zibri 2.3.0 → 2.4.0

package/dist/cjs/auth/encryption/encryption.service.js

@@ -0,0 +1,559 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+var __param = (this && this.__param) || function (paramIndex, decorator) {
+    return function (target, key) { decorator(target, key, paramIndex); }
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.EncryptionService = exports.EncryptionKeyCache = void 0;
+const encryption_key_model_1 = require("./encryption-key.model");
+const encryption_utilities_1 = require("./encryption.utilities");
+const encryption_strategy_entity_model_1 = require("./strategies/encryption-strategy-entity.model");
+const write_through_read_through_cache_1 = require("../../caching/cache/read-through/write-through-read-through.cache");
+const cache_delete_decorator_1 = require("../../caching/decorators/cache-delete.decorator");
+const cache_write_decorator_1 = require("../../caching/decorators/cache-write.decorator");
+const cache_decorator_1 = require("../../caching/decorators/cache.decorator");
+const cached_decorator_1 = require("../../caching/decorators/cached.decorator");
+const in_memory_cache_store_1 = require("../../caching/store/in-memory.cache-store");
+const repository_1 = require("../../data-source/repository");
+const inject_repository_decorator_1 = require("../../di/decorators/inject-repository.decorator");
+const inject_decorator_1 = require("../../di/decorators/inject.decorator");
+const injectable_decorator_1 = require("../../di/decorators/injectable.decorator");
+const zibri_di_tokens_default_1 = require("../../di/default/zibri-di-tokens.default");
+const no_provider_error_1 = require("../../di/errors/no-provider.error");
+const inject_function_1 = require("../../di/inject.function");
+const register_function_1 = require("../../di/register.function");
+const not_found_error_1 = require("../../error-handling/errors/not-found.error");
+const promise_utilities_1 = require("../../utilities/promise.utilities");
+const INIT_ERROR_MESSAGE = 'Error initializing encryption service.';
+let EncryptionKeyCache = class EncryptionKeyCache extends write_through_read_through_cache_1.WriteThroughReadThroughCache {
+    // eslint-disable-next-line jsdoc/require-jsdoc
+    get logger() {
+        return (0, inject_function_1.inject)(zibri_di_tokens_default_1.ZIBRI_DI_TOKENS.LOGGER);
+    }
+    // eslint-disable-next-line jsdoc/require-jsdoc
+    get cacheService() {
+        return (0, inject_function_1.inject)(zibri_di_tokens_default_1.ZIBRI_DI_TOKENS.CACHE_SERVICE);
+    }
+    // eslint-disable-next-line jsdoc/require-jsdoc
+    get metricsService() {
+        return (0, inject_function_1.inject)(zibri_di_tokens_default_1.ZIBRI_DI_TOKENS.METRICS_SERVICE);
+    }
+    constructor() {
+        super('EncryptionKeyCache', new in_memory_cache_store_1.InMemoryCacheStore(), []);
+    }
+};
+exports.EncryptionKeyCache = EncryptionKeyCache;
+exports.EncryptionKeyCache = EncryptionKeyCache = __decorate([
+    (0, cache_decorator_1.Cache)()
+    // eslint-disable-next-line jsdoc/require-jsdoc
+    ,
+    __metadata("design:paramtypes", [])
+], EncryptionKeyCache);
+/**
+ * Default encryption service implementation of Zibri.
+ */
+let EncryptionService = class EncryptionService {
+    strategyRepository;
+    keyRepository;
+    strategyClasses;
+    hasCreatedInitialDefaultStrategy = false;
+    strategies = [];
+    strategyEntities = [];
+    options;
+    constructor(strategyRepository, keyRepository, strategyClasses, options) {
+        this.strategyRepository = strategyRepository;
+        this.keyRepository = keyRepository;
+        this.strategyClasses = strategyClasses;
+        if (!options) {
+            throw new no_provider_error_1.NoProviderError(zibri_di_tokens_default_1.ZIBRI_DI_TOKENS.ENCRYPTION_MASTER_OPTIONS, []);
+        }
+        this.options = options;
+    }
+    // eslint-disable-next-line jsdoc/require-jsdoc
+    async onAppInit() {
+        if (!this.strategyClasses.length) {
+            throw new Error('Needs to provide at least one encryption strategy.');
+        }
+        for (const strategy of this.strategyClasses) {
+            (0, register_function_1.register)({ token: strategy, useClass: strategy });
+            this.strategies.push((0, inject_function_1.inject)(strategy));
+        }
+        const strategies = await this.strategyRepository.findAll();
+        this.strategyEntities.push(...strategies);
+        this.validateNoDuplicateEncryptionStrategy();
+        this.validateNoMissingEncryptionStrategy();
+        this.validateStrategyNamesAndVersions();
+        const keys = await this.keyRepository.findAll();
+        this.validateNoDuplicateMasterEncryptionStrategy();
+        this.validateNoMissingMasterEncryptionStrategy(keys);
+        this.validateMasterStrategyNamesAndVersions();
+        this.validateNoDotsInMasterKeyIds();
+        this.validateNoMissingMasterKeyIds(keys);
+        await this.reEncryptKeys(keys);
+    }
+    // eslint-disable-next-line jsdoc/require-jsdoc
+    async encrypt(value, options) {
+        if (!options) {
+            const strategy = this.findDefaultStrategy();
+            if (!this.hasCreatedInitialDefaultStrategy && !strategy.entity && !this.strategyEntities.length) {
+                const key = {
+                    status: encryption_key_model_1.EncryptionKeyStatus.DEFAULT,
+                    value: await this.generateEncryptedKey(strategy.strategy)
+                };
+                const entity = await this.createStrategyEntity({
+                    name: strategy.strategy.name,
+                    version: strategy.strategy.version,
+                    status: encryption_strategy_entity_model_1.EncryptionStrategyStatus.DEFAULT,
+                    keys: [key]
+                });
+                this.hasCreatedInitialDefaultStrategy = true;
+                const strategyClass = this.findStrategyClass(strategy.strategy.name, strategy.strategy.version);
+                const decryptedKey = await this.decryptKey(strategyClass, key.value);
+                return await strategy.strategy.encrypt(value, { keyId: entity.keys[0].id, key: decryptedKey });
+            }
+            if (!strategy.entity) {
+                const key = {
+                    status: encryption_key_model_1.EncryptionKeyStatus.DEFAULT,
+                    value: await this.generateEncryptedKey(strategy.strategy)
+                };
+                const entity = await this.createStrategyEntity({
+                    name: strategy.strategy.name,
+                    version: strategy.strategy.version,
+                    status: encryption_strategy_entity_model_1.EncryptionStrategyStatus.ACTIVE,
+                    keys: [key]
+                });
+                const strategyClass = this.findStrategyClass(strategy.strategy.name, strategy.strategy.version);
+                const decryptedKey = await this.decryptKey(strategyClass, key.value);
