n8n 2.43.4 → 2.44.1

package/dist/modules/oauth-server/oauth-token.service.d.ts

@@ -10,6 +10,7 @@ import { UrlService } from '@n8n/backend-services';
 import { WorkflowFinderService } from '../../workflows/workflow-finder.service';
 import { AccessTokenRepository } from './database/repositories/oauth-access-token.repository';
 import { RefreshTokenRepository } from './database/repositories/oauth-refresh-token.repository';
+import { OAuthSigningKeyService } from './oauth-signing-key.service';
 export declare class OAuthTokenService implements OAuthTokenVerifier {
     private readonly logger;
     private readonly jwtService;
@@ -20,9 +21,10 @@ export declare class OAuthTokenService implements OAuthTokenVerifier {
     private readonly txRunner;
     private readonly workflowFinderService;
     private readonly urlService;
+    private readonly signingKeyService;
     private readonly ACCESS_TOKEN_EXPIRY_SECONDS;
     private readonly REFRESH_TOKEN_EXPIRY_MS;
-    constructor(logger: Logger, jwtService: JwtService, userRepository: UserRepository, accessTokenRepository: AccessTokenRepository, refreshTokenRepository: RefreshTokenRepository, resourceRegistry: ProtectedResourceRegistry, txRunner: TransactionRunner, workflowFinderService: WorkflowFinderService, urlService: UrlService);
+    constructor(logger: Logger, jwtService: JwtService, userRepository: UserRepository, accessTokenRepository: AccessTokenRepository, refreshTokenRepository: RefreshTokenRepository, resourceRegistry: ProtectedResourceRegistry, txRunner: TransactionRunner, workflowFinderService: WorkflowFinderService, urlService: UrlService, signingKeyService: OAuthSigningKeyService);
     getAccessTokenExpirySeconds(): number;
     generateTokenPair(userId: string, clientId: string, resource: string | undefined, scopes: string[]): {
         accessToken: string;
@@ -35,7 +37,6 @@ export declare class OAuthTokenService implements OAuthTokenVerifier {
     private verifyTokenWithAudiences;
     private parseScopeClaim;
     verifyOAuthAccessToken(token: string, expectedAudience?: string, grant?: OAuthResourceGrant): Promise<UserWithContext>;
-    authorizeSealedGrant(userId: string, grant: OAuthResourceGrant): Promise<boolean>;
     revokeAllTokensForGrant(clientId: string, userId: string): Promise<void>;
     revokeAccessToken(token: string, clientId: string): Promise<boolean>;
     revokeRefreshToken(token: string, clientId: string): Promise<boolean>;
@@ -43,6 +44,7 @@ export declare class OAuthTokenService implements OAuthTokenVerifier {
     private audiencesForResource;
     private isAuthorized;
     private getResourceByAudience;
-    private verifyJwtWithAllowedAudiences;
+    private verifyJwt;
+    private verifyLegacyHmacJwt;
     private getStringClaim;
 }

package/dist/modules/oauth-server/oauth-token.service.js

@@ -16,8 +16,10 @@ const constants_1 = require("@n8n/constants");
 const db_1 = require("@n8n/db");
 const di_1 = require("@n8n/di");
 const ensure_error_1 = require("@n8n/utils/errors/ensure-error");
+const jsonwebtoken_1 = require("jsonwebtoken");
 const n8n_workflow_1 = require("n8n-workflow");
 const node_crypto_1 = require("node:crypto");
+const grant_authorization_1 = require("../../modules/inbound-auth-core/grant-authorization");
 const jwt_service_1 = require("../../services/jwt.service");
 const protected_resource_registry_1 = require("../../services/protected-resource.registry");
 const backend_services_1 = require("@n8n/backend-services");
@@ -25,11 +27,11 @@ const workflow_finder_service_1 = require("../../workflows/workflow-finder.servi
 const oauth_access_token_repository_1 = require("./database/repositories/oauth-access-token.repository");
 const oauth_refresh_token_repository_1 = require("./database/repositories/oauth-refresh-token.repository");
 const oauth_signing_key_constants_1 = require("./oauth-signing-key.constants");
+const oauth_signing_key_service_1 = require("./oauth-signing-key.service");
 const oauth_errors_1 = require("./oauth.errors");
-const resource_gate_1 = require("./resource-gate");
 const resource_identity_1 = require("./resource-identity");
 let OAuthTokenService = class OAuthTokenService {
-    constructor(logger, jwtService, userRepository, accessTokenRepository, refreshTokenRepository, resourceRegistry, txRunner, workflowFinderService, urlService) {
+    constructor(logger, jwtService, userRepository, accessTokenRepository, refreshTokenRepository, resourceRegistry, txRunner, workflowFinderService, urlService, signingKeyService) {
         this.logger = logger;
         this.jwtService = jwtService;
         this.userRepository = userRepository;
@@ -39,6 +41,7 @@ let OAuthTokenService = class OAuthTokenService {
         this.txRunner = txRunner;
         this.workflowFinderService = workflowFinderService;
         this.urlService = urlService;
+        this.signingKeyService = signingKeyService;
         this.ACCESS_TOKEN_EXPIRY_SECONDS = oauth_signing_key_constants_1.OAUTH_ACCESS_TOKEN_TTL_SECONDS;
         this.REFRESH_TOKEN_EXPIRY_MS = 30 * constants_1.Time.days.toMilliseconds;
     }
@@ -50,7 +53,7 @@ let OAuthTokenService = class OAuthTokenService {
         if (!audience) {
             throw new n8n_workflow_1.UnexpectedError('Cannot mint an OAuth access token: no resource requested and no default protected resource is registered');
         }
-        const accessToken = this.jwtService.signForResource({
+        const accessToken = this.signingKeyService.signAccessToken({
             iss: this.urlService.getInstanceBaseUrl(),
             sub: userId,
             client_id: clientId,
@@ -61,12 +64,7 @@ let OAuthTokenService = class OAuthTokenService {
             meta: {
                 isOAuth: true,
             },
-        }, audience, {
-            header: {
-                typ: 'at+jwt',
-                alg: 'HS256',
-            },
-        });
+        }, audience);
         const refreshToken = (0, node_crypto_1.randomBytes)(32).toString('hex');
         return { accessToken, refreshToken, audience };
     }
@@ -133,9 +131,12 @@ let OAuthTokenService = class OAuthTokenService {
     async verifyTokenWithAudiences(token, allowedAudiences) {
         let decoded;
         try {
-            decoded = this.verifyJwtWithAllowedAudiences(token, allowedAudiences);
+            decoded = await this.verifyJwt(token, allowedAudiences);
         }
         catch (error) {
+            this.logger.debug('OAuth access token failed verification', {
+                error: (0, ensure_error_1.ensureError)(error).message,
+            });
             throw new oauth_errors_1.JWTVerificationError();
         }
         const clientId = this.getStringClaim(decoded, 'client_id');
@@ -218,12 +219,6 @@ let OAuthTokenService = class OAuthTokenService {
             };
         }
     }
-    async authorizeSealedGrant(userId, grant) {
-        const user = await this.userRepository.findOne({ where: { id: userId }, relations: ['role'] });
-        if (!user || user.disabled)
-            return false;
-        return await (0, resource_gate_1.authorizeAgainstGrant)(this.workflowFinderService, grant, user);
-    }
     async revokeAllTokensForGrant(clientId, userId) {
         await Promise.all([
             this.accessTokenRepository.delete({ clientId, userId }),
@@ -269,7 +264,7 @@ let OAuthTokenService = class OAuthTokenService {
             return await resource.authorize(user);
         if (!grant)
             return true;
-        return await (0, resource_gate_1.authorizeAgainstGrant)(this.workflowFinderService, grant, user);
+        return await (0, grant_authorization_1.authorizeAgainstGrant)(this.workflowFinderService, grant, user);
     }
     async getResourceByAudience(expectedAudience) {
         if (!expectedAudience) {
@@ -277,14 +272,28 @@ let OAuthTokenService = class OAuthTokenService {
         }
         return await this.resourceRegistry.getByResourceUrl(expectedAudience);
     }
-    verifyJwtWithAllowedAudiences(token, audiences) {
+    async verifyJwt(token, audiences) {
+        const decoded = this.jwtService.decodeUnverifiedWithHeader(token);
+        if (!decoded) {
+            throw new jsonwebtoken_1.JsonWebTokenError('jwt malformed');
+        }
+        if (Object.hasOwn(decoded.header, 'kid')) {
+            return await this.signingKeyService.verifyAccessToken(token, {
+                kid: decoded.header.kid,
+                audiences,
+                issuer: this.urlService.getInstanceBaseUrl(),
+            });
+        }
+        return this.verifyLegacyHmacJwt(token, audiences);
+    }
+    verifyLegacyHmacJwt(token, audiences) {
         try {
-            return this.jwtService.verifyForResource(token, audiences);
+            return this.jwtService.verifyLegacyHmacAccessToken(token, audiences);
         }
         catch (error) {
             for (const audience of audiences) {
                 try {
-                    return this.jwtService.verifyForResource(token, audience);
+                    return this.jwtService.verifyLegacyHmacAccessToken(token, audience);
                 }
                 catch {
                     continue;
@@ -303,6 +312,6 @@ let OAuthTokenService = class OAuthTokenService {
 exports.OAuthTokenService = OAuthTokenService;
 exports.OAuthTokenService = OAuthTokenService = __decorate([
     (0, di_1.Service)(),
-    __metadata("design:paramtypes", [backend_common_1.Logger, jwt_service_1.JwtService, db_1.UserRepository, oauth_access_token_repository_1.AccessTokenRepository, oauth_refresh_token_repository_1.RefreshTokenRepository, protected_resource_registry_1.ProtectedResourceRegistry, db_1.TransactionRunner, workflow_finder_service_1.WorkflowFinderService, backend_services_1.UrlService])
+    __metadata("design:paramtypes", [backend_common_1.Logger, jwt_service_1.JwtService, db_1.UserRepository, oauth_access_token_repository_1.AccessTokenRepository, oauth_refresh_token_repository_1.RefreshTokenRepository, protected_resource_registry_1.ProtectedResourceRegistry, db_1.TransactionRunner, workflow_finder_service_1.WorkflowFinderService, backend_services_1.UrlService, oauth_signing_key_service_1.OAuthSigningKeyService])
 ], OAuthTokenService);
 //# sourceMappingURL=oauth-token.service.js.map

