@authup/server-core 1.0.0-beta.17 → 1.0.0-beta.19

package/dist/http/controllers/policy/handlers/delete.js.map

@@ -1 +1 @@
-{"version":3,"file":"delete.js","sourceRoot":"","sources":["../../../../../src/http/controllers/policy/handlers/delete.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;;AAEH,qCAA2D;AAC3D,+CAA2E;AAE3E,mCAAuD;AACvD,yDAAkD;AAClD,iDAAmD;AACnD,0CAA+C;AAExC,KAAK,UAAU,wBAAwB,CAC1C,GAAY,EACZ,GAAa;IAEb,MAAM,EAAE,GAAG,IAAA,wBAAe,EAAC,GAAG,EAAE,IAAI,CAAC,CAAC;IAEtC,MAAM,OAAO,GAAG,IAAA,qBAAa,EAAC,GAAG,EAAE,WAAW,CAAC,CAAC;IAChD,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,yBAAc,CAAC,eAAe,CAAC,EAAE,CAAC;QAC/C,MAAM,IAAI,qBAAc,EAAE,CAAC;IAC/B,CAAC;IAED,MAAM,UAAU,GAAG,MAAM,IAAA,iCAAa,GAAE,CAAC;IACzC,MAAM,UAAU,GAAG,UAAU,CAAC,aAAa,CAAC,sBAAY,CAAC,CAAC;IAC1D,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,SAAS,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;IAElD,IAAI,CAAC,MAAM,EAAE,CAAC;QACV,MAAM,IAAI,oBAAa,EAAE,CAAC;IAC9B,CAAC;IAED,IAAI,CAAC,IAAA,kCAAuB,EAAC,IAAA,qBAAa,EAAC,GAAG,EAAE,OAAO,CAAC,EAAE,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC;QACzE,MAAM,IAAI,qBAAc,EAAE,CAAC;IAC/B,CAAC;IAED,MAAM,EAAE,EAAE,EAAE,QAAQ,EAAE,GAAG,MAAM,CAAC;IAEhC,MAAM,UAAU,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAEhC,MAAM,CAAC,EAAE,GAAG,QAAQ,CAAC;IAErB,OAAO,IAAA,qBAAY,EAAC,GAAG,EAAE,MAAM,CAAC,CAAC;AACrC,CAAC;AA9BD,4DA8BC"}
+{"version":3,"file":"delete.js","sourceRoot":"","sources":["../../../../../src/http/controllers/policy/handlers/delete.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;AAWH,4DAkCC;AA3CD,qCAA2D;AAC3D,+CAA2E;AAE3E,mCAAsC;AACtC,yDAAkD;AAClD,iDAAmD;AACnD,8CAAqD;AACrD,0CAA+C;AAExC,KAAK,UAAU,wBAAwB,CAC1C,GAAY,EACZ,GAAa;IAEb,MAAM,EAAE,GAAG,IAAA,2BAAiB,EAAC,GAAG,CAAC,CAAC;IAElC,MAAM,OAAO,GAAG,IAAA,qBAAa,EAAC,GAAG,EAAE,WAAW,CAAC,CAAC;IAChD,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,yBAAc,CAAC,iBAAiB,CAAC,EAAE,CAAC;QACjD,MAAM,IAAI,qBAAc,EAAE,CAAC;IAC/B,CAAC;IAED,MAAM,UAAU,GAAG,MAAM,IAAA,iCAAa,GAAE,CAAC;IACzC,MAAM,UAAU,GAAG,UAAU,CAAC,aAAa,CAAC,sBAAY,CAAC,CAAC;IAC1D,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,SAAS,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;IAElD,IAAI,CAAC,MAAM,EAAE,CAAC;QACV,MAAM,IAAI,oBAAa,EAAE,CAAC;IAC9B,CAAC;IAED,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,yBAAc,CAAC,iBAAiB,EAAE,EAAE,UAAU,EAAE,MAAM,EAAE,CAAC,EAAE,CAAC;QACzE,MAAM,IAAI,qBAAc,EAAE,CAAC;IAC/B,CAAC;IAED,IAAI,CAAC,IAAA,kCAAuB,EAAC,IAAA,qBAAa,EAAC,GAAG,EAAE,OAAO,CAAC,EAAE,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC;QACzE,MAAM,IAAI,qBAAc,EAAE,CAAC;IAC/B,CAAC;IAED,MAAM,EAAE,EAAE,EAAE,QAAQ,EAAE,GAAG,MAAM,CAAC;IAEhC,MAAM,UAAU,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAEhC,MAAM,CAAC,EAAE,GAAG,QAAQ,CAAC;IAErB,OAAO,IAAA,qBAAY,EAAC,GAAG,EAAE,MAAM,CAAC,CAAC;AACrC,CAAC"}

package/dist/http/controllers/policy/handlers/read.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"read.d.ts","sourceRoot":"","sources":["../../../../../src/http/controllers/policy/handlers/read.ts"],"names":[],"mappings":"AASA,OAAO,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,QAAQ,CAAC;AAShD,wBAAsB,yBAAyB,CAAC,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,CA6CzF;AAED,wBAAsB,wBAAwB,CAAC,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,CA6CxF"}
+{"version":3,"file":"read.d.ts","sourceRoot":"","sources":["../../../../../src/http/controllers/policy/handlers/read.ts"],"names":[],"mappings":"AAUA,OAAO,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,QAAQ,CAAC;AAWhD,wBAAsB,yBAAyB,CAAC,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,CAsDzF;AAED,wBAAsB,wBAAwB,CAAC,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,CAwDxF"}

package/dist/http/controllers/policy/handlers/read.js

@@ -6,14 +6,24 @@
  * view the LICENSE file that was distributed with this source code.
  */
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.getOnePolicyRouteHandler = exports.getManyPolicyRouteHandler = void 0;
+exports.getManyPolicyRouteHandler = getManyPolicyRouteHandler;
+exports.getOnePolicyRouteHandler = getOnePolicyRouteHandler;
+const core_kit_1 = require("@authup/core-kit");
 const kit_1 = require("@authup/kit");
 const query_1 = require("@routup/basic/query");
 const routup_1 = require("routup");
 const typeorm_extension_1 = require("typeorm-extension");
 const http_1 = require("@ebec/http");
 const domains_1 = require("../../../../domains");
+const request_1 = require("../../../request");
+const utils_1 = require("../../../utils");
 async function getManyPolicyRouteHandler(req, res) {
+    const ability = (0, utils_1.useRequestEnv)(req, 'abilities');
+    if (!ability.has(core_kit_1.PermissionName.PERMISSION_READ) &&
+        !ability.has(core_kit_1.PermissionName.PERMISSION_UPDATE) &&
+        !ability.has(core_kit_1.PermissionName.PERMISSION_DELETE)) {
+        throw new http_1.ForbiddenError();
+    }
     const dataSource = await (0, typeorm_extension_1.useDataSource)();
     const repository = new domains_1.PolicyRepository(dataSource);
     const query = repository.createQueryBuilder('policy');
@@ -54,9 +64,16 @@ async function getManyPolicyRouteHandler(req, res) {
         },
     });
 }
-exports.getManyPolicyRouteHandler = getManyPolicyRouteHandler;
 async function getOnePolicyRouteHandler(req, res) {
-    const id = (0, routup_1.useRequestParam)(req, 'id');
+    const ability = (0, utils_1.useRequestEnv)(req, 'abilities');
+    if (!ability.has(core_kit_1.PermissionName.PERMISSION_READ) &&
+        !ability.has(core_kit_1.PermissionName.PERMISSION_UPDATE) &&
+        !ability.has(core_kit_1.PermissionName.PERMISSION_DELETE)) {
+        throw new http_1.ForbiddenError();
+    }
+    const id = (0, request_1.useRequestIDParam)(req, {
+        strict: false,
+    });
     const dataSource = await (0, typeorm_extension_1.useDataSource)();
     const repository = new domains_1.PolicyRepository(dataSource);
     const query = repository.createQueryBuilder('policy');
@@ -93,5 +110,4 @@ async function getOnePolicyRouteHandler(req, res) {
     await repository.findAndAppendExtraAttributesTo(entity);
     return (0, routup_1.send)(res, entity);
 }
-exports.getOnePolicyRouteHandler = getOnePolicyRouteHandler;
 //# sourceMappingURL=read.js.map

