n8n 2.32.0 → 2.32.1
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/dist/build.tsbuildinfo +1 -1
- package/dist/executions/pre-execution-checks/credentials-permission-checker.d.ts +6 -2
- package/dist/executions/pre-execution-checks/credentials-permission-checker.js +40 -2
- package/dist/executions/pre-execution-checks/credentials-permission-checker.js.map +1 -1
- package/dist/modules/redaction/executions/strategies/full-item-redaction.strategy.js +13 -0
- package/dist/modules/redaction/executions/strategies/full-item-redaction.strategy.js.map +1 -1
- package/dist/modules/token-exchange/services/identity-resolution.service.d.ts +7 -2
- package/dist/modules/token-exchange/services/identity-resolution.service.js +23 -4
- package/dist/modules/token-exchange/services/identity-resolution.service.js.map +1 -1
- package/dist/modules/token-exchange/services/token-exchange.service.js +1 -0
- package/dist/modules/token-exchange/services/token-exchange.service.js.map +1 -1
- package/dist/modules/token-exchange/services/trusted-key.service.js +4 -1
- package/dist/modules/token-exchange/services/trusted-key.service.js.map +1 -1
- package/dist/modules/token-exchange/token-exchange.config.d.ts +1 -0
- package/dist/modules/token-exchange/token-exchange.config.js +5 -0
- package/dist/modules/token-exchange/token-exchange.config.js.map +1 -1
- package/dist/modules/token-exchange/token-exchange.schemas.d.ts +13 -0
- package/dist/modules/token-exchange/token-exchange.schemas.js +7 -0
- package/dist/modules/token-exchange/token-exchange.schemas.js.map +1 -1
- package/dist/modules/token-exchange/token-exchange.types.d.ts +1 -0
- package/dist/modules/token-exchange/token-exchange.types.js +1 -0
- package/dist/modules/token-exchange/token-exchange.types.js.map +1 -1
- package/dist/workflow-execute-additional-data.js +10 -3
- package/dist/workflow-execute-additional-data.js.map +1 -1
- package/dist/workflows/workflow.service.ee.d.ts +4 -2
- package/dist/workflows/workflow.service.ee.js +40 -5
- package/dist/workflows/workflow.service.ee.js.map +1 -1
- package/package.json +28 -28
|
@@ -1,5 +1,6 @@
|
|
|
1
|
-
import { CredentialsRepository, SharedCredentialsRepository } from '@n8n/db';
|
|
1
|
+
import { CredentialsRepository, SharedCredentialsRepository, UserRepository } from '@n8n/db';
|
|
2
2
|
import type { INode } from 'n8n-workflow';
|
|
3
|
+
import { CredentialsFinderService } from '../../credentials/credentials-finder.service';
|
|
3
4
|
import { NodeTypes } from '../../node-types';
|
|
4
5
|
import { OwnershipService } from '../../services/ownership.service';
|
|
5
6
|
import { ProjectService } from '../../services/project.service.ee';
|
|
@@ -9,7 +10,10 @@ export declare class CredentialsPermissionChecker {
|
|
|
9
10
|
private readonly ownershipService;
|
|
10
11
|
private readonly projectService;
|
|
11
12
|
private readonly nodeTypes;
|
|
12
|
-
|
|
13
|
+
private readonly userRepository;
|
|
14
|
+
private readonly credentialsFinderService;
|
|
15
|
+
constructor(sharedCredentialsRepository: SharedCredentialsRepository, credentialsRepository: CredentialsRepository, ownershipService: OwnershipService, projectService: ProjectService, nodeTypes: NodeTypes, userRepository: UserRepository, credentialsFinderService: CredentialsFinderService);
|
|
16
|
+
checkForUser(userId: string, nodes: INode[]): Promise<void>;
|
|
13
17
|
check(workflowId: string, nodes: INode[]): Promise<void>;
|
|
14
18
|
private addGlobalCredentialsToAccessibleSet;
|
|
15
19
|
private mapCredIdsToNodes;
|
|
@@ -14,6 +14,7 @@ const db_1 = require("@n8n/db");
|
|
|
14
14
|
const di_1 = require("@n8n/di");
|
|
15
15
|
const permissions_1 = require("@n8n/permissions");
|
|
16
16
|
const n8n_workflow_1 = require("n8n-workflow");
|
|
17
|
+
const credentials_finder_service_1 = require("../../credentials/credentials-finder.service");
|
|
17
18
|
const node_types_1 = require("../../node-types");
|
|
18
19
|
const ownership_service_1 = require("../../services/ownership.service");
|
|
19
20
|
const project_service_ee_1 = require("../../services/project.service.ee");
|
|
@@ -24,6 +25,13 @@ class InvalidCredentialError extends n8n_workflow_1.UserError {
|
|
|
24
25
|
this.description = 'Please recreate the credential.';
|
|
25
26
|
}
|
|
26
27
|
}
|
|
28
|
+
class InaccessibleCredentialForUserError extends n8n_workflow_1.UserError {
|
|
29
|
+
constructor(node) {
|
|
30
|
+
super(`Node "${node.name}" uses a credential you do not have access to`);
|
|
31
|
+
this.node = node;
|
|
32
|
+
this.description = 'This node uses a credential you do not have access to. Ask its owner to share it with you.';
|
|
33
|
+
}
|
|
34
|
+
}
|
|
27
35
|
class InaccessibleCredentialError extends n8n_workflow_1.UserError {
|
|
28
36
|
constructor(node, project) {
|
|
29
37
|
super(`Node "${node.name}" does not have access to the credential`);
|
|
@@ -35,12 +43,38 @@ class InaccessibleCredentialError extends n8n_workflow_1.UserError {
|
|
|
35
43
|
}
|
|
36
44
|
}
|
|
37
45
|
let CredentialsPermissionChecker = class CredentialsPermissionChecker {
|
|
38
|
-
constructor(sharedCredentialsRepository, credentialsRepository, ownershipService, projectService, nodeTypes) {
|
|
46
|
+
constructor(sharedCredentialsRepository, credentialsRepository, ownershipService, projectService, nodeTypes, userRepository, credentialsFinderService) {
|
|
39
47
|
this.sharedCredentialsRepository = sharedCredentialsRepository;
|
|
40
48
|
this.credentialsRepository = credentialsRepository;
|
|
41
49
|
this.ownershipService = ownershipService;
|
|
42
50
|
this.projectService = projectService;
|
|
43
51
|
this.nodeTypes = nodeTypes;
|
|
52
|
+
this.userRepository = userRepository;
|
|
53
|
+
this.credentialsFinderService = credentialsFinderService;
|
|
54
|
+
}
|
|
55
|
+
async checkForUser(userId, nodes) {
|
|
56
|
+
const credIdsToNodes = this.mapCredIdsToNodes(nodes);
|
|
57
|
+
const workflowCredIds = Object.keys(credIdsToNodes);
|
|
58
|
+
if (workflowCredIds.length === 0)
|
|
59
|
+
return;
|
|
60
|
+
const user = await this.userRepository.findOne({
|
|
61
|
+
where: { id: userId },
|
|
62
|
+
relations: ['role'],
|
|
63
|
+
});
|
|
64
|
+
if (!user) {
|
|
65
|
+
throw new InaccessibleCredentialForUserError(credIdsToNodes[workflowCredIds[0]][0]);
|
|
66
|
+
}
|
|
67
|
+
if ((0, permissions_1.hasGlobalScope)(user, 'credential:list'))
|
|
68
|
+
return;
|
|
69
|
+
const accessibleCredentials = await this.credentialsFinderService.findCredentialsForUser(user, [
|
|
70
|
+
'credential:read',
|
|
71
|
+
]);
|
|
72
|
+
const accessibleSet = new Set(accessibleCredentials.map((cred) => cred.id));
|
|
73
|
+
for (const credentialsId of workflowCredIds) {
|
|
74
|
+
if (!accessibleSet.has(credentialsId)) {
|
|
75
|
+
throw new InaccessibleCredentialForUserError(credIdsToNodes[credentialsId][0]);
|
|
76
|
+
}
|
|
77
|
+
}
|
|
44
78
|
}
|
|
45
79
|
async check(workflowId, nodes) {
|
|
46
80
|
const homeProject = await this.ownershipService.getWorkflowProjectCached(workflowId);
|
|
@@ -104,10 +138,14 @@ let CredentialsPermissionChecker = class CredentialsPermissionChecker {
|
|
|
104
138
|
}
|
|
105
139
|
const { nodeCredentialType } = node.parameters;
|
|
106
140
|
if (typeof nodeCredentialType === 'string' && nodeCredentialType) {
|
|
141
|
+
if ((0, n8n_workflow_1.isExpression)(nodeCredentialType))
|
|
142
|
+
return null;
|
|
107
143
|
activeTypes.add(nodeCredentialType);
|
|
108
144
|
}
|
|
109
145
|
const { genericAuthType } = node.parameters;
|
|
110
146
|
if (typeof genericAuthType === 'string' && genericAuthType) {
|
|
147
|
+
if ((0, n8n_workflow_1.isExpression)(genericAuthType))
|
|
148
|
+
return null;
|
|
111
149
|
activeTypes.add(genericAuthType);
|
|
112
150
|
}
|
|
113
151
|
return activeTypes;
|
|
@@ -120,6 +158,6 @@ let CredentialsPermissionChecker = class CredentialsPermissionChecker {
|
|
|
120
158
|
exports.CredentialsPermissionChecker = CredentialsPermissionChecker;
|
|
121
159
|
exports.CredentialsPermissionChecker = CredentialsPermissionChecker = __decorate([
|
|
122
160
|
(0, di_1.Service)(),
|
|
123
|
-
__metadata("design:paramtypes", [db_1.SharedCredentialsRepository, db_1.CredentialsRepository, ownership_service_1.OwnershipService, project_service_ee_1.ProjectService, node_types_1.NodeTypes])
|
|
161
|
+
__metadata("design:paramtypes", [db_1.SharedCredentialsRepository, db_1.CredentialsRepository, ownership_service_1.OwnershipService, project_service_ee_1.ProjectService, node_types_1.NodeTypes, db_1.UserRepository, credentials_finder_service_1.CredentialsFinderService])
|
|
124
162
|
], CredentialsPermissionChecker);
|
|
125
163
|
//# sourceMappingURL=credentials-permission-checker.js.map
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"credentials-permission-checker.js","sourceRoot":"","sources":["../../../src/executions/pre-execution-checks/credentials-permission-checker.ts"],"names":[],"mappings":";;;;;;;;;;;;AACA,
|
|
1
|
+
{"version":3,"file":"credentials-permission-checker.js","sourceRoot":"","sources":["../../../src/executions/pre-execution-checks/credentials-permission-checker.ts"],"names":[],"mappings":";;;;;;;;;;;;AACA,gCAA6F;AAC7F,gCAAkC;AAClC,kDAAkD;AAElD,+CAAyE;AAEzE,yFAAoF;AACpF,6CAAyC;AACzC,oEAAgE;AAChE,sEAA+D;AAE/D,MAAM,sBAAuB,SAAQ,wBAAS;IAG7C,YAAqB,IAAW;QAC/B,KAAK,CAAC,SAAS,IAAI,CAAC,IAAI,2BAA2B,CAAC,CAAC;QADjC,SAAI,GAAJ,IAAI,CAAO;QAFvB,gBAAW,GAAG,iCAAiC,CAAC;IAIzD,CAAC;CACD;AAED,MAAM,kCAAmC,SAAQ,wBAAS;IAIzD,YAAqB,IAAW;QAC/B,KAAK,CAAC,SAAS,IAAI,CAAC,IAAI,+CAA+C,CAAC,CAAC;QADrD,SAAI,GAAJ,IAAI,CAAO;QAHvB,gBAAW,GACnB,4FAA4F,CAAC;IAI9F,CAAC;CACD;AAED,MAAM,2BAA4B,SAAQ,wBAAS;IAMlD,YACU,IAAW,EACH,OAAgB;QAEjC,KAAK,CAAC,SAAS,IAAI,CAAC,IAAI,0CAA0C,CAAC,CAAC;QAH3D,SAAI,GAAJ,IAAI,CAAO;QACH,YAAO,GAAP,OAAO,CAAS;QAPzB,gBAAW,GACnB,IAAI,CAAC,OAAO,CAAC,IAAI,KAAK,UAAU;YAC/B,CAAC,CAAC,uEAAuE;YACzE,CAAC,CAAC,oEAAoE,IAAI,CAAC,OAAO,CAAC,IAAI,GAAG,CAAC;IAO7F,CAAC;CACD;AAGM,IAAM,4BAA4B,GAAlC,MAAM,4BAA4B;IACxC,YACkB,2BAAwD,EACxD,qBAA4C,EAC5C,gBAAkC,EAClC,cAA8B,EAC9B,SAAoB,EACpB,cAA8B,EAC9B,wBAAkD;2CANlD,2BAA2B;qCAC3B,qBAAqB;gCACrB,gBAAgB;8BAChB,cAAc;yBACd,SAAS;8BACT,cAAc;wCACd,wBAAwB;IACvC,CAAC;IASJ,KAAK,CAAC,YAAY,CAAC,MAAc,EAAE,KAAc;QAChD,MAAM,cAAc,GAAG,IAAI,CAAC,iBAAiB,CAAC,KAAK,CAAC,CAAC;QACrD,MAAM,eAAe,GAAG,MAAM,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;QAEpD,IAAI,eAAe,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO;QAGzC,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,OAAO,CAAC;YAC9C,KAAK,EAAE,EAAE,EAAE,EAAE,MAAM,EAAE;YACrB,SAAS,EAAE,CAAC,MAAM,CAAC;SACnB,CAAC,CAAC;QACH,IAAI,CAAC,IAAI,EAAE,CAAC;YAEX,MAAM,IAAI,kCAAkC,CAAC,cAAc,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACrF,CAAC;QAGD,IAAI,IAAA,4BAAc,EAAC,IAAI,EAAE,iBAAiB,CAAC;YAAE,OAAO;QAEpD,MAAM,qBAAqB,GAAG,MAAM,IAAI,CAAC,wBAAwB,CAAC,sBAAsB,CAAC,IAAI,EAAE;YAC9F,iBAAiB;SACjB,CAAC,CAAC;QACH,MAAM,aAAa,GAAG,IAAI,GAAG,CAAC,qBAAqB,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;QAE5E,KAAK,MAAM,aAAa,IAAI,eAAe,EAAE,CAAC;YAC7C,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,aAAa,CAAC,EAAE,CAAC;gBACvC,MAAM,IAAI,kCAAkC,CAAC,cAAc,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YAChF,CAAC;QACF,CAAC;IACF,CAAC;IAKD,KAAK,CAAC,KAAK,CAAC,UAAkB,EAAE,KAAc;QAC7C,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAAC,wBAAwB,CAAC,UAAU,CAAC,CAAC;QACrF,MAAM,gBAAgB,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAAC,6BAA6B,CACjF,WAAW,CAAC,EAAE,CACd,CAAC;QACF,IACC,WAAW,CAAC,IAAI,KAAK,UAAU;YAC/B,gBAAgB;YAChB,IAAA,4BAAc,EAAC,gBAAgB,EAAE,iBAAiB,CAAC,EAClD,CAAC;YAGF,OAAO;QACR,CAAC;QACD,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,wBAAwB,CAAC,UAAU,CAAC,CAAC;QAClF,MAAM,cAAc,GAAG,IAAI,CAAC,iBAAiB,CAAC,KAAK,CAAC,CAAC;QAErD,MAAM,eAAe,GAAG,MAAM,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;QAEpD,IAAI,eAAe,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO;QAEzC,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,2BAA2B,CAAC,gCAAgC,CACzF,UAAU,EACV,eAAe,CACf,CAAC;QAEF,MAAM,aAAa,GAAG,MAAM,IAAI,CAAC,mCAAmC,CAAC,UAAU,CAAC,CAAC;QAEjF,KAAK,MAAM,aAAa,IAAI,eAAe,EAAE,CAAC;YAC7C,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,aAAa,CAAC,EAAE,CAAC;gBACvC,MAAM,UAAU,GAAG,cAAc,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC;gBACpD,MAAM,IAAI,2BAA2B,CAAC,UAAU,EAAE,WAAW,CAAC,CAAC;YAChE,CAAC;QACF,CAAC;IACF,CAAC;IAKO,KAAK,CAAC,mCAAmC,CAChD,uBAAiC;QAEjC,MAAM,aAAa,GAAG,IAAI,GAAG,CAAC,uBAAuB,CAAC,CAAC;QACvD,MAAM,iBAAiB,GAAG,MAAM,IAAI,CAAC,qBAAqB,CAAC,IAAI,CAAC;YAC/D,KAAK,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE;YACzB,MAAM,EAAE,CAAC,IAAI,CAAC;SACd,CAAC,CAAC;QACH,KAAK,MAAM,UAAU,IAAI,iBAAiB,EAAE,CAAC;YAC5C,aAAa,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC;QAClC,CAAC;QACD,OAAO,aAAa,CAAC;IACtB,CAAC;IAEO,iBAAiB,CAAC,KAAc;QACvC,OAAO,KAAK,CAAC,MAAM,CAAsC,CAAC,GAAG,EAAE,IAAI,EAAE,EAAE;YACtE,IAAI,IAAI,CAAC,QAAQ,IAAI,CAAC,IAAI,CAAC,WAAW;gBAAE,OAAO,GAAG,CAAC;YAEnD,MAAM,eAAe,GAAG,IAAI,CAAC,wBAAwB,CAAC,IAAI,CAAC,CAAC;YAE5D,KAAK,MAAM,CAAC,QAAQ,EAAE,IAAI,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,WAAW,CAAC,EAAE,CAAC;gBACjE,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC;oBAEd,IAAI,IAAI,CAAC,kBAAkB,KAAK,IAAI;wBAAE,SAAS;oBAC/C,MAAM,IAAI,sBAAsB,CAAC,IAAI,CAAC,CAAC;gBACxC,CAAC;gBAGD,IAAI,eAAe,KAAK,IAAI,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,QAAQ,CAAC;oBAAE,SAAS;gBAEzE,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,GAAG,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;YAChE,CAAC;YAED,OAAO,GAAG,CAAC;QACZ,CAAC,EAAE,EAAE,CAAC,CAAC;IACR,CAAC;IAOO,wBAAwB,CAAC,IAAW;QAC3C,IAAI,CAAC;YACJ,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAS,CAAC,mBAAmB,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,WAAW,CAAC,CAAC;YACjF,MAAM,WAAW,GAAG,IAAI,GAAG,EAAU,CAAC;YAGtC,KAAK,MAAM,OAAO,IAAI,QAAQ,CAAC,WAAW,CAAC,WAAW,IAAI,EAAE,EAAE,CAAC;gBAC9D,IAAI,IAAA,+BAAgB,EAAC,IAAI,CAAC,UAAU,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC;oBAC5E,WAAW,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;gBAC/B,CAAC;YACF,CAAC;YAID,MAAM,EAAE,kBAAkB,EAAE,GAAG,IAAI,CAAC,UAAU,CAAC;YAC/C,IAAI,OAAO,kBAAkB,KAAK,QAAQ,IAAI,kBAAkB,EAAE,CAAC;gBAIlE,IAAI,IAAA,2BAAY,EAAC,kBAAkB,CAAC;oBAAE,OAAO,IAAI,CAAC;gBAClD,WAAW,CAAC,GAAG,CAAC,kBAAkB,CAAC,CAAC;YACrC,CAAC;YAKD,MAAM,EAAE,eAAe,EAAE,GAAG,IAAI,CAAC,UAAU,CAAC;YAC5C,IAAI,OAAO,eAAe,KAAK,QAAQ,IAAI,eAAe,EAAE,CAAC;gBAC5D,IAAI,IAAA,2BAAY,EAAC,eAAe,CAAC;oBAAE,OAAO,IAAI,CAAC;gBAC/C,WAAW,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC;YAClC,CAAC;YAED,OAAO,WAAW,CAAC;QACpB,CAAC;QAAC,MAAM,CAAC;YAER,OAAO,IAAI,CAAC;QACb,CAAC;IACF,CAAC;CACD,CAAA;;uCA3KY,4BAA4B;IADxC,IAAA,YAAO,GAAE;qCAGsC,gCAA2B,EACjC,0BAAqB,EAC1B,oCAAgB,EAClB,mCAAc,EACnB,sBAAS,EACJ,mBAAc,EACJ,qDAAwB;GARxD,4BAA4B,CA2KxC"}
|
|
@@ -43,6 +43,19 @@ let FullItemRedactionStrategy = class FullItemRedactionStrategy {
|
|
|
43
43
|
resultData.redactedError = this.redactError(resultData.error);
|
|
44
44
|
delete resultData.error;
|
|
45
45
|
}
|
|
46
|
+
const executionData = execution.data.executionData;
|
|
47
|
+
if (executionData) {
|
|
48
|
+
for (const executeData of executionData.nodeExecutionStack ?? []) {
|
|
49
|
+
if (executeData.data) {
|
|
50
|
+
this.redactConnections(executeData.data, reason);
|
|
51
|
+
}
|
|
52
|
+
}
|
|
53
|
+
for (const runIndexMap of Object.values(executionData.waitingExecution ?? {})) {
|
|
54
|
+
for (const waitingExecution of Object.values(runIndexMap)) {
|
|
55
|
+
this.redactConnections(waitingExecution, reason);
|
|
56
|
+
}
|
|
57
|
+
}
|
|
58
|
+
}
|
|
46
59
|
execution.data.redactionInfo = {
|
|
47
60
|
...execution.data.redactionInfo,
|
|
48
61
|
isRedacted: true,
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"full-item-redaction.strategy.js","sourceRoot":"","sources":["../../../../../src/modules/redaction/executions/strategies/full-item-redaction.strategy.ts"],"names":[],"mappings":";;;;;;;;;AAAA,gCAAkC;AAgB3B,IAAM,yBAAyB,GAA/B,MAAM,yBAAyB;IAA/B;QACG,SAAI,GAAG,qBAAqB,CAAC;
|
|
1
|
+
{"version":3,"file":"full-item-redaction.strategy.js","sourceRoot":"","sources":["../../../../../src/modules/redaction/executions/strategies/full-item-redaction.strategy.ts"],"names":[],"mappings":";;;;;;;;;AAAA,gCAAkC;AAgB3B,IAAM,yBAAyB,GAA/B,MAAM,yBAAyB;IAA/B;QACG,SAAI,GAAG,qBAAqB,CAAC;IAqGvC,CAAC;IAnGA,iBAAiB,CAAC,UAA+B,EAAE,QAA0B;QAE5E,OAAO,IAAI,CAAC;IACb,CAAC;IAED,KAAK,CAAC,KAAK,CAAC,SAA8B,EAAE,OAAyB;QACpE,MAAM,OAAO,GAAG,SAAS,CAAC,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC;QAClD,IAAI,CAAC,OAAO;YAAE,OAAO;QAErB,MAAM,MAAM,GAAG,OAAO,CAAC,uBAAuB;YAC7C,CAAC,CAAC,qBAAqB;YACvB,CAAC,CAAC,OAAO,CAAC,mBAAmB,KAAK,IAAI;gBACrC,CAAC,CAAC,gBAAgB;gBAClB,CAAC,CAAC,2BAA2B,CAAC;QAEhC,KAAK,MAAM,QAAQ,IAAI,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;YAC7C,KAAK,MAAM,QAAQ,IAAI,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC;gBAC1C,IAAI,QAAQ,CAAC,IAAI,EAAE,CAAC;oBACnB,IAAI,CAAC,iBAAiB,CAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;gBAC/C,CAAC;gBACD,IAAI,QAAQ,CAAC,aAAa,EAAE,CAAC;oBAC5B,IAAI,CAAC,iBAAiB,CAAC,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC,CAAC;gBACxD,CAAC;gBACD,IAAI,QAAQ,CAAC,KAAK,EAAE,CAAC;oBACpB,QAAQ,CAAC,aAAa,GAAG,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;oBAC1D,OAAO,QAAQ,CAAC,KAAK,CAAC;gBACvB,CAAC;YACF,CAAC;QACF,CAAC;QAED,MAAM,UAAU,GAAG,SAAS,CAAC,IAAI,CAAC,UAAU,CAAC;QAC7C,IAAI,UAAU,CAAC,KAAK,EAAE,CAAC;YACtB,UAAU,CAAC,aAAa,GAAG,IAAI,CAAC,WAAW,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;YAC9D,OAAO,UAAU,CAAC,KAAK,CAAC;QACzB,CAAC;QAED,MAAM,aAAa,GAAG,SAAS,CAAC,IAAI,CAAC,aAAa,CAAC;QAEnD,IAAI,aAAa,EAAE,CAAC;YACnB,KAAK,MAAM,WAAW,IAAI,aAAa,CAAC,kBAAkB,IAAI,EAAE,EAAE,CAAC;gBAClE,IAAI,WAAW,CAAC,IAAI,EAAE,CAAC;oBACtB,IAAI,CAAC,iBAAiB,CAAC,WAAW,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;gBAClD,CAAC;YACF,CAAC;YAED,KAAK,MAAM,WAAW,IAAI,MAAM,CAAC,MAAM,CAAC,aAAa,CAAC,gBAAgB,IAAI,EAAE,CAAC,EAAE,CAAC;gBAC/E,KAAK,MAAM,gBAAgB,IAAI,MAAM,CAAC,MAAM,CAAC,WAAW,CAAC,EAAE,CAAC;oBAC3D,IAAI,CAAC,iBAAiB,CAAC,gBAAgB,EAAE,MAAM,CAAC,CAAC;gBAClD,CAAC;YACF,CAAC;QACF,CAAC;QAED,SAAS,CAAC,IAAI,CAAC,aAAa,GAAG;YAC9B,GAAG,SAAS,CAAC,IAAI,CAAC,aAAa;YAC/B,UAAU,EAAE,IAAI;YAChB,MAAM;YACN,SAAS,EAAE,OAAO,CAAC,aAAa;SAChC,CAAC;IACH,CAAC;IAEO,iBAAiB,CAAC,WAAiC,EAAE,MAAc;QAC1E,KAAK,MAAM,cAAc,IAAI,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,EAAE,CAAC;YACvD,MAAM,OAAO,GAAG,WAAW,CAAC,cAAc,CAAC,CAAC;YAC5C,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;gBAC7B,IAAI,KAAK,EAAE,CAAC;oBACX,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;wBAC1B,IAAI,CAAC,UAAU,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;oBAC/B,CAAC;gBACF,CAAC;YACF,CAAC;QACF,CAAC;IACF,CAAC;IAEO,UAAU,CAAC,IAAwB,EAAE,MAAc;QAC1D,MAAM,aAAa,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QAC5E,OAAO,IAAI,CAAC,KAAK,CAAC;QAClB,IAAI,CAAC,IAAI,GAAG,EAAE,CAAC;QACf,OAAO,IAAI,CAAC,MAAM,CAAC;QAEnB,IAAI,CAAC,SAAS,GAAG;YAChB,QAAQ,EAAE,IAAI;YACd,MAAM;YACN,GAAG,CAAC,aAAa,KAAK,SAAS,IAAI,EAAE,KAAK,EAAE,aAAa,EAAE,CAAC;SAC5D,CAAC;IACH,CAAC;IAOO,WAAW,CAAC,KAAqB;QACxC,MAAM,MAAM,GAAuB,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,CAAC;QACxD,IAAI,KAAK,CAAC,IAAI,KAAK,cAAc,EAAE,CAAC;YACnC,MAAM,CAAC,QAAQ;gBACd,CAAC,UAAU,IAAI,KAAK,CAAC,CAAC,CAAE,KAAqC,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC;QACzF,CAAC;QACD,OAAO,MAAM,CAAC;IACf,CAAC;CACD,CAAA;;oCAtGY,yBAAyB;IADrC,IAAA,YAAO,GAAE;GACG,yBAAyB,CAsGrC"}
|
|
@@ -3,6 +3,7 @@ import { AuthIdentityRepository, UserRepository, type User } from '@n8n/db';
|
|
|
3
3
|
import { EventService } from '../../../events/event.service';
|
|
4
4
|
import { RoleService } from '../../../services/role.service';
|
|
5
5
|
import { UserService } from '../../../services/user.service';
|
|
6
|
+
import { TokenExchangeConfig } from '../token-exchange.config';
|
|
6
7
|
import type { ExternalTokenClaims } from '../token-exchange.schemas';
|
|
7
8
|
import { TrustedKeyService } from './trusted-key.service';
|
|
8
9
|
export declare function qualifiedProviderId(issuer: string, sub: string): string;
|
|
@@ -13,11 +14,15 @@ export declare class IdentityResolutionService {
|
|
|
13
14
|
private readonly userService;
|
|
14
15
|
private readonly trustedKeyService;
|
|
15
16
|
private readonly roleService;
|
|
17
|
+
private readonly config;
|
|
16
18
|
private readonly logger;
|
|
17
|
-
constructor(logger: Logger, userRepository: UserRepository, authIdentityRepository: AuthIdentityRepository, eventService: EventService, userService: UserService, trustedKeyService: TrustedKeyService, roleService: RoleService);
|
|
18
|
-
|
|
19
|
+
constructor(logger: Logger, userRepository: UserRepository, authIdentityRepository: AuthIdentityRepository, eventService: EventService, userService: UserService, trustedKeyService: TrustedKeyService, roleService: RoleService, config: TokenExchangeConfig);
|
|
20
|
+
private assertKeyMayActAsUser;
|
|
21
|
+
private assertEmailVerified;
|
|
22
|
+
resolve(claims: ExternalTokenClaims, allowedRoles: string[] | undefined, tokenContext: {
|
|
19
23
|
kid: string;
|
|
20
24
|
issuer: string;
|
|
25
|
+
requireVerifiedEmail: boolean;
|
|
21
26
|
}): Promise<User>;
|
|
22
27
|
private resolveByIdentity;
|
|
23
28
|
private resolveByEmail;
|
|
@@ -19,6 +19,7 @@ const node_crypto_1 = require("node:crypto");
|
|
|
19
19
|
const event_service_1 = require("../../../events/event.service");
|
|
20
20
|
const role_service_1 = require("../../../services/role.service");
|
|
21
21
|
const user_service_1 = require("../../../services/user.service");
|
|
22
|
+
const token_exchange_config_1 = require("../token-exchange.config");
|
|
22
23
|
const token_exchange_errors_1 = require("../token-exchange.errors");
|
|
23
24
|
const token_exchange_types_1 = require("../token-exchange.types");
|
|
24
25
|
const trusted_key_service_1 = require("./trusted-key.service");
|
|
@@ -31,15 +32,29 @@ function qualifiedProviderId(issuer, sub) {
|
|
|
31
32
|
return `${(0, node_crypto_1.createHash)('sha256').update(issuer).digest('hex')}::${sub}`;
|
|
32
33
|
}
|
|
33
34
|
let IdentityResolutionService = class IdentityResolutionService {
|
|
34
|
-
constructor(logger, userRepository, authIdentityRepository, eventService, userService, trustedKeyService, roleService) {
|
|
35
|
+
constructor(logger, userRepository, authIdentityRepository, eventService, userService, trustedKeyService, roleService, config) {
|
|
35
36
|
this.userRepository = userRepository;
|
|
36
37
|
