prime-sdk 3.0.8-beta.0 → 3.0.9

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "prime-sdk",
-  "version": "3.0.8-beta.0",
+  "version": "3.0.9",
   "description": "swiss army knife",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",
@@ -37,8 +37,6 @@
     "@nestjs/platform-express": "^11.1.17",
     "@smithy/node-http-handler": "^3.3.1",
     "ioredis": "^5.4.1",
-    "jsonwebtoken": "^9.0.3",
-    "jwks-rsa": "^4.0.1",
     "reflect-metadata": "^0.2.0",
     "rxjs": "^7.8.1"
   },
@@ -52,7 +50,6 @@
     "@nestjs/testing": "^11.1.17",
     "@types/express": "^4.17.17",
     "@types/jest": "^29.5.2",
-    "@types/jsonwebtoken": "^9.0.10",
     "@types/node": "^20.3.1",
     "@types/supertest": "^6.0.0",
     "@typescript-eslint/eslint-plugin": "^6.0.0",

package/src/external/aws/s3/s3.service.ts

@@ -24,6 +24,9 @@ import {
   ListFiles,
   UploadFile,
 } from '../../../lib/storage/types/storage.type';
+import { Readable } from 'stream';
+
+const PRESIGNED_PUT_EXPIRES_IN_SECONDS = 3600;
 
 @Injectable()
 export class S3 implements IStorage {
@@ -34,6 +37,7 @@ export class S3 implements IStorage {
       Bucket: file.bucket,
       Key: `${file.path}/${file.nameFile}`,
       Body: file.file,
+      ...(file.contentType && { ContentType: file.contentType }),
       ...(file.metadata && { Metadata: file.metadata }),
       ...(file.tagging && {
         Tagging: file.tagging,
@@ -45,6 +49,72 @@ export class S3 implements IStorage {
     return response;
   }
 
+  async uploadFileViaPresignedUrl(file: UploadFile): Promise<void> {
+    const key = `${file.path}/${file.nameFile}`;
+    const contentType = file.contentType || 'application/octet-stream';
+    const body = await this.resolveFileBody(file.file);
+
+    const command = new PutObjectCommand({
+      Bucket: file.bucket,
+      Key: key,
+      ContentType: contentType,
+      ...(file.metadata && { Metadata: file.metadata }),
+      ...(file.tagging && { Tagging: file.tagging }),
+    });
+
+    const presignedUrl = await getSignedUrl(this.client, command, {
+      expiresIn: PRESIGNED_PUT_EXPIRES_IN_SECONDS,
+    });
+
+    const headers: Record<string, string> = {
+      'Content-Type': contentType,
+    };
+
+    if (file.metadata) {
+      for (const [k, v] of Object.entries(file.metadata)) {
+        headers[`x-amz-meta-${k}`] = v;
+      }
+    }
+
+    if (file.tagging) {
+      headers['x-amz-tagging'] = file.tagging;
+    }
+
+    const response = await fetch(presignedUrl, {
+      method: 'PUT',
+      headers,
+      body: new Uint8Array(body),
+    });
+
+    if (!response.ok) {
+      throw new Error(
+        `s3_presigned_upload_failed: ${response.status} ${response.statusText}`,
+      );
+    }
+  }
+
+  private async resolveFileBody(
+    file: string | Readable | Buffer,
+  ): Promise<Buffer> {
+    if (Buffer.isBuffer(file)) {
+      return file;
+    }
+
+    if (typeof file === 'string') {
+      return Buffer.from(file);
+    }
+
+    const chunks: Buffer[] = [];
+
+    return new Promise((resolve, reject) => {
+      file.on('data', (chunk) =>
+        chunks.push(Buffer.isBuffer(chunk) ? chunk : Buffer.from(chunk)),
+      );
+      file.on('end', () => resolve(Buffer.concat(chunks)));
+      file.on('error', reject);
+    });
+  }
+
   async generateSignUrlFile(file: GetFile): Promise<string> {
     const params = {
       Bucket: file.bucket,

package/src/index.ts

@@ -33,28 +33,6 @@ import {
   TypeRedis,
   PubSubRedis,
 } from './external/redis/types/ioredis.types';
-import { EntraIDModule, ENTRA_ID_CONFIG } from './lib/entraID/entraID.module';
-import type { EntraIDModuleOptions } from './lib/entraID/entraID.module';
-import { EntraIDService } from './lib/entraID/entraID.service';
-import { EntraAuthGuard } from './lib/entraID/guards/entra-auth.guard';
-import { RolesGuard } from './lib/entraID/guards/roles.guard';
-import { InternalTokenService } from './lib/entraID/internal-token/internal-token.service';
-import { CurrentUser } from './lib/entraID/decorators/current-user.decorator';
-import { Public } from './lib/entraID/decorators/public.decorator';
-import { Roles } from './lib/entraID/decorators/roles.decorator';
-import { CookieUtils, TokenUtils } from './lib/entraID/utils';
-import { SecurityService } from './lib/entraID/security/security.service';
-import { EntraIDException } from './lib/entraID/customError/entraID.exception';
-import type {
-  EntraUser,
-  AuthResult,
-  CallbackParams,
-  TokenEnrichmentContext,
-} from './lib/entraID/types/entraID.type';
-import type {
-  EntraIDSetup,
-  EntraIDAsyncOptions,
-} from './lib/entraID/types/entraID-module-init.types';
 
 import { SNSSetup } from './external/aws/sns/sns.provider';
 
