@authup/server-core 1.0.0-beta.2 → 1.0.0-beta.20

package/dist/http/controllers/realm/utils/validation.js

@@ -6,44 +6,51 @@
  * view the LICENSE file that was distributed with this source code.
  */
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.runRealmValidation = void 0;
-const express_validator_1 = require("express-validator");
-const core_1 = require("@authup/core");
+exports.RealmRequestValidator = void 0;
+const core_kit_1 = require("@authup/core-kit");
 const http_1 = require("@ebec/http");
-const constants_1 = require("../../../request/constants");
-const validation_1 = require("../../../validation");
-async function runRealmValidation(req, operation) {
-    const result = (0, validation_1.initExpressValidationResult)();
-    const nameChain = (0, express_validator_1.check)('name')
-        .exists()
-        .notEmpty()
-        .isString()
-        .isLength({ min: 3, max: 128 })
-        .custom((value) => {
-        const isValid = (0, core_1.isValidRealmName)(value);
-        if (!isValid) {
-            throw new http_1.BadRequestError('Only the characters [a-zA-Z0-9-_]+ are allowed.');
-        }
-        return isValid;
-    });
-    if (operation === constants_1.RequestHandlerOperation.UPDATE)
-        nameChain.optional({ nullable: true });
-    await nameChain.run(req);
-    await (0, express_validator_1.check)('description')
-        .exists()
-        .notEmpty()
-        .isString()
-        .isLength({ min: 5, max: 4096 })
-        .optional({ nullable: true })
-        .run(req);
-    // ----------------------------------------------
-    const validation = (0, express_validator_1.validationResult)(req);
-    if (!validation.isEmpty()) {
-        throw new validation_1.RequestValidationError(validation);
+const adapter_validator_1 = require("@validup/adapter-validator");
+const validup_1 = require("validup");
+const request_1 = require("../../../request");
+class RealmRequestValidator extends validup_1.Container {
+    constructor(options = {}) {
+        super(options);
+        this.mountAll();
+    }
+    mountAll() {
+        const nameChain = (optional) => (0, adapter_validator_1.createValidator)((chain) => {
+            const output = chain
+                .exists()
+                .notEmpty()
+                .isString()
+                .isLength({
+                min: 3,
+                max: 128,
+            })
+                .custom((value) => {
+                const isValid = (0, core_kit_1.isRealmNameValid)(value);
+                if (!isValid) {
+                    throw new http_1.BadRequestError('Only the characters [A-Za-z0-9-_]+ are allowed.');
+                }
+                return isValid;
+            });
+            if (optional) {
+                return output.optional({ values: 'null' });
+            }
+            return output;
+        });
+        this.mount('name', { group: request_1.RequestHandlerOperation.CREATE }, nameChain());
+        this.mount('name', { group: request_1.RequestHandlerOperation.UPDATE }, nameChain(true));
+        this.mount('display_name', (0, adapter_validator_1.createValidator)((chain) => chain
+            .isString()
+            .isLength({ min: 3, max: 256 })
+            .optional({ values: 'null' })));
+        this.mount('description', (0, adapter_validator_1.createValidator)((chain) => chain
+            .optional({ nullable: true })
+            .notEmpty()
+            .isString()
+            .isLength({ min: 5, max: 4096 })));
     }
-    result.data = (0, validation_1.matchedValidationData)(req, { includeOptionals: true });
-    // ----------------------------------------------
-    return result;
 }
-exports.runRealmValidation = runRealmValidation;
+exports.RealmRequestValidator = RealmRequestValidator;
 //# sourceMappingURL=validation.js.map