package/dist/http/controllers/policy/handlers/read.js.map

@@ -1 +1 @@
-{"version":3,"file":"read.js","sourceRoot":"","sources":["../../../../../src/http/controllers/policy/handlers/read.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;;AAEH,qCAAqC;AACrC,+CAAsD;AAEtD,mCAA+C;AAC/C,yDAG2B;AAC3B,qCAA2C;AAC3C,iDAAqE;AAE9D,KAAK,UAAU,yBAAyB,CAAC,GAAY,EAAE,GAAa;IACvE,MAAM,UAAU,GAAG,MAAM,IAAA,iCAAa,GAAE,CAAC;IACzC,MAAM,UAAU,GAAG,IAAI,0BAAgB,CAAC,UAAU,CAAC,CAAC;IAEpD,MAAM,KAAK,GAAG,UAAU,CAAC,kBAAkB,CAAC,QAAQ,CAAC,CAAC;IAEtD,MAAM,EAAE,UAAU,EAAE,GAAG,IAAA,8BAAU,EAAC,KAAK,EAAE,IAAA,uBAAe,EAAC,GAAG,CAAC,EAAE;QAC3D,YAAY,EAAE,QAAQ;QACtB,SAAS,EAAE;YACP,OAAO,EAAE,CAAC,OAAO,CAAC;SACrB;QACD,MAAM,EAAE;YACJ,OAAO,EAAE;gBACL,IAAI;gBACJ,MAAM;gBACN,MAAM;gBACN,aAAa;gBACb,QAAQ;gBACR,UAAU;gBACV,YAAY;gBACZ,YAAY;aACf;SACJ;QACD,OAAO,EAAE;YACL,OAAO,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,YAAY,CAAC;SACtD;QACD,IAAI,EAAE;YACF,OAAO,EAAE,CAAC,IAAI,EAAE,YAAY,EAAE,YAAY,CAAC;SAC9C;QACD,UAAU,EAAE;YACR,QAAQ,EAAE,EAAE;SACf;KACJ,CAAC,CAAC;IAEH,MAAM,CAAC,QAAQ,EAAE,KAAK,CAAC,GAAG,MAAM,KAAK,CAAC,eAAe,EAAE,CAAC;IAExD,MAAM,UAAU,CAAC,kCAAkC,CAAC,QAAQ,CAAC,CAAC;IAE9D,OAAO,IAAA,aAAI,EAAC,GAAG,EAAE;QACb,IAAI,EAAE,QAAQ;QACd,IAAI,EAAE;YACF,KAAK;YACL,GAAG,UAAU;SAChB;KACJ,CAAC,CAAC;AACP,CAAC;AA7CD,8DA6CC;AAEM,KAAK,UAAU,wBAAwB,CAAC,GAAY,EAAE,GAAa;IACtE,MAAM,EAAE,GAAG,IAAA,wBAAe,EAAC,GAAG,EAAE,IAAI,CAAC,CAAC;IAEtC,MAAM,UAAU,GAAG,MAAM,IAAA,iCAAa,GAAE,CAAC;IACzC,MAAM,UAAU,GAAG,IAAI,0BAAgB,CAAC,UAAU,CAAC,CAAC;IAEpD,MAAM,KAAK,GAAG,UAAU,CAAC,kBAAkB,CAAC,QAAQ,CAAC,CAAC;IAEtD,IAAI,IAAA,YAAM,EAAC,EAAE,CAAC,EAAE,CAAC;QACb,KAAK,CAAC,KAAK,CAAC,iBAAiB,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC;IAC3C,CAAC;SAAM,CAAC;QACJ,KAAK,CAAC,KAAK,CAAC,wBAAwB,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC;QAEpD,MAAM,KAAK,GAAG,MAAM,IAAA,sBAAY,EAAC,IAAA,wBAAe,EAAC,GAAG,EAAE,SAAS,CAAC,EAAE,IAAI,CAAC,CAAC;QACxE,KAAK,CAAC,QAAQ,CAAC,4BAA4B,EAAE,EAAE,OAAO,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC;IACxE,CAAC;IAED,IAAA,8BAAU,EAAC,KAAK,EAAE,IAAA,uBAAe,EAAC,GAAG,CAAC,EAAE;QACpC,YAAY,EAAE,QAAQ;QACtB,MAAM,EAAE;YACJ,OAAO,EAAE;gBACL,IAAI;gBACJ,MAAM;gBACN,MAAM;gBACN,aAAa;gBACb,QAAQ;gBACR,UAAU;gBACV,YAAY;gBACZ,YAAY;aACf;SACJ;QACD,SAAS,EAAE;YACP,OAAO,EAAE,CAAC,OAAO,CAAC;SACrB;KACJ,CAAC,CAAC;IAEH,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,MAAM,EAAE,CAAC;IAEpC,IAAI,CAAC,MAAM,EAAE,CAAC;QACV,MAAM,IAAI,oBAAa,EAAE,CAAC;IAC9B,CAAC;IAED,MAAM,UAAU,CAAC,8BAA8B,CAAC,MAAM,CAAC,CAAC;IAExD,OAAO,IAAA,aAAI,EAAC,GAAG,EAAE,MAAM,CAAC,CAAC;AAC7B,CAAC;AA7CD,4DA6CC"}
+{"version":3,"file":"read.js","sourceRoot":"","sources":["../../../../../src/http/controllers/policy/handlers/read.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;AAgBH,8DAsDC;AAED,4DAwDC;AA9HD,+CAAkD;AAClD,qCAAqC;AACrC,+CAAsD;AAEtD,mCAA+C;AAC/C,yDAG2B;AAC3B,qCAA2D;AAC3D,iDAAqE;AACrE,8CAAqD;AACrD,0CAA+C;AAExC,KAAK,UAAU,yBAAyB,CAAC,GAAY,EAAE,GAAa;IACvE,MAAM,OAAO,GAAG,IAAA,qBAAa,EAAC,GAAG,EAAE,WAAW,CAAC,CAAC;IAChD,IACI,CAAC,OAAO,CAAC,GAAG,CAAC,yBAAc,CAAC,eAAe,CAAC;QAC5C,CAAC,OAAO,CAAC,GAAG,CAAC,yBAAc,CAAC,iBAAiB,CAAC;QAC9C,CAAC,OAAO,CAAC,GAAG,CAAC,yBAAc,CAAC,iBAAiB,CAAC,EAChD,CAAC;QACC,MAAM,IAAI,qBAAc,EAAE,CAAC;IAC/B,CAAC;IAED,MAAM,UAAU,GAAG,MAAM,IAAA,iCAAa,GAAE,CAAC;IACzC,MAAM,UAAU,GAAG,IAAI,0BAAgB,CAAC,UAAU,CAAC,CAAC;IAEpD,MAAM,KAAK,GAAG,UAAU,CAAC,kBAAkB,CAAC,QAAQ,CAAC,CAAC;IAEtD,MAAM,EAAE,UAAU,EAAE,GAAG,IAAA,8BAAU,EAAC,KAAK,EAAE,IAAA,uBAAe,EAAC,GAAG,CAAC,EAAE;QAC3D,YAAY,EAAE,QAAQ;QACtB,SAAS,EAAE;YACP,OAAO,EAAE,CAAC,OAAO,CAAC;SACrB;QACD,MAAM,EAAE;YACJ,OAAO,EAAE;gBACL,IAAI;gBACJ,MAAM;gBACN,MAAM;gBACN,aAAa;gBACb,QAAQ;gBACR,UAAU;gBACV,YAAY;gBACZ,YAAY;aACf;SACJ;QACD,OAAO,EAAE;YACL,OAAO,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,YAAY,CAAC;SACtD;QACD,IAAI,EAAE;YACF,OAAO,EAAE,CAAC,IAAI,EAAE,YAAY,EAAE,YAAY,CAAC;SAC9C;QACD,UAAU,EAAE;YACR,QAAQ,EAAE,EAAE;SACf;KACJ,CAAC,CAAC;IAEH,MAAM,CAAC,QAAQ,EAAE,KAAK,CAAC,GAAG,MAAM,KAAK,CAAC,eAAe,EAAE,CAAC;IAExD,MAAM,UAAU,CAAC,kCAAkC,CAAC,QAAQ,CAAC,CAAC;IAE9D,OAAO,IAAA,aAAI,EAAC,GAAG,EAAE;QACb,IAAI,EAAE,QAAQ;QACd,IAAI,EAAE;YACF,KAAK;YACL,GAAG,UAAU;SAChB;KACJ,CAAC,CAAC;AACP,CAAC;AAEM,KAAK,UAAU,wBAAwB,CAAC,GAAY,EAAE,GAAa;IACtE,MAAM,OAAO,GAAG,IAAA,qBAAa,EAAC,GAAG,EAAE,WAAW,CAAC,CAAC;IAChD,IACI,CAAC,OAAO,CAAC,GAAG,CAAC,yBAAc,CAAC,eAAe,CAAC;QAC5C,CAAC,OAAO,CAAC,GAAG,CAAC,yBAAc,CAAC,iBAAiB,CAAC;QAC9C,CAAC,OAAO,CAAC,GAAG,CAAC,yBAAc,CAAC,iBAAiB,CAAC,EAChD,CAAC;QACC,MAAM,IAAI,qBAAc,EAAE,CAAC;IAC/B,CAAC;IAED,MAAM,EAAE,GAAG,IAAA,2BAAiB,EAAC,GAAG,EAAE;QAC9B,MAAM,EAAE,KAAK;KAChB,CAAC,CAAC;IAEH,MAAM,UAAU,GAAG,MAAM,IAAA,iCAAa,GAAE,CAAC;IACzC,MAAM,UAAU,GAAG,IAAI,0BAAgB,CAAC,UAAU,CAAC,CAAC;IAEpD,MAAM,KAAK,GAAG,UAAU,CAAC,kBAAkB,CAAC,QAAQ,CAAC,CAAC;IAEtD,IAAI,IAAA,YAAM,EAAC,EAAE,CAAC,EAAE,CAAC;QACb,KAAK,CAAC,KAAK,CAAC,iBAAiB,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC;IAC3C,CAAC;SAAM,CAAC;QACJ,KAAK,CAAC,KAAK,CAAC,wBAAwB,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC;QAEpD,MAAM,KAAK,GAAG,MAAM,IAAA,sBAAY,EAAC,IAAA,wBAAe,EAAC,GAAG,EAAE,SAAS,CAAC,EAAE,IAAI,CAAC,CAAC;QACxE,KAAK,CAAC,QAAQ,CAAC,4BAA4B,EAAE,EAAE,OAAO,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC;IACxE,CAAC;IAED,IAAA,8BAAU,EAAC,KAAK,EAAE,IAAA,uBAAe,EAAC,GAAG,CAAC,EAAE;QACpC,YAAY,EAAE,QAAQ;QACtB,MAAM,EAAE;YACJ,OAAO,EAAE;gBACL,IAAI;gBACJ,MAAM;gBACN,MAAM;gBACN,aAAa;gBACb,QAAQ;gBACR,UAAU;gBACV,YAAY;gBACZ,YAAY;aACf;SACJ;QACD,SAAS,EAAE;YACP,OAAO,EAAE,CAAC,OAAO,CAAC;SACrB;KACJ,CAAC,CAAC;IAEH,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,MAAM,EAAE,CAAC;IAEpC,IAAI,CAAC,MAAM,EAAE,CAAC;QACV,MAAM,IAAI,oBAAa,EAAE,CAAC;IAC9B,CAAC;IAED,MAAM,UAAU,CAAC,8BAA8B,CAAC,MAAM,CAAC,CAAC;IAExD,OAAO,IAAA,aAAI,EAAC,GAAG,EAAE,MAAM,CAAC,CAAC;AAC7B,CAAC"}

package/dist/http/controllers/policy/handlers/update.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"update.d.ts","sourceRoot":"","sources":["../../../../../src/http/controllers/policy/handlers/update.ts"],"names":[],"mappings":"AAUA,OAAO,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,QAAQ,CAAC;AAShD,wBAAsB,wBAAwB,CAAC,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,QAAQ,GAAI,OAAO,CAAC,GAAG,CAAC,CAgDzF"}
+{"version":3,"file":"update.d.ts","sourceRoot":"","sources":["../../../../../src/http/controllers/policy/handlers/update.ts"],"names":[],"mappings":"AAUA,OAAO,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,QAAQ,CAAC;AAShD,wBAAsB,wBAAwB,CAAC,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,QAAQ,GAAI,OAAO,CAAC,GAAG,CAAC,CAoDzF"}

package/dist/http/controllers/policy/handlers/update.js

@@ -6,7 +6,7 @@
  * view the LICENSE file that was distributed with this source code.
  */
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.updatePolicyRouteHandler = void 0;
+exports.updatePolicyRouteHandler = updatePolicyRouteHandler;
 const kit_1 = require("@authup/kit");
 const http_1 = require("@ebec/http");
 const core_kit_1 = require("@authup/core-kit");
@@ -18,9 +18,9 @@ const utils_1 = require("../../../utils");
 const utils_2 = require("../utils");
 const request_1 = require("../../../request");
 async function updatePolicyRouteHandler(req, res) {
-    const id = (0, routup_1.useRequestParam)(req, 'id');
+    const id = (0, request_1.useRequestIDParam)(req);
     const ability = (0, utils_1.useRequestEnv)(req, 'abilities');
-    if (!ability.has(core_kit_1.PermissionName.PERMISSION_EDIT)) {
+    if (!ability.has(core_kit_1.PermissionName.PERMISSION_UPDATE)) {
         throw new http_1.ForbiddenError();
     }
     const validator = new utils_2.PolicyRequestValidator();
@@ -52,8 +52,10 @@ async function updatePolicyRouteHandler(req, res) {
         throw new http_1.ForbiddenError();
     }
     entity = repository.merge(entity, data);
+    if (!ability.can(core_kit_1.PermissionName.PERMISSION_UPDATE, { attributes: { ...entity, ...attributes } })) {
+        throw new http_1.ForbiddenError();
+    }
     await repository.saveWithAttributes(entity, attributes);
     return (0, routup_1.sendAccepted)(res, entity);
 }
-exports.updatePolicyRouteHandler = updatePolicyRouteHandler;
 //# sourceMappingURL=update.js.map

package/dist/http/controllers/policy/handlers/update.js.map

@@ -1 +1 @@
-{"version":3,"file":"update.js","sourceRoot":"","sources":["../../../../../src/http/controllers/policy/handlers/update.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;;AAEH,qCAA+D;AAC/D,qCAA4E;AAC5E,+CAA2E;AAE3E,mCAAuD;AACvD,yDAAkD;AAClD,mDAA0E;AAC1E,iDAAqE;AACrE,0CAA+C;AAC/C,oCAAkD;AAClD,8CAA2D;AAEpD,KAAK,UAAU,wBAAwB,CAAC,GAAY,EAAE,GAAa;IACtE,MAAM,EAAE,GAAG,IAAA,wBAAe,EAAC,GAAG,EAAE,IAAI,CAAC,CAAC;IAEtC,MAAM,OAAO,GAAG,IAAA,qBAAa,EAAC,GAAG,EAAE,WAAW,CAAC,CAAC;IAChD,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,yBAAc,CAAC,eAAe,CAAC,EAAE,CAAC;QAC/C,MAAM,IAAI,qBAAc,EAAE,CAAC;IAC/B,CAAC;IAED,MAAM,SAAS,GAAG,IAAI,8BAAsB,EAAE,CAAC;IAE/C,MAAM,CAAC,IAAI,EAAE,UAAU,CAAC,GAAG,MAAM,SAAS,CAAC,qBAAqB,CAAC,GAAG,EAAE;QAClE,KAAK,EAAE,iCAAuB,CAAC,MAAM;KACxC,CAAC,CAAC;IAEH,MAAM,UAAU,GAAG,MAAM,IAAA,iCAAa,GAAE,CAAC;IACzC,MAAM,UAAU,GAAG,IAAI,0BAAgB,CAAC,UAAU,CAAC,CAAC;IAEpD,IAAI,MAAM,GAAG,MAAM,UAAU,CAAC,SAAS,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;IAChD,IAAI,CAAC,MAAM,EAAE,CAAC;QACV,MAAM,IAAI,oBAAa,EAAE,CAAC;IAC9B,CAAC;IAED,MAAM,IAAA,6CAAkC,EAAC,sBAAY,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC;IAErE,IAAI,IAAA,mBAAa,EAAC,IAAI,EAAE,WAAW,CAAC,EAAE,CAAC;QACnC,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;YACjB,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,SAAS,CAAC,EAAE,EAAE,EAAE,IAAI,CAAC,SAAS,EAAE,CAAC,CAAC;YAClE,IAAI,MAAM,EAAE,CAAC;gBACT,IAAI,MAAM,CAAC,IAAI,KAAK,uBAAiB,CAAC,SAAS,EAAE,CAAC;oBAC9C,MAAM,IAAI,sBAAe,CAAC,0CAA0C,CAAC,CAAC;gBAC1E,CAAC;YACL,CAAC;YAED,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QACzB,CAAC;aAAM,CAAC;YACJ,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC;QACvB,CAAC;IACL,CAAC;IAED,IAAI,CAAC,IAAA,kCAAuB,EAAC,IAAA,qBAAa,EAAC,GAAG,EAAE,OAAO,CAAC,EAAE,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC;QACzE,MAAM,IAAI,qBAAc,EAAE,CAAC;IAC/B,CAAC;IAED,MAAM,GAAG,UAAU,CAAC,KAAK,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;IAExC,MAAM,UAAU,CAAC,kBAAkB,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;IAExD,OAAO,IAAA,qBAAY,EAAC,GAAG,EAAE,MAAM,CAAC,CAAC;AACrC,CAAC;AAhDD,4DAgDC"}
+{"version":3,"file":"update.js","sourceRoot":"","sources":["../../../../../src/http/controllers/policy/handlers/update.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;AAcH,4DAoDC;AAhED,qCAA+D;AAC/D,qCAA4E;AAC5E,+CAA2E;AAE3E,mCAAsC;AACtC,yDAAkD;AAClD,mDAA0E;AAC1E,iDAAqE;AACrE,0CAA+C;AAC/C,oCAAkD;AAClD,8CAA8E;AAEvE,KAAK,UAAU,wBAAwB,CAAC,GAAY,EAAE,GAAa;IACtE,MAAM,EAAE,GAAG,IAAA,2BAAiB,EAAC,GAAG,CAAC,CAAC;IAElC,MAAM,OAAO,GAAG,IAAA,qBAAa,EAAC,GAAG,EAAE,WAAW,CAAC,CAAC;IAChD,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,yBAAc,CAAC,iBAAiB,CAAC,EAAE,CAAC;QACjD,MAAM,IAAI,qBAAc,EAAE,CAAC;IAC/B,CAAC;IAED,MAAM,SAAS,GAAG,IAAI,8BAAsB,EAAE,CAAC;IAE/C,MAAM,CAAC,IAAI,EAAE,UAAU,CAAC,GAAG,MAAM,SAAS,CAAC,qBAAqB,CAAC,GAAG,EAAE;QAClE,KAAK,EAAE,iCAAuB,CAAC,MAAM;KACxC,CAAC,CAAC;IAEH,MAAM,UAAU,GAAG,MAAM,IAAA,iCAAa,GAAE,CAAC;IACzC,MAAM,UAAU,GAAG,IAAI,0BAAgB,CAAC,UAAU,CAAC,CAAC;IAEpD,IAAI,MAAM,GAAG,MAAM,UAAU,CAAC,SAAS,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;IAChD,IAAI,CAAC,MAAM,EAAE,CAAC;QACV,MAAM,IAAI,oBAAa,EAAE,CAAC;IAC9B,CAAC;IAED,MAAM,IAAA,6CAAkC,EAAC,sBAAY,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC;IAErE,IAAI,IAAA,mBAAa,EAAC,IAAI,EAAE,WAAW,CAAC,EAAE,CAAC;QACnC,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;YACjB,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,SAAS,CAAC,EAAE,EAAE,EAAE,IAAI,CAAC,SAAS,EAAE,CAAC,CAAC;YAClE,IAAI,MAAM,EAAE,CAAC;gBACT,IAAI,MAAM,CAAC,IAAI,KAAK,uBAAiB,CAAC,SAAS,EAAE,CAAC;oBAC9C,MAAM,IAAI,sBAAe,CAAC,0CAA0C,CAAC,CAAC;gBAC1E,CAAC;YACL,CAAC;YAED,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QACzB,CAAC;aAAM,CAAC;YACJ,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC;QACvB,CAAC;IACL,CAAC;IAED,IAAI,CAAC,IAAA,kCAAuB,EAAC,IAAA,qBAAa,EAAC,GAAG,EAAE,OAAO,CAAC,EAAE,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC;QACzE,MAAM,IAAI,qBAAc,EAAE,CAAC;IAC/B,CAAC;IAED,MAAM,GAAG,UAAU,CAAC,KAAK,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;IAExC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,yBAAc,CAAC,iBAAiB,EAAE,EAAE,UAAU,EAAE,EAAE,GAAG,MAAM,EAAE,GAAG,UAAU,EAAE,EAAE,CAAC,EAAE,CAAC;QAC/F,MAAM,IAAI,qBAAc,EAAE,CAAC;IAC/B,CAAC;IAED,MAAM,UAAU,CAAC,kBAAkB,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;IAExD,OAAO,IAAA,qBAAY,EAAC,GAAG,EAAE,MAAM,CAAC,CAAC;AACrC,CAAC"}

