@authup/server-core 1.0.0-beta.21 → 1.0.0-beta.23

package/dist/http/oauth2/grant-types/robot-credentials.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"robot-credentials.d.ts","sourceRoot":"","sources":["../../../../src/http/oauth2/grant-types/robot-credentials.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,aAAa,CAAC;AAO5D,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,QAAQ,CAAC;AAGtC,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AAEpD,OAAO,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAE3C,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,QAAQ,CAAC;AAEpC,qBAAa,yBAA0B,SAAQ,aAAc,YAAW,KAAK;IACnE,GAAG,CAAC,OAAO,EAAE,OAAO,GAAI,OAAO,CAAC,wBAAwB,CAAC;IAmBzD,QAAQ,CAAC,OAAO,EAAE,OAAO,GAAI,OAAO,CAAC,WAAW,CAAC;CAiB1D"}
+{"version":3,"file":"robot-credentials.d.ts","sourceRoot":"","sources":["../../../../src/http/oauth2/grant-types/robot-credentials.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,aAAa,CAAC;AAO5D,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,QAAQ,CAAC;AAGtC,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,2BAA2B,CAAC;AAE7D,OAAO,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAE3C,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,QAAQ,CAAC;AAEpC,qBAAa,yBAA0B,SAAQ,aAAc,YAAW,KAAK;IACnE,GAAG,CAAC,OAAO,EAAE,OAAO,GAAI,OAAO,CAAC,wBAAwB,CAAC;IAqBzD,QAAQ,CAAC,OAAO,EAAE,OAAO,GAAI,OAAO,CAAC,WAAW,CAAC;CAiB1D"}

package/dist/http/oauth2/grant-types/robot-credentials.js

@@ -12,13 +12,13 @@ const core_kit_1 = require("@authup/core-kit");
 const body_1 = require("@routup/basic/body");
 const routup_1 = require("routup");
 const typeorm_extension_1 = require("typeorm-extension");
-const domains_1 = require("../../../domains");
+const domains_1 = require("../../../database/domains");
 const abstract_1 = require("./abstract");
 const response_1 = require("../response");
 class RobotCredentialsGrantType extends abstract_1.AbstractGrant {
     async run(request) {
         const entity = await this.validate(request);
-        const accessToken = await this.issueAccessToken({
+        const { token: accessToken, payload: accessTokenPayload, } = await this.issueAccessToken({
             remoteAddress: (0, routup_1.getRequestIP)(request, { trustProxy: true }),
             scope: core_kit_1.ScopeName.GLOBAL,
             subKind: kit_1.OAuth2SubKind.ROBOT,
@@ -28,8 +28,7 @@ class RobotCredentialsGrantType extends abstract_1.AbstractGrant {
         });
         return (0, response_1.buildOAuth2BearerTokenResponse)({
             accessToken,
-            accessTokenMaxAge: this.config.tokenAccessMaxAge,
-            refreshTokenMaxAge: this.config.tokenRefreshMaxAge,
+            accessTokenPayload,
         });
     }
     async validate(request) {

package/dist/http/oauth2/grant-types/robot-credentials.js.map

@@ -1 +1 @@
-{"version":3,"file":"robot-credentials.js","sourceRoot":"","sources":["../../../../src/http/oauth2/grant-types/robot-credentials.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;;AAGH,qCAA4C;AAC5C,+CAG0B;AAC1B,6CAAoD;AAEpD,mCAAsC;AACtC,yDAAkD;AAElD,8CAAmD;AACnD,yCAA2C;AAC3C,0CAA6D;AAG7D,MAAa,yBAA0B,SAAQ,wBAAa;IACxD,KAAK,CAAC,GAAG,CAAC,OAAgB;QACtB,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;QAE5C,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAAC;YAC5C,aAAa,EAAE,IAAA,qBAAY,EAAC,OAAO,EAAE,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC;YAC1D,KAAK,EAAE,oBAAS,CAAC,MAAM;YACvB,OAAO,EAAE,mBAAa,CAAC,KAAK;YAC5B,GAAG,EAAE,MAAM,CAAC,EAAE;YACd,OAAO,EAAE,MAAM,CAAC,KAAK,CAAC,EAAE;YACxB,SAAS,EAAE,MAAM,CAAC,KAAK,CAAC,IAAI;SAC/B,CAAC,CAAC;QAEH,OAAO,IAAA,yCAA8B,EAAC;YAClC,WAAW;YACX,iBAAiB,EAAE,IAAI,CAAC,MAAM,CAAC,iBAAiB;YAChD,kBAAkB,EAAE,IAAI,CAAC,MAAM,CAAC,kBAAkB;SACrD,CAAC,CAAC;IACP,CAAC;IAED,KAAK,CAAC,QAAQ,CAAC,OAAgB;QAC3B,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,GAAG,IAAA,qBAAc,EAAC,OAAO,CAAC,CAAC;QAE/C,MAAM,UAAU,GAAG,MAAM,IAAA,iCAAa,GAAE,CAAC;QACzC,MAAM,UAAU,GAAG,IAAI,yBAAe,CAAC,UAAU,CAAC,CAAC;QACnD,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,iBAAiB,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC;QAE9D,IAAI,CAAC,MAAM,EAAE,CAAC;YACV,MAAM,qBAAU,CAAC,kBAAkB,EAAE,CAAC;QAC1C,CAAC;QAED,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC;YACjB,MAAM,qBAAU,CAAC,QAAQ,EAAE,CAAC;QAChC,CAAC;QAED,OAAO,MAAM,CAAC;IAClB,CAAC;CACJ;AArCD,8DAqCC"}
+{"version":3,"file":"robot-credentials.js","sourceRoot":"","sources":["../../../../src/http/oauth2/grant-types/robot-credentials.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;;AAGH,qCAA4C;AAC5C,+CAG0B;AAC1B,6CAAoD;AAEpD,mCAAsC;AACtC,yDAAkD;AAElD,uDAA4D;AAC5D,yCAA2C;AAC3C,0CAA6D;AAG7D,MAAa,yBAA0B,SAAQ,wBAAa;IACxD,KAAK,CAAC,GAAG,CAAC,OAAgB;QACtB,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;QAE5C,MAAM,EACF,KAAK,EAAE,WAAW,EAClB,OAAO,EAAE,kBAAkB,GAC9B,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAAC;YAC5B,aAAa,EAAE,IAAA,qBAAY,EAAC,OAAO,EAAE,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC;YAC1D,KAAK,EAAE,oBAAS,CAAC,MAAM;YACvB,OAAO,EAAE,mBAAa,CAAC,KAAK;YAC5B,GAAG,EAAE,MAAM,CAAC,EAAE;YACd,OAAO,EAAE,MAAM,CAAC,KAAK,CAAC,EAAE;YACxB,SAAS,EAAE,MAAM,CAAC,KAAK,CAAC,IAAI;SAC/B,CAAC,CAAC;QAEH,OAAO,IAAA,yCAA8B,EAAC;YAClC,WAAW;YACX,kBAAkB;SACrB,CAAC,CAAC;IACP,CAAC;IAED,KAAK,CAAC,QAAQ,CAAC,OAAgB;QAC3B,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,GAAG,IAAA,qBAAc,EAAC,OAAO,CAAC,CAAC;QAE/C,MAAM,UAAU,GAAG,MAAM,IAAA,iCAAa,GAAE,CAAC;QACzC,MAAM,UAAU,GAAG,IAAI,yBAAe,CAAC,UAAU,CAAC,CAAC;QACnD,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,iBAAiB,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC;QAE9D,IAAI,CAAC,MAAM,EAAE,CAAC;YACV,MAAM,qBAAU,CAAC,kBAAkB,EAAE,CAAC;QAC1C,CAAC;QAED,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC;YACjB,MAAM,qBAAU,CAAC,QAAQ,EAAE,CAAC;QAChC,CAAC;QAED,OAAO,MAAM,CAAC;IAClB,CAAC;CACJ;AAvCD,8DAuCC"}

package/dist/http/oauth2/grant-types/type.d.ts

@@ -1,5 +1,9 @@
-import type { OAuth2SubKind, OAuth2TokenGrantResponse } from '@authup/kit';
+import type { OAuth2SubKind, OAuth2TokenGrantResponse, OAuth2TokenPayload } from '@authup/kit';
 import type { Request } from 'routup';
+export type TokenIssueResult = {
+    token: string;
+    payload: OAuth2TokenPayload;
+};
 export type AccessTokenIssueContext = {
     remoteAddress: string;
     sub: string;

