n8n 2.44.3 → 2.45.0

package/dist/modules/dynamic-credentials.ee/dynamic-credentials.module.js.map

@@ -1 +1 @@
-{"version":3,"file":"dynamic-credentials.module.js","sourceRoot":"","sources":["../../../src/modules/dynamic-credentials.ee/dynamic-credentials.module.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,wDAA0D;AAC1D,8CAAkD;AAElD,gDAA4D;AAC5D,gCAAoC;AAOpC,SAAS,0BAA0B;IAClC,OAAO,IAAA,oCAAmB,EAAC,kCAAkC,CAAC,CAAC;AAChE,CAAC;AAGM,IAAM,wBAAwB,GAA9B,MAAM,wBAAwB;IACpC,KAAK,CAAC,IAAI;QACT,MAAM,MAAM,CAAC,qCAAqC,CAAC,CAAC;QAIpD,MAAM,MAAM,CAAC,mDAAmD,CAAC,CAAC;QAClE,IAAI,0BAA0B,EAAE,EAAE,CAAC;YAClC,MAAM,MAAM,CAAC,sCAAsC,CAAC,CAAC;YACrD,MAAM,MAAM,CAAC,wCAAwC,CAAC,CAAC;YACvD,MAAM,MAAM,CAAC,qDAAqD,CAAC,CAAC;YACpE,MAAM,MAAM,CAAC,qDAAqD,CAAC,CAAC;QACrE,CAAC;QACD,MAAM,EACL,iCAAiC,EACjC,+BAA+B,EAC/B,wBAAwB,EACxB,iBAAiB,EACjB,iCAAiC,GACjC,GAAG,MAAM,MAAM,CAAC,qBAAqB,CAAC,CAAC;QACxC,MAAM,MAAM,CAAC,iCAAiC,CAAC,CAAC;QAEhD,MAAM,cAAS,CAAC,GAAG,CAAC,iCAAiC,CAAC,CAAC,IAAI,EAAE,CAAC;QAC9D,MAAM,cAAS,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAAC,IAAI,EAAE,CAAC;QAG9C,MAAM,EAAE,uBAAuB,EAAE,GAAG,MAAM,MAAM,CAC/C,gDAAgD,CAChD,CAAC;QACF,MAAM,gBAAgB,GAAG,cAAS,CAAC,GAAG,CAAC,uBAAuB,CAAC,CAAC;QAChE,MAAM,wBAAwB,GAAG,cAAS,CAAC,GAAG,CAAC,wBAAwB,CAAC,CAAC;QACzE,MAAM,+BAA+B,GAAG,cAAS,CAAC,GAAG,CAAC,+BAA+B,CAAC,CAAC;QACvF,gBAAgB,CAAC,mBAAmB,CAAC,wBAAwB,CAAC,CAAC;QAC/D,gBAAgB,CAAC,kBAAkB,CAAC,+BAA+B,CAAC,CAAC;QAIrE,MAAM,EAAE,+BAA+B,EAAE,GAAG,MAAM,MAAM,CACvD,yDAAyD,CACzD,CAAC;QACF,cAAS,CAAC,GAAG,CAAC,+BAA+B,CAAC,CAAC,WAAW,CACzD,cAAS,CAAC,GAAG,CAAC,iCAAiC,CAAC,CAChD,CAAC;QAKF,MAAM,EAAE,4BAA4B,EAAE,GAAG,MAAM,MAAM,CACpD,sDAAsD,CACtD,CAAC;QACF,MAAM,EAAE,aAAa,EAAE,GAAG,MAAM,MAAM,CAAC,sDAAsD,CAAC,CAAC;QAC/F,cAAS,CAAC,GAAG,CAAC,4BAA4B,CAAC,CAAC,WAAW,CAAC,cAAS,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC,CAAC;IACvF,CAAC;IAED,KAAK,CAAC,QAAQ;QACb,MAAM,EAAE,yBAAyB,EAAE,GAAG,MAAM,MAAM,CACjD,4CAA4C,CAC5C,CAAC;QACF,MAAM,EAAE,sBAAsB,EAAE,GAAG,MAAM,MAAM,CAC9C,iDAAiD,CACjD,CAAC;QACF,MAAM,EAAE,0BAA0B,EAAE,GAAG,MAAM,MAAM,CAClD,sDAAsD,CACtD,CAAC;QAEF,OAAO,CAAC,yBAAyB,EAAE,sBAAsB,EAAE,0BAA0B,CAAC,CAAC;IACxF,CAAC;IAED,KAAK,CAAC,OAAO;QACZ,MAAM,EAAE,2BAA2B,EAAE,GAAG,MAAM,MAAM,CACnD,8CAA8C,CAC9C,CAAC;QACF,OAAO,EAAE,oBAAoB,EAAE,cAAS,CAAC,GAAG,CAAC,2BAA2B,CAAC,EAAE,CAAC;IAC7E,CAAC;IAGK,AAAN,KAAK,CAAC,QAAQ,KAAI,CAAC;CACnB,CAAA;;AADM;IADL,IAAA,uBAAU,GAAE;;;;wDACM;mCA5EP,wBAAwB;IADpC,IAAA,0BAAa,EAAC,EAAE,IAAI,EAAE,qBAAqB,EAAE,WAAW,EAAE,4BAAgB,CAAC,mBAAmB,EAAE,CAAC;GACrF,wBAAwB,CA6EpC"}
+{"version":3,"file":"dynamic-credentials.module.js","sourceRoot":"","sources":["../../../src/modules/dynamic-credentials.ee/dynamic-credentials.module.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,wDAA0D;AAC1D,8CAAkD;AAElD,gDAA4D;AAC5D,gCAAoC;AAOpC,SAAS,0BAA0B;IAClC,OAAO,IAAA,oCAAmB,EAAC,kCAAkC,CAAC,CAAC;AAChE,CAAC;AAGM,IAAM,wBAAwB,GAA9B,MAAM,wBAAwB;IACpC,KAAK,CAAC,IAAI;QACT,MAAM,MAAM,CAAC,qCAAqC,CAAC,CAAC;QAIpD,MAAM,MAAM,CAAC,mDAAmD,CAAC,CAAC;QAClE,IAAI,0BAA0B,EAAE,EAAE,CAAC;YAClC,MAAM,MAAM,CAAC,sCAAsC,CAAC,CAAC;YACrD,MAAM,MAAM,CAAC,wCAAwC,CAAC,CAAC;YACvD,MAAM,MAAM,CAAC,qDAAqD,CAAC,CAAC;YACpE,MAAM,MAAM,CAAC,qDAAqD,CAAC,CAAC;QACrE,CAAC;QACD,MAAM,EACL,iCAAiC,EACjC,+BAA+B,EAC/B,wBAAwB,EACxB,iBAAiB,EACjB,iCAAiC,GACjC,GAAG,MAAM,MAAM,CAAC,qBAAqB,CAAC,CAAC;QACxC,MAAM,MAAM,CAAC,iCAAiC,CAAC,CAAC;QAEhD,MAAM,cAAS,CAAC,GAAG,CAAC,iCAAiC,CAAC,CAAC,IAAI,EAAE,CAAC;QAC9D,MAAM,cAAS,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAAC,IAAI,EAAE,CAAC;QAG9C,MAAM,EAAE,uBAAuB,EAAE,GAAG,MAAM,MAAM,CAC/C,gDAAgD,CAChD,CAAC;QACF,MAAM,gBAAgB,GAAG,cAAS,CAAC,GAAG,CAAC,uBAAuB,CAAC,CAAC;QAChE,MAAM,wBAAwB,GAAG,cAAS,CAAC,GAAG,CAAC,wBAAwB,CAAC,CAAC;QACzE,MAAM,+BAA+B,GAAG,cAAS,CAAC,GAAG,CAAC,+BAA+B,CAAC,CAAC;QACvF,gBAAgB,CAAC,mBAAmB,CAAC,wBAAwB,CAAC,CAAC;QAC/D,gBAAgB,CAAC,kBAAkB,CAAC,+BAA+B,CAAC,CAAC;QAIrE,MAAM,EAAE,+BAA+B,EAAE,GAAG,MAAM,MAAM,CACvD,yDAAyD,CACzD,CAAC;QACF,cAAS,CAAC,GAAG,CAAC,+BAA+B,CAAC,CAAC,WAAW,CACzD,cAAS,CAAC,GAAG,CAAC,iCAAiC,CAAC,CAChD,CAAC;QAKF,MAAM,EAAE,4BAA4B,EAAE,GAAG,MAAM,MAAM,CAAC,uBAAuB,CAAC,CAAC;QAC/E,MAAM,EAAE,aAAa,EAAE,GAAG,MAAM,MAAM,CAAC,sDAAsD,CAAC,CAAC;QAC/F,cAAS,CAAC,GAAG,CAAC,4BAA4B,CAAC,CAAC,WAAW,CAAC,cAAS,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC,CAAC;IACvF,CAAC;IAED,KAAK,CAAC,QAAQ;QACb,MAAM,EAAE,yBAAyB,EAAE,GAAG,MAAM,MAAM,CACjD,4CAA4C,CAC5C,CAAC;QACF,MAAM,EAAE,sBAAsB,EAAE,GAAG,MAAM,MAAM,CAC9C,iDAAiD,CACjD,CAAC;QACF,MAAM,EAAE,0BAA0B,EAAE,GAAG,MAAM,MAAM,CAClD,sDAAsD,CACtD,CAAC;QAEF,OAAO,CAAC,yBAAyB,EAAE,sBAAsB,EAAE,0BAA0B,CAAC,CAAC;IACxF,CAAC;IAED,KAAK,CAAC,OAAO;QACZ,MAAM,EAAE,2BAA2B,EAAE,GAAG,MAAM,MAAM,CACnD,8CAA8C,CAC9C,CAAC;QACF,OAAO,EAAE,oBAAoB,EAAE,cAAS,CAAC,GAAG,CAAC,2BAA2B,CAAC,EAAE,CAAC;IAC7E,CAAC;IAGK,AAAN,KAAK,CAAC,QAAQ,KAAI,CAAC;CACnB,CAAA;;AADM;IADL,IAAA,uBAAU,GAAE;;;;wDACM;mCA1EP,wBAAwB;IADpC,IAAA,0BAAa,EAAC,EAAE,IAAI,EAAE,qBAAqB,EAAE,WAAW,EAAE,4BAAgB,CAAC,mBAAmB,EAAE,CAAC;GACrF,wBAAwB,CA2EpC"}

package/dist/modules/external-secrets.ee/external-secrets-refresh.task.d.ts

@@ -1,13 +1,12 @@
 import { SystemTask } from '@n8n/decorators';
-import type { SystemTaskEffects, SystemTaskPlacement, SystemTaskSchedule } from '@n8n/decorators';
+import type { SystemTaskSchedule } from '@n8n/decorators';
 import { ExternalSecretsManager } from './external-secrets-manager.ee';
 import { ExternalSecretsConfig } from './external-secrets.config';
 export declare class ExternalSecretsRefreshTask implements SystemTask {
     private readonly manager;
     readonly name = "external-secrets-refresh";
     readonly schedule: SystemTaskSchedule;
-    readonly effects: SystemTaskEffects;
-    readonly placement: SystemTaskPlacement;
+    readonly target: import("@n8n/decorators").InstanceTarget;
     constructor(config: ExternalSecretsConfig, manager: ExternalSecretsManager);
     run(signal: AbortSignal): Promise<void>;
 }

package/dist/modules/external-secrets.ee/external-secrets-refresh.task.js

@@ -17,11 +17,7 @@ let ExternalSecretsRefreshTask = class ExternalSecretsRefreshTask {
     constructor(config, manager) {
         this.manager = manager;
         this.name = 'external-secrets-refresh';
-        this.effects = 'idempotent';
-        this.placement = {
-            scope: 'instance',
-            instanceTypes: ['main', 'worker', 'webhook'],
-        };
+        this.target = (0, decorators_1.instanceTarget)(['main', 'worker', 'webhook']);
         this.schedule = (0, decorators_1.intervalFromSeconds)(config.updateInterval);
     }
     async run(signal) {

package/dist/modules/external-secrets.ee/external-secrets-refresh.task.js.map

@@ -1 +1 @@
-{"version":3,"file":"external-secrets-refresh.task.js","sourceRoot":"","sources":["../../../src/modules/external-secrets.ee/external-secrets-refresh.task.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,gDAAkE;AAGlE,+EAAuE;AACvE,uEAAkE;AAM3D,IAAM,0BAA0B,GAAhC,MAAM,0BAA0B;IAatC,YACC,MAA6B,EACZ,OAA+B;QAA/B,YAAO,GAAP,OAAO,CAAwB;QAdxC,SAAI,GAAG,0BAA0B,CAAC;QAIlC,YAAO,GAAsB,YAAY,CAAC;QAG1C,cAAS,GAAwB;YACzC,KAAK,EAAE,UAAU;YACjB,aAAa,EAAE,CAAC,MAAM,EAAE,QAAQ,EAAE,SAAS,CAAC;SAC5C,CAAC;QAMD,IAAI,CAAC,QAAQ,GAAG,IAAA,gCAAmB,EAAC,MAAM,CAAC,cAAc,CAAC,CAAC;IAC5D,CAAC;IAED,KAAK,CAAC,GAAG,CAAC,MAAmB;QAC5B,MAAM,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC;IAC1C,CAAC;CACD,CAAA;;qCAvBY,0BAA0B;IADtC,IAAA,uBAAU,GAAE;qCAeH,+CAAqB,EACH,oDAAsB;GAfrC,0BAA0B,CAuBtC"}
+{"version":3,"file":"external-secrets-refresh.task.js","sourceRoot":"","sources":["../../../src/modules/external-secrets.ee/external-secrets-refresh.task.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,gDAAkF;AAGlF,+EAAuE;AACvE,uEAAkE;AAM3D,IAAM,0BAA0B,GAAhC,MAAM,0BAA0B;IAQtC,YACC,MAA6B,EACZ,OAA+B;QAA/B,YAAO,GAAP,OAAO,CAAwB;QATxC,SAAI,GAAG,0BAA0B,CAAC;QAKlC,WAAM,GAAG,IAAA,2BAAc,EAAC,CAAC,MAAM,EAAE,QAAQ,EAAE,SAAS,CAAC,CAAC,CAAC;QAM/D,IAAI,CAAC,QAAQ,GAAG,IAAA,gCAAmB,EAAC,MAAM,CAAC,cAAc,CAAC,CAAC;IAC5D,CAAC;IAED,KAAK,CAAC,GAAG,CAAC,MAAmB;QAC5B,MAAM,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC;IAC1C,CAAC;CACD,CAAA;;qCAlBY,0BAA0B;IADtC,IAAA,uBAAU,GAAE;qCAUH,+CAAqB,EACH,oDAAsB;GAVrC,0BAA0B,CAkBtC"}