package/dist/http/controllers/policy/utils/validation.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"validation.d.ts","sourceRoot":"","sources":["../../../../../src/http/controllers/policy/utils/validation.ts"],"names":[],"mappings":"AAUA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,QAAQ,CAAC;AAEtC,OAAO,EAAE,wBAAwB,EAAE,KAAK,8BAA8B,EAAE,MAAM,kBAAkB,CAAC;AACjG,OAAO,EACH,YAAY,EAKf,MAAM,qBAAqB,CAAC;AAI7B,KAAK,sBAAsB,GAAG,YAAY,GAAG;IACzC,SAAS,CAAC,EAAE,MAAM,CAAA;CACrB,CAAC;AAEF,qBAAa,sBAAuB,SAAQ,wBAAwB,CAAC,sBAAsB,CAAC;;IAOxF,KAAK;IA4BC,qBAAqB,CACvB,GAAG,EAAE,OAAO,EACZ,OAAO,GAAE,8BAA8B,CAAC,sBAAsB,CAAM,GACpE,OAAO,CAAC,CAAC,sBAAsB,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,CAAC;CA0C7D"}
+{"version":3,"file":"validation.d.ts","sourceRoot":"","sources":["../../../../../src/http/controllers/policy/utils/validation.ts"],"names":[],"mappings":"AAUA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,QAAQ,CAAC;AAEtC,OAAO,EAAE,wBAAwB,EAAE,KAAK,8BAA8B,EAAE,MAAM,kBAAkB,CAAC;AACjG,OAAO,EACH,YAAY,EAKf,MAAM,qBAAqB,CAAC;AAI7B,KAAK,sBAAsB,GAAG,YAAY,GAAG;IACzC,SAAS,CAAC,EAAE,MAAM,CAAA;CACrB,CAAC;AAEF,qBAAa,sBAAuB,SAAQ,wBAAwB,CAAC,sBAAsB,CAAC;;IAOxF,KAAK;IAyBC,qBAAqB,CACvB,GAAG,EAAE,OAAO,EACZ,OAAO,GAAE,8BAA8B,CAAC,sBAAsB,CAAM,GACpE,OAAO,CAAC,CAAC,sBAAsB,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,CAAC;CA+C7D"}

package/dist/http/controllers/policy/utils/validation.js

@@ -22,18 +22,15 @@ class PolicyRequestValidator extends core_1.RequestDatabaseValidator {
     }
     mount() {
         this.add('name')
-            .exists()
-            .notEmpty()
             .isString()
             .isLength({ min: 3, max: 128 });
         this.add('invert')
-            .exists()
-            .notEmpty()
-            .isBoolean();
+            .isBoolean()
+            .optional({ values: 'undefined' });
         this.add('type')
             .exists()
-            .notEmpty()
-            .isIn(Object.values(kit_1.BuiltInPolicyType));
+            .isString()
+            .isLength({ min: 3, max: 128 });
         this.add('parent_id')
             .exists()
             .isUUID()
@@ -65,6 +62,11 @@ class PolicyRequestValidator extends core_1.RequestDatabaseValidator {
                     attributes = (0, domains_1.validateTimePolicyShaping)(body);
                     break;
                 }
+                default: {
+                    const internal = await this.getFields();
+                    attributes = (0, kit_1.omitRecord)(body, internal);
+                    // todo: maybe limit attributes size
+                }
             }
         }
         catch (e) {

package/dist/http/controllers/policy/utils/validation.js.map

@@ -1 +1 @@
-{"version":3,"file":"validation.js","sourceRoot":"","sources":["../../../../../src/http/controllers/policy/utils/validation.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;;AAEH,qCAAgD;AAChD,6CAAoD;AACpD,qCAA6C;AAE7C,6BAA+B;AAC/B,2CAAiG;AACjG,iDAM6B;AAC7B,6CAAiE;AACjE,8CAA2D;AAM3D,MAAa,sBAAuB,SAAQ,+BAAgD;IACxF;QACI,KAAK,CAAC,sBAAY,CAAC,CAAC;QAEpB,IAAI,CAAC,KAAK,EAAE,CAAC;IACjB,CAAC;IAED,KAAK;QACD,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC;aACX,MAAM,EAAE;aACR,QAAQ,EAAE;aACV,QAAQ,EAAE;aACV,QAAQ,CAAC,EAAE,GAAG,EAAE,CAAC,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,CAAC;QAEpC,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC;aACb,MAAM,EAAE;aACR,QAAQ,EAAE;aACV,SAAS,EAAE,CAAC;QAEjB,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC;aACX,MAAM,EAAE;aACR,QAAQ,EAAE;aACV,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,uBAAiB,CAAC,CAAC,CAAC;QAE5C,IAAI,CAAC,GAAG,CAAC,WAAW,CAAC;aAChB,MAAM,EAAE;aACR,MAAM,EAAE;aACR,QAAQ,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;QAElC,IAAI,CAAC,KAAK,CAAC,iCAAuB,CAAC,MAAM,EAAE,UAAU,CAAC;aACjD,MAAM,EAAE;aACR,MAAM,EAAE;aACR,QAAQ,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;IACtC,CAAC;IAED,KAAK,CAAC,qBAAqB,CACvB,GAAY,EACZ,UAAkE,EAAE;QAEpE,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;QAE9C,IAAI,UAAU,GAAyB,EAAE,CAAC;QAE1C,IAAI,CAAC;YACD,MAAM,IAAI,GAAG,IAAA,qBAAc,EAAC,GAAG,CAAC,CAAC;YAEjC,QAAQ,IAAI,CAAC,IAAI,EAAE,CAAC;gBAChB,KAAK,uBAAiB,CAAC,UAAU,CAAC,CAAC,CAAC;oBAChC,UAAU,GAAG,IAAA,yCAA+B,EAAC,IAAI,CAAC,CAAC;oBACnD,MAAM;gBACV,CAAC;gBACD,KAAK,uBAAiB,CAAC,eAAe,CAAC,CAAC,CAAC;oBACrC,UAAU,GAAG,IAAA,6CAAmC,EAAC,IAAI,CAAC,CAAC;oBACvD,MAAM;gBACV,CAAC;gBACD,KAAK,uBAAiB,CAAC,IAAI,CAAC,CAAC,CAAC;oBAC1B,UAAU,GAAG,IAAA,mCAAyB,EAAC,IAAI,CAAC,CAAC;oBAC7C,MAAM;gBACV,CAAC;gBACD,KAAK,uBAAiB,CAAC,IAAI,CAAC,CAAC,CAAC;oBAC1B,UAAU,GAAG,IAAA,mCAAyB,EAAC,IAAI,CAAC,CAAC;oBAC7C,MAAM;gBACV,CAAC;YACL,CAAC;QACL,CAAC;QAAC,OAAO,CAAM,EAAE,CAAC;YACd,IAAI,CAAC,YAAY,cAAQ,EAAE,CAAC;gBACxB,MAAM,IAAI,sBAAe,CAAC,IAAA,oCAA4B,EAAC,CAAC,CAAC,CAAC,CAAC;YAC/D,CAAC;YAED,IAAI,CAAC,YAAY,KAAK,EAAE,CAAC;gBACrB,MAAM,IAAI,sBAAe,CAAC,CAAC,CAAC,OAAO,EAAE;oBACjC,KAAK,EAAE,CAAC;iBACX,CAAC,CAAC;YACP,CAAC;YAED,MAAM,CAAC,CAAC;QACZ,CAAC;QAED,OAAO,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;IAC9B,CAAC;CACJ;AAhFD,wDAgFC"}
+{"version":3,"file":"validation.js","sourceRoot":"","sources":["../../../../../src/http/controllers/policy/utils/validation.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;;AAEH,qCAA4D;AAC5D,6CAAoD;AACpD,qCAA6C;AAE7C,6BAA+B;AAC/B,2CAAiG;AACjG,iDAM6B;AAC7B,6CAAiE;AACjE,8CAA2D;AAM3D,MAAa,sBAAuB,SAAQ,+BAAgD;IACxF;QACI,KAAK,CAAC,sBAAY,CAAC,CAAC;QAEpB,IAAI,CAAC,KAAK,EAAE,CAAC;IACjB,CAAC;IAED,KAAK;QACD,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC;aACX,QAAQ,EAAE;aACV,QAAQ,CAAC,EAAE,GAAG,EAAE,CAAC,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,CAAC;QAEpC,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC;aACb,SAAS,EAAE;aACX,QAAQ,CAAC,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC,CAAC;QAEvC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC;aACX,MAAM,EAAE;aACR,QAAQ,EAAE;aACV,QAAQ,CAAC,EAAE,GAAG,EAAE,CAAC,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,CAAC;QAEpC,IAAI,CAAC,GAAG,CAAC,WAAW,CAAC;aAChB,MAAM,EAAE;aACR,MAAM,EAAE;aACR,QAAQ,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;QAElC,IAAI,CAAC,KAAK,CAAC,iCAAuB,CAAC,MAAM,EAAE,UAAU,CAAC;aACjD,MAAM,EAAE;aACR,MAAM,EAAE;aACR,QAAQ,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;IACtC,CAAC;IAED,KAAK,CAAC,qBAAqB,CACvB,GAAY,EACZ,UAAkE,EAAE;QAEpE,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;QAE9C,IAAI,UAAU,GAAyB,EAAE,CAAC;QAE1C,IAAI,CAAC;YACD,MAAM,IAAI,GAAG,IAAA,qBAAc,EAAC,GAAG,CAAC,CAAC;YAEjC,QAAQ,IAAI,CAAC,IAAI,EAAE,CAAC;gBAChB,KAAK,uBAAiB,CAAC,UAAU,CAAC,CAAC,CAAC;oBAChC,UAAU,GAAG,IAAA,yCAA+B,EAAC,IAAI,CAAC,CAAC;oBACnD,MAAM;gBACV,CAAC;gBACD,KAAK,uBAAiB,CAAC,eAAe,CAAC,CAAC,CAAC;oBACrC,UAAU,GAAG,IAAA,6CAAmC,EAAC,IAAI,CAAC,CAAC;oBACvD,MAAM;gBACV,CAAC;gBACD,KAAK,uBAAiB,CAAC,IAAI,CAAC,CAAC,CAAC;oBAC1B,UAAU,GAAG,IAAA,mCAAyB,EAAC,IAAI,CAAC,CAAC;oBAC7C,MAAM;gBACV,CAAC;gBACD,KAAK,uBAAiB,CAAC,IAAI,CAAC,CAAC,CAAC;oBAC1B,UAAU,GAAG,IAAA,mCAAyB,EAAC,IAAI,CAAC,CAAC;oBAC7C,MAAM;gBACV,CAAC;gBACD,OAAO,CAAC,CAAC,CAAC;oBACN,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,SAAS,EAAE,CAAC;oBACxC,UAAU,GAAG,IAAA,gBAAU,EAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;oBACxC,oCAAoC;gBACxC,CAAC;YACL,CAAC;QACL,CAAC;QAAC,OAAO,CAAM,EAAE,CAAC;YACd,IAAI,CAAC,YAAY,cAAQ,EAAE,CAAC;gBACxB,MAAM,IAAI,sBAAe,CAAC,IAAA,oCAA4B,EAAC,CAAC,CAAC,CAAC,CAAC;YAC/D,CAAC;YAED,IAAI,CAAC,YAAY,KAAK,EAAE,CAAC;gBACrB,MAAM,IAAI,sBAAe,CAAC,CAAC,CAAC,OAAO,EAAE;oBACjC,KAAK,EAAE,CAAC;iBACX,CAAC,CAAC;YACP,CAAC;YAED,MAAM,CAAC,CAAC;QACZ,CAAC;QAED,OAAO,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;IAC9B,CAAC;CACJ;AAlFD,wDAkFC"}

