node-server-engine 1.3.2 → 1.3.4

package/.env.example

@@ -170,4 +170,17 @@ SMTP_USER=your-email@example.com
 SMTP_PASS=your-email-password
 
 
-FILE_STORAGE_FOLDER=./uploads
+FILE_STORAGE_FOLDER=./uploads
+
+
+################
+# User Service #
+################
+
+# URL where the user service is located
+USER_SERVICE_URL= 
+
+# Attributes of the users to fetch
+# Comma separated list of attributes to fetch from the user Service 
+# (ex: name,permissions,..) all -> for retrun everything
+USER_FETCHED_ATTRIBUTES=

package/dist/entities/Server/Server.d.ts

@@ -48,8 +48,8 @@ export declare class Server {
     private attachWebSocket;
     /** Call shutdown if signal gets sent to the process */
     private handleSignal;
-    /** Watch the TLS certificate change event */
-    private watchTlsCaFileChange;
+    /** Load TLS Config */
+    private loadTls;
     /** Executes a recurring job */
     private runCronJob;
     /** Run a shutdown/init callback */

package/dist/entities/Server/Server.js

@@ -8,8 +8,6 @@ exports.Server = void 0;
 var _classCallCheck2 = _interopRequireDefault(require("@babel/runtime/helpers/classCallCheck"));
 var _createClass2 = _interopRequireDefault(require("@babel/runtime/helpers/createClass"));
 var _defineProperty2 = _interopRequireDefault(require("@babel/runtime/helpers/defineProperty"));
-var _fs = _interopRequireDefault(require("fs"));
-var _path = _interopRequireDefault(require("path"));
 var _promises = require("timers/promises");
 var _express = _interopRequireDefault(require("express"));
 var _cors = _interopRequireDefault(require("cors"));
@@ -175,8 +173,8 @@ let Server = exports.Server = /*#__PURE__*/function () {
       });
       this.handleSignal();
 
-      // Watch TSL config files changing
-      this.watchTlsCaFileChange();
+      // Load TSL config files
+      this.loadTls();
     }
 
     /** Graceful shutdown */
@@ -317,19 +315,13 @@ let Server = exports.Server = /*#__PURE__*/function () {
       }));
     }
 
-    /** Watch the TLS certificate change event */
+    /** Load TLS Config */
   }, {
-    key: "watchTlsCaFileChange",
-    value: function watchTlsCaFileChange() {
-      ['TLS_REQUEST_KEY', 'TLS_REQUEST_CERT', 'TLS_REQUEST_CA', 'TLS_SERVER_KEY', 'TLS_SERVER_CERT', 'TLS_CA'].forEach(key => {
-        const file = process.env[key];
-        if (file) _fs.default.watch(_path.default.resolve(file), event => {
-          if (event !== 'change') return;
-          (0, _report.reportInfo)(`Reloading TLS config [${file} changed]`);
-          (0, _tlsConfig.loadTlsConfig)();
-          this.httpServer.setSecureContext(_tlsConfig.tlsConfig);
-        });
-      });
+    key: "loadTls",
+    value: function loadTls() {
+      (0, _report.reportInfo)(`Loading TLS config`);
+      (0, _tlsConfig.loadTlsConfig)();
+      this.httpServer.setSecureContext(_tlsConfig.tlsConfig);
     }
 
