@authup/server-core 0.45.10 → 1.0.0-beta.0

package/dist/http/middleware/built-in/logger.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"logger.js","sourceRoot":"","sources":["../../../../src/http/middleware/built-in/logger.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;;;;;AAEH,mDAA+C;AAC/C,oDAA4B;AAI5B,mCAAmE;AACnE,uCAA4C;AAE5C,SAAgB,wBAAwB,CAAC,MAAc;IACnD,MAAM,CAAC,GAAG,CAAC,IAAA,oBAAW,EAAC,CACnB,OAAgB,EAChB,QAAkB,EAClB,IAAU,EACZ,EAAE;QACA,IAAA,gBAAM,EACF,CAAC,MAAM,EAAE,GAAY,EAAE,GAAa,EAAE,EAAE;YACpC,MAAM,KAAK,GAAG;gBACV,IAAA,qBAAY,EAAC,GAAG,EAAE,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC;aAC1C,CAAC;YAEF,MAAM,MAAM,GAAG,IAAA,qBAAa,EAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;YAC5C,MAAM,OAAO,GAAG,IAAA,qBAAa,EAAC,GAAG,EAAE,SAAS,CAAC,CAAC;YAC9C,MAAM,QAAQ,GAAG,IAAA,qBAAa,EAAC,GAAG,EAAE,UAAU,CAAC,CAAC;YAEhD,IAAI,MAAM,IAAI,OAAO,IAAI,QAAQ,EAAE,CAAC;gBAChC,IAAI,MAAM,EAAE,CAAC;oBACT,KAAK,CAAC,IAAI,CAAC,QAAQ,MAAM,EAAE,CAAC,CAAC;gBACjC,CAAC;qBAAM,IAAI,OAAO,EAAE,CAAC;oBACjB,KAAK,CAAC,IAAI,CAAC,SAAS,OAAO,EAAE,CAAC,CAAC;gBACnC,CAAC;qBAAM,CAAC;oBACJ,KAAK,CAAC,IAAI,CAAC,UAAU,QAAQ,EAAE,CAAC,CAAC;gBACrC,CAAC;YACL,CAAC;YAED,OAAO;gBACH,GAAG,KAAK;gBACR,GAAG;gBACH,MAAM,CAAC,MAAM,CAAC,GAAG,EAAE,GAAG,CAAC;gBACvB,MAAM,CAAC,GAAG,CAAC,GAAG,EAAE,GAAG,CAAC;gBACpB,MAAM,CAAC,MAAM,CAAC,GAAG,EAAE,GAAG,CAAC;gBACvB,GAAG;gBACH,GAAG,MAAM,CAAC,eAAe,CAAC,CAAC,GAAG,EAAE,GAAG,CAAC,IAAI;aAC3C,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAChB,CAAC,EACD;YACI,MAAM,EAAE;gBACJ,KAAK,CAAC,OAAO;oBACT,IAAA,sBAAS,GAAE,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC;gBAChD,CAAC;aACJ;YACD,IAAI,CAAC,GAAY;gBACb,IAAI,IAAI,GAAG,IAAA,uBAAc,EAAC,GAAG,CAAC,CAAC;gBAC/B,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;oBACxB,IAAI,GAAG,IAAI,IAAI,EAAE,CAAC;gBACtB,CAAC;gBACD,OAAO,IAAI,KAAK,GAAG,CAAC;YACxB,CAAC;SACJ,CACJ,CAAC,OAAO,EAAE,QAAQ,EAAE,IAAI,CAAC,CAAC;IAC/B,CAAC,CAAC,CAAC,CAAC;AACR,CAAC;AApDD,4DAoDC"}

package/dist/http/middleware/built-in/prometheus.d.ts

@@ -0,0 +1,4 @@
+import type { OptionsInput } from '@routup/prometheus';
+import type { Router } from 'routup';
+export declare function registerPrometheusMiddleware(router: Router, input?: OptionsInput): void;
+//# sourceMappingURL=prometheus.d.ts.map

package/dist/http/middleware/built-in/prometheus.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"prometheus.d.ts","sourceRoot":"","sources":["../../../../src/http/middleware/built-in/prometheus.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAEvD,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAGrC,wBAAgB,4BAA4B,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,YAAY,QAuBhF"}

package/dist/http/middleware/built-in/prometheus.js

@@ -0,0 +1,34 @@
+"use strict";
+/*
+ * Copyright (c) 2023.
+ * Author Peter Placzek (tada5hi)
+ * For the full copyright and license information,
+ * view the LICENSE file that was distributed with this source code.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.registerPrometheusMiddleware = void 0;
+const prometheus_1 = require("@routup/prometheus");
+const routup_1 = require("routup");
+function registerPrometheusMiddleware(router, input) {
+    let options = {
+        skip(req) {
+            let path = (0, routup_1.useRequestPath)(req);
+            if (!path.startsWith('/')) {
+                path = `/${path}`;
+            }
+            return path.startsWith('/authorize') ||
+                path.startsWith('/token') ||
+                path.startsWith('/metrics') ||
+                path === '/';
+        },
+    };
+    if (input) {
+        options = {
+            ...options,
+            ...input,
+        };
+    }
+    router.use((0, prometheus_1.prometheus)(options));
+}
+exports.registerPrometheusMiddleware = registerPrometheusMiddleware;
+//# sourceMappingURL=prometheus.js.map

package/dist/http/middleware/built-in/prometheus.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"prometheus.js","sourceRoot":"","sources":["../../../../src/http/middleware/built-in/prometheus.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;;AAGH,mDAAgD;AAEhD,mCAAwC;AAExC,SAAgB,4BAA4B,CAAC,MAAc,EAAE,KAAoB;IAC7E,IAAI,OAAO,GAAkB;QACzB,IAAI,CAAC,GAAG;YACJ,IAAI,IAAI,GAAG,IAAA,uBAAc,EAAC,GAAG,CAAC,CAAC;YAC/B,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;gBACxB,IAAI,GAAG,IAAI,IAAI,EAAE,CAAC;YACtB,CAAC;YAED,OAAO,IAAI,CAAC,UAAU,CAAC,YAAY,CAAC;gBAChC,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC;gBACzB,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC;gBAC3B,IAAI,KAAK,GAAG,CAAC;QACrB,CAAC;KACJ,CAAC;IAEF,IAAI,KAAK,EAAE,CAAC;QACR,OAAO,GAAG;YACN,GAAG,OAAO;YACV,GAAG,KAAK;SACX,CAAC;IACN,CAAC;IAED,MAAM,CAAC,GAAG,CAAC,IAAA,uBAAU,EAAC,OAAO,CAAC,CAAC,CAAC;AACpC,CAAC;AAvBD,oEAuBC"}

