@authup/server-core 1.0.0-beta.22 → 1.0.0-beta.24

package/dist/http/oauth2/authorize/validation.js

@@ -7,84 +7,77 @@
  */
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.AuthorizeRequestValidator = void 0;
-exports.validateAuthorizeRequest = validateAuthorizeRequest;
-const kit_1 = require("@authup/kit");
-const core_kit_1 = require("@authup/core-kit");
-const http_1 = require("@ebec/http");
+const specs_1 = require("@authup/specs");
 const adapter_validator_1 = require("@validup/adapter-validator");
-const typeorm_extension_1 = require("typeorm-extension");
 const validup_1 = require("validup");
-const adapter_routup_1 = require("@validup/adapter-routup");
-const domains_1 = require("../../../database/domains");
 class AuthorizeRequestValidator extends validup_1.Container {
-    constructor() {
-        super();
-        this.mount('response_type', (0, adapter_validator_1.createValidator)((chain) => chain
-            .exists()
-            .isString()
-            .notEmpty()
-            .custom((value) => {
-            const availableResponseTypes = Object.values(kit_1.OAuth2AuthorizationResponseType);
-            const responseTypes = value.split(' ');
-            for (let i = 0; i < responseTypes.length; i++) {
-                if (availableResponseTypes.indexOf(responseTypes[i]) === -1) {
-                    throw kit_1.TokenError.responseTypeUnsupported();
+    initialize() {
+        super.initialize();
+        this.mount('response_type', (0, adapter_validator_1.createValidator)(() => {
+            const chain = (0, adapter_validator_1.createValidationChain)();
+            return chain
+                .exists()
+                .isString()
+                .notEmpty()
+                .custom((value) => {
+                const availableResponseTypes = Object.values(specs_1.OAuth2AuthorizationResponseType);
+                const responseTypes = value.split(' ');
+                for (let i = 0; i < responseTypes.length; i++) {
+                    if (availableResponseTypes.indexOf(responseTypes[i]) === -1) {
+                        throw specs_1.TokenError.responseTypeUnsupported();
+                    }
                 }
-            }
-            return true;
-        })));
-        this.mount('redirect_uri', (0, adapter_validator_1.createValidator)((chain) => chain
-            .exists()
-            .notEmpty()
-            .isURL()
-            .isLength({ min: 3, max: 2000 })));
-        this.mount('scope', (0, adapter_validator_1.createValidator)((chain) => chain
-            .exists()
-            .notEmpty()
-            .isString()
-            .isLength({ min: 3, max: 512 })));
-        this.mount('state', (0, adapter_validator_1.createValidator)((chain) => chain
-            .exists()
-            .notEmpty()
-            .isString()
-            .isLength({ min: 5, max: 2048 })
-            .optional({ nullable: true })));
-        this.mount('client_id', (0, adapter_validator_1.createValidator)((chain) => chain
-            .exists()
-            .notEmpty()
-            .isString()
-            .isUUID()));
+                return true;
+            });
+        }));
+        this.mount('redirect_uri', (0, adapter_validator_1.createValidator)(() => {
+            const chain = (0, adapter_validator_1.createValidationChain)();
+            return chain
+                .exists()
+                .notEmpty()
+                .isURL()
+                .isLength({ min: 3, max: 2000 });
+        }));
+        this.mount('scope', (0, adapter_validator_1.createValidator)(() => {
+            const chain = (0, adapter_validator_1.createValidationChain)();
+            return chain
+                .exists()
+                .notEmpty()
+                .isString()
+                .isLength({ min: 3, max: 512 });
+        }));
+        this.mount('state', { optional: true }, (0, adapter_validator_1.createValidator)(() => {
+            const chain = (0, adapter_validator_1.createValidationChain)();
+            return chain
+                .exists()
+                .notEmpty()
+                .isString()
+                .isLength({ min: 5, max: 2048 })
+                .optional({ values: 'null' });
+        }));
+        this.mount('code_challenge', { optional: true }, (0, adapter_validator_1.createValidator)(() => {
+            const chain = (0, adapter_validator_1.createValidationChain)();
+            return chain
+                .isString()
+                .isLength({ max: 256 })
+                .optional({ values: 'null' });
+        }));
+        this.mount('code_challenge_method', { optional: true }, (0, adapter_validator_1.createValidator)(() => {
+            const chain = (0, adapter_validator_1.createValidationChain)();
+            return chain
+                .isString()
+                .isIn(Object.values(specs_1.OAuth2AuthorizationCodeChallengeMethod))
+                .optional({ values: 'null' });
+        }));
+        this.mount('client_id', (0, adapter_validator_1.createValidator)(() => {
+            const chain = (0, adapter_validator_1.createValidationChain)();
+            return chain
+                .exists()
+                .notEmpty()
+                .isString()
+                .isUUID();
+        }));
     }
 }
 exports.AuthorizeRequestValidator = AuthorizeRequestValidator;
-async function validateAuthorizeRequest(req) {
-    const validator = new AuthorizeRequestValidator();
-    const validatorWrapper = new adapter_routup_1.RoutupContainerAdapter(validator);
-    const data = await validatorWrapper.run(req);
-    const dataSource = await (0, typeorm_extension_1.useDataSource)();
-    const clientRepository = dataSource.getRepository(domains_1.ClientEntity);
-    const client = await clientRepository.findOneBy({ id: data.client_id });
-    if (!client) {
-        throw new http_1.BadRequestError('The referenced client does not exist.');
-    }
-    const clientScopeRepository = dataSource.getRepository(domains_1.ClientScopeEntity);
-    const clientScopes = await clientScopeRepository.find({
-        where: {
-            client_id: data.client_id,
-        },
-        relations: {
-            scope: true,
-        },
-    });
-    const scopeNames = clientScopes.map((clientScope) => clientScope.scope.name);
-    if (data.scope) {
-        if (!(0, core_kit_1.isOAuth2ScopeAllowed)(scopeNames, data.scope)) {
-            throw new http_1.BadRequestError('The requested scope is not covered by the client scope.');
-        }
-    }
-    if (!data.scope) {
-        data.scope = scopeNames.join(' ');
-    }
-    return data;
-}
 //# sourceMappingURL=validation.js.map