@@ -86,24 +64,4 @@ export {
   ClusterRedisSetup,
   TypeRedis,
   PubSubRedis,
-  EntraIDModule,
-  EntraIDModuleOptions,
-  ENTRA_ID_CONFIG,
-  EntraIDService,
-  EntraAuthGuard,
-  RolesGuard,
-  InternalTokenService,
-  CurrentUser,
-  Public,
-  Roles,
-  CookieUtils,
-  TokenUtils,
-  SecurityService,
-  EntraIDException,
-  EntraIDSetup,
-  EntraIDAsyncOptions,
-  EntraUser,
-  AuthResult,
-  CallbackParams,
-  TokenEnrichmentContext,
 };

package/src/lib/storage/interfaces/storage.interface.ts

@@ -17,6 +17,7 @@ import {
 
 export interface IStorage {
   uploadFile(file: UploadFile): Promise<PutObjectCommandOutput>;
+  uploadFileViaPresignedUrl(file: UploadFile): Promise<void>;
   generateSignUrlFile(file: GetFile): Promise<string>;
   getFile(file: GetFile): Promise<GetObjectCommandOutput>;
   listFiles(data: ListFiles): Promise<ListObjectsV2CommandOutput>;

package/src/lib/storage/storage.ts

@@ -26,6 +26,10 @@ export class Storage {
     return this.storage.uploadFile(file);
   }
 
+  async uploadFileViaPresignedUrl(file: UploadFile): Promise<void> {
+    return this.storage.uploadFileViaPresignedUrl(file);
+  }
+
   async generateSignUrlFile(file: GetFile): Promise<string> {
     return this.storage.generateSignUrlFile(file);
   }

package/src/lib/storage/types/storage.type.ts

@@ -5,6 +5,7 @@ export type UploadFile = {
   nameFile: string;
   file: string | Readable | Buffer;
   bucket: string;
+  contentType?: string;
   metadata?: Record<string, string>;
   tagging?: string;
 };

package/tsconfig.json

@@ -6,7 +6,6 @@
     "emitDecoratorMetadata": true,
     "experimentalDecorators": true,
     "allowSyntheticDefaultImports": true,
-    "esModuleInterop": true,
     "target": "ES2021",
     "sourceMap": true,
     "outDir": "./dist",

package/.yarnrc.yml

@@ -1 +0,0 @@
-nodeLinker: node-modules

package/dist/lib/entraID/customError/entraID.exception.d.ts

@@ -1,5 +0,0 @@
-export declare class EntraIDException extends Error {
-    readonly code: string;
-    readonly message: string;
-    constructor(code: string);
-}

package/dist/lib/entraID/customError/entraID.exception.js

@@ -1,43 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.EntraIDException = void 0;
-const entraIDErrorMessages = {
-    INVALID_CONFIG: 'Configuração inválida do módulo EntraID',
-    TENANT_NOT_FOUND: 'Tenant não encontrado na configuração do EntraID',
-    INVALID_SECRET: 'Em Produção é necessário um secret válido',
-    STATE_MISMATCH: 'State OAuth inválido ou expirado',
-    TOKEN_INVALID_HEADER: 'Header da chave publica inválido',
-    PAYLOAD_ID_TOKEN_INVALID: 'Payload decodificado é inválido',
-    INVALID_NONCE: 'Nonce retornado é diferente do esperado',
-    CODE_EXCHANGE_FAILED: 'Falha ao trocar o código de autorização pelo token',
-    TOKEN_EXPIRED: 'Token de acesso expirado',
-    TOKEN_INVALID: 'Token de acesso inválido',
-    RESERVED_CLAIM_OVERRIDE: 'enrichTokenPayload tentou sobrescrever um claim reservado (sub/iss/aud/exp/iat/nbf/jti/groups)',
-    TOKEN_AUDIENCE_INVALID: 'Audience do token não corresponde ao esperado',
-    JWKS_FETCH_FAILED: 'Falha ao buscar chaves públicas do Azure',
-    JWKS_KEY_NOT_FOUND: 'Chave pública não encontrada no JWKS',
-    GRAPH_FETCH_FAILED: 'Falha ao buscar dados do usuário no Microsoft Graph',
-    GRAPH_USER_NOT_FOUND: 'Usuário não encontrado no Microsoft Entra ID',
-    SECURITY_PATH_TRAVERSAL: 'Tentativa de path traversal detectada',
-    SECURITY_NULL_BYTE: 'Caractere nulo detectado na entrada',
-    SECURITY_INVALID_CHARS: 'Caracteres inválidos ou perigosos na entrada',
-    SECURITY_OPEN_REDIRECT: 'Redirecionamento para URL não autorizada',
-    SECURITY_INVALID_URL: 'URL inválida',
-    OAUTH_PROVIDER_ERROR: 'Erro retornado pelo provedor OAuth',
-    OAUTH_MISSING_PARAMS: 'Parâmetros obrigatórios ausentes no callback OAuth',
-    REFRESH_TOKEN_FAILED: 'Falha ao renovar o token de acesso',
-    REVOKE_SESSIONS_FAILED: 'Falha ao revogar sessões do usuário no Microsoft Entra ID',
-    UNKNOWN_ERROR: 'Erro desconhecido',
-};
-class EntraIDException extends Error {
-    constructor(code) {
-        const message = entraIDErrorMessages[code] ?? entraIDErrorMessages['UNKNOWN_ERROR'];
-        super(message);
-        this.code = code;
-        this.message = message;
-        this.name = 'EntraIDException';
-        Object.setPrototypeOf(this, EntraIDException.prototype);
-    }
-}
-exports.EntraIDException = EntraIDException;
-//# sourceMappingURL=entraID.exception.js.map

