n8n 2.15.0 → 2.16.0

package/dist/modules/sso-saml/saml-helpers.js

@@ -91,9 +91,11 @@ function getMappedSamlAttributesFromFlowResult(flowResult, attributeMapping, jit
     const result = {
         attributes: undefined,
         missingAttributes: [],
+        rawAttributes: {},
     };
     if (flowResult?.extract?.attributes) {
         const attributes = flowResult.extract.attributes;
+        result.rawAttributes = attributes;
         const email = attributes[attributeMapping.email];
         const firstName = attributes[attributeMapping.firstName];
         const lastName = attributes[attributeMapping.lastName];

package/dist/modules/sso-saml/saml-helpers.js.map

@@ -1 +1 @@
-{"version":3,"file":"saml-helpers.js","sourceRoot":"","sources":["../../../src/modules/sso-saml/saml-helpers.ts"],"names":[],"mappings":";;;AAsBA,kDAaC;AAED,8CAEC;AAaD,oEA0BC;AAED,oEA4BC;AAOD,sFA2CC;AAED,0DAEC;AAjKD,wCAA2C;AAE3C,gCAA+E;AAC/E,gCAAoC;AACpC,+CAA4C;AAG5C,oEAAgE;AAChE,0FAAqF;AACrF,kEAA8D;AAC9D,sDAK8B;AAE9B,+DAA8E;AAIvE,KAAK,UAAU,mBAAmB,CAAC,OAAgB;IACzD,MAAM,2BAA2B,GAAG,IAAA,4CAA8B,GAAE,CAAC;IACrE,IAAI,OAAO,IAAI,CAAC,IAAA,gDAAkC,GAAE,IAAI,CAAC,IAAA,+CAAiC,GAAE,EAAE,CAAC;QAC9F,MAAM,IAAI,2CAAmB,CAC5B,qHAAqH,2BAA2B,GAAG,CACnJ,CAAC;IACH,CAAC;IAED,MAAM,0BAA0B,GAC/B,CAAC,OAAO,IAAI,2BAA2B,KAAK,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,2BAA2B,CAAC;IAE5F,cAAS,CAAC,GAAG,CAAC,qBAAY,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,YAAY,GAAG,OAAO,CAAC;IAC5D,MAAM,IAAA,4CAA8B,EAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,0BAA0B,CAAC,CAAC;AACrF,CAAC;AAED,SAAgB,iBAAiB,CAAC,KAAa;IAC9C,cAAS,CAAC,GAAG,CAAC,qBAAY,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,UAAU,GAAG,KAAK,CAAC;AACzD,CAAC;AAEM,MAAM,iBAAiB,GAAG,CAAC,SAAkB,EAAgC,EAAE;IACrF,MAAM,CAAC,GAAG,SAA4B,CAAC;IACvC,OAAO,CACN,OAAO,CAAC,KAAK,QAAQ;QACrB,OAAO,CAAC,CAAC,QAAQ,KAAK,QAAQ;QAC9B,OAAO,CAAC,CAAC,OAAO,KAAK,QAAQ;QAC7B,CAAC,CAAC,OAAO,KAAK,IAAI;QAClB,CAAC,CAAC,YAAY,KAAK,SAAS,CAC5B,CAAC;AACH,CAAC,CAAC;AATW,QAAA,iBAAiB,qBAS5B;AAEK,KAAK,UAAU,4BAA4B,CAAC,UAA8B;IAChF,MAAM,cAAc,GAAG,IAAA,2BAAY,EAAC,EAAE,CAAC,CAAC;IACxC,MAAM,cAAc,GAAG,cAAS,CAAC,GAAG,CAAC,mBAAc,CAAC,CAAC;IACrD,OAAO,MAAM,cAAc,CAAC,OAAO,CAAC,WAAW,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE;QAC7D,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,cAAc,CAAC,qBAAqB,CAC1D;YACC,KAAK,EAAE,UAAU,CAAC,KAAK,CAAC,WAAW,EAAE;YACrC,SAAS,EAAE,UAAU,CAAC,SAAS;YAC/B,QAAQ,EAAE,UAAU,CAAC,QAAQ;YAC7B,IAAI,EAAE,EAAE,IAAI,EAAE,eAAe,EAAE;YAE/B,QAAQ,EAAE,MAAM,cAAS,CAAC,GAAG,CAAC,kCAAe,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC;SACnE,EACD,GAAG,CACH,CAAC;QAEF,MAAM,GAAG,CAAC,IAAI,CACb,GAAG,CAAC,MAAM,CAAC,iBAAY,EAAE;YACxB,UAAU,EAAE,UAAU,CAAC,iBAAiB;YACxC,YAAY,EAAE,MAAM;YACpB,MAAM,EAAE,IAAI,CAAC,EAAE;SACf,CAAC,CACF,CAAC;QAEF,OAAO,IAAI,CAAC;IACb,CAAC,CAAC,CAAC;AACJ,CAAC;AAEM,KAAK,UAAU,4BAA4B,CACjD,IAAU,EACV,UAA8B;IAE9B,IAAI,CAAC,UAAU,CAAC,KAAK;QAAE,MAAM,IAAI,sBAAS,CAAC,kCAAkC,CAAC,CAAC;IAC/E,IAAI,CAAC,IAAI;QAAE,MAAM,IAAI,sBAAS,CAAC,gBAAgB,CAAC,CAAC;IACjD,IAAI,gBAAgB,GAAG,IAAI,EAAE,cAAc,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,YAAY,KAAK,MAAM,CAAC,CAAC;IACnF,IAAI,CAAC,gBAAgB,EAAE,CAAC;QACvB,gBAAgB,GAAG,IAAI,iBAAY,EAAE,CAAC;QACtC,gBAAgB,CAAC,UAAU,GAAG,UAAU,CAAC,iBAAiB,CAAC;QAC3D,gBAAgB,CAAC,YAAY,GAAG,MAAM,CAAC;QACvC,gBAAgB,CAAC,IAAI,GAAG,IAAI,CAAC;QAC7B,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;IAC5C,CAAC;SAAM,CAAC;QACP,gBAAgB,CAAC,UAAU,GAAG,UAAU,CAAC,iBAAiB,CAAC;IAC5D,CAAC;IACD,MAAM,cAAS,CAAC,GAAG,CAAC,2BAAsB,CAAC,CAAC,IAAI,CAAC,gBAAgB,EAAE,EAAE,WAAW,EAAE,KAAK,EAAE,CAAC,CAAC;IAC3F,IAAI,CAAC,SAAS,GAAG,UAAU,CAAC,SAAS,CAAC;IACtC,IAAI,CAAC,QAAQ,GAAG,UAAU,CAAC,QAAQ,CAAC;IACpC,MAAM,UAAU,GAAG,MAAM,cAAS,CAAC,GAAG,CAAC,mBAAc,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,WAAW,EAAE,KAAK,EAAE,CAAC,CAAC;IAC1F,IAAI,CAAC,UAAU;QAAE,MAAM,IAAI,sBAAS,CAAC,uBAAuB,CAAC,CAAC;IAC9D,MAAM,YAAY,GAAG,MAAM,cAAS,CAAC,GAAG,CAAC,mBAAc,CAAC,CAAC,OAAO,CAAC;QAChE,KAAK,EAAE,EAAE,EAAE,EAAE,UAAU,CAAC,EAAE,EAAE;QAC5B,SAAS,EAAE,CAAC,MAAM,CAAC;QACnB,WAAW,EAAE,KAAK;KAClB,CAAC,CAAC;IACH,IAAI,CAAC,YAAY;QAAE,MAAM,IAAI,sBAAS,CAAC,uBAAuB,CAAC,CAAC;IAChE,OAAO,YAAY,CAAC;AACrB,CAAC;AAOD,SAAgB,qCAAqC,CACpD,UAAsB,EACtB,gBAAsC,EACtC,aAGC;IAED,MAAM,MAAM,GAAwB;QACnC,UAAU,EAAE,SAAS;QACrB,iBAAiB,EAAE,EAAc;KACjC,CAAC;IAEF,IAAI,UAAU,EAAE,OAAO,EAAE,UAAU,EAAE,CAAC;QAErC,MAAM,UAAU,GAAG,UAAU,CAAC,OAAO,CAAC,UAAkD,CAAC;QAEzF,MAAM,KAAK,GAAG,UAAU,CAAC,gBAAgB,CAAC,KAAK,CAAW,CAAC;QAC3D,MAAM,SAAS,GAAG,UAAU,CAAC,gBAAgB,CAAC,SAAS,CAAW,CAAC;QACnE,MAAM,QAAQ,GAAG,UAAU,CAAC,gBAAgB,CAAC,QAAQ,CAAW,CAAC;QACjE,MAAM,iBAAiB,GAAG,UAAU,CAAC,gBAAgB,CAAC,iBAAiB,CAAW,CAAC;QAEnF,MAAM,CAAC,UAAU,GAAG;YACnB,KAAK;YACL,SAAS;YACT,QAAQ;YACR,iBAAiB;SACjB,CAAC;QACF,IAAI,aAAa,CAAC,YAAY,IAAI,OAAO,UAAU,CAAC,aAAa,CAAC,YAAY,CAAC,KAAK,QAAQ,EAAE,CAAC;YAC9F,MAAM,CAAC,UAAU,CAAC,eAAe,GAAG,UAAU,CAAC,aAAa,CAAC,YAAY,CAAW,CAAC;QACtF,CAAC;QACD,IAAI,aAAa,CAAC,YAAY,IAAI,UAAU,CAAC,aAAa,CAAC,YAAY,CAAC,EAAE,CAAC;YAC1E,MAAM,0BAA0B,GAAG,UAAU,CAAC,aAAa,CAAC,YAAY,CAAC,CAAC;YAC1E,MAAM,CAAC,UAAU,CAAC,eAAe,GAAG,KAAK,CAAC,OAAO,CAAC,0BAA0B,CAAC;gBAC5E,CAAC,CAAC,0BAA0B;gBAC5B,CAAC,CAAC,CAAC,0BAA0B,CAAC,CAAC;QACjC,CAAC;QACD,IAAI,CAAC,KAAK;YAAE,MAAM,CAAC,iBAAiB,CAAC,IAAI,CAAC,gBAAgB,CAAC,KAAK,CAAC,CAAC;QAClE,IAAI,CAAC,iBAAiB;YAAE,MAAM,CAAC,iBAAiB,CAAC,IAAI,CAAC,gBAAgB,CAAC,iBAAiB,CAAC,CAAC;QAC1F,IAAI,CAAC,SAAS;YAAE,MAAM,CAAC,iBAAiB,CAAC,IAAI,CAAC,gBAAgB,CAAC,SAAS,CAAC,CAAC;QAC1E,IAAI,CAAC,QAAQ;YAAE,MAAM,CAAC,iBAAiB,CAAC,IAAI,CAAC,gBAAgB,CAAC,QAAQ,CAAC,CAAC;IACzE,CAAC;IACD,OAAO,MAAM,CAAC;AACf,CAAC;AAED,SAAgB,uBAAuB,CAAC,OAAmB;IAC1D,OAAO,OAAO,CAAC,UAAU,KAAK,IAAA,2DAAqC,GAAE,CAAC;AACvE,CAAC"}
+{"version":3,"file":"saml-helpers.js","sourceRoot":"","sources":["../../../src/modules/sso-saml/saml-helpers.ts"],"names":[],"mappings":";;;AAsBA,kDAaC;AAED,8CAEC;AAaD,oEA0BC;AAED,oEA4BC;AAQD,sFA6CC;AAED,0DAEC;AApKD,wCAA2C;AAE3C,gCAA+E;AAC/E,gCAAoC;AACpC,+CAA4C;AAG5C,oEAAgE;AAChE,0FAAqF;AACrF,kEAA8D;AAC9D,sDAK8B;AAE9B,+DAA8E;AAIvE,KAAK,UAAU,mBAAmB,CAAC,OAAgB;IACzD,MAAM,2BAA2B,GAAG,IAAA,4CAA8B,GAAE,CAAC;IACrE,IAAI,OAAO,IAAI,CAAC,IAAA,gDAAkC,GAAE,IAAI,CAAC,IAAA,+CAAiC,GAAE,EAAE,CAAC;QAC9F,MAAM,IAAI,2CAAmB,CAC5B,qHAAqH,2BAA2B,GAAG,CACnJ,CAAC;IACH,CAAC;IAED,MAAM,0BAA0B,GAC/B,CAAC,OAAO,IAAI,2BAA2B,KAAK,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,2BAA2B,CAAC;IAE5F,cAAS,CAAC,GAAG,CAAC,qBAAY,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,YAAY,GAAG,OAAO,CAAC;IAC5D,MAAM,IAAA,4CAA8B,EAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,0BAA0B,CAAC,CAAC;AACrF,CAAC;AAED,SAAgB,iBAAiB,CAAC,KAAa;IAC9C,cAAS,CAAC,GAAG,CAAC,qBAAY,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,UAAU,GAAG,KAAK,CAAC;AACzD,CAAC;AAEM,MAAM,iBAAiB,GAAG,CAAC,SAAkB,EAAgC,EAAE;IACrF,MAAM,CAAC,GAAG,SAA4B,CAAC;IACvC,OAAO,CACN,OAAO,CAAC,KAAK,QAAQ;QACrB,OAAO,CAAC,CAAC,QAAQ,KAAK,QAAQ;QAC9B,OAAO,CAAC,CAAC,OAAO,KAAK,QAAQ;QAC7B,CAAC,CAAC,OAAO,KAAK,IAAI;QAClB,CAAC,CAAC,YAAY,KAAK,SAAS,CAC5B,CAAC;AACH,CAAC,CAAC;AATW,QAAA,iBAAiB,qBAS5B;AAEK,KAAK,UAAU,4BAA4B,CAAC,UAA8B;IAChF,MAAM,cAAc,GAAG,IAAA,2BAAY,EAAC,EAAE,CAAC,CAAC;IACxC,MAAM,cAAc,GAAG,cAAS,CAAC,GAAG,CAAC,mBAAc,CAAC,CAAC;IACrD,OAAO,MAAM,cAAc,CAAC,OAAO,CAAC,WAAW,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE;QAC7D,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,cAAc,CAAC,qBAAqB,CAC1D;YACC,KAAK,EAAE,UAAU,CAAC,KAAK,CAAC,WAAW,EAAE;YACrC,SAAS,EAAE,UAAU,CAAC,SAAS;YAC/B,QAAQ,EAAE,UAAU,CAAC,QAAQ;YAC7B,IAAI,EAAE,EAAE,IAAI,EAAE,eAAe,EAAE;YAE/B,QAAQ,EAAE,MAAM,cAAS,CAAC,GAAG,CAAC,kCAAe,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC;SACnE,EACD,GAAG,CACH,CAAC;QAEF,MAAM,GAAG,CAAC,IAAI,CACb,GAAG,CAAC,MAAM,CAAC,iBAAY,EAAE;YACxB,UAAU,EAAE,UAAU,CAAC,iBAAiB;YACxC,YAAY,EAAE,MAAM;YACpB,MAAM,EAAE,IAAI,CAAC,EAAE;SACf,CAAC,CACF,CAAC;QAEF,OAAO,IAAI,CAAC;IACb,CAAC,CAAC,CAAC;AACJ,CAAC;AAEM,KAAK,UAAU,4BAA4B,CACjD,IAAU,EACV,UAA8B;IAE9B,IAAI,CAAC,UAAU,CAAC,KAAK;QAAE,MAAM,IAAI,sBAAS,CAAC,kCAAkC,CAAC,CAAC;IAC/E,IAAI,CAAC,IAAI;QAAE,MAAM,IAAI,sBAAS,CAAC,gBAAgB,CAAC,CAAC;IACjD,IAAI,gBAAgB,GAAG,IAAI,EAAE,cAAc,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,YAAY,KAAK,MAAM,CAAC,CAAC;IACnF,IAAI,CAAC,gBAAgB,EAAE,CAAC;QACvB,gBAAgB,GAAG,IAAI,iBAAY,EAAE,CAAC;QACtC,gBAAgB,CAAC,UAAU,GAAG,UAAU,CAAC,iBAAiB,CAAC;QAC3D,gBAAgB,CAAC,YAAY,GAAG,MAAM,CAAC;QACvC,gBAAgB,CAAC,IAAI,GAAG,IAAI,CAAC;QAC7B,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;IAC5C,CAAC;SAAM,CAAC;QACP,gBAAgB,CAAC,UAAU,GAAG,UAAU,CAAC,iBAAiB,CAAC;IAC5D,CAAC;IACD,MAAM,cAAS,CAAC,GAAG,CAAC,2BAAsB,CAAC,CAAC,IAAI,CAAC,gBAAgB,EAAE,EAAE,WAAW,EAAE,KAAK,EAAE,CAAC,CAAC;IAC3F,IAAI,CAAC,SAAS,GAAG,UAAU,CAAC,SAAS,CAAC;IACtC,IAAI,CAAC,QAAQ,GAAG,UAAU,CAAC,QAAQ,CAAC;IACpC,MAAM,UAAU,GAAG,MAAM,cAAS,CAAC,GAAG,CAAC,mBAAc,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,WAAW,EAAE,KAAK,EAAE,CAAC,CAAC;IAC1F,IAAI,CAAC,UAAU;QAAE,MAAM,IAAI,sBAAS,CAAC,uBAAuB,CAAC,CAAC;IAC9D,MAAM,YAAY,GAAG,MAAM,cAAS,CAAC,GAAG,CAAC,mBAAc,CAAC,CAAC,OAAO,CAAC;QAChE,KAAK,EAAE,EAAE,EAAE,EAAE,UAAU,CAAC,EAAE,EAAE;QAC5B,SAAS,EAAE,CAAC,MAAM,CAAC;QACnB,WAAW,EAAE,KAAK;KAClB,CAAC,CAAC;IACH,IAAI,CAAC,YAAY;QAAE,MAAM,IAAI,sBAAS,CAAC,uBAAuB,CAAC,CAAC;IAChE,OAAO,YAAY,CAAC;AACrB,CAAC;AAQD,SAAgB,qCAAqC,CACpD,UAAsB,EACtB,gBAAsC,EACtC,aAGC;IAED,MAAM,MAAM,GAAwB;QACnC,UAAU,EAAE,SAAS;QACrB,iBAAiB,EAAE,EAAc;QACjC,aAAa,EAAE,EAAE;KACjB,CAAC;IAEF,IAAI,UAAU,EAAE,OAAO,EAAE,UAAU,EAAE,CAAC;QAErC,MAAM,UAAU,GAAG,UAAU,CAAC,OAAO,CAAC,UAAkD,CAAC;QACzF,MAAM,CAAC,aAAa,GAAG,UAAqC,CAAC;QAE7D,MAAM,KAAK,GAAG,UAAU,CAAC,gBAAgB,CAAC,KAAK,CAAW,CAAC;QAC3D,MAAM,SAAS,GAAG,UAAU,CAAC,gBAAgB,CAAC,SAAS,CAAW,CAAC;QACnE,MAAM,QAAQ,GAAG,UAAU,CAAC,gBAAgB,CAAC,QAAQ,CAAW,CAAC;QACjE,MAAM,iBAAiB,GAAG,UAAU,CAAC,gBAAgB,CAAC,iBAAiB,CAAW,CAAC;QAEnF,MAAM,CAAC,UAAU,GAAG;YACnB,KAAK;YACL,SAAS;YACT,QAAQ;YACR,iBAAiB;SACjB,CAAC;QACF,IAAI,aAAa,CAAC,YAAY,IAAI,OAAO,UAAU,CAAC,aAAa,CAAC,YAAY,CAAC,KAAK,QAAQ,EAAE,CAAC;YAC9F,MAAM,CAAC,UAAU,CAAC,eAAe,GAAG,UAAU,CAAC,aAAa,CAAC,YAAY,CAAW,CAAC;QACtF,CAAC;QACD,IAAI,aAAa,CAAC,YAAY,IAAI,UAAU,CAAC,aAAa,CAAC,YAAY,CAAC,EAAE,CAAC;YAC1E,MAAM,0BAA0B,GAAG,UAAU,CAAC,aAAa,CAAC,YAAY,CAAC,CAAC;YAC1E,MAAM,CAAC,UAAU,CAAC,eAAe,GAAG,KAAK,CAAC,OAAO,CAAC,0BAA0B,CAAC;gBAC5E,CAAC,CAAC,0BAA0B;gBAC5B,CAAC,CAAC,CAAC,0BAA0B,CAAC,CAAC;QACjC,CAAC;QACD,IAAI,CAAC,KAAK;YAAE,MAAM,CAAC,iBAAiB,CAAC,IAAI,CAAC,gBAAgB,CAAC,KAAK,CAAC,CAAC;QAClE,IAAI,CAAC,iBAAiB;YAAE,MAAM,CAAC,iBAAiB,CAAC,IAAI,CAAC,gBAAgB,CAAC,iBAAiB,CAAC,CAAC;QAC1F,IAAI,CAAC,SAAS;YAAE,MAAM,CAAC,iBAAiB,CAAC,IAAI,CAAC,gBAAgB,CAAC,SAAS,CAAC,CAAC;QAC1E,IAAI,CAAC,QAAQ;YAAE,MAAM,CAAC,iBAAiB,CAAC,IAAI,CAAC,gBAAgB,CAAC,QAAQ,CAAC,CAAC;IACzE,CAAC;IACD,OAAO,MAAM,CAAC;AACf,CAAC;AAED,SAAgB,uBAAuB,CAAC,OAAmB;IAC1D,OAAO,OAAO,CAAC,UAAU,KAAK,IAAA,2DAAqC,GAAE,CAAC;AACvE,CAAC"}

