n8n 2.36.6 → 2.37.0

package/dist/modules/dynamic-credentials.ee/credential-resolvers/identifiers/oauth2-userinfo-identifier.js

@@ -18,7 +18,6 @@ const cache_service_1 = require("../../../../services/cache/cache.service");
 const identifier_interface_1 = require("./identifier-interface");
 const oauth2_metadata_http_client_1 = require("./oauth2-metadata-http-client");
 const oauth2_utils_1 = require("./oauth2-utils");
-const MIN_TOKEN_CACHE_TIMEOUT = 30 * constants_1.Time.seconds.toMilliseconds;
 const MAX_TOKEN_CACHE_TIMEOUT = 5 * constants_1.Time.minutes.toMilliseconds;
 const DEFAULT_CACHE_TIMEOUT = 60 * constants_1.Time.seconds.toMilliseconds;
 exports.OAuth2UserInfoOptionsSchema = zod_1.z.object({
@@ -28,7 +27,19 @@ exports.OAuth2UserInfoOptionsSchema = zod_1.z.object({
 const OAuth2MetadataSchema = zod_1.z.object({
     issuer: zod_1.z.string().url(),
     userinfo_endpoint: zod_1.z.string().url(),
+    jwks_uri: zod_1.z.string().url().optional(),
 });
+const JWKS_REFRESH_COOLDOWN = 30 * constants_1.Time.seconds.toMilliseconds;
+function isNoMatchingKeyError(error) {
+    return (typeof error === 'object' &&
+        error !== null &&
+        'code' in error &&
+        error.code === 'ERR_JWKS_NO_MATCHING_KEY');
+}
+function isJwks(value) {
+    return (typeof value === 'object' && value !== null && 'keys' in value && Array.isArray(value.keys));
+}
+const JwksSchema = zod_1.z.custom(isJwks, { message: 'Invalid JWKS format' });
 exports.UserInfoResponseSchema = zod_1.z
     .object({
     sub: zod_1.z.string().optional(),
@@ -40,6 +51,7 @@ let OAuth2UserInfoIdentifier = class OAuth2UserInfoIdentifier {
         this.logger = logger;
         this.cache = cache;
         this.http = http;
+        this.jwksRefreshes = new Map();
     }
     async validateOptions(identifierOptions) {
         const options = this.parseOptions(identifierOptions);
@@ -60,22 +72,26 @@ let OAuth2UserInfoIdentifier = class OAuth2UserInfoIdentifier {
             this.logger.error('Metadata does not contain an userinfo endpoint');
             throw new identifier_interface_1.IdentifierValidationError('Metadata does not contain an userinfo endpoint');
         }
+        if (options.expectedAudience && !metadata.jwks_uri) {
+            this.logger.error('Metadata does not contain a JWKS endpoint');
+            throw new identifier_interface_1.IdentifierValidationError('Metadata does not contain a JWKS endpoint, which is required to verify access tokens');
+        }
     }
     async resolve(context, identifierOptions) {
         const options = this.parseOptions(identifierOptions);
         const metadata = await this.fetchMetadata(options);
         const hashedToken = (0, oauth2_utils_1.sha256)(context.identity);
-        const identifierCacheKey = `${CACHE_PREFIX}:subject:${metadata.issuer}:${hashedToken}`;
+        const optionsFingerprint = (0, oauth2_utils_1.sha256)(`${options.subjectClaim}:${options.expectedAudience ?? ''}`);
+        const identifierCacheKey = `${CACHE_PREFIX}:subject:${metadata.issuer}:${optionsFingerprint}:${hashedToken}`;
         const cached = await this.cache.get(identifierCacheKey);
         if (cached) {
             return cached;
         }
-        let ttl = DEFAULT_CACHE_TIMEOUT;
-        const { subject, ttl: ttlOverwrite } = await this.resolveBasedOnUserInfo(metadata, options, context);
-        if (ttlOverwrite) {
-            ttl = ttlOverwrite;
+        const { subject, ttl: ttlOverwrite } = await this.resolveSubject(metadata, options, context);
+        const ttl = ttlOverwrite ?? DEFAULT_CACHE_TIMEOUT;
+        if (ttl > 0) {
+            await this.cache.set(identifierCacheKey, subject, ttl);
         }
-        await this.cache.set(identifierCacheKey, subject, ttl);
         return subject;
     }
     parseOptions(options) {
@@ -105,7 +121,102 @@ let OAuth2UserInfoIdentifier = class OAuth2UserInfoIdentifier {
             throw new identifier_interface_1.IdentifierValidationError('Invalid userinfo response format');
         }
     }
-    async resolveBasedOnUserInfo(metadata, options, context) {
+    async resolveSubject(metadata, options, context) {
+        if (!options.expectedAudience) {
+            this.logger.warn('OAuth2 resolver has no expected audience configured, so access tokens are not bound to this instance. Set an expected audience on the resolver.', { issuer: metadata.issuer });
+            return await this.resolveBasedOnUserInfo(metadata, options, context);
+        }
+        const claims = await this.verifyAccessToken(metadata, context.identity, options.expectedAudience);
+        const ttl = this.cacheTtlFor(claims.exp);
+        const tokenSubject = claims[options.subjectClaim];
+        if (typeof tokenSubject === 'string' && tokenSubject !== '') {
+            this.logger.debug('Resolved subject from access token', { subject: tokenSubject });
+            return { subject: tokenSubject, ttl };
+        }
+        const userData = await this.queryUserInfo(metadata, context);
+        if (claims.sub && userData.sub && claims.sub !== userData.sub) {
+            this.logger.error('UserInfo subject does not match the verified access token');
+            throw new identifier_interface_1.IdentifierValidationError('UserInfo subject does not match the verified access token');
+        }
+        return { subject: this.extractSubject(userData, options), ttl };
+    }
+    async verifyAccessToken(metadata, token, expectedAudience) {
+        if (token.split('.').length !== 3) {
+            throw new identifier_interface_1.IdentifierValidationError('Access token is not a JWT, so its audience cannot be verified. Use the token introspection validation method with this provider.');
+        }
+        if (!metadata.jwks_uri) {
+            throw new identifier_interface_1.IdentifierValidationError('Metadata does not contain a JWKS endpoint, which is required to verify access tokens');
+        }
+        const { createLocalJWKSet, jwtVerify } = await import('jose');
+        const verify = async (jwks) => await jwtVerify(token, createLocalJWKSet(jwks), { issuer: metadata.issuer });
+        let payload;
+        try {
+            payload = (await verify(await this.fetchJwks(metadata.jwks_uri))).payload;
+        }
+        catch (error) {
+            let refreshed;
+            if (isNoMatchingKeyError(error)) {
+                try {
+                    refreshed = await this.refreshJwks(metadata.jwks_uri);
+                }
+                catch (refreshError) {
+                    this.logger.error('Failed to refresh the key set', { error: refreshError });
+                    throw new identifier_interface_1.IdentifierValidationError('Access token verification failed', {
+                        cause: refreshError,
+                    });
+                }
+            }
+            if (!refreshed) {
+                this.logger.error('Access token verification failed', { error });
+                throw new identifier_interface_1.IdentifierValidationError('Access token verification failed', { cause: error });
+            }
+            try {
+                payload = (await verify(refreshed)).payload;
+            }
+            catch (retryError) {
+                this.logger.error('Access token verification failed', { error: retryError });
+                throw new identifier_interface_1.IdentifierValidationError('Access token verification failed', {
+                    cause: retryError,
+                });
+            }
+            this.logger.debug('Verified access token after refreshing the key set', {
+                issuer: metadata.issuer,
+            });
+        }
+        (0, oauth2_utils_1.assertAudience)(payload, expectedAudience);
+        return payload;
+    }
+    async fetchJwks(jwksUri, forceRefresh = false) {
+        return await this.http.fetchMetadata(JwksSchema, {
+            metadataUri: jwksUri,
+            cachePrefix: `${CACHE_PREFIX}:jwks`,
+            skipCache: false,
+            forceRefresh,
+        });
+    }
+    async refreshJwks(jwksUri) {
+        const inFlight = this.jwksRefreshes.get(jwksUri);
+        if (inFlight) {
+            return await inFlight;
+        }
+        const refresh = this.claimAndFetchJwks(jwksUri);
+        this.jwksRefreshes.set(jwksUri, refresh);
+        try {
+            return await refresh;
+        }
+        finally {
+            this.jwksRefreshes.delete(jwksUri);
+        }
+    }
+    async claimAndFetchJwks(jwksUri) {
+        const cooldownKey = `${CACHE_PREFIX}:jwks-refresh:${jwksUri}`;
+        if (await this.cache.get(cooldownKey)) {
+            return undefined;
+        }
+        await this.cache.set(cooldownKey, true, JWKS_REFRESH_COOLDOWN);
+        return await this.fetchJwks(jwksUri, true);
+    }
+    async queryUserInfo(metadata, context) {
         const response = await this.http.requestFull({
             url: metadata.userinfo_endpoint,
             method: 'GET',
@@ -119,7 +230,9 @@ let OAuth2UserInfoIdentifier = class OAuth2UserInfoIdentifier {
             });
             throw new identifier_interface_1.IdentifierValidationError('UserInfo query failed');
         }
-        const userData = this.parseUserInfoResponse(response.body);
+        return this.parseUserInfoResponse(response.body);
+    }
+    extractSubject(userData, options) {
         const subject = userData[options.subjectClaim];
         if (!subject) {
             this.logger.error(`UserInfo response missing subject claim (${options.subjectClaim})`);
@@ -127,17 +240,20 @@ let OAuth2UserInfoIdentifier = class OAuth2UserInfoIdentifier {
         }
         const subjectStr = String(subject);
         this.logger.debug('UserInfo successfully', { subject: subjectStr });
-        let ttl = undefined;
-        if (userData.exp && typeof userData.exp === 'number') {
-            const expiresIn = userData.exp * 1000 - Date.now();
-            if (expiresIn > 0) {
-                ttl = Math.max(MIN_TOKEN_CACHE_TIMEOUT, Math.min(expiresIn, MAX_TOKEN_CACHE_TIMEOUT));
-            }
-            else {
-                ttl = MIN_TOKEN_CACHE_TIMEOUT;
-            }
+        return subjectStr;
+    }
+    cacheTtlFor(exp) {
+        if (typeof exp !== 'number') {
+            return undefined;
         }
-        return { subject: subjectStr, ttl };
+        return Math.min(Math.max(exp * 1000 - Date.now(), 0), MAX_TOKEN_CACHE_TIMEOUT);
+    }
+    async resolveBasedOnUserInfo(metadata, options, context) {
+        const userData = await this.queryUserInfo(metadata, context);
+        return {
+            subject: this.extractSubject(userData, options),
+            ttl: this.cacheTtlFor(userData.exp),
+        };
     }
 };
 exports.OAuth2UserInfoIdentifier = OAuth2UserInfoIdentifier;

package/dist/modules/dynamic-credentials.ee/credential-resolvers/identifiers/oauth2-userinfo-identifier.js.map

