@authup/server-core 1.0.0-beta.19 → 1.0.0-beta.20

package/dist/http/controllers/scope/utils/validaitor.d.ts

@@ -1,9 +1,8 @@
-import type { Request } from 'routup';
-import { RequestDatabaseValidator, type RequestValidatorExecuteOptions } from '../../../../core';
-import { ScopeEntity } from '../../../../domains';
-export declare class ScopeRequestValidator extends RequestDatabaseValidator<ScopeEntity> {
-    constructor();
-    mount(): void;
-    execute(req: Request, options?: RequestValidatorExecuteOptions<ScopeEntity>): Promise<ScopeEntity>;
+import type { ContainerOptions } from 'validup';
+import { Container } from 'validup';
+import type { ScopeEntity } from '../../../../domains';
+export declare class ScopeRequestValidator extends Container<ScopeEntity> {
+    constructor(options?: ContainerOptions<ScopeEntity>);
+    mountAll(): void;
 }
 //# sourceMappingURL=validaitor.d.ts.map

package/dist/http/controllers/scope/utils/validaitor.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"validaitor.d.ts","sourceRoot":"","sources":["../../../../../src/http/controllers/scope/utils/validaitor.ts"],"names":[],"mappings":"AAQA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,QAAQ,CAAC;AACtC,OAAO,EAAE,wBAAwB,EAAE,KAAK,8BAA8B,EAAE,MAAM,kBAAkB,CAAC;AACjG,OAAO,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AAIlD,qBAAa,qBAAsB,SAAQ,wBAAwB,CACnE,WAAW,CACV;;IAOG,KAAK;IAkBC,OAAO,CACT,GAAG,EAAE,OAAO,EACZ,OAAO,GAAE,8BAA8B,CAAC,WAAW,CAAM,GAC1D,OAAO,CAAC,WAAW,CAAC;CAS1B"}
+{"version":3,"file":"validaitor.d.ts","sourceRoot":"","sources":["../../../../../src/http/controllers/scope/utils/validaitor.ts"],"names":[],"mappings":"AAQA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,SAAS,CAAC;AAChD,OAAO,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AACpC,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AAGvD,qBAAa,qBAAsB,SAAQ,SAAS,CACpD,WAAW,CACV;gBACe,OAAO,GAAE,gBAAgB,CAAC,WAAW,CAAM;IAMvD,QAAQ;CAiCX"}

package/dist/http/controllers/scope/utils/validaitor.js

@@ -7,37 +7,34 @@
  */
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.ScopeRequestValidator = void 0;
-const http_1 = require("@ebec/http");
-const core_1 = require("../../../../core");
-const domains_1 = require("../../../../domains");
-const utils_1 = require("../../../../utils");
+const adapter_validator_1 = require("@validup/adapter-validator");
+const validup_1 = require("validup");
 const request_1 = require("../../../request");
-class ScopeRequestValidator extends core_1.RequestDatabaseValidator {
-    constructor() {
-        super(domains_1.ScopeEntity);
-        this.mount();
+class ScopeRequestValidator extends validup_1.Container {
+    constructor(options = {}) {
+        super(options);
+        this.mountAll();
     }
-    mount() {
-        this.add('name')
-            .exists()
-            .notEmpty()
+    mountAll() {
+        this.mount('name', { group: request_1.RequestHandlerOperation.UPDATE }, (0, adapter_validator_1.createValidator)((chain) => chain
+            .isString()
+            .isLength({ min: 3, max: 256 })
+            .optional({ values: 'undefined' })));
+        this.mount('name', { group: request_1.RequestHandlerOperation.CREATE }, (0, adapter_validator_1.createValidator)((chain) => chain
             .isString()
-            .optional({ nullable: true });
-        this.add('description')
+            .isLength({ min: 3, max: 256 })));
+        this.mount('display_name', (0, adapter_validator_1.createValidator)((chain) => chain
+            .isString()
+            .isLength({ min: 3, max: 256 })
+            .optional({ values: 'null' })));
+        this.mount('description', (0, adapter_validator_1.createValidator)((chain) => chain
             .optional({ nullable: true })
             .notEmpty()
             .isString()
-            .isLength({ min: 5, max: 4096 });
-        this.addTo(request_1.RequestHandlerOperation.CREATE, 'realm_id')
+            .isLength({ min: 5, max: 4096 })));
+        this.mount('realm_id', { group: request_1.RequestHandlerOperation.CREATE }, (0, adapter_validator_1.createValidator)((chain) => chain
             .isUUID()
-            .optional({ values: 'null' });
-    }
-    async execute(req, options = {}) {
-        const data = await super.execute(req, options);
-        if (options.group === request_1.RequestHandlerOperation.CREATE && !data.name) {
-            throw new http_1.BadRequestError((0, utils_1.buildErrorMessageForAttribute)('name'));
-        }
-        return data;
+            .optional({ values: 'null' })));
     }
 }
 exports.ScopeRequestValidator = ScopeRequestValidator;

package/dist/http/controllers/scope/utils/validaitor.js.map

@@ -1 +1 @@
-{"version":3,"file":"validaitor.js","sourceRoot":"","sources":["../../../../../src/http/controllers/scope/utils/validaitor.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;;AAEH,qCAA6C;AAE7C,2CAAiG;AACjG,iDAAkD;AAClD,6CAAkE;AAClE,8CAA2D;AAE3D,MAAa,qBAAsB,SAAQ,+BAE1C;IACG;QACI,KAAK,CAAC,qBAAW,CAAC,CAAC;QAEnB,IAAI,CAAC,KAAK,EAAE,CAAC;IACjB,CAAC;IAED,KAAK;QACD,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC;aACX,MAAM,EAAE;aACR,QAAQ,EAAE;aACV,QAAQ,EAAE;aACV,QAAQ,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;QAElC,IAAI,CAAC,GAAG,CAAC,aAAa,CAAC;aAClB,QAAQ,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;aAC5B,QAAQ,EAAE;aACV,QAAQ,EAAE;aACV,QAAQ,CAAC,EAAE,GAAG,EAAE,CAAC,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC;QAErC,IAAI,CAAC,KAAK,CAAC,iCAAuB,CAAC,MAAM,EAAE,UAAU,CAAC;aACjD,MAAM,EAAE;aACR,QAAQ,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;IACtC,CAAC;IAED,KAAK,CAAC,OAAO,CACT,GAAY,EACZ,UAAuD,EAAE;QAEzD,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,OAAO,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;QAE/C,IAAI,OAAO,CAAC,KAAK,KAAK,iCAAuB,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;YACjE,MAAM,IAAI,sBAAe,CAAC,IAAA,qCAA6B,EAAC,MAAM,CAAC,CAAC,CAAC;QACrE,CAAC;QAED,OAAO,IAAI,CAAC;IAChB,CAAC;CACJ;AAvCD,sDAuCC"}
+{"version":3,"file":"validaitor.js","sourceRoot":"","sources":["../../../../../src/http/controllers/scope/utils/validaitor.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;;AAEH,kEAA6D;AAE7D,qCAAoC;AAEpC,8CAA2D;AAE3D,MAAa,qBAAsB,SAAQ,mBAE1C;IACG,YAAY,UAAyC,EAAE;QACnD,KAAK,CAAC,OAAO,CAAC,CAAC;QAEf,IAAI,CAAC,QAAQ,EAAE,CAAC;IACpB,CAAC;IAED,QAAQ;QACJ,IAAI,CAAC,KAAK,CACN,MAAM,EACN,EAAE,KAAK,EAAE,iCAAuB,CAAC,MAAM,EAAE,EACzC,IAAA,mCAAe,EAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK;aAC3B,QAAQ,EAAE;aACV,QAAQ,CAAC,EAAE,GAAG,EAAE,CAAC,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC;aAC9B,QAAQ,CAAC,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC,CAAC,CAC1C,CAAC;QAEF,IAAI,CAAC,KAAK,CACN,MAAM,EACN,EAAE,KAAK,EAAE,iCAAuB,CAAC,MAAM,EAAE,EACzC,IAAA,mCAAe,EAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK;aAC3B,QAAQ,EAAE;aACV,QAAQ,CAAC,EAAE,GAAG,EAAE,CAAC,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,CAAC,CACvC,CAAC;QAEF,IAAI,CAAC,KAAK,CAAC,cAAc,EAAE,IAAA,mCAAe,EAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK;aACtD,QAAQ,EAAE;aACV,QAAQ,CAAC,EAAE,GAAG,EAAE,CAAC,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC;aAC9B,QAAQ,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,CAAC;QAEpC,IAAI,CAAC,KAAK,CAAC,aAAa,EAAE,IAAA,mCAAe,EAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK;aACrD,QAAQ,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;aAC5B,QAAQ,EAAE;aACV,QAAQ,EAAE;aACV,QAAQ,CAAC,EAAE,GAAG,EAAE,CAAC,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;QAEvC,IAAI,CAAC,KAAK,CAAC,UAAU,EAAE,EAAE,KAAK,EAAE,iCAAuB,CAAC,MAAM,EAAE,EAAE,IAAA,mCAAe,EAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK;aAC7F,MAAM,EAAE;aACR,QAAQ,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,CAAC;IACxC,CAAC;CACJ;AA1CD,sDA0CC"}

