n8n 2.17.3 → 2.18.0

package/dist/modules/sso-oidc/oidc.controller.ee.js

@@ -21,17 +21,19 @@ const decorators_1 = require("@n8n/decorators");
 const auth_service_1 = require("../../auth/auth.service");
 const constants_2 = require("../../constants");
 const bad_request_error_1 = require("../../errors/response-errors/bad-request.error");
+const oidc_instance_settings_loader_1 = require("../../instance-settings-loader/loaders/oidc.instance-settings-loader");
 const url_service_1 = require("../../services/url.service");
 const constants_3 = require("./constants");
 const oidc_service_ee_1 = require("./oidc.service.ee");
 const oidc_test_result_1 = require("./views/oidc-test-result");
 let OidcController = class OidcController {
-    constructor(oidcService, authService, urlService, globalConfig, logger) {
+    constructor(oidcService, authService, urlService, globalConfig, logger, oidcSettingsLoader) {
         this.oidcService = oidcService;
         this.authService = authService;
         this.urlService = urlService;
         this.globalConfig = globalConfig;
         this.logger = logger;
+        this.oidcSettingsLoader = oidcSettingsLoader;
     }
     async retrieveConfiguration(_req) {
         const config = await this.oidcService.loadConfig();
@@ -41,6 +43,9 @@ let OidcController = class OidcController {
         return config;
     }
     async saveConfiguration(_req, _res, payload) {
+        if (this.oidcSettingsLoader.isConfiguredByEnv()) {
+            throw new bad_request_error_1.BadRequestError('OIDC configuration is managed via environment variables and cannot be modified through the UI');
+        }
         await this.oidcService.updateConfig(payload);
         const config = this.oidcService.getRedactedConfig();
         return config;
@@ -155,6 +160,7 @@ exports.OidcController = OidcController = __decorate([
         auth_service_1.AuthService,
         url_service_1.UrlService,
         config_1.GlobalConfig,
-        backend_common_1.Logger])
+        backend_common_1.Logger,
+        oidc_instance_settings_loader_1.OidcInstanceSettingsLoader])
 ], OidcController);
 //# sourceMappingURL=oidc.controller.ee.js.map

package/dist/modules/sso-oidc/oidc.controller.ee.js.map

@@ -1 +1 @@
-{"version":3,"file":"oidc.controller.ee.js","sourceRoot":"","sources":["../../../src/modules/sso-oidc/oidc.controller.ee.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;AAAA,8CAA+C;AAC/C,wDAA6C;AAC7C,wCAA2C;AAC3C,8CAAsC;AAEtC,gDAAyF;AAGzF,sDAAkD;AAClD,2CAA6E;AAC7E,kFAA6E;AAE7E,wDAAoD;AAEpD,2CAAgE;AAChE,uDAAgD;AAChD,+DAAwF;AAGjF,IAAM,cAAc,GAApB,MAAM,cAAc;IAC1B,YACkB,WAAwB,EACxB,WAAwB,EACxB,UAAsB,EACtB,YAA0B,EAC1B,MAAc;QAJd,gBAAW,GAAX,WAAW,CAAa;QACxB,gBAAW,GAAX,WAAW,CAAa;QACxB,eAAU,GAAV,UAAU,CAAY;QACtB,iBAAY,GAAZ,YAAY,CAAc;QAC1B,WAAM,GAAN,MAAM,CAAQ;IAC7B,CAAC;IAKE,AAAN,KAAK,CAAC,qBAAqB,CAAC,IAA0B;QACrD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,UAAU,EAAE,CAAC;QACnD,IAAI,MAAM,CAAC,YAAY,EAAE,CAAC;YACzB,MAAM,CAAC,YAAY,GAAG,6CAAiC,CAAC;QACzD,CAAC;QACD,OAAO,MAAM,CAAC;IACf,CAAC;IAKK,AAAN,KAAK,CAAC,iBAAiB,CACtB,IAA0B,EAC1B,IAAc,EACR,OAAsB;QAE5B,MAAM,IAAI,CAAC,WAAW,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC;QAC7C,MAAM,MAAM,GAAG,IAAI,CAAC,WAAW,CAAC,iBAAiB,EAAE,CAAC;QACpD,OAAO,MAAM,CAAC;IACf,CAAC;IAKK,AAAN,KAAK,CAAC,cAAc,CAAC,IAA0B,EAAE,GAAa;QAC7D,MAAM,aAAa,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,oBAAoB,EAAE,CAAC;QACpE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,MAAM,CAAC;QAE3D,GAAG,CAAC,MAAM,CAAC,kCAAsB,EAAE,aAAa,CAAC,KAAK,EAAE;YACvD,MAAM,EAAE,EAAE,GAAG,gBAAI,CAAC,OAAO,CAAC,cAAc;YACxC,QAAQ,EAAE,IAAI;YACd,QAAQ,EAAE,QAAQ;YAClB,MAAM;SACN,CAAC,CAAC;QACH,GAAG,CAAC,MAAM,CAAC,kCAAsB,EAAE,aAAa,CAAC,KAAK,EAAE;YACvD,MAAM,EAAE,EAAE,GAAG,gBAAI,CAAC,OAAO,CAAC,cAAc;YACxC,QAAQ,EAAE,IAAI;YACd,QAAQ,EAAE,QAAQ;YAClB,MAAM;SACN,CAAC,CAAC;QAEH,OAAO,EAAE,GAAG,EAAE,aAAa,CAAC,GAAG,CAAC,QAAQ,EAAE,EAAE,CAAC;IAC9C,CAAC;IAIK,AAAN,KAAK,CAAC,sBAAsB,CAAC,IAAa,EAAE,GAAa;QACxD,MAAM,aAAa,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,gBAAgB,EAAE,CAAC;QAChE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,MAAM,CAAC;QAE3D,GAAG,CAAC,MAAM,CAAC,kCAAsB,EAAE,aAAa,CAAC,KAAK,EAAE;YACvD,MAAM,EAAE,EAAE,GAAG,gBAAI,CAAC,OAAO,CAAC,cAAc;YACxC,QAAQ,EAAE,IAAI;YACd,QAAQ,EAAE,QAAQ;YAClB,MAAM;SACN,CAAC,CAAC;QACH,GAAG,CAAC,MAAM,CAAC,kCAAsB,EAAE,aAAa,CAAC,KAAK,EAAE;YACvD,MAAM,EAAE,EAAE,GAAG,gBAAI,CAAC,OAAO,CAAC,cAAc;YACxC,QAAQ,EAAE,IAAI;YACd,QAAQ,EAAE,QAAQ;YAClB,MAAM;SACN,CAAC,CAAC;QACH,GAAG,CAAC,QAAQ,CAAC,aAAa,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC,CAAC;IAC5C,CAAC;IAIK,AAAN,KAAK,CAAC,eAAe,CAAC,GAAoB,EAAE,GAAa;QACxD,MAAM,OAAO,GAAG,GAAG,IAAI,CAAC,UAAU,CAAC,kBAAkB,EAAE,GAAG,GAAG,CAAC,WAAW,EAAE,CAAC;QAC5E,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,CAAC;QACrC,MAAM,KAAK,GAAG,GAAG,CAAC,OAAO,CAAC,kCAAsB,CAAC,CAAC;QAElD,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;YAC/B,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,kBAAkB,CAAC,CAAC;YACtC,MAAM,IAAI,mCAAe,CAAC,eAAe,CAAC,CAAC;QAC5C,CAAC;QAED,MAAM,KAAK,GAAG,GAAG,CAAC,OAAO,CAAC,kCAAsB,CAAC,CAAC;QAElD,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;YAC/B,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,kBAAkB,CAAC,CAAC;YACtC,MAAM,IAAI,mCAAe,CAAC,eAAe,CAAC,CAAC;QAC5C,CAAC;QAED,MAAM,SAAS,GAAG,IAAI,CAAC,WAAW,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC;QAEtD,GAAG,CAAC,WAAW,CAAC,kCAAsB,CAAC,CAAC;QACxC,GAAG,CAAC,WAAW,CAAC,kCAAsB,CAAC,CAAC;QAExC,IAAI,SAAS,CAAC,QAAQ,EAAE,CAAC;YACxB,IAAI,CAAC;gBACJ,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,mBAAmB,CAAC,WAAW,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC;gBACrF,OAAO,GAAG,CAAC,IAAI,CAAC,IAAA,wCAAqB,EAAC,MAAM,CAAC,CAAC,CAAC;YAChD,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBAChB,OAAO,GAAG,CAAC,IAAI,CAAC,IAAA,wCAAqB,EAAC,KAAK,CAAC,CAAC,CAAC;YAC/C,CAAC;QACF,CAAC;QAED,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,SAAS,CAAC,WAAW,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC;QAEzE,IAAI,CAAC,WAAW,CAAC,WAAW,CAAC,GAAG,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,CAAC,SAAS,CAAC,CAAC;QAE7D,OAAO,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;IAC1B,CAAC;CACD,CAAA;AApHY,wCAAc;AAYpB;IAHL,IAAA,gBAAG,EAAC,SAAS,CAAC;IACd,IAAA,qBAAQ,EAAC,WAAW,CAAC;IACrB,IAAA,wBAAW,EAAC,aAAa,CAAC;;;;2DAO1B;AAKK;IAHL,IAAA,iBAAI,EAAC,SAAS,CAAC;IACf,IAAA,qBAAQ,EAAC,WAAW,CAAC;IACrB,IAAA,wBAAW,EAAC,aAAa,CAAC;IAIzB,WAAA,iBAAI,CAAA;;qDAAU,yBAAa;;uDAK5B;AAKK;IAHL,IAAA,iBAAI,EAAC,cAAc,CAAC;IACpB,IAAA,qBAAQ,EAAC,WAAW,CAAC;IACrB,IAAA,wBAAW,EAAC,aAAa,CAAC;;;;oDAmB1B;AAIK;IAFL,IAAA,gBAAG,EAAC,QAAQ,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;IACjC,IAAA,qBAAQ,EAAC,WAAW,CAAC;;;;4DAkBrB;AAIK;IAFL,IAAA,gBAAG,EAAC,WAAW,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC;IACzD,IAAA,qBAAQ,EAAC,WAAW,CAAC;;;;qDAqCrB;yBAnHW,cAAc;IAD1B,IAAA,2BAAc,EAAC,WAAW,CAAC;qCAGI,6BAAW;QACX,0BAAW;QACZ,wBAAU;QACR,qBAAY;QAClB,uBAAM;GANpB,cAAc,CAoH1B"}
+{"version":3,"file":"oidc.controller.ee.js","sourceRoot":"","sources":["../../../src/modules/sso-oidc/oidc.controller.ee.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;AAAA,8CAA+C;AAC/C,wDAA6C;AAC7C,wCAA2C;AAC3C,8CAAsC;AAEtC,gDAAyF;AAGzF,sDAAkD;AAClD,2CAA6E;AAC7E,kFAA6E;AAC7E,oHAA8G;AAE9G,wDAAoD;AAEpD,2CAAgE;AAChE,uDAAgD;AAChD,+DAAwF;AAGjF,IAAM,cAAc,GAApB,MAAM,cAAc;IAC1B,YACkB,WAAwB,EACxB,WAAwB,EACxB,UAAsB,EACtB,YAA0B,EAC1B,MAAc,EACd,kBAA8C;QAL9C,gBAAW,GAAX,WAAW,CAAa;QACxB,gBAAW,GAAX,WAAW,CAAa;QACxB,eAAU,GAAV,UAAU,CAAY;QACtB,iBAAY,GAAZ,YAAY,CAAc;QAC1B,WAAM,GAAN,MAAM,CAAQ;QACd,uBAAkB,GAAlB,kBAAkB,CAA4B;IAC7D,CAAC;IAKE,AAAN,KAAK,CAAC,qBAAqB,CAAC,IAA0B;QACrD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,UAAU,EAAE,CAAC;QACnD,IAAI,MAAM,CAAC,YAAY,EAAE,CAAC;YACzB,MAAM,CAAC,YAAY,GAAG,6CAAiC,CAAC;QACzD,CAAC;QACD,OAAO,MAAM,CAAC;IACf,CAAC;IAKK,AAAN,KAAK,CAAC,iBAAiB,CACtB,IAA0B,EAC1B,IAAc,EACR,OAAsB;QAE5B,IAAI,IAAI,CAAC,kBAAkB,CAAC,iBAAiB,EAAE,EAAE,CAAC;YACjD,MAAM,IAAI,mCAAe,CACxB,+FAA+F,CAC/F,CAAC;QACH,CAAC;QACD,MAAM,IAAI,CAAC,WAAW,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC;QAC7C,MAAM,MAAM,GAAG,IAAI,CAAC,WAAW,CAAC,iBAAiB,EAAE,CAAC;QACpD,OAAO,MAAM,CAAC;IACf,CAAC;IAKK,AAAN,KAAK,CAAC,cAAc,CAAC,IAA0B,EAAE,GAAa;QAC7D,MAAM,aAAa,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,oBAAoB,EAAE,CAAC;QACpE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,MAAM,CAAC;QAE3D,GAAG,CAAC,MAAM,CAAC,kCAAsB,EAAE,aAAa,CAAC,KAAK,EAAE;YACvD,MAAM,EAAE,EAAE,GAAG,gBAAI,CAAC,OAAO,CAAC,cAAc;YACxC,QAAQ,EAAE,IAAI;YACd,QAAQ,EAAE,QAAQ;YAClB,MAAM;SACN,CAAC,CAAC;QACH,GAAG,CAAC,MAAM,CAAC,kCAAsB,EAAE,aAAa,CAAC,KAAK,EAAE;YACvD,MAAM,EAAE,EAAE,GAAG,gBAAI,CAAC,OAAO,CAAC,cAAc;YACxC,QAAQ,EAAE,IAAI;YACd,QAAQ,EAAE,QAAQ;YAClB,MAAM;SACN,CAAC,CAAC;QAEH,OAAO,EAAE,GAAG,EAAE,aAAa,CAAC,GAAG,CAAC,QAAQ,EAAE,EAAE,CAAC;IAC9C,CAAC;IAIK,AAAN,KAAK,CAAC,sBAAsB,CAAC,IAAa,EAAE,GAAa;QACxD,MAAM,aAAa,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,gBAAgB,EAAE,CAAC;QAChE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,MAAM,CAAC;QAE3D,GAAG,CAAC,MAAM,CAAC,kCAAsB,EAAE,aAAa,CAAC,KAAK,EAAE;YACvD,MAAM,EAAE,EAAE,GAAG,gBAAI,CAAC,OAAO,CAAC,cAAc;YACxC,QAAQ,EAAE,IAAI;YACd,QAAQ,EAAE,QAAQ;YAClB,MAAM;SACN,CAAC,CAAC;QACH,GAAG,CAAC,MAAM,CAAC,kCAAsB,EAAE,aAAa,CAAC,KAAK,EAAE;YACvD,MAAM,EAAE,EAAE,GAAG,gBAAI,CAAC,OAAO,CAAC,cAAc;YACxC,QAAQ,EAAE,IAAI;YACd,QAAQ,EAAE,QAAQ;YAClB,MAAM;SACN,CAAC,CAAC;QACH,GAAG,CAAC,QAAQ,CAAC,aAAa,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC,CAAC;IAC5C,CAAC;IAIK,AAAN,KAAK,CAAC,eAAe,CAAC,GAAoB,EAAE,GAAa;QACxD,MAAM,OAAO,GAAG,GAAG,IAAI,CAAC,UAAU,CAAC,kBAAkB,EAAE,GAAG,GAAG,CAAC,WAAW,EAAE,CAAC;QAC5E,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,CAAC;QACrC,MAAM,KAAK,GAAG,GAAG,CAAC,OAAO,CAAC,kCAAsB,CAAC,CAAC;QAElD,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;YAC/B,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,kBAAkB,CAAC,CAAC;YACtC,MAAM,IAAI,mCAAe,CAAC,eAAe,CAAC,CAAC;QAC5C,CAAC;QAED,MAAM,KAAK,GAAG,GAAG,CAAC,OAAO,CAAC,kCAAsB,CAAC,CAAC;QAElD,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;YAC/B,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,kBAAkB,CAAC,CAAC;YACtC,MAAM,IAAI,mCAAe,CAAC,eAAe,CAAC,CAAC;QAC5C,CAAC;QAED,MAAM,SAAS,GAAG,IAAI,CAAC,WAAW,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC;QAEtD,GAAG,CAAC,WAAW,CAAC,kCAAsB,CAAC,CAAC;QACxC,GAAG,CAAC,WAAW,CAAC,kCAAsB,CAAC,CAAC;QAExC,IAAI,SAAS,CAAC,QAAQ,EAAE,CAAC;YACxB,IAAI,CAAC;gBACJ,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,mBAAmB,CAAC,WAAW,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC;gBACrF,OAAO,GAAG,CAAC,IAAI,CAAC,IAAA,wCAAqB,EAAC,MAAM,CAAC,CAAC,CAAC;YAChD,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBAChB,OAAO,GAAG,CAAC,IAAI,CAAC,IAAA,wCAAqB,EAAC,KAAK,CAAC,CAAC,CAAC;YAC/C,CAAC;QACF,CAAC;QAED,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,SAAS,CAAC,WAAW,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC;QAEzE,IAAI,CAAC,WAAW,CAAC,WAAW,CAAC,GAAG,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,CAAC,SAAS,CAAC,CAAC;QAE7D,OAAO,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;IAC1B,CAAC;CACD,CAAA;AA1HY,wCAAc;AAapB;IAHL,IAAA,gBAAG,EAAC,SAAS,CAAC;IACd,IAAA,qBAAQ,EAAC,WAAW,CAAC;IACrB,IAAA,wBAAW,EAAC,aAAa,CAAC;;;;2DAO1B;AAKK;IAHL,IAAA,iBAAI,EAAC,SAAS,CAAC;IACf,IAAA,qBAAQ,EAAC,WAAW,CAAC;IACrB,IAAA,wBAAW,EAAC,aAAa,CAAC;IAIzB,WAAA,iBAAI,CAAA;;qDAAU,yBAAa;;uDAU5B;AAKK;IAHL,IAAA,iBAAI,EAAC,cAAc,CAAC;IACpB,IAAA,qBAAQ,EAAC,WAAW,CAAC;IACrB,IAAA,wBAAW,EAAC,aAAa,CAAC;;;;oDAmB1B;AAIK;IAFL,IAAA,gBAAG,EAAC,QAAQ,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;IACjC,IAAA,qBAAQ,EAAC,WAAW,CAAC;;;;4DAkBrB;AAIK;IAFL,IAAA,gBAAG,EAAC,WAAW,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC;IACzD,IAAA,qBAAQ,EAAC,WAAW,CAAC;;;;qDAqCrB;yBAzHW,cAAc;IAD1B,IAAA,2BAAc,EAAC,WAAW,CAAC;qCAGI,6BAAW;QACX,0BAAW;QACZ,wBAAU;QACR,qBAAY;QAClB,uBAAM;QACM,0DAA0B;GAPpD,cAAc,CA0H1B"}

