@authup/server-core 1.0.0-beta.2 → 1.0.0-beta.21

package/dist/http/controllers/user-attribute/utils/validation.js

@@ -6,55 +6,32 @@
  * view the LICENSE file that was distributed with this source code.
  */
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.runUserAttributeValidation = void 0;
-const express_validator_1 = require("express-validator");
-const domains_1 = require("../../../../domains");
-const env_1 = require("../../../utils/env");
-const validation_1 = require("../../../validation");
-const constants_1 = require("../../../request/constants");
-async function runUserAttributeValidation(req, operation) {
-    const result = (0, validation_1.initExpressValidationResult)();
-    if (operation === constants_1.RequestHandlerOperation.CREATE) {
-        await (0, express_validator_1.check)('name')
+exports.UserAttributeRequestValidator = void 0;
+const adapter_validator_1 = require("@validup/adapter-validator");
+const validup_1 = require("validup");
+const request_1 = require("../../../request");
+class UserAttributeRequestValidator extends validup_1.Container {
+    constructor(options = {}) {
+        super(options);
+        this.mountAll();
+    }
+    mountAll() {
+        this.mount('name', { group: request_1.RequestHandlerOperation.CREATE }, (0, adapter_validator_1.createValidator)((chain) => chain
             .exists()
             .notEmpty()
             .isString()
-            .isLength({ min: 3, max: 255 })
-            .run(req);
-        await (0, express_validator_1.check)('user_id')
+            .isLength({ min: 3, max: 255 })));
+        this.mount('user_id', { group: request_1.RequestHandlerOperation.CREATE }, (0, adapter_validator_1.createValidator)((chain) => chain
             .exists()
             .isUUID()
-            .optional();
-    }
-    await (0, express_validator_1.check)('value')
-        .exists()
-        .notEmpty()
-        .isString()
-        .isLength({ min: 3, max: 512 })
-        .optional({ nullable: true })
-        .run(req);
-    // ----------------------------------------------
-    const validation = (0, express_validator_1.validationResult)(req);
-    if (!validation.isEmpty()) {
-        throw new validation_1.RequestValidationError(validation);
-    }
-    result.data = (0, validation_1.matchedValidationData)(req, { includeOptionals: true });
-    if (operation === constants_1.RequestHandlerOperation.CREATE) {
-        await (0, validation_1.extendExpressValidationResultWithRelation)(result, domains_1.UserEntity, {
-            id: 'user_id',
-            entity: 'user',
-        });
-        if (result.relation.user) {
-            result.data.realm_id = result.relation.user.realm_id;
-            result.data.user_id = result.relation.user.id;
-        }
-        else {
-            const { id } = (0, env_1.useRequestEnv)(req, 'realm');
-            result.data.realm_id = id;
-            result.data.user_id = (0, env_1.useRequestEnv)(req, 'userId');
-        }
+            .optional({ values: 'null' })));
+        this.mount('value', (0, adapter_validator_1.createValidator)((chain) => chain
+            .exists()
+            .notEmpty()
+            .isString()
+            .isLength({ min: 3, max: 512 })
+            .optional({ nullable: true })));
     }
-    return result;
 }
-exports.runUserAttributeValidation = runUserAttributeValidation;
+exports.UserAttributeRequestValidator = UserAttributeRequestValidator;
 //# sourceMappingURL=validation.js.map

package/dist/http/controllers/user-attribute/utils/validation.js.map

@@ -1 +1 @@
-{"version":3,"file":"validation.js","sourceRoot":"","sources":["../../../../../src/http/controllers/user-attribute/utils/validation.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;;AAEH,yDAA4D;AAG5D,iDAAiD;AACjD,4CAAmD;AAEnD,oDAI6B;AAC7B,0DAAqE;AAE9D,KAAK,UAAU,0BAA0B,CAC5C,GAAY,EACZ,SAAoF;IAEpF,MAAM,MAAM,GAAkD,IAAA,wCAA2B,GAAE,CAAC;IAE5F,IAAI,SAAS,KAAK,mCAAuB,CAAC,MAAM,EAAE,CAAC;QAC/C,MAAM,IAAA,yBAAK,EAAC,MAAM,CAAC;aACd,MAAM,EAAE;aACR,QAAQ,EAAE;aACV,QAAQ,EAAE;aACV,QAAQ,CAAC,EAAE,GAAG,EAAE,CAAC,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC;aAC9B,GAAG,CAAC,GAAG,CAAC,CAAC;QAEd,MAAM,IAAA,yBAAK,EAAC,SAAS,CAAC;aACjB,MAAM,EAAE;aACR,MAAM,EAAE;aACR,QAAQ,EAAE,CAAC;IACpB,CAAC;IAED,MAAM,IAAA,yBAAK,EAAC,OAAO,CAAC;SACf,MAAM,EAAE;SACR,QAAQ,EAAE;SACV,QAAQ,EAAE;SACV,QAAQ,CAAC,EAAE,GAAG,EAAE,CAAC,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC;SAC9B,QAAQ,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;SAC5B,GAAG,CAAC,GAAG,CAAC,CAAC;IAEd,iDAAiD;IAEjD,MAAM,UAAU,GAAG,IAAA,oCAAgB,EAAC,GAAG,CAAC,CAAC;IACzC,IAAI,CAAC,UAAU,CAAC,OAAO,EAAE,EAAE,CAAC;QACxB,MAAM,IAAI,mCAAsB,CAAC,UAAU,CAAC,CAAC;IACjD,CAAC;IAED,MAAM,CAAC,IAAI,GAAG,IAAA,kCAAqB,EAAC,GAAG,EAAE,EAAE,gBAAgB,EAAE,IAAI,EAAE,CAAC,CAAC;IAErE,IAAI,SAAS,KAAK,mCAAuB,CAAC,MAAM,EAAE,CAAC;QAC/C,MAAM,IAAA,sDAAyC,EAAC,MAAM,EAAE,oBAAU,EAAE;YAChE,EAAE,EAAE,SAAS;YACb,MAAM,EAAE,MAAM;SACjB,CAAC,CAAC;QAEH,IAAI,MAAM,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC;YACvB,MAAM,CAAC,IAAI,CAAC,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC;YACrD,MAAM,CAAC,IAAI,CAAC,OAAO,GAAG,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QAClD,CAAC;aAAM,CAAC;YACJ,MAAM,EAAE,EAAE,EAAE,GAAG,IAAA,mBAAa,EAAC,GAAG,EAAE,OAAO,CAAC,CAAC;YAC3C,MAAM,CAAC,IAAI,CAAC,QAAQ,GAAG,EAAE,CAAC;YAC1B,MAAM,CAAC,IAAI,CAAC,OAAO,GAAG,IAAA,mBAAa,EAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;QACvD,CAAC;IACL,CAAC;IAED,OAAO,MAAM,CAAC;AAClB,CAAC;AAtDD,gEAsDC"}
+{"version":3,"file":"validation.js","sourceRoot":"","sources":["../../../../../src/http/controllers/user-attribute/utils/validation.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;;AAEH,kEAA6D;AAE7D,qCAAoC;AAEpC,8CAA2D;AAE3D,MAAa,6BAA8B,SAAQ,mBAElD;IACG,YAAY,UAAiD,EAAE;QAC3D,KAAK,CAAC,OAAO,CAAC,CAAC;QAEf,IAAI,CAAC,QAAQ,EAAE,CAAC;IACpB,CAAC;IAED,QAAQ;QACJ,IAAI,CAAC,KAAK,CACN,MAAM,EACN,EAAE,KAAK,EAAE,iCAAuB,CAAC,MAAM,EAAE,EACzC,IAAA,mCAAe,EAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK;aAC3B,MAAM,EAAE;aACR,QAAQ,EAAE;aACV,QAAQ,EAAE;aACV,QAAQ,CAAC,EAAE,GAAG,EAAE,CAAC,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,CAAC,CACvC,CAAC;QAEF,IAAI,CAAC,KAAK,CACN,SAAS,EACT,EAAE,KAAK,EAAE,iCAAuB,CAAC,MAAM,EAAE,EACzC,IAAA,mCAAe,EAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK;aAC3B,MAAM,EAAE;aACR,MAAM,EAAE;aACR,QAAQ,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC,CACrC,CAAC;QAEF,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,IAAA,mCAAe,EAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK;aAC/C,MAAM,EAAE;aACR,QAAQ,EAAE;aACV,QAAQ,EAAE;aACV,QAAQ,CAAC,EAAE,GAAG,EAAE,CAAC,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC;aAC9B,QAAQ,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;IACxC,CAAC;CACJ;AApCD,sEAoCC"}