package/dist/http/controllers/user/handlers/delete.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"delete.d.ts","sourceRoot":"","sources":["../../../../../src/http/controllers/user/handlers/delete.ts"],"names":[],"mappings":"AASA,OAAO,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,QAAQ,CAAC;AAOhD,wBAAsB,sBAAsB,CAAC,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,QAAQ,GAAI,OAAO,CAAC,GAAG,CAAC,CAmCvF"}
+{"version":3,"file":"delete.d.ts","sourceRoot":"","sources":["../../../../../src/http/controllers/user/handlers/delete.ts"],"names":[],"mappings":"AASA,OAAO,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,QAAQ,CAAC;AAMhD,wBAAsB,sBAAsB,CAAC,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,QAAQ,GAAI,OAAO,CAAC,GAAG,CAAC,CAoCvF"}

package/dist/http/controllers/user/handlers/delete.js

@@ -13,14 +13,13 @@ const routup_1 = require("routup");
 const typeorm_extension_1 = require("typeorm-extension");
 const domains_1 = require("../../../../domains");
 const request_1 = require("../../../request");
-const utils_1 = require("../../../utils");
 async function deleteUserRouteHandler(req, res) {
-    const id = (0, request_1.useRequestIDParam)(req);
-    const ability = (0, utils_1.useRequestEnv)(req, 'abilities');
-    if (!ability.has(core_kit_1.PermissionName.USER_DELETE)) {
-        throw new http_1.ForbiddenError('You are not authorized to drop a user.');
-    }
-    if ((0, utils_1.useRequestEnv)(req, 'userId') === id) {
+    const id = (0, request_1.useRequestParamID)(req);
+    const permissionChecker = (0, request_1.useRequestEnv)(req, 'permissionChecker');
+    await permissionChecker.preCheck({ name: core_kit_1.PermissionName.USER_DELETE });
+    const identity = (0, request_1.useRequestIdentity)(req);
+    if (identity.type === 'user' &&
+        identity.id === id) {
         throw new http_1.BadRequestError('The own user can not be deleted.');
     }
     const dataSource = await (0, typeorm_extension_1.useDataSource)();
@@ -29,12 +28,12 @@ async function deleteUserRouteHandler(req, res) {
     if (!entity) {
         throw new http_1.NotFoundError();
     }
-    if (!ability.can(core_kit_1.PermissionName.USER_DELETE, { attributes: entity })) {
-        throw new http_1.ForbiddenError();
-    }
-    if (!(0, core_kit_1.isRealmResourceWritable)((0, utils_1.useRequestEnv)(req, 'realm'), entity.realm_id)) {
-        throw new http_1.ForbiddenError(`You are not authorized to drop a user fo the realm ${entity.realm_id}`);
-    }
+    await permissionChecker.check({
+        name: core_kit_1.PermissionName.USER_DELETE,
+        data: {
+            attributes: entity,
+        },
+    });
     const { id: entityId } = entity;
     await repository.remove(entity);
     entity.id = entityId;

package/dist/http/controllers/user/handlers/delete.js.map

@@ -1 +1 @@
-{"version":3,"file":"delete.js","sourceRoot":"","sources":["../../../../../src/http/controllers/user/handlers/delete.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;AAWH,wDAmCC;AA5CD,qCAA4E;AAC5E,+CAA2E;AAE3E,mCAAsC;AACtC,yDAAkD;AAClD,iDAAqD;AACrD,8CAAqD;AACrD,0CAA+C;AAExC,KAAK,UAAU,sBAAsB,CAAC,GAAY,EAAE,GAAa;IACpE,MAAM,EAAE,GAAG,IAAA,2BAAiB,EAAC,GAAG,CAAC,CAAC;IAElC,MAAM,OAAO,GAAG,IAAA,qBAAa,EAAC,GAAG,EAAE,WAAW,CAAC,CAAC;IAChD,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,yBAAc,CAAC,WAAW,CAAC,EAAE,CAAC;QAC3C,MAAM,IAAI,qBAAc,CAAC,wCAAwC,CAAC,CAAC;IACvE,CAAC;IAED,IAAI,IAAA,qBAAa,EAAC,GAAG,EAAE,QAAQ,CAAC,KAAK,EAAE,EAAE,CAAC;QACtC,MAAM,IAAI,sBAAe,CAAC,kCAAkC,CAAC,CAAC;IAClE,CAAC;IAED,MAAM,UAAU,GAAG,MAAM,IAAA,iCAAa,GAAE,CAAC;IACzC,MAAM,UAAU,GAAG,IAAI,wBAAc,CAAC,UAAU,CAAC,CAAC;IAClD,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,SAAS,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;IAElD,IAAI,CAAC,MAAM,EAAE,CAAC;QACV,MAAM,IAAI,oBAAa,EAAE,CAAC;IAC9B,CAAC;IAED,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,yBAAc,CAAC,WAAW,EAAE,EAAE,UAAU,EAAE,MAAM,EAAE,CAAC,EAAE,CAAC;QACnE,MAAM,IAAI,qBAAc,EAAE,CAAC;IAC/B,CAAC;IAED,IAAI,CAAC,IAAA,kCAAuB,EAAC,IAAA,qBAAa,EAAC,GAAG,EAAE,OAAO,CAAC,EAAE,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC;QACzE,MAAM,IAAI,qBAAc,CAAC,sDAAsD,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC;IACtG,CAAC;IAED,MAAM,EAAE,EAAE,EAAE,QAAQ,EAAE,GAAG,MAAM,CAAC;IAEhC,MAAM,UAAU,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAEhC,MAAM,CAAC,EAAE,GAAG,QAAQ,CAAC;IAErB,OAAO,IAAA,qBAAY,EAAC,GAAG,EAAE,MAAM,CAAC,CAAC;AACrC,CAAC"}
+{"version":3,"file":"delete.js","sourceRoot":"","sources":["../../../../../src/http/controllers/user/handlers/delete.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;AAUH,wDAoCC;AA5CD,qCAA4D;AAC5D,+CAAkD;AAElD,mCAAsC;AACtC,yDAAkD;AAClD,iDAAqD;AACrD,8CAAwF;AAEjF,KAAK,UAAU,sBAAsB,CAAC,GAAY,EAAE,GAAa;IACpE,MAAM,EAAE,GAAG,IAAA,2BAAiB,EAAC,GAAG,CAAC,CAAC;IAElC,MAAM,iBAAiB,GAAG,IAAA,uBAAa,EAAC,GAAG,EAAE,mBAAmB,CAAC,CAAC;IAClE,MAAM,iBAAiB,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,yBAAc,CAAC,WAAW,EAAE,CAAC,CAAC;IAEvE,MAAM,QAAQ,GAAG,IAAA,4BAAkB,EAAC,GAAG,CAAC,CAAC;IACzC,IACI,QAAQ,CAAC,IAAI,KAAK,MAAM;QACxB,QAAQ,CAAC,EAAE,KAAK,EAAE,EACpB,CAAC;QACC,MAAM,IAAI,sBAAe,CAAC,kCAAkC,CAAC,CAAC;IAClE,CAAC;IAED,MAAM,UAAU,GAAG,MAAM,IAAA,iCAAa,GAAE,CAAC;IACzC,MAAM,UAAU,GAAG,IAAI,wBAAc,CAAC,UAAU,CAAC,CAAC;IAClD,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,SAAS,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;IAElD,IAAI,CAAC,MAAM,EAAE,CAAC;QACV,MAAM,IAAI,oBAAa,EAAE,CAAC;IAC9B,CAAC;IAED,MAAM,iBAAiB,CAAC,KAAK,CAAC;QAC1B,IAAI,EAAE,yBAAc,CAAC,WAAW;QAChC,IAAI,EAAE;YACF,UAAU,EAAE,MAAM;SACrB;KACJ,CAAC,CAAC;IAEH,MAAM,EAAE,EAAE,EAAE,QAAQ,EAAE,GAAG,MAAM,CAAC;IAEhC,MAAM,UAAU,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAEhC,MAAM,CAAC,EAAE,GAAG,QAAQ,CAAC;IAErB,OAAO,IAAA,qBAAY,EAAC,GAAG,EAAE,MAAM,CAAC,CAAC;AACrC,CAAC"}

