@authup/server-core 1.0.0-beta.2 → 1.0.0-beta.21

package/dist/domains/core/extra-attribute-repository/types.d.ts

@@ -0,0 +1,30 @@
+import type { Repository } from 'typeorm';
+import type { EntityTarget } from 'typeorm/common/EntityTarget';
+export type EARepositoryOptions<T, A> = {
+    cachePrefix?: string;
+    entity: EntityTarget<T>;
+    entityPrimaryColumn: keyof T;
+    attributeEntity: EntityTarget<A>;
+    attributeForeignColumn: keyof A;
+    attributeProperties?: EARepositoryPropertiesModifyFn<T, A>;
+};
+export type EARepositoryEntityBase = {
+    name: string;
+    value: any;
+    [key: string]: any;
+};
+export type EARepositoryPropertiesModifyFn<T, A> = (input: A, parent: T) => A;
+export type EARepositoryAdapterOptions<T, A extends EARepositoryEntityBase> = Omit<EARepositoryOptions<T, A>, 'entity' | 'attributeEntity'> & {
+    repository: Repository<T>;
+    attributeRepository: Repository<A>;
+};
+export type EARepositoryFindOptions = {
+    attributes?: string[];
+};
+export type EARepositorySaveOptions = {
+    /**
+     * Don't delete non passed attributes.
+     */
+    keepAll?: boolean;
+};
+//# sourceMappingURL=types.d.ts.map

package/dist/domains/core/extra-attribute-repository/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../../src/domains/core/extra-attribute-repository/types.ts"],"names":[],"mappings":"AAMA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AAC1C,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,6BAA6B,CAAC;AAEhE,MAAM,MAAM,mBAAmB,CAC3B,CAAC,EACD,CAAC,IACD;IACA,WAAW,CAAC,EAAE,MAAM,CAAC;IAErB,MAAM,EAAE,YAAY,CAAC,CAAC,CAAC,CAAC;IACxB,mBAAmB,EAAE,MAAM,CAAC,CAAC;IAE7B,eAAe,EAAE,YAAY,CAAC,CAAC,CAAC,CAAC;IACjC,sBAAsB,EAAE,MAAM,CAAC,CAAC;IAChC,mBAAmB,CAAC,EAAE,8BAA8B,CAAC,CAAC,EAAE,CAAC,CAAC,CAAA;CAC7D,CAAC;AAEF,MAAM,MAAM,sBAAsB,GAAG;IACjC,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,GAAG,CAAC;IACX,CAAC,GAAG,EAAE,MAAM,GAAG,GAAG,CAAA;CACrB,CAAC;AAEF,MAAM,MAAM,8BAA8B,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,KAAK,CAAC,CAAC;AAE9E,MAAM,MAAM,0BAA0B,CAClC,CAAC,EACD,CAAC,SAAS,sBAAsB,IAChC,IAAI,CAAC,mBAAmB,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,QAAQ,GAAG,iBAAiB,CAAC,GAAG;IAChE,UAAU,EAAE,UAAU,CAAC,CAAC,CAAC,CAAC;IAC1B,mBAAmB,EAAE,UAAU,CAAC,CAAC,CAAC,CAAA;CACrC,CAAC;AAEF,MAAM,MAAM,uBAAuB,GAAG;IAClC,UAAU,CAAC,EAAE,MAAM,EAAE,CAAA;CACxB,CAAC;AAEF,MAAM,MAAM,uBAAuB,GAAG;IAClC;;OAEG;IACH,OAAO,CAAC,EAAE,OAAO,CAAA;CACpB,CAAC"}

package/dist/domains/core/extra-attribute-repository/types.js

@@ -0,0 +1,3 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+//# sourceMappingURL=types.js.map

package/dist/domains/core/extra-attribute-repository/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../../../src/domains/core/extra-attribute-repository/types.ts"],"names":[],"mappings":""}

package/dist/domains/core/index.d.ts

@@ -0,0 +1,2 @@
+export * from './extra-attribute-repository';
+//# sourceMappingURL=index.d.ts.map

package/dist/domains/core/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/domains/core/index.ts"],"names":[],"mappings":"AAOA,cAAc,8BAA8B,CAAC"}

package/dist/domains/core/index.js

@@ -0,0 +1,24 @@
+"use strict";
+/*
+ * Copyright (c) 2024.
+ * Author Peter Placzek (tada5hi)
+ * For the full copyright and license information,
+ * view the LICENSE file that was distributed with this source code.
+ */
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __exportStar = (this && this.__exportStar) || function(m, exports) {
+    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+__exportStar(require("./extra-attribute-repository"), exports);
+//# sourceMappingURL=index.js.map

package/dist/domains/core/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/domains/core/index.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;;;;;;;;;;;;;;;AAEH,+DAA6C"}

package/dist/domains/identity-provider/entity.d.ts

@@ -1,9 +1,10 @@
-import type { IdentityProvider, IdentityProviderPreset, IdentityProviderProtocol } from '@authup/core';
-import { Realm } from '@authup/core';
+import type { IdentityProvider, IdentityProviderPreset, IdentityProviderProtocol } from '@authup/core-kit';
+import { Realm } from '@authup/core-kit';
 export declare class IdentityProviderEntity implements IdentityProvider {
     id: string;
     slug: string;
     name: string;
+    display_name: string | null;
     protocol: `${IdentityProviderProtocol}` | null;
     preset: `${IdentityProviderPreset}` | null;
     enabled: boolean;

package/dist/domains/identity-provider/entity.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"entity.d.ts","sourceRoot":"","sources":["../../../src/domains/identity-provider/entity.ts"],"names":[],"mappings":"AAiBA,OAAO,KAAK,EAAE,gBAAgB,EAAE,sBAAsB,EAAE,wBAAwB,EAAE,MAAM,cAAc,CAAC;AACvG,OAAO,EAAE,KAAK,EAAE,MAAM,cAAc,CAAC;AAGrC,qBAEa,sBAAuB,YAAW,gBAAgB;IAEvD,EAAE,EAAE,MAAM,CAAC;IAGX,IAAI,EAAE,MAAM,CAAC;IAGb,IAAI,EAAE,MAAM,CAAC;IAGb,QAAQ,EAAE,GAAG,wBAAwB,EAAE,GAAG,IAAI,CAAC;IAG/C,MAAM,EAAE,GAAG,sBAAsB,EAAE,GAAG,IAAI,CAAC;IAG3C,OAAO,EAAE,OAAO,CAAC;IAGjB,UAAU,EAAE,IAAI,CAAC;IAGjB,UAAU,EAAE,IAAI,CAAC;IAGjB,QAAQ,EAAE,MAAM,CAAC;IAIjB,KAAK,EAAE,KAAK,CAAC;CACpB"}
+{"version":3,"file":"entity.d.ts","sourceRoot":"","sources":["../../../src/domains/identity-provider/entity.ts"],"names":[],"mappings":"AAiBA,OAAO,KAAK,EAAE,gBAAgB,EAAE,sBAAsB,EAAE,wBAAwB,EAAE,MAAM,kBAAkB,CAAC;AAC3G,OAAO,EAAE,KAAK,EAAE,MAAM,kBAAkB,CAAC;AAGzC,qBAEa,sBAAuB,YAAW,gBAAgB;IAEvD,EAAE,EAAE,MAAM,CAAC;IAGX,IAAI,EAAE,MAAM,CAAC;IAGb,IAAI,EAAE,MAAM,CAAC;IAGb,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IAG5B,QAAQ,EAAE,GAAG,wBAAwB,EAAE,GAAG,IAAI,CAAC;IAG/C,MAAM,EAAE,GAAG,sBAAsB,EAAE,GAAG,IAAI,CAAC;IAG3C,OAAO,EAAE,OAAO,CAAC;IAGjB,UAAU,EAAE,IAAI,CAAC;IAGjB,UAAU,EAAE,IAAI,CAAC;IAGjB,QAAQ,EAAE,MAAM,CAAC;IAIjB,KAAK,EAAE,KAAK,CAAC;CACpB"}

package/dist/domains/identity-provider/entity.js

@@ -33,6 +33,10 @@ __decorate([
     (0, typeorm_1.Column)({ type: 'varchar', length: 128 }),
     __metadata("design:type", String)
 ], IdentityProviderEntity.prototype, "name", void 0);
+__decorate([
+    (0, typeorm_1.Column)({ type: 'varchar', length: 256, nullable: true }),
+    __metadata("design:type", String)
+], IdentityProviderEntity.prototype, "display_name", void 0);
 __decorate([
     (0, typeorm_1.Column)({ type: 'varchar', length: 64, nullable: true }),
     __metadata("design:type", String)

