tapimo 0.4.1 → 0.4.4
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.md +1 -1
- package/dist/ApiKey.d.ts +1 -9
- package/dist/ApiKey.d.ts.map +1 -1
- package/dist/ApiKey.js +2 -3
- package/dist/ApiKey.js.map +1 -1
- package/dist/ApiKeys.d.ts +53 -27
- package/dist/ApiKeys.d.ts.map +1 -1
- package/dist/ApiKeys.js +32 -17
- package/dist/ApiKeys.js.map +1 -1
- package/dist/App.d.ts +1990 -1442
- package/dist/App.d.ts.map +1 -1
- package/dist/App.js +23 -9
- package/dist/App.js.map +1 -1
- package/dist/Assets.d.ts +10 -0
- package/dist/Assets.d.ts.map +1 -1
- package/dist/Assets.js +4 -0
- package/dist/Assets.js.map +1 -1
- package/dist/Auth.d.ts +2 -1
- package/dist/Auth.d.ts.map +1 -1
- package/dist/Auth.js +2 -1
- package/dist/Auth.js.map +1 -1
- package/dist/Scope.d.ts +40 -15
- package/dist/Scope.d.ts.map +1 -1
- package/dist/Scope.js +44 -13
- package/dist/Scope.js.map +1 -1
- package/dist/admin/App.d.ts +560 -9
- package/dist/admin/App.d.ts.map +1 -1
- package/dist/admin/App.js +38 -6
- package/dist/admin/App.js.map +1 -1
- package/dist/admin/apps/api-keys.d.ts +10 -24
- package/dist/admin/apps/api-keys.d.ts.map +1 -1
- package/dist/admin/apps/api-keys.js +10 -3
- package/dist/admin/apps/api-keys.js.map +1 -1
- package/dist/admin/apps/organizations.d.ts +833 -0
- package/dist/admin/apps/organizations.d.ts.map +1 -0
- package/dist/admin/apps/organizations.js +733 -0
- package/dist/admin/apps/organizations.js.map +1 -0
- package/dist/admin/apps/scopes.d.ts +8 -0
- package/dist/admin/apps/scopes.d.ts.map +1 -1
- package/dist/admin/apps/verified-tokens.d.ts +57 -57
- package/dist/admin/ui.generated.d.ts +1 -1
- package/dist/admin/ui.generated.d.ts.map +1 -1
- package/dist/admin/ui.generated.js +53 -13
- package/dist/admin/ui.generated.js.map +1 -1
- package/dist/analytics/Analytics.d.ts +10 -0
- package/dist/analytics/Analytics.d.ts.map +1 -1
- package/dist/analytics/Analytics.js +8 -0
- package/dist/analytics/Analytics.js.map +1 -1
- package/dist/analytics/tables/requestEvents.d.ts +9 -0
- package/dist/analytics/tables/requestEvents.d.ts.map +1 -1
- package/dist/analytics/tables/requestEvents.js +14 -0
- package/dist/analytics/tables/requestEvents.js.map +1 -1
- package/dist/apps/data/App.d.ts +1304 -1304
- package/dist/apps/data/FundingRouteProviders.d.ts +4 -22
- package/dist/apps/data/FundingRouteProviders.d.ts.map +1 -1
- package/dist/apps/data/FundingRouteProviders.js +10 -120
- package/dist/apps/data/FundingRouteProviders.js.map +1 -1
- package/dist/apps/data/routes/activities.d.ts +38 -38
- package/dist/apps/data/routes/addresses.d.ts +24 -24
- package/dist/apps/data/routes/blocks.d.ts +39 -39
- package/dist/apps/data/routes/fee-amm.d.ts +20 -20
- package/dist/apps/data/routes/funding.js +7 -7
- package/dist/apps/data/routes/funding.js.map +1 -1
- package/dist/apps/data/routes/indexer.d.ts +5 -5
- package/dist/apps/data/routes/tokenlist.d.ts +12 -12
- package/dist/apps/data/routes/verified-tokens.d.ts +36 -36
- package/dist/apps/management/App.d.ts +808 -267
- package/dist/apps/management/App.d.ts.map +1 -1
- package/dist/apps/management/App.js +2 -2
- package/dist/apps/management/Billing.d.ts +3 -0
- package/dist/apps/management/Billing.d.ts.map +1 -1
- package/dist/apps/management/Billing.js +7 -2
- package/dist/apps/management/Billing.js.map +1 -1
- package/dist/apps/management/routes/api-keys.d.ts +116 -100
- package/dist/apps/management/routes/api-keys.d.ts.map +1 -1
- package/dist/apps/management/routes/api-keys.js +41 -30
- package/dist/apps/management/routes/api-keys.js.map +1 -1
- package/dist/apps/management/routes/billing.d.ts +182 -50
- package/dist/apps/management/routes/billing.d.ts.map +1 -1
- package/dist/apps/management/routes/billing.js +14 -14
- package/dist/apps/management/routes/billing.js.map +1 -1
- package/dist/apps/management/routes/invitations.d.ts +93 -20
- package/dist/apps/management/routes/invitations.d.ts.map +1 -1
- package/dist/apps/management/routes/invitations.js +12 -15
- package/dist/apps/management/routes/invitations.js.map +1 -1
- package/dist/apps/management/routes/members.d.ts +89 -18
- package/dist/apps/management/routes/members.d.ts.map +1 -1
- package/dist/apps/management/routes/members.js +10 -10
- package/dist/apps/management/routes/members.js.map +1 -1
- package/dist/apps/management/routes/orgs.d.ts +100 -40
- package/dist/apps/management/routes/orgs.d.ts.map +1 -1
- package/dist/apps/management/routes/orgs.js +19 -19
- package/dist/apps/management/routes/orgs.js.map +1 -1
- package/dist/apps/management/routes/projects.d.ts +122 -33
- package/dist/apps/management/routes/projects.d.ts.map +1 -1
- package/dist/apps/management/routes/projects.js +12 -13
- package/dist/apps/management/routes/projects.js.map +1 -1
- package/dist/apps/management/routes/scopes.d.ts +4 -18
- package/dist/apps/management/routes/scopes.d.ts.map +1 -1
- package/dist/apps/management/routes/scopes.js +6 -7
- package/dist/apps/management/routes/scopes.js.map +1 -1
- package/dist/apps/management/routes/usage.d.ts +63 -19
- package/dist/apps/management/routes/usage.d.ts.map +1 -1
- package/dist/apps/management/routes/usage.js +9 -10
- package/dist/apps/management/routes/usage.js.map +1 -1
- package/dist/apps/mcp.d.ts.map +1 -1
- package/dist/apps/mcp.js +38 -4
- package/dist/apps/mcp.js.map +1 -1
- package/dist/apps/relay/App.d.ts +26 -4
- package/dist/apps/relay/App.d.ts.map +1 -1
- package/dist/apps/relay/App.js +17 -14
- package/dist/apps/relay/App.js.map +1 -1
- package/dist/cloudflare.d.ts +2 -0
- package/dist/cloudflare.d.ts.map +1 -1
- package/dist/cloudflare.js +4 -0
- package/dist/cloudflare.js.map +1 -1
- package/dist/db/Db.d.ts +5 -3
- package/dist/db/Db.d.ts.map +1 -1
- package/dist/db/Db.js +52 -0
- package/dist/db/Db.js.map +1 -1
- package/dist/db/Schema.d.ts +13 -0
- package/dist/db/Schema.d.ts.map +1 -1
- package/dist/db/Schema.js +16 -1
- package/dist/db/Schema.js.map +1 -1
- package/dist/db/tables/adminAuditLogs.d.ts +27 -0
- package/dist/db/tables/adminAuditLogs.d.ts.map +1 -0
- package/dist/db/tables/adminAuditLogs.js +19 -0
