@authup/server-core 1.0.0-beta.2 → 1.0.0-beta.21

package/dist/http/oauth2/token/builder/refresh-token.js

@@ -6,12 +6,14 @@
  * view the LICENSE file that was distributed with this source code.
  */
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.transformToRefreshTokenEntity = exports.transformToRefreshTokenPayload = exports.buildOAuth2RefreshTokenPayload = void 0;
+exports.buildOAuth2RefreshTokenPayload = buildOAuth2RefreshTokenPayload;
+exports.transformToRefreshTokenPayload = transformToRefreshTokenPayload;
+exports.transformToRefreshTokenEntity = transformToRefreshTokenEntity;
 const node_crypto_1 = require("node:crypto");
-const core_1 = require("@authup/core");
+const kit_1 = require("@authup/kit");
 function buildOAuth2RefreshTokenPayload(context) {
     return {
-        kind: core_1.OAuth2TokenKind.REFRESH,
+        kind: kit_1.OAuth2TokenKind.REFRESH,
         jti: context.id || (0, node_crypto_1.randomUUID)(),
         sub: context.sub,
         sub_kind: context.subKind,
@@ -21,7 +23,6 @@ function buildOAuth2RefreshTokenPayload(context) {
         ...(context.scope ? { scope: context.scope } : {}),
     };
 }
-exports.buildOAuth2RefreshTokenPayload = buildOAuth2RefreshTokenPayload;
 function transformToRefreshTokenPayload(accessToken, refreshToken) {
     return buildOAuth2RefreshTokenPayload({
         ...(refreshToken || {}),
@@ -33,7 +34,6 @@ function transformToRefreshTokenPayload(accessToken, refreshToken) {
         scope: accessToken.scope,
     });
 }
-exports.transformToRefreshTokenPayload = transformToRefreshTokenPayload;
 function transformToRefreshTokenEntity(accessToken, maxAge) {
     return {
         client_id: accessToken.client_id,
@@ -41,9 +41,8 @@ function transformToRefreshTokenEntity(accessToken, maxAge) {
         scope: accessToken.scope,
         access_token: accessToken.jti,
         realm_id: accessToken.realm_id,
-        ...(accessToken.sub_kind === core_1.OAuth2SubKind.USER ? { user_id: accessToken.sub } : {}),
-        ...(accessToken.sub_kind === core_1.OAuth2SubKind.ROBOT ? { robot_id: accessToken.sub } : {}),
+        ...(accessToken.sub_kind === kit_1.OAuth2SubKind.USER ? { user_id: accessToken.sub } : {}),
+        ...(accessToken.sub_kind === kit_1.OAuth2SubKind.ROBOT ? { robot_id: accessToken.sub } : {}),
     };
 }
-exports.transformToRefreshTokenEntity = transformToRefreshTokenEntity;
 //# sourceMappingURL=refresh-token.js.map

package/dist/http/oauth2/token/builder/refresh-token.js.map

@@ -1 +1 @@
-{"version":3,"file":"refresh-token.js","sourceRoot":"","sources":["../../../../../src/http/oauth2/token/builder/refresh-token.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;;AAEH,6CAAyC;AAEzC,uCAA8D;AAG9D,SAAgB,8BAA8B,CAC1C,OAAuC;IAEvC,OAAO;QACH,IAAI,EAAE,sBAAe,CAAC,OAAO;QAC7B,GAAG,EAAE,OAAO,CAAC,EAAE,IAAI,IAAA,wBAAU,GAAE;QAC/B,GAAG,EAAE,OAAO,CAAC,GAAG;QAChB,QAAQ,EAAE,OAAO,CAAC,OAAO;QACzB,SAAS,EAAE,OAAO,CAAC,QAAQ;QAC3B,QAAQ,EAAE,OAAO,CAAC,OAAO;QACzB,UAAU,EAAE,OAAO,CAAC,SAAS;QAC7B,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACrD,CAAC;AACN,CAAC;AAbD,wEAaC;AAED,SAAgB,8BAA8B,CAC1C,WAAwC,EACxC,YAAsD;IAEtD,OAAO,8BAA8B,CAAC;QAClC,GAAG,CAAC,YAAY,IAAI,EAAE,CAAC;QACvB,GAAG,EAAE,WAAW,CAAC,GAAG;QACpB,OAAO,EAAE,WAAW,CAAC,QAAQ;QAC7B,QAAQ,EAAE,WAAW,CAAC,SAAS;QAC/B,OAAO,EAAE,WAAW,CAAC,QAAQ;QAC7B,SAAS,EAAE,WAAW,CAAC,UAAU;QACjC,KAAK,EAAE,WAAW,CAAC,KAAK;KAC3B,CAAC,CAAC;AACP,CAAC;AAbD,wEAaC;AAED,SAAgB,6BAA6B,CACzC,WAAwC,EACxC,MAAe;IAEf,OAAO;QACH,SAAS,EAAE,WAAW,CAAC,SAAS;QAChC,OAAO,EAAE,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,IAAI,GAAG,CAAC,MAAM,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE;QACvE,KAAK,EAAE,WAAW,CAAC,KAAK;QACxB,YAAY,EAAE,WAAW,CAAC,GAAG;QAC7B,QAAQ,EAAE,WAAW,CAAC,QAAQ;QAC9B,GAAG,CAAC,WAAW,CAAC,QAAQ,KAAK,oBAAa,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,WAAW,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACpF,GAAG,CAAC,WAAW,CAAC,QAAQ,KAAK,oBAAa,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,WAAW,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACzF,CAAC;AACN,CAAC;AAbD,sEAaC"}
+{"version":3,"file":"refresh-token.js","sourceRoot":"","sources":["../../../../../src/http/oauth2/token/builder/refresh-token.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;AAQH,wEAaC;AAED,wEAaC;AAED,sEAaC;AAhDD,6CAAyC;AAEzC,qCAA6D;AAG7D,SAAgB,8BAA8B,CAC1C,OAAuC;IAEvC,OAAO;QACH,IAAI,EAAE,qBAAe,CAAC,OAAO;QAC7B,GAAG,EAAE,OAAO,CAAC,EAAE,IAAI,IAAA,wBAAU,GAAE;QAC/B,GAAG,EAAE,OAAO,CAAC,GAAG;QAChB,QAAQ,EAAE,OAAO,CAAC,OAAO;QACzB,SAAS,EAAE,OAAO,CAAC,QAAQ;QAC3B,QAAQ,EAAE,OAAO,CAAC,OAAO;QACzB,UAAU,EAAE,OAAO,CAAC,SAAS;QAC7B,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACrD,CAAC;AACN,CAAC;AAED,SAAgB,8BAA8B,CAC1C,WAAwC,EACxC,YAAsD;IAEtD,OAAO,8BAA8B,CAAC;QAClC,GAAG,CAAC,YAAY,IAAI,EAAE,CAAC;QACvB,GAAG,EAAE,WAAW,CAAC,GAAG;QACpB,OAAO,EAAE,WAAW,CAAC,QAAQ;QAC7B,QAAQ,EAAE,WAAW,CAAC,SAAS;QAC/B,OAAO,EAAE,WAAW,CAAC,QAAQ;QAC7B,SAAS,EAAE,WAAW,CAAC,UAAU;QACjC,KAAK,EAAE,WAAW,CAAC,KAAK;KAC3B,CAAC,CAAC;AACP,CAAC;AAED,SAAgB,6BAA6B,CACzC,WAAwC,EACxC,MAAe;IAEf,OAAO;QACH,SAAS,EAAE,WAAW,CAAC,SAAS;QAChC,OAAO,EAAE,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,IAAI,GAAG,CAAC,MAAM,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE;QACvE,KAAK,EAAE,WAAW,CAAC,KAAK;QACxB,YAAY,EAAE,WAAW,CAAC,GAAG;QAC7B,QAAQ,EAAE,WAAW,CAAC,QAAQ;QAC9B,GAAG,CAAC,WAAW,CAAC,QAAQ,KAAK,mBAAa,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,WAAW,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACpF,GAAG,CAAC,WAAW,CAAC,QAAQ,KAAK,mBAAa,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,WAAW,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACzF,CAAC;AACN,CAAC"}

