wcz-test 7.2.4 → 7.3.0

package/dist/middleware.js

@@ -1,7 +1,7 @@
-import { createMiddleware as k } from "@tanstack/react-start";
+import { createMiddleware as V } from "@tanstack/react-start";
 import { permissions as re } from "virtual:wcz-layout";
-import { c as H } from "./utils-BXxJ2sNo.js";
-import { g as ne } from "./msalClient-Cem8ZXIU.js";
+import { s as _ } from "./utils-BTQg82mj.js";
+import { g as ne } from "./msalClient-BDfKsC3C.js";
 const N = new TextEncoder(), v = new TextDecoder();
 function ae(...e) {
   const t = e.reduce((a, { length: i }) => a + i, 0), r = new Uint8Array(t);
@@ -393,7 +393,7 @@ function be(e, t) {
   if (t)
     return new Set(t);
 }
-const I = (e) => w(e) && typeof e.kty == "string", Ae = (e) => e.kty !== "oct" && (e.kty === "AKP" && typeof e.priv == "string" || typeof e.d == "string"), ge = (e) => e.kty !== "oct" && e.d === void 0 && e.priv === void 0, Ke = (e) => e.kty === "oct" && typeof e.k == "string";
+const O = (e) => w(e) && typeof e.kty == "string", Ae = (e) => e.kty !== "oct" && (e.kty === "AKP" && typeof e.priv == "string" || typeof e.d == "string"), ge = (e) => e.kty !== "oct" && e.d === void 0 && e.priv === void 0, Ke = (e) => e.kty === "oct" && typeof e.k == "string";
 let g;
 const L = async (e, t, r, n = !1) => {
   g ||= /* @__PURE__ */ new WeakMap();
@@ -515,11 +515,11 @@ async function Te(e, t) {
     let r = e.export({ format: "jwk" });
     return L(e, r, t);
   }
-  if (I(e))
+  if (O(e))
     return e.k ? K(e.k) : L(e, e, t, !0);
   throw new Error("unreachable");
 }
-const A = (e) => e?.[Symbol.toStringTag], J = (e, t, r) => {
+const A = (e) => e?.[Symbol.toStringTag], D = (e, t, r) => {
   if (t.use !== void 0) {
     let n;
     switch (r) {
@@ -564,8 +564,8 @@ const A = (e) => e?.[Symbol.toStringTag], J = (e, t, r) => {
   return !0;
 }, Re = (e, t, r) => {
   if (!(t instanceof Uint8Array)) {
-    if (I(t)) {
-      if (Ke(t) && J(e, t, r))
+    if (O(t)) {
+      if (Ke(t) && D(e, t, r))
         return;
       throw new TypeError('JSON Web Key for symmetric algorithms must have JWK "kty" (Key Type) equal to "oct" and the JWK "k" (Key Value) present');
     }
@@ -575,16 +575,16 @@ const A = (e) => e?.[Symbol.toStringTag], J = (e, t, r) => {
       throw new TypeError(`${A(t)} instances for symmetric algorithms must be of type "secret"`);
   }
 }, We = (e, t, r) => {
-  if (I(t))
+  if (O(t))
     switch (r) {
       case "decrypt":
       case "sign":
-        if (Ae(t) && J(e, t, r))
+        if (Ae(t) && D(e, t, r))
           return;
         throw new TypeError("JSON Web Key for this operation must be a private JWK");
       case "encrypt":
       case "verify":
-        if (ge(t) && J(e, t, r))
+        if (ge(t) && D(e, t, r))
           return;
         throw new TypeError("JSON Web Key for this operation must be a public JWK");
     }
@@ -650,7 +650,7 @@ function Pe(e, t) {
       throw new S(`alg ${e} is not supported either by JOSE or your javascript runtime`);
   }
 }
-async function _e(e, t, r) {
+async function Je(e, t, r) {
