n8n 2.15.0 → 2.16.0

package/dist/modules/token-exchange/token-exchange.schemas.d.ts

@@ -0,0 +1,131 @@
+import type { Algorithm, Secret } from 'jsonwebtoken';
+import { z } from 'zod';
+export declare const TOKEN_EXCHANGE_GRANT_TYPE: "urn:ietf:params:oauth:grant-type:token-exchange";
+export declare const ExternalTokenClaimsSchema: z.ZodObject<{
+    sub: z.ZodString;
+    iss: z.ZodString;
+    aud: z.ZodUnion<[z.ZodString, z.ZodArray<z.ZodString, "many">]>;
+    iat: z.ZodNumber;
+    exp: z.ZodNumber;
+    jti: z.ZodString;
+    email: z.ZodOptional<z.ZodString>;
+    given_name: z.ZodOptional<z.ZodString>;
+    family_name: z.ZodOptional<z.ZodString>;
+    role: z.ZodOptional<z.ZodUnion<[z.ZodString, z.ZodArray<z.ZodString, "many">]>>;
+}, "strip", z.ZodTypeAny, {
+    sub: string;
+    exp: number;
+    iss: string;
+    aud: string | string[];
+    jti: string;
+    iat: number;
+    email?: string | undefined;
+    role?: string | string[] | undefined;
+    given_name?: string | undefined;
+    family_name?: string | undefined;
+}, {
+    sub: string;
+    exp: number;
+    iss: string;
+    aud: string | string[];
+    jti: string;
+    iat: number;
+    email?: string | undefined;
+    role?: string | string[] | undefined;
+    given_name?: string | undefined;
+    family_name?: string | undefined;
+}>;
+export type ExternalTokenClaims = z.infer<typeof ExternalTokenClaimsSchema>;
+export declare const TrustedKeySourceSchema: z.ZodDiscriminatedUnion<"type", [z.ZodObject<{
+    type: z.ZodLiteral<"static">;
+    kid: z.ZodString;
+    algorithms: z.ZodArray<z.ZodEnum<["RS256", "RS384", "RS512", "ES256", "ES384", "ES512", "PS256", "PS384", "PS512", "EdDSA"]>, "many">;
+    key: z.ZodString;
+    issuer: z.ZodString;
+    expectedAudience: z.ZodOptional<z.ZodString>;
+    allowedRoles: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+}, "strip", z.ZodTypeAny, {
+    key: string;
+    type: "static";
+    issuer: string;
+    kid: string;
+    algorithms: ("RS256" | "RS384" | "RS512" | "ES256" | "ES384" | "ES512" | "PS256" | "PS384" | "PS512" | "EdDSA")[];
+    expectedAudience?: string | undefined;
+    allowedRoles?: string[] | undefined;
+}, {
+    key: string;
+    type: "static";
+    issuer: string;
+    kid: string;
+    algorithms: ("RS256" | "RS384" | "RS512" | "ES256" | "ES384" | "ES512" | "PS256" | "PS384" | "PS512" | "EdDSA")[];
+    expectedAudience?: string | undefined;
+    allowedRoles?: string[] | undefined;
+}>, z.ZodObject<{
+    type: z.ZodLiteral<"jwks">;
+    url: z.ZodString;
+    issuer: z.ZodString;
+    expectedAudience: z.ZodOptional<z.ZodString>;
+    allowedRoles: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+    cacheTtlSeconds: z.ZodOptional<z.ZodNumber>;
+}, "strip", z.ZodTypeAny, {
+    url: string;
+    type: "jwks";
+    issuer: string;
+    expectedAudience?: string | undefined;
+    allowedRoles?: string[] | undefined;
+    cacheTtlSeconds?: number | undefined;
+}, {
+    url: string;
+    type: "jwks";
+    issuer: string;
+    expectedAudience?: string | undefined;
+    allowedRoles?: string[] | undefined;
+    cacheTtlSeconds?: number | undefined;
+}>]>;
+export type TrustedKeySource = z.infer<typeof TrustedKeySourceSchema>;
+export type StaticKeySource = Extract<TrustedKeySource, {
+    type: 'static';
+}>;
+export type JwksKeySource = Extract<TrustedKeySource, {
+    type: 'jwks';
+}>;
+export interface ResolvedTrustedKey {
+    kid: string;
+    algorithms: Algorithm[];
+    key: Secret;
+    issuer: string;
+    expectedAudience?: string;
+    allowedRoles?: string[];
+}
+export declare const TokenExchangeRequestSchema: z.ZodObject<{
+    grant_type: z.ZodLiteral<"urn:ietf:params:oauth:grant-type:token-exchange">;
+    subject_token: z.ZodString;
+    subject_token_type: z.ZodOptional<z.ZodString>;
+    actor_token: z.ZodOptional<z.ZodString>;
+    actor_token_type: z.ZodOptional<z.ZodString>;
+    requested_token_type: z.ZodOptional<z.ZodString>;
+    scope: z.ZodOptional<z.ZodString>;
+    audience: z.ZodOptional<z.ZodString>;
+    resource: z.ZodOptional<z.ZodString>;
+}, "strip", z.ZodTypeAny, {
+    grant_type: "urn:ietf:params:oauth:grant-type:token-exchange";
+    subject_token: string;
+    resource?: string | undefined;
+    audience?: string | undefined;
+    scope?: string | undefined;
+    subject_token_type?: string | undefined;
+    actor_token?: string | undefined;
+    actor_token_type?: string | undefined;
+    requested_token_type?: string | undefined;
+}, {
+    grant_type: "urn:ietf:params:oauth:grant-type:token-exchange";
+    subject_token: string;
+    resource?: string | undefined;
+    audience?: string | undefined;
+    scope?: string | undefined;
+    subject_token_type?: string | undefined;
+    actor_token?: string | undefined;
+    actor_token_type?: string | undefined;
+    requested_token_type?: string | undefined;
+}>;
+export type TokenExchangeRequest = z.infer<typeof TokenExchangeRequestSchema>;