package/dist/modules/inbound-auth-core/authentication-pipeline.js

@@ -29,6 +29,13 @@ let InboundAuthPipeline = class InboundAuthPipeline extends inbound_auth_1.Authe
         if (!context.ok) {
             return this.reject(extracted, context, verified.value.source.id);
         }
+        this.logger.info('Inbound authentication accepted', {
+            surface: extracted.surface,
+            resource: extracted.resource.url,
+            sourceId: verified.value.source.id,
+            authMethod: context.value.authMethod,
+            userId: context.value.subject.id,
+        });
         return context;
     }
     reject(extracted, rejection, sourceId) {

package/dist/modules/inbound-auth-core/authentication-pipeline.js.map

@@ -1 +1 @@
-{"version":3,"file":"authentication-pipeline.js","sourceRoot":"","sources":["../../../src/modules/inbound-auth-core/authentication-pipeline.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,gCAAkC;AAClC,wDAA6C;AAC7C,oDAO2B;AAIpB,IAAM,mBAAmB,GAAzB,MAAM,mBAAoB,SAAQ,qCAAsB;IAC9D,YACkB,MAAc,EACd,qBAA4C,EAC5C,eAAgC;QAEjD,KAAK,EAAE,CAAC;sBAJS,MAAM;qCACN,qBAAqB;+BACrB,eAAe;IAGjC,CAAC;IAED,KAAK,CAAC,GAAG,CAAC,SAAoB;QAC7B,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,qBAAqB,CAAC,YAAY,CAAC,SAAS,CAAC,CAAC;QAC1E,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YAClB,OAAO,IAAI,CAAC,MAAM,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;QACzC,CAAC;QAED,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,eAAe,CAAC,QAAQ,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;QACpE,IAAI,CAAC,OAAO,CAAC,EAAE,EAAE,CAAC;YACjB,OAAO,IAAI,CAAC,MAAM,CAAC,SAAS,EAAE,OAAO,EAAE,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QAClE,CAAC;QACD,OAAO,OAAO,CAAC;IAChB,CAAC;IAEO,MAAM,CAAC,SAAoB,EAAE,SAAiB,EAAE,QAAiB;QACxE,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,iCAAiC,EAAE;YACnD,OAAO,EAAE,SAAS,CAAC,OAAO;YAC1B,QAAQ,EAAE,SAAS,CAAC,QAAQ,CAAC,GAAG;YAChC,MAAM,EAAE,SAAS,CAAC,MAAM;YACxB,MAAM,EAAE,SAAS,CAAC,MAAM;YACxB,QAAQ;SACR,CAAC,CAAC;QACH,OAAO,SAAS,CAAC;IAClB,CAAC;CACD,CAAA;;8BAhCY,mBAAmB;IAD/B,IAAA,YAAO,GAAE;qCAGiB,uBAAM,EACS,oCAAqB,EAC3B,8BAAe;GAJtC,mBAAmB,CAgC/B"}
+{"version":3,"file":"authentication-pipeline.js","sourceRoot":"","sources":["../../../src/modules/inbound-auth-core/authentication-pipeline.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,gCAAkC;AAClC,wDAA6C;AAC7C,oDAO2B;AAIpB,IAAM,mBAAmB,GAAzB,MAAM,mBAAoB,SAAQ,qCAAsB;IAC9D,YACkB,MAAc,EACd,qBAA4C,EAC5C,eAAgC;QAEjD,KAAK,EAAE,CAAC;sBAJS,MAAM;qCACN,qBAAqB;+BACrB,eAAe;IAGjC,CAAC;IAED,KAAK,CAAC,GAAG,CAAC,SAAoB;QAC7B,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,qBAAqB,CAAC,YAAY,CAAC,SAAS,CAAC,CAAC;QAC1E,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YAClB,OAAO,IAAI,CAAC,MAAM,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;QACzC,CAAC;QAED,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,eAAe,CAAC,QAAQ,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;QACpE,IAAI,CAAC,OAAO,CAAC,EAAE,EAAE,CAAC;YACjB,OAAO,IAAI,CAAC,MAAM,CAAC,SAAS,EAAE,OAAO,EAAE,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QAClE,CAAC;QACD,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,iCAAiC,EAAE;YACnD,OAAO,EAAE,SAAS,CAAC,OAAO;YAC1B,QAAQ,EAAE,SAAS,CAAC,QAAQ,CAAC,GAAG;YAChC,QAAQ,EAAE,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE;YAClC,UAAU,EAAE,OAAO,CAAC,KAAK,CAAC,UAAU;YACpC,MAAM,EAAE,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE;SAChC,CAAC,CAAC;QACH,OAAO,OAAO,CAAC;IAChB,CAAC;IAEO,MAAM,CAAC,SAAoB,EAAE,SAAiB,EAAE,QAAiB;QACxE,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,iCAAiC,EAAE;YACnD,OAAO,EAAE,SAAS,CAAC,OAAO;YAC1B,QAAQ,EAAE,SAAS,CAAC,QAAQ,CAAC,GAAG;YAChC,MAAM,EAAE,SAAS,CAAC,MAAM;YACxB,MAAM,EAAE,SAAS,CAAC,MAAM;YACxB,QAAQ;SACR,CAAC,CAAC;QACH,OAAO,SAAS,CAAC;IAClB,CAAC;CACD,CAAA;;8BAvCY,mBAAmB;IAD/B,IAAA,YAAO,GAAE;qCAGiB,uBAAM,EACS,oCAAqB,EAC3B,8BAAe;GAJtC,mBAAmB,CAuC/B"}

package/dist/modules/inbound-auth-core/constants.d.ts

@@ -0,0 +1,42 @@
+export declare const SYSTEM_TRUSTED_SOURCE_ID = "n8n-internal";
+export declare const SYSTEM_TRUSTED_SOURCE_NAME = "n8n";
+export declare const SYSTEM_TRUSTED_SOURCE_CONFIG: {
+    version: 1;
+    authentication: {
+        type: "oauth2";
+        discovery: {
+            mode: "auto";
+        };
+        keys: {
+            kind: "local-keystore";
+        };
+        verification: {
+            mode: "jwt";
+        };
+        client: {
+            kind: "virtual";
+        };
+    };
+    surfaces: {
+        'public-api': {};
+        'instance-mcp': {};
+        trigger: {};
+    };
+    identity: {
+        subject: "n8n-user-id";
+        claimMapping: {
+            subject: string;
+            clientId: string;
+            scopes: string;
+        };
+        linkByEmail: "off";
+        provision: {
+            human: "off";
+        };
+        roleMapping: {
+            mode: "off";
+            instanceRoleRules: never[];
+            projectRoleRules: never[];
+        };
+    };
+};

package/dist/modules/inbound-auth-core/constants.js

@@ -0,0 +1,24 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.SYSTEM_TRUSTED_SOURCE_CONFIG = exports.SYSTEM_TRUSTED_SOURCE_NAME = exports.SYSTEM_TRUSTED_SOURCE_ID = void 0;
+exports.SYSTEM_TRUSTED_SOURCE_ID = 'n8n-internal';
+exports.SYSTEM_TRUSTED_SOURCE_NAME = 'n8n';
+exports.SYSTEM_TRUSTED_SOURCE_CONFIG = {
+    version: 1,
+    authentication: {
+        type: 'oauth2',
+        discovery: { mode: 'auto' },
+        keys: { kind: 'local-keystore' },
+        verification: { mode: 'jwt' },
+        client: { kind: 'virtual' },
+    },
+    surfaces: { 'public-api': {}, 'instance-mcp': {}, trigger: {} },
+    identity: {
+        subject: 'n8n-user-id',
+        claimMapping: { subject: 'sub', clientId: 'client_id', scopes: 'scope' },
+        linkByEmail: 'off',
+        provision: { human: 'off' },
+        roleMapping: { mode: 'off', instanceRoleRules: [], projectRoleRules: [] },
+    },
+};
+//# sourceMappingURL=constants.js.map

package/dist/modules/inbound-auth-core/constants.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"constants.js","sourceRoot":"","sources":["../../../src/modules/inbound-auth-core/constants.ts"],"names":[],"mappings":";;;AAKa,QAAA,wBAAwB,GAAG,cAAc,CAAC;AAC1C,QAAA,0BAA0B,GAAG,KAAK,CAAC;AACnC,QAAA,4BAA4B,GAAG;IAC3C,OAAO,EAAE,CAAC;IACV,cAAc,EAAE;QACf,IAAI,EAAE,QAAQ;QACd,SAAS,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE;QAC3B,IAAI,EAAE,EAAE,IAAI,EAAE,gBAAgB,EAAE;QAChC,YAAY,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE;QAC7B,MAAM,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE;KAC3B;IACD,QAAQ,EAAE,EAAE,YAAY,EAAE,EAAE,EAAE,cAAc,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE;IAC/D,QAAQ,EAAE;QACT,OAAO,EAAE,aAAa;QACtB,YAAY,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,EAAE,OAAO,EAAE;QACxE,WAAW,EAAE,KAAK;QAClB,SAAS,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE;QAC3B,WAAW,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,iBAAiB,EAAE,EAAE,EAAE,gBAAgB,EAAE,EAAE,EAAE;KACzE;CACkC,CAAC"}

package/dist/modules/inbound-auth-core/grant-authorization.d.ts

@@ -1,4 +1,4 @@
-import type { ResourceUser } from '@n8n/inbound-auth';
+import type { ResourcePrincipal } from '@n8n/inbound-auth';
 import type { OAuthResourceGrant } from 'n8n-workflow';
 import type { WorkflowFinderService } from '../../workflows/workflow-finder.service';
-export declare function authorizeAgainstGrant(workflowFinderService: WorkflowFinderService, grant: OAuthResourceGrant, user: ResourceUser): Promise<boolean>;
+export declare function authorizeAgainstGrant(workflowFinderService: WorkflowFinderService, grant: OAuthResourceGrant, user: ResourcePrincipal): Promise<boolean>;

package/dist/modules/inbound-auth-core/grant-authorization.js.map

@@ -1 +1 @@
-{"version":3,"file":"grant-authorization.js","sourceRoot":"","sources":["../../../src/modules/inbound-auth-core/grant-authorization.ts"],"names":[],"mappings":";;;AAUO,KAAK,gCACX,qBAA4C,EAC5C,KAAyB,EACzB,IAAkB;IAElB,IAAI,CAAC,KAAK,CAAC,uBAAuB;QAAE,OAAO,IAAI,CAAC;IAEhD,MAAM,OAAO,GAAG,MAAM,qBAAqB,CAAC,+BAA+B,CAC1E,CAAC,KAAK,CAAC,uBAAuB,CAAC,EAC/B,IAAI,EACJ,CAAC,kBAAkB,CAAC,CACpB,CAAC;IAEF,OAAO,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,uBAAuB,CAAC,CAAC;AACnD,CAAC"}
+{"version":3,"file":"grant-authorization.js","sourceRoot":"","sources":["../../../src/modules/inbound-auth-core/grant-authorization.ts"],"names":[],"mappings":";;;AAUO,KAAK,gCACX,qBAA4C,EAC5C,KAAyB,EACzB,IAAuB;IAEvB,IAAI,CAAC,KAAK,CAAC,uBAAuB;QAAE,OAAO,IAAI,CAAC;IAEhD,MAAM,OAAO,GAAG,MAAM,qBAAqB,CAAC,+BAA+B,CAC1E,CAAC,KAAK,CAAC,uBAAuB,CAAC,EAC/B,IAAI,EACJ,CAAC,kBAAkB,CAAC,CACpB,CAAC;IAEF,OAAO,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,uBAAuB,CAAC,CAAC;AACnD,CAAC"}

package/dist/modules/inbound-auth-core/identity/trusted-source-identity.service.d.ts

@@ -1,9 +1,9 @@
 import { Logger } from '@n8n/backend-common';
 import { EventService, RoleService } from '@n8n/backend-services';
+import { RoleMappingProxyService } from '@n8n/backend-services/auth';
 import { TransactionRunner, UserRepository } from '@n8n/db';
 import { IdentityService, type Result, type Verified } from '@n8n/inbound-auth';
 import { type SecurityContext } from '@n8n/permissions';
-import { RoleMappingProxyService } from '../../../services/role-mapping-proxy.service';
 import { TrustedSourceIdentityRepository } from '../database/repositories/trusted-source-identity.repository';
 export declare class TrustedSourceIdentityService extends IdentityService {
     private readonly logger;

package/dist/modules/inbound-auth-core/identity/trusted-source-identity.service.js

@@ -13,13 +13,13 @@ exports.TrustedSourceIdentityService = void 0;
 const api_types_1 = require("@n8n/api-types");
 const backend_common_1 = require("@n8n/backend-common");
 const backend_services_1 = require("@n8n/backend-services");
+const auth_1 = require("@n8n/backend-services/auth");
 const constants_1 = require("@n8n/constants");
 const db_1 = require("@n8n/db");
 const di_1 = require("@n8n/di");
 const inbound_auth_1 = require("@n8n/inbound-auth");
 const permissions_1 = require("@n8n/permissions");
 const n8n_workflow_1 = require("n8n-workflow");
-const role_mapping_proxy_service_1 = require("../../../services/role-mapping-proxy.service");
 const trusted_source_identity_repository_1 = require("../database/repositories/trusted-source-identity.repository");
 const external_identity_1 = require("./external-identity");
 function isStale(lastSeenAt) {
@@ -282,6 +282,6 @@ let TrustedSourceIdentityService = class TrustedSourceIdentityService extends in
 exports.TrustedSourceIdentityService = TrustedSourceIdentityService;
 exports.TrustedSourceIdentityService = TrustedSourceIdentityService = __decorate([
     (0, di_1.Service)(),
-    __metadata("design:paramtypes", [backend_common_1.Logger, trusted_source_identity_repository_1.TrustedSourceIdentityRepository, db_1.UserRepository, db_1.TransactionRunner, backend_services_1.EventService, backend_services_1.RoleService, role_mapping_proxy_service_1.RoleMappingProxyService])
+    __metadata("design:paramtypes", [backend_common_1.Logger, trusted_source_identity_repository_1.TrustedSourceIdentityRepository, db_1.UserRepository, db_1.TransactionRunner, backend_services_1.EventService, backend_services_1.RoleService, auth_1.RoleMappingProxyService])
 ], TrustedSourceIdentityService);
 //# sourceMappingURL=trusted-source-identity.service.js.map

package/dist/modules/inbound-auth-core/identity/trusted-source-identity.service.js.map