package/dist/lib/entraID/customError/entraID.exception.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"entraID.exception.js","sourceRoot":"","sources":["../../../../src/lib/entraID/customError/entraID.exception.ts"],"names":[],"mappings":";;;AAAA,MAAM,oBAAoB,GAA2B;IACnD,cAAc,EAAE,yCAAyC;IACzD,gBAAgB,EAAE,kDAAkD;IACpE,cAAc,EAAE,2CAA2C;IAC3D,cAAc,EAAE,kCAAkC;IAClD,oBAAoB,EAAE,kCAAkC;IACxD,wBAAwB,EAAE,iCAAiC;IAC3D,aAAa,EAAE,yCAAyC;IACxD,oBAAoB,EAAE,oDAAoD;IAC1E,aAAa,EAAE,0BAA0B;IACzC,aAAa,EAAE,0BAA0B;IACzC,uBAAuB,EACrB,gGAAgG;IAClG,sBAAsB,EAAE,+CAA+C;IACvE,iBAAiB,EAAE,0CAA0C;IAC7D,kBAAkB,EAAE,sCAAsC;IAC1D,kBAAkB,EAAE,qDAAqD;IACzE,oBAAoB,EAAE,8CAA8C;IACpE,uBAAuB,EAAE,uCAAuC;IAChE,kBAAkB,EAAE,qCAAqC;IACzD,sBAAsB,EAAE,8CAA8C;IACtE,sBAAsB,EAAE,0CAA0C;IAClE,oBAAoB,EAAE,cAAc;IACpC,oBAAoB,EAAE,oCAAoC;IAC1D,oBAAoB,EAAE,oDAAoD;IAC1E,oBAAoB,EAAE,oCAAoC;IAC1D,sBAAsB,EACpB,2DAA2D;IAC7D,aAAa,EAAE,mBAAmB;CACnC,CAAC;AAEF,MAAa,gBAAiB,SAAQ,KAAK;IAGzC,YAA4B,IAAY;QACtC,MAAM,OAAO,GACX,oBAAoB,CAAC,IAAI,CAAC,IAAI,oBAAoB,CAAC,eAAe,CAAC,CAAC;QACtE,KAAK,CAAC,OAAO,CAAC,CAAC;QAHW,SAAI,GAAJ,IAAI,CAAQ;QAItC,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;QACvB,IAAI,CAAC,IAAI,GAAG,kBAAkB,CAAC;QAC/B,MAAM,CAAC,cAAc,CAAC,IAAI,EAAE,gBAAgB,CAAC,SAAS,CAAC,CAAC;IAC1D,CAAC;CACF;AAXD,4CAWC"}

package/dist/lib/entraID/decorators/current-user.decorator.d.ts

@@ -1 +0,0 @@
-export declare const CurrentUser: <T = Record<string, unknown>>(...dataOrPipes: unknown[]) => ParameterDecorator;

package/dist/lib/entraID/decorators/current-user.decorator.js

@@ -1,9 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.CurrentUser = void 0;
-const common_1 = require("@nestjs/common");
-exports.CurrentUser = (0, common_1.createParamDecorator)((_data, ctx) => {
-    const request = ctx.switchToHttp().getRequest();
-    return request.user;
-});
-//# sourceMappingURL=current-user.decorator.js.map

package/dist/lib/entraID/decorators/current-user.decorator.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"current-user.decorator.js","sourceRoot":"","sources":["../../../../src/lib/entraID/decorators/current-user.decorator.ts"],"names":[],"mappings":";;;AAAA,2CAAwE;AAE3D,QAAA,WAAW,GAAG,IAAA,6BAAoB,EAC7C,CAA8B,KAAc,EAAE,GAAqB,EAAK,EAAE;IACxE,MAAM,OAAO,GAAG,GAAG,CAAC,YAAY,EAAE,CAAC,UAAU,EAAE,CAAC;IAChD,OAAO,OAAO,CAAC,IAAS,CAAC;AAC3B,CAAC,CACF,CAAC"}

package/dist/lib/entraID/decorators/public.decorator.d.ts

@@ -1,2 +0,0 @@
-export declare const IS_PUBLIC_KEY = "isPublic";
-export declare const Public: () => import("@nestjs/common").CustomDecorator<string>;

package/dist/lib/entraID/decorators/public.decorator.js

@@ -1,8 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.Public = exports.IS_PUBLIC_KEY = void 0;
-const common_1 = require("@nestjs/common");
-exports.IS_PUBLIC_KEY = 'isPublic';
-const Public = () => (0, common_1.SetMetadata)(exports.IS_PUBLIC_KEY, true);
-exports.Public = Public;
-//# sourceMappingURL=public.decorator.js.map

package/dist/lib/entraID/decorators/public.decorator.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"public.decorator.js","sourceRoot":"","sources":["../../../../src/lib/entraID/decorators/public.decorator.ts"],"names":[],"mappings":";;;AAAA,2CAA6C;AAEhC,QAAA,aAAa,GAAG,UAAU,CAAC;AAEjC,MAAM,MAAM,GAAG,GAAG,EAAE,CAAC,IAAA,oBAAW,EAAC,qBAAa,EAAE,IAAI,CAAC,CAAC;AAAhD,QAAA,MAAM,UAA0C"}

package/dist/lib/entraID/decorators/roles.decorator.d.ts

@@ -1,2 +0,0 @@
-export declare const ROLES_KEY = "roles";
-export declare const Roles: (...roles: string[]) => import("@nestjs/common").CustomDecorator<string>;

package/dist/lib/entraID/decorators/roles.decorator.js

@@ -1,8 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.Roles = exports.ROLES_KEY = void 0;
-const common_1 = require("@nestjs/common");
-exports.ROLES_KEY = 'roles';
-const Roles = (...roles) => (0, common_1.SetMetadata)(exports.ROLES_KEY, roles);
-exports.Roles = Roles;
-//# sourceMappingURL=roles.decorator.js.map