package/dist/http/oauth2/token/builder/type.d.ts

@@ -1,4 +1,4 @@
-import type { OAuth2SubKind } from '@authup/core';
+import type { OAuth2SubKind } from '@authup/kit';
 export type OAuth2AccessTokenBuildContext = {
     issuer: string;
     sub: string;
@@ -8,6 +8,7 @@ export type OAuth2AccessTokenBuildContext = {
     scope?: string;
     clientId?: string;
     remoteAddress: string;
+    expiresIn?: number;
 };
 export type OAuth2OpenIdTokenBuildContext = OAuth2AccessTokenBuildContext;
 export type OAuth2RefreshTokenBuildContext = Omit<OAuth2AccessTokenBuildContext, 'remoteAddress' | 'issuer'> & {

package/dist/http/oauth2/token/builder/type.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"type.d.ts","sourceRoot":"","sources":["../../../../../src/http/oauth2/token/builder/type.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAElD,MAAM,MAAM,6BAA6B,GAAG;IACxC,MAAM,EAAE,MAAM,CAAC;IAEf,GAAG,EAAE,MAAM,CAAC;IACZ,OAAO,EAAE,GAAG,aAAa,EAAE,CAAC;IAE5B,OAAO,EAAE,MAAM,CAAC;IAEhB,SAAS,EAAE,MAAM,CAAC;IAElB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,QAAQ,CAAC,EAAE,MAAM,CAAC;IAElB,aAAa,EAAE,MAAM,CAAC;CACzB,CAAC;AAEF,MAAM,MAAM,6BAA6B,GAAG,6BAA6B,CAAC;AAI1E,MAAM,MAAM,8BAA8B,GAAG,IAAI,CACjD,6BAA6B,EAAE,eAAe,GAAG,QAAQ,CACxD,GAAG;IACA,EAAE,CAAC,EAAE,MAAM,CAAA;CACd,CAAC"}
+{"version":3,"file":"type.d.ts","sourceRoot":"","sources":["../../../../../src/http/oauth2/token/builder/type.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAEjD,MAAM,MAAM,6BAA6B,GAAG;IACxC,MAAM,EAAE,MAAM,CAAC;IAEf,GAAG,EAAE,MAAM,CAAC;IACZ,OAAO,EAAE,GAAG,aAAa,EAAE,CAAC;IAE5B,OAAO,EAAE,MAAM,CAAC;IAEhB,SAAS,EAAE,MAAM,CAAC;IAElB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,QAAQ,CAAC,EAAE,MAAM,CAAC;IAElB,aAAa,EAAE,MAAM,CAAC;IAEtB,SAAS,CAAC,EAAE,MAAM,CAAA;CACrB,CAAC;AAEF,MAAM,MAAM,6BAA6B,GAAG,6BAA6B,CAAC;AAI1E,MAAM,MAAM,8BAA8B,GAAG,IAAI,CACjD,6BAA6B,EAAE,eAAe,GAAG,QAAQ,CACxD,GAAG;IACA,EAAE,CAAC,EAAE,MAAM,CAAA;CACd,CAAC"}

package/dist/http/oauth2/token/payload/read.d.ts

@@ -1,3 +1,3 @@
-import type { OAuth2TokenPayload } from '@authup/core';
+import type { OAuth2TokenPayload } from '@authup/kit';
 export declare function readOAuth2TokenPayload(token: string): Promise<OAuth2TokenPayload>;
 //# sourceMappingURL=read.d.ts.map

package/dist/http/oauth2/token/payload/read.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"read.d.ts","sourceRoot":"","sources":["../../../../../src/http/oauth2/token/payload/read.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,cAAc,CAAC;AAQvD,wBAAsB,sBAAsB,CAAC,KAAK,EAAE,MAAM,GAAI,OAAO,CAAC,kBAAkB,CAAC,CA8CxF"}
+{"version":3,"file":"read.d.ts","sourceRoot":"","sources":["../../../../../src/http/oauth2/token/payload/read.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAC;AAMtD,wBAAsB,sBAAsB,CAAC,KAAK,EAAE,MAAM,GAAI,OAAO,CAAC,kBAAkB,CAAC,CAoCxF"}

package/dist/http/oauth2/token/payload/read.js

@@ -6,19 +6,17 @@
  * view the LICENSE file that was distributed with this source code.
  */
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.readOAuth2TokenPayload = void 0;
-const core_1 = require("@authup/core");
+exports.readOAuth2TokenPayload = readOAuth2TokenPayload;
+const kit_1 = require("@authup/kit");
 const server_kit_1 = require("@authup/server-kit");
-const http_1 = require("@ebec/http");
-const redis_extension_1 = require("redis-extension");
 const typeorm_extension_1 = require("typeorm-extension");
 const domains_1 = require("../../../../domains");
 async function readOAuth2TokenPayload(token) {
     if (typeof token === 'undefined' || token === null) {
-        throw core_1.TokenError.requestInvalid('The token is not defined.');
+        throw kit_1.TokenError.requestInvalid('The token is not defined.');
     }
-    const jwt = (0, server_kit_1.decodeToken)(token, { complete: true });
-    if (jwt.header.kid) {
+    const header = (0, server_kit_1.extractTokenHeader)(token);
+    if (header.kid) {
         const dataSource = await (0, typeorm_extension_1.useDataSource)();
         const repository = dataSource.getRepository(domains_1.KeyEntity);
         const entity = await repository.findOne({
@@ -30,31 +28,20 @@ async function readOAuth2TokenPayload(token) {
                 decryption_key: true,
             },
             where: {
-                id: jwt.header.kid,
+                id: header.kid,
             },
             cache: {
-                id: (0, redis_extension_1.buildKeyPath)({
+                id: (0, server_kit_1.buildRedisKeyPath)({
                     prefix: 'realm_key',
-                    id: jwt.header.kid,
+                    key: header.kid,
                 }),
-                milliseconds: 60.000,
+                milliseconds: 60000,
             },
         });
         if (entity) {
-            try {
-                return await (0, domains_1.verifyOAuth2TokenWithKey)(token, entity);
-            }
-            catch (e) {
-                if ((0, http_1.isHTTPError)(e)) {
-                    if (e.code === core_1.ErrorCode.TOKEN_EXPIRED) {
-                        throw core_1.TokenError.expired(jwt.payload.kind);
-                    }
-                }
-                throw e;
-            }
+            return (0, domains_1.verifyOAuth2TokenWithKey)(token, entity);
         }
     }
-    throw core_1.TokenError.payloadInvalid('The jwt key id is invalid or not present.');
+    throw kit_1.TokenError.payloadInvalid('The jwt key id (kid) is invalid or not present.');
 }
-exports.readOAuth2TokenPayload = readOAuth2TokenPayload;
 //# sourceMappingURL=read.js.map