@@ -1 +1 @@
-{"version":3,"file":"trusted-source-identity.service.js","sourceRoot":"","sources":["../../../../src/modules/inbound-auth-core/identity/trusted-source-identity.service.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,8CAAyD;AACzD,wDAA6C;AAC7C,4DAAkE;AAClE,8CAAsC;AACtC,gCAOiB;AACjB,gCAAkC;AAClC,oDAM2B;AAC3B,kDAAgG;AAChG,+CAA+C;AAE/C,sFAI+C;AAG/C,oHAGqE;AACrE,2DAAsD;AAGtD,SAAS,OAAO,CAAC,UAAuB;IACvC,OAAO,UAAU,KAAK,IAAI,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,UAAU,CAAC,OAAO,EAAE,GAAG,gBAAI,CAAC,IAAI,CAAC,cAAc,CAAC;AAC5F,CAAC;AAID,MAAM,oBAAoB,GAAG,6BAA6B,CAAC;AAE3D,MAAM,eAAe,GAAG,EAAE,CAAC;AAW3B,SAAS,YAAY,CACpB,QAAkB,EAClB,QAA0B,EAC1B,OAAkB,EAClB,KAAiB;IAEjB,OAAO;QACN,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC3B,OAAO;QACP,UAAU,EAAE,oBAAoB;QAChC,YAAY,EAAE;YACb,QAAQ,EAAE,QAAQ,CAAC,MAAM,CAAC,EAAE;YAC5B,MAAM,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM;YAC9B,OAAO,EAAE,QAAQ,CAAC,OAAO;SACzB;QACD,QAAQ,EAAE,QAAQ,CAAC,QAAQ;QAC3B,WAAW,EAAE,QAAQ,CAAC,MAAM;QAC5B,QAAQ,EAAE,QAAQ,CAAC,QAAQ;QAC3B,KAAK,EAAE,QAAQ,CAAC,KAAK;QACrB,SAAS,EAAE,QAAQ,CAAC,SAAS;KAC7B,CAAC;AACH,CAAC;AAYM,IAAM,4BAA4B,GAAlC,MAAM,4BAA6B,SAAQ,8BAAe;IAChE,YACkB,MAAc,EACd,UAA2C,EAC3C,KAAqB,EACrB,QAA2B,EAC3B,YAA0B,EAC1B,WAAwB,EACxB,WAAoC;QAErD,KAAK,EAAE,CAAC;sBARS,MAAM;0BACN,UAAU;qBACV,KAAK;wBACL,QAAQ;4BACR,YAAY;2BACZ,WAAW;2BACX,WAAW;IAG7B,CAAC;IAGO,KAAK,CAAC,QAAQ,CACrB,MAAqB,EACrB,MAAyC,EACzC,GAAqB;QAGrB,MAAM,QAAQ,GAAG,IAAI,CAAC,WAAW,CAAC,WAAW,EAAE,CAAC;QAChD,IAAI,QAAQ,KAAK,IAAI;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;QAE/D,MAAM,EAAE,iBAAiB,EAAE,gBAAgB,EAAE,oBAAoB,EAAE,GAClE,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,WAAW,CAAC;QAEpC,MAAM,QAAQ,GAAG,MAAM,QAAQ,CAAC,YAAY,CAC3C,EAAE,iBAAiB,EAAE,gBAAgB,EAAE,oBAAoB,EAAE,oBAAoB,IAAI,EAAE,EAAE,EACzF;YACC,OAAO,EAAE,MAAM;YAEf,SAAS,EAAE,QAAQ;SACnB,EACD,GAAG,CACH,CAAC;QAEF,MAAM,YAAY,GAAG,QAAQ,CAAC,YAAY,CAAC,IAAI,CAAC;QAEhD,IACC,YAAY,KAAK,mCAAuB;YACxC,CAAC,CAAC,MAAM,IAAI,CAAC,wBAAwB,CAAC,YAAY,EAAE,GAAG,CAAC,CAAC,EACxD,CAAC;YACF,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;QACzC,CAAC;QAED,MAAM,YAAY,GAAG,CAAC,GAAG,QAAQ,CAAC,YAAY,CAAC,MAAM,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC;YACtF,SAAS;YACT,IAAI;SACJ,CAAC,CAAC,CAAC;QAEJ,IACC,CAAC,CAAC,MAAM,IAAI,CAAC,UAAU,CAAC,iBAAiB,CACxC,YAAY,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,IAAI,CAAC,EACpC,GAAG,CACH,CAAC,EACD,CAAC;YACF,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;QACzC,CAAC;QAED,OAAO;YACN,EAAE,EAAE,IAAI;YACR,KAAK,EAAE;gBACN,YAAY;gBACZ,YAAY;gBACZ,QAAQ;gBACR,OAAO,EAAE;oBACR,YAAY,EAAE,iBAAiB,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC;oBAC5D,YAAY,EAAE,gBAAgB,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC;iBAC3D;gBACD,QAAQ;aACR;SACD,CAAC;IACH,CAAC;IAGO,KAAK,CAAC,eAAe,CAC5B,MAAqB,EACrB,MAAyC,EACzC,GAAqB;QAErB,IAAI,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,WAAW,CAAC,IAAI,KAAK,YAAY,EAAE,CAAC;YAC9D,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC;QACvC,CAAC;QACD,OAAO,MAAM,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,EAAE,GAAG,CAAC,CAAC;IACjD,CAAC;IAEO,KAAK,CAAC,eAAe,CAAC,EAAU;QACvC,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,gBAAgB,CAAC,EAAE,CAAC,CAAC;QACnD,IAAI,IAAI,KAAK,IAAI;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,iBAAiB,EAAE,CAAC;QACnE,IAAI,IAAI,CAAC,QAAQ;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,eAAe,EAAE,CAAC;QACjE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,IAAA,sBAAiB,EAAC,IAAI,CAAC,EAAE,CAAC;IACrD,CAAC;IAEO,KAAK,CAAC,aAAa,CAC1B,MAAqB,EACrB,OAAoC,EACpC,MAAyC,EACzC,GAAqB,EACrB,MAAoB;QAEpB,IAAI,OAAO,CAAC,MAAM,KAAK,QAAQ;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,kBAAkB,EAAE,CAAC;QAClF,IAAI,OAAO,CAAC,IAAI,CAAC,QAAQ;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,eAAe,EAAE,CAAC;QAGzE,IAAI,WAAW,GAAG,MAAM,CAAC;QACzB,IAAI,WAAW,KAAK,SAAS,EAAE,CAAC;YAC/B,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,eAAe,CAAC,MAAM,EAAE,MAAM,EAAE,GAAG,CAAC,CAAC;YAC/D,IAAI,CAAC,MAAM,CAAC,EAAE;gBAAE,OAAO,MAAM,CAAC;YAC9B,WAAW,GAAG,MAAM,CAAC,KAAK,CAAC;QAC5B,CAAC;QAED,IAAI,OAAO,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,CAAC;YACjC,MAAM,IAAI,CAAC,UAAU,CAAC,aAAa,CAAC,OAAO,CAAC,QAAQ,EAAE,OAAO,CAAC,OAAO,EAAE,IAAI,IAAI,EAAE,EAAE,GAAG,CAAC,CAAC;QACzF,CAAC;QAGD,MAAM,UAAU,GACf,WAAW,KAAK,SAAS;YACzB,OAAO,CAAC,UAAU,KAAK,KAAK;YAC5B,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,KAAK,oCAAsB;YAChD,CAAC,CAAC,WAAW;YACb,CAAC,CAAC,SAAS,CAAC;QAEd,OAAO;YACN,EAAE,EAAE,IAAI;YACR,KAAK,EAAE;gBACN,SAAS,EAAE,IAAA,sBAAiB,EAAC,OAAO,CAAC,IAAI,CAAC;gBAE1C,GAAG,CAAC,UAAU,IAAI;oBACjB,QAAQ,EAAE,KAAK,IAAI,EAAE;wBACpB,MAAM,UAAU,CAAC,QAAQ,CAAC,kBAAkB,CAC3C,OAAO,CAAC,IAAI,EACZ,UAAU,CAAC,QAAQ,EACnB,UAAU,CAAC,OAAO,CAClB,CAAC;wBAEF,IACC,CAAC,UAAU,CAAC,OAAO,CAAC,YAAY;4BAChC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,KAAK,UAAU,CAAC,YAAY;4BAElD,OAAO;wBACR,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,gBAAgB,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;wBAChE,OAAO,IAAI,KAAK,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAA,sBAAiB,EAAC,IAAI,CAAC,CAAC;oBAC5D,CAAC;iBACD,CAAC;aACF;SACD,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,IAAI,CACjB,MAAqB,EACrB,QAA0B,EAC1B,IAAU,EACV,GAAqB;QAErB,MAAM,GAAG,GAAmC;YAC3C,QAAQ,EAAE,MAAM,CAAC,EAAE;YACnB,OAAO,EAAE,QAAQ,CAAC,OAAO;YACzB,MAAM,EAAE,IAAI,CAAC,EAAE;YACf,UAAU,EAAE,aAAa;YACzB,MAAM,EAAE,QAAQ;SAChB,CAAC;QAEF,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,eAAe,CAAC,MAAM,EAAE,QAAQ,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;QACrE,IAAI,CAAC,MAAM,CAAC,EAAE;YAAE,OAAO,MAAM,CAAC;QAG9B,MAAM,IAAI,CAAC,UAAU,CAAC,cAAc,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;QAE/C,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,aAAa,CAAC,MAAM,CAAC,EAAE,EAAE,QAAQ,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;QACtF,IAAI,OAAO,KAAK,IAAI;YAAE,MAAM,IAAI,8BAAe,CAAC,8BAA8B,CAAC,CAAC;QAEhF,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,MAAM,EAAE,OAAO,EAAE,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC;QAE5F,IAAI,QAAQ,CAAC,EAAE,IAAI,OAAO,CAAC,IAAI,CAAC,EAAE,KAAK,IAAI,CAAC,EAAE,EAAE,CAAC;YAChD,OAAO;gBACN,EAAE,EAAE,IAAI;gBACR,KAAK,EAAE;oBACN,SAAS,EAAE,QAAQ,CAAC,KAAK,CAAC,SAAS;oBACnC,QAAQ,EAAE,KAAK,IAAI,EAAE;wBACpB,MAAM,SAAS,GAAG,MAAM,QAAQ,CAAC,KAAK,CAAC,QAAQ,EAAE,EAAE,CAAC;wBACpD,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,gCAAgC,EAAE;4BACxD,MAAM,EAAE,IAAI,CAAC,EAAE;4BACf,QAAQ,EAAE,MAAM,CAAC,EAAE;4BACnB,OAAO,EAAE,QAAQ,CAAC,OAAO;4BACzB,MAAM,EAAE,MAAM,CAAC,MAAM;4BACrB,UAAU,EAAE,aAAa;yBACzB,CAAC,CAAC;wBACH,OAAO,SAAS,CAAC;oBAClB,CAAC;iBACD;aACD,CAAC;QACH,CAAC;QACD,OAAO,QAAQ,CAAC;IACjB,CAAC;IAEO,KAAK,CAAC,SAAS,CACtB,MAAqB,EACrB,QAA0B,EAC1B,GAAqB;QAErB,MAAM,EAAE,SAAS,EAAE,GAAG,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC;QAE7C,IAAI,SAAS,CAAC,KAAK,KAAK,KAAK;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,mBAAmB,EAAE,CAAC;QAEjF,MAAM,KAAK,GAAG,QAAQ,CAAC,KAAK,CAAC;QAE7B,IAAI,KAAK,KAAK,SAAS,IAAI,CAAC,IAAA,iBAAY,EAAC,KAAK,CAAC;YAC9C,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,mBAAmB,EAAE,CAAC;QAGnD,IAAI,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,WAAW,CAAC,IAAI,KAAK,KAAK;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;QAE/F,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,QAAQ,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;QAC9D,IAAI,CAAC,MAAM,CAAC,EAAE;YAAE,OAAO,MAAM,CAAC;QAC9B,MAAM,EAAE,YAAY,EAAE,IAAI,EAAE,YAAY,EAAE,GAAG,MAAM,CAAC,KAAK,CAAC;QAE1D,MAAM,CAAC,SAAS,GAAG,EAAE,EAAE,GAAG,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,WAAW,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QAEnF,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,qBAAqB,CACvD,GAAG,EACH;YACC,KAAK;YACL,SAAS,EAAE,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,eAAe,CAAC;YAC9C,QAAQ,EAAE,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,eAAe,CAAC;YAClD,IAAI,EAAE;gBACL,IAAI,EAAE,IAAI;aACV;YACD,QAAQ,EAAE,oBAAoB;SAC9B,EACD;YACC,QAAQ,EAAE,MAAM,CAAC,EAAE;YACnB,OAAO,EAAE,QAAQ,CAAC,OAAO;YACzB,UAAU,EAAE,KAAK;YACjB,MAAM,EAAE,QAAQ;SAChB,EACD,YAAY,CACZ,CAAC;QAEF,OAAO;YACN,EAAE,EAAE,IAAI;YACR,KAAK,EAAE;gBACN,SAAS,EAAE,IAAA,sBAAiB,EAAC,IAAI,CAAC;gBAClC,QAAQ,EAAE,KAAK,IAAI,EAAE;oBACpB,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,iCAAiC,EAAE;wBACzD,MAAM,EAAE,IAAI,CAAC,EAAE;wBACf,QAAQ,EAAE,MAAM,CAAC,EAAE;wBACnB,OAAO,EAAE,QAAQ,CAAC,OAAO;wBACzB,MAAM,EAAE,MAAM,CAAC,MAAM;wBACrB,IAAI;qBACJ,CAAC,CAAC;oBACH,OAAO,SAAS,CAAC;gBAClB,CAAC;aACD;SACD,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,wBAAwB,CAAC,IAAY,EAAE,GAAqB;QACzE,IAAI,IAAI,KAAK,oCAAsB;YAAE,OAAO,KAAK,CAAC;QAClD,IAAI,CAAC,CAAC,MAAM,IAAI,CAAC,UAAU,CAAC,gBAAgB,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;YAAE,OAAO,KAAK,CAAC;QACvE,OAAO,IAAI,CAAC,WAAW,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC;IAC9C,CAAC;IAEO,KAAK,CAAC,eAAe,CAC5B,MAAqB,EACrB,QAA0B,EAC1B,GAAqB;QAErB,MAAM,EAAE,WAAW,EAAE,GAAG,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC;QAE/C,IAAI,WAAW,KAAK,KAAK;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,cAAc,EAAE,CAAC;QAGxE,MAAM,WAAW,GAChB,WAAW,KAAK,KAAK,IAAI,CAAC,WAAW,KAAK,eAAe,IAAI,QAAQ,CAAC,aAAa,KAAK,IAAI,CAAC,CAAC;QAC/F,MAAM,KAAK,GAAG,WAAW,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;QAEvD,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YACzB,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,eAAe,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;YAC/D,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;gBACnB,IAAI,IAAI,CAAC,QAAQ;oBAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,eAAe,EAAE,CAAC;gBACjE,IAAI,IAAI,CAAC,IAAI,CAAC,IAAI,KAAK,oCAAsB;oBAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,cAAc,EAAE,CAAC;gBAE5F,OAAO,MAAM,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC;YACrD,CAAC;QACF,CAAC;QACD,OAAO,MAAM,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,EAAE,GAAG,QAAQ,EAAE,KAAK,EAAE,EAAE,GAAG,CAAC,CAAC;IAClE,CAAC;IAEO,KAAK,CAAC,cAAc,CAC3B,MAAqB,EACrB,QAA0B;QAE1B,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE;YACxD,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,aAAa,CAAC,MAAM,CAAC,EAAE,EAAE,QAAQ,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;YACtF,IAAI,OAAO,KAAK,IAAI;gBAAE,OAAO,MAAM,IAAI,CAAC,aAAa,CAAC,MAAM,EAAE,OAAO,EAAE,QAAQ,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;YAC1F,OAAO,MAAM,IAAI,CAAC,eAAe,CAAC,MAAM,EAAE,QAAQ,EAAE,GAAG,CAAC,CAAC;QAC1D,CAAC,CAAC,CAAC;QACH,IAAI,MAAM,CAAC,EAAE,EAAE,CAAC;YACf,MAAM,SAAS,GAAG,MAAM,MAAM,CAAC,KAAK,CAAC,QAAQ,EAAE,EAAE,CAAC;YAClD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,SAAS,IAAI,MAAM,CAAC,KAAK,CAAC,SAAS,EAAE,CAAC;QACjE,CAAC;QAED,OAAO,MAAM,CAAC;IACf,CAAC;IAED,KAAK,CAAC,QAAQ,CAAC,QAAkB;QAChC,MAAM,EAAE,MAAM,EAAE,GAAG,QAAQ,CAAC;QAC5B,MAAM,QAAQ,GAAG,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC;QAExC,MAAM,UAAU,GAAG,IAAA,mCAAe,EAAC,QAAQ,CAAC,MAAM,EAAE,QAAQ,CAAC,YAAY,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;QAExF,IAAI,CAAC,UAAU,CAAC,EAAE;YAAE,OAAO,UAAU,CAAC;QAEtC,MAAM,gBAAgB,GAAG,UAAU,CAAC,KAAK,CAAC;QAE1C,MAAM,QAAQ,GACb,QAAQ,CAAC,OAAO,KAAK,aAAa;YACjC,CAAC,CAAC,MAAM,IAAI,CAAC,eAAe,CAAC,gBAAgB,CAAC,OAAO,CAAC;YACtD,CAAC,CAAC,MAAM,IAAI,CAAC,cAAc,CAAC,MAAM,EAAE,gBAAgB,CAAC,CAAC;QAExD,IAAI,CAAC,QAAQ,CAAC,EAAE;YAAE,OAAO,QAAQ,CAAC;QAElC,OAAO;YACN,EAAE,EAAE,IAAI;YACR,KAAK,EAAE,YAAY,CAAC,QAAQ,EAAE,gBAAgB,EAAE,QAAQ,CAAC,KAAK,CAAC;SAC/D,CAAC;IACH,CAAC;CACD,CAAA;;uCAxUY,4BAA4B;IADxC,IAAA,YAAO,GAAE;qCAGiB,uBAAM,EACF,oEAA+B,EACpC,mBAAc,EACX,sBAAiB,EACb,+BAAY,EACb,8BAAW,EACX,oDAAuB;GAR1C,4BAA4B,CAwUxC"}