   if (t instanceof Uint8Array) {
     if (!e.startsWith("HS"))
       throw new TypeError(le(t, "CryptoKey", "KeyObject", "JSON Web Key"));
@@ -658,8 +658,8 @@ async function _e(e, t, r) {
   }
   return he(t, e, r), t;
 }
-async function Je(e, t, r, n) {
-  const a = await _e(e, t, "verify");
+async function _e(e, t, r, n) {
+  const a = await Je(e, t, "verify");
   me(e, a);
   const i = Pe(e, a.algorithm);
   try {
@@ -719,7 +719,7 @@ async function De(e, t, r) {
     throw new d("Failed to base64url decode the signature");
   }
   const T = await Te(t, o);
-  if (!await Je(o, T, l, f))
+  if (!await _e(o, T, l, f))
     throw new fe();
   let p;
   if (s)
@@ -741,7 +741,7 @@ async function Ie(e, t, r) {
   const o = await De({ payload: a, protected: n, signature: i }, t, r), u = { payload: o.payload, protectedHeader: o.protectedHeader };
   return typeof t == "function" ? { ...u, key: o.key } : u;
 }
-const Oe = (e) => Math.floor(e.getTime() / 1e3), j = 60, ee = j * 60, O = ee * 24, He = O * 7, Ne = O * 365.25, Me = /^(\+|\-)? ?(\d+|\d+\.\d+) ?(seconds?|secs?|s|minutes?|mins?|m|hours?|hrs?|h|days?|d|weeks?|w|years?|yrs?|y)(?: (ago|from now))?$/i;
+const Oe = (e) => Math.floor(e.getTime() / 1e3), j = 60, ee = j * 60, H = ee * 24, He = H * 7, Ne = H * 365.25, Me = /^(\+|\-)? ?(\d+|\d+\.\d+) ?(seconds?|secs?|s|minutes?|mins?|m|hours?|hrs?|h|days?|d|weeks?|w|years?|yrs?|y)(?: (ago|from now))?$/i;
 function x(e) {
   const t = Me.exec(e);
   if (!t || t[4] && t[1])
@@ -773,7 +773,7 @@ function x(e) {
     case "day":
     case "days":
     case "d":
-      a = Math.round(r * O);
+      a = Math.round(r * H);
       break;
     case "week":
     case "weeks":
@@ -870,12 +870,12 @@ function $e(e) {
   }
 }
 function Fe(e) {
-  return e && typeof e == "object" && Array.isArray(e.keys) && e.keys.every(Ve);
+  return e && typeof e == "object" && Array.isArray(e.keys) && e.keys.every(ke);
 }
-function Ve(e) {
+function ke(e) {
   return w(e);
 }
-class ke {
+class Ve {
   #r;
   #s = /* @__PURE__ */ new WeakMap();
   constructor(t) {
@@ -933,7 +933,7 @@ async function $(e, t, r) {
   return n[r];
 }
 function F(e) {
-  const t = new ke(e), r = async (n, a) => t.getKey(n, a);
+  const t = new Ve(e), r = async (n, a) => t.getKey(n, a);
   return Object.defineProperties(r, {
     jwks: {
       value: () => structuredClone(t.jwks()),
@@ -946,8 +946,8 @@ function F(e) {
 function Be() {
   return typeof WebSocketPair < "u" || typeof navigator < "u" && navigator.userAgent === "Cloudflare-Workers" || typeof EdgeRuntime < "u" && EdgeRuntime === "vercel";
 }
-let D;
-(typeof navigator > "u" || !navigator.userAgent?.startsWith?.("Mozilla/5.0 ")) && (D = "jose/v6.1.3");
+let I;
+(typeof navigator > "u" || !navigator.userAgent?.startsWith?.("Mozilla/5.0 ")) && (I = "jose/v6.1.3");
 const Ge = /* @__PURE__ */ Symbol();
 async function ze(e, t, r, n = fetch) {
   const a = await n(e, {
@@ -966,7 +966,7 @@ async function ze(e, t, r, n = fetch) {
     throw new h("Failed to parse the JSON Web Key Set HTTP response as JSON");
   }
 }
-const _ = /* @__PURE__ */ Symbol();