- package/dist/db/tables/adminAuditLogs.js.map +1 -0
- package/dist/db/tables/invitations.d.ts +1 -1
- package/dist/db/tables/invitations.d.ts.map +1 -1
- package/dist/db/tables/memberships.d.ts +32 -4
- package/dist/db/tables/memberships.d.ts.map +1 -1
- package/dist/db/tables/memberships.js +31 -0
- package/dist/db/tables/memberships.js.map +1 -1
- package/dist/db/tables/organizations.d.ts +43 -1
- package/dist/db/tables/organizations.d.ts.map +1 -1
- package/dist/db/tables/organizations.js +103 -0
- package/dist/db/tables/organizations.js.map +1 -1
- package/dist/db/tables/projects.d.ts +25 -0
- package/dist/db/tables/projects.d.ts.map +1 -1
- package/dist/db/tables/projects.js +22 -0
- package/dist/db/tables/projects.js.map +1 -1
- package/dist/db/tables/webhookDeliveries.d.ts +26 -0
- package/dist/db/tables/webhookDeliveries.d.ts.map +1 -1
- package/dist/db/tables/webhookDeliveries.js +37 -0
- package/dist/db/tables/webhookDeliveries.js.map +1 -1
- package/dist/internal/Auth.d.ts +46 -40
- package/dist/internal/Auth.d.ts.map +1 -1
- package/dist/internal/Auth.js +118 -69
- package/dist/internal/Auth.js.map +1 -1
- package/dist/internal/Cursor.d.ts +1 -1
- package/dist/internal/Cursor.d.ts.map +1 -1
- package/dist/internal/Cursor.js +4 -0
- package/dist/internal/Cursor.js.map +1 -1
- package/dist/internal/EdgeCache.d.ts.map +1 -1
- package/dist/internal/EdgeCache.js +2 -0
- package/dist/internal/EdgeCache.js.map +1 -1
- package/dist/internal/Errors.d.ts +6 -0
- package/dist/internal/Errors.d.ts.map +1 -0
- package/dist/internal/Errors.js +16 -0
- package/dist/internal/Errors.js.map +1 -0
- package/dist/internal/FundingRoutes.d.ts +15 -43
- package/dist/internal/FundingRoutes.d.ts.map +1 -1
- package/dist/internal/FundingRoutes.js +8 -17
- package/dist/internal/FundingRoutes.js.map +1 -1
- package/dist/internal/Log.d.ts +16 -1
- package/dist/internal/Log.d.ts.map +1 -1
- package/dist/internal/Log.js +5 -3
- package/dist/internal/Log.js.map +1 -1
- package/dist/internal/Store.d.ts +61 -16
- package/dist/internal/Store.d.ts.map +1 -1
- package/dist/internal/Store.js +72 -17
- package/dist/internal/Store.js.map +1 -1
- package/dist/internal/Viem.d.ts +1 -1
- package/dist/internal/index.d.ts +27 -0
- package/dist/internal/index.d.ts.map +1 -0
- package/dist/internal/index.js +27 -0
- package/dist/internal/index.js.map +1 -0
- package/package.json +8 -3
- package/src/ApiKey.ts +2 -3
- package/src/ApiKeys.ts +95 -17
- package/src/App.test.ts +104 -6
- package/src/App.ts +29 -9
- package/src/Assets.ts +8 -0
- package/src/Auth.test-d.ts +36 -0
- package/src/Auth.ts +20 -1
- package/src/Client.test-d.ts +17 -17
- package/src/Scope.test.ts +34 -0
- package/src/Scope.ts +53 -17
- package/src/admin/App.test.ts +33 -3
- package/src/admin/App.ts +49 -14
- package/src/admin/apps/api-keys.ts +10 -3
- package/src/admin/apps/organizations.test.ts +455 -0
- package/src/admin/apps/organizations.ts +953 -0
- package/src/admin/apps/scopes.test.ts +10 -0
- package/src/admin/ui/plugin.ts +1 -1
- package/src/admin/ui/src/components/MobileProfile.tsx +2 -0
- package/src/admin/ui/src/components/ThemeToggle.tsx +20 -0
- package/src/admin/ui/src/lib/api-keys.ts +36 -19
- package/src/admin/ui/src/lib/config.ts +2 -3
- package/src/admin/ui/src/lib/organizations.test.ts +89 -0
- package/src/admin/ui/src/lib/organizations.ts +262 -0
- package/src/admin/ui/src/lib/query-client.ts +3 -1
- package/src/admin/ui/src/lib/theme.ts +57 -0
- package/src/admin/ui/src/routeTree.gen.ts +47 -4
- package/src/admin/ui/src/routes/__root.tsx +18 -3
- package/src/admin/ui/src/routes/api-keys.tsx +52 -7
- package/src/admin/ui/src/routes/index.tsx +1 -1
- package/src/admin/ui/src/routes/organizations.tsx +158 -0
- package/src/admin/ui/src/routes/organizations_.$orgId.tsx +710 -0
- package/src/admin/ui/src/start.ts +6 -0
- package/src/admin/ui.generated.ts +63 -13
- package/src/analytics/Analytics.ts +25 -0
- package/src/analytics/tables/requestEvents.ts +33 -0
- package/src/apps/composition.test.ts +82 -2
- package/src/apps/data/FundingRouteProviders.test.ts +37 -93
- package/src/apps/data/FundingRouteProviders.ts +14 -161
- package/src/apps/data/routes/funding.test.ts +7 -42
- package/src/apps/data/routes/funding.ts +8 -8
- package/src/apps/data/routes/indexer.test.ts +2 -2
- package/src/apps/data/routes/webhooks.test.ts +2 -2
- package/src/apps/management/App.ts +2 -2
- package/src/apps/management/Billing.ts +10 -2
- package/src/apps/management/routes/api-keys.test.ts +137 -1
- package/src/apps/management/routes/api-keys.ts +63 -38
- package/src/apps/management/routes/billing.ts +14 -14
- package/src/apps/management/routes/invitations.test.ts +102 -1
- package/src/apps/management/routes/invitations.ts +13 -15
- package/src/apps/management/routes/members.ts +10 -10
- package/src/apps/management/routes/orgs.test.ts +78 -16
- package/src/apps/management/routes/orgs.ts +21 -20
- package/src/apps/management/routes/projects.ts +12 -13
- package/src/apps/management/routes/scopes.test.ts +16 -0
- package/src/apps/management/routes/scopes.ts +6 -7
- package/src/apps/management/routes/usage.ts +9 -14
- package/src/apps/mcp.test.ts +72 -7
- package/src/apps/mcp.ts +46 -4
- package/src/apps/relay/App.test.ts +23 -18
- package/src/apps/relay/App.ts +35 -14
- package/src/cloudflare.ts +5 -0
- package/src/db/Db.ts +59 -3
- package/src/db/Schema.ts +20 -1
- package/src/db/tables/adminAuditLogs.ts +47 -0
- package/src/db/tables/invitations.ts +1 -1
- package/src/db/tables/memberships.ts +59 -3
- package/src/db/tables/organizations.ts +148 -1
- package/src/db/tables/projects.ts +47 -0
- package/src/db/tables/webhookDeliveries.ts +83 -0
- package/src/internal/Auth.test.ts +571 -23
- package/src/internal/Auth.ts +166 -94
- package/src/internal/Cursor.test.ts +10 -0
- package/src/internal/Cursor.ts +5 -1
- package/src/internal/EdgeCache.test.ts +11 -0
- package/src/internal/EdgeCache.ts +2 -0
- package/src/internal/FundingRoutes.test.ts +8 -8
- package/src/internal/FundingRoutes.ts +25 -29