+{"version":3,"file":"trusted-source-identity.service.js","sourceRoot":"","sources":["../../../../src/modules/inbound-auth-core/identity/trusted-source-identity.service.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,8CAAyD;AACzD,wDAA6C;AAC7C,4DAAkE;AAClE,qDAIoC;AACpC,8CAAsC;AACtC,gCAOiB;AACjB,gCAAkC;AAClC,oDAM2B;AAC3B,kDAAgG;AAChG,+CAA+C;AAG/C,oHAGqE;AACrE,2DAAsD;AAGtD,SAAS,OAAO,CAAC,UAAuB;IACvC,OAAO,UAAU,KAAK,IAAI,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,UAAU,CAAC,OAAO,EAAE,GAAG,gBAAI,CAAC,IAAI,CAAC,cAAc,CAAC;AAC5F,CAAC;AAID,MAAM,oBAAoB,GAAG,6BAA6B,CAAC;AAE3D,MAAM,eAAe,GAAG,EAAE,CAAC;AAW3B,SAAS,YAAY,CACpB,QAAkB,EAClB,QAA0B,EAC1B,OAAkB,EAClB,KAAiB;IAEjB,OAAO;QACN,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC3B,OAAO;QACP,UAAU,EAAE,oBAAoB;QAChC,YAAY,EAAE;YACb,QAAQ,EAAE,QAAQ,CAAC,MAAM,CAAC,EAAE;YAC5B,MAAM,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM;YAC9B,OAAO,EAAE,QAAQ,CAAC,OAAO;SACzB;QACD,QAAQ,EAAE,QAAQ,CAAC,QAAQ;QAC3B,WAAW,EAAE,QAAQ,CAAC,MAAM;QAC5B,QAAQ,EAAE,QAAQ,CAAC,QAAQ;QAC3B,KAAK,EAAE,QAAQ,CAAC,KAAK;QACrB,SAAS,EAAE,QAAQ,CAAC,SAAS;KAC7B,CAAC;AACH,CAAC;AAYM,IAAM,4BAA4B,GAAlC,MAAM,4BAA6B,SAAQ,8BAAe;IAChE,YACkB,MAAc,EACd,UAA2C,EAC3C,KAAqB,EACrB,QAA2B,EAC3B,YAA0B,EAC1B,WAAwB,EACxB,WAAoC;QAErD,KAAK,EAAE,CAAC;sBARS,MAAM;0BACN,UAAU;qBACV,KAAK;wBACL,QAAQ;4BACR,YAAY;2BACZ,WAAW;2BACX,WAAW;IAG7B,CAAC;IAGO,KAAK,CAAC,QAAQ,CACrB,MAAqB,EACrB,MAAyC,EACzC,GAAqB;QAGrB,MAAM,QAAQ,GAAG,IAAI,CAAC,WAAW,CAAC,WAAW,EAAE,CAAC;QAChD,IAAI,QAAQ,KAAK,IAAI;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;QAE/D,MAAM,EAAE,iBAAiB,EAAE,gBAAgB,EAAE,oBAAoB,EAAE,GAClE,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,WAAW,CAAC;QAEpC,MAAM,QAAQ,GAAG,MAAM,QAAQ,CAAC,YAAY,CAC3C,EAAE,iBAAiB,EAAE,gBAAgB,EAAE,oBAAoB,EAAE,oBAAoB,IAAI,EAAE,EAAE,EACzF;YACC,OAAO,EAAE,MAAM;YAEf,SAAS,EAAE,QAAQ;SACnB,EACD,GAAG,CACH,CAAC;QAEF,MAAM,YAAY,GAAG,QAAQ,CAAC,YAAY,CAAC,IAAI,CAAC;QAEhD,IACC,YAAY,KAAK,mCAAuB;YACxC,CAAC,CAAC,MAAM,IAAI,CAAC,wBAAwB,CAAC,YAAY,EAAE,GAAG,CAAC,CAAC,EACxD,CAAC;YACF,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;QACzC,CAAC;QAED,MAAM,YAAY,GAAG,CAAC,GAAG,QAAQ,CAAC,YAAY,CAAC,MAAM,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC;YACtF,SAAS;YACT,IAAI;SACJ,CAAC,CAAC,CAAC;QAEJ,IACC,CAAC,CAAC,MAAM,IAAI,CAAC,UAAU,CAAC,iBAAiB,CACxC,YAAY,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,IAAI,CAAC,EACpC,GAAG,CACH,CAAC,EACD,CAAC;YACF,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;QACzC,CAAC;QAED,OAAO;YACN,EAAE,EAAE,IAAI;YACR,KAAK,EAAE;gBACN,YAAY;gBACZ,YAAY;gBACZ,QAAQ;gBACR,OAAO,EAAE;oBACR,YAAY,EAAE,iBAAiB,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC;oBAC5D,YAAY,EAAE,gBAAgB,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC;iBAC3D;gBACD,QAAQ;aACR;SACD,CAAC;IACH,CAAC;IAGO,KAAK,CAAC,eAAe,CAC5B,MAAqB,EACrB,MAAyC,EACzC,GAAqB;QAErB,IAAI,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,WAAW,CAAC,IAAI,KAAK,YAAY,EAAE,CAAC;YAC9D,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC;QACvC,CAAC;QACD,OAAO,MAAM,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,EAAE,GAAG,CAAC,CAAC;IACjD,CAAC;IAEO,KAAK,CAAC,eAAe,CAAC,EAAU;QACvC,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,gBAAgB,CAAC,EAAE,CAAC,CAAC;QACnD,IAAI,IAAI,KAAK,IAAI;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,iBAAiB,EAAE,CAAC;QACnE,IAAI,IAAI,CAAC,QAAQ;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,eAAe,EAAE,CAAC;QACjE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,IAAA,sBAAiB,EAAC,IAAI,CAAC,EAAE,CAAC;IACrD,CAAC;IAEO,KAAK,CAAC,aAAa,CAC1B,MAAqB,EACrB,OAAoC,EACpC,MAAyC,EACzC,GAAqB,EACrB,MAAoB;QAEpB,IAAI,OAAO,CAAC,MAAM,KAAK,QAAQ;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,kBAAkB,EAAE,CAAC;QAClF,IAAI,OAAO,CAAC,IAAI,CAAC,QAAQ;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,eAAe,EAAE,CAAC;QAGzE,IAAI,WAAW,GAAG,MAAM,CAAC;QACzB,IAAI,WAAW,KAAK,SAAS,EAAE,CAAC;YAC/B,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,eAAe,CAAC,MAAM,EAAE,MAAM,EAAE,GAAG,CAAC,CAAC;YAC/D,IAAI,CAAC,MAAM,CAAC,EAAE;gBAAE,OAAO,MAAM,CAAC;YAC9B,WAAW,GAAG,MAAM,CAAC,KAAK,CAAC;QAC5B,CAAC;QAED,IAAI,OAAO,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,CAAC;YACjC,MAAM,IAAI,CAAC,UAAU,CAAC,aAAa,CAAC,OAAO,CAAC,QAAQ,EAAE,OAAO,CAAC,OAAO,EAAE,IAAI,IAAI,EAAE,EAAE,GAAG,CAAC,CAAC;QACzF,CAAC;QAGD,MAAM,UAAU,GACf,WAAW,KAAK,SAAS;YACzB,OAAO,CAAC,UAAU,KAAK,KAAK;YAC5B,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,KAAK,oCAAsB;YAChD,CAAC,CAAC,WAAW;YACb,CAAC,CAAC,SAAS,CAAC;QAEd,OAAO;YACN,EAAE,EAAE,IAAI;YACR,KAAK,EAAE;gBACN,SAAS,EAAE,IAAA,sBAAiB,EAAC,OAAO,CAAC,IAAI,CAAC;gBAE1C,GAAG,CAAC,UAAU,IAAI;oBACjB,QAAQ,EAAE,KAAK,IAAI,EAAE;wBACpB,MAAM,UAAU,CAAC,QAAQ,CAAC,kBAAkB,CAC3C,OAAO,CAAC,IAAI,EACZ,UAAU,CAAC,QAAQ,EACnB,UAAU,CAAC,OAAO,CAClB,CAAC;wBAEF,IACC,CAAC,UAAU,CAAC,OAAO,CAAC,YAAY;4BAChC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,KAAK,UAAU,CAAC,YAAY;4BAElD,OAAO;wBACR,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,gBAAgB,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;wBAChE,OAAO,IAAI,KAAK,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAA,sBAAiB,EAAC,IAAI,CAAC,CAAC;oBAC5D,CAAC;iBACD,CAAC;aACF;SACD,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,IAAI,CACjB,MAAqB,EACrB,QAA0B,EAC1B,IAAU,EACV,GAAqB;QAErB,MAAM,GAAG,GAAmC;YAC3C,QAAQ,EAAE,MAAM,CAAC,EAAE;YACnB,OAAO,EAAE,QAAQ,CAAC,OAAO;YACzB,MAAM,EAAE,IAAI,CAAC,EAAE;YACf,UAAU,EAAE,aAAa;YACzB,MAAM,EAAE,QAAQ;SAChB,CAAC;QAEF,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,eAAe,CAAC,MAAM,EAAE,QAAQ,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;QACrE,IAAI,CAAC,MAAM,CAAC,EAAE;YAAE,OAAO,MAAM,CAAC;QAG9B,MAAM,IAAI,CAAC,UAAU,CAAC,cAAc,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;QAE/C,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,aAAa,CAAC,MAAM,CAAC,EAAE,EAAE,QAAQ,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;QACtF,IAAI,OAAO,KAAK,IAAI;YAAE,MAAM,IAAI,8BAAe,CAAC,8BAA8B,CAAC,CAAC;QAEhF,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,MAAM,EAAE,OAAO,EAAE,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC;QAE5F,IAAI,QAAQ,CAAC,EAAE,IAAI,OAAO,CAAC,IAAI,CAAC,EAAE,KAAK,IAAI,CAAC,EAAE,EAAE,CAAC;YAChD,OAAO;gBACN,EAAE,EAAE,IAAI;gBACR,KAAK,EAAE;oBACN,SAAS,EAAE,QAAQ,CAAC,KAAK,CAAC,SAAS;oBACnC,QAAQ,EAAE,KAAK,IAAI,EAAE;wBACpB,MAAM,SAAS,GAAG,MAAM,QAAQ,CAAC,KAAK,CAAC,QAAQ,EAAE,EAAE,CAAC;wBACpD,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,gCAAgC,EAAE;4BACxD,MAAM,EAAE,IAAI,CAAC,EAAE;4BACf,QAAQ,EAAE,MAAM,CAAC,EAAE;4BACnB,OAAO,EAAE,QAAQ,CAAC,OAAO;4BACzB,MAAM,EAAE,MAAM,CAAC,MAAM;4BACrB,UAAU,EAAE,aAAa;yBACzB,CAAC,CAAC;wBACH,OAAO,SAAS,CAAC;oBAClB,CAAC;iBACD;aACD,CAAC;QACH,CAAC;QACD,OAAO,QAAQ,CAAC;IACjB,CAAC;IAEO,KAAK,CAAC,SAAS,CACtB,MAAqB,EACrB,QAA0B,EAC1B,GAAqB;QAErB,MAAM,EAAE,SAAS,EAAE,GAAG,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC;QAE7C,IAAI,SAAS,CAAC,KAAK,KAAK,KAAK;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,mBAAmB,EAAE,CAAC;QAEjF,MAAM,KAAK,GAAG,QAAQ,CAAC,KAAK,CAAC;QAE7B,IAAI,KAAK,KAAK,SAAS,IAAI,CAAC,IAAA,iBAAY,EAAC,KAAK,CAAC;YAC9C,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,mBAAmB,EAAE,CAAC;QAGnD,IAAI,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,WAAW,CAAC,IAAI,KAAK,KAAK;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;QAE/F,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,QAAQ,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;QAC9D,IAAI,CAAC,MAAM,CAAC,EAAE;YAAE,OAAO,MAAM,CAAC;QAC9B,MAAM,EAAE,YAAY,EAAE,IAAI,EAAE,YAAY,EAAE,GAAG,MAAM,CAAC,KAAK,CAAC;QAE1D,MAAM,CAAC,SAAS,GAAG,EAAE,EAAE,GAAG,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,WAAW,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QAEnF,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,qBAAqB,CACvD,GAAG,EACH;YACC,KAAK;YACL,SAAS,EAAE,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,eAAe,CAAC;YAC9C,QAAQ,EAAE,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,eAAe,CAAC;YAClD,IAAI,EAAE;gBACL,IAAI,EAAE,IAAI;aACV;YACD,QAAQ,EAAE,oBAAoB;SAC9B,EACD;YACC,QAAQ,EAAE,MAAM,CAAC,EAAE;YACnB,OAAO,EAAE,QAAQ,CAAC,OAAO;YACzB,UAAU,EAAE,KAAK;YACjB,MAAM,EAAE,QAAQ;SAChB,EACD,YAAY,CACZ,CAAC;QAEF,OAAO;YACN,EAAE,EAAE,IAAI;YACR,KAAK,EAAE;gBACN,SAAS,EAAE,IAAA,sBAAiB,EAAC,IAAI,CAAC;gBAClC,QAAQ,EAAE,KAAK,IAAI,EAAE;oBACpB,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,iCAAiC,EAAE;wBACzD,MAAM,EAAE,IAAI,CAAC,EAAE;wBACf,QAAQ,EAAE,MAAM,CAAC,EAAE;wBACnB,OAAO,EAAE,QAAQ,CAAC,OAAO;wBACzB,MAAM,EAAE,MAAM,CAAC,MAAM;wBACrB,IAAI;qBACJ,CAAC,CAAC;oBACH,OAAO,SAAS,CAAC;gBAClB,CAAC;aACD;SACD,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,wBAAwB,CAAC,IAAY,EAAE,GAAqB;QACzE,IAAI,IAAI,KAAK,oCAAsB;YAAE,OAAO,KAAK,CAAC;QAClD,IAAI,CAAC,CAAC,MAAM,IAAI,CAAC,UAAU,CAAC,gBAAgB,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;YAAE,OAAO,KAAK,CAAC;QACvE,OAAO,IAAI,CAAC,WAAW,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC;IAC9C,CAAC;IAEO,KAAK,CAAC,eAAe,CAC5B,MAAqB,EACrB,QAA0B,EAC1B,GAAqB;QAErB,MAAM,EAAE,WAAW,EAAE,GAAG,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC;QAE/C,IAAI,WAAW,KAAK,KAAK;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,cAAc,EAAE,CAAC;QAGxE,MAAM,WAAW,GAChB,WAAW,KAAK,KAAK,IAAI,CAAC,WAAW,KAAK,eAAe,IAAI,QAAQ,CAAC,aAAa,KAAK,IAAI,CAAC,CAAC;QAC/F,MAAM,KAAK,GAAG,WAAW,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;QAEvD,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YACzB,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,eAAe,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;YAC/D,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;gBACnB,IAAI,IAAI,CAAC,QAAQ;oBAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,eAAe,EAAE,CAAC;gBACjE,IAAI,IAAI,CAAC,IAAI,CAAC,IAAI,KAAK,oCAAsB;oBAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,cAAc,EAAE,CAAC;gBAE5F,OAAO,MAAM,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC;YACrD,CAAC;QACF,CAAC;QACD,OAAO,MAAM,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,EAAE,GAAG,QAAQ,EAAE,KAAK,EAAE,EAAE,GAAG,CAAC,CAAC;IAClE,CAAC;IAEO,KAAK,CAAC,cAAc,CAC3B,MAAqB,EACrB,QAA0B;QAE1B,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE;YACxD,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,aAAa,CAAC,MAAM,CAAC,EAAE,EAAE,QAAQ,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;YACtF,IAAI,OAAO,KAAK,IAAI;gBAAE,OAAO,MAAM,IAAI,CAAC,aAAa,CAAC,MAAM,EAAE,OAAO,EAAE,QAAQ,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;YAC1F,OAAO,MAAM,IAAI,CAAC,eAAe,CAAC,MAAM,EAAE,QAAQ,EAAE,GAAG,CAAC,CAAC;QAC1D,CAAC,CAAC,CAAC;QACH,IAAI,MAAM,CAAC,EAAE,EAAE,CAAC;YACf,MAAM,SAAS,GAAG,MAAM,MAAM,CAAC,KAAK,CAAC,QAAQ,EAAE,EAAE,CAAC;YAClD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,SAAS,IAAI,MAAM,CAAC,KAAK,CAAC,SAAS,EAAE,CAAC;QACjE,CAAC;QAED,OAAO,MAAM,CAAC;IACf,CAAC;IAED,KAAK,CAAC,QAAQ,CAAC,QAAkB;QAChC,MAAM,EAAE,MAAM,EAAE,GAAG,QAAQ,CAAC;QAC5B,MAAM,QAAQ,GAAG,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC;QAExC,MAAM,UAAU,GAAG,IAAA,mCAAe,EAAC,QAAQ,CAAC,MAAM,EAAE,QAAQ,CAAC,YAAY,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;QAExF,IAAI,CAAC,UAAU,CAAC,EAAE;YAAE,OAAO,UAAU,CAAC;QAEtC,MAAM,gBAAgB,GAAG,UAAU,CAAC,KAAK,CAAC;QAE1C,MAAM,QAAQ,GACb,QAAQ,CAAC,OAAO,KAAK,aAAa;YACjC,CAAC,CAAC,MAAM,IAAI,CAAC,eAAe,CAAC,gBAAgB,CAAC,OAAO,CAAC;YACtD,CAAC,CAAC,MAAM,IAAI,CAAC,cAAc,CAAC,MAAM,EAAE,gBAAgB,CAAC,CAAC;QAExD,IAAI,CAAC,QAAQ,CAAC,EAAE;YAAE,OAAO,QAAQ,CAAC;QAElC,OAAO;YACN,EAAE,EAAE,IAAI;YACR,KAAK,EAAE,YAAY,CAAC,QAAQ,EAAE,gBAAgB,EAAE,QAAQ,CAAC,KAAK,CAAC;SAC/D,CAAC;IACH,CAAC;CACD,CAAA;;uCAxUY,4BAA4B;IADxC,IAAA,YAAO,GAAE;qCAGiB,uBAAM,EACF,oEAA+B,EACpC,mBAAc,EACX,sBAAiB,EACb,+BAAY,EACb,8BAAW,EACX,8BAAuB;GAR1C,4BAA4B,CAwUxC"}

