@authup/server-core 1.0.0-beta.2 → 1.0.0-beta.21

package/dist/http/controllers/user-role/handlers/delete.js

@@ -6,33 +6,42 @@
  * view the LICENSE file that was distributed with this source code.
  */
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.deleteUserRoleRouteHandler = void 0;
+exports.deleteUserRoleRouteHandler = deleteUserRoleRouteHandler;
 const http_1 = require("@ebec/http");
-const core_1 = require("@authup/core");
+const core_kit_1 = require("@authup/core-kit");
 const routup_1 = require("routup");
 const typeorm_extension_1 = require("typeorm-extension");
 const domains_1 = require("../../../../domains");
-const utils_1 = require("../../../utils");
+const request_1 = require("../../../request");
 async function deleteUserRoleRouteHandler(req, res) {
-    const id = (0, routup_1.useRequestParam)(req, 'id');
-    const ability = (0, utils_1.useRequestEnv)(req, 'ability');
-    if (!ability.has(core_1.PermissionName.USER_ROLE_DROP)) {
-        throw new http_1.ForbiddenError();
-    }
+    const id = (0, request_1.useRequestParamID)(req);
+    const permissionChecker = (0, request_1.useRequestEnv)(req, 'permissionChecker');
+    await permissionChecker.preCheck({ name: core_kit_1.PermissionName.USER_ROLE_DELETE });
     const dataSource = await (0, typeorm_extension_1.useDataSource)();
     const repository = dataSource.getRepository(domains_1.UserRoleEntity);
-    const entity = await repository.findOneBy({ id });
+    const entity = await repository.findOne({
+        where: {
+            id,
+        },
+        relations: {
+            user: true,
+            role: true,
+        },
+    });
     if (!entity) {
         throw new http_1.NotFoundError();
     }
-    if (!(0, core_1.isRealmResourceWritable)((0, utils_1.useRequestEnv)(req, 'realm'), entity.user_realm_id) ||
-        !(0, core_1.isRealmResourceWritable)((0, utils_1.useRequestEnv)(req, 'realm'), entity.role_realm_id)) {
-        throw new http_1.ForbiddenError();
-    }
+    // ----------------------------------------------
+    await permissionChecker.check({
+        name: core_kit_1.PermissionName.USER_ROLE_DELETE,
+        data: {
+            attributes: entity,
+        },
+    });
+    // ----------------------------------------------
     const { id: entityId } = entity;
     await repository.remove(entity);
     entity.id = entityId;
     return (0, routup_1.sendAccepted)(res, entity);
 }
-exports.deleteUserRoleRouteHandler = deleteUserRoleRouteHandler;
 //# sourceMappingURL=delete.js.map

package/dist/http/controllers/user-role/handlers/delete.js.map

@@ -1 +1 @@
-{"version":3,"file":"delete.js","sourceRoot":"","sources":["../../../../../src/http/controllers/user-role/handlers/delete.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;;AAEH,qCAA2D;AAC3D,uCAAuE;AAEvE,mCAAuD;AACvD,yDAAkD;AAClD,iDAAqD;AACrD,0CAA+C;AAExC,KAAK,UAAU,0BAA0B,CAAC,GAAY,EAAE,GAAa;IACxE,MAAM,EAAE,GAAG,IAAA,wBAAe,EAAC,GAAG,EAAE,IAAI,CAAC,CAAC;IAEtC,MAAM,OAAO,GAAG,IAAA,qBAAa,EAAC,GAAG,EAAE,SAAS,CAAC,CAAC;IAC9C,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,qBAAc,CAAC,cAAc,CAAC,EAAE,CAAC;QAC9C,MAAM,IAAI,qBAAc,EAAE,CAAC;IAC/B,CAAC;IAED,MAAM,UAAU,GAAG,MAAM,IAAA,iCAAa,GAAE,CAAC;IACzC,MAAM,UAAU,GAAG,UAAU,CAAC,aAAa,CAAC,wBAAc,CAAC,CAAC;IAE5D,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,SAAS,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;IAElD,IAAI,CAAC,MAAM,EAAE,CAAC;QACV,MAAM,IAAI,oBAAa,EAAE,CAAC;IAC9B,CAAC;IAED,IACI,CAAC,IAAA,8BAAuB,EAAC,IAAA,qBAAa,EAAC,GAAG,EAAE,OAAO,CAAC,EAAE,MAAM,CAAC,aAAa,CAAC;QAC3E,CAAC,IAAA,8BAAuB,EAAC,IAAA,qBAAa,EAAC,GAAG,EAAE,OAAO,CAAC,EAAE,MAAM,CAAC,aAAa,CAAC,EAC7E,CAAC;QACC,MAAM,IAAI,qBAAc,EAAE,CAAC;IAC/B,CAAC;IAED,MAAM,EAAE,EAAE,EAAE,QAAQ,EAAE,GAAG,MAAM,CAAC;IAEhC,MAAM,UAAU,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAEhC,MAAM,CAAC,EAAE,GAAG,QAAQ,CAAC;IAErB,OAAO,IAAA,qBAAY,EAAC,GAAG,EAAE,MAAM,CAAC,CAAC;AACrC,CAAC;AA/BD,gEA+BC"}
+{"version":3,"file":"delete.js","sourceRoot":"","sources":["../../../../../src/http/controllers/user-role/handlers/delete.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;AAUH,gEAyCC;AAjDD,qCAA2C;AAC3C,+CAAkD;AAElD,mCAAsC;AACtC,yDAAkD;AAClD,iDAAqD;AACrD,8CAAoE;AAE7D,KAAK,UAAU,0BAA0B,CAAC,GAAY,EAAE,GAAa;IACxE,MAAM,EAAE,GAAG,IAAA,2BAAiB,EAAC,GAAG,CAAC,CAAC;IAElC,MAAM,iBAAiB,GAAG,IAAA,uBAAa,EAAC,GAAG,EAAE,mBAAmB,CAAC,CAAC;IAClE,MAAM,iBAAiB,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,yBAAc,CAAC,gBAAgB,EAAE,CAAC,CAAC;IAE5E,MAAM,UAAU,GAAG,MAAM,IAAA,iCAAa,GAAE,CAAC;IACzC,MAAM,UAAU,GAAG,UAAU,CAAC,aAAa,CAAC,wBAAc,CAAC,CAAC;IAE5D,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,OAAO,CAAC;QACpC,KAAK,EAAE;YACH,EAAE;SACL;QACD,SAAS,EAAE;YACP,IAAI,EAAE,IAAI;YACV,IAAI,EAAE,IAAI;SACb;KACJ,CAAC,CAAC;IAEH,IAAI,CAAC,MAAM,EAAE,CAAC;QACV,MAAM,IAAI,oBAAa,EAAE,CAAC;IAC9B,CAAC;IAED,iDAAiD;IAEjD,MAAM,iBAAiB,CAAC,KAAK,CAAC;QAC1B,IAAI,EAAE,yBAAc,CAAC,gBAAgB;QACrC,IAAI,EAAE;YACF,UAAU,EAAE,MAAM;SACrB;KACJ,CAAC,CAAC;IAEH,iDAAiD;IAEjD,MAAM,EAAE,EAAE,EAAE,QAAQ,EAAE,GAAG,MAAM,CAAC;IAEhC,MAAM,UAAU,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAEhC,MAAM,CAAC,EAAE,GAAG,QAAQ,CAAC;IAErB,OAAO,IAAA,qBAAY,EAAC,GAAG,EAAE,MAAM,CAAC,CAAC;AACrC,CAAC"}

