@authup/server-core 1.0.0-beta.23 → 1.0.0-beta.25

package/dist/http/middleware/built-in/authorization/module.d.ts

@@ -1,3 +1,32 @@
-import type { Router } from 'routup';
-export declare function registerAuthorizationMiddleware(router: Router): void;
+import type { PermissionProvider } from '@authup/access';
+import { PermissionChecker } from '@authup/access';
+import type { Next, Request, Response } from 'routup';
+import type { DataSource } from 'typeorm';
+import { type BasicAuthorizationHeader, type BearerAuthorizationHeader } from 'hapic';
+import type { Config } from '../../../../config';
+import { ClientRepository, RealmRepository, RobotRepository, UserRepository } from '../../../../database/domains';
+import { OAuth2TokenManager } from '../../../oauth2';
+export declare class AuthorizationMiddleware {
+    protected config: Config;
+    protected oauth2TokenManager: OAuth2TokenManager;
+    protected permissionProvider: PermissionProvider;
+    protected permissionChecker: PermissionChecker;
+    protected realmRepository: RealmRepository;
+    protected userRepository: UserRepository;
+    protected robotRepository: RobotRepository;
+    protected clientRepository: ClientRepository;
+    constructor(dataSource: DataSource);
+    run(request: Request, response: Response, next: Next): Promise<void>;
+    /**
+     *
+     * @throws JWTError
+     *
+     * @param request
+     * @param header
+     *
+     * @protected
+     */
+    protected verifyBearerAuthorizationHeader(request: Request, header: BearerAuthorizationHeader): Promise<void>;
+    protected verifyBasicAuthorizationHeader(request: Request, header: BasicAuthorizationHeader): Promise<void>;
+}
 //# sourceMappingURL=module.d.ts.map

package/dist/http/middleware/built-in/authorization/module.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"module.d.ts","sourceRoot":"","sources":["../../../../../src/http/middleware/built-in/authorization/module.ts"],"names":[],"mappings":"AASA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAUrC,wBAAgB,+BAA+B,CAAC,MAAM,EAAE,MAAM,QAqD7D"}
+{"version":3,"file":"module.d.ts","sourceRoot":"","sources":["../../../../../src/http/middleware/built-in/authorization/module.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,gBAAgB,CAAC;AACzD,OAAO,EAAE,iBAAiB,EAAE,MAAM,gBAAgB,CAAC;AASnD,OAAO,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,QAAQ,CAAC;AACtD,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AAC1C,OAAO,EAEH,KAAK,wBAAwB,EAC7B,KAAK,yBAAyB,EAGjC,MAAM,OAAO,CAAC;AACf,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,oBAAoB,CAAC;AAEjD,OAAO,EAEH,gBAAgB,EAChB,eAAe,EAAE,eAAe,EAAE,cAAc,EACnD,MAAM,8BAA8B,CAAC;AAEtC,OAAO,EAAE,kBAAkB,EAAuB,MAAM,iBAAiB,CAAC;AAS1E,qBAAa,uBAAuB;IAChC,SAAS,CAAC,MAAM,EAAG,MAAM,CAAC;IAI1B,SAAS,CAAC,kBAAkB,EAAE,kBAAkB,CAAC;IAEjD,SAAS,CAAC,kBAAkB,EAAG,kBAAkB,CAAC;IAElD,SAAS,CAAC,iBAAiB,EAAE,iBAAiB,CAAC;IAI/C,SAAS,CAAC,eAAe,EAAG,eAAe,CAAC;IAE5C,SAAS,CAAC,cAAc,EAAG,cAAc,CAAC;IAE1C,SAAS,CAAC,eAAe,EAAG,eAAe,CAAC;IAE5C,SAAS,CAAC,gBAAgB,EAAG,gBAAgB,CAAC;gBAIlC,UAAU,EAAE,UAAU;IAmB5B,GAAG,CAAC,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE,IAAI;IAuD1D;;;;;;;;OAQG;cACa,+BAA+B,CAC3C,OAAO,EAAE,OAAO,EAChB,MAAM,EAAE,yBAAyB;cAuDrB,8BAA8B,CAC1C,OAAO,EAAE,OAAO,EAChB,MAAM,EAAE,wBAAwB;CAgDvC"}

