n8n 2.43.4 → 2.44.1

package/dist/credentials/credential-options.service.js

@@ -0,0 +1,105 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.CredentialOptionsService = void 0;
+const backend_services_1 = require("@n8n/backend-services");
+const di_1 = require("@n8n/di");
+const errors_1 = require("@n8n/errors");
+const permissions_1 = require("@n8n/permissions");
+const credential_types_1 = require("../credential-types");
+const credentials_helper_1 = require("../credentials-helper");
+const external_secrets_config_1 = require("../modules/external-secrets.ee/external-secrets.config");
+const secret_provider_access_check_service_ee_1 = require("../modules/external-secrets.ee/secret-provider-access-check.service.ee");
+const check_access_1 = require("../permissions.ee/check-access");
+const workflow_execute_additional_data_1 = require("../workflow-execute-additional-data");
+const credentials_service_1 = require("./credentials.service");
+const validation_1 = require("./validation");
+let CredentialOptionsService = class CredentialOptionsService {
+    constructor(credentialTypes, credentialsHelper, credentialsService, credentialsFinder, externalSecretsConfig, secretProviderAccess) {
+        this.credentialTypes = credentialTypes;
+        this.credentialsHelper = credentialsHelper;
+        this.credentialsService = credentialsService;
+        this.credentialsFinder = credentialsFinder;
+        this.externalSecretsConfig = externalSecretsConfig;
+        this.secretProviderAccess = secretProviderAccess;
+    }
+    async lookupDraft(user, request, projectId) {
+        const allowed = projectId === null
+            ? (0, permissions_1.hasGlobalScope)(user, 'credential:manageInstance')
+            : await (0, check_access_1.userHasScopes)(user, ['credential:create'], false, { projectId });
+        if (!allowed)
+            throw new errors_1.ForbiddenError();
+        await this.credentialsService.enforceCredentialUse({ id: '', type: request.type }, { kind: 'user', user }, projectId);
+        await this.validateExternalSecrets(user, request.data, projectId);
+        return await this.load(user, request, request.data, projectId);
+    }
+    async lookupStored(user, credentialId, request) {
+        const storedCredential = await this.credentialsFinder.findCredentialForUser(credentialId, user, ['credential:read'], { includeInstanceCredentials: true });
+        if (!storedCredential)
+            throw new errors_1.ForbiddenError();
+        if (storedCredential.type !== request.type) {
+            throw new errors_1.BadRequestError('The credential type does not match the stored credential');
+        }
+        const { credentials, storedData } = await this.credentialsService.prepareCredentialsForUse({
+            storedCredential,
+            user,
+            credentialsToUse: storedCredential.isManaged
+                ? undefined
+                : { id: credentialId, name: storedCredential.name, type: request.type, data: request.data },
+        });
+        const projectId = credentials.homeProject?.id ?? null;
+        const data = credentials.data ?? {};
+        await this.validateExternalSecrets(user, data, projectId, storedData);
+        return await this.load(user, request, data, projectId);
+    }
+    async validateExternalSecrets(user, data, projectId, storedData) {
+        if (projectId === null) {
+            this.credentialsService.validateInstanceCredentialData(data);
+            return;
+        }
+        await (0, validation_1.validateExternalSecretsPermissions)({
+            user,
+            projectId,
+            dataToSave: data,
+            decryptedExistingData: storedData,
+        });
+        if (this.externalSecretsConfig.externalSecretsForProjects) {
+            await (0, validation_1.validateAccessToReferencedSecretProviders)(projectId, data, this.secretProviderAccess, 'create');
+        }
+    }
+    async load(user, request, data, projectId) {
+        const credentialType = this.credentialTypes.getByName(request.type);
+        const property = this.credentialsHelper
+            .getCredentialsProperties(request.type)
+            .find((field) => field.name === request.propertyName);
+        const methodName = property?.typeOptions?.loadOptionsMethod;
+        const loader = methodName && Object.hasOwn(credentialType.methods?.loadOptions ?? {}, methodName)
+            ? credentialType.methods?.loadOptions?.[methodName]
+            : undefined;
+        if (property?.type !== 'options' || !loader) {
+            throw new errors_1.BadRequestError('This credential field does not support loading a list.');
+        }
+        try {
+            const additionalData = await (0, workflow_execute_additional_data_1.getBase)({ userId: user.id, projectId: projectId ?? undefined });
+            const resolvedData = await this.credentialsHelper.applyDefaultsAndOverwrites(additionalData, data, request.type, 'internal', undefined, undefined);
