unleash-server 7.5.1 → 7.6.2

package/dist/lib/middleware/api-token-middleware.test.js

@@ -83,6 +83,41 @@ test('should add user if known token', async () => {
     expect(req.header).toHaveBeenCalled();
     expect(req.user).toBe(apiUser);
 });
+test('with flag set should set user if known token', async () => {
+    const localConfig = createTestConfig({
+        getLogger,
+        authentication: {
+            enableApiToken: true,
+        },
+        experimental: {
+            flags: {
+                onlyFeatureTokensWithFeatureAPIs: true,
+            },
+        },
+    });
+    const apiUser = new ApiUser({
+        tokenName: 'default',
+        permissions: [CLIENT],
+        project: ALL,
+        environment: 'development',
+        type: ApiTokenType.BACKEND,
+        secret: 'some-known-token',
+    });
+    const apiTokenService = {
+        getUserForToken: vi.fn().mockReturnValue(apiUser),
+    };
+    const func = apiTokenMiddleware(localConfig, { apiTokenService });
+    const cb = vi.fn();
+    const req = {
+        header: vi.fn().mockReturnValue('*:development.some-known-token'),
+        user: undefined,
+        path: '/api/client',
+    };
+    await func(req, undefined, cb);
+    expect(cb).toHaveBeenCalled();
+    expect(req.header).toHaveBeenCalled();
+    expect(req.user).toBe(apiUser);
+});
 test.each([
     ApiTokenType.CLIENT,
     ApiTokenType.BACKEND,
@@ -190,29 +225,4 @@ test('should call next if apiTokenService throws x2', async () => {
     await func(req, undefined, cb);
     expect(cb).toHaveBeenCalled();
 });
-test('should add user if client token and /edge/metrics', async () => {
-    const apiUser = new ApiUser({
-        tokenName: 'default',
-        permissions: [CLIENT],
-        project: ALL,
-        environment: ALL,
-        type: ApiTokenType.BACKEND,
-        secret: 'a',
-    });
-    const apiTokenService = {
-        getUserForToken: vi.fn().mockReturnValue(apiUser),
-    };
-    const func = apiTokenMiddleware(config, { apiTokenService });
-    const cb = vi.fn();
-    const req = {
-        header: vi.fn().mockReturnValue('some-known-token'),
-        user: undefined,
-        path: '/edge/metrics',
-        method: 'POST',
-    };
-    await func(req, undefined, cb);
-    expect(cb).toHaveBeenCalled();
-    expect(req.header).toHaveBeenCalled();
-    expect(req.user).toBe(apiUser);
-});
 //# sourceMappingURL=api-token-middleware.test.js.map