package/dist/http/oauth2/authorize/validation.js.map

@@ -1 +1 @@
-{"version":3,"file":"validation.js","sourceRoot":"","sources":["../../../../src/http/oauth2/authorize/validation.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;;AAsEH,4DAqCC;AAxGD,qCAGqB;AACrB,+CAE0B;AAC1B,qCAA6C;AAC7C,kEAA6D;AAE7D,yDAAkD;AAClD,qCAAoC;AACpC,4DAAiE;AACjE,uDAA4E;AAM5E,MAAa,yBAA0B,SAAQ,mBAAoC;IAC/E;QACI,KAAK,EAAE,CAAC;QAER,IAAI,CAAC,KAAK,CAAC,eAAe,EAAE,IAAA,mCAAe,EAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK;aACvD,MAAM,EAAE;aACR,QAAQ,EAAE;aACV,QAAQ,EAAE;aACV,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE;YACd,MAAM,sBAAsB,GAAG,MAAM,CAAC,MAAM,CAAC,qCAA+B,CAAC,CAAC;YAC9E,MAAM,aAAa,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YAEvC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,aAAa,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;gBAC5C,IAAI,sBAAsB,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC;oBAC1D,MAAM,gBAAU,CAAC,uBAAuB,EAAE,CAAC;gBAC/C,CAAC;YACL,CAAC;YAED,OAAO,IAAI,CAAC;QAChB,CAAC,CAAC,CAAC,CAAC,CAAC;QAET,IAAI,CAAC,KAAK,CAAC,cAAc,EAAE,IAAA,mCAAe,EAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK;aACtD,MAAM,EAAE;aACR,QAAQ,EAAE;aACV,KAAK,EAAE;aACP,QAAQ,CAAC,EAAE,GAAG,EAAE,CAAC,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;QAEvC,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,IAAA,mCAAe,EAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK;aAC/C,MAAM,EAAE;aACR,QAAQ,EAAE;aACV,QAAQ,EAAE;aACV,QAAQ,CAAC,EAAE,GAAG,EAAE,CAAC,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC;QAEtC,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,IAAA,mCAAe,EAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK;aAC/C,MAAM,EAAE;aACR,QAAQ,EAAE;aACV,QAAQ,EAAE;aACV,QAAQ,CAAC,EAAE,GAAG,EAAE,CAAC,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC;aAC/B,QAAQ,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;QAEpC,IAAI,CAAC,KAAK,CAAC,WAAW,EAAE,IAAA,mCAAe,EAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK;aACnD,MAAM,EAAE;aACR,QAAQ,EAAE;aACV,QAAQ,EAAE;aACV,MAAM,EAAE,CAAC,CAAC,CAAC;IACpB,CAAC;CACJ;AA9CD,8DA8CC;AAEM,KAAK,UAAU,wBAAwB,CAC1C,GAAY;IAEZ,MAAM,SAAS,GAAG,IAAI,yBAAyB,EAAE,CAAC;IAClD,MAAM,gBAAgB,GAAG,IAAI,uCAAsB,CAAC,SAAS,CAAC,CAAC;IAC/D,MAAM,IAAI,GAAG,MAAM,gBAAgB,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IAE7C,MAAM,UAAU,GAAG,MAAM,IAAA,iCAAa,GAAE,CAAC;IACzC,MAAM,gBAAgB,GAAG,UAAU,CAAC,aAAa,CAAC,sBAAY,CAAC,CAAC;IAChE,MAAM,MAAM,GAAG,MAAM,gBAAgB,CAAC,SAAS,CAAC,EAAE,EAAE,EAAE,IAAI,CAAC,SAAS,EAAE,CAAC,CAAC;IACxE,IAAI,CAAC,MAAM,EAAE,CAAC;QACV,MAAM,IAAI,sBAAe,CAAC,uCAAuC,CAAC,CAAC;IACvE,CAAC;IAED,MAAM,qBAAqB,GAAG,UAAU,CAAC,aAAa,CAAC,2BAAiB,CAAC,CAAC;IAC1E,MAAM,YAAY,GAAG,MAAM,qBAAqB,CAAC,IAAI,CAAC;QAClD,KAAK,EAAE;YACH,SAAS,EAAE,IAAI,CAAC,SAAS;SAC5B;QACD,SAAS,EAAE;YACP,KAAK,EAAE,IAAI;SACd;KACJ,CAAC,CAAC;IAEH,MAAM,UAAU,GAAG,YAAY,CAAC,GAAG,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC,WAAW,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAE7E,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;QACb,IAAI,CAAC,IAAA,+BAAoB,EAAC,UAAU,EAAE,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;YAChD,MAAM,IAAI,sBAAe,CAAC,yDAAyD,CAAC,CAAC;QACzF,CAAC;IACL,CAAC;IAED,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC;QACd,IAAI,CAAC,KAAK,GAAG,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACtC,CAAC;IAED,OAAO,IAAI,CAAC;AAChB,CAAC"}
+{"version":3,"file":"validation.js","sourceRoot":"","sources":["../../../../src/http/oauth2/authorize/validation.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;;AAGH,yCAIuB;AAEvB,kEAAoF;AACpF,qCAAoC;AAEpC,MAAa,yBAA0B,SAAQ,mBAAyC;IAC1E,UAAU;QAChB,KAAK,CAAC,UAAU,EAAE,CAAC;QAEnB,IAAI,CAAC,KAAK,CACN,eAAe,EACf,IAAA,mCAAe,EAAC,GAAG,EAAE;YACjB,MAAM,KAAK,GAAG,IAAA,yCAAqB,GAAE,CAAC;YACtC,OAAO,KAAK;iBACP,MAAM,EAAE;iBACR,QAAQ,EAAE;iBACV,QAAQ,EAAE;iBACV,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE;gBACd,MAAM,sBAAsB,GAAG,MAAM,CAAC,MAAM,CAAC,uCAA+B,CAAC,CAAC;gBAC9E,MAAM,aAAa,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;gBAEvC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,aAAa,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;oBAC5C,IAAI,sBAAsB,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC;wBAC1D,MAAM,kBAAU,CAAC,uBAAuB,EAAE,CAAC;oBAC/C,CAAC;gBACL,CAAC;gBAED,OAAO,IAAI,CAAC;YAChB,CAAC,CAAC,CAAC;QACX,CAAC,CAAC,CACL,CAAC;QAEF,IAAI,CAAC,KAAK,CACN,cAAc,EACd,IAAA,mCAAe,EAAC,GAAG,EAAE;YACjB,MAAM,KAAK,GAAG,IAAA,yCAAqB,GAAE,CAAC;YACtC,OAAO,KAAK;iBACP,MAAM,EAAE;iBACR,QAAQ,EAAE;iBACV,KAAK,EAAE;iBACP,QAAQ,CAAC,EAAE,GAAG,EAAE,CAAC,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC;QACzC,CAAC,CAAC,CACL,CAAC;QAEF,IAAI,CAAC,KAAK,CACN,OAAO,EACP,IAAA,mCAAe,EAAC,GAAG,EAAE;YACjB,MAAM,KAAK,GAAG,IAAA,yCAAqB,GAAE,CAAC;YACtC,OAAO,KAAK;iBACP,MAAM,EAAE;iBACR,QAAQ,EAAE;iBACV,QAAQ,EAAE;iBACV,QAAQ,CAAC,EAAE,GAAG,EAAE,CAAC,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,CAAC;QACxC,CAAC,CAAC,CACL,CAAC;QAEF,IAAI,CAAC,KAAK,CACN,OAAO,EACP,EAAE,QAAQ,EAAE,IAAI,EAAE,EAClB,IAAA,mCAAe,EAAC,GAAG,EAAE;YACjB,MAAM,KAAK,GAAG,IAAA,yCAAqB,GAAE,CAAC;YACtC,OAAO,KAAK;iBACP,MAAM,EAAE;iBACR,QAAQ,EAAE;iBACV,QAAQ,EAAE;iBACV,QAAQ,CAAC,EAAE,GAAG,EAAE,CAAC,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC;iBAC/B,QAAQ,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;QACtC,CAAC,CAAC,CACL,CAAC;QAEF,IAAI,CAAC,KAAK,CACN,gBAAgB,EAChB,EAAE,QAAQ,EAAE,IAAI,EAAE,EAClB,IAAA,mCAAe,EAAC,GAAG,EAAE;YACjB,MAAM,KAAK,GAAG,IAAA,yCAAqB,GAAE,CAAC;YAEtC,OAAO,KAAK;iBACP,QAAQ,EAAE;iBACV,QAAQ,CAAC,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC;iBACtB,QAAQ,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;QACtC,CAAC,CAAC,CACL,CAAC;QAEF,IAAI,CAAC,KAAK,CACN,uBAAuB,EACvB,EAAE,QAAQ,EAAE,IAAI,EAAE,EAClB,IAAA,mCAAe,EAAC,GAAG,EAAE;YACjB,MAAM,KAAK,GAAG,IAAA,yCAAqB,GAAE,CAAC;YAEtC,OAAO,KAAK;iBACP,QAAQ,EAAE;iBACV,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,8CAAsC,CAAC,CAAC;iBAC3D,QAAQ,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;QACtC,CAAC,CAAC,CACL,CAAC;QAEF,IAAI,CAAC,KAAK,CACN,WAAW,EACX,IAAA,mCAAe,EAAC,GAAG,EAAE;YACjB,MAAM,KAAK,GAAG,IAAA,yCAAqB,GAAE,CAAC;YACtC,OAAO,KAAK;iBACP,MAAM,EAAE;iBACR,QAAQ,EAAE;iBACV,QAAQ,EAAE;iBACV,MAAM,EAAE,CAAC;QAClB,CAAC,CAAC,CACL,CAAC;IACN,CAAC;CACJ;AAvGD,8DAuGC"}

package/dist/http/oauth2/constants.d.ts

@@ -1,4 +1,5 @@
 export declare enum OAuth2CachePrefix {
+    AUTHORIZATION_CODE = "oauth2_authorization_code",
     TOKEN_CLAIMS = "oauth2_token_claims",
     TOKEN_INACTIVE = "oauth2_token_blocked"
 }

package/dist/http/oauth2/constants.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"constants.d.ts","sourceRoot":"","sources":["../../../src/http/oauth2/constants.ts"],"names":[],"mappings":"AAOA,oBAAY,iBAAiB;IACzB,YAAY,wBAAwB;IACpC,cAAc,yBAAyB;CAC1C"}
+{"version":3,"file":"constants.d.ts","sourceRoot":"","sources":["../../../src/http/oauth2/constants.ts"],"names":[],"mappings":"AAOA,oBAAY,iBAAiB;IACzB,kBAAkB,8BAA8B;IAChD,YAAY,wBAAwB;IACpC,cAAc,yBAAyB;CAC1C"}

package/dist/http/oauth2/constants.js

@@ -9,6 +9,7 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.OAuth2CachePrefix = void 0;
 var OAuth2CachePrefix;
 (function (OAuth2CachePrefix) {
+    OAuth2CachePrefix["AUTHORIZATION_CODE"] = "oauth2_authorization_code";
     OAuth2CachePrefix["TOKEN_CLAIMS"] = "oauth2_token_claims";
     OAuth2CachePrefix["TOKEN_INACTIVE"] = "oauth2_token_blocked";
 })(OAuth2CachePrefix || (exports.OAuth2CachePrefix = OAuth2CachePrefix = {}));

package/dist/http/oauth2/constants.js.map

@@ -1 +1 @@
-{"version":3,"file":"constants.js","sourceRoot":"","sources":["../../../src/http/oauth2/constants.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;;AAEH,IAAY,iBAGX;AAHD,WAAY,iBAAiB;IACzB,yDAAoC,CAAA;IACpC,4DAAuC,CAAA;AAC3C,CAAC,EAHW,iBAAiB,iCAAjB,iBAAiB,QAG5B"}
+{"version":3,"file":"constants.js","sourceRoot":"","sources":["../../../src/http/oauth2/constants.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;;AAEH,IAAY,iBAIX;AAJD,WAAY,iBAAiB;IACzB,qEAAgD,CAAA;IAChD,yDAAoC,CAAA;IACpC,4DAAuC,CAAA;AAC3C,CAAC,EAJW,iBAAiB,iCAAjB,iBAAiB,QAI5B"}

package/dist/http/oauth2/grant-types/abstract.d.ts

@@ -1,4 +1,4 @@
-import type { OAuth2TokenPayload } from '@authup/kit';
+import type { OAuth2TokenPayload } from '@authup/specs';
 import type { Config } from '../../../config';
 import { OAuth2TokenManager } from '../token';
 import type { AccessTokenIssueContext, TokenIssueResult } from './type';

package/dist/http/oauth2/grant-types/abstract.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"abstract.d.ts","sourceRoot":"","sources":["../../../../src/http/oauth2/grant-types/abstract.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAC;AAItD,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,iBAAiB,CAAC;AAE9C,OAAO,EACH,kBAAkB,EAGrB,MAAM,UAAU,CAAC;AAClB,OAAO,KAAK,EAAE,uBAAuB,EAAE,gBAAgB,EAAE,MAAM,QAAQ,CAAC;AAExE,8BAAsB,aAAa;IAC/B,SAAS,CAAC,MAAM,EAAG,MAAM,CAAC;IAE1B,SAAS,CAAC,YAAY,EAAG,kBAAkB,CAAC;;cAY5B,gBAAgB,CAC5B,OAAO,EAAE,uBAAuB,GAChC,OAAO,CAAC,gBAAgB,CAAC;cAgBb,iBAAiB,CAC7B,WAAW,EAAE,kBAAkB,GAC/B,OAAO,CAAC,gBAAgB,CAAC;CAgChC"}
+{"version":3,"file":"abstract.d.ts","sourceRoot":"","sources":["../../../../src/http/oauth2/grant-types/abstract.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,eAAe,CAAC;AAIxD,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,iBAAiB,CAAC;AAE9C,OAAO,EACH,kBAAkB,EAGrB,MAAM,UAAU,CAAC;AAClB,OAAO,KAAK,EAAE,uBAAuB,EAAE,gBAAgB,EAAE,MAAM,QAAQ,CAAC;AAExE,8BAAsB,aAAa;IAC/B,SAAS,CAAC,MAAM,EAAG,MAAM,CAAC;IAE1B,SAAS,CAAC,YAAY,EAAG,kBAAkB,CAAC;;cAY5B,gBAAgB,CAC5B,OAAO,EAAE,uBAAuB,GAChC,OAAO,CAAC,gBAAgB,CAAC;cAgBb,iBAAiB,CAC7B,WAAW,EAAE,kBAAkB,GAC/B,OAAO,CAAC,gBAAgB,CAAC;CAgChC"}

