@authup/server-core 1.0.0-beta.23 → 1.0.0-beta.25

package/dist/http/oauth2/helpers/erorr.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"erorr.js","sourceRoot":"","sources":["../../../../src/http/oauth2/helpers/erorr.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;AAYH,sCAmBC;AA7BD,yCAA6D;AAC7D,2CAA6C;AAC7C,qCAAuC;AACvC,0CAA+C;AAE/C;;;;GAIG;AACH,SAAgB,aAAa,CAAC,GAAY;IACtC,IAAI,GAAG,YAAY,mBAAW,EAAE,CAAC;QAC7B,OAAO,GAAG,CAAC;IACf,CAAC;IAED,IAAI,IAAkB,CAAC;IACvB,IAAI,GAAG,YAAY,oBAAW,EAAE,CAAC;QAC7B,IAAI,GAAG,GAAG,CAAC;IACf,CAAC;SAAM,CAAC;QACJ,IAAI,GAAG,IAAA,qBAAa,EAAC,GAAG,CAAC,CAAC;IAC9B,CAAC;IAED,IAAI,CAAC,IAAI,GAAG;QACR,KAAK,EAAE,uBAAe,CAAC,eAAe;QACtC,iBAAiB,EAAE,IAAI,CAAC,OAAO;QAC/B,GAAG,CAAC,IAAA,cAAQ,EAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;KAC5C,CAAC;IAEF,OAAO,IAAI,CAAC;AAChB,CAAC"}

package/dist/http/oauth2/helpers/index.d.ts

@@ -0,0 +1,2 @@
+export * from './erorr';
+//# sourceMappingURL=index.d.ts.map

package/dist/http/oauth2/helpers/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/http/oauth2/helpers/index.ts"],"names":[],"mappings":"AAOA,cAAc,SAAS,CAAC"}

package/dist/http/oauth2/helpers/index.js

@@ -0,0 +1,24 @@
+"use strict";
+/*
+ * Copyright (c) 2025.
+ *  Author Peter Placzek (tada5hi)
+ *  For the full copyright and license information,
+ *  view the LICENSE file that was distributed with this source code.
+ */
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __exportStar = (this && this.__exportStar) || function(m, exports) {
+    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+__exportStar(require("./erorr"), exports);
+//# sourceMappingURL=index.js.map

package/dist/http/oauth2/helpers/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../src/http/oauth2/helpers/index.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;;;;;;;;;;;;;;;AAEH,0CAAwB"}

package/dist/http/oauth2/openid/claims.d.ts

@@ -1,4 +1,4 @@
-import type { OAuth2OpenIdTokenPayload } from '@authup/kit';
-import { OAuth2SubKind } from '@authup/kit';
-export declare function resolveOpenIdClaimsFromSubEntity(subKind: OAuth2SubKind | `${OAuth2SubKind}`, attributes: Record<string, any>): Partial<OAuth2OpenIdTokenPayload>;
+import type { OpenIDTokenPayload } from '@authup/specs';
+import { OAuth2SubKind } from '@authup/specs';
+export declare function resolveOpenIdClaimsFromSubEntity(subKind: OAuth2SubKind | `${OAuth2SubKind}`, attributes: Record<string, any>): Partial<OpenIDTokenPayload>;
 //# sourceMappingURL=claims.d.ts.map

package/dist/http/oauth2/openid/claims.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"claims.d.ts","sourceRoot":"","sources":["../../../../src/http/oauth2/openid/claims.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,aAAa,CAAC;AAC5D,OAAO,EAAE,aAAa,EAAkB,MAAM,aAAa,CAAC;AAmC5D,wBAAgB,gCAAgC,CAC5C,OAAO,EAAE,aAAa,GAAG,GAAG,aAAa,EAAE,EAC3C,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,GAC/B,OAAO,CAAC,wBAAwB,CAAC,CAwDpC"}
+{"version":3,"file":"claims.d.ts","sourceRoot":"","sources":["../../../../src/http/oauth2/openid/claims.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,eAAe,CAAC;AACxD,OAAO,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AAoC9C,wBAAgB,gCAAgC,CAC5C,OAAO,EAAE,aAAa,GAAG,GAAG,aAAa,EAAE,EAC3C,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,GAC/B,OAAO,CAAC,kBAAkB,CAAC,CAwD9B"}

package/dist/http/oauth2/openid/claims.js

@@ -7,6 +7,7 @@
  */
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.resolveOpenIdClaimsFromSubEntity = resolveOpenIdClaimsFromSubEntity;
+const specs_1 = require("@authup/specs");
 const kit_1 = require("@authup/kit");
 function extractAttributesByAttributeMap(attributeMap, attributes) {
     const result = {};
@@ -29,7 +30,7 @@ function extractAttributesByAttributeMap(attributeMap, attributes) {
 }
 function resolveOpenIdClaimsFromSubEntity(subKind, attributes) {
     switch (subKind) {
-        case kit_1.OAuth2SubKind.USER: {
+        case specs_1.OAuth2SubKind.USER: {
             const attributeMap = {
                 name: 'name',
                 family_name: 'last_name',
@@ -47,7 +48,7 @@ function resolveOpenIdClaimsFromSubEntity(subKind, attributes) {
             };
             return extractAttributesByAttributeMap(attributeMap, attributes);
         }
-        case kit_1.OAuth2SubKind.CLIENT: {
+        case specs_1.OAuth2SubKind.CLIENT: {
             const attributeMap = {
                 name: 'name',
                 nickname: 'name',
@@ -61,7 +62,7 @@ function resolveOpenIdClaimsFromSubEntity(subKind, attributes) {
             };
             return extractAttributesByAttributeMap(attributeMap, attributes);
         }
-        case kit_1.OAuth2SubKind.ROBOT: {
+        case specs_1.OAuth2SubKind.ROBOT: {
             const attributeMap = {
                 name: 'name',
                 nickname: 'name',