package/dist/modules/inbound-auth-core/inbound-auth-core.module.d.ts

@@ -1,6 +1,9 @@
 import type { ModuleInterface } from '@n8n/decorators';
 export declare class InboundAuthCoreModule implements ModuleInterface {
     init(): Promise<void>;
+    context(): Promise<{
+        trustedSourceDirectory: import("./trusted-source-directory.service.js").TrustedSourceDbDirectory;
+    }>;
     systemTasks(): Promise<typeof import("./trusted-source-discovery.task.js").TrustedSourceDiscoveryTask[]>;
     entities(): Promise<(typeof import("./database/entities/trusted-source.entity.js").TrustedSourceEntity | typeof import("./database/entities/trusted-source-identity.entity.js").TrustedSourceIdentityEntity)[]>;
 }

package/dist/modules/inbound-auth-core/inbound-auth-core.module.js

@@ -7,23 +7,18 @@ var __decorate = (this && this.__decorate) || function (decorators, target, key,
 };
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.InboundAuthCoreModule = void 0;
+const backend_common_1 = require("@n8n/backend-common");
 const decorators_1 = require("@n8n/decorators");
 const di_1 = require("@n8n/di");
 const inbound_auth_1 = require("@n8n/inbound-auth");
 const n8n_core_1 = require("n8n-core");
-const n8n_workflow_1 = require("n8n-workflow");
-class UnregisteredLocalAuthorizationServer extends inbound_auth_1.LocalAuthorizationServer {
-    async getMetadata() {
-        throw new n8n_workflow_1.OperationalError('No local authorization server is registered');
-    }
-    async getJwks() {
-        throw new n8n_workflow_1.OperationalError('No local authorization server is registered');
-    }
-}
+const auth_1 = require("@n8n/backend-services/auth");
 let InboundAuthCoreModule = class InboundAuthCoreModule {
     async init() {
+        const { LocalAuthorizationServerProxy } = await import('./local-authorization-server.proxy.js');
+        const localServer = di_1.Container.get(LocalAuthorizationServerProxy);
         if (!di_1.Container.has(inbound_auth_1.LocalAuthorizationServer)) {
-            di_1.Container.set(inbound_auth_1.LocalAuthorizationServer, new UnregisteredLocalAuthorizationServer());
+            di_1.Container.set(inbound_auth_1.LocalAuthorizationServer, localServer);
         }
         const { TrustedSourceDbStore } = await import('./trusted-source.store.js');
         if (!di_1.Container.has(inbound_auth_1.TrustedSourceStore)) {
@@ -36,6 +31,21 @@ let InboundAuthCoreModule = class InboundAuthCoreModule {
         if (di_1.Container.get(n8n_core_1.InstanceSettings).instanceType === 'main') {
             const { SystemTrustedSourceSeeder } = await import('./system-trusted-source.seeder.js');
             await di_1.Container.get(SystemTrustedSourceSeeder).seed();
+            const { SYSTEM_TRUSTED_SOURCE_ID } = await import('./constants.js');
+            await localServer.onProviderRegistered(async () => {
+                try {
+                    const { TrustedSourceDiscoveryService } = await import('./trusted-source-discovery.service.js');
+                    await di_1.Container.get(TrustedSourceDiscoveryService).refresh(SYSTEM_TRUSTED_SOURCE_ID);
+                }
+                catch (error) {
+                    di_1.Container.get(backend_common_1.Logger).warn('Could not discover the system trusted source at boot', {
+                        error,
+                    });
+                }
+            });
+            if ((0, backend_common_1.isEnvFeatureEnabled)('N8N_ENV_FEAT_TRUSTED_SOURCES_API_ENABLED')) {
+                await import('./trusted-source.controller.js');
+            }
         }
         const { OAuth2AuthenticationService } = await import('./authentication.service.js');
         di_1.Container.set(inbound_auth_1.AuthenticationService, di_1.Container.get(OAuth2AuthenticationService));
@@ -45,6 +55,18 @@ let InboundAuthCoreModule = class InboundAuthCoreModule {
         }
         const { InboundAuthPipeline } = await import('./authentication-pipeline.js');
         di_1.Container.set(inbound_auth_1.AuthenticationPipeline, di_1.Container.get(InboundAuthPipeline));
+        const { InboundResourceAdmission } = await import('./resource-admission.js');
+        di_1.Container.set(inbound_auth_1.ResourceAdmission, di_1.Container.get(InboundResourceAdmission));
+        if (di_1.Container.get(n8n_core_1.InstanceSettings).instanceType === 'main') {
+            const { PublicApiProtectedResource } = await import('./public-api-protected-resource.js');
+            const { PublicApiOAuthStrategy } = await import('./public-api-oauth.strategy.js');
+            di_1.Container.get(auth_1.ProtectedResourceRegistry).register(di_1.Container.get(PublicApiProtectedResource));
+            di_1.Container.get(auth_1.AuthStrategyRegistry).register(di_1.Container.get(PublicApiOAuthStrategy));
+        }
+    }
+    async context() {
+        const { TrustedSourceDbDirectory } = await import('./trusted-source-directory.service.js');
+        return { trustedSourceDirectory: di_1.Container.get(TrustedSourceDbDirectory) };
     }
     async systemTasks() {
         const { TrustedSourceDiscoveryTask } = await import('./trusted-source-discovery.task.js');

