@authup/server-core 0.45.10 → 1.0.0-beta.0

package/dist/http/controllers/root/base/handlers/password-forgot.js

@@ -0,0 +1,81 @@
+"use strict";
+/*
+ * Copyright (c) 2022-2022.
+ * Author Peter Placzek (tada5hi)
+ * For the full copyright and license information,
+ * view the LICENSE file that was distributed with this source code.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.createAuthPasswordForgotRouteHandler = void 0;
+const node_crypto_1 = require("node:crypto");
+const http_1 = require("@ebec/http");
+const express_validator_1 = require("express-validator");
+const routup_1 = require("routup");
+const typeorm_extension_1 = require("typeorm-extension");
+const server_kit_1 = require("@authup/server-kit");
+const domains_1 = require("../../../../../domains");
+const config_1 = require("../../../../../config");
+const validation_1 = require("../../../../validation");
+async function createAuthPasswordForgotRouteHandler(req, res) {
+    const config = (0, config_1.useConfig)();
+    if (!config.registration) {
+        throw new http_1.BadRequestError('User registration is not enabled.');
+    }
+    if (!config.emailVerification) {
+        throw new http_1.BadRequestError('Email verification is not enabled, but required to reset a password.');
+    }
+    if (!(0, server_kit_1.hasSmtpConfig)() && config.env !== 'test') {
+        throw new http_1.BadRequestError('SMTP modul is not configured.');
+    }
+    await (0, express_validator_1.oneOf)([
+        (0, express_validator_1.check)('email')
+            .exists()
+            .notEmpty()
+            .isEmail(),
+        (0, express_validator_1.check)('name')
+            .exists()
+            .notEmpty()
+            .isString(),
+    ])
+        .run(req);
+    await (0, express_validator_1.check)('realm_id')
+        .exists()
+        .isUUID()
+        .optional({ nullable: true })
+        .run(req);
+    const validation = (0, express_validator_1.validationResult)(req);
+    if (!validation.isEmpty()) {
+        throw new validation_1.RequestValidationError(validation);
+    }
+    const data = (0, validation_1.matchedValidationData)(req, { includeOptionals: true });
+    const where = {
+        ...(data.name ? { name: data.name } : {}),
+        ...(data.email ? { email: data.email } : {}),
+    };
+    const realm = await (0, domains_1.resolveRealm)(data.realm_id, true);
+    where.realm_id = realm.id;
+    const dataSource = await (0, typeorm_extension_1.useDataSource)();
+    const repository = new domains_1.UserRepository(dataSource);
+    const query = repository.createQueryBuilder('user');
+    const entity = await query
+        .addSelect('user.email')
+        .where(where)
+        .getOne();
+    if (!entity) {
+        throw new http_1.NotFoundError();
+    }
+    entity.reset_expires = new Date(Date.now() + (1000 * 60 * 30)).toISOString();
+    entity.reset_hash = (0, node_crypto_1.randomBytes)(32).toString('hex');
+    const smtpClient = await (0, server_kit_1.useSMTPClient)();
+    await smtpClient.sendMail({
+        to: entity.email,
+        subject: 'Forgot Password - Reset code',
+        html: `
+            <p>Please use the code below to reset your account password.</p>
+            <p>${entity.reset_hash}</p>
+            `,
+    });
+    return (0, routup_1.sendAccepted)(res);
+}
+exports.createAuthPasswordForgotRouteHandler = createAuthPasswordForgotRouteHandler;
+//# sourceMappingURL=password-forgot.js.map