+            return await loader(resolvedData, request.filter, request.paginationToken);
+        }
+        catch {
+            throw new errors_1.BadRequestError('Could not load the list. Try again or enter an ID.');
+        }
+    }
+};
+exports.CredentialOptionsService = CredentialOptionsService;
+exports.CredentialOptionsService = CredentialOptionsService = __decorate([
+    (0, di_1.Service)(),
+    __metadata("design:paramtypes", [credential_types_1.CredentialTypes, credentials_helper_1.CredentialsHelper, credentials_service_1.CredentialsService, backend_services_1.CredentialsFinderService, external_secrets_config_1.ExternalSecretsConfig, secret_provider_access_check_service_ee_1.SecretsProviderAccessCheckService])
+], CredentialOptionsService);
+//# sourceMappingURL=credential-options.service.js.map

package/dist/credentials/credential-options.service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"credential-options.service.js","sourceRoot":"","sources":["../../src/credentials/credential-options.service.ts"],"names":[],"mappings":";;;;;;;;;;;;AACA,4DAAiE;AAEjE,gCAAkC;AAClC,wCAA8D;AAC9D,kDAAkD;AAGlD,yDAAqD;AACrD,6DAAyD;AACzD,mGAA8F;AAC9F,mIAA0H;AAC1H,gEAA8D;AAC9D,yFAA6D;AAE7D,+DAA2D;AAC3D,6CAGsB;AAGf,IAAM,wBAAwB,GAA9B,MAAM,wBAAwB;IACpC,YACkB,eAAgC,EAChC,iBAAoC,EACpC,kBAAsC,EACtC,iBAA2C,EAC3C,qBAA4C,EAC5C,oBAAuD;+BALvD,eAAe;iCACf,iBAAiB;kCACjB,kBAAkB;iCAClB,iBAAiB;qCACjB,qBAAqB;oCACrB,oBAAoB;IACnC,CAAC;IAEJ,KAAK,CAAC,WAAW,CAAC,IAAU,EAAE,OAAoC,EAAE,SAAwB;QAC3F,MAAM,OAAO,GACZ,SAAS,KAAK,IAAI;YACjB,CAAC,CAAC,IAAA,4BAAc,EAAC,IAAI,EAAE,2BAA2B,CAAC;YACnD,CAAC,CAAC,MAAM,IAAA,4BAAa,EAAC,IAAI,EAAE,CAAC,mBAAmB,CAAC,EAAE,KAAK,EAAE,EAAE,SAAS,EAAE,CAAC,CAAC;QAC3E,IAAI,CAAC,OAAO;YAAE,MAAM,IAAI,uBAAc,EAAE,CAAC;QACzC,MAAM,IAAI,CAAC,kBAAkB,CAAC,oBAAoB,CACjD,EAAE,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,EAC9B,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,EACtB,SAAS,CACT,CAAC;QACF,MAAM,IAAI,CAAC,uBAAuB,CAAC,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;QAClE,OAAO,MAAM,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,OAAO,EAAE,OAAO,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;IAChE,CAAC;IAED,KAAK,CAAC,YAAY,CAAC,IAAU,EAAE,YAAoB,EAAE,OAAoC;QACxF,MAAM,gBAAgB,GAAG,MAAM,IAAI,CAAC,iBAAiB,CAAC,qBAAqB,CAC1E,YAAY,EACZ,IAAI,EACJ,CAAC,iBAAiB,CAAC,EACnB,EAAE,0BAA0B,EAAE,IAAI,EAAE,CACpC,CAAC;QACF,IAAI,CAAC,gBAAgB;YAAE,MAAM,IAAI,uBAAc,EAAE,CAAC;QAClD,IAAI,gBAAgB,CAAC,IAAI,KAAK,OAAO,CAAC,IAAI,EAAE,CAAC;YAC5C,MAAM,IAAI,wBAAe,CAAC,0DAA0D,CAAC,CAAC;QACvF,CAAC;QACD,MAAM,EAAE,WAAW,EAAE,UAAU,EAAE,GAAG,MAAM,IAAI,CAAC,kBAAkB,CAAC,wBAAwB,CAAC;YAC1F,gBAAgB;YAChB,IAAI;YACJ,gBAAgB,EAAE,gBAAgB,CAAC,SAAS;gBAC3C,CAAC,CAAC,SAAS;gBACX,CAAC,CAAC,EAAE,EAAE,EAAE,YAAY,EAAE,IAAI,EAAE,gBAAgB,CAAC,IAAI,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE;SAC5F,CAAC,CAAC;QACH,MAAM,SAAS,GAAG,WAAW,CAAC,WAAW,EAAE,EAAE,IAAI,IAAI,CAAC;QACtD,MAAM,IAAI,GAAG,WAAW,CAAC,IAAI,IAAI,EAAE,CAAC;QACpC,MAAM,IAAI,CAAC,uBAAuB,CAAC,IAAI,EAAE,IAAI,EAAE,SAAS,EAAE,UAAU,CAAC,CAAC;QACtE,OAAO,MAAM,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,CAAC,CAAC;IACxD,CAAC;IAEO,KAAK,CAAC,uBAAuB,CACpC,IAAU,EACV,IAAoC,EACpC,SAAwB,EACxB,UAA2C;QAE3C,IAAI,SAAS,KAAK,IAAI,EAAE,CAAC;YACxB,IAAI,CAAC,kBAAkB,CAAC,8BAA8B,CAAC,IAAI,CAAC,CAAC;YAC7D,OAAO;QACR,CAAC;QACD,MAAM,IAAA,+CAAkC,EAAC;YACxC,IAAI;YACJ,SAAS;YACT,UAAU,EAAE,IAAI;YAChB,qBAAqB,EAAE,UAAU;SACjC,CAAC,CAAC;QACH,IAAI,IAAI,CAAC,qBAAqB,CAAC,0BAA0B,EAAE,CAAC;YAC3D,MAAM,IAAA,sDAAyC,EAC9C,SAAS,EACT,IAAI,EACJ,IAAI,CAAC,oBAAoB,EACzB,QAAQ,CACR,CAAC;QACH,CAAC;IACF,CAAC;IAEO,KAAK,CAAC,IAAI,CACjB,IAAU,EACV,OAAoC,EACpC,IAAoC,EACpC,SAAwB;QAExB,MAAM,cAAc,GAAG,IAAI,CAAC,eAAe,CAAC,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QACpE,MAAM,QAAQ,GAAG,IAAI,CAAC,iBAAiB;aACrC,wBAAwB,CAAC,OAAO,CAAC,IAAI,CAAC;aACtC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,KAAK,OAAO,CAAC,YAAY,CAAC,CAAC;QACvD,MAAM,UAAU,GAAG,QAAQ,EAAE,WAAW,EAAE,iBAAiB,CAAC;QAC5D,MAAM,MAAM,GACX,UAAU,IAAI,MAAM,CAAC,MAAM,CAAC,cAAc,CAAC,OAAO,EAAE,WAAW,IAAI,EAAE,EAAE,UAAU,CAAC;YACjF,CAAC,CAAC,cAAc,CAAC,OAAO,EAAE,WAAW,EAAE,CAAC,UAAU,CAAC;YACnD,CAAC,CAAC,SAAS,CAAC;QACd,IAAI,QAAQ,EAAE,IAAI,KAAK,SAAS,IAAI,CAAC,MAAM,EAAE,CAAC;YAC7C,MAAM,IAAI,wBAAe,CAAC,wDAAwD,CAAC,CAAC;QACrF,CAAC;QACD,IAAI,CAAC;YACJ,MAAM,cAAc,GAAG,MAAM,IAAA,0CAAO,EAAC,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,SAAS,IAAI,SAAS,EAAE,CAAC,CAAC;YAC7F,MAAM,YAAY,GAAG,MAAM,IAAI,CAAC,iBAAiB,CAAC,0BAA0B,CAC3E,cAAc,EACd,IAAI,EACJ,OAAO,CAAC,IAAI,EACZ,UAAU,EACV,SAAS,EACT,SAAS,CACT,CAAC;YACF,OAAO,MAAM,MAAM,CAAC,YAAY,EAAE,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,eAAe,CAAC,CAAC;QAC5E,CAAC;QAAC,MAAM,CAAC;YAER,MAAM,IAAI,wBAAe,CAAC,oDAAoD,CAAC,CAAC;QACjF,CAAC;IACF,CAAC;CACD,CAAA;;mCA7GY,wBAAwB;IADpC,IAAA,YAAO,GAAE;qCAG0B,kCAAe,EACb,sCAAiB,EAChB,wCAAkB,EACnB,2CAAwB,EACpB,+CAAqB,EACtB,2EAAiC;GAP7D,wBAAwB,CA6GpC"}

package/dist/credentials/credentials.service.d.ts

@@ -143,6 +143,8 @@ export declare class CredentialsService {
         data: ICredentialDataDecryptedObject;