package/dist/modules/token-exchange/controllers/embed-auth.controller.js

@@ -22,6 +22,8 @@ const url_service_1 = require("../../../services/url.service");
 const validate_redirect_url_1 = require("../../../utils/validate-redirect-url");
 const token_exchange_service_1 = require("../services/token-exchange.service");
 const token_exchange_config_1 = require("../token-exchange.config");
+const token_exchange_errors_1 = require("../token-exchange.errors");
+const token_exchange_types_1 = require("../token-exchange.types");
 const di_1 = require("@n8n/di");
 const configService = di_1.Container.get(token_exchange_config_1.TokenExchangeConfig);
 let EmbedAuthController = class EmbedAuthController {
@@ -53,19 +55,30 @@ let EmbedAuthController = class EmbedAuthController {
         return await this.handleLogin(body.token, req, res, body.redirectTo);
     }
     async handleLogin(subjectToken, req, res, redirect) {
-        const { user, subject, issuer, kid } = await this.tokenExchangeService.embedLogin(subjectToken);
-        this.authService.issueCookie(res, user, true, req.browserId, true, {
-            sameSite: 'none',
-            secure: true,
-        });
-        this.eventService.emit('embed-login', {
-            subject,
-            issuer,
-            kid,
-            clientIp: req.ip ?? 'unknown',
-        });
-        const safePath = (0, validate_redirect_url_1.validateRedirectUrl)(redirect ?? '');
-        res.redirect(this.urlService.getInstanceBaseUrl() + safePath);
+        try {
+            const { user, subject, issuer, kid } = await this.tokenExchangeService.embedLogin(subjectToken);
+            this.authService.issueCookie(res, user, true, req.browserId, true, {
+                sameSite: 'none',
+                secure: true,
+            });
+            this.eventService.emit('embed-login', {
+                subject,
+                issuer,
+                kid,
+                clientIp: req.ip ?? 'unknown',
+            });
+            const safePath = (0, validate_redirect_url_1.validateRedirectUrl)(redirect ?? '');
+            res.redirect(this.urlService.getInstanceBaseUrl() + safePath);
+        }
+        catch (error) {
+            this.eventService.emit('embed-login-failed', {
+                failureReason: error instanceof token_exchange_errors_1.TokenExchangeAuthError || error instanceof token_exchange_errors_1.TokenExchangeRequestError
+                    ? error.reason
+                    : token_exchange_types_1.TokenExchangeFailureReason.InternalError,
+                clientIp: req.ip ?? 'unknown',
+            });
+            throw error;
+        }
     }
 };
 exports.EmbedAuthController = EmbedAuthController;

package/dist/modules/token-exchange/controllers/embed-auth.controller.js.map

@@ -1 +1 @@
-{"version":3,"file":"embed-auth.controller.js","sourceRoot":"","sources":["../../../../src/modules/token-exchange/controllers/embed-auth.controller.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;AAAA,8CAAuE;AACvE,8CAAsC;AACtC,gDAAyE;AAGzE,sDAAkD;AAClD,0DAAsD;AAEtD,wDAAoD;AACpD,yEAAoE;AAEpE,+EAA0E;AAC1E,oEAA+D;AAC/D,gCAAoC;AAEpC,MAAM,aAAa,GAAG,cAAS,CAAC,GAAG,CAAC,2CAAmB,CAAC,CAAC;AAGlD,IAAM,mBAAmB,GAAzB,MAAM,mBAAmB;IAC/B,YACkB,MAA2B,EAC3B,oBAA0C,EAC1C,WAAwB,EACxB,UAAsB,EACtB,YAA0B;QAJ1B,WAAM,GAAN,MAAM,CAAqB;QAC3B,yBAAoB,GAApB,oBAAoB,CAAsB;QAC1C,gBAAW,GAAX,WAAW,CAAa;QACxB,eAAU,GAAV,UAAU,CAAY;QACtB,iBAAY,GAAZ,YAAY,CAAc;IACzC,CAAC;IASE,AAAN,KAAK,CAAC,QAAQ,CAAC,GAAoB,EAAE,GAAa,EAAS,KAAyB;QACnF,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,YAAY,EAAE,CAAC;YAC/B,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;gBACpB,KAAK,EAAE,cAAc;gBACrB,iBAAiB,EAAE,6CAA6C;aAChE,CAAC,CAAC;YACH,OAAO;QACR,CAAC;QACD,OAAO,MAAM,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,KAAK,CAAC,UAAU,CAAC,CAAC;IACxE,CAAC;IASK,AAAN,KAAK,CAAC,SAAS,CAAC,GAAoB,EAAE,GAAa,EAAQ,IAAuB;QACjF,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,YAAY,EAAE,CAAC;YAC/B,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;gBACpB,KAAK,EAAE,cAAc;gBACrB,iBAAiB,EAAE,6CAA6C;aAChE,CAAC,CAAC;YACH,OAAO;QACR,CAAC;QACD,OAAO,MAAM,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC;IACtE,CAAC;IAEO,KAAK,CAAC,WAAW,CACxB,YAAoB,EACpB,GAAoB,EACpB,GAAa,EACb,QAAiB;QAEjB,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,GAAG,MAAM,IAAI,CAAC,oBAAoB,CAAC,UAAU,CAAC,YAAY,CAAC,CAAC;QAEhG,IAAI,CAAC,WAAW,CAAC,WAAW,CAAC,GAAG,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,CAAC,SAAS,EAAE,IAAI,EAAE;YAClE,QAAQ,EAAE,MAAM;YAChB,MAAM,EAAE,IAAI;SACZ,CAAC,CAAC;QAEH,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,aAAa,EAAE;YACrC,OAAO;YACP,MAAM;YACN,GAAG;YACH,QAAQ,EAAE,GAAG,CAAC,EAAE,IAAI,SAAS;SAC7B,CAAC,CAAC;QAEH,MAAM,QAAQ,GAAG,IAAA,2CAAmB,EAAC,QAAQ,IAAI,EAAE,CAAC,CAAC;QACrD,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,UAAU,CAAC,kBAAkB,EAAE,GAAG,QAAQ,CAAC,CAAC;IAC/D,CAAC;CACD,CAAA;AApEY,kDAAmB;AAgBzB;IAPL,IAAA,gBAAG,EAAC,GAAG,EAAE;QACT,QAAQ,EAAE,IAAI;QACd,WAAW,EAAE;YACZ,KAAK,EAAE,aAAa,CAAC,mBAAmB;YACxC,QAAQ,EAAE,CAAC,GAAG,gBAAI,CAAC,OAAO,CAAC,cAAc;SACzC;KACD,CAAC;IACmD,WAAA,kBAAK,CAAA;;qDAAQ,8BAAkB;;mDASnF;AASK;IAPL,IAAA,iBAAI,EAAC,GAAG,EAAE;QACV,QAAQ,EAAE,IAAI;QACd,WAAW,EAAE;YACZ,KAAK,EAAE,aAAa,CAAC,mBAAmB;YACxC,QAAQ,EAAE,CAAC,GAAG,gBAAI,CAAC,OAAO,CAAC,cAAc;SACzC;KACD,CAAC;IACoD,WAAA,iBAAI,CAAA;;qDAAO,6BAAiB;;oDASjF;8BA3CW,mBAAmB;IAD/B,IAAA,2BAAc,EAAC,aAAa,CAAC;qCAGH,2CAAmB;QACL,6CAAoB;QAC7B,0BAAW;QACZ,wBAAU;QACR,4BAAY;GANhC,mBAAmB,CAoE/B"}
+{"version":3,"file":"embed-auth.controller.js","sourceRoot":"","sources":["../../../../src/modules/token-exchange/controllers/embed-auth.controller.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;AAAA,8CAAuE;AACvE,8CAAsC;AACtC,gDAAyE;AAGzE,sDAAkD;AAClD,0DAAsD;AAEtD,wDAAoD;AACpD,yEAAoE;AAEpE,+EAA0E;AAC1E,oEAA+D;AAC/D,oEAA6F;AAC7F,kEAAqE;AACrE,gCAAoC;AAEpC,MAAM,aAAa,GAAG,cAAS,CAAC,GAAG,CAAC,2CAAmB,CAAC,CAAC;AAGlD,IAAM,mBAAmB,GAAzB,MAAM,mBAAmB;IAC/B,YACkB,MAA2B,EAC3B,oBAA0C,EAC1C,WAAwB,EACxB,UAAsB,EACtB,YAA0B;QAJ1B,WAAM,GAAN,MAAM,CAAqB;QAC3B,yBAAoB,GAApB,oBAAoB,CAAsB;QAC1C,gBAAW,GAAX,WAAW,CAAa;QACxB,eAAU,GAAV,UAAU,CAAY;QACtB,iBAAY,GAAZ,YAAY,CAAc;IACzC,CAAC;IASE,AAAN,KAAK,CAAC,QAAQ,CAAC,GAAoB,EAAE,GAAa,EAAS,KAAyB;QACnF,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,YAAY,EAAE,CAAC;YAC/B,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;gBACpB,KAAK,EAAE,cAAc;gBACrB,iBAAiB,EAAE,6CAA6C;aAChE,CAAC,CAAC;YACH,OAAO;QACR,CAAC;QACD,OAAO,MAAM,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,KAAK,CAAC,UAAU,CAAC,CAAC;IACxE,CAAC;IASK,AAAN,KAAK,CAAC,SAAS,CAAC,GAAoB,EAAE,GAAa,EAAQ,IAAuB;QACjF,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,YAAY,EAAE,CAAC;YAC/B,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;gBACpB,KAAK,EAAE,cAAc;gBACrB,iBAAiB,EAAE,6CAA6C;aAChE,CAAC,CAAC;YACH,OAAO;QACR,CAAC;QACD,OAAO,MAAM,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC;IACtE,CAAC;IAEO,KAAK,CAAC,WAAW,CACxB,YAAoB,EACpB,GAAoB,EACpB,GAAa,EACb,QAAiB;QAEjB,IAAI,CAAC;YACJ,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,GACnC,MAAM,IAAI,CAAC,oBAAoB,CAAC,UAAU,CAAC,YAAY,CAAC,CAAC;YAE1D,IAAI,CAAC,WAAW,CAAC,WAAW,CAAC,GAAG,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,CAAC,SAAS,EAAE,IAAI,EAAE;gBAClE,QAAQ,EAAE,MAAM;gBAChB,MAAM,EAAE,IAAI;aACZ,CAAC,CAAC;YAEH,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,aAAa,EAAE;gBACrC,OAAO;gBACP,MAAM;gBACN,GAAG;gBACH,QAAQ,EAAE,GAAG,CAAC,EAAE,IAAI,SAAS;aAC7B,CAAC,CAAC;YAEH,MAAM,QAAQ,GAAG,IAAA,2CAAmB,EAAC,QAAQ,IAAI,EAAE,CAAC,CAAC;YACrD,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,UAAU,CAAC,kBAAkB,EAAE,GAAG,QAAQ,CAAC,CAAC;QAC/D,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,oBAAoB,EAAE;gBAC5C,aAAa,EACZ,KAAK,YAAY,8CAAsB,IAAI,KAAK,YAAY,iDAAyB;oBACpF,CAAC,CAAC,KAAK,CAAC,MAAM;oBACd,CAAC,CAAC,iDAA0B,CAAC,aAAa;gBAC5C,QAAQ,EAAE,GAAG,CAAC,EAAE,IAAI,SAAS;aAC7B,CAAC,CAAC;YACH,MAAM,KAAK,CAAC;QACb,CAAC;IACF,CAAC;CACD,CAAA;AAhFY,kDAAmB;AAgBzB;IAPL,IAAA,gBAAG,EAAC,GAAG,EAAE;QACT,QAAQ,EAAE,IAAI;QACd,WAAW,EAAE;YACZ,KAAK,EAAE,aAAa,CAAC,mBAAmB;YACxC,QAAQ,EAAE,CAAC,GAAG,gBAAI,CAAC,OAAO,CAAC,cAAc;SACzC;KACD,CAAC;IACmD,WAAA,kBAAK,CAAA;;qDAAQ,8BAAkB;;mDASnF;AASK;IAPL,IAAA,iBAAI,EAAC,GAAG,EAAE;QACV,QAAQ,EAAE,IAAI;QACd,WAAW,EAAE;YACZ,KAAK,EAAE,aAAa,CAAC,mBAAmB;YACxC,QAAQ,EAAE,CAAC,GAAG,gBAAI,CAAC,OAAO,CAAC,cAAc;SACzC;KACD,CAAC;IACoD,WAAA,iBAAI,CAAA;;qDAAO,6BAAiB;;oDASjF;8BA3CW,mBAAmB;IAD/B,IAAA,2BAAc,EAAC,aAAa,CAAC;qCAGH,2CAAmB;QACL,6CAAoB;QAC7B,0BAAW;QACZ,wBAAU;QACR,4BAAY;GANhC,mBAAmB,CAgF/B"}