package/dist/modules/oauth-server/oauth-token.service.js.map

@@ -1 +1 @@
-{"version":3,"file":"oauth-token.service.js","sourceRoot":"","sources":["../../../src/modules/oauth-server/oauth-token.service.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,+EAGyD;AAGzD,wDAA6C;AAC7C,8CAAsC;AACtC,gCAAkE;AAClE,gCAAkC;AAClC,iEAA6D;AAE7D,+CAA+C;AAC/C,6CAAsD;AAEtD,wDAAoD;AAMpD,wFAAmF;AACnF,4DAAmD;AACnD,iFAA4E;AAE5E,yGAA8F;AAC9F,2GAAgG;AAChG,+EAA+E;AAC/E,iDAAgF;AAChF,mDAAwD;AACxD,2DAA8D;AAWvD,IAAM,iBAAiB,GAAvB,MAAM,iBAAiB;IAI7B,YACkB,MAAc,EACd,UAAsB,EACtB,cAA8B,EAC9B,qBAA4C,EAC5C,sBAA8C,EAC9C,gBAA2C,EAC3C,QAA2B,EAC3B,qBAA4C,EAC5C,UAAsB;QARtB,WAAM,GAAN,MAAM,CAAQ;QACd,eAAU,GAAV,UAAU,CAAY;QACtB,mBAAc,GAAd,cAAc,CAAgB;QAC9B,0BAAqB,GAArB,qBAAqB,CAAuB;QAC5C,2BAAsB,GAAtB,sBAAsB,CAAwB;QAC9C,qBAAgB,GAAhB,gBAAgB,CAA2B;QAC3C,aAAQ,GAAR,QAAQ,CAAmB;QAC3B,0BAAqB,GAArB,qBAAqB,CAAuB;QAC5C,eAAU,GAAV,UAAU,CAAY;QAZvB,gCAA2B,GAAG,4DAA8B,CAAC;QAC7D,4BAAuB,GAAG,EAAE,GAAG,gBAAI,CAAC,IAAI,CAAC,cAAc,CAAC;IAYtE,CAAC;IAEJ,2BAA2B;QAC1B,OAAO,IAAI,CAAC,2BAA2B,CAAC;IACzC,CAAC;IAOD,iBAAiB,CAChB,MAAc,EACd,QAAgB,EAChB,QAA4B,EAC5B,MAAgB;QAIhB,MAAM,QAAQ,GAAG,QAAQ,IAAI,IAAI,CAAC,gBAAgB,CAAC,kBAAkB,EAAE,EAAE,cAAc,EAAE,CAAC;QAC1F,IAAI,CAAC,QAAQ,EAAE,CAAC;YACf,MAAM,IAAI,8BAAe,CACxB,0GAA0G,CAC1G,CAAC;QACH,CAAC;QAED,MAAM,WAAW,GAAG,IAAI,CAAC,UAAU,CAAC,eAAe,CAClD;YACC,GAAG,EAAE,IAAI,CAAC,UAAU,CAAC,kBAAkB,EAAE;YACzC,GAAG,EAAE,MAAM;YACX,SAAS,EAAE,QAAQ;YACnB,GAAG,EAAE,IAAA,wBAAU,GAAE;YACjB,GAAG,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC;YAClC,GAAG,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC,2BAA2B;YAIrE,KAAK,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC;YACvB,IAAI,EAAE;gBACL,OAAO,EAAE,IAAI;aACb;SACD,EACD,QAAQ,EACR;YACC,MAAM,EAAE;gBACP,GAAG,EAAE,QAAQ;gBACb,GAAG,EAAE,OAAO;aACZ;SACD,CACD,CAAC;QAEF,MAAM,YAAY,GAAG,IAAA,yBAAW,EAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;QAErD,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,QAAQ,EAAE,CAAC;IAChD,CAAC;IAED,KAAK,CAAC,aAAa,CAClB,WAAmB,EACnB,YAAoB,EACpB,QAAgB,EAChB,MAAc,EACd,MAAgB,EAChB,QAAgB;QAEhB,MAAM,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE;YACzC,MAAM,IAAI,CAAC,qBAAqB,CAAC,WAAW,CAAC,EAAE,KAAK,EAAE,WAAW,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,GAAG,CAAC,CAAC;YAC5F,MAAM,IAAI,CAAC,sBAAsB,CAAC,WAAW,CAC5C;gBACC,KAAK,EAAE,YAAY;gBACnB,QAAQ;gBACR,MAAM;gBACN,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,uBAAuB;gBACpD,KAAK,EAAE,MAAM;gBACb,QAAQ;aACR,EACD,GAAG,CACH,CAAC;QACH,CAAC,CAAC,CAAC;IACJ,CAAC;IAOD,KAAK,CAAC,6BAA6B,CAClC,YAAoB,EACpB,QAAgB,EAChB,QAAiB;QAEjB,OAAO,MAAM,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE;YAChD,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;YAEvB,MAAM,kBAAkB,GAAG,MAAM,IAAI,CAAC,sBAAsB,CAAC,WAAW,CACvE,YAAY,EACZ,QAAQ,EACR,GAAG,CACH,CAAC;YAIF,IAAI,CAAC,kBAAkB,EAAE,CAAC;gBACzB,MAAM,IAAI,6BAAiB,CAAC,uBAAuB,CAAC,CAAC;YACtD,CAAC;YAOD,MAAM,eAAe,GAAG,kBAAkB,CAAC,QAAQ,CAAC;YACpD,IACC,QAAQ;gBACR,CAAC,CAAC,MAAM,IAAA,2CAAuB,EAAC,IAAI,CAAC,gBAAgB,EAAE,QAAQ,EAAE,eAAe,CAAC,CAAC,EACjF,CAAC;gBACF,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,6DAA6D,EAAE;oBAC/E,QAAQ;oBACR,MAAM,EAAE,kBAAkB,CAAC,MAAM;iBACjC,CAAC,CAAC;gBACH,MAAM,IAAI,8BAAkB,CAAC,8CAA8C,CAAC,CAAC;YAC9E,CAAC;YAED,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,sBAAsB,CAAC,kBAAkB,CACvE,YAAY,EACZ,QAAQ,EACR,GAAG,EACH,GAAG,CACH,CAAC;YACF,IAAI,WAAW,GAAG,CAAC,EAAE,CAAC;gBACrB,MAAM,IAAI,6BAAiB,CAAC,uBAAuB,CAAC,CAAC;YACtD,CAAC;YAED,MAAM,MAAM,GAAG,kBAAkB,CAAC,KAAK,CAAC;YAIxC,MAAM,EAAE,WAAW,EAAE,YAAY,EAAE,eAAe,EAAE,GAAG,IAAI,CAAC,iBAAiB,CAC5E,kBAAkB,CAAC,MAAM,EACzB,QAAQ,EACR,eAAe,EACf,MAAM,CACN,CAAC;YAEF,MAAM,IAAI,CAAC,qBAAqB,CAAC,WAAW,CAC3C,EAAE,KAAK,EAAE,WAAW,EAAE,QAAQ,EAAE,MAAM,EAAE,kBAAkB,CAAC,MAAM,EAAE,EACnE,GAAG,CACH,CAAC;YAEF,MAAM,IAAI,CAAC,sBAAsB,CAAC,WAAW,CAC5C;gBACC,KAAK,EAAE,eAAe;gBACtB,QAAQ;gBACR,MAAM,EAAE,kBAAkB,CAAC,MAAM;gBACjC,SAAS,EAAE,GAAG,GAAG,IAAI,CAAC,uBAAuB;gBAC7C,KAAK,EAAE,MAAM;gBACb,QAAQ,EAAE,eAAe;aACzB,EACD,GAAG,CACH,CAAC;YAEF,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,mDAAmD,EAAE;gBACrE,QAAQ;gBACR,MAAM,EAAE,kBAAkB,CAAC,MAAM;aACjC,CAAC,CAAC;YAEH,OAAO;gBACN,YAAY,EAAE,WAAW;gBACzB,UAAU,EAAE,QAAQ;gBACpB,UAAU,EAAE,IAAI,CAAC,2BAA2B;gBAC5C,aAAa,EAAE,eAAe;gBAC9B,KAAK,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC;aACvB,CAAC;QACH,CAAC,CAAC,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,iBAAiB,CAAC,KAAa,EAAE,gBAAyB;QAC/D,OAAO,MAAM,IAAI,CAAC,wBAAwB,CACzC,KAAK,EACL,MAAM,IAAI,CAAC,mBAAmB,CAAC,gBAAgB,CAAC,CAChD,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,wBAAwB,CACrC,KAAa,EACb,gBAA0B;QAE1B,IAAI,OAAgB,CAAC;QAErB,IAAI,CAAC;YACJ,OAAO,GAAG,IAAI,CAAC,6BAA6B,CAAC,KAAK,EAAE,gBAAgB,CAAC,CAAC;QACvE,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,MAAM,IAAI,mCAAoB,EAAE,CAAC;QAClC,CAAC;QAED,MAAM,QAAQ,GAAG,IAAI,CAAC,cAAc,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC;QAC3D,MAAM,MAAM,GAAG,IAAI,CAAC,cAAc,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;QACnD,IAAI,CAAC,QAAQ,IAAI,CAAC,MAAM,EAAE,CAAC;YAC1B,MAAM,IAAI,mCAAoB,EAAE,CAAC;QAClC,CAAC;QAED,MAAM,iBAAiB,GAAG,MAAM,IAAI,CAAC,qBAAqB,CAAC,OAAO,CAAC;YAClE,KAAK,EAAE,EAAE,KAAK,EAAE;SAChB,CAAC,CAAC;QAEH,IAAI,CAAC,iBAAiB,EAAE,CAAC;YACxB,MAAM,IAAI,uCAAwB,EAAE,CAAC;QACtC,CAAC;QAED,OAAO;YACN,KAAK;YACL,QAAQ;YACR,MAAM,EAAE,IAAI,CAAC,eAAe,CAAC,OAAO,CAAC;YACrC,KAAK,EAAE;gBACN,MAAM;aACN;SACD,CAAC;IACH,CAAC;IAMO,eAAe,CAAC,OAAgB;QACvC,MAAM,UAAU,GAAG,IAAI,CAAC,cAAc,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QAKzD,IAAI,UAAU,KAAK,IAAI,EAAE,CAAC;YACzB,OAAO,EAAE,CAAC;QACX,CAAC;QAED,OAAO,UAAU,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACvD,CAAC;IAED,KAAK,CAAC,sBAAsB,CAC3B,KAAa,EACb,gBAAyB,EACzB,KAA0B;QAE1B,IAAI,CAAC;YACJ,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,qBAAqB,CAAC,gBAAgB,CAAC,CAAC;YASpE,IAAI,gBAAgB,IAAI,CAAC,QAAQ,IAAI,CAAC,KAAK,EAAE,CAAC;gBAC7C,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,MAAM,EAAE,oBAAoB,EAAE,SAAS,EAAE,OAAO,EAAE,EAAE,CAAC;YACtF,CAAC;YAED,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,wBAAwB,CACnD,KAAK,EACL,QAAQ,IAAI,CAAC,KAAK;gBACjB,CAAC,CAAC,IAAI,CAAC,oBAAoB,CAAC,QAAQ,EAAE,gBAAgB,CAAC;gBACvD,CAAC,CAAC,KAAK,CAAC,SAAS,CAClB,CAAC;YAEF,MAAM,MAAM,GACX,QAAQ,CAAC,KAAK,IAAI,OAAO,QAAQ,CAAC,KAAK,KAAK,QAAQ;gBACnD,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC,KAAK,EAAE,QAAQ,CAAC;gBAC/C,CAAC,CAAC,IAAI,CAAC;YACT,IAAI,CAAC,MAAM,EAAE,CAAC;gBACb,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,MAAM,EAAE,0BAA0B,EAAE,SAAS,EAAE,OAAO,EAAE,EAAE,CAAC;YAC5F,CAAC;YAED,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,OAAO,CAAC;gBAC9C,KAAK,EAAE,EAAE,EAAE,EAAE,MAAM,EAAE;gBACrB,SAAS,EAAE,CAAC,MAAM,CAAC;aACnB,CAAC,CAAC;YAEH,IAAI,CAAC,IAAI,EAAE,CAAC;gBACX,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,MAAM,EAAE,gBAAgB,EAAE,SAAS,EAAE,OAAO,EAAE,EAAE,CAAC;YAClF,CAAC;YAED,IAAI,CAAC,CAAC,MAAM,IAAI,CAAC,YAAY,CAAC,IAAI,EAAE,QAAQ,EAAE,KAAK,CAAC,CAAC,EAAE,CAAC;gBACvD,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,+CAA+C,EAAE;oBACjE,MAAM,EAAE,IAAI,CAAC,EAAE;oBACf,gBAAgB;iBAChB,CAAC,CAAC;gBACH,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,MAAM,EAAE,oBAAoB,EAAE,SAAS,EAAE,OAAO,EAAE,EAAE,CAAC;YACtF,CAAC;YAID,OAAO;gBACN,IAAI;gBACJ,MAAM,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,QAAQ,EAAE,QAAQ,CAAC,QAAQ,EAAE;gBAC1D,MAAM,EAAE,QAAQ,CAAC,MAAM;gBACvB,KAAK,EAAE,QAAQ,EAAE,QAAQ,EAAE,EAAE;aAC7B,CAAC;QACH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,MAAM,YAAY,GAAG,IAAA,0BAAW,EAAC,KAAK,CAAC,CAAC;YACxC,MAAM,MAAM,GACX,YAAY,YAAY,mCAAoB;gBAC3C,CAAC,CAAC,eAAe;gBACjB,CAAC,CAAC,YAAY,YAAY,uCAAwB;oBACjD,CAAC,CAAC,uBAAuB;oBACzB,CAAC,CAAC,eAAe,CAAC;YACrB,OAAO;gBACN,IAAI,EAAE,IAAI;gBACV,OAAO,EAAE;oBACR,MAAM;oBACN,SAAS,EAAE,OAAO;oBAClB,aAAa,EAAE,YAAY,CAAC,OAAO;iBACnC;aACD,CAAC;QACH,CAAC;IACF,CAAC;IAOD,KAAK,CAAC,oBAAoB,CAAC,MAAc,EAAE,KAAyB;QACnE,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,OAAO,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,SAAS,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QAC/F,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,QAAQ;YAAE,OAAO,KAAK,CAAC;QACzC,OAAO,MAAM,IAAA,qCAAqB,EAAC,IAAI,CAAC,qBAAqB,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC;IAC7E,CAAC;IAGD,KAAK,CAAC,uBAAuB,CAAC,QAAgB,EAAE,MAAc;QAC7D,MAAM,OAAO,CAAC,GAAG,CAAC;YACjB,IAAI,CAAC,qBAAqB,CAAC,MAAM,CAAC,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC;YACvD,IAAI,CAAC,sBAAsB,CAAC,MAAM,CAAC,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC;SACxD,CAAC,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,iBAAiB,CAAC,KAAa,EAAE,QAAgB;QACtD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,qBAAqB,CAAC,MAAM,CAAC;YACtD,KAAK;YACL,QAAQ;SACR,CAAC,CAAC;QAEH,MAAM,OAAO,GAAG,CAAC,MAAM,CAAC,QAAQ,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;QAE3C,IAAI,OAAO,EAAE,CAAC;YACb,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,sBAAsB,EAAE,EAAE,QAAQ,EAAE,CAAC,CAAC;QACxD,CAAC;QAED,OAAO,OAAO,CAAC;IAChB,CAAC;IAED,KAAK,CAAC,kBAAkB,CAAC,KAAa,EAAE,QAAgB;QACvD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,sBAAsB,CAAC,MAAM,CAAC;YACvD,KAAK;YACL,QAAQ;SACR,CAAC,CAAC;QAEH,MAAM,OAAO,GAAG,CAAC,MAAM,CAAC,QAAQ,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;QAE3C,IAAI,OAAO,EAAE,CAAC;YACb,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,uBAAuB,EAAE,EAAE,QAAQ,EAAE,CAAC,CAAC;QACzD,CAAC;QAED,OAAO,OAAO,CAAC;IAChB,CAAC;IAWO,KAAK,CAAC,mBAAmB,CAAC,gBAAyB;QAC1D,MAAM,QAAQ,GAAG,gBAAgB;YAChC,CAAC,CAAC,MAAM,IAAI,CAAC,gBAAgB,CAAC,gBAAgB,CAAC,gBAAgB,CAAC;YAChE,CAAC,CAAC,SAAS,CAAC;QACb,OAAO,IAAI,CAAC,oBAAoB,CAAC,QAAQ,EAAE,gBAAgB,CAAC,CAAC;IAC9D,CAAC;IAOO,oBAAoB,CAC3B,QAAuC,EACvC,gBAAyB;QAEzB,IAAI,gBAAgB,EAAE,CAAC;YACtB,OAAO,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC;QAChE,CAAC;QAKD,OAAO,IAAI,CAAC,gBAAgB,CAAC,eAAe,EAAE,CAAC;IAChD,CAAC;IAMO,KAAK,CAAC,YAAY,CACzB,IAAU,EACV,QAAuC,EACvC,KAAqC;QAErC,IAAI,QAAQ;YAAE,OAAO,MAAM,QAAQ,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;QAEpD,IAAI,CAAC,KAAK;YAAE,OAAO,IAAI,CAAC;QAExB,OAAO,MAAM,IAAA,qCAAqB,EAAC,IAAI,CAAC,qBAAqB,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC;IAC7E,CAAC;IAEO,KAAK,CAAC,qBAAqB,CAClC,gBAAyB;QAEzB,IAAI,CAAC,gBAAgB,EAAE,CAAC;YACvB,OAAO,IAAI,CAAC,gBAAgB,CAAC,kBAAkB,EAAE,CAAC;QACnD,CAAC;QACD,OAAO,MAAM,IAAI,CAAC,gBAAgB,CAAC,gBAAgB,CAAC,gBAAgB,CAAC,CAAC;IACvE,CAAC;IAIO,6BAA6B,CAAC,KAAa,EAAE,SAAmB;QACvE,IAAI,CAAC;YACJ,OAAO,IAAI,CAAC,UAAU,CAAC,iBAAiB,CAAC,KAAK,EAAE,SAAkC,CAAC,CAAC;QACrF,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAEhB,KAAK,MAAM,QAAQ,IAAI,SAAS,EAAE,CAAC;gBAClC,IAAI,CAAC;oBACJ,OAAO,IAAI,CAAC,UAAU,CAAC,iBAAiB,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;gBAC3D,CAAC;gBAAC,MAAM,CAAC;oBACR,SAAS;gBACV,CAAC;YACF,CAAC;YAED,MAAM,KAAK,CAAC;QACb,CAAC;IACF,CAAC;IAEO,cAAc,CAAC,OAAgB,EAAE,KAAa;QACrD,IAAI,CAAC,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ;YAAE,OAAO,IAAI,CAAC;QACzD,MAAM,UAAU,GAAI,OAAmC,CAAC,KAAK,CAAC,CAAC;QAC/D,OAAO,OAAO,UAAU,KAAK,QAAQ,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC;IAC3D,CAAC;CACD,CAAA;;4BA5cY,iBAAiB;IAD7B,IAAA,YAAO,GAAE;qCAMiB,uBAAM,EACF,wBAAU,EACN,mBAAc,EACP,qDAAqB,EACpB,uDAAsB,EAC5B,uDAAyB,EACjC,sBAAiB,EACJ,+CAAqB,EAChC,6BAAU;GAb5B,iBAAiB,CA4c7B"}
+{"version":3,"file":"oauth-token.service.js","sourceRoot":"","sources":["../../../src/modules/oauth-server/oauth-token.service.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,+EAGyD;AAGzD,wDAA6C;AAC7C,8CAAsC;AACtC,gCAAkE;AAClE,gCAAkC;AAClC,iEAA6D;AAC7D,+CAAiD;AAEjD,+CAA+C;AAC/C,6CAAsD;AAEtD,yFAAwF;AACxF,wDAAoD;AAMpD,wFAAmF;AACnF,4DAAmD;AACnD,iFAA4E;AAE5E,yGAA8F;AAC9F,2GAAgG;AAChG,+EAA+E;AAC/E,2EAAqE;AACrE,iDAAgF;AAChF,2DAA8D;AAWvD,IAAM,iBAAiB,GAAvB,MAAM,iBAAiB;IAI7B,YACkB,MAAc,EACd,UAAsB,EACtB,cAA8B,EAC9B,qBAA4C,EAC5C,sBAA8C,EAC9C,gBAA2C,EAC3C,QAA2B,EAC3B,qBAA4C,EAC5C,UAAsB,EACtB,iBAAyC;QATzC,WAAM,GAAN,MAAM,CAAQ;QACd,eAAU,GAAV,UAAU,CAAY;QACtB,mBAAc,GAAd,cAAc,CAAgB;QAC9B,0BAAqB,GAArB,qBAAqB,CAAuB;QAC5C,2BAAsB,GAAtB,sBAAsB,CAAwB;QAC9C,qBAAgB,GAAhB,gBAAgB,CAA2B;QAC3C,aAAQ,GAAR,QAAQ,CAAmB;QAC3B,0BAAqB,GAArB,qBAAqB,CAAuB;QAC5C,eAAU,GAAV,UAAU,CAAY;QACtB,sBAAiB,GAAjB,iBAAiB,CAAwB;QAb1C,gCAA2B,GAAG,4DAA8B,CAAC;QAC7D,4BAAuB,GAAG,EAAE,GAAG,gBAAI,CAAC,IAAI,CAAC,cAAc,CAAC;IAatE,CAAC;IAEJ,2BAA2B;QAC1B,OAAO,IAAI,CAAC,2BAA2B,CAAC;IACzC,CAAC;IAOD,iBAAiB,CAChB,MAAc,EACd,QAAgB,EAChB,QAA4B,EAC5B,MAAgB;QAIhB,MAAM,QAAQ,GAAG,QAAQ,IAAI,IAAI,CAAC,gBAAgB,CAAC,kBAAkB,EAAE,EAAE,cAAc,EAAE,CAAC;QAC1F,IAAI,CAAC,QAAQ,EAAE,CAAC;YACf,MAAM,IAAI,8BAAe,CACxB,0GAA0G,CAC1G,CAAC;QACH,CAAC;QAED,MAAM,WAAW,GAAG,IAAI,CAAC,iBAAiB,CAAC,eAAe,CACzD;YACC,GAAG,EAAE,IAAI,CAAC,UAAU,CAAC,kBAAkB,EAAE;YACzC,GAAG,EAAE,MAAM;YACX,SAAS,EAAE,QAAQ;YACnB,GAAG,EAAE,IAAA,wBAAU,GAAE;YACjB,GAAG,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC;YAClC,GAAG,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC,2BAA2B;YAIrE,KAAK,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC;YACvB,IAAI,EAAE;gBACL,OAAO,EAAE,IAAI;aACb;SACD,EACD,QAAQ,CACR,CAAC;QAEF,MAAM,YAAY,GAAG,IAAA,yBAAW,EAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;QAErD,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,QAAQ,EAAE,CAAC;IAChD,CAAC;IAED,KAAK,CAAC,aAAa,CAClB,WAAmB,EACnB,YAAoB,EACpB,QAAgB,EAChB,MAAc,EACd,MAAgB,EAChB,QAAgB;QAEhB,MAAM,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE;YACzC,MAAM,IAAI,CAAC,qBAAqB,CAAC,WAAW,CAAC,EAAE,KAAK,EAAE,WAAW,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,GAAG,CAAC,CAAC;YAC5F,MAAM,IAAI,CAAC,sBAAsB,CAAC,WAAW,CAC5C;gBACC,KAAK,EAAE,YAAY;gBACnB,QAAQ;gBACR,MAAM;gBACN,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,uBAAuB;gBACpD,KAAK,EAAE,MAAM;gBACb,QAAQ;aACR,EACD,GAAG,CACH,CAAC;QACH,CAAC,CAAC,CAAC;IACJ,CAAC;IAOD,KAAK,CAAC,6BAA6B,CAClC,YAAoB,EACpB,QAAgB,EAChB,QAAiB;QAEjB,OAAO,MAAM,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE;YAChD,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;YAEvB,MAAM,kBAAkB,GAAG,MAAM,IAAI,CAAC,sBAAsB,CAAC,WAAW,CACvE,YAAY,EACZ,QAAQ,EACR,GAAG,CACH,CAAC;YAIF,IAAI,CAAC,kBAAkB,EAAE,CAAC;gBACzB,MAAM,IAAI,6BAAiB,CAAC,uBAAuB,CAAC,CAAC;YACtD,CAAC;YAOD,MAAM,eAAe,GAAG,kBAAkB,CAAC,QAAQ,CAAC;YACpD,IACC,QAAQ;gBACR,CAAC,CAAC,MAAM,IAAA,2CAAuB,EAAC,IAAI,CAAC,gBAAgB,EAAE,QAAQ,EAAE,eAAe,CAAC,CAAC,EACjF,CAAC;gBACF,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,6DAA6D,EAAE;oBAC/E,QAAQ;oBACR,MAAM,EAAE,kBAAkB,CAAC,MAAM;iBACjC,CAAC,CAAC;gBACH,MAAM,IAAI,8BAAkB,CAAC,8CAA8C,CAAC,CAAC;YAC9E,CAAC;YAED,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,sBAAsB,CAAC,kBAAkB,CACvE,YAAY,EACZ,QAAQ,EACR,GAAG,EACH,GAAG,CACH,CAAC;YACF,IAAI,WAAW,GAAG,CAAC,EAAE,CAAC;gBACrB,MAAM,IAAI,6BAAiB,CAAC,uBAAuB,CAAC,CAAC;YACtD,CAAC;YAED,MAAM,MAAM,GAAG,kBAAkB,CAAC,KAAK,CAAC;YAIxC,MAAM,EAAE,WAAW,EAAE,YAAY,EAAE,eAAe,EAAE,GAAG,IAAI,CAAC,iBAAiB,CAC5E,kBAAkB,CAAC,MAAM,EACzB,QAAQ,EACR,eAAe,EACf,MAAM,CACN,CAAC;YAEF,MAAM,IAAI,CAAC,qBAAqB,CAAC,WAAW,CAC3C,EAAE,KAAK,EAAE,WAAW,EAAE,QAAQ,EAAE,MAAM,EAAE,kBAAkB,CAAC,MAAM,EAAE,EACnE,GAAG,CACH,CAAC;YAEF,MAAM,IAAI,CAAC,sBAAsB,CAAC,WAAW,CAC5C;gBACC,KAAK,EAAE,eAAe;gBACtB,QAAQ;gBACR,MAAM,EAAE,kBAAkB,CAAC,MAAM;gBACjC,SAAS,EAAE,GAAG,GAAG,IAAI,CAAC,uBAAuB;