- package/src/internal/Log.test.ts +41 -3
- package/src/internal/Log.ts +23 -4
- package/src/internal/Store.test-d.ts +15 -0
- package/src/internal/Store.test.ts +153 -2
- package/src/internal/Store.ts +157 -41
- package/src/internal/index.test.ts +34 -0
- package/src/internal/index.ts +26 -0
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"Auth.d.ts","sourceRoot":"","sources":["../../src/internal/Auth.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAA;AAC3B,OAAO,KAAK,EAAE,OAAO,IAAI,YAAY,EAAE,iBAAiB,EAAE,MAAM,MAAM,CAAA;AACtE,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAA;AAG9C,OAAO,KAAK,EAAE,SAAS,EAAe,MAAM,IAAI,WAAW,EAAE,MAAM,YAAY,CAAA;AAG/E,OAAO,EAAc,KAAK,MAAM,EAAE,MAAM,MAAM,CAAA;AAC9C,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,WAAW,CAAA;AAGvC,OAAO,KAAK,KAAK,GAAG,MAAM,WAAW,CAAA;AACrC,OAAO,KAAK,MAAM,MAAM,cAAc,CAAA;AAEtC,OAAO,KAAK,EAAE,MAAM,aAAa,CAAA;AACjC,OAAO,KAAK,KAAK,KAAK,MAAM,YAAY,CAAA;AAExC,OAAO,KAAK,WAAW,MAAM,6BAA6B,CAAA;AAG1D,OAAO,KAAK,aAAa,MAAM,+BAA+B,CAAA;AAC9D,OAAO,KAAK,QAAQ,MAAM,0BAA0B,CAAA;AACpD,OAAO,KAAK,SAAS,MAAM,gBAAgB,CAAA;AAC3C,OAAO,KAAK,QAAQ,MAAM,eAAe,CAAA;AAEzC,OAAO,KAAK,KAAK,MAAM,aAAa,CAAA;AAMpC,mDAAmD;AACnD,MAAM,MAAM,OAAO,GAAG;IACpB,4CAA4C;IAC5C,MAAM,CAAC,EACH;QACE;;;;WAIG;QACH,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,SAAS,CAAC,KAAK,CAAC,GAAG,SAAS,CAAA;QACxD,oEAAoE;QACpE,OAAO,EAAE,CAAC,CAAC,EAAE,YAAY,EAAE,KAAK,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,CAAC,MAAM,GAAG,IAAI,CAAC,CAAA;KAC3E,GACD,SAAS,CAAA;IACb,iCAAiC;IACjC,GAAG,CAAC,EAAE,GAAG,GAAG,SAAS,CAAA;IACrB;;;;;OAKG;IACH,eAAe,CAAC,EAAE,SAAS,CAAC,KAAK,GAAG,SAAS,CAAA;IAC7C,6CAA6C;IAC7C,SAAS,CAAC,EAAE,SAAS,CAAC,KAAK,GAAG,SAAS,CAAA;IACvC,4GAA4G;IAC5G,OAAO,CAAC,EAAE,OAAO,GAAG,SAAS,CAAA;IAC7B,oGAAoG;IACpG,UAAU,CAAC,EAAE;QAAE,SAAS,EAAE,MAAM,CAAA;KAAE,GAAG,SAAS,CAAA;CAC/C,CAAA;AAED,yDAAyD;AACzD,MAAM,MAAM,WAAW,GAAG;IACxB,SAAS,EAAE,SAAS,CAAA;CACrB,CAAA;AAED;;;;;GAKG;AACH,MAAM,MAAM,QAAQ,CAAC,GAAG,SAAS,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,EAAE,KAAK,SAAS,MAAM,GAAG,GAAG,IACzE,GAAG,SAAS,QAAQ,CAAC,GAAG,EAAE,MAAM,MAAM,SAAS,WAAW,EAAE,GAAG,CAAC,GAC5D,QAAQ,CAAC,UAAU,CAAC,MAAM,EAAE,KAAK,CAAC,GAClC,KAAK,CAAA;AAEX,wCAAwC;AACxC,MAAM,MAAM,OAAO,GAAG;IACpB,qCAAqC;IACrC,KAAK,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IAC1B,gDAAgD;IAChD,MAAM,EAAE,oBAAoB,GAAG,mBAAmB,CAAA;IAClD,6BAA6B;IAC7B,IAAI,EAAE,KAAK,CAAA;CACZ,CAAA;AAED,wDAAwD;AACxD,MAAM,MAAM,MAAM,GAAG,MAAM,CAAC,eAAe,CAAC,UAAU,CAAC,OAAO,KAAK,CAAC,MAAM,CAAC,CAAC,GAAG;IAC7E,mDAAmD;IACnD,WAAW,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IAChC,uDAAuD;IACvD,OAAO,CAAC,EAAE,IAAI,GAAG,MAAM,GAAG,SAAS,CAAA;IACnC,gDAAgD;IAChD,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,SAAS,CAAA;IACzC,4DAA4D;IAC5D,KAAK,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;CAC3B,CAAA;AAED,qDAAqD;AACrD,KAAK,GAAG,GAAG;IACT,oDAAoD;IACpD,MAAM,CAAC,OAAO,EAAE,MAAM,GAAG,iBAAiB,CAAA;CAC3C,CAAA;AAED;;;;;;;;GAQG;AACH,MAAM,MAAM,cAAc,GAAG;IAC3B,iFAAiF;IACjF,MAAM,CAAC,EACH;QACE,0EAA0E;QAC1E,SAAS,CAAC,EAAE,SAAS,CAAC,KAAK,GAAG,SAAS,CAAA;QACvC,uDAAuD;QACvD,MAAM,CAAC,EAAE,SAAS,KAAK,CAAC,EAAE,EAAE,GAAG,SAAS,CAAA;KACzC,GACD,OAAO,GACP,SAAS,CAAA;IACb,kFAAkF;IAClF,GAAG,CAAC,EACA;QACE,4CAA4C;QAC5C,MAAM,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;KAC5B,GACD,OAAO,GACP,SAAS,CAAA;IACb,+EAA+E;IAC/E,MAAM,CAAC,EACH;QACE,sDAAsD;QACtD,SAAS,CAAC,EAAE,SAAS,CAAC,KAAK,GAAG,SAAS,CAAA;KACxC,GACD,OAAO,GACP,SAAS,CAAA;IACb,+EAA+E;IAC/E,OAAO,CAAC,EAAE,OAAO,GAAG,SAAS,CAAA;CAC9B,CAAA;AAED,yCAAyC;AACzC,MAAM,MAAM,SAAS,GACjB;IACE,wBAAwB;IACxB,MAAM,EAAE,MAAM,CAAC,MAAM,CAAA;IACrB,wFAAwF;IACxF,WAAW,EAAE,MAAM,CAAC,MAAM,CAAC,aAAa,CAAC,CAAA;IACzC,oBAAoB;IACpB,EAAE,EAAE,MAAM,CAAA;IACV,8BAA8B;IAC9B,KAAK,EAAE,MAAM,CAAA;IACb,mDAAmD;IACnD,OAAO,CAAC,EAAE,OAAO,GAAG,SAAS,CAAA;IAC7B,mEAAmE;IACnE,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IAC9B,sBAAsB;IACtB,IAAI,EAAE,SAAS,CAAA;CAChB,GACD;IACE,6BAA6B;IAC7B,EAAE,EAAE,MAAM,CAAA;IACV,mDAAmD;IACnD,OAAO,CAAC,EAAE,OAAO,GAAG,SAAS,CAAA;IAC7B,sBAAsB;IACtB,IAAI,EAAE,QAAQ,CAAA;CACf,GACD;IACE,yDAAyD;IACzD,KAAK,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IAC1B,2CAA2C;IAC3C,EAAE,EAAE,MAAM,CAAA;IACV,sGAAsG;IACtG,QAAQ,EAAE;QACR,8EAA8E;QAC9E,QAAQ,EAAE,MAAM,CAAA;QAChB,iEAAiE;QACjE,OAAO,EAAE,MAAM,CAAA;KAChB,CAAA;IACD,mDAAmD;IACnD,OAAO,CAAC,EAAE,OAAO,GAAG,SAAS,CAAA;IAC7B,sBAAsB;IACtB,IAAI,EAAE,SAAS,CAAA;CAChB,GACD;IACE,2FAA2F;IAC3F,KAAK,EAAE,MAAM,CAAA;IACb,oBAAoB;IACpB,EAAE,EAAE,MAAM,CAAA;IACV,mDAAmD;IACnD,OAAO,CAAC,EAAE,OAAO,GAAG,SAAS,CAAA;IAC7B,sBAAsB;IACtB,IAAI,EAAE,aAAa,CAAA;CACpB,CAAA;AAEL,6CAA6C;AAC7C,MAAM,MAAM,SAAS,GAAG;IACtB,mDAAmD;IACnD,IAAI,EAAE,OAAO,CAAA;IACb,mFAAmF;IACnF,UAAU,CAAC,EAAE,WAAW,CAAC,MAAM,GAAG,SAAS,CAAA;IAC3C,0EAA0E;IAC1E,GAAG,CAAC,EAAE,aAAa,CAAC,MAAM,GAAG,SAAS,CAAA;IACtC,yCAAyC;IACzC,SAAS,CAAC,EAAE,SAAS,GAAG,SAAS,CAAA;IACjC,yEAAyE;IACzE,OAAO,CAAC,EAAE,QAAQ,CAAC,MAAM,GAAG,SAAS,CAAA;CACtC,CAAA;AAED,6DAA6D;AAC7D,wBAAgB,YAAY,CAAC,WAAW,SAAS,WAAW,EAAE,CAAC,EAAE,YAAY,CAAC,WAAW,CAAC;;mDAEzF;AAED;;;;;;;;GAQG;AACH,wBAAgB,SAAS,CAAC,OAAO,GAAE,SAAS,CAAC,OAAY,GAAG,iBAAiB,CAiC5E;AAED,MAAM,CAAC,OAAO,WAAW,SAAS,CAAC;IACjC,iCAAiC;IACjC,KAAK,OAAO,GAAG;QACb,oEAAoE;QACpE,IAAI,CAAC,EAAE,WAAW,CAAC,IAAI,GAAG,SAAS,CAAA;KACpC,CAAA;CACF;AAED;;;;;GAKG;AACH,wBAAgB,aAAa,IAAI,iBAAiB,CAoBjD;AAED;;;;GAIG;AACH,eAAO,MAAM,WAAW,EAAY,OAAO,CAAA;AAE3C,0FAA0F;AAC1F,wBAAgB,cAAc,CAAC,CAAC,EAAE,YAAY;;;;;;;gBAM7C;AAED,8FAA8F;AAC9F,wBAAgB,kBAAkB,CAAC,CAAC,EAAE,YAAY;;;;;;;gBAWjD;AAED,kGAAkG;AAClG,wBAAgB,UAAU,CAAC,WAAW,SAAS,WAAW,EACxD,CAAC,EAAE,YAAY,CAAC,WAAW,CAAC,GAC3B,WAAW,CAAC,MAAM,GAAG,SAAS,CAEhC;AAED,oGAAoG;AACpG,wBAAgB,GAAG,CAAC,WAAW,SAAS,WAAW,EACjD,CAAC,EAAE,YAAY,CAAC,WAAW,CAAC,GAC3B,aAAa,CAAC,MAAM,CAItB;AAED,mGAAmG;AACnG,wBAAgB,OAAO,CAAC,WAAW,SAAS,WAAW,EACrD,CAAC,EAAE,YAAY,CAAC,WAAW,CAAC,GAC3B,QAAQ,CAAC,MAAM,CAIjB;AAQD;;;GAGG;AACH,eAAO,MAAM,YAAY,EAAY,OAAO,CAAA;AAE5C,6FAA6F;AAC7F,wBAAgB,WAAW,CAAC,CAAC,EAAE,YAAY;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAkC1C;AAED,iGAAiG;AACjG,wBAAgB,qBAAqB,CAAC,CAAC,EAAE,YAAY;;;;;;;;;;;;;;;;;;;;;iBAwBpD;AAED,6FAA6F;AAC7F,wBAAgB,eAAe,CAAC,CAAC,EAAE,YAAY;;;;;;;;;;