     /** Executes a recurring job */

package/dist/entities/Server/Server.js.map

@@ -1 +1 @@
-{"version":3,"file":"Server.js","names":["_fs","_interopRequireDefault","require","_path","_promises","_express","_cors","_ws","_SocketClient","_Server2","_Endpoint","_EngineError","_LifecycleController","_PubSub","_utils","_jwt","_report","_tlsConfig","namespace","Server","exports","config","_classCallCheck2","default","_defineProperty2","AbortController","validate","reportDebug","message","endpoints","globalMiddleware","errorMiddleware","initCallbacks","shutdownCallbacks","syncCallbacks","cron","auth","noFetch","checkEnvironment","process","env","RUN_MIGRATION","UNDO_MIGRATION","SQL_HOST","envAssert","isHost","SQL_USER","isString","SQL_PASSWORD","SQL_DB","NODE_ENV","PORT","isPort","SECONDARY_PORT","app","express","use","cors","origin","CORS_ORIGIN","methods","allowedHeaders","registerMiddleware","httpServer","createHttpServer","secondaryApp","secondaryMiddleware","defaultErrorMiddleware","forEach","middleware","secondaryHttpServer","disable","server","headersTimeout","keepAliveTimeout","webSocket","attachWebSocket","_createClass2","key","value","init","initKeySets","callback","runCallback","Promise","all","map","PubSub","job","runCronJob","resolve","listen","reportInfo","data","port","secondaryPort","nodeEnv","handleSignal","watchTlsCaFileChange","shutdown","listening","address","on","error","reportError","exit","close","wss","clients","socket","socketKillTimeout","WEBSOCKET_CLOSE_TIMEOUT","parseInt","setTimeout","readyState","CLOSING","OPEN","terminate","LifecycleController","shutdownRunningInstances","abortController","abort","shutdownKeySets","shutdownSignals","signal","removeAllListeners","getApp","getSecondaryApp","defaultMiddleware","path","endpoint","register","options","WebSocketServer","request","SocketClient","client","catch","file","fs","watch","event","loadTlsConfig","setSecureContext","tlsConfig","handler","name","interval","setTimeoutPromise","undefined","Error","function","apply","parameters","some","Endpoint","EngineError","Object","values","validator","Array"],"sources":["../../../src/entities/Server/Server.ts"],"sourcesContent":["import fs from 'fs';\nimport http from 'http';\nimport https from 'https';\nimport { AddressInfo } from 'net';\nimport path from 'path';\nimport { setTimeout as setTimeoutPromise } from 'timers/promises';\nimport { ValidatorSpec } from 'envalid';\nimport express, { Application } from 'express';\nimport cors from 'cors';\nimport { Server as WebSocketServer } from 'ws';\nimport { SocketClient } from '../SocketClient';\nimport {\n  defaultMiddleware,\n  defaultErrorMiddleware,\n  secondaryMiddleware,\n  shutdownSignals\n} from './Server.const';\nimport {\n  ServerOptions,\n  ServerCronJon,\n  ServerAuthConfig,\n  ServerWebSocketConfig,\n  ServerGlobalMiddleware,\n  ServerErrorMiddleWare,\n  ServerCallback\n} from './Server.types';\nimport { Endpoint } from 'entities/Endpoint';\nimport { EngineError } from 'entities/EngineError';\nimport { LifecycleController } from 'entities/LifecycleController';\nimport { PubSub } from 'entities/PubSub';\nimport { checkEnvironment, envAssert, createHttpServer } from 'utils';\nimport { initKeySets, shutdownKeySets } from 'utils/jwt';\nimport { reportInfo, reportError, reportDebug } from 'utils/report';\nimport { tlsConfig, loadTlsConfig, TlsConfig } from 'utils/tlsConfig';\n\nconst namespace = 'engine:Server';\n\n/** Main server class */\nexport class Server {\n  /** The express application powering the main endpoints */\n  private app: Application;\n  /** The node HTTP(S) server, serving the main express application */\n  private httpServer: http.Server | https.Server;\n  /** The express application powering the support endpoints */\n  private secondaryApp: Application;\n  /** The node HTTP(S) server, serving the secondary express application */\n  private secondaryHttpServer: http.Server | https.Server;\n  /** List of endpoint instances that the server should handle */\n  // eslint-disable-next-line @typescript-eslint/no-explicit-any\n  private endpoints: Array<Endpoint<any>>;\n  /** Mapping of env variable name with functions that should run to check their validity */\n  private checkEnvironment: Record<string, ValidatorSpec<unknown>>;\n  /** Middleware that should run on every request before the endpoint specific logic */\n  private globalMiddleware: Array<ServerGlobalMiddleware>;\n  /** Error middleware that should run on every request after the endpoint specific logic, but before the generic global middleware */\n  private errorMiddleware: Array<\n    ServerGlobalMiddleware | ServerErrorMiddleWare\n  >;\n  /** Functions that should be called on server startup */\n  private initCallbacks: Array<ServerCallback>;\n  /** Functions that should be called on server shutdown */\n  private shutdownCallbacks: Array<ServerCallback>;\n  /** When set to true, this indicates that init callbacks should run synchronously in the order they are declared. By default they all run in parallel */\n  private syncCallbacks: boolean;\n  /** Config to set regularly running jobs on the server */\n  private cron?: Array<ServerCronJon>;\n  /** Global auth related configuration */\n  private auth: ServerAuthConfig;\n  /** WebSocket server instance, if configured */\n  private wss?: WebSocketServer;\n  /** Abort controller that handles signals for the server */\n  private abortController = new AbortController();\n\n  /** Create a server */\n  public constructor(config: ServerOptions) {\n    this.validate(config);\n\n    reportDebug({\n      namespace,\n      message: `Creating server`\n    });\n\n    this.endpoints = config.endpoints;\n    this.globalMiddleware = config.globalMiddleware ?? [];\n    this.errorMiddleware = config.errorMiddleware ?? [];\n    this.initCallbacks = config.initCallbacks ?? [];\n    this.shutdownCallbacks = config.shutdownCallbacks ?? [];\n    this.syncCallbacks = config.syncCallbacks ?? false;\n    this.cron = config.cron;\n    this.auth = { noFetch: false, ...config.auth };\n\n    // The minimal environment check is different between the migration modes of execution and the regular server execution mode\n    // When running in migration mode, we only check that we have SQL related environment variables\n    this.checkEnvironment =\n      process.env.RUN_MIGRATION === 'true' ||\n      process.env.UNDO_MIGRATION === 'true'\n        ? {\n            SQL_HOST: envAssert.isHost(),\n            SQL_USER: envAssert.isString(),\n            SQL_PASSWORD: envAssert.isString(),\n            SQL_DB: envAssert.isString()\n          }\n        : {\n            NODE_ENV: envAssert.isString(),\n            PORT: envAssert.isPort(),\n            SECONDARY_PORT: envAssert.isPort(),\n            ...config.checkEnvironment\n          };\n\n    checkEnvironment(this.checkEnvironment);\n\n    // Create the primary express core that serves the business logic\n    this.app = express();\n\n    this.app.use(\n      cors({\n        origin: process.env.CORS_ORIGIN ?? '*',\n        methods: ['GET', 'POST', 'PUT', 'DELETE', 'OPTIONS'],\n        allowedHeaders: ['Content-Type', 'Authorization']\n      })\n    );\n\n    this.registerMiddleware(this.app);\n    this.httpServer = createHttpServer(this.app);\n\n    // Create a secondary express core that servers metrics and analytics\n    // This will be served on a different port, allowing to specify different firewall rules for these routes\n    this.secondaryApp = express();\n    [...secondaryMiddleware, ...defaultErrorMiddleware].forEach(\n      (middleware) => {\n        if (middleware) this.secondaryApp.use(middleware);\n      }\n    );\n    this.secondaryHttpServer = createHttpServer(this.secondaryApp);\n\n    // Remove the express headers\n    this.app.disable('x-powered-by');\n    this.secondaryApp.disable('x-powered-by');\n\n    // We remove all node timeout on connections and requests\n    // This responsibility is delegated to the front-facing load balancer\n    [this.httpServer, this.secondaryHttpServer].forEach((server) => {\n      server.headersTimeout = 0;\n      server.keepAliveTimeout = 0;\n    });\n\n    if (config.webSocket) {\n      this.attachWebSocket(config.webSocket);\n    }\n  }\n\n  /** Start the server */\n  public async init(): Promise<void> {\n    reportDebug({ namespace, message: `Starting Server` });\n    // Fetch the keys for JWT authentication\n    // Ignore in test environment as we do symmetrical token signing\n    if (process.env.NODE_ENV !== 'test' && !this.auth.noFetch)\n      await initKeySets();\n    // Run all the init callbacks\n    // We can either run them all 1/1 synchronously or run them all in parallel (default)\n    // Callback can either be direct function or an object with function and parameters attributes\n\n    if (this.syncCallbacks) {\n      for (const callback of this.initCallbacks) {\n        await this.runCallback(callback);\n      }\n    } else {\n      await Promise.all(\n        this.initCallbacks.map((callback) => this.runCallback(callback))\n      );\n    }\n\n    // Initialize the Pub/Sub module\n    await PubSub.init();\n    // Run all the cronjob\n    if (this.cron) {\n      this.cron.forEach((job) => {\n        this.runCronJob(job);\n      });\n    }\n\n    // Start listening to requests\n    await Promise.all([\n      new Promise<void>((resolve) =>\n        this.httpServer.listen(process.env.PORT, () => {\n          resolve();\n        })\n      ),\n      new Promise<void>((resolve) =>\n        this.secondaryHttpServer.listen(process.env.SECONDARY_PORT, () => {\n          resolve();\n        })\n      )\n    ]);\n    reportInfo({\n      message: 'SERVER_RUNNING',\n      data: {\n        port: process.env.PORT,\n        secondaryPort: process.env.SECONDARY_PORT,\n        nodeEnv: process.env.NODE_ENV\n      }\n    });\n\n    this.handleSignal();\n\n    // Watch TSL config files changing\n    this.watchTlsCaFileChange();\n  }\n\n  /** Graceful shutdown */\n  public async shutdown(): Promise<void> {\n    reportDebug({ namespace, message: `Shutting down Server` });\n\n    // Stop listening to HTTP requests\n    await Promise.all(\n      [this.httpServer, this.secondaryHttpServer].map((server) => {\n        // Ignore if the server was already stopped\n        // We have observed cases where SIGTERM was thrown multiple times\n        if (!server.listening) return;\n        const { port } = server.address() as AddressInfo;\n        server.on('close', (error: unknown) => {\n          if (error) {\n            reportError(error);\n            process.exit(1);\n          } else {\n            reportInfo({\n              message: `Stopped listening to requests on port ${port}`\n            });\n          }\n        });\n        server.close();\n      })\n    );\n\n    // Close all socket connections\n    if (this.wss) {\n      // First ask then to close gracefully\n      this.wss.clients.forEach((socket) => {\n        socket.close();\n      });\n      // Hard terminate all connections still open after a defined time\n      const socketKillTimeout = process.env.WEBSOCKET_CLOSE_TIMEOUT\n        ? parseInt(process.env.WEBSOCKET_CLOSE_TIMEOUT)\n        : 5000;\n      await new Promise<void>((resolve) => {\n        setTimeout(() => {\n          (this.wss as WebSocketServer).clients.forEach((socket) => {\n            if (\n              socket.readyState === socket.CLOSING ||\n              socket.readyState === socket.OPEN\n            ) {\n              socket.terminate();\n            }\n          });\n          resolve();\n        }, socketKillTimeout);\n      });\n    }\n\n    // Run all the shutdown callback\n    if (this.syncCallbacks) {\n      for (const callback of this.shutdownCallbacks) {\n        await this.runCallback(callback);\n      }\n    } else {\n      await Promise.all(\n        this.shutdownCallbacks.map((callback) => this.runCallback(callback))\n      );\n    }\n\n    // Shutdown all the running entities\n    await LifecycleController.shutdownRunningInstances();\n\n    // Abort all the cronjob\n    if (this.abortController) this.abortController.abort();\n\n    // Stop the keyset timers\n    shutdownKeySets();\n\n    shutdownSignals.forEach((signal) => process.removeAllListeners(signal));\n  }\n\n  /** Get the express app instance of the server */\n  public getApp(): Application {\n    return this.app;\n  }\n\n  /** Get the express app instance of the server */\n  public getSecondaryApp(): Application {\n    return this.secondaryApp;\n  }\n\n  /** Registers all the middleware with the express app */\n  private registerMiddleware(app: Application): void {\n    // Global middleware can specify a path to which they apply\n    [...defaultMiddleware, ...this.globalMiddleware].forEach((middleware) => {\n      if (typeof middleware === 'function') {\n        app.use(middleware);\n      } else {\n        app.use(middleware.path, middleware.middleware);\n      }\n    });\n    // Call the register method of each endpoint\n    this.endpoints.forEach((endpoint) => {\n      endpoint.register(app);\n    });\n    // Add error middleware\n    [...this.errorMiddleware, ...defaultErrorMiddleware].forEach(\n      (middleware) => {\n        if (typeof middleware === 'function') {\n          app.use(middleware);\n        } else {\n          app.use(middleware.path, middleware.middleware);\n        }\n      }\n    );\n  }\n\n  /** Add a handler for WebSocket connections */\n  private attachWebSocket(options: ServerWebSocketConfig): void {\n    this.wss = new WebSocketServer({\n      ...options.server,\n      server: this.httpServer\n    })\n      .on('connection', (webSocket, request) => {\n        new SocketClient(webSocket, request, options.client);\n      })\n      .on('error', (error) => {\n        reportError(error);\n      });\n  }\n\n  /** Call shutdown if signal gets sent to the process */\n  private handleSignal(): void {\n    shutdownSignals.forEach((signal) =>\n      process.on(signal, () => {\n        (async (): Promise<void> => {\n          reportInfo(`Received shutdown signal [${signal}]`);\n          await this.shutdown();\n        })().catch((error) => {\n          reportError(error);\n        });\n      })\n    );\n  }\n\n  /** Watch the TLS certificate change event */\n  private watchTlsCaFileChange(): void {\n    [\n      'TLS_REQUEST_KEY',\n      'TLS_REQUEST_CERT',\n      'TLS_REQUEST_CA',\n      'TLS_SERVER_KEY',\n      'TLS_SERVER_CERT',\n      'TLS_CA'\n    ].forEach((key) => {\n      const file = process.env[key];\n      if (file)\n        fs.watch(path.resolve(file), (event) => {\n          if (event !== 'change') return;\n          reportInfo(`Reloading TLS config [${file} changed]`);\n          loadTlsConfig();\n          (this.httpServer as https.Server).setSecureContext(\n            tlsConfig as TlsConfig\n          );\n        });\n    });\n  }\n\n  /** Executes a recurring job */\n  private runCronJob(job: ServerCronJon): void {\n    (async (): Promise<void> => {\n      reportInfo({ message: `Starting scheduled job \"${job.handler.name}\"` });\n      try {\n        await job.handler();\n        reportInfo({\n          message: `Job \"${job.handler.name}\" finished, starting again in ${job.interval} seconds`\n        });\n        await setTimeoutPromise(job.interval * 1000, undefined, {\n          signal: this.abortController.signal\n        });\n        this.runCronJob(job);\n      } catch (error) {\n        if (error instanceof Error && error.name === 'AbortError') {\n          reportDebug({\n            namespace,\n            message: `Scheduled job \"${job.handler?.name}\" has been aborted`\n          });\n        } else {\n          throw error;\n        }\n      }\n    })().catch((error) => {\n      reportError(error);\n    });\n  }\n\n  /** Run a shutdown/init callback */\n  private runCallback(callback: ServerCallback): unknown {\n    return typeof callback === 'function'\n      ? callback()\n      : callback.function.apply(null, callback.parameters ?? []);\n  }\n\n  /**\n   * Validate the Server constructor configuration\n   */\n  private validate(config: ServerOptions): void {\n    if (\n      !config.endpoints ||\n      config.endpoints.some((endpoint) => !(endpoint instanceof Endpoint))\n    )\n      throw new EngineError(\n        'Server endpoints should be declared and all be Endpoint instances'\n      );\n\n    if (\n      config.checkEnvironment &&\n      Object.values(config.checkEnvironment).some(\n        (validator) => typeof validator !== 'function'\n      )\n    )\n      throw new EngineError(\n        'Some of the environment checks are not valid functions'\n      );\n\n    if (\n      config.initCallbacks &&\n      (!(config.initCallbacks instanceof Array) ||\n        config.initCallbacks.some(\n          (callback) =>\n            !(\n              typeof callback === 'function' ||\n              typeof callback?.function === 'function'\n            )\n        ))\n    )\n      throw new EngineError('Init callbacks is not a list of functions');\n\n    if (\n      config.shutdownCallbacks &&\n      (!(config.shutdownCallbacks instanceof Array) ||\n        config.shutdownCallbacks.some(\n          (callback) =>\n            !