gBAC7C,KAAK,EAAE,MAAM;gBACb,QAAQ,EAAE,eAAe;aACzB,EACD,GAAG,CACH,CAAC;YAEF,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,mDAAmD,EAAE;gBACrE,QAAQ;gBACR,MAAM,EAAE,kBAAkB,CAAC,MAAM;aACjC,CAAC,CAAC;YAEH,OAAO;gBACN,YAAY,EAAE,WAAW;gBACzB,UAAU,EAAE,QAAQ;gBACpB,UAAU,EAAE,IAAI,CAAC,2BAA2B;gBAC5C,aAAa,EAAE,eAAe;gBAC9B,KAAK,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC;aACvB,CAAC;QACH,CAAC,CAAC,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,iBAAiB,CAAC,KAAa,EAAE,gBAAyB;QAC/D,OAAO,MAAM,IAAI,CAAC,wBAAwB,CACzC,KAAK,EACL,MAAM,IAAI,CAAC,mBAAmB,CAAC,gBAAgB,CAAC,CAChD,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,wBAAwB,CACrC,KAAa,EACb,gBAA0B;QAE1B,IAAI,OAAgB,CAAC;QAErB,IAAI,CAAC;YACJ,OAAO,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,gBAAgB,CAAC,CAAC;QACzD,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,wCAAwC,EAAE;gBAC3D,KAAK,EAAE,IAAA,0BAAW,EAAC,KAAK,CAAC,CAAC,OAAO;aACjC,CAAC,CAAC;YACH,MAAM,IAAI,mCAAoB,EAAE,CAAC;QAClC,CAAC;QAED,MAAM,QAAQ,GAAG,IAAI,CAAC,cAAc,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC;QAC3D,MAAM,MAAM,GAAG,IAAI,CAAC,cAAc,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;QACnD,IAAI,CAAC,QAAQ,IAAI,CAAC,MAAM,EAAE,CAAC;YAC1B,MAAM,IAAI,mCAAoB,EAAE,CAAC;QAClC,CAAC;QAED,MAAM,iBAAiB,GAAG,MAAM,IAAI,CAAC,qBAAqB,CAAC,OAAO,CAAC;YAClE,KAAK,EAAE,EAAE,KAAK,EAAE;SAChB,CAAC,CAAC;QAEH,IAAI,CAAC,iBAAiB,EAAE,CAAC;YACxB,MAAM,IAAI,uCAAwB,EAAE,CAAC;QACtC,CAAC;QAED,OAAO;YACN,KAAK;YACL,QAAQ;YACR,MAAM,EAAE,IAAI,CAAC,eAAe,CAAC,OAAO,CAAC;YACrC,KAAK,EAAE;gBACN,MAAM;aACN;SACD,CAAC;IACH,CAAC;IAMO,eAAe,CAAC,OAAgB;QACvC,MAAM,UAAU,GAAG,IAAI,CAAC,cAAc,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QAKzD,IAAI,UAAU,KAAK,IAAI,EAAE,CAAC;YACzB,OAAO,EAAE,CAAC;QACX,CAAC;QAED,OAAO,UAAU,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACvD,CAAC;IAED,KAAK,CAAC,sBAAsB,CAC3B,KAAa,EACb,gBAAyB,EACzB,KAA0B;QAE1B,IAAI,CAAC;YACJ,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,qBAAqB,CAAC,gBAAgB,CAAC,CAAC;YASpE,IAAI,gBAAgB,IAAI,CAAC,QAAQ,IAAI,CAAC,KAAK,EAAE,CAAC;gBAC7C,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,MAAM,EAAE,oBAAoB,EAAE,SAAS,EAAE,OAAO,EAAE,EAAE,CAAC;YACtF,CAAC;YAED,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,wBAAwB,CACnD,KAAK,EACL,QAAQ,IAAI,CAAC,KAAK;gBACjB,CAAC,CAAC,IAAI,CAAC,oBAAoB,CAAC,QAAQ,EAAE,gBAAgB,CAAC;gBACvD,CAAC,CAAC,KAAK,CAAC,SAAS,CAClB,CAAC;YAEF,MAAM,MAAM,GACX,QAAQ,CAAC,KAAK,IAAI,OAAO,QAAQ,CAAC,KAAK,KAAK,QAAQ;gBACnD,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC,KAAK,EAAE,QAAQ,CAAC;gBAC/C,CAAC,CAAC,IAAI,CAAC;YACT,IAAI,CAAC,MAAM,EAAE,CAAC;gBACb,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,MAAM,EAAE,0BAA0B,EAAE,SAAS,EAAE,OAAO,EAAE,EAAE,CAAC;YAC5F,CAAC;YAED,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,OAAO,CAAC;gBAC9C,KAAK,EAAE,EAAE,EAAE,EAAE,MAAM,EAAE;gBACrB,SAAS,EAAE,CAAC,MAAM,CAAC;aACnB,CAAC,CAAC;YAEH,IAAI,CAAC,IAAI,EAAE,CAAC;gBACX,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,MAAM,EAAE,gBAAgB,EAAE,SAAS,EAAE,OAAO,EAAE,EAAE,CAAC;YAClF,CAAC;YAED,IAAI,CAAC,CAAC,MAAM,IAAI,CAAC,YAAY,CAAC,IAAI,EAAE,QAAQ,EAAE,KAAK,CAAC,CAAC,EAAE,CAAC;gBACvD,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,+CAA+C,EAAE;oBACjE,MAAM,EAAE,IAAI,CAAC,EAAE;oBACf,gBAAgB;iBAChB,CAAC,CAAC;gBACH,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,MAAM,EAAE,oBAAoB,EAAE,SAAS,EAAE,OAAO,EAAE,EAAE,CAAC;YACtF,CAAC;YAID,OAAO;gBACN,IAAI;gBACJ,MAAM,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,QAAQ,EAAE,QAAQ,CAAC,QAAQ,EAAE;gBAC1D,MAAM,EAAE,QAAQ,CAAC,MAAM;gBACvB,KAAK,EAAE,QAAQ,EAAE,QAAQ,EAAE,EAAE;aAC7B,CAAC;QACH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,MAAM,YAAY,GAAG,IAAA,0BAAW,EAAC,KAAK,CAAC,CAAC;YACxC,MAAM,MAAM,GACX,YAAY,YAAY,mCAAoB;gBAC3C,CAAC,CAAC,eAAe;gBACjB,CAAC,CAAC,YAAY,YAAY,uCAAwB;oBACjD,CAAC,CAAC,uBAAuB;oBACzB,CAAC,CAAC,eAAe,CAAC;YACrB,OAAO;gBACN,IAAI,EAAE,IAAI;gBACV,OAAO,EAAE;oBACR,MAAM;oBACN,SAAS,EAAE,OAAO;oBAClB,aAAa,EAAE,YAAY,CAAC,OAAO;iBACnC;aACD,CAAC;QACH,CAAC;IACF,CAAC;IAGD,KAAK,CAAC,uBAAuB,CAAC,QAAgB,EAAE,MAAc;QAC7D,MAAM,OAAO,CAAC,GAAG,CAAC;YACjB,IAAI,CAAC,qBAAqB,CAAC,MAAM,CAAC,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC;YACvD,IAAI,CAAC,sBAAsB,CAAC,MAAM,CAAC,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC;SACxD,CAAC,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,iBAAiB,CAAC,KAAa,EAAE,QAAgB;QACtD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,qBAAqB,CAAC,MAAM,CAAC;YACtD,KAAK;YACL,QAAQ;SACR,CAAC,CAAC;QAEH,MAAM,OAAO,GAAG,CAAC,MAAM,CAAC,QAAQ,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;QAE3C,IAAI,OAAO,EAAE,CAAC;YACb,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,sBAAsB,EAAE,EAAE,QAAQ,EAAE,CAAC,CAAC;QACxD,CAAC;QAED,OAAO,OAAO,CAAC;IAChB,CAAC;IAED,KAAK,CAAC,kBAAkB,CAAC,KAAa,EAAE,QAAgB;QACvD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,sBAAsB,CAAC,MAAM,CAAC;YACvD,KAAK;YACL,QAAQ;SACR,CAAC,CAAC;QAEH,MAAM,OAAO,GAAG,CAAC,MAAM,CAAC,QAAQ,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;QAE3C,IAAI,OAAO,EAAE,CAAC;YACb,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,uBAAuB,EAAE,EAAE,QAAQ,EAAE,CAAC,CAAC;QACzD,CAAC;QAED,OAAO,OAAO,CAAC;IAChB,CAAC;IAWO,KAAK,CAAC,mBAAmB,CAAC,gBAAyB;QAC1D,MAAM,QAAQ,GAAG,gBAAgB;YAChC,CAAC,CAAC,MAAM,IAAI,CAAC,gBAAgB,CAAC,gBAAgB,CAAC,gBAAgB,CAAC;YAChE,CAAC,CAAC,SAAS,CAAC;QACb,OAAO,IAAI,CAAC,oBAAoB,CAAC,QAAQ,EAAE,gBAAgB,CAAC,CAAC;IAC9D,CAAC;IAOO,oBAAoB,CAC3B,QAAuC,EACvC,gBAAyB;QAEzB,IAAI,gBAAgB,EAAE,CAAC;YACtB,OAAO,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC;QAChE,CAAC;QAKD,OAAO,IAAI,CAAC,gBAAgB,CAAC,eAAe,EAAE,CAAC;IAChD,CAAC;IAMO,KAAK,CAAC,YAAY,CACzB,IAAU,EACV,QAAuC,EACvC,KAAqC;QAErC,IAAI,QAAQ;YAAE,OAAO,MAAM,QAAQ,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;QAEpD,IAAI,CAAC,KAAK;YAAE,OAAO,IAAI,CAAC;QAExB,OAAO,MAAM,IAAA,2CAAqB,EAAC,IAAI,CAAC,qBAAqB,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC;IAC7E,CAAC;IAEO,KAAK,CAAC,qBAAqB,CAClC,gBAAyB;QAEzB,IAAI,CAAC,gBAAgB,EAAE,CAAC;YACvB,OAAO,IAAI,CAAC,gBAAgB,CAAC,kBAAkB,EAAE,CAAC;QACnD,CAAC;QACD,OAAO,MAAM,IAAI,CAAC,gBAAgB,CAAC,gBAAgB,CAAC,gBAAgB,CAAC,CAAC;IACvE,CAAC;IAOO,KAAK,CAAC,SAAS,CAAC,KAAa,EAAE,SAAmB;QACzD,MAAM,OAAO,GAAG,IAAI,CAAC,UAAU,CAAC,0BAA0B,CAAC,KAAK,CAAC,CAAC;QAClE,IAAI,CAAC,OAAO,EAAE,CAAC;YACd,MAAM,IAAI,gCAAiB,CAAC,eAAe,CAAC,CAAC;QAC9C,CAAC;QAED,IAAI,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,EAAE,KAAK,CAAC,EAAE,CAAC;YAC1C,OAAO,MAAM,IAAI,CAAC,iBAAiB,CAAC,iBAAiB,CAAC,KAAK,EAAE;gBAC5D,GAAG,EAAE,OAAO,CAAC,MAAM,CAAC,GAAG;gBACvB,SAAS;gBACT,MAAM,EAAE,IAAI,CAAC,UAAU,CAAC,kBAAkB,EAAE;aAC5C,CAAC,CAAC;QACJ,CAAC;QAED,OAAO,IAAI,CAAC,mBAAmB,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC;IACnD,CAAC;IAKO,mBAAmB,CAAC,KAAa,EAAE,SAAmB;QAC7D,IAAI,CAAC;YACJ,OAAO,IAAI,CAAC,UAAU,CAAC,2BAA2B,CAAC,KAAK,EAAE,SAAkC,CAAC,CAAC;QAC/F,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAEhB,KAAK,MAAM,QAAQ,IAAI,SAAS,EAAE,CAAC;gBAClC,IAAI,CAAC;oBACJ,OAAO,IAAI,CAAC,UAAU,CAAC,2BAA2B,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;gBACrE,CAAC;gBAAC,MAAM,CAAC;oBACR,SAAS;gBACV,CAAC;YACF,CAAC;YAED,MAAM,KAAK,CAAC;QACb,CAAC;IACF,CAAC;IAEO,cAAc,CAAC,OAAgB,EAAE,KAAa;QACrD,IAAI,CAAC,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ;YAAE,OAAO,IAAI,CAAC;QACzD,MAAM,UAAU,GAAI,OAAmC,CAAC,KAAK,CAAC,CAAC;QAC/D,OAAO,OAAO,UAAU,KAAK,QAAQ,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC;IAC3D,CAAC;CACD,CAAA;;4BAtdY,iBAAiB;IAD7B,IAAA,YAAO,GAAE;qCAMiB,uBAAM,EACF,wBAAU,EACN,mBAAc,EACP,qDAAqB,EACpB,uDAAsB,EAC5B,uDAAyB,EACjC,sBAAiB,EACJ,+CAAqB,EAChC,6BAAU,EACH,kDAAsB;GAd/C,iBAAiB,CAsd7B"}