package/dist/http/middleware/built-in/rate-limit.d.ts

@@ -0,0 +1,4 @@
+import type { OptionsInput } from '@routup/rate-limit';
+import type { Router } from 'routup';
+export declare function registerRateLimitMiddleware(router: Router, input?: OptionsInput): void;
+//# sourceMappingURL=rate-limit.d.ts.map

package/dist/http/middleware/built-in/rate-limit.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"rate-limit.d.ts","sourceRoot":"","sources":["../../../../src/http/middleware/built-in/rate-limit.ts"],"names":[],"mappings":"AAQA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAEvD,OAAO,KAAK,EAAW,MAAM,EAAE,MAAM,QAAQ,CAAC;AAI9C,wBAAgB,2BAA2B,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,YAAY,QAmC/E"}

package/dist/http/middleware/built-in/rate-limit.js

@@ -0,0 +1,43 @@
+"use strict";
+/*
+ * Copyright (c) 2023.
+ * Author Peter Placzek (tada5hi)
+ * For the full copyright and license information,
+ * view the LICENSE file that was distributed with this source code.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.registerRateLimitMiddleware = void 0;
+const core_1 = require("@authup/core");
+const rate_limit_1 = require("@routup/rate-limit");
+const smob_1 = require("smob");
+const utils_1 = require("../../utils");
+function registerRateLimitMiddleware(router, input) {
+    let options = {
+        skip(req) {
+            const robot = (0, utils_1.useRequestEnv)(req, 'robot');
+            if (robot) {
+                const { name } = (0, utils_1.useRequestEnv)(req, 'realm');
+                if (name === core_1.REALM_MASTER_NAME &&
+                    robot.name === core_1.ROBOT_SYSTEM_NAME) {
+                    return true;
+                }
+            }
+            return false;
+        },
+        max(req) {
+            if ((0, utils_1.useRequestEnv)(req, 'userId')) {
+                return 60 * 100; // 100 req p. sec
+            }
+            const robot = (0, utils_1.useRequestEnv)(req, 'robot');
+            if (robot) {
+                return 60 * 1000; // 1000 req p. sec
+            }
+            return 60 * 20; // 20 req p. sec
+        },
+        windowMs: 60 * 1000, // 60 sec
+    };
+    options = (0, smob_1.merge)(input || {}, options);
+    router.use((0, rate_limit_1.rateLimit)(options));
+}
+exports.registerRateLimitMiddleware = registerRateLimitMiddleware;
+//# sourceMappingURL=rate-limit.js.map

package/dist/http/middleware/built-in/rate-limit.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"rate-limit.js","sourceRoot":"","sources":["../../../../src/http/middleware/built-in/rate-limit.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;;AAEH,uCAAoE;AAEpE,mDAA+C;AAE/C,+BAA6B;AAC7B,uCAA4C;AAE5C,SAAgB,2BAA2B,CAAC,MAAc,EAAE,KAAoB;IAC5E,IAAI,OAAO,GAAkB;QACzB,IAAI,CAAC,GAAY;YACb,MAAM,KAAK,GAAG,IAAA,qBAAa,EAAC,GAAG,EAAE,OAAO,CAAC,CAAC;YAC1C,IAAI,KAAK,EAAE,CAAC;gBACR,MAAM,EAAE,IAAI,EAAE,GAAG,IAAA,qBAAa,EAAC,GAAG,EAAE,OAAO,CAAC,CAAC;gBAE7C,IACI,IAAI,KAAK,wBAAiB;oBAC1B,KAAK,CAAC,IAAI,KAAK,wBAAiB,EAClC,CAAC;oBACC,OAAO,IAAI,CAAC;gBAChB,CAAC;YACL,CAAC;YAED,OAAO,KAAK,CAAC;QACjB,CAAC;QACD,GAAG,CAAC,GAAY;YACZ,IAAI,IAAA,qBAAa,EAAC,GAAG,EAAE,QAAQ,CAAC,EAAE,CAAC;gBAC/B,OAAO,EAAE,GAAG,GAAG,CAAC,CAAC,iBAAiB;YACtC,CAAC;YAED,MAAM,KAAK,GAAG,IAAA,qBAAa,EAAC,GAAG,EAAE,OAAO,CAAC,CAAC;YAC1C,IAAI,KAAK,EAAE,CAAC;gBACR,OAAO,EAAE,GAAG,IAAI,CAAC,CAAC,kBAAkB;YACxC,CAAC;YAED,OAAO,EAAE,GAAG,EAAE,CAAC,CAAC,gBAAgB;QACpC,CAAC;QACD,QAAQ,EAAE,EAAE,GAAG,IAAI,EAAE,SAAS;KACjC,CAAC;IAEF,OAAO,GAAG,IAAA,YAAK,EAAC,KAAK,IAAI,EAAE,EAAE,OAAO,CAAC,CAAC;IAEtC,MAAM,CAAC,GAAG,CAAC,IAAA,sBAAS,EAAC,OAAO,CAAC,CAAC,CAAC;AACnC,CAAC;AAnCD,kEAmCC"}

package/dist/http/middleware/built-in/swagger.d.ts

@@ -0,0 +1,10 @@
+import type { UIOptions } from '@routup/swagger';
+import type { Router } from 'routup';
+type SwaggerMiddlewareOptions = {
+    documentPath: string;
+    mountPath: string;
+    options?: UIOptions;
+};
+export declare function registerSwaggerMiddleware(router: Router, input?: Partial<SwaggerMiddlewareOptions>): void;
+export {};
+//# sourceMappingURL=swagger.d.ts.map

package/dist/http/middleware/built-in/swagger.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"swagger.d.ts","sourceRoot":"","sources":["../../../../src/http/middleware/built-in/swagger.ts"],"names":[],"mappings":"AAWA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAGjD,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAErC,KAAK,wBAAwB,GAAG;IAC5B,YAAY,EAAE,MAAM,CAAC;IACrB,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,CAAC,EAAE,SAAS,CAAA;CACtB,CAAC;AACF,wBAAgB,yBAAyB,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,OAAO,CAAC,wBAAwB,CAAC,QAyBlG"}

