@3sixty/engine-server-types 0.20.0-next.3 → 0.20.0-next.5

package/dist/es/components/authentication.js

@@ -1,4 +1,5 @@
 // Copyright 2024 IOTA Stiftung.
+// Copyright 2026 3Sixty Trade Ltd.
 // SPDX-License-Identifier: Apache-2.0.
 import { EntityStorageAuthenticationRestClient } from "@3sixty/api-auth-entity-storage-rest-client";
 import { EntityStorageAuthenticationService, initSchema as initSchemaAuthEntityStorage } from "@3sixty/api-auth-entity-storage-service";
@@ -6,6 +7,34 @@ import { ContextIdHelper, ContextIdKeys } from "@3sixty/context";
 import { ComponentFactory } from "@3sixty/core";
 import { EngineTypeHelper, initialiseEntityStorageConnector } from "@3sixty/engine-types";
 import { AuthenticationComponentType } from "../models/types/authenticationComponentType.js";
+/**
+ * Initialise the entity storage of the authentication users, shared by every component that uses
+ * it so the schema and partitions match.
+ * @param engineCore The engine core.
+ * @param context The context for the engine.
+ * @param storageType The configured storage type.
+ */
+export function initialiseAuthenticationUserEntityStorage(engineCore, context, storageType) {
+    initSchemaAuthEntityStorage();
+    initialiseEntityStorageConnector(engineCore, context, storageType, "AuthenticationUser", ContextIdHelper.pickKeysFromAvailable(engineCore.getContextIdKeys(), [
+        ContextIdKeys.Node,
+        ContextIdKeys.Tenant
+    ]));
+}
+/**
+ * Initialise the entity storage of the password reset and sign up verification tokens, partitioned
+ * like the accounts they belong to.
+ * @param engineCore The engine core.
+ * @param context The context for the engine.
+ * @param storageType The configured storage type.
+ */
+export function initialiseAuthenticationPasswordResetEntityStorage(engineCore, context, storageType) {
+    initSchemaAuthEntityStorage();
+    initialiseEntityStorageConnector(engineCore, context, storageType, "AuthenticationPasswordReset", ContextIdHelper.pickKeysFromAvailable(engineCore.getContextIdKeys(), [
+        ContextIdKeys.Node,
+        ContextIdKeys.Tenant
+    ]));
+}
 /**
  * Initialise the authentication component.
  * @param engineCore The engine core.
@@ -18,16 +47,21 @@ export function initialiseAuthenticationComponent(engineCore, context, instanceC
     let instanceTypeName;
     if (instanceConfig.type === AuthenticationComponentType.EntityStorage) {
         createComponent = (createConfig) => {
-            initSchemaAuthEntityStorage();
-            initialiseEntityStorageConnector(engineCore, context, createConfig.options?.userEntityStorageType, "AuthenticationUser", ContextIdHelper.pickKeysFromAvailable(engineCore.getContextIdKeys(), [
-                ContextIdKeys.Node,
-                ContextIdKeys.Tenant
-            ]));
+            initialiseAuthenticationUserEntityStorage(engineCore, context, createConfig.options?.userEntityStorageType);
+            initialiseAuthenticationPasswordResetEntityStorage(engineCore, context, createConfig.options?.passwordResetEntityStorageType);
             return new EntityStorageAuthenticationService(EngineTypeHelper.mergeConfig({
                 vaultConnectorType: engineCore.getRegisteredInstanceType("vaultConnector"),
                 tenantAdminComponentType: engineCore.getRegisteredInstanceTypeOptional("tenantAdminComponent"),
-                authenticationAuditServiceType: engineCore.getRegisteredInstanceTypeOptional("authenticationAuditComponent"),
-                authenticationRateServiceType: engineCore.getRegisteredInstanceType("authenticationRateComponent")
+                authenticationAuditServiceType: engineCore.getRegisteredInstanceType("authenticationAuditComponent"),
+                authenticationRateServiceType: engineCore.getRegisteredInstanceType("authenticationRateComponent"),
+                authenticationAccountAdminComponentType: engineCore.getRegisteredInstanceType("authenticationAccountAdminComponent"),
+                authenticationAccountComponentType: engineCore.getRegisteredInstanceType("authenticationAccountComponent"),
+                authorizationComponentType: engineCore.getRegisteredInstanceType("authorizationComponent"),
+                organizationRequestAdminComponentType: engineCore.getRegisteredInstanceType("organizationRequestAdminComponent"),
+                messagingComponentType: engineCore.getRegisteredInstanceType("messagingComponent"),
+                loggingComponentType: engineCore.getRegisteredSilencedType("logging", "EntityStorageAuthenticationService"),
+                taskSchedulerComponentType: engineCore.getRegisteredInstanceType("taskSchedulerComponent"),
+                platformComponentType: engineCore.getRegisteredInstanceType("platformComponent")
             }, createConfig.options));
         };
         instanceTypeName = "entity-storage-authentication-service";