package/dist/http/middleware/built-in/authorization/module.js

@@ -1,31 +1,44 @@
 "use strict";
 /*
- * Copyright (c) 2021-2022.
+ * Copyright (c) 2025.
  * Author Peter Placzek (tada5hi)
  * For the full copyright and license information,
  * view the LICENSE file that was distributed with this source code.
  */
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.registerAuthorizationMiddleware = registerAuthorizationMiddleware;
-const hapic_1 = require("hapic");
-const routup_1 = require("routup");
-const cookie_1 = require("@routup/basic/cookie");
+exports.AuthorizationMiddleware = void 0;
+const access_1 = require("@authup/access");
 const core_http_kit_1 = require("@authup/core-http-kit");
-const kit_1 = require("@authup/kit");
+const core_kit_1 = require("@authup/core-kit");
+const errors_1 = require("@authup/errors");
+const server_kit_1 = require("@authup/server-kit");
+const specs_1 = require("@authup/specs");
+const cookie_1 = require("@routup/basic/cookie");
+const routup_1 = require("routup");
+const hapic_1 = require("hapic");
 const config_1 = require("../../../../config");
-const database_1 = require("../../../../database");
+const domains_1 = require("../../../../database/domains");
 const security_1 = require("../../../../security");
+const oauth2_1 = require("../../../oauth2");
 const request_1 = require("../../../request");
-const verify_1 = require("./verify");
-function registerAuthorizationMiddleware(router) {
-    router.use((0, routup_1.coreHandler)(async (request, response, next) => {
-        const dataSource = (0, database_1.useDataSourceSync)();
-        const permissionProvider = new security_1.PermissionDBProvider(dataSource);
-        const permissionChecker = new kit_1.PermissionChecker({
-            provider: permissionProvider,
+class AuthorizationMiddleware {
+    // --------------------------------------
+    constructor(dataSource) {
+        this.config = (0, config_1.useConfig)();
+        this.oauth2TokenManager = new oauth2_1.OAuth2TokenManager();
+        this.permissionProvider = new security_1.PermissionDBProvider(dataSource);
+        this.permissionChecker = new access_1.PermissionChecker({
+            provider: this.permissionProvider,
             policyEngine: new security_1.PolicyEngine(),
         });
-        const requestPermissionChecker = new request_1.RequestPermissionChecker(request, permissionChecker);
+        this.realmRepository = new domains_1.RealmRepository(dataSource);
+        this.userRepository = new domains_1.UserRepository(dataSource);
+        this.robotRepository = new domains_1.RobotRepository(dataSource);
+        this.clientRepository = new domains_1.ClientRepository(dataSource);
+    }
+    // --------------------------------------
+    async run(request, response, next) {
+        const requestPermissionChecker = new request_1.RequestPermissionChecker(request, this.permissionChecker);
         (0, request_1.setRequestPermissionChecker)(request, requestPermissionChecker);
         let { authorization: headerValue } = request.headers;
         try {
@@ -43,8 +56,17 @@ function registerAuthorizationMiddleware(router) {
                 return;
             }
             const header = (0, hapic_1.parseAuthorizationHeader)(headerValue);
-            await (0, verify_1.verifyAuthorizationHeader)(request, header);
-            next();
+            if (header.type === hapic_1.AuthorizationHeaderType.BEARER) {
+                await this.verifyBearerAuthorizationHeader(request, header);
+                next();
+                return;
+            }
+            if (header.type === hapic_1.AuthorizationHeaderType.BASIC) {
+                await this.verifyBasicAuthorizationHeader(request, header);
+                next();
+                return;
+            }
+            next(errors_1.HTTPError.unsupportedHeaderType(header.type));
         }
         catch (e) {
             const config = (0, config_1.useConfig)();
@@ -62,6 +84,101 @@ function registerAuthorizationMiddleware(router) {
             (0, cookie_1.unsetResponseCookie)(response, core_http_kit_1.CookieName.ACCESS_TOKEN_EXPIRE_DATE, cookieOptions);
             next(e);
         }
-    }));
+    }
+    /**
+     *
+     * @throws JWTError
+     *
+     * @param request
+     * @param header
+     *
+     * @protected
+     */
+    async verifyBearerAuthorizationHeader(request, header) {
+        const payload = await this.oauth2TokenManager.verify(header.token);
+        if (payload.kind !== specs_1.OAuth2TokenKind.ACCESS) {
+            throw specs_1.JWTError.payloadPropertyInvalid('kind');
+        }
+        (0, request_1.setRequestToken)(request, header.token);
+        (0, request_1.setRequestScopes)(request, (0, core_kit_1.transformOAuth2ScopeToArray)(payload.scope));
+        const sub = await (0, oauth2_1.loadOAuth2SubEntity)(payload.sub_kind, payload.sub, payload.scope);
+        if (!payload.realm_id) {
+            throw specs_1.JWTError.payloadPropertyInvalid('realm_id');
+        }
+        let realmName;
+        if (payload.realm_name) {
+            realmName = payload.realm_name;
+        }
+        else {
+            const realm = await this.realmRepository.findOne({
+                where: {
+                    id: payload.realm_id,
+                },
+                cache: {
+                    id: (0, server_kit_1.buildRedisKeyPath)({
+                        prefix: domains_1.CachePrefix.REALM,
+                        key: payload.realm_id,
+                    }),
+                    milliseconds: 60000,
+                },
+            });
+            if (!realm) {
+                throw specs_1.JWTError.payloadPropertyInvalid('realm_id');
+            }
+            realmName = realm.name;
+        }
+        (0, request_1.setRequestIdentity)(request, {
+            type: payload.sub_kind,
+            id: payload.sub,
+            attributes: sub,
+            clientId: payload.client_id,
+            realmId: payload.realm_id,
+            realmName,
+        });
+    }
+    async verifyBasicAuthorizationHeader(request, header) {
+        if (this.config.userAuthBasic) {
+            const user = await this.userRepository.verifyCredentials(header.username, header.password);
+            if (user) {
+                await this.userRepository.extendOneWithEA(user);
+                (0, request_1.setRequestScopes)(request, [core_kit_1.ScopeName.GLOBAL]);
+                (0, request_1.setRequestIdentity)(request, {
+                    type: 'user',
+                    id: user.id,
+                    attributes: user,
+                    realmId: user.realm.id,
+                    realmName: user.realm.name,
+                });
+                return;
+            }
+        }
+        if (this.config.robotAuthBasic) {
+            const robot = await this.robotRepository.verifyCredentials(header.username, header.password);
+            if (robot) {
+                (0, request_1.setRequestScopes)(request, [core_kit_1.ScopeName.GLOBAL]);
+                (0, request_1.setRequestIdentity)(request, {
+                    type: 'robot',
+                    id: robot.id,
+                    attributes: robot,
+                    realmId: robot.realm.id,
+                    realmName: robot.realm.name,
+                });
+            }
+        }
+        if (this.config.clientAuthBasic) {
+            const client = await this.clientRepository.verifyCredentials(header.username, header.password);
+            if (client) {
+                (0, request_1.setRequestScopes)(request, [core_kit_1.ScopeName.GLOBAL]);
+                (0, request_1.setRequestIdentity)(request, {
+                    type: 'client',
+                    id: client.id,
+                    attributes: client,
+                    realmId: client.realm.id,
+                    realmName: client.realm.name,
+                });
+            }
+        }
+    }
 }
+exports.AuthorizationMiddleware = AuthorizationMiddleware;
 //# sourceMappingURL=module.js.map