package/dist/http/oauth2/token/payload/read.js.map

@@ -1 +1 @@
-{"version":3,"file":"read.js","sourceRoot":"","sources":["../../../../../src/http/oauth2/token/payload/read.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;;AAGH,uCAAqD;AACrD,mDAAiD;AACjD,qCAAyC;AACzC,qDAA+C;AAC/C,yDAAkD;AAClD,iDAA0E;AAEnE,KAAK,UAAU,sBAAsB,CAAC,KAAa;IACtD,IAAI,OAAO,KAAK,KAAK,WAAW,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;QACjD,MAAM,iBAAU,CAAC,cAAc,CAAC,2BAA2B,CAAC,CAAC;IACjE,CAAC;IAED,MAAM,GAAG,GAAG,IAAA,wBAAW,EAAC,KAAK,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;IAEnD,IAAI,GAAG,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC;QACjB,MAAM,UAAU,GAAG,MAAM,IAAA,iCAAa,GAAE,CAAC;QACzC,MAAM,UAAU,GAAG,UAAU,CAAC,aAAa,CAAC,mBAAS,CAAC,CAAC;QACvD,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,OAAO,CAAC;YACpC,MAAM,EAAE;gBACJ,EAAE,EAAE,IAAI;gBACR,IAAI,EAAE,IAAI;gBACV,mBAAmB,EAAE,IAAI;gBACzB,cAAc,EAAE,IAAI;gBACpB,cAAc,EAAE,IAAI;aACvB;YACD,KAAK,EAAE;gBACH,EAAE,EAAE,GAAG,CAAC,MAAM,CAAC,GAAG;aACrB;YACD,KAAK,EAAE;gBACH,EAAE,EAAE,IAAA,8BAAY,EAAC;oBACb,MAAM,EAAE,WAAW;oBACnB,EAAE,EAAE,GAAG,CAAC,MAAM,CAAC,GAAG;iBACrB,CAAC;gBACF,YAAY,EAAE,MAAM;aACvB;SACJ,CAAC,CAAC;QAEH,IAAI,MAAM,EAAE,CAAC;YACT,IAAI,CAAC;gBACD,OAAO,MAAM,IAAA,kCAAwB,EAAC,KAAK,EAAE,MAAM,CAAC,CAAC;YACzD,CAAC;YAAC,OAAO,CAAC,EAAE,CAAC;gBACT,IAAI,IAAA,kBAAW,EAAC,CAAC,CAAC,EAAE,CAAC;oBACjB,IAAI,CAAC,CAAC,IAAI,KAAK,gBAAS,CAAC,aAAa,EAAE,CAAC;wBACrC,MAAM,iBAAU,CAAC,OAAO,CAAE,GAAG,CAAC,OAA8B,CAAC,IAAI,CAAC,CAAC;oBACvE,CAAC;gBACL,CAAC;gBAED,MAAM,CAAC,CAAC;YACZ,CAAC;QACL,CAAC;IACL,CAAC;IAED,MAAM,iBAAU,CAAC,cAAc,CAAC,2CAA2C,CAAC,CAAC;AACjF,CAAC;AA9CD,wDA8CC"}
+{"version":3,"file":"read.js","sourceRoot":"","sources":["../../../../../src/http/oauth2/token/payload/read.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;AAQH,wDAoCC;AAzCD,qCAAyC;AACzC,mDAA2E;AAC3E,yDAAkD;AAClD,iDAA0E;AAEnE,KAAK,UAAU,sBAAsB,CAAC,KAAa;IACtD,IAAI,OAAO,KAAK,KAAK,WAAW,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;QACjD,MAAM,gBAAU,CAAC,cAAc,CAAC,2BAA2B,CAAC,CAAC;IACjE,CAAC;IAED,MAAM,MAAM,GAAG,IAAA,+BAAkB,EAAC,KAAK,CAAC,CAAC;IAEzC,IAAI,MAAM,CAAC,GAAG,EAAE,CAAC;QACb,MAAM,UAAU,GAAG,MAAM,IAAA,iCAAa,GAAE,CAAC;QACzC,MAAM,UAAU,GAAG,UAAU,CAAC,aAAa,CAAC,mBAAS,CAAC,CAAC;QACvD,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,OAAO,CAAC;YACpC,MAAM,EAAE;gBACJ,EAAE,EAAE,IAAI;gBACR,IAAI,EAAE,IAAI;gBACV,mBAAmB,EAAE,IAAI;gBACzB,cAAc,EAAE,IAAI;gBACpB,cAAc,EAAE,IAAI;aACvB;YACD,KAAK,EAAE;gBACH,EAAE,EAAE,MAAM,CAAC,GAAG;aACjB;YACD,KAAK,EAAE;gBACH,EAAE,EAAE,IAAA,8BAAiB,EAAC;oBAClB,MAAM,EAAE,WAAW;oBACnB,GAAG,EAAE,MAAM,CAAC,GAAG;iBAClB,CAAC;gBACF,YAAY,EAAE,KAAM;aACvB;SACJ,CAAC,CAAC;QAEH,IAAI,MAAM,EAAE,CAAC;YACT,OAAO,IAAA,kCAAwB,EAAC,KAAK,EAAE,MAAM,CAAC,CAAC;QACnD,CAAC;IACL,CAAC;IAED,MAAM,gBAAU,CAAC,cAAc,CAAC,iDAAiD,CAAC,CAAC;AACvF,CAAC"}

package/dist/http/oauth2/token/permissions.d.ts

@@ -1,4 +1,3 @@
-import type { AbilityDescriptor } from '@authup/core';
-import { OAuth2SubKind } from '@authup/core';
-export declare function loadOAuth2SubPermissions(kind: `${OAuth2SubKind}`, id: string, scope?: string | string[]): Promise<AbilityDescriptor[]>;
+import type { OAuth2SubKind, OAuth2TokenPermission } from '@authup/kit';
+export declare function loadOAuth2SubPermissions(type: `${OAuth2SubKind}`, id: string, scope?: string | string[]): Promise<OAuth2TokenPermission[]>;
 //# sourceMappingURL=permissions.d.ts.map

package/dist/http/oauth2/token/permissions.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"permissions.d.ts","sourceRoot":"","sources":["../../../../src/http/oauth2/token/permissions.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,cAAc,CAAC;AACtD,OAAO,EAAE,aAAa,EAA0C,MAAM,cAAc,CAAC;AAIrF,wBAAsB,wBAAwB,CAC1C,IAAI,EAAE,GAAG,aAAa,EAAE,EACxB,EAAE,EAAE,MAAM,EACV,KAAK,CAAC,EAAE,MAAM,GAAG,MAAM,EAAE,GACzB,OAAO,CAAC,iBAAiB,EAAE,CAAC,CAwB/B"}
+{"version":3,"file":"permissions.d.ts","sourceRoot":"","sources":["../../../../src/http/oauth2/token/permissions.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,aAAa,EAAE,qBAAqB,EAAE,MAAM,aAAa,CAAC;AAKxE,wBAAsB,wBAAwB,CAC1C,IAAI,EAAE,GAAG,aAAa,EAAE,EACxB,EAAE,EAAE,MAAM,EACV,KAAK,CAAC,EAAE,MAAM,GAAG,MAAM,EAAE,GACzB,OAAO,CAAC,qBAAqB,EAAE,CAAC,CAenC"}

package/dist/http/oauth2/token/permissions.js

@@ -6,29 +6,21 @@
  * view the LICENSE file that was distributed with this source code.
  */
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.loadOAuth2SubPermissions = void 0;
-const core_1 = require("@authup/core");
+exports.loadOAuth2SubPermissions = loadOAuth2SubPermissions;
+const core_kit_1 = require("@authup/core-kit");
 const typeorm_extension_1 = require("typeorm-extension");
-const domains_1 = require("../../../domains");
-async function loadOAuth2SubPermissions(kind, id, scope) {
-    const scopes = (0, core_1.transformOAuth2ScopeToArray)(scope);
+const services_1 = require("../../../services");
+async function loadOAuth2SubPermissions(type, id, scope) {
+    const scopes = (0, core_kit_1.transformOAuth2ScopeToArray)(scope);
     // todo: grant permissions depending on scopes :)
-    if (scopes.indexOf(core_1.ScopeName.GLOBAL) === -1) {
+    if (scopes.indexOf(core_kit_1.ScopeName.GLOBAL) === -1) {
         return [];
     }
     const dataSource = await (0, typeorm_extension_1.useDataSource)();
-    switch (kind) {
-        case core_1.OAuth2SubKind.USER: {
-            const repository = new domains_1.UserRepository(dataSource);
-            return repository.getOwnedPermissions(id);
-        }
-        case core_1.OAuth2SubKind.ROBOT: {
-            const repository = new domains_1.RobotRepository(dataSource);
-            return repository.getOwnedPermissions(id);
-        }
-    }
-    // todo: reduce permissions based on scope :)
-    return [];
+    const identityPermissionService = new services_1.IdentityPermissionService(dataSource);
+    return identityPermissionService.getFor({
+        type,
+        id,
+    });
 }
-exports.loadOAuth2SubPermissions = loadOAuth2SubPermissions;
 //# sourceMappingURL=permissions.js.map

