n8n 2.15.1 → 2.17.0

package/dist/modules/source-control.ee/types/source-control-context.js

@@ -3,14 +3,40 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.SourceControlContext = void 0;
 const permissions_1 = require("@n8n/permissions");
 class SourceControlContext {
-    constructor(userInternal) {
-        this.userInternal = userInternal;
-    }
-    get user() {
-        return this.userInternal;
+    constructor(user, authorizedProjects, accessibleWorkflowIds) {
+        this.user = user;
+        this.authorizedProjects = authorizedProjects;
+        this.accessibleWorkflowIds = accessibleWorkflowIds;
+        this.authorizedProjectsByTeamId = new Map();
+        this.authorizedProjectsByOwnerEmail = new Map();
+        this._hasAccessToAllProjects = (0, permissions_1.hasGlobalScope)(this.user, 'project:update');
+        this.authorizedProjectIds = new Set(this.authorizedProjects.map((project) => project.id));
+        for (const project of this.authorizedProjects) {
+            if (project.type === 'team') {
+                this.authorizedProjectsByTeamId.set(project.id, project);
+            }
+            if (project.type === 'personal') {
+                const ownerEmail = project.projectRelations?.find((relation) => relation.role.slug === permissions_1.PROJECT_OWNER_ROLE_SLUG)?.user?.email;
+                if (ownerEmail) {
+                    this.authorizedProjectsByOwnerEmail.set(ownerEmail, project);
+                }
+            }
+        }
     }
     hasAccessToAllProjects() {
-        return (0, permissions_1.hasGlobalScope)(this.userInternal, 'project:update');
+        return this._hasAccessToAllProjects;
+    }
+    canAccessProject(projectId) {
+        return this._hasAccessToAllProjects || this.authorizedProjectIds.has(projectId);
+    }
+    findAuthorizedProjectByOwner(owner) {
+        if (typeof owner === 'string') {
+            return this.authorizedProjectsByOwnerEmail.get(owner);
+        }
+        if (owner.type === 'personal') {
+            return this.authorizedProjectsByOwnerEmail.get(owner.personalEmail);
+        }
+        return this.authorizedProjectsByTeamId.get(owner.teamId);
     }
 }
 exports.SourceControlContext = SourceControlContext;

package/dist/modules/source-control.ee/types/source-control-context.js.map

@@ -1 +1 @@
-{"version":3,"file":"source-control-context.js","sourceRoot":"","sources":["../../../../src/modules/source-control.ee/types/source-control-context.ts"],"names":[],"mappings":";;;AACA,kDAAkD;AAElD,MAAa,oBAAoB;IAChC,YAA6B,YAAkB;QAAlB,iBAAY,GAAZ,YAAY,CAAM;IAAG,CAAC;IAEnD,IAAI,IAAI;QACP,OAAO,IAAI,CAAC,YAAY,CAAC;IAC1B,CAAC;IAED,sBAAsB;QACrB,OAAO,IAAA,4BAAc,EAAC,IAAI,CAAC,YAAY,EAAE,gBAAgB,CAAC,CAAC;IAC5D,CAAC;CACD;AAVD,oDAUC"}
+{"version":3,"file":"source-control-context.js","sourceRoot":"","sources":["../../../../src/modules/source-control.ee/types/source-control-context.ts"],"names":[],"mappings":";;;AACA,kDAA2E;AAI3E,MAAa,oBAAoB;IAShC,YACU,IAAU,EACV,kBAA6B,EAC7B,qBAA+B;QAF/B,SAAI,GAAJ,IAAI,CAAM;QACV,uBAAkB,GAAlB,kBAAkB,CAAW;QAC7B,0BAAqB,GAArB,qBAAqB,CAAU;QAPxB,+BAA0B,GAAG,IAAI,GAAG,EAAmB,CAAC;QAExD,mCAA8B,GAAG,IAAI,GAAG,EAAmB,CAAC;QAO5E,IAAI,CAAC,uBAAuB,GAAG,IAAA,4BAAc,EAAC,IAAI,CAAC,IAAI,EAAE,gBAAgB,CAAC,CAAC;QAC3E,IAAI,CAAC,oBAAoB,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,kBAAkB,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC;QAC1F,KAAK,MAAM,OAAO,IAAI,IAAI,CAAC,kBAAkB,EAAE,CAAC;YAC/C,IAAI,OAAO,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;gBAC7B,IAAI,CAAC,0BAA0B,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,EAAE,OAAO,CAAC,CAAC;YAC1D,CAAC;YACD,IAAI,OAAO,CAAC,IAAI,KAAK,UAAU,EAAE,CAAC;gBACjC,MAAM,UAAU,GAAG,OAAO,CAAC,gBAAgB,EAAE,IAAI,CAChD,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,KAAK,qCAAuB,CAC5D,EAAE,IAAI,EAAE,KAAK,CAAC;gBACf,IAAI,UAAU,EAAE,CAAC;oBAChB,IAAI,CAAC,8BAA8B,CAAC,GAAG,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;gBAC9D,CAAC;YACF,CAAC;QACF,CAAC;IACF,CAAC;IAED,sBAAsB;QACrB,OAAO,IAAI,CAAC,uBAAuB,CAAC;IACrC,CAAC;IAED,gBAAgB,CAAC,SAAiB;QACjC,OAAO,IAAI,CAAC,uBAAuB,IAAI,IAAI,CAAC,oBAAoB,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;IACjF,CAAC;IAED,4BAA4B,CAAC,KAA0B;QACtD,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;YAC/B,OAAO,IAAI,CAAC,8BAA8B,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QACvD,CAAC;QACD,IAAI,KAAK,CAAC,IAAI,KAAK,UAAU,EAAE,CAAC;YAC/B,OAAO,IAAI,CAAC,8BAA8B,CAAC,GAAG,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC;QACrE,CAAC;QACD,OAAO,IAAI,CAAC,0BAA0B,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IAC1D,CAAC;CACD;AAhDD,oDAgDC"}

package/dist/modules/sso-oidc/oidc.controller.ee.d.ts

@@ -18,6 +18,9 @@ export declare class OidcController {
         discoveryEndpoint: URL;
     }>;
     saveConfiguration(_req: AuthenticatedRequest, _res: Response, payload: OidcConfigDto): Promise<OidcConfigDto>;
+    testConnection(_req: AuthenticatedRequest, res: Response): Promise<{
+        url: string;
+    }>;
     redirectToAuthProvider(_req: Request, res: Response): Promise<void>;
-    callbackHandler(req: AuthlessRequest, res: Response): Promise<void>;
+    callbackHandler(req: AuthlessRequest, res: Response): Promise<void | Response<any, Record<string, any>>>;
 }

package/dist/modules/sso-oidc/oidc.controller.ee.js

@@ -24,6 +24,7 @@ const bad_request_error_1 = require("../../errors/response-errors/bad-request.er
 const url_service_1 = require("../../services/url.service");
 const constants_3 = require("./constants");
 const oidc_service_ee_1 = require("./oidc.service.ee");
+const oidc_test_result_1 = require("./views/oidc-test-result");
 let OidcController = class OidcController {
     constructor(oidcService, authService, urlService, globalConfig, logger) {
         this.oidcService = oidcService;
@@ -44,6 +45,23 @@ let OidcController = class OidcController {
         const config = this.oidcService.getRedactedConfig();
         return config;
     }
+    async testConnection(_req, res) {
+        const authorization = await this.oidcService.generateTestLoginUrl();
+        const { samesite, secure } = this.globalConfig.auth.cookie;
+        res.cookie(constants_2.OIDC_STATE_COOKIE_NAME, authorization.state, {
+            maxAge: 15 * constants_1.Time.minutes.toMilliseconds,
+            httpOnly: true,
+            sameSite: samesite,
+            secure,
+        });
+        res.cookie(constants_2.OIDC_NONCE_COOKIE_NAME, authorization.nonce, {
+            maxAge: 15 * constants_1.Time.minutes.toMilliseconds,
+            httpOnly: true,
+            sameSite: samesite,
+            secure,
+        });
+        return { url: authorization.url.toString() };
+    }
     async redirectToAuthProvider(_req, res) {
         const authorization = await this.oidcService.generateLoginUrl();
         const { samesite, secure } = this.globalConfig.auth.cookie;
@@ -74,11 +92,21 @@ let OidcController = class OidcController {
             this.logger.error('Nonce is missing');
             throw new bad_request_error_1.BadRequestError('Invalid nonce');
         }
-        const user = await this.oidcService.loginUser(callbackUrl, state, nonce);
+        const stateInfo = this.oidcService.verifyState(state);
         res.clearCookie(constants_2.OIDC_STATE_COOKIE_NAME);
         res.clearCookie(constants_2.OIDC_NONCE_COOKIE_NAME);
+        if (stateInfo.testMode) {
+            try {
+                const result = await this.oidcService.processTestCallback(callbackUrl, state, nonce);
+                return res.send((0, oidc_test_result_1.renderOidcTestSuccess)(result));
+            }
+            catch (error) {
+                return res.send((0, oidc_test_result_1.renderOidcTestFailure)(error));
+            }
+        }
+        const user = await this.oidcService.loginUser(callbackUrl, state, nonce);
         this.authService.issueCookie(res, user, true, req.browserId);
-        res.redirect('/');
+        return res.redirect('/');
     }
 };
 exports.OidcController = OidcController;
@@ -99,6 +127,14 @@ __decorate([
     __metadata("design:paramtypes", [Object, Object, api_types_1.OidcConfigDto]),
     __metadata("design:returntype", Promise)
 ], OidcController.prototype, "saveConfiguration", null);
+__decorate([
+    (0, decorators_1.Post)('/config/test'),
+    (0, decorators_1.Licensed)('feat:oidc'),
+    (0, decorators_1.GlobalScope)('oidc:manage'),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [Object, Object]),
+    __metadata("design:returntype", Promise)
+], OidcController.prototype, "testConnection", null);
 __decorate([
     (0, decorators_1.Get)('/login', { skipAuth: true }),
     (0, decorators_1.Licensed)('feat:oidc'),
@@ -107,7 +143,7 @@ __decorate([
     __metadata("design:returntype", Promise)
 ], OidcController.prototype, "redirectToAuthProvider", null);
 __decorate([
-    (0, decorators_1.Get)('/callback', { skipAuth: true }),
+    (0, decorators_1.Get)('/callback', { skipAuth: true, usesTemplates: true }),
     (0, decorators_1.Licensed)('feat:oidc'),
     __metadata("design:type", Function),
     __metadata("design:paramtypes", [Object, Object]),

