@authup/server-core 1.0.0-beta.23 → 1.0.0-beta.24

package/dist/http/oauth2/authorize/helpers.js

@@ -0,0 +1,38 @@
+"use strict";
+/*
+ * Copyright (c) 2024.
+ * Author Peter Placzek (tada5hi)
+ * For the full copyright and license information,
+ * view the LICENSE file that was distributed with this source code.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.generateOAuth2CodeVerifier = generateOAuth2CodeVerifier;
+exports.buildOAuth2CodeChallenge = buildOAuth2CodeChallenge;
+function generateOAuth2CodeVerifier() {
+    const length = 64;
+    const charset = 'ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789-._~';
+    let codeVerifier = '';
+    const randomValues = new Uint8Array(length);
+    crypto.getRandomValues(randomValues);
+    for (let i = 0; i < length; i++) {
+        codeVerifier += charset[randomValues[i] % charset.length];
+    }
+    return codeVerifier;
+}
+function base64URLEncode(arrayBuffer) {
+    // Convert the ArrayBuffer to string using Uint8 array.
+    // btoa takes chars from 0-255 and base64 encodes.
+    // Then convert the base64 encoded to base64url encoded.
+    // (replace + with -, replace / with _, trim trailing =)
+    return btoa(String.fromCharCode.apply(null, new Uint8Array(arrayBuffer)))
+        .replace(/\+/g, '-')
+        .replace(/\//g, '_')
+        .replace(/=+$/, '');
+}
+async function buildOAuth2CodeChallenge(codeVerifier) {
+    const encoder = new TextEncoder();
+    const data = encoder.encode(codeVerifier);
+    const arrayBuffer = await crypto.subtle.digest('SHA-256', data);
+    return base64URLEncode(arrayBuffer);
+}
+//# sourceMappingURL=helpers.js.map

package/dist/http/oauth2/authorize/helpers.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"helpers.js","sourceRoot":"","sources":["../../../../src/http/oauth2/authorize/helpers.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;AAEH,gEAaC;AAaD,4DAMC;AAhCD,SAAgB,0BAA0B;IACtC,MAAM,MAAM,GAAG,EAAE,CAAC;IAClB,MAAM,OAAO,GAAG,oEAAoE,CAAC;IAErF,IAAI,YAAY,GAAG,EAAE,CAAC;IACtB,MAAM,YAAY,GAAG,IAAI,UAAU,CAAC,MAAM,CAAC,CAAC;IAC5C,MAAM,CAAC,eAAe,CAAC,YAAY,CAAC,CAAC;IAErC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QAC9B,YAAY,IAAI,OAAO,CAAC,YAAY,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IAC9D,CAAC;IAED,OAAO,YAAY,CAAC;AACxB,CAAC;AAED,SAAS,eAAe,CAAC,WAAwB;IAC7C,uDAAuD;IACvD,kDAAkD;IAClD,wDAAwD;IACxD,wDAAwD;IACxD,OAAO,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,KAAK,CAAC,IAAI,EAAE,IAAI,UAAU,CAAC,WAAW,CAAC,CAAC,CAAC;SACpE,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC;SACnB,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC;SACnB,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;AAC5B,CAAC;AAEM,KAAK,UAAU,wBAAwB,CAAC,YAAoB;IAC/D,MAAM,OAAO,GAAG,IAAI,WAAW,EAAE,CAAC;IAClC,MAAM,IAAI,GAAG,OAAO,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;IAC1C,MAAM,WAAW,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;IAEhE,OAAO,eAAe,CAAC,WAAW,CAAC,CAAC;AACxC,CAAC"}

package/dist/http/oauth2/authorize/index.d.ts

@@ -1,4 +1,6 @@
 export * from './module';
-export * from './type';
+export * from './helpers';
+export * from './singleton';
+export * from './types';
 export * from './validation';
 //# sourceMappingURL=index.d.ts.map

package/dist/http/oauth2/authorize/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/http/oauth2/authorize/index.ts"],"names":[],"mappings":"AAOA,cAAc,UAAU,CAAC;AACzB,cAAc,QAAQ,CAAC;AACvB,cAAc,cAAc,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/http/oauth2/authorize/index.ts"],"names":[],"mappings":"AAOA,cAAc,UAAU,CAAC;AACzB,cAAc,WAAW,CAAC;AAC1B,cAAc,aAAa,CAAC;AAC5B,cAAc,SAAS,CAAC;AACxB,cAAc,cAAc,CAAC"}

package/dist/http/oauth2/authorize/index.js

@@ -21,6 +21,8 @@ var __exportStar = (this && this.__exportStar) || function(m, exports) {
 };
 Object.defineProperty(exports, "__esModule", { value: true });
 __exportStar(require("./module"), exports);
-__exportStar(require("./type"), exports);
+__exportStar(require("./helpers"), exports);
+__exportStar(require("./singleton"), exports);
+__exportStar(require("./types"), exports);
 __exportStar(require("./validation"), exports);
 //# sourceMappingURL=index.js.map

package/dist/http/oauth2/authorize/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../src/http/oauth2/authorize/index.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;;;;;;;;;;;;;;;AAEH,2CAAyB;AACzB,yCAAuB;AACvB,+CAA6B"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../src/http/oauth2/authorize/index.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;;;;;;;;;;;;;;;AAEH,2CAAyB;AACzB,4CAA0B;AAC1B,8CAA4B;AAC5B,0CAAwB;AACxB,+CAA6B"}

package/dist/http/oauth2/authorize/module.d.ts

@@ -1,4 +1,16 @@
+import type { OAuth2AuthorizationCodeRequest } from '@authup/core-kit';
+import { RoutupContainerAdapter } from '@validup/adapter-routup';
 import type { Request } from 'routup';
-import type { AuthorizeRequestOptions, AuthorizeRequestResult } from './type';
-export declare function runOAuth2Authorization(req: Request, options: AuthorizeRequestOptions): Promise<AuthorizeRequestResult>;
+import { OAuth2TokenManager } from '../token';
+import { OAuth2AuthorizationCodeRepository } from './repository';
+import type { OAuth2AuthorizationResult, OAuth2AuthorizationServiceOptions } from './types';
+export declare class OAuth2AuthorizationService {
+    protected options: OAuth2AuthorizationServiceOptions;
+    protected codeRepository: OAuth2AuthorizationCodeRepository;
+    protected tokenManager: OAuth2TokenManager;
+    protected validatorAdapter: RoutupContainerAdapter<OAuth2AuthorizationCodeRequest>;
+    constructor(options: OAuth2AuthorizationServiceOptions);
+    execute(req: Request): Promise<OAuth2AuthorizationResult>;
+    protected validate(req: Request): Promise<OAuth2AuthorizationCodeRequest>;
+}
 //# sourceMappingURL=module.d.ts.map