package/dist/http/middleware/built-in/swagger.js

@@ -0,0 +1,43 @@
+"use strict";
+/*
+ * Copyright (c) 2023.
+ * Author Peter Placzek (tada5hi)
+ * For the full copyright and license information,
+ * view the LICENSE file that was distributed with this source code.
+ */
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.registerSwaggerMiddleware = void 0;
+const node_fs_1 = __importDefault(require("node:fs"));
+const node_path_1 = __importDefault(require("node:path"));
+const node_process_1 = __importDefault(require("node:process"));
+const server_kit_1 = require("@authup/server-kit");
+const swagger_1 = require("@routup/swagger");
+const locter_1 = require("locter");
+function registerSwaggerMiddleware(router, input) {
+    input = input || {};
+    const mountPath = input.mountPath || '/docs';
+    let documentPath;
+    if (input.documentPath) {
+        documentPath = node_path_1.default.isAbsolute(input.documentPath) ?
+            input.documentPath :
+            node_path_1.default.join(node_process_1.default.cwd(), input.documentPath);
+    }
+    else {
+        const locatorInfo = (0, locter_1.locateSync)('**/swagger.json');
+        if (!locatorInfo) {
+            return;
+        }
+        documentPath = (0, locter_1.buildFilePath)(locatorInfo);
+    }
+    if (!node_fs_1.default.existsSync(documentPath)) {
+        (0, server_kit_1.useLogger)().warn(`Swagger file ( ${documentPath} ) does not exist.`);
+        return;
+    }
+    const document = (0, locter_1.loadSync)(documentPath);
+    router.use(mountPath, (0, swagger_1.swaggerUI)(document, input.options));
+}
+exports.registerSwaggerMiddleware = registerSwaggerMiddleware;
+//# sourceMappingURL=swagger.js.map

package/dist/http/middleware/built-in/swagger.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"swagger.js","sourceRoot":"","sources":["../../../../src/http/middleware/built-in/swagger.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;;;;;AAEH,sDAAyB;AACzB,0DAA6B;AAC7B,gEAAmC;AACnC,mDAA+C;AAE/C,6CAA4C;AAC5C,mCAA6D;AAQ7D,SAAgB,yBAAyB,CAAC,MAAc,EAAE,KAAyC;IAC/F,KAAK,GAAG,KAAK,IAAI,EAAE,CAAC;IAEpB,MAAM,SAAS,GAAY,KAAK,CAAC,SAAS,IAAI,OAAO,CAAC;IACtD,IAAI,YAAqB,CAAC;IAC1B,IAAI,KAAK,CAAC,YAAY,EAAE,CAAC;QACrB,YAAY,GAAG,mBAAI,CAAC,UAAU,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC;YAChD,KAAK,CAAC,YAAY,CAAC,CAAC;YACpB,mBAAI,CAAC,IAAI,CAAC,sBAAO,CAAC,GAAG,EAAE,EAAE,KAAK,CAAC,YAAY,CAAC,CAAC;IACrD,CAAC;SAAM,CAAC;QACJ,MAAM,WAAW,GAAG,IAAA,mBAAU,EAAC,iBAAiB,CAAC,CAAC;QAClD,IAAI,CAAC,WAAW,EAAE,CAAC;YACf,OAAO;QACX,CAAC;QAED,YAAY,GAAG,IAAA,sBAAa,EAAC,WAAW,CAAC,CAAC;IAC9C,CAAC;IAED,IAAI,CAAC,iBAAE,CAAC,UAAU,CAAC,YAAY,CAAC,EAAE,CAAC;QAC/B,IAAA,sBAAS,GAAE,CAAC,IAAI,CAAC,kBAAkB,YAAY,oBAAoB,CAAC,CAAC;QACrE,OAAO;IACX,CAAC;IAED,MAAM,QAAQ,GAAG,IAAA,iBAAQ,EAAC,YAAY,CAAC,CAAC;IACxC,MAAM,CAAC,GAAG,CAAC,SAAS,EAAE,IAAA,mBAAS,EAAC,QAAQ,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC;AAC9D,CAAC;AAzBD,8DAyBC"}

package/dist/http/middleware/index.d.ts

@@ -0,0 +1,3 @@
+export * from './built-in';
+export * from './module';
+//# sourceMappingURL=index.d.ts.map

package/dist/http/middleware/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/http/middleware/index.ts"],"names":[],"mappings":"AAOA,cAAc,YAAY,CAAC;AAC3B,cAAc,UAAU,CAAC"}

package/dist/http/middleware/index.js

@@ -0,0 +1,25 @@
+"use strict";
+/*
+ * Copyright (c) 2021-2022.
+ * Author Peter Placzek (tada5hi)
+ * For the full copyright and license information,
+ * view the LICENSE file that was distributed with this source code.
+ */
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __exportStar = (this && this.__exportStar) || function(m, exports) {
+    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+__exportStar(require("./built-in"), exports);
+__exportStar(require("./module"), exports);
+//# sourceMappingURL=index.js.map

package/dist/http/middleware/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/http/middleware/index.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;;;;;;;;;;;;;;;AAEH,6CAA2B;AAC3B,2CAAyB"}

package/dist/http/middleware/module.d.ts

@@ -0,0 +1,3 @@
+import type { Router } from 'routup';
+export declare function registerMiddlewares(router: Router): void;
+//# sourceMappingURL=module.d.ts.map

package/dist/http/middleware/module.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"module.d.ts","sourceRoot":"","sources":["../../../src/http/middleware/module.ts"],"names":[],"mappings":"AAQA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAerC,wBAAgB,mBAAmB,CAAC,MAAM,EAAE,MAAM,QAkCjD"}

package/dist/http/middleware/module.js

@@ -0,0 +1,46 @@
+"use strict";
+/*
+ * Copyright (c) 2022-2022.
+ * Author Peter Placzek (tada5hi)
+ * For the full copyright and license information,
+ * view the LICENSE file that was distributed with this source code.
+ */
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.registerMiddlewares = void 0;
+const node_path_1 = __importDefault(require("node:path"));
+const config_1 = require("../../config");
+const built_in_1 = require("./built-in");
+const utils_1 = require("./utils");
+function registerMiddlewares(router) {
+    const config = (0, config_1.useConfig)();
+    (0, built_in_1.registerLoggerMiddleware)(router);
+    const cors = config.middlewareCors;
+    if ((0, utils_1.isBuiltInMiddlewareEnabled)(cors)) {
+        (0, built_in_1.registerCorsMiddleware)(router, (0, utils_1.transformBoolToEmptyObject)(cors));
+    }
+    (0, built_in_1.registerBasicMiddleware)(router);
+    const prometheus = config.middlewarePrometheus;
+    if ((0, utils_1.isBuiltInMiddlewareEnabled)(prometheus)) {
+        (0, built_in_1.registerPrometheusMiddleware)(router, (0, utils_1.transformBoolToEmptyObject)(prometheus));
+    }
+    const rateLimit = config.middlewareRateLimit;
+    if ((0, utils_1.isBuiltInMiddlewareEnabled)(rateLimit)) {
+        (0, built_in_1.registerRateLimitMiddleware)(router, (0, utils_1.transformBoolToEmptyObject)(rateLimit));
+    }
+    const swagger = config.middlewareSwagger;
+    if ((0, utils_1.isBuiltInMiddlewareEnabled)(swagger)) {
+        (0, built_in_1.registerSwaggerMiddleware)(router, {
+            documentPath: node_path_1.default.join(config.writableDirectoryPath, 'swagger.json'),
+            options: {
+                baseUrl: config.publicUrl,
+                ...(0, utils_1.transformBoolToEmptyObject)(swagger),
+            },
+        });
+    }
+    (0, built_in_1.registerAuthMiddleware)(router);
+}
+exports.registerMiddlewares = registerMiddlewares;
+//# sourceMappingURL=module.js.map