package/dist/modules/sso-oidc/oidc.controller.ee.js.map

@@ -1 +1 @@
-{"version":3,"file":"oidc.controller.ee.js","sourceRoot":"","sources":["../../../src/modules/sso-oidc/oidc.controller.ee.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;AAAA,8CAA+C;AAC/C,wDAA6C;AAC7C,wCAA2C;AAC3C,8CAAsC;AAEtC,gDAAyF;AAGzF,sDAAkD;AAClD,2CAA6E;AAC7E,kFAA6E;AAE7E,wDAAoD;AAEpD,2CAAgE;AAChE,uDAAgD;AAGzC,IAAM,cAAc,GAApB,MAAM,cAAc;IAC1B,YACkB,WAAwB,EACxB,WAAwB,EACxB,UAAsB,EACtB,YAA0B,EAC1B,MAAc;QAJd,gBAAW,GAAX,WAAW,CAAa;QACxB,gBAAW,GAAX,WAAW,CAAa;QACxB,eAAU,GAAV,UAAU,CAAY;QACtB,iBAAY,GAAZ,YAAY,CAAc;QAC1B,WAAM,GAAN,MAAM,CAAQ;IAC7B,CAAC;IAKE,AAAN,KAAK,CAAC,qBAAqB,CAAC,IAA0B;QACrD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,UAAU,EAAE,CAAC;QACnD,IAAI,MAAM,CAAC,YAAY,EAAE,CAAC;YACzB,MAAM,CAAC,YAAY,GAAG,6CAAiC,CAAC;QACzD,CAAC;QACD,OAAO,MAAM,CAAC;IACf,CAAC;IAKK,AAAN,KAAK,CAAC,iBAAiB,CACtB,IAA0B,EAC1B,IAAc,EACR,OAAsB;QAE5B,MAAM,IAAI,CAAC,WAAW,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC;QAC7C,MAAM,MAAM,GAAG,IAAI,CAAC,WAAW,CAAC,iBAAiB,EAAE,CAAC;QACpD,OAAO,MAAM,CAAC;IACf,CAAC;IAIK,AAAN,KAAK,CAAC,sBAAsB,CAAC,IAAa,EAAE,GAAa;QACxD,MAAM,aAAa,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,gBAAgB,EAAE,CAAC;QAChE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,MAAM,CAAC;QAE3D,GAAG,CAAC,MAAM,CAAC,kCAAsB,EAAE,aAAa,CAAC,KAAK,EAAE;YACvD,MAAM,EAAE,EAAE,GAAG,gBAAI,CAAC,OAAO,CAAC,cAAc;YACxC,QAAQ,EAAE,IAAI;YACd,QAAQ,EAAE,QAAQ;YAClB,MAAM;SACN,CAAC,CAAC;QACH,GAAG,CAAC,MAAM,CAAC,kCAAsB,EAAE,aAAa,CAAC,KAAK,EAAE;YACvD,MAAM,EAAE,EAAE,GAAG,gBAAI,CAAC,OAAO,CAAC,cAAc;YACxC,QAAQ,EAAE,IAAI;YACd,QAAQ,EAAE,QAAQ;YAClB,MAAM;SACN,CAAC,CAAC;QACH,GAAG,CAAC,QAAQ,CAAC,aAAa,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC,CAAC;IAC5C,CAAC;IAIK,AAAN,KAAK,CAAC,eAAe,CAAC,GAAoB,EAAE,GAAa;QACxD,MAAM,OAAO,GAAG,GAAG,IAAI,CAAC,UAAU,CAAC,kBAAkB,EAAE,GAAG,GAAG,CAAC,WAAW,EAAE,CAAC;QAC5E,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,CAAC;QACrC,MAAM,KAAK,GAAG,GAAG,CAAC,OAAO,CAAC,kCAAsB,CAAC,CAAC;QAElD,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;YAC/B,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,kBAAkB,CAAC,CAAC;YACtC,MAAM,IAAI,mCAAe,CAAC,eAAe,CAAC,CAAC;QAC5C,CAAC;QAED,MAAM,KAAK,GAAG,GAAG,CAAC,OAAO,CAAC,kCAAsB,CAAC,CAAC;QAElD,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;YAC/B,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,kBAAkB,CAAC,CAAC;YACtC,MAAM,IAAI,mCAAe,CAAC,eAAe,CAAC,CAAC;QAC5C,CAAC;QAED,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,SAAS,CAAC,WAAW,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC;QAEzE,GAAG,CAAC,WAAW,CAAC,kCAAsB,CAAC,CAAC;QACxC,GAAG,CAAC,WAAW,CAAC,kCAAsB,CAAC,CAAC;QACxC,IAAI,CAAC,WAAW,CAAC,WAAW,CAAC,GAAG,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,CAAC,SAAS,CAAC,CAAC;QAE7D,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;IACnB,CAAC;CACD,CAAA;AAjFY,wCAAc;AAYpB;IAHL,IAAA,gBAAG,EAAC,SAAS,CAAC;IACd,IAAA,qBAAQ,EAAC,WAAW,CAAC;IACrB,IAAA,wBAAW,EAAC,aAAa,CAAC;;;;2DAO1B;AAKK;IAHL,IAAA,iBAAI,EAAC,SAAS,CAAC;IACf,IAAA,qBAAQ,EAAC,WAAW,CAAC;IACrB,IAAA,wBAAW,EAAC,aAAa,CAAC;IAIzB,WAAA,iBAAI,CAAA;;qDAAU,yBAAa;;uDAK5B;AAIK;IAFL,IAAA,gBAAG,EAAC,QAAQ,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;IACjC,IAAA,qBAAQ,EAAC,WAAW,CAAC;;;;4DAkBrB;AAIK;IAFL,IAAA,gBAAG,EAAC,WAAW,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;IACpC,IAAA,qBAAQ,EAAC,WAAW,CAAC;;;;qDAyBrB;yBAhFW,cAAc;IAD1B,IAAA,2BAAc,EAAC,WAAW,CAAC;qCAGI,6BAAW;QACX,0BAAW;QACZ,wBAAU;QACR,qBAAY;QAClB,uBAAM;GANpB,cAAc,CAiF1B"}
+{"version":3,"file":"oidc.controller.ee.js","sourceRoot":"","sources":["../../../src/modules/sso-oidc/oidc.controller.ee.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;AAAA,8CAA+C;AAC/C,wDAA6C;AAC7C,wCAA2C;AAC3C,8CAAsC;AAEtC,gDAAyF;AAGzF,sDAAkD;AAClD,2CAA6E;AAC7E,kFAA6E;AAE7E,wDAAoD;AAEpD,2CAAgE;AAChE,uDAAgD;AAChD,+DAAwF;AAGjF,IAAM,cAAc,GAApB,MAAM,cAAc;IAC1B,YACkB,WAAwB,EACxB,WAAwB,EACxB,UAAsB,EACtB,YAA0B,EAC1B,MAAc;QAJd,gBAAW,GAAX,WAAW,CAAa;QACxB,gBAAW,GAAX,WAAW,CAAa;QACxB,eAAU,GAAV,UAAU,CAAY;QACtB,iBAAY,GAAZ,YAAY,CAAc;QAC1B,WAAM,GAAN,MAAM,CAAQ;IAC7B,CAAC;IAKE,AAAN,KAAK,CAAC,qBAAqB,CAAC,IAA0B;QACrD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,UAAU,EAAE,CAAC;QACnD,IAAI,MAAM,CAAC,YAAY,EAAE,CAAC;YACzB,MAAM,CAAC,YAAY,GAAG,6CAAiC,CAAC;QACzD,CAAC;QACD,OAAO,MAAM,CAAC;IACf,CAAC;IAKK,AAAN,KAAK,CAAC,iBAAiB,CACtB,IAA0B,EAC1B,IAAc,EACR,OAAsB;QAE5B,MAAM,IAAI,CAAC,WAAW,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC;QAC7C,MAAM,MAAM,GAAG,IAAI,CAAC,WAAW,CAAC,iBAAiB,EAAE,CAAC;QACpD,OAAO,MAAM,CAAC;IACf,CAAC;IAKK,AAAN,KAAK,CAAC,cAAc,CAAC,IAA0B,EAAE,GAAa;QAC7D,MAAM,aAAa,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,oBAAoB,EAAE,CAAC;QACpE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,MAAM,CAAC;QAE3D,GAAG,CAAC,MAAM,CAAC,kCAAsB,EAAE,aAAa,CAAC,KAAK,EAAE;YACvD,MAAM,EAAE,EAAE,GAAG,gBAAI,CAAC,OAAO,CAAC,cAAc;YACxC,QAAQ,EAAE,IAAI;YACd,QAAQ,EAAE,QAAQ;YAClB,MAAM;SACN,CAAC,CAAC;QACH,GAAG,CAAC,MAAM,CAAC,kCAAsB,EAAE,aAAa,CAAC,KAAK,EAAE;YACvD,MAAM,EAAE,EAAE,GAAG,gBAAI,CAAC,OAAO,CAAC,cAAc;YACxC,QAAQ,EAAE,IAAI;YACd,QAAQ,EAAE,QAAQ;YAClB,MAAM;SACN,CAAC,CAAC;QAEH,OAAO,EAAE,GAAG,EAAE,aAAa,CAAC,GAAG,CAAC,QAAQ,EAAE,EAAE,CAAC;IAC9C,CAAC;IAIK,AAAN,KAAK,CAAC,sBAAsB,CAAC,IAAa,EAAE,GAAa;QACxD,MAAM,aAAa,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,gBAAgB,EAAE,CAAC;QAChE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,MAAM,CAAC;QAE3D,GAAG,CAAC,MAAM,CAAC,kCAAsB,EAAE,aAAa,CAAC,KAAK,EAAE;YACvD,MAAM,EAAE,EAAE,GAAG,gBAAI,CAAC,OAAO,CAAC,cAAc;YACxC,QAAQ,EAAE,IAAI;YACd,QAAQ,EAAE,QAAQ;YAClB,MAAM;SACN,CAAC,CAAC;QACH,GAAG,CAAC,MAAM,CAAC,kCAAsB,EAAE,aAAa,CAAC,KAAK,EAAE;YACvD,MAAM,EAAE,EAAE,GAAG,gBAAI,CAAC,OAAO,CAAC,cAAc;YACxC,QAAQ,EAAE,IAAI;YACd,QAAQ,EAAE,QAAQ;YAClB,MAAM;SACN,CAAC,CAAC;QACH,GAAG,CAAC,QAAQ,CAAC,aAAa,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC,CAAC;IAC5C,CAAC;IAIK,AAAN,KAAK,CAAC,eAAe,CAAC,GAAoB,EAAE,GAAa;QACxD,MAAM,OAAO,GAAG,GAAG,IAAI,CAAC,UAAU,CAAC,kBAAkB,EAAE,GAAG,GAAG,CAAC,WAAW,EAAE,CAAC;QAC5E,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,CAAC;QACrC,MAAM,KAAK,GAAG,GAAG,CAAC,OAAO,CAAC,kCAAsB,CAAC,CAAC;QAElD,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;YAC/B,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,kBAAkB,CAAC,CAAC;YACtC,MAAM,IAAI,mCAAe,CAAC,eAAe,CAAC,CAAC;QAC5C,CAAC;QAED,MAAM,KAAK,GAAG,GAAG,CAAC,OAAO,CAAC,kCAAsB,CAAC,CAAC;QAElD,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;YAC/B,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,kBAAkB,CAAC,CAAC;YACtC,MAAM,IAAI,mCAAe,CAAC,eAAe,CAAC,CAAC;QAC5C,CAAC;QAED,MAAM,SAAS,GAAG,IAAI,CAAC,WAAW,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC;QAEtD,GAAG,CAAC,WAAW,CAAC,kCAAsB,CAAC,CAAC;QACxC,GAAG,CAAC,WAAW,CAAC,kCAAsB,CAAC,CAAC;QAExC,IAAI,SAAS,CAAC,QAAQ,EAAE,CAAC;YACxB,IAAI,CAAC;gBACJ,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,mBAAmB,CAAC,WAAW,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC;gBACrF,OAAO,GAAG,CAAC,IAAI,CAAC,IAAA,wCAAqB,EAAC,MAAM,CAAC,CAAC,CAAC;YAChD,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBAChB,OAAO,GAAG,CAAC,IAAI,CAAC,IAAA,wCAAqB,EAAC,KAAK,CAAC,CAAC,CAAC;YAC/C,CAAC;QACF,CAAC;QAED,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,SAAS,CAAC,WAAW,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC;QAEzE,IAAI,CAAC,WAAW,CAAC,WAAW,CAAC,GAAG,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,CAAC,SAAS,CAAC,CAAC;QAE7D,OAAO,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;IAC1B,CAAC;CACD,CAAA;AApHY,wCAAc;AAYpB;IAHL,IAAA,gBAAG,EAAC,SAAS,CAAC;IACd,IAAA,qBAAQ,EAAC,WAAW,CAAC;IACrB,IAAA,wBAAW,EAAC,aAAa,CAAC;;;;2DAO1B;AAKK;IAHL,IAAA,iBAAI,EAAC,SAAS,CAAC;IACf,IAAA,qBAAQ,EAAC,WAAW,CAAC;IACrB,IAAA,wBAAW,EAAC,aAAa,CAAC;IAIzB,WAAA,iBAAI,CAAA;;qDAAU,yBAAa;;uDAK5B;AAKK;IAHL,IAAA,iBAAI,EAAC,cAAc,CAAC;IACpB,IAAA,qBAAQ,EAAC,WAAW,CAAC;IACrB,IAAA,wBAAW,EAAC,aAAa,CAAC;;;;oDAmB1B;AAIK;IAFL,IAAA,gBAAG,EAAC,QAAQ,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;IACjC,IAAA,qBAAQ,EAAC,WAAW,CAAC;;;;4DAkBrB;AAIK;IAFL,IAAA,gBAAG,EAAC,WAAW,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC;IACzD,IAAA,qBAAQ,EAAC,WAAW,CAAC;;;;qDAqCrB;yBAnHW,cAAc;IAD1B,IAAA,2BAAc,EAAC,WAAW,CAAC;qCAGI,6BAAW;QACX,0BAAW;QACZ,wBAAU;QACR,qBAAY;QAClB,uBAAM;GANpB,cAAc,CAoH1B"}

package/dist/modules/sso-oidc/oidc.service.ee.d.ts

@@ -27,11 +27,14 @@ export declare class OidcService {
     private loadOpenIdClient;
     getCallbackUrl(): string;
     getRedactedConfig(): OidcConfigDto;
-    generateState(): {
+    generateState(testMode?: boolean): {
         signed: string;
         plaintext: string;
     };
-    verifyState(signedState: string): string;
+    verifyState(signedState: string): {
+        state: string;
+        testMode?: boolean;
+    };
     generateNonce(): {
         signed: string;
         plaintext: string;
@@ -43,6 +46,15 @@ export declare class OidcService {
         nonce: string;
     }>;
     loginUser(callbackUrl: URL, storedState: string, storedNonce: string): Promise<User>;
+    generateTestLoginUrl(): Promise<{
+        url: URL;
+        state: string;
+        nonce: string;
+    }>;
+    processTestCallback(callbackUrl: URL, storedState: string, storedNonce: string): Promise<{
+        claims: Record<string, unknown>;
+        userInfo: Record<string, unknown>;
+    }>;
     private applySsoProvisioning;
     private broadcastReloadOIDCConfigurationCommand;
     private isReloading;

package/dist/modules/sso-oidc/oidc.service.ee.js

@@ -56,6 +56,7 @@ const undici_1 = require("undici");
 const bad_request_error_1 = require("../../errors/response-errors/bad-request.error");
 const forbidden_error_1 = require("../../errors/response-errors/forbidden.error");
 const internal_server_error_1 = require("../../errors/response-errors/internal-server.error");
+const claims_context_builder_1 = require("../../modules/provisioning.ee/claims-context.builder");
 const provisioning_service_ee_1 = require("../../modules/provisioning.ee/provisioning.service.ee");
 const jwt_service_1 = require("../../services/jwt.service");
 const url_service_1 = require("../../services/url.service");
@@ -111,18 +112,24 @@ let OidcService = class OidcService {
             clientSecret: constants_1.OIDC_CLIENT_SECRET_REDACTED_VALUE,
         };
     }
-    generateState() {
+    generateState(testMode = false) {
         const state = `n8n_state:${(0, crypto_1.randomUUID)()}`;
+        const payload = { state };
+        if (testMode) {
+            payload.testMode = true;
+        }
         return {
-            signed: this.jwtService.sign({ state }, { expiresIn: '15m' }),
+            signed: this.jwtService.sign(payload, { expiresIn: '15m' }),
             plaintext: state,
         };
     }
     verifyState(signedState) {
         let state;
+        let testMode;
         try {
             const decodedState = this.jwtService.verify(signedState);
             state = decodedState?.state;
+            testMode = decodedState?.testMode;
         }
         catch (error) {
             this.logger.error('Failed to verify state', { error });
@@ -141,7 +148,7 @@ let OidcService = class OidcService {
             this.logger.error('Provided state is not formatted correctly');
             throw new bad_request_error_1.BadRequestError('Invalid state');
         }
-        return state;
+        return { state, testMode };
     }
     generateNonce() {
         const nonce = `n8n_nonce:${(0, crypto_1.randomUUID)()}`;
@@ -204,7 +211,7 @@ let OidcService = class OidcService {
     async loginUser(callbackUrl, storedState, storedNonce) {
         await this.loadOpenIdClient();
         const configuration = await this.getOidcConfiguration();
-        const expectedState = this.verifyState(storedState);
+        const { state: expectedState } = this.verifyState(storedState);
         const expectedNonce = this.verifyNonce(storedNonce);
         let tokens;
         try {
@@ -251,7 +258,7 @@ let OidcService = class OidcService {
             },
         });
         if (openidUser) {
-            await this.applySsoProvisioning(openidUser.user, claims);
+            await this.applySsoProvisioning(openidUser.user, claims, userInfo);
             return openidUser.user;
         }
         const foundUser = await this.userRepository.findOne({
@@ -266,7 +273,7 @@ let OidcService = class OidcService {
                 userId: foundUser.id,
             });
             await this.authIdentityRepository.save(id);
-            await this.applySsoProvisioning(foundUser, claims);
+            await this.applySsoProvisioning(foundUser, claims, userInfo);
             return foundUser;
         }
         const user = await this.userRepository.manager.transaction(async (trx) => {
@@ -285,10 +292,81 @@ let OidcService = class OidcService {
             }));
             return newUser;
         });
-        await this.applySsoProvisioning(user, claims);
+        await this.applySsoProvisioning(user, claims, userInfo);
         return user;
     }
-    async applySsoProvisioning(user, claims) {
+    async generateTestLoginUrl() {
+        await this.loadOpenIdClient();
+        const config = await this.loadConfig(true);
+        const configuration = await this.createProxyAwareConfiguration(config.discoveryEndpoint, config.clientId, config.clientSecret);
+        const state = this.generateState(true);
+        const nonce = this.generateNonce();
+        const provisioningConfig = await this.provisioningService.getConfig();
+        const provisioningEnabled = provisioningConfig.scopesProvisionInstanceRole ||
+            provisioningConfig.scopesProvisionProjectRoles;
+        const scope = provisioningEnabled
+            ? `openid email profile ${provisioningConfig.scopesName}`
+            : 'openid email profile';
+        const authorizationURL = this.openidClient.buildAuthorizationUrl(configuration, {
+            redirect_uri: this.getCallbackUrl(),
+            response_type: 'code',
+            scope,
+            prompt: config.prompt,
+            state: state.plaintext,
+            nonce: nonce.plaintext,
+            ...(config.authenticationContextClassReference.length > 0 && {
+                acr_values: config.authenticationContextClassReference.join(' '),
+            }),
+        });
+        return { url: authorizationURL, state: state.signed, nonce: nonce.signed };
+    }
+    async processTestCallback(callbackUrl, storedState, storedNonce) {
+        await this.loadOpenIdClient();
+        const config = await this.loadConfig(true);
+        const configuration = await this.createProxyAwareConfiguration(config.discoveryEndpoint, config.clientId, config.clientSecret);
+        const { state: expectedState } = this.verifyState(storedState);
+        const expectedNonce = this.verifyNonce(storedNonce);
+        let tokens;
+        try {
+            tokens = await this.openidClient.authorizationCodeGrant(configuration, callbackUrl, {
+                expectedState,
+                expectedNonce,
+            });
+        }
+        catch (error) {
+            this.logger.error('Failed to exchange authorization code for tokens', { error });
+            throw new bad_request_error_1.BadRequestError('Invalid authorization code');
+        }
+        let claims;
+        try {
+            claims = tokens.claims();
+        }
+        catch (error) {
+            this.logger.error('Failed to extract claims from tokens', { error });
+            throw new bad_request_error_1.BadRequestError('Invalid token');
+        }
+        if (!claims) {
+            throw new forbidden_error_1.ForbiddenError('No claims found in the OIDC token');
+        }
+        let userInfo;
+        try {
+            userInfo = await this.openidClient.fetchUserInfo(configuration, tokens.access_token, claims.sub);
+        }
+        catch (error) {
+            this.logger.error('Failed to fetch user info', { error });
+            throw new bad_request_error_1.BadRequestError('Invalid token');
+        }
+        return {
+            claims: { ...claims },
+            userInfo: { ...userInfo },
+        };
+    }
+    async applySsoProvisioning(user, claims, userInfo) {
+        if (await this.provisioningService.isExpressionMappingEnabled()) {
+            const context = (0, claims_context_builder_1.buildOidcClaimsContext)(claims, userInfo);
+            await this.provisioningService.provisionExpressionMappedRolesForUser(user, context);
+            return;
+        }
         const provisioningConfig = await this.provisioningService.getConfig();
         const projectRoleMapping = claims[provisioningConfig.scopesProjectsRolesClaimName];
         const instanceRole = claims[provisioningConfig.scopesInstanceRoleClaimName];