package/dist/http/oauth2/authorize/module.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"module.d.ts","sourceRoot":"","sources":["../../../../src/http/oauth2/authorize/module.ts"],"names":[],"mappings":"AAeA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,QAAQ,CAAC;AAgBtC,OAAO,KAAK,EAAE,uBAAuB,EAAE,sBAAsB,EAAE,MAAM,QAAQ,CAAC;AAG9E,wBAAsB,sBAAsB,CACxC,GAAG,EAAE,OAAO,EACZ,OAAO,EAAE,uBAAuB,GAChC,OAAO,CAAC,sBAAsB,CAAC,CAiFlC"}
+{"version":3,"file":"module.d.ts","sourceRoot":"","sources":["../../../../src/http/oauth2/authorize/module.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAA2B,8BAA8B,EAAE,MAAM,kBAAkB,CAAC;AAKhG,OAAO,EAAE,sBAAsB,EAAE,MAAM,yBAAyB,CAAC;AAEjE,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,QAAQ,CAAC;AAOtC,OAAO,EACH,kBAAkB,EACrB,MAAM,UAAU,CAAC;AAClB,OAAO,EAAE,iCAAiC,EAAE,MAAM,cAAc,CAAC;AACjE,OAAO,KAAK,EAAE,yBAAyB,EAAE,iCAAiC,EAAE,MAAM,SAAS,CAAC;AAG5F,qBAAa,0BAA0B;IACnC,SAAS,CAAC,OAAO,EAAE,iCAAiC,CAAC;IAErD,SAAS,CAAC,cAAc,EAAG,iCAAiC,CAAC;IAE7D,SAAS,CAAC,YAAY,EAAG,kBAAkB,CAAC;IAE5C,SAAS,CAAC,gBAAgB,EAAG,sBAAsB,CAAC,8BAA8B,CAAC,CAAC;gBAExE,OAAO,EAAE,iCAAiC;IAUhD,OAAO,CAAC,GAAG,EAAE,OAAO;cAmFV,QAAQ,CACpB,GAAG,EAAE,OAAO,GACZ,OAAO,CAAC,8BAA8B,CAAC;CAiC9C"}

package/dist/http/oauth2/authorize/module.js

@@ -1,78 +1,119 @@
 "use strict";
 /*
- * Copyright (c) 2023.
+ * Copyright (c) 2024.
  * Author Peter Placzek (tada5hi)
  * For the full copyright and license information,
  * view the LICENSE file that was distributed with this source code.
  */
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.runOAuth2Authorization = runOAuth2Authorization;
-const node_crypto_1 = require("node:crypto");
-const kit_1 = require("@authup/kit");
+exports.OAuth2AuthorizationService = void 0;
 const core_kit_1 = require("@authup/core-kit");
+const specs_1 = require("@authup/specs");
+const http_1 = require("@ebec/http");
+const adapter_routup_1 = require("@validup/adapter-routup");
+const node_crypto_1 = require("node:crypto");
 const routup_1 = require("routup");
 const typeorm_extension_1 = require("typeorm-extension");
 const domains_1 = require("../../../database/domains");
 const request_1 = require("../../request");
-const token_1 = require("../token");
 const response_1 = require("../response");
+const token_1 = require("../token");
+const repository_1 = require("./repository");
 const validation_1 = require("./validation");
-async function runOAuth2Authorization(req, options) {
-    const accessTokenMaxAge = options.accessTokenMaxAge || 7200;
-    const authorizationCodeMaxAge = options.authorizationCodeMaxAge || 300;
-    const idTokenMaxAge = options.idTokenMaxAge || 7200;
-    const data = await (0, validation_1.validateAuthorizeRequest)(req);
-    const responseTypes = (0, response_1.getOauth2AuthorizeResponseTypesByRequest)(req);
-    const output = {
-        redirectUri: data.redirect_uri,
-        ...(data.state ? { state: data.state } : {}),
-    };
-    const identity = (0, request_1.useRequestIdentityOrFail)(req);
-    const dataSource = await (0, typeorm_extension_1.useDataSource)();
-    const repository = dataSource.getRepository(domains_1.OAuth2AuthorizationCodeEntity);
-    const entity = repository.create({
-        content: (0, node_crypto_1.randomBytes)(10).toString('hex'),
-        expires: new Date(Date.now() + (1000 * authorizationCodeMaxAge)).toISOString(),
-        redirect_uri: data.redirect_uri,
-        client_id: data.client_id,
-        realm_id: identity.realmId,
-        scope: data.scope,
-    });
-    if (identity.type === 'user') {
-        entity.user_id = identity.id;
-    }
-    if (identity.type === 'robot') {
-        entity.robot_id = identity.id;
+class OAuth2AuthorizationService {
+    constructor(options) {
+        this.options = options;
+        this.codeRepository = new repository_1.OAuth2AuthorizationCodeRepository();
+        this.tokenManager = new token_1.OAuth2TokenManager();
+        const validator = new validation_1.AuthorizeRequestValidator();
+        this.validatorAdapter = new adapter_routup_1.RoutupContainerAdapter(validator);
     }
-    const tokenManager = new token_1.OAuth2TokenManager();
-    const tokenBuildContext = {
-        issuer: options.issuer,
-        remoteAddress: (0, routup_1.getRequestIP)(req, { trustProxy: true }),
-        sub: identity.id,
-        subKind: identity.type,
-        realmId: identity.realmId,
-        realmName: identity.realmName,
-        clientId: data.client_id,
-        ...(data.scope ? { scope: data.scope } : {}),
-    };
-    if (responseTypes[kit_1.OAuth2AuthorizationResponseType.ID_TOKEN] ||
-        (0, core_kit_1.hasOAuth2OpenIDScope)(entity.scope)) {
-        tokenBuildContext.maxAge = idTokenMaxAge;
-        const signingResult = await tokenManager.sign(await (0, token_1.extendOpenIdTokenPayload)((0, token_1.buildOpenIdTokenPayload)(tokenBuildContext)));
-        entity.id_token = signingResult.token;
-        if (responseTypes[kit_1.OAuth2AuthorizationResponseType.ID_TOKEN]) {
-            output.idToken = entity.id_token;
+    async execute(req) {
+        const data = await this.validate(req);
+        const responseTypes = (0, response_1.getOauth2AuthorizeResponseTypesByRequest)(req);
+        const output = {
+            redirectUri: data.redirect_uri,
+            ...(data.state ? { state: data.state } : {}),
+        };
+        const identity = (0, request_1.useRequestIdentityOrFail)(req);
+        const tokenBuildContext = {
+            issuer: this.options.issuer,
+            remoteAddress: (0, routup_1.getRequestIP)(req, { trustProxy: true }),
+            sub: identity.id,
+            subKind: identity.type,
+            realmId: identity.realmId,
+            realmName: identity.realmName,
+            clientId: data.client_id,
+            ...(data.scope ? { scope: data.scope } : {}),
+        };
+        let idToken;
+        if (responseTypes[specs_1.OAuth2AuthorizationResponseType.ID_TOKEN] ||
+            (0, core_kit_1.hasOAuth2OpenIDScope)(data.scope)) {
+            tokenBuildContext.maxAge = this.options.idTokenMaxAge;
+            const signingResult = await this.tokenManager.sign(await (0, token_1.extendOpenIdTokenPayload)((0, token_1.buildOpenIdTokenPayload)(tokenBuildContext)));
+            idToken = signingResult.token;
+            if (responseTypes[specs_1.OAuth2AuthorizationResponseType.ID_TOKEN]) {
+                output.idToken = signingResult.token;
+            }
         }
+        if (responseTypes[specs_1.OAuth2AuthorizationResponseType.TOKEN]) {
+            tokenBuildContext.maxAge = this.options.accessTokenMaxAge;
+            const signingResult = await this.tokenManager.sign((0, token_1.buildOAuth2AccessTokenPayload)(tokenBuildContext));
+            output.accessToken = signingResult.token;
+        }
+        if (responseTypes[specs_1.OAuth2AuthorizationResponseType.CODE]) {
+            const entity = {
+                id: (0, node_crypto_1.randomBytes)(10).toString('hex'),
+                redirect_uri: data.redirect_uri,
+                client_id: data.client_id,
+                realm_id: identity.realmId,
+                realm_name: identity.realmName,
+                scope: data.scope,
+                code_challenge: data.code_challenge,
+                code_challenge_method: data.code_challenge_method,
+            };
+            if (identity.type === 'user') {
+                entity.user_id = identity.id;
+            }
+            if (identity.type === 'robot') {
+                entity.robot_id = identity.id;
+            }
+            if (idToken) {
+                entity.id_token = idToken;
+            }
+            await this.codeRepository.set(entity, 1000 * this.options.authorizationCodeMaxAge);
+            output.authorizationCode = entity.id;
+        }
+        return output;
     }
-    if (responseTypes[kit_1.OAuth2AuthorizationResponseType.TOKEN]) {
-        tokenBuildContext.maxAge = accessTokenMaxAge;
-        const signingResult = await tokenManager.sign((0, token_1.buildOAuth2AccessTokenPayload)(tokenBuildContext));
-        output.accessToken = signingResult.token;
-    }
-    await repository.save(entity);
-    if (responseTypes[kit_1.OAuth2AuthorizationResponseType.CODE]) {
-        output.authorizationCode = entity.content;
+    async validate(req) {
+        const data = await this.validatorAdapter.run(req);
+        const dataSource = await (0, typeorm_extension_1.useDataSource)();
+        const clientRepository = dataSource.getRepository(domains_1.ClientEntity);
+        const client = await clientRepository.findOneBy({ id: data.client_id });
+        if (!client) {
+            throw new http_1.BadRequestError('The referenced client does not exist.');
+        }
+        const clientScopeRepository = dataSource.getRepository(domains_1.ClientScopeEntity);
+        const clientScopes = await clientScopeRepository.find({
+            where: {
+                client_id: data.client_id,
+            },
+            relations: {
+                scope: true,
+            },
+        });
+        const scopeNames = clientScopes.map((clientScope) => clientScope.scope.name);
+        if (data.scope) {
+            if (!(0, core_kit_1.isOAuth2ScopeAllowed)(scopeNames, data.scope)) {
+                throw new http_1.BadRequestError('The requested scope is not covered by the client scope.');
+            }
+        }
+        if (!data.scope) {
+            data.scope = scopeNames.join(' ');
+        }
+        return data;
     }
-    return output;
 }
+exports.OAuth2AuthorizationService = OAuth2AuthorizationService;
 //# sourceMappingURL=module.js.map