package/dist/http/middleware/built-in/authorization/module.js.map

@@ -1 +1 @@
-{"version":3,"file":"module.js","sourceRoot":"","sources":["../../../../../src/http/middleware/built-in/authorization/module.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;AAcH,0EAqDC;AAjED,iCAA+E;AAC/E,mCAAyD;AAEzD,iDAAoG;AACpG,yDAAmD;AACnD,qCAAgD;AAChD,+CAA+C;AAC/C,mDAAyD;AACzD,mDAA0E;AAC1E,8CAAyF;AACzF,qCAAqD;AAErD,SAAgB,+BAA+B,CAAC,MAAc;IAC1D,MAAM,CAAC,GAAG,CAAC,IAAA,oBAAW,EAAC,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,EAAE;QACrD,MAAM,UAAU,GAAG,IAAA,4BAAiB,GAAE,CAAC;QACvC,MAAM,kBAAkB,GAAG,IAAI,+BAAoB,CAAC,UAAU,CAAC,CAAC;QAChE,MAAM,iBAAiB,GAAG,IAAI,uBAAiB,CAAC;YAC5C,QAAQ,EAAE,kBAAkB;YAC5B,YAAY,EAAE,IAAI,uBAAY,EAAE;SACnC,CAAC,CAAC;QAEH,MAAM,wBAAwB,GAAG,IAAI,kCAAwB,CAAC,OAAO,EAAE,iBAAiB,CAAC,CAAC;QAC1F,IAAA,qCAA2B,EAAC,OAAO,EAAE,wBAAwB,CAAC,CAAC;QAE/D,IAAI,EAAE,aAAa,EAAE,WAAW,EAAE,GAAG,OAAO,CAAC,OAAO,CAAC;QAErD,IAAI,CAAC;YACD,IAAI,OAAO,WAAW,KAAK,WAAW,EAAE,CAAC;gBACrC,MAAM,MAAM,GAAG,IAAA,yBAAgB,EAAC,OAAO,EAAE,0BAAU,CAAC,YAAY,CAAC,CAAC;gBAClE,IAAI,MAAM,EAAE,CAAC;oBACT,WAAW,GAAG,IAAA,oCAA4B,EAAC;wBACvC,IAAI,EAAE,QAAQ;wBACd,KAAK,EAAE,MAAM;qBAChB,CAAC,CAAC;gBACP,CAAC;YACL,CAAC;YAED,IAAI,OAAO,WAAW,KAAK,QAAQ,EAAE,CAAC;gBAClC,IAAI,EAAE,CAAC;gBACP,OAAO;YACX,CAAC;YAED,MAAM,MAAM,GAAG,IAAA,gCAAwB,EAAC,WAAW,CAAC,CAAC;YACrD,MAAM,IAAA,kCAAyB,EAAC,OAAO,EAAE,MAAM,CAAC,CAAC;YAEjD,IAAI,EAAE,CAAC;QACX,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACT,MAAM,MAAM,GAAG,IAAA,kBAAS,GAAE,CAAC;YAC3B,MAAM,aAAa,GAAsB,EAAE,CAAC;YAE5C,IAAI,MAAM,CAAC,YAAY,EAAE,CAAC;gBACtB,aAAa,CAAC,MAAM,GAAG,MAAM,CAAC,YAAY,CAAC;YAC/C,CAAC;iBAAM,CAAC;gBACJ,aAAa,CAAC,MAAM,GAAG,IAAA,2BAAkB,EAAC,QAAQ,CAAC,GAAG,EAAE;oBACpD,UAAU,EAAE,IAAI;iBACnB,CAAC,CAAC;YACP,CAAC;YAED,IAAA,4BAAmB,EAAC,QAAQ,EAAE,0BAAU,CAAC,YAAY,EAAE,aAAa,CAAC,CAAC;YACtE,IAAA,4BAAmB,EAAC,QAAQ,EAAE,0BAAU,CAAC,aAAa,EAAE,aAAa,CAAC,CAAC;YACvE,IAAA,4BAAmB,EAAC,QAAQ,EAAE,0BAAU,CAAC,wBAAwB,EAAE,aAAa,CAAC,CAAC;YAElF,IAAI,CAAC,CAAC,CAAC,CAAC;QACZ,CAAC;IACL,CAAC,CAAC,CAAC,CAAC;AACR,CAAC"}
+{"version":3,"file":"module.js","sourceRoot":"","sources":["../../../../../src/http/middleware/built-in/authorization/module.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;;AAGH,2CAAmD;AACnD,yDAAmD;AACnD,+CAA0E;AAC1E,2CAA2C;AAC3C,mDAAuD;AACvD,yCAA0D;AAE1D,iDAA6E;AAC7E,mCAA4C;AAG5C,iCAMe;AAEf,+CAA+C;AAC/C,0DAIsC;AACtC,mDAA0E;AAC1E,4CAA0E;AAC1E,8CAM0B;AAE1B,MAAa,uBAAuB;IAqBhC,yCAAyC;IAEzC,YAAY,UAAsB;QAC9B,IAAI,CAAC,MAAM,GAAG,IAAA,kBAAS,GAAE,CAAC;QAE1B,IAAI,CAAC,kBAAkB,GAAG,IAAI,2BAAkB,EAAE,CAAC;QACnD,IAAI,CAAC,kBAAkB,GAAG,IAAI,+BAAoB,CAAC,UAAU,CAAC,CAAC;QAC/D,IAAI,CAAC,iBAAiB,GAAG,IAAI,0BAAiB,CAAC;YAC3C,QAAQ,EAAE,IAAI,CAAC,kBAAkB;YACjC,YAAY,EAAE,IAAI,uBAAY,EAAE;SACnC,CAAC,CAAC;QAEH,IAAI,CAAC,eAAe,GAAG,IAAI,yBAAe,CAAC,UAAU,CAAC,CAAC;QAEvD,IAAI,CAAC,cAAc,GAAG,IAAI,wBAAc,CAAC,UAAU,CAAC,CAAC;QACrD,IAAI,CAAC,eAAe,GAAG,IAAI,yBAAe,CAAC,UAAU,CAAC,CAAC;QACvD,IAAI,CAAC,gBAAgB,GAAG,IAAI,0BAAgB,CAAC,UAAU,CAAC,CAAC;IAC7D,CAAC;IAED,yCAAyC;IAEzC,KAAK,CAAC,GAAG,CAAC,OAAgB,EAAE,QAAkB,EAAE,IAAU;QACtD,MAAM,wBAAwB,GAAG,IAAI,kCAAwB,CAAC,OAAO,EAAE,IAAI,CAAC,iBAAiB,CAAC,CAAC;QAC/F,IAAA,qCAA2B,EAAC,OAAO,EAAE,wBAAwB,CAAC,CAAC;QAE/D,IAAI,EAAE,aAAa,EAAE,WAAW,EAAE,GAAG,OAAO,CAAC,OAAO,CAAC;QAErD,IAAI,CAAC;YACD,IAAI,OAAO,WAAW,KAAK,WAAW,EAAE,CAAC;gBACrC,MAAM,MAAM,GAAG,IAAA,yBAAgB,EAAC,OAAO,EAAE,0BAAU,CAAC,YAAY,CAAC,CAAC;gBAClE,IAAI,MAAM,EAAE,CAAC;oBACT,WAAW,GAAG,IAAA,oCAA4B,EAAC;wBACvC,IAAI,EAAE,QAAQ;wBACd,KAAK,EAAE,MAAM;qBAChB,CAAC,CAAC;gBACP,CAAC;YACL,CAAC;YAED,IAAI,OAAO,WAAW,KAAK,QAAQ,EAAE,CAAC;gBAClC,IAAI,EAAE,CAAC;gBACP,OAAO;YACX,CAAC;YAED,MAAM,MAAM,GAAG,IAAA,gCAAwB,EAAC,WAAW,CAAC,CAAC;YAErD,IAAI,MAAM,CAAC,IAAI,KAAK,+BAAuB,CAAC,MAAM,EAAE,CAAC;gBACjD,MAAM,IAAI,CAAC,+BAA+B,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;gBAC5D,IAAI,EAAE,CAAC;gBACP,OAAO;YACX,CAAC;YAAC,IAAI,MAAM,CAAC,IAAI,KAAK,+BAAuB,CAAC,KAAK,EAAE,CAAC;gBAClD,MAAM,IAAI,CAAC,8BAA8B,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;gBAC3D,IAAI,EAAE,CAAC;gBACP,OAAO;YACX,CAAC;YAED,IAAI,CAAC,kBAAS,CAAC,qBAAqB,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;QACvD,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACT,MAAM,MAAM,GAAG,IAAA,kBAAS,GAAE,CAAC;YAC3B,MAAM,aAAa,GAAsB,EAAE,CAAC;YAE5C,IAAI,MAAM,CAAC,YAAY,EAAE,CAAC;gBACtB,aAAa,CAAC,MAAM,GAAG,MAAM,CAAC,YAAY,CAAC;YAC/C,CAAC;iBAAM,CAAC;gBACJ,aAAa,CAAC,MAAM,GAAG,IAAA,2BAAkB,EAAC,QAAQ,CAAC,GAAG,EAAE;oBACpD,UAAU,EAAE,IAAI;iBACnB,CAAC,CAAC;YACP,CAAC;YAED,IAAA,4BAAmB,EAAC,QAAQ,EAAE,0BAAU,CAAC,YAAY,EAAE,aAAa,CAAC,CAAC;YACtE,IAAA,4BAAmB,EAAC,QAAQ,EAAE,0BAAU,CAAC,aAAa,EAAE,aAAa,CAAC,CAAC;YACvE,IAAA,4BAAmB,EAAC,QAAQ,EAAE,0BAAU,CAAC,wBAAwB,EAAE,aAAa,CAAC,CAAC;YAElF,IAAI,CAAC,CAAC,CAAC,CAAC;QACZ,CAAC;IACL,CAAC;IAED;;;;;;;;OAQG;IACO,KAAK,CAAC,+BAA+B,CAC3C,OAAgB,EAChB,MAAiC;QAEjC,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,kBAAkB,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACnE,IAAI,OAAO,CAAC,IAAI,KAAK,uBAAe,CAAC,MAAM,EAAE,CAAC;YAC1C,MAAM,gBAAQ,CAAC,sBAAsB,CAAC,MAAM,CAAC,CAAC;QAClD,CAAC;QAED,IAAA,yBAAe,EAAC,OAAO,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC;QACvC,IAAA,0BAAgB,EAAC,OAAO,EAAE,IAAA,sCAA2B,EAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC;QAEtE,MAAM,GAAG,GAAG,MAAM,IAAA,4BAAmB,EACjC,OAAO,CAAC,QAAQ,EAChB,OAAO,CAAC,GAAG,EACX,OAAO,CAAC,KAAK,CAChB,CAAC;QAEF,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC;YACpB,MAAM,gBAAQ,CAAC,sBAAsB,CAAC,UAAU,CAAC,CAAC;QACtD,CAAC;QAED,IAAI,SAAiB,CAAC;QAEtB,IAAI,OAAO,CAAC,UAAU,EAAE,CAAC;YACrB,SAAS,GAAG,OAAO,CAAC,UAAU,CAAC;QACnC,CAAC;aAAM,CAAC;YACJ,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,eAAe,CAAC,OAAO,CAAC;gBAC7C,KAAK,EAAE;oBACH,EAAE,EAAE,OAAO,CAAC,QAAQ;iBACvB;gBACD,KAAK,EAAE;oBACH,EAAE,EAAE,IAAA,8BAAiB,EAAC;wBAClB,MAAM,EAAE,qBAAW,CAAC,KAAK;wBACzB,GAAG,EAAE,OAAO,CAAC,QAAQ;qBACxB,CAAC;oBACF,YAAY,EAAE,KAAM;iBACvB;aACJ,CAAC,CAAC;YAEH,IAAI,CAAC,KAAK,EAAE,CAAC;gBACT,MAAM,gBAAQ,CAAC,sBAAsB,CAAC,UAAU,CAAC,CAAC;YACtD,CAAC;YAED,SAAS,GAAG,KAAK,CAAC,IAAI,CAAC;QAC3B,CAAC;QAED,IAAA,4BAAkB,EAAC,OAAO,EAAE;YACxB,IAAI,EAAE,OAAO,CAAC,QAAQ;YACtB,EAAE,EAAE,OAAO,CAAC,GAAG;YACf,UAAU,EAAE,GAAG;YACf,QAAQ,EAAE,OAAO,CAAC,SAAS;YAC3B,OAAO,EAAE,OAAO,CAAC,QAAQ;YACzB,SAAS;SACZ,CAAC,CAAC;IACP,CAAC;IAES,KAAK,CAAC,8BAA8B,CAC1C,OAAgB,EAChB,MAAgC;QAEhC,IAAI,IAAI,CAAC,MAAM,CAAC,aAAa,EAAE,CAAC;YAC5B,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,iBAAiB,CAAC,MAAM,CAAC,QAAQ,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAC;YAC3F,IAAI,IAAI,EAAE,CAAC;gBACP,MAAM,IAAI,CAAC,cAAc,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC;gBAEhD,IAAA,0BAAgB,EAAC,OAAO,EAAE,CAAC,oBAAS,CAAC,MAAM,CAAC,CAAC,CAAC;gBAC9C,IAAA,4BAAkB,EAAC,OAAO,EAAE;oBACxB,IAAI,EAAE,MAAM;oBACZ,EAAE,EAAE,IAAI,CAAC,EAAE;oBACX,UAAU,EAAE,IAAI;oBAChB,OAAO,EAAE,IAAI,CAAC,KAAK,CAAC,EAAE;oBACtB,SAAS,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI;iBAC7B,CAAC,CAAC;gBAEH,OAAO;YACX,CAAC;QACL,CAAC;QAED,IAAI,IAAI,CAAC,MAAM,CAAC,cAAc,EAAE,CAAC;YAC7B,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,eAAe,CAAC,iBAAiB,CAAC,MAAM,CAAC,QAAQ,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAC;YAC7F,IAAI,KAAK,EAAE,CAAC;gBACR,IAAA,0BAAgB,EAAC,OAAO,EAAE,CAAC,oBAAS,CAAC,MAAM,CAAC,CAAC,CAAC;gBAC9C,IAAA,4BAAkB,EAAC,OAAO,EAAE;oBACxB,IAAI,EAAE,OAAO;oBACb,EAAE,EAAE,KAAK,CAAC,EAAE;oBACZ,UAAU,EAAE,KAAK;oBACjB,OAAO,EAAE,KAAK,CAAC,KAAK,CAAC,EAAE;oBACvB,SAAS,EAAE,KAAK,CAAC,KAAK,CAAC,IAAI;iBAC9B,CAAC,CAAC;YACP,CAAC;QACL,CAAC;QAED,IAAI,IAAI,CAAC,MAAM,CAAC,eAAe,EAAE,CAAC;YAC9B,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAAC,iBAAiB,CAAC,MAAM,CAAC,QAAQ,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAC;YAC/F,IAAI,MAAM,EAAE,CAAC;gBACT,IAAA,0BAAgB,EAAC,OAAO,EAAE,CAAC,oBAAS,CAAC,MAAM,CAAC,CAAC,CAAC;gBAC9C,IAAA,4BAAkB,EAAC,OAAO,EAAE;oBACxB,IAAI,EAAE,QAAQ;oBACd,EAAE,EAAE,MAAM,CAAC,EAAE;oBACb,UAAU,EAAE,MAAM;oBAClB,OAAO,EAAE,MAAM,CAAC,KAAK,CAAC,EAAE;oBACxB,SAAS,EAAE,MAAM,CAAC,KAAK,CAAC,IAAI;iBAC/B,CAAC,CAAC;YACP,CAAC;QACL,CAAC;IACL,CAAC;CACJ;AArND,0DAqNC"}