package/dist/modules/token-exchange/token-exchange.schemas.js

@@ -0,0 +1,60 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.TokenExchangeRequestSchema = exports.TrustedKeySourceSchema = exports.ExternalTokenClaimsSchema = exports.TOKEN_EXCHANGE_GRANT_TYPE = void 0;
+const zod_1 = require("zod");
+exports.TOKEN_EXCHANGE_GRANT_TYPE = 'urn:ietf:params:oauth:grant-type:token-exchange';
+const JwtAlgorithmSchema = zod_1.z.enum([
+    'RS256',
+    'RS384',
+    'RS512',
+    'ES256',
+    'ES384',
+    'ES512',
+    'PS256',
+    'PS384',
+    'PS512',
+    'EdDSA',
+]);
+exports.ExternalTokenClaimsSchema = zod_1.z.object({
+    sub: zod_1.z.string().min(1),
+    iss: zod_1.z.string().url(),
+    aud: zod_1.z.union([zod_1.z.string(), zod_1.z.array(zod_1.z.string())]),
+    iat: zod_1.z.number().int(),
+    exp: zod_1.z.number().int(),
+    jti: zod_1.z.string().min(1),
+    email: zod_1.z.string().email().optional(),
+    given_name: zod_1.z.string().optional(),
+    family_name: zod_1.z.string().optional(),
+    role: zod_1.z.union([zod_1.z.string(), zod_1.z.array(zod_1.z.string())]).optional(),
+});
+exports.TrustedKeySourceSchema = zod_1.z.discriminatedUnion('type', [
+    zod_1.z.object({
+        type: zod_1.z.literal('static'),
+        kid: zod_1.z.string().min(1),
+        algorithms: zod_1.z.array(JwtAlgorithmSchema).min(1),
+        key: zod_1.z.string().min(1),
+        issuer: zod_1.z.string().min(1),
+        expectedAudience: zod_1.z.string().optional(),
+        allowedRoles: zod_1.z.array(zod_1.z.string()).optional(),
+    }),
+    zod_1.z.object({
+        type: zod_1.z.literal('jwks'),
+        url: zod_1.z.string().url(),
+        issuer: zod_1.z.string().min(1),
+        expectedAudience: zod_1.z.string().optional(),
+        allowedRoles: zod_1.z.array(zod_1.z.string()).optional(),
+        cacheTtlSeconds: zod_1.z.number().int().positive().optional(),
+    }),
+]);
+exports.TokenExchangeRequestSchema = zod_1.z.object({
+    grant_type: zod_1.z.literal(exports.TOKEN_EXCHANGE_GRANT_TYPE),
+    subject_token: zod_1.z.string().min(1),
+    subject_token_type: zod_1.z.string().optional(),
+    actor_token: zod_1.z.string().optional(),
+    actor_token_type: zod_1.z.string().optional(),
+    requested_token_type: zod_1.z.string().optional(),
+    scope: zod_1.z.string().optional(),
+    audience: zod_1.z.string().optional(),
+    resource: zod_1.z.string().optional(),
+});
+//# sourceMappingURL=token-exchange.schemas.js.map

package/dist/modules/token-exchange/token-exchange.schemas.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"token-exchange.schemas.js","sourceRoot":"","sources":["../../../src/modules/token-exchange/token-exchange.schemas.ts"],"names":[],"mappings":";;;AACA,6BAAwB;AAGX,QAAA,yBAAyB,GAAG,iDAA0D,CAAC;AAMpG,MAAM,kBAAkB,GAAG,OAAC,CAAC,IAAI,CAAC;IACjC,OAAO;IACP,OAAO;IACP,OAAO;IACP,OAAO;IACP,OAAO;IACP,OAAO;IACP,OAAO;IACP,OAAO;IACP,OAAO;IACP,OAAO;CACP,CAAC,CAAC;AAOU,QAAA,yBAAyB,GAAG,OAAC,CAAC,MAAM,CAAC;IACjD,GAAG,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACtB,GAAG,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE;IACrB,GAAG,EAAE,OAAC,CAAC,KAAK,CAAC,CAAC,OAAC,CAAC,MAAM,EAAE,EAAE,OAAC,CAAC,KAAK,CAAC,OAAC,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;IAC/C,GAAG,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE;IACrB,GAAG,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE;IACrB,GAAG,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACtB,KAAK,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,KAAK,EAAE,CAAC,QAAQ,EAAE;IACpC,UAAU,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACjC,WAAW,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAClC,IAAI,EAAE,OAAC,CAAC,KAAK,CAAC,CAAC,OAAC,CAAC,MAAM,EAAE,EAAE,OAAC,CAAC,KAAK,CAAC,OAAC,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;CAC3D,CAAC,CAAC;AAUU,QAAA,sBAAsB,GAAG,OAAC,CAAC,kBAAkB,CAAC,MAAM,EAAE;IAClE,OAAC,CAAC,MAAM,CAAC;QACR,IAAI,EAAE,OAAC,CAAC,OAAO,CAAC,QAAQ,CAAC;QACzB,GAAG,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;QACtB,UAAU,EAAE,OAAC,CAAC,KAAK,CAAC,kBAAkB,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;QAC9C,GAAG,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;QACtB,MAAM,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;QACzB,gBAAgB,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;QACvC,YAAY,EAAE,OAAC,CAAC,KAAK,CAAC,OAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;KAC5C,CAAC;IACF,OAAC,CAAC,MAAM,CAAC;QACR,IAAI,EAAE,OAAC,CAAC,OAAO,CAAC,MAAM,CAAC;QACvB,GAAG,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE;QACrB,MAAM,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;QACzB,gBAAgB,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;QACvC,YAAY,EAAE,OAAC,CAAC,KAAK,CAAC,OAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;QAC5C,eAAe,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;KACvD,CAAC;CACF,CAAC,CAAC;AAoCU,QAAA,0BAA0B,GAAG,OAAC,CAAC,MAAM,CAAC;IAClD,UAAU,EAAE,OAAC,CAAC,OAAO,CAAC,iCAAyB,CAAC;IAChD,aAAa,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAChC,kBAAkB,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACzC,WAAW,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAClC,gBAAgB,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACvC,oBAAoB,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC3C,KAAK,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC5B,QAAQ,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC/B,QAAQ,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CAC/B,CAAC,CAAC"}

package/dist/modules/token-exchange/token-exchange.service.d.ts

@@ -0,0 +1,9 @@
+import { type TokenExchangeRequest } from './token-exchange.schemas';
+import type { IssuedTokenResult } from './token-exchange.types';
+export declare class TokenExchangeService {
+    private static readonly ISSUER;
+    private readonly jwtService;
+    private readonly config;
+    exchange(request: TokenExchangeRequest): Promise<IssuedTokenResult>;
+    private decodeAndValidate;
+}

package/dist/modules/token-exchange/token-exchange.service.js

@@ -0,0 +1,66 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var TokenExchangeService_1;
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.TokenExchangeService = void 0;
+const di_1 = require("@n8n/di");
+const crypto_1 = require("crypto");
+const n8n_workflow_1 = require("n8n-workflow");
+const jwt_service_1 = require("../../services/jwt.service");
+const token_exchange_config_1 = require("./token-exchange.config");
+const token_exchange_schemas_1 = require("./token-exchange.schemas");
+let TokenExchangeService = TokenExchangeService_1 = class TokenExchangeService {
+    constructor() {
+        this.jwtService = di_1.Container.get(jwt_service_1.JwtService);
+        this.config = di_1.Container.get(token_exchange_config_1.TokenExchangeConfig);
+    }
+    async exchange(request) {
+        const subjectClaims = this.decodeAndValidate(request.subject_token);
+        const actorClaims = request.actor_token
+            ? this.decodeAndValidate(request.actor_token)
+            : undefined;
+        const now = Math.floor(Date.now() / 1000);
+        if (subjectClaims.exp <= now) {
+            throw new n8n_workflow_1.OperationalError('subject_token is expired');
+        }
+        if (actorClaims && actorClaims.exp <= now) {
+            throw new n8n_workflow_1.OperationalError('actor_token is expired');
+        }
+        const maxTtl = this.config.maxTokenTtl;
+        const exp = Math.min(subjectClaims.exp, actorClaims?.exp ?? Infinity, now + maxTtl);
+        const scopes = request.scope?.split(' ').filter(Boolean);
+        const payload = {
+            iss: TokenExchangeService_1.ISSUER,
+            sub: subjectClaims.sub,
+            ...(actorClaims && { act: { sub: actorClaims.sub } }),
+            ...(scopes?.length && { scope: scopes }),
+            ...(request.resource && { resource: request.resource }),
+            iat: now,
+            exp,
+            jti: (0, crypto_1.randomUUID)(),
+        };
+        const accessToken = this.jwtService.sign(payload);
+        return {
+            accessToken,
+            expiresIn: exp - now,
+            subject: subjectClaims.sub,
+            issuer: subjectClaims.iss,
+            actor: actorClaims?.sub,
+        };
+    }
+    decodeAndValidate(token) {
+        const decoded = this.jwtService.decode(token);
+        return token_exchange_schemas_1.ExternalTokenClaimsSchema.parse(decoded);
+    }
+};
+exports.TokenExchangeService = TokenExchangeService;
+TokenExchangeService.ISSUER = 'n8n';
+exports.TokenExchangeService = TokenExchangeService = TokenExchangeService_1 = __decorate([
+    (0, di_1.Service)()
+], TokenExchangeService);
+//# sourceMappingURL=token-exchange.service.js.map