package/dist/domains/identity-provider/entity.js.map

@@ -1 +1 @@
-{"version":3,"file":"entity.js","sourceRoot":"","sources":["../../../src/domains/identity-provider/entity.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;;;;;;;;;;;AAEH,qCASiB;AAGjB,oCAAuC;AAIhC,IAAM,sBAAsB,GAA5B,MAAM,sBAAsB;CA+BlC,CAAA;AA/BY,wDAAsB;AAE3B;IADH,IAAA,gCAAsB,EAAC,MAAM,CAAC;;kDAChB;AAGX;IADH,IAAA,gBAAM,EAAC,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC;;oDACvB;AAGb;IADH,IAAA,gBAAM,EAAC,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC;;oDACxB;AAGb;IADH,IAAA,gBAAM,EAAC,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;;wDACL;AAG/C;IADH,IAAA,gBAAM,EAAC,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;;sDACT;AAG3C;IADH,IAAA,gBAAM,EAAC,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;;uDACtB;AAGjB;IADH,IAAA,0BAAgB,GAAE;8BACH,IAAI;0DAAC;AAGjB;IADH,IAAA,0BAAgB,GAAE;8BACH,IAAI;0DAAC;AAGjB;IADH,IAAA,gBAAM,GAAE;;wDACY;AAIjB;IAFH,IAAA,mBAAS,EAAC,GAAG,EAAE,CAAC,mBAAW,EAAE,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC;IACrD,IAAA,oBAAU,EAAC,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC;;qDAChB;iCA9BR,sBAAsB;IAFlC,IAAA,gBAAM,EAAC,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;IAC5B,IAAA,gBAAM,EAAC,EAAE,IAAI,EAAE,yBAAyB,EAAE,CAAC;GAC/B,sBAAsB,CA+BlC"}
+{"version":3,"file":"entity.js","sourceRoot":"","sources":["../../../src/domains/identity-provider/entity.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;;;;;;;;;;;AAEH,qCASiB;AAGjB,oCAAuC;AAIhC,IAAM,sBAAsB,GAA5B,MAAM,sBAAsB;CAkClC,CAAA;AAlCY,wDAAsB;AAE3B;IADH,IAAA,gCAAsB,EAAC,MAAM,CAAC;;kDAChB;AAGX;IADH,IAAA,gBAAM,EAAC,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC;;oDACvB;AAGb;IADH,IAAA,gBAAM,EAAC,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC;;oDACxB;AAGb;IADH,IAAA,gBAAM,EAAC,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,GAAG,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;;4DACzB;AAG5B;IADH,IAAA,gBAAM,EAAC,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;;wDACL;AAG/C;IADH,IAAA,gBAAM,EAAC,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;;sDACT;AAG3C;IADH,IAAA,gBAAM,EAAC,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;;uDACtB;AAGjB;IADH,IAAA,0BAAgB,GAAE;8BACH,IAAI;0DAAC;AAGjB;IADH,IAAA,0BAAgB,GAAE;8BACH,IAAI;0DAAC;AAGjB;IADH,IAAA,gBAAM,GAAE;;wDACY;AAIjB;IAFH,IAAA,mBAAS,EAAC,GAAG,EAAE,CAAC,mBAAW,EAAE,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC;IACrD,IAAA,oBAAU,EAAC,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC;;qDAChB;iCAjCR,sBAAsB;IAFlC,IAAA,gBAAM,EAAC,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;IAC5B,IAAA,gBAAM,EAAC,EAAE,IAAI,EAAE,yBAAyB,EAAE,CAAC;GAC/B,sBAAsB,CAkClC"}

package/dist/domains/identity-provider/flow/core/index.d.ts

@@ -1,3 +1,4 @@
+export * from './ldap';
 export * from './oauth2';
 export * from './openid';
 //# sourceMappingURL=index.d.ts.map

package/dist/domains/identity-provider/flow/core/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../src/domains/identity-provider/flow/core/index.ts"],"names":[],"mappings":"AAOA,cAAc,UAAU,CAAC;AACzB,cAAc,UAAU,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../src/domains/identity-provider/flow/core/index.ts"],"names":[],"mappings":"AAOA,cAAc,QAAQ,CAAC;AACvB,cAAc,UAAU,CAAC;AACzB,cAAc,UAAU,CAAC"}

package/dist/domains/identity-provider/flow/core/index.js

@@ -20,6 +20,7 @@ var __exportStar = (this && this.__exportStar) || function(m, exports) {
     for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
 };
 Object.defineProperty(exports, "__esModule", { value: true });
+__exportStar(require("./ldap"), exports);
 __exportStar(require("./oauth2"), exports);
 __exportStar(require("./openid"), exports);
 //# sourceMappingURL=index.js.map

package/dist/domains/identity-provider/flow/core/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../../src/domains/identity-provider/flow/core/index.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;;;;;;;;;;;;;;;AAEH,2CAAyB;AACzB,2CAAyB"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../../src/domains/identity-provider/flow/core/index.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;;;;;;;;;;;;;;;AAEH,yCAAuB;AACvB,2CAAyB;AACzB,2CAAyB"}

package/dist/domains/identity-provider/flow/core/ldap.d.ts

@@ -0,0 +1,14 @@
+import { LdapClient } from '../../../../core';
+import type { ILdapIdentityProviderFlow, IdentityProviderIdentity, LdapIdentityProviderFlowOptions } from '../types';
+export declare class LdapIdentityProviderFlow implements ILdapIdentityProviderFlow {
+    protected options: LdapIdentityProviderFlowOptions;
+    protected client: LdapClient;
+    constructor(options: LdapIdentityProviderFlowOptions);
+    getIdentityForCredentials(user: string, password: string): Promise<IdentityProviderIdentity>;
+    getIdentity(input: string): Promise<IdentityProviderIdentity>;
+    bind(user?: string, password?: string): Promise<void>;
+    unbind(): Promise<void>;
+    findUser(input: string): Promise<Record<string, any> | undefined>;
+    findUserGroups(user: Record<string, any>): Promise<string[]>;
+}
+//# sourceMappingURL=ldap.d.ts.map

package/dist/domains/identity-provider/flow/core/ldap.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ldap.d.ts","sourceRoot":"","sources":["../../../../../src/domains/identity-provider/flow/core/ldap.ts"],"names":[],"mappings":"AAYA,OAAO,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAC9C,OAAO,KAAK,EAAE,yBAAyB,EAAE,wBAAwB,EAAE,+BAA+B,EAAE,MAAM,UAAU,CAAC;AAErH,qBAAa,wBAAyB,YAAW,yBAAyB;IACtE,SAAS,CAAC,OAAO,EAAG,+BAA+B,CAAC;IAEpD,SAAS,CAAC,MAAM,EAAE,UAAU,CAAC;gBAEjB,OAAO,EAAE,+BAA+B;IAc9C,yBAAyB,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAI,OAAO,CAAC,wBAAwB,CAAC;IAQ7F,WAAW,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,wBAAwB,CAAC;IAoBtD,IAAI,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,MAAM,GAAI,OAAO,CAAC,IAAI,CAAC;IAa7D,MAAM,IAAK,OAAO,CAAC,IAAI,CAAC;IAIjB,QAAQ,CAAC,KAAK,EAAE,MAAM,GAAI,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,GAAG,SAAS,CAAC;IA0ClE,cAAc,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,GAAI,OAAO,CAAC,MAAM,EAAE,CAAC;CAuD7E"}