package/dist/http/middleware/module.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"module.js","sourceRoot":"","sources":["../../../src/http/middleware/module.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;;;;;AAEH,0DAA6B;AAE7B,yCAAyC;AACzC,yCAOoB;AACpB,mCAGiB;AAEjB,SAAgB,mBAAmB,CAAC,MAAc;IAC9C,MAAM,MAAM,GAAG,IAAA,kBAAS,GAAE,CAAC;IAE3B,IAAA,mCAAwB,EAAC,MAAM,CAAC,CAAC;IAEjC,MAAM,IAAI,GAAG,MAAM,CAAC,cAAc,CAAC;IACnC,IAAI,IAAA,kCAA0B,EAAC,IAAI,CAAC,EAAE,CAAC;QACnC,IAAA,iCAAsB,EAAC,MAAM,EAAE,IAAA,kCAA0B,EAAC,IAAI,CAAC,CAAC,CAAC;IACrE,CAAC;IAED,IAAA,kCAAuB,EAAC,MAAM,CAAC,CAAC;IAEhC,MAAM,UAAU,GAAG,MAAM,CAAC,oBAAoB,CAAC;IAC/C,IAAI,IAAA,kCAA0B,EAAC,UAAU,CAAC,EAAE,CAAC;QACzC,IAAA,uCAA4B,EAAC,MAAM,EAAE,IAAA,kCAA0B,EAAC,UAAU,CAAC,CAAC,CAAC;IACjF,CAAC;IAED,MAAM,SAAS,GAAG,MAAM,CAAC,mBAAmB,CAAC;IAC7C,IAAI,IAAA,kCAA0B,EAAC,SAAS,CAAC,EAAE,CAAC;QACxC,IAAA,sCAA2B,EAAC,MAAM,EAAE,IAAA,kCAA0B,EAAC,SAAS,CAAC,CAAC,CAAC;IAC/E,CAAC;IAED,MAAM,OAAO,GAAG,MAAM,CAAC,iBAAiB,CAAC;IACzC,IAAI,IAAA,kCAA0B,EAAC,OAAO,CAAC,EAAE,CAAC;QACtC,IAAA,oCAAyB,EAAC,MAAM,EAAE;YAC9B,YAAY,EAAE,mBAAI,CAAC,IAAI,CAAC,MAAM,CAAC,qBAAqB,EAAE,cAAc,CAAC;YACrE,OAAO,EAAE;gBACL,OAAO,EAAE,MAAM,CAAC,SAAS;gBACzB,GAAG,IAAA,kCAA0B,EAAC,OAAO,CAAC;aACzC;SACJ,CAAC,CAAC;IACP,CAAC;IAED,IAAA,iCAAsB,EAAC,MAAM,CAAC,CAAC;AACnC,CAAC;AAlCD,kDAkCC"}

package/dist/http/middleware/utils.d.ts

@@ -0,0 +1,3 @@
+export declare function transformBoolToEmptyObject<T extends Record<string, any>>(input?: T | boolean): T | undefined;
+export declare function isBuiltInMiddlewareEnabled<T>(input: T | boolean): boolean;
+//# sourceMappingURL=utils.d.ts.map

package/dist/http/middleware/utils.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"utils.d.ts","sourceRoot":"","sources":["../../../src/http/middleware/utils.ts"],"names":[],"mappings":"AAOA,wBAAgB,0BAA0B,CAAC,CAAC,SAAS,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,EACpE,KAAK,CAAC,EAAE,CAAC,GAAG,OAAO,GACnB,CAAC,GAAG,SAAS,CAMhB;AAED,wBAAgB,0BAA0B,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,GAAG,OAAO,WAE/D"}

package/dist/http/middleware/utils.js

@@ -0,0 +1,21 @@
+"use strict";
+/*
+ * Copyright (c) 2023.
+ * Author Peter Placzek (tada5hi)
+ * For the full copyright and license information,
+ * view the LICENSE file that was distributed with this source code.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.isBuiltInMiddlewareEnabled = exports.transformBoolToEmptyObject = void 0;
+function transformBoolToEmptyObject(input) {
+    if (typeof input === 'boolean') {
+        return {};
+    }
+    return input || {};
+}
+exports.transformBoolToEmptyObject = transformBoolToEmptyObject;
+function isBuiltInMiddlewareEnabled(input) {
+    return typeof input !== 'boolean' || input === true;
+}
+exports.isBuiltInMiddlewareEnabled = isBuiltInMiddlewareEnabled;
+//# sourceMappingURL=utils.js.map

package/dist/http/middleware/utils.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"utils.js","sourceRoot":"","sources":["../../../src/http/middleware/utils.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;;AAEH,SAAgB,0BAA0B,CACtC,KAAmB;IAEnB,IAAI,OAAO,KAAK,KAAK,SAAS,EAAE,CAAC;QAC7B,OAAO,EAAO,CAAC;IACnB,CAAC;IAED,OAAO,KAAK,IAAI,EAAO,CAAC;AAC5B,CAAC;AARD,gEAQC;AAED,SAAgB,0BAA0B,CAAI,KAAkB;IAC5D,OAAO,OAAO,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,IAAI,CAAC;AACxD,CAAC;AAFD,gEAEC"}

package/dist/http/oauth2/authorize/index.d.ts

@@ -0,0 +1,4 @@
+export * from './module';
+export * from './type';
+export * from './validation';
+//# sourceMappingURL=index.d.ts.map

