prime-sdk 3.0.7-beta.0 → 3.0.7

package/dist/lib/entraID/entraID.service.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"entraID.service.js","sourceRoot":"","sources":["../../../src/lib/entraID/entraID.service.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;AAAA,2CAAkE;AAClE,gEAAwC;AACxC,wDAAkC;AAClC,2DAA+E;AAC/E,oFAA+E;AAC/E,qEAAiE;AACjE,kEAA8D;AAS9D,uEAAmE;AAEnE,uDAAmD;AAGnD,MAAM,YAAY,GAAG,OAAO,CAAC;AAGtB,IAAM,cAAc,GAApB,MAAM,cAAc;IAGzB,YAC8C,MAAoB,EAC7C,gBAAkC,EAClC,eAAgC,EAChC,oBAA0C;QAHjB,WAAM,GAAN,MAAM,CAAc;QAC7C,qBAAgB,GAAhB,gBAAgB,CAAkB;QAClC,oBAAe,GAAf,eAAe,CAAiB;QAChC,yBAAoB,GAApB,oBAAoB,CAAsB;IAC5D,CAAC;IAEJ,YAAY;QACV,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,YAAY,EAAE,WAAW,EAAE,WAAW,EAAE,GAClE,IAAI,CAAC,MAAM,CAAC;QAEd,IACE,CAAC,QAAQ;YACT,CAAC,QAAQ;YACT,CAAC,YAAY;YACb,CAAC,WAAW;YACZ,CAAC,WAAW,EACZ,CAAC;YACD,MAAM,IAAI,oCAAgB,CAAC,gBAAgB,CAAC,CAAC;QAC/C,CAAC;QAED,MAAM,YAAY,GAAG,IAAI,CAAC,MAAM,CAAC,YAAY,IAAI,2CAAuB,CAAC;QAEzE,IAAI,CAAC,aAAa,GAAG,IAAA,kBAAU,EAAC;YAC9B,OAAO,EAAE,GAAG,YAAY,IAAI,QAAQ,sBAAsB;YAC1D,KAAK,EAAE,IAAI;YACX,WAAW,EAAE,EAAE,GAAG,EAAE,GAAG,IAAI;SAC5B,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,cAAc,CAAC,MAAsB;QACzC,IAAI,CAAC,eAAe,CAAC,sBAAsB,CAAC,MAAM,CAAC,CAAC;QAEpD,MAAM,KAAK,GAAG,IAAI,CAAC,yBAAyB,CAAC,MAAM,CAAC,KAAM,CAAC,CAAC;QAC5D,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAAC,YAAY,CAAC,MAAM,CAAC,IAAK,CAAC,CAAC;QACtE,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;QAEjE,MAAM,KAAK,GAAG,OAAO,CAAC,kBAAkB,IAAI,OAAO,CAAC,KAAK,IAAI,OAAO,CAAC,GAAG,CAAC;QACzE,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,MAAM,IAAI,oCAAgB,CAAC,0BAA0B,CAAC,CAAC;QACzD,CAAC;QAED,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,YAAY,CACpC,MAAM,CAAC,YAAY,EACnB,KAAK,EACL,OAAO,CAAC,IAAI,CACb,CAAC;QACF,OAAO,EAAE,GAAG,MAAM,EAAE,YAAY,EAAE,MAAM,CAAC,aAAa,EAAE,CAAC;IAC3D,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,YAAoB;QAChC,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAAC,YAAY,CAAC,YAAY,CAAC,CAAC;QACtE,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,YAAY,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC;QACpE,OAAO,EAAE,GAAG,MAAM,EAAE,YAAY,EAAE,MAAM,CAAC,aAAa,EAAE,CAAC;IAC3D,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,MAAc;QACzB,MAAM,IAAI,CAAC,gBAAgB,CAAC,kBAAkB,CAAC,MAAM,CAAC,CAAC;IACzD,CAAC;IAED,KAAK,CAAC,aAAa;QACjB,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,IAAI,CAAC,iBAAiB,EAAE,CAAC;QAClD,MAAM,EAAE,QAAQ,EAAE,WAAW,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC,MAAM,CAAC;QACvE,MAAM,YAAY,GAAG,IAAI,CAAC,MAAM,CAAC,YAAY,IAAI,2CAAuB,CAAC;QAEzE,MAAM,MAAM,GAAG,IAAI,eAAe,CAAC;YACjC,SAAS,EAAE,QAAQ;YACnB,aAAa,EAAE,MAAM;YACrB,YAAY,EAAE,WAAW;YACzB,aAAa,EAAE,WAAW;YAC1B,KAAK,EAAE,KAAK,IAAI,qDAAqD;YACrE,KAAK;YACL,KAAK;YACL,MAAM,EAAE,MAAM,IAAI,gBAAgB;SACnC,CAAC,CAAC;QAEH,OAAO,GAAG,YAAY,IAAI,QAAQ,0BAA0B,MAAM,CAAC,QAAQ,EAAE,EAAE,CAAC;IAClF,CAAC;IAED,gBAAgB,CAAC,KAAa;QAC5B,OAAO,IAAI,CAAC,oBAAoB,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACjD,CAAC;IAES,KAAK,CAAC,aAAa,CAC3B,OAAe,EACf,KAAa;QAEb,MAAM,OAAO,GAAG,sBAAG,CAAC,MAAM,CAAC,OAAO,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAe,CAAC;QAEtE,IAAI,CAAC,OAAO,EAAE,MAAM,EAAE,CAAC;YACrB,MAAM,IAAI,oCAAgB,CAAC,sBAAsB,CAAC,CAAC;QACrD,CAAC;QAED,MAAM,SAAS,GAAG,MAAM,0BAAW,CAAC,eAAe,CACjD,OAAO,CAAC,MAAM,CAAC,GAAG,EAClB,IAAI,CAAC,aAAa,CACnB,CAAC;QAEF,MAAM,eAAe,GAA0B;YAC7C,qCAAqC,IAAI,CAAC,MAAM,CAAC,QAAQ,OAAO;YAChE,2BAA2B,IAAI,CAAC,MAAM,CAAC,QAAQ,GAAG;SACnD,CAAC;QAEF,MAAM,OAAO,GAAG,sBAAG,CAAC,MAAM,CAAC,OAAO,EAAE,SAAS,EAAE;YAC7C,UAAU,EAAE,CAAC,OAAO,CAAC;YACrB,QAAQ,EAAE,IAAI,CAAC,MAAM,CAAC,QAAS;YAC/B,MAAM,EAAE,eAAe;SACxB,CAA8B,CAAC;QAEhC,IAAI,OAAO,CAAC,KAAK,KAAK,KAAK,EAAE,CAAC;YAC5B,MAAM,IAAI,oCAAgB,CAAC,eAAe,CAAC,CAAC;QAC9C,CAAC;QAED,OAAO,OAAO,CAAC;IACjB,CAAC;IAES,KAAK,CAAC,YAAY,CAC1B,WAAmB,EACnB,KAAa,EACb,IAAY;QAEZ,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;QAE9D,IAAI,MAAM,GAA8B,EAAE,CAAC;QAC3C,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAAC,WAAW,CAAC,WAAW,CAAC,CAAC;YACjE,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC;QAC9C,CAAC;QAAC,MAAM,CAAC,CAAA,CAAC;QAEV,MAAM,IAAI,GAAc;YACtB,OAAO,EAAE,MAAM,CAAC,EAAE;YAClB,KAAK,EAAE,MAAM,CAAC,IAAI,IAAI,MAAM,CAAC,iBAAiB,IAAI,KAAK;YACvD,IAAI,EAAE,MAAM,CAAC,WAAW,IAAI,IAAI;YAChC,QAAQ,EAAE,IAAI,CAAC,MAAM,CAAC,QAAQ;YAC9B,SAAS,EAAE,MAAM,CAAC,UAAU;YAC5B,MAAM;SACP,CAAC;QAEF,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,oBAAoB,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC,CAAC;QAE1E,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;IACzB,CAAC;IAES,iBAAiB;QACzB,MAAM,EAAE,WAAW,EAAE,GAAG,IAAI,CAAC,MAAM,CAAC;QACpC,MAAM,KAAK,GAAG,0BAAW,CAAC,YAAY,EAAE,CAAC;QACzC,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CACzB,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC,CAC1C,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;QACxB,MAAM,KAAK,GAAG,0BAAW,CAAC,2BAA2B,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC;QAC5E,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC;IAC1B,CAAC;IAES,yBAAyB,CAAC,KAAa;QAC/C,MAAM,EAAE,WAAW,EAAE,GAAG,IAAI,CAAC,MAAM,CAAC;QACpC,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAE/B,0BAAW,CAAC,qBAAqB,CAAC,KAAK,EAAE,WAAW,CAAC,CAAC;QAEtD,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;QAEzB,IAAI,KAAa,CAAC;QAClB,IAAI,EAAU,CAAC;QACf,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CACvB,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC,QAAQ,EAAE,CACZ,CAAC;YACnC,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC;YACrB,EAAE,GAAG,MAAM,CAAC,EAAE,CAAC;QACjB,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,IAAI,oCAAgB,CAAC,gBAAgB,CAAC,CAAC;QAC/C,CAAC;QAED,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,YAAY,EAAE,CAAC;YACnC,MAAM,IAAI,oCAAgB,CAAC,gBAAgB,CAAC,CAAC;QAC/C,CAAC;QAED,OAAO,KAAK,CAAC;IACf,CAAC;CACF,CAAA;AAtLY,wCAAc;yBAAd,cAAc;IAD1B,IAAA,mBAAU,GAAE;IAKR,WAAA,IAAA,eAAM,EAAC,mCAAe,CAAC,CAAA;6CACa,oCAAgB;QACjB,kCAAe;QACV,6CAAoB;GAPpD,cAAc,CAsL1B"}