package/dist/http/controllers/realm/handlers/create.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"create.d.ts","sourceRoot":"","sources":["../../../../../src/http/controllers/realm/handlers/create.ts"],"names":[],"mappings":"AAWA,OAAO,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,QAAQ,CAAC;AAQhD,wBAAsB,uBAAuB,CAAC,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,QAAQ,GAAI,OAAO,CAAC,GAAG,CAAC,CAmBxF"}
+{"version":3,"file":"create.d.ts","sourceRoot":"","sources":["../../../../../src/http/controllers/realm/handlers/create.ts"],"names":[],"mappings":"AAWA,OAAO,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,QAAQ,CAAC;AAQhD,wBAAsB,uBAAuB,CAAC,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,QAAQ,GAAI,OAAO,CAAC,GAAG,CAAC,CAuBxF"}

package/dist/http/controllers/realm/handlers/create.js

@@ -6,7 +6,7 @@
  * view the LICENSE file that was distributed with this source code.
  */
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.createRealmRouteHandler = void 0;
+exports.createRealmRouteHandler = createRealmRouteHandler;
 const http_1 = require("@ebec/http");
 const core_kit_1 = require("@authup/core-kit");
 const routup_1 = require("routup");
@@ -17,7 +17,7 @@ const utils_2 = require("../utils");
 const request_1 = require("../../../request");
 async function createRealmRouteHandler(req, res) {
     const ability = (0, utils_1.useRequestEnv)(req, 'abilities');
-    if (!ability.has(core_kit_1.PermissionName.REALM_ADD)) {
+    if (!ability.has(core_kit_1.PermissionName.REALM_CREATE)) {
         throw new http_1.ForbiddenError('You are not permitted to add a realm.');
     }
     const validator = new utils_2.RealmRequestValidator();
@@ -26,9 +26,11 @@ async function createRealmRouteHandler(req, res) {
     });
     const dataSource = await (0, typeorm_extension_1.useDataSource)();
     const repository = dataSource.getRepository(domains_1.RealmEntity);
+    if (!ability.can(core_kit_1.PermissionName.REALM_CREATE, { attributes: data })) {
+        throw new http_1.ForbiddenError();
+    }
     const entity = repository.create(data);
     await repository.save(entity);
     return (0, routup_1.sendCreated)(res, entity);
 }
-exports.createRealmRouteHandler = createRealmRouteHandler;
 //# sourceMappingURL=create.js.map

package/dist/http/controllers/realm/handlers/create.js.map

@@ -1 +1 @@
-{"version":3,"file":"create.js","sourceRoot":"","sources":["../../../../../src/http/controllers/realm/handlers/create.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;;AAEH,qCAA4C;AAC5C,+CAE0B;AAE1B,mCAAqC;AACrC,yDAAkD;AAClD,iDAAkD;AAClD,0CAA+C;AAC/C,oCAAiD;AACjD,8CAA2D;AAEpD,KAAK,UAAU,uBAAuB,CAAC,GAAY,EAAE,GAAa;IACrE,MAAM,OAAO,GAAG,IAAA,qBAAa,EAAC,GAAG,EAAE,WAAW,CAAC,CAAC;IAChD,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,yBAAc,CAAC,SAAS,CAAC,EAAE,CAAC;QACzC,MAAM,IAAI,qBAAc,CAAC,uCAAuC,CAAC,CAAC;IACtE,CAAC;IAED,MAAM,SAAS,GAAG,IAAI,6BAAqB,EAAE,CAAC;IAC9C,MAAM,IAAI,GAAG,MAAM,SAAS,CAAC,OAAO,CAAC,GAAG,EAAE;QACtC,KAAK,EAAE,iCAAuB,CAAC,MAAM;KACxC,CAAC,CAAC;IAEH,MAAM,UAAU,GAAG,MAAM,IAAA,iCAAa,GAAE,CAAC;IACzC,MAAM,UAAU,GAAG,UAAU,CAAC,aAAa,CAAC,qBAAW,CAAC,CAAC;IAEzD,MAAM,MAAM,GAAG,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IAEvC,MAAM,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAE9B,OAAO,IAAA,oBAAW,EAAC,GAAG,EAAE,MAAM,CAAC,CAAC;AACpC,CAAC;AAnBD,0DAmBC"}
+{"version":3,"file":"create.js","sourceRoot":"","sources":["../../../../../src/http/controllers/realm/handlers/create.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;AAcH,0DAuBC;AAnCD,qCAA4C;AAC5C,+CAE0B;AAE1B,mCAAqC;AACrC,yDAAkD;AAClD,iDAAkD;AAClD,0CAA+C;AAC/C,oCAAiD;AACjD,8CAA2D;AAEpD,KAAK,UAAU,uBAAuB,CAAC,GAAY,EAAE,GAAa;IACrE,MAAM,OAAO,GAAG,IAAA,qBAAa,EAAC,GAAG,EAAE,WAAW,CAAC,CAAC;IAChD,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,yBAAc,CAAC,YAAY,CAAC,EAAE,CAAC;QAC5C,MAAM,IAAI,qBAAc,CAAC,uCAAuC,CAAC,CAAC;IACtE,CAAC;IAED,MAAM,SAAS,GAAG,IAAI,6BAAqB,EAAE,CAAC;IAC9C,MAAM,IAAI,GAAG,MAAM,SAAS,CAAC,OAAO,CAAC,GAAG,EAAE;QACtC,KAAK,EAAE,iCAAuB,CAAC,MAAM;KACxC,CAAC,CAAC;IAEH,MAAM,UAAU,GAAG,MAAM,IAAA,iCAAa,GAAE,CAAC;IACzC,MAAM,UAAU,GAAG,UAAU,CAAC,aAAa,CAAC,qBAAW,CAAC,CAAC;IAEzD,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,yBAAc,CAAC,YAAY,EAAE,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;QAClE,MAAM,IAAI,qBAAc,EAAE,CAAC;IAC/B,CAAC;IAED,MAAM,MAAM,GAAG,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IAEvC,MAAM,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAE9B,OAAO,IAAA,oBAAW,EAAC,GAAG,EAAE,MAAM,CAAC,CAAC;AACpC,CAAC"}

package/dist/http/controllers/realm/handlers/delete.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"delete.d.ts","sourceRoot":"","sources":["../../../../../src/http/controllers/realm/handlers/delete.ts"],"names":[],"mappings":"AAUA,OAAO,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,QAAQ,CAAC;AAMhD,wBAAsB,uBAAuB,CAAC,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,QAAQ,GAAI,OAAO,CAAC,GAAG,CAAC,CA4BxF"}
+{"version":3,"file":"delete.d.ts","sourceRoot":"","sources":["../../../../../src/http/controllers/realm/handlers/delete.ts"],"names":[],"mappings":"AAUA,OAAO,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,QAAQ,CAAC;AAOhD,wBAAsB,uBAAuB,CAAC,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,QAAQ,GAAI,OAAO,CAAC,GAAG,CAAC,CAgCxF"}

package/dist/http/controllers/realm/handlers/delete.js

@@ -6,17 +6,18 @@
  * view the LICENSE file that was distributed with this source code.
  */
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.deleteRealmRouteHandler = void 0;
+exports.deleteRealmRouteHandler = deleteRealmRouteHandler;
 const http_1 = require("@ebec/http");
 const core_kit_1 = require("@authup/core-kit");
 const routup_1 = require("routup");
 const typeorm_extension_1 = require("typeorm-extension");
 const domains_1 = require("../../../../domains");
-const env_1 = require("../../../utils/env");
+const request_1 = require("../../../request");
+const utils_1 = require("../../../utils");
 async function deleteRealmRouteHandler(req, res) {
-    const id = (0, routup_1.useRequestParam)(req, 'id');
-    const ability = (0, env_1.useRequestEnv)(req, 'abilities');
-    if (!ability.has(core_kit_1.PermissionName.REALM_DROP)) {
+    const id = (0, request_1.useRequestIDParam)(req);
+    const ability = (0, utils_1.useRequestEnv)(req, 'abilities');
+    if (!ability.has(core_kit_1.PermissionName.REALM_DELETE)) {
         throw new http_1.ForbiddenError('You are not allowed to drop a realm.');
     }
     const dataSource = await (0, typeorm_extension_1.useDataSource)();
@@ -28,10 +29,12 @@ async function deleteRealmRouteHandler(req, res) {
     if (!entity.built_in) {
         throw new http_1.BadRequestError('The realm can not be deleted in general.');
     }
+    if (!ability.can(core_kit_1.PermissionName.REALM_DELETE, { attributes: entity })) {
+        throw new http_1.ForbiddenError();
+    }
     const { id: entityId } = entity;
     await repository.remove(entity);
     entity.id = entityId;
     return (0, routup_1.sendAccepted)(res, entity);
 }
-exports.deleteRealmRouteHandler = deleteRealmRouteHandler;
 //# sourceMappingURL=delete.js.map

package/dist/http/controllers/realm/handlers/delete.js.map

@@ -1 +1 @@
-{"version":3,"file":"delete.js","sourceRoot":"","sources":["../../../../../src/http/controllers/realm/handlers/delete.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;;AAEH,qCAA4E;AAE5E,+CAAkD;AAElD,mCAAuD;AACvD,yDAAkD;AAClD,iDAAkD;AAClD,4CAAmD;AAE5C,KAAK,UAAU,uBAAuB,CAAC,GAAY,EAAE,GAAa;IACrE,MAAM,EAAE,GAAG,IAAA,wBAAe,EAAC,GAAG,EAAE,IAAI,CAAC,CAAC;IAEtC,MAAM,OAAO,GAAG,IAAA,mBAAa,EAAC,GAAG,EAAE,WAAW,CAAC,CAAC;IAChD,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,yBAAc,CAAC,UAAU,CAAC,EAAE,CAAC;QAC1C,MAAM,IAAI,qBAAc,CAAC,sCAAsC,CAAC,CAAC;IACrE,CAAC;IAED,MAAM,UAAU,GAAG,MAAM,IAAA,iCAAa,GAAE,CAAC;IACzC,MAAM,UAAU,GAAG,UAAU,CAAC,aAAa,CAAC,qBAAW,CAAC,CAAC;IAEzD,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,SAAS,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;IAElD,IAAI,CAAC,MAAM,EAAE,CAAC;QACV,MAAM,IAAI,oBAAa,EAAE,CAAC;IAC9B,CAAC;IAED,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC;QACnB,MAAM,IAAI,sBAAe,CAAC,0CAA0C,CAAC,CAAC;IAC1E,CAAC;IAED,MAAM,EAAE,EAAE,EAAE,QAAQ,EAAE,GAAG,MAAM,CAAC;IAEhC,MAAM,UAAU,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAEhC,MAAM,CAAC,EAAE,GAAG,QAAQ,CAAC;IAErB,OAAO,IAAA,qBAAY,EAAC,GAAG,EAAE,MAAM,CAAC,CAAC;AACrC,CAAC;AA5BD,0DA4BC"}
+{"version":3,"file":"delete.js","sourceRoot":"","sources":["../../../../../src/http/controllers/realm/handlers/delete.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;AAYH,0DAgCC;AA1CD,qCAA4E;AAE5E,+CAAkD;AAElD,mCAAsC;AACtC,yDAAkD;AAClD,iDAAkD;AAClD,8CAAqD;AACrD,0CAA+C;AAExC,KAAK,UAAU,uBAAuB,CAAC,GAAY,EAAE,GAAa;IACrE,MAAM,EAAE,GAAG,IAAA,2BAAiB,EAAC,GAAG,CAAC,CAAC;IAElC,MAAM,OAAO,GAAG,IAAA,qBAAa,EAAC,GAAG,EAAE,WAAW,CAAC,CAAC;IAChD,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,yBAAc,CAAC,YAAY,CAAC,EAAE,CAAC;QAC5C,MAAM,IAAI,qBAAc,CAAC,sCAAsC,CAAC,CAAC;IACrE,CAAC;IAED,MAAM,UAAU,GAAG,MAAM,IAAA,iCAAa,GAAE,CAAC;IACzC,MAAM,UAAU,GAAG,UAAU,CAAC,aAAa,CAAC,qBAAW,CAAC,CAAC;IAEzD,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,SAAS,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;IAElD,IAAI,CAAC,MAAM,EAAE,CAAC;QACV,MAAM,IAAI,oBAAa,EAAE,CAAC;IAC9B,CAAC;IAED,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC;QACnB,MAAM,IAAI,sBAAe,CAAC,0CAA0C,CAAC,CAAC;IAC1E,CAAC;IAED,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,yBAAc,CAAC,YAAY,EAAE,EAAE,UAAU,EAAE,MAAM,EAAE,CAAC,EAAE,CAAC;QACpE,MAAM,IAAI,qBAAc,EAAE,CAAC;IAC/B,CAAC;IAED,MAAM,EAAE,EAAE,EAAE,QAAQ,EAAE,GAAG,MAAM,CAAC;IAEhC,MAAM,UAAU,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAEhC,MAAM,CAAC,EAAE,GAAG,QAAQ,CAAC;IAErB,OAAO,IAAA,qBAAY,EAAC,GAAG,EAAE,MAAM,CAAC,CAAC;AACrC,CAAC"}