package/dist/modules/inbound-auth-core/inbound-auth-core.module.js.map

@@ -1 +1 @@
-{"version":3,"file":"inbound-auth-core.module.js","sourceRoot":"","sources":["../../../src/modules/inbound-auth-core/inbound-auth-core.module.ts"],"names":[],"mappings":";;;;;;;;;AACA,gDAAgD;AAChD,gCAAoC;AACpC,oDAS2B;AAC3B,uCAA4C;AAC5C,+CAAgD;AAGhD,MAAM,oCAAqC,SAAQ,uCAAwB;IAC1E,KAAK,CAAC,WAAW;QAChB,MAAM,IAAI,+BAAgB,CAAC,6CAA6C,CAAC,CAAC;IAC3E,CAAC;IAED,KAAK,CAAC,OAAO;QACZ,MAAM,IAAI,+BAAgB,CAAC,6CAA6C,CAAC,CAAC;IAC3E,CAAC;CACD;AASM,IAAM,qBAAqB,GAA3B,MAAM,qBAAqB;IACjC,KAAK,CAAC,IAAI;QAET,IAAI,CAAC,cAAS,CAAC,GAAG,CAAC,uCAAwB,CAAC,EAAE,CAAC;YAC9C,cAAS,CAAC,GAAG,CAAC,uCAAwB,EAAE,IAAI,oCAAoC,EAAE,CAAC,CAAC;QACrF,CAAC;QAED,MAAM,EAAE,oBAAoB,EAAE,GAAG,MAAM,MAAM,CAAC,2BAA2B,CAAC,CAAC;QAC3E,IAAI,CAAC,cAAS,CAAC,GAAG,CAAC,iCAAkB,CAAC,EAAE,CAAC;YACxC,cAAS,CAAC,GAAG,CAAC,iCAAkB,EAAE,cAAS,CAAC,GAAG,CAAC,oBAAoB,CAAC,CAAC,CAAC;QACxE,CAAC;QAED,MAAM,EAAE,mBAAmB,EAAE,GAAG,MAAM,MAAM,CAAC,0BAA0B,CAAC,CAAC;QACzE,IAAI,CAAC,cAAS,CAAC,GAAG,CAAC,gCAAiB,CAAC,EAAE,CAAC;YACvC,cAAS,CAAC,GAAG,CAAC,gCAAiB,EAAE,cAAS,CAAC,GAAG,CAAC,mBAAmB,CAAC,CAAC,CAAC;QACtE,CAAC;QAED,IAAI,cAAS,CAAC,GAAG,CAAC,2BAAgB,CAAC,CAAC,YAAY,KAAK,MAAM,EAAE,CAAC;YAC7D,MAAM,EAAE,yBAAyB,EAAE,GAAG,MAAM,MAAM,CAAC,mCAAmC,CAAC,CAAC;YACxF,MAAM,cAAS,CAAC,GAAG,CAAC,yBAAyB,CAAC,CAAC,IAAI,EAAE,CAAC;QACvD,CAAC;QAED,MAAM,EAAE,2BAA2B,EAAE,GAAG,MAAM,MAAM,CAAC,6BAA6B,CAAC,CAAC;QACpF,cAAS,CAAC,GAAG,CAAC,oCAAqB,EAAE,cAAS,CAAC,GAAG,CAAC,2BAA2B,CAAC,CAAC,CAAC;QAEjF,MAAM,EAAE,4BAA4B,EAAE,GAAG,MAAM,MAAM,CACpD,+CAA+C,CAC/C,CAAC;QACF,IAAI,CAAC,cAAS,CAAC,GAAG,CAAC,8BAAe,CAAC,EAAE,CAAC;YACrC,cAAS,CAAC,GAAG,CAAC,8BAAe,EAAE,cAAS,CAAC,GAAG,CAAC,4BAA4B,CAAC,CAAC,CAAC;QAC7E,CAAC;QAED,MAAM,EAAE,mBAAmB,EAAE,GAAG,MAAM,MAAM,CAAC,8BAA8B,CAAC,CAAC;QAC7E,cAAS,CAAC,GAAG,CAAC,qCAAsB,EAAE,cAAS,CAAC,GAAG,CAAC,mBAAmB,CAAC,CAAC,CAAC;IAC3E,CAAC;IAGD,KAAK,CAAC,WAAW;QAChB,MAAM,EAAE,0BAA0B,EAAE,GAAG,MAAM,MAAM,CAAC,oCAAoC,CAAC,CAAC;QAC1F,OAAO,CAAC,0BAA0B,CAAC,CAAC;IACrC,CAAC;IAED,KAAK,CAAC,QAAQ;QACb,MAAM,EAAE,mBAAmB,EAAE,GAAG,MAAM,MAAM,CAAC,8CAA8C,CAAC,CAAC;QAC7F,MAAM,EAAE,2BAA2B,EAAE,GAAG,MAAM,MAAM,CACnD,uDAAuD,CACvD,CAAC;QAEF,OAAO,CAAC,mBAAmB,EAAE,2BAA2B,CAAC,CAAC;IAC3D,CAAC;CACD,CAAA;;gCAlDY,qBAAqB;IADjC,IAAA,0BAAa,EAAC,EAAE,IAAI,EAAE,mBAAmB,EAAE,aAAa,EAAE,CAAC,MAAM,EAAE,SAAS,EAAE,QAAQ,CAAC,EAAE,CAAC;GAC9E,qBAAqB,CAkDjC"}
+{"version":3,"file":"inbound-auth-core.module.js","sourceRoot":"","sources":["../../../src/modules/inbound-auth-core/inbound-auth-core.module.ts"],"names":[],"mappings":";;;;;;;;;AAAA,wDAAkE;AAElE,gDAAgD;AAChD,gCAAoC;AACpC,oDAQ2B;AAC3B,uCAA4C;AAE5C,qDAA6F;AAStF,IAAM,qBAAqB,GAA3B,MAAM,qBAAqB;IACjC,KAAK,CAAC,IAAI;QAET,MAAM,EAAE,6BAA6B,EAAE,GAAG,MAAM,MAAM,CAAC,uCAAuC,CAAC,CAAC;QAChG,MAAM,WAAW,GAAG,cAAS,CAAC,GAAG,CAAC,6BAA6B,CAAC,CAAC;QACjE,IAAI,CAAC,cAAS,CAAC,GAAG,CAAC,uCAAwB,CAAC,EAAE,CAAC;YAC9C,cAAS,CAAC,GAAG,CAAC,uCAAwB,EAAE,WAAW,CAAC,CAAC;QACtD,CAAC;QAED,MAAM,EAAE,oBAAoB,EAAE,GAAG,MAAM,MAAM,CAAC,2BAA2B,CAAC,CAAC;QAC3E,IAAI,CAAC,cAAS,CAAC,GAAG,CAAC,iCAAkB,CAAC,EAAE,CAAC;YACxC,cAAS,CAAC,GAAG,CAAC,iCAAkB,EAAE,cAAS,CAAC,GAAG,CAAC,oBAAoB,CAAC,CAAC,CAAC;QACxE,CAAC;QAED,MAAM,EAAE,mBAAmB,EAAE,GAAG,MAAM,MAAM,CAAC,0BAA0B,CAAC,CAAC;QACzE,IAAI,CAAC,cAAS,CAAC,GAAG,CAAC,gCAAiB,CAAC,EAAE,CAAC;YACvC,cAAS,CAAC,GAAG,CAAC,gCAAiB,EAAE,cAAS,CAAC,GAAG,CAAC,mBAAmB,CAAC,CAAC,CAAC;QACtE,CAAC;QAED,IAAI,cAAS,CAAC,GAAG,CAAC,2BAAgB,CAAC,CAAC,YAAY,KAAK,MAAM,EAAE,CAAC;YAC7D,MAAM,EAAE,yBAAyB,EAAE,GAAG,MAAM,MAAM,CAAC,mCAAmC,CAAC,CAAC;YACxF,MAAM,cAAS,CAAC,GAAG,CAAC,yBAAyB,CAAC,CAAC,IAAI,EAAE,CAAC;YAMtD,MAAM,EAAE,wBAAwB,EAAE,GAAG,MAAM,MAAM,CAAC,gBAAgB,CAAC,CAAC;YACpE,MAAM,WAAW,CAAC,oBAAoB,CAAC,KAAK,IAAI,EAAE;gBACjD,IAAI,CAAC;oBACJ,MAAM,EAAE,6BAA6B,EAAE,GAAG,MAAM,MAAM,CACrD,uCAAuC,CACvC,CAAC;oBACF,MAAM,cAAS,CAAC,GAAG,CAAC,6BAA6B,CAAC,CAAC,OAAO,CAAC,wBAAwB,CAAC,CAAC;gBACtF,CAAC;gBAAC,OAAO,KAAK,EAAE,CAAC;oBAChB,cAAS,CAAC,GAAG,CAAC,uBAAM,CAAC,CAAC,IAAI,CAAC,sDAAsD,EAAE;wBAClF,KAAK;qBACL,CAAC,CAAC;gBACJ,CAAC;YACF,CAAC,CAAC,CAAC;YAIH,IAAI,IAAA,oCAAmB,EAAC,0CAA0C,CAAC,EAAE,CAAC;gBACrE,MAAM,MAAM,CAAC,gCAAgC,CAAC,CAAC;YAChD,CAAC;QACF,CAAC;QAED,MAAM,EAAE,2BAA2B,EAAE,GAAG,MAAM,MAAM,CAAC,6BAA6B,CAAC,CAAC;QACpF,cAAS,CAAC,GAAG,CAAC,oCAAqB,EAAE,cAAS,CAAC,GAAG,CAAC,2BAA2B,CAAC,CAAC,CAAC;QAEjF,MAAM,EAAE,4BAA4B,EAAE,GAAG,MAAM,MAAM,CACpD,+CAA+C,CAC/C,CAAC;QACF,IAAI,CAAC,cAAS,CAAC,GAAG,CAAC,8BAAe,CAAC,EAAE,CAAC;YACrC,cAAS,CAAC,GAAG,CAAC,8BAAe,EAAE,cAAS,CAAC,GAAG,CAAC,4BAA4B,CAAC,CAAC,CAAC;QAC7E,CAAC;QAED,MAAM,EAAE,mBAAmB,EAAE,GAAG,MAAM,MAAM,CAAC,8BAA8B,CAAC,CAAC;QAC7E,cAAS,CAAC,GAAG,CAAC,qCAAsB,EAAE,cAAS,CAAC,GAAG,CAAC,mBAAmB,CAAC,CAAC,CAAC;QAE1E,MAAM,EAAE,wBAAwB,EAAE,GAAG,MAAM,MAAM,CAAC,yBAAyB,CAAC,CAAC;QAC7E,cAAS,CAAC,GAAG,CAAC,gCAAiB,EAAE,cAAS,CAAC,GAAG,CAAC,wBAAwB,CAAC,CAAC,CAAC;QAG1E,IAAI,cAAS,CAAC,GAAG,CAAC,2BAAgB,CAAC,CAAC,YAAY,KAAK,MAAM,EAAE,CAAC;YAC7D,MAAM,EAAE,0BAA0B,EAAE,GAAG,MAAM,MAAM,CAAC,oCAAoC,CAAC,CAAC;YAC1F,MAAM,EAAE,sBAAsB,EAAE,GAAG,MAAM,MAAM,CAAC,gCAAgC,CAAC,CAAC;YAClF,cAAS,CAAC,GAAG,CAAC,gCAAyB,CAAC,CAAC,QAAQ,CAAC,cAAS,CAAC,GAAG,CAAC,0BAA0B,CAAC,CAAC,CAAC;YAC7F,cAAS,CAAC,GAAG,CAAC,2BAAoB,CAAC,CAAC,QAAQ,CAAC,cAAS,CAAC,GAAG,CAAC,sBAAsB,CAAC,CAAC,CAAC;QACrF,CAAC;IACF,CAAC;IAGD,KAAK,CAAC,OAAO;QACZ,MAAM,EAAE,wBAAwB,EAAE,GAAG,MAAM,MAAM,CAAC,uCAAuC,CAAC,CAAC;QAC3F,OAAO,EAAE,sBAAsB,EAAE,cAAS,CAAC,GAAG,CAAC,wBAAwB,CAAC,EAAE,CAAC;IAC5E,CAAC;IAGD,KAAK,CAAC,WAAW;QAChB,MAAM,EAAE,0BAA0B,EAAE,GAAG,MAAM,MAAM,CAAC,oCAAoC,CAAC,CAAC;QAC1F,OAAO,CAAC,0BAA0B,CAAC,CAAC;IACrC,CAAC;IAED,KAAK,CAAC,QAAQ;QACb,MAAM,EAAE,mBAAmB,EAAE,GAAG,MAAM,MAAM,CAAC,8CAA8C,CAAC,CAAC;QAC7F,MAAM,EAAE,2BAA2B,EAAE,GAAG,MAAM,MAAM,CACnD,uDAAuD,CACvD,CAAC;QAEF,OAAO,CAAC,mBAAmB,EAAE,2BAA2B,CAAC,CAAC;IAC3D,CAAC;CACD,CAAA;;gCA7FY,qBAAqB;IADjC,IAAA,0BAAa,EAAC,EAAE,IAAI,EAAE,mBAAmB,EAAE,aAAa,EAAE,CAAC,MAAM,EAAE,SAAS,EAAE,QAAQ,CAAC,EAAE,CAAC;GAC9E,qBAAqB,CA6FjC"}

package/dist/modules/inbound-auth-core/local-authorization-server.proxy.d.ts

@@ -0,0 +1,15 @@
+import { LocalAuthorizationServer, type AuthorizationServerMetadata, type Jwk } from '@n8n/inbound-auth';
+type Listener = () => Promise<void>;
+export declare class LocalAuthorizationServerProxy extends LocalAuthorizationServer {
+    private provider;
+    private readonly listeners;
+    registerProvider(provider: LocalAuthorizationServer): Promise<void>;
+    onProviderRegistered(listener: Listener): Promise<void>;
+    getMetadata(): Promise<AuthorizationServerMetadata>;
+    getJwks(): Promise<{
+        keys: Jwk[];
+    }>;
+    isAccessTokenActive(token: string): Promise<boolean>;
+    private required;
+}
+export {};

package/dist/modules/inbound-auth-core/local-authorization-server.proxy.js

@@ -0,0 +1,47 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.LocalAuthorizationServerProxy = void 0;
+const di_1 = require("@n8n/di");
+const inbound_auth_1 = require("@n8n/inbound-auth");
+const n8n_workflow_1 = require("n8n-workflow");
+let LocalAuthorizationServerProxy = class LocalAuthorizationServerProxy extends inbound_auth_1.LocalAuthorizationServer {
+    constructor() {
+        super(...arguments);
+        this.listeners = [];
+    }
+    async registerProvider(provider) {
+        this.provider = provider;
+        for (const listener of this.listeners)
+            await listener();
+    }
+    async onProviderRegistered(listener) {
+        this.listeners.push(listener);
+        if (this.provider)
+            await listener();
+    }
+    async getMetadata() {
+        return await this.required().getMetadata();
+    }
+    async getJwks() {
+        return await this.required().getJwks();
+    }
+    async isAccessTokenActive(token) {
+        return this.provider ? await this.provider.isAccessTokenActive(token) : false;
+    }
+    required() {
+        if (!this.provider)
+            throw new n8n_workflow_1.OperationalError('No local authorization server is registered');
+        return this.provider;
+    }
+};
+exports.LocalAuthorizationServerProxy = LocalAuthorizationServerProxy;
+exports.LocalAuthorizationServerProxy = LocalAuthorizationServerProxy = __decorate([
+    (0, di_1.Service)()
+], LocalAuthorizationServerProxy);
+//# sourceMappingURL=local-authorization-server.proxy.js.map

package/dist/modules/inbound-auth-core/local-authorization-server.proxy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"local-authorization-server.proxy.js","sourceRoot":"","sources":["../../../src/modules/inbound-auth-core/local-authorization-server.proxy.ts"],"names":[],"mappings":";;;;;;;;;AAAA,gCAAkC;AAClC,oDAI2B;AAC3B,+CAAgD;AAWzC,IAAM,6BAA6B,GAAnC,MAAM,6BAA8B,SAAQ,uCAAwB;IAApE;;QAGW,cAAS,GAAe,EAAE,CAAC;IA+B7C,CAAC;IA5BA,KAAK,CAAC,gBAAgB,CAAC,QAAkC;QACxD,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAC;QACzB,KAAK,MAAM,QAAQ,IAAI,IAAI,CAAC,SAAS;YAAE,MAAM,QAAQ,EAAE,CAAC;IACzD,CAAC;IAGD,KAAK,CAAC,oBAAoB,CAAC,QAAkB;QAC5C,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAC9B,IAAI,IAAI,CAAC,QAAQ;YAAE,MAAM,QAAQ,EAAE,CAAC;IACrC,CAAC;IAED,KAAK,CAAC,WAAW;QAChB,OAAO,MAAM,IAAI,CAAC,QAAQ,EAAE,CAAC,WAAW,EAAE,CAAC;IAC5C,CAAC;IAED,KAAK,CAAC,OAAO;QACZ,OAAO,MAAM,IAAI,CAAC,QAAQ,EAAE,CAAC,OAAO,EAAE,CAAC;IACxC,CAAC;IAGD,KAAK,CAAC,mBAAmB,CAAC,KAAa;QACtC,OAAO,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,QAAQ,CAAC,mBAAmB,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;IAC/E,CAAC;IAEO,QAAQ;QACf,IAAI,CAAC,IAAI,CAAC,QAAQ;YAAE,MAAM,IAAI,+BAAgB,CAAC,6CAA6C,CAAC,CAAC;QAC9F,OAAO,IAAI,CAAC,QAAQ,CAAC;IACtB,CAAC;CACD,CAAA;;wCAlCY,6BAA6B;IADzC,IAAA,YAAO,GAAE;GACG,6BAA6B,CAkCzC"}