@@ -1 +1 @@
-{"version":3,"file":"oauth2-userinfo-identifier.js","sourceRoot":"","sources":["../../../../../src/modules/dynamic-credentials.ee/credential-resolvers/identifiers/oauth2-userinfo-identifier.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,wDAA6C;AAC7C,8CAAsC;AACtC,gCAAkC;AAElC,6BAAwB;AAExB,kEAA8D;AAE9D,iEAAqF;AACrF,+EAAyE;AACzE,iDAA6D;AAI7D,MAAM,uBAAuB,GAAG,EAAE,GAAG,gBAAI,CAAC,OAAO,CAAC,cAAc,CAAC;AACjE,MAAM,uBAAuB,GAAG,CAAC,GAAG,gBAAI,CAAC,OAAO,CAAC,cAAc,CAAC;AAChE,MAAM,qBAAqB,GAAG,EAAE,GAAG,gBAAI,CAAC,OAAO,CAAC,cAAc,CAAC;AAElD,QAAA,2BAA2B,GAAG,OAAC,CAAC,MAAM,CAAC;IACnD,GAAG,kCAAmB,CAAC,KAAK;IAC5B,UAAU,EAAE,OAAC,CAAC,OAAO,CAAC,iBAAiB,CAAC;CACxC,CAAC,CAAC;AAIH,MAAM,oBAAoB,GAAG,OAAC,CAAC,MAAM,CAAC;IACrC,MAAM,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE;IACxB,iBAAiB,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE;CACnC,CAAC,CAAC;AAIU,QAAA,sBAAsB,GAAG,OAAC;KACrC,MAAM,CAAC;IAEP,GAAG,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CAC1B,CAAC;KACD,WAAW,EAAE,CAAC;AAIhB,MAAM,YAAY,GAAG,4BAA4B,CAAC;AAG3C,IAAM,wBAAwB,GAA9B,MAAM,wBAAwB;IACpC,YACkB,MAAc,EACd,KAAmB,EACnB,IAA8B;sBAF9B,MAAM;qBACN,KAAK;oBACL,IAAI;IACnB,CAAC;IAEJ,KAAK,CAAC,eAAe,CAAC,iBAA0C;QAC/D,MAAM,OAAO,GAAG,IAAI,CAAC,YAAY,CAAC,iBAAiB,CAAC,CAAC;QACrD,IAAI,QAAQ,CAAC;QACb,IAAI,CAAC;YACJ,QAAQ,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;QACpD,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,IAAI,KAAK,YAAY,gDAAyB,EAAE,CAAC;gBAChD,MAAM,KAAK,CAAC;YACb,CAAC;YACD,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,uCAAuC,OAAO,CAAC,WAAW,EAAE,EAAE;gBAC/E,KAAK;aACL,CAAC,CAAC;YACH,MAAM,IAAI,gDAAyB,CAClC,iCAAiC,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,EACzF,EAAE,KAAK,EAAE,KAAK,EAAE,CAChB,CAAC;QACH,CAAC;QACD,IAAI,CAAC,QAAQ,CAAC,iBAAiB,EAAE,CAAC;YACjC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,gDAAgD,CAAC,CAAC;YACpE,MAAM,IAAI,gDAAyB,CAAC,gDAAgD,CAAC,CAAC;QACvF,CAAC;IACF,CAAC;IAED,KAAK,CAAC,OAAO,CACZ,OAA2B,EAC3B,iBAA0C;QAE1C,MAAM,OAAO,GAAG,IAAI,CAAC,YAAY,CAAC,iBAAiB,CAAC,CAAC;QACrD,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC;QAEnD,MAAM,WAAW,GAAG,IAAA,qBAAM,EAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;QAE7C,MAAM,kBAAkB,GAAG,GAAG,YAAY,YAAY,QAAQ,CAAC,MAAM,IAAI,WAAW,EAAE,CAAC;QACvF,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,GAAG,CAAS,kBAAkB,CAAC,CAAC;QAChE,IAAI,MAAM,EAAE,CAAC;YACZ,OAAO,MAAM,CAAC;QACf,CAAC;QAED,IAAI,GAAG,GAAG,qBAAqB,CAAC;QAChC,MAAM,EAAE,OAAO,EAAE,GAAG,EAAE,YAAY,EAAE,GAAG,MAAM,IAAI,CAAC,sBAAsB,CACvE,QAAQ,EACR,OAAO,EACP,OAAO,CACP,CAAC;QACF,IAAI,YAAY,EAAE,CAAC;YAClB,GAAG,GAAG,YAAY,CAAC;QACpB,CAAC;QAED,MAAM,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,kBAAkB,EAAE,OAAO,EAAE,GAAG,CAAC,CAAC;QACvD,OAAO,OAAO,CAAC;IAChB,CAAC;IAIO,YAAY,CAAC,OAAgC;QACpD,IAAI,CAAC;YACJ,OAAO,QAAA,2BAA2B,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QACnD,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,mCAAmC,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;YAClE,MAAM,IAAI,gDAAyB,CAAC,mCAAmC,EAAE;gBACxE,KAAK,EAAE,KAAK;aACZ,CAAC,CAAC;QACJ,CAAC;IACF,CAAC;IAEO,KAAK,CAAC,aAAa,CAC1B,OAA8B,EAC9B,SAAS,GAAY,KAAK;QAE1B,OAAO,MAAM,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC,oBAAoB,EAAE;YAC1D,WAAW,EAAE,OAAO,CAAC,WAAW;YAChC,WAAW,EAAE,YAAY;YACzB,SAAS;SACT,CAAC,CAAC;IACJ,CAAC;IAEO,qBAAqB,CAAC,IAAa;QAC1C,IAAI,CAAC;YACJ,OAAO,QAAA,sBAAsB,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAC3C,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,kCAAkC,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;YACjE,MAAM,IAAI,gDAAyB,CAAC,kCAAkC,CAAC,CAAC;QACzE,CAAC;IACF,CAAC;IAEO,KAAK,CAAC,sBAAsB,CACnC,QAAwB,EACxB,OAA8B,EAC9B,OAA2B;QAE3B,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC;YAC5C,GAAG,EAAE,QAAQ,CAAC,iBAAiB;YAC/B,MAAM,EAAE,KAAK;YACb,OAAO,EAAE,EAAE,aAAa,EAAE,UAAU,OAAO,CAAC,QAAQ,EAAE,EAAE;YACxD,IAAI,EAAE,IAAI;SACV,CAAC,CAAC;QAEH,IAAI,QAAQ,CAAC,UAAU,KAAK,GAAG,EAAE,CAAC;YACjC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,iBAAiB,EAAE;gBACpC,MAAM,EAAE,QAAQ,CAAC,UAAU;gBAC3B,IAAI,EAAE,QAAQ,CAAC,IAAI;aACnB,CAAC,CAAC;YACH,MAAM,IAAI,gDAAyB,CAAC,uBAAuB,CAAC,CAAC;QAC9D,CAAC;QAGD,MAAM,QAAQ,GAAG,IAAI,CAAC,qBAAqB,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;QAC3D,MAAM,OAAO,GAAG,QAAQ,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;QAC/C,IAAI,CAAC,OAAO,EAAE,CAAC;YACd,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,4CAA4C,OAAO,CAAC,YAAY,GAAG,CAAC,CAAC;YACvF,MAAM,IAAI,gDAAyB,CAClC,4CAA4C,OAAO,CAAC,YAAY,GAAG,CACnE,CAAC;QACH,CAAC;QAED,MAAM,UAAU,GAAG,MAAM,CAAC,OAAO,CAAC,CAAC;QAEnC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,uBAAuB,EAAE,EAAE,OAAO,EAAE,UAAU,EAAE,CAAC,CAAC;QAEpE,IAAI,GAAG,GAAuB,SAAS,CAAC;QACxC,IAAI,QAAQ,CAAC,GAAG,IAAI,OAAO,QAAQ,CAAC,GAAG,KAAK,QAAQ,EAAE,CAAC;YACtD,MAAM,SAAS,GAAG,QAAQ,CAAC,GAAG,GAAG,IAAI,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;YACnD,IAAI,SAAS,GAAG,CAAC,EAAE,CAAC;gBACnB,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,uBAAuB,EAAE,IAAI,CAAC,GAAG,CAAC,SAAS,EAAE,uBAAuB,CAAC,CAAC,CAAC;YACvF,CAAC;iBAAM,CAAC;gBACP,GAAG,GAAG,uBAAuB,CAAC;YAC/B,CAAC;QACF,CAAC;QAED,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,GAAG,EAAE,CAAC;IACrC,CAAC;CACD,CAAA;;mCA1IY,wBAAwB;IADpC,IAAA,YAAO,GAAE;qCAGiB,uBAAM,EACP,4BAAY,EACb,sDAAwB;GAJpC,wBAAwB,CA0IpC"}
+{"version":3,"file":"oauth2-userinfo-identifier.js","sourceRoot":"","sources":["../../../../../src/modules/dynamic-credentials.ee/credential-resolvers/identifiers/oauth2-userinfo-identifier.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,wDAA6C;AAC7C,8CAAsC;AACtC,gCAAkC;AAGlC,6BAAwB;AAExB,kEAA8D;AAE9D,iEAAqF;AACrF,+EAAyE;AACzE,iDAA6E;AAG7E,MAAM,uBAAuB,GAAG,CAAC,GAAG,gBAAI,CAAC,OAAO,CAAC,cAAc,CAAC;AAChE,MAAM,qBAAqB,GAAG,EAAE,GAAG,gBAAI,CAAC,OAAO,CAAC,cAAc,CAAC;AAElD,QAAA,2BAA2B,GAAG,OAAC,CAAC,MAAM,CAAC;IACnD,GAAG,kCAAmB,CAAC,KAAK;IAC5B,UAAU,EAAE,OAAC,CAAC,OAAO,CAAC,iBAAiB,CAAC;CACxC,CAAC,CAAC;AAIH,MAAM,oBAAoB,GAAG,OAAC,CAAC,MAAM,CAAC;IACrC,MAAM,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE;IACxB,iBAAiB,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE;IACnC,QAAQ,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;CACrC,CAAC,CAAC;AAKH,MAAM,qBAAqB,GAAG,EAAE,GAAG,gBAAI,CAAC,OAAO,CAAC,cAAc,CAAC;AAG/D,SAAS,oBAAoB,CAAC,KAAc;IAC3C,OAAO,CACN,OAAO,KAAK,KAAK,QAAQ;QACzB,KAAK,KAAK,IAAI;QACd,MAAM,IAAI,KAAK;QACf,KAAK,CAAC,IAAI,KAAK,0BAA0B,CACzC,CAAC;AACH,CAAC;AAED,SAAS,MAAM,CAAC,KAAc;IAC7B,OAAO,CACN,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,MAAM,IAAI,KAAK,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAC3F,CAAC;AACH,CAAC;AAED,MAAM,UAAU,GAAG,OAAC,CAAC,MAAM,CAAgB,MAAM,EAAE,EAAE,OAAO,EAAE,qBAAqB,EAAE,CAAC,CAAC;AAE1E,QAAA,sBAAsB,GAAG,OAAC;KACrC,MAAM,CAAC;IAEP,GAAG,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CAC1B,CAAC;KACD,WAAW,EAAE,CAAC;AAIhB,MAAM,YAAY,GAAG,4BAA4B,CAAC;AAG3C,IAAM,wBAAwB,GAA9B,MAAM,wBAAwB;IAIpC,YACkB,MAAc,EACd,KAAmB,EACnB,IAA8B;QAF9B,WAAM,GAAN,MAAM,CAAQ;QACd,UAAK,GAAL,KAAK,CAAc;QACnB,SAAI,GAAJ,IAAI,CAA0B;QAL/B,kBAAa,GAAG,IAAI,GAAG,EAA8C,CAAC;IAMpF,CAAC;IAEJ,KAAK,CAAC,eAAe,CAAC,iBAA0C;QAC/D,MAAM,OAAO,GAAG,IAAI,CAAC,YAAY,CAAC,iBAAiB,CAAC,CAAC;QAErD,IAAI,QAAQ,CAAC;QACb,IAAI,CAAC;YACJ,QAAQ,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;QACpD,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,IAAI,KAAK,YAAY,gDAAyB,EAAE,CAAC;gBAChD,MAAM,KAAK,CAAC;YACb,CAAC;YACD,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,uCAAuC,OAAO,CAAC,WAAW,EAAE,EAAE;gBAC/E,KAAK;aACL,CAAC,CAAC;YACH,MAAM,IAAI,gDAAyB,CAClC,iCAAiC,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,EACzF,EAAE,KAAK,EAAE,KAAK,EAAE,CAChB,CAAC;QACH,CAAC;QACD,IAAI,CAAC,QAAQ,CAAC,iBAAiB,EAAE,CAAC;YACjC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,gDAAgD,CAAC,CAAC;YACpE,MAAM,IAAI,gDAAyB,CAAC,gDAAgD,CAAC,CAAC;QACvF,CAAC;QAGD,IAAI,OAAO,CAAC,gBAAgB,IAAI,CAAC,QAAQ,CAAC,QAAQ,EAAE,CAAC;YACpD,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,2CAA2C,CAAC,CAAC;YAC/D,MAAM,IAAI,gDAAyB,CAClC,sFAAsF,CACtF,CAAC;QACH,CAAC;IACF,CAAC;IAED,KAAK,CAAC,OAAO,CACZ,OAA2B,EAC3B,iBAA0C;QAE1C,MAAM,OAAO,GAAG,IAAI,CAAC,YAAY,CAAC,iBAAiB,CAAC,CAAC;QACrD,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC;QAEnD,MAAM,WAAW,GAAG,IAAA,qBAAM,EAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;QAI7C,MAAM,kBAAkB,GAAG,IAAA,qBAAM,EAAC,GAAG,OAAO,CAAC,YAAY,IAAI,OAAO,CAAC,gBAAgB,IAAI,EAAE,EAAE,CAAC,CAAC;QAC/F,MAAM,kBAAkB,GAAG,GAAG,YAAY,YAAY,QAAQ,CAAC,MAAM,IAAI,kBAAkB,IAAI,WAAW,EAAE,CAAC;QAC7G,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,GAAG,CAAS,kBAAkB,CAAC,CAAC;QAChE,IAAI,MAAM,EAAE,CAAC;YACZ,OAAO,MAAM,CAAC;QACf,CAAC;QAED,MAAM,EAAE,OAAO,EAAE,GAAG,EAAE,YAAY,EAAE,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,QAAQ,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;QAI7F,MAAM,GAAG,GAAG,YAAY,IAAI,qBAAqB,CAAC;QAClD,IAAI,GAAG,GAAG,CAAC,EAAE,CAAC;YACb,MAAM,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,kBAAkB,EAAE,OAAO,EAAE,GAAG,CAAC,CAAC;QACxD,CAAC;QACD,OAAO,OAAO,CAAC;IAChB,CAAC;IAIO,YAAY,CAAC,OAAgC;QACpD,IAAI,CAAC;YACJ,OAAO,QAAA,2BAA2B,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QACnD,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,mCAAmC,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;YAClE,MAAM,IAAI,gDAAyB,CAAC,mCAAmC,EAAE;gBACxE,KAAK,EAAE,KAAK;aACZ,CAAC,CAAC;QACJ,CAAC;IACF,CAAC;IAEO,KAAK,CAAC,aAAa,CAC1B,OAA8B,EAC9B,SAAS,GAAY,KAAK;QAE1B,OAAO,MAAM,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC,oBAAoB,EAAE;YAC1D,WAAW,EAAE,OAAO,CAAC,WAAW;YAChC,WAAW,EAAE,YAAY;YACzB,SAAS;SACT,CAAC,CAAC;IACJ,CAAC;IAEO,qBAAqB,CAAC,IAAa;QAC1C,IAAI,CAAC;YACJ,OAAO,QAAA,sBAAsB,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAC3C,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,kCAAkC,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;YACjE,MAAM,IAAI,gDAAyB,CAAC,kCAAkC,CAAC,CAAC;QACzE,CAAC;IACF,CAAC;IAEO,KAAK,CAAC,cAAc,CAC3B,QAAwB,EACxB,OAA8B,EAC9B,OAA2B;QAE3B,IAAI,CAAC,OAAO,CAAC,gBAAgB,EAAE,CAAC;YAK/B,IAAI,CAAC,MAAM,CAAC,IAAI,CACf,iJAAiJ,EACjJ,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,CAC3B,CAAC;YACF,OAAO,MAAM,IAAI,CAAC,sBAAsB,CAAC,QAAQ,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;QACtE,CAAC;QAED,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,iBAAiB,CAC1C,QAAQ,EACR,OAAO,CAAC,QAAQ,EAChB,OAAO,CAAC,gBAAgB,CACxB,CAAC;QACF,MAAM,GAAG,GAAG,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAKzC,MAAM,YAAY,GAAG,MAAM,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;QAClD,IAAI,OAAO,YAAY,KAAK,QAAQ,IAAI,YAAY,KAAK,EAAE,EAAE,CAAC;YAC7D,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,oCAAoC,EAAE,EAAE,OAAO,EAAE,YAAY,EAAE,CAAC,CAAC;YACnF,OAAO,EAAE,OAAO,EAAE,YAAY,EAAE,GAAG,EAAE,CAAC;QACvC,CAAC;QAED,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;QAI7D,IAAI,MAAM,CAAC,GAAG,IAAI,QAAQ,CAAC,GAAG,IAAI,MAAM,CAAC,GAAG,KAAK,QAAQ,CAAC,GAAG,EAAE,CAAC;YAC/D,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,2DAA2D,CAAC,CAAC;YAC/E,MAAM,IAAI,gDAAyB,CAClC,2DAA2D,CAC3D,CAAC;QACH,CAAC;QAED,OAAO,EAAE,OAAO,EAAE,IAAI,CAAC,cAAc,CAAC,QAAQ,EAAE,OAAO,CAAC,EAAE,GAAG,EAAE,CAAC;IACjE,CAAC;IAMO,KAAK,CAAC,iBAAiB,CAC9B,QAAwB,EACxB,KAAa,EACb,gBAAwB;QAExB,IAAI,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACnC,MAAM,IAAI,gDAAyB,CAClC,kIAAkI,CAClI,CAAC;QACH,CAAC;QAED,IAAI,CAAC,QAAQ,CAAC,QAAQ,EAAE,CAAC;YACxB,MAAM,IAAI,gDAAyB,CAClC,sFAAsF,CACtF,CAAC;QACH,CAAC;QAED,MAAM,EAAE,iBAAiB,EAAE,SAAS,EAAE,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,CAAC;QAE9D,MAAM,MAAM,GAAG,KAAK,EAAE,IAAmB,EAAE,EAAE,CAC5C,MAAM,SAAS,CAAC,KAAK,EAAE,iBAAiB,CAAC,IAAI,CAAC,EAAE,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;QAE9E,IAAI,OAAmB,CAAC;QACxB,IAAI,CAAC;YACJ,OAAO,GAAG,CAAC,MAAM,MAAM,CAAC,MAAM,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC;QAC3E,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAKhB,IAAI,SAAoC,CAAC;YACzC,IAAI,oBAAoB,CAAC,KAAK,CAAC,EAAE,CAAC;gBACjC,IAAI,CAAC;oBACJ,SAAS,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;gBACvD,CAAC;gBAAC,OAAO,YAAY,EAAE,CAAC;oBAGvB,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,+BAA+B,EAAE,EAAE,KAAK,EAAE,YAAY,EAAE,CAAC,CAAC;oBAC5E,MAAM,IAAI,gDAAyB,CAAC,kCAAkC,EAAE;wBACvE,KAAK,EAAE,YAAY;qBACnB,CAAC,CAAC;gBACJ,CAAC;YACF,CAAC;YAED,IAAI,CAAC,SAAS,EAAE,CAAC;gBAChB,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,kCAAkC,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;gBACjE,MAAM,IAAI,gDAAyB,CAAC,kCAAkC,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;YAC3F,CAAC;YAED,IAAI,CAAC;gBACJ,OAAO,GAAG,CAAC,MAAM,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC;YAC7C,CAAC;YAAC,OAAO,UAAU,EAAE,CAAC;gBACrB,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,kCAAkC,EAAE,EAAE,KAAK,EAAE,UAAU,EAAE,CAAC,CAAC;gBAC7E,MAAM,IAAI,gDAAyB,CAAC,kCAAkC,EAAE;oBACvE,KAAK,EAAE,UAAU;iBACjB,CAAC,CAAC;YACJ,CAAC;YAED,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,oDAAoD,EAAE;gBACvE,MAAM,EAAE,QAAQ,CAAC,MAAM;aACvB,CAAC,CAAC;QACJ,CAAC;QAID,IAAA,6BAAc,EAAC,OAAO,EAAE,gBAAgB,CAAC,CAAC;QAC1C,OAAO,OAAO,CAAC;IAChB,CAAC;IAGO,KAAK,CAAC,SAAS,CAAC,OAAe,EAAE,YAAY,GAAG,KAAK;QAC5D,OAAO,MAAM,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC,UAAU,EAAE;YAChD,WAAW,EAAE,OAAO;YACpB,WAAW,EAAE,GAAG,YAAY,OAAO;YACnC,SAAS,EAAE,KAAK;YAChB,YAAY;SACZ,CAAC,CAAC;IACJ,CAAC;IAcO,KAAK,CAAC,WAAW,CAAC,OAAe;QACxC,MAAM,QAAQ,GAAG,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QACjD,IAAI,QAAQ,EAAE,CAAC;YACd,OAAO,MAAM,QAAQ,CAAC;QACvB,CAAC;QAID,MAAM,OAAO,GAAG,IAAI,CAAC,iBAAiB,CAAC,OAAO,CAAC,CAAC;QAChD,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QACzC,IAAI,CAAC;YACJ,OAAO,MAAM,OAAO,CAAC;QACtB,CAAC;gBAAS,CAAC;YACV,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QACpC,CAAC;IACF,CAAC;IAEO,KAAK,CAAC,iBAAiB,CAAC,OAAe;QAC9C,MAAM,WAAW,GAAG,GAAG,YAAY,iBAAiB,OAAO,EAAE,CAAC;QAC9D,IAAI,MAAM,IAAI,CAAC,KAAK,CAAC,GAAG,CAAU,WAAW,CAAC,EAAE,CAAC;YAChD,OAAO,SAAS,CAAC;QAClB,CAAC;QACD,MAAM,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,WAAW,EAAE,IAAI,EAAE,qBAAqB,CAAC,CAAC;QAC/D,OAAO,MAAM,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;IAC5C,CAAC;IAEO,KAAK,CAAC,aAAa,CAC1B,QAAwB,EACxB,OAA2B;QAE3B,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC;YAC5C,GAAG,EAAE,QAAQ,CAAC,iBAAiB;YAC/B,MAAM,EAAE,KAAK;YACb,OAAO,EAAE,EAAE,aAAa,EAAE,UAAU,OAAO,CAAC,QAAQ,EAAE,EAAE;YACxD,IAAI,EAAE,IAAI;SACV,CAAC,CAAC;QAEH,IAAI,QAAQ,CAAC,UAAU,KAAK,GAAG,EAAE,CAAC;YACjC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,iBAAiB,EAAE;gBACpC,MAAM,EAAE,QAAQ,CAAC,UAAU;gBAC3B,IAAI,EAAE,QAAQ,CAAC,IAAI;aACnB,CAAC,CAAC;YACH,MAAM,IAAI,gDAAyB,CAAC,uBAAuB,CAAC,CAAC;QAC9D,CAAC;QAGD,OAAO,IAAI,CAAC,qBAAqB,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;IAClD,CAAC;IAEO,cAAc,CAAC,QAA0B,EAAE,OAA8B;QAChF,MAAM,OAAO,GAAG,QAAQ,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;QAC/C,IAAI,CAAC,OAAO,EAAE,CAAC;YACd,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,4CAA4C,OAAO,CAAC,YAAY,GAAG,CAAC,CAAC;YACvF,MAAM,IAAI,gDAAyB,CAClC,4CAA4C,OAAO,CAAC,YAAY,GAAG,CACnE,CAAC;QACH,CAAC;QAED,MAAM,UAAU,GAAG,MAAM,CAAC,OAAO,CAAC,CAAC;QACnC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,uBAAuB,EAAE,EAAE,OAAO,EAAE,UAAU,EAAE,CAAC,CAAC;QACpE,OAAO,UAAU,CAAC;IACnB,CAAC;IAOO,WAAW,CAAC,GAAY;QAC/B,IAAI,OAAO,GAAG,KAAK,QAAQ,EAAE,CAAC;YAC7B,OAAO,SAAS,CAAC;QAClB,CAAC;QAED,OAAO,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,GAAG,IAAI,GAAG,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,EAAE,uBAAuB,CAAC,CAAC;IAChF,CAAC;IAGO,KAAK,CAAC,sBAAsB,CACnC,QAAwB,EACxB,OAA8B,EAC9B,OAA2B;QAE3B,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;QAE7D,OAAO;YACN,OAAO,EAAE,IAAI,CAAC,cAAc,CAAC,QAAQ,EAAE,OAAO,CAAC;YAC/C,GAAG,EAAE,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,GAAG,CAAC;SACnC,CAAC;IACH,CAAC;CACD,CAAA;;mCA/UY,wBAAwB;IADpC,IAAA,YAAO,GAAE;qCAMiB,uBAAM,EACP,4BAAY,EACb,sDAAwB;GAPpC,wBAAwB,CA+UpC"}