package/dist/modules/oauth-server/oauth.controller.d.ts

@@ -2,14 +2,16 @@ import { StaticRouterMetadata } from '@n8n/decorators';
 import type { Response, Request } from 'express';
 import { ProtectedResourceRegistry } from '../../services/protected-resource.registry';
 import { UrlService } from '@n8n/backend-services';
+import { OAuthServerLocalAuthorizationServer } from './oauth-local-authorization-server';
 export declare class OAuthController {
     private readonly urlService;
     private readonly resourceRegistry;
-    constructor(urlService: UrlService, resourceRegistry: ProtectedResourceRegistry);
+    private readonly localServer;
+    constructor(urlService: UrlService, resourceRegistry: ProtectedResourceRegistry, localServer: OAuthServerLocalAuthorizationServer);
     private setCorsHeaders;
     static routers: StaticRouterMetadata[];
     metadataOptions(_req: Request, res: Response): void;
-    metadata(_req: Request, res: Response): void;
+    metadata(_req: Request, res: Response): Promise<void>;
     pathInsertedMetadataOptions(_req: Request, res: Response): void;
     pathInsertedMetadata(_req: Request, res: Response): void;
     protectedResourceMetadataOptions(_req: Request, res: Response): void;

package/dist/modules/oauth-server/oauth.controller.js

@@ -21,6 +21,7 @@ const decorators_1 = require("@n8n/decorators");
 const di_1 = require("@n8n/di");
 const protected_resource_registry_1 = require("../../services/protected-resource.registry");
 const backend_services_1 = require("@n8n/backend-services");
+const oauth_local_authorization_server_1 = require("./oauth-local-authorization-server");
 const oauth_server_config_1 = require("./oauth-server.config");
 const oauth_server_service_1 = require("./oauth-server.service");
 const oauth_errors_1 = require("./oauth.errors");
@@ -51,10 +52,17 @@ const rfc9207IssuerParam = (_req, res, next) => {
 };
 const registerRouter = (0, register_js_1.clientRegistrationHandler)({
     clientsStore: oauthServerService.clientsStore,
+    rateLimit: false,
+});
+const authorizeRouter = (0, authorize_js_1.authorizationHandler)({
+    provider: oauthServerService,
+    rateLimit: false,
+});
+const tokenRouter = (0, token_js_1.tokenHandler)({ provider: oauthServerService, rateLimit: false });
+const revokeRouter = (0, revoke_js_1.revocationHandler)({
+    provider: oauthServerService,
+    rateLimit: false,
 });
-const authorizeRouter = (0, authorize_js_1.authorizationHandler)({ provider: oauthServerService });
-const tokenRouter = (0, token_js_1.tokenHandler)({ provider: oauthServerService });
-const revokeRouter = (0, revoke_js_1.revocationHandler)({ provider: oauthServerService });
 const sharedEndpointRouters = (basePath) => [
     {
         path: `${basePath}/register`,
@@ -86,9 +94,10 @@ const sharedEndpointRouters = (basePath) => [
 const discoverableResource = async (resource) => resource && ((await resource.isAvailable?.()) ?? true) ? resource : undefined;
 const wellKnownIpRateLimit = (0, decorators_1.createIpRateLimit)(oauthServerConfig.rateLimitWellKnown, 5 * constants_1.Time.minutes.toMilliseconds);
 let OAuthController = class OAuthController {
-    constructor(urlService, resourceRegistry) {
+    constructor(urlService, resourceRegistry, localServer) {
         this.urlService = urlService;
         this.resourceRegistry = resourceRegistry;
+        this.localServer = localServer;
     }
     setCorsHeaders(res) {
         res.header('Access-Control-Allow-Origin', '*');
@@ -99,27 +108,9 @@ let OAuthController = class OAuthController {
         this.setCorsHeaders(res);
         res.status(204).end();
     }
-    metadata(_req, res) {
+    async metadata(_req, res) {
         this.setCorsHeaders(res);
-        const baseUrl = this.urlService.getInstanceBaseUrl();
-        const allScopes = this.resourceRegistry.getAllScopes();
-        const metadata = {
-            issuer: baseUrl,
-            authorization_endpoint: `${baseUrl}/mcp-oauth/authorize`,
-            token_endpoint: `${baseUrl}/mcp-oauth/token`,
-            registration_endpoint: `${baseUrl}/mcp-oauth/register`,
-            revocation_endpoint: `${baseUrl}/mcp-oauth/revoke`,
-            jwks_uri: this.urlService.getInstanceJwksUri(),
-            response_types_supported: ['code'],
-            grant_types_supported: ['authorization_code', 'refresh_token'],
-            token_endpoint_auth_methods_supported: ['none', 'client_secret_post', 'client_secret_basic'],
-            code_challenge_methods_supported: ['S256'],
-            authorization_response_iss_parameter_supported: true,
-        };
-        if (allScopes.length > 0) {
-            metadata.scopes_supported = allScopes;
-        }
-        res.json(metadata);
+        res.json(await this.localServer.getMetadata());
     }
     pathInsertedMetadataOptions(_req, res) {
         this.setCorsHeaders(res);
@@ -197,7 +188,7 @@ __decorate([
     }),
     __metadata("design:type", Function),
     __metadata("design:paramtypes", [Object, Object]),
-    __metadata("design:returntype", void 0)
+    __metadata("design:returntype", Promise)
 ], OAuthController.prototype, "metadata", null);
 __decorate([
     (0, decorators_1.Options)('/.well-known/oauth-authorization-server/*issuerPath', {
@@ -261,6 +252,6 @@ __decorate([
 ], OAuthController.prototype, "defaultProtectedResourceMetadata", null);
 exports.OAuthController = OAuthController = __decorate([
     (0, decorators_1.RootLevelController)('/'),
-    __metadata("design:paramtypes", [backend_services_1.UrlService, protected_resource_registry_1.ProtectedResourceRegistry])
+    __metadata("design:paramtypes", [backend_services_1.UrlService, protected_resource_registry_1.ProtectedResourceRegistry, oauth_local_authorization_server_1.OAuthServerLocalAuthorizationServer])
 ], OAuthController);
 //# sourceMappingURL=oauth.controller.js.map