package/dist/domains/identity-provider/flow/core/ldap.js

@@ -0,0 +1,151 @@
+"use strict";
+/*
+ * Copyright (c) 2024.
+ * Author Peter Placzek (tada5hi)
+ * For the full copyright and license information,
+ * view the LICENSE file that was distributed with this source code.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.LdapIdentityProviderFlow = void 0;
+const kit_1 = require("@authup/kit");
+const ldapjs_1 = require("ldapjs");
+const core_1 = require("../../../../core");
+class LdapIdentityProviderFlow {
+    constructor(options) {
+        this.options = options;
+        this.client = new core_1.LdapClient({
+            url: options.url,
+            tls: options.tls,
+            startTLS: options.start_tls,
+            baseDn: options.base_dn,
+            user: options.user,
+            password: options.password,
+            userNameAttribute: options.user_name_attribute,
+        });
+    }
+    async getIdentityForCredentials(user, password) {
+        const identity = await this.getIdentity(user);
+        await this.bind(identity.id, password);
+        return identity;
+    }
+    async getIdentity(input) {
+        await this.bind();
+        const user = await this.findUser(input);
+        const identity = {
+            id: user.dn,
+            name: user[this.options.user_name_attribute || 'cn'] || user.dn,
+            email: user[this.options.user_mail_attribute || 'mail'],
+            data: {},
+        };
+        try {
+            identity.roles = await this.findUserGroups(user);
+        }
+        catch (e) {
+            // todo: log event
+        }
+        return identity;
+    }
+    async bind(user, password) {
+        if (!user) {
+            return this.client.bind();
+        }
+        if (!this.client.isDn(user)) {
+            const nameAttribute = this.options.user_name_attribute || 'cn';
+            user = `${nameAttribute}=${user},${this.client.resolveDn(this.options.user_base_dn, this.options.base_dn)}`;
+        }
+        return this.client.bind(user, password);
+    }
+    async unbind() {
+        return this.client.unbind();
+    }
+    async findUser(input) {
+        let filter;
+        if (this.options.user_filter) {
+            filter = (0, kit_1.template)(this.options.user_filter, {
+                input,
+                name_attribute: this.options.user_name_attribute || 'cn',
+                mail_attribute: this.options.user_mail_attribute || 'mail',
+                display_name_attribute: this.options.user_display_name_attribute || 'cn',
+            });
+        }
+        else if (this.options.user_name_attribute) {
+            filter = new ldapjs_1.EqualityFilter({
+                attribute: this.options.user_name_attribute,
+                value: input,
+            });
+        }
+        else {
+            filter = new ldapjs_1.OrFilter({
+                filters: [
+                    new ldapjs_1.EqualityFilter({
+                        attribute: 'cn',
+                        value: input,
+                    }),
+                    new ldapjs_1.EqualityFilter({
+                        attribute: 'sAMAccountName',
+                        value: input,
+                    }),
+                ],
+            });
+        }
+        const entities = await this.client.search({
+            filter,
+            scope: 'sub',
+        }, this.client.resolveDn(this.options.user_base_dn, this.options.base_dn));
+        if (entities.length === 0) {
+            return undefined;
+        }
+        return entities[0];
+    }
+    async findUserGroups(user) {
+        const nameAttribute = this.options.group_name_attribute || 'cn';
+        const memberAttribute = this.options.group_member_attribute || 'member';
+        let filter;
+        if (this.options.group_filter) {
+            filter = (0, kit_1.template)(this.options.group_filter, {
+                ...user,
+                name_attribute: nameAttribute,
+                member_attribute: memberAttribute,
+            });
+        }
+        else {
+            filter = new ldapjs_1.AndFilter({
+                filters: [
+                    new ldapjs_1.EqualityFilter({
+                        attribute: 'objectClass',
+                        value: this.options.group_class || 'group',
+                    }),
+                    new ldapjs_1.EqualityFilter({
+                        attribute: memberAttribute,
+                        value: user[this.options.group_member_user_attribute || 'dn'],
+                    }),
+                ],
+            });
+        }
+        const entities = await this.client.search({
+            filter,
+            scope: 'sub',
+        }, this.client.resolveDn(this.options.group_base_dn, this.options.base_dn));
+        if (entities.length === 0) {
+            return [];
+        }
+        const attributeKey = this.options.group_name_attribute || 'cn';
+        const names = [];
+        for (let i = 0; i < entities.length; i++) {
+            const attribute = entities[i][attributeKey];
+            if (typeof attribute === 'undefined') {
+                continue;
+            }
+            if (typeof attribute === 'string') {
+                names.push(attribute);
+                continue;
+            }
+            if (Array.isArray(attribute)) {
+                names.push(...attribute.filter((el) => typeof el === 'string'));
+            }
+        }
+        return names;
+    }
+}
+exports.LdapIdentityProviderFlow = LdapIdentityProviderFlow;
+//# sourceMappingURL=ldap.js.map

package/dist/domains/identity-provider/flow/core/ldap.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ldap.js","sourceRoot":"","sources":["../../../../../src/domains/identity-provider/flow/core/ldap.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;;AAEH,qCAAuC;AACvC,mCAEgB;AAEhB,2CAA8C;AAG9C,MAAa,wBAAwB;IAKjC,YAAY,OAAwC;QAChD,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;QAEvB,IAAI,CAAC,MAAM,GAAG,IAAI,iBAAU,CAAC;YACzB,GAAG,EAAE,OAAO,CAAC,GAAG;YAChB,GAAG,EAAE,OAAO,CAAC,GAAG;YAChB,QAAQ,EAAE,OAAO,CAAC,SAAS;YAC3B,MAAM,EAAE,OAAO,CAAC,OAAO;YACvB,IAAI,EAAE,OAAO,CAAC,IAAI;YAClB,QAAQ,EAAE,OAAO,CAAC,QAAQ;YAC1B,iBAAiB,EAAE,OAAO,CAAC,mBAAmB;SACjD,CAAC,CAAC;IACP,CAAC;IAED,KAAK,CAAC,yBAAyB,CAAC,IAAY,EAAE,QAAgB;QAC1D,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC;QAE9C,MAAM,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,QAAQ,CAAC,CAAC;QAEvC,OAAO,QAAQ,CAAC;IACpB,CAAC;IAED,KAAK,CAAC,WAAW,CAAC,KAAa;QAC3B,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC;QAElB,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;QACxC,MAAM,QAAQ,GAA8B;YACxC,EAAE,EAAE,IAAI,CAAC,EAAE;YACX,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,mBAAmB,IAAI,IAAI,CAAC,IAAI,IAAI,CAAC,EAAE;YAC/D,KAAK,EAAE,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,mBAAmB,IAAI,MAAM,CAAC;YACvD,IAAI,EAAE,EAAE;SACX,CAAC;QAEF,IAAI,CAAC;YACD,QAAQ,CAAC,KAAK,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC;QACrD,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACT,kBAAkB;QACtB,CAAC;QAED,OAAO,QAAQ,CAAC;IACpB,CAAC;IAEM,KAAK,CAAC,IAAI,CAAC,IAAa,EAAE,QAAiB;QAC9C,IAAI,CAAC,IAAI,EAAE,CAAC;YACR,OAAO,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;QAC9B,CAAC;QAED,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YAC1B,MAAM,aAAa,GAAG,IAAI,CAAC,OAAO,CAAC,mBAAmB,IAAI,IAAI,CAAC;YAC/D,IAAI,GAAG,GAAG,aAAa,IAAI,IAAI,IAAI,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,YAAY,EAAE,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;QAChH,CAAC;QAED,OAAO,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;IAC5C,CAAC;IAED,KAAK,CAAC,MAAM;QACR,OAAO,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC;IAChC,CAAC;IAEM,KAAK,CAAC,QAAQ,CAAC,KAAa;QAC/B,IAAI,MAAwB,CAAC;QAE7B,IAAI,IAAI,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC;YAC3B,MAAM,GAAG,IAAA,cAAQ,EAAC,IAAI,CAAC,OAAO,CAAC,WAAW,EAAE;gBACxC,KAAK;gBACL,cAAc,EAAE,IAAI,CAAC,OAAO,CAAC,mBAAmB,IAAI,IAAI;gBACxD,cAAc,EAAE,IAAI,CAAC,OAAO,CAAC,mBAAmB,IAAI,MAAM;gBAC1D,sBAAsB,EAAE,IAAI,CAAC,OAAO,CAAC,2BAA2B,IAAI,IAAI;aAC3E,CAAC,CAAC;QACP,CAAC;aAAM,IAAI,IAAI,CAAC,OAAO,CAAC,mBAAmB,EAAE,CAAC;YAC1C,MAAM,GAAG,IAAI,uBAAc,CAAC;gBACxB,SAAS,EAAE,IAAI,CAAC,OAAO,CAAC,mBAAmB;gBAC3C,KAAK,EAAE,KAAK;aACf,CAAC,CAAC;QACP,CAAC;aAAM,CAAC;YACJ,MAAM,GAAG,IAAI,iBAAQ,CAAC;gBAClB,OAAO,EAAE;oBACL,IAAI,uBAAc,CAAC;wBACf,SAAS,EAAE,IAAI;wBACf,KAAK,EAAE,KAAK;qBACf,CAAC;oBACF,IAAI,uBAAc,CAAC;wBACf,SAAS,EAAE,gBAAgB;wBAC3B,KAAK,EAAE,KAAK;qBACf,CAAC;iBACL;aACJ,CAAC,CAAC;QACP,CAAC;QAED,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC;YACtC,MAAM;YACN,KAAK,EAAE,KAAK;SACf,EAAE,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,YAAY,EAAE,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC;QAE3E,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACxB,OAAO,SAAS,CAAC;QACrB,CAAC;QAED,OAAO,QAAQ,CAAC,CAAC,CAAC,CAAC;IACvB,CAAC;IAEM,KAAK,CAAC,cAAc,CAAC,IAAyB;QACjD,MAAM,aAAa,GAAG,IAAI,CAAC,OAAO,CAAC,oBAAoB,IAAI,IAAI,CAAC;QAChE,MAAM,eAAe,GAAG,IAAI,CAAC,OAAO,CAAC,sBAAsB,IAAI,QAAQ,CAAC;QAExE,IAAI,MAAwB,CAAC;QAC7B,IAAI,IAAI,CAAC,OAAO,CAAC,YAAY,EAAE,CAAC;YAC5B,MAAM,GAAG,IAAA,cAAQ,EAAC,IAAI,CAAC,OAAO,CAAC,YAAY,EAAE;gBACzC,GAAG,IAAI;gBACP,cAAc,EAAE,aAAa;gBAC7B,gBAAgB,EAAE,eAAe;aACpC,CAAC,CAAC;QACP,CAAC;aAAM,CAAC;YACJ,MAAM,GAAG,IAAI,kBAAS,CAAC;gBACnB,OAAO,EAAE;oBACL,IAAI,uBAAc,CAAC;wBACf,SAAS,EAAE,aAAa;wBACxB,KAAK,EAAE,IAAI,CAAC,OAAO,CAAC,WAAW,IAAI,OAAO;qBAC7C,CAAC;oBACF,IAAI,uBAAc,CAAC;wBACf,SAAS,EAAE,eAAe;wBAC1B,KAAK,EAAE,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,2BAA2B,IAAI,IAAI,CAAC;qBAChE,CAAC;iBACL;aACJ,CAAC,CAAC;QACP,CAAC;QAED,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC;YACtC,MAAM;YACN,KAAK,EAAE,KAAK;SACf,EAAE,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,aAAa,EAAE,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC;QAE5E,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACxB,OAAO,EAAE,CAAC;QACd,CAAC;QAED,MAAM,YAAY,GAAG,IAAI,CAAC,OAAO,CAAC,oBAAoB,IAAI,IAAI,CAAC;QAC/D,MAAM,KAAK,GAAc,EAAE,CAAC;QAC5B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,QAAQ,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YACvC,MAAM,SAAS,GAAG,QAAQ,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC;YAC5C,IAAI,OAAO,SAAS,KAAK,WAAW,EAAE,CAAC;gBACnC,SAAS;YACb,CAAC;YAED,IAAI,OAAO,SAAS,KAAK,QAAQ,EAAE,CAAC;gBAChC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;gBACtB,SAAS;YACb,CAAC;YAED,IAAI,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,CAAC;gBAC3B,KAAK,CAAC,IAAI,CAAC,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,OAAO,EAAE,KAAK,QAAQ,CAAC,CAAC,CAAC;YACpE,CAAC;QACL,CAAC;QAED,OAAO,KAAK,CAAC;IACjB,CAAC;CACJ;AAjKD,4DAiKC"}