package/dist/http/controllers/user-role/handlers/read.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"read.d.ts","sourceRoot":"","sources":["../../../../../src/http/controllers/user-role/handlers/read.ts"],"names":[],"mappings":"AAQA,OAAO,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,QAAQ,CAAC;AAQhD,wBAAsB,2BAA2B,CAAC,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,QAAQ,GAAI,OAAO,CAAC,GAAG,CAAC,CAwB5F;AAED,wBAAsB,0BAA0B,CAAC,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,QAAQ,GAAI,OAAO,CAAC,GAAG,CAAC,CAY3F"}
+{"version":3,"file":"read.d.ts","sourceRoot":"","sources":["../../../../../src/http/controllers/user-role/handlers/read.ts"],"names":[],"mappings":"AASA,OAAO,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,QAAQ,CAAC;AAShD,wBAAsB,2BAA2B,CAAC,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,QAAQ,GAAI,OAAO,CAAC,GAAG,CAAC,CAiC5F;AAED,wBAAsB,0BAA0B,CAAC,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,QAAQ,GAAI,OAAO,CAAC,GAAG,CAAC,CAqB3F"}

package/dist/http/controllers/user-role/handlers/read.js

@@ -6,16 +6,27 @@
  * view the LICENSE file that was distributed with this source code.
  */
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.getOneUserRoleRouteHandler = exports.getManyUserRoleRouteHandler = void 0;
+exports.getManyUserRoleRouteHandler = getManyUserRoleRouteHandler;
+exports.getOneUserRoleRouteHandler = getOneUserRoleRouteHandler;
+const core_kit_1 = require("@authup/core-kit");
 const query_1 = require("@routup/basic/query");
 const routup_1 = require("routup");
 const typeorm_extension_1 = require("typeorm-extension");
 const http_1 = require("@ebec/http");
 const domains_1 = require("../../../../domains");
+const request_1 = require("../../../request");
 async function getManyUserRoleRouteHandler(req, res) {
+    const permissionChecker = (0, request_1.useRequestEnv)(req, 'permissionChecker');
+    await permissionChecker.preCheckOneOf({
+        name: [
+            core_kit_1.PermissionName.USER_ROLE_READ,
+            core_kit_1.PermissionName.USER_ROLE_CREATE,
+            core_kit_1.PermissionName.USER_ROLE_UPDATE,
+        ],
+    });
     const dataSource = await (0, typeorm_extension_1.useDataSource)();
     const repository = dataSource.getRepository(domains_1.UserRoleEntity);
-    const query = await repository.createQueryBuilder('userRole');
+    const query = repository.createQueryBuilder('userRole');
     const { pagination } = (0, typeorm_extension_1.applyQuery)(query, (0, query_1.useRequestQuery)(req), {
         defaultAlias: 'userRole',
         filters: {
@@ -34,9 +45,16 @@ async function getManyUserRoleRouteHandler(req, res) {
         },
     });
 }
-exports.getManyUserRoleRouteHandler = getManyUserRoleRouteHandler;
 async function getOneUserRoleRouteHandler(req, res) {
-    const id = (0, routup_1.useRequestParam)(req, 'id');
+    const permissionChecker = (0, request_1.useRequestEnv)(req, 'permissionChecker');
+    await permissionChecker.preCheckOneOf({
+        name: [
+            core_kit_1.PermissionName.USER_ROLE_READ,
+            core_kit_1.PermissionName.USER_ROLE_CREATE,
+            core_kit_1.PermissionName.USER_ROLE_UPDATE,
+        ],
+    });
+    const id = (0, request_1.useRequestParamID)(req);
     const dataSource = await (0, typeorm_extension_1.useDataSource)();
     const repository = dataSource.getRepository(domains_1.UserRoleEntity);
     const entity = await repository.findOneBy({ id });
@@ -45,5 +63,4 @@ async function getOneUserRoleRouteHandler(req, res) {
     }
     return (0, routup_1.send)(res, entity);
 }
-exports.getOneUserRoleRouteHandler = getOneUserRoleRouteHandler;
 //# sourceMappingURL=read.js.map

package/dist/http/controllers/user-role/handlers/read.js.map

@@ -1 +1 @@
-{"version":3,"file":"read.js","sourceRoot":"","sources":["../../../../../src/http/controllers/user-role/handlers/read.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;;AAEH,+CAAsD;AAEtD,mCAA+C;AAC/C,yDAE2B;AAC3B,qCAA2C;AAC3C,iDAAqD;AAE9C,KAAK,UAAU,2BAA2B,CAAC,GAAY,EAAE,GAAa;IACzE,MAAM,UAAU,GAAG,MAAM,IAAA,iCAAa,GAAE,CAAC;IACzC,MAAM,UAAU,GAAG,UAAU,CAAC,aAAa,CAAC,wBAAc,CAAC,CAAC;IAC5D,MAAM,KAAK,GAAG,MAAM,UAAU,CAAC,kBAAkB,CAAC,UAAU,CAAC,CAAC;IAE9D,MAAM,EAAE,UAAU,EAAE,GAAG,IAAA,8BAAU,EAAC,KAAK,EAAE,IAAA,uBAAe,EAAC,GAAG,CAAC,EAAE;QAC3D,YAAY,EAAE,UAAU;QACxB,OAAO,EAAE;YACL,OAAO,EAAE,CAAC,SAAS,EAAE,SAAS,CAAC;SAClC;QACD,UAAU,EAAE;YACR,QAAQ,EAAE,EAAE;SACf;KACJ,CAAC,CAAC;IAEH,MAAM,CAAC,QAAQ,EAAE,KAAK,CAAC,GAAG,MAAM,KAAK,CAAC,eAAe,EAAE,CAAC;IAExD,OAAO,IAAA,aAAI,EAAC,GAAG,EAAE;QACb,IAAI,EAAE,QAAQ;QACd,IAAI,EAAE;YACF,KAAK;YACL,GAAG,UAAU;SAChB;KACJ,CAAC,CAAC;AACP,CAAC;AAxBD,kEAwBC;AAEM,KAAK,UAAU,0BAA0B,CAAC,GAAY,EAAE,GAAa;IACxE,MAAM,EAAE,GAAG,IAAA,wBAAe,EAAC,GAAG,EAAE,IAAI,CAAC,CAAC;IAEtC,MAAM,UAAU,GAAG,MAAM,IAAA,iCAAa,GAAE,CAAC;IACzC,MAAM,UAAU,GAAG,UAAU,CAAC,aAAa,CAAC,wBAAc,CAAC,CAAC;IAC5D,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,SAAS,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;IAElD,IAAI,CAAC,MAAM,EAAE,CAAC;QACV,MAAM,IAAI,oBAAa,EAAE,CAAC;IAC9B,CAAC;IAED,OAAO,IAAA,aAAI,EAAC,GAAG,EAAE,MAAM,CAAC,CAAC;AAC7B,CAAC;AAZD,gEAYC"}
+{"version":3,"file":"read.js","sourceRoot":"","sources":["../../../../../src/http/controllers/user-role/handlers/read.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;AAaH,kEAiCC;AAED,gEAqBC;AAnED,+CAAkD;AAClD,+CAAsD;AAEtD,mCAA8B;AAC9B,yDAE2B;AAC3B,qCAA2C;AAC3C,iDAAqD;AACrD,8CAAoE;AAE7D,KAAK,UAAU,2BAA2B,CAAC,GAAY,EAAE,GAAa;IACzE,MAAM,iBAAiB,GAAG,IAAA,uBAAa,EAAC,GAAG,EAAE,mBAAmB,CAAC,CAAC;IAClE,MAAM,iBAAiB,CAAC,aAAa,CAAC;QAClC,IAAI,EAAE;YACF,yBAAc,CAAC,cAAc;YAC7B,yBAAc,CAAC,gBAAgB;YAC/B,yBAAc,CAAC,gBAAgB;SAClC;KACJ,CAAC,CAAC;IAEH,MAAM,UAAU,GAAG,MAAM,IAAA,iCAAa,GAAE,CAAC;IACzC,MAAM,UAAU,GAAG,UAAU,CAAC,aAAa,CAAC,wBAAc,CAAC,CAAC;IAC5D,MAAM,KAAK,GAAG,UAAU,CAAC,kBAAkB,CAAC,UAAU,CAAC,CAAC;IAExD,MAAM,EAAE,UAAU,EAAE,GAAG,IAAA,8BAAU,EAAC,KAAK,EAAE,IAAA,uBAAe,EAAC,GAAG,CAAC,EAAE;QAC3D,YAAY,EAAE,UAAU;QACxB,OAAO,EAAE;YACL,OAAO,EAAE,CAAC,SAAS,EAAE,SAAS,CAAC;SAClC;QACD,UAAU,EAAE;YACR,QAAQ,EAAE,EAAE;SACf;KACJ,CAAC,CAAC;IAEH,MAAM,CAAC,QAAQ,EAAE,KAAK,CAAC,GAAG,MAAM,KAAK,CAAC,eAAe,EAAE,CAAC;IAExD,OAAO,IAAA,aAAI,EAAC,GAAG,EAAE;QACb,IAAI,EAAE,QAAQ;QACd,IAAI,EAAE;YACF,KAAK;YACL,GAAG,UAAU;SAChB;KACJ,CAAC,CAAC;AACP,CAAC;AAEM,KAAK,UAAU,0BAA0B,CAAC,GAAY,EAAE,GAAa;IACxE,MAAM,iBAAiB,GAAG,IAAA,uBAAa,EAAC,GAAG,EAAE,mBAAmB,CAAC,CAAC;IAClE,MAAM,iBAAiB,CAAC,aAAa,CAAC;QAClC,IAAI,EAAE;YACF,yBAAc,CAAC,cAAc;YAC7B,yBAAc,CAAC,gBAAgB;YAC/B,yBAAc,CAAC,gBAAgB;SAClC;KACJ,CAAC,CAAC;IAEH,MAAM,EAAE,GAAG,IAAA,2BAAiB,EAAC,GAAG,CAAC,CAAC;IAElC,MAAM,UAAU,GAAG,MAAM,IAAA,iCAAa,GAAE,CAAC;IACzC,MAAM,UAAU,GAAG,UAAU,CAAC,aAAa,CAAC,wBAAc,CAAC,CAAC;IAC5D,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,SAAS,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;IAElD,IAAI,CAAC,MAAM,EAAE,CAAC;QACV,MAAM,IAAI,oBAAa,EAAE,CAAC;IAC9B,CAAC;IAED,OAAO,IAAA,aAAI,EAAC,GAAG,EAAE,MAAM,CAAC,CAAC;AAC7B,CAAC"}