package/dist/modules/dynamic-credentials.ee/credential-resolvers/identifiers/oauth2-utils.d.ts

@@ -2,12 +2,18 @@ import z from 'zod';
 export declare const OAuth2OptionsSchema: z.ZodObject<{
     metadataUri: z.ZodString;
     subjectClaim: z.ZodDefault<z.ZodOptional<z.ZodString>>;
+    expectedAudience: z.ZodEffects<z.ZodOptional<z.ZodString>, string | undefined, string | undefined>;
 }, "strip", z.ZodTypeAny, {
     metadataUri: string;
     subjectClaim: string;
+    expectedAudience?: string | undefined;
 }, {
     metadataUri: string;
     subjectClaim?: string | undefined;
+    expectedAudience?: string | undefined;
 }>;
 export type OAuth2Options = z.infer<typeof OAuth2OptionsSchema>;
 export declare function sha256(token: string): string;
+export declare const AUDIENCE_NOT_DECLARED_MESSAGE = "Token declares no audience, so it cannot be confirmed as issued for this instance";
+export declare const AUDIENCE_MISMATCH_MESSAGE = "Token was not issued for the expected audience";
+export declare function assertAudience(claims: Record<string, unknown>, expectedAudience: string): void;

package/dist/modules/dynamic-credentials.ee/credential-resolvers/identifiers/oauth2-utils.js

@@ -3,15 +3,43 @@ var __importDefault = (this && this.__importDefault) || function (mod) {
     return (mod && mod.__esModule) ? mod : { "default": mod };
 };
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.OAuth2OptionsSchema = void 0;
+exports.AUDIENCE_MISMATCH_MESSAGE = exports.AUDIENCE_NOT_DECLARED_MESSAGE = exports.OAuth2OptionsSchema = void 0;
 exports.sha256 = sha256;
+exports.assertAudience = assertAudience;
 const crypto_1 = __importDefault(require("crypto"));
 const zod_1 = __importDefault(require("zod"));
+const identifier_interface_1 = require("./identifier-interface");
 exports.OAuth2OptionsSchema = zod_1.default.object({
     metadataUri: zod_1.default.string().url(),
     subjectClaim: zod_1.default.string().optional().default('sub'),
+    expectedAudience: zod_1.default
+        .string()
+        .trim()
+        .optional()
+        .transform((value) => (value === '' ? undefined : value)),
 });
 function sha256(token) {
     return crypto_1.default.createHash('sha256').update(token).digest('hex');
 }
+function collectAudienceClaims(claims) {
+    const value = claims.aud;
+    if (typeof value === 'string') {
+        return [value];
+    }
+    if (Array.isArray(value)) {
+        return value.filter((entry) => typeof entry === 'string');
+    }
+    return [];
+}
+exports.AUDIENCE_NOT_DECLARED_MESSAGE = 'Token declares no audience, so it cannot be confirmed as issued for this instance';
+exports.AUDIENCE_MISMATCH_MESSAGE = 'Token was not issued for the expected audience';
+function assertAudience(claims, expectedAudience) {
+    const audiences = collectAudienceClaims(claims);
+    if (audiences.length === 0) {
+        throw new identifier_interface_1.IdentifierValidationError(exports.AUDIENCE_NOT_DECLARED_MESSAGE);
+    }
+    if (!audiences.includes(expectedAudience)) {
+        throw new identifier_interface_1.IdentifierValidationError(exports.AUDIENCE_MISMATCH_MESSAGE);
+    }
+}
 //# sourceMappingURL=oauth2-utils.js.map

package/dist/modules/dynamic-credentials.ee/credential-resolvers/identifiers/oauth2-utils.js.map

@@ -1 +1 @@
-{"version":3,"file":"oauth2-utils.js","sourceRoot":"","sources":["../../../../../src/modules/dynamic-credentials.ee/credential-resolvers/identifiers/oauth2-utils.ts"],"names":[],"mappings":";;;;;;;AAAA,oDAA4B;AAC5B,8CAAoB;AAEP,QAAA,mBAAmB,GAAG,aAAC,CAAC,MAAM,CAAC;IAC3C,WAAW,EAAE,aAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE;IAC7B,YAAY,EAAE,aAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC;CAClD,CAAC,CAAC;AAIH,gBAAuB,KAAa;IACnC,OAAO,gBAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAChE,CAAC"}
+{"version":3,"file":"oauth2-utils.js","sourceRoot":"","sources":["../../../../../src/modules/dynamic-credentials.ee/credential-resolvers/identifiers/oauth2-utils.ts"],"names":[],"mappings":";;;;;;;;AAAA,oDAA4B;AAC5B,8CAAoB;AAEpB,iEAAmE;AAEtD,QAAA,mBAAmB,GAAG,aAAC,CAAC,MAAM,CAAC;IAC3C,WAAW,EAAE,aAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE;IAC7B,YAAY,EAAE,aAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC;IAQlD,gBAAgB,EAAE,aAAC;SACjB,MAAM,EAAE;SACR,IAAI,EAAE;SACN,QAAQ,EAAE;SACV,SAAS,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,KAAK,KAAK,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;CAC1D,CAAC,CAAC;AAIH,gBAAuB,KAAa;IACnC,OAAO,gBAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAChE,CAAC;AAYD,SAAS,qBAAqB,CAAC,MAA+B;IAC7D,MAAM,KAAK,GAAG,MAAM,CAAC,GAAG,CAAC;IAEzB,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC/B,OAAO,CAAC,KAAK,CAAC,CAAC;IAChB,CAAC;IACD,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QAC1B,OAAO,KAAK,CAAC,MAAM,CAAC,CAAC,KAAK,EAAmB,EAAE,CAAC,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC;IAC5E,CAAC;IACD,OAAO,EAAE,CAAC;AACX,CAAC;AAEY,QAAA,6BAA6B,GACzC,mFAAmF,CAAC;AAExE,QAAA,yBAAyB,GAAG,gDAAgD,CAAC;AAY1F,wBAA+B,MAA+B,EAAE,gBAAwB;IACvF,MAAM,SAAS,GAAG,qBAAqB,CAAC,MAAM,CAAC,CAAC;IAEhD,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC5B,MAAM,IAAI,gDAAyB,CAAC,QAAA,6BAA6B,CAAC,CAAC;IACpE,CAAC;IAED,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,gBAAgB,CAAC,EAAE,CAAC;QAC3C,MAAM,IAAI,gDAAyB,CAAC,QAAA,yBAAyB,CAAC,CAAC;IAChE,CAAC;AACF,CAAC"}

package/dist/modules/dynamic-credentials.ee/credential-resolvers/n8n-credential-resolver.d.ts