package/dist/lib/entraID/guards/entra-auth.guard.d.ts

@@ -1,21 +0,0 @@
-import { CanActivate, ExecutionContext } from '@nestjs/common';
-import type { Request } from 'express';
-import { InternalTokenService } from '../internal-token/internal-token.service';
-import { EntraUser } from '../types/entraID.type';
-import { Reflector } from '@nestjs/core';
-export declare class EntraAuthGuard implements CanActivate {
-    private readonly internalTokenService;
-    private readonly reflector;
-    constructor(internalTokenService: InternalTokenService, reflector: Reflector);
-    canActivate(context: ExecutionContext): Promise<boolean>;
-    protected isTokenRevoked(_payload: EntraUser, _request: Request): Promise<boolean>;
-    protected transformPayload(payload: EntraUser): Promise<unknown>;
-    protected extractToken(request: {
-        headers: {
-            authorization?: string;
-        };
-        cookies?: {
-            auth_token?: string;
-        };
-    }): string | undefined;
-}

package/dist/lib/entraID/guards/entra-auth.guard.js

@@ -1,70 +0,0 @@
-"use strict";
-var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
-    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
-    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
-    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
-    return c > 3 && r && Object.defineProperty(target, key, r), r;
-};
-var __metadata = (this && this.__metadata) || function (k, v) {
-    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
-};
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.EntraAuthGuard = void 0;
-const common_1 = require("@nestjs/common");
-const internal_token_service_1 = require("../internal-token/internal-token.service");
-const entraID_exception_1 = require("../customError/entraID.exception");
-const core_1 = require("@nestjs/core");
-const public_decorator_1 = require("../decorators/public.decorator");
-let EntraAuthGuard = class EntraAuthGuard {
-    constructor(internalTokenService, reflector) {
-        this.internalTokenService = internalTokenService;
-        this.reflector = reflector;
-    }
-    async canActivate(context) {
-        const isPublic = this.reflector.getAllAndOverride(public_decorator_1.IS_PUBLIC_KEY, [
-            context.getHandler(),
-            context.getClass(),
-        ]);
-        if (isPublic)
-            return true;
-        const request = context.switchToHttp().getRequest();
-        const token = this.extractToken(request);
-        if (!token)
-            throw new common_1.UnauthorizedException();
-        let payload;
-        try {
-            payload = this.internalTokenService.verify(token);
-        }
-        catch (error) {
-            if (error instanceof entraID_exception_1.EntraIDException) {
-                throw new common_1.UnauthorizedException(error.message);
-            }
-            throw error;
-        }
-        const revoke = await this.isTokenRevoked(payload, request);
-        if (revoke) {
-            throw new common_1.UnauthorizedException('TOKEN_REVOKED');
-        }
-        request.user = await this.transformPayload(payload);
-        return true;
-    }
-    async isTokenRevoked(_payload, _request) {
-        return false;
-    }
-    async transformPayload(payload) {
-        return payload;
-    }
-    extractToken(request) {
-        const auth = request.headers.authorization;
-        if (auth?.startsWith('Bearer '))
-            return auth.slice(7);
-        return request.cookies?.auth_token;
-    }
-};
-exports.EntraAuthGuard = EntraAuthGuard;
-exports.EntraAuthGuard = EntraAuthGuard = __decorate([
-    (0, common_1.Injectable)(),
-    __metadata("design:paramtypes", [internal_token_service_1.InternalTokenService,
-        core_1.Reflector])
-], EntraAuthGuard);
-//# sourceMappingURL=entra-auth.guard.js.map