package/dist/http/controllers/user-role/module.d.ts

@@ -1,4 +1,4 @@
-import type { UserRole } from '@authup/core';
+import type { UserRole } from '@authup/core-kit';
 export declare class UserRoleController {
     getMany(req: any, res: any): Promise<UserRole[]>;
     add(data: Pick<UserRole, 'role_id' | 'user_id'>, req: any, res: any): Promise<UserRole>;

package/dist/http/controllers/user-role/module.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"module.d.ts","sourceRoot":"","sources":["../../../../src/http/controllers/user-role/module.ts"],"names":[],"mappings":"AAUA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,cAAc,CAAC;AAS7C,qBAEa,kBAAkB;IAErB,OAAO,CACG,GAAG,EAAE,GAAG,EACH,GAAG,EAAE,GAAG,GAC1B,OAAO,CAAC,QAAQ,EAAE,CAAC;IAKhB,GAAG,CACI,IAAI,EAAE,IAAI,CAAC,QAAQ,EAAE,SAAS,GAAG,SAAS,CAAC,EACpC,GAAG,EAAE,GAAG,EACP,GAAG,EAAE,GAAG,GAC1B,OAAO,CAAC,QAAQ,CAAC;IAKd,MAAM,CACK,EAAE,EAAE,MAAM,EACP,GAAG,EAAE,GAAG,EACP,GAAG,EAAE,GAAG,GAC1B,OAAO,CAAC,QAAQ,CAAC;IAKd,IAAI,CACO,EAAE,EAAE,MAAM,EACP,GAAG,EAAE,GAAG,EACP,GAAG,EAAE,GAAG,GAC1B,OAAO,CAAC,QAAQ,CAAC;CAGvB"}
+{"version":3,"file":"module.d.ts","sourceRoot":"","sources":["../../../../src/http/controllers/user-role/module.ts"],"names":[],"mappings":"AAUA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AASjD,qBAEa,kBAAkB;IAErB,OAAO,CACG,GAAG,EAAE,GAAG,EACH,GAAG,EAAE,GAAG,GAC1B,OAAO,CAAC,QAAQ,EAAE,CAAC;IAKhB,GAAG,CACI,IAAI,EAAE,IAAI,CAAC,QAAQ,EAAE,SAAS,GAAG,SAAS,CAAC,EACpC,GAAG,EAAE,GAAG,EACP,GAAG,EAAE,GAAG,GAC1B,OAAO,CAAC,QAAQ,CAAC;IAKd,MAAM,CACK,EAAE,EAAE,MAAM,EACP,GAAG,EAAE,GAAG,EACP,GAAG,EAAE,GAAG,GAC1B,OAAO,CAAC,QAAQ,CAAC;IAKd,IAAI,CACO,EAAE,EAAE,MAAM,EACP,GAAG,EAAE,GAAG,EACP,GAAG,EAAE,GAAG,GAC1B,OAAO,CAAC,QAAQ,CAAC;CAGvB"}

package/dist/http/controllers/user-role/utils/validation.d.ts

@@ -1,6 +1,8 @@
-import type { Request } from 'routup';
+import type { ContainerOptions } from 'validup';
+import { Container } from 'validup';
 import type { UserRoleEntity } from '../../../../domains';
-import type { ExpressValidationResult } from '../../../validation';
-import { RequestHandlerOperation } from '../../../request/constants';
-export declare function runUserRoleValidation(req: Request, operation: `${RequestHandlerOperation.CREATE}` | `${RequestHandlerOperation.UPDATE}`): Promise<ExpressValidationResult<UserRoleEntity>>;
+export declare class UserRoleRequestValidator extends Container<UserRoleEntity> {
+    constructor(options?: ContainerOptions<UserRoleEntity>);
+    mountAll(): void;
+}
 //# sourceMappingURL=validation.d.ts.map

package/dist/http/controllers/user-role/utils/validation.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"validation.d.ts","sourceRoot":"","sources":["../../../../../src/http/controllers/user-role/utils/validation.ts"],"names":[],"mappings":"AAUA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,QAAQ,CAAC;AACtC,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AAG1D,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,qBAAqB,CAAC;AAQnE,OAAO,EAAE,uBAAuB,EAAE,MAAM,4BAA4B,CAAC;AAErE,wBAAsB,qBAAqB,CACvC,GAAG,EAAE,OAAO,EACZ,SAAS,EAAE,GAAG,uBAAuB,CAAC,MAAM,EAAE,GAAG,GAAG,uBAAuB,CAAC,MAAM,EAAE,GACpF,OAAO,CAAC,uBAAuB,CAAC,cAAc,CAAC,CAAC,CA8DnD"}
+{"version":3,"file":"validation.d.ts","sourceRoot":"","sources":["../../../../../src/http/controllers/user-role/utils/validation.ts"],"names":[],"mappings":"AAQA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,SAAS,CAAC;AAChD,OAAO,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AACpC,OAAO,KAAK,EACR,cAAc,EACjB,MAAM,qBAAqB,CAAC;AAI7B,qBAAa,wBAAyB,SAAQ,SAAS,CACvD,cAAc,CACb;gBACe,OAAO,GAAE,gBAAgB,CAAC,cAAc,CAAM;IAM1D,QAAQ;CAiBX"}