     }): Promise<ICredentialsDb>;
     clearOauthTokenData(credential: CredentialsEntity, actor: PolicyActor): Promise<void>;
+    decryptForUse(credential: CredentialsEntity, actor: PolicyActor, projectId?: string | null): Promise<ICredentialDataDecryptedObject>;
+    enforceCredentialUse(credential: Pick<ICredentialsDecrypted, 'id' | 'type'>, actor: PolicyActor, projectId: string | null): Promise<void>;
     decrypt(credential: CredentialsEntity, includeRawData?: boolean): Promise<ICredentialDataDecryptedObject>;
     update(credentialId: string, newCredentialData: ICredentialsDb, actor: PolicyActor, decryptedCredentialData?: ICredentialDataDecryptedObject, options?: UpdateOptions): Promise<(CredentialsEntity & CredentialConnectionStatus) | null>;
     runInstanceCredentialHooks(event: 'create' | 'update', credential: {
@@ -160,7 +162,8 @@ export declare class CredentialsService {
     findCredentialOwningProject(credentialId: string): Promise<Project | undefined>;
     delete(user: User, credentialId: string, options?: {
         includeInstanceCredentials?: boolean;
-    }): Promise<void>;
+    }): Promise<boolean>;
+    deleteUnowned(user: User, credentialId: string): Promise<void>;
     private emitCredentialDeleted;
     test(userId: User['id'], credentials: ICredentialsDecrypted): Promise<import("n8n-workflow").INodeCredentialTestResult>;
     testById(user: User, credentialId: string): Promise<import("n8n-workflow").INodeCredentialTestResult>;
@@ -280,6 +283,13 @@ export declare class CredentialsService {
     private getValidatedInstanceCredentialHookData;
     validateInstanceCredentialData(data: ICredentialDataDecryptedObject): void;
     validateInstanceCredentialUpdate(credential: Pick<CredentialsEntity, 'id' | 'type'>, data: ICredentialDataDecryptedObject, credentialUseIds?: string[], ctx?: OperationContext): Promise<void>;
-    private prepareCredentialsForTest;
+    prepareCredentialsForUse({ storedCredential, user, credentialsToUse, }: {
+        storedCredential: CredentialsEntity;
+        user: User;
+        credentialsToUse?: ICredentialsDecrypted;
+    }): Promise<{
+        credentials: ICredentialsDecrypted;
+        storedData: ICredentialDataDecryptedObject;
+    }>;
 }
 export {};

package/dist/credentials/credentials.service.ee.d.ts

@@ -5,6 +5,7 @@ import { type EntityManager } from '@n8n/typeorm';
 import type { ICredentialDataDecryptedObject } from 'n8n-workflow';
 import { ExternalSecretsConfig } from '../modules/external-secrets.ee/external-secrets.config';
 import { SecretsProviderAccessCheckService } from '../modules/external-secrets.ee/secret-provider-access-check.service.ee';
+import { PolicyEnforcementService } from '../policy/policy-enforcement.service';
 import { OwnershipService } from '../services/ownership.service';
 import { ProjectService } from '../services/project.service.ee';
 import { RoleService, CredentialsFinderService } from '@n8n/backend-services';
@@ -21,7 +22,8 @@ export declare class EnterpriseCredentialsService {
     private readonly externalSecretsProviderAccessCheckService;
     private readonly licenseState;
     private readonly connectionStatusProxy;
-    constructor(sharedCredentialsRepository: SharedCredentialsRepository, ownershipService: OwnershipService, credentialsService: CredentialsService, projectService: ProjectService, credentialsFinderService: CredentialsFinderService, roleService: RoleService, externalSecretsConfig: ExternalSecretsConfig, externalSecretsProviderAccessCheckService: SecretsProviderAccessCheckService, licenseState: LicenseState, connectionStatusProxy: CredentialConnectionStatusProxy);
+    private readonly policyEnforcementService;
+    constructor(sharedCredentialsRepository: SharedCredentialsRepository, ownershipService: OwnershipService, credentialsService: CredentialsService, projectService: ProjectService, credentialsFinderService: CredentialsFinderService, roleService: RoleService, externalSecretsConfig: ExternalSecretsConfig, externalSecretsProviderAccessCheckService: SecretsProviderAccessCheckService, licenseState: LicenseState, connectionStatusProxy: CredentialConnectionStatusProxy, policyEnforcementService: PolicyEnforcementService);
     shareWithProjects(user: User, credentialId: string, shareWithIds: string[], entityManager?: EntityManager): Promise<SharedCredentials[]>;
     getOne(credentialId: string): Promise<CredentialsEntity | null>;
     getOneForUser(user: User, credentialId: string, includeDecryptedData: boolean): Promise<{

package/dist/credentials/credentials.service.ee.js

@@ -19,6 +19,7 @@ const errors_1 = require("@n8n/errors");
 const transfer_credential_error_1 = require("../errors/response-errors/transfer-credential.error");
 const external_secrets_config_1 = require("../modules/external-secrets.ee/external-secrets.config");
 const secret_provider_access_check_service_ee_1 = require("../modules/external-secrets.ee/secret-provider-access-check.service.ee");