package/dist/http/middleware/built-in/authorization/register.d.ts

@@ -0,0 +1,3 @@
+import type { Router } from 'routup';
+export declare function registerAuthorizationMiddleware(router: Router): void;
+//# sourceMappingURL=register.d.ts.map

package/dist/http/middleware/built-in/authorization/register.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"register.d.ts","sourceRoot":"","sources":["../../../../../src/http/middleware/built-in/authorization/register.ts"],"names":[],"mappings":"AAQA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAIrC,wBAAgB,+BAA+B,CAAC,MAAM,EAAE,MAAM,QAS7D"}

package/dist/http/middleware/built-in/authorization/register.js

@@ -0,0 +1,18 @@
+"use strict";
+/*
+ * Copyright (c) 2021-2022.
+ * Author Peter Placzek (tada5hi)
+ * For the full copyright and license information,
+ * view the LICENSE file that was distributed with this source code.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.registerAuthorizationMiddleware = registerAuthorizationMiddleware;
+const routup_1 = require("routup");
+const database_1 = require("../../../../database");
+const module_1 = require("./module");
+function registerAuthorizationMiddleware(router) {
+    const dataSource = (0, database_1.useDataSourceSync)();
+    const middleware = new module_1.AuthorizationMiddleware(dataSource);
+    router.use((0, routup_1.coreHandler)(async (request, response, next) => middleware.run(request, response, next)));
+}
+//# sourceMappingURL=register.js.map

