@authup/server-core 1.0.0-beta.0 → 1.0.0-beta.10

package/dist/database/utils/index.js

@@ -23,4 +23,5 @@ Object.defineProperty(exports, "__esModule", { value: true });
 __exportStar(require("./data-source-options"), exports);
 __exportStar(require("./entities"), exports);
 __exportStar(require("./subscribers"), exports);
+__exportStar(require("./uniqueness"), exports);
 //# sourceMappingURL=index.js.map

package/dist/database/utils/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/database/utils/index.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;;;;;;;;;;;;;;;AAEH,wDAAsC;AACtC,6CAA2B;AAC3B,gDAA8B"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/database/utils/index.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;;;;;;;;;;;;;;;AAEH,wDAAsC;AACtC,6CAA2B;AAC3B,gDAA8B;AAC9B,+CAA6B"}

package/dist/database/utils/uniqueness.d.ts

@@ -0,0 +1,3 @@
+import type { EntityTarget } from 'typeorm';
+export declare function enforceUniquenessForDatabaseEntity<T = any>(clazz: EntityTarget<T>, data: Partial<T>): Promise<void>;
+//# sourceMappingURL=uniqueness.d.ts.map

package/dist/database/utils/uniqueness.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"uniqueness.d.ts","sourceRoot":"","sources":["../../../src/database/utils/uniqueness.ts"],"names":[],"mappings":"AAQA,OAAO,KAAK,EAAkB,YAAY,EAAE,MAAM,SAAS,CAAC;AAI5D,wBAAsB,kCAAkC,CAAC,CAAC,GAAG,GAAG,EAC5D,KAAK,EAAE,YAAY,CAAC,CAAC,CAAC,EACtB,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC,GAChB,OAAO,CAAC,IAAI,CAAC,CAmChB"}

package/dist/database/utils/uniqueness.js

@@ -0,0 +1,39 @@
+"use strict";
+/*
+ * Copyright (c) 2024.
+ * Author Peter Placzek (tada5hi)
+ * For the full copyright and license information,
+ * view the LICENSE file that was distributed with this source code.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.enforceUniquenessForDatabaseEntity = void 0;
+const http_1 = require("@ebec/http");
+const typeorm_extension_1 = require("typeorm-extension");
+async function enforceUniquenessForDatabaseEntity(clazz, data) {
+    const dataSource = await (0, typeorm_extension_1.useDataSource)();
+    if (dataSource.options.type !== 'sqlite' &&
+        dataSource.options.type !== 'better-sqlite3') {
+        return;
+    }
+    const index = dataSource.entityMetadatas.findIndex((entityMetadata) => entityMetadata.target === clazz);
+    if (index === -1) {
+        return;
+    }
+    const metadata = dataSource.entityMetadatas[index];
+    const repository = dataSource.getRepository(metadata.target);
+    let uniqueMetadata;
+    for (let i = 0; i < metadata.ownUniques.length; i++) {
+        uniqueMetadata = metadata.ownUniques[i];
+        const columnNames = uniqueMetadata.columns.map((column) => column.propertyName);
+        const whereClause = {};
+        for (let j = 0; j < columnNames.length; j++) {
+            whereClause[columnNames[j]] = data[columnNames[j]];
+        }
+        const entity = await repository.findOneBy(whereClause);
+        if (entity) {
+            throw new http_1.ConflictError('An entry with some unique attributes already exist.');
+        }
+    }
+}
+exports.enforceUniquenessForDatabaseEntity = enforceUniquenessForDatabaseEntity;
+//# sourceMappingURL=uniqueness.js.map

package/dist/database/utils/uniqueness.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"uniqueness.js","sourceRoot":"","sources":["../../../src/database/utils/uniqueness.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;;AAEH,qCAA2C;AAE3C,yDAAkD;AAG3C,KAAK,UAAU,kCAAkC,CACpD,KAAsB,EACtB,IAAgB;IAEhB,MAAM,UAAU,GAAG,MAAM,IAAA,iCAAa,GAAE,CAAC;IACzC,IACI,UAAU,CAAC,OAAO,CAAC,IAAI,KAAK,QAAQ;QACpC,UAAU,CAAC,OAAO,CAAC,IAAI,KAAK,gBAAgB,EAC9C,CAAC;QACC,OAAO;IACX,CAAC;IAED,MAAM,KAAK,GAAG,UAAU,CAAC,eAAe,CAAC,SAAS,CAC9C,CAAC,cAAc,EAAE,EAAE,CAAC,cAAc,CAAC,MAAM,KAAK,KAAK,CACtD,CAAC;IAEF,IAAI,KAAK,KAAK,CAAC,CAAC,EAAE,CAAC;QACf,OAAO;IACX,CAAC;IAED,MAAM,QAAQ,GAAmB,UAAU,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC;IACnE,MAAM,UAAU,GAAG,UAAU,CAAC,aAAa,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IAE7D,IAAI,cAA+B,CAAC;IACpC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,QAAQ,CAAC,UAAU,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QAClD,cAAc,GAAG,QAAQ,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;QAExC,MAAM,WAAW,GAAG,cAAc,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;QAChF,MAAM,WAAW,GAAyB,EAAE,CAAC;QAC7C,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,WAAW,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YAC1C,WAAW,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC;QACvD,CAAC;QAED,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,SAAS,CAAC,WAAW,CAAC,CAAC;QACvD,IAAI,MAAM,EAAE,CAAC;YACT,MAAM,IAAI,oBAAa,CAAC,qDAAqD,CAAC,CAAC;QACnF,CAAC;IACL,CAAC;AACL,CAAC;AAtCD,gFAsCC"}

package/dist/domains/authorization-code/entity.d.ts

@@ -1,4 +1,4 @@
-import type { Client, OAuth2AuthorizationCode, Realm, Robot, User } from '@authup/core';
+import type { Client, OAuth2AuthorizationCode, Realm, Robot, User } from '@authup/core-kit';
 import { UserEntity } from '../user';
 import { RobotEntity } from '../robot';
 import { RealmEntity } from '../realm';

package/dist/domains/authorization-code/entity.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"entity.d.ts","sourceRoot":"","sources":["../../../src/domains/authorization-code/entity.ts"],"names":[],"mappings":"AAUA,OAAO,KAAK,EACR,MAAM,EAAE,uBAAuB,EAAE,KAAK,EAAE,KAAK,EAC7C,IAAI,EACP,MAAM,cAAc,CAAC;AACtB,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACrC,OAAO,EAAE,WAAW,EAAE,MAAM,UAAU,CAAC;AAEvC,OAAO,EAAE,WAAW,EAAE,MAAM,UAAU,CAAC;AAEvC,qBACa,6BAA8B,YAAW,uBAAuB;IAErE,EAAE,EAAE,MAAM,CAAC;IAOX,OAAO,EAAE,MAAM,CAAC;IAMhB,OAAO,EAAE,MAAM,CAAC;IAKhB,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IAKrB,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IAO5B,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IAKxB,SAAS,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;IAI/B,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IAGtB,OAAO,EAAE,IAAI,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;IAI3B,IAAI,EAAE,UAAU,GAAG,IAAI,CAAC;IAGxB,QAAQ,EAAE,KAAK,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;IAI7B,KAAK,EAAE,WAAW,GAAG,IAAI,CAAC;IAG1B,QAAQ,EAAE,KAAK,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;IAI7B,KAAK,EAAE,WAAW,CAAC;CAC1B"}
+{"version":3,"file":"entity.d.ts","sourceRoot":"","sources":["../../../src/domains/authorization-code/entity.ts"],"names":[],"mappings":"AAUA,OAAO,KAAK,EACR,MAAM,EAAE,uBAAuB,EAAE,KAAK,EAAE,KAAK,EAC7C,IAAI,EACP,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACrC,OAAO,EAAE,WAAW,EAAE,MAAM,UAAU,CAAC;AAEvC,OAAO,EAAE,WAAW,EAAE,MAAM,UAAU,CAAC;AAEvC,qBACa,6BAA8B,YAAW,uBAAuB;IAErE,EAAE,EAAE,MAAM,CAAC;IAOX,OAAO,EAAE,MAAM,CAAC;IAMhB,OAAO,EAAE,MAAM,CAAC;IAKhB,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IAKrB,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IAO5B,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IAKxB,SAAS,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;IAI/B,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IAGtB,OAAO,EAAE,IAAI,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;IAI3B,IAAI,EAAE,UAAU,GAAG,IAAI,CAAC;IAGxB,QAAQ,EAAE,KAAK,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;IAI7B,KAAK,EAAE,WAAW,GAAG,IAAI,CAAC;IAG1B,QAAQ,EAAE,KAAK,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;IAI7B,KAAK,EAAE,WAAW,CAAC;CAC1B"}