@@ -16,12 +16,12 @@ export declare class N8NCredentialResolver implements ICredentialResolver {
         displayName: string;
         options: never[];
     };
-    getSecret(credentialId: string, context: ICredentialContext, handle: CredentialResolverHandle): Promise<ICredentialDataDecryptedObject>;
-    setSecret(credentialId: string, context: ICredentialContext, data: ICredentialDataDecryptedObject, handle: CredentialResolverHandle): Promise<void>;
-    deleteSecret(credentialId: string, context: ICredentialContext, handle: CredentialResolverHandle): Promise<void>;
+    getSecret(credentialId: string, context: ICredentialContext, handle: CredentialResolverHandle, executionId?: string): Promise<ICredentialDataDecryptedObject>;
+    setSecret(credentialId: string, context: ICredentialContext, data: ICredentialDataDecryptedObject, handle: CredentialResolverHandle, executionId?: string): Promise<void>;
+    deleteSecret(credentialId: string, context: ICredentialContext, handle: CredentialResolverHandle, executionId?: string): Promise<void>;
     deleteAllSecrets(handle: CredentialResolverHandle): Promise<void>;
     validateOptions(configuration: CredentialResolverConfiguration): Promise<void>;
     private resolveIdentifier;
-    resolveOwningUserId(context: ICredentialContext, handle: CredentialResolverHandle): Promise<string>;
-    validateIdentity(context: ICredentialContext, handle: CredentialResolverHandle): Promise<void>;
+    resolveOwningUserId(context: ICredentialContext, handle: CredentialResolverHandle, executionId?: string): Promise<string>;
+    validateIdentity(context: ICredentialContext, handle: CredentialResolverHandle, executionId?: string): Promise<void>;
 }

package/dist/modules/dynamic-credentials.ee/credential-resolvers/n8n-credential-resolver.js

@@ -29,8 +29,8 @@ let N8NCredentialResolver = class N8NCredentialResolver {
             options: [],
         };
     }
-    async getSecret(credentialId, context, handle) {
-        const key = await this.resolveIdentifier(context, handle.configuration);
+    async getSecret(credentialId, context, handle, executionId) {
+        const key = await this.resolveIdentifier(context, handle.configuration, executionId);
         const data = await this.storage.getCredentialData(credentialId, key, handle.resolverId, handle.configuration);
         if (!data) {
             throw new decorators_1.CredentialResolverDataNotFoundError();
@@ -45,13 +45,13 @@ let N8NCredentialResolver = class N8NCredentialResolver {
             throw new decorators_1.CredentialResolverDataNotFoundError();
         }
     }
-    async setSecret(credentialId, context, data, handle) {
-        const key = await this.resolveIdentifier(context, handle.configuration);
+    async setSecret(credentialId, context, data, handle, executionId) {
+        const key = await this.resolveIdentifier(context, handle.configuration, executionId);
         const encryptedData = await this.cipher.encryptV2(data);
         await this.storage.setCredentialData(credentialId, key, handle.resolverId, encryptedData, handle.configuration);
     }
-    async deleteSecret(credentialId, context, handle) {
-        const key = await this.resolveIdentifier(context, handle.configuration);
+    async deleteSecret(credentialId, context, handle, executionId) {
+        const key = await this.resolveIdentifier(context, handle.configuration, executionId);
         await this.storage.deleteCredentialData(credentialId, key, handle.resolverId, handle.configuration);
     }
     async deleteAllSecrets(handle) {
@@ -60,14 +60,14 @@ let N8NCredentialResolver = class N8NCredentialResolver {
     async validateOptions(configuration) {
         return await this.n8nIdentifier.validateOptions(configuration);
     }
-    async resolveIdentifier(context, configuration) {
-        return await this.n8nIdentifier.resolve(context, configuration);
+    async resolveIdentifier(context, configuration, executionId) {
+        return await this.n8nIdentifier.resolve(context, configuration, executionId);
     }
-    async resolveOwningUserId(context, handle) {
-        return await this.resolveIdentifier(context, handle.configuration);
+    async resolveOwningUserId(context, handle, executionId) {
+        return await this.resolveIdentifier(context, handle.configuration, executionId);
     }
-    async validateIdentity(context, handle) {
-        await this.resolveIdentifier(context, handle.configuration);
+    async validateIdentity(context, handle, executionId) {
+        await this.resolveIdentifier(context, handle.configuration, executionId);
     }
 };
 exports.N8NCredentialResolver = N8NCredentialResolver;

package/dist/modules/dynamic-credentials.ee/credential-resolvers/n8n-credential-resolver.js.map

@@ -1 +1 @@
-{"version":3,"file":"n8n-credential-resolver.js","sourceRoot":"","sources":["../../../../src/modules/dynamic-credentials.ee/credential-resolvers/n8n-credential-resolver.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,wDAA6C;AAC7C,gDAMyB;AACzB,uCAAkC;AAClC,+CAA6F;AAE7F,iEAA6D;AAC7D,2GAAoG;AAQ7F,IAAM,qBAAqB,GAA3B,MAAM,qBAAqB;IACjC,YACkB,MAAc,EACd,aAA4B,EAC5B,OAA0C,EAC1C,MAAc;QAHd,WAAM,GAAN,MAAM,CAAQ;QACd,kBAAa,GAAb,aAAa,CAAe;QAC5B,YAAO,GAAP,OAAO,CAAmC;QAC1C,WAAM,GAAN,MAAM,CAAQ;QAGhC,aAAQ,GAAG;YACV,IAAI,EAAE,6BAA6B;YACnC,WAAW,EAAE,+BAA+B;YAC5C,WAAW,EAAE,cAAc;YAC3B,OAAO,EAAE,EAAE;SACX,CAAC;IAPC,CAAC;IAaJ,KAAK,CAAC,SAAS,CACd,YAAoB,EACpB,OAA2B,EAC3B,MAAgC;QAEhC,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,iBAAiB,CAAC,OAAO,EAAE,MAAM,CAAC,aAAa,CAAC,CAAC;QAExE,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,iBAAiB,CAChD,YAAY,EACZ,GAAG,EACH,MAAM,CAAC,UAAU,EACjB,MAAM,CAAC,aAAa,CACpB,CAAC;QAEF,IAAI,CAAC,IAAI,EAAE,CAAC;YACX,MAAM,IAAI,gDAAmC,EAAE,CAAC;QACjD,CAAC;QACD,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;QACpD,IAAI,CAAC;YACJ,MAAM,MAAM,GAAG,IAAA,wBAAS,EAAiC,SAAS,CAAC,CAAC;YACpE,OAAO,MAAM,CAAC;QACf,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,2CAA2C,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;YAC1E,MAAM,IAAI,gDAAmC,EAAE,CAAC;QACjD,CAAC;IACF,CAAC;IAGD,KAAK,CAAC,SAAS,CACd,YAAoB,EACpB,OAA2B,EAC3B,IAAoC,EACpC,MAAgC;QAEhC,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,iBAAiB,CAAC,OAAO,EAAE,MAAM,CAAC,aAAa,CAAC,CAAC;QAExE,MAAM,aAAa,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;QAExD,MAAM,IAAI,CAAC,OAAO,CAAC,iBAAiB,CACnC,YAAY,EACZ,GAAG,EACH,MAAM,CAAC,UAAU,EACjB,aAAa,EACb,MAAM,CAAC,aAAa,CACpB,CAAC;IACH,CAAC;IAGD,KAAK,CAAC,YAAY,CACjB,YAAoB,EACpB,OAA2B,EAC3B,MAAgC;QAEhC,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,iBAAiB,CAAC,OAAO,EAAE,MAAM,CAAC,aAAa,CAAC,CAAC;QACxE,MAAM,IAAI,CAAC,OAAO,CAAC,oBAAoB,CACtC,YAAY,EACZ,GAAG,EACH,MAAM,CAAC,UAAU,EACjB,MAAM,CAAC,aAAa,CACpB,CAAC;IACH,CAAC;IAED,KAAK,CAAC,gBAAgB,CAAC,MAAgC;QACtD,MAAM,IAAI,CAAC,OAAO,CAAC,uBAAuB,CAAC,MAAM,CAAC,CAAC;IACpD,CAAC;IAED,KAAK,CAAC,eAAe,CAAC,aAA8C;QACnE,OAAO,MAAM,IAAI,CAAC,aAAa,CAAC,eAAe,CAAC,aAAa,CAAC,CAAC;IAChE,CAAC;IAEO,KAAK,CAAC,iBAAiB,CAC9B,OAA2B,EAC3B,aAA8C;QAE9C,OAAO,MAAM,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC,OAAO,EAAE,aAAa,CAAC,CAAC;IACjE,CAAC;IAMD,KAAK,CAAC,mBAAmB,CACxB,OAA2B,EAC3B,MAAgC;QAEhC,OAAO,MAAM,IAAI,CAAC,iBAAiB,CAAC,OAAO,EAAE,MAAM,CAAC,aAAa,CAAC,CAAC;IACpE,CAAC;IAED,KAAK,CAAC,gBAAgB,CACrB,OAA2B,EAC3B,MAAgC;QAEhC,MAAM,IAAI,CAAC,iBAAiB,CAAC,OAAO,EAAE,MAAM,CAAC,aAAa,CAAC,CAAC;IAC7D,CAAC;CACD,CAAA;;gCAjHY,qBAAqB;IADjC,IAAA,+BAAkB,GAAE;qCAGM,uBAAM,EACC,8BAAa,EACnB,yEAAiC,EAClC,iBAAM;GALpB,qBAAqB,CAiHjC"}
+{"version":3,"file":"n8n-credential-resolver.js","sourceRoot":"","sources":["../../../../src/modules/dynamic-credentials.ee/credential-resolvers/n8n-credential-resolver.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,wDAA6C;AAC7C,gDAMyB;AACzB,uCAAkC;AAClC,+CAA6F;AAE7F,iEAA6D;AAC7D,2GAAoG;AAQ7F,IAAM,qBAAqB,GAA3B,MAAM,qBAAqB;IACjC,YACkB,MAAc,EACd,aAA4B,EAC5B,OAA0C,EAC1C,MAAc;QAHd,WAAM,GAAN,MAAM,CAAQ;QACd,kBAAa,GAAb,aAAa,CAAe;QAC5B,YAAO,GAAP,OAAO,CAAmC;QAC1C,WAAM,GAAN,MAAM,CAAQ;QAGhC,aAAQ,GAAG;YACV,IAAI,EAAE,6BAA6B;YACnC,WAAW,EAAE,+BAA+B;YAC5C,WAAW,EAAE,cAAc;YAC3B,OAAO,EAAE,EAAE;SACX,CAAC;IAPC,CAAC;IAaJ,KAAK,CAAC,SAAS,CACd,YAAoB,EACpB,OAA2B,EAC3B,MAAgC,EAChC,WAAoB;QAEpB,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,iBAAiB,CAAC,OAAO,EAAE,MAAM,CAAC,aAAa,EAAE,WAAW,CAAC,CAAC;QAErF,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,iBAAiB,CAChD,YAAY,EACZ,GAAG,EACH,MAAM,CAAC,UAAU,EACjB,MAAM,CAAC,aAAa,CACpB,CAAC;QAEF,IAAI,CAAC,IAAI,EAAE,CAAC;YACX,MAAM,IAAI,gDAAmC,EAAE,CAAC;QACjD,CAAC;QACD,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;QACpD,IAAI,CAAC;YACJ,MAAM,MAAM,GAAG,IAAA,wBAAS,EAAiC,SAAS,CAAC,CAAC;YACpE,OAAO,MAAM,CAAC;QACf,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,2CAA2C,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;YAC1E,MAAM,IAAI,gDAAmC,EAAE,CAAC;QACjD,CAAC;IACF,CAAC;IAGD,KAAK,CAAC,SAAS,CACd,YAAoB,EACpB,OAA2B,EAC3B,IAAoC,EACpC,MAAgC,EAChC,WAAoB;QAEpB,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,iBAAiB,CAAC,OAAO,EAAE,MAAM,CAAC,aAAa,EAAE,WAAW,CAAC,CAAC;QAErF,MAAM,aAAa,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;QAExD,MAAM,IAAI,CAAC,OAAO,CAAC,iBAAiB,CACnC,YAAY,EACZ,GAAG,EACH,MAAM,CAAC,UAAU,EACjB,aAAa,EACb,MAAM,CAAC,aAAa,CACpB,CAAC;IACH,CAAC;IAGD,KAAK,CAAC,YAAY,CACjB,YAAoB,EACpB,OAA2B,EAC3B,MAAgC,EAChC,WAAoB;QAEpB,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,iBAAiB,CAAC,OAAO,EAAE,MAAM,CAAC,aAAa,EAAE,WAAW,CAAC,CAAC;QACrF,MAAM,IAAI,CAAC,OAAO,CAAC,oBAAoB,CACtC,YAAY,EACZ,GAAG,EACH,MAAM,CAAC,UAAU,EACjB,MAAM,CAAC,aAAa,CACpB,CAAC;IACH,CAAC;IAED,KAAK,CAAC,gBAAgB,CAAC,MAAgC;QACtD,MAAM,IAAI,CAAC,OAAO,CAAC,uBAAuB,CAAC,MAAM,CAAC,CAAC;IACpD,CAAC;IAED,KAAK,CAAC,eAAe,CAAC,aAA8C;QACnE,OAAO,MAAM,IAAI,CAAC,aAAa,CAAC,eAAe,CAAC,aAAa,CAAC,CAAC;IAChE,CAAC;IAEO,KAAK,CAAC,iBAAiB,CAC9B,OAA2B,EAC3B,aAA8C,EAC9C,WAAoB;QAEpB,OAAO,MAAM,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC,OAAO,EAAE,aAAa,EAAE,WAAW,CAAC,CAAC;IAC9E,CAAC;IAMD,KAAK,CAAC,mBAAmB,CACxB,OAA2B,EAC3B,MAAgC,EAChC,WAAoB;QAEpB,OAAO,MAAM,IAAI,CAAC,iBAAiB,CAAC,OAAO,EAAE,MAAM,CAAC,aAAa,EAAE,WAAW,CAAC,CAAC;IACjF,CAAC;IAED,KAAK,CAAC,gBAAgB,CACrB,OAA2B,EAC3B,MAAgC,EAChC,WAAoB;QAEpB,MAAM,IAAI,CAAC,iBAAiB,CAAC,OAAO,EAAE,MAAM,CAAC,aAAa,EAAE,WAAW,CAAC,CAAC;IAC1E,CAAC;CACD,CAAA;;gCAvHY,qBAAqB;IADjC,IAAA,+BAAkB,GAAE;qCAGM,uBAAM,EACC,8BAAa,EACnB,yEAAiC,EAClC,iBAAM;GALpB,qBAAqB,CAuHjC"}

package/dist/modules/dynamic-credentials.ee/credential-resolvers/oauth-credential-resolver.d.ts