package/dist/http/controllers/user-role/utils/validation.js

@@ -6,56 +6,23 @@
  * view the LICENSE file that was distributed with this source code.
  */
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.runUserRoleValidation = void 0;
-const express_validator_1 = require("express-validator");
-const http_1 = require("@ebec/http");
-const core_1 = require("@authup/core");
-const domains_1 = require("../../../../domains");
-const env_1 = require("../../../utils/env");
-const validation_1 = require("../../../validation");
-const constants_1 = require("../../../request/constants");
-async function runUserRoleValidation(req, operation) {
-    const result = (0, validation_1.initExpressValidationResult)();
-    if (operation === constants_1.RequestHandlerOperation.CREATE) {
-        await (0, express_validator_1.check)('user_id')
+exports.UserRoleRequestValidator = void 0;
+const adapter_validator_1 = require("@validup/adapter-validator");
+const validup_1 = require("validup");
+const request_1 = require("../../../request");
+class UserRoleRequestValidator extends validup_1.Container {
+    constructor(options = {}) {
+        super(options);
+        this.mountAll();
+    }
+    mountAll() {
+        this.mount('user_id', { group: request_1.RequestHandlerOperation.CREATE }, (0, adapter_validator_1.createValidator)((chain) => chain
             .exists()
-            .isUUID()
-            .run(req);
-        await (0, express_validator_1.check)('role_id')
+            .isUUID()));
+        this.mount('role_id', { group: request_1.RequestHandlerOperation.CREATE }, (0, adapter_validator_1.createValidator)((chain) => chain
             .exists()
-            .isUUID()
-            .run(req);
-    }
-    // ----------------------------------------------
-    const validation = (0, express_validator_1.validationResult)(req);
-    if (!validation.isEmpty()) {
-        throw new validation_1.RequestValidationError(validation);
-    }
-    result.data = (0, validation_1.matchedValidationData)(req, { includeOptionals: true });
-    // ----------------------------------------------
-    await (0, validation_1.extendExpressValidationResultWithRelation)(result, domains_1.RoleEntity, {
-        id: 'role_id',
-        entity: 'role',
-    });
-    if (result.relation.role &&
-        result.relation.role.realm_id) {
-        if (!(0, core_1.isRealmResourceWritable)((0, env_1.useRequestEnv)(req, 'realm'), result.relation.role.realm_id)) {
-            throw new http_1.BadRequestError((0, validation_1.buildRequestValidationErrorMessage)('role_id'));
-        }
-        result.data.role_realm_id = result.relation.role.realm_id;
-    }
-    await (0, validation_1.extendExpressValidationResultWithRelation)(result, domains_1.UserEntity, {
-        id: 'user_id',
-        entity: 'user',
-    });
-    if (result.relation.user) {
-        if (!(0, core_1.isRealmResourceWritable)((0, env_1.useRequestEnv)(req, 'realm'), result.relation.user.realm_id)) {
-            throw new http_1.BadRequestError((0, validation_1.buildRequestValidationErrorMessage)('user_id'));
-        }
-        result.data.user_realm_id = result.relation.user.realm_id;
+            .isUUID()));
     }
-    // ----------------------------------------------
-    return result;
 }
-exports.runUserRoleValidation = runUserRoleValidation;
+exports.UserRoleRequestValidator = UserRoleRequestValidator;
 //# sourceMappingURL=validation.js.map

package/dist/http/controllers/user-role/utils/validation.js.map

@@ -1 +1 @@
-{"version":3,"file":"validation.js","sourceRoot":"","sources":["../../../../../src/http/controllers/user-role/utils/validation.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;;AAEH,yDAA4D;AAC5D,qCAA6C;AAC7C,uCAAuD;AAGvD,iDAA6D;AAC7D,4CAAmD;AAEnD,oDAM6B;AAC7B,0DAAqE;AAE9D,KAAK,UAAU,qBAAqB,CACvC,GAAY,EACZ,SAAoF;IAEpF,MAAM,MAAM,GAA6C,IAAA,wCAA2B,GAAE,CAAC;IAEvF,IAAI,SAAS,KAAK,mCAAuB,CAAC,MAAM,EAAE,CAAC;QAC/C,MAAM,IAAA,yBAAK,EAAC,SAAS,CAAC;aACjB,MAAM,EAAE;aACR,MAAM,EAAE;aACR,GAAG,CAAC,GAAG,CAAC,CAAC;QAEd,MAAM,IAAA,yBAAK,EAAC,SAAS,CAAC;aACjB,MAAM,EAAE;aACR,MAAM,EAAE;aACR,GAAG,CAAC,GAAG,CAAC,CAAC;IAClB,CAAC;IAED,iDAAiD;IAEjD,MAAM,UAAU,GAAG,IAAA,oCAAgB,EAAC,GAAG,CAAC,CAAC;IACzC,IAAI,CAAC,UAAU,CAAC,OAAO,EAAE,EAAE,CAAC;QACxB,MAAM,IAAI,mCAAsB,CAAC,UAAU,CAAC,CAAC;IACjD,CAAC;IAED,MAAM,CAAC,IAAI,GAAG,IAAA,kCAAqB,EAAC,GAAG,EAAE,EAAE,gBAAgB,EAAE,IAAI,EAAE,CAAC,CAAC;IAErE,iDAAiD;IAEjD,MAAM,IAAA,sDAAyC,EAAC,MAAM,EAAE,oBAAU,EAAE;QAChE,EAAE,EAAE,SAAS;QACb,MAAM,EAAE,MAAM;KACjB,CAAC,CAAC;IAEH,IACI,MAAM,CAAC,QAAQ,CAAC,IAAI;QACpB,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,QAAQ,EAC/B,CAAC;QACC,IACI,CAAC,IAAA,8BAAuB,EAAC,IAAA,mBAAa,EAAC,GAAG,EAAE,OAAO,CAAC,EAAE,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC,EACtF,CAAC;YACC,MAAM,IAAI,sBAAe,CAAC,IAAA,+CAAkC,EAAC,SAAS,CAAC,CAAC,CAAC;QAC7E,CAAC;QAED,MAAM,CAAC,IAAI,CAAC,aAAa,GAAG,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC;IAC9D,CAAC;IAED,MAAM,IAAA,sDAAyC,EAAC,MAAM,EAAE,oBAAU,EAAE;QAChE,EAAE,EAAE,SAAS;QACb,MAAM,EAAE,MAAM;KACjB,CAAC,CAAC;IAEH,IAAI,MAAM,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC;QACvB,IACI,CAAC,IAAA,8BAAuB,EAAC,IAAA,mBAAa,EAAC,GAAG,EAAE,OAAO,CAAC,EAAE,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC,EACtF,CAAC;YACC,MAAM,IAAI,sBAAe,CAAC,IAAA,+CAAkC,EAAC,SAAS,CAAC,CAAC,CAAC;QAC7E,CAAC;QAED,MAAM,CAAC,IAAI,CAAC,aAAa,GAAG,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC;IAC9D,CAAC;IAED,iDAAiD;IAEjD,OAAO,MAAM,CAAC;AAClB,CAAC;AAjED,sDAiEC"}
+{"version":3,"file":"validation.js","sourceRoot":"","sources":["../../../../../src/http/controllers/user-role/utils/validation.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;;AAEH,kEAA6D;AAE7D,qCAAoC;AAKpC,8CAA2D;AAE3D,MAAa,wBAAyB,SAAQ,mBAE7C;IACG,YAAY,UAA4C,EAAE;QACtD,KAAK,CAAC,OAAO,CAAC,CAAC;QAEf,IAAI,CAAC,QAAQ,EAAE,CAAC;IACpB,CAAC;IAED,QAAQ;QACJ,IAAI,CAAC,KAAK,CACN,SAAS,EACT,EAAE,KAAK,EAAE,iCAAuB,CAAC,MAAM,EAAE,EACzC,IAAA,mCAAe,EAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK;aAC3B,MAAM,EAAE;aACR,MAAM,EAAE,CAAC,CACjB,CAAC;QAEF,IAAI,CAAC,KAAK,CACN,SAAS,EACT,EAAE,KAAK,EAAE,iCAAuB,CAAC,MAAM,EAAE,EACzC,IAAA,mCAAe,EAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK;aAC3B,MAAM,EAAE;aACR,MAAM,EAAE,CAAC,CACjB,CAAC;IACN,CAAC;CACJ;AA1BD,4DA0BC"}