package/dist/es/components/authentication.js.map

@@ -1 +1 @@
-{"version":3,"file":"authentication.js","sources":["../../../src/components/authentication.ts"],"names":[],"mappings":"AAAA,gCAAgC;AAChC,uCAAuC;AACvC,OAAO,EAAE,qCAAqC,EAAE,MAAM,6CAA6C,CAAC;AACpG,OAAO,EACN,kCAAkC,EAClC,UAAU,IAAI,2BAA2B,EAEzC,MAAM,yCAAyC,CAAC;AACjD,OAAO,EAAE,eAAe,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAC;AACjE,OAAO,EAAE,gBAAgB,EAAmB,MAAM,cAAc,CAAC;AAMjE,OAAO,EAAE,gBAAgB,EAAE,gCAAgC,EAAE,MAAM,sBAAsB,CAAC;AAI1F,OAAO,EAAE,2BAA2B,EAAE,MAAM,gDAAgD,CAAC;AAE7F;;;;;;GAMG;AACH,MAAM,UAAU,iCAAiC,CAChD,UAA4C,EAC5C,OAAgD,EAChD,cAA6C;IAE7C,IAAI,eAAe,CAAC;IACpB,IAAI,gBAAgB,CAAC;IAErB,IAAI,cAAc,CAAC,IAAI,KAAK,2BAA2B,CAAC,aAAa,EAAE,CAAC;QACvE,eAAe,GAAG,CAAC,YAAmC,EAAE,EAAE;YACzD,2BAA2B,EAAE,CAAC;YAC9B,gCAAgC,CAC/B,UAAU,EACV,OAAO,EACP,YAAY,CAAC,OAAO,EAAE,qBAAqB,EAC3C,oBAAoB,EACpB,eAAe,CAAC,qBAAqB,CAAC,UAAU,CAAC,gBAAgB,EAAE,EAAE;gBACpE,aAAa,CAAC,IAAI;gBAClB,aAAa,CAAC,MAAM;aACpB,CAAC,CACF,CAAC;YACF,OAAO,IAAI,kCAAkC,CAC5C,gBAAgB,CAAC,WAAW,CAC3B;gBACC,kBAAkB,EAAE,UAAU,CAAC,yBAAyB,CAAC,gBAAgB,CAAC;gBAC1E,wBAAwB,EACvB,UAAU,CAAC,iCAAiC,CAAC,sBAAsB,CAAC;gBACrE,8BAA8B,EAAE,UAAU,CAAC,iCAAiC,CAC3E,8BAA8B,CAC9B;gBACD,6BAA6B,EAAE,UAAU,CAAC,yBAAyB,CAClE,6BAA6B,CAC7B;aACD,EACD,YAAY,CAAC,OAAO,CACpB,CACD,CAAC;QACH,CAAC,CAAC;QACF,gBAAgB,GAAG,uCAAuC,CAAC;IAC5D,CAAC;SAAM,IAAI,cAAc,CAAC,IAAI,KAAK,2BAA2B,CAAC,UAAU,EAAE,CAAC;QAC3E,eAAe,GAAG,CAAC,YAAmC,EAAE,EAAE,CACzD,IAAI,qCAAqC,CACxC,gBAAgB,CAAC,WAAW,CAAqC,YAAY,CAAC,OAAO,CAAC,CACtF,CAAC;QACH,gBAAgB,GAAG,2CAA2C,CAAC;IAChE,CAAC;IAED,OAAO;QACN,eAAe,EAAE,eAAsE;QACvF,gBAAgB;QAChB,OAAO,EAAE,gBAAgB;KACzB,CAAC;AACH,CAAC","sourcesContent":["// Copyright 2024 IOTA Stiftung.\n// SPDX-License-Identifier: Apache-2.0.\nimport { EntityStorageAuthenticationRestClient } from \"@3sixty/api-auth-entity-storage-rest-client\";\nimport {\n\tEntityStorageAuthenticationService,\n\tinitSchema as initSchemaAuthEntityStorage,\n\ttype AuthenticationUser\n} from \"@3sixty/api-auth-entity-storage-service\";\nimport { ContextIdHelper, ContextIdKeys } from \"@3sixty/context\";\nimport { ComponentFactory, type IComponent } from \"@3sixty/core\";\nimport type {\n\tEngineTypeInitialiserReturn,\n\tIEngineCore,\n\tIEngineCoreContext\n} from \"@3sixty/engine-models\";\nimport { EngineTypeHelper, initialiseEntityStorageConnector } from \"@3sixty/engine-types\";\n\nimport type { AuthenticationComponentConfig } from \"../models/config/authenticationComponentConfig.js\";\nimport type { IEngineServerConfig } from \"../models/IEngineServerConfig.js\";\nimport { AuthenticationComponentType } from \"../models/types/authenticationComponentType.js\";\n\n/**\n * Initialise the authentication component.\n * @param engineCore The engine core.\n * @param context The context for the engine.\n * @param instanceConfig The instance config.\n * @returns The instance created and the factory for it.\n */\nexport function initialiseAuthenticationComponent(\n\tengineCore: IEngineCore<IEngineServerConfig>,\n\tcontext: IEngineCoreContext<IEngineServerConfig>,\n\tinstanceConfig: AuthenticationComponentConfig\n): EngineTypeInitialiserReturn<AuthenticationComponentConfig, typeof ComponentFactory> {\n\tlet createComponent;\n\tlet instanceTypeName;\n\n\tif (instanceConfig.type === AuthenticationComponentType.EntityStorage) {\n\t\tcreateComponent = (createConfig: typeof instanceConfig) => {\n\t\t\tinitSchemaAuthEntityStorage();\n\t\t\tinitialiseEntityStorageConnector(\n\t\t\t\tengineCore,\n\t\t\t\tcontext,\n\t\t\t\tcreateConfig.options?.userEntityStorageType,\n\t\t\t\t\"AuthenticationUser\",\n\t\t\t\tContextIdHelper.pickKeysFromAvailable(engineCore.getContextIdKeys(), [\n\t\t\t\t\tContextIdKeys.Node,\n\t\t\t\t\tContextIdKeys.Tenant\n\t\t\t\t])\n\t\t\t);\n\t\t\treturn new EntityStorageAuthenticationService(\n\t\t\t\tEngineTypeHelper.mergeConfig<(typeof instanceConfig)[\"options\"]>(\n\t\t\t\t\t{\n\t\t\t\t\t\tvaultConnectorType: engineCore.getRegisteredInstanceType(\"vaultConnector\"),\n\t\t\t\t\t\ttenantAdminComponentType:\n\t\t\t\t\t\t\tengineCore.getRegisteredInstanceTypeOptional(\"tenantAdminComponent\"),\n\t\t\t\t\t\tauthenticationAuditServiceType: engineCore.getRegisteredInstanceTypeOptional(\n\t\t\t\t\t\t\t\"authenticationAuditComponent\"\n\t\t\t\t\t\t),\n\t\t\t\t\t\tauthenticationRateServiceType: engineCore.getRegisteredInstanceType(\n\t\t\t\t\t\t\t\"authenticationRateComponent\"\n\t\t\t\t\t\t)\n\t\t\t\t\t},\n\t\t\t\t\tcreateConfig.options\n\t\t\t\t)\n\t\t\t);\n\t\t};\n\t\tinstanceTypeName = \"entity-storage-authentication-service\";\n\t} else if (instanceConfig.type === AuthenticationComponentType.RestClient) {\n\t\tcreateComponent = (createConfig: typeof instanceConfig) =>\n\t\t\tnew EntityStorageAuthenticationRestClient(\n\t\t\t\tEngineTypeHelper.mergeConfig<(typeof instanceConfig)[\"options\"]>(createConfig.options)\n\t\t\t);\n\t\tinstanceTypeName = \"entity-storage-authentication-rest-client\";\n\t}\n\n\treturn {\n\t\tcreateComponent: createComponent as (createConfig: typeof instanceConfig) => IComponent,\n\t\tinstanceTypeName,\n\t\tfactory: ComponentFactory\n\t};\n}\n"]}
+{"version":3,"file":"authentication.js","sources":["../../../src/components/authentication.ts"],"names":[],"mappings":"AAAA,gCAAgC;AAChC,mCAAmC;AACnC,uCAAuC;AACvC,OAAO,EAAE,qCAAqC,EAAE,MAAM,6CAA6C,CAAC;AACpG,OAAO,EACN,kCAAkC,EAClC,UAAU,IAAI,2BAA2B,EAGzC,MAAM,yCAAyC,CAAC;AACjD,OAAO,EAAE,eAAe,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAC;AACjE,OAAO,EAAE,gBAAgB,EAAmB,MAAM,cAAc,CAAC;AAMjE,OAAO,EAAE,gBAAgB,EAAE,gCAAgC,EAAE,MAAM,sBAAsB,CAAC;AAI1F,OAAO,EAAE,2BAA2B,EAAE,MAAM,gDAAgD,CAAC;AAE7F;;;;;;GAMG;AACH,MAAM,UAAU,yCAAyC,CACxD,UAA4C,EAC5C,OAAgD,EAChD,WAA+B;IAE/B,2BAA2B,EAAE,CAAC;IAC9B,gCAAgC,CAC/B,UAAU,EACV,OAAO,EACP,WAAW,EACX,oBAAoB,EACpB,eAAe,CAAC,qBAAqB,CAAC,UAAU,CAAC,gBAAgB,EAAE,EAAE;QACpE,aAAa,CAAC,IAAI;QAClB,aAAa,CAAC,MAAM;KACpB,CAAC,CACF,CAAC;AACH,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,kDAAkD,CACjE,UAA4C,EAC5C,OAAgD,EAChD,WAA+B;IAE/B,2BAA2B,EAAE,CAAC;IAC9B,gCAAgC,CAC/B,UAAU,EACV,OAAO,EACP,WAAW,EACX,6BAA6B,EAC7B,eAAe,CAAC,qBAAqB,CAAC,UAAU,CAAC,gBAAgB,EAAE,EAAE;QACpE,aAAa,CAAC,IAAI;QAClB,aAAa,CAAC,MAAM;KACpB,CAAC,CACF,CAAC;AACH,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,iCAAiC,CAChD,UAA4C,EAC5C,OAAgD,EAChD,cAA6C;IAE7C,IAAI,eAAe,CAAC;IACpB,IAAI,gBAAgB,CAAC;IAErB,IAAI,cAAc,CAAC,IAAI,KAAK,2BAA2B,CAAC,aAAa,EAAE,CAAC;QACvE,eAAe,GAAG,CAAC,YAAmC,EAAE,EAAE;YACzD,yCAAyC,CACxC,UAAU,EACV,OAAO,EACP,YAAY,CAAC,OAAO,EAAE,qBAAqB,CAC3C,CAAC;YACF,kDAAkD,CACjD,UAAU,EACV,OAAO,EACP,YAAY,CAAC,OAAO,EAAE,8BAA8B,CACpD,CAAC;YACF,OAAO,IAAI,kCAAkC,CAC5C,gBAAgB,CAAC,WAAW,CAC3B;gBACC,kBAAkB,EAAE,UAAU,CAAC,yBAAyB,CAAC,gBAAgB,CAAC;gBAC1E,wBAAwB,EACvB,UAAU,CAAC,iCAAiC,CAAC,sBAAsB,CAAC;gBACrE,8BAA8B,EAAE,UAAU,CAAC,yBAAyB,CACnE,8BAA8B,CAC9B;gBACD,6BAA6B,EAAE,UAAU,CAAC,yBAAyB,CAClE,6BAA6B,CAC7B;gBACD,uCAAuC,EAAE,UAAU,CAAC,yBAAyB,CAC5E,qCAAqC,CACrC;gBACD,kCAAkC,EAAE,UAAU,CAAC,yBAAyB,CACvE,gCAAgC,CAChC;gBACD,0BAA0B,EACzB,UAAU,CAAC,yBAAyB,CAAC,wBAAwB,CAAC;gBAC/D,qCAAqC,EAAE,UAAU,CAAC,yBAAyB,CAC1E,mCAAmC,CACnC;gBACD,sBAAsB,EAAE,UAAU,CAAC,yBAAyB,CAAC,oBAAoB,CAAC;gBAClF,oBAAoB,EAAE,UAAU,CAAC,yBAAyB,CACzD,SAAS,EACT,oCAAoC,CACpC;gBACD,0BAA0B,EACzB,UAAU,CAAC,yBAAyB,CAAC,wBAAwB,CAAC;gBAC/D,qBAAqB,EAAE,UAAU,CAAC,yBAAyB,CAAC,mBAAmB,CAAC;aAChF,EACD,YAAY,CAAC,OAAO,CACpB,CACD,CAAC;QACH,CAAC,CAAC;QACF,gBAAgB,GAAG,uCAAuC,CAAC;IAC5D,CAAC;SAAM,IAAI,cAAc,CAAC,IAAI,KAAK,2BAA2B,CAAC,UAAU,EAAE,CAAC;QAC3E,eAAe,GAAG,CAAC,YAAmC,EAAE,EAAE,CACzD,IAAI,qCAAqC,CACxC,gBAAgB,CAAC,WAAW,CAAqC,YAAY,CAAC,OAAO,CAAC,CACtF,CAAC;QACH,gBAAgB,GAAG,2CAA2C,CAAC;IAChE,CAAC;IAED,OAAO;QACN,eAAe,EAAE,eAAsE;QACvF,gBAAgB;QAChB,OAAO,EAAE,gBAAgB;KACzB,CAAC;AACH,CAAC","sourcesContent":["// Copyright 2024 IOTA Stiftung.\n// Copyright 2026 3Sixty Trade Ltd.\n// SPDX-License-Identifier: Apache-2.0.\nimport { EntityStorageAuthenticationRestClient } from \"@3sixty/api-auth-entity-storage-rest-client\";\nimport {\n\tEntityStorageAuthenticationService,\n\tinitSchema as initSchemaAuthEntityStorage,\n\ttype AuthenticationPasswordReset,\n\ttype AuthenticationUser\n} from \"@3sixty/api-auth-entity-storage-service\";\nimport { ContextIdHelper, ContextIdKeys } from \"@3sixty/context\";\nimport { ComponentFactory, type IComponent } from \"@3sixty/core\";\nimport type {\n\tEngineTypeInitialiserReturn,\n\tIEngineCore,\n\tIEngineCoreContext\n} from \"@3sixty/engine-models\";\nimport { EngineTypeHelper, initialiseEntityStorageConnector } from \"@3sixty/engine-types\";\n\nimport type { AuthenticationComponentConfig } from \"../models/config/authenticationComponentConfig.js\";\nimport type { IEngineServerConfig } from \"../models/IEngineServerConfig.js\";\nimport { AuthenticationComponentType } from \"../models/types/authenticationComponentType.js\";\n\n/**\n * Initialise the entity storage of the authentication users, shared by every component that uses\n * it so the schema and partitions match.\n * @param engineCore The engine core.\n * @param context The context for the engine.\n * @param storageType The configured storage type.\n */\nexport function initialiseAuthenticationUserEntityStorage(\n\tengineCore: IEngineCore<IEngineServerConfig>,\n\tcontext: IEngineCoreContext<IEngineServerConfig>,\n\tstorageType: string | undefined\n): void {\n\tinitSchemaAuthEntityStorage();\n\tinitialiseEntityStorageConnector(\n\t\tengineCore,\n\t\tcontext,\n\t\tstorageType,\n\t\t\"AuthenticationUser\",\n\t\tContextIdHelper.pickKeysFromAvailable(engineCore.getContextIdKeys(), [\n\t\t\tContextIdKeys.Node,\n\t\t\tContextIdKeys.Tenant\n\t\t])\n\t);\n}\n\n/**\n * Initialise the entity storage of the password reset and sign up verification tokens, partitioned\n * like the accounts they belong to.\n * @param engineCore The engine core.\n * @param context The context for the engine.\n * @param storageType The configured storage type.\n */\nexport function initialiseAuthenticationPasswordResetEntityStorage(\n\tengineCore: IEngineCore<IEngineServerConfig>,\n\tcontext: IEngineCoreContext<IEngineServerConfig>,\n\tstorageType: string | undefined\n): void {\n\tinitSchemaAuthEntityStorage();\n\tinitialiseEntityStorageConnector(\n\t\tengineCore,\n\t\tcontext,\n\t\tstorageType,\n\t\t\"AuthenticationPasswordReset\",\n\t\tContextIdHelper.pickKeysFromAvailable(engineCore.getContextIdKeys(), [\n\t\t\tContextIdKeys.Node,\n\t\t\tContextIdKeys.Tenant\n\t\t])\n\t);\n}\n\n/**\n * Initialise the authentication component.\n * @param engineCore The engine core.\n * @param context The context for the engine.\n * @param instanceConfig The instance config.\n * @returns The instance created and the factory for it.\n */\nexport function initialiseAuthenticationComponent(\n\tengineCore: IEngineCore<IEngineServerConfig>,\n\tcontext: IEngineCoreContext<IEngineServerConfig>,\n\tinstanceConfig: AuthenticationComponentConfig\n): EngineTypeInitialiserReturn<AuthenticationComponentConfig, typeof ComponentFactory> {\n\tlet createComponent;\n\tlet instanceTypeName;\n\n\tif (instanceConfig.type === AuthenticationComponentType.EntityStorage) {\n\t\tcreateComponent = (createConfig: typeof instanceConfig) => {\n\t\t\tinitialiseAuthenticationUserEntityStorage(\n\t\t\t\tengineCore,\n\t\t\t\tcontext,\n\t\t\t\tcreateConfig.options?.userEntityStorageType\n\t\t\t);\n\t\t\tinitialiseAuthenticationPasswordResetEntityStorage(\n\t\t\t\tengineCore,\n\t\t\t\tcontext,\n\t\t\t\tcreateConfig.options?.passwordResetEntityStorageType\n\t\t\t);\n\t\t\treturn new EntityStorageAuthenticationService(\n\t\t\t\tEngineTypeHelper.mergeConfig<(typeof instanceConfig)[\"options\"]>(\n\t\t\t\t\t{\n\t\t\t\t\t\tvaultConnectorType: engineCore.getRegisteredInstanceType(\"vaultConnector\"),\n\t\t\t\t\t\ttenantAdminComponentType:\n\t\t\t\t\t\t\tengineCore.getRegisteredInstanceTypeOptional(\"tenantAdminComponent\"),\n\t\t\t\t\t\tauthenticationAuditServiceType: engineCore.getRegisteredInstanceType(\n\t\t\t\t\t\t\t\"authenticationAuditComponent\"\n\t\t\t\t\t\t),\n\t\t\t\t\t\tauthenticationRateServiceType: engineCore.getRegisteredInstanceType(\n\t\t\t\t\t\t\t\"authenticationRateComponent\"\n\t\t\t\t\t\t),\n\t\t\t\t\t\tauthenticationAccountAdminComponentType: engineCore.getRegisteredInstanceType(\n\t\t\t\t\t\t\t\"authenticationAccountAdminComponent\"\n\t\t\t\t\t\t),\n\t\t\t\t\t\tauthenticationAccountComponentType: engineCore.getRegisteredInstanceType(\n\t\t\t\t\t\t\t\"authenticationAccountComponent\"\n\t\t\t\t\t\t),\n\t\t\t\t\t\tauthorizationComponentType:\n\t\t\t\t\t\t\tengineCore.getRegisteredInstanceType(\"authorizationComponent\"),\n\t\t\t\t\t\torganizationRequestAdminComponentType: engineCore.getRegisteredInstanceType(\n\t\t\t\t\t\t\t\"organizationRequestAdminComponent\"\n\t\t\t\t\t\t),\n\t\t\t\t\t\tmessagingComponentType: engineCore.getRegisteredInstanceType(\"messagingComponent\"),\n\t\t\t\t\t\tloggingComponentType: engineCore.getRegisteredSilencedType(\n\t\t\t\t\t\t\t\"logging\",\n\t\t\t\t\t\t\t\"EntityStorageAuthenticationService\"\n\t\t\t\t\t\t),\n\t\t\t\t\t\ttaskSchedulerComponentType:\n\t\t\t\t\t\t\tengineCore.getRegisteredInstanceType(\"taskSchedulerComponent\"),\n\t\t\t\t\t\tplatformComponentType: engineCore.getRegisteredInstanceType(\"platformComponent\")\n\t\t\t\t\t},\n\t\t\t\t\tcreateConfig.options\n\t\t\t\t)\n\t\t\t);\n\t\t};\n\t\tinstanceTypeName = \"entity-storage-authentication-service\";\n\t} else if (instanceConfig.type === AuthenticationComponentType.RestClient) {\n\t\tcreateComponent = (createConfig: typeof instanceConfig) =>\n\t\t\tnew EntityStorageAuthenticationRestClient(\n\t\t\t\tEngineTypeHelper.mergeConfig<(typeof instanceConfig)[\"options\"]>(createConfig.options)\n\t\t\t);\n\t\tinstanceTypeName = \"entity-storage-authentication-rest-client\";\n\t}\n\n\treturn {\n\t\tcreateComponent: createComponent as (createConfig: typeof instanceConfig) => IComponent,\n\t\tinstanceTypeName,\n\t\tfactory: ComponentFactory\n\t};\n}\n"]}