package/dist/lib/middleware/api-token-middleware.test.js.map

@@ -1 +1 @@
-{"version":3,"file":"api-token-middleware.test.js","sourceRoot":"","sources":["../../../src/lib/middleware/api-token-middleware.test.ts"],"names":[],"mappings":"AAAA,OAAO,SAAS,MAAM,kCAAkC,CAAC;AACzD,OAAO,EAAE,MAAM,EAAE,MAAM,yBAAyB,CAAC;AACjD,OAAO,EAAE,gBAAgB,EAAE,MAAM,kCAAkC,CAAC;AACpE,OAAO,OAAO,MAAM,sBAAsB,CAAC;AAC3C,OAAO,EAAE,GAAG,EAAE,MAAM,8BAA8B,CAAC;AACnD,OAAO,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AACjD,OAAO,kBAAkB,EAAE,EACvB,wBAAwB,GAC3B,MAAM,2BAA2B,CAAC;AAGnC,OAAO,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAE5B,IAAI,MAAsB,CAAC;AAE3B,UAAU,CAAC,GAAG,EAAE;IACZ,MAAM,GAAG,gBAAgB,CAAC;QACtB,SAAS;QACT,cAAc,EAAE;YACZ,cAAc,EAAE,IAAI;SACvB;KACJ,CAAC,CAAC;AACP,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,oEAAoE,EAAE,KAAK,IAAI,EAAE;IAClF,MAAM,eAAe,GAAG;QACpB,eAAe,EAAE,EAAE,CAAC,EAAE,EAAE;KACG,CAAC;IAEhC,MAAM,IAAI,GAAG,kBAAkB,CAAC,MAAM,EAAE,EAAE,eAAe,EAAE,CAAC,CAAC;IAE7D,MAAM,EAAE,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC;IAEnB,MAAM,GAAG,GAAG;QACR,MAAM,EAAE,EAAE,CAAC,EAAE,EAAE;KAClB,CAAC;IAEF,MAAM,IAAI,CAAC,GAAG,EAAE,SAAS,EAAE,EAAE,CAAC,CAAC;IAE/B,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC;IAC5C,MAAM,CAAC,EAAE,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC;AACxC,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,sCAAsC,EAAE,KAAK,IAAI,EAAE;IACpD,MAAM,eAAe,GAAG;QACpB,eAAe,EAAE,EAAE,CAAC,EAAE,EAAE;KACG,CAAC;IAEhC,MAAM,IAAI,GAAG,kBAAkB,CAAC,MAAM,EAAE,EAAE,eAAe,EAAE,CAAC,CAAC;IAE7D,MAAM,EAAE,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC;IAEnB,MAAM,GAAG,GAAG;QACR,MAAM,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,eAAe,CAAC,YAAY,CAAC;QAC7C,IAAI,EAAE,SAAS;KAClB,CAAC;IAEF,MAAM,IAAI,CAAC,GAAG,EAAE,SAAS,EAAE,EAAE,CAAC,CAAC;IAE/B,MAAM,CAAC,EAAE,CAAC,CAAC,gBAAgB,EAAE,CAAC;IAC9B,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,gBAAgB,EAAE,CAAC;IACtC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,CAAC;AACjC,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,yDAAyD,EAAE,KAAK,IAAI,EAAE;IACvE,MAAM,eAAe,GAAG;QACpB,eAAe,EAAE,EAAE,CAAC,EAAE,EAAE;KACG,CAAC;IAEhC,MAAM,IAAI,GAAG,kBAAkB,CAAC,MAAM,EAAE,EAAE,eAAe,EAAE,CAAC,CAAC;IAE7D,MAAM,EAAE,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC;IAEnB,MAAM,GAAG,GAAG;QACR,MAAM,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,eAAe,CAAC,iBAAiB,CAAC;QAClD,IAAI,EAAE,SAAS;KAClB,CAAC;IAEF,MAAM,IAAI,CAAC,GAAG,EAAE,SAAS,EAAE,EAAE,CAAC,CAAC;IAE/B,MAAM,CAAC,eAAe,CAAC,eAAe,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;IAC/D,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,gBAAgB,EAAE,CAAC;IACtC,MAAM,CAAC,EAAE,CAAC,CAAC,gBAAgB,EAAE,CAAC;IAC9B,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,CAAC;AACjC,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,gCAAgC,EAAE,KAAK,IAAI,EAAE;IAC9C,MAAM,OAAO,GAAG,IAAI,OAAO,CAAC;QACxB,SAAS,EAAE,SAAS;QACpB,WAAW,EAAE,CAAC,MAAM,CAAC;QACrB,OAAO,EAAE,GAAG;QACZ,WAAW,EAAE,GAAG;QAChB,IAAI,EAAE,YAAY,CAAC,OAAO;QAC1B,MAAM,EAAE,GAAG;KACd,CAAC,CAAC;IACH,MAAM,eAAe,GAAG;QACpB,eAAe,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,eAAe,CAAC,OAAO,CAAC;KACtB,CAAC;IAEhC,MAAM,IAAI,GAAG,kBAAkB,CAAC,MAAM,EAAE,EAAE,eAAe,EAAE,CAAC,CAAC;IAE7D,MAAM,EAAE,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC;IAEnB,MAAM,GAAG,GAAG;QACR,MAAM,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,eAAe,CAAC,kBAAkB,CAAC;QACnD,IAAI,EAAE,SAAS;QACf,IAAI,EAAE,aAAa;KACtB,CAAC;IAEF,MAAM,IAAI,CAAC,GAAG,EAAE,SAAS,EAAE,EAAE,CAAC,CAAC;IAE/B,MAAM,CAAC,EAAE,CAAC,CAAC,gBAAgB,EAAE,CAAC;IAC9B,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,gBAAgB,EAAE,CAAC;IACtC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;AACnC,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,IAAI,CAAC;IACN,YAAY,CAAC,MAAM;IACnB,YAAY,CAAC,OAAO;CACvB,CAAC,CAAC,2DAA2D,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE;IAC3E,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;IAErB,MAAM,OAAO,GAAG,IAAI,OAAO,CAAC;QACxB,SAAS,EAAE,SAAS;QACpB,WAAW,EAAE,CAAC,MAAM,CAAC;QACrB,OAAO,EAAE,GAAG;QACZ,WAAW,EAAE,GAAG;QAChB,IAAI;QACJ,MAAM,EAAE,GAAG;KACd,CAAC,CAAC;IAEH,MAAM,eAAe,GAAG;QACpB,eAAe,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,eAAe,CAAC,OAAO,CAAC;KACtB,CAAC;IAEhC,MAAM,IAAI,GAAG,kBAAkB,CAAC,MAAM,EAAE,EAAE,eAAe,EAAE,CAAC,CAAC;IAC7D,MAAM,EAAE,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC;IAEnB,MAAM,GAAG,GAAG;QACR,MAAM,EAAE,CAAC,IAAa,EAAE,EAAE,CAAC,CAAC;YACxB,IAAI,EAAE,CAAC,IAAa,EAAE,EAAE;gBACpB,MAAM,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;gBAC1B,MAAM,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,EAAE,OAAO,EAAE,wBAAwB,EAAE,CAAC,CAAC;YAChE,CAAC;SACJ,CAAC;KACL,CAAC;IAEF,MAAM,GAAG,GAAG;QACR,MAAM,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,eAAe,CAAC,kBAAkB,CAAC;QACnD,IAAI,EAAE,SAAS;QACf,IAAI,EAAE,YAAY;KACrB,CAAC;IAEF,MAAM,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,CAAC,CAAC;IAEzB,MAAM,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;IAClC,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,gBAAgB,EAAE,CAAC;IACtC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,aAAa,EAAE,CAAC;AACrC,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,iCAAiC,EAAE,KAAK,IAAI,EAAE;IAC/C,MAAM,OAAO,GAAG,IAAI,OAAO,CAAC;QACxB,SAAS,EAAE,SAAS;QACpB,WAAW,EAAE,CAAC,MAAM,CAAC;QACrB,OAAO,EAAE,GAAG;QACZ,WAAW,EAAE,GAAG;QAChB,IAAI,EAAE,YAAY,CAAC,OAAO;QAC1B,MAAM,EAAE,GAAG;KACd,CAAC,CAAC;IACH,MAAM,eAAe,GAAG;QACpB,eAAe,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,eAAe,CAAC,OAAO,CAAC;KACtB,CAAC;IAEhC,MAAM,cAAc,GAAG,gBAAgB,CAAC;QACpC,SAAS;QACT,cAAc,EAAE;YACZ,cAAc,EAAE,KAAK;YACrB,eAAe,EAAE,KAAK;SACzB;KACJ,CAAC,CAAC;IAEH,MAAM,IAAI,GAAG,kBAAkB,CAAC,cAAc,EAAE,EAAE,eAAe,EAAE,CAAC,CAAC;IAErE,MAAM,EAAE,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC;IAEnB,MAAM,GAAG,GAAG;QACR,MAAM,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,eAAe,CAAC,kBAAkB,CAAC;QACnD,IAAI,EAAE,SAAS;KAClB,CAAC;IAEF,MAAM,IAAI,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC;IACrB,MAAM,GAAG,GAAG;QACR,MAAM,EAAE,GAAG,EAAE;YACT,OAAO;gBACH,IAAI,EAAE,IAAI;aACb,CAAC;QACN,CAAC;KACJ,CAAC;IAEF,MAAM,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,CAAC,CAAC;IAEzB,MAAM,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;IACpC,MAAM,CAAC,EAAE,CAAC,CAAC,gBAAgB,EAAE,CAAC;IAC9B,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,CAAC;AACjC,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,4CAA4C,EAAE,KAAK,IAAI,EAAE;IAC1D,SAAS,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC;IAC7B,MAAM,eAAe,GAAG;QACpB,eAAe,EAAE,GAAG,EAAE;YAClB,MAAM,IAAI,KAAK,CAAC,uBAAuB,CAAC,CAAC;QAC7C,CAAC;KAC0B,CAAC;IAEhC,MAAM,IAAI,GAAG,kBAAkB,CAAC,MAAM,EAAE,EAAE,eAAe,EAAE,CAAC,CAAC;IAE7D,MAAM,EAAE,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC;IAEnB,MAAM,GAAG,GAAG;QACR,MAAM,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,eAAe,CAAC,YAAY,CAAC;QAC7C,IAAI,EAAE,SAAS;KAClB,CAAC;IAEF,MAAM,IAAI,CAAC,GAAG,EAAE,SAAS,EAAE,EAAE,CAAC,CAAC;IAE/B,MAAM,CAAC,EAAE,CAAC,CAAC,gBAAgB,EAAE,CAAC;IAC9B,SAAS,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC;AAClC,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,+CAA+C,EAAE,KAAK,IAAI,EAAE;IAC7D,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,kBAAkB,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC;IACpE,MAAM,eAAe,GAAG;QACpB,eAAe,EAAE,GAAG,EAAE;YAClB,MAAM,IAAI,KAAK,CAAC,uBAAuB,CAAC,CAAC;QAC7C,CAAC;KAC0B,CAAC;IAEhC,MAAM,IAAI,GAAG,kBAAkB,CAAC,MAAM,EAAE,EAAE,eAAe,EAAE,CAAC,CAAC;IAE7D,MAAM,EAAE,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC;IAEnB,MAAM,GAAG,GAAG;QACR,MAAM,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,eAAe,CAAC,YAAY,CAAC;QAC7C,IAAI,EAAE,SAAS;KAClB,CAAC;IAEF,MAAM,IAAI,CAAC,GAAG,EAAE,SAAS,EAAE,EAAE,CAAC,CAAC;IAE/B,MAAM,CAAC,EAAE,CAAC,CAAC,gBAAgB,EAAE,CAAC;AAClC,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,mDAAmD,EAAE,KAAK,IAAI,EAAE;IACjE,MAAM,OAAO,GAAG,IAAI,OAAO,CAAC;QACxB,SAAS,EAAE,SAAS;QACpB,WAAW,EAAE,CAAC,MAAM,CAAC;QACrB,OAAO,EAAE,GAAG;QACZ,WAAW,EAAE,GAAG;QAChB,IAAI,EAAE,YAAY,CAAC,OAAO;QAC1B,MAAM,EAAE,GAAG;KACd,CAAC,CAAC;IACH,MAAM,eAAe,GAAG;QACpB,eAAe,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,eAAe,CAAC,OAAO,CAAC;KACtB,CAAC;IAEhC,MAAM,IAAI,GAAG,kBAAkB,CAAC,MAAM,EAAE,EAAE,eAAe,EAAE,CAAC,CAAC;IAE7D,MAAM,EAAE,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC;IAEnB,MAAM,GAAG,GAAG;QACR,MAAM,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,eAAe,CAAC,kBAAkB,CAAC;QACnD,IAAI,EAAE,SAAS;QACf,IAAI,EAAE,eAAe;QACrB,MAAM,EAAE,MAAM;KACjB,CAAC;IAEF,MAAM,IAAI,CAAC,GAAG,EAAE,SAAS,EAAE,EAAE,CAAC,CAAC;IAE/B,MAAM,CAAC,EAAE,CAAC,CAAC,gBAAgB,EAAE,CAAC;IAC9B,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,gBAAgB,EAAE,CAAC;IACtC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;AACnC,CAAC,CAAC,CAAC"}
+{"version":3,"file":"api-token-middleware.test.js","sourceRoot":"","sources":["../../../src/lib/middleware/api-token-middleware.test.ts"],"names":[],"mappings":"AAAA,OAAO,SAAS,MAAM,kCAAkC,CAAC;AACzD,OAAO,EAAE,MAAM,EAAE,MAAM,yBAAyB,CAAC;AACjD,OAAO,EAAE,gBAAgB,EAAE,MAAM,kCAAkC,CAAC;AACpE,OAAO,OAAO,MAAM,sBAAsB,CAAC;AAC3C,OAAO,EAAE,GAAG,EAAE,MAAM,8BAA8B,CAAC;AACnD,OAAO,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AACjD,OAAO,kBAAkB,EAAE,EACvB,wBAAwB,GAC3B,MAAM,2BAA2B,CAAC;AAGnC,OAAO,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAE5B,IAAI,MAAsB,CAAC;AAE3B,UAAU,CAAC,GAAG,EAAE;IACZ,MAAM,GAAG,gBAAgB,CAAC;QACtB,SAAS;QACT,cAAc,EAAE;YACZ,cAAc,EAAE,IAAI;SACvB;KACJ,CAAC,CAAC;AACP,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,oEAAoE,EAAE,KAAK,IAAI,EAAE;IAClF,MAAM,eAAe,GAAG;QACpB,eAAe,EAAE,EAAE,CAAC,EAAE,EAAE;KACG,CAAC;IAEhC,MAAM,IAAI,GAAG,kBAAkB,CAAC,MAAM,EAAE,EAAE,eAAe,EAAE,CAAC,CAAC;IAE7D,MAAM,EAAE,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC;IAEnB,MAAM,GAAG,GAAG;QACR,MAAM,EAAE,EAAE,CAAC,EAAE,EAAE;KAClB,CAAC;IAEF,MAAM,IAAI,CAAC,GAAG,EAAE,SAAS,EAAE,EAAE,CAAC,CAAC;IAE/B,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC;IAC5C,MAAM,CAAC,EAAE,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC;AACxC,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,sCAAsC,EAAE,KAAK,IAAI,EAAE;IACpD,MAAM,eAAe,GAAG;QACpB,eAAe,EAAE,EAAE,CAAC,EAAE,EAAE;KACG,CAAC;IAEhC,MAAM,IAAI,GAAG,kBAAkB,CAAC,MAAM,EAAE,EAAE,eAAe,EAAE,CAAC,CAAC;IAE7D,MAAM,EAAE,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC;IAEnB,MAAM,GAAG,GAAG;QACR,MAAM,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,eAAe,CAAC,YAAY,CAAC;QAC7C,IAAI,EAAE,SAAS;KAClB,CAAC;IAEF,MAAM,IAAI,CAAC,GAAG,EAAE,SAAS,EAAE,EAAE,CAAC,CAAC;IAE/B,MAAM,CAAC,EAAE,CAAC,CAAC,gBAAgB,EAAE,CAAC;IAC9B,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,gBAAgB,EAAE,CAAC;IACtC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,CAAC;AACjC,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,yDAAyD,EAAE,KAAK,IAAI,EAAE;IACvE,MAAM,eAAe,GAAG;QACpB,eAAe,EAAE,EAAE,CAAC,EAAE,EAAE;KACG,CAAC;IAEhC,MAAM,IAAI,GAAG,kBAAkB,CAAC,MAAM,EAAE,EAAE,eAAe,EAAE,CAAC,CAAC;IAE7D,MAAM,EAAE,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC;IAEnB,MAAM,GAAG,GAAG;QACR,MAAM,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,eAAe,CAAC,iBAAiB,CAAC;QAClD,IAAI,EAAE,SAAS;KAClB,CAAC;IAEF,MAAM,IAAI,CAAC,GAAG,EAAE,SAAS,EAAE,EAAE,CAAC,CAAC;IAE/B,MAAM,CAAC,eAAe,CAAC,eAAe,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;IAC/D,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,gBAAgB,EAAE,CAAC;IACtC,MAAM,CAAC,EAAE,CAAC,CAAC,gBAAgB,EAAE,CAAC;IAC9B,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,CAAC;AACjC,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,gCAAgC,EAAE,KAAK,IAAI,EAAE;IAC9C,MAAM,OAAO,GAAG,IAAI,OAAO,CAAC;QACxB,SAAS,EAAE,SAAS;QACpB,WAAW,EAAE,CAAC,MAAM,CAAC;QACrB,OAAO,EAAE,GAAG;QACZ,WAAW,EAAE,GAAG;QAChB,IAAI,EAAE,YAAY,CAAC,OAAO;QAC1B,MAAM,EAAE,GAAG;KACd,CAAC,CAAC;IACH,MAAM,eAAe,GAAG;QACpB,eAAe,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,eAAe,CAAC,OAAO,CAAC;KACtB,CAAC;IAEhC,MAAM,IAAI,GAAG,kBAAkB,CAAC,MAAM,EAAE,EAAE,eAAe,EAAE,CAAC,CAAC;IAE7D,MAAM,EAAE,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC;IAEnB,MAAM,GAAG,GAAG;QACR,MAAM,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,eAAe,CAAC,kBAAkB,CAAC;QACnD,IAAI,EAAE,SAAS;QACf,IAAI,EAAE,aAAa;KACtB,CAAC;IAEF,MAAM,IAAI,CAAC,GAAG,EAAE,SAAS,EAAE,EAAE,CAAC,CAAC;IAE/B,MAAM,CAAC,EAAE,CAAC,CAAC,gBAAgB,EAAE,CAAC;IAC9B,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,gBAAgB,EAAE,CAAC;IACtC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;AACnC,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,8CAA8C,EAAE,KAAK,IAAI,EAAE;IAC5D,MAAM,WAAW,GAAG,gBAAgB,CAAC;QACjC,SAAS;QACT,cAAc,EAAE;YACZ,cAAc,EAAE,IAAI;SACvB;QACD,YAAY,EAAE;YACV,KAAK,EAAE;gBACH,gCAAgC,EAAE,IAAI;aACzC;SACJ;KACJ,CAAC,CAAC;IACH,MAAM,OAAO,GAAG,IAAI,OAAO,CAAC;QACxB,SAAS,EAAE,SAAS;QACpB,WAAW,EAAE,CAAC,MAAM,CAAC;QACrB,OAAO,EAAE,GAAG;QACZ,WAAW,EAAE,aAAa;QAC1B,IAAI,EAAE,YAAY,CAAC,OAAO;QAC1B,MAAM,EAAE,kBAAkB;KAC7B,CAAC,CAAC;IACH,MAAM,eAAe,GAAG;QACpB,eAAe,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,eAAe,CAAC,OAAO,CAAC;KACtB,CAAC;IAEhC,MAAM,IAAI,GAAG,kBAAkB,CAAC,WAAW,EAAE,EAAE,eAAe,EAAE,CAAC,CAAC;IAElE,MAAM,EAAE,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC;IAEnB,MAAM,GAAG,GAAG;QACR,MAAM,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,eAAe,CAAC,gCAAgC,CAAC;QACjE,IAAI,EAAE,SAAS;QACf,IAAI,EAAE,aAAa;KACtB,CAAC;IAEF,MAAM,IAAI,CAAC,GAAG,EAAE,SAAS,EAAE,EAAE,CAAC,CAAC;IAE/B,MAAM,CAAC,EAAE,CAAC,CAAC,gBAAgB,EAAE,CAAC;IAC9B,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,gBAAgB,EAAE,CAAC;IACtC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;AACnC,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,IAAI,CAAC;IACN,YAAY,CAAC,MAAM;IACnB,YAAY,CAAC,OAAO;CACvB,CAAC,CAAC,2DAA2D,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE;IAC3E,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;IAErB,MAAM,OAAO,GAAG,IAAI,OAAO,CAAC;QACxB,SAAS,EAAE,SAAS;QACpB,WAAW,EAAE,CAAC,MAAM,CAAC;QACrB,OAAO,EAAE,GAAG;QACZ,WAAW,EAAE,GAAG;QAChB,IAAI;QACJ,MAAM,EAAE,GAAG;KACd,CAAC,CAAC;IAEH,MAAM,eAAe,GAAG;QACpB,eAAe,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,eAAe,CAAC,OAAO,CAAC;KACtB,CAAC;IAEhC,MAAM,IAAI,GAAG,kBAAkB,CAAC,MAAM,EAAE,EAAE,eAAe,EAAE,CAAC,CAAC;IAC7D,MAAM,EAAE,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC;IAEnB,MAAM,GAAG,GAAG;QACR,MAAM,EAAE,CAAC,IAAa,EAAE,EAAE,CAAC,CAAC;YACxB,IAAI,EAAE,CAAC,IAAa,EAAE,EAAE;gBACpB,MAAM,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;gBAC1B,MAAM,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,EAAE,OAAO,EAAE,wBAAwB,EAAE,CAAC,CAAC;YAChE,CAAC;SACJ,CAAC;KACL,CAAC;IAEF,MAAM,GAAG,GAAG;QACR,MAAM,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,eAAe,CAAC,kBAAkB,CAAC;QACnD,IAAI,EAAE,SAAS;QACf,IAAI,EAAE,YAAY;KACrB,CAAC;IAEF,MAAM,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,CAAC,CAAC;IAEzB,MAAM,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;IAClC,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,gBAAgB,EAAE,CAAC;IACtC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,aAAa,EAAE,CAAC;AACrC,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,iCAAiC,EAAE,KAAK,IAAI,EAAE;IAC/C,MAAM,OAAO,GAAG,IAAI,OAAO,CAAC;QACxB,SAAS,EAAE,SAAS;QACpB,WAAW,EAAE,CAAC,MAAM,CAAC;QACrB,OAAO,EAAE,GAAG;QACZ,WAAW,EAAE,GAAG;QAChB,IAAI,EAAE,YAAY,CAAC,OAAO;QAC1B,MAAM,EAAE,GAAG;KACd,CAAC,CAAC;IACH,MAAM,eAAe,GAAG;QACpB,eAAe,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,eAAe,CAAC,OAAO,CAAC;KACtB,CAAC;IAEhC,MAAM,cAAc,GAAG,gBAAgB,CAAC;QACpC,SAAS;QACT,cAAc,EAAE;YACZ,cAAc,EAAE,KAAK;YACrB,eAAe,EAAE,KAAK;SACzB;KACJ,CAAC,CAAC;IAEH,MAAM,IAAI,GAAG,kBAAkB,CAAC,cAAc,EAAE,EAAE,eAAe,EAAE,CAAC,CAAC;IAErE,MAAM,EAAE,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC;IAEnB,MAAM,GAAG,GAAG;QACR,MAAM,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,eAAe,CAAC,kBAAkB,CAAC;QACnD,IAAI,EAAE,SAAS;KAClB,CAAC;IAEF,MAAM,IAAI,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC;IACrB,MAAM,GAAG,GAAG;QACR,MAAM,EAAE,GAAG,EAAE;YACT,OAAO;gBACH,IAAI,EAAE,IAAI;aACb,CAAC;QACN,CAAC;KACJ,CAAC;IAEF,MAAM,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,CAAC,CAAC;IAEzB,MAAM,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;IACpC,MAAM,CAAC,EAAE,CAAC,CAAC,gBAAgB,EAAE,CAAC;IAC9B,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,CAAC;AACjC,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,4CAA4C,EAAE,KAAK,IAAI,EAAE;IAC1D,SAAS,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC;IAC7B,MAAM,eAAe,GAAG;QACpB,eAAe,EAAE,GAAG,EAAE;YAClB,MAAM,IAAI,KAAK,CAAC,uBAAuB,CAAC,CAAC;QAC7C,CAAC;KAC0B,CAAC;IAEhC,MAAM,IAAI,GAAG,kBAAkB,CAAC,MAAM,EAAE,EAAE,eAAe,EAAE,CAAC,CAAC;IAE7D,MAAM,EAAE,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC;IAEnB,MAAM,GAAG,GAAG;QACR,MAAM,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,eAAe,CAAC,YAAY,CAAC;QAC7C,IAAI,EAAE,SAAS;KAClB,CAAC;IAEF,MAAM,IAAI,CAAC,GAAG,EAAE,SAAS,EAAE,EAAE,CAAC,CAAC;IAE/B,MAAM,CAAC,EAAE,CAAC,CAAC,gBAAgB,EAAE,CAAC;IAC9B,SAAS,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC;AAClC,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,+CAA+C,EAAE,KAAK,IAAI,EAAE;IAC7D,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,kBAAkB,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC;IACpE,MAAM,eAAe,GAAG;QACpB,eAAe,EAAE,GAAG,EAAE;YAClB,MAAM,IAAI,KAAK,CAAC,uBAAuB,CAAC,CAAC;QAC7C,CAAC;KAC0B,CAAC;IAEhC,MAAM,IAAI,GAAG,kBAAkB,CAAC,MAAM,EAAE,EAAE,eAAe,EAAE,CAAC,CAAC;IAE7D,MAAM,EAAE,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC;IAEnB,MAAM,GAAG,GAAG;QACR,MAAM,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,eAAe,CAAC,YAAY,CAAC;QAC7C,IAAI,EAAE,SAAS;KAClB,CAAC;IAEF,MAAM,IAAI,CAAC,GAAG,EAAE,SAAS,EAAE,EAAE,CAAC,CAAC;IAE/B,MAAM,CAAC,EAAE,CAAC,CAAC,gBAAgB,EAAE,CAAC;AAClC,CAAC,CAAC,CAAC"}