package/dist/domains/identity-provider/flow/core/oauth2.d.ts

@@ -1,12 +1,10 @@
-import type { JwtPayload } from '@hapic/oauth2';
 import { OAuth2Client } from '@hapic/oauth2';
 import type { Request } from 'routup';
-import type { IOAuth2IdentityProviderFlow, IdentityProviderFlowIdentity, OAuth2IdentityProviderFlowOptions } from '../types';
+import type { IOAuth2IdentityProviderFlow, IdentityProviderIdentity, OAuth2IdentityProviderFlowOptions } from '../types';
 export declare abstract class OAuth2IdentityProviderFlow implements IOAuth2IdentityProviderFlow {
     protected client: OAuth2Client;
     protected constructor(provider: OAuth2IdentityProviderFlowOptions);
     buildAuthorizeURL(): string;
-    protected extractRolesFromTokenPayload(payload: JwtPayload): string[];
-    abstract getIdentityForRequest(request: Request): Promise<IdentityProviderFlowIdentity>;
+    abstract getIdentityForRequest(request: Request): Promise<IdentityProviderIdentity>;
 }
 //# sourceMappingURL=oauth2.d.ts.map

package/dist/domains/identity-provider/flow/core/oauth2.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"oauth2.d.ts","sourceRoot":"","sources":["../../../../../src/domains/identity-provider/flow/core/oauth2.ts"],"names":[],"mappings":"AAQA,OAAO,KAAK,EAAE,UAAU,EAAW,MAAM,eAAe,CAAC;AACzD,OAAO,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AAC7C,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,QAAQ,CAAC;AAEtC,OAAO,KAAK,EAAE,2BAA2B,EAAE,4BAA4B,EAAE,iCAAiC,EAAE,MAAM,UAAU,CAAC;AAE7H,8BAAsB,0BAA2B,YAAW,2BAA2B;IACnF,SAAS,CAAC,MAAM,EAAG,YAAY,CAAC;IAEhC,SAAS,aAAa,QAAQ,EAAE,iCAAiC;IAgB1D,iBAAiB,IAAK,MAAM;IAInC,SAAS,CAAC,4BAA4B,CAAC,OAAO,EAAE,UAAU,GAAI,MAAM,EAAE;IAiCtE,QAAQ,CAAC,qBAAqB,CAAC,OAAO,EAAE,OAAO,GAAI,OAAO,CAAC,4BAA4B,CAAC;CAC3F"}
+{"version":3,"file":"oauth2.d.ts","sourceRoot":"","sources":["../../../../../src/domains/identity-provider/flow/core/oauth2.ts"],"names":[],"mappings":"AASA,OAAO,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AAC7C,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,QAAQ,CAAC;AAEtC,OAAO,KAAK,EAAE,2BAA2B,EAAE,wBAAwB,EAAE,iCAAiC,EAAE,MAAM,UAAU,CAAC;AAEzH,8BAAsB,0BAA2B,YAAW,2BAA2B;IACnF,SAAS,CAAC,MAAM,EAAG,YAAY,CAAC;IAEhC,SAAS,aAAa,QAAQ,EAAE,iCAAiC;IAgB1D,iBAAiB,IAAK,MAAM;IAInC,QAAQ,CAAC,qBAAqB,CAAC,OAAO,EAAE,OAAO,GAAI,OAAO,CAAC,wBAAwB,CAAC;CACvF"}

package/dist/domains/identity-provider/flow/core/oauth2.js

@@ -7,7 +7,7 @@
  */
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.OAuth2IdentityProviderFlow = void 0;
-const core_1 = require("@authup/core");
+const core_kit_1 = require("@authup/core-kit");
 const oauth2_1 = require("@hapic/oauth2");
 const config_1 = require("../../../../config");
 class OAuth2IdentityProviderFlow {
@@ -15,7 +15,7 @@ class OAuth2IdentityProviderFlow {
         const clientOptions = {
             clientId: provider.client_id,
             clientSecret: provider.client_secret,
-            redirectUri: `${(0, config_1.useConfig)().publicUrl}${(0, core_1.buildIdentityProviderAuthorizeCallbackPath)(provider.id)}`,
+            redirectUri: `${(0, config_1.useConfig)().publicUrl}${(0, core_kit_1.buildIdentityProviderAuthorizeCallbackPath)(provider.id)}`,
             scope: provider.scope,
             authorizationEndpoint: provider.authorize_url,
             tokenEndpoint: provider.token_url,
@@ -28,27 +28,6 @@ class OAuth2IdentityProviderFlow {
     buildAuthorizeURL() {
         return this.client.authorize.buildURL();
     }
-    extractRolesFromTokenPayload(payload) {
-        const roles = [];
-        if (Array.isArray(payload.roles)) {
-            payload.roles = payload.roles
-                .filter((n) => typeof n === 'string');
-            if (payload.roles &&
-                payload.roles.length > 0) {
-                roles.push(...payload.roles);
-            }
-        }
-        if ((0, core_1.isObject)(payload.realm_access) &&
-            Array.isArray(payload.realm_access.roles)) {
-            payload.realm_access.roles = payload.realm_access.roles
-                .filter((n) => typeof n === 'string');
-            if (payload.realm_access.roles &&
-                payload.realm_access.roles.length > 0) {
-                roles.push(...payload.realm_access.roles);
-            }
-        }
-        return roles;
-    }
 }
 exports.OAuth2IdentityProviderFlow = OAuth2IdentityProviderFlow;
 //# sourceMappingURL=oauth2.js.map