package/dist/http/controllers/user/handlers/index.d.ts

@@ -1,5 +1,4 @@
-export * from './create';
 export * from './delete';
 export * from './read';
-export * from './update';
+export * from './write';
 //# sourceMappingURL=index.d.ts.map

package/dist/http/controllers/user/handlers/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../src/http/controllers/user/handlers/index.ts"],"names":[],"mappings":"AAOA,cAAc,UAAU,CAAC;AACzB,cAAc,UAAU,CAAC;AACzB,cAAc,QAAQ,CAAC;AACvB,cAAc,UAAU,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../src/http/controllers/user/handlers/index.ts"],"names":[],"mappings":"AAOA,cAAc,UAAU,CAAC;AACzB,cAAc,QAAQ,CAAC;AACvB,cAAc,SAAS,CAAC"}

package/dist/http/controllers/user/handlers/index.js

@@ -20,8 +20,7 @@ var __exportStar = (this && this.__exportStar) || function(m, exports) {
     for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
 };
 Object.defineProperty(exports, "__esModule", { value: true });
-__exportStar(require("./create"), exports);
 __exportStar(require("./delete"), exports);
 __exportStar(require("./read"), exports);
-__exportStar(require("./update"), exports);
+__exportStar(require("./write"), exports);
 //# sourceMappingURL=index.js.map

package/dist/http/controllers/user/handlers/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../../src/http/controllers/user/handlers/index.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;;;;;;;;;;;;;;;AAEH,2CAAyB;AACzB,2CAAyB;AACzB,yCAAuB;AACvB,2CAAyB"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../../src/http/controllers/user/handlers/index.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;;;;;;;;;;;;;;;AAEH,2CAAyB;AACzB,yCAAuB;AACvB,0CAAwB"}

package/dist/http/controllers/user/handlers/read.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"read.d.ts","sourceRoot":"","sources":["../../../../../src/http/controllers/user/handlers/read.ts"],"names":[],"mappings":"AAQA,OAAO,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,QAAQ,CAAC;AA+ChD,wBAAsB,uBAAuB,CAAC,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,QAAQ,GAAI,OAAO,CAAC,GAAG,CAAC,CAiCxF;AAED,wBAAsB,sBAAsB,CAAC,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,QAAQ,GAAI,OAAO,CAAC,GAAG,CAAC,CAwEvF"}
+{"version":3,"file":"read.d.ts","sourceRoot":"","sources":["../../../../../src/http/controllers/user/handlers/read.ts"],"names":[],"mappings":"AAWA,OAAO,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,QAAQ,CAAC;AAiChD,wBAAsB,uBAAuB,CAAC,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,QAAQ,GAAI,OAAO,CAAC,GAAG,CAAC,CAoExF;AAED,wBAAsB,sBAAsB,CAAC,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,QAAQ,GAAI,OAAO,CAAC,GAAG,CAAC,CAiGvF"}

package/dist/http/controllers/user/handlers/read.js

@@ -8,19 +8,18 @@
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.getManyUserRouteHandler = getManyUserRouteHandler;
 exports.getOneUserRouteHandler = getOneUserRouteHandler;
+const core_kit_1 = require("@authup/core-kit");
+const kit_1 = require("@authup/kit");
+const http_1 = require("@ebec/http");
 const query_1 = require("@routup/basic/query");
 const routup_1 = require("routup");
 const typeorm_extension_1 = require("typeorm-extension");
-const http_1 = require("@ebec/http");
-const core_kit_1 = require("@authup/core-kit");
-const kit_1 = require("@authup/kit");
 const domains_1 = require("../../../../domains");
 const utils_1 = require("../../../../utils");
 const oauth2_1 = require("../../../oauth2");
 const request_1 = require("../../../request");
-const utils_2 = require("../../../utils");
-function buildFieldsOption(req) {
-    const options = {
+function buildFieldsOption() {
+    return {
         defaultAlias: 'user',
         default: [
             'id',
@@ -36,19 +35,16 @@ function buildFieldsOption(req) {
             'updated_at',
             'realm_id',
         ],
+        allowed: ['email'],
     };
-    if ((0, utils_2.useRequestEnv)(req, 'abilities').has(core_kit_1.PermissionName.USER_UPDATE)) {
-        options.allowed = ['email'];
-    }
-    return options;
 }
 async function getManyUserRouteHandler(req, res) {
     const dataSource = await (0, typeorm_extension_1.useDataSource)();
-    const userRepository = new domains_1.UserRepository(dataSource);
-    const query = userRepository.createQueryBuilder('user');
+    const repository = new domains_1.UserRepository(dataSource);
+    const query = repository.createQueryBuilder('user');
     const { pagination } = (0, typeorm_extension_1.applyQuery)(query, (0, query_1.useRequestQuery)(req), {
         defaultAlias: 'user',
-        fields: buildFieldsOption(req),
+        fields: buildFieldsOption(),
         filters: {
             allowed: ['id', 'name', 'realm_id'],
         },
@@ -62,10 +58,39 @@ async function getManyUserRouteHandler(req, res) {
             allowed: ['id', 'name', 'display_name', 'created_at', 'updated_at'],
         },
     });
-    (0, domains_1.onlyRealmReadableQueryResources)(query, (0, utils_2.useRequestEnv)(req, 'realm'));
-    const [entities, total] = await query.getManyAndCount();
+    const queryOutput = await query.getManyAndCount();
+    const [entities] = queryOutput;
+    let [, total] = queryOutput;
+    const permissionChecker = (0, request_1.useRequestEnv)(req, 'permissionChecker');
+    const identity = (0, request_1.useRequestIdentity)(req);
+    const data = [];
+    for (let i = 0; i < entities.length; i++) {
+        if (identity &&
+            identity.type === 'user' &&
+            identity.id === entities[i].id) {
+            data.push(entities[i]);
+            continue;
+        }
+        try {
+            await permissionChecker.checkOneOf({
+                name: [
+                    core_kit_1.PermissionName.USER_READ,
+                    core_kit_1.PermissionName.USER_UPDATE,
+                    core_kit_1.PermissionName.USER_DELETE,
+                ],
+                data: {
+                    attributes: entities[i],
+                },
+            });
+            data.push(entities[i]);
+        }
+        catch (e) {
+            total -= 1;
+        }
+    }
+    await repository.findAndAppendExtraAttributesToMany(data);
     return (0, routup_1.send)(res, {
-        data: entities,
+        data,
         meta: {
             total,
             ...pagination,
@@ -73,40 +98,50 @@ async function getManyUserRouteHandler(req, res) {
     });
 }
 async function getOneUserRouteHandler(req, res) {
-    const id = (0, request_1.useRequestIDParam)(req, {
-        strict: false,
+    const permissionChecker = (0, request_1.useRequestEnv)(req, 'permissionChecker');
+    await permissionChecker.preCheckOneOf({
+        name: [
+            core_kit_1.PermissionName.USER_READ,
+            core_kit_1.PermissionName.USER_UPDATE,
+            core_kit_1.PermissionName.USER_DELETE,
+        ],
+    });
+    const id = (0, request_1.useRequestParamID)(req, {
+        isUUID: false,
     });
     const dataSource = await (0, typeorm_extension_1.useDataSource)();
-    const userRepository = new domains_1.UserRepository(dataSource);
-    const query = userRepository.createQueryBuilder('user');
-    const userId = (0, utils_2.useRequestEnv)(req, 'userId');
+    const repository = new domains_1.UserRepository(dataSource);
+    const query = repository.createQueryBuilder('user');
+    const identity = (0, request_1.useRequestIdentity)(req);
     let isMe = false;
-    if ((0, utils_1.isSelfId)(id) && userId) {
+    if ((0, utils_1.isSelfId)(id) &&
+        !!identity &&
+        identity.type === 'user') {
         isMe = true;
-        query.where('user.id = :id', { id: userId });
+        query.where('user.id = :id', { id: identity.id });
     }
     else if ((0, kit_1.isUUID)(id)) {
-        if (id === userId) {
+        if (!!identity && identity.type === 'user' && id === identity.id) {
             isMe = true;
         }
         query.where('user.id = :id', { id });
     }
     else {
-        query.where('user.name LIKE :name', { name: id });
+        query.where('user.name = :name', { name: id });
         const realm = await (0, domains_1.resolveRealm)((0, routup_1.useRequestParam)(req, 'realmId'), true);
         query.andWhere('user.realm_id = :realmId', { realmId: realm.id });
+        if (!!identity &&
+            identity.type === 'user' &&
+            identity.realmId === realm.id &&
+            identity.attributes &&
+            identity.attributes.name === id) {
+            isMe = true;
+        }
     }
-    const ability = (0, utils_2.useRequestEnv)(req, 'abilities');
-    const hasAbility = ability.has(core_kit_1.PermissionName.USER_READ) ||
-        ability.has(core_kit_1.PermissionName.USER_UPDATE) ||
-        ability.has(core_kit_1.PermissionName.USER_DELETE);
-    if (!isMe && !hasAbility) {
-        throw new http_1.ForbiddenError();
-    }
-    const scopes = (0, utils_2.useRequestEnv)(req, 'scopes');
+    const scopes = (0, request_1.useRequestEnv)(req, 'scopes');
     if (isMe) {
         const attributes = (0, oauth2_1.resolveOAuth2SubAttributesForScope)(kit_1.OAuth2SubKind.USER, scopes);
-        const validAttributes = userRepository.metadata.columns.map((column) => column.databaseName);
+        const validAttributes = repository.metadata.columns.map((column) => column.databaseName);
         for (let i = 0; i < attributes.length; i++) {
             const isValid = validAttributes.includes(attributes[i]);
             if (isValid) {
@@ -114,10 +149,9 @@ async function getOneUserRouteHandler(req, res) {
             }
         }
     }
-    (0, domains_1.onlyRealmReadableQueryResources)(query, (0, utils_2.useRequestEnv)(req, 'realm'));
     (0, typeorm_extension_1.applyQuery)(query, (0, query_1.useRequestQuery)(req), {
         defaultAlias: 'user',
-        fields: buildFieldsOption(req),
+        fields: buildFieldsOption(),
         relations: {
             allowed: ['realm'],
         },
@@ -126,8 +160,21 @@ async function getOneUserRouteHandler(req, res) {
     if (!entity) {
         throw new http_1.NotFoundError();
     }
-    if ((isMe && (0, oauth2_1.hasOAuth2Scope)(scopes, core_kit_1.ScopeName.GLOBAL)) || hasAbility) {
-        await userRepository.findAndAppendExtraAttributesTo(entity);
+    if (isMe) {
+        if ((0, oauth2_1.hasOAuth2Scope)(scopes, core_kit_1.ScopeName.GLOBAL)) {
+            await repository.findAndAppendExtraAttributesTo(entity);
+        }
+    }
+    else {
+        await permissionChecker.checkOneOf({
+            name: [
+                core_kit_1.PermissionName.USER_READ,
+                core_kit_1.PermissionName.USER_UPDATE,
+                core_kit_1.PermissionName.USER_DELETE,
+            ],
+            data: { attributes: entity },
+        });
+        await repository.findAndAppendExtraAttributesTo(entity);
     }
     return (0, routup_1.send)(res, entity);
 }