(\n              typeof callback === 'function' ||\n              typeof callback?.function === 'function'\n            )\n        ))\n    )\n      throw new EngineError('Shutdown callbacks is not a list of functions');\n  }\n}\n"],"mappings":";;;;;;;;;;AAAA,IAAAA,GAAA,GAAAC,sBAAA,CAAAC,OAAA;AAIA,IAAAC,KAAA,GAAAF,sBAAA,CAAAC,OAAA;AACA,IAAAE,SAAA,GAAAF,OAAA;AAEA,IAAAG,QAAA,GAAAJ,sBAAA,CAAAC,OAAA;AACA,IAAAI,KAAA,GAAAL,sBAAA,CAAAC,OAAA;AACA,IAAAK,GAAA,GAAAL,OAAA;AACA,IAAAM,aAAA,GAAAN,OAAA;AACA,IAAAO,QAAA,GAAAP,OAAA;AAeA,IAAAQ,SAAA,GAAAR,OAAA;AACA,IAAAS,YAAA,GAAAT,OAAA;AACA,IAAAU,oBAAA,GAAAV,OAAA;AACA,IAAAW,OAAA,GAAAX,OAAA;AACA,IAAAY,MAAA,GAAAZ,OAAA;AACA,IAAAa,IAAA,GAAAb,OAAA;AACA,IAAAc,OAAA,GAAAd,OAAA;AACA,IAAAe,UAAA,GAAAf,OAAA;AAEA,MAAMgB,SAAS,GAAG,eAAe;;AAEjC;AAAA,IACaC,MAAM,GAAAC,OAAA,CAAAD,MAAA;EAmCjB;EACA,SAAAA,OAAmBE,MAAqB,EAAE;IAAA,IAAAC,gBAAA,CAAAC,OAAA,QAAAJ,MAAA;IAnC1C;IAAA,IAAAK,gBAAA,CAAAD,OAAA;IAEA;IAAA,IAAAC,gBAAA,CAAAD,OAAA;IAEA;IAAA,IAAAC,gBAAA,CAAAD,OAAA;IAEA;IAAA,IAAAC,gBAAA,CAAAD,OAAA;IAEA;IACA;IAAA,IAAAC,gBAAA,CAAAD,OAAA;IAEA;IAAA,IAAAC,gBAAA,CAAAD,OAAA;IAEA;IAAA,IAAAC,gBAAA,CAAAD,OAAA;IAEA;IAAA,IAAAC,gBAAA,CAAAD,OAAA;IAIA;IAAA,IAAAC,gBAAA,CAAAD,OAAA;IAEA;IAAA,IAAAC,gBAAA,CAAAD,OAAA;IAEA;IAAA,IAAAC,gBAAA,CAAAD,OAAA;IAEA;IAAA,IAAAC,gBAAA,CAAAD,OAAA;IAEA;IAAA,IAAAC,gBAAA,CAAAD,OAAA;IAEA;IAAA,IAAAC,gBAAA,CAAAD,OAAA;IAEA;IAAA,IAAAC,gBAAA,CAAAD,OAAA,2BAC0B,IAAIE,eAAe,CAAC,CAAC;IAI7C,IAAI,CAACC,QAAQ,CAACL,MAAM,CAAC;IAErB,IAAAM,mBAAW,EAAC;MACVT,SAAS;MACTU,OAAO,EAAE;IACX,CAAC,CAAC;IAEF,IAAI,CAACC,SAAS,GAAGR,MAAM,CAACQ,SAAS;IACjC,IAAI,CAACC,gBAAgB,GAAGT,MAAM,CAACS,gBAAgB,IAAI,EAAE;IACrD,IAAI,CAACC,eAAe,GAAGV,MAAM,CAACU,eAAe,IAAI,EAAE;IACnD,IAAI,CAACC,aAAa,GAAGX,MAAM,CAACW,aAAa,IAAI,EAAE;IAC/C,IAAI,CAACC,iBAAiB,GAAGZ,MAAM,CAACY,iBAAiB,IAAI,EAAE;IACvD,IAAI,CAACC,aAAa,GAAGb,MAAM,CAACa,aAAa,IAAI,KAAK;IAClD,IAAI,CAACC,IAAI,GAAGd,MAAM,CAACc,IAAI;IACvB,IAAI,CAACC,IAAI,GAAG;MAAEC,OAAO,EAAE,KAAK;MAAE,GAAGhB,MAAM,CAACe;IAAK,CAAC;;IAE9C;IACA;IACA,IAAI,CAACE,gBAAgB,GACnBC,OAAO,CAACC,GAAG,CAACC,aAAa,KAAK,MAAM,IACpCF,OAAO,CAACC,GAAG,CAACE,cAAc,KAAK,MAAM,GACjC;MACEC,QAAQ,EAAEC,gBAAS,CAACC,MAAM,CAAC,CAAC;MAC5BC,QAAQ,EAAEF,gBAAS,CAACG,QAAQ,CAAC,CAAC;MAC9BC,YAAY,EAAEJ,gBAAS,CAACG,QAAQ,CAAC,CAAC;MAClCE,MAAM,EAAEL,gBAAS,CAACG,QAAQ,CAAC;IAC7B,CAAC,GACD;MACEG,QAAQ,EAAEN,gBAAS,CAACG,QAAQ,CAAC,CAAC;MAC9BI,IAAI,EAAEP,gBAAS,CAACQ,MAAM,CAAC,CAAC;MACxBC,cAAc,EAAET,gBAAS,CAACQ,MAAM,CAAC,CAAC;MAClC,GAAG/B,MAAM,CAACiB;IACZ,CAAC;IAEP,IAAAA,uBAAgB,EAAC,IAAI,CAACA,gBAAgB,CAAC;;IAEvC;IACA,IAAI,CAACgB,GAAG,GAAG,IAAAC,gBAAO,EAAC,CAAC;IAEpB,IAAI,CAACD,GAAG,CAACE,GAAG,CACV,IAAAC,aAAI,EAAC;MACHC,MAAM,EAAEnB,OAAO,CAACC,GAAG,CAACmB,WAAW,IAAI,GAAG;MACtCC,OAAO,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,SAAS,CAAC;MACpDC,cAAc,EAAE,CAAC,cAAc,EAAE,eAAe;IAClD,CAAC,CACH,CAAC;IAED,IAAI,CAACC,kBAAkB,CAAC,IAAI,CAACR,GAAG,CAAC;IACjC,IAAI,CAACS,UAAU,GAAG,IAAAC,uBAAgB,EAAC,IAAI,CAACV,GAAG,CAAC;;IAE5C;IACA;IACA,IAAI,CAACW,YAAY,GAAG,IAAAV,gBAAO,EAAC,CAAC;IAC7B,CAAC,GAAGW,4BAAmB,EAAE,GAAGC,+BAAsB,CAAC,CAACC,OAAO,CACxDC,UAAU,IAAK;MACd,IAAIA,UAAU,EAAE,IAAI,CAACJ,YAAY,CAACT,GAAG,CAACa,UAAU,CAAC;IACnD,CACF,CAAC;IACD,IAAI,CAACC,mBAAmB,GAAG,IAAAN,uBAAgB,EAAC,IAAI,CAACC,YAAY,CAAC;;IAE9D;IACA,IAAI,CAACX,GAAG,CAACiB,OAAO,CAAC,cAAc,CAAC;IAChC,IAAI,CAACN,YAAY,CAACM,OAAO,CAAC,cAAc,CAAC;;IAEzC;IACA;IACA,CAAC,IAAI,CAACR,UAAU,EAAE,IAAI,CAACO,mBAAmB,CAAC,CAACF,OAAO,CAAEI,MAAM,IAAK;MAC9DA,MAAM,CAACC,cAAc,GAAG,CAAC;MACzBD,MAAM,CAACE,gBAAgB,GAAG,CAAC;IAC7B,CAAC,CAAC;IAEF,IAAIrD,MAAM,CAACsD,SAAS,EAAE;MACpB,IAAI,CAACC,eAAe,CAACvD,MAAM,CAACsD,SAAS,CAAC;IACxC;EACF;;EAEA;EAAA,WAAAE,aAAA,CAAAtD,OAAA,EAAAJ,MAAA;IAAA2D,GAAA;IAAAC,KAAA,EACA,eAAaC,IAAIA,CAAA,EAAkB;MACjC,IAAArD,mBAAW,EAAC;QAAET,SAAS;QAAEU,OAAO,EAAE;MAAkB,CAAC,CAAC;MACtD;MACA;MACA,IAAIW,OAAO,CAACC,GAAG,CAACU,QAAQ,KAAK,MAAM,IAAI,CAAC,IAAI,CAACd,IAAI,CAACC,OAAO,EACvD,MAAM,IAAA4C,gBAAW,EAAC,CAAC;MACrB;MACA;MACA;;MAEA,IAAI,IAAI,CAAC/C,aAAa,EAAE;QACtB,KAAK,MAAMgD,QAAQ,IAAI,IAAI,CAAClD,aAAa,EAAE;UACzC,MAAM,IAAI,CAACmD,WAAW,CAACD,QAAQ,CAAC;QAClC;MACF,CAAC,MAAM;QACL,MAAME,OAAO,CAACC,GAAG,CACf,IAAI,CAACrD,aAAa,CAACsD,GAAG,CAAEJ,QAAQ,IAAK,IAAI,CAACC,WAAW,CAACD,QAAQ,CAAC,CACjE,CAAC;MACH;;MAEA;MACA,MAAMK,cAAM,CAACP,IAAI,CAAC,CAAC;MACnB;MACA,IAAI,IAAI,CAAC7C,IAAI,EAAE;QACb,IAAI,CAACA,IAAI,CAACiC,OAAO,CAAEoB,GAAG,IAAK;UACzB,IAAI,CAACC,UAAU,CAACD,GAAG,CAAC;QACtB,CAAC,CAAC;MACJ;;MAEA;MACA,MAAMJ,OAAO,CAACC,GAAG,CAAC,CAChB,IAAID,OAAO,CAAQM,OAAO,IACxB,IAAI,CAAC3B,UAAU,CAAC4B,MAAM,CAACpD,OAAO,CAACC,GAAG,CAACW,IAAI,EAAE,MAAM;QAC7CuC,OAAO,CAAC,CAAC;MACX,CAAC,CACH,CAAC,EACD,IAAIN,OAAO,CAAQM,OAAO,IACxB,IAAI,CAACpB,mBAAmB,CAACqB,MAAM,CAACpD,OAAO,CAACC,GAAG,CAACa,cAAc,EAAE,MAAM;QAChEqC,OAAO,CAAC,CAAC;MACX,CAAC,CACH,CAAC,CACF,CAAC;MACF,IAAAE,kBAAU,EAAC;QACThE,OAAO,EAAE,gBAAgB;QACzBiE,IAAI,EAAE;UACJC,IAAI,EAAEvD,OAAO,CAACC,GAAG,CAACW,IAAI;UACtB4C,aAAa,EAAExD,OAAO,CAACC,GAAG,CAACa,cAAc;UACzC2C,OAAO,EAAEzD,OAAO,CAACC,GAAG,CAACU;QACvB;MACF,CAAC,CAAC;MAEF,IAAI,CAAC+C,YAAY,CAAC,CAAC;;MAEnB;MACA,IAAI,CAACC,oBAAoB,CAAC,CAAC;IAC7B;;IAEA;EAAA;IAAApB,GAAA;IAAAC,KAAA,EACA,eAAaoB,QAAQA,CAAA,EAAkB;MACrC,IAAAxE,mBAAW,EAAC;QAAET,SAAS;QAAEU,OAAO,EAAE;MAAuB,CAAC,CAAC;;MAE3D;MACA,MAAMwD,OAAO,CAACC,GAAG,CACf,CAAC,IAAI,CAACtB,UAAU,EAAE,IAAI,CAACO,mBAAmB,CAAC,CAACgB,GAAG,CAAEd,MAAM,IAAK;QAC1D;QACA;QACA,IAAI,CAACA,MAAM,CAAC4B,SAAS,EAAE;QACvB,MAAM;UAAEN;QAAK,CAAC,GAAGtB,MAAM,CAAC6B,OAAO,CAAC,CAAgB;QAChD7B,MAAM,CAAC8B,EAAE,CAAC,OAAO,EAAGC,KAAc,IAAK;UACrC,IAAIA,KAAK,EAAE;YACT,IAAAC,mBAAW,EAACD,KAAK,CAAC;YAClBhE,OAAO,CAACkE,IAAI,CAAC,CAAC,CAAC;UACjB,CAAC,MAAM;YACL,IAAAb,kBAAU,EAAC;cACThE,OAAO,EAAE,yCAAyCkE,IAAI;YACxD,CAAC,CAAC;UACJ;QACF,CAAC,CAAC;QACFtB,MAAM,CAACkC,KAAK,CAAC,CAAC;MAChB,CAAC,CACH,CAAC;;MAED;MACA,IAAI,IAAI,CAACC,GAAG,EAAE;QACZ;QACA,IAAI,CAACA,GAAG,CAACC,OAAO,CAACxC,OAAO,CAAEyC,MAAM,IAAK;UACnCA,MAAM,CAACH,KAAK,CAAC,CAAC;QAChB,CAAC,CAAC;QACF;QACA,MAAMI,iBAAiB,GAAGvE,OAAO,CAACC,GAAG,CAACuE,uBAAuB,GACzDC,QAAQ,CAACzE,OAAO,CAACC,GAAG,CAACuE,uBAAuB,CAAC,GAC7C,IAAI;QACR,MAAM,IAAI3B,OAAO,CAAQM,OAAO,IAAK;UACnCuB,UAAU,CAAC,MAAM;YACd,IAAI,CAACN,GAAG,CAAqBC,OAAO,CAACxC,OAAO,CAAEyC,MAAM,IAAK;cACxD,IACEA,MAAM,CAACK,UAAU,KAAKL,MAAM,CAACM,OAAO,IACpCN,MAAM,CAACK,UAAU,KAAKL,MAAM,CAACO,IAAI,EACjC;gBACAP,MAAM,CAACQ,SAAS,CAAC,CAAC;cACpB;YACF,CAAC,CAAC;YACF3B,OAAO,CAAC,CAAC;UACX,CAAC,EAAEoB,iBAAiB,CAAC;QACvB,CAAC,CAAC;MACJ;;MAEA;MACA,IAAI,IAAI,CAAC5E,aAAa,EAAE;QACtB,KAAK,MAAMgD,QAAQ,IAAI,IAAI,CAACjD,iBAAiB,EAAE;UAC7C,MAAM,IAAI,CAACkD,WAAW,CAACD,QAAQ,CAAC;QAClC;MACF,CAAC,MAAM;QACL,MAAME,OAAO,CAACC,GAAG,CACf,IAAI,CAACpD,iBAAiB,CAACqD,GAAG,CAAEJ,QAAQ,IAAK,IAAI,CAACC,WAAW,CAACD,QAAQ,CAAC,CACrE,CAAC;MACH;;MAEA;MACA,MAAMoC,wCAAmB,CAACC,wBAAwB,CAAC,CAAC;;MAEpD;MACA,IAAI,IAAI,CAACC,eAAe,EAAE,IAAI,CAACA,eAAe,CAACC,KAAK,CAAC,CAAC;;MAEtD;MACA,IAAAC,oBAAe,EAAC,CAAC;MAEjBC,wBAAe,CAACvD,OAAO,CAAEwD,MAAM,IAAKrF,OAAO,CAACsF,kBAAkB,CAACD,MAAM,CAAC,CAAC;IACzE;;IAEA;EAAA;IAAA9C,GAAA;IAAAC,KAAA,EACA,SAAO+C,MAAMA,CAAA,EAAgB;MAC3B,OAAO,IAAI,CAACxE,GAAG;IACjB;;IAEA;EAAA;IAAAwB,GAAA;IAAAC,KAAA,EACA,SAAOgD,eAAeA,CAAA,EAAgB;MACpC,OAAO,IAAI,CAAC9D,YAAY;IAC1B;;IAEA;EAAA;IAAAa,GAAA;IAAAC,KAAA,EACA,SAAQjB,kBAAkBA,CAACR,GAAgB,EAAQ;MACjD;MACA,CAAC,GAAG0E,0BAAiB,EAAE,GAAG,IAAI,CAAClG,gBAAgB,CAAC,CAACsC,OAAO,CAAEC,UAAU,IAAK;QACvE,IAAI,OAAOA,UAAU,KAAK,UAAU,EAAE;UACpCf,GAAG,CAACE,GAAG,CAACa,UAAU,CAAC;QACrB,CAAC,MAAM;UACLf,GAAG,CAACE,GAAG,CAACa,UAAU,CAAC4D,IAAI,EAAE5D,UAAU,CAACA,UAAU,CAAC;QACjD;MACF,CAAC,CAAC;MACF;MACA,IAAI,CAACxC,SAAS,CAACuC,OAAO,CAAE8D,QAAQ,IAAK;QACnCA,QAAQ,CAACC,QAAQ,CAAC7E,GAAG,CAAC;MACxB,CAAC,CAAC;MACF;MACA,CAAC,GAAG,IAAI,CAACvB,eAAe,EAAE,GAAGoC,+BAAsB,CAAC,CAACC,OAAO,CACzDC,UAAU,IAAK;QACd,IAAI,OAAOA,UAAU,KAAK,UAAU,EAAE;UACpCf,GAAG,CAACE,GAAG,CAACa,UAAU,CAAC;QACrB,CAAC,MAAM;UACLf,GAAG,CAACE,GAAG,CAACa,UAAU,CAAC4D,IAAI,EAAE5D,UAAU,CAACA,UAAU,CAAC;QACjD;MACF,CACF,CAAC;IACH;;IAEA;EAAA;IAAAS,GAAA;IAAAC,KAAA,EACA,SAAQH,eAAeA,CAACwD,OAA8B,EAAQ;MAC5D,IAAI,CAACzB,GAAG,GAAG,IAAI0B,UAAe,CAAC;QAC7B,GAAGD,OAAO,CAAC5D,MAAM;QACjBA,MAAM,EAAE,IAAI,CAACT;MACf,CAAC,CAAC,CACCuC,EAAE,CAAC,YAAY,EAAE,CAAC3B,SAAS,EAAE2D,OAAO,KAAK;QACxC,IAAIC,0BAAY,CAAC5D,SAAS,EAAE2D,OAAO,EAAEF,OAAO,CAACI,MAAM,CAAC;MACtD,CAAC,CAAC,CACDlC,EAAE,CAAC,OAAO,EAAGC,KAAK,IAAK;QACtB,IAAAC,mBAAW,EAACD,KAAK,CAAC;MACpB,CAAC,CAAC;IACN;;IAEA;EAAA;IAAAzB,GAAA;IAAAC,KAAA,EACA,SAAQkB,YAAYA,CAAA,EAAS;MAC3B0B,wBAAe,CAACvD,OAAO,CAAEwD,MAAM,IAC7BrF,OAAO,CAAC+D,EAAE,CAACsB,MAAM,EAAE,MAAM;QACvB,CAAC,YAA2B;UAC1B,IAAAhC,kBAAU,EAAC,6BAA6BgC,MAAM,GAAG,CAAC;UAClD,MAAM,IAAI,CAACzB,QAAQ,CAAC,CAAC;QACvB,CAAC,EAAE,CAAC,CAACsC,KAAK,CAAElC,KAAK,IAAK;UACpB,IAAAC,mBAAW,EAACD,KAAK,CAAC;QACpB,CAAC,CAAC;MACJ,CAAC,CACH,CAAC;IACH;;IAEA;EAAA;IAAAzB,GAAA;IAAAC,KAAA,EACA,SAAQmB,oBAAoBA,CAAA,EAAS;MACnC,CACE,iBAAiB,EACjB,kBAAkB,EAClB,gBAAgB,EAChB,gBAAgB,EAChB,iBAAiB,EACjB,QAAQ,CACT,CAAC9B,OAAO,CAAEU,GAAG,IAAK;QACjB,MAAM4D,IAAI,GAAGnG,OAAO,CAACC,GAAG,CAACsC,GAAG,CAAC;QAC7B,IAAI4D,IAAI,EACNC,WAAE,CAACC,KAAK,CAACX,aAAI,CAACvC,OAAO,CAACgD,IAAI,CAAC,EAAGG,KAAK,IAAK;UACtC,IAAIA,KAAK,KAAK,QAAQ,EAAE;UACxB,IAAAjD,kBAAU,EAAC,yBAAyB8C,IAAI,WAAW,CAAC;UACpD,IAAAI,wBAAa,EAAC,CAAC;UACd,IAAI,CAAC/E,UAAU,CAAkBgF,gBAAgB,CAChDC,oBACF,CAAC;QACH,CAAC,CAAC;MACN,CAAC,CAAC;IACJ;;IAEA;EAAA;IAAAlE,GAAA;IAAAC,KAAA,EACA,SAAQU,UAAUA,CAACD,GAAkB,EAAQ;MAC3C,CAAC,YAA2B;QAC1B,IAAAI,kBAAU,EAAC;UAAEhE,OAAO,EAAE,2BAA2B4D,GAAG,CAACyD,OAAO,CAACC,IAAI;QAAI,CAAC,CAAC;QACvE,IAAI;UACF,MAAM1D,GAAG,CAACyD,OAAO,CAAC,CAAC;UACnB,IAAArD,kBAAU,EAAC;YACThE,OAAO,EAAE,QAAQ4D,GAAG,CAACyD,OAAO,CAACC,IAAI,iCAAiC1D,GAAG,CAAC2D,QAAQ;UAChF,CAAC,CAAC;UACF,MAAM,IAAAC,oBAAiB,EAAC5D,GAAG,CAAC2D,QAAQ,GAAG,IAAI,EAAEE,SAAS,EAAE;YACtDzB,MAAM,EAAE,IAAI,CAACJ,eAAe,CAACI;UAC/B,CAAC,CAAC;UACF,IAAI,CAACnC,UAAU,CAACD,GAAG,CAAC;QACtB,CAAC,CAAC,OAAOe,KAAK,EAAE;UACd,IAAIA,KAAK,YAAY+C,KAAK,IAAI/C,KAAK,CAAC2C,IAAI,KAAK,YAAY,EAAE;YACzD,IAAAvH,mBAAW,EAAC;cACVT,SAAS;cACTU,OAAO,EAAE,kBAAkB4D,GAAG,CAACyD,OAAO,EAAEC,IAAI;YAC9C,CAAC,CAAC;UACJ,CAAC,MAAM;YACL,MAAM3C,KAAK;UACb;QACF;MACF,CAAC,EAAE,CAAC,CAACkC,KAAK,CAAElC,KAAK,IAAK;QACpB,IAAAC,mBAAW,EAACD,KAAK,CAAC;MACpB,CAAC,CAAC;IACJ;;IAEA;EAAA;IAAAzB,GAAA;IAAAC,KAAA,EACA,SAAQI,WAAWA,CAACD,QAAwB,EAAW;MACrD,OAAO,OAAOA,QAAQ,KAAK,UAAU,GACjCA,QAAQ,CAAC,CAAC,GACVA,QAAQ,CAACqE,QAAQ,CAACC,KAAK,CAAC,IAAI,EAAEtE,QAAQ,CAACuE,UAAU,IAAI,EAAE,CAAC;IAC9D;;IAEA;AACF;AACA;EAFE;IAAA3E,GAAA;IAAAC,KAAA,EAGA,SAAQrD,QAAQA,CAACL,MAAqB,EAAQ;MAC5C,IACE,CAACA,MAAM,CAACQ,SAAS,IACjBR,MAAM,CAACQ,SAAS,CAAC6H,IAAI,CAAExB,QAAQ,IAAK,EAAEA,QAAQ,YAAYyB,kBAAQ,CAAC,CAAC,EAEpE,MAAM,IAAIC,wBAAW,CACnB,mEACF,CAAC;MAEH,IACEvI,MAAM,CAACiB,gBAAgB,IACvBuH,MAAM,CAACC,MAAM,CAACzI,MAAM,CAACiB,gBAAgB,CAAC,CAACoH,IAAI,CACxCK,SAAS,IAAK,OAAOA,SAAS,KAAK,UACtC,CAAC,EAED,MAAM,IAAIH,wBAAW,CACnB,wDACF,CAAC;MAEH,IACEvI,MAAM,CAACW,aAAa,KACnB,EAAEX,MAAM,CAACW,aAAa,YAAYgI,KAAK,CAAC,IACvC3I,MAAM,CAACW,aAAa,CAAC0H,IAAI,CACtBxE,QAAQ,IACP,EACE,OAAOA,QAAQ,KAAK,UAAU,IAC9B,OAAOA,QAAQ,EAAEqE,QAAQ,KAAK,UAAU,CAE9C,CAAC,CAAC,EAEJ,MAAM,IAAIK,wBAAW,CAAC,2CAA2C,CAAC;MAEpE,IACEvI,MAAM,CAACY,iBAAiB,KACvB,EAAEZ,MAAM,CAACY,iBAAiB,YAAY+H,KAAK,CAAC,IAC3C3I,MAAM,CAACY,iBAAiB,CAACyH,IAAI,CAC1BxE,QAAQ,IACP,EACE,OAAOA,QAAQ,KAAK,UAAU,IAC9B,OAAOA,QAAQ,EAAEqE,QAAQ,KAAK,UAAU,CAE9C,CAAC,CAAC,EAEJ,MAAM,IAAIK,wBAAW,CAAC,+CAA+C,CAAC;IAC1E;EAAC;AAAA","ignoreList":[]}
+{"version":3,"file":"Server.js","names":["_promises","require","_express","_interopRequireDefault","_cors","_ws","_SocketClient","_Server2","_Endpoint","_EngineError","_LifecycleController","_PubSub","_utils","_jwt","_report","_tlsConfig","namespace","Server","exports","config","_classCallCheck2","default","_defineProperty2","AbortController","validate","reportDebug","message","endpoints","globalMiddleware","errorMiddleware","initCallbacks","shutdownCallbacks","syncCallbacks","cron","auth","noFetch","checkEnvironment","process","env","RUN_MIGRATION","UNDO_MIGRATION","SQL_HOST","envAssert","isHost","SQL_USER","isString","SQL_PASSWORD","SQL_DB","NODE_ENV","PORT","isPort","SECONDARY_PORT","app","express","use","cors","origin","CORS_ORIGIN","methods","allowedHeaders","registerMiddleware","httpServer","createHttpServer","secondaryApp","secondaryMiddleware","defaultErrorMiddleware","forEach","middleware","secondaryHttpServer","disable","server","headersTimeout","keepAliveTimeout","webSocket","attachWebSocket","_createClass2","key","value","init","initKeySets","callback","runCallback","Promise","all","map","PubSub","job","runCronJob","resolve","listen","reportInfo","data","port","secondaryPort","nodeEnv","handleSignal","loadTls","shutdown","listening","address","on","error","reportError","exit","close","wss","clients","socket","socketKillTimeout","WEBSOCKET_CLOSE_TIMEOUT","parseInt","setTimeout","readyState","CLOSING","OPEN","terminate","LifecycleController","shutdownRunningInstances","abortController","abort","shutdownKeySets","shutdownSignals","signal","removeAllListeners","getApp","getSecondaryApp","defaultMiddleware","path","endpoint","register","options","WebSocketServer","request","SocketClient","client","catch","loadTlsConfig","setSecureContext","tlsConfig","handler","name","interval","setTimeoutPromise","undefined","Error","function","apply","parameters","some","Endpoint","EngineError","Object","values","validator","Array"],"sources":["../../../src/entities/Server/Server.ts"],"sourcesContent":["import http from 'http';\nimport https from 'https';\nimport { AddressInfo } from 'net';\nimport { setTimeout as setTimeoutPromise } from 'timers/promises';\nimport { ValidatorSpec } from 'envalid';\nimport express, { Application } from 'express';\nimport cors from 'cors';\nimport { Server as WebSocketServer } from 'ws';\nimport { SocketClient } from '../SocketClient';\nimport {\n  defaultMiddleware,\n  defaultErrorMiddleware,\n  secondaryMiddleware,\n  shutdownSignals\n} from './Server.const';\nimport {\n  ServerOptions,\n  ServerCronJon,\n  ServerAuthConfig,\n  ServerWebSocketConfig,\n  ServerGlobalMiddleware,\n  ServerErrorMiddleWare,\n  ServerCallback\n} from './Server.types';\nimport { Endpoint } from 'entities/Endpoint';\nimport { EngineError } from 'entities/EngineError';\nimport { LifecycleController } from 'entities/LifecycleController';\nimport { PubSub } from 'entities/PubSub';\nimport { checkEnvironment, envAssert, createHttpServer } from 'utils';\nimport { initKeySets, shutdownKeySets } from 'utils/jwt';\nimport { reportInfo, reportError, reportDebug } from 'utils/report';\nimport { tlsConfig, loadTlsConfig, TlsConfig } from 'utils/tlsConfig';\n\nconst namespace = 'engine:Server';\n\n/** Main server class */\nexport class Server {\n  /** The express application powering the main endpoints */\n  private app: Application;\n  /** The node HTTP(S) server, serving the main express application */\n  private httpServer: http.Server | https.Server;\n  /** The express application powering the support endpoints */\n  private secondaryApp: Application;\n  /** The node HTTP(S) server, serving the secondary express application */\n  private secondaryHttpServer: http.Server | https.Server;\n  /** List of endpoint instances that the server should handle */\n  // eslint-disable-next-line @typescript-eslint/no-explicit-any\n  private endpoints: Array<Endpoint<any>>;\n  /** Mapping of env variable name with functions that should run to check their validity */\n  private checkEnvironment: Record<string, ValidatorSpec<unknown>>;\n  /** Middleware that should run on every request before the endpoint specific logic */\n  private globalMiddleware: Array<ServerGlobalMiddleware>;\n  /** Error middleware that should run on every request after the endpoint specific logic, but before the generic global middleware */\n  private errorMiddleware: Array<\n    ServerGlobalMiddleware | ServerErrorMiddleWare\n  >;\n  /** Functions that should be called on server startup */\n  private initCallbacks: Array<ServerCallback>;\n  /** Functions that should be called on server shutdown */\n  private shutdownCallbacks: Array<ServerCallback>;\n  /** When set to true, this indicates that init callbacks should run synchronously in the order they are declared. By default they all run in parallel */\n  private syncCallbacks: boolean;\n  /** Config to set regularly running jobs on the server */\n  private cron?: Array<ServerCronJon>;\n  /** Global auth related configuration */\n  private auth: ServerAuthConfig;\n  /** WebSocket server instance, if configured */\n  private wss?: WebSocketServer;\n  /** Abort controller that handles signals for the server */\n  private abortController = new AbortController();\n\n  /** Create a server */\n  public constructor(config: ServerOptions) {\n    this.validate(config);\n\n    reportDebug({\n      namespace,\n      message: `Creating server`\n    });\n\n    this.endpoints = config.endpoints;\n    this.globalMiddleware = config.globalMiddleware ?? [];\n    this.errorMiddleware = config.errorMiddleware ?? [];\n    this.initCallbacks = config.initCallbacks ?? [];\n    this.shutdownCallbacks = config.shutdownCallbacks ?? [];\n    this.syncCallbacks = config.syncCallbacks ?? false;\n    this.cron = config.cron;\n    this.auth = { noFetch: false, ...config.auth };\n\n    // The minimal environment check is different between the migration modes of execution and the regular server execution mode\n    // When running in migration mode, we only check that we have SQL related environment variables\n    this.checkEnvironment =\n      process.env.RUN_MIGRATION === 'true' ||\n      process.env.UNDO_MIGRATION === 'true'\n        ? {\n            SQL_HOST: envAssert.isHost(),\n            SQL_USER: envAssert.isString(),\n            SQL_PASSWORD: envAssert.isString(),\n            SQL_DB: envAssert.isString()\n          }\n        : {\n            NODE_ENV: envAssert.isString(),\n            PORT: envAssert.isPort(),\n            SECONDARY_PORT: envAssert.isPort(),\n            ...config.checkEnvironment\n          };\n\n    checkEnvironment(this.checkEnvironment);\n\n    // Create the primary express core that serves the business logic\n    this.app = express();\n\n    this.app.use(\n      cors({\n        origin: process.env.CORS_ORIGIN ?? '*',\n        methods: ['GET', 'POST', 'PUT', 'DELETE', 'OPTIONS'],\n        allowedHeaders: ['Content-Type', 'Authorization']\n      })\n    );\n\n    this.registerMiddleware(this.app);\n    this.httpServer = createHttpServer(this.app);\n\n    // Create a secondary express core that servers metrics and analytics\n    // This will be served on a different port, allowing to specify different firewall rules for these routes\n    this.secondaryApp = express();\n    [...secondaryMiddleware, ...defaultErrorMiddleware].forEach(\n      (middleware) => {\n        if (middleware) this.secondaryApp.use(middleware);\n      }\n    );\n    this.secondaryHttpServer = createHttpServer(this.secondaryApp);\n\n    // Remove the express headers\n    this.app.disable('x-powered-by');\n    this.secondaryApp.disable('x-powered-by');\n\n    // We remove all node timeout on connections and requests\n    // This responsibility is delegated to the front-facing load balancer\n    [this.httpServer, this.secondaryHttpServer].forEach((server) => {\n      server.headersTimeout = 0;\n      server.keepAliveTimeout = 0;\n    });\n\n    if (config.webSocket) {\n      this.attachWebSocket(config.webSocket);\n    }\n  }\n\n  /** Start the server */\n  public async init(): Promise<void> {\n    reportDebug({ namespace, message: `Starting Server` });\n    // Fetch the keys for JWT authentication\n    // Ignore in test environment as we do symmetrical token signing\n    if (process.env.NODE_ENV !