package/dist/lib/entraID/guards/entra-auth.guard.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"entra-auth.guard.js","sourceRoot":"","sources":["../../../../src/lib/entraID/guards/entra-auth.guard.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,2CAKwB;AAExB,qFAAgF;AAChF,wEAAoE;AAEpE,uCAAyC;AACzC,qEAA+D;AAGxD,IAAM,cAAc,GAApB,MAAM,cAAc;IACzB,YACmB,oBAA0C,EAC1C,SAAoB;QADpB,yBAAoB,GAApB,oBAAoB,CAAsB;QAC1C,cAAS,GAAT,SAAS,CAAW;IACpC,CAAC;IAEJ,KAAK,CAAC,WAAW,CAAC,OAAyB;QACzC,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAS,CAAC,iBAAiB,CAAU,gCAAa,EAAE;YACxE,OAAO,CAAC,UAAU,EAAE;YACpB,OAAO,CAAC,QAAQ,EAAE;SACnB,CAAC,CAAC;QAEH,IAAI,QAAQ;YAAE,OAAO,IAAI,CAAC;QAE1B,MAAM,OAAO,GAAG,OAAO,CAAC,YAAY,EAAE,CAAC,UAAU,EAAE,CAAC;QACpD,MAAM,KAAK,GAAG,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC;QAEzC,IAAI,CAAC,KAAK;YAAE,MAAM,IAAI,8BAAqB,EAAE,CAAC;QAE9C,IAAI,OAAkB,CAAC;QACvB,IAAI,CAAC;YACH,OAAO,GAAG,IAAI,CAAC,oBAAoB,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACpD,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,KAAK,YAAY,oCAAgB,EAAE,CAAC;gBACtC,MAAM,IAAI,8BAAqB,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;YACjD,CAAC;YACD,MAAM,KAAK,CAAC;QACd,CAAC;QAED,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QAE3D,IAAI,MAAM,EAAE,CAAC;YACX,MAAM,IAAI,8BAAqB,CAAC,eAAe,CAAC,CAAC;QACnD,CAAC;QAED,OAAO,CAAC,IAAI,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAAC,OAAO,CAAC,CAAC;QAEpD,OAAO,IAAI,CAAC;IACd,CAAC;IAES,KAAK,CAAC,cAAc,CAE5B,QAAmB,EAGnB,QAAiB;QAEjB,OAAO,KAAK,CAAC;IACf,CAAC;IAES,KAAK,CAAC,gBAAgB,CAAC,OAAkB;QACjD,OAAO,OAAO,CAAC;IACjB,CAAC;IAES,YAAY,CAAC,OAGtB;QACC,MAAM,IAAI,GAAG,OAAO,CAAC,OAAO,CAAC,aAAa,CAAC;QAC3C,IAAI,IAAI,EAAE,UAAU,CAAC,SAAS,CAAC;YAAE,OAAO,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QACtD,OAAO,OAAO,CAAC,OAAO,EAAE,UAAU,CAAC;IACrC,CAAC;CACF,CAAA;AA9DY,wCAAc;yBAAd,cAAc;IAD1B,IAAA,mBAAU,GAAE;qCAG8B,6CAAoB;QAC/B,gBAAS;GAH5B,cAAc,CA8D1B"}

package/dist/lib/entraID/guards/roles.guard.d.ts

@@ -1,7 +0,0 @@
-import { CanActivate, ExecutionContext } from '@nestjs/common';
-import { Reflector } from '@nestjs/core';
-export declare class RolesGuard implements CanActivate {
-    private readonly reflector;
-    constructor(reflector: Reflector);
-    canActivate(context: ExecutionContext): boolean;
-}

package/dist/lib/entraID/guards/roles.guard.js

@@ -1,41 +0,0 @@
-"use strict";
-var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
-    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
-    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
-    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
-    return c > 3 && r && Object.defineProperty(target, key, r), r;
-};
-var __metadata = (this && this.__metadata) || function (k, v) {
-    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
-};
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.RolesGuard = void 0;
-const common_1 = require("@nestjs/common");
-const core_1 = require("@nestjs/core");
-const roles_decorator_1 = require("../decorators/roles.decorator");
-let RolesGuard = class RolesGuard {
-    constructor(reflector) {
-        this.reflector = reflector;
-    }
-    canActivate(context) {
-        const required = this.reflector.getAllAndOverride(roles_decorator_1.ROLES_KEY, [
-            context.getHandler(),
-            context.getClass(),
-        ]);
-        if (!required?.length)
-            return true;
-        const { user } = context.switchToHttp().getRequest();
-        const userGroups = (user?.groups ?? []).map((g) => g.displayName);
-        const allowed = required.some((role) => userGroups.includes(role));
-        if (!allowed) {
-            throw new common_1.ForbiddenException('INVALID_GROUP');
-        }
-        return true;
-    }
-};
-exports.RolesGuard = RolesGuard;
-exports.RolesGuard = RolesGuard = __decorate([
-    (0, common_1.Injectable)(),
-    __metadata("design:paramtypes", [core_1.Reflector])
-], RolesGuard);
-//# sourceMappingURL=roles.guard.js.map

package/dist/lib/entraID/guards/roles.guard.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"roles.guard.js","sourceRoot":"","sources":["../../../../src/lib/entraID/guards/roles.guard.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,2CAKwB;AACxB,uCAAyC;AACzC,mEAA0D;AAGnD,IAAM,UAAU,GAAhB,MAAM,UAAU;IACrB,YAA6B,SAAoB;QAApB,cAAS,GAAT,SAAS,CAAW;IAAG,CAAC;IAErD,WAAW,CAAC,OAAyB;QACnC,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAS,CAAC,iBAAiB,CAAW,2BAAS,EAAE;YACrE,OAAO,CAAC,UAAU,EAAE;YACpB,OAAO,CAAC,QAAQ,EAAE;SACnB,CAAC,CAAC;QAEH,IAAI,CAAC,QAAQ,EAAE,MAAM;YAAE,OAAO,IAAI,CAAC;QAEnC,MAAM,EAAE,IAAI,EAAE,GAAG,OAAO,CAAC,YAAY,EAAE,CAAC,UAAU,EAAE,CAAC;QACrD,MAAM,UAAU,GAAa,CAAC,IAAI,EAAE,MAAM,IAAI,EAAE,CAAC,CAAC,GAAG,CACnD,CAAC,CAA0B,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,CAC9C,CAAC;QAEF,MAAM,OAAO,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC;QACnE,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,MAAM,IAAI,2BAAkB,CAAC,eAAe,CAAC,CAAC;QAChD,CAAC;QAED,OAAO,IAAI,CAAC;IACd,CAAC;CACF,CAAA;AAvBY,gCAAU;qBAAV,UAAU;IADtB,IAAA,mBAAU,GAAE;qCAE6B,gBAAS;GADtC,UAAU,CAuBtB"}

package/dist/lib/entraID/interfaces/entraID-service.interface.d.ts

@@ -1,7 +0,0 @@
-import { AuthResult, CallbackParams, UrlRedirectSso } from '../types/entraID.type';
-export interface IEntraIDService {
-    handleCallback(params: CallbackParams): Promise<AuthResult>;
-    initiateLogin(): Promise<UrlRedirectSso>;
-    refresh(refreshToken: string): Promise<AuthResult>;
-    logout(userId: string): Promise<void>;
-}