package/dist/http/controllers/user/handlers/read.js.map

@@ -1 +1 @@
-{"version":3,"file":"read.js","sourceRoot":"","sources":["../../../../../src/http/controllers/user/handlers/read.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;AAkDH,0DAiCC;AAED,wDAwEC;AA3JD,+CAAsD;AAEtD,mCAA+C;AAE/C,yDAG2B;AAC3B,qCAA2D;AAC3D,+CAE0B;AAC1B,qCAEqB;AAErB,iDAAoG;AACpG,6CAA6C;AAC7C,4CAAqF;AACrF,8CAAqD;AACrD,0CAA+C;AAE/C,SAAS,iBAAiB,CAAC,GAAY;IACnC,MAAM,OAAO,GAAyC;QAClD,YAAY,EAAE,MAAM;QACpB,OAAO,EAAE;YACL,IAAI;YACJ,MAAM;YACN,aAAa;YACb,YAAY;YACZ,WAAW;YACX,cAAc;YACd,QAAQ;YACR,OAAO;YACP,QAAQ;YACR,YAAY;YACZ,YAAY;YACZ,UAAU;SACb;KACJ,CAAC;IAEF,IAAI,IAAA,qBAAa,EAAC,GAAG,EAAE,WAAW,CAAC,CAAC,GAAG,CAAC,yBAAc,CAAC,WAAW,CAAC,EAAE,CAAC;QAClE,OAAO,CAAC,OAAO,GAAG,CAAC,OAAO,CAAC,CAAC;IAChC,CAAC;IAED,OAAO,OAAO,CAAC;AACnB,CAAC;AAEM,KAAK,UAAU,uBAAuB,CAAC,GAAY,EAAE,GAAa;IACrE,MAAM,UAAU,GAAG,MAAM,IAAA,iCAAa,GAAE,CAAC;IACzC,MAAM,cAAc,GAAG,IAAI,wBAAc,CAAC,UAAU,CAAC,CAAC;IACtD,MAAM,KAAK,GAAG,cAAc,CAAC,kBAAkB,CAAC,MAAM,CAAC,CAAC;IAExD,MAAM,EAAE,UAAU,EAAE,GAAG,IAAA,8BAAU,EAAC,KAAK,EAAE,IAAA,uBAAe,EAAC,GAAG,CAAC,EAAE;QAC3D,YAAY,EAAE,MAAM;QACpB,MAAM,EAAE,iBAAiB,CAAC,GAAG,CAAC;QAC9B,OAAO,EAAE;YACL,OAAO,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,UAAU,CAAC;SACtC;QACD,UAAU,EAAE;YACR,QAAQ,EAAE,EAAE;SACf;QACD,SAAS,EAAE;YACP,OAAO,EAAE,CAAC,OAAO,CAAC;SACrB;QACD,IAAI,EAAE;YACF,OAAO,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,cAAc,EAAE,YAAY,EAAE,YAAY,CAAC;SACtE;KACJ,CAAC,CAAC;IAEH,IAAA,yCAA+B,EAAC,KAAK,EAAE,IAAA,qBAAa,EAAC,GAAG,EAAE,OAAO,CAAC,CAAC,CAAC;IAEpE,MAAM,CAAC,QAAQ,EAAE,KAAK,CAAC,GAAG,MAAM,KAAK,CAAC,eAAe,EAAE,CAAC;IAExD,OAAO,IAAA,aAAI,EAAC,GAAG,EAAE;QACb,IAAI,EAAE,QAAQ;QACd,IAAI,EAAE;YACF,KAAK;YACL,GAAG,UAAU;SAChB;KACJ,CAAC,CAAC;AACP,CAAC;AAEM,KAAK,UAAU,sBAAsB,CAAC,GAAY,EAAE,GAAa;IACpE,MAAM,EAAE,GAAG,IAAA,2BAAiB,EAAC,GAAG,EAAE;QAC9B,MAAM,EAAE,KAAK;KAChB,CAAC,CAAC;IAEH,MAAM,UAAU,GAAG,MAAM,IAAA,iCAAa,GAAE,CAAC;IACzC,MAAM,cAAc,GAAG,IAAI,wBAAc,CAAC,UAAU,CAAC,CAAC;IACtD,MAAM,KAAK,GAAG,cAAc,CAAC,kBAAkB,CAAC,MAAM,CAAC,CAAC;IAExD,MAAM,MAAM,GAAG,IAAA,qBAAa,EAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;IAE5C,IAAI,IAAI,GAAG,KAAK,CAAC;IAEjB,IAAI,IAAA,gBAAQ,EAAC,EAAE,CAAC,IAAI,MAAM,EAAE,CAAC;QACzB,IAAI,GAAG,IAAI,CAAC;QACZ,KAAK,CAAC,KAAK,CAAC,eAAe,EAAE,EAAE,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC;IACjD,CAAC;SAAM,IAAI,IAAA,YAAM,EAAC,EAAE,CAAC,EAAE,CAAC;QACpB,IAAI,EAAE,KAAK,MAAM,EAAE,CAAC;YAChB,IAAI,GAAG,IAAI,CAAC;QAChB,CAAC;QACD,KAAK,CAAC,KAAK,CAAC,eAAe,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC;IACzC,CAAC;SAAM,CAAC;QACJ,KAAK,CAAC,KAAK,CAAC,sBAAsB,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC;QAElD,MAAM,KAAK,GAAG,MAAM,IAAA,sBAAY,EAAC,IAAA,wBAAe,EAAC,GAAG,EAAE,SAAS,CAAC,EAAE,IAAI,CAAC,CAAC;QACxE,KAAK,CAAC,QAAQ,CAAC,0BAA0B,EAAE,EAAE,OAAO,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC;IACtE,CAAC;IAED,MAAM,OAAO,GAAG,IAAA,qBAAa,EAAC,GAAG,EAAE,WAAW,CAAC,CAAC;IAChD,MAAM,UAAU,GAAG,OAAO,CAAC,GAAG,CAAC,yBAAc,CAAC,SAAS,CAAC;QACpD,OAAO,CAAC,GAAG,CAAC,yBAAc,CAAC,WAAW,CAAC;QACvC,OAAO,CAAC,GAAG,CAAC,yBAAc,CAAC,WAAW,CAAC,CAAC;IAC5C,IAAI,CAAC,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;QACvB,MAAM,IAAI,qBAAc,EAAE,CAAC;IAC/B,CAAC;IAED,MAAM,MAAM,GAAG,IAAA,qBAAa,EAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;IAC5C,IAAI,IAAI,EAAE,CAAC;QACP,MAAM,UAAU,GAAa,IAAA,2CAAkC,EAAC,mBAAa,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QAE5F,MAAM,eAAe,GAAG,cAAc,CAAC,QAAQ,CAAC,OAAO,CAAC,GAAG,CACvD,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,YAAY,CAClC,CAAC;QACF,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,UAAU,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YACzC,MAAM,OAAO,GAAG,eAAe,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC;YACxD,IAAI,OAAO,EAAE,CAAC;gBACV,KAAK,CAAC,SAAS,CAAC,QAAQ,UAAU,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;YAC7C,CAAC;QACL,CAAC;IACL,CAAC;IAED,IAAA,yCAA+B,EAAC,KAAK,EAAE,IAAA,qBAAa,EAAC,GAAG,EAAE,OAAO,CAAC,CAAC,CAAC;IAEpE,IAAA,8BAAU,EAAC,KAAK,EAAE,IAAA,uBAAe,EAAC,GAAG,CAAC,EAAE;QACpC,YAAY,EAAE,MAAM;QACpB,MAAM,EAAE,iBAAiB,CAAC,GAAG,CAAC;QAC9B,SAAS,EAAE;YACP,OAAO,EAAE,CAAC,OAAO,CAAC;SACrB;KACJ,CAAC,CAAC;IAEH,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,MAAM,EAAE,CAAC;IAEpC,IAAI,CAAC,MAAM,EAAE,CAAC;QACV,MAAM,IAAI,oBAAa,EAAE,CAAC;IAC9B,CAAC;IAED,IAAI,CAAC,IAAI,IAAI,IAAA,uBAAc,EAAC,MAAM,EAAE,oBAAS,CAAC,MAAM,CAAC,CAAC,IAAI,UAAU,EAAE,CAAC;QACnE,MAAM,cAAc,CAAC,8BAA8B,CAAC,MAAM,CAAC,CAAC;IAChE,CAAC;IAED,OAAO,IAAA,aAAI,EAAC,GAAG,EAAE,MAAM,CAAC,CAAC;AAC7B,CAAC"}