package/dist/http/controllers/root/base/handlers/password-forgot.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"password-forgot.js","sourceRoot":"","sources":["../../../../../../src/http/controllers/root/base/handlers/password-forgot.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;;AAEH,6CAA0C;AAC1C,qCAA4D;AAC5D,yDAAmE;AAGnE,mCAAsC;AAEtC,yDAAkD;AAClD,mDAAkE;AAClE,oDAAsE;AACtE,kDAE+B;AAC/B,uDAAuF;AAEhF,KAAK,UAAU,oCAAoC,CAAC,GAAY,EAAE,GAAa;IAClF,MAAM,MAAM,GAAG,IAAA,kBAAS,GAAE,CAAC;IAE3B,IAAI,CAAC,MAAM,CAAC,YAAY,EAAE,CAAC;QACvB,MAAM,IAAI,sBAAe,CAAC,mCAAmC,CAAC,CAAC;IACnE,CAAC;IAED,IAAI,CAAC,MAAM,CAAC,iBAAiB,EAAE,CAAC;QAC5B,MAAM,IAAI,sBAAe,CAAC,sEAAsE,CAAC,CAAC;IACtG,CAAC;IAED,IAAI,CAAC,IAAA,0BAAa,GAAE,IAAI,MAAM,CAAC,GAAG,KAAK,MAAM,EAAE,CAAC;QAC5C,MAAM,IAAI,sBAAe,CAAC,+BAA+B,CAAC,CAAC;IAC/D,CAAC;IAED,MAAM,IAAA,yBAAK,EAAC;QACR,IAAA,yBAAK,EAAC,OAAO,CAAC;aACT,MAAM,EAAE;aACR,QAAQ,EAAE;aACV,OAAO,EAAE;QACd,IAAA,yBAAK,EAAC,MAAM,CAAC;aACR,MAAM,EAAE;aACR,QAAQ,EAAE;aACV,QAAQ,EAAE;KAClB,CAAC;SACG,GAAG,CAAC,GAAG,CAAC,CAAC;IAEd,MAAM,IAAA,yBAAK,EAAC,UAAU,CAAC;SAClB,MAAM,EAAE;SACR,MAAM,EAAE;SACR,QAAQ,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;SAC5B,GAAG,CAAC,GAAG,CAAC,CAAC;IAEd,MAAM,UAAU,GAAG,IAAA,oCAAgB,EAAC,GAAG,CAAC,CAAC;IACzC,IAAI,CAAC,UAAU,CAAC,OAAO,EAAE,EAAE,CAAC;QACxB,MAAM,IAAI,mCAAsB,CAAC,UAAU,CAAC,CAAC;IACjD,CAAC;IAED,MAAM,IAAI,GAAmB,IAAA,kCAAqB,EAAC,GAAG,EAAE,EAAE,gBAAgB,EAAE,IAAI,EAAE,CAAC,CAAC;IAEpF,MAAM,KAAK,GAA4B;QACnC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACzC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC/C,CAAC;IAEF,MAAM,KAAK,GAAG,MAAM,IAAA,sBAAY,EAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;IACtD,KAAK,CAAC,QAAQ,GAAG,KAAK,CAAC,EAAE,CAAC;IAE1B,MAAM,UAAU,GAAG,MAAM,IAAA,iCAAa,GAAE,CAAC;IACzC,MAAM,UAAU,GAAG,IAAI,wBAAc,CAAC,UAAU,CAAC,CAAC;IAClD,MAAM,KAAK,GAAG,UAAU,CAAC,kBAAkB,CAAC,MAAM,CAAC,CAAC;IACpD,MAAM,MAAM,GAAG,MAAM,KAAK;SACrB,SAAS,CAAC,YAAY,CAAC;SACvB,KAAK,CAAC,KAAK,CAAC;SACZ,MAAM,EAAE,CAAC;IAEd,IAAI,CAAC,MAAM,EAAE,CAAC;QACV,MAAM,IAAI,oBAAa,EAAE,CAAC;IAC9B,CAAC;IAED,MAAM,CAAC,aAAa,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,IAAI,GAAG,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC;IAC7E,MAAM,CAAC,UAAU,GAAG,IAAA,yBAAW,EAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;IAEpD,MAAM,UAAU,GAAG,MAAM,IAAA,0BAAa,GAAE,CAAC;IAEzC,MAAM,UAAU,CAAC,QAAQ,CAAC;QACtB,EAAE,EAAE,MAAM,CAAC,KAAK;QAChB,OAAO,EAAE,8BAA8B;QACvC,IAAI,EAAE;;iBAEG,MAAM,CAAC,UAAU;aACrB;KACR,CAAC,CAAC;IAEH,OAAO,IAAA,qBAAY,EAAC,GAAG,CAAC,CAAC;AAC7B,CAAC;AA3ED,oFA2EC"}

package/dist/http/controllers/root/base/handlers/password-reset.d.ts

@@ -0,0 +1,3 @@
+import type { Request, Response } from 'routup';
+export declare function createAuthPasswordResetRouteHandler(req: Request, res: Response): Promise<any>;
+//# sourceMappingURL=password-reset.d.ts.map

package/dist/http/controllers/root/base/handlers/password-reset.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"password-reset.d.ts","sourceRoot":"","sources":["../../../../../../src/http/controllers/root/base/handlers/password-reset.ts"],"names":[],"mappings":"AASA,OAAO,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,QAAQ,CAAC;AAQhD,wBAAsB,mCAAmC,CAAC,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,QAAQ,GAAI,OAAO,CAAC,GAAG,CAAC,CAgEpG"}