package/dist/lib/entraID/interfaces/entraID-service.interface.js

@@ -1,3 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-//# sourceMappingURL=entraID-service.interface.js.map

package/dist/lib/entraID/interfaces/entraID-service.interface.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"entraID-service.interface.js","sourceRoot":"","sources":["../../../../src/lib/entraID/interfaces/entraID-service.interface.ts"],"names":[],"mappings":""}

package/dist/lib/entraID/internal-token/internal-token.module.d.ts

@@ -1,2 +0,0 @@
-export declare class InternalTokenModule {
-}

package/dist/lib/entraID/internal-token/internal-token.module.js

@@ -1,21 +0,0 @@
-"use strict";
-var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
-    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
-    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
-    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
-    return c > 3 && r && Object.defineProperty(target, key, r), r;
-};
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.InternalTokenModule = void 0;
-const common_1 = require("@nestjs/common");
-const internal_token_service_1 = require("./internal-token.service");
-let InternalTokenModule = class InternalTokenModule {
-};
-exports.InternalTokenModule = InternalTokenModule;
-exports.InternalTokenModule = InternalTokenModule = __decorate([
-    (0, common_1.Module)({
-        providers: [internal_token_service_1.InternalTokenService],
-        exports: [internal_token_service_1.InternalTokenService],
-    })
-], InternalTokenModule);
-//# sourceMappingURL=internal-token.module.js.map

package/dist/lib/entraID/internal-token/internal-token.module.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"internal-token.module.js","sourceRoot":"","sources":["../../../../src/lib/entraID/internal-token/internal-token.module.ts"],"names":[],"mappings":";;;;;;;;;AAAA,2CAAwC;AACxC,qEAAgE;AAMzD,IAAM,mBAAmB,GAAzB,MAAM,mBAAmB;CAAG,CAAA;AAAtB,kDAAmB;8BAAnB,mBAAmB;IAJ/B,IAAA,eAAM,EAAC;QACN,SAAS,EAAE,CAAC,6CAAoB,CAAC;QACjC,OAAO,EAAE,CAAC,6CAAoB,CAAC;KAChC,CAAC;GACW,mBAAmB,CAAG"}

package/dist/lib/entraID/internal-token/internal-token.service.d.ts

@@ -1,10 +0,0 @@
-import { EntraIDSetup } from '../types/entraID-module-init.types';
-import { EntraUser, TokenEnrichmentContext } from '../types/entraID.type';
-export declare class InternalTokenService {
-    private readonly config;
-    constructor(config: EntraIDSetup);
-    sign(context: TokenEnrichmentContext): Promise<string>;
-    protected enrichTokenPayload(_context: TokenEnrichmentContext): Promise<Record<string, unknown>>;
-    verify(token: string): EntraUser;
-    private assertNoReservedClaimCollision;
-}

package/dist/lib/entraID/internal-token/internal-token.service.js

@@ -1,76 +0,0 @@
-"use strict";
-var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
-    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
-    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
-    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
-    return c > 3 && r && Object.defineProperty(target, key, r), r;
-};
-var __metadata = (this && this.__metadata) || function (k, v) {
-    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
-};
-var __param = (this && this.__param) || function (paramIndex, decorator) {
-    return function (target, key) { decorator(target, key, paramIndex); }
-};
-var __importDefault = (this && this.__importDefault) || function (mod) {
-    return (mod && mod.__esModule) ? mod : { "default": mod };
-};
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.InternalTokenService = void 0;
-const common_1 = require("@nestjs/common");
-const crypto_1 = require("crypto");
-const jsonwebtoken_1 = __importDefault(require("jsonwebtoken"));
-const entraID_constants_1 = require("../entraID.constants");
-const entraID_exception_1 = require("../customError/entraID.exception");
-let InternalTokenService = class InternalTokenService {
-    constructor(config) {
-        this.config = config;
-    }
-    async sign(context) {
-        const customClaims = await this.enrichTokenPayload(context);
-        this.assertNoReservedClaimCollision(customClaims);
-        return jsonwebtoken_1.default.sign({ jti: (0, crypto_1.randomUUID)(), ...context.user, ...customClaims }, this.config.jwtSecret, {
-            algorithm: 'HS256',
-            expiresIn: (this.config.jwtExpiresIn ??
-                '8h'),
-        });
-    }
-    async enrichTokenPayload(_context) {
-        return {};
-    }
-    verify(token) {
-        try {
-            return jsonwebtoken_1.default.verify(token, this.config.jwtSecret, {
-                algorithms: ['HS256'],
-            });
-        }
-        catch (err) {
-            if (err instanceof jsonwebtoken_1.default.TokenExpiredError) {
-                throw new entraID_exception_1.EntraIDException('TOKEN_EXPIRED');
-            }
-            throw new entraID_exception_1.EntraIDException('TOKEN_INVALID');
-        }
-    }
-    assertNoReservedClaimCollision(customClaims) {
-        const reserved = [
-            'sub',
-            'iss',
-            'aud',
-            'exp',
-            'iat',
-            'nbf',
-            'jti',
-            'groups',
-        ];
-        const collision = reserved.find((claim) => claim in customClaims);
-        if (collision) {
-            throw new entraID_exception_1.EntraIDException('RESERVED_CLAIM_OVERRIDE');
-        }
-    }
-};
-exports.InternalTokenService = InternalTokenService;
-exports.InternalTokenService = InternalTokenService = __decorate([
-    (0, common_1.Injectable)(),
-    __param(0, (0, common_1.Inject)(entraID_constants_1.ENTRA_ID_CONFIG)),
-    __metadata("design:paramtypes", [Object])
-], InternalTokenService);
-//# sourceMappingURL=internal-token.service.js.map