+{"version":3,"file":"read.js","sourceRoot":"","sources":["../../../../../src/http/controllers/user/handlers/read.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;AAuCH,0DAoEC;AAED,wDAiGC;AA5MD,+CAA6D;AAC7D,qCAAoD;AACpD,qCAA2C;AAC3C,+CAAsD;AAEtD,mCAA+C;AAE/C,yDAA8D;AAE9D,iDAAmE;AACnE,6CAA6C;AAC7C,4CAAqF;AACrF,8CAE0B;AAE1B,SAAS,iBAAiB;IACtB,OAAO;QACH,YAAY,EAAE,MAAM;QACpB,OAAO,EAAE;YACL,IAAI;YACJ,MAAM;YACN,aAAa;YACb,YAAY;YACZ,WAAW;YACX,cAAc;YACd,QAAQ;YACR,OAAO;YACP,QAAQ;YACR,YAAY;YACZ,YAAY;YACZ,UAAU;SACb;QACD,OAAO,EAAE,CAAC,OAAO,CAAC;KACrB,CAAC;AACN,CAAC;AAEM,KAAK,UAAU,uBAAuB,CAAC,GAAY,EAAE,GAAa;IACrE,MAAM,UAAU,GAAG,MAAM,IAAA,iCAAa,GAAE,CAAC;IACzC,MAAM,UAAU,GAAG,IAAI,wBAAc,CAAC,UAAU,CAAC,CAAC;IAClD,MAAM,KAAK,GAAG,UAAU,CAAC,kBAAkB,CAAC,MAAM,CAAC,CAAC;IAEpD,MAAM,EAAE,UAAU,EAAE,GAAG,IAAA,8BAAU,EAAC,KAAK,EAAE,IAAA,uBAAe,EAAC,GAAG,CAAC,EAAE;QAC3D,YAAY,EAAE,MAAM;QACpB,MAAM,EAAE,iBAAiB,EAAE;QAC3B,OAAO,EAAE;YACL,OAAO,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,UAAU,CAAC;SACtC;QACD,UAAU,EAAE;YACR,QAAQ,EAAE,EAAE;SACf;QACD,SAAS,EAAE;YACP,OAAO,EAAE,CAAC,OAAO,CAAC;SACrB;QACD,IAAI,EAAE;YACF,OAAO,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,cAAc,EAAE,YAAY,EAAE,YAAY,CAAC;SACtE;KACJ,CAAC,CAAC;IAEH,MAAM,WAAW,GAAG,MAAM,KAAK,CAAC,eAAe,EAAE,CAAC;IAClD,MAAM,CAAC,QAAQ,CAAC,GAAG,WAAW,CAAC;IAC/B,IAAI,CAAC,EAAE,KAAK,CAAC,GAAG,WAAW,CAAC;IAE5B,MAAM,iBAAiB,GAAG,IAAA,uBAAa,EAAC,GAAG,EAAE,mBAAmB,CAAC,CAAC;IAElE,MAAM,QAAQ,GAAG,IAAA,4BAAkB,EAAC,GAAG,CAAC,CAAC;IAEzC,MAAM,IAAI,GAAkB,EAAE,CAAC;IAC/B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,QAAQ,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACvC,IACI,QAAQ;YACR,QAAQ,CAAC,IAAI,KAAK,MAAM;YACxB,QAAQ,CAAC,EAAE,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE,EAChC,CAAC;YACC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC;YACvB,SAAS;QACb,CAAC;QAED,IAAI,CAAC;YACD,MAAM,iBAAiB,CAAC,UAAU,CAAC;gBAC/B,IAAI,EAAE;oBACF,yBAAc,CAAC,SAAS;oBACxB,yBAAc,CAAC,WAAW;oBAC1B,yBAAc,CAAC,WAAW;iBAC7B;gBACD,IAAI,EAAE;oBACF,UAAU,EAAE,QAAQ,CAAC,CAAC,CAAC;iBAC1B;aACJ,CAAC,CAAC;YAEH,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC;QAC3B,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACT,KAAK,IAAI,CAAC,CAAC;QACf,CAAC;IACL,CAAC;IAED,MAAM,UAAU,CAAC,kCAAkC,CAAC,IAAI,CAAC,CAAC;IAE1D,OAAO,IAAA,aAAI,EAAC,GAAG,EAAE;QACb,IAAI;QACJ,IAAI,EAAE;YACF,KAAK;YACL,GAAG,UAAU;SAChB;KACJ,CAAC,CAAC;AACP,CAAC;AAEM,KAAK,UAAU,sBAAsB,CAAC,GAAY,EAAE,GAAa;IACpE,MAAM,iBAAiB,GAAG,IAAA,uBAAa,EAAC,GAAG,EAAE,mBAAmB,CAAC,CAAC;IAClE,MAAM,iBAAiB,CAAC,aAAa,CAAC;QAClC,IAAI,EAAE;YACF,yBAAc,CAAC,SAAS;YACxB,yBAAc,CAAC,WAAW;YAC1B,yBAAc,CAAC,WAAW;SAC7B;KACJ,CAAC,CAAC;IAEH,MAAM,EAAE,GAAG,IAAA,2BAAiB,EAAC,GAAG,EAAE;QAC9B,MAAM,EAAE,KAAK;KAChB,CAAC,CAAC;IAEH,MAAM,UAAU,GAAG,MAAM,IAAA,iCAAa,GAAE,CAAC;IACzC,MAAM,UAAU,GAAG,IAAI,wBAAc,CAAC,UAAU,CAAC,CAAC;IAClD,MAAM,KAAK,GAAG,UAAU,CAAC,kBAAkB,CAAC,MAAM,CAAC,CAAC;IAEpD,MAAM,QAAQ,GAAG,IAAA,4BAAkB,EAAC,GAAG,CAAC,CAAC;IAEzC,IAAI,IAAI,GAAG,KAAK,CAAC;IAEjB,IACI,IAAA,gBAAQ,EAAC,EAAE,CAAC;QACZ,CAAC,CAAC,QAAQ;QACV,QAAQ,CAAC,IAAI,KAAK,MAAM,EAC1B,CAAC;QACC,IAAI,GAAG,IAAI,CAAC;QACZ,KAAK,CAAC,KAAK,CAAC,eAAe,EAAE,EAAE,EAAE,EAAE,QAAQ,CAAC,EAAE,EAAE,CAAC,CAAC;IACtD,CAAC;SAAM,IAAI,IAAA,YAAM,EAAC,EAAE,CAAC,EAAE,CAAC;QACpB,IAAI,CAAC,CAAC,QAAQ,IAAI,QAAQ,CAAC,IAAI,KAAK,MAAM,IAAI,EAAE,KAAK,QAAQ,CAAC,EAAE,EAAE,CAAC;YAC/D,IAAI,GAAG,IAAI,CAAC;QAChB,CAAC;QACD,KAAK,CAAC,KAAK,CAAC,eAAe,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC;IACzC,CAAC;SAAM,CAAC;QACJ,KAAK,CAAC,KAAK,CAAC,mBAAmB,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC;QAE/C,MAAM,KAAK,GAAG,MAAM,IAAA,sBAAY,EAAC,IAAA,wBAAe,EAAC,GAAG,EAAE,SAAS,CAAC,EAAE,IAAI,CAAC,CAAC;QACxE,KAAK,CAAC,QAAQ,CAAC,0BAA0B,EAAE,EAAE,OAAO,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC;QAElE,IACI,CAAC,CAAC,QAAQ;YACV,QAAQ,CAAC,IAAI,KAAK,MAAM;YACxB,QAAQ,CAAC,OAAO,KAAK,KAAK,CAAC,EAAE;YAC7B,QAAQ,CAAC,UAAU;YACnB,QAAQ,CAAC,UAAU,CAAC,IAAI,KAAK,EAAE,EACjC,CAAC;YACC,IAAI,GAAG,IAAI,CAAC;QAChB,CAAC;IACL,CAAC;IAED,MAAM,MAAM,GAAG,IAAA,uBAAa,EAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;IAC5C,IAAI,IAAI,EAAE,CAAC;QACP,MAAM,UAAU,GAAa,IAAA,2CAAkC,EAAC,mBAAa,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QAE5F,MAAM,eAAe,GAAG,UAAU,CAAC,QAAQ,CAAC,OAAO,CAAC,GAAG,CACnD,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,YAAY,CAClC,CAAC;QACF,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,UAAU,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YACzC,MAAM,OAAO,GAAG,eAAe,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC;YACxD,IAAI,OAAO,EAAE,CAAC;gBACV,KAAK,CAAC,SAAS,CAAC,QAAQ,UAAU,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;YAC7C,CAAC;QACL,CAAC;IACL,CAAC;IAED,IAAA,8BAAU,EAAC,KAAK,EAAE,IAAA,uBAAe,EAAC,GAAG,CAAC,EAAE;QACpC,YAAY,EAAE,MAAM;QACpB,MAAM,EAAE,iBAAiB,EAAE;QAC3B,SAAS,EAAE;YACP,OAAO,EAAE,CAAC,OAAO,CAAC;SACrB;KACJ,CAAC,CAAC;IAEH,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,MAAM,EAAE,CAAC;IACpC,IAAI,CAAC,MAAM,EAAE,CAAC;QACV,MAAM,IAAI,oBAAa,EAAE,CAAC;IAC9B,CAAC;IAED,IAAI,IAAI,EAAE,CAAC;QACP,IAAI,IAAA,uBAAc,EAAC,MAAM,EAAE,oBAAS,CAAC,MAAM,CAAC,EAAE,CAAC;YAC3C,MAAM,UAAU,CAAC,8BAA8B,CAAC,MAAM,CAAC,CAAC;QAC5D,CAAC;IACL,CAAC;SAAM,CAAC;QACJ,MAAM,iBAAiB,CAAC,UAAU,CAAC;YAC/B,IAAI,EAAE;gBACF,yBAAc,CAAC,SAAS;gBACxB,yBAAc,CAAC,WAAW;gBAC1B,yBAAc,CAAC,WAAW;aAC7B;YACD,IAAI,EAAE,EAAE,UAAU,EAAE,MAAM,EAAE;SAC/B,CAAC,CAAC;QAEH,MAAM,UAAU,CAAC,8BAA8B,CAAC,MAAM,CAAC,CAAC;IAC5D,CAAC;IAED,OAAO,IAAA,aAAI,EAAC,GAAG,EAAE,MAAM,CAAC,CAAC;AAC7B,CAAC"}