package/dist/es/components/authenticationAccount.js

@@ -0,0 +1,85 @@
+// Copyright 2026 3Sixty Trade Ltd.
+// SPDX-License-Identifier: Apache-2.0.
+import { EntityStorageAuthenticationAccountRestClient } from "@3sixty/api-auth-account-rest-client";
+import { EntityStorageAuthenticationAccountService, initSchema as initSchemaAuthAccount } from "@3sixty/api-auth-account-service";
+import { ContextIdHelper, ContextIdKeys } from "@3sixty/context";
+import { ComponentFactory } from "@3sixty/core";
+import { EngineTypeHelper, initialiseEntityStorageConnector } from "@3sixty/engine-types";
+import { AuthenticationAccountComponentType } from "../models/types/authenticationAccountComponentType.js";
+/**
+ * Initialise the entity storage of the account data, shared by every component that uses it so the
+ * schema and partitions match.
+ * @param engineCore The engine core.
+ * @param context The context for the engine.
+ * @param storageType The configured storage type.
+ */
+export function initialiseAccountDataEntityStorage(engineCore, context, storageType) {
+    initSchemaAuthAccount();
+    initialiseEntityStorageConnector(engineCore, context, storageType, "AccountData", ContextIdHelper.pickKeysFromAvailable(engineCore.getContextIdKeys(), [
+        ContextIdKeys.Node,
+        ContextIdKeys.Tenant
+    ]));
+}
+/**
+ * Initialise the entity storage of the requests to join an organization, shared by every component
+ * that uses it so the schema and partitions match.
+ * @param engineCore The engine core.
+ * @param context The context for the engine.
+ * @param storageType The configured storage type.
+ */
+export function initialiseOrganizationRequestEntityStorage(engineCore, context, storageType) {
+    initSchemaAuthAccount();
+    initialiseEntityStorageConnector(engineCore, context, storageType, "OrganizationRequest", ContextIdHelper.pickKeysFromAvailable(engineCore.getContextIdKeys(), [
+        ContextIdKeys.Node,
+        ContextIdKeys.Tenant
+    ]));
+}
+/**
+ * Initialise the entity storage of the registered organizations, inside the tenant partition like
+ * the accounts that join them. Every component that checks an organization is registered
+ * initialises it, so the check never runs against missing storage.
+ * @param engineCore The engine core.
+ * @param context The context for the engine.
+ * @param storageType The configured storage type.
+ */
+export function initialiseOrganizationEntityStorage(engineCore, context, storageType) {
+    initSchemaAuthAccount();
+    initialiseEntityStorageConnector(engineCore, context, storageType, "Organization", ContextIdHelper.pickKeysFromAvailable(engineCore.getContextIdKeys(), [
+        ContextIdKeys.Node,
+        ContextIdKeys.Tenant
+    ]));
+}
+/**
+ * Initialise the authentication account component.
+ * @param engineCore The engine core.
+ * @param context The context for the engine.
+ * @param instanceConfig The instance config.
+ * @returns The instance created and the factory for it.
+ */
+export function initialiseAuthenticationAccountComponent(engineCore, context, instanceConfig) {
+    let createComponent;
+    let instanceTypeName;
+    if (instanceConfig.type === AuthenticationAccountComponentType.EntityStorage) {
+        createComponent = (createConfig) => {
+            initialiseAccountDataEntityStorage(engineCore, context, createConfig.options?.accountDataEntityStorageType);
+            initialiseOrganizationRequestEntityStorage(engineCore, context, createConfig.options?.organizationRequestEntityStorageType);
+            initialiseOrganizationEntityStorage(engineCore, context, createConfig.options?.organizationEntityStorageType);
+            return new EntityStorageAuthenticationAccountService(EngineTypeHelper.mergeConfig({
+                authorizationComponentType: engineCore.getRegisteredInstanceType("authorizationComponent"),
+                identityComponentType: engineCore.getRegisteredInstanceType("identityComponent"),
+                authenticationRateServiceType: engineCore.getRegisteredInstanceType("authenticationRateComponent")
+            }, createConfig.options));
+        };
+        instanceTypeName = "entity-storage-authentication-account-service";
+    }
+    else if (instanceConfig.type === AuthenticationAccountComponentType.RestClient) {
+        createComponent = (createConfig) => new EntityStorageAuthenticationAccountRestClient(EngineTypeHelper.mergeConfig(createConfig.options));
+        instanceTypeName = "entity-storage-authentication-account-rest-client";
+    }
+    return {
+        createComponent: createComponent,
+        instanceTypeName,
+        factory: ComponentFactory
+    };
+}
+//# sourceMappingURL=authenticationAccount.js.map

package/dist/es/components/authenticationAccount.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"authenticationAccount.js","sources":["../../../src/components/authenticationAccount.ts"],"names":[],"mappings":"AAAA,mCAAmC;AACnC,uCAAuC;AACvC,OAAO,EAAE,4CAA4C,EAAE,MAAM,sCAAsC,CAAC;AACpG,OAAO,EAEN,yCAAyC,EACzC,UAAU,IAAI,qBAAqB,EAGnC,MAAM,kCAAkC,CAAC;AAC1C,OAAO,EAAE,eAAe,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAC;AACjE,OAAO,EAAE,gBAAgB,EAAmB,MAAM,cAAc,CAAC;AAMjE,OAAO,EAAE,gBAAgB,EAAE,gCAAgC,EAAE,MAAM,sBAAsB,CAAC;AAI1F,OAAO,EAAE,kCAAkC,EAAE,MAAM,uDAAuD,CAAC;AAE3G;;;;;;GAMG;AACH,MAAM,UAAU,kCAAkC,CACjD,UAA4C,EAC5C,OAAgD,EAChD,WAA+B;IAE/B,qBAAqB,EAAE,CAAC;IACxB,gCAAgC,CAC/B,UAAU,EACV,OAAO,EACP,WAAW,EACX,aAAa,EACb,eAAe,CAAC,qBAAqB,CAAC,UAAU,CAAC,gBAAgB,EAAE,EAAE;QACpE,aAAa,CAAC,IAAI;QAClB,aAAa,CAAC,MAAM;KACpB,CAAC,CACF,CAAC;AACH,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,0CAA0C,CACzD,UAA4C,EAC5C,OAAgD,EAChD,WAA+B;IAE/B,qBAAqB,EAAE,CAAC;IACxB,gCAAgC,CAC/B,UAAU,EACV,OAAO,EACP,WAAW,EACX,qBAAqB,EACrB,eAAe,CAAC,qBAAqB,CAAC,UAAU,CAAC,gBAAgB,EAAE,EAAE;QACpE,aAAa,CAAC,IAAI;QAClB,aAAa,CAAC,MAAM;KACpB,CAAC,CACF,CAAC;AACH,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,mCAAmC,CAClD,UAA4C,EAC5C,OAAgD,EAChD,WAA+B;IAE/B,qBAAqB,EAAE,CAAC;IACxB,gCAAgC,CAC/B,UAAU,EACV,OAAO,EACP,WAAW,EACX,cAAc,EACd,eAAe,CAAC,qBAAqB,CAAC,UAAU,CAAC,gBAAgB,EAAE,EAAE;QACpE,aAAa,CAAC,IAAI;QAClB,aAAa,CAAC,MAAM;KACpB,CAAC,CACF,CAAC;AACH,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,wCAAwC,CACvD,UAA4C,EAC5C,OAAgD,EAChD,cAAoD;IAEpD,IAAI,eAAe,CAAC;IACpB,IAAI,gBAAgB,CAAC;IAErB,IAAI,cAAc,CAAC,IAAI,KAAK,kCAAkC,CAAC,aAAa,EAAE,CAAC;QAC9E,eAAe,GAAG,CAAC,YAAmC,EAAE,EAAE;YACzD,kCAAkC,CACjC,UAAU,EACV,OAAO,EACP,YAAY,CAAC,OAAO,EAAE,4BAA4B,CAClD,CAAC;YACF,0CAA0C,CACzC,UAAU,EACV,OAAO,EACP,YAAY,CAAC,OAAO,EAAE,oCAAoC,CAC1D,CAAC;YACF,mCAAmC,CAClC,UAAU,EACV,OAAO,EACP,YAAY,CAAC,OAAO,EAAE,6BAA6B,CACnD,CAAC;YACF,OAAO,IAAI,yCAAyC,CACnD,gBAAgB,CAAC,WAAW,CAC3B;gBACC,0BAA0B,EACzB,UAAU,CAAC,yBAAyB,CAAC,wBAAwB,CAAC;gBAC/D,qBAAqB,EAAE,UAAU,CAAC,yBAAyB,CAAC,mBAAmB,CAAC;gBAChF,6BAA6B,EAAE,UAAU,CAAC,yBAAyB,CAClE,6BAA6B,CAC7B;aACD,EACD,YAAY,CAAC,OAAO,CACpB,CACD,CAAC;QACH,CAAC,CAAC;QACF,gBAAgB,GAAG,+CAA+C,CAAC;IACpE,CAAC;SAAM,IAAI,cAAc,CAAC,IAAI,KAAK,kCAAkC,CAAC,UAAU,EAAE,CAAC;QAClF,eAAe,GAAG,CAAC,YAAmC,EAAE,EAAE,CACzD,IAAI,4CAA4C,CAC/C,gBAAgB,CAAC,WAAW,CAAqC,YAAY,CAAC,OAAO,CAAC,CACtF,CAAC;QACH,gBAAgB,GAAG,mDAAmD,CAAC;IACxE,CAAC;IAED,OAAO;QACN,eAAe,EAAE,eAAsE;QACvF,gBAAgB;QAChB,OAAO,EAAE,gBAAgB;KACzB,CAAC;AACH,CAAC","sourcesContent":["// Copyright 2026 3Sixty Trade Ltd.\n// SPDX-License-Identifier: Apache-2.0.\nimport { EntityStorageAuthenticationAccountRestClient } from \"@3sixty/api-auth-account-rest-client\";\nimport {\n\ttype AccountData,\n\tEntityStorageAuthenticationAccountService,\n\tinitSchema as initSchemaAuthAccount,\n\ttype Organization,\n\ttype OrganizationRequest\n} from \"@3sixty/api-auth-account-service\";\nimport { ContextIdHelper, ContextIdKeys } from \"@3sixty/context\";\nimport { ComponentFactory, type IComponent } from \"@3sixty/core\";\nimport type {\n\tEngineTypeInitialiserReturn,\n\tIEngineCore,\n\tIEngineCoreContext\n} from \"@3sixty/engine-models\";\nimport { EngineTypeHelper, initialiseEntityStorageConnector } from \"@3sixty/engine-types\";\n\nimport type { AuthenticationAccountComponentConfig } from \"../models/config/authenticationAccountComponentConfig.js\";\nimport type { IEngineServerConfig } from \"../models/IEngineServerConfig.js\";\nimport { AuthenticationAccountComponentType } from \"../models/types/authenticationAccountComponentType.js\";\n\n/**\n * Initialise the entity storage of the account data, shared by every component that uses it so the\n * schema and partitions match.\n * @param engineCore The engine core.\n * @param context The context for the engine.\n * @param storageType The configured storage type.\n */\nexport function initialiseAccountDataEntityStorage(\n\tengineCore: IEngineCore<IEngineServerConfig>,\n\tcontext: IEngineCoreContext<IEngineServerConfig>,\n\tstorageType: string | undefined\n): void {\n\tinitSchemaAuthAccount();\n\tinitialiseEntityStorageConnector(\n\t\tengineCore,\n\t\tcontext,\n\t\tstorageType,\n\t\t\"AccountData\",\n\t\tContextIdHelper.pickKeysFromAvailable(engineCore.getContextIdKeys(), [\n\t\t\tContextIdKeys.Node,\n\t\t\tContextIdKeys.Tenant\n\t\t])\n\t);\n}\n\n/**\n * Initialise the entity storage of the requests to join an organization, shared by every component\n * that uses it so the schema and partitions match.\n * @param engineCore The engine core.\n * @param context The context for the engine.\n * @param storageType The configured storage type.\n */\nexport function initialiseOrganizationRequestEntityStorage(\n\tengineCore: IEngineCore<IEngineServerConfig>,\n\tcontext: IEngineCoreContext<IEngineServerConfig>,\n\tstorageType: string | undefined\n): void {\n\tinitSchemaAuthAccount();\n\tinitialiseEntityStorageConnector(\n\t\tengineCore,\n\t\tcontext,\n\t\tstorageType,\n\t\t\"OrganizationRequest\",\n\t\tContextIdHelper.pickKeysFromAvailable(engineCore.getContextIdKeys(), [\n\t\t\tContextIdKeys.Node,\n\t\t\tContextIdKeys.Tenant\n\t\t])\n\t);\n}\n\n/**\n * Initialise the entity storage of the registered organizations, inside the tenant partition like\n * the accounts that join them. Every component that checks an organization is registered\n * initialises it, so the check never runs against missing storage.\n * @param engineCore The engine core.\n * @param context The context for the engine.\n * @param storageType The configured storage type.\n */\nexport function initialiseOrganizationEntityStorage(\n\tengineCore: IEngineCore<IEngineServerConfig>,\n\tcontext: IEngineCoreContext<IEngineServerConfig>,\n\tstorageType: string | undefined\n): void {\n\tinitSchemaAuthAccount();\n\tinitialiseEntityStorageConnector(\n\t\tengineCore,\n\t\tcontext,\n\t\tstorageType,\n\t\t\"Organization\",\n\t\tContextIdHelper.pickKeysFromAvailable(engineCore.getContextIdKeys(), [\n\t\t\tContextIdKeys.Node,\n\t\t\tContextIdKeys.Tenant\n\t\t])\n\t);\n}\n\n/**\n * Initialise the authentication account component.\n * @param engineCore The engine core.\n * @param context The context for the engine.\n * @param instanceConfig The instance config.\n * @returns The instance created and the factory for it.\n */\nexport function initialiseAuthenticationAccountComponent(\n\tengineCore: IEngineCore<IEngineServerConfig>,\n\tcontext: IEngineCoreContext<IEngineServerConfig>,\n\tinstanceConfig: AuthenticationAccountComponentConfig\n): EngineTypeInitialiserReturn<AuthenticationAccountComponentConfig, typeof ComponentFactory> {\n\tlet createComponent;\n\tlet instanceTypeName;\n\n\tif (instanceConfig.type === AuthenticationAccountComponentType.EntityStorage) {\n\t\tcreateComponent = (createConfig: typeof instanceConfig) => {\n\t\t\tinitialiseAccountDataEntityStorage(\n\t\t\t\tengineCore,\n\t\t\t\tcontext,\n\t\t\t\tcreateConfig.options?.accountDataEntityStorageType\n\t\t\t);\n\t\t\tinitialiseOrganizationRequestEntityStorage(\n\t\t\t\tengineCore,\n\t\t\t\tcontext,\n\t\t\t\tcreateConfig.options?.organizationRequestEntityStorageType\n\t\t\t);\n\t\t\tinitialiseOrganizationEntityStorage(\n\t\t\t\tengineCore,\n\t\t\t\tcontext,\n\t\t\t\tcreateConfig.options?.organizationEntityStorageType\n\t\t\t);\n\t\t\treturn new EntityStorageAuthenticationAccountService(\n\t\t\t\tEngineTypeHelper.mergeConfig<(typeof instanceConfig)[\"options\"]>(\n\t\t\t\t\t{\n\t\t\t\t\t\tauthorizationComponentType:\n\t\t\t\t\t\t\tengineCore.getRegisteredInstanceType(\"authorizationComponent\"),\n\t\t\t\t\t\tidentityComponentType: engineCore.getRegisteredInstanceType(\"identityComponent\"),\n\t\t\t\t\t\tauthenticationRateServiceType: engineCore.getRegisteredInstanceType(\n\t\t\t\t\t\t\t\"authenticationRateComponent\"\n\t\t\t\t\t\t)\n\t\t\t\t\t},\n\t\t\t\t\tcreateConfig.options\n\t\t\t\t)\n\t\t\t);\n\t\t};\n\t\tinstanceTypeName = \"entity-storage-authentication-account-service\";\n\t} else if (instanceConfig.type === AuthenticationAccountComponentType.RestClient) {\n\t\tcreateComponent = (createConfig: typeof instanceConfig) =>\n\t\t\tnew EntityStorageAuthenticationAccountRestClient(\n\t\t\t\tEngineTypeHelper.mergeConfig<(typeof instanceConfig)[\"options\"]>(createConfig.options)\n\t\t\t);\n\t\tinstanceTypeName = \"entity-storage-authentication-account-rest-client\";\n\t}\n\n\treturn {\n\t\tcreateComponent: createComponent as (createConfig: typeof instanceConfig) => IComponent,\n\t\tinstanceTypeName,\n\t\tfactory: ComponentFactory\n\t};\n}\n"]}