package/dist/http/oauth2/token/permissions.js.map

@@ -1 +1 @@
-{"version":3,"file":"permissions.js","sourceRoot":"","sources":["../../../../src/http/oauth2/token/permissions.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;;AAGH,uCAAqF;AACrF,yDAAkD;AAClD,8CAAmE;AAE5D,KAAK,UAAU,wBAAwB,CAC1C,IAAwB,EACxB,EAAU,EACV,KAAyB;IAEzB,MAAM,MAAM,GAAG,IAAA,kCAA2B,EAAC,KAAK,CAAC,CAAC;IAElD,iDAAiD;IACjD,IAAI,MAAM,CAAC,OAAO,CAAC,gBAAS,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC;QAC1C,OAAO,EAAE,CAAC;IACd,CAAC;IAED,MAAM,UAAU,GAAG,MAAM,IAAA,iCAAa,GAAE,CAAC;IAEzC,QAAQ,IAAI,EAAE,CAAC;QACX,KAAK,oBAAa,CAAC,IAAI,CAAC,CAAC,CAAC;YACtB,MAAM,UAAU,GAAG,IAAI,wBAAc,CAAC,UAAU,CAAC,CAAC;YAClD,OAAO,UAAU,CAAC,mBAAmB,CAAC,EAAE,CAAC,CAAC;QAC9C,CAAC;QACD,KAAK,oBAAa,CAAC,KAAK,CAAC,CAAC,CAAC;YACvB,MAAM,UAAU,GAAG,IAAI,yBAAe,CAAC,UAAU,CAAC,CAAC;YACnD,OAAO,UAAU,CAAC,mBAAmB,CAAC,EAAE,CAAC,CAAC;QAC9C,CAAC;IACL,CAAC;IAED,6CAA6C;IAE7C,OAAO,EAAE,CAAC;AACd,CAAC;AA5BD,4DA4BC"}
+{"version":3,"file":"permissions.js","sourceRoot":"","sources":["../../../../src/http/oauth2/token/permissions.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;AAOH,4DAmBC;AAvBD,+CAA0E;AAC1E,yDAAkD;AAClD,gDAA8D;AAEvD,KAAK,UAAU,wBAAwB,CAC1C,IAAwB,EACxB,EAAU,EACV,KAAyB;IAEzB,MAAM,MAAM,GAAG,IAAA,sCAA2B,EAAC,KAAK,CAAC,CAAC;IAElD,iDAAiD;IACjD,IAAI,MAAM,CAAC,OAAO,CAAC,oBAAS,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC;QAC1C,OAAO,EAAE,CAAC;IACd,CAAC;IAED,MAAM,UAAU,GAAG,MAAM,IAAA,iCAAa,GAAE,CAAC;IACzC,MAAM,yBAAyB,GAAG,IAAI,oCAAyB,CAAC,UAAU,CAAC,CAAC;IAE5E,OAAO,yBAAyB,CAAC,MAAM,CAAC;QACpC,IAAI;QACJ,EAAE;KACL,CAAC,CAAC;AACP,CAAC"}

package/dist/http/oauth2/token/sub.d.ts

@@ -1,4 +1,4 @@
-import { OAuth2SubKind } from '@authup/core';
+import { OAuth2SubKind } from '@authup/kit';
 import type { RobotEntity, UserEntity } from '../../../domains';
 import { ClientEntity } from '../../../domains';
 export type OAuth2SubEntity<T extends `${OAuth2SubKind}` | OAuth2SubKind> = T extends `${OAuth2SubKind.USER}` | OAuth2SubKind.USER ? UserEntity : T extends `${OAuth2SubKind.ROBOT}` | OAuth2SubKind.ROBOT ? RobotEntity : T extends `${OAuth2SubKind.CLIENT}` | OAuth2SubKind.CLIENT ? ClientEntity : never;

package/dist/http/oauth2/token/sub.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sub.d.ts","sourceRoot":"","sources":["../../../../src/http/oauth2/token/sub.ts"],"names":[],"mappings":"AAOA,OAAO,EACH,aAAa,EAEhB,MAAM,cAAc,CAAC;AAKtB,OAAO,KAAK,EACR,WAAW,EACX,UAAU,EACb,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EACH,YAAY,EAGf,MAAM,kBAAkB,CAAC;AAG1B,MAAM,MAAM,eAAe,CAAC,CAAC,SAAS,GAAG,aAAa,EAAE,GAAG,aAAa,IACpE,CAAC,SAAS,GAAG,aAAa,CAAC,IAAI,EAAE,GAAG,aAAa,CAAC,IAAI,GAClD,UAAU,GACV,CAAC,SAAS,GAAG,aAAa,CAAC,KAAK,EAAE,GAAG,aAAa,CAAC,KAAK,GACpD,WAAW,GACX,CAAC,SAAS,GAAG,aAAa,CAAC,MAAM,EAAE,GAAG,aAAa,CAAC,MAAM,GACtD,YAAY,GACZ,KAAK,CAAC;AAEtB;;;;;;;;GAQG;AACH,wBAAsB,mBAAmB,CAAC,CAAC,SAAS,GAAG,aAAa,EAAE,GAAG,aAAa,EAClF,IAAI,EAAE,GAAG,aAAa,EAAE,EACxB,EAAE,EAAE,MAAM,EACV,KAAK,CAAC,EAAE,MAAM,GACd,OAAO,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,CAuG9B"}
+{"version":3,"file":"sub.d.ts","sourceRoot":"","sources":["../../../../src/http/oauth2/token/sub.ts"],"names":[],"mappings":"AAQA,OAAO,EACH,aAAa,EAEhB,MAAM,aAAa,CAAC;AAIrB,OAAO,KAAK,EACR,WAAW,EACX,UAAU,EACb,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAEH,YAAY,EAGf,MAAM,kBAAkB,CAAC;AAG1B,MAAM,MAAM,eAAe,CAAC,CAAC,SAAS,GAAG,aAAa,EAAE,GAAG,aAAa,IACpE,CAAC,SAAS,GAAG,aAAa,CAAC,IAAI,EAAE,GAAG,aAAa,CAAC,IAAI,GAClD,UAAU,GACV,CAAC,SAAS,GAAG,aAAa,CAAC,KAAK,EAAE,GAAG,aAAa,CAAC,KAAK,GACpD,WAAW,GACX,CAAC,SAAS,GAAG,aAAa,CAAC,MAAM,EAAE,GAAG,aAAa,CAAC,MAAM,GACtD,YAAY,GACZ,KAAK,CAAC;AAEtB;;;;;;;;GAQG;AACH,wBAAsB,mBAAmB,CAAC,CAAC,SAAS,GAAG,aAAa,EAAE,GAAG,aAAa,EAClF,IAAI,EAAE,GAAG,aAAa,EAAE,EACxB,EAAE,EAAE,MAAM,EACV,KAAK,CAAC,EAAE,MAAM,GACd,OAAO,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,CA4G9B"}