package/dist/http/controllers/user/handlers/write.d.ts

@@ -0,0 +1,5 @@
+import type { Request, Response } from 'routup';
+export declare function writeUserRouteHandler(req: Request, res: Response, options?: {
+    updateOnly?: boolean;
+}): Promise<any>;
+//# sourceMappingURL=write.d.ts.map

package/dist/http/controllers/user/handlers/write.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"write.d.ts","sourceRoot":"","sources":["../../../../../src/http/controllers/user/handlers/write.ts"],"names":[],"mappings":"AAUA,OAAO,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,QAAQ,CAAC;AAYhD,wBAAsB,qBAAqB,CACvC,GAAG,EAAE,OAAO,EACZ,GAAG,EAAE,QAAQ,EACb,OAAO,GAAE;IACL,UAAU,CAAC,EAAE,OAAO,CAAA;CAClB,GACN,OAAO,CAAC,GAAG,CAAC,CAmJf"}

package/dist/http/controllers/user/handlers/write.js

@@ -0,0 +1,145 @@
+"use strict";
+/*
+ * Copyright (c) 2022.
+ * Author Peter Placzek (tada5hi)
+ * For the full copyright and license information,
+ * view the LICENSE file that was distributed with this source code.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.writeUserRouteHandler = writeUserRouteHandler;
+const kit_1 = require("@authup/kit");
+const http_1 = require("@ebec/http");
+const core_kit_1 = require("@authup/core-kit");
+const routup_1 = require("routup");
+const typeorm_extension_1 = require("typeorm-extension");
+const adapter_routup_1 = require("@validup/adapter-routup");
+const config_1 = require("../../../../config");
+const domains_1 = require("../../../../domains");
+const utils_1 = require("../utils");
+const request_1 = require("../../../request");
+async function writeUserRouteHandler(req, res, options = {}) {
+    let group;
+    const id = (0, request_1.getRequestParamID)(req, { isUUID: false });
+    const realmId = (0, request_1.getRequestBodyRealmID)(req);
+    const dataSource = await (0, typeorm_extension_1.useDataSource)();
+    const repository = new domains_1.UserRepository(dataSource);
+    let entity;
+    if (id) {
+        const where = {};
+        if ((0, kit_1.isUUID)(id)) {
+            where.id = id;
+        }
+        else {
+            where.name = id;
+        }
+        if (realmId) {
+            where.realm_id = realmId;
+        }
+        entity = await repository.findOneBy(where);
+        if (!entity && options.updateOnly) {
+            throw new http_1.NotFoundError();
+        }
+    }
+    else if (options.updateOnly) {
+        throw new http_1.NotFoundError();
+    }
+    let hasAbility;
+    const permissionChecker = (0, request_1.useRequestEnv)(req, 'permissionChecker');
+    if (entity) {
+        try {
+            await permissionChecker.preCheck({
+                name: core_kit_1.PermissionName.USER_UPDATE,
+            });
+            hasAbility = true;
+        }
+        catch (e) {
+            const identity = (0, request_1.useRequestIdentityOrFail)(req);
+            if (identity.type !== 'user' || identity.id !== entity.id) {
+                throw e;
+            }
+        }
+        group = request_1.RequestHandlerOperation.UPDATE;
+    }
+    else {
+        await permissionChecker.preCheck({
+            name: core_kit_1.PermissionName.USER_CREATE,
+        });
+        hasAbility = true;
+        group = request_1.RequestHandlerOperation.CREATE;
+    }
+    const validator = new utils_1.UserRequestValidator();
+    const validatorAdapter = new adapter_routup_1.RoutupContainerAdapter(validator);
+    const data = await validatorAdapter.run(req, {
+        group,
+    });
+    await (0, typeorm_extension_1.validateEntityJoinColumns)(data, {
+        dataSource,
+        entityTarget: domains_1.UserEntity,
+    });
+    if (!hasAbility) {
+        delete data.name_locked;
+        delete data.active;
+        delete data.status;
+        delete data.status_message;
+    }
+    if (entity) {
+        entity = repository.merge(entity, data);
+        if (data.name &&
+            data.name !== entity.name) {
+            if (data.name_locked) {
+                entity.name_locked = data.name_locked;
+            }
+            if (entity.name_locked) {
+                delete data.name;
+            }
+            const config = (0, config_1.useConfig)();
+            if (entity.name === config.userAdminName) {
+                throw new http_1.BadRequestError('The default user name can not be changed.');
+            }
+        }
+        if (hasAbility) {
+            await permissionChecker.check({
+                name: core_kit_1.PermissionName.USER_UPDATE,
+                data: {
+                    attributes: {
+                        ...entity,
+                        ...data,
+                    },
+                },
+            });
+        }
+        if (data.password) {
+            entity.password = await repository.hashPassword(data.password);
+        }
+        await repository.save(entity);
+        if (data.password) {
+            entity.password = data.password;
+        }
+        return (0, routup_1.sendAccepted)(res, entity);
+    }
+    if (!data.realm_id) {
+        const { realmId } = (0, request_1.useRequestIdentityOrFail)(req);