package/dist/modules/token-exchange/controllers/token-exchange.controller.js

@@ -20,7 +20,9 @@ const bad_request_error_1 = require("../../../errors/response-errors/bad-request
 const event_service_1 = require("../../../events/event.service");
 const token_exchange_service_1 = require("../services/token-exchange.service");
 const token_exchange_config_1 = require("../token-exchange.config");
+const token_exchange_errors_1 = require("../token-exchange.errors");
 const token_exchange_schemas_1 = require("../token-exchange.schemas");
+const token_exchange_types_1 = require("../token-exchange.types");
 const configService = di_1.Container.get(token_exchange_config_1.TokenExchangeConfig);
 let TokenExchangeController = class TokenExchangeController {
     constructor() {
@@ -79,7 +81,9 @@ let TokenExchangeController = class TokenExchangeController {
             if (error instanceof auth_error_1.AuthError) {
                 this.eventService.emit('token-exchange-failed', {
                     subject: '',
-                    failureReason: error.message,
+                    failureReason: error instanceof token_exchange_errors_1.TokenExchangeAuthError
+                        ? error.reason
+                        : token_exchange_types_1.TokenExchangeFailureReason.Other,
                     grantType: parsed.data.grant_type,
                     clientIp,
                 });
@@ -92,7 +96,9 @@ let TokenExchangeController = class TokenExchangeController {
             if (error instanceof bad_request_error_1.BadRequestError) {
                 this.eventService.emit('token-exchange-failed', {
                     subject: '',
-                    failureReason: error.message,
+                    failureReason: error instanceof token_exchange_errors_1.TokenExchangeRequestError
+                        ? error.reason
+                        : token_exchange_types_1.TokenExchangeFailureReason.InvalidFormat,
                     grantType: parsed.data.grant_type,
                     clientIp,
                 });
@@ -105,7 +111,7 @@ let TokenExchangeController = class TokenExchangeController {
             if (error instanceof zod_1.ZodError) {
                 this.eventService.emit('token-exchange-failed', {
                     subject: '',
-                    failureReason: 'invalid_claims',
+                    failureReason: token_exchange_types_1.TokenExchangeFailureReason.InvalidClaims,
                     grantType: parsed.data.grant_type,
                     clientIp,
                 });
@@ -118,7 +124,7 @@ let TokenExchangeController = class TokenExchangeController {
             this.errorReporter.error(error instanceof Error ? error : new Error(String(error)));
             this.eventService.emit('token-exchange-failed', {
                 subject: '',
-                failureReason: 'internal_error',
+                failureReason: token_exchange_types_1.TokenExchangeFailureReason.InternalError,
                 grantType: parsed.data.grant_type,
                 clientIp,
             });

package/dist/modules/token-exchange/controllers/token-exchange.controller.js.map

@@ -1 +1 @@
-{"version":3,"file":"token-exchange.controller.js","sourceRoot":"","sources":["../../../../src/modules/token-exchange/controllers/token-exchange.controller.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,8CAAsC;AACtC,gDAAuD;AACvD,gCAAoC;AAEpC,uCAAyC;AACzC,6BAAkC;AAElC,oEAAgE;AAChE,kFAA6E;AAC7E,0DAAsD;AAGtD,+EAA0E;AAC1E,oEAA+D;AAC/D,sEAAkG;AAElG,MAAM,aAAa,GAAG,cAAS,CAAC,GAAG,CAAC,2CAAmB,CAAC,CAAC;AAGlD,IAAM,uBAAuB,GAA7B,MAAM,uBAAuB;IAA7B;QACW,WAAM,GAAG,cAAS,CAAC,GAAG,CAAC,2CAAmB,CAAC,CAAC;QAE5C,kBAAa,GAAG,cAAS,CAAC,GAAG,CAAC,wBAAa,CAAC,CAAC;QAE7C,iBAAY,GAAG,cAAS,CAAC,GAAG,CAAC,4BAAY,CAAC,CAAC;QAE3C,yBAAoB,GAAG,cAAS,CAAC,GAAG,CAAC,6CAAoB,CAAC,CAAC;IA6H7E,CAAC;IA/GM,AAAN,KAAK,CAAC,aAAa,CAAC,GAAoB,EAAE,GAAa;QACtD,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YAC1B,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;gBACpB,KAAK,EAAE,cAAc;gBACrB,iBAAiB,EAAE,gDAAgD;aACnE,CAAC,CAAC;YACH,OAAO;QACR,CAAC;QAED,MAAM,QAAQ,GAAG,GAAG,CAAC,EAAE,IAAI,SAAS,CAAC;QAIrC,MAAM,EAAE,IAAI,EAAE,aAAa,EAAE,GAAG,OAAC;aAC/B,MAAM,CAAC,EAAE,UAAU,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,EAAE,CAAC;aAC7C,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACtB,IAAI,aAAa,EAAE,UAAU,KAAK,kDAAyB,EAAE,CAAC;YAC7D,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;gBACpB,KAAK,EAAE,wBAAwB;gBAC/B,iBAAiB,EAAE,uBAAuB,kDAAyB,GAAG;aACtE,CAAC,CAAC;YACH,OAAO;QACR,CAAC;QAGD,MAAM,MAAM,GAAG,mDAA0B,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAC9D,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACrB,MAAM,UAAU,GAAG,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;YAC1C,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;gBACpB,KAAK,EAAE,iBAAiB;gBACxB,iBAAiB,EAAE,UAAU,EAAE,OAAO,IAAI,4BAA4B;aACtE,CAAC,CAAC;YACH,OAAO;QACR,CAAC;QAGD,IAAI,CAAC;YACJ,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,oBAAoB,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;YAErE,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,0BAA0B,EAAE;gBAClD,OAAO,EAAE,MAAM,CAAC,OAAO;gBACvB,KAAK,EAAE,MAAM,CAAC,KAAK;gBACnB,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,KAAK;gBACzB,QAAQ,EAAE,MAAM,CAAC,IAAI,CAAC,QAAQ;gBAC9B,SAAS,EAAE,MAAM,CAAC,IAAI,CAAC,UAAU;gBACjC,QAAQ;gBACR,MAAM,EAAE,MAAM,CAAC,MAAM;aACrB,CAAC,CAAC;YAEH,GAAG,CAAC,IAAI,CAAC;gBACR,YAAY,EAAE,MAAM,CAAC,WAAW;gBAChC,UAAU,EAAE,QAAQ;gBACpB,UAAU,EAAE,MAAM,CAAC,SAAS;gBAC5B,iBAAiB,EAAE,+CAA+C;aAClE,CAAC,CAAC;QACJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,IAAI,KAAK,YAAY,sBAAS,EAAE,CAAC;gBAChC,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,uBAAuB,EAAE;oBAC/C,OAAO,EAAE,EAAE;oBACX,aAAa,EAAE,KAAK,CAAC,OAAO;oBAC5B,SAAS,EAAE,MAAM,CAAC,IAAI,CAAC,UAAU;oBACjC,QAAQ;iBACR,CAAC,CAAC;gBACH,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;oBACpB,KAAK,EAAE,eAAe;oBACtB,iBAAiB,EAAE,uBAAuB;iBAC1C,CAAC,CAAC;gBACH,OAAO;YACR,CAAC;YAED,IAAI,KAAK,YAAY,mCAAe,EAAE,CAAC;gBACtC,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,uBAAuB,EAAE;oBAC/C,OAAO,EAAE,EAAE;oBACX,aAAa,EAAE,KAAK,CAAC,OAAO;oBAC5B,SAAS,EAAE,MAAM,CAAC,IAAI,CAAC,UAAU;oBACjC,QAAQ;iBACR,CAAC,CAAC;gBACH,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;oBACpB,KAAK,EAAE,iBAAiB;oBACxB,iBAAiB,EAAE,KAAK,CAAC,OAAO;iBAChC,CAAC,CAAC;gBACH,OAAO;YACR,CAAC;YAED,IAAI,KAAK,YAAY,cAAQ,EAAE,CAAC;gBAC/B,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,uBAAuB,EAAE;oBAC/C,OAAO,EAAE,EAAE;oBACX,aAAa,EAAE,gBAAgB;oBAC/B,SAAS,EAAE,MAAM,CAAC,IAAI,CAAC,UAAU;oBACjC,QAAQ;iBACR,CAAC,CAAC;gBACH,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;oBACpB,KAAK,EAAE,iBAAiB;oBACxB,iBAAiB,EAAE,gCAAgC;iBACnD,CAAC,CAAC;gBACH,OAAO;YACR,CAAC;YAED,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;YACpF,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,uBAAuB,EAAE;gBAC/C,OAAO,EAAE,EAAE;gBACX,aAAa,EAAE,gBAAgB;gBAC/B,SAAS,EAAE,MAAM,CAAC,IAAI,CAAC,UAAU;gBACjC,QAAQ;aACR,CAAC,CAAC;YACH,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;gBACpB,KAAK,EAAE,cAAc;gBACrB,iBAAiB,EAAE,oDAAoD;aACvE,CAAC,CAAC;QACJ,CAAC;IACF,CAAC;CACD,CAAA;AApIY,0DAAuB;AAqB7B;IAPL,IAAA,iBAAI,EAAC,QAAQ,EAAE;QACf,QAAQ,EAAE,IAAI;QACd,WAAW,EAAE;YACZ,KAAK,EAAE,aAAa,CAAC,sBAAsB;YAC3C,QAAQ,EAAE,CAAC,GAAG,gBAAI,CAAC,OAAO,CAAC,cAAc;SACzC;KACD,CAAC;;;;4DA+GD;kCAnIW,uBAAuB;IADnC,IAAA,2BAAc,EAAC,aAAa,CAAC;GACjB,uBAAuB,CAoInC"}
+{"version":3,"file":"token-exchange.controller.js","sourceRoot":"","sources":["../../../../src/modules/token-exchange/controllers/token-exchange.controller.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,8CAAsC;AACtC,gDAAuD;AACvD,gCAAoC;AAEpC,uCAAyC;AACzC,6BAAkC;AAElC,oEAAgE;AAChE,kFAA6E;AAC7E,0DAAsD;AAGtD,+EAA0E;AAC1E,oEAA+D;AAC/D,oEAA6F;AAC7F,sEAAkG;AAClG,kEAAqE;AAErE,MAAM,aAAa,GAAG,cAAS,CAAC,GAAG,CAAC,2CAAmB,CAAC,CAAC;AAGlD,IAAM,uBAAuB,GAA7B,MAAM,uBAAuB;IAA7B;QACW,WAAM,GAAG,cAAS,CAAC,GAAG,CAAC,2CAAmB,CAAC,CAAC;QAE5C,kBAAa,GAAG,cAAS,CAAC,GAAG,CAAC,wBAAa,CAAC,CAAC;QAE7C,iBAAY,GAAG,cAAS,CAAC,GAAG,CAAC,4BAAY,CAAC,CAAC;QAE3C,yBAAoB,GAAG,cAAS,CAAC,GAAG,CAAC,6CAAoB,CAAC,CAAC;IAmI7E,CAAC;IArHM,AAAN,KAAK,CAAC,aAAa,CAAC,GAAoB,EAAE,GAAa;QACtD,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YAC1B,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;gBACpB,KAAK,EAAE,cAAc;gBACrB,iBAAiB,EAAE,gDAAgD;aACnE,CAAC,CAAC;YACH,OAAO;QACR,CAAC;QAED,MAAM,QAAQ,GAAG,GAAG,CAAC,EAAE,IAAI,SAAS,CAAC;QAIrC,MAAM,EAAE,IAAI,EAAE,aAAa,EAAE,GAAG,OAAC;aAC/B,MAAM,CAAC,EAAE,UAAU,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,EAAE,CAAC;aAC7C,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACtB,IAAI,aAAa,EAAE,UAAU,KAAK,kDAAyB,EAAE,CAAC;YAC7D,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;gBACpB,KAAK,EAAE,wBAAwB;gBAC/B,iBAAiB,EAAE,uBAAuB,kDAAyB,GAAG;aACtE,CAAC,CAAC;YACH,OAAO;QACR,CAAC;QAGD,MAAM,MAAM,GAAG,mDAA0B,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAC9D,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACrB,MAAM,UAAU,GAAG,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;YAC1C,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;gBACpB,KAAK,EAAE,iBAAiB;gBACxB,iBAAiB,EAAE,UAAU,EAAE,OAAO,IAAI,4BAA4B;aACtE,CAAC,CAAC;YACH,OAAO;QACR,CAAC;QAGD,IAAI,CAAC;YACJ,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,oBAAoB,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;YAErE,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,0BAA0B,EAAE;gBAClD,OAAO,EAAE,MAAM,CAAC,OAAO;gBACvB,KAAK,EAAE,MAAM,CAAC,KAAK;gBACnB,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,KAAK;gBACzB,QAAQ,EAAE,MAAM,CAAC,IAAI,CAAC,QAAQ;gBAC9B,SAAS,EAAE,MAAM,CAAC,IAAI,CAAC,UAAU;gBACjC,QAAQ;gBACR,MAAM,EAAE,MAAM,CAAC,MAAM;aACrB,CAAC,CAAC;YAEH,GAAG,CAAC,IAAI,CAAC;gBACR,YAAY,EAAE,MAAM,CAAC,WAAW;gBAChC,UAAU,EAAE,QAAQ;gBACpB,UAAU,EAAE,MAAM,CAAC,SAAS;gBAC5B,iBAAiB,EAAE,+CAA+C;aAClE,CAAC,CAAC;QACJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,IAAI,KAAK,YAAY,sBAAS,EAAE,CAAC;gBAChC,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,uBAAuB,EAAE;oBAC/C,OAAO,EAAE,EAAE;oBACX,aAAa,EACZ,KAAK,YAAY,8CAAsB;wBACtC,CAAC,CAAC,KAAK,CAAC,MAAM;wBACd,CAAC,CAAC,iDAA0B,CAAC,KAAK;oBACpC,SAAS,EAAE,MAAM,CAAC,IAAI,CAAC,UAAU;oBACjC,QAAQ;iBACR,CAAC,CAAC;gBACH,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;oBACpB,KAAK,EAAE,eAAe;oBACtB,iBAAiB,EAAE,uBAAuB;iBAC1C,CAAC,CAAC;gBACH,OAAO;YACR,CAAC;YAED,IAAI,KAAK,YAAY,mCAAe,EAAE,CAAC;gBACtC,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,uBAAuB,EAAE;oBAC/C,OAAO,EAAE,EAAE;oBACX,aAAa,EACZ,KAAK,YAAY,iDAAyB;wBACzC,CAAC,CAAC,KAAK,CAAC,MAAM;wBACd,CAAC,CAAC,iDAA0B,CAAC,aAAa;oBAC5C,SAAS,EAAE,MAAM,CAAC,IAAI,CAAC,UAAU;oBACjC,QAAQ;iBACR,CAAC,CAAC;gBACH,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;oBACpB,KAAK,EAAE,iBAAiB;oBACxB,iBAAiB,EAAE,KAAK,CAAC,OAAO;iBAChC,CAAC,CAAC;gBACH,OAAO;YACR,CAAC;YAED,IAAI,KAAK,YAAY,cAAQ,EAAE,CAAC;gBAC/B,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,uBAAuB,EAAE;oBAC/C,OAAO,EAAE,EAAE;oBACX,aAAa,EAAE,iDAA0B,CAAC,aAAa;oBACvD,SAAS,EAAE,MAAM,CAAC,IAAI,CAAC,UAAU;oBACjC,QAAQ;iBACR,CAAC,CAAC;gBACH,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;oBACpB,KAAK,EAAE,iBAAiB;oBACxB,iBAAiB,EAAE,gCAAgC;iBACnD,CAAC,CAAC;gBACH,OAAO;YACR,CAAC;YAED,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;YACpF,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,uBAAuB,EAAE;gBAC/C,OAAO,EAAE,EAAE;gBACX,aAAa,EAAE,iDAA0B,CAAC,aAAa;gBACvD,SAAS,EAAE,MAAM,CAAC,IAAI,CAAC,UAAU;gBACjC,QAAQ;aACR,CAAC,CAAC;YACH,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;gBACpB,KAAK,EAAE,cAAc;gBACrB,iBAAiB,EAAE,oDAAoD;aACvE,CAAC,CAAC;QACJ,CAAC;IACF,CAAC;CACD,CAAA;AA1IY,0DAAuB;AAqB7B;IAPL,IAAA,iBAAI,EAAC,QAAQ,EAAE;QACf,QAAQ,EAAE,IAAI;QACd,WAAW,EAAE;YACZ,KAAK,EAAE,aAAa,CAAC,sBAAsB;YAC3C,QAAQ,EAAE,CAAC,GAAG,gBAAI,CAAC,OAAO,CAAC,cAAc;SACzC;KACD,CAAC;;;;4DAqHD;kCAzIW,uBAAuB;IADnC,IAAA,2BAAc,EAAC,aAAa,CAAC;GACjB,uBAAuB,CA0InC"}