package/dist/http/oauth2/grant-types/abstract.js

@@ -7,7 +7,7 @@
  */
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.AbstractGrant = void 0;
-const kit_1 = require("@authup/kit");
+const specs_1 = require("@authup/specs");
 const typeorm_extension_1 = require("typeorm-extension");
 const domains_1 = require("../../../database/domains");
 const config_1 = require("../../../config");
@@ -42,8 +42,8 @@ class AbstractGrant {
             scope: accessToken.scope,
             access_token: accessToken.jti,
             realm_id: accessToken.realm_id,
-            ...(accessToken.sub_kind === kit_1.OAuth2SubKind.USER ? { user_id: accessToken.sub } : {}),
-            ...(accessToken.sub_kind === kit_1.OAuth2SubKind.ROBOT ? { robot_id: accessToken.sub } : {}),
+            ...(accessToken.sub_kind === specs_1.OAuth2SubKind.USER ? { user_id: accessToken.sub } : {}),
+            ...(accessToken.sub_kind === specs_1.OAuth2SubKind.ROBOT ? { robot_id: accessToken.sub } : {}),
         });
         await repository.insert(entity);
         const payload = (0, token_1.buildOAuth2RefreshTokenPayload)({

package/dist/http/oauth2/grant-types/abstract.js.map

@@ -1 +1 @@
-{"version":3,"file":"abstract.js","sourceRoot":"","sources":["../../../../src/http/oauth2/grant-types/abstract.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;;AAGH,qCAA4C;AAC5C,yDAAkD;AAClD,uDAAqE;AAErE,4CAA4C;AAC5C,oCAIkB;AAGlB,MAAsB,aAAa;IAK/B,wDAAwD;IAExD;QACI,IAAI,CAAC,MAAM,GAAG,IAAA,kBAAS,GAAE,CAAC;QAE1B,IAAI,CAAC,YAAY,GAAG,IAAI,0BAAkB,EAAE,CAAC;IACjD,CAAC;IAED,wDAAwD;IAE9C,KAAK,CAAC,gBAAgB,CAC5B,OAAgC;QAEhC,MAAM,GAAG,GAAG,IAAA,qCAA6B,EAAC;YACtC,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,SAAS;YAC7B,OAAO,EAAE,OAAO,CAAC,OAAO;YACxB,SAAS,EAAE,OAAO,CAAC,SAAS;YAC5B,GAAG,EAAE,OAAO,CAAC,GAAG;YAChB,OAAO,EAAE,OAAO,CAAC,OAAO;YACxB,aAAa,EAAE,OAAO,CAAC,aAAa;YACpC,KAAK,EAAE,OAAO,CAAC,KAAK;YACpB,QAAQ,EAAE,OAAO,CAAC,QAAQ;YAC1B,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,iBAAiB;SACxC,CAAC,CAAC;QAEH,OAAO,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACvC,CAAC;IAES,KAAK,CAAC,iBAAiB,CAC7B,WAA+B;QAE/B,MAAM,UAAU,GAAG,MAAM,IAAA,iCAAa,GAAE,CAAC;QACzC,MAAM,UAAU,GAAG,UAAU,CAAC,aAAa,CAAC,kCAAwB,CAAC,CAAC;QAEtE,MAAM,MAAM,GAAG,UAAU,CAAC,MAAM,CAAC;YAC7B,SAAS,EAAE,WAAW,CAAC,SAAS;YAChC,OAAO,EAAE,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,IAAI,GAAG,IAAI,CAAC,MAAM,CAAC,kBAAkB,CAAC,CAAC,CAAC,WAAW,EAAE;YACrF,KAAK,EAAE,WAAW,CAAC,KAAK;YACxB,YAAY,EAAE,WAAW,CAAC,GAAG;YAC7B,QAAQ,EAAE,WAAW,CAAC,QAAQ;YAC9B,GAAG,CAAC,WAAW,CAAC,QAAQ,KAAK,mBAAa,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,WAAW,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACpF,GAAG,CAAC,WAAW,CAAC,QAAQ,KAAK,mBAAa,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,WAAW,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACzF,CAAC,CAAC;QAEH,MAAM,UAAU,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QAEhC,MAAM,OAAO,GAAG,IAAA,sCAA8B,EAAC;YAC3C,MAAM,EAAE,WAAW,CAAC,GAAG;YACvB,aAAa,EAAE,WAAW,CAAC,cAAc;YACzC,GAAG,EAAE,WAAW,CAAC,GAAG;YACpB,OAAO,EAAE,WAAW,CAAC,QAAQ;YAC7B,QAAQ,EAAE,WAAW,CAAC,SAAS;YAC/B,OAAO,EAAE,WAAW,CAAC,QAAQ;YAC7B,SAAS,EAAE,WAAW,CAAC,UAAU;YACjC,KAAK,EAAE,WAAW,CAAC,KAAK;YACxB,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,kBAAkB;SACzC,CAAC,CAAC;QAEH,OAAO,CAAC,GAAG,GAAG,MAAM,CAAC,EAAE,CAAC;QAExB,OAAO,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAC3C,CAAC;CACJ;AAnED,sCAmEC"}
+{"version":3,"file":"abstract.js","sourceRoot":"","sources":["../../../../src/http/oauth2/grant-types/abstract.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;;AAGH,yCAA8C;AAC9C,yDAAkD;AAClD,uDAAqE;AAErE,4CAA4C;AAC5C,oCAIkB;AAGlB,MAAsB,aAAa;IAK/B,wDAAwD;IAExD;QACI,IAAI,CAAC,MAAM,GAAG,IAAA,kBAAS,GAAE,CAAC;QAE1B,IAAI,CAAC,YAAY,GAAG,IAAI,0BAAkB,EAAE,CAAC;IACjD,CAAC;IAED,wDAAwD;IAE9C,KAAK,CAAC,gBAAgB,CAC5B,OAAgC;QAEhC,MAAM,GAAG,GAAG,IAAA,qCAA6B,EAAC;YACtC,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,SAAS;YAC7B,OAAO,EAAE,OAAO,CAAC,OAAO;YACxB,SAAS,EAAE,OAAO,CAAC,SAAS;YAC5B,GAAG,EAAE,OAAO,CAAC,GAAG;YAChB,OAAO,EAAE,OAAO,CAAC,OAAO;YACxB,aAAa,EAAE,OAAO,CAAC,aAAa;YACpC,KAAK,EAAE,OAAO,CAAC,KAAK;YACpB,QAAQ,EAAE,OAAO,CAAC,QAAQ;YAC1B,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,iBAAiB;SACxC,CAAC,CAAC;QAEH,OAAO,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACvC,CAAC;IAES,KAAK,CAAC,iBAAiB,CAC7B,WAA+B;QAE/B,MAAM,UAAU,GAAG,MAAM,IAAA,iCAAa,GAAE,CAAC;QACzC,MAAM,UAAU,GAAG,UAAU,CAAC,aAAa,CAAC,kCAAwB,CAAC,CAAC;QAEtE,MAAM,MAAM,GAAG,UAAU,CAAC,MAAM,CAAC;YAC7B,SAAS,EAAE,WAAW,CAAC,SAAS;YAChC,OAAO,EAAE,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,IAAI,GAAG,IAAI,CAAC,MAAM,CAAC,kBAAkB,CAAC,CAAC,CAAC,WAAW,EAAE;YACrF,KAAK,EAAE,WAAW,CAAC,KAAK;YACxB,YAAY,EAAE,WAAW,CAAC,GAAG;YAC7B,QAAQ,EAAE,WAAW,CAAC,QAAQ;YAC9B,GAAG,CAAC,WAAW,CAAC,QAAQ,KAAK,qBAAa,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,WAAW,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACpF,GAAG,CAAC,WAAW,CAAC,QAAQ,KAAK,qBAAa,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,WAAW,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACzF,CAAC,CAAC;QAEH,MAAM,UAAU,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QAEhC,MAAM,OAAO,GAAG,IAAA,sCAA8B,EAAC;YAC3C,MAAM,EAAE,WAAW,CAAC,GAAG;YACvB,aAAa,EAAE,WAAW,CAAC,cAAc;YACzC,GAAG,EAAE,WAAW,CAAC,GAAG;YACpB,OAAO,EAAE,WAAW,CAAC,QAAQ;YAC7B,QAAQ,EAAE,WAAW,CAAC,SAAS;YAC/B,OAAO,EAAE,WAAW,CAAC,QAAQ;YAC7B,SAAS,EAAE,WAAW,CAAC,UAAU;YACjC,KAAK,EAAE,WAAW,CAAC,KAAK;YACxB,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,kBAAkB;SACzC,CAAC,CAAC;QAEH,OAAO,CAAC,GAAG,GAAG,MAAM,CAAC,EAAE,CAAC;QAExB,OAAO,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAC3C,CAAC;CACJ;AAnED,sCAmEC"}

package/dist/http/oauth2/grant-types/authorize.d.ts

@@ -1,12 +1,16 @@
-import type { OAuth2TokenGrantResponse } from '@authup/kit';
+import type { OAuth2TokenGrantResponse } from '@authup/specs';
+import type { OAuth2AuthorizationCode } from '@authup/core-kit';
 import type { Request } from 'routup';
-import { OAuth2AuthorizationCodeEntity } from '../../../database/domains';
+import { OAuth2AuthorizationCodeRepository } from '../authorize/repository';
 import { AbstractGrant } from './abstract';
 import type { Grant } from './type';
 export declare class AuthorizeGrantType extends AbstractGrant implements Grant {
+    protected codeRepository: OAuth2AuthorizationCodeRepository;
+    constructor();
     run(request: Request): Promise<OAuth2TokenGrantResponse>;
-    validate(request: Request): Promise<OAuth2AuthorizationCodeEntity>;
-    protected getAuthorizationCode(request: Request): string;
-    protected getRedirectURI(request: Request): string;
+    validate(request: Request): Promise<OAuth2AuthorizationCode>;
+    protected extractRedirectURIParam(request: Request): string;
+    protected extractCodeParam(request: Request): string;
+    protected extractParam(req: Request, key: string): string | undefined;
 }
 //# sourceMappingURL=authorize.d.ts.map