package/dist/http/oauth2/openid/claims.js.map

@@ -1 +1 @@
-{"version":3,"file":"claims.js","sourceRoot":"","sources":["../../../../src/http/oauth2/openid/claims.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;AAsCH,4EA2DC;AA9FD,qCAA4D;AAU5D,SAAS,+BAA+B,CACpC,YAA+C,EAC/C,UAA+B;IAE/B,MAAM,MAAM,GAAuC,EAAE,CAAC;IAEtD,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;IACvC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACnC,MAAM,SAAS,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;QACxC,IAAI,OAAO,SAAS,KAAK,QAAQ,EAAE,CAAC;YAChC,IAAI,IAAA,oBAAc,EAAC,UAAU,EAAE,SAAS,CAAC,EAAE,CAAC;gBACxC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,GAAG,UAAU,CAAC,SAAS,CAAC,CAAC;YAC5C,CAAC;QACL,CAAC;aAAM,CAAC;YACJ,MAAM,CAAC,GAAG,EAAE,WAAW,CAAC,GAAG,SAAS,CAAC;YAErC,IAAI,IAAA,oBAAc,EAAC,UAAU,EAAE,GAAG,CAAC,EAAE,CAAC;gBAClC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,GAAG,WAAW,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC;YACnD,CAAC;QACL,CAAC;IACL,CAAC;IAED,OAAO,MAAM,CAAC;AAClB,CAAC;AAED,SAAgB,gCAAgC,CAC5C,OAA2C,EAC3C,UAA+B;IAE/B,QAAQ,OAAO,EAAE,CAAC;QACd,KAAK,mBAAa,CAAC,IAAI,CAAC,CAAC,CAAC;YACtB,MAAM,YAAY,GAAwB;gBACtC,IAAI,EAAE,MAAM;gBACZ,WAAW,EAAE,WAAW;gBACxB,UAAU,EAAE,YAAY;gBACxB,QAAQ,EAAE,cAAc;gBACxB,kBAAkB,EAAE,cAAc;gBAClC,UAAU,EAAE;oBACR,YAAY;oBACZ,CAAC,KAAoB,EAAE,EAAE,CAAC,CAAC,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC;wBAClD,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC;wBAC3B,KAAK,CAAC,OAAO,EAAE,CAAC;iBACvB;gBAED,KAAK,EAAE,OAAO;gBACd,cAAc,EAAE,QAAQ;aAC3B,CAAC;YAEF,OAAO,+BAA+B,CAAC,YAAiD,EAAE,UAAU,CAAC,CAAC;QAC1G,CAAC;QACD,KAAK,mBAAa,CAAC,MAAM,CAAC,CAAC,CAAC;YACxB,MAAM,YAAY,GAA0B;gBACxC,IAAI,EAAE,MAAM;gBACZ,QAAQ,EAAE,MAAM;gBAChB,kBAAkB,EAAE,MAAM;gBAC1B,UAAU,EAAE;oBACR,YAAY;oBACZ,CAAC,KAAoB,EAAE,EAAE,CAAC,CAAC,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC;wBAClD,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC;wBAC3B,KAAK,CAAC,OAAO,EAAE,CAAC;iBACvB;aAEJ,CAAC;YAEF,OAAO,+BAA+B,CAAC,YAAiD,EAAE,UAAU,CAAC,CAAC;QAC1G,CAAC;QACD,KAAK,mBAAa,CAAC,KAAK,CAAC,CAAC,CAAC;YACvB,MAAM,YAAY,GAAyB;gBACvC,IAAI,EAAE,MAAM;gBACZ,QAAQ,EAAE,MAAM;gBAChB,kBAAkB,EAAE,MAAM;gBAC1B,UAAU,EAAE;oBACR,YAAY;oBACZ,CAAC,KAAoB,EAAE,EAAE,CAAC,CAAC,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC;wBAClD,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC;wBAC3B,KAAK,CAAC,OAAO,EAAE,CAAC;iBACvB;aACJ,CAAC;YAEF,OAAO,+BAA+B,CAAC,YAAiD,EAAE,UAAU,CAAC,CAAC;QAC1G,CAAC;IACL,CAAC;IAED,OAAO,EAAE,CAAC;AACd,CAAC"}
+{"version":3,"file":"claims.js","sourceRoot":"","sources":["../../../../src/http/oauth2/openid/claims.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;AAuCH,4EA2DC;AA/FD,yCAA8C;AAC9C,qCAA6C;AAU7C,SAAS,+BAA+B,CACpC,YAA+C,EAC/C,UAA+B;IAE/B,MAAM,MAAM,GAAiC,EAAE,CAAC;IAEhD,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;IACvC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACnC,MAAM,SAAS,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;QACxC,IAAI,OAAO,SAAS,KAAK,QAAQ,EAAE,CAAC;YAChC,IAAI,IAAA,oBAAc,EAAC,UAAU,EAAE,SAAS,CAAC,EAAE,CAAC;gBACxC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,GAAG,UAAU,CAAC,SAAS,CAAC,CAAC;YAC5C,CAAC;QACL,CAAC;aAAM,CAAC;YACJ,MAAM,CAAC,GAAG,EAAE,WAAW,CAAC,GAAG,SAAS,CAAC;YAErC,IAAI,IAAA,oBAAc,EAAC,UAAU,EAAE,GAAG,CAAC,EAAE,CAAC;gBAClC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,GAAG,WAAW,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC;YACnD,CAAC;QACL,CAAC;IACL,CAAC;IAED,OAAO,MAAM,CAAC;AAClB,CAAC;AAED,SAAgB,gCAAgC,CAC5C,OAA2C,EAC3C,UAA+B;IAE/B,QAAQ,OAAO,EAAE,CAAC;QACd,KAAK,qBAAa,CAAC,IAAI,CAAC,CAAC,CAAC;YACtB,MAAM,YAAY,GAAwB;gBACtC,IAAI,EAAE,MAAM;gBACZ,WAAW,EAAE,WAAW;gBACxB,UAAU,EAAE,YAAY;gBACxB,QAAQ,EAAE,cAAc;gBACxB,kBAAkB,EAAE,cAAc;gBAClC,UAAU,EAAE;oBACR,YAAY;oBACZ,CAAC,KAAoB,EAAE,EAAE,CAAC,CAAC,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC;wBAClD,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC;wBAC3B,KAAK,CAAC,OAAO,EAAE,CAAC;iBACvB;gBAED,KAAK,EAAE,OAAO;gBACd,cAAc,EAAE,QAAQ;aAC3B,CAAC;YAEF,OAAO,+BAA+B,CAAC,YAAiD,EAAE,UAAU,CAAC,CAAC;QAC1G,CAAC;QACD,KAAK,qBAAa,CAAC,MAAM,CAAC,CAAC,CAAC;YACxB,MAAM,YAAY,GAA0B;gBACxC,IAAI,EAAE,MAAM;gBACZ,QAAQ,EAAE,MAAM;gBAChB,kBAAkB,EAAE,MAAM;gBAC1B,UAAU,EAAE;oBACR,YAAY;oBACZ,CAAC,KAAoB,EAAE,EAAE,CAAC,CAAC,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC;wBAClD,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC;wBAC3B,KAAK,CAAC,OAAO,EAAE,CAAC;iBACvB;aAEJ,CAAC;YAEF,OAAO,+BAA+B,CAAC,YAAiD,EAAE,UAAU,CAAC,CAAC;QAC1G,CAAC;QACD,KAAK,qBAAa,CAAC,KAAK,CAAC,CAAC,CAAC;YACvB,MAAM,YAAY,GAAyB;gBACvC,IAAI,EAAE,MAAM;gBACZ,QAAQ,EAAE,MAAM;gBAChB,kBAAkB,EAAE,MAAM;gBAC1B,UAAU,EAAE;oBACR,YAAY;oBACZ,CAAC,KAAoB,EAAE,EAAE,CAAC,CAAC,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC;wBAClD,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC;wBAC3B,KAAK,CAAC,OAAO,EAAE,CAAC;iBACvB;aACJ,CAAC;YAEF,OAAO,+BAA+B,CAAC,YAAiD,EAAE,UAAU,CAAC,CAAC;QAC1G,CAAC;IACL,CAAC;IAED,OAAO,EAAE,CAAC;AACd,CAAC"}

package/dist/http/oauth2/response/bearer.d.ts

@@ -1,4 +1,4 @@
-import type { OAuth2TokenGrantResponse } from '@authup/kit';
+import type { OAuth2TokenGrantResponse } from '@authup/specs';
 import type { OAuth2BearerResponseBuildContext } from './type';
 export declare function buildOAuth2BearerTokenResponse(context: OAuth2BearerResponseBuildContext): OAuth2TokenGrantResponse;
 //# sourceMappingURL=bearer.d.ts.map