this.authIdentityRepository = authIdentityRepository;
|
|
37
38
|
this.eventService = eventService;
|
|
38
39
|
this.userService = userService;
|
|
39
40
|
this.trustedKeyService = trustedKeyService;
|
|
40
41
|
this.roleService = roleService;
|
|
42
|
+
this.config = config;
|
|
41
43
|
this.logger = logger.scoped('token-exchange');
|
|
42
44
|
}
|
|
45
|
+
assertKeyMayActAsUser(user, allowedRoles) {
|
|
46
|
+
if (this.config.excludeOwner && user.role?.slug === permissions_1.GLOBAL_OWNER_ROLE_SLUG) {
|
|
47
|
+
throw new token_exchange_errors_1.TokenExchangeAuthError(token_exchange_types_1.TokenExchangeFailureReason.RoleNotAllowed, 'User role is not allowed for this key');
|
|
48
|
+
}
|
|
49
|
+
if (allowedRoles?.length && !allowedRoles.includes(user.role?.slug ?? '')) {
|
|
50
|
+
throw new token_exchange_errors_1.TokenExchangeAuthError(token_exchange_types_1.TokenExchangeFailureReason.RoleNotAllowed, 'User role is not allowed for this key');
|
|
51
|
+
}
|
|
52
|
+
}
|
|
53
|
+
assertEmailVerified(claims, tokenContext) {
|
|
54
|
+
if (tokenContext?.requireVerifiedEmail && !claims.email_verified) {
|
|
55
|
+
throw new token_exchange_errors_1.TokenExchangeAuthError(token_exchange_types_1.TokenExchangeFailureReason.EmailNotVerified, 'Email is not verified');
|
|
56
|
+
}
|
|
57
|
+
}
|
|
43
58
|
async resolve(claims, allowedRoles, tokenContext) {
|
|
44
59
|
const email = claims.email?.toLowerCase();
|
|
45
60
|
const qualifiedSub = qualifiedProviderId(claims.iss, claims.sub);
|
|
@@ -59,8 +74,8 @@ let IdentityResolutionService = class IdentityResolutionService {
|
|
|
59
74
|
this.eventService.emit('token-exchange-identity-rebound', {
|
|
60
75
|
userId: identity.user.id,
|
|
61
76
|
sub: claims.sub,
|
|
62
|
-
kid: tokenContext
|
|
63
|
-
issuer: tokenContext
|
|
77
|
+
kid: tokenContext.kid,
|
|
78
|
+
issuer: tokenContext.issuer,
|
|
64
79
|
});
|
|
65
80
|
return await this.resolveByIdentity(claims, identity, allowedRoles, tokenContext);
|
|
66
81
|
}
|
|
@@ -79,6 +94,7 @@ let IdentityResolutionService = class IdentityResolutionService {
|
|
|
79
94
|
return await this.provisionUser(claims, email, allowedRoles, tokenContext);
|
|
80
95
|
}
|
|
81
96
|
async resolveByIdentity(claims, identity, allowedRoles, tokenContext) {
|
|
97
|
+
this.assertKeyMayActAsUser(identity.user, allowedRoles);
|
|
82
98
|
this.logger.debug('Resolved user by auth identity', { sub: claims.sub });
|
|
83
99
|
const resolvedRole = await this.resolveRoleForExistingUser(claims.role, allowedRoles, identity.user.role?.slug);
|
|
84
100
|
return await this.syncProfile(identity.user, claims, resolvedRole, tokenContext);
|
|
@@ -88,6 +104,8 @@ let IdentityResolutionService = class IdentityResolutionService {
|
|
|
88
104
|
sub: claims.sub,
|
|
89
105
|
email,
|
|
90
106
|
});
|
|
107
|
+
this.assertKeyMayActAsUser(existingUser, allowedRoles);
|
|
108
|
+
this.assertEmailVerified(claims, tokenContext);
|
|
91
109
|
const resolvedRole = await this.resolveRoleForExistingUser(claims.role, allowedRoles, existingUser.role?.slug);
|
|
92
110
|
const qualifiedSub = qualifiedProviderId(claims.iss, claims.sub);
|
|
93
111
|
await this.authIdentityRepository.save(db_1.AuthIdentity.create(existingUser, qualifiedSub, 'token-exchange'));
|
|
@@ -101,6 +119,7 @@ let IdentityResolutionService = class IdentityResolutionService {
|
|
|
101
119
|
return await this.syncProfile(existingUser, claims, resolvedRole, tokenContext);
|
|
102
120
|
}
|
|
103
121
|
async provisionUser(claims, email, allowedRoles, tokenContext) {
|
|
122
|
+
this.assertEmailVerified(claims, tokenContext);
|
|
104
123
|
this.logger.debug('JIT provisioning new user', { sub: claims.sub, email });
|
|
105
124
|
const jitRole = await this.resolveRoleForNewUser(claims.role, allowedRoles);
|
|
106
125
|
const targetRole = jitRole ? { slug: jitRole } : db_1.GLOBAL_MEMBER_ROLE;
|
|
@@ -217,6 +236,6 @@ let IdentityResolutionService = class IdentityResolutionService {
|
|
|
217
236
|
exports.IdentityResolutionService = IdentityResolutionService;
|
|
218
237
|
exports.IdentityResolutionService = IdentityResolutionService = __decorate([
|
|
219
238
|
(0, di_1.Service)(),
|
|
220
|
-
__metadata("design:paramtypes", [backend_common_1.Logger, db_1.UserRepository, db_1.AuthIdentityRepository, event_service_1.EventService, user_service_1.UserService, trusted_key_service_1.TrustedKeyService, role_service_1.RoleService])
|
|
239
|
+
__metadata("design:paramtypes", [backend_common_1.Logger, db_1.UserRepository, db_1.AuthIdentityRepository, event_service_1.EventService, user_service_1.UserService, trusted_key_service_1.TrustedKeyService, role_service_1.RoleService, token_exchange_config_1.TokenExchangeConfig])
|
|
221
240
|
], IdentityResolutionService);
|
|
222
241
|
//# sourceMappingURL=identity-resolution.service.js.map
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"identity-resolution.service.js","sourceRoot":"","sources":["../../../../src/modules/token-exchange/services/identity-resolution.service.ts"],"names":[],"mappings":";;;;;;;;;;;;;AAAA,wDAA6C;AAC7C,gCAMiB;AACjB,gCAAkC;AAClC,
|
|
1
|
+
{"version":3,"file":"identity-resolution.service.js","sourceRoot":"","sources":["../../../../src/modules/token-exchange/services/identity-resolution.service.ts"],"names":[],"mappings":";;;;;;;;;;;;;AAAA,wDAA6C;AAC7C,gCAMiB;AACjB,gCAAkC;AAClC,kDAAyE;AACzE,6CAAyC;AAEzC,0DAAsD;AACtD,0DAAsD;AACtD,0DAAsD;AAEtD,oEAA+D;AAC/D,oEAAkE;AAElE,kEAAqE;AACrE,+DAA0D;AAO1D,MAAM,4BAA4B,GAAG,6BAA6B,CAAC;AAGnE,MAAM,eAAe,GAAG,EAAE,CAAC;AAE3B,SAAS,QAAQ,CAAC,KAAyB,EAAE,QAAQ,GAAG,EAAE;IACzD,OAAO,CAAC,KAAK,IAAI,QAAQ,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,eAAe,CAAC,CAAC;AACtD,CAAC;AAED,6BAAoC,MAAc,EAAE,GAAW;IAC9D,OAAO,GAAG,IAAA,wBAAU,EAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,GAAG,EAAE,CAAC;AACvE,CAAC;AAGM,IAAM,yBAAyB,GAA/B,MAAM,yBAAyB;IAGrC,YACC,MAAc,EACG,cAA8B,EAC9B,sBAA8C,EAC9C,YAA0B,EAC1B,WAAwB,EACxB,iBAAoC,EACpC,WAAwB,EACxB,MAA2B;8BAN3B,cAAc;sCACd,sBAAsB;4BACtB,YAAY;2BACZ,WAAW;iCACX,iBAAiB;2BACjB,WAAW;sBACX,MAAM;QAEvB,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC;IAC/C,CAAC;IAEO,qBAAqB,CAAC,IAAU,EAAE,YAAuB;QAChE,IAAI,IAAI,CAAC,MAAM,CAAC,YAAY,IAAI,IAAI,CAAC,IAAI,EAAE,IAAI,KAAK,oCAAsB,EAAE,CAAC;YAC5E,MAAM,IAAI,8CAAsB,CAC/B,iDAA0B,CAAC,cAAc,EACzC,uCAAuC,CACvC,CAAC;QACH,CAAC;QACD,IAAI,YAAY,EAAE,MAAM,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,IAAI,EAAE,CAAC,EAAE,CAAC;YAC3E,MAAM,IAAI,8CAAsB,CAC/B,iDAA0B,CAAC,cAAc,EACzC,uCAAuC,CACvC,CAAC;QACH,CAAC;IACF,CAAC;IAEO,mBAAmB,CAC1B,MAA2B,EAC3B,YAA+C;QAE/C,IAAI,YAAY,EAAE,oBAAoB,IAAI,CAAC,MAAM,CAAC,cAAc,EAAE,CAAC;YAClE,MAAM,IAAI,8CAAsB,CAC/B,iDAA0B,CAAC,gBAAgB,EAC3C,uBAAuB,CACvB,CAAC;QACH,CAAC;IACF,CAAC;IAcD,KAAK,CAAC,OAAO,CACZ,MAA2B,EAC3B,YAAkC,EAClC,YAA4E;QAE5E,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,EAAE,WAAW,EAAE,CAAC;QAE1C,MAAM,YAAY,GAAG,mBAAmB,CAAC,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC;QAGjE,IAAI,QAAQ,GAAG,MAAM,IAAI,CAAC,sBAAsB,CAAC,OAAO,CAAC;YACxD,KAAK,EAAE,EAAE,UAAU,EAAE,YAAY,EAAE,YAAY,EAAE,gBAAgB,EAAE;YACnE,SAAS,EAAE,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE;SACnC,CAAC,CAAC;QAEH,IAAI,QAAQ,EAAE,CAAC;YACd,OAAO,MAAM,IAAI,CAAC,iBAAiB,CAAC,MAAM,EAAE,QAAQ,EAAE,YAAY,EAAE,YAAY,CAAC,CAAC;QACnF,CAAC;QAED,QAAQ,GAAG,MAAM,IAAI,CAAC,sBAAsB,CAAC,OAAO,CAAC;YACpD,KAAK,EAAE,EAAE,UAAU,EAAE,MAAM,CAAC,GAAG,EAAE,YAAY,EAAE,gBAAgB,EAAE;YACjE,SAAS,EAAE,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE;SACnC,CAAC,CAAC;QAEH,IAAI,QAAQ,IAAI,CAAC,MAAM,IAAI,CAAC,iBAAiB,CAAC,sBAAsB,EAAE,CAAC,EAAE,CAAC;YACzE,MAAM,IAAI,CAAC,sBAAsB,CAAC,MAAM,CACvC,EAAE,UAAU,EAAE,MAAM,CAAC,GAAG,EAAE,YAAY,EAAE,gBAAgB,EAAE,EAC1D,EAAE,UAAU,EAAE,YAAY,EAAE,CAC5B,CAAC;YACF,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,iCAAiC,EAAE;gBACzD,MAAM,EAAE,QAAQ,CAAC,IAAI,CAAC,EAAE;gBACxB,GAAG,EAAE,MAAM,CAAC,GAAG;gBACf,GAAG,EAAE,YAAY,CAAC,GAAG;gBACrB,MAAM,EAAE,YAAY,CAAC,MAAM;aAC3B,CAAC,CAAC;YACH,OAAO,MAAM,IAAI,CAAC,iBAAiB,CAAC,MAAM,EAAE,QAAQ,EAAE,YAAY,EAAE,YAAY,CAAC,CAAC;QACnF,CAAC;QAGD,IAAI,KAAK,EAAE,CAAC;YACX,MAAM,YAAY,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,OAAO,CAAC;gBACtD,KAAK,EAAE,EAAE,KAAK,EAAE;gBAChB,SAAS,EAAE,CAAC,gBAAgB,EAAE,MAAM,CAAC;aACrC,CAAC,CAAC;YAEH,IAAI,YAAY,EAAE,CAAC;gBAClB,OAAO,MAAM,IAAI,CAAC,cAAc,CAAC,MAAM,EAAE,KAAK,EAAE,YAAY,EAAE,YAAY,EAAE,YAAY,CAAC,CAAC;YAC3F,CAAC;QACF,CAAC;QAGD,IAAI,CAAC,KAAK,EAAE,CAAC;YACZ,MAAM,IAAI,8CAAsB,CAC/B,iDAA0B,CAAC,aAAa,EACxC,+CAA+C,CAC/C,CAAC;QACH,CAAC;QAED,OAAO,MAAM,IAAI,CAAC,aAAa,CAAC,MAAM,EAAE,KAAK,EAAE,YAAY,EAAE,YAAY,CAAC,CAAC;IAC5E,CAAC;IAGO,KAAK,CAAC,iBAAiB,CAC9B,MAA2B,EAC3B,QAAsB,EACtB,YAAkC,EAClC,YAAwF;QAExF,IAAI,CAAC,qBAAqB,CAAC,QAAQ,CAAC,IAAI,EAAE,YAAY,CAAC,CAAC;QAExD,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,gCAAgC,EAAE,EAAE,GAAG,EAAE,MAAM,CAAC,GAAG,EAAE,CAAC,CAAC;QACzE,MAAM,YAAY,GAAG,MAAM,IAAI,CAAC,0BAA0B,CACzD,MAAM,CAAC,IAAI,EACX,YAAY,EACZ,QAAQ,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CACxB,CAAC;QACF,OAAO,MAAM,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,EAAE,YAAY,EAAE,YAAY,CAAC,CAAC;IAClF,CAAC;IAGO,KAAK,CAAC,cAAc,CAC3B,MAA2B,EAC3B,KAAa,EACb,YAAkB,EAClB,YAAkC,EAClC,YAA4E;QAE5E,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,qDAAqD,EAAE;YACxE,GAAG,EAAE,MAAM,CAAC,GAAG;YACf,KAAK;SACL,CAAC,CAAC;QACH,IAAI,CAAC,qBAAqB,CAAC,YAAY,EAAE,YAAY,CAAC,CAAC;QACvD,IAAI,CAAC,mBAAmB,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC;QAC/C,MAAM,YAAY,GAAG,MAAM,IAAI,CAAC,0BAA0B,CACzD,MAAM,CAAC,IAAI,EACX,YAAY,EACZ,YAAY,CAAC,IAAI,EAAE,IAAI,CACvB,CAAC;QACF,MAAM,YAAY,GAAG,mBAAmB,CAAC,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC;QACjE,MAAM,IAAI,CAAC,sBAAsB,CAAC,IAAI,CACrC,iBAAY,CAAC,MAAM,CAAC,YAAY,EAAE,YAAY,EAAE,gBAAgB,CAAC,CACjE,CAAC;QACF,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,gCAAgC,EAAE;YACxD,MAAM,EAAE,YAAY,CAAC,EAAE;YACvB,GAAG,EAAE,MAAM,CAAC,GAAG;YACf,KAAK;YACL,GAAG,EAAE,YAAY,EAAE,GAAG,IAAI,EAAE;YAC5B,MAAM,EAAE,YAAY,EAAE,MAAM,IAAI,MAAM,CAAC,GAAG;SAC1C,CAAC,CAAC;QACH,OAAO,MAAM,IAAI,CAAC,WAAW,CAAC,YAAY,EAAE,MAAM,EAAE,YAAY,EAAE,YAAY,CAAC,CAAC;IACjF,CAAC;IAGO,KAAK,CAAC,aAAa,CAC1B,MAA2B,EAC3B,KAAa,EACb,YAAkC,EAClC,YAA4E;QAE5E,IAAI,CAAC,mBAAmB,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC;QAC/C,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,2BAA2B,EAAE,EAAE,GAAG,EAAE,MAAM,CAAC,GAAG,EAAE,KAAK,EAAE,CAAC,CAAC;QAE3E,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,qBAAqB,CAAC,MAAM,CAAC,IAAI,EAAE,YAAY,CAAC,CAAC;QAC5E,MAAM,UAAU,GAAG,OAAO,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,uBAAkB,CAAC;QAEpE,MAAM,YAAY,GAAG,mBAAmB,CAAC,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC;QAEjE,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,OAAO,CAAC,WAAW,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE;YACxE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,qBAAqB,CACxE;gBACC,KAAK;gBACL,SAAS,EAAE,QAAQ,CAAC,MAAM,CAAC,UAAU,CAAC;gBACtC,QAAQ,EAAE,QAAQ,CAAC,MAAM,CAAC,WAAW,CAAC;gBACtC,IAAI,EAAE,UAAU;gBAChB,QAAQ,EAAE,4BAA4B;aACtC,EACD,GAAG,CACH,CAAC;YAEF,MAAM,GAAG,CAAC,IAAI,CACb,GAAG,CAAC,MAAM,CAAC,iBAAY,EAAE;gBACxB,UAAU,EAAE,YAAY;gBACxB,YAAY,EAAE,gBAAgB;gBAC9B,MAAM,EAAE,OAAO,CAAC,EAAE;aAClB,CAAC,CACF,CAAC;YAEF,OAAO,OAAO,CAAC;QAChB,CAAC,CAAC,CAAC;QAEH,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,iCAAiC,EAAE;YACzD,MAAM,EAAE,IAAI,CAAC,EAAE;YACf,GAAG,EAAE,MAAM,CAAC,GAAG;YACf,KAAK;YACL,IAAI,EAAE,UAAU,CAAC,IAAI;YACrB,GAAG,EAAE,YAAY,EAAE,GAAG,IAAI,EAAE;YAC5B,MAAM,EAAE,YAAY,EAAE,MAAM,IAAI,MAAM,CAAC,GAAG;SAC1C,CAAC,CAAC;QAEH,OAAO,IAAI,CAAC;IACb,CAAC;IAUO,KAAK,CAAC,0BAA0B,CACvC,SAAsC,EACtC,YAAkC,EAClC,WAA+B;QAE/B,IAAI,SAAS,KAAK,SAAS;YAAE,OAAO,SAAS,CAAC;QAG9C,IAAI,WAAW,KAAK,cAAc,EAAE,CAAC;YACpC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,uCAAuC,CAAC,CAAC;YAC3D,OAAO,SAAS,CAAC;QAClB,CAAC;QAED,MAAM,IAAI,GAAG,SAAS,CAAC;QAGvB,IAAI,IAAI,KAAK,cAAc,EAAE,CAAC;YAC7B,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,oDAAoD,CAAC,CAAC;YACvE,OAAO,SAAS,CAAC;QAClB,CAAC;QAED,IAAI,CAAC,CAAC,MAAM,IAAI,CAAC,WAAW,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC;YAClD,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,4BAA4B,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;YACzD,OAAO,SAAS,CAAC;QAClB,CAAC;QAMD,IAAI,CAAC,IAAA,2BAAa,EAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,cAAc,CAAC,IAAI,CAAC,EAAE,CAAC;YACpE,MAAM,IAAI,8CAAsB,CAC/B,iDAA0B,CAAC,cAAc,EACzC,SAAS,IAAI,2CAA2C,CACxD,CAAC;QACH,CAAC;QAED,IAAI,YAAY,IAAI,YAAY,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;YAC7E,MAAM,IAAI,8CAAsB,CAC/B,iDAA0B,CAAC,cAAc,EACzC,SAAS,IAAI,8CAA8C,CAC3D,CAAC;QACH,CAAC;QAED,OAAO,IAAI,CAAC;IACb,CAAC;IASO,KAAK,CAAC,qBAAqB,CAClC,SAAsC,EACtC,YAAkC;QAElC,IAAI,SAAS,KAAK,SAAS;YAAE,OAAO,SAAS,CAAC;QAE9C,MAAM,IAAI,GAAG,SAAS,CAAC;QAEvB,IAAI,IAAI,KAAK,cAAc,EAAE,CAAC;YAC7B,MAAM,IAAI,8CAAsB,CAC/B,iDAA0B,CAAC,cAAc,EACzC,uDAAuD,CACvD,CAAC;QACH,CAAC;QAED,IAAI,CAAC,CAAC,MAAM,IAAI,CAAC,WAAW,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC;YAClD,MAAM,IAAI,8CAAsB,CAC/B,iDAA0B,CAAC,cAAc,EACzC,sBAAsB,IAAI,kCAAkC,CAC5D,CAAC;QACH,CAAC;QAID,IAAI,CAAC,IAAA,2BAAa,EAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,cAAc,CAAC,IAAI,CAAC,EAAE,CAAC;YACpE,MAAM,IAAI,8CAAsB,CAC/B,iDAA0B,CAAC,cAAc,EACzC,SAAS,IAAI,2CAA2C,CACxD,CAAC;QACH,CAAC;QAED,IAAI,YAAY,IAAI,YAAY,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;YAC7E,MAAM,IAAI,8CAAsB,CAC/B,iDAA0B,CAAC,cAAc,EACzC,SAAS,IAAI,8CAA8C,CAC3D,CAAC;QACH,CAAC;QAED,OAAO,IAAI,CAAC;IACb,CAAC;IAOO,KAAK,CAAC,WAAW,CACxB,IAAU,EACV,MAA2B,EAC3B,YAAqB,EACrB,YAA6E;QAE7E,IAAI,WAAW,GAAG,KAAK,CAAC;QAGxB,MAAM,cAAc,GAAkD,EAAE,CAAC;QAEzE,IAAI,MAAM,CAAC,UAAU,KAAK,SAAS,EAAE,CAAC;YACrC,MAAM,OAAO,GAAG,QAAQ,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;YAC5C,IAAI,OAAO,KAAK,IAAI,CAAC,SAAS,EAAE,CAAC;gBAChC,cAAc,CAAC,SAAS,GAAG,OAAO,CAAC;YACpC,CAAC;QACF,CAAC;QAED,IAAI,MAAM,CAAC,WAAW,KAAK,SAAS,EAAE,CAAC;YACtC,MAAM,OAAO,GAAG,QAAQ,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;YAC7C,IAAI,OAAO,KAAK,IAAI,CAAC,QAAQ,EAAE,CAAC;gBAC/B,cAAc,CAAC,QAAQ,GAAG,OAAO,CAAC;YACnC,CAAC;QACF,CAAC;QAED,IAAI,MAAM,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC5C,MAAM,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,EAAE,cAAc,CAAC,CAAC;YAC1D,WAAW,GAAG,IAAI,CAAC;QACpB,CAAC;QAGD,MAAM,YAAY,GAAG,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC;QACrC,IAAI,YAAY,IAAI,YAAY,KAAK,YAAY,EAAE,CAAC;YACnD,MAAM,IAAI,CAAC,WAAW,CAAC,cAAc,CAAC,IAAI,EAAE,EAAE,WAAW,EAAE,YAAY,EAAE,CAAC,CAAC;YAC3E,WAAW,GAAG,IAAI,CAAC;YAEnB,IAAI,YAAY,EAAE,CAAC;gBAClB,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,6BAA6B,EAAE;oBACrD,MAAM,EAAE,IAAI,CAAC,EAAE;oBACf,YAAY;oBACZ,OAAO,EAAE,YAAY;oBACrB,GAAG,EAAE,YAAY,EAAE,GAAG,IAAI,EAAE;oBAC5B,MAAM,EAAE,YAAY,EAAE,MAAM,IAAI,MAAM,CAAC,GAAG;iBAC1C,CAAC,CAAC;YACJ,CAAC;QACF,CAAC;QAED,IAAI,WAAW,EAAE,CAAC;YACjB,OAAO,MAAM,IAAI,CAAC,cAAc,CAAC,aAAa,CAAC;gBAC9C,KAAK,EAAE,EAAE,EAAE,EAAE,IAAI,CAAC,EAAE,EAAE;gBACtB,SAAS,EAAE,CAAC,MAAM,CAAC;aACnB,CAAC,CAAC;QACJ,CAAC;QAED,OAAO,IAAI,CAAC;IACb,CAAC;CACD,CAAA;;oCA7XY,yBAAyB;IADrC,IAAA,YAAO,GAAE;qCAKA,uBAAM,EACmB,mBAAc,EACN,2BAAsB,EAChC,4BAAY,EACb,0BAAW,EACL,uCAAiB,EACvB,0BAAW,EAChB,2CAAmB;GAXjC,yBAAyB,CA6XrC"}
|
|
@@ -97,6 +97,7 @@ let TokenExchangeService = class TokenExchangeService {
|
|
|
97
97
|
const user = await this.identityResolutionService.resolve(claims, resolvedKey.allowedRoles, {
|
|
98
98
|
kid: resolvedKey.kid,
|
|
99
99
|
issuer: resolvedKey.issuer,
|
|
100
|
+
requireVerifiedEmail: resolvedKey.requireVerifiedEmail,
|
|
100
101
|
});
|
|
101
102
|
return { user, subject: claims.sub, issuer: resolvedKey.issuer, kid: resolvedKey.kid };
|
|
102
103
|
}
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"token-exchange.service.js","sourceRoot":"","sources":["../../../../src/modules/token-exchange/services/token-exchange.service.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;AAAA,wDAA6C;AAE7C,gCAAkC;AAClC,mCAAoC;AACpC,gEAA+B;AAE/B,wDAAoD;AAEpD,oEAA+D;AAC/D,oEAA6F;AAM7F,sEAAsE;AACtE,kEAKiC;AACjC,+EAA0E;AAC1E,2DAAsD;AACtD,+DAA0D;AAE1D,MAAM,0BAA0B,GAAG,EAAE,CAAC;AACtC,MAAM,8BAA8B,GAAG,CAAC,CAAC;AAGlC,IAAM,oBAAoB,GAA1B,MAAM,oBAAoB;IAGhC,YACC,MAAc,EACG,eAAkC,EAClC,QAAyB,EACzB,yBAAoD,EACpD,MAA2B,EAC3B,UAAsB;+BAJtB,eAAe;wBACf,QAAQ;yCACR,yBAAyB;sBACzB,MAAM;0BACN,UAAU;QAE3B,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC;IAC/C,CAAC;IAaD,KAAK,CAAC,WAAW,CAChB,YAAoB,EACpB,EAAE,kBAAkB,EAAE,GAAoC,EAAE;QAE5D,MAAM,OAAO,GAAG,sBAAG,CAAC,MAAM,CAAC,YAAY,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;QAC7D,IAAI,CAAC,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ,EAAE,CAAC;YAC7C,MAAM,IAAI,iDAAyB,CAClC,iDAA0B,CAAC,aAAa,EACxC,sBAAsB,CACtB,CAAC;QACH,CAAC;QAED,MAAM,EAAE,GAAG,EAAE,GAAG,OAAO,CAAC,MAAM,CAAC;QAC/B,IAAI,CAAC,GAAG,EAAE,CAAC;YACV,MAAM,IAAI,iDAAyB,CAClC,iDAA0B,CAAC,UAAU,EACrC,0BAA0B,CAC1B,CAAC;QACH,CAAC;QAED,MAAM,cAAc,GAAG,OAAO,CAAC,OAAO,CAAC;QACvC,MAAM,GAAG,GACR,OAAO,cAAc,KAAK,QAAQ,IAAI,cAAc,KAAK,IAAI;YAC5D,CAAC,CAAC,cAAc,CAAC,GAAG;YACpB,CAAC,CAAC,SAAS,CAAC;QACd,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,CAAC,GAAG,EAAE,CAAC;YACrC,MAAM,IAAI,iDAAyB,CAClC,iDAA0B,CAAC,UAAU,EACrC,2BAA2B,CAC3B,CAAC;QACH,CAAC;QAED,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,eAAe,CAAC,cAAc,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;QACxE,IAAI,CAAC,WAAW,EAAE,CAAC;YAClB,MAAM,IAAI,8CAAsB,CAAC,iDAA0B,CAAC,UAAU,EAAE,gBAAgB,CAAC,CAAC;QAC3F,CAAC;QAED,IAAI,OAAuB,CAAC;QAC5B,IAAI,CAAC;YACJ,MAAM,MAAM,GAAG,sBAAG,CAAC,MAAM,CAAC,YAAY,EAAE,WAAW,CAAC,GAAG,EAAE;gBAExD,UAAU,EAAE,WAAW,CAAC,UAA6B;gBACrD,MAAM,EAAE,WAAW,CAAC,MAAM;gBAC1B,QAAQ,EAAE,WAAW,CAAC,gBAAgB;gBACtC,gBAAgB,EAAE,KAAK;gBACvB,eAAe,EAAE,KAAK;aACtB,CAAC,CAAC;YACH,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,CAAC,CAAC,KAAK,IAAI,MAAM,CAAC,EAAE,CAAC;gBACtD,MAAM,IAAI,8CAAsB,CAC/B,iDAA0B,CAAC,aAAa,EACxC,yBAAyB,CACzB,CAAC;YACH,CAAC;YACD,OAAO,GAAG,MAAM,CAAC;QAClB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,IAAI,KAAK,YAAY,8CAAsB;gBAAE,MAAM,KAAK,CAAC;YACzD,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe,CAAC;YACzE,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,yBAAyB,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,CAAC;YAChE,MAAM,IAAI,8CAAsB,CAC/B,iDAA0B,CAAC,gBAAgB,EAC3C,2BAA2B,CAC3B,CAAC;QACH,CAAC;QAED,MAAM,MAAM,GAAG,kDAAyB,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QAExD,IAAI,kBAAkB,KAAK,SAAS,EAAE,CAAC;YACtC,MAAM,aAAa,GAAG,MAAM,CAAC,GAAG,GAAG,MAAM,CAAC,GAAG,CAAC;YAC9C,IAAI,aAAa,GAAG,kBAAkB,EAAE,CAAC;gBACxC,MAAM,IAAI,8CAAsB,CAC/B,iDAA0B,CAAC,YAAY,EACvC,wCAAwC,CACxC,CAAC;YACH,CAAC;QACF,CAAC;QAED,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,EAAE,IAAI,IAAI,CAAC,MAAM,CAAC,GAAG,GAAG,IAAI,CAAC,CAAC,CAAC;QACtF,IAAI,CAAC,QAAQ,EAAE,CAAC;YACf,MAAM,IAAI,8CAAsB,CAC/B,iDAA0B,CAAC,WAAW,EACtC,6BAA6B,CAC7B,CAAC;QACH,CAAC;QAED,OAAO,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC;IAChC,CAAC;IAED,KAAK,CAAC,UAAU,CACf,YAAoB;QAEpB,MAAM,EAAE,MAAM,EAAE,WAAW,EAAE,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,YAAY,EAAE;YACpE,kBAAkB,EAAE,0BAA0B;SAC9C,CAAC,CAAC;QACH,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,yBAAyB,CAAC,OAAO,CAAC,MAAM,EAAE,WAAW,CAAC,YAAY,EAAE;YAC3F,GAAG,EAAE,WAAW,CAAC,GAAG;YACpB,MAAM,EAAE,WAAW,CAAC,MAAM;
|
|
1
|
+
{"version":3,"file":"token-exchange.service.js","sourceRoot":"","sources":["../../../../src/modules/token-exchange/services/token-exchange.service.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;AAAA,wDAA6C;AAE7C,gCAAkC;AAClC,mCAAoC;AACpC,gEAA+B;AAE/B,wDAAoD;AAEpD,oEAA+D;AAC/D,oEAA6F;AAM7F,sEAAsE;AACtE,kEAKiC;AACjC,+EAA0E;AAC1E,2DAAsD;AACtD,+DAA0D;AAE1D,MAAM,0BAA0B,GAAG,EAAE,CAAC;AACtC,MAAM,8BAA8B,GAAG,CAAC,CAAC;AAGlC,IAAM,oBAAoB,GAA1B,MAAM,oBAAoB;IAGhC,YACC,MAAc,EACG,eAAkC,EAClC,QAAyB,EACzB,yBAAoD,EACpD,MAA2B,EAC3B,UAAsB;+BAJtB,eAAe;wBACf,QAAQ;yCACR,yBAAyB;sBACzB,MAAM;0BACN,UAAU;QAE3B,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC;IAC/C,CAAC;IAaD,KAAK,CAAC,WAAW,CAChB,YAAoB,EACpB,EAAE,kBAAkB,EAAE,GAAoC,EAAE;QAE5D,MAAM,OAAO,GAAG,sBAAG,CAAC,MAAM,CAAC,YAAY,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;QAC7D,IAAI,CAAC,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ,EAAE,CAAC;YAC7C,MAAM,IAAI,iDAAyB,CAClC,iDAA0B,CAAC,aAAa,EACxC,sBAAsB,CACtB,CAAC;QACH,CAAC;QAED,MAAM,EAAE,GAAG,EAAE,GAAG,OAAO,CAAC,MAAM,CAAC;QAC/B,IAAI,CAAC,GAAG,EAAE,CAAC;YACV,MAAM,IAAI,iDAAyB,CAClC,iDAA0B,CAAC,UAAU,EACrC,0BAA0B,CAC1B,CAAC;QACH,CAAC;QAED,MAAM,cAAc,GAAG,OAAO,CAAC,OAAO,CAAC;QACvC,MAAM,GAAG,GACR,OAAO,cAAc,KAAK,QAAQ,IAAI,cAAc,KAAK,IAAI;YAC5D,CAAC,CAAC,cAAc,CAAC,GAAG;YACpB,CAAC,CAAC,SAAS,CAAC;QACd,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,CAAC,GAAG,EAAE,CAAC;YACrC,MAAM,IAAI,iDAAyB,CAClC,iDAA0B,CAAC,UAAU,EACrC,2BAA2B,CAC3B,CAAC;QACH,CAAC;QAED,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,eAAe,CAAC,cAAc,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;QACxE,IAAI,CAAC,WAAW,EAAE,CAAC;YAClB,MAAM,IAAI,8CAAsB,CAAC,iDAA0B,CAAC,UAAU,EAAE,gBAAgB,CAAC,CAAC;QAC3F,CAAC;QAED,IAAI,OAAuB,CAAC;QAC5B,IAAI,CAAC;YACJ,MAAM,MAAM,GAAG,sBAAG,CAAC,MAAM,CAAC,YAAY,EAAE,WAAW,CAAC,GAAG,EAAE;gBAExD,UAAU,EAAE,WAAW,CAAC,UAA6B;gBACrD,MAAM,EAAE,WAAW,CAAC,MAAM;gBAC1B,QAAQ,EAAE,WAAW,CAAC,gBAAgB;gBACtC,gBAAgB,EAAE,KAAK;gBACvB,eAAe,EAAE,KAAK;aACtB,CAAC,CAAC;YACH,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,CAAC,CAAC,KAAK,IAAI,MAAM,CAAC,EAAE,CAAC;gBACtD,MAAM,IAAI,8CAAsB,CAC/B,iDAA0B,CAAC,aAAa,EACxC,yBAAyB,CACzB,CAAC;YACH,CAAC;YACD,OAAO,GAAG,MAAM,CAAC;QAClB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,IAAI,KAAK,YAAY,8CAAsB;gBAAE,MAAM,KAAK,CAAC;YACzD,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe,CAAC;YACzE,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,yBAAyB,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,CAAC;YAChE,MAAM,IAAI,8CAAsB,CAC/B,iDAA0B,CAAC,gBAAgB,EAC3C,2BAA2B,CAC3B,CAAC;QACH,CAAC;QAED,MAAM,MAAM,GAAG,kDAAyB,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QAExD,IAAI,kBAAkB,KAAK,SAAS,EAAE,CAAC;YACtC,MAAM,aAAa,GAAG,MAAM,CAAC,GAAG,GAAG,MAAM,CAAC,GAAG,CAAC;YAC9C,IAAI,aAAa,GAAG,kBAAkB,EAAE,CAAC;gBACxC,MAAM,IAAI,8CAAsB,CAC/B,iDAA0B,CAAC,YAAY,EACvC,wCAAwC,CACxC,CAAC;YACH,CAAC;QACF,CAAC;QAED,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,EAAE,IAAI,IAAI,CAAC,MAAM,CAAC,GAAG,GAAG,IAAI,CAAC,CAAC,CAAC;QACtF,IAAI,CAAC,QAAQ,EAAE,CAAC;YACf,MAAM,IAAI,8CAAsB,CAC/B,iDAA0B,CAAC,WAAW,EACtC,6BAA6B,CAC7B,CAAC;QACH,CAAC;QAED,OAAO,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC;IAChC,CAAC;IAED,KAAK,CAAC,UAAU,CACf,YAAoB;QAEpB,MAAM,EAAE,MAAM,EAAE,WAAW,EAAE,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,YAAY,EAAE;YACpE,kBAAkB,EAAE,0BAA0B;SAC9C,CAAC,CAAC;QACH,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,yBAAyB,CAAC,OAAO,CAAC,MAAM,EAAE,WAAW,CAAC,YAAY,EAAE;YAC3F,GAAG,EAAE,WAAW,CAAC,GAAG;YACpB,MAAM,EAAE,WAAW,CAAC,MAAM;YAC1B,oBAAoB,EAAE,WAAW,CAAC,oBAAoB;SACtD,CAAC,CAAC;QACH,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,CAAC,GAAG,EAAE,MAAM,EAAE,WAAW,CAAC,MAAM,EAAE,GAAG,EAAE,WAAW,CAAC,GAAG,EAAE,CAAC;IACxF,CAAC;IAED,KAAK,CAAC,QAAQ,CAAC,OAA6B;QAC3C,MAAM,aAAa,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC;QACpE,MAAM,WAAW,GAAG,OAAO,CAAC,WAAW;YACtC,CAAC,CAAC,MAAM,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC,WAAW,CAAC;YAC7C,CAAC,CAAC,SAAS,CAAC;QAEb,MAAM,KAAK,GAAG,WAAW;YACxB,CAAC,CAAC,MAAM,IAAI,CAAC,yBAAyB,CAAC,OAAO,CAC5C,WAAW,CAAC,MAAM,EAClB,WAAW,CAAC,WAAW,CAAC,YAAY,EACpC,WAAW,CAAC,WAAW,CACvB;YACF,CAAC,CAAC,SAAS,CAAC;QACb,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,yBAAyB,CAAC,OAAO,CAC3D,aAAa,CAAC,MAAM,EACpB,aAAa,CAAC,WAAW,CAAC,YAAY,EACtC,aAAa,CAAC,WAAW,CACzB,CAAC;QAEF,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;QAE1C,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC;QACvC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CACnB,aAAa,CAAC,MAAM,CAAC,GAAG,EACxB,WAAW,EAAE,MAAM,CAAC,GAAG,IAAI,QAAQ,EACnC,GAAG,GAAG,MAAM,CACZ,CAAC;QAEF,IAAI,GAAG,IAAI,GAAG,GAAG,8BAA8B,EAAE,CAAC;YACjD,MAAM,IAAI,8CAAsB,CAC/B,iDAA0B,CAAC,eAAe,EAC1C,wDAAwD,CACxD,CAAC;QACH,CAAC;QAED,MAAM,SAAS,GAAG,OAAO,CAAC,QAAQ,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QAE/D,MAAM,OAAO,GAAqB;YACjC,GAAG,EAAE,4CAAqB;YAC1B,GAAG,EAAE,OAAO,CAAC,EAAE;YACf,GAAG,CAAC,KAAK,IAAI,EAAE,GAAG,EAAE,EAAE,GAAG,EAAE,KAAK,CAAC,EAAE,EAAE,EAAE,CAAC;YACxC,GAAG,CAAC,OAAO,CAAC,KAAK,IAAI,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,CAAC;YAC9C,GAAG,CAAC,SAAS,EAAE,MAAM,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC;YACjD,GAAG,EAAE,GAAG;YACR,GAAG;YACH,GAAG,EAAE,IAAA,mBAAU,GAAE;SACjB,CAAC;QAEF,MAAM,WAAW,GAAG,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAElD,OAAO;YACN,WAAW;YACX,SAAS,EAAE,GAAG,GAAG,GAAG;YACpB,aAAa,EAAE,OAAO,CAAC,EAAE;YACzB,OAAO,EAAE,aAAa,CAAC,MAAM,CAAC,GAAG;YACjC,MAAM,EAAE,aAAa,CAAC,MAAM,CAAC,GAAG;YAChC,KAAK,EAAE,WAAW,EAAE,MAAM,CAAC,GAAG;YAC9B,WAAW,EAAE,KAAK,EAAE,EAAE;SACtB,CAAC;IACH,CAAC;CACD,CAAA;;+BA1LY,oBAAoB;IADhC,IAAA,YAAO,GAAE;qCAKA,uBAAM,EACoB,uCAAiB,EACxB,mCAAe,EACE,uDAAyB,EAC5C,2CAAmB,EACf,wBAAU;GAT5B,oBAAoB,CA0LhC"}
|
|
@@ -120,6 +120,7 @@ let TrustedKeyService = class TrustedKeyService {
|
|
|
120
120
|
issuer: data.issuer,
|
|
121
121
|
expectedAudience: data.expectedAudience,
|
|
122
122
|
allowedRoles: data.allowedRoles,
|
|
123
|
+
requireVerifiedEmail: data.requireVerifiedEmail ?? true,
|
|
123
124
|
};
|
|
124
125
|
}
|
|
125
126
|
return undefined;
|
|
@@ -361,6 +362,7 @@ let TrustedKeyService = class TrustedKeyService {
|
|
|
361
362
|
issuer: key.issuer,
|
|
362
363
|
expectedAudience: key.expectedAudience,
|
|
363
364
|
allowedRoles: key.allowedRoles,
|
|
365
|
+
requireVerifiedEmail: jwksConfig.requireVerifiedEmail ?? true,
|
|
364
366
|
expiresAt: new Date(Date.now() + result.ttlSeconds * 1000).toISOString(),
|
|
365
367
|
},
|
|
366
368
|
})),
|
|
@@ -388,7 +390,7 @@ let TrustedKeyService = class TrustedKeyService {
|
|
|
388
390
|
const result = [];
|
|
389
391
|
const seenKids = new Set();
|
|
390
392
|
for (const config of configs) {
|
|
391
|
-
const { kid, algorithms, key: pemString, issuer, expectedAudience, allowedRoles } = config;
|
|
393
|
+
const { kid, algorithms, key: pemString, issuer, expectedAudience, allowedRoles, requireVerifiedEmail, } = config;
|
|
392
394
|
if (seenKids.has(kid)) {
|
|
393
395
|
throw new n8n_workflow_1.UnexpectedError(`Trusted key "${kid}": duplicate kid`);
|
|
394
396
|
}
|
|
@@ -402,6 +404,7 @@ let TrustedKeyService = class TrustedKeyService {
|
|
|
402
404
|
issuer,
|
|
403
405
|
expectedAudience,
|
|
404
406
|
allowedRoles,
|
|
407
|
+
requireVerifiedEmail,
|
|
405
408
|
},
|
|
406
409
|
});
|
|
407
410
|
}
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"trusted-key.service.js","sourceRoot":"","sources":["../../../../src/modules/token-exchange/services/trusted-key.service.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,wDAA6C;AAC7C,8CAAsC;AACtC,gCAAgD;AAChD,gDAAiF;AACjF,gCAAkC;AAElC,0CAAuC;AACvC,uCAA4C;AAC5C,+CAA0D;AAE1D,6CAA0D;AAC1D,6BAAwB;AAExB,8FAAwF;AACxF,gFAA2E;AAC3E,0GAAoG;AACpG,4FAAuF;AACvF,oEAA+D;AAS/D,sEAAyF;AACzF,mDAAsD;AAItD,MAAM,gBAAgB,GAAoC;IACzD,KAAK,EAAE,KAAK;IACZ,KAAK,EAAE,KAAK;IACZ,KAAK,EAAE,KAAK;IACZ,KAAK,EAAE,KAAK;IACZ,KAAK,EAAE,KAAK;IACZ,KAAK,EAAE,KAAK;IACZ,KAAK,EAAE,IAAI;IACX,KAAK,EAAE,IAAI;IACX,KAAK,EAAE,IAAI;IACX,KAAK,EAAE,OAAO;CACd,CAAC;AAEF,MAAM,gBAAgB,GAAG,QAAQ,CAAC;AAGlC,MAAM,wBAAwB,GAAG,EAAE,GAAG,gBAAI,CAAC,OAAO,CAAC,cAAc,CAAC;AAmB3D,IAAM,iBAAiB,GAAvB,MAAM,iBAAiB;IAY7B,YACC,MAAc,EACG,MAA2B,EAC3B,0BAAsD,EACtD,oBAA0C,EAC1C,gBAAkC,EAClC,aAA4B,EAC5B,mBAAwC;QALxC,WAAM,GAAN,MAAM,CAAqB;QAC3B,+BAA0B,GAA1B,0BAA0B,CAA4B;QACtD,yBAAoB,GAApB,oBAAoB,CAAsB;QAC1C,qBAAgB,GAAhB,gBAAgB,CAAkB;QAClC,kBAAa,GAAb,aAAa,CAAe;QAC5B,wBAAmB,GAAnB,mBAAmB,CAAqB;QAdlD,mBAAc,GAAG,KAAK,CAAC;QAEd,gBAAW,GAAG,IAAI,GAAG,EAGnC,CAAC;QAWH,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC;IAC/C,CAAC;IAeD,KAAK,CAAC,UAAU;QACf,MAAM,OAAO,GAAG,IAAI,CAAC,kBAAkB,EAAE,CAAC;QAC1C,MAAM,IAAI,CAAC,eAAe,CAAC,OAAO,CAAC,CAAC;QACpC,MAAM,IAAI,CAAC,iBAAiB,EAAE,CAAC;QAE/B,IAAI,IAAI,CAAC,gBAAgB,CAAC,QAAQ,EAAE,CAAC;YACpC,IAAI,CAAC,YAAY,EAAE,CAAC;QACrB,CAAC;aAAM,CAAC;YACP,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,oDAAoD,CAAC,CAAC;QACzE,CAAC;IACF,CAAC;IAGK,AAAN,KAAK,CAAC,gBAAgB;QAIrB,MAAM,IAAI,CAAC,iBAAiB,EAAE,CAAC;QAC/B,IAAI,CAAC,YAAY,EAAE,CAAC;IACrB,CAAC;IAED,YAAY;QACX,IAAI,IAAI,CAAC,cAAc,IAAI,IAAI,CAAC,eAAe;YAAE,OAAO;QAExD,IAAI,CAAC,eAAe,GAAG,WAAW,CACjC,KAAK,IAAI,EAAE,CAAC,MAAM,IAAI,CAAC,iBAAiB,EAAE,EAC1C,wBAAwB,CACxB,CAAC;QAEF,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,oCAAoC,CAAC,CAAC;IACzD,CAAC;IAGD,WAAW;QACV,aAAa,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;QACpC,IAAI,CAAC,eAAe,GAAG,SAAS,CAAC;IAClC,CAAC;IAGD,QAAQ;QACP,IAAI,CAAC,cAAc,GAAG,IAAI,CAAC;QAC3B,IAAI,CAAC,WAAW,EAAE,CAAC;IACpB,CAAC;IAWD,KAAK,CAAC,cAAc,CAAC,GAAW,EAAE,MAAc;QAC/C,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,oBAAoB,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC;QACnE,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,SAAS,CAAC;QAE5C,KAAK,MAAM,MAAM,IAAI,QAAQ,EAAE,CAAC;YAC/B,IAAI,IAAoB,CAAC;YACzB,IAAI,CAAC;gBACJ,MAAM,MAAM,GAAG,6CAAoB,CAAC,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;gBACvE,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;oBACrB,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,uCAAuC,EAAE;wBACzD,GAAG;wBACH,QAAQ,EAAE,MAAM,CAAC,QAAQ;wBACzB,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC,OAAO;qBAC3B,CAAC,CAAC;oBACH,SAAS;gBACV,CAAC;gBACD,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC;YACpB,CAAC;YAAC,MAAM,CAAC;gBACR,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,uCAAuC,EAAE;oBACzD,GAAG;oBACH,QAAQ,EAAE,MAAM,CAAC,QAAQ;oBACzB,KAAK,EAAE,cAAc;iBACrB,CAAC,CAAC;gBACH,SAAS;YACV,CAAC;YAED,IAAI,IAAI,CAAC,MAAM,KAAK,MAAM;gBAAE,SAAS;YAErC,MAAM,SAAS,GAAG,IAAI,CAAC,gBAAgB,CAAC,GAAG,MAAM,CAAC,QAAQ,IAAI,GAAG,EAAE,EAAE,IAAI,CAAC,WAAW,CAAC,CAAC;YACvF,IAAI,CAAC,SAAS;gBAAE,SAAS;YAEzB,OAAO;gBACN,GAAG;gBACH,UAAU,EAAE,IAAI,CAAC,UAAU;gBAC3B,GAAG,EAAE,SAAS;gBACd,MAAM,EAAE,IAAI,CAAC,MAAM;gBACnB,gBAAgB,EAAE,IAAI,CAAC,gBAAgB;gBACvC,YAAY,EAAE,IAAI,CAAC,YAAY;aAC/B,CAAC;QACH,CAAC;QAED,OAAO,SAAS,CAAC;IAClB,CAAC;IAQD,KAAK,CAAC,aAAa,CAAC,QAAgB;QACnC,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,0BAA0B,CAAC,SAAS,CAAC,EAAE,EAAE,EAAE,QAAQ,EAAE,CAAC,CAAC;QACjF,IAAI,CAAC,MAAM,EAAE,CAAC;YACb,MAAM,IAAI,8BAAe,CAAC,iCAAiC,QAAQ,EAAE,CAAC,CAAC;QACxE,CAAC;QACD,MAAM,IAAI,CAAC,qBAAqB,CAAC,MAAM,CAAC,CAAC;IAC1C,CAAC;IAED,KAAK,CAAC,OAAO;QACZ,OAAO,MAAM,IAAI,CAAC,oBAAoB,CAAC,IAAI,EAAE,CAAC;IAC/C,CAAC;IAED,KAAK,CAAC,WAAW;QAChB,OAAO,MAAM,IAAI,CAAC,0BAA0B,CAAC,IAAI,EAAE,CAAC;IACrD,CAAC;IAIO,kBAAkB;QACzB,MAAM,GAAG,GAAG,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC;QAEpC,IAAI,CAAC,GAAG,EAAE,CAAC;YACV,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,4BAA4B,CAAC,CAAC;YAC/C,OAAO,EAAE,CAAC;QACX,CAAC;QAED,IAAI,MAAe,CAAC;QACpB,IAAI,CAAC;YACJ,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC1B,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,mCAAmC,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;YAClE,MAAM,IAAI,8BAAe,CAAC,mCAAmC,CAAC,CAAC;QAChE,CAAC;QAED,MAAM,MAAM,GAAG,OAAC,CAAC,KAAK,CAAC,+CAAsB,CAAC,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;QAEjE,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACrB,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,sCAAsC,EAAE,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC;YACnF,MAAM,IAAI,8BAAe,CAAC,sCAAsC,CAAC,CAAC;QACnE,CAAC;QAED,OAAO,MAAM,CAAC,IAAI,CAAC;IACpB,CAAC;IAED,KAAK,CAAC,sBAAsB;QAC3B,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,OAAO,EAAE,CAAC;QACrC,MAAM,OAAO,GAAG,IAAI,GAAG,EAAU,CAAC;QAElC,OAAO,CAAC,OAAO,CAAC,CAAC,MAAM,EAAE,EAAE;YAC1B,IAAI,CAAC;gBACJ,MAAM,MAAM,GAAG,6CAAoB,CAAC,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;gBACvE,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;oBACrB,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,uCAAuC,EAAE;wBACzD,GAAG,EAAE,MAAM,CAAC,GAAG;wBACf,QAAQ,EAAE,MAAM,CAAC,QAAQ;wBACzB,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC,OAAO;qBAC3B,CAAC,CAAC;oBACH,OAAO;gBACR,CAAC;gBACD,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YACjC,CAAC;YAAC,MAAM,CAAC;gBACR,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,uCAAuC,EAAE;oBACzD,GAAG,EAAE,MAAM,CAAC,GAAG;oBACf,QAAQ,EAAE,MAAM,CAAC,QAAQ;oBACzB,KAAK,EAAE,cAAc;iBACrB,CAAC,CAAC;YACJ,CAAC;QACF,CAAC,CAAC,CAAC;QACH,OAAO,OAAO,CAAC,IAAI,KAAK,CAAC,CAAC;IAC3B,CAAC;IAIO,gBAAgB,CAAC,MAAwB;QAChD,IAAI,MAAM,CAAC,IAAI,KAAK,QAAQ;YAAE,OAAO,gBAAgB,CAAC;QACtD,OAAO,IAAA,wBAAU,EAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IAC3E,CAAC;IAMO,KAAK,CAAC,eAAe,CAAC,OAA2B;QACxD,MAAM,IAAI,CAAC,aAAa,CAAC,QAAQ,OAA6B,KAAK,EAAE,EAAE,EAAE,EAAE;YAC1E,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,iCAAiC,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC;YAClE,MAAM,aAAa,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAwB,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC;YACvF,MAAM,WAAW,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,MAAM,CAAC,CAAC;YAE7D,MAAM,iBAAiB,GAAG,IAAI,GAAG,EAAU,CAAC;YAG5C,IAAI,aAAa,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAC9B,MAAM,QAAQ,GAAG,gBAAgB,CAAC;gBAClC,iBAAiB,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;gBAChC,MAAM,EAAE,CAAC,IAAI,CAAC,kDAAsB,EAAE;oBACrC,EAAE,EAAE,QAAQ;oBACZ,IAAI,EAAE,QAAiB;oBACvB,MAAM,EAAE,IAAI,CAAC,SAAS,CAAC,aAAa,CAAC;oBACrC,MAAM,EAAE,SAAkB;iBAC1B,CAAC,CAAC;YACJ,CAAC;YAGD,KAAK,MAAM,IAAI,IAAI,WAAW,EAAE,CAAC;gBAChC,MAAM,QAAQ,GAAG,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,CAAC;gBAC7C,iBAAiB,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;gBAChC,MAAM,EAAE,CAAC,IAAI,CAAC,kDAAsB,EAAE;oBACrC,EAAE,EAAE,QAAQ;oBACZ,IAAI,EAAE,MAAe;oBACrB,MAAM,