package/dist/http/oauth2/grant-types/authorize.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"authorize.d.ts","sourceRoot":"","sources":["../../../../src/http/oauth2/grant-types/authorize.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,aAAa,CAAC;AAU5D,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,QAAQ,CAAC;AAEtC,OAAO,EAAE,6BAA6B,EAAE,MAAM,2BAA2B,CAAC;AAC1E,OAAO,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAC3C,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,QAAQ,CAAC;AAIpC,qBAAa,kBAAmB,SAAQ,aAAc,YAAW,KAAK;IAC5D,GAAG,CAAC,OAAO,EAAE,OAAO,GAAI,OAAO,CAAC,wBAAwB,CAAC;IAmCzD,QAAQ,CAAC,OAAO,EAAE,OAAO,GAAI,OAAO,CAAC,6BAA6B,CAAC;IA8BzE,SAAS,CAAC,oBAAoB,CAAC,OAAO,EAAE,OAAO,GAAI,MAAM;IAczD,SAAS,CAAC,cAAc,CAAC,OAAO,EAAE,OAAO,GAAI,MAAM;CAatD"}
+{"version":3,"file":"authorize.d.ts","sourceRoot":"","sources":["../../../../src/http/oauth2/grant-types/authorize.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,eAAe,CAAC;AAM9D,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,kBAAkB,CAAC;AAMhE,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,QAAQ,CAAC;AAGtC,OAAO,EAAE,iCAAiC,EAAE,MAAM,yBAAyB,CAAC;AAC5E,OAAO,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAC3C,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,QAAQ,CAAC;AAIpC,qBAAa,kBAAmB,SAAQ,aAAc,YAAW,KAAK;IAClE,SAAS,CAAC,cAAc,EAAG,iCAAiC,CAAC;;IAOvD,GAAG,CAAC,OAAO,EAAE,OAAO,GAAI,OAAO,CAAC,wBAAwB,CAAC;IAmCzD,QAAQ,CAAC,OAAO,EAAE,OAAO,GAAI,OAAO,CAAC,uBAAuB,CAAC;IAiCnE,SAAS,CAAC,uBAAuB,CAAC,OAAO,EAAE,OAAO,GAAI,MAAM;IAS5D,SAAS,CAAC,gBAAgB,CAAC,OAAO,EAAE,OAAO,GAAI,MAAM;IASrD,SAAS,CAAC,YAAY,CAAC,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,GAAI,MAAM,GAAG,SAAS;CAezE"}

package/dist/http/oauth2/grant-types/authorize.js

@@ -7,24 +7,28 @@
  */
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.AuthorizeGrantType = void 0;
-const kit_1 = require("@authup/kit");
+const specs_1 = require("@authup/specs");
 const core_kit_1 = require("@authup/core-kit");
 const body_1 = require("@routup/basic/body");
 const query_1 = require("@routup/basic/query");
-const typeorm_extension_1 = require("typeorm-extension");
 const routup_1 = require("routup");
-const domains_1 = require("../../../database/domains");
+const authorize_1 = require("../authorize");
+const repository_1 = require("../authorize/repository");
 const abstract_1 = require("./abstract");
 const response_1 = require("../response");
 class AuthorizeGrantType extends abstract_1.AbstractGrant {
+    constructor() {
+        super();
+        this.codeRepository = new repository_1.OAuth2AuthorizationCodeRepository();
+    }
     async run(request) {
         const authorizationCode = await this.validate(request);
         const { payload: accessTokenPayload, token: accessToken, } = await this.issueAccessToken({
             remoteAddress: (0, routup_1.getRequestIP)(request, { trustProxy: true }),
             sub: authorizationCode.user_id,
-            subKind: kit_1.OAuth2SubKind.USER,
-            realmId: authorizationCode.realm.id,
-            realmName: authorizationCode.realm.name,
+            subKind: specs_1.OAuth2SubKind.USER,
+            realmId: authorizationCode.realm_id,
+            realmName: authorizationCode.realm_name,
             scope: authorizationCode.scope,
             clientId: authorizationCode.client_id,
         });
@@ -41,46 +45,57 @@ class AuthorizeGrantType extends abstract_1.AbstractGrant {
         return (0, response_1.buildOAuth2BearerTokenResponse)(buildContext);
     }
     async validate(request) {
-        const code = this.getAuthorizationCode(request);
-        const dataSource = await (0, typeorm_extension_1.useDataSource)();
-        const repository = dataSource.getRepository(domains_1.OAuth2AuthorizationCodeEntity);
-        const entity = await repository.findOne({
-            where: {
-                content: code,
-            },
-            relations: ['user', 'realm'],
-        });
+        const code = this.extractCodeParam(request);
+        const entity = await this.codeRepository.get(code);
         if (!entity) {
-            throw kit_1.TokenError.grantInvalid();
+            throw specs_1.TokenError.grantInvalid();
         }
         if (entity.redirect_uri) {
-            const redirectUri = this.getRedirectURI(request);
+            const redirectUri = this.extractRedirectURIParam(request);
             if (!redirectUri || entity.redirect_uri !== redirectUri) {
-                throw kit_1.TokenError.redirectUriMismatch();
+                throw specs_1.TokenError.redirectUriMismatch();
+            }
+        }
+        if (entity.code_challenge) {
+            const codeVerifier = this.extractParam(request, 'code_verifier');
+            if (entity.code_challenge_method === specs_1.OAuth2AuthorizationCodeChallengeMethod.PLAIN) {
+                if (codeVerifier !== entity.code_challenge) {
+                    throw specs_1.TokenError.grantInvalid('PKCE code_verifier mismatch.');
+                }
+            }
+            else {
+                const codeVerifierHash = await (0, authorize_1.buildOAuth2CodeChallenge)(codeVerifier);
+                if (codeVerifierHash !== entity.code_challenge) {
+                    throw specs_1.TokenError.grantInvalid('PKCE code_verifier mismatch.');
+                }
             }
         }
-        await repository.remove(entity);
         return entity;
     }
-    getAuthorizationCode(request) {
-        let code = (0, body_1.useRequestBody)(request, 'code');
-        if (!code) {
-            code = (0, query_1.useRequestQuery)(request, 'code');
+    extractRedirectURIParam(request) {
+        const redirectUri = this.extractParam(request, 'redirect_uri');
+        if (!redirectUri) {
+            throw specs_1.TokenError.redirectUriMismatch();
         }
-        if (!code || typeof code !== 'string') {
-            throw kit_1.TokenError.requestInvalid();
+        return redirectUri;
+    }
+    extractCodeParam(request) {
+        const code = this.extractParam(request, 'code');
+        if (!code) {
+            throw specs_1.TokenError.requestInvalid();
         }
         return code;
     }
-    getRedirectURI(request) {
-        let redirectUri = (0, body_1.useRequestBody)(request, 'redirect_uri');
-        if (!redirectUri) {
-            redirectUri = (0, query_1.useRequestQuery)(request, 'redirect_uri');
+    extractParam(req, key) {
+        let value = (0, body_1.useRequestBody)(req, key);
+        if (!value) {
+            value = (0, query_1.useRequestQuery)(req, key);
         }
-        if (!redirectUri || typeof redirectUri !== 'string') {
-            throw kit_1.TokenError.redirectUriMismatch();
+        if (typeof value === 'string' &&
+            value.length > 0) {
+            return value;
         }
-        return redirectUri;
+        return undefined;
     }
 }
 exports.AuthorizeGrantType = AuthorizeGrantType;