;;;;;;;;;;;;;;;;;;gFAM9C;AAED,4DAA4D;AAC5D,wBAAgB,UAAU,CACxB,QAAQ,SAAS,MAAM,GAAG,MAAM,EAChC,WAAW,SAAS,WAAW,GAAG,WAAW,EAC7C,OAAO,EAAE,UAAU,CAAC,OAAO,CAAC,QAAQ,CAAC,GAAG,iBAAiB,CAAC,WAAW,CAAC,CAqEvE;AAED,MAAM,CAAC,OAAO,WAAW,UAAU,CAAC;IAClC,yDAAyD;IACzD,KAAK,SAAS,CAAC,QAAQ,SAAS,MAAM,GAAG,MAAM,IAAI,OAAO,CACxD,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,cAAc,GAAG,KAAK,GAAG,SAAS,CAAC,CAC9D,CAAA;IAED,4CAA4C;IAC5C,KAAK,OAAO,CAAC,QAAQ,SAAS,MAAM,GAAG,MAAM,IAAI;QAC/C,2EAA2E;QAC3E,MAAM,CAAC,EACH;YACE;;;;;eAKG;YACH,KAAK,CAAC,EAAE,KAAK,GAAG,KAAK,GAAG,SAAS,CAAA;YACjC,kFAAkF;YAClF,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,SAAS,CAAC,KAAK,CAAC,GAAG,SAAS,CAAA;YACxD,+BAA+B;YAC/B,MAAM,CAAC,EAAE,SAAS,KAAK,CAAC,EAAE,EAAE,GAAG,SAAS,CAAA;SACzC,GACD,KAAK,GACL,SAAS,CAAA;QACb,gEAAgE;QAChE,GAAG,CAAC,EAAE,UAAU,GAAG,KAAK,GAAG,SAAS,CAAA;QACpC,oFAAoF;QACpF,SAAS,CAAC,EAAE,SAAS,CAAC,QAAQ,CAAC,GAAG,SAAS,CAAA;QAC3C,4EAA4E;QAC5E,MAAM,CAAC,EACH;YACE,mDAAmD;YACnD,SAAS,CAAC,EAAE,SAAS,CAAC,KAAK,GAAG,SAAS,CAAA;SACxC,GACD,KAAK,GACL,SAAS,CAAA;QACb,gCAAgC;QAChC,SAAS,CAAC,EAAE,SAAS,CAAC,MAAM,CAAC,OAAO,GAAG,SAAS,CAAA;QAChD,yGAAyG;QACzG,OAAO,CAAC,EAAE,OAAO,GAAG,SAAS,CAAA;QAC7B;;;;WAIG;QACH,UAAU,CAAC,EAAE;YAAE,MAAM,EAAE,MAAM,CAAA;SAAE,GAAG,SAAS,CAAA;KAC5C,CAAA;IAED,mDAAmD;IACnD,KAAK,KAAK,GAAG;QACX,kEAAkE;QAClE,WAAW,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;QAChC,6BAA6B;QAC7B,GAAG,CAAC,EAAE,CAAC,MAAM,MAAM,CAAC,GAAG,SAAS,CAAA;QAChC,yDAAyD;QACzD,GAAG,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;KACzB,CAAA;IAED,mDAAmD;IACnD,KAAK,UAAU,GAAG,IAAI,CAAC,WAAW,CAAC,UAAU,CAAC,OAAO,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,SAAS,CAAC,GAAG;QAClF,yEAAyE;QACzE,MAAM,CAAC,EAAE,WAAW,CAAC,UAAU,CAAC,OAAO,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,SAAS,CAAA;KACrE,CAAA;CACF;AA4FD;;;;;GAKG;AACH,wBAAgB,OAAO,CAAC,OAAO,EAAE,OAAO,CAAC,OAAO;;;;;EA4N/C;AAED,MAAM,CAAC,OAAO,WAAW,OAAO,CAAC;IAC/B,qDAAqD;IACrD,KAAK,OAAO,GAAG;QACb,IAAI,EACA,CAAC,IAAI,CAAC,UAAU,CAAC,OAAO,EAAE,SAAS,CAAC,GAAG;YACrC,wKAAwK;YACxK,OAAO,CAAC,EAAE,OAAO,GAAG,SAAS,CAAA;SAC9B,CAAC,GACF,KAAK,GACL,SAAS,CAAA;QACb,gDAAgD;QAChD,EAAE,EAAE,EAAE,CAAC,MAAM,CAAA;QACb,4DAA4D;QAC5D,EAAE,EAAE;YAAE,KAAK,EAAE,KAAK,CAAC,KAAK,CAAA;SAAE,GAAG,SAAS,CAAA;KACvC,CAAA;IAED,sFAAsF;IACtF,KAAK,OAAO,GACR,OAAO,GACP;QACE,2JAA2J;QAC3J,cAAc,CAAC,EAAE,SAAS,MAAM,EAAE,GAAG,SAAS,CAAA;QAC9C,yCAAyC;QACzC,MAAM,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;KAC5B,CAAA;IAEL,yCAAyC;IACzC,KAAK,MAAM,GAAG;QACZ,uGAAuG;QACvG,MAAM,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;QAC3B,sIAAsI;QACtI,MAAM,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;QAC3B,mGAAmG;QACnG,YAAY,CAAC,EAAE,OAAO,GAAG,SAAS,CAAA;QAClC,uDAAuD;QACvD,GAAG,CAAC,EAAE;YAAE,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;YAAC,OAAO,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;SAAE,GAAG,SAAS,CAAA;KACnF,CAAA;CACF;AAED,yEAAyE;AACzE,wBAAgB,MAAM,CAAC,OAAO,EAAE,cAAc,GAAG,iBAAiB,CAIjE;AAED,MAAM,CAAC,OAAO,WAAW,QAAQ,CAAC;IAChC;;;;;;OAMG;IACH,KAAK,UAAU,CAAC,MAAM,SAAS,WAAW,EAAE,KAAK,SAAS,MAAM,GAAG,GAAG,IAAI,MAAM,SAAS,MAAM,CAAC,GAC5F;SACG,IAAI,IAAI,MAAM,CAAC,GAAG,MAAM,GAAG;aACzB,MAAM,IAAI,MAAM,CAAC,CAAC,IAAI,CAAC,GACtB,IAAI,MAAM,EAAE,GAAG,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC,EAAE;SACrE,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,IAAI,MAAM,EAAE,CAAC;KAChC,CAAC,MAAM,CAAC,GAAG,MAAM,CAAC,GACnB,KAAK,CAAA;IAET,kEAAkE;IAClE,KAAK,MAAM,CAAC,MAAM,SAAS,MAAM,IAAI,MAAM,SAAS,IAAI,MAAM,KAAK,EAAE,GAAG,SAAS,CAAC,KAAK,CAAC,GAAG,KAAK,CAAA;IAEhG,sEAAsE;IACtE,KAAK,IAAI,CAAC,IAAI,SAAS,MAAM,IAAI,IAAI,SAAS,GAAG,MAAM,IAAI,IAAI,MAAM,IAAI,EAAE,GACvE,GAAG,OAAO,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,EAAE,GAChC,OAAO,CAAC,IAAI,CAAC,CAAA;IAEjB,sEAAsE;IACtE,KAAK,OAAO,CAAC,OAAO,SAAS,MAAM,IAAI,OAAO,SAAS,IAAI,MAAM,SAAS,IAAI,MAAM,EAAE,GAClF,IAAI,SAAS,EAAE,GACf,OAAO,CAAA;CACZ;AAqKD,0DAA0D;AAC1D,MAAM,MAAM,eAAe,GAAG;IAC5B,yCAAyC;IACzC,MAAM,EAAE,OAAO,CAAA;IACf,sFAAsF;IACtF,GAAG,EAAE,OAAO,CAAA;IACZ,8FAA8F;IAC9F,MAAM,EAAE,OAAO,CAAA;IACf,qGAAqG;IACrG,MAAM,EAAE,SAAS,KAAK,CAAC,EAAE,EAAE,CAAA;IAC3B,8CAA8C;IAC9C,OAAO,EAAE,OAAO,CAAA;CACjB,CAAA;AAED;;;;;;GAMG;AACH,wBAAgB,cAAc,CAAC,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,eAAe,CAAC,CA+BnF;AA+BD,2EAA2E;AAC3E,wBAAgB,OAAO,CAAC,WAAW,SAAS,WAAW,GAAG,WAAW,EACnE,MAAM,EAAE,OAAO,CAAC,MAAM,GACrB,iBAAiB,CAAC,WAAW,CAAC,CAuMhC;AAED,MAAM,CAAC,OAAO,WAAW,OAAO,CAAC;IAC/B,2BAA2B;IAC3B,KAAK,MAAM,GAAG;QACZ,6BAA6B;QAC7B,MAAM,CAAC,EACH;YACE,0EAA0E;YAC1E,SAAS,CAAC,EAAE,SAAS,CAAC,KAAK,GAAG,SAAS,CAAA;YACvC;;;;eAIG;YACH,MAAM,EAAE,SAAS,CAAC,KAAK,CAAC,EAAE,GAAG,OAAO,KAAK,CAAC,QAAQ,CAAC,EAAE,CAAA;SACtD,GACD,SAAS,CAAA;QACb,iCAAiC;QACjC,GAAG,CAAC,EACA;YACE,2BAA2B;YAC3B,MAAM,EAAE,MAAM,CAAA;SACf,GACD,SAAS,CAAA;QACb,4BAA4B;QAC5B,MAAM,CAAC,EACH;YACE,6CAA6C;YAC7C,SAAS,EAAE,SAAS,CAAC,KAAK,CAAA;SAC3B,GACD,SAAS,CAAA;QACb,sEAAsE;QACtE,OAAO,CAAC,EAAE,OAAO,GAAG,SAAS,CAAA;KAC9B,CAAA;CACF;AAsSD,sDAAsD;AACtD,MAAM,MAAM,gBAAgB,GAAG,OAAO,CAAC,SAAS,EAAE;IAAE,IAAI,EAAE,SAAS,CAAA;CAAE,CAAC,CAAA;AAEtE;;;;GAIG;AACH,MAAM,MAAM,OAAO,GAAG;IACpB,8EAA8E;IAC9E,OAAO,EAAE,CAAC,CAAC,EAAE,YAAY,KAAK,OAAO,CAAC,gBAAgB,GAAG,IAAI,CAAC,CAAA;CAC/D,CAAA;AAmED,gFAAgF;AAChF,qBAAa,qBAAsB,SAAQ,KAAK;IACrC,IAAI,SAA+B;IAC5C,YAAY,EAAE,EAAE,MAAM,EAErB;CACF"}
|
|
1
|
+