package/dist/http/controllers/user-permission/handlers/create.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"create.d.ts","sourceRoot":"","sources":["../../../../../src/http/controllers/user-permission/handlers/create.ts"],"names":[],"mappings":"AASA,OAAO,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,QAAQ,CAAC;AAQhD;;;;;GAKG;AACH,wBAAsB,gCAAgC,CAAC,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,QAAQ,GAAI,OAAO,CAAC,GAAG,CAAC,CAmBjG"}
+{"version":3,"file":"create.d.ts","sourceRoot":"","sources":["../../../../../src/http/controllers/user-permission/handlers/create.ts"],"names":[],"mappings":"AAUA,OAAO,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,QAAQ,CAAC;AAQhD;;;;;GAKG;AACH,wBAAsB,gCAAgC,CAAC,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,QAAQ,GAAI,OAAO,CAAC,GAAG,CAAC,CAmDjG"}

package/dist/http/controllers/user-permission/handlers/create.js

@@ -6,15 +6,14 @@
  * view the LICENSE file that was distributed with this source code.
  */
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.createUserPermissionRouteHandler = void 0;
-const http_1 = require("@ebec/http");
-const core_1 = require("@authup/core");
+exports.createUserPermissionRouteHandler = createUserPermissionRouteHandler;
+const core_kit_1 = require("@authup/core-kit");
 const routup_1 = require("routup");
 const typeorm_extension_1 = require("typeorm-extension");
+const adapter_routup_1 = require("@validup/adapter-routup");
 const domains_1 = require("../../../../domains");
-const env_1 = require("../../../utils/env");
 const utils_1 = require("../utils");
-const constants_1 = require("../../../request/constants");
+const request_1 = require("../../../request");
 /**
  * Add a permission by id to a specific user.
  *
@@ -22,18 +21,41 @@ const constants_1 = require("../../../request/constants");
  * @param res
  */
 async function createUserPermissionRouteHandler(req, res) {
-    const ability = (0, env_1.useRequestEnv)(req, 'ability');
-    if (!ability.has(core_1.PermissionName.USER_PERMISSION_ADD)) {
-        throw new http_1.ForbiddenError();
+    const permissionChecker = (0, request_1.useRequestEnv)(req, 'permissionChecker');
+    await permissionChecker.preCheck({ name: core_kit_1.PermissionName.USER_PERMISSION_CREATE });
+    // ----------------------------------------------
+    const validator = new utils_1.UserPermissionRequestValidator();
+    const validatorAdapter = new adapter_routup_1.RoutupContainerAdapter(validator);
+    const data = await validatorAdapter.run(req, {
+        group: request_1.RequestHandlerOperation.CREATE,
+    });
+    const dataSource = await (0, typeorm_extension_1.useDataSource)();
+    await (0, typeorm_extension_1.validateEntityJoinColumns)(data, {
+        dataSource,
+        entityTarget: domains_1.UserPermissionEntity,
+    });
+    // ----------------------------------------------
+    if (data.permission) {
+        data.permission_realm_id = data.permission.realm_id;
+        await permissionChecker.preCheck({
+            name: data.permission.name,
+        });
     }
     // ----------------------------------------------
-    const result = await (0, utils_1.runUserPermissionValidation)(req, constants_1.RequestHandlerOperation.CREATE);
+    if (data.user) {
+        data.user_realm_id = data.user.realm_id;
+    }
+    // ----------------------------------------------
+    await permissionChecker.check({
+        name: core_kit_1.PermissionName.USER_PERMISSION_CREATE,
+        data: {
+            attributes: data,
+        },
+    });
     // ----------------------------------------------
-    const dataSource = await (0, typeorm_extension_1.useDataSource)();
     const repository = dataSource.getRepository(domains_1.UserPermissionEntity);
-    let entity = repository.create(result.data);
+    let entity = repository.create(data);
     entity = await repository.save(entity);
     return (0, routup_1.sendCreated)(res, entity);
 }
-exports.createUserPermissionRouteHandler = createUserPermissionRouteHandler;
 //# sourceMappingURL=create.js.map

package/dist/http/controllers/user-permission/handlers/create.js.map

@@ -1 +1 @@
-{"version":3,"file":"create.js","sourceRoot":"","sources":["../../../../../src/http/controllers/user-permission/handlers/create.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;;AAEH,qCAA4C;AAC5C,uCAA8C;AAE9C,mCAAqC;AACrC,yDAAkD;AAClD,iDAA2D;AAC3D,4CAAmD;AACnD,oCAAuD;AACvD,0DAAqE;AAErE;;;;;GAKG;AACI,KAAK,UAAU,gCAAgC,CAAC,GAAY,EAAE,GAAa;IAC9E,MAAM,OAAO,GAAG,IAAA,mBAAa,EAAC,GAAG,EAAE,SAAS,CAAC,CAAC;IAC9C,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,qBAAc,CAAC,mBAAmB,CAAC,EAAE,CAAC;QACnD,MAAM,IAAI,qBAAc,EAAE,CAAC;IAC/B,CAAC;IAED,iDAAiD;IAEjD,MAAM,MAAM,GAAG,MAAM,IAAA,mCAA2B,EAAC,GAAG,EAAE,mCAAuB,CAAC,MAAM,CAAC,CAAC;IAEtF,iDAAiD;IAEjD,MAAM,UAAU,GAAG,MAAM,IAAA,iCAAa,GAAE,CAAC;IACzC,MAAM,UAAU,GAAG,UAAU,CAAC,aAAa,CAAC,8BAAoB,CAAC,CAAC;IAClE,IAAI,MAAM,GAAG,UAAU,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IAE5C,MAAM,GAAG,MAAM,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAEvC,OAAO,IAAA,oBAAW,EAAC,GAAG,EAAE,MAAM,CAAC,CAAC;AACpC,CAAC;AAnBD,4EAmBC"}
+{"version":3,"file":"create.js","sourceRoot":"","sources":["../../../../../src/http/controllers/user-permission/handlers/create.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;AAmBH,4EAmDC;AApED,+CAE0B;AAE1B,mCAAqC;AACrC,yDAA6E;AAC7E,4DAAiE;AACjE,iDAA2D;AAC3D,oCAA0D;AAC1D,8CAA0E;AAE1E;;;;;GAKG;AACI,KAAK,UAAU,gCAAgC,CAAC,GAAY,EAAE,GAAa;IAC9E,MAAM,iBAAiB,GAAG,IAAA,uBAAa,EAAC,GAAG,EAAE,mBAAmB,CAAC,CAAC;IAClE,MAAM,iBAAiB,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,yBAAc,CAAC,sBAAsB,EAAE,CAAC,CAAC;IAElF,iDAAiD;IAEjD,MAAM,SAAS,GAAG,IAAI,sCAA8B,EAAE,CAAC;IACvD,MAAM,gBAAgB,GAAG,IAAI,uCAAsB,CAAC,SAAS,CAAC,CAAC;IAC/D,MAAM,IAAI,GAAG,MAAM,gBAAgB,CAAC,GAAG,CAAC,GAAG,EAAE;QACzC,KAAK,EAAE,iCAAuB,CAAC,MAAM;KACxC,CAAC,CAAC;IAEH,MAAM,UAAU,GAAG,MAAM,IAAA,iCAAa,GAAE,CAAC;IACzC,MAAM,IAAA,6CAAyB,EAAC,IAAI,EAAE;QAClC,UAAU;QACV,YAAY,EAAE,8BAAoB;KACrC,CAAC,CAAC;IAEH,iDAAiD;IAEjD,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;QAClB,IAAI,CAAC,mBAAmB,GAAG,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC;QAEpD,MAAM,iBAAiB,CAAC,QAAQ,CAAC;YAC7B,IAAI,EAAE,IAAI,CAAC,UAAU,CAAC,IAAI;SAC7B,CAAC,CAAC;IACP,CAAC;IAED,iDAAiD;IAEjD,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;QACZ,IAAI,CAAC,aAAa,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC;IAC5C,CAAC;IAED,iDAAiD;IAEjD,MAAM,iBAAiB,CAAC,KAAK,CAAC;QAC1B,IAAI,EAAE,yBAAc,CAAC,sBAAsB;QAC3C,IAAI,EAAE;YACF,UAAU,EAAE,IAAI;SACnB;KACJ,CAAC,CAAC;IAEH,iDAAiD;IAEjD,MAAM,UAAU,GAAG,UAAU,CAAC,aAAa,CAAC,8BAAoB,CAAC,CAAC;IAClE,IAAI,MAAM,GAAG,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IAErC,MAAM,GAAG,MAAM,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAEvC,OAAO,IAAA,oBAAW,EAAC,GAAG,EAAE,MAAM,CAAC,CAAC;AACpC,CAAC"}