package/dist/es/components/authenticationAccountAdmin.js

@@ -0,0 +1,46 @@
+// Copyright 2026 3Sixty Trade Ltd.
+// SPDX-License-Identifier: Apache-2.0.
+import { EntityStorageAuthenticationAccountAdminRestClient } from "@3sixty/api-auth-account-rest-client";
+import { EntityStorageAuthenticationAccountAdminService } from "@3sixty/api-auth-account-service";
+import { ComponentFactory } from "@3sixty/core";
+import { EngineTypeHelper } from "@3sixty/engine-types";
+import { initialiseAuthenticationUserEntityStorage } from "./authentication.js";
+import { initialiseAccountDataEntityStorage, initialiseOrganizationEntityStorage, initialiseOrganizationRequestEntityStorage } from "./authenticationAccount.js";
+import { AuthenticationAccountAdminComponentType } from "../models/types/authenticationAccountAdminComponentType.js";
+/**
+ * Initialise the authentication account admin component.
+ * @param engineCore The engine core.
+ * @param context The context for the engine.
+ * @param instanceConfig The instance config.
+ * @returns The instance created and the factory for it.
+ */
+export function initialiseAuthenticationAccountAdminComponent(engineCore, context, instanceConfig) {
+    let createComponent;
+    let instanceTypeName;
+    if (instanceConfig.type === AuthenticationAccountAdminComponentType.EntityStorage) {
+        createComponent = (createConfig) => {
+            initialiseAccountDataEntityStorage(engineCore, context, createConfig.options?.accountDataEntityStorageType);
+            initialiseOrganizationEntityStorage(engineCore, context, createConfig.options?.organizationEntityStorageType);
+            // Removing an identity removes its pending requests, and an identity import completes them.
+            initialiseOrganizationRequestEntityStorage(engineCore, context, createConfig.options?.organizationRequestEntityStorageType);
+            // The accounts are looked up to check one exists before its data is changed.
+            initialiseAuthenticationUserEntityStorage(engineCore, context, createConfig.options?.userEntityStorageType);
+            return new EntityStorageAuthenticationAccountAdminService(EngineTypeHelper.mergeConfig({
+                authorizationComponentType: engineCore.getRegisteredInstanceType("authorizationComponent"),
+                identityComponentType: engineCore.getRegisteredInstanceType("identityComponent"),
+                authenticationRateServiceType: engineCore.getRegisteredInstanceType("authenticationRateComponent")
+            }, createConfig.options));
+        };
+        instanceTypeName = "entity-storage-authentication-account-admin-service";
+    }
+    else if (instanceConfig.type === AuthenticationAccountAdminComponentType.RestClient) {
+        createComponent = (createConfig) => new EntityStorageAuthenticationAccountAdminRestClient(EngineTypeHelper.mergeConfig(createConfig.options));
+        instanceTypeName = "entity-storage-authentication-account-admin-rest-client";
+    }
+    return {
+        createComponent: createComponent,
+        instanceTypeName,
+        factory: ComponentFactory
+    };
+}
+//# sourceMappingURL=authenticationAccountAdmin.js.map

package/dist/es/components/authenticationAccountAdmin.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"authenticationAccountAdmin.js","sources":["../../../src/components/authenticationAccountAdmin.ts"],"names":[],"mappings":"AAAA,mCAAmC;AACnC,uCAAuC;AACvC,OAAO,EAAE,iDAAiD,EAAE,MAAM,sCAAsC,CAAC;AACzG,OAAO,EAAE,8CAA8C,EAAE,MAAM,kCAAkC,CAAC;AAClG,OAAO,EAAE,gBAAgB,EAAmB,MAAM,cAAc,CAAC;AAMjE,OAAO,EAAE,gBAAgB,EAAE,MAAM,sBAAsB,CAAC;AAExD,OAAO,EAAE,yCAAyC,EAAE,MAAM,qBAAqB,CAAC;AAChF,OAAO,EACN,kCAAkC,EAClC,mCAAmC,EACnC,0CAA0C,EAC1C,MAAM,4BAA4B,CAAC;AAGpC,OAAO,EAAE,uCAAuC,EAAE,MAAM,4DAA4D,CAAC;AAErH;;;;;;GAMG;AACH,MAAM,UAAU,6CAA6C,CAC5D,UAA4C,EAC5C,OAAgD,EAChD,cAAyD;IAEzD,IAAI,eAAe,CAAC;IACpB,IAAI,gBAAgB,CAAC;IAErB,IAAI,cAAc,CAAC,IAAI,KAAK,uCAAuC,CAAC,aAAa,EAAE,CAAC;QACnF,eAAe,GAAG,CAAC,YAAmC,EAAE,EAAE;YACzD,kCAAkC,CACjC,UAAU,EACV,OAAO,EACP,YAAY,CAAC,OAAO,EAAE,4BAA4B,CAClD,CAAC;YACF,mCAAmC,CAClC,UAAU,EACV,OAAO,EACP,YAAY,CAAC,OAAO,EAAE,6BAA6B,CACnD,CAAC;YACF,4FAA4F;YAC5F,0CAA0C,CACzC,UAAU,EACV,OAAO,EACP,YAAY,CAAC,OAAO,EAAE,oCAAoC,CAC1D,CAAC;YACF,6EAA6E;YAC7E,yCAAyC,CACxC,UAAU,EACV,OAAO,EACP,YAAY,CAAC,OAAO,EAAE,qBAAqB,CAC3C,CAAC;YACF,OAAO,IAAI,8CAA8C,CACxD,gBAAgB,CAAC,WAAW,CAC3B;gBACC,0BAA0B,EACzB,UAAU,CAAC,yBAAyB,CAAC,wBAAwB,CAAC;gBAC/D,qBAAqB,EAAE,UAAU,CAAC,yBAAyB,CAAC,mBAAmB,CAAC;gBAChF,6BAA6B,EAAE,UAAU,CAAC,yBAAyB,CAClE,6BAA6B,CAC7B;aACD,EACD,YAAY,CAAC,OAAO,CACpB,CACD,CAAC;QACH,CAAC,CAAC;QACF,gBAAgB,GAAG,qDAAqD,CAAC;IAC1E,CAAC;SAAM,IAAI,cAAc,CAAC,IAAI,KAAK,uCAAuC,CAAC,UAAU,EAAE,CAAC;QACvF,eAAe,GAAG,CAAC,YAAmC,EAAE,EAAE,CACzD,IAAI,iDAAiD,CACpD,gBAAgB,CAAC,WAAW,CAAqC,YAAY,CAAC,OAAO,CAAC,CACtF,CAAC;QACH,gBAAgB,GAAG,yDAAyD,CAAC;IAC9E,CAAC;IAED,OAAO;QACN,eAAe,EAAE,eAAsE;QACvF,gBAAgB;QAChB,OAAO,EAAE,gBAAgB;KACzB,CAAC;AACH,CAAC","sourcesContent":["// Copyright 2026 3Sixty Trade Ltd.\n// SPDX-License-Identifier: Apache-2.0.\nimport { EntityStorageAuthenticationAccountAdminRestClient } from \"@3sixty/api-auth-account-rest-client\";\nimport { EntityStorageAuthenticationAccountAdminService } from \"@3sixty/api-auth-account-service\";\nimport { ComponentFactory, type IComponent } from \"@3sixty/core\";\nimport type {\n\tEngineTypeInitialiserReturn,\n\tIEngineCore,\n\tIEngineCoreContext\n} from \"@3sixty/engine-models\";\nimport { EngineTypeHelper } from \"@3sixty/engine-types\";\n\nimport { initialiseAuthenticationUserEntityStorage } from \"./authentication.js\";\nimport {\n\tinitialiseAccountDataEntityStorage,\n\tinitialiseOrganizationEntityStorage,\n\tinitialiseOrganizationRequestEntityStorage\n} from \"./authenticationAccount.js\";\nimport type { AuthenticationAccountAdminComponentConfig } from \"../models/config/authenticationAccountAdminComponentConfig.js\";\nimport type { IEngineServerConfig } from \"../models/IEngineServerConfig.js\";\nimport { AuthenticationAccountAdminComponentType } from \"../models/types/authenticationAccountAdminComponentType.js\";\n\n/**\n * Initialise the authentication account admin component.\n * @param engineCore The engine core.\n * @param context The context for the engine.\n * @param instanceConfig The instance config.\n * @returns The instance created and the factory for it.\n */\nexport function initialiseAuthenticationAccountAdminComponent(\n\tengineCore: IEngineCore<IEngineServerConfig>,\n\tcontext: IEngineCoreContext<IEngineServerConfig>,\n\tinstanceConfig: AuthenticationAccountAdminComponentConfig\n): EngineTypeInitialiserReturn<AuthenticationAccountAdminComponentConfig, typeof ComponentFactory> {\n\tlet createComponent;\n\tlet instanceTypeName;\n\n\tif (instanceConfig.type === AuthenticationAccountAdminComponentType.EntityStorage) {\n\t\tcreateComponent = (createConfig: typeof instanceConfig) => {\n\t\t\tinitialiseAccountDataEntityStorage(\n\t\t\t\tengineCore,\n\t\t\t\tcontext,\n\t\t\t\tcreateConfig.options?.accountDataEntityStorageType\n\t\t\t);\n\t\t\tinitialiseOrganizationEntityStorage(\n\t\t\t\tengineCore,\n\t\t\t\tcontext,\n\t\t\t\tcreateConfig.options?.organizationEntityStorageType\n\t\t\t);\n\t\t\t// Removing an identity removes its pending requests, and an identity import completes them.\n\t\t\tinitialiseOrganizationRequestEntityStorage(\n\t\t\t\tengineCore,\n\t\t\t\tcontext,\n\t\t\t\tcreateConfig.options?.organizationRequestEntityStorageType\n\t\t\t);\n\t\t\t// The accounts are looked up to check one exists before its data is changed.\n\t\t\tinitialiseAuthenticationUserEntityStorage(\n\t\t\t\tengineCore,\n\t\t\t\tcontext,\n\t\t\t\tcreateConfig.options?.userEntityStorageType\n\t\t\t);\n\t\t\treturn new EntityStorageAuthenticationAccountAdminService(\n\t\t\t\tEngineTypeHelper.mergeConfig<(typeof instanceConfig)[\"options\"]>(\n\t\t\t\t\t{\n\t\t\t\t\t\tauthorizationComponentType:\n\t\t\t\t\t\t\tengineCore.getRegisteredInstanceType(\"authorizationComponent\"),\n\t\t\t\t\t\tidentityComponentType: engineCore.getRegisteredInstanceType(\"identityComponent\"),\n\t\t\t\t\t\tauthenticationRateServiceType: engineCore.getRegisteredInstanceType(\n\t\t\t\t\t\t\t\"authenticationRateComponent\"\n\t\t\t\t\t\t)\n\t\t\t\t\t},\n\t\t\t\t\tcreateConfig.options\n\t\t\t\t)\n\t\t\t);\n\t\t};\n\t\tinstanceTypeName = \"entity-storage-authentication-account-admin-service\";\n\t} else if (instanceConfig.type === AuthenticationAccountAdminComponentType.RestClient) {\n\t\tcreateComponent = (createConfig: typeof instanceConfig) =>\n\t\t\tnew EntityStorageAuthenticationAccountAdminRestClient(\n\t\t\t\tEngineTypeHelper.mergeConfig<(typeof instanceConfig)[\"options\"]>(createConfig.options)\n\t\t\t);\n\t\tinstanceTypeName = \"entity-storage-authentication-account-admin-rest-client\";\n\t}\n\n\treturn {\n\t\tcreateComponent: createComponent as (createConfig: typeof instanceConfig) => IComponent,\n\t\tinstanceTypeName,\n\t\tfactory: ComponentFactory\n\t};\n}\n"]}