{"version":3,"file":"Auth.d.ts","sourceRoot":"","sources":["../../src/internal/Auth.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAA;AAC3B,OAAO,KAAK,EAAE,OAAO,IAAI,YAAY,EAAE,iBAAiB,EAAE,MAAM,MAAM,CAAA;AACtE,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAA;AAG9C,OAAO,KAAK,EAAE,SAAS,EAAe,MAAM,IAAI,WAAW,EAAE,MAAM,YAAY,CAAA;AAG/E,OAAO,EAAc,KAAK,MAAM,EAAE,MAAM,MAAM,CAAA;AAC9C,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,WAAW,CAAA;AAIvC,OAAO,KAAK,KAAK,GAAG,MAAM,WAAW,CAAA;AACrC,OAAO,KAAK,MAAM,MAAM,cAAc,CAAA;AAEtC,OAAO,KAAK,EAAE,MAAM,aAAa,CAAA;AACjC,OAAO,KAAK,KAAK,KAAK,MAAM,YAAY,CAAA;AAExC,OAAO,KAAK,WAAW,MAAM,6BAA6B,CAAA;AAG1D,OAAO,KAAK,aAAa,MAAM,+BAA+B,CAAA;AAC9D,OAAO,KAAK,QAAQ,MAAM,0BAA0B,CAAA;AACpD,OAAO,KAAK,SAAS,MAAM,gBAAgB,CAAA;AAC3C,OAAO,KAAK,QAAQ,MAAM,eAAe,CAAA;AAEzC,OAAO,KAAK,KAAK,MAAM,aAAa,CAAA;AAOpC,mDAAmD;AACnD,MAAM,MAAM,OAAO,GAAG;IACpB,4CAA4C;IAC5C,MAAM,CAAC,EACH;QACE;;;;WAIG;QACH,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,SAAS,CAAC,KAAK,CAAC,GAAG,SAAS,CAAA;QACxD,oEAAoE;QACpE,OAAO,EAAE,CAAC,CAAC,EAAE,YAAY,EAAE,KAAK,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,CAAC,MAAM,GAAG,IAAI,CAAC,CAAA;KAC3E,GACD,SAAS,CAAA;IACb,iCAAiC;IACjC,GAAG,CAAC,EAAE,UAAU,GAAG,SAAS,CAAA;IAC5B;;;;;OAKG;IACH,eAAe,CAAC,EAAE,SAAS,CAAC,KAAK,GAAG,SAAS,CAAA;IAC7C,6CAA6C;IAC7C,SAAS,CAAC,EAAE,SAAS,CAAC,KAAK,GAAG,SAAS,CAAA;IACvC,4GAA4G;IAC5G,OAAO,CAAC,EAAE,OAAO,GAAG,SAAS,CAAA;IAC7B,oGAAoG;IACpG,UAAU,CAAC,EAAE;QAAE,SAAS,EAAE,MAAM,CAAA;KAAE,GAAG,SAAS,CAAA;CAC/C,CAAA;AAED,yDAAyD;AACzD,MAAM,MAAM,WAAW,GAAG;IACxB,SAAS,EAAE,SAAS,CAAA;CACrB,CAAA;AAED;;;;;GAKG;AACH,MAAM,MAAM,QAAQ,CAAC,GAAG,SAAS,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,EAAE,KAAK,SAAS,MAAM,GAAG,GAAG,IACzE,GAAG,SAAS,QAAQ,CAAC,GAAG,EAAE,MAAM,MAAM,SAAS,WAAW,EAAE,GAAG,CAAC,GAC5D,QAAQ,CAAC,UAAU,CAAC,MAAM,EAAE,KAAK,CAAC,GAClC,KAAK,CAAA;AAEX,wCAAwC;AACxC,MAAM,MAAM,OAAO,GAAG;IACpB,qCAAqC;IACrC,KAAK,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IAC1B,gDAAgD;IAChD,MAAM,EAAE,oBAAoB,GAAG,mBAAmB,CAAA;IAClD,6BAA6B;IAC7B,IAAI,EAAE,KAAK,CAAA;CACZ,CAAA;AAED,iFAAiF;AACjF,MAAM,CAAC,OAAO,WAAW,GAAG,CAAC;IAC3B,iEAAiE;IACjE,KAAK,OAAO,GAAG,MAAM,CAAC,eAAe,CAAC,UAAU,CAAC,OAAO,KAAK,CAAC,OAAO,CAAC,CAAC,GAAG;QACxE,mDAAmD;QACnD,WAAW,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;QAChC,uDAAuD;QACvD,OAAO,CAAC,EAAE,IAAI,GAAG,MAAM,GAAG,SAAS,CAAA;QACnC,gDAAgD;QAChD,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,SAAS,CAAA;QACzC,4DAA4D;QAC5D,KAAK,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;KAC3B,CAAA;CACF;AAED,qDAAqD;AACrD,KAAK,UAAU,GAAG;IAChB,+CAA+C;IAC/C,SAAS,CAAC,EAAE,SAAS,CAAC,KAAK,GAAG,SAAS,CAAA;IACvC,6DAA6D;IAC7D,OAAO,CAAC,OAAO,EAAE,GAAG,CAAC,OAAO,GAAG,iBAAiB,CAAA;CACjD,CAAA;AAED;;;;;;;;GAQG;AACH,MAAM,MAAM,cAAc,GAAG;IAC3B,iFAAiF;IACjF,MAAM,CAAC,EACH;QACE,0EAA0E;QAC1E,SAAS,CAAC,EAAE,SAAS,CAAC,KAAK,GAAG,SAAS,CAAA;QACvC,uDAAuD;QACvD,MAAM,CAAC,EAAE,SAAS,KAAK,CAAC,EAAE,EAAE,GAAG,SAAS,CAAA;KACzC,GACD,OAAO,GACP,SAAS,CAAA;IACb,2FAA2F;IAC3F,GAAG,CAAC,EACA;QACE,+EAA+E;QAC/E,SAAS,CAAC,EAAE,SAAS,CAAC,KAAK,GAAG,SAAS,CAAA;QACvC,qDAAqD;QACrD,OAAO,CAAC,EAAE,GAAG,CAAC,OAAO,GAAG,SAAS,CAAA;KAClC,GACD,OAAO,GACP,SAAS,CAAA;IACb,+EAA+E;IAC/E,MAAM,CAAC,EACH;QACE,sDAAsD;QACtD,SAAS,CAAC,EAAE,SAAS,CAAC,KAAK,GAAG,SAAS,CAAA;KACxC,GACD,OAAO,GACP,SAAS,CAAA;IACb,+EAA+E;IAC/E,OAAO,CAAC,EAAE,OAAO,GAAG,SAAS,CAAA;CAC9B,CAAA;AAED,yCAAyC;AACzC,MAAM,MAAM,SAAS,GACjB;IACE,wBAAwB;IACxB,MAAM,EAAE,MAAM,CAAC,MAAM,CAAA;IACrB,wFAAwF;IACxF,WAAW,EAAE,MAAM,CAAC,MAAM,CAAC,aAAa,CAAC,CAAA;IACzC,oBAAoB;IACpB,EAAE,EAAE,MAAM,CAAA;IACV,8BAA8B;IAC9B,KAAK,EAAE,MAAM,CAAA;IACb,mDAAmD;IACnD,OAAO,CAAC,EAAE,OAAO,GAAG,SAAS,CAAA;IAC7B,2CAA2C;IAC3C,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IAC9B,sBAAsB;IACtB,IAAI,EAAE,SAAS,CAAA;CAChB,GACD;IACE,6BAA6B;IAC7B,EAAE,EAAE,MAAM,CAAA;IACV,mDAAmD;IACnD,OAAO,CAAC,EAAE,OAAO,GAAG,SAAS,CAAA;IAC7B,sBAAsB;IACtB,IAAI,EAAE,QAAQ,CAAA;CACf,GACD;IACE,yDAAyD;IACzD,KAAK,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IAC1B,2CAA2C;IAC3C,EAAE,EAAE,MAAM,CAAA;IACV,sGAAsG;IACtG,QAAQ,EAAE;QACR,8EAA8E;QAC9E,QAAQ,EAAE,MAAM,CAAA;QAChB,iEAAiE;QACjE,OAAO,EAAE,MAAM,CAAA;KAChB,CAAA;IACD,mDAAmD;IACnD,OAAO,CAAC,EAAE,OAAO,GAAG,SAAS,CAAA;IAC7B,sBAAsB;IACtB,IAAI,EAAE,SAAS,CAAA;CAChB,GACD;IACE,2FAA2F;IAC3F,KAAK,EAAE,MAAM,CAAA;IACb,oBAAoB;IACpB,EAAE,EAAE,MAAM,CAAA;IACV,mDAAmD;IACnD,OAAO,CAAC,EAAE,OAAO,GAAG,SAAS,CAAA;IAC7B,sBAAsB;IACtB,IAAI,EAAE,aAAa,CAAA;CACpB,CAAA;AAEL,6CAA6C;AAC7C,MAAM,MAAM,SAAS,GAAG;IACtB,mDAAmD;IACnD,IAAI,EAAE,OAAO,CAAA;IACb,yHAAyH;IACzH,UAAU,CAAC,EAAE,WAAW,CAAC,MAAM,GAAG,SAAS,CAAA;IAC3C,mGAAmG;IACnG,GAAG,CAAC,EAAE,aAAa,CAAC,MAAM,GAAG,SAAS,CAAA;IACtC,yCAAyC;IACzC,SAAS,CAAC,EAAE,SAAS,GAAG,SAAS,CAAA;IACjC,yEAAyE;IACzE,OAAO,CAAC,EAAE,QAAQ,CAAC,MAAM,GAAG,SAAS,CAAA;CACtC,CAAA;AAED,6DAA6D;AAC7D,wBAAgB,YAAY,CAAC,WAAW,SAAS,WAAW,EAAE,CAAC,EAAE,YAAY,CAAC,WAAW,CAAC;;mDAEzF;AAED;;GAEG;AACH,wBAAgB,SAAS,CAAC,OAAO,GAAE,SAAS,CAAC,OAAY,GAAG,iBAAiB,CAuC5E;AAED,MAAM,CAAC,OAAO,WAAW,SAAS,CAAC;IACjC,iCAAiC;IACjC,KAAK,OAAO,GAAG;QACb,kDAAkD;QAClD,IAAI,CAAC,EAAE,WAAW,CAAC,IAAI,GAAG,SAAS,CAAA;KACpC,CAAA;CACF;AAED;;GAEG;AACH,wBAAgB,aAAa,IAAI,iBAAiB,CA0CjD;AAED;;;;GAIG;AACH,eAAO,MAAM,WAAW,EAAY,OAAO,CAAA;AAE3C,0FAA0F;AAC1F,wBAAgB,cAAc,CAAC,CAAC,EAAE,YAAY;;;;;;;gBAM7C;AAED,8FAA8F;AAC9F,wBAAgB,kBAAkB,CAAC,CAAC,EAAE,YAAY;;;;;;;gBAWjD;AAED,+HAA+H;AAC/H,wBAAgB,UAAU,CAAC,WAAW,SAAS,WAAW,EACxD,CAAC,EAAE,YAAY,CAAC,WAAW,CAAC,GAC3B,WAAW,CAAC,MAAM,GAAG,SAAS,CAEhC;AAED,gHAAgH;AAChH,wBAAgB,GAAG,CAAC,WAAW,SAAS,WAAW,EACjD,CAAC,EAAE,YAAY,CAAC,WAAW,CAAC,GAC3B,aAAa,CAAC,MAAM,CAKtB;AAED,mGAAmG;AACnG,wBAAgB,OAAO,CAAC,WAAW,SAAS,WAAW,EACrD,CAAC,EAAE,YAAY,CAAC,WAAW,CAAC,GAC3B,QAAQ,CAAC,MAAM,CAIjB;AAQD;;;GAGG;AACH,eAAO,MAAM,YAAY,EAAY,OAAO,CAAA;AAE5C,6FAA6F;AAC7F,wBAAgB,WAAW,CAAC,CAAC,EAAE,YAAY;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAkC1C;AAED,iGAAiG;AACjG,wBAAgB,qBAAqB,CAAC,CAAC,EAAE,YAAY;;;;;;;;;;;;;;;;;;;;;iBAwBpD;AAED,6FAA6F;AAC7F,wBAAgB,eAAe,CAAC,CAAC,EAAE,YAAY;;;;;;;;;;;;;;;;;;;;;;;;;;;;gFAM9C;AAED,4DAA4D;AAC5D,wBAAgB,UAAU,CACxB,QAAQ,SAAS,MAAM,GAAG,MAAM,EAChC,WAAW,SAAS,WAAW,GAAG,WAAW,EAC7C,OAAO,EAAE,UAAU,CAAC,OAAO,CAAC,QAAQ,CAAC,GAAG,iBAAiB,CAAC,WAAW,CAAC,CAuFvE;AAED,MAAM,CAAC,OAAO,WAAW,UAAU,CAAC;IAClC,yDAAyD;IACzD,KAAK,SAAS,CAAC,QAAQ,SAAS,MAAM,GAAG,MAAM,IAAI,OAAO,CACxD,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,cAAc,GAAG,KAAK,GAAG,SAAS,CAAC,CAC9D,CAAA;IAED,4CAA4C;IAC5C,KAAK,OAAO,CAAC,QAAQ,SAAS,MAAM,GAAG,MAAM,IAAI;QAC/C,2EAA2E;QAC3E,MAAM,CAAC,EACH;YACE;;;;;eAKG;YACH,KAAK,CAAC,EAAE,KAAK,GAAG,KAAK,GAAG,SAAS,CAAA;YACjC,kFAAkF;YAClF,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,SAAS,CAAC,KAAK,CAAC,GAAG,SAAS,CAAA;YACxD,+BAA+B;YAC/B,MAAM,CAAC,EAAE,SAAS,KAAK,CAAC,EAAE,EAAE,GAAG,SAAS,CAAA;SACzC,GACD,KAAK,GACL,SAAS,CAAA;QACb,gEAAgE;QAChE,GAAG,CAAC,EAAE,UAAU,GAAG,KAAK,GAAG,SAAS,CAAA;QACpC,oFAAoF;QACpF,SAAS,CAAC,EAAE,SAAS,CAAC,QAAQ,CAAC,GAAG,SAAS,CAAA;QAC3C,4EAA4E;QAC5E,MAAM,CAAC,EACH;YACE,mDAAmD;YACnD,SAAS,CAAC,EAAE,SAAS,CAAC,KAAK