package/dist/http/controllers/realm/handlers/jwks.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"jwks.d.ts","sourceRoot":"","sources":["../../../../../src/http/controllers/realm/handlers/jwks.ts"],"names":[],"mappings":"AAUA,OAAO,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,QAAQ,CAAC;AAOhD,wBAAsB,wBAAwB,CAAC,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,QAAQ,GAAI,OAAO,CAAC,GAAG,CAAC,CAiCzF"}
+{"version":3,"file":"jwks.d.ts","sourceRoot":"","sources":["../../../../../src/http/controllers/realm/handlers/jwks.ts"],"names":[],"mappings":"AAUA,OAAO,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,QAAQ,CAAC;AAQhD,wBAAsB,wBAAwB,CAAC,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,QAAQ,GAAI,OAAO,CAAC,GAAG,CAAC,CAiCzF"}

package/dist/http/controllers/realm/handlers/jwks.js

@@ -6,7 +6,7 @@
  * view the LICENSE file that was distributed with this source code.
  */
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.getRealmJwksRouteHandler = void 0;
+exports.getRealmJwksRouteHandler = getRealmJwksRouteHandler;
 const kit_1 = require("@authup/kit");
 const node_crypto_1 = require("node:crypto");
 const routup_1 = require("routup");
@@ -14,8 +14,9 @@ const typeorm_1 = require("typeorm");
 const server_kit_1 = require("@authup/server-kit");
 const typeorm_extension_1 = require("typeorm-extension");
 const domains_1 = require("../../../../domains");
+const request_1 = require("../../../request");
 async function getRealmJwksRouteHandler(req, res) {
-    const id = (0, routup_1.useRequestParam)(req, 'id');
+    const id = (0, request_1.useRequestIDParam)(req);
     const dataSource = await (0, typeorm_extension_1.useDataSource)();
     const repository = dataSource.getRepository(domains_1.KeyEntity);
     const entities = await repository.find({
@@ -42,5 +43,4 @@ async function getRealmJwksRouteHandler(req, res) {
         keys,
     });
 }
-exports.getRealmJwksRouteHandler = getRealmJwksRouteHandler;
 //# sourceMappingURL=jwks.js.map

package/dist/http/controllers/realm/handlers/jwks.js.map

@@ -1 +1 @@
-{"version":3,"file":"jwks.js","sourceRoot":"","sources":["../../../../../src/http/controllers/realm/handlers/jwks.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;;AAEH,qCAAsC;AAEtC,6CAA8C;AAE9C,mCAA+C;AAC/C,qCAA6B;AAC7B,mDAAsD;AACtD,yDAAkD;AAClD,iDAAgD;AAEzC,KAAK,UAAU,wBAAwB,CAAC,GAAY,EAAE,GAAa;IACtE,MAAM,EAAE,GAAG,IAAA,wBAAe,EAAC,GAAG,EAAE,IAAI,CAAC,CAAC;IAEtC,MAAM,UAAU,GAAG,MAAM,IAAA,iCAAa,GAAE,CAAC;IACzC,MAAM,UAAU,GAAG,UAAU,CAAC,aAAa,CAAC,mBAAS,CAAC,CAAC;IAEvD,MAAM,QAAQ,GAAG,MAAM,UAAU,CAAC,IAAI,CAAC;QACnC,KAAK,EAAE;YACH,QAAQ,EAAE,EAAE;YACZ,IAAI,EAAE,IAAA,YAAE,EAAC,CAAC,aAAO,CAAC,GAAG,EAAE,aAAO,CAAC,EAAE,CAAC,CAAC;SACtC;QACD,KAAK,EAAE;YACH,QAAQ,EAAE,MAAM;SACnB;KACJ,CAAC,CAAC;IAEH,MAAM,IAAI,GAAkB,QAAQ,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE;QAChD,MAAM,SAAS,GAAG,IAAA,6BAAe,EAAC;YAC9B,GAAG,EAAE,IAAA,6BAAgB,EAAC,MAAM,CAAC,cAAc,CAAC;YAC5C,MAAM,EAAE,KAAK;YACb,IAAI,EAAE,OAAO;SAChB,CAAC,CAAC;QAEH,MAAM,GAAG,GAAG,SAAS,CAAC,MAAM,CAAC;YACzB,MAAM,EAAE,KAAK;SAChB,CAAC,CAAC;QAEH,OAAO,EAAE,GAAG,GAAG,EAAE,GAAG,EAAE,MAAM,CAAC,mBAAmB,EAAE,GAAG,EAAE,MAAM,CAAC,EAAE,EAAE,CAAC;IACvE,CAAC,CAAC,CAAC;IAEH,OAAO,IAAA,aAAI,EAAC,GAAG,EAAE;QACb,IAAI;KACP,CAAC,CAAC;AACP,CAAC;AAjCD,4DAiCC"}
+{"version":3,"file":"jwks.js","sourceRoot":"","sources":["../../../../../src/http/controllers/realm/handlers/jwks.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;AAaH,4DAiCC;AA5CD,qCAAsC;AAEtC,6CAA8C;AAE9C,mCAA8B;AAC9B,qCAA6B;AAC7B,mDAAsD;AACtD,yDAAkD;AAClD,iDAAgD;AAChD,8CAAqD;AAE9C,KAAK,UAAU,wBAAwB,CAAC,GAAY,EAAE,GAAa;IACtE,MAAM,EAAE,GAAG,IAAA,2BAAiB,EAAC,GAAG,CAAC,CAAC;IAElC,MAAM,UAAU,GAAG,MAAM,IAAA,iCAAa,GAAE,CAAC;IACzC,MAAM,UAAU,GAAG,UAAU,CAAC,aAAa,CAAC,mBAAS,CAAC,CAAC;IAEvD,MAAM,QAAQ,GAAG,MAAM,UAAU,CAAC,IAAI,CAAC;QACnC,KAAK,EAAE;YACH,QAAQ,EAAE,EAAE;YACZ,IAAI,EAAE,IAAA,YAAE,EAAC,CAAC,aAAO,CAAC,GAAG,EAAE,aAAO,CAAC,EAAE,CAAC,CAAC;SACtC;QACD,KAAK,EAAE;YACH,QAAQ,EAAE,MAAM;SACnB;KACJ,CAAC,CAAC;IAEH,MAAM,IAAI,GAAkB,QAAQ,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE;QAChD,MAAM,SAAS,GAAG,IAAA,6BAAe,EAAC;YAC9B,GAAG,EAAE,IAAA,6BAAgB,EAAC,MAAM,CAAC,cAAc,CAAC;YAC5C,MAAM,EAAE,KAAK;YACb,IAAI,EAAE,OAAO;SAChB,CAAC,CAAC;QAEH,MAAM,GAAG,GAAG,SAAS,CAAC,MAAM,CAAC;YACzB,MAAM,EAAE,KAAK;SAChB,CAAC,CAAC;QAEH,OAAO,EAAE,GAAG,GAAG,EAAE,GAAG,EAAE,MAAM,CAAC,mBAAmB,EAAE,GAAG,EAAE,MAAM,CAAC,EAAE,EAAE,CAAC;IACvE,CAAC,CAAC,CAAC;IAEH,OAAO,IAAA,aAAI,EAAC,GAAG,EAAE;QACb,IAAI;KACP,CAAC,CAAC;AACP,CAAC"}

package/dist/http/controllers/realm/handlers/openid.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"openid.d.ts","sourceRoot":"","sources":["../../../../../src/http/controllers/realm/handlers/openid.ts"],"names":[],"mappings":"AAUA,OAAO,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,QAAQ,CAAC;AAMhD,wBAAsB,uCAAuC,CAAC,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,QAAQ,GAAI,OAAO,CAAC,GAAG,CAAC,CAiDxG"}
+{"version":3,"file":"openid.d.ts","sourceRoot":"","sources":["../../../../../src/http/controllers/realm/handlers/openid.ts"],"names":[],"mappings":"AAUA,OAAO,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,QAAQ,CAAC;AAOhD,wBAAsB,uCAAuC,CAAC,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,QAAQ,GAAI,OAAO,CAAC,GAAG,CAAC,CAiDxG"}

package/dist/http/controllers/realm/handlers/openid.js

@@ -6,15 +6,16 @@
  * view the LICENSE file that was distributed with this source code.
  */
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.getRealmOpenIdConfigurationRouteHandler = void 0;
+exports.getRealmOpenIdConfigurationRouteHandler = getRealmOpenIdConfigurationRouteHandler;
 const kit_1 = require("@authup/kit");
 const http_1 = require("@ebec/http");
 const routup_1 = require("routup");
 const typeorm_extension_1 = require("typeorm-extension");
 const domains_1 = require("../../../../domains");
 const config_1 = require("../../../../config");
+const request_1 = require("../../../request");
 async function getRealmOpenIdConfigurationRouteHandler(req, res) {
-    const id = (0, routup_1.useRequestParam)(req, 'id');
+    const id = (0, request_1.useRequestIDParam)(req);
     const dataSource = await (0, typeorm_extension_1.useDataSource)();
     const repository = dataSource.getRepository(domains_1.RealmEntity);
     const entity = await repository.findOneBy({ id });
@@ -46,5 +47,4 @@ async function getRealmOpenIdConfigurationRouteHandler(req, res) {
     };
     return (0, routup_1.send)(res, configuration);
 }
-exports.getRealmOpenIdConfigurationRouteHandler = getRealmOpenIdConfigurationRouteHandler;
 //# sourceMappingURL=openid.js.map