package/dist/modules/sso-saml/saml.service.ee.d.ts

@@ -53,6 +53,9 @@ export declare class SamlService {
     loadFromDbAndApplySamlPreferences(apply?: boolean, broadcastReload?: boolean): Promise<SamlPreferences | undefined>;
     saveSamlPreferencesToDb(): Promise<SamlPreferences | undefined>;
     fetchMetadataFromUrl(metadataUrl?: string, ignoreSSL?: boolean): Promise<string | undefined>;
-    getAttributesFromLoginResponse(req: express.Request, binding: SamlLoginBinding): Promise<SamlUserAttributes>;
+    getAttributesFromLoginResponse(req: express.Request, binding: SamlLoginBinding): Promise<{
+        mapped: SamlUserAttributes;
+        raw: Record<string, unknown>;
+    }>;
     reset(): Promise<void>;
 }

package/dist/modules/sso-saml/saml.service.ee.js

@@ -57,6 +57,7 @@ const n8n_core_1 = require("n8n-core");
 const n8n_workflow_1 = require("n8n-workflow");
 const auth_error_1 = require("../../errors/response-errors/auth.error");
 const bad_request_error_1 = require("../../errors/response-errors/bad-request.error");
+const claims_context_builder_1 = require("../../modules/provisioning.ee/claims-context.builder");
 const provisioning_service_ee_1 = require("../../modules/provisioning.ee/provisioning.service.ee");
 const url_service_1 = require("../../services/url.service");
 const sso_helpers_1 = require("../../sso.ee/sso-helpers");
@@ -268,7 +269,7 @@ let SamlService = class SamlService {
         };
     }
     async handleSamlLogin(req, binding) {
-        const attributes = await this.getAttributesFromLoginResponse(req, binding);
+        const { mapped: attributes, raw: rawAttributes } = await this.getAttributesFromLoginResponse(req, binding);
         if (attributes.email) {
             const lowerCasedEmail = attributes.email.toLowerCase();
             if (!(0, db_1.isValidEmail)(lowerCasedEmail)) {
@@ -280,7 +281,7 @@ let SamlService = class SamlService {
             });
             if (user) {
                 if (user.authIdentities.find((e) => e.providerType === 'saml' && e.providerId === attributes.userPrincipalName)) {
-                    await this.applySsoProvisioning(user, attributes);
+                    await this.applySsoProvisioning(user, attributes, rawAttributes);
                     return {
                         authenticatedUser: user,
                         attributes,
@@ -290,7 +291,7 @@ let SamlService = class SamlService {
                 else {
                     const updatedUser = await (0, saml_helpers_1.updateUserFromSamlAttributes)(user, attributes);
                     const onboardingRequired = !updatedUser.firstName || !updatedUser.lastName;
-                    await this.applySsoProvisioning(updatedUser, attributes);
+                    await this.applySsoProvisioning(updatedUser, attributes, rawAttributes);
                     return {
                         authenticatedUser: updatedUser,
                         attributes,
@@ -301,7 +302,7 @@ let SamlService = class SamlService {
             else {
                 if ((0, sso_helpers_1.isSsoJustInTimeProvisioningEnabled)()) {
                     const newUser = await (0, saml_helpers_1.createUserFromSamlAttributes)(attributes);
-                    await this.applySsoProvisioning(newUser, attributes);
+                    await this.applySsoProvisioning(newUser, attributes, rawAttributes);
                     return {
                         authenticatedUser: newUser,
                         attributes,
@@ -316,7 +317,12 @@ let SamlService = class SamlService {
             onboardingRequired: false,
         };
     }
-    async applySsoProvisioning(user, attributes) {
+    async applySsoProvisioning(user, attributes, rawAttributes) {
+        if (await this.provisioningService.isExpressionMappingEnabled()) {
+            const context = (0, claims_context_builder_1.buildSamlClaimsContext)(rawAttributes);
+            await this.provisioningService.provisionExpressionMappedRolesForUser(user, context);
+            return;
+        }
         if (attributes?.n8nInstanceRole) {
             await this.provisioningService.provisionInstanceRoleForUser(user, attributes.n8nInstanceRole);
         }
@@ -535,7 +541,7 @@ let SamlService = class SamlService {
         catch (error) {
             throw new auth_error_1.AuthError(`SAML Authentication failed. Could not parse SAML response. ${error instanceof Error ? error.message : error}`);
         }
-        const { attributes, missingAttributes } = (0, saml_helpers_1.getMappedSamlAttributesFromFlowResult)(parsedSamlResponse, this._samlPreferences.mapping, {
+        const { attributes, missingAttributes, rawAttributes } = (0, saml_helpers_1.getMappedSamlAttributesFromFlowResult)(parsedSamlResponse, this._samlPreferences.mapping, {
             instanceRole: await this.provisioningService.getInstanceRoleClaimName(),
             projectRoles: await this.provisioningService.getProjectsRolesClaimName(),
         });
@@ -545,7 +551,7 @@ let SamlService = class SamlService {
         if (missingAttributes.length > 0) {
             throw new auth_error_1.AuthError(`SAML Authentication failed. Invalid SAML response (missing attributes: ${missingAttributes.join(', ')}).`);
         }
-        return attributes;
+        return { mapped: attributes, raw: rawAttributes };
     }
     async reset() {
         await (0, saml_helpers_1.setSamlLoginEnabled)(false);