+                return await strategy.strategy.encrypt(value, { keyId: entity.keys[0].id, key: decryptedKey });
+            }
+            const strategyClass = this.findStrategyClass(strategy.strategy.name, strategy.strategy.version);
+            const key = await this.findOrCreateDefaultKeyForStrategy(strategy.entity);
+            const decryptedKey = await this.decryptKey(strategyClass, key.value);
+            return await strategy.strategy.encrypt(value, { keyId: key.id, key: decryptedKey });
+        }
+        const strategy = this.strategies.find(s => s instanceof options.strategy);
+        if (!strategy) {
+            throw new Error(`The given strategy ${options.strategy.name} was not provided as part of ZIBRI_DI_TOKENS.ENCRYPTION_STRATEGIES`);
+        }
+        if (options.strategyOptions?.keyId) {
+            const decryptedKey = await this.findKey(options.strategyOptions.keyId, undefined);
+            return await strategy.encrypt(value, { key: decryptedKey, keyId: options.strategyOptions.keyId, ...options.strategyOptions });
+        }
+        const entity = this.strategyEntities.find(s => s.name === strategy.name && s.version === strategy.version);
+        if (!entity) {
+            const key = {
+                status: encryption_key_model_1.EncryptionKeyStatus.DEFAULT,
+                value: await this.generateEncryptedKey(strategy)
+            };
+            const createdEntity = await this.createStrategyEntity({
+                name: strategy.name,
+                version: strategy.version,
+                status: encryption_strategy_entity_model_1.EncryptionStrategyStatus.ACTIVE,
+                keys: [key]
+            });
+            const decryptedKey = await this.decryptKey(options.strategy, key.value);
+            return await strategy.encrypt(value, { keyId: createdEntity.keys[0].id, key: decryptedKey, ...options.strategyOptions });
+        }
+        const key = await this.findOrCreateDefaultKeyForStrategy(entity);
+        const decryptedKey = await this.decryptKey(options.strategy, key.value);
+        return await strategy.encrypt(value, { key: decryptedKey, keyId: key.id, ...options.strategyOptions });
+    }
+    // eslint-disable-next-line jsdoc/require-jsdoc
+    async decrypt(value, options) {
+        const content = encryption_utilities_1.EncryptionUtilities.encryptionStringToContent(value);
+        const strategy = this.findStrategy(content.strategyName, content.version);
+        const key = await this.findKey(content.keyId, undefined);
+        return await strategy.decrypt(value, { key, keyId: content.keyId, ...options ?? {} });
+    }
+    // eslint-disable-next-line jsdoc/require-jsdoc
+    async createKey(strategyClass, data, options) {
+        const strategy = (0, inject_function_1.inject)(strategyClass);
+        const encryptedKey = await this.generateEncryptedKey(strategy);
+        const entity = this.strategyEntities.find(s => s.name === strategy.name && s.version === strategy.version);
+        if (!entity) {
+            throw new not_found_error_1.NotFoundError(`Could not find ${encryption_strategy_entity_model_1.EncryptionStrategyEntity.name}.`);
+        }
+        const currentDefaultKey = entity.keys.find(k => k.status === encryption_key_model_1.EncryptionKeyStatus.DEFAULT);
+        if (data.status === encryption_key_model_1.EncryptionKeyStatus.DEFAULT && currentDefaultKey) {
+            await this.updateKeyEntityById(currentDefaultKey.id, { status: encryption_key_model_1.EncryptionKeyStatus.ACTIVE }, options);
+        }
+        return await this.createKeyEntity(encryptedKey, entity, data, options);
+    }
+    // eslint-disable-next-line jsdoc/require-jsdoc
+    async deleteKey(keyId, options) {
+        const key = await this.findKeyEntityById(keyId, options);
+        if (key.status === encryption_key_model_1.EncryptionKeyStatus.DEFAULT && !(options?.allowDefault ?? false)) {
+            throw new Error('Cannot delete the default key. Pass allowDefault: true to override.');
+        }
+        await this.deleteKeyEntityById(keyId, options);
+    }
+    // eslint-disable-next-line jsdoc/require-jsdoc
+    async deleteAllKeys(where, options = {}) {
+        const keys = await this.keyRepository.findAll({ where });
+        if (!(options.allowDefault ?? false) && keys.some(k => k.status === encryption_key_model_1.EncryptionKeyStatus.DEFAULT)) {
+            throw new Error('Cannot delete a default key. Pass allowDefault: true to override.');
+        }
+        const transaction = options.transaction ?? await this.keyRepository.dataSource.startTransaction();
+        const ownTransaction = !options.transaction;
+        options.transaction = transaction;
+        try {
+            await promise_utilities_1.PromiseUtilities.allChunked(keys, k => this.deleteKeyEntityById(k.id, options));
+            if (ownTransaction) {
+                await transaction.commit();
+            }
+        }
+        catch (error) {
+            if (ownTransaction) {
+                await transaction.rollback();
+            }
+            throw error;
+        }
+    }
+    // eslint-disable-next-line jsdoc/require-jsdoc
+    async markKeyAsDefaultForStrategy(keyId, strategyClass, options = {}) {
+        const transaction = options.transaction ?? await this.keyRepository.dataSource.startTransaction();
+        const ownTransaction = !options.transaction; // track if we created it
+        options.transaction = transaction;
+        try {
+            const strategy = (0, inject_function_1.inject)(strategyClass);
+            const entity = this.strategyEntities.find(s => s.name === strategy.name && s.version === strategy.version);
+            if (!entity) {
+                throw new not_found_error_1.NotFoundError(`Could not find ${encryption_strategy_entity_model_1.EncryptionStrategyEntity.name}.`);
+            }
+            const key = await this.findKeyEntityById(keyId, options);
+            if (key.strategy.name !== strategy.name || key.strategy.version !== strategy.version) {
+                throw new Error('The key for the given id has a different strategy than the provided one');
+            }
+            const currentDefaultKey = entity.keys.find(k => k.status === encryption_key_model_1.EncryptionKeyStatus.DEFAULT);
+            if (currentDefaultKey) {
+                await this.updateKeyEntityById(currentDefaultKey.id, { status: encryption_key_model_1.EncryptionKeyStatus.ACTIVE }, options);
+            }
+            await this.updateKeyEntityById(keyId, { status: encryption_key_model_1.EncryptionKeyStatus.DEFAULT }, options);
+            if (ownTransaction) {
+                await transaction.commit();
+            }
+        }
+        catch (error) {
+            if (ownTransaction) {
+                await transaction.rollback();
+            }
+            throw error;
+        }
+    }
+    // eslint-disable-next-line jsdoc/require-jsdoc