package/dist/modules/oauth-server/oauth.controller.js.map

@@ -1 +1 @@
-{"version":3,"file":"oauth.controller.js","sourceRoot":"","sources":["../../../src/modules/oauth-server/oauth.controller.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,8FAAmG;AACnG,4FAAuG;AACvG,wFAA6F;AAC7F,sFAAuF;AACvF,wDAA6C;AAC7C,wCAA2C;AAC3C,8CAAsC;AACtC,gDAMyB;AACzB,gCAAoC;AAIpC,wFAAmF;AACnF,4DAAmD;AAEnD,+DAA0D;AAC1D,iEAA4D;AAC5D,iDAAqE;AACrE,mDAA+C;AAE/C,MAAM,kBAAkB,GAAG,cAAS,CAAC,GAAG,CAAC,yCAAkB,CAAC,CAAC;AAC7D,MAAM,YAAY,GAAG,cAAS,CAAC,GAAG,CAAC,qBAAY,CAAC,CAAC;AACjD,MAAM,iBAAiB,GAAG,cAAS,CAAC,GAAG,CAAC,uCAAiB,CAAC,CAAC;AAC3D,MAAM,MAAM,GAAG,cAAS,CAAC,GAAG,CAAC,uBAAM,CAAC,CAAC;AACrC,MAAM,UAAU,GAAG,cAAS,CAAC,GAAG,CAAC,6BAAU,CAAC,CAAC;AAc7C,MAAM,qBAAqB,GAAmB,KAAK,EAAE,IAAI,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE;IACvE,IAAI,MAAM,kBAAkB,CAAC,oBAAoB,EAAE,EAAE,CAAC;QACrD,MAAM,KAAK,GAAG,YAAY,CAAC,SAAS,CAAC,uBAAuB,CAAC;QAC7D,MAAM,CAAC,IAAI,CAAC,wEAAwE,EAAE;YACrF,KAAK;SACL,CAAC,CAAC;QACH,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;YACpB,KAAK,EAAE,cAAc;YACrB,iBAAiB,EAAE,IAAA,kDAAmC,EAAC,KAAK,CAAC;SAC7D,CAAC,CAAC;QACH,OAAO;IACR,CAAC;IACD,IAAI,EAAE,CAAC;AACR,CAAC,CAAC;AAcF,MAAM,kBAAkB,GAAmB,CAAC,IAAI,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE;IAC9D,MAAM,gBAAgB,GAAG,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAChD,GAAG,CAAC,QAAQ,GAAG,CAAC,GAAW,EAAE,EAAE,CAC9B,gBAAgB,CAAC,4BAAY,CAAC,cAAc,CAAC,GAAG,EAAE,UAAU,CAAC,kBAAkB,EAAE,CAAC,CAAC,CAAC;IACrF,IAAI,EAAE,CAAC;AACR,CAAC,CAAC;AAKF,MAAM,cAAc,GAAG,IAAA,uCAAyB,EAAC;IAChD,YAAY,EAAE,kBAAkB,CAAC,YAAY;CAC7C,CAAW,CAAC;AACb,MAAM,eAAe,GAAG,IAAA,mCAAoB,EAAC,EAAE,QAAQ,EAAE,kBAAkB,EAAE,CAAW,CAAC;AACzF,MAAM,WAAW,GAAG,IAAA,uBAAY,EAAC,EAAE,QAAQ,EAAE,kBAAkB,EAAE,CAAW,CAAC;AAC7E,MAAM,YAAY,GAAG,IAAA,6BAAiB,EAAC,EAAE,QAAQ,EAAE,kBAAkB,EAAE,CAAW,CAAC;AAEnF,MAAM,qBAAqB,GAAG,CAAC,QAAiC,EAA0B,EAAE,CAAC;IAC5F;QACC,IAAI,EAAE,GAAG,QAAQ,WAAW;QAC5B,MAAM,EAAE,cAAc;QACtB,QAAQ,EAAE,IAAI;QACd,WAAW,EAAE,CAAC,qBAAqB,CAAC;QACpC,WAAW,EAAE,IAAA,8BAAiB,EAC7B,iBAAiB,CAAC,iBAAiB,EACnC,CAAC,GAAG,gBAAI,CAAC,OAAO,CAAC,cAAc,CAC/B;KACD;IACD;QACC,IAAI,EAAE,GAAG,QAAQ,YAAY;QAC7B,MAAM,EAAE,eAAe;QACvB,QAAQ,EAAE,IAAI;QACd,WAAW,EAAE,CAAC,kBAAkB,CAAC;QACjC,WAAW,EAAE,IAAA,8BAAiB,EAC7B,iBAAiB,CAAC,kBAAkB,EACpC,CAAC,GAAG,gBAAI,CAAC,OAAO,CAAC,cAAc,CAC/B;KACD;IACD;QACC,IAAI,EAAE,GAAG,QAAQ,QAAQ;QACzB,MAAM,EAAE,WAAW;QACnB,QAAQ,EAAE,IAAI;QACd,WAAW,EAAE,IAAA,8BAAiB,EAC7B,iBAAiB,CAAC,cAAc,EAChC,CAAC,GAAG,gBAAI,CAAC,OAAO,CAAC,cAAc,CAC/B;KACD;IACD;QACC,IAAI,EAAE,GAAG,QAAQ,SAAS;QAC1B,MAAM,EAAE,YAAY;QACpB,QAAQ,EAAE,IAAI;QACd,WAAW,EAAE,IAAA,8BAAiB,EAC7B,iBAAiB,CAAC,eAAe,EACjC,CAAC,GAAG,gBAAI,CAAC,OAAO,CAAC,cAAc,CAC/B;KACD;CACD,CAAC;AAEF,MAAM,oBAAoB,GAAG,KAAK,EAAE,QAA4B,EAAE,EAAE,CACnE,QAAQ,IAAI,CAAC,CAAC,MAAM,QAAQ,CAAC,WAAW,EAAE,EAAE,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;AAE/E,MAAM,oBAAoB,GAAG,IAAA,8BAAiB,EAC7C,iBAAiB,CAAC,kBAAkB,EACpC,CAAC,GAAG,gBAAI,CAAC,OAAO,CAAC,cAAc,CAC/B,CAAC;AAGK,IAAM,eAAe,GAArB,MAAM,eAAe;IAC3B,YACkB,UAAsB,EACtB,gBAA2C;0BAD3C,UAAU;gCACV,gBAAgB;IAC/B,CAAC;IAGI,cAAc,CAAC,GAAa;QAEnC,GAAG,CAAC,MAAM,CAAC,6BAA6B,EAAE,GAAG,CAAC,CAAC;QAC/C,GAAG,CAAC,MAAM,CAAC,8BAA8B,EAAE,cAAc,CAAC,CAAC;QAC3D,GAAG,CAAC,MAAM,CAAC,8BAA8B,EAAE,cAAc,CAAC,CAAC;IAC5D,CAAC;IAYD,eAAe,CAAC,IAAa,EAAE,GAAa;QAC3C,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC;QACzB,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,CAAC;IACvB,CAAC;IAgBD,QAAQ,CAAC,IAAa,EAAE,GAAa;QACpC,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC;QAEzB,MAAM,OAAO,GAAG,IAAI,CAAC,UAAU,CAAC,kBAAkB,EAAE,CAAC;QACrD,MAAM,SAAS,GAAG,IAAI,CAAC,gBAAgB,CAAC,YAAY,EAAE,CAAC;QACvD,MAAM,QAAQ,GAA4B;YACzC,MAAM,EAAE,OAAO;YACf,sBAAsB,EAAE,GAAG,OAAO,sBAAsB;YACxD,cAAc,EAAE,GAAG,OAAO,kBAAkB;YAC5C,qBAAqB,EAAE,GAAG,OAAO,qBAAqB;YACtD,mBAAmB,EAAE,GAAG,OAAO,mBAAmB;YAElD,QAAQ,EAAE,IAAI,CAAC,UAAU,CAAC,kBAAkB,EAAE;YAC9C,wBAAwB,EAAE,CAAC,MAAM,CAAC;YAClC,qBAAqB,EAAE,CAAC,oBAAoB,EAAE,eAAe,CAAC;YAC9D,qCAAqC,EAAE,CAAC,MAAM,EAAE,oBAAoB,EAAE,qBAAqB,CAAC;YAC5F,gCAAgC,EAAE,CAAC,MAAM,CAAC;YAE1C,8CAA8C,EAAE,IAAI;SACpD,CAAC;QAEF,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC1B,QAAQ,CAAC,gBAAgB,GAAG,SAAS,CAAC;QACvC,CAAC;QAED,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IACpB,CAAC;IAOD,2BAA2B,CAAC,IAAa,EAAE,GAAa;QACvD,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC;QACzB,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,CAAC;IACvB,CAAC;IAYD,oBAAoB,CAAC,IAAa,EAAE,GAAa;QAChD,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC;QACzB,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,8BAA8B,EAAE,CAAC,CAAC;IACnE,CAAC;IAOD,gCAAgC,CAAC,IAAa,EAAE,GAAa;QAC5D,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC;QACzB,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,CAAC;IACvB,CAAC;IAYK,AAAN,KAAK,CAAC,yBAAyB,CAAC,GAAY,EAAE,GAAa;QAC1D,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC;QAEzB,MAAM,YAAY,GACjB,GAAG;YACH,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,YAAY,CAAC;gBACtC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,YAAY,CAAC,IAAI,CAAC,GAAG,CAAC;gBACnC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;QAI7B,MAAM,UAAU,GAAG,GAAG,CAAC,WAAW,EAAE,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC;QACvD,MAAM,MAAM,GAAG,UAAU,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,WAAW,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;QAE1E,MAAM,QAAQ,GAAG,MAAM,oBAAoB,CAC1C,MAAM,IAAI,CAAC,gBAAgB,CAAC,iBAAiB,CAAC,YAAY,GAAG,MAAM,CAAC,CACpE,CAAC;QACF,IAAI,CAAC,QAAQ,EAAE,CAAC;YACf,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,4BAA4B,EAAE,CAAC,CAAC;YAChE,OAAO;QACR,CAAC;QAED,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,8BAA8B,CAAC,QAAQ,CAAC,CAAC,CAAC;IACzD,CAAC;IAOD,uCAAuC,CAAC,IAAa,EAAE,GAAa;QACnE,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC;QACzB,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,CAAC;IACvB,CAAC;IAyBK,AAAN,KAAK,CAAC,gCAAgC,CAAC,IAAa,EAAE,GAAa;QAClE,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC;QAEzB,MAAM,QAAQ,GAAG,MAAM,oBAAoB,CAAC,IAAI,CAAC,gBAAgB,CAAC,kBAAkB,EAAE,CAAC,CAAC;QACxF,IAAI,CAAC,QAAQ,EAAE,CAAC;YACf,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,4BAA4B,EAAE,CAAC,CAAC;YAChE,OAAO;QACR,CAAC;QAED,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,8BAA8B,CAAC,QAAQ,CAAC,CAAC,CAAC;IACzD,CAAC;IAEO,8BAA8B,CAAC,QAA2B;QACjE,MAAM,OAAO,GAAG,IAAI,CAAC,UAAU,CAAC,kBAAkB,EAAE,CAAC;QACrD,MAAM,QAAQ,GAA4B;YACzC,QAAQ,EAAE,QAAQ,CAAC,cAAc,EAAE;YACnC,wBAAwB,EAAE,CAAC,QAAQ,CAAC;YACpC,qBAAqB,EAAE,CAAC,OAAO,CAAC;SAChC,CAAC;QAEF,IAAI,QAAQ,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAChC,QAAQ,CAAC,gBAAgB,GAAG,QAAQ,CAAC,MAAM,CAAC;QAC7C,CAAC;QAED,OAAO,QAAQ,CAAC;IACjB,CAAC;CACD,CAAA;;AA1LO,uBAAO,GAA2B;IACxC,GAAG,qBAAqB,CAAC,YAAY,CAAC;IACtC,GAAG,qBAAqB,CAAC,QAAQ,CAAC;CAClC,AAHa,CAGZ;AAOF;IALC,IAAA,oBAAO,EAAC,yCAAyC,EAAE;QACnD,QAAQ,EAAE,IAAI;QACd,aAAa,EAAE,IAAI;QACnB,WAAW,EAAE,oBAAoB;KACjC,CAAC;;;;sDAID;AAgBD;IALC,IAAA,gBAAG,EAAC,yCAAyC,EAAE;QAC/C,QAAQ,EAAE,IAAI;QACd,aAAa,EAAE,IAAI;QACnB,WAAW,EAAE,oBAAoB;KACjC,CAAC;;;;+CA2BD;AAOD;IALC,IAAA,oBAAO,EAAC,qDAAqD,EAAE;QAC/D,QAAQ,EAAE,IAAI;QACd,aAAa,EAAE,IAAI;QACnB,WAAW,EAAE,oBAAoB;KACjC,CAAC;;;;kEAID;AAYD;IALC,IAAA,gBAAG,EAAC,qDAAqD,EAAE;QAC3D,QAAQ,EAAE,IAAI;QACd,aAAa,EAAE,IAAI;QACnB,WAAW,EAAE,oBAAoB;KACjC,CAAC;;;;2DAID;AAOD;IALC,IAAA,oBAAO,EAAC,qDAAqD,EAAE;QAC/D,QAAQ,EAAE,IAAI;QACd,aAAa,EAAE,IAAI;QACnB,WAAW,EAAE,oBAAoB;KACjC,CAAC;;;;uEAID;AAYK;IALL,IAAA,gBAAG,EAAC,qDAAqD,EAAE;QAC3D,QAAQ,EAAE,IAAI;QACd,aAAa,EAAE,IAAI;QACnB,WAAW,EAAE,oBAAoB;KACjC,CAAC;;;;gEAwBD;AAOD;IALC,IAAA,oBAAO,EAAC,uCAAuC,EAAE;QACjD,QAAQ,EAAE,IAAI;QACd,aAAa,EAAE,IAAI;QACnB,WAAW,EAAE,oBAAoB;KACjC,CAAC;;;;8EAID;AAyBK;IALL,IAAA,gBAAG,EAAC,uCAAuC,EAAE;QAC7C,QAAQ,EAAE,IAAI;QACd,aAAa,EAAE,IAAI;QACnB,WAAW,EAAE,oBAAoB;KACjC,CAAC;;;;uEAWD;0BAxLW,eAAe;IAD3B,IAAA,gCAAmB,EAAC,GAAG,CAAC;qCAGM,6BAAU,EACJ,uDAAyB;GAHjD,eAAe,CAwM3B"}