package/dist/lib/entraID/internal-token/internal-token.service.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"internal-token.service.js","sourceRoot":"","sources":["../../../../src/lib/entraID/internal-token/internal-token.service.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;AAAA,2CAAoD;AACpD,mCAAoC;AACpC,gEAA+B;AAC/B,4DAAuD;AACvD,wEAAoE;AAK7D,IAAM,oBAAoB,GAA1B,MAAM,oBAAoB;IAC/B,YAAsD,MAAoB;QAApB,WAAM,GAAN,MAAM,CAAc;IAAG,CAAC;IAE9E,KAAK,CAAC,IAAI,CAAC,OAA+B;QACxC,MAAM,YAAY,GAAG,MAAM,IAAI,CAAC,kBAAkB,CAAC,OAAO,CAAC,CAAC;QAE5D,IAAI,CAAC,8BAA8B,CAAC,YAAY,CAAC,CAAC;QAElD,OAAO,sBAAG,CAAC,IAAI,CACb,EAAE,GAAG,EAAE,IAAA,mBAAU,GAAE,EAAE,GAAG,OAAO,CAAC,IAAI,EAAE,GAAG,YAAY,EAAE,EACvD,IAAI,CAAC,MAAM,CAAC,SAAS,EACrB;YACE,SAAS,EAAE,OAAO;YAClB,SAAS,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,YAAY;gBAClC,IAAI,CAAiC;SACxC,CACF,CAAC;IACJ,CAAC;IAES,KAAK,CAAC,kBAAkB,CAChC,QAAgC;QAEhC,OAAO,EAAE,CAAC;IACZ,CAAC;IAED,MAAM,CAAC,KAAa;QAClB,IAAI,CAAC;YACH,OAAO,sBAAG,CAAC,MAAM,CAAC,KAAK,EAAE,IAAI,CAAC,MAAM,CAAC,SAAS,EAAE;gBAC9C,UAAU,EAAE,CAAC,OAAO,CAAC;aACtB,CAAyB,CAAC;QAC7B,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,GAAG,YAAY,sBAAG,CAAC,iBAAiB,EAAE,CAAC;gBACzC,MAAM,IAAI,oCAAgB,CAAC,eAAe,CAAC,CAAC;YAC9C,CAAC;YACD,MAAM,IAAI,oCAAgB,CAAC,eAAe,CAAC,CAAC;QAC9C,CAAC;IACH,CAAC;IAEO,8BAA8B,CACpC,YAAqC;QAErC,MAAM,QAAQ,GAAG;YACf,KAAK;YACL,KAAK;YACL,KAAK;YACL,KAAK;YACL,KAAK;YACL,KAAK;YACL,KAAK;YACL,QAAQ;SACT,CAAC;QACF,MAAM,SAAS,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,IAAI,YAAY,CAAC,CAAC;QAClE,IAAI,SAAS,EAAE,CAAC;YACd,MAAM,IAAI,oCAAgB,CAAC,yBAAyB,CAAC,CAAC;QACxD,CAAC;IACH,CAAC;CACF,CAAA;AAxDY,oDAAoB;+BAApB,oBAAoB;IADhC,IAAA,mBAAU,GAAE;IAEE,WAAA,IAAA,eAAM,EAAC,mCAAe,CAAC,CAAA;;GADzB,oBAAoB,CAwDhC"}

package/dist/lib/entraID/microsoft/microsoft.module.d.ts

@@ -1,2 +0,0 @@
-export declare class MicrosoftModule {
-}

package/dist/lib/entraID/microsoft/microsoft.module.js

@@ -1,21 +0,0 @@
-"use strict";
-var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
-    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
-    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
-    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
-    return c > 3 && r && Object.defineProperty(target, key, r), r;
-};
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.MicrosoftModule = void 0;
-const common_1 = require("@nestjs/common");
-const microsoft_service_1 = require("./microsoft.service");
-let MicrosoftModule = class MicrosoftModule {
-};
-exports.MicrosoftModule = MicrosoftModule;
-exports.MicrosoftModule = MicrosoftModule = __decorate([
-    (0, common_1.Module)({
-        providers: [microsoft_service_1.MicrosoftService],
-        exports: [microsoft_service_1.MicrosoftService],
-    })
-], MicrosoftModule);
-//# sourceMappingURL=microsoft.module.js.map

package/dist/lib/entraID/microsoft/microsoft.module.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"microsoft.module.js","sourceRoot":"","sources":["../../../../src/lib/entraID/microsoft/microsoft.module.ts"],"names":[],"mappings":";;;;;;;;;AAAA,2CAAwC;AACxC,2DAAuD;AAMhD,IAAM,eAAe,GAArB,MAAM,eAAe;CAAG,CAAA;AAAlB,0CAAe;0BAAf,eAAe;IAJ3B,IAAA,eAAM,EAAC;QACN,SAAS,EAAE,CAAC,oCAAgB,CAAC;QAC7B,OAAO,EAAE,CAAC,oCAAgB,CAAC;KAC5B,CAAC;GACW,eAAe,CAAG"}

package/dist/lib/entraID/microsoft/microsoft.service.d.ts

@@ -1,14 +0,0 @@
-import { AzureTokenResponse, GraphUser } from '../types/entraID.type';
-import { EntraIDSetup } from '../types/entraID-module-init.types';
-export declare class MicrosoftService {
-    private readonly config;
-    constructor(config: EntraIDSetup);
-    exchangeCode(code: string): Promise<AzureTokenResponse>;
-    refreshToken(refreshToken: string): Promise<AzureTokenResponse>;
-    revokeUserSessions(userId: string): Promise<void>;
-    private getClientCredentialsToken;
-    getMe(accessToken: string): Promise<GraphUser>;
-    getMemberOf(accessToken: string): Promise<{
-        displayName: string;
-    }[]>;
-}