package/dist/http/controllers/realm/handlers/openid.js.map

@@ -1 +1 @@
-{"version":3,"file":"openid.js","sourceRoot":"","sources":["../../../../../src/http/controllers/realm/handlers/openid.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;;AAGH,qCAA8D;AAC9D,qCAA2C;AAE3C,mCAA+C;AAC/C,yDAAkD;AAClD,iDAAkD;AAClD,+CAA+C;AAExC,KAAK,UAAU,uCAAuC,CAAC,GAAY,EAAE,GAAa;IACrF,MAAM,EAAE,GAAG,IAAA,wBAAe,EAAC,GAAG,EAAE,IAAI,CAAC,CAAC;IAEtC,MAAM,UAAU,GAAG,MAAM,IAAA,iCAAa,GAAE,CAAC;IACzC,MAAM,UAAU,GAAG,UAAU,CAAC,aAAa,CAAC,qBAAW,CAAC,CAAC;IAEzD,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,SAAS,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;IAElD,IAAI,CAAC,MAAM,EAAE,CAAC;QACV,MAAM,IAAI,oBAAa,EAAE,CAAC;IAC9B,CAAC;IAED,MAAM,MAAM,GAAG,IAAA,kBAAS,GAAE,CAAC;IAE3B,MAAM,aAAa,GAAkC;QACjD,MAAM,EAAE,MAAM,CAAC,SAAS;QAExB,sBAAsB,EAAE,IAAI,GAAG,CAAC,WAAW,EAAE,MAAM,CAAC,SAAS,CAAC,CAAC,IAAI;QAEnE,QAAQ,EAAE,IAAI,GAAG,CAAC,UAAU,MAAM,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,SAAS,CAAC,CAAC,IAAI;QAEpE,uBAAuB,EAAE;YACrB,qCAA+B,CAAC,IAAI;YACpC,qCAA+B,CAAC,KAAK;YACrC,qCAA+B,CAAC,IAAI;SACvC;QAED,uBAAuB,EAAE;YACrB,QAAQ;SACX;QAED,qCAAqC,EAAE;YACnC,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM;SAC/D;QAED,cAAc,EAAE,IAAI,GAAG,CAAC,OAAO,EAAE,MAAM,CAAC,SAAS,CAAC,CAAC,IAAI;QAEvD,sBAAsB,EAAE,IAAI,GAAG,CAAC,kBAAkB,EAAE,MAAM,CAAC,SAAS,CAAC,CAAC,IAAI;QAE1E,mBAAmB,EAAE,IAAI,GAAG,CAAC,OAAO,EAAE,MAAM,CAAC,SAAS,CAAC,CAAC,IAAI;QAE5D,8DAA8D;QAE9D,qBAAqB,EAAE,qBAAqB;QAE5C,iBAAiB,EAAE,IAAI,GAAG,CAAC,WAAW,EAAE,MAAM,CAAC,SAAS,CAAC,CAAC,IAAI;KACjE,CAAC;IAEF,OAAO,IAAA,aAAI,EAAC,GAAG,EAAE,aAAa,CAAC,CAAC;AACpC,CAAC;AAjDD,0FAiDC"}
+{"version":3,"file":"openid.js","sourceRoot":"","sources":["../../../../../src/http/controllers/realm/handlers/openid.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;AAYH,0FAiDC;AA1DD,qCAA8D;AAC9D,qCAA2C;AAE3C,mCAA8B;AAC9B,yDAAkD;AAClD,iDAAkD;AAClD,+CAA+C;AAC/C,8CAAqD;AAE9C,KAAK,UAAU,uCAAuC,CAAC,GAAY,EAAE,GAAa;IACrF,MAAM,EAAE,GAAG,IAAA,2BAAiB,EAAC,GAAG,CAAC,CAAC;IAElC,MAAM,UAAU,GAAG,MAAM,IAAA,iCAAa,GAAE,CAAC;IACzC,MAAM,UAAU,GAAG,UAAU,CAAC,aAAa,CAAC,qBAAW,CAAC,CAAC;IAEzD,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,SAAS,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;IAElD,IAAI,CAAC,MAAM,EAAE,CAAC;QACV,MAAM,IAAI,oBAAa,EAAE,CAAC;IAC9B,CAAC;IAED,MAAM,MAAM,GAAG,IAAA,kBAAS,GAAE,CAAC;IAE3B,MAAM,aAAa,GAAkC;QACjD,MAAM,EAAE,MAAM,CAAC,SAAS;QAExB,sBAAsB,EAAE,IAAI,GAAG,CAAC,WAAW,EAAE,MAAM,CAAC,SAAS,CAAC,CAAC,IAAI;QAEnE,QAAQ,EAAE,IAAI,GAAG,CAAC,UAAU,MAAM,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,SAAS,CAAC,CAAC,IAAI;QAEpE,uBAAuB,EAAE;YACrB,qCAA+B,CAAC,IAAI;YACpC,qCAA+B,CAAC,KAAK;YACrC,qCAA+B,CAAC,IAAI;SACvC;QAED,uBAAuB,EAAE;YACrB,QAAQ;SACX;QAED,qCAAqC,EAAE;YACnC,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM;SAC/D;QAED,cAAc,EAAE,IAAI,GAAG,CAAC,OAAO,EAAE,MAAM,CAAC,SAAS,CAAC,CAAC,IAAI;QAEvD,sBAAsB,EAAE,IAAI,GAAG,CAAC,kBAAkB,EAAE,MAAM,CAAC,SAAS,CAAC,CAAC,IAAI;QAE1E,mBAAmB,EAAE,IAAI,GAAG,CAAC,OAAO,EAAE,MAAM,CAAC,SAAS,CAAC,CAAC,IAAI;QAE5D,8DAA8D;QAE9D,qBAAqB,EAAE,qBAAqB;QAE5C,iBAAiB,EAAE,IAAI,GAAG,CAAC,WAAW,EAAE,MAAM,CAAC,SAAS,CAAC,CAAC,IAAI;KACjE,CAAC;IAEF,OAAO,IAAA,aAAI,EAAC,GAAG,EAAE,aAAa,CAAC,CAAC;AACpC,CAAC"}

package/dist/http/controllers/realm/handlers/read.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"read.d.ts","sourceRoot":"","sources":["../../../../../src/http/controllers/realm/handlers/read.ts"],"names":[],"mappings":"AASA,OAAO,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,QAAQ,CAAC;AAQhD,wBAAsB,wBAAwB,CAC1C,GAAG,EAAE,OAAO,EACZ,GAAG,EAAE,QAAQ,GACb,OAAO,CAAC,GAAG,CAAC,CA+Bf;AAED,wBAAsB,uBAAuB,CACzC,GAAG,EAAE,OAAO,EACZ,GAAG,EAAE,QAAQ,GACb,OAAO,CAAC,GAAG,CAAC,CAwBf"}
+{"version":3,"file":"read.d.ts","sourceRoot":"","sources":["../../../../../src/http/controllers/realm/handlers/read.ts"],"names":[],"mappings":"AASA,OAAO,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,QAAQ,CAAC;AAShD,wBAAsB,wBAAwB,CAC1C,GAAG,EAAE,OAAO,EACZ,GAAG,EAAE,QAAQ,GACb,OAAO,CAAC,GAAG,CAAC,CA+Bf;AAED,wBAAsB,uBAAuB,CACzC,GAAG,EAAE,OAAO,EACZ,GAAG,EAAE,QAAQ,GACb,OAAO,CAAC,GAAG,CAAC,CAsBf"}

package/dist/http/controllers/realm/handlers/read.js

@@ -6,13 +6,15 @@
  * view the LICENSE file that was distributed with this source code.
  */
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.getOneRealmRouteHandler = exports.getManyRealmRouteHandler = void 0;
+exports.getManyRealmRouteHandler = getManyRealmRouteHandler;
+exports.getOneRealmRouteHandler = getOneRealmRouteHandler;
 const kit_1 = require("@authup/kit");
 const query_1 = require("@routup/basic/query");
 const routup_1 = require("routup");
 const typeorm_extension_1 = require("typeorm-extension");
 const http_1 = require("@ebec/http");
 const domains_1 = require("../../../../domains");
+const request_1 = require("../../../request");
 async function getManyRealmRouteHandler(req, res) {
     const dataSource = await (0, typeorm_extension_1.useDataSource)();
     const repository = dataSource.getRepository(domains_1.RealmEntity);
@@ -41,12 +43,10 @@ async function getManyRealmRouteHandler(req, res) {
         },
     });
 }
-exports.getManyRealmRouteHandler = getManyRealmRouteHandler;
 async function getOneRealmRouteHandler(req, res) {
-    const id = (0, routup_1.useRequestParam)(req, 'id');
-    if (typeof id !== 'string') {
-        throw new http_1.BadRequestError();
-    }
+    const id = (0, request_1.useRequestIDParam)(req, {
+        strict: false,
+    });
     const dataSource = await (0, typeorm_extension_1.useDataSource)();
     const repository = dataSource.getRepository(domains_1.RealmEntity);
     const query = repository.createQueryBuilder('realm');
@@ -62,5 +62,4 @@ async function getOneRealmRouteHandler(req, res) {
     }
     return (0, routup_1.send)(res, entity);
 }
-exports.getOneRealmRouteHandler = getOneRealmRouteHandler;
 //# sourceMappingURL=read.js.map

package/dist/http/controllers/realm/handlers/read.js.map

@@ -1 +1 @@
-{"version":3,"file":"read.js","sourceRoot":"","sources":["../../../../../src/http/controllers/realm/handlers/read.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;;AAEH,qCAAqC;AACrC,+CAAsD;AAEtD,mCAA+C;AAC/C,yDAE2B;AAC3B,qCAA4D;AAC5D,iDAAkD;AAE3C,KAAK,UAAU,wBAAwB,CAC1C,GAAY,EACZ,GAAa;IAEb,MAAM,UAAU,GAAG,MAAM,IAAA,iCAAa,GAAE,CAAC;IACzC,MAAM,UAAU,GAAG,UAAU,CAAC,aAAa,CAAC,qBAAW,CAAC,CAAC;IAEzD,MAAM,KAAK,GAAG,UAAU,CAAC,kBAAkB,CAAC,OAAO,CAAC,CAAC;IAErD,MAAM,EAAE,UAAU,EAAE,GAAG,IAAA,8BAAU,EAAC,KAAK,EAAE,IAAA,uBAAe,EAAC,GAAG,CAAC,EAAE;QAC3D,YAAY,EAAE,OAAO;QACrB,OAAO,EAAE;YACL,OAAO,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,UAAU,CAAC;SACtC;QACD,UAAU,EAAE;YACR,QAAQ,EAAE,EAAE;SACf;QACD,MAAM,EAAE;YACJ,OAAO,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,aAAa,EAAE,UAAU,EAAE,YAAY,EAAE,YAAY,CAAC;SACjF;QACD,IAAI,EAAE;YACF,OAAO,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,YAAY,EAAE,YAAY,CAAC;SACtD;KACJ,CAAC,CAAC;IAEH,MAAM,CAAC,QAAQ,EAAE,KAAK,CAAC,GAAG,MAAM,KAAK,CAAC,eAAe,EAAE,CAAC;IAExD,OAAO,IAAA,aAAI,EAAC,GAAG,EAAE;QACb,IAAI,EAAE,QAAQ;QACd,IAAI,EAAE;YACF,KAAK;YACL,GAAG,UAAU;SAChB;KACJ,CAAC,CAAC;AACP,CAAC;AAlCD,4DAkCC;AAEM,KAAK,UAAU,uBAAuB,CACzC,GAAY,EACZ,GAAa;IAEb,MAAM,EAAE,GAAG,IAAA,wBAAe,EAAC,GAAG,EAAE,IAAI,CAAC,CAAC;IAEtC,IAAI,OAAO,EAAE,KAAK,QAAQ,EAAE,CAAC;QACzB,MAAM,IAAI,sBAAe,EAAE,CAAC;IAChC,CAAC;IAED,MAAM,UAAU,GAAG,MAAM,IAAA,iCAAa,GAAE,CAAC;IACzC,MAAM,UAAU,GAAG,UAAU,CAAC,aAAa,CAAC,qBAAW,CAAC,CAAC;IAEzD,MAAM,KAAK,GAAG,UAAU,CAAC,kBAAkB,CAAC,OAAO,CAAC,CAAC;IACrD,IAAI,IAAA,YAAM,EAAC,EAAE,CAAC,EAAE,CAAC;QACb,KAAK,CAAC,KAAK,CAAC,gBAAgB,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC;IAC1C,CAAC;SAAM,CAAC;QACJ,KAAK,CAAC,KAAK,CAAC,uBAAuB,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC;IACvD,CAAC;IAED,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,MAAM,EAAE,CAAC;IAEpC,IAAI,CAAC,MAAM,EAAE,CAAC;QACV,MAAM,IAAI,oBAAa,EAAE,CAAC;IAC9B,CAAC;IAED,OAAO,IAAA,aAAI,EAAC,GAAG,EAAE,MAAM,CAAC,CAAC;AAC7B,CAAC;AA3BD,0DA2BC"}
+{"version":3,"file":"read.js","sourceRoot":"","sources":["../../../../../src/http/controllers/realm/handlers/read.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;AAaH,4DAkCC;AAED,0DAyBC;AAxED,qCAAqC;AACrC,+CAAsD;AAEtD,mCAA8B;AAC9B,yDAE2B;AAC3B,qCAA2C;AAC3C,iDAAkD;AAClD,8CAAqD;AAE9C,KAAK,UAAU,wBAAwB,CAC1C,GAAY,EACZ,GAAa;IAEb,MAAM,UAAU,GAAG,MAAM,IAAA,iCAAa,GAAE,CAAC;IACzC,MAAM,UAAU,GAAG,UAAU,CAAC,aAAa,CAAC,qBAAW,CAAC,CAAC;IAEzD,MAAM,KAAK,GAAG,UAAU,CAAC,kBAAkB,CAAC,OAAO,CAAC,CAAC;IAErD,MAAM,EAAE,UAAU,EAAE,GAAG,IAAA,8BAAU,EAAC,KAAK,EAAE,IAAA,uBAAe,EAAC,GAAG,CAAC,EAAE;QAC3D,YAAY,EAAE,OAAO;QACrB,OAAO,EAAE;YACL,OAAO,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,UAAU,CAAC;SACtC;QACD,UAAU,EAAE;YACR,QAAQ,EAAE,EAAE;SACf;QACD,MAAM,EAAE;YACJ,OAAO,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,aAAa,EAAE,UAAU,EAAE,YAAY,EAAE,YAAY,CAAC;SACjF;QACD,IAAI,EAAE;YACF,OAAO,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,YAAY,EAAE,YAAY,CAAC;SACtD;KACJ,CAAC,CAAC;IAEH,MAAM,CAAC,QAAQ,EAAE,KAAK,CAAC,GAAG,MAAM,KAAK,CAAC,eAAe,EAAE,CAAC;IAExD,OAAO,IAAA,aAAI,EAAC,GAAG,EAAE;QACb,IAAI,EAAE,QAAQ;QACd,IAAI,EAAE;YACF,KAAK;YACL,GAAG,UAAU;SAChB;KACJ,CAAC,CAAC;AACP,CAAC;AAEM,KAAK,UAAU,uBAAuB,CACzC,GAAY,EACZ,GAAa;IAEb,MAAM,EAAE,GAAG,IAAA,2BAAiB,EAAC,GAAG,EAAE;QAC9B,MAAM,EAAE,KAAK;KAChB,CAAC,CAAC;IAEH,MAAM,UAAU,GAAG,MAAM,IAAA,iCAAa,GAAE,CAAC;IACzC,MAAM,UAAU,GAAG,UAAU,CAAC,aAAa,CAAC,qBAAW,CAAC,CAAC;IAEzD,MAAM,KAAK,GAAG,UAAU,CAAC,kBAAkB,CAAC,OAAO,CAAC,CAAC;IACrD,IAAI,IAAA,YAAM,EAAC,EAAE,CAAC,EAAE,CAAC;QACb,KAAK,CAAC,KAAK,CAAC,gBAAgB,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC;IAC1C,CAAC;SAAM,CAAC;QACJ,KAAK,CAAC,KAAK,CAAC,uBAAuB,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC;IACvD,CAAC;IAED,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,MAAM,EAAE,CAAC;IAEpC,IAAI,CAAC,MAAM,EAAE,CAAC;QACV,MAAM,IAAI,oBAAa,EAAE,CAAC;IAC9B,CAAC;IAED,OAAO,IAAA,aAAI,EAAC,GAAG,EAAE,MAAM,CAAC,CAAC;AAC7B,CAAC"}