@@ -29,7 +29,6 @@ export declare class OAuthCredentialResolver implements ICredentialResolver {
             displayOptions?: undefined;
         } | {
             required?: undefined;
-            placeholder?: undefined;
             displayName: string;
             name: string;
             type: 'options';
@@ -42,9 +41,9 @@ export declare class OAuthCredentialResolver implements ICredentialResolver {
             description: string;
             typeOptions?: undefined;
             displayOptions?: undefined;
+            placeholder?: undefined;
         } | {
             required?: undefined;
-            placeholder?: undefined;
             options?: undefined;
             displayName: string;
             name: string;
@@ -60,9 +59,9 @@ export declare class OAuthCredentialResolver implements ICredentialResolver {
                 };
             };
             typeOptions?: undefined;
+            placeholder?: undefined;
         } | {
             required?: undefined;
-            placeholder?: undefined;
             options?: undefined;
             displayName: string;
             name: string;
@@ -80,9 +79,9 @@ export declare class OAuthCredentialResolver implements ICredentialResolver {
                     validation: string[];
                 };
             };
+            placeholder?: undefined;
         } | {
             required?: undefined;
-            placeholder?: undefined;
             options?: undefined;
             typeOptions?: undefined;
             displayOptions?: undefined;
@@ -90,6 +89,18 @@ export declare class OAuthCredentialResolver implements ICredentialResolver {
             name: string;
             type: 'string';
             default: string;
+            placeholder: string;
+            description: string;
+        } | {
+            required?: undefined;
+            options?: undefined;
+            typeOptions?: undefined;
+            displayOptions?: undefined;
+            placeholder?: undefined;
+            displayName: string;
+            name: string;
+            type: 'string';
+            default: string;
             description: string;
         })[];
     };

package/dist/modules/dynamic-credentials.ee/credential-resolvers/oauth-credential-resolver.js

@@ -96,6 +96,14 @@ let OAuthCredentialResolver = class OAuthCredentialResolver {
                         },
                     },
                 },
+                {
+                    displayName: 'Expected Audience',
+                    name: 'expectedAudience',
+                    type: 'string',
+                    default: '',
+                    placeholder: 'https://api.example.com',
+                    description: 'Value the access token must carry in its aud claim, identifying this n8n instance as the intended recipient. Leave empty to skip the check. This is not the Client ID: configure your provider to issue an audience for n8n if it does not already.',
+                },
                 {
                     displayName: 'Subject Claim',
                     name: 'subjectClaim',

package/dist/modules/dynamic-credentials.ee/credential-resolvers/oauth-credential-resolver.js.map

@@ -1 +1 @@
-{"version":3,"file":"oauth-credential-resolver.js","sourceRoot":"","sources":["../../../../src/modules/dynamic-credentials.ee/credential-resolvers/oauth-credential-resolver.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;AAAA,wDAA6C;AAC7C,gDAOyB;AACzB,uCAAkC;AAClC,+CAA6F;AAC7F,8CAAoB;AAGpB,mGAGuD;AACvD,yFAGkD;AAClD,iGAA2F;AAE3F,MAAM,oCAAoC,GAAG,aAAC,CAAC,kBAAkB,CAAC,YAAY,EAAE;IAC/E,kEAAgC;IAChC,wDAA2B;CAC3B,CAAC,CAAC;AAUI,IAAM,uBAAuB,GAA7B,MAAM,uBAAuB;IACnC,YACkB,MAAc,EACd,kCAAsE,EACtE,wBAAkD,EAClD,OAAsC,EACtC,MAAc;QAJd,WAAM,GAAN,MAAM,CAAQ;QACd,uCAAkC,GAAlC,kCAAkC,CAAoC;QACtE,6BAAwB,GAAxB,wBAAwB,CAA0B;QAClD,YAAO,GAAP,OAAO,CAA+B;QACtC,WAAM,GAAN,MAAM,CAAQ;QAGhC,aAAQ,GAAG;YACV,IAAI,EAAE,gCAAgC;YACtC,WAAW,EAAE,kCAAkC;YAC/C,WAAW,EAAE,iBAAiB;YAC9B,OAAO,EAAE;gBACR;oBACC,WAAW,EAAE,cAAc;oBAC3B,IAAI,EAAE,aAAa;oBACnB,IAAI,EAAE,QAAiB;oBACvB,QAAQ,EAAE,IAAI;oBACd,OAAO,EAAE,EAAE;oBACX,WAAW,EAAE,2DAA2D;oBACxE,WAAW,EAAE,qCAAqC;iBAClD;gBACD;oBACC,WAAW,EAAE,mBAAmB;oBAChC,IAAI,EAAE,YAAY;oBAClB,IAAI,EAAE,SAAkB;oBACxB,OAAO,EAAE;wBACR;4BACC,IAAI,EAAE,4BAA4B;4BAClC,KAAK,EAAE,sBAAsB;4BAC7B,WAAW,EAAE,wDAAwD;yBACrE;wBACD;4BACC,IAAI,EAAE,0BAA0B;4BAChC,KAAK,EAAE,iBAAiB;4BACxB,WAAW,EAAE,6CAA6C;yBAC1D;qBACD;oBACD,OAAO,EAAE,sBAAsB;oBAC/B,WAAW,EAAE,+CAA+C;iBAC5D;gBACD;oBACC,WAAW,EAAE,WAAW;oBACxB,IAAI,EAAE,UAAU;oBAChB,IAAI,EAAE,QAAiB;oBACvB,OAAO,EAAE,EAAE;oBACX,WAAW,EAAE,oCAAoC;oBACjD,cAAc,EAAE;wBACf,IAAI,EAAE;4BACL,UAAU,EAAE,CAAC,iBAAiB,CAAC;yBAC/B;wBACD,IAAI,EAAE;4BACL,UAAU,EAAE,CAAC,sBAAsB,CAAC;yBACpC;qBACD;iBACD;gBACD;oBACC,WAAW,EAAE,eAAe;oBAC5B,IAAI,EAAE,cAAc;oBACpB,IAAI,EAAE,QAAiB;oBACvB,OAAO,EAAE,EAAE;oBACX,WAAW,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE;oBAC/B,WAAW,EAAE,wCAAwC;oBACrD,cAAc,EAAE;wBACf,IAAI,EAAE;4BACL,UAAU,EAAE,CAAC,iBAAiB,CAAC;yBAC/B;wBACD,IAAI,EAAE;4BACL,UAAU,EAAE,CAAC,sBAAsB,CAAC;yBACpC;qBACD;iBACD;gBACD;oBACC,WAAW,EAAE,eAAe;oBAC5B,IAAI,EAAE,cAAc;oBACpB,IAAI,EAAE,QAAiB;oBACvB,OAAO,EAAE,KAAK;oBACd,WAAW,EAAE,0CAA0C;iBACvD;aACD;SACD,CAAC;IA1EC,CAAC;IAgFJ,KAAK,CAAC,SAAS,CACd,YAAoB,EACpB,OAA2B,EAC3B,MAAgC;QAEhC,MAAM,aAAa,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC;QACpE,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,iBAAiB,CAAC,OAAO,EAAE,aAAa,CAAC,CAAC;QAEjE,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,iBAAiB,CAChD,YAAY,EACZ,GAAG,EACH,MAAM,CAAC,UAAU,EACjB,aAAa,CACb,CAAC;QAEF,IAAI,CAAC,IAAI,EAAE,CAAC;YACX,MAAM,IAAI,gDAAmC,EAAE,CAAC;QACjD,CAAC;QACD,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;QACpD,IAAI,CAAC;YACJ,MAAM,MAAM,GAAG,IAAA,wBAAS,EAAiC,SAAS,CAAC,CAAC;YACpE,OAAO,MAAM,CAAC;QACf,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,2CAA2C,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;YAC1E,MAAM,IAAI,gDAAmC,EAAE,CAAC;QACjD,CAAC;IACF,CAAC;IAGD,KAAK,CAAC,SAAS,CACd,YAAoB,EACpB,OAA2B,EAC3B,IAAoC,EACpC,MAAgC;QAEhC,MAAM,aAAa,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC;QACpE,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,iBAAiB,CAAC,OAAO,EAAE,aAAa,CAAC,CAAC;QAEjE,MAAM,aAAa,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;QAExD,MAAM,IAAI,CAAC,OAAO,CAAC,iBAAiB,CACnC,YAAY,EACZ,GAAG,EACH,MAAM,CAAC,UAAU,EACjB,aAAa,EACb,aAAa,CACb,CAAC;IACH,CAAC;IAGD,KAAK,CAAC,YAAY,CACjB,YAAoB,EACpB,OAA2B,EAC3B,MAAgC;QAEhC,MAAM,aAAa,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC;QACpE,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,iBAAiB,CAAC,OAAO,EAAE,aAAa,CAAC,CAAC;QACjE,MAAM,IAAI,CAAC,OAAO,CAAC,oBAAoB,CAAC,YAAY,EAAE,GAAG,EAAE,MAAM,CAAC,UAAU,EAAE,aAAa,CAAC,CAAC;IAC9F,CAAC;IAED,KAAK,CAAC,gBAAgB,CAAC,MAAgC;QACtD,MAAM,IAAI,CAAC,OAAO,CAAC,uBAAuB,CAAC,MAAM,CAAC,CAAC;IACpD,CAAC;IAEO,KAAK,CAAC,YAAY,CAAC,OAAwC;QAClE,MAAM,MAAM,GAAG,MAAM,oCAAoC,CAAC,cAAc,CAAC,OAAO,CAAC,CAAC;QAClF,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC;YAClB,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,qDAAqD,EAAE;gBACxE,KAAK,EAAE,MAAM,CAAC,KAAK;aACnB,CAAC,CAAC;YACH,MAAM,IAAI,8CAAiC,CAC1C,gDAAgD,MAAM,CAAC,KAAK,CAAC,OAAO,EAAE,CACtE,CAAC;QACH,CAAC;QACD,OAAO,MAAM,CAAC,IAAI,CAAC;IACpB,CAAC;IAED,KAAK,CAAC,eAAe,CAAC,OAAwC;QAC7D,MAAM,CAAC,UAAU,EAAE,aAAa,CAAC,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC;QACtE,MAAM,UAAU,CAAC,eAAe,CAAC,aAAa,CAAC,CAAC;IACjD,CAAC;IAEO,KAAK,CAAC,aAAa,CAC1B,OAAwC;QAExC,MAAM,aAAa,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC;QACvD,IAAI,aAAa,CAAC,UAAU,KAAK,sBAAsB,EAAE,CAAC;YACzD,OAAO,CAAC,IAAI,CAAC,kCAAkC,EAAE,aAAa,CAAC,CAAC;QACjE,CAAC;aAAM,CAAC;YACP,OAAO,CAAC,IAAI,CAAC,wBAAwB,EAAE,aAAa,CAAC,CAAC;QACvD,CAAC;IACF,CAAC;IAEO,KAAK,CAAC,iBAAiB,CAC9B,OAA2B,EAC3B,OAAwC;QAExC,MAAM,CAAC,UAAU,EAAE,aAAa,CAAC,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC;QACtE,OAAO,MAAM,UAAU,CAAC,OAAO,CAAC,OAAO,EAAE,aAAa,CAAC,CAAC;IACzD,CAAC;IAED,KAAK,CAAC,gBAAgB,CACrB,OAA2B,EAC3B,MAAgC;QAEhC,MAAM,aAAa,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC;QACpE,MAAM,IAAI,CAAC,iBAAiB,CAAC,OAAO,EAAE,aAAa,CAAC,CAAC;IACtD,CAAC;CACD,CAAA;;kCAnMY,uBAAuB;IADnC,IAAA,+BAAkB,GAAE;qCAGM,uBAAM,EACsB,oEAAkC,EAC5C,qDAAwB,EACzC,gEAA6B,EAC9B,iBAAM;GANpB,uBAAuB,CAmMnC"}
+{"version":3,"file":"oauth-credential-resolver.js","sourceRoot":"","sources":["../../../../src/modules/dynamic-credentials.ee/credential-resolvers/oauth-credential-resolver.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;AAAA,wDAA6C;AAC7C,gDAOyB;AACzB,uCAAkC;AAClC,+CAA6F;AAC7F,8CAAoB;AAGpB,mGAGuD;AACvD,yFAGkD;AAClD,iGAA2F;AAE3F,MAAM,oCAAoC,GAAG,aAAC,CAAC,kBAAkB,CAAC,YAAY,EAAE;IAC/E,kEAAgC;IAChC,wDAA2B;CAC3B,CAAC,CAAC;AAWI,IAAM,uBAAuB,GAA7B,MAAM,uBAAuB;IACnC,YACkB,MAAc,EACd,kCAAsE,EACtE,wBAAkD,EAClD,OAAsC,EACtC,MAAc;QAJd,WAAM,GAAN,MAAM,CAAQ;QACd,uCAAkC,GAAlC,kCAAkC,CAAoC;QACtE,6BAAwB,GAAxB,wBAAwB,CAA0B;QAClD,YAAO,GAAP,OAAO,CAA+B;QACtC,WAAM,GAAN,MAAM,CAAQ;QAGhC,aAAQ,GAAG;YACV,IAAI,EAAE,gCAAgC;YACtC,WAAW,EAAE,kCAAkC;YAC/C,WAAW,EAAE,iBAAiB;YAC9B,OAAO,EAAE;gBACR;oBACC,WAAW,EAAE,cAAc;oBAC3B,IAAI,EAAE,aAAa;oBACnB,IAAI,EAAE,QAAiB;oBACvB,QAAQ,EAAE,IAAI;oBACd,OAAO,EAAE,EAAE;oBACX,WAAW,EAAE,2DAA2D;oBACxE,WAAW,EAAE,qCAAqC;iBAClD;gBACD;oBACC,WAAW,EAAE,mBAAmB;oBAChC,IAAI,EAAE,YAAY;oBAClB,IAAI,EAAE,SAAkB;oBACxB,OAAO,EAAE;wBACR;4BACC,IAAI,EAAE,4BAA4B;4BAClC,KAAK,EAAE,sBAAsB;4BAC7B,WAAW,EAAE,wDAAwD;yBACrE;wBACD;4BACC,IAAI,EAAE,0BAA0B;4BAChC,KAAK,EAAE,iBAAiB;4BACxB,WAAW,EAAE,6CAA6C;yBAC1D;qBACD;oBACD,OAAO,EAAE,sBAAsB;oBAC/B,WAAW,EAAE,+CAA+C;iBAC5D;gBACD;oBACC,WAAW,EAAE,WAAW;oBACxB,IAAI,EAAE,UAAU;oBAChB,IAAI,EAAE,QAAiB;oBACvB,OAAO,EAAE,EAAE;oBACX,WAAW,EAAE,oCAAoC;oBACjD,cAAc,EAAE;wBACf,IAAI,EAAE;4BACL,UAAU,EAAE,CAAC,iBAAiB,CAAC;yBAC/B;wBACD,IAAI,EAAE;4BACL,UAAU,EAAE,CAAC,sBAAsB,CAAC;yBACpC;qBACD;iBACD;gBACD;oBACC,WAAW,EAAE,eAAe;oBAC5B,IAAI,EAAE,cAAc;oBACpB,IAAI,EAAE,QAAiB;oBACvB,OAAO,EAAE,EAAE;oBACX,WAAW,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE;oBAC/B,WAAW,EAAE,wCAAwC;oBACrD,cAAc,EAAE;wBACf,IAAI,EAAE;4BACL,UAAU,EAAE,CAAC,iBAAiB,CAAC;yBAC/B;wBACD,IAAI,EAAE;4BACL,UAAU,EAAE,CAAC,sBAAsB,CAAC;yBACpC;qBACD;iBACD;gBACD;oBACC,WAAW,EAAE,mBAAmB;oBAChC,IAAI,EAAE,kBAAkB;oBACxB,IAAI,EAAE,QAAiB;oBACvB,OAAO,EAAE,EAAE;oBACX,WAAW,EAAE,yBAAyB;oBACtC,WAAW,EACV,qPAAqP;iBACtP;gBACD;oBACC,WAAW,EAAE,eAAe;oBAC5B,IAAI,EAAE,cAAc;oBACpB,IAAI,EAAE,QAAiB;oBACvB,OAAO,EAAE,KAAK;oBACd,WAAW,EAAE,0CAA0C;iBACvD;aACD;SACD,CAAC;IAnFC,CAAC;IAyFJ,KAAK,CAAC,SAAS,CACd,YAAoB,EACpB,OAA2B,EAC3B,MAAgC;QAEhC,MAAM,aAAa,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC;QACpE,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,iBAAiB,CAAC,OAAO,EAAE,aAAa,CAAC,CAAC;QAEjE,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,iBAAiB,CAChD,YAAY,EACZ,GAAG,EACH,MAAM,CAAC,UAAU,EACjB,aAAa,CACb,CAAC;QAEF,IAAI,CAAC,IAAI,EAAE,CAAC;YACX,MAAM,IAAI,gDAAmC,EAAE,CAAC;QACjD,CAAC;QACD,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;QACpD,IAAI,CAAC;YACJ,MAAM,MAAM,GAAG,IAAA,wBAAS,EAAiC,SAAS,CAAC,CAAC;YACpE,OAAO,MAAM,CAAC;QACf,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,2CAA2C,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;YAC1E,MAAM,IAAI,gDAAmC,EAAE,CAAC;QACjD,CAAC;IACF,CAAC;IAGD,KAAK,CAAC,SAAS,CACd,YAAoB,EACpB,OAA2B,EAC3B,IAAoC,EACpC,MAAgC;QAEhC,MAAM,aAAa,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC;QACpE,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,iBAAiB,CAAC,OAAO,EAAE,aAAa,CAAC,CAAC;QAEjE,MAAM,aAAa,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;QAExD,MAAM,IAAI,CAAC,OAAO,CAAC,iBAAiB,CACnC,YAAY,EACZ,GAAG,EACH,MAAM,CAAC,UAAU,EACjB,aAAa,EACb,aAAa,CACb,CAAC;IACH,CAAC;IAGD,KAAK,CAAC,YAAY,CACjB,YAAoB,EACpB,OAA2B,EAC3B,MAAgC;QAEhC,MAAM,aAAa,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC;QACpE,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,iBAAiB,CAAC,OAAO,EAAE,aAAa,CAAC,CAAC;QACjE,MAAM,IAAI,CAAC,OAAO,CAAC,oBAAoB,CAAC,YAAY,EAAE,GAAG,EAAE,MAAM,CAAC,UAAU,EAAE,aAAa,CAAC,CAAC;IAC9F,CAAC;IAED,KAAK,CAAC,gBAAgB,CAAC,MAAgC;QACtD,MAAM,IAAI,CAAC,OAAO,CAAC,uBAAuB,CAAC,MAAM,CAAC,CAAC;IACpD,CAAC;IAEO,KAAK,CAAC,YAAY,CAAC,OAAwC;QAClE,MAAM,MAAM,GAAG,MAAM,oCAAoC,CAAC,cAAc,CAAC,OAAO,CAAC,CAAC;QAClF,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC;YAClB,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,qDAAqD,EAAE;gBACxE,KAAK,EAAE,MAAM,CAAC,KAAK;aACnB,CAAC,CAAC;YACH,MAAM,IAAI,8CAAiC,CAC1C,gDAAgD,MAAM,CAAC,KAAK,CAAC,OAAO,EAAE,CACtE,CAAC;QACH,CAAC;QACD,OAAO,MAAM,CAAC,IAAI,CAAC;IACpB,CAAC;IAED,KAAK,CAAC,eAAe,CAAC,OAAwC;QAC7D,MAAM,CAAC,UAAU,EAAE,aAAa,CAAC,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC;QACtE,MAAM,UAAU,CAAC,eAAe,CAAC,aAAa,CAAC,CAAC;IACjD,CAAC;IAEO,KAAK,CAAC,aAAa,CAC1B,OAAwC;QAExC,MAAM,aAAa,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC;QACvD,IAAI,aAAa,CAAC,UAAU,KAAK,sBAAsB,EAAE,CAAC;YACzD,OAAO,CAAC,IAAI,CAAC,kCAAkC,EAAE,aAAa,CAAC,CAAC;QACjE,CAAC;aAAM,CAAC;YACP,OAAO,CAAC,IAAI,CAAC,wBAAwB,EAAE,aAAa,CAAC,CAAC;QACvD,CAAC;IACF,CAAC;IAEO,KAAK,CAAC,iBAAiB,CAC9B,OAA2B,EAC3B,OAAwC;QAExC,MAAM,CAAC,UAAU,EAAE,aAAa,CAAC,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC;QACtE,OAAO,MAAM,UAAU,CAAC,OAAO,CAAC,OAAO,EAAE,aAAa,CAAC,CAAC;IACzD,CAAC;IAED,KAAK,CAAC,gBAAgB,CACrB,OAA2B,EAC3B,MAAgC;QAEhC,MAAM,aAAa,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC;QACpE,MAAM,IAAI,CAAC,iBAAiB,CAAC,OAAO,EAAE,aAAa,CAAC,CAAC;IACtD,CAAC;CACD,CAAA;;kCA5MY,uBAAuB;IADnC,IAAA,+BAAkB,GAAE;qCAGM,uBAAM,EACsB,oEAAkC,EAC5C,qDAAwB,EACzC,gEAA6B,EAC9B,iBAAM;GANpB,uBAAuB,CA4MnC"}