package/dist/lib/entraID/microsoft/microsoft.service.js

@@ -1,132 +0,0 @@
-"use strict";
-var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
-    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
-    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
-    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
-    return c > 3 && r && Object.defineProperty(target, key, r), r;
-};
-var __metadata = (this && this.__metadata) || function (k, v) {
-    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
-};
-var __param = (this && this.__param) || function (paramIndex, decorator) {
-    return function (target, key) { decorator(target, key, paramIndex); }
-};
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.MicrosoftService = void 0;
-const common_1 = require("@nestjs/common");
-const entraID_exception_1 = require("../customError/entraID.exception");
-const entraID_constants_1 = require("../entraID.constants");
-const GRAPH_BASE = 'https://graph.microsoft.com/v1.0';
-const FETCH_TIMEOUT_MS = 15_000;
-let MicrosoftService = class MicrosoftService {
-    constructor(config) {
-        this.config = config;
-    }
-    async exchangeCode(code) {
-        const body = new URLSearchParams({
-            client_id: this.config.clientID,
-            client_secret: this.config.clientSecret,
-            code,
-            redirect_uri: this.config.redirectUri,
-            grant_type: 'authorization_code',
-            scope: this.config.scope ??
-                'openid profile email User.Read GroupMember.Read.All',
-        });
-        const authorityUrl = this.config.authorityUrl ?? entraID_constants_1.MICROSOFT_AUTHORITY_URL;
-        const response = await fetch(`${authorityUrl}/${this.config.tenantID}/oauth2/v2.0/token`, {
-            method: 'POST',
-            headers: { 'Content-Type': 'application/x-www-form-urlencoded' },
-            body: body.toString(),
-            signal: AbortSignal.timeout(FETCH_TIMEOUT_MS),
-        });
-        if (!response.ok)
-            throw new entraID_exception_1.EntraIDException('CODE_EXCHANGE_FAILED');
-        const tokens = (await response.json());
-        if (!tokens.access_token || !tokens.id_token) {
-            throw new entraID_exception_1.EntraIDException('CODE_EXCHANGE_FAILED');
-        }
-        return tokens;
-    }
-    async refreshToken(refreshToken) {
-        const body = new URLSearchParams({
-            client_id: this.config.clientID,
-            client_secret: this.config.clientSecret,
-            refresh_token: refreshToken,
-            grant_type: 'refresh_token',
-        });
-        const authorityUrl = this.config.authorityUrl ?? entraID_constants_1.MICROSOFT_AUTHORITY_URL;
-        const response = await fetch(`${authorityUrl}/${this.config.tenantID}/oauth2/v2.0/token`, {
-            method: 'POST',
-            headers: { 'Content-Type': 'application/x-www-form-urlencoded' },
-            body: body.toString(),
-            signal: AbortSignal.timeout(FETCH_TIMEOUT_MS),
-        });
-        if (!response.ok)
-            throw new entraID_exception_1.EntraIDException('REFRESH_TOKEN_FAILED');
-        const tokens = (await response.json());
-        if (!tokens.access_token)
-            throw new entraID_exception_1.EntraIDException('REFRESH_TOKEN_FAILED');
-        return tokens;
-    }
-    async revokeUserSessions(userId) {
-        const adminToken = await this.getClientCredentialsToken();
-        const response = await fetch(`${GRAPH_BASE}/users/${userId}/revokeSignInSessions`, {
-            method: 'POST',
-            headers: { Authorization: `Bearer ${adminToken}` },
-            signal: AbortSignal.timeout(FETCH_TIMEOUT_MS),
-        });
-        if (!response.ok)
-            throw new entraID_exception_1.EntraIDException('REVOKE_SESSIONS_FAILED');
-    }
-    async getClientCredentialsToken() {
-        const authorityUrl = this.config.authorityUrl ?? entraID_constants_1.MICROSOFT_AUTHORITY_URL;
-        const body = new URLSearchParams({
-            client_id: this.config.clientID,
-            client_secret: this.config.clientSecret,
-            scope: 'https://graph.microsoft.com/.default',
-            grant_type: 'client_credentials',
-        });
-        const response = await fetch(`${authorityUrl}/${this.config.tenantID}/oauth2/v2.0/token`, {
-            method: 'POST',
-            headers: { 'Content-Type': 'application/x-www-form-urlencoded' },
-            body: body.toString(),
-            signal: AbortSignal.timeout(FETCH_TIMEOUT_MS),
-        });
-        if (!response.ok)
-            throw new entraID_exception_1.EntraIDException('REVOKE_SESSIONS_FAILED');
-        const data = (await response.json());
-        return data.access_token;
-    }
-    async getMe(accessToken) {
-        const response = await fetch(`${GRAPH_BASE}/me?$select=id,displayName,mail,userPrincipalName,employeeId`, {
-            headers: { Authorization: `Bearer ${accessToken}` },
-            signal: AbortSignal.timeout(FETCH_TIMEOUT_MS),
-        });
-        if (!response.ok)
-            throw new entraID_exception_1.EntraIDException('GRAPH_FETCH_FAILED');
-        return (await response.json());
-    }
-    async getMemberOf(accessToken) {
-        const allGroups = [];
-        let url = `${GRAPH_BASE}/me/memberOf?$select=displayName&$top=100`;
-        while (url) {
-            const response = await fetch(url, {
-                headers: { Authorization: `Bearer ${accessToken}` },
-                signal: AbortSignal.timeout(FETCH_TIMEOUT_MS),
-            });
-            if (!response.ok)
-                throw new entraID_exception_1.EntraIDException('GRAPH_FETCH_FAILED');
-            const data = (await response.json());
-            allGroups.push(...data.value);
-            url = data['@odata.nextLink'] ?? null;
-        }
-        return allGroups;
-    }
-};
-exports.MicrosoftService = MicrosoftService;
-exports.MicrosoftService = MicrosoftService = __decorate([
-    (0, common_1.Injectable)(),
-    __param(0, (0, common_1.Inject)(entraID_constants_1.ENTRA_ID_CONFIG)),
-    __metadata("design:paramtypes", [Object])
-], MicrosoftService);
-//# sourceMappingURL=microsoft.service.js.map