package/dist/http/oauth2/token/sub.js

@@ -6,12 +6,12 @@
  * view the LICENSE file that was distributed with this source code.
  */
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.loadOAuth2SubEntity = void 0;
-const core_1 = require("@authup/core");
+exports.loadOAuth2SubEntity = loadOAuth2SubEntity;
+const core_kit_1 = require("@authup/core-kit");
+const kit_1 = require("@authup/kit");
+const server_kit_1 = require("@authup/server-kit");
 const http_1 = require("@ebec/http");
-const redis_extension_1 = require("redis-extension");
 const typeorm_extension_1 = require("typeorm-extension");
-const database_1 = require("../../../database");
 const domains_1 = require("../../../domains");
 const scope_1 = require("../scope");
 /**
@@ -26,21 +26,22 @@ const scope_1 = require("../scope");
 async function loadOAuth2SubEntity(kind, id, scope) {
     let payload;
     const dataSource = await (0, typeorm_extension_1.useDataSource)();
-    const fields = (0, scope_1.resolveOAuth2SubAttributesForScope)(kind, scope);
+    const attributes = (0, scope_1.resolveOAuth2SubAttributesForScope)(kind, scope);
     switch (kind) {
-        case core_1.OAuth2SubKind.CLIENT: {
+        case kit_1.OAuth2SubKind.CLIENT: {
             const repository = dataSource.getRepository(domains_1.ClientEntity);
             const query = repository.createQueryBuilder('client')
                 .where('client.id = :id', { id })
                 .cache({
-                id: (0, redis_extension_1.buildKeyPath)({
-                    prefix: database_1.CachePrefix.CLIENT,
-                    id,
+                id: (0, server_kit_1.buildRedisKeyPath)({
+                    prefix: domains_1.CachePrefix.CLIENT,
+                    key: id,
                 }),
                 milliseconds: 60.000,
             });
-            for (let i = 0; i < fields.length; i++) {
-                query.addSelect(`client.${fields[i]}`);
+            // todo: check if attributes matches repository.metadata.columns[].databaseName
+            for (let i = 0; i < attributes.length; i++) {
+                query.addSelect(`client.${attributes[i]}`);
             }
             const entity = await query.getOne();
             if (!entity) {
@@ -49,51 +50,56 @@ async function loadOAuth2SubEntity(kind, id, scope) {
             payload = entity;
             break;
         }
-        case core_1.OAuth2SubKind.USER: {
+        case kit_1.OAuth2SubKind.USER: {
             const repository = new domains_1.UserRepository(dataSource);
             const query = repository.createQueryBuilder('user')
                 .where('user.id = :id', { id })
                 .cache({
-                id: (0, redis_extension_1.buildKeyPath)({
-                    prefix: database_1.CachePrefix.USER,
-                    id,
+                id: (0, server_kit_1.buildRedisKeyPath)({
+                    prefix: domains_1.CachePrefix.USER,
+                    key: id,
                 }),
                 milliseconds: 60.000,
             });
-            for (let i = 0; i < fields.length; i++) {
-                query.addSelect(`user.${fields[i]}`);
+            // todo: check if attributes matches repository.metadata.columns[].databaseName
+            for (let i = 0; i < attributes.length; i++) {
+                query.addSelect(`user.${attributes[i]}`);
             }
             const entity = await query.getOne();
             if (!entity) {
                 throw new http_1.NotFoundError();
             }
-            await repository.appendAttributes(entity, fields);
+            // todo: this might also be the case under other conditions :)
+            if (scope === core_kit_1.ScopeName.GLOBAL) {
+                await repository.findAndAppendExtraAttributesTo(entity);
+            }
             if (!entity.active) {
-                throw core_1.TokenError.targetInactive(core_1.OAuth2SubKind.USER);
+                throw kit_1.TokenError.targetInactive(kit_1.OAuth2SubKind.USER);
             }
             payload = entity;
             break;
         }
-        case core_1.OAuth2SubKind.ROBOT: {
+        case kit_1.OAuth2SubKind.ROBOT: {
             const repository = new domains_1.RobotRepository(dataSource);
             const query = repository.createQueryBuilder('robot')
                 .where('robot.id = :id', { id })
                 .cache({
-                id: (0, redis_extension_1.buildKeyPath)({
-                    prefix: database_1.CachePrefix.ROBOT,
-                    id,
+                id: (0, server_kit_1.buildRedisKeyPath)({
+                    prefix: domains_1.CachePrefix.ROBOT,
+                    key: id,
                 }),
                 milliseconds: 60.000,
             });
-            for (let i = 0; i < fields.length; i++) {
-                query.addSelect(`robot.${fields[i]}`);
+            // todo: check if attributes matches repository.metadata.columns[].databaseName
+            for (let i = 0; i < attributes.length; i++) {
+                query.addSelect(`robot.${attributes[i]}`);
             }
             const entity = await query.getOne();
             if (!entity) {
                 throw new http_1.NotFoundError();
             }
             if (!entity.active) {
-                throw core_1.TokenError.targetInactive(core_1.OAuth2SubKind.ROBOT);
+                throw kit_1.TokenError.targetInactive(kit_1.OAuth2SubKind.ROBOT);
             }
             payload = entity;
             break;
@@ -104,5 +110,4 @@ async function loadOAuth2SubEntity(kind, id, scope) {
     }
     return payload;
 }
-exports.loadOAuth2SubEntity = loadOAuth2SubEntity;
 //# sourceMappingURL=sub.js.map