,GAAG,SAAS,CAAA;SACxC,GACD,KAAK,GACL,SAAS,CAAA;QACb,gCAAgC;QAChC,SAAS,CAAC,EAAE,SAAS,CAAC,MAAM,CAAC,OAAO,GAAG,SAAS,CAAA;QAChD,8DAA8D;QAC9D,YAAY,CAAC,EAAE,KAAK,CAAC,OAAO,GAAG,SAAS,CAAA;QACxC,yGAAyG;QACzG,OAAO,CAAC,EAAE,OAAO,GAAG,SAAS,CAAA;QAC7B;;;;WAIG;QACH,UAAU,CAAC,EAAE;YAAE,MAAM,EAAE,MAAM,CAAA;SAAE,GAAG,SAAS,CAAA;KAC5C,CAAA;IAED,mDAAmD;IACnD,KAAK,KAAK,GAAG;QACX,kEAAkE;QAClE,WAAW,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;QAChC,6BAA6B;QAC7B,GAAG,CAAC,EAAE,CAAC,MAAM,MAAM,CAAC,GAAG,SAAS,CAAA;QAChC,yDAAyD;QACzD,GAAG,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;KACzB,CAAA;IAED,mDAAmD;IACnD,KAAK,UAAU,GAAG,IAAI,CAAC,WAAW,CAAC,UAAU,CAAC,OAAO,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,SAAS,CAAC,GAAG;QAClF,2EAA2E;QAC3E,SAAS,CAAC,EAAE,SAAS,CAAC,KAAK,GAAG,SAAS,CAAA;QACvC,0EAA0E;QAC1E,OAAO,CAAC,EAAE,WAAW,CAAC,UAAU,CAAC,OAAO,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,SAAS,CAAA;KACvE,CAAA;CACF;AA4FD;;;;;GAKG;AACH,wBAAgB,OAAO,CAAC,OAAO,EAAE,OAAO,CAAC,OAAO;;;;;EAgO/C;AAED,MAAM,CAAC,OAAO,WAAW,OAAO,CAAC;IAC/B,qDAAqD;IACrD,KAAK,OAAO,GAAG;QACb,IAAI,EACA,CAAC,IAAI,CAAC,UAAU,CAAC,OAAO,EAAE,cAAc,GAAG,SAAS,CAAC,GAAG;YACtD,wKAAwK;YACxK,OAAO,CAAC,EAAE,OAAO,GAAG,SAAS,CAAA;SAC9B,CAAC,GACF,KAAK,GACL,SAAS,CAAA;QACb,gDAAgD;QAChD,EAAE,EAAE,EAAE,CAAC,MAAM,CAAA;QACb,4DAA4D;QAC5D,EAAE,EAAE;YAAE,KAAK,EAAE,KAAK,CAAC,KAAK,CAAA;SAAE,GAAG,SAAS,CAAA;QACtC,8DAA8D;QAC9D,YAAY,EAAE,KAAK,CAAC,OAAO,CAAA;KAC5B,CAAA;IAED,sFAAsF;IACtF,KAAK,OAAO,GACR,OAAO,GACP;QACE,2JAA2J;QAC3J,cAAc,CAAC,EAAE,SAAS,MAAM,EAAE,GAAG,SAAS,CAAA;QAC9C,yCAAyC;QACzC,MAAM,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;KAC5B,CAAA;IAEL,yCAAyC;IACzC,KAAK,MAAM,GAAG;QACZ,uGAAuG;QACvG,MAAM,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;QAC3B,sIAAsI;QACtI,MAAM,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;QAC3B,mGAAmG;QACnG,YAAY,CAAC,EAAE,OAAO,GAAG,SAAS,CAAA;QAClC,uDAAuD;QACvD,GAAG,CAAC,EAAE;YAAE,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;YAAC,OAAO,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;SAAE,GAAG,SAAS,CAAA;KACnF,CAAA;CACF;AAED,yEAAyE;AACzE,wBAAgB,MAAM,CAAC,OAAO,EAAE,cAAc,GAAG,iBAAiB,CAIjE;AAED,MAAM,CAAC,OAAO,WAAW,QAAQ,CAAC;IAChC;;;;;;OAMG;IACH,KAAK,UAAU,CAAC,MAAM,SAAS,WAAW,EAAE,KAAK,SAAS,MAAM,GAAG,GAAG,IAAI,MAAM,SAAS,MAAM,CAAC,GAC5F;SACG,IAAI,IAAI,MAAM,CAAC,GAAG,MAAM,GAAG;aACzB,MAAM,IAAI,MAAM,CAAC,CAAC,IAAI,CAAC,GACtB,IAAI,MAAM,EAAE,GAAG,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC,EAAE;SACrE,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,IAAI,MAAM,EAAE,CAAC;KAChC,CAAC,MAAM,CAAC,GAAG,MAAM,CAAC,GACnB,KAAK,CAAA;IAET,kEAAkE;IAClE,KAAK,MAAM,CAAC,MAAM,SAAS,MAAM,IAAI,MAAM,SAAS,IAAI,MAAM,KAAK,EAAE,GAAG,SAAS,CAAC,KAAK,CAAC,GAAG,KAAK,CAAA;IAEhG,sEAAsE;IACtE,KAAK,IAAI,CAAC,IAAI,SAAS,MAAM,IAAI,IAAI,SAAS,GAAG,MAAM,IAAI,IAAI,MAAM,IAAI,EAAE,GACvE,GAAG,OAAO,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,EAAE,GAChC,OAAO,CAAC,IAAI,CAAC,CAAA;IAEjB,sEAAsE;IACtE,KAAK,OAAO,CAAC,OAAO,SAAS,MAAM,IAAI,OAAO,SAAS,IAAI,MAAM,SAAS,IAAI,MAAM,EAAE,GAClF,IAAI,SAAS,EAAE,GACf,OAAO,CAAA;CACZ;AAwKD,0DAA0D;AAC1D,MAAM,MAAM,eAAe,GAAG;IAC5B,yCAAyC;IACzC,MAAM,EAAE,OAAO,CAAA;IACf,sFAAsF;IACtF,GAAG,EAAE,OAAO,CAAA;IACZ,8FAA8F;IAC9F,MAAM,EAAE,OAAO,CAAA;IACf,qGAAqG;IACrG,MAAM,EAAE,SAAS,KAAK,CAAC,EAAE,EAAE,CAAA;IAC3B,8CAA8C;IAC9C,OAAO,EAAE,OAAO,CAAA;CACjB,CAAA;AAED;;;;;;GAMG;AACH,wBAAgB,cAAc,CAAC,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,eAAe,CAAC,CA+BnF;AA+BD,2EAA2E;AAC3E,wBAAgB,OAAO,CAAC,WAAW,SAAS,WAAW,GAAG,WAAW,EACnE,MAAM,EAAE,OAAO,CAAC,MAAM,GACrB,iBAAiB,CAAC,WAAW,CAAC,CA+MhC;AAED,MAAM,CAAC,OAAO,WAAW,OAAO,CAAC;IAC/B,2BAA2B;IAC3B,KAAK,MAAM,GAAG;QACZ,6BAA6B;QAC7B,MAAM,CAAC,EACH;YACE,0EAA0E;YAC1E,SAAS,CAAC,EAAE,SAAS,CAAC,KAAK,GAAG,SAAS,CAAA;YACvC;;;;eAIG;YACH,MAAM,EAAE,SAAS,CAAC,KAAK,CAAC,EAAE,GAAG,OAAO,KAAK,CAAC,QAAQ,CAAC,EAAE,CAAA;SACtD,GACD,SAAS,CAAA;QACb,iCAAiC;QACjC,GAAG,CAAC,EACA;YACE,+EAA+E;YAC/E,SAAS,CAAC,EAAE,SAAS,CAAC,KAAK,GAAG,SAAS,CAAA;YACvC,oCAAoC;YACpC,OAAO,EAAE,GAAG,CAAC,OAAO,CAAA;SACrB,GACD,SAAS,CAAA;QACb,4BAA4B;QAC5B,MAAM,CAAC,EACH;YACE,6CAA6C;YAC7C,SAAS,EAAE,SAAS,CAAC,KAAK,CAAA;SAC3B,GACD,SAAS,CAAA;QACb,sEAAsE;QACtE,OAAO,CAAC,EAAE,OAAO,GAAG,SAAS,CAAA;KAC9B,CAAA;CACF;AAwSD,sDAAsD;AACtD,MAAM,MAAM,gBAAgB,GAAG,OAAO,CAAC,SAAS,EAAE;IAAE,IAAI,EAAE,SAAS,CAAA;CAAE,CAAC,CAAA;AAEtE;;;;GAIG;AACH,MAAM,MAAM,OAAO,GAAG;IACpB,8EAA8E;IAC9E,OAAO,EAAE,CAAC,CAAC,EAAE,YAAY,KAAK,OAAO,CAAC,gBAAgB,GAAG,IAAI,CAAC,CAAA;CAC/D,CAAA;AAmED,gFAAgF;AAChF,qBAAa,qBAAsB,SAAQ,KAAK;IACrC,IAAI,SAA+B;IAC5C,YAAY,EAAE,EAAE,MAAM,EAErB;CACF"}
|
package/dist/internal/Auth.js
CHANGED
|
@@ -6,6 +6,7 @@ import { findTargetHandler } from 'hono/utils/handler';
|
|
|
6
6
|
import { decodeJwt } from 'jose';
|
|
7
7
|
import { Credential } from 'mppx';
|
|
8
8
|
import { Mppx, tempo } from 'mppx/hono';
|
|
9
|
+
import { Addresses } from 'viem/tempo';
|
|
9
10
|
import * as z from 'zod/mini';
|
|
10
11
|
import * as ApiKey from '../ApiKey.js';
|
|
11
12
|
import * as ApiKeys from '../ApiKeys.js';
|
|
@@ -23,18 +24,13 @@ import * as Scope from '../Scope.js';
|
|
|
23
24
|
import * as Users from '../db/tables/users.js';
|
|
24
25
|
import * as Viem from './Viem.js';
|
|
25
26
|
const policySymbol = Symbol('tempo-api.auth.policy');
|
|
27
|
+
const defaultMppRateLimit = { perMinute: 100 };
|
|
26
28
|
/** Reads the authenticated principal from a Hono context. */
|
|
27
29
|
export function getPrincipal(c) {
|
|
28
30
|
return c.get('principal') ?? null;
|
|
29
31
|
}
|
|
30
32
|
/**
|
|
31
|
-
* Guards
|
|
32
|
-
* are members of; the super admin reaches any. Missing or foreign
|
|
33
|
-
* organizations return `404`, so foreign org ids are indistinguishable from
|
|
34
|
-
* absent ones; a member below the required role gets `403` (the resource is
|
|
35
|
-
* visible to them, the action is not). The resolved organization and
|
|
36
|
-
* membership land on context — read them with {@link org} and
|
|
37
|
-
* {@link membership}.
|
|
33
|
+
* Guards `:orgId` routes and resolves the organization. Sessions require membership, API keys require ownership, and the super admin bypasses ownership.