package/dist/lib/middleware/backend-token-middleware.d.ts

@@ -0,0 +1,5 @@
+import type { IUnleashConfig } from '../types/option.js';
+import type { IUnleashServices } from '../services/index.js';
+export declare const backendApiAccessMiddleware: ({ getLogger, authentication, flagResolver, }: Pick<IUnleashConfig, "getLogger" | "authentication" | "flagResolver">, { apiTokenService }: Pick<IUnleashServices, "apiTokenService">) => any;
+export default backendApiAccessMiddleware;
+//# sourceMappingURL=backend-token-middleware.d.ts.map

package/dist/lib/middleware/backend-token-middleware.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"backend-token-middleware.d.ts","sourceRoot":"","sources":["../../../src/lib/middleware/backend-token-middleware.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAC;AAEzD,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,sBAAsB,CAAC;AAM7D,eAAO,MAAM,0BAA0B,GACnC,8CAIG,IAAI,CAAC,cAAc,EAAE,WAAW,GAAG,gBAAgB,GAAG,cAAc,CAAC,EACxE,qBAAqB,IAAI,CAAC,gBAAgB,EAAE,iBAAiB,CAAC,KAC/D,GA6DF,CAAC;AAEF,eAAe,0BAA0B,CAAC"}

package/dist/lib/middleware/backend-token-middleware.js

@@ -0,0 +1,61 @@
+import { ApiTokenType } from '../types/model.js';
+import { NO_TOKEN_WHERE_TOKEN_WAS_REQUIRED, TOKEN_TYPE_ERROR_MESSAGE, } from './api-token-middleware.js';
+export const backendApiAccessMiddleware = ({ getLogger, authentication, flagResolver, }, { apiTokenService }) => {
+    const logger = getLogger('/middleware/backend-token-middleware.ts');
+    logger.debug('Enabling backend-token middleware');
+    if (!authentication.enableApiToken) {
+        return (_req, _res, next) => next();
+    }
+    return async (req, res, next) => {
+        const onlyFeatureTokensWithFeatureAPIs = flagResolver.isEnabled('onlyFeatureTokensWithFeatureAPIs');
+        // Defer to api-token-middleware
+        if (!onlyFeatureTokensWithFeatureAPIs) {
+            return next();
+        }
+        try {
+            const apiToken = req.header('authorization');
+            if (!apiToken) {
+                res.status(401).send({
+                    message: NO_TOKEN_WHERE_TOKEN_WAS_REQUIRED,
+                });
+                return;
+            }
+            // Disallow PAT/Service account tokens and admin tokens
+            if (apiToken.startsWith('user:') || apiToken.startsWith('*:*')) {
+                res.status(403).send({
+                    message: TOKEN_TYPE_ERROR_MESSAGE,
+                });
+                return;
+            }
+            const apiUser = apiToken
+                ? await apiTokenService.getUserForToken(apiToken)
+                : undefined;
+            const { CLIENT, BACKEND } = ApiTokenType;
+            if (apiUser) {
+                if (apiUser.type !== CLIENT && apiUser.type !== BACKEND) {
+                    res.status(403).send({
+                        message: TOKEN_TYPE_ERROR_MESSAGE,
+                    });
+                    return;
+                }
+                req.user = apiUser;
+                next();
+            }
+            else {
+                res.status(401).send({
+                    message: NO_TOKEN_WHERE_TOKEN_WAS_REQUIRED,
+                });
+                return;
+            }
+        }
+        catch (error) {
+            logger.warn(error);
+            res.status(401).send({
+                message: NO_TOKEN_WHERE_TOKEN_WAS_REQUIRED,
+            });
+            return;
+        }
+    };
+};
+export default backendApiAccessMiddleware;
+//# sourceMappingURL=backend-token-middleware.js.map