+{"version":3,"file":"oauth.controller.js","sourceRoot":"","sources":["../../../src/modules/oauth-server/oauth.controller.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,8FAAmG;AACnG,4FAAuG;AACvG,wFAA6F;AAC7F,sFAAuF;AACvF,wDAA6C;AAC7C,wCAA2C;AAC3C,8CAAsC;AACtC,gDAMyB;AACzB,gCAAoC;AAIpC,wFAAmF;AACnF,4DAAmD;AAEnD,yFAAyF;AACzF,+DAA0D;AAC1D,iEAA4D;AAC5D,iDAAqE;AACrE,mDAA+C;AAE/C,MAAM,kBAAkB,GAAG,cAAS,CAAC,GAAG,CAAC,yCAAkB,CAAC,CAAC;AAC7D,MAAM,YAAY,GAAG,cAAS,CAAC,GAAG,CAAC,qBAAY,CAAC,CAAC;AACjD,MAAM,iBAAiB,GAAG,cAAS,CAAC,GAAG,CAAC,uCAAiB,CAAC,CAAC;AAC3D,MAAM,MAAM,GAAG,cAAS,CAAC,GAAG,CAAC,uBAAM,CAAC,CAAC;AACrC,MAAM,UAAU,GAAG,cAAS,CAAC,GAAG,CAAC,6BAAU,CAAC,CAAC;AAc7C,MAAM,qBAAqB,GAAmB,KAAK,EAAE,IAAI,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE;IACvE,IAAI,MAAM,kBAAkB,CAAC,oBAAoB,EAAE,EAAE,CAAC;QACrD,MAAM,KAAK,GAAG,YAAY,CAAC,SAAS,CAAC,uBAAuB,CAAC;QAC7D,MAAM,CAAC,IAAI,CAAC,wEAAwE,EAAE;YACrF,KAAK;SACL,CAAC,CAAC;QACH,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;YACpB,KAAK,EAAE,cAAc;YACrB,iBAAiB,EAAE,IAAA,kDAAmC,EAAC,KAAK,CAAC;SAC7D,CAAC,CAAC;QACH,OAAO;IACR,CAAC;IACD,IAAI,EAAE,CAAC;AACR,CAAC,CAAC;AAcF,MAAM,kBAAkB,GAAmB,CAAC,IAAI,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE;IAC9D,MAAM,gBAAgB,GAAG,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAChD,GAAG,CAAC,QAAQ,GAAG,CAAC,GAAW,EAAE,EAAE,CAC9B,gBAAgB,CAAC,4BAAY,CAAC,cAAc,CAAC,GAAG,EAAE,UAAU,CAAC,kBAAkB,EAAE,CAAC,CAAC,CAAC;IACrF,IAAI,EAAE,CAAC;AACR,CAAC,CAAC;AAKF,MAAM,cAAc,GAAG,IAAA,uCAAyB,EAAC;IAChD,YAAY,EAAE,kBAAkB,CAAC,YAAY;IAC7C,SAAS,EAAE,KAAK;CAChB,CAAW,CAAC;AACb,MAAM,eAAe,GAAG,IAAA,mCAAoB,EAAC;IAC5C,QAAQ,EAAE,kBAAkB;IAC5B,SAAS,EAAE,KAAK;CAChB,CAAW,CAAC;AACb,MAAM,WAAW,GAAG,IAAA,uBAAY,EAAC,EAAE,QAAQ,EAAE,kBAAkB,EAAE,SAAS,EAAE,KAAK,EAAE,CAAW,CAAC;AAC/F,MAAM,YAAY,GAAG,IAAA,6BAAiB,EAAC;IACtC,QAAQ,EAAE,kBAAkB;IAC5B,SAAS,EAAE,KAAK;CAChB,CAAW,CAAC;AAEb,MAAM,qBAAqB,GAAG,CAAC,QAAiC,EAA0B,EAAE,CAAC;IAC5F;QACC,IAAI,EAAE,GAAG,QAAQ,WAAW;QAC5B,MAAM,EAAE,cAAc;QACtB,QAAQ,EAAE,IAAI;QACd,WAAW,EAAE,CAAC,qBAAqB,CAAC;QACpC,WAAW,EAAE,IAAA,8BAAiB,EAC7B,iBAAiB,CAAC,iBAAiB,EACnC,CAAC,GAAG,gBAAI,CAAC,OAAO,CAAC,cAAc,CAC/B;KACD;IACD;QACC,IAAI,EAAE,GAAG,QAAQ,YAAY;QAC7B,MAAM,EAAE,eAAe;QACvB,QAAQ,EAAE,IAAI;QACd,WAAW,EAAE,CAAC,kBAAkB,CAAC;QACjC,WAAW,EAAE,IAAA,8BAAiB,EAC7B,iBAAiB,CAAC,kBAAkB,EACpC,CAAC,GAAG,gBAAI,CAAC,OAAO,CAAC,cAAc,CAC/B;KACD;IACD;QACC,IAAI,EAAE,GAAG,QAAQ,QAAQ;QACzB,MAAM,EAAE,WAAW;QACnB,QAAQ,EAAE,IAAI;QACd,WAAW,EAAE,IAAA,8BAAiB,EAC7B,iBAAiB,CAAC,cAAc,EAChC,CAAC,GAAG,gBAAI,CAAC,OAAO,CAAC,cAAc,CAC/B;KACD;IACD;QACC,IAAI,EAAE,GAAG,QAAQ,SAAS;QAC1B,MAAM,EAAE,YAAY;QACpB,QAAQ,EAAE,IAAI;QACd,WAAW,EAAE,IAAA,8BAAiB,EAC7B,iBAAiB,CAAC,eAAe,EACjC,CAAC,GAAG,gBAAI,CAAC,OAAO,CAAC,cAAc,CAC/B;KACD;CACD,CAAC;AAEF,MAAM,oBAAoB,GAAG,KAAK,EAAE,QAA4B,EAAE,EAAE,CACnE,QAAQ,IAAI,CAAC,CAAC,MAAM,QAAQ,CAAC,WAAW,EAAE,EAAE,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;AAE/E,MAAM,oBAAoB,GAAG,IAAA,8BAAiB,EAC7C,iBAAiB,CAAC,kBAAkB,EACpC,CAAC,GAAG,gBAAI,CAAC,OAAO,CAAC,cAAc,CAC/B,CAAC;AAGK,IAAM,eAAe,GAArB,MAAM,eAAe;IAC3B,YACkB,UAAsB,EACtB,gBAA2C,EAC3C,WAAgD;0BAFhD,UAAU;gCACV,gBAAgB;2BAChB,WAAW;IAC1B,CAAC;IAGI,cAAc,CAAC,GAAa;QAEnC,GAAG,CAAC,MAAM,CAAC,6BAA6B,EAAE,GAAG,CAAC,CAAC;QAC/C,GAAG,CAAC,MAAM,CAAC,8BAA8B,EAAE,cAAc,CAAC,CAAC;QAC3D,GAAG,CAAC,MAAM,CAAC,8BAA8B,EAAE,cAAc,CAAC,CAAC;IAC5D,CAAC;IAYD,eAAe,CAAC,IAAa,EAAE,GAAa;QAC3C,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC;QACzB,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,CAAC;IACvB,CAAC;IAQK,AAAN,KAAK,CAAC,QAAQ,CAAC,IAAa,EAAE,GAAa;QAC1C,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC;QACzB,GAAG,CAAC,IAAI,CAAC,MAAM,IAAI,CAAC,WAAW,CAAC,WAAW,EAAE,CAAC,CAAC;IAChD,CAAC;IAOD,2BAA2B,CAAC,IAAa,EAAE,GAAa;QACvD,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC;QACzB,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,CAAC;IACvB,CAAC;IAYD,oBAAoB,CAAC,IAAa,EAAE,GAAa;QAChD,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC;QACzB,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,8BAA8B,EAAE,CAAC,CAAC;IACnE,CAAC;IAOD,gCAAgC,CAAC,IAAa,EAAE,GAAa;QAC5D,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC;QACzB,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,CAAC;IACvB,CAAC;IAYK,AAAN,KAAK,CAAC,yBAAyB,CAAC,GAAY,EAAE,GAAa;QAC1D,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC;QAEzB,MAAM,YAAY,GACjB,GAAG;YACH,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,YAAY,CAAC;gBACtC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,YAAY,CAAC,IAAI,CAAC,GAAG,CAAC;gBACnC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;QAI7B,MAAM,UAAU,GAAG,GAAG,CAAC,WAAW,EAAE,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC;QACvD,MAAM,MAAM,GAAG,UAAU,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,WAAW,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;QAE1E,MAAM,QAAQ,GAAG,MAAM,oBAAoB,CAC1C,MAAM,IAAI,CAAC,gBAAgB,CAAC,iBAAiB,CAAC,YAAY,GAAG,MAAM,CAAC,CACpE,CAAC;QACF,IAAI,CAAC,QAAQ,EAAE,CAAC;YACf,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,4BAA4B,EAAE,CAAC,CAAC;YAChE,OAAO;QACR,CAAC;QAED,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,8BAA8B,CAAC,QAAQ,CAAC,CAAC,CAAC;IACzD,CAAC;IAOD,uCAAuC,CAAC,IAAa,EAAE,GAAa;QACnE,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC;QACzB,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,CAAC;IACvB,CAAC;IAyBK,AAAN,KAAK,CAAC,gCAAgC,CAAC,IAAa,EAAE,GAAa;QAClE,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC;QAEzB,MAAM,QAAQ,GAAG,MAAM,oBAAoB,CAAC,IAAI,CAAC,gBAAgB,CAAC,kBAAkB,EAAE,CAAC,CAAC;QACxF,IAAI,CAAC,QAAQ,EAAE,CAAC;YACf,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,4BAA4B,EAAE,CAAC,CAAC;YAChE,OAAO;QACR,CAAC;QAED,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,8BAA8B,CAAC,QAAQ,CAAC,CAAC,CAAC;IACzD,CAAC;IAEO,8BAA8B,CAAC,QAA2B;QACjE,MAAM,OAAO,GAAG,IAAI,CAAC,UAAU,CAAC,kBAAkB,EAAE,CAAC;QACrD,MAAM,QAAQ,GAA4B;YACzC,QAAQ,EAAE,QAAQ,CAAC,cAAc,EAAE;YACnC,wBAAwB,EAAE,CAAC,QAAQ,CAAC;YACpC,qBAAqB,EAAE,CAAC,OAAO,CAAC;SAChC,CAAC;QAEF,IAAI,QAAQ,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAChC,QAAQ,CAAC,gBAAgB,GAAG,QAAQ,CAAC,MAAM,CAAC;QAC7C,CAAC;QAED,OAAO,QAAQ,CAAC;IACjB,CAAC;CACD,CAAA;;AA3JO,uBAAO,GAA2B;IACxC,GAAG,qBAAqB,CAAC,YAAY,CAAC;IACtC,GAAG,qBAAqB,CAAC,QAAQ,CAAC;CAClC,AAHa,CAGZ;AAOF;IALC,IAAA,oBAAO,EAAC,yCAAyC,EAAE;QACnD,QAAQ,EAAE,IAAI;QACd,aAAa,EAAE,IAAI;QACnB,WAAW,EAAE,oBAAoB;KACjC,CAAC;;;;sDAID;AAQK;IALL,IAAA,gBAAG,EAAC,yCAAyC,EAAE;QAC/C,QAAQ,EAAE,IAAI;QACd,aAAa,EAAE,IAAI;QACnB,WAAW,EAAE,oBAAoB;KACjC,CAAC;;;;+CAID;AAOD;IALC,IAAA,oBAAO,EAAC,qDAAqD,EAAE;QAC/D,QAAQ,EAAE,IAAI;QACd,aAAa,EAAE,IAAI;QACnB,WAAW,EAAE,oBAAoB;KACjC,CAAC;;;;kEAID;AAYD;IALC,IAAA,gBAAG,EAAC,qDAAqD,EAAE;QAC3D,QAAQ,EAAE,IAAI;QACd,aAAa,EAAE,IAAI;QACnB,WAAW,EAAE,oBAAoB;KACjC,CAAC;;;;2DAID;AAOD;IALC,IAAA,oBAAO,EAAC,qDAAqD,EAAE;QAC/D,QAAQ,EAAE,IAAI;QACd,aAAa,EAAE,IAAI;QACnB,WAAW,EAAE,oBAAoB;KACjC,CAAC;;;;uEAID;AAYK;IALL,IAAA,gBAAG,EAAC,qDAAqD,EAAE;QAC3D,QAAQ,EAAE,IAAI;QACd,aAAa,EAAE,IAAI;QACnB,WAAW,EAAE,oBAAoB;KACjC,CAAC;;;;gEAwBD;AAOD;IALC,IAAA,oBAAO,EAAC,uCAAuC,EAAE;QACjD,QAAQ,EAAE,IAAI;QACd,aAAa,EAAE,IAAI;QACnB,WAAW,EAAE,oBAAoB;KACjC,CAAC;;;;8EAID;AAyBK;IALL,IAAA,gBAAG,EAAC,uCAAuC,EAAE;QAC7C,QAAQ,EAAE,IAAI;QACd,aAAa,EAAE,IAAI;QACnB,WAAW,EAAE,oBAAoB;KACjC,CAAC;;;;uEAWD;0BA1JW,eAAe;IAD3B,IAAA,gCAAmB,EAAC,GAAG,CAAC;qCAGM,6BAAU,EACJ,uDAAyB,EAC9B,sEAAmC;GAJtD,eAAe,CA0K3B"}