package/dist/http/middleware/built-in/authorization/register.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"register.js","sourceRoot":"","sources":["../../../../../src/http/middleware/built-in/authorization/register.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;AAOH,0EASC;AAdD,mCAAqC;AAErC,mDAAyD;AACzD,qCAAmD;AAEnD,SAAgB,+BAA+B,CAAC,MAAc;IAC1D,MAAM,UAAU,GAAG,IAAA,4BAAiB,GAAE,CAAC;IACvC,MAAM,UAAU,GAAG,IAAI,gCAAuB,CAAC,UAAU,CAAC,CAAC;IAE3D,MAAM,CAAC,GAAG,CAAC,IAAA,oBAAW,EAAC,KAAK,EACxB,OAAO,EACP,QAAQ,EACR,IAAI,EACN,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC,OAAO,EAAE,QAAQ,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC;AACnD,CAAC"}

package/dist/http/middleware/built-in/error.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"error.d.ts","sourceRoot":"","sources":["../../../../src/http/middleware/built-in/error.ts"],"names":[],"mappings":"AAUA,OAAO,KAAK,EACR,MAAM,EACT,MAAM,QAAQ,CAAC;AAQhB,wBAAgB,uBAAuB,CAAC,MAAM,EAAE,MAAM,QAyErD"}
+{"version":3,"file":"error.d.ts","sourceRoot":"","sources":["../../../../src/http/middleware/built-in/error.ts"],"names":[],"mappings":"AAUA,OAAO,KAAK,EACR,MAAM,EACT,MAAM,QAAQ,CAAC;AAehB,wBAAgB,uBAAuB,CAAC,MAAM,EAAE,MAAM,QAkCrD"}

package/dist/http/middleware/built-in/error.js

@@ -10,65 +10,34 @@ exports.registerErrorMiddleware = registerErrorMiddleware;
 const kit_1 = require("@authup/kit");
 const routup_1 = require("routup");
 const server_kit_1 = require("@authup/server-kit");
-const typeorm_extension_1 = require("typeorm-extension");
-const validup_1 = require("validup");
+const utils_1 = require("../../../utils");
 function registerErrorMiddleware(router) {
     router.use((0, routup_1.errorHandler)((error, request, response) => {
-        if (error.statusCode >= 500 && error.statusCode < 600) {
-            (0, server_kit_1.useLogger)().error(error);
-            if (error.cause) {
-                (0, server_kit_1.useLogger)().error(error.cause);
-            }
-        }
-        if (error.cause instanceof kit_1.PermissionError) {
-            error.expose = true;
-            if (error.cause.policy &&
-                error.cause.policy.type === kit_1.BuiltInPolicyType.IDENTITY) {
-                error.statusCode = 401;
-            }
-            else {
-                error.statusCode = 403;
-            }
+        let next;
+        if (error.cause) {
+            next = (0, utils_1.sanitizeError)(error.cause);
         }
-        if (error.cause instanceof typeorm_extension_1.EntityRelationLookupError) {
-            error.expose = true;
-            error.statusCode = 400;
+        else {
+            next = (0, utils_1.sanitizeError)(error);
         }
-        if (error.cause instanceof validup_1.ValidupNestedError) {
-            error.expose = true;
-            error.statusCode = 400;
-            error.data = {
-                children: error.cause.children,
-                attributes: error.cause.children.map((child) => child.pathAbsolute),
-            };
+        const payload = {
+            statusCode: next.statusCode,
+            code: `${next.code}`,
+            message: next.message,
+        };
+        const isServerError = next.statusCode >= 500 && next.statusCode < 600;
+        if (isServerError) {
+            (0, server_kit_1.useLogger)().error(next);
+            payload.message = 'An internal server error occurred.';
         }
-        // catch and decorate some db errors :)
-        switch (error.code) {
-            case 'ER_DUP_ENTRY':
-            case 'SQLITE_CONSTRAINT_UNIQUE': {
-                error.statusCode = 409;
-                error.message = 'An entry with some unique attributes already exist.';
-                error.expose = true;
-                break;
+        else if ((0, kit_1.isObject)(next.data)) {
+            const keys = Object.keys(next.data);
+            for (let i = 0; i < keys.length; i++) {
+                payload[keys[i]] = next.data[keys[i]];
             }
-            case 'ER_DISK_FULL':
-                error.statusCode = 507;
-                error.message = 'No database operation possible, due the leak of free disk space.';
-                error.expose = true;
-                break;
-        }
-        const isServerError = (typeof error.expose !== 'undefined' && !error.expose) ||
-            (error.statusCode >= 500 && error.statusCode < 600);
-        if (isServerError) {
-            error.message = 'An internal server error occurred.';
         }
-        response.statusCode = error.statusCode;
-        return (0, routup_1.send)(response, {
-            statusCode: error.statusCode,
-            code: `${error.code}`,
-            message: error.message,
-            ...((0, kit_1.isObject)(error.data) && !isServerError ? error.data : {}),
-        });
+        response.statusCode = payload.statusCode;
+        return (0, routup_1.send)(response, payload);
     }));
 }
 //# sourceMappingURL=error.js.map