package/dist/http/controllers/user-permission/handlers/delete.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"delete.d.ts","sourceRoot":"","sources":["../../../../../src/http/controllers/user-permission/handlers/delete.ts"],"names":[],"mappings":"AASA,OAAO,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,QAAQ,CAAC;AAMhD;;;;;GAKG;AACH,wBAAsB,gCAAgC,CAAC,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,QAAQ,GAAI,OAAO,CAAC,GAAG,CAAC,CAyCjG"}
+{"version":3,"file":"delete.d.ts","sourceRoot":"","sources":["../../../../../src/http/controllers/user-permission/handlers/delete.ts"],"names":[],"mappings":"AASA,OAAO,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,QAAQ,CAAC;AAMhD;;;;;GAKG;AACH,wBAAsB,gCAAgC,CAAC,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,QAAQ,GAAI,OAAO,CAAC,GAAG,CAAC,CA0CjG"}

package/dist/http/controllers/user-permission/handlers/delete.js

@@ -6,13 +6,13 @@
  * view the LICENSE file that was distributed with this source code.
  */
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.deleteUserPermissionRouteHandler = void 0;
+exports.deleteUserPermissionRouteHandler = deleteUserPermissionRouteHandler;
 const http_1 = require("@ebec/http");
-const core_1 = require("@authup/core");
+const core_kit_1 = require("@authup/core-kit");
 const routup_1 = require("routup");
 const typeorm_extension_1 = require("typeorm-extension");
 const domains_1 = require("../../../../domains");
-const env_1 = require("../../../utils/env");
+const request_1 = require("../../../request");
 /**
  * Drop a permission by id of a specific user.
  *
@@ -20,25 +20,30 @@ const env_1 = require("../../../utils/env");
  * @param res
  */
 async function deleteUserPermissionRouteHandler(req, res) {
-    const id = (0, routup_1.useRequestParam)(req, 'id');
-    const ability = (0, env_1.useRequestEnv)(req, 'ability');
-    if (!ability.has(core_1.PermissionName.USER_PERMISSION_DROP)) {
-        throw new http_1.ForbiddenError();
-    }
+    const id = (0, request_1.useRequestParamID)(req);
+    const permissionChecker = (0, request_1.useRequestEnv)(req, 'permissionChecker');
+    await permissionChecker.preCheck({ name: core_kit_1.PermissionName.USER_PERMISSION_DELETE });
     const dataSource = await (0, typeorm_extension_1.useDataSource)();
     const repository = dataSource.getRepository(domains_1.UserPermissionEntity);
-    const entity = await repository.findOneBy({ id });
+    const entity = await repository.findOne({
+        where: {
+            id,
+        },
+        relations: {
+            user: true,
+            permission: true,
+        },
+    });
     if (!entity) {
         throw new http_1.NotFoundError();
     }
     // ----------------------------------------------
-    if (!(0, core_1.isRealmResourceWritable)((0, env_1.useRequestEnv)(req, 'realm'), entity.user_realm_id)) {
-        throw new http_1.ForbiddenError();
-    }
-    // ----------------------------------------------
-    if (!ability.matchTarget(core_1.PermissionName.USER_PERMISSION_DROP, entity.target)) {
-        throw new http_1.ForbiddenError('You are not permitted for the role-permission target.');
-    }
+    await permissionChecker.check({
+        name: core_kit_1.PermissionName.USER_PERMISSION_DELETE,
+        data: {
+            attributes: entity,
+        },
+    });
     // ----------------------------------------------
     const { id: entityId } = entity;
     await repository.remove(entity);
@@ -46,5 +51,4 @@ async function deleteUserPermissionRouteHandler(req, res) {
     // ----------------------------------------------
     return (0, routup_1.sendAccepted)(res, entity);
 }
-exports.deleteUserPermissionRouteHandler = deleteUserPermissionRouteHandler;
 //# sourceMappingURL=delete.js.map

package/dist/http/controllers/user-permission/handlers/delete.js.map

@@ -1 +1 @@
-{"version":3,"file":"delete.js","sourceRoot":"","sources":["../../../../../src/http/controllers/user-permission/handlers/delete.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;;AAEH,qCAA2D;AAC3D,uCAAuE;AAEvE,mCAAuD;AACvD,yDAAkD;AAClD,iDAA2D;AAC3D,4CAAmD;AAEnD;;;;;GAKG;AACI,KAAK,UAAU,gCAAgC,CAAC,GAAY,EAAE,GAAa;IAC9E,MAAM,EAAE,GAAG,IAAA,wBAAe,EAAC,GAAG,EAAE,IAAI,CAAC,CAAC;IAEtC,MAAM,OAAO,GAAG,IAAA,mBAAa,EAAC,GAAG,EAAE,SAAS,CAAC,CAAC;IAC9C,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,qBAAc,CAAC,oBAAoB,CAAC,EAAE,CAAC;QACpD,MAAM,IAAI,qBAAc,EAAE,CAAC;IAC/B,CAAC;IAED,MAAM,UAAU,GAAG,MAAM,IAAA,iCAAa,GAAE,CAAC;IACzC,MAAM,UAAU,GAAG,UAAU,CAAC,aAAa,CAAC,8BAAoB,CAAC,CAAC;IAClE,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,SAAS,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;IAElD,IAAI,CAAC,MAAM,EAAE,CAAC;QACV,MAAM,IAAI,oBAAa,EAAE,CAAC;IAC9B,CAAC;IAED,iDAAiD;IAEjD,IACI,CAAC,IAAA,8BAAuB,EAAC,IAAA,mBAAa,EAAC,GAAG,EAAE,OAAO,CAAC,EAAE,MAAM,CAAC,aAAa,CAAC,EAC7E,CAAC;QACC,MAAM,IAAI,qBAAc,EAAE,CAAC;IAC/B,CAAC;IAED,iDAAiD;IAEjD,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,qBAAc,CAAC,oBAAoB,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC;QAC3E,MAAM,IAAI,qBAAc,CAAC,uDAAuD,CAAC,CAAC;IACtF,CAAC;IAED,iDAAiD;IAEjD,MAAM,EAAE,EAAE,EAAE,QAAQ,EAAE,GAAG,MAAM,CAAC;IAEhC,MAAM,UAAU,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAEhC,MAAM,CAAC,EAAE,GAAG,QAAQ,CAAC;IAErB,iDAAiD;IAEjD,OAAO,IAAA,qBAAY,EAAC,GAAG,EAAE,MAAM,CAAC,CAAC;AACrC,CAAC;AAzCD,4EAyCC"}
+{"version":3,"file":"delete.js","sourceRoot":"","sources":["../../../../../src/http/controllers/user-permission/handlers/delete.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;AAgBH,4EA0CC;AAxDD,qCAA2C;AAC3C,+CAAkD;AAElD,mCAAsC;AACtC,yDAAkD;AAClD,iDAA2D;AAC3D,8CAAoE;AAEpE;;;;;GAKG;AACI,KAAK,UAAU,gCAAgC,CAAC,GAAY,EAAE,GAAa;IAC9E,MAAM,EAAE,GAAG,IAAA,2BAAiB,EAAC,GAAG,CAAC,CAAC;IAElC,MAAM,iBAAiB,GAAG,IAAA,uBAAa,EAAC,GAAG,EAAE,mBAAmB,CAAC,CAAC;IAClE,MAAM,iBAAiB,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,yBAAc,CAAC,sBAAsB,EAAE,CAAC,CAAC;IAElF,MAAM,UAAU,GAAG,MAAM,IAAA,iCAAa,GAAE,CAAC;IACzC,MAAM,UAAU,GAAG,UAAU,CAAC,aAAa,CAAC,8BAAoB,CAAC,CAAC;IAClE,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,OAAO,CAAC;QACpC,KAAK,EAAE;YACH,EAAE;SACL;QACD,SAAS,EAAE;YACP,IAAI,EAAE,IAAI;YACV,UAAU,EAAE,IAAI;SACnB;KACJ,CAAC,CAAC;IAEH,IAAI,CAAC,MAAM,EAAE,CAAC;QACV,MAAM,IAAI,oBAAa,EAAE,CAAC;IAC9B,CAAC;IAED,iDAAiD;IAEjD,MAAM,iBAAiB,CAAC,KAAK,CAAC;QAC1B,IAAI,EAAE,yBAAc,CAAC,sBAAsB;QAC3C,IAAI,EAAE;YACF,UAAU,EAAE,MAAM;SACrB;KACJ,CAAC,CAAC;IAEH,iDAAiD;IAEjD,MAAM,EAAE,EAAE,EAAE,QAAQ,EAAE,GAAG,MAAM,CAAC;IAEhC,MAAM,UAAU,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAEhC,MAAM,CAAC,EAAE,GAAG,QAAQ,CAAC;IAErB,iDAAiD;IAEjD,OAAO,IAAA,qBAAY,EAAC,GAAG,EAAE,MAAM,CAAC,CAAC;AACrC,CAAC"}