== 'test' && !this.auth.noFetch)\n      await initKeySets();\n    // Run all the init callbacks\n    // We can either run them all 1/1 synchronously or run them all in parallel (default)\n    // Callback can either be direct function or an object with function and parameters attributes\n\n    if (this.syncCallbacks) {\n      for (const callback of this.initCallbacks) {\n        await this.runCallback(callback);\n      }\n    } else {\n      await Promise.all(\n        this.initCallbacks.map((callback) => this.runCallback(callback))\n      );\n    }\n\n    // Initialize the Pub/Sub module\n    await PubSub.init();\n    // Run all the cronjob\n    if (this.cron) {\n      this.cron.forEach((job) => {\n        this.runCronJob(job);\n      });\n    }\n\n    // Start listening to requests\n    await Promise.all([\n      new Promise<void>((resolve) =>\n        this.httpServer.listen(process.env.PORT, () => {\n          resolve();\n        })\n      ),\n      new Promise<void>((resolve) =>\n        this.secondaryHttpServer.listen(process.env.SECONDARY_PORT, () => {\n          resolve();\n        })\n      )\n    ]);\n    reportInfo({\n      message: 'SERVER_RUNNING',\n      data: {\n        port: process.env.PORT,\n        secondaryPort: process.env.SECONDARY_PORT,\n        nodeEnv: process.env.NODE_ENV\n      }\n    });\n\n    this.handleSignal();\n\n    // Load TSL config files\n    this.loadTls();\n  }\n\n  /** Graceful shutdown */\n  public async shutdown(): Promise<void> {\n    reportDebug({ namespace, message: `Shutting down Server` });\n\n    // Stop listening to HTTP requests\n    await Promise.all(\n      [this.httpServer, this.secondaryHttpServer].map((server) => {\n        // Ignore if the server was already stopped\n        // We have observed cases where SIGTERM was thrown multiple times\n        if (!server.listening) return;\n        const { port } = server.address() as AddressInfo;\n        server.on('close', (error: unknown) => {\n          if (error) {\n            reportError(error);\n            process.exit(1);\n          } else {\n            reportInfo({\n              message: `Stopped listening to requests on port ${port}`\n            });\n          }\n        });\n        server.close();\n      })\n    );\n\n    // Close all socket connections\n    if (this.wss) {\n      // First ask then to close gracefully\n      this.wss.clients.forEach((socket) => {\n        socket.close();\n      });\n      // Hard terminate all connections still open after a defined time\n      const socketKillTimeout = process.env.WEBSOCKET_CLOSE_TIMEOUT\n        ? parseInt(process.env.WEBSOCKET_CLOSE_TIMEOUT)\n        : 5000;\n      await new Promise<void>((resolve) => {\n        setTimeout(() => {\n          (this.wss as WebSocketServer).clients.forEach((socket) => {\n            if (\n              socket.readyState === socket.CLOSING ||\n              socket.readyState === socket.OPEN\n            ) {\n              socket.terminate();\n            }\n          });\n          resolve();\n        }, socketKillTimeout);\n      });\n    }\n\n    // Run all the shutdown callback\n    if (this.syncCallbacks) {\n      for (const callback of this.shutdownCallbacks) {\n        await this.runCallback(callback);\n      }\n    } else {\n      await Promise.all(\n        this.shutdownCallbacks.map((callback) => this.runCallback(callback))\n      );\n    }\n\n    // Shutdown all the running entities\n    await LifecycleController.shutdownRunningInstances();\n\n    // Abort all the cronjob\n    if (this.abortController) this.abortController.abort();\n\n    // Stop the keyset timers\n    shutdownKeySets();\n\n    shutdownSignals.forEach((signal) => process.removeAllListeners(signal));\n  }\n\n  /** Get the express app instance of the server */\n  public getApp(): Application {\n    return this.app;\n  }\n\n  /** Get the express app instance of the server */\n  public getSecondaryApp(): Application {\n    return this.secondaryApp;\n  }\n\n  /** Registers all the middleware with the express app */\n  private registerMiddleware(app: Application): void {\n    // Global middleware can specify a path to which they apply\n    [...defaultMiddleware, ...this.globalMiddleware].forEach((middleware) => {\n      if (typeof middleware === 'function') {\n        app.use(middleware);\n      } else {\n        app.use(middleware.path, middleware.middleware);\n      }\n    });\n    // Call the register method of each endpoint\n    this.endpoints.forEach((endpoint) => {\n      endpoint.register(app);\n    });\n    // Add error middleware\n    [...this.errorMiddleware, ...defaultErrorMiddleware].forEach(\n      (middleware) => {\n        if (typeof middleware === 'function') {\n          app.use(middleware);\n        } else {\n          app.use(middleware.path, middleware.middleware);\n        }\n      }\n    );\n  }\n\n  /** Add a handler for WebSocket connections */\n  private attachWebSocket(options: ServerWebSocketConfig): void {\n    this.wss = new WebSocketServer({\n      ...options.server,\n      server: this.httpServer\n    })\n      .on('connection', (webSocket, request) => {\n        new SocketClient(webSocket, request, options.client);\n      })\n      .on('error', (error) => {\n        reportError(error);\n      });\n  }\n\n  /** Call shutdown if signal gets sent to the process */\n  private handleSignal(): void {\n    shutdownSignals.forEach((signal) =>\n      process.on(signal, () => {\n        (async (): Promise<void> => {\n          reportInfo(`Received shutdown signal [${signal}]`);\n          await this.shutdown();\n        })().catch((error) => {\n          reportError(error);\n        });\n      })\n    );\n  }\n\n  /** Load TLS Config */\n  private loadTls(): void {\n    reportInfo(`Loading TLS config`);\n    loadTlsConfig();\n    (this.httpServer as https.Server).setSecureContext(tlsConfig as TlsConfig);\n  }\n\n  /** Executes a recurring job */\n  private runCronJob(job: ServerCronJon): void {\n    (async (): Promise<void> => {\n      reportInfo({ message: `Starting scheduled job \"${job.handler.name}\"` });\n      try {\n        await job.handler();\n        reportInfo({\n          message: `Job \"${job.handler.name}\" finished, starting again in ${job.interval} seconds`\n        });\n        await setTimeoutPromise(job.interval * 1000, undefined, {\n          signal: this.abortController.signal\n        });\n        this.runCronJob(job);\n      } catch (error) {\n        if (error instanceof Error && error.name === 'AbortError') {\n          reportDebug({\n            namespace,\n            message: `Scheduled job \"${job.handler?.name}\" has been aborted`\n          });\n        } else {\n          throw error;\n        }\n      }\n    })().catch((error) => {\n      reportError(error);\n    });\n  }\n\n  /** Run a shutdown/init callback */\n  private runCallback(callback: ServerCallback): unknown {\n    return typeof callback === 'function'\n      ? callback()\n      : callback.function.apply(null, callback.parameters ?? []);\n  }\n\n  /**\n   * Validate the Server constructor configuration\n   */\n  private validate(config: ServerOptions): void {\n    if (\n      !config.endpoints ||\n      config.endpoints.some((endpoint) => !(endpoint instanceof Endpoint))\n    )\n      throw new EngineError(\n        'Server endpoints should be declared and all be Endpoint instances'\n      );\n\n    if (\n      config.checkEnvironment &&\n      Object.values(config.checkEnvironment).some(\n        (validator) => typeof validator !== 'function'\n      )\n    )\n      throw new EngineError(\n        'Some of the environment checks are not valid functions'\n      );\n\n    if (\n      config.initCallbacks &&\n      (!(config.initCallbacks instanceof Array) ||\n        config.initCallbacks.some(\n          (callback) =>\n            !(\n              typeof callback === 'function' ||\n              typeof callback?.function === 'function'\n            )\n        ))\n    )\n      throw new EngineError('Init callbacks is not a list of functions');\n\n    if (\n      config.shutdownCallbacks &&\n      (!(config.shutdownCallbacks instanceof Array) ||\n        config.shutdownCallbacks.some(\n          (callback) =>\n            !(\n              typeof callback === 'function' ||\n              typeof callback?.function === 'function'\n            )\n        ))\n    )\n      throw new EngineError('Shutdown callbacks is not a list of functions');\n  }\n}\n"],"mappings":";;;;;;;;;;AAGA,IAAAA,SAAA,GAAAC,OAAA;AAEA,IAAAC,QAAA,GAAAC,sBAAA,CAAAF,OAAA;AACA,IAAAG,KAAA,GAAAD,sBAAA,CAAAF,OAAA;AACA,IAAAI,GAAA,GAAAJ,OAAA;AACA,IAAAK,aAAA,GAAAL,OAAA;AACA,IAAAM,QAAA,GAAAN,OAAA;AAeA,IAAAO,SAAA,GAAAP,OAAA;AACA,IAAAQ,YAAA,GAAAR,OAAA;AACA,IAAAS,oBAAA,GAAAT,OAAA;AACA,IAAAU,OAAA,GAAAV,OAAA;AACA,IAAAW,MAAA,GAAAX,OAAA;AACA,IAAAY,IAAA,GAAAZ,OAAA;AACA,IAAAa,OAAA,GAAAb,OAAA;AACA,IAAAc,UAAA,GAAAd,OAAA;AAEA,MAAMe,SAAS,GAAG,eAAe;;AAEjC;AAAA,IACaC,MAAM,GAAAC,OAAA,CAAAD,MAAA;EAmCjB;EACA,SAAAA,OAAmBE,MAAqB,EAAE;IAAA,IAAAC,gBAAA,CAAAC,OAAA,QAAAJ,MAAA;IAnC1C;IAAA,IAAAK,gBAAA,CAAAD,OAAA;IAEA;IAAA,IAAAC,gBAAA,CAAAD,OAAA;IAEA;IAAA,IAAAC,gBAAA,CAAAD,OAAA;IAEA;IAAA,IAAAC,gBAAA,CAAAD,OAAA;IAEA;IACA;IAAA,IAAAC,gBAAA,CAAAD,OAAA;IAEA;IAAA,IAAAC,gBAAA,CAAAD,OAAA;IAEA;IAAA,IAAAC,gBAAA,CAAAD,OAAA;IAEA;IAAA,IAAAC,gBAAA,CAAAD,OAAA;IAIA;IAAA,IAAAC,gBAAA,CAAAD,OAAA;IAEA;IAAA,IAAAC,gBAAA,CAAAD,OAAA;IAEA;IAAA,IAAAC,gBAAA,CAAAD,OAAA;IAEA;IAAA,IAAAC,gBAAA,CAAAD,OAAA;IAEA;IAAA,IAAAC,gBAAA,CAAAD,OAAA;IAEA;IAAA,IAAAC,gBAAA,CAAAD,OAAA;IAEA;IAAA,IAAAC,gBAAA,CAAAD,OAAA,2BAC0B,IAAIE,eAAe,CAAC,CAAC;IAI7C,IAAI,CAACC,QAAQ,CAACL,MAAM,CAAC;IAErB,IAAAM,mBAAW,EAAC;MACVT,SAAS;MACTU,OAAO,EAAE;IACX,CAAC,CAAC;IAEF,IAAI,CAACC,SAAS,GAAGR,MAAM,CAACQ,SAAS;IACjC,IAAI,CAACC,gBAAgB,GAAGT,MAAM,CAACS,gBAAgB,IAAI,EAAE;IACrD,IAAI,CAACC,eAAe,GAAGV,MAAM,CAACU,eAAe,IAAI,EAAE;IACnD,IAAI,CAACC,aAAa,GAAGX,MAAM,CAACW,aAAa,IAAI,EAAE;IAC/C,IAAI,CAACC,iBAAiB,GAAGZ,MAAM,CAACY,iBAAiB,IAAI,EAAE;IACvD,IAAI,CAACC,aAAa,GAAGb,MAAM,CAACa,aAAa,IAAI,KAAK;IAClD,IAAI,CAACC,IAAI,GAAGd,MAAM,CAACc,IAAI;IACvB,IAAI,CAACC,IAAI,GAAG;MAAEC,OAAO,EAAE,KAAK;MAAE,GAAGhB,MAAM,CAACe;IAAK,CAAC;;IAE9C;IACA;IACA,IAAI,CAACE,gBAAgB,GACnBC,OAAO,CAACC,GAAG,CAACC,aAAa,KAAK,MAAM,IACpCF,OAAO,CAACC,GAAG,CAACE,cAAc,KAAK,MAAM,GACjC;MACEC,QAAQ,EAAEC,gBAAS,CAACC,MAAM,CAAC,CAAC;MAC5BC,QAAQ,EAAEF,gBAAS,CAACG,QAAQ,CAAC,CAAC;MAC9BC,YAAY,EAAEJ,gBAAS,CAACG,QAAQ,CAAC,CAAC;MAClCE,MAAM,EAAEL,gBAAS,CAACG,QAAQ,CAAC;IAC7B,CAAC,GACD;MACEG,QAAQ,EAAEN,gBAAS,CAACG,QAAQ,CAAC,CAAC;MAC9BI,IAAI,EAAEP,gBAAS,CAACQ,MAAM,CAAC,CAAC;MACxBC,cAAc,EAAET,gBAAS,CAACQ,MAAM,CAAC,CAAC;MAClC,GAAG/B,MAAM,CAACiB;IACZ,CAAC;IAEP,IAAAA,uBAAgB,EAAC,IAAI,CAACA,gBAAgB,CAAC;;IAEvC;IACA,IAAI,CAACgB,GAAG,GAAG,IAAAC,gBAAO,EAAC,CAAC;IAEpB,IAAI,CAACD,GAAG,CAACE,GAAG,CACV,IAAAC,aAAI,EAAC;MACHC,MAAM,EAAEnB,OAAO,CAACC,GAAG,CAACmB,WAAW,IAAI,GAAG;MACtCC,OAAO,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,SAAS,CAAC;MACpDC,cAAc,EAAE,CAAC,cAAc,EAAE,eAAe;IAClD,CAAC,CACH,CAAC;IAED,IAAI,CAACC,kBAAkB,CAAC,IAAI,CAACR,GAAG,CAAC;IACjC,IAAI,CAACS,UAAU,GAAG,IAAAC,uBAAgB,EAAC,IAAI,CAACV,GAAG,CAAC;;IAE5C;IACA;IACA,IAAI,CAACW,YAAY,GAAG,IAAAV,gBAAO,EAAC,CAAC;IAC7B,CAAC,GAAGW,4BAAmB,EAAE,GAAGC,+BAAsB,CAAC,CAACC,OAAO,CACxDC,UAAU,IAAK;MACd,IAAIA,UAAU,EAAE,IAAI,CAACJ,YAAY,CAACT,GAAG,CAACa,UAAU,CAAC;IACnD,CACF,CAAC;IACD,IAAI,CAACC,mBAAmB,GAAG,IAAAN,uBAAgB,EAAC,IAAI,CAACC,YAAY,CAAC;;IAE9D;IACA,IAAI,CAACX,GAAG,CAACiB,OAAO,CAAC,cAAc,CAAC;IAChC,IAAI,CAACN,YAAY,CAACM,OAAO,CAAC,cAAc,CAAC;;IAEzC;IACA;IACA,CAAC,IAAI,CAACR,UAAU,EAAE,IAAI,CAACO,mBAAmB,CAAC,CAACF,OAAO,CAAEI,MAAM,IAAK;MAC9DA,MAAM,CAACC,cAAc,GAAG,CAAC;MACzBD,MAAM,CAACE,gBAAgB,GAAG,CAAC;IAC7B,CAAC,CAAC;IAEF,IAAIrD,MAAM,CAACsD,SAAS,EAAE;MACpB,IAAI,CAACC,eAAe,CAACvD,MAAM,CAACsD,SAAS,CAAC;IACxC;EACF;;EAEA;EAAA,WAAAE,aAAA,CAAAtD,OAAA,EAAAJ,MAAA;IAAA2D,GAAA;IAAAC,KAAA,EACA,eAAaC,IAAIA,CAAA,EAAkB;MACjC,IAAArD,mBAAW,EAAC;QAAET,SAAS;QAAEU,OAAO,EAAE;MAAkB,CAAC,CAAC;MACtD;MACA;MACA,IAAIW,OAAO,CAACC,GAAG,CAACU,QAAQ,KAAK,MAAM,IAAI,CAAC,IAAI,CAACd,IAAI,CAACC,OAAO,EACvD,MAAM,IAAA4C,gBAAW,EAAC,CAAC;MACrB;MACA;MACA;;MAEA,IAAI,IAAI,CAAC/C,aAAa,EAAE;QACtB,KAAK,MAAMgD,QAAQ,IAAI,IAAI,CAAClD,aAAa,EAAE;UACzC,MAAM,IAAI,CAACmD,WAAW,CAACD,QAAQ,CAAC;QAClC;MACF,CAAC,MAAM;QACL,MAAME,OAAO,CAACC,GAAG,CACf,IAAI,CAACrD,aAAa,CAACsD,GAAG,CAAEJ,QAAQ,IAAK,IAAI,CAACC,WAAW,CAACD,QAAQ,CAAC,CACjE,CAAC;MACH;;MAEA;MACA,MAAMK,cAAM,CAACP,IAAI,CAAC,CAAC;MACnB;MACA,IAAI,IAAI,CAAC7C,IAAI,EAAE;QACb,IAAI,CAACA,IAAI,CAACiC,OAAO,CAAEoB,GAAG,IAAK;UACzB,IAAI,CAACC,UAAU,CAACD,GAAG,CAAC;QACtB,CAAC,CAAC;MACJ;;MAEA;MACA,MAAMJ,OAAO,CAACC,GAAG,CAAC,CAChB,IAAID,OAAO,CAAQM,OAAO,IACxB,IAAI,CAAC3B,UAAU,CAAC4B,MAAM,CAACpD,OAAO,CAACC,GAAG,CAACW,IAAI,EAAE,MAAM;QAC7CuC,OAAO,CAAC,CAAC;MACX,CAAC,CACH,CAAC,EACD,IAAIN,OAAO,CAAQM,OAAO,IACxB,IAAI,CAACpB,mBAAmB,CAACqB,MAAM,CAACpD,OAAO,CAACC,GAAG,CAACa,cAAc,EAAE,MAAM;QAChEqC,OAAO,CAAC,CAAC;MACX,CAAC,CACH,CAAC,CACF,CAAC;MACF,IAAAE,kBAAU,EAAC;QACThE,OAAO,EAAE,gBAAgB;QACzBiE,IAAI,EAAE;UACJC,IAAI,EAAEvD,OAAO,CAACC,GAAG,CAACW,IAAI;UACtB4C,aAAa,EAAExD,OAAO,CAACC,GAAG,CAACa,cAAc;UACzC2C,OAAO,EAAEzD,OAAO,CAACC,GAAG,CAACU;QACvB;MACF,CAAC,CAAC;MAEF,IAAI,CAAC+C,YAAY,CAAC,CAAC;;MAEnB;MACA,IAAI,CAACC,OAAO,CAAC,CAAC;IAChB;;IAEA;EAAA;IAAApB,GAAA;IAAAC,KAAA,EACA,eAAaoB,QAAQA,CAAA,EAAkB;MACrC,IAAAxE,mBAAW,EAAC;QAAET,SAAS;QAAEU,OAAO,EAAE;MAAuB,CAAC,CAAC;;MAE3D;MACA,MAAMwD,OAAO,CAACC,GAAG,CACf,CAAC,IAAI,CAACtB,UAAU,EAAE,IAAI,CAACO,mBAAmB,CAAC,CAACgB,GAAG,CAAEd,MAAM,IAAK;QAC1D;QACA;QACA,IAAI,CAACA,MAAM,CAAC4B,SAAS,EAAE;QACvB,MAAM;UAAEN;QAAK,CAAC,GAAGtB,MAAM,CAAC6B,OAAO,CAAC,CAAgB;QAChD7B,MAAM,CAAC8B,EAAE,CAAC,OAAO,EAAGC,KAAc,IAAK;UACrC,IAAIA,KAAK,EAAE;YACT,IAAAC,mBAAW,EAACD,KAAK,CAAC;YAClBhE,OAAO,CAACkE,IAAI,CAAC,CAAC,CAAC;UACjB,CAAC,MAAM;YACL,IAAAb,kBAAU,EAAC;cACThE,OAAO,EAAE,yCAAyCkE,IAAI;YACxD,CAAC,CAAC;UACJ;QACF,CAAC,CAAC;QACFtB,MAAM,CAACkC,KAAK,CAAC,CAAC;MAChB,CAAC,CACH,CAAC;;MAED;MACA,IAAI,IAAI,CAACC,GAAG,EAAE;QACZ;QACA,IAAI,CAACA,GAAG,CAACC,OAAO,CAACxC,OAAO,CAAEyC,MAAM,IAAK;UACnCA,MAAM,CAACH,KAAK,CAAC,CAAC;QAChB,CAAC,CAAC;QACF;QACA,MAAMI,iBAAiB,GAAGvE,OAAO,CAACC,GAAG,CAACuE,uBAAuB,GACzDC,QAAQ,CAACzE,OAAO,CAACC,GAAG,CAACuE,uBAAuB,CAAC,GAC7C,IAAI;QACR,MAAM,IAAI3B,OAAO,CAAQM,OAAO,IAAK;UACnCuB,UAAU,CAAC,MAAM;YACd,IAAI,CAACN,GAAG,CAAqBC,OAAO,CAACxC,OAAO,CAAEyC,MAAM,IAAK;cACxD,IACEA,MAAM,CAACK,UAAU,KAAKL,MAAM,CAACM,OAAO,IACpCN,MAAM,CAACK,UAAU,KAAKL,MAAM,CAACO,IAAI,EACjC;gBACAP,MAAM,CAACQ,SAAS,CAAC,CAAC;cACpB;YACF,CAAC,CAAC;YACF3B,OAAO,CAAC,CAAC;UACX,CAAC,EAAEoB,iBAAiB,CAAC;QACvB,CAAC,CAAC;MACJ;;MAEA;MACA,IAAI,IAAI,CAAC5E,aAAa,EAAE;QACtB,KAAK,MAAMgD,QAAQ,IAAI,IAAI,CAACjD,iBAAiB,EAAE;UAC7C,MAAM,IAAI,CAACkD,WAAW,CAACD,QAAQ,CAAC;QAClC;MACF,CAAC,MAAM;QACL,MAAME,OAAO,CAACC,GAAG,CACf,IAAI,CAACpD,iBAAiB,CAACqD,GAAG,CAAEJ,QAAQ,IAAK,IAAI,CAACC,WAAW,CAACD,QAAQ,CAAC,CACrE,CAAC;MACH;;MAEA;MACA,MAAMoC,wCAAmB,CAACC,wBAAwB,CAAC,CAAC;;MAEpD;MACA,IAAI,IAAI,CAACC,eAAe,EAAE,IAAI,CAACA,eAAe,CAACC,KAAK,CAAC,CAAC;;MAEtD;MACA,IAAAC,oBAAe,EAAC,CAAC;MAEjBC,wBAAe,CAACvD,OAAO,CAAEwD,MAAM,IAAKrF,OAAO,CAACsF,kBAAkB,CAACD,MAAM,CAAC,CAAC;IACzE;;IAEA;EAAA;IAAA9C,GAAA;IAAAC,KAAA,EACA,SAAO+C,MAAMA,CAAA,EAAgB;MAC3B,OAAO,IAAI,CAACxE,GAAG;IACjB;;IAEA;EAAA;IAAAwB,GAAA;IAAAC,KAAA,EACA,SAAOgD,eAAeA,CAAA,EAAgB;MACpC,OAAO,IAAI,CAAC9D,YAAY;IAC1B;;IAEA;EAAA;IAAAa,GAAA;IAAAC,KAAA,EACA,SAAQjB,kBAAkBA,CAACR,GAAgB,EAAQ;MACjD;MACA,CAAC,GAAG0E,0BAAiB,EAAE,GAAG,IAAI,CAAClG,gBAAgB,CAAC,CAACsC,OAAO,CAAEC,UAAU,IAAK;QACvE,IAAI,OAAOA,UAAU,KAAK,UAAU,EAAE;UACpCf,GAAG,CAACE,GAAG,CAACa,UAAU,CAAC;QACrB,CAAC,MAAM;UACLf,GAAG,CAACE,GAAG,CAACa,UAAU,CAAC4D,IAAI,EAAE5D,UAAU,CAACA,UAAU,CAAC;QACjD;MACF,CAAC,CAAC;MACF;MACA,IAAI,CAACxC,SAAS,CAACuC,OAAO,CAAE8D,QAAQ,IAAK;QACnCA,QAAQ,CAACC,QAAQ,CAAC7E,GAAG,CAAC;MACxB,CAAC,CAAC;MACF;MACA,CAAC,GAAG,IAAI,CAACvB,eAAe,EAAE,GAAGoC,+BAAsB,CAAC,CAACC,OAAO,CACzDC,UAAU,IAAK;QACd,IAAI,OAAOA,UAAU,KAAK,UAAU,EAAE;UACpCf,GAAG,CAACE,GAAG,CAACa,UAAU,CAAC;QACrB,CAAC,MAAM;UACLf,GAAG,CAACE,GAAG,CAACa,UAAU,CAAC4D,IAAI,EAAE5D,UAAU,CAACA,UAAU,CAAC;QACjD;MACF,CACF,CAAC;IACH;;IAEA;EAAA;IAAAS,GAAA;IAAAC,KAAA,EACA,SAAQH,eAAeA,CAACwD,OAA8B,EAAQ;MAC5D,IAAI,CAACzB,GAAG,GAAG,IAAI0B,UAAe,CAAC;QAC7B,GAAGD,OAAO,CAAC5D,MAAM;QACjBA,MAAM,EAAE,IAAI,CAACT;MACf,CAAC,CAAC,CACCuC,EAAE,CAAC,YAAY,EAAE,CAAC3B,SAAS,EAAE2D,OAAO,KAAK;QACxC,IAAIC,0BAAY,CAAC5D,SAAS,EAAE2D,OAAO,EAAEF,OAAO,CAACI,MAAM,CAAC;MACtD,CAAC,CAAC,CACDlC,EAAE,CAAC,OAAO,EAAGC,KAAK,IAAK;QACtB,IAAAC,mBAAW,EAACD,KAAK,CAAC;MACpB,CAAC,CAAC;IACN;;IAEA;EAAA;IAAAzB,GAAA;IAAAC,KAAA,EACA,SAAQkB,YAAYA,CAAA,EAAS;MAC3B0B,wBAAe,CAACvD,OAAO,CAAEwD,MAAM,IAC7BrF,OAAO,CAAC+D,EAAE,CAACsB,MAAM,EAAE,MAAM;QACvB,CAAC,YAA2B;UAC1B,IAAAhC,kBAAU,EAAC,6BAA6BgC,MAAM,GAAG,CAAC;UAClD,MAAM,IAAI,CAACzB,QAAQ,CAAC,CAAC;QACvB,CAAC,EAAE,CAAC,CAACsC,KAAK,CAAElC,KAAK,IAAK;UACpB,IAAAC,mBAAW,EAACD,KAAK,CAAC;QACpB,CAAC,CAAC;MACJ,CAAC,CACH,CAAC;IACH;;IAEA;EAAA;IAAAzB,GAAA;IAAAC,KAAA,EACA,SAAQmB,OAAOA,CAAA,EAAS;MACtB,IAAAN,kBAAU,EAAC,oBAAoB,CAAC;MAChC,IAAA8C,wBAAa,EAAC,CAAC;MACd,IAAI,CAAC3E,UAAU,CAAkB4E,gBAAgB,CAACC,oBAAsB,CAAC;IAC5E;;IAEA;EAAA;IAAA9D,GAAA;IAAAC,KAAA,EACA,SAAQU,UAAUA,CAACD,GAAkB,EAAQ;MAC3C,CAAC,YAA2B;QAC1B,IAAAI,kBAAU,EAAC;UAAEhE,OAAO,EAAE,2BAA2B4D,GAAG,CAACqD,OAAO,CAACC,IAAI;QAAI,CAAC,CAAC;QACvE,IAAI;UACF,MAAMtD,GAAG,CAACqD,OAAO,CAAC,CAAC;UACnB,IAAAjD,kBAAU,EAAC;YACThE,OAAO,EAAE,QAAQ4D,GAAG,CAACqD,OAAO,CAACC,IAAI,iCAAiCtD,GAAG,CAACuD,QAAQ;UAChF,CAAC,CAAC;UACF,MAAM,IAAAC,oBAAiB,EAACxD,GAAG,CAACuD,QAAQ,GAAG,IAAI,EAAEE,SAAS,EAAE;YACtDrB,MAAM,EAAE,IAAI,CAACJ,eAAe,CAACI;UAC/B,CAAC,CAAC;UACF,IAAI,CAACnC,UAAU,CAACD,GAAG,CAAC;QACtB,CAAC,CAAC,OAAOe,KAAK,EAAE;UACd,IAAIA,KAAK,YAAY2C,KAAK,IAAI3C,KAAK,CAACuC,IAAI,KAAK,YAAY,EAAE;YACzD,IAAAnH,mBAAW,EAAC;cACVT,SAAS;cACTU,OAAO,EAAE,kBAAkB4D,GAAG,CAACqD,OAAO,EAAEC,IAAI;YAC9C,CAAC,CAAC;UACJ,CAAC,MAAM;YACL,MAAMvC,KAAK;UACb;QACF;MACF,CAAC,EAAE,CAAC,CAACkC,KAAK,CAAElC,KAAK,IAAK;QACpB,IAAAC,mBAAW,EAACD,KAAK,CAAC;MACpB,CAAC,CAAC;IACJ;;IAEA;EAAA;IAAAzB,GAAA;IAAAC,KAAA,EACA,SAAQI,WAAWA,CAACD,QAAwB,EAAW;MACrD,OAAO,OAAOA,QAAQ,KAAK,UAAU,GACjCA,QAAQ,CAAC,CAAC,GACVA,QAAQ,CAACiE,QAAQ,CAACC,KAAK,CAAC,IAAI,EAAElE,QAAQ,CAACmE,UAAU,IAAI,EAAE,CAAC;IAC9D;;IAEA;AACF;AACA;EAFE;IAAAvE,GAAA;IAAAC,KAAA,EAGA,SAAQrD,QAAQA,CAACL,MAAqB,EAAQ;MAC5C,IACE,CAACA,MAAM,CAACQ,SAAS,IACjBR,MAAM,CAACQ,SAAS,CAACyH,IAAI,CAAEpB,QAAQ,IAAK,EAAEA,QAAQ,YAAYqB,kBAAQ,CAAC,CAAC,EAEpE,MAAM,IAAIC,wBAAW,CACnB,mEACF,CAAC;MAEH,IACEnI,MAAM,CAACiB,gBAAgB,IACvBmH,MAAM,CAACC,MAAM,CAACrI,MAAM,CAACiB,gBAAgB,CAAC,CAACgH,IAAI,CACxCK,SAAS,IAAK,OAAOA,SAAS,KAAK,UACtC,CAAC,EAED,MAAM,IAAIH,wBAAW,CACnB,wDACF,CAAC;MAEH,IACEnI,MAAM,CAACW,aAAa,KACnB,EAAEX,MAAM,CAACW,aAAa,YAAY4H,KAAK,CAAC,IACvCvI,MAAM,CAACW,aAAa,CAACsH,IAAI,CACtBpE,QAAQ,IACP,EACE,OAAOA,QAAQ,KAAK,UAAU,IAC9B,OAAOA,QAAQ,EAAEiE,QAAQ,KAAK,UAAU,CAE9C,CAAC,CAAC,EAEJ,MAAM,IAAIK,wBAAW,CAAC,2CAA2C,CAAC;MAEpE,IACEnI,MAAM,CAACY,iBAAiB,KACvB,EAAEZ,MAAM,CAACY,iBAAiB,YAAY2H,KAAK,CAAC,IAC3CvI,MAAM,CAACY,iBAAiB,CAACqH,IAAI,CAC1BpE,QAAQ,IACP,EACE,OAAOA,QAAQ,KAAK,UAAU,IAC9B,OAAOA,QAAQ,EAAEiE,QAAQ,KAAK,UAAU,CAE9C,CAAC,CAAC,EAEJ,MAAM,IAAIK,wBAAW,CAAC,+CAA+C,CAAC;IAC1E;EAAC;AAAA","ignoreList":[]}