package/dist/lib/entraID/decorators/roles.decorator.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"roles.decorator.js","sourceRoot":"","sources":["../../../../src/lib/entraID/decorators/roles.decorator.ts"],"names":[],"mappings":";;;AAAA,2CAA6C;AAEhC,QAAA,SAAS,GAAG,OAAO,CAAC;AAE1B,MAAM,KAAK,GAAG,CAAC,GAAG,KAAe,EAAE,EAAE,CAAC,IAAA,oBAAW,EAAC,iBAAS,EAAE,KAAK,CAAC,CAAC;AAA9D,QAAA,KAAK,SAAyD"}

package/dist/lib/entraID/entraID.constants.d.ts

@@ -1,2 +0,0 @@
-export declare const ENTRA_ID_CONFIG = "ENTRA_ID_CONFIG";
-export declare const MICROSOFT_AUTHORITY_URL = "https://login.microsoftonline.com";

package/dist/lib/entraID/entraID.constants.js

@@ -1,6 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.MICROSOFT_AUTHORITY_URL = exports.ENTRA_ID_CONFIG = void 0;
-exports.ENTRA_ID_CONFIG = 'ENTRA_ID_CONFIG';
-exports.MICROSOFT_AUTHORITY_URL = 'https://login.microsoftonline.com';
-//# sourceMappingURL=entraID.constants.js.map

package/dist/lib/entraID/entraID.constants.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"entraID.constants.js","sourceRoot":"","sources":["../../../src/lib/entraID/entraID.constants.ts"],"names":[],"mappings":";;;AAAa,QAAA,eAAe,GAAG,iBAAiB,CAAC;AACpC,QAAA,uBAAuB,GAAG,mCAAmC,CAAC"}

package/dist/lib/entraID/entraID.module.d.ts

@@ -1,14 +0,0 @@
-import { DynamicModule, ModuleMetadata, Type } from '@nestjs/common';
-import { InternalTokenService } from './internal-token/internal-token.service';
-import { ENTRA_ID_CONFIG } from './entraID.constants';
-import { EntraIDAsyncOptions, EntraIDSetup } from './types/entraID-module-init.types';
-export { ENTRA_ID_CONFIG };
-export type EntraIDModuleOptions = {
-    internalTokenService?: Type<InternalTokenService>;
-    imports?: ModuleMetadata['imports'];
-};
-export declare class EntraIDModule {
-    private static buildModule;
-    static forRoot(params: EntraIDSetup, options?: EntraIDModuleOptions): DynamicModule;
-    static forRootAsync(paramsAsync: EntraIDAsyncOptions, options?: EntraIDModuleOptions): DynamicModule;
-}

package/dist/lib/entraID/entraID.module.js

@@ -1,56 +0,0 @@
-"use strict";
-var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
-    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
-    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
-    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
-    return c > 3 && r && Object.defineProperty(target, key, r), r;
-};
-var EntraIDModule_1;
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.EntraIDModule = exports.ENTRA_ID_CONFIG = void 0;
-const common_1 = require("@nestjs/common");
-const entraID_service_1 = require("./entraID.service");
-const entra_auth_guard_1 = require("./guards/entra-auth.guard");
-const internal_token_service_1 = require("./internal-token/internal-token.service");
-const microsoft_module_1 = require("./microsoft/microsoft.module");
-const security_module_1 = require("./security/security.module");
-const entraID_constants_1 = require("./entraID.constants");
-Object.defineProperty(exports, "ENTRA_ID_CONFIG", { enumerable: true, get: function () { return entraID_constants_1.ENTRA_ID_CONFIG; } });
-let EntraIDModule = EntraIDModule_1 = class EntraIDModule {
-    static buildModule(configProvider, imports = [], options = {}) {
-        const tokenServiceClass = options.internalTokenService ?? internal_token_service_1.InternalTokenService;
-        return {
-            global: true,
-            module: EntraIDModule_1,
-            imports: [...imports, ...(options.imports ?? []), microsoft_module_1.MicrosoftModule, security_module_1.SecurityModule],
-            providers: [
-                configProvider,
-                tokenServiceClass,
-                { provide: internal_token_service_1.InternalTokenService, useExisting: tokenServiceClass },
-                entraID_service_1.EntraIDService,
-                entra_auth_guard_1.EntraAuthGuard,
-            ],
-            exports: [
-                entraID_constants_1.ENTRA_ID_CONFIG,
-                internal_token_service_1.InternalTokenService,
-                entraID_service_1.EntraIDService,
-                entra_auth_guard_1.EntraAuthGuard,
-            ],
-        };
-    }
-    static forRoot(params, options) {
-        return this.buildModule({ provide: entraID_constants_1.ENTRA_ID_CONFIG, useValue: params }, [], options);
-    }
-    static forRootAsync(paramsAsync, options) {
-        return this.buildModule({
-            provide: entraID_constants_1.ENTRA_ID_CONFIG,
-            useFactory: paramsAsync.useFactory,
-            inject: paramsAsync.inject ?? [],
-        }, paramsAsync.imports ?? [], options);
-    }
-};
-exports.EntraIDModule = EntraIDModule;
-exports.EntraIDModule = EntraIDModule = EntraIDModule_1 = __decorate([
-    (0, common_1.Module)({})
-], EntraIDModule);
-//# sourceMappingURL=entraID.module.js.map