+        data.realm_id = realmId;
+    }
+    entity = repository.create(data);
+    if (hasAbility) {
+        await permissionChecker.check({
+            name: core_kit_1.PermissionName.USER_CREATE,
+            data: {
+                attributes: {
+                    ...entity,
+                    ...data,
+                },
+            },
+        });
+    }
+    if (data.password) {
+        entity.password = await repository.hashPassword(data.password);
+    }
+    await repository.save(entity);
+    if (data.password) {
+        entity.password = data.password;
+    }
+    return (0, routup_1.sendCreated)(res, entity);
+}
+//# sourceMappingURL=write.js.map

package/dist/http/controllers/user/handlers/write.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"write.js","sourceRoot":"","sources":["../../../../../src/http/controllers/user/handlers/write.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;AAiBH,sDAyJC;AAxKD,qCAAqC;AACrC,qCAA4D;AAC5D,+CAAkD;AAElD,mCAAmD;AAEnD,yDAA6E;AAC7E,4DAAiE;AACjE,+CAA+C;AAC/C,iDAAiE;AACjE,oCAAgD;AAChD,8CAE0B;AAEnB,KAAK,UAAU,qBAAqB,CACvC,GAAY,EACZ,GAAa,EACb,UAEI,EAAE;IAEN,IAAI,KAAa,CAAC;IAClB,MAAM,EAAE,GAAG,IAAA,2BAAiB,EAAC,GAAG,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;IACrD,MAAM,OAAO,GAAG,IAAA,+BAAqB,EAAC,GAAG,CAAC,CAAC;IAE3C,MAAM,UAAU,GAAG,MAAM,IAAA,iCAAa,GAAE,CAAC;IACzC,MAAM,UAAU,GAAG,IAAI,wBAAc,CAAC,UAAU,CAAC,CAAC;IAClD,IAAI,MAA+B,CAAC;IACpC,IAAI,EAAE,EAAE,CAAC;QACL,MAAM,KAAK,GAAiC,EAAE,CAAC;QAC/C,IAAI,IAAA,YAAM,EAAC,EAAE,CAAC,EAAE,CAAC;YACb,KAAK,CAAC,EAAE,GAAG,EAAE,CAAC;QAClB,CAAC;aAAM,CAAC;YACJ,KAAK,CAAC,IAAI,GAAG,EAAE,CAAC;QACpB,CAAC;QAED,IAAI,OAAO,EAAE,CAAC;YACV,KAAK,CAAC,QAAQ,GAAG,OAAO,CAAC;QAC7B,CAAC;QAED,MAAM,GAAG,MAAM,UAAU,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;QAC3C,IAAI,CAAC,MAAM,IAAI,OAAO,CAAC,UAAU,EAAE,CAAC;YAChC,MAAM,IAAI,oBAAa,EAAE,CAAC;QAC9B,CAAC;IACL,CAAC;SAAM,IAAI,OAAO,CAAC,UAAU,EAAE,CAAC;QAC5B,MAAM,IAAI,oBAAa,EAAE,CAAC;IAC9B,CAAC;IAED,IAAI,UAAoB,CAAC;IACzB,MAAM,iBAAiB,GAAG,IAAA,uBAAa,EAAC,GAAG,EAAE,mBAAmB,CAAC,CAAC;IAClE,IAAI,MAAM,EAAE,CAAC;QACT,IAAI,CAAC;YACD,MAAM,iBAAiB,CAAC,QAAQ,CAAC;gBAC7B,IAAI,EAAE,yBAAc,CAAC,WAAW;aACnC,CAAC,CAAC;YACH,UAAU,GAAG,IAAI,CAAC;QACtB,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACT,MAAM,QAAQ,GAAG,IAAA,kCAAwB,EAAC,GAAG,CAAC,CAAC;YAC/C,IAAI,QAAQ,CAAC,IAAI,KAAK,MAAM,IAAI,QAAQ,CAAC,EAAE,KAAK,MAAM,CAAC,EAAE,EAAE,CAAC;gBACxD,MAAM,CAAC,CAAC;YACZ,CAAC;QACL,CAAC;QAED,KAAK,GAAG,iCAAuB,CAAC,MAAM,CAAC;IAC3C,CAAC;SAAM,CAAC;QACJ,MAAM,iBAAiB,CAAC,QAAQ,CAAC;YAC7B,IAAI,EAAE,yBAAc,CAAC,WAAW;SACnC,CAAC,CAAC;QACH,UAAU,GAAG,IAAI,CAAC;QAElB,KAAK,GAAG,iCAAuB,CAAC,MAAM,CAAC;IAC3C,CAAC;IAED,MAAM,SAAS,GAAG,IAAI,4BAAoB,EAAE,CAAC;IAC7C,MAAM,gBAAgB,GAAG,IAAI,uCAAsB,CAAC,SAAS,CAAC,CAAC;IAC/D,MAAM,IAAI,GAAG,MAAM,gBAAgB,CAAC,GAAG,CAAC,GAAG,EAAE;QACzC,KAAK;KACR,CAAC,CAAC;IAEH,MAAM,IAAA,6CAAyB,EAAC,IAAI,EAAE;QAClC,UAAU;QACV,YAAY,EAAE,oBAAU;KAC3B,CAAC,CAAC;IAEH,IAAI,CAAC,UAAU,EAAE,CAAC;QACd,OAAO,IAAI,CAAC,WAAW,CAAC;QACxB,OAAO,IAAI,CAAC,MAAM,CAAC;QACnB,OAAO,IAAI,CAAC,MAAM,CAAC;QACnB,OAAO,IAAI,CAAC,cAAc,CAAC;IAC/B,CAAC;IAED,IAAI,MAAM,EAAE,CAAC;QACT,MAAM,GAAG,UAAU,CAAC,KAAK,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;QAExC,IACI,IAAI,CAAC,IAAI;YACT,IAAI,CAAC,IAAI,KAAK,MAAM,CAAC,IAAI,EAC3B,CAAC;YACC,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC;gBACnB,MAAM,CAAC,WAAW,GAAG,IAAI,CAAC,WAAW,CAAC;YAC1C,CAAC;YAED,IAAI,MAAM,CAAC,WAAW,EAAE,CAAC;gBACrB,OAAO,IAAI,CAAC,IAAI,CAAC;YACrB,CAAC;YAED,MAAM,MAAM,GAAG,IAAA,kBAAS,GAAE,CAAC;YAC3B,IAAI,MAAM,CAAC,IAAI,KAAK,MAAM,CAAC,aAAa,EAAE,CAAC;gBACvC,MAAM,IAAI,sBAAe,CAAC,2CAA2C,CAAC,CAAC;YAC3E,CAAC;QACL,CAAC;QAED,IAAI,UAAU,EAAE,CAAC;YACb,MAAM,iBAAiB,CAAC,KAAK,CAAC;gBAC1B,IAAI,EAAE,yBAAc,CAAC,WAAW;gBAChC,IAAI,EAAE;oBACF,UAAU,EAAE;wBACR,GAAG,MAAM;wBACT,GAAG,IAAI;qBACV;iBACJ;aACJ,CAAC,CAAC;QACP,CAAC;QAED,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;YAChB,MAAM,CAAC,QAAQ,GAAG,MAAM,UAAU,CAAC,YAAY,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QACnE,CAAC;QAED,MAAM,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAE9B,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;YAChB,MAAM,CAAC,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC;QACpC,CAAC;QAED,OAAO,IAAA,qBAAY,EAAC,GAAG,EAAE,MAAM,CAAC,CAAC;IACrC,CAAC;IAED,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC;QACjB,MAAM,EAAE,OAAO,EAAE,GAAG,IAAA,kCAAwB,EAAC,GAAG,CAAC,CAAC;QAClD,IAAI,CAAC,QAAQ,GAAG,OAAO,CAAC;IAC5B,CAAC;IAED,MAAM,GAAG,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IAEjC,IAAI,UAAU,EAAE,CAAC;QACb,MAAM,iBAAiB,CAAC,KAAK,CAAC;YAC1B,IAAI,EAAE,yBAAc,CAAC,WAAW;YAChC,IAAI,EAAE;gBACF,UAAU,EAAE;oBACR,GAAG,MAAM;oBACT,GAAG,IAAI;iBACV;aACJ;SACJ,CAAC,CAAC;IACP,CAAC;IAED,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;QAChB,MAAM,CAAC,QAAQ,GAAG,MAAM,UAAU,CAAC,YAAY,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IACnE,CAAC;IAED,MAAM,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAE9B,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;QAChB,MAAM,CAAC,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC;IACpC,CAAC;IAED,OAAO,IAAA,oBAAW,EAAC,GAAG,EAAE,MAAM,CAAC,CAAC;AACpC,CAAC"}