package/dist/domains/client/entity.d.ts

@@ -1,4 +1,4 @@
-import type { Client, Realm, User } from '@authup/core';
+import type { Client, Realm, User } from '@authup/core-kit';
 import { UserEntity } from '../user';
 import { RealmEntity } from '../realm';
 export declare class ClientEntity implements Client {

package/dist/domains/client/entity.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"entity.d.ts","sourceRoot":"","sources":["../../../src/domains/client/entity.ts"],"names":[],"mappings":"AAiBA,OAAO,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,cAAc,CAAC;AACxD,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACrC,OAAO,EAAE,WAAW,EAAE,MAAM,UAAU,CAAC;AAEvC,qBAEa,YAAa,YAAW,MAAM;IAEnC,EAAE,EAAE,MAAM,CAAC;IAMX,IAAI,EAAE,MAAM,CAAC;IAMb,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAQ3B,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IAMtB,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IAO5B,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAQ3B,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IAOrB,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IAOxB,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IAMxB,eAAe,EAAE,OAAO,CAAC;IAKzB,UAAU,EAAE,IAAI,CAAC;IAGjB,UAAU,EAAE,IAAI,CAAC;IAKjB,QAAQ,EAAE,KAAK,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;IAI7B,KAAK,EAAE,WAAW,GAAG,IAAI,CAAC;IAG1B,OAAO,EAAE,IAAI,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;IAI3B,IAAI,EAAE,UAAU,GAAG,IAAI,CAAC;CAC/B"}
+{"version":3,"file":"entity.d.ts","sourceRoot":"","sources":["../../../src/domains/client/entity.ts"],"names":[],"mappings":"AAiBA,OAAO,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAC;AAC5D,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACrC,OAAO,EAAE,WAAW,EAAE,MAAM,UAAU,CAAC;AAEvC,qBAEa,YAAa,YAAW,MAAM;IAEnC,EAAE,EAAE,MAAM,CAAC;IAMX,IAAI,EAAE,MAAM,CAAC;IAMb,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAQ3B,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IAMtB,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IAO5B,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAQ3B,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IAOrB,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IAOxB,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IAMxB,eAAe,EAAE,OAAO,CAAC;IAKzB,UAAU,EAAE,IAAI,CAAC;IAGjB,UAAU,EAAE,IAAI,CAAC;IAKjB,QAAQ,EAAE,KAAK,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;IAI7B,KAAK,EAAE,WAAW,GAAG,IAAI,CAAC;IAG1B,OAAO,EAAE,IAAI,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;IAI3B,IAAI,EAAE,UAAU,GAAG,IAAI,CAAC;CAC/B"}

package/dist/domains/client/repository.d.ts

@@ -1,14 +1,15 @@
 import type { DataSource, EntityManager } from 'typeorm';
 import { Repository } from 'typeorm';
 import { ClientEntity } from './entity';
-export declare class OAuth2ClientRepository extends Repository<ClientEntity> {
+export declare class ClientRepository extends Repository<ClientEntity> {
     constructor(instance: DataSource | EntityManager);
     /**
      * Verify a client by id and secret.
      *
-     * @param id
+     * @param idOrName
      * @param secret
+     * @param realmId
      */
-    verifyCredentials(id: string, secret: string): Promise<ClientEntity | undefined>;
+    verifyCredentials(idOrName: string, secret: string, realmId?: string): Promise<ClientEntity | undefined>;
 }
 //# sourceMappingURL=repository.d.ts.map

package/dist/domains/client/repository.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"repository.d.ts","sourceRoot":"","sources":["../../../src/domains/client/repository.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,UAAU,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AACzD,OAAO,EAAmB,UAAU,EAAE,MAAM,SAAS,CAAC;AACtD,OAAO,EAAE,YAAY,EAAE,MAAM,UAAU,CAAC;AAExC,qBAAa,sBAAuB,SAAQ,UAAU,CAAC,YAAY,CAAC;gBACpD,QAAQ,EAAE,UAAU,GAAG,aAAa;IAIhD;;;;;OAKG;IACG,iBAAiB,CAAC,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAI,OAAO,CAAC,YAAY,GAAG,SAAS,CAAC;CAoB1F"}
+{"version":3,"file":"repository.d.ts","sourceRoot":"","sources":["../../../src/domains/client/repository.ts"],"names":[],"mappings":"AAQA,OAAO,KAAK,EAAE,UAAU,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AACzD,OAAO,EAAmB,UAAU,EAAE,MAAM,SAAS,CAAC;AACtD,OAAO,EAAE,YAAY,EAAE,MAAM,UAAU,CAAC;AAExC,qBAAa,gBAAiB,SAAQ,UAAU,CAAC,YAAY,CAAC;gBAC9C,QAAQ,EAAE,UAAU,GAAG,aAAa;IAIhD;;;;;;OAMG;IACG,iBAAiB,CACnB,QAAQ,EAAE,MAAM,EAChB,MAAM,EAAE,MAAM,EACd,OAAO,CAAC,EAAE,MAAM,GAChB,OAAO,CAAC,YAAY,GAAG,SAAS,CAAC;CA8BxC"}

package/dist/domains/client/repository.js

@@ -6,34 +6,46 @@
  * view the LICENSE file that was distributed with this source code.
  */
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.OAuth2ClientRepository = void 0;
+exports.ClientRepository = void 0;
+const kit_1 = require("@authup/kit");
 const typeorm_1 = require("typeorm");
 const entity_1 = require("./entity");
-class OAuth2ClientRepository extends typeorm_1.Repository {
+class ClientRepository extends typeorm_1.Repository {
     constructor(instance) {
         super(entity_1.ClientEntity, typeorm_1.InstanceChecker.isDataSource(instance) ? instance.manager : instance);
     }
     /**
      * Verify a client by id and secret.
      *
-     * @param id
+     * @param idOrName
      * @param secret
+     * @param realmId
      */
-    async verifyCredentials(id, secret) {
-        const entity = await this.createQueryBuilder('client')
-            .addSelect('client.secret')
-            .where('client.id = :id', { id })
-            .leftJoinAndSelect('client.realm', 'realm')
-            .getOne();
-        if (!entity ||
-            !entity.secret) {
-            return undefined;
+    async verifyCredentials(idOrName, secret, realmId) {
+        const query = this.createQueryBuilder('client')
+            .leftJoinAndSelect('client.realm', 'realm');
+        if ((0, kit_1.isUUID)(idOrName)) {
+            query.where('client.id = :id', { id: idOrName });
+        }
+        else {
+            query.where('client.name LIKE :name', { name: idOrName });
+            if (realmId) {
+                query.andWhere('client.realm_id = :realmId', { realmId });
+            }
         }
-        if (secret !== entity.secret) {
-            return undefined;
+        const entities = await query
+            .addSelect('client.secret')
+            .getMany();
+        for (let i = 0; i < entities.length; i++) {
+            if (!entities[i].secret) {
+                continue;
+            }
+            if (secret === entities[i].secret) {
+                return entities[i];
+            }
         }
-        return entity;
+        return undefined;
     }
 }
-exports.OAuth2ClientRepository = OAuth2ClientRepository;
+exports.ClientRepository = ClientRepository;
 //# sourceMappingURL=repository.js.map