package/dist/http/controllers/root/base/handlers/password-reset.js

@@ -0,0 +1,69 @@
+"use strict";
+/*
+ * Copyright (c) 2022-2022.
+ * Author Peter Placzek (tada5hi)
+ * For the full copyright and license information,
+ * view the LICENSE file that was distributed with this source code.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.createAuthPasswordResetRouteHandler = void 0;
+const express_validator_1 = require("express-validator");
+const routup_1 = require("routup");
+const http_1 = require("@ebec/http");
+const typeorm_extension_1 = require("typeorm-extension");
+const domains_1 = require("../../../../../domains");
+const validation_1 = require("../../../../validation");
+async function createAuthPasswordResetRouteHandler(req, res) {
+    await (0, express_validator_1.oneOf)([
+        (0, express_validator_1.check)('email')
+            .exists()
+            .notEmpty()
+            .isEmail(),
+        (0, express_validator_1.check)('name')
+            .exists()
+            .notEmpty()
+            .isString(),
+    ])
+        .run(req);
+    await (0, express_validator_1.check)('realm_id')
+        .exists()
+        .isUUID()
+        .optional({ nullable: true })
+        .run(req);
+    await (0, express_validator_1.check)('token')
+        .exists()
+        .notEmpty()
+        .isLength({ min: 3, max: 256 })
+        .run(req);
+    await (0, express_validator_1.check)('password')
+        .exists()
+        .notEmpty()
+        .isLength({ min: 5, max: 512 })
+        .run(req);
+    const validation = (0, express_validator_1.validationResult)(req);
+    if (!validation.isEmpty()) {
+        throw new validation_1.RequestValidationError(validation);
+    }
+    const data = (0, validation_1.matchedValidationData)(req, { includeOptionals: true });
+    // todo: log attempt (email, token, ip_address, user_agent)
+    const where = {
+        ...(data.name ? { name: data.name } : {}),
+        ...(data.email ? { email: data.email } : {}),
+        reset_hash: data.token,
+    };
+    const realm = await (0, domains_1.resolveRealm)(data.realm_id, true);
+    where.realm_id = realm.id;
+    const dataSource = await (0, typeorm_extension_1.useDataSource)();
+    const repository = new domains_1.UserRepository(dataSource);
+    const entity = await repository.findOneBy(where);
+    if (!entity) {
+        throw new http_1.NotFoundError();
+    }
+    entity.reset_at = new Date().toISOString();
+    entity.reset_hash = null;
+    entity.reset_expires = null;
+    await repository.save(entity);
+    return (0, routup_1.sendAccepted)(res);
+}
+exports.createAuthPasswordResetRouteHandler = createAuthPasswordResetRouteHandler;
+//# sourceMappingURL=password-reset.js.map

package/dist/http/controllers/root/base/handlers/password-reset.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"password-reset.js","sourceRoot":"","sources":["../../../../../../src/http/controllers/root/base/handlers/password-reset.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;;AAEH,yDAAmE;AAGnE,mCAAsC;AAEtC,qCAA2C;AAC3C,yDAAkD;AAClD,oDAAsE;AACtE,uDAAuF;AAEhF,KAAK,UAAU,mCAAmC,CAAC,GAAY,EAAE,GAAa;IACjF,MAAM,IAAA,yBAAK,EAAC;QACR,IAAA,yBAAK,EAAC,OAAO,CAAC;aACT,MAAM,EAAE;aACR,QAAQ,EAAE;aACV,OAAO,EAAE;QACd,IAAA,yBAAK,EAAC,MAAM,CAAC;aACR,MAAM,EAAE;aACR,QAAQ,EAAE;aACV,QAAQ,EAAE;KAClB,CAAC;SACG,GAAG,CAAC,GAAG,CAAC,CAAC;IAEd,MAAM,IAAA,yBAAK,EAAC,UAAU,CAAC;SAClB,MAAM,EAAE;SACR,MAAM,EAAE;SACR,QAAQ,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;SAC5B,GAAG,CAAC,GAAG,CAAC,CAAC;IAEd,MAAM,IAAA,yBAAK,EAAC,OAAO,CAAC;SACf,MAAM,EAAE;SACR,QAAQ,EAAE;SACV,QAAQ,CAAC,EAAE,GAAG,EAAE,CAAC,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC;SAC9B,GAAG,CAAC,GAAG,CAAC,CAAC;IAEd,MAAM,IAAA,yBAAK,EAAC,UAAU,CAAC;SAClB,MAAM,EAAE;SACR,QAAQ,EAAE;SACV,QAAQ,CAAC,EAAE,GAAG,EAAE,CAAC,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC;SAC9B,GAAG,CAAC,GAAG,CAAC,CAAC;IAEd,MAAM,UAAU,GAAG,IAAA,oCAAgB,EAAC,GAAG,CAAC,CAAC;IACzC,IAAI,CAAC,UAAU,CAAC,OAAO,EAAE,EAAE,CAAC;QACxB,MAAM,IAAI,mCAAsB,CAAC,UAAU,CAAC,CAAC;IACjD,CAAC;IAED,MAAM,IAAI,GAAG,IAAA,kCAAqB,EAAC,GAAG,EAAE,EAAE,gBAAgB,EAAE,IAAI,EAAE,CAAsC,CAAC;IAEzG,2DAA2D;IAE3D,MAAM,KAAK,GAA4B;QACnC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACzC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC5C,UAAU,EAAE,IAAI,CAAC,KAAK;KACzB,CAAC;IAEF,MAAM,KAAK,GAAG,MAAM,IAAA,sBAAY,EAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;IACtD,KAAK,CAAC,QAAQ,GAAG,KAAK,CAAC,EAAE,CAAC;IAE1B,MAAM,UAAU,GAAG,MAAM,IAAA,iCAAa,GAAE,CAAC;IACzC,MAAM,UAAU,GAAG,IAAI,wBAAc,CAAC,UAAU,CAAC,CAAC;IAElD,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IACjD,IAAI,CAAC,MAAM,EAAE,CAAC;QACV,MAAM,IAAI,oBAAa,EAAE,CAAC;IAC9B,CAAC;IAED,MAAM,CAAC,QAAQ,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAC3C,MAAM,CAAC,UAAU,GAAG,IAAI,CAAC;IACzB,MAAM,CAAC,aAAa,GAAG,IAAI,CAAC;IAE5B,MAAM,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAE9B,OAAO,IAAA,qBAAY,EAAC,GAAG,CAAC,CAAC;AAC7B,CAAC;AAhED,kFAgEC"}