+    async decryptKey(strategy, encryptedKey) {
+        const keyBase64 = await this.masterDecrypt(encryptedKey);
+        const keyBuffer = Buffer.from(keyBase64, 'base64');
+        return await (0, inject_function_1.inject)(strategy).deserializeKey(keyBuffer);
+    }
+    // eslint-disable-next-line jsdoc/require-jsdoc
+    async needsReEncryption(encrypted) {
+        const content = encryption_utilities_1.EncryptionUtilities.encryptionStringToContent(encrypted);
+        const strategy = this.findStrategy(content.strategyName, content.version);
+        const strategyEntity = this.strategyEntities.find(s => s.name === strategy.name && s.version === strategy.version);
+        if (!strategyEntity) {
+            throw new not_found_error_1.NotFoundError(`Could not find ${encryption_strategy_entity_model_1.EncryptionStrategyEntity.name}.`);
+        }
+        const key = await this.findKeyEntityById(content.keyId, undefined);
+        return strategyEntity.status === encryption_strategy_entity_model_1.EncryptionStrategyStatus.DEPRECATED || key.status === encryption_key_model_1.EncryptionKeyStatus.DEPRECATED;
+    }
+    needsMasterReEncryption(encrypted) {
+        const content = encryption_utilities_1.EncryptionUtilities.encryptionStringToContent(encrypted);
+        const allKeys = [
+            this.options.currentMasterKey,
+            ...this.options.oldMasterKeys ?? []
+        ];
+        const key = allKeys.find(k => k.id === content.keyId);
+        if (!key) {
+            throw new Error(`No master key found with id "${content.keyId}"`);
+        }
+        const allStrategies = [
+            this.options.currentMasterStrategy,
+            ...this.options.oldMasterStrategies ?? []
+        ];
+        const strategy = allStrategies.find(k => k.name === content.strategyName && k.version === content.version);
+        if (!strategy) {
+            throw new Error(`No master strategy found for ${content.strategyName} (${content.version})`);
+        }
+        return strategy.name !== this.options.currentMasterStrategy.name
+            || strategy.version !== this.options.currentMasterStrategy.version
+            || key.id !== this.options.currentMasterKey.id;
+    }
+    async generateEncryptedKey(strategy) {
+        const rawKey = await strategy.generateRandomKey();
+        const keyBytes = await strategy.serializeKey(rawKey);
+        const keyBase64 = keyBytes.toString('base64');
+        return await this.masterEncrypt(keyBase64);
+    }
+    async findKey(keyId, options) {
+        const entity = await this.findKeyEntityById(keyId, options);
+        const strategy = this.findStrategyClass(entity.strategy.name, entity.strategy.version);
+        return await this.decryptKey(strategy, entity.value);
+    }
+    // eslint-disable-next-line unusedImports/no-unused-vars
+    async findKeyEntityById(id, options) {
+        return await this.keyRepository.findById(id, { relations: ['strategy'], ...options });
+    }
+    // eslint-disable-next-line unusedImports/no-unused-vars
+    async createKeyEntity(encryptedValue, strategy, data, options) {
+        const created = await this.keyRepository.create({
+            value: encryptedValue,
+            strategy,
+            ...data
+        }, options);
+        const key = await this.keyRepository.findById(created.id, { relations: ['strategy'], ...options });
+        this.syncStrategyEntityKey(strategy, key);
+        return key;
+    }
+    // eslint-disable-next-line unusedImports/no-unused-vars
+    async updateKeyEntityById(id, data, options) {
+        const updated = await this.keyRepository.updateById(id, data, options);
+        const key = await this.keyRepository.findById(updated.id, { relations: ['strategy'], ...options });
+        this.syncStrategyEntityKey(updated.strategy, key);
+        return key;
+    }
+    // eslint-disable-next-line unusedImports/no-unused-vars
+    async deleteKeyEntityById(id, options) {
+        const strategy = this.strategyEntities.find(s => s.keys.some(k => k.id === id));
+        if (!strategy) {
+            throw new not_found_error_1.NotFoundError(`Could not find strategy for key with id ${id}`);
+        }
+        strategy.keys = strategy.keys.filter(k => k.id !== id);
+        await this.keyRepository.deleteById(id, options);
+    }
+    async createStrategyEntity(data) {
+        const res = await this.strategyRepository.create(data);
+        this.strategyEntities.push(res);
+        return res;
+    }
+    syncStrategyEntityKey(strategy, key) {
+        const existingIndex = strategy.keys.findIndex(k => k.id === key.id);
+        if (existingIndex >= 0) {
+            strategy.keys[existingIndex] = key;
+            return;
+        }
+        strategy.keys.push(key);
+    }
+    async findOrCreateDefaultKeyForStrategy(strategy) {
+        return strategy.keys.find(k => k.status === encryption_key_model_1.EncryptionKeyStatus.DEFAULT)
+            ?? strategy.keys.at(0)
+            ?? await this.createKey(this.findStrategyClass(strategy.name, strategy.version), { status: encryption_key_model_1.EncryptionKeyStatus.DEFAULT });
+    }
+    findStrategy(name, version) {
+        const res = this.strategies.find(s => s.name === name && s.version === version);
+        if (!res) {
+            throw new Error(`No strategy found for ${name} (${version})`);
+        }
+        return res;
+    }
+    findStrategyClass(name, version) {
+        const res = this.strategyClasses.find(s => (0, inject_function_1.inject)(s).name === name && (0, inject_function_1.inject)(s).version === version);
+        if (!res) {
+            throw new Error(`No strategy found for ${name} (${version})`);
+        }
+        return res;
+    }
+    async masterEncrypt(keyBase64) {
+        const encrypted = await this.options.currentMasterStrategy.encrypt(keyBase64, {
+            key: this.options.currentMasterKey.value,
+            keyId: this.options.currentMasterKey.id
+        });
+        const content = encryption_utilities_1.EncryptionUtilities.encryptionStringToContent(encrypted);
+        if (content.keyId !== this.options.currentMasterKey.id) {
+            throw new Error(`Master key id mismatch: expected ${this.options.currentMasterKey.id}, got ${content.keyId}`);
+        }
+        return encrypted;
+    }
+    async masterDecrypt(encrypted) {
+        const content = encryption_utilities_1.EncryptionUtilities.encryptionStringToContent(encrypted);
+        const masterKey = [
+            this.options.currentMasterKey,
+            ...this.options.oldMasterKeys ?? []
+        ].find(k => k.id === content.keyId);
+        if (!masterKey) {
+            throw new Error(`Could not find master encryption key with id "${content.keyId}"`);
+        }
+        const masterStrategy = [
+            this.options.currentMasterStrategy,
+            ...this.options.oldMasterStrategies ?? []
+        ].find(s => s.name === content.strategyName && s.version === content.version);