package/dist/http/middleware/built-in/error.js.map

@@ -1 +1 @@
-{"version":3,"file":"error.js","sourceRoot":"","sources":["../../../../src/http/middleware/built-in/error.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;AAeH,0DAyEC;AAtFD,qCAEqB;AAIrB,mCAEgB;AAChB,mDAA+C;AAC/C,yDAA8D;AAC9D,qCAA6C;AAE7C,SAAgB,uBAAuB,CAAC,MAAc;IAClD,MAAM,CAAC,GAAG,CAAC,IAAA,qBAAY,EAAC,CACpB,KAAK,EACL,OAAO,EACP,QAAQ,EACV,EAAE;QACA,IAAI,KAAK,CAAC,UAAU,IAAI,GAAG,IAAI,KAAK,CAAC,UAAU,GAAG,GAAG,EAAE,CAAC;YACpD,IAAA,sBAAS,GAAE,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;YAEzB,IAAI,KAAK,CAAC,KAAK,EAAE,CAAC;gBACd,IAAA,sBAAS,GAAE,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;YACnC,CAAC;QACL,CAAC;QAED,IAAI,KAAK,CAAC,KAAK,YAAY,qBAAe,EAAE,CAAC;YACzC,KAAK,CAAC,MAAM,GAAG,IAAI,CAAC;YAEpB,IACI,KAAK,CAAC,KAAK,CAAC,MAAM;gBAClB,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,KAAK,uBAAiB,CAAC,QAAQ,EACxD,CAAC;gBACC,KAAK,CAAC,UAAU,GAAG,GAAG,CAAC;YAC3B,CAAC;iBAAM,CAAC;gBACJ,KAAK,CAAC,UAAU,GAAG,GAAG,CAAC;YAC3B,CAAC;QACL,CAAC;QAED,IAAI,KAAK,CAAC,KAAK,YAAY,6CAAyB,EAAE,CAAC;YACnD,KAAK,CAAC,MAAM,GAAG,IAAI,CAAC;YACpB,KAAK,CAAC,UAAU,GAAG,GAAG,CAAC;QAC3B,CAAC;QAED,IAAI,KAAK,CAAC,KAAK,YAAY,4BAAkB,EAAE,CAAC;YAC5C,KAAK,CAAC,MAAM,GAAG,IAAI,CAAC;YACpB,KAAK,CAAC,UAAU,GAAG,GAAG,CAAC;YACvB,KAAK,CAAC,IAAI,GAAG;gBACT,QAAQ,EAAE,KAAK,CAAC,KAAK,CAAC,QAAQ;gBAC9B,UAAU,EAAE,KAAK,CAAC,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,YAAY,CAAC;aACtE,CAAC;QACN,CAAC;QAED,uCAAuC;QACvC,QAAQ,KAAK,CAAC,IAAI,EAAE,CAAC;YACjB,KAAK,cAAc,CAAC;YACpB,KAAK,0BAA0B,CAAC,CAAC,CAAC;gBAC9B,KAAK,CAAC,UAAU,GAAG,GAAG,CAAC;gBACvB,KAAK,CAAC,OAAO,GAAG,qDAAqD,CAAC;gBACtE,KAAK,CAAC,MAAM,GAAG,IAAI,CAAC;gBACpB,MAAM;YACV,CAAC;YACD,KAAK,cAAc;gBACf,KAAK,CAAC,UAAU,GAAG,GAAG,CAAC;gBACvB,KAAK,CAAC,OAAO,GAAG,kEAAkE,CAAC;gBACnF,KAAK,CAAC,MAAM,GAAG,IAAI,CAAC;gBACpB,MAAM;QACd,CAAC;QAED,MAAM,aAAa,GAAG,CAAC,OAAO,KAAK,CAAC,MAAM,KAAK,WAAW,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC;YACxE,CAAC,KAAK,CAAC,UAAU,IAAI,GAAG,IAAI,KAAK,CAAC,UAAU,GAAG,GAAG,CAAC,CAAC;QAExD,IAAI,aAAa,EAAE,CAAC;YAChB,KAAK,CAAC,OAAO,GAAG,oCAAoC,CAAC;QACzD,CAAC;QAED,QAAQ,CAAC,UAAU,GAAG,KAAK,CAAC,UAAU,CAAC;QAEvC,OAAO,IAAA,aAAI,EAAC,QAAQ,EAAE;YAClB,UAAU,EAAE,KAAK,CAAC,UAAU;YAC5B,IAAI,EAAE,GAAG,KAAK,CAAC,IAAI,EAAE;YACrB,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,GAAG,CAAC,IAAA,cAAQ,EAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;SAChE,CAAC,CAAC;IACP,CAAC,CAAC,CAAC,CAAC;AACR,CAAC"}
+{"version":3,"file":"error.js","sourceRoot":"","sources":["../../../../src/http/middleware/built-in/error.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;AAsBH,0DAkCC;AAtDD,qCAEqB;AAIrB,mCAEgB;AAChB,mDAA+C;AAE/C,0CAA+C;AAS/C,SAAgB,uBAAuB,CAAC,MAAc;IAClD,MAAM,CAAC,GAAG,CAAC,IAAA,qBAAY,EAAC,CACpB,KAAK,EACL,OAAO,EACP,QAAQ,EACV,EAAE;QACA,IAAI,IAAkB,CAAC;QACvB,IAAI,KAAK,CAAC,KAAK,EAAE,CAAC;YACd,IAAI,GAAG,IAAA,qBAAa,EAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QACtC,CAAC;aAAM,CAAC;YACJ,IAAI,GAAG,IAAA,qBAAa,EAAC,KAAK,CAAC,CAAC;QAChC,CAAC;QAED,MAAM,OAAO,GAA0B;YACnC,UAAU,EAAE,IAAI,CAAC,UAAU;YAC3B,IAAI,EAAE,GAAG,IAAI,CAAC,IAAI,EAAE;YACpB,OAAO,EAAE,IAAI,CAAC,OAAO;SACxB,CAAC;QAEF,MAAM,aAAa,GAAG,IAAI,CAAC,UAAU,IAAI,GAAG,IAAI,IAAI,CAAC,UAAU,GAAG,GAAG,CAAC;QACtE,IAAI,aAAa,EAAE,CAAC;YAChB,IAAA,sBAAS,GAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YAExB,OAAO,CAAC,OAAO,GAAG,oCAAoC,CAAC;QAC3D,CAAC;aAAM,IAAI,IAAA,cAAQ,EAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YAC7B,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACpC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;gBACnC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;YAC1C,CAAC;QACL,CAAC;QAED,QAAQ,CAAC,UAAU,GAAG,OAAO,CAAC,UAAU,CAAC;QACzC,OAAO,IAAA,aAAI,EAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;IACnC,CAAC,CAAC,CAAC,CAAC;AACR,CAAC"}

package/dist/http/middleware/module.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"module.d.ts","sourceRoot":"","sources":["../../../src/http/middleware/module.ts"],"names":[],"mappings":"AAQA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAgBrC,wBAAgB,mBAAmB,CAAC,MAAM,EAAE,MAAM,QAkCjD"}
+{"version":3,"file":"module.d.ts","sourceRoot":"","sources":["../../../src/http/middleware/module.ts"],"names":[],"mappings":"AAQA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAiBrC,wBAAgB,mBAAmB,CAAC,MAAM,EAAE,MAAM,QAkCjD"}

package/dist/http/middleware/module.js

@@ -12,6 +12,7 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.registerMiddlewares = registerMiddlewares;
 const node_path_1 = __importDefault(require("node:path"));
 const config_1 = require("../../config");
+const path_1 = require("../../path");
 const built_in_1 = require("./built-in");
 const utils_1 = require("./utils");
 function registerMiddlewares(router) {
@@ -33,7 +34,7 @@ function registerMiddlewares(router) {
     const swagger = config.middlewareSwagger;
     if ((0, utils_1.isBuiltInMiddlewareEnabled)(swagger)) {
         (0, built_in_1.registerSwaggerMiddleware)(router, {
-            documentPath: node_path_1.default.join(config.writableDirectoryPath, 'swagger.json'),
+            documentPath: node_path_1.default.join((0, path_1.resolvePackagePath)(), 'dist', 'swagger.json'),
             options: {
                 baseURL: config.publicUrl,
                 ...(0, utils_1.transformBoolToEmptyObject)(swagger),