package/dist/modules/sso-saml/saml.service.ee.js.map

@@ -1 +1 @@
-{"version":3,"file":"saml.service.ee.js","sourceRoot":"","sources":["../../../src/modules/sso-saml/saml.service.ee.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AACA,wDAA6C;AAC7C,wCAA2C;AAE3C,gCAA2E;AAC3E,gDAAgD;AAChD,gCAA6C;AAC7C,kDAA0B;AAC1B,mCAA0D;AAE1D,uCAAiG;AACjG,+CAAqF;AAIrF,oEAAgE;AAChE,kFAA6E;AAC7E,+FAAwF;AACxF,wDAAoD;AACpD,sDAM8B;AAE9B,2CAAsD;AACtD,8FAAuF;AACvF,sFAAgF;AAChF,iDAMwB;AACxB,qDAAiD;AACjD,+DAAmE;AAI5D,IAAM,WAAW,GAAjB,MAAM,WAAW;IAmCvB,IAAI,eAAe;QAClB,OAAO;YACN,GAAG,IAAI,CAAC,gBAAgB;YACxB,YAAY,EAAE,IAAA,gCAAkB,GAAE;YAClC,UAAU,EAAE,IAAA,+BAAiB,GAAE;SAC/B,CAAC;IACH,CAAC;IAED,YACkB,MAAc,EACd,UAAsB,EACtB,SAAwB,EACxB,cAA8B,EAC9B,kBAAsC,EACtC,gBAAkC,EAClC,mBAAwC,EACxC,MAAc;QAPd,WAAM,GAAN,MAAM,CAAQ;QACd,eAAU,GAAV,UAAU,CAAY;QACtB,cAAS,GAAT,SAAS,CAAe;QACxB,mBAAc,GAAd,cAAc,CAAgB;QAC9B,uBAAkB,GAAlB,kBAAkB,CAAoB;QACtC,qBAAgB,GAAhB,gBAAgB,CAAkB;QAClC,wBAAmB,GAAnB,mBAAmB,CAAqB;QACxC,WAAM,GAAN,MAAM,CAAQ;QA7CxB,qBAAgB,GAAoB;YAC3C,OAAO,EAAE;gBACR,KAAK,EAAE,oEAAoE;gBAC3E,SAAS,EAAE,iEAAiE;gBAC5E,QAAQ,EAAE,gEAAgE;gBAC1E,iBAAiB,EAAE,2DAA2D;aAC9E;YACD,QAAQ,EAAE,EAAE;YACZ,WAAW,EAAE,EAAE;YACf,SAAS,EAAE,KAAK;YAChB,YAAY,EAAE,UAAU;YACxB,UAAU,EAAE,MAAM;YAClB,mBAAmB,EAAE,KAAK;YAC1B,iBAAiB,EAAE,SAAS;YAC5B,kBAAkB,EAAE,SAAS;YAC7B,YAAY,EAAE,KAAK;YACnB,UAAU,EAAE,MAAM;YAClB,oBAAoB,EAAE,IAAI;YAC1B,iBAAiB,EAAE,IAAI;YACvB,UAAU,EAAE,IAAI,CAAC,UAAU,CAAC,kBAAkB,EAAE;YAChD,eAAe,EAAE;gBAChB,MAAM,EAAE,IAAI;gBACZ,QAAQ,EAAE;oBACT,SAAS,EAAE,6BAA6B;oBACxC,MAAM,EAAE,OAAO;iBACf;aACD;SACD,CAAC;QAqUM,gBAAW,GAAG,KAAK,CAAC;IAlTzB,CAAC;IAMJ,2BAA2B;QAC1B,OAAO,OAAO,CAAC,GAAG,CAAC,iCAAiC,KAAK,MAAM,CAAC;IACjE,CAAC;IAMO,6BAA6B;QACpC,IAAI,CAAC,IAAI,CAAC,2BAA2B,EAAE;YAAE,OAAO,SAAS,CAAC;QAC1D,IAAI,CAAC,IAAI,CAAC,gBAAgB,CAAC,iBAAiB;YAAE,OAAO,SAAS,CAAC;QAC/D,IAAI,CAAC;YACJ,OAAO,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,gBAAgB,CAAC,iBAAiB,CAAC,CAAC;QACrE,CAAC;QAAC,MAAM,CAAC;YACR,MAAM,IAAI,mCAAe,CACxB,uEAAuE,CACvE,CAAC;QACH,CAAC;IACF,CAAC;IAEO,oBAAoB,CAAC,GAAW;QACvC,OAAO,wFAAwF,CAAC,IAAI,CACnG,GAAG,CAAC,IAAI,EAAE,CACV,CAAC;IACH,CAAC;IAEO,qBAAqB,CAAC,GAAW;QACxC,OAAO,8DAA8D,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC;IACxF,CAAC;IAEO,oBAAoB,CAAC,aAAqB,EAAE,cAAsB;QACzE,IAAI,CAAC;YACJ,MAAM,iBAAiB,GAAG,IAAA,wBAAe,EAAC,aAAa,CAAC,CAAC;YACzD,MAAM,IAAI,GAAG,IAAI,wBAAe,CAAC,cAAc,CAAC,CAAC;YACjD,MAAM,cAAc,GAAG,IAAI,CAAC,SAAS,CAAC;YAEtC,OAAO,iBAAiB;iBACtB,MAAM,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC;iBACvC,MAAM,CAAC,cAAc,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC;QAClE,CAAC;QAAC,MAAM,CAAC;YACR,OAAO,KAAK,CAAC;QACd,CAAC;IACF,CAAC;IAEO,+BAA+B,CAAC,KAA+B;QAGtE,MAAM,aAAa,GAAG,KAAK,CAAC,iBAAiB,KAAK,EAAE,CAAC;QACrD,MAAM,cAAc,GAAG,KAAK,CAAC,kBAAkB,KAAK,EAAE,CAAC;QACvD,MAAM,QAAQ,GACb,CAAC,CAAC,KAAK,CAAC,iBAAiB,IAAI,KAAK,CAAC,iBAAiB,KAAK,wCAAyB,CAAC;QACpF,MAAM,SAAS,GAAG,CAAC,CAAC,KAAK,CAAC,kBAAkB,CAAC;QAC7C,MAAM,mBAAmB,GAAG,QAAQ,IAAI,SAAS,CAAC;QAElD,IAAI,mBAAmB,IAAI,CAAC,IAAI,CAAC,2BAA2B,EAAE,EAAE,CAAC;YAChE,MAAM,IAAI,mCAAe,CACxB,yGAAyG,CACzG,CAAC;QACH,CAAC;QAED,IAAI,CAAC,IAAI,CAAC,2BAA2B,EAAE;YAAE,OAAO;QAEhD,IAAI,QAAQ,IAAI,CAAC,IAAI,CAAC,oBAAoB,CAAC,KAAK,CAAC,iBAAkB,CAAC,EAAE,CAAC;YACtE,MAAM,IAAI,mCAAe,CACxB,wEAAwE,CACxE,CAAC;QACH,CAAC;QAED,IAAI,SAAS,IAAI,CAAC,IAAI,CAAC,qBAAqB,CAAC,KAAK,CAAC,kBAAmB,CAAC,EAAE,CAAC;YACzE,MAAM,IAAI,mCAAe,CACxB,wEAAwE,CACxE,CAAC;QACH,CAAC;QAED,MAAM,2BAA2B,GAChC,KAAK,CAAC,mBAAmB,IAAI,IAAI,CAAC,gBAAgB,CAAC,mBAAmB,CAAC;QAExE,IAAI,2BAA2B,EAAE,CAAC;YAEjC,MAAM,YAAY,GAAG,aAAa;gBACjC,CAAC,CAAC,SAAS;gBACX,CAAC,CAAC,QAAQ;oBACT,CAAC,CAAC,KAAK,CAAC,iBAAkB;oBAC1B,CAAC,CAAC,IAAI,CAAC,6BAA6B,EAAE,CAAC;YACzC,MAAM,aAAa,GAAG,cAAc;gBACnC,CAAC,CAAC,SAAS;gBACX,CAAC,CAAC,SAAS;oBACV,CAAC,CAAC,KAAK,CAAC,kBAAmB;oBAC3B,CAAC,CAAC,IAAI,CAAC,gBAAgB,CAAC,kBAAkB,CAAC;YAE7C,IAAI,CAAC,YAAY,IAAI,CAAC,aAAa,EAAE,CAAC;gBACrC,MAAM,IAAI,mCAAe,CACxB,iGAAiG,CACjG,CAAC;YACH,CAAC;YAED,IAAI,CAAC,IAAI,CAAC,oBAAoB,CAAC,YAAY,EAAE,aAAa,CAAC,EAAE,CAAC;gBAC7D,MAAM,IAAI,mCAAe,CACxB,uGAAuG,CACvG,CAAC;YACH,CAAC;QACF,CAAC;IACF,CAAC;IAED,KAAK,CAAC,IAAI;QACT,IAAI,CAAC;YAEJ,MAAM,IAAI,CAAC,iCAAiC,CAAC,KAAK,CAAC,CAAC;YACpD,IAAI,IAAA,sCAAwB,GAAE,EAAE,CAAC;gBAChC,MAAM,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC;gBAC5B,MAAM,IAAI,CAAC,WAAW,EAAE,CAAC;gBACzB,MAAM,IAAI,CAAC,iCAAiC,CAAC,IAAI,CAAC,CAAC;YACpD,CAAC;QACF,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAGhB,IACC,KAAK,YAAY,6DAA2B;gBAC5C,KAAK,YAAY,sDAAwB;gBACzC,KAAK,YAAY,WAAW,EAC3B,CAAC;gBACF,IAAI,CAAC,MAAM,CAAC,IAAI,CACf,uEAAuE,KAAK,CAAC,OAAO,oIAAoI,CACxN,CAAC;gBACF,MAAM,IAAI,CAAC,KAAK,EAAE,CAAC;YACpB,CAAC;iBAAM,CAAC;gBACP,MAAM,KAAK,CAAC;YACb,CAAC;QACF,CAAC;IACF,CAAC;IAED,KAAK,CAAC,WAAW;QAChB,IAAI,IAAI,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;YAChC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,qCAAqC,CAAC,CAAC;YACzD,MAAM,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC;YAC5B,IAAI,CAAC,OAAO,GAAG,wDAAa,SAAS,GAAC,CAAC;QACxC,CAAC;QAED,IAAI,CAAC,OAAO,CAAC,kBAAkB,CAAC;YAC/B,QAAQ,EAAE,KAAK,EAAE,QAAgB,EAAE,EAAE;gBACpC,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,gBAAgB,CAAC,QAAQ,CAAC,CAAC;gBAC9D,IAAI,CAAC,KAAK,EAAE,CAAC;oBACZ,MAAM,IAAI,sDAAwB,EAAE,CAAC;gBACtC,CAAC;YACF,CAAC;SACD,CAAC,CAAC;IACJ,CAAC;IAED,2BAA2B,CAAC,aAAa,GAAG,KAAK;QAChD,IAAI,IAAI,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;YAChC,MAAM,IAAI,8BAAe,CAAC,4BAA4B,CAAC,CAAC;QACzD,CAAC;QACD,IAAI,CAAC,IAAI,CAAC,gBAAgB,CAAC,QAAQ,EAAE,CAAC;YACrC,MAAM,IAAI,sDAAwB,CACjC,8EAA8E,CAC9E,CAAC;QACH,CAAC;QACD,IAAI,IAAI,CAAC,wBAAwB,KAAK,SAAS,IAAI,aAAa,EAAE,CAAC;YAClE,IAAI,CAAC,wBAAwB,GAAG,IAAI,CAAC,OAAO,CAAC,gBAAgB,CAAC;gBAC7D,QAAQ,EAAE,IAAI,CAAC,gBAAgB,CAAC,QAAQ;aACxC,CAAC,CAAC;QACJ,CAAC;QAED,IAAI,CAAC,SAAS,CAAC,wBAAwB,CAAC,IAAI,CAAC,wBAAwB,CAAC,CAAC;QAEvE,OAAO,IAAI,CAAC,wBAAwB,CAAC;IACtC,CAAC;IAED,0BAA0B;QACzB,IAAI,IAAI,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;YAChC,MAAM,IAAI,8BAAe,CAAC,4BAA4B,CAAC,CAAC;QACzD,CAAC;QACD,OAAO,IAAA,gDAA0B,EAAC,IAAI,CAAC,gBAAgB,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;IACxE,CAAC;IAOD,KAAK,CAAC,kBAAkB,CACvB,UAAmB,EACnB,OAA0B,EAC1B,QAAiB;QAKjB,MAAM,IAAI,CAAC,WAAW,EAAE,CAAC;QACzB,IAAI,IAAI,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;YAChC,MAAM,IAAI,8BAAe,CAAC,4BAA4B,CAAC,CAAC;QACzD,CAAC;QAED,IAAI,GAA6B,CAAC;QAClC,IAAI,QAAQ,EAAE,CAAC;YACd,MAAM,gBAAgB,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,gBAAgB,CAAC,QAAQ,CAAC,CAAC;YACzE,IAAI,CAAC,gBAAgB,EAAE,CAAC;gBACvB,MAAM,IAAI,sDAAwB,EAAE,CAAC;YACtC,CAAC;YACD,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,gBAAgB,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC;YAClD,IAAI,CAAC,SAAS,CAAC,wBAAwB,CAAC,GAAG,CAAC,CAAC;QAC9C,CAAC;aAAM,CAAC;YACP,GAAG,GAAG,IAAI,CAAC,2BAA2B,EAAE,CAAC;QAC1C,CAAC;QAED,OAAO,KAAK,IAAI,CAAC,gBAAgB,CAAC,YAAY,IAAI,UAAU,CAAC;QAC7D,MAAM,EAAE,GAAG,IAAI,CAAC,0BAA0B,EAAE,CAAC;QAC7C,EAAE,CAAC,aAAa,CAAC,UAAU,GAAG,UAAU,IAAI,IAAI,CAAC,UAAU,CAAC,kBAAkB,EAAE,CAAC;QACjF,MAAM,YAAY,GAAG,EAAE,CAAC,kBAAkB,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;QACzD,OAAO;YACN,OAAO;YACP,OAAO,EAAE,OAAO,KAAK,MAAM,CAAC,CAAC,CAAE,YAAmC,CAAC,CAAC,CAAC,YAAY;SACjF,CAAC;IACH,CAAC;IAED,KAAK,CAAC,eAAe,CACpB,GAAoB,EACpB,OAAyB;QAMzB,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,8BAA8B,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;QAE3E,IAAI,UAAU,CAAC,KAAK,EAAE,CAAC;YACtB,MAAM,eAAe,GAAG,UAAU,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC;YAEvD,IAAI,CAAC,IAAA,iBAAY,EAAC,eAAe,CAAC,EAAE,CAAC;gBACpC,MAAM,IAAI,mCAAe,CAAC,sBAAsB,CAAC,CAAC;YACnD,CAAC;YAED,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,OAAO,CAAC;gBAC9C,KAAK,EAAE,EAAE,KAAK,EAAE,eAAe,EAAE;gBACjC,SAAS,EAAE,CAAC,gBAAgB,EAAE,MAAM,CAAC;aACrC,CAAC,CAAC;YACH,IAAI,IAAI,EAAE,CAAC;gBAEV,IACC,IAAI,CAAC,cAAc,CAAC,IAAI,CACvB,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,YAAY,KAAK,MAAM,IAAI,CAAC,CAAC,UAAU,KAAK,UAAU,CAAC,iBAAiB,CACjF,EACA,CAAC;oBACF,MAAM,IAAI,CAAC,oBAAoB,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;oBAClD,OAAO;wBACN,iBAAiB,EAAE,IAAI;wBACvB,UAAU;wBACV,kBAAkB,EAAE,KAAK;qBACzB,CAAC;gBACH,CAAC;qBAAM,CAAC;oBAEP,MAAM,WAAW,GAAG,MAAM,IAAA,2CAA4B,EAAC,IAAI,EAAE,UAAU,CAAC,CAAC;oBACzE,MAAM,kBAAkB,GAAG,CAAC,WAAW,CAAC,SAAS,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC;oBAC3E,MAAM,IAAI,CAAC,oBAAoB,CAAC,WAAW,EAAE,UAAU,CAAC,CAAC;oBACzD,OAAO;wBACN,iBAAiB,EAAE,WAAW;wBAC9B,UAAU;wBACV,kBAAkB;qBAClB,CAAC;gBACH,CAAC;YACF,CAAC;iBAAM,CAAC;gBAEP,IAAI,IAAA,gDAAkC,GAAE,EAAE,CAAC;oBAC1C,MAAM,OAAO,GAAG,MAAM,IAAA,2CAA4B,EAAC,UAAU,CAAC,CAAC;oBAC/D,MAAM,IAAI,CAAC,oBAAoB,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC;oBACrD,OAAO;wBACN,iBAAiB,EAAE,OAAO;wBAC1B,UAAU;wBACV,kBAAkB,EAAE,CAAC,OAAO,CAAC,SAAS,IAAI,CAAC,OAAO,CAAC,QAAQ;qBAC3D,CAAC;gBACH,CAAC;YACF,CAAC;QACF,CAAC;QAED,OAAO;YACN,iBAAiB,EAAE,SAAS;YAC5B,UAAU;YACV,kBAAkB,EAAE,KAAK;SACzB,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,oBAAoB,CAAC,IAAU,EAAE,UAA2C;QACzF,IAAI,UAAU,EAAE,eAAe,EAAE,CAAC;YACjC,MAAM,IAAI,CAAC,mBAAmB,CAAC,4BAA4B,CAAC,IAAI,EAAE,UAAU,CAAC,eAAe,CAAC,CAAC;QAC/F,CAAC;QACD,IAAI,UAAU,EAAE,eAAe,EAAE,CAAC;YACjC,MAAM,IAAI,CAAC,mBAAmB,CAAC,4BAA4B,CAC1D,IAAI,CAAC,EAAE,EACP,UAAU,CAAC,eAAe,CAC1B,CAAC;QACH,CAAC;IACF,CAAC;IAEO,KAAK,CAAC,uCAAuC;QACpD,IAAI,IAAI,CAAC,gBAAgB,CAAC,WAAW,EAAE,CAAC;YACvC,MAAM,EAAE,SAAS,EAAE,GAAG,wDAAa,oCAAoC,GAAC,CAAC;YACzE,MAAM,cAAS,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,cAAc,CAAC,EAAE,OAAO,EAAE,oBAAoB,EAAE,CAAC,CAAC;QAClF,CAAC;IACF,CAAC;IAKK,AAAN,KAAK,CAAC,MAAM;QACX,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC;YACtB,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,+CAA+C,CAAC,CAAC;YAClE,OAAO;QACR,CAAC;QACD,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC;QACxB,IAAI,CAAC;YACJ,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,mEAAmE,CAAC,CAAC;YACvF,MAAM,IAAI,CAAC,iCAAiC,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;YAE1D,MAAM,IAAA,wCAA0B,GAAE,CAAC;YAEnC,MAAM,gBAAgB,GAAG,IAAA,gCAAkB,GAAE,CAAC;YAE9C,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,qBAAqB,gBAAgB,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,UAAU,GAAG,CAAC,CAAC;YAErF,cAAS,CAAC,GAAG,CAAC,qBAAY,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,YAAY,GAAG,gBAAgB,CAAC;QACtE,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,iEAAiE,EAAE;gBACpF,KAAK;aACL,CAAC,CAAC;QACJ,CAAC;gBAAS,CAAC;YACV,IAAI,CAAC,WAAW,GAAG,KAAK,CAAC;QAC1B,CAAC;IACF,CAAC;IAED,KAAK,CAAC,kBAAkB,CACvB,KAA+B,EAC/B,cAAuB,KAAK,EAC5B,kBAA2B,IAAI;QAE/B,MAAM,IAAI,CAAC,WAAW,EAAE,CAAC;QACzB,IAAI,CAAC,+BAA+B,CAAC,KAAK,CAAC,CAAC;QAC5C,MAAM,mBAAmB,GAAG,IAAI,CAAC,gBAAgB,CAAC,WAAW,CAAC;QAC9D,MAAM,IAAI,CAAC,gCAAgC,CAAC,KAAK,CAAC,CAAC;QACnD,MAAM,IAAI,CAAC,sBAAsB,CAAC,KAAK,EAAE,mBAAmB,EAAE,WAAW,CAAC,CAAC;QAC3E,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,uBAAuB,EAAE,CAAC;QAEpD,IAAI,eAAe,EAAE,CAAC;YACrB,MAAM,IAAI,CAAC,uCAAuC,EAAE,CAAC;QACtD,CAAC;QACD,OAAO,MAAM,CAAC;IACf,CAAC;IAEO,KAAK,CAAC,sBAAsB,CACnC,KAA+B,EAC/B,mBAAuC,EACvC,cAAuB,IAAI;QAE3B,IAAI,KAAK,CAAC,WAAW,EAAE,CAAC;YACvB,IAAI,CAAC;gBACJ,MAAM,eAAe,GAAG,MAAM,IAAI,CAAC,oBAAoB,EAAE,CAAC;gBAC1D,IAAI,eAAe,EAAE,CAAC;oBACrB,IAAI,CAAC,gBAAgB,CAAC,QAAQ,GAAG,eAAe,CAAC;gBAClD,CAAC;qBAAM,CAAC;oBAGP,MAAM,IAAI,6DAA2B,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;gBAC1D,CAAC;YACF,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBAChB,IAAI,CAAC,gBAAgB,CAAC,WAAW,GAAG,mBAAmB,CAAC;gBACxD,IAAI,CAAC,WAAW,EAAE,CAAC;oBAClB,MAAM,KAAK,CAAC;gBACb,CAAC;gBAID,IAAI,CAAC,MAAM,CAAC,KAAK,CAChB,gIAAgI,EAEhI,EAAE,KAAK,EAAE,CACT,CAAC;YACH,CAAC;QACF,CAAC;aAAM,IAAI,KAAK,CAAC,QAAQ,EAAE,CAAC;YAC3B,MAAM,gBAAgB,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,gBAAgB,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;YAC/E,IAAI,CAAC,gBAAgB,EAAE,CAAC;gBACvB,MAAM,IAAI,sDAAwB,EAAE,CAAC;YACtC,CAAC;QACF,CAAC;QAMD,IAAI,IAAA,gCAAkB,GAAE,EAAE,CAAC;YAC1B,IAAI,IAAI,CAAC,gBAAgB,CAAC,QAAQ,EAAE,CAAC;gBACpC,MAAM,gBAAgB,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,gBAAgB,CAC7D,IAAI,CAAC,gBAAgB,CAAC,QAAQ,CAC9B,CAAC;gBACF,IAAI,CAAC,gBAAgB,EAAE,CAAC;oBACvB,MAAM,IAAI,sDAAwB,EAAE,CAAC;gBACtC,CAAC;YACF,CAAC;iBAAM,CAAC;gBAEP,MAAM,IAAI,sDAAwB,EAAE,CAAC;YACtC,CAAC;QACF,CAAC;QACD,IAAI,CAAC,2BAA2B,CAAC,IAAI,CAAC,CAAC;IACxC,CAAC;IAED,KAAK,CAAC,gCAAgC,CAAC,KAA+B;QACrE,IAAI,CAAC,gBAAgB,CAAC,YAAY,GAAG,KAAK,CAAC,YAAY,IAAI,IAAI,CAAC,gBAAgB,CAAC,YAAY,CAAC;QAC9F,IAAI,CAAC,gBAAgB,CAAC,QAAQ,GAAG,KAAK,CAAC,QAAQ,IAAI,IAAI,CAAC,gBAAgB,CAAC,QAAQ,CAAC;QAClF,IAAI,CAAC,gBAAgB,CAAC,OAAO,GAAG,KAAK,CAAC,OAAO,IAAI,IAAI,CAAC,gBAAgB,CAAC,OAAO,CAAC;QAC/E,IAAI,CAAC,gBAAgB,CAAC,SAAS,GAAG,KAAK,CAAC,SAAS,IAAI,IAAI,CAAC,gBAAgB,CAAC,SAAS,CAAC;QACrF,IAAI,CAAC,gBAAgB,CAAC,UAAU,GAAG,KAAK,CAAC,UAAU,IAAI,IAAI,CAAC,gBAAgB,CAAC,UAAU,CAAC;QACxF,IAAI,CAAC,gBAAgB,CAAC,eAAe;YACpC,KAAK,CAAC,eAAe,IAAI,IAAI,CAAC,gBAAgB,CAAC,eAAe,CAAC;QAChE,IAAI,CAAC,gBAAgB,CAAC,mBAAmB;YACxC,KAAK,CAAC,mBAAmB,IAAI,IAAI,CAAC,gBAAgB,CAAC,mBAAmB,CAAC;QACxE,IAAI,CAAC,gBAAgB,CAAC,oBAAoB;YACzC,KAAK,CAAC,oBAAoB,IAAI,IAAI,CAAC,gBAAgB,CAAC,oBAAoB,CAAC;QAC1E,IAAI,CAAC,gBAAgB,CAAC,iBAAiB;YACtC,KAAK,CAAC,iBAAiB,IAAI,IAAI,CAAC,gBAAgB,CAAC,iBAAiB,CAAC;QACpE,IAAI,KAAK,CAAC,kBAAkB,KAAK,EAAE,EAAE,CAAC;YACrC,IAAI,CAAC,gBAAgB,CAAC,kBAAkB,GAAG,SAAS,CAAC;QACtD,CAAC;aAAM,CAAC;YACP,IAAI,CAAC,gBAAgB,CAAC,kBAAkB;gBACvC,KAAK,CAAC,kBAAkB,IAAI,IAAI,CAAC,gBAAgB,CAAC,kBAAkB,CAAC;QACvE,CAAC;QACD,IACC,KAAK,CAAC,iBAAiB,KAAK,SAAS;YACrC,KAAK,CAAC,iBAAiB,KAAK,wCAAyB,EACpD,CAAC;YACF,IAAI,KAAK,CAAC,iBAAiB,KAAK,EAAE,EAAE,CAAC;gBAEpC,IAAI,CAAC,gBAAgB,CAAC,iBAAiB,GAAG,SAAS,CAAC;YACrD,CAAC;iBAAM,IAAI,IAAI,CAAC,oBAAoB,CAAC,KAAK,CAAC,iBAAiB,CAAC,EAAE,CAAC;gBAE/D,IAAI,CAAC,gBAAgB,CAAC,iBAAiB,GAAG,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC;YACxF,CAAC;iBAAM,CAAC;gBAEP,IAAI,CAAC,gBAAgB,CAAC,iBAAiB,GAAG,KAAK,CAAC,iBAAiB,CAAC;YACnE,CAAC;QACF,CAAC;QACD,IAAI,KAAK,CAAC,WAAW,EAAE,CAAC;YACvB,IAAI,CAAC,gBAAgB,CAAC,WAAW,GAAG,KAAK,CAAC,WAAW,CAAC;QACvD,CAAC;aAAM,IAAI,KAAK,CAAC,QAAQ,EAAE,CAAC;YAE3B,IAAI,CAAC,gBAAgB,CAAC,WAAW,GAAG,SAAS,CAAC;YAC9C,IAAI,CAAC,gBAAgB,CAAC,QAAQ,GAAG,KAAK,CAAC,QAAQ,CAAC;QACjD,CAAC;QACD,MAAM,IAAA,kCAAmB,EAAC,KAAK,CAAC,YAAY,IAAI,IAAA,gCAAkB,GAAE,CAAC,CAAC;QACtE,IAAA,gCAAiB,EAAC,KAAK,CAAC,UAAU,IAAI,IAAA,+BAAiB,GAAE,CAAC,CAAC;IAC5D,CAAC;IAED,KAAK,CAAC,iCAAiC,CACtC,KAAK,GAAG,IAAI,EACZ,kBAA2B,IAAI;QAE/B,MAAM,eAAe,GAAG,MAAM,IAAI,CAAC,kBAAkB,CAAC,OAAO,CAAC;YAC7D,KAAK,EAAE,EAAE,GAAG,EAAE,mCAAuB,EAAE;SACvC,CAAC,CAAC;QACH,IAAI,eAAe,EAAE,CAAC;YACrB,MAAM,KAAK,GAAG,IAAA,wBAAS,EAAkB,eAAe,CAAC,KAAK,CAAC,CAAC;YAEhE,IAAI,KAAK,EAAE,CAAC;gBACX,IAAI,KAAK,EAAE,CAAC;oBAKX,MAAM,IAAI,CAAC,WAAW,EAAE,CAAC;oBACzB,MAAM,mBAAmB,GAAG,IAAI,CAAC,gBAAgB,CAAC,WAAW,CAAC;oBAC9D,MAAM,IAAI,CAAC,gCAAgC,CAAC,KAAK,CAAC,CAAC;oBACnD,MAAM,IAAI,CAAC,sBAAsB,CAAC,KAAK,EAAE,mBAAmB,CAAC,CAAC;oBAE9D,IAAI,eAAe,EAAE,CAAC;wBACrB,MAAM,IAAI,CAAC,uCAAuC,EAAE,CAAC;oBACtD,CAAC;gBACF,CAAC;qBAAM,CAAC;oBACP,MAAM,IAAI,CAAC,gCAAgC,CAAC,KAAK,CAAC,CAAC;gBACpD,CAAC;gBACD,OAAO,KAAK,CAAC;YACd,CAAC;QACF,CAAC;QACD,OAAO;IACR,CAAC;IAED,KAAK,CAAC,uBAAuB;QAC5B,MAAM,eAAe,GAAG,MAAM,IAAI,CAAC,kBAAkB,CAAC,OAAO,CAAC;YAC7D,KAAK,EAAE,EAAE,GAAG,EAAE,mCAAuB,EAAE;SACvC,CAAC,CAAC;QACH,MAAM,aAAa,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;QAC3D,IAAI,MAAgB,CAAC;QACrB,IAAI,eAAe,EAAE,CAAC;YACrB,eAAe,CAAC,KAAK,GAAG,aAAa,CAAC;YACtC,MAAM,GAAG,MAAM,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,eAAe,EAAE;gBAC5D,WAAW,EAAE,KAAK;aAClB,CAAC,CAAC;QACJ,CAAC;aAAM,CAAC;YACP,MAAM,GAAG,MAAM,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAC1C;gBACC,GAAG,EAAE,mCAAuB;gBAC5B,KAAK,EAAE,aAAa;gBACpB,aAAa,EAAE,IAAI;aACnB,EACD,EAAE,WAAW,EAAE,KAAK,EAAE,CACtB,CAAC;QACH,CAAC;QACD,IAAI,MAAM;YAAE,OAAO,IAAA,wBAAS,EAAkB,MAAM,CAAC,KAAK,CAAC,CAAC;QAC5D,OAAO;IACR,CAAC;IAED,KAAK,CAAC,oBAAoB,CACzB,WAAoB,EACpB,SAAmB;QAEnB,MAAM,IAAI,CAAC,WAAW,EAAE,CAAC;QACzB,MAAM,GAAG,GAAG,WAAW,IAAI,IAAI,CAAC,gBAAgB,CAAC,WAAW,CAAC;QAC7D,MAAM,eAAe,GAAG,SAAS,IAAI,IAAI,CAAC,gBAAgB,CAAC,SAAS,CAAC;QACrE,IAAI,CAAC,GAAG;YAAE,MAAM,IAAI,mCAAe,CAAC,mDAAmD,CAAC,CAAC;QACzF,IAAI,CAAC;YAGJ,MAAM,UAAU,GAAG,IAAA,gCAAqB,EACvC,IAAI,EACJ,GAAG,EACH;gBACC,kBAAkB,EAAE,CAAC,eAAe;aACpC,CACD,CAAC;YACF,MAAM,SAAS,GAAG,IAAA,+BAAoB,EAAC,IAAI,EAAE,GAAG,CAAC,CAAC;YAElD,MAAM,QAAQ,GAAG,MAAM,eAAK,CAAC,GAAG,CAAC,GAAG,EAAE;gBACrC,UAAU;gBACV,SAAS;aACT,CAAC,CAAC;YACH,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,IAAI,QAAQ,CAAC,IAAI,EAAE,CAAC;gBAC9C,MAAM,GAAG,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,CAAW,CAAC;gBAC5C,MAAM,gBAAgB,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,gBAAgB,CAAC,GAAG,CAAC,CAAC;gBACpE,IAAI,CAAC,gBAAgB,EAAE,CAAC;oBACvB,MAAM,IAAI,mCAAe,CAAC,sBAAsB,GAAG,8BAA8B,CAAC,CAAC;gBACpF,CAAC;gBACD,OAAO,GAAG,CAAC;YACZ,CAAC;QACF,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,IAAI,KAAK,YAAY,mCAAe;gBAAE,MAAM,KAAK,CAAC;YAClD,MAAM,IAAI,mCAAe,CAAC,qCAAqC,GAAG,KAAK,KAAK,EAAE,CAAC,CAAC;QACjF,CAAC;QACD,OAAO;IACR,CAAC;IAED,KAAK,CAAC,8BAA8B,CACnC,GAAoB,EACpB,OAAyB;QAEzB,IAAI,kBAAkB,CAAC;QACvB,IAAI,CAAC,IAAI,CAAC,gBAAgB,CAAC,OAAO;YACjC,MAAM,IAAI,mCAAe,CAAC,0DAA0D,CAAC,CAAC;QACvF,IAAI,CAAC;YACJ,MAAM,IAAI,CAAC,WAAW,EAAE,CAAC;YACzB,kBAAkB,GAAG,MAAM,IAAI,CAAC,0BAA0B,EAAE,CAAC,kBAAkB,CAC9E,IAAI,CAAC,2BAA2B,EAAE,EAClC,OAAO,EACP,GAAG,CACH,CAAC;QACH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAEhB,MAAM,IAAI,sBAAS,CAElB,8DAA8D,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,EAAE,CAC9G,CAAC;QACH,CAAC;QACD,MAAM,EAAE,UAAU,EAAE,iBAAiB,EAAE,GAAG,IAAA,oDAAqC,EAC9E,kBAAkB,EAClB,IAAI,CAAC,gBAAgB,CAAC,OAAO,EAC7B;YACC,YAAY,EAAE,MAAM,IAAI,CAAC,mBAAmB,CAAC,wBAAwB,EAAE;YACvE,YAAY,EAAE,MAAM,IAAI,CAAC,mBAAmB,CAAC,yBAAyB,EAAE;SACxE,CACD,CAAC;QACF,IAAI,CAAC,UAAU,EAAE,CAAC;YACjB,MAAM,IAAI,sBAAS,CAAC,oDAAoD,CAAC,CAAC;QAC3E,CAAC;QACD,IAAI,iBAAiB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAClC,MAAM,IAAI,sBAAS,CAClB,0EAA0E,iBAAiB,CAAC,IAAI,CAC/F,IAAI,CACJ,IAAI,CACL,CAAC;QACH,CAAC;QACD,OAAO,UAAU,CAAC;IACnB,CAAC;IAMD,KAAK,CAAC,KAAK;QACV,MAAM,IAAA,kCAAmB,EAAC,KAAK,CAAC,CAAC;QACjC,MAAM,IAAI,CAAC,kBAAkB,CAAC,MAAM,CAAC,EAAE,GAAG,EAAE,mCAAuB,EAAE,CAAC,CAAC;IACxE,CAAC;CACD,CAAA;AA9oBY,kCAAW;AAyWjB;IADL,IAAA,0BAAa,EAAC,oBAAoB,CAAC;;;;yCAyBnC;sBAjYW,WAAW;IADvB,IAAA,YAAO,GAAE;qCA6CiB,uBAAM;QACF,wBAAU;QACX,8BAAa;QACR,mBAAc;QACV,uBAAkB;QACpB,2BAAgB;QACb,6CAAmB;QAChC,iBAAM;GAnDpB,WAAW,CA8oBvB"}