package/dist/http/controllers/root/base/handlers/register.d.ts

@@ -0,0 +1,3 @@
+import type { Request, Response } from 'routup';
+export declare function createAuthRegisterRouteHandler(req: Request, res: Response): Promise<any>;
+//# sourceMappingURL=register.d.ts.map

package/dist/http/controllers/root/base/handlers/register.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"register.d.ts","sourceRoot":"","sources":["../../../../../../src/http/controllers/root/base/handlers/register.ts"],"names":[],"mappings":"AAYA,OAAO,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,QAAQ,CAAC;AAUhD,wBAAsB,8BAA8B,CAAC,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,QAAQ,GAAI,OAAO,CAAC,GAAG,CAAC,CAsF/F"}

package/dist/http/controllers/root/base/handlers/register.js

@@ -0,0 +1,87 @@
+"use strict";
+/*
+ * Copyright (c) 2022-2022.
+ * Author Peter Placzek (tada5hi)
+ * For the full copyright and license information,
+ * view the LICENSE file that was distributed with this source code.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.createAuthRegisterRouteHandler = void 0;
+const node_crypto_1 = require("node:crypto");
+const express_validator_1 = require("express-validator");
+const core_1 = require("@authup/core");
+const http_1 = require("@ebec/http");
+const routup_1 = require("routup");
+const typeorm_extension_1 = require("typeorm-extension");
+const server_kit_1 = require("@authup/server-kit");
+const domains_1 = require("../../../../../domains");
+const validation_1 = require("../../../../validation");
+const config_1 = require("../../../../../config");
+async function createAuthRegisterRouteHandler(req, res) {
+    const config = (0, config_1.useConfig)();
+    if (!config.registration) {
+        throw new http_1.BadRequestError('User registration is not enabled.');
+    }
+    if (config.emailVerification &&
+        config.env !== 'test' &&
+        !(0, server_kit_1.hasSmtpConfig)()) {
+        throw new http_1.BadRequestError('SMTP options are not defined.');
+    }
+    await (0, express_validator_1.check)('email')
+        .exists()
+        .notEmpty()
+        .isEmail()
+        .run(req);
+    await (0, express_validator_1.check)('name')
+        .exists()
+        .custom((value) => {
+        const isValid = (0, core_1.isValidUserName)(value);
+        if (!isValid) {
+            throw new http_1.BadRequestError('Only the characters [a-z0-9-_]+ are allowed.');
+        }
+        return isValid;
+    })
+        .optional({ nullable: true })
+        .run(req);
+    await (0, express_validator_1.check)('password')
+        .exists()
+        .notEmpty()
+        .isLength({ min: 5, max: 512 })
+        .run(req);
+    await (0, express_validator_1.check)('realm_id')
+        .exists()
+        .isUUID()
+        .optional({ nullable: true })
+        .run(req);
+    const validation = (0, express_validator_1.validationResult)(req);
+    if (!validation.isEmpty()) {
+        throw new validation_1.RequestValidationError(validation);
+    }
+    const data = (0, validation_1.matchedValidationData)(req, { includeOptionals: true });
+    data.name ?? (data.name = data.email);
+    if (config.emailVerification) {
+        data.active = false;
+        data.activate_hash = (0, node_crypto_1.randomBytes)(32).toString('hex'); // todo: create random bytes to hex
+    }
+    const dataSource = await (0, typeorm_extension_1.useDataSource)();
+    const repository = new domains_1.UserRepository(dataSource);
+    const { entity } = await repository.createWithPassword(data);
+    const realm = await (0, domains_1.resolveRealm)(entity.realm_id, true);
+    entity.realm_id = realm.id;
+    await repository.save(entity);
+    if (config.emailVerification) {
+        const smtpClient = await (0, server_kit_1.useSMTPClient)();
+        const info = await smtpClient.sendMail({
+            to: entity.email,
+            subject: 'Registration - Activation code',
+            html: `
+                <p>Please use the code below to activate your account and start using the site.</p>
+                <p>${entity.activate_hash}</p>
+                `,
+        });
+        (0, server_kit_1.useLogger)().debug(`Message #${info.messageId} has been sent!`);
+    }
+    return (0, routup_1.sendAccepted)(res, entity);
+}
+exports.createAuthRegisterRouteHandler = createAuthRegisterRouteHandler;
+//# sourceMappingURL=register.js.map