package/dist/lib/entraID/microsoft/microsoft.service.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"microsoft.service.js","sourceRoot":"","sources":["../../../../src/lib/entraID/microsoft/microsoft.service.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;AAAA,2CAAoD;AACpD,wEAAoE;AAGpE,4DAAgF;AAEhF,MAAM,UAAU,GAAG,kCAAkC,CAAC;AACtD,MAAM,gBAAgB,GAAG,MAAM,CAAC;AAGzB,IAAM,gBAAgB,GAAtB,MAAM,gBAAgB;IAC3B,YAAsD,MAAoB;QAApB,WAAM,GAAN,MAAM,CAAc;IAAG,CAAC;IAE9E,KAAK,CAAC,YAAY,CAAC,IAAY;QAC7B,MAAM,IAAI,GAAG,IAAI,eAAe,CAAC;YAC/B,SAAS,EAAE,IAAI,CAAC,MAAM,CAAC,QAAQ;YAC/B,aAAa,EAAE,IAAI,CAAC,MAAM,CAAC,YAAY;YACvC,IAAI;YACJ,YAAY,EAAE,IAAI,CAAC,MAAM,CAAC,WAAW;YACrC,UAAU,EAAE,oBAAoB;YAChC,KAAK,EACH,IAAI,CAAC,MAAM,CAAC,KAAK;gBACjB,qDAAqD;SACxD,CAAC,CAAC;QAEH,MAAM,YAAY,GAAG,IAAI,CAAC,MAAM,CAAC,YAAY,IAAI,2CAAuB,CAAC;QAEzE,MAAM,QAAQ,GAAG,MAAM,KAAK,CAC1B,GAAG,YAAY,IAAI,IAAI,CAAC,MAAM,CAAC,QAAQ,oBAAoB,EAC3D;YACE,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,EAAE,cAAc,EAAE,mCAAmC,EAAE;YAChE,IAAI,EAAE,IAAI,CAAC,QAAQ,EAAE;YACrB,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,gBAAgB,CAAC;SAC9C,CACF,CAAC;QAEF,IAAI,CAAC,QAAQ,CAAC,EAAE;YAAE,MAAM,IAAI,oCAAgB,CAAC,sBAAsB,CAAC,CAAC;QAErE,MAAM,MAAM,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAuB,CAAC;QAE7D,IAAI,CAAC,MAAM,CAAC,YAAY,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC;YAC7C,MAAM,IAAI,oCAAgB,CAAC,sBAAsB,CAAC,CAAC;QACrD,CAAC;QAED,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,KAAK,CAAC,YAAY,CAAC,YAAoB;QACrC,MAAM,IAAI,GAAG,IAAI,eAAe,CAAC;YAC/B,SAAS,EAAE,IAAI,CAAC,MAAM,CAAC,QAAQ;YAC/B,aAAa,EAAE,IAAI,CAAC,MAAM,CAAC,YAAY;YACvC,aAAa,EAAE,YAAY;YAC3B,UAAU,EAAE,eAAe;SAC5B,CAAC,CAAC;QAEH,MAAM,YAAY,GAAG,IAAI,CAAC,MAAM,CAAC,YAAY,IAAI,2CAAuB,CAAC;QAEzE,MAAM,QAAQ,GAAG,MAAM,KAAK,CAC1B,GAAG,YAAY,IAAI,IAAI,CAAC,MAAM,CAAC,QAAQ,oBAAoB,EAC3D;YACE,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,EAAE,cAAc,EAAE,mCAAmC,EAAE;YAChE,IAAI,EAAE,IAAI,CAAC,QAAQ,EAAE;YACrB,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,gBAAgB,CAAC;SAC9C,CACF,CAAC;QAEF,IAAI,CAAC,QAAQ,CAAC,EAAE;YAAE,MAAM,IAAI,oCAAgB,CAAC,sBAAsB,CAAC,CAAC;QAErE,MAAM,MAAM,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAuB,CAAC;QAE7D,IAAI,CAAC,MAAM,CAAC,YAAY;YACtB,MAAM,IAAI,oCAAgB,CAAC,sBAAsB,CAAC,CAAC;QAErD,OAAO,MAAM,CAAC;IAChB,CAAC;IAGD,KAAK,CAAC,kBAAkB,CAAC,MAAc;QACrC,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,yBAAyB,EAAE,CAAC;QAE1D,MAAM,QAAQ,GAAG,MAAM,KAAK,CAC1B,GAAG,UAAU,UAAU,MAAM,uBAAuB,EACpD;YACE,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,EAAE,aAAa,EAAE,UAAU,UAAU,EAAE,EAAE;YAClD,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,gBAAgB,CAAC;SAC9C,CACF,CAAC;QAEF,IAAI,CAAC,QAAQ,CAAC,EAAE;YAAE,MAAM,IAAI,oCAAgB,CAAC,wBAAwB,CAAC,CAAC;IACzE,CAAC;IAEO,KAAK,CAAC,yBAAyB;QACrC,MAAM,YAAY,GAAG,IAAI,CAAC,MAAM,CAAC,YAAY,IAAI,2CAAuB,CAAC;QAEzE,MAAM,IAAI,GAAG,IAAI,eAAe,CAAC;YAC/B,SAAS,EAAE,IAAI,CAAC,MAAM,CAAC,QAAQ;YAC/B,aAAa,EAAE,IAAI,CAAC,MAAM,CAAC,YAAY;YACvC,KAAK,EAAE,sCAAsC;YAC7C,UAAU,EAAE,oBAAoB;SACjC,CAAC,CAAC;QAEH,MAAM,QAAQ,GAAG,MAAM,KAAK,CAC1B,GAAG,YAAY,IAAI,IAAI,CAAC,MAAM,CAAC,QAAQ,oBAAoB,EAC3D;YACE,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,EAAE,cAAc,EAAE,mCAAmC,EAAE;YAChE,IAAI,EAAE,IAAI,CAAC,QAAQ,EAAE;YACrB,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,gBAAgB,CAAC;SAC9C,CACF,CAAC;QAEF,IAAI,CAAC,QAAQ,CAAC,EAAE;YAAE,MAAM,IAAI,oCAAgB,CAAC,wBAAwB,CAAC,CAAC;QAEvE,MAAM,IAAI,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAA6B,CAAC;QACjE,OAAO,IAAI,CAAC,YAAY,CAAC;IAC3B,CAAC;IAED,KAAK,CAAC,KAAK,CAAC,WAAmB;QAC7B,MAAM,QAAQ,GAAG,MAAM,KAAK,CAC1B,GAAG,UAAU,8DAA8D,EAC3E;YACE,OAAO,EAAE,EAAE,aAAa,EAAE,UAAU,WAAW,EAAE,EAAE;YACnD,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,gBAAgB,CAAC;SAC9C,CACF,CAAC;QAEF,IAAI,CAAC,QAAQ,CAAC,EAAE;YAAE,MAAM,IAAI,oCAAgB,CAAC,oBAAoB,CAAC,CAAC;QAEnE,OAAO,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAc,CAAC;IAC9C,CAAC;IAED,KAAK,CAAC,WAAW,CAAC,WAAmB;QACnC,MAAM,SAAS,GAA8B,EAAE,CAAC;QAChD,IAAI,GAAG,GACL,GAAG,UAAU,2CAA2C,CAAC;QAE3D,OAAO,GAAG,EAAE,CAAC;YACX,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE;gBAChC,OAAO,EAAE,EAAE,aAAa,EAAE,UAAU,WAAW,EAAE,EAAE;gBACnD,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,gBAAgB,CAAC;aAC9C,CAAC,CAAC;YACH,IAAI,CAAC,QAAQ,CAAC,EAAE;gBAAE,MAAM,IAAI,oCAAgB,CAAC,oBAAoB,CAAC,CAAC;YAEnE,MAAM,IAAI,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAGlC,CAAC;YAEF,SAAS,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC;YAC9B,GAAG,GAAG,IAAI,CAAC,iBAAiB,CAAC,IAAI,IAAI,CAAC;QACxC,CAAC;QAED,OAAO,SAAS,CAAC;IACnB,CAAC;CACF,CAAA;AAnJY,4CAAgB;2BAAhB,gBAAgB;IAD5B,IAAA,mBAAU,GAAE;IAEE,WAAA,IAAA,eAAM,EAAC,mCAAe,CAAC,CAAA;;GADzB,gBAAgB,CAmJ5B"}

package/dist/lib/entraID/security/security.module.d.ts

@@ -1,2 +0,0 @@
-export declare class SecurityModule {
-}

package/dist/lib/entraID/security/security.module.js

@@ -1,21 +0,0 @@
-"use strict";
-var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
-    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
-    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
-    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
-    return c > 3 && r && Object.defineProperty(target, key, r), r;
-};
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.SecurityModule = void 0;
-const common_1 = require("@nestjs/common");
-const security_service_1 = require("./security.service");
-let SecurityModule = class SecurityModule {
-};
-exports.SecurityModule = SecurityModule;
-exports.SecurityModule = SecurityModule = __decorate([
-    (0, common_1.Module)({
-        providers: [security_service_1.SecurityService],
-        exports: [security_service_1.SecurityService],
-    })
-], SecurityModule);
-//# sourceMappingURL=security.module.js.map

package/dist/lib/entraID/security/security.module.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"security.module.js","sourceRoot":"","sources":["../../../../src/lib/entraID/security/security.module.ts"],"names":[],"mappings":";;;;;;;;;AAAA,2CAAwC;AACxC,yDAAqD;AAM9C,IAAM,cAAc,GAApB,MAAM,cAAc;CAAG,CAAA;AAAjB,wCAAc;yBAAd,cAAc;IAJ1B,IAAA,eAAM,EAAC;QACN,SAAS,EAAE,CAAC,kCAAe,CAAC;QAC5B,OAAO,EAAE,CAAC,kCAAe,CAAC;KAC3B,CAAC;GACW,cAAc,CAAG"}