package/dist/http/controllers/user-permission/handlers/read.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"read.d.ts","sourceRoot":"","sources":["../../../../../src/http/controllers/user-permission/handlers/read.ts"],"names":[],"mappings":"AAQA,OAAO,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,QAAQ,CAAC;AAQhD;;;;;GAKG;AACH,wBAAsB,iCAAiC,CAAC,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,QAAQ,GAAI,OAAO,CAAC,GAAG,CAAC,CAwBlG;AAID;;;;;GAKG;AACH,wBAAsB,gCAAgC,CAAC,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,QAAQ,GAAI,OAAO,CAAC,GAAG,CAAC,CAYjG"}
+{"version":3,"file":"read.d.ts","sourceRoot":"","sources":["../../../../../src/http/controllers/user-permission/handlers/read.ts"],"names":[],"mappings":"AASA,OAAO,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,QAAQ,CAAC;AAShD;;;;;GAKG;AACH,wBAAsB,iCAAiC,CAAC,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,QAAQ,GAAI,OAAO,CAAC,GAAG,CAAC,CAiClG;AAID;;;;;GAKG;AACH,wBAAsB,gCAAgC,CAAC,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,QAAQ,GAAI,OAAO,CAAC,GAAG,CAAC,CAqBjG"}

package/dist/http/controllers/user-permission/handlers/read.js

@@ -6,12 +6,15 @@
  * view the LICENSE file that was distributed with this source code.
  */
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.getOneUserPermissionRouteHandler = exports.getManyUserPermissionRouteHandler = void 0;
+exports.getManyUserPermissionRouteHandler = getManyUserPermissionRouteHandler;
+exports.getOneUserPermissionRouteHandler = getOneUserPermissionRouteHandler;
+const core_kit_1 = require("@authup/core-kit");
 const query_1 = require("@routup/basic/query");
 const routup_1 = require("routup");
 const typeorm_extension_1 = require("typeorm-extension");
 const http_1 = require("@ebec/http");
 const domains_1 = require("../../../../domains");
+const request_1 = require("../../../request");
 /**
  * Receive user permissions of a specific user.
  *
@@ -19,6 +22,14 @@ const domains_1 = require("../../../../domains");
  * @param res
  */
 async function getManyUserPermissionRouteHandler(req, res) {
+    const permissionChecker = (0, request_1.useRequestEnv)(req, 'permissionChecker');
+    await permissionChecker.preCheckOneOf({
+        name: [
+            core_kit_1.PermissionName.USER_PERMISSION_CREATE,
+            core_kit_1.PermissionName.USER_PERMISSION_DELETE,
+            core_kit_1.PermissionName.USER_PERMISSION_READ,
+        ],
+    });
     const dataSource = await (0, typeorm_extension_1.useDataSource)();
     const robotPermissionRepository = dataSource.getRepository(domains_1.UserPermissionEntity);
     const query = robotPermissionRepository.createQueryBuilder('userPermission');
@@ -40,7 +51,6 @@ async function getManyUserPermissionRouteHandler(req, res) {
         },
     });
 }
-exports.getManyUserPermissionRouteHandler = getManyUserPermissionRouteHandler;
 // ---------------------------------------------------------------------------------
 /**
  * Receive a specific permission of a specific user.
@@ -49,7 +59,15 @@ exports.getManyUserPermissionRouteHandler = getManyUserPermissionRouteHandler;
  * @param res
  */
 async function getOneUserPermissionRouteHandler(req, res) {
-    const id = (0, routup_1.useRequestParam)(req, 'id');
+    const permissionChecker = (0, request_1.useRequestEnv)(req, 'permissionChecker');
+    await permissionChecker.preCheckOneOf({
+        name: [
+            core_kit_1.PermissionName.USER_PERMISSION_CREATE,
+            core_kit_1.PermissionName.USER_PERMISSION_DELETE,
+            core_kit_1.PermissionName.USER_PERMISSION_READ,
+        ],
+    });
+    const id = (0, request_1.useRequestParamID)(req);
     const dataSource = await (0, typeorm_extension_1.useDataSource)();
     const robotPermissionRepository = dataSource.getRepository(domains_1.UserPermissionEntity);
     const entity = await robotPermissionRepository.findOneBy({ id });
@@ -58,5 +76,4 @@ async function getOneUserPermissionRouteHandler(req, res) {
     }
     return (0, routup_1.send)(res, entity);
 }
-exports.getOneUserPermissionRouteHandler = getOneUserPermissionRouteHandler;
 //# sourceMappingURL=read.js.map