package/dist/http/middleware/module.js.map

@@ -1 +1 @@
-{"version":3,"file":"module.js","sourceRoot":"","sources":["../../../src/http/middleware/module.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;;;;AAmBH,kDAkCC;AAnDD,0DAA6B;AAE7B,yCAAyC;AACzC,yCAQoB;AACpB,mCAGiB;AAEjB,SAAgB,mBAAmB,CAAC,MAAc;IAC9C,MAAM,MAAM,GAAG,IAAA,kBAAS,GAAE,CAAC;IAE3B,IAAA,mCAAwB,EAAC,MAAM,CAAC,CAAC;IAEjC,MAAM,IAAI,GAAG,MAAM,CAAC,cAAc,CAAC;IACnC,IAAI,IAAA,kCAA0B,EAAC,IAAI,CAAC,EAAE,CAAC;QACnC,IAAA,iCAAsB,EAAC,MAAM,EAAE,IAAA,kCAA0B,EAAC,IAAI,CAAC,CAAC,CAAC;IACrE,CAAC;IAED,IAAA,kCAAuB,EAAC,MAAM,CAAC,CAAC;IAEhC,MAAM,UAAU,GAAG,MAAM,CAAC,oBAAoB,CAAC;IAC/C,IAAI,IAAA,kCAA0B,EAAC,UAAU,CAAC,EAAE,CAAC;QACzC,IAAA,uCAA4B,EAAC,MAAM,EAAE,IAAA,kCAA0B,EAAC,UAAU,CAAC,CAAC,CAAC;IACjF,CAAC;IAED,MAAM,SAAS,GAAG,MAAM,CAAC,mBAAmB,CAAC;IAC7C,IAAI,IAAA,kCAA0B,EAAC,SAAS,CAAC,EAAE,CAAC;QACxC,IAAA,sCAA2B,EAAC,MAAM,EAAE,IAAA,kCAA0B,EAAC,SAAS,CAAC,CAAC,CAAC;IAC/E,CAAC;IAED,MAAM,OAAO,GAAG,MAAM,CAAC,iBAAiB,CAAC;IACzC,IAAI,IAAA,kCAA0B,EAAC,OAAO,CAAC,EAAE,CAAC;QACtC,IAAA,oCAAyB,EAAC,MAAM,EAAE;YAC9B,YAAY,EAAE,mBAAI,CAAC,IAAI,CAAC,MAAM,CAAC,qBAAqB,EAAE,cAAc,CAAC;YACrE,OAAO,EAAE;gBACL,OAAO,EAAE,MAAM,CAAC,SAAS;gBACzB,GAAG,IAAA,kCAA0B,EAAC,OAAO,CAAC;aACzC;SACJ,CAAC,CAAC;IACP,CAAC;IAED,IAAA,0CAA+B,EAAC,MAAM,CAAC,CAAC;AAC5C,CAAC"}
+{"version":3,"file":"module.js","sourceRoot":"","sources":["../../../src/http/middleware/module.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;;;;AAoBH,kDAkCC;AApDD,0DAA6B;AAE7B,yCAAyC;AACzC,qCAAgD;AAChD,yCAQoB;AACpB,mCAGiB;AAEjB,SAAgB,mBAAmB,CAAC,MAAc;IAC9C,MAAM,MAAM,GAAG,IAAA,kBAAS,GAAE,CAAC;IAE3B,IAAA,mCAAwB,EAAC,MAAM,CAAC,CAAC;IAEjC,MAAM,IAAI,GAAG,MAAM,CAAC,cAAc,CAAC;IACnC,IAAI,IAAA,kCAA0B,EAAC,IAAI,CAAC,EAAE,CAAC;QACnC,IAAA,iCAAsB,EAAC,MAAM,EAAE,IAAA,kCAA0B,EAAC,IAAI,CAAC,CAAC,CAAC;IACrE,CAAC;IAED,IAAA,kCAAuB,EAAC,MAAM,CAAC,CAAC;IAEhC,MAAM,UAAU,GAAG,MAAM,CAAC,oBAAoB,CAAC;IAC/C,IAAI,IAAA,kCAA0B,EAAC,UAAU,CAAC,EAAE,CAAC;QACzC,IAAA,uCAA4B,EAAC,MAAM,EAAE,IAAA,kCAA0B,EAAC,UAAU,CAAC,CAAC,CAAC;IACjF,CAAC;IAED,MAAM,SAAS,GAAG,MAAM,CAAC,mBAAmB,CAAC;IAC7C,IAAI,IAAA,kCAA0B,EAAC,SAAS,CAAC,EAAE,CAAC;QACxC,IAAA,sCAA2B,EAAC,MAAM,EAAE,IAAA,kCAA0B,EAAC,SAAS,CAAC,CAAC,CAAC;IAC/E,CAAC;IAED,MAAM,OAAO,GAAG,MAAM,CAAC,iBAAiB,CAAC;IACzC,IAAI,IAAA,kCAA0B,EAAC,OAAO,CAAC,EAAE,CAAC;QACtC,IAAA,oCAAyB,EAAC,MAAM,EAAE;YAC9B,YAAY,EAAE,mBAAI,CAAC,IAAI,CAAC,IAAA,yBAAkB,GAAE,EAAE,MAAM,EAAE,cAAc,CAAC;YACrE,OAAO,EAAE;gBACL,OAAO,EAAE,MAAM,CAAC,SAAS;gBACzB,GAAG,IAAA,kCAA0B,EAAC,OAAO,CAAC;aACzC;SACJ,CAAC,CAAC;IACP,CAAC;IAED,IAAA,0CAA+B,EAAC,MAAM,CAAC,CAAC;AAC5C,CAAC"}

package/dist/http/oauth2/authorize/helpers.d.ts

@@ -0,0 +1,3 @@
+export declare function generateOAuth2CodeVerifier(): string;
+export declare function buildOAuth2CodeChallenge(codeVerifier: string): Promise<string>;
+//# sourceMappingURL=helpers.d.ts.map

package/dist/http/oauth2/authorize/helpers.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"helpers.d.ts","sourceRoot":"","sources":["../../../../src/http/oauth2/authorize/helpers.ts"],"names":[],"mappings":"AASA,wBAAgB,0BAA0B,WAazC;AAaD,wBAAsB,wBAAwB,CAAC,YAAY,EAAE,MAAM,mBAMlE"}

package/dist/http/oauth2/authorize/helpers.js

@@ -0,0 +1,39 @@
+"use strict";
+/*
+ * Copyright (c) 2024.
+ * Author Peter Placzek (tada5hi)
+ * For the full copyright and license information,
+ * view the LICENSE file that was distributed with this source code.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.generateOAuth2CodeVerifier = generateOAuth2CodeVerifier;
+exports.buildOAuth2CodeChallenge = buildOAuth2CodeChallenge;
+const uncrypto_1 = require("uncrypto");
+function generateOAuth2CodeVerifier() {
+    const length = 64;
+    const charset = 'ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789-._~';
+    let codeVerifier = '';
+    const randomValues = new Uint8Array(length);
+    crypto.getRandomValues(randomValues);
+    for (let i = 0; i < length; i++) {
+        codeVerifier += charset[randomValues[i] % charset.length];
+    }
+    return codeVerifier;
+}
+function base64URLEncode(arrayBuffer) {
+    // Convert the ArrayBuffer to string using Uint8 array.
+    // btoa takes chars from 0-255 and base64 encodes.
+    // Then convert the base64 encoded to base64url encoded.
+    // (replace + with -, replace / with _, trim trailing =)
+    return btoa(String.fromCharCode.apply(null, new Uint8Array(arrayBuffer)))
+        .replace(/\+/g, '-')
+        .replace(/\//g, '_')
+        .replace(/=+$/, '');
+}
+async function buildOAuth2CodeChallenge(codeVerifier) {
+    const encoder = new TextEncoder();
+    const data = encoder.encode(codeVerifier);
+    const arrayBuffer = await uncrypto_1.subtle.digest('SHA-256', data);
+    return base64URLEncode(arrayBuffer);
+}
+//# sourceMappingURL=helpers.js.map