package/dist/modules/token-exchange/services/identity-resolution.service.js

@@ -13,9 +13,10 @@ exports.IdentityResolutionService = void 0;
 const backend_common_1 = require("@n8n/backend-common");
 const db_1 = require("@n8n/db");
 const di_1 = require("@n8n/di");
-const auth_error_1 = require("../../../errors/response-errors/auth.error");
 const event_service_1 = require("../../../events/event.service");
 const user_service_1 = require("../../../services/user.service");
+const token_exchange_errors_1 = require("../token-exchange.errors");
+const token_exchange_types_1 = require("../token-exchange.types");
 const INVALID_PASSWORD_PLACEHOLDER = '!token-exchange-no-password';
 const MAX_NAME_LENGTH = 32;
 function isGlobalRole(role) {
@@ -51,7 +52,7 @@ let IdentityResolutionService = class IdentityResolutionService {
             }
         }
         if (!email) {
-            throw new auth_error_1.AuthError('Email claim is required for user provisioning');
+            throw new token_exchange_errors_1.TokenExchangeAuthError(token_exchange_types_1.TokenExchangeFailureReason.InvalidClaims, 'Email claim is required for user provisioning');
         }
         return await this.provisionUser(claims, email, allowedRoles, tokenContext);
     }
@@ -122,7 +123,7 @@ let IdentityResolutionService = class IdentityResolutionService {
             return undefined;
         }
         if (allowedRoles && allowedRoles.length > 0 && !allowedRoles.includes(role)) {
-            throw new auth_error_1.AuthError(`Role '${role}' is not allowed for this token exchange key`);
+            throw new token_exchange_errors_1.TokenExchangeAuthError(token_exchange_types_1.TokenExchangeFailureReason.RoleNotAllowed, `Role '${role}' is not allowed for this token exchange key`);
         }
         return role;
     }
@@ -131,13 +132,13 @@ let IdentityResolutionService = class IdentityResolutionService {
             return undefined;
         const role = roleClaim;
         if (role === 'global:owner') {
-            throw new auth_error_1.AuthError('Cannot provision global:owner role via token exchange');
+            throw new token_exchange_errors_1.TokenExchangeAuthError(token_exchange_types_1.TokenExchangeFailureReason.RoleNotAllowed, 'Cannot provision global:owner role via token exchange');
         }
         if (!isGlobalRole(role)) {
-            throw new auth_error_1.AuthError(`Unrecognized role '${role}' cannot be assigned to new user`);
+            throw new token_exchange_errors_1.TokenExchangeAuthError(token_exchange_types_1.TokenExchangeFailureReason.RoleNotAllowed, `Unrecognized role '${role}' cannot be assigned to new user`);
         }
         if (allowedRoles && allowedRoles.length > 0 && !allowedRoles.includes(role)) {
-            throw new auth_error_1.AuthError(`Role '${role}' is not allowed for this token exchange key`);
+            throw new token_exchange_errors_1.TokenExchangeAuthError(token_exchange_types_1.TokenExchangeFailureReason.RoleNotAllowed, `Role '${role}' is not allowed for this token exchange key`);
         }
         return role;
     }