package/dist/http/controllers/realm/utils/validation.js.map

@@ -1 +1 @@
-{"version":3,"file":"validation.js","sourceRoot":"","sources":["../../../../../src/http/controllers/realm/utils/validation.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;;AAEH,yDAA4D;AAC5D,uCAAgD;AAChD,qCAA6C;AAG7C,0DAAqE;AAErE,oDAG6B;AAEtB,KAAK,UAAU,kBAAkB,CACpC,GAAY,EACZ,SAAoF;IAEpF,MAAM,MAAM,GAA0C,IAAA,wCAA2B,GAAE,CAAC;IAEpF,MAAM,SAAS,GAAG,IAAA,yBAAK,EAAC,MAAM,CAAC;SAC1B,MAAM,EAAE;SACR,QAAQ,EAAE;SACV,QAAQ,EAAE;SACV,QAAQ,CAAC,EAAE,GAAG,EAAE,CAAC,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC;SAC9B,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE;QACd,MAAM,OAAO,GAAG,IAAA,uBAAgB,EAAC,KAAK,CAAC,CAAC;QACxC,IAAI,CAAC,OAAO,EAAE,CAAC;YACX,MAAM,IAAI,sBAAe,CAAC,iDAAiD,CAAC,CAAC;QACjF,CAAC;QAED,OAAO,OAAO,CAAC;IACnB,CAAC,CAAC,CAAC;IAEP,IAAI,SAAS,KAAK,mCAAuB,CAAC,MAAM;QAAE,SAAS,CAAC,QAAQ,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;IAEzF,MAAM,SAAS,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IAEzB,MAAM,IAAA,yBAAK,EAAC,aAAa,CAAC;SACrB,MAAM,EAAE;SACR,QAAQ,EAAE;SACV,QAAQ,EAAE;SACV,QAAQ,CAAC,EAAE,GAAG,EAAE,CAAC,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC;SAC/B,QAAQ,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;SAC5B,GAAG,CAAC,GAAG,CAAC,CAAC;IAEd,iDAAiD;IAEjD,MAAM,UAAU,GAAG,IAAA,oCAAgB,EAAC,GAAG,CAAC,CAAC;IACzC,IAAI,CAAC,UAAU,CAAC,OAAO,EAAE,EAAE,CAAC;QACxB,MAAM,IAAI,mCAAsB,CAAC,UAAU,CAAC,CAAC;IACjD,CAAC;IAED,MAAM,CAAC,IAAI,GAAG,IAAA,kCAAqB,EAAC,GAAG,EAAE,EAAE,gBAAgB,EAAE,IAAI,EAAE,CAAC,CAAC;IAErE,iDAAiD;IAEjD,OAAO,MAAM,CAAC;AAClB,CAAC;AA5CD,gDA4CC"}
+{"version":3,"file":"validation.js","sourceRoot":"","sources":["../../../../../src/http/controllers/realm/utils/validation.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;;AAEH,+CAAoD;AACpD,qCAA6C;AAC7C,kEAA6D;AAE7D,qCAAoC;AAEpC,8CAA2D;AAE3D,MAAa,qBAAsB,SAAQ,mBAE1C;IACG,YAAY,UAAyC,EAAE;QACnD,KAAK,CAAC,OAAO,CAAC,CAAC;QAEf,IAAI,CAAC,QAAQ,EAAE,CAAC;IACpB,CAAC;IAED,QAAQ;QACJ,MAAM,SAAS,GAAG,CAAC,QAAkB,EAAE,EAAE,CAAC,IAAA,mCAAe,EAAC,CAAC,KAAK,EAAE,EAAE;YAChE,MAAM,MAAM,GAAG,KAAK;iBACf,MAAM,EAAE;iBACR,QAAQ,EAAE;iBACV,QAAQ,EAAE;iBACV,QAAQ,CAAC;gBACN,GAAG,EAAE,CAAC;gBACN,GAAG,EAAE,GAAG;aACX,CAAC;iBACD,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE;gBACd,MAAM,OAAO,GAAG,IAAA,2BAAgB,EAAC,KAAK,CAAC,CAAC;gBACxC,IAAI,CAAC,OAAO,EAAE,CAAC;oBACX,MAAM,IAAI,sBAAe,CAAC,iDAAiD,CAAC,CAAC;gBACjF,CAAC;gBAED,OAAO,OAAO,CAAC;YACnB,CAAC,CAAC,CAAC;YAEP,IAAI,QAAQ,EAAE,CAAC;gBACX,OAAO,MAAM,CAAC,QAAQ,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;YAC/C,CAAC;YAED,OAAO,MAAM,CAAC;QAClB,CAAC,CAAC,CAAC;QAEH,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,EAAE,KAAK,EAAE,iCAAuB,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,CAAC,CAAC;QAC3E,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,EAAE,KAAK,EAAE,iCAAuB,CAAC,MAAM,EAAE,EAAE,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC;QAE/E,IAAI,CAAC,KAAK,CAAC,cAAc,EAAE,IAAA,mCAAe,EAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK;aACtD,QAAQ,EAAE;aACV,QAAQ,CAAC,EAAE,GAAG,EAAE,CAAC,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC;aAC9B,QAAQ,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,CAAC;QAEpC,IAAI,CAAC,KAAK,CAAC,aAAa,EAAE,IAAA,mCAAe,EAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK;aACrD,QAAQ,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;aAC5B,QAAQ,EAAE;aACV,QAAQ,EAAE;aACV,QAAQ,CAAC,EAAE,GAAG,EAAE,CAAC,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;IAC3C,CAAC;CACJ;AAjDD,sDAiDC"}

package/dist/http/controllers/register.d.ts

@@ -0,0 +1,3 @@
+import type { Router } from 'routup';
+export declare function registerControllers(router: Router): void;
+//# sourceMappingURL=register.d.ts.map

package/dist/http/controllers/register.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"register.d.ts","sourceRoot":"","sources":["../../../src/http/controllers/register.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAgCrC,wBAAgB,mBAAmB,CAC/B,MAAM,EAAE,MAAM,QAmDjB"}

package/dist/http/controllers/register.js

@@ -0,0 +1,80 @@
+"use strict";
+/*
+ * Copyright (c) 2022.
+ * Author Peter Placzek (tada5hi)
+ * For the full copyright and license information,
+ * view the LICENSE file that was distributed with this source code.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.registerControllers = registerControllers;
+const decorators_1 = require("@routup/decorators");
+const body_1 = require("@routup/basic/body");
+const cookie_1 = require("@routup/basic/cookie");
+const query_1 = require("@routup/basic/query");
+const client_scope_1 = require("./client-scope");
+const policy_1 = require("./policy");
+const robot_1 = require("./robot");
+const identity_provide_role_1 = require("./identity-provide-role");
+const identity_provider_1 = require("./identity-provider");
+const permission_1 = require("./permission");
+const realm_1 = require("./realm");
+const role_1 = require("./role");
+const role_permission_1 = require("./role-permission");
+const scope_1 = require("./scope");
+const user_1 = require("./user");
+const user_role_1 = require("./user-role");
+const root_1 = require("./root");
+const robot_permission_1 = require("./robot-permission");
+const robot_role_1 = require("./robot-role");
+const user_permission_1 = require("./user-permission");
+const role_attribute_1 = require("./role-attribute");
+const user_attribute_1 = require("./user-attribute");
+const client_1 = require("./client");
+function registerControllers(router) {
+    (0, identity_provider_1.registerIdentityProviderController)(router);
+    router.use((0, decorators_1.decorators)({
+        controllers: [
+            root_1.RootController,
+            root_1.AuthTokenController,
+            client_1.ClientController,
+            client_scope_1.ClientScopeController,
+            identity_provide_role_1.OAuth2ProviderRoleController,
+            identity_provider_1.IdentityProviderController,
+            permission_1.PermissionController,
+            policy_1.PolicyController,
+            robot_1.RobotController,
+            robot_permission_1.RobotPermissionController,
+            robot_role_1.RobotRoleController,
+            realm_1.RealmController,
+            role_1.RoleController,
+            role_attribute_1.RoleAttributeController,
+            role_permission_1.RolePermissionController,
+            scope_1.ScopeController,
+            user_1.UserController,
+            user_attribute_1.UserAttributeController,
+            user_permission_1.UserPermissionController,
+            user_role_1.UserRoleController,
+        ],
+        parameter: {
+            body: (context, name) => {
+                if (name) {
+                    return (0, body_1.useRequestBody)(context.request, name);
+                }
+                return (0, body_1.useRequestBody)(context.request);
+            },
+            cookie: (context, name) => {
+                if (name) {
+                    return (0, cookie_1.useRequestCookie)(context.request, name);
+                }
+                return (0, cookie_1.useRequestCookies)(context.request);
+            },
+            query: (context, name) => {
+                if (name) {
+                    return (0, query_1.useRequestQuery)(context.request, name);
+                }
+                return (0, query_1.useRequestQuery)(context.request);
+            },
+        },
+    }));
+}
+//# sourceMappingURL=register.js.map