package/dist/http/controllers/user/module.d.ts

@@ -4,6 +4,7 @@ export declare class UserController {
     add(user: NonNullable<User>, req: any, res: any): Promise<User | undefined>;
     get(id: string, req: any, res: any): Promise<User | undefined>;
     edit(id: string, user: User, req: any, res: any): Promise<User | undefined>;
+    put(id: string, user: User, req: any, res: any): Promise<User | undefined>;
     drop(id: string, req: any, res: any): Promise<User | undefined>;
 }
 //# sourceMappingURL=module.d.ts.map

package/dist/http/controllers/user/module.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"module.d.ts","sourceRoot":"","sources":["../../../../src/http/controllers/user/module.ts"],"names":[],"mappings":"AAUA,OAAO,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAC;AAUxC,qBAEa,cAAc;IAEjB,OAAO,CACG,GAAG,EAAE,GAAG,EACH,GAAG,EAAE,GAAG,GAC1B,OAAO,CAAC,IAAI,EAAE,CAAC;IAKZ,GAAG,CACI,IAAI,EAAE,WAAW,CAAC,IAAI,CAAC,EAChB,GAAG,EAAE,GAAG,EACP,GAAG,EAAE,GAAG,GAC1B,OAAO,CAAC,IAAI,GAAG,SAAS,CAAC;IAKtB,GAAG,CACQ,EAAE,EAAE,MAAM,EACP,GAAG,EAAE,GAAG,EACP,GAAG,EAAE,GAAG,GAC1B,OAAO,CAAC,IAAI,GAAG,SAAS,CAAC;IAKtB,IAAI,CACO,EAAE,EAAE,MAAM,EACV,IAAI,EAAE,IAAI,EACP,GAAG,EAAE,GAAG,EACP,GAAG,EAAE,GAAG,GAC1B,OAAO,CAAC,IAAI,GAAG,SAAS,CAAC;IAKtB,IAAI,CACO,EAAE,EAAE,MAAM,EACP,GAAG,EAAE,GAAG,EACP,GAAG,EAAE,GAAG,GAC1B,OAAO,CAAC,IAAI,GAAG,SAAS,CAAC;CAG/B"}
+{"version":3,"file":"module.d.ts","sourceRoot":"","sources":["../../../../src/http/controllers/user/module.ts"],"names":[],"mappings":"AAUA,OAAO,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAC;AASxC,qBAEa,cAAc;IAEjB,OAAO,CACG,GAAG,EAAE,GAAG,EACH,GAAG,EAAE,GAAG,GAC1B,OAAO,CAAC,IAAI,EAAE,CAAC;IAKZ,GAAG,CACI,IAAI,EAAE,WAAW,CAAC,IAAI,CAAC,EAChB,GAAG,EAAE,GAAG,EACP,GAAG,EAAE,GAAG,GAC1B,OAAO,CAAC,IAAI,GAAG,SAAS,CAAC;IAKtB,GAAG,CACQ,EAAE,EAAE,MAAM,EACP,GAAG,EAAE,GAAG,EACP,GAAG,EAAE,GAAG,GAC1B,OAAO,CAAC,IAAI,GAAG,SAAS,CAAC;IAKtB,IAAI,CACO,EAAE,EAAE,MAAM,EACV,IAAI,EAAE,IAAI,EACP,GAAG,EAAE,GAAG,EACP,GAAG,EAAE,GAAG,GAC1B,OAAO,CAAC,IAAI,GAAG,SAAS,CAAC;IAOtB,GAAG,CACQ,EAAE,EAAE,MAAM,EACV,IAAI,EAAE,IAAI,EACP,GAAG,EAAE,GAAG,EACP,GAAG,EAAE,GAAG,GAC1B,OAAO,CAAC,IAAI,GAAG,SAAS,CAAC;IAKtB,IAAI,CACO,EAAE,EAAE,MAAM,EACP,GAAG,EAAE,GAAG,EACP,GAAG,EAAE,GAAG,GAC1B,OAAO,CAAC,IAAI,GAAG,SAAS,CAAC;CAG/B"}

package/dist/http/controllers/user/module.js

@@ -27,13 +27,18 @@ let UserController = class UserController {
         return (0, handlers_1.getManyUserRouteHandler)(req, res);
     }
     async add(user, req, res) {
-        return (0, handlers_1.createUserRouteHandler)(req, res);
+        return (0, handlers_1.writeUserRouteHandler)(req, res);
     }
     async get(id, req, res) {
         return (0, handlers_1.getOneUserRouteHandler)(req, res);
     }
     async edit(id, user, req, res) {
-        return (0, handlers_1.updateUserRouteHandler)(req, res);
+        return (0, handlers_1.writeUserRouteHandler)(req, res, {
+            updateOnly: true,
+        });
+    }
+    async put(id, user, req, res) {
+        return (0, handlers_1.writeUserRouteHandler)(req, res);
     }
     async drop(id, req, res) {
         return (0, handlers_1.deleteUserRouteHandler)(req, res);
@@ -76,6 +81,16 @@ __decorate([
     __metadata("design:paramtypes", [String, Object, Object, Object]),
     __metadata("design:returntype", Promise)
 ], UserController.prototype, "edit", null);
+__decorate([
+    (0, decorators_1.DPut)('/:id', [middleware_1.ForceLoggedInMiddleware]),
+    __param(0, (0, decorators_1.DPath)('id')),
+    __param(1, (0, decorators_1.DBody)()),
+    __param(2, (0, decorators_1.DRequest)()),
+    __param(3, (0, decorators_1.DResponse)()),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [String, Object, Object, Object]),
+    __metadata("design:returntype", Promise)
+], UserController.prototype, "put", null);
 __decorate([
     (0, decorators_1.DDelete)('/:id', [middleware_1.ForceLoggedInMiddleware]),
     __param(0, (0, decorators_1.DPath)('id')),