package/dist/http/oauth2/authorize/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/http/oauth2/authorize/index.ts"],"names":[],"mappings":"AAOA,cAAc,UAAU,CAAC;AACzB,cAAc,QAAQ,CAAC;AACvB,cAAc,cAAc,CAAC"}

package/dist/http/oauth2/authorize/index.js

@@ -0,0 +1,26 @@
+"use strict";
+/*
+ * Copyright (c) 2023.
+ * Author Peter Placzek (tada5hi)
+ * For the full copyright and license information,
+ * view the LICENSE file that was distributed with this source code.
+ */
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __exportStar = (this && this.__exportStar) || function(m, exports) {
+    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+__exportStar(require("./module"), exports);
+__exportStar(require("./type"), exports);
+__exportStar(require("./validation"), exports);
+//# sourceMappingURL=index.js.map

package/dist/http/oauth2/authorize/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../src/http/oauth2/authorize/index.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;;;;;;;;;;;;;;;AAEH,2CAAyB;AACzB,yCAAuB;AACvB,+CAA6B"}

package/dist/http/oauth2/authorize/module.d.ts

@@ -0,0 +1,4 @@
+import type { Request } from 'routup';
+import type { AuthorizeRequestOptions, AuthorizeRequestResult } from './type';
+export declare function runOAuth2Authorization(req: Request, options: AuthorizeRequestOptions): Promise<AuthorizeRequestResult>;
+//# sourceMappingURL=module.d.ts.map

package/dist/http/oauth2/authorize/module.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"module.d.ts","sourceRoot":"","sources":["../../../../src/http/oauth2/authorize/module.ts"],"names":[],"mappings":"AAaA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,QAAQ,CAAC;AAgBtC,OAAO,KAAK,EAAE,uBAAuB,EAAE,sBAAsB,EAAE,MAAM,QAAQ,CAAC;AAG9E,wBAAsB,sBAAsB,CACxC,GAAG,EAAE,OAAO,EACZ,OAAO,EAAE,uBAAuB,GAChC,OAAO,CAAC,sBAAsB,CAAC,CAiFlC"}

package/dist/http/oauth2/authorize/module.js

@@ -0,0 +1,78 @@
+"use strict";
+/*
+ * Copyright (c) 2023.
+ * Author Peter Placzek (tada5hi)
+ * For the full copyright and license information,
+ * view the LICENSE file that was distributed with this source code.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.runOAuth2Authorization = void 0;
+const node_crypto_1 = require("node:crypto");
+const core_1 = require("@authup/core");
+const routup_1 = require("routup");
+const typeorm_extension_1 = require("typeorm-extension");
+const domains_1 = require("../../../domains");
+const utils_1 = require("../../utils");
+const token_1 = require("../token");
+const cache_1 = require("../cache");
+const response_1 = require("../response");
+const validation_1 = require("./validation");
+async function runOAuth2Authorization(req, options) {
+    const accessTokenMaxAge = options.accessTokenMaxAge || 7200;
+    const authorizationCodeMaxAge = options.authorizationCodeMaxAge || 300;
+    const idTokenMaxAge = options.idTokenMaxAge || 7200;
+    const result = await (0, validation_1.validateAuthorizeRequest)(req);
+    const responseTypes = (0, response_1.getOauth2AuthorizeResponseTypesByRequest)(req);
+    const output = {
+        redirectUri: result.data.redirect_uri,
+        ...(result.data.state ? { state: result.data.state } : {}),
+    };
+    const { id: realmId, name: realmName } = (0, utils_1.useRequestEnv)(req, 'realm');
+    const dataSource = await (0, typeorm_extension_1.useDataSource)();
+    const repository = dataSource.getRepository(domains_1.OAuth2AuthorizationCodeEntity);
+    const entity = repository.create({
+        content: (0, node_crypto_1.randomBytes)(10).toString('hex'),
+        expires: new Date(Date.now() + (1000 * authorizationCodeMaxAge)).toISOString(),
+        redirect_uri: result.data.redirect_uri,
+        client_id: result.data.client_id,
+        user_id: (0, utils_1.useRequestEnv)(req, 'userId'),
+        realm_id: realmId,
+        scope: result.data.scope,
+    });
+    const key = await (0, domains_1.useKey)({ realm_id: realmId });
+    const tokenBuildContext = {
+        issuer: options.issuer,
+        remoteAddress: (0, routup_1.getRequestIP)(req, { trustProxy: true }),
+        sub: (0, utils_1.useRequestEnv)(req, 'userId'),
+        subKind: core_1.OAuth2SubKind.USER,
+        realmId,
+        realmName,
+        clientId: result.data.client_id,
+        ...(result.data.scope ? { scope: result.data.scope } : {}),
+    };
+    if (responseTypes[core_1.OAuth2AuthorizationResponseType.ID_TOKEN] ||
+        (0, core_1.hasOAuth2OpenIDScope)(entity.scope)) {
+        entity.id_token = await (0, domains_1.signOAuth2TokenWithKey)(await (0, token_1.extendOpenIdTokenPayload)((0, token_1.buildOpenIdTokenPayload)(tokenBuildContext)), key, {
+            keyid: key.id,
+            expiresIn: idTokenMaxAge,
+        });
+        if (responseTypes[core_1.OAuth2AuthorizationResponseType.ID_TOKEN]) {
+            output.idToken = entity.id_token;
+        }
+    }
+    if (responseTypes[core_1.OAuth2AuthorizationResponseType.TOKEN]) {
+        output.accessToken = await (0, domains_1.signOAuth2TokenWithKey)(await (0, token_1.buildOAuth2AccessTokenPayload)(tokenBuildContext), key, {
+            keyid: key.id,
+            expiresIn: accessTokenMaxAge,
+        });
+    }
+    await repository.save(entity);
+    const cache = new cache_1.OAuth2AuthorizationCodeCache();
+    await cache.set(entity);
+    if (responseTypes[core_1.OAuth2AuthorizationResponseType.CODE]) {
+        output.authorizationCode = entity.content;
+    }
+    return output;
+}
+exports.runOAuth2Authorization = runOAuth2Authorization;
+//# sourceMappingURL=module.js.map