package/dist/http/oauth2/grant-types/type.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"type.d.ts","sourceRoot":"","sources":["../../../../src/http/oauth2/grant-types/type.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EACR,aAAa,EAAE,wBAAwB,EAC1C,MAAM,aAAa,CAAC;AACrB,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,QAAQ,CAAC;AAEtC,MAAM,MAAM,uBAAuB,GAAG;IAClC,aAAa,EAAE,MAAM,CAAC;IAEtB,GAAG,EAAE,MAAM,CAAC;IACZ,OAAO,EAAE,GAAG,aAAa,EAAE,CAAC;IAE5B,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;IAElB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,QAAQ,CAAC,EAAE,MAAM,CAAC;CACrB,CAAC;AAIF,MAAM,WAAW,KAAK;IAClB,GAAG,CAAC,OAAO,EAAE,OAAO,GAAI,OAAO,CAAC,wBAAwB,CAAC,CAAC;CAC7D"}
+{"version":3,"file":"type.d.ts","sourceRoot":"","sources":["../../../../src/http/oauth2/grant-types/type.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EACR,aAAa,EAAE,wBAAwB,EAAE,kBAAkB,EAC9D,MAAM,aAAa,CAAC;AACrB,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,QAAQ,CAAC;AAEtC,MAAM,MAAM,gBAAgB,GAAG;IAC3B,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,kBAAkB,CAAA;CAC9B,CAAC;AAEF,MAAM,MAAM,uBAAuB,GAAG;IAClC,aAAa,EAAE,MAAM,CAAC;IAEtB,GAAG,EAAE,MAAM,CAAC;IACZ,OAAO,EAAE,GAAG,aAAa,EAAE,CAAC;IAE5B,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;IAElB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,QAAQ,CAAC,EAAE,MAAM,CAAC;CACrB,CAAC;AAIF,MAAM,WAAW,KAAK;IAClB,GAAG,CAAC,OAAO,EAAE,OAAO,GAAI,OAAO,CAAC,wBAAwB,CAAC,CAAC;CAC7D"}

package/dist/http/oauth2/index.d.ts

@@ -1,5 +1,5 @@
 export * from './authorize';
-export * from './cache';
+export * from './constants';
 export * from './grant-types';
 export * from './openid';
 export * from './response';

package/dist/http/oauth2/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/http/oauth2/index.ts"],"names":[],"mappings":"AAOA,cAAc,aAAa,CAAC;AAC5B,cAAc,SAAS,CAAC;AACxB,cAAc,eAAe,CAAC;AAC9B,cAAc,UAAU,CAAC;AACzB,cAAc,YAAY,CAAC;AAC3B,cAAc,SAAS,CAAC;AACxB,cAAc,SAAS,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/http/oauth2/index.ts"],"names":[],"mappings":"AAOA,cAAc,aAAa,CAAC;AAC5B,cAAc,aAAa,CAAC;AAC5B,cAAc,eAAe,CAAC;AAC9B,cAAc,UAAU,CAAC;AACzB,cAAc,YAAY,CAAC;AAC3B,cAAc,SAAS,CAAC;AACxB,cAAc,SAAS,CAAC"}

package/dist/http/oauth2/index.js

@@ -21,7 +21,7 @@ var __exportStar = (this && this.__exportStar) || function(m, exports) {
 };
 Object.defineProperty(exports, "__esModule", { value: true });
 __exportStar(require("./authorize"), exports);
-__exportStar(require("./cache"), exports);
+__exportStar(require("./constants"), exports);
 __exportStar(require("./grant-types"), exports);
 __exportStar(require("./openid"), exports);
 __exportStar(require("./response"), exports);

package/dist/http/oauth2/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/http/oauth2/index.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;;;;;;;;;;;;;;;AAEH,8CAA4B;AAC5B,0CAAwB;AACxB,gDAA8B;AAC9B,2CAAyB;AACzB,6CAA2B;AAC3B,0CAAwB;AACxB,0CAAwB"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/http/oauth2/index.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;;;;;;;;;;;;;;;AAEH,8CAA4B;AAC5B,8CAA4B;AAC5B,gDAA8B;AAC9B,2CAAyB;AACzB,6CAA2B;AAC3B,0CAAwB;AACxB,0CAAwB"}

package/dist/http/oauth2/response/bearer.d.ts

@@ -1,4 +1,4 @@
 import type { OAuth2TokenGrantResponse } from '@authup/kit';
 import type { OAuth2BearerResponseBuildContext } from './type';
-export declare function buildOAuth2BearerTokenResponse(context: OAuth2BearerResponseBuildContext): Promise<OAuth2TokenGrantResponse>;
+export declare function buildOAuth2BearerTokenResponse(context: OAuth2BearerResponseBuildContext): OAuth2TokenGrantResponse;
 //# sourceMappingURL=bearer.d.ts.map

package/dist/http/oauth2/response/bearer.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"bearer.d.ts","sourceRoot":"","sources":["../../../../src/http/oauth2/response/bearer.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,wBAAwB,EAAsB,MAAM,aAAa,CAAC;AAIhF,OAAO,KAAK,EAAE,gCAAgC,EAAE,MAAM,QAAQ,CAAC;AAE/D,wBAAsB,8BAA8B,CAChD,OAAO,EAAE,gCAAgC,qCAkF5C"}
+{"version":3,"file":"bearer.d.ts","sourceRoot":"","sources":["../../../../src/http/oauth2/response/bearer.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,aAAa,CAAC;AAC5D,OAAO,KAAK,EAAE,gCAAgC,EAAE,MAAM,QAAQ,CAAC;AAE/D,wBAAgB,8BAA8B,CAC1C,OAAO,EAAE,gCAAgC,GACzC,wBAAwB,CAgC3B"}

package/dist/http/oauth2/response/bearer.js

@@ -7,62 +7,31 @@
  */
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.buildOAuth2BearerTokenResponse = buildOAuth2BearerTokenResponse;
-const kit_1 = require("@authup/kit");
-const domains_1 = require("../../../domains");
-async function buildOAuth2BearerTokenResponse(context) {
-    const accessTokenMaxAge = context.accessTokenMaxAge || 7200;
-    const getRealmId = () => {
-        if (context.realmId) {
-            return context.realmId;
-        }
-        if (typeof context.accessToken !== 'string') {
-            return context.accessToken.realm_id;
-        }
-        if (context.refreshToken &&
-            typeof context.refreshToken !== 'string') {
-            return context.refreshToken.realm_id;
-        }
-        return context.idToken &&
-            typeof context.idToken !== 'string' ?
-            context.idToken.realm_id :
-            undefined;
-    };
-    let key;
-    const signToken = async (token, maxAge) => {
-        if (typeof token === 'string') {
-            return token;
-        }
-        if (typeof key === 'undefined') {
-            const realmId = getRealmId();
-            if (!realmId) {
-                throw kit_1.TokenError.signingKeyMissing();
-            }
-            key = await (0, domains_1.useKey)({ realm_id: realmId });
-        }
-        if (typeof token.exp === 'undefined') {
-            token.exp = Math.floor(new Date().getTime() / 1000) + (maxAge || accessTokenMaxAge);
-        }
-        return (0, domains_1.signOAuth2TokenWithKey)(token, key, {
-            keyId: key.id,
-        });
-    };
+function buildOAuth2BearerTokenResponse(context) {
+    let accessTokenMaxAge;
+    if (context.accessTokenPayload &&
+        context.accessTokenPayload.exp) {
+        accessTokenMaxAge = Math.max(3600, context.accessTokenPayload.exp - Math.floor(new Date().getTime() / 1000));
+    }
+    else {
+        accessTokenMaxAge = 3600;
+    }
     const response = {
-        access_token: await signToken(context.accessToken),
+        access_token: context.accessToken,
         expires_in: accessTokenMaxAge,
         token_type: 'Bearer',
     };
-    if (typeof context.accessToken !== 'string' &&
-        context.accessToken.scope) {
-        response.scope = context.accessToken.scope;
+    if (context.accessTokenPayload) {
+        response.scope = context.accessTokenPayload.scope;
     }
     else if (context.scope) {
         response.scope = context.scope;
     }
     if (context.refreshToken) {
-        response.refresh_token = await signToken(context.refreshToken, context.refreshTokenMaxAge);
+        response.refresh_token = context.refreshToken;
     }
     if (context.idToken) {
-        response.id_token = await signToken(context.idToken, context.idTokenMaxAge);
+        response.id_token = context.idToken;
     }
     return response;
 }