package/dist/es/components/authenticationAdmin.js

@@ -1,9 +1,10 @@
 // Copyright 2024 IOTA Stiftung.
+// Copyright 2026 3Sixty Trade Ltd.
 // SPDX-License-Identifier: Apache-2.0.
-import { EntityStorageAuthenticationAdminService, initSchema as initSchemaAuthEntityStorage } from "@3sixty/api-auth-entity-storage-service";
-import { ContextIdHelper, ContextIdKeys } from "@3sixty/context";
+import { EntityStorageAuthenticationAdminService } from "@3sixty/api-auth-entity-storage-service";
 import { ComponentFactory } from "@3sixty/core";
-import { EngineTypeHelper, initialiseEntityStorageConnector } from "@3sixty/engine-types";
+import { EngineTypeHelper } from "@3sixty/engine-types";
+import { initialiseAuthenticationPasswordResetEntityStorage, initialiseAuthenticationUserEntityStorage } from "./authentication.js";
 import { AuthenticationAdminComponentType } from "../models/types/authenticationAdminComponentType.js";
 /**
  * Initialise the authentication admin.
@@ -17,13 +18,14 @@ export function initialiseAuthenticationAdminComponent(engineCore, context, inst
     let instanceTypeName;
     if (instanceConfig.type === AuthenticationAdminComponentType.EntityStorage) {
         createComponent = (createConfig) => {
-            initSchemaAuthEntityStorage();
-            initialiseEntityStorageConnector(engineCore, context, createConfig.options?.userEntityStorageType, "AuthenticationUser", ContextIdHelper.pickKeysFromAvailable(engineCore.getContextIdKeys(), [
-                ContextIdKeys.Node,
-                ContextIdKeys.Tenant
-            ]));
+            initialiseAuthenticationUserEntityStorage(engineCore, context, createConfig.options?.userEntityStorageType);
+            // The password reset tokens of a removed account are removed with it.
+            initialiseAuthenticationPasswordResetEntityStorage(engineCore, context, createConfig.options?.passwordResetEntityStorageType);
             return new EntityStorageAuthenticationAdminService(EngineTypeHelper.mergeConfig({
-                authenticationAuditServiceType: engineCore.getRegisteredInstanceTypeOptional("authenticationAuditComponent")
+                authenticationAuditServiceType: engineCore.getRegisteredInstanceType("authenticationAuditComponent"),
+                authenticationAccountAdminComponentType: engineCore.getRegisteredInstanceType("authenticationAccountAdminComponent"),
+                organizationRequestAdminComponentType: engineCore.getRegisteredInstanceType("organizationRequestAdminComponent"),
+                authorizationComponentType: engineCore.getRegisteredInstanceType("authorizationComponent")
             }, createConfig.options));
         };
         instanceTypeName = "entity-storage-authentication-admin-service";

package/dist/es/components/authenticationAdmin.js.map

@@ -1 +1 @@
-{"version":3,"file":"authenticationAdmin.js","sources":["../../../src/components/authenticationAdmin.ts"],"names":[],"mappings":"AAAA,gCAAgC;AAChC,uCAAuC;AACvC,OAAO,EACN,uCAAuC,EACvC,UAAU,IAAI,2BAA2B,EAEzC,MAAM,yCAAyC,CAAC;AACjD,OAAO,EAAE,eAAe,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAC;AACjE,OAAO,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAC;AAMhD,OAAO,EAAE,gBAAgB,EAAE,gCAAgC,EAAE,MAAM,sBAAsB,CAAC;AAI1F,OAAO,EAAE,gCAAgC,EAAE,MAAM,qDAAqD,CAAC;AAEvG;;;;;;GAMG;AACH,MAAM,UAAU,sCAAsC,CACrD,UAA4C,EAC5C,OAAgD,EAChD,cAAkD;IAElD,IAAI,eAAe,CAAC;IACpB,IAAI,gBAAgB,CAAC;IAErB,IAAI,cAAc,CAAC,IAAI,KAAK,gCAAgC,CAAC,aAAa,EAAE,CAAC;QAC5E,eAAe,GAAG,CAAC,YAAmC,EAAE,EAAE;YACzD,2BAA2B,EAAE,CAAC;YAC9B,gCAAgC,CAC/B,UAAU,EACV,OAAO,EACP,YAAY,CAAC,OAAO,EAAE,qBAAqB,EAC3C,oBAAoB,EACpB,eAAe,CAAC,qBAAqB,CAAC,UAAU,CAAC,gBAAgB,EAAE,EAAE;gBACpE,aAAa,CAAC,IAAI;gBAClB,aAAa,CAAC,MAAM;aACpB,CAAC,CACF,CAAC;YACF,OAAO,IAAI,uCAAuC,CACjD,gBAAgB,CAAC,WAAW,CAC3B;gBACC,8BAA8B,EAAE,UAAU,CAAC,iCAAiC,CAC3E,8BAA8B,CAC9B;aACD,EACD,YAAY,CAAC,OAAO,CACpB,CACD,CAAC;QACH,CAAC,CAAC;QACF,gBAAgB,GAAG,6CAA6C,CAAC;IAClE,CAAC;IAED,OAAO;QACN,eAAe;QACf,gBAAgB;QAChB,OAAO,EAAE,gBAAgB;KACzB,CAAC;AACH,CAAC","sourcesContent":["// Copyright 2024 IOTA Stiftung.\n// SPDX-License-Identifier: Apache-2.0.\nimport {\n\tEntityStorageAuthenticationAdminService,\n\tinitSchema as initSchemaAuthEntityStorage,\n\ttype AuthenticationUser\n} from \"@3sixty/api-auth-entity-storage-service\";\nimport { ContextIdHelper, ContextIdKeys } from \"@3sixty/context\";\nimport { ComponentFactory } from \"@3sixty/core\";\nimport type {\n\tEngineTypeInitialiserReturn,\n\tIEngineCore,\n\tIEngineCoreContext\n} from \"@3sixty/engine-models\";\nimport { EngineTypeHelper, initialiseEntityStorageConnector } from \"@3sixty/engine-types\";\n\nimport type { AuthenticationAdminComponentConfig } from \"../models/config/authenticationAdminComponentConfig.js\";\nimport type { IEngineServerConfig } from \"../models/IEngineServerConfig.js\";\nimport { AuthenticationAdminComponentType } from \"../models/types/authenticationAdminComponentType.js\";\n\n/**\n * Initialise the authentication admin.\n * @param engineCore The engine core.\n * @param context The context for the engine.\n * @param instanceConfig The instance config.\n * @returns The instance created and the factory for it.\n */\nexport function initialiseAuthenticationAdminComponent(\n\tengineCore: IEngineCore<IEngineServerConfig>,\n\tcontext: IEngineCoreContext<IEngineServerConfig>,\n\tinstanceConfig: AuthenticationAdminComponentConfig\n): EngineTypeInitialiserReturn<AuthenticationAdminComponentConfig, typeof ComponentFactory> {\n\tlet createComponent;\n\tlet instanceTypeName;\n\n\tif (instanceConfig.type === AuthenticationAdminComponentType.EntityStorage) {\n\t\tcreateComponent = (createConfig: typeof instanceConfig) => {\n\t\t\tinitSchemaAuthEntityStorage();\n\t\t\tinitialiseEntityStorageConnector(\n\t\t\t\tengineCore,\n\t\t\t\tcontext,\n\t\t\t\tcreateConfig.options?.userEntityStorageType,\n\t\t\t\t\"AuthenticationUser\",\n\t\t\t\tContextIdHelper.pickKeysFromAvailable(engineCore.getContextIdKeys(), [\n\t\t\t\t\tContextIdKeys.Node,\n\t\t\t\t\tContextIdKeys.Tenant\n\t\t\t\t])\n\t\t\t);\n\t\t\treturn new EntityStorageAuthenticationAdminService(\n\t\t\t\tEngineTypeHelper.mergeConfig<(typeof instanceConfig)[\"options\"]>(\n\t\t\t\t\t{\n\t\t\t\t\t\tauthenticationAuditServiceType: engineCore.getRegisteredInstanceTypeOptional(\n\t\t\t\t\t\t\t\"authenticationAuditComponent\"\n\t\t\t\t\t\t)\n\t\t\t\t\t},\n\t\t\t\t\tcreateConfig.options\n\t\t\t\t)\n\t\t\t);\n\t\t};\n\t\tinstanceTypeName = \"entity-storage-authentication-admin-service\";\n\t}\n\n\treturn {\n\t\tcreateComponent,\n\t\tinstanceTypeName,\n\t\tfactory: ComponentFactory\n\t};\n}\n"]}
+{"version":3,"file":"authenticationAdmin.js","sources":["../../../src/components/authenticationAdmin.ts"],"names":[],"mappings":"AAAA,gCAAgC;AAChC,mCAAmC;AACnC,uCAAuC;AACvC,OAAO,EAAE,uCAAuC,EAAE,MAAM,yCAAyC,CAAC;AAClG,OAAO,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAC;AAMhD,OAAO,EAAE,gBAAgB,EAAE,MAAM,sBAAsB,CAAC;AAExD,OAAO,EACN,kDAAkD,EAClD,yCAAyC,EACzC,MAAM,qBAAqB,CAAC;AAG7B,OAAO,EAAE,gCAAgC,EAAE,MAAM,qDAAqD,CAAC;AAEvG;;;;;;GAMG;AACH,MAAM,UAAU,sCAAsC,CACrD,UAA4C,EAC5C,OAAgD,EAChD,cAAkD;IAElD,IAAI,eAAe,CAAC;IACpB,IAAI,gBAAgB,CAAC;IAErB,IAAI,cAAc,CAAC,IAAI,KAAK,gCAAgC,CAAC,aAAa,EAAE,CAAC;QAC5E,eAAe,GAAG,CAAC,YAAmC,EAAE,EAAE;YACzD,yCAAyC,CACxC,UAAU,EACV,OAAO,EACP,YAAY,CAAC,OAAO,EAAE,qBAAqB,CAC3C,CAAC;YACF,sEAAsE;YACtE,kDAAkD,CACjD,UAAU,EACV,OAAO,EACP,YAAY,CAAC,OAAO,EAAE,8BAA8B,CACpD,CAAC;YACF,OAAO,IAAI,uCAAuC,CACjD,gBAAgB,CAAC,WAAW,CAC3B;gBACC,8BAA8B,EAAE,UAAU,CAAC,yBAAyB,CACnE,8BAA8B,CAC9B;gBACD,uCAAuC,EAAE,UAAU,CAAC,yBAAyB,CAC5E,qCAAqC,CACrC;gBACD,qCAAqC,EAAE,UAAU,CAAC,yBAAyB,CAC1E,mCAAmC,CACnC;gBACD,0BAA0B,EACzB,UAAU,CAAC,yBAAyB,CAAC,wBAAwB,CAAC;aAC/D,EACD,YAAY,CAAC,OAAO,CACpB,CACD,CAAC;QACH,CAAC,CAAC;QACF,gBAAgB,GAAG,6CAA6C,CAAC;IAClE,CAAC;IAED,OAAO;QACN,eAAe;QACf,gBAAgB;QAChB,OAAO,EAAE,gBAAgB;KACzB,CAAC;AACH,CAAC","sourcesContent":["// Copyright 2024 IOTA Stiftung.\n// Copyright 2026 3Sixty Trade Ltd.\n// SPDX-License-Identifier: Apache-2.0.\nimport { EntityStorageAuthenticationAdminService } from \"@3sixty/api-auth-entity-storage-service\";\nimport { ComponentFactory } from \"@3sixty/core\";\nimport type {\n\tEngineTypeInitialiserReturn,\n\tIEngineCore,\n\tIEngineCoreContext\n} from \"@3sixty/engine-models\";\nimport { EngineTypeHelper } from \"@3sixty/engine-types\";\n\nimport {\n\tinitialiseAuthenticationPasswordResetEntityStorage,\n\tinitialiseAuthenticationUserEntityStorage\n} from \"./authentication.js\";\nimport type { AuthenticationAdminComponentConfig } from \"../models/config/authenticationAdminComponentConfig.js\";\nimport type { IEngineServerConfig } from \"../models/IEngineServerConfig.js\";\nimport { AuthenticationAdminComponentType } from \"../models/types/authenticationAdminComponentType.js\";\n\n/**\n * Initialise the authentication admin.\n * @param engineCore The engine core.\n * @param context The context for the engine.\n * @param instanceConfig The instance config.\n * @returns The instance created and the factory for it.\n */\nexport function initialiseAuthenticationAdminComponent(\n\tengineCore: IEngineCore<IEngineServerConfig>,\n\tcontext: IEngineCoreContext<IEngineServerConfig>,\n\tinstanceConfig: AuthenticationAdminComponentConfig\n): EngineTypeInitialiserReturn<AuthenticationAdminComponentConfig, typeof ComponentFactory> {\n\tlet createComponent;\n\tlet instanceTypeName;\n\n\tif (instanceConfig.type === AuthenticationAdminComponentType.EntityStorage) {\n\t\tcreateComponent = (createConfig: typeof instanceConfig) => {\n\t\t\tinitialiseAuthenticationUserEntityStorage(\n\t\t\t\tengineCore,\n\t\t\t\tcontext,\n\t\t\t\tcreateConfig.options?.userEntityStorageType\n\t\t\t);\n\t\t\t// The password reset tokens of a removed account are removed with it.\n\t\t\tinitialiseAuthenticationPasswordResetEntityStorage(\n\t\t\t\tengineCore,\n\t\t\t\tcontext,\n\t\t\t\tcreateConfig.options?.passwordResetEntityStorageType\n\t\t\t);\n\t\t\treturn new EntityStorageAuthenticationAdminService(\n\t\t\t\tEngineTypeHelper.mergeConfig<(typeof instanceConfig)[\"options\"]>(\n\t\t\t\t\t{\n\t\t\t\t\t\tauthenticationAuditServiceType: engineCore.getRegisteredInstanceType(\n\t\t\t\t\t\t\t\"authenticationAuditComponent\"\n\t\t\t\t\t\t),\n\t\t\t\t\t\tauthenticationAccountAdminComponentType: engineCore.getRegisteredInstanceType(\n\t\t\t\t\t\t\t\"authenticationAccountAdminComponent\"\n\t\t\t\t\t\t),\n\t\t\t\t\t\torganizationRequestAdminComponentType: engineCore.getRegisteredInstanceType(\n\t\t\t\t\t\t\t\"organizationRequestAdminComponent\"\n\t\t\t\t\t\t),\n\t\t\t\t\t\tauthorizationComponentType:\n\t\t\t\t\t\t\tengineCore.getRegisteredInstanceType(\"authorizationComponent\")\n\t\t\t\t\t},\n\t\t\t\t\tcreateConfig.options\n\t\t\t\t)\n\t\t\t);\n\t\t};\n\t\tinstanceTypeName = \"entity-storage-authentication-admin-service\";\n\t}\n\n\treturn {\n\t\tcreateComponent,\n\t\tinstanceTypeName,\n\t\tfactory: ComponentFactory\n\t};\n}\n"]}