package/dist/http/oauth2/authorize/module.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"module.js","sourceRoot":"","sources":["../../../../src/http/oauth2/authorize/module.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;;AAEH,6CAA0C;AAC1C,uCAIsB;AAEtB,mCAAsC;AACtC,yDAAkD;AAClD,8CAAiG;AACjG,uCAA4C;AAK5C,oCAIkB;AAClB,oCAAwD;AACxD,0CAAuE;AAEvE,6CAAwD;AAEjD,KAAK,UAAU,sBAAsB,CACxC,GAAY,EACZ,OAAgC;IAEhC,MAAM,iBAAiB,GAAG,OAAO,CAAC,iBAAiB,IAAI,IAAI,CAAC;IAC5D,MAAM,uBAAuB,GAAG,OAAO,CAAC,uBAAuB,IAAI,GAAG,CAAC;IACvE,MAAM,aAAa,GAAG,OAAO,CAAC,aAAa,IAAI,IAAI,CAAC;IAEpD,MAAM,MAAM,GAAG,MAAM,IAAA,qCAAwB,EAAC,GAAG,CAAC,CAAC;IAEnD,MAAM,aAAa,GAAG,IAAA,mDAAwC,EAAC,GAAG,CAAC,CAAC;IAEpE,MAAM,MAAM,GAA4B;QACpC,WAAW,EAAE,MAAM,CAAC,IAAI,CAAC,YAAY;QACrC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC7D,CAAC;IAEF,MAAM,EAAE,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,GAAG,IAAA,qBAAa,EAAC,GAAG,EAAE,OAAO,CAAC,CAAC;IAErE,MAAM,UAAU,GAAG,MAAM,IAAA,iCAAa,GAAE,CAAC;IACzC,MAAM,UAAU,GAAG,UAAU,CAAC,aAAa,CAAC,uCAA6B,CAAC,CAAC;IAE3E,MAAM,MAAM,GAAG,UAAU,CAAC,MAAM,CAAC;QAC7B,OAAO,EAAE,IAAA,yBAAW,EAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC;QACxC,OAAO,EAAE,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,IAAI,GAAG,uBAAuB,CAAC,CAAC,CAAC,WAAW,EAAE;QAC9E,YAAY,EAAE,MAAM,CAAC,IAAI,CAAC,YAAY;QACtC,SAAS,EAAE,MAAM,CAAC,IAAI,CAAC,SAAS;QAChC,OAAO,EAAE,IAAA,qBAAa,EAAC,GAAG,EAAE,QAAQ,CAAC;QACrC,QAAQ,EAAE,OAAO;QACjB,KAAK,EAAE,MAAM,CAAC,IAAI,CAAC,KAAK;KAC3B,CAAC,CAAC;IAEH,MAAM,GAAG,GAAG,MAAM,IAAA,gBAAM,EAAC,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC,CAAC;IAEhD,MAAM,iBAAiB,GAAmE;QACtF,MAAM,EAAE,OAAO,CAAC,MAAM;QACtB,aAAa,EAAE,IAAA,qBAAY,EAAC,GAAG,EAAE,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC;QACtD,GAAG,EAAE,IAAA,qBAAa,EAAC,GAAG,EAAE,QAAQ,CAAC;QACjC,OAAO,EAAE,oBAAa,CAAC,IAAI;QAC3B,OAAO;QACP,SAAS;QACT,QAAQ,EAAE,MAAM,CAAC,IAAI,CAAC,SAAS;QAC/B,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC7D,CAAC;IAEF,IACI,aAAa,CAAC,sCAA+B,CAAC,QAAQ,CAAC;QACvD,IAAA,2BAAoB,EAAC,MAAM,CAAC,KAAK,CAAC,EACpC,CAAC;QACC,MAAM,CAAC,QAAQ,GAAG,MAAM,IAAA,gCAAsB,EAC1C,MAAM,IAAA,gCAAwB,EAAC,IAAA,+BAAuB,EAAC,iBAAiB,CAAC,CAAC,EAC1E,GAAG,EACH;YACI,KAAK,EAAE,GAAG,CAAC,EAAE;YACb,SAAS,EAAE,aAAa;SAC3B,CACJ,CAAC;QAEF,IAAI,aAAa,CAAC,sCAA+B,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC1D,MAAM,CAAC,OAAO,GAAG,MAAM,CAAC,QAAQ,CAAC;QACrC,CAAC;IACL,CAAC;IAED,IAAI,aAAa,CAAC,sCAA+B,CAAC,KAAK,CAAC,EAAE,CAAC;QACvD,MAAM,CAAC,WAAW,GAAG,MAAM,IAAA,gCAAsB,EAC7C,MAAM,IAAA,qCAA6B,EAAC,iBAAiB,CAAC,EACtD,GAAG,EACH;YACI,KAAK,EAAE,GAAG,CAAC,EAAE;YACb,SAAS,EAAE,iBAAiB;SAC/B,CACJ,CAAC;IACN,CAAC;IAED,MAAM,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAE9B,MAAM,KAAK,GAAG,IAAI,oCAA4B,EAAE,CAAC;IACjD,MAAM,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IAExB,IAAI,aAAa,CAAC,sCAA+B,CAAC,IAAI,CAAC,EAAE,CAAC;QACtD,MAAM,CAAC,iBAAiB,GAAG,MAAM,CAAC,OAAO,CAAC;IAC9C,CAAC;IAED,OAAO,MAAM,CAAC;AAClB,CAAC;AApFD,wDAoFC"}

package/dist/http/oauth2/authorize/type.d.ts

@@ -0,0 +1,14 @@
+export type AuthorizeRequestOptions = {
+    issuer: string;
+    accessTokenMaxAge?: number;
+    authorizationCodeMaxAge?: number;
+    idTokenMaxAge?: number;
+};
+export type AuthorizeRequestResult = {
+    authorizationCode?: string;
+    accessToken?: string;
+    idToken?: string;
+    redirectUri: string;
+    state?: string;
+};
+//# sourceMappingURL=type.d.ts.map

package/dist/http/oauth2/authorize/type.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"type.d.ts","sourceRoot":"","sources":["../../../../src/http/oauth2/authorize/type.ts"],"names":[],"mappings":"AAOA,MAAM,MAAM,uBAAuB,GAAG;IAClC,MAAM,EAAE,MAAM,CAAC;IAEf,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAE3B,uBAAuB,CAAC,EAAE,MAAM,CAAC;IAEjC,aAAa,CAAC,EAAE,MAAM,CAAA;CACzB,CAAC;AAEF,MAAM,MAAM,sBAAsB,GAAG;IACjC,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,OAAO,CAAC,EAAE,MAAM,CAAC;IAEjB,WAAW,EAAE,MAAM,CAAC;IACpB,KAAK,CAAC,EAAE,MAAM,CAAA;CACjB,CAAC"}

package/dist/http/oauth2/authorize/type.js

@@ -0,0 +1,9 @@
+"use strict";
+/*
+ * Copyright (c) 2023.
+ * Author Peter Placzek (tada5hi)
+ * For the full copyright and license information,
+ * view the LICENSE file that was distributed with this source code.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+//# sourceMappingURL=type.js.map