|
|
38
34
|
*/
|
|
39
35
|
export function ensureOrg(options = {}) {
|
|
40
36
|
const { role: minimum = 'member' } = options;
|
|
@@ -50,13 +46,17 @@ export function ensureOrg(options = {}) {
|
|
|
50
46
|
if (!orgId)
|
|
51
47
|
return notFound();
|
|
52
48
|
const principal = getPrincipal(c);
|
|
53
|
-
if (principal?.type !== '
|
|
49
|
+
if (principal?.type !== 'api_key' &&
|
|
50
|
+
principal?.type !== 'session' &&
|
|
51
|
+
principal?.type !== 'super_admin')
|
|
52
|
+
return notFound();
|
|
53
|
+
if (principal.type === 'api_key' && principal.orgId !== orgId)
|
|
54
54
|
return notFound();
|
|
55
55
|
const db = Db.get(contextDb(c));
|
|
56
56
|
const record = await Organizations.get(db, orgId);
|
|
57
57
|
if (!record)
|
|
58
58
|
return notFound();
|
|
59
|
-
if (principal.type
|
|
59
|
+
if (principal.type === 'session') {
|
|
60
60
|
const member = await Memberships.get(db, orgId, principal.id);
|
|
61
61
|
if (!member)
|
|
62
62
|
return notFound();
|
|
@@ -74,10 +74,7 @@ export function ensureOrg(options = {}) {
|
|
|
74
74
|
});
|
|
75
75
|
}
|
|
76
76
|
/**
|
|
77
|
-
* Guards project
|
|
78
|
-
* which must run first. Projects resolve only within the scoped organization;
|
|
79
|
-
* missing or cross-org projects return `404`. The resolved project lands on
|
|
80
|
-
* context — read it with {@link project}.
|
|
77
|
+
* Guards `:projectId` routes and resolves the project. Flat routes authorize against its organization; nested routes preserve the scope from {@link ensureOrg}.
|
|
81
78
|
*/
|
|
82
79
|
export function ensureProject() {
|
|
83
80
|
// Typed loosely (like {@link policy}) so route chains keep their inferred
|
|
@@ -91,12 +88,35 @@ export function ensureProject() {
|
|
|
91
88
|
const projectId = c.req.param('projectId');
|
|
92
89
|
if (!projectId)
|
|
93
90
|
return notFound();
|
|
91
|
+
const principal = getPrincipal(c);
|
|
92
|
+
if (principal?.type !== 'api_key' &&
|
|
93
|
+
principal?.type !== 'session' &&
|
|
94
|
+
principal?.type !== 'super_admin')
|
|
95
|
+
return notFound();
|
|
96
|
+
const db = Db.get(contextDb(c));
|
|
97
|
+
const record = await Projects.get(db, projectId);
|
|
98
|
+
if (!record)
|
|
99
|
+
return notFound();
|
|
94
100
|
const scoped = c.get('org');
|
|
95
|
-
if (
|
|
101
|
+
if (scoped) {
|
|
102
|
+
if (record.orgId !== scoped.id)
|
|
103
|
+
return notFound();
|
|
104
|
+
c.set('project', record);
|
|
105
|
+
await next();
|
|
106
|
+
return undefined;
|
|
107
|
+
}
|
|
108
|
+
if (principal.type === 'api_key' && principal.orgId !== record.orgId)
|
|
96
109
|
return notFound();
|
|
97
|
-
const
|
|
98
|
-
if (!
|
|
110
|
+
const organization = await Organizations.get(db, record.orgId);
|
|
111
|
+
if (!organization)
|
|
99
112
|
return notFound();
|
|
113
|
+
if (principal.type === 'session') {
|
|
114
|
+
const member = await Memberships.get(db, record.orgId, principal.id);
|
|
115
|
+
if (!member)
|
|
116
|
+
return notFound();
|
|
117
|
+
c.set('membership', member);
|
|
118
|
+
}
|
|
119
|
+
c.set('org', organization);
|
|
100
120
|
c.set('project', record);
|
|
101
121
|
await next();
|
|
102
122
|
return undefined;
|
|
@@ -118,7 +138,7 @@ export function ensureOrgError(c) {
|
|
|
118
138
|
}
|
|
119
139
|
/** Typed project-scope error response for Hono client inference. Never reached at runtime. */
|
|
120
140
|
export function ensureProjectError(c) {
|
|
121
|
-
//
|
|
141
|
+
// Nested project routes run the org scope first, so either not-found can surface.
|
|
122
142
|
const code = c.req.header('tempo-narrow-scope-code') === 'organization_not_found'
|
|
123
143
|
? 'organization_not_found'
|
|
124
144
|
: 'project_not_found';
|
|
@@ -128,22 +148,22 @@ export function ensureProjectError(c) {
|
|
|
128
148
|
status: 404,
|
|
129
149
|
});
|
|
130
150
|
}
|
|
131
|
-
/** Reads the caller's membership resolved by
|
|
151
|
+
/** Reads the caller's membership resolved by the organization or project guard; `undefined` for API keys and `super_admin`. */
|
|
132
152
|
export function membership(c) {
|
|
133
153
|
return c.get('membership');
|
|
134
154
|
}
|
|
135
|
-
/** Reads the organization resolved by
|
|
155
|
+
/** Reads the organization resolved by the organization or project guard; throws when neither middleware ran. */
|
|
136
156
|
export function org(c) {
|
|
137
157
|
const record = c.get('org');
|
|
138
158
|
if (!record)
|
|
139
|
-
throw new Error('`
|
|
159
|
+
throw new Error('`ensureOrg` or `ensureProject` must run before reading the organization');
|
|
140
160
|
return record;
|
|
141
161
|
}
|
|
142
162
|
/** Reads the project resolved by {@link ensureProject}; throws when the middleware did not run. */
|
|
143
163
|
export function project(c) {
|
|
144
164
|
const record = c.get('project');
|
|
145
165
|
if (!record)
|
|
146
|
-
throw new Error('`
|
|
166
|
+
throw new Error('`ensureProject` must run before reading the project');
|
|
147
167
|
return record;
|
|
148
168
|
}
|
|
149
169
|
// Reads the app's database source from request context (set by `App.create`
|
|
@@ -226,7 +246,7 @@ export function paidAccessError(c) {
|
|
|
226
246
|
}
|
|
227
247
|
/** Creates auth middleware for protected OpenAPI routes. */
|
|
228
248
|
export function middleware(options) {
|
|
229
|
-
const {
|
|
249
|
+
const { rateLimit: mppRateLimit = defaultMppRateLimit, session: session_ = {}, ...mpp } = options.mpp === false ? {} : (options.mpp ?? {});
|
|
230
250
|
const defaults = laneDefaults(options);
|
|
231
251
|
// Default-deny: no lanes open until a route grants them via `policy`.
|
|
232
252
|
// Otherwise the `super_admin` principal bypasses lane checks entirely.
|
|
@@ -241,7 +261,9 @@ export function middleware(options) {
|
|
|
241
261
|
const resolve = (() => {
|
|
242
262
|
const uncached = (c, token) => {
|
|
243
263
|
const kv = contextKv(c);
|
|
244
|
-
return kv
|
|
264
|
+
return kv
|
|
265
|
+
? ApiKeys.resolve(kv.store, token, { scopeCatalog: options.scopeCatalog })
|
|
266
|
+
: Promise.resolve(null);
|
|
245
267
|
};
|
|
246
268
|
if (options.apiKey === false || options.apiKey?.cache === false)
|
|
247
269
|
return uncached;
|
|
@@ -263,11 +285,23 @@ export function middleware(options) {
|
|
|
263
285
|
...(options.mpp === false
|
|
264
286
|
? {}
|
|
265
287
|
: {
|
|
266
|
-
mpp:
|
|
267
|
-
|
|
268
|
-
|
|
269
|
-
|
|
270
|
-
|
|
288
|
+
mpp: {
|
|
289
|
+
rateLimit: mppRateLimit,
|
|
290
|
+
session: Mppx.create({
|
|
291
|
+
...mpp,
|
|
292
|
+
// Defaults only; global `session` options may override, including
|
|
293
|
+
// enabling same-route HEAD bootstrap.
|
|
294
|
+
methods: [
|
|
295
|
+
tempo.session({
|
|
296
|
+
amount: '0.0001',
|
|
297
|
+
bootstrap: false,
|
|
298
|
+
currency: Addresses.pathUsd,
|
|
299
|
+
unitType: 'request',
|
|
300
|
+
...session_,
|
|
301
|
+
}),
|
|
302
|
+
],
|
|
303
|
+
}).session,
|
|
304
|
+
},
|
|
271
305
|
}),
|
|
272
306
|
rateLimit: RateLimit.memory(options.rateLimit),
|
|
273
307
|
...(options.session ? { session: options.session } : {}),
|
|
@@ -356,7 +390,7 @@ function handlerError(description) {
|
|
|
356
390
|
* disables both.
|
|
357
391
|
*/
|
|
358
392
|
export function install(options) {
|
|
359
|
-
const { db, kv } = options;
|
|
393
|
+
const { db, kv, scopeCatalog } = options;
|
|
360
394
|
const { session: options_session, ...options_middleware } = options.auth === false ? {} : (options.auth ?? {});
|
|
361
395
|
if (options_session && !kv)
|
|
362
396
|
throw new Error('`auth.session` requires the `kv` state store: sessions and sign-in challenges persist there.'); // prettier-ignore
|
|
@@ -545,7 +579,11 @@ export function install(options) {
|
|
|
545
579
|
})();
|
|
546
580
|
const middleware_ = options.auth === false
|
|
547
581
|
? undefined
|
|
548
|
-
: middleware({
|
|
582
|
+
: middleware({
|
|
583
|
+
...options_middleware,
|
|
584
|
+
...(app ? { session: app.session } : {}),
|
|
585
|
+
scopeCatalog,
|
|
586
|
+
});
|
|
549
587
|
return { app, middleware: middleware_ };
|
|
550
588
|
}
|
|
551
589
|
/** Creates route middleware that contributes an auth policy override. */
|
|
@@ -570,7 +608,7 @@ function laneDefaults(options) {
|
|
|
570
608
|
// catalog scopes via `Auth.policy`.
|
|
571
609
|
scopes: apiKey?.scopes ?? [Scope.wildcard],
|
|
572
610
|
},
|
|
573
|
-
mpp: {
|
|
611
|
+
mpp: { session: {} },
|
|
574
612
|
public: { rateLimit: public_?.rateLimit ?? { perMinute: 60 } },
|
|
575
613
|
session: true,
|
|
576
614
|
};
|
|
@@ -593,8 +631,8 @@ function resolvePolicy(base, defaults, overrides, description) {
|
|
|
593
631
|
// The OpenAPI summary/description rides along as the payment-challenge
|
|
594
632
|
// description. It is metadata, not a policy override, so it only applies when
|
|
595
633
|
// the paid lane is actually enabled and has no explicit description already.
|
|
596
|
-
if (mpp && description !== undefined && mpp.
|
|
597
|
-
mpp = {
|
|
634
|
+
if (mpp && description !== undefined && mpp.session.description === undefined)
|
|
635
|
+
mpp = { ...mpp, session: { ...mpp.session, description } };
|
|
598
636
|
// A lane-less policy stays enforced for super admin; only an explicit
|
|
599
637
|
// `false` override opts a route out of auth entirely.