package/dist/http/controllers/root/base/handlers/register.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"register.js","sourceRoot":"","sources":["../../../../../../src/http/controllers/root/base/handlers/register.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;;AAEH,6CAA0C;AAC1C,yDAA4D;AAE5D,uCAA+C;AAC/C,qCAA6C;AAE7C,mCAAsC;AACtC,yDAAkD;AAClD,mDAA6E;AAC7E,oDAAsE;AACtE,uDAAuF;AACvF,kDAE+B;AAExB,KAAK,UAAU,8BAA8B,CAAC,GAAY,EAAE,GAAa;IAC5E,MAAM,MAAM,GAAG,IAAA,kBAAS,GAAE,CAAC;IAE3B,IAAI,CAAC,MAAM,CAAC,YAAY,EAAE,CAAC;QACvB,MAAM,IAAI,sBAAe,CAAC,mCAAmC,CAAC,CAAC;IACnE,CAAC;IAED,IACI,MAAM,CAAC,iBAAiB;QACxB,MAAM,CAAC,GAAG,KAAK,MAAM;QACrB,CAAC,IAAA,0BAAa,GAAE,EAClB,CAAC;QACC,MAAM,IAAI,sBAAe,CAAC,+BAA+B,CAAC,CAAC;IAC/D,CAAC;IAED,MAAM,IAAA,yBAAK,EAAC,OAAO,CAAC;SACf,MAAM,EAAE;SACR,QAAQ,EAAE;SACV,OAAO,EAAE;SACT,GAAG,CAAC,GAAG,CAAC,CAAC;IAEd,MAAM,IAAA,yBAAK,EAAC,MAAM,CAAC;SACd,MAAM,EAAE;SACR,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE;QACd,MAAM,OAAO,GAAG,IAAA,sBAAe,EAAC,KAAK,CAAC,CAAC;QACvC,IAAI,CAAC,OAAO,EAAE,CAAC;YACX,MAAM,IAAI,sBAAe,CAAC,8CAA8C,CAAC,CAAC;QAC9E,CAAC;QAED,OAAO,OAAO,CAAC;IACnB,CAAC,CAAC;SACD,QAAQ,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;SAC5B,GAAG,CAAC,GAAG,CAAC,CAAC;IAEd,MAAM,IAAA,yBAAK,EAAC,UAAU,CAAC;SAClB,MAAM,EAAE;SACR,QAAQ,EAAE;SACV,QAAQ,CAAC,EAAE,GAAG,EAAE,CAAC,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC;SAC9B,GAAG,CAAC,GAAG,CAAC,CAAC;IAEd,MAAM,IAAA,yBAAK,EAAC,UAAU,CAAC;SAClB,MAAM,EAAE;SACR,MAAM,EAAE;SACR,QAAQ,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;SAC5B,GAAG,CAAC,GAAG,CAAC,CAAC;IAEd,MAAM,UAAU,GAAG,IAAA,oCAAgB,EAAC,GAAG,CAAC,CAAC;IACzC,IAAI,CAAC,UAAU,CAAC,OAAO,EAAE,EAAE,CAAC;QACxB,MAAM,IAAI,mCAAsB,CAAC,UAAU,CAAC,CAAC;IACjD,CAAC;IAED,MAAM,IAAI,GAAmB,IAAA,kCAAqB,EAAC,GAAG,EAAE,EAAE,gBAAgB,EAAE,IAAI,EAAE,CAAC,CAAC;IAEpF,IAAI,CAAC,IAAI,KAAT,IAAI,CAAC,IAAI,GAAK,IAAI,CAAC,KAAK,EAAC;IAEzB,IAAI,MAAM,CAAC,iBAAiB,EAAE,CAAC;QAC3B,IAAI,CAAC,MAAM,GAAG,KAAK,CAAC;QACpB,IAAI,CAAC,aAAa,GAAG,IAAA,yBAAW,EAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,mCAAmC;IAC7F,CAAC;IAED,MAAM,UAAU,GAAG,MAAM,IAAA,iCAAa,GAAE,CAAC;IACzC,MAAM,UAAU,GAAG,IAAI,wBAAc,CAAC,UAAU,CAAC,CAAC;IAElD,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,UAAU,CAAC,kBAAkB,CAAC,IAAI,CAAC,CAAC;IAE7D,MAAM,KAAK,GAAG,MAAM,IAAA,sBAAY,EAAC,MAAM,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;IACxD,MAAM,CAAC,QAAQ,GAAG,KAAK,CAAC,EAAE,CAAC;IAE3B,MAAM,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAE9B,IAAI,MAAM,CAAC,iBAAiB,EAAE,CAAC;QAC3B,MAAM,UAAU,GAAG,MAAM,IAAA,0BAAa,GAAE,CAAC;QAEzC,MAAM,IAAI,GAAG,MAAM,UAAU,CAAC,QAAQ,CAAC;YACnC,EAAE,EAAE,MAAM,CAAC,KAAK;YAChB,OAAO,EAAE,gCAAgC;YACzC,IAAI,EAAE;;qBAEG,MAAM,CAAC,aAAa;iBACxB;SACR,CAAC,CAAC;QAEH,IAAA,sBAAS,GAAE,CAAC,KAAK,CAAC,YAAY,IAAI,CAAC,SAAS,iBAAiB,CAAC,CAAC;IACnE,CAAC;IAED,OAAO,IAAA,qBAAY,EAAC,GAAG,EAAE,MAAM,CAAC,CAAC;AACrC,CAAC;AAtFD,wEAsFC"}

package/dist/http/controllers/root/base/index.d.ts

@@ -0,0 +1,2 @@
+export * from './handlers';
+//# sourceMappingURL=index.d.ts.map

package/dist/http/controllers/root/base/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../src/http/controllers/root/base/index.ts"],"names":[],"mappings":"AAOA,cAAc,YAAY,CAAC"}