package/dist/middleware/userResolver/userResolver.d.ts

@@ -1,3 +1,7 @@
 import { Request, Response, NextFunction } from 'express';
 /** Fetch the user previously identified by a JWT and adds his data to the request.user object */
 export declare function userResolver(request: Request, response: Response, next: NextFunction): Promise<void>;
+/**
+ * Call the GET /user/{id} endpoint using TLS
+ */
+export declare function getUserById(userId: number): Promise<unknown>;

package/dist/middleware/userResolver/userResolver.js

@@ -3,9 +3,11 @@
 Object.defineProperty(exports, "__esModule", {
   value: true
 });
+exports.getUserById = getUserById;
 exports.userResolver = userResolver;
 var _EngineError = require("../../entities/EngineError");
 var _utils = require("../../utils");
+var _tlsRequest = require("../../utils/tlsRequest");
 const namespace = 'engine:middleware:userResolver';
 
 /** Fetch the user previously identified by a JWT and adds his data to the request.user object */
@@ -14,10 +16,7 @@ async function userResolver(request, response, next) {
   if (!id) throw new _EngineError.EngineError({
     message: 'Could not resolve user as the request is missing his ID'
   });
-  const user = {
-    user: 'ram',
-    id
-  };
+  const user = await getUserById(id);
   if (!user) throw new _EngineError.EngineError({
     message: 'Could not resolve user as it could not be fetched',
     data: {
@@ -38,4 +37,19 @@ async function userResolver(request, response, next) {
   };
   next();
 }
+
+/**
+ * Call the GET /user/{id} endpoint using TLS
+ */
+async function getUserById(userId) {
+  const userServiceUrl = process.env.USER_SERVICE_URL;
+  if (!userServiceUrl) {
+    throw new Error('USER_SERVICE_URL is not defined in environment variables');
+  }
+  const response = await (0, _tlsRequest.tlsRequest)({
+    method: 'GET',
+    url: `${userServiceUrl}/${userId}`
+  });
+  return response.data;
+}
 //# sourceMappingURL=userResolver.js.map

package/dist/middleware/userResolver/userResolver.js.map

@@ -1 +1 @@
-{"version":3,"file":"userResolver.js","names":["_EngineError","require","_utils","namespace","userResolver","request","response","next","id","user","EngineError","message","data","reportDebug"],"sources":["../../../src/middleware/userResolver/userResolver.ts"],"sourcesContent":["import { Request, Response, NextFunction } from 'express';\nimport { EngineError } from 'entities/EngineError';\nimport { reportDebug } from 'utils';\n\nconst namespace = 'engine:middleware:userResolver';\n\n/** Fetch the user previously identified by a JWT and adds his data to the request.user object */\nexport async function userResolver(\n  request: Request,\n  response: Response,\n  next: NextFunction\n): Promise<void> {\n  const id = request.user?.id;\n  if (!id)\n    throw new EngineError({\n      message: 'Could not resolve user as the request is missing his ID'\n    });\n  const user = { user: 'ram', id };\n  if (!user)\n    throw new EngineError({\n      message: 'Could not resolve user as it could not be fetched',\n      data: { id }\n    });\n  reportDebug({\n    namespace,\n    message: 'Resolved user based on his token',\n    data: { user, request: request.user }\n  });\n  request.user = {\n    ...request?.user,\n    ...user\n  };\n\n  next();\n}\n"],"mappings":";;;;;;AACA,IAAAA,YAAA,GAAAC,OAAA;AACA,IAAAC,MAAA,GAAAD,OAAA;AAEA,MAAME,SAAS,GAAG,gCAAgC;;AAElD;AACO,eAAeC,YAAYA,CAChCC,OAAgB,EAChBC,QAAkB,EAClBC,IAAkB,EACH;EACf,MAAMC,EAAE,GAAGH,OAAO,CAACI,IAAI,EAAED,EAAE;EAC3B,IAAI,CAACA,EAAE,EACL,MAAM,IAAIE,wBAAW,CAAC;IACpBC,OAAO,EAAE;EACX,CAAC,CAAC;EACJ,MAAMF,IAAI,GAAG;IAAEA,IAAI,EAAE,KAAK;IAAED;EAAG,CAAC;EAChC,IAAI,CAACC,IAAI,EACP,MAAM,IAAIC,wBAAW,CAAC;IACpBC,OAAO,EAAE,mDAAmD;IAC5DC,IAAI,EAAE;MAAEJ;IAAG;EACb,CAAC,CAAC;EACJ,IAAAK,kBAAW,EAAC;IACVV,SAAS;IACTQ,OAAO,EAAE,kCAAkC;IAC3CC,IAAI,EAAE;MAAEH,IAAI;MAAEJ,OAAO,EAAEA,OAAO,CAACI;IAAK;EACtC,CAAC,CAAC;EACFJ,OAAO,CAACI,IAAI,GAAG;IACb,GAAGJ,OAAO,EAAEI,IAAI;IAChB,GAAGA;EACL,CAAC;EAEDF,IAAI,CAAC,CAAC;AACR","ignoreList":[]}
+{"version":3,"file":"userResolver.js","names":["_EngineError","require","_utils","_tlsRequest","namespace","userResolver","request","response","next","id","user","EngineError","message","getUserById","data","reportDebug","userId","userServiceUrl","process","env","USER_SERVICE_URL","Error","tlsRequest","method","url"],"sources":["../../../src/middleware/userResolver/userResolver.ts"],"sourcesContent":["import { Request, Response, NextFunction } from 'express';\nimport { EngineError } from 'entities/EngineError';\nimport { reportDebug } from 'utils';\nimport { tlsRequest } from 'utils/tlsRequest';\n\nconst namespace = 'engine:middleware:userResolver';\n\n/** Fetch the user previously identified by a JWT and adds his data to the request.user object */\nexport async function userResolver(\n  request: Request,\n  response: Response,\n  next: NextFunction\n): Promise<void> {\n  const id = request.user?.id;\n  if (!id)\n    throw new EngineError({\n      message: 'Could not resolve user as the request is missing his ID'\n    });\n  const user = await getUserById(id);\n  if (!user)\n    throw new EngineError({\n      message: 'Could not resolve user as it could not be fetched',\n      data: { id }\n    });\n  reportDebug({\n    namespace,\n    message: 'Resolved user based on his token',\n    data: { user, request: request.user }\n  });\n  request.user = {\n    ...request?.user,\n    ...user\n  };\n\n  next();\n}\n\n/**\n * Call the GET /user/{id} endpoint using TLS\n */\nexport async function getUserById(userId: number): Promise<unknown> {\n  const userServiceUrl = process.env.USER_SERVICE_URL;\n  if (!userServiceUrl) {\n    throw new Error('USER_SERVICE_URL is not defined in environment variables');\n  }\n\n  const response = await tlsRequest<unknown>({\n    method: 'GET',\n    url: `${userServiceUrl}/${userId}`\n  });\n\n  return response.data;\n}\n"],"mappings":";;;;;;;AACA,IAAAA,YAAA,GAAAC,OAAA;AACA,IAAAC,MAAA,GAAAD,OAAA;AACA,IAAAE,WAAA,GAAAF,OAAA;AAEA,MAAMG,SAAS,GAAG,gCAAgC;;AAElD;AACO,eAAeC,YAAYA,CAChCC,OAAgB,EAChBC,QAAkB,EAClBC,IAAkB,EACH;EACf,MAAMC,EAAE,GAAGH,OAAO,CAACI,IAAI,EAAED,EAAE;EAC3B,IAAI,CAACA,EAAE,EACL,MAAM,IAAIE,wBAAW,CAAC;IACpBC,OAAO,EAAE;EACX,CAAC,CAAC;EACJ,MAAMF,IAAI,GAAG,MAAMG,WAAW,CAACJ,EAAE,CAAC;EAClC,IAAI,CAACC,IAAI,EACP,MAAM,IAAIC,wBAAW,CAAC;IACpBC,OAAO,EAAE,mDAAmD;IAC5DE,IAAI,EAAE;MAAEL;IAAG;EACb,CAAC,CAAC;EACJ,IAAAM,kBAAW,EAAC;IACVX,SAAS;IACTQ,OAAO,EAAE,kCAAkC;IAC3CE,IAAI,EAAE;MAAEJ,IAAI;MAAEJ,OAAO,EAAEA,OAAO,CAACI;IAAK;EACtC,CAAC,CAAC;EACFJ,OAAO,CAACI,IAAI,GAAG;IACb,GAAGJ,OAAO,EAAEI,IAAI;IAChB,GAAGA;EACL,CAAC;EAEDF,IAAI,CAAC,CAAC;AACR;;AAEA;AACA;AACA;AACO,eAAeK,WAAWA,CAACG,MAAc,EAAoB;EAClE,MAAMC,cAAc,GAAGC,OAAO,CAACC,GAAG,CAACC,gBAAgB;EACnD,IAAI,CAACH,cAAc,EAAE;IACnB,MAAM,IAAII,KAAK,CAAC,0DAA0D,CAAC;EAC7E;EAEA,MAAMd,QAAQ,GAAG,MAAM,IAAAe,sBAAU,EAAU;IACzCC,MAAM,EAAE,KAAK;IACbC,GAAG,EAAE,GAAGP,cAAc,IAAID,MAAM;EAClC,CAAC,CAAC;EAEF,OAAOT,QAAQ,CAACO,IAAI;AACtB","ignoreList":[]}

package/dist/utils/createHttpServer/createHttpServer.d.ts

@@ -1,5 +1,8 @@
 import { RequestListener, Server } from 'http';
 import { Server as SecureServer } from 'https';
 import { Application } from 'express';
-/** Create and configure an http/https server */
-export declare function createHttpServer(handler?: Application | RequestListener): Server | SecureServer;
+/**
+ * Create and configure an HTTP/HTTPS server.
+ * Supports local files in dev and GCP secrets in prod.
+ */
+export declare const createHttpServer: (handler?: Application | RequestListener) => Server | SecureServer;

package/dist/utils/createHttpServer/createHttpServer.js

@@ -1,30 +1,35 @@
 "use strict";
 
-var _interopRequireDefault = require("@babel/runtime/helpers/interopRequireDefault");
 Object.defineProperty(exports, "__esModule", {
   value: true
 });
-exports.createHttpServer = createHttpServer;
-var _fs = _interopRequireDefault(require("fs"));
+exports.createHttpServer = void 0;
 var _http = require("http");
 var _https = require("https");
 var _createHttpServer = require("./createHttpServer.validate");
-/** Create and configure an http/https server */
-function createHttpServer(handler) {
-  // Validate the environment variables
+var _ = require("./..");
+/**
+ * Create and configure an HTTP/HTTPS server.
+ * Supports local files in dev and GCP secrets in prod.
+ */
+const createHttpServer = handler => {
   (0, _createHttpServer.validateHttpEnvironment)();
-  // Create a https server if env var are specified
   if (process.env.TLS_SERVER_KEY && process.env.TLS_SERVER_CERT) {
+    const key = (0, _.getSecretOrFile)('TLS_SERVER_KEY');
+    const cert = (0, _.getSecretOrFile)('TLS_SERVER_CERT');
+    const ca = process.env.TLS_CA ? (0, _.getSecretOrFile)('TLS_CA') : undefined;
+    const passphrase = process.env.TLS_SERVER_KEY_PASSPHRASE;
     return (0, _https.createServer)({
-      key: _fs.default.readFileSync(process.env.TLS_SERVER_KEY),
-      passphrase: process.env.TLS_SERVER_KEY_PASSPHRASE,
-      cert: _fs.default.readFileSync(process.env.TLS_SERVER_CERT),
-      ca: process.env.TLS_CA ? _fs.default.readFileSync(process.env.TLS_CA) : undefined,
+      key,
+      cert,
+      ca,
+      passphrase,
       requestCert: true,
       rejectUnauthorized: false
     }, handler);
   } else {
     return (0, _http.createServer)(handler);
   }
-}
+};
+exports.createHttpServer = createHttpServer;
 //# sourceMappingURL=createHttpServer.js.map

package/dist/utils/createHttpServer/createHttpServer.js.map

@@ -1 +1 @@
-{"version":3,"file":"createHttpServer.js","names":["_fs","_interopRequireDefault","require","_http","_https","_createHttpServer","createHttpServer","handler","validateHttpEnvironment","process","env","TLS_SERVER_KEY","TLS_SERVER_CERT","createSecureServer","key","fs","readFileSync","passphrase","TLS_SERVER_KEY_PASSPHRASE","cert","ca","TLS_CA","undefined","requestCert","rejectUnauthorized","createServer"],"sources":["../../../src/utils/createHttpServer/createHttpServer.ts"],"sourcesContent":["import fs from 'fs';\nimport { createServer, RequestListener, Server } from 'http';\nimport {\n  createServer as createSecureServer,\n  Server as SecureServer\n} from 'https';\nimport { Application } from 'express';\nimport { validateHttpEnvironment } from './createHttpServer.validate';\n\n/** Create and configure an http/https server */\nexport function createHttpServer(\n  handler?: Application | RequestListener\n): Server | SecureServer {\n  // Validate the environment variables\n  validateHttpEnvironment();\n  // Create a https server if env var are specified\n  if (process.env.TLS_SERVER_KEY && process.env.TLS_SERVER_CERT) {\n    return createSecureServer(\n      {\n        key: fs.readFileSync(process.env.TLS_SERVER_KEY),\n        passphrase: process.env.TLS_SERVER_KEY_PASSPHRASE,\n        cert: fs.readFileSync(process.env.TLS_SERVER_CERT),\n        ca: process.env.TLS_CA\n          ? fs.readFileSync(process.env.TLS_CA)\n          : undefined,\n        requestCert: true,\n        rejectUnauthorized: false\n      },\n      handler\n    );\n  } else {\n    return createServer(handler);\n  }\n}\n"],"mappings":";;;;;;;AAAA,IAAAA,GAAA,GAAAC,sBAAA,CAAAC,OAAA;AACA,IAAAC,KAAA,GAAAD,OAAA;AACA,IAAAE,MAAA,GAAAF,OAAA;AAKA,IAAAG,iBAAA,GAAAH,OAAA;AAEA;AACO,SAASI,gBAAgBA,CAC9BC,OAAuC,EAChB;EACvB;EACA,IAAAC,yCAAuB,EAAC,CAAC;EACzB;EACA,IAAIC,OAAO,CAACC,GAAG,CAACC,cAAc,IAAIF,OAAO,CAACC,GAAG,CAACE,eAAe,EAAE;IAC7D,OAAO,IAAAC,mBAAkB,EACvB;MACEC,GAAG,EAAEC,WAAE,CAACC,YAAY,CAACP,OAAO,CAACC,GAAG,CAACC,cAAc,CAAC;MAChDM,UAAU,EAAER,OAAO,CAACC,GAAG,CAACQ,yBAAyB;MACjDC,IAAI,EAAEJ,WAAE,CAACC,YAAY,CAACP,OAAO,CAACC,GAAG,CAACE,eAAe,CAAC;MAClDQ,EAAE,EAAEX,OAAO,CAACC,GAAG,CAACW,MAAM,GAClBN,WAAE,CAACC,YAAY,CAACP,OAAO,CAACC,GAAG,CAACW,MAAM,CAAC,GACnCC,SAAS;MACbC,WAAW,EAAE,IAAI;MACjBC,kBAAkB,EAAE;IACtB,CAAC,EACDjB,OACF,CAAC;EACH,CAAC,MAAM;IACL,OAAO,IAAAkB,kBAAY,EAAClB,OAAO,CAAC;EAC9B;AACF","ignoreList":[]}
+{"version":3,"file":"createHttpServer.js","names":["_http","require","_https","_createHttpServer","_","createHttpServer","handler","validateHttpEnvironment","process","env","TLS_SERVER_KEY","TLS_SERVER_CERT","key","getSecretOrFile","cert","ca","TLS_CA","undefined","passphrase","TLS_SERVER_KEY_PASSPHRASE","createSecureServer","requestCert","rejectUnauthorized","createServer","exports"],"sources":["../../../src/utils/createHttpServer/createHttpServer.ts"],"sourcesContent":["import { createServer, RequestListener, Server } from 'http';\nimport {\n  createServer as createSecureServer,\n  Server as SecureServer\n} from 'https';\nimport { Application } from 'express';\nimport { validateHttpEnvironment } from './createHttpServer.validate';\nimport { getSecretOrFile } from 'utils';\n\n/**\n * Create and configure an HTTP/HTTPS server.\n * Supports local files in dev and GCP secrets in prod.\n */\nexport const createHttpServer = (\n  handler?: Application | RequestListener\n): Server | SecureServer => {\n  validateHttpEnvironment();\n\n  if (process.env.TLS_SERVER_KEY && process.env.TLS_SERVER_CERT) {\n    const key = getSecretOrFile('TLS_SERVER_KEY');\n    const cert = getSecretOrFile('TLS_SERVER_CERT');\n    const ca = process.env.TLS_CA ? getSecretOrFile('TLS_CA') : undefined;\n    const passphrase = process.env.TLS_SERVER_KEY_PASSPHRASE;\n\n    return createSecureServer(\n      {\n        key,\n        cert,\n        ca,\n        passphrase,\n        requestCert: true,\n        rejectUnauthorized: false\n      },\n      handler\n    );\n  } else {\n    return createServer(handler);\n  }\n};\n"],"mappings":";;;;;;AAAA,IAAAA,KAAA,GAAAC,OAAA;AACA,IAAAC,MAAA,GAAAD,OAAA;AAKA,IAAAE,iBAAA,GAAAF,OAAA;AACA,IAAAG,CAAA,GAAAH,OAAA;AAEA;AACA;AACA;AACA;AACO,MAAMI,gBAAgB,GAC3BC,OAAuC,IACb;EAC1B,IAAAC,yCAAuB,EAAC,CAAC;EAEzB,IAAIC,OAAO,CAACC,GAAG,CAACC,cAAc,IAAIF,OAAO,CAACC,GAAG,CAACE,eAAe,EAAE;IAC7D,MAAMC,GAAG,GAAG,IAAAC,iBAAe,EAAC,gBAAgB,CAAC;IAC7C,MAAMC,IAAI,GAAG,IAAAD,iBAAe,EAAC,iBAAiB,CAAC;IAC/C,MAAME,EAAE,GAAGP,OAAO,CAACC,GAAG,CAACO,MAAM,GAAG,IAAAH,iBAAe,EAAC,QAAQ,CAAC,GAAGI,SAAS;IACrE,MAAMC,UAAU,GAAGV,OAAO,CAACC,GAAG,CAACU,yBAAyB;IAExD,OAAO,IAAAC,mBAAkB,EACvB;MACER,GAAG;MACHE,IAAI;MACJC,EAAE;MACFG,UAAU;MACVG,WAAW,EAAE,IAAI;MACjBC,kBAAkB,EAAE;IACtB,CAAC,EACDhB,OACF,CAAC;EACH,CAAC,MAAM;IACL,OAAO,IAAAiB,kBAAY,EAACjB,OAAO,CAAC;EAC9B;AACF,CAAC;AAACkB,OAAA,CAAAnB,gBAAA,GAAAA,gBAAA","ignoreList":[]}

package/dist/utils/index.d.ts

@@ -13,4 +13,5 @@ export * from './tlsConfig';
 export * from './sendPush';
 export * from './sendEmail';
 export * from './trimPathSlash';
+export * from './secretManager';
 export * from './geminiFileUpload';

package/dist/utils/index.js

@@ -168,6 +168,17 @@ Object.keys(_trimPathSlash).forEach(function (key) {
     }
   });
 });
+var _secretManager = require("./secretManager");
+Object.keys(_secretManager).forEach(function (key) {
+  if (key === "default" || key === "__esModule") return;
+  if (key in exports && exports[key] === _secretManager[key]) return;
+  Object.defineProperty(exports, key, {
+    enumerable: true,
+    get: function () {
+      return _secretManager[key];
+    }
+  });
+});
 var _geminiFileUpload = require("./geminiFileUpload");
 Object.keys(_geminiFileUpload).forEach(function (key) {
   if (key === "default" || key === "__esModule") return;