package/dist/modules/dynamic-credentials.ee/services/dynamic-credential.service.d.ts

@@ -20,7 +20,7 @@ export declare class DynamicCredentialService implements ICredentialResolutionPr
     private readonly expressionService;
     private readonly dynamicCredentialsProxy;
     constructor(dynamicCredentialConfig: DynamicCredentialsConfig, resolverRegistry: DynamicCredentialResolverRegistry, resolverRepository: DynamicCredentialResolverRepository, loadNodesAndCredentials: LoadNodesAndCredentials, cipher: Cipher, logger: Logger, expressionService: ResolverConfigExpressionService, dynamicCredentialsProxy: DynamicCredentialsProxy);
-    resolveIfNeeded(credentialsResolveMetadata: CredentialResolveMetadata, staticData: ICredentialDataDecryptedObject, executionContext?: IExecutionContext, workflowSettings?: IWorkflowSettings): Promise<CredentialResolutionResult>;
+    resolveIfNeeded(credentialsResolveMetadata: CredentialResolveMetadata, staticData: ICredentialDataDecryptedObject, executionContext?: IExecutionContext, workflowSettings?: IWorkflowSettings, executionId?: string): Promise<CredentialResolutionResult>;
     getSystemResolverId(): string;
     resolveOwningUserIdForAuthorization(credentialContext: ICredentialContext, resolverId: string): Promise<{
         status: 'unbound';

package/dist/modules/dynamic-credentials.ee/services/dynamic-credential.service.js

@@ -41,7 +41,7 @@ let DynamicCredentialService = class DynamicCredentialService {
         this.expressionService = expressionService;
         this.dynamicCredentialsProxy = dynamicCredentialsProxy;
     }
-    async resolveIfNeeded(credentialsResolveMetadata, staticData, executionContext, workflowSettings) {
+    async resolveIfNeeded(credentialsResolveMetadata, staticData, executionContext, workflowSettings, executionId) {
         const resolverId = credentialsResolveMetadata.resolverId ??
             this.dynamicCredentialsProxy.getEffectiveResolverId(workflowSettings);
         if (!credentialsResolveMetadata.isResolvable) {
@@ -84,7 +84,7 @@ let DynamicCredentialService = class DynamicCredentialService {
                 resolverName: resolverEntity.type,
                 configuration: resolverConfig,
             };
-            const dynamicData = await resolver.getSecret(credentialsResolveMetadata.id, credentialContext, handle);
+            const dynamicData = await resolver.getSecret(credentialsResolveMetadata.id, credentialContext, handle, executionId);
             this.logger.debug('Successfully resolved dynamic credentials', {
                 credentialId: credentialsResolveMetadata.id,
                 resolverId,
@@ -98,7 +98,7 @@ let DynamicCredentialService = class DynamicCredentialService {
             }
             let resolvedUserId;
             try {
-                resolvedUserId = await resolver.resolveOwningUserId?.(credentialContext, handle);
+                resolvedUserId = await resolver.resolveOwningUserId?.(credentialContext, handle, executionId);
             }
             catch (error) {
                 this.logger.debug('Could not resolve owning user for dynamic credentials', {

package/dist/modules/dynamic-credentials.ee/services/dynamic-credential.service.js.map