package/dist/es/components/authenticationProvider.js

@@ -0,0 +1,41 @@
+// Copyright 2026 3Sixty Trade Ltd.
+// SPDX-License-Identifier: Apache-2.0.
+import { EntityStorageAuthenticationProviderConnector } from "@3sixty/api-auth-connector-entity-storage";
+import { AuthenticationProviderFactory } from "@3sixty/api-auth-models";
+import { GoogleOAuthProviderConnector } from "@3sixty/api-auth-oauth-connector-google";
+import { MicrosoftOAuthProviderConnector } from "@3sixty/api-auth-oauth-connector-microsoft";
+import { EngineTypeHelper } from "@3sixty/engine-types";
+import { initialiseAuthenticationUserEntityStorage } from "./authentication.js";
+import { AuthenticationProviderType } from "../models/types/authenticationProviderType.js";
+/**
+ * Initialise an authentication provider, registered under its authentication provider id.
+ * @param engineCore The engine core.
+ * @param context The context for the engine.
+ * @param instanceConfig The instance config.
+ * @returns The instance created and the factory for it.
+ */
+export function initialiseAuthenticationProvider(engineCore, context, instanceConfig) {
+    let createComponent;
+    let instanceTypeName;
+    if (instanceConfig.type === AuthenticationProviderType.EntityStorage) {
+        createComponent = (createConfig) => {
+            initialiseAuthenticationUserEntityStorage(engineCore, context, createConfig.options?.userEntityStorageType);
+            return new EntityStorageAuthenticationProviderConnector(EngineTypeHelper.mergeConfig(createConfig.options));
+        };
+        instanceTypeName = EntityStorageAuthenticationProviderConnector.NAMESPACE;
+    }
+    else if (instanceConfig.type === AuthenticationProviderType.Google) {
+        createComponent = (createConfig) => new GoogleOAuthProviderConnector(createConfig.options);
+        instanceTypeName = GoogleOAuthProviderConnector.NAMESPACE;
+    }
+    else if (instanceConfig.type === AuthenticationProviderType.Microsoft) {
+        createComponent = (createConfig) => new MicrosoftOAuthProviderConnector(createConfig.options);
+        instanceTypeName = MicrosoftOAuthProviderConnector.NAMESPACE;
+    }
+    return {
+        createComponent: createComponent,
+        instanceTypeName,
+        factory: AuthenticationProviderFactory
+    };
+}
+//# sourceMappingURL=authenticationProvider.js.map

package/dist/es/components/authenticationProvider.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"authenticationProvider.js","sources":["../../../src/components/authenticationProvider.ts"],"names":[],"mappings":"AAAA,mCAAmC;AACnC,uCAAuC;AACvC,OAAO,EAAE,4CAA4C,EAAE,MAAM,2CAA2C,CAAC;AACzG,OAAO,EAAE,6BAA6B,EAAE,MAAM,yBAAyB,CAAC;AACxE,OAAO,EAAE,4BAA4B,EAAE,MAAM,yCAAyC,CAAC;AACvF,OAAO,EAAE,+BAA+B,EAAE,MAAM,4CAA4C,CAAC;AAO7F,OAAO,EAAE,gBAAgB,EAAE,MAAM,sBAAsB,CAAC;AACxD,OAAO,EAAE,yCAAyC,EAAE,MAAM,qBAAqB,CAAC;AAGhF,OAAO,EAAE,0BAA0B,EAAE,MAAM,+CAA+C,CAAC;AAE3F;;;;;;GAMG;AACH,MAAM,UAAU,gCAAgC,CAC/C,UAA4C,EAC5C,OAAgD,EAChD,cAA4C;IAE5C,IAAI,eAAe,CAAC;IACpB,IAAI,gBAAgB,CAAC;IAErB,IAAI,cAAc,CAAC,IAAI,KAAK,0BAA0B,CAAC,aAAa,EAAE,CAAC;QACtE,eAAe,GAAG,CAAC,YAAmC,EAAE,EAAE;YACzD,yCAAyC,CACxC,UAAU,EACV,OAAO,EACP,YAAY,CAAC,OAAO,EAAE,qBAAqB,CAC3C,CAAC;YACF,OAAO,IAAI,4CAA4C,CACtD,gBAAgB,CAAC,WAAW,CAAqC,YAAY,CAAC,OAAO,CAAC,CACtF,CAAC;QACH,CAAC,CAAC;QACF,gBAAgB,GAAG,4CAA4C,CAAC,SAAS,CAAC;IAC3E,CAAC;SAAM,IAAI,cAAc,CAAC,IAAI,KAAK,0BAA0B,CAAC,MAAM,EAAE,CAAC;QACtE,eAAe,GAAG,CAAC,YAAmC,EAAE,EAAE,CACzD,IAAI,4BAA4B,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC;QACxD,gBAAgB,GAAG,4BAA4B,CAAC,SAAS,CAAC;IAC3D,CAAC;SAAM,IAAI,cAAc,CAAC,IAAI,KAAK,0BAA0B,CAAC,SAAS,EAAE,CAAC;QACzE,eAAe,GAAG,CAAC,YAAmC,EAAE,EAAE,CACzD,IAAI,+BAA+B,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC;QAC3D,gBAAgB,GAAG,+BAA+B,CAAC,SAAS,CAAC;IAC9D,CAAC;IAED,OAAO;QACN,eAAe,EAAE,eAAsE;QACvF,gBAAgB;QAChB,OAAO,EAAE,6BAA6B;KACtC,CAAC;AACH,CAAC","sourcesContent":["// Copyright 2026 3Sixty Trade Ltd.\n// SPDX-License-Identifier: Apache-2.0.\nimport { EntityStorageAuthenticationProviderConnector } from \"@3sixty/api-auth-connector-entity-storage\";\nimport { AuthenticationProviderFactory } from \"@3sixty/api-auth-models\";\nimport { GoogleOAuthProviderConnector } from \"@3sixty/api-auth-oauth-connector-google\";\nimport { MicrosoftOAuthProviderConnector } from \"@3sixty/api-auth-oauth-connector-microsoft\";\nimport type { IComponent } from \"@3sixty/core\";\nimport type {\n\tEngineTypeInitialiserReturn,\n\tIEngineCore,\n\tIEngineCoreContext\n} from \"@3sixty/engine-models\";\nimport { EngineTypeHelper } from \"@3sixty/engine-types\";\nimport { initialiseAuthenticationUserEntityStorage } from \"./authentication.js\";\nimport type { AuthenticationProviderConfig } from \"../models/config/authenticationProviderConfig.js\";\nimport type { IEngineServerConfig } from \"../models/IEngineServerConfig.js\";\nimport { AuthenticationProviderType } from \"../models/types/authenticationProviderType.js\";\n\n/**\n * Initialise an authentication provider, registered under its authentication provider id.\n * @param engineCore The engine core.\n * @param context The context for the engine.\n * @param instanceConfig The instance config.\n * @returns The instance created and the factory for it.\n */\nexport function initialiseAuthenticationProvider(\n\tengineCore: IEngineCore<IEngineServerConfig>,\n\tcontext: IEngineCoreContext<IEngineServerConfig>,\n\tinstanceConfig: AuthenticationProviderConfig\n): EngineTypeInitialiserReturn<AuthenticationProviderConfig, typeof AuthenticationProviderFactory> {\n\tlet createComponent;\n\tlet instanceTypeName;\n\n\tif (instanceConfig.type === AuthenticationProviderType.EntityStorage) {\n\t\tcreateComponent = (createConfig: typeof instanceConfig) => {\n\t\t\tinitialiseAuthenticationUserEntityStorage(\n\t\t\t\tengineCore,\n\t\t\t\tcontext,\n\t\t\t\tcreateConfig.options?.userEntityStorageType\n\t\t\t);\n\t\t\treturn new EntityStorageAuthenticationProviderConnector(\n\t\t\t\tEngineTypeHelper.mergeConfig<(typeof instanceConfig)[\"options\"]>(createConfig.options)\n\t\t\t);\n\t\t};\n\t\tinstanceTypeName = EntityStorageAuthenticationProviderConnector.NAMESPACE;\n\t} else if (instanceConfig.type === AuthenticationProviderType.Google) {\n\t\tcreateComponent = (createConfig: typeof instanceConfig) =>\n\t\t\tnew GoogleOAuthProviderConnector(createConfig.options);\n\t\tinstanceTypeName = GoogleOAuthProviderConnector.NAMESPACE;\n\t} else if (instanceConfig.type === AuthenticationProviderType.Microsoft) {\n\t\tcreateComponent = (createConfig: typeof instanceConfig) =>\n\t\t\tnew MicrosoftOAuthProviderConnector(createConfig.options);\n\t\tinstanceTypeName = MicrosoftOAuthProviderConnector.NAMESPACE;\n\t}\n\n\treturn {\n\t\tcreateComponent: createComponent as (createConfig: typeof instanceConfig) => IComponent,\n\t\tinstanceTypeName,\n\t\tfactory: AuthenticationProviderFactory\n\t};\n}\n"]}

package/dist/es/components/oauth.js

@@ -0,0 +1,32 @@
+// Copyright 2026 3Sixty Trade Ltd.
+// SPDX-License-Identifier: Apache-2.0.
+import { OAuthService } from "@3sixty/api-auth-oauth-service";
+import { ComponentFactory } from "@3sixty/core";
+import { EngineTypeHelper } from "@3sixty/engine-types";
+import { OAuthComponentType } from "../models/types/oauthComponentType.js";
+/**
+ * Initialise the OAuth sign in component.
+ * @param engineCore The engine core.
+ * @param context The context for the engine.
+ * @param instanceConfig The instance config.
+ * @returns The instance created and the factory for it.
+ */
+export function initialiseOAuthComponent(engineCore, context, instanceConfig) {
+    let createComponent;
+    let instanceTypeName;
+    if (instanceConfig.type === OAuthComponentType.Service) {
+        createComponent = (createConfig) => new OAuthService(EngineTypeHelper.mergeConfig({
+            authenticationComponentType: engineCore.getRegisteredInstanceType("authenticationComponent"),
+            loggingComponentType: engineCore.getRegisteredSilencedType("logging", "OAuthService"),
+            vaultConnectorType: engineCore.getRegisteredInstanceType("vaultConnector"),
+            config: createConfig.options.config
+        }, createConfig.options));
+        instanceTypeName = "o-auth-service";
+    }
+    return {
+        createComponent,
+        instanceTypeName,
+        factory: ComponentFactory
+    };
+}
+//# sourceMappingURL=oauth.js.map

