n8n/dist/modules/oauth-jwe/oauth-jwe.controller.js

n8n Workflow Automation Tool

"use strict";
var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
    return c > 3 && r && Object.defineProperty(target, key, r), r;
};
var __metadata = (this && this.__metadata) || function (k, v) {
    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
};
Object.defineProperty(exports, "__esModule", { value: true });
exports.OAuthJweController = void 0;
const backend_common_1 = require("@n8n/backend-common");
const constants_1 = require("@n8n/constants");
const decorators_1 = require("@n8n/decorators");
const di_1 = require("@n8n/di");
const oauth_jwe_key_service_1 = require("./oauth-jwe-key.service");
const oauth_jwe_config_1 = require("./oauth-jwe.config");
const oauth_jwe_schemas_1 = require("./oauth-jwe.schemas");
const configService = di_1.Container.get(oauth_jwe_config_1.OAuthJweConfig);
let OAuthJweController = class OAuthJweController {
    constructor(jweKeyService, logger) {
        this.jweKeyService = jweKeyService;
        this.logger = logger;
    }
    async getKeys(_req, res) {
        const jwks = await this.jweKeyService.getPublicJwks();
        const keys = jwks
            .map((key) => oauth_jwe_schemas_1.PublicJweJwkSchema.safeParse(key))
            .filter((result) => {
            if (!result.success) {
                this.logger.warn('Failed to parse public JWK', { error: result.error });
            }
            return result.success;
        })
            .map((result) => result.data);
        const response = { keys };
        res.setHeader('Cache-Control', 'public, max-age=3600, must-revalidate');
        res.json(response);
    }
};
exports.OAuthJweController = OAuthJweController;
__decorate([
    (0, decorators_1.Get)('/jwks.json', {
        skipAuth: true,
        ipRateLimit: {
            limit: configService.rateLimitJwksPerMinute,
            windowMs: 1 * constants_1.Time.minutes.toMilliseconds,
        },
    }),
    __metadata("design:type", Function),
    __metadata("design:paramtypes", [Object, Object]),
    __metadata("design:returntype", Promise)
], OAuthJweController.prototype, "getKeys", null);
exports.OAuthJweController = OAuthJweController = __decorate([
    (0, decorators_1.RestController)('/.well-known'),
    __metadata("design:paramtypes", [oauth_jwe_key_service_1.OAuthJweKeyService,
        backend_common_1.Logger])
], OAuthJweController);
//# sourceMappingURL=oauth-jwe.controller.js.map