+const policy_enforcement_service_1 = require("../policy/policy-enforcement.service");
 const ownership_service_1 = require("../services/ownership.service");
 const project_service_ee_1 = require("../services/project.service.ee");
 const backend_services_1 = require("@n8n/backend-services");
@@ -26,7 +27,7 @@ const credential_connection_status_proxy_1 = require("./credential-connection-st
 const credentials_service_1 = require("./credentials.service");
 const validation_1 = require("./validation");
 let EnterpriseCredentialsService = class EnterpriseCredentialsService {
-    constructor(sharedCredentialsRepository, ownershipService, credentialsService, projectService, credentialsFinderService, roleService, externalSecretsConfig, externalSecretsProviderAccessCheckService, licenseState, connectionStatusProxy) {
+    constructor(sharedCredentialsRepository, ownershipService, credentialsService, projectService, credentialsFinderService, roleService, externalSecretsConfig, externalSecretsProviderAccessCheckService, licenseState, connectionStatusProxy, policyEnforcementService) {
         this.sharedCredentialsRepository = sharedCredentialsRepository;
         this.ownershipService = ownershipService;
         this.credentialsService = credentialsService;
@@ -37,6 +38,7 @@ let EnterpriseCredentialsService = class EnterpriseCredentialsService {
         this.externalSecretsProviderAccessCheckService = externalSecretsProviderAccessCheckService;
         this.licenseState = licenseState;
         this.connectionStatusProxy = connectionStatusProxy;
+        this.policyEnforcementService = policyEnforcementService;
     }
     async shareWithProjects(user, credentialId, shareWithIds, entityManager) {
         const em = entityManager ?? this.sharedCredentialsRepository.manager;
@@ -137,6 +139,10 @@ let EnterpriseCredentialsService = class EnterpriseCredentialsService {
             this.credentialsService.ensureEndUserCredentialAllowedInProject(destinationProject);
             await this.credentialsService.ensureCanManageEndUserCredential(user, destinationProject.id);
         }
+        await this.policyEnforcementService.enforceCredentialTransfer({
+            credential: { id: credential.id, type: credential.type },
+            targetProjectId: destinationProject.id,
+        }, { kind: 'user', user });
         if (this.licenseState.isExternalSecretsLicensed() &&
             this.externalSecretsConfig.externalSecretsForProjects) {
             const decryptedData = await this.credentialsService.decrypt(credential, true);
@@ -157,6 +163,6 @@ let EnterpriseCredentialsService = class EnterpriseCredentialsService {
 exports.EnterpriseCredentialsService = EnterpriseCredentialsService;
 exports.EnterpriseCredentialsService = EnterpriseCredentialsService = __decorate([
     (0, di_1.Service)(),
-    __metadata("design:paramtypes", [db_1.SharedCredentialsRepository, ownership_service_1.OwnershipService, credentials_service_1.CredentialsService, project_service_ee_1.ProjectService, backend_services_1.CredentialsFinderService, backend_services_1.RoleService, external_secrets_config_1.ExternalSecretsConfig, secret_provider_access_check_service_ee_1.SecretsProviderAccessCheckService, backend_common_1.LicenseState, credential_connection_status_proxy_1.CredentialConnectionStatusProxy])
+    __metadata("design:paramtypes", [db_1.SharedCredentialsRepository, ownership_service_1.OwnershipService, credentials_service_1.CredentialsService, project_service_ee_1.ProjectService, backend_services_1.CredentialsFinderService, backend_services_1.RoleService, external_secrets_config_1.ExternalSecretsConfig, secret_provider_access_check_service_ee_1.SecretsProviderAccessCheckService, backend_common_1.LicenseState, credential_connection_status_proxy_1.CredentialConnectionStatusProxy, policy_enforcement_service_1.PolicyEnforcementService])
 ], EnterpriseCredentialsService);
 //# sourceMappingURL=credentials.service.ee.js.map

package/dist/credentials/credentials.service.ee.js.map

@@ -1 +1 @@
-{"version":3,"file":"credentials.service.ee.js","sourceRoot":"","sources":["../../src/credentials/credentials.service.ee.ts"],"names":[],"mappings":";;;;;;;;;;;;AACA,wDAAmD;AAEnD,gCAKiB;AACjB,gCAAkC;AAClC,kDAAkD;AAClD,0CAAsD;AAGtD,wCAA4C;AAC5C,kGAA6F;AAC7F,mGAA8F;AAC9F,mIAA0H;AAC1H,oEAAgE;AAChE,sEAA+D;AAC/D,4DAA8E;AAE9E,6FAAuF;AACvF,+DAA2D;AAC3D,6CAAyE;AAGlE,IAAM,4BAA4B,GAAlC,MAAM,4BAA4B;IACxC,YACkB,2BAAwD,EACxD,gBAAkC,EAClC,kBAAsC,EACtC,cAA8B,EAC9B,wBAAkD,EAClD,WAAwB,EACxB,qBAA4C,EAC5C,yCAA4E,EAC5E,YAA0B,EAC1B,qBAAsD;2CATtD,2BAA2B;gCAC3B,gBAAgB;kCAChB,kBAAkB;8BAClB,cAAc;wCACd,wBAAwB;2BACxB,WAAW;qCACX,qBAAqB;yDACrB,yCAAyC;4BACzC,YAAY;qCACZ,qBAAqB;IACpC,CAAC;IAEJ,KAAK,CAAC,iBAAiB,CACtB,IAAU,EACV,YAAoB,EACpB,YAAsB,EACtB,aAA6B;QAE7B,MAAM,EAAE,GAAG,aAAa,IAAI,IAAI,CAAC,2BAA2B,CAAC,OAAO,CAAC;QACrE,MAAM,QAAQ,GAAG,MAAM,EAAE,CAAC,MAAM,CAAC,sBAAiB,EAAE;YACnD,KAAK,EAAE,EAAE,EAAE,EAAE,YAAY,EAAE,UAAU,EAAE,SAAS,EAAE;SAClD,CAAC,CAAC;QACH,IAAI,CAAC,QAAQ;YAAE,MAAM,IAAI,sBAAa,CAAC,