package/dist/http/index.d.ts

@@ -4,7 +4,5 @@ export * from './request';
 export * from './router';
 export * from './server';
 export * from './swagger';
-export * from './type';
 export * from './oauth2';
-export * from './utils';
 //# sourceMappingURL=index.d.ts.map

package/dist/http/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/http/index.ts"],"names":[],"mappings":"AAOA,cAAc,eAAe,CAAC;AAC9B,cAAc,cAAc,CAAC;AAC7B,cAAc,WAAW,CAAC;AAC1B,cAAc,UAAU,CAAC;AACzB,cAAc,UAAU,CAAC;AACzB,cAAc,WAAW,CAAC;AAC1B,cAAc,QAAQ,CAAC;AACvB,cAAc,UAAU,CAAC;AACzB,cAAc,SAAS,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/http/index.ts"],"names":[],"mappings":"AAOA,cAAc,eAAe,CAAC;AAC9B,cAAc,cAAc,CAAC;AAC7B,cAAc,WAAW,CAAC;AAC1B,cAAc,UAAU,CAAC;AACzB,cAAc,UAAU,CAAC;AACzB,cAAc,WAAW,CAAC;AAC1B,cAAc,UAAU,CAAC"}

package/dist/http/index.js

@@ -26,7 +26,5 @@ __exportStar(require("./request"), exports);
 __exportStar(require("./router"), exports);
 __exportStar(require("./server"), exports);
 __exportStar(require("./swagger"), exports);
-__exportStar(require("./type"), exports);
 __exportStar(require("./oauth2"), exports);
-__exportStar(require("./utils"), exports);
 //# sourceMappingURL=index.js.map

package/dist/http/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/http/index.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;;;;;;;;;;;;;;;AAEH,gDAA8B;AAC9B,+CAA6B;AAC7B,4CAA0B;AAC1B,2CAAyB;AACzB,2CAAyB;AACzB,4CAA0B;AAC1B,yCAAuB;AACvB,2CAAyB;AACzB,0CAAwB"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/http/index.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;;;;;;;;;;;;;;;AAEH,gDAA8B;AAC9B,+CAA6B;AAC7B,4CAA0B;AAC1B,2CAAyB;AACzB,2CAAyB;AACzB,4CAA0B;AAC1B,2CAAyB"}

package/dist/http/middleware/built-in/authorization/basic.d.ts

@@ -0,0 +1,4 @@
+import type { BasicAuthorizationHeader } from 'hapic';
+import type { Request } from 'routup';
+export declare function verifyBasicAuthorizationHeader(request: Request, header: BasicAuthorizationHeader): Promise<void>;
+//# sourceMappingURL=basic.d.ts.map

package/dist/http/middleware/built-in/authorization/basic.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"basic.d.ts","sourceRoot":"","sources":["../../../../../src/http/middleware/built-in/authorization/basic.ts"],"names":[],"mappings":"AAQA,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,OAAO,CAAC;AACtD,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,QAAQ,CAAC;AAMtC,wBAAsB,8BAA8B,CAChD,OAAO,EAAE,OAAO,EAChB,MAAM,EAAE,wBAAwB,iBAoDnC"}

package/dist/http/middleware/built-in/authorization/basic.js

@@ -0,0 +1,63 @@
+"use strict";
+/*
+ * Copyright (c) 2024.
+ * Author Peter Placzek (tada5hi)
+ * For the full copyright and license information,
+ * view the LICENSE file that was distributed with this source code.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.verifyBasicAuthorizationHeader = verifyBasicAuthorizationHeader;
+const core_kit_1 = require("@authup/core-kit");
+const typeorm_extension_1 = require("typeorm-extension");
+const config_1 = require("../../../../config");
+const domains_1 = require("../../../../domains");
+const request_1 = require("../../../request");
+async function verifyBasicAuthorizationHeader(request, header) {
+    const config = (0, config_1.useConfig)();
+    const dataSource = await (0, typeorm_extension_1.useDataSource)();
+    if (config.userAuthBasic) {
+        const userRepository = new domains_1.UserRepository(dataSource);
+        const user = await userRepository.verifyCredentials(header.username, header.password);
+        if (user) {
+            await userRepository.findAndAppendExtraAttributesTo(user);
+            (0, request_1.setRequestEnv)(request, 'scopes', [core_kit_1.ScopeName.GLOBAL]);
+            (0, request_1.setRequestIdentity)(request, {
+                type: 'user',
+                id: user.id,
+                attributes: user,
+                realmId: user.realm.id,
+                realmName: user.realm.name,
+            });
+            return;
+        }
+    }
+    if (config.robotAuthBasic) {
+        const robotRepository = new domains_1.RobotRepository(dataSource);
+        const robot = await robotRepository.verifyCredentials(header.username, header.password);
+        if (robot) {
+            (0, request_1.setRequestEnv)(request, 'scopes', [core_kit_1.ScopeName.GLOBAL]);
+            (0, request_1.setRequestIdentity)(request, {
+                type: 'robot',
+                id: robot.id,
+                attributes: robot,
+                realmId: robot.realm.id,
+                realmName: robot.realm.name,
+            });
+        }
+    }
+    if (config.clientAuthBasic) {
+        const clientRepository = new domains_1.ClientRepository(dataSource);
+        const client = await clientRepository.verifyCredentials(header.username, header.password);
+        if (client) {
+            (0, request_1.setRequestEnv)(request, 'scopes', [core_kit_1.ScopeName.GLOBAL]);
+            (0, request_1.setRequestIdentity)(request, {
+                type: 'client',
+                id: client.id,
+                attributes: client,
+                realmId: client.realm.id,
+                realmName: client.realm.name,
+            });
+        }
+    }
+}
+//# sourceMappingURL=basic.js.map