package/dist/http/controllers/register.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"register.js","sourceRoot":"","sources":["../../../src/http/controllers/register.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;AAkCH,kDAoDC;AAnFD,mDAAgD;AAChD,6CAE4B;AAC5B,iDAG8B;AAC9B,+CAE6B;AAC7B,iDAAuD;AACvD,qCAA4C;AAC5C,mCAA0C;AAC1C,mEAAuE;AACvE,2DAAqG;AACrG,6CAAoD;AACpD,mCAA0C;AAC1C,iCAAwC;AACxC,uDAA6D;AAC7D,mCAA0C;AAC1C,iCAAwC;AACxC,2CAAiD;AACjD,iCAA6D;AAC7D,yDAA+D;AAC/D,6CAAmD;AACnD,uDAA6D;AAC7D,qDAA2D;AAC3D,qDAA2D;AAC3D,qCAA4C;AAE5C,SAAgB,mBAAmB,CAC/B,MAAc;IAEd,IAAA,sDAAkC,EAAC,MAAM,CAAC,CAAC;IAE3C,MAAM,CAAC,GAAG,CAAC,IAAA,uBAAU,EAAC;QAClB,WAAW,EAAE;YACT,qBAAc;YACd,0BAAmB;YACnB,yBAAgB;YAChB,oCAAqB;YACrB,oDAA4B;YAC5B,8CAA0B;YAC1B,iCAAoB;YACpB,yBAAgB;YAChB,uBAAe;YACf,4CAAyB;YACzB,gCAAmB;YACnB,uBAAe;YACf,qBAAc;YACd,wCAAuB;YACvB,0CAAwB;YACxB,uBAAe;YACf,qBAAc;YACd,wCAAuB;YACvB,0CAAwB;YACxB,8BAAkB;SACrB;QACD,SAAS,EAAE;YACP,IAAI,EAAE,CAAC,OAAO,EAAE,IAAI,EAAE,EAAE;gBACpB,IAAI,IAAI,EAAE,CAAC;oBACP,OAAO,IAAA,qBAAc,EAAC,OAAO,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;gBACjD,CAAC;gBAED,OAAO,IAAA,qBAAc,EAAC,OAAO,CAAC,OAAO,CAAC,CAAC;YAC3C,CAAC;YACD,MAAM,EAAE,CAAC,OAAO,EAAE,IAAI,EAAE,EAAE;gBACtB,IAAI,IAAI,EAAE,CAAC;oBACP,OAAO,IAAA,yBAAgB,EAAC,OAAO,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;gBACnD,CAAC;gBAED,OAAO,IAAA,0BAAiB,EAAC,OAAO,CAAC,OAAO,CAAC,CAAC;YAC9C,CAAC;YACD,KAAK,EAAE,CAAC,OAAO,EAAE,IAAI,EAAE,EAAE;gBACrB,IAAI,IAAI,EAAE,CAAC;oBACP,OAAO,IAAA,uBAAe,EAAC,OAAO,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;gBAClD,CAAC;gBAED,OAAO,IAAA,uBAAe,EAAC,OAAO,CAAC,OAAO,CAAC,CAAC;YAC5C,CAAC;SACJ;KACJ,CAAC,CAAC,CAAC;AACR,CAAC"}

package/dist/http/controllers/robot/handlers/delete.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"delete.d.ts","sourceRoot":"","sources":["../../../../../src/http/controllers/robot/handlers/delete.ts"],"names":[],"mappings":"AAaA,OAAO,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,QAAQ,CAAC;AAMhD,wBAAsB,uBAAuB,CAAC,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,QAAQ,GAAI,OAAO,CAAC,GAAG,CAAC,CAgDxF"}
+{"version":3,"file":"delete.d.ts","sourceRoot":"","sources":["../../../../../src/http/controllers/robot/handlers/delete.ts"],"names":[],"mappings":"AAYA,OAAO,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,QAAQ,CAAC;AAOhD,wBAAsB,uBAAuB,CAAC,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,QAAQ,GAAI,OAAO,CAAC,GAAG,CAAC,CAmDxF"}

package/dist/http/controllers/robot/handlers/delete.js

@@ -6,34 +6,39 @@
  * view the LICENSE file that was distributed with this source code.
  */
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.deleteRobotRouteHandler = void 0;
+exports.deleteRobotRouteHandler = deleteRobotRouteHandler;
 const http_1 = require("@ebec/http");
-const core_1 = require("@authup/core");
+const core_kit_1 = require("@authup/core-kit");
 const routup_1 = require("routup");
 const typeorm_extension_1 = require("typeorm-extension");
+const config_1 = require("../../../../config");
 const domains_1 = require("../../../../domains");
-const utils_1 = require("../../../utils");
+const request_1 = require("../../../request");
 async function deleteRobotRouteHandler(req, res) {
-    const id = (0, routup_1.useRequestParam)(req, 'id');
+    const id = (0, request_1.useRequestParamID)(req);
     const dataSource = await (0, typeorm_extension_1.useDataSource)();
     const repository = dataSource.getRepository(domains_1.RobotEntity);
     const entity = await repository.findOneBy({ id });
     if (!entity) {
         throw new http_1.NotFoundError();
     }
-    const ability = (0, utils_1.useRequestEnv)(req, 'ability');
-    if (!ability.has(core_1.PermissionName.ROBOT_DROP)) {
-        if (!entity.user_id) {
-            throw new http_1.ForbiddenError();
-        }
-        if (entity.user_id &&
-            entity.user_id !== (0, utils_1.useRequestEnv)(req, 'userId')) {
-            throw new http_1.ForbiddenError();
-        }
+    const permissionChecker = (0, request_1.useRequestEnv)(req, 'permissionChecker');
+    const identity = (0, request_1.useRequestIdentity)(req);
+    if (!entity.user_id ||
+        !identity ||
+        identity.type !== 'user' ||
+        entity.user_id !== identity.id) {
+        await permissionChecker.check({
+            name: core_kit_1.PermissionName.ROBOT_DELETE,
+            data: {
+                attributes: entity,
+            },
+        });
     }
-    if (entity.name === core_1.ROBOT_SYSTEM_NAME) {
+    const config = (0, config_1.useConfig)();
+    if (entity.name.toLowerCase() === config.robotAdminName.toLowerCase()) {
         const realm = await (0, domains_1.resolveRealm)(entity.realm_id);
-        if (realm.name === core_1.REALM_MASTER_NAME) {
+        if (realm.name === core_kit_1.REALM_MASTER_NAME) {
             throw new http_1.BadRequestError('The system robot can not be deleted.');
         }
     }
@@ -47,5 +52,4 @@ async function deleteRobotRouteHandler(req, res) {
     // ----------------------------------------------
     return (0, routup_1.sendAccepted)(res, entity);
 }
-exports.deleteRobotRouteHandler = deleteRobotRouteHandler;
 //# sourceMappingURL=delete.js.map