package/dist/domains/client/repository.js.map

@@ -1 +1 @@
-{"version":3,"file":"repository.js","sourceRoot":"","sources":["../../../src/domains/client/repository.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;;AAGH,qCAAsD;AACtD,qCAAwC;AAExC,MAAa,sBAAuB,SAAQ,oBAAwB;IAChE,YAAY,QAAoC;QAC5C,KAAK,CAAC,qBAAY,EAAE,yBAAe,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC;IAC9F,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,iBAAiB,CAAC,EAAU,EAAE,MAAc;QAC9C,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,kBAAkB,CAAC,QAAQ,CAAC;aACjD,SAAS,CAAC,eAAe,CAAC;aAC1B,KAAK,CAAC,iBAAiB,EAAE,EAAE,EAAE,EAAE,CAAC;aAChC,iBAAiB,CAAC,cAAc,EAAE,OAAO,CAAC;aAC1C,MAAM,EAAE,CAAC;QAEd,IACI,CAAC,MAAM;YACP,CAAC,MAAM,CAAC,MAAM,EAChB,CAAC;YACC,OAAO,SAAS,CAAC;QACrB,CAAC;QAED,IAAI,MAAM,KAAK,MAAM,CAAC,MAAM,EAAE,CAAC;YAC3B,OAAO,SAAS,CAAC;QACrB,CAAC;QAED,OAAO,MAAM,CAAC;IAClB,CAAC;CACJ;AA/BD,wDA+BC"}
+{"version":3,"file":"repository.js","sourceRoot":"","sources":["../../../src/domains/client/repository.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;;AAEH,qCAAqC;AAErC,qCAAsD;AACtD,qCAAwC;AAExC,MAAa,gBAAiB,SAAQ,oBAAwB;IAC1D,YAAY,QAAoC;QAC5C,KAAK,CAAC,qBAAY,EAAE,yBAAe,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC;IAC9F,CAAC;IAED;;;;;;OAMG;IACH,KAAK,CAAC,iBAAiB,CACnB,QAAgB,EAChB,MAAc,EACd,OAAgB;QAEhB,MAAM,KAAK,GAAG,IAAI,CAAC,kBAAkB,CAAC,QAAQ,CAAC;aAC1C,iBAAiB,CAAC,cAAc,EAAE,OAAO,CAAC,CAAC;QAEhD,IAAI,IAAA,YAAM,EAAC,QAAQ,CAAC,EAAE,CAAC;YACnB,KAAK,CAAC,KAAK,CAAC,iBAAiB,EAAE,EAAE,EAAE,EAAE,QAAQ,EAAE,CAAC,CAAC;QACrD,CAAC;aAAM,CAAC;YACJ,KAAK,CAAC,KAAK,CAAC,wBAAwB,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC;YAE1D,IAAI,OAAO,EAAE,CAAC;gBACV,KAAK,CAAC,QAAQ,CAAC,4BAA4B,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC;YAC9D,CAAC;QACL,CAAC;QAED,MAAM,QAAQ,GAAG,MAAM,KAAK;aACvB,SAAS,CAAC,eAAe,CAAC;aAC1B,OAAO,EAAE,CAAC;QAEf,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,QAAQ,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YACvC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;gBACtB,SAAS;YACb,CAAC;YAED,IAAI,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;gBAChC,OAAO,QAAQ,CAAC,CAAC,CAAC,CAAC;YACvB,CAAC;QACL,CAAC;QAED,OAAO,SAAS,CAAC;IACrB,CAAC;CACJ;AA9CD,4CA8CC"}

package/dist/domains/client-scope/entity.d.ts

@@ -1,5 +1,5 @@
-import type { ClientScope } from '@authup/core';
-import { Client, Scope } from '@authup/core';
+import type { ClientScope } from '@authup/core-kit';
+import { Client, Scope } from '@authup/core-kit';
 export declare class ClientScopeEntity implements ClientScope {
     id: string;
     default: boolean;

package/dist/domains/client-scope/entity.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"entity.d.ts","sourceRoot":"","sources":["../../../src/domains/client-scope/entity.ts"],"names":[],"mappings":"AAiBA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAChD,OAAO,EACH,MAAM,EACN,KAAK,EACR,MAAM,cAAc,CAAC;AAItB,qBAEa,iBAAkB,YAAW,WAAW;IAE7C,EAAE,EAAE,MAAM,CAAC;IAGX,OAAO,EAAE,OAAO,CAAC;IAKjB,UAAU,EAAE,IAAI,CAAC;IAGjB,UAAU,EAAE,IAAI,CAAC;IAKjB,SAAS,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC;IAIxB,MAAM,EAAE,MAAM,CAAC;IAGf,QAAQ,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;IAItB,KAAK,EAAE,KAAK,CAAC;CACpB"}
+{"version":3,"file":"entity.d.ts","sourceRoot":"","sources":["../../../src/domains/client-scope/entity.ts"],"names":[],"mappings":"AAiBA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AACpD,OAAO,EACH,MAAM,EACN,KAAK,EACR,MAAM,kBAAkB,CAAC;AAI1B,qBAEa,iBAAkB,YAAW,WAAW;IAE7C,EAAE,EAAE,MAAM,CAAC;IAGX,OAAO,EAAE,OAAO,CAAC;IAKjB,UAAU,EAAE,IAAI,CAAC;IAGjB,UAAU,EAAE,IAAI,CAAC;IAKjB,SAAS,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC;IAIxB,MAAM,EAAE,MAAM,CAAC;IAGf,QAAQ,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;IAItB,KAAK,EAAE,KAAK,CAAC;CACpB"}

package/dist/{database → domains}/constants.d.ts

@@ -1,7 +1,12 @@
 export declare enum CachePrefix {
+    IDENTITY_PROVIDER = "identity_provider",
+    IDENTITY_PROVIDER_ACCOUNT = "identity_provider_account",
+    IDENTITY_PROVIDER_ATTRIBUTE = "identity_provider_attribute",
+    IDENTITY_PROVIDER_ROLE = "identity_provider_role",
     OAUTH2_AUTHORIZATION_CODE = "oauth2_authorization_code",
     OAUTH2_REFRESH_TOKEN = "oauth2_refresh_token",
     CLIENT = "client",
+    CLIENT_SCOPE = "client_scope",
     USER = "user",
     USER_OWNED_ATTRIBUTES = "user_owned_attributes",
     USER_OWNED_PERMISSIONS = "user_owned_permissions",

package/dist/domains/constants.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"constants.d.ts","sourceRoot":"","sources":["../../src/domains/constants.ts"],"names":[],"mappings":"AAOA,oBAAY,WAAW;IACnB,iBAAiB,sBAAsB;IACvC,yBAAyB,8BAA8B;IACvD,2BAA2B,gCAAgC;IAC3D,sBAAsB,2BAA2B;IAEjD,yBAAyB,8BAA8B;IACvD,oBAAoB,yBAAyB;IAE7C,MAAM,WAAW;IACjB,YAAY,iBAAiB;IAE7B,IAAI,SAAS;IACb,qBAAqB,0BAA0B;IAC/C,sBAAsB,2BAA2B;IACjD,gBAAgB,qBAAqB;IAErC,GAAG,QAAQ;IAEX,KAAK,UAAU;IAEf,KAAK,UAAU;IACf,uBAAuB,4BAA4B;IACnD,iBAAiB,sBAAsB;IAEvC,IAAI,SAAS;IACb,sBAAsB,2BAA2B;CACpD"}

package/dist/{database → domains}/constants.js

@@ -1,6 +1,6 @@
 "use strict";
 /*
- * Copyright (c) 2022.
+ * Copyright (c) 2024.
  * Author Peter Placzek (tada5hi)
  * For the full copyright and license information,
  * view the LICENSE file that was distributed with this source code.
@@ -9,9 +9,14 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.CachePrefix = void 0;
 var CachePrefix;
 (function (CachePrefix) {
+    CachePrefix["IDENTITY_PROVIDER"] = "identity_provider";
+    CachePrefix["IDENTITY_PROVIDER_ACCOUNT"] = "identity_provider_account";
+    CachePrefix["IDENTITY_PROVIDER_ATTRIBUTE"] = "identity_provider_attribute";
+    CachePrefix["IDENTITY_PROVIDER_ROLE"] = "identity_provider_role";
     CachePrefix["OAUTH2_AUTHORIZATION_CODE"] = "oauth2_authorization_code";
     CachePrefix["OAUTH2_REFRESH_TOKEN"] = "oauth2_refresh_token";
     CachePrefix["CLIENT"] = "client";
+    CachePrefix["CLIENT_SCOPE"] = "client_scope";
     CachePrefix["USER"] = "user";
     CachePrefix["USER_OWNED_ATTRIBUTES"] = "user_owned_attributes";
     CachePrefix["USER_OWNED_PERMISSIONS"] = "user_owned_permissions";