package/dist/modules/inbound-auth-core/oauth2-bearer.driver.d.ts

@@ -1,11 +1,12 @@
-import { AuthenticationDriver, TrustedSourceStore, type AdvertisedResource, type Extracted, type Result, type TrustedSource, type Verified } from '@n8n/inbound-auth';
+import { AuthenticationDriver, LocalAuthorizationServer, TrustedSourceStore, type AdvertisedResource, type Extracted, type Result, type TrustedSource, type Verified } from '@n8n/inbound-auth';
 import { Logger } from '@n8n/backend-common';
 export declare class Oauth2BearerDriver extends AuthenticationDriver {
     private readonly store;
+    private readonly localServer;
     readonly credentialKind: 'bearer';
     readonly sourceTypes: Array<TrustedSource['type']>;
     private readonly logger;
-    constructor(store: TrustedSourceStore, logger: Logger);
+    constructor(store: TrustedSourceStore, localServer: LocalAuthorizationServer, logger: Logger);
     selectSource(extracted: Extracted): Promise<TrustedSource | undefined>;
     private reject;
     verify(extracted: Extracted, source: TrustedSource): Promise<Result<Verified>>;

package/dist/modules/inbound-auth-core/oauth2-bearer.driver.js

@@ -24,9 +24,10 @@ const normalizeAudiences = (aud) => {
     return [];
 };
 let Oauth2BearerDriver = class Oauth2BearerDriver extends inbound_auth_1.AuthenticationDriver {
-    constructor(store, logger) {
+    constructor(store, localServer, logger) {
         super();
         this.store = store;
+        this.localServer = localServer;
         this.credentialKind = 'bearer';
         this.sourceTypes = ['oauth2'];
         this.logger = logger.scoped('inbound-auth');
@@ -135,6 +136,10 @@ let Oauth2BearerDriver = class Oauth2BearerDriver extends inbound_auth_1.Authent
                 detail: 'JWT audience is not allowed',
             };
         }
+        if (authentication.keys.kind === 'local-keystore' &&
+            !(await this.localServer.isAccessTokenActive(extracted.credential.token))) {
+            return { ok: false, reason: 'revoked' };
+        }
         const { credential, request: { headers: _headers, ...request }, ...rest } = extracted;
         return {
             ok: true,
@@ -166,6 +171,6 @@ let Oauth2BearerDriver = class Oauth2BearerDriver extends inbound_auth_1.Authent
 exports.Oauth2BearerDriver = Oauth2BearerDriver;
 exports.Oauth2BearerDriver = Oauth2BearerDriver = __decorate([
     (0, di_1.Service)(),
-    __metadata("design:paramtypes", [inbound_auth_1.TrustedSourceStore, backend_common_1.Logger])
+    __metadata("design:paramtypes", [inbound_auth_1.TrustedSourceStore, inbound_auth_1.LocalAuthorizationServer, backend_common_1.Logger])
 ], Oauth2BearerDriver);
 //# sourceMappingURL=oauth2-bearer.driver.js.map

package/dist/modules/inbound-auth-core/oauth2-bearer.driver.js.map

@@ -1 +1 @@
-{"version":3,"file":"oauth2-bearer.driver.js","sourceRoot":"","sources":["../../../src/modules/inbound-auth-core/oauth2-bearer.driver.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,gCAAkC;AAClC,oDAS2B;AAC3B,+CAAqE;AAErE,wDAA6C;AAC7C,2CAAkD;AAGlD,MAAM,YAAY,GAAG,CAAC,KAAc,EAAuB,EAAE,CAC5D,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,MAAM,IAAI,KAAK,IAAI,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ,CAAC;AAGlG,MAAM,kBAAkB,GAAG,CAAC,GAAY,EAAY,EAAE;IACrD,IAAI,OAAO,GAAG,KAAK,QAAQ;QAAE,OAAO,CAAC,GAAG,CAAC,CAAC;IAC1C,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC;QAAE,OAAO,GAAG,CAAC,MAAM,CAAC,CAAC,KAAK,EAAmB,EAAE,CAAC,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC;IACjG,OAAO,EAAE,CAAC;AACX,CAAC,CAAC;AAIK,IAAM,kBAAkB,GAAxB,MAAM,kBAAmB,SAAQ,mCAAoB;IAO3D,YACkB,KAAyB,EAC1C,MAAc;QAEd,KAAK,EAAE,CAAC;QAHS,UAAK,GAAL,KAAK,CAAoB;QAPlC,mBAAc,GAAG,QAAiB,CAAC;QAEnC,gBAAW,GAAiC,CAAC,QAAQ,CAAC,CAAC;QAS/D,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC;IAC7C,CAAC;IAED,KAAK,CAAC,YAAY,CAAC,SAAoB;QACtC,IAAI,MAA0B,CAAC;QAC/B,IAAI,CAAC;YACJ,MAAM,OAAO,GAAG,IAAA,qBAAM,EAAC,SAAS,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;YAEnD,MAAM;gBACL,OAAO,OAAO,KAAK,QAAQ,IAAI,OAAO,KAAK,IAAI,IAAI,OAAO,OAAO,CAAC,GAAG,KAAK,QAAQ;oBACjF,CAAC,CAAC,OAAO,CAAC,GAAG;oBACb,CAAC,CAAC,SAAS,CAAC;QACf,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,sBAAsB,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;QACrD,CAAC;QACD,OAAO,MAAM,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAClE,CAAC;IAEO,MAAM,CAAC,KAAc;QAC5B,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,mBAAmB,EAAE,CAAC;QAC5E,QAAQ,KAAK,CAAC,IAAI,EAAE,CAAC;YACpB,KAAK,mBAAmB;gBACvB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC;YAChE,KAAK,mBAAmB;gBACvB,IAAI,KAAK,CAAC,OAAO,KAAK,sBAAsB;oBAC3C,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,qBAAqB,EAAE,CAAC;gBACrD,IAAI,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,sBAAsB,CAAC;oBACnD,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,mBAAmB,EAAE,MAAM,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC;gBAC1E,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,mBAAmB,EAAE,MAAM,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC;YAC1E,KAAK,gBAAgB;gBACpB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC;YAChE;gBACC,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,mBAAmB,EAAE,MAAM,EAAE,KAAK,CAAC,IAAI,EAAE,CAAC;QACxE,CAAC;IACF,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,SAAoB,EAAE,MAAqB;QACvD,MAAM,EAAE,cAAc,EAAE,GAAG,MAAM,CAAC,MAAM,CAAC;QAEzC,MAAM,IAAI,GAAG,MAAM,CAAC,QAAQ,EAAE,SAAS,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,IAAI,KAAK,MAAM,CAAC,CAAC;QAE3E,IAAI,CAAC,IAAI,EAAE,CAAC;YACX,OAAO;gBACN,EAAE,EAAE,KAAK;gBACT,MAAM,EAAE,iBAAiB;gBACzB,MAAM,EAAE,yBAAyB;aACjC,CAAC;QACH,CAAC;QAED,MAAM,gBAAgB,GACrB,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC,OAAO,CAAC,EAAE,SAAS,IAAI,SAAS,CAAC,QAAQ,CAAC,iBAAiB,CAAC;QAE9F,IAAI,KAAU,CAAC;QACf,IAAI,CAAC;YACJ,KAAK,GAAG,MAAM,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;gBAC7C,IAAA,qBAAS,EACR,SAAS,CAAC,UAAU,CAAC,KAAK,EAC1B,CAAC,MAAM,EAAE,WAAW,EAAE,EAAE;oBACvB,IAAI,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC;wBACjB,OAAO,WAAW,CAAC,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAC,CAAC;oBAC5D,CAAC;oBACD,MAAM,GAAG,GAAG,IAAA,+BAAmB,EAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC;oBACvD,IAAI,CAAC,GAAG,EAAE,CAAC;wBACV,OAAO,WAAW,CAAC,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC,CAAC;oBACzE,CAAC;oBACD,WAAW,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;gBACxB,CAAC,EACD;oBACC,MAAM,EAAE,MAAM,CAAC,MAAM;oBACrB,UAAU,EAAE,cAAc,CAAC,UAAU;oBACrC,cAAc,EAAE,cAAc,CAAC,gBAAgB;oBAC/C,QAAQ,EAAE,IAAI;iBACd,EACD,CAAC,QAAQ,EAAE,OAAO,EAAE,EAAE;oBACrB,IAAI,QAAQ,EAAE,CAAC;wBACd,MAAM,CAAC,QAAQ,CAAC,CAAC;oBAClB,CAAC;yBAAM,CAAC;wBACP,IAAI,CAAC,OAAO,EAAE,CAAC;4BACd,MAAM,CAAC,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAAC,CAAC;4BAC9C,OAAO;wBACR,CAAC;wBACD,OAAO,CAAC,OAAO,CAAC,CAAC;oBAClB,CAAC;gBACF,CAAC,CACD,CAAC;YACH,CAAC,CAAC,CAAC;QACJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,OAAO,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QAC3B,CAAC;QAED,MAAM,EAAE,GAAG,EAAE,GAAG,KAAK,CAAC,MAAM,CAAC;QAC7B,MAAM,iBAAiB,GAAG,cAAc,CAAC,iBAAiB,CAAC;QAC3D,IAAI,CAAC,GAAG,IAAI,CAAC,iBAAiB,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;YAC9C,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,qBAAqB,EAAE,CAAC;QACrD,CAAC;QAED,MAAM,OAAO,GACZ,OAAO,KAAK,CAAC,OAAO,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,KAAK,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC;QAElF,MAAM,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,OAAO,CAAC;QAC7B,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,OAAO,GAAG,KAAK,QAAQ;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;QAChG,MAAM,GAAG,GAAG,cAAc,CAAC,uBAAuB,CAAC;QACnD,IAAI,GAAG,GAAG,GAAG,GAAG,GAAG;YAClB,OAAO;gBACN,EAAE,EAAE,KAAK;gBACT,MAAM,EAAE,SAAS;gBACjB,MAAM,EAAE,YAAY,GAAG,GAAG,GAAG,mCAAmC,GAAG,GAAG;aACtE,CAAC;QAEH,IAAI,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,GAAG,cAAc,CAAC,gBAAgB,EAAE,CAAC;YAC3E,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,wBAAwB,EAAE,CAAC;QAC3E,CAAC;QAED,MAAM,cAAc,GAAG,kBAAkB,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QAEvD,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,gBAAgB,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC;YACnE,OAAO;gBACN,EAAE,EAAE,KAAK;gBACT,MAAM,EAAE,mBAAmB;gBAC3B,MAAM,EAAE,6BAA6B;aACrC,CAAC;QACH,CAAC;QAED,MAAM,EACL,UAAU,EACV,OAAO,EAAE,EAAE,OAAO,EAAE,QAAQ,EAAE,GAAG,OAAO,EAAE,EAC1C,GAAG,IAAI,EACP,GAAG,SAAS,CAAC;QACd,OAAO;YACN,EAAE,EAAE,IAAI;YACR,KAAK,EAAE;gBACN,GAAG,IAAI;gBACP,OAAO;gBACP,cAAc,EAAE,UAAU,CAAC,IAAI;gBAC/B,MAAM;gBACN,MAAM,EAAE,OAAO;gBACf,SAAS,EAAE,IAAI,IAAI,CAAC,GAAG,GAAG,IAAI,CAAC;aAC/B;SACD,CAAC;IACH,CAAC;IAED,SAAS,CACR,QAA4B,EAC5B,OAAwB;QAExB,IAAI,CAAC;YACJ,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;YAE3C,MAAM,IAAI,GAAG,GAAG,CAAC,QAAQ,KAAK,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC;YACtD,OAAO;gBACN,oBAAoB,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC;gBACrF,SAAS,EAAE,6BAA6B,GAAG,CAAC,MAAM,wCAAwC,IAAI,GAAG;aACjG,CAAC;QACH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,8BAA8B,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;YAC5D,OAAO,EAAE,CAAC;QACX,CAAC;IACF,CAAC;CACD,CAAA;;6BA1KY,kBAAkB;IAD9B,IAAA,YAAO,GAAE;qCASgB,iCAAkB,EAClC,uBAAM;GATH,kBAAkB,CA0K9B"}
+{"version":3,"file":"oauth2-bearer.driver.js","sourceRoot":"","sources":["../../../src/modules/inbound-auth-core/oauth2-bearer.driver.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,gCAAkC;AAClC,oDAU2B;AAC3B,+CAAqE;AAErE,wDAA6C;AAC7C,2CAAkD;AAGlD,MAAM,YAAY,GAAG,CAAC,KAAc,EAAuB,EAAE,CAC5D,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,MAAM,IAAI,KAAK,IAAI,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ,CAAC;AAGlG,MAAM,kBAAkB,GAAG,CAAC,GAAY,EAAY,EAAE;IACrD,IAAI,OAAO,GAAG,KAAK,QAAQ;QAAE,OAAO,CAAC,GAAG,CAAC,CAAC;IAC1C,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC;QAAE,OAAO,GAAG,CAAC,MAAM,CAAC,CAAC,KAAK,EAAmB,EAAE,CAAC,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC;IACjG,OAAO,EAAE,CAAC;AACX,CAAC,CAAC;AAIK,IAAM,kBAAkB,GAAxB,MAAM,kBAAmB,SAAQ,mCAAoB;IAO3D,YACkB,KAAyB,EACzB,WAAqC,EACtD,MAAc;QAEd,KAAK,EAAE,CAAC;QAJS,UAAK,GAAL,KAAK,CAAoB;QACzB,gBAAW,GAAX,WAAW,CAA0B;QAR9C,mBAAc,GAAG,QAAiB,CAAC;QAEnC,gBAAW,GAAiC,CAAC,QAAQ,CAAC,CAAC;QAU/D,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC;IAC7C,CAAC;IAED,KAAK,CAAC,YAAY,CAAC,SAAoB;QACtC,IAAI,MAA0B,CAAC;QAC/B,IAAI,CAAC;YACJ,MAAM,OAAO,GAAG,IAAA,qBAAM,EAAC,SAAS,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;YAEnD,MAAM;gBACL,OAAO,OAAO,KAAK,QAAQ,IAAI,OAAO,KAAK,IAAI,IAAI,OAAO,OAAO,CAAC,GAAG,KAAK,QAAQ;oBACjF,CAAC,CAAC,OAAO,CAAC,GAAG;oBACb,CAAC,CAAC,SAAS,CAAC;QACf,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,sBAAsB,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;QACrD,CAAC;QACD,OAAO,MAAM,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAClE,CAAC;IAEO,MAAM,CAAC,KAAc;QAC5B,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,mBAAmB,EAAE,CAAC;QAC5E,QAAQ,KAAK,CAAC,IAAI,EAAE,CAAC;YACpB,KAAK,mBAAmB;gBACvB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC;YAChE,KAAK,mBAAmB;gBACvB,IAAI,KAAK,CAAC,OAAO,KAAK,sBAAsB;oBAC3C,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,qBAAqB,EAAE,CAAC;gBACrD,IAAI,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,sBAAsB,CAAC;oBACnD,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,mBAAmB,EAAE,MAAM,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC;gBAC1E,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,mBAAmB,EAAE,MAAM,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC;YAC1E,KAAK,gBAAgB;gBACpB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC;YAChE;gBACC,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,mBAAmB,EAAE,MAAM,EAAE,KAAK,CAAC,IAAI,EAAE,CAAC;QACxE,CAAC;IACF,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,SAAoB,EAAE,MAAqB;QACvD,MAAM,EAAE,cAAc,EAAE,GAAG,MAAM,CAAC,MAAM,CAAC;QAEzC,MAAM,IAAI,GAAG,MAAM,CAAC,QAAQ,EAAE,SAAS,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,IAAI,KAAK,MAAM,CAAC,CAAC;QAE3E,IAAI,CAAC,IAAI,EAAE,CAAC;YACX,OAAO;gBACN,EAAE,EAAE,KAAK;gBACT,MAAM,EAAE,iBAAiB;gBACzB,MAAM,EAAE,yBAAyB;aACjC,CAAC;QACH,CAAC;QAED,MAAM,gBAAgB,GACrB,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC,OAAO,CAAC,EAAE,SAAS,IAAI,SAAS,CAAC,QAAQ,CAAC,iBAAiB,CAAC;QAE9F,IAAI,KAAU,CAAC;QACf,IAAI,CAAC;YACJ,KAAK,GAAG,MAAM,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;gBAC7C,IAAA,qBAAS,EACR,SAAS,CAAC,UAAU,CAAC,KAAK,EAC1B,CAAC,MAAM,EAAE,WAAW,EAAE,EAAE;oBACvB,IAAI,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC;wBACjB,OAAO,WAAW,CAAC,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAC,CAAC;oBAC5D,CAAC;oBACD,MAAM,GAAG,GAAG,IAAA,+BAAmB,EAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC;oBACvD,IAAI,CAAC,GAAG,EAAE,CAAC;wBACV,OAAO,WAAW,CAAC,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC,CAAC;oBACzE,CAAC;oBACD,WAAW,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;gBACxB,CAAC,EACD;oBACC,MAAM,EAAE,MAAM,CAAC,MAAM;oBACrB,UAAU,EAAE,cAAc,CAAC,UAAU;oBACrC,cAAc,EAAE,cAAc,CAAC,gBAAgB;oBAC/C,QAAQ,EAAE,IAAI;iBACd,EACD,CAAC,QAAQ,EAAE,OAAO,EAAE,EAAE;oBACrB,IAAI,QAAQ,EAAE,CAAC;wBACd,MAAM,CAAC,QAAQ,CAAC,CAAC;oBAClB,CAAC;yBAAM,CAAC;wBACP,IAAI,CAAC,OAAO,EAAE,CAAC;4BACd,MAAM,CAAC,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAAC,CAAC;4BAC9C,OAAO;wBACR,CAAC;wBACD,OAAO,CAAC,OAAO,CAAC,CAAC;oBAClB,CAAC;gBACF,CAAC,CACD,CAAC;YACH,CAAC,CAAC,CAAC;QACJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,OAAO,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QAC3B,CAAC;QAED,MAAM,EAAE,GAAG,EAAE,GAAG,KAAK,CAAC,MAAM,CAAC;QAC7B,MAAM,iBAAiB,GAAG,cAAc,CAAC,iBAAiB,CAAC;QAC3D,IAAI,CAAC,GAAG,IAAI,CAAC,iBAAiB,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;YAC9C,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,qBAAqB,EAAE,CAAC;QACrD,CAAC;QAED,MAAM,OAAO,GACZ,OAAO,KAAK,CAAC,OAAO,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,KAAK,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC;QAElF,MAAM,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,OAAO,CAAC;QAC7B,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,OAAO,GAAG,KAAK,QAAQ;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;QAChG,MAAM,GAAG,GAAG,cAAc,CAAC,uBAAuB,CAAC;QACnD,IAAI,GAAG,GAAG,GAAG,GAAG,GAAG;YAClB,OAAO;gBACN,EAAE,EAAE,KAAK;gBACT,MAAM,EAAE,SAAS;gBACjB,MAAM,EAAE,YAAY,GAAG,GAAG,GAAG,mCAAmC,GAAG,GAAG;aACtE,CAAC;QAEH,IAAI,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,GAAG,cAAc,CAAC,gBAAgB,EAAE,CAAC;YAC3E,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,wBAAwB,EAAE,CAAC;QAC3E,CAAC;QAED,MAAM,cAAc,GAAG,kBAAkB,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QAEvD,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,gBAAgB,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC;YACnE,OAAO;gBACN,EAAE,EAAE,KAAK;gBACT,MAAM,EAAE,mBAAmB;gBAC3B,MAAM,EAAE,6BAA6B;aACrC,CAAC;QACH,CAAC;QAGD,IACC,cAAc,CAAC,IAAI,CAAC,IAAI,KAAK,gBAAgB;YAC7C,CAAC,CAAC,MAAM,IAAI,CAAC,WAAW,CAAC,mBAAmB,CAAC,SAAS,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,EACxE,CAAC;YACF,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;QACzC,CAAC;QAED,MAAM,EACL,UAAU,EACV,OAAO,EAAE,EAAE,OAAO,EAAE,QAAQ,EAAE,GAAG,OAAO,EAAE,EAC1C,GAAG,IAAI,EACP,GAAG,SAAS,CAAC;QACd,OAAO;YACN,EAAE,EAAE,IAAI;YACR,KAAK,EAAE;gBACN,GAAG,IAAI;gBACP,OAAO;gBACP,cAAc,EAAE,UAAU,CAAC,IAAI;gBAC/B,MAAM;gBACN,MAAM,EAAE,OAAO;gBACf,SAAS,EAAE,IAAI,IAAI,CAAC,GAAG,GAAG,IAAI,CAAC;aAC/B;SACD,CAAC;IACH,CAAC;IAED,SAAS,CACR,QAA4B,EAC5B,OAAwB;QAExB,IAAI,CAAC;YACJ,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;YAE3C,MAAM,IAAI,GAAG,GAAG,CAAC,QAAQ,KAAK,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC;YACtD,OAAO;gBACN,oBAAoB,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC;gBACrF,SAAS,EAAE,6BAA6B,GAAG,CAAC,MAAM,wCAAwC,IAAI,GAAG;aACjG,CAAC;QACH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,8BAA8B,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;YAC5D,OAAO,EAAE,CAAC;QACX,CAAC;IACF,CAAC;CACD,CAAA;;6BAnLY,kBAAkB;IAD9B,IAAA,YAAO,GAAE;qCASgB,iCAAkB,EACZ,uCAAwB,EAC9C,uBAAM;GAVH,kBAAkB,CAmL9B"}