package/dist/lib/middleware/backend-token-middleware.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"backend-token-middleware.js","sourceRoot":"","sources":["../../../src/lib/middleware/backend-token-middleware.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AAIjD,OAAO,EACH,iCAAiC,EACjC,wBAAwB,GAC3B,MAAM,2BAA2B,CAAC;AAEnC,MAAM,CAAC,MAAM,0BAA0B,GAAG,CACtC,EACI,SAAS,EACT,cAAc,EACd,YAAY,GACwD,EACxE,EAAE,eAAe,EAA6C,EAC3D,EAAE;IACL,MAAM,MAAM,GAAG,SAAS,CAAC,yCAAyC,CAAC,CAAC;IACpE,MAAM,CAAC,KAAK,CAAC,mCAAmC,CAAC,CAAC;IAClD,IAAI,CAAC,cAAc,CAAC,cAAc,EAAE,CAAC;QACjC,OAAO,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,CAAC,IAAI,EAAE,CAAC;IACxC,CAAC;IAED,OAAO,KAAK,EAAE,GAA+B,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE;QACxD,MAAM,gCAAgC,GAAG,YAAY,CAAC,SAAS,CAC3D,kCAAkC,CACrC,CAAC;QACF,gCAAgC;QAChC,IAAI,CAAC,gCAAgC,EAAE,CAAC;YACpC,OAAO,IAAI,EAAE,CAAC;QAClB,CAAC;QAED,IAAI,CAAC;YACD,MAAM,QAAQ,GAAG,GAAG,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC;YAC7C,IAAI,CAAC,QAAQ,EAAE,CAAC;gBACZ,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;oBACjB,OAAO,EAAE,iCAAiC;iBAC7C,CAAC,CAAC;gBACH,OAAO;YACX,CAAC;YAED,uDAAuD;YACvD,IAAI,QAAQ,CAAC,UAAU,CAAC,OAAO,CAAC,IAAI,QAAQ,CAAC,UAAU,CAAC,KAAK,CAAC,EAAE,CAAC;gBAC7D,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;oBACjB,OAAO,EAAE,wBAAwB;iBACpC,CAAC,CAAC;gBACH,OAAO;YACX,CAAC;YAED,MAAM,OAAO,GAAG,QAAQ;gBACpB,CAAC,CAAC,MAAM,eAAe,CAAC,eAAe,CAAC,QAAQ,CAAC;gBACjD,CAAC,CAAC,SAAS,CAAC;YAChB,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,YAAY,CAAC;YAEzC,IAAI,OAAO,EAAE,CAAC;gBACV,IAAI,OAAO,CAAC,IAAI,KAAK,MAAM,IAAI,OAAO,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;oBACtD,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;wBACjB,OAAO,EAAE,wBAAwB;qBACpC,CAAC,CAAC;oBACH,OAAO;gBACX,CAAC;gBACD,GAAG,CAAC,IAAI,GAAG,OAAO,CAAC;gBACnB,IAAI,EAAE,CAAC;YACX,CAAC;iBAAM,CAAC;gBACJ,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;oBACjB,OAAO,EAAE,iCAAiC;iBAC7C,CAAC,CAAC;gBACH,OAAO;YACX,CAAC;QACL,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACb,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACnB,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;gBACjB,OAAO,EAAE,iCAAiC;aAC7C,CAAC,CAAC;YACH,OAAO;QACX,CAAC;IACL,CAAC,CAAC;AACN,CAAC,CAAC;AAEF,eAAe,0BAA0B,CAAC"}

package/dist/lib/middleware/backend-token-middleware.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=backend-token-middleware.test.d.ts.map

package/dist/lib/middleware/backend-token-middleware.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"backend-token-middleware.test.d.ts","sourceRoot":"","sources":["../../../src/lib/middleware/backend-token-middleware.test.ts"],"names":[],"mappings":""}

package/dist/lib/middleware/backend-token-middleware.test.js

@@ -0,0 +1,73 @@
+import { createTestConfig } from '../../test/config/test-config.js';
+import getLogger from '../../test/fixtures/no-logger.js';
+import { vi } from 'vitest';
+import backendApiAccessMiddleware from './backend-token-middleware.js';
+test('with flag set client api should return 403 if user object is set and token is PAT', async () => {
+    const localConfig = createTestConfig({
+        getLogger,
+        authentication: {
+            enableApiToken: true,
+        },
+        experimental: {
+            flags: {
+                onlyFeatureTokensWithFeatureAPIs: true,
+            },
+        },
+    });
+    const apiTokenService = {
+        getUserForToken: vi.fn(),
+    };
+    const func = backendApiAccessMiddleware(localConfig, { apiTokenService });
+    const cb = vi.fn();
+    const user = { accountType: 'User', id: 1, username: 'PAT-Owner' };
+    const req = {
+        header: vi.fn().mockReturnValue('user:some-pat-token'),
+        user,
+        path: '/api/client',
+    };
+    const res = {
+        status: vi.fn().mockReturnValue({
+            send: vi.fn(),
+        }),
+    };
+    await func(req, res, cb);
+    expect(cb).not.toHaveBeenCalled();
+    expect(req.header).toHaveBeenCalled();
+    expect(res.status).toHaveBeenCalledWith(403);
+});
+test.each([
+    'user:asdkjsdhg3',
+    '*:*.asdf',
+])('%s PAT format tokens with client api cause middleware to return 403 when flag is set', async (rejectedToken) => {
+    const localConfig = createTestConfig({
+        getLogger,
+        authentication: {
+            enableApiToken: true,
+        },
+        experimental: {
+            flags: {
+                onlyFeatureTokensWithFeatureAPIs: true,
+            },
+        },
+    });
+    const apiTokenService = {
+        getUserForToken: vi.fn(),
+    };
+    const func = backendApiAccessMiddleware(localConfig, { apiTokenService });
+    const cb = vi.fn();
+    const res = {
+        status: vi.fn().mockReturnValue({ send: vi.fn() }),
+    };
+    const req = {
+        header: vi.fn().mockReturnValue(rejectedToken),
+        user: undefined,
+        path: '/api/client/metrics',
+    };
+    await func(req, res, cb);
+    expect(apiTokenService.getUserForToken).not.toHaveBeenCalled();
+    expect(req.header).toHaveBeenCalled();
+    expect(res.status).toHaveBeenCalledWith(403);
+    expect(cb).not.toHaveBeenCalled();
+    expect(req.user).toBeFalsy();
+});
+//# sourceMappingURL=backend-token-middleware.test.js.map

package/dist/lib/middleware/backend-token-middleware.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"backend-token-middleware.test.js","sourceRoot":"","sources":["../../../src/lib/middleware/backend-token-middleware.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gBAAgB,EAAE,MAAM,kCAAkC,CAAC;AACpE,OAAO,SAAS,MAAM,kCAAkC,CAAC;AACzD,OAAO,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAE5B,OAAO,0BAA0B,MAAM,+BAA+B,CAAC;AAEvE,IAAI,CAAC,mFAAmF,EAAE,KAAK,IAAI,EAAE;IACjG,MAAM,WAAW,GAAG,gBAAgB,CAAC;QACjC,SAAS;QACT,cAAc,EAAE;YACZ,cAAc,EAAE,IAAI;SACvB;QACD,YAAY,EAAE;YACV,KAAK,EAAE;gBACH,gCAAgC,EAAE,IAAI;aACzC;SACJ;KACJ,CAAC,CAAC;IAEH,MAAM,eAAe,GAAG;QACpB,eAAe,EAAE,EAAE,CAAC,EAAE,EAAE;KACG,CAAC;IAEhC,MAAM,IAAI,GAAG,0BAA0B,CAAC,WAAW,EAAE,EAAE,eAAe,EAAE,CAAC,CAAC;IAE1E,MAAM,EAAE,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC;IACnB,MAAM,IAAI,GAAG,EAAE,WAAW,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,EAAE,QAAQ,EAAE,WAAW,EAAE,CAAC;IAEnE,MAAM,GAAG,GAAG;QACR,MAAM,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,eAAe,CAAC,qBAAqB,CAAC;QACtD,IAAI;QACJ,IAAI,EAAE,aAAa;KACtB,CAAC;IAEF,MAAM,GAAG,GAAG;QACR,MAAM,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,eAAe,CAAC;YAC5B,IAAI,EAAE,EAAE,CAAC,EAAE,EAAE;SAChB,CAAC;KACL,CAAC;IAEF,MAAM,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,CAAC,CAAC;IAEzB,MAAM,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;IAClC,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,gBAAgB,EAAE,CAAC;IACtC,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,oBAAoB,CAAC,GAAG,CAAC,CAAC;AACjD,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,IAAI,CAAC;IACN,iBAAiB;IACjB,UAAU;CACb,CAAC,CAAC,sFAAsF,EAAE,KAAK,EAAE,aAAa,EAAE,EAAE;IAC/G,MAAM,WAAW,GAAG,gBAAgB,CAAC;QACjC,SAAS;QACT,cAAc,EAAE;YACZ,cAAc,EAAE,IAAI;SACvB;QACD,YAAY,EAAE;YACV,KAAK,EAAE;gBACH,gCAAgC,EAAE,IAAI;aACzC;SACJ;KACJ,CAAC,CAAC;IAEH,MAAM,eAAe,GAAG;QACpB,eAAe,EAAE,EAAE,CAAC,EAAE,EAAE;KACG,CAAC;IAEhC,MAAM,IAAI,GAAG,0BAA0B,CAAC,WAAW,EAAE,EAAE,eAAe,EAAE,CAAC,CAAC;IAE1E,MAAM,EAAE,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC;IACnB,MAAM,GAAG,GAAG;QACR,MAAM,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,eAAe,CAAC,EAAE,IAAI,EAAE,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC;KACrD,CAAC;IAEF,MAAM,GAAG,GAAG;QACR,MAAM,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,eAAe,CAAC,aAAa,CAAC;QAC9C,IAAI,EAAE,SAAS;QACf,IAAI,EAAE,qBAAqB;KAC9B,CAAC;IAEF,MAAM,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,CAAC,CAAC;IAEzB,MAAM,CAAC,eAAe,CAAC,eAAe,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;IAC/D,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,gBAAgB,EAAE,CAAC;IACtC,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,oBAAoB,CAAC,GAAG,CAAC,CAAC;IAC7C,MAAM,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;IAClC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,CAAC;AACjC,CAAC,CAAC,CAAC"}