package/dist/http/oauth2/authorize/module.js.map

@@ -1 +1 @@
-{"version":3,"file":"module.js","sourceRoot":"","sources":["../../../../src/http/oauth2/authorize/module.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;AA6BH,wDAoFC;AA/GD,6CAA0C;AAE1C,qCAEqB;AACrB,+CAE0B;AAE1B,mCAAsC;AACtC,yDAAkD;AAClD,uDAA0E;AAC1E,2CAAyD;AAKzD,oCAKkB;AAClB,0CAAuE;AAEvE,6CAAwD;AAEjD,KAAK,UAAU,sBAAsB,CACxC,GAAY,EACZ,OAAgC;IAEhC,MAAM,iBAAiB,GAAG,OAAO,CAAC,iBAAiB,IAAI,IAAI,CAAC;IAC5D,MAAM,uBAAuB,GAAG,OAAO,CAAC,uBAAuB,IAAI,GAAG,CAAC;IACvE,MAAM,aAAa,GAAG,OAAO,CAAC,aAAa,IAAI,IAAI,CAAC;IAEpD,MAAM,IAAI,GAAG,MAAM,IAAA,qCAAwB,EAAC,GAAG,CAAC,CAAC;IAEjD,MAAM,aAAa,GAAG,IAAA,mDAAwC,EAAC,GAAG,CAAC,CAAC;IAEpE,MAAM,MAAM,GAA4B;QACpC,WAAW,EAAE,IAAI,CAAC,YAAY;QAC9B,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC/C,CAAC;IAEF,MAAM,QAAQ,GAAG,IAAA,kCAAwB,EAAC,GAAG,CAAC,CAAC;IAE/C,MAAM,UAAU,GAAG,MAAM,IAAA,iCAAa,GAAE,CAAC;IACzC,MAAM,UAAU,GAAG,UAAU,CAAC,aAAa,CAAC,uCAA6B,CAAC,CAAC;IAE3E,MAAM,MAAM,GAAG,UAAU,CAAC,MAAM,CAAC;QAC7B,OAAO,EAAE,IAAA,yBAAW,EAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC;QACxC,OAAO,EAAE,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,IAAI,GAAG,uBAAuB,CAAC,CAAC,CAAC,WAAW,EAAE;QAC9E,YAAY,EAAE,IAAI,CAAC,YAAY;QAC/B,SAAS,EAAE,IAAI,CAAC,SAAS;QACzB,QAAQ,EAAE,QAAQ,CAAC,OAAO;QAC1B,KAAK,EAAE,IAAI,CAAC,KAAK;KACpB,CAAC,CAAC;IAEH,IAAI,QAAQ,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;QAC3B,MAAM,CAAC,OAAO,GAAG,QAAQ,CAAC,EAAE,CAAC;IACjC,CAAC;IAED,IAAI,QAAQ,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;QAC5B,MAAM,CAAC,QAAQ,GAAG,QAAQ,CAAC,EAAE,CAAC;IAClC,CAAC;IAED,MAAM,YAAY,GAAG,IAAI,0BAAkB,EAAE,CAAC;IAC9C,MAAM,iBAAiB,GAAmE;QACtF,MAAM,EAAE,OAAO,CAAC,MAAM;QACtB,aAAa,EAAE,IAAA,qBAAY,EAAC,GAAG,EAAE,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC;QACtD,GAAG,EAAE,QAAQ,CAAC,EAAE;QAChB,OAAO,EAAE,QAAQ,CAAC,IAA0B;QAC5C,OAAO,EAAE,QAAQ,CAAC,OAAO;QACzB,SAAS,EAAE,QAAQ,CAAC,SAAS;QAC7B,QAAQ,EAAE,IAAI,CAAC,SAAS;QACxB,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC/C,CAAC;IAEF,IACI,aAAa,CAAC,qCAA+B,CAAC,QAAQ,CAAC;QACvD,IAAA,+BAAoB,EAAC,MAAM,CAAC,KAAK,CAAC,EACpC,CAAC;QACC,iBAAiB,CAAC,MAAM,GAAG,aAAa,CAAC;QAEzC,MAAM,aAAa,GAAG,MAAM,YAAY,CAAC,IAAI,CACzC,MAAM,IAAA,gCAAwB,EAAC,IAAA,+BAAuB,EAAC,iBAAiB,CAAC,CAAC,CAC7E,CAAC;QACF,MAAM,CAAC,QAAQ,GAAG,aAAa,CAAC,KAAK,CAAC;QAEtC,IAAI,aAAa,CAAC,qCAA+B,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC1D,MAAM,CAAC,OAAO,GAAG,MAAM,CAAC,QAAQ,CAAC;QACrC,CAAC;IACL,CAAC;IAED,IAAI,aAAa,CAAC,qCAA+B,CAAC,KAAK,CAAC,EAAE,CAAC;QACvD,iBAAiB,CAAC,MAAM,GAAG,iBAAiB,CAAC;QAE7C,MAAM,aAAa,GAAG,MAAM,YAAY,CAAC,IAAI,CACzC,IAAA,qCAA6B,EAAC,iBAAiB,CAAC,CACnD,CAAC;QAEF,MAAM,CAAC,WAAW,GAAG,aAAa,CAAC,KAAK,CAAC;IAC7C,CAAC;IAED,MAAM,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAE9B,IAAI,aAAa,CAAC,qCAA+B,CAAC,IAAI,CAAC,EAAE,CAAC;QACtD,MAAM,CAAC,iBAAiB,GAAG,MAAM,CAAC,OAAO,CAAC;IAC9C,CAAC;IAED,OAAO,MAAM,CAAC;AAClB,CAAC"}
+{"version":3,"file":"module.js","sourceRoot":"","sources":["../../../../src/http/oauth2/authorize/module.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;;AAGH,+CAA8E;AAE9E,yCAAgE;AAChE,qCAA6C;AAC7C,4DAAiE;AACjE,6CAA0C;AAE1C,mCAAsC;AACtC,yDAAkD;AAClD,uDAA4E;AAC5E,2CAAyD;AACzD,0CAAuE;AAEvE,oCAEkB;AAClB,6CAAiE;AAEjE,6CAAyD;AAEzD,MAAa,0BAA0B;IASnC,YAAY,OAA0C;QAClD,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;QAEvB,IAAI,CAAC,cAAc,GAAG,IAAI,8CAAiC,EAAE,CAAC;QAC9D,IAAI,CAAC,YAAY,GAAG,IAAI,0BAAkB,EAAE,CAAC;QAE7C,MAAM,SAAS,GAAG,IAAI,sCAAyB,EAAE,CAAC;QAClD,IAAI,CAAC,gBAAgB,GAAG,IAAI,uCAAsB,CAAC,SAAS,CAAC,CAAC;IAClE,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,GAAY;QACtB,