+        if (!masterStrategy) {
+            throw new Error(`Could not find master encryption strategy ${content.strategyName} (${content.version})`);
+        }
+        return await masterStrategy.decrypt(encrypted, { key: masterKey.value, keyId: masterKey.id });
+    }
+    findDefaultStrategy() {
+        const entity = this.strategyEntities.find(s => s.status === encryption_strategy_entity_model_1.EncryptionStrategyStatus.DEFAULT);
+        return entity
+            ? { strategy: this.findStrategy(entity.name, entity.version), entity }
+            : { strategy: this.strategies[0], entity };
+    }
+    validateNoDuplicateEncryptionStrategy() {
+        const duplicateStrategies = this.strategies.filter(s => this.strategies.filter(hs => hs.name === s.name && hs.version === s.version).length > 1);
+        if (duplicateStrategies.length) {
+            throw new Error([
+                'There are duplicate encryption strategies:',
+                [...new Set(duplicateStrategies)].map(s => `- ${s.name} (${s.version})`)
+            ].join('\n'));
+        }
+    }
+    validateNoDuplicateMasterEncryptionStrategy() {
+        const allMasterStrategies = [
+            this.options.currentMasterStrategy,
+            ...this.options.oldMasterStrategies ?? []
+        ];
+        const duplicateStrategies = allMasterStrategies.filter(s => allMasterStrategies.filter(hs => hs.name === s.name && hs.version === s.version).length > 1);
+        if (duplicateStrategies.length) {
+            throw new Error([
+                'There are duplicate master encryption strategies:',
+                [...new Set(duplicateStrategies)].map(s => `- ${s.name} (${s.version})`)
+            ].join('\n'));
+        }
+    }
+    validateNoMissingEncryptionStrategy() {
+        const missingStrategies = this.strategyEntities.filter(s => !this.strategies.some(hs => hs.name === s.name && hs.version === s.version));
+        if (missingStrategies.length) {
+            const message = [INIT_ERROR_MESSAGE, 'There are missing strategies:'];
+            for (const strategy of missingStrategies) {
+                message.push(`  - ${strategy.name} (${strategy.version})`);
+            }
+            message.push('Did you remove them?');
+            throw new Error(message.join('\n'));
+        }
+    }
+    validateNoDotsInMasterKeyIds() {
+        const allKeys = [
+            this.options.currentMasterKey,
+            ...this.options.oldMasterKeys ?? []
+        ];
+        const keysWithDotsInId = allKeys.filter(s => s.id.includes('.'));
+        if (!keysWithDotsInId.length) {
+            return;
+        }
+        const message = [INIT_ERROR_MESSAGE, 'There are master keys that use dots in their id:'];
+        for (const key of keysWithDotsInId) {
+            message.push(`  - ${key.id}`);
+        }
+        throw new Error(message.join('\n'));
+    }
+    validateNoMissingMasterKeyIds(keys) {
+        const allMasterKeys = [
+            this.options.currentMasterKey,
+            ...this.options.oldMasterKeys ?? []
+        ];
+        const missingKeyIds = keys
+            .map(k => encryption_utilities_1.EncryptionUtilities.encryptionStringToContent(k.value).keyId)
+            .filter(keyId => !allMasterKeys.some(k => k.id === keyId));
+        if (!missingKeyIds.length) {
+            return;
+        }
+        throw new Error([
+            INIT_ERROR_MESSAGE,
+            'There are missing master key ids:',
+            ...missingKeyIds.map(id => `  - ${id}`)
+        ].join('\n'));
+    }
+    validateNoMissingMasterEncryptionStrategy(keys) {
+        const allMasterStrategies = [
+            this.options.currentMasterStrategy,
+            ...this.options.oldMasterStrategies ?? []
+        ];
+        const missingStrategies = keys
+            .map(k => encryption_utilities_1.EncryptionUtilities.encryptionStringToContent(k.value))
+            .filter(s => !allMasterStrategies.some(hs => hs.name === s.strategyName && hs.version === s.version));
+        if (missingStrategies.length) {
+            const message = [INIT_ERROR_MESSAGE, 'There are missing master strategies:'];
+            for (const strategy of missingStrategies) {
+                message.push(`  - ${strategy.strategyName} (${strategy.version})`);
+            }
+            message.push('Did you remove them?');
+            throw new Error(message.join('\n'));
+        }
+    }
+    validateStrategyNamesAndVersions() {
+        const strategiesWithDotsInNameOrVersion = this.strategies.filter(s => s.name.includes('.') || s.version.includes('.'));
+        if (!strategiesWithDotsInNameOrVersion.length) {
+            return;
+        }
+        const message = [
+            INIT_ERROR_MESSAGE,
+            'There are strategies that use dots in either the version or the name:'
+        ];
+        for (const strategy of strategiesWithDotsInNameOrVersion) {
+            message.push(`  - ${strategy.name} (${strategy.version})`);
+        }
+        throw new Error(message.join('\n'));
+    }
+    validateMasterStrategyNamesAndVersions() {
+        const allMasterStrategies = [
+            this.options.currentMasterStrategy,
+            ...this.options.oldMasterStrategies ?? []
+        ];
+        const strategiesWithDotsInNameOrVersion = allMasterStrategies.filter(s => s.name.includes('.') || s.version.includes('.'));
+        if (!strategiesWithDotsInNameOrVersion.length) {
+            return;
+        }
+        const message = [
+            INIT_ERROR_MESSAGE,
+            'There are master strategies that use dots in either the version or the name:'
+        ];
+        for (const strategy of strategiesWithDotsInNameOrVersion) {
+            message.push(`  - ${strategy.name} (${strategy.version})`);
+        }
+        throw new Error(message.join('\n'));
+    }
+    async reEncryptKeys(keys) {
+        await promise_utilities_1.PromiseUtilities.allChunked(keys, key => this.reEncryptKey(key));
+    }
+    async reEncryptKey(key) {
+        if (!this.needsMasterReEncryption(key.value)) {
+            return;
+        }
+        const decrypted = await this.masterDecrypt(key.value);
+        const newEncrypted = await this.masterEncrypt(decrypted);
+        await this.updateKeyEntityById(key.id, { value: newEncrypted }, undefined);
+    }
+};
+exports.EncryptionService = EncryptionService;
+__decorate([
+    (0, cached_decorator_1.Cached)(EncryptionKeyCache, (id, ..._) => id),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [String, Object]),
+    __metadata("design:returntype", Promise)
+], EncryptionService.prototype, "findKeyEntityById", null);
+__decorate([
+    (0, cache_write_decorator_1.CacheWrite)(EncryptionKeyCache, (key, ..._) => key.id),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [String, encryption_strategy_entity_model_1.EncryptionStrategyEntity, Object, Object]),
+    __metadata("design:returntype", Promise)