package/dist/http/controllers/robot/handlers/delete.js.map

@@ -1 +1 @@
-{"version":3,"file":"delete.js","sourceRoot":"","sources":["../../../../../src/http/controllers/robot/handlers/delete.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;;AAEH,qCAA4E;AAC5E,uCAIsB;AAEtB,mCAAuD;AACvD,yDAAkD;AAClD,iDAAiG;AACjG,0CAA+C;AAExC,KAAK,UAAU,uBAAuB,CAAC,GAAY,EAAE,GAAa;IACrE,MAAM,EAAE,GAAG,IAAA,wBAAe,EAAC,GAAG,EAAE,IAAI,CAAC,CAAC;IAEtC,MAAM,UAAU,GAAG,MAAM,IAAA,iCAAa,GAAE,CAAC;IACzC,MAAM,UAAU,GAAG,UAAU,CAAC,aAAa,CAAC,qBAAW,CAAC,CAAC;IACzD,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,SAAS,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;IAElD,IAAI,CAAC,MAAM,EAAE,CAAC;QACV,MAAM,IAAI,oBAAa,EAAE,CAAC;IAC9B,CAAC;IAED,MAAM,OAAO,GAAG,IAAA,qBAAa,EAAC,GAAG,EAAE,SAAS,CAAC,CAAC;IAC9C,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,qBAAc,CAAC,UAAU,CAAC,EAAE,CAAC;QAC1C,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YAClB,MAAM,IAAI,qBAAc,EAAE,CAAC;QAC/B,CAAC;QAED,IACI,MAAM,CAAC,OAAO;YACd,MAAM,CAAC,OAAO,KAAK,IAAA,qBAAa,EAAC,GAAG,EAAE,QAAQ,CAAC,EACjD,CAAC;YACC,MAAM,IAAI,qBAAc,EAAE,CAAC;QAC/B,CAAC;IACL,CAAC;IAED,IAAI,MAAM,CAAC,IAAI,KAAK,wBAAiB,EAAE,CAAC;QACpC,MAAM,KAAK,GAAG,MAAM,IAAA,sBAAY,EAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QAClD,IAAI,KAAK,CAAC,IAAI,KAAK,wBAAiB,EAAE,CAAC;YACnC,MAAM,IAAI,sBAAe,CAAC,sCAAsC,CAAC,CAAC;QACtE,CAAC;IACL,CAAC;IAED,iDAAiD;IAEjD,MAAM,EAAE,EAAE,EAAE,QAAQ,EAAE,GAAG,MAAM,CAAC;IAEhC,MAAM,UAAU,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAEhC,MAAM,CAAC,EAAE,GAAG,QAAQ,CAAC;IAErB,iDAAiD;IAEjD,yDAAyD;IACzD,MAAM,IAAA,yCAA+B,EAAC,MAAM,CAAC,CAAC;IAE9C,iDAAiD;IAEjD,OAAO,IAAA,qBAAY,EAAC,GAAG,EAAE,MAAM,CAAC,CAAC;AACrC,CAAC;AAhDD,0DAgDC"}
+{"version":3,"file":"delete.js","sourceRoot":"","sources":["../../../../../src/http/controllers/robot/handlers/delete.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;AAcH,0DAmDC;AA/DD,qCAA4D;AAC5D,+CAG0B;AAE1B,mCAAsC;AACtC,yDAAkD;AAClD,+CAA+C;AAC/C,iDAAiG;AACjG,8CAAwF;AAEjF,KAAK,UAAU,uBAAuB,CAAC,GAAY,EAAE,GAAa;IACrE,MAAM,EAAE,GAAG,IAAA,2BAAiB,EAAC,GAAG,CAAC,CAAC;IAElC,MAAM,UAAU,GAAG,MAAM,IAAA,iCAAa,GAAE,CAAC;IACzC,MAAM,UAAU,GAAG,UAAU,CAAC,aAAa,CAAC,qBAAW,CAAC,CAAC;IACzD,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,SAAS,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;IAElD,IAAI,CAAC,MAAM,EAAE,CAAC;QACV,MAAM,IAAI,oBAAa,EAAE,CAAC;IAC9B,CAAC;IAED,MAAM,iBAAiB,GAAG,IAAA,uBAAa,EAAC,GAAG,EAAE,mBAAmB,CAAC,CAAC;IAClE,MAAM,QAAQ,GAAG,IAAA,4BAAkB,EAAC,GAAG,CAAC,CAAC;IACzC,IACI,CAAC,MAAM,CAAC,OAAO;QACf,CAAC,QAAQ;QACT,QAAQ,CAAC,IAAI,KAAK,MAAM;QACxB,MAAM,CAAC,OAAO,KAAK,QAAQ,CAAC,EAAE,EAChC,CAAC;QACC,MAAM,iBAAiB,CAAC,KAAK,CAAC;YAC1B,IAAI,EAAE,yBAAc,CAAC,YAAY;YACjC,IAAI,EAAE;gBACF,UAAU,EAAE,MAAM;aACrB;SACJ,CAAC,CAAC;IACP,CAAC;IAED,MAAM,MAAM,GAAG,IAAA,kBAAS,GAAE,CAAC;IAC3B,IAAI,MAAM,CAAC,IAAI,CAAC,WAAW,EAAE,KAAK,MAAM,CAAC,cAAc,CAAC,WAAW,EAAE,EAAE,CAAC;QACpE,MAAM,KAAK,GAAG,MAAM,IAAA,sBAAY,EAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QAClD,IAAI,KAAK,CAAC,IAAI,KAAK,4BAAiB,EAAE,CAAC;YACnC,MAAM,IAAI,sBAAe,CAAC,sCAAsC,CAAC,CAAC;QACtE,CAAC;IACL,CAAC;IAED,iDAAiD;IAEjD,MAAM,EAAE,EAAE,EAAE,QAAQ,EAAE,GAAG,MAAM,CAAC;IAEhC,MAAM,UAAU,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAEhC,MAAM,CAAC,EAAE,GAAG,QAAQ,CAAC;IAErB,iDAAiD;IAEjD,yDAAyD;IACzD,MAAM,IAAA,yCAA+B,EAAC,MAAM,CAAC,CAAC;IAE9C,iDAAiD;IAEjD,OAAO,IAAA,qBAAY,EAAC,GAAG,EAAE,MAAM,CAAC,CAAC;AACrC,CAAC"}