package/dist/utils/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","names":["_report","require","Object","keys","forEach","key","exports","defineProperty","enumerable","get","_filter","_semverCompare","_dbMigration","_checkEnvironment","_envAssert","_createSortedObject","_jwt","_hmac","_createHttpServer","_request","_tlsConfig","_sendPush","_sendEmail","_trimPathSlash","_geminiFileUpload"],"sources":["../../src/utils/index.ts"],"sourcesContent":["// general\nexport * from './report';\nexport * from './filter';\nexport * from './semverCompare';\nexport * from './dbMigration';\n\n// env\nexport * from './checkEnvironment';\nexport * from './envAssert';\n\n// auth\nexport * from './createSortedObject';\nexport * from './jwt';\nexport * from './hmac';\n\n// Networking\nexport * from './createHttpServer';\nexport * from './request';\nexport * from './tlsConfig';\nexport * from './sendPush';\nexport * from './sendEmail';\n\n// String manipulation\nexport * from './trimPathSlash';\n\n// File Upload\nexport * from './geminiFileUpload';\n"],"mappings":";;;;;AACA,IAAAA,OAAA,GAAAC,OAAA;AAAAC,MAAA,CAAAC,IAAA,CAAAH,OAAA,EAAAI,OAAA,WAAAC,GAAA;EAAA,IAAAA,GAAA,kBAAAA,GAAA;EAAA,IAAAA,GAAA,IAAAC,OAAA,IAAAA,OAAA,CAAAD,GAAA,MAAAL,OAAA,CAAAK,GAAA;EAAAH,MAAA,CAAAK,cAAA,CAAAD,OAAA,EAAAD,GAAA;IAAAG,UAAA;IAAAC,GAAA,WAAAA,CAAA;MAAA,OAAAT,OAAA,CAAAK,GAAA;IAAA;EAAA;AAAA;AACA,IAAAK,OAAA,GAAAT,OAAA;AAAAC,MAAA,CAAAC,IAAA,CAAAO,OAAA,EAAAN,OAAA,WAAAC,GAAA;EAAA,IAAAA,GAAA,kBAAAA,GAAA;EAAA,IAAAA,GAAA,IAAAC,OAAA,IAAAA,OAAA,CAAAD,GAAA,MAAAK,OAAA,CAAAL,GAAA;EAAAH,MAAA,CAAAK,cAAA,CAAAD,OAAA,EAAAD,GAAA;IAAAG,UAAA;IAAAC,GAAA,WAAAA,CAAA;MAAA,OAAAC,OAAA,CAAAL,GAAA;IAAA;EAAA;AAAA;AACA,IAAAM,cAAA,GAAAV,OAAA;AAAAC,MAAA,CAAAC,IAAA,CAAAQ,cAAA,EAAAP,OAAA,WAAAC,GAAA;EAAA,IAAAA,GAAA,kBAAAA,GAAA;EAAA,IAAAA,GAAA,IAAAC,OAAA,IAAAA,OAAA,CAAAD,GAAA,MAAAM,cAAA,CAAAN,GAAA;EAAAH,MAAA,CAAAK,cAAA,CAAAD,OAAA,EAAAD,GAAA;IAAAG,UAAA;IAAAC,GAAA,WAAAA,CAAA;MAAA,OAAAE,cAAA,CAAAN,GAAA;IAAA;EAAA;AAAA;AACA,IAAAO,YAAA,GAAAX,OAAA;AAAAC,MAAA,CAAAC,IAAA,CAAAS,YAAA,EAAAR,OAAA,WAAAC,GAAA;EAAA,IAAAA,GAAA,kBAAAA,GAAA;EAAA,IAAAA,GAAA,IAAAC,OAAA,IAAAA,OAAA,CAAAD,GAAA,MAAAO,YAAA,CAAAP,GAAA;EAAAH,MAAA,CAAAK,cAAA,CAAAD,OAAA,EAAAD,GAAA;IAAAG,UAAA;IAAAC,GAAA,WAAAA,CAAA;MAAA,OAAAG,YAAA,CAAAP,GAAA;IAAA;EAAA;AAAA;AAGA,IAAAQ,iBAAA,GAAAZ,OAAA;AAAAC,MAAA,CAAAC,IAAA,CAAAU,iBAAA,EAAAT,OAAA,WAAAC,GAAA;EAAA,IAAAA,GAAA,kBAAAA,GAAA;EAAA,IAAAA,GAAA,IAAAC,OAAA,IAAAA,OAAA,CAAAD,GAAA,MAAAQ,iBAAA,CAAAR,GAAA;EAAAH,MAAA,CAAAK,cAAA,CAAAD,OAAA,EAAAD,GAAA;IAAAG,UAAA;IAAAC,GAAA,WAAAA,CAAA;MAAA,OAAAI,iBAAA,CAAAR,GAAA;IAAA;EAAA;AAAA;AACA,IAAAS,UAAA,GAAAb,OAAA;AAAAC,MAAA,CAAAC,IAAA,CAAAW,UAAA,EAAAV,OAAA,WAAAC,GAAA;EAAA,IAAAA,GAAA,kBAAAA,GAAA;EAAA,IAAAA,GAAA,IAAAC,OAAA,IAAAA,OAAA,CAAAD,GAAA,MAAAS,UAAA,CAAAT,GAAA;EAAAH,MAAA,CAAAK,cAAA,CAAAD,OAAA,EAAAD,GAAA;IAAAG,UAAA;IAAAC,GAAA,WAAAA,CAAA;MAAA,OAAAK,UAAA,CAAAT,GAAA;IAAA;EAAA;AAAA;AAGA,IAAAU,mBAAA,GAAAd,OAAA;AAAAC,MAAA,CAAAC,IAAA,CAAAY,mBAAA,EAAAX,OAAA,WAAAC,GAAA;EAAA,IAAAA,GAAA,kBAAAA,GAAA;EAAA,IAAAA,GAAA,IAAAC,OAAA,IAAAA,OAAA,CAAAD,GAAA,MAAAU,mBAAA,CAAAV,GAAA;EAAAH,MAAA,CAAAK,cAAA,CAAAD,OAAA,EAAAD,GAAA;IAAAG,UAAA;IAAAC,GAAA,WAAAA,CAAA;MAAA,OAAAM,mBAAA,CAAAV,GAAA;IAAA;EAAA;AAAA;AACA,IAAAW,IAAA,GAAAf,OAAA;AAAAC,MAAA,CAAAC,IAAA,CAAAa,IAAA,EAAAZ,OAAA,WAAAC,GAAA;EAAA,IAAAA,GAAA,kBAAAA,GAAA;EAAA,IAAAA,GAAA,IAAAC,OAAA,IAAAA,OAAA,CAAAD,GAAA,MAAAW,IAAA,CAAAX,GAAA;EAAAH,MAAA,CAAAK,cAAA,CAAAD,OAAA,EAAAD,GAAA;IAAAG,UAAA;IAAAC,GAAA,WAAAA,CAAA;MAAA,OAAAO,IAAA,CAAAX,GAAA;IAAA;EAAA;AAAA;AACA,IAAAY,KAAA,GAAAhB,OAAA;AAAAC,MAAA,CAAAC,IAAA,CAAAc,KAAA,EAAAb,OAAA,WAAAC,GAAA;EAAA,IAAAA,GAAA,kBAAAA,GAAA;EAAA,IAAAA,GAAA,IAAAC,OAAA,IAAAA,OAAA,CAAAD,GAAA,MAAAY,KAAA,CAAAZ,GAAA;EAAAH,MAAA,CAAAK,cAAA,CAAAD,OAAA,EAAAD,GAAA;IAAAG,UAAA;IAAAC,GAAA,WAAAA,CAAA;MAAA,OAAAQ,KAAA,CAAAZ,GAAA;IAAA;EAAA;AAAA;AAGA,IAAAa,iBAAA,GAAAjB,OAAA;AAAAC,MAAA,CAAAC,IAAA,CAAAe,iBAAA,EAAAd,OAAA,WAAAC,GAAA;EAAA,IAAAA,GAAA,kBAAAA,GAAA;EAAA,IAAAA,GAAA,IAAAC,OAAA,IAAAA,OAAA,CAAAD,GAAA,MAAAa,iBAAA,CAAAb,GAAA;EAAAH,MAAA,CAAAK,cAAA,CAAAD,OAAA,EAAAD,GAAA;IAAAG,UAAA;IAAAC,GAAA,WAAAA,CAAA;MAAA,OAAAS,iBAAA,CAAAb,GAAA;IAAA;EAAA;AAAA;AACA,IAAAc,QAAA,GAAAlB,OAAA;AAAAC,MAAA,CAAAC,IAAA,CAAAgB,QAAA,EAAAf,OAAA,WAAAC,GAAA;EAAA,IAAAA,GAAA,kBAAAA,GAAA;EAAA,IAAAA,GAAA,IAAAC,OAAA,IAAAA,OAAA,CAAAD,GAAA,MAAAc,QAAA,CAAAd,GAAA;EAAAH,MAAA,CAAAK,cAAA,CAAAD,OAAA,EAAAD,GAAA;IAAAG,UAAA;IAAAC,GAAA,WAAAA,CAAA;MAAA,OAAAU,QAAA,CAAAd,GAAA;IAAA;EAAA;AAAA;AACA,IAAAe,UAAA,GAAAnB,OAAA;AAAAC,MAAA,CAAAC,IAAA,CAAAiB,UAAA,EAAAhB,OAAA,WAAAC,GAAA;EAAA,IAAAA,GAAA,kBAAAA,GAAA;EAAA,IAAAA,GAAA,IAAAC,OAAA,IAAAA,OAAA,CAAAD,GAAA,MAAAe,UAAA,CAAAf,GAAA;EAAAH,MAAA,CAAAK,cAAA,CAAAD,OAAA,EAAAD,GAAA;IAAAG,UAAA;IAAAC,GAAA,WAAAA,CAAA;MAAA,OAAAW,UAAA,CAAAf,GAAA;IAAA;EAAA;AAAA;AACA,IAAAgB,SAAA,GAAApB,OAAA;AAAAC,MAAA,CAAAC,IAAA,CAAAkB,SAAA,EAAAjB,OAAA,WAAAC,GAAA;EAAA,IAAAA,GAAA,kBAAAA,GAAA;EAAA,IAAAA,GAAA,IAAAC,OAAA,IAAAA,OAAA,CAAAD,GAAA,MAAAgB,SAAA,CAAAhB,GAAA;EAAAH,MAAA,CAAAK,cAAA,CAAAD,OAAA,EAAAD,GAAA;IAAAG,UAAA;IAAAC,GAAA,WAAAA,CAAA;MAAA,OAAAY,SAAA,CAAAhB,GAAA;IAAA;EAAA;AAAA;AACA,IAAAiB,UAAA,GAAArB,OAAA;AAAAC,MAAA,CAAAC,IAAA,CAAAmB,UAAA,EAAAlB,OAAA,WAAAC,GAAA;EAAA,IAAAA,GAAA,kBAAAA,GAAA;EAAA,IAAAA,GAAA,IAAAC,OAAA,IAAAA,OAAA,CAAAD,GAAA,MAAAiB,UAAA,CAAAjB,GAAA;EAAAH,MAAA,CAAAK,cAAA,CAAAD,OAAA,EAAAD,GAAA;IAAAG,UAAA;IAAAC,GAAA,WAAAA,CAAA;MAAA,OAAAa,UAAA,CAAAjB,GAAA;IAAA;EAAA;AAAA;AAGA,IAAAkB,cAAA,GAAAtB,OAAA;AAAAC,MAAA,CAAAC,IAAA,CAAAoB,cAAA,EAAAnB,OAAA,WAAAC,GAAA;EAAA,IAAAA,GAAA,kBAAAA,GAAA;EAAA,IAAAA,GAAA,IAAAC,OAAA,IAAAA,OAAA,CAAAD,GAAA,MAAAkB,cAAA,CAAAlB,GAAA;EAAAH,MAAA,CAAAK,cAAA,CAAAD,OAAA,EAAAD,GAAA;IAAAG,UAAA;IAAAC,GAAA,WAAAA,CAAA;MAAA,OAAAc,cAAA,CAAAlB,GAAA;IAAA;EAAA;AAAA;AAGA,IAAAmB,iBAAA,GAAAvB,OAAA;AAAAC,MAAA,CAAAC,IAAA,CAAAqB,iBAAA,EAAApB,OAAA,WAAAC,GAAA;EAAA,IAAAA,GAAA,kBAAAA,GAAA;EAAA,IAAAA,GAAA,IAAAC,OAAA,IAAAA,OAAA,CAAAD,GAAA,MAAAmB,iBAAA,CAAAnB,GAAA;EAAAH,MAAA,CAAAK,cAAA,CAAAD,OAAA,EAAAD,GAAA;IAAAG,UAAA;IAAAC,GAAA,WAAAA,CAAA;MAAA,OAAAe,iBAAA,CAAAnB,GAAA;IAAA;EAAA;AAAA","ignoreList":[]}
+{"version":3,"file":"index.js","names":["_report","require","Object","keys","forEach","key","exports","defineProperty","enumerable","get","_filter","_semverCompare","_dbMigration","_checkEnvironment","_envAssert","_createSortedObject","_jwt","_hmac","_createHttpServer","_request","_tlsConfig","_sendPush","_sendEmail","_trimPathSlash","_secretManager","_geminiFileUpload"],"sources":["../../src/utils/index.ts"],"sourcesContent":["// general\nexport * from './report';\nexport * from './filter';\nexport * from './semverCompare';\nexport * from './dbMigration';\n\n// env\nexport * from './checkEnvironment';\nexport * from './envAssert';\n\n// auth\nexport * from './createSortedObject';\nexport * from './jwt';\nexport * from './hmac';\n\n// Networking\nexport * from './createHttpServer';\nexport * from './request';\nexport * from './tlsConfig';\nexport * from './sendPush';\nexport * from './sendEmail';\n\n// String manipulation\nexport * from './trimPathSlash';\n\nexport * from './secretManager';\n\n// File Upload\nexport * from './geminiFileUpload';\n"],"mappings":";;;;;AACA,IAAAA,OAAA,GAAAC,OAAA;AAAAC,MAAA,CAAAC,IAAA,CAAAH,OAAA,EAAAI,OAAA,WAAAC,GAAA;EAAA,IAAAA,GAAA,kBAAAA,GAAA;EAAA,IAAAA,GAAA,IAAAC,OAAA,IAAAA,OAAA,CAAAD,GAAA,MAAAL,OAAA,CAAAK,GAAA;EAAAH,MAAA,CAAAK,cAAA,CAAAD,OAAA,EAAAD,GAAA;IAAAG,UAAA;IAAAC,GAAA,WAAAA,CAAA;MAAA,OAAAT,OAAA,CAAAK,GAAA;IAAA;EAAA;AAAA;AACA,IAAAK,OAAA,GAAAT,OAAA;AAAAC,MAAA,CAAAC,IAAA,CAAAO,OAAA,EAAAN,OAAA,WAAAC,GAAA;EAAA,IAAAA,GAAA,kBAAAA,GAAA;EAAA,IAAAA,GAAA,IAAAC,OAAA,IAAAA,OAAA,CAAAD,GAAA,MAAAK,OAAA,CAAAL,GAAA;EAAAH,MAAA,CAAAK,cAAA,CAAAD,OAAA,EAAAD,GAAA;IAAAG,UAAA;IAAAC,GAAA,WAAAA,CAAA;MAAA,OAAAC,OAAA,CAAAL,GAAA;IAAA;EAAA;AAAA;AACA,IAAAM,cAAA,GAAAV,OAAA;AAAAC,MAAA,CAAAC,IAAA,CAAAQ,cAAA,EAAAP,OAAA,WAAAC,GAAA;EAAA,IAAAA,GAAA,kBAAAA,GAAA;EAAA,IAAAA,GAAA,IAAAC,OAAA,IAAAA,OAAA,CAAAD,GAAA,MAAAM,cAAA,CAAAN,GAAA;EAAAH,MAAA,CAAAK,cAAA,CAAAD,OAAA,EAAAD,GAAA;IAAAG,UAAA;IAAAC,GAAA,WAAAA,CAAA;MAAA,OAAAE,cAAA,CAAAN,GAAA;IAAA;EAAA;AAAA;AACA,IAAAO,YAAA,GAAAX,OAAA;AAAAC,MAAA,CAAAC,IAAA,CAAAS,YAAA,EAAAR,OAAA,WAAAC,GAAA;EAAA,IAAAA,GAAA,kBAAAA,GAAA;EAAA,IAAAA,GAAA,IAAAC,OAAA,IAAAA,OAAA,CAAAD,GAAA,MAAAO,YAAA,CAAAP,GAAA;EAAAH,MAAA,CAAAK,cAAA,CAAAD,OAAA,EAAAD,GAAA;IAAAG,UAAA;IAAAC,GAAA,WAAAA,CAAA;MAAA,OAAAG,YAAA,CAAAP,GAAA;IAAA;EAAA;AAAA;AAGA,IAAAQ,iBAAA,GAAAZ,OAAA;AAAAC,MAAA,CAAAC,IAAA,CAAAU,iBAAA,EAAAT,OAAA,WAAAC,GAAA;EAAA,IAAAA,GAAA,kBAAAA,GAAA;EAAA,IAAAA,GAAA,IAAAC,OAAA,IAAAA,OAAA,CAAAD,GAAA,MAAAQ,iBAAA,CAAAR,GAAA;EAAAH,MAAA,CAAAK,cAAA,CAAAD,OAAA,EAAAD,GAAA;IAAAG,UAAA;IAAAC,GAAA,WAAAA,CAAA;MAAA,OAAAI,iBAAA,CAAAR,GAAA;IAAA;EAAA;AAAA;AACA,IAAAS,UAAA,GAAAb,OAAA;AAAAC,MAAA,CAAAC,IAAA,CAAAW,UAAA,EAAAV,OAAA,WAAAC,GAAA;EAAA,IAAAA,GAAA,kBAAAA,GAAA;EAAA,IAAAA,GAAA,IAAAC,OAAA,IAAAA,OAAA,CAAAD,GAAA,MAAAS,UAAA,CAAAT,GAAA;EAAAH,MAAA,CAAAK,cAAA,CAAAD,OAAA,EAAAD,GAAA;IAAAG,UAAA;IAAAC,GAAA,WAAAA,CAAA;MAAA,OAAAK,UAAA,CAAAT,GAAA;IAAA;EAAA;AAAA;AAGA,IAAAU,mBAAA,GAAAd,OAAA;AAAAC,MAAA,CAAAC,IAAA,CAAAY,mBAAA,EAAAX,OAAA,WAAAC,GAAA;EAAA,IAAAA,GAAA,kBAAAA,GAAA;EAAA,IAAAA,GAAA,IAAAC,OAAA,IAAAA,OAAA,CAAAD,GAAA,MAAAU,mBAAA,CAAAV,GAAA;EAAAH,MAAA,CAAAK,cAAA,CAAAD,OAAA,EAAAD,GAAA;IAAAG,UAAA;IAAAC,GAAA,WAAAA,CAAA;MAAA,OAAAM,mBAAA,CAAAV,GAAA;IAAA;EAAA;AAAA;AACA,IAAAW,IAAA,GAAAf,OAAA;AAAAC,MAAA,CAAAC,IAAA,CAAAa,IAAA,EAAAZ,OAAA,WAAAC,GAAA;EAAA,IAAAA,GAAA,kBAAAA,GAAA;EAAA,IAAAA,GAAA,IAAAC,OAAA,IAAAA,OAAA,CAAAD,GAAA,MAAAW,IAAA,CAAAX,GAAA;EAAAH,MAAA,CAAAK,cAAA,CAAAD,OAAA,EAAAD,GAAA;IAAAG,UAAA;IAAAC,GAAA,WAAAA,CAAA;MAAA,OAAAO,IAAA,CAAAX,GAAA;IAAA;EAAA;AAAA;AACA,IAAAY,KAAA,GAAAhB,OAAA;AAAAC,MAAA,CAAAC,IAAA,CAAAc,KAAA,EAAAb,OAAA,WAAAC,GAAA;EAAA,IAAAA,GAAA,kBAAAA,GAAA;EAAA,IAAAA,GAAA,IAAAC,OAAA,IAAAA,OAAA,CAAAD,GAAA,MAAAY,KAAA,CAAAZ,GAAA;EAAAH,MAAA,CAAAK,cAAA,CAAAD,OAAA,EAAAD,GAAA;IAAAG,UAAA;IAAAC,GAAA,WAAAA,CAAA;MAAA,OAAAQ,KAAA,CAAAZ,GAAA;IAAA;EAAA;AAAA;AAGA,IAAAa,iBAAA,GAAAjB,OAAA;AAAAC,MAAA,CAAAC,IAAA,CAAAe,iBAAA,EAAAd,OAAA,WAAAC,GAAA;EAAA,IAAAA,GAAA,kBAAAA,GAAA;EAAA,IAAAA,GAAA,IAAAC,OAAA,IAAAA,OAAA,CAAAD,GAAA,MAAAa,iBAAA,CAAAb,GAAA;EAAAH,MAAA,CAAAK,cAAA,CAAAD,OAAA,EAAAD,GAAA;IAAAG,UAAA;IAAAC,GAAA,WAAAA,CAAA;MAAA,OAAAS,iBAAA,CAAAb,GAAA;IAAA;EAAA;AAAA;AACA,IAAAc,QAAA,GAAAlB,OAAA;AAAAC,MAAA,CAAAC,IAAA,CAAAgB,QAAA,EAAAf,OAAA,WAAAC,GAAA;EAAA,IAAAA,GAAA,kBAAAA,GAAA;EAAA,IAAAA,GAAA,IAAAC,OAAA,IAAAA,OAAA,CAAAD,GAAA,MAAAc,QAAA,CAAAd,GAAA;EAAAH,MAAA,CAAAK,cAAA,CAAAD,OAAA,EAAAD,GAAA;IAAAG,UAAA;IAAAC,GAAA,WAAAA,CAAA;MAAA,OAAAU,QAAA,CAAAd,GAAA;IAAA;EAAA;AAAA;AACA,IAAAe,UAAA,GAAAnB,OAAA;AAAAC,MAAA,CAAAC,IAAA,CAAAiB,UAAA,EAAAhB,OAAA,WAAAC,GAAA;EAAA,IAAAA,GAAA,kBAAAA,GAAA;EAAA,IAAAA,GAAA,IAAAC,OAAA,IAAAA,OAAA,CAAAD,GAAA,MAAAe,UAAA,CAAAf,GAAA;EAAAH,MAAA,CAAAK,cAAA,CAAAD,OAAA,EAAAD,GAAA;IAAAG,UAAA;IAAAC,GAAA,WAAAA,CAAA;MAAA,OAAAW,UAAA,CAAAf,GAAA;IAAA;EAAA;AAAA;AACA,IAAAgB,SAAA,GAAApB,OAAA;AAAAC,MAAA,CAAAC,IAAA,CAAAkB,SAAA,EAAAjB,OAAA,WAAAC,GAAA;EAAA,IAAAA,GAAA,kBAAAA,GAAA;EAAA,IAAAA,GAAA,IAAAC,OAAA,IAAAA,OAAA,CAAAD,GAAA,MAAAgB,SAAA,CAAAhB,GAAA;EAAAH,MAAA,CAAAK,cAAA,CAAAD,OAAA,EAAAD,GAAA;IAAAG,UAAA;IAAAC,GAAA,WAAAA,CAAA;MAAA,OAAAY,SAAA,CAAAhB,GAAA;IAAA;EAAA;AAAA;AACA,IAAAiB,UAAA,GAAArB,OAAA;AAAAC,MAAA,CAAAC,IAAA,CAAAmB,UAAA,EAAAlB,OAAA,WAAAC,GAAA;EAAA,IAAAA,GAAA,kBAAAA,GAAA;EAAA,IAAAA,GAAA,IAAAC,OAAA,IAAAA,OAAA,CAAAD,GAAA,MAAAiB,UAAA,CAAAjB,GAAA;EAAAH,MAAA,CAAAK,cAAA,CAAAD,OAAA,EAAAD,GAAA;IAAAG,UAAA;IAAAC,GAAA,WAAAA,CAAA;MAAA,OAAAa,UAAA,CAAAjB,GAAA;IAAA;EAAA;AAAA;AAGA,IAAAkB,cAAA,GAAAtB,OAAA;AAAAC,MAAA,CAAAC,IAAA,CAAAoB,cAAA,EAAAnB,OAAA,WAAAC,GAAA;EAAA,IAAAA,GAAA,kBAAAA,GAAA;EAAA,IAAAA,GAAA,IAAAC,OAAA,IAAAA,OAAA,CAAAD,GAAA,MAAAkB,cAAA,CAAAlB,GAAA;EAAAH,MAAA,CAAAK,cAAA,CAAAD,OAAA,EAAAD,GAAA;IAAAG,UAAA;IAAAC,GAAA,WAAAA,CAAA;MAAA,OAAAc,cAAA,CAAAlB,GAAA;IAAA;EAAA;AAAA;AAEA,IAAAmB,cAAA,GAAAvB,OAAA;AAAAC,MAAA,CAAAC,IAAA,CAAAqB,cAAA,EAAApB,OAAA,WAAAC,GAAA;EAAA,IAAAA,GAAA,kBAAAA,GAAA;EAAA,IAAAA,GAAA,IAAAC,OAAA,IAAAA,OAAA,CAAAD,GAAA,MAAAmB,cAAA,CAAAnB,GAAA;EAAAH,MAAA,CAAAK,cAAA,CAAAD,OAAA,EAAAD,GAAA;IAAAG,UAAA;IAAAC,GAAA,WAAAA,CAAA;MAAA,OAAAe,cAAA,CAAAnB,GAAA;IAAA;EAAA;AAAA;AAGA,IAAAoB,iBAAA,GAAAxB,OAAA;AAAAC,MAAA,CAAAC,IAAA,CAAAsB,iBAAA,EAAArB,OAAA,WAAAC,GAAA;EAAA,IAAAA,GAAA,kBAAAA,GAAA;EAAA,IAAAA,GAAA,IAAAC,OAAA,IAAAA,OAAA,CAAAD,GAAA,MAAAoB,iBAAA,CAAApB,GAAA;EAAAH,MAAA,CAAAK,cAAA,CAAAD,OAAA,EAAAD,GAAA;IAAAG,UAAA;IAAAC,GAAA,WAAAA,CAAA;MAAA,OAAAgB,iBAAA,CAAApB,GAAA;IAAA;EAAA;AAAA","ignoreList":[]}