package/dist/http/controllers/realm/handlers/update.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"update.d.ts","sourceRoot":"","sources":["../../../../../src/http/controllers/realm/handlers/update.ts"],"names":[],"mappings":"AAUA,OAAO,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,QAAQ,CAAC;AAQhD,wBAAsB,uBAAuB,CAAC,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,QAAQ,GAAI,OAAO,CAAC,GAAG,CAAC,CAmCxF"}
+{"version":3,"file":"update.d.ts","sourceRoot":"","sources":["../../../../../src/http/controllers/realm/handlers/update.ts"],"names":[],"mappings":"AAUA,OAAO,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,QAAQ,CAAC;AAQhD,wBAAsB,uBAAuB,CAAC,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,QAAQ,GAAI,OAAO,CAAC,GAAG,CAAC,CAuCxF"}

package/dist/http/controllers/realm/handlers/update.js

@@ -6,7 +6,7 @@
  * view the LICENSE file that was distributed with this source code.
  */
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.updateRealmRouteHandler = void 0;
+exports.updateRealmRouteHandler = updateRealmRouteHandler;
 const http_1 = require("@ebec/http");
 const kit_1 = require("@authup/kit");
 const core_kit_1 = require("@authup/core-kit");
@@ -17,9 +17,9 @@ const utils_1 = require("../../../utils");
 const utils_2 = require("../utils");
 const request_1 = require("../../../request");
 async function updateRealmRouteHandler(req, res) {
-    const id = (0, routup_1.useRequestParam)(req, 'id');
+    const id = (0, request_1.useRequestIDParam)(req);
     const ability = (0, utils_1.useRequestEnv)(req, 'abilities');
-    if (!ability.has(core_kit_1.PermissionName.REALM_EDIT)) {
+    if (!ability.has(core_kit_1.PermissionName.REALM_UPDATE)) {
         throw new http_1.ForbiddenError('You are not permitted to edit a realm.');
     }
     const validator = new utils_2.RealmRequestValidator();
@@ -38,8 +38,10 @@ async function updateRealmRouteHandler(req, res) {
         throw new http_1.BadRequestError(`The name of the ${core_kit_1.REALM_MASTER_NAME} can not be changed.`);
     }
     entity = repository.merge(entity, data);
+    if (!ability.can(core_kit_1.PermissionName.REALM_UPDATE, { attributes: data })) {
+        throw new http_1.ForbiddenError();
+    }
     await repository.save(entity);
     return (0, routup_1.sendAccepted)(res, entity);
 }
-exports.updateRealmRouteHandler = updateRealmRouteHandler;
 //# sourceMappingURL=update.js.map

package/dist/http/controllers/realm/handlers/update.js.map

@@ -1 +1 @@
-{"version":3,"file":"update.js","sourceRoot":"","sources":["../../../../../src/http/controllers/realm/handlers/update.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;;AAEH,qCAA4E;AAC5E,qCAA4C;AAC5C,+CAAqE;AAErE,mCAAuD;AACvD,yDAAkD;AAClD,iDAAkD;AAClD,0CAA+C;AAC/C,oCAAiD;AACjD,8CAA2D;AAEpD,KAAK,UAAU,uBAAuB,CAAC,GAAY,EAAE,GAAa;IACrE,MAAM,EAAE,GAAG,IAAA,wBAAe,EAAC,GAAG,EAAE,IAAI,CAAC,CAAC;IAEtC,MAAM,OAAO,GAAG,IAAA,qBAAa,EAAC,GAAG,EAAE,WAAW,CAAC,CAAC;IAChD,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,yBAAc,CAAC,UAAU,CAAC,EAAE,CAAC;QAC1C,MAAM,IAAI,qBAAc,CAAC,wCAAwC,CAAC,CAAC;IACvE,CAAC;IAED,MAAM,SAAS,GAAG,IAAI,6BAAqB,EAAE,CAAC;IAE9C,MAAM,IAAI,GAAG,MAAM,SAAS,CAAC,OAAO,CAAC,GAAG,EAAE;QACtC,KAAK,EAAE,iCAAuB,CAAC,MAAM;KACxC,CAAC,CAAC;IAEH,MAAM,UAAU,GAAG,MAAM,IAAA,iCAAa,GAAE,CAAC;IACzC,MAAM,UAAU,GAAG,UAAU,CAAC,aAAa,CAAC,qBAAW,CAAC,CAAC;IAEzD,IAAI,MAAM,GAAG,MAAM,UAAU,CAAC,SAAS,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;IAChD,IAAI,CAAC,MAAM,EAAE,CAAC;QACV,MAAM,IAAI,oBAAa,EAAE,CAAC;IAC9B,CAAC;IAED,IACI,MAAM,CAAC,IAAI,KAAK,4BAAiB;QACjC,IAAA,mBAAa,EAAC,IAAI,EAAE,MAAM,CAAC;QAC3B,MAAM,CAAC,IAAI,KAAK,IAAI,CAAC,IAAI,EAC3B,CAAC;QACC,MAAM,IAAI,sBAAe,CAAC,mBAAmB,4BAAiB,sBAAsB,CAAC,CAAC;IAC1F,CAAC;IAED,MAAM,GAAG,UAAU,CAAC,KAAK,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;IAExC,MAAM,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAE9B,OAAO,IAAA,qBAAY,EAAC,GAAG,EAAE,MAAM,CAAC,CAAC;AACrC,CAAC;AAnCD,0DAmCC"}
+{"version":3,"file":"update.js","sourceRoot":"","sources":["../../../../../src/http/controllers/realm/handlers/update.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;AAaH,0DAuCC;AAlDD,qCAA4E;AAC5E,qCAA4C;AAC5C,+CAAqE;AAErE,mCAAsC;AACtC,yDAAkD;AAClD,iDAAkD;AAClD,0CAA+C;AAC/C,oCAAiD;AACjD,8CAA8E;AAEvE,KAAK,UAAU,uBAAuB,CAAC,GAAY,EAAE,GAAa;IACrE,MAAM,EAAE,GAAG,IAAA,2BAAiB,EAAC,GAAG,CAAC,CAAC;IAElC,MAAM,OAAO,GAAG,IAAA,qBAAa,EAAC,GAAG,EAAE,WAAW,CAAC,CAAC;IAChD,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,yBAAc,CAAC,YAAY,CAAC,EAAE,CAAC;QAC5C,MAAM,IAAI,qBAAc,CAAC,wCAAwC,CAAC,CAAC;IACvE,CAAC;IAED,MAAM,SAAS,GAAG,IAAI,6BAAqB,EAAE,CAAC;IAE9C,MAAM,IAAI,GAAG,MAAM,SAAS,CAAC,OAAO,CAAC,GAAG,EAAE;QACtC,KAAK,EAAE,iCAAuB,CAAC,MAAM;KACxC,CAAC,CAAC;IAEH,MAAM,UAAU,GAAG,MAAM,IAAA,iCAAa,GAAE,CAAC;IACzC,MAAM,UAAU,GAAG,UAAU,CAAC,aAAa,CAAC,qBAAW,CAAC,CAAC;IAEzD,IAAI,MAAM,GAAG,MAAM,UAAU,CAAC,SAAS,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;IAChD,IAAI,CAAC,MAAM,EAAE,CAAC;QACV,MAAM,IAAI,oBAAa,EAAE,CAAC;IAC9B,CAAC;IAED,IACI,MAAM,CAAC,IAAI,KAAK,4BAAiB;QACjC,IAAA,mBAAa,EAAC,IAAI,EAAE,MAAM,CAAC;QAC3B,MAAM,CAAC,IAAI,KAAK,IAAI,CAAC,IAAI,EAC3B,CAAC;QACC,MAAM,IAAI,sBAAe,CAAC,mBAAmB,4BAAiB,sBAAsB,CAAC,CAAC;IAC1F,CAAC;IAED,MAAM,GAAG,UAAU,CAAC,KAAK,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;IAExC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,yBAAc,CAAC,YAAY,EAAE,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;QAClE,MAAM,IAAI,qBAAc,EAAE,CAAC;IAC/B,CAAC;IAED,MAAM,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAE9B,OAAO,IAAA,qBAAY,EAAC,GAAG,EAAE,MAAM,CAAC,CAAC;AACrC,CAAC"}

package/dist/http/controllers/register.js

@@ -6,7 +6,7 @@
  * view the LICENSE file that was distributed with this source code.
  */
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.registerControllers = void 0;
+exports.registerControllers = registerControllers;
 const decorators_1 = require("@routup/decorators");
 const body_1 = require("@routup/basic/body");
 const cookie_1 = require("@routup/basic/cookie");
@@ -77,5 +77,4 @@ function registerControllers(router) {
         },
     }));
 }
-exports.registerControllers = registerControllers;
 //# sourceMappingURL=register.js.map