package/dist/http/controllers/robot/handlers/index.d.ts

@@ -1,6 +1,5 @@
 export * from './integrity';
-export * from './create';
 export * from './delete';
 export * from './read';
-export * from './update';
+export * from './write';
 //# sourceMappingURL=index.d.ts.map

package/dist/http/controllers/robot/handlers/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../src/http/controllers/robot/handlers/index.ts"],"names":[],"mappings":"AAOA,cAAc,aAAa,CAAC;AAC5B,cAAc,UAAU,CAAC;AACzB,cAAc,UAAU,CAAC;AACzB,cAAc,QAAQ,CAAC;AACvB,cAAc,UAAU,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../src/http/controllers/robot/handlers/index.ts"],"names":[],"mappings":"AAOA,cAAc,aAAa,CAAC;AAC5B,cAAc,UAAU,CAAC;AACzB,cAAc,QAAQ,CAAC;AACvB,cAAc,SAAS,CAAC"}

package/dist/http/controllers/robot/handlers/index.js

@@ -21,8 +21,7 @@ var __exportStar = (this && this.__exportStar) || function(m, exports) {
 };
 Object.defineProperty(exports, "__esModule", { value: true });
 __exportStar(require("./integrity"), exports);
-__exportStar(require("./create"), exports);
 __exportStar(require("./delete"), exports);
 __exportStar(require("./read"), exports);
-__exportStar(require("./update"), exports);
+__exportStar(require("./write"), exports);
 //# sourceMappingURL=index.js.map

package/dist/http/controllers/robot/handlers/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../../src/http/controllers/robot/handlers/index.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;;;;;;;;;;;;;;;AAEH,8CAA4B;AAC5B,2CAAyB;AACzB,2CAAyB;AACzB,yCAAuB;AACvB,2CAAyB"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../../src/http/controllers/robot/handlers/index.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;;;;;;;;;;;;;;;AAEH,8CAA4B;AAC5B,2CAAyB;AACzB,yCAAuB;AACvB,0CAAwB"}

package/dist/http/controllers/robot/handlers/integrity.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"integrity.d.ts","sourceRoot":"","sources":["../../../../../src/http/controllers/robot/handlers/integrity.ts"],"names":[],"mappings":"AAeA,OAAO,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,QAAQ,CAAC;AAUhD,wBAAsB,gCAAgC,CAAC,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,QAAQ,GAAI,OAAO,CAAC,GAAG,CAAC,CAuDjG"}
+{"version":3,"file":"integrity.d.ts","sourceRoot":"","sources":["../../../../../src/http/controllers/robot/handlers/integrity.ts"],"names":[],"mappings":"AAgBA,OAAO,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,QAAQ,CAAC;AAYhD,wBAAsB,gCAAgC,CAAC,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,QAAQ,GAAI,OAAO,CAAC,GAAG,CAAC,CA2EjG"}

package/dist/http/controllers/robot/handlers/integrity.js

@@ -6,20 +6,24 @@
  * view the LICENSE file that was distributed with this source code.
  */
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.handleRobotIntegrityRouteHandler = void 0;
-const core_1 = require("@authup/core");
+exports.handleRobotIntegrityRouteHandler = handleRobotIntegrityRouteHandler;
+const core_kit_1 = require("@authup/core-kit");
+const kit_1 = require("@authup/kit");
 const http_1 = require("@ebec/http");
-const vault_1 = require("@hapic/vault");
 const routup_1 = require("routup");
 const typeorm_extension_1 = require("typeorm-extension");
+const server_kit_1 = require("@authup/server-kit");
 const domains_1 = require("../../../../domains");
+const request_1 = require("../../../request");
 async function handleRobotIntegrityRouteHandler(req, res) {
-    const id = (0, routup_1.useRequestParam)(req, 'id');
+    const id = (0, request_1.useRequestParamID)(req, {
+        isUUID: false,
+    });
     const dataSource = await (0, typeorm_extension_1.useDataSource)();
     const repository = new domains_1.RobotRepository(dataSource);
     const query = repository.createQueryBuilder('robot');
     let realm;
-    if ((0, core_1.isUUID)(id)) {
+    if ((0, kit_1.isUUID)(id)) {
         query.where('robot.id = :id', { id });
     }
     else {
@@ -30,30 +34,47 @@ async function handleRobotIntegrityRouteHandler(req, res) {
     if (!realm) {
         query.leftJoinAndSelect('robot.realm', 'realm');
     }
-    const entity = await query.getOne();
+    const entity = await query
+        .addSelect('robot.secret')
+        .getOne();
     if (!entity) {
         throw new http_1.NotFoundError();
     }
     if (entity.realm) {
         realm = entity.realm;
     }
-    if ((0, vault_1.hasClient)() &&
-        realm &&
-        realm.name === core_1.REALM_MASTER_NAME) {
+    if (!(0, server_kit_1.isVaultClientUsable)() ||
+        !realm ||
+        realm.name !== core_kit_1.REALM_MASTER_NAME) {
+        return (0, routup_1.sendAccepted)(res);
+    }
+    let refreshCredentials = false;
+    if (entity.secret) {
         const credentials = await (0, domains_1.findRobotCredentialsInVault)({
             name: entity.name,
         });
-        if (!credentials) {
-            const secret = (0, core_1.createNanoID)(64);
-            entity.secret = await repository.hashSecret(secret);
-            await repository.save(entity);
-            await (0, domains_1.saveRobotCredentialsToVault)({
-                ...entity,
-                secret,
-            });
+        if (credentials) {
+            const secretHashedEqual = await repository.verifySecret(credentials.secret, entity.secret);
+            if (!secretHashedEqual) {
+                refreshCredentials = true;
+            }
         }
+        else {
+            refreshCredentials = true;
+        }
+    }
+    else {
+        refreshCredentials = true;
+    }
+    if (refreshCredentials) {
+        const secret = (0, kit_1.createNanoID)(64);
+        entity.secret = await repository.hashSecret(secret);
+        await repository.save(entity);
+        await (0, domains_1.saveRobotCredentialsToVault)({
+            ...entity,
+            secret,
+        });
     }
-    (0, routup_1.sendAccepted)(res);
+    return (0, routup_1.sendAccepted)(res);
 }
-exports.handleRobotIntegrityRouteHandler = handleRobotIntegrityRouteHandler;
 //# sourceMappingURL=integrity.js.map