package/dist/modules/sso-oidc/oidc.service.ee.js.map

@@ -1 +1 @@
-{"version":3,"file":"oidc.service.ee.js","sourceRoot":"","sources":["../../../src/modules/sso-oidc/oidc.service.ee.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,8CAA+C;AAC/C,wDAA6C;AAC7C,wCAA2C;AAC3C,gCAQiB;AACjB,gDAAgD;AAChD,gCAA6C;AAC7C,mCAAoC;AACpC,uCAAoD;AACpD,+CAAoD;AAEpD,mCAA2C;AAE3C,kFAA6E;AAC7E,8EAA0E;AAC1E,0FAAqF;AACrF,+FAAwF;AACxF,wDAAoD;AACpD,wDAAoD;AACpD,sDAM8B;AAE9B,2CAAyF;AAEzF,MAAM,mBAAmB,GAAkB;IAC1C,QAAQ,EAAE,EAAE;IACZ,YAAY,EAAE,EAAE;IAChB,iBAAiB,EAAE,EAAE;IACrB,YAAY,EAAE,KAAK;IACnB,MAAM,EAAE,gBAAgB;IACxB,mCAAmC,EAAE,EAAE;CACvC,CAAC;AASF,MAAM,2BAA2B,GAAsB;IACtD,GAAG,mBAAmB;IACtB,iBAAiB,EAAE,IAAI,GAAG,CAAC,uBAAuB,CAAC;CACnD,CAAC;AAGK,IAAM,WAAW,GAAjB,MAAM,WAAW;IAMvB,YACkB,kBAAsC,EACtC,sBAA8C,EAC9C,UAAsB,EACtB,YAA0B,EAC1B,cAA8B,EAC9B,MAAc,EACd,MAAc,EACd,UAAsB,EACtB,gBAAkC,EAClC,mBAAwC;QATxC,uBAAkB,GAAlB,kBAAkB,CAAoB;QACtC,2BAAsB,GAAtB,sBAAsB,CAAwB;QAC9C,eAAU,GAAV,UAAU,CAAY;QACtB,iBAAY,GAAZ,YAAY,CAAc;QAC1B,mBAAc,GAAd,cAAc,CAAgB;QAC9B,WAAM,GAAN,MAAM,CAAQ;QACd,WAAM,GAAN,MAAM,CAAQ;QACd,eAAU,GAAV,UAAU,CAAY;QACtB,qBAAgB,GAAhB,gBAAgB,CAAkB;QAClC,wBAAmB,GAAnB,mBAAmB,CAAqB;QAflD,eAAU,GAAsB,2BAA2B,CAAC;QAyS5D,gBAAW,GAAG,KAAK,CAAC;IAzRzB,CAAC;IAEJ,KAAK,CAAC,IAAI;QACT,IAAI,CAAC,UAAU,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;QAC9C,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,iBAAiB,IAAI,CAAC,UAAU,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,UAAU,GAAG,CAAC,CAAC;QAC7F,MAAM,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC,UAAU,CAAC,YAAY,CAAC,CAAC;QAC7D,IAAI,IAAI,CAAC,UAAU,CAAC,YAAY,EAAE,CAAC;YAClC,MAAM,IAAI,CAAC,gBAAgB,EAAE,CAAC;QAC/B,CAAC;IACF,CAAC;IAEO,KAAK,CAAC,gBAAgB;QAC7B,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,CAAC;YACxB,IAAI,CAAC,YAAY,GAAG,wDAAa,eAAe,GAAC,CAAC;QACnD,CAAC;IACF,CAAC;IAED,cAAc;QACb,OAAO,GAAG,IAAI,CAAC,UAAU,CAAC,kBAAkB,EAAE,IAAI,IAAI,CAAC,YAAY,CAAC,SAAS,CAAC,IAAI,oBAAoB,CAAC;IACxG,CAAC;IAED,iBAAiB;QAChB,OAAO;YACN,GAAG,IAAI,CAAC,UAAU;YAClB,iBAAiB,EAAE,IAAI,CAAC,UAAU,CAAC,iBAAiB,CAAC,QAAQ,EAAE;YAC/D,YAAY,EAAE,6CAAiC;SAC/C,CAAC;IACH,CAAC;IAED,aAAa;QACZ,MAAM,KAAK,GAAG,aAAa,IAAA,mBAAU,GAAE,EAAE,CAAC;QAC1C,OAAO;YACN,MAAM,EAAE,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC;YAC7D,SAAS,EAAE,KAAK;SAChB,CAAC;IACH,CAAC;IAED,WAAW,CAAC,WAAmB;QAC9B,IAAI,KAAa,CAAC;QAClB,IAAI,CAAC;YACJ,MAAM,YAAY,GAAG,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;YACzD,KAAK,GAAG,YAAY,EAAE,KAAK,CAAC;QAC7B,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,wBAAwB,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;YACvD,MAAM,IAAI,mCAAe,CAAC,eAAe,CAAC,CAAC;QAC5C,CAAC;QAED,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;YAC/B,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,sCAAsC,CAAC,CAAC;YAC1D,MAAM,IAAI,mCAAe,CAAC,eAAe,CAAC,CAAC;QAC5C,CAAC;QAED,MAAM,UAAU,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAEpC,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC,IAAI,UAAU,CAAC,CAAC,CAAC,KAAK,WAAW,EAAE,CAAC;YAC9D,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,iDAAiD,CAAC,CAAC;YACrE,MAAM,IAAI,mCAAe,CAAC,eAAe,CAAC,CAAC;QAC5C,CAAC;QAED,IACC,CAAC,6EAA6E,CAAC,IAAI,CAClF,UAAU,CAAC,CAAC,CAAC,CACb,EACA,CAAC;YACF,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,2CAA2C,CAAC,CAAC;YAC/D,MAAM,IAAI,mCAAe,CAAC,eAAe,CAAC,CAAC;QAC5C,CAAC;QACD,OAAO,KAAK,CAAC;IACd,CAAC;IAED,aAAa;QACZ,MAAM,KAAK,GAAG,aAAa,IAAA,mBAAU,GAAE,EAAE,CAAC;QAC1C,OAAO;YACN,MAAM,EAAE,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC;YAC7D,SAAS,EAAE,KAAK;SAChB,CAAC;IACH,CAAC;IAED,WAAW,CAAC,WAAmB;QAC9B,IAAI,KAAa,CAAC;QAClB,IAAI,CAAC;YACJ,MAAM,YAAY,GAAG,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;YACzD,KAAK,GAAG,YAAY,EAAE,KAAK,CAAC;QAC7B,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,wBAAwB,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;YACvD,MAAM,IAAI,mCAAe,CAAC,eAAe,CAAC,CAAC;QAC5C,CAAC;QAED,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;YAC/B,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,sCAAsC,CAAC,CAAC;YAC1D,MAAM,IAAI,mCAAe,CAAC,eAAe,CAAC,CAAC;QAC5C,CAAC;QAED,MAAM,UAAU,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAEpC,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC,IAAI,UAAU,CAAC,CAAC,CAAC,KAAK,WAAW,EAAE,CAAC;YAC9D,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,iDAAiD,CAAC,CAAC;YACrE,MAAM,IAAI,mCAAe,CAAC,eAAe,CAAC,CAAC;QAC5C,CAAC;QAED,IACC,CAAC,6EAA6E,CAAC,IAAI,CAClF,UAAU,CAAC,CAAC,CAAC,CACb,EACA,CAAC;YACF,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,2CAA2C,CAAC,CAAC;YAC/D,MAAM,IAAI,mCAAe,CAAC,eAAe,CAAC,CAAC;QAC5C,CAAC;QACD,OAAO,KAAK,CAAC;IACd,CAAC;IAED,KAAK,CAAC,gBAAgB;QACrB,MAAM,IAAI,CAAC,gBAAgB,EAAE,CAAC;QAC9B,MAAM,aAAa,GAAG,MAAM,IAAI,CAAC,oBAAoB,EAAE,CAAC;QAExD,MAAM,KAAK,GAAG,IAAI,CAAC,aAAa,EAAE,CAAC;QACnC,MAAM,KAAK,GAAG,IAAI,CAAC,aAAa,EAAE,CAAC;QAEnC,MAAM,MAAM,GAAG,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC;QACtC,MAAM,mCAAmC,GAAG,IAAI,CAAC,UAAU,CAAC,mCAAmC,CAAC;QAEhG,MAAM,kBAAkB,GAAG,MAAM,IAAI,CAAC,mBAAmB,CAAC,SAAS,EAAE,CAAC;QACtE,MAAM,mBAAmB,GACxB,kBAAkB,CAAC,2BAA2B;YAC9C,kBAAkB,CAAC,2BAA2B,CAAC;QAGhD,MAAM,KAAK,GAAG,mBAAmB;YAChC,CAAC,CAAC,wBAAwB,kBAAkB,CAAC,UAAU,EAAE;YACzD,CAAC,CAAC,sBAAsB,CAAC;QAE1B,MAAM,gBAAgB,GAAG,IAAI,CAAC,YAAY,CAAC,qBAAqB,CAAC,aAAa,EAAE;YAC/E,YAAY,EAAE,IAAI,CAAC,cAAc,EAAE;YACnC,aAAa,EAAE,MAAM;YACrB,KAAK;YACL,MAAM;YACN,KAAK,EAAE,KAAK,CAAC,SAAS;YACtB,KAAK,EAAE,KAAK,CAAC,SAAS;YACtB,GAAG,CAAC,mCAAmC,CAAC,MAAM,GAAG,CAAC,IAAI;gBACrD,UAAU,EAAE,mCAAmC,CAAC,IAAI,CAAC,GAAG,CAAC;aACzD,CAAC;SACF,CAAC,CAAC;QAEH,OAAO,EAAE,GAAG,EAAE,gBAAgB,EAAE,KAAK,EAAE,KAAK,CAAC,MAAM,EAAE,KAAK,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC;IAC5E,CAAC;IAED,KAAK,CAAC,SAAS,CAAC,WAAgB,EAAE,WAAmB,EAAE,WAAmB;QACzE,MAAM,IAAI,CAAC,gBAAgB,EAAE,CAAC;QAC9B,MAAM,aAAa,GAAG,MAAM,IAAI,CAAC,oBAAoB,EAAE,CAAC;QAExD,MAAM,aAAa,GAAG,IAAI,CAAC,WAAW,CAAC,WAAW,CAAC,CAAC;QACpD,MAAM,aAAa,GAAG,IAAI,CAAC,WAAW,CAAC,WAAW,CAAC,CAAC;QAEpD,IAAI,MAAM,CAAC;QACX,IAAI,CAAC;YACJ,MAAM,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,sBAAsB,CAAC,aAAa,EAAE,WAAW,EAAE;gBACnF,aAAa;gBACb,aAAa;aACb,CAAC,CAAC;QACJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,kDAAkD,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;YACjF,MAAM,IAAI,mCAAe,CAAC,4BAA4B,CAAC,CAAC;QACzD,CAAC;QAED,IAAI,MAAM,CAAC;QACX,IAAI,CAAC;YACJ,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC;QAC1B,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,sCAAsC,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;YACrE,MAAM,IAAI,mCAAe,CAAC,eAAe,CAAC,CAAC;QAC5C,CAAC;QAED,IAAI,CAAC,MAAM,EAAE,CAAC;YACb,MAAM,IAAI,gCAAc,CAAC,mCAAmC,CAAC,CAAC;QAC/D,CAAC;QAED,IAAI,QAAQ,CAAC;QACb,IAAI,CAAC;YACJ,QAAQ,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,aAAa,CAC/C,aAAa,EACb,MAAM,CAAC,YAAY,EACnB,MAAM,CAAC,GAAG,CACV,CAAC;QACH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,2BAA2B,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;YAC1D,MAAM,IAAI,mCAAe,CAAC,eAAe,CAAC,CAAC;QAC5C,CAAC;QAED,IAAI,CAAC,QAAQ,CAAC,KAAK,EAAE,CAAC;YACrB,MAAM,IAAI,mCAAe,CAAC,sBAAsB,CAAC,CAAC;QACnD,CAAC;QAED,IAAI,CAAC,IAAA,iBAAY,EAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;YACnC,MAAM,IAAI,mCAAe,CAAC,sBAAsB,CAAC,CAAC;QACnD,CAAC;QAED,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,sBAAsB,CAAC,OAAO,CAAC;YAC5D,KAAK,EAAE,EAAE,UAAU,EAAE,MAAM,CAAC,GAAG,EAAE,YAAY,EAAE,MAAM,EAAE;YACvD,SAAS,EAAE;gBACV,IAAI,EAAE;oBACL,IAAI,EAAE,IAAI;iBACV;aACD;SACD,CAAC,CAAC;QAEH,IAAI,UAAU,EAAE,CAAC;YAChB,MAAM,IAAI,CAAC,oBAAoB,CAAC,UAAU,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;YAEzD,OAAO,UAAU,CAAC,IAAI,CAAC;QACxB,CAAC;QAED,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,OAAO,CAAC;YACnD,KAAK,EAAE,EAAE,KAAK,EAAE,QAAQ,CAAC,KAAK,EAAE;YAChC,SAAS,EAAE,CAAC,gBAAgB,EAAE,MAAM,CAAC;SACrC,CAAC,CAAC;QAEH,IAAI,SAAS,EAAE,CAAC;YACf,IAAI,CAAC,MAAM,CAAC,KAAK,CAChB,+BAA+B,QAAQ,CAAC,KAAK,yCAAyC,CACtF,CAAC;YAEF,MAAM,EAAE,GAAG,IAAI,CAAC,sBAAsB,CAAC,MAAM,CAAC;gBAC7C,UAAU,EAAE,MAAM,CAAC,GAAG;gBACtB,YAAY,EAAE,MAAM;gBACpB,MAAM,EAAE,SAAS,CAAC,EAAE;aACpB,CAAC,CAAC;YAEH,MAAM,IAAI,CAAC,sBAAsB,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YAC3C,MAAM,IAAI,CAAC,oBAAoB,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;YAEnD,OAAO,SAAS,CAAC;QAClB,CAAC;QAED,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,OAAO,CAAC,WAAW,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE;YACxE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,qBAAqB,CACxE;gBACC,SAAS,EAAE,QAAQ,CAAC,UAAU;gBAC9B,QAAQ,EAAE,QAAQ,CAAC,WAAW;gBAC9B,KAAK,EAAE,QAAQ,CAAC,KAAK;gBACrB,cAAc,EAAE,EAAE;gBAClB,IAAI,EAAE,uBAAkB;gBACxB,QAAQ,EAAE,iBAAiB;aAC3B,EACD,GAAG,CACH,CAAC;YAEF,MAAM,GAAG,CAAC,IAAI,CACb,GAAG,CAAC,MAAM,CAAC,iBAAY,EAAE;gBACxB,UAAU,EAAE,MAAM,CAAC,GAAG;gBACtB,YAAY,EAAE,MAAM;gBACpB,MAAM,EAAE,OAAO,CAAC,EAAE;aAClB,CAAC,CACF,CAAC;YAEF,OAAO,OAAO,CAAC;QAChB,CAAC,CAAC,CAAC;QAEH,MAAM,IAAI,CAAC,oBAAoB,