package/dist/http/oauth2/response/bearer.js.map

@@ -1 +1 @@
-{"version":3,"file":"bearer.js","sourceRoot":"","sources":["../../../../src/http/oauth2/response/bearer.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;AAQH,wEAmFC;AAxFD,qCAAyC;AAEzC,8CAAkE;AAG3D,KAAK,UAAU,8BAA8B,CAChD,OAAyC;IAEzC,MAAM,iBAAiB,GAAY,OAAO,CAAC,iBAAiB,IAAI,IAAI,CAAC;IAErE,MAAM,UAAU,GAAG,GAAwB,EAAE;QACzC,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;YAClB,OAAO,OAAO,CAAC,OAAO,CAAC;QAC3B,CAAC;QAED,IAAI,OAAO,OAAO,CAAC,WAAW,KAAK,QAAQ,EAAE,CAAC;YAC1C,OAAO,OAAO,CAAC,WAAW,CAAC,QAAQ,CAAC;QACxC,CAAC;QAED,IACI,OAAO,CAAC,YAAY;YACpB,OAAO,OAAO,CAAC,YAAY,KAAK,QAAQ,EAC1C,CAAC;YACC,OAAO,OAAO,CAAC,YAAY,CAAC,QAAQ,CAAC;QACzC,CAAC;QAED,OAAO,OAAO,CAAC,OAAO;YAClB,OAAO,OAAO,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAC;YACrC,OAAO,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;YAC1B,SAAS,CAAC;IAClB,CAAC,CAAC;IAEF,IAAI,GAA2B,CAAC;IAEhC,MAAM,SAAS,GAAG,KAAK,EACnB,KAA2C,EAC3C,MAAe,EACC,EAAE;QAClB,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;YAC5B,OAAO,KAAK,CAAC;QACjB,CAAC;QAED,IAAI,OAAO,GAAG,KAAK,WAAW,EAAE,CAAC;YAC7B,MAAM,OAAO,GAAG,UAAU,EAAE,CAAC;YAC7B,IAAI,CAAC,OAAO,EAAE,CAAC;gBACX,MAAM,gBAAU,CAAC,iBAAiB,EAAE,CAAC;YACzC,CAAC;YAED,GAAG,GAAG,MAAM,IAAA,gBAAM,EAAC,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC,CAAC;QAC9C,CAAC;QAED,IAAI,OAAO,KAAK,CAAC,GAAG,KAAK,WAAW,EAAE,CAAC;YACnC,KAAK,CAAC,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,IAAI,EAAE,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,GAAG,CAAC,MAAM,IAAI,iBAAiB,CAAC,CAAC;QACxF,CAAC;QAED,OAAO,IAAA,gCAAsB,EACzB,KAAK,EACL,GAAG,EACH;YACI,KAAK,EAAE,GAAG,CAAC,EAAE;SAChB,CACJ,CAAC;IACN,CAAC,CAAC;IAEF,MAAM,QAAQ,GAA8B;QACxC,YAAY,EAAE,MAAM,SAAS,CAAC,OAAO,CAAC,WAAW,CAAC;QAClD,UAAU,EAAE,iBAAiB;QAC7B,UAAU,EAAE,QAAQ;KACvB,CAAC;IAEF,IACI,OAAO,OAAO,CAAC,WAAW,KAAK,QAAQ;QACvC,OAAO,CAAC,WAAW,CAAC,KAAK,EAC3B,CAAC;QACC,QAAQ,CAAC,KAAK,GAAG,OAAO,CAAC,WAAW,CAAC,KAAK,CAAC;IAC/C,CAAC;SAAM,IAAI,OAAO,CAAC,KAAK,EAAE,CAAC;QACvB,QAAQ,CAAC,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC;IACnC,CAAC;IAED,IAAI,OAAO,CAAC,YAAY,EAAE,CAAC;QACvB,QAAQ,CAAC,aAAa,GAAG,MAAM,SAAS,CAAC,OAAO,CAAC,YAAY,EAAE,OAAO,CAAC,kBAAkB,CAAC,CAAC;IAC/F,CAAC;IAED,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;QAClB,QAAQ,CAAC,QAAQ,GAAG,MAAM,SAAS,CAAC,OAAO,CAAC,OAAO,EAAE,OAAO,CAAC,aAAa,CAAC,CAAC;IAChF,CAAC;IAED,OAAO,QAAQ,CAAC;AACpB,CAAC"}
+{"version":3,"file":"bearer.js","sourceRoot":"","sources":["../../../../src/http/oauth2/response/bearer.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;AAKH,wEAkCC;AAlCD,SAAgB,8BAA8B,CAC1C,OAAyC;IAEzC,IAAI,iBAA0B,CAAC;IAC/B,IACI,OAAO,CAAC,kBAAkB;QAC1B,OAAO,CAAC,kBAAkB,CAAC,GAAG,EAChC,CAAC;QACC,iBAAiB,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,OAAO,CAAC,kBAAkB,CAAC,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,IAAI,EAAE,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,CAAC,CAAC;IACjH,CAAC;SAAM,CAAC;QACJ,iBAAiB,GAAG,IAAI,CAAC;IAC7B,CAAC;IAED,MAAM,QAAQ,GAA8B;QACxC,YAAY,EAAE,OAAO,CAAC,WAAW;QACjC,UAAU,EAAE,iBAAiB;QAC7B,UAAU,EAAE,QAAQ;KACvB,CAAC;IAEF,IAAI,OAAO,CAAC,kBAAkB,EAAE,CAAC;QAC7B,QAAQ,CAAC,KAAK,GAAG,OAAO,CAAC,kBAAkB,CAAC,KAAK,CAAC;IACtD,CAAC;SAAM,IAAI,OAAO,CAAC,KAAK,EAAE,CAAC;QACvB,QAAQ,CAAC,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC;IACnC,CAAC;IAED,IAAI,OAAO,CAAC,YAAY,EAAE,CAAC;QACvB,QAAQ,CAAC,aAAa,GAAG,OAAO,CAAC,YAAY,CAAC;IAClD,CAAC;IAED,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;QAClB,QAAQ,CAAC,QAAQ,GAAG,OAAO,CAAC,OAAO,CAAC;IACxC,CAAC;IAED,OAAO,QAAQ,CAAC;AACpB,CAAC"}

package/dist/http/oauth2/response/type.d.ts

@@ -1,12 +1,10 @@
 import type { OAuth2TokenPayload } from '@authup/kit';
 export type OAuth2BearerResponseBuildContext = {
-    accessToken: Partial<OAuth2TokenPayload> | string;
-    accessTokenMaxAge?: number;
-    refreshToken?: Partial<OAuth2TokenPayload> | string;
-    refreshTokenMaxAge?: number;
-    idToken?: Partial<OAuth2TokenPayload> | string;
-    idTokenMaxAge?: number;
-    realmId?: string;
+    accessToken: string;
+    accessTokenPayload?: OAuth2TokenPayload;
+    refreshToken?: string;
+    refreshTokenPayload?: OAuth2TokenPayload;
+    idToken?: string;
     scope?: string;
 };
 //# sourceMappingURL=type.d.ts.map

package/dist/http/oauth2/response/type.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"type.d.ts","sourceRoot":"","sources":["../../../../src/http/oauth2/response/type.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAC;AAEtD,MAAM,MAAM,gCAAgC,GAAG;IAC3C,WAAW,EAAE,OAAO,CAAC,kBAAkB,CAAC,GAAG,MAAM,CAAC;IAClD,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAE3B,YAAY,CAAC,EAAE,OAAO,CAAC,kBAAkB,CAAC,GAAG,MAAM,CAAC;IACpD,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAE5B,OAAO,CAAC,EAAE,OAAO,CAAC,kBAAkB,CAAC,GAAG,MAAM,CAAC;IAC/C,aAAa,CAAC,EAAE,MAAM,CAAC;IAEvB,OAAO,CAAC,EAAE,MAAM,CAAC;IAEjB,KAAK,CAAC,EAAE,MAAM,CAAA;CACjB,CAAC"}
+{"version":3,"file":"type.d.ts","sourceRoot":"","sources":["../../../../src/http/oauth2/response/type.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAC;AAEtD,MAAM,MAAM,gCAAgC,GAAG;IAC3C,WAAW,EAAE,MAAM,CAAC;IACpB,kBAAkB,CAAC,EAAE,kBAAkB,CAAC;IAExC,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,mBAAmB,CAAC,EAAE,kBAAkB,CAAC;IAEzC,OAAO,CAAC,EAAE,MAAM,CAAC;IAEjB,KAAK,CAAC,EAAE,MAAM,CAAA;CACjB,CAAC"}