package/dist/lib/entraID/entraID.module.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"entraID.module.js","sourceRoot":"","sources":["../../../src/lib/entraID/entraID.module.ts"],"names":[],"mappings":";;;;;;;;;;AAAA,2CAMwB;AACxB,uDAAmD;AACnD,gEAA2D;AAC3D,oFAA+E;AAC/E,mEAA+D;AAC/D,gEAA4D;AAC5D,2DAAsD;AAM7C,gGANA,mCAAe,OAMA;AAQjB,IAAM,aAAa,qBAAnB,MAAM,aAAa;IAChB,MAAM,CAAC,WAAW,CACxB,cAAwB,EACxB,UAAqC,EAAE,EACvC,UAAgC,EAAE;QAElC,MAAM,iBAAiB,GACrB,OAAO,CAAC,oBAAoB,IAAI,6CAAoB,CAAC;QAEvD,OAAO;YACL,MAAM,EAAE,IAAI;YACZ,MAAM,EAAE,eAAa;YACrB,OAAO,EAAE,CAAC,GAAG,OAAO,EAAE,GAAG,CAAC,OAAO,CAAC,OAAO,IAAI,EAAE,CAAC,EAAE,kCAAe,EAAE,gCAAc,CAAC;YAClF,SAAS,EAAE;gBACT,cAAc;gBACd,iBAAiB;gBACjB,EAAE,OAAO,EAAE,6CAAoB,EAAE,WAAW,EAAE,iBAAiB,EAAE;gBACjE,gCAAc;gBACd,iCAAc;aACf;YACD,OAAO,EAAE;gBACP,mCAAe;gBACf,6CAAoB;gBACpB,gCAAc;gBACd,iCAAc;aACf;SACF,CAAC;IACJ,CAAC;IAED,MAAM,CAAC,OAAO,CAAC,MAAoB,EAAE,OAA8B;QACjE,OAAO,IAAI,CAAC,WAAW,CACrB,EAAE,OAAO,EAAE,mCAAe,EAAE,QAAQ,EAAE,MAAM,EAAE,EAC9C,EAAE,EACF,OAAO,CACR,CAAC;IACJ,CAAC;IAED,MAAM,CAAC,YAAY,CACjB,WAAgC,EAChC,OAA8B;QAE9B,OAAO,IAAI,CAAC,WAAW,CACrB;YACE,OAAO,EAAE,mCAAe;YACxB,UAAU,EAAE,WAAW,CAAC,UAAU;YAClC,MAAM,EAAE,WAAW,CAAC,MAAM,IAAI,EAAE;SACjC,EACD,WAAW,CAAC,OAAO,IAAI,EAAE,EACzB,OAAO,CACR,CAAC;IACJ,CAAC;CACF,CAAA;AAnDY,sCAAa;wBAAb,aAAa;IADzB,IAAA,eAAM,EAAC,EAAE,CAAC;GACE,aAAa,CAmDzB"}

package/dist/lib/entraID/entraID.service.d.ts

@@ -1,25 +0,0 @@
-import { OnModuleInit } from '@nestjs/common';
-import { InternalTokenService } from './internal-token/internal-token.service';
-import { MicrosoftService } from './microsoft/microsoft.service';
-import { SecurityService } from './security/security.service';
-import { AuthResult, CallbackParams, CreateStateNonce, EntraUser, IdTokenPayload, UrlRedirectSso } from './types/entraID.type';
-import { EntraIDSetup } from './types/entraID-module-init.types';
-import { IEntraIDService } from './interfaces/entraID-service.interface';
-export declare class EntraIDService implements OnModuleInit, IEntraIDService {
-    protected readonly config: EntraIDSetup;
-    protected readonly microsoftService: MicrosoftService;
-    protected readonly securityService: SecurityService;
-    protected readonly internalTokenService: InternalTokenService;
-    private jwksClientRsa;
-    constructor(config: EntraIDSetup, microsoftService: MicrosoftService, securityService: SecurityService, internalTokenService: InternalTokenService);
-    onModuleInit(): void;
-    handleCallback(params: CallbackParams): Promise<AuthResult>;
-    refresh(refreshToken: string): Promise<AuthResult>;
-    logout(userId: string): Promise<void>;
-    initiateLogin(): Promise<UrlRedirectSso>;
-    decodeLocalToken(token: string): EntraUser;
-    protected verifyIdToken(idToken: string, nonce: string): Promise<IdTokenPayload>;
-    protected buildUserJwt(accessToken: string, email: string, name: string): Promise<AuthResult>;
-    protected createSignedState(): CreateStateNonce;
-    protected verifyStateAndReturnNonce(state: string): string;
-}