package/dist/http/oauth2/token/sub.js.map

@@ -1 +1 @@
-{"version":3,"file":"sub.js","sourceRoot":"","sources":["../../../../src/http/oauth2/token/sub.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;;AAEH,uCAGsB;AACtB,qCAA2C;AAC3C,qDAA+C;AAC/C,yDAAkD;AAClD,gDAAgD;AAKhD,8CAI0B;AAC1B,oCAA8D;AAW9D;;;;;;;;GAQG;AACI,KAAK,UAAU,mBAAmB,CACrC,IAAwB,EACxB,EAAU,EACV,KAAc;IAEd,IAAI,OAAiD,CAAC;IAEtD,MAAM,UAAU,GAAG,MAAM,IAAA,iCAAa,GAAE,CAAC;IAEzC,MAAM,MAAM,GAAG,IAAA,0CAAkC,EAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IAE/D,QAAQ,IAAI,EAAE,CAAC;QACX,KAAK,oBAAa,CAAC,MAAM,CAAC,CAAC,CAAC;YACxB,MAAM,UAAU,GAAG,UAAU,CAAC,aAAa,CAAC,sBAAY,CAAC,CAAC;YAE1D,MAAM,KAAK,GAAG,UAAU,CAAC,kBAAkB,CAAC,QAAQ,CAAC;iBAChD,KAAK,CAAC,iBAAiB,EAAE,EAAE,EAAE,EAAE,CAAC;iBAChC,KAAK,CAAC;gBACH,EAAE,EAAE,IAAA,8BAAY,EAAC;oBACb,MAAM,EAAE,sBAAW,CAAC,MAAM;oBAC1B,EAAE;iBACL,CAAC;gBACF,YAAY,EAAE,MAAM;aACvB,CAAC,CAAC;YAEP,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;gBACrC,KAAK,CAAC,SAAS,CAAC,UAAU,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;YAC3C,CAAC;YAED,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,MAAM,EAAE,CAAC;YAEpC,IAAI,CAAC,MAAM,EAAE,CAAC;gBACV,MAAM,IAAI,oBAAa,EAAE,CAAC;YAC9B,CAAC;YAED,OAAO,GAAG,MAAM,CAAC;YACjB,MAAM;QACV,CAAC;QACD,KAAK,oBAAa,CAAC,IAAI,CAAC,CAAC,CAAC;YACtB,MAAM,UAAU,GAAG,IAAI,wBAAc,CAAC,UAAU,CAAC,CAAC;YAElD,MAAM,KAAK,GAAG,UAAU,CAAC,kBAAkB,CAAC,MAAM,CAAC;iBAC9C,KAAK,CAAC,eAAe,EAAE,EAAE,EAAE,EAAE,CAAC;iBAC9B,KAAK,CAAC;gBACH,EAAE,EAAE,IAAA,8BAAY,EAAC;oBACb,MAAM,EAAE,sBAAW,CAAC,IAAI;oBACxB,EAAE;iBACL,CAAC;gBACF,YAAY,EAAE,MAAM;aACvB,CAAC,CAAC;YAEP,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;gBACrC,KAAK,CAAC,SAAS,CAAC,QAAQ,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;YACzC,CAAC;YAED,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,MAAM,EAAE,CAAC;YAEpC,IAAI,CAAC,MAAM,EAAE,CAAC;gBACV,MAAM,IAAI,oBAAa,EAAE,CAAC;YAC9B,CAAC;YAED,MAAM,UAAU,CAAC,gBAAgB,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;YAElD,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC;gBACjB,MAAM,iBAAU,CAAC,cAAc,CAAC,oBAAa,CAAC,IAAI,CAAC,CAAC;YACxD,CAAC;YAED,OAAO,GAAG,MAAM,CAAC;YACjB,MAAM;QACV,CAAC;QACD,KAAK,oBAAa,CAAC,KAAK,CAAC,CAAC,CAAC;YACvB,MAAM,UAAU,GAAG,IAAI,yBAAe,CAAC,UAAU,CAAC,CAAC;YAEnD,MAAM,KAAK,GAAG,UAAU,CAAC,kBAAkB,CAAC,OAAO,CAAC;iBAC/C,KAAK,CAAC,gBAAgB,EAAE,EAAE,EAAE,EAAE,CAAC;iBAC/B,KAAK,CAAC;gBACH,EAAE,EAAE,IAAA,8BAAY,EAAC;oBACb,MAAM,EAAE,sBAAW,CAAC,KAAK;oBACzB,EAAE;iBACL,CAAC;gBACF,YAAY,EAAE,MAAM;aACvB,CAAC,CAAC;YAEP,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;gBACrC,KAAK,CAAC,SAAS,CAAC,SAAS,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;YAC1C,CAAC;YAED,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,MAAM,EAAE,CAAC;YAEpC,IAAI,CAAC,MAAM,EAAE,CAAC;gBACV,MAAM,IAAI,oBAAa,EAAE,CAAC;YAC9B,CAAC;YAED,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC;gBACjB,MAAM,iBAAU,CAAC,cAAc,CAAC,oBAAa,CAAC,KAAK,CAAC,CAAC;YACzD,CAAC;YAED,OAAO,GAAG,MAAM,CAAC;YACjB,MAAM;QACV,CAAC;IACL,CAAC;IAED,IAAI,CAAC,OAAO,EAAE,CAAC;QACX,MAAM,IAAI,oBAAa,EAAE,CAAC;IAC9B,CAAC;IAED,OAAO,OAA6B,CAAC;AACzC,CAAC;AA3GD,kDA2GC"}
+{"version":3,"file":"sub.js","sourceRoot":"","sources":["../../../../src/http/oauth2/token/sub.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;AAwCH,kDAgHC;AAtJD,+CAA6C;AAC7C,qCAGqB;AACrB,mDAAuD;AACvD,qCAA2C;AAC3C,yDAAkD;AAKlD,8CAK0B;AAC1B,oCAA8D;AAW9D;;;;;;;;GAQG;AACI,KAAK,UAAU,mBAAmB,CACrC,IAAwB,EACxB,EAAU,EACV,KAAc;IAEd,IAAI,OAAiD,CAAC;IAEtD,MAAM,UAAU,GAAG,MAAM,IAAA,iCAAa,GAAE,CAAC;IACzC,MAAM,UAAU,GAAG,IAAA,0CAAkC,EAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IAEnE,QAAQ,IAAI,EAAE,CAAC;QACX,KAAK,mBAAa,CAAC,MAAM,CAAC,CAAC,CAAC;YACxB,MAAM,UAAU,GAAG,UAAU,CAAC,aAAa,CAAC,sBAAY,CAAC,CAAC;YAE1D,MAAM,KAAK,GAAG,UAAU,CAAC,kBAAkB,CAAC,QAAQ,CAAC;iBAChD,KAAK,CAAC,iBAAiB,EAAE,EAAE,EAAE,EAAE,CAAC;iBAChC,KAAK,CAAC;gBACH,EAAE,EAAE,IAAA,8BAAiB,EAAC;oBAClB,MAAM,EAAE,qBAAW,CAAC,MAAM;oBAC1B,GAAG,EAAE,EAAE;iBACV,CAAC;gBACF,YAAY,EAAE,MAAM;aACvB,CAAC,CAAC;YAEP,+EAA+E;YAC/E,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,UAAU,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;gBACzC,KAAK,CAAC,SAAS,CAAC,UAAU,UAAU,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;YAC/C,CAAC;YAED,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,MAAM,EAAE,CAAC;YAEpC,IAAI,CAAC,MAAM,EAAE,CAAC;gBACV,MAAM,IAAI,oBAAa,EAAE,CAAC;YAC9B,CAAC;YAED,OAAO,GAAG,MAAM,CAAC;YACjB,MAAM;QACV,CAAC;QACD,KAAK,mBAAa,CAAC,IAAI,CAAC,CAAC,CAAC;YACtB,MAAM,UAAU,GAAG,IAAI,wBAAc,CAAC,UAAU,CAAC,CAAC;YAElD,MAAM,KAAK,GAAG,UAAU,CAAC,kBAAkB,CAAC,MAAM,CAAC;iBAC9C,KAAK,CAAC,eAAe,EAAE,EAAE,EAAE,EAAE,CAAC;iBAC9B,KAAK,CAAC;gBACH,EAAE,EAAE,IAAA,8BAAiB,EAAC;oBAClB,MAAM,EAAE,qBAAW,CAAC,IAAI;oBACxB,GAAG,EAAE,EAAE;iBACV,CAAC;gBACF,YAAY,EAAE,MAAM;aACvB,CAAC,CAAC;YAEP,+EAA+E;YAC/E,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,UAAU,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;gBACzC,KAAK,CAAC,SAAS,CAAC,QAAQ,UAAU,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;YAC7C,CAAC;YAED,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,MAAM,EAAE,CAAC;YAEpC,IAAI,CAAC,MAAM,EAAE,CAAC;gBACV,MAAM,IAAI,oBAAa,EAAE,CAAC;YAC9B,CAAC;YAED,8DAA8D;YAC9D,IAAI,KAAK,KAAK,oBAAS,CAAC,MAAM,EAAE,CAAC;gBAC7B,MAAM,UAAU,CAAC,8BAA8B,CAAC,MAAM,CAAC,CAAC;YAC5D,CAAC;YAED,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC;gBACjB,MAAM,gBAAU,CAAC,cAAc,CAAC,mBAAa,CAAC,IAAI,CAAC,CAAC;YACxD,CAAC;YAED,OAAO,GAAG,MAAM,CAAC;YACjB,MAAM;QACV,CAAC;QACD,KAAK,mBAAa,CAAC,KAAK,CAAC,CAAC,CAAC;YACvB,MAAM,UAAU,GAAG,IAAI,yBAAe,CAAC,UAAU,CAAC,CAAC;YAEnD,MAAM,KAAK,GAAG,UAAU,CAAC,kBAAkB,CAAC,OAAO,CAAC;iBAC/C,KAAK,CAAC,gBAAgB,EAAE,EAAE,EAAE,EAAE,CAAC;iBAC/B,KAAK,CAAC;gBACH,EAAE,EAAE,IAAA,8BAAiB,EAAC;oBAClB,MAAM,EAAE,qBAAW,CAAC,KAAK;oBACzB,GAAG,EAAE,EAAE;iBACV,CAAC;gBACF,YAAY,EAAE,MAAM;aACvB,CAAC,CAAC;YAEP,+EAA+E;YAC/E,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,UAAU,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;gBACzC,KAAK,CAAC,SAAS,CAAC,SAAS,UAAU,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;YAC9C,CAAC;YAED,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,MAAM,EAAE,CAAC;YAEpC,IAAI,CAAC,MAAM,EAAE,CAAC;gBACV,MAAM,IAAI,oBAAa,EAAE,CAAC;YAC9B,CAAC;YAED,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC;gBACjB,MAAM,gBAAU,CAAC,cAAc,CAAC,mBAAa,CAAC,KAAK,CAAC,CAAC;YACzD,CAAC;YAED,OAAO,GAAG,MAAM,CAAC;YACjB,MAAM;QACV,CAAC;IACL,CAAC;IAED,IAAI,CAAC,OAAO,EAAE,CAAC;QACX,MAAM,IAAI,oBAAa,EAAE,CAAC;IAC9B,CAAC;IAED,OAAO,OAA6B,CAAC;AACzC,CAAC"}