package/dist/http/controllers/user-permission/handlers/read.js.map

@@ -1 +1 @@
-{"version":3,"file":"read.js","sourceRoot":"","sources":["../../../../../src/http/controllers/user-permission/handlers/read.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;;AAEH,+CAAsD;AAEtD,mCAA+C;AAC/C,yDAE2B;AAC3B,qCAA2C;AAC3C,iDAA2D;AAE3D;;;;;GAKG;AACI,KAAK,UAAU,iCAAiC,CAAC,GAAY,EAAE,GAAa;IAC/E,MAAM,UAAU,GAAG,MAAM,IAAA,iCAAa,GAAE,CAAC;IACzC,MAAM,yBAAyB,GAAG,UAAU,CAAC,aAAa,CAAC,8BAAoB,CAAC,CAAC;IACjF,MAAM,KAAK,GAAG,yBAAyB,CAAC,kBAAkB,CAAC,gBAAgB,CAAC,CAAC;IAE7E,MAAM,EAAE,UAAU,EAAE,GAAG,IAAA,8BAAU,EAAC,KAAK,EAAE,IAAA,uBAAe,EAAC,GAAG,CAAC,EAAE;QAC3D,YAAY,EAAE,gBAAgB;QAC9B,OAAO,EAAE;YACL,OAAO,EAAE,CAAC,SAAS,EAAE,eAAe,CAAC;SACxC;QACD,UAAU,EAAE;YACR,QAAQ,EAAE,EAAE;SACf;KACJ,CAAC,CAAC;IAEH,MAAM,CAAC,QAAQ,EAAE,KAAK,CAAC,GAAG,MAAM,KAAK,CAAC,eAAe,EAAE,CAAC;IAExD,OAAO,IAAA,aAAI,EAAC,GAAG,EAAE;QACb,IAAI,EAAE,QAAQ;QACd,IAAI,EAAE;YACF,KAAK;YACL,GAAG,UAAU;SAChB;KACJ,CAAC,CAAC;AACP,CAAC;AAxBD,8EAwBC;AAED,oFAAoF;AAEpF;;;;;GAKG;AACI,KAAK,UAAU,gCAAgC,CAAC,GAAY,EAAE,GAAa;IAC9E,MAAM,EAAE,GAAG,IAAA,wBAAe,EAAC,GAAG,EAAE,IAAI,CAAC,CAAC;IAEtC,MAAM,UAAU,GAAG,MAAM,IAAA,iCAAa,GAAE,CAAC;IACzC,MAAM,yBAAyB,GAAG,UAAU,CAAC,aAAa,CAAC,8BAAoB,CAAC,CAAC;IACjF,MAAM,MAAM,GAAG,MAAM,yBAAyB,CAAC,SAAS,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;IAEjE,IAAI,CAAC,MAAM,EAAE,CAAC;QACV,MAAM,IAAI,oBAAa,EAAE,CAAC;IAC9B,CAAC;IAED,OAAO,IAAA,aAAI,EAAC,GAAG,EAAE,MAAM,CAAC,CAAC;AAC7B,CAAC;AAZD,4EAYC"}
+{"version":3,"file":"read.js","sourceRoot":"","sources":["../../../../../src/http/controllers/user-permission/handlers/read.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;AAmBH,8EAiCC;AAUD,4EAqBC;AAjFD,+CAAkD;AAClD,+CAAsD;AAEtD,mCAA8B;AAC9B,yDAE2B;AAC3B,qCAA2C;AAC3C,iDAA2D;AAC3D,8CAAoE;AAEpE;;;;;GAKG;AACI,KAAK,UAAU,iCAAiC,CAAC,GAAY,EAAE,GAAa;IAC/E,MAAM,iBAAiB,GAAG,IAAA,uBAAa,EAAC,GAAG,EAAE,mBAAmB,CAAC,CAAC;IAClE,MAAM,iBAAiB,CAAC,aAAa,CAAC;QAClC,IAAI,EAAE;YACF,yBAAc,CAAC,sBAAsB;YACrC,yBAAc,CAAC,sBAAsB;YACrC,yBAAc,CAAC,oBAAoB;SACtC;KACJ,CAAC,CAAC;IAEH,MAAM,UAAU,GAAG,MAAM,IAAA,iCAAa,GAAE,CAAC;IACzC,MAAM,yBAAyB,GAAG,UAAU,CAAC,aAAa,CAAC,8BAAoB,CAAC,CAAC;IACjF,MAAM,KAAK,GAAG,yBAAyB,CAAC,kBAAkB,CAAC,gBAAgB,CAAC,CAAC;IAE7E,MAAM,EAAE,UAAU,EAAE,GAAG,IAAA,8BAAU,EAAC,KAAK,EAAE,IAAA,uBAAe,EAAC,GAAG,CAAC,EAAE;QAC3D,YAAY,EAAE,gBAAgB;QAC9B,OAAO,EAAE;YACL,OAAO,EAAE,CAAC,SAAS,EAAE,eAAe,CAAC;SACxC;QACD,UAAU,EAAE;YACR,QAAQ,EAAE,EAAE;SACf;KACJ,CAAC,CAAC;IAEH,MAAM,CAAC,QAAQ,EAAE,KAAK,CAAC,GAAG,MAAM,KAAK,CAAC,eAAe,EAAE,CAAC;IAExD,OAAO,IAAA,aAAI,EAAC,GAAG,EAAE;QACb,IAAI,EAAE,QAAQ;QACd,IAAI,EAAE;YACF,KAAK;YACL,GAAG,UAAU;SAChB;KACJ,CAAC,CAAC;AACP,CAAC;AAED,oFAAoF;AAEpF;;;;;GAKG;AACI,KAAK,UAAU,gCAAgC,CAAC,GAAY,EAAE,GAAa;IAC9E,MAAM,iBAAiB,GAAG,IAAA,uBAAa,EAAC,GAAG,EAAE,mBAAmB,CAAC,CAAC;IAClE,MAAM,iBAAiB,CAAC,aAAa,CAAC;QAClC,IAAI,EAAE;YACF,yBAAc,CAAC,sBAAsB;YACrC,yBAAc,CAAC,sBAAsB;YACrC,yBAAc,CAAC,oBAAoB;SACtC;KACJ,CAAC,CAAC;IAEH,MAAM,EAAE,GAAG,IAAA,2BAAiB,EAAC,GAAG,CAAC,CAAC;IAElC,MAAM,UAAU,GAAG,MAAM,IAAA,iCAAa,GAAE,CAAC;IACzC,MAAM,yBAAyB,GAAG,UAAU,CAAC,aAAa,CAAC,8BAAoB,CAAC,CAAC;IACjF,MAAM,MAAM,GAAG,MAAM,yBAAyB,CAAC,SAAS,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;IAEjE,IAAI,CAAC,MAAM,EAAE,CAAC;QACV,MAAM,IAAI,oBAAa,EAAE,CAAC;IAC9B,CAAC;IAED,OAAO,IAAA,aAAI,EAAC,GAAG,EAAE,MAAM,CAAC,CAAC;AAC7B,CAAC"}

package/dist/http/controllers/user-permission/module.d.ts

@@ -1,4 +1,4 @@
-import type { UserPermission } from '@authup/core';
+import type { UserPermission } from '@authup/core-kit';
 export declare class UserPermissionController {
     getMany(req: any, res: any): Promise<UserPermission[]>;
     add(data: Pick<UserPermission, 'user_id' | 'permission_id'>, req: any, res: any): Promise<UserPermission>;

package/dist/http/controllers/user-permission/module.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"module.d.ts","sourceRoot":"","sources":["../../../../src/http/controllers/user-permission/module.ts"],"names":[],"mappings":"AAUA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AASnD,qBAEa,wBAAwB;IAE3B,OAAO,CACG,GAAG,EAAE,GAAG,EACH,GAAG,EAAE,GAAG,GAC1B,OAAO,CAAC,cAAc,EAAE,CAAC;IAKtB,GAAG,CACI,IAAI,EAAE,IAAI,CAAC,cAAc,EAAE,SAAS,GAAG,eAAe,CAAC,EAChD,GAAG,EAAE,GAAG,EACP,GAAG,EAAE,GAAG,GAC1B,OAAO,CAAC,cAAc,CAAC;IAKpB,MAAM,CACK,EAAE,EAAE,MAAM,EACP,GAAG,EAAE,GAAG,EACP,GAAG,EAAE,GAAG,GAC1B,OAAO,CAAC,cAAc,CAAC;IAKpB,IAAI,CACO,EAAE,EAAE,MAAM,EACP,GAAG,EAAE,GAAG,EACP,GAAG,EAAE,GAAG,GAC1B,OAAO,CAAC,cAAc,CAAC;CAG7B"}
+{"version":3,"file":"module.d.ts","sourceRoot":"","sources":["../../../../src/http/controllers/user-permission/module.ts"],"names":[],"mappings":"AAUA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAC;AASvD,qBAEa,wBAAwB;IAE3B,OAAO,CACG,GAAG,EAAE,GAAG,EACH,GAAG,EAAE,GAAG,GAC1B,OAAO,CAAC,cAAc,EAAE,CAAC;IAKtB,GAAG,CACI,IAAI,EAAE,IAAI,CAAC,cAAc,EAAE,SAAS,GAAG,eAAe,CAAC,EAChD,GAAG,EAAE,GAAG,EACP,GAAG,EAAE,GAAG,GAC1B,OAAO,CAAC,cAAc,CAAC;IAKpB,MAAM,CACK,EAAE,EAAE,MAAM,EACP,GAAG,EAAE,GAAG,EACP,GAAG,EAAE,GAAG,GAC1B,OAAO,CAAC,cAAc,CAAC;IAKpB,IAAI,CACO,EAAE,EAAE,MAAM,EACP,GAAG,EAAE,GAAG,EACP,GAAG,EAAE,GAAG,GAC1B,OAAO,CAAC,cAAc,CAAC;CAG7B"}