package/dist/modules/token-exchange/services/identity-resolution.service.js.map

@@ -1 +1 @@
-{"version":3,"file":"identity-resolution.service.js","sourceRoot":"","sources":["../../../../src/modules/token-exchange/services/identity-resolution.service.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,wDAA6C;AAC7C,gCAOiB;AACjB,gCAAkC;AAElC,oEAAgE;AAChE,0DAAsD;AACtD,0DAAsD;AAStD,MAAM,4BAA4B,GAAG,6BAA6B,CAAC;AAGnE,MAAM,eAAe,GAAG,EAAE,CAAC;AAI3B,SAAS,YAAY,CAAC,IAAY;IACjC,OAAO,IAAI,IAAI,iBAAY,CAAC;AAC7B,CAAC;AAED,SAAS,QAAQ,CAAC,KAAyB,EAAE,QAAQ,GAAG,EAAE;IACzD,OAAO,CAAC,KAAK,IAAI,QAAQ,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,eAAe,CAAC,CAAC;AACtD,CAAC;AAGM,IAAM,yBAAyB,GAA/B,MAAM,yBAAyB;IAGrC,YACC,MAAc,EACG,cAA8B,EAC9B,sBAA8C,EAC9C,YAA0B,EAC1B,WAAwB;QAHxB,mBAAc,GAAd,cAAc,CAAgB;QAC9B,2BAAsB,GAAtB,sBAAsB,CAAwB;QAC9C,iBAAY,GAAZ,YAAY,CAAc;QAC1B,gBAAW,GAAX,WAAW,CAAa;QAEzC,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC;IAC/C,CAAC;IAcD,KAAK,CAAC,OAAO,CACZ,MAA2B,EAC3B,YAAuB,EACvB,YAA8C;QAE9C,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,EAAE,WAAW,EAAE,CAAC;QAG1C,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,sBAAsB,CAAC,OAAO,CAAC;YAC1D,KAAK,EAAE,EAAE,UAAU,EAAE,MAAM,CAAC,GAAG,EAAE,YAAY,EAAE,gBAAgB,EAAE;YACjE,SAAS,EAAE,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE;SACnC,CAAC,CAAC;QAEH,IAAI,QAAQ,EAAE,CAAC;YACd,OAAO,MAAM,IAAI,CAAC,iBAAiB,CAAC,MAAM,EAAE,QAAQ,EAAE,YAAY,EAAE,YAAY,CAAC,CAAC;QACnF,CAAC;QAGD,IAAI,KAAK,EAAE,CAAC;YACX,MAAM,YAAY,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,OAAO,CAAC;gBACtD,KAAK,EAAE,EAAE,KAAK,EAAE;gBAChB,SAAS,EAAE,CAAC,gBAAgB,EAAE,MAAM,CAAC;aACrC,CAAC,CAAC;YAEH,IAAI,YAAY,EAAE,CAAC;gBAClB,OAAO,MAAM,IAAI,CAAC,cAAc,CAAC,MAAM,EAAE,KAAK,EAAE,YAAY,EAAE,YAAY,EAAE,YAAY,CAAC,CAAC;YAC3F,CAAC;QACF,CAAC;QAGD,IAAI,CAAC,KAAK,EAAE,CAAC;YACZ,MAAM,IAAI,sBAAS,CAAC,+CAA+C,CAAC,CAAC;QACtE,CAAC;QAED,OAAO,MAAM,IAAI,CAAC,aAAa,CAAC,MAAM,EAAE,KAAK,EAAE,YAAY,EAAE,YAAY,CAAC,CAAC;IAC5E,CAAC;IAGO,KAAK,CAAC,iBAAiB,CAC9B,MAA2B,EAC3B,QAAsB,EACtB,YAAkC,EAClC,YAAyD;QAEzD,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,gCAAgC,EAAE,EAAE,GAAG,EAAE,MAAM,CAAC,GAAG,EAAE,CAAC,CAAC;QACzE,MAAM,YAAY,GAAG,IAAI,CAAC,0BAA0B,CACnD,MAAM,CAAC,IAAI,EACX,YAAY,EACZ,QAAQ,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CACxB,CAAC;QACF,OAAO,MAAM,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,EAAE,YAAY,EAAE,YAAY,CAAC,CAAC;IAClF,CAAC;IAGO,KAAK,CAAC,cAAc,CAC3B,MAA2B,EAC3B,KAAa,EACb,YAAkB,EAClB,YAAkC,EAClC,YAAyD;QAEzD,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,qDAAqD,EAAE;YACxE,GAAG,EAAE,MAAM,CAAC,GAAG;YACf,KAAK;SACL,CAAC,CAAC;QACH,MAAM,YAAY,GAAG,IAAI,CAAC,0BAA0B,CACnD,MAAM,CAAC,IAAI,EACX,YAAY,EACZ,YAAY,CAAC,IAAI,EAAE,IAAI,CACvB,CAAC;QACF,MAAM,IAAI,CAAC,sBAAsB,CAAC,IAAI,CACrC,iBAAY,CAAC,MAAM,CAAC,YAAY,EAAE,MAAM,CAAC,GAAG,EAAE,gBAAgB,CAAC,CAC/D,CAAC;QACF,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,gCAAgC,EAAE;YACxD,MAAM,EAAE,YAAY,CAAC,EAAE;YACvB,GAAG,EAAE,MAAM,CAAC,GAAG;YACf,KAAK;YACL,GAAG,EAAE,YAAY,EAAE,GAAG,IAAI,EAAE;YAC5B,MAAM,EAAE,YAAY,EAAE,MAAM,IAAI,MAAM,CAAC,GAAG;SAC1C,CAAC,CAAC;QACH,OAAO,MAAM,IAAI,CAAC,WAAW,CAAC,YAAY,EAAE,MAAM,EAAE,YAAY,EAAE,YAAY,CAAC,CAAC;IACjF,CAAC;IAGO,KAAK,CAAC,aAAa,CAC1B,MAA2B,EAC3B,KAAa,EACb,YAAkC,EAClC,YAAyD;QAEzD,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,2BAA2B,EAAE,EAAE,GAAG,EAAE,MAAM,CAAC,GAAG,EAAE,KAAK,EAAE,CAAC,CAAC;QAE3E,MAAM,OAAO,GAAG,IAAI,CAAC,qBAAqB,CAAC,MAAM,CAAC,IAAI,EAAE,YAAY,CAAC,CAAC;QACtE,MAAM,UAAU,GAAG,OAAO,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,uBAAkB,CAAC;QAEpE,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,OAAO,CAAC,WAAW,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE;YACxE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,qBAAqB,CACxE;gBACC,KAAK;gBACL,SAAS,EAAE,QAAQ,CAAC,MAAM,CAAC,UAAU,CAAC;gBACtC,QAAQ,EAAE,QAAQ,CAAC,MAAM,CAAC,WAAW,CAAC;gBACtC,IAAI,EAAE,UAAU;gBAChB,QAAQ,EAAE,4BAA4B;aACtC,EACD,GAAG,CACH,CAAC;YAEF,MAAM,GAAG,CAAC,IAAI,CACb,GAAG,CAAC,MAAM,CAAC,iBAAY,EAAE;gBACxB,UAAU,EAAE,MAAM,CAAC,GAAG;gBACtB,YAAY,EAAE,gBAAgB;gBAC9B,MAAM,EAAE,OAAO,CAAC,EAAE;aAClB,CAAC,CACF,CAAC;YAEF,OAAO,OAAO,CAAC;QAChB,CAAC,CAAC,CAAC;QAEH,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,iCAAiC,EAAE;YACzD,MAAM,EAAE,IAAI,CAAC,EAAE;YACf,GAAG,EAAE,MAAM,CAAC,GAAG;YACf,KAAK;YACL,IAAI,EAAE,UAAU,CAAC,IAAI;YACrB,GAAG,EAAE,YAAY,EAAE,GAAG,IAAI,EAAE;YAC5B,MAAM,EAAE,YAAY,EAAE,MAAM,IAAI,MAAM,CAAC,GAAG;SAC1C,CAAC,CAAC;QAEH,OAAO,IAAI,CAAC;IACb,CAAC;IAUO,0BAA0B,CACjC,SAAsC,EACtC,YAAkC,EAClC,WAA+B;QAE/B,IAAI,SAAS,KAAK,SAAS;YAAE,OAAO,SAAS,CAAC;QAG9C,IAAI,WAAW,KAAK,cAAc,EAAE,CAAC;YACpC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,uCAAuC,CAAC,CAAC;YAC3D,OAAO,SAAS,CAAC;QAClB,CAAC;QAED,MAAM,IAAI,GAAG,SAAS,CAAC;QAGvB,IAAI,IAAI,KAAK,cAAc,EAAE,CAAC;YAC7B,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,oDAAoD,CAAC,CAAC;YACvE,OAAO,SAAS,CAAC;QAClB,CAAC;QAED,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,EAAE,CAAC;YACzB,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,4BAA4B,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;YACzD,OAAO,SAAS,CAAC;QAClB,CAAC;QAED,IAAI,YAAY,IAAI,YAAY,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;YAC7E,MAAM,IAAI,sBAAS,CAAC,SAAS,IAAI,8CAA8C,CAAC,CAAC;QAClF,CAAC;QAED,OAAO,IAAI,CAAC;IACb,CAAC;IASO,qBAAqB,CAC5B,SAAsC,EACtC,YAAkC;QAElC,IAAI,SAAS,KAAK,SAAS;YAAE,OAAO,SAAS,CAAC;QAE9C,MAAM,IAAI,GAAG,SAAS,CAAC;QAEvB,IAAI,IAAI,KAAK,cAAc,EAAE,CAAC;YAC7B,MAAM,IAAI,sBAAS,CAAC,uDAAuD,CAAC,CAAC;QAC9E,CAAC;QAED,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,EAAE,CAAC;YACzB,MAAM,IAAI,sBAAS,CAAC,sBAAsB,IAAI,kCAAkC,CAAC,CAAC;QACnF,CAAC;QAED,IAAI,YAAY,IAAI,YAAY,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;YAC7E,MAAM,IAAI,sBAAS,CAAC,SAAS,IAAI,8CAA8C,CAAC,CAAC;QAClF,CAAC;QAED,OAAO,IAAI,CAAC;IACb,CAAC;IAOO,KAAK,CAAC,WAAW,CACxB,IAAU,EACV,MAA2B,EAC3B,YAA4B,EAC5B,YAA8C;QAE9C,IAAI,WAAW,GAAG,KAAK,CAAC;QAGxB,MAAM,cAAc,GAAkD,EAAE,CAAC;QAEzE,IAAI,MAAM,CAAC,UAAU,KAAK,SAAS,EAAE,CAAC;YACrC,MAAM,OAAO,GAAG,QAAQ,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;YAC5C,IAAI,OAAO,KAAK,IAAI,CAAC,SAAS,EAAE,CAAC;gBAChC,cAAc,CAAC,SAAS,GAAG,OAAO,CAAC;YACpC,CAAC;QACF,CAAC;QAED,IAAI,MAAM,CAAC,WAAW,KAAK,SAAS,EAAE,CAAC;YACtC,MAAM,OAAO,GAAG,QAAQ,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;YAC7C,IAAI,OAAO,KAAK,IAAI,CAAC,QAAQ,EAAE,CAAC;gBAC/B,cAAc,CAAC,QAAQ,GAAG,OAAO,CAAC;YACnC,CAAC;QACF,CAAC;QAED,IAAI,MAAM,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC5C,MAAM,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,EAAE,cAAc,CAAC,CAAC;YAC1D,WAAW,GAAG,IAAI,CAAC;QACpB,CAAC;QAGD,MAAM,YAAY,GAAG,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC;QACrC,IAAI,YAAY,IAAI,YAAY,KAAK,YAAY,EAAE,CAAC;YACnD,MAAM,IAAI,CAAC,WAAW,CAAC,cAAc,CAAC,IAAI,EAAE,EAAE,WAAW,EAAE,YAAY,EAAE,CAAC,CAAC;YAC3E,WAAW,GAAG,IAAI,CAAC;YAEnB,IAAI,YAAY,EAAE,CAAC;gBAClB,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,6BAA6B,EAAE;oBACrD,MAAM,EAAE,IAAI,CAAC,EAAE;oBACf,YAAY;oBACZ,OAAO,EAAE,YAAY;oBACrB,GAAG,EAAE,YAAY,EAAE,GAAG,IAAI,EAAE;oBAC5B,MAAM,EAAE,YAAY,EAAE,MAAM,IAAI,MAAM,CAAC,GAAG;iBAC1C,CAAC,CAAC;YACJ,CAAC;QACF,CAAC;QAED,IAAI,WAAW,EAAE,CAAC;YACjB,OAAO,MAAM,IAAI,CAAC,cAAc,CAAC,aAAa,CAAC;gBAC9C,KAAK,EAAE,EAAE,EAAE,EAAE,IAAI,CAAC,EAAE,EAAE;gBACtB,SAAS,EAAE,CAAC,MAAM,CAAC;aACnB,CAAC,CAAC;QACJ,CAAC;QAED,OAAO,IAAI,CAAC;IACb,CAAC;CACD,CAAA;AA/RY,8DAAyB;oCAAzB,yBAAyB;IADrC,IAAA,YAAO,GAAE;qCAKA,uBAAM;QACmB,mBAAc;QACN,2BAAsB;QAChC,4BAAY;QACb,0BAAW;GAR9B,yBAAyB,CA+RrC"}
+{"version":3,"file":"identity-resolution.service.js","sourceRoot":"","sources":["../../../../src/modules/token-exchange/services/identity-resolution.service.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,wDAA6C;AAC7C,gCAOiB;AACjB,gCAAkC;AAElC,0DAAsD;AACtD,0DAAsD;AAEtD,oEAAkE;AAElE,kEAAqE;AAOrE,MAAM,4BAA4B,GAAG,6BAA6B,CAAC;AAGnE,MAAM,eAAe,GAAG,EAAE,CAAC;AAI3B,SAAS,YAAY,CAAC,IAAY;IACjC,OAAO,IAAI,IAAI,iBAAY,CAAC;AAC7B,CAAC;AAED,SAAS,QAAQ,CAAC,KAAyB,EAAE,QAAQ,GAAG,EAAE;IACzD,OAAO,CAAC,KAAK,IAAI,QAAQ,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,eAAe,CAAC,CAAC;AACtD,CAAC;AAGM,IAAM,yBAAyB,GAA/B,MAAM,yBAAyB;IAGrC,YACC,MAAc,EACG,cAA8B,EAC9B,sBAA8C,EAC9C,YAA0B,EAC1B,WAAwB;QAHxB,mBAAc,GAAd,cAAc,CAAgB;QAC9B,2BAAsB,GAAtB,sBAAsB,CAAwB;QAC9C,iBAAY,GAAZ,YAAY,CAAc;QAC1B,gBAAW,GAAX,WAAW,CAAa;QAEzC,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC;IAC/C,CAAC;IAcD,KAAK,CAAC,OAAO,CACZ,MAA2B,EAC3B,YAAuB,EACvB,YAA8C;QAE9C,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,EAAE,WAAW,EAAE,CAAC;QAG1C,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,sBAAsB,CAAC,OAAO,CAAC;YAC1D,KAAK,EAAE,EAAE,UAAU,EAAE,MAAM,CAAC,GAAG,EAAE,YAAY,EAAE,gBAAgB,EAAE;YACjE,SAAS,EAAE,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE;SACnC,CAAC,CAAC;QAEH,IAAI,QAAQ,EAAE,CAAC;YACd,OAAO,MAAM,IAAI,CAAC,iBAAiB,CAAC,MAAM,EAAE,QAAQ,EAAE,YAAY,EAAE,YAAY,CAAC,CAAC;QACnF,CAAC;QAGD,IAAI,KAAK,EAAE,CAAC;YACX,MAAM,YAAY,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,OAAO,CAAC;gBACtD,KAAK,EAAE,EAAE,KAAK,EAAE;gBAChB,SAAS,EAAE,CAAC,gBAAgB,EAAE,MAAM,CAAC;aACrC,CAAC,CAAC;YAEH,IAAI,YAAY,EAAE,CAAC;gBAClB,OAAO,MAAM,IAAI,CAAC,cAAc,CAAC,MAAM,EAAE,KAAK,EAAE,YAAY,EAAE,YAAY,EAAE,YAAY,CAAC,CAAC;YAC3F,CAAC;QACF,CAAC;QAGD,IAAI,CAAC,KAAK,EAAE,CAAC;YACZ,MAAM,IAAI,8CAAsB,CAC/B,iDAA0B,CAAC,aAAa,EACxC,+CAA+C,CAC/C,CAAC;QACH,CAAC;QAED,OAAO,MAAM,IAAI,CAAC,aAAa,CAAC,MAAM,EAAE,KAAK,EAAE,YAAY,EAAE,YAAY,CAAC,CAAC;IAC5E,CAAC;IAGO,KAAK,CAAC,iBAAiB,CAC9B,MAA2B,EAC3B,QAAsB,EACtB,YAAkC,EAClC,YAAyD;QAEzD,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,gCAAgC,EAAE,EAAE,GAAG,EAAE,MAAM,CAAC,GAAG,EAAE,CAAC,CAAC;QACzE,MAAM,YAAY,GAAG,IAAI,CAAC,0BAA0B,CACnD,MAAM,CAAC,IAAI,EACX,YAAY,EACZ,QAAQ,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CACxB,CAAC;QACF,OAAO,MAAM,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,EAAE,YAAY,EAAE,YAAY,CAAC,CAAC;IAClF,CAAC;IAGO,KAAK,CAAC,cAAc,CAC3B,MAA2B,EAC3B,KAAa,EACb,YAAkB,EAClB,YAAkC,EAClC,YAAyD;QAEzD,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,qDAAqD,EAAE;YACxE,GAAG,EAAE,MAAM,CAAC,GAAG;YACf,KAAK;SACL,CAAC,CAAC;QACH,MAAM,YAAY,GAAG,IAAI,CAAC,0BAA0B,CACnD,MAAM,CAAC,IAAI,EACX,YAAY,EACZ,YAAY,CAAC,IAAI,EAAE,IAAI,CACvB,CAAC;QACF,MAAM,IAAI,CAAC,sBAAsB,CAAC,IAAI,CACrC,iBAAY,CAAC,MAAM,CAAC,YAAY,EAAE,MAAM,CAAC,GAAG,EAAE,gBAAgB,CAAC,CAC/D,CAAC;QACF,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,gCAAgC,EAAE;YACxD,MAAM,EAAE,YAAY,CAAC,EAAE;YACvB,GAAG,EAAE,MAAM,CAAC,GAAG;YACf,KAAK;YACL,GAAG,EAAE,YAAY,EAAE,GAAG,IAAI,EAAE;YAC5B,MAAM,EAAE,YAAY,EAAE,MAAM,IAAI,MAAM,CAAC,GAAG;SAC1C,CAAC,CAAC;QACH,OAAO,MAAM,IAAI,CAAC,WAAW,CAAC,YAAY,EAAE,MAAM,EAAE,YAAY,EAAE,YAAY,CAAC,CAAC;IACjF,CAAC;IAGO,KAAK,CAAC,aAAa,CAC1B,MAA2B,EAC3B,KAAa,EACb,YAAkC,EAClC,YAAyD;QAEzD,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,2BAA2B,EAAE,EAAE,GAAG,EAAE,MAAM,CAAC,GAAG,EAAE,KAAK,EAAE,CAAC,CAAC;QAE3E,MAAM,OAAO,GAAG,IAAI,CAAC,qBAAqB,CAAC,MAAM,CAAC,IAAI,EAAE,YAAY,CAAC,CAAC;QACtE,MAAM,UAAU,GAAG,OAAO,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,uBAAkB,CAAC;QAEpE,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,OAAO,CAAC,WAAW,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE;YACxE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,qBAAqB,CACxE;gBACC,KAAK;gBACL,SAAS,EAAE,QAAQ,CAAC,MAAM,CAAC,UAAU,CAAC;gBACtC,QAAQ,EAAE,QAAQ,CAAC,MAAM,CAAC,WAAW,CAAC;gBACtC,IAAI,EAAE,UAAU;gBAChB,QAAQ,EAAE,4BAA4B;aACtC,EACD,GAAG,CACH,CAAC;YAEF,MAAM,GAAG,CAAC,IAAI,CACb,GAAG,CAAC,MAAM,CAAC,iBAAY,EAAE;gBACxB,UAAU,EAAE,MAAM,CAAC,GAAG;gBACtB,YAAY,EAAE,gBAAgB;gBAC9B,MAAM,EAAE,OAAO,CAAC,EAAE;aAClB,CAAC,CACF,CAAC;YAEF,OAAO,OAAO,CAAC;QAChB,CAAC,CAAC,CAAC;QAEH,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,iCAAiC,EAAE;YACzD,MAAM,EAAE,IAAI,CAAC,EAAE;YACf,GAAG,EAAE,MAAM,CAAC,GAAG;YACf,KAAK;YACL,IAAI,EAAE,UAAU,CAAC,IAAI;YACrB,GAAG,EAAE,YAAY,EAAE,GAAG,IAAI,EAAE;YAC5B,MAAM,EAAE,YAAY,EAAE,MAAM,IAAI,MAAM,CAAC,GAAG;SAC1C,CAAC,CAAC;QAEH,OAAO,IAAI,CAAC;IACb,CAAC;IAUO,0BAA0B,CACjC,SAAsC,EACtC,YAAkC,EAClC,WAA+B;QAE/B,IAAI,SAAS,KAAK,SAAS;YAAE,OAAO,SAAS,CAAC;QAG9C,IAAI,WAAW,KAAK,cAAc,EAAE,CAAC;YACpC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,uCAAuC,CAAC,CAAC;YAC3D,OAAO,SAAS,CAAC;QAClB,CAAC;QAED,MAAM,IAAI,GAAG,SAAS,CAAC;QAGvB,IAAI,IAAI,KAAK,cAAc,EAAE,CAAC;YAC7B,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,oDAAoD,CAAC,CAAC;YACvE,OAAO,SAAS,CAAC;QAClB,CAAC;QAED,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,EAAE,CAAC;YACzB,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,4BAA4B,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;YACzD,OAAO,SAAS,CAAC;QAClB,CAAC;QAED,IAAI,YAAY,IAAI,YAAY,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;YAC7E,MAAM,IAAI,8CAAsB,CAC/B,iDAA0B,CAAC,cAAc,EACzC,SAAS,IAAI,8CAA8C,CAC3D,CAAC;QACH,CAAC;QAED,OAAO,IAAI,CAAC;IACb,CAAC;IASO,qBAAqB,CAC5B,SAAsC,EACtC,YAAkC;QAElC,IAAI,SAAS,KAAK,SAAS;YAAE,OAAO,SAAS,CAAC;QAE9C,MAAM,IAAI,GAAG,SAAS,CAAC;QAEvB,IAAI,IAAI,KAAK,cAAc,EAAE,CAAC;YAC7B,MAAM,IAAI,8CAAsB,CAC/B,iDAA0B,CAAC,cAAc,EACzC,uDAAuD,CACvD,CAAC;QACH,CAAC;QAED,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,EAAE,CAAC;YACzB,MAAM,IAAI,8CAAsB,CAC/B,iDAA0B,CAAC,cAAc,EACzC,sBAAsB,IAAI,kCAAkC,CAC5D,CAAC;QACH,CAAC;QAED,IAAI,YAAY,IAAI,YAAY,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;YAC7E,MAAM,IAAI,8CAAsB,CAC/B,iDAA0B,CAAC,cAAc,EACzC,SAAS,IAAI,8CAA8C,CAC3D,CAAC;QACH,CAAC;QAED,OAAO,IAAI,CAAC;IACb,CAAC;IAOO,KAAK,CAAC,WAAW,CACxB,IAAU,EACV,MAA2B,EAC3B,YAA4B,EAC5B,YAA8C;QAE9C,IAAI,WAAW,GAAG,KAAK,CAAC;QAGxB,MAAM,cAAc,GAAkD,EAAE,CAAC;QAEzE,IAAI,MAAM,CAAC,UAAU,KAAK,SAAS,EAAE,CAAC;YACrC,MAAM,OAAO,GAAG,QAAQ,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;YAC5C,IAAI,OAAO,KAAK,IAAI,CAAC,SAAS,EAAE,CAAC;gBAChC,cAAc,CAAC,SAAS,GAAG,OAAO,CAAC;YACpC,CAAC;QACF,CAAC;QAED,IAAI,MAAM,CAAC,WAAW,KAAK,SAAS,EAAE,CAAC;YACtC,MAAM,OAAO,GAAG,QAAQ,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;YAC7C,IAAI,OAAO,KAAK,IAAI,CAAC,QAAQ,EAAE,CAAC;gBAC/B,cAAc,CAAC,QAAQ,GAAG,OAAO,CAAC;YACnC,CAAC;QACF,CAAC;QAED,IAAI,MAAM,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC5C,MAAM,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,EAAE,cAAc,CAAC,CAAC;YAC1D,WAAW,GAAG,IAAI,CAAC;QACpB,CAAC;QAGD,MAAM,YAAY,GAAG,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC;QACrC,IAAI,YAAY,IAAI,YAAY,KAAK,YAAY,EAAE,CAAC;YACnD,MAAM,IAAI,CAAC,WAAW,CAAC,cAAc,CAAC,IAAI,EAAE,EAAE,WAAW,EAAE,YAAY,EAAE,CAAC,CAAC;YAC3E,WAAW,GAAG,IAAI,CAAC;YAEnB,IAAI,YAAY,EAAE,CAAC;gBAClB,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,6BAA6B,EAAE;oBACrD,MAAM,EAAE,IAAI,CAAC,EAAE;oBACf,YAAY;oBACZ,OAAO,EAAE,YAAY;oBACrB,GAAG,EAAE,YAAY,EAAE,GAAG,IAAI,EAAE;oBAC5B,MAAM,EAAE,YAAY,EAAE,MAAM,IAAI,MAAM,CAAC,GAAG;iBAC1C,CAAC,CAAC;YACJ,CAAC;QACF,CAAC;QAED,IAAI,WAAW,EAAE,CAAC;YACjB,OAAO,MAAM,IAAI,CAAC,cAAc,CAAC,aAAa,CAAC;gBAC9C,KAAK,EAAE,EAAE,EAAE,EAAE,IAAI,CAAC,EAAE,EAAE;gBACtB,SAAS,EAAE,CAAC,MAAM,CAAC;aACnB,CAAC,CAAC;QACJ,CAAC;QAED,OAAO,IAAI,CAAC;IACb,CAAC;CACD,CAAA;AA9SY,8DAAyB;oCAAzB,yBAAyB;IADrC,IAAA,YAAO,GAAE;qCAKA,uBAAM;QACmB,mBAAc;QACN,2BAAsB;QAChC,4BAAY;QACb,0BAAW;GAR9B,yBAAyB,CA8SrC"}