package/dist/lib/entraID/entraID.service.js

@@ -1,166 +0,0 @@
-"use strict";
-var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
-    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
-    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
-    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
-    return c > 3 && r && Object.defineProperty(target, key, r), r;
-};
-var __metadata = (this && this.__metadata) || function (k, v) {
-    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
-};
-var __param = (this && this.__param) || function (paramIndex, decorator) {
-    return function (target, key) { decorator(target, key, paramIndex); }
-};
-var __importDefault = (this && this.__importDefault) || function (mod) {
-    return (mod && mod.__esModule) ? mod : { "default": mod };
-};
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.EntraIDService = void 0;
-const common_1 = require("@nestjs/common");
-const jsonwebtoken_1 = __importDefault(require("jsonwebtoken"));
-const jwks_rsa_1 = __importDefault(require("jwks-rsa"));
-const entraID_constants_1 = require("./entraID.constants");
-const internal_token_service_1 = require("./internal-token/internal-token.service");
-const microsoft_service_1 = require("./microsoft/microsoft.service");
-const security_service_1 = require("./security/security.service");
-const entraID_exception_1 = require("./customError/entraID.exception");
-const crypto_utils_1 = require("./utils/crypto.utils");
-const STATE_TTL_MS = 600_000;
-let EntraIDService = class EntraIDService {
-    constructor(config, microsoftService, securityService, internalTokenService) {
-        this.config = config;
-        this.microsoftService = microsoftService;
-        this.securityService = securityService;
-        this.internalTokenService = internalTokenService;
-    }
-    onModuleInit() {
-        const { tenantID, clientID, clientSecret, stateSecret, redirectUri } = this.config;
-        if (!tenantID ||
-            !clientID ||
-            !clientSecret ||
-            !stateSecret ||
-            !redirectUri) {
-            throw new entraID_exception_1.EntraIDException('INVALID_CONFIG');
-        }
-        const authorityUrl = this.config.authorityUrl ?? entraID_constants_1.MICROSOFT_AUTHORITY_URL;
-        this.jwksClientRsa = (0, jwks_rsa_1.default)({
-            jwksUri: `${authorityUrl}/${tenantID}/discovery/v2.0/keys`,
-            cache: true,
-            cacheMaxAge: 10 * 60 * 1000,
-        });
-    }
-    async handleCallback(params) {
-        this.securityService.validateCallbackParams(params);
-        const nonce = this.verifyStateAndReturnNonce(params.state);
-        const tokens = await this.microsoftService.exchangeCode(params.code);
-        const payload = await this.verifyIdToken(tokens.id_token, nonce);
-        const email = payload.preferred_username ?? payload.email ?? payload.upn;
-        if (!email) {
-            throw new entraID_exception_1.EntraIDException('PAYLOAD_ID_TOKEN_INVALID');
-        }
-        const result = await this.buildUserJwt(tokens.access_token, email, payload.name);
-        return { ...result, refreshToken: tokens.refresh_token };
-    }
-    async refresh(refreshToken) {
-        const tokens = await this.microsoftService.refreshToken(refreshToken);
-        const result = await this.buildUserJwt(tokens.access_token, '', '');
-        return { ...result, refreshToken: tokens.refresh_token };
-    }
-    async logout(userId) {
-        await this.microsoftService.revokeUserSessions(userId);
-    }
-    async initiateLogin() {
-        const { state, nonce } = this.createSignedState();
-        const { clientID, redirectUri, tenantID, scope, prompt } = this.config;
-        const authorityUrl = this.config.authorityUrl ?? entraID_constants_1.MICROSOFT_AUTHORITY_URL;
-        const params = new URLSearchParams({
-            client_id: clientID,
-            response_type: 'code',
-            redirect_uri: redirectUri,
-            response_mode: 'form_post',
-            scope: scope ?? 'openid profile email User.Read GroupMember.Read.All',
-            state,
-            nonce,
-            prompt: prompt ?? 'select_account',
-        });
-        return `${authorityUrl}/${tenantID}/oauth2/v2.0/authorize?${params.toString()}`;
-    }
-    decodeLocalToken(token) {
-        return this.internalTokenService.verify(token);
-    }
-    async verifyIdToken(idToken, nonce) {
-        const decoded = jsonwebtoken_1.default.decode(idToken, { complete: true });
-        if (!decoded?.header) {
-            throw new entraID_exception_1.EntraIDException('TOKEN_INVALID_HEADER');
-        }
-        const publicKey = await crypto_utils_1.CryptoUtils.getPublicKeyRsa(decoded.header.kid, this.jwksClientRsa);
-        const expectedIssuers = [
-            `https://login.microsoftonline.com/${this.config.tenantID}/v2.0`,
-            `https://sts.windows.net/${this.config.tenantID}/`,
-        ];
-        const payload = jsonwebtoken_1.default.verify(idToken, publicKey, {
-            algorithms: ['RS256'],
-            audience: this.config.clientID,
-            issuer: expectedIssuers,
-        });
-        if (payload.nonce !== nonce) {
-            throw new entraID_exception_1.EntraIDException('INVALID_NONCE');
-        }
-        return payload;
-    }
-    async buildUserJwt(accessToken, email, name) {
-        const msUser = await this.microsoftService.getMe(accessToken);
-        let groups = [];
-        try {
-            const raw = await this.microsoftService.getMemberOf(accessToken);
-            groups = raw.filter((g) => !!g.displayName);
-        }
-        catch { }
-        const user = {
-            entraId: msUser.id,
-            email: msUser.mail ?? msUser.userPrincipalName ?? email,
-            name: msUser.displayName ?? name,
-            tenantId: this.config.tenantID,
-            matricula: msUser.employeeId,
-            groups,
-        };
-        const token = await this.internalTokenService.sign({ user, accessToken });
-        return { token, user };
-    }
-    createSignedState() {
-        const { stateSecret } = this.config;
-        const nonce = crypto_utils_1.CryptoUtils.generateHash();
-        const payload = Buffer.from(JSON.stringify({ nonce, ts: Date.now() })).toString('base64url');
-        const state = crypto_utils_1.CryptoUtils.createSignedPayloadWithHMAC(payload, stateSecret);
-        return { nonce, state };
-    }
-    verifyStateAndReturnNonce(state) {
-        const { stateSecret } = this.config;
-        const parts = state.split('.');
-        crypto_utils_1.CryptoUtils.verifyPayloadWithHMAC(parts, stateSecret);
-        const payload = parts[0];
-        let nonce;
-        let ts;
-        try {
-            const parsed = JSON.parse(Buffer.from(payload, 'base64url').toString());
-            nonce = parsed.nonce;
-            ts = parsed.ts;
-        }
-        catch {
-            throw new entraID_exception_1.EntraIDException('STATE_MISMATCH');
-        }
-        if (Date.now() - ts > STATE_TTL_MS) {
-            throw new entraID_exception_1.EntraIDException('STATE_MISMATCH');
-        }
-        return nonce;
-    }
-};
-exports.EntraIDService = EntraIDService;
-exports.EntraIDService = EntraIDService = __decorate([
-    (0, common_1.Injectable)(),
-    __param(0, (0, common_1.Inject)(entraID_constants_1.ENTRA_ID_CONFIG)),
-    __metadata("design:paramtypes", [Object, microsoft_service_1.MicrosoftService,
-        security_service_1.SecurityService,
-        internal_token_service_1.InternalTokenService])
-], EntraIDService);
-//# sourceMappingURL=entraID.service.js.map