+{"version":3,"file":"saml.service.ee.js","sourceRoot":"","sources":["../../../src/modules/sso-saml/saml.service.ee.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AACA,wDAA6C;AAC7C,wCAA2C;AAE3C,gCAA2E;AAC3E,gDAAgD;AAChD,gCAA6C;AAC7C,kDAA0B;AAC1B,mCAA0D;AAE1D,uCAAiG;AACjG,+CAAqF;AAIrF,oEAAgE;AAChE,kFAA6E;AAC7E,6FAA0F;AAC1F,+FAAwF;AACxF,wDAAoD;AACpD,sDAM8B;AAE9B,2CAAsD;AACtD,8FAAuF;AACvF,sFAAgF;AAChF,iDAMwB;AACxB,qDAAiD;AACjD,+DAAmE;AAI5D,IAAM,WAAW,GAAjB,MAAM,WAAW;IAmCvB,IAAI,eAAe;QAClB,OAAO;YACN,GAAG,IAAI,CAAC,gBAAgB;YACxB,YAAY,EAAE,IAAA,gCAAkB,GAAE;YAClC,UAAU,EAAE,IAAA,+BAAiB,GAAE;SAC/B,CAAC;IACH,CAAC;IAED,YACkB,MAAc,EACd,UAAsB,EACtB,SAAwB,EACxB,cAA8B,EAC9B,kBAAsC,EACtC,gBAAkC,EAClC,mBAAwC,EACxC,MAAc;QAPd,WAAM,GAAN,MAAM,CAAQ;QACd,eAAU,GAAV,UAAU,CAAY;QACtB,cAAS,GAAT,SAAS,CAAe;QACxB,mBAAc,GAAd,cAAc,CAAgB;QAC9B,uBAAkB,GAAlB,kBAAkB,CAAoB;QACtC,qBAAgB,GAAhB,gBAAgB,CAAkB;QAClC,wBAAmB,GAAnB,mBAAmB,CAAqB;QACxC,WAAM,GAAN,MAAM,CAAQ;QA7CxB,qBAAgB,GAAoB;YAC3C,OAAO,EAAE;gBACR,KAAK,EAAE,oEAAoE;gBAC3E,SAAS,EAAE,iEAAiE;gBAC5E,QAAQ,EAAE,gEAAgE;gBAC1E,iBAAiB,EAAE,2DAA2D;aAC9E;YACD,QAAQ,EAAE,EAAE;YACZ,WAAW,EAAE,EAAE;YACf,SAAS,EAAE,KAAK;YAChB,YAAY,EAAE,UAAU;YACxB,UAAU,EAAE,MAAM;YAClB,mBAAmB,EAAE,KAAK;YAC1B,iBAAiB,EAAE,SAAS;YAC5B,kBAAkB,EAAE,SAAS;YAC7B,YAAY,EAAE,KAAK;YACnB,UAAU,EAAE,MAAM;YAClB,oBAAoB,EAAE,IAAI;YAC1B,iBAAiB,EAAE,IAAI;YACvB,UAAU,EAAE,IAAI,CAAC,UAAU,CAAC,kBAAkB,EAAE;YAChD,eAAe,EAAE;gBAChB,MAAM,EAAE,IAAI;gBACZ,QAAQ,EAAE;oBACT,SAAS,EAAE,6BAA6B;oBACxC,MAAM,EAAE,OAAO;iBACf;aACD;SACD,CAAC;QAiVM,gBAAW,GAAG,KAAK,CAAC;IA9TzB,CAAC;IAMJ,2BAA2B;QAC1B,OAAO,OAAO,CAAC,GAAG,CAAC,iCAAiC,KAAK,MAAM,CAAC;IACjE,CAAC;IAMO,6BAA6B;QACpC,IAAI,CAAC,IAAI,CAAC,2BAA2B,EAAE;YAAE,OAAO,SAAS,CAAC;QAC1D,IAAI,CAAC,IAAI,CAAC,gBAAgB,CAAC,iBAAiB;YAAE,OAAO,SAAS,CAAC;QAC/D,IAAI,CAAC;YACJ,OAAO,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,gBAAgB,CAAC,iBAAiB,CAAC,CAAC;QACrE,CAAC;QAAC,MAAM,CAAC;YACR,MAAM,IAAI,mCAAe,CACxB,uEAAuE,CACvE,CAAC;QACH,CAAC;IACF,CAAC;IAEO,oBAAoB,CAAC,GAAW;QACvC,OAAO,wFAAwF,CAAC,IAAI,CACnG,GAAG,CAAC,IAAI,EAAE,CACV,CAAC;IACH,CAAC;IAEO,qBAAqB,CAAC,GAAW;QACxC,OAAO,8DAA8D,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC;IACxF,CAAC;IAEO,oBAAoB,CAAC,aAAqB,EAAE,cAAsB;QACzE,IAAI,CAAC;YACJ,MAAM,iBAAiB,GAAG,IAAA,wBAAe,EAAC,aAAa,CAAC,CAAC;YACzD,MAAM,IAAI,GAAG,IAAI,wBAAe,CAAC,cAAc,CAAC,CAAC;YACjD,MAAM,cAAc,GAAG,IAAI,CAAC,SAAS,CAAC;YAEtC,OAAO,iBAAiB;iBACtB,MAAM,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC;iBACvC,MAAM,CAAC,cAAc,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC;QAClE,CAAC;QAAC,MAAM,CAAC;YACR,OAAO,KAAK,CAAC;QACd,CAAC;IACF,CAAC;IAEO,+BAA+B,CAAC,KAA+B;QAGtE,MAAM,aAAa,GAAG,KAAK,CAAC,iBAAiB,KAAK,EAAE,CAAC;QACrD,MAAM,cAAc,GAAG,KAAK,CAAC,kBAAkB,KAAK,EAAE,CAAC;QACvD,MAAM,QAAQ,GACb,CAAC,CAAC,KAAK,CAAC,iBAAiB,IAAI,KAAK,CAAC,iBAAiB,KAAK,wCAAyB,CAAC;QACpF,MAAM,SAAS,GAAG,CAAC,CAAC,KAAK,CAAC,kBAAkB,CAAC;QAC7C,MAAM,mBAAmB,GAAG,QAAQ,IAAI,SAAS,CAAC;QAElD,IAAI,mBAAmB,IAAI,CAAC,IAAI,CAAC,2BAA2B,EAAE,EAAE,CAAC;YAChE,MAAM,IAAI,mCAAe,CACxB,yGAAyG,CACzG,CAAC;QACH,CAAC;QAED,IAAI,CAAC,IAAI,CAAC,2BAA2B,EAAE;YAAE,OAAO;QAEhD,IAAI,QAAQ,IAAI,CAAC,IAAI,CAAC,oBAAoB,CAAC,KAAK,CAAC,iBAAkB,CAAC,EAAE,CAAC;YACtE,MAAM,IAAI,mCAAe,CACxB,wEAAwE,CACxE,CAAC;QACH,CAAC;QAED,IAAI,SAAS,IAAI,CAAC,IAAI,CAAC,qBAAqB,CAAC,KAAK,CAAC,kBAAmB,CAAC,EAAE,CAAC;YACzE,MAAM,IAAI,mCAAe,CACxB,wEAAwE,CACxE,CAAC;QACH,CAAC;QAED,MAAM,2BAA2B,GAChC,KAAK,CAAC,mBAAmB,IAAI,IAAI,CAAC,gBAAgB,CAAC,mBAAmB,CAAC;QAExE,IAAI,2BAA2B,EAAE,CAAC;YAEjC,MAAM,YAAY,GAAG,aAAa;gBACjC,CAAC,CAAC,SAAS;gBACX,CAAC,CAAC,QAAQ;oBACT,CAAC,CAAC,KAAK,CAAC,iBAAkB;oBAC1B,CAAC,CAAC,IAAI,CAAC,6BAA6B,EAAE,CAAC;YACzC,MAAM,aAAa,GAAG,cAAc;gBACnC,CAAC,CAAC,SAAS;gBACX,CAAC,CAAC,SAAS;oBACV,CAAC,CAAC,KAAK,CAAC,kBAAmB;oBAC3B,CAAC,CAAC,IAAI,CAAC,gBAAgB,CAAC,kBAAkB,CAAC;YAE7C,IAAI,CAAC,YAAY,IAAI,CAAC,aAAa,EAAE,CAAC;gBACrC,MAAM,IAAI,mCAAe,CACxB,iGAAiG,CACjG,CAAC;YACH,CAAC;YAED,IAAI,CAAC,IAAI,CAAC,oBAAoB,CAAC,YAAY,EAAE,aAAa,CAAC,EAAE,CAAC;gBAC7D,MAAM,IAAI,mCAAe,CACxB,uGAAuG,CACvG,CAAC;YACH,CAAC;QACF,CAAC;IACF,CAAC;IAED,KAAK,CAAC,IAAI;QACT,IAAI,CAAC;YAEJ,MAAM,IAAI,CAAC,iCAAiC,CAAC,KAAK,CAAC,CAAC;YACpD,IAAI,IAAA,sCAAwB,GAAE,EAAE,CAAC;gBAChC,MAAM,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC;gBAC5B,MAAM,IAAI,CAAC,WAAW,EAAE,CAAC;gBACzB,MAAM,IAAI,CAAC,iCAAiC,CAAC,IAAI,CAAC,CAAC;YACpD,CAAC;QACF,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAGhB,IACC,KAAK,YAAY,6DAA2B;gBAC5C,KAAK,YAAY,sDAAwB;gBACzC,KAAK,YAAY,WAAW,EAC3B,CAAC;gBACF,IAAI,CAAC,MAAM,CAAC,IAAI,CACf,uEAAuE,KAAK,CAAC,OAAO,oIAAoI,CACxN,CAAC;gBACF,MAAM,IAAI,CAAC,KAAK,EAAE,CAAC;YACpB,CAAC;iBAAM,CAAC;gBACP,MAAM,KAAK,CAAC;YACb,CAAC;QACF,CAAC;IACF,CAAC;IAED,KAAK,CAAC,WAAW;QAChB,IAAI,IAAI,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;YAChC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,qCAAqC,CAAC,CAAC;YACzD,MAAM,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC;YAC5B,IAAI,CAAC,OAAO,GAAG,wDAAa,SAAS,GAAC,CAAC;QACxC,CAAC;QAED,IAAI,CAAC,OAAO,CAAC,kBAAkB,CAAC;YAC/B,QAAQ,EAAE,KAAK,EAAE,QAAgB,EAAE,EAAE;gBACpC,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,gBAAgB,CAAC,QAAQ,CAAC,CAAC;gBAC9D,IAAI,CAAC,KAAK,EAAE,CAAC;oBACZ,MAAM,IAAI,sDAAwB,EAAE,CAAC;gBACtC,CAAC;YACF,CAAC;SACD,CAAC,CAAC;IACJ,CAAC;IAED,2BAA2B,CAAC,aAAa,GAAG,KAAK;QAChD,IAAI,IAAI,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;YAChC,MAAM,IAAI,8BAAe,CAAC,4BAA4B,CAAC,CAAC;QACzD,CAAC;QACD,IAAI,CAAC,IAAI,CAAC,gBAAgB,CAAC,QAAQ,EAAE,CAAC;YACrC,MAAM,IAAI,sDAAwB,CACjC,8EAA8E,CAC9E,CAAC;QACH,CAAC;QACD,IAAI,IAAI,CAAC,wBAAwB,KAAK,SAAS,IAAI,aAAa,EAAE,CAAC;YAClE,IAAI,CAAC,wBAAwB,GAAG,IAAI,CAAC,OAAO,CAAC,gBAAgB,CAAC;gBAC7D,QAAQ,EAAE,IAAI,CAAC,gBAAgB,CAAC,QAAQ;aACxC,CAAC,CAAC;QACJ,CAAC;QAED,IAAI,CAAC,SAAS,CAAC,wBAAwB,CAAC,IAAI,CAAC,wBAAwB,CAAC,CAAC;QAEvE,OAAO,IAAI,CAAC,wBAAwB,CAAC;IACtC,CAAC;IAED,0BAA0B;QACzB,IAAI,IAAI,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;YAChC,MAAM,IAAI,8BAAe,CAAC,4BAA4B,CAAC,CAAC;QACzD,CAAC;QACD,OAAO,IAAA,gDAA0B,EAAC,IAAI,CAAC,gBAAgB,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;IACxE,CAAC;IAOD,KAAK,CAAC,kBAAkB,CACvB,UAAmB,EACnB,OAA0B,EAC1B,QAAiB;QAKjB,MAAM,IAAI,CAAC,WAAW,EAAE,CAAC;QACzB,IAAI,IAAI,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;YAChC,MAAM,IAAI,8BAAe,CAAC,4BAA4B,CAAC,CAAC;QACzD,CAAC;QAED,IAAI,GAA6B,CAAC;QAClC,IAAI,QAAQ,EAAE,CAAC;YACd,MAAM,gBAAgB,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,gBAAgB,CAAC,QAAQ,CAAC,CAAC;YACzE,IAAI,CAAC,gBAAgB,EAAE,CAAC;gBACvB,MAAM,IAAI,sDAAwB,EAAE,CAAC;YACtC,CAAC;YACD,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,gBAAgB,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC;YAClD,IAAI,CAAC,SAAS,CAAC,wBAAwB,CAAC,GAAG,CAAC,CAAC;QAC9C,CAAC;aAAM,CAAC;YACP,GAAG,GAAG,IAAI,CAAC,2BAA2B,EAAE,CAAC;QAC1C,CAAC;QAED,OAAO,KAAK,IAAI,CAAC,gBAAgB,CAAC,YAAY,IAAI,UAAU,CAAC;QAC7D,MAAM,EAAE,GAAG,IAAI,CAAC,0BAA0B,EAAE,CAAC;QAC7C,EAAE,CAAC,aAAa,CAAC,UAAU,GAAG,UAAU,IAAI,IAAI,CAAC,UAAU,CAAC,kBAAkB,EAAE,CAAC;QACjF,MAAM,YAAY,GAAG,EAAE,CAAC,kBAAkB,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;QACzD,OAAO;YACN,OAAO;YACP,OAAO,EAAE,OAAO,KAAK,MAAM,CAAC,CAAC,CAAE,YAAmC,CAAC,CAAC,CAAC,YAAY;SACjF,CAAC;IACH,CAAC;IAED,KAAK,CAAC,eAAe,CACpB,GAAoB,EACpB,OAAyB;QAMzB,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,GAAG,EAAE,aAAa,EAAE,GAAG,MAAM,IAAI,CAAC,8BAA8B,CAC3F,GAAG,EACH,OAAO,CACP,CAAC;QAEF,IAAI,UAAU,CAAC,KAAK,EAAE,CAAC;YACtB,MAAM,eAAe,GAAG,UAAU,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC;YAEvD,IAAI,CAAC,IAAA,iBAAY,EAAC,eAAe,CAAC,EAAE,CAAC;gBACpC,MAAM,IAAI,mCAAe,CAAC,sBAAsB,CAAC,CAAC;YACnD,CAAC;YAED,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,OAAO,CAAC;gBAC9C,KAAK,EAAE,EAAE,KAAK,EAAE,eAAe,EAAE;gBACjC,SAAS,EAAE,CAAC,gBAAgB,EAAE,MAAM,CAAC;aACrC,CAAC,CAAC;YACH,IAAI,IAAI,EAAE,CAAC;gBAEV,IACC,IAAI,CAAC,cAAc,CAAC,IAAI,CACvB,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,YAAY,KAAK,MAAM,IAAI,CAAC,CAAC,UAAU,KAAK,UAAU,CAAC,iBAAiB,CACjF,EACA,CAAC;oBACF,MAAM,IAAI,CAAC,oBAAoB,CAAC,IAAI,EAAE,UAAU,EAAE,aAAa,CAAC,CAAC;oBACjE,OAAO;wBACN,iBAAiB,EAAE,IAAI;wBACvB,UAAU;wBACV,kBAAkB,EAAE,KAAK;qBACzB,CAAC;gBACH,CAAC;qBAAM,CAAC;oBAEP,MAAM,WAAW,GAAG,MAAM,IAAA,2CAA4B,EAAC,IAAI,EAAE,UAAU,CAAC,CAAC;oBACzE,MAAM,kBAAkB,GAAG,CAAC,WAAW,CAAC,SAAS,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC;oBAC3E,MAAM,IAAI,CAAC,oBAAoB,CAAC,WAAW,EAAE,UAAU,EAAE,aAAa,CAAC,CAAC;oBACxE,OAAO;wBACN,iBAAiB,EAAE,WAAW;wBAC9B,UAAU;wBACV,kBAAkB;qBAClB,CAAC;gBACH,CAAC;YACF,CAAC;iBAAM,CAAC;gBAEP,IAAI,IAAA,gDAAkC,GAAE,EAAE,CAAC;oBAC1C,MAAM,OAAO,GAAG,MAAM,IAAA,2CAA4B,EAAC,UAAU,CAAC,CAAC;oBAC/D,MAAM,IAAI,CAAC,oBAAoB,CAAC,OAAO,EAAE,UAAU,EAAE,aAAa,CAAC,CAAC;oBACpE,OAAO;wBACN,iBAAiB,EAAE,OAAO;wBAC1B,UAAU;wBACV,kBAAkB,EAAE,CAAC,OAAO,CAAC,SAAS,IAAI,CAAC,OAAO,CAAC,QAAQ;qBAC3D,CAAC;gBACH,CAAC;YACF,CAAC;QACF,CAAC;QAED,OAAO;YACN,iBAAiB,EAAE,SAAS;YAC5B,UAAU;YACV,kBAAkB,EAAE,KAAK;SACzB,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,oBAAoB,CACjC,IAAU,EACV,UAA2C,EAC3C,aAAsC;QAEtC,IAAI,MAAM,IAAI,CAAC,mBAAmB,CAAC,0BAA0B,EAAE,EAAE,CAAC;YACjE,MAAM,OAAO,GAAG,IAAA,+CAAsB,EAAC,aAAa,CAAC,CAAC;YACtD,MAAM,IAAI,CAAC,mBAAmB,CAAC,qCAAqC,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;YACpF,OAAO;QACR,CAAC;QACD,IAAI,UAAU,EAAE,eAAe,EAAE,CAAC;YACjC,MAAM,IAAI,CAAC,mBAAmB,CAAC,4BAA4B,CAAC,IAAI,EAAE,UAAU,CAAC,eAAe,CAAC,CAAC;QAC/F,CAAC;QACD,IAAI,UAAU,EAAE,eAAe,EAAE,CAAC;YACjC,MAAM,IAAI,CAAC,mBAAmB,CAAC,4BAA4B,CAC1D,IAAI,CAAC,EAAE,EACP,UAAU,CAAC,eAAe,CAC1B,CAAC;QACH,CAAC;IACF,CAAC;IAEO,KAAK,CAAC,uCAAuC;QACpD,IAAI,IAAI,CAAC,gBAAgB,CAAC,WAAW,EAAE,CAAC;YACvC,MAAM,EAAE,SAAS,EAAE,GAAG,wDAAa,oCAAoC,GAAC,CAAC;YACzE,MAAM,cAAS,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,cAAc,CAAC,EAAE,OAAO,EAAE,oBAAoB,EAAE,CAAC,CAAC;QAClF,CAAC;IACF,CAAC;IAKK,AAAN,KAAK,CAAC,MAAM;QACX,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC;YACtB,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,+CAA+C,CAAC,CAAC;YAClE,OAAO;QACR,CAAC;QACD,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC;QACxB,IAAI,CAAC;YACJ,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,mEAAmE,CAAC,CAAC;YACvF,MAAM,IAAI,CAAC,iCAAiC,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;YAE1D,MAAM,IAAA,wCAA0B,GAAE,CAAC;YAEnC,MAAM,gBAAgB,GAAG,IAAA,gCAAkB,GAAE,CAAC;YAE9C,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,qBAAqB,gBAAgB,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,UAAU,GAAG,CAAC,CAAC;YAErF,cAAS,CAAC,GAAG,CAAC,qBAAY,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,YAAY,GAAG,gBAAgB,CAAC;QACtE,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,iEAAiE,EAAE;gBACpF,KAAK;aACL,CAAC,CAAC;QACJ,CAAC;gBAAS,CAAC;YACV,IAAI,CAAC,WAAW,GAAG,KAAK,CAAC;QAC1B,CAAC;IACF,CAAC;IAED,KAAK,CAAC,kBAAkB,CACvB,KAA+B,EAC/B,cAAuB,KAAK,EAC5B,kBAA2B,IAAI;QAE/B,MAAM,IAAI,CAAC,WAAW,EAAE,CAAC;QACzB,IAAI,CAAC,+BAA+B,CAAC,KAAK,CAAC,CAAC;QAC5C,MAAM,mBAAmB,GAAG,IAAI,CAAC,gBAAgB,CAAC,WAAW,CAAC;QAC9D,MAAM,IAAI,CAAC,gCAAgC,CAAC,KAAK,CAAC,CAAC;QACnD,MAAM,IAAI,CAAC,sBAAsB,CAAC,KAAK,EAAE,mBAAmB,EAAE,WAAW,CAAC,CAAC;QAC3E,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,uBAAuB,EAAE,CAAC;QAEpD,IAAI,eAAe,EAAE,CAAC;YACrB,MAAM,IAAI,CAAC,uCAAuC,EAAE,CAAC;QACtD,CAAC;QACD,OAAO,MAAM,CAAC;IACf,CAAC;IAEO,KAAK,CAAC,sBAAsB,CACnC,KAA+B,EAC/B,mBAAuC,EACvC,cAAuB,IAAI;QAE3B,IAAI,KAAK,CAAC,WAAW,EAAE,CAAC;YACvB,IAAI,CAAC;gBACJ,MAAM,eAAe,GAAG,MAAM,IAAI,CAAC,oBAAoB,EAAE,CAAC;gBAC1D,IAAI,eAAe,EAAE,CAAC;oBACrB,IAAI,CAAC,gBAAgB,CAAC,QAAQ,GAAG,eAAe,CAAC;gBAClD,CAAC;qBAAM,CAAC;oBAGP,MAAM,IAAI,6DAA2B,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;gBAC1D,CAAC;YACF,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBAChB,IAAI,CAAC,gBAAgB,CAAC,WAAW,GAAG,mBAAmB,CAAC;gBACxD,IAAI,CAAC,WAAW,EAAE,CAAC;oBAClB,MAAM,KAAK,CAAC;gBACb,CAAC;gBAID,IAAI,CAAC,MAAM,CAAC,KAAK,CAChB,gIAAgI,EAEhI,EAAE,KAAK,EAAE,CACT,CAAC;YACH,CAAC;QACF,CAAC;aAAM,IAAI,KAAK,CAAC,QAAQ,EAAE,CAAC;YAC3B,MAAM,gBAAgB,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,gBAAgB,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;YAC/E,IAAI,CAAC,gBAAgB,EAAE,CAAC;gBACvB,MAAM,IAAI,sDAAwB,EAAE,CAAC;YACtC,CAAC;QACF,CAAC;QAMD,IAAI,IAAA,gCAAkB,GAAE,EAAE,CAAC;YAC1B,IAAI,IAAI,CAAC,gBAAgB,CAAC,QAAQ,EAAE,CAAC;gBACpC,MAAM,gBAAgB,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,gBAAgB,CAC7D,IAAI,CAAC,gBAAgB,CAAC,QAAQ,CAC9B,CAAC;gBACF,IAAI,CAAC,gBAAgB,EAAE,CAAC;oBACvB,MAAM,IAAI,sDAAwB,EAAE,CAAC;gBACtC,CAAC;YACF,CAAC;iBAAM,CAAC;gBAEP,MAAM,IAAI,sDAAwB,EAAE,CAAC;YACtC,CAAC;QACF,CAAC;QACD,IAAI,CAAC,2BAA2B,CAAC,IAAI,CAAC,CAAC;IACxC,CAAC;IAED,KAAK,CAAC,gCAAgC,CAAC,KAA+B;QACrE,IAAI,CAAC,gBAAgB,CAAC,YAAY,GAAG,KAAK,CAAC,YAAY,IAAI,IAAI,CAAC,gBAAgB,CAAC,YAAY,CAAC;QAC9F,IAAI,CAAC,gBAAgB,CAAC,QAAQ,GAAG,KAAK,CAAC,QAAQ,IAAI,IAAI,CAAC,gBAAgB,CAAC,QAAQ,CAAC;QAClF,IAAI,CAAC,gBAAgB,CAAC,OAAO,GAAG,KAAK,CAAC,OAAO,IAAI,IAAI,CAAC,gBAAgB,CAAC,OAAO,CAAC;QAC/E,IAAI,CAAC,gBAAgB,CAAC,SAAS,GAAG,KAAK,CAAC,SAAS,IAAI,IAAI,CAAC,gBAAgB,CAAC,SAAS,CAAC;QACrF,IAAI,CAAC,gBAAgB,CAAC,UAAU,GAAG,KAAK,CAAC,UAAU,IAAI,IAAI,CAAC,gBAAgB,CAAC,UAAU,CAAC;QACxF,IAAI,CAAC,gBAAgB,CAAC,eAAe;YACpC,KAAK,CAAC,eAAe,IAAI,IAAI,CAAC,gBAAgB,CAAC,eAAe,CAAC;QAChE,IAAI,CAAC,gBAAgB,CAAC,mBAAmB;YACxC,KAAK,CAAC,mBAAmB,IAAI,IAAI,CAAC,gBAAgB,CAAC,mBAAmB,CAAC;QACxE,IAAI,CAAC,gBAAgB,CAAC,oBAAoB;YACzC,KAAK,CAAC,oBAAoB,IAAI,IAAI,CAAC,gBAAgB,CAAC,oBAAoB,CAAC;QAC1E,IAAI,CAAC,gBAAgB,CAAC,iBAAiB;YACtC,KAAK,CAAC,iBAAiB,IAAI,IAAI,CAAC,gBAAgB,CAAC,iBAAiB,CAAC;QACpE,IAAI,KAAK,CAAC,kBAAkB,KAAK,EAAE,EAAE,CAAC;YACrC,IAAI,CAAC,gBAAgB,CAAC,kBAAkB,GAAG,SAAS,CAAC;QACtD,CAAC;aAAM,CAAC;YACP,IAAI,CAAC,gBAAgB,CAAC,kBAAkB;gBACvC,KAAK,CAAC,kBAAkB,IAAI,IAAI,CAAC,gBAAgB,CAAC,kBAAkB,CAAC;QACvE,CAAC;QACD,IACC,KAAK,CAAC,iBAAiB,KAAK,SAAS;YACrC,KAAK,CAAC,iBAAiB,KAAK,wCAAyB,EACpD,CAAC;YACF,IAAI,KAAK,CAAC,iBAAiB,KAAK,EAAE,EAAE,CAAC;gBAEpC,IAAI,CAAC,gBAAgB,CAAC,iBAAiB,GAAG,SAAS,CAAC;YACrD,CAAC;iBAAM,IAAI,IAAI,CAAC,oBAAoB,CAAC,KAAK,CAAC,iBAAiB,CAAC,EAAE,CAAC;gBAE/D,IAAI,CAAC,gBAAgB,CAAC,iBAAiB,GAAG,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC;YACxF,CAAC;iBAAM,CAAC;gBAEP,IAAI,CAAC,gBAAgB,CAAC,iBAAiB,GAAG,KAAK,CAAC,iBAAiB,CAAC;YACnE,CAAC;QACF,CAAC;QACD,IAAI,KAAK,CAAC,WAAW,EAAE,CAAC;YACvB,IAAI,CAAC,gBAAgB,CAAC,WAAW,GAAG,KAAK,CAAC,WAAW,CAAC;QACvD,CAAC;aAAM,IAAI,KAAK,CAAC,QAAQ,EAAE,CAAC;YAE3B,IAAI,CAAC,gBAAgB,CAAC,WAAW,GAAG,SAAS,CAAC;YAC9C,IAAI,CAAC,gBAAgB,CAAC,QAAQ,GAAG,KAAK,CAAC,QAAQ,CAAC;QACjD,CAAC;QACD,MAAM,IAAA,kCAAmB,EAAC,KAAK,CAAC,YAAY,IAAI,IAAA,gCAAkB,GAAE,CAAC,CAAC;QACtE,IAAA,gCAAiB,EAAC,KAAK,CAAC,UAAU,IAAI,IAAA,+BAAiB,GAAE,CAAC,CAAC;IAC5D,CAAC;IAED,KAAK,CAAC,iCAAiC,CACtC,KAAK,GAAG,IAAI,EACZ,kBAA2B,IAAI;QAE/B,MAAM,eAAe,GAAG,MAAM,IAAI,CAAC,kBAAkB,CAAC,OAAO,CAAC;YAC7D,KAAK,EAAE,EAAE,GAAG,EAAE,mCAAuB,EAAE;SACvC,CAAC,CAAC;QACH,IAAI,eAAe,EAAE,CAAC;YACrB,MAAM,KAAK,GAAG,IAAA,wBAAS,EAAkB,eAAe,CAAC,KAAK,CAAC,CAAC;YAEhE,IAAI,KAAK,EAAE,CAAC;gBACX,IAAI,KAAK,EAAE,CAAC;oBAKX,MAAM,IAAI,CAAC,WAAW,EAAE,CAAC;oBACzB,MAAM,mBAAmB,GAAG,IAAI,CAAC,gBAAgB,CAAC,WAAW,CAAC;oBAC9D,MAAM,IAAI,CAAC,gCAAgC,CAAC,KAAK,CAAC,CAAC;oBACnD,MAAM,IAAI,CAAC,sBAAsB,CAAC,KAAK,EAAE,mBAAmB,CAAC,CAAC;oBAE9D,IAAI,eAAe,EAAE,CAAC;wBACrB,MAAM,IAAI,CAAC,uCAAuC,EAAE,CAAC;oBACtD,CAAC;gBACF,CAAC;qBAAM,CAAC;oBACP,MAAM,IAAI,CAAC,gCAAgC,CAAC,KAAK,CAAC,CAAC;gBACpD,CAAC;gBACD,OAAO,KAAK,CAAC;YACd,CAAC;QACF,CAAC;QACD,OAAO;IACR,CAAC;IAED,KAAK,CAAC,uBAAuB;QAC5B,MAAM,eAAe,GAAG,MAAM,IAAI,CAAC,kBAAkB,CAAC,OAAO,CAAC;YAC7D,KAAK,EAAE,EAAE,GAAG,EAAE,mCAAuB,EAAE;SACvC,CAAC,CAAC;QACH,MAAM,aAAa,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;QAC3D,IAAI,MAAgB,CAAC;QACrB,IAAI,eAAe,EAAE,CAAC;YACrB,eAAe,CAAC,KAAK,GAAG,aAAa,CAAC;YACtC,MAAM,GAAG,MAAM,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,eAAe,EAAE;gBAC5D,WAAW,EAAE,KAAK;aAClB,CAAC,CAAC;QACJ,CAAC;aAAM,CAAC;YACP,MAAM,GAAG,MAAM,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAC1C;gBACC,GAAG,EAAE,mCAAuB;gBAC5B,KAAK,EAAE,aAAa;gBACpB,aAAa,EAAE,IAAI;aACnB,EACD,EAAE,WAAW,EAAE,KAAK,EAAE,CACtB,CAAC;QACH,CAAC;QACD,IAAI,MAAM;YAAE,OAAO,IAAA,wBAAS,EAAkB,MAAM,CAAC,KAAK,CAAC,CAAC;QAC5D,OAAO;IACR,CAAC;IAED,KAAK,CAAC,oBAAoB,CACzB,WAAoB,EACpB,SAAmB;QAEnB,MAAM,IAAI,CAAC,WAAW,EAAE,CAAC;QACzB,MAAM,GAAG,GAAG,WAAW,IAAI,IAAI,CAAC,gBAAgB,CAAC,WAAW,CAAC;QAC7D,MAAM,eAAe,GAAG,SAAS,IAAI,IAAI,CAAC,gBAAgB,CAAC,SAAS,CAAC;QACrE,IAAI,CAAC,GAAG;YAAE,MAAM,IAAI,mCAAe,CAAC,mDAAmD,CAAC,CAAC;QACzF,IAAI,CAAC;YAGJ,MAAM,UAAU,GAAG,IAAA,gCAAqB,EACvC,IAAI,EACJ,GAAG,EACH;gBACC,kBAAkB,EAAE,CAAC,eAAe;aACpC,CACD,CAAC;YACF,MAAM,SAAS,GAAG,IAAA,+BAAoB,EAAC,IAAI,EAAE,GAAG,CAAC,CAAC;YAElD,MAAM,QAAQ,GAAG,MAAM,eAAK,CAAC,GAAG,CAAC,GAAG,EAAE;gBACrC,UAAU;gBACV,SAAS;aACT,CAAC,CAAC;YACH,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,IAAI,QAAQ,CAAC,IAAI,EAAE,CAAC;gBAC9C,MAAM,GAAG,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,CAAW,CAAC;gBAC5C,MAAM,gBAAgB,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,gBAAgB,CAAC,GAAG,CAAC,CAAC;gBACpE,IAAI,CAAC,gBAAgB,EAAE,CAAC;oBACvB,MAAM,IAAI,mCAAe,CAAC,sBAAsB,GAAG,8BAA8B,CAAC,CAAC;gBACpF,CAAC;gBACD,OAAO,GAAG,CAAC;YACZ,CAAC;QACF,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,IAAI,KAAK,YAAY,mCAAe;gBAAE,MAAM,KAAK,CAAC;YAClD,MAAM,IAAI,mCAAe,CAAC,qCAAqC,GAAG,KAAK,KAAK,EAAE,CAAC,CAAC;QACjF,CAAC;QACD,OAAO;IACR,CAAC;IAED,KAAK,CAAC,8BAA8B,CACnC,GAAoB,EACpB,OAAyB;QAEzB,IAAI,kBAAkB,CAAC;QACvB,IAAI,CAAC,IAAI,CAAC,gBAAgB,CAAC,OAAO;YACjC,MAAM,IAAI,mCAAe,CAAC,0DAA0D,CAAC,CAAC;QACvF,IAAI,CAAC;YACJ,MAAM,IAAI,CAAC,WAAW,EAAE,CAAC;YACzB,kBAAkB,GAAG,MAAM,IAAI,CAAC,0BAA0B,EAAE,CAAC,kBAAkB,CAC9E,IAAI,CAAC,2BAA2B,EAAE,EAClC,OAAO,EACP,GAAG,CACH,CAAC;QACH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAEhB,MAAM,IAAI,sBAAS,CAElB,8DAA8D,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,EAAE,CAC9G,CAAC;QACH,CAAC;QACD,MAAM,EAAE,UAAU,EAAE,iBAAiB,EAAE,aAAa,EAAE,GAAG,IAAA,oDAAqC,EAC7F,kBAAkB,EAClB,IAAI,CAAC,gBAAgB,CAAC,OAAO,EAC7B;YACC,YAAY,EAAE,MAAM,IAAI,CAAC,mBAAmB,CAAC,wBAAwB,EAAE;YACvE,YAAY,EAAE,MAAM,IAAI,CAAC,mBAAmB,CAAC,yBAAyB,EAAE;SACxE,CACD,CAAC;QACF,IAAI,CAAC,UAAU,EAAE,CAAC;YACjB,MAAM,IAAI,sBAAS,CAAC,oDAAoD,CAAC,CAAC;QAC3E,CAAC;QACD,IAAI,iBAAiB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAClC,MAAM,IAAI,sBAAS,CAClB,0EAA0E,iBAAiB,CAAC,IAAI,CAC/F,IAAI,CACJ,IAAI,CACL,CAAC;QACH,CAAC;QACD,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,GAAG,EAAE,aAAa,EAAE,CAAC;IACnD,CAAC;IAMD,KAAK,CAAC,KAAK;QACV,MAAM,IAAA,kCAAmB,EAAC,KAAK,CAAC,CAAC;QACjC,MAAM,IAAI,CAAC,kBAAkB,CAAC,MAAM,CAAC,EAAE,GAAG,EAAE,mCAAuB,EAAE,CAAC,CAAC;IACxE,CAAC;CACD,CAAA;AA1pBY,kCAAW;AAqXjB;IADL,IAAA,0BAAa,EAAC,oBAAoB,CAAC;;;;yCAyBnC;sBA7YW,WAAW;IADvB,IAAA,YAAO,GAAE;qCA6CiB,uBAAM;QACF,wBAAU;QACX,8BAAa;QACR,mBAAc;QACV,uBAAkB;QACpB,2BAAgB;QACb,6CAAmB;QAChC,iBAAM;GAnDpB,WAAW,CA0pBvB"}