package/dist/lib/entraID/security/security.service.d.ts

@@ -1,9 +0,0 @@
-export declare class SecurityService {
-    validateInput(value: string, field?: string): string;
-    validateRedirectUri(uri: string, allowedUri: string): void;
-    validateCallbackParams(params: {
-        code?: string;
-        state?: string;
-        error?: string;
-    }): void;
-}

package/dist/lib/entraID/security/security.service.js

@@ -1,65 +0,0 @@
-"use strict";
-var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
-    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
-    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
-    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
-    return c > 3 && r && Object.defineProperty(target, key, r), r;
-};
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.SecurityService = void 0;
-const common_1 = require("@nestjs/common");
-const entraID_exception_1 = require("../customError/entraID.exception");
-const PATH_TRAVERSAL_PATTERNS = [
-    /\.\.[/\\]/,
-    /\.\.[/\\].*\.\.[/\\]/,
-    /%2e%2e[/\\]/i,
-    /%2e%2e%2f/i,
-    /%2e%2e%5c/i,
-];
-const NULL_BYTE_PATTERN = /\0|%00/;
-const DANGEROUS_CHARS = /<|>|"|'|`|\$\{|javascript:/i;
-let SecurityService = class SecurityService {
-    validateInput(value, field = 'input') {
-        if (NULL_BYTE_PATTERN.test(value)) {
-            throw new entraID_exception_1.EntraIDException('SECURITY_NULL_BYTE');
-        }
-        if (PATH_TRAVERSAL_PATTERNS.some((p) => p.test(value))) {
-            throw new entraID_exception_1.EntraIDException('SECURITY_PATH_TRAVERSAL');
-        }
-        if (DANGEROUS_CHARS.test(value)) {
-            throw new entraID_exception_1.EntraIDException('SECURITY_INVALID_CHARS');
-        }
-        void field;
-        return value.trim();
-    }
-    validateRedirectUri(uri, allowedUri) {
-        try {
-            const parsed = new URL(uri);
-            const allowed = new URL(allowedUri);
-            if (parsed.hostname !== allowed.hostname ||
-                parsed.protocol !== allowed.protocol) {
-                throw new entraID_exception_1.EntraIDException('SECURITY_OPEN_REDIRECT');
-            }
-        }
-        catch (err) {
-            if (err instanceof entraID_exception_1.EntraIDException)
-                throw err;
-            throw new entraID_exception_1.EntraIDException('SECURITY_INVALID_URL');
-        }
-    }
-    validateCallbackParams(params) {
-        if (params.error) {
-            throw new entraID_exception_1.EntraIDException('OAUTH_PROVIDER_ERROR');
-        }
-        if (!params.code || !params.state) {
-            throw new entraID_exception_1.EntraIDException('OAUTH_MISSING_PARAMS');
-        }
-        this.validateInput(params.code, 'code');
-        this.validateInput(params.state, 'state');
-    }
-};
-exports.SecurityService = SecurityService;
-exports.SecurityService = SecurityService = __decorate([
-    (0, common_1.Injectable)()
-], SecurityService);
-//# sourceMappingURL=security.service.js.map

package/dist/lib/entraID/security/security.service.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"security.service.js","sourceRoot":"","sources":["../../../../src/lib/entraID/security/security.service.ts"],"names":[],"mappings":";;;;;;;;;AAAA,2CAA4C;AAC5C,wEAAoE;AAEpE,MAAM,uBAAuB,GAAG;IAC9B,WAAW;IACX,sBAAsB;IACtB,cAAc;IACd,YAAY;IACZ,YAAY;CACb,CAAC;AAEF,MAAM,iBAAiB,GAAG,QAAQ,CAAC;AAEnC,MAAM,eAAe,GAAG,6BAA6B,CAAC;AAG/C,IAAM,eAAe,GAArB,MAAM,eAAe;IAC1B,aAAa,CAAC,KAAa,EAAE,KAAK,GAAG,OAAO;QAC1C,IAAI,iBAAiB,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;YAClC,MAAM,IAAI,oCAAgB,CAAC,oBAAoB,CAAC,CAAC;QACnD,CAAC;QAED,IAAI,uBAAuB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC;YACvD,MAAM,IAAI,oCAAgB,CAAC,yBAAyB,CAAC,CAAC;QACxD,CAAC;QAED,IAAI,eAAe,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;YAChC,MAAM,IAAI,oCAAgB,CAAC,wBAAwB,CAAC,CAAC;QACvD,CAAC;QAED,KAAK,KAAK,CAAC;QACX,OAAO,KAAK,CAAC,IAAI,EAAE,CAAC;IACtB,CAAC;IAED,mBAAmB,CAAC,GAAW,EAAE,UAAkB;QACjD,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC;YAC5B,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,UAAU,CAAC,CAAC;YAEpC,IACE,MAAM,CAAC,QAAQ,KAAK,OAAO,CAAC,QAAQ;gBACpC,MAAM,CAAC,QAAQ,KAAK,OAAO,CAAC,QAAQ,EACpC,CAAC;gBACD,MAAM,IAAI,oCAAgB,CAAC,wBAAwB,CAAC,CAAC;YACvD,CAAC;QACH,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,GAAG,YAAY,oCAAgB;gBAAE,MAAM,GAAG,CAAC;YAC/C,MAAM,IAAI,oCAAgB,CAAC,sBAAsB,CAAC,CAAC;QACrD,CAAC;IACH,CAAC;IAED,sBAAsB,CAAC,MAItB;QACC,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC;YACjB,MAAM,IAAI,oCAAgB,CAAC,sBAAsB,CAAC,CAAC;QACrD,CAAC;QAED,IAAI,CAAC,MAAM,CAAC,IAAI,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;YAClC,MAAM,IAAI,oCAAgB,CAAC,sBAAsB,CAAC,CAAC;QACrD,CAAC;QAED,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QACxC,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;IAC5C,CAAC;CACF,CAAA;AAnDY,0CAAe;0BAAf,eAAe;IAD3B,IAAA,mBAAU,GAAE;GACA,eAAe,CAmD3B"}

package/dist/lib/entraID/types/entraID-module-init.types.d.ts

@@ -1,18 +0,0 @@
-import { InjectionToken, ModuleMetadata, OptionalFactoryDependency } from '@nestjs/common';
-export type EntraIDSetup = {
-    tenantID: string;
-    clientID: string;
-    clientSecret: string;
-    stateSecret: string;
-    scope?: string;
-    prompt?: string;
-    authorityUrl?: string;
-    redirectUri: string;
-    jwtSecret: string;
-    jwtExpiresIn?: string | number;
-};
-export type EntraIDAsyncOptions = {
-    imports?: ModuleMetadata['imports'];
-    inject?: Array<InjectionToken | OptionalFactoryDependency>;
-    useFactory: (...args: any[]) => EntraIDSetup | Promise<EntraIDSetup>;
-};

package/dist/lib/entraID/types/entraID-module-init.types.js

@@ -1,3 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-//# sourceMappingURL=entraID-module-init.types.js.map