package/dist/http/oauth2/response/bearer.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"bearer.d.ts","sourceRoot":"","sources":["../../../../src/http/oauth2/response/bearer.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,aAAa,CAAC;AAC5D,OAAO,KAAK,EAAE,gCAAgC,EAAE,MAAM,QAAQ,CAAC;AAE/D,wBAAgB,8BAA8B,CAC1C,OAAO,EAAE,gCAAgC,GACzC,wBAAwB,CAgC3B"}
+{"version":3,"file":"bearer.d.ts","sourceRoot":"","sources":["../../../../src/http/oauth2/response/bearer.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,eAAe,CAAC;AAC9D,OAAO,KAAK,EAAE,gCAAgC,EAAE,MAAM,QAAQ,CAAC;AAE/D,wBAAgB,8BAA8B,CAC1C,OAAO,EAAE,gCAAgC,GACzC,wBAAwB,CAgC3B"}

package/dist/http/oauth2/response/type.d.ts

@@ -1,4 +1,4 @@
-import type { OAuth2TokenPayload } from '@authup/kit';
+import type { OAuth2TokenPayload } from '@authup/specs';
 export type OAuth2BearerResponseBuildContext = {
     accessToken: string;
     accessTokenPayload?: OAuth2TokenPayload;

package/dist/http/oauth2/response/type.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"type.d.ts","sourceRoot":"","sources":["../../../../src/http/oauth2/response/type.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAC;AAEtD,MAAM,MAAM,gCAAgC,GAAG;IAC3C,WAAW,EAAE,MAAM,CAAC;IACpB,kBAAkB,CAAC,EAAE,kBAAkB,CAAC;IAExC,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,mBAAmB,CAAC,EAAE,kBAAkB,CAAC;IAEzC,OAAO,CAAC,EAAE,MAAM,CAAC;IAEjB,KAAK,CAAC,EAAE,MAAM,CAAA;CACjB,CAAC"}
+{"version":3,"file":"type.d.ts","sourceRoot":"","sources":["../../../../src/http/oauth2/response/type.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,eAAe,CAAC;AAExD,MAAM,MAAM,gCAAgC,GAAG;IAC3C,WAAW,EAAE,MAAM,CAAC;IACpB,kBAAkB,CAAC,EAAE,kBAAkB,CAAC;IAExC,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,mBAAmB,CAAC,EAAE,kBAAkB,CAAC;IAEzC,OAAO,CAAC,EAAE,MAAM,CAAC;IAEjB,KAAK,CAAC,EAAE,MAAM,CAAA;CACjB,CAAC"}

package/dist/http/oauth2/response/utils/type.d.ts

@@ -1,4 +1,4 @@
-import { OAuth2AuthorizationResponseType } from '@authup/kit';
+import { OAuth2AuthorizationResponseType } from '@authup/specs';
 import type { Request } from 'routup';
 export declare function getOauth2AuthorizeResponseTypesByRequest(request: Request): Record<`${OAuth2AuthorizationResponseType}`, boolean>;
 //# sourceMappingURL=type.d.ts.map

package/dist/http/oauth2/response/utils/type.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"type.d.ts","sourceRoot":"","sources":["../../../../../src/http/oauth2/response/utils/type.ts"],"names":[],"mappings":"AAOA,OAAO,EAAE,+BAA+B,EAAc,MAAM,aAAa,CAAC;AAG1E,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,QAAQ,CAAC;AAEtC,wBAAgB,wCAAwC,CACpD,OAAO,EAAE,OAAO,GAChB,MAAM,CAAC,GAAG,+BAA+B,EAAE,EAAE,OAAO,CAAC,CA2BxD"}
+{"version":3,"file":"type.d.ts","sourceRoot":"","sources":["../../../../../src/http/oauth2/response/utils/type.ts"],"names":[],"mappings":"AAOA,OAAO,EAAE,+BAA+B,EAAe,MAAM,eAAe,CAAC;AAG7E,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,QAAQ,CAAC;AAEtC,wBAAgB,wCAAwC,CACpD,OAAO,EAAE,OAAO,GAChB,MAAM,CAAC,GAAG,+BAA+B,EAAE,EAAE,OAAO,CAAC,CA2BxD"}

package/dist/http/oauth2/response/utils/type.js

@@ -7,26 +7,26 @@
  */
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.getOauth2AuthorizeResponseTypesByRequest = getOauth2AuthorizeResponseTypesByRequest;
-const kit_1 = require("@authup/kit");
+const specs_1 = require("@authup/specs");
 const body_1 = require("@routup/basic/body");
 const query_1 = require("@routup/basic/query");
 function getOauth2AuthorizeResponseTypesByRequest(request) {
     const data = {
-        [kit_1.OAuth2AuthorizationResponseType.CODE]: false,
-        [kit_1.OAuth2AuthorizationResponseType.TOKEN]: false,
-        [kit_1.OAuth2AuthorizationResponseType.ID_TOKEN]: false,
-        [kit_1.OAuth2AuthorizationResponseType.NONE]: false,
+        [specs_1.OAuth2AuthorizationResponseType.CODE]: false,
+        [specs_1.OAuth2AuthorizationResponseType.TOKEN]: false,
+        [specs_1.OAuth2AuthorizationResponseType.ID_TOKEN]: false,
+        [specs_1.OAuth2AuthorizationResponseType.NONE]: false,
     };
-    const availableResponseTypes = Object.values(kit_1.OAuth2AuthorizationResponseType);
+    const availableResponseTypes = Object.values(specs_1.OAuth2AuthorizationResponseType);
     const responseType = (0, body_1.useRequestBody)(request, 'response_type') ||
         (0, query_1.useRequestQuery)(request, 'response_type');
     if (typeof responseType !== 'string') {
-        throw kit_1.TokenError.responseTypeUnsupported();
+        throw specs_1.OAuth2Error.responseTypeUnsupported();
     }
     const responseTypes = responseType.split(' ');
     for (let i = 0; i < responseTypes.length; i++) {
         if (availableResponseTypes.indexOf(responseTypes[i]) === -1) {
-            throw kit_1.TokenError.responseTypeUnsupported();
+            throw specs_1.OAuth2Error.responseTypeUnsupported();
         }
         else {
             data[responseTypes[i]] = true;