package/dist/modules/token-exchange/token-exchange.service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"token-exchange.service.js","sourceRoot":"","sources":["../../../src/modules/token-exchange/token-exchange.service.ts"],"names":[],"mappings":";;;;;;;;;;AAAA,gCAA6C;AAC7C,mCAAoC;AACpC,+CAAgD;AAEhD,wDAAoD;AAEpD,mEAA8D;AAC9D,qEAIkC;AAI3B,IAAM,oBAAoB,4BAA1B,MAAM,oBAAoB;IAA1B;QAGW,eAAU,GAAG,cAAS,CAAC,GAAG,CAAC,wBAAU,CAAC,CAAC;QAEvC,WAAM,GAAG,cAAS,CAAC,GAAG,CAAC,2CAAmB,CAAC,CAAC;IAgD9D,CAAC;IA9CA,KAAK,CAAC,QAAQ,CAAC,OAA6B;QAC3C,MAAM,aAAa,GAAG,IAAI,CAAC,iBAAiB,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC;QACpE,MAAM,WAAW,GAAG,OAAO,CAAC,WAAW;YACtC,CAAC,CAAC,IAAI,CAAC,iBAAiB,CAAC,OAAO,CAAC,WAAW,CAAC;YAC7C,CAAC,CAAC,SAAS,CAAC;QAEb,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;QAE1C,IAAI,aAAa,CAAC,GAAG,IAAI,GAAG,EAAE,CAAC;YAC9B,MAAM,IAAI,+BAAgB,CAAC,0BAA0B,CAAC,CAAC;QACxD,CAAC;QACD,IAAI,WAAW,IAAI,WAAW,CAAC,GAAG,IAAI,GAAG,EAAE,CAAC;YAC3C,MAAM,IAAI,+BAAgB,CAAC,wBAAwB,CAAC,CAAC;QACtD,CAAC;QAED,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC;QACvC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,aAAa,CAAC,GAAG,EAAE,WAAW,EAAE,GAAG,IAAI,QAAQ,EAAE,GAAG,GAAG,MAAM,CAAC,CAAC;QAEpF,MAAM,MAAM,GAAG,OAAO,CAAC,KAAK,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QAEzD,MAAM,OAAO,GAAqB;YACjC,GAAG,EAAE,sBAAoB,CAAC,MAAM;YAChC,GAAG,EAAE,aAAa,CAAC,GAAG;YACtB,GAAG,CAAC,WAAW,IAAI,EAAE,GAAG,EAAE,EAAE,GAAG,EAAE,WAAW,CAAC,GAAG,EAAE,EAAE,CAAC;YACrD,GAAG,CAAC,MAAM,EAAE,MAAM,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC;YACxC,GAAG,CAAC,OAAO,CAAC,QAAQ,IAAI,EAAE,QAAQ,EAAE,OAAO,CAAC,QAAQ,EAAE,CAAC;YACvD,GAAG,EAAE,GAAG;YACR,GAAG;YACH,GAAG,EAAE,IAAA,mBAAU,GAAE;SACjB,CAAC;QAEF,MAAM,WAAW,GAAG,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAElD,OAAO;YACN,WAAW;YACX,SAAS,EAAE,GAAG,GAAG,GAAG;YACpB,OAAO,EAAE,aAAa,CAAC,GAAG;YAC1B,MAAM,EAAE,aAAa,CAAC,GAAG;YACzB,KAAK,EAAE,WAAW,EAAE,GAAG;SACvB,CAAC;IACH,CAAC;IAEO,iBAAiB,CAAC,KAAa;QACtC,MAAM,OAAO,GAAG,IAAI,CAAC,UAAU,CAAC,MAAM,CAAU,KAAK,CAAC,CAAC;QACvD,OAAO,kDAAyB,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IACjD,CAAC;;AApDW,oDAAoB;AACR,2BAAM,GAAG,KAAK,AAAR,CAAS;+BAD3B,oBAAoB;IADhC,IAAA,YAAO,GAAE;GACG,oBAAoB,CAqDhC"}

package/dist/modules/token-exchange/token-exchange.types.d.ts

@@ -0,0 +1,50 @@
+import type { TOKEN_EXCHANGE_GRANT_TYPE } from './token-exchange.schemas';
+export interface IssuedTokenResult {
+    accessToken: string;
+    expiresIn: number;
+    subject: string;
+    issuer: string;
+    actor?: string;
+}
+export interface IssuedJwtPayload {
+    iss: string;
+    sub: string;
+    act?: {
+        sub: string;
+    };
+    scope?: string[];
+    resource?: string;
+    iat: number;
+    exp: number;
+    jti: string;
+}
+export type TokenExchangeAuditEvent = {
+    event: 'token_exchange_success';
+    subject: string;
+    actor?: string;
+    scopes?: string;
+    resource?: string;
+    grantType: typeof TOKEN_EXCHANGE_GRANT_TYPE;
+    kid?: string;
+    issuer: string;
+    tokenId?: string;
+    clientIp: string;
+} | {
+    event: 'token_exchange_failure';
+    subject?: string;
+    failureReason: string;
+    grantType: string;
+    clientIp: string;
+} | {
+    event: 'embed_login';
+    subject: string;
+    issuer: string;
+    clientIp: string;
+};
+export interface TokenExchangeSuccessResponse {
+    access_token: string;
+    token_type: 'Bearer';
+    expires_in: number;
+    scope?: string;
+    issued_token_type: 'urn:ietf:params:oauth:token-type:access_token';
+}

package/dist/modules/token-exchange/token-exchange.types.js

@@ -0,0 +1,3 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+//# sourceMappingURL=token-exchange.types.js.map

package/dist/modules/token-exchange/token-exchange.types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"token-exchange.types.js","sourceRoot":"","sources":["../../../src/modules/token-exchange/token-exchange.types.ts"],"names":[],"mappings":""}