package/dist/http/controllers/register.js.map

@@ -1 +1 @@
-{"version":3,"file":"register.js","sourceRoot":"","sources":["../../../src/http/controllers/register.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;;AAGH,mDAAgD;AAChD,6CAE4B;AAC5B,iDAG8B;AAC9B,+CAE6B;AAC7B,iDAAuD;AACvD,qCAA4C;AAC5C,mCAA0C;AAC1C,mEAAuE;AACvE,2DAAqG;AACrG,6CAAoD;AACpD,mCAA0C;AAC1C,iCAAwC;AACxC,uDAA6D;AAC7D,mCAA0C;AAC1C,iCAAwC;AACxC,2CAAiD;AACjD,iCAA6D;AAC7D,yDAA+D;AAC/D,6CAAmD;AACnD,uDAA6D;AAC7D,qDAA2D;AAC3D,qDAA2D;AAC3D,qCAA4C;AAE5C,SAAgB,mBAAmB,CAC/B,MAAc;IAEd,IAAA,sDAAkC,EAAC,MAAM,CAAC,CAAC;IAE3C,MAAM,CAAC,GAAG,CAAC,IAAA,uBAAU,EAAC;QAClB,WAAW,EAAE;YACT,qBAAc;YACd,0BAAmB;YACnB,yBAAgB;YAChB,oCAAqB;YACrB,oDAA4B;YAC5B,8CAA0B;YAC1B,iCAAoB;YACpB,yBAAgB;YAChB,uBAAe;YACf,4CAAyB;YACzB,gCAAmB;YACnB,uBAAe;YACf,qBAAc;YACd,wCAAuB;YACvB,0CAAwB;YACxB,uBAAe;YACf,qBAAc;YACd,wCAAuB;YACvB,0CAAwB;YACxB,8BAAkB;SACrB;QACD,SAAS,EAAE;YACP,IAAI,EAAE,CAAC,OAAO,EAAE,IAAI,EAAE,EAAE;gBACpB,IAAI,IAAI,EAAE,CAAC;oBACP,OAAO,IAAA,qBAAc,EAAC,OAAO,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;gBACjD,CAAC;gBAED,OAAO,IAAA,qBAAc,EAAC,OAAO,CAAC,OAAO,CAAC,CAAC;YAC3C,CAAC;YACD,MAAM,EAAE,CAAC,OAAO,EAAE,IAAI,EAAE,EAAE;gBACtB,IAAI,IAAI,EAAE,CAAC;oBACP,OAAO,IAAA,yBAAgB,EAAC,OAAO,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;gBACnD,CAAC;gBAED,OAAO,IAAA,0BAAiB,EAAC,OAAO,CAAC,OAAO,CAAC,CAAC;YAC9C,CAAC;YACD,KAAK,EAAE,CAAC,OAAO,EAAE,IAAI,EAAE,EAAE;gBACrB,IAAI,IAAI,EAAE,CAAC;oBACP,OAAO,IAAA,uBAAe,EAAC,OAAO,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;gBAClD,CAAC;gBAED,OAAO,IAAA,uBAAe,EAAC,OAAO,CAAC,OAAO,CAAC,CAAC;YAC5C,CAAC;SACJ;KACJ,CAAC,CAAC,CAAC;AACR,CAAC;AApDD,kDAoDC"}
+{"version":3,"file":"register.js","sourceRoot":"","sources":["../../../src/http/controllers/register.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;AAkCH,kDAoDC;AAnFD,mDAAgD;AAChD,6CAE4B;AAC5B,iDAG8B;AAC9B,+CAE6B;AAC7B,iDAAuD;AACvD,qCAA4C;AAC5C,mCAA0C;AAC1C,mEAAuE;AACvE,2DAAqG;AACrG,6CAAoD;AACpD,mCAA0C;AAC1C,iCAAwC;AACxC,uDAA6D;AAC7D,mCAA0C;AAC1C,iCAAwC;AACxC,2CAAiD;AACjD,iCAA6D;AAC7D,yDAA+D;AAC/D,6CAAmD;AACnD,uDAA6D;AAC7D,qDAA2D;AAC3D,qDAA2D;AAC3D,qCAA4C;AAE5C,SAAgB,mBAAmB,CAC/B,MAAc;IAEd,IAAA,sDAAkC,EAAC,MAAM,CAAC,CAAC;IAE3C,MAAM,CAAC,GAAG,CAAC,IAAA,uBAAU,EAAC;QAClB,WAAW,EAAE;YACT,qBAAc;YACd,0BAAmB;YACnB,yBAAgB;YAChB,oCAAqB;YACrB,oDAA4B;YAC5B,8CAA0B;YAC1B,iCAAoB;YACpB,yBAAgB;YAChB,uBAAe;YACf,4CAAyB;YACzB,gCAAmB;YACnB,uBAAe;YACf,qBAAc;YACd,wCAAuB;YACvB,0CAAwB;YACxB,uBAAe;YACf,qBAAc;YACd,wCAAuB;YACvB,0CAAwB;YACxB,8BAAkB;SACrB;QACD,SAAS,EAAE;YACP,IAAI,EAAE,CAAC,OAAO,EAAE,IAAI,EAAE,EAAE;gBACpB,IAAI,IAAI,EAAE,CAAC;oBACP,OAAO,IAAA,qBAAc,EAAC,OAAO,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;gBACjD,CAAC;gBAED,OAAO,IAAA,qBAAc,EAAC,OAAO,CAAC,OAAO,CAAC,CAAC;YAC3C,CAAC;YACD,MAAM,EAAE,CAAC,OAAO,EAAE,IAAI,EAAE,EAAE;gBACtB,IAAI,IAAI,EAAE,CAAC;oBACP,OAAO,IAAA,yBAAgB,EAAC,OAAO,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;gBACnD,CAAC;gBAED,OAAO,IAAA,0BAAiB,EAAC,OAAO,CAAC,OAAO,CAAC,CAAC;YAC9C,CAAC;YACD,KAAK,EAAE,CAAC,OAAO,EAAE,IAAI,EAAE,EAAE;gBACrB,IAAI,IAAI,EAAE,CAAC;oBACP,OAAO,IAAA,uBAAe,EAAC,OAAO,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;gBAClD,CAAC;gBAED,OAAO,IAAA,uBAAe,EAAC,OAAO,CAAC,OAAO,CAAC,CAAC;YAC5C,CAAC;SACJ;KACJ,CAAC,CAAC,CAAC;AACR,CAAC"}

package/dist/http/controllers/robot/handlers/create.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"create.d.ts","sourceRoot":"","sources":["../../../../../src/http/controllers/robot/handlers/create.ts"],"names":[],"mappings":"AAYA,OAAO,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,QAAQ,CAAC;AAYhD,wBAAsB,uBAAuB,CAAC,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,QAAQ,GAAI,OAAO,CAAC,GAAG,CAAC,CA8CxF"}
+{"version":3,"file":"create.d.ts","sourceRoot":"","sources":["../../../../../src/http/controllers/robot/handlers/create.ts"],"names":[],"mappings":"AAYA,OAAO,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,QAAQ,CAAC;AAYhD,wBAAsB,uBAAuB,CAAC,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,QAAQ,GAAI,OAAO,CAAC,GAAG,CAAC,CA0CxF"}

package/dist/http/controllers/robot/handlers/create.js

@@ -6,7 +6,7 @@
  * view the LICENSE file that was distributed with this source code.
  */
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.createRobotRouteHandler = void 0;
+exports.createRobotRouteHandler = createRobotRouteHandler;
 const core_kit_1 = require("@authup/core-kit");
 const http_1 = require("@ebec/http");
 const routup_1 = require("routup");
@@ -28,14 +28,12 @@ async function createRobotRouteHandler(req, res) {
     if (!(0, core_kit_1.isRealmResourceWritable)((0, utils_2.useRequestEnv)(req, 'realm'), data.realm_id)) {
         throw new http_1.BadRequestError((0, utils_1.buildErrorMessageForAttribute)('realm_id'));
     }
-    const ability = (0, utils_2.useRequestEnv)(req, 'abilities');
     const userId = (0, utils_2.useRequestEnv)(req, 'userId');
-    if (!ability.has(core_kit_1.PermissionName.ROBOT_ADD)) {
-        data.user_id = userId;
-    }
-    else if (data.user_id &&
-        data.user_id !== userId) {
-        data.user_id = userId;
+    if (!data.user_id || !userId || data.user_id !== userId) {
+        const ability = (0, utils_2.useRequestEnv)(req, 'abilities');
+        if (!ability.can(core_kit_1.PermissionName.ROBOT_CREATE, { attributes: data })) {
+            throw new http_1.ForbiddenError();
+        }
     }
     const dataSource = await (0, typeorm_extension_1.useDataSource)();
     const repository = new domains_1.RobotRepository(dataSource);
@@ -51,5 +49,4 @@ async function createRobotRouteHandler(req, res) {
     // ----------------------------------------------
     return (0, routup_1.sendCreated)(res, entity);
 }
-exports.createRobotRouteHandler = createRobotRouteHandler;
 //# sourceMappingURL=create.js.map

package/dist/http/controllers/robot/handlers/create.js.map

@@ -1 +1 @@
-{"version":3,"file":"create.js","sourceRoot":"","sources":["../../../../../src/http/controllers/robot/handlers/create.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;;AAEH,+CAG0B;AAC1B,qCAA6C;AAE7C,mCAAqC;AACrC,yDAAkD;AAClD,iDAG6B;AAC7B,6CAAkE;AAClE,0CAA+C;AAC/C,8CAA2D;AAC3D,oCAAiD;AAE1C,KAAK,UAAU,uBAAuB,CAAC,GAAY,EAAE,GAAa;IACrE,MAAM,SAAS,GAAG,IAAI,6BAAqB,EAAE,CAAC;IAC9C,MAAM,IAAI,GAAG,MAAM,SAAS,CAAC,OAAO,CAAC,GAAG,EAAE;QACtC,KAAK,EAAE,iCAAuB,CAAC,MAAM;KACxC,CAAC,CAAC;IAEH,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC;QACjB,MAAM,EAAE,EAAE,EAAE,OAAO,EAAE,GAAG,IAAA,qBAAa,EAAC,GAAG,EAAE,OAAO,CAAC,CAAC;QACpD,IAAI,CAAC,QAAQ,GAAG,OAAO,CAAC;IAC5B,CAAC;IAED,IAAI,CAAC,IAAA,kCAAuB,EAAC,IAAA,qBAAa,EAAC,GAAG,EAAE,OAAO,CAAC,EAAE,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;QACvE,MAAM,IAAI,sBAAe,CAAC,IAAA,qCAA6B,EAAC,UAAU,CAAC,CAAC,CAAC;IACzE,CAAC;IAED,MAAM,OAAO,GAAG,IAAA,qBAAa,EAAC,GAAG,EAAE,WAAW,CAAC,CAAC;IAChD,MAAM,MAAM,GAAG,IAAA,qBAAa,EAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;IAE5C,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,yBAAc,CAAC,SAAS,CAAC,EAAE,CAAC;QACzC,IAAI,CAAC,OAAO,GAAG,MAAM,CAAC;IAC1B,CAAC;SAAM,IACH,IAAI,CAAC,OAAO;QACZ,IAAI,CAAC,OAAO,KAAK,MAAM,EACzB,CAAC;QACC,IAAI,CAAC,OAAO,GAAG,MAAM,CAAC;IAC1B,CAAC;IAED,MAAM,UAAU,GAAG,MAAM,IAAA,iCAAa,GAAE,CAAC;IACzC,MAAM,UAAU,GAAG,IAAI,yBAAe,CAAC,UAAU,CAAC,CAAC;IACnD,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,UAAU,CAAC,gBAAgB,CAAC,IAAI,CAAC,CAAC;IAEnE,MAAM,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAE9B,MAAM,CAAC,MAAM,GAAG,MAAM,CAAC;IAEvB,iDAAiD;IAEjD,yDAAyD;IACzD,MAAM,IAAA,qCAA2B,EAAC;QAC9B,GAAG,MAAM;QACT,MAAM;KACT,CAAC,CAAC;IAEH,iDAAiD;IAEjD,OAAO,IAAA,oBAAW,EAAC,GAAG,EAAE,MAAM,CAAC,CAAC;AACpC,CAAC;AA9CD,0DA8CC"}
+{"version":3,"file":"create.js","sourceRoot":"","sources":["../../../../../src/http/controllers/robot/handlers/create.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;AAmBH,0DA0CC;AA3DD,+CAG0B;AAC1B,qCAA6D;AAE7D,mCAAqC;AACrC,yDAAkD;AAClD,iDAG6B;AAC7B,6CAAkE;AAClE,0CAA+C;AAC/C,8CAA2D;AAC3D,oCAAiD;AAE1C,KAAK,UAAU,uBAAuB,CAAC,GAAY,EAAE,GAAa;IACrE,MAAM,SAAS,GAAG,IAAI,6BAAqB,EAAE,CAAC;IAC9C,MAAM,IAAI,GAAG,MAAM,SAAS,CAAC,OAAO,CAAC,GAAG,EAAE;QACtC,KAAK,EAAE,iCAAuB,CAAC,MAAM;KACxC,CAAC,CAAC;IAEH,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC;QACjB,MAAM,EAAE,EAAE,EAAE,OAAO,EAAE,GAAG,IAAA,qBAAa,EAAC,GAAG,EAAE,OAAO,CAAC,CAAC;QACpD,IAAI,CAAC,QAAQ,GAAG,OAAO,CAAC;IAC5B,CAAC;IAED,IAAI,CAAC,IAAA,kCAAuB,EAAC,IAAA,qBAAa,EAAC,GAAG,EAAE,OAAO,CAAC,EAAE,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;QACvE,MAAM,IAAI,sBAAe,CAAC,IAAA,qCAA6B,EAAC,UAAU,CAAC,CAAC,CAAC;IACzE,CAAC;IAED,MAAM,MAAM,GAAG,IAAA,qBAAa,EAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;IAC5C,IAAI,CAAC,IAAI,CAAC,OAAO,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,OAAO,KAAK,MAAM,EAAE,CAAC;QACtD,MAAM,OAAO,GAAG,IAAA,qBAAa,EAAC,GAAG,EAAE,WAAW,CAAC,CAAC;QAChD,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,yBAAc,CAAC,YAAY,EAAE,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;YAClE,MAAM,IAAI,qBAAc,EAAE,CAAC;QAC/B,CAAC;IACL,CAAC;IAED,MAAM,UAAU,GAAG,MAAM,IAAA,iCAAa,GAAE,CAAC;IACzC,MAAM,UAAU,GAAG,IAAI,yBAAe,CAAC,UAAU,CAAC,CAAC;IACnD,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,UAAU,CAAC,gBAAgB,CAAC,IAAI,CAAC,CAAC;IAEnE,MAAM,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAE9B,MAAM,CAAC,MAAM,GAAG,MAAM,CAAC;IAEvB,iDAAiD;IAEjD,yDAAyD;IACzD,MAAM,IAAA,qCAA2B,EAAC;QAC9B,GAAG,MAAM;QACT,MAAM;KACT,CAAC,CAAC;IAEH,iDAAiD;IAEjD,OAAO,IAAA,oBAAW,EAAC,GAAG,EAAE,MAAM,CAAC,CAAC;AACpC,CAAC"}

package/dist/http/controllers/robot/handlers/delete.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"delete.d.ts","sourceRoot":"","sources":["../../../../../src/http/controllers/robot/handlers/delete.ts"],"names":[],"mappings":"AAYA,OAAO,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,QAAQ,CAAC;AAOhD,wBAAsB,uBAAuB,CAAC,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,QAAQ,GAAI,OAAO,CAAC,GAAG,CAAC,CAiDxF"}
+{"version":3,"file":"delete.d.ts","sourceRoot":"","sources":["../../../../../src/http/controllers/robot/handlers/delete.ts"],"names":[],"mappings":"AAYA,OAAO,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,QAAQ,CAAC;AAQhD,wBAAsB,uBAAuB,CAAC,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,QAAQ,GAAI,OAAO,CAAC,GAAG,CAAC,CA2CxF"}