package/dist/http/oauth2/response/utils/type.js.map

@@ -1 +1 @@
-{"version":3,"file":"type.js","sourceRoot":"","sources":["../../../../../src/http/oauth2/response/utils/type.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;AAOH,4FA6BC;AAlCD,qCAA0E;AAC1E,6CAAoD;AACpD,+CAAsD;AAGtD,SAAgB,wCAAwC,CACpD,OAAgB;IAEhB,MAAM,IAAI,GAA2D;QACjE,CAAC,qCAA+B,CAAC,IAAI,CAAC,EAAE,KAAK;QAC7C,CAAC,qCAA+B,CAAC,KAAK,CAAC,EAAE,KAAK;QAC9C,CAAC,qCAA+B,CAAC,QAAQ,CAAC,EAAE,KAAK;QACjD,CAAC,qCAA+B,CAAC,IAAI,CAAC,EAAE,KAAK;KAChD,CAAC;IAEF,MAAM,sBAAsB,GAAc,MAAM,CAAC,MAAM,CAAC,qCAA+B,CAAC,CAAC;IAEzF,MAAM,YAAY,GAAG,IAAA,qBAAc,EAAC,OAAO,EAAE,eAAe,CAAC;QACzD,IAAA,uBAAe,EAAC,OAAO,EAAE,eAAe,CAAC,CAAC;IAE9C,IAAI,OAAO,YAAY,KAAK,QAAQ,EAAE,CAAC;QACnC,MAAM,gBAAU,CAAC,uBAAuB,EAAE,CAAC;IAC/C,CAAC;IAED,MAAM,aAAa,GAAG,YAAY,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC9C,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,aAAa,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QAC5C,IAAI,sBAAsB,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC;YAC1D,MAAM,gBAAU,CAAC,uBAAuB,EAAE,CAAC;QAC/C,CAAC;aAAM,CAAC;YACJ,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC;QAClC,CAAC;IACL,CAAC;IAED,OAAO,IAAI,CAAC;AAChB,CAAC"}
+{"version":3,"file":"type.js","sourceRoot":"","sources":["../../../../../src/http/oauth2/response/utils/type.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;AAOH,4FA6BC;AAlCD,yCAA6E;AAC7E,6CAAoD;AACpD,+CAAsD;AAGtD,SAAgB,wCAAwC,CACpD,OAAgB;IAEhB,MAAM,IAAI,GAA2D;QACjE,CAAC,uCAA+B,CAAC,IAAI,CAAC,EAAE,KAAK;QAC7C,CAAC,uCAA+B,CAAC,KAAK,CAAC,EAAE,KAAK;QAC9C,CAAC,uCAA+B,CAAC,QAAQ,CAAC,EAAE,KAAK;QACjD,CAAC,uCAA+B,CAAC,IAAI,CAAC,EAAE,KAAK;KAChD,CAAC;IAEF,MAAM,sBAAsB,GAAc,MAAM,CAAC,MAAM,CAAC,uCAA+B,CAAC,CAAC;IAEzF,MAAM,YAAY,GAAG,IAAA,qBAAc,EAAC,OAAO,EAAE,eAAe,CAAC;QACzD,IAAA,uBAAe,EAAC,OAAO,EAAE,eAAe,CAAC,CAAC;IAE9C,IAAI,OAAO,YAAY,KAAK,QAAQ,EAAE,CAAC;QACnC,MAAM,mBAAW,CAAC,uBAAuB,EAAE,CAAC;IAChD,CAAC;IAED,MAAM,aAAa,GAAG,YAAY,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC9C,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,aAAa,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QAC5C,IAAI,sBAAsB,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC;YAC1D,MAAM,mBAAW,CAAC,uBAAuB,EAAE,CAAC;QAChD,CAAC;aAAM,CAAC;YACJ,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC;QAClC,CAAC;IACL,CAAC;IAED,OAAO,IAAI,CAAC;AAChB,CAAC"}

package/dist/http/oauth2/scope/resolve.d.ts

@@ -1,3 +1,3 @@
-import { OAuth2SubKind } from '@authup/kit';
+import { OAuth2SubKind } from '@authup/specs';
 export declare function resolveOAuth2SubAttributesForScope(subKind: OAuth2SubKind | `${OAuth2SubKind}`, scope?: string | string[]): string[];
 //# sourceMappingURL=resolve.d.ts.map

package/dist/http/oauth2/scope/resolve.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"resolve.d.ts","sourceRoot":"","sources":["../../../../src/http/oauth2/scope/resolve.ts"],"names":[],"mappings":"AAQA,OAAO,EAAE,aAAa,EAAkB,MAAM,aAAa,CAAC;AAgB5D,wBAAgB,kCAAkC,CAC9C,OAAO,EAAE,aAAa,GAAG,GAAG,aAAa,EAAE,EAC3C,KAAK,CAAC,EAAE,MAAM,GAAG,MAAM,EAAE,GACzB,MAAM,EAAE,CAwCX"}
+{"version":3,"file":"resolve.d.ts","sourceRoot":"","sources":["../../../../src/http/oauth2/scope/resolve.ts"],"names":[],"mappings":"AAUA,OAAO,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AAe9C,wBAAgB,kCAAkC,CAC9C,OAAO,EAAE,aAAa,GAAG,GAAG,aAAa,EAAE,EAC3C,KAAK,CAAC,EAAE,MAAM,GAAG,MAAM,EAAE,GACzB,MAAM,EAAE,CAwCX"}

package/dist/http/oauth2/scope/resolve.js

@@ -9,6 +9,7 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.resolveOAuth2SubAttributesForScope = resolveOAuth2SubAttributesForScope;
 const kit_1 = require("@authup/kit");
 const core_kit_1 = require("@authup/core-kit");
+const specs_1 = require("@authup/specs");
 const userFields = {
     [core_kit_1.ScopeName.IDENTITY]: ['name', 'display_name', 'last_name', 'first_name'],
     [core_kit_1.ScopeName.EMAIL]: ['email'],
@@ -24,7 +25,7 @@ function resolveOAuth2SubAttributesForScope(subKind, scope) {
     const scopes = (0, core_kit_1.transformOAuth2ScopeToArray)(scope);
     for (let i = 0; i < scopes.length; i++) {
         switch (subKind) {
-            case kit_1.OAuth2SubKind.USER: {
+            case specs_1.OAuth2SubKind.USER: {
                 if ((0, kit_1.hasOwnProperty)(userFields, scopes[i])) {
                     fields.push(...userFields[scopes[i]]);
                 }
@@ -33,7 +34,7 @@ function resolveOAuth2SubAttributesForScope(subKind, scope) {
                 }
                 break;
             }
-            case kit_1.OAuth2SubKind.ROBOT: {
+            case specs_1.OAuth2SubKind.ROBOT: {
                 if ((0, kit_1.hasOwnProperty)(robotFields, scopes[i])) {
                     fields.push(...robotFields[scopes[i]]);
                 }
@@ -42,7 +43,7 @@ function resolveOAuth2SubAttributesForScope(subKind, scope) {
                 }
                 break;
             }
-            case kit_1.OAuth2SubKind.CLIENT: {
+            case specs_1.OAuth2SubKind.CLIENT: {
                 if ((0, kit_1.hasOwnProperty)(clientFields, scopes[i])) {
                     fields.push(...clientFields[scopes[i]]);
                 }