package/dist/public-api/index.js

@@ -47,6 +47,7 @@ const validator_1 = __importDefault(require("validator"));
 const license_1 = require("../license");
 const public_api_key_service_1 = require("../services/public-api-key.service");
 const url_service_1 = require("../services/url.service");
+const public_api_error_response_1 = require("./v1/public-api-error-response");
 function createLazySwaggerMiddleware(openApiSpecPath, publicApiEndpoint, version) {
     let cachedRouter;
     return async (req, res, next) => {
@@ -145,11 +146,10 @@ function createApiRouter(version, openApiSpecPath, handlersDirectory, publicApiE
         next(error);
     };
     apiController.use(`/${publicApiEndpoint}/${version}`, express_1.default.json(), jsonParseErrorHandler, createLazyValidatorMiddleware(openApiSpecPath, handlersDirectory, version));
-    apiController.use((error, _req, res, _next) => {
-        res.status(error.status || 400).json({
-            message: error.message,
-        });
-    });
+    const publicApiErrorHandler = (error, _req, res, _next) => {
+        (0, public_api_error_response_1.sendPublicApiErrorResponse)(res, error);
+    };
+    apiController.use(publicApiErrorHandler);
     return apiController;
 }
 const loadPublicApiVersions = async (publicApiEndpoint) => {