package/dist/es/components/oauth.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"oauth.js","sources":["../../../src/components/oauth.ts"],"names":[],"mappings":"AAAA,mCAAmC;AACnC,uCAAuC;AACvC,OAAO,EAAE,YAAY,EAAE,MAAM,gCAAgC,CAAC;AAC9D,OAAO,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAC;AAMhD,OAAO,EAAE,gBAAgB,EAAE,MAAM,sBAAsB,CAAC;AAIxD,OAAO,EAAE,kBAAkB,EAAE,MAAM,uCAAuC,CAAC;AAE3E;;;;;;GAMG;AACH,MAAM,UAAU,wBAAwB,CACvC,UAA4C,EAC5C,OAAgD,EAChD,cAAoC;IAEpC,IAAI,eAAe,CAAC;IACpB,IAAI,gBAAgB,CAAC;IAErB,IAAI,cAAc,CAAC,IAAI,KAAK,kBAAkB,CAAC,OAAO,EAAE,CAAC;QACxD,eAAe,GAAG,CAAC,YAAmC,EAAE,EAAE,CACzD,IAAI,YAAY,CACf,gBAAgB,CAAC,WAAW,CAC3B;YACC,2BAA2B,EAC1B,UAAU,CAAC,yBAAyB,CAAC,yBAAyB,CAAC;YAChE,oBAAoB,EAAE,UAAU,CAAC,yBAAyB,CACzD,SAAS,EACT,cAAc,CACd;YACD,kBAAkB,EAAE,UAAU,CAAC,yBAAyB,CAAC,gBAAgB,CAAC;YAC1E,MAAM,EAAE,YAAY,CAAC,OAAO,CAAC,MAAM;SACnC,EACD,YAAY,CAAC,OAAO,CACpB,CACD,CAAC;QACH,gBAAgB,GAAG,gBAAgB,CAAC;IACrC,CAAC;IAED,OAAO;QACN,eAAe;QACf,gBAAgB;QAChB,OAAO,EAAE,gBAAgB;KACzB,CAAC;AACH,CAAC","sourcesContent":["// Copyright 2026 3Sixty Trade Ltd.\n// SPDX-License-Identifier: Apache-2.0.\nimport { OAuthService } from \"@3sixty/api-auth-oauth-service\";\nimport { ComponentFactory } from \"@3sixty/core\";\nimport type {\n\tEngineTypeInitialiserReturn,\n\tIEngineCore,\n\tIEngineCoreContext\n} from \"@3sixty/engine-models\";\nimport { EngineTypeHelper } from \"@3sixty/engine-types\";\n\nimport type { OAuthComponentConfig } from \"../models/config/oauthComponentConfig.js\";\nimport type { IEngineServerConfig } from \"../models/IEngineServerConfig.js\";\nimport { OAuthComponentType } from \"../models/types/oauthComponentType.js\";\n\n/**\n * Initialise the OAuth sign in component.\n * @param engineCore The engine core.\n * @param context The context for the engine.\n * @param instanceConfig The instance config.\n * @returns The instance created and the factory for it.\n */\nexport function initialiseOAuthComponent(\n\tengineCore: IEngineCore<IEngineServerConfig>,\n\tcontext: IEngineCoreContext<IEngineServerConfig>,\n\tinstanceConfig: OAuthComponentConfig\n): EngineTypeInitialiserReturn<OAuthComponentConfig, typeof ComponentFactory> {\n\tlet createComponent;\n\tlet instanceTypeName;\n\n\tif (instanceConfig.type === OAuthComponentType.Service) {\n\t\tcreateComponent = (createConfig: typeof instanceConfig) =>\n\t\t\tnew OAuthService(\n\t\t\t\tEngineTypeHelper.mergeConfig<(typeof instanceConfig)[\"options\"]>(\n\t\t\t\t\t{\n\t\t\t\t\t\tauthenticationComponentType:\n\t\t\t\t\t\t\tengineCore.getRegisteredInstanceType(\"authenticationComponent\"),\n\t\t\t\t\t\tloggingComponentType: engineCore.getRegisteredSilencedType(\n\t\t\t\t\t\t\t\"logging\",\n\t\t\t\t\t\t\t\"OAuthService\"\n\t\t\t\t\t\t),\n\t\t\t\t\t\tvaultConnectorType: engineCore.getRegisteredInstanceType(\"vaultConnector\"),\n\t\t\t\t\t\tconfig: createConfig.options.config\n\t\t\t\t\t},\n\t\t\t\t\tcreateConfig.options\n\t\t\t\t)\n\t\t\t);\n\t\tinstanceTypeName = \"o-auth-service\";\n\t}\n\n\treturn {\n\t\tcreateComponent,\n\t\tinstanceTypeName,\n\t\tfactory: ComponentFactory\n\t};\n}\n"]}

package/dist/es/components/organization.js

@@ -0,0 +1,43 @@
+// Copyright 2026 3Sixty Trade Ltd.
+// SPDX-License-Identifier: Apache-2.0.
+import { OrganizationRestClient } from "@3sixty/api-auth-account-rest-client";
+import { EntityStorageOrganizationService } from "@3sixty/api-auth-account-service";
+import { ComponentFactory } from "@3sixty/core";
+import { EngineTypeHelper } from "@3sixty/engine-types";
+import { initialiseAccountDataEntityStorage, initialiseOrganizationEntityStorage, initialiseOrganizationRequestEntityStorage } from "./authenticationAccount.js";
+import { OrganizationComponentType } from "../models/types/organizationComponentType.js";
+/**
+ * Initialise the organization component.
+ * @param engineCore The engine core.
+ * @param context The context for the engine.
+ * @param instanceConfig The instance config.
+ * @returns The instance created and the factory for it.
+ */
+export function initialiseOrganizationComponent(engineCore, context, instanceConfig) {
+    let createComponent;
+    let instanceTypeName;
+    if (instanceConfig.type === OrganizationComponentType.EntityStorage) {
+        createComponent = (createConfig) => {
+            initialiseOrganizationEntityStorage(engineCore, context, createConfig.options?.organizationEntityStorageType);
+            initialiseAccountDataEntityStorage(engineCore, context, createConfig.options?.accountDataEntityStorageType);
+            // The pending requests to join an organization are rejected when it is removed.
+            initialiseOrganizationRequestEntityStorage(engineCore, context, createConfig.options?.organizationRequestEntityStorageType);
+            return new EntityStorageOrganizationService(EngineTypeHelper.mergeConfig({
+                identityComponentType: engineCore.getRegisteredInstanceType("identityComponent"),
+                authorizationComponentType: engineCore.getRegisteredInstanceType("authorizationComponent"),
+                authenticationRateServiceType: engineCore.getRegisteredInstanceType("authenticationRateComponent")
+            }, createConfig.options));
+        };
+        instanceTypeName = "entity-storage-organization-service";
+    }
+    else if (instanceConfig.type === OrganizationComponentType.RestClient) {
+        createComponent = (createConfig) => new OrganizationRestClient(EngineTypeHelper.mergeConfig(createConfig.options));
+        instanceTypeName = "organization-rest-client";
+    }
+    return {
+        createComponent: createComponent,
+        instanceTypeName,
+        factory: ComponentFactory
+    };
+}
+//# sourceMappingURL=organization.js.map

package/dist/es/components/organization.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"organization.js","sources":["../../../src/components/organization.ts"],"names":[],"mappings":"AAAA,mCAAmC;AACnC,uCAAuC;AACvC,OAAO,EAAE,sBAAsB,EAAE,MAAM,sCAAsC,CAAC;AAC9E,OAAO,EAAE,gCAAgC,EAAE,MAAM,kCAAkC,CAAC;AACpF,OAAO,EAAE,gBAAgB,EAAmB,MAAM,cAAc,CAAC;AAMjE,OAAO,EAAE,gBAAgB,EAAE,MAAM,sBAAsB,CAAC;AAExD,OAAO,EACN,kCAAkC,EAClC,mCAAmC,EACnC,0CAA0C,EAC1C,MAAM,4BAA4B,CAAC;AAGpC,OAAO,EAAE,yBAAyB,EAAE,MAAM,8CAA8C,CAAC;AAEzF;;;;;;GAMG;AACH,MAAM,UAAU,+BAA+B,CAC9C,UAA4C,EAC5C,OAAgD,EAChD,cAA2C;IAE3C,IAAI,eAAe,CAAC;IACpB,IAAI,gBAAgB,CAAC;IAErB,IAAI,cAAc,CAAC,IAAI,KAAK,yBAAyB,CAAC,aAAa,EAAE,CAAC;QACrE,eAAe,GAAG,CAAC,YAAmC,EAAE,EAAE;YACzD,mCAAmC,CAClC,UAAU,EACV,OAAO,EACP,YAAY,CAAC,OAAO,EAAE,6BAA6B,CACnD,CAAC;YACF,kCAAkC,CACjC,UAAU,EACV,OAAO,EACP,YAAY,CAAC,OAAO,EAAE,4BAA4B,CAClD,CAAC;YACF,gFAAgF;YAChF,0CAA0C,CACzC,UAAU,EACV,OAAO,EACP,YAAY,CAAC,OAAO,EAAE,oCAAoC,CAC1D,CAAC;YACF,OAAO,IAAI,gCAAgC,CAC1C,gBAAgB,CAAC,WAAW,CAC3B;gBACC,qBAAqB,EAAE,UAAU,CAAC,yBAAyB,CAAC,mBAAmB,CAAC;gBAChF,0BAA0B,EACzB,UAAU,CAAC,yBAAyB,CAAC,wBAAwB,CAAC;gBAC/D,6BAA6B,EAAE,UAAU,CAAC,yBAAyB,CAClE,6BAA6B,CAC7B;aACD,EACD,YAAY,CAAC,OAAO,CACpB,CACD,CAAC;QACH,CAAC,CAAC;QACF,gBAAgB,GAAG,qCAAqC,CAAC;IAC1D,CAAC;SAAM,IAAI,cAAc,CAAC,IAAI,KAAK,yBAAyB,CAAC,UAAU,EAAE,CAAC;QACzE,eAAe,GAAG,CAAC,YAAmC,EAAE,EAAE,CACzD,IAAI,sBAAsB,CACzB,gBAAgB,CAAC,WAAW,CAAqC,YAAY,CAAC,OAAO,CAAC,CACtF,CAAC;QACH,gBAAgB,GAAG,0BAA0B,CAAC;IAC/C,CAAC;IAED,OAAO;QACN,eAAe,EAAE,eAAsE;QACvF,gBAAgB;QAChB,OAAO,EAAE,gBAAgB;KACzB,CAAC;AACH,CAAC","sourcesContent":["// Copyright 2026 3Sixty Trade Ltd.\n// SPDX-License-Identifier: Apache-2.0.\nimport { OrganizationRestClient } from \"@3sixty/api-auth-account-rest-client\";\nimport { EntityStorageOrganizationService } from \"@3sixty/api-auth-account-service\";\nimport { ComponentFactory, type IComponent } from \"@3sixty/core\";\nimport type {\n\tEngineTypeInitialiserReturn,\n\tIEngineCore,\n\tIEngineCoreContext\n} from \"@3sixty/engine-models\";\nimport { EngineTypeHelper } from \"@3sixty/engine-types\";\n\nimport {\n\tinitialiseAccountDataEntityStorage,\n\tinitialiseOrganizationEntityStorage,\n\tinitialiseOrganizationRequestEntityStorage\n} from \"./authenticationAccount.js\";\nimport type { OrganizationComponentConfig } from \"../models/config/organizationComponentConfig.js\";\nimport type { IEngineServerConfig } from \"../models/IEngineServerConfig.js\";\nimport { OrganizationComponentType } from \"../models/types/organizationComponentType.js\";\n\n/**\n * Initialise the organization component.\n * @param engineCore The engine core.\n * @param context The context for the engine.\n * @param instanceConfig The instance config.\n * @returns The instance created and the factory for it.\n */\nexport function initialiseOrganizationComponent(\n\tengineCore: IEngineCore<IEngineServerConfig>,\n\tcontext: IEngineCoreContext<IEngineServerConfig>,\n\tinstanceConfig: OrganizationComponentConfig\n): EngineTypeInitialiserReturn<OrganizationComponentConfig, typeof ComponentFactory> {\n\tlet createComponent;\n\tlet instanceTypeName;\n\n\tif (instanceConfig.type === OrganizationComponentType.EntityStorage) {\n\t\tcreateComponent = (createConfig: typeof instanceConfig) => {\n\t\t\tinitialiseOrganizationEntityStorage(\n\t\t\t\tengineCore,\n\t\t\t\tcontext,\n\t\t\t\tcreateConfig.options?.organizationEntityStorageType\n\t\t\t);\n\t\t\tinitialiseAccountDataEntityStorage(\n\t\t\t\tengineCore,\n\t\t\t\tcontext,\n\t\t\t\tcreateConfig.options?.accountDataEntityStorageType\n\t\t\t);\n\t\t\t// The pending requests to join an organization are rejected when it is removed.\n\t\t\tinitialiseOrganizationRequestEntityStorage(\n\t\t\t\tengineCore,\n\t\t\t\tcontext,\n\t\t\t\tcreateConfig.options?.organizationRequestEntityStorageType\n\t\t\t);\n\t\t\treturn new EntityStorageOrganizationService(\n\t\t\t\tEngineTypeHelper.mergeConfig<(typeof instanceConfig)[\"options\"]>(\n\t\t\t\t\t{\n\t\t\t\t\t\tidentityComponentType: engineCore.getRegisteredInstanceType(\"identityComponent\"),\n\t\t\t\t\t\tauthorizationComponentType:\n\t\t\t\t\t\t\tengineCore.getRegisteredInstanceType(\"authorizationComponent\"),\n\t\t\t\t\t\tauthenticationRateServiceType: engineCore.getRegisteredInstanceType(\n\t\t\t\t\t\t\t\"authenticationRateComponent\"\n\t\t\t\t\t\t)\n\t\t\t\t\t},\n\t\t\t\t\tcreateConfig.options\n\t\t\t\t)\n\t\t\t);\n\t\t};\n\t\tinstanceTypeName = \"entity-storage-organization-service\";\n\t} else if (instanceConfig.type === OrganizationComponentType.RestClient) {\n\t\tcreateComponent = (createConfig: typeof instanceConfig) =>\n\t\t\tnew OrganizationRestClient(\n\t\t\t\tEngineTypeHelper.mergeConfig<(typeof instanceConfig)[\"options\"]>(createConfig.options)\n\t\t\t);\n\t\tinstanceTypeName = \"organization-rest-client\";\n\t}\n\n\treturn {\n\t\tcreateComponent: createComponent as (createConfig: typeof instanceConfig) => IComponent,\n\t\tinstanceTypeName,\n\t\tfactory: ComponentFactory\n\t};\n}\n"]}