package/dist/modules/oauth-server/resource-gate.d.ts

@@ -1,6 +1,4 @@
-import type { ResourceUser } from '@n8n/inbound-auth';
 import type { OAuthResourceGrant } from 'n8n-workflow';
 import type { ProtectedResource } from '../../services/protected-resource.registry';
 import type { WorkflowFinderService } from '../../workflows/workflow-finder.service';
-export declare function authorizeAgainstGrant(workflowFinderService: WorkflowFinderService, grant: OAuthResourceGrant, user: ResourceUser): Promise<boolean>;
 export declare function triggerResourceGate(workflowFinderService: WorkflowFinderService, grant: OAuthResourceGrant): Pick<ProtectedResource, 'getGrant' | 'authorize'>;

package/dist/modules/oauth-server/resource-gate.js

@@ -1,17 +1,11 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.authorizeAgainstGrant = authorizeAgainstGrant;
 exports.triggerResourceGate = triggerResourceGate;
-async function authorizeAgainstGrant(workflowFinderService, grant, user) {
-    if (!grant.executeAccessWorkflowId)
-        return true;
-    const allowed = await workflowFinderService.findWorkflowIdsWithScopeForUser([grant.executeAccessWorkflowId], user, ['workflow:execute']);
-    return allowed.has(grant.executeAccessWorkflowId);
-}
+const grant_authorization_1 = require("../../modules/inbound-auth-core/grant-authorization");
 function triggerResourceGate(workflowFinderService, grant) {
     return {
         getGrant: () => grant,
-        authorize: async (user) => await authorizeAgainstGrant(workflowFinderService, grant, user),
+        authorize: async (user) => await (0, grant_authorization_1.authorizeAgainstGrant)(workflowFinderService, grant, user),
     };
 }
 //# sourceMappingURL=resource-gate.js.map

package/dist/modules/oauth-server/resource-gate.js.map

@@ -1 +1 @@
-{"version":3,"file":"resource-gate.js","sourceRoot":"","sources":["../../../src/modules/oauth-server/resource-gate.ts"],"names":[],"mappings":";;;;AAWO,KAAK,gCACX,qBAA4C,EAC5C,KAAyB,EACzB,IAAkB;IAElB,IAAI,CAAC,KAAK,CAAC,uBAAuB;QAAE,OAAO,IAAI,CAAC;IAEhD,MAAM,OAAO,GAAG,MAAM,qBAAqB,CAAC,+BAA+B,CAC1E,CAAC,KAAK,CAAC,uBAAuB,CAAC,EAC/B,IAAI,EACJ,CAAC,kBAAkB,CAAC,CACpB,CAAC;IAEF,OAAO,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,uBAAuB,CAAC,CAAC;AACnD,CAAC;AAUD,6BACC,qBAA4C,EAC5C,KAAyB;IAEzB,OAAO;QACN,QAAQ,EAAE,GAAG,EAAE,CAAC,KAAK;QACrB,SAAS,EAAE,KAAK,EAAE,IAAkB,EAAE,EAAE,CACvC,MAAM,qBAAqB,CAAC,qBAAqB,EAAE,KAAK,EAAE,IAAI,CAAC;KAChE,CAAC;AACH,CAAC"}
+{"version":3,"file":"resource-gate.js","sourceRoot":"","sources":["../../../src/modules/oauth-server/resource-gate.ts"],"names":[],"mappings":";;;AAGA,yFAAwF;AAYxF,6BACC,qBAA4C,EAC5C,KAAyB;IAEzB,OAAO;QACN,QAAQ,EAAE,GAAG,EAAE,CAAC,KAAK;QACrB,SAAS,EAAE,KAAK,EAAE,IAAkB,EAAE,EAAE,CACvC,MAAM,IAAA,2CAAqB,EAAC,qBAAqB,EAAE,KAAK,EAAE,IAAI,CAAC;KAChE,CAAC;AACH,CAAC"}

package/dist/modules/otel/execution-identity.d.ts

@@ -0,0 +1,27 @@
+import type { Context } from '@opentelemetry/api';
+import type { ReadableSpan, Span, SpanProcessor } from '@opentelemetry/sdk-trace-base';
+import { ATTR } from './otel.constants';
+export type ExecutionIdentity = {
+    [ATTR.EXECUTION_ID]: string;
+    [ATTR.WORKFLOW_ID]: string;
+    [ATTR.WORKFLOW_NAME]?: string;
+    [ATTR.PROJECT_ID]?: string;
+    [ATTR.PROJECT_NAME]?: string;
+};
+type ExecutionIdentitySource = {
+    executionId: string;
+    workflowId: string;
+    workflowName?: string;
+    projectId?: string;
+    projectName?: string;
+};
+export declare function buildExecutionIdentity(source: ExecutionIdentitySource): ExecutionIdentity;
+export declare function toExecutionIdentity(value: unknown): ExecutionIdentity | undefined;
+export declare function withExecutionIdentity(ctx: Context, identity: ExecutionIdentity): Context;
+export declare class ExecutionIdentitySpanProcessor implements SpanProcessor {
+    onStart(span: Span, parentContext: Context): void;
+    onEnd(_span: ReadableSpan): void;
+    forceFlush(): Promise<void>;
+    shutdown(): Promise<void>;
+}
+export {};

package/dist/modules/otel/execution-identity.js

@@ -0,0 +1,43 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ExecutionIdentitySpanProcessor = void 0;
+exports.buildExecutionIdentity = buildExecutionIdentity;
+exports.toExecutionIdentity = toExecutionIdentity;
+exports.withExecutionIdentity = withExecutionIdentity;
+const api_1 = require("@opentelemetry/api");
+const is_record_1 = require("@n8n/utils/is-record");
+const otel_constants_1 = require("./otel.constants");
+const IDENTITY_KEY = (0, api_1.createContextKey)('n8n.execution_identity');
+function buildExecutionIdentity(source) {
+    return {
+        [otel_constants_1.ATTR.EXECUTION_ID]: source.executionId,
+        [otel_constants_1.ATTR.WORKFLOW_ID]: source.workflowId,
+        ...(source.workflowName && { [otel_constants_1.ATTR.WORKFLOW_NAME]: source.workflowName }),
+        ...(source.projectId && { [otel_constants_1.ATTR.PROJECT_ID]: source.projectId }),
+        ...(source.projectName && { [otel_constants_1.ATTR.PROJECT_NAME]: source.projectName }),
+    };
+}
+function toExecutionIdentity(value) {
+    return isExecutionIdentity(value) ? value : undefined;
+}
+function withExecutionIdentity(ctx, identity) {
+    return ctx.setValue(IDENTITY_KEY, identity);
+}
+class ExecutionIdentitySpanProcessor {
+    onStart(span, parentContext) {
+        const identity = toExecutionIdentity(parentContext.getValue(IDENTITY_KEY));
+        if (identity)
+            span.setAttributes(identity);
+    }
+    onEnd(_span) { }
+    async forceFlush() { }
+    async shutdown() { }
+}
+exports.ExecutionIdentitySpanProcessor = ExecutionIdentitySpanProcessor;
+function isExecutionIdentity(value) {
+    return ((0, is_record_1.isRecord)(value) &&
+        typeof value[otel_constants_1.ATTR.EXECUTION_ID] === 'string' &&
+        typeof value[otel_constants_1.ATTR.WORKFLOW_ID] === 'string' &&
+        Object.values(value).every((entry) => typeof entry === 'string'));
+}
+//# sourceMappingURL=execution-identity.js.map

package/dist/modules/otel/execution-identity.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"execution-identity.js","sourceRoot":"","sources":["../../../src/modules/otel/execution-identity.ts"],"names":[],"mappings":";;;;;;AACA,4CAAsD;AAEtD,oDAAgD;AAEhD,qDAAwC;AAGxC,MAAM,YAAY,GAAG,IAAA,sBAAgB,EAAC,wBAAwB,CAAC,CAAC;AAkBhE,gCAAuC,MAA+B;IACrE,OAAO;QACN,CAAC,qBAAI,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC,WAAW;QACvC,CAAC,qBAAI,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC,UAAU;QACrC,GAAG,CAAC,MAAM,CAAC,YAAY,IAAI,EAAE,CAAC,qBAAI,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC,YAAY,EAAE,CAAC;QACzE,GAAG,CAAC,MAAM,CAAC,SAAS,IAAI,EAAE,CAAC,qBAAI,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC,SAAS,EAAE,CAAC;QAChE,GAAG,CAAC,MAAM,CAAC,WAAW,IAAI,EAAE,CAAC,qBAAI,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC,WAAW,EAAE,CAAC;KACtE,CAAC;AACH,CAAC;AAED,6BAAoC,KAAc;IACjD,OAAO,mBAAmB,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;AACvD,CAAC;AAED,+BAAsC,GAAY,EAAE,QAA2B;IAC9E,OAAO,GAAG,CAAC,QAAQ,CAAC,YAAY,EAAE,QAAQ,CAAC,CAAC;AAC7C,CAAC;AAED;IACC,OAAO,CAAC,IAAU,EAAE,aAAsB;QACzC,MAAM,QAAQ,GAAG,mBAAmB,CAAC,aAAa,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC,CAAC;QAC3E,IAAI,QAAQ;YAAE,IAAI,CAAC,aAAa,CAAC,QAAQ,CAAC,CAAC;IAC5C,CAAC;IAED,KAAK,CAAC,KAAmB,IAAS,CAAC;IAEnC,KAAK,CAAC,UAAU,KAAmB,CAAC;IAEpC,KAAK,CAAC,QAAQ,KAAmB,CAAC;CAClC;;AAED,SAAS,mBAAmB,CAAC,KAAc;IAC1C,OAAO,CACN,IAAA,oBAAQ,EAAC,KAAK,CAAC;QACf,OAAO,KAAK,CAAC,qBAAI,CAAC,YAAY,CAAC,KAAK,QAAQ;QAC5C,OAAO,KAAK,CAAC,qBAAI,CAAC,WAAW,CAAC,KAAK,QAAQ;QAC3C,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,OAAO,KAAK,KAAK,QAAQ,CAAC,CAChE,CAAC;AACH,CAAC"}

package/dist/modules/otel/execution-level-tracer.d.ts

@@ -20,6 +20,7 @@ export declare class ExecutionLevelTracer {
     endNode(params: EndNodeParams): void;
     getActiveContext(executionId: string, nodeName?: string): Context | undefined;
     injectTraceHeaders(executionId: string, nodeName: string | undefined, headers: Record<string, string>): void;
+    private emitStartMarker;
     private parseTraceParentHeaders;
     private buildContinuationLinks;
     private findMostSpecificSpan;