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QAE9C,OAAO,IAAI,CAAC;IACb,CAAC;IAEO,KAAK,CAAC,oBAAoB,CAAC,IAAU,EAAE,MAAW;QACzD,MAAM,kBAAkB,GAAG,MAAM,IAAI,CAAC,mBAAmB,CAAC,SAAS,EAAE,CAAC;QACtE,MAAM,kBAAkB,GAAG,MAAM,CAAC,kBAAkB,CAAC,4BAA4B,CAAC,CAAC;QACnF,MAAM,YAAY,GAAG,MAAM,CAAC,kBAAkB,CAAC,2BAA2B,CAAC,CAAC;QAC5E,IAAI,YAAY,EAAE,CAAC;YAClB,MAAM,IAAI,CAAC,mBAAmB,CAAC,4BAA4B,CAAC,IAAI,EAAE,YAAY,CAAC,CAAC;QACjF,CAAC;QACD,IAAI,kBAAkB,EAAE,CAAC;YACxB,MAAM,IAAI,CAAC,mBAAmB,CAAC,4BAA4B,CAAC,IAAI,CAAC,EAAE,EAAE,kBAAkB,CAAC,CAAC;QAC1F,CAAC;IACF,CAAC;IAEO,KAAK,CAAC,uCAAuC;QACpD,IAAI,IAAI,CAAC,gBAAgB,CAAC,WAAW,EAAE,CAAC;YACvC,MAAM,EAAE,SAAS,EAAE,GAAG,wDAAa,oCAAoC,GAAC,CAAC;YACzE,MAAM,cAAS,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,cAAc,CAAC,EAAE,OAAO,EAAE,oBAAoB,EAAE,CAAC,CAAC;QAClF,CAAC;IACF,CAAC;IAKK,AAAN,KAAK,CAAC,MAAM;QACX,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC;YACtB,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,+CAA+C,CAAC,CAAC;YAClE,OAAO;QACR,CAAC;QACD,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC;QACxB,IAAI,CAAC;YACJ,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,mEAAmE,CAAC,CAAC;YACvF,MAAM,YAAY,GAAG,MAAM,IAAI,CAAC,6BAA6B,CAAC,IAAI,CAAC,CAAC;YACpE,IAAI,YAAY,EAAE,CAAC;gBAClB,IAAI,CAAC,UAAU,GAAG,YAAY,CAAC;gBAC/B,IAAI,CAAC,uBAAuB,GAAG,SAAS,CAAC;YAC1C,CAAC;iBAAM,CAAC;gBACP,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,mEAAmE,CAAC,CAAC;YACvF,CAAC;YACD,MAAM,IAAA,wCAA0B,GAAE,CAAC;YAEnC,MAAM,kBAAkB,GAAG,IAAA,+CAAiC,GAAE,CAAC;YAE/D,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,qBAAqB,kBAAkB,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,UAAU,GAAG,CAAC,CAAC;YAEvF,cAAS,CAAC,GAAG,CAAC,qBAAY,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,YAAY,GAAG,kBAAkB,CAAC;QACxE,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,iEAAiE,EAAE;gBACpF,KAAK;aACL,CAAC,CAAC;QACJ,CAAC;gBAAS,CAAC;YACV,IAAI,CAAC,WAAW,GAAG,KAAK,CAAC;QAC1B,CAAC;IACF,CAAC;IAED,KAAK,CAAC,6BAA6B,CAClC,aAAa,GAAG,KAAK;QAErB,MAAM,YAAY,GAAG,MAAM,IAAI,CAAC,kBAAkB,CAAC,SAAS,CAAC,mCAAuB,CAAC,CAAC;QAEtF,IAAI,YAAY,EAAE,CAAC;YAClB,IAAI,CAAC;gBACJ,MAAM,WAAW,GAAG,IAAA,wBAAS,EAAgB,YAAY,CAAC,KAAK,CAAC,CAAC;gBAEjE,IAAI,WAAW,CAAC,iBAAiB,KAAK,EAAE;oBAAE,OAAO,SAAS,CAAC;gBAE3D,MAAM,UAAU,GAAG,yBAAa,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;gBAEpD,MAAM,YAAY,GAAG,IAAI,GAAG,CAAC,UAAU,CAAC,iBAAiB,CAAC,CAAC;gBAE3D,IAAI,UAAU,CAAC,YAAY,IAAI,aAAa,EAAE,CAAC;oBAC9C,UAAU,CAAC,YAAY,GAAG,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,YAAY,CAAC,CAAC;gBACxE,CAAC;gBACD,OAAO;oBACN,GAAG,UAAU;oBACb,iBAAiB,EAAE,YAAY;iBAC/B,CAAC;YACH,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBAChB,IAAI,CAAC,MAAM,CAAC,IAAI,CACf,yFAAyF,EAEzF,EAAE,KAAK,EAAE,CACT,CAAC;YACH,CAAC;QACF,CAAC;QACD,OAAO,SAAS,CAAC;IAClB,CAAC;IAED,KAAK,CAAC,UAAU,CAAC,aAAa,GAAG,KAAK;QACrC,MAAM,aAAa,GAAG,MAAM,IAAI,CAAC,6BAA6B,CAAC,aAAa,CAAC,CAAC;QAE9E,IAAI,aAAa,EAAE,CAAC;YACnB,OAAO,aAAa,CAAC;QACtB,CAAC;QAED,OAAO,2BAA2B,CAAC;IACpC,CAAC;IAED,KAAK,CAAC,YAAY,CAAC,SAAwB;QAC1C,MAAM,mDAAmD,GACxD,SAAS,CAAC,YAAY;YACtB,CAAC,IAAA,gDAAkC,GAAE;YACrC,CAAC,IAAA,+CAAiC,GAAE,CAAC;QACtC,IAAI,mDAAmD,EAAE,CAAC;YACzD,MAAM,IAAI,2CAAmB,CAC5B,qHAAqH,IAAA,4CAA8B,GAAE,GAAG,CACxJ,CAAC;QACH,CAAC;QAED,IAAI,iBAAsB,CAAC;QAC3B,IAAI,CAAC;YAEJ,iBAAiB,GAAG,IAAI,GAAG,CAAC,SAAS,CAAC,iBAAiB,CAAC,CAAC;QAC1D,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,6CAA6C,SAAS,CAAC,iBAAiB,EAAE,CAAC,CAAC;YAC9F,MAAM,IAAI,wBAAS,CAAC,gDAAgD,CAAC,CAAC;QACvE,CAAC;QACD,IAAI,SAAS,CAAC,YAAY,KAAK,6CAAiC,EAAE,CAAC;YAClE,SAAS,CAAC,YAAY,GAAG,IAAI,CAAC,UAAU,CAAC,YAAY,CAAC;QACvD,CAAC;QACD,IAAI,CAAC;YACJ,MAAM,kBAAkB,GAAG,MAAM,IAAI,CAAC,6BAA6B,CAClE,iBAAiB,EACjB,SAAS,CAAC,QAAQ,EAClB,SAAS,CAAC,YAAY,CACtB,CAAC;YAEF,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,6BAA6B,IAAI,CAAC,SAAS,CAAC,kBAAkB,CAAC,EAAE,CAAC,CAAC;QACtF,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,kCAAkC,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;YACjE,MAAM,IAAI,wBAAS,CAAC,uEAAuE,CAAC,CAAC;QAC9F,CAAC;QACD,MAAM,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC;YAClC,GAAG,EAAE,mCAAuB;YAC5B,KAAK,EAAE,IAAI,CAAC,SAAS,CAAC;gBACrB,GAAG,SAAS;gBACZ,YAAY,EAAE,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,YAAY,CAAC;aACzD,CAAC;YACF,aAAa,EAAE,IAAI;SACnB,CAAC,CAAC;QAOH,IAAI,CAAC,UAAU,GAAG;YACjB,GAAG,SAAS;YACZ,iBAAiB;SACjB,CAAC;QACF,IAAI,CAAC,uBAAuB,GAAG,SAAS,CAAC;QACzC,IAAI,CAAC,MAAM,CAAC,KAAK,CAChB,qBAAqB,IAAI,CAAC,UAAU,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,UAAU,GAAG,CAC7E,CAAC;QAEF,MAAM,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC,UAAU,CAAC,YAAY,CAAC,CAAC;QAE7D,MAAM,IAAI,CAAC,uCAAuC,EAAE,CAAC;IACtD,CAAC;IAEO,KAAK,CAAC,mBAAmB,CAAC,OAAgB;QACjD,MAAM,2BAA2B,GAAG,IAAA,4CAA8B,GAAE,CAAC;QAErE,MAAM,mDAAmD,GACxD,OAAO,IAAI,CAAC,IAAA,gDAAkC,GAAE,IAAI,CAAC,IAAA,+CAAiC,GAAE,CAAC;QAC1F,IAAI,mDAAmD,EAAE,CAAC;YACzD,MAAM,IAAI,2CAAmB,CAC5B,qHAAqH,2BAA2B,GAAG,CACnJ,CAAC;QACH,CAAC;QAED,MAAM,0BAA0B,GAC/B,CAAC,OAAO,IAAI,2BAA2B,KAAK,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,2BAA2B,CAAC;QAE5F,cAAS,CAAC,GAAG,CAAC,qBAAY,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,YAAY,GAAG,OAAO,CAAC;QAC5D,MAAM,IAAA,4CAA8B,EAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,0BAA0B,CAAC,CAAC;IACrF,CAAC;IAaO,KAAK,CAAC,6BAA6B,CAC1C,YAAiB,EACjB,QAAgB,EAChB,YAAoB;QAEpB,MAAM,IAAI,CAAC,gBAAgB,EAAE,CAAC;QAG9B,MAAM,cAAc,GACnB,OAAO,CAAC,GAAG,CAAC,UAAU,IAAI,OAAO,CAAC,GAAG,CAAC,WAAW,IAAI,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC;QAE5E,IAAI,cAAc,EAAE,CAAC;YACpB,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,4CAA4C,EAAE;gBAC/D,UAAU,EAAE,OAAO,CAAC,GAAG,CAAC,UAAU;gBAClC,WAAW,EAAE,OAAO,CAAC,GAAG,CAAC,WAAW;gBACpC,QAAQ,EAAE,OAAO,CAAC,GAAG,CAAC,QAAQ;gBAC9B,SAAS,EAAE,OAAO,CAAC,GAAG,CAAC,SAAS;aAChC,CAAC,CAAC;YAGH,MAAM,UAAU,GAAG,IAAI,0BAAiB,EAAE,CAAC;YAC3C,MAAM,UAAU,GAAkC,KAAK,EAAE,GAAG,EAAE,OAAO,EAAE,EAAE;gBACxE,OAAO,MAAM,KAAK,CAAC,GAAG,EAAE;oBACvB,GAAG,OAAO;oBAEV,UAAU,EAAE,UAAU;iBACtB,CAAC,CAAC;YACJ,CAAC,CAAC;YAGF,MAAM,aAAa,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,SAAS,CACtD,YAAY,EACZ,QAAQ,EACR,YAAY,EACZ,SAAS,EACT;gBACC,CAAC,IAAI,CAAC,YAAY,CAAC,WAAW,CAAC,EAAE,UAAU;aAC3C,CACD,CAAC;YAGF,aAAa,CAAC,IAAI,CAAC,YAAY,CAAC,WAAW,CAAC,GAAG,UAAU,CAAC;YAE1D,OAAO,aAAa,CAAC;QACtB,CAAC;QAED,OAAO,MAAM,IAAI,CAAC,YAAY,CAAC,SAAS,CAAC,YAAY,EAAE,QAAQ,EAAE,YAAY,CAAC,CAAC;IAChF,CAAC;IAEO,KAAK,CAAC,oBAAoB;QACjC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,IACC,IAAI,CAAC,uBAAuB,KAAK,SAAS;YAC1C,GAAG,IAAI,IAAI,CAAC,uBAAuB,CAAC,SAAS,CAAC,OAAO,EAAE;YACvD,IAAI,CAAC,UAAU,CAAC,iBAAiB,CAAC,QAAQ,EAAE;gBAC3C,IAAI,CAAC,uBAAuB,CAAC,iBAAiB,CAAC,QAAQ,EAAE;YAC1D,IAAI,CAAC,UAAU,CAAC,QAAQ,KAAK,IAAI,CAAC,uBAAuB,CAAC,QAAQ;YAClE,IAAI,CAAC,UAAU,CAAC,YAAY,KAAK,IAAI,CAAC,uBAAuB,CAAC,YAAY,EACzE,CAAC;YACF,IAAI,CAAC,uBAAuB,GAAG;gBAC9B,GAAG,IAAI,CAAC,UAAU;gBAClB,aAAa,EAAE,IAAI,CAAC,6BAA6B,CAChD,IAAI,CAAC,UAAU,CAAC,iBAAiB,EACjC,IAAI,CAAC,UAAU,CAAC,QAAQ,EACxB,IAAI,CAAC,UAAU,CAAC,YAAY,CAC5B;gBACD,SAAS,EAAE,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;aAChD,CAAC;QACH,CAAC;QAED,OAAO,MAAM,IAAI,CAAC,uBAAuB,CAAC,aAAa,CAAC;IACzD,CAAC;CACD,CAAA;AA1hBY,kCAAW;AA6SjB;IADL,IAAA,0BAAa,EAAC,oBAAoB,CAAC;;;;yCA8BnC;sBA1UW,WAAW;IADvB,IAAA,YAAO,GAAE;qCAQ6B,uBAAkB;QACd,2BAAsB;QAClC,wBAAU;QACR,qBAAY;QACV,mBAAc;QACtB,iBAAM;QACN,uBAAM;QACF,wBAAU;QACJ,2BAAgB;QACb,6CAAmB;GAhB9C,WAAW,CA0hBvB"}
+{"version":3,"file":"oidc.service.ee.js","sourceRoot":"","sources":["../../../src/modules/sso-oidc/oidc.service.ee.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,8CAA+C;AAC/C,wDAA6C;AAC7C,wCAA2C;AAC3C,gCAQiB;AACjB,gDAAgD;AAChD,gCAA6C;AAC7C,mCAAoC;AACpC,uCAAoD;AACpD,+CAAoD;AAEpD,mCAA2C;AAE3C,kFAA6E;AAC7E,8EAA0E;AAC1E,0FAAqF;AACrF,6FAA0F;AAC1F,+FAAwF;AACxF,wDAAoD;AACpD,wDAAoD;AACpD,sDAM8B;AAE9B,2CAAyF;AAEzF,MAAM,mBAAmB,GAAkB;IAC1C,QAAQ,EAAE,EAAE;IACZ,YAAY,EAAE,EAAE;IAChB,iBAAiB,EAAE,EAAE;IACrB,YAAY,EAAE,KAAK;IACnB,MAAM,EAAE,gBAAgB;IACxB,mCAAmC,EAAE,EAAE;CACvC,CAAC;AASF,MAAM,2BAA2B,GAAsB;IACtD,GAAG,mBAAmB;IACtB,iBAAiB,EAAE,IAAI,GAAG,CAAC,uBAAuB,CAAC;CACnD,CAAC;AAGK,IAAM,WAAW,GAAjB,MAAM,WAAW;IAMvB,YACkB,kBAAsC,EACtC,sBAA8C,EAC9C,UAAsB,EACtB,YAA0B,EAC1B,cAA8B,EAC9B,MAAc,EACd,MAAc,EACd,UAAsB,EACtB,gBAAkC,EAClC,mBAAwC;QATxC,uBAAkB,GAAlB,kBAAkB,CAAoB;QACtC,2BAAsB,GAAtB,sBAAsB,CAAwB;QAC9C,eAAU,GAAV,UAAU,CAAY;QACtB,iBAAY,GAAZ,YAAY,CAAc;QAC1B,mBAAc,GAAd,cAAc,CAAgB;QAC9B,WAAM,GAAN,MAAM,CAAQ;QACd,WAAM,GAAN,MAAM,CAAQ;QACd,eAAU,GAAV,UAAU,CAAY;QACtB,qBAAgB,GAAhB,gBAAgB,CAAkB;QAClC,wBAAmB,GAAnB,mBAAmB,CAAqB;QAflD,eAAU,GAAsB,2BAA2B,CAAC;QAoa5D,gBAAW,GAAG,KAAK,CAAC;IApZzB,CAAC;IAEJ,KAAK,CAAC,IAAI;QACT,IAAI,CAAC,UAAU,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;QAC9C,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,iBAAiB,IAAI,CAAC,UAAU,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,UAAU,GAAG,CAAC,CAAC;QAC7F,MAAM,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC,UAAU,CAAC,YAAY,CAAC,CAAC;QAC7D,IAAI,IAAI,CAAC,UAAU,CAAC,YAAY,EAAE,CAAC;YAClC,MAAM,IAAI,CAAC,gBAAgB,EAAE,CAAC;QAC/B,CAAC;IACF,CAAC;IAEO,KAAK,CAAC,gBAAgB;QAC7B,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,CAAC;YACxB,IAAI,CAAC,YAAY,GAAG,wDAAa,eAAe,GAAC,CAAC;QACnD,CAAC;IACF,CAAC;IAED,cAAc;QACb,OAAO,GAAG,IAAI,CAAC,UAAU,CAAC,kBAAkB,EAAE,IAAI,IAAI,CAAC,YAAY,CAAC,SAAS,CAAC,IAAI,oBAAoB,CAAC;IACxG,CAAC;IAED,iBAAiB;QAChB,OAAO;YACN,GAAG,IAAI,CAAC,UAAU;YAClB,iBAAiB,EAAE,IAAI,CAAC,UAAU,CAAC,iBAAiB,CAAC,QAAQ,EAAE;YAC/D,YAAY,EAAE,6CAAiC;SAC/C,CAAC;IACH,CAAC;IAED,aAAa,CAAC,QAAQ,GAAG,KAAK;QAC7B,MAAM,KAAK,GAAG,aAAa,IAAA,mBAAU,GAAE,EAAE,CAAC;QAC1C,MAAM,OAAO,GAA4B,EAAE,KAAK,EAAE,CAAC;QACnD,IAAI,QAAQ,EAAE,CAAC;YACd,OAAO,CAAC,QAAQ,GAAG,IAAI,CAAC;QACzB,CAAC;QACD,OAAO;YACN,MAAM,EAAE,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC;YAC3D,SAAS,EAAE,KAAK;SAChB,CAAC;IACH,CAAC;IAED,WAAW,CAAC,WAAmB;QAC9B,IAAI,KAAa,CAAC;QAClB,IAAI,QAA6B,CAAC;QAClC,IAAI,CAAC;YACJ,MAAM,YAAY,GAAG,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;YACzD,KAAK,GAAG,YAAY,EAAE,KAAK,CAAC;YAC5B,QAAQ,GAAG,YAAY,EAAE,QAAQ,CAAC;QACnC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,wBAAwB,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;YACvD,MAAM,IAAI,mCAAe,CAAC,eAAe,CAAC,CAAC;QAC5C,CAAC;QAED,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;YAC/B,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,sCAAsC,CAAC,CAAC;YAC1D,MAAM,IAAI,mCAAe,CAAC,eAAe,CAAC,CAAC;QAC5C,CAAC;QAED,MAAM,UAAU,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAEpC,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC,IAAI,UAAU,CAAC,CAAC,CAAC,KAAK,WAAW,EAAE,CAAC;YAC9D,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,iDAAiD,CAAC,CAAC;YACrE,MAAM,IAAI,mCAAe,CAAC,eAAe,CAAC,CAAC;QAC5C,CAAC;QAED,IACC,CAAC,6EAA6E,CAAC,IAAI,CAClF,UAAU,CAAC,CAAC,CAAC,CACb,EACA,CAAC;YACF,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,2CAA2C,CAAC,CAAC;YAC/D,MAAM,IAAI,mCAAe,CAAC,eAAe,CAAC,CAAC;QAC5C,CAAC;QACD,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC;IAC5B,CAAC;IAED,aAAa;QACZ,MAAM,KAAK,GAAG,aAAa,IAAA,mBAAU,GAAE,EAAE,CAAC;QAC1C,OAAO;YACN,MAAM,EAAE,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC;YAC7D,SAAS,EAAE,KAAK;SAChB,CAAC;IACH,CAAC;IAED,WAAW,CAAC,WAAmB;QAC9B,IAAI,KAAa,CAAC;QAClB,IAAI,CAAC;YACJ,MAAM,YAAY,GAAG,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;YACzD,KAAK,GAAG,YAAY,EAAE,KAAK,CAAC;QAC7B,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,wBAAwB,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;YACvD,MAAM,IAAI,mCAAe,CAAC,eAAe,CAAC,CAAC;QAC5C,CAAC;QAED,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;YAC/B,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,sCAAsC,CAAC,CAAC;YAC1D,MAAM,IAAI,mCAAe,CAAC,eAAe,CAAC,CAAC;QAC5C,CAAC;QAED,MAAM,UAAU,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAEpC,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC,IAAI,UAAU,CAAC,CAAC,CAAC,KAAK,WAAW,EAAE,CAAC;YAC9D,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,iDAAiD,CAAC,CAAC;YACrE,MAAM,IAAI,mCAAe,CAAC,eAAe,CAAC,CAAC;QAC5C,CAAC;QAED,IACC,CAAC,6EAA6E,CAAC,IAAI,CAClF,UAAU,CAAC,CAAC,CAAC,CACb,EACA,CAAC;YACF,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,2CAA2C,CAAC,CAAC;YAC/D,MAAM,IAAI,mCAAe,CAAC,eAAe,CAAC,CAAC;QAC5C,CAAC;QACD,OAAO,KAAK,CAAC;IACd,CAAC;IAED,KAAK,CAAC,gBAAgB;QACrB,MAAM,IAAI,CAAC,gBAAgB,EAAE,CAAC;QAC9B,MAAM,aAAa,GAAG,MAAM,IAAI,CAAC,oBAAoB,EAAE,CAAC;QAExD,MAAM,KAAK,GAAG,IAAI,CAAC,aAAa,EAAE,CAAC;QACnC,MAAM,KAAK,GAAG,IAAI,CAAC,aAAa,EAAE,CAAC;QAEnC,MAAM,MAAM,GAAG,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC;QACtC,MAAM,mCAAmC,GAAG,IAAI,CAAC,UAAU,CAAC,mCAAmC,CAAC;QAEhG,MAAM,kBAAkB,GAAG,MAAM,IAAI,CAAC,mBAAmB,CAAC,SAAS,EAAE,CAAC;QACtE,MAAM,mBAAmB,GACxB,kBAAkB,CAAC,2BAA2B;YAC9C,kBAAkB,CAAC,2BAA2B,CAAC;QAGhD,MAAM,KAAK,GAAG,mBAAmB;YAChC,CAAC,CAAC,wBAAwB,kBAAkB,CAAC,UAAU,EAAE;YACzD,CAAC,CAAC,sBAAsB,CAAC;QAE1B,MAAM,gBAAgB,GAAG,IAAI,CAAC,YAAY,CAAC,qBAAqB,CAAC,aAAa,EAAE;YAC/E,YAAY,EAAE,IAAI,CAAC,cAAc,EAAE;YACnC,aAAa,EAAE,MAAM;YACrB,KAAK;YACL,MAAM;YACN,KAAK,EAAE,KAAK,CAAC,SAAS;YACtB,KAAK,EAAE,KAAK,CAAC,SAAS;YACtB,GAAG,CAAC,mCAAmC,CAAC,MAAM,GAAG,CAAC,IAAI;gBACrD,UAAU,EAAE,mCAAmC,CAAC,IAAI,CAAC,GAAG,CAAC;aACzD,CAAC;SACF,CAAC,CAAC;QAEH,OAAO,EAAE,GAAG,EAAE,gBAAgB,EAAE,KAAK,EAAE,KAAK,CAAC,MAAM,EAAE,KAAK,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC;IAC5E,CAAC;IAED,KAAK,CAAC,SAAS,CAAC,WAAgB,EAAE,WAAmB,EAAE,WAAmB;QACzE,MAAM,IAAI,CAAC,gBAAgB,EAAE,CAAC;QAC9B,MAAM,aAAa,GAAG,MAAM,IAAI,CAAC,oBAAoB,EAAE,CAAC;QAExD,MAAM,EAAE,KAAK,EAAE,aAAa,EAAE,GAAG,IAAI,CAAC,WAAW,CAAC,WAAW,CAAC,CAAC;QAC/D,MAAM,aAAa,GAAG,IAAI,CAAC,WAAW,CAAC,WAAW,CAAC,CAAC;QAEpD,IAAI,MAAM,CAAC;QACX,IAAI,CAAC;YACJ,MAAM,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,sBAAsB,CAAC,aAAa,EAAE,WAAW,EAAE;gBACnF,aAAa;gBACb,aAAa;aACb,CAAC,CAAC;QACJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,kDAAkD,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;YACjF,MAAM,IAAI,mCAAe,CAAC,4BAA4B,CAAC,CAAC;QACzD,CAAC;QAED,IAAI,MAAM,CAAC;QACX,IAAI,CAAC;YACJ,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC;QAC1B,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,sCAAsC,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;YACrE,MAAM,IAAI,mCAAe,CAAC,eAAe,CAAC,CAAC;QAC5C,CAAC;QAED,IAAI,CAAC,MAAM,EAAE,CAAC;YACb,MAAM,IAAI,gCAAc,CAAC,mCAAmC,CAAC,CAAC;QAC/D,CAAC;QAED,IAAI,QAAQ,CAAC;QACb,IAAI,CAAC;YACJ,QAAQ,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,aAAa,CAC/C,aAAa,EACb,MAAM,CAAC,YAAY,EACnB,MAAM,CAAC,GAAG,CACV,CAAC;QACH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,2BAA2B,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;YAC1D,MAAM,IAAI,mCAAe,CAAC,eAAe,CAAC,CAAC;QAC5C,CAAC;QAED,IAAI,CAAC,QAAQ,CAAC,KAAK,EAAE,CAAC;YACrB,MAAM,IAAI,mCAAe,CAAC,sBAAsB,CAAC,CAAC;QACnD,CAAC;QAED,IAAI,CAAC,IAAA,iBAAY,EAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;YACnC,MAAM,IAAI,mCAAe,CAAC,sBAAsB,CAAC,CAAC;QACnD,CAAC;QAED,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,sBAAsB,CAAC,OAAO,CAAC;YAC5D,KAAK,EAAE,EAAE,UAAU,EAAE,MAAM,CAAC,GAAG,EAAE,YAAY,EAAE,MAAM,EAAE;YACvD,SAAS,EAAE;gBACV,IAAI,EAAE;oBACL,IAAI,EAAE,IAAI;iBACV;aACD;SACD,CAAC,CAAC;QAEH,IAAI,UAAU,EAAE,CAAC;YAChB,MAAM,IAAI,CAAC,oBAAoB,CAC9B,UAAU,CAAC,IAAI,EACf,MAAiC,EACjC,QAAmC,CACnC,CAAC;YAEF,OAAO,UAAU,CAAC,IAAI,CAAC;QACxB,CAAC;QAED,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,OAAO,CAAC;YACnD,KAAK,EAAE,EAAE,KAAK,EAAE,QAAQ,CAAC,KAAK,EAAE;YAChC,SAAS,EAAE,CAAC,gBAAgB,EAAE,MAAM,CAAC;SACrC,CAAC,CAAC;QAEH,IAAI,SAAS,EAAE,CAAC;YACf,IAAI,CAAC,MAAM,CAAC,KAAK,CAChB,+BAA+B,QAAQ,CAAC,KAAK,yCAAyC,CACtF,CAAC;YAEF,MAAM,EAAE,GAAG,IAAI,CAAC,sBAAsB,CAAC,MAAM,CAAC;gBAC7C,UAAU,EAAE,MAAM,CAAC,GAAG;gBACtB,YAAY,EAAE,MAAM;gBACpB,MAAM,EAAE,SAAS,CAAC,EAAE;aACpB,CAAC,CAAC;YAEH,MAAM,IAAI,CAAC,sBAAsB,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YAC3C,MAAM,IAAI,CAAC,oBAAoB,CAC9B,SAAS,EACT,MAAiC,EACjC,QAAmC,CACnC,CAAC;YAEF,OAAO,SAAS,CAAC;QAClB,CAAC;QAED,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,OAAO,CAAC,WAAW,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE;YACxE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,qBAAqB,CACxE;gBACC,SAAS,EAAE,QAAQ,CAAC,UAAU;gBAC9B,QAAQ,EAAE,QAAQ,CAAC,WAAW;gBAC9B,KAAK,EAAE,QAAQ,CAAC,KAAK;gBACrB,cAAc,EAAE,EAAE;gBAClB,IAAI,EAAE,uBAAkB;gBACxB,QAAQ,EAAE,iBAAiB;aAC3B,EACD,GAAG,CACH,CAAC;YAEF,MAAM,GAAG,CAAC,IAAI,CACb,GAAG,CAAC,MAAM,CAAC,iBAAY,EAAE;gBACxB,UAAU,EAAE,MAAM,CAAC,GAAG;gBACtB,YAAY,EAAE,MAAM;gBACpB,MAAM,EAAE,OAAO,CAAC,EAAE;aAClB,CAAC,CACF,CAAC;YAEF,OAAO,OAAO,CAAC;QAChB,CAAC,CAAC,CAAC;QAEH,MAAM,IAAI,CAAC,oBAAoB,CAC9B,IAAI,EACJ,MAAiC,EACjC,QAAmC,CACnC,CAAC;QAEF,OAAO,IAAI,CAAC;IACb,CAAC;IAED,KAAK,CAAC,oBAAoB;QACzB,MAAM,IAAI,CAAC,gBAAgB,EAAE,CAAC;QAC9B,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;QAE3C,MAAM,aAAa,GAAG,MAAM,IAAI,CAAC,6BAA6B,CAC7D,MAAM,CAAC,iBAAiB,EACxB,MAAM,CAAC,QAAQ,EACf,MAAM,CAAC,YAAY,CACnB,CAAC;QAEF,MAAM,KAAK,GAAG,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC;QACvC,MAAM,KAAK,GAAG,IAAI,CAAC,aAAa,EAAE,CAAC;QAEnC,MAAM,kBAAkB,GAAG,MAAM,IAAI,CAAC,mBAAmB,CAAC,SAAS,EAAE,CAAC;QACtE,MAAM,mBAAmB,GACxB,kBAAkB,CAAC,2BAA2B;YAC9C,kBAAkB,CAAC,2BAA2B,CAAC;QAEhD,MAAM,KAAK,GAAG,mBAAmB;YAChC,CAAC,CAAC,wBAAwB,kBAAkB,CAAC,UAAU,EAAE;YACzD,CAAC,CAAC,sBAAsB,CAAC;QAE1B,MAAM,gBAAgB,GAAG,IAAI,CAAC,YAAY,CAAC,qBAAqB,CAAC,aAAa,EAAE;YAC/E,YAAY,EAAE,IAAI,CAAC,cAAc,EAAE;YACnC,aAAa,EAAE,MAAM;YACrB,KAAK;YACL,MAAM,EAAE,MAAM,CAAC,MAAM;YACrB,KAAK,EAAE,KAAK,CAAC,SAAS;YACtB,KAAK,EAAE,KAAK,CAAC,SAAS;YACtB,GAAG,CAAC,MAAM,CAAC,mCAAmC,CAAC,MAAM,GAAG,CAAC,IAAI;gBAC5D,UAAU,EAAE,MAAM,CAAC,mCAAmC,CAAC,IAAI,CAAC,GAAG,CAAC;aAChE,CAAC;SACF,CAAC,CAAC;QAEH,OAAO,EAAE,GAAG,EAAE,gBAAgB,EAAE,KAAK,EAAE,KAAK,CAAC,MAAM,EAAE,KAAK,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC;IAC5E,CAAC;IAED,KAAK,CAAC,mBAAmB,CACxB,WAAgB,EAChB,WAAmB,EACnB,WAAmB;QAEnB,MAAM,IAAI,CAAC,gBAAgB,EAAE,CAAC;QAC9B,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;QAE3C,MAAM,aAAa,GAAG,MAAM,IAAI,CAAC,6BAA6B,CAC7D,MAAM,CAAC