package/dist/http/oauth2/token/builder/access-token.d.ts

@@ -1,4 +1,4 @@
 import type { OAuth2TokenPayload } from '@authup/kit';
 import type { OAuth2AccessTokenBuildContext } from './type';
-export declare function buildOAuth2AccessTokenPayload(context: OAuth2AccessTokenBuildContext): Partial<OAuth2TokenPayload>;
+export declare function buildOAuth2AccessTokenPayload(context: OAuth2AccessTokenBuildContext): OAuth2TokenPayload;
 //# sourceMappingURL=access-token.d.ts.map

package/dist/http/oauth2/token/builder/access-token.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"access-token.d.ts","sourceRoot":"","sources":["../../../../../src/http/oauth2/token/builder/access-token.ts"],"names":[],"mappings":"AAQA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAC;AAEtD,OAAO,KAAK,EAAE,6BAA6B,EAAE,MAAM,QAAQ,CAAC;AAE5D,wBAAgB,6BAA6B,CACzC,OAAO,EAAE,6BAA6B,GACtC,OAAO,CAAC,kBAAkB,CAAC,CAe9B"}
+{"version":3,"file":"access-token.d.ts","sourceRoot":"","sources":["../../../../../src/http/oauth2/token/builder/access-token.ts"],"names":[],"mappings":"AAQA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAC;AAEtD,OAAO,KAAK,EAAE,6BAA6B,EAAE,MAAM,QAAQ,CAAC;AAE5D,wBAAgB,6BAA6B,CACzC,OAAO,EAAE,6BAA6B,GACtC,kBAAkB,CAerB"}

package/dist/http/oauth2/token/builder/access-token.js

@@ -21,7 +21,7 @@ function buildOAuth2AccessTokenPayload(context) {
         client_id: context.clientId,
         realm_id: context.realmId,
         realm_name: context.realmName,
-        ...(context.expiresIn ? { exp: Math.floor(new Date().getTime() / 1000) + context.expiresIn } : {}),
+        exp: Math.floor(new Date().getTime() / 1000) + (context.maxAge || 3600),
         ...(context.scope ? { scope: context.scope } : {}),
     };
 }

package/dist/http/oauth2/token/builder/access-token.js.map

@@ -1 +1 @@
-{"version":3,"file":"access-token.js","sourceRoot":"","sources":["../../../../../src/http/oauth2/token/builder/access-token.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;AAOH,sEAiBC;AAtBD,6CAAyC;AAEzC,qCAA8C;AAG9C,SAAgB,6BAA6B,CACzC,OAAsC;IAEtC,OAAO;QACH,IAAI,EAAE,qBAAe,CAAC,MAAM;QAC5B,GAAG,EAAE,IAAA,wBAAU,GAAE;QACjB,GAAG,EAAE,OAAO,CAAC,MAAM;QACnB,GAAG,EAAE,OAAO,CAAC,GAAG;QAChB,QAAQ,EAAE,OAAO,CAAC,OAAO;QACzB,cAAc,EAAE,OAAO,CAAC,aAAa;QACrC,GAAG,EAAE,OAAO,CAAC,QAAQ;QACrB,SAAS,EAAE,OAAO,CAAC,QAAQ;QAC3B,QAAQ,EAAE,OAAO,CAAC,OAAO;QACzB,UAAU,EAAE,OAAO,CAAC,SAAS;QAC7B,GAAG,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,IAAI,EAAE,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,GAAG,OAAO,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAClG,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACrD,CAAC;AACN,CAAC"}
+{"version":3,"file":"access-token.js","sourceRoot":"","sources":["../../../../../src/http/oauth2/token/builder/access-token.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;AAOH,sEAiBC;AAtBD,6CAAyC;AAEzC,qCAA8C;AAG9C,SAAgB,6BAA6B,CACzC,OAAsC;IAEtC,OAAO;QACH,IAAI,EAAE,qBAAe,CAAC,MAAM;QAC5B,GAAG,EAAE,IAAA,wBAAU,GAAE;QACjB,GAAG,EAAE,OAAO,CAAC,MAAM;QACnB,GAAG,EAAE,OAAO,CAAC,GAAG;QAChB,QAAQ,EAAE,OAAO,CAAC,OAAO;QACzB,cAAc,EAAE,OAAO,CAAC,aAAa;QACrC,GAAG,EAAE,OAAO,CAAC,QAAQ;QACrB,SAAS,EAAE,OAAO,CAAC,QAAQ;QAC3B,QAAQ,EAAE,OAAO,CAAC,OAAO;QACzB,UAAU,EAAE,OAAO,CAAC,SAAS;QAC7B,GAAG,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,IAAI,EAAE,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,MAAM,IAAI,IAAI,CAAC;QACvE,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACrD,CAAC;AACN,CAAC"}

package/dist/http/oauth2/token/builder/id-token.d.ts

@@ -1,5 +1,5 @@
 import type { OAuth2OpenIdTokenPayload } from '@authup/kit';
 import type { OAuth2OpenIdTokenBuildContext } from './type';
-export declare function buildOpenIdTokenPayload(context: OAuth2OpenIdTokenBuildContext): Partial<OAuth2OpenIdTokenPayload>;
-export declare function extendOpenIdTokenPayload(payload: Partial<OAuth2OpenIdTokenPayload>): Promise<Partial<OAuth2OpenIdTokenPayload>>;
+export declare function buildOpenIdTokenPayload(context: OAuth2OpenIdTokenBuildContext): OAuth2OpenIdTokenPayload;
+export declare function extendOpenIdTokenPayload(payload: OAuth2OpenIdTokenPayload): Promise<OAuth2OpenIdTokenPayload>;
 //# sourceMappingURL=id-token.d.ts.map

package/dist/http/oauth2/token/builder/id-token.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"id-token.d.ts","sourceRoot":"","sources":["../../../../../src/http/oauth2/token/builder/id-token.ts"],"names":[],"mappings":"AAQA,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,aAAa,CAAC;AAI5D,OAAO,KAAK,EAAE,6BAA6B,EAAE,MAAM,QAAQ,CAAC;AAE5D,wBAAgB,uBAAuB,CACnC,OAAO,EAAE,6BAA6B,GACtC,OAAO,CAAC,wBAAwB,CAAC,CAgBpC;AAED,wBAAsB,wBAAwB,CAC1C,OAAO,EAAE,OAAO,CAAC,wBAAwB,CAAC,GAC1C,OAAO,CAAC,OAAO,CAAC,wBAAwB,CAAC,CAAC,CAc7C"}
+{"version":3,"file":"id-token.d.ts","sourceRoot":"","sources":["../../../../../src/http/oauth2/token/builder/id-token.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,aAAa,CAAC;AAK5D,OAAO,KAAK,EAAE,6BAA6B,EAAE,MAAM,QAAQ,CAAC;AAE5D,wBAAgB,uBAAuB,CACnC,OAAO,EAAE,6BAA6B,GACtC,wBAAwB,CAU3B;AAED,wBAAsB,wBAAwB,CAC1C,OAAO,EAAE,wBAAwB,GACjC,OAAO,CAAC,wBAAwB,CAAC,CAcpC"}

package/dist/http/oauth2/token/builder/id-token.js

@@ -8,25 +8,18 @@
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.buildOpenIdTokenPayload = buildOpenIdTokenPayload;
 exports.extendOpenIdTokenPayload = extendOpenIdTokenPayload;
-const node_crypto_1 = require("node:crypto");
 const kit_1 = require("@authup/kit");
 const openid_1 = require("../../openid");
 const sub_1 = require("../sub");
+const access_token_1 = require("./access-token");
 function buildOpenIdTokenPayload(context) {
+    const utc = Math.floor(new Date().getTime() / 1000);
     return {
+        ...(0, access_token_1.buildOAuth2AccessTokenPayload)(context),
         kind: kit_1.OAuth2TokenKind.ID_TOKEN,
-        jti: (0, node_crypto_1.randomUUID)(),
-        iss: context.issuer,
-        sub: context.sub,
-        sub_kind: context.subKind,
-        remote_address: context.remoteAddress,
-        aud: context.clientId,
-        client_id: context.clientId,
-        realm_id: context.realmId,
-        realm_name: context.realmName,
-        auth_time: Math.floor(new Date().getTime() / 1000),
-        ...(context.expiresIn ? { exp: Math.floor(new Date().getTime() / 1000) + context.expiresIn } : {}),
-        ...(context.scope ? { scope: context.scope } : {}),
+        auth_time: utc,
+        exp: utc + (context.maxAge || 3600),
+        updated_at: utc,
     };
 }
 async function extendOpenIdTokenPayload(payload) {