package/dist/domains/constants.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"constants.js","sourceRoot":"","sources":["../../src/domains/constants.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;;AAEH,IAAY,WA2BX;AA3BD,WAAY,WAAW;IACnB,sDAAuC,CAAA;IACvC,sEAAuD,CAAA;IACvD,0EAA2D,CAAA;IAC3D,gEAAiD,CAAA;IAEjD,sEAAuD,CAAA;IACvD,4DAA6C,CAAA;IAE7C,gCAAiB,CAAA;IACjB,4CAA6B,CAAA;IAE7B,4BAAa,CAAA;IACb,8DAA+C,CAAA;IAC/C,gEAAiD,CAAA;IACjD,oDAAqC,CAAA;IAErC,0BAAW,CAAA;IAEX,8BAAe,CAAA;IAEf,8BAAe,CAAA;IACf,kEAAmD,CAAA;IACnD,sDAAuC,CAAA;IAEvC,4BAAa,CAAA;IACb,gEAAiD,CAAA;AACrD,CAAC,EA3BW,WAAW,2BAAX,WAAW,QA2BtB"}

package/dist/domains/identity-provider/entity.d.ts

@@ -1,5 +1,5 @@
-import type { IdentityProvider, IdentityProviderPreset, IdentityProviderProtocol } from '@authup/core';
-import { Realm } from '@authup/core';
+import type { IdentityProvider, IdentityProviderPreset, IdentityProviderProtocol } from '@authup/core-kit';
+import { Realm } from '@authup/core-kit';
 export declare class IdentityProviderEntity implements IdentityProvider {
     id: string;
     slug: string;

package/dist/domains/identity-provider/entity.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"entity.d.ts","sourceRoot":"","sources":["../../../src/domains/identity-provider/entity.ts"],"names":[],"mappings":"AAiBA,OAAO,KAAK,EAAE,gBAAgB,EAAE,sBAAsB,EAAE,wBAAwB,EAAE,MAAM,cAAc,CAAC;AACvG,OAAO,EAAE,KAAK,EAAE,MAAM,cAAc,CAAC;AAGrC,qBAEa,sBAAuB,YAAW,gBAAgB;IAEvD,EAAE,EAAE,MAAM,CAAC;IAGX,IAAI,EAAE,MAAM,CAAC;IAGb,IAAI,EAAE,MAAM,CAAC;IAGb,QAAQ,EAAE,GAAG,wBAAwB,EAAE,GAAG,IAAI,CAAC;IAG/C,MAAM,EAAE,GAAG,sBAAsB,EAAE,GAAG,IAAI,CAAC;IAG3C,OAAO,EAAE,OAAO,CAAC;IAGjB,UAAU,EAAE,IAAI,CAAC;IAGjB,UAAU,EAAE,IAAI,CAAC;IAGjB,QAAQ,EAAE,MAAM,CAAC;IAIjB,KAAK,EAAE,KAAK,CAAC;CACpB"}
+{"version":3,"file":"entity.d.ts","sourceRoot":"","sources":["../../../src/domains/identity-provider/entity.ts"],"names":[],"mappings":"AAiBA,OAAO,KAAK,EAAE,gBAAgB,EAAE,sBAAsB,EAAE,wBAAwB,EAAE,MAAM,kBAAkB,CAAC;AAC3G,OAAO,EAAE,KAAK,EAAE,MAAM,kBAAkB,CAAC;AAGzC,qBAEa,sBAAuB,YAAW,gBAAgB;IAEvD,EAAE,EAAE,MAAM,CAAC;IAGX,IAAI,EAAE,MAAM,CAAC;IAGb,IAAI,EAAE,MAAM,CAAC;IAGb,QAAQ,EAAE,GAAG,wBAAwB,EAAE,GAAG,IAAI,CAAC;IAG/C,MAAM,EAAE,GAAG,sBAAsB,EAAE,GAAG,IAAI,CAAC;IAG3C,OAAO,EAAE,OAAO,CAAC;IAGjB,UAAU,EAAE,IAAI,CAAC;IAGjB,UAAU,EAAE,IAAI,CAAC;IAGjB,QAAQ,EAAE,MAAM,CAAC;IAIjB,KAAK,EAAE,KAAK,CAAC;CACpB"}

package/dist/domains/identity-provider/flow/core/index.d.ts

@@ -1,3 +1,4 @@
+export * from './ldap';
 export * from './oauth2';
 export * from './openid';
 //# sourceMappingURL=index.d.ts.map

package/dist/domains/identity-provider/flow/core/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../src/domains/identity-provider/flow/core/index.ts"],"names":[],"mappings":"AAOA,cAAc,UAAU,CAAC;AACzB,cAAc,UAAU,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../src/domains/identity-provider/flow/core/index.ts"],"names":[],"mappings":"AAOA,cAAc,QAAQ,CAAC;AACvB,cAAc,UAAU,CAAC;AACzB,cAAc,UAAU,CAAC"}

package/dist/domains/identity-provider/flow/core/index.js

@@ -20,6 +20,7 @@ var __exportStar = (this && this.__exportStar) || function(m, exports) {
     for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
 };
 Object.defineProperty(exports, "__esModule", { value: true });
+__exportStar(require("./ldap"), exports);
 __exportStar(require("./oauth2"), exports);
 __exportStar(require("./openid"), exports);
 //# sourceMappingURL=index.js.map

package/dist/domains/identity-provider/flow/core/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../../src/domains/identity-provider/flow/core/index.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;;;;;;;;;;;;;;;AAEH,2CAAyB;AACzB,2CAAyB"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../../src/domains/identity-provider/flow/core/index.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;;;;;;;;;;;;;;;AAEH,yCAAuB;AACvB,2CAAyB;AACzB,2CAAyB"}

package/dist/domains/identity-provider/flow/core/ldap.d.ts

@@ -0,0 +1,14 @@
+import { LdapClient } from '../../../../core';
+import type { ILdapIdentityProviderFlow, IdentityProviderFlowIdentity, LdapIdentityProviderFlowOptions } from '../types';
+export declare class LdapIdentityProviderFlow implements ILdapIdentityProviderFlow {
+    protected options: LdapIdentityProviderFlowOptions;
+    protected client: LdapClient;
+    constructor(options: LdapIdentityProviderFlowOptions);
+    getIdentityForCredentials(user: string, password: string): Promise<IdentityProviderFlowIdentity>;
+    getIdentity(input: string): Promise<IdentityProviderFlowIdentity>;
+    bind(user?: string, password?: string): Promise<void>;
+    unbind(): Promise<void>;
+    findUser(input: string): Promise<Record<string, any> | undefined>;
+    findUserGroups(user: Record<string, any>): Promise<string[]>;
+}
+//# sourceMappingURL=ldap.d.ts.map