package/dist/es/components/organizationRequestAdmin.js

@@ -0,0 +1,41 @@
+// Copyright 2026 3Sixty Trade Ltd.
+// SPDX-License-Identifier: Apache-2.0.
+import { OrganizationRequestAdminRestClient } from "@3sixty/api-auth-account-rest-client";
+import { EntityStorageOrganizationRequestAdminService } from "@3sixty/api-auth-account-service";
+import { ComponentFactory } from "@3sixty/core";
+import { EngineTypeHelper } from "@3sixty/engine-types";
+import { initialiseAccountDataEntityStorage, initialiseOrganizationEntityStorage, initialiseOrganizationRequestEntityStorage } from "./authenticationAccount.js";
+import { OrganizationRequestAdminComponentType } from "../models/types/organizationRequestAdminComponentType.js";
+/**
+ * Initialise the organization request admin component.
+ * @param engineCore The engine core.
+ * @param context The context for the engine.
+ * @param instanceConfig The instance config.
+ * @returns The instance created and the factory for it.
+ */
+export function initialiseOrganizationRequestAdminComponent(engineCore, context, instanceConfig) {
+    let createComponent;
+    let instanceTypeName;
+    if (instanceConfig.type === OrganizationRequestAdminComponentType.EntityStorage) {
+        createComponent = (createConfig) => {
+            initialiseAccountDataEntityStorage(engineCore, context, createConfig.options?.accountDataEntityStorageType);
+            initialiseOrganizationRequestEntityStorage(engineCore, context, createConfig.options?.organizationRequestEntityStorageType);
+            initialiseOrganizationEntityStorage(engineCore, context, createConfig.options?.organizationEntityStorageType);
+            return new EntityStorageOrganizationRequestAdminService(EngineTypeHelper.mergeConfig({
+                identityComponentType: engineCore.getRegisteredInstanceType("identityComponent"),
+                authorizationComponentType: engineCore.getRegisteredInstanceType("authorizationComponent")
+            }, createConfig.options));
+        };
+        instanceTypeName = "entity-storage-organization-request-admin-service";
+    }
+    else if (instanceConfig.type === OrganizationRequestAdminComponentType.RestClient) {
+        createComponent = (createConfig) => new OrganizationRequestAdminRestClient(EngineTypeHelper.mergeConfig(createConfig.options));
+        instanceTypeName = "organization-request-admin-rest-client";
+    }
+    return {
+        createComponent: createComponent,
+        instanceTypeName,
+        factory: ComponentFactory
+    };
+}
+//# sourceMappingURL=organizationRequestAdmin.js.map

package/dist/es/components/organizationRequestAdmin.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"organizationRequestAdmin.js","sources":["../../../src/components/organizationRequestAdmin.ts"],"names":[],"mappings":"AAAA,mCAAmC;AACnC,uCAAuC;AACvC,OAAO,EAAE,kCAAkC,EAAE,MAAM,sCAAsC,CAAC;AAC1F,OAAO,EAAE,4CAA4C,EAAE,MAAM,kCAAkC,CAAC;AAChG,OAAO,EAAE,gBAAgB,EAAmB,MAAM,cAAc,CAAC;AAMjE,OAAO,EAAE,gBAAgB,EAAE,MAAM,sBAAsB,CAAC;AAExD,OAAO,EACN,kCAAkC,EAClC,mCAAmC,EACnC,0CAA0C,EAC1C,MAAM,4BAA4B,CAAC;AAGpC,OAAO,EAAE,qCAAqC,EAAE,MAAM,0DAA0D,CAAC;AAEjH;;;;;;GAMG;AACH,MAAM,UAAU,2CAA2C,CAC1D,UAA4C,EAC5C,OAAgD,EAChD,cAAuD;IAEvD,IAAI,eAAe,CAAC;IACpB,IAAI,gBAAgB,CAAC;IAErB,IAAI,cAAc,CAAC,IAAI,KAAK,qCAAqC,CAAC,aAAa,EAAE,CAAC;QACjF,eAAe,GAAG,CAAC,YAAmC,EAAE,EAAE;YACzD,kCAAkC,CACjC,UAAU,EACV,OAAO,EACP,YAAY,CAAC,OAAO,EAAE,4BAA4B,CAClD,CAAC;YACF,0CAA0C,CACzC,UAAU,EACV,OAAO,EACP,YAAY,CAAC,OAAO,EAAE,oCAAoC,CAC1D,CAAC;YACF,mCAAmC,CAClC,UAAU,EACV,OAAO,EACP,YAAY,CAAC,OAAO,EAAE,6BAA6B,CACnD,CAAC;YACF,OAAO,IAAI,4CAA4C,CACtD,gBAAgB,CAAC,WAAW,CAC3B;gBACC,qBAAqB,EAAE,UAAU,CAAC,yBAAyB,CAAC,mBAAmB,CAAC;gBAChF,0BAA0B,EACzB,UAAU,CAAC,yBAAyB,CAAC,wBAAwB,CAAC;aAC/D,EACD,YAAY,CAAC,OAAO,CACpB,CACD,CAAC;QACH,CAAC,CAAC;QACF,gBAAgB,GAAG,mDAAmD,CAAC;IACxE,CAAC;SAAM,IAAI,cAAc,CAAC,IAAI,KAAK,qCAAqC,CAAC,UAAU,EAAE,CAAC;QACrF,eAAe,GAAG,CAAC,YAAmC,EAAE,EAAE,CACzD,IAAI,kCAAkC,CACrC,gBAAgB,CAAC,WAAW,CAAqC,YAAY,CAAC,OAAO,CAAC,CACtF,CAAC;QACH,gBAAgB,GAAG,wCAAwC,CAAC;IAC7D,CAAC;IAED,OAAO;QACN,eAAe,EAAE,eAAsE;QACvF,gBAAgB;QAChB,OAAO,EAAE,gBAAgB;KACzB,CAAC;AACH,CAAC","sourcesContent":["// Copyright 2026 3Sixty Trade Ltd.\n// SPDX-License-Identifier: Apache-2.0.\nimport { OrganizationRequestAdminRestClient } from \"@3sixty/api-auth-account-rest-client\";\nimport { EntityStorageOrganizationRequestAdminService } from \"@3sixty/api-auth-account-service\";\nimport { ComponentFactory, type IComponent } from \"@3sixty/core\";\nimport type {\n\tEngineTypeInitialiserReturn,\n\tIEngineCore,\n\tIEngineCoreContext\n} from \"@3sixty/engine-models\";\nimport { EngineTypeHelper } from \"@3sixty/engine-types\";\n\nimport {\n\tinitialiseAccountDataEntityStorage,\n\tinitialiseOrganizationEntityStorage,\n\tinitialiseOrganizationRequestEntityStorage\n} from \"./authenticationAccount.js\";\nimport type { OrganizationRequestAdminComponentConfig } from \"../models/config/organizationRequestAdminComponentConfig.js\";\nimport type { IEngineServerConfig } from \"../models/IEngineServerConfig.js\";\nimport { OrganizationRequestAdminComponentType } from \"../models/types/organizationRequestAdminComponentType.js\";\n\n/**\n * Initialise the organization request admin component.\n * @param engineCore The engine core.\n * @param context The context for the engine.\n * @param instanceConfig The instance config.\n * @returns The instance created and the factory for it.\n */\nexport function initialiseOrganizationRequestAdminComponent(\n\tengineCore: IEngineCore<IEngineServerConfig>,\n\tcontext: IEngineCoreContext<IEngineServerConfig>,\n\tinstanceConfig: OrganizationRequestAdminComponentConfig\n): EngineTypeInitialiserReturn<OrganizationRequestAdminComponentConfig, typeof ComponentFactory> {\n\tlet createComponent;\n\tlet instanceTypeName;\n\n\tif (instanceConfig.type === OrganizationRequestAdminComponentType.EntityStorage) {\n\t\tcreateComponent = (createConfig: typeof instanceConfig) => {\n\t\t\tinitialiseAccountDataEntityStorage(\n\t\t\t\tengineCore,\n\t\t\t\tcontext,\n\t\t\t\tcreateConfig.options?.accountDataEntityStorageType\n\t\t\t);\n\t\t\tinitialiseOrganizationRequestEntityStorage(\n\t\t\t\tengineCore,\n\t\t\t\tcontext,\n\t\t\t\tcreateConfig.options?.organizationRequestEntityStorageType\n\t\t\t);\n\t\t\tinitialiseOrganizationEntityStorage(\n\t\t\t\tengineCore,\n\t\t\t\tcontext,\n\t\t\t\tcreateConfig.options?.organizationEntityStorageType\n\t\t\t);\n\t\t\treturn new EntityStorageOrganizationRequestAdminService(\n\t\t\t\tEngineTypeHelper.mergeConfig<(typeof instanceConfig)[\"options\"]>(\n\t\t\t\t\t{\n\t\t\t\t\t\tidentityComponentType: engineCore.getRegisteredInstanceType(\"identityComponent\"),\n\t\t\t\t\t\tauthorizationComponentType:\n\t\t\t\t\t\t\tengineCore.getRegisteredInstanceType(\"authorizationComponent\")\n\t\t\t\t\t},\n\t\t\t\t\tcreateConfig.options\n\t\t\t\t)\n\t\t\t);\n\t\t};\n\t\tinstanceTypeName = \"entity-storage-organization-request-admin-service\";\n\t} else if (instanceConfig.type === OrganizationRequestAdminComponentType.RestClient) {\n\t\tcreateComponent = (createConfig: typeof instanceConfig) =>\n\t\t\tnew OrganizationRequestAdminRestClient(\n\t\t\t\tEngineTypeHelper.mergeConfig<(typeof instanceConfig)[\"options\"]>(createConfig.options)\n\t\t\t);\n\t\tinstanceTypeName = \"organization-request-admin-rest-client\";\n\t}\n\n\treturn {\n\t\tcreateComponent: createComponent as (createConfig: typeof instanceConfig) => IComponent,\n\t\tinstanceTypeName,\n\t\tfactory: ComponentFactory\n\t};\n}\n"]}

package/dist/es/components/restRouteProcessor.js

@@ -1,15 +1,18 @@
 // Copyright 2024 IOTA Stiftung.
+// Copyright 2026 3Sixty Trade Ltd.
 // SPDX-License-Identifier: Apache-2.0.
-import { AuthHeaderProcessor, initSchema as initSchemaAuthEntityStorage } from "@3sixty/api-auth-entity-storage-service";
+import { AuthenticationAccountProcessor } from "@3sixty/api-auth-account-service";
+import { AuthHeaderProcessor } from "@3sixty/api-auth-entity-storage-service";
 import { TenantOverrideProcessor } from "@3sixty/api-auth-service";
 import { RestRouteProcessorFactory } from "@3sixty/api-models";
-import { ContextIdProcessor, LoggingProcessor, RestRouteProcessor, StaticContextIdProcessor } from "@3sixty/api-processors";
+import { ContextIdProcessor, LoggingProcessor, OriginCheckProcessor, RestRouteProcessor, StaticContextIdProcessor } from "@3sixty/api-processors";
 import { TenantProcessor, SingleTenantProcessor } from "@3sixty/api-tenant-processor";
 import { AuthorizationRouteProcessor } from "@3sixty/authorization-service";
-import { ContextIdHelper, ContextIdKeys } from "@3sixty/context";
-import { EngineTypeHelper, initialiseEntityStorageConnector } from "@3sixty/engine-types";
+import { EngineTypeHelper } from "@3sixty/engine-types";
 import { MetricsRouteProcessor } from "@3sixty/telemetry-processors";
 import { TracingRouteProcessor } from "@3sixty/tracing-processors";
+import { initialiseAuthenticationUserEntityStorage } from "./authentication.js";
+import { initialiseAccountDataEntityStorage } from "./authenticationAccount.js";
 import { RestRouteProcessorType } from "../models/types/restRouteProcessorType.js";
 /**
  * Initialise the rest route processor.
@@ -23,11 +26,7 @@ export function initialiseRestRouteProcessorComponent(engineCore, context, insta
     let instanceTypeName;
     if (instanceConfig.type === RestRouteProcessorType.AuthHeader) {
         createComponent = (createConfig) => {
-            initSchemaAuthEntityStorage();
-            initialiseEntityStorageConnector(engineCore, context, createConfig.options?.userEntityStorageType, "AuthenticationUser", ContextIdHelper.pickKeysFromAvailable(engineCore.getContextIdKeys(), [
-                ContextIdKeys.Node,
-                ContextIdKeys.Tenant
-            ]));
+            initialiseAuthenticationUserEntityStorage(engineCore, context, createConfig.options?.userEntityStorageType);
             return new AuthHeaderProcessor(EngineTypeHelper.mergeConfig({
                 vaultConnectorType: engineCore.getRegisteredInstanceType("vaultConnector"),
                 tenantAdminComponentType: engineCore.getRegisteredInstanceTypeOptional("tenantAdminComponent")
@@ -39,6 +38,13 @@ export function initialiseRestRouteProcessorComponent(engineCore, context, insta
         };
         instanceTypeName = "auth-header-processor";
     }
+    else if (instanceConfig.type === RestRouteProcessorType.AuthenticationAccount) {
+        createComponent = (createConfig) => {
+            initialiseAccountDataEntityStorage(engineCore, context, createConfig.options?.accountDataEntityStorageType);
+            return new AuthenticationAccountProcessor(EngineTypeHelper.mergeConfig(createConfig.options));
+        };
+        instanceTypeName = "authentication-account-processor";
+    }
     else if (instanceConfig.type === RestRouteProcessorType.Logging) {
         createComponent = (createConfig) => new LoggingProcessor(EngineTypeHelper.mergeConfig({
             loggingComponentType: engineCore.getRegisteredSilencedType("logging", "LoggingProcessor")
@@ -111,6 +117,10 @@ export function initialiseRestRouteProcessorComponent(engineCore, context, insta
         }, createConfig.options));
         instanceTypeName = "authorization-route-processor";
     }
+    else if (instanceConfig.type === RestRouteProcessorType.OriginCheck) {
+        createComponent = (createConfig) => new OriginCheckProcessor(EngineTypeHelper.mergeConfig(createConfig.options));
+        instanceTypeName = "origin-check-processor";
+    }
     return {
         createComponent: createComponent,
         instanceTypeName,