package/dist/http/oauth2/grant-types/authorize.js.map

@@ -1 +1 @@
-{"version":3,"file":"authorize.js","sourceRoot":"","sources":["../../../../src/http/oauth2/grant-types/authorize.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;;AAGH,qCAEqB;AACrB,+CAE0B;AAC1B,6CAAoD;AACpD,+CAAsD;AACtD,yDAAkD;AAElD,mCAAsC;AACtC,uDAA0E;AAC1E,yCAA2C;AAG3C,0CAA6D;AAE7D,MAAa,kBAAmB,SAAQ,wBAAa;IACjD,KAAK,CAAC,GAAG,CAAC,OAAgB;QACtB,MAAM,iBAAiB,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;QAEvD,MAAM,EACF,OAAO,EAAE,kBAAkB,EAC3B,KAAK,EAAE,WAAW,GACrB,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAAC;YAC5B,aAAa,EAAE,IAAA,qBAAY,EAAC,OAAO,EAAE,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC;YAC1D,GAAG,EAAE,iBAAiB,CAAC,OAAO;YAC9B,OAAO,EAAE,mBAAa,CAAC,IAAI;YAC3B,OAAO,EAAE,iBAAiB,CAAC,KAAK,CAAC,EAAE;YACnC,SAAS,EAAE,iBAAiB,CAAC,KAAK,CAAC,IAAI;YACvC,KAAK,EAAE,iBAAiB,CAAC,KAAK;YAC9B,QAAQ,EAAE,iBAAiB,CAAC,SAAS;SACxC,CAAC,CAAC;QAEH,MAAM,EACF,KAAK,EAAE,YAAY,EACnB,OAAO,EAAE,mBAAmB,GAC/B,GAAG,MAAM,IAAI,CAAC,iBAAiB,CAAC,kBAAkB,CAAC,CAAC;QAErD,MAAM,YAAY,GAAsC;YACpD,WAAW;YACX,kBAAkB;YAClB,YAAY;YACZ,mBAAmB;SACtB,CAAC;QAEF,IAAI,IAAA,+BAAoB,EAAC,iBAAiB,CAAC,KAAK,CAAC,EAAE,CAAC;YAChD,YAAY,CAAC,OAAO,GAAG,iBAAiB,CAAC,QAAQ,CAAC;QACtD,CAAC;QAED,OAAO,IAAA,yCAA8B,EAAC,YAAY,CAAC,CAAC;IACxD,CAAC;IAED,KAAK,CAAC,QAAQ,CAAC,OAAgB;QAC3B,MAAM,IAAI,GAAG,IAAI,CAAC,oBAAoB,CAAC,OAAO,CAAC,CAAC;QAEhD,MAAM,UAAU,GAAG,MAAM,IAAA,iCAAa,GAAE,CAAC;QACzC,MAAM,UAAU,GAAG,UAAU,CAAC,aAAa,CAAC,uCAA6B,CAAC,CAAC;QAE3E,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,OAAO,CAAC;YACpC,KAAK,EAAE;gBACH,OAAO,EAAE,IAAI;aAChB;YACD,SAAS,EAAE,CAAC,MAAM,EAAE,OAAO,CAAC;SAC/B,CAAC,CAAC;QAEH,IAAI,CAAC,MAAM,EAAE,CAAC;YACV,MAAM,gBAAU,CAAC,YAAY,EAAE,CAAC;QACpC,CAAC;QAED,IAAI,MAAM,CAAC,YAAY,EAAE,CAAC;YACtB,MAAM,WAAW,GAAG,IAAI,CAAC,cAAc,CAAC,OAAO,CAAC,CAAC;YAEjD,IAAI,CAAC,WAAW,IAAI,MAAM,CAAC,YAAY,KAAK,WAAW,EAAE,CAAC;gBACtD,MAAM,gBAAU,CAAC,mBAAmB,EAAE,CAAC;YAC3C,CAAC;QACL,CAAC;QAED,MAAM,UAAU,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QAEhC,OAAO,MAAM,CAAC;IAClB,CAAC;IAES,oBAAoB,CAAC,OAAgB;QAC3C,IAAI,IAAI,GAAG,IAAA,qBAAc,EAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QAE3C,IAAI,CAAC,IAAI,EAAE,CAAC;YACR,IAAI,GAAG,IAAA,uBAAe,EAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QAC5C,CAAC;QAED,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;YACpC,MAAM,gBAAU,CAAC,cAAc,EAAE,CAAC;QACtC,CAAC;QAED,OAAO,IAAI,CAAC;IAChB,CAAC;IAES,cAAc,CAAC,OAAgB;QACrC,IAAI,WAAW,GAAG,IAAA,qBAAc,EAAC,OAAO,EAAE,cAAc,CAAC,CAAC;QAE1D,IAAI,CAAC,WAAW,EAAE,CAAC;YACf,WAAW,GAAG,IAAA,uBAAe,EAAC,OAAO,EAAE,cAAc,CAAC,CAAC;QAC3D,CAAC;QAED,IAAI,CAAC,WAAW,IAAI,OAAO,WAAW,KAAK,QAAQ,EAAE,CAAC;YAClD,MAAM,gBAAU,CAAC,mBAAmB,EAAE,CAAC;QAC3C,CAAC;QAED,OAAO,WAAW,CAAC;IACvB,CAAC;CACJ;AA7FD,gDA6FC"}
+{"version":3,"file":"authorize.js","sourceRoot":"","sources":["../../../../src/http/oauth2/grant-types/authorize.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;;AAGH,yCAIuB;AAEvB,+CAE0B;AAC1B,6CAAoD;AACpD,+CAAsD;AAEtD,mCAAsC;AACtC,4CAAwD;AACxD,wDAA4E;AAC5E,yCAA2C;AAG3C,0CAA6D;AAE7D,MAAa,kBAAmB,SAAQ,wBAAa;IAGjD;QACI,KAAK,EAAE,CAAC;QACR,IAAI,CAAC,cAAc,GAAG,IAAI,8CAAiC,EAAE,CAAC;IAClE,CAAC;IAED,KAAK,CAAC,GAAG,CAAC,OAAgB;QACtB,MAAM,iBAAiB,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;QAEvD,MAAM,EACF,OAAO,EAAE,kBAAkB,EAC3B,KAAK,EAAE,WAAW,GACrB,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAAC;YAC5B,aAAa,EAAE,IAAA,qBAAY,EAAC,OAAO,EAAE,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC;YAC1D,GAAG,EAAE,iBAAiB,CAAC,OAAO;YAC9B,OAAO,EAAE,qBAAa,CAAC,IAAI;YAC3B,OAAO,EAAE,iBAAiB,CAAC,QAAQ;YACnC,SAAS,EAAE,iBAAiB,CAAC,UAAU;YACvC,KAAK,EAAE,iBAAiB,CAAC,KAAK;YAC9B,QAAQ,EAAE,iBAAiB,CAAC,SAAS;SACxC,CAAC,CAAC;QAEH,MAAM,EACF,KAAK,EAAE,YAAY,EACnB,OAAO,EAAE,mBAAmB,GAC/B,GAAG,MAAM,IAAI,CAAC,iBAAiB,CAAC,kBAAkB,CAAC,CAAC;QAErD,MAAM,YAAY,GAAsC;YACpD,WAAW;YACX,kBAAkB;YAClB,YAAY;YACZ,mBAAmB;SACtB,CAAC;QAEF,IAAI,IAAA,+BAAoB,EAAC,iBAAiB,CAAC,KAAK,CAAC,EAAE,CAAC;YAChD,YAAY,CAAC,OAAO,GAAG,iBAAiB,CAAC,QAAQ,CAAC;QACtD,CAAC;QAED,OAAO,IAAA,yCAA8B,EAAC,YAAY,CAAC,CAAC;IACxD,CAAC;IAED,KAAK,CAAC,QAAQ,CAAC,OAAgB;QAC3B,MAAM,IAAI,GAAG,IAAI,CAAC,gBAAgB,CAAC,OAAO,CAAC,CAAC;QAE5C,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACnD,IAAI,CAAC,MAAM,EAAE,CAAC;YACV,MAAM,kBAAU,CAAC,YAAY,EAAE,CAAC;QACpC,CAAC;QAED,IAAI,MAAM,CAAC,YAAY,EAAE,CAAC;YACtB,MAAM,WAAW,GAAG,IAAI,CAAC,uBAAuB,CAAC,OAAO,CAAC,CAAC;YAE1D,IAAI,CAAC,WAAW,IAAI,MAAM,CAAC,YAAY,KAAK,WAAW,EAAE,CAAC;gBACtD,MAAM,kBAAU,CAAC,mBAAmB,EAAE,CAAC;YAC3C,CAAC;QACL,CAAC;QAED,IAAI,MAAM,CAAC,cAAc,EAAE,CAAC;YACxB,MAAM,YAAY,GAAG,IAAI,CAAC,YAAY,CAAC,OAAO,EAAE,eAAe,CAAC,CAAC;YACjE,IAAI,MAAM,CAAC,qBAAqB,KAAK,8CAAsC,CAAC,KAAK,EAAE,CAAC;gBAChF,IAAI,YAAY,KAAK,MAAM,CAAC,cAAc,EAAE,CAAC;oBACzC,MAAM,kBAAU,CAAC,YAAY,CAAC,8BAA8B,CAAC,CAAC;gBAClE,CAAC;YACL,CAAC;iBAAM,CAAC;gBACJ,MAAM,gBAAgB,GAAG,MAAM,IAAA,oCAAwB,EAAC,YAAY,CAAC,CAAC;gBACtE,IAAI,gBAAgB,KAAK,MAAM,CAAC,cAAc,EAAE,CAAC;oBAC7C,MAAM,kBAAU,CAAC,YAAY,CAAC,8BAA8B,CAAC,CAAC;gBAClE,CAAC;YACL,CAAC;QACL,CAAC;QAED,OAAO,MAAM,CAAC;IAClB,CAAC;IAES,uBAAuB,CAAC,OAAgB;QAC9C,MAAM,WAAW,GAAG,IAAI,CAAC,YAAY,CAAC,OAAO,EAAE,cAAc,CAAC,CAAC;QAC/D,IAAI,CAAC,WAAW,EAAE,CAAC;YACf,MAAM,kBAAU,CAAC,mBAAmB,EAAE,CAAC;QAC3C,CAAC;QAED,OAAO,WAAW,CAAC;IACvB,CAAC;IAES,gBAAgB,CAAC,OAAgB;QACvC,MAAM,IAAI,GAAG,IAAI,CAAC,YAAY,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QAChD,IAAI,CAAC,IAAI,EAAE,CAAC;YACR,MAAM,kBAAU,CAAC,cAAc,EAAE,CAAC;QACtC,CAAC;QAED,OAAO,IAAI,CAAC;IAChB,CAAC;IAES,YAAY,CAAC,GAAY,EAAE,GAAW;QAC5C,IAAI,KAAK,GAAG,IAAA,qBAAc,EAAC,GAAG,EAAE,GAAG,CAAC,CAAC;QACrC,IAAI,CAAC,KAAK,EAAE,CAAC;YACT,KAAK,GAAG,IAAA,uBAAe,EAAC,GAAG,EAAE,GAAG,CAAC,CAAC;QACtC,CAAC;QAED,IACI,OAAO,KAAK,KAAK,QAAQ;YACzB,KAAK,CAAC,MAAM,GAAG,CAAC,EAClB,CAAC;YACC,OAAO,KAAK,CAAC;QACjB,CAAC;QAED,OAAO,SAAS,CAAC;IACrB,CAAC;CACJ;AA7GD,gDA6GC"}

package/dist/http/oauth2/grant-types/client-credentials.d.ts

@@ -1,4 +1,4 @@
-import type { OAuth2TokenGrantResponse } from '@authup/kit';
+import type { OAuth2TokenGrantResponse } from '@authup/specs';
 import type { Request } from 'routup';
 import { ClientEntity } from '../../../database/domains';
 import { AbstractGrant } from './abstract';

package/dist/http/oauth2/grant-types/client-credentials.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"client-credentials.d.ts","sourceRoot":"","sources":["../../../../src/http/oauth2/grant-types/client-credentials.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,aAAa,CAAC;AAU5D,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,QAAQ,CAAC;AAGtC,OAAO,EAAE,YAAY,EAAE,MAAM,2BAA2B,CAAC;AACzD,OAAO,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAC3C,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,QAAQ,CAAC;AAGpC,qBAAa,sBAAuB,SAAQ,aAAc,YAAW,KAAK;IAChE,GAAG,CAAC,OAAO,EAAE,OAAO,GAAI,OAAO,CAAC,wBAAwB,CAAC;IA6BzD,QAAQ,CAAC,OAAO,EAAE,OAAO,GAAI,OAAO,CAAC,YAAY,CAAC;IAqBxD,SAAS,CAAC,oBAAoB,CAAC,OAAO,EAAE,OAAO,GAAI,CAAC,MAAM,EAAE,MAAM,CAAC;CAmBtE"}
+{"version":3,"file":"client-credentials.d.ts","sourceRoot":"","sources":["../../../../src/http/oauth2/grant-types/client-credentials.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,eAAe,CAAC;AAW9D,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,QAAQ,CAAC;AAGtC,OAAO,EAAE,YAAY,EAAE,MAAM,2BAA2B,CAAC;AACzD,OAAO,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAC3C,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,QAAQ,CAAC;AAGpC,qBAAa,sBAAuB,SAAQ,aAAc,YAAW,KAAK;IAChE,GAAG,CAAC,OAAO,EAAE,OAAO,GAAI,OAAO,CAAC,wBAAwB,CAAC;IA6BzD,QAAQ,CAAC,OAAO,EAAE,OAAO,GAAI,OAAO,CAAC,YAAY,CAAC;IAqBxD,SAAS,CAAC,oBAAoB,CAAC,OAAO,EAAE,OAAO,GAAI,CAAC,MAAM,EAAE,MAAM,CAAC;CAmBtE"}

package/dist/http/oauth2/grant-types/client-credentials.js

@@ -7,7 +7,7 @@
  */
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.ClientCredentialsGrant = void 0;
-const kit_1 = require("@authup/kit");
+const specs_1 = require("@authup/specs");
 const core_kit_1 = require("@authup/core-kit");
 const body_1 = require("@routup/basic/body");
 const query_1 = require("@routup/basic/query");
@@ -24,7 +24,7 @@ class ClientCredentialsGrant extends abstract_1.AbstractGrant {
             remoteAddress: (0, routup_1.getRequestIP)(request, { trustProxy: true }),
             scope: core_kit_1.ScopeName.GLOBAL,
             sub: client.id,
-            subKind: kit_1.OAuth2SubKind.CLIENT,
+            subKind: specs_1.OAuth2SubKind.CLIENT,
             realmId: client.realm.id,
             realmName: client.realm.name,
             clientId: client.id,
@@ -60,7 +60,7 @@ class ClientCredentialsGrant extends abstract_1.AbstractGrant {
             const { authorization: headerValue } = request.headers;
             const header = (0, hapic_1.parseAuthorizationHeader)(headerValue);
             if (header.type !== hapic_1.AuthorizationHeaderType.BASIC) {
-                throw kit_1.TokenError.requestInvalid();
+                throw specs_1.TokenError.requestInvalid();
             }
             clientId = header.username;
             clientSecret = header.password;