package/dist/http/controllers/user-permission/utils/validation.d.ts

@@ -1,6 +1,8 @@
-import type { Request } from 'routup';
+import type { ContainerOptions } from 'validup';
+import { Container } from 'validup';
 import type { UserPermissionEntity } from '../../../../domains';
-import type { ExpressValidationResult } from '../../../validation';
-import { RequestHandlerOperation } from '../../../request/constants';
-export declare function runUserPermissionValidation(req: Request, operation: `${RequestHandlerOperation.CREATE}` | `${RequestHandlerOperation.UPDATE}`): Promise<ExpressValidationResult<UserPermissionEntity>>;
+export declare class UserPermissionRequestValidator extends Container<UserPermissionEntity> {
+    constructor(options?: ContainerOptions<UserPermissionEntity>);
+    mountAll(): void;
+}
 //# sourceMappingURL=validation.d.ts.map

package/dist/http/controllers/user-permission/utils/validation.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"validation.d.ts","sourceRoot":"","sources":["../../../../../src/http/controllers/user-permission/utils/validation.ts"],"names":[],"mappings":"AAUA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,QAAQ,CAAC;AACtC,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,qBAAqB,CAAC;AAKhE,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,qBAAqB,CAAC;AAQnE,OAAO,EAAE,uBAAuB,EAAE,MAAM,4BAA4B,CAAC;AAErE,wBAAsB,2BAA2B,CAC7C,GAAG,EAAE,OAAO,EACZ,SAAS,EAAE,GAAG,uBAAuB,CAAC,MAAM,EAAE,GAAG,GAAG,uBAAuB,CAAC,MAAM,EAAE,GACpF,OAAO,CAAC,uBAAuB,CAAC,oBAAoB,CAAC,CAAC,CA8EzD"}
+{"version":3,"file":"validation.d.ts","sourceRoot":"","sources":["../../../../../src/http/controllers/user-permission/utils/validation.ts"],"names":[],"mappings":"AAQA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,SAAS,CAAC;AAChD,OAAO,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AACpC,OAAO,KAAK,EACR,oBAAoB,EACvB,MAAM,qBAAqB,CAAC;AAG7B,qBAAa,8BAA+B,SAAQ,SAAS,CAC7D,oBAAoB,CACnB;gBACe,OAAO,GAAE,gBAAgB,CAAC,oBAAoB,CAAM;IAMhE,QAAQ;CA0BX"}

package/dist/http/controllers/user-permission/utils/validation.js

@@ -6,70 +6,27 @@
  * view the LICENSE file that was distributed with this source code.
  */
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.runUserPermissionValidation = void 0;
-const express_validator_1 = require("express-validator");
-const http_1 = require("@ebec/http");
-const core_1 = require("@authup/core");
-const domains_1 = require("../../../../domains");
-const utils_1 = require("../../../utils");
-const validation_1 = require("../../../validation");
-const constants_1 = require("../../../request/constants");
-async function runUserPermissionValidation(req, operation) {
-    const result = (0, validation_1.initExpressValidationResult)();
-    if (operation === constants_1.RequestHandlerOperation.CREATE) {
-        await (0, express_validator_1.check)('user_id')
-            .exists()
-            .isUUID()
-            .run(req);
-        await (0, express_validator_1.check)('permission_id')
+exports.UserPermissionRequestValidator = void 0;
+const adapter_validator_1 = require("@validup/adapter-validator");
+const validup_1 = require("validup");
+const request_1 = require("../../../request");
+class UserPermissionRequestValidator extends validup_1.Container {
+    constructor(options = {}) {
+        super(options);
+        this.mountAll();
+    }
+    mountAll() {
+        this.mount('user_id', { group: request_1.RequestHandlerOperation.CREATE }, (0, adapter_validator_1.createValidator)((chain) => chain
             .exists()
-            .isString()
-            .run(req);
-        await (0, express_validator_1.check)('target')
+            .isUUID()));
+        this.mount('permission_id', { group: request_1.RequestHandlerOperation.CREATE }, (0, adapter_validator_1.createValidator)((chain) => chain
             .exists()
-            .isString()
-            .isLength({ min: 3, max: 16 })
-            .optional({ nullable: true })
-            .run(req);
-    }
-    // ----------------------------------------------
-    const validation = (0, express_validator_1.validationResult)(req);
-    if (!validation.isEmpty()) {
-        throw new validation_1.RequestValidationError(validation);
-    }
-    result.data = (0, validation_1.matchedValidationData)(req, { includeOptionals: true });
-    // ----------------------------------------------
-    const ability = (0, utils_1.useRequestEnv)(req, 'ability');
-    await (0, validation_1.extendExpressValidationResultWithRelation)(result, domains_1.PermissionEntity, {
-        id: 'permission_id',
-        entity: 'permission',
-    });
-    if (result.relation.permission) {
-        if (result.relation.permission.target) {
-            result.data.target = result.relation.permission.target;
-        }
-        if (!(0, utils_1.isRequestSubOwner)(req) &&
-            !ability.has(result.relation.permission.name)) {
-            throw new http_1.ForbiddenError('It is only allowed to assign user permissions, which are also owned.');
-        }
-    }
-    const permissionTarget = ability.getTarget(core_1.PermissionName.USER_PERMISSION_ADD);
-    if (permissionTarget) {
-        result.data.target = permissionTarget;
-    }
-    // ----------------------------------------------
-    await (0, validation_1.extendExpressValidationResultWithRelation)(result, domains_1.UserEntity, {
-        id: 'user_id',
-        entity: 'user',
-    });
-    if (result.relation.user) {
-        if (!(0, core_1.isRealmResourceWritable)((0, utils_1.useRequestEnv)(req, 'realm'), result.relation.user.realm_id)) {
-            throw new http_1.BadRequestError((0, validation_1.buildRequestValidationErrorMessage)('user_id'));
-        }
-        result.data.user_realm_id = result.relation.user.realm_id;
+            .isUUID()));
+        this.mount('policy_id', { group: request_1.RequestHandlerOperation.CREATE }, (0, adapter_validator_1.createValidator)((chain) => chain
+            .isUUID()
+            .optional({ values: 'null' })
+            .default(null)));
     }
-    // ----------------------------------------------
-    return result;
 }
-exports.runUserPermissionValidation = runUserPermissionValidation;
+exports.UserPermissionRequestValidator = UserPermissionRequestValidator;
 //# sourceMappingURL=validation.js.map