package/dist/http/controllers/robot/handlers/integrity.js.map

@@ -1 +1 @@
-{"version":3,"file":"integrity.js","sourceRoot":"","sources":["../../../../../src/http/controllers/robot/handlers/integrity.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;;AAGH,uCAIsB;AACtB,qCAA2C;AAC3C,wCAAyC;AAEzC,mCAAuD;AACvD,yDAAkD;AAClD,iDAK6B;AAEtB,KAAK,UAAU,gCAAgC,CAAC,GAAY,EAAE,GAAa;IAC9E,MAAM,EAAE,GAAG,IAAA,wBAAe,EAAC,GAAG,EAAE,IAAI,CAAC,CAAC;IAEtC,MAAM,UAAU,GAAG,MAAM,IAAA,iCAAa,GAAE,CAAC;IACzC,MAAM,UAAU,GAAG,IAAI,yBAAe,CAAC,UAAU,CAAC,CAAC;IACnD,MAAM,KAAK,GAAG,UAAU,CAAC,kBAAkB,CAAC,OAAO,CAAC,CAAC;IAErD,IAAI,KAAyB,CAAC;IAE9B,IAAI,IAAA,aAAM,EAAC,EAAE,CAAC,EAAE,CAAC;QACb,KAAK,CAAC,KAAK,CAAC,gBAAgB,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC;IAC1C,CAAC;SAAM,CAAC;QACJ,KAAK,CAAC,KAAK,CAAC,uBAAuB,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC;QAEnD,KAAK,GAAG,MAAM,IAAA,sBAAY,EAAC,IAAA,wBAAe,EAAC,GAAG,EAAE,SAAS,CAAC,EAAE,IAAI,CAAC,CAAC;QAClE,KAAK,CAAC,QAAQ,CAAC,2BAA2B,EAAE,EAAE,OAAO,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC;IACvE,CAAC;IAED,IAAI,CAAC,KAAK,EAAE,CAAC;QACT,KAAK,CAAC,iBAAiB,CAAC,aAAa,EAAE,OAAO,CAAC,CAAC;IACpD,CAAC;IAED,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,MAAM,EAAE,CAAC;IAEpC,IAAI,CAAC,MAAM,EAAE,CAAC;QACV,MAAM,IAAI,oBAAa,EAAE,CAAC;IAC9B,CAAC;IAED,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC;QACf,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC;IACzB,CAAC;IAED,IACI,IAAA,iBAAS,GAAE;QACX,KAAK;QACL,KAAK,CAAC,IAAI,KAAK,wBAAiB,EAClC,CAAC;QACC,MAAM,WAAW,GAAG,MAAM,IAAA,qCAA2B,EAAC;YAClD,IAAI,EAAE,MAAM,CAAC,IAAI;SACpB,CAAC,CAAC;QAEH,IAAI,CAAC,WAAW,EAAE,CAAC;YACf,MAAM,MAAM,GAAG,IAAA,mBAAY,EAAC,EAAE,CAAC,CAAC;YAEhC,MAAM,CAAC,MAAM,GAAG,MAAM,UAAU,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;YACpD,MAAM,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YAE9B,MAAM,IAAA,qCAA2B,EAAC;gBAC9B,GAAG,MAAM;gBACT,MAAM;aACT,CAAC,CAAC;QACP,CAAC;IACL,CAAC;IAED,IAAA,qBAAY,EAAC,GAAG,CAAC,CAAC;AACtB,CAAC;AAvDD,4EAuDC"}
+{"version":3,"file":"integrity.js","sourceRoot":"","sources":["../../../../../src/http/controllers/robot/handlers/integrity.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;AAuBH,4EA2EC;AA/FD,+CAE0B;AAC1B,qCAGqB;AACrB,qCAA2C;AAE3C,mCAAuD;AACvD,yDAAkD;AAClD,mDAAyD;AACzD,iDAK6B;AAC7B,8CAAqD;AAE9C,KAAK,UAAU,gCAAgC,CAAC,GAAY,EAAE,GAAa;IAC9E,MAAM,EAAE,GAAG,IAAA,2BAAiB,EAAC,GAAG,EAAE;QAC9B,MAAM,EAAE,KAAK;KAChB,CAAC,CAAC;IAEH,MAAM,UAAU,GAAG,MAAM,IAAA,iCAAa,GAAE,CAAC;IACzC,MAAM,UAAU,GAAG,IAAI,yBAAe,CAAC,UAAU,CAAC,CAAC;IACnD,MAAM,KAAK,GAAG,UAAU,CAAC,kBAAkB,CAAC,OAAO,CAAC,CAAC;IAErD,IAAI,KAAyB,CAAC;IAE9B,IAAI,IAAA,YAAM,EAAC,EAAE,CAAC,EAAE,CAAC;QACb,KAAK,CAAC,KAAK,CAAC,gBAAgB,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC;IAC1C,CAAC;SAAM,CAAC;QACJ,KAAK,CAAC,KAAK,CAAC,uBAAuB,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC;QAEnD,KAAK,GAAG,MAAM,IAAA,sBAAY,EAAC,IAAA,wBAAe,EAAC,GAAG,EAAE,SAAS,CAAC,EAAE,IAAI,CAAC,CAAC;QAClE,KAAK,CAAC,QAAQ,CAAC,2BAA2B,EAAE,EAAE,OAAO,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC;IACvE,CAAC;IAED,IAAI,CAAC,KAAK,EAAE,CAAC;QACT,KAAK,CAAC,iBAAiB,CAAC,aAAa,EAAE,OAAO,CAAC,CAAC;IACpD,CAAC;IAED,MAAM,MAAM,GAAG,MAAM,KAAK;SACrB,SAAS,CAAC,cAAc,CAAC;SACzB,MAAM,EAAE,CAAC;IAEd,IAAI,CAAC,MAAM,EAAE,CAAC;QACV,MAAM,IAAI,oBAAa,EAAE,CAAC;IAC9B,CAAC;IAED,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC;QACf,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC;IACzB,CAAC;IAED,IACI,CAAC,IAAA,gCAAmB,GAAE;QACtB,CAAC,KAAK;QACN,KAAK,CAAC,IAAI,KAAK,4BAAiB,EAClC,CAAC;QACC,OAAO,IAAA,qBAAY,EAAC,GAAG,CAAC,CAAC;IAC7B,CAAC;IAED,IAAI,kBAAkB,GAAa,KAAK,CAAC;IACzC,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC;QAChB,MAAM,WAAW,GAAG,MAAM,IAAA,qCAA2B,EAAC;YAClD,IAAI,EAAE,MAAM,CAAC,IAAI;SACpB,CAAC,CAAC;QAEH,IAAI,WAAW,EAAE,CAAC;YACd,MAAM,iBAAiB,GAAG,MAAM,UAAU,CAAC,YAAY,CAAC,WAAW,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC;YAC3F,IAAI,CAAC,iBAAiB,EAAE,CAAC;gBACrB,kBAAkB,GAAG,IAAI,CAAC;YAC9B,CAAC;QACL,CAAC;aAAM,CAAC;YACJ,kBAAkB,GAAG,IAAI,CAAC;QAC9B,CAAC;IACL,CAAC;SAAM,CAAC;QACJ,kBAAkB,GAAG,IAAI,CAAC;IAC9B,CAAC;IAED,IAAI,kBAAkB,EAAE,CAAC;QACrB,MAAM,MAAM,GAAG,IAAA,kBAAY,EAAC,EAAE,CAAC,CAAC;QAEhC,MAAM,CAAC,MAAM,GAAG,MAAM,UAAU,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;QACpD,MAAM,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAE9B,MAAM,IAAA,qCAA2B,EAAC;YAC9B,GAAG,MAAM;YACT,MAAM;SACT,CAAC,CAAC;IACP,CAAC;IAED,OAAO,IAAA,qBAAY,EAAC,GAAG,CAAC,CAAC;AAC7B,CAAC"}