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;QAEtC,MAAM,aAAa,GAAG,IAAA,mDAAwC,EAAC,GAAG,CAAC,CAAC;QAEpE,MAAM,MAAM,GAA+B;YACvC,WAAW,EAAE,IAAI,CAAC,YAAY;YAC9B,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC/C,CAAC;QAEF,MAAM,QAAQ,GAAG,IAAA,kCAAwB,EAAC,GAAG,CAAC,CAAC;QAE/C,MAAM,iBAAiB,GAAmE;YACtF,MAAM,EAAE,IAAI,CAAC,OAAO,CAAC,MAAM;YAC3B,aAAa,EAAE,IAAA,qBAAY,EAAC,GAAG,EAAE,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC;YACtD,GAAG,EAAE,QAAQ,CAAC,EAAE;YAChB,OAAO,EAAE,QAAQ,CAAC,IAA0B;YAC5C,OAAO,EAAE,QAAQ,CAAC,OAAO;YACzB,SAAS,EAAE,QAAQ,CAAC,SAAS;YAC7B,QAAQ,EAAE,IAAI,CAAC,SAAS;YACxB,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC/C,CAAC;QAEF,IAAI,OAA4B,CAAC;QACjC,IACI,aAAa,CAAC,uCAA+B,CAAC,QAAQ,CAAC;YACvD,IAAA,+BAAoB,EAAC,IAAI,CAAC,KAAK,CAAC,EAClC,CAAC;YACC,iBAAiB,CAAC,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC;YAEtD,MAAM,aAAa,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,IAAI,CAC9C,MAAM,IAAA,gCAAwB,EAAC,IAAA,+BAAuB,EAAC,iBAAiB,CAAC,CAAC,CAC7E,CAAC;YAEF,OAAO,GAAG,aAAa,CAAC,KAAK,CAAC;YAE9B,IAAI,aAAa,CAAC,uCAA+B,CAAC,QAAQ,CAAC,EAAE,CAAC;gBAC1D,MAAM,CAAC,OAAO,GAAG,aAAa,CAAC,KAAK,CAAC;YACzC,CAAC;QACL,CAAC;QAED,IAAI,aAAa,CAAC,uCAA+B,CAAC,KAAK,CAAC,EAAE,CAAC;YACvD,iBAAiB,CAAC,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,iBAAiB,CAAC;YAE1D,MAAM,aAAa,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,IAAI,CAC9C,IAAA,qCAA6B,EAAC,iBAAiB,CAAC,CACnD,CAAC;YAEF,MAAM,CAAC,WAAW,GAAG,aAAa,CAAC,KAAK,CAAC;QAC7C,CAAC;QAED,IAAI,aAAa,CAAC,uCAA+B,CAAC,IAAI,CAAC,EAAE,CAAC;YACtD,MAAM,MAAM,GAA4B;gBACpC,EAAE,EAAE,IAAA,yBAAW,EAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC;gBACnC,YAAY,EAAE,IAAI,CAAC,YAAY;gBAC/B,SAAS,EAAE,IAAI,CAAC,SAAS;gBACzB,QAAQ,EAAE,QAAQ,CAAC,OAAO;gBAC1B,UAAU,EAAE,QAAQ,CAAC,SAAS;gBAC9B,KAAK,EAAE,IAAI,CAAC,KAAK;gBACjB,cAAc,EAAE,IAAI,CAAC,cAAc;gBACnC,qBAAqB,EAAE,IAAI,CAAC,qBAAqB;aACpD,CAAC;YAEF,IAAI,QAAQ,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;gBAC3B,MAAM,CAAC,OAAO,GAAG,QAAQ,CAAC,EAAE,CAAC;YACjC,CAAC;YAED,IAAI,QAAQ,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;gBAC5B,MAAM,CAAC,QAAQ,GAAG,QAAQ,CAAC,EAAE,CAAC;YAClC,CAAC;YAED,IAAI,OAAO,EAAE,CAAC;gBACV,MAAM,CAAC,QAAQ,GAAG,OAAO,CAAC;YAC9B,CAAC;YAED,MAAM,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,MAAM,EAAE,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,uBAAuB,CAAC,CAAC;YAEnF,MAAM,CAAC,iBAAiB,GAAG,MAAM,CAAC,EAAE,CAAC;QACzC,CAAC;QAED,OAAO,MAAM,CAAC;IAClB,CAAC;IAES,KAAK,CAAC,QAAQ,CACpB,GAAY;QAEZ,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAElD,MAAM,UAAU,GAAG,MAAM,IAAA,iCAAa,GAAE,CAAC;QACzC,MAAM,gBAAgB,GAAG,UAAU,CAAC,aAAa,CAAC,sBAAY,CAAC,CAAC;QAChE,MAAM,MAAM,GAAG,MAAM,gBAAgB,CAAC,SAAS,CAAC,EAAE,EAAE,EAAE,IAAI,CAAC,SAAS,EAAE,CAAC,CAAC;QACxE,IAAI,CAAC,MAAM,EAAE,CAAC;YACV,MAAM,IAAI,sBAAe,CAAC,uCAAuC,CAAC,CAAC;QACvE,CAAC;QAED,MAAM,qBAAqB,GAAG,UAAU,CAAC,aAAa,CAAC,2BAAiB,CAAC,CAAC;QAC1E,MAAM,YAAY,GAAG,MAAM,qBAAqB,CAAC,IAAI,CAAC;YAClD,KAAK,EAAE;gBACH,SAAS,EAAE,IAAI,CAAC,SAAS;aAC5B;YACD,SAAS,EAAE;gBACP,KAAK,EAAE,IAAI;aACd;SACJ,CAAC,CAAC;QAEH,MAAM,UAAU,GAAG,YAAY,CAAC,GAAG,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC,WAAW,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAC7E,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;YACb,IAAI,CAAC,IAAA,+BAAoB,EAAC,UAAU,EAAE,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;gBAChD,MAAM,IAAI,sBAAe,CAAC,yDAAyD,CAAC,CAAC;YACzF,CAAC;QACL,CAAC;QAED,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC;YACd,IAAI,CAAC,KAAK,GAAG,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACtC,CAAC;QAED,OAAO,IAAI,CAAC;IAChB,CAAC;CACJ;AAzID,gEAyIC"}