package/dist/modules/token-exchange/services/token-exchange.service.js

@@ -17,10 +17,9 @@ const backend_common_1 = require("@n8n/backend-common");
 const di_1 = require("@n8n/di");
 const crypto_1 = require("crypto");
 const jsonwebtoken_1 = __importDefault(require("jsonwebtoken"));
-const auth_error_1 = require("../../../errors/response-errors/auth.error");
-const bad_request_error_1 = require("../../../errors/response-errors/bad-request.error");
 const jwt_service_1 = require("../../../services/jwt.service");
 const token_exchange_config_1 = require("../token-exchange.config");
+const token_exchange_errors_1 = require("../token-exchange.errors");
 const token_exchange_schemas_1 = require("../token-exchange.schemas");
 const token_exchange_types_1 = require("../token-exchange.types");
 const identity_resolution_service_1 = require("./identity-resolution.service");
@@ -40,22 +39,22 @@ let TokenExchangeService = class TokenExchangeService {
     async verifyToken(subjectToken, { maxLifetimeSeconds } = {}) {
         const decoded = jsonwebtoken_1.default.decode(subjectToken, { complete: true });
         if (!decoded || typeof decoded === 'string') {
-            throw new bad_request_error_1.BadRequestError('Invalid token format');
+            throw new token_exchange_errors_1.TokenExchangeRequestError(token_exchange_types_1.TokenExchangeFailureReason.InvalidFormat, 'Invalid token format');
         }
         const { kid } = decoded.header;
         if (!kid) {
-            throw new bad_request_error_1.BadRequestError('Token header missing kid');
+            throw new token_exchange_errors_1.TokenExchangeRequestError(token_exchange_types_1.TokenExchangeFailureReason.MissingKid, 'Token header missing kid');
         }
         const decodedPayload = decoded.payload;
         const iss = typeof decodedPayload === 'object' && decodedPayload !== null
             ? decodedPayload.iss
             : undefined;
         if (typeof iss !== 'string' || !iss) {
-            throw new bad_request_error_1.BadRequestError('Token payload missing iss');
+            throw new token_exchange_errors_1.TokenExchangeRequestError(token_exchange_types_1.TokenExchangeFailureReason.MissingIss, 'Token payload missing iss');
         }
         const resolvedKey = await this.trustedKeyStore.getByKidAndIss(kid, iss);
         if (!resolvedKey) {
-            throw new auth_error_1.AuthError('Unknown key id');
+            throw new token_exchange_errors_1.TokenExchangeAuthError(token_exchange_types_1.TokenExchangeFailureReason.UnknownKey, 'Unknown key id');
         }
         let payload;
         try {
@@ -67,27 +66,27 @@ let TokenExchangeService = class TokenExchangeService {
                 ignoreNotBefore: false,
             });
             if (typeof result === 'string' || !('iat' in result)) {
-                throw new auth_error_1.AuthError('Unexpected token format');
+                throw new token_exchange_errors_1.TokenExchangeAuthError(token_exchange_types_1.TokenExchangeFailureReason.InvalidFormat, 'Unexpected token format');
             }
             payload = result;
         }
         catch (error) {
-            if (error instanceof auth_error_1.AuthError)
+            if (error instanceof token_exchange_errors_1.TokenExchangeAuthError)
                 throw error;
             const message = error instanceof Error ? error.message : 'unknown error';
             this.logger.warn('JWT verification failed', { error: message });
-            throw new auth_error_1.AuthError('Token verification failed');
+            throw new token_exchange_errors_1.TokenExchangeAuthError(token_exchange_types_1.TokenExchangeFailureReason.InvalidSignature, 'Token verification failed');
         }
         const claims = token_exchange_schemas_1.ExternalTokenClaimsSchema.parse(payload);
         if (maxLifetimeSeconds !== undefined) {
             const tokenLifetime = claims.exp - claims.iat;
             if (tokenLifetime > maxLifetimeSeconds) {
-                throw new auth_error_1.AuthError('Token lifetime exceeds maximum allowed');
+                throw new token_exchange_errors_1.TokenExchangeAuthError(token_exchange_types_1.TokenExchangeFailureReason.TokenTooLong, 'Token lifetime exceeds maximum allowed');
             }
         }
         const consumed = await this.jtiStore.consume(claims.jti, new Date(claims.exp * 1000));
         if (!consumed) {
-            throw new auth_error_1.AuthError('Token has already been used');
+            throw new token_exchange_errors_1.TokenExchangeAuthError(token_exchange_types_1.TokenExchangeFailureReason.TokenReplay, 'Token has already been used');
         }
         return { claims, resolvedKey };
     }
@@ -114,7 +113,7 @@ let TokenExchangeService = class TokenExchangeService {
         const maxTtl = this.config.maxTokenTtl;
         const exp = Math.min(subjectClaims.claims.exp, actorClaims?.claims.exp ?? Infinity, now + maxTtl);
         if (exp <= now + MIN_REMAINING_LIFETIME_SECONDS) {
-            throw new auth_error_1.AuthError('Subject token too close to expiry to issue a new token');
+            throw new token_exchange_errors_1.TokenExchangeAuthError(token_exchange_types_1.TokenExchangeFailureReason.TokenNearExpiry, 'Subject token too close to expiry to issue a new token');
         }
         const resources = request.resource?.split(' ').filter(Boolean);
         const payload = {