package/dist/utils/jwt/jwt.js

@@ -1,6 +1,5 @@
 "use strict";
 
-var _interopRequireDefault = require("@babel/runtime/helpers/interopRequireDefault");
 Object.defineProperty(exports, "__esModule", {
   value: true
 });
@@ -10,7 +9,6 @@ exports.jwtVerify = jwtVerify;
 exports.keySet = void 0;
 exports.shutdownKeySets = shutdownKeySets;
 var _jsonwebtoken = require("jsonwebtoken");
-var _fs = _interopRequireDefault(require("fs"));
 var _const = require("../../const");
 var _EngineError = require("../../entities/EngineError");
 var _KeySet = require("../../entities/KeySet");
@@ -18,6 +16,7 @@ var _WebError = require("../../entities/WebError");
 var _checkEnvironment = require("../checkEnvironment");
 var _envAssert = require("../envAssert");
 var _report = require("../report");
+var _ = require("./..");
 let keySet = exports.keySet = void 0;
 const namespace = 'engine:utils:jwt';
 
@@ -122,7 +121,8 @@ async function jwtVerify(token, issuer = _const.TokenIssuer.AUTH_SERVICE) {
   }
   (0, _checkEnvironment.assertEnvironment)({
     ACCESS_TOKEN_AUDIENCE: _envAssert.envAssert.isString(),
-    ACCESS_TOKEN_ISSUER: _envAssert.envAssert.isString()
+    ACCESS_TOKEN_ISSUER: _envAssert.envAssert.isString(),
+    ACCESS_TOKEN_EXPIRATION_TIME: _envAssert.envAssert.isString()
   });
   let options;
   switch (issuer) {
@@ -160,12 +160,12 @@ function generateJwtToken(user) {
   const signOptions = {
     algorithm: 'ES256',
     // or 'ES256' as Algorithm
-    expiresIn: '1h',
+    expiresIn: process.env.ACCESS_TOKEN_EXPIRATION_TIME ? parseInt(process.env.ACCESS_TOKEN_EXPIRATION_TIME, 10) : undefined,
     issuer: process.env.ACCESS_TOKEN_ISSUER,
     audience: process.env.ACCESS_TOKEN_AUDIENCE,
     keyid: Object.keys(keySet?.getKeys() ?? {})[0]
   };
-  const privateKey = _fs.default.readFileSync(process.env.PRIVATE_KEY_PATH ?? 'keys/private-key.pem', 'utf8');
+  const privateKey = (0, _.getSecretOrFile)('PRIVATE_KEY_PATH');
   const token = (0, _jsonwebtoken.sign)({
     user
   }, privateKey, signOptions);