package/dist/http/controllers/root/base/index.js

@@ -0,0 +1,24 @@
+"use strict";
+/*
+ * Copyright (c) 2022.
+ * Author Peter Placzek (tada5hi)
+ * For the full copyright and license information,
+ * view the LICENSE file that was distributed with this source code.
+ */
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __exportStar = (this && this.__exportStar) || function(m, exports) {
+    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+__exportStar(require("./handlers"), exports);
+//# sourceMappingURL=index.js.map

package/dist/http/controllers/root/base/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../../src/http/controllers/root/base/index.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;;;;;;;;;;;;;;;AAEH,6CAA2B"}

package/dist/http/controllers/root/index.d.ts

@@ -0,0 +1,6 @@
+export * from './authorize';
+export * from './jwks';
+export * from './openid';
+export * from './token';
+export * from './module';
+//# sourceMappingURL=index.d.ts.map

package/dist/http/controllers/root/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/http/controllers/root/index.ts"],"names":[],"mappings":"AAOA,cAAc,aAAa,CAAC;AAC5B,cAAc,QAAQ,CAAC;AACvB,cAAc,UAAU,CAAC;AACzB,cAAc,SAAS,CAAC;AACxB,cAAc,UAAU,CAAC"}

package/dist/http/controllers/root/index.js

@@ -0,0 +1,28 @@
+"use strict";
+/*
+ * Copyright (c) 2021-2021.
+ * Author Peter Placzek (tada5hi)
+ * For the full copyright and license information,
+ * view the LICENSE file that was distributed with this source code.
+ */
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __exportStar = (this && this.__exportStar) || function(m, exports) {
+    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+__exportStar(require("./authorize"), exports);
+__exportStar(require("./jwks"), exports);
+__exportStar(require("./openid"), exports);
+__exportStar(require("./token"), exports);
+__exportStar(require("./module"), exports);
+//# sourceMappingURL=index.js.map

package/dist/http/controllers/root/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../src/http/controllers/root/index.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;;;;;;;;;;;;;;;AAEH,8CAA4B;AAC5B,yCAAuB;AACvB,2CAAyB;AACzB,0CAAwB;AACxB,2CAAyB"}

package/dist/http/controllers/root/jwks/handlers/index.d.ts

@@ -0,0 +1,2 @@
+export * from './read';
+//# sourceMappingURL=index.d.ts.map

package/dist/http/controllers/root/jwks/handlers/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../../src/http/controllers/root/jwks/handlers/index.ts"],"names":[],"mappings":"AAOA,cAAc,QAAQ,CAAC"}

package/dist/http/controllers/root/jwks/handlers/index.js

@@ -0,0 +1,24 @@
+"use strict";
+/*
+ * Copyright (c) 2022.
+ * Author Peter Placzek (tada5hi)
+ * For the full copyright and license information,
+ * view the LICENSE file that was distributed with this source code.
+ */
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __exportStar = (this && this.__exportStar) || function(m, exports) {
+    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+__exportStar(require("./read"), exports);
+//# sourceMappingURL=index.js.map

package/dist/http/controllers/root/jwks/handlers/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../../../src/http/controllers/root/jwks/handlers/index.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;;;;;;;;;;;;;;;AAEH,yCAAuB"}

package/dist/http/controllers/root/jwks/handlers/read.d.ts

@@ -0,0 +1,4 @@
+import type { Request, Response } from 'routup';
+export declare function getJwksRouteHandler(req: Request, res: Response): Promise<any>;
+export declare function getJwkRouteHandler(req: Request, res: Response): Promise<any>;
+//# sourceMappingURL=read.d.ts.map

package/dist/http/controllers/root/jwks/handlers/read.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"read.d.ts","sourceRoot":"","sources":["../../../../../../src/http/controllers/root/jwks/handlers/read.ts"],"names":[],"mappings":"AASA,OAAO,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,QAAQ,CAAC;AAQhD,wBAAsB,mBAAmB,CAAC,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,QAAQ,GAAI,OAAO,CAAC,GAAG,CAAC,CA8BpF;AAED,wBAAsB,kBAAkB,CAAC,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,QAAQ,GAAI,OAAO,CAAC,GAAG,CAAC,CA8BnF"}