package/dist/http/oauth2/scope/resolve.js.map

@@ -1 +1 @@
-{"version":3,"file":"resolve.js","sourceRoot":"","sources":["../../../../src/http/oauth2/scope/resolve.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;AAmBH,gFA2CC;AA3DD,qCAA4D;AAC5D,+CAA0E;AAE1E,MAAM,UAAU,GAAG;IACf,CAAC,oBAAS,CAAC,QAAQ,CAAC,EAAE,CAAC,MAAM,EAAE,cAAc,EAAE,WAAW,EAAE,YAAY,CAA0B;IAClG,CAAC,oBAAS,CAAC,KAAK,CAAC,EAAE,CAAC,OAAO,CAA0B;CACxD,CAAC;AAEF,MAAM,WAAW,GAAG;IAChB,CAAC,oBAAS,CAAC,QAAQ,CAAC,EAAE,CAAC,MAAM,CAA2B;CAC3D,CAAC;AAEF,MAAM,YAAY,GAAG;IACjB,CAAC,oBAAS,CAAC,QAAQ,CAAC,EAAE,CAAC,MAAM,CAA4B;CAC5D,CAAC;AAEF,SAAgB,kCAAkC,CAC9C,OAA2C,EAC3C,KAAyB;IAEzB,MAAM,MAAM,GAAc,EAAE,CAAC;IAE7B,MAAM,MAAM,GAAG,IAAA,sCAA2B,EAAC,KAAK,CAAC,CAAC;IAClD,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACrC,QAAQ,OAAO,EAAE,CAAC;YACd,KAAK,mBAAa,CAAC,IAAI,CAAC,CAAC,CAAC;gBACtB,IAAI,IAAA,oBAAc,EAAC,UAAU,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;oBACxC,MAAM,CAAC,IAAI,CAAC,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,CAAa,CAAC,CAAC;gBACtD,CAAC;gBAED,IAAI,MAAM,CAAC,CAAC,CAAC,KAAK,oBAAS,CAAC,MAAM,EAAE,CAAC;oBACjC,MAAM,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;gBACrD,CAAC;gBACD,MAAM;YACV,CAAC;YACD,KAAK,mBAAa,CAAC,KAAK,CAAC,CAAC,CAAC;gBACvB,IAAI,IAAA,oBAAc,EAAC,WAAW,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;oBACzC,MAAM,CAAC,IAAI,CAAC,GAAG,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC,CAAa,CAAC,CAAC;gBACvD,CAAC;gBAED,IAAI,MAAM,CAAC,CAAC,CAAC,KAAK,oBAAS,CAAC,MAAM,EAAE,CAAC;oBACjC,MAAM,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;gBACtD,CAAC;gBACD,MAAM;YACV,CAAC;YACD,KAAK,mBAAa,CAAC,MAAM,CAAC,CAAC,CAAC;gBACxB,IAAI,IAAA,oBAAc,EAAC,YAAY,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;oBAC1C,MAAM,CAAC,IAAI,CAAC,GAAG,YAAY,CAAC,MAAM,CAAC,CAAC,CAAC,CAAa,CAAC,CAAC;gBACxD,CAAC;gBAED,IAAI,MAAM,CAAC,CAAC,CAAC,KAAK,oBAAS,CAAC,MAAM,EAAE,CAAC;oBACjC,MAAM,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;gBACvD,CAAC;gBACD,MAAM;YACV,CAAC;QACL,CAAC;IACL,CAAC;IAED,OAAO,MAAM,CAAC;AAClB,CAAC"}
+{"version":3,"file":"resolve.js","sourceRoot":"","sources":["../../../../src/http/oauth2/scope/resolve.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;AAoBH,gFA2CC;AA5DD,qCAA6C;AAC7C,+CAA0E;AAC1E,yCAA8C;AAE9C,MAAM,UAAU,GAAG;IACf,CAAC,oBAAS,CAAC,QAAQ,CAAC,EAAE,CAAC,MAAM,EAAE,cAAc,EAAE,WAAW,EAAE,YAAY,CAA0B;IAClG,CAAC,oBAAS,CAAC,KAAK,CAAC,EAAE,CAAC,OAAO,CAA0B;CACxD,CAAC;AAEF,MAAM,WAAW,GAAG;IAChB,CAAC,oBAAS,CAAC,QAAQ,CAAC,EAAE,CAAC,MAAM,CAA2B;CAC3D,CAAC;AAEF,MAAM,YAAY,GAAG;IACjB,CAAC,oBAAS,CAAC,QAAQ,CAAC,EAAE,CAAC,MAAM,CAA4B;CAC5D,CAAC;AAEF,SAAgB,kCAAkC,CAC9C,OAA2C,EAC3C,KAAyB;IAEzB,MAAM,MAAM,GAAc,EAAE,CAAC;IAE7B,MAAM,MAAM,GAAG,IAAA,sCAA2B,EAAC,KAAK,CAAC,CAAC;IAClD,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACrC,QAAQ,OAAO,EAAE,CAAC;YACd,KAAK,qBAAa,CAAC,IAAI,CAAC,CAAC,CAAC;gBACtB,IAAI,IAAA,oBAAc,EAAC,UAAU,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;oBACxC,MAAM,CAAC,IAAI,CAAC,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,CAAa,CAAC,CAAC;gBACtD,CAAC;gBAED,IAAI,MAAM,CAAC,CAAC,CAAC,KAAK,oBAAS,CAAC,MAAM,EAAE,CAAC;oBACjC,MAAM,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;gBACrD,CAAC;gBACD,MAAM;YACV,CAAC;YACD,KAAK,qBAAa,CAAC,KAAK,CAAC,CAAC,CAAC;gBACvB,IAAI,IAAA,oBAAc,EAAC,WAAW,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;oBACzC,MAAM,CAAC,IAAI,CAAC,GAAG,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC,CAAa,CAAC,CAAC;gBACvD,CAAC;gBAED,IAAI,MAAM,CAAC,CAAC,CAAC,KAAK,oBAAS,CAAC,MAAM,EAAE,CAAC;oBACjC,MAAM,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;gBACtD,CAAC;gBACD,MAAM;YACV,CAAC;YACD,KAAK,qBAAa,CAAC,MAAM,CAAC,CAAC,CAAC;gBACxB,IAAI,IAAA,oBAAc,EAAC,YAAY,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;oBAC1C,MAAM,CAAC,IAAI,CAAC,GAAG,YAAY,CAAC,MAAM,CAAC,CAAC,CAAC,CAAa,CAAC,CAAC;gBACxD,CAAC;gBAED,IAAI,MAAM,CAAC,CAAC,CAAC,KAAK,oBAAS,CAAC,MAAM,EAAE,CAAC;oBACjC,MAAM,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;gBACvD,CAAC;gBACD,MAAM;YACV,CAAC;QACL,CAAC;IACL,CAAC;IAED,OAAO,MAAM,CAAC;AAClB,CAAC"}

package/dist/http/oauth2/token/builder/access-token.d.ts

@@ -1,4 +1,4 @@
-import type { OAuth2TokenPayload } from '@authup/kit';
+import type { OAuth2TokenPayload } from '@authup/specs';
 import type { OAuth2AccessTokenBuildContext } from './type';
 export declare function buildOAuth2AccessTokenPayload(context: OAuth2AccessTokenBuildContext): OAuth2TokenPayload;
 //# sourceMappingURL=access-token.d.ts.map

package/dist/http/oauth2/token/builder/access-token.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"access-token.d.ts","sourceRoot":"","sources":["../../../../../src/http/oauth2/token/builder/access-token.ts"],"names":[],"mappings":"AAQA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAC;AAEtD,OAAO,KAAK,EAAE,6BAA6B,EAAE,MAAM,QAAQ,CAAC;AAE5D,wBAAgB,6BAA6B,CACzC,OAAO,EAAE,6BAA6B,GACtC,kBAAkB,CAerB"}
+{"version":3,"file":"access-token.d.ts","sourceRoot":"","sources":["../../../../../src/http/oauth2/token/builder/access-token.ts"],"names":[],"mappings":"AAQA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,eAAe,CAAC;AAExD,OAAO,KAAK,EAAE,6BAA6B,EAAE,MAAM,QAAQ,CAAC;AAE5D,wBAAgB,6BAA6B,CACzC,OAAO,EAAE,6BAA6B,GACtC,kBAAkB,CAerB"}