package/dist/utils/jwt/jwt.js.map

@@ -1 +1 @@
-{"version":3,"file":"jwt.js","names":["_jsonwebtoken","require","_fs","_interopRequireDefault","_const","_EngineError","_KeySet","_WebError","_checkEnvironment","_envAssert","_report","keySet","exports","namespace","initKeySets","process","env","CHART","ECDSA_PUBLIC_KEY","EngineError","message","KeySet","file","AUTH_SERVICE_URL","internal","promise","init","bind","Promise","all","shutdownKeySets","shutdown","jwtGetKey","header","callback","NODE_ENV","JWT_SECRET","kid","data","reportDebug","key","getKey","error","Error","WebError","statusCode","errorCode","jwtVerify","token","issuer","TokenIssuer","AUTH_SERVICE","algorithms","assertEnvironment","envAssert","isString","ACCESS_TOKEN_AUDIENCE","ACCESS_TOKEN_ISSUER","options","audience","resolve","reject","verify","result","undefined","generateJwtToken","user","signOptions","algorithm","expiresIn","keyid","Object","keys","getKeys","privateKey","fs","readFileSync","PRIVATE_KEY_PATH","sign"],"sources":["../../../src/utils/jwt/jwt.ts"],"sourcesContent":["import {\n  verify,\n  JwtHeader,\n  SigningKeyCallback,\n  Algorithm,\n  VerifyOptions,\n  sign\n} from 'jsonwebtoken';\nimport fs from 'fs';\nimport { UserTokenPayload } from './jwt.types';\nimport { TokenIssuer } from 'const';\nimport { EngineError } from 'entities/EngineError';\nimport { KeySet } from 'entities/KeySet';\nimport { WebError } from 'entities/WebError';\nimport { assertEnvironment } from 'utils/checkEnvironment';\nimport { envAssert } from 'utils/envAssert';\nimport { reportDebug } from 'utils/report';\n\nexport let keySet: KeySet | undefined;\n\nconst namespace = 'engine:utils:jwt';\n\n/** Initiate key fetching mechanism */\nexport async function initKeySets(): Promise<void> {\n  // Create the KeySet instance\n  // The auth-service fetches its key from its disk and not from a network request\n  // This prevents fetch failures the first time the auth-service is started\n  if (process.env.CHART === 'auth-service') {\n    if (!process.env.ECDSA_PUBLIC_KEY)\n      throw new EngineError({\n        message: 'Environment variable \"ECDSA_PUBLIC_KEY\" is not defined'\n      });\n    keySet = new KeySet(process.env.ECDSA_PUBLIC_KEY, { file: true });\n  } else {\n    if (process.env.AUTH_SERVICE_URL)\n      keySet = new KeySet(\n        `${process.env.AUTH_SERVICE_URL}/.well-known/jwks.json`,\n        { internal: true }\n      );\n    else\n      keySet = new KeySet(`./keys/jwks.json`, { internal: true, file: true });\n\n    if (!keySet)\n      throw new EngineError({\n        message:\n          'Environment variable \"AUTH_SERVICE_URL\" is not defined or JWKS not found'\n      });\n  }\n  const promise = [keySet.init.bind(keySet)()];\n\n  await Promise.all(promise);\n}\n\n/** Stop fetching keys regularly */\nexport function shutdownKeySets(): void {\n  if (keySet) keySet.shutdown.bind(keySet)();\n}\n\n/** Get the JWT public key */\nfunction jwtGetKey(header: JwtHeader, callback: SigningKeyCallback): void {\n  // In test environment we return the symmetric signature secret\n  if (process.env.NODE_ENV === 'test') {\n    callback(null, process.env.JWT_SECRET);\n    return;\n  }\n  // Check that KeySet has been initialized\n  if (!keySet) {\n    callback(new EngineError({ message: 'KeySet has not been initialized' }));\n    return;\n  }\n  // Check that the token has a key ID\n  if (!header.kid) {\n    callback(\n      new EngineError({\n        message:\n          'Token has not key ID in header, impossible to match with known key',\n        data: header\n      })\n    );\n    return;\n  }\n\n  // In test environment we use a symmetrical secret bases signature\n  if (process.env.NODE_ENV === 'test') {\n    callback(null, process.env.JWT_SECRET);\n    return;\n  }\n  reportDebug({\n    namespace,\n    message: `Looking for key with ID \"${header.kid}\"`\n  });\n  // Go through each key set to check if the token's key is in one of them\n  let key;\n  try {\n    key = keySet.getKey(header.kid);\n  } catch (error: Error | null | unknown) {\n    callback(error instanceof Error ? error : null);\n    return;\n  }\n\n  if (key) {\n    reportDebug({ namespace, message: `Found key with ID \"${header.kid}\"` });\n    callback(null, key);\n    return;\n  }\n  callback(\n    new WebError({\n      statusCode: 401,\n      errorCode: 'unauthorized',\n      message: 'Could not find the tokens key in any key set',\n      data: { kid: header.kid }\n    })\n  );\n}\n\n/** Verify an user Json Web Token */\nexport async function jwtVerify(\n  token: string,\n  issuer: TokenIssuer = TokenIssuer.AUTH_SERVICE\n): Promise<UserTokenPayload> {\n  let algorithms = ['ES256' as Algorithm];\n  if (process.env.NODE_ENV === 'test') {\n    assertEnvironment({ JWT_SECRET: envAssert.isString() });\n    algorithms = ['HS256' as Algorithm];\n  }\n  assertEnvironment({\n    ACCESS_TOKEN_AUDIENCE: envAssert.isString(),\n    ACCESS_TOKEN_ISSUER: envAssert.isString()\n  });\n  let options: VerifyOptions | undefined;\n\n  switch (issuer) {\n    case TokenIssuer.AUTH_SERVICE:\n      options = {\n        audience: [process.env.ACCESS_TOKEN_AUDIENCE as string],\n        issuer: [process.env.ACCESS_TOKEN_ISSUER as string],\n        algorithms\n      };\n      break;\n    default:\n      throw new EngineError({\n        message: `Invalid token issuer specified \"${issuer as string}\"`\n      });\n  }\n\n  return new Promise<UserTokenPayload>((resolve, reject) => {\n    verify(token, jwtGetKey, options, (error, result) => {\n      if (error) {\n        reject(\n          new WebError({\n            errorCode: 'unauthorized',\n            statusCode: 401,\n            message: 'Invalid token supplied',\n            data: { token },\n            error: error instanceof Error ? error : undefined\n          })\n        );\n        return;\n      }\n      resolve(result as UserTokenPayload);\n    });\n  });\n}\n\nexport function generateJwtToken(user: unknown) {\n  const signOptions = {\n    algorithm: 'ES256' as const, // or 'ES256' as Algorithm\n    expiresIn: '1h',\n    issuer: process.env.ACCESS_TOKEN_ISSUER,\n    audience: process.env.ACCESS_TOKEN_AUDIENCE,\n    keyid: Object.keys(keySet?.getKeys() ?? {})[0]\n  };\n\n  const privateKey = fs.readFileSync(\n    process.env.PRIVATE_KEY_PATH ?? 'keys/private-key.pem',\n    'utf8'\n  );\n  const token = sign({ user }, privateKey, signOptions);\n\n  return token;\n}\n"],"mappings":";;;;;;;;;;;AAAA,IAAAA,aAAA,GAAAC,OAAA;AAQA,IAAAC,GAAA,GAAAC,sBAAA,CAAAF,OAAA;AAEA,IAAAG,MAAA,GAAAH,OAAA;AACA,IAAAI,YAAA,GAAAJ,OAAA;AACA,IAAAK,OAAA,GAAAL,OAAA;AACA,IAAAM,SAAA,GAAAN,OAAA;AACA,IAAAO,iBAAA,GAAAP,OAAA;AACA,IAAAQ,UAAA,GAAAR,OAAA;AACA,IAAAS,OAAA,GAAAT,OAAA;AAEO,IAAIU,MAA0B,GAAAC,OAAA,CAAAD,MAAA;AAErC,MAAME,SAAS,GAAG,kBAAkB;;AAEpC;AACO,eAAeC,WAAWA,CAAA,EAAkB;EACjD;EACA;EACA;EACA,IAAIC,OAAO,CAACC,GAAG,CAACC,KAAK,KAAK,cAAc,EAAE;IACxC,IAAI,CAACF,OAAO,CAACC,GAAG,CAACE,gBAAgB,EAC/B,MAAM,IAAIC,wBAAW,CAAC;MACpBC,OAAO,EAAE;IACX,CAAC,CAAC;IACJR,OAAA,CAAAD,MAAA,GAAAA,MAAM,GAAG,IAAIU,cAAM,CAACN,OAAO,CAACC,GAAG,CAACE,gBAAgB,EAAE;MAAEI,IAAI,EAAE;IAAK,CAAC,CAAC;EACnE,CAAC,MAAM;IACL,IAAIP,OAAO,CAACC,GAAG,CAACO,gBAAgB,EAC9BX,OAAA,CAAAD,MAAA,GAAAA,MAAM,GAAG,IAAIU,cAAM,CACjB,GAAGN,OAAO,CAACC,GAAG,CAACO,gBAAgB,wBAAwB,EACvD;MAAEC,QAAQ,EAAE;IAAK,CACnB,CAAC,CAAC,KAEFZ,OAAA,CAAAD,MAAA,GAAAA,MAAM,GAAG,IAAIU,cAAM,CAAC,kBAAkB,EAAE;MAAEG,QAAQ,EAAE,IAAI;MAAEF,IAAI,EAAE;IAAK,CAAC,CAAC;IAEzE,IAAI,CAACX,MAAM,EACT,MAAM,IAAIQ,wBAAW,CAAC;MACpBC,OAAO,EACL;IACJ,CAAC,CAAC;EACN;EACA,MAAMK,OAAO,GAAG,CAACd,MAAM,CAACe,IAAI,CAACC,IAAI,CAAChB,MAAM,CAAC,CAAC,CAAC,CAAC;EAE5C,MAAMiB,OAAO,CAACC,GAAG,CAACJ,OAAO,CAAC;AAC5B;;AAEA;AACO,SAASK,eAAeA,CAAA,EAAS;EACtC,IAAInB,MAAM,EAAEA,MAAM,CAACoB,QAAQ,CAACJ,IAAI,CAAChB,MAAM,CAAC,CAAC,CAAC;AAC5C;;AAEA;AACA,SAASqB,SAASA,CAACC,MAAiB,EAAEC,QAA4B,EAAQ;EACxE;EACA,IAAInB,OAAO,CAACC,GAAG,CAACmB,QAAQ,KAAK,MAAM,EAAE;IACnCD,QAAQ,CAAC,IAAI,EAAEnB,OAAO,CAACC,GAAG,CAACoB,UAAU,CAAC;IACtC;EACF;EACA;EACA,IAAI,CAACzB,MAAM,EAAE;IACXuB,QAAQ,CAAC,IAAIf,wBAAW,CAAC;MAAEC,OAAO,EAAE;IAAkC,CAAC,CAAC,CAAC;IACzE;EACF;EACA;EACA,IAAI,CAACa,MAAM,CAACI,GAAG,EAAE;IACfH,QAAQ,CACN,IAAIf,wBAAW,CAAC;MACdC,OAAO,EACL,oEAAoE;MACtEkB,IAAI,EAAEL;IACR,CAAC,CACH,CAAC;IACD;EACF;;EAEA;EACA,IAAIlB,OAAO,CAACC,GAAG,CAACmB,QAAQ,KAAK,MAAM,EAAE;IACnCD,QAAQ,CAAC,IAAI,EAAEnB,OAAO,CAACC,GAAG,CAACoB,UAAU,CAAC;IACtC;EACF;EACA,IAAAG,mBAAW,EAAC;IACV1B,SAAS;IACTO,OAAO,EAAE,4BAA4Ba,MAAM,CAACI,GAAG;EACjD,CAAC,CAAC;EACF;EACA,IAAIG,GAAG;EACP,IAAI;IACFA,GAAG,GAAG7B,MAAM,CAAC8B,MAAM,CAACR,MAAM,CAACI,GAAG,CAAC;EACjC,CAAC,CAAC,OAAOK,KAA6B,EAAE;IACtCR,QAAQ,CAACQ,KAAK,YAAYC,KAAK,GAAGD,KAAK,GAAG,IAAI,CAAC;IAC/C;EACF;EAEA,IAAIF,GAAG,EAAE;IACP,IAAAD,mBAAW,EAAC;MAAE1B,SAAS;MAAEO,OAAO,EAAE,sBAAsBa,MAAM,CAACI,GAAG;IAAI,CAAC,CAAC;IACxEH,QAAQ,CAAC,IAAI,EAAEM,GAAG,CAAC;IACnB;EACF;EACAN,QAAQ,CACN,IAAIU,kBAAQ,CAAC;IACXC,UAAU,EAAE,GAAG;IACfC,SAAS,EAAE,cAAc;IACzB1B,OAAO,EAAE,8CAA8C;IACvDkB,IAAI,EAAE;MAAED,GAAG,EAAEJ,MAAM,CAACI;IAAI;EAC1B,CAAC,CACH,CAAC;AACH;;AAEA;AACO,eAAeU,SAASA,CAC7BC,KAAa,EACbC,MAAmB,GAAGC,kBAAW,CAACC,YAAY,EACnB;EAC3B,IAAIC,UAAU,GAAG,CAAC,OAAO,CAAc;EACvC,IAAIrC,OAAO,CAACC,GAAG,CAACmB,QAAQ,KAAK,MAAM,EAAE;IACnC,IAAAkB,mCAAiB,EAAC;MAAEjB,UAAU,EAAEkB,oBAAS,CAACC,QAAQ,CAAC;IAAE,CAAC,CAAC;IACvDH,UAAU,GAAG,CAAC,OAAO,CAAc;EACrC;EACA,IAAAC,mCAAiB,EAAC;IAChBG,qBAAqB,EAAEF,oBAAS,CAACC,QAAQ,CAAC,CAAC;IAC3CE,mBAAmB,EAAEH,oBAAS,CAACC,QAAQ,CAAC;EAC1C,CAAC,CAAC;EACF,IAAIG,OAAkC;EAEtC,QAAQT,MAAM;IACZ,KAAKC,kBAAW,CAACC,YAAY;MAC3BO,OAAO,GAAG;QACRC,QAAQ,EAAE,CAAC5C,OAAO,CAACC,GAAG,CAACwC,qBAAqB,CAAW;QACvDP,MAAM,EAAE,CAAClC,OAAO,CAACC,GAAG,CAACyC,mBAAmB,CAAW;QACnDL;MACF,CAAC;MACD;IACF;MACE,MAAM,IAAIjC,wBAAW,CAAC;QACpBC,OAAO,EAAE,mCAAmC6B,MAAM;MACpD,CAAC,CAAC;EACN;EAEA,OAAO,IAAIrB,OAAO,CAAmB,CAACgC,OAAO,EAAEC,MAAM,KAAK;IACxD,IAAAC,oBAAM,EAACd,KAAK,EAAEhB,SAAS,EAAE0B,OAAO,EAAE,CAAChB,KAAK,EAAEqB,MAAM,KAAK;MACnD,IAAIrB,KAAK,EAAE;QACTmB,MAAM,CACJ,IAAIjB,kBAAQ,CAAC;UACXE,SAAS,EAAE,cAAc;UACzBD,UAAU,EAAE,GAAG;UACfzB,OAAO,EAAE,wBAAwB;UACjCkB,IAAI,EAAE;YAAEU;UAAM,CAAC;UACfN,KAAK,EAAEA,KAAK,YAAYC,KAAK,GAAGD,KAAK,GAAGsB;QAC1C,CAAC,CACH,CAAC;QACD;MACF;MACAJ,OAAO,CAACG,MAA0B,CAAC;IACrC,CAAC,CAAC;EACJ,CAAC,CAAC;AACJ;AAEO,SAASE,gBAAgBA,CAACC,IAAa,EAAE;EAC9C,MAAMC,WAAW,GAAG;IAClBC,SAAS,EAAE,OAAgB;IAAE;IAC7BC,SAAS,EAAE,IAAI;IACfpB,MAAM,EAAElC,OAAO,CAACC,GAAG,CAACyC,mBAAmB;IACvCE,QAAQ,EAAE5C,OAAO,CAACC,GAAG,CAACwC,qBAAqB;IAC3Cc,KAAK,EAAEC,MAAM,CAACC,IAAI,CAAC7D,MAAM,EAAE8D,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;EAC/C,CAAC;EAED,MAAMC,UAAU,GAAGC,WAAE,CAACC,YAAY,CAChC7D,OAAO,CAACC,GAAG,CAAC6D,gBAAgB,IAAI,sBAAsB,EACtD,MACF,CAAC;EACD,MAAM7B,KAAK,GAAG,IAAA8B,kBAAI,EAAC;IAAEZ;EAAK,CAAC,EAAEQ,UAAU,EAAEP,WAAW,CAAC;EAErD,OAAOnB,KAAK;AACd","ignoreList":[]}
+{"version":3,"file":"jwt.js","names":["_jsonwebtoken","require","_const","_EngineError","_KeySet","_WebError","_checkEnvironment","_envAssert","_report","_","keySet","exports","namespace","initKeySets","process","env","CHART","ECDSA_PUBLIC_KEY","EngineError","message","KeySet","file","AUTH_SERVICE_URL","internal","promise","init","bind","Promise","all","shutdownKeySets","shutdown","jwtGetKey","header","callback","NODE_ENV","JWT_SECRET","kid","data","reportDebug","key","getKey","error","Error","WebError","statusCode","errorCode","jwtVerify","token","issuer","TokenIssuer","AUTH_SERVICE","algorithms","assertEnvironment","envAssert","isString","ACCESS_TOKEN_AUDIENCE","ACCESS_TOKEN_ISSUER","ACCESS_TOKEN_EXPIRATION_TIME","options","audience","resolve","reject","verify","result","undefined","generateJwtToken","user","signOptions","algorithm","expiresIn","parseInt","keyid","Object","keys","getKeys","privateKey","getSecretOrFile","sign"],"sources":["../../../src/utils/jwt/jwt.ts"],"sourcesContent":["import {\n  verify,\n  JwtHeader,\n  SigningKeyCallback,\n  Algorithm,\n  VerifyOptions,\n  sign\n} from 'jsonwebtoken';\nimport { UserTokenPayload } from './jwt.types';\nimport { TokenIssuer } from 'const';\nimport { EngineError } from 'entities/EngineError';\nimport { KeySet } from 'entities/KeySet';\nimport { WebError } from 'entities/WebError';\nimport { assertEnvironment } from 'utils/checkEnvironment';\nimport { envAssert } from 'utils/envAssert';\nimport { reportDebug } from 'utils/report';\nimport { getSecretOrFile } from 'utils';\n\nexport let keySet: KeySet | undefined;\n\nconst namespace = 'engine:utils:jwt';\n\n/** Initiate key fetching mechanism */\nexport async function initKeySets(): Promise<void> {\n  // Create the KeySet instance\n  // The auth-service fetches its key from its disk and not from a network request\n  // This prevents fetch failures the first time the auth-service is started\n  if (process.env.CHART === 'auth-service') {\n    if (!process.env.ECDSA_PUBLIC_KEY)\n      throw new EngineError({\n        message: 'Environment variable \"ECDSA_PUBLIC_KEY\" is not defined'\n      });\n    keySet = new KeySet(process.env.ECDSA_PUBLIC_KEY, { file: true });\n  } else {\n    if (process.env.AUTH_SERVICE_URL)\n      keySet = new KeySet(\n        `${process.env.AUTH_SERVICE_URL}/.well-known/jwks.json`,\n        { internal: true }\n      );\n    else\n      keySet = new KeySet(`./keys/jwks.json`, { internal: true, file: true });\n\n    if (!keySet)\n      throw new EngineError({\n        message:\n          'Environment variable \"AUTH_SERVICE_URL\" is not defined or JWKS not found'\n      });\n  }\n  const promise = [keySet.init.bind(keySet)()];\n\n  await Promise.all(promise);\n}\n\n/** Stop fetching keys regularly */\nexport function shutdownKeySets(): void {\n  if (keySet) keySet.shutdown.bind(keySet)();\n}\n\n/** Get the JWT public key */\nfunction jwtGetKey(header: JwtHeader, callback: SigningKeyCallback): void {\n  // In test environment we return the symmetric signature secret\n  if (process.env.NODE_ENV === 'test') {\n    callback(null, process.env.JWT_SECRET);\n    return;\n  }\n  // Check that KeySet has been initialized\n  if (!keySet) {\n    callback(new EngineError({ message: 'KeySet has not been initialized' }));\n    return;\n  }\n  // Check that the token has a key ID\n  if (!header.kid) {\n    callback(\n      new EngineError({\n        message:\n          'Token has not key ID in header, impossible to match with known key',\n        data: header\n      })\n    );\n    return;\n  }\n\n  // In test environment we use a symmetrical secret bases signature\n  if (process.env.NODE_ENV === 'test') {\n    callback(null, process.env.JWT_SECRET);\n    return;\n  }\n  reportDebug({\n    namespace,\n    message: `Looking for key with ID \"${header.kid}\"`\n  });\n  // Go through each key set to check if the token's key is in one of them\n  let key;\n  try {\n    key = keySet.getKey(header.kid);\n  } catch (error: Error | null | unknown) {\n    callback(error instanceof Error ? error : null);\n    return;\n  }\n\n  if (key) {\n    reportDebug({ namespace, message: `Found key with ID \"${header.kid}\"` });\n    callback(null, key);\n    return;\n  }\n  callback(\n    new WebError({\n      statusCode: 401,\n      errorCode: 'unauthorized',\n      message: 'Could not find the tokens key in any key set',\n      data: { kid: header.kid }\n    })\n  );\n}\n\n/** Verify an user Json Web Token */\nexport async function jwtVerify(\n  token: string,\n  issuer: TokenIssuer = TokenIssuer.AUTH_SERVICE\n): Promise<UserTokenPayload> {\n  let algorithms = ['ES256' as Algorithm];\n  if (process.env.NODE_ENV === 'test') {\n    assertEnvironment({ JWT_SECRET: envAssert.isString() });\n    algorithms = ['HS256' as Algorithm];\n  }\n  assertEnvironment({\n    ACCESS_TOKEN_AUDIENCE: envAssert.isString(),\n    ACCESS_TOKEN_ISSUER: envAssert.isString(),\n    ACCESS_TOKEN_EXPIRATION_TIME: envAssert.isString()\n  });\n  let options: VerifyOptions | undefined;\n\n  switch (issuer) {\n    case TokenIssuer.AUTH_SERVICE:\n      options = {\n        audience: [process.env.ACCESS_TOKEN_AUDIENCE as string],\n        issuer: [process.env.ACCESS_TOKEN_ISSUER as string],\n        algorithms\n      };\n      break;\n    default:\n      throw new EngineError({\n        message: `Invalid token issuer specified \"${issuer as string}\"`\n      });\n  }\n\n  return new Promise<UserTokenPayload>((resolve, reject) => {\n    verify(token, jwtGetKey, options, (error, result) => {\n      if (error) {\n        reject(\n          new WebError({\n            errorCode: 'unauthorized',\n            statusCode: 401,\n            message: 'Invalid token supplied',\n            data: { token },\n            error: error instanceof Error ? error : undefined\n          })\n        );\n        return;\n      }\n      resolve(result as UserTokenPayload);\n    });\n  });\n}\n\nexport function generateJwtToken(user: unknown) {\n  const signOptions = {\n    algorithm: 'ES256' as const, // or 'ES256' as Algorithm\n    expiresIn: process.env.ACCESS_TOKEN_EXPIRATION_TIME\n      ? parseInt(process.env.ACCESS_TOKEN_EXPIRATION_TIME, 10)\n      : undefined,\n    issuer: process.env.ACCESS_TOKEN_ISSUER,\n    audience: process.env.ACCESS_TOKEN_AUDIENCE,\n    keyid: Object.keys(keySet?.getKeys() ?? {})[0]\n  };\n\n  const privateKey = getSecretOrFile('PRIVATE_KEY_PATH');\n\n  const token = sign({ user }, privateKey, signOptions);\n\n  return token;\n}\n"],"mappings":";;;;;;;;;;AAAA,IAAAA,aAAA,GAAAC,OAAA;AASA,IAAAC,MAAA,GAAAD,OAAA;AACA,IAAAE,YAAA,GAAAF,OAAA;AACA,IAAAG,OAAA,GAAAH,OAAA;AACA,IAAAI,SAAA,GAAAJ,OAAA;AACA,IAAAK,iBAAA,GAAAL,OAAA;AACA,IAAAM,UAAA,GAAAN,OAAA;AACA,IAAAO,OAAA,GAAAP,OAAA;AACA,IAAAQ,CAAA,GAAAR,OAAA;AAEO,IAAIS,MAA0B,GAAAC,OAAA,CAAAD,MAAA;AAErC,MAAME,SAAS,GAAG,kBAAkB;;AAEpC;AACO,eAAeC,WAAWA,CAAA,EAAkB;EACjD;EACA;EACA;EACA,IAAIC,OAAO,CAACC,GAAG,CAACC,KAAK,KAAK,cAAc,EAAE;IACxC,IAAI,CAACF,OAAO,CAACC,GAAG,CAACE,gBAAgB,EAC/B,MAAM,IAAIC,wBAAW,CAAC;MACpBC,OAAO,EAAE;IACX,CAAC,CAAC;IACJR,OAAA,CAAAD,MAAA,GAAAA,MAAM,GAAG,IAAIU,cAAM,CAACN,OAAO,CAACC,GAAG,CAACE,gBAAgB,EAAE;MAAEI,IAAI,EAAE;IAAK,CAAC,CAAC;EACnE,CAAC,MAAM;IACL,IAAIP,OAAO,CAACC,GAAG,CAACO,gBAAgB,EAC9BX,OAAA,CAAAD,MAAA,GAAAA,MAAM,GAAG,IAAIU,cAAM,CACjB,GAAGN,OAAO,CAACC,GAAG,CAACO,gBAAgB,wBAAwB,EACvD;MAAEC,QAAQ,EAAE;IAAK,CACnB,CAAC,CAAC,KAEFZ,OAAA,CAAAD,MAAA,GAAAA,MAAM,GAAG,IAAIU,cAAM,CAAC,kBAAkB,EAAE;MAAEG,QAAQ,EAAE,IAAI;MAAEF,IAAI,EAAE;IAAK,CAAC,CAAC;IAEzE,IAAI,CAACX,MAAM,EACT,MAAM,IAAIQ,wBAAW,CAAC;MACpBC,OAAO,EACL;IACJ,CAAC,CAAC;EACN;EACA,MAAMK,OAAO,GAAG,CAACd,MAAM,CAACe,IAAI,CAACC,IAAI,CAAChB,MAAM,CAAC,CAAC,CAAC,CAAC;EAE5C,MAAMiB,OAAO,CAACC,GAAG,CAACJ,OAAO,CAAC;AAC5B;;AAEA;AACO,SAASK,eAAeA,CAAA,EAAS;EACtC,IAAInB,MAAM,EAAEA,MAAM,CAACoB,QAAQ,CAACJ,IAAI,CAAChB,MAAM,CAAC,CAAC,CAAC;AAC5C;;AAEA;AACA,SAASqB,SAASA,CAACC,MAAiB,EAAEC,QAA4B,EAAQ;EACxE;EACA,IAAInB,OAAO,CAACC,GAAG,CAACmB,QAAQ,KAAK,MAAM,EAAE;IACnCD,QAAQ,CAAC,IAAI,EAAEnB,OAAO,CAACC,GAAG,CAACoB,UAAU,CAAC;IACtC;EACF;EACA;EACA,IAAI,CAACzB,MAAM,EAAE;IACXuB,QAAQ,CAAC,IAAIf,wBAAW,CAAC;MAAEC,OAAO,EAAE;IAAkC,CAAC,CAAC,CAAC;IACzE;EACF;EACA;EACA,IAAI,CAACa,MAAM,CAACI,GAAG,EAAE;IACfH,QAAQ,CACN,IAAIf,wBAAW,CAAC;MACdC,OAAO,EACL,oEAAoE;MACtEkB,IAAI,EAAEL;IACR,CAAC,CACH,CAAC;IACD;EACF;;EAEA;EACA,IAAIlB,OAAO,CAACC,GAAG,CAACmB,QAAQ,KAAK,MAAM,EAAE;IACnCD,QAAQ,CAAC,IAAI,EAAEnB,OAAO,CAACC,GAAG,CAACoB,UAAU,CAAC;IACtC;EACF;EACA,IAAAG,mBAAW,EAAC;IACV1B,SAAS;IACTO,OAAO,EAAE,4BAA4Ba,MAAM,CAACI,GAAG;EACjD,CAAC,CAAC;EACF;EACA,IAAIG,GAAG;EACP,IAAI;IACFA,GAAG,GAAG7B,MAAM,CAAC8B,MAAM,CAACR,MAAM,CAACI,GAAG,CAAC;EACjC,CAAC,CAAC,OAAOK,KAA6B,EAAE;IACtCR,QAAQ,CAACQ,KAAK,YAAYC,KAAK,GAAGD,KAAK,GAAG,IAAI,CAAC;IAC/C;EACF;EAEA,IAAIF,GAAG,EAAE;IACP,IAAAD,mBAAW,EAAC;MAAE1B,SAAS;MAAEO,OAAO,EAAE,sBAAsBa,MAAM,CAACI,GAAG;IAAI,CAAC,CAAC;IACxEH,QAAQ,CAAC,IAAI,EAAEM,GAAG,CAAC;IACnB;EACF;EACAN,QAAQ,CACN,IAAIU,kBAAQ,CAAC;IACXC,UAAU,EAAE,GAAG;IACfC,SAAS,EAAE,cAAc;IACzB1B,OAAO,EAAE,8CAA8C;IACvDkB,IAAI,EAAE;MAAED,GAAG,EAAEJ,MAAM,CAACI;IAAI;EAC1B,CAAC,CACH,CAAC;AACH;;AAEA;AACO,eAAeU,SAASA,CAC7BC,KAAa,EACbC,MAAmB,GAAGC,kBAAW,CAACC,YAAY,EACnB;EAC3B,IAAIC,UAAU,GAAG,CAAC,OAAO,CAAc;EACvC,IAAIrC,OAAO,CAACC,GAAG,CAACmB,QAAQ,KAAK,MAAM,EAAE;IACnC,IAAAkB,mCAAiB,EAAC;MAAEjB,UAAU,EAAEkB,oBAAS,CAACC,QAAQ,CAAC;IAAE,CAAC,CAAC;IACvDH,UAAU,GAAG,CAAC,OAAO,CAAc;EACrC;EACA,IAAAC,mCAAiB,EAAC;IAChBG,qBAAqB,EAAEF,oBAAS,CAACC,QAAQ,CAAC,CAAC;IAC3CE,mBAAmB,EAAEH,oBAAS,CAACC,QAAQ,CAAC,CAAC;IACzCG,4BAA4B,EAAEJ,oBAAS,CAACC,QAAQ,CAAC;EACnD,CAAC,CAAC;EACF,IAAII,OAAkC;EAEtC,QAAQV,MAAM;IACZ,KAAKC,kBAAW,CAACC,YAAY;MAC3BQ,OAAO,GAAG;QACRC,QAAQ,EAAE,CAAC7C,OAAO,CAACC,GAAG,CAACwC,qBAAqB,CAAW;QACvDP,MAAM,EAAE,CAAClC,OAAO,CAACC,GAAG,CAACyC,mBAAmB,CAAW;QACnDL;MACF,CAAC;MACD;IACF;MACE,MAAM,IAAIjC,wBAAW,CAAC;QACpBC,OAAO,EAAE,mCAAmC6B,MAAM;MACpD,CAAC,CAAC;EACN;EAEA,OAAO,IAAIrB,OAAO,CAAmB,CAACiC,OAAO,EAAEC,MAAM,KAAK;IACxD,IAAAC,oBAAM,EAACf,KAAK,EAAEhB,SAAS,EAAE2B,OAAO,EAAE,CAACjB,KAAK,EAAEsB,MAAM,KAAK;MACnD,IAAItB,KAAK,EAAE;QACToB,MAAM,CACJ,IAAIlB,kBAAQ,CAAC;UACXE,SAAS,EAAE,cAAc;UACzBD,UAAU,EAAE,GAAG;UACfzB,OAAO,EAAE,wBAAwB;UACjCkB,IAAI,EAAE;YAAEU;UAAM,CAAC;UACfN,KAAK,EAAEA,KAAK,YAAYC,KAAK,GAAGD,KAAK,GAAGuB;QAC1C,CAAC,CACH,CAAC;QACD;MACF;MACAJ,OAAO,CAACG,MAA0B,CAAC;IACrC,CAAC,CAAC;EACJ,CAAC,CAAC;AACJ;AAEO,SAASE,gBAAgBA,CAACC,IAAa,EAAE;EAC9C,MAAMC,WAAW,GAAG;IAClBC,SAAS,EAAE,OAAgB;IAAE;IAC7BC,SAAS,EAAEvD,OAAO,CAACC,GAAG,CAAC0C,4BAA4B,GAC/Ca,QAAQ,CAACxD,OAAO,CAACC,GAAG,CAAC0C,4BAA4B,EAAE,EAAE,CAAC,GACtDO,SAAS;IACbhB,MAAM,EAAElC,OAAO,CAACC,GAAG,CAACyC,mBAAmB;IACvCG,QAAQ,EAAE7C,OAAO,CAACC,GAAG,CAACwC,qBAAqB;IAC3CgB,KAAK,EAAEC,MAAM,CAACC,IAAI,CAAC/D,MAAM,EAAEgE,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;EAC/C,CAAC;EAED,MAAMC,UAAU,GAAG,IAAAC,iBAAe,EAAC,kBAAkB,CAAC;EAEtD,MAAM7B,KAAK,GAAG,IAAA8B,kBAAI,EAAC;IAAEX;EAAK,CAAC,EAAES,UAAU,EAAER,WAAW,CAAC;EAErD,OAAOpB,KAAK;AACd","ignoreList":[]}

package/dist/utils/secretManager/index.d.ts

@@ -0,0 +1,2 @@
+export * from './secretResolver';
+export * from './secretLoader';

package/dist/utils/secretManager/index.js

@@ -0,0 +1,28 @@
+"use strict";
+
+Object.defineProperty(exports, "__esModule", {
+  value: true
+});
+var _secretResolver = require("./secretResolver");
+Object.keys(_secretResolver).forEach(function (key) {
+  if (key === "default" || key === "__esModule") return;
+  if (key in exports && exports[key] === _secretResolver[key]) return;
+  Object.defineProperty(exports, key, {
+    enumerable: true,
+    get: function () {
+      return _secretResolver[key];
+    }
+  });
+});
+var _secretLoader = require("./secretLoader");
+Object.keys(_secretLoader).forEach(function (key) {
+  if (key === "default" || key === "__esModule") return;
+  if (key in exports && exports[key] === _secretLoader[key]) return;
+  Object.defineProperty(exports, key, {
+    enumerable: true,
+    get: function () {
+      return _secretLoader[key];
+    }
+  });
+});
+//# sourceMappingURL=index.js.map

package/dist/utils/secretManager/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","names":["_secretResolver","require","Object","keys","forEach","key","exports","defineProperty","enumerable","get","_secretLoader"],"sources":["../../../src/utils/secretManager/index.ts"],"sourcesContent":["export * from './secretResolver';\nexport * from './secretLoader';\n"],"mappings":";;;;;AAAA,IAAAA,eAAA,GAAAC,OAAA;AAAAC,MAAA,CAAAC,IAAA,CAAAH,eAAA,EAAAI,OAAA,WAAAC,GAAA;EAAA,IAAAA,GAAA,kBAAAA,GAAA;EAAA,IAAAA,GAAA,IAAAC,OAAA,IAAAA,OAAA,CAAAD,GAAA,MAAAL,eAAA,CAAAK,GAAA;EAAAH,MAAA,CAAAK,cAAA,CAAAD,OAAA,EAAAD,GAAA;IAAAG,UAAA;IAAAC,GAAA,WAAAA,CAAA;MAAA,OAAAT,eAAA,CAAAK,GAAA;IAAA;EAAA;AAAA;AACA,IAAAK,aAAA,GAAAT,OAAA;AAAAC,MAAA,CAAAC,IAAA,CAAAO,aAAA,EAAAN,OAAA,WAAAC,GAAA;EAAA,IAAAA,GAAA,kBAAAA,GAAA;EAAA,IAAAA,GAAA,IAAAC,OAAA,IAAAA,OAAA,CAAAD,GAAA,MAAAK,aAAA,CAAAL,GAAA;EAAAH,MAAA,CAAAK,cAAA,CAAAD,OAAA,EAAAD,GAAA;IAAAG,UAAA;IAAAC,GAAA,WAAAA,CAAA;MAAA,OAAAC,aAAA,CAAAL,GAAA;IAAA;EAAA;AAAA","ignoreList":[]}

package/dist/utils/secretManager/secretLoader.d.ts

@@ -0,0 +1,8 @@
+export declare const secretCache: {
+    [key: string]: string;
+};
+/**
+ * Initialize the Secret Manager client and preload secrets.
+ * @param secretEnvVars List of env var names that contain secret paths
+ */
+export declare const initializeSecrets: (secretEnvVars: string[]) => Promise<void>;