package/dist/domains/identity-provider/flow/core/oauth2.js.map

@@ -1 +1 @@
-{"version":3,"file":"oauth2.js","sourceRoot":"","sources":["../../../../../src/domains/identity-provider/flow/core/oauth2.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;;AAEH,uCAAoF;AAEpF,0CAA6C;AAE7C,+CAA+C;AAG/C,MAAsB,0BAA0B;IAG5C,YAAsB,QAA2C;QAC7D,MAAM,aAAa,GAAa;YAC5B,QAAQ,EAAE,QAAQ,CAAC,SAAS;YAC5B,YAAY,EAAE,QAAQ,CAAC,aAAa;YACpC,WAAW,EAAE,GAAG,IAAA,kBAAS,GAAE,CAAC,SAAS,GAAG,IAAA,iDAA0C,EAAC,QAAQ,CAAC,EAAE,CAAC,EAAE;YACjG,KAAK,EAAE,QAAQ,CAAC,KAAK;YACrB,qBAAqB,EAAE,QAAQ,CAAC,aAAa;YAC7C,aAAa,EAAE,QAAQ,CAAC,SAAS;YACjC,gBAAgB,EAAE,QAAQ,CAAC,aAAa;SAC3C,CAAC;QAEF,IAAI,CAAC,MAAM,GAAG,IAAI,qBAAY,CAAC;YAC3B,OAAO,EAAE,aAAa;SACzB,CAAC,CAAC;IACP,CAAC;IAEM,iBAAiB;QACpB,OAAO,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,QAAQ,EAAE,CAAC;IAC5C,CAAC;IAES,4BAA4B,CAAC,OAAmB;QACtD,MAAM,KAAK,GAAc,EAAE,CAAC;QAE5B,IAAI,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;YAC/B,OAAO,CAAC,KAAK,GAAG,OAAO,CAAC,KAAK;iBACxB,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC;YAE1C,IACI,OAAO,CAAC,KAAK;gBACb,OAAO,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,EAC1B,CAAC;gBACC,KAAK,CAAC,IAAI,CAAC,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC;YACjC,CAAC;QACL,CAAC;QAED,IACI,IAAA,eAAQ,EAAC,OAAO,CAAC,YAAY,CAAC;YAC9B,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,YAAY,CAAC,KAAK,CAAC,EAC3C,CAAC;YACC,OAAO,CAAC,YAAY,CAAC,KAAK,GAAG,OAAO,CAAC,YAAY,CAAC,KAAK;iBAClD,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC;YAE1C,IACI,OAAO,CAAC,YAAY,CAAC,KAAK;gBAC1B,OAAO,CAAC,YAAY,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,EACvC,CAAC;gBACC,KAAK,CAAC,IAAI,CAAC,GAAG,OAAO,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC;YAC9C,CAAC;QACL,CAAC;QAED,OAAO,KAAK,CAAC;IACjB,CAAC;CAGJ;AAzDD,gEAyDC"}
+{"version":3,"file":"oauth2.js","sourceRoot":"","sources":["../../../../../src/domains/identity-provider/flow/core/oauth2.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;;AAEH,+CAA8E;AAE9E,0CAA6C;AAE7C,+CAA+C;AAG/C,MAAsB,0BAA0B;IAG5C,YAAsB,QAA2C;QAC7D,MAAM,aAAa,GAAa;YAC5B,QAAQ,EAAE,QAAQ,CAAC,SAAS;YAC5B,YAAY,EAAE,QAAQ,CAAC,aAAa;YACpC,WAAW,EAAE,GAAG,IAAA,kBAAS,GAAE,CAAC,SAAS,GAAG,IAAA,qDAA0C,EAAC,QAAQ,CAAC,EAAE,CAAC,EAAE;YACjG,KAAK,EAAE,QAAQ,CAAC,KAAK;YACrB,qBAAqB,EAAE,QAAQ,CAAC,aAAa;YAC7C,aAAa,EAAE,QAAQ,CAAC,SAAS;YACjC,gBAAgB,EAAE,QAAQ,CAAC,aAAa;SAC3C,CAAC;QAEF,IAAI,CAAC,MAAM,GAAG,IAAI,qBAAY,CAAC;YAC3B,OAAO,EAAE,aAAa;SACzB,CAAC,CAAC;IACP,CAAC;IAEM,iBAAiB;QACpB,OAAO,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,QAAQ,EAAE,CAAC;IAC5C,CAAC;CAGJ;AAxBD,gEAwBC"}

package/dist/domains/identity-provider/flow/core/openid.d.ts

@@ -1,8 +1,8 @@
 import type { Request } from 'routup';
-import type { IOAuth2IdentityProviderFlow, IdentityProviderFlowIdentity, OAuth2IdentityProviderFlowOptions } from '../types';
+import type { IOAuth2IdentityProviderFlow, IdentityProviderIdentity, OAuth2IdentityProviderFlowOptions } from '../types';
 import { OAuth2IdentityProviderFlow } from './oauth2';
 export declare class OpenIDIdentityProviderFlow extends OAuth2IdentityProviderFlow implements IOAuth2IdentityProviderFlow {
     constructor(options: OAuth2IdentityProviderFlowOptions);
-    getIdentityForRequest(request: Request): Promise<IdentityProviderFlowIdentity>;
+    getIdentityForRequest(request: Request): Promise<IdentityProviderIdentity>;
 }
 //# sourceMappingURL=openid.d.ts.map

package/dist/domains/identity-provider/flow/core/openid.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"openid.d.ts","sourceRoot":"","sources":["../../../../../src/domains/identity-provider/flow/core/openid.ts"],"names":[],"mappings":"AAWA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,QAAQ,CAAC;AACtC,OAAO,KAAK,EAAE,2BAA2B,EAAE,4BAA4B,EAAE,iCAAiC,EAAE,MAAM,UAAU,CAAC;AAC7H,OAAO,EAAE,0BAA0B,EAAE,MAAM,UAAU,CAAC;AAEtD,qBAAa,0BAA2B,SAAQ,0BAA2B,YAAW,2BAA2B;gBAEjG,OAAO,EAAE,iCAAiC;IAIhD,qBAAqB,CAAC,OAAO,EAAE,OAAO,GAAG,OAAO,CAAC,4BAA4B,CAAC;CAyBvF"}
+{"version":3,"file":"openid.d.ts","sourceRoot":"","sources":["../../../../../src/domains/identity-provider/flow/core/openid.ts"],"names":[],"mappings":"AASA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,QAAQ,CAAC;AACtC,OAAO,KAAK,EAAE,2BAA2B,EAAE,wBAAwB,EAAE,iCAAiC,EAAE,MAAM,UAAU,CAAC;AACzH,OAAO,EAAE,0BAA0B,EAAE,MAAM,UAAU,CAAC;AAEtD,qBAAa,0BAA2B,SAAQ,0BAA2B,YAAW,2BAA2B;gBAEjG,OAAO,EAAE,iCAAiC;IAIhD,qBAAqB,CAAC,OAAO,EAAE,OAAO,GAAG,OAAO,CAAC,wBAAwB,CAAC;CAqBnF"}