package/dist/http/middleware/built-in/authorization/basic.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"basic.js","sourceRoot":"","sources":["../../../../../src/http/middleware/built-in/authorization/basic.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;AAUH,wEAsDC;AA9DD,+CAA6C;AAG7C,yDAAkD;AAClD,+CAA+C;AAC/C,iDAAwF;AACxF,8CAAqE;AAE9D,KAAK,UAAU,8BAA8B,CAChD,OAAgB,EAChB,MAAgC;IAEhC,MAAM,MAAM,GAAG,IAAA,kBAAS,GAAE,CAAC;IAC3B,MAAM,UAAU,GAAG,MAAM,IAAA,iCAAa,GAAE,CAAC;IAEzC,IAAI,MAAM,CAAC,aAAa,EAAE,CAAC;QACvB,MAAM,cAAc,GAAG,IAAI,wBAAc,CAAC,UAAU,CAAC,CAAC;QACtD,MAAM,IAAI,GAAG,MAAM,cAAc,CAAC,iBAAiB,CAAC,MAAM,CAAC,QAAQ,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAC;QACtF,IAAI,IAAI,EAAE,CAAC;YACP,MAAM,cAAc,CAAC,8BAA8B,CAAC,IAAI,CAAC,CAAC;YAC1D,IAAA,uBAAa,EAAC,OAAO,EAAE,QAAQ,EAAE,CAAC,oBAAS,CAAC,MAAM,CAAC,CAAC,CAAC;YACrD,IAAA,4BAAkB,EAAC,OAAO,EAAE;gBACxB,IAAI,EAAE,MAAM;gBACZ,EAAE,EAAE,IAAI,CAAC,EAAE;gBACX,UAAU,EAAE,IAAI;gBAChB,OAAO,EAAE,IAAI,CAAC,KAAK,CAAC,EAAE;gBACtB,SAAS,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI;aAC7B,CAAC,CAAC;YAEH,OAAO;QACX,CAAC;IACL,CAAC;IAED,IAAI,MAAM,CAAC,cAAc,EAAE,CAAC;QACxB,MAAM,eAAe,GAAG,IAAI,yBAAe,CAAC,UAAU,CAAC,CAAC;QACxD,MAAM,KAAK,GAAG,MAAM,eAAe,CAAC,iBAAiB,CAAC,MAAM,CAAC,QAAQ,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAC;QACxF,IAAI,KAAK,EAAE,CAAC;YACR,IAAA,uBAAa,EAAC,OAAO,EAAE,QAAQ,EAAE,CAAC,oBAAS,CAAC,MAAM,CAAC,CAAC,CAAC;YACrD,IAAA,4BAAkB,EAAC,OAAO,EAAE;gBACxB,IAAI,EAAE,OAAO;gBACb,EAAE,EAAE,KAAK,CAAC,EAAE;gBACZ,UAAU,EAAE,KAAK;gBACjB,OAAO,EAAE,KAAK,CAAC,KAAK,CAAC,EAAE;gBACvB,SAAS,EAAE,KAAK,CAAC,KAAK,CAAC,IAAI;aAC9B,CAAC,CAAC;QACP,CAAC;IACL,CAAC;IAED,IAAI,MAAM,CAAC,eAAe,EAAE,CAAC;QACzB,MAAM,gBAAgB,GAAG,IAAI,0BAAgB,CAAC,UAAU,CAAC,CAAC;QAC1D,MAAM,MAAM,GAAG,MAAM,gBAAgB,CAAC,iBAAiB,CAAC,MAAM,CAAC,QAAQ,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAC;QAC1F,IAAI,MAAM,EAAE,CAAC;YACT,IAAA,uBAAa,EAAC,OAAO,EAAE,QAAQ,EAAE,CAAC,oBAAS,CAAC,MAAM,CAAC,CAAC,CAAC;YACrD,IAAA,4BAAkB,EAAC,OAAO,EAAE;gBACxB,IAAI,EAAE,QAAQ;gBACd,EAAE,EAAE,MAAM,CAAC,EAAE;gBACb,UAAU,EAAE,MAAM;gBAClB,OAAO,EAAE,MAAM,CAAC,KAAK,CAAC,EAAE;gBACxB,SAAS,EAAE,MAAM,CAAC,KAAK,CAAC,IAAI;aAC/B,CAAC,CAAC;QACP,CAAC;IACL,CAAC;AACL,CAAC"}

package/dist/http/middleware/built-in/authorization/bearer.d.ts

@@ -0,0 +1,4 @@
+import type { BearerAuthorizationHeader } from 'hapic';
+import type { Request } from 'routup';
+export declare function verifyBearerAuthorizationHeader(request: Request, header: BearerAuthorizationHeader): Promise<void>;
+//# sourceMappingURL=bearer.d.ts.map

package/dist/http/middleware/built-in/authorization/bearer.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"bearer.d.ts","sourceRoot":"","sources":["../../../../../src/http/middleware/built-in/authorization/bearer.ts"],"names":[],"mappings":"AAWA,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,OAAO,CAAC;AACvD,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,QAAQ,CAAC;AAQtC,wBAAsB,+BAA+B,CACjD,OAAO,EAAE,OAAO,EAChB,MAAM,EAAE,yBAAyB,iBAkDpC"}

package/dist/http/middleware/built-in/authorization/bearer.js

@@ -0,0 +1,58 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.verifyBearerAuthorizationHeader = verifyBearerAuthorizationHeader;
+/*
+ * Copyright (c) 2024.
+ * Author Peter Placzek (tada5hi)
+ * For the full copyright and license information,
+ * view the LICENSE file that was distributed with this source code.
+ */
+const core_kit_1 = require("@authup/core-kit");
+const kit_1 = require("@authup/kit");
+const server_kit_1 = require("@authup/server-kit");
+const typeorm_extension_1 = require("typeorm-extension");
+const domains_1 = require("../../../../domains");
+const oauth2_1 = require("../../../oauth2");
+const request_1 = require("../../../request");
+async function verifyBearerAuthorizationHeader(request, header) {
+    const payload = await (0, oauth2_1.readOAuth2TokenPayload)(header.token);
+    if (payload.kind !== kit_1.OAuth2TokenKind.ACCESS) {
+        throw kit_1.TokenError.accessTokenRequired();
+    }
+    (0, request_1.setRequestEnv)(request, 'token', header.token);
+    (0, request_1.setRequestEnv)(request, 'scopes', (0, core_kit_1.transformOAuth2ScopeToArray)(payload.scope));
+    const sub = await (0, oauth2_1.loadOAuth2SubEntity)(payload.sub_kind, payload.sub, payload.scope);
+    let realmId;
+    let realmName;
+    if (payload.realm_name) {
+        realmName = payload.realm_name;
+        realmId = payload.realm_id;
+    }
+    else {
+        // todo: check realm_id, but it should always be given.
+        const dataSource = await (0, typeorm_extension_1.useDataSource)();
+        const realmRepository = dataSource.getRepository(domains_1.RealmEntity);
+        const realm = await realmRepository.findOne({
+            where: {
+                id: payload.realm_id,
+            },
+            cache: {
+                id: (0, server_kit_1.buildRedisKeyPath)({
+                    prefix: domains_1.CachePrefix.REALM,
+                    key: payload.realm_id,
+                }),
+                milliseconds: 60000,
+            },
+        });
+        realmName = realm.name;
+        realmId = realm.id;
+    }
+    (0, request_1.setRequestIdentity)(request, {
+        type: payload.sub_kind,
+        id: payload.sub,
+        attributes: sub,
+        realmId,
+        realmName,
+    });
+}
+//# sourceMappingURL=bearer.js.map