package/dist/http/oauth2/grant-types/client-credentials.js.map

@@ -1 +1 @@
-{"version":3,"file":"client-credentials.js","sourceRoot":"","sources":["../../../../src/http/oauth2/grant-types/client-credentials.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;;AAGH,qCAEqB;AACrB,+CAE0B;AAC1B,6CAAoD;AACpD,+CAAsD;AACtD,iCAA0E;AAE1E,mCAAsC;AACtC,yDAAkD;AAClD,uDAAyD;AACzD,yCAA2C;AAE3C,0CAA6D;AAE7D,MAAa,sBAAuB,SAAQ,wBAAa;IACrD,KAAK,CAAC,GAAG,CAAC,OAAgB;QACtB,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;QAE5C,MAAM,EACF,KAAK,EAAE,WAAW,EAClB,OAAO,EAAE,kBAAkB,GAC9B,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAAC;YAC5B,aAAa,EAAE,IAAA,qBAAY,EAAC,OAAO,EAAE,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC;YAC1D,KAAK,EAAE,oBAAS,CAAC,MAAM;YACvB,GAAG,EAAE,MAAM,CAAC,EAAE;YACd,OAAO,EAAE,mBAAa,CAAC,MAAM;YAC7B,OAAO,EAAE,MAAM,CAAC,KAAK,CAAC,EAAE;YACxB,SAAS,EAAE,MAAM,CAAC,KAAK,CAAC,IAAI;YAC5B,QAAQ,EAAE,MAAM,CAAC,EAAE;SACtB,CAAC,CAAC;QAEH,MAAM,EACF,KAAK,EAAE,YAAY,EACnB,OAAO,EAAE,mBAAmB,GAC/B,GAAG,MAAM,IAAI,CAAC,iBAAiB,CAAC,kBAAkB,CAAC,CAAC;QAErD,OAAO,IAAA,yCAA8B,EAAC;YAClC,WAAW;YACX,kBAAkB;YAClB,YAAY;YACZ,mBAAmB;SACtB,CAAC,CAAC;IACP,CAAC;IAED,KAAK,CAAC,QAAQ,CAAC,OAAgB;QAC3B,MAAM,CAAC,EAAE,EAAE,MAAM,CAAC,GAAG,IAAI,CAAC,oBAAoB,CAAC,OAAO,CAAC,CAAC;QAExD,MAAM,UAAU,GAAG,MAAM,IAAA,iCAAa,GAAE,CAAC;QACzC,MAAM,UAAU,GAAG,UAAU,CAAC,aAAa,CAAC,sBAAY,CAAC,CAAC;QAE1D,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,OAAO,CAAC;YACpC,KAAK,EAAE;gBACH,EAAE;gBACF,MAAM;aACT;YACD,SAAS,EAAE,CAAC,OAAO,CAAC;SACvB,CAAC,CAAC;QAEH,IAAI,CAAC,MAAM,EAAE,CAAC;YACV,MAAM,oBAAS,CAAC,kBAAkB,EAAE,CAAC;QACzC,CAAC;QAED,OAAO,MAAM,CAAC;IAClB,CAAC;IAES,oBAAoB,CAAC,OAAgB;QAC3C,IAAI,QAAQ,GAAG,IAAA,qBAAc,EAAC,OAAO,EAAE,WAAW,CAAC,IAAI,IAAA,uBAAe,EAAC,OAAO,EAAE,WAAW,CAAC,CAAC;QAC7F,IAAI,YAAY,GAAG,IAAA,qBAAc,EAAC,OAAO,EAAE,eAAe,CAAC,IAAI,IAAA,uBAAe,EAAC,OAAO,EAAE,eAAe,CAAC,CAAC;QAEzG,IAAI,CAAC,QAAQ,IAAI,CAAC,YAAY,EAAE,CAAC;YAC7B,MAAM,EAAE,aAAa,EAAE,WAAW,EAAE,GAAG,OAAO,CAAC,OAAO,CAAC;YAEvD,MAAM,MAAM,GAAG,IAAA,gCAAwB,EAAC,WAAW,CAAC,CAAC;YAErD,IAAI,MAAM,CAAC,IAAI,KAAK,+BAAuB,CAAC,KAAK,EAAE,CAAC;gBAChD,MAAM,gBAAU,CAAC,cAAc,EAAE,CAAC;YACtC,CAAC;YAED,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAC;YAC3B,YAAY,GAAG,MAAM,CAAC,QAAQ,CAAC;QACnC,CAAC;QAED,OAAO,CAAC,QAAQ,EAAE,YAAY,CAAC,CAAC;IACpC,CAAC;CACJ;AAtED,wDAsEC"}
+{"version":3,"file":"client-credentials.js","sourceRoot":"","sources":["../../../../src/http/oauth2/grant-types/client-credentials.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;;AAGH,yCAGuB;AACvB,+CAE0B;AAC1B,6CAAoD;AACpD,+CAAsD;AACtD,iCAA0E;AAE1E,mCAAsC;AACtC,yDAAkD;AAClD,uDAAyD;AACzD,yCAA2C;AAE3C,0CAA6D;AAE7D,MAAa,sBAAuB,SAAQ,wBAAa;IACrD,KAAK,CAAC,GAAG,CAAC,OAAgB;QACtB,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;QAE5C,MAAM,EACF,KAAK,EAAE,WAAW,EAClB,OAAO,EAAE,kBAAkB,GAC9B,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAAC;YAC5B,aAAa,EAAE,IAAA,qBAAY,EAAC,OAAO,EAAE,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC;YAC1D,KAAK,EAAE,oBAAS,CAAC,MAAM;YACvB,GAAG,EAAE,MAAM,CAAC,EAAE;YACd,OAAO,EAAE,qBAAa,CAAC,MAAM;YAC7B,OAAO,EAAE,MAAM,CAAC,KAAK,CAAC,EAAE;YACxB,SAAS,EAAE,MAAM,CAAC,KAAK,CAAC,IAAI;YAC5B,QAAQ,EAAE,MAAM,CAAC,EAAE;SACtB,CAAC,CAAC;QAEH,MAAM,EACF,KAAK,EAAE,YAAY,EACnB,OAAO,EAAE,mBAAmB,GAC/B,GAAG,MAAM,IAAI,CAAC,iBAAiB,CAAC,kBAAkB,CAAC,CAAC;QAErD,OAAO,IAAA,yCAA8B,EAAC;YAClC,WAAW;YACX,kBAAkB;YAClB,YAAY;YACZ,mBAAmB;SACtB,CAAC,CAAC;IACP,CAAC;IAED,KAAK,CAAC,QAAQ,CAAC,OAAgB;QAC3B,MAAM,CAAC,EAAE,EAAE,MAAM,CAAC,GAAG,IAAI,CAAC,oBAAoB,CAAC,OAAO,CAAC,CAAC;QAExD,MAAM,UAAU,GAAG,MAAM,IAAA,iCAAa,GAAE,CAAC;QACzC,MAAM,UAAU,GAAG,UAAU,CAAC,aAAa,CAAC,sBAAY,CAAC,CAAC;QAE1D,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,OAAO,CAAC;YACpC,KAAK,EAAE;gBACH,EAAE;gBACF,MAAM;aACT;YACD,SAAS,EAAE,CAAC,OAAO,CAAC;SACvB,CAAC,CAAC;QAEH,IAAI,CAAC,MAAM,EAAE,CAAC;YACV,MAAM,oBAAS,CAAC,kBAAkB,EAAE,CAAC;QACzC,CAAC;QAED,OAAO,MAAM,CAAC;IAClB,CAAC;IAES,oBAAoB,CAAC,OAAgB;QAC3C,IAAI,QAAQ,GAAG,IAAA,qBAAc,EAAC,OAAO,EAAE,WAAW,CAAC,IAAI,IAAA,uBAAe,EAAC,OAAO,EAAE,WAAW,CAAC,CAAC;QAC7F,IAAI,YAAY,GAAG,IAAA,qBAAc,EAAC,OAAO,EAAE,eAAe,CAAC,IAAI,IAAA,uBAAe,EAAC,OAAO,EAAE,eAAe,CAAC,CAAC;QAEzG,IAAI,CAAC,QAAQ,IAAI,CAAC,YAAY,EAAE,CAAC;YAC7B,MAAM,EAAE,aAAa,EAAE,WAAW,EAAE,GAAG,OAAO,CAAC,OAAO,CAAC;YAEvD,MAAM,MAAM,GAAG,IAAA,gCAAwB,EAAC,WAAW,CAAC,CAAC;YAErD,IAAI,MAAM,CAAC,IAAI,KAAK,+BAAuB,CAAC,KAAK,EAAE,CAAC;gBAChD,MAAM,kBAAU,CAAC,cAAc,EAAE,CAAC;YACtC,CAAC;YAED,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAC;YAC3B,YAAY,GAAG,MAAM,CAAC,QAAQ,CAAC;QACnC,CAAC;QAED,OAAO,CAAC,QAAQ,EAAE,YAAY,CAAC,CAAC;IACpC,CAAC;CACJ;AAtED,wDAsEC"}

package/dist/http/oauth2/grant-types/internal.d.ts

@@ -1,4 +1,4 @@
-import type { OAuth2TokenGrantResponse } from '@authup/kit';
+import type { OAuth2TokenGrantResponse } from '@authup/specs';
 import type { Request } from 'routup';
 import { AbstractGrant } from './abstract';
 import type { Grant } from './type';

package/dist/http/oauth2/grant-types/internal.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"internal.d.ts","sourceRoot":"","sources":["../../../../src/http/oauth2/grant-types/internal.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAiB,wBAAwB,EAAE,MAAM,aAAa,CAAC;AAE3E,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,QAAQ,CAAC;AAGtC,OAAO,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAC3C,OAAO,KAAK,EACR,KAAK,EACR,MAAM,QAAQ,CAAC;AAGhB,qBAAa,iBAAkB,SAAQ,aAAc,YAAW,KAAK;IAC3D,GAAG,CAAC,OAAO,EAAE,OAAO,GAAG,OAAO,CAAC,wBAAwB,CAAC;CA2BjE"}
+{"version":3,"file":"internal.d.ts","sourceRoot":"","sources":["../../../../src/http/oauth2/grant-types/internal.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAiB,wBAAwB,EAAE,MAAM,eAAe,CAAC;AAE7E,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,QAAQ,CAAC;AAGtC,OAAO,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAC3C,OAAO,KAAK,EACR,KAAK,EACR,MAAM,QAAQ,CAAC;AAGhB,qBAAa,iBAAkB,SAAQ,aAAc,YAAW,KAAK;IAC3D,GAAG,CAAC,OAAO,EAAE,OAAO,GAAG,OAAO,CAAC,wBAAwB,CAAC;CA2BjE"}