package/dist/http/oauth2/authorize/helpers.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"helpers.js","sourceRoot":"","sources":["../../../../src/http/oauth2/authorize/helpers.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;AAIH,gEAaC;AAaD,4DAMC;AAlCD,uCAAkC;AAElC,SAAgB,0BAA0B;IACtC,MAAM,MAAM,GAAG,EAAE,CAAC;IAClB,MAAM,OAAO,GAAG,oEAAoE,CAAC;IAErF,IAAI,YAAY,GAAG,EAAE,CAAC;IACtB,MAAM,YAAY,GAAG,IAAI,UAAU,CAAC,MAAM,CAAC,CAAC;IAC5C,MAAM,CAAC,eAAe,CAAC,YAAY,CAAC,CAAC;IAErC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QAC9B,YAAY,IAAI,OAAO,CAAC,YAAY,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IAC9D,CAAC;IAED,OAAO,YAAY,CAAC;AACxB,CAAC;AAED,SAAS,eAAe,CAAC,WAAwB;IAC7C,uDAAuD;IACvD,kDAAkD;IAClD,wDAAwD;IACxD,wDAAwD;IACxD,OAAO,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,KAAK,CAAC,IAAI,EAAE,IAAI,UAAU,CAAC,WAAW,CAAC,CAAC,CAAC;SACpE,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC;SACnB,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC;SACnB,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;AAC5B,CAAC;AAEM,KAAK,UAAU,wBAAwB,CAAC,YAAoB;IAC/D,MAAM,OAAO,GAAG,IAAI,WAAW,EAAE,CAAC;IAClC,MAAM,IAAI,GAAG,OAAO,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;IAC1C,MAAM,WAAW,GAAG,MAAM,iBAAM,CAAC,MAAM,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;IAEzD,OAAO,eAAe,CAAC,WAAW,CAAC,CAAC;AACxC,CAAC"}

package/dist/http/oauth2/authorize/index.d.ts

@@ -1,4 +1,6 @@
 export * from './module';
-export * from './type';
+export * from './helpers';
+export * from './singleton';
+export * from './types';
 export * from './validation';
 //# sourceMappingURL=index.d.ts.map

package/dist/http/oauth2/authorize/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/http/oauth2/authorize/index.ts"],"names":[],"mappings":"AAOA,cAAc,UAAU,CAAC;AACzB,cAAc,QAAQ,CAAC;AACvB,cAAc,cAAc,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/http/oauth2/authorize/index.ts"],"names":[],"mappings":"AAOA,cAAc,UAAU,CAAC;AACzB,cAAc,WAAW,CAAC;AAC1B,cAAc,aAAa,CAAC;AAC5B,cAAc,SAAS,CAAC;AACxB,cAAc,cAAc,CAAC"}

package/dist/http/oauth2/authorize/index.js

@@ -21,6 +21,8 @@ var __exportStar = (this && this.__exportStar) || function(m, exports) {
 };
 Object.defineProperty(exports, "__esModule", { value: true });
 __exportStar(require("./module"), exports);
-__exportStar(require("./type"), exports);
+__exportStar(require("./helpers"), exports);
+__exportStar(require("./singleton"), exports);
+__exportStar(require("./types"), exports);
 __exportStar(require("./validation"), exports);
 //# sourceMappingURL=index.js.map

package/dist/http/oauth2/authorize/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../src/http/oauth2/authorize/index.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;;;;;;;;;;;;;;;AAEH,2CAAyB;AACzB,yCAAuB;AACvB,+CAA6B"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../src/http/oauth2/authorize/index.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;;;;;;;;;;;;;;;AAEH,2CAAyB;AACzB,4CAA0B;AAC1B,8CAA4B;AAC5B,0CAAwB;AACxB,+CAA6B"}

package/dist/http/oauth2/authorize/module.d.ts

@@ -1,4 +1,24 @@
+import type { OAuth2AuthorizationCodeRequest } from '@authup/core-kit';
+import { RoutupContainerAdapter } from '@validup/adapter-routup';
 import type { Request } from 'routup';
-import type { AuthorizeRequestOptions, AuthorizeRequestResult } from './type';
-export declare function runOAuth2Authorization(req: Request, options: AuthorizeRequestOptions): Promise<AuthorizeRequestResult>;
+import { OAuth2TokenManager } from '../token';
+import { OAuth2AuthorizationCodeRepository } from './repository';
+import type { OAuth2AuthorizationResult, OAuth2AuthorizationServiceOptions } from './types';
+export declare class OAuth2AuthorizationService {
+    protected options: OAuth2AuthorizationServiceOptions;
+    protected codeRepository: OAuth2AuthorizationCodeRepository;
+    protected tokenManager: OAuth2TokenManager;
+    protected validatorAdapter: RoutupContainerAdapter<OAuth2AuthorizationCodeRequest>;
+    constructor(options: OAuth2AuthorizationServiceOptions);
+    execute(req: Request): Promise<OAuth2AuthorizationResult>;
+    /**
+     * Validate authorization request.
+     *
+     * @throws OAuth2Error
+     *
+     * @param req
+     * @protected
+     */
+    protected validate(req: Request): Promise<OAuth2AuthorizationCodeRequest>;
+}
 //# sourceMappingURL=module.d.ts.map

package/dist/http/oauth2/authorize/module.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"module.d.ts","sourceRoot":"","sources":["../../../../src/http/oauth2/authorize/module.ts"],"names":[],"mappings":"AAeA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,QAAQ,CAAC;AAgBtC,OAAO,KAAK,EAAE,uBAAuB,EAAE,sBAAsB,EAAE,MAAM,QAAQ,CAAC;AAG9E,wBAAsB,sBAAsB,CACxC,GAAG,EAAE,OAAO,EACZ,OAAO,EAAE,uBAAuB,GAChC,OAAO,CAAC,sBAAsB,CAAC,CAiFlC"}
+{"version":3,"file":"module.d.ts","sourceRoot":"","sources":["../../../../src/http/oauth2/authorize/module.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAA2B,8BAA8B,EAAE,MAAM,kBAAkB,CAAC;AAIhG,OAAO,EAAE,sBAAsB,EAAE,MAAM,yBAAyB,CAAC;AAEjE,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,QAAQ,CAAC;AAOtC,OAAO,EACH,kBAAkB,EACrB,MAAM,UAAU,CAAC;AAClB,OAAO,EAAE,iCAAiC,EAAE,MAAM,cAAc,CAAC;AACjE,OAAO,KAAK,EAAE,yBAAyB,EAAE,iCAAiC,EAAE,MAAM,SAAS,CAAC;AAG5F,qBAAa,0BAA0B;IACnC,SAAS,CAAC,OAAO,EAAE,iCAAiC,CAAC;IAErD,SAAS,CAAC,cAAc,EAAG,iCAAiC,CAAC;IAE7D,SAAS,CAAC,YAAY,EAAG,kBAAkB,CAAC;IAE5C,SAAS,CAAC,gBAAgB,EAAG,sBAAsB,CAAC,8BAA8B,CAAC,CAAC;gBAExE,OAAO,EAAE,iCAAiC;IAUhD,OAAO,CAAC,GAAG,EAAE,OAAO;IAmF1B;;;;;;;OAOG;cACa,QAAQ,CACpB,GAAG,EAAE,OAAO,GACZ,OAAO,CAAC,8BAA8B,CAAC;CAiC9C"}