package/dist/public-api/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/public-api/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAgMA,oCAEC;AAlMD,wCAA2C;AAC3C,gCAAoC;AAEpC,sDAA8B;AAE9B,2DAA6B;AAC7B,gDAAwB;AAExB,0DAAkC;AAElC,uCAAoC;AACpC,8EAAwE;AACxE,wDAAoD;AAEpD,SAAS,2BAA2B,CACnC,eAAuB,EACvB,iBAAyB,EACzB,OAAe;IAEf,IAAI,YAAgC,CAAC;IAErC,OAAO,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE;QAC/B,IAAI,CAAC,YAAY,EAAE,CAAC;YACnB,MAAM,YAAY,GAAG,cAAS,CAAC,GAAG,CAAC,qBAAY,CAAC,CAAC;YACjD,MAAM,OAAO,GAAG,YAAY,CAAC,IAAI,CAAC;YAElC,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,GAAG,wDAAa,QAAQ,GAAC,CAAC;YACjD,MAAM,eAAe,GAAG,IAAI,CAAC,IAAI,CAAC,eAAe,CAAe,CAAC;YAGjE,eAAe,CAAC,MAAM,GAAG;gBACxB;oBACC,GAAG,EAAE,GAAG,cAAS,CAAC,GAAG,CAAC,wBAAU,CAAC,CAAC,kBAAkB,EAAE,IAAI,iBAAiB,IAAI,OAAO,GAAG;iBACzF;aACD,CAAC;YAEF,MAAM,EAAE,UAAU,EAAE,KAAK,EAAE,GAAG,wDAAa,oBAAoB,GAAC,CAAC;YACjE,MAAM,gBAAgB,GAAG,cAAI,CAAC,IAAI,CAAC,SAAS,EAAE,mBAAmB,CAAC,CAAC;YACnE,MAAM,eAAe,GAAG,MAAM,kBAAE,CAAC,QAAQ,CAAC,gBAAgB,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC,CAAC;YAEnF,YAAY,GAAG,iBAAO,CAAC,MAAM,EAAE,CAAC;YAChC,YAAY,CAAC,GAAG,CACf,UAAU,CAAC,eAAe,CAAC,EAC3B,KAAK,CAAC,eAAe,EAAE;gBACtB,SAAS,EAAE,eAAe;gBAC1B,eAAe,EAAE,mBAAmB;gBACpC,aAAa,EAAE,GAAG,OAAO,aAAa;aACtC,CAAC,CACF,CAAC;QACH,CAAC;QAED,KAAK,YAAY,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC;IACnC,CAAC,CAAC;AACH,CAAC;AAED,SAAS,6BAA6B,CACrC,eAAuB,EACvB,iBAAyB,EACzB,OAAe;IAEf,IAAI,YAAgC,CAAC;IACrC,IAAI,WAAwC,CAAC;IAE7C,OAAO,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE;QAC/B,IAAI,CAAC,YAAY,EAAE,CAAC;YACnB,WAAW,KAAK,CAAC,KAAK,IAAI,EAAE;gBAC3B,MAAM,EAAE,UAAU,EAAE,0BAA0B,EAAE,GAAG,wDAClD,2BAA2B,GAC3B,CAAC;gBACF,MAAM,MAAM,GAAG,iBAAO,CAAC,MAAM,EAAE,CAAC;gBAChC,MAAM,CAAC,GAAG,CACT,0BAA0B,CAAC;oBAC1B,OAAO,EAAE,eAAe;oBACxB,iBAAiB,EAAE,iBAAiB;oBACpC,gBAAgB,EAAE,IAAI;oBACtB,eAAe,EAAE,IAAI;oBACrB,OAAO,EAAE;wBACR,KAAK,EAAE;4BACN,IAAI,EAAE,QAAQ;4BACd,QAAQ,EAAE,CAAC,KAAa,EAAE,EAAE,CAAC,mBAAS,CAAC,OAAO,CAAC,KAAK,CAAC;yBACrD;wBACD,UAAU,EAAE;4BACX,IAAI,EAAE,QAAQ;4BACd,QAAQ,EAAE,CAAC,UAAkB,EAAE,EAAE,CAChC,mBAAS,CAAC,MAAM,CAAC,UAAU,CAAC,IAAI,mBAAS,CAAC,OAAO,CAAC,UAAU,CAAC;yBAC9D;wBACD,UAAU,EAAE;4BACX,QAAQ,EAAE,CAAC,IAAY,EAAE,EAAE;gCAC1B,IAAI,CAAC;oCACJ,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;oCACjB,OAAO,IAAI,CAAC;gCACb,CAAC;gCAAC,OAAO,CAAC,EAAE,CAAC;oCACZ,OAAO,KAAK,CAAC;gCACd,CAAC;4BACF,CAAC;yBACD;wBACD,MAAM,EAAE;4BACP,IAAI,EAAE,QAAQ;4BACd,QAAQ,EAAE,CAAC,EAAU,EAAE,EAAE;gCACxB,OAAO,mBAAmB,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;4BACrC,CAAC;yBACD;qBACD;oBACD,gBAAgB,EAAE;wBACjB,QAAQ,EAAE;4BACT,UAAU,EAAE,cAAS,CAAC,GAAG,CAAC,4CAAmB,CAAC,CAAC,iBAAiB,CAAC,OAAO,CAAC;yBACzE;qBACD;iBACD,CAAC,CACF,CAAC;gBACF,OAAO,MAAM,CAAC;YACf,CAAC,CAAC,EAAE,CAAC;YACL,YAAY,GAAG,MAAM,WAAW,CAAC;QAClC,CAAC;QAED,KAAK,YAAY,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC;IACnC,CAAC,CAAC;AACH,CAAC;AAED,SAAS,eAAe,CACvB,OAAe,EACf,eAAuB,EACvB,iBAAyB,EACzB,iBAAyB;IAEzB,MAAM,YAAY,GAAG,cAAS,CAAC,GAAG,CAAC,qBAAY,CAAC,CAAC;IACjD,MAAM,aAAa,GAAG,iBAAO,CAAC,MAAM,EAAE,CAAC;IAEvC,IAAI,CAAC,YAAY,CAAC,SAAS,CAAC,iBAAiB,EAAE,CAAC;QAC/C,aAAa,CAAC,GAAG,CAChB,IAAI,iBAAiB,IAAI,OAAO,OAAO,EACvC,2BAA2B,CAAC,eAAe,EAAE,iBAAiB,EAAE,OAAO,CAAC,CACxE,CAAC;IACH,CAAC;IAED,aAAa,CAAC,GAAG,CAAC,IAAI,iBAAiB,IAAI,OAAO,cAAc,EAAE,CAAC,CAAC,EAAE,GAAG,EAAE,EAAE;QAC5E,GAAG,CAAC,QAAQ,CAAC,eAAe,CAAC,CAAC;IAC/B,CAAC,CAAC,CAAC;IAGH,MAAM,qBAAqB,GAAwB,CAAC,KAAK,EAAE,IAAI,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE;QAC7E,IAAI,KAAK,YAAY,WAAW,IAAI,MAAM,IAAI,KAAK,EAAE,CAAC;YACrD,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;gBACpB,OAAO,EAAE,8BAA8B;aACvC,CAAC,CAAC;YACH,OAAO;QACR,CAAC;QACD,IAAI,CAAC,KAAK,CAAC,CAAC;IACb,CAAC,CAAC;IAEF,aAAa,CAAC,GAAG,CAChB,IAAI,iBAAiB,IAAI,OAAO,EAAE,EAClC,iBAAO,CAAC,IAAI,EAAE,EACd,qBAAqB,EACrB,6BAA6B,CAAC,eAAe,EAAE,iBAAiB,EAAE,OAAO,CAAC,CAC1E,CAAC;IAEF,aAAa,CAAC,GAAG,CAChB,CACC,KAAgB,EAChB,IAAqB,EACrB,GAAqB,EACrB,KAA2B,EAC1B,EAAE;QACH,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC;YACpC,OAAO,EAAE,KAAK,CAAC,OAAO;SACtB,CAAC,CAAC;IACJ,CAAC,CACD,CAAC;IAEF,OAAO,aAAa,CAAC;AACtB,CAAC;AAEM,MAAM,qBAAqB,GAAG,KAAK,EACzC,iBAAyB,EAC6C,EAAE;IACxE,MAAM,OAAO,GAAG,MAAM,kBAAE,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IAC5C,MAAM,QAAQ,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC,UAAU,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC;IAE5E,MAAM,UAAU,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE;QAC3C,MAAM,WAAW,GAAG,cAAI,CAAC,IAAI,CAAC,SAAS,EAAE,OAAO,EAAE,aAAa,CAAC,CAAC;QACjE,OAAO,eAAe,CAAC,OAAO,EAAE,WAAW,EAAE,SAAS,EAAE,iBAAiB,CAAC,CAAC;IAC5E,CAAC,CAAC,CAAC;IAEH,MAAM,OAAO,GAAG,QAAQ,CAAC,GAAG,EAAE,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC;IAE1C,OAAO;QACN,UAAU;QACV,gBAAgB,EAAE,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC;KAC/C,CAAC;AACH,CAAC,CAAC;AAjBW,QAAA,qBAAqB,yBAiBhC;AAEF,SAAgB,YAAY;IAC3B,OAAO,CAAC,cAAS,CAAC,GAAG,CAAC,qBAAY,CAAC,CAAC,SAAS,CAAC,QAAQ,IAAI,CAAC,cAAS,CAAC,GAAG,CAAC,iBAAO,CAAC,CAAC,aAAa,EAAE,CAAC;AACnG,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/public-api/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AA+LA,oCAEC;AAjMD,wCAA2C;AAC3C,gCAAoC;AAEpC,sDAA8B;AAC9B,2DAA6B;AAC7B,gDAAwB;AAExB,0DAAkC;AAElC,uCAAoC;AACpC,8EAAwE;AACxE,wDAAoD;AAEpD,8EAA4E;AAE5E,SAAS,2BAA2B,CACnC,eAAuB,EACvB,iBAAyB,EACzB,OAAe;IAEf,IAAI,YAAgC,CAAC;IAErC,OAAO,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE;QAC/B,IAAI,CAAC,YAAY,EAAE,CAAC;YACnB,MAAM,YAAY,GAAG,cAAS,CAAC,GAAG,CAAC,qBAAY,CAAC,CAAC;YACjD,MAAM,OAAO,GAAG,YAAY,CAAC,IAAI,CAAC;YAElC,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,GAAG,wDAAa,QAAQ,GAAC,CAAC;YACjD,MAAM,eAAe,GAAG,IAAI,CAAC,IAAI,CAAC,eAAe,CAAe,CAAC;YAGjE,eAAe,CAAC,MAAM,GAAG;gBACxB;oBACC,GAAG,EAAE,GAAG,cAAS,CAAC,GAAG,CAAC,wBAAU,CAAC,CAAC,kBAAkB,EAAE,IAAI,iBAAiB,IAAI,OAAO,GAAG;iBACzF;aACD,CAAC;YAEF,MAAM,EAAE,UAAU,EAAE,KAAK,EAAE,GAAG,wDAAa,oBAAoB,GAAC,CAAC;YACjE,MAAM,gBAAgB,GAAG,cAAI,CAAC,IAAI,CAAC,SAAS,EAAE,mBAAmB,CAAC,CAAC;YACnE,MAAM,eAAe,GAAG,MAAM,kBAAE,CAAC,QAAQ,CAAC,gBAAgB,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC,CAAC;YAEnF,YAAY,GAAG,iBAAO,CAAC,MAAM,EAAE,CAAC;YAChC,YAAY,CAAC,GAAG,CACf,UAAU,CAAC,eAAe,CAAC,EAC3B,KAAK,CAAC,eAAe,EAAE;gBACtB,SAAS,EAAE,eAAe;gBAC1B,eAAe,EAAE,mBAAmB;gBACpC,aAAa,EAAE,GAAG,OAAO,aAAa;aACtC,CAAC,CACF,CAAC;QACH,CAAC;QAED,KAAK,YAAY,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC;IACnC,CAAC,CAAC;AACH,CAAC;AAED,SAAS,6BAA6B,CACrC,eAAuB,EACvB,iBAAyB,EACzB,OAAe;IAEf,IAAI,YAAgC,CAAC;IACrC,IAAI,WAAwC,CAAC;IAE7C,OAAO,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE;QAC/B,IAAI,CAAC,YAAY,EAAE,CAAC;YACnB,WAAW,KAAK,CAAC,KAAK,IAAI,EAAE;gBAC3B,MAAM,EAAE,UAAU,EAAE,0BAA0B,EAAE,GAAG,wDAClD,2BAA2B,GAC3B,CAAC;gBACF,MAAM,MAAM,GAAG,iBAAO,CAAC,MAAM,EAAE,CAAC;gBAChC,MAAM,CAAC,GAAG,CACT,0BAA0B,CAAC;oBAC1B,OAAO,EAAE,eAAe;oBACxB,iBAAiB,EAAE,iBAAiB;oBACpC,gBAAgB,EAAE,IAAI;oBACtB,eAAe,EAAE,IAAI;oBACrB,OAAO,EAAE;wBACR,KAAK,EAAE;4BACN,IAAI,EAAE,QAAQ;4BACd,QAAQ,EAAE,CAAC,KAAa,EAAE,EAAE,CAAC,mBAAS,CAAC,OAAO,CAAC,KAAK,CAAC;yBACrD;wBACD,UAAU,EAAE;4BACX,IAAI,EAAE,QAAQ;4BACd,QAAQ,EAAE,CAAC,UAAkB,EAAE,EAAE,CAChC,mBAAS,CAAC,MAAM,CAAC,UAAU,CAAC,IAAI,mBAAS,CAAC,OAAO,CAAC,UAAU,CAAC;yBAC9D;wBACD,UAAU,EAAE;4BACX,QAAQ,EAAE,CAAC,IAAY,EAAE,EAAE;gCAC1B,IAAI,CAAC;oCACJ,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;oCACjB,OAAO,IAAI,CAAC;gCACb,CAAC;gCAAC,OAAO,CAAC,EAAE,CAAC;oCACZ,OAAO,KAAK,CAAC;gCACd,CAAC;4BACF,CAAC;yBACD;wBACD,MAAM,EAAE;4BACP,IAAI,EAAE,QAAQ;4BACd,QAAQ,EAAE,CAAC,EAAU,EAAE,EAAE;gCACxB,OAAO,mBAAmB,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;4BACrC,CAAC;yBACD;qBACD;oBACD,gBAAgB,EAAE;wBACjB,QAAQ,EAAE;4BACT,UAAU,EAAE,cAAS,CAAC,GAAG,CAAC,4CAAmB,CAAC,CAAC,iBAAiB,CAAC,OAAO,CAAC;yBACzE;qBACD;iBACD,CAAC,CACF,CAAC;gBACF,OAAO,MAAM,CAAC;YACf,CAAC,CAAC,EAAE,CAAC;YACL,YAAY,GAAG,MAAM,WAAW,CAAC;QAClC,CAAC;QAED,KAAK,YAAY,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC;IACnC,CAAC,CAAC;AACH,CAAC;AAED,SAAS,eAAe,CACvB,OAAe,EACf,eAAuB,EACvB,iBAAyB,EACzB,iBAAyB;IAEzB,MAAM,YAAY,GAAG,cAAS,CAAC,GAAG,CAAC,qBAAY,CAAC,CAAC;IACjD,MAAM,aAAa,GAAG,iBAAO,CAAC,MAAM,EAAE,CAAC;IAEvC,IAAI,CAAC,YAAY,CAAC,SAAS,CAAC,iBAAiB,EAAE,CAAC;QAC/C,aAAa,CAAC,GAAG,CAChB,IAAI,iBAAiB,IAAI,OAAO,OAAO,EACvC,2BAA2B,CAAC,eAAe,EAAE,iBAAiB,EAAE,OAAO,CAAC,CACxE,CAAC;IACH,CAAC;IAED,aAAa,CAAC,GAAG,CAAC,IAAI,iBAAiB,IAAI,OAAO,cAAc,EAAE,CAAC,CAAC,EAAE,GAAG,EAAE,EAAE;QAC5E,GAAG,CAAC,QAAQ,CAAC,eAAe,CAAC,CAAC;IAC/B,CAAC,CAAC,CAAC;IAGH,MAAM,qBAAqB,GAAwB,CAAC,KAAK,EAAE,IAAI,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE;QAC7E,IAAI,KAAK,YAAY,WAAW,IAAI,MAAM,IAAI,KAAK,EAAE,CAAC;YACrD,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;gBACpB,OAAO,EAAE,8BAA8B;aACvC,CAAC,CAAC;YACH,OAAO;QACR,CAAC;QACD,IAAI,CAAC,KAAK,CAAC,CAAC;IACb,CAAC,CAAC;IAEF,aAAa,CAAC,GAAG,CAChB,IAAI,iBAAiB,IAAI,OAAO,EAAE,EAClC,iBAAO,CAAC,IAAI,EAAE,EACd,qBAAqB,EACrB,6BAA6B,CAAC,eAAe,EAAE,iBAAiB,EAAE,OAAO,CAAC,CAC1E,CAAC;IAEF,MAAM,qBAAqB,GAAwB,CAClD,KAAY,EACZ,IAAqB,EACrB,GAAqB,EACrB,KAA2B,EAC1B,EAAE;QACH,IAAA,sDAA0B,EAAC,GAAG,EAAE,KAAK,CAAC,CAAC;IACxC,CAAC,CAAC;IAEF,aAAa,CAAC,GAAG,CAAC,qBAAqB,CAAC,CAAC;IAEzC,OAAO,aAAa,CAAC;AACtB,CAAC;AAEM,MAAM,qBAAqB,GAAG,KAAK,EACzC,iBAAyB,EAC6C,EAAE;IACxE,MAAM,OAAO,GAAG,MAAM,kBAAE,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IAC5C,MAAM,QAAQ,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC,UAAU,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC;IAE5E,MAAM,UAAU,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE;QAC3C,MAAM,WAAW,GAAG,cAAI,CAAC,IAAI,CAAC,SAAS,EAAE,OAAO,EAAE,aAAa,CAAC,CAAC;QACjE,OAAO,eAAe,CAAC,OAAO,EAAE,WAAW,EAAE,SAAS,EAAE,iBAAiB,CAAC,CAAC;IAC5E,CAAC,CAAC,CAAC;IAEH,MAAM,OAAO,GAAG,QAAQ,CAAC,GAAG,EAAE,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC;IAE1C,OAAO;QACN,UAAU;QACV,gBAAgB,EAAE,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC;KAC/C,CAAC;AACH,CAAC,CAAC;AAjBW,QAAA,qBAAqB,yBAiBhC;AAEF,SAAgB,YAAY;IAC3B,OAAO,CAAC,cAAS,CAAC,GAAG,CAAC,qBAAY,CAAC,CAAC,SAAS,CAAC,QAAQ,IAAI,CAAC,cAAS,CAAC,GAAG,CAAC,iBAAO,CAAC,CAAC,aAAa,EAAE,CAAC;AACnG,CAAC"}