package/dist/lib/middleware/conditional-middleware.d.ts

@@ -1,3 +1,23 @@
 import type { RequestHandler } from 'express';
+import type { IFlagResolver, IFlagKey } from '../types/index.js';
+/**
+ * @deprecated Use `requireFeatureEnabled` for feature-flag route gating.
+ *
+ * Generic conditional middleware runner.
+ * Prefer this only for non-feature-flag conditions.
+ */
 export declare const conditionalMiddleware: (condition: () => boolean, middleware: RequestHandler) => RequestHandler;
+/**
+ * Route-level feature gate middleware.
+ *
+ * Recommended usage:
+ * `middleware: [requireFeatureEnabled(config.flagResolver, 'myFlag')]`
+ *
+ * Guidance:
+ * - Prefer route-level usage (`this.route({ middleware: [...] })`) in controllers.
+ * - Avoid broad prefix mounts (for example `/api/admin/projects`) where sibling routes
+ *   can accidentally be gated.
+ * - The route remains registered/discoverable; disabled features return `404` at request time.
+ */
+export declare const requireFeatureEnabled: (flagResolver: Pick<IFlagResolver, "isEnabled">, flagName: IFlagKey) => RequestHandler;
 //# sourceMappingURL=conditional-middleware.d.ts.map

package/dist/lib/middleware/conditional-middleware.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"conditional-middleware.d.ts","sourceRoot":"","sources":["../../../src/lib/middleware/conditional-middleware.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,SAAS,CAAC;AAE9C,eAAO,MAAM,qBAAqB,GAC9B,WAAW,MAAM,OAAO,EACxB,YAAY,cAAc,KAC3B,cAQF,CAAC"}
+{"version":3,"file":"conditional-middleware.d.ts","sourceRoot":"","sources":["../../../src/lib/middleware/conditional-middleware.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,SAAS,CAAC;AAC9C,OAAO,KAAK,EAAE,aAAa,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAC;AAEjE;;;;;GAKG;AACH,eAAO,MAAM,qBAAqB,GAC9B,WAAW,MAAM,OAAO,EACxB,YAAY,cAAc,KAC3B,cAQF,CAAC;AAEF;;;;;;;;;;;GAWG;AACH,eAAO,MAAM,qBAAqB,GAC9B,cAAc,IAAI,CAAC,aAAa,EAAE,WAAW,CAAC,EAC9C,UAAU,QAAQ,KACnB,cAOF,CAAC"}

package/dist/lib/middleware/conditional-middleware.js

@@ -1,3 +1,9 @@
+/**
+ * @deprecated Use `requireFeatureEnabled` for feature-flag route gating.
+ *
+ * Generic conditional middleware runner.
+ * Prefer this only for non-feature-flag conditions.
+ */
 export const conditionalMiddleware = (condition, middleware) => {
     return (req, res, next) => {
         if (condition()) {
@@ -8,4 +14,24 @@ export const conditionalMiddleware = (condition, middleware) => {
         }
     };
 };
+/**
+ * Route-level feature gate middleware.
+ *
+ * Recommended usage:
+ * `middleware: [requireFeatureEnabled(config.flagResolver, 'myFlag')]`
+ *
+ * Guidance:
+ * - Prefer route-level usage (`this.route({ middleware: [...] })`) in controllers.
+ * - Avoid broad prefix mounts (for example `/api/admin/projects`) where sibling routes
+ *   can accidentally be gated.
+ * - The route remains registered/discoverable; disabled features return `404` at request time.
+ */
+export const requireFeatureEnabled = (flagResolver, flagName) => {
+    return (_req, res, next) => {
+        if (flagResolver.isEnabled(flagName)) {
+            return next();
+        }
+        return res.sendStatus(404);
+    };
+};
 //# sourceMappingURL=conditional-middleware.js.map

package/dist/lib/middleware/conditional-middleware.js.map

@@ -1 +1 @@
-{"version":3,"file":"conditional-middleware.js","sourceRoot":"","sources":["../../../src/lib/middleware/conditional-middleware.ts"],"names":[],"mappings":"AAEA,MAAM,CAAC,MAAM,qBAAqB,GAAG,CACjC,SAAwB,EACxB,UAA0B,EACZ,EAAE;IAChB,OAAO,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE;QACtB,IAAI,SAAS,EAAE,EAAE,CAAC;YACd,UAAU,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC;QAC/B,CAAC;aAAM,CAAC;YACJ,IAAI,EAAE,CAAC;QACX,CAAC;IACL,CAAC,CAAC;AACN,CAAC,CAAC"}
+{"version":3,"file":"conditional-middleware.js","sourceRoot":"","sources":["../../../src/lib/middleware/conditional-middleware.ts"],"names":[],"mappings":"AAGA;;;;;GAKG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAG,CACjC,SAAwB,EACxB,UAA0B,EACZ,EAAE;IAChB,OAAO,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE;QACtB,IAAI,SAAS,EAAE,EAAE,CAAC;YACd,UAAU,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC;QAC/B,CAAC;aAAM,CAAC;YACJ,IAAI,EAAE,CAAC;QACX,CAAC;IACL,CAAC,CAAC;AACN,CAAC,CAAC;AAEF;;;;;;;;;;;GAWG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAG,CACjC,YAA8C,EAC9C,QAAkB,EACJ,EAAE;IAChB,OAAO,CAAC,IAAI,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE;QACvB,IAAI,YAAY,CAAC,SAAS,CAAC,QAAQ,CAAC,EAAE,CAAC;YACnC,OAAO,IAAI,EAAE,CAAC;QAClB,CAAC;QACD,OAAO,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;IAC/B,CAAC,CAAC;AACN,CAAC,CAAC"}

package/dist/lib/middleware/conditional-middleware.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=conditional-middleware.test.d.ts.map

package/dist/lib/middleware/conditional-middleware.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"conditional-middleware.test.d.ts","sourceRoot":"","sources":["../../../src/lib/middleware/conditional-middleware.test.ts"],"names":[],"mappings":""}

package/dist/lib/middleware/conditional-middleware.test.js

@@ -0,0 +1,31 @@
+import { vi } from 'vitest';
+import { conditionalMiddleware, requireFeatureEnabled, } from './conditional-middleware.js';
+test('conditionalMiddleware should run middleware when condition is true', () => {
+    const middleware = vi.fn((_req, _res, next) => next());
+    const next = vi.fn();
+    conditionalMiddleware(() => true, middleware)({}, {}, next);
+    expect(middleware).toHaveBeenCalled();
+    expect(next).toHaveBeenCalledWith();
+});
+test('requireFeatureEnabled should call next when feature is enabled', () => {
+    const next = vi.fn();
+    const flagResolver = {
+        isEnabled: vi.fn().mockReturnValue(true),
+    };
+    // @ts-expect-error the feature name does not exist, it's only for testing
+    requireFeatureEnabled(flagResolver, 'changeRequestEnabled')({}, {}, next);
+    expect(flagResolver.isEnabled).toHaveBeenCalledWith('changeRequestEnabled');
+    expect(next).toHaveBeenCalledWith();
+});
+test('requireFeatureEnabled should return 404 when feature is disabled', () => {
+    const next = vi.fn();
+    const sendStatus = vi.fn();
+    const flagResolver = {
+        isEnabled: vi.fn().mockReturnValue(false),
+    };
+    // @ts-expect-error the feature name does not exist, it's only for testing
+    requireFeatureEnabled(flagResolver, 'changeRequestEnabled')({}, { sendStatus }, next);
+    expect(next).not.toHaveBeenCalled();
+    expect(sendStatus).toHaveBeenCalledWith(404);
+});
+//# sourceMappingURL=conditional-middleware.test.js.map

package/dist/lib/middleware/conditional-middleware.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"conditional-middleware.test.js","sourceRoot":"","sources":["../../../src/lib/middleware/conditional-middleware.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAC5B,OAAO,EACH,qBAAqB,EACrB,qBAAqB,GACxB,MAAM,6BAA6B,CAAC;AAErC,IAAI,CAAC,oEAAoE,EAAE,GAAG,EAAE;IAC5E,MAAM,UAAU,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,CAAC,IAAI,EAAE,CAAC,CAAC;IACvD,MAAM,IAAI,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC;IAErB,qBAAqB,CAAC,GAAG,EAAE,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC,EAAS,EAAE,EAAS,EAAE,IAAI,CAAC,CAAC;IAE1E,MAAM,CAAC,UAAU,CAAC,CAAC,gBAAgB,EAAE,CAAC;IACtC,MAAM,CAAC,IAAI,CAAC,CAAC,oBAAoB,EAAE,CAAC;AACxC,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,gEAAgE,EAAE,GAAG,EAAE;IACxE,MAAM,IAAI,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC;IACrB,MAAM,YAAY,GAAG;QACjB,SAAS,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,eAAe,CAAC,IAAI,CAAC;KAC3C,CAAC;IAEF,0EAA0E;IAC1E,qBAAqB,CAAC,YAAmB,EAAE,sBAAsB,CAAC,CAC9D,EAAS,EACT,EAAS,EACT,IAAI,CACP,CAAC;IAEF,MAAM,CAAC,YAAY,CAAC,SAAS,CAAC,CAAC,oBAAoB,CAAC,sBAAsB,CAAC,CAAC;IAC5E,MAAM,CAAC,IAAI,CAAC,CAAC,oBAAoB,EAAE,CAAC;AACxC,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,kEAAkE,EAAE,GAAG,EAAE;IAC1E,MAAM,IAAI,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC;IACrB,MAAM,UAAU,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC;IAC3B,MAAM,YAAY,GAAG;QACjB,SAAS,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,eAAe,CAAC,KAAK,CAAC;KAC5C,CAAC;IAEF,0EAA0E;IAC1E,qBAAqB,CAAC,YAAmB,EAAE,sBAAsB,CAAC,CAC9D,EAAS,EACT,EAAE,UAAU,EAAS,EACrB,IAAI,CACP,CAAC;IAEF,MAAM,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;IACpC,MAAM,CAAC,UAAU,CAAC,CAAC,oBAAoB,CAAC,GAAG,CAAC,CAAC;AACjD,CAAC,CAAC,CAAC"}

package/dist/lib/middleware/frontend-token-middleware.d.ts

@@ -0,0 +1,5 @@
+import type { IUnleashConfig } from '../types/option.js';
+import type { IUnleashServices } from '../services/index.js';
+export declare const frontendApiAccessMiddleware: ({ getLogger, authentication, flagResolver, }: Pick<IUnleashConfig, "getLogger" | "authentication" | "flagResolver">, { apiTokenService }: Pick<IUnleashServices, "apiTokenService">) => any;
+export default frontendApiAccessMiddleware;
+//# sourceMappingURL=frontend-token-middleware.d.ts.map

package/dist/lib/middleware/frontend-token-middleware.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"frontend-token-middleware.d.ts","sourceRoot":"","sources":["../../../src/lib/middleware/frontend-token-middleware.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAC;AAEzD,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,sBAAsB,CAAC;AAM7D,eAAO,MAAM,2BAA2B,GACpC,8CAIG,IAAI,CAAC,cAAc,EAAE,WAAW,GAAG,gBAAgB,GAAG,cAAc,CAAC,EACxE,qBAAqB,IAAI,CAAC,gBAAgB,EAAE,iBAAiB,CAAC,KAC/D,GA6DF,CAAC;AAEF,eAAe,2BAA2B,CAAC"}