package/dist/lib/entraID/entraID.service.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"entraID.service.js","sourceRoot":"","sources":["../../../src/lib/entraID/entraID.service.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;AAAA,2CAAkE;AAClE,gEAAwC;AACxC,wDAAkC;AAClC,2DAA+E;AAC/E,oFAA+E;AAC/E,qEAAiE;AACjE,kEAA8D;AAS9D,uEAAmE;AAEnE,uDAAmD;AAGnD,MAAM,YAAY,GAAG,OAAO,CAAC;AAGtB,IAAM,cAAc,GAApB,MAAM,cAAc;IAGzB,YAC8C,MAAoB,EAC7C,gBAAkC,EAClC,eAAgC,EAChC,oBAA0C;QAHjB,WAAM,GAAN,MAAM,CAAc;QAC7C,qBAAgB,GAAhB,gBAAgB,CAAkB;QAClC,oBAAe,GAAf,eAAe,CAAiB;QAChC,yBAAoB,GAApB,oBAAoB,CAAsB;IAC5D,CAAC;IAEJ,YAAY;QACV,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,YAAY,EAAE,WAAW,EAAE,WAAW,EAAE,GAClE,IAAI,CAAC,MAAM,CAAC;QAEd,IACE,CAAC,QAAQ;YACT,CAAC,QAAQ;YACT,CAAC,YAAY;YACb,CAAC,WAAW;YACZ,CAAC,WAAW,EACZ,CAAC;YACD,MAAM,IAAI,oCAAgB,CAAC,gBAAgB,CAAC,CAAC;QAC/C,CAAC;QAED,MAAM,YAAY,GAAG,IAAI,CAAC,MAAM,CAAC,YAAY,IAAI,2CAAuB,CAAC;QAEzE,IAAI,CAAC,aAAa,GAAG,IAAA,kBAAU,EAAC;YAC9B,OAAO,EAAE,GAAG,YAAY,IAAI,QAAQ,sBAAsB;YAC1D,KAAK,EAAE,IAAI;YACX,WAAW,EAAE,EAAE,GAAG,EAAE,GAAG,IAAI;SAC5B,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,cAAc,CAAC,MAAsB;QACzC,IAAI,CAAC,eAAe,CAAC,sBAAsB,CAAC,MAAM,CAAC,CAAC;QAEpD,MAAM,KAAK,GAAG,IAAI,CAAC,yBAAyB,CAAC,MAAM,CAAC,KAAM,CAAC,CAAC;QAC5D,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAAC,YAAY,CAAC,MAAM,CAAC,IAAK,CAAC,CAAC;QACtE,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;QAEjE,MAAM,KAAK,GAAG,OAAO,CAAC,kBAAkB,IAAI,OAAO,CAAC,KAAK,IAAI,OAAO,CAAC,GAAG,CAAC;QACzE,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,MAAM,IAAI,oCAAgB,CAAC,0BAA0B,CAAC,CAAC;QACzD,CAAC;QAED,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,YAAY,CACpC,MAAM,CAAC,YAAY,EACnB,KAAK,EACL,OAAO,CAAC,IAAI,CACb,CAAC;QACF,OAAO,EAAE,GAAG,MAAM,EAAE,YAAY,EAAE,MAAM,CAAC,aAAa,EAAE,CAAC;IAC3D,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,YAAoB;QAChC,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAAC,YAAY,CAAC,YAAY,CAAC,CAAC;QACtE,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,YAAY,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC;QACpE,OAAO,EAAE,GAAG,MAAM,EAAE,YAAY,EAAE,MAAM,CAAC,aAAa,EAAE,CAAC;IAC3D,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,MAAc;QACzB,MAAM,IAAI,CAAC,gBAAgB,CAAC,kBAAkB,CAAC,MAAM,CAAC,CAAC;IACzD,CAAC;IAED,KAAK,CAAC,aAAa;QACjB,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,IAAI,CAAC,iBAAiB,EAAE,CAAC;QAClD,MAAM,EAAE,QAAQ,EAAE,WAAW,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC,MAAM,CAAC;QACvE,MAAM,YAAY,GAAG,IAAI,CAAC,MAAM,CAAC,YAAY,IAAI,2CAAuB,CAAC;QAEzE,MAAM,MAAM,GAAG,IAAI,eAAe,CAAC;YACjC,SAAS,EAAE,QAAQ;YACnB,aAAa,EAAE,MAAM;YACrB,YAAY,EAAE,WAAW;YACzB,aAAa,EAAE,WAAW;YAC1B,KAAK,EAAE,KAAK,IAAI,qDAAqD;YACrE,KAAK;YACL,KAAK;YACL,MAAM,EAAE,MAAM,IAAI,gBAAgB;SACnC,CAAC,CAAC;QAEH,OAAO,GAAG,YAAY,IAAI,QAAQ,0BAA0B,MAAM,CAAC,QAAQ,EAAE,EAAE,CAAC;IAClF,CAAC;IAED,gBAAgB,CAAC,KAAa;QAC5B,OAAO,IAAI,CAAC,oBAAoB,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACjD,CAAC;IAES,KAAK,CAAC,aAAa,CAC3B,OAAe,EACf,KAAa;QAEb,MAAM,OAAO,GAAG,sBAAG,CAAC,MAAM,CAAC,OAAO,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAe,CAAC;QAEtE,IAAI,CAAC,OAAO,EAAE,MAAM,EAAE,CAAC;YACrB,MAAM,IAAI,oCAAgB,CAAC,sBAAsB,CAAC,CAAC;QACrD,CAAC;QAED,MAAM,SAAS,GAAG,MAAM,0BAAW,CAAC,eAAe,CACjD,OAAO,CAAC,MAAM,CAAC,GAAG,EAClB,IAAI,CAAC,aAAa,CACnB,CAAC;QAEF,MAAM,eAAe,GAA0B;YAC7C,qCAAqC,IAAI,CAAC,MAAM,CAAC,QAAQ,OAAO;YAChE,2BAA2B,IAAI,CAAC,MAAM,CAAC,QAAQ,GAAG;SACnD,CAAC;QAEF,MAAM,OAAO,GAAG,