package/dist/modules/token-exchange/services/token-exchange.service.js.map

@@ -1 +1 @@
-{"version":3,"file":"token-exchange.service.js","sourceRoot":"","sources":["../../../../src/modules/token-exchange/services/token-exchange.service.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;AAAA,wDAA6C;AAE7C,gCAAkC;AAClC,mCAAoC;AACpC,gEAA+B;AAE/B,oEAAgE;AAChE,kFAA6E;AAC7E,wDAAoD;AAEpD,oEAA+D;AAM/D,sEAAsE;AACtE,kEAIiC;AACjC,+EAA0E;AAC1E,2DAAsD;AACtD,+DAA0D;AAE1D,MAAM,0BAA0B,GAAG,EAAE,CAAC;AACtC,MAAM,8BAA8B,GAAG,CAAC,CAAC;AAGlC,IAAM,oBAAoB,GAA1B,MAAM,oBAAoB;IAGhC,YACC,MAAc,EACG,eAAkC,EAClC,QAAyB,EACzB,yBAAoD,EACpD,MAA2B,EAC3B,UAAsB;QAJtB,oBAAe,GAAf,eAAe,CAAmB;QAClC,aAAQ,GAAR,QAAQ,CAAiB;QACzB,8BAAyB,GAAzB,yBAAyB,CAA2B;QACpD,WAAM,GAAN,MAAM,CAAqB;QAC3B,eAAU,GAAV,UAAU,CAAY;QAEvC,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC;IAC/C,CAAC;IAaD,KAAK,CAAC,WAAW,CAChB,YAAoB,EACpB,EAAE,kBAAkB,KAAsC,EAAE;QAE5D,MAAM,OAAO,GAAG,sBAAG,CAAC,MAAM,CAAC,YAAY,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;QAC7D,IAAI,CAAC,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ,EAAE,CAAC;YAC7C,MAAM,IAAI,mCAAe,CAAC,sBAAsB,CAAC,CAAC;QACnD,CAAC;QAED,MAAM,EAAE,GAAG,EAAE,GAAG,OAAO,CAAC,MAAM,CAAC;QAC/B,IAAI,CAAC,GAAG,EAAE,CAAC;YACV,MAAM,IAAI,mCAAe,CAAC,0BAA0B,CAAC,CAAC;QACvD,CAAC;QAED,MAAM,cAAc,GAAG,OAAO,CAAC,OAAO,CAAC;QACvC,MAAM,GAAG,GACR,OAAO,cAAc,KAAK,QAAQ,IAAI,cAAc,KAAK,IAAI;YAC5D,CAAC,CAAC,cAAc,CAAC,GAAG;YACpB,CAAC,CAAC,SAAS,CAAC;QACd,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,CAAC,GAAG,EAAE,CAAC;YACrC,MAAM,IAAI,mCAAe,CAAC,2BAA2B,CAAC,CAAC;QACxD,CAAC;QAED,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,eAAe,CAAC,cAAc,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;QACxE,IAAI,CAAC,WAAW,EAAE,CAAC;YAClB,MAAM,IAAI,sBAAS,CAAC,gBAAgB,CAAC,CAAC;QACvC,CAAC;QAED,IAAI,OAAuB,CAAC;QAC5B,IAAI,CAAC;YACJ,MAAM,MAAM,GAAG,sBAAG,CAAC,MAAM,CAAC,YAAY,EAAE,WAAW,CAAC,GAAG,EAAE;gBAExD,UAAU,EAAE,WAAW,CAAC,UAA6B;gBACrD,MAAM,EAAE,WAAW,CAAC,MAAM;gBAC1B,QAAQ,EAAE,WAAW,CAAC,gBAAgB;gBACtC,gBAAgB,EAAE,KAAK;gBACvB,eAAe,EAAE,KAAK;aACtB,CAAC,CAAC;YACH,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,CAAC,CAAC,KAAK,IAAI,MAAM,CAAC,EAAE,CAAC;gBACtD,MAAM,IAAI,sBAAS,CAAC,yBAAyB,CAAC,CAAC;YAChD,CAAC;YACD,OAAO,GAAG,MAAM,CAAC;QAClB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,IAAI,KAAK,YAAY,sBAAS;gBAAE,MAAM,KAAK,CAAC;YAC5C,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe,CAAC;YACzE,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,yBAAyB,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,CAAC;YAChE,MAAM,IAAI,sBAAS,CAAC,2BAA2B,CAAC,CAAC;QAClD,CAAC;QAED,MAAM,MAAM,GAAG,kDAAyB,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QAExD,IAAI,kBAAkB,KAAK,SAAS,EAAE,CAAC;YACtC,MAAM,aAAa,GAAG,MAAM,CAAC,GAAG,GAAG,MAAM,CAAC,GAAG,CAAC;YAC9C,IAAI,aAAa,GAAG,kBAAkB,EAAE,CAAC;gBACxC,MAAM,IAAI,sBAAS,CAAC,wCAAwC,CAAC,CAAC;YAC/D,CAAC;QACF,CAAC;QAED,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,EAAE,IAAI,IAAI,CAAC,MAAM,CAAC,GAAG,GAAG,IAAI,CAAC,CAAC,CAAC;QACtF,IAAI,CAAC,QAAQ,EAAE,CAAC;YACf,MAAM,IAAI,sBAAS,CAAC,6BAA6B,CAAC,CAAC;QACpD,CAAC;QAED,OAAO,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC;IAChC,CAAC;IAED,KAAK,CAAC,UAAU,CACf,YAAoB;QAEpB,MAAM,EAAE,MAAM,EAAE,WAAW,EAAE,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,YAAY,EAAE;YACpE,kBAAkB,EAAE,0BAA0B;SAC9C,CAAC,CAAC;QACH,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,yBAAyB,CAAC,OAAO,CAAC,MAAM,EAAE,WAAW,CAAC,YAAY,EAAE;YAC3F,GAAG,EAAE,WAAW,CAAC,GAAG;YACpB,MAAM,EAAE,WAAW,CAAC,MAAM;SAC1B,CAAC,CAAC;QACH,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,CAAC,GAAG,EAAE,MAAM,EAAE,WAAW,CAAC,MAAM,EAAE,GAAG,EAAE,WAAW,CAAC,GAAG,EAAE,CAAC;IACxF,CAAC;IAED,KAAK,CAAC,QAAQ,CAAC,OAA6B;QAC3C,MAAM,aAAa,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC;QACpE,MAAM,WAAW,GAAG,OAAO,CAAC,WAAW;YACtC,CAAC,CAAC,MAAM,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC,WAAW,CAAC;YAC7C,CAAC,CAAC,SAAS,CAAC;QAEb,MAAM,KAAK,GAAG,WAAW;YACxB,CAAC,CAAC,MAAM,IAAI,CAAC,yBAAyB,CAAC,OAAO,CAC5C,WAAW,CAAC,MAAM,EAClB,WAAW,CAAC,WAAW,CAAC,YAAY,EACpC,WAAW,CAAC,WAAW,CACvB;YACF,CAAC,CAAC,SAAS,CAAC;QACb,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,yBAAyB,CAAC,OAAO,CAC3D,aAAa,CAAC,MAAM,EACpB,aAAa,CAAC,WAAW,CAAC,YAAY,EACtC,aAAa,CAAC,WAAW,CACzB,CAAC;QAEF,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;QAE1C,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC;QACvC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CACnB,aAAa,CAAC,MAAM,CAAC,GAAG,EACxB,WAAW,EAAE,MAAM,CAAC,GAAG,IAAI,QAAQ,EACnC,GAAG,GAAG,MAAM,CACZ,CAAC;QAEF,IAAI,GAAG,IAAI,GAAG,GAAG,8BAA8B,EAAE,CAAC;YACjD,MAAM,IAAI,sBAAS,CAAC,wDAAwD,CAAC,CAAC;QAC/E,CAAC;QAED,MAAM,SAAS,GAAG,OAAO,CAAC,QAAQ,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QAE/D,MAAM,OAAO,GAAqB;YACjC,GAAG,EAAE,4CAAqB;YAC1B,GAAG,EAAE,OAAO,CAAC,EAAE;YACf,GAAG,CAAC,KAAK,IAAI,EAAE,GAAG,EAAE,EAAE,GAAG,EAAE,KAAK,CAAC,EAAE,EAAE,EAAE,CAAC;YACxC,GAAG,CAAC,OAAO,CAAC,KAAK,IAAI,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,CAAC;YAC9C,GAAG,CAAC,SAAS,EAAE,MAAM,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC;YACjD,GAAG,EAAE,GAAG;YACR,GAAG;YACH,GAAG,EAAE,IAAA,mBAAU,GAAE;SACjB,CAAC;QAEF,MAAM,WAAW,GAAG,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAElD,OAAO;YACN,WAAW;YACX,SAAS,EAAE,GAAG,GAAG,GAAG;YACpB,aAAa,EAAE,OAAO,CAAC,EAAE;YACzB,OAAO,EAAE,aAAa,CAAC,MAAM,CAAC,GAAG;YACjC,MAAM,EAAE,aAAa,CAAC,MAAM,CAAC,GAAG;YAChC,KAAK,EAAE,WAAW,EAAE,MAAM,CAAC,GAAG;YAC9B,WAAW,EAAE,KAAK,EAAE,EAAE;SACtB,CAAC;IACH,CAAC;CACD,CAAA;AAjKY,oDAAoB;+BAApB,oBAAoB;IADhC,IAAA,YAAO,GAAE;qCAKA,uBAAM;QACoB,uCAAiB;QACxB,mCAAe;QACE,uDAAyB;QAC5C,2CAAmB;QACf,wBAAU;GAT5B,oBAAoB,CAiKhC"}
+{"version":3,"file":"token-exchange.service.js","sourceRoot":"","sources":["../../../../src/modules/token-exchange/services/token-exchange.service.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;AAAA,wDAA6C;AAE7C,gCAAkC;AAClC,mCAAoC;AACpC,gEAA+B;AAE/B,wDAAoD;AAEpD,oEAA+D;AAC/D,oEAA6F;AAM7F,sEAAsE;AACtE,kEAKiC;AACjC,+EAA0E;AAC1E,2DAAsD;AACtD,+DAA0D;AAE1D,MAAM,0BAA0B,GAAG,EAAE,CAAC;AACtC,MAAM,8BAA8B,GAAG,CAAC,CAAC;AAGlC,IAAM,oBAAoB,GAA1B,MAAM,oBAAoB;IAGhC,YACC,MAAc,EACG,eAAkC,EAClC,QAAyB,EACzB,yBAAoD,EACpD,MAA2B,EAC3B,UAAsB;QAJtB,oBAAe,GAAf,eAAe,CAAmB;QAClC,aAAQ,GAAR,QAAQ,CAAiB;QACzB,8BAAyB,GAAzB,yBAAyB,CAA2B;QACpD,WAAM,GAAN,MAAM,CAAqB;QAC3B,eAAU,GAAV,UAAU,CAAY;QAEvC,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC;IAC/C,CAAC;IAaD,KAAK,CAAC,WAAW,CAChB,YAAoB,EACpB,EAAE,kBAAkB,KAAsC,EAAE;QAE5D,MAAM,OAAO,GAAG,sBAAG,CAAC,MAAM,CAAC,YAAY,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;QAC7D,IAAI,CAAC,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ,EAAE,CAAC;YAC7C,MAAM,IAAI,iDAAyB,CAClC,iDAA0B,CAAC,aAAa,EACxC,sBAAsB,CACtB,CAAC;QACH,CAAC;QAED,MAAM,EAAE,GAAG,EAAE,GAAG,OAAO,CAAC,MAAM,CAAC;QAC/B,IAAI,CAAC,GAAG,EAAE,CAAC;YACV,MAAM,IAAI,iDAAyB,CAClC,iDAA0B,CAAC,UAAU,EACrC,0BAA0B,CAC1B,CAAC;QACH,CAAC;QAED,MAAM,cAAc,GAAG,OAAO,CAAC,OAAO,CAAC;QACvC,MAAM,GAAG,GACR,OAAO,cAAc,KAAK,QAAQ,IAAI,cAAc,KAAK,IAAI;YAC5D,CAAC,CAAC,cAAc,CAAC,GAAG;YACpB,CAAC,CAAC,SAAS,CAAC;QACd,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,CAAC,GAAG,EAAE,CAAC;YACrC,MAAM,IAAI,iDAAyB,CAClC,iDAA0B,CAAC,UAAU,EACrC,2BAA2B,CAC3B,CAAC;QACH,CAAC;QAED,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,eAAe,CAAC,cAAc,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;QACxE,IAAI,CAAC,WAAW,EAAE,CAAC;YAClB,MAAM,IAAI,8CAAsB,CAAC,iDAA0B,CAAC,UAAU,EAAE,gBAAgB,CAAC,CAAC;QAC3F,CAAC;QAED,IAAI,OAAuB,CAAC;QAC5B,IAAI,CAAC;YACJ,MAAM,MAAM,GAAG,sBAAG,CAAC,MAAM,CAAC,YAAY,EAAE,WAAW,CAAC,GAAG,EAAE;gBAExD,UAAU,EAAE,WAAW,CAAC,UAA6B;gBACrD,MAAM,EAAE,WAAW,CAAC,MAAM;gBAC1B,QAAQ,EAAE,WAAW,CAAC,gBAAgB;gBACtC,gBAAgB,EAAE,KAAK;gBACvB,eAAe,EAAE,KAAK;aACtB,CAAC,CAAC;YACH,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,CAAC,CAAC,KAAK,IAAI,MAAM,CAAC,EAAE,CAAC;gBACtD,MAAM,IAAI,8CAAsB,CAC/B,iDAA0B,CAAC,aAAa,EACxC,yBAAyB,CACzB,CAAC;YACH,CAAC;YACD,OAAO,GAAG,MAAM,CAAC;QAClB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,IAAI,KAAK,YAAY,8CAAsB;gBAAE,MAAM,KAAK,CAAC;YACzD,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe,CAAC;YACzE,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,yBAAyB,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,CAAC;YAChE,MAAM,IAAI,8CAAsB,CAC/B,iDAA0B,CAAC,gBAAgB,EAC3C,2BAA2B,CAC3B,CAAC;QACH,CAAC;QAED,MAAM,MAAM,GAAG,kDAAyB,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QAExD,IAAI,kBAAkB,KAAK,SAAS,EAAE,CAAC;YACtC,MAAM,aAAa,GAAG,MAAM,CAAC,GAAG,GAAG,MAAM,CAAC,GAAG,CAAC;YAC9C,IAAI,aAAa,GAAG,kBAAkB,EAAE,CAAC;gBACxC,MAAM,IAAI,8CAAsB,CAC/B,iDAA0B,CAAC,YAAY,EACvC,wCAAwC,CACxC,CAAC;YACH,CAAC;QACF,CAAC;QAED,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,EAAE,IAAI,IAAI,CAAC,MAAM,CAAC,GAAG,GAAG,IAAI,CAAC,CAAC,CAAC;QACtF,IAAI,CAAC,QAAQ,EAAE,CAAC;YACf,MAAM,IAAI,8CAAsB,CAC/B,iDAA0B,CAAC,WAAW,EACtC,6BAA6B,CAC7B,CAAC;QACH,CAAC;QAED,OAAO,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC;IAChC,CAAC;IAED,KAAK,CAAC,UAAU,CACf,YAAoB;QAEpB,MAAM,EAAE,MAAM,EAAE,WAAW,EAAE,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,YAAY,EAAE;YACpE,kBAAkB,EAAE,0BAA0B;SAC9C,CAAC,CAAC;QACH,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,yBAAyB,CAAC,OAAO,CAAC,MAAM,EAAE,WAAW,CAAC,YAAY,EAAE;YAC3F,GAAG,EAAE,WAAW,CAAC,GAAG;YACpB,MAAM,EAAE,WAAW,CAAC,MAAM;SAC1B,CAAC,CAAC;QACH,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,CAAC,GAAG,EAAE,MAAM,EAAE,WAAW,CAAC,MAAM,EAAE,GAAG,EAAE,WAAW,CAAC,GAAG,EAAE,CAAC;IACxF,CAAC;IAED,KAAK,CAAC,QAAQ,CAAC,OAA6B;QAC3C,MAAM,aAAa,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC;QACpE,MAAM,WAAW,GAAG,OAAO,CAAC,WAAW;YACtC,CAAC,CAAC,MAAM,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC,WAAW,CAAC;YAC7C,CAAC,CAAC,SAAS,CAAC;QAEb,MAAM,KAAK,GAAG,WAAW;YACxB,CAAC,CAAC,MAAM,IAAI,CAAC,yBAAyB,CAAC,OAAO,CAC5C,WAAW,CAAC,MAAM,EAClB,WAAW,CAAC,WAAW,CAAC,YAAY,EACpC,WAAW,CAAC,WAAW,CACvB;YACF,CAAC,CAAC,SAAS,CAAC;QACb,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,yBAAyB,CAAC,OAAO,CAC3D,aAAa,CAAC,MAAM,EACpB,aAAa,CAAC,WAAW,CAAC,YAAY,EACtC,aAAa,CAAC,WAAW,CACzB,CAAC;QAEF,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;QAE1C,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC;QACvC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CACnB,aAAa,CAAC,MAAM,CAAC,GAAG,EACxB,WAAW,EAAE,MAAM,CAAC,GAAG,IAAI,QAAQ,EACnC,GAAG,GAAG,MAAM,CACZ,CAAC;QAEF,IAAI,GAAG,IAAI,GAAG,GAAG,8BAA8B,EAAE,CAAC;YACjD,MAAM,IAAI,8CAAsB,CAC/B,iDAA0B,CAAC,eAAe,EAC1C,wDAAwD,CACxD,CAAC;QACH,CAAC;QAED,MAAM,SAAS,GAAG,OAAO,CAAC,QAAQ,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QAE/D,MAAM,OAAO,GAAqB;YACjC,GAAG,EAAE,4CAAqB;YAC1B,GAAG,EAAE,OAAO,CAAC,EAAE;YACf,GAAG,CAAC,KAAK,IAAI,EAAE,GAAG,EAAE,EAAE,GAAG,EAAE,KAAK,CAAC,EAAE,EAAE,EAAE,CAAC;YACxC,GAAG,CAAC,OAAO,CAAC,KAAK,IAAI,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,CAAC;YAC9C,GAAG,CAAC,SAAS,EAAE,MAAM,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC;YACjD,GAAG,EAAE,GAAG;YACR,GAAG;YACH,GAAG,EAAE,IAAA,mBAAU,GAAE;SACjB,CAAC;QAEF,MAAM,WAAW,GAAG,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAElD,OAAO;YACN,WAAW;YACX,SAAS,EAAE,GAAG,GAAG,GAAG;YACpB,aAAa,EAAE,OAAO,CAAC,EAAE;YACzB,OAAO,EAAE,aAAa,CAAC,MAAM,CAAC,GAAG;YACjC,MAAM,EAAE,aAAa,CAAC,MAAM,CAAC,GAAG;YAChC,KAAK,EAAE,WAAW,EAAE,MAAM,CAAC,GAAG;YAC9B,WAAW,EAAE,KAAK,EAAE,EAAE;SACtB,CAAC;IACH,CAAC;CACD,CAAA;AAzLY,oDAAoB;+BAApB,oBAAoB;IADhC,IAAA,YAAO,GAAE;qCAKA,uBAAM;QACoB,uCAAiB;QACxB,mCAAe;QACE,uDAAyB;QAC5C,2CAAmB;QACf,wBAAU;GAT5B,oBAAoB,CAyLhC"}

package/dist/modules/token-exchange/token-exchange.errors.d.ts

@@ -0,0 +1,11 @@
+import { AuthError } from '../../errors/response-errors/auth.error';
+import { BadRequestError } from '../../errors/response-errors/bad-request.error';
+import type { TokenExchangeFailureReason } from './token-exchange.types';
+export declare class TokenExchangeAuthError extends AuthError {
+    readonly reason: TokenExchangeFailureReason;
+    constructor(reason: TokenExchangeFailureReason, message: string);
+}
+export declare class TokenExchangeRequestError extends BadRequestError {
+    readonly reason: TokenExchangeFailureReason;
+    constructor(reason: TokenExchangeFailureReason, message: string);
+}

package/dist/modules/token-exchange/token-exchange.errors.js

@@ -0,0 +1,20 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.TokenExchangeRequestError = exports.TokenExchangeAuthError = void 0;
+const auth_error_1 = require("../../errors/response-errors/auth.error");
+const bad_request_error_1 = require("../../errors/response-errors/bad-request.error");
+class TokenExchangeAuthError extends auth_error_1.AuthError {
+    constructor(reason, message) {
+        super(message);
+        this.reason = reason;
+    }
+}
+exports.TokenExchangeAuthError = TokenExchangeAuthError;
+class TokenExchangeRequestError extends bad_request_error_1.BadRequestError {
+    constructor(reason, message) {
+        super(message);
+        this.reason = reason;
+    }
+}
+exports.TokenExchangeRequestError = TokenExchangeRequestError;
+//# sourceMappingURL=token-exchange.errors.js.map

package/dist/modules/token-exchange/token-exchange.errors.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"token-exchange.errors.js","sourceRoot":"","sources":["../../../src/modules/token-exchange/token-exchange.errors.ts"],"names":[],"mappings":";;;AAAA,oEAAgE;AAChE,kFAA6E;AAQ7E,MAAa,sBAAuB,SAAQ,sBAAS;IACpD,YACU,MAAkC,EAC3C,OAAe;QAEf,KAAK,CAAC,OAAO,CAAC,CAAC;QAHN,WAAM,GAAN,MAAM,CAA4B;IAI5C,CAAC;CACD;AAPD,wDAOC;AAMD,MAAa,yBAA0B,SAAQ,mCAAe;IAC7D,YACU,MAAkC,EAC3C,OAAe;QAEf,KAAK,CAAC,OAAO,CAAC,CAAC;QAHN,WAAM,GAAN,MAAM,CAA4B;IAI5C,CAAC;CACD;AAPD,8DAOC"}

package/dist/modules/token-exchange/token-exchange.schemas.d.ts

@@ -19,8 +19,8 @@ export declare const ExternalTokenClaimsSchema: z.ZodObject<{
     exp: number;
     iss: string;
     aud: string | string[];
-    jti: string;
     iat: number;
+    jti: string;
     email?: string | undefined;
     role?: string | undefined;
     nbf?: number | undefined;
@@ -31,8 +31,8 @@ export declare const ExternalTokenClaimsSchema: z.ZodObject<{
     exp: number;
     iss: string;
     aud: string | string[];
-    jti: string;
     iat: number;
+    jti: string;
     email?: string | undefined;
     role?: string | undefined;
     nbf?: number | undefined;
@@ -141,21 +141,21 @@ export declare const TokenExchangeRequestSchema: z.ZodObject<{
     grant_type: "urn:ietf:params:oauth:grant-type:token-exchange";
     subject_token: string;
     resource?: string | undefined;
-    audience?: string | undefined;
-    scope?: string | undefined;
     subject_token_type?: string | undefined;
     actor_token?: string | undefined;
     actor_token_type?: string | undefined;
     requested_token_type?: string | undefined;
+    scope?: string | undefined;
+    audience?: string | undefined;
 }, {
     grant_type: "urn:ietf:params:oauth:grant-type:token-exchange";
     subject_token: string;
     resource?: string | undefined;
-    audience?: string | undefined;
-    scope?: string | undefined;
     subject_token_type?: string | undefined;
     actor_token?: string | undefined;
     actor_token_type?: string | undefined;
     requested_token_type?: string | undefined;
+    scope?: string | undefined;
+    audience?: string | undefined;
 }>;
 export type TokenExchangeRequest = z.infer<typeof TokenExchangeRequestSchema>;

package/dist/modules/token-exchange/token-exchange.types.d.ts

@@ -1,4 +1,19 @@
 import type { TOKEN_EXCHANGE_GRANT_TYPE } from './token-exchange.schemas';
+export declare const TokenExchangeFailureReason: {
+    readonly InvalidSignature: "invalid_signature";
+    readonly UnknownKey: "unknown_key";
+    readonly TokenReplay: "token_replay";
+    readonly TokenTooLong: "token_too_long";
+    readonly TokenNearExpiry: "token_near_expiry";
+    readonly InvalidFormat: "invalid_format";
+    readonly MissingKid: "missing_kid";
+    readonly MissingIss: "missing_iss";
+    readonly InvalidClaims: "invalid_claims";
+    readonly InternalError: "internal_error";
+    readonly RoleNotAllowed: "role_not_allowed";
+    readonly Other: "other";
+};
+export type TokenExchangeFailureReason = (typeof TokenExchangeFailureReason)[keyof typeof TokenExchangeFailureReason];
 export interface IssuedTokenResult {
     accessToken: string;
     expiresIn: number;