package/dist/http/oauth2/authorize/type.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"type.js","sourceRoot":"","sources":["../../../../src/http/oauth2/authorize/type.ts"],"names":[],"mappings":";AAAA;;;;;GAKG"}

package/dist/http/oauth2/authorize/validation.d.ts

@@ -0,0 +1,9 @@
+import type { OAuth2AuthorizationCodeRequest } from '@authup/core';
+import type { Request } from 'routup';
+import { ClientEntity } from '../../../domains';
+import type { ExpressValidationResult } from '../../validation';
+export declare function validateAuthorizeRequest(req: Request): Promise<ExpressValidationResult<OAuth2AuthorizationCodeRequest & {
+    client: ClientEntity;
+    client_id: string;
+}>>;
+//# sourceMappingURL=validation.d.ts.map

package/dist/http/oauth2/authorize/validation.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"validation.d.ts","sourceRoot":"","sources":["../../../../src/http/oauth2/authorize/validation.ts"],"names":[],"mappings":"AAQA,OAAO,KAAK,EAAE,8BAA8B,EAAE,MAAM,cAAc,CAAC;AAOnE,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,QAAQ,CAAC;AAEtC,OAAO,EAAE,YAAY,EAAqB,MAAM,kBAAkB,CAAC;AACnE,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,kBAAkB,CAAC;AAQhE,wBAAsB,wBAAwB,CAC1C,GAAG,EAAE,OAAO,GACZ,OAAO,CAAC,uBAAuB,CAAC,8BAA8B,GAAG;IAAE,MAAM,EAAE,YAAY,CAAC;IAAC,SAAS,EAAE,MAAM,CAAA;CAAE,CAAC,CAAC,CA8FjH"}

package/dist/http/oauth2/authorize/validation.js

@@ -0,0 +1,93 @@
+"use strict";
+/*
+ * Copyright (c) 2022-2023.
+ * Author Peter Placzek (tada5hi)
+ * For the full copyright and license information,
+ * view the LICENSE file that was distributed with this source code.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.validateAuthorizeRequest = void 0;
+const express_validator_1 = require("express-validator");
+const core_1 = require("@authup/core");
+const http_1 = require("@ebec/http");
+const typeorm_extension_1 = require("typeorm-extension");
+const domains_1 = require("../../../domains");
+const validation_1 = require("../../validation");
+async function validateAuthorizeRequest(req) {
+    const result = (0, validation_1.initExpressValidationResult)();
+    await (0, express_validator_1.check)('response_type')
+        .exists()
+        .isString()
+        .notEmpty()
+        .custom((value) => {
+        const availableResponseTypes = Object.values(core_1.OAuth2AuthorizationResponseType);
+        const responseTypes = value.split(' ');
+        for (let i = 0; i < responseTypes.length; i++) {
+            if (availableResponseTypes.indexOf(responseTypes[i]) === -1) {
+                throw core_1.TokenError.responseTypeUnsupported();
+            }
+        }
+        return true;
+    })
+        .run(req);
+    await (0, express_validator_1.check)('redirect_uri')
+        .exists()
+        .notEmpty()
+        .isURL()
+        .isLength({ min: 3, max: 2000 })
+        .run(req);
+    await (0, express_validator_1.check)('scope')
+        .exists()
+        .notEmpty()
+        .isString()
+        .isLength({ min: 3, max: 512 })
+        .run(req);
+    await (0, express_validator_1.check)('state')
+        .exists()
+        .notEmpty()
+        .isString()
+        .isLength({ min: 5, max: 2048 })
+        .optional({ nullable: true })
+        .run(req);
+    await (0, express_validator_1.check)('client_id')
+        .exists()
+        .notEmpty()
+        .isString()
+        .isUUID()
+        .run(req);
+    // ----------------------------------------------
+    const validation = (0, express_validator_1.validationResult)(req);
+    if (!validation.isEmpty()) {
+        throw new validation_1.RequestValidationError(validation);
+    }
+    result.data = (0, validation_1.matchedValidationData)(req, { includeOptionals: true });
+    // ----------------------------------------------
+    await (0, validation_1.extendExpressValidationResultWithRelation)(result, domains_1.ClientEntity, {
+        id: 'client_id',
+        entity: 'client',
+    });
+    if (result.relation.client) {
+        const dataSource = await (0, typeorm_extension_1.useDataSource)();
+        const clientScopeRepository = dataSource.getRepository(domains_1.ClientScopeEntity);
+        const clientScopes = await clientScopeRepository.find({
+            where: {
+                client_id: result.data.client_id,
+            },
+            relations: {
+                scope: true,
+            },
+        });
+        const scopeNames = clientScopes.map((clientScope) => clientScope.scope.name);
+        if (result.data.scope) {
+            if (!(0, core_1.isOAuth2ScopeAllowed)(scopeNames, result.data.scope)) {
+                throw new http_1.BadRequestError('The requested scope is not covered by the client scope.');
+            }
+        }
+        if (!result.data.scope) {
+            result.data.scope = scopeNames.join(' ');
+        }
+    }
+    return result;
+}
+exports.validateAuthorizeRequest = validateAuthorizeRequest;
+//# sourceMappingURL=validation.js.map