package/dist/http/oauth2/authorize/repository/index.d.ts

@@ -0,0 +1,2 @@
+export * from './module';
+//# sourceMappingURL=index.d.ts.map

package/dist/http/oauth2/authorize/repository/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../src/http/oauth2/authorize/repository/index.ts"],"names":[],"mappings":"AAOA,cAAc,UAAU,CAAC"}

package/dist/http/oauth2/authorize/repository/index.js

@@ -0,0 +1,24 @@
+"use strict";
+/*
+ * Copyright (c) 2024.
+ * Author Peter Placzek (tada5hi)
+ * For the full copyright and license information,
+ * view the LICENSE file that was distributed with this source code.
+ */
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __exportStar = (this && this.__exportStar) || function(m, exports) {
+    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+__exportStar(require("./module"), exports);
+//# sourceMappingURL=index.js.map

package/dist/http/oauth2/authorize/repository/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../../src/http/oauth2/authorize/repository/index.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;;;;;;;;;;;;;;;AAEH,2CAAyB"}

package/dist/http/oauth2/authorize/repository/module.d.ts

@@ -0,0 +1,9 @@
+import type { OAuth2AuthorizationCode } from '@authup/core-kit';
+import type { Cache } from '@authup/server-kit';
+export declare class OAuth2AuthorizationCodeRepository {
+    protected cache: Cache;
+    constructor();
+    get(code: string): Promise<OAuth2AuthorizationCode | undefined>;
+    set(entity: OAuth2AuthorizationCode, ttl: number): Promise<void>;
+}
+//# sourceMappingURL=module.d.ts.map

package/dist/http/oauth2/authorize/repository/module.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"module.d.ts","sourceRoot":"","sources":["../../../../../src/http/oauth2/authorize/repository/module.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,kBAAkB,CAAC;AAChE,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAIhD,qBAAa,iCAAiC;IAC1C,SAAS,CAAC,KAAK,EAAG,KAAK,CAAC;;IAMlB,GAAG,CAAC,IAAI,EAAE,MAAM,GAAI,OAAO,CAAC,uBAAuB,GAAG,SAAS,CAAC;IAahE,GAAG,CAAC,MAAM,EAAE,uBAAuB,EAAE,GAAG,EAAE,MAAM;CAQzD"}

package/dist/http/oauth2/authorize/repository/module.js

@@ -0,0 +1,36 @@
+"use strict";
+/*
+ * Copyright (c) 2024.
+ * Author Peter Placzek (tada5hi)
+ * For the full copyright and license information,
+ * view the LICENSE file that was distributed with this source code.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.OAuth2AuthorizationCodeRepository = void 0;
+const server_kit_1 = require("@authup/server-kit");
+const constants_1 = require("../../constants");
+class OAuth2AuthorizationCodeRepository {
+    constructor() {
+        this.cache = (0, server_kit_1.useCache)();
+    }
+    async get(code) {
+        const entity = await this.cache.get((0, server_kit_1.buildCacheKey)({
+            prefix: constants_1.OAuth2CachePrefix.AUTHORIZATION_CODE,
+            key: code,
+        }));
+        if (entity) {
+            return entity;
+        }
+        return undefined;
+    }
+    async set(entity, ttl) {
+        await this.cache.set((0, server_kit_1.buildCacheKey)({
+            prefix: constants_1.OAuth2CachePrefix.AUTHORIZATION_CODE,
+            key: entity.id,
+        }), entity, {
+            ttl,
+        });
+    }
+}
+exports.OAuth2AuthorizationCodeRepository = OAuth2AuthorizationCodeRepository;
+//# sourceMappingURL=module.js.map

package/dist/http/oauth2/authorize/repository/module.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"module.js","sourceRoot":"","sources":["../../../../../src/http/oauth2/authorize/repository/module.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;;AAIH,mDAA6D;AAC7D,+CAAoD;AAEpD,MAAa,iCAAiC;IAG1C;QACI,IAAI,CAAC,KAAK,GAAG,IAAA,qBAAQ,GAAE,CAAC;IAC5B,CAAC;IAED,KAAK,CAAC,GAAG,CAAC,IAAY;QAClB,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAA,0BAAa,EAAC;YAC9C,MAAM,EAAE,6BAAiB,CAAC,kBAAkB;YAC5C,GAAG,EAAE,IAAI;SACZ,CAAC,CAAC,CAAC;QAEJ,IAAI,MAAM,EAAE,CAAC;YACT,OAAO,MAAM,CAAC;QAClB,CAAC;QAED,OAAO,SAAS,CAAC;IACrB,CAAC;IAED,KAAK,CAAC,GAAG,CAAC,MAA+B,EAAE,GAAW;QAClD,MAAM,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAA,0BAAa,EAAC;YAC/B,MAAM,EAAE,6BAAiB,CAAC,kBAAkB;YAC5C,GAAG,EAAE,MAAM,CAAC,EAAE;SACjB,CAAC,EAAE,MAAM,EAAE;YACR,GAAG;SACN,CAAC,CAAC;IACP,CAAC;CACJ;AA5BD,8EA4BC"}

package/dist/http/oauth2/authorize/singleton.d.ts

@@ -0,0 +1,3 @@
+import { OAuth2AuthorizationService } from './module';
+export declare function useOAuth2AuthorizationService(): OAuth2AuthorizationService;
+//# sourceMappingURL=singleton.d.ts.map

package/dist/http/oauth2/authorize/singleton.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"singleton.d.ts","sourceRoot":"","sources":["../../../../src/http/oauth2/authorize/singleton.ts"],"names":[],"mappings":"AASA,OAAO,EAAE,0BAA0B,EAAE,MAAM,UAAU,CAAC;AAgBtD,wBAAgB,6BAA6B,+BAE5C"}