package/dist/http/oauth2/token/builder/id-token.js.map

@@ -1 +1 @@
-{"version":3,"file":"id-token.js","sourceRoot":"","sources":["../../../../../src/http/oauth2/token/builder/id-token.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;AASH,0DAkBC;AAED,4DAgBC;AA3CD,6CAAyC;AAEzC,qCAA8C;AAC9C,yCAAgE;AAChE,gCAA6C;AAG7C,SAAgB,uBAAuB,CACnC,OAAsC;IAEtC,OAAO;QACH,IAAI,EAAE,qBAAe,CAAC,QAAQ;QAC9B,GAAG,EAAE,IAAA,wBAAU,GAAE;QACjB,GAAG,EAAE,OAAO,CAAC,MAAM;QACnB,GAAG,EAAE,OAAO,CAAC,GAAG;QAChB,QAAQ,EAAE,OAAO,CAAC,OAAO;QACzB,cAAc,EAAE,OAAO,CAAC,aAAa;QACrC,GAAG,EAAE,OAAO,CAAC,QAAQ;QACrB,SAAS,EAAE,OAAO,CAAC,QAAQ;QAC3B,QAAQ,EAAE,OAAO,CAAC,OAAO;QACzB,UAAU,EAAE,OAAO,CAAC,SAAS;QAC7B,SAAS,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,IAAI,EAAE,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC;QAClD,GAAG,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,IAAI,EAAE,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,GAAG,OAAO,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAClG,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACrD,CAAC;AACN,CAAC;AAEM,KAAK,UAAU,wBAAwB,CAC1C,OAA0C;IAE1C,IAAI,CAAC,OAAO,CAAC,QAAQ,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC;QACpC,OAAO,OAAO,CAAC;IACnB,CAAC;IAED,MAAM,MAAM,GAAuC,IAAA,yCAAgC,EAC/E,OAAO,CAAC,QAAQ,EAChB,MAAM,IAAA,yBAAmB,EAAC,OAAO,CAAC,QAAQ,EAAE,OAAO,CAAC,GAAG,EAAE,OAAO,CAAC,KAAK,CAAC,CAC1E,CAAC;IAEF,OAAO;QACH,GAAG,OAAO;QACV,GAAG,MAAM;KACZ,CAAC;AACN,CAAC"}
+{"version":3,"file":"id-token.js","sourceRoot":"","sources":["../../../../../src/http/oauth2/token/builder/id-token.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;AASH,0DAYC;AAED,4DAgBC;AApCD,qCAA8C;AAC9C,yCAAgE;AAChE,gCAA6C;AAC7C,iDAA+D;AAG/D,SAAgB,uBAAuB,CACnC,OAAsC;IAEtC,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,IAAI,EAAE,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,CAAC;IAEpD,OAAO;QACH,GAAG,IAAA,4CAA6B,EAAC,OAAO,CAAC;QACzC,IAAI,EAAE,qBAAe,CAAC,QAAQ;QAC9B,SAAS,EAAE,GAAG;QACd,GAAG,EAAE,GAAG,GAAG,CAAC,OAAO,CAAC,MAAM,IAAI,IAAI,CAAC;QACnC,UAAU,EAAE,GAAG;KAClB,CAAC;AACN,CAAC;AAEM,KAAK,UAAU,wBAAwB,CAC1C,OAAiC;IAEjC,IAAI,CAAC,OAAO,CAAC,QAAQ,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC;QACpC,OAAO,OAAO,CAAC;IACnB,CAAC;IAED,MAAM,MAAM,GAAuC,IAAA,yCAAgC,EAC/E,OAAO,CAAC,QAAQ,EAChB,MAAM,IAAA,yBAAmB,EAAC,OAAO,CAAC,QAAQ,EAAE,OAAO,CAAC,GAAG,EAAE,OAAO,CAAC,KAAK,CAAC,CAC1E,CAAC;IAEF,OAAO;QACH,GAAG,OAAO;QACV,GAAG,MAAM;KACZ,CAAC;AACN,CAAC"}

package/dist/http/oauth2/token/builder/refresh-token.d.ts

@@ -1,7 +1,4 @@
-import type { OAuth2RefreshToken } from '@authup/core-kit';
 import type { OAuth2TokenPayload } from '@authup/kit';
 import type { OAuth2RefreshTokenBuildContext } from './type';
-export declare function buildOAuth2RefreshTokenPayload(context: OAuth2RefreshTokenBuildContext): Partial<OAuth2TokenPayload>;
-export declare function transformToRefreshTokenPayload(accessToken: Partial<OAuth2TokenPayload>, refreshToken?: Partial<OAuth2RefreshTokenBuildContext>): Partial<OAuth2TokenPayload>;
-export declare function transformToRefreshTokenEntity(accessToken: Partial<OAuth2TokenPayload>, maxAge?: number): Partial<OAuth2RefreshToken>;
+export declare function buildOAuth2RefreshTokenPayload(context: OAuth2RefreshTokenBuildContext): OAuth2TokenPayload;
 //# sourceMappingURL=refresh-token.d.ts.map

package/dist/http/oauth2/token/builder/refresh-token.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"refresh-token.d.ts","sourceRoot":"","sources":["../../../../../src/http/oauth2/token/builder/refresh-token.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAC;AAE3D,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAC;AAEtD,OAAO,KAAK,EAAE,8BAA8B,EAAE,MAAM,QAAQ,CAAC;AAE7D,wBAAgB,8BAA8B,CAC1C,OAAO,EAAE,8BAA8B,GACvC,OAAO,CAAC,kBAAkB,CAAC,CAW9B;AAED,wBAAgB,8BAA8B,CAC1C,WAAW,EAAE,OAAO,CAAC,kBAAkB,CAAC,EACxC,YAAY,CAAC,EAAE,OAAO,CAAC,8BAA8B,CAAC,GACtD,OAAO,CAAC,kBAAkB,CAAC,CAU9B;AAED,wBAAgB,6BAA6B,CACzC,WAAW,EAAE,OAAO,CAAC,kBAAkB,CAAC,EACxC,MAAM,CAAC,EAAE,MAAM,GACf,OAAO,CAAC,kBAAkB,CAAC,CAU9B"}
+{"version":3,"file":"refresh-token.d.ts","sourceRoot":"","sources":["../../../../../src/http/oauth2/token/builder/refresh-token.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAC;AAGtD,OAAO,KAAK,EAAE,8BAA8B,EAAE,MAAM,QAAQ,CAAC;AAE7D,wBAAgB,8BAA8B,CAC1C,OAAO,EAAE,8BAA8B,GACvC,kBAAkB,CAKrB"}

package/dist/http/oauth2/token/builder/refresh-token.js

@@ -7,42 +7,12 @@
  */
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.buildOAuth2RefreshTokenPayload = buildOAuth2RefreshTokenPayload;
-exports.transformToRefreshTokenPayload = transformToRefreshTokenPayload;
-exports.transformToRefreshTokenEntity = transformToRefreshTokenEntity;
-const node_crypto_1 = require("node:crypto");
 const kit_1 = require("@authup/kit");
+const access_token_1 = require("./access-token");
 function buildOAuth2RefreshTokenPayload(context) {
     return {
+        ...(0, access_token_1.buildOAuth2AccessTokenPayload)(context),
         kind: kit_1.OAuth2TokenKind.REFRESH,
-        jti: context.id || (0, node_crypto_1.randomUUID)(),
-        sub: context.sub,
-        sub_kind: context.subKind,
-        client_id: context.clientId,
-        realm_id: context.realmId,
-        realm_name: context.realmName,
-        ...(context.scope ? { scope: context.scope } : {}),
-    };
-}
-function transformToRefreshTokenPayload(accessToken, refreshToken) {
-    return buildOAuth2RefreshTokenPayload({
-        ...(refreshToken || {}),
-        sub: accessToken.sub,
-        subKind: accessToken.sub_kind,
-        clientId: accessToken.client_id,
-        realmId: accessToken.realm_id,
-        realmName: accessToken.realm_name,
-        scope: accessToken.scope,
-    });
-}
-function transformToRefreshTokenEntity(accessToken, maxAge) {
-    return {
-        client_id: accessToken.client_id,
-        expires: new Date(Date.now() + (1000 * (maxAge || 7200))).toISOString(),
-        scope: accessToken.scope,
-        access_token: accessToken.jti,
-        realm_id: accessToken.realm_id,
-        ...(accessToken.sub_kind === kit_1.OAuth2SubKind.USER ? { user_id: accessToken.sub } : {}),
-        ...(accessToken.sub_kind === kit_1.OAuth2SubKind.ROBOT ? { robot_id: accessToken.sub } : {}),
     };
 }
 //# sourceMappingURL=refresh-token.js.map