package/dist/modules/inbound-auth-core/public-api-oauth.strategy.d.ts

@@ -0,0 +1,16 @@
+import type { AuthenticatedRequest, TokenGrant } from '@n8n/db';
+import { UserRepository } from '@n8n/db';
+import { ResourceAdmission } from '@n8n/inbound-auth';
+import type { AuthStrategy } from '@n8n/backend-services/auth';
+import { JwtService } from '@n8n/backend-services';
+import { PublicApiProtectedResource } from './public-api-protected-resource';
+export declare class PublicApiOAuthStrategy implements AuthStrategy {
+    private readonly resource;
+    private readonly admission;
+    private readonly jwtService;
+    private readonly userRepository;
+    constructor(resource: PublicApiProtectedResource, admission: ResourceAdmission, jwtService: JwtService, userRepository: UserRepository);
+    buildTokenGrant(): Promise<TokenGrant | false | null>;
+    private isOAuthIssuer;
+    authenticate(req: AuthenticatedRequest): Promise<boolean | null>;
+}

package/dist/modules/inbound-auth-core/public-api-oauth.strategy.js

@@ -0,0 +1,71 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.PublicApiOAuthStrategy = void 0;
+const db_1 = require("@n8n/db");
+const di_1 = require("@n8n/di");
+const inbound_auth_1 = require("@n8n/inbound-auth");
+const permissions_1 = require("@n8n/permissions");
+const backend_services_1 = require("@n8n/backend-services");
+const public_api_protected_resource_1 = require("./public-api-protected-resource");
+const isApiKeyScopeName = (scope) => (0, permissions_1.isApiKeyScope)(scope);
+let PublicApiOAuthStrategy = class PublicApiOAuthStrategy {
+    constructor(resource, admission, jwtService, userRepository) {
+        this.resource = resource;
+        this.admission = admission;
+        this.jwtService = jwtService;
+        this.userRepository = userRepository;
+    }
+    async buildTokenGrant() {
+        return null;
+    }
+    isOAuthIssuer(token) {
+        const iss = this.jwtService.decodeUnverified(token)?.iss;
+        return typeof iss === 'string' && URL.canParse(iss) && /^https?:$/.test(new URL(iss).protocol);
+    }
+    async authenticate(req) {
+        const isAvailable = await this.resource.isAvailable();
+        if (!isAvailable) {
+            return null;
+        }
+        const extracted = (0, inbound_auth_1.extractBearer)((0, inbound_auth_1.inboundFrom)(this.resource, (0, inbound_auth_1.inboundRequestOf)(req)));
+        if (!extracted.ok || !this.isOAuthIssuer(extracted.value.credential.token)) {
+            return null;
+        }
+        const admitted = await this.admission.admit(this.resource, extracted.value);
+        if (!admitted.ok) {
+            req.res?.setHeader('WWW-Authenticate', await this.admission.challenge(admitted));
+            return false;
+        }
+        const user = await this.userRepository.findByIdWithRole(admitted.context.subject.id);
+        if (!user) {
+            return false;
+        }
+        const roleScopes = (0, permissions_1.getApiKeyScopesForRole)(user);
+        const requested = (admitted.context.tokenScopes ?? []).filter(isApiKeyScopeName);
+        req.user = user;
+        req.tokenGrant = {
+            scopes: user.role.scopes.map((scope) => scope.slug),
+            apiKeyScopes: requested.length > 0 ? roleScopes.filter((s) => requested.includes(s)) : roleScopes,
+            subject: user,
+        };
+        req.ctx = {
+            security: admitted.context,
+        };
+        return true;
+    }
+};
+exports.PublicApiOAuthStrategy = PublicApiOAuthStrategy;
+exports.PublicApiOAuthStrategy = PublicApiOAuthStrategy = __decorate([
+    (0, di_1.Service)(),
+    __metadata("design:paramtypes", [public_api_protected_resource_1.PublicApiProtectedResource, inbound_auth_1.ResourceAdmission, backend_services_1.JwtService, db_1.UserRepository])
+], PublicApiOAuthStrategy);
+//# sourceMappingURL=public-api-oauth.strategy.js.map

package/dist/modules/inbound-auth-core/public-api-oauth.strategy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"public-api-oauth.strategy.js","sourceRoot":"","sources":["../../../src/modules/inbound-auth-core/public-api-oauth.strategy.ts"],"names":[],"mappings":";;;;;;;;;;;;AACA,gCAAyC;AACzC,gCAAkC;AAClC,oDAAoG;AACpG,kDAK0B;AAG1B,4DAAmD;AAEnD,mFAA6E;AAG7E,MAAM,iBAAiB,GAAG,CAAC,KAAa,EAAwB,EAAE,CACjE,IAAA,2BAAa,EAAC,KAA4B,CAAC,CAAC;AAOtC,IAAM,sBAAsB,GAA5B,MAAM,sBAAsB;IAClC,YACkB,QAAoC,EACpC,SAA4B,EAC5B,UAAsB,EACtB,cAA8B;wBAH9B,QAAQ;yBACR,SAAS;0BACT,UAAU;8BACV,cAAc;IAC7B,CAAC;IAEJ,KAAK,CAAC,eAAe;QACpB,OAAO,IAAI,CAAC;IACb,CAAC;IAEO,aAAa,CAAC,KAAa;QAClC,MAAM,GAAG,GAAY,IAAI,CAAC,UAAU,CAAC,gBAAgB,CAA2B,KAAK,CAAC,EAAE,GAAG,CAAC;QAC5F,OAAO,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,WAAW,CAAC,IAAI,CAAC,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,CAAC;IAChG,CAAC;IAED,KAAK,CAAC,YAAY,CAAC,GAAyB;QAC3C,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC;QACtD,IAAI,CAAC,WAAW,EAAE,CAAC;YAClB,OAAO,IAAI,CAAC;QACb,CAAC;QAGD,MAAM,SAAS,GAAG,IAAA,4BAAa,EAAC,IAAA,0BAAW,EAAC,IAAI,CAAC,QAAQ,EAAE,IAAA,+BAAgB,EAAC,GAAG,CAAC,CAAC,CAAC,CAAC;QACnF,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC,SAAS,CAAC,KAAK,CAAC,UAAU,CAAC,KAAK,CAAC,EAAE,CAAC;YAC5E,OAAO,IAAI,CAAC;QACb,CAAC;QAED,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC,QAAQ,EAAE,SAAS,CAAC,KAAK,CAAC,CAAC;QAC5E,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YAClB,GAAG,CAAC,GAAG,EAAE,SAAS,CAAC,kBAAkB,EAAE,MAAM,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC,CAAC;YACjF,OAAO,KAAK,CAAC;QACd,CAAC;QAED,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,gBAAgB,CAAC,QAAQ,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QACrF,IAAI,CAAC,IAAI,EAAE,CAAC;YACX,OAAO,KAAK,CAAC;QACd,CAAC;QAID,MAAM,UAAU,GAAG,IAAA,oCAAsB,EAAC,IAAI,CAAC,CAAC;QAChD,MAAM,SAAS,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAC,WAAW,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,iBAAiB,CAAC,CAAC;QACjF,GAAG,CAAC,IAAI,GAAG,IAAI,CAAC;QAChB,GAAG,CAAC,UAAU,GAAG;YAChB,MAAM,EAAE,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC;YACnD,YAAY,EACX,SAAS,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,UAAU;YACpF,OAAO,EAAE,IAAI;SACb,CAAC;QACF,GAAG,CAAC,GAAG,GAAG;YACT,QAAQ,EAAE,QAAQ,CAAC,OAAO;SAC1B,CAAC;QACF,OAAO,IAAI,CAAC;IACb,CAAC;CACD,CAAA;;iCAxDY,sBAAsB;IADlC,IAAA,YAAO,GAAE;qCAGmB,0DAA0B,EACzB,gCAAiB,EAChB,6BAAU,EACN,mBAAc;GALpC,sBAAsB,CAwDlC"}