package/dist/domains/identity-provider/flow/core/openid.js

@@ -7,7 +7,6 @@
  */
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.OpenIDIdentityProviderFlow = void 0;
-const core_1 = require("@authup/core");
 const server_kit_1 = require("@authup/server-kit");
 const query_1 = require("@routup/basic/query");
 const oauth2_1 = require("./oauth2");
@@ -22,10 +21,7 @@ class OpenIDIdentityProviderFlow extends oauth2_1.OAuth2IdentityProviderFlow {
             code: code,
             state: state,
         });
-        const payload = (0, server_kit_1.decodeToken)(token.access_token);
-        if (typeof payload === 'string') {
-            throw core_1.TokenError.payloadInvalid();
-        }
+        const payload = (0, server_kit_1.extractTokenPayload)(token.access_token);
         return {
             id: payload.sub,
             name: [
@@ -34,7 +30,7 @@ class OpenIDIdentityProviderFlow extends oauth2_1.OAuth2IdentityProviderFlow {
                 payload.sub,
             ],
             email: payload.email,
-            roles: this.extractRolesFromTokenPayload(payload),
+            data: payload,
         };
     }
 }

package/dist/domains/identity-provider/flow/core/openid.js.map

@@ -1 +1 @@
-{"version":3,"file":"openid.js","sourceRoot":"","sources":["../../../../../src/domains/identity-provider/flow/core/openid.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;;AAEH,uCAA0C;AAE1C,mDAAiD;AACjD,+CAAsD;AAGtD,qCAAsD;AAEtD,MAAa,0BAA2B,SAAQ,mCAA0B;IACtE,4FAA4F;IAC5F,YAAY,OAA0C;QAClD,KAAK,CAAC,OAAO,CAAC,CAAC;IACnB,CAAC;IAED,KAAK,CAAC,qBAAqB,CAAC,OAAgB;QACxC,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,IAAA,uBAAe,EAAC,OAAO,CAAC,CAAC;QAEjD,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,wBAAwB,CAAC;YAC3D,IAAI,EAAE,IAAc;YACpB,KAAK,EAAE,KAAe;SACzB,CAAC,CAAC;QAEH,MAAM,OAAO,GAAG,IAAA,wBAAW,EAAC,KAAK,CAAC,YAAY,CAAgC,CAAC;QAE/E,IAAI,OAAO,OAAO,KAAK,QAAQ,EAAE,CAAC;YAC9B,MAAM,iBAAU,CAAC,cAAc,EAAE,CAAC;QACtC,CAAC;QAED,OAAO;YACH,EAAE,EAAE,OAAO,CAAC,GAAG;YACf,IAAI,EAAE;gBACF,OAAO,CAAC,kBAAkB;gBAC1B,OAAO,CAAC,QAAQ;gBAChB,OAAO,CAAC,GAAG;aACd;YACD,KAAK,EAAE,OAAO,CAAC,KAAK;YACpB,KAAK,EAAE,IAAI,CAAC,4BAA4B,CAAC,OAAO,CAAC;SACpD,CAAC;IACN,CAAC;CACJ;AA/BD,gEA+BC"}
+{"version":3,"file":"openid.js","sourceRoot":"","sources":["../../../../../src/domains/identity-provider/flow/core/openid.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;;AAEH,mDAAyD;AACzD,+CAAsD;AAGtD,qCAAsD;AAEtD,MAAa,0BAA2B,SAAQ,mCAA0B;IACtE,4FAA4F;IAC5F,YAAY,OAA0C;QAClD,KAAK,CAAC,OAAO,CAAC,CAAC;IACnB,CAAC;IAED,KAAK,CAAC,qBAAqB,CAAC,OAAgB;QACxC,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,IAAA,uBAAe,EAAC,OAAO,CAAC,CAAC;QAEjD,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,wBAAwB,CAAC;YAC3D,IAAI,EAAE,IAAc;YACpB,KAAK,EAAE,KAAe;SACzB,CAAC,CAAC;QAEH,MAAM,OAAO,GAAG,IAAA,gCAAmB,EAAC,KAAK,CAAC,YAAY,CAAC,CAAC;QAExD,OAAO;YACH,EAAE,EAAE,OAAO,CAAC,GAAG;YACf,IAAI,EAAE;gBACF,OAAO,CAAC,kBAAkB;gBAC1B,OAAO,CAAC,QAAQ;gBAChB,OAAO,CAAC,GAAG;aACd;YACD,KAAK,EAAE,OAAO,CAAC,KAAK;YACpB,IAAI,EAAE,OAAO;SAChB,CAAC;IACN,CAAC;CACJ;AA3BD,gEA2BC"}

package/dist/domains/identity-provider/flow/factory.js

@@ -6,27 +6,26 @@
  * view the LICENSE file that was distributed with this source code.
  */
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.createOAuth2IdentityProviderFlow = void 0;
-const core_1 = require("@authup/core");
-const core_2 = require("./core");
+exports.createOAuth2IdentityProviderFlow = createOAuth2IdentityProviderFlow;
+const core_kit_1 = require("@authup/core-kit");
+const core_1 = require("./core");
 const social_1 = require("./social");
 function createOAuth2IdentityProviderFlow(provider) {
-    if (provider.preset === core_1.IdentityProviderPreset.FACEBOOK) {
+    if (provider.preset === core_kit_1.IdentityProviderPreset.FACEBOOK) {
         return new social_1.FacebookIdentityProviderFlow(provider);
     }
-    if (provider.preset === core_1.IdentityProviderPreset.GITHUB) {
+    if (provider.preset === core_kit_1.IdentityProviderPreset.GITHUB) {
         return new social_1.GithubIdentityProviderFlow(provider);
     }
-    if (provider.preset === core_1.IdentityProviderPreset.GOOGLE) {
+    if (provider.preset === core_kit_1.IdentityProviderPreset.GOOGLE) {
         return new social_1.GoogleIdentityProviderFlow(provider);
     }
-    if (provider.preset === core_1.IdentityProviderPreset.INSTAGRAM) {
+    if (provider.preset === core_kit_1.IdentityProviderPreset.INSTAGRAM) {
         return new social_1.InstagramIdentityProviderFlow(provider);
     }
-    if (provider.preset === core_1.IdentityProviderPreset.PAYPAL) {
+    if (provider.preset === core_kit_1.IdentityProviderPreset.PAYPAL) {
         return new social_1.PaypalIdentityProviderFlow(provider);
     }
-    return new core_2.OpenIDIdentityProviderFlow(provider);
+    return new core_1.OpenIDIdentityProviderFlow(provider);
 }
-exports.createOAuth2IdentityProviderFlow = createOAuth2IdentityProviderFlow;
 //# sourceMappingURL=factory.js.map

package/dist/domains/identity-provider/flow/factory.js.map

@@ -1 +1 @@
-{"version":3,"file":"factory.js","sourceRoot":"","sources":["../../../../src/domains/identity-provider/flow/factory.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;;AAEH,uCAAsD;AACtD,iCAAoD;AACpD,qCAMkB;AAGlB,SAAgB,gCAAgC,CAC5C,QAA2C;IAE3C,IAAI,QAAQ,CAAC,MAAM,KAAK,6BAAsB,CAAC,QAAQ,EAAE,CAAC;QACtD,OAAO,IAAI,qCAA4B,CAAC,QAAQ,CAAC,CAAC;IACtD,CAAC;IAED,IAAI,QAAQ,CAAC,MAAM,KAAK,6BAAsB,CAAC,MAAM,EAAE,CAAC;QACpD,OAAO,IAAI,mCAA0B,CAAC,QAAQ,CAAC,CAAC;IACpD,CAAC;IAED,IAAI,QAAQ,CAAC,MAAM,KAAK,6BAAsB,CAAC,MAAM,EAAE,CAAC;QACpD,OAAO,IAAI,mCAA0B,CAAC,QAAQ,CAAC,CAAC;IACpD,CAAC;IAED,IAAI,QAAQ,CAAC,MAAM,KAAK,6BAAsB,CAAC,SAAS,EAAE,CAAC;QACvD,OAAO,IAAI,sCAA6B,CAAC,QAAQ,CAAC,CAAC;IACvD,CAAC;IAED,IAAI,QAAQ,CAAC,MAAM,KAAK,6BAAsB,CAAC,MAAM,EAAE,CAAC;QACpD,OAAO,IAAI,mCAA0B,CAAC,QAAQ,CAAC,CAAC;IACpD,CAAC;IAED,OAAO,IAAI,iCAA0B,CAAC,QAAQ,CAAC,CAAC;AACpD,CAAC;AAxBD,4EAwBC"}
+{"version":3,"file":"factory.js","sourceRoot":"","sources":["../../../../src/domains/identity-provider/flow/factory.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;AAaH,4EAwBC;AAnCD,+CAA0D;AAC1D,iCAAoD;AACpD,qCAMkB;AAGlB,SAAgB,gCAAgC,CAC5C,QAA2C;IAE3C,IAAI,QAAQ,CAAC,MAAM,KAAK,iCAAsB,CAAC,QAAQ,EAAE,CAAC;QACtD,OAAO,IAAI,qCAA4B,CAAC,QAAQ,CAAC,CAAC;IACtD,CAAC;IAED,IAAI,QAAQ,CAAC,MAAM,KAAK,iCAAsB,CAAC,MAAM,EAAE,CAAC;QACpD,OAAO,IAAI,mCAA0B,CAAC,QAAQ,CAAC,CAAC;IACpD,CAAC;IAED,IAAI,QAAQ,CAAC,MAAM,KAAK,iCAAsB,CAAC,MAAM,EAAE,CAAC;QACpD,OAAO,IAAI,mCAA0B,CAAC,QAAQ,CAAC,CAAC;IACpD,CAAC;IAED,IAAI,QAAQ,CAAC,MAAM,KAAK,iCAAsB,CAAC,SAAS,EAAE,CAAC;QACvD,OAAO,IAAI,sCAA6B,CAAC,QAAQ,CAAC,CAAC;IACvD,CAAC;IAED,IAAI,QAAQ,CAAC,MAAM,KAAK,iCAAsB,CAAC,MAAM,EAAE,CAAC;QACpD,OAAO,IAAI,mCAA0B,CAAC,QAAQ,CAAC,CAAC;IACpD,CAAC;IAED,OAAO,IAAI,iCAA0B,CAAC,QAAQ,CAAC,CAAC;AACpD,CAAC"}