package/dist/lib/middleware/frontend-token-middleware.js

@@ -0,0 +1,61 @@
+import { ApiTokenType } from '../types/model.js';
+import { NO_TOKEN_WHERE_TOKEN_WAS_REQUIRED, TOKEN_TYPE_ERROR_MESSAGE, } from './api-token-middleware.js';
+export const frontendApiAccessMiddleware = ({ getLogger, authentication, flagResolver, }, { apiTokenService }) => {
+    const logger = getLogger('/middleware/frontend-token-middleware.ts');
+    logger.debug('Enabling frontend-token middleware');
+    if (!authentication.enableApiToken) {
+        return (_req, _res, next) => next();
+    }
+    return async (req, res, next) => {
+        const onlyFeatureTokensWithFeatureAPIs = flagResolver.isEnabled('onlyFeatureTokensWithFeatureAPIs');
+        // Defer to api-token-middleware
+        if (!onlyFeatureTokensWithFeatureAPIs) {
+            return next();
+        }
+        try {
+            const apiToken = req.header('authorization');
+            if (!apiToken) {
+                res.status(401).send({
+                    message: NO_TOKEN_WHERE_TOKEN_WAS_REQUIRED,
+                });
+                return;
+            }
+            // Disallow PAT/Service account tokens and admin tokens
+            if (apiToken.startsWith('user:') || apiToken.startsWith('*:*')) {
+                res.status(403).send({
+                    message: TOKEN_TYPE_ERROR_MESSAGE,
+                });
+                return;
+            }
+            const apiUser = apiToken
+                ? await apiTokenService.getUserForToken(apiToken)
+                : undefined;
+            const { FRONTEND } = ApiTokenType;
+            if (apiUser) {
+                if (apiUser.type !== FRONTEND) {
+                    res.status(403).send({
+                        message: TOKEN_TYPE_ERROR_MESSAGE,
+                    });
+                    return;
+                }
+                req.user = apiUser;
+                next();
+            }
+            else {
+                res.status(401).send({
+                    message: NO_TOKEN_WHERE_TOKEN_WAS_REQUIRED,
+                });
+                return;
+            }
+        }
+        catch (error) {
+            logger.warn(error);
+            res.status(401).send({
+                message: NO_TOKEN_WHERE_TOKEN_WAS_REQUIRED,
+            });
+            return;
+        }
+    };
+};
+export default frontendApiAccessMiddleware;
+//# sourceMappingURL=frontend-token-middleware.js.map

package/dist/lib/middleware/frontend-token-middleware.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"frontend-token-middleware.js","sourceRoot":"","sources":["../../../src/lib/middleware/frontend-token-middleware.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AAIjD,OAAO,EACH,iCAAiC,EACjC,wBAAwB,GAC3B,MAAM,2BAA2B,CAAC;AAEnC,MAAM,CAAC,MAAM,2BAA2B,GAAG,CACvC,EACI,SAAS,EACT,cAAc,EACd,YAAY,GACwD,EACxE,EAAE,eAAe,EAA6C,EAC3D,EAAE;IACL,MAAM,MAAM,GAAG,SAAS,CAAC,0CAA0C,CAAC,CAAC;IACrE,MAAM,CAAC,KAAK,CAAC,oCAAoC,CAAC,CAAC;IACnD,IAAI,CAAC,cAAc,CAAC,cAAc,EAAE,CAAC;QACjC,OAAO,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,CAAC,IAAI,EAAE,CAAC;IACxC,CAAC;IAED,OAAO,KAAK,EAAE,GAA+B,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE;QACxD,MAAM,gCAAgC,GAAG,YAAY,CAAC,SAAS,CAC3D,kCAAkC,CACrC,CAAC;QACF,gCAAgC;QAChC,IAAI,CAAC,gCAAgC,EAAE,CAAC;YACpC,OAAO,IAAI,EAAE,CAAC;QAClB,CAAC;QAED,IAAI,CAAC;YACD,MAAM,QAAQ,GAAG,GAAG,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC;YAC7C,IAAI,CAAC,QAAQ,EAAE,CAAC;gBACZ,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;oBACjB,OAAO,EAAE,iCAAiC;iBAC7C,CAAC,CAAC;gBACH,OAAO;YACX,CAAC;YAED,uDAAuD;YACvD,IAAI,QAAQ,CAAC,UAAU,CAAC,OAAO,CAAC,IAAI,QAAQ,CAAC,UAAU,CAAC,KAAK,CAAC,EAAE,CAAC;gBAC7D,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;oBACjB,OAAO,EAAE,wBAAwB;iBACpC,CAAC,CAAC;gBACH,OAAO;YACX,CAAC;YAED,MAAM,OAAO,GAAG,QAAQ;gBACpB,CAAC,CAAC,MAAM,eAAe,CAAC,eAAe,CAAC,QAAQ,CAAC;gBACjD,CAAC,CAAC,SAAS,CAAC;YAChB,MAAM,EAAE,QAAQ,EAAE,GAAG,YAAY,CAAC;YAElC,IAAI,OAAO,EAAE,CAAC;gBACV,IAAI,OAAO,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;oBAC5B,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;wBACjB,OAAO,EAAE,wBAAwB;qBACpC,CAAC,CAAC;oBACH,OAAO;gBACX,CAAC;gBACD,GAAG,CAAC,IAAI,GAAG,OAAO,CAAC;gBACnB,IAAI,EAAE,CAAC;YACX,CAAC;iBAAM,CAAC;gBACJ,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;oBACjB,OAAO,EAAE,iCAAiC;iBAC7C,CAAC,CAAC;gBACH,OAAO;YACX,CAAC;QACL,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACb,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACnB,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;gBACjB,OAAO,EAAE,iCAAiC;aAC7C,CAAC,CAAC;YACH,OAAO;QACX,CAAC;IACL,CAAC,CAAC;AACN,CAAC,CAAC;AAEF,eAAe,2BAA2B,CAAC"}

package/dist/lib/middleware/user-token-client-api-logger-middleware.js

@@ -3,7 +3,7 @@ export const userTokenClientApiLogger = ({ getLogger, flagResolver, }) => {
         const logger = getLogger('/middleware/user-token-client-api-logger-middleware.ts');
         const apiToken = req.header('authorization');
         if ((apiToken?.startsWith('user:') || apiToken?.startsWith('*:*.')) &&
-            flagResolver.isEnabled('userTokenWithClientApiLogging')) {
+            !flagResolver.isEnabled('userTokenWithClientApiLoggingKillSwitch')) {
             logger.info('In the next version update, calling API endpoints under /api/client/ using Personal Access Tokens and Service Accounts will no longer be supported. Please update your integrations to use the new supported authentication method before upgrading to avoid service disruption.');
         }
         next();

package/dist/lib/middleware/user-token-client-api-logger-middleware.js.map

@@ -1 +1 @@
-{"version":3,"file":"user-token-client-api-logger-middleware.js","sourceRoot":"","sources":["../../../src/lib/middleware/user-token-client-api-logger-middleware.ts"],"names":[],"mappings":"AAMA,MAAM,CAAC,MAAM,wBAAwB,GAAG,CAAC,EACrC,SAAS,EACT,YAAY,GACqC,EAAO,EAAE;IAC1D,OAAO,KAAK,EAAE,GAA+B,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE;QACxD,MAAM,MAAM,GAAG,SAAS,CACpB,wDAAwD,CAC3D,CAAC;QACF,MAAM,QAAQ,GAAG,GAAG,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC;QAC7C,IACI,CAAC,QAAQ,EAAE,UAAU,CAAC,OAAO,CAAC,IAAI,QAAQ,EAAE,UAAU,CAAC,MAAM,CAAC,CAAC;YAC/D,YAAY,CAAC,SAAS,CAAC,+BAA+B,CAAC,EACzD,CAAC;YACC,MAAM,CAAC,IAAI,CACP,kRAAkR,CACrR,CAAC;QACN,CAAC;QACD,IAAI,EAAE,CAAC;IACX,CAAC,CAAC;AACN,CAAC,CAAC"}
+{"version":3,"file":"user-token-client-api-logger-middleware.js","sourceRoot":"","sources":["../../../src/lib/middleware/user-token-client-api-logger-middleware.ts"],"names":[],"mappings":"AAMA,MAAM,CAAC,MAAM,wBAAwB,GAAG,CAAC,EACrC,SAAS,EACT,YAAY,GACqC,EAAO,EAAE;IAC1D,OAAO,KAAK,EAAE,GAA+B,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE;QACxD,MAAM,MAAM,GAAG,SAAS,CACpB,wDAAwD,CAC3D,CAAC;QACF,MAAM,QAAQ,GAAG,GAAG,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC;QAC7C,IACI,CAAC,QAAQ,EAAE,UAAU,CAAC,OAAO,CAAC,IAAI,QAAQ,EAAE,UAAU,CAAC,MAAM,CAAC,CAAC;YAC/D,CAAC,YAAY,CAAC,SAAS,CAAC,yCAAyC,CAAC,EACpE,CAAC;YACC,MAAM,CAAC,IAAI,CACP,kRAAkR,CACrR,CAAC;QACN,CAAC;QACD,IAAI,EAAE,CAAC;IACX,CAAC,CAAC;AACN,CAAC,CAAC"}