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC;oBAC5B,MAAM,EAAE,SAAkB;iBAC1B,CAAC,CAAC;YACJ,CAAC;YAGD,IAAI,iBAAiB,CAAC,IAAI,GAAG,CAAC,EAAE,CAAC;gBAChC,MAAM,EAAE,CAAC,MAAM,CAAC,kDAAsB,EAAE;oBACvC,EAAE,EAAE,IAAA,aAAG,EAAC,IAAA,YAAE,EAAC,CAAC,GAAG,iBAAiB,CAAC,CAAC,CAAC;iBACnC,CAAC,CAAC;YACJ,CAAC;iBAAM,CAAC;gBACP,MAAM,EAAE,CAAC,MAAM,CAAC,kDAAsB,EAAE,EAAE,CAAC,CAAC;YAC7C,CAAC;QACF,CAAC,CAAC,CAAC;IACJ,CAAC;IAQO,KAAK,CAAC,iBAAiB;QAC9B,IAAI,CAAC;YACJ,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,0BAA0B,CAAC,IAAI,EAAE,CAAC;YAC7D,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;gBAC9B,MAAM,IAAI,CAAC,qBAAqB,CAAC,MAAM,CAAC,CAAC;YAC1C,CAAC;QACF,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,yCAAyC,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;QACzE,CAAC;IACF,CAAC;IAMO,KAAK,CAAC,iBAAiB;QAC9B,IAAI,CAAC;YACJ,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,wBAAwB,CAAC,CAAC;YAC5C,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,0BAA0B,CAAC,IAAI,EAAE,CAAC;YAC7D,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;YACvB,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;gBAC9B,MAAM,UAAU,GAAG,IAAI,CAAC,oBAAoB,CAAC,MAAM,CAAC,CAAC;gBACrD,MAAM,WAAW,GAAG,MAAM,CAAC,eAAe,EAAE,OAAO,EAAE,IAAI,CAAC,CAAC;gBAC3D,IAAI,GAAG,GAAG,WAAW,IAAI,UAAU,EAAE,CAAC;oBACrC,MAAM,IAAI,CAAC,qBAAqB,CAAC,MAAM,CAAC,CAAC;gBAC1C,CAAC;YACF,CAAC;QACF,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,yCAAyC,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;QACzE,CAAC;IACF,CAAC;IAEO,oBAAoB,CAAC,MAA8B;QAC1D,IAAI,MAAM,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;YAC5B,IAAI,CAAC;gBACJ,MAAM,MAAM,GAAG,IAAA,wBAAS,EAA0B,MAAM,CAAC,MAAM,CAAC,CAAC;gBACjE,IAAI,OAAO,MAAM,CAAC,eAAe,KAAK,QAAQ,IAAI,MAAM,CAAC,eAAe,GAAG,CAAC,EAAE,CAAC;oBAC9E,OAAO,MAAM,CAAC,eAAe,GAAG,gBAAI,CAAC,OAAO,CAAC,cAAc,CAAC;gBAC7D,CAAC;YACF,CAAC;YAAC,OAAO,CAAC,EAAE,CAAC;gBACZ,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,sDAAsD,EAAE;oBACxE,EAAE,EAAE,MAAM,CAAC,EAAE;oBACb,KAAK,EAAE,CAAC;iBACR,CAAC,CAAC;YACJ,CAAC;QACF,CAAC;QACD,OAAO,IAAI,CAAC,MAAM,CAAC,yBAAyB,GAAG,gBAAI,CAAC,OAAO,CAAC,cAAc,CAAC;IAC5E,CAAC;IAWO,KAAK,CAAC,qBAAqB,CAAC,MAA8B;QACjE,IAAI,CAAC;YACJ,MAAM,IAAI,CAAC,aAAa,CAAC,QAAQ,OAA6B,KAAK,EAAE,EAAE,EAAE,EAAE;gBAC1E,MAAM,WAAW,GAAG,MAAM,EAAE,CAAC,SAAS,CAAC,kDAAsB,EAAE,EAAE,EAAE,EAAE,MAAM,CAAC,EAAE,EAAE,CAAC,CAAC;gBAClF,IAAI,CAAC,WAAW;oBAAE,OAAO;gBACzB,MAAM,IAAI,CAAC,8BAA8B,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC;YAC5D,CAAC,CAAC,CAAC;QACJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YACvE,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,sCAAsC,EAAE;gBACzD,QAAQ,EAAE,MAAM,CAAC,EAAE;gBACnB,KAAK,EAAE,OAAO;aACd,CAAC,CAAC;YACH,MAAM,IAAI,CAAC,0BAA0B,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,EAAE;gBACvD,MAAM,EAAE,OAAO;gBACf,SAAS,EAAE,OAAO;gBAClB,eAAe,EAAE,IAAI,IAAI,EAAE;aAC3B,CAAC,CAAC;QACJ,CAAC;IACF,CAAC;IAEO,KAAK,CAAC,8BAA8B,CAC3C,MAA8B,EAC9B,EAAiB;QAEjB,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,oBAAoB,CAAC,MAAM,CAAC,CAAC;QACvD,IAAI,CAAC,MAAM,EAAE,CAAC;YAGb,MAAM,EAAE,CAAC,MAAM,CAAC,kDAAsB,EAAE,MAAM,CAAC,EAAE,EAAE;gBAClD,MAAM,EAAE,SAAS;gBACjB,eAAe,EAAE,IAAI,IAAI,EAAE;aAC3B,CAAC,CAAC;YACH,OAAO;QACR,CAAC;QAED,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC;QACzB,MAAM,eAAe,GAAG,MAAM,CAAC,eAAe,CAAC;QAG/C,MAAM,EAAE,CAAC,MAAM,CAAC,qCAAgB,EAAE,EAAE,QAAQ,EAAE,MAAM,CAAC,EAAE,EAAE,CAAC,CAAC;QAG3D,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;YACxB,MAAM,EAAE,CAAC,IAAI,CAAC,qCAAgB,EAAE;gBAC/B,QAAQ,EAAE,MAAM,CAAC,EAAE;gBACnB,GAAG,EAAE,GAAG,CAAC,GAAG;gBACZ,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC;gBAC9B,SAAS,EAAE,IAAI,IAAI,EAAE;aACrB,CAAC,CAAC;QACJ,CAAC;QAGD,MAAM,aAAa,GAAoC;YACtD,MAAM,EAAE,SAAkB;YAC1B,SAAS,EAAE,IAAI;YACf,eAAe,EAAE,IAAI,IAAI,EAAE;SAC3B,CAAC;QACF,IAAI,eAAe,KAAK,SAAS,EAAE,CAAC;YACnC,MAAM,MAAM,GAAG,IAAA,wBAAS,EAA0B,MAAM,CAAC,MAAM,CAAC,CAAC;YACjE,MAAM,CAAC,eAAe,GAAG,eAAe,CAAC;YACzC,aAAa,CAAC,MAAM,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;QAC/C,CAAC;QACD,MAAM,EAAE,CAAC,MAAM,CAAC,kDAAsB,EAAE,MAAM,CAAC,EAAE,EAAE,aAAa,CAAC,CAAC;IACnE,CAAC;IASO,KAAK,CAAC,oBAAoB,CACjC,MAA8B;QAI9B,QAAQ,MAAM,CAAC,IAAI,EAAE,CAAC;YACrB,KAAK,QAAQ;gBACZ,OAAO,IAAI,CAAC,0BAA0B,CAAC,MAAM,CAAC,CAAC;YAChD,KAAK,MAAM;gBACV,OAAO,MAAM,IAAI,CAAC,wBAAwB,CAAC,MAAM,CAAC,CAAC;YACpD;gBACC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,mCAAmC,EAAE;oBACrD,QAAQ,EAAE,MAAM,CAAC,EAAE;oBACnB,IAAI,EAAE,MAAM,CAAC,IAAI;iBACjB,CAAC,CAAC;gBACH,OAAO,SAAS,CAAC;QACnB,CAAC;IACF,CAAC;IAEO,KAAK,CAAC,wBAAwB,CACrC,MAA8B;QAE9B,IAAI,UAAyB,CAAC;QAC9B,IAAI,CAAC;YACJ,UAAU,GAAG,IAAA,wBAAS,EAAgB,MAAM,CAAC,MAAM,CAAC,CAAC;QACtD,CAAC;QAAC,MAAM,CAAC;YACR,MAAM,IAAI,8BAAe,CAAC,4CAA4C,CAAC,CAAC;QACzE,CAAC;QAED,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,mBAAmB,CAAC,WAAW,CAAC,UAAU,CAAC,CAAC;QAEtE,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC/B,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,SAAS,UAAU,CAAC,GAAG,cAAc,MAAM,CAAC,OAAO,CAAC,MAAM,SAAS,EAAE;gBACtF,OAAO,EAAE,MAAM,CAAC,OAAO;aACvB,CAAC,CAAC;QACJ,CAAC;QAED,OAAO;YACN,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;gBAC/B,GAAG,EAAE,GAAG,CAAC,GAAG;gBACZ,IAAI,EAAE;oBACL,UAAU,EAAE,GAAG,CAAC,UAA4B;oBAC5C,WAAW,EAAE,GAAG,CAAC,WAAW;oBAC5B,MAAM,EAAE,GAAG,CAAC,MAAM;oBAClB,gBAAgB,EAAE,GAAG,CAAC,gBAAgB;oBACtC,YAAY,EAAE,GAAG,CAAC,YAAY;oBAC9B,SAAS,EAAE,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,MAAM,CAAC,UAAU,GAAG,IAAI,CAAC,CAAC,WAAW,EAAE;iBACxE;aACD,CAAC,CAAC;YACH,eAAe,EAAE,MAAM,CAAC,UAAU;SAClC,CAAC;IACH,CAAC;IAEO,0BAA0B,CAAC,MAA8B;QAIhE,IAAI,SAAkB,CAAC;QACvB,IAAI,CAAC;YACJ,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QACvC,CAAC;QAAC,MAAM,CAAC;YACR,MAAM,IAAI,8BAAe,CAAC,8CAA8C,CAAC,CAAC;QAC3E,CAAC;QACD,MAAM,YAAY,GAAG,OAAC,CAAC,KAAK,CAAC,+CAAsB,CAAC,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC;QAC1E,IAAI,CAAC,YAAY,CAAC,OAAO,EAAE,CAAC;YAC3B,MAAM,IAAI,8BAAe,CAAC,iCAAiC,YAAY,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;QAC1F,CAAC;QACD,MAAM,aAAa,GAAG,YAAY,CAAC,IAAI,CAAC,MAAM,CAC7C,CAAC,CAAC,EAAwB,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,QAAQ,CAChD,CAAC;QACF,OAAO;YACN,IAAI,EAAE,IAAI,CAAC,iBAAiB,CAAC,aAAa,CAAC;SAC3C,CAAC;IACH,CAAC;IAIO,iBAAiB,CACxB,OAA0B;QAE1B,MAAM,MAAM,GAAiD,EAAE,CAAC;QAChE,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAU,CAAC;QAEnC,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;YAC9B,MAAM,EAAE,GAAG,EAAE,UAAU,EAAE,GAAG,EAAE,SAAS,EAAE,MAAM,EAAE,gBAAgB,EAAE,YAAY,EAAE,GAAG,MAAM,CAAC;YAE3F,IAAI,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;gBACvB,MAAM,IAAI,8BAAe,CAAC,gBAAgB,GAAG,kBAAkB,CAAC,CAAC;YAClE,CAAC;YACD,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YAElB,IAAI,CAAC,mBAAmB,CAAC,GAAG,EAAE,UAAU,EAAE,SAAS,CAAC,CAAC;YAErD,MAAM,CAAC,IAAI,CAAC;gBACX,GAAG;gBACH,IAAI,EAAE;oBACL,UAAU;oBACV,WAAW,EAAE,SAAS;oBACtB,MAAM;oBACN,gBAAgB;oBAChB,YAAY;iBACZ;aACD,CAAC,CAAC;QACJ,CAAC;QAED,OAAO,MAAM,CAAC;IACf,CAAC;IAEO,mBAAmB,CAAC,GAAW,EAAE,UAAoB,EAAE,SAAiB;QAE/E,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAmB,CAAC;QAC5C,KAAK,MAAM,GAAG,IAAI,UAAU,EAAE,CAAC;YAC9B,MAAM,MAAM,GAAG,gBAAgB,CAAC,GAAG,CAAC,CAAC;YACrC,IAAI,CAAC,MAAM,EAAE,CAAC;gBACb,MAAM,IAAI,8BAAe,CAAC,gBAAgB,GAAG,yBAAyB,GAAG,GAAG,CAAC,CAAC;YAC/E,CAAC;YACD,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QACtB,CAAC;QAGD,IAAI,QAAQ,CAAC,IAAI,GAAG,CAAC,EAAE,CAAC;YACvB,MAAM,IAAI,8BAAe,CACxB,gBAAgB,GAAG,qDAAqD,CAAC,GAAG,QAAQ,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAClG,CAAC;QACH,CAAC;QAED,MAAM,MAAM,GAAG,CAAC,GAAG,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC;QAGhC,IAAI,SAA6C,CAAC;QAClD,IAAI,CAAC;YACJ,SAAS,GAAG,IAAA,6BAAe,EAAC,SAAS,CAAC,CAAC;QACxC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe,CAAC;YACzE,MAAM,IAAI,8BAAe,CAAC,gBAAgB,GAAG,mCAAmC,OAAO,EAAE,CAAC,CAAC;QAC5F,CAAC;QAGD,MAAM,OAAO,GAAG,SAAS,CAAC,iBAAiB,CAAC;QAC5C,MAAM,aAAa,GAAsC;YACxD,GAAG,EAAE,CAAC,KAAK,CAAC;YACZ,EAAE,EAAE,CAAC,IAAI,CAAC;YACV,KAAK,EAAE,CAAC,SAAS,EAAE,OAAO,CAAC;SAC3B,CAAC;QAEF,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,OAAO,IAAI,EAAE,CAAC,EAAE,CAAC;YACpD,MAAM,IAAI,8BAAe,CACxB,gBAAgB,GAAG,gBAAgB,OAAO,sCAAsC,MAAM,GAAG,CACzF,CAAC;QACH,CAAC;IACF,CAAC;IAIO,gBAAgB,CAAC,QAAgB,EAAE,WAAmB;QAC7D,MAAM,IAAI,GAAG,IAAA,wBAAU,EAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACpE,MAAM,MAAM,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QAE9C,IAAI,MAAM,IAAI,MAAM,CAAC,eAAe,KAAK,IAAI,EAAE,CAAC;YAC/C,OAAO,MAAM,CAAC,SAAS,CAAC;QACzB,CAAC;QAED,IAAI,CAAC;YACJ,MAAM,SAAS,GAAG,IAAA,6BAAe,EAAC,WAAW,CAAC,CAAC;YAC/C,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,QAAQ,EAAE,EAAE,eAAe,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,CAAC;YACrE,OAAO,SAAS,CAAC;QAClB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,sCAAsC,EAAE;gBACxD,QAAQ;gBACR,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;aAC7D,CAAC,CAAC;YACH,OAAO,SAAS,CAAC;QAClB,CAAC;IACF,CAAC;CACD,CAAA;;AA9gBM;IADL,IAAA,6BAAgB,GAAE;;;;yDAOlB;AAcD;IADC,IAAA,6BAAgB,GAAE;;;;oDAIlB;AAGD;IADC,IAAA,uBAAU,GAAE;;;;iDAIZ;4BA/EW,iBAAiB;IAD7B,IAAA,YAAO,GAAE;qCAcA,uBAAM,EACW,2CAAmB,EACC,0DAA0B,EAChC,6CAAoB,EACxB,2BAAgB,EACnB,kBAAa,EACP,mCAAmB;GAnB9C,iBAAiB,CAgkB7B"}
|
|
1
|
+
{"version":3,"file":"trusted-key.service.js","sourceRoot":"","sources":["../../../../src/modules/token-exchange/services/trusted-key.service.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,wDAA6C;AAC7C,8CAAsC;AACtC,gCAAgD;AAChD,gDAAiF;AACjF,gCAAkC;AAElC,0CAAuC;AACvC,uCAA4C;AAC5C,+CAA0D;AAE1D,6CAA0D;AAC1D,6BAAwB;AAExB,8FAAwF;AACxF,gFAA2E;AAC3E,0GAAoG;AACpG,4FAAuF;AACvF,oEAA+D;AAS/D,sEAAyF;AACzF,mDAAsD;AAItD,MAAM,gBAAgB,GAAoC;IACzD,KAAK,EAAE,KAAK;IACZ,KAAK,EAAE,KAAK;IACZ,KAAK,EAAE,KAAK;IACZ,KAAK,EAAE,KAAK;IACZ,KAAK,EAAE,KAAK;IACZ,KAAK,EAAE,KAAK;IACZ,KAAK,EAAE,IAAI;IACX,KAAK,EAAE,IAAI;IACX,KAAK,EAAE,IAAI;IACX,KAAK,EAAE,OAAO;CACd,CAAC;AAEF,MAAM,gBAAgB,GAAG,QAAQ,CAAC;AAGlC,MAAM,wBAAwB,GAAG,EAAE,GAAG,gBAAI,CAAC,OAAO,CAAC,cAAc,CAAC;AAmB3D,IAAM,iBAAiB,GAAvB,MAAM,iBAAiB;IAY7B,YACC,MAAc,EACG,MAA2B,EAC3B,0BAAsD,EACtD,oBAA0C,EAC1C,gBAAkC,EAClC,aAA4B,EAC5B,mBAAwC;QALxC,WAAM,GAAN,MAAM,CAAqB;QAC3B,+BAA0B,GAA1B,0BAA0B,CAA4B;QACtD,yBAAoB,GAApB,oBAAoB,CAAsB;QAC1C,qBAAgB,GAAhB,gBAAgB,CAAkB;QAClC,kBAAa,GAAb,aAAa,CAAe;QAC5B,wBAAmB,GAAnB,mBAAmB,CAAqB;QAdlD,mBAAc,GAAG,KAAK,CAAC;QAEd,gBAAW,GAAG,IAAI,GAAG,EAGnC,CAAC;QAWH,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC;IAC/C,CAAC;IAeD,KAAK,CAAC,UAAU;QACf,MAAM,OAAO,GAAG,IAAI,CAAC,kBAAkB,EAAE,CAAC;QAC1C,MAAM,IAAI,CAAC,eAAe,CAAC,OAAO,CAAC,CAAC;QACpC,MAAM,IAAI,CAAC,iBAAiB,EAAE,CAAC;QAE/B,IAAI,IAAI,CAAC,gBAAgB,CAAC,QAAQ,EAAE,CAAC;YACpC,IAAI,CAAC,YAAY,EAAE,CAAC;QACrB,CAAC;aAAM,CAAC;YACP,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,oDAAoD,CAAC,CAAC;QACzE,CAAC;IACF,CAAC;IAGK,AAAN,KAAK,CAAC,gBAAgB;QAIrB,MAAM,IAAI,CAAC,iBAAiB,EAAE,CAAC;QAC/B,IAAI,CAAC,YAAY,EAAE,CAAC;IACrB,CAAC;IAED,YAAY;QACX,IAAI,IAAI,CAAC,cAAc,IAAI,IAAI,CAAC,eAAe;YAAE,OAAO;QAExD,IAAI,CAAC,eAAe,GAAG,WAAW,CACjC,KAAK,IAAI,EAAE,CAAC,MAAM,IAAI,CAAC,iBAAiB,EAAE,EAC1C,wBAAwB,CACxB,CAAC;QAEF,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,oCAAoC,CAAC,CAAC;IACzD,CAAC;IAGD,WAAW;QACV,aAAa,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;QACpC,IAAI,CAAC,eAAe,GAAG,SAAS,CAAC;IAClC,CAAC;IAGD,QAAQ;QACP,IAAI,CAAC,cAAc,GAAG,IAAI