package/dist/public-api/types.d.ts

@@ -16,6 +16,7 @@ export declare namespace ExecutionRequest {
         cursor?: string;
         offset?: number;
         includeData?: boolean;
+        redactExecutionData?: boolean;
         workflowId?: string;
         lastId?: string;
         projectId?: string;
@@ -24,6 +25,7 @@ export declare namespace ExecutionRequest {
         id: string;
     }, {}, {}, {
         includeData?: boolean;
+        redactExecutionData?: boolean;
     }>;
     type Delete = Get;
     type Retry = AuthenticatedRequest<{
@@ -276,6 +278,21 @@ export declare namespace DataTableRequest {
         dryRun?: string | boolean;
     }>;
 }
+export declare namespace CommunityPackageRequest {
+    type Install = AuthenticatedRequest<{}, {}, {
+        name: string;
+        version?: string;
+    }>;
+    type List = AuthenticatedRequest;
+    type Update = AuthenticatedRequest<{
+        name: string;
+    }, {}, {
+        version?: string;
+    }>;
+    type Uninstall = AuthenticatedRequest<{
+        name: string;
+    }>;
+}
 export declare namespace AuditRequest {
     type Generate = AuthenticatedRequest<{}, {}, {
         additionalOptions?: {

package/dist/public-api/v1/handlers/community-packages/community-packages.handler.d.ts