,iBAAiB,EACxB,MAAM,CAAC,QAAQ,EACf,MAAM,CAAC,YAAY,CACnB,CAAC;QAEF,MAAM,EAAE,KAAK,EAAE,aAAa,EAAE,GAAG,IAAI,CAAC,WAAW,CAAC,WAAW,CAAC,CAAC;QAC/D,MAAM,aAAa,GAAG,IAAI,CAAC,WAAW,CAAC,WAAW,CAAC,CAAC;QAEpD,IAAI,MAAM,CAAC;QACX,IAAI,CAAC;YACJ,MAAM,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,sBAAsB,CAAC,aAAa,EAAE,WAAW,EAAE;gBACnF,aAAa;gBACb,aAAa;aACb,CAAC,CAAC;QACJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,kDAAkD,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;YACjF,MAAM,IAAI,mCAAe,CAAC,4BAA4B,CAAC,CAAC;QACzD,CAAC;QAED,IAAI,MAAM,CAAC;QACX,IAAI,CAAC;YACJ,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC;QAC1B,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,sCAAsC,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;YACrE,MAAM,IAAI,mCAAe,CAAC,eAAe,CAAC,CAAC;QAC5C,CAAC;QAED,IAAI,CAAC,MAAM,EAAE,CAAC;YACb,MAAM,IAAI,gCAAc,CAAC,mCAAmC,CAAC,CAAC;QAC/D,CAAC;QAED,IAAI,QAAQ,CAAC;QACb,IAAI,CAAC;YACJ,QAAQ,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,aAAa,CAC/C,aAAa,EACb,MAAM,CAAC,YAAY,EACnB,MAAM,CAAC,GAAG,CACV,CAAC;QACH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,2BAA2B,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;YAC1D,MAAM,IAAI,mCAAe,CAAC,eAAe,CAAC,CAAC;QAC5C,CAAC;QAED,OAAO;YACN,MAAM,EAAE,EAAE,GAAG,MAAM,EAAE;YACrB,QAAQ,EAAE,EAAE,GAAG,QAAQ,EAAE;SACzB,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,oBAAoB,CACjC,IAAU,EACV,MAA+B,EAC/B,QAAiC;QAEjC,IAAI,MAAM,IAAI,CAAC,mBAAmB,CAAC,0BAA0B,EAAE,EAAE,CAAC;YACjE,MAAM,OAAO,GAAG,IAAA,+CAAsB,EAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;YACzD,MAAM,IAAI,CAAC,mBAAmB,CAAC,qCAAqC,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;YACpF,OAAO;QACR,CAAC;QAED,MAAM,kBAAkB,GAAG,MAAM,IAAI,CAAC,mBAAmB,CAAC,SAAS,EAAE,CAAC;QACtE,MAAM,kBAAkB,GAAG,MAAM,CAAC,kBAAkB,CAAC,4BAA4B,CAAC,CAAC;QACnF,MAAM,YAAY,GAAG,MAAM,CAAC,kBAAkB,CAAC,2BAA2B,CAAC,CAAC;QAC5E,IAAI,YAAY,EAAE,CAAC;YAClB,MAAM,IAAI,CAAC,mBAAmB,CAAC,4BAA4B,CAAC,IAAI,EAAE,YAAY,CAAC,CAAC;QACjF,CAAC;QACD,IAAI,kBAAkB,EAAE,CAAC;YACxB,MAAM,IAAI,CAAC,mBAAmB,CAAC,4BAA4B,CAAC,IAAI,CAAC,EAAE,EAAE,kBAAkB,CAAC,CAAC;QAC1F,CAAC;IACF,CAAC;IAEO,KAAK,CAAC,uCAAuC;QACpD,IAAI,IAAI,CAAC,gBAAgB,CAAC,WAAW,EAAE,CAAC;YACvC,MAAM,EAAE,SAAS,EAAE,GAAG,wDAAa,oCAAoC,GAAC,CAAC;YACzE,MAAM,cAAS,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,cAAc,CAAC,EAAE,OAAO,EAAE,oBAAoB,EAAE,CAAC,CAAC;QAClF,CAAC;IACF,CAAC;IAKK,AAAN,KAAK,CAAC,MAAM;QACX,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC;YACtB,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,+CAA+C,CAAC,CAAC;YAClE,OAAO;QACR,CAAC;QACD,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC;QACxB,IAAI,CAAC;YACJ,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,mEAAmE,CAAC,CAAC;YACvF,MAAM,YAAY,GAAG,MAAM,IAAI,CAAC,6BAA6B,CAAC,IAAI,CAAC,CAAC;YACpE,IAAI,YAAY,EAAE,CAAC;gBAClB,IAAI,CAAC,UAAU,GAAG,YAAY,CAAC;gBAC/B,IAAI,CAAC,uBAAuB,GAAG,SAAS,CAAC;YAC1C,CAAC;iBAAM,CAAC;gBACP,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,mEAAmE,CAAC,CAAC;YACvF,CAAC;YACD,MAAM,IAAA,wCAA0B,GAAE,CAAC;YAEnC,MAAM,kBAAkB,GAAG,IAAA,+CAAiC,GAAE,CAAC;YAE/D,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,qBAAqB,kBAAkB,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,UAAU,GAAG,CAAC,CAAC;YAEvF,cAAS,CAAC,GAAG,CAAC,qBAAY,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,YAAY,GAAG,kBAAkB,CAAC;QACxE,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,iEAAiE,EAAE;gBACpF,KAAK;aACL,CAAC,CAAC;QACJ,CAAC;gBAAS,CAAC;YACV,IAAI,CAAC,WAAW,GAAG,KAAK,CAAC;QAC1B,CAAC;IACF,CAAC;IAED,KAAK,CAAC,6BAA6B,CAClC,aAAa,GAAG,KAAK;QAErB,MAAM,YAAY,GAAG,MAAM,IAAI,CAAC,kBAAkB,CAAC,SAAS,CAAC,mCAAuB,CAAC,CAAC;QAEtF,IAAI,YAAY,EAAE,CAAC;YAClB,IAAI,CAAC;gBACJ,MAAM,WAAW,GAAG,IAAA,wBAAS,EAAgB,YAAY,CAAC,KAAK,CAAC,CAAC;gBAEjE,IAAI,WAAW,CAAC,iBAAiB,KAAK,EAAE;oBAAE,OAAO,SAAS,CAAC;gBAE3D,MAAM,UAAU,GAAG,yBAAa,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;gBAEpD,MAAM,YAAY,GAAG,IAAI,GAAG,CAAC,UAAU,CAAC,iBAAiB,CAAC,CAAC;gBAE3D,IAAI,UAAU,CAAC,YAAY,IAAI,aAAa,EAAE,CAAC;oBAC9C,UAAU,CAAC,YAAY,GAAG,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,YAAY,CAAC,CAAC;gBACxE,CAAC;gBACD,OAAO;oBACN,GAAG,UAAU;oBACb,iBAAiB,EAAE,YAAY;iBAC/B,CAAC;YACH,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBAChB,IAAI,CAAC,MAAM,CAAC,IAAI,CACf,yFAAyF,EAEzF,EAAE,KAAK,EAAE,CACT,CAAC;YACH,CAAC;QACF,CAAC;QACD,OAAO,SAAS,CAAC;IAClB,CAAC;IAED,KAAK,CAAC,UAAU,CAAC,aAAa,GAAG,KAAK;QACrC,MAAM,aAAa,GAAG,MAAM,IAAI,CAAC,6BAA6B,CAAC,aAAa,CAAC,CAAC;QAE9E,IAAI,aAAa,EAAE,CAAC;YACnB,OAAO,aAAa,CAAC;QACtB,CAAC;QAED,OAAO,2BAA2B,CAAC;IACpC,CAAC;IAED,KAAK,CAAC,YAAY,CAAC,SAAwB;QAC1C,MAAM,mDAAmD,GACxD,SAAS,CAAC,YAAY;YACtB,CAAC,IAAA,gDAAkC,GAAE;YACrC,CAAC,IAAA,+CAAiC,GAAE,CAAC;QACtC,IAAI,mDAAmD,EAAE,CAAC;YACzD,MAAM,IAAI,2CAAmB,CAC5B,qHAAqH,IAAA,4CAA8B,GAAE,GAAG,CACxJ,CAAC;QACH,CAAC;QAED,IAAI,iBAAsB,CAAC;QAC3B,IAAI,CAAC;YAEJ,iBAAiB,GAAG,IAAI,GAAG,CAAC,SAAS,CAAC,iBAAiB,CAAC,CAAC;QAC1D,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,6CAA6C,SAAS,CAAC,iBAAiB,EAAE,CAAC,CAAC;YAC9F,MAAM,IAAI,wBAAS,CAAC,gDAAgD,CAAC,CAAC;QACvE,CAAC;QACD,IAAI,SAAS,CAAC,YAAY,KAAK,6CAAiC,EAAE,CAAC;YAClE,SAAS,CAAC,YAAY,GAAG,IAAI,CAAC,UAAU,CAAC,YAAY,CAAC;QACvD,CAAC;QACD,IAAI,CAAC;YACJ,MAAM,kBAAkB,GAAG,MAAM,IAAI,CAAC,6BAA6B,CAClE,iBAAiB,EACjB,SAAS,CAAC,QAAQ,EAClB,SAAS,CAAC,YAAY,CACtB,CAAC;YAEF,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,6BAA6B,IAAI,CAAC,SAAS,CAAC,kBAAkB,CAAC,EAAE,CAAC,CAAC;QACtF,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,kCAAkC,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;YACjE,MAAM,IAAI,wBAAS,CAAC,uEAAuE,CAAC,CAAC;QAC9F,CAAC;QACD,MAAM,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC;YAClC,GAAG,EAAE,mCAAuB;YAC5B,KAAK,EAAE,IAAI,CAAC,SAAS,CAAC;gBACrB,GAAG,SAAS;gBACZ,YAAY,EAAE,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,YAAY,CAAC;aACzD,CAAC;YACF,aAAa,EAAE,IAAI;SACnB,CAAC,CAAC;QAOH,IAAI,CAAC,UAAU,GAAG;YACjB,GAAG,SAAS;YACZ,iBAAiB;SACjB,CAAC;QACF,IAAI,CAAC,uBAAuB,GAAG,SAAS,CAAC;QACzC,IAAI,CAAC,MAAM,CAAC,KAAK,CAChB,qBAAqB,IAAI,CAAC,UAAU,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,UAAU,GAAG,CAC7E,CAAC;QAEF,MAAM,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC,UAAU,CAAC,YAAY,CAAC,CAAC;QAE7D,MAAM,IAAI,CAAC,uCAAuC,EAAE,CAAC;IACtD,CAAC;IAEO,KAAK,CAAC,mBAAmB,CAAC,OAAgB;QACjD,MAAM,2BAA2B,GAAG,IAAA,4CAA8B,GAAE,CAAC;QAErE,MAAM,mDAAmD,GACxD,OAAO,IAAI,CAAC,IAAA,gDAAkC,GAAE,IAAI,CAAC,IAAA,+CAAiC,GAAE,CAAC;QAC1F,IAAI,mDAAmD,EAAE,CAAC;YACzD,MAAM,IAAI,2CAAmB,CAC5B,qHAAqH,2BAA2B,GAAG,CACnJ,CAAC;QACH,CAAC;QAED,MAAM,0BAA0B,GAC/B,CAAC,OAAO,IAAI,2BAA2B,KAAK,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,2BAA2B,CAAC;QAE5F,cAAS,CAAC,GAAG,CAAC,qBAAY,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,YAAY,GAAG,OAAO,CAAC;QAC5D,MAAM,IAAA,4CAA8B,EAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,0BAA0B,CAAC,CAAC;IACrF,CAAC;IAaO,KAAK,CAAC,6BAA6B,CAC1C,YAAiB,EACjB,QAAgB,EAChB,YAAoB;QAEpB,MAAM,IAAI,CAAC,gBAAgB,EAAE,CAAC;QAG9B,MAAM,cAAc,GACnB,OAAO,CAAC,GAAG,CAAC,UAAU,IAAI,OAAO,CAAC,GAAG,CAAC,WAAW,IAAI,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC;QAE5E,IAAI,cAAc,EAAE,CAAC;YACpB,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,4CAA4C,EAAE;gBAC/D,UAAU,EAAE,OAAO,CAAC,GAAG,CAAC,UAAU;gBAClC,WAAW,EAAE,OAAO,CAAC,GAAG,CAAC,WAAW;gBACpC,QAAQ,EAAE,OAAO,CAAC,GAAG,CAAC,QAAQ;gBAC9B,SAAS,EAAE,OAAO,CAAC,GAAG,CAAC,SAAS;aAChC,CAAC,CAAC;YAGH,MAAM,UAAU,GAAG,IAAI,0BAAiB,EAAE,CAAC;YAC3C,MAAM,UAAU,GAAkC,KAAK,EAAE,GAAG,EAAE,OAAO,EAAE,EAAE;gBACxE,OAAO,MAAM,KAAK,CAAC,GAAG,EAAE;oBACvB,GAAG,OAAO;oBAEV,UAAU,EAAE,UAAU;iBACtB,CAAC,CAAC;YACJ,CAAC,CAAC;YAGF,MAAM,aAAa,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,SAAS,CACtD,YAAY,EACZ,QAAQ,EACR,YAAY,EACZ,SAAS,EACT;gBACC,CAAC,IAAI,CAAC,YAAY,CAAC,WAAW,CAAC,EAAE,UAAU;aAC3C,CACD,CAAC;YAGF,aAAa,CAAC,IAAI,CAAC,YAAY,CAAC,WAAW,CAAC,GAAG,UAAU,CAAC;YAE1D,OAAO,aAAa,CAAC;QACtB,CAAC;QAED,OAAO,MAAM,IAAI,CAAC,YAAY,CAAC,SAAS,CAAC,YAAY,EAAE,QAAQ,EAAE,YAAY,CAAC,CAAC;IAChF,CAAC;IAEO,KAAK,CAAC,oBAAoB;QACjC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,IACC,IAAI,CAAC,uBAAuB,KAAK,SAAS;YAC1C,GAAG,IAAI,IAAI,CAAC,uBAAuB,CAAC,SAAS,CAAC,OAAO,EAAE;YACvD,IAAI,CAAC,UAAU,CAAC,iBAAiB,CAAC,QAAQ,EAAE;gBAC3C,IAAI,CAAC,uBAAuB,CAAC,iBAAiB,CAAC,QAAQ,EAAE;YAC1D,IAAI,CAAC,UAAU,CAAC,QAAQ,KAAK,IAAI,CAAC,uBAAuB,CAAC,QAAQ;YAClE,IAAI,CAAC,UAAU,CAAC,YAAY,KAAK,IAAI,CAAC,uBAAuB,CAAC,YAAY,EACzE,CAAC;YACF,IAAI,CAAC,uBAAuB,GAAG;gBAC9B,GAAG,IAAI,CAAC,UAAU;gBAClB,aAAa,EAAE,IAAI,CAAC,6BAA6B,CAChD,IAAI,CAAC,UAAU,CAAC,iBAAiB,EACjC,IAAI,CAAC,UAAU,CAAC,QAAQ,EACxB,IAAI,CAAC,UAAU,CAAC,YAAY,CAC5B;gBACD,SAAS,EAAE,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;aAChD,CAAC;QACH,CAAC;QAED,OAAO,MAAM,IAAI,CAAC,uBAAuB,CAAC,aAAa,CAAC;IACzD,CAAC;CACD,CAAA;AArpBY,kCAAW;AAwajB;IADL,IAAA,0BAAa,EAAC,oBAAoB,CAAC;;;;yCA8BnC;sBArcW,WAAW;IADvB,IAAA,YAAO,GAAE;qCAQ6B,uBAAkB;QACd,2BAAsB;QAClC,wBAAU;QACR,qBAAY;QACV,mBAAc;QACtB,iBAAM;QACN,uBAAM;QACF,wBAAU;QACJ,2BAAgB;QACb,6CAAmB;GAhB9C,WAAW,CAqpBvB"}