package/dist/domains/identity-provider/flow/core/ldap.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ldap.d.ts","sourceRoot":"","sources":["../../../../../src/domains/identity-provider/flow/core/ldap.ts"],"names":[],"mappings":"AAYA,OAAO,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAC9C,OAAO,KAAK,EAAE,yBAAyB,EAAE,4BAA4B,EAAE,+BAA+B,EAAE,MAAM,UAAU,CAAC;AAEzH,qBAAa,wBAAyB,YAAW,yBAAyB;IACtE,SAAS,CAAC,OAAO,EAAG,+BAA+B,CAAC;IAEpD,SAAS,CAAC,MAAM,EAAE,UAAU,CAAC;gBAEjB,OAAO,EAAE,+BAA+B;IAc9C,yBAAyB,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAI,OAAO,CAAC,4BAA4B,CAAC;IAQjG,WAAW,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,4BAA4B,CAAC;IAmB1D,IAAI,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,MAAM,GAAI,OAAO,CAAC,IAAI,CAAC;IAa7D,MAAM,IAAK,OAAO,CAAC,IAAI,CAAC;IAIjB,QAAQ,CAAC,KAAK,EAAE,MAAM,GAAI,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,GAAG,SAAS,CAAC;IA0ClE,cAAc,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,GAAI,OAAO,CAAC,MAAM,EAAE,CAAC;CAuD7E"}

package/dist/domains/identity-provider/flow/core/ldap.js

@@ -0,0 +1,150 @@
+"use strict";
+/*
+ * Copyright (c) 2024.
+ * Author Peter Placzek (tada5hi)
+ * For the full copyright and license information,
+ * view the LICENSE file that was distributed with this source code.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.LdapIdentityProviderFlow = void 0;
+const kit_1 = require("@authup/kit");
+const ldapjs_1 = require("ldapjs");
+const core_1 = require("../../../../core");
+class LdapIdentityProviderFlow {
+    constructor(options) {
+        this.options = options;
+        this.client = new core_1.LdapClient({
+            url: options.url,
+            tls: options.tls,
+            startTLS: options.start_tls,
+            baseDn: options.base_dn,
+            user: options.user,
+            password: options.password,
+            userNameAttribute: options.user_name_attribute,
+        });
+    }
+    async getIdentityForCredentials(user, password) {
+        const identity = await this.getIdentity(user);
+        await this.bind(identity.id, password);
+        return identity;
+    }
+    async getIdentity(input) {
+        await this.bind();
+        const user = await this.findUser(input);
+        const identity = {
+            id: user.dn,
+            name: user[this.options.user_name_attribute || 'cn'] || user.dn,
+            email: user[this.options.user_mail_attribute || 'mail'],
+        };
+        try {
+            identity.roles = await this.findUserGroups(user);
+        }
+        catch (e) {
+            // todo: log event
+        }
+        return identity;
+    }
+    async bind(user, password) {
+        if (!user) {
+            return this.client.bind();
+        }
+        if (!this.client.isDn(user)) {
+            const nameAttribute = this.options.user_name_attribute || 'cn';
+            user = `${nameAttribute}=${user},${this.client.resolveDn(this.options.user_base_dn, this.options.base_dn)}`;
+        }
+        return this.client.bind(user, password);
+    }
+    async unbind() {
+        return this.client.unbind();
+    }
+    async findUser(input) {
+        let filter;
+        if (this.options.user_filter) {
+            filter = (0, kit_1.template)(this.options.user_filter, {
+                input,
+                name_attribute: this.options.user_name_attribute || 'cn',
+                mail_attribute: this.options.user_mail_attribute || 'mail',
+                display_name_attribute: this.options.user_display_name_attribute || 'cn',
+            });
+        }
+        else if (this.options.user_name_attribute) {
+            filter = new ldapjs_1.EqualityFilter({
+                attribute: this.options.user_name_attribute,
+                value: input,
+            });
+        }
+        else {
+            filter = new ldapjs_1.OrFilter({
+                filters: [
+                    new ldapjs_1.EqualityFilter({
+                        attribute: 'cn',
+                        value: input,
+                    }),
+                    new ldapjs_1.EqualityFilter({
+                        attribute: 'sAMAccountName',
+                        value: input,
+                    }),
+                ],
+            });
+        }
+        const entities = await this.client.search({
+            filter,
+            scope: 'sub',
+        }, this.client.resolveDn(this.options.user_base_dn, this.options.base_dn));
+        if (entities.length === 0) {
+            return undefined;
+        }
+        return entities[0];
+    }
+    async findUserGroups(user) {
+        const nameAttribute = this.options.group_name_attribute || 'cn';
+        const memberAttribute = this.options.group_member_attribute || 'member';
+        let filter;
+        if (this.options.group_filter) {
+            filter = (0, kit_1.template)(this.options.group_filter, {
+                ...user,
+                name_attribute: nameAttribute,
+                member_attribute: memberAttribute,
+            });
+        }
+        else {
+            filter = new ldapjs_1.AndFilter({
+                filters: [
+                    new ldapjs_1.EqualityFilter({
+                        attribute: 'objectClass',
+                        value: this.options.group_class || 'group',
+                    }),
+                    new ldapjs_1.EqualityFilter({
+                        attribute: memberAttribute,
+                        value: user[this.options.group_member_user_attribute || 'dn'],
+                    }),
+                ],
+            });
+        }
+        const entities = await this.client.search({
+            filter,
+            scope: 'sub',
+        }, this.client.resolveDn(this.options.group_base_dn, this.options.base_dn));
+        if (entities.length === 0) {
+            return [];
+        }
+        const attributeKey = this.options.group_name_attribute || 'cn';
+        const names = [];
+        for (let i = 0; i < entities.length; i++) {
+            const attribute = entities[i][attributeKey];
+            if (typeof attribute === 'undefined') {
+                continue;
+            }
+            if (typeof attribute === 'string') {
+                names.push(attribute);
+                continue;
+            }
+            if (Array.isArray(attribute)) {
+                names.push(...attribute.filter((el) => typeof el === 'string'));
+            }
+        }
+        return names;
+    }
+}
+exports.LdapIdentityProviderFlow = LdapIdentityProviderFlow;
+//# sourceMappingURL=ldap.js.map