@@ -0,0 +1,18 @@
+import type { AuthenticatedRequest } from '@n8n/db';
+import type express from 'express';
+declare const _default: {
+    installPackage: (import("../../shared/middlewares/global.middleware").ScopeTaggedMiddleware | ((req: AuthenticatedRequest<Record<string, never>, unknown, {
+        name: string;
+        version?: string;
+    }>, res: express.Response) => Promise<express.Response>))[];
+    getInstalledPackages: (import("../../shared/middlewares/global.middleware").ScopeTaggedMiddleware | ((_req: AuthenticatedRequest<Record<string, never>>, res: express.Response) => Promise<express.Response>))[];
+    updatePackage: (import("../../shared/middlewares/global.middleware").ScopeTaggedMiddleware | ((req: AuthenticatedRequest<{
+        name: string;
+    }, Record<string, never>, {
+        version?: string;
+    }>, res: express.Response) => Promise<express.Response>))[];
+    uninstallPackage: (import("../../shared/middlewares/global.middleware").ScopeTaggedMiddleware | ((req: AuthenticatedRequest<{
+        name: string;
+    }>, res: express.Response) => Promise<express.Response>))[];
+};
+export = _default;

package/dist/public-api/v1/handlers/community-packages/community-packages.handler.js

@@ -0,0 +1,71 @@
+"use strict";
+const di_1 = require("@n8n/di");
+const response_error_1 = require("../../../../errors/response-errors/abstract/response.error");
+const community_packages_lifecycle_service_1 = require("../../../../modules/community-packages/community-packages.lifecycle.service");
+const community_packages_mapper_1 = require("./community-packages.mapper");
+const global_middleware_1 = require("../../shared/middlewares/global.middleware");
+function sendResponseError(res, error) {
+    return res.status(error.httpStatusCode).json({ message: error.message });
+}
+module.exports = {
+    installPackage: [
+        (0, global_middleware_1.apiKeyHasScope)('communityPackage:install'),
+        async (req, res) => {
+            const lifecycle = di_1.Container.get(community_packages_lifecycle_service_1.CommunityPackagesLifecycleService);
+            try {
+                const installedPackage = await lifecycle.install({ name: req.body.name, version: req.body.version, verify: false }, req.user, 'publicApi');
+                return res.json((0, community_packages_mapper_1.mapToCommunityPackage)(installedPackage));
+            }
+            catch (error) {
+                if (error instanceof response_error_1.ResponseError) {
+                    return sendResponseError(res, error);
+                }
+                throw error;
+            }
+        },
+    ],
+    getInstalledPackages: [
+        (0, global_middleware_1.apiKeyHasScope)('communityPackage:list'),
+        async (_req, res) => {
+            const lifecycle = di_1.Container.get(community_packages_lifecycle_service_1.CommunityPackagesLifecycleService);
+            const packages = await lifecycle.listInstalledPackages();
+            return res.json((0, community_packages_mapper_1.mapToCommunityPackageList)(packages));
+        },
+    ],
+    updatePackage: [
+        (0, global_middleware_1.apiKeyHasScope)('communityPackage:update'),
+        async (req, res) => {
+            const lifecycle = di_1.Container.get(community_packages_lifecycle_service_1.CommunityPackagesLifecycleService);
+            try {
+                const updated = await lifecycle.update({
+                    name: req.params.name,
+                    version: req.body?.version,
+                }, req.user, 'notFound');
+                return res.json((0, community_packages_mapper_1.mapToCommunityPackage)(updated));
+            }
+            catch (error) {
+                if (error instanceof response_error_1.ResponseError) {
+                    return sendResponseError(res, error);
+                }
+                throw error;
+            }
+        },
+    ],
+    uninstallPackage: [
+        (0, global_middleware_1.apiKeyHasScope)('communityPackage:uninstall'),
+        async (req, res) => {
+            const lifecycle = di_1.Container.get(community_packages_lifecycle_service_1.CommunityPackagesLifecycleService);
+            try {
+                await lifecycle.uninstall(req.params.name, req.user, 'notFound');
+                return res.status(204).send();
+            }
+            catch (error) {
+                if (error instanceof response_error_1.ResponseError) {
+                    return sendResponseError(res, error);
+                }
+                throw error;
+            }
+        },
+    ],
+};
+//# sourceMappingURL=community-packages.handler.js.map

package/dist/public-api/v1/handlers/community-packages/community-packages.handler.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"community-packages.handler.js","sourceRoot":"","sources":["../../../../../src/public-api/v1/handlers/community-packages/community-packages.handler.ts"],"names":[],"mappings":";AACA,gCAAoC;AAGpC,qFAAiF;AACjF,4HAAsH;AAEtH,2EAA+F;AAC/F,kFAA4E;AAE5E,SAAS,iBAAiB,CAAC,GAAqB,EAAE,KAAoB;IACrE,OAAO,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;AAC1E,CAAC;AAED,iBAAS;IACR,cAAc,EAAE;QACf,IAAA,kCAAc,EAAC,0BAA0B,CAAC;QAC1C,KAAK,EACJ,GAA6F,EAC7F,GAAqB,EACO,EAAE;YAC9B,MAAM,SAAS,GAAG,cAAS,CAAC,GAAG,CAAC,wEAAiC,CAAC,CAAC;YAEnE,IAAI,CAAC;gBACJ,MAAM,gBAAgB,GAAG,MAAM,SAAS,CAAC,OAAO,CAC/C,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,OAAO,EAAE,GAAG,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,EACjE,GAAG,CAAC,IAAI,EACR,WAAW,CACX,CAAC;gBACF,OAAO,GAAG,CAAC,IAAI,CAAC,IAAA,iDAAqB,EAAC,gBAAgB,CAAC,CAAC,CAAC;YAC1D,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBAChB,IAAI,KAAK,YAAY,8BAAa,EAAE,CAAC;oBACpC,OAAO,iBAAiB,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;gBACtC,CAAC;gBACD,MAAM,KAAK,CAAC;YACb,CAAC;QACF,CAAC;KACD;IAED,oBAAoB,EAAE;QACrB,IAAA,kCAAc,EAAC,uBAAuB,CAAC;QACvC,KAAK,EACJ,IAAiD,EACjD,GAAqB,EACO,EAAE;YAC9B,MAAM,SAAS,GAAG,cAAS,CAAC,GAAG,CAAC,wEAAiC,CAAC,CAAC;YACnE,MAAM,QAAQ,GAAG,MAAM,SAAS,CAAC,qBAAqB,EAAE,CAAC;YACzD,OAAO,GAAG,CAAC,IAAI,CAAC,IAAA,qDAAyB,EAAC,QAAQ,CAAC,CAAC,CAAC;QACtD,CAAC;KACD;IAED,aAAa,EAAE;QACd,IAAA,kCAAc,EAAC,yBAAyB,CAAC;QACzC,KAAK,EACJ,GAAwF,EACxF,GAAqB,EACO,EAAE;YAC9B,MAAM,SAAS,GAAG,cAAS,CAAC,GAAG,CAAC,wEAAiC,CAAC,CAAC;YAEnE,IAAI,CAAC;gBACJ,MAAM,OAAO,GAAG,MAAM,SAAS,CAAC,MAAM,CACrC;oBACC,IAAI,EAAE,GAAG,CAAC,MAAM,CAAC,IAAI;oBACrB,OAAO,EAAE,GAAG,CAAC,IAAI,EAAE,OAAO;iBAC1B,EACD,GAAG,CAAC,IAAI,EACR,UAAU,CACV,CAAC;gBACF,OAAO,GAAG,CAAC,IAAI,CAAC,IAAA,iDAAqB,EAAC,OAAO,CAAC,CAAC,CAAC;YACjD,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBAChB,IAAI,KAAK,YAAY,8BAAa,EAAE,CAAC;oBACpC,OAAO,iBAAiB,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;gBACtC,CAAC;gBACD,MAAM,KAAK,CAAC;YACb,CAAC;QACF,CAAC;KACD;IAED,gBAAgB,EAAE;QACjB,IAAA,kCAAc,EAAC,4BAA4B,CAAC;QAC5C,KAAK,EACJ,GAA2C,EAC3C,GAAqB,EACO,EAAE;YAC9B,MAAM,SAAS,GAAG,cAAS,CAAC,GAAG,CAAC,wEAAiC,CAAC,CAAC;YAEnE,IAAI,CAAC;gBACJ,MAAM,SAAS,CAAC,SAAS,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;gBACjE,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;YAC/B,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBAChB,IAAI,KAAK,YAAY,8BAAa,EAAE,CAAC;oBACpC,OAAO,iBAAiB,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;gBACtC,CAAC;gBACD,MAAM,KAAK,CAAC;YACb,CAAC;QACF,CAAC;KACD;CACD,CAAC"}