package/dist/modules/sso-oidc/views/oidc-test-result.d.ts

@@ -0,0 +1,5 @@
+export declare function renderOidcTestSuccess({ userInfo, }: {
+    claims: Record<string, unknown>;
+    userInfo: Record<string, unknown>;
+}): string;
+export declare function renderOidcTestFailure(error: unknown): string;

package/dist/modules/sso-oidc/views/oidc-test-result.js

@@ -0,0 +1,58 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.renderOidcTestSuccess = renderOidcTestSuccess;
+exports.renderOidcTestFailure = renderOidcTestFailure;
+const PAGE_STYLES = `
+body { background: rgb(251,252,254); font-family: 'Open Sans', sans-serif; padding: 10px; margin: auto; width: 500px; top: 40%; position: relative; }
+h1 { font-size: 16px; font-weight: 400; margin: 0 0 10px 0; }
+h2 { color: rgb(0, 0, 0); font-size: 12px; font-weight: 400; margin: 0 0 10px 0; }
+button { border: 1px solid rgb(219, 223, 231); background: rgb(255, 255, 255); border-radius: 4px; padding: 10px; cursor: pointer; }
+ul { border: 1px solid rgb(219, 223, 231); border-radius: 4px; padding: 10px; }
+li { list-style: none; margin: 0; color: rgb(125, 125, 125); font-size: 12px; }
+`;
+function escapeHtml(value) {
+    return String(value ?? '(n/a)')
+        .replace(/&/g, '&')
+        .replace(/</g, '&lt;')
+        .replace(/>/g, '&gt;')
+        .replace(/"/g, '&quot;');
+}
+function renderOidcTestSuccess({ userInfo, }) {
+    const email = escapeHtml(userInfo.email);
+    const firstName = escapeHtml(userInfo.given_name);
+    const lastName = escapeHtml(userInfo.family_name);
+    const sub = escapeHtml(userInfo.sub);
+    return `<!DOCTYPE html>
+<html>
+<head><title>n8n - OIDC Connection Test Result</title><style>${PAGE_STYLES}h1 { color: rgb(0, 0, 0); }</style></head>
+<body>
+<div style="text-align:center">
+	<h1>OIDC Connection Test was successful</h1>
+	<button onclick="window.close()">You can close this window now</button>
+	<p></p>
+	<h2>Here are the attributes returned by your OIDC provider:</h2>
+	<ul>
+		<li><strong>Email:</strong> ${email}</li>
+		<li><strong>First Name:</strong> ${firstName}</li>
+		<li><strong>Last Name:</strong> ${lastName}</li>
+		<li><strong>Subject:</strong> ${sub}</li>
+	</ul>
+</div>
+</body>
+</html>`;
+}
+function renderOidcTestFailure(error) {
+    const message = escapeHtml(error instanceof Error ? error.message : String(error));
+    return `<!DOCTYPE html>
+<html>
+<head><title>n8n - OIDC Connection Test Result</title><style>${PAGE_STYLES}h1 { color: rgb(240, 60, 60); }</style></head>
+<body>
+<div style="text-align:center">
+	<h1>OIDC Connection Test failed</h1>
+	<h2>${message}</h2>
+	<button onclick="window.close()">You can close this window now</button>
+</div>
+</body>
+</html>`;
+}
+//# sourceMappingURL=oidc-test-result.js.map

package/dist/modules/sso-oidc/views/oidc-test-result.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"oidc-test-result.js","sourceRoot":"","sources":["../../../../src/modules/sso-oidc/views/oidc-test-result.ts"],"names":[],"mappings":";;AAiBA,sDA6BC;AAED,sDAcC;AA9DD,MAAM,WAAW,GAAG;;;;;;;CAOnB,CAAC;AAEF,SAAS,UAAU,CAAC,KAAc;IACjC,OAAO,MAAM,CAAC,KAAK,IAAI,OAAO,CAAC;SAC7B,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC;SACtB,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC;SACrB,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC;SACrB,OAAO,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;AAC3B,CAAC;AAED,SAAgB,qBAAqB,CAAC,EACrC,QAAQ,GAIR;IACA,MAAM,KAAK,GAAG,UAAU,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;IACzC,MAAM,SAAS,GAAG,UAAU,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC;IAClD,MAAM,QAAQ,GAAG,UAAU,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;IAClD,MAAM,GAAG,GAAG,UAAU,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;IAErC,OAAO;;+DAEuD,WAAW;;;;;;;;gCAQ1C,KAAK;qCACA,SAAS;oCACV,QAAQ;kCACV,GAAG;;;;QAI7B,CAAC;AACT,CAAC;AAED,SAAgB,qBAAqB,CAAC,KAAc;IACnD,MAAM,OAAO,GAAG,UAAU,CAAC,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;IAEnF,OAAO;;+DAEuD,WAAW;;;;OAInE,OAAO;;;;QAIN,CAAC;AACT,CAAC"}

package/dist/modules/sso-saml/saml-helpers.d.ts

@@ -10,6 +10,7 @@ export declare function updateUserFromSamlAttributes(user: User, attributes: Sam
 type GetMappedSamlReturn = {
     attributes: SamlUserAttributes | undefined;
     missingAttributes: string[];
+    rawAttributes: Record<string, unknown>;
 };
 export declare function getMappedSamlAttributesFromFlowResult(flowResult: FlowResult, attributeMapping: SamlAttributeMapping, jitClaimNames: {
     instanceRole: string | null;

package/dist/modules/sso-saml/saml-helpers.js

@@ -91,9 +91,11 @@ function getMappedSamlAttributesFromFlowResult(flowResult, attributeMapping, jit
     const result = {
         attributes: undefined,
         missingAttributes: [],
+        rawAttributes: {},
     };
     if (flowResult?.extract?.attributes) {
         const attributes = flowResult.extract.attributes;
+        result.rawAttributes = attributes;
         const email = attributes[attributeMapping.email];
         const firstName = attributes[attributeMapping.firstName];
         const lastName = attributes[attributeMapping.lastName];