package/dist/domains/identity-provider/flow/core/ldap.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ldap.js","sourceRoot":"","sources":["../../../../../src/domains/identity-provider/flow/core/ldap.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;;AAEH,qCAAuC;AACvC,mCAEgB;AAEhB,2CAA8C;AAG9C,MAAa,wBAAwB;IAKjC,YAAY,OAAwC;QAChD,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;QAEvB,IAAI,CAAC,MAAM,GAAG,IAAI,iBAAU,CAAC;YACzB,GAAG,EAAE,OAAO,CAAC,GAAG;YAChB,GAAG,EAAE,OAAO,CAAC,GAAG;YAChB,QAAQ,EAAE,OAAO,CAAC,SAAS;YAC3B,MAAM,EAAE,OAAO,CAAC,OAAO;YACvB,IAAI,EAAE,OAAO,CAAC,IAAI;YAClB,QAAQ,EAAE,OAAO,CAAC,QAAQ;YAC1B,iBAAiB,EAAE,OAAO,CAAC,mBAAmB;SACjD,CAAC,CAAC;IACP,CAAC;IAED,KAAK,CAAC,yBAAyB,CAAC,IAAY,EAAE,QAAgB;QAC1D,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC;QAE9C,MAAM,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,QAAQ,CAAC,CAAC;QAEvC,OAAO,QAAQ,CAAC;IACpB,CAAC;IAED,KAAK,CAAC,WAAW,CAAC,KAAa;QAC3B,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC;QAElB,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;QACxC,MAAM,QAAQ,GAAkC;YAC5C,EAAE,EAAE,IAAI,CAAC,EAAE;YACX,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,mBAAmB,IAAI,IAAI,CAAC,IAAI,IAAI,CAAC,EAAE;YAC/D,KAAK,EAAE,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,mBAAmB,IAAI,MAAM,CAAC;SAC1D,CAAC;QAEF,IAAI,CAAC;YACD,QAAQ,CAAC,KAAK,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC;QACrD,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACT,kBAAkB;QACtB,CAAC;QAED,OAAO,QAAQ,CAAC;IACpB,CAAC;IAEM,KAAK,CAAC,IAAI,CAAC,IAAa,EAAE,QAAiB;QAC9C,IAAI,CAAC,IAAI,EAAE,CAAC;YACR,OAAO,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;QAC9B,CAAC;QAED,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YAC1B,MAAM,aAAa,GAAG,IAAI,CAAC,OAAO,CAAC,mBAAmB,IAAI,IAAI,CAAC;YAC/D,IAAI,GAAG,GAAG,aAAa,IAAI,IAAI,IAAI,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,YAAY,EAAE,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;QAChH,CAAC;QAED,OAAO,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;IAC5C,CAAC;IAED,KAAK,CAAC,MAAM;QACR,OAAO,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC;IAChC,CAAC;IAEM,KAAK,CAAC,QAAQ,CAAC,KAAa;QAC/B,IAAI,MAAwB,CAAC;QAE7B,IAAI,IAAI,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC;YAC3B,MAAM,GAAG,IAAA,cAAQ,EAAC,IAAI,CAAC,OAAO,CAAC,WAAW,EAAE;gBACxC,KAAK;gBACL,cAAc,EAAE,IAAI,CAAC,OAAO,CAAC,mBAAmB,IAAI,IAAI;gBACxD,cAAc,EAAE,IAAI,CAAC,OAAO,CAAC,mBAAmB,IAAI,MAAM;gBAC1D,sBAAsB,EAAE,IAAI,CAAC,OAAO,CAAC,2BAA2B,IAAI,IAAI;aAC3E,CAAC,CAAC;QACP,CAAC;aAAM,IAAI,IAAI,CAAC,OAAO,CAAC,mBAAmB,EAAE,CAAC;YAC1C,MAAM,GAAG,IAAI,uBAAc,CAAC;gBACxB,SAAS,EAAE,IAAI,CAAC,OAAO,CAAC,mBAAmB;gBAC3C,KAAK,EAAE,KAAK;aACf,CAAC,CAAC;QACP,CAAC;aAAM,CAAC;YACJ,MAAM,GAAG,IAAI,iBAAQ,CAAC;gBAClB,OAAO,EAAE;oBACL,IAAI,uBAAc,CAAC;wBACf,SAAS,EAAE,IAAI;wBACf,KAAK,EAAE,KAAK;qBACf,CAAC;oBACF,IAAI,uBAAc,CAAC;wBACf,SAAS,EAAE,gBAAgB;wBAC3B,KAAK,EAAE,KAAK;qBACf,CAAC;iBACL;aACJ,CAAC,CAAC;QACP,CAAC;QAED,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC;YACtC,MAAM;YACN,KAAK,EAAE,KAAK;SACf,EAAE,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,YAAY,EAAE,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC;QAE3E,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACxB,OAAO,SAAS,CAAC;QACrB,CAAC;QAED,OAAO,QAAQ,CAAC,CAAC,CAAC,CAAC;IACvB,CAAC;IAEM,KAAK,CAAC,cAAc,CAAC,IAAyB;QACjD,MAAM,aAAa,GAAG,IAAI,CAAC,OAAO,CAAC,oBAAoB,IAAI,IAAI,CAAC;QAChE,MAAM,eAAe,GAAG,IAAI,CAAC,OAAO,CAAC,sBAAsB,IAAI,QAAQ,CAAC;QAExE,IAAI,MAAwB,CAAC;QAC7B,IAAI,IAAI,CAAC,OAAO,CAAC,YAAY,EAAE,CAAC;YAC5B,MAAM,GAAG,IAAA,cAAQ,EAAC,IAAI,CAAC,OAAO,CAAC,YAAY,EAAE;gBACzC,GAAG,IAAI;gBACP,cAAc,EAAE,aAAa;gBAC7B,gBAAgB,EAAE,eAAe;aACpC,CAAC,CAAC;QACP,CAAC;aAAM,CAAC;YACJ,MAAM,GAAG,IAAI,kBAAS,CAAC;gBACnB,OAAO,EAAE;oBACL,IAAI,uBAAc,CAAC;wBACf,SAAS,EAAE,aAAa;wBACxB,KAAK,EAAE,IAAI,CAAC,OAAO,CAAC,WAAW,IAAI,OAAO;qBAC7C,CAAC;oBACF,IAAI,uBAAc,CAAC;wBACf,SAAS,EAAE,eAAe;wBAC1B,KAAK,EAAE,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,2BAA2B,IAAI,IAAI,CAAC;qBAChE,CAAC;iBACL;aACJ,CAAC,CAAC;QACP,CAAC;QAED,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC;YACtC,MAAM;YACN,KAAK,EAAE,KAAK;SACf,EAAE,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,aAAa,EAAE,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC;QAE5E,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACxB,OAAO,EAAE,CAAC;QACd,CAAC;QAED,MAAM,YAAY,GAAG,IAAI,CAAC,OAAO,CAAC,oBAAoB,IAAI,IAAI,CAAC;QAC/D,MAAM,KAAK,GAAc,EAAE,CAAC;QAC5B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,QAAQ,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YACvC,MAAM,SAAS,GAAG,QAAQ,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC;YAC5C,IAAI,OAAO,SAAS,KAAK,WAAW,EAAE,CAAC;gBACnC,SAAS;YACb,CAAC;YAED,IAAI,OAAO,SAAS,KAAK,QAAQ,EAAE,CAAC;gBAChC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;gBACtB,SAAS;YACb,CAAC;YAED,IAAI,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,CAAC;gBAC3B,KAAK,CAAC,IAAI,CAAC,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,OAAO,EAAE,KAAK,QAAQ,CAAC,CAAC,CAAC;YACpE,CAAC;QACL,CAAC;QAED,OAAO,KAAK,CAAC;IACjB,CAAC;CACJ;AAhKD,4DAgKC"}

package/dist/domains/identity-provider/flow/core/oauth2.d.ts

@@ -5,7 +5,6 @@ import type { IOAuth2IdentityProviderFlow, IdentityProviderFlowIdentity, OAuth2I
 export declare abstract class OAuth2IdentityProviderFlow implements IOAuth2IdentityProviderFlow {
     protected client: OAuth2Client;
     protected constructor(provider: OAuth2IdentityProviderFlowOptions);
-    setupProxy(): Promise<void>;
     buildAuthorizeURL(): string;
     protected extractRolesFromTokenPayload(payload: JwtPayload): string[];
     abstract getIdentityForRequest(request: Request): Promise<IdentityProviderFlowIdentity>;

package/dist/domains/identity-provider/flow/core/oauth2.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"oauth2.d.ts","sourceRoot":"","sources":["../../../../../src/domains/identity-provider/flow/core/oauth2.ts"],"names":[],"mappings":"AASA,OAAO,KAAK,EAAE,UAAU,EAAW,MAAM,eAAe,CAAC;AACzD,OAAO,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AAC7C,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,QAAQ,CAAC;AAEtC,OAAO,KAAK,EAAE,2BAA2B,EAAE,4BAA4B,EAAE,iCAAiC,EAAE,MAAM,UAAU,CAAC;AAE7H,8BAAsB,0BAA2B,YAAW,2BAA2B;IACnF,SAAS,CAAC,MAAM,EAAG,YAAY,CAAC;IAEhC,SAAS,aAAa,QAAQ,EAAE,iCAAiC;IAgB3D,UAAU;IAKT,iBAAiB,IAAK,MAAM;IAInC,SAAS,CAAC,4BAA4B,CAAC,OAAO,EAAE,UAAU,GAAI,MAAM,EAAE;IAiCtE,QAAQ,CAAC,qBAAqB,CAAC,OAAO,EAAE,OAAO,GAAI,OAAO,CAAC,4BAA4B,CAAC;CAC3F"}
+{"version":3,"file":"oauth2.d.ts","sourceRoot":"","sources":["../../../../../src/domains/identity-provider/flow/core/oauth2.ts"],"names":[],"mappings":"AASA,OAAO,KAAK,EAAE,UAAU,EAAW,MAAM,eAAe,CAAC;AACzD,OAAO,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AAC7C,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,QAAQ,CAAC;AAEtC,OAAO,KAAK,EAAE,2BAA2B,EAAE,4BAA4B,EAAE,iCAAiC,EAAE,MAAM,UAAU,CAAC;AAE7H,8BAAsB,0BAA2B,YAAW,2BAA2B;IACnF,SAAS,CAAC,MAAM,EAAG,YAAY,CAAC;IAEhC,SAAS,aAAa,QAAQ,EAAE,iCAAiC;IAgB1D,iBAAiB,IAAK,MAAM;IAInC,SAAS,CAAC,4BAA4B,CAAC,OAAO,EAAE,UAAU,GAAI,MAAM,EAAE;IAiCtE,QAAQ,CAAC,qBAAqB,CAAC,OAAO,EAAE,OAAO,GAAI,OAAO,CAAC,4BAA4B,CAAC;CAC3F"}