package/dist/http/oauth2/authorize/validation.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"validation.js","sourceRoot":"","sources":["../../../../src/http/oauth2/authorize/validation.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;;AAEH,yDAA4D;AAE5D,uCAIsB;AACtB,qCAA6C;AAE7C,yDAAkD;AAClD,8CAAmE;AAEnE,iDAK0B;AAEnB,KAAK,UAAU,wBAAwB,CAC1C,GAAY;IAEZ,MAAM,MAAM,GAEP,IAAA,wCAA2B,GAAE,CAAC;IAEnC,MAAM,IAAA,yBAAK,EAAC,eAAe,CAAC;SACvB,MAAM,EAAE;SACR,QAAQ,EAAE;SACV,QAAQ,EAAE;SACV,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE;QACd,MAAM,sBAAsB,GAAG,MAAM,CAAC,MAAM,CAAC,sCAA+B,CAAC,CAAC;QAC9E,MAAM,aAAa,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAEvC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,aAAa,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YAC5C,IAAI,sBAAsB,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC;gBAC1D,MAAM,iBAAU,CAAC,uBAAuB,EAAE,CAAC;YAC/C,CAAC;QACL,CAAC;QAED,OAAO,IAAI,CAAC;IAChB,CAAC,CAAC;SACD,GAAG,CAAC,GAAG,CAAC,CAAC;IAEd,MAAM,IAAA,yBAAK,EAAC,cAAc,CAAC;SACtB,MAAM,EAAE;SACR,QAAQ,EAAE;SACV,KAAK,EAAE;SACP,QAAQ,CAAC,EAAE,GAAG,EAAE,CAAC,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC;SAC/B,GAAG,CAAC,GAAG,CAAC,CAAC;IAEd,MAAM,IAAA,yBAAK,EAAC,OAAO,CAAC;SACf,MAAM,EAAE;SACR,QAAQ,EAAE;SACV,QAAQ,EAAE;SACV,QAAQ,CAAC,EAAE,GAAG,EAAE,CAAC,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC;SAC9B,GAAG,CAAC,GAAG,CAAC,CAAC;IAEd,MAAM,IAAA,yBAAK,EAAC,OAAO,CAAC;SACf,MAAM,EAAE;SACR,QAAQ,EAAE;SACV,QAAQ,EAAE;SACV,QAAQ,CAAC,EAAE,GAAG,EAAE,CAAC,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC;SAC/B,QAAQ,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;SAC5B,GAAG,CAAC,GAAG,CAAC,CAAC;IAEd,MAAM,IAAA,yBAAK,EAAC,WAAW,CAAC;SACnB,MAAM,EAAE;SACR,QAAQ,EAAE;SACV,QAAQ,EAAE;SACV,MAAM,EAAE;SACR,GAAG,CAAC,GAAG,CAAC,CAAC;IAEd,iDAAiD;IAEjD,MAAM,UAAU,GAAG,IAAA,oCAAgB,EAAC,GAAG,CAAC,CAAC;IACzC,IAAI,CAAC,UAAU,CAAC,OAAO,EAAE,EAAE,CAAC;QACxB,MAAM,IAAI,mCAAsB,CAAC,UAAU,CAAC,CAAC;IACjD,CAAC;IAED,MAAM,CAAC,IAAI,GAAG,IAAA,kCAAqB,EAAC,GAAG,EAAE,EAAE,gBAAgB,EAAE,IAAI,EAAE,CAAC,CAAC;IAErE,iDAAiD;IAEjD,MAAM,IAAA,sDAAyC,EAAC,MAAM,EAAE,sBAAY,EAAE;QAClE,EAAE,EAAE,WAAW;QACf,MAAM,EAAE,QAAQ;KACnB,CAAC,CAAC;IAEH,IAAI,MAAM,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC;QACzB,MAAM,UAAU,GAAG,MAAM,IAAA,iCAAa,GAAE,CAAC;QACzC,MAAM,qBAAqB,GAAG,UAAU,CAAC,aAAa,CAAC,2BAAiB,CAAC,CAAC;QAC1E,MAAM,YAAY,GAAG,MAAM,qBAAqB,CAAC,IAAI,CAAC;YAClD,KAAK,EAAE;gBACH,SAAS,EAAE,MAAM,CAAC,IAAI,CAAC,SAAS;aACnC;YACD,SAAS,EAAE;gBACP,KAAK,EAAE,IAAI;aACd;SACJ,CAAC,CAAC;QAEH,MAAM,UAAU,GAAG,YAAY,CAAC,GAAG,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC,WAAW,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAE7E,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC;YACpB,IAAI,CAAC,IAAA,2BAAoB,EAAC,UAAU,EAAE,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;gBACvD,MAAM,IAAI,sBAAe,CAAC,yDAAyD,CAAC,CAAC;YACzF,CAAC;QACL,CAAC;QAED,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC;YACrB,MAAM,CAAC,IAAI,CAAC,KAAK,GAAG,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC7C,CAAC;IACL,CAAC;IAED,OAAO,MAAM,CAAC;AAClB,CAAC;AAhGD,4DAgGC"}

package/dist/http/oauth2/cache/abstract.d.ts

@@ -0,0 +1,18 @@
+import { Cache } from 'redis-extension';
+export declare abstract class OAuth2AbstractCache<T extends Record<string, any> & {
+    id: string;
+    expires?: Date | string | number;
+}> {
+    protected prefix: string;
+    protected driver: Cache<T['id'], T> | undefined;
+    protected constructor(prefix: string);
+    set(entity: T): Promise<void>;
+    drop(id: T['id']): Promise<void>;
+    get(id: T['id']): Promise<T>;
+    protected isExpired(entity: T): Promise<boolean>;
+    protected useDriver(): Promise<Cache<T['id'], T> | undefined>;
+    protected toDate(input: string | number | Date): Date;
+    abstract loadDBEntity(id: T['id']): Promise<T>;
+    abstract deleteDBEntity(id: T['id']): Promise<void>;
+}
+//# sourceMappingURL=abstract.d.ts.map

package/dist/http/oauth2/cache/abstract.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"abstract.d.ts","sourceRoot":"","sources":["../../../../src/http/oauth2/cache/abstract.ts"],"names":[],"mappings":"AAQA,OAAO,EACH,KAAK,EACR,MAAM,iBAAiB,CAAC;AAGzB,8BAAsB,mBAAmB,CACrC,CAAC,SAAS,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,GAAG;IAAE,EAAE,EAAE,MAAM,CAAC;IAAC,OAAO,CAAC,EAAE,IAAI,GAAG,MAAM,GAAG,MAAM,CAAA;CAAE;IAEhF,SAAS,CAAC,MAAM,EAAE,MAAM,CAAC;IAEzB,SAAS,CAAC,MAAM,EAAG,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,GAAG,SAAS,CAAC;IAEjD,SAAS,aAAa,MAAM,EAAE,MAAM;IAI9B,GAAG,CAAC,MAAM,EAAE,CAAC,GAAI,OAAO,CAAC,IAAI,CAAC;IAgB9B,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,GAAI,OAAO,CAAC,IAAI,CAAC;IAWjC,GAAG,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,GAAI,OAAO,CAAC,CAAC,CAAC;cA8BnB,SAAS,CAAC,MAAM,EAAE,CAAC,GAAI,OAAO,CAAC,OAAO,CAAC;cAkBvC,SAAS,IAAK,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,GAAG,SAAS,CAAC;IAgBpE,SAAS,CAAC,MAAM,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,GAAI,IAAI;IAQtD,QAAQ,CAAC,YAAY,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,GAAI,OAAO,CAAC,CAAC,CAAC;IAE/C,QAAQ,CAAC,cAAc,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,GAAI,OAAO,CAAC,IAAI,CAAC;CACvD"}