package/dist/http/oauth2/authorize/singleton.js

@@ -0,0 +1,28 @@
+"use strict";
+/*
+ * Copyright (c) 2024.
+ * Author Peter Placzek (tada5hi)
+ * For the full copyright and license information,
+ * view the LICENSE file that was distributed with this source code.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.useOAuth2AuthorizationService = useOAuth2AuthorizationService;
+const singa_1 = require("singa");
+const config_1 = require("../../../config");
+const module_1 = require("./module");
+const instance = (0, singa_1.singa)({
+    name: 'oauth2Authorization',
+    factory: () => {
+        const config = (0, config_1.useConfig)();
+        return new module_1.OAuth2AuthorizationService({
+            issuer: config.publicUrl,
+            accessTokenMaxAge: config.tokenAccessMaxAge || 7200,
+            authorizationCodeMaxAge: 300,
+            idTokenMaxAge: config.tokenAccessMaxAge,
+        });
+    },
+});
+function useOAuth2AuthorizationService() {
+    return instance.use();
+}
+//# sourceMappingURL=singleton.js.map

package/dist/http/oauth2/authorize/singleton.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"singleton.js","sourceRoot":"","sources":["../../../../src/http/oauth2/authorize/singleton.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;AAoBH,sEAEC;AApBD,iCAA8B;AAC9B,4CAA4C;AAC5C,qCAAsD;AAEtD,MAAM,QAAQ,GAAG,IAAA,aAAK,EAA6B;IAC/C,IAAI,EAAE,qBAAqB;IAC3B,OAAO,EAAE,GAAG,EAAE;QACV,MAAM,MAAM,GAAG,IAAA,kBAAS,GAAE,CAAC;QAE3B,OAAO,IAAI,mCAA0B,CAAC;YAClC,MAAM,EAAE,MAAM,CAAC,SAAS;YACxB,iBAAiB,EAAE,MAAM,CAAC,iBAAiB,IAAI,IAAI;YACnD,uBAAuB,EAAE,GAAG;YAC5B,aAAa,EAAE,MAAM,CAAC,iBAAiB;SAC1C,CAAC,CAAC;IACP,CAAC;CACJ,CAAC,CAAC;AAEH,SAAgB,6BAA6B;IACzC,OAAO,QAAQ,CAAC,GAAG,EAAE,CAAC;AAC1B,CAAC"}

package/dist/http/oauth2/authorize/types.d.ts

@@ -0,0 +1,14 @@
+export type OAuth2AuthorizationServiceOptions = {
+    issuer: string;
+    accessTokenMaxAge: number;
+    authorizationCodeMaxAge: number;
+    idTokenMaxAge: number;
+};
+export type OAuth2AuthorizationResult = {
+    authorizationCode?: string;
+    accessToken?: string;
+    idToken?: string;
+    redirectUri: string;
+    state?: string;
+};
+//# sourceMappingURL=types.d.ts.map

package/dist/http/oauth2/authorize/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../../src/http/oauth2/authorize/types.ts"],"names":[],"mappings":"AAOA,MAAM,MAAM,iCAAiC,GAAG;IAC5C,MAAM,EAAE,MAAM,CAAC;IAEf,iBAAiB,EAAE,MAAM,CAAC;IAE1B,uBAAuB,EAAE,MAAM,CAAC;IAEhC,aAAa,EAAE,MAAM,CAAA;CACxB,CAAC;AAEF,MAAM,MAAM,yBAAyB,GAAG;IACpC,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,OAAO,CAAC,EAAE,MAAM,CAAC;IAEjB,WAAW,EAAE,MAAM,CAAC;IACpB,KAAK,CAAC,EAAE,MAAM,CAAA;CACjB,CAAC"}

package/dist/http/oauth2/authorize/types.js

@@ -0,0 +1,9 @@
+"use strict";
+/*
+ * Copyright (c) 2023.
+ * Author Peter Placzek (tada5hi)
+ * For the full copyright and license information,
+ * view the LICENSE file that was distributed with this source code.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+//# sourceMappingURL=types.js.map

package/dist/http/oauth2/authorize/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../../../src/http/oauth2/authorize/types.ts"],"names":[],"mappings":";AAAA;;;;;GAKG"}

package/dist/http/oauth2/authorize/validation.d.ts

@@ -1,12 +1,6 @@
 import type { OAuth2AuthorizationCodeRequest } from '@authup/core-kit';
-import type { Request } from 'routup';
 import { Container } from 'validup';
-type AuthorizeValidationResult = OAuth2AuthorizationCodeRequest & {
-    client_id: string;
-};
-export declare class AuthorizeRequestValidator extends Container<AuthorizeValidationResult> {
+export declare class AuthorizeRequestValidator extends Container<OAuth2AuthorizationCodeRequest> {
     protected initialize(): void;
 }
-export declare function validateAuthorizeRequest(req: Request): Promise<AuthorizeValidationResult>;
-export {};
 //# sourceMappingURL=validation.d.ts.map

package/dist/http/oauth2/authorize/validation.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"validation.d.ts","sourceRoot":"","sources":["../../../../src/http/oauth2/authorize/validation.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,8BAA8B,EAAE,MAAM,kBAAkB,CAAC;AAUvE,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,QAAQ,CAAC;AAEtC,OAAO,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AAIpC,KAAK,yBAAyB,GAAG,8BAA8B,GAAG;IAC9D,SAAS,EAAE,MAAM,CAAA;CACpB,CAAC;AAEF,qBAAa,yBAA0B,SAAQ,SAAS,CAAC,yBAAyB,CAAC;IAC/E,SAAS,CAAC,UAAU;CA4EvB;AAED,wBAAsB,wBAAwB,CAC1C,GAAG,EAAE,OAAO,GACZ,OAAO,CAAC,yBAAyB,CAAC,CAmCrC"}
+{"version":3,"file":"validation.d.ts","sourceRoot":"","sources":["../../../../src/http/oauth2/authorize/validation.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,8BAA8B,EAAE,MAAM,kBAAkB,CAAC;AAQvE,OAAO,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AAEpC,qBAAa,yBAA0B,SAAQ,SAAS,CAAC,8BAA8B,CAAC;IACpF,SAAS,CAAC,UAAU;CAsGvB"}