sBAAsB,CAAC,CAAC;QAE/D,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,cAAc,CAAC,SAAS,EAAE,CAAC,cAAc,CAAC,CAAC,CAAC;QAEjF,IAAI,QAAQ,GAAG,MAAM,EAAE,CAAC,IAAI,CAAC,YAAO,EAAE;YACrC,KAAK,EAAE;gBACN;oBACC,EAAE,EAAE,IAAA,YAAE,EAAC,YAAY,CAAC;oBACpB,IAAI,EAAE,MAAM;oBAGZ,GAAG,CAAC,IAAA,4BAAc,EAAC,IAAI,EAAE,cAAc,CAAC;wBACvC,CAAC,CAAC,EAAE;wBACJ,CAAC,CAAC;4BACA,gBAAgB,EAAE;gCACjB,MAAM,EAAE,IAAI,CAAC,EAAE;gCACf,IAAI,EAAE,IAAA,YAAE,EAAC,KAAK,CAAC;6BACf;yBACD,CAAC;iBACJ;gBACD;oBACC,EAAE,EAAE,IAAA,YAAE,EAAC,YAAY,CAAC;oBACpB,IAAI,EAAE,UAAU;iBAChB;aACD;YACD,SAAS,EAAE,EAAE,iBAAiB,EAAE,IAAI,EAAE;SACtC,CAAC,CAAC;QAEH,QAAQ,GAAG,QAAQ,CAAC,MAAM,CACzB,CAAC,CAAC,EAAE,EAAE,CACL,CAAC,CAAC,CAAC,iBAAiB,CAAC,IAAI,CACxB,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,aAAa,KAAK,YAAY,IAAI,GAAG,CAAC,IAAI,KAAK,kBAAkB,CAC9E,CACF,CAAC;QAEF,MAAM,oBAAoB,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CACrD,IAAI,CAAC,2BAA2B,CAAC,MAAM,CAAC;YACvC,aAAa,EAAE,YAAY;YAC3B,IAAI,EAAE,iBAAiB;YACvB,SAAS,EAAE,OAAO,CAAC,EAAE;SACrB,CAAC,CACF,CAAC;QAEF,OAAO,MAAM,EAAE,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAC;IAC5C,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,YAAoB;QAChC,OAAO,MAAM,IAAI,CAAC,wBAAwB,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC;IACnE,CAAC;IAED,KAAK,CAAC,aAAa,CAAC,IAAU,EAAE,YAAoB,EAAE,oBAA6B;QAClF,IAAI,UAAU,GAA6B,IAAI,CAAC;QAChD,IAAI,aAAa,GAA0C,IAAI,CAAC;QAEhE,UAAU,GAAG,oBAAoB;YAChC,CAAC;gBAEA,MAAM,IAAI,CAAC,wBAAwB,CAAC,qBAAqB,CACxD,YAAY,EACZ,IAAI,EAKJ,CAAC,iBAAiB,EAAE,mBAAmB,CAAC,EACxC,EAAE,0BAA0B,EAAE,IAAI,EAAE,CACpC;YACF,CAAC,CAAC,IAAI,CAAC;QAER,IAAI,UAAU,EAAE,CAAC;YAGhB,aAAa,GAAG,MAAM,IAAI,CAAC,kBAAkB,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;QACnE,CAAC;aAAM,CAAC;YAGP,UAAU,GAAG,MAAM,IAAI,CAAC,wBAAwB,CAAC,qBAAqB,CACrE,YAAY,EACZ,IAAI,EACJ,CAAC,iBAAiB,CAAC,EAGnB,EAAE,0BAA0B,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,EAAE,CAC1D,CAAC;YAKF,IACC,oBAAoB;gBACpB,UAAU,EAAE,YAAY;gBACxB,CAAC,MAAM,IAAI,CAAC,wBAAwB,CAAC,qBAAqB,CACzD,YAAY,EACZ,IAAI,EACJ,CAAC,oBAAoB,CAAC,EACtB,EAAE,0BAA0B,EAAE,IAAI,EAAE,CACpC,CAAC,EACD,CAAC;gBACF,aAAa,GAAG,MAAM,IAAI,CAAC,kBAAkB,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;YACnE,CAAC;QACF,CAAC;QAED,IAAI,CAAC,UAAU,EAAE,CAAC;YACjB,MAAM,IAAI,sBAAa,CACtB,wGAAwG,CACxG,CAAC;QACH,CAAC;QAED,UAAU,GAAG,IAAI,CAAC,gBAAgB,CAAC,uBAAuB,CAAC,UAAU,CAAC,CAAC;QAEvE,MAAM,EAAE,IAAI,EAAE,CAAC,EAAE,GAAG,IAAI,EAAE,GAAG,UAAU,CAAC;QAExC,MAAM,QAAQ,GAA6C,IAAI,CAAC;QAChE,MAAM,IAAI,CAAC,kBAAkB,CAAC,qBAAqB,CAAC,CAAC,QAAQ,CAAC,EAAE,IAAI,CAAC,CAAC;QAEtE,IAAI,UAAU,CAAC,YAAY,EAAE,CAAC;YAC7B,QAAQ,CAAC,kBAAkB,GAAG,MAAM,IAAI,CAAC,kBAAkB,CAAC,mBAAmB,CAC9E,UAAU,CAAC,EAAE,CACb,CAAC;QACH,CAAC;QAED,IAAI,aAAa,EAAE,CAAC;YAGnB,IAAI,UAAU,CAAC,YAAY,EAAE,CAAC;gBAI7B,IAAI,QAAQ,CAAC,aAAa,EAAE,CAAC;oBAC5B,aAAa,CAAC,cAAc,GAAG,IAAI,CAAC;gBACrC,CAAC;qBAAM,CAAC;oBACP,OAAO,aAAa,CAAC,cAAc,CAAC;gBACrC,CAAC;YACF,CAAC;iBAAM,IAAI,aAAa,EAAE,cAAc,EAAE,CAAC;gBAC1C,aAAa,CAAC,cAAc,GAAG,IAAI,CAAC;YACrC,CAAC;YACD,OAAO,EAAE,IAAI,EAAE,aAAa,EAAE,GAAG,QAAQ,EAAE,CAAC;QAC7C,CAAC;QAED,OAAO,EAAE,GAAG,QAAQ,EAAE,CAAC;IACxB,CAAC;IAED,KAAK,CAAC,WAAW,CAAC,IAAU,EAAE,YAAoB,EAAE,oBAA4B;QAE/E,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,wBAAwB,CAAC,qBAAqB,CAC3E,YAAY,EACZ,IAAI,EACJ,CAAC,iBAAiB,CAAC,CACnB,CAAC;QACF,sBAAa,CAAC,mBAAmB,CAChC,UAAU,EACV,8CAA8C,YAAY,kDAAkD,CAC5G,CAAC;QAGF,MAAM,YAAY,GAAG,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,kBAAkB,CAAC,CAAC;QAClF,sBAAa,CAAC,mBAAmB,CAChC,YAAY,EACZ,wCAAwC,UAAU,CAAC,EAAE,GAAG,CACxD,CAAC;QAGF,MAAM,aAAa,GAAG,YAAY,CAAC,OAAO,CAAC;QAG3C,MAAM,kBAAkB,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,mBAAmB,CACvE,IAAI,EACJ,oBAAoB,EACpB,CAAC,mBAAmB,CAAC,CACrB,CAAC;QACF,sBAAa,CAAC,mBAAmB,CAChC,kBAAkB,EAClB,uCAAuC,oBAAoB,mEAAmE,CAC9H,CAAC;QAGF,IAAI,aAAa,CAAC,EAAE,KAAK,kBAAkB,CAAC,EAAE,EAAE,CAAC;YAChD,MAAM,IAAI,mDAAuB,CAChC,4EAA4E,CAC5E,CAAC;QACH,CAAC;QAID,IAAI,UAAU,CAAC,YAAY,EAAE,CAAC;YAC7B,IAAI,CAAC,kBAAkB,CAAC,uCAAuC,CAAC,kBAAkB,CAAC,CAAC;YACpF,MAAM,IAAI,CAAC,kBAAkB,CAAC,gCAAgC,CAAC,IAAI,EAAE,kBAAkB,CAAC,EAAE,CAAC,CAAC;QAC7F,CAAC;QAGD,IACC,IAAI,CAAC,YAAY,CAAC,yBAAyB,EAAE;YAC7C,IAAI,CAAC,qBAAqB,CAAC,0BAA0B,EACpD,CAAC;YACF,MAAM,aAAa,GAAG,MAAM,IAAI,CAAC,kBAAkB,CAAC,OAAO,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC;YAC9E,MAAM,IAAA,sDAAyC,EAC9C,kBAAkB,CAAC,EAAE,EACrB,aAAa,EACb,IAAI,CAAC,yCAAyC,EAC9C,UAAU,CACV,CAAC;QACH,CAAC;QAGD,MAAM,kBAAkB,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,UAAU,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;QAEnF,MAAM,IAAI,CAAC,2BAA2B,CAAC,OAAO,CAAC,WAAW,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE;YAGxE,MAAM,GAAG,CAAC,MAAM,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;YAGpC,MAAM,GAAG,CAAC,IAAI,CACb,GAAG,CAAC,MAAM,CAAC,sBAAiB,EAAE;gBAC7B,aAAa,EAAE,UAAU,CAAC,EAAE;gBAC5B,SAAS,EAAE,kBAAkB,CAAC,EAAE;gBAChC,IAAI,EAAE,kBAAkB;aACxB,CAAC,CACF,CAAC;YAGF,MAAM,IAAI,CAAC,qBAAqB,CAAC,iCAAiC,CACjE,UAAU,CAAC,EAAE,EACb,kBAAkB,EAClB,GAAG,CACH,CAAC;QACH,CAAC,CAAC,CAAC;IACJ,CAAC;CACD,CAAA;;uCA5PY,4BAA4B;IADxC,IAAA,YAAO,GAAE;qCAGsC,gCAA2B,EACtC,oCAAgB,EACd,wCAAkB,EACtB,mCAAc,EACJ,2CAAwB,EACrC,8BAAW,EACD,+CAAqB,EACD,2EAAiC,EAC9D,6BAAY,EACH,oEAA+B;GAX5D,4BAA4B,CA4PxC"}