sBAAG,CAAC,MAAM,CAAC,OAAO,EAAE,SAAS,EAAE;YAC7C,UAAU,EAAE,CAAC,OAAO,CAAC;YACrB,QAAQ,EAAE,IAAI,CAAC,MAAM,CAAC,QAAS;YAC/B,MAAM,EAAE,eAAe;SACxB,CAA8B,CAAC;QAEhC,IAAI,OAAO,CAAC,KAAK,KAAK,KAAK,EAAE,CAAC;YAC5B,MAAM,IAAI,oCAAgB,CAAC,eAAe,CAAC,CAAC;QAC9C,CAAC;QAED,OAAO,OAAO,CAAC;IACjB,CAAC;IAES,KAAK,CAAC,YAAY,CAC1B,WAAmB,EACnB,KAAa,EACb,IAAY;QAEZ,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;QAE9D,IAAI,MAAM,GAA8B,EAAE,CAAC;QAC3C,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAAC,WAAW,CAAC,WAAW,CAAC,CAAC;YACjE,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC;QAC9C,CAAC;QAAC,MAAM,CAAC,CAAA,CAAC;QAEV,MAAM,IAAI,GAAc;YACtB,OAAO,EAAE,MAAM,CAAC,EAAE;YAClB,KAAK,EAAE,MAAM,CAAC,IAAI,IAAI,MAAM,CAAC,iBAAiB,IAAI,KAAK;YACvD,IAAI,EAAE,MAAM,CAAC,WAAW,IAAI,IAAI;YAChC,QAAQ,EAAE,IAAI,CAAC,MAAM,CAAC,QAAQ;YAC9B,SAAS,EAAE,MAAM,CAAC,UAAU;YAC5B,MAAM;SACP,CAAC;QAEF,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,oBAAoB,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC,CAAC;QAE1E,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;IACzB,CAAC;IAES,iBAAiB;QACzB,MAAM,EAAE,WAAW,EAAE,GAAG,IAAI,CAAC,MAAM,CAAC;QACpC,MAAM,KAAK,GAAG,0BAAW,CAAC,YAAY,EAAE,CAAC;QACzC,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CACzB,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC,CAC1C,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;QACxB,MAAM,KAAK,GAAG,0BAAW,CAAC,2BAA2B,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC;QAC5E,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC;IAC1B,CAAC;IAES,yBAAyB,CAAC,KAAa;QAC/C,MAAM,EAAE,WAAW,EAAE,GAAG,IAAI,CAAC,MAAM,CAAC;QACpC,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAE/B,0BAAW,CAAC,qBAAqB,CAAC,KAAK,EAAE,WAAW,CAAC,CAAC;QAEtD,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;QAEzB,IAAI,KAAa,CAAC;QAClB,IAAI,EAAU,CAAC;QACf,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CACvB,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC,QAAQ,EAAE,CACZ,CAAC;YACnC,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC;YACrB,EAAE,GAAG,MAAM,CAAC,EAAE,CAAC;QACjB,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,IAAI,oCAAgB,CAAC,gBAAgB,CAAC,CAAC;QAC/C,CAAC;QAED,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,YAAY,EAAE,CAAC;YACnC,MAAM,IAAI,oCAAgB,CAAC,gBAAgB,CAAC,CAAC;QAC/C,CAAC;QAED,OAAO,KAAK,CAAC;IACf,CAAC;CACF,CAAA;AAtLY,wCAAc;yBAAd,cAAc;IAD1B,IAAA,mBAAU,GAAE;IAKR,WAAA,IAAA,eAAM,EAAC,mCAAe,CAAC,CAAA;6CACa,oCAAgB;QACjB,kCAAe;QACV,6CAAoB;GAPpD,cAAc,CAsL1B"}

package/dist/lib/entraID/guards/entra-auth.guard.d.ts

@@ -1,21 +0,0 @@
-import { CanActivate, ExecutionContext } from '@nestjs/common';
-import type { Request } from 'express';
-import { InternalTokenService } from '../internal-token/internal-token.service';
-import { EntraUser } from '../types/entraID.type';
-import { Reflector } from '@nestjs/core';
-export declare class EntraAuthGuard implements CanActivate {
-    private readonly internalTokenService;
-    private readonly reflector;
-    constructor(internalTokenService: InternalTokenService, reflector: Reflector);
-    canActivate(context: ExecutionContext): Promise<boolean>;
-    protected isTokenRevoked(_payload: EntraUser, _request: Request): Promise<boolean>;
-    protected transformPayload(payload: EntraUser): Promise<unknown>;
-    protected extractToken(request: {
-        headers: {
-            authorization?: string;
-        };
-        cookies?: {
-            auth_token?: string;
-        };
-    }): string | undefined;
-}