package/dist/http/oauth2/token/builder/refresh-token.js.map

@@ -1 +1 @@
-{"version":3,"file":"refresh-token.js","sourceRoot":"","sources":["../../../../../src/http/oauth2/token/builder/refresh-token.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;AAQH,wEAaC;AAED,wEAaC;AAED,sEAaC;AAhDD,6CAAyC;AAEzC,qCAA6D;AAG7D,SAAgB,8BAA8B,CAC1C,OAAuC;IAEvC,OAAO;QACH,IAAI,EAAE,qBAAe,CAAC,OAAO;QAC7B,GAAG,EAAE,OAAO,CAAC,EAAE,IAAI,IAAA,wBAAU,GAAE;QAC/B,GAAG,EAAE,OAAO,CAAC,GAAG;QAChB,QAAQ,EAAE,OAAO,CAAC,OAAO;QACzB,SAAS,EAAE,OAAO,CAAC,QAAQ;QAC3B,QAAQ,EAAE,OAAO,CAAC,OAAO;QACzB,UAAU,EAAE,OAAO,CAAC,SAAS;QAC7B,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACrD,CAAC;AACN,CAAC;AAED,SAAgB,8BAA8B,CAC1C,WAAwC,EACxC,YAAsD;IAEtD,OAAO,8BAA8B,CAAC;QAClC,GAAG,CAAC,YAAY,IAAI,EAAE,CAAC;QACvB,GAAG,EAAE,WAAW,CAAC,GAAG;QACpB,OAAO,EAAE,WAAW,CAAC,QAAQ;QAC7B,QAAQ,EAAE,WAAW,CAAC,SAAS;QAC/B,OAAO,EAAE,WAAW,CAAC,QAAQ;QAC7B,SAAS,EAAE,WAAW,CAAC,UAAU;QACjC,KAAK,EAAE,WAAW,CAAC,KAAK;KAC3B,CAAC,CAAC;AACP,CAAC;AAED,SAAgB,6BAA6B,CACzC,WAAwC,EACxC,MAAe;IAEf,OAAO;QACH,SAAS,EAAE,WAAW,CAAC,SAAS;QAChC,OAAO,EAAE,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,IAAI,GAAG,CAAC,MAAM,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE;QACvE,KAAK,EAAE,WAAW,CAAC,KAAK;QACxB,YAAY,EAAE,WAAW,CAAC,GAAG;QAC7B,QAAQ,EAAE,WAAW,CAAC,QAAQ;QAC9B,GAAG,CAAC,WAAW,CAAC,QAAQ,KAAK,mBAAa,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,WAAW,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACpF,GAAG,CAAC,WAAW,CAAC,QAAQ,KAAK,mBAAa,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,WAAW,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACzF,CAAC;AACN,CAAC"}
+{"version":3,"file":"refresh-token.js","sourceRoot":"","sources":["../../../../../src/http/oauth2/token/builder/refresh-token.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;AAOH,wEAOC;AAXD,qCAA8C;AAC9C,iDAA+D;AAG/D,SAAgB,8BAA8B,CAC1C,OAAuC;IAEvC,OAAO;QACH,GAAG,IAAA,4CAA6B,EAAC,OAAO,CAAC;QACzC,IAAI,EAAE,qBAAe,CAAC,OAAO;KAChC,CAAC;AACN,CAAC"}

package/dist/http/oauth2/token/builder/type.d.ts

@@ -8,10 +8,8 @@ export type OAuth2AccessTokenBuildContext = {
     scope?: string;
     clientId?: string;
     remoteAddress: string;
-    expiresIn?: number;
+    maxAge?: number;
 };
 export type OAuth2OpenIdTokenBuildContext = OAuth2AccessTokenBuildContext;
-export type OAuth2RefreshTokenBuildContext = Omit<OAuth2AccessTokenBuildContext, 'remoteAddress' | 'issuer'> & {
-    id?: string;
-};
+export type OAuth2RefreshTokenBuildContext = OAuth2AccessTokenBuildContext;
 //# sourceMappingURL=type.d.ts.map

package/dist/http/oauth2/token/builder/type.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"type.d.ts","sourceRoot":"","sources":["../../../../../src/http/oauth2/token/builder/type.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAEjD,MAAM,MAAM,6BAA6B,GAAG;IACxC,MAAM,EAAE,MAAM,CAAC;IAEf,GAAG,EAAE,MAAM,CAAC;IACZ,OAAO,EAAE,GAAG,aAAa,EAAE,CAAC;IAE5B,OAAO,EAAE,MAAM,CAAC;IAEhB,SAAS,EAAE,MAAM,CAAC;IAElB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,QAAQ,CAAC,EAAE,MAAM,CAAC;IAElB,aAAa,EAAE,MAAM,CAAC;IAEtB,SAAS,CAAC,EAAE,MAAM,CAAA;CACrB,CAAC;AAEF,MAAM,MAAM,6BAA6B,GAAG,6BAA6B,CAAC;AAI1E,MAAM,MAAM,8BAA8B,GAAG,IAAI,CACjD,6BAA6B,EAAE,eAAe,GAAG,QAAQ,CACxD,GAAG;IACA,EAAE,CAAC,EAAE,MAAM,CAAA;CACd,CAAC"}
+{"version":3,"file":"type.d.ts","sourceRoot":"","sources":["../../../../../src/http/oauth2/token/builder/type.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAEjD,MAAM,MAAM,6BAA6B,GAAG;IACxC,MAAM,EAAE,MAAM,CAAC;IAEf,GAAG,EAAE,MAAM,CAAC;IACZ,OAAO,EAAE,GAAG,aAAa,EAAE,CAAC;IAE5B,OAAO,EAAE,MAAM,CAAC;IAEhB,SAAS,EAAE,MAAM,CAAC;IAElB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,QAAQ,CAAC,EAAE,MAAM,CAAC;IAElB,aAAa,EAAE,MAAM,CAAC;IAEtB,MAAM,CAAC,EAAE,MAAM,CAAA;CAClB,CAAC;AAEF,MAAM,MAAM,6BAA6B,GAAG,6BAA6B,CAAC;AAE1E,MAAM,MAAM,8BAA8B,GAAG,6BAA6B,CAAC"}

package/dist/http/oauth2/token/index.d.ts

@@ -1,5 +1,5 @@
 export * from './builder';
-export * from './payload';
 export * from './permissions';
 export * from './sub';
+export * from './module';
 //# sourceMappingURL=index.d.ts.map

package/dist/http/oauth2/token/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/http/oauth2/token/index.ts"],"names":[],"mappings":"AAOA,cAAc,WAAW,CAAC;AAC1B,cAAc,WAAW,CAAC;AAC1B,cAAc,eAAe,CAAC;AAC9B,cAAc,OAAO,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/http/oauth2/token/index.ts"],"names":[],"mappings":"AAOA,cAAc,WAAW,CAAC;AAC1B,cAAc,eAAe,CAAC;AAC9B,cAAc,OAAO,CAAC;AACtB,cAAc,UAAU,CAAC"}

package/dist/http/oauth2/token/index.js

@@ -21,7 +21,7 @@ var __exportStar = (this && this.__exportStar) || function(m, exports) {
 };
 Object.defineProperty(exports, "__esModule", { value: true });
 __exportStar(require("./builder"), exports);
-__exportStar(require("./payload"), exports);
 __exportStar(require("./permissions"), exports);
 __exportStar(require("./sub"), exports);
+__exportStar(require("./module"), exports);
 //# sourceMappingURL=index.js.map

package/dist/http/oauth2/token/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../src/http/oauth2/token/index.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;;;;;;;;;;;;;;;AAEH,4CAA0B;AAC1B,4CAA0B;AAC1B,gDAA8B;AAC9B,wCAAsB"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../src/http/oauth2/token/index.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;;;;;;;;;;;;;;;AAEH,4CAA0B;AAC1B,gDAA8B;AAC9B,wCAAsB;AACtB,2CAAyB"}