+const J = /* @__PURE__ */ Symbol();
 function qe(e, t) {
   return !(typeof e != "object" || e === null || !("uat" in e) || typeof e.uat != "number" || Date.now() - e.uat >= t || !("jwks" in e) || !w(e.jwks) || !Array.isArray(e.jwks.keys) || !Array.prototype.every.call(e.jwks.keys, w));
 }
@@ -984,7 +984,7 @@ class Ye {
   constructor(t, r) {
     if (!(t instanceof URL))
       throw new TypeError("url must be an instance of URL");
-    this.#r = new URL(t.href), this.#s = typeof r?.timeoutDuration == "number" ? r?.timeoutDuration : 5e3, this.#c = typeof r?.cooldownDuration == "number" ? r?.cooldownDuration : 3e4, this.#o = typeof r?.cacheMaxAge == "number" ? r?.cacheMaxAge : 6e5, this.#t = new Headers(r?.headers), D && !this.#t.has("User-Agent") && this.#t.set("User-Agent", D), this.#t.has("accept") || (this.#t.set("accept", "application/json"), this.#t.append("accept", "application/jwk-set+json")), this.#f = r?.[Ge], r?.[_] !== void 0 && (this.#i = r?.[_], qe(r?.[_], this.#o) && (this.#n = this.#i.uat, this.#a = F(this.#i.jwks)));
+    this.#r = new URL(t.href), this.#s = typeof r?.timeoutDuration == "number" ? r?.timeoutDuration : 5e3, this.#c = typeof r?.cooldownDuration == "number" ? r?.cooldownDuration : 3e4, this.#o = typeof r?.cacheMaxAge == "number" ? r?.cacheMaxAge : 6e5, this.#t = new Headers(r?.headers), I && !this.#t.has("User-Agent") && this.#t.set("User-Agent", I), this.#t.has("accept") || (this.#t.set("accept", "application/json"), this.#t.append("accept", "application/jwk-set+json")), this.#f = r?.[Ge], r?.[J] !== void 0 && (this.#i = r?.[J], qe(r?.[J], this.#o) && (this.#n = this.#i.uat, this.#a = F(this.#i.jwks)));
   }
   pendingFetch() {
     return !!this.#e;
@@ -1048,7 +1048,7 @@ function Xe(e, t) {
     }
   }), n;
 }
-const nt = (e) => k().server(async ({
+const nt = (e) => V().server(async ({
   next: t,
   request: r
 }) => {
@@ -1058,7 +1058,6 @@ const nt = (e) => k().server(async ({
     id: a.sub,
     name: a.name.split("/")[0],
     email: a.preferred_username.toLowerCase(),
-    groups: a.groups ?? [],
     department: a.department || "",
     employeeId: a.employeeId || "",
     hasPermission: (s) => re[s].some((u) => (a.groups ?? []).includes(u))
@@ -1069,7 +1068,7 @@ const nt = (e) => k().server(async ({
       user: i
     }
   });
-}), at = (e) => k({
+}), at = (e) => V({
   type: "function"
 }).client(async ({
   next: t
@@ -1085,14 +1084,14 @@ async function Qe(e) {
   const {
     payload: t
   } = await Ue(e, Ze(), {
-    issuer: `https://login.microsoftonline.com/${H.VITE_ENTRA_TENANT_ID}/v2.0`,
-    audience: H.VITE_ENTRA_CLIENT_ID
+    issuer: `https://login.microsoftonline.com/${_.ENTRA_TENANT_ID}/v2.0`,
+    audience: _.ENTRA_CLIENT_ID
   });
   return t;
 }
-let V = null;
+let k = null;
 function Ze() {
-  return V ??= Xe(new URL(`https://login.microsoftonline.com/${process.env.ENTRA_TENANT_ID}/discovery/v2.0/keys`)), V;
+  return k ??= Xe(new URL(`https://login.microsoftonline.com/${_.ENTRA_TENANT_ID}/discovery/v2.0/keys`)), k;
 }
 export {
   nt as authMiddleware,