package/dist/http/path.js

@@ -9,14 +9,13 @@ var __importDefault = (this && this.__importDefault) || function (mod) {
     return (mod && mod.__esModule) ? mod : { "default": mod };
 };
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.resolvePackagePath = exports.resolveRootPath = void 0;
+exports.resolveRootPath = resolveRootPath;
+exports.resolvePackagePath = resolvePackagePath;
 const node_path_1 = __importDefault(require("node:path"));
 function resolveRootPath() {
     return node_path_1.default.resolve(__dirname, '..');
 }
-exports.resolveRootPath = resolveRootPath;
 function resolvePackagePath() {
     return node_path_1.default.resolve(resolveRootPath(), '..');
 }
-exports.resolvePackagePath = resolvePackagePath;
 //# sourceMappingURL=path.js.map

package/dist/http/path.js.map

@@ -1 +1 @@
-{"version":3,"file":"path.js","sourceRoot":"","sources":["../../src/http/path.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;;;;;AAEH,0DAA6B;AAE7B,SAAgB,eAAe;IAC3B,OAAO,mBAAI,CAAC,OAAO,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;AACzC,CAAC;AAFD,0CAEC;AAED,SAAgB,kBAAkB;IAC9B,OAAO,mBAAI,CAAC,OAAO,CAAC,eAAe,EAAE,EAAE,IAAI,CAAC,CAAC;AACjD,CAAC;AAFD,gDAEC"}
+{"version":3,"file":"path.js","sourceRoot":"","sources":["../../src/http/path.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;;;;AAIH,0CAEC;AAED,gDAEC;AARD,0DAA6B;AAE7B,SAAgB,eAAe;IAC3B,OAAO,mBAAI,CAAC,OAAO,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;AACzC,CAAC;AAED,SAAgB,kBAAkB;IAC9B,OAAO,mBAAI,CAAC,OAAO,CAAC,eAAe,EAAE,EAAE,IAAI,CAAC,CAAC;AACjD,CAAC"}

package/dist/http/request/helpers/body-realm-id.d.ts

@@ -0,0 +1,3 @@
+import type { Request } from 'routup';
+export declare function getRequestBodyRealmID(req: Request): string | undefined;
+//# sourceMappingURL=body-realm-id.d.ts.map

package/dist/http/request/helpers/body-realm-id.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"body-realm-id.d.ts","sourceRoot":"","sources":["../../../../src/http/request/helpers/body-realm-id.ts"],"names":[],"mappings":"AASA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,QAAQ,CAAC;AAEtC,wBAAgB,qBAAqB,CAAC,GAAG,EAAE,OAAO,GAAI,MAAM,GAAG,SAAS,CAWvE"}

package/dist/http/request/helpers/body-realm-id.js

@@ -0,0 +1,22 @@
+"use strict";
+/*
+ * Copyright (c) 2024.
+ * Author Peter Placzek (tada5hi)
+ * For the full copyright and license information,
+ * view the LICENSE file that was distributed with this source code.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.getRequestBodyRealmID = getRequestBodyRealmID;
+const kit_1 = require("@authup/kit");
+const body_1 = require("@routup/basic/body");
+function getRequestBodyRealmID(req) {
+    const realmId = (0, body_1.useRequestBody)(req, 'realm_id');
+    if (typeof realmId !== 'string') {
+        return undefined;
+    }
+    if (!(0, kit_1.isUUID)(realmId)) {
+        return undefined;
+    }
+    return realmId;
+}
+//# sourceMappingURL=body-realm-id.js.map

package/dist/http/request/helpers/body-realm-id.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"body-realm-id.js","sourceRoot":"","sources":["../../../../src/http/request/helpers/body-realm-id.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;AAMH,sDAWC;AAfD,qCAAqC;AACrC,6CAAoD;AAGpD,SAAgB,qBAAqB,CAAC,GAAY;IAC9C,MAAM,OAAO,GAAG,IAAA,qBAAc,EAAC,GAAG,EAAE,UAAU,CAAC,CAAC;IAChD,IAAI,OAAO,OAAO,KAAK,QAAQ,EAAE,CAAC;QAC9B,OAAO,SAAS,CAAC;IACrB,CAAC;IAED,IAAI,CAAC,IAAA,YAAM,EAAC,OAAO,CAAC,EAAE,CAAC;QACnB,OAAO,SAAS,CAAC;IACrB,CAAC;IAED,OAAO,OAAO,CAAC;AACnB,CAAC"}

package/dist/http/request/helpers/env.d.ts

@@ -0,0 +1,6 @@
+import type { Request } from 'routup';
+import type { RequestEnv } from '../types';
+export declare function useRequestEnv(req: Request): RequestEnv;
+export declare function useRequestEnv<T extends keyof RequestEnv>(req: Request, key: T): RequestEnv[T];
+export declare function setRequestEnv<T extends keyof RequestEnv>(req: Request, key: T, value: RequestEnv[T]): void;
+//# sourceMappingURL=env.d.ts.map

package/dist/http/request/helpers/env.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"env.d.ts","sourceRoot":"","sources":["../../../../src/http/request/helpers/env.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,QAAQ,CAAC;AAEtC,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,UAAU,CAAC;AAE3C,wBAAgB,aAAa,CAAC,GAAG,EAAE,OAAO,GAAG,UAAU,CAAC;AACxD,wBAAgB,aAAa,CAAC,CAAC,SAAS,MAAM,UAAU,EAAE,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC,GAAG,UAAU,CAAC,CAAC,CAAC,CAAC;AAS/F,wBAAgB,aAAa,CAAC,CAAC,SAAS,MAAM,UAAU,EAAE,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC,EAAE,KAAK,EAAE,UAAU,CAAC,CAAC,CAAC,QAEnG"}

package/dist/http/request/helpers/env.js

@@ -0,0 +1,21 @@
+"use strict";
+/*
+ * Copyright (c) 2024.
+ * Author Peter Placzek (tada5hi)
+ * For the full copyright and license information,
+ * view the LICENSE file that was distributed with this source code.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.useRequestEnv = useRequestEnv;
+exports.setRequestEnv = setRequestEnv;
+const routup_1 = require("routup");
+function useRequestEnv(req, key) {
+    if (typeof key === 'string') {
+        return (0, routup_1.useRequestEnv)(req, key);
+    }
+    return (0, routup_1.useRequestEnv)(req);
+}
+function setRequestEnv(req, key, value) {
+    return (0, routup_1.setRequestEnv)(req, key, value);
+}
+//# sourceMappingURL=env.js.map