package/dist/http/middleware/built-in/authorization/bearer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"bearer.js","sourceRoot":"","sources":["../../../../../src/http/middleware/built-in/authorization/bearer.ts"],"names":[],"mappings":";;AAoBA,0EAoDC;AAxED;;;;;GAKG;AACH,+CAA+D;AAC/D,qCAEqB;AACrB,mDAAuD;AAGvD,yDAAkD;AAClD,iDAE6B;AAC7B,4CAA8E;AAC9E,8CAAqE;AAE9D,KAAK,UAAU,+BAA+B,CACjD,OAAgB,EAChB,MAAiC;IAEjC,MAAM,OAAO,GAAG,MAAM,IAAA,+BAAsB,EAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAC3D,IAAI,OAAO,CAAC,IAAI,KAAK,qBAAe,CAAC,MAAM,EAAE,CAAC;QAC1C,MAAM,gBAAU,CAAC,mBAAmB,EAAE,CAAC;IAC3C,CAAC;IAED,IAAA,uBAAa,EAAC,OAAO,EAAE,OAAO,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC;IAC9C,IAAA,uBAAa,EAAC,OAAO,EAAE,QAAQ,EAAE,IAAA,sCAA2B,EAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC;IAE7E,MAAM,GAAG,GAAG,MAAM,IAAA,4BAAmB,EACjC,OAAO,CAAC,QAAQ,EAChB,OAAO,CAAC,GAAG,EACX,OAAO,CAAC,KAAK,CAChB,CAAC;IAEF,IAAI,OAAgB,CAAC;IACrB,IAAI,SAAiB,CAAC;IAEtB,IAAI,OAAO,CAAC,UAAU,EAAE,CAAC;QACrB,SAAS,GAAG,OAAO,CAAC,UAAU,CAAC;QAC/B,OAAO,GAAG,OAAO,CAAC,QAAQ,CAAC;IAC/B,CAAC;SAAM,CAAC;QACJ,uDAAuD;QACvD,MAAM,UAAU,GAAG,MAAM,IAAA,iCAAa,GAAE,CAAC;QACzC,MAAM,eAAe,GAAG,UAAU,CAAC,aAAa,CAAC,qBAAW,CAAC,CAAC;QAC9D,MAAM,KAAK,GAAG,MAAM,eAAe,CAAC,OAAO,CAAC;YACxC,KAAK,EAAE;gBACH,EAAE,EAAE,OAAO,CAAC,QAAQ;aACvB;YACD,KAAK,EAAE;gBACH,EAAE,EAAE,IAAA,8BAAiB,EAAC;oBAClB,MAAM,EAAE,qBAAW,CAAC,KAAK;oBACzB,GAAG,EAAE,OAAO,CAAC,QAAQ;iBACxB,CAAC;gBACF,YAAY,EAAE,KAAM;aACvB;SACJ,CAAC,CAAC;QAEH,SAAS,GAAG,KAAK,CAAC,IAAI,CAAC;QACvB,OAAO,GAAG,KAAK,CAAC,EAAE,CAAC;IACvB,CAAC;IAED,IAAA,4BAAkB,EAAC,OAAO,EAAE;QACxB,IAAI,EAAE,OAAO,CAAC,QAAQ;QACtB,EAAE,EAAE,OAAO,CAAC,GAAG;QACf,UAAU,EAAE,GAAG;QACf,OAAO;QACP,SAAS;KACZ,CAAC,CAAC;AACP,CAAC"}

package/dist/http/middleware/built-in/authorization/index.d.ts

@@ -0,0 +1,5 @@
+export * from './module';
+export * from './verify';
+export { verifyBasicAuthorizationHeader } from './basic';
+export { verifyBearerAuthorizationHeader } from './bearer';
+//# sourceMappingURL=index.d.ts.map

package/dist/http/middleware/built-in/authorization/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../src/http/middleware/built-in/authorization/index.ts"],"names":[],"mappings":"AAOA,cAAc,UAAU,CAAC;AACzB,cAAc,UAAU,CAAC;AACzB,OAAO,EAAE,8BAA8B,EAAE,MAAM,SAAS,CAAC;AACzD,OAAO,EAAE,+BAA+B,EAAE,MAAM,UAAU,CAAC"}

package/dist/http/middleware/built-in/authorization/index.js

@@ -0,0 +1,30 @@
+"use strict";
+/*
+ * Copyright (c) 2022.
+ * Author Peter Placzek (tada5hi)
+ * For the full copyright and license information,
+ * view the LICENSE file that was distributed with this source code.
+ */
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __exportStar = (this && this.__exportStar) || function(m, exports) {
+    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.verifyBearerAuthorizationHeader = exports.verifyBasicAuthorizationHeader = void 0;
+__exportStar(require("./module"), exports);
+__exportStar(require("./verify"), exports);
+var basic_1 = require("./basic");
+Object.defineProperty(exports, "verifyBasicAuthorizationHeader", { enumerable: true, get: function () { return basic_1.verifyBasicAuthorizationHeader; } });
+var bearer_1 = require("./bearer");
+Object.defineProperty(exports, "verifyBearerAuthorizationHeader", { enumerable: true, get: function () { return bearer_1.verifyBearerAuthorizationHeader; } });
+//# sourceMappingURL=index.js.map

package/dist/http/middleware/built-in/authorization/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../../src/http/middleware/built-in/authorization/index.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;;;;;;;;;;;;;;;;AAEH,2CAAyB;AACzB,2CAAyB;AACzB,iCAAyD;AAAhD,uHAAA,8BAA8B,OAAA;AACvC,mCAA2D;AAAlD,yHAAA,+BAA+B,OAAA"}

package/dist/http/middleware/built-in/authorization/module.d.ts

@@ -0,0 +1,3 @@
+import type { Router } from 'routup';
+export declare function registerAuthorizationMiddleware(router: Router): void;
+//# sourceMappingURL=module.d.ts.map

package/dist/http/middleware/built-in/authorization/module.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"module.d.ts","sourceRoot":"","sources":["../../../../../src/http/middleware/built-in/authorization/module.ts"],"names":[],"mappings":"AASA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAUrC,wBAAgB,+BAA+B,CAAC,MAAM,EAAE,MAAM,QAoD7D"}

package/dist/http/middleware/built-in/authorization/module.js

@@ -0,0 +1,67 @@
+"use strict";
+/*
+ * Copyright (c) 2021-2022.
+ * Author Peter Placzek (tada5hi)
+ * For the full copyright and license information,
+ * view the LICENSE file that was distributed with this source code.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.registerAuthorizationMiddleware = registerAuthorizationMiddleware;
+const hapic_1 = require("hapic");
+const routup_1 = require("routup");
+const cookie_1 = require("@routup/basic/cookie");
+const core_http_kit_1 = require("@authup/core-http-kit");
+const kit_1 = require("@authup/kit");
+const typeorm_extension_1 = require("typeorm-extension");
+const config_1 = require("../../../../config");
+const security_1 = require("../../../../security");
+const request_1 = require("../../../request");
+const verify_1 = require("./verify");
+function registerAuthorizationMiddleware(router) {
+    router.use((0, routup_1.coreHandler)(async (request, response, next) => {
+        let { authorization: headerValue } = request.headers;
+        try {
+            if (typeof headerValue === 'undefined') {
+                const cookie = (0, cookie_1.useRequestCookie)(request, core_http_kit_1.CookieName.ACCESS_TOKEN);
+                if (cookie) {
+                    headerValue = (0, hapic_1.stringifyAuthorizationHeader)({
+                        type: 'Bearer',
+                        token: cookie,
+                    });
+                }
+            }
+            if (typeof headerValue !== 'string') {
+                next();
+                return;
+            }
+            const header = (0, hapic_1.parseAuthorizationHeader)(headerValue);
+            await (0, verify_1.verifyAuthorizationHeader)(request, header);
+            const dataSource = await (0, typeorm_extension_1.useDataSource)();
+            const permissionProvider = new security_1.PermissionDBProvider(dataSource);
+            const permissionChecker = new kit_1.PermissionChecker({
+                provider: permissionProvider,
+                policyEngine: new security_1.PolicyEngine(),
+            });
+            const requestPermissionChecker = new request_1.RequestPermissionChecker(request, permissionChecker);
+            (0, request_1.setRequestEnv)(request, 'permissionChecker', requestPermissionChecker);
+            next();
+        }
+        catch (e) {
+            const config = (0, config_1.useConfig)();
+            const cookieOptions = {};
+            if (config.cookieDomain) {
+                cookieOptions.domain = config.cookieDomain;
+            }
+            else {
+                cookieOptions.domain = (0, routup_1.getRequestHostName)(response.req, {
+                    trustProxy: true,
+                });
+            }
+            (0, cookie_1.unsetResponseCookie)(response, core_http_kit_1.CookieName.ACCESS_TOKEN, cookieOptions);
+            (0, cookie_1.unsetResponseCookie)(response, core_http_kit_1.CookieName.REFRESH_TOKEN, cookieOptions);
+            (0, cookie_1.unsetResponseCookie)(response, core_http_kit_1.CookieName.ACCESS_TOKEN_EXPIRE_DATE, cookieOptions);
+            next(e);
+        }
+    }));
+}
+//# sourceMappingURL=module.js.map