package/dist/lib/openapi/spec/event-schema.d.ts

@@ -20,7 +20,7 @@ export declare const eventSchema: {
         readonly type: {
             readonly type: "string";
             readonly description: "What [type](https://docs.getunleash.io/concepts/events#event-types) of event this is";
-            readonly enum: readonly ["application-created", "feature-created", "feature-deleted", "feature-updated", "feature-metadata-updated", "feature-variants-updated", "feature-environment-variants-updated", "feature-project-change", "feature-archived", "feature-revived", "feature-import", "feature-tagged", "feature-tag-import", "feature-strategy-update", "feature-strategy-add", "feature-strategy-remove", "feature-type-updated", "feature-completed", "feature-uncompleted", "feature-link-added", "feature-link-removed", "feature-link-updated", "strategy-order-changed", "drop-feature-tags", "feature-untagged", "feature-stale-on", "feature-stale-off", "drop-features", "feature-environment-enabled", "feature-environment-disabled", "strategy-created", "strategy-deleted", "strategy-deprecated", "strategy-reactivated", "strategy-updated", "strategy-import", "drop-strategies", "context-field-created", "context-field-updated", "context-field-deleted", "project-access-added", "project-access-user-roles-updated", "project-access-group-roles-updated", "project-access-user-roles-deleted", "project-access-group-roles-deleted", "project-access-updated", "project-created", "project-updated", "project-deleted", "project-archived", "project-revived", "project-import", "project-user-added", "project-user-removed", "project-user-role-changed", "project-group-added", "role-created", "role-updated", "role-deleted", "drop-projects", "tag-created", "tag-deleted", "tag-import", "drop-tags", "tag-type-created", "tag-type-deleted", "tag-type-updated", "tag-type-import", "drop-tag-types", "addon-config-created", "addon-config-updated", "addon-config-deleted", "db-pool-update", "user-created", "user-updated", "user-deleted", "drop-environments", "environment-import", "environment-created", "environment-updated", "environment-deleted", "segment-created", "segment-updated", "segment-deleted", "group-created", "group-updated", "group-deleted", "group-user-added", "group-user-removed", "setting-created", "setting-updated", "setting-deleted", "client-metrics", "client-register", "pat-created", "pat-deleted", "public-signup-token-created", "public-signup-token-user-added", "public-signup-token-updated", "change-request-created", "change-request-discarded", "change-added", "change-discarded", "change-edited", "change-request-rejected", "change-request-approved", "change-request-approval-added", "change-request-cancelled", "change-request-sent-to-review", "change-request-schedule-suspended", "change-request-applied", "change-request-scheduled", "change-request-scheduled-application-success", "change-request-scheduled-application-failure", "change-request-configuration-updated", "api-token-created", "api-token-updated", "api-token-deleted", "feature-favorited", "feature-unfavorited", "project-favorited", "project-unfavorited", "features-exported", "features-imported", "service-account-created", "service-account-deleted", "service-account-updated", "feature-potentially-stale-on", "feature-dependency-added", "feature-dependency-removed", "feature-dependencies-removed", "banner-created", "banner-updated", "banner-deleted", "safeguard-changed", "safeguard-deleted", "release-plan-progressions-resumed", "release-plan-progressions-paused", "project-environment-added", "project-environment-removed", "default-strategy-updated", "segment-import", "signal-endpoint-created", "signal-endpoint-updated", "signal-endpoint-deleted", "signal-endpoint-token-created", "signal-endpoint-token-updated", "signal-endpoint-token-deleted", "actions-created", "actions-updated", "actions-deleted", "release-plan-template-created", "release-plan-template-updated", "release-plan-template-deleted", "release-plan-template-archived", "release-plan-added", "release-plan-removed", "release-plan-milestone-started", "milestone-progression-created", "milestone-progression-updated", "milestone-progression-deleted", "milestone-progression-changed", "user-preference-updated", "scim-users-deleted", "scim-groups-deleted", "cdn-token-created", "change-request-requested-approvers-updated", "impact-metric-created", "impact-metric-updated", "impact-metric-deleted"];
+            readonly enum: readonly ["application-created", "feature-created", "feature-deleted", "feature-updated", "feature-metadata-updated", "feature-variants-updated", "feature-environment-variants-updated", "feature-project-change", "feature-archived", "feature-revived", "feature-import", "feature-tagged", "feature-tag-import", "feature-strategy-update", "feature-strategy-add", "feature-strategy-remove", "feature-type-updated", "feature-completed", "feature-uncompleted", "feature-link-added", "feature-link-removed", "feature-link-updated", "strategy-order-changed", "drop-feature-tags", "feature-untagged", "feature-stale-on", "feature-stale-off", "drop-features", "feature-environment-enabled", "feature-environment-disabled", "strategy-created", "strategy-deleted", "strategy-deprecated", "strategy-reactivated", "strategy-updated", "strategy-import", "drop-strategies", "context-field-created", "context-field-updated", "context-field-deleted", "project-access-added", "project-access-user-roles-updated", "project-access-group-roles-updated", "project-access-user-roles-deleted", "project-access-group-roles-deleted", "project-access-updated", "project-created", "project-updated", "project-deleted", "project-archived", "project-revived", "project-import", "project-user-added", "project-user-removed", "project-user-role-changed", "project-group-added", "role-created", "role-updated", "role-deleted", "drop-projects", "tag-created", "tag-deleted", "tag-import", "drop-tags", "tag-type-created", "tag-type-deleted", "tag-type-updated", "tag-type-import", "drop-tag-types", "addon-config-created", "addon-config-updated", "addon-config-deleted", "db-pool-update", "user-created", "user-updated", "user-deleted", "drop-environments", "environment-import", "environment-created", "environment-updated", "environment-deleted", "segment-created", "segment-updated", "segment-deleted", "group-created", "group-updated", "group-deleted", "group-user-added", "group-user-removed", "setting-created", "setting-updated", "setting-deleted", "client-metrics", "client-register", "pat-created", "pat-deleted", "public-signup-token-created", "public-signup-token-user-added", "public-signup-token-updated", "change-request-created", "change-request-discarded", "change-added", "change-discarded", "change-edited", "change-request-rejected", "change-request-approved", "change-request-approval-added", "change-request-cancelled", "change-request-sent-to-review", "change-request-schedule-suspended", "change-request-applied", "change-request-scheduled", "change-request-scheduled-application-success", "change-request-scheduled-application-failure", "change-request-configuration-updated", "api-token-created", "api-token-updated", "api-token-deleted", "feature-favorited", "feature-unfavorited", "project-favorited", "project-unfavorited", "features-exported", "features-imported", "service-account-created", "service-account-deleted", "service-account-updated", "feature-potentially-stale-on", "feature-dependency-added", "feature-dependency-removed", "feature-dependencies-removed", "banner-created", "banner-updated", "banner-deleted", "safeguard-changed", "safeguard-deleted", "release-plan-progressions-resumed", "release-plan-progressions-paused", "project-environment-added", "project-environment-removed", "default-strategy-updated", "segment-import", "signal-endpoint-created", "signal-endpoint-updated", "signal-endpoint-deleted", "signal-endpoint-token-created", "signal-endpoint-token-updated", "signal-endpoint-token-deleted", "actions-created", "actions-updated", "actions-deleted", "release-plan-template-created", "release-plan-template-updated", "release-plan-template-deleted", "release-plan-template-archived", "release-plan-added", "release-plan-removed", "release-plan-milestone-started", "milestone-progression-created", "milestone-progression-updated", "milestone-progression-deleted", "milestone-progression-changed", "user-preference-updated", "scim-users-deleted", "scim-groups-deleted", "cdn-token-created", "change-request-requested-approvers-updated", "impact-metric-created", "impact-metric-updated", "impact-metric-deleted", "user-access-request-registered", "user-access-request-approved", "user-access-request-rejected"];
             readonly example: "feature-created";
         };
         readonly createdBy: {

package/dist/lib/openapi/spec/event-search-response-schema.d.ts

@@ -43,7 +43,7 @@ export declare const eventSearchResponseSchema: {
                     readonly type: {
                         readonly type: "string";
                         readonly description: "What [type](https://docs.getunleash.io/concepts/events#event-types) of event this is";
-                        readonly enum: readonly ["application-created", "feature-created", "feature-deleted", "feature-updated", "feature-metadata-updated", "feature-variants-updated", "feature-environment-variants-updated", "feature-project-change", "feature-archived", "feature-revived", "feature-import", "feature-tagged", "feature-tag-import", "feature-strategy-update", "feature-strategy-add", "feature-strategy-remove", "feature-type-updated", "feature-completed", "feature-uncompleted", "feature-link-added", "feature-link-removed", "feature-link-updated", "strategy-order-changed", "drop-feature-tags", "feature-untagged", "feature-stale-on", "feature-stale-off", "drop-features", "feature-environment-enabled", "feature-environment-disabled", "strategy-created", "strategy-deleted", "strategy-deprecated", "strategy-reactivated", "strategy-updated", "strategy-import", "drop-strategies", "context-field-created", "context-field-updated", "context-field-deleted", "project-access-added", "project-access-user-roles-updated", "project-access-group-roles-updated", "project-access-user-roles-deleted", "project-access-group-roles-deleted", "project-access-updated", "project-created", "project-updated", "project-deleted", "project-archived", "project-revived", "project-import", "project-user-added", "project-user-removed", "project-user-role-changed", "project-group-added", "role-created", "role-updated", "role-deleted", "drop-projects", "tag-created", "tag-deleted", "tag-import", "drop-tags", "tag-type-created", "tag-type-deleted", "tag-type-updated", "tag-type-import", "drop-tag-types", "addon-config-created", "addon-config-updated", "addon-config-deleted", "db-pool-update", "user-created", "user-updated", "user-deleted", "drop-environments", "environment-import", "environment-created", "environment-updated", "environment-deleted", "segment-created", "segment-updated", "segment-deleted", "group-created", "group-updated", "group-deleted", "group-user-added", "group-user-removed", "setting-created", "setting-updated", "setting-deleted", "client-metrics", "client-register", "pat-created", "pat-deleted", "public-signup-token-created", "public-signup-token-user-added", "public-signup-token-updated", "change-request-created", "change-request-discarded", "change-added", "change-discarded", "change-edited", "change-request-rejected", "change-request-approved", "change-request-approval-added", "change-request-cancelled", "change-request-sent-to-review", "change-request-schedule-suspended", "change-request-applied", "change-request-scheduled", "change-request-scheduled-application-success", "change-request-scheduled-application-failure", "change-request-configuration-updated", "api-token-created", "api-token-updated", "api-token-deleted", "feature-favorited", "feature-unfavorited", "project-favorited", "project-unfavorited", "features-exported", "features-imported", "service-account-created", "service-account-deleted", "service-account-updated", "feature-potentially-stale-on", "feature-dependency-added", "feature-dependency-removed", "feature-dependencies-removed", "banner-created", "banner-updated", "banner-deleted", "safeguard-changed", "safeguard-deleted", "release-plan-progressions-resumed", "release-plan-progressions-paused", "project-environment-added", "project-environment-removed", "default-strategy-updated", "segment-import", "signal-endpoint-created", "signal-endpoint-updated", "signal-endpoint-deleted", "signal-endpoint-token-created", "signal-endpoint-token-updated", "signal-endpoint-token-deleted", "actions-created", "actions-updated", "actions-deleted", "release-plan-template-created", "release-plan-template-updated", "release-plan-template-deleted", "release-plan-template-archived", "release-plan-added", "release-plan-removed", "release-plan-milestone-started", "milestone-progression-created", "milestone-progression-updated", "milestone-progression-deleted", "milestone-progression-changed", "user-preference-updated", "scim-users-deleted", "scim-groups-deleted", "cdn-token-created", "change-request-requested-approvers-updated", "impact-metric-created", "impact-metric-updated", "impact-metric-deleted"];
+                        readonly enum: readonly ["application-created", "feature-created", "feature-deleted", "feature-updated", "feature-metadata-updated", "feature-variants-updated", "feature-environment-variants-updated", "feature-project-change", "feature-archived", "feature-revived", "feature-import", "feature-tagged", "feature-tag-import", "feature-strategy-update", "feature-strategy-add", "feature-strategy-remove", "feature-type-updated", "feature-completed", "feature-uncompleted", "feature-link-added", "feature-link-removed", "feature-link-updated", "strategy-order-changed", "drop-feature-tags", "feature-untagged", "feature-stale-on", "feature-stale-off", "drop-features", "feature-environment-enabled", "feature-environment-disabled", "strategy-created", "strategy-deleted", "strategy-deprecated", "strategy-reactivated", "strategy-updated", "strategy-import", "drop-strategies", "context-field-created", "context-field-updated", "context-field-deleted", "project-access-added", "project-access-user-roles-updated", "project-access-group-roles-updated", "project-access-user-roles-deleted", "project-access-group-roles-deleted", "project-access-updated", "project-created", "project-updated", "project-deleted", "project-archived", "project-revived", "project-import", "project-user-added", "project-user-removed", "project-user-role-changed", "project-group-added", "role-created", "role-updated", "role-deleted", "drop-projects", "tag-created", "tag-deleted", "tag-import", "drop-tags", "tag-type-created", "tag-type-deleted", "tag-type-updated", "tag-type-import", "drop-tag-types", "addon-config-created", "addon-config-updated", "addon-config-deleted", "db-pool-update", "user-created", "user-updated", "user-deleted", "drop-environments", "environment-import", "environment-created", "environment-updated", "environment-deleted", "segment-created", "segment-updated", "segment-deleted", "group-created", "group-updated", "group-deleted", "group-user-added", "group-user-removed", "setting-created", "setting-updated", "setting-deleted", "client-metrics", "client-register", "pat-created", "pat-deleted", "public-signup-token-created", "public-signup-token-user-added", "public-signup-token-updated", "change-request-created", "change-request-discarded", "change-added", "change-discarded", "change-edited", "change-request-rejected", "change-request-approved", "change-request-approval-added", "change-request-cancelled", "change-request-sent-to-review", "change-request-schedule-suspended", "change-request-applied", "change-request-scheduled", "change-request-scheduled-application-success", "change-request-scheduled-application-failure", "change-request-configuration-updated", "api-token-created", "api-token-updated", "api-token-deleted", "feature-favorited", "feature-unfavorited", "project-favorited", "project-unfavorited", "features-exported", "features-imported", "service-account-created", "service-account-deleted", "service-account-updated", "feature-potentially-stale-on", "feature-dependency-added", "feature-dependency-removed", "feature-dependencies-removed", "banner-created", "banner-updated", "banner-deleted", "safeguard-changed", "safeguard-deleted", "release-plan-progressions-resumed", "release-plan-progressions-paused", "project-environment-added", "project-environment-removed", "default-strategy-updated", "segment-import", "signal-endpoint-created", "signal-endpoint-updated", "signal-endpoint-deleted", "signal-endpoint-token-created", "signal-endpoint-token-updated", "signal-endpoint-token-deleted", "actions-created", "actions-updated", "actions-deleted", "release-plan-template-created", "release-plan-template-updated", "release-plan-template-deleted", "release-plan-template-archived", "release-plan-added", "release-plan-removed", "release-plan-milestone-started", "milestone-progression-created", "milestone-progression-updated", "milestone-progression-deleted", "milestone-progression-changed", "user-preference-updated", "scim-users-deleted", "scim-groups-deleted", "cdn-token-created", "change-request-requested-approvers-updated", "impact-metric-created", "impact-metric-updated", "impact-metric-deleted", "user-access-request-registered", "user-access-request-approved", "user-access-request-rejected"];
                         readonly example: "feature-created";
                     };
                     readonly createdBy: {