package/dist/http/oauth2/token/module.d.ts

@@ -0,0 +1,37 @@
+import type { OAuth2TokenPayload } from '@authup/kit';
+import type { Cache, CacheSetOptions } from '@authup/server-kit';
+type OAuth2TokenManagerVerifyOptions = {
+    skipActiveCheck?: boolean;
+};
+type OAuth2TokenManagerSingResult<T> = {
+    payload: T;
+    token: string;
+};
+export declare class OAuth2TokenManager {
+    protected cache: Cache;
+    constructor();
+    verify(token: string, options?: OAuth2TokenManagerVerifyOptions): Promise<OAuth2TokenPayload>;
+    sign<T extends OAuth2TokenPayload>(payload: T): Promise<OAuth2TokenManagerSingResult<T>>;
+    setInactive(token: string, options?: CacheSetOptions): Promise<void>;
+    isActive(token: string): Promise<boolean>;
+    /**
+     * Cache token payload by JTI.
+     *
+     * @param token
+     * @param data
+     */
+    protected addPayloadToCache(token: string, data: OAuth2TokenPayload): Promise<void>;
+    /**
+     * Get token payload by jwt
+     *
+     * @param jwt
+     */
+    protected getPayloadFromCache(jwt: string): Promise<OAuth2TokenPayload | undefined>;
+    /**
+     * Transform exp claim to time to live.
+     * @param exp
+     */
+    protected transformUnixTimestampToTTL(exp: number): number;
+}
+export {};
+//# sourceMappingURL=module.d.ts.map

package/dist/http/oauth2/token/module.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"module.d.ts","sourceRoot":"","sources":["../../../../src/http/oauth2/token/module.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAC;AAEtD,OAAO,KAAK,EACR,KAAK,EACL,eAAe,EAClB,MAAM,oBAAoB,CAAC;AAS5B,KAAK,+BAA+B,GAAG;IACnC,eAAe,CAAC,EAAE,OAAO,CAAC;CAC7B,CAAC;AAEF,KAAK,4BAA4B,CAAC,CAAC,IAAI;IACnC,OAAO,EAAE,CAAC,CAAC;IACX,KAAK,EAAE,MAAM,CAAA;CAChB,CAAC;AAEF,qBAAa,kBAAkB;IAC3B,SAAS,CAAC,KAAK,EAAG,KAAK,CAAC;;IAQlB,MAAM,CACR,KAAK,EAAE,MAAM,EACb,OAAO,GAAE,+BAAoC;IAqC3C,IAAI,CAAC,CAAC,SAAS,kBAAkB,EACnC,OAAO,EAAE,CAAC,GACV,OAAO,CAAC,4BAA4B,CAAC,CAAC,CAAC,CAAC;IAyBtC,WAAW,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,GAAE,eAAoB;IAoBxD,QAAQ,CAAC,KAAK,EAAE,MAAM,GAAI,OAAO,CAAC,OAAO,CAAC;IAahD;;;;;OAKG;cACa,iBAAiB,CAC7B,KAAK,EAAE,MAAM,EACb,IAAI,EAAE,kBAAkB,GACzB,OAAO,CAAC,IAAI,CAAC;IAYhB;;;;OAIG;cACa,mBAAmB,CAC/B,GAAG,EAAE,MAAM,GACX,OAAO,CAAC,kBAAkB,GAAG,SAAS,CAAC;IAQ3C;;;OAGG;IACH,SAAS,CAAC,2BAA2B,CAAC,GAAG,EAAE,MAAM;CAKpD"}

package/dist/http/oauth2/token/module.js

@@ -0,0 +1,117 @@
+"use strict";
+/*
+ * Copyright (c) 2024.
+ * Author Peter Placzek (tada5hi)
+ * For the full copyright and license information,
+ * view the LICENSE file that was distributed with this source code.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.OAuth2TokenManager = void 0;
+const kit_1 = require("@authup/kit");
+const server_kit_1 = require("@authup/server-kit");
+const domains_1 = require("../../../database/domains");
+const constants_1 = require("../constants");
+class OAuth2TokenManager {
+    constructor() {
+        this.cache = (0, server_kit_1.useCache)();
+    }
+    // -----------------------------------------------------
+    async verify(token, options = {}) {
+        if (!token) {
+            throw kit_1.TokenError.requestInvalid('The token is not defined.');
+        }
+        if (!options.skipActiveCheck) {
+            const isActive = await this.isActive(token);
+            if (!isActive) {
+                throw kit_1.TokenError.inactive();
+            }
+        }
+        const payload = await this.getPayloadFromCache(token);
+        if (payload) {
+            return payload;
+        }
+        const header = (0, server_kit_1.extractTokenHeader)(token);
+        if (!header.kid) {
+            throw kit_1.TokenError.payloadInvalid('The jwk (kid) is invalid.');
+        }
+        const entity = await (0, domains_1.useKey)({
+            id: header.kid,
+        });
+        if (entity) {
+            const payload = await (0, domains_1.verifyOAuth2TokenWithKey)(token, entity);
+            await this.addPayloadToCache(token, payload);
+            return payload;
+        }
+        throw kit_1.TokenError.payloadInvalid('The referenced jwk (kid) does not exist.');
+    }
+    async sign(payload) {
+        const key = await (0, domains_1.useKey)({
+            realm_id: payload.realm_id,
+        });
+        if (!key) {
+            throw kit_1.TokenError.payloadInvalid('No jwk found to sign the token.');
+        }
+        if (!payload.exp) {
+            payload.exp = Math.floor(new Date().getTime() / 1000) + 3600;
+        }
+        const token = await (0, domains_1.signOAuth2TokenWithKey)(payload, key, { keyId: key.id });
+        await this.addPayloadToCache(token, payload);
+        return {
+            payload,
+            token,
+        };
+    }
+    // -----------------------------------------------------
+    async setInactive(token, options = {}) {
+        if (!options.ttl) {
+            const payload = await this.getPayloadFromCache(token);
+            if (payload) {
+                options.ttl = this.transformUnixTimestampToTTL(payload.exp);
+            }
+            options.ttl = options.ttl || 3600;
+        }
+        await this.cache.set((0, server_kit_1.buildCacheKey)({
+            prefix: constants_1.OAuth2CachePrefix.TOKEN_INACTIVE,
+            key: token,
+        }), true, options);
+    }
+    async isActive(token) {
+        const response = await this.cache.get((0, server_kit_1.buildCacheKey)({
+            prefix: constants_1.OAuth2CachePrefix.TOKEN_INACTIVE,
+            key: token,
+        }));
+        return !response;
+    }
+    // -----------------------------------------------------
+    /**
+     * Cache token payload by JTI.
+     *
+     * @param token
+     * @param data
+     */
+    async addPayloadToCache(token, data) {
+        const options = {
+            ttl: this.transformUnixTimestampToTTL(data.exp),
+        };
+        await this.cache.set((0, server_kit_1.buildCacheKey)({ prefix: constants_1.OAuth2CachePrefix.TOKEN_CLAIMS, key: token }), data, options);
+    }
+    /**
+     * Get token payload by jwt
+     *
+     * @param jwt
+     */
+    async getPayloadFromCache(jwt) {
+        return this.cache.get((0, server_kit_1.buildCacheKey)({ prefix: constants_1.OAuth2CachePrefix.TOKEN_CLAIMS, key: jwt }));
+    }
+    // -----------------------------------------------------
+    /**
+     * Transform exp claim to time to live.
+     * @param exp
+     */
+    transformUnixTimestampToTTL(exp) {
+        const ttl = (exp * 1000) - Date.now();
+        return ttl > 0 ? ttl : 0;
+    }
+}
+exports.OAuth2TokenManager = OAuth2TokenManager;
+//# sourceMappingURL=module.js.map