package/dist/http/controllers/user-permission/utils/validation.js.map

@@ -1 +1 @@
-{"version":3,"file":"validation.js","sourceRoot":"","sources":["../../../../../src/http/controllers/user-permission/utils/validation.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;;AAEH,yDAA4D;AAC5D,qCAA6D;AAC7D,uCAAuE;AAGvE,iDAE6B;AAC7B,0CAAkE;AAElE,oDAM6B;AAC7B,0DAAqE;AAE9D,KAAK,UAAU,2BAA2B,CAC7C,GAAY,EACZ,SAAoF;IAEpF,MAAM,MAAM,GAAmD,IAAA,wCAA2B,GAAE,CAAC;IAE7F,IAAI,SAAS,KAAK,mCAAuB,CAAC,MAAM,EAAE,CAAC;QAC/C,MAAM,IAAA,yBAAK,EAAC,SAAS,CAAC;aACjB,MAAM,EAAE;aACR,MAAM,EAAE;aACR,GAAG,CAAC,GAAG,CAAC,CAAC;QAEd,MAAM,IAAA,yBAAK,EAAC,eAAe,CAAC;aACvB,MAAM,EAAE;aACR,QAAQ,EAAE;aACV,GAAG,CAAC,GAAG,CAAC,CAAC;QAEd,MAAM,IAAA,yBAAK,EAAC,QAAQ,CAAC;aAChB,MAAM,EAAE;aACR,QAAQ,EAAE;aACV,QAAQ,CAAC,EAAE,GAAG,EAAE,CAAC,EAAE,GAAG,EAAE,EAAE,EAAE,CAAC;aAC7B,QAAQ,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;aAC5B,GAAG,CAAC,GAAG,CAAC,CAAC;IAClB,CAAC;IAED,iDAAiD;IAEjD,MAAM,UAAU,GAAG,IAAA,oCAAgB,EAAC,GAAG,CAAC,CAAC;IACzC,IAAI,CAAC,UAAU,CAAC,OAAO,EAAE,EAAE,CAAC;QACxB,MAAM,IAAI,mCAAsB,CAAC,UAAU,CAAC,CAAC;IACjD,CAAC;IAED,MAAM,CAAC,IAAI,GAAG,IAAA,kCAAqB,EAAC,GAAG,EAAE,EAAE,gBAAgB,EAAE,IAAI,EAAE,CAAC,CAAC;IAErE,iDAAiD;IAEjD,MAAM,OAAO,GAAG,IAAA,qBAAa,EAAC,GAAG,EAAE,SAAS,CAAC,CAAC;IAE9C,MAAM,IAAA,sDAAyC,EAAC,MAAM,EAAE,0BAAgB,EAAE;QACtE,EAAE,EAAE,eAAe;QACnB,MAAM,EAAE,YAAY;KACvB,CAAC,CAAC;IAEH,IAAI,MAAM,CAAC,QAAQ,CAAC,UAAU,EAAE,CAAC;QAC7B,IAAI,MAAM,CAAC,QAAQ,CAAC,UAAU,CAAC,MAAM,EAAE,CAAC;YACpC,MAAM,CAAC,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC,QAAQ,CAAC,UAAU,CAAC,MAAM,CAAC;QAC3D,CAAC;QAED,IACI,CAAC,IAAA,yBAAiB,EAAC,GAAG,CAAC;YACvB,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,UAAU,CAAC,IAAI,CAAC,EAC/C,CAAC;YACC,MAAM,IAAI,qBAAc,CAAC,sEAAsE,CAAC,CAAC;QACrG,CAAC;IACL,CAAC;IAED,MAAM,gBAAgB,GAAG,OAAO,CAAC,SAAS,CAAC,qBAAc,CAAC,mBAAmB,CAAC,CAAC;IAC/E,IAAI,gBAAgB,EAAE,CAAC;QACnB,MAAM,CAAC,IAAI,CAAC,MAAM,GAAG,gBAAgB,CAAC;IAC1C,CAAC;IAED,iDAAiD;IAEjD,MAAM,IAAA,sDAAyC,EAAC,MAAM,EAAE,oBAAU,EAAE;QAChE,EAAE,EAAE,SAAS;QACb,MAAM,EAAE,MAAM;KACjB,CAAC,CAAC;IAEH,IAAI,MAAM,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC;QACvB,IACI,CAAC,IAAA,8BAAuB,EAAC,IAAA,qBAAa,EAAC,GAAG,EAAE,OAAO,CAAC,EAAE,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC,EACtF,CAAC;YACC,MAAM,IAAI,sBAAe,CAAC,IAAA,+CAAkC,EAAC,SAAS,CAAC,CAAC,CAAC;QAC7E,CAAC;QAED,MAAM,CAAC,IAAI,CAAC,aAAa,GAAG,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC;IAC9D,CAAC;IAED,iDAAiD;IAEjD,OAAO,MAAM,CAAC;AAClB,CAAC;AAjFD,kEAiFC"}
+{"version":3,"file":"validation.js","sourceRoot":"","sources":["../../../../../src/http/controllers/user-permission/utils/validation.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;;AAEH,kEAA6D;AAE7D,qCAAoC;AAIpC,8CAA2D;AAE3D,MAAa,8BAA+B,SAAQ,mBAEnD;IACG,YAAY,UAAkD,EAAE;QAC5D,KAAK,CAAC,OAAO,CAAC,CAAC;QAEf,IAAI,CAAC,QAAQ,EAAE,CAAC;IACpB,CAAC;IAED,QAAQ;QACJ,IAAI,CAAC,KAAK,CACN,SAAS,EACT,EAAE,KAAK,EAAE,iCAAuB,CAAC,MAAM,EAAE,EACzC,IAAA,mCAAe,EAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK;aAC3B,MAAM,EAAE;aACR,MAAM,EAAE,CAAC,CACjB,CAAC;QAEF,IAAI,CAAC,KAAK,CACN,eAAe,EACf,EAAE,KAAK,EAAE,iCAAuB,CAAC,MAAM,EAAE,EACzC,IAAA,mCAAe,EAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK;aAC3B,MAAM,EAAE;aACR,MAAM,EAAE,CAAC,CACjB,CAAC;QAEF,IAAI,CAAC,KAAK,CACN,WAAW,EACX,EAAE,KAAK,EAAE,iCAAuB,CAAC,MAAM,EAAE,EACzC,IAAA,mCAAe,EAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK;aAC3B,MAAM,EAAE;aACR,QAAQ,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;aAC5B,OAAO,CAAC,IAAI,CAAC,CAAC,CACtB,CAAC;IACN,CAAC;CACJ;AAnCD,wEAmCC"}

package/dist/http/controllers/user-role/handlers/create.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"create.d.ts","sourceRoot":"","sources":["../../../../../src/http/controllers/user-role/handlers/create.ts"],"names":[],"mappings":"AASA,OAAO,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,QAAQ,CAAC;AAQhD,wBAAsB,0BAA0B,CAAC,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,QAAQ,GAAI,OAAO,CAAC,GAAG,CAAC,CAe3F"}
+{"version":3,"file":"create.d.ts","sourceRoot":"","sources":["../../../../../src/http/controllers/user-role/handlers/create.ts"],"names":[],"mappings":"AASA,OAAO,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,QAAQ,CAAC;AAShD,wBAAsB,0BAA0B,CAAC,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,QAAQ,GAAI,OAAO,CAAC,GAAG,CAAC,CAuD3F"}