package/dist/domains/identity-provider/flow/core/oauth2.js

@@ -7,8 +7,8 @@
  */
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.OAuth2IdentityProviderFlow = void 0;
-const core_1 = require("@authup/core");
-const server_kit_1 = require("@authup/server-kit");
+const kit_1 = require("@authup/kit");
+const core_kit_1 = require("@authup/core-kit");
 const oauth2_1 = require("@hapic/oauth2");
 const config_1 = require("../../../../config");
 class OAuth2IdentityProviderFlow {
@@ -16,7 +16,7 @@ class OAuth2IdentityProviderFlow {
         const clientOptions = {
             clientId: provider.client_id,
             clientSecret: provider.client_secret,
-            redirectUri: `${(0, config_1.useConfig)().publicUrl}${(0, core_1.buildIdentityProviderAuthorizeCallbackPath)(provider.id)}`,
+            redirectUri: `${(0, config_1.useConfig)().publicUrl}${(0, core_kit_1.buildIdentityProviderAuthorizeCallbackPath)(provider.id)}`,
             scope: provider.scope,
             authorizationEndpoint: provider.authorize_url,
             tokenEndpoint: provider.token_url,
@@ -26,10 +26,6 @@ class OAuth2IdentityProviderFlow {
             options: clientOptions,
         });
     }
-    async setupProxy() {
-        const endpointURL = this.client.options.tokenEndpoint || this.client.options.authorizationEndpoint;
-        this.client.defaults = await (0, server_kit_1.buildHTTPClientConfigForProxy)(endpointURL);
-    }
     buildAuthorizeURL() {
         return this.client.authorize.buildURL();
     }
@@ -43,7 +39,7 @@ class OAuth2IdentityProviderFlow {
                 roles.push(...payload.roles);
             }
         }
-        if ((0, core_1.isObject)(payload.realm_access) &&
+        if ((0, kit_1.isObject)(payload.realm_access) &&
             Array.isArray(payload.realm_access.roles)) {
             payload.realm_access.roles = payload.realm_access.roles
                 .filter((n) => typeof n === 'string');

package/dist/domains/identity-provider/flow/core/oauth2.js.map

@@ -1 +1 @@
-{"version":3,"file":"oauth2.js","sourceRoot":"","sources":["../../../../../src/domains/identity-provider/flow/core/oauth2.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;;AAEH,uCAAoF;AACpF,mDAAmE;AAEnE,0CAA6C;AAE7C,+CAA+C;AAG/C,MAAsB,0BAA0B;IAG5C,YAAsB,QAA2C;QAC7D,MAAM,aAAa,GAAa;YAC5B,QAAQ,EAAE,QAAQ,CAAC,SAAS;YAC5B,YAAY,EAAE,QAAQ,CAAC,aAAa;YACpC,WAAW,EAAE,GAAG,IAAA,kBAAS,GAAE,CAAC,SAAS,GAAG,IAAA,iDAA0C,EAAC,QAAQ,CAAC,EAAE,CAAC,EAAE;YACjG,KAAK,EAAE,QAAQ,CAAC,KAAK;YACrB,qBAAqB,EAAE,QAAQ,CAAC,aAAa;YAC7C,aAAa,EAAE,QAAQ,CAAC,SAAS;YACjC,gBAAgB,EAAE,QAAQ,CAAC,aAAa;SAC3C,CAAC;QAEF,IAAI,CAAC,MAAM,GAAG,IAAI,qBAAY,CAAC;YAC3B,OAAO,EAAE,aAAa;SACzB,CAAC,CAAC;IACP,CAAC;IAED,KAAK,CAAC,UAAU;QACZ,MAAM,WAAW,GAAG,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,aAAa,IAAI,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,qBAAqB,CAAC;QACnG,IAAI,CAAC,MAAM,CAAC,QAAQ,GAAG,MAAM,IAAA,0CAA6B,EAAC,WAAW,CAAC,CAAC;IAC5E,CAAC;IAEM,iBAAiB;QACpB,OAAO,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,QAAQ,EAAE,CAAC;IAC5C,CAAC;IAES,4BAA4B,CAAC,OAAmB;QACtD,MAAM,KAAK,GAAc,EAAE,CAAC;QAE5B,IAAI,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;YAC/B,OAAO,CAAC,KAAK,GAAG,OAAO,CAAC,KAAK;iBACxB,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC;YAE1C,IACI,OAAO,CAAC,KAAK;gBACb,OAAO,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,EAC1B,CAAC;gBACC,KAAK,CAAC,IAAI,CAAC,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC;YACjC,CAAC;QACL,CAAC;QAED,IACI,IAAA,eAAQ,EAAC,OAAO,CAAC,YAAY,CAAC;YAC9B,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,YAAY,CAAC,KAAK,CAAC,EAC3C,CAAC;YACC,OAAO,CAAC,YAAY,CAAC,KAAK,GAAG,OAAO,CAAC,YAAY,CAAC,KAAK;iBAClD,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC;YAE1C,IACI,OAAO,CAAC,YAAY,CAAC,KAAK;gBAC1B,OAAO,CAAC,YAAY,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,EACvC,CAAC;gBACC,KAAK,CAAC,IAAI,CAAC,GAAG,OAAO,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC;YAC9C,CAAC;QACL,CAAC;QAED,OAAO,KAAK,CAAC;IACjB,CAAC;CAGJ;AA9DD,gEA8DC"}
+{"version":3,"file":"oauth2.js","sourceRoot":"","sources":["../../../../../src/domains/identity-provider/flow/core/oauth2.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;;AAEH,qCAAuC;AACvC,+CAA8E;AAE9E,0CAA6C;AAE7C,+CAA+C;AAG/C,MAAsB,0BAA0B;IAG5C,YAAsB,QAA2C;QAC7D,MAAM,aAAa,GAAa;YAC5B,QAAQ,EAAE,QAAQ,CAAC,SAAS;YAC5B,YAAY,EAAE,QAAQ,CAAC,aAAa;YACpC,WAAW,EAAE,GAAG,IAAA,kBAAS,GAAE,CAAC,SAAS,GAAG,IAAA,qDAA0C,EAAC,QAAQ,CAAC,EAAE,CAAC,EAAE;YACjG,KAAK,EAAE,QAAQ,CAAC,KAAK;YACrB,qBAAqB,EAAE,QAAQ,CAAC,aAAa;YAC7C,aAAa,EAAE,QAAQ,CAAC,SAAS;YACjC,gBAAgB,EAAE,QAAQ,CAAC,aAAa;SAC3C,CAAC;QAEF,IAAI,CAAC,MAAM,GAAG,IAAI,qBAAY,CAAC;YAC3B,OAAO,EAAE,aAAa;SACzB,CAAC,CAAC;IACP,CAAC;IAEM,iBAAiB;QACpB,OAAO,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,QAAQ,EAAE,CAAC;IAC5C,CAAC;IAES,4BAA4B,CAAC,OAAmB;QACtD,MAAM,KAAK,GAAc,EAAE,CAAC;QAE5B,IAAI,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;YAC/B,OAAO,CAAC,KAAK,GAAG,OAAO,CAAC,KAAK;iBACxB,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC;YAE1C,IACI,OAAO,CAAC,KAAK;gBACb,OAAO,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,EAC1B,CAAC;gBACC,KAAK,CAAC,IAAI,CAAC,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC;YACjC,CAAC;QACL,CAAC;QAED,IACI,IAAA,cAAQ,EAAC,OAAO,CAAC,YAAY,CAAC;YAC9B,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,YAAY,CAAC,KAAK,CAAC,EAC3C,CAAC;YACC,OAAO,CAAC,YAAY,CAAC,KAAK,GAAG,OAAO,CAAC,YAAY,CAAC,KAAK;iBAClD,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC;YAE1C,IACI,OAAO,CAAC,YAAY,CAAC,KAAK;gBAC1B,OAAO,CAAC,YAAY,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,EACvC,CAAC;gBACC,KAAK,CAAC,IAAI,CAAC,GAAG,OAAO,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC;YAC9C,CAAC;QACL,CAAC;QAED,OAAO,KAAK,CAAC;IACjB,CAAC;CAGJ;AAzDD,gEAyDC"}