package/dist/http/controllers/robot/handlers/read.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"read.d.ts","sourceRoot":"","sources":["../../../../../src/http/controllers/robot/handlers/read.ts"],"names":[],"mappings":"AAQA,OAAO,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,QAAQ,CAAC;AAehD,wBAAsB,wBAAwB,CAAC,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,QAAQ,GAAI,OAAO,CAAC,GAAG,CAAC,CAgEzF;AAED,wBAAsB,uBAAuB,CAAC,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,QAAQ,GAAI,OAAO,CAAC,GAAG,CAAC,CA4ExF"}
+{"version":3,"file":"read.d.ts","sourceRoot":"","sources":["../../../../../src/http/controllers/robot/handlers/read.ts"],"names":[],"mappings":"AAQA,OAAO,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,QAAQ,CAAC;AAkBhD,wBAAsB,wBAAwB,CAAC,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,QAAQ,GAAI,OAAO,CAAC,GAAG,CAAC,CAoFzF;AAED,wBAAsB,uBAAuB,CAAC,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,QAAQ,GAAI,OAAO,CAAC,GAAG,CAAC,CA8GxF"}

package/dist/http/controllers/robot/handlers/read.js

@@ -6,16 +6,27 @@
  * view the LICENSE file that was distributed with this source code.
  */
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.getOneRobotRouteHandler = exports.getManyRobotRouteHandler = void 0;
+exports.getManyRobotRouteHandler = getManyRobotRouteHandler;
+exports.getOneRobotRouteHandler = getOneRobotRouteHandler;
 const query_1 = require("@routup/basic/query");
 const routup_1 = require("routup");
 const typeorm_extension_1 = require("typeorm-extension");
 const http_1 = require("@ebec/http");
-const core_1 = require("@authup/core");
+const kit_1 = require("@authup/kit");
+const core_kit_1 = require("@authup/core-kit");
 const domains_1 = require("../../../../domains");
+const utils_1 = require("../../../../utils");
 const oauth2_1 = require("../../../oauth2");
-const utils_1 = require("../../../utils");
+const request_1 = require("../../../request");
 async function getManyRobotRouteHandler(req, res) {
+    const permissionChecker = (0, request_1.useRequestEnv)(req, 'permissionChecker');
+    await permissionChecker.preCheckOneOf({
+        name: [
+            core_kit_1.PermissionName.ROBOT_READ,
+            core_kit_1.PermissionName.ROBOT_UPDATE,
+            core_kit_1.PermissionName.ROBOT_DELETE,
+        ],
+    });
     const dataSource = await (0, typeorm_extension_1.useDataSource)();
     const repository = dataSource.getRepository(domains_1.RobotEntity);
     const query = repository.createQueryBuilder('robot');
@@ -28,6 +39,7 @@ async function getManyRobotRouteHandler(req, res) {
             default: [
                 'id',
                 'name',
+                'display_name',
                 'description',
                 'active',
                 'user_id',
@@ -49,49 +61,92 @@ async function getManyRobotRouteHandler(req, res) {
             allowed: ['id', 'realm_id', 'user_id', 'updated_at', 'created_at'],
         },
     });
-    const env = (0, utils_1.useRequestEnv)(req);
-    if (!env.ability.has(core_1.PermissionName.ROBOT_EDIT) &&
-        !env.ability.has(core_1.PermissionName.ROBOT_DROP)) {
-        if (env.userId) {
-            query.andWhere('robot.user_id = :userId', { userId: env.userId });
+    const queryOutput = await query.getManyAndCount();
+    const identity = (0, request_1.useRequestIdentity)(req);
+    const data = [];
+    for (let i = 0; i < queryOutput[0].length; i++) {
+        if (identity &&
+            identity.type === 'robot' &&
+            identity.id === queryOutput[0][i].id) {
+            data.push(queryOutput[0][i]);
+            continue;
         }
-        if (env.robotId) {
-            query.andWhere('robot.id = :id', { id: env.robotId });
+        try {
+            await permissionChecker.checkOneOf({
+                name: [
+                    core_kit_1.PermissionName.ROBOT_READ,
+                    core_kit_1.PermissionName.ROBOT_UPDATE,
+                    core_kit_1.PermissionName.ROBOT_DELETE,
+                ],
+                data: { attributes: queryOutput[0][i] },
+            });
+            data.push(queryOutput[0][i]);
+        }
+        catch (e) {
+            queryOutput[1] -= 1;
         }
     }
-    if (env.realm.name !== core_1.REALM_MASTER_NAME) {
-        query.andWhere('robot.realm_id = :realmId', { realmId: env.realm.id });
-    }
-    const [entities, total] = await query.getManyAndCount();
     return (0, routup_1.send)(res, {