package/dist/http/oauth2/authorize/validation.js

@@ -7,15 +7,9 @@
  */
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.AuthorizeRequestValidator = void 0;
-exports.validateAuthorizeRequest = validateAuthorizeRequest;
-const kit_1 = require("@authup/kit");
-const core_kit_1 = require("@authup/core-kit");
-const http_1 = require("@ebec/http");
+const specs_1 = require("@authup/specs");
 const adapter_validator_1 = require("@validup/adapter-validator");
-const typeorm_extension_1 = require("typeorm-extension");
 const validup_1 = require("validup");
-const adapter_routup_1 = require("@validup/adapter-routup");
-const domains_1 = require("../../../database/domains");
 class AuthorizeRequestValidator extends validup_1.Container {
     initialize() {
         super.initialize();
@@ -26,11 +20,11 @@ class AuthorizeRequestValidator extends validup_1.Container {
                 .isString()
                 .notEmpty()
                 .custom((value) => {
-                const availableResponseTypes = Object.values(kit_1.OAuth2AuthorizationResponseType);
+                const availableResponseTypes = Object.values(specs_1.OAuth2AuthorizationResponseType);
                 const responseTypes = value.split(' ');
                 for (let i = 0; i < responseTypes.length; i++) {
                     if (availableResponseTypes.indexOf(responseTypes[i]) === -1) {
-                        throw kit_1.TokenError.responseTypeUnsupported();
+                        throw specs_1.TokenError.responseTypeUnsupported();
                     }
                 }
                 return true;
@@ -61,6 +55,20 @@ class AuthorizeRequestValidator extends validup_1.Container {
                 .isLength({ min: 5, max: 2048 })
                 .optional({ values: 'null' });
         }));
+        this.mount('code_challenge', { optional: true }, (0, adapter_validator_1.createValidator)(() => {
+            const chain = (0, adapter_validator_1.createValidationChain)();
+            return chain
+                .isString()
+                .isLength({ max: 256 })
+                .optional({ values: 'null' });
+        }));
+        this.mount('code_challenge_method', { optional: true }, (0, adapter_validator_1.createValidator)(() => {
+            const chain = (0, adapter_validator_1.createValidationChain)();
+            return chain
+                .isString()
+                .isIn(Object.values(specs_1.OAuth2AuthorizationCodeChallengeMethod))
+                .optional({ values: 'null' });
+        }));
         this.mount('client_id', (0, adapter_validator_1.createValidator)(() => {
             const chain = (0, adapter_validator_1.createValidationChain)();
             return chain
@@ -72,34 +80,4 @@ class AuthorizeRequestValidator extends validup_1.Container {
     }
 }
 exports.AuthorizeRequestValidator = AuthorizeRequestValidator;
-async function validateAuthorizeRequest(req) {
-    const validator = new AuthorizeRequestValidator();
-    const validatorWrapper = new adapter_routup_1.RoutupContainerAdapter(validator);
-    const data = await validatorWrapper.run(req);
-    const dataSource = await (0, typeorm_extension_1.useDataSource)();
-    const clientRepository = dataSource.getRepository(domains_1.ClientEntity);
-    const client = await clientRepository.findOneBy({ id: data.client_id });
-    if (!client) {
-        throw new http_1.BadRequestError('The referenced client does not exist.');
-    }
-    const clientScopeRepository = dataSource.getRepository(domains_1.ClientScopeEntity);
-    const clientScopes = await clientScopeRepository.find({
-        where: {
-            client_id: data.client_id,
-        },
-        relations: {
-            scope: true,
-        },
-    });
-    const scopeNames = clientScopes.map((clientScope) => clientScope.scope.name);
-    if (data.scope) {
-        if (!(0, core_kit_1.isOAuth2ScopeAllowed)(scopeNames, data.scope)) {
-            throw new http_1.BadRequestError('The requested scope is not covered by the client scope.');
-        }
-    }
-    if (!data.scope) {
-        data.scope = scopeNames.join(' ');
-    }
-    return data;
-}
 //# sourceMappingURL=validation.js.map