+], EncryptionService.prototype, "createKeyEntity", null);
+__decorate([
+    (0, cache_write_decorator_1.CacheWrite)(EncryptionKeyCache, (key, ..._) => key.id),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [String, Object, Object]),
+    __metadata("design:returntype", Promise)
+], EncryptionService.prototype, "updateKeyEntityById", null);
+__decorate([
+    (0, cache_delete_decorator_1.CacheDelete)(EncryptionKeyCache, (keyId, _) => keyId),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [String, Object]),
+    __metadata("design:returntype", Promise)
+], EncryptionService.prototype, "deleteKeyEntityById", null);
+exports.EncryptionService = EncryptionService = __decorate([
+    (0, injectable_decorator_1.Injectable)({ register: 'onUse' }),
+    __param(0, (0, inject_repository_decorator_1.InjectRepository)(encryption_strategy_entity_model_1.EncryptionStrategyEntity)),
+    __param(1, (0, inject_repository_decorator_1.InjectRepository)(encryption_key_model_1.EncryptionKey)),
+    __param(2, (0, inject_decorator_1.Inject)(zibri_di_tokens_default_1.ZIBRI_DI_TOKENS.ENCRYPTION_STRATEGIES)),
+    __param(3, (0, inject_decorator_1.Inject)(zibri_di_tokens_default_1.ZIBRI_DI_TOKENS.ENCRYPTION_MASTER_OPTIONS)),
+    __metadata("design:paramtypes", [repository_1.Repository,
+        repository_1.Repository, Array, Object])
+], EncryptionService);
+//# sourceMappingURL=encryption.service.js.map

package/dist/cjs/auth/encryption/encryption.service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"encryption.service.js","sourceRoot":"","sources":["../../../../src/auth/encryption/encryption.service.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;AAAA,iEAAqG;AAGrG,iEAAuG;AACvG,oGAA4J;AAE5J,wHAAiH;AAEjH,4FAA8E;AAC9E,0FAA4E;AAC5E,8EAAiE;AACjE,gFAAmE;AACnE,qFAA+E;AAG/E,6DAA0D;AAE1D,iGAAmF;AACnF,2EAA8D;AAC9D,mFAAsE;AACtE,sFAA2E;AAC3E,yEAAoE;AACpE,8DAAkD;AAClD,kEAAsD;AAEtD,iFAA4E;AAO5E,yEAAqE;AAUrE,MAAM,kBAAkB,GAAW,wCAAwC,CAAC;AAIrE,IAAM,kBAAkB,GAAxB,MAAM,kBAAmB,SAAQ,+DAAyE;IAE7G,+CAA+C;IAC/C,IAAc,MAAM;QAChB,OAAO,IAAA,wBAAM,EAAC,yCAAe,CAAC,MAAM,CAAC,CAAC;IAC1C,CAAC;IAED,+CAA+C;IAC/C,IAAc,YAAY;QACtB,OAAO,IAAA,wBAAM,EAAC,yCAAe,CAAC,aAAa,CAAC,CAAC;IACjD,CAAC;IAED,+CAA+C;IAC/C,IAAc,cAAc;QACxB,OAAO,IAAA,wBAAM,EAAC,yCAAe,CAAC,eAAe,CAAC,CAAC;IACnD,CAAC;IAED;QACI,KAAK,CAAC,oBAAoB,EAAE,IAAI,0CAAkB,EAAE,EAAE,EAAE,CAAC,CAAC;IAC9D,CAAC;CACJ,CAAA;AApBY,gDAAkB;6BAAlB,kBAAkB;IAF9B,IAAA,uBAAK,GAAE;IACR,+CAA+C;;;GAClC,kBAAkB,CAoB9B;AAED;;GAEG;AAEI,IAAM,iBAAiB,GAAvB,MAAM,iBAAiB;IAQL;IAEA;IAEA;IAXb,gCAAgC,GAAY,KAAK,CAAC;IACzC,UAAU,GAA2C,EAAE,CAAC;IACxD,gBAAgB,GAA+B,EAAE,CAAC;IAClD,OAAO,CAAmC;IAE3D,YAEqB,kBAA4F,EAE5F,aAAiE,EAEjE,eAAgE,EAEjF,OAAqD;QANpC,uBAAkB,GAAlB,kBAAkB,CAA0E;QAE5F,kBAAa,GAAb,aAAa,CAAoD;QAEjE,oBAAe,GAAf,eAAe,CAAiD;QAIjF,IAAI,CAAC,OAAO,EAAE,CAAC;YACX,MAAM,IAAI,mCAAe,CAAC,yCAAe,CAAC,yBAAyB,EAAE,EAAE,CAAC,CAAC;QAC7E,CAAC;QACD,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;IAC3B,CAAC;IAED,+CAA+C;IAC/C,KAAK,CAAC,SAAS;QACX,IAAI,CAAC,IAAI,CAAC,eAAe,CAAC,MAAM,EAAE,CAAC;YAC/B,MAAM,IAAI,KAAK,CAAC,oDAAoD,CAAC,CAAC;QAC1E,CAAC;QACD,KAAK,MAAM,QAAQ,IAAI,IAAI,CAAC,eAAe,EAAE,CAAC;YAC1C,IAAA,4BAAQ,EAAC,EAAE,KAAK,EAAE,QAAQ,EAAE,QAAQ,EAAE,QAAQ,EAAE,CAAC,CAAC;YAClD,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,IAAA,wBAAM,EAAC,QAAQ,CAAC,CAAC,CAAC;QAC3C,CAAC;QACD,MAAM,UAAU,GAA+B,MAAM,IAAI,CAAC,kBAAkB,CAAC,OAAO,EAAE,CAAC;QACvF,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,GAAG,UAAU,CAAC,CAAC;QAC1C,IAAI,CAAC,qCAAqC,EAAE,CAAC;QAC7C,IAAI,CAAC,mCAAmC,EAAE,CAAC;QAC3C,IAAI,CAAC,gCAAgC,EAAE,CAAC;QAExC,MAAM,IAAI,GAAoB,MAAM,IAAI,CAAC,aAAa,CAAC,OAAO,EAAE,CAAC;QACjE,IAAI,CAAC,2CAA2C,EAAE,CAAC;QACnD,IAAI,CAAC,yCAAyC,CAAC,IAAI,CAAC,CAAC;QACrD,IAAI,CAAC,sCAAsC,EAAE,CAAC;QAC9C,IAAI,CAAC,4BAA4B,EAAE,CAAC;QACpC,IAAI,CAAC,6BAA6B,CAAC,IAAI,CAAC,CAAC;QACzC,MAAM,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC;IACnC,CAAC;IAED,+CAA+C;IAC/C,KAAK,CAAC,OAAO,CACT,KAAa,EACb,OAA+C;QAE/C,IAAI,CAAC,OAAO,EAAE,CAAC;YACX,MAAM,QAAQ,GAA4B,IAAI,CAAC,mBAAmB,EAAE,CAAC;YACrE,IAAI,CAAC,IAAI,CAAC,gCAAgC,IAAI,CAAC,QAAQ,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,gBAAgB,CAAC,MAAM,EAAE,CAAC;gBAC9F,MAAM,GAAG,GAA4B;oBACjC,MAAM,EAAE,0CAAmB,CAAC,OAAO;oBACnC,KAAK,EAAE,MAAM,IAAI,CAAC,oBAAoB,CAAC,QAAQ,CAAC,QAAQ,CAAC;iBAC5D,CAAC;gBACF,MAAM,MAAM,GAA6B,MAAM,IAAI,CAAC,oBAAoB,CAAC;oBACrE,IAAI,EAAE,QAAQ,CAAC,QAAQ,CAAC,IAAI;oBAC5B,OAAO,EAAE,QAAQ,CAAC,QAAQ,CAAC,OAAO;oBAClC,MAAM,EAAE,2DAAwB,CAAC,OAAO;oBACxC,IAAI,EAAE,CAAC,GAAG,CAAC;iBACd,CAAC,CAAC;gBACH,IAAI,CAAC,gCAAgC,GAAG,IAAI,CAAC;gBAC7C,MAAM,aAAa,GAA+C,IAAI,CAAC,iBAAiB,CACpF,QAAQ,CAAC,QAAQ,CAAC,IAAI,EACtB,QAAQ,CAAC,QAAQ,CAAC,OAAO,CAC5B,CAAC;gBACF,MAAM,YAAY,GAAS,MAAM,IAAI,CAAC,UAAU,CAAC,aAAa,EAAE,GAAG,CAAC,KAAK,CAAC,CAAC;gBAC3E,OAAO,MAAM,QAAQ,CAAC,QAAQ,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,KAAK,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,GAAG,EAAE,YAAY,EAAE,CAAC,CAAC;YACnG,CAAC;YAED,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC;gBACnB,MAAM,GAAG,GAA4B;oBACjC,MAAM,EAAE,0CAAmB,CAAC,OAAO;oBACnC,KAAK,EAAE,MAAM,IAAI,CAAC,oBAAoB,CAAC,QAAQ,CAAC,QAAQ,CAAC;iBAC5D,CAAC;gBACF,MAAM,MAAM,GAA6B,MAAM,IAAI,CAAC,oBAAoB,CAAC;oBACrE,IAAI,EAAE,QAAQ,CAAC,QAAQ,CAAC,IAAI;oBAC5B,OAAO,EAAE,QAAQ,CAAC,QAAQ,CAAC,OAAO;oBAClC,MAAM,EAAE,2DAAwB,CAAC,MAAM;oBACvC,IAAI,EAAE,CAAC,GAAG,CAAC;iBACd,CAAC,CAAC;gBACH,MAAM,aAAa,GAA+C,IAAI,CAAC,iBAAiB,CACpF,QAAQ,CAAC,QAAQ,CAAC,IAAI,EACtB,QAAQ,CAAC,QAAQ,CAAC,OAAO,CAC5B,CAAC;gBACF,MAAM,YAAY,GAAS,MAAM,IAAI,CAAC,UAAU,CAAC,aAAa,EAAE,GAAG,CAAC,KAAK,CAAC,CAAC;gBAC3E,OAAO,MAAM,QAAQ,CAAC,QAAQ,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,KAAK,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,GAAG,EAAE,YAAY,EAAE,CAAC,CAAC;YACnG,CAAC;YAED,MAAM,aAAa,GAA+C,IAAI,CAAC,iBAAiB,CACpF,QAAQ,CAAC,QAAQ,CAAC,IAAI,EACtB,QAAQ,CAAC,QAAQ,CAAC,OAAO,CAC5B,CAAC;YACF,MAAM,GAAG,GAAkB,MAAM,IAAI,CAAC,iCAAiC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;YACzF,MAAM,YAAY,GAAS,MAAM,IAAI,CAAC,UAAU,CAAC,aAAa,EAAE,GAAG,CAAC,KAAK,CAAC,CAAC;YAC3E,OAAO,MAAM,QAAQ,CAAC,QAAQ,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,KAAK,EAAE,GAAG,CAAC,EAAE,EAAE,GAAG,EAAE,YAAY,EAAE,CAAC,CAAC;QACxF,CAAC;QAED,MAAM,QAAQ,GAAkD,IAAI,CAAC,UAAU,CAAC,IAAI,CAChF,CAAC,CAAC,EAAE,CAAC,CAAC,YAAY,OAAO,CAAC,QAAQ,CACY,CAAC;QACnD,IAAI,CAAC,QAAQ,EAAE,CAAC;YACZ,MAAM,IAAI,KAAK,CACX,sBAAsB,OAAO,CAAC,QAAQ,CAAC,IAAI,oEAAoE,CAClH,CAAC;QACN,CAAC;QAED,IAAI,OAAO,CAAC,eAAe,EAAE,KAAK,EAAE,CAAC;YACjC,MAAM,YAAY,GAAS,MAAM,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,eAAe,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC;YACxF,OAAO,MAAM,QAAQ,CAAC,OAAO,CACzB,KAAK,EACL,EAAE,GAAG,EAAE,YAAY,EAAE,KAAK,EAAE,OAAO,CAAC,eAAe,CAAC,KAAK,EAAE,GAAG,OAAO,CAAC,eAAe,EAAE,CAC1F,CAAC;QACN,CAAC;QAED,MAAM,MAAM,GAAyC,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAC3E,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,QAAQ,CAAC,IAAI,IAAI,CAAC,CAAC,OAAO,KAAK,QAAQ,CAAC,OAAO,CAClE,CAAC;QACF,IAAI,CAAC,MAAM,EAAE,CAAC;YACV,MAAM,GAAG,GAA4B;gBACjC,MAAM,EAAE,0CAAmB,CAAC,OAAO;gBACnC,KAAK,EAAE,MAAM,IAAI,CAAC,oBAAoB,CAAC,QAAQ,CAAC;aACnD,CAAC;YACF,MAAM,aAAa,GAA6B,MAAM,IAAI,CAAC,oBAAoB,CAAC;gBAC5E,IAAI,EAAE,QAAQ,CAAC,IAAI;gBACnB,OAAO,EAAE,QAAQ,CAAC,OAAO;gBACzB,MAAM,EAAE,2DAAwB,CAAC,MAAM;gBACvC,IAAI,EAAE,CAAC,GAAG,CAAC;aACd,CAAC,CAAC;YACH,MAAM,YAAY,GAAS,MAAM,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,QAAQ,EAAE,GAAG,CAAC,KAAK,CAAC,CAAC;YAC9E,OAAO,MAAM,QAAQ,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,KAAK,EAAE,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,GAAG,EAAE,YAAY,EAAE,GAAG,OAAO,CAAC,eAAe,EAAE,CAAC,CAAC;QAC7H,CAAC;QAED,MAAM,GAAG,GAAkB,MAAM,IAAI,CAAC,iCAAiC,CAAC,MAAM,CAAC,CAAC;QAChF,MAAM,YAAY,GAAS,MAAM,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,QAAQ,EAAE,GAAG,CAAC,KAAK,CAAC,CAAC;QAC9E,OAAO,MAAM,QAAQ,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,GAAG,EAAE,YAAY,EAAE,KAAK,EAAE,GAAG,CAAC,EAAE,EAAE,GAAG,OAAO,CAAC,eAAe,EAAE,CAAC,CAAC;IAC3G,CAAC;IAED,+CAA+C;IAC/C,KAAK,CAAC,OAAO,CACT,KAAuB,EACvB,OAAyB;QAEzB,MAAM,OAAO,GAAsB,0CAAmB,CAAC,yBAAyB,CAAC,KAAK,CAAC,CAAC;QACxF,MAAM,QAAQ,GAAyC,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC,YAAY,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC;QAChH,MAAM,GAAG,GAAY,MAAM,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC;QAClE,OAAO,MAAM,QAAQ,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,GAAG,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,GAAG,OAAO,IAAI,EAAE,EAAE,CAAC,CAAC;IAC1F,CAAC;IAED,+CAA+C;IAC/C,KAAK,CAAC,SAAS,CACX,aAAyD,EACzD,IAA+D,EAC/D,OAA+B;QAE/B,MAAM,QAAQ,GAAsC,IAAA,wBAAM,EAAC,aAAa,CAAC,CAAC;QAC1E,MAAM,YAAY,GAAqB,MAAM,IAAI,CAAC,oBAAoB,CAAC,QAAQ,CAAC,CAAC;QACjF,MAAM,MAAM,GAAyC,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAC3E,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,QAAQ,CAAC,IAAI,IAAI,CAAC,CAAC,OAAO,KAAK,QAAQ,CAAC,OAAO,CAClE,CAAC;QACF,IAAI,CAAC,MAAM,EAAE,CAAC;YACV,MAAM,IAAI,+BAAa,CAAC,kBAAkB,2DAAwB,CAAC,IAAI,GAAG,CAAC,CAAC;QAChF,CAAC;QACD,MAAM,iBAAiB,GAA8B,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,0CAAmB,CAAC,OAAO,CAAC,CAAC;QACrH,IAAI,IAAI,CAAC,MAAM,KAAK,0CAAmB,CAAC,OAAO,IAAI,iBAAiB,EAAE,CAAC;YACnE,MAAM,IAAI,CAAC,mBAAmB,CAAC,iBAAiB,CAAC,EAAE,EAAE,EAAE,MAAM,EAAE,0CAAmB,CAAC,MAAM,EAAE,EAAE,OAAO,CAAC,CAAC;QAC1G,CAAC;QACD,OAAO,MAAM,IAAI,CAAC,eAAe,CAAC,YAAY,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC;IAC3E,CAAC;IAED,+CAA+C;IAC/C,KAAK,CAAC,SAAS,CACX,KAAa,EACb,OAAoC;QAEpC,MAAM,GAAG,GAAkB,MAAM,IAAI,CAAC,iBAAiB,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;QACxE,IAAI,GAAG,CAAC,MAAM,KAAK,0CAAmB,CAAC,OAAO,IAAI,CAAC,CAAC,OAAO,EAAE,YAAY,IAAI,KAAK,CAAC,EAAE,CAAC;YAClF,MAAM,IAAI,KAAK,CAAC,qEAAqE,CAAC,CAAC;QAC3F,CAAC;QAED,MAAM,IAAI,CAAC,mBAAmB,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;IACnD,CAAC;IAED,+CAA+C;IAC/C,KAAK,CAAC,aAAa,CAAC,KAA2B,EAAE,UAAsC,EAAE;QACrF,MAAM,IAAI,GAAoB,MAAM,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;QAE1E,IAAI,CAAC,CAAC,OAAO,CAAC,YAAY,IAAI,KAAK,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,0CAAmB,CAAC,OAAO,CAAC,EAAE,CAAC;YAC/F,MAAM,IAAI,KAAK,CAAC,mEAAmE,CAAC,CAAC;QACzF,CAAC;QAED,MAAM,WAAW,GAAgB,OAAO,CAAC,WAAW,IAAI,MAAM,IAAI,CAAC,aAAa,CAAC,UAAU,CAAC,gBAAgB,EAAE,CAAC;QAC/G,MAAM,cAAc,GAAY,CAAC,OAAO,CAAC,WAAW,CAAC;QACrD,OAAO,CAAC,WAAW,GAAG,WAAW,CAAC;QAElC,IAAI,CAAC;YACD,MAAM,oCAAgB,CAAC,UAAU,CAAC,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC,CAAC,EAAE,EAAE,OAAO,CAAC,CAAC,CAAC;YACtF,IAAI,cAAc,EAAE,CAAC;gBACjB,MAAM,WAAW,CAAC,MAAM,EAAE,CAAC;YAC/B,CAAC;QACL,CAAC;QACD,OAAO,KAAK,EAAE,CAAC;YACX,IAAI,cAAc,EAAE,CAAC;gBACjB,MAAM,WAAW,CAAC,QAAQ,EAAE,CAAC;YACjC,CAAC;YACD,MAAM,KAAK,CAAC;QAChB,CAAC;IACL,CAAC;IAED,+CAA+C;IAC/C,KAAK,CAAC,2BAA2B,CAC7B,KAAa,EACb,aAAyD,EACzD,UAAiC,EAAE;QAEnC,MAAM,WAAW,GAAgB,OAAO,CAAC,WAAW,IAAI,MAAM,IAAI,CAAC,aAAa,CAAC,UAAU,CAAC,gBAAgB,EAAE,CAAC;QAC/G,MAAM,cAAc,GAAY,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC,yBAAyB;QAC/E,OAAO,CAAC,WAAW,GAAG,WAAW,CAAC;QAElC,IAAI,CAAC;YACD,MAAM,QAAQ,GAAsC,IAAA,wBAAM,EAAC,aAAa,CAAC,CAAC;YAC1E,MAAM,MAAM,GAAyC,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAC3E,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,QAAQ,CAAC,IAAI,IAAI,CAAC,CAAC,OAAO,KAAK,QAAQ,CAAC,OAAO,CAClE,CAAC;YACF,IAAI,CAAC,MAAM,EAAE,CAAC;gBACV,MAAM,IAAI,+BAAa,CAAC,kBAAkB,2DAAwB,CAAC,IAAI,GAAG,CAAC,CAAC;YAChF,CAAC;YACD,MAAM,GAAG,GAAkB,MAAM,IAAI,CAAC,iBAAiB,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;YACxE,IAAI,GAAG,CAAC,QAAQ,CAAC,IAAI,KAAK,QAAQ,CAAC,IAAI,IAAI,GAAG,CAAC,QAAQ,CAAC,OAAO,KAAK,QAAQ,CAAC,OAAO,EAAE,CAAC;gBACnF,MAAM,IAAI,KAAK,CAAC,yEAAyE,CAAC,CAAC;YAC/F,CAAC;YAED,MAAM,iBAAiB,GAA8B,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,0CAAmB,CAAC,OAAO,CAAC,CAAC;YACrH,IAAI,iBAAiB,EAAE,CAAC;gBACpB,MAAM,IAAI,CAAC,mBAAmB,CAAC,iBAAiB,CAAC,EAAE,EAAE,EAAE,MAAM,EAAE,0CAAmB,CAAC,MAAM,EAAE,EAAE,OAAO,CAAC,CAAC;YAC1G,CAAC;YACD,MAAM,IAAI,CAAC,mBAAmB,CAAC,KAAK,EAAE,EAAE,MAAM,EAAE,0CAAmB,CAAC,OAAO,EAAE,EAAE,OAAO,CAAC,CAAC;YAExF,IAAI,cAAc,EAAE,CAAC;gBACjB,MAAM,WAAW,CAAC,MAAM,EAAE,CAAC;YAC/B,CAAC;QAEL,CAAC;QACD,OAAO,KAAK,EAAE,CAAC;YACX,IAAI,cAAc,EAAE,CAAC;gBACjB,MAAM,WAAW,CAAC,QAAQ,EAAE,CAAC;YACjC,CAAC;YACD,MAAM,KAAK,CAAC;QAChB,CAAC;IAEL,CAAC;IAED,+CAA+C;IAC/C,KAAK,CAAC,UAAU,CACZ,QAAqE,EACrE,YAA8B;QAE9B,MAAM,SAAS,GAAW,MAAM,IAAI,CAAC,aAAa,CAAC,YAAY,CAAC,CAAC;QACjE,MAAM,SAAS,GAAW,MAAM,CAAC,IAAI,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;QAC3D,OAAO,MAAM,IAAA,wBAAM,EAAC,QAAQ,CAAC,CAAC,cAAc,CAAC,SAAS,CAAC,CAAC;IAC5D,CAAC;IAED,+CAA+C;IAC/C,KAAK,CAAC,iBAAiB,CAAC,SAA2B;QAC/C,MAAM,OAAO,GAAsB,0CAAmB,CAAC,yBAAyB,CAAC,SAAS,CAAC,CAAC;QAC5F,MAAM,QAAQ,GAAyD,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC,YAAY,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC;QAChI,MAAM,cAAc,GAAyC,IAAI,CAAC,gBAAgB,CAAC,IAAI,CACnF,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,QAAQ,CAAC,IAAI,IAAI,CAAC,CAAC,OAAO,KAAK,QAAQ,CAAC,OAAO,CAClE,CAAC;QACF,IAAI,CAAC,cAAc,EAAE,CAAC;YAClB,MAAM,IAAI,+BAAa,CAAC,kBAAkB,2DAAwB,CAAC,IAAI,GAAG,CAAC,CAAC;QAChF,CAAC;QACD,MAAM,GAAG,GAAkB,MAAM,IAAI,CAAC,iBAAiB,CAAC,OAAO,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC;QAClF,OAAO,cAAc,CAAC,MAAM,KAAK,2DAAwB,CAAC,UAAU,IAAI,GAAG,CAAC,MAAM,KAAK,0CAAmB,CAAC,UAAU,CAAC;IAC1H,CAAC;IAEO,uBAAuB,CAAC,SAA2B;QACvD,MAAM,OAAO,GAAsB,0CAAmB,CAAC,yBAAyB,CAAC,SAAS,CAAC,CAAC;QAC5F,MAAM,OAAO,GAAmC;YAC5C,IAAI,CAAC,OAAO,CAAC,gBAAgB;YAC7B,GAAG,IAAI,CAAC,OAAO,CAAC,aAAa,IAAI,EAAE;SACtC,CAAC;QACF,MAAM,GAAG,GAA6C,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,OAAO,CAAC,KAAK,CAAC,CAAC;QAChG,IAAI,CAAC,GAAG,EAAE,CAAC;YACP,MAAM,IAAI,KAAK,CAAC,gCAAgC,OAAO,CAAC,KAAK,GAAG,CAAC,CAAC;QACtE,CAAC;QACD,MAAM,aAAa,GAA2C;YAC1D,IAAI,CAAC,OAAO,CAAC,qBAAqB;YAClC,GAAG,IAAI,CAAC,OAAO,CAAC,mBAAmB,IAAI,EAAE;SAC5C,CAAC;QACF,MAAM,QAAQ,GAAqD,aAAa,CAAC,IAAI,CACjF,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,OAAO,CAAC,YAAY,IAAI,CAAC,CAAC,OAAO,KAAK,OAAO,CAAC,OAAO,CACxE,CAAC;QACF,IAAI,CAAC,QAAQ,EAAE,CAAC;YACZ,MAAM,IAAI,KAAK,CAAC,gCAAgC,OAAO,CAAC,YAAY,KAAK,OAAO,CAAC,OAAO,GAAG,CAAC,CAAC;QACjG,CAAC;QACD,OAAO,QAAQ,CAAC,IAAI,KAAK,IAAI,CAAC,OAAO