package/dist/http/oauth2/grant-types/password.d.ts

@@ -1,4 +1,4 @@
-import type { OAuth2TokenGrantResponse } from '@authup/kit';
+import type { OAuth2TokenGrantResponse } from '@authup/specs';
 import type { Request } from 'routup';
 import { UserEntity } from '../../../database/domains';
 import { AbstractGrant } from './abstract';

package/dist/http/oauth2/grant-types/password.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"password.d.ts","sourceRoot":"","sources":["../../../../src/http/oauth2/grant-types/password.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,aAAa,CAAC;AAO5D,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,QAAQ,CAAC;AAWtC,OAAO,EAEH,UAAU,EAGb,MAAM,2BAA2B,CAAC;AAMnC,OAAO,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAC3C,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,QAAQ,CAAC;AAEpC,qBAAa,iBAAkB,SAAQ,aAAc,YAAW,KAAK;IAC3D,GAAG,CAAC,OAAO,EAAE,OAAO,GAAI,OAAO,CAAC,wBAAwB,CAAC;IA4BzD,QAAQ,CAAC,OAAO,EAAE,OAAO,GAAI,OAAO,CAAC,UAAU,CAAC;cAmCtC,uBAAuB,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,GAAI,OAAO,CAAC,UAAU,CAAC;CAgElH"}
+{"version":3,"file":"password.d.ts","sourceRoot":"","sources":["../../../../src/http/oauth2/grant-types/password.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,eAAe,CAAC;AAO9D,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,QAAQ,CAAC;AAWtC,OAAO,EAEH,UAAU,EAGb,MAAM,2BAA2B,CAAC;AAMnC,OAAO,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAC3C,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,QAAQ,CAAC;AAEpC,qBAAa,iBAAkB,SAAQ,aAAc,YAAW,KAAK;IAC3D,GAAG,CAAC,OAAO,EAAE,OAAO,GAAI,OAAO,CAAC,wBAAwB,CAAC;IA4BzD,QAAQ,CAAC,OAAO,EAAE,OAAO,GAAI,OAAO,CAAC,UAAU,CAAC;cAmCtC,uBAAuB,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,GAAI,OAAO,CAAC,UAAU,CAAC;CAgElH"}

package/dist/http/oauth2/grant-types/password.js

@@ -7,7 +7,7 @@
  */
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.PasswordGrantType = void 0;
-const kit_1 = require("@authup/kit");
+const specs_1 = require("@authup/specs");
 const core_kit_1 = require("@authup/core-kit");
 const body_1 = require("@routup/basic/body");
 const routup_1 = require("routup");
@@ -24,7 +24,7 @@ class PasswordGrantType extends abstract_1.AbstractGrant {
             remoteAddress: (0, routup_1.getRequestIP)(request, { trustProxy: true }),
             scope: core_kit_1.ScopeName.GLOBAL,
             sub: user.id,
-            subKind: kit_1.OAuth2SubKind.USER,
+            subKind: specs_1.OAuth2SubKind.USER,
             realmId: user.realm.id,
             realmName: user.realm.name,
         });

package/dist/http/oauth2/grant-types/password.js.map

@@ -1 +1 @@
-{"version":3,"file":"password.js","sourceRoot":"","sources":["../../../../src/http/oauth2/grant-types/password.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;;AAGH,qCAA4C;AAE5C,+CAE0B;AAC1B,6CAAoD;AAEpD,mCAAuD;AAEvD,yDAAkD;AAQlD,uDAKmC;AACnC,8CAE0B;AAC1B,gDAAmE;AACnE,0CAA6D;AAC7D,yCAA2C;AAG3C,MAAa,iBAAkB,SAAQ,wBAAa;IAChD,KAAK,CAAC,GAAG,CAAC,OAAgB;QACtB,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;QAE1C,MAAM,EACF,KAAK,EAAE,WAAW,EAClB,OAAO,EAAE,kBAAkB,GAC9B,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAAC;YAC5B,aAAa,EAAE,IAAA,qBAAY,EAAC,OAAO,EAAE,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC;YAC1D,KAAK,EAAE,oBAAS,CAAC,MAAM;YACvB,GAAG,EAAE,IAAI,CAAC,EAAE;YACZ,OAAO,EAAE,mBAAa,CAAC,IAAI;YAC3B,OAAO,EAAE,IAAI,CAAC,KAAK,CAAC,EAAE;YACtB,SAAS,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI;SAC7B,CAAC,CAAC;QAEH,MAAM,EACF,KAAK,EAAE,YAAY,EACnB,OAAO,EAAE,mBAAmB,GAC/B,GAAG,MAAM,IAAI,CAAC,iBAAiB,CAAC,kBAAkB,CAAC,CAAC;QAErD,OAAO,IAAA,yCAA8B,EAAC;YAClC,WAAW;YACX,kBAAkB;YAClB,YAAY;YACZ,mBAAmB;SACtB,CAAC,CAAC;IACP,CAAC;IAED,KAAK,CAAC,QAAQ,CAAC,OAAgB;QAC3B,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,QAAQ,EAAE,cAAc,EAAE,GAAG,IAAA,qBAAc,EAAC,OAAO,CAAC,CAAC;QAEjF,MAAM,KAAK,GAAG,MAAM,IAAA,sBAAY,EAC5B,IAAA,wBAAe,EAAC,OAAO,EAAE,SAAS,CAAC,IAAI,cAAc,CACxD,CAAC;QAEF,MAAM,UAAU,GAAG,MAAM,IAAA,iCAAa,GAAE,CAAC;QACzC,MAAM,UAAU,GAAG,IAAI,wBAAc,CAAC,UAAU,CAAC,CAAC;QAClD,IAAI,OAA4B,CAAC;QACjC,IAAI,KAAK,IAAI,KAAK,CAAC,EAAE,EAAE,CAAC;YACpB,OAAO,GAAG,KAAK,CAAC,EAAE,CAAC;QACvB,CAAC;QAED,IAAI,MAAM,GAAG,MAAM,UAAU,CAAC,iBAAiB,CAC3C,QAAQ,EACR,QAAQ,EACR,OAAO,CACV,CAAC;QAEF,IAAI,CAAC,MAAM,EAAE,CAAC;YACV,MAAM,GAAG,MAAM,IAAI,CAAC,uBAAuB,CAAC,QAAQ,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC;QAC7E,CAAC;QAED,IAAI,CAAC,MAAM,EAAE,CAAC;YACV,MAAM,oBAAS,CAAC,kBAAkB,EAAE,CAAC;QACzC,CAAC;QAED,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC;YACjB,MAAM,oBAAS,CAAC,QAAQ,EAAE,CAAC;QAC/B,CAAC;QAED,OAAO,MAAM,CAAC;IAClB,CAAC;IAES,KAAK,CAAC,uBAAuB,CAAC,IAAY,EAAE,QAAgB,EAAE,OAAgB;QACpF,MAAM,UAAU,GAAG,MAAM,IAAA,iCAAa,GAAE,CAAC;QACzC,MAAM,UAAU,GAAG,IAAI,oCAA0B,CAAC,UAAU,CAAC,CAAC;QAE9D,MAAM,KAAK,GAA6C;YACpD,QAAQ,EAAE,mCAAwB,CAAC,IAAI;SAC1C,CAAC;QAEF,IAAI,OAAO,EAAE,CAAC;YACV,KAAK,CAAC,QAAQ,GAAG,OAAO,CAAC;QAC7B,CAAC;QAED,MAAM,QAAQ,GAAG,MAAM,UAAU,CAAC,kBAAkB,CAChD;YACI,KAAK;SACR,CACJ,CAAC;QAEF,IAAI,OAAoD,CAAC;QACzD,IAAI,OAA6C,CAAC;QAClD,IAAI,QAA8C,CAAC;QAEnD,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,QAAQ,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YACvC,MAAM,MAAM,GAAG,QAAQ,CAAC,CAAC,CAAC,CAAC;YAE3B,IAAI,MAAM,CAAC,QAAQ,KAAK,mCAAwB,CAAC,IAAI,EAAE,CAAC;gBACpD,SAAS;YACb,CAAC;YAED,MAAM,IAAI,GAAG,IAAI,kCAAwB,CAAC,MAAM,CAAC,CAAC;YAElD,IAAI,CAAC;gBACD,QAAQ,GAAG,MAAM,IAAI,CAAC,yBAAyB,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;gBAChE,MAAM,IAAI,CAAC,MAAM,EAAE,CAAC;YACxB,CAAC;YAAC,OAAO,CAAC,EAAE,CAAC;gBACT,MAAM,IAAI,CAAC,MAAM,EAAE,CAAC;gBACpB,SAAS;YACb,CAAC;YAED,OAAO,GAAG,IAAI,yCAA8B,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;YACjE,OAAO,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;YACvC,MAAM;QACV,CAAC;QAED,IAAI,CAAC,OAAO,EAAE,CAAC;YACX,OAAO,SAAS,CAAC;QACrB,CAAC;QAED,IACI,OAAO,CAAC,IAAI;YACZ,OAAO,CAAC,IAAI,CAAC,KAAK,EACpB,CAAC;YACC,OAAO,OAAO,CAAC,IAAkB,CAAC;QACtC,CAAC;QAED,MAAM,cAAc,GAAG,UAAU,CAAC,aAAa,CAAC,oBAAU,CAAC,CAAC;QAE5D,OAAO,cAAc,CAAC,OAAO,CAAC;YAC1B,KAAK,EAAE;gBACH,EAAE,EAAE,OAAO,CAAC,OAAO;aACtB;YACD,SAAS,EAAE,CAAC,OAAO,CAAC;SACvB,CAAC,CAAC;IACP,CAAC;CACJ;AAhID,8CAgIC"}
+{"version":3,"file":"password.js","sourceRoot":"","sources":["../../../../src/http/oauth2/grant-types/password.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;;AAGH,yCAA8C;AAE9C,+CAE0B;AAC1B,6CAAoD;AAEpD,mCAAuD;AAEvD,yDAAkD;AAQlD,uDAKmC;AACnC,8CAE0B;AAC1B,gDAAmE;AACnE,0CAA6D;AAC7D,yCAA2C;AAG3C,MAAa,iBAAkB,SAAQ,wBAAa;IAChD,KAAK,CAAC,GAAG,CAAC,OAAgB;QACtB,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;QAE1C,MAAM,EACF,KAAK,EAAE,WAAW,EAClB,OAAO,EAAE,kBAAkB,GAC9B,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAAC;YAC5B,aAAa,EAAE,IAAA,qBAAY,EAAC,OAAO,EAAE,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC;YAC1D,KAAK,EAAE,oBAAS,CAAC,MAAM;YACvB,GAAG,EAAE,IAAI,CAAC,EAAE;YACZ,OAAO,EAAE,qBAAa,CAAC,IAAI;YAC3B,OAAO,EAAE,IAAI,CAAC,KAAK,CAAC,EAAE;YACtB,SAAS,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI;SAC7B,CAAC,CAAC;QAEH,MAAM,EACF,KAAK,EAAE,YAAY,EACnB,OAAO,EAAE,mBAAmB,GAC/B,GAAG,MAAM,IAAI,CAAC,iBAAiB,CAAC,kBAAkB,CAAC,CAAC;QAErD,OAAO,IAAA,yCAA8B,EAAC;YAClC,WAAW;YACX,kBAAkB;YAClB,YAAY;YACZ,mBAAmB;SACtB,CAAC,CAAC;IACP,CAAC;IAED,KAAK,CAAC,QAAQ,CAAC,OAAgB;QAC3B,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,QAAQ,EAAE,cAAc,EAAE,GAAG,IAAA,qBAAc,EAAC,OAAO,CAAC,CAAC;QAEjF,MAAM,KAAK,GAAG,MAAM,IAAA,sBAAY,EAC5B,IAAA,wBAAe,EAAC,OAAO,EAAE,SAAS,CAAC,IAAI,cAAc,CACxD,CAAC;QAEF,MAAM,UAAU,GAAG,MAAM,IAAA,iCAAa,GAAE,CAAC;QACzC,MAAM,UAAU,GAAG,IAAI,wBAAc,CAAC,UAAU,CAAC,CAAC;QAClD,IAAI,OAA4B,CAAC;QACjC,IAAI,KAAK,IAAI,KAAK,CAAC,EAAE,EAAE,CAAC;YACpB,OAAO,GAAG,KAAK,CAAC,EAAE,CAAC;QACvB,CAAC;QAED,IAAI,MAAM,GAAG,MAAM,UAAU,CAAC,iBAAiB,CAC3C,QAAQ,EACR,QAAQ,EACR,OAAO,CACV,CAAC;QAEF,IAAI,CAAC,MAAM,EAAE,CAAC;YACV,MAAM,GAAG,MAAM,IAAI,CAAC,uBAAuB,CAAC,QAAQ,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC;QAC7E,CAAC;QAED,IAAI,CAAC,MAAM,EAAE,CAAC;YACV,MAAM,oBAAS,CAAC,kBAAkB,EAAE,CAAC;QACzC,CAAC;QAED,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC;YACjB,MAAM,oBAAS,CAAC,QAAQ,EAAE,CAAC;QAC/B,CAAC;QAED,OAAO,MAAM,CAAC;IAClB,CAAC;IAES,KAAK,CAAC,uBAAuB,CAAC,IAAY,EAAE,QAAgB,EAAE,OAAgB;QACpF,MAAM,UAAU,GAAG,MAAM,IAAA,iCAAa,GAAE,CAAC;QACzC,MAAM,UAAU,GAAG,IAAI,oCAA0B,CAAC,UAAU,CAAC,CAAC;QAE9D,MAAM,KAAK,GAA6C;YACpD,QAAQ,EAAE,mCAAwB,CAAC,IAAI;SAC1C,CAAC;QAEF,IAAI,OAAO,EAAE,CAAC;YACV,KAAK,CAAC,QAAQ,GAAG,OAAO,CAAC;QAC7B,CAAC;QAED,MAAM,QAAQ,GAAG,MAAM,UAAU,CAAC,kBAAkB,CAChD;YACI,KAAK;SACR,CACJ,CAAC;QAEF,IAAI,OAAoD,CAAC;QACzD,IAAI,OAA6C,CAAC;QAClD,IAAI,QAA8C,CAAC;QAEnD,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,QAAQ,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YACvC,MAAM,MAAM,GAAG,QAAQ,CAAC,CAAC,CAAC,CAAC;YAE3B,IAAI,MAAM,CAAC,QAAQ,KAAK,mCAAwB,CAAC,IAAI,EAAE,CAAC;gBACpD,SAAS;YACb,CAAC;YAED,MAAM,IAAI,GAAG,IAAI,kCAAwB,CAAC,MAAM,CAAC,CAAC;YAElD,IAAI,CAAC;gBACD,QAAQ,GAAG,MAAM,IAAI,CAAC,yBAAyB,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;gBAChE,MAAM,IAAI,CAAC,MAAM,EAAE,CAAC;YACxB,CAAC;YAAC,OAAO,CAAC,EAAE,CAAC;gBACT,MAAM,IAAI,CAAC,MAAM,EAAE,CAAC;gBACpB,SAAS;YACb,CAAC;YAED,OAAO,GAAG,IAAI,yCAA8B,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;YACjE,OAAO,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;YACvC,MAAM;QACV,CAAC;QAED,IAAI,CAAC,OAAO,EAAE,CAAC;YACX,OAAO,SAAS,CAAC;QACrB,CAAC;QAED,IACI,OAAO,CAAC,IAAI;YACZ,OAAO,CAAC,IAAI,CAAC,KAAK,EACpB,CAAC;YACC,OAAO,OAAO,CAAC,IAAkB,CAAC;QACtC,CAAC;QAED,MAAM,cAAc,GAAG,UAAU,CAAC,aAAa,CAAC,oBAAU,CAAC,CAAC;QAE5D,OAAO,cAAc,CAAC,OAAO,CAAC;YAC1B,KAAK,EAAE;gBACH,EAAE,EAAE,OAAO,CAAC,OAAO;aACtB;YACD,SAAS,EAAE,CAAC,OAAO,CAAC;SACvB,CAAC,CAAC;IACP,CAAC;CACJ;AAhID,8CAgIC"}