@@ -1 +1 @@
-{"version":3,"file":"dynamic-credential.service.js","sourceRoot":"","sources":["../../../../src/modules/dynamic-credentials.ee/services/dynamic-credential.service.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,wDAA6C;AAE7C,gDAA+F;AAC/F,gCAAkC;AAElC,uCAAkC;AAOlC,+CAA8D;AAE9D,uFAAkF;AAClF,6EAAuE;AACvE,wEAAmE;AAEnE,uFAAwF;AACxF,iGAA2F;AAC3F,6FAAuF;AACvF,mDAAsD;AAMtD,4CAAwE;AACxE,4GAA8G;AAC9G,8EAAyE;AACzE,uFAAkF;AAClF,iHAA0G;AAC1G,uGAAgG;AAChG,+FAAyF;AACzF,iGAA0F;AAOnF,IAAM,wBAAwB,GAA9B,MAAM,wBAAwB;IACpC,YACkB,uBAAiD,EACjD,gBAAmD,EACnD,kBAAuD,EACvD,uBAAgD,EAChD,MAAc,EACd,MAAc,EACd,iBAAkD,EAClD,uBAAgD;uCAPhD,uBAAuB;gCACvB,gBAAgB;kCAChB,kBAAkB;uCAClB,uBAAuB;sBACvB,MAAM;sBACN,MAAM;iCACN,iBAAiB;uCACjB,uBAAuB;IACtC,CAAC;IAYJ,KAAK,CAAC,eAAe,CACpB,0BAAqD,EACrD,UAA0C,EAC1C,gBAAoC,EACpC,gBAAoC;QAIpC,MAAM,UAAU,GACf,0BAA0B,CAAC,UAAU;YACrC,IAAI,CAAC,uBAAuB,CAAC,sBAAsB,CAAC,gBAAgB,CAAC,CAAC;QAGvE,IAAI,CAAC,0BAA0B,CAAC,YAAY,EAAE,CAAC;YAC9C,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC;QAC/C,CAAC;QAED,IAAI,CAAC,UAAU,EAAE,CAAC;YACjB,OAAO,IAAI,CAAC,2BAA2B,CAAC,0BAA0B,CAAC,CAAC;QACrE,CAAC;QAGD,MAAM,cAAc,GAAG,MAAM,IAAI,CAAC,kBAAkB,CAAC,SAAS,CAAC;YAC9D,EAAE,EAAE,UAAU;SACd,CAAC,CAAC;QAEH,IAAI,CAAC,cAAc,EAAE,CAAC;YACrB,OAAO,IAAI,CAAC,sBAAsB,CAAC,0BAA0B,EAAE,UAAU,CAAC,CAAC;QAC5E,CAAC;QAGD,MAAM,QAAQ,GAAG,IAAI,CAAC,gBAAgB,CAAC,qBAAqB,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC;QAElF,IAAI,CAAC,QAAQ,EAAE,CAAC;YACf,OAAO,IAAI,CAAC,sBAAsB,CAAC,0BAA0B,EAAE,UAAU,CAAC,CAAC;QAC5E,CAAC;QAGD,MAAM,iBAAiB,GAAG,MAAM,IAAI,CAAC,sBAAsB,CAAC,gBAAgB,CAAC,CAAC;QAE9E,IAAI,CAAC,iBAAiB,EAAE,CAAC;YACxB,OAAO,IAAI,CAAC,oBAAoB,CAAC,0BAA0B,CAAC,CAAC;QAC9D,CAAC;QAED,IAAI,IAAA,mCAAkB,EAAC,iBAAiB,CAAC,IAAI,CAAC,QAAQ,CAAC,mBAAmB,EAAE,CAAC;YAK5E,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,kEAAkE,EAAE;gBACrF,YAAY,EAAE,0BAA0B,CAAC,EAAE;gBAC3C,cAAc,EAAE,0BAA0B,CAAC,IAAI;gBAC/C,UAAU;gBACV,YAAY,EAAE,cAAc,CAAC,IAAI;aACjC,CAAC,CAAC;YACH,MAAM,IAAI,+DAA4B,CAAC,0BAA0B,CAAC,IAAI,CAAC,CAAC;QACzE,CAAC;QAED,IAAI,CAAC;YACJ,MAAM,cAAc,GAAG,IAAI,CAAC,uBAAuB,CAAC,aAAa,CAChE,0BAA0B,CAAC,IAAI,CAC/B,CAAC;YAEF,MAAM,YAAY,GAAG,IAAA,mCAAmB,EAAC,cAAc,CAAC,IAAI,CAAC,CAAC;YAG9D,MAAM,eAAe,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,cAAc,CAAC,MAAM,CAAC,CAAC;YAC3E,MAAM,YAAY,GAAG,IAAA,wBAAS,EAA0B,eAAe,CAAC,CAAC;YAGzE,MAAM,cAAc,GAAG,MAAM,IAAI,CAAC,iBAAiB,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;YAE1E,MAAM,MAAM,GAAG;gBACd,UAAU,EAAE,cAAc,CAAC,EAAE;gBAC7B,YAAY,EAAE,cAAc,CAAC,IAAI;gBACjC,aAAa,EAAE,cAAc;aAC7B,CAAC;YAGF,MAAM,WAAW,GAAG,MAAM,QAAQ,CAAC,SAAS,CAC3C,0BAA0B,CAAC,EAAE,EAC7B,iBAAiB,EACjB,MAAM,CACN,CAAC;YAEF,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,2CAA2C,EAAE;gBAC9D,YAAY,EAAE,0BAA0B,CAAC,EAAE;gBAC3C,UAAU;gBACV,cAAc,EAAE,0BAA0B,CAAC,UAAU,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,UAAU;gBACjF,QAAQ,EAAE,iBAAiB,CAAC,QAAQ;aACpC,CAAC,CAAC;YAGH,KAAK,MAAM,KAAK,IAAI,YAAY,EAAE,CAAC;gBAClC,IAAI,KAAK,IAAI,WAAW,EAAE,CAAC;oBAC1B,OAAO,WAAW,CAAC,KAAK,CAAC,CAAC;gBAC3B,CAAC;YACF,CAAC;YAMD,IAAI,cAAkC,CAAC;YACvC,IAAI,CAAC;gBACJ,cAAc,GAAG,MAAM,QAAQ,CAAC,mBAAmB,EAAE,CAAC,iBAAiB,EAAE,MAAM,CAAC,CAAC;YAClF,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBAChB,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,uDAAuD,EAAE;oBAC1E,YAAY,EAAE,0BAA0B,CAAC,EAAE;oBAC3C,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;iBAC7D,CAAC,CAAC;YACJ,CAAC;YAGD,OAAO,EAAE,IAAI,EAAE,EAAE,GAAG,UAAU,EAAE,GAAG,WAAW,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,cAAc,EAAE,CAAC;QACrF,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,OAAO,IAAI,CAAC,qBAAqB,CAChC,0BAA0B,EAC1B,KAAK,EACL,cAAc,CAAC,EAAE,EACjB,cAAc,CAAC,IAAI,CACnB,CAAC;QACH,CAAC;IACF,CAAC;IAED,mBAAmB;QAClB,OAAO,8BAAkB,CAAC;IAC3B,CAAC;IAeD,KAAK,CAAC,mCAAmC,CACxC,iBAAqC,EACrC,UAAkB;QAIlB,MAAM,cAAc,GAAG,MAAM,IAAI,CAAC,kBAAkB,CAAC,SAAS,CAAC,EAAE,EAAE,EAAE,UAAU,EAAE,CAAC,CAAC;QACnF,MAAM,QAAQ,GACb,cAAc,IAAI,IAAI,CAAC,gBAAgB,CAAC,qBAAqB,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC;QACpF,IAAI,CAAC,cAAc,IAAI,CAAC,QAAQ,EAAE,mBAAmB,EAAE,CAAC;YACvD,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;QAC9B,CAAC;QAED,IAAI,CAAC;YACJ,MAAM,YAAY,GAAG,IAAA,wBAAS,EAC7B,MAAM,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,cAAc,CAAC,MAAM,CAAC,CAClD,CAAC;YACF,MAAM,cAAc,GAAG,MAAM,IAAI,CAAC,iBAAiB,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;YAC1E,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,mBAAmB,CAAC,iBAAiB,EAAE;gBACpE,UAAU,EAAE,cAAc,CAAC,EAAE;gBAC7B,YAAY,EAAE,cAAc,CAAC,IAAI;gBACjC,aAAa,EAAE,cAAc;aAC7B,CAAC,CAAC;YACH,OAAO,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,YAAY,EAAE,CAAC;QACxE,CAAC;QAAC,MAAM,CAAC;YACR,OAAO,EAAE,MAAM,EAAE,YAAY,EAAE,CAAC;QACjC,CAAC;IACF,CAAC;IAKO,KAAK,CAAC,sBAAsB,CAAC,gBAA+C;QACnF,IAAI,CAAC,gBAAgB,EAAE,WAAW,EAAE,CAAC;YACpC,OAAO,SAAS,CAAC;QAClB,CAAC;QAED,IAAI,CAAC;YAEJ,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,gBAAgB,CAAC,WAAW,CAAC,CAAC;YAC5E,OAAO,IAAA,kCAAmB,EAAC,SAAS,CAAC,CAAC;QACvC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,6DAA6D,EAAE;gBAChF,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;aAC7D,CAAC,CAAC;YACH,OAAO,SAAS,CAAC;QAClB,CAAC;IACF,CAAC;IAgBO,qBAAqB,CAC5B,0BAAqD,EACrD,KAAc,EACd,UAAkB,EAClB,YAAoB;QAEpB,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,sCAAsC,EAAE;YACzD,YAAY,EAAE,0BAA0B,CAAC,EAAE;YAC3C,cAAc,EAAE,0BAA0B,CAAC,IAAI;YAC/C,UAAU;YACV,cAAc,EAAE,0BAA0B,CAAC,UAAU,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,UAAU;YACjF,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;SAC7D,CAAC,CAAC;QAEH,IACC,KAAK,YAAY,gDAAmC;YACpD,YAAY,KAAK,gCAAoB,EACpC,CAAC;YAGF,MAAM,IAAI,uDAAyB,CAClC,IAAI,0BAA0B,CAAC,IAAI,kGAAkG,EACrI,EAAE,KAAK,EAAE,KAAK,EAAE,CAChB,CAAC;QACH,CAAC;QAID,IAAI,KAAK,YAAY,uDAAyB,IAAI,KAAK,YAAY,oCAAuB,EAAE,CAAC;YAC5F,MAAM,IAAI,uDAAyB,CAClC,8CAA8C,0BAA0B,CAAC,IAAI,MAAM,KAAK,CAAC,OAAO,EAAE,EAClG,EAAE,KAAK,EAAE,KAAK,EAAE,CAChB,CAAC;QACH,CAAC;QAGD,MAAM,IAAI,uDAAyB,CAClC,8CAA8C,0BAA0B,CAAC,IAAI,GAAG,EAChF,EAAE,KAAK,EAAE,KAAK,EAAE,CAChB,CAAC;IACH,CAAC;IAMO,2BAA2B,CAClC,0BAAqD;QAErD,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,+CAA+C,EAAE;YAClE,YAAY,EAAE,0BAA0B,CAAC,EAAE;YAC3C,cAAc,EAAE,0BAA0B,CAAC,IAAI;SAC/C,CAAC,CAAC;QAEH,MAAM,IAAI,+EAAoC,CAAC,0BAA0B,CAAC,IAAI,CAAC,CAAC;IACjF,CAAC;IAMO,sBAAsB,CAC7B,0BAAqD,EACrD,UAAkB;QAElB,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,2CAA2C,EAAE;YAC9D,YAAY,EAAE,0BAA0B,CAAC,EAAE;YAC3C,cAAc,EAAE,0BAA0B,CAAC,IAAI;YAC/C,UAAU;YACV,cAAc,EAAE,0BAA0B,CAAC,UAAU,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,UAAU;SACjF,CAAC,CAAC;QAEH,MAAM,IAAI,qEAA+B,CAAC,0BAA0B,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;IACxF,CAAC;IAKO,oBAAoB,CAAC,0BAAqD;QACjF,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,uDAAuD,EAAE;YAC1E,YAAY,EAAE,0BAA0B,CAAC,EAAE;YAC3C,cAAc,EAAE,0BAA0B,CAAC,IAAI;SAC/C,CAAC,CAAC;QAEH,MAAM,IAAI,8DAA4B,EAAE,CAAC;IAC1C,CAAC;IAMD,wCAAwC;QACvC,MAAM,EAAE,iBAAiB,EAAE,GAAG,IAAI,CAAC,uBAAuB,CAAC;QAC3D,IAAI,CAAC,iBAAiB,EAAE,IAAI,EAAE,EAAE,CAAC;YAChC,OAAO,CAAC,GAAyB,EAAE,GAAa,EAAE,IAAkB,EAAE,EAAE;gBAEvE,IAAI,GAAG,CAAC,IAAI,EAAE,CAAC;oBACd,OAAO,IAAI,EAAE,CAAC;gBACf,CAAC;gBACD,IAAI,CAAC,MAAM,CAAC,KAAK,CAChB,0KAA0K,CAC1K,CAAC;gBACF,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;oBACpB,OAAO,EAAE,8EAA8E;iBACvF,CAAC,CAAC;gBACH,OAAO;YACR,CAAC,CAAC;QACH,CAAC;QAED,MAAM,mBAAmB,GAAG,uCAAiB,CAAC,uBAAuB,CACpE,iBAAiB,EACjB,iBAAiB,CAChB,CAAC;QAEH,OAAO,CAAC,GAAyB,EAAE,GAAa,EAAE,IAAkB,EAAE,EAAE;YAEvE,IAAI,GAAG,CAAC,IAAI,EAAE,CAAC;gBACd,OAAO,IAAI,EAAE,CAAC;YACf,CAAC;YACD,OAAO,mBAAmB,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC;QAC5C,CAAC,CAAC;IACH,CAAC;CACD,CAAA;;mCA7VY,wBAAwB;IADpC,IAAA,YAAO,GAAE;qCAGkC,qDAAwB,EAC/B,wEAAiC,EAC/B,oEAAmC,EAC9B,oDAAuB,EACxC,iBAAM,EACN,uBAAM,EACK,oEAA+B,EACzB,mDAAuB;GATtD,wBAAwB,CA6VpC"}