package/dist/http/oauth2/token/builder/access-token.js

@@ -8,10 +8,10 @@
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.buildOAuth2AccessTokenPayload = buildOAuth2AccessTokenPayload;
 const node_crypto_1 = require("node:crypto");
-const kit_1 = require("@authup/kit");
+const specs_1 = require("@authup/specs");
 function buildOAuth2AccessTokenPayload(context) {
     return {
-        kind: kit_1.OAuth2TokenKind.ACCESS,
+        kind: specs_1.OAuth2TokenKind.ACCESS,
         jti: (0, node_crypto_1.randomUUID)(),
         iss: context.issuer,
         sub: context.sub,

package/dist/http/oauth2/token/builder/access-token.js.map

@@ -1 +1 @@
-{"version":3,"file":"access-token.js","sourceRoot":"","sources":["../../../../../src/http/oauth2/token/builder/access-token.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;AAOH,sEAiBC;AAtBD,6CAAyC;AAEzC,qCAA8C;AAG9C,SAAgB,6BAA6B,CACzC,OAAsC;IAEtC,OAAO;QACH,IAAI,EAAE,qBAAe,CAAC,MAAM;QAC5B,GAAG,EAAE,IAAA,wBAAU,GAAE;QACjB,GAAG,EAAE,OAAO,CAAC,MAAM;QACnB,GAAG,EAAE,OAAO,CAAC,GAAG;QAChB,QAAQ,EAAE,OAAO,CAAC,OAAO;QACzB,cAAc,EAAE,OAAO,CAAC,aAAa;QACrC,GAAG,EAAE,OAAO,CAAC,QAAQ;QACrB,SAAS,EAAE,OAAO,CAAC,QAAQ;QAC3B,QAAQ,EAAE,OAAO,CAAC,OAAO;QACzB,UAAU,EAAE,OAAO,CAAC,SAAS;QAC7B,GAAG,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,IAAI,EAAE,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,MAAM,IAAI,IAAI,CAAC;QACvE,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACrD,CAAC;AACN,CAAC"}
+{"version":3,"file":"access-token.js","sourceRoot":"","sources":["../../../../../src/http/oauth2/token/builder/access-token.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;AAOH,sEAiBC;AAtBD,6CAAyC;AAEzC,yCAAgD;AAGhD,SAAgB,6BAA6B,CACzC,OAAsC;IAEtC,OAAO;QACH,IAAI,EAAE,uBAAe,CAAC,MAAM;QAC5B,GAAG,EAAE,IAAA,wBAAU,GAAE;QACjB,GAAG,EAAE,OAAO,CAAC,MAAM;QACnB,GAAG,EAAE,OAAO,CAAC,GAAG;QAChB,QAAQ,EAAE,OAAO,CAAC,OAAO;QACzB,cAAc,EAAE,OAAO,CAAC,aAAa;QACrC,GAAG,EAAE,OAAO,CAAC,QAAQ;QACrB,SAAS,EAAE,OAAO,CAAC,QAAQ;QAC3B,QAAQ,EAAE,OAAO,CAAC,OAAO;QACzB,UAAU,EAAE,OAAO,CAAC,SAAS;QAC7B,GAAG,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,IAAI,EAAE,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,MAAM,IAAI,IAAI,CAAC;QACvE,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACrD,CAAC;AACN,CAAC"}

package/dist/http/oauth2/token/builder/id-token.d.ts

@@ -1,5 +1,5 @@
-import type { OAuth2OpenIdTokenPayload } from '@authup/kit';
+import type { OpenIDTokenPayload } from '@authup/specs';
 import type { OAuth2OpenIdTokenBuildContext } from './type';
-export declare function buildOpenIdTokenPayload(context: OAuth2OpenIdTokenBuildContext): OAuth2OpenIdTokenPayload;
-export declare function extendOpenIdTokenPayload(payload: OAuth2OpenIdTokenPayload): Promise<OAuth2OpenIdTokenPayload>;
+export declare function buildOpenIdTokenPayload(context: OAuth2OpenIdTokenBuildContext): OpenIDTokenPayload;
+export declare function extendOpenIdTokenPayload(payload: OpenIDTokenPayload): Promise<OpenIDTokenPayload>;
 //# sourceMappingURL=id-token.d.ts.map

package/dist/http/oauth2/token/builder/id-token.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"id-token.d.ts","sourceRoot":"","sources":["../../../../../src/http/oauth2/token/builder/id-token.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,aAAa,CAAC;AAK5D,OAAO,KAAK,EAAE,6BAA6B,EAAE,MAAM,QAAQ,CAAC;AAE5D,wBAAgB,uBAAuB,CACnC,OAAO,EAAE,6BAA6B,GACtC,wBAAwB,CAU3B;AAED,wBAAsB,wBAAwB,CAC1C,OAAO,EAAE,wBAAwB,GACjC,OAAO,CAAC,wBAAwB,CAAC,CAcpC"}
+{"version":3,"file":"id-token.d.ts","sourceRoot":"","sources":["../../../../../src/http/oauth2/token/builder/id-token.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,eAAe,CAAC;AAKxD,OAAO,KAAK,EAAE,6BAA6B,EAAE,MAAM,QAAQ,CAAC;AAE5D,wBAAgB,uBAAuB,CACnC,OAAO,EAAE,6BAA6B,GACtC,kBAAkB,CAUrB;AAED,wBAAsB,wBAAwB,CAC1C,OAAO,EAAE,kBAAkB,GAC3B,OAAO,CAAC,kBAAkB,CAAC,CAc9B"}

package/dist/http/oauth2/token/builder/id-token.js

@@ -8,7 +8,7 @@
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.buildOpenIdTokenPayload = buildOpenIdTokenPayload;
 exports.extendOpenIdTokenPayload = extendOpenIdTokenPayload;
-const kit_1 = require("@authup/kit");
+const specs_1 = require("@authup/specs");
 const openid_1 = require("../../openid");
 const sub_1 = require("../sub");
 const access_token_1 = require("./access-token");
@@ -16,7 +16,7 @@ function buildOpenIdTokenPayload(context) {
     const utc = Math.floor(new Date().getTime() / 1000);
     return {
         ...(0, access_token_1.buildOAuth2AccessTokenPayload)(context),
-        kind: kit_1.OAuth2TokenKind.ID_TOKEN,
+        kind: specs_1.OAuth2TokenKind.ID_TOKEN,
         auth_time: utc,
         exp: utc + (context.maxAge || 3600),
         updated_at: utc,