package/dist/public-api/v1/handlers/community-packages/community-packages.mapper.d.ts

@@ -0,0 +1,27 @@
+import type { PublicInstalledPackage } from 'n8n-workflow';
+export declare function mapToCommunityPackage(pkg: PublicInstalledPackage): {
+    packageName: string;
+    installedVersion: string;
+    installedNodes: {
+        [x: string]: unknown;
+    }[];
+    createdAt: string;
+    updatedAt: string;
+    authorName?: string | undefined;
+    authorEmail?: string | undefined;
+    updateAvailable?: string | undefined;
+    failedLoading?: boolean | undefined;
+};
+export declare function mapToCommunityPackageList(packages: PublicInstalledPackage[]): {
+    packageName: string;
+    installedVersion: string;
+    installedNodes: {
+        [x: string]: unknown;
+    }[];
+    createdAt: string;
+    updatedAt: string;
+    authorName?: string | undefined;
+    authorEmail?: string | undefined;
+    updateAvailable?: string | undefined;
+    failedLoading?: boolean | undefined;
+}[];

package/dist/public-api/v1/handlers/community-packages/community-packages.mapper.js

@@ -0,0 +1,35 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.mapToCommunityPackage = mapToCommunityPackage;
+exports.mapToCommunityPackageList = mapToCommunityPackageList;
+const api_types_1 = require("@n8n/api-types");
+function toIsoString(value) {
+    return value instanceof Date ? value.toISOString() : new Date(value).toISOString();
+}
+function optionalString(value) {
+    return typeof value === 'string' ? value : undefined;
+}
+function optionalBoolean(value) {
+    return typeof value === 'boolean' ? value : undefined;
+}
+function stripInstalledNode(node) {
+    const { package: _omitPackage, ...rest } = node;
+    return rest;
+}
+function mapToCommunityPackage(pkg) {
+    return api_types_1.communityPackageResponseSchema.parse({
+        packageName: pkg.packageName,
+        installedVersion: pkg.installedVersion,
+        authorName: optionalString(pkg.authorName),
+        authorEmail: optionalString(pkg.authorEmail),
+        installedNodes: pkg.installedNodes.map(stripInstalledNode),
+        createdAt: toIsoString(pkg.createdAt),
+        updatedAt: toIsoString(pkg.updatedAt),
+        updateAvailable: optionalString(pkg.updateAvailable),
+        failedLoading: optionalBoolean(pkg.failedLoading),
+    });
+}
+function mapToCommunityPackageList(packages) {
+    return packages.map(mapToCommunityPackage);
+}
+//# sourceMappingURL=community-packages.mapper.js.map

package/dist/public-api/v1/handlers/community-packages/community-packages.mapper.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"community-packages.mapper.js","sourceRoot":"","sources":["../../../../../src/public-api/v1/handlers/community-packages/community-packages.mapper.ts"],"names":[],"mappings":";;AAqBA,sDAYC;AAED,8DAEC;AArCD,8CAAgE;AAGhE,SAAS,WAAW,CAAC,KAAoB;IACxC,OAAO,KAAK,YAAY,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC,WAAW,EAAE,CAAC;AACpF,CAAC;AAED,SAAS,cAAc,CAAC,KAAc;IACrC,OAAO,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;AACtD,CAAC;AAED,SAAS,eAAe,CAAC,KAAc;IACtC,OAAO,OAAO,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;AACvD,CAAC;AAGD,SAAS,kBAAkB,CAAC,IAAyB;IACpD,MAAM,EAAE,OAAO,EAAE,YAAY,EAAE,GAAG,IAAI,EAAE,GAAG,IAAI,CAAC;IAChD,OAAO,IAAI,CAAC;AACb,CAAC;AAED,SAAgB,qBAAqB,CAAC,GAA2B;IAChE,OAAO,0CAA8B,CAAC,KAAK,CAAC;QAC3C,WAAW,EAAE,GAAG,CAAC,WAAW;QAC5B,gBAAgB,EAAE,GAAG,CAAC,gBAAgB;QACtC,UAAU,EAAE,cAAc,CAAC,GAAG,CAAC,UAAU,CAAC;QAC1C,WAAW,EAAE,cAAc,CAAC,GAAG,CAAC,WAAW,CAAC;QAC5C,cAAc,EAAE,GAAG,CAAC,cAAc,CAAC,GAAG,CAAC,kBAAkB,CAAC;QAC1D,SAAS,EAAE,WAAW,CAAC,GAAG,CAAC,SAAS,CAAC;QACrC,SAAS,EAAE,WAAW,CAAC,GAAG,CAAC,SAAS,CAAC;QACrC,eAAe,EAAE,cAAc,CAAC,GAAG,CAAC,eAAe,CAAC;QACpD,aAAa,EAAE,eAAe,CAAC,GAAG,CAAC,aAAa,CAAC;KACjD,CAAC,CAAC;AACJ,CAAC;AAED,SAAgB,yBAAyB,CAAC,QAAkC;IAC3E,OAAO,QAAQ,CAAC,GAAG,CAAC,qBAAqB,CAAC,CAAC;AAC5C,CAAC"}