|
|
600
638
|
return {
|
|
@@ -625,7 +663,10 @@ function resolveMppLane(current, override, default_) {
|
|
|
625
663
|
if (override === true)
|
|
626
664
|
return current ?? default_;
|
|
627
665
|
const base = current ?? default_;
|
|
628
|
-
return {
|
|
666
|
+
return {
|
|
667
|
+
rateLimit: override.rateLimit ?? base.rateLimit,
|
|
668
|
+
session: { ...base.session, ...override.session },
|
|
669
|
+
};
|
|
629
670
|
}
|
|
630
671
|
function resolvePublicLane(current, override, default_) {
|
|
631
672
|
if (override === undefined)
|
|
@@ -755,12 +796,18 @@ export function require(policy) {
|
|
|
755
796
|
return createMiddleware(async (c, next) => {
|
|
756
797
|
const auth = c.get('auth');
|
|
757
798
|
const credential = getApiKeyCredential(c);
|
|
758
|
-
|
|
759
|
-
//
|
|
760
|
-
|
|
761
|
-
|
|
762
|
-
|
|
763
|
-
|
|
799
|
+
const hasQueryApiKey = new URL(c.req.url).searchParams.has('key');
|
|
800
|
+
// Auth owns `key`; strict route schemas must not validate it.
|
|
801
|
+
stripApiKeyQuery(c);
|
|
802
|
+
const proceed = async () => {
|
|
803
|
+
await next();
|
|
804
|
+
// Query credential responses must not enter shared caches.
|
|
805
|
+
const cacheControl = c.res.headers.get('Cache-Control')?.toLowerCase();
|
|
806
|
+
if (hasQueryApiKey &&
|
|
807
|
+
!cacheControl?.includes('no-store') &&
|
|
808
|
+
!cacheControl?.includes('private'))
|
|
809
|
+
c.res.headers.set('Cache-Control', 'private');
|
|
810
|
+
};
|
|
764
811
|
if (credential === false)
|
|
765
812
|
return jsonError(c, {
|
|
766
813
|
code: 'api_key_malformed',
|
|
@@ -773,7 +820,7 @@ export function require(policy) {
|
|
|
773
820
|
// It must never reach KV resolution or scope/quota checks.
|
|
774
821
|
if (auth.superAdmin && ApiKey.hash(credential.token) === auth.superAdmin.tokenHash) {
|
|
775
822
|
c.set('principal', { actor: 'super_admin', id: 'super_admin', type: 'super_admin' });
|
|
776
|
-
return
|
|
823
|
+
return proceed();
|
|
777
824
|
}
|
|
778
825
|
const apiKey = await auth.apiKey?.resolve(c, credential.token);
|
|
779
826
|
if (!apiKey) {
|
|
@@ -784,7 +831,7 @@ export function require(policy) {
|
|
|
784
831
|
const session = await resolveSession(c, auth);
|
|
785
832
|
if (session) {
|
|
786
833
|
c.set('principal', session);
|
|
787
|
-
return
|
|
834
|
+
return proceed();
|
|
788
835
|
}
|
|
789
836
|
}
|
|
790
837
|
return jsonError(c, {
|
|
@@ -835,7 +882,7 @@ export function require(policy) {
|
|
|
835
882
|
// can't buy past the throttle: sandbox is non-billable testnet.
|
|
836
883
|
const throttled = apiKey.environment === 'sandbox' && apiKey.billingActive !== true;
|
|
837
884
|
if (hasPayment && !throttled)
|
|
838
|
-
return requirePayment(c,
|
|
885
|
+
return requirePayment(c, proceed, {
|
|
839
886
|
auth,
|
|
840
887
|
payment: { reason: 'api_key_over_quota', type: 'mpp' },
|
|
841
888
|
policy,
|
|
@@ -867,7 +914,7 @@ export function require(policy) {
|
|
|
867
914
|
// it must activate billing to lift the ceiling, not pay per request.
|
|
868
915
|
if (throttled)
|
|
869
916
|
return rateLimitExceeded(c, result);
|
|
870
|
-
return requirePaymentOrRateLimit(c,
|
|
917
|
+
return requirePaymentOrRateLimit(c, proceed, {
|
|
871
918
|
auth,
|
|
872
919
|
payment: { reason: 'api_key_over_quota', type: 'mpp' },
|
|
873
920
|
policy,
|
|
@@ -876,7 +923,7 @@ export function require(policy) {
|
|
|
876
923
|
});
|
|
877
924
|
}
|
|
878
925
|
}
|
|
879
|
-
return
|
|
926
|
+
return proceed();
|
|
880
927
|
}
|
|
881
928
|
// Cookie sessions carry no Authorization credential; resolve the session
|
|
882
929
|
// lane before the public/paid lanes so signed-in browsers skip anonymous
|
|
@@ -885,13 +932,13 @@ export function require(policy) {
|
|
|
885
932
|
const session = await resolveSession(c, auth);
|
|
886
933
|
if (session) {
|
|
887
934
|
c.set('principal', session);
|
|
888
|
-
return
|
|
935
|
+
return proceed();
|
|
889
936
|
}
|
|
890
937
|
}
|
|
891
938
|
const publicPrincipal = principalFromPublic(c);
|
|
892
939
|
if (hasPayment) {
|
|
893
940
|
c.set('principal', publicPrincipal);
|
|
894
|
-
return requirePayment(c,
|
|
941
|
+
return requirePayment(c, proceed, {
|
|
895
942
|
auth,
|
|
896
943
|
payment: { reason: 'public_over_quota', type: 'mpp' },
|
|
897
944
|
policy,
|
|
@@ -908,10 +955,10 @@ export function require(policy) {
|
|
|
908
955
|
setRateLimitHeaders(c, result);
|
|
909
956
|
if (!result || result.allowed) {
|
|
910
957
|
c.set('principal', publicPrincipal);
|
|
911
|
-
return
|
|
958
|
+
return proceed();
|
|
912
959
|
}
|
|
913
960
|
c.set('principal', publicPrincipal);
|
|
914
|
-
return requirePaymentOrRateLimit(c,
|
|
961
|
+
return requirePaymentOrRateLimit(c, proceed, {
|
|
915
962
|
auth,
|
|
916
963
|
payment: { reason: 'public_over_quota', type: 'mpp' },
|
|
917
964
|
policy,
|
|
@@ -921,7 +968,7 @@ export function require(policy) {
|
|
|
921
968
|
}
|
|
922
969
|
if (isPaymentEnabled(auth, policy)) {
|
|
923
970
|
c.set('principal', publicPrincipal);
|
|
924
|
-
return requirePayment(c,
|
|
971
|
+
return requirePayment(c, proceed, {
|
|
925
972
|
auth,
|
|
926
973
|
payment: { reason: 'public_over_quota', type: 'mpp' },
|
|
927
974
|
policy,
|
|
@@ -1007,10 +1054,8 @@ function getApiKeyCredential(c) {
|
|
|
1007
1054
|
const header = c.req.header('tempo-api-key');
|
|
1008
1055
|
if (header)
|
|
1009
1056
|
return { token: header };
|
|
1010
|
-
//
|
|
1011
|
-
//
|
|
1012
|
-
// carrying only a payment scheme falls through to the deprecated lanes below
|
|
1013
|
-
// (which find nothing) and resolves to no API-key credential.
|
|
1057
|
+
// Bearer supports clients unable to set the canonical header. Payment
|
|
1058
|
+
// credentials belong to MPP and must pass through untouched.
|
|
1014
1059
|
const authorization = c.req.header('authorization');
|
|
1015
1060
|
if (authorization && !Credential.extractPaymentScheme(authorization)) {
|
|
1016
1061
|
const match = /^Bearer\s+(.+)$/i.exec(authorization);
|
|
@@ -1018,25 +1063,17 @@ function getApiKeyCredential(c) {
|
|
|
1018
1063
|
return false;
|
|
1019
1064
|
return { token: match[1] };
|
|
1020
1065
|
}
|
|
1021
|
-
//
|
|
1022
|
-
// keep authenticating: the `x-api-key` header and the `key` query parameter.
|
|
1066
|
+
// `x-api-key` remains a deprecated compatibility header.
|
|
1023
1067
|
const legacyHeader = c.req.header('x-api-key');
|
|
1024
1068
|
if (legacyHeader)
|
|
1025
1069
|
return { token: legacyHeader };
|
|
1026
|
-
const
|
|
1027
|
-
if (
|
|
1028
|
-
return { token:
|
|
1070
|
+
const apiKey = c.req.query('key');
|
|
1071
|
+
if (apiKey)
|
|
1072
|
+
return { token: apiKey };
|
|
1029
1073
|
return null;
|
|
1030
1074
|
}
|
|
1031
|
-
/**
|
|
1032
|
-
|
|
1033
|
-
* been read for authentication. Route query schemas are strict
|
|
1034
|
-
* (`z.strictObject`), so leaving `key` in the query string would make the
|
|
1035
|
-
* downstream validator reject the request as `query_invalid`. Stripping it
|
|
1036
|
-
* keeps the legacy `?key=...` auth lane working on strict-query endpoints
|
|
1037
|
-
* (e.g. `GET /v1/tokens`).
|
|
1038
|
-
*/
|
|
1039
|
-
function stripLegacyAuthQuery(c) {
|
|
1075
|
+
/** Removes the reserved auth query parameter before route validation. */
|
|
1076
|
+
function stripApiKeyQuery(c) {
|
|
1040
1077
|
const url = new URL(c.req.url);
|
|
1041
1078
|
if (!url.searchParams.has('key'))
|
|
1042
1079
|
return;
|
|
@@ -1112,7 +1149,19 @@ function principalFromPublic(c) {
|
|
|
1112
1149
|
};
|
|
1113
1150
|
}
|
|
1114
1151
|
async function requirePayment(c, next, options) {
|
|
1115
|
-
|
|
1152
|
+
if (hasPaymentCredential(c)) {
|
|
1153
|
+
const result = await consumeRateLimit(options.auth, {
|
|
1154
|
+
key: `mpp:${options.principal.type}:${options.principal.id}`,
|
|
1155
|
+
limit: options.policy.mpp?.rateLimit ?? options.auth.mpp?.rateLimit ?? defaultMppRateLimit,
|
|
1156
|
+
});
|
|
1157
|
+
if (result) {
|
|
1158
|
+
setRateLimitHeaders(c, result);
|
|
1159
|
+
c.header('RateLimit-Scope', 'mpp');
|
|
1160
|
+
if (!result.allowed)
|
|
1161
|
+
return rateLimitExceeded(c, result);
|
|
1162
|
+
}
|
|
1163
|
+
}
|
|
1164
|
+
const middleware = options.auth.mpp?.session(options.policy.mpp?.session ?? {});
|
|
1116
1165
|
if (!middleware)
|
|
1117
1166
|
return jsonError(c, {
|
|
1118
1167
|
code: 'payment_required',
|