package/dist/http/oauth2/token/builder/id-token.js.map

@@ -1 +1 @@
-{"version":3,"file":"id-token.js","sourceRoot":"","sources":["../../../../../src/http/oauth2/token/builder/id-token.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;AASH,0DAYC;AAED,4DAgBC;AApCD,qCAA8C;AAC9C,yCAAgE;AAChE,gCAA6C;AAC7C,iDAA+D;AAG/D,SAAgB,uBAAuB,CACnC,OAAsC;IAEtC,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,IAAI,EAAE,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,CAAC;IAEpD,OAAO;QACH,GAAG,IAAA,4CAA6B,EAAC,OAAO,CAAC;QACzC,IAAI,EAAE,qBAAe,CAAC,QAAQ;QAC9B,SAAS,EAAE,GAAG;QACd,GAAG,EAAE,GAAG,GAAG,CAAC,OAAO,CAAC,MAAM,IAAI,IAAI,CAAC;QACnC,UAAU,EAAE,GAAG;KAClB,CAAC;AACN,CAAC;AAEM,KAAK,UAAU,wBAAwB,CAC1C,OAAiC;IAEjC,IAAI,CAAC,OAAO,CAAC,QAAQ,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC;QACpC,OAAO,OAAO,CAAC;IACnB,CAAC;IAED,MAAM,MAAM,GAAuC,IAAA,yCAAgC,EAC/E,OAAO,CAAC,QAAQ,EAChB,MAAM,IAAA,yBAAmB,EAAC,OAAO,CAAC,QAAQ,EAAE,OAAO,CAAC,GAAG,EAAE,OAAO,CAAC,KAAK,CAAC,CAC1E,CAAC;IAEF,OAAO;QACH,GAAG,OAAO;QACV,GAAG,MAAM;KACZ,CAAC;AACN,CAAC"}
+{"version":3,"file":"id-token.js","sourceRoot":"","sources":["../../../../../src/http/oauth2/token/builder/id-token.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;AASH,0DAYC;AAED,4DAgBC;AApCD,yCAAgD;AAChD,yCAAgE;AAChE,gCAA6C;AAC7C,iDAA+D;AAG/D,SAAgB,uBAAuB,CACnC,OAAsC;IAEtC,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,IAAI,EAAE,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,CAAC;IAEpD,OAAO;QACH,GAAG,IAAA,4CAA6B,EAAC,OAAO,CAAC;QACzC,IAAI,EAAE,uBAAe,CAAC,QAAQ;QAC9B,SAAS,EAAE,GAAG;QACd,GAAG,EAAE,GAAG,GAAG,CAAC,OAAO,CAAC,MAAM,IAAI,IAAI,CAAC;QACnC,UAAU,EAAE,GAAG;KAClB,CAAC;AACN,CAAC;AAEM,KAAK,UAAU,wBAAwB,CAC1C,OAA2B;IAE3B,IAAI,CAAC,OAAO,CAAC,QAAQ,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC;QACpC,OAAO,OAAO,CAAC;IACnB,CAAC;IAED,MAAM,MAAM,GAAiC,IAAA,yCAAgC,EACzE,OAAO,CAAC,QAAQ,EAChB,MAAM,IAAA,yBAAmB,EAAC,OAAO,CAAC,QAAQ,EAAE,OAAO,CAAC,GAAG,EAAE,OAAO,CAAC,KAAK,CAAC,CAC1E,CAAC;IAEF,OAAO;QACH,GAAG,OAAO;QACV,GAAG,MAAM;KACZ,CAAC;AACN,CAAC"}

package/dist/http/oauth2/token/builder/refresh-token.d.ts

@@ -1,4 +1,4 @@
-import type { OAuth2TokenPayload } from '@authup/kit';
+import type { OAuth2TokenPayload } from '@authup/specs';
 import type { OAuth2RefreshTokenBuildContext } from './type';
 export declare function buildOAuth2RefreshTokenPayload(context: OAuth2RefreshTokenBuildContext): OAuth2TokenPayload;
 //# sourceMappingURL=refresh-token.d.ts.map

package/dist/http/oauth2/token/builder/refresh-token.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"refresh-token.d.ts","sourceRoot":"","sources":["../../../../../src/http/oauth2/token/builder/refresh-token.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAC;AAGtD,OAAO,KAAK,EAAE,8BAA8B,EAAE,MAAM,QAAQ,CAAC;AAE7D,wBAAgB,8BAA8B,CAC1C,OAAO,EAAE,8BAA8B,GACvC,kBAAkB,CAKrB"}
+{"version":3,"file":"refresh-token.d.ts","sourceRoot":"","sources":["../../../../../src/http/oauth2/token/builder/refresh-token.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,eAAe,CAAC;AAGxD,OAAO,KAAK,EAAE,8BAA8B,EAAE,MAAM,QAAQ,CAAC;AAE7D,wBAAgB,8BAA8B,CAC1C,OAAO,EAAE,8BAA8B,GACvC,kBAAkB,CAKrB"}

package/dist/http/oauth2/token/builder/refresh-token.js

@@ -7,12 +7,12 @@
  */
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.buildOAuth2RefreshTokenPayload = buildOAuth2RefreshTokenPayload;
-const kit_1 = require("@authup/kit");
+const specs_1 = require("@authup/specs");
 const access_token_1 = require("./access-token");
 function buildOAuth2RefreshTokenPayload(context) {
     return {
         ...(0, access_token_1.buildOAuth2AccessTokenPayload)(context),
-        kind: kit_1.OAuth2TokenKind.REFRESH,
+        kind: specs_1.OAuth2TokenKind.REFRESH,
     };
 }
 //# sourceMappingURL=refresh-token.js.map

package/dist/http/oauth2/token/builder/refresh-token.js.map

@@ -1 +1 @@
-{"version":3,"file":"refresh-token.js","sourceRoot":"","sources":["../../../../../src/http/oauth2/token/builder/refresh-token.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;AAOH,wEAOC;AAXD,qCAA8C;AAC9C,iDAA+D;AAG/D,SAAgB,8BAA8B,CAC1C,OAAuC;IAEvC,OAAO;QACH,GAAG,IAAA,4CAA6B,EAAC,OAAO,CAAC;QACzC,IAAI,EAAE,qBAAe,CAAC,OAAO;KAChC,CAAC;AACN,CAAC"}
+{"version":3,"file":"refresh-token.js","sourceRoot":"","sources":["../../../../../src/http/oauth2/token/builder/refresh-token.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;AAOH,wEAOC;AAXD,yCAAgD;AAChD,iDAA+D;AAG/D,SAAgB,8BAA8B,CAC1C,OAAuC;IAEvC,OAAO;QACH,GAAG,IAAA,4CAA6B,EAAC,OAAO,CAAC;QACzC,IAAI,EAAE,uBAAe,CAAC,OAAO;KAChC,CAAC;AACN,CAAC"}

package/dist/http/oauth2/token/builder/type.d.ts

@@ -1,4 +1,4 @@
-import type { OAuth2SubKind } from '@authup/kit';
+import type { OAuth2SubKind } from '@authup/specs';
 export type OAuth2AccessTokenBuildContext = {
     issuer: string;
     sub: string;

package/dist/http/oauth2/token/builder/type.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"type.d.ts","sourceRoot":"","sources":["../../../../../src/http/oauth2/token/builder/type.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAEjD,MAAM,MAAM,6BAA6B,GAAG;IACxC,MAAM,EAAE,MAAM,CAAC;IAEf,GAAG,EAAE,MAAM,CAAC;IACZ,OAAO,EAAE,GAAG,aAAa,EAAE,CAAC;IAE5B,OAAO,EAAE,MAAM,CAAC;IAEhB,SAAS,EAAE,MAAM,CAAC;IAElB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,QAAQ,CAAC,EAAE,MAAM,CAAC;IAElB,aAAa,EAAE,MAAM,CAAC;IAEtB,MAAM,CAAC,EAAE,MAAM,CAAA;CAClB,CAAC;AAEF,MAAM,MAAM,6BAA6B,GAAG,6BAA6B,CAAC;AAE1E,MAAM,MAAM,8BAA8B,GAAG,6BAA6B,CAAC"}
+{"version":3,"file":"type.d.ts","sourceRoot":"","sources":["../../../../../src/http/oauth2/token/builder/type.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AAEnD,MAAM,MAAM,6BAA6B,GAAG;IACxC,MAAM,EAAE,MAAM,CAAC;IAEf,GAAG,EAAE,MAAM,CAAC;IACZ,OAAO,EAAE,GAAG,aAAa,EAAE,CAAC;IAE5B,OAAO,EAAE,MAAM,CAAC;IAEhB,SAAS,EAAE,MAAM,CAAC;IAElB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,QAAQ,CAAC,EAAE,MAAM,CAAC;IAElB,aAAa,EAAE,MAAM,CAAC;IAEtB,MAAM,CAAC,EAAE,MAAM,CAAA;CAClB,CAAC;AAEF,MAAM,MAAM,6BAA6B,GAAG,6BAA6B,CAAC;AAE1E,MAAM,MAAM,8BAA8B,GAAG,6BAA6B,CAAC"}