package/dist/modules/token-exchange/token-exchange.types.js

@@ -1,5 +1,19 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.TOKEN_EXCHANGE_ISSUER = void 0;
+exports.TOKEN_EXCHANGE_ISSUER = exports.TokenExchangeFailureReason = void 0;
+exports.TokenExchangeFailureReason = {
+    InvalidSignature: 'invalid_signature',
+    UnknownKey: 'unknown_key',
+    TokenReplay: 'token_replay',
+    TokenTooLong: 'token_too_long',
+    TokenNearExpiry: 'token_near_expiry',
+    InvalidFormat: 'invalid_format',
+    MissingKid: 'missing_kid',
+    MissingIss: 'missing_iss',
+    InvalidClaims: 'invalid_claims',
+    InternalError: 'internal_error',
+    RoleNotAllowed: 'role_not_allowed',
+    Other: 'other',
+};
 exports.TOKEN_EXCHANGE_ISSUER = 'n8n-token-exchange';
 //# sourceMappingURL=token-exchange.types.js.map

package/dist/modules/token-exchange/token-exchange.types.js.map

@@ -1 +1 @@
-{"version":3,"file":"token-exchange.types.js","sourceRoot":"","sources":["../../../src/modules/token-exchange/token-exchange.types.ts"],"names":[],"mappings":";;;AAuBa,QAAA,qBAAqB,GAAG,oBAAoB,CAAC"}
+{"version":3,"file":"token-exchange.types.js","sourceRoot":"","sources":["../../../src/modules/token-exchange/token-exchange.types.ts"],"names":[],"mappings":";;;AAEa,QAAA,0BAA0B,GAAG;IACzC,gBAAgB,EAAE,mBAAmB;IACrC,UAAU,EAAE,aAAa;IACzB,WAAW,EAAE,cAAc;IAC3B,YAAY,EAAE,gBAAgB;IAC9B,eAAe,EAAE,mBAAmB;IACpC,aAAa,EAAE,gBAAgB;IAC/B,UAAU,EAAE,aAAa;IACzB,UAAU,EAAE,aAAa;IACzB,aAAa,EAAE,gBAAgB;IAC/B,aAAa,EAAE,gBAAgB;IAC/B,cAAc,EAAE,kBAAkB;IAClC,KAAK,EAAE,OAAO;CACL,CAAC;AA0BE,QAAA,qBAAqB,GAAG,oBAAoB,CAAC"}

package/dist/public-api/types.d.ts

@@ -1,6 +1,6 @@
 import type { AuthenticatedRequest, TagEntity, WorkflowEntity } from '@n8n/db';
 import type { ExecutionStatus, ICredentialDataDecryptedObject } from 'n8n-workflow';
-import type { AddDataTableRowsDto, CreateDataTableDto, UpdateDataTableDto, UpdateDataTableRowDto, UpsertDataTableRowDto } from '@n8n/api-types';
+import type { AddDataTableRowsDto, PublicApiCreateDataTableDto, UpdateDataTableDto, UpdateDataTableRowDto, UpsertDataTableRowDto } from '@n8n/api-types';
 import type { AuthlessRequest } from '../requests';
 import type { Risk } from '../security-audit/types';
 export type PaginatedRequest = AuthenticatedRequest<{}, {}, {}, {
@@ -165,6 +165,9 @@ export declare namespace CredentialRequest {
         cursor?: string;
         offset?: number;
     }>;
+    type Get = AuthenticatedRequest<{
+        id: string;
+    }>;
     type Create = AuthenticatedRequest<{}, {}, {
         type: string;
         name: string;
@@ -181,6 +184,9 @@ export declare namespace CredentialRequest {
         isResolvable?: boolean;
         isPartialData?: boolean;
     }, {}>;
+    type Test = AuthenticatedRequest<{
+        id: string;
+    }, {}, {}, {}>;
     type Delete = AuthenticatedRequest<{
         id: string;
     }, {}, {}, Record<string, string>>;
@@ -251,7 +257,7 @@ export declare namespace DataTableRequest {
         filter?: string;
         sortBy?: string;
     }>;
-    type Create = AuthenticatedRequest<{}, {}, CreateDataTableDto, {}>;
+    type Create = AuthenticatedRequest<{}, {}, PublicApiCreateDataTableDto, {}>;
     type Get = AuthenticatedRequest<{
         dataTableId: string;
     }, {}, {}, {}>;

package/dist/public-api/v1/handlers/community-packages/community-packages.handler.d.ts

@@ -11,6 +11,7 @@ declare const _default: {
         name: string;
     }, Record<string, never>, {
         version?: string;
+        verify?: boolean;
     }>, res: express.Response) => Promise<express.Response>))[];
     uninstallPackage: (import("../../shared/middlewares/global.middleware").ScopeTaggedMiddleware | ((req: AuthenticatedRequest<{
         name: string;

package/dist/public-api/v1/handlers/community-packages/community-packages.handler.js

@@ -13,7 +13,7 @@ module.exports = {
         async (req, res) => {
             const lifecycle = di_1.Container.get(community_packages_lifecycle_service_1.CommunityPackagesLifecycleService);
             try {
-                const installedPackage = await lifecycle.install({ name: req.body.name, version: req.body.version, verify: req.body.verify ?? false }, req.user, 'publicApi');
+                const installedPackage = await lifecycle.install({ name: req.body.name, version: req.body.version, verify: req.body.verify ?? true }, req.user, 'publicApi');
                 return res.json((0, community_packages_mapper_1.mapToCommunityPackage)(installedPackage));
             }
             catch (error) {
@@ -40,6 +40,7 @@ module.exports = {
                 const updated = await lifecycle.update({
                     name: req.params.name,
                     version: req.body?.version,
+                    verify: req.body?.verify ?? true,
                 }, req.user, 'notFound');
                 return res.json((0, community_packages_mapper_1.mapToCommunityPackage)(updated));
             }

package/dist/public-api/v1/handlers/community-packages/community-packages.handler.js.map

@@ -1 +1 @@
-{"version":3,"file":"community-packages.handler.js","sourceRoot":"","sources":["../../../../../src/public-api/v1/handlers/community-packages/community-packages.handler.ts"],"names":[],"mappings":";AACA,gCAAoC;AAGpC,qFAAiF;AACjF,4HAAsH;AAEtH,2EAA+F;AAC/F,kFAA4E;AAE5E,SAAS,iBAAiB,CAAC,GAAqB,EAAE,KAAoB;IACrE,OAAO,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;AAC1E,CAAC;AAED,iBAAS;IACR,cAAc,EAAE;QACf,IAAA,kCAAc,EAAC,0BAA0B,CAAC;QAC1C,KAAK,EACJ,GAIC,EACD,GAAqB,EACO,EAAE;YAC9B,MAAM,SAAS,GAAG,cAAS,CAAC,GAAG,CAAC,wEAAiC,CAAC,CAAC;YAEnE,IAAI,CAAC;gBACJ,MAAM,gBAAgB,GAAG,MAAM,SAAS,CAAC,OAAO,CAC/C,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,OAAO,EAAE,GAAG,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,EAAE,GAAG,CAAC,IAAI,CAAC,MAAM,IAAI,KAAK,EAAE,EACpF,GAAG,CAAC,IAAI,EACR,WAAW,CACX,CAAC;gBACF,OAAO,GAAG,CAAC,IAAI,CAAC,IAAA,iDAAqB,EAAC,gBAAgB,CAAC,CAAC,CAAC;YAC1D,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBAChB,IAAI,KAAK,YAAY,8BAAa,EAAE,CAAC;oBACpC,OAAO,iBAAiB,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;gBACtC,CAAC;gBACD,MAAM,KAAK,CAAC;YACb,CAAC;QACF,CAAC;KACD;IAED,oBAAoB,EAAE;QACrB,IAAA,kCAAc,EAAC,uBAAuB,CAAC;QACvC,KAAK,EACJ,IAAiD,EACjD,GAAqB,EACO,EAAE;YAC9B,MAAM,SAAS,GAAG,cAAS,CAAC,GAAG,CAAC,wEAAiC,CAAC,CAAC;YACnE,MAAM,QAAQ,GAAG,MAAM,SAAS,CAAC,qBAAqB,EAAE,CAAC;YACzD,OAAO,GAAG,CAAC,IAAI,CAAC,IAAA,qDAAyB,EAAC,QAAQ,CAAC,CAAC,CAAC;QACtD,CAAC;KACD;IAED,aAAa,EAAE;QACd,IAAA,kCAAc,EAAC,yBAAyB,CAAC;QACzC,KAAK,EACJ,GAAwF,EACxF,GAAqB,EACO,EAAE;YAC9B,MAAM,SAAS,GAAG,cAAS,CAAC,GAAG,CAAC,wEAAiC,CAAC,CAAC;YAEnE,IAAI,CAAC;gBACJ,MAAM,OAAO,GAAG,MAAM,SAAS,CAAC,MAAM,CACrC;oBACC,IAAI,EAAE,GAAG,CAAC,MAAM,CAAC,IAAI;oBACrB,OAAO,EAAE,GAAG,CAAC,IAAI,EAAE,OAAO;iBAC1B,EACD,GAAG,CAAC,IAAI,EACR,UAAU,CACV,CAAC;gBACF,OAAO,GAAG,CAAC,IAAI,CAAC,IAAA,iDAAqB,EAAC,OAAO,CAAC,CAAC,CAAC;YACjD,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBAChB,IAAI,KAAK,YAAY,8BAAa,EAAE,CAAC;oBACpC,OAAO,iBAAiB,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;gBACtC,CAAC;gBACD,MAAM,KAAK,CAAC;YACb,CAAC;QACF,CAAC;KACD;IAED,gBAAgB,EAAE;QACjB,IAAA,kCAAc,EAAC,4BAA4B,CAAC;QAC5C,KAAK,EACJ,GAA2C,EAC3C,GAAqB,EACO,EAAE;YAC9B,MAAM,SAAS,GAAG,cAAS,CAAC,GAAG,CAAC,wEAAiC,CAAC,CAAC;YAEnE,IAAI,CAAC;gBACJ,MAAM,SAAS,CAAC,SAAS,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;gBACjE,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;YAC/B,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBAChB,IAAI,KAAK,YAAY,8BAAa,EAAE,CAAC;oBACpC,OAAO,iBAAiB,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;gBACtC,CAAC;gBACD,MAAM,KAAK,CAAC;YACb,CAAC;QACF,CAAC;KACD;CACD,CAAC"}
+{"version":3,"file":"community-packages.handler.js","sourceRoot":"","sources":["../../../../../src/public-api/v1/handlers/community-packages/community-packages.handler.ts"],"names":[],"mappings":";AACA,gCAAoC;AAGpC,qFAAiF;AACjF,4HAAsH;AAEtH,2EAA+F;AAC/F,kFAA4E;AAE5E,SAAS,iBAAiB,CAAC,GAAqB,EAAE,KAAoB;IACrE,OAAO,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;AAC1E,CAAC;AAED,iBAAS;IACR,cAAc,EAAE;QACf,IAAA,kCAAc,EAAC,0BAA0B,CAAC;QAC1C,KAAK,EACJ,GAIC,EACD,GAAqB,EACO,EAAE;YAC9B,MAAM,SAAS,GAAG,cAAS,CAAC,GAAG,CAAC,wEAAiC,CAAC,CAAC;YAEnE,IAAI,CAAC;gBACJ,MAAM,gBAAgB,GAAG,MAAM,SAAS,CAAC,OAAO,CAC/C,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,OAAO,EAAE,GAAG,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,EAAE,GAAG,CAAC,IAAI,CAAC,MAAM,IAAI,IAAI,EAAE,EACnF,GAAG,CAAC,IAAI,EACR,WAAW,CACX,CAAC;gBACF,OAAO,GAAG,CAAC,IAAI,CAAC,IAAA,iDAAqB,EAAC,gBAAgB,CAAC,CAAC,CAAC;YAC1D,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBAChB,IAAI,KAAK,YAAY,8BAAa,EAAE,CAAC;oBACpC,OAAO,iBAAiB,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;gBACtC,CAAC;gBACD,MAAM,KAAK,CAAC;YACb,CAAC;QACF,CAAC;KACD;IAED,oBAAoB,EAAE;QACrB,IAAA,kCAAc,EAAC,uBAAuB,CAAC;QACvC,KAAK,EACJ,IAAiD,EACjD,GAAqB,EACO,EAAE;YAC9B,MAAM,SAAS,GAAG,cAAS,CAAC,GAAG,CAAC,wEAAiC,CAAC,CAAC;YACnE,MAAM,QAAQ,GAAG,MAAM,SAAS,CAAC,qBAAqB,EAAE,CAAC;YACzD,OAAO,GAAG,CAAC,IAAI,CAAC,IAAA,qDAAyB,EAAC,QAAQ,CAAC,CAAC,CAAC;QACtD,CAAC;KACD;IAED,aAAa,EAAE;QACd,IAAA,kCAAc,EAAC,yBAAyB,CAAC;QACzC,KAAK,EACJ,GAIC,EACD,GAAqB,EACO,EAAE;YAC9B,MAAM,SAAS,GAAG,cAAS,CAAC,GAAG,CAAC,wEAAiC,CAAC,CAAC;YAEnE,IAAI,CAAC;gBACJ,MAAM,OAAO,GAAG,MAAM,SAAS,CAAC,MAAM,CACrC;oBACC,IAAI,EAAE,GAAG,CAAC,MAAM,CAAC,IAAI;oBACrB,OAAO,EAAE,GAAG,CAAC,IAAI,EAAE,OAAO;oBAC1B,MAAM,EAAE,GAAG,CAAC,IAAI,EAAE,MAAM,IAAI,IAAI;iBAChC,EACD,GAAG,CAAC,IAAI,EACR,UAAU,CACV,CAAC;gBACF,OAAO,GAAG,CAAC,IAAI,CAAC,IAAA,iDAAqB,EAAC,OAAO,CAAC,CAAC,CAAC;YACjD,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBAChB,IAAI,KAAK,YAAY,8BAAa,EAAE,CAAC;oBACpC,OAAO,iBAAiB,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;gBACtC,CAAC;gBACD,MAAM,KAAK,CAAC;YACb,CAAC;QACF,CAAC;KACD;IAED,gBAAgB,EAAE;QACjB,IAAA,kCAAc,EAAC,4BAA4B,CAAC;QAC5C,KAAK,EACJ,GAA2C,EAC3C,GAAqB,EACO,EAAE;YAC9B,MAAM,SAAS,GAAG,cAAS,CAAC,GAAG,CAAC,wEAAiC,CAAC,CAAC;YAEnE,IAAI,CAAC;gBACJ,MAAM,SAAS,CAAC,SAAS,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;gBACjE,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;YAC/B,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBAChB,IAAI,KAAK,YAAY,8BAAa,EAAE,CAAC;oBACpC,OAAO,iBAAiB,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;gBACtC,CAAC;gBACD,MAAM,KAAK,CAAC;YACb,CAAC;QACF,CAAC;KACD;CACD,CAAC"}