,CAAC;QAC3B,IAAI,CAAC,WAAW,EAAE,CAAC;IACpB,CAAC;IAWD,KAAK,CAAC,cAAc,CAAC,GAAW,EAAE,MAAc;QAC/C,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,oBAAoB,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC;QACnE,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,SAAS,CAAC;QAE5C,KAAK,MAAM,MAAM,IAAI,QAAQ,EAAE,CAAC;YAC/B,IAAI,IAAoB,CAAC;YACzB,IAAI,CAAC;gBACJ,MAAM,MAAM,GAAG,6CAAoB,CAAC,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;gBACvE,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;oBACrB,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,uCAAuC,EAAE;wBACzD,GAAG;wBACH,QAAQ,EAAE,MAAM,CAAC,QAAQ;wBACzB,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC,OAAO;qBAC3B,CAAC,CAAC;oBACH,SAAS;gBACV,CAAC;gBACD,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC;YACpB,CAAC;YAAC,MAAM,CAAC;gBACR,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,uCAAuC,EAAE;oBACzD,GAAG;oBACH,QAAQ,EAAE,MAAM,CAAC,QAAQ;oBACzB,KAAK,EAAE,cAAc;iBACrB,CAAC,CAAC;gBACH,SAAS;YACV,CAAC;YAED,IAAI,IAAI,CAAC,MAAM,KAAK,MAAM;gBAAE,SAAS;YAErC,MAAM,SAAS,GAAG,IAAI,CAAC,gBAAgB,CAAC,GAAG,MAAM,CAAC,QAAQ,IAAI,GAAG,EAAE,EAAE,IAAI,CAAC,WAAW,CAAC,CAAC;YACvF,IAAI,CAAC,SAAS;gBAAE,SAAS;YAEzB,OAAO;gBACN,GAAG;gBACH,UAAU,EAAE,IAAI,CAAC,UAAU;gBAC3B,GAAG,EAAE,SAAS;gBACd,MAAM,EAAE,IAAI,CAAC,MAAM;gBACnB,gBAAgB,EAAE,IAAI,CAAC,gBAAgB;gBACvC,YAAY,EAAE,IAAI,CAAC,YAAY;gBAC/B,oBAAoB,EAAE,IAAI,CAAC,oBAAoB,IAAI,IAAI;aACvD,CAAC;QACH,CAAC;QAED,OAAO,SAAS,CAAC;IAClB,CAAC;IAQD,KAAK,CAAC,aAAa,CAAC,QAAgB;QACnC,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,0BAA0B,CAAC,SAAS,CAAC,EAAE,EAAE,EAAE,QAAQ,EAAE,CAAC,CAAC;QACjF,IAAI,CAAC,MAAM,EAAE,CAAC;YACb,MAAM,IAAI,8BAAe,CAAC,iCAAiC,QAAQ,EAAE,CAAC,CAAC;QACxE,CAAC;QACD,MAAM,IAAI,CAAC,qBAAqB,CAAC,MAAM,CAAC,CAAC;IAC1C,CAAC;IAED,KAAK,CAAC,OAAO;QACZ,OAAO,MAAM,IAAI,CAAC,oBAAoB,CAAC,IAAI,EAAE,CAAC;IAC/C,CAAC;IAED,KAAK,CAAC,WAAW;QAChB,OAAO,MAAM,IAAI,CAAC,0BAA0B,CAAC,IAAI,EAAE,CAAC;IACrD,CAAC;IAIO,kBAAkB;QACzB,MAAM,GAAG,GAAG,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC;QAEpC,IAAI,CAAC,GAAG,EAAE,CAAC;YACV,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,4BAA4B,CAAC,CAAC;YAC/C,OAAO,EAAE,CAAC;QACX,CAAC;QAED,IAAI,MAAe,CAAC;QACpB,IAAI,CAAC;YACJ,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC1B,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,mCAAmC,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;YAClE,MAAM,IAAI,8BAAe,CAAC,mCAAmC,CAAC,CAAC;QAChE,CAAC;QAED,MAAM,MAAM,GAAG,OAAC,CAAC,KAAK,CAAC,+CAAsB,CAAC,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;QAEjE,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACrB,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,sCAAsC,EAAE,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC;YACnF,MAAM,IAAI,8BAAe,CAAC,sCAAsC,CAAC,CAAC;QACnE,CAAC;QAED,OAAO,MAAM,CAAC,IAAI,CAAC;IACpB,CAAC;IAED,KAAK,CAAC,sBAAsB;QAC3B,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,OAAO,EAAE,CAAC;QACrC,MAAM,OAAO,GAAG,IAAI,GAAG,EAAU,CAAC;QAElC,OAAO,CAAC,OAAO,CAAC,CAAC,MAAM,EAAE,EAAE;YAC1B,IAAI,CAAC;gBACJ,MAAM,MAAM,GAAG,6CAAoB,CAAC,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;gBACvE,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;oBACrB,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,uCAAuC,EAAE;wBACzD,GAAG,EAAE,MAAM,CAAC,GAAG;wBACf,QAAQ,EAAE,MAAM,CAAC,QAAQ;wBACzB,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC,OAAO;qBAC3B,CAAC,CAAC;oBACH,OAAO;gBACR,CAAC;gBACD,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YACjC,CAAC;YAAC,MAAM,CAAC;gBACR,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,uCAAuC,EAAE;oBACzD,GAAG,EAAE,MAAM,CAAC,GAAG;oBACf,QAAQ,EAAE,MAAM,CAAC,QAAQ;oBACzB,KAAK,EAAE,cAAc;iBACrB,CAAC,CAAC;YACJ,CAAC;QACF,CAAC,CAAC,CAAC;QACH,OAAO,OAAO,CAAC,IAAI,KAAK,CAAC,CAAC;IAC3B,CAAC;IAIO,gBAAgB,CAAC,MAAwB;QAChD,IAAI,MAAM,CAAC,IAAI,KAAK,QAAQ;YAAE,OAAO,gBAAgB,CAAC;QACtD,OAAO,IAAA,wBAAU,EAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IAC3E,CAAC;IAMO,KAAK,CAAC,eAAe,CAAC,OAA2B;QACxD,MAAM,IAAI,CAAC,aAAa,CAAC,QAAQ,OAA6B,KAAK,EAAE,EAAE,EAAE,EAAE;YAC1E,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,iCAAiC,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC;YAClE,MAAM,aAAa,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAwB,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC;YACvF,MAAM,WAAW,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,MAAM,CAAC,CAAC;YAE7D,MAAM,iBAAiB,GAAG,IAAI,GAAG,EAAU,CAAC;YAG5C,IAAI,aAAa,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAC9B,MAAM,QAAQ,GAAG,gBAAgB,CAAC;gBAClC,iBAAiB,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;gBAChC,MAAM,EAAE,CAAC,IAAI,CAAC,kDAAsB,EAAE;oBACrC,EAAE,EAAE,QAAQ;oBACZ,IAAI,EAAE,QAAiB;oBACvB,MAAM,EAAE,IAAI,CAAC,SAAS,CAAC,aAAa,CAAC;oBACrC,MAAM,EAAE,SAAkB;iBAC1B,CAAC,CAAC;YACJ,CAAC;YAGD,KAAK,MAAM,IAAI,IAAI,WAAW,EAAE,CAAC;gBAChC,MAAM,QAAQ,GAAG,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,CAAC;gBAC7C,iBAAiB,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;gBAChC,MAAM,EAAE,CAAC,IAAI,CAAC,kDAAsB,EAAE;oBACrC,EAAE,EAAE,QAAQ;oBACZ,IAAI,EAAE,MAAe;oBACrB,MAAM,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC;oBAC5B,MAAM,EAAE,SAAkB;iBAC1B,CAAC,CAAC;YACJ,CAAC;YAGD,IAAI,iBAAiB,CAAC,IAAI,GAAG,CAAC,EAAE,CAAC;gBAChC,MAAM,EAAE,CAAC,MAAM,CAAC,kDAAsB,EAAE;oBACvC,EAAE,EAAE,IAAA,aAAG,EAAC,IAAA,YAAE,EAAC,CAAC,GAAG,iBAAiB,CAAC,CAAC,CAAC;iBACnC,CAAC,CAAC;YACJ,CAAC;iBAAM,CAAC;gBACP,MAAM,EAAE,CAAC,MAAM,CAAC,kDAAsB,EAAE,EAAE,CAAC,CAAC;YAC7C,CAAC;QACF,CAAC,CAAC,CAAC;IACJ,CAAC;IAQO,KAAK,CAAC,iBAAiB;QAC9B,IAAI,CAAC;YACJ,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,0BAA0B,CAAC,IAAI,EAAE,CAAC;YAC7D,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;gBAC9B,MAAM,IAAI,CAAC,qBAAqB,CAAC,MAAM,CAAC,CAAC;YAC1C,CAAC;QACF,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,yCAAyC,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;QACzE,CAAC;IACF,CAAC;IAMO,KAAK,CAAC,iBAAiB;QAC9B,IAAI,CAAC;YACJ,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,wBAAwB,CAAC,CAAC;YAC5C,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,0BAA0B,CAAC,IAAI,EAAE,CAAC;YAC7D,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;YACvB,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;gBAC9B,MAAM,UAAU,GAAG,IAAI,CAAC,oBAAoB,CAAC,MAAM,CAAC,CAAC;gBACrD,MAAM,WAAW,GAAG,MAAM,CAAC,eAAe,EAAE,OAAO,EAAE,IAAI,CAAC,CAAC;gBAC3D,IAAI,GAAG,GAAG,WAAW,IAAI,UAAU,EAAE,CAAC;oBACrC,MAAM,IAAI,CAAC,qBAAqB,CAAC,MAAM,CAAC,CAAC;gBAC1C,CAAC;YACF,CAAC;QACF,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,yCAAyC,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;QACzE,CAAC;IACF,CAAC;IAEO,oBAAoB,CAAC,MAA8B;QAC1D,IAAI,MAAM,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;YAC5B,IAAI,CAAC;gBACJ,MAAM,MAAM,GAAG,IAAA,wBAAS,EAA0B,MAAM,CAAC,MAAM,CAAC,CAAC;gBACjE,IAAI,OAAO,MAAM,CAAC,eAAe,KAAK,QAAQ,IAAI,MAAM,CAAC,eAAe,GAAG,CAAC,EAAE,CAAC;oBAC9E,OAAO,MAAM,CAAC,eAAe,GAAG,gBAAI,CAAC,OAAO,CAAC,cAAc,CAAC;gBAC7D,CAAC;YACF,CAAC;YAAC,OAAO,CAAC,EAAE,CAAC;gBACZ,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,sDAAsD,EAAE;oBACxE,EAAE,EAAE,MAAM,CAAC,EAAE;oBACb,KAAK,EAAE,CAAC;iBACR,CAAC,CAAC;YACJ,CAAC;QACF,CAAC;QACD,OAAO,IAAI,CAAC,MAAM,CAAC,yBAAyB,GAAG,gBAAI,CAAC,OAAO,CAAC,cAAc,CAAC;IAC5E,CAAC;IAWO,KAAK,CAAC,qBAAqB,CAAC,MAA8B;QACjE,IAAI,CAAC;YACJ,MAAM,IAAI,CAAC,aAAa,CAAC,QAAQ,OAA6B,KAAK,EAAE,EAAE,EAAE,EAAE;gBAC1E,MAAM,WAAW,GAAG,MAAM,EAAE,CAAC,SAAS,CAAC,kDAAsB,EAAE,EAAE,EAAE,EAAE,MAAM,CAAC,EAAE,EAAE,CAAC,CAAC;gBAClF,IAAI,CAAC,WAAW;oBAAE,OAAO;gBACzB,MAAM,IAAI,CAAC,8BAA8B,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC;YAC5D,CAAC,CAAC,CAAC;QACJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YACvE,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,sCAAsC,EAAE;gBACzD,QAAQ,EAAE,MAAM,CAAC,EAAE;gBACnB,KAAK,EAAE,OAAO;aACd,CAAC,CAAC;YACH,MAAM,IAAI,CAAC,0BAA0B,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,EAAE;gBACvD,MAAM,EAAE,OAAO;gBACf,SAAS,EAAE,OAAO;gBAClB,eAAe,EAAE,IAAI,IAAI,EAAE;aAC3B,CAAC,CAAC;QACJ,CAAC;IACF,CAAC;IAEO,KAAK,CAAC,8BAA8B,CAC3C,MAA8B,EAC9B,EAAiB;QAEjB,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,oBAAoB,CAAC,MAAM,CAAC,CAAC;QACvD,IAAI,CAAC,MAAM,EAAE,CAAC;YAGb,MAAM,EAAE,CAAC,MAAM,CAAC,kDAAsB,EAAE,MAAM,CAAC,EAAE,EAAE;gBAClD,MAAM,EAAE,SAAS;gBACjB,eAAe,EAAE,IAAI,IAAI,EAAE;aAC3B,CAAC,CAAC;YACH,OAAO;QACR,CAAC;QAED,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC;QACzB,MAAM,eAAe,GAAG,MAAM,CAAC,eAAe,CAAC;QAG/C,MAAM,EAAE,CAAC,MAAM,CAAC,qCAAgB,EAAE,EAAE,QAAQ,EAAE,MAAM,CAAC,EAAE,EAAE,CAAC,CAAC;QAG3D,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;YACxB,MAAM,EAAE,CAAC,IAAI,CAAC,qCAAgB,EAAE;gBAC/B,QAAQ,EAAE,MAAM,CAAC,EAAE;gBACnB,GAAG,EAAE,GAAG,CAAC,GAAG;gBACZ,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC;gBAC9B,SAAS,EAAE,IAAI,IAAI,EAAE;aACrB,CAAC,CAAC;QACJ,CAAC;QAGD,MAAM,aAAa,GAAoC;YACtD,MAAM,EAAE,SAAkB;YAC1B,SAAS,EAAE,IAAI;YACf,eAAe,EAAE,IAAI,IAAI,EAAE;SAC3B,CAAC;QACF,IAAI,eAAe,KAAK,SAAS,EAAE,CAAC;YACnC,MAAM,MAAM,GAAG,IAAA,wBAAS,EAA0B,MAAM,CAAC,MAAM,CAAC,CAAC;YACjE,MAAM,CAAC,eAAe,GAAG,eAAe,CAAC;YACzC,aAAa,CAAC,MAAM,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;QAC/C,CAAC;QACD,MAAM,EAAE,CAAC,MAAM,CAAC,kDAAsB,EAAE,MAAM,CAAC,EAAE,EAAE,aAAa,CAAC,CAAC;IACnE,CAAC;IASO,KAAK,CAAC,oBAAoB,CACjC,MAA8B;QAI9B,QAAQ,MAAM,CAAC,IAAI,EAAE,CAAC;YACrB,KAAK,QAAQ;gBACZ,OAAO,IAAI,CAAC,0BAA0B,CAAC,MAAM,CAAC,CAAC;YAChD,KAAK,MAAM;gBACV,OAAO,MAAM,IAAI,CAAC,wBAAwB,CAAC,MAAM,CAAC,CAAC;YACpD;gBACC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,mCAAmC,EAAE;oBACrD,QAAQ,EAAE,MAAM,CAAC,EAAE;oBACnB,IAAI,EAAE,MAAM,CAAC,IAAI;iBACjB,CAAC,CAAC;gBACH,OAAO,SAAS,CAAC;QACnB,CAAC;IACF,CAAC;IAEO,KAAK,CAAC,wBAAwB,CACrC,MAA8B;QAE9B,IAAI,UAAyB,CAAC;QAC9B,IAAI,CAAC;YACJ,UAAU,GAAG,IAAA,wBAAS,EAAgB,MAAM,CAAC,MAAM,CAAC,CAAC;QACtD,CAAC;QAAC,MAAM,CAAC;YACR,MAAM,IAAI,8BAAe,CAAC,4CAA4C,CAAC,CAAC;QACzE,CAAC;QAED,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,mBAAmB,CAAC,WAAW,CAAC,UAAU,CAAC,CAAC;QAEtE,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC/B,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,SAAS,UAAU,CAAC,GAAG,cAAc,MAAM,CAAC,OAAO,CAAC,MAAM,SAAS,EAAE;gBACtF,OAAO,EAAE,MAAM,CAAC,OAAO;aACvB,CAAC,CAAC;QACJ,CAAC;QAED,OAAO;YACN,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;gBAC/B,GAAG,EAAE,GAAG,CAAC,GAAG;gBACZ,IAAI,EAAE;oBACL,UAAU,EAAE,GAAG,CAAC,UAA4B;oBAC5C,WAAW,EAAE,GAAG,CAAC,WAAW;oBAC5B,MAAM,EAAE,GAAG,CAAC,MAAM;oBAClB,gBAAgB,EAAE,GAAG,CAAC,gBAAgB;oBACtC,YAAY,EAAE,GAAG,CAAC,YAAY;oBAC9B,oBAAoB,EAAE,UAAU,CAAC,oBAAoB,IAAI,IAAI;oBAC7D,SAAS,EAAE,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,MAAM,CAAC,UAAU,GAAG,IAAI,CAAC,CAAC,WAAW,EAAE;iBACxE;aACD,CAAC,CAAC;YACH,eAAe,EAAE,MAAM,CAAC,UAAU;SAClC,CAAC;IACH,CAAC;IAEO,0BAA0B,CAAC,MAA8B;QAIhE,IAAI,SAAkB,CAAC;QACvB,IAAI,CAAC;YACJ,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QACvC,CAAC;QAAC,MAAM,CAAC;YACR,MAAM,IAAI,8BAAe,CAAC,8CAA8C,CAAC,CAAC;QAC3E,CAAC;QACD,MAAM,YAAY,GAAG,OAAC,CAAC,KAAK,CAAC,+CAAsB,CAAC,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC;QAC1E,IAAI,CAAC,YAAY,CAAC,OAAO,EAAE,CAAC;YAC3B,MAAM,IAAI,8BAAe,CAAC,iCAAiC,YAAY,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;QAC1F,CAAC;QACD,MAAM,aAAa,GAAG,YAAY,CAAC,IAAI,CAAC,MAAM,CAC7C,CAAC,CAAC,EAAwB,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,QAAQ,CAChD,CAAC;QACF,OAAO;YACN,IAAI,EAAE,IAAI,CAAC,iBAAiB,CAAC,aAAa,CAAC;SAC3C,CAAC;IACH,CAAC;IAIO,iBAAiB,CACxB,OAA0B;QAE1B,MAAM,MAAM,GAAiD,EAAE,CAAC;QAChE,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAU,CAAC;QAEnC,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;YAC9B,MAAM,EACL,GAAG,EACH,UAAU,EACV,GAAG,EAAE,SAAS,EACd,MAAM,EACN,gBAAgB,EAChB,YAAY,EACZ,oBAAoB,GACpB,GAAG,MAAM,CAAC;YAEX,IAAI,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;gBACvB,MAAM,IAAI,8BAAe,CAAC,gBAAgB,GAAG,kBAAkB,CAAC,CAAC;YAClE,CAAC;YACD,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YAElB,IAAI,CAAC,mBAAmB,CAAC,GAAG,EAAE,UAAU,EAAE,SAAS,CAAC,CAAC;YAErD,MAAM,CAAC,IAAI,CAAC;gBACX,GAAG;gBACH,IAAI,EAAE;oBACL,UAAU;oBACV,WAAW,EAAE,SAAS;oBACtB,MAAM;oBACN,gBAAgB;oBAChB,YAAY;oBACZ,oBAAoB;iBACpB;aACD,CAAC,CAAC;QACJ,CAAC;QAED,OAAO,MAAM,CAAC;IACf,CAAC;IAEO,mBAAmB,CAAC,GAAW,EAAE,UAAoB,EAAE,SAAiB;QAE/E,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAmB,CAAC;QAC5C,KAAK,MAAM,GAAG,IAAI,UAAU,EAAE,CAAC;YAC9B,MAAM,MAAM,GAAG,gBAAgB,CAAC,GAAG,CAAC,CAAC;YACrC,IAAI,CAAC,MAAM,EAAE,CAAC;gBACb,MAAM,IAAI,8BAAe,CAAC,gBAAgB,GAAG,yBAAyB,GAAG,GAAG,CAAC,CAAC;YAC/E,CAAC;YACD,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QACtB,CAAC;QAGD,IAAI,QAAQ,CAAC,IAAI,GAAG,CAAC,EAAE,CAAC;YACvB,MAAM,IAAI,8BAAe,CACxB,gBAAgB,GAAG,qDAAqD,CAAC,GAAG,QAAQ,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAClG,CAAC;QACH,CAAC;QAED,MAAM,MAAM,GAAG,CAAC,GAAG,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC;QAGhC,IAAI,SAA6C,CAAC;QAClD,IAAI,CAAC;YACJ,SAAS,GAAG,IAAA,6BAAe,EAAC,SAAS,CAAC,CAAC;QACxC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe,CAAC;YACzE,MAAM,IAAI,8BAAe,CAAC,gBAAgB,GAAG,mCAAmC,OAAO,EAAE,CAAC,CAAC;QAC5F,CAAC;QAGD,MAAM,OAAO,GAAG,SAAS,CAAC,iBAAiB,CAAC;QAC5C,MAAM,aAAa,GAAsC;YACxD,GAAG,EAAE,CAAC,KAAK,CAAC;YACZ,EAAE,EAAE,CAAC,IAAI,CAAC;YACV,KAAK,EAAE,CAAC,SAAS,EAAE,OAAO,CAAC;SAC3B,CAAC;QAEF,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,OAAO,IAAI,EAAE,CAAC,EAAE,CAAC;YACpD,MAAM,IAAI,8BAAe,CACxB,gBAAgB,GAAG,gBAAgB,OAAO,sCAAsC,MAAM,GAAG,CACzF,CAAC;QACH,CAAC;IACF,CAAC;IAIO,gBAAgB,CAAC,QAAgB,EAAE,WAAmB;QAC7D,MAAM,IAAI,GAAG,IAAA,wBAAU,EAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACpE,MAAM,MAAM,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QAE9C,IAAI,MAAM,IAAI,MAAM,CAAC,eAAe,KAAK,IAAI,EAAE,CAAC;YAC/C,OAAO,MAAM,CAAC,SAAS,CAAC;QACzB,CAAC;QAED,IAAI,CAAC;YACJ,MAAM,SAAS,GAAG,IAAA,6BAAe,EAAC,WAAW,CAAC,CAAC;YAC/C,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,QAAQ,EAAE,EAAE,eAAe,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,CAAC;YACrE,OAAO,SAAS,CAAC;QAClB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,sCAAsC,EAAE;gBACxD,QAAQ;gBACR,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;aAC7D,CAAC,CAAC;YACH,OAAO,SAAS,CAAC;QAClB,CAAC;IACF,CAAC;CACD,CAAA;;AAzhBM;IADL,IAAA,6BAAgB,GAAE;;;;yDAOlB;AAcD;IADC,IAAA,6BAAgB,GAAE;;;;oDAIlB;AAGD;IADC,IAAA,uBAAU,GAAE;;;;iDAIZ;4BA/EW,iBAAiB;IAD7B,IAAA,YAAO,GAAE;qCAcA,uBAAM,EACW,2CAAmB,EACC,0DAA0B,EAChC,6CAAoB,EACxB,2BAAgB,EACnB,kBAAa,EACP,mCAAmB;GAnB9C,iBAAiB,CA2kB7B"}
|
|
@@ -16,6 +16,7 @@ let TokenExchangeConfig = class TokenExchangeConfig {
|
|
|
16
16
|
this.enabled = false;
|
|
17
17
|
this.embedEnabled = false;
|
|
18
18
|
this.maxTokenTtl = 900;
|
|
19
|
+
this.excludeOwner = true;
|
|
19
20
|
this.trustedKeys = '';
|
|
20
21
|
this.keyRefreshIntervalSeconds = 300;
|
|
21
22
|
this.jtiCleanupIntervalSeconds = 60;
|
|
@@ -37,6 +38,10 @@ __decorate([
|
|
|
37
38
|
(0, config_1.Env)('N8N_TOKEN_EXCHANGE_MAX_TOKEN_TTL'),
|
|
38
39
|
__metadata("design:type", Number)
|
|
39
40
|
], TokenExchangeConfig.prototype, "maxTokenTtl", void 0);
|
|
41
|
+
__decorate([
|
|
42
|
+
(0, config_1.Env)('N8N_TOKEN_EXCHANGE_EXCLUDE_OWNER'),
|
|
43
|
+
__metadata("design:type", Boolean)
|
|
44
|
+
], TokenExchangeConfig.prototype, "excludeOwner", void 0);
|
|
40
45
|
__decorate([
|
|
41
46
|
(0, config_1.Env)('N8N_TOKEN_EXCHANGE_TRUSTED_KEYS'),
|
|
42
47
|
__metadata("design:type", String)
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"token-exchange.config.js","sourceRoot":"","sources":["../../../src/modules/token-exchange/token-exchange.config.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,wCAA0C;AAGnC,IAAM,mBAAmB,GAAzB,MAAM,mBAAmB;IAAzB;QAGN,YAAO,GAAY,KAAK,CAAC;QAIzB,iBAAY,GAAY,KAAK,CAAC;QAI9B,gBAAW,GAAW,GAAG,CAAC;
|
|
1
|
+
{"version":3,"file":"token-exchange.config.js","sourceRoot":"","sources":["../../../src/modules/token-exchange/token-exchange.config.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,wCAA0C;AAGnC,IAAM,mBAAmB,GAAzB,MAAM,mBAAmB;IAAzB;QAGN,YAAO,GAAY,KAAK,CAAC;QAIzB,iBAAY,GAAY,KAAK,CAAC;QAI9B,gBAAW,GAAW,GAAG,CAAC;QAG1B,iBAAY,GAAY,IAAI,CAAC;QAU7B,gBAAW,GAAW,EAAE,CAAC;QAIzB,8BAAyB,GAAW,GAAG,CAAC;QAIxC,8BAAyB,GAAW,EAAE,CAAC;QAIvC,wBAAmB,GAAW,IAAI,CAAC;QAInC,wBAAmB,GAAW,EAAE,CAAC;QAIjC,2BAAsB,GAAW,EAAE,CAAC;IACrC,CAAC;CAAA,CAAA;;AA1CA;IADC,IAAA,YAAG,EAAC,4BAA4B,CAAC;;oDACT;AAIzB;IADC,IAAA,YAAG,EAAC,yBAAyB,CAAC;;yDACD;AAI9B;IADC,IAAA,YAAG,EAAC,kCAAkC,CAAC;;wDACd;AAG1B;IADC,IAAA,YAAG,EAAC,kCAAkC,CAAC;;yDACX;AAU7B;IADC,IAAA,YAAG,EAAC,iCAAiC,CAAC;;wDACd;AAIzB;IADC,IAAA,YAAG,EAAC,iDAAiD,CAAC;;sEACf;AAIxC;IADC,IAAA,YAAG,EAAC,iDAAiD,CAAC;;sEAChB;AAIvC;IADC,IAAA,YAAG,EAAC,2CAA2C,CAAC;;gEACd;AAInC;IADC,IAAA,YAAG,EAAC,2CAA2C,CAAC;;gEAChB;AAIjC;IADC,IAAA,YAAG,EAAC,8CAA8C,CAAC;;mEAChB;8BA5CxB,mBAAmB;IAD/B,eAAM;GACM,mBAAmB,CA6C/B"}
|
|
@@ -14,6 +14,7 @@ export declare const ExternalTokenClaimsSchema: z.ZodObject<{
|
|
|
14
14
|
given_name: z.ZodOptional<z.ZodString>;
|
|
15
15
|
family_name: z.ZodOptional<z.ZodString>;
|
|
16
16
|
role: z.ZodOptional<z.ZodString>;
|
|
17
|
+
email_verified: z.ZodOptional<z.ZodEffects<z.ZodUnion<[z.ZodBoolean, z.ZodEnum<["true", "false"]>]>, boolean, "false" | "true" | boolean>>;
|
|
17
18
|
}, "strip", z.ZodTypeAny, {
|
|
18
19
|
sub: string;
|
|
19
20
|
iss: string;
|
|
@@ -26,6 +27,7 @@ export declare const ExternalTokenClaimsSchema: z.ZodObject<{
|
|
|
26
27
|
given_name?: string | undefined;
|
|
27
28
|
family_name?: string | undefined;
|
|
28
29
|
role?: string | undefined;
|
|
30
|
+
email_verified?: boolean | undefined;
|
|
29
31
|
}, {
|
|
30
32
|
sub: string;
|
|
31
33
|
iss: string;
|
|
@@ -38,6 +40,7 @@ export declare const ExternalTokenClaimsSchema: z.ZodObject<{
|
|
|
38
40
|
given_name?: string | undefined;
|
|
39
41
|
family_name?: string | undefined;
|
|
40
42
|
role?: string | undefined;
|
|
43
|
+
email_verified?: "false" | "true" | boolean | undefined;
|
|
41
44
|
}>;
|
|
42
45
|
export type ExternalTokenClaims = z.infer<typeof ExternalTokenClaimsSchema>;
|
|
43
46
|
export declare const TrustedKeySourceSchema: z.ZodDiscriminatedUnion<"type", [z.ZodObject<{
|
|
@@ -46,6 +49,7 @@ export declare const TrustedKeySourceSchema: z.ZodDiscriminatedUnion<"type", [z.
|
|
|
46
49
|
algorithms: z.ZodArray<z.ZodEnum<["RS256", "RS384", "RS512", "ES256", "ES384", "ES512", "PS256", "PS384", "PS512", "EdDSA"]>, "many">;
|
|
47
50
|
key: z.ZodString;
|
|
48
51
|
issuer: z.ZodString;
|
|
52
|
+
requireVerifiedEmail: z.ZodOptional<z.ZodBoolean>;
|
|
49
53
|
expectedAudience: z.ZodOptional<z.ZodString>;
|
|
50
54
|
allowedRoles: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
|
|
51
55
|
}, "strip", z.ZodTypeAny, {
|
|
@@ -54,6 +58,7 @@ export declare const TrustedKeySourceSchema: z.ZodDiscriminatedUnion<"type", [z.
|
|
|
54
58
|
algorithms: ("ES256" | "ES384" | "ES512" | "EdDSA" | "PS256" | "PS384" | "PS512" | "RS256" | "RS384" | "RS512")[];
|
|
55
59
|
key: string;
|
|
56
60
|
issuer: string;
|
|
61
|
+
requireVerifiedEmail?: boolean | undefined;
|
|
57
62
|
expectedAudience?: string | undefined;
|
|
58
63
|
allowedRoles?: string[] | undefined;
|
|
59
64
|
}, {
|
|
@@ -62,12 +67,14 @@ export declare const TrustedKeySourceSchema: z.ZodDiscriminatedUnion<"type", [z.
|
|
|
62
67
|
algorithms: ("ES256" | "ES384" | "ES512" | "EdDSA" | "PS256" | "PS384" | "PS512" | "RS256" | "RS384" | "RS512")[];
|
|
63
68
|
key: string;
|
|
64
69
|
issuer: string;
|
|
70
|
+
requireVerifiedEmail?: boolean | undefined;
|
|
65
71
|
expectedAudience?: string | undefined;
|
|
66
72
|
allowedRoles?: string[] | undefined;
|
|
67
73
|
}>, z.ZodObject<{
|
|
68
74
|
type: z.ZodLiteral<"jwks">;
|
|
69
75
|
url: z.ZodString;
|
|
70
76
|
issuer: z.ZodString;
|
|
77
|
+
requireVerifiedEmail: z.ZodOptional<z.ZodBoolean>;
|
|
71
78
|
expectedAudience: z.ZodOptional<z.ZodString>;
|
|
72
79
|
allowedRoles: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
|
|
73
80
|
cacheTtlSeconds: z.ZodOptional<z.ZodNumber>;
|
|
@@ -75,6 +82,7 @@ export declare const TrustedKeySourceSchema: z.ZodDiscriminatedUnion<"type", [z.
|
|
|
75
82
|
type: "jwks";
|
|
76
83
|
url: string;
|
|
77
84
|
issuer: string;
|
|
85
|
+
requireVerifiedEmail?: boolean | undefined;
|
|
78
86
|
expectedAudience?: string | undefined;
|
|
79
87
|
allowedRoles?: string[] | undefined;
|
|
80
88
|
cacheTtlSeconds?: number | undefined;
|
|
@@ -82,6 +90,7 @@ export declare const TrustedKeySourceSchema: z.ZodDiscriminatedUnion<"type", [z.
|
|
|
82
90
|
type: "jwks";
|
|
83
91
|
url: string;
|
|
84
92
|
issuer: string;
|
|
93
|
+
requireVerifiedEmail?: boolean | undefined;
|
|
85
94
|
expectedAudience?: string | undefined;
|
|
86
95
|
allowedRoles?: string[] | undefined;
|
|
87
96
|
cacheTtlSeconds?: number | undefined;
|
|
@@ -103,6 +112,7 @@ export declare const TrustedKeyDataSchema: z.ZodObject<{
|
|
|
103
112
|
expectedAudience: z.ZodOptional<z.ZodString>;
|
|
104
113
|
allowedRoles: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
|
|
105
114
|
expiresAt: z.ZodOptional<z.ZodString>;
|
|
115
|
+
requireVerifiedEmail: z.ZodOptional<z.ZodBoolean>;
|
|
106
116
|
}, "strip", z.ZodTypeAny, {
|
|
107
117
|
algorithms: ("ES256" | "ES384" | "ES512" | "EdDSA" | "PS256" | "PS384" | "PS512" | "RS256" | "RS384" | "RS512")[];
|
|
108
118
|
keyMaterial: string;
|
|
@@ -110,6 +120,7 @@ export declare const TrustedKeyDataSchema: z.ZodObject<{
|
|
|
110
120
|
expectedAudience?: string | undefined;
|
|
111
121
|
allowedRoles?: string[] | undefined;
|
|
112
122
|
expiresAt?: string | undefined;
|
|
123
|
+
requireVerifiedEmail?: boolean | undefined;
|
|
113
124
|
}, {
|
|
114
125
|
algorithms: ("ES256" | "ES384" | "ES512" | "EdDSA" | "PS256" | "PS384" | "PS512" | "RS256" | "RS384" | "RS512")[];
|
|
115
126
|
keyMaterial: string;
|
|
@@ -117,6 +128,7 @@ export declare const TrustedKeyDataSchema: z.ZodObject<{
|
|
|
117
128
|
expectedAudience?: string | undefined;
|
|
118
129
|
allowedRoles?: string[] | undefined;
|
|
119
130
|
expiresAt?: string | undefined;
|
|
131
|
+
requireVerifiedEmail?: boolean | undefined;
|
|
120
132
|
}>;
|
|
121
133
|
export type TrustedKeyData = z.infer<typeof TrustedKeyDataSchema>;
|
|
122
134
|
export interface ResolvedTrustedKey {
|
|
@@ -126,6 +138,7 @@ export interface ResolvedTrustedKey {
|
|
|
126
138
|
issuer: string;
|
|
127
139
|
expectedAudience?: string;
|
|
128
140
|
allowedRoles?: string[];
|
|
141
|
+
requireVerifiedEmail: boolean;
|
|
129
142
|
}
|
|
130
143
|
export declare const TokenExchangeRequestSchema: z.ZodObject<{
|
|
131
144
|
grant_type: z.ZodLiteral<"urn:ietf:params:oauth:grant-type:token-exchange">;
|