,CAAC,qBAAqB,CAAC,IAAI;eACzD,QAAQ,CAAC,OAAO,KAAK,IAAI,CAAC,OAAO,CAAC,qBAAqB,CAAC,OAAO;eAC/D,GAAG,CAAC,EAAE,KAAK,IAAI,CAAC,OAAO,CAAC,gBAAgB,CAAC,EAAE,CAAC;IACvD,CAAC;IAEO,KAAK,CAAC,oBAAoB,CAAO,QAA2C;QAChF,MAAM,MAAM,GAAS,MAAM,QAAQ,CAAC,iBAAiB,EAAE,CAAC;QACxD,MAAM,QAAQ,GAAW,MAAM,QAAQ,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC;QAC7D,MAAM,SAAS,GAAW,QAAQ,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;QACtD,OAAO,MAAM,IAAI,CAAC,aAAa,CAAC,SAAS,CAAC,CAAC;IAC/C,CAAC;IAEO,KAAK,CAAC,OAAO,CAAO,KAAa,EAAE,OAA0C;QACjF,MAAM,MAAM,GAAkB,MAAM,IAAI,CAAC,iBAAiB,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;QAC3E,MAAM,QAAQ,GAA+C,IAAI,CAAC,iBAAiB,CAC/E,MAAM,CAAC,QAAQ,CAAC,IAAI,EACpB,MAAM,CAAC,QAAQ,CAAC,OAAO,CAC1B,CAAC;QAEF,OAAO,MAAM,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC;IACzD,CAAC;IAED,wDAAwD;IAE1C,AAAN,KAAK,CAAC,iBAAiB,CAAC,EAAU,EAAE,OAA0C;QAClF,OAAO,MAAM,IAAI,CAAC,aAAa,CAAC,QAAQ,CAAC,EAAE,EAAE,EAAE,SAAS,EAAE,CAAC,UAAU,CAAC,EAAE,GAAG,OAAO,EAAE,CAAC,CAAC;IAC1F,CAAC;IAED,wDAAwD;IAE1C,AAAN,KAAK,CAAC,eAAe,CACzB,cAAgC,EAChC,QAAkC,EAClC,IAA+D,EAC/D,OAA0C;QAE1C,MAAM,OAAO,GAAkB,MAAM,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC;YAC3D,KAAK,EAAE,cAAc;YACrB,QAAQ;YACR,GAAG,IAAI;SACV,EAAE,OAAO,CAAC,CAAC;QACZ,MAAM,GAAG,GAAkB,MAAM,IAAI,CAAC,aAAa,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,EAAE,EAAE,SAAS,EAAE,CAAC,UAAU,CAAC,EAAE,GAAG,OAAO,EAAE,CAAC,CAAC;QAClH,IAAI,CAAC,qBAAqB,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC;QAC1C,OAAO,GAAG,CAAC;IACf,CAAC;IAED,wDAAwD;IAE1C,AAAN,KAAK,CAAC,mBAAmB,CAC7B,EAAU,EACV,IAAgC,EAChC,OAA0C;QAE1C,MAAM,OAAO,GAAkB,MAAM,IAAI,CAAC,aAAa,CAAC,UAAU,CAAC,EAAE,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC;QACtF,MAAM,GAAG,GAAkB,MAAM,IAAI,CAAC,aAAa,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,EAAE,EAAE,SAAS,EAAE,CAAC,UAAU,CAAC,EAAE,GAAG,OAAO,EAAE,CAAC,CAAC;QAClH,IAAI,CAAC,qBAAqB,CAAC,OAAO,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC;QAClD,OAAO,GAAG,CAAC;IACf,CAAC;IAED,wDAAwD;IAE1C,AAAN,KAAK,CAAC,mBAAmB,CAAC,EAAU,EAAE,OAA0C;QACpF,MAAM,QAAQ,GAAyC,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC;QACtH,IAAI,CAAC,QAAQ,EAAE,CAAC;YACZ,MAAM,IAAI,+BAAa,CAAC,2CAA2C,EAAE,EAAE,CAAC,CAAC;QAC7E,CAAC;QACD,QAAQ,CAAC,IAAI,GAAG,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;QACvD,MAAM,IAAI,CAAC,aAAa,CAAC,UAAU,CAAC,EAAE,EAAE,OAAO,CAAC,CAAC;IACrD,CAAC;IAEO,KAAK,CAAC,oBAAoB,CAAC,IAAwC;QACvE,MAAM,GAAG,GAA6B,MAAM,IAAI,CAAC,kBAAkB,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QACjF,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAChC,OAAO,GAAG,CAAC;IACf,CAAC;IAEO,qBAAqB,CAAC,QAAkC,EAAE,GAAkB;QAChF,MAAM,aAAa,GAAW,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,GAAG,CAAC,EAAE,CAAC,CAAC;QAC5E,IAAI,aAAa,IAAI,CAAC,EAAE,CAAC;YACrB,QAAQ,CAAC,IAAI,CAAC,aAAa,CAAC,GAAG,GAAG,CAAC;YACnC,OAAO;QACX,CAAC;QACD,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC5B,CAAC;IAEO,KAAK,CAAC,iCAAiC,CAAC,QAAkC;QAC9E,OAAO,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,0CAAmB,CAAC,OAAO,CAAC;eACjE,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;eACnB,MAAM,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,iBAAiB,CAAC,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC,OAAO,CAAC,EAAE,EAAE,MAAM,EAAE,0CAAmB,CAAC,OAAO,EAAE,CAAC,CAAC;IAClI,CAAC;IAEO,YAAY,CAIlB,IAAY,EAAE,OAAe;QAC3B,MAAM,GAAG,GAAoF,IAAI,CAAC,UAAU,CAAC,IAAI,CAC7G,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,IAAI,IAAI,CAAC,CAAC,OAAO,KAAK,OAAO,CACmC,CAAC;QACrF,IAAI,CAAC,GAAG,EAAE,CAAC;YACP,MAAM,IAAI,KAAK,CAAC,yBAAyB,IAAI,KAAK,OAAO,GAAG,CAAC,CAAC;QAClE,CAAC;QACD,OAAO,GAAG,CAAC;IACf,CAAC;IAEO,iBAAiB,CAIvB,IAAY,EAAE,OAAe;QAC3B,MAAM,GAAG,GAA6F,IAAI,CAAC,eAAe,CAAC,IAAI,CAC3H,CAAC,CAAC,EAAE,CAAC,IAAA,wBAAM,EAAC,CAAC,CAAC,CAAC,IAAI,KAAK,IAAI,IAAI,IAAA,wBAAM,EAAC,CAAC,CAAC,CAAC,OAAO,KAAK,OAAO,CAC4B,CAAC;QAC9F,IAAI,CAAC,GAAG,EAAE,CAAC;YACP,MAAM,IAAI,KAAK,CAAC,yBAAyB,IAAI,KAAK,OAAO,GAAG,CAAC,CAAC;QAClE,CAAC;QACD,OAAO,GAAG,CAAC;IACf,CAAC;IAEO,KAAK,CAAC,aAAa,CAAC,SAAiB;QACzC,MAAM,SAAS,GAAqB,MAAM,IAAI,CAAC,OAAO,CAAC,qBAAqB,CAAC,OAAO,CAChF,SAAS,EACT;YACI,GAAG,EAAE,IAAI,CAAC,OAAO,CAAC,gBAAgB,CAAC,KAAK;YACxC,KAAK,EAAE,IAAI,CAAC,OAAO,CAAC,gBAAgB,CAAC,EAAE;SAC1C,CACJ,CAAC;QAEF,MAAM,OAAO,GAAsB,0CAAmB,CAAC,yBAAyB,CAAC,SAAS,CAAC,CAAC;QAC5F,IAAI,OAAO,CAAC,KAAK,KAAK,IAAI,CAAC,OAAO,CAAC,gBAAgB,CAAC,EAAE,EAAE,CAAC;YACrD,MAAM,IAAI,KAAK,CACX,oCAAoC,IAAI,CAAC,OAAO,CAAC,gBAAgB,CAAC,EAAE,SAAS,OAAO,CAAC,KAAK,EAAE,CAC/F,CAAC;QACN,CAAC;QACD,OAAO,SAAS,CAAC;IACrB,CAAC;IAEO,KAAK,CAAC,aAAa,CAAC,SAA2B;QACnD,MAAM,OAAO,GAAsB,0CAAmB,CAAC,yBAAyB,CAAC,SAAS,CAAC,CAAC;QAC5F,MAAM,SAAS,GAA6C;YACxD,IAAI,CAAC,OAAO,CAAC,gBAAgB;YAC7B,GAAG,IAAI,CAAC,OAAO,CAAC,aAAa,IAAI,EAAE;SACtC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,OAAO,CAAC,KAAK,CAAC,CAAC;QACpC,IAAI,CAAC,SAAS,EAAE,CAAC;YACb,MAAM,IAAI,KAAK,CAAC,iDAAiD,OAAO,CAAC,KAAK,GAAG,CAAC,CAAC;QACvF,CAAC;QACD,MAAM,cAAc,GAAqD;YACrE,IAAI,CAAC,OAAO,CAAC,qBAAqB;YAClC,GAAG,IAAI,CAAC,OAAO,CAAC,mBAAmB,IAAI,EAAE;SAC5C,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,OAAO,CAAC,YAAY,IAAI,CAAC,CAAC,OAAO,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;QAC9E,IAAI,CAAC,cAAc,EAAE,CAAC;YAClB,MAAM,IAAI,KAAK,CAAC,6CAA6C,OAAO,CAAC,YAAY,KAAK,OAAO,CAAC,OAAO,GAAG,CAAC,CAAC;QAC9G,CAAC;QACD,OAAO,MAAM,cAAc,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,GAAG,EAAE,SAAS,CAAC,KAAK,EAAE,KAAK,EAAE,SAAS,CAAC,EAAE,EAAE,CAAC,CAAC;IAClG,CAAC;IAEO,mBAAmB;QACvB,MAAM,MAAM,GAAyC,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,2DAAwB,CAAC,OAAO,CAAC,CAAC;QACpI,OAAO,MAAM;YACT,CAAC,CAAC,EAAE,QAAQ,EAAE,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE;YACtE,CAAC,CAAC,EAAE,QAAQ,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC,CAAsC,EAAE,MAAM,EAAE,CAAC;IACxF,CAAC;IAEO,qCAAqC;QACzC,MAAM,mBAAmB,GAA2C,IAAI,CAAC,UAAU,CAAC,MAAM,CACtF,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,IAAI,KAAK,CAAC,CAAC,IAAI,IAAI,EAAE,CAAC,OAAO,KAAK,CAAC,CAAC,OAAO,CAAC,CAAC,MAAM,GAAG,CAAC,CAC/F,CAAC;QACF,IAAI,mBAAmB,CAAC,MAAM,EAAE,CAAC;YAC7B,MAAM,IAAI,KAAK,CACX;gBACI,4CAA4C;gBAC5C,CAAC,GAAG,IAAI,GAAG,CAAC,mBAAmB,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,OAAO,GAAG,CAAC;aAC3E,CAAC,IAAI,CAAC,IAAI,CAAC,CACf,CAAC;QACN,CAAC;IACL,CAAC;IAEO,2CAA2C;QAC/C,MAAM,mBAAmB,GAA2C;YAChE,IAAI,CAAC,OAAO,CAAC,qBAAqB;YAClC,GAAG,IAAI,CAAC,OAAO,CAAC,mBAAmB,IAAI,EAAE;SAC5C,CAAC;QACF,MAAM,mBAAmB,GAA2C,mBAAmB,CAAC,MAAM,CAC1F,CAAC,CAAC,EAAE,CAAC,mBAAmB,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,IAAI,KAAK,CAAC,CAAC,IAAI,IAAI,EAAE,CAAC,OAAO,KAAK,CAAC,CAAC,OAAO,CAAC,CAAC,MAAM,GAAG,CAAC,CACnG,CAAC;QACF,IAAI,mBAAmB,CAAC,MAAM,EAAE,CAAC;YAC7B,MAAM,IAAI,KAAK,CACX;gBACI,mDAAmD;gBACnD,CAAC,GAAG,IAAI,GAAG,CAAC,mBAAmB,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,OAAO,GAAG,CAAC;aAC3E,CAAC,IAAI,CAAC,IAAI,CAAC,CACf,CAAC;QACN,CAAC;IACL,CAAC;IAEO,mCAAmC;QACvC,MAAM,iBAAiB,GAA+B,IAAI,CAAC,gBAAgB,CAAC,MAAM,CAC9E,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,IAAI,KAAK,CAAC,CAAC,IAAI,IAAI,EAAE,CAAC,OAAO,KAAK,CAAC,CAAC,OAAO,CAAC,CACnF