package/dist/domains/identity-provider/flow/social/facebook.d.ts

@@ -1,8 +1,8 @@
 import type { Request } from 'routup';
 import { OAuth2IdentityProviderFlow } from '../core';
-import type { IOAuth2IdentityProviderFlow, IdentityProviderFlowIdentity, OAuth2IdentityProviderFlowOptions } from '../types';
+import type { IOAuth2IdentityProviderFlow, IdentityProviderIdentity, OAuth2IdentityProviderFlowOptions } from '../types';
 export declare class FacebookIdentityProviderFlow extends OAuth2IdentityProviderFlow implements IOAuth2IdentityProviderFlow {
     constructor(options: OAuth2IdentityProviderFlowOptions);
-    getIdentityForRequest(request: Request): Promise<IdentityProviderFlowIdentity>;
+    getIdentityForRequest(request: Request): Promise<IdentityProviderIdentity>;
 }
 //# sourceMappingURL=facebook.d.ts.map

package/dist/domains/identity-provider/flow/social/facebook.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"facebook.d.ts","sourceRoot":"","sources":["../../../../../src/domains/identity-provider/flow/social/facebook.ts"],"names":[],"mappings":"AAQA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,QAAQ,CAAC;AACtC,OAAO,EAAE,0BAA0B,EAAE,MAAM,SAAS,CAAC;AACrD,OAAO,KAAK,EAAE,2BAA2B,EAAE,4BAA4B,EAAE,iCAAiC,EAAE,MAAM,UAAU,CAAC;AAE7H,qBAAa,4BAA6B,SAAQ,0BAA2B,YAAW,2BAA2B;gBACnG,OAAO,EAAE,iCAAiC;IAShD,qBAAqB,CAAC,OAAO,EAAE,OAAO,GAAG,OAAO,CAAC,4BAA4B,CAAC;CAqBvF"}
+{"version":3,"file":"facebook.d.ts","sourceRoot":"","sources":["../../../../../src/domains/identity-provider/flow/social/facebook.ts"],"names":[],"mappings":"AASA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,QAAQ,CAAC;AACtC,OAAO,EAAE,0BAA0B,EAAE,MAAM,SAAS,CAAC;AACrD,OAAO,KAAK,EAAE,2BAA2B,EAAE,wBAAwB,EAAE,iCAAiC,EAAE,MAAM,UAAU,CAAC;AAEzH,qBAAa,4BAA6B,SAAQ,0BAA2B,YAAW,2BAA2B;gBACnG,OAAO,EAAE,iCAAiC;IAShD,qBAAqB,CAAC,OAAO,EAAE,OAAO,GAAG,OAAO,CAAC,wBAAwB,CAAC;CAwBnF"}

package/dist/domains/identity-provider/flow/social/facebook.js

@@ -7,6 +7,7 @@
  */
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.FacebookIdentityProviderFlow = void 0;
+const server_kit_1 = require("@authup/server-kit");
 const query_1 = require("@routup/basic/query");
 const core_1 = require("../core");
 class FacebookIdentityProviderFlow extends core_1.OAuth2IdentityProviderFlow {
@@ -27,12 +28,14 @@ class FacebookIdentityProviderFlow extends core_1.OAuth2IdentityProviderFlow {
             type: 'Bearer',
             token: token.access_token,
         });
+        const payload = (0, server_kit_1.extractTokenPayload)(token.access_token);
         return {
             id: userInfo.id,
             name: userInfo.username,
             email: userInfo.email,
             first_name: userInfo.first_name,
             last_name: userInfo.last_name,
+            data: payload,
         };
     }
 }

package/dist/domains/identity-provider/flow/social/facebook.js.map

@@ -1 +1 @@
-{"version":3,"file":"facebook.js","sourceRoot":"","sources":["../../../../../src/domains/identity-provider/flow/social/facebook.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;;AAEH,+CAAsD;AAEtD,kCAAqD;AAGrD,MAAa,4BAA6B,SAAQ,iCAA0B;IACxE,YAAY,OAA0C;QAClD,OAAO,CAAC,KAAK,GAAG,OAAO,CAAC;QACxB,OAAO,CAAC,aAAa,GAAG,4CAA4C,CAAC;QACrE,OAAO,CAAC,SAAS,GAAG,+CAA+C,CAAC;QACpE,OAAO,CAAC,aAAa,GAAG,yEAAyE,CAAC;QAElG,KAAK,CAAC,OAAO,CAAC,CAAC;IACnB,CAAC;IAED,KAAK,CAAC,qBAAqB,CAAC,OAAgB;QACxC,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,IAAA,uBAAe,EAAC,OAAO,CAAC,CAAC;QAEjD,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,wBAAwB,CAAC;YAC3D,IAAI,EAAE,IAAc;YACpB,KAAK,EAAE,KAAe;SACzB,CAAC,CAAC;QAEH,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC;YAC5C,IAAI,EAAE,QAAQ;YACd,KAAK,EAAE,KAAK,CAAC,YAAY;SAC5B,CAAC,CAAC;QAEH,OAAO;YACH,EAAE,EAAE,QAAQ,CAAC,EAAE;YACf,IAAI,EAAE,QAAQ,CAAC,QAAQ;YACvB,KAAK,EAAE,QAAQ,CAAC,KAAK;YACrB,UAAU,EAAE,QAAQ,CAAC,UAAU;YAC/B,SAAS,EAAE,QAAQ,CAAC,SAAS;SAChC,CAAC;IACN,CAAC;CACJ;AA/BD,oEA+BC"}
+{"version":3,"file":"facebook.js","sourceRoot":"","sources":["../../../../../src/domains/identity-provider/flow/social/facebook.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;;AAEH,mDAAyD;AACzD,+CAAsD;AAEtD,kCAAqD;AAGrD,MAAa,4BAA6B,SAAQ,iCAA0B;IACxE,YAAY,OAA0C;QAClD,OAAO,CAAC,KAAK,GAAG,OAAO,CAAC;QACxB,OAAO,CAAC,aAAa,GAAG,4CAA4C,CAAC;QACrE,OAAO,CAAC,SAAS,GAAG,+CAA+C,CAAC;QACpE,OAAO,CAAC,aAAa,GAAG,yEAAyE,CAAC;QAElG,KAAK,CAAC,OAAO,CAAC,CAAC;IACnB,CAAC;IAED,KAAK,CAAC,qBAAqB,CAAC,OAAgB;QACxC,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,IAAA,uBAAe,EAAC,OAAO,CAAC,CAAC;QAEjD,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,wBAAwB,CAAC;YAC3D,IAAI,EAAE,IAAc;YACpB,KAAK,EAAE,KAAe;SACzB,CAAC,CAAC;QAEH,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC;YAC5C,IAAI,EAAE,QAAQ;YACd,KAAK,EAAE,KAAK,CAAC,YAAY;SAC5B,CAAC,CAAC;QAEH,MAAM,OAAO,GAAG,IAAA,gCAAmB,EAAC,KAAK,CAAC,YAAY,CAAC,CAAC;QAExD,OAAO;YACH,EAAE,EAAE,QAAQ,CAAC,EAAE;YACf,IAAI,EAAE,QAAQ,CAAC,QAAQ;YACvB,KAAK,EAAE,QAAQ,CAAC,KAAK;YACrB,UAAU,EAAE,QAAQ,CAAC,UAAU;YAC/B,SAAS,EAAE,QAAQ,CAAC,SAAS;YAC7B,IAAI,EAAE,OAAO;SAChB,CAAC;IACN,CAAC;CACJ;AAlCD,oEAkCC"}

