK,UAAU,8BAA8B,CACnD,oBAAsC;IAEtC,gBAAM,CAAC,GAAG,CAAC,qCAAqC,EAAE,oBAAoB,CAAC,CAAC;IACxE,MAAM,cAAS,CAAC,GAAG,CAAC,uBAAkB,CAAC,CAAC,IAAI,CAC3C;QACC,GAAG,EAAE,qCAAqC;QAC1C,KAAK,EAAE,oBAAoB;QAC3B,aAAa,EAAE,IAAI;KACnB,EACD,EAAE,WAAW,EAAE,KAAK,EAAE,CACtB,CAAC;AACH,CAAC;AAED,SAAgB,8BAA8B;IAC7C,OAAO,gBAAM,CAAC,MAAM,CAAC,qCAAqC,CAAC,CAAC;AAC7D,CAAC;AAED,SAAgB,iCAAiC;IAChD,OAAO,8BAA8B,EAAE,KAAK,MAAM,CAAC;AACpD,CAAC;AAED,SAAgB,iCAAiC;IAChD,OAAO,8BAA8B,EAAE,KAAK,MAAM,CAAC;AACpD,CAAC;AAED,SAAgB,iCAAiC;IAChD,OAAO,8BAA8B,EAAE,KAAK,MAAM,CAAC;AACpD,CAAC;AAED,SAAgB,kCAAkC;IACjD,OAAO,8BAA8B,EAAE,KAAK,OAAO,CAAC;AACrD,CAAC;AAED,SAAgB,kCAAkC;IACjD,OAAO,cAAS,CAAC,GAAG,CAAC,qBAAY,CAAC,CAAC,GAAG,CAAC,sBAAsB,CAAC;AAC/D,CAAC;AAED,SAAgB,iCAAiC;IAChD,OAAO,cAAS,CAAC,GAAG,CAAC,qBAAY,CAAC,CAAC,GAAG,CAAC,kBAAkB,CAAC;AAC3D,CAAC"}
1
+ {"version":3,"file":"sso-helpers.js","sourceRoot":"","sources":["../../src/sso.ee/sso-helpers.ts"],"names":[],"mappings":";;;;;AAaA,wEAYC;AAED,gEAiBC;AAED,wEAEC;AAED,8EAEC;AAED,8EAEC;AAED,8EAEC;AAED,gFAEC;AAED,gFAEC;AAED,8EAEC;AAxED,wCAA2C;AAC3C,gCAAwF;AACxF,gCAAoC;AAEpC,sDAA8B;AAC9B,wDAA6C;AAQtC,KAAK,UAAU,8BAA8B,CACnD,oBAAsC;IAEtC,gBAAM,CAAC,GAAG,CAAC,qCAAqC,EAAE,oBAAoB,CAAC,CAAC;IACxE,MAAM,cAAS,CAAC,GAAG,CAAC,uBAAkB,CAAC,CAAC,IAAI,CAC3C;QACC,GAAG,EAAE,qCAAqC;QAC1C,KAAK,EAAE,oBAAoB;QAC3B,aAAa,EAAE,IAAI;KACnB,EACD,EAAE,WAAW,EAAE,KAAK,EAAE,CACtB,CAAC;AACH,CAAC;AAEM,KAAK,UAAU,0BAA0B;IAC/C,MAAM,QAAQ,GAAG,MAAM,cAAS,CAAC,GAAG,CAAC,uBAAkB,CAAC,CAAC,SAAS,CACjE,qCAAqC,CACrC,CAAC;IACF,IAAI,QAAQ,EAAE,CAAC;QACd,IAAI,IAAA,uBAAkB,EAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;YACxC,MAAM,oBAAoB,GAAG,QAAQ,CAAC,KAAK,CAAC;YAC5C,gBAAM,CAAC,GAAG,CAAC,qCAAqC,EAAE,oBAAoB,CAAC,CAAC;YACxE,cAAS,CAAC,GAAG,CAAC,uBAAM,CAAC,CAAC,KAAK,CAAC,kDAAkD,EAAE;gBAC/E,oBAAoB;aACpB,CAAC,CAAC;QACJ,CAAC;aAAM,CAAC;YACP,cAAS,CAAC,GAAG,CAAC,uBAAM,CAAC,CAAC,IAAI,CAAC,sDAAsD,EAAE;gBAClF,KAAK,EAAE,QAAQ,CAAC,KAAK;aACrB,CAAC,CAAC;QACJ,CAAC;IACF,CAAC;AACF,CAAC;AAED,SAAgB,8BAA8B;IAC7C,OAAO,gBAAM,CAAC,MAAM,CAAC,qCAAqC,CAAC,CAAC;AAC7D,CAAC;AAED,SAAgB,iCAAiC;IAChD,OAAO,8BAA8B,EAAE,KAAK,MAAM,CAAC;AACpD,CAAC;AAED,SAAgB,iCAAiC;IAChD,OAAO,8BAA8B,EAAE,KAAK,MAAM,CAAC;AACpD,CAAC;AAED,SAAgB,iCAAiC;IAChD,OAAO,8BAA8B,EAAE,KAAK,MAAM,CAAC;AACpD,CAAC;AAED,SAAgB,kCAAkC;IACjD,OAAO,8BAA8B,EAAE,KAAK,OAAO,CAAC;AACrD,CAAC;AAED,SAAgB,kCAAkC;IACjD,OAAO,cAAS,CAAC,GAAG,CAAC,qBAAY,CAAC,CAAC,GAAG,CAAC,sBAAsB,CAAC;AAC/D,CAAC;AAED,SAAgB,iCAAiC;IAChD,OAAO,cAAS,CAAC,GAAG,CAAC,qBAAY,CAAC,CAAC,GAAG,CAAC,kBAAkB,CAAC;AAC3D,CAAC"}
package/dist/task-runners/errors/missing-requirements.error.d.ts ADDED
@@ -0,0 +1,6 @@
1
+ import { UserError } from 'n8n-workflow';
2
+ type ReasonId = 'python' | 'venv';
3
+ export declare class MissingRequirementsError extends UserError {
4