package/dist/http/request/helpers/env.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"env.js","sourceRoot":"","sources":["../../../../src/http/request/helpers/env.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;AAQH,sCAMC;AAED,sCAEC;AAfD,mCAA0E;AAK1E,SAAgB,aAAa,CAA6B,GAAY,EAAE,GAAO;IAC3E,IAAI,OAAO,GAAG,KAAK,QAAQ,EAAE,CAAC;QAC1B,OAAO,IAAA,sBAAM,EAAC,GAAG,EAAE,GAAG,CAAkB,CAAC;IAC7C,CAAC;IAED,OAAO,IAAA,sBAAM,EAAC,GAAG,CAAC,CAAC;AACvB,CAAC;AAED,SAAgB,aAAa,CAA6B,GAAY,EAAE,GAAM,EAAE,KAAoB;IAChG,OAAO,IAAA,sBAAM,EAAC,GAAG,EAAE,GAAG,EAAE,KAAK,CAAC,CAAC;AACnC,CAAC"}

package/dist/http/request/helpers/identity.d.ts

@@ -0,0 +1,7 @@
+import type { Request } from 'routup';
+import type { RequestIdentity } from '../types';
+export declare function useRequestIdentity(req: Request): RequestIdentity | undefined;
+export declare function setRequestIdentity(req: Request, identity: RequestIdentity): void;
+export declare function useRequestIdentityOrFail(req: Request): RequestIdentity;
+export declare function isRequestIdentityMasterRealmMember(input: RequestIdentity): boolean;
+//# sourceMappingURL=identity.d.ts.map

package/dist/http/request/helpers/identity.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"identity.d.ts","sourceRoot":"","sources":["../../../../src/http/request/helpers/identity.ts"],"names":[],"mappings":"AASA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,QAAQ,CAAC;AACtC,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,UAAU,CAAC;AAGhD,wBAAgB,kBAAkB,CAAC,GAAG,EAAE,OAAO,GAAI,eAAe,GAAG,SAAS,CAE7E;AAED,wBAAgB,kBAAkB,CAAC,GAAG,EAAE,OAAO,EAAE,QAAQ,EAAE,eAAe,GAAI,IAAI,CAEjF;AAED,wBAAgB,wBAAwB,CAAC,GAAG,EAAE,OAAO,GAAI,eAAe,CAOvE;AAED,wBAAgB,kCAAkC,CAAC,KAAK,EAAE,eAAe,GAAI,OAAO,CAEnF"}

package/dist/http/request/helpers/identity.js

@@ -0,0 +1,32 @@
+"use strict";
+/*
+ * Copyright (c) 2024.
+ * Author Peter Placzek (tada5hi)
+ * For the full copyright and license information,
+ * view the LICENSE file that was distributed with this source code.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.useRequestIdentity = useRequestIdentity;
+exports.setRequestIdentity = setRequestIdentity;
+exports.useRequestIdentityOrFail = useRequestIdentityOrFail;
+exports.isRequestIdentityMasterRealmMember = isRequestIdentityMasterRealmMember;
+const core_kit_1 = require("@authup/core-kit");
+const http_1 = require("@ebec/http");
+const env_1 = require("./env");
+function useRequestIdentity(req) {
+    return (0, env_1.useRequestEnv)(req, 'identity');
+}
+function setRequestIdentity(req, identity) {
+    (0, env_1.setRequestEnv)(req, 'identity', identity);
+}
+function useRequestIdentityOrFail(req) {
+    const identity = useRequestIdentity(req);
+    if (!identity) {
+        throw new http_1.UnauthorizedError();
+    }
+    return identity;
+}
+function isRequestIdentityMasterRealmMember(input) {
+    return input.realmName === core_kit_1.REALM_MASTER_NAME;
+}
+//# sourceMappingURL=identity.js.map

package/dist/http/request/helpers/identity.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"identity.js","sourceRoot":"","sources":["../../../../src/http/request/helpers/identity.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;AAQH,gDAEC;AAED,gDAEC;AAED,4DAOC;AAED,gFAEC;AAzBD,+CAAqD;AACrD,qCAA+C;AAG/C,+BAAqD;AAErD,SAAgB,kBAAkB,CAAC,GAAY;IAC3C,OAAO,IAAA,mBAAa,EAAC,GAAG,EAAE,UAAU,CAAC,CAAC;AAC1C,CAAC;AAED,SAAgB,kBAAkB,CAAC,GAAY,EAAE,QAAyB;IACtE,IAAA,mBAAa,EAAC,GAAG,EAAE,UAAU,EAAE,QAAQ,CAAC,CAAC;AAC7C,CAAC;AAED,SAAgB,wBAAwB,CAAC,GAAY;IACjD,MAAM,QAAQ,GAAG,kBAAkB,CAAC,GAAG,CAAC,CAAC;IACzC,IAAI,CAAC,QAAQ,EAAE,CAAC;QACZ,MAAM,IAAI,wBAAiB,EAAE,CAAC;IAClC,CAAC;IAED,OAAO,QAAQ,CAAC;AACpB,CAAC;AAED,SAAgB,kCAAkC,CAAC,KAAsB;IACrE,OAAO,KAAK,CAAC,SAAS,KAAK,4BAAiB,CAAC;AACjD,CAAC"}

package/dist/http/request/helpers/index.d.ts

@@ -0,0 +1,5 @@
+export * from './body-realm-id';
+export * from './env';
+export * from './identity';
+export * from './param-id';
+//# sourceMappingURL=index.d.ts.map

package/dist/http/request/helpers/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/http/request/helpers/index.ts"],"names":[],"mappings":"AAOA,cAAc,iBAAiB,CAAC;AAChC,cAAc,OAAO,CAAC;AACtB,cAAc,YAAY,CAAC;AAC3B,cAAc,YAAY,CAAC"}

package/dist/http/request/helpers/index.js

@@ -0,0 +1,27 @@
+"use strict";
+/*
+ * Copyright (c) 2024.
+ * Author Peter Placzek (tada5hi)
+ * For the full copyright and license information,
+ * view the LICENSE file that was distributed with this source code.
+ */
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __exportStar = (this && this.__exportStar) || function(m, exports) {
+    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+__exportStar(require("./body-realm-id"), exports);
+__exportStar(require("./env"), exports);
+__exportStar(require("./identity"), exports);
+__exportStar(require("./param-id"), exports);
+//# sourceMappingURL=index.js.map

package/dist/http/request/helpers/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../src/http/request/helpers/index.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;;;;;;;;;;;;;;;AAEH,kDAAgC;AAChC,wCAAsB;AACtB,6CAA2B;AAC3B,6CAA2B"}

package/dist/http/request/helpers/param-id.d.ts

@@ -0,0 +1,11 @@
+import type { Request } from 'routup';
+type RequestIDParamOptions = {
+    /**
+     * default: true
+     */
+    isUUID?: boolean;
+};
+export declare function useRequestParamID(req: Request, options?: RequestIDParamOptions): string;
+export declare function getRequestParamID(req: Request, options?: RequestIDParamOptions): string | undefined;
+export {};
+//# sourceMappingURL=param-id.d.ts.map

package/dist/http/request/helpers/param-id.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"param-id.d.ts","sourceRoot":"","sources":["../../../../src/http/request/helpers/param-id.ts"],"names":[],"mappings":"AAQA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,QAAQ,CAAC;AAItC,KAAK,qBAAqB,GAAG;IACzB;;OAEG;IACH,MAAM,CAAC,EAAE,OAAO,CAAA;CACnB,CAAC;AACF,wBAAgB,iBAAiB,CAAC,GAAG,EAAE,OAAO,EAAE,OAAO,GAAE,qBAA0B,GAAI,MAAM,CAO5F;AAED,wBAAgB,iBAAiB,CAAC,GAAG,EAAE,OAAO,EAAE,OAAO,GAAE,qBAA0B,GAAI,MAAM,GAAG,SAAS,CAgBxG"}