package/dist/modules/sso-saml/saml-helpers.js.map

@@ -1 +1 @@
-{"version":3,"file":"saml-helpers.js","sourceRoot":"","sources":["../../../src/modules/sso-saml/saml-helpers.ts"],"names":[],"mappings":";;;AAsBA,kDAaC;AAED,8CAEC;AAaD,oEA0BC;AAED,oEA4BC;AAOD,sFA2CC;AAED,0DAEC;AAjKD,wCAA2C;AAE3C,gCAA+E;AAC/E,gCAAoC;AACpC,+CAA4C;AAG5C,oEAAgE;AAChE,0FAAqF;AACrF,kEAA8D;AAC9D,sDAK8B;AAE9B,+DAA8E;AAIvE,KAAK,UAAU,mBAAmB,CAAC,OAAgB;IACzD,MAAM,2BAA2B,GAAG,IAAA,4CAA8B,GAAE,CAAC;IACrE,IAAI,OAAO,IAAI,CAAC,IAAA,gDAAkC,GAAE,IAAI,CAAC,IAAA,+CAAiC,GAAE,EAAE,CAAC;QAC9F,MAAM,IAAI,2CAAmB,CAC5B,qHAAqH,2BAA2B,GAAG,CACnJ,CAAC;IACH,CAAC;IAED,MAAM,0BAA0B,GAC/B,CAAC,OAAO,IAAI,2BAA2B,KAAK,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,2BAA2B,CAAC;IAE5F,cAAS,CAAC,GAAG,CAAC,qBAAY,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,YAAY,GAAG,OAAO,CAAC;IAC5D,MAAM,IAAA,4CAA8B,EAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,0BAA0B,CAAC,CAAC;AACrF,CAAC;AAED,SAAgB,iBAAiB,CAAC,KAAa;IAC9C,cAAS,CAAC,GAAG,CAAC,qBAAY,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,UAAU,GAAG,KAAK,CAAC;AACzD,CAAC;AAEM,MAAM,iBAAiB,GAAG,CAAC,SAAkB,EAAgC,EAAE;IACrF,MAAM,CAAC,GAAG,SAA4B,CAAC;IACvC,OAAO,CACN,OAAO,CAAC,KAAK,QAAQ;QACrB,OAAO,CAAC,CAAC,QAAQ,KAAK,QAAQ;QAC9B,OAAO,CAAC,CAAC,OAAO,KAAK,QAAQ;QAC7B,CAAC,CAAC,OAAO,KAAK,IAAI;QAClB,CAAC,CAAC,YAAY,KAAK,SAAS,CAC5B,CAAC;AACH,CAAC,CAAC;AATW,QAAA,iBAAiB,qBAS5B;AAEK,KAAK,UAAU,4BAA4B,CAAC,UAA8B;IAChF,MAAM,cAAc,GAAG,IAAA,2BAAY,EAAC,EAAE,CAAC,CAAC;IACxC,MAAM,cAAc,GAAG,cAAS,CAAC,GAAG,CAAC,mBAAc,CAAC,CAAC;IACrD,OAAO,MAAM,cAAc,CAAC,OAAO,CAAC,WAAW,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE;QAC7D,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,cAAc,CAAC,qBAAqB,CAC1D;YACC,KAAK,EAAE,UAAU,CAAC,KAAK,CAAC,WAAW,EAAE;YACrC,SAAS,EAAE,UAAU,CAAC,SAAS;YAC/B,QAAQ,EAAE,UAAU,CAAC,QAAQ;YAC7B,IAAI,EAAE,EAAE,IAAI,EAAE,eAAe,EAAE;YAE/B,QAAQ,EAAE,MAAM,cAAS,CAAC,GAAG,CAAC,kCAAe,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC;SACnE,EACD,GAAG,CACH,CAAC;QAEF,MAAM,GAAG,CAAC,IAAI,CACb,GAAG,CAAC,MAAM,CAAC,iBAAY,EAAE;YACxB,UAAU,EAAE,UAAU,CAAC,iBAAiB;YACxC,YAAY,EAAE,MAAM;YACpB,MAAM,EAAE,IAAI,CAAC,EAAE;SACf,CAAC,CACF,CAAC;QAEF,OAAO,IAAI,CAAC;IACb,CAAC,CAAC,CAAC;AACJ,CAAC;AAEM,KAAK,UAAU,4BAA4B,CACjD,IAAU,EACV,UAA8B;IAE9B,IAAI,CAAC,UAAU,CAAC,KAAK;QAAE,MAAM,IAAI,sBAAS,CAAC,kCAAkC,CAAC,CAAC;IAC/E,IAAI,CAAC,IAAI;QAAE,MAAM,IAAI,sBAAS,CAAC,gBAAgB,CAAC,CAAC;IACjD,IAAI,gBAAgB,GAAG,IAAI,EAAE,cAAc,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,YAAY,KAAK,MAAM,CAAC,CAAC;IACnF,IAAI,CAAC,gBAAgB,EAAE,CAAC;QACvB,gBAAgB,GAAG,IAAI,iBAAY,EAAE,CAAC;QACtC,gBAAgB,CAAC,UAAU,GAAG,UAAU,CAAC,iBAAiB,CAAC;QAC3D,gBAAgB,CAAC,YAAY,GAAG,MAAM,CAAC;QACvC,gBAAgB,CAAC,IAAI,GAAG,IAAI,CAAC;QAC7B,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;IAC5C,CAAC;SAAM,CAAC;QACP,gBAAgB,CAAC,UAAU,GAAG,UAAU,CAAC,iBAAiB,CAAC;IAC5D,CAAC;IACD,MAAM,cAAS,CAAC,GAAG,CAAC,2BAAsB,CAAC,CAAC,IAAI,CAAC,gBAAgB,EAAE,EAAE,WAAW,EAAE,KAAK,EAAE,CAAC,CAAC;IAC3F,IAAI,CAAC,SAAS,GAAG,UAAU,CAAC,SAAS,CAAC;IACtC,IAAI,CAAC,QAAQ,GAAG,UAAU,CAAC,QAAQ,CAAC;IACpC,MAAM,UAAU,GAAG,MAAM,cAAS,CAAC,GAAG,CAAC,mBAAc,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,WAAW,EAAE,KAAK,EAAE,CAAC,CAAC;IAC1F,IAAI,CAAC,UAAU;QAAE,MAAM,IAAI,sBAAS,CAAC,uBAAuB,CAAC,CAAC;IAC9D,MAAM,YAAY,GAAG,MAAM,cAAS,CAAC,GAAG,CAAC,mBAAc,CAAC,CAAC,OAAO,CAAC;QAChE,KAAK,EAAE,EAAE,EAAE,EAAE,UAAU,CAAC,EAAE,EAAE;QAC5B,SAAS,EAAE,CAAC,MAAM,CAAC;QACnB,WAAW,EAAE,KAAK;KAClB,CAAC,CAAC;IACH,IAAI,CAAC,YAAY;QAAE,MAAM,IAAI,sBAAS,CAAC,uBAAuB,CAAC,CAAC;IAChE,OAAO,YAAY,CAAC;AACrB,CAAC;AAOD,SAAgB,qCAAqC,CACpD,UAAsB,EACtB,gBAAsC,EACtC,aAGC;IAED,MAAM,MAAM,GAAwB;QACnC,UAAU,EAAE,SAAS;QACrB,iBAAiB,EAAE,EAAc;KACjC,CAAC;IAEF,IAAI,UAAU,EAAE,OAAO,EAAE,UAAU,EAAE,CAAC;QAErC,MAAM,UAAU,GAAG,UAAU,CAAC,OAAO,CAAC,UAAkD,CAAC;QAEzF,MAAM,KAAK,GAAG,UAAU,CAAC,gBAAgB,CAAC,KAAK,CAAW,CAAC;QAC3D,MAAM,SAAS,GAAG,UAAU,CAAC,gBAAgB,CAAC,SAAS,CAAW,CAAC;QACnE,MAAM,QAAQ,GAAG,UAAU,CAAC,gBAAgB,CAAC,QAAQ,CAAW,CAAC;QACjE,MAAM,iBAAiB,GAAG,UAAU,CAAC,gBAAgB,CAAC,iBAAiB,CAAW,CAAC;QAEnF,MAAM,CAAC,UAAU,GAAG;YACnB,KAAK;YACL,SAAS;YACT,QAAQ;YACR,iBAAiB;SACjB,CAAC;QACF,IAAI,aAAa,CAAC,YAAY,IAAI,OAAO,UAAU,CAAC,aAAa,CAAC,YAAY,CAAC,KAAK,QAAQ,EAAE,CAAC;YAC9F,MAAM,CAAC,UAAU,CAAC,eAAe,GAAG,UAAU,CAAC,aAAa,CAAC,YAAY,CAAW,CAAC;QACtF,CAAC;QACD,IAAI,aAAa,CAAC,YAAY,IAAI,UAAU,CAAC,aAAa,CAAC,YAAY,CAAC,EAAE,CAAC;YAC1E,MAAM,0BAA0B,GAAG,UAAU,CAAC,aAAa,CAAC,YAAY,CAAC,CAAC;YAC1E,MAAM,CAAC,UAAU,CAAC,eAAe,GAAG,KAAK,CAAC,OAAO,CAAC,0BAA0B,CAAC;gBAC5E,CAAC,CAAC,0BAA0B;gBAC5B,CAAC,CAAC,CAAC,0BAA0B,CAAC,CAAC;QACjC,CAAC;QACD,IAAI,CAAC,KAAK;YAAE,MAAM,CAAC,iBAAiB,CAAC,IAAI,CAAC,gBAAgB,CAAC,KAAK,CAAC,CAAC;QAClE,IAAI,CAAC,iBAAiB;YAAE,MAAM,CAAC,iBAAiB,CAAC,IAAI,CAAC,gBAAgB,CAAC,iBAAiB,CAAC,CAAC;QAC1F,IAAI,CAAC,SAAS;YAAE,MAAM,CAAC,iBAAiB,CAAC,IAAI,CAAC,gBAAgB,CAAC,SAAS,CAAC,CAAC;QAC1E,IAAI,CAAC,QAAQ;YAAE,MAAM,CAAC,iBAAiB,CAAC,IAAI,CAAC,gBAAgB,CAAC,QAAQ,CAAC,CAAC;IACzE,CAAC;IACD,OAAO,MAAM,CAAC;AACf,CAAC;AAED,SAAgB,uBAAuB,CAAC,OAAmB;IAC1D,OAAO,OAAO,CAAC,UAAU,KAAK,IAAA,2DAAqC,GAAE,CAAC;AACvE,CAAC"}
+{"version":3,"file":"saml-helpers.js","sourceRoot":"","sources":["../../../src/modules/sso-saml/saml-helpers.ts"],"names":[],"mappings":";;;AAsBA,kDAaC;AAED,8CAEC;AAaD,oEA0BC;AAED,oEA4BC;AAQD,sFA6CC;AAED,0DAEC;AApKD,wCAA2C;AAE3C,gCAA+E;AAC/E,gCAAoC;AACpC,+CAA4C;AAG5C,oEAAgE;AAChE,0FAAqF;AACrF,kEAA8D;AAC9D,sDAK8B;AAE9B,+DAA8E;AAIvE,KAAK,UAAU,mBAAmB,CAAC,OAAgB;IACzD,MAAM,2BAA2B,GAAG,IAAA,4CAA8B,GAAE,CAAC;IACrE,IAAI,OAAO,IAAI,CAAC,IAAA,gDAAkC,GAAE,IAAI,CAAC,IAAA,+CAAiC,GAAE,EAAE,CAAC;QAC9F,MAAM,IAAI,2CAAmB,CAC5B,qHAAqH,2BAA2B,GAAG,CACnJ,CAAC;IACH,CAAC;IAED,MAAM,0BAA0B,GAC/B,CAAC,OAAO,IAAI,2BAA2B,KAAK,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,2BAA2B,CAAC;IAE5F,cAAS,CAAC,GAAG,CAAC,qBAAY,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,YAAY,GAAG,OAAO,CAAC;IAC5D,MAAM,IAAA,4CAA8B,EAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,0BAA0B,CAAC,CAAC;AACrF,CAAC;AAED,SAAgB,iBAAiB,CAAC,KAAa;IAC9C,cAAS,CAAC,GAAG,CAAC,qBAAY,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,UAAU,GAAG,KAAK,CAAC;AACzD,CAAC;AAEM,MAAM,iBAAiB,GAAG,CAAC,SAAkB,EAAgC,EAAE;IACrF,MAAM,CAAC,GAAG,SAA4B,CAAC;IACvC,OAAO,CACN,OAAO,CAAC,KAAK,QAAQ;QACrB,OAAO,CAAC,CAAC,QAAQ,KAAK,QAAQ;QAC9B,OAAO,CAAC,CAAC,OAAO,KAAK,QAAQ;QAC7B,CAAC,CAAC,OAAO,KAAK,IAAI;QAClB,CAAC,CAAC,YAAY,KAAK,SAAS,CAC5B,CAAC;AACH,CAAC,CAAC;AATW,QAAA,iBAAiB,qBAS5B;AAEK,KAAK,UAAU,4BAA4B,CAAC,UAA8B;IAChF,MAAM,cAAc,GAAG,IAAA,2BAAY,EAAC,EAAE,CAAC,CAAC;IACxC,MAAM,cAAc,GAAG,cAAS,CAAC,GAAG,CAAC,mBAAc,CAAC,CAAC;IACrD,OAAO,MAAM,cAAc,CAAC,OAAO,CAAC,WAAW,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE;QAC7D,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,cAAc,CAAC,qBAAqB,CAC1D;YACC,KAAK,EAAE,UAAU,CAAC,KAAK,CAAC,WAAW,EAAE;YACrC,SAAS,EAAE,UAAU,CAAC,SAAS;YAC/B,QAAQ,EAAE,UAAU,CAAC,QAAQ;YAC7B,IAAI,EAAE,EAAE,IAAI,EAAE,eAAe,EAAE;YAE/B,QAAQ,EAAE,MAAM,cAAS,CAAC,GAAG,CAAC,kCAAe,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC;SACnE,EACD,GAAG,CACH,CAAC;QAEF,MAAM,GAAG,CAAC,IAAI,CACb,GAAG,CAAC,MAAM,CAAC,iBAAY,EAAE;YACxB,UAAU,EAAE,UAAU,CAAC,iBAAiB;YACxC,YAAY,EAAE,MAAM;YACpB,MAAM,EAAE,IAAI,CAAC,EAAE;SACf,CAAC,CACF,CAAC;QAEF,OAAO,IAAI,CAAC;IACb,CAAC,CAAC,CAAC;AACJ,CAAC;AAEM,KAAK,UAAU,4BAA4B,CACjD,IAAU,EACV,UAA8B;IAE9B,IAAI,CAAC,UAAU,CAAC,KAAK;QAAE,MAAM,IAAI,sBAAS,CAAC,kCAAkC,CAAC,CAAC;IAC/E,IAAI,CAAC,IAAI;QAAE,MAAM,IAAI,sBAAS,CAAC,gBAAgB,CAAC,CAAC;IACjD,IAAI,gBAAgB,GAAG,IAAI,EAAE,cAAc,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,YAAY,KAAK,MAAM,CAAC,CAAC;IACnF,IAAI,CAAC,gBAAgB,EAAE,CAAC;QACvB,gBAAgB,GAAG,IAAI,iBAAY,EAAE,CAAC;QACtC,gBAAgB,CAAC,UAAU,GAAG,UAAU,CAAC,iBAAiB,CAAC;QAC3D,gBAAgB,CAAC,YAAY,GAAG,MAAM,CAAC;QACvC,gBAAgB,CAAC,IAAI,GAAG,IAAI,CAAC;QAC7B,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;IAC5C,CAAC;SAAM,CAAC;QACP,gBAAgB,CAAC,UAAU,GAAG,UAAU,CAAC,iBAAiB,CAAC;IAC5D,CAAC;IACD,MAAM,cAAS,CAAC,GAAG,CAAC,2BAAsB,CAAC,CAAC,IAAI,CAAC,gBAAgB,EAAE,EAAE,WAAW,EAAE,KAAK,EAAE,CAAC,CAAC;IAC3F,IAAI,CAAC,SAAS,GAAG,UAAU,CAAC,SAAS,CAAC;IACtC,IAAI,CAAC,QAAQ,GAAG,UAAU,CAAC,QAAQ,CAAC;IACpC,MAAM,UAAU,GAAG,MAAM,cAAS,CAAC,GAAG,CAAC,mBAAc,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,WAAW,EAAE,KAAK,EAAE,CAAC,CAAC;IAC1F,IAAI,CAAC,UAAU;QAAE,MAAM,IAAI,sBAAS,CAAC,uBAAuB,CAAC,CAAC;IAC9D,MAAM,YAAY,GAAG,MAAM,cAAS,CAAC,GAAG,CAAC,mBAAc,CAAC,CAAC,OAAO,CAAC;QAChE,KAAK,EAAE,EAAE,EAAE,EAAE,UAAU,CAAC,EAAE,EAAE;QAC5B,SAAS,EAAE,CAAC,MAAM,CAAC;QACnB,WAAW,EAAE,KAAK;KAClB,CAAC,CAAC;IACH,IAAI,CAAC,YAAY;QAAE,MAAM,IAAI,sBAAS,CAAC,uBAAuB,CAAC,CAAC;IAChE,OAAO,YAAY,CAAC;AACrB,CAAC;AAQD,SAAgB,qCAAqC,CACpD,UAAsB,EACtB,gBAAsC,EACtC,aAGC;IAED,MAAM,MAAM,GAAwB;QACnC,UAAU,EAAE,SAAS;QACrB,iBAAiB,EAAE,EAAc;QACjC,aAAa,EAAE,EAAE;KACjB,CAAC;IAEF,IAAI,UAAU,EAAE,OAAO,EAAE,UAAU,EAAE,CAAC;QAErC,MAAM,UAAU,GAAG,UAAU,CAAC,OAAO,CAAC,UAAkD,CAAC;QACzF,MAAM,CAAC,aAAa,GAAG,UAAqC,CAAC;QAE7D,MAAM,KAAK,GAAG,UAAU,CAAC,gBAAgB,CAAC,KAAK,CAAW,CAAC;QAC3D,MAAM,SAAS,GAAG,UAAU,CAAC,gBAAgB,CAAC,SAAS,CAAW,CAAC;QACnE,MAAM,QAAQ,GAAG,UAAU,CAAC,gBAAgB,CAAC,QAAQ,CAAW,CAAC;QACjE,MAAM,iBAAiB,GAAG,UAAU,CAAC,gBAAgB,CAAC,iBAAiB,CAAW,CAAC;QAEnF,MAAM,CAAC,UAAU,GAAG;YACnB,KAAK;YACL,SAAS;YACT,QAAQ;YACR,iBAAiB;SACjB,CAAC;QACF,IAAI,aAAa,CAAC,YAAY,IAAI,OAAO,UAAU,CAAC,aAAa,CAAC,YAAY,CAAC,KAAK,QAAQ,EAAE,CAAC;YAC9F,MAAM,CAAC,UAAU,CAAC,eAAe,GAAG,UAAU,CAAC,aAAa,CAAC,YAAY,CAAW,CAAC;QACtF,CAAC;QACD,IAAI,aAAa,CAAC,YAAY,IAAI,UAAU,CAAC,aAAa,CAAC,YAAY,CAAC,EAAE,CAAC;YAC1E,MAAM,0BAA0B,GAAG,UAAU,CAAC,aAAa,CAAC,YAAY,CAAC,CAAC;YAC1E,MAAM,CAAC,UAAU,CAAC,eAAe,GAAG,KAAK,CAAC,OAAO,CAAC,0BAA0B,CAAC;gBAC5E,CAAC,CAAC,0BAA0B;gBAC5B,CAAC,CAAC,CAAC,0BAA0B,CAAC,CAAC;QACjC,CAAC;QACD,IAAI,CAAC,KAAK;YAAE,MAAM,CAAC,iBAAiB,CAAC,IAAI,CAAC,gBAAgB,CAAC,KAAK,CAAC,CAAC;QAClE,IAAI,CAAC,iBAAiB;YAAE,MAAM,CAAC,iBAAiB,CAAC,IAAI,CAAC,gBAAgB,CAAC,iBAAiB,CAAC,CAAC;QAC1F,IAAI,CAAC,SAAS;YAAE,MAAM,CAAC,iBAAiB,CAAC,IAAI,CAAC,gBAAgB,CAAC,SAAS,CAAC,CAAC;QAC1E,IAAI,CAAC,QAAQ;YAAE,MAAM,CAAC,iBAAiB,CAAC,IAAI,CAAC,gBAAgB,CAAC,QAAQ,CAAC,CAAC;IACzE,CAAC;IACD,OAAO,MAAM,CAAC;AACf,CAAC;AAED,SAAgB,uBAAuB,CAAC,OAAmB;IAC1D,OAAO,OAAO,CAAC,UAAU,KAAK,IAAA,2DAAqC,GAAE,CAAC;AACvE,CAAC"}

package/dist/modules/sso-saml/saml.controller.ee.d.ts

@@ -31,6 +31,7 @@ export declare class SamlController {
             };
         };
         relayState: string;
+        metadata?: string | undefined;
         mapping?: {
             email: string;
             firstName: string;
@@ -39,7 +40,6 @@ export declare class SamlController {
             n8nInstanceRole?: string | undefined;
             n8nProjectRoles?: string[] | undefined;
         } | undefined;
-        metadata?: string | undefined;
         metadataUrl?: string | undefined;
         loginEnabled?: boolean | undefined;
         loginLabel?: string | undefined;
@@ -61,6 +61,7 @@ export declare class SamlController {
             };
         };
         relayState: string;
+        metadata?: string | undefined;
         mapping?: {
             email: string;
             firstName: string;
@@ -69,7 +70,6 @@ export declare class SamlController {
             n8nInstanceRole?: string | undefined;
             n8nProjectRoles?: string[] | undefined;
         } | undefined;
-        metadata?: string | undefined;
         metadataUrl?: string | undefined;
         loginEnabled?: boolean | undefined;
         loginLabel?: string | undefined;
@@ -84,5 +84,4 @@ export declare class SamlController {
     }>, res: Response): Promise<string | Response<any, Record<string, any>>>;
     configTestPost(_req: AuthenticatedRequest, res: Response, payload: SamlPreferences): Promise<string | Response<any, Record<string, any>>>;
     private handleInitSSO;
-    private validateRedirectUrl;
 }

package/dist/modules/sso-saml/saml.controller.ee.js

@@ -26,6 +26,7 @@ const auth_error_1 = require("../../errors/response-errors/auth.error");
 const event_service_1 = require("../../events/event.service");
 const response_helper_1 = require("../../response-helper");
 const url_service_1 = require("../../services/url.service");
+const validate_redirect_url_1 = require("../../utils/validate-redirect-url");
 const sso_helpers_1 = require("../../sso.ee/sso-helpers");
 const saml_enabled_middleware_1 = require("./middleware/saml-enabled-middleware");
 const saml_helpers_1 = require("./saml-helpers");
@@ -98,7 +99,7 @@ let SamlController = class SamlController {
                     }
                     else {
                         const safeRedirectUrl = payload.RelayState
-                            ? this.validateRedirectUrl(payload.RelayState)
+                            ? (0, validate_redirect_url_1.validateRedirectUrl)(payload.RelayState)
                             : '/';
                         return res.redirect(this.urlService.getInstanceBaseUrl() + safeRedirectUrl);
                     }
@@ -140,7 +141,7 @@ let SamlController = class SamlController {
         }
         catch {
         }
-        return await this.handleInitSSO(res, this.validateRedirectUrl(redirectUrl));
+        return await this.handleInitSSO(res, (0, validate_redirect_url_1.validateRedirectUrl)(redirectUrl));
     }
     async configTestPost(_req, res, payload) {
         return await this.handleInitSSO(res, (0, service_provider_ee_1.getServiceProviderConfigTestReturnUrl)(), payload);
@@ -165,19 +166,6 @@ let SamlController = class SamlController {
             throw new auth_error_1.AuthError('SAML redirect failed, please check your SAML configuration.');
         }
     }
-    validateRedirectUrl(redirectUrl) {
-        if (typeof redirectUrl !== 'string' || redirectUrl.trim() === '') {
-            return '/';
-        }
-        const trimmed = redirectUrl.trim();
-        if (!trimmed.startsWith('/')) {
-            return '/';
-        }
-        if (trimmed.startsWith('//')) {
-            return '/';
-        }
-        return trimmed;
-    }
 };
 exports.SamlController = SamlController;
 __decorate([