package/dist/lib/openapi/spec/events-schema.d.ts

@@ -50,7 +50,7 @@ export declare const eventsSchema: {
                     readonly type: {
                         readonly type: "string";
                         readonly description: "What [type](https://docs.getunleash.io/concepts/events#event-types) of event this is";
-                        readonly enum: readonly ["application-created", "feature-created", "feature-deleted", "feature-updated", "feature-metadata-updated", "feature-variants-updated", "feature-environment-variants-updated", "feature-project-change", "feature-archived", "feature-revived", "feature-import", "feature-tagged", "feature-tag-import", "feature-strategy-update", "feature-strategy-add", "feature-strategy-remove", "feature-type-updated", "feature-completed", "feature-uncompleted", "feature-link-added", "feature-link-removed", "feature-link-updated", "strategy-order-changed", "drop-feature-tags", "feature-untagged", "feature-stale-on", "feature-stale-off", "drop-features", "feature-environment-enabled", "feature-environment-disabled", "strategy-created", "strategy-deleted", "strategy-deprecated", "strategy-reactivated", "strategy-updated", "strategy-import", "drop-strategies", "context-field-created", "context-field-updated", "context-field-deleted", "project-access-added", "project-access-user-roles-updated", "project-access-group-roles-updated", "project-access-user-roles-deleted", "project-access-group-roles-deleted", "project-access-updated", "project-created", "project-updated", "project-deleted", "project-archived", "project-revived", "project-import", "project-user-added", "project-user-removed", "project-user-role-changed", "project-group-added", "role-created", "role-updated", "role-deleted", "drop-projects", "tag-created", "tag-deleted", "tag-import", "drop-tags", "tag-type-created", "tag-type-deleted", "tag-type-updated", "tag-type-import", "drop-tag-types", "addon-config-created", "addon-config-updated", "addon-config-deleted", "db-pool-update", "user-created", "user-updated", "user-deleted", "drop-environments", "environment-import", "environment-created", "environment-updated", "environment-deleted", "segment-created", "segment-updated", "segment-deleted", "group-created", "group-updated", "group-deleted", "group-user-added", "group-user-removed", "setting-created", "setting-updated", "setting-deleted", "client-metrics", "client-register", "pat-created", "pat-deleted", "public-signup-token-created", "public-signup-token-user-added", "public-signup-token-updated", "change-request-created", "change-request-discarded", "change-added", "change-discarded", "change-edited", "change-request-rejected", "change-request-approved", "change-request-approval-added", "change-request-cancelled", "change-request-sent-to-review", "change-request-schedule-suspended", "change-request-applied", "change-request-scheduled", "change-request-scheduled-application-success", "change-request-scheduled-application-failure", "change-request-configuration-updated", "api-token-created", "api-token-updated", "api-token-deleted", "feature-favorited", "feature-unfavorited", "project-favorited", "project-unfavorited", "features-exported", "features-imported", "service-account-created", "service-account-deleted", "service-account-updated", "feature-potentially-stale-on", "feature-dependency-added", "feature-dependency-removed", "feature-dependencies-removed", "banner-created", "banner-updated", "banner-deleted", "safeguard-changed", "safeguard-deleted", "release-plan-progressions-resumed", "release-plan-progressions-paused", "project-environment-added", "project-environment-removed", "default-strategy-updated", "segment-import", "signal-endpoint-created", "signal-endpoint-updated", "signal-endpoint-deleted", "signal-endpoint-token-created", "signal-endpoint-token-updated", "signal-endpoint-token-deleted", "actions-created", "actions-updated", "actions-deleted", "release-plan-template-created", "release-plan-template-updated", "release-plan-template-deleted", "release-plan-template-archived", "release-plan-added", "release-plan-removed", "release-plan-milestone-started", "milestone-progression-created", "milestone-progression-updated", "milestone-progression-deleted", "milestone-progression-changed", "user-preference-updated", "scim-users-deleted", "scim-groups-deleted", "cdn-token-created", "change-request-requested-approvers-updated", "impact-metric-created", "impact-metric-updated", "impact-metric-deleted"];
+                        readonly enum: readonly ["application-created", "feature-created", "feature-deleted", "feature-updated", "feature-metadata-updated", "feature-variants-updated", "feature-environment-variants-updated", "feature-project-change", "feature-archived", "feature-revived", "feature-import", "feature-tagged", "feature-tag-import", "feature-strategy-update", "feature-strategy-add", "feature-strategy-remove", "feature-type-updated", "feature-completed", "feature-uncompleted", "feature-link-added", "feature-link-removed", "feature-link-updated", "strategy-order-changed", "drop-feature-tags", "feature-untagged", "feature-stale-on", "feature-stale-off", "drop-features", "feature-environment-enabled", "feature-environment-disabled", "strategy-created", "strategy-deleted", "strategy-deprecated", "strategy-reactivated", "strategy-updated", "strategy-import", "drop-strategies", "context-field-created", "context-field-updated", "context-field-deleted", "project-access-added", "project-access-user-roles-updated", "project-access-group-roles-updated", "project-access-user-roles-deleted", "project-access-group-roles-deleted", "project-access-updated", "project-created", "project-updated", "project-deleted", "project-archived", "project-revived", "project-import", "project-user-added", "project-user-removed", "project-user-role-changed", "project-group-added", "role-created", "role-updated", "role-deleted", "drop-projects", "tag-created", "tag-deleted", "tag-import", "drop-tags", "tag-type-created", "tag-type-deleted", "tag-type-updated", "tag-type-import", "drop-tag-types", "addon-config-created", "addon-config-updated", "addon-config-deleted", "db-pool-update", "user-created", "user-updated", "user-deleted", "drop-environments", "environment-import", "environment-created", "environment-updated", "environment-deleted", "segment-created", "segment-updated", "segment-deleted", "group-created", "group-updated", "group-deleted", "group-user-added", "group-user-removed", "setting-created", "setting-updated", "setting-deleted", "client-metrics", "client-register", "pat-created", "pat-deleted", "public-signup-token-created", "public-signup-token-user-added", "public-signup-token-updated", "change-request-created", "change-request-discarded", "change-added", "change-discarded", "change-edited", "change-request-rejected", "change-request-approved", "change-request-approval-added", "change-request-cancelled", "change-request-sent-to-review", "change-request-schedule-suspended", "change-request-applied", "change-request-scheduled", "change-request-scheduled-application-success", "change-request-scheduled-application-failure", "change-request-configuration-updated", "api-token-created", "api-token-updated", "api-token-deleted", "feature-favorited", "feature-unfavorited", "project-favorited", "project-unfavorited", "features-exported", "features-imported", "service-account-created", "service-account-deleted", "service-account-updated", "feature-potentially-stale-on", "feature-dependency-added", "feature-dependency-removed", "feature-dependencies-removed", "banner-created", "banner-updated", "banner-deleted", "safeguard-changed", "safeguard-deleted", "release-plan-progressions-resumed", "release-plan-progressions-paused", "project-environment-added", "project-environment-removed", "default-strategy-updated", "segment-import", "signal-endpoint-created", "signal-endpoint-updated", "signal-endpoint-deleted", "signal-endpoint-token-created", "signal-endpoint-token-updated", "signal-endpoint-token-deleted", "actions-created", "actions-updated", "actions-deleted", "release-plan-template-created", "release-plan-template-updated", "release-plan-template-deleted", "release-plan-template-archived", "release-plan-added", "release-plan-removed", "release-plan-milestone-started", "milestone-progression-created", "milestone-progression-updated", "milestone-progression-deleted", "milestone-progression-changed", "user-preference-updated", "scim-users-deleted", "scim-groups-deleted", "cdn-token-created", "change-request-requested-approvers-updated", "impact-metric-created", "impact-metric-updated", "impact-metric-deleted", "user-access-request-registered", "user-access-request-approved", "user-access-request-rejected"];
                         readonly example: "feature-created";
                     };
                     readonly createdBy: {