+{"version":3,"file":"credentials.service.ee.js","sourceRoot":"","sources":["../../src/credentials/credentials.service.ee.ts"],"names":[],"mappings":";;;;;;;;;;;;AACA,wDAAmD;AAEnD,gCAKiB;AACjB,gCAAkC;AAClC,kDAAkD;AAClD,0CAAsD;AAGtD,wCAA4C;AAC5C,kGAA6F;AAC7F,mGAA8F;AAC9F,mIAA0H;AAC1H,oFAA+E;AAC/E,oEAAgE;AAChE,sEAA+D;AAC/D,4DAA8E;AAE9E,6FAAuF;AACvF,+DAA2D;AAC3D,6CAAyE;AAGlE,IAAM,4BAA4B,GAAlC,MAAM,4BAA4B;IACxC,YACkB,2BAAwD,EACxD,gBAAkC,EAClC,kBAAsC,EACtC,cAA8B,EAC9B,wBAAkD,EAClD,WAAwB,EACxB,qBAA4C,EAC5C,yCAA4E,EAC5E,YAA0B,EAC1B,qBAAsD,EACtD,wBAAkD;2CAVlD,2BAA2B;gCAC3B,gBAAgB;kCAChB,kBAAkB;8BAClB,cAAc;wCACd,wBAAwB;2BACxB,WAAW;qCACX,qBAAqB;yDACrB,yCAAyC;4BACzC,YAAY;qCACZ,qBAAqB;wCACrB,wBAAwB;IACvC,CAAC;IAEJ,KAAK,CAAC,iBAAiB,CACtB,IAAU,EACV,YAAoB,EACpB,YAAsB,EACtB,aAA6B;QAE7B,MAAM,EAAE,GAAG,aAAa,IAAI,IAAI,CAAC,2BAA2B,CAAC,OAAO,CAAC;QACrE,MAAM,QAAQ,GAAG,MAAM,EAAE,CAAC,MAAM,CAAC,sBAAiB,EAAE;YACnD,KAAK,EAAE,EAAE,EAAE,EAAE,YAAY,EAAE,UAAU,EAAE,SAAS,EAAE;SAClD,CAAC,CAAC;QACH,IAAI,CAAC,QAAQ;YAAE,MAAM,IAAI,sBAAa,CAAC,sBAAsB,CAAC,CAAC;QAE/D,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,cAAc,CAAC,SAAS,EAAE,CAAC,cAAc,CAAC,CAAC,CAAC;QAEjF,IAAI,QAAQ,GAAG,MAAM,EAAE,CAAC,IAAI,CAAC,YAAO,EAAE;YACrC,KAAK,EAAE;gBACN;oBACC,EAAE,EAAE,IAAA,YAAE,EAAC,YAAY,CAAC;oBACpB,IAAI,EAAE,MAAM;oBAGZ,GAAG,CAAC,IAAA,4BAAc,EAAC,IAAI,EAAE,cAAc,CAAC;wBACvC,CAAC,CAAC,EAAE;wBACJ,CAAC,CAAC;4BACA,gBAAgB,EAAE;gCACjB,MAAM,EAAE,IAAI,CAAC,EAAE;gCACf,IAAI,EAAE,IAAA,YAAE,EAAC,KAAK,CAAC;6BACf;yBACD,CAAC;iBACJ;gBACD;oBACC,EAAE,EAAE,IAAA,YAAE,EAAC,YAAY,CAAC;oBACpB,IAAI,EAAE,UAAU;iBAChB;aACD;YACD,SAAS,EAAE,EAAE,iBAAiB,EAAE,IAAI,EAAE;SACtC,CAAC,CAAC;QAEH,QAAQ,GAAG,QAAQ,CAAC,MAAM,CACzB,CAAC,CAAC,EAAE,EAAE,CACL,CAAC,CAAC,CAAC,iBAAiB,CAAC,IAAI,CACxB,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,aAAa,KAAK,YAAY,IAAI,GAAG,CAAC,IAAI,KAAK,kBAAkB,CAC9E,CACF,CAAC;QAEF,MAAM,oBAAoB,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CACrD,IAAI,CAAC,2BAA2B,CAAC,MAAM,CAAC;YACvC,aAAa,EAAE,YAAY;YAC3B,IAAI,EAAE,iBAAiB;YACvB,SAAS,EAAE,OAAO,CAAC,EAAE;SACrB,CAAC,CACF,CAAC;QAEF,OAAO,MAAM,EAAE,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAC;IAC5C,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,YAAoB;QAChC,OAAO,MAAM,IAAI,CAAC,wBAAwB,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC;IACnE,CAAC;IAED,KAAK,CAAC,aAAa,CAAC,IAAU,EAAE,YAAoB,EAAE,oBAA6B;QAClF,IAAI,UAAU,GAA6B,IAAI,CAAC;QAChD,IAAI,aAAa,GAA0C,IAAI,CAAC;QAEhE,UAAU,GAAG,oBAAoB;YAChC,CAAC;gBAEA,MAAM,IAAI,CAAC,wBAAwB,CAAC,qBAAqB,CACxD,YAAY,EACZ,IAAI,EAKJ,CAAC,iBAAiB,EAAE,mBAAmB,CAAC,EACxC,EAAE,0BAA0B,EAAE,IAAI,EAAE,CACpC;YACF,CAAC,CAAC,IAAI,CAAC;QAER,IAAI,UAAU,EAAE,CAAC;YAGhB,aAAa,GAAG,MAAM,IAAI,CAAC,kBAAkB,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;QACnE,CAAC;aAAM,CAAC;YAGP,UAAU,GAAG,MAAM,IAAI,CAAC,wBAAwB,CAAC,qBAAqB,CACrE,YAAY,EACZ,IAAI,EACJ,CAAC,iBAAiB,CAAC,EAGnB,EAAE,0BAA0B,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,EAAE,CAC1D,CAAC;YAKF,IACC,oBAAoB;gBACpB,UAAU,EAAE,YAAY;gBACxB,CAAC,MAAM,IAAI,CAAC,wBAAwB,CAAC,qBAAqB,CACzD,YAAY,EACZ,IAAI,EACJ,CAAC,oBAAoB,CAAC,EACtB,EAAE,0BAA0B,EAAE,IAAI,EAAE,CACpC,CAAC,EACD,CAAC;gBACF,aAAa,GAAG,MAAM,IAAI,CAAC,kBAAkB,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;YACnE,CAAC;QACF,CAAC;QAED,IAAI,CAAC,UAAU,EAAE,CAAC;YACjB,MAAM,IAAI,sBAAa,CACtB,wGAAwG,CACxG,CAAC;QACH,CAAC;QAED,UAAU,GAAG,IAAI,CAAC,gBAAgB,CAAC,uBAAuB,CAAC,UAAU,CAAC,CAAC;QAEvE,MAAM,EAAE,IAAI,EAAE,CAAC,EAAE,GAAG,IAAI,EAAE,GAAG,UAAU,CAAC;QAExC,MAAM,QAAQ,GAA6C,IAAI,CAAC;QAChE,MAAM,IAAI,CAAC,kBAAkB,CAAC,qBAAqB,CAAC,CAAC,QAAQ,CAAC,EAAE,IAAI,CAAC,CAAC;QAEtE,IAAI,UAAU,CAAC,YAAY,EAAE,CAAC;YAC7B,QAAQ,CAAC,kBAAkB,GAAG,MAAM,IAAI,CAAC,kBAAkB,CAAC,mBAAmB,CAC9E,UAAU,CAAC,EAAE,CACb,CAAC;QACH,CAAC;QAED,IAAI,aAAa,EAAE,CAAC;YAGnB,IAAI,UAAU,CAAC,YAAY,EAAE,CAAC;gBAI7B,IAAI,QAAQ,CAAC,aAAa,EAAE,CAAC;oBAC5B,aAAa,CAAC,cAAc,GAAG,IAAI,CAAC;gBACrC,CAAC;qBAAM,CAAC;oBACP,OAAO,aAAa,CAAC,cAAc,CAAC;gBACrC,CAAC;YACF,CAAC;iBAAM,IAAI,aAAa,EAAE,cAAc,EAAE,CAAC;gBAC1C,aAAa,CAAC,cAAc,GAAG,IAAI,CAAC;YACrC,CAAC;YACD,OAAO,EAAE,IAAI,EAAE,aAAa,EAAE,GAAG,QAAQ,EAAE,CAAC;QAC7C,CAAC;QAED,OAAO,EAAE,GAAG,QAAQ,EAAE,CAAC;IACxB,CAAC;IAED,KAAK,CAAC,WAAW,CAAC,IAAU,EAAE,YAAoB,EAAE,oBAA4B;QAE/E,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,wBAAwB,CAAC,qBAAqB,CAC3E,YAAY,EACZ,IAAI,EACJ,CAAC,iBAAiB,CAAC,CACnB,CAAC;QACF,sBAAa,CAAC,mBAAmB,CAChC,UAAU,EACV,8CAA8C,YAAY,kDAAkD,CAC5G,CAAC;QAGF,MAAM,YAAY,GAAG,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,kBAAkB,CAAC,CAAC;QAClF,sBAAa,CAAC,mBAAmB,CAChC,YAAY,EACZ,wCAAwC,UAAU,CAAC,EAAE,GAAG,CACxD,CAAC;QAGF,MAAM,aAAa,GAAG,YAAY,CAAC,OAAO,CAAC;QAG3C,MAAM,kBAAkB,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,mBAAmB,CACvE,IAAI,EACJ,oBAAoB,EACpB,CAAC,mBAAmB,CAAC,CACrB,CAAC;QACF,sBAAa,CAAC,mBAAmB,CAChC,kBAAkB,EAClB,uCAAuC,oBAAoB,mEAAmE,CAC9H,CAAC;QAGF,IAAI,aAAa,CAAC,EAAE,KAAK,kBAAkB,CAAC,EAAE,EAAE,CAAC;YAChD,MAAM,IAAI,mDAAuB,CAChC,4