package/dist/http/oauth2/token/module.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"module.js","sourceRoot":"","sources":["../../../../src/http/oauth2/token/module.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;;AAGH,qCAAyC;AAKzC,mDAI4B;AAC5B,uDAAqG;AACrG,4CAAiD;AAWjD,MAAa,kBAAkB;IAG3B;QACI,IAAI,CAAC,KAAK,GAAG,IAAA,qBAAQ,GAAE,CAAC;IAC5B,CAAC;IAED,wDAAwD;IAExD,KAAK,CAAC,MAAM,CACR,KAAa,EACb,UAA2C,EAAE;QAE7C,IAAI,CAAC,KAAK,EAAE,CAAC;YACT,MAAM,gBAAU,CAAC,cAAc,CAAC,2BAA2B,CAAC,CAAC;QACjE,CAAC;QAED,IAAI,CAAC,OAAO,CAAC,eAAe,EAAE,CAAC;YAC3B,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;YAC5C,IAAI,CAAC,QAAQ,EAAE,CAAC;gBACZ,MAAM,gBAAU,CAAC,QAAQ,EAAE,CAAC;YAChC,CAAC;QACL,CAAC;QAED,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,mBAAmB,CAAC,KAAK,CAAC,CAAC;QACtD,IAAI,OAAO,EAAE,CAAC;YACV,OAAO,OAAO,CAAC;QACnB,CAAC;QAED,MAAM,MAAM,GAAG,IAAA,+BAAkB,EAAC,KAAK,CAAC,CAAC;QACzC,IAAI,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC;YACd,MAAM,gBAAU,CAAC,cAAc,CAAC,2BAA2B,CAAC,CAAC;QACjE,CAAC;QAED,MAAM,MAAM,GAAG,MAAM,IAAA,gBAAM,EAAC;YACxB,EAAE,EAAE,MAAM,CAAC,GAAG;SACjB,CAAC,CAAC;QACH,IAAI,MAAM,EAAE,CAAC;YACT,MAAM,OAAO,GAAG,MAAM,IAAA,kCAAwB,EAAC,KAAK,EAAE,MAAM,CAAC,CAAC;YAE9D,MAAM,IAAI,CAAC,iBAAiB,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;YAE7C,OAAO,OAAO,CAAC;QACnB,CAAC;QAED,MAAM,gBAAU,CAAC,cAAc,CAAC,0CAA0C,CAAC,CAAC;IAChF,CAAC;IAED,KAAK,CAAC,IAAI,CACN,OAAU;QAEV,MAAM,GAAG,GAAG,MAAM,IAAA,gBAAM,EAAC;YACrB,QAAQ,EAAE,OAAO,CAAC,QAAQ;SAC7B,CAAC,CAAC;QAEH,IAAI,CAAC,GAAG,EAAE,CAAC;YACP,MAAM,gBAAU,CAAC,cAAc,CAAC,iCAAiC,CAAC,CAAC;QACvE,CAAC;QAED,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC;YACf,OAAO,CAAC,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,IAAI,EAAE,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC;QACjE,CAAC;QAED,MAAM,KAAK,GAAG,MAAM,IAAA,gCAAsB,EAAC,OAAO,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,GAAG,CAAC,EAAE,EAAE,CAAC,CAAC;QAE5E,MAAM,IAAI,CAAC,iBAAiB,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;QAE7C,OAAO;YACH,OAAO;YACP,KAAK;SACR,CAAC;IACN,CAAC;IAED,wDAAwD;IAExD,KAAK,CAAC,WAAW,CAAC,KAAa,EAAE,UAA2B,EAAE;QAC1D,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC;YACf,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,mBAAmB,CAAC,KAAK,CAAC,CAAC;YACtD,IAAI,OAAO,EAAE,CAAC;gBACV,OAAO,CAAC,GAAG,GAAG,IAAI,CAAC,2BAA2B,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;YAChE,CAAC;YAED,OAAO,CAAC,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,IAAK,CAAC;QACvC,CAAC;QAED,MAAM,IAAI,CAAC,KAAK,CAAC,GAAG,CAChB,IAAA,0BAAa,EAAC;YACV,MAAM,EAAE,6BAAiB,CAAC,cAAc;YACxC,GAAG,EAAE,KAAK;SACb,CAAC,EACF,IAAI,EACJ,OAAO,CACV,CAAC;IACN,CAAC;IAED,KAAK,CAAC,QAAQ,CAAC,KAAa;QACxB,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,GAAG,CACjC,IAAA,0BAAa,EAAC;YACV,MAAM,EAAE,6BAAiB,CAAC,cAAc;YACxC,GAAG,EAAE,KAAK;SACb,CAAC,CACL,CAAC;QAEF,OAAO,CAAC,QAAQ,CAAC;IACrB,CAAC;IAED,wDAAwD;IAExD;;;;;OAKG;IACO,KAAK,CAAC,iBAAiB,CAC7B,KAAa,EACb,IAAwB;QAExB,MAAM,OAAO,GAAqB;YAC9B,GAAG,EAAE,IAAI,CAAC,2BAA2B,CAAC,IAAI,CAAC,GAAG,CAAC;SAClD,CAAC;QAEF,MAAM,IAAI,CAAC,KAAK,CAAC,GAAG,CAChB,IAAA,0BAAa,EAAC,EAAE,MAAM,EAAE,6BAAiB,CAAC,YAAY,EAAE,GAAG,EAAE,KAAK,EAAE,CAAC,EACrE,IAAI,EACJ,OAAO,CACV,CAAC;IACN,CAAC;IAED;;;;OAIG;IACO,KAAK,CAAC,mBAAmB,CAC/B,GAAW;QAEX,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CACjB,IAAA,0BAAa,EAAC,EAAE,MAAM,EAAE,6BAAiB,CAAC,YAAY,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,CACtE,CAAC;IACN,CAAC;IAED,wDAAwD;IAExD;;;OAGG;IACO,2BAA2B,CAAC,GAAW;QAC7C,MAAM,GAAG,GAAG,CAAC,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAEtC,OAAO,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;IAC7B,CAAC;CACJ;AAzJD,gDAyJC"}

package/dist/http/oauth2/token/sub.d.ts

@@ -1,6 +1,6 @@
 import { OAuth2SubKind } from '@authup/kit';
-import type { RobotEntity, UserEntity } from '../../../domains';
-import { ClientEntity } from '../../../domains';
+import type { RobotEntity, UserEntity } from '../../../database/domains';
+import { ClientEntity } from '../../../database/domains';
 export type OAuth2SubEntity<T extends `${OAuth2SubKind}` | OAuth2SubKind> = T extends `${OAuth2SubKind.USER}` | OAuth2SubKind.USER ? UserEntity : T extends `${OAuth2SubKind.ROBOT}` | OAuth2SubKind.ROBOT ? RobotEntity : T extends `${OAuth2SubKind.CLIENT}` | OAuth2SubKind.CLIENT ? ClientEntity : never;
 /**
  *

package/dist/http/oauth2/token/sub.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sub.d.ts","sourceRoot":"","sources":["../../../../src/http/oauth2/token/sub.ts"],"names":[],"mappings":"AAQA,OAAO,EACH,aAAa,EAEhB,MAAM,aAAa,CAAC;AAIrB,OAAO,KAAK,EACR,WAAW,EACX,UAAU,EACb,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAEH,YAAY,EAGf,MAAM,kBAAkB,CAAC;AAG1B,MAAM,MAAM,eAAe,CAAC,CAAC,SAAS,GAAG,aAAa,EAAE,GAAG,aAAa,IACpE,CAAC,SAAS,GAAG,aAAa,CAAC,IAAI,EAAE,GAAG,aAAa,CAAC,IAAI,GAClD,UAAU,GACV,CAAC,SAAS,GAAG,aAAa,CAAC,KAAK,EAAE,GAAG,aAAa,CAAC,KAAK,GACpD,WAAW,GACX,CAAC,SAAS,GAAG,aAAa,CAAC,MAAM,EAAE,GAAG,aAAa,CAAC,MAAM,GACtD,YAAY,GACZ,KAAK,CAAC;AAEtB;;;;;;;;GAQG;AACH,wBAAsB,mBAAmB,CAAC,CAAC,SAAS,GAAG,aAAa,EAAE,GAAG,aAAa,EAClF,IAAI,EAAE,GAAG,aAAa,EAAE,EACxB,EAAE,EAAE,MAAM,EACV,KAAK,CAAC,EAAE,MAAM,GACd,OAAO,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,CA4G9B"}
+{"version":3,"file":"sub.d.ts","sourceRoot":"","sources":["../../../../src/http/oauth2/token/sub.ts"],"names":[],"mappings":"AAQA,OAAO,EACH,aAAa,EAEhB,MAAM,aAAa,CAAC;AAIrB,OAAO,KAAK,EACR,WAAW,EACX,UAAU,EACb,MAAM,2BAA2B,CAAC;AACnC,OAAO,EAEH,YAAY,EAGf,MAAM,2BAA2B,CAAC;AAGnC,MAAM,MAAM,eAAe,CAAC,CAAC,SAAS,GAAG,aAAa,EAAE,GAAG,aAAa,IACpE,CAAC,SAAS,GAAG,aAAa,CAAC,IAAI,EAAE,GAAG,aAAa,CAAC,IAAI,GAClD,UAAU,GACV,CAAC,SAAS,GAAG,aAAa,CAAC,KAAK,EAAE,GAAG,aAAa,CAAC,KAAK,GACpD,WAAW,GACX,CAAC,SAAS,GAAG,aAAa,CAAC,MAAM,EAAE,GAAG,aAAa,CAAC,MAAM,GACtD,YAAY,GACZ,KAAK,CAAC;AAEtB;;;;;;;;GAQG;AACH,wBAAsB,mBAAmB,CAAC,CAAC,SAAS,GAAG,aAAa,EAAE,GAAG,aAAa,EAClF,IAAI,EAAE,GAAG,aAAa,EAAE,EACxB,EAAE,EAAE,MAAM,EACV,KAAK,CAAC,EAAE,MAAM,GACd,OAAO,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,CA4G9B"}