-        data: entities,
+        data,
         meta: {
-            total,
+            total: queryOutput[1],
             ...pagination,
         },
     });
 }
-exports.getManyRobotRouteHandler = getManyRobotRouteHandler;
 async function getOneRobotRouteHandler(req, res) {
-    const id = (0, routup_1.useRequestParam)(req, 'id');
+    const permissionChecker = (0, request_1.useRequestEnv)(req, 'permissionChecker');
+    await permissionChecker.preCheckOneOf({
+        name: [
+            core_kit_1.PermissionName.ROBOT_READ,
+            core_kit_1.PermissionName.ROBOT_UPDATE,
+            core_kit_1.PermissionName.ROBOT_DELETE,
+        ],
+    });
+    const id = (0, request_1.useRequestParamID)(req, {
+        isUUID: false,
+    });
     const dataSource = await (0, typeorm_extension_1.useDataSource)();
     const repository = dataSource.getRepository(domains_1.RobotEntity);
     const query = repository.createQueryBuilder('robot');
-    if ((0, core_1.isSelfId)(id) &&
-        (0, utils_1.useRequestEnv)(req, 'robotId')) {
-        const attributes = (0, oauth2_1.resolveOAuth2SubAttributesForScope)(core_1.OAuth2SubKind.ROBOT, (0, utils_1.useRequestEnv)(req, 'scopes'));
-        for (let i = 0; i < attributes.length; i++) {
-            query.addSelect(`robot.${attributes[i]}`);
-        }
-        query.where('robot.id = :id', { id });
+    const identity = (0, request_1.useRequestIdentity)(req);
+    let isMe = false;
+    if ((0, utils_1.isSelfId)(id) &&
+        identity &&
+        identity.type === 'robot') {
+        isMe = true;
+        query.where('robot.id = :id', { id: identity.id });
     }
-    else if ((0, core_1.isUUID)(id)) {
+    else if ((0, kit_1.isUUID)(id)) {
+        if (identity &&
+            identity.type === 'robot' &&
+            id === identity.id) {
+            isMe = true;
+        }
         query.where('robot.id = :id', { id });
     }
     else {
-        query.where('robot.name LIKE :name', { name: id });
+        query.where('robot.name = :name', { name: id });
         const realm = await (0, domains_1.resolveRealm)((0, routup_1.useRequestParam)(req, 'realmId'), true);
         query.andWhere('robot.realm_id = :realmId', { realmId: realm.id });
+        if (identity &&
+            identity.type === 'robot' &&
+            identity.realmId === realm.id &&
+            identity.attributes &&
+            identity.attributes.name === id) {
+            isMe = true;
+        }
+    }
+    const scopes = (0, request_1.useRequestEnv)(req, 'scopes');
+    if (isMe) {
+        const attributes = (0, oauth2_1.resolveOAuth2SubAttributesForScope)(kit_1.OAuth2SubKind.ROBOT, scopes);
+        const validAttributes = repository.metadata.columns.map((column) => column.databaseName);
+        for (let i = 0; i < attributes.length; i++) {
+            const isValid = validAttributes.includes(attributes[i]);
+            if (isValid) {
+                query.addSelect(`robot.${attributes[i]}`);
+            }
+        }
     }
     (0, typeorm_extension_1.applyQuery)(query, (0, query_1.useRequestQuery)(req), {
         defaultAlias: 'robot',
@@ -102,6 +157,7 @@ async function getOneRobotRouteHandler(req, res) {
             default: [
                 'id',
                 'name',
+                'display_name',
                 'description',
                 'active',
                 'user_id',
@@ -118,19 +174,16 @@ async function getOneRobotRouteHandler(req, res) {
     if (!entity) {
         throw new http_1.NotFoundError();
     }
-    const env = (0, utils_1.useRequestEnv)(req);
-    if (env.robotId !== entity.id &&
-        !env.ability.has(core_1.PermissionName.ROBOT_DROP) &&
-        !env.ability.has(core_1.PermissionName.ROBOT_EDIT)) {
-        if (!entity.user_id) {
-            throw new http_1.ForbiddenError();
-        }
-        if (entity.user_id &&
-            entity.user_id !== env.userId) {
-            throw new http_1.ForbiddenError();
-        }
+    if (!isMe) {
+        await permissionChecker.check({
+            name: [
+                core_kit_1.PermissionName.ROBOT_READ,
+                core_kit_1.PermissionName.ROBOT_UPDATE,
+                core_kit_1.PermissionName.ROBOT_DELETE,
+            ],
+            data: { attributes: entity },
+        });
     }
     return (0, routup_1.send)(res, entity);
 }
-exports.getOneRobotRouteHandler = getOneRobotRouteHandler;
 //# sourceMappingURL=read.js.map