package/dist/modules/token-exchange/controllers/embed-auth.controller.d.ts

@@ -0,0 +1,15 @@
+import { EmbedLoginBodyDto, EmbedLoginQueryDto } from '@n8n/api-types';
+import type { Response } from 'express';
+import { AuthService } from '../../../auth/auth.service';
+import { AuthlessRequest } from '../../../requests';
+import { UrlService } from '../../../services/url.service';
+import { TokenExchangeService } from '../services/token-exchange.service';
+export declare class EmbedAuthController {
+    private readonly tokenExchangeService;
+    private readonly authService;
+    private readonly urlService;
+    constructor(tokenExchangeService: TokenExchangeService, authService: AuthService, urlService: UrlService);
+    getLogin(req: AuthlessRequest, res: Response, query: EmbedLoginQueryDto): Promise<void>;
+    postLogin(req: AuthlessRequest, res: Response, body: EmbedLoginBodyDto): Promise<void>;
+    private handleLogin;
+}

package/dist/modules/token-exchange/controllers/embed-auth.controller.js

@@ -0,0 +1,67 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+var __param = (this && this.__param) || function (paramIndex, decorator) {
+    return function (target, key) { decorator(target, key, paramIndex); }
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.EmbedAuthController = void 0;
+const api_types_1 = require("@n8n/api-types");
+const constants_1 = require("@n8n/constants");
+const decorators_1 = require("@n8n/decorators");
+const auth_service_1 = require("../../../auth/auth.service");
+const url_service_1 = require("../../../services/url.service");
+const token_exchange_service_1 = require("../services/token-exchange.service");
+let EmbedAuthController = class EmbedAuthController {
+    constructor(tokenExchangeService, authService, urlService) {
+        this.tokenExchangeService = tokenExchangeService;
+        this.authService = authService;
+        this.urlService = urlService;
+    }
+    async getLogin(req, res, query) {
+        return await this.handleLogin(query.token, req, res);
+    }
+    async postLogin(req, res, body) {
+        return await this.handleLogin(body.token, req, res);
+    }
+    async handleLogin(subjectToken, req, res) {
+        const user = await this.tokenExchangeService.embedLogin(subjectToken);
+        this.authService.issueCookie(res, user, true, req.browserId);
+        res.redirect(this.urlService.getInstanceBaseUrl() + '/');
+    }
+};
+exports.EmbedAuthController = EmbedAuthController;
+__decorate([
+    (0, decorators_1.Get)('/', {
+        skipAuth: true,
+        ipRateLimit: { limit: 20, windowMs: 1 * constants_1.Time.minutes.toMilliseconds },
+    }),
+    __param(2, decorators_1.Query),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [Object, Object, api_types_1.EmbedLoginQueryDto]),
+    __metadata("design:returntype", Promise)
+], EmbedAuthController.prototype, "getLogin", null);
+__decorate([
+    (0, decorators_1.Post)('/', {
+        skipAuth: true,
+        ipRateLimit: { limit: 20, windowMs: 1 * constants_1.Time.minutes.toMilliseconds },
+    }),
+    __param(2, decorators_1.Body),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [Object, Object, api_types_1.EmbedLoginBodyDto]),
+    __metadata("design:returntype", Promise)
+], EmbedAuthController.prototype, "postLogin", null);
+exports.EmbedAuthController = EmbedAuthController = __decorate([
+    (0, decorators_1.RestController)('/auth/embed'),
+    __metadata("design:paramtypes", [token_exchange_service_1.TokenExchangeService,
+        auth_service_1.AuthService,
+        url_service_1.UrlService])
+], EmbedAuthController);
+//# sourceMappingURL=embed-auth.controller.js.map

package/dist/modules/token-exchange/controllers/embed-auth.controller.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"embed-auth.controller.js","sourceRoot":"","sources":["../../../../src/modules/token-exchange/controllers/embed-auth.controller.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;AAAA,8CAAuE;AACvE,8CAAsC;AACtC,gDAAyE;AAGzE,sDAAkD;AAElD,wDAAoD;AAEpD,+EAA0E;AAGnE,IAAM,mBAAmB,GAAzB,MAAM,mBAAmB;IAC/B,YACkB,oBAA0C,EAC1C,WAAwB,EACxB,UAAsB;QAFtB,yBAAoB,GAApB,oBAAoB,CAAsB;QAC1C,gBAAW,GAAX,WAAW,CAAa;QACxB,eAAU,GAAV,UAAU,CAAY;IACrC,CAAC;IAME,AAAN,KAAK,CAAC,QAAQ,CAAC,GAAoB,EAAE,GAAa,EAAS,KAAyB;QACnF,OAAO,MAAM,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,KAAK,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC;IACtD,CAAC;IAMK,AAAN,KAAK,CAAC,SAAS,CAAC,GAAoB,EAAE,GAAa,EAAQ,IAAuB;QACjF,OAAO,MAAM,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,KAAK,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC;IACrD,CAAC;IAEO,KAAK,CAAC,WAAW,CAAC,YAAoB,EAAE,GAAoB,EAAE,GAAa;QAClF,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,oBAAoB,CAAC,UAAU,CAAC,YAAY,CAAC,CAAC;QAEtE,IAAI,CAAC,WAAW,CAAC,WAAW,CAAC,GAAG,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,CAAC,SAAS,CAAC,CAAC;QAM7D,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,UAAU,CAAC,kBAAkB,EAAE,GAAG,GAAG,CAAC,CAAC;IAC1D,CAAC;CACD,CAAA;AAlCY,kDAAmB;AAWzB;IAJL,IAAA,gBAAG,EAAC,GAAG,EAAE;QACT,QAAQ,EAAE,IAAI;QACd,WAAW,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,QAAQ,EAAE,CAAC,GAAG,gBAAI,CAAC,OAAO,CAAC,cAAc,EAAE;KACrE,CAAC;IACmD,WAAA,kBAAK,CAAA;;qDAAQ,8BAAkB;;mDAEnF;AAMK;IAJL,IAAA,iBAAI,EAAC,GAAG,EAAE;QACV,QAAQ,EAAE,IAAI;QACd,WAAW,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,QAAQ,EAAE,CAAC,GAAG,gBAAI,CAAC,OAAO,CAAC,cAAc,EAAE;KACrE,CAAC;IACoD,WAAA,iBAAI,CAAA;;qDAAO,6BAAiB;;oDAEjF;8BArBW,mBAAmB;IAD/B,IAAA,2BAAc,EAAC,aAAa,CAAC;qCAGW,6CAAoB;QAC7B,0BAAW;QACZ,wBAAU;GAJ5B,mBAAmB,CAkC/B"}

package/dist/modules/token-exchange/database/entities/token-exchange-jti.entity.d.ts

@@ -0,0 +1,5 @@
+export declare class TokenExchangeJti {
+    jti: string;
+    expiresAt: Date;
+    createdAt: Date;
+}

package/dist/modules/token-exchange/database/entities/token-exchange-jti.entity.js

@@ -0,0 +1,33 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.TokenExchangeJti = void 0;
+const db_1 = require("@n8n/db");
+const typeorm_1 = require("@n8n/typeorm");
+let TokenExchangeJti = class TokenExchangeJti {
+};
+exports.TokenExchangeJti = TokenExchangeJti;
+__decorate([
+    (0, typeorm_1.PrimaryColumn)({ type: 'varchar', length: 255 }),
+    __metadata("design:type", String)
+], TokenExchangeJti.prototype, "jti", void 0);
+__decorate([
+    (0, db_1.DateTimeColumn)(),
+    __metadata("design:type", Date)
+], TokenExchangeJti.prototype, "expiresAt", void 0);
+__decorate([
+    (0, db_1.DateTimeColumn)(),
+    __metadata("design:type", Date)
+], TokenExchangeJti.prototype, "createdAt", void 0);
+exports.TokenExchangeJti = TokenExchangeJti = __decorate([
+    (0, typeorm_1.Entity)('token_exchange_jti')
+], TokenExchangeJti);
+//# sourceMappingURL=token-exchange-jti.entity.js.map

package/dist/modules/token-exchange/database/entities/token-exchange-jti.entity.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"token-exchange-jti.entity.js","sourceRoot":"","sources":["../../../../../src/modules/token-exchange/database/entities/token-exchange-jti.entity.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,gCAAyC;AACzC,0CAAqD;AAG9C,IAAM,gBAAgB,GAAtB,MAAM,gBAAgB;CAS5B,CAAA;AATY,4CAAgB;AAE5B;IADC,IAAA,uBAAa,EAAC,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC;;6CACpC;AAGZ;IADC,IAAA,mBAAc,GAAE;8BACN,IAAI;mDAAC;AAGhB;IADC,IAAA,mBAAc,GAAE;8BACN,IAAI;mDAAC;2BARJ,gBAAgB;IAD5B,IAAA,gBAAM,EAAC,oBAAoB,CAAC;GAChB,gBAAgB,CAS5B"}

package/dist/modules/token-exchange/database/repositories/token-exchange-jti.repository.d.ts

@@ -0,0 +1,10 @@
+import { GlobalConfig } from '@n8n/config';
+import { DataSource, Repository } from '@n8n/typeorm';
+import { TokenExchangeJti } from '../entities/token-exchange-jti.entity';
+export declare class TokenExchangeJtiRepository extends Repository<TokenExchangeJti> {
+    private readonly dbType;
+    private readonly escapedTableName;
+    constructor(dataSource: DataSource, globalConfig: GlobalConfig);
+    atomicConsume(jti: string, expiresAt: Date): Promise<boolean>;
+    deleteExpiredBatch(batchSize: number): Promise<number>;
+}

package/dist/modules/token-exchange/database/repositories/token-exchange-jti.repository.js

@@ -0,0 +1,106 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.TokenExchangeJtiRepository = void 0;
+const config_1 = require("@n8n/config");
+const di_1 = require("@n8n/di");
+const typeorm_1 = require("@n8n/typeorm");
+const node_assert_1 = __importDefault(require("node:assert"));
+const token_exchange_jti_entity_1 = require("../entities/token-exchange-jti.entity");
+let TokenExchangeJtiRepository = class TokenExchangeJtiRepository extends typeorm_1.Repository {
+    constructor(dataSource, globalConfig) {
+        super(token_exchange_jti_entity_1.TokenExchangeJti, dataSource.manager);
+        this.dbType = globalConfig.database.type;
+        const { schema, tableName } = this.metadata;
+        const esc = (name) => dataSource.driver.escape(name);
+        this.escapedTableName = schema ? `${esc(schema)}.${esc(tableName)}` : esc(tableName);
+    }
+    async atomicConsume(jti, expiresAt) {
+        const esc = (name) => this.manager.connection.driver.escape(name);
+        const tableName = this.escapedTableName;
+        if (this.dbType === 'postgresdb') {
+            const [row] = (await this.query(`WITH ins AS (
+					INSERT INTO ${tableName} (${esc('jti')}, ${esc('expiresAt')}, ${esc('createdAt')})
+					VALUES ($1, $2, NOW())
+					ON CONFLICT (${esc('jti')}) DO NOTHING
+					RETURNING ${esc('jti')}
+				)
+				SELECT EXISTS (SELECT 1 FROM ins) AS inserted`, [jti, expiresAt]));
+            return row.inserted;
+        }
+        else if (this.dbType === 'sqlite') {
+            const qr = this.manager.connection.createQueryRunner();
+            await qr.startTransaction();
+            try {
+                await qr.query(`INSERT OR IGNORE INTO ${tableName} (${esc('jti')}, ${esc('expiresAt')}, ${esc('createdAt')}) VALUES (?, datetime(?), datetime('now'))`, [jti, expiresAt.toISOString()]);
+                const [{ cnt }] = (await qr.query('SELECT changes() as cnt'));
+                await qr.commitTransaction();
+                return cnt > 0;
+            }
+            catch (e) {
+                await qr.rollbackTransaction();
+                throw e;
+            }
+            finally {
+                await qr.release();
+            }
+        }
+        node_assert_1.default.fail('Unknown database type');
+    }
+    async deleteExpiredBatch(batchSize) {
+        const esc = (name) => this.manager.connection.driver.escape(name);
+        const tableName = this.escapedTableName;
+        if (this.dbType === 'postgresdb') {
+            const [row] = (await this.query(`WITH deleted AS (
+					DELETE FROM ${tableName}
+					WHERE ${esc('jti')} IN (
+						SELECT ${esc('jti')} FROM ${tableName}
+						WHERE ${esc('expiresAt')} < NOW()
+						LIMIT $1
+					)
+					RETURNING ${esc('jti')}
+				)
+				SELECT COUNT(*) AS ${esc('count')} FROM deleted`, [batchSize]));
+            return Number(row.count);
+        }
+        else if (this.dbType === 'sqlite') {
+            const qr = this.manager.connection.createQueryRunner();
+            await qr.startTransaction();
+            try {
+                await qr.query(`DELETE FROM ${tableName} WHERE ${esc('jti')} IN (
+						SELECT ${esc('jti')} FROM ${tableName}
+						WHERE ${esc('expiresAt')} < datetime('now')
+						LIMIT ?
+					)`, [batchSize]);
+                const [{ cnt }] = (await qr.query('SELECT changes() as cnt'));
+                await qr.commitTransaction();
+                return Number(cnt);
+            }
+            catch (e) {
+                await qr.rollbackTransaction();
+                throw e;
+            }
+            finally {
+                await qr.release();
+            }
+        }
+        node_assert_1.default.fail('Unknown database type');
+    }
+};
+exports.TokenExchangeJtiRepository = TokenExchangeJtiRepository;
+exports.TokenExchangeJtiRepository = TokenExchangeJtiRepository = __decorate([
+    (0, di_1.Service)(),
+    __metadata("design:paramtypes", [typeorm_1.DataSource, config_1.GlobalConfig])
+], TokenExchangeJtiRepository);
+//# sourceMappingURL=token-exchange-jti.repository.js.map