package/dist/http/middleware/built-in/authorization/module.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"module.js","sourceRoot":"","sources":["../../../../../src/http/middleware/built-in/authorization/module.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;AAcH,0EAoDC;AAhED,iCAA+E;AAC/E,mCAAyD;AAEzD,iDAAoG;AACpG,yDAAmD;AACnD,qCAAgD;AAChD,yDAAkD;AAClD,+CAA+C;AAC/C,mDAA0E;AAC1E,8CAA2E;AAC3E,qCAAqD;AAErD,SAAgB,+BAA+B,CAAC,MAAc;IAC1D,MAAM,CAAC,GAAG,CAAC,IAAA,oBAAW,EAAC,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,EAAE;QACrD,IAAI,EAAE,aAAa,EAAE,WAAW,EAAE,GAAG,OAAO,CAAC,OAAO,CAAC;QAErD,IAAI,CAAC;YACD,IAAI,OAAO,WAAW,KAAK,WAAW,EAAE,CAAC;gBACrC,MAAM,MAAM,GAAG,IAAA,yBAAgB,EAAC,OAAO,EAAE,0BAAU,CAAC,YAAY,CAAC,CAAC;gBAClE,IAAI,MAAM,EAAE,CAAC;oBACT,WAAW,GAAG,IAAA,oCAA4B,EAAC;wBACvC,IAAI,EAAE,QAAQ;wBACd,KAAK,EAAE,MAAM;qBAChB,CAAC,CAAC;gBACP,CAAC;YACL,CAAC;YAED,IAAI,OAAO,WAAW,KAAK,QAAQ,EAAE,CAAC;gBAClC,IAAI,EAAE,CAAC;gBACP,OAAO;YACX,CAAC;YAED,MAAM,MAAM,GAAG,IAAA,gCAAwB,EAAC,WAAW,CAAC,CAAC;YACrD,MAAM,IAAA,kCAAyB,EAAC,OAAO,EAAE,MAAM,CAAC,CAAC;YAEjD,MAAM,UAAU,GAAG,MAAM,IAAA,iCAAa,GAAE,CAAC;YACzC,MAAM,kBAAkB,GAAG,IAAI,+BAAoB,CAAC,UAAU,CAAC,CAAC;YAChE,MAAM,iBAAiB,GAAG,IAAI,uBAAiB,CAAC;gBAC5C,QAAQ,EAAE,kBAAkB;gBAC5B,YAAY,EAAE,IAAI,uBAAY,EAAE;aACnC,CAAC,CAAC;YACH,MAAM,wBAAwB,GAAG,IAAI,kCAAwB,CAAC,OAAO,EAAE,iBAAiB,CAAC,CAAC;YAC1F,IAAA,uBAAa,EAAC,OAAO,EAAE,mBAAmB,EAAE,wBAAwB,CAAC,CAAC;YAEtE,IAAI,EAAE,CAAC;QACX,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACT,MAAM,MAAM,GAAG,IAAA,kBAAS,GAAE,CAAC;YAC3B,MAAM,aAAa,GAAsB,EAAE,CAAC;YAE5C,IAAI,MAAM,CAAC,YAAY,EAAE,CAAC;gBACtB,aAAa,CAAC,MAAM,GAAG,MAAM,CAAC,YAAY,CAAC;YAC/C,CAAC;iBAAM,CAAC;gBACJ,aAAa,CAAC,MAAM,GAAG,IAAA,2BAAkB,EAAC,QAAQ,CAAC,GAAG,EAAE;oBACpD,UAAU,EAAE,IAAI;iBACnB,CAAC,CAAC;YACP,CAAC;YAED,IAAA,4BAAmB,EAAC,QAAQ,EAAE,0BAAU,CAAC,YAAY,EAAE,aAAa,CAAC,CAAC;YACtE,IAAA,4BAAmB,EAAC,QAAQ,EAAE,0BAAU,CAAC,aAAa,EAAE,aAAa,CAAC,CAAC;YACvE,IAAA,4BAAmB,EAAC,QAAQ,EAAE,0BAAU,CAAC,wBAAwB,EAAE,aAAa,CAAC,CAAC;YAElF,IAAI,CAAC,CAAC,CAAC,CAAC;QACZ,CAAC;IACL,CAAC,CAAC,CAAC,CAAC;AACR,CAAC"}

package/dist/http/middleware/built-in/authorization/verify.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"verify.d.ts","sourceRoot":"","sources":["../../../../../src/http/middleware/built-in/authorization/verify.ts"],"names":[],"mappings":"AAQA,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,OAAO,CAAC;AAEjD,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,QAAQ,CAAC;AAItC,wBAAsB,yBAAyB,CAC3C,OAAO,EAAE,OAAO,EAChB,MAAM,EAAE,mBAAmB,GAC3B,OAAO,CAAC,IAAI,CAAC,CAShB"}

package/dist/http/middleware/built-in/authorization/verify.js

@@ -0,0 +1,23 @@
+"use strict";
+/*
+ * Copyright (c) 2022-2022.
+ * Author Peter Placzek (tada5hi)
+ * For the full copyright and license information,
+ * view the LICENSE file that was distributed with this source code.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.verifyAuthorizationHeader = verifyAuthorizationHeader;
+const kit_1 = require("@authup/kit");
+const hapic_1 = require("hapic");
+const basic_1 = require("./basic");
+const bearer_1 = require("./bearer");
+async function verifyAuthorizationHeader(request, header) {
+    switch (header.type) {
+        case hapic_1.AuthorizationHeaderType.BEARER:
+            return (0, bearer_1.verifyBearerAuthorizationHeader)(request, header);
+        case hapic_1.AuthorizationHeaderType.BASIC:
+            return (0, basic_1.verifyBasicAuthorizationHeader)(request, header);
+    }
+    throw kit_1.HeaderError.unsupportedHeaderType(header.type);
+}
+//# sourceMappingURL=verify.js.map

package/dist/http/middleware/built-in/authorization/verify.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"verify.js","sourceRoot":"","sources":["../../../../../src/http/middleware/built-in/authorization/verify.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;AASH,8DAYC;AAnBD,qCAA0C;AAE1C,iCAAgD;AAEhD,mCAAyD;AACzD,qCAA2D;AAEpD,KAAK,UAAU,yBAAyB,CAC3C,OAAgB,EAChB,MAA2B;IAE3B,QAAQ,MAAM,CAAC,IAAI,EAAE,CAAC;QAClB,KAAK,+BAAuB,CAAC,MAAM;YAC/B,OAAO,IAAA,wCAA+B,EAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QAC5D,KAAK,+BAAuB,CAAC,KAAK;YAC9B,OAAO,IAAA,sCAA8B,EAAC,OAAO,EAAE,MAAM,CAAC,CAAC;IAC/D,CAAC;IAED,MAAM,iBAAW,CAAC,qBAAqB,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;AACzD,CAAC"}

package/dist/http/middleware/built-in/basic.js

@@ -6,10 +6,9 @@
  * view the LICENSE file that was distributed with this source code.
  */
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.registerBasicMiddleware = void 0;
+exports.registerBasicMiddleware = registerBasicMiddleware;
 const basic_1 = require("@routup/basic");
 function registerBasicMiddleware(router, input) {
     router.use((0, basic_1.basic)(input));
 }
-exports.registerBasicMiddleware = registerBasicMiddleware;
 //# sourceMappingURL=basic.js.map