package/dist/http/controllers/user-role/handlers/create.js

@@ -6,26 +6,57 @@
  * view the LICENSE file that was distributed with this source code.
  */
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.createUserRoleRouteHandler = void 0;
+exports.createUserRoleRouteHandler = createUserRoleRouteHandler;
 const http_1 = require("@ebec/http");
-const core_1 = require("@authup/core");
+const core_kit_1 = require("@authup/core-kit");
 const routup_1 = require("routup");
 const typeorm_extension_1 = require("typeorm-extension");
+const adapter_routup_1 = require("@validup/adapter-routup");
 const domains_1 = require("../../../../domains");
-const env_1 = require("../../../utils/env");
+const services_1 = require("../../../../services");
 const utils_1 = require("../utils");
-const constants_1 = require("../../../request/constants");
+const request_1 = require("../../../request");
 async function createUserRoleRouteHandler(req, res) {
-    const ability = (0, env_1.useRequestEnv)(req, 'ability');
-    if (!ability.has(core_1.PermissionName.USER_ROLE_ADD)) {
-        throw new http_1.ForbiddenError();
-    }
-    const result = await (0, utils_1.runUserRoleValidation)(req, constants_1.RequestHandlerOperation.CREATE);
+    const permissionChecker = (0, request_1.useRequestEnv)(req, 'permissionChecker');
+    await permissionChecker.preCheck({ name: core_kit_1.PermissionName.USER_ROLE_CREATE });
+    const validator = new utils_1.UserRoleRequestValidator();
+    const validatorAdapter = new adapter_routup_1.RoutupContainerAdapter(validator);
+    const data = await validatorAdapter.run(req, {
+        group: request_1.RequestHandlerOperation.CREATE,
+    });
     const dataSource = await (0, typeorm_extension_1.useDataSource)();
+    await (0, typeorm_extension_1.validateEntityJoinColumns)(data, {
+        dataSource,
+        entityTarget: domains_1.UserRoleEntity,
+    });
+    // ----------------------------------------------
+    if (data.role) {
+        data.role_realm_id = data.role.realm_id;
+        const identity = (0, request_1.useRequestIdentityOrFail)(req);
+        const identityPermissionService = new services_1.IdentityPermissionService(dataSource);
+        const hasPermissions = await identityPermissionService.hasSuperset(identity, {
+            type: 'role',
+            id: data.role_id,
+        });
+        if (!hasPermissions) {
+            throw new http_1.ForbiddenError('You don\'t own the required permissions.');
+        }
+    }
+    // ----------------------------------------------
+    if (data.user) {
+        data.user_realm_id = data.user.realm_id;
+    }
+    // ----------------------------------------------
+    await permissionChecker.check({
+        name: core_kit_1.PermissionName.USER_ROLE_CREATE,
+        data: {
+            attributes: data,
+        },
+    });
+    // ----------------------------------------------
     const repository = dataSource.getRepository(domains_1.UserRoleEntity);
-    let entity = repository.create(result.data);
+    let entity = repository.create(data);
     entity = await repository.save(entity);
     return (0, routup_1.sendCreated)(res, entity);
 }
-exports.createUserRoleRouteHandler = createUserRoleRouteHandler;
 //# sourceMappingURL=create.js.map

package/dist/http/controllers/user-role/handlers/create.js.map

@@ -1 +1 @@
-{"version":3,"file":"create.js","sourceRoot":"","sources":["../../../../../src/http/controllers/user-role/handlers/create.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;;AAEH,qCAA4C;AAC5C,uCAA8C;AAE9C,mCAAqC;AACrC,yDAAkD;AAClD,iDAAqD;AACrD,4CAAmD;AACnD,oCAAiD;AACjD,0DAAqE;AAE9D,KAAK,UAAU,0BAA0B,CAAC,GAAY,EAAE,GAAa;IACxE,MAAM,OAAO,GAAG,IAAA,mBAAa,EAAC,GAAG,EAAE,SAAS,CAAC,CAAC;IAC9C,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,qBAAc,CAAC,aAAa,CAAC,EAAE,CAAC;QAC7C,MAAM,IAAI,qBAAc,EAAE,CAAC;IAC/B,CAAC;IAED,MAAM,MAAM,GAAG,MAAM,IAAA,6BAAqB,EAAC,GAAG,EAAE,mCAAuB,CAAC,MAAM,CAAC,CAAC;IAEhF,MAAM,UAAU,GAAG,MAAM,IAAA,iCAAa,GAAE,CAAC;IACzC,MAAM,UAAU,GAAG,UAAU,CAAC,aAAa,CAAC,wBAAc,CAAC,CAAC;IAC5D,IAAI,MAAM,GAAG,UAAU,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IAE5C,MAAM,GAAG,MAAM,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAEvC,OAAO,IAAA,oBAAW,EAAC,GAAG,EAAE,MAAM,CAAC,CAAC;AACpC,CAAC;AAfD,gEAeC"}
+{"version":3,"file":"create.js","sourceRoot":"","sources":["../../../../../src/http/controllers/user-role/handlers/create.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;AAaH,gEAuDC;AAlED,qCAA4C;AAC5C,+CAAkD;AAElD,mCAAqC;AACrC,yDAA6E;AAC7E,4DAAiE;AACjE,iDAAqD;AACrD,mDAAiE;AACjE,oCAAoD;AACpD,8CAAoG;AAE7F,KAAK,UAAU,0BAA0B,CAAC,GAAY,EAAE,GAAa;IACxE,MAAM,iBAAiB,GAAG,IAAA,uBAAa,EAAC,GAAG,EAAE,mBAAmB,CAAC,CAAC;IAClE,MAAM,iBAAiB,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,yBAAc,CAAC,gBAAgB,EAAE,CAAC,CAAC;IAE5E,MAAM,SAAS,GAAG,IAAI,gCAAwB,EAAE,CAAC;IACjD,MAAM,gBAAgB,GAAG,IAAI,uCAAsB,CAAC,SAAS,CAAC,CAAC;IAC/D,MAAM,IAAI,GAAG,MAAM,gBAAgB,CAAC,GAAG,CAAC,GAAG,EAAE;QACzC,KAAK,EAAE,iCAAuB,CAAC,MAAM;KACxC,CAAC,CAAC;IAEH,MAAM,UAAU,GAAG,MAAM,IAAA,iCAAa,GAAE,CAAC;IACzC,MAAM,IAAA,6CAAyB,EAAC,IAAI,EAAE;QAClC,UAAU;QACV,YAAY,EAAE,wBAAc;KAC/B,CAAC,CAAC;IAEH,iDAAiD;IAEjD,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;QACZ,IAAI,CAAC,aAAa,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC;QAExC,MAAM,QAAQ,GAAG,IAAA,kCAAwB,EAAC,GAAG,CAAC,CAAC;QAC/C,MAAM,yBAAyB,GAAG,IAAI,oCAAyB,CAAC,UAAU,CAAC,CAAC;QAC5E,MAAM,cAAc,GAAG,MAAM,yBAAyB,CAAC,WAAW,CAAC,QAAQ,EAAE;YACzE,IAAI,EAAE,MAAM;YACZ,EAAE,EAAE,IAAI,CAAC,OAAO;SACnB,CAAC,CAAC;QACH,IAAI,CAAC,cAAc,EAAE,CAAC;YAClB,MAAM,IAAI,qBAAc,CAAC,0CAA0C,CAAC,CAAC;QACzE,CAAC;IACL,CAAC;IAED,iDAAiD;IAEjD,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;QACZ,IAAI,CAAC,aAAa,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC;IAC5C,CAAC;IAED,iDAAiD;IAEjD,MAAM,iBAAiB,CAAC,KAAK,CAAC;QAC1B,IAAI,EAAE,yBAAc,CAAC,gBAAgB;QACrC,IAAI,EAAE;YACF,UAAU,EAAE,IAAI;SACnB;KACJ,CAAC,CAAC;IAEH,iDAAiD;IAEjD,MAAM,UAAU,GAAG,UAAU,CAAC,aAAa,CAAC,wBAAc,CAAC,CAAC;IAC5D,IAAI,MAAM,GAAG,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IAErC,MAAM,GAAG,MAAM,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAEvC,OAAO,IAAA,oBAAW,EAAC,GAAG,EAAE,MAAM,CAAC,CAAC;AACpC,CAAC"}

package/dist/http/controllers/user-role/handlers/delete.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"delete.d.ts","sourceRoot":"","sources":["../../../../../src/http/controllers/user-role/handlers/delete.ts"],"names":[],"mappings":"AASA,OAAO,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,QAAQ,CAAC;AAMhD,wBAAsB,0BAA0B,CAAC,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,QAAQ,GAAI,OAAO,CAAC,GAAG,CAAC,CA+B3F"}
+{"version":3,"file":"delete.d.ts","sourceRoot":"","sources":["../../../../../src/http/controllers/user-role/handlers/delete.ts"],"names":[],"mappings":"AASA,OAAO,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,QAAQ,CAAC;AAMhD,wBAAsB,0BAA0B,CAAC,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,QAAQ,GAAI,OAAO,CAAC,GAAG,CAAC,CAyC3F"}