package/dist/http/oauth2/grant-types/refresh-token.d.ts

@@ -1,5 +1,5 @@
-import type { OAuth2TokenGrantResponse } from '@authup/kit';
-import { OAuth2SubKind } from '@authup/kit';
+import { OAuth2SubKind } from '@authup/specs';
+import type { OAuth2TokenGrantResponse } from '@authup/specs';
 import type { Request } from 'routup';
 import { OAuth2RefreshTokenEntity } from '../../../database/domains';
 import { AbstractGrant } from './abstract';

package/dist/http/oauth2/grant-types/refresh-token.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"refresh-token.d.ts","sourceRoot":"","sources":["../../../../src/http/oauth2/grant-types/refresh-token.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,aAAa,CAAC;AAC5D,OAAO,EAAE,aAAa,EAA+B,MAAM,aAAa,CAAC;AAEzE,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,QAAQ,CAAC;AAGtC,OAAO,EAAE,wBAAwB,EAAE,MAAM,2BAA2B,CAAC;AAErE,OAAO,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAC3C,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,QAAQ,CAAC;AAEpC,qBAAa,qBAAsB,SAAQ,aAAc,YAAW,KAAK;IAC/D,GAAG,CAAC,OAAO,EAAE,OAAO,GAAI,OAAO,CAAC,wBAAwB,CAAC;IA+BzD,QAAQ,CAAC,OAAO,EAAE,OAAO,GAAI,OAAO,CAAC,wBAAwB,CAAC;IA6BpE,SAAS,CAAC,UAAU,CAAC,MAAM,EAAE,wBAAwB;IAgBrD,SAAS,CAAC,cAAc,CAAC,MAAM,EAAE,wBAAwB,GAAI,aAAa;CAe7E"}
+{"version":3,"file":"refresh-token.d.ts","sourceRoot":"","sources":["../../../../src/http/oauth2/grant-types/refresh-token.ts"],"names":[],"mappings":"AAOA,OAAO,EAAE,aAAa,EAA+B,MAAM,eAAe,CAAC;AAC3E,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,eAAe,CAAC;AAE9D,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,QAAQ,CAAC;AAGtC,OAAO,EAAE,wBAAwB,EAAE,MAAM,2BAA2B,CAAC;AAErE,OAAO,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAC3C,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,QAAQ,CAAC;AAEpC,qBAAa,qBAAsB,SAAQ,aAAc,YAAW,KAAK;IAC/D,GAAG,CAAC,OAAO,EAAE,OAAO,GAAI,OAAO,CAAC,wBAAwB,CAAC;IA+BzD,QAAQ,CAAC,OAAO,EAAE,OAAO,GAAI,OAAO,CAAC,wBAAwB,CAAC;IA6BpE,SAAS,CAAC,UAAU,CAAC,MAAM,EAAE,wBAAwB;IAgBrD,SAAS,CAAC,cAAc,CAAC,MAAM,EAAE,wBAAwB,GAAI,aAAa;CAe7E"}

package/dist/http/oauth2/grant-types/refresh-token.js

@@ -7,7 +7,7 @@
  */
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.RefreshTokenGrantType = void 0;
-const kit_1 = require("@authup/kit");
+const specs_1 = require("@authup/specs");
 const body_1 = require("@routup/basic/body");
 const routup_1 = require("routup");
 const typeorm_extension_1 = require("typeorm-extension");
@@ -47,11 +47,11 @@ class RefreshTokenGrantType extends abstract_1.AbstractGrant {
             relations: ['realm'],
         });
         if (!entity) {
-            throw kit_1.TokenError.tokenNotFound(kit_1.OAuth2TokenKind.REFRESH);
+            throw specs_1.TokenError.tokenNotFound(specs_1.OAuth2TokenKind.REFRESH);
         }
         const expires = Date.parse(entity.expires);
         if (expires < Date.now()) {
-            throw kit_1.TokenError.expired(kit_1.OAuth2TokenKind.REFRESH);
+            throw specs_1.TokenError.expired(specs_1.OAuth2TokenKind.REFRESH);
         }
         await repository.remove(entity);
         await this.tokenManager.setInactive(refreshToken);
@@ -71,13 +71,13 @@ class RefreshTokenGrantType extends abstract_1.AbstractGrant {
     }
     getSubjectKind(entity) {
         if (entity.robot_id) {
-            return kit_1.OAuth2SubKind.ROBOT;
+            return specs_1.OAuth2SubKind.ROBOT;
         }
         if (entity.user_id) {
-            return kit_1.OAuth2SubKind.USER;
+            return specs_1.OAuth2SubKind.USER;
         }
         if (entity.client_id) {
-            return kit_1.OAuth2SubKind.CLIENT;
+            return specs_1.OAuth2SubKind.CLIENT;
         }
         throw new SyntaxError('The subject kind could not be extracted from the token entity.');
     }