package/dist/domains/identity-provider/flow/core/openid.d.ts

@@ -1,6 +1,12 @@
+import type { JWTClaims } from '@authup/kit';
 import type { Request } from 'routup';
 import type { IOAuth2IdentityProviderFlow, IdentityProviderFlowIdentity, OAuth2IdentityProviderFlowOptions } from '../types';
 import { OAuth2IdentityProviderFlow } from './oauth2';
+export type KeycloakJWTPayload = JWTClaims & {
+    realm_access?: {
+        roles?: string[];
+    };
+};
 export declare class OpenIDIdentityProviderFlow extends OAuth2IdentityProviderFlow implements IOAuth2IdentityProviderFlow {
     constructor(options: OAuth2IdentityProviderFlowOptions);
     getIdentityForRequest(request: Request): Promise<IdentityProviderFlowIdentity>;

package/dist/domains/identity-provider/flow/core/openid.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"openid.d.ts","sourceRoot":"","sources":["../../../../../src/domains/identity-provider/flow/core/openid.ts"],"names":[],"mappings":"AAWA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,QAAQ,CAAC;AACtC,OAAO,KAAK,EAAE,2BAA2B,EAAE,4BAA4B,EAAE,iCAAiC,EAAE,MAAM,UAAU,CAAC;AAC7H,OAAO,EAAE,0BAA0B,EAAE,MAAM,UAAU,CAAC;AAEtD,qBAAa,0BAA2B,SAAQ,0BAA2B,YAAW,2BAA2B;gBAEjG,OAAO,EAAE,iCAAiC;IAIhD,qBAAqB,CAAC,OAAO,EAAE,OAAO,GAAG,OAAO,CAAC,4BAA4B,CAAC;CAyBvF"}
+{"version":3,"file":"openid.d.ts","sourceRoot":"","sources":["../../../../../src/domains/identity-provider/flow/core/openid.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AAI7C,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,QAAQ,CAAC;AACtC,OAAO,KAAK,EAAE,2BAA2B,EAAE,4BAA4B,EAAE,iCAAiC,EAAE,MAAM,UAAU,CAAC;AAC7H,OAAO,EAAE,0BAA0B,EAAE,MAAM,UAAU,CAAC;AAEtD,MAAM,MAAM,kBAAkB,GAAG,SAAS,GAAG;IACzC,YAAY,CAAC,EAAE;QACX,KAAK,CAAC,EAAE,MAAM,EAAE,CAAA;KACnB,CAAA;CACJ,CAAC;AAEF,qBAAa,0BAA2B,SAAQ,0BAA2B,YAAW,2BAA2B;gBAEjG,OAAO,EAAE,iCAAiC;IAIhD,qBAAqB,CAAC,OAAO,EAAE,OAAO,GAAG,OAAO,CAAC,4BAA4B,CAAC;CAyBvF"}

package/dist/domains/identity-provider/flow/core/openid.js

@@ -7,7 +7,7 @@
  */
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.OpenIDIdentityProviderFlow = void 0;
-const core_1 = require("@authup/core");
+const kit_1 = require("@authup/kit");
 const server_kit_1 = require("@authup/server-kit");
 const query_1 = require("@routup/basic/query");
 const oauth2_1 = require("./oauth2");
@@ -22,9 +22,9 @@ class OpenIDIdentityProviderFlow extends oauth2_1.OAuth2IdentityProviderFlow {
             code: code,
             state: state,
         });
-        const payload = (0, server_kit_1.decodeToken)(token.access_token);
+        const payload = (0, server_kit_1.extractTokenPayload)(token.access_token);
         if (typeof payload === 'string') {
-            throw core_1.TokenError.payloadInvalid();
+            throw kit_1.TokenError.payloadInvalid();
         }
         return {
             id: payload.sub,

package/dist/domains/identity-provider/flow/core/openid.js.map

@@ -1 +1 @@
-{"version":3,"file":"openid.js","sourceRoot":"","sources":["../../../../../src/domains/identity-provider/flow/core/openid.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;;AAEH,uCAA0C;AAE1C,mDAAiD;AACjD,+CAAsD;AAGtD,qCAAsD;AAEtD,MAAa,0BAA2B,SAAQ,mCAA0B;IACtE,4FAA4F;IAC5F,YAAY,OAA0C;QAClD,KAAK,CAAC,OAAO,CAAC,CAAC;IACnB,CAAC;IAED,KAAK,CAAC,qBAAqB,CAAC,OAAgB;QACxC,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,IAAA,uBAAe,EAAC,OAAO,CAAC,CAAC;QAEjD,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,wBAAwB,CAAC;YAC3D,IAAI,EAAE,IAAc;YACpB,KAAK,EAAE,KAAe;SACzB,CAAC,CAAC;QAEH,MAAM,OAAO,GAAG,IAAA,wBAAW,EAAC,KAAK,CAAC,YAAY,CAAgC,CAAC;QAE/E,IAAI,OAAO,OAAO,KAAK,QAAQ,EAAE,CAAC;YAC9B,MAAM,iBAAU,CAAC,cAAc,EAAE,CAAC;QACtC,CAAC;QAED,OAAO;YACH,EAAE,EAAE,OAAO,CAAC,GAAG;YACf,IAAI,EAAE;gBACF,OAAO,CAAC,kBAAkB;gBAC1B,OAAO,CAAC,QAAQ;gBAChB,OAAO,CAAC,GAAG;aACd;YACD,KAAK,EAAE,OAAO,CAAC,KAAK;YACpB,KAAK,EAAE,IAAI,CAAC,4BAA4B,CAAC,OAAO,CAAC;SACpD,CAAC;IACN,CAAC;CACJ;AA/BD,gEA+BC"}
+{"version":3,"file":"openid.js","sourceRoot":"","sources":["../../../../../src/domains/identity-provider/flow/core/openid.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;;AAGH,qCAAyC;AACzC,mDAAyD;AACzD,+CAAsD;AAGtD,qCAAsD;AAQtD,MAAa,0BAA2B,SAAQ,mCAA0B;IACtE,4FAA4F;IAC5F,YAAY,OAA0C;QAClD,KAAK,CAAC,OAAO,CAAC,CAAC;IACnB,CAAC;IAED,KAAK,CAAC,qBAAqB,CAAC,OAAgB;QACxC,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,IAAA,uBAAe,EAAC,OAAO,CAAC,CAAC;QAEjD,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,wBAAwB,CAAC;YAC3D,IAAI,EAAE,IAAc;YACpB,KAAK,EAAE,KAAe;SACzB,CAAC,CAAC;QAEH,MAAM,OAAO,GAAG,IAAA,gCAAmB,EAAC,KAAK,CAAC,YAAY,CAAgC,CAAC;QAEvF,IAAI,OAAO,OAAO,KAAK,QAAQ,EAAE,CAAC;YAC9B,MAAM,gBAAU,CAAC,cAAc,EAAE,CAAC;QACtC,CAAC;QAED,OAAO;YACH,EAAE,EAAE,OAAO,CAAC,GAAG;YACf,IAAI,EAAE;gBACF,OAAO,CAAC,kBAAkB;gBAC1B,OAAO,CAAC,QAAQ;gBAChB,OAAO,CAAC,GAAG;aACd;YACD,KAAK,EAAE,OAAO,CAAC,KAAK;YACpB,KAAK,EAAE,IAAI,CAAC,4BAA4B,CAAC,OAAO,CAAC;SACpD,CAAC;IACN,CAAC;CACJ;AA/BD,gEA+BC"}