package/dist/http/oauth2/authorize/validation.js.map

@@ -1 +1 @@
-{"version":3,"file":"validation.js","sourceRoot":"","sources":["../../../../src/http/oauth2/authorize/validation.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;;AAqGH,4DAqCC;AAvID,qCAGqB;AACrB,+CAE0B;AAC1B,qCAA6C;AAC7C,kEAAoF;AAEpF,yDAAkD;AAClD,qCAAoC;AACpC,4DAAiE;AACjE,uDAA4E;AAM5E,MAAa,yBAA0B,SAAQ,mBAAoC;IACrE,UAAU;QAChB,KAAK,CAAC,UAAU,EAAE,CAAC;QAEnB,IAAI,CAAC,KAAK,CACN,eAAe,EACf,IAAA,mCAAe,EAAC,GAAG,EAAE;YACjB,MAAM,KAAK,GAAG,IAAA,yCAAqB,GAAE,CAAC;YACtC,OAAO,KAAK;iBACP,MAAM,EAAE;iBACR,QAAQ,EAAE;iBACV,QAAQ,EAAE;iBACV,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE;gBACd,MAAM,sBAAsB,GAAG,MAAM,CAAC,MAAM,CAAC,qCAA+B,CAAC,CAAC;gBAC9E,MAAM,aAAa,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;gBAEvC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,aAAa,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;oBAC5C,IAAI,sBAAsB,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC;wBAC1D,MAAM,gBAAU,CAAC,uBAAuB,EAAE,CAAC;oBAC/C,CAAC;gBACL,CAAC;gBAED,OAAO,IAAI,CAAC;YAChB,CAAC,CAAC,CAAC;QACX,CAAC,CAAC,CACL,CAAC;QAEF,IAAI,CAAC,KAAK,CACN,cAAc,EACd,IAAA,mCAAe,EAAC,GAAG,EAAE;YACjB,MAAM,KAAK,GAAG,IAAA,yCAAqB,GAAE,CAAC;YACtC,OAAO,KAAK;iBACP,MAAM,EAAE;iBACR,QAAQ,EAAE;iBACV,KAAK,EAAE;iBACP,QAAQ,CAAC,EAAE,GAAG,EAAE,CAAC,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC;QACzC,CAAC,CAAC,CACL,CAAC;QAEF,IAAI,CAAC,KAAK,CACN,OAAO,EACP,IAAA,mCAAe,EAAC,GAAG,EAAE;YACjB,MAAM,KAAK,GAAG,IAAA,yCAAqB,GAAE,CAAC;YACtC,OAAO,KAAK;iBACP,MAAM,EAAE;iBACR,QAAQ,EAAE;iBACV,QAAQ,EAAE;iBACV,QAAQ,CAAC,EAAE,GAAG,EAAE,CAAC,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,CAAC;QACxC,CAAC,CAAC,CACL,CAAC;QAEF,IAAI,CAAC,KAAK,CACN,OAAO,EACP,EAAE,QAAQ,EAAE,IAAI,EAAE,EAClB,IAAA,mCAAe,EAAC,GAAG,EAAE;YACjB,MAAM,KAAK,GAAG,IAAA,yCAAqB,GAAE,CAAC;YACtC,OAAO,KAAK;iBACP,MAAM,EAAE;iBACR,QAAQ,EAAE;iBACV,QAAQ,EAAE;iBACV,QAAQ,CAAC,EAAE,GAAG,EAAE,CAAC,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC;iBAC/B,QAAQ,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;QACtC,CAAC,CAAC,CACL,CAAC;QAEF,IAAI,CAAC,KAAK,CACN,WAAW,EACX,IAAA,mCAAe,EAAC,GAAG,EAAE;YACjB,MAAM,KAAK,GAAG,IAAA,yCAAqB,GAAE,CAAC;YACtC,OAAO,KAAK;iBACP,MAAM,EAAE;iBACR,QAAQ,EAAE;iBACV,QAAQ,EAAE;iBACV,MAAM,EAAE,CAAC;QAClB,CAAC,CAAC,CACL,CAAC;IACN,CAAC;CACJ;AA7ED,8DA6EC;AAEM,KAAK,UAAU,wBAAwB,CAC1C,GAAY;IAEZ,MAAM,SAAS,GAAG,IAAI,yBAAyB,EAAE,CAAC;IAClD,MAAM,gBAAgB,GAAG,IAAI,uCAAsB,CAAC,SAAS,CAAC,CAAC;IAC/D,MAAM,IAAI,GAAG,MAAM,gBAAgB,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IAE7C,MAAM,UAAU,GAAG,MAAM,IAAA,iCAAa,GAAE,CAAC;IACzC,MAAM,gBAAgB,GAAG,UAAU,CAAC,aAAa,CAAC,sBAAY,CAAC,CAAC;IAChE,MAAM,MAAM,GAAG,MAAM,gBAAgB,CAAC,SAAS,CAAC,EAAE,EAAE,EAAE,IAAI,CAAC,SAAS,EAAE,CAAC,CAAC;IACxE,IAAI,CAAC,MAAM,EAAE,CAAC;QACV,MAAM,IAAI,sBAAe,CAAC,uCAAuC,CAAC,CAAC;IACvE,CAAC;IAED,MAAM,qBAAqB,GAAG,UAAU,CAAC,aAAa,CAAC,2BAAiB,CAAC,CAAC;IAC1E,MAAM,YAAY,GAAG,MAAM,qBAAqB,CAAC,IAAI,CAAC;QAClD,KAAK,EAAE;YACH,SAAS,EAAE,IAAI,CAAC,SAAS;SAC5B;QACD,SAAS,EAAE;YACP,KAAK,EAAE,IAAI;SACd;KACJ,CAAC,CAAC;IAEH,MAAM,UAAU,GAAG,YAAY,CAAC,GAAG,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC,WAAW,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAE7E,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;QACb,IAAI,CAAC,IAAA,+BAAoB,EAAC,UAAU,EAAE,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;YAChD,MAAM,IAAI,sBAAe,CAAC,yDAAyD,CAAC,CAAC;QACzF,CAAC;IACL,CAAC;IAED,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC;QACd,IAAI,CAAC,KAAK,GAAG,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACtC,CAAC;IAED,OAAO,IAAI,CAAC;AAChB,CAAC"}
+{"version":3,"file":"validation.js","sourceRoot":"","sources":["../../../../src/http/oauth2/authorize/validation.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;;AAGH,yCAIuB;AAEvB,kEAAoF;AACpF,qCAAoC;AAEpC,MAAa,yBAA0B,SAAQ,mBAAyC;IAC1E,UAAU;QAChB,KAAK,CAAC,UAAU,EAAE,CAAC;QAEnB,IAAI,CAAC,KAAK,CACN,eAAe,EACf,IAAA,mCAAe,EAAC,GAAG,EAAE;YACjB,MAAM,KAAK,GAAG,IAAA,yCAAqB,GAAE,CAAC;YACtC,OAAO,KAAK;iBACP,MAAM,EAAE;iBACR,QAAQ,EAAE;iBACV,QAAQ,EAAE;iBACV,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE;gBACd,MAAM,sBAAsB,GAAG,MAAM,CAAC,MAAM,CAAC,uCAA+B,CAAC,CAAC;gBAC9E,MAAM,aAAa,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;gBAEvC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,aAAa,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;oBAC5C,IAAI,sBAAsB,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC;wBAC1D,MAAM,kBAAU,CAAC,uBAAuB,EAAE,CAAC;oBAC/C,CAAC;gBACL,CAAC;gBAED,OAAO,IAAI,CAAC;YAChB,CAAC,CAAC,CAAC;QACX,CAAC,CAAC,CACL,CAAC;QAEF,IAAI,CAAC,KAAK,CACN,cAAc,EACd,IAAA,mCAAe,EAAC,GAAG,EAAE;YACjB,MAAM,KAAK,GAAG,IAAA,yCAAqB,GAAE,CAAC;YACtC,OAAO,KAAK;iBACP,MAAM,EAAE;iBACR,QAAQ,EAAE;iBACV,KAAK,EAAE;iBACP,QAAQ,CAAC,EAAE,GAAG,EAAE,CAAC,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC;QACzC,CAAC,CAAC,CACL,CAAC;QAEF,IAAI,CAAC,KAAK,CACN,OAAO,EACP,IAAA,mCAAe,EAAC,GAAG,EAAE;YACjB,MAAM,KAAK,GAAG,IAAA,yCAAqB,GAAE,CAAC;YACtC,OAAO,KAAK;iBACP,MAAM,EAAE;iBACR,QAAQ,EAAE;iBACV,QAAQ,EAAE;iBACV,QAAQ,CAAC,EAAE,GAAG,EAAE,CAAC,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,CAAC;QACxC,CAAC,CAAC,CACL,CAAC;QAEF,IAAI,CAAC,KAAK,CACN,OAAO,EACP,EAAE,QAAQ,EAAE,IAAI,EAAE,EAClB,IAAA,mCAAe,EAAC,GAAG,EAAE;YACjB,MAAM,KAAK,GAAG,IAAA,yCAAqB,GAAE,CAAC;YACtC,OAAO,KAAK;iBACP,MAAM,EAAE;iBACR,QAAQ,EAAE;iBACV,QAAQ,EAAE;iBACV,QAAQ,CAAC,EAAE,GAAG,EAAE,CAAC,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC;iBAC/B,QAAQ,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;QACtC,CAAC,CAAC,CACL,CAAC;QAEF,IAAI,CAAC,KAAK,CACN,gBAAgB,EAChB,EAAE,QAAQ,EAAE,IAAI,EAAE,EAClB,IAAA,mCAAe,EAAC,GAAG,EAAE;YACjB,MAAM,KAAK,GAAG,IAAA,yCAAqB,GAAE,CAAC;YAEtC,OAAO,KAAK;iBACP,QAAQ,EAAE;iBACV,QAAQ,CAAC,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC;iBACtB,QAAQ,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;QACtC,CAAC,CAAC,CACL,CAAC;QAEF,IAAI,CAAC,KAAK,CACN,uBAAuB,EACvB,EAAE,QAAQ,EAAE,IAAI,EAAE,EAClB,IAAA,mCAAe,EAAC,GAAG,EAAE;YACjB,MAAM,KAAK,GAAG,IAAA,yCAAqB,GAAE,CAAC;YAEtC,OAAO,KAAK;iBACP,QAAQ,EAAE;iBACV,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,8CAAsC,CAAC,CAAC;iBAC3D,QAAQ,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;QACtC,CAAC,CAAC,CACL,CAAC;QAEF,IAAI,CAAC,KAAK,CACN,WAAW,EACX,IAAA,mCAAe,EAAC,GAAG,EAAE;YACjB,MAAM,KAAK,GAAG,IAAA,yCAAqB,GAAE,CAAC;YACtC,OAAO,KAAK;iBACP,MAAM,EAAE;iBACR,QAAQ,EAAE;iBACV,QAAQ,EAAE;iBACV,MAAM,EAAE,CAAC;QAClB,CAAC,CAAC,CACL,CAAC;IACN,CAAC;CACJ;AAvGD,8DAuGC"}

package/dist/http/oauth2/constants.d.ts

@@ -1,4 +1,5 @@
 export declare enum OAuth2CachePrefix {
+    AUTHORIZATION_CODE = "oauth2_authorization_code",
     TOKEN_CLAIMS = "oauth2_token_claims",
     TOKEN_INACTIVE = "oauth2_token_blocked"
 }

package/dist/http/oauth2/constants.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"constants.d.ts","sourceRoot":"","sources":["../../../src/http/oauth2/constants.ts"],"names":[],"mappings":"AAOA,oBAAY,iBAAiB;IACzB,YAAY,wBAAwB;IACpC,cAAc,yBAAyB;CAC1C"}
+{"version":3,"file":"constants.d.ts","sourceRoot":"","sources":["../../../src/http/oauth2/constants.ts"],"names":[],"mappings":"AAOA,oBAAY,iBAAiB;IACzB,kBAAkB,8BAA8B;IAChD,YAAY,wBAAwB;IACpC,cAAc,yBAAyB;CAC1C"}