,CAAC;QACF,IAAI,iBAAiB,CAAC,MAAM,EAAE,CAAC;YAC3B,MAAM,OAAO,GAAa,CAAC,kBAAkB,EAAE,+BAA+B,CAAC,CAAC;YAChF,KAAK,MAAM,QAAQ,IAAI,iBAAiB,EAAE,CAAC;gBACvC,OAAO,CAAC,IAAI,CAAC,OAAO,QAAQ,CAAC,IAAI,KAAK,QAAQ,CAAC,OAAO,GAAG,CAAC,CAAC;YAC/D,CAAC;YACD,OAAO,CAAC,IAAI,CAAC,sBAAsB,CAAC,CAAC;YACrC,MAAM,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;QACxC,CAAC;IACL,CAAC;IAEO,4BAA4B;QAChC,MAAM,OAAO,GAAmC;YAC5C,IAAI,CAAC,OAAO,CAAC,gBAAgB;YAC7B,GAAG,IAAI,CAAC,OAAO,CAAC,aAAa,IAAI,EAAE;SACtC,CAAC;QAEF,MAAM,gBAAgB,GAAmC,OAAO,CAAC,MAAM,CACnE,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,QAAQ,CAAC,GAAG,CAAC,CAC1B,CAAC;QACF,IAAI,CAAC,gBAAgB,CAAC,MAAM,EAAE,CAAC;YAC3B,OAAO;QACX,CAAC;QACD,MAAM,OAAO,GAAa,CAAC,kBAAkB,EAAE,kDAAkD,CAAC,CAAC;QACnG,KAAK,MAAM,GAAG,IAAI,gBAAgB,EAAE,CAAC;YACjC,OAAO,CAAC,IAAI,CAAC,OAAO,GAAG,CAAC,EAAE,EAAE,CAAC,CAAC;QAClC,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;IACxC,CAAC;IAEO,6BAA6B,CAAC,IAAqB;QACvD,MAAM,aAAa,GAAmC;YAClD,IAAI,CAAC,OAAO,CAAC,gBAAgB;YAC7B,GAAG,IAAI,CAAC,OAAO,CAAC,aAAa,IAAI,EAAE;SACtC,CAAC;QAEF,MAAM,aAAa,GAAa,IAAI;aAC/B,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,0CAAmB,CAAC,yBAAyB,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC;aACtE,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,KAAK,CAAC,CAAC,CAAC;QAE/D,IAAI,CAAC,aAAa,CAAC,MAAM,EAAE,CAAC;YACxB,OAAO;QACX,CAAC;QAED,MAAM,IAAI,KAAK,CACX;YACI,kBAAkB;YAClB,mCAAmC;YACnC,GAAG,aAAa,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC;SAC1C,CAAC,IAAI,CAAC,IAAI,CAAC,CACf,CAAC;IACN,CAAC;IAEO,yCAAyC,CAAC,IAAqB;QACnE,MAAM,mBAAmB,GAA2C;YAChE,IAAI,CAAC,OAAO,CAAC,qBAAqB;YAClC,GAAG,IAAI,CAAC,OAAO,CAAC,mBAAmB,IAAI,EAAE;SAC5C,CAAC;QACF,MAAM,iBAAiB,GAAwB,IAAI;aAC9C,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,0CAAmB,CAAC,yBAAyB,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;aAChE,MAAM,CACH,CAAC,CAAC,EAAE,CAAC,CAAC,mBAAmB,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,IAAI,KAAK,CAAC,CAAC,YAAY,IAAI,EAAE,CAAC,OAAO,KAAK,CAAC,CAAC,OAAO,CAAC,CAC/F,CAAC;QACN,IAAI,iBAAiB,CAAC,MAAM,EAAE,CAAC;YAC3B,MAAM,OAAO,GAAa,CAAC,kBAAkB,EAAE,sCAAsC,CAAC,CAAC;YACvF,KAAK,MAAM,QAAQ,IAAI,iBAAiB,EAAE,CAAC;gBACvC,OAAO,CAAC,IAAI,CAAC,OAAO,QAAQ,CAAC,YAAY,KAAK,QAAQ,CAAC,OAAO,GAAG,CAAC,CAAC;YACvE,CAAC;YACD,OAAO,CAAC,IAAI,CAAC,sBAAsB,CAAC,CAAC;YACrC,MAAM,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;QACxC,CAAC;IACL,CAAC;IAEO,gCAAgC;QACpC,MAAM,iCAAiC,GAA2C,IAAI,CAAC,UAAU,CAAC,MAAM,CACpG,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,CACvD,CAAC;QACF,IAAI,CAAC,iCAAiC,CAAC,MAAM,EAAE,CAAC;YAC5C,OAAO;QACX,CAAC;QACD,MAAM,OAAO,GAAa;YACtB,kBAAkB;YAClB,uEAAuE;SAC1E,CAAC;QACF,KAAK,MAAM,QAAQ,IAAI,iCAAiC,EAAE,CAAC;YACvD,OAAO,CAAC,IAAI,CAAC,OAAO,QAAQ,CAAC,IAAI,KAAK,QAAQ,CAAC,OAAO,GAAG,CAAC,CAAC;QAC/D,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;IACxC,CAAC;IAEO,sCAAsC;QAC1C,MAAM,mBAAmB,GAA2C;YAChE,IAAI,CAAC,OAAO,CAAC,qBAAqB;YAClC,GAAG,IAAI,CAAC,OAAO,CAAC,mBAAmB,IAAI,EAAE;SAC5C,CAAC;QACF,MAAM,iCAAiC,GAA2C,mBAAmB,CAAC,MAAM,CACxG,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,CACvD,CAAC;QACF,IAAI,CAAC,iCAAiC,CAAC,MAAM,EAAE,CAAC;YAC5C,OAAO;QACX,CAAC;QACD,MAAM,OAAO,GAAa;YACtB,kBAAkB;YAClB,8EAA8E;SACjF,CAAC;QACF,KAAK,MAAM,QAAQ,IAAI,iCAAiC,EAAE,CAAC;YACvD,OAAO,CAAC,IAAI,CAAC,OAAO,QAAQ,CAAC,IAAI,KAAK,QAAQ,CAAC,OAAO,GAAG,CAAC,CAAC;QAC/D,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;IACxC,CAAC;IAEO,KAAK,CAAC,aAAa,CAAC,IAAqB;QAC7C,MAAM,oCAAgB,CAAC,UAAU,CAAC,IAAI,EAAE,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC;IAC3E,CAAC;IAEO,KAAK,CAAC,YAAY,CAAC,GAAkB;QACzC,IAAI,CAAC,IAAI,CAAC,uBAAuB,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;YAC3C,OAAO;QACX,CAAC;QAED,MAAM,SAAS,GAAW,MAAM,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QAC9D,MAAM,YAAY,GAAW,MAAM,IAAI,CAAC,aAAa,CAAC,SAAS,CAAC,CAAC;QAEjE,MAAM,IAAI,CAAC,mBAAmB,CAAC,GAAG,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,YAAY,EAAE,EAAE,SAAS,CAAC,CAAC;IAC/E,CAAC;CACJ,CAAA;AA9mBY,8CAAiB;AAmUZ;IADb,IAAA,yBAAM,EAAC,kBAAkB,EAAE,CAAC,EAAE,EAAE,GAAG,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC;;;;0DAG5C;AAIa;IADb,IAAA,kCAAU,EAAC,kBAAkB,EAAE,CAAC,GAAG,EAAE,GAAG,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC;;6CAGxC,2DAAwB;;wDAYrC;AAIa;IADb,IAAA,kCAAU,EAAC,kBAAkB,EAAE,CAAC,GAAG,EAAE,GAAG,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC;;;;4DAUrD;AAIa;IADb,IAAA,oCAAW,EAAC,kBAAkB,EAAE,CAAC,KAAK,EAAE,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC;;;;4DAQpD;4BA/WQ,iBAAiB;IAD7B,IAAA,iCAAU,EAAC,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC;IAQzB,WAAA,IAAA,8CAAgB,EAAC,2DAAwB,CAAC,CAAA;IAE1C,WAAA,IAAA,8CAAgB,EAAC,oCAAa,CAAC,CAAA;IAE/B,WAAA,IAAA,yBAAM,EAAC,yCAAe,CAAC,qBAAqB,CAAC,CAAA;IAE7C,WAAA,IAAA,yBAAM,EAAC,yCAAe,CAAC,yBAAyB,CAAC,CAAA;qCALb,uBAAU;QAEf,uBAAU;GAVrC,iBAAiB,CA8mB7B"}

package/dist/cjs/auth/encryption/encryption.utilities.d.ts

@@ -0,0 +1,46 @@
+/**
+ * A string with encrypted data stored inside of it.
+ */
+export type EncryptionString = string & {
+    __brand: 'encryption';
+};
+/**
+ * The content stored inside an encryption string.
+ */
+export type EncryptionContent = {
+    /**
+     * The name of the encryption strategy.
+     */
+    strategyName: string;
+    /**
+     * The version of the encryption strategy.
+     */
+    version: string;
+    /**
+     * The id of the key that has been used.
+     */
+    keyId: string;
+    /**
+     * The actual encrypted value.
+     */
+    encryptedValue: string;
+};
+/**
+ * Utilities around handling encryption.
+ */
+export declare abstract class EncryptionUtilities {
+    /**
+     * Creates an encryption string from the given content.
+     * @param data - The content to store inside the encryption string.
+     * @returns The encryption string in the form "strategyName.version.encryptedValue".
+     */
+    static contentToEncryptionString(data: EncryptionContent): EncryptionString;
+    /**
+     * Resolves the content of the given encryption string.
+     * @param encrypted - The encryption string to resolve the content of.
+     * @returns The encryption content inside the given string.
+     * @throws If the encryption string is invalid.
+     */
+    static encryptionStringToContent(encrypted: EncryptionString): EncryptionContent;
+}
+//# sourceMappingURL=encryption.utilities.d.ts.map

package/dist/cjs/auth/encryption/encryption.utilities.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"encryption.utilities.d.ts","sourceRoot":"","sources":["../../../../src/auth/encryption/encryption.utilities.ts"],"names":[],"mappings":"AACA;;GAEG;AACH,MAAM,MAAM,gBAAgB,GAAG,MAAM,GAAG;IAEpC,OAAO,EAAE,YAAY,CAAA;CACxB,CAAC;AAEF;;GAEG;AACH,MAAM,MAAM,iBAAiB,GAAG;IAC5B;;OAEG;IACH,YAAY,EAAE,MAAM,CAAC;IACrB;;OAEG;IACH,OAAO,EAAE,MAAM,CAAC;IAChB;;OAEG;IACH,KAAK,EAAE,MAAM,CAAC;IACd;;OAEG;IACH,cAAc,EAAE,MAAM,CAAA;CACzB,CAAC;AAEF;;GAEG;AACH,8BAAsB,mBAAmB;IACrC;;;;OAIG;IACH,MAAM,CAAC,yBAAyB,CAAC,IAAI,EAAE,iBAAiB,GAAG,gBAAgB;IAG3E;;;;;OAKG;IACH,MAAM,CAAC,yBAAyB,CAAC,SAAS,EAAE,gBAAgB,GAAG,iBAAiB;CAenF"}