package/dist/domains/identity-provider/flow/social/github.d.ts

@@ -1,8 +1,8 @@
 import type { Request } from 'routup';
 import { OAuth2IdentityProviderFlow } from '../core';
-import type { IOAuth2IdentityProviderFlow, IdentityProviderFlowIdentity, OAuth2IdentityProviderFlowOptions } from '../types';
+import type { IOAuth2IdentityProviderFlow, IdentityProviderIdentity, OAuth2IdentityProviderFlowOptions } from '../types';
 export declare class GithubIdentityProviderFlow extends OAuth2IdentityProviderFlow implements IOAuth2IdentityProviderFlow {
     constructor(options: OAuth2IdentityProviderFlowOptions);
-    getIdentityForRequest(request: Request): Promise<IdentityProviderFlowIdentity>;
+    getIdentityForRequest(request: Request): Promise<IdentityProviderIdentity>;
 }
 //# sourceMappingURL=github.d.ts.map

package/dist/domains/identity-provider/flow/social/github.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"github.d.ts","sourceRoot":"","sources":["../../../../../src/domains/identity-provider/flow/social/github.ts"],"names":[],"mappings":"AAQA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,QAAQ,CAAC;AACtC,OAAO,EAAE,0BAA0B,EAAE,MAAM,SAAS,CAAC;AACrD,OAAO,KAAK,EAAE,2BAA2B,EAAE,4BAA4B,EAAE,iCAAiC,EAAE,MAAM,UAAU,CAAC;AAE7H,qBAAa,0BAA2B,SAAQ,0BAA2B,YAAW,2BAA2B;gBACjG,OAAO,EAAE,iCAAiC;IAShD,qBAAqB,CAAC,OAAO,EAAE,OAAO,GAAG,OAAO,CAAC,4BAA4B,CAAC;CAsBvF"}
+{"version":3,"file":"github.d.ts","sourceRoot":"","sources":["../../../../../src/domains/identity-provider/flow/social/github.ts"],"names":[],"mappings":"AASA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,QAAQ,CAAC;AACtC,OAAO,EAAE,0BAA0B,EAAE,MAAM,SAAS,CAAC;AACrD,OAAO,KAAK,EAAE,2BAA2B,EAAE,wBAAwB,EAAE,iCAAiC,EAAE,MAAM,UAAU,CAAC;AAEzH,qBAAa,0BAA2B,SAAQ,0BAA2B,YAAW,2BAA2B;gBACjG,OAAO,EAAE,iCAAiC;IAShD,qBAAqB,CAAC,OAAO,EAAE,OAAO,GAAG,OAAO,CAAC,wBAAwB,CAAC;CAyBnF"}

package/dist/domains/identity-provider/flow/social/github.js

@@ -7,6 +7,7 @@
  */
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.GithubIdentityProviderFlow = void 0;
+const server_kit_1 = require("@authup/server-kit");
 const query_1 = require("@routup/basic/query");
 const core_1 = require("../core");
 class GithubIdentityProviderFlow extends core_1.OAuth2IdentityProviderFlow {
@@ -27,6 +28,7 @@ class GithubIdentityProviderFlow extends core_1.OAuth2IdentityProviderFlow {
             type: 'Bearer',
             token: token.access_token,
         });
+        const claims = (0, server_kit_1.extractTokenPayload)(token.access_token);
         return {
             id: userInfo.id,
             name: [
@@ -34,6 +36,7 @@ class GithubIdentityProviderFlow extends core_1.OAuth2IdentityProviderFlow {
                 userInfo.name,
             ],
             email: userInfo.email,
+            data: claims,
         };
     }
 }

package/dist/domains/identity-provider/flow/social/github.js.map

@@ -1 +1 @@
-{"version":3,"file":"github.js","sourceRoot":"","sources":["../../../../../src/domains/identity-provider/flow/social/github.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;;AAEH,+CAAsD;AAEtD,kCAAqD;AAGrD,MAAa,0BAA2B,SAAQ,iCAA0B;IACtE,YAAY,OAA0C;QAClD,OAAO,CAAC,KAAK,GAAG,YAAY,CAAC;QAC7B,OAAO,CAAC,aAAa,GAAG,0CAA0C,CAAC;QACnE,OAAO,CAAC,SAAS,GAAG,6CAA6C,CAAC;QAClE,OAAO,CAAC,aAAa,GAAG,6BAA6B,CAAC;QAEtD,KAAK,CAAC,OAAO,CAAC,CAAC;IACnB,CAAC;IAED,KAAK,CAAC,qBAAqB,CAAC,OAAgB;QACxC,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,IAAA,uBAAe,EAAC,OAAO,CAAC,CAAC;QAEjD,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,wBAAwB,CAAC;YAC3D,IAAI,EAAE,IAAc;YACpB,KAAK,EAAE,KAAe;SACzB,CAAC,CAAC;QAEH,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC;YAC5C,IAAI,EAAE,QAAQ;YACd,KAAK,EAAE,KAAK,CAAC,YAAY;SAC5B,CAAC,CAAC;QAEH,OAAO;YACH,EAAE,EAAE,QAAQ,CAAC,EAAE;YACf,IAAI,EAAE;gBACF,QAAQ,CAAC,KAAK;gBACd,QAAQ,CAAC,IAAI;aAChB;YACD,KAAK,EAAE,QAAQ,CAAC,KAAK;SACxB,CAAC;IACN,CAAC;CACJ;AAhCD,gEAgCC"}
+{"version":3,"file":"github.js","sourceRoot":"","sources":["../../../../../src/domains/identity-provider/flow/social/github.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;;AAEH,mDAAyD;AACzD,+CAAsD;AAEtD,kCAAqD;AAGrD,MAAa,0BAA2B,SAAQ,iCAA0B;IACtE,YAAY,OAA0C;QAClD,OAAO,CAAC,KAAK,GAAG,YAAY,CAAC;QAC7B,OAAO,CAAC,aAAa,GAAG,0CAA0C,CAAC;QACnE,OAAO,CAAC,SAAS,GAAG,6CAA6C,CAAC;QAClE,OAAO,CAAC,aAAa,GAAG,6BAA6B,CAAC;QAEtD,KAAK,CAAC,OAAO,CAAC,CAAC;IACnB,CAAC;IAED,KAAK,CAAC,qBAAqB,CAAC,OAAgB;QACxC,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,IAAA,uBAAe,EAAC,OAAO,CAAC,CAAC;QAEjD,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,wBAAwB,CAAC;YAC3D,IAAI,EAAE,IAAc;YACpB,KAAK,EAAE,KAAe;SACzB,CAAC,CAAC;QAEH,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC;YAC5C,IAAI,EAAE,QAAQ;YACd,KAAK,EAAE,KAAK,CAAC,YAAY;SAC5B,CAAC,CAAC;QAEH,MAAM,MAAM,GAAG,IAAA,gCAAmB,EAAC,KAAK,CAAC,YAAY,CAAC,CAAC;QAEvD,OAAO;YACH,EAAE,EAAE,QAAQ,CAAC,EAAE;YACf,IAAI,EAAE;gBACF,QAAQ,CAAC,KAAK;gBACd,QAAQ,CAAC,IAAI;aAChB;YACD,KAAK,EAAE,QAAQ,CAAC,KAAK;YACrB,IAAI,EAAE,MAAM;SACf,CAAC;IACN,CAAC;CACJ;AAnCD,gEAmCC"}