+ constructor(reasonId: ReasonId);
5
+ }
6
+ export {};
package/dist/task-runners/errors/missing-requirements.error.js ADDED
@@ -0,0 +1,17 @@
1
+ "use strict";
2
+ Object.defineProperty(exports, "__esModule", { value: true });
3
+ exports.MissingRequirementsError = void 0;
4
+ const n8n_workflow_1 = require("n8n-workflow");
5
+ const ERROR_MESSAGE = 'Failed to start Python task runner in internal mode.';
6
+ const HINT = 'Launching a Python runner in internal mode is intended only for debugging and is not recommended for production. Users are encouraged to deploy in external mode. See: https://docs.n8n.io/hosting/configuration/task-runners/#setting-up-external-mode';
7
+ class MissingRequirementsError extends n8n_workflow_1.UserError {
8
+ constructor(reasonId) {
9
+ const reason = {
10
+ python: 'because Python 3 is missing from this system.',
11
+ venv: 'because its virtual environment is missing from this system.',
12
+ }[reasonId];
13
+ super([ERROR_MESSAGE, reason, HINT].join(' '));
14
+ }
15
+ }
16
+ exports.MissingRequirementsError = MissingRequirementsError;
17
+ //# sourceMappingURL=missing-requirements.error.js.map
package/dist/task-runners/errors/missing-requirements.error.js.map ADDED
@@ -0,0 +1 @@
1
+ {"version":3,"file":"missing-requirements.error.js","sourceRoot":"","sources":["../../../src/task-runners/errors/missing-requirements.error.ts"],"names":[],"mappings":";;;AAAA,+CAAyC;AAEzC,MAAM,aAAa,GAAG,sDAAsD,CAAC;AAI7E,MAAM,IAAI,GACT,yPAAyP,CAAC;AAE3P,MAAa,wBAAyB,SAAQ,wBAAS;IACtD,YAAY,QAAkB;QAC7B,MAAM,MAAM,GAAG;YACd,MAAM,EAAE,+CAA+C;YACvD,IAAI,EAAE,8DAA8D;SACpE,CAAC,QAAQ,CAAC,CAAC;QAEZ,KAAK,CAAC,CAAC,aAAa,EAAE,MAAM,EAAE,IAAI,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;IAChD,CAAC;CACD;AATD,4DASC"}
package/dist/task-runners/internal-task-runner-disconnect-analyzer.d.ts CHANGED
@@ -1,12 +1,12 @@
1
1
  import { TaskRunnersConfig } from '@n8n/config';
2
2
  import type { DisconnectErrorOptions } from '../task-runners/task-broker/task-broker-types';
3
3
  import { DefaultTaskRunnerDisconnectAnalyzer } from './default-task-runner-disconnect-analyzer';
4
- import { TaskRunnerProcess } from './task-runner-process';
4
+ import { JsTaskRunnerProcess } from './task-runner-process-js';
5
5
  export declare class InternalTaskRunnerDisconnectAnalyzer extends DefaultTaskRunnerDisconnectAnalyzer {
6
6
  private readonly runnerConfig;
7
7
  private readonly taskRunnerProcess;
8
8
  private readonly exitReasonSignal;
9
- constructor(runnerConfig: TaskRunnersConfig, taskRunnerProcess: TaskRunnerProcess);
9
+ constructor(runnerConfig: TaskRunnersConfig, taskRunnerProcess: JsTaskRunnerProcess);
10
10
  toDisconnectError(opts: DisconnectErrorOptions): Promise<Error>;
11
11
  private awaitExitSignal;
12
12
  }