package/dist/http/controllers/root/jwks/handlers/read.js

@@ -0,0 +1,69 @@
+"use strict";
+/*
+ * Copyright (c) 2022-2022.
+ * Author Peter Placzek (tada5hi)
+ * For the full copyright and license information,
+ * view the LICENSE file that was distributed with this source code.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.getJwkRouteHandler = exports.getJwksRouteHandler = void 0;
+const node_crypto_1 = require("node:crypto");
+const routup_1 = require("routup");
+const typeorm_1 = require("typeorm");
+const core_1 = require("@authup/core");
+const http_1 = require("@ebec/http");
+const typeorm_extension_1 = require("typeorm-extension");
+const domains_1 = require("../../../../../domains");
+async function getJwksRouteHandler(req, res) {
+    const dataSource = await (0, typeorm_extension_1.useDataSource)();
+    const repository = dataSource.getRepository(domains_1.KeyEntity);
+    const entities = await repository.find({
+        where: {
+            type: (0, typeorm_1.In)([core_1.KeyType.RSA, core_1.KeyType.EC]),
+        },
+        order: {
+            priority: 'DESC',
+        },
+    });
+    const keys = entities.map((entity) => {
+        const keyObject = (0, node_crypto_1.createPublicKey)({
+            key: (0, core_1.wrapPublicKeyPem)(entity.encryption_key),
+            format: 'pem',
+            type: 'pkcs1',
+        });
+        const jwk = keyObject.export({
+            format: 'jwk',
+        });
+        return { ...jwk, alg: entity.signature_algorithm, kid: entity.id };
+    });
+    return (0, routup_1.send)(res, {
+        keys,
+    });
+}
+exports.getJwksRouteHandler = getJwksRouteHandler;
+async function getJwkRouteHandler(req, res) {
+    const id = (0, routup_1.useRequestParam)(req, 'id');
+    const dataSource = await (0, typeorm_extension_1.useDataSource)();
+    const repository = dataSource.getRepository(domains_1.KeyEntity);
+    const entity = await repository.findOne({
+        where: {
+            type: (0, typeorm_1.In)([core_1.KeyType.RSA, core_1.KeyType.EC]),
+            id,
+        },
+    });
+    if (!entity) {
+        throw new http_1.NotFoundError();
+    }
+    const keyObject = (0, node_crypto_1.createPublicKey)({
+        key: (0, core_1.wrapPublicKeyPem)(entity.encryption_key),
+        format: 'pem',
+        type: 'pkcs1',
+    });
+    let jwk = keyObject.export({
+        format: 'jwk',
+    });
+    jwk = { ...jwk, alg: entity.signature_algorithm, kid: entity.id };
+    return (0, routup_1.send)(res, jwk);
+}
+exports.getJwkRouteHandler = getJwkRouteHandler;
+//# sourceMappingURL=read.js.map

package/dist/http/controllers/root/jwks/handlers/read.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"read.js","sourceRoot":"","sources":["../../../../../../src/http/controllers/root/jwks/handlers/read.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;;AAGH,6CAA8C;AAE9C,mCAA+C;AAC/C,qCAA6B;AAC7B,uCAAyD;AACzD,qCAA2C;AAC3C,yDAAkD;AAClD,oDAAmD;AAE5C,KAAK,UAAU,mBAAmB,CAAC,GAAY,EAAE,GAAa;IACjE,MAAM,UAAU,GAAG,MAAM,IAAA,iCAAa,GAAE,CAAC;IACzC,MAAM,UAAU,GAAG,UAAU,CAAC,aAAa,CAAC,mBAAS,CAAC,CAAC;IAEvD,MAAM,QAAQ,GAAG,MAAM,UAAU,CAAC,IAAI,CAAC;QACnC,KAAK,EAAE;YACH,IAAI,EAAE,IAAA,YAAE,EAAC,CAAC,cAAO,CAAC,GAAG,EAAE,cAAO,CAAC,EAAE,CAAC,CAAC;SACtC;QACD,KAAK,EAAE;YACH,QAAQ,EAAE,MAAM;SACnB;KACJ,CAAC,CAAC;IAEH,MAAM,IAAI,GAAkB,QAAQ,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE;QAChD,MAAM,SAAS,GAAG,IAAA,6BAAe,EAAC;YAC9B,GAAG,EAAE,IAAA,uBAAgB,EAAC,MAAM,CAAC,cAAc,CAAC;YAC5C,MAAM,EAAE,KAAK;YACb,IAAI,EAAE,OAAO;SAChB,CAAC,CAAC;QAEH,MAAM,GAAG,GAAG,SAAS,CAAC,MAAM,CAAC;YACzB,MAAM,EAAE,KAAK;SAChB,CAAC,CAAC;QAEH,OAAO,EAAE,GAAG,GAAG,EAAE,GAAG,EAAE,MAAM,CAAC,mBAAmB,EAAE,GAAG,EAAE,MAAM,CAAC,EAAE,EAAE,CAAC;IACvE,CAAC,CAAC,CAAC;IAEH,OAAO,IAAA,aAAI,EAAC,GAAG,EAAE;QACb,IAAI;KACP,CAAC,CAAC;AACP,CAAC;AA9BD,kDA8BC;AAEM,KAAK,UAAU,kBAAkB,CAAC,GAAY,EAAE,GAAa;IAChE,MAAM,EAAE,GAAG,IAAA,wBAAe,EAAC,GAAG,EAAE,IAAI,CAAC,CAAC;IAEtC,MAAM,UAAU,GAAG,MAAM,IAAA,iCAAa,GAAE,CAAC;IACzC,MAAM,UAAU,GAAG,UAAU,CAAC,aAAa,CAAC,mBAAS,CAAC,CAAC;IAEvD,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,OAAO,CAAC;QACpC,KAAK,EAAE;YACH,IAAI,EAAE,IAAA,YAAE,EAAC,CAAC,cAAO,CAAC,GAAG,EAAE,cAAO,CAAC,EAAE,CAAC,CAAC;YACnC,EAAE;SACL;KACJ,CAAC,CAAC;IAEH,IAAI,CAAC,MAAM,EAAE,CAAC;QACV,MAAM,IAAI,oBAAa,EAAE,CAAC;IAC9B,CAAC;IAED,MAAM,SAAS,GAAG,IAAA,6BAAe,EAAC;QAC9B,GAAG,EAAE,IAAA,uBAAgB,EAAC,MAAM,CAAC,cAAc,CAAC;QAC5C,MAAM,EAAE,KAAK;QACb,IAAI,EAAE,OAAO;KAChB,CAAC,CAAC;IAEH,IAAI,GAAG,GAAG,SAAS,CAAC,MAAM,CAAC;QACvB,MAAM,EAAE,KAAK;KAChB,CAAC,CAAC;IAEH,GAAG,GAAG,EAAE,GAAG,GAAG,EAAE,GAAG,EAAE,MAAM,CAAC,mBAAmB,EAAE,GAAG,EAAE,MAAM,CAAC,EAAE,EAAE,CAAC;IAElE,OAAO,IAAA,aAAI,EAAC,GAAG,EAAE,GAAG,CAAC,CAAC;AAC1B,CAAC;AA9BD,gDA8BC"}