+{"version":3,"file":"dynamic-credential.service.js","sourceRoot":"","sources":["../../../../src/modules/dynamic-credentials.ee/services/dynamic-credential.service.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,wDAA6C;AAE7C,gDAA+F;AAC/F,gCAAkC;AAElC,uCAAkC;AAOlC,+CAA8D;AAE9D,uFAAkF;AAClF,6EAAuE;AACvE,wEAAmE;AAEnE,uFAAwF;AACxF,iGAA2F;AAC3F,6FAAuF;AACvF,mDAAsD;AAMtD,4CAAwE;AACxE,4GAA8G;AAC9G,8EAAyE;AACzE,uFAAkF;AAClF,iHAA0G;AAC1G,uGAAgG;AAChG,+FAAyF;AACzF,iGAA0F;AAOnF,IAAM,wBAAwB,GAA9B,MAAM,wBAAwB;IACpC,YACkB,uBAAiD,EACjD,gBAAmD,EACnD,kBAAuD,EACvD,uBAAgD,EAChD,MAAc,EACd,MAAc,EACd,iBAAkD,EAClD,uBAAgD;uCAPhD,uBAAuB;gCACvB,gBAAgB;kCAChB,kBAAkB;uCAClB,uBAAuB;sBACvB,MAAM;sBACN,MAAM;iCACN,iBAAiB;uCACjB,uBAAuB;IACtC,CAAC;IAYJ,KAAK,CAAC,eAAe,CACpB,0BAAqD,EACrD,UAA0C,EAC1C,gBAAoC,EACpC,gBAAoC,EACpC,WAAoB;QAIpB,MAAM,UAAU,GACf,0BAA0B,CAAC,UAAU;YACrC,IAAI,CAAC,uBAAuB,CAAC,sBAAsB,CAAC,gBAAgB,CAAC,CAAC;QAGvE,IAAI,CAAC,0BAA0B,CAAC,YAAY,EAAE,CAAC;YAC9C,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC;QAC/C,CAAC;QAED,IAAI,CAAC,UAAU,EAAE,CAAC;YACjB,OAAO,IAAI,CAAC,2BAA2B,CAAC,0BAA0B,CAAC,CAAC;QACrE,CAAC;QAGD,MAAM,cAAc,GAAG,MAAM,IAAI,CAAC,kBAAkB,CAAC,SAAS,CAAC;YAC9D,EAAE,EAAE,UAAU;SACd,CAAC,CAAC;QAEH,IAAI,CAAC,cAAc,EAAE,CAAC;YACrB,OAAO,IAAI,CAAC,sBAAsB,CAAC,0BAA0B,EAAE,UAAU,CAAC,CAAC;QAC5E,CAAC;QAGD,MAAM,QAAQ,GAAG,IAAI,CAAC,gBAAgB,CAAC,qBAAqB,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC;QAElF,IAAI,CAAC,QAAQ,EAAE,CAAC;YACf,OAAO,IAAI,CAAC,sBAAsB,CAAC,0BAA0B,EAAE,UAAU,CAAC,CAAC;QAC5E,CAAC;QAGD,MAAM,iBAAiB,GAAG,MAAM,IAAI,CAAC,sBAAsB,CAAC,gBAAgB,CAAC,CAAC;QAE9E,IAAI,CAAC,iBAAiB,EAAE,CAAC;YACxB,OAAO,IAAI,CAAC,oBAAoB,CAAC,0BAA0B,CAAC,CAAC;QAC9D,CAAC;QAED,IAAI,IAAA,mCAAkB,EAAC,iBAAiB,CAAC,IAAI,CAAC,QAAQ,CAAC,mBAAmB,EAAE,CAAC;YAK5E,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,kEAAkE,EAAE;gBACrF,YAAY,EAAE,0BAA0B,CAAC,EAAE;gBAC3C,cAAc,EAAE,0BAA0B,CAAC,IAAI;gBAC/C,UAAU;gBACV,YAAY,EAAE,cAAc,CAAC,IAAI;aACjC,CAAC,CAAC;YACH,MAAM,IAAI,+DAA4B,CAAC,0BAA0B,CAAC,IAAI,CAAC,CAAC;QACzE,CAAC;QAED,IAAI,CAAC;YACJ,MAAM,cAAc,GAAG,IAAI,CAAC,uBAAuB,CAAC,aAAa,CAChE,0BAA0B,CAAC,IAAI,CAC/B,CAAC;YAEF,MAAM,YAAY,GAAG,IAAA,mCAAmB,EAAC,cAAc,CAAC,IAAI,CAAC,CAAC;YAG9D,MAAM,eAAe,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,cAAc,CAAC,MAAM,CAAC,CAAC;YAC3E,MAAM,YAAY,GAAG,IAAA,wBAAS,EAA0B,eAAe,CAAC,CAAC;YAGzE,MAAM,cAAc,GAAG,MAAM,IAAI,CAAC,iBAAiB,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;YAE1E,MAAM,MAAM,GAAG;gBACd,UAAU,EAAE,cAAc,CAAC,EAAE;gBAC7B,YAAY,EAAE,cAAc,CAAC,IAAI;gBACjC,aAAa,EAAE,cAAc;aAC7B,CAAC;YAGF,MAAM,WAAW,GAAG,MAAM,QAAQ,CAAC,SAAS,CAC3C,0BAA0B,CAAC,EAAE,EAC7B,iBAAiB,EACjB,MAAM,EACN,WAAW,CACX,CAAC;YAEF,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,2CAA2C,EAAE;gBAC9D,YAAY,EAAE,0BAA0B,CAAC,EAAE;gBAC3C,UAAU;gBACV,cAAc,EAAE,0BAA0B,CAAC,UAAU,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,UAAU;gBACjF,QAAQ,EAAE,iBAAiB,CAAC,QAAQ;aACpC,CAAC,CAAC;YAGH,KAAK,MAAM,KAAK,IAAI,YAAY,EAAE,CAAC;gBAClC,IAAI,KAAK,IAAI,WAAW,EAAE,CAAC;oBAC1B,OAAO,WAAW,CAAC,KAAK,CAAC,CAAC;gBAC3B,CAAC;YACF,CAAC;YAMD,IAAI,cAAkC,CAAC;YACvC,IAAI,CAAC;gBACJ,cAAc,GAAG,MAAM,QAAQ,CAAC,mBAAmB,EAAE,CACpD,iBAAiB,EACjB,MAAM,EACN,WAAW,CACX,CAAC;YACH,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBAChB,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,uDAAuD,EAAE;oBAC1E,YAAY,EAAE,0BAA0B,CAAC,EAAE;oBAC3C,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;iBAC7D,CAAC,CAAC;YACJ,CAAC;YAGD,OAAO,EAAE,IAAI,EAAE,EAAE,GAAG,UAAU,EAAE,GAAG,WAAW,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,cAAc,EAAE,CAAC;QACrF,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,OAAO,IAAI,CAAC,qBAAqB,CAChC,0BAA0B,EAC1B,KAAK,EACL,cAAc,CAAC,EAAE,EACjB,cAAc,CAAC,IAAI,CACnB,CAAC;QACH,CAAC;IACF,CAAC;IAED,mBAAmB;QAClB,OAAO,8BAAkB,CAAC;IAC3B,CAAC;IAeD,KAAK,CAAC,mCAAmC,CACxC,iBAAqC,EACrC,UAAkB;QAIlB,MAAM,cAAc,GAAG,MAAM,IAAI,CAAC,kBAAkB,CAAC,SAAS,CAAC,EAAE,EAAE,EAAE,UAAU,EAAE,CAAC,CAAC;QACnF,MAAM,QAAQ,GACb,cAAc,IAAI,IAAI,CAAC,gBAAgB,CAAC,qBAAqB,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC;QACpF,IAAI,CAAC,cAAc,IAAI,CAAC,QAAQ,EAAE,mBAAmB,EAAE,CAAC;YACvD,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;QAC9B,CAAC;QAED,IAAI,CAAC;YACJ,MAAM,YAAY,GAAG,IAAA,wBAAS,EAC7B,MAAM,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,cAAc,CAAC,MAAM,CAAC,CAClD,CAAC;YACF,MAAM,cAAc,GAAG,MAAM,IAAI,CAAC,iBAAiB,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;YAC1E,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,mBAAmB,CAAC,iBAAiB,EAAE;gBACpE,UAAU,EAAE,cAAc,CAAC,EAAE;gBAC7B,YAAY,EAAE,cAAc,CAAC,IAAI;gBACjC,aAAa,EAAE,cAAc;aAC7B,CAAC,CAAC;YACH,OAAO,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,YAAY,EAAE,CAAC;QACxE,CAAC;QAAC,MAAM,CAAC;YACR,OAAO,EAAE,MAAM,EAAE,YAAY,EAAE,CAAC;QACjC,CAAC;IACF,CAAC;IAKO,KAAK,CAAC,sBAAsB,CAAC,gBAA+C;QACnF,IAAI,CAAC,gBAAgB,EAAE,WAAW,EAAE,CAAC;YACpC,OAAO,SAAS,CAAC;QAClB,CAAC;QAED,IAAI,CAAC;YAEJ,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,gBAAgB,CAAC,WAAW,CAAC,CAAC;YAC5E,OAAO,IAAA,kCAAmB,EAAC,SAAS,CAAC,CAAC;QACvC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,6DAA6D,EAAE;gBAChF,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;aAC7D,CAAC,CAAC;YACH,OAAO,SAAS,CAAC;QAClB,CAAC;IACF,CAAC;IAgBO,qBAAqB,CAC5B,0BAAqD,EACrD,KAAc,EACd,UAAkB,EAClB,YAAoB;QAEpB,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,sCAAsC,EAAE;YACzD,YAAY,EAAE,0BAA0B,CAAC,EAAE;YAC3C,cAAc,EAAE,0BAA0B,CAAC,IAAI;YAC/C,UAAU;YACV,cAAc,EAAE,0BAA0B,CAAC,UAAU,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,UAAU;YACjF,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;SAC7D,CAAC,CAAC;QAEH,IACC,KAAK,YAAY,gDAAmC;YACpD,YAAY,KAAK,gCAAoB,EACpC,CAAC;YAGF,MAAM,IAAI,uDAAyB,CAClC,IAAI,0BAA0B,CAAC,IAAI,kGAAkG,EACrI,EAAE,KAAK,EAAE,KAAK,EAAE,CAChB,CAAC;QACH,CAAC;QAID,IAAI,KAAK,YAAY,uDAAyB,IAAI,KAAK,YAAY,oCAAuB,EAAE,CAAC;YAC5F,MAAM,IAAI,uDAAyB,CAClC,8CAA8C,0BAA0B,CAAC,IAAI,MAAM,KAAK,CAAC,OAAO,EAAE,EAClG,EAAE,KAAK,EAAE,KAAK,EAAE,CAChB,CAAC;QACH,CAAC;QAGD,MAAM,IAAI,uDAAyB,CAClC,8CAA8C,0BAA0B,CAAC,IAAI,GAAG,EAChF,EAAE,KAAK,EAAE,KAAK,EAAE,CAChB,CAAC;IACH,CAAC;IAMO,2BAA2B,CAClC,0BAAqD;QAErD,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,+CAA+C,EAAE;YAClE,YAAY,EAAE,0BAA0B,CAAC,EAAE;YAC3C,cAAc,EAAE,0BAA0B,CAAC,IAAI;SAC/C,CAAC,CAAC;QAEH,MAAM,IAAI,+EAAoC,CAAC,0BAA0B,CAAC,IAAI,CAAC,CAAC;IACjF,CAAC;IAMO,sBAAsB,CAC7B,0BAAqD,EACrD,UAAkB;QAElB,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,2CAA2C,EAAE;YAC9D,YAAY,EAAE,0BAA0B,CAAC,EAAE;YAC3C,cAAc,EAAE,0BAA0B,CAAC,IAAI;YAC/C,UAAU;YACV,cAAc,EAAE,0BAA0B,CAAC,UAAU,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,UAAU;SACjF,CAAC,CAAC;QAEH,MAAM,IAAI,qEAA+B,CAAC,0BAA0B,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;IACxF,CAAC;IAKO,oBAAoB,CAAC,0BAAqD;QACjF,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,uDAAuD,EAAE;YAC1E,YAAY,EAAE,0BAA0B,CAAC,EAAE;YAC3C,cAAc,EAAE,0BAA0B,CAAC,IAAI;SAC/C,CAAC,CAAC;QAEH,MAAM,IAAI,8DAA4B,EAAE,CAAC;IAC1C,CAAC;IAMD,wCAAwC;QACvC,MAAM,EAAE,iBAAiB,EAAE,GAAG,IAAI,CAAC,uBAAuB,CAAC;QAC3D,IAAI,CAAC,iBAAiB,EAAE,IAAI,EAAE,EAAE,CAAC;YAChC,OAAO,CAAC,GAAyB,EAAE,GAAa,EAAE,IAAkB,EAAE,EAAE;gBAEvE,IAAI,GAAG,CAAC,IAAI,EAAE,CAAC;oBACd,OAAO,IAAI,EAAE,CAAC;gBACf,CAAC;gBACD,IAAI,CAAC,MAAM,CAAC,KAAK,CAChB,0KAA0K,CAC1K,CAAC;gBACF,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;oBACpB,OAAO,EAAE,8EAA8E;iBACvF,CAAC,CAAC;gBACH,OAAO;YACR,CAAC,CAAC;QACH,CAAC;QAED,MAAM,mBAAmB,GAAG,uCAAiB,CAAC,uBAAuB,CACpE,iBAAiB,EACjB,iBAAiB,CAChB,CAAC;QAEH,OAAO,CAAC,GAAyB,EAAE,GAAa,EAAE,IAAkB,EAAE,EAAE;YAEvE,IAAI,GAAG,CAAC,IAAI,EAAE,CAAC;gBACd,OAAO,IAAI,EAAE,CAAC;YACf,CAAC;YACD,OAAO,mBAAmB,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC;QAC5C,CAAC,CAAC;IACH,CAAC;CACD,CAAA;;mCAnWY,wBAAwB;IADpC,IAAA,YAAO,GAAE;qCAGkC,qDAAwB,EAC/B,wEAAiC,EAC/B,oEAAmC,EAC9B,oDAAuB,EACxC,iBAAM,EACN,uBAAM,EACK,oEAA+B,EACzB,mDAAuB;GATtD,wBAAwB,CAmWpC"}

package/dist/modules/engine-v2/engine-data-plane-client.d.ts

@@ -0,0 +1,15 @@
+import { OutboundHttp } from '@n8n/backend-network';
+import { EngineConfig } from '@n8n/config';
+import type { StartExecutionRequest, StartExecutionResult } from '@n8n/engine';
+import { InstanceSettings } from 'n8n-core';
+import type { EngineDataPlaneProvider } from '../../services/engine-data-plane-proxy.service';
+export declare class EngineDataPlaneClient implements EngineDataPlaneProvider {
+    private readonly engineConfig;
+    private readonly instanceSettings;
+    private readonly http;
+    constructor(engineConfig: EngineConfig, outboundHttp: OutboundHttp, instanceSettings: InstanceSettings);
+    private caller;
+    startExecution(request: StartExecutionRequest): Promise<StartExecutionResult>;
+    private toError;
+    private parseErrorResponse;
+}