package/dist/http/oauth2/token/index.d.ts

@@ -1,5 +1,4 @@
 export * from './builder';
-export * from './permissions';
 export * from './sub';
 export * from './module';
 //# sourceMappingURL=index.d.ts.map

package/dist/http/oauth2/token/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/http/oauth2/token/index.ts"],"names":[],"mappings":"AAOA,cAAc,WAAW,CAAC;AAC1B,cAAc,eAAe,CAAC;AAC9B,cAAc,OAAO,CAAC;AACtB,cAAc,UAAU,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/http/oauth2/token/index.ts"],"names":[],"mappings":"AAOA,cAAc,WAAW,CAAC;AAC1B,cAAc,OAAO,CAAC;AACtB,cAAc,UAAU,CAAC"}

package/dist/http/oauth2/token/index.js

@@ -21,7 +21,6 @@ var __exportStar = (this && this.__exportStar) || function(m, exports) {
 };
 Object.defineProperty(exports, "__esModule", { value: true });
 __exportStar(require("./builder"), exports);
-__exportStar(require("./permissions"), exports);
 __exportStar(require("./sub"), exports);
 __exportStar(require("./module"), exports);
 //# sourceMappingURL=index.js.map

package/dist/http/oauth2/token/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../src/http/oauth2/token/index.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;;;;;;;;;;;;;;;AAEH,4CAA0B;AAC1B,gDAA8B;AAC9B,wCAAsB;AACtB,2CAAyB"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../src/http/oauth2/token/index.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;;;;;;;;;;;;;;;AAEH,4CAA0B;AAC1B,wCAAsB;AACtB,2CAAyB"}

package/dist/http/oauth2/token/module.d.ts

@@ -1,5 +1,7 @@
-import type { OAuth2TokenPayload } from '@authup/kit';
+import type { OAuth2TokenPayload } from '@authup/specs';
 import type { Cache, CacheSetOptions } from '@authup/server-kit';
+import type { FindOptionsWhere } from 'typeorm';
+import { KeyEntity } from '../../../database/domains';
 type OAuth2TokenManagerVerifyOptions = {
     skipActiveCheck?: boolean;
 };
@@ -10,8 +12,16 @@ type OAuth2TokenManagerSingResult<T> = {
 export declare class OAuth2TokenManager {
     protected cache: Cache;
     constructor();
+    /**
+     * @throws JWTError
+     * @throws JWKError
+     *
+     * @param token
+     * @param options
+     */
     verify(token: string, options?: OAuth2TokenManagerVerifyOptions): Promise<OAuth2TokenPayload>;
     sign<T extends OAuth2TokenPayload>(payload: T): Promise<OAuth2TokenManagerSingResult<T>>;
+    useKey(where: FindOptionsWhere<KeyEntity>): Promise<KeyEntity>;
     setInactive(token: string, options?: CacheSetOptions): Promise<void>;
     isActive(token: string): Promise<boolean>;
     /**

package/dist/http/oauth2/token/module.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"module.d.ts","sourceRoot":"","sources":["../../../../src/http/oauth2/token/module.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAC;AAEtD,OAAO,KAAK,EACR,KAAK,EACL,eAAe,EAClB,MAAM,oBAAoB,CAAC;AAS5B,KAAK,+BAA+B,GAAG;IACnC,eAAe,CAAC,EAAE,OAAO,CAAC;CAC7B,CAAC;AAEF,KAAK,4BAA4B,CAAC,CAAC,IAAI;IACnC,OAAO,EAAE,CAAC,CAAC;IACX,KAAK,EAAE,MAAM,CAAA;CAChB,CAAC;AAEF,qBAAa,kBAAkB;IAC3B,SAAS,CAAC,KAAK,EAAG,KAAK,CAAC;;IAQlB,MAAM,CACR,KAAK,EAAE,MAAM,EACb,OAAO,GAAE,+BAAoC;IAqC3C,IAAI,CAAC,CAAC,SAAS,kBAAkB,EACnC,OAAO,EAAE,CAAC,GACV,OAAO,CAAC,4BAA4B,CAAC,CAAC,CAAC,CAAC;IAyBtC,WAAW,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,GAAE,eAAoB;IAoBxD,QAAQ,CAAC,KAAK,EAAE,MAAM,GAAI,OAAO,CAAC,OAAO,CAAC;IAahD;;;;;OAKG;cACa,iBAAiB,CAC7B,KAAK,EAAE,MAAM,EACb,IAAI,EAAE,kBAAkB,GACzB,OAAO,CAAC,IAAI,CAAC;IAYhB;;;;OAIG;cACa,mBAAmB,CAC/B,GAAG,EAAE,MAAM,GACX,OAAO,CAAC,kBAAkB,GAAG,SAAS,CAAC;IAQ3C;;;OAGG;IACH,SAAS,CAAC,2BAA2B,CAAC,GAAG,EAAE,MAAM;CAKpD"}
+{"version":3,"file":"module.d.ts","sourceRoot":"","sources":["../../../../src/http/oauth2/token/module.ts"],"names":[],"mappings":"AAUA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,eAAe,CAAC;AACxD,OAAO,KAAK,EACR,KAAK,EACL,eAAe,EAGlB,MAAM,oBAAoB,CAAC;AAW5B,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,SAAS,CAAC;AAEhD,OAAO,EAAE,SAAS,EAAE,MAAM,2BAA2B,CAAC;AAGtD,KAAK,+BAA+B,GAAG;IACnC,eAAe,CAAC,EAAE,OAAO,CAAC;CAC7B,CAAC;AAEF,KAAK,4BAA4B,CAAC,CAAC,IAAI;IACnC,OAAO,EAAE,CAAC,CAAC;IACX,KAAK,EAAE,MAAM,CAAA;CAChB,CAAC;AAEF,qBAAa,kBAAkB;IAC3B,SAAS,CAAC,KAAK,EAAG,KAAK,CAAC;;IAQxB;;;;;;OAMG;IACG,MAAM,CACR,KAAK,EAAE,MAAM,EACb,OAAO,GAAE,+BAAoC;IAuE3C,IAAI,CAAC,CAAC,SAAS,kBAAkB,EACnC,OAAO,EAAE,CAAC,GACV,OAAO,CAAC,4BAA4B,CAAC,CAAC,CAAC,CAAC;IAqDtC,MAAM,CAAC,KAAK,EAAE,gBAAgB,CAAC,SAAS,CAAC;IA6CzC,WAAW,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,GAAE,eAAoB;IAoBxD,QAAQ,CAAC,KAAK,EAAE,MAAM,GAAI,OAAO,CAAC,OAAO,CAAC;IAahD;;;;;OAKG;cACa,iBAAiB,CAC7