package/dist/http/controllers/root/jwks/index.d.ts

@@ -0,0 +1,2 @@
+export * from './handlers';
+//# sourceMappingURL=index.d.ts.map

package/dist/http/controllers/root/jwks/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../src/http/controllers/root/jwks/index.ts"],"names":[],"mappings":"AAOA,cAAc,YAAY,CAAC"}

package/dist/http/controllers/root/jwks/index.js

@@ -0,0 +1,24 @@
+"use strict";
+/*
+ * Copyright (c) 2022.
+ * Author Peter Placzek (tada5hi)
+ * For the full copyright and license information,
+ * view the LICENSE file that was distributed with this source code.
+ */
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __exportStar = (this && this.__exportStar) || function(m, exports) {
+    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+__exportStar(require("./handlers"), exports);
+//# sourceMappingURL=index.js.map

package/dist/http/controllers/root/jwks/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../../src/http/controllers/root/jwks/index.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;;;;;;;;;;;;;;;AAEH,6CAA2B"}

package/dist/http/controllers/root/module.d.ts

@@ -0,0 +1,14 @@
+import type { OAuth2JsonWebKey, OAuth2OpenIDProviderMetadata } from '@authup/core';
+import type { EndpointInfo } from './status';
+export declare class RootController {
+    status(req: any, res: any): Promise<EndpointInfo>;
+    confirmAuthorization(req: any, res: any): Promise<void>;
+    getOpenIdConfiguration(req: any, res: any): Promise<OAuth2OpenIDProviderMetadata[]>;
+    getManyJwks(req: any, res: any): Promise<OAuth2JsonWebKey[]>;
+    getOneJwks(id: string, req: any, res: any): Promise<OAuth2JsonWebKey>;
+    activate(req: any, res: any): Promise<void>;
+    register(req: any, res: any): Promise<void>;
+    forgotPassword(req: any, res: any): Promise<void>;
+    resetPassword(req: any, res: any): Promise<void>;
+}
+//# sourceMappingURL=module.d.ts.map

package/dist/http/controllers/root/module.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"module.d.ts","sourceRoot":"","sources":["../../../../src/http/controllers/root/module.ts"],"names":[],"mappings":"AAUA,OAAO,KAAK,EACR,gBAAgB,EAChB,4BAA4B,EAC/B,MAAM,cAAc,CAAC;AAWtB,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,UAAU,CAAC;AAG7C,qBAEa,cAAc;IAEjB,MAAM,CACI,GAAG,EAAE,GAAG,EACH,GAAG,EAAE,GAAG,GAC1B,OAAO,CAAC,YAAY,CAAC;IAOlB,oBAAoB,CACV,GAAG,EAAE,GAAG,EACH,GAAG,EAAE,GAAG,GAC1B,OAAO,CAAC,IAAI,CAAC;IAOV,sBAAsB,CACZ,GAAG,EAAE,GAAG,EACH,GAAG,EAAE,GAAG,GAC1B,OAAO,CAAC,4BAA4B,EAAE,CAAC;IAOpC,WAAW,CACD,GAAG,EAAE,GAAG,EACH,GAAG,EAAE,GAAG,GAC1B,OAAO,CAAC,gBAAgB,EAAE,CAAC;IAKxB,UAAU,CACC,EAAE,EAAE,MAAM,EACP,GAAG,EAAE,GAAG,EACP,GAAG,EAAE,GAAG,GAC1B,OAAO,CAAC,gBAAgB,CAAC;IAOtB,QAAQ,CACE,GAAG,EAAE,GAAG,EACH,GAAG,EAAE,GAAG,GAC1B,OAAO,CAAC,IAAI,CAAC;IAKV,QAAQ,CACE,GAAG,EAAE,GAAG,EACH,GAAG,EAAE,GAAG,GAC1B,OAAO,CAAC,IAAI,CAAC;IAKV,cAAc,CACJ,GAAG,EAAE,GAAG,EACH,GAAG,EAAE,GAAG,GAC1B,OAAO,CAAC,IAAI,CAAC;IAKV,aAAa,CACH,GAAG,EAAE,GAAG,EACH,GAAG,EAAE,GAAG,GAC1B,OAAO,CAAC,IAAI,CAAC;CAGnB"}