package/dist/modules/token-exchange/database/repositories/token-exchange-jti.repository.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"token-exchange-jti.repository.js","sourceRoot":"","sources":["../../../../../src/modules/token-exchange/database/repositories/token-exchange-jti.repository.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;AAAA,wCAA2C;AAC3C,gCAAkC;AAClC,0CAAsD;AACtD,8DAAiC;AAEjC,qFAAyE;AAGlE,IAAM,0BAA0B,GAAhC,MAAM,0BAA2B,SAAQ,oBAA4B;IAK3E,YAAY,UAAsB,EAAE,YAA0B;QAC7D,KAAK,CAAC,4CAAgB,EAAE,UAAU,CAAC,OAAO,CAAC,CAAC;QAC5C,IAAI,CAAC,MAAM,GAAG,YAAY,CAAC,QAAQ,CAAC,IAAI,CAAC;QACzC,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,GAAG,IAAI,CAAC,QAAQ,CAAC;QAC5C,MAAM,GAAG,GAAG,CAAC,IAAY,EAAE,EAAE,CAAC,UAAU,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QAC7D,IAAI,CAAC,gBAAgB,GAAG,MAAM,CAAC,CAAC,CAAC,GAAG,GAAG,CAAC,MAAM,CAAC,IAAI,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;IACtF,CAAC;IAWD,KAAK,CAAC,aAAa,CAAC,GAAW,EAAE,SAAe;QAC/C,MAAM,GAAG,GAAG,CAAC,IAAY,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QAC1E,MAAM,SAAS,GAAG,IAAI,CAAC,gBAAgB,CAAC;QAExC,IAAI,IAAI,CAAC,MAAM,KAAK,YAAY,EAAE,CAAC;YAClC,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,IAAI,CAAC,KAAK,CAC9B;mBACe,SAAS,KAAK,GAAG,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC,WAAW,CAAC,KAAK,GAAG,CAAC,WAAW,CAAC;;oBAEjE,GAAG,CAAC,KAAK,CAAC;iBACb,GAAG,CAAC,KAAK,CAAC;;kDAEuB,EAC9C,CAAC,GAAG,EAAE,SAAS,CAAC,CAChB,CAAiC,CAAC;YAEnC,OAAO,GAAG,CAAC,QAAQ,CAAC;QACrB,CAAC;aAAM,IAAI,IAAI,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;YACrC,MAAM,EAAE,GAAG,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,iBAAiB,EAAE,CAAC;YACvD,MAAM,EAAE,CAAC,gBAAgB,EAAE,CAAC;YAC5B,IAAI,CAAC;gBACJ,MAAM,EAAE,CAAC,KAAK,CACb,yBAAyB,SAAS,KAAK,GAAG,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC,WAAW,CAAC,KAAK,GAAG,CAAC,WAAW,CAAC,4CAA4C,EACvI,CAAC,GAAG,EAAE,SAAS,CAAC,WAAW,EAAE,CAAC,CAC9B,CAAC;gBACF,MAAM,CAAC,EAAE,GAAG,EAAE,CAAC,GAAG,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,yBAAyB,CAAC,CAE1D,CAAC;gBACH,MAAM,EAAE,CAAC,iBAAiB,EAAE,CAAC;gBAC7B,OAAO,GAAG,GAAG,CAAC,CAAC;YAChB,CAAC;YAAC,OAAO,CAAC,EAAE,CAAC;gBACZ,MAAM,EAAE,CAAC,mBAAmB,EAAE,CAAC;gBAC/B,MAAM,CAAC,CAAC;YACT,CAAC;oBAAS,CAAC;gBACV,MAAM,EAAE,CAAC,OAAO,EAAE,CAAC;YACpB,CAAC;QACF,CAAC;QAED,qBAAM,CAAC,IAAI,CAAC,uBAAuB,CAAC,CAAC;IACtC,CAAC;IASD,KAAK,CAAC,kBAAkB,CAAC,SAAiB;QACzC,MAAM,GAAG,GAAG,CAAC,IAAY,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QAC1E,MAAM,SAAS,GAAG,IAAI,CAAC,gBAAgB,CAAC;QAExC,IAAI,IAAI,CAAC,MAAM,KAAK,YAAY,EAAE,CAAC;YAClC,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,IAAI,CAAC,KAAK,CAC9B;mBACe,SAAS;aACf,GAAG,CAAC,KAAK,CAAC;eACR,GAAG,CAAC,KAAK,CAAC,SAAS,SAAS;cAC7B,GAAG,CAAC,WAAW,CAAC;;;iBAGb,GAAG,CAAC,KAAK,CAAC;;yBAEF,GAAG,CAAC,OAAO,CAAC,eAAe,EAChD,CAAC,SAAS,CAAC,CACX,CAAsC,CAAC;YAExC,OAAO,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QAC1B,CAAC;aAAM,IAAI,IAAI,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;YACrC,MAAM,EAAE,GAAG,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,iBAAiB,EAAE,CAAC;YACvD,MAAM,EAAE,CAAC,gBAAgB,EAAE,CAAC;YAC5B,IAAI,CAAC;gBACJ,MAAM,EAAE,CAAC,KAAK,CACb,eAAe,SAAS,UAAU,GAAG,CAAC,KAAK,CAAC;eAClC,GAAG,CAAC,KAAK,CAAC,SAAS,SAAS;cAC7B,GAAG,CAAC,WAAW,CAAC;;OAEvB,EACF,CAAC,SAAS,CAAC,CACX,CAAC;gBACF,MAAM,CAAC,EAAE,GAAG,EAAE,CAAC,GAAG,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,yBAAyB,CAAC,CAE1D,CAAC;gBACH,MAAM,EAAE,CAAC,iBAAiB,EAAE,CAAC;gBAC7B,OAAO,MAAM,CAAC,GAAG,CAAC,CAAC;YACpB,CAAC;YAAC,OAAO,CAAC,EAAE,CAAC;gBACZ,MAAM,EAAE,CAAC,mBAAmB,EAAE,CAAC;gBAC/B,MAAM,CAAC,CAAC;YACT,CAAC;oBAAS,CAAC;gBACV,MAAM,EAAE,CAAC,OAAO,EAAE,CAAC;YACpB,CAAC;QACF,CAAC;QAED,qBAAM,CAAC,IAAI,CAAC,uBAAuB,CAAC,CAAC;IACtC,CAAC;CACD,CAAA;AArHY,gEAA0B;qCAA1B,0BAA0B;IADtC,IAAA,YAAO,GAAE;qCAMe,oBAAU,EAAgB,qBAAY;GALlD,0BAA0B,CAqHtC"}

package/dist/modules/token-exchange/services/identity-resolution.service.d.ts

@@ -0,0 +1,5 @@
+import type { User } from '@n8n/db';
+import type { ExternalTokenClaims } from '../token-exchange.schemas';
+export declare class IdentityResolutionService {
+    resolve(_claims: ExternalTokenClaims): Promise<User>;
+}

package/dist/modules/token-exchange/services/identity-resolution.service.js

@@ -0,0 +1,21 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.IdentityResolutionService = void 0;
+const di_1 = require("@n8n/di");
+const n8n_workflow_1 = require("n8n-workflow");
+let IdentityResolutionService = class IdentityResolutionService {
+    async resolve(_claims) {
+        throw new n8n_workflow_1.UserError('Identity resolution is not yet implemented');
+    }
+};
+exports.IdentityResolutionService = IdentityResolutionService;
+exports.IdentityResolutionService = IdentityResolutionService = __decorate([
+    (0, di_1.Service)()
+], IdentityResolutionService);
+//# sourceMappingURL=identity-resolution.service.js.map

package/dist/modules/token-exchange/services/identity-resolution.service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"identity-resolution.service.js","sourceRoot":"","sources":["../../../../src/modules/token-exchange/services/identity-resolution.service.ts"],"names":[],"mappings":";;;;;;;;;AACA,gCAAkC;AAElC,+CAAyC;AAWlC,IAAM,yBAAyB,GAA/B,MAAM,yBAAyB;IAIrC,KAAK,CAAC,OAAO,CAAC,OAA4B;QACzC,MAAM,IAAI,wBAAS,CAAC,4CAA4C,CAAC,CAAC;IACnE,CAAC;CACD,CAAA;AAPY,8DAAyB;oCAAzB,yBAAyB;IADrC,IAAA,YAAO,GAAE;GACG,yBAAyB,CAOrC"}

package/dist/modules/token-exchange/services/jti-cleanup.service.d.ts

@@ -0,0 +1,18 @@
+import { Logger } from '@n8n/backend-common';
+import { InstanceSettings } from 'n8n-core';
+import { TokenExchangeJtiRepository } from '../database/repositories/token-exchange-jti.repository';
+import { TokenExchangeConfig } from '../token-exchange.config';
+export declare class JtiCleanupService {
+    private readonly config;
+    private readonly jtiRepository;
+    private readonly instanceSettings;
+    private cleanupInterval;
+    private isShuttingDown;
+    private readonly logger;
+    constructor(logger: Logger, config: TokenExchangeConfig, jtiRepository: TokenExchangeJtiRepository, instanceSettings: InstanceSettings);
+    init(): void;
+    startCleanup(): void;
+    stopCleanup(): void;
+    private cleanup;
+    shutdown(): void;
+}

package/dist/modules/token-exchange/services/jti-cleanup.service.js

@@ -0,0 +1,90 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.JtiCleanupService = void 0;
+const backend_common_1 = require("@n8n/backend-common");
+const constants_1 = require("@n8n/constants");
+const decorators_1 = require("@n8n/decorators");
+const di_1 = require("@n8n/di");
+const n8n_core_1 = require("n8n-core");
+const token_exchange_jti_repository_1 = require("../database/repositories/token-exchange-jti.repository");
+const token_exchange_config_1 = require("../token-exchange.config");
+let JtiCleanupService = class JtiCleanupService {
+    constructor(logger, config, jtiRepository, instanceSettings) {
+        this.config = config;
+        this.jtiRepository = jtiRepository;
+        this.instanceSettings = instanceSettings;
+        this.isShuttingDown = false;
+        this.logger = logger.scoped('token-exchange');
+    }
+    init() {
+        if (this.instanceSettings.isLeader)
+            this.startCleanup();
+    }
+    startCleanup() {
+        if (this.isShuttingDown)
+            return;
+        const intervalMs = this.config.jtiCleanupIntervalSeconds * constants_1.Time.seconds.toMilliseconds;
+        this.cleanupInterval = setInterval(async () => await this.cleanup(), intervalMs);
+        this.logger.debug(`JTI cleanup scheduled every ${this.config.jtiCleanupIntervalSeconds}s`);
+    }
+    stopCleanup() {
+        clearInterval(this.cleanupInterval);
+        this.cleanupInterval = undefined;
+    }
+    async cleanup() {
+        let totalDeleted = 0;
+        try {
+            let deleted;
+            do {
+                deleted = await this.jtiRepository.deleteExpiredBatch(this.config.jtiCleanupBatchSize);
+                totalDeleted += deleted;
+            } while (deleted >= this.config.jtiCleanupBatchSize);
+            if (totalDeleted > 0) {
+                this.logger.debug('Cleaned up expired JTIs', { count: totalDeleted });
+            }
+        }
+        catch (error) {
+            this.logger.error('Failed to clean up expired JTIs', { error });
+        }
+    }
+    shutdown() {
+        this.isShuttingDown = true;
+        this.stopCleanup();
+    }
+};
+exports.JtiCleanupService = JtiCleanupService;
+__decorate([
+    (0, decorators_1.OnLeaderTakeover)(),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", []),
+    __metadata("design:returntype", void 0)
+], JtiCleanupService.prototype, "startCleanup", null);
+__decorate([
+    (0, decorators_1.OnLeaderStepdown)(),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", []),
+    __metadata("design:returntype", void 0)
+], JtiCleanupService.prototype, "stopCleanup", null);
+__decorate([
+    (0, decorators_1.OnShutdown)(),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", []),
+    __metadata("design:returntype", void 0)
+], JtiCleanupService.prototype, "shutdown", null);
+exports.JtiCleanupService = JtiCleanupService = __decorate([
+    (0, di_1.Service)(),
+    __metadata("design:paramtypes", [backend_common_1.Logger,
+        token_exchange_config_1.TokenExchangeConfig,
+        token_exchange_jti_repository_1.TokenExchangeJtiRepository,
+        n8n_core_1.InstanceSettings])
+], JtiCleanupService);
+//# sourceMappingURL=jti-cleanup.service.js.map

package/dist/modules/token-exchange/services/jti-cleanup.service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"jti-cleanup.service.js","sourceRoot":"","sources":["../../../../src/modules/token-exchange/services/jti-cleanup.service.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,wDAA6C;AAC7C,8CAAsC;AACtC,gDAAiF;AACjF,gCAAkC;AAClC,uCAA4C;AAE5C,0GAAoG;AACpG,oEAA+D;AAGxD,IAAM,iBAAiB,GAAvB,MAAM,iBAAiB;IAO7B,YACC,MAAc,EACG,MAA2B,EAC3B,aAAyC,EACzC,gBAAkC;QAFlC,WAAM,GAAN,MAAM,CAAqB;QAC3B,kBAAa,GAAb,aAAa,CAA4B;QACzC,qBAAgB,GAAhB,gBAAgB,CAAkB;QAR5C,mBAAc,GAAG,KAAK,CAAC;QAU9B,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC;IAC/C,CAAC;IAED,IAAI;QACH,IAAI,IAAI,CAAC,gBAAgB,CAAC,QAAQ;YAAE,IAAI,CAAC,YAAY,EAAE,CAAC;IACzD,CAAC;IAGD,YAAY;QACX,IAAI,IAAI,CAAC,cAAc;YAAE,OAAO;QAEhC,MAAM,UAAU,GAAG,IAAI,CAAC,MAAM,CAAC,yBAAyB,GAAG,gBAAI,CAAC,OAAO,CAAC,cAAc,CAAC;QACvF,IAAI,CAAC,eAAe,GAAG,WAAW,CAAC,KAAK,IAAI,EAAE,CAAC,MAAM,IAAI,CAAC,OAAO,EAAE,EAAE,UAAU,CAAC,CAAC;QAEjF,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,+BAA+B,IAAI,CAAC,MAAM,CAAC,yBAAyB,GAAG,CAAC,CAAC;IAC5F,CAAC;IAGD,WAAW;QACV,aAAa,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;QACpC,IAAI,CAAC,eAAe,GAAG,SAAS,CAAC;IAClC,CAAC;IAEO,KAAK,CAAC,OAAO;QACpB,IAAI,YAAY,GAAG,CAAC,CAAC;QACrB,IAAI,CAAC;YACJ,IAAI,OAAe,CAAC;YACpB,GAAG,CAAC;gBACH,OAAO,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,kBAAkB,CAAC,IAAI,CAAC,MAAM,CAAC,mBAAmB,CAAC,CAAC;gBACvF,YAAY,IAAI,OAAO,CAAC;YACzB,CAAC,QAAQ,OAAO,IAAI,IAAI,CAAC,MAAM,CAAC,mBAAmB,EAAE;YAErD,IAAI,YAAY,GAAG,CAAC,EAAE,CAAC;gBACtB,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,yBAAyB,EAAE,EAAE,KAAK,EAAE,YAAY,EAAE,CAAC,CAAC;YACvE,CAAC;QACF,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,iCAAiC,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;QACjE,CAAC;IACF,CAAC;IAGD,QAAQ;QACP,IAAI,CAAC,cAAc,GAAG,IAAI,CAAC;QAC3B,IAAI,CAAC,WAAW,EAAE,CAAC;IACpB,CAAC;CACD,CAAA;AA1DY,8CAAiB;AAqB7B;IADC,IAAA,6BAAgB,GAAE;;;;qDAQlB;AAGD;IADC,IAAA,6BAAgB,GAAE;;;;oDAIlB;AAoBD;IADC,IAAA,uBAAU,GAAE;;;;iDAIZ;4BAzDW,iBAAiB;IAD7B,IAAA,YAAO,GAAE;qCASA,uBAAM;QACW,2CAAmB;QACZ,0DAA0B;QACvB,2BAAgB;GAXxC,iBAAiB,CA0D7B"}

package/dist/modules/token-exchange/services/jti-store.service.d.ts

@@ -0,0 +1,6 @@
+import { TokenExchangeJtiRepository } from '../database/repositories/token-exchange-jti.repository';
+export declare class JtiStoreService {
+    private readonly jtiRepository;
+    constructor(jtiRepository: TokenExchangeJtiRepository);
+    consume(jti: string, expiresAt: Date): Promise<boolean>;
+}