EAA4E,CAC5E,CAAC;QACH,CAAC;QAID,IAAI,UAAU,CAAC,YAAY,EAAE,CAAC;YAC7B,IAAI,CAAC,kBAAkB,CAAC,uCAAuC,CAAC,kBAAkB,CAAC,CAAC;YACpF,MAAM,IAAI,CAAC,kBAAkB,CAAC,gCAAgC,CAAC,IAAI,EAAE,kBAAkB,CAAC,EAAE,CAAC,CAAC;QAC7F,CAAC;QAED,MAAM,IAAI,CAAC,wBAAwB,CAAC,yBAAyB,CAC5D;YACC,UAAU,EAAE,EAAE,EAAE,EAAE,UAAU,CAAC,EAAE,EAAE,IAAI,EAAE,UAAU,CAAC,IAAI,EAAE;YACxD,eAAe,EAAE,kBAAkB,CAAC,EAAE;SACtC,EACD,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,CACtB,CAAC;QAGF,IACC,IAAI,CAAC,YAAY,CAAC,yBAAyB,EAAE;YAC7C,IAAI,CAAC,qBAAqB,CAAC,0BAA0B,EACpD,CAAC;YACF,MAAM,aAAa,GAAG,MAAM,IAAI,CAAC,kBAAkB,CAAC,OAAO,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC;YAC9E,MAAM,IAAA,sDAAyC,EAC9C,kBAAkB,CAAC,EAAE,EACrB,aAAa,EACb,IAAI,CAAC,yCAAyC,EAC9C,UAAU,CACV,CAAC;QACH,CAAC;QAGD,MAAM,kBAAkB,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,UAAU,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;QAEnF,MAAM,IAAI,CAAC,2BAA2B,CAAC,OAAO,CAAC,WAAW,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE;YAGxE,MAAM,GAAG,CAAC,MAAM,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;YAGpC,MAAM,GAAG,CAAC,IAAI,CACb,GAAG,CAAC,MAAM,CAAC,sBAAiB,EAAE;gBAC7B,aAAa,EAAE,UAAU,CAAC,EAAE;gBAC5B,SAAS,EAAE,kBAAkB,CAAC,EAAE;gBAChC,IAAI,EAAE,kBAAkB;aACxB,CAAC,CACF,CAAC;YAGF,MAAM,IAAI,CAAC,qBAAqB,CAAC,iCAAiC,CACjE,UAAU,CAAC,EAAE,EACb,kBAAkB,EAClB,GAAG,CACH,CAAC;QACH,CAAC,CAAC,CAAC;IACJ,CAAC;CACD,CAAA;;uCArQY,4BAA4B;IADxC,IAAA,YAAO,GAAE;qCAGsC,gCAA2B,EACtC,oCAAgB,EACd,wCAAkB,EACtB,mCAAc,EACJ,2CAAwB,EACrC,8BAAW,EACD,+CAAqB,EACD,2EAAiC,EAC9D,6BAAY,EACH,oEAA+B,EAC5B,qDAAwB;GAZxD,4BAA4B,CAqQxC"}

package/dist/credentials/credentials.service.js

@@ -346,16 +346,16 @@ let CredentialsService = class CredentialsService {
         const personalProject = await this.projectService.getPersonalProject(user);
         if (!personalProject)
             return new Set();
-        const ownedCredentialIds = new Set(candidateCredentials
-            .filter((c) => c.shared.some((s) => s.role === 'credential:owner' && s.projectId === personalProject.id))
+        const personalGrantCredentialIds = new Set(candidateCredentials
+            .filter((c) => c.shared.some((s) => s.projectId === personalProject.id))
             .map((c) => c.id));
-        if (ownedCredentialIds.size === 0)
-            return ownedCredentialIds;
+        if (personalGrantCredentialIds.size === 0)
+            return personalGrantCredentialIds;
         const targetProjectIds = 'workflowId' in options
             ? await this.projectService.findProjectsWorkflowIsIn(options.workflowId)
             : [options.projectId];
         const userIsMemberOfTargetProject = userProjectRelations.some((relation) => targetProjectIds.includes(relation.projectId));
-        return userIsMemberOfTargetProject ? ownedCredentialIds : new Set();
+        return userIsMemberOfTargetProject ? personalGrantCredentialIds : new Set();
     }
     async findAllGlobalCredentialIds(includeData = false) {
         const globalCredentials = await this.credentialsRepository.findAllGlobalCredentials({
@@ -496,6 +496,16 @@ let CredentialsService = class CredentialsService {
         });
         await this.update(credential.id, newCredentialData, actor, decryptedData);
     }
+    async decryptForUse(credential, actor, projectId) {
+        const judgedProjectId = projectId === undefined
+            ? ((await this.findCredentialOwningProject(credential.id))?.id ?? null)
+            : projectId;
+        await this.enforceCredentialUse(credential, actor, judgedProjectId);
+        return await this.decrypt(credential, true);
+    }
+    async enforceCredentialUse(credential, actor, projectId) {
+        await this.policyEnforcementService.enforceCredentialDecrypt({ credentialType: credential.type, credentialId: credential.id, consumer: null, projectId }, actor);
+    }
     async decrypt(credential, includeRawData = false) {
         const coreCredential = (0, credentials_helper_1.createCredentialsFromCredentialsEntity)(credential);
         try {
@@ -696,7 +706,7 @@ let CredentialsService = class CredentialsService {
     async delete(user, credentialId, options = {}) {
         const credential = await this.credentialsFinderService.findCredentialForUser(credentialId, user, ['credential:delete'], options);
         if (!credential) {
-            return;
+            return false;
         }
         let owningProject;
         if (credential.isResolvable) {
@@ -725,10 +735,22 @@ let CredentialsService = class CredentialsService {
             if (result.status === 'deleted') {
                 this.emitCredentialDeleted(user, credential, owningProject?.id);
             }
-            return;
+            return result.status === 'deleted';
         }
         await this.credentialsRepository.remove(credential);
         this.emitCredentialDeleted(user, credential, owningProject?.id);
+        return true;
+    }
+    async deleteUnowned(user, credentialId) {
+        if (!(0, permissions_1.hasGlobalScope)(user, 'credential:delete')) {
+            throw new errors_1.ForbiddenError('You do not have permission to delete credentials without an owner');
+        }
+        const credential = await this.credentialsRepository.findProjectCredentialWithoutOwner(credentialId);
+        if (!credential)
+            return;
+        await this.externalHooks.run('credentials.delete', [credentialId]);
+        await this.credentialsRepository.delete({ id: credential.id });
+        this.emitCredentialDeleted(user, credential, undefined);
     }
     emitCredentialDeleted(user, credential, projectId) {
         this.eventService.emit('credentials-deleted', {
@@ -754,7 +776,7 @@ let CredentialsService = class CredentialsService {
         if (!storedCredential || storedCredential.usageScope !== 'project') {
             throw new credential_not_found_error_1.CredentialNotFoundError(credentialId);
         }
-        const credentials = await this.prepareCredentialsForTest({ storedCredential });
+        const { credentials } = await this.prepareCredentialsForUse({ storedCredential, user });
         return await this.test(user.id, credentials);
     }
     async testWithCredentials(user, credentials) {
@@ -762,14 +784,15 @@ let CredentialsService = class CredentialsService {
         if (!storedCredential) {
             if (credentials.id === '' && (0, permissions_1.hasGlobalScope)(user, 'credential:manageInstance')) {
                 this.validateInstanceCredentialData(credentials.data ?? {});
+                await this.enforceCredentialUse(credentials, { kind: 'user', user }, null);
                 return await this.test(user.id, credentials);
             }
             throw new credential_not_found_error_1.CredentialNotFoundError(credentials.id);
         }
-        const mergedCredentials = await this.prepareCredentialsForTest({
+        const { credentials: mergedCredentials } = await this.prepareCredentialsForUse({
             storedCredential,
             user,
-            credentialsToTest: storedCredential.isManaged ? undefined : credentials,
+            credentialsToUse: storedCredential.isManaged ? undefined : credentials,
         });
         return await this.test(user.id, mergedCredentials);
     }
@@ -778,7 +801,7 @@ let CredentialsService = class CredentialsService {
         if (!storedCredential) {
             throw new credential_not_found_error_1.CredentialNotFoundError(credentialId);
         }
-        const data = await this.decrypt(storedCredential, true);
+        const data = await this.decryptForUse(storedCredential, { kind: 'user', user });
         const testTarget = parseHttpUrl(data.testUrl);
         if (!testTarget) {
             throw new errors_1.BadRequestError('The credential has no test URL to probe');
@@ -1311,17 +1334,20 @@ let CredentialsService = class CredentialsService {
             credentialUse.validate?.({ type: credential.type, data });
         }
     }
-    async prepareCredentialsForTest({ storedCredential, user, credentialsToTest, }) {
-        const decryptedData = await this.decrypt(storedCredential, true);
-        const mergedCredentials = credentialsToTest
-            ? (0, n8n_workflow_1.deepCopy)(credentialsToTest)
+    async prepareCredentialsForUse({ storedCredential, user, credentialsToUse, }) {
+        if (credentialsToUse && credentialsToUse.type !== storedCredential.type) {
+            throw new errors_1.BadRequestError('The credential type does not match the stored credential');
+        }
+        const owningProject = await this.findCredentialOwningProject(storedCredential.id);
+        const decryptedData = await this.decryptForUse(storedCredential, { kind: 'user', user }, owningProject?.id ?? null);
+        const mergedCredentials = credentialsToUse
+            ? (0, n8n_workflow_1.deepCopy)(credentialsToUse)
             : {
                 id: storedCredential.id,
                 name: storedCredential.name,
                 type: storedCredential.type,
                 data: decryptedData,
             };
-        const owningProject = await this.findCredentialOwningProject(storedCredential.id);
         if (!owningProject) {
             mergedCredentials.homeProject = undefined;
         }
@@ -1335,13 +1361,13 @@ let CredentialsService = class CredentialsService {
                 updatedAt: owningProject.updatedAt.toISOString(),
             };
         }
-        if (user && credentialsToTest) {
+        if (credentialsToUse) {
             await this.replaceCredentialContentsForSharee(user, storedCredential, decryptedData, mergedCredentials);
             if (mergedCredentials.data) {
                 mergedCredentials.data = this.unredact(mergedCredentials.data, decryptedData, this.getCredentialTypeProperties(storedCredential.type));
             }
         }
-        return mergedCredentials;
+        return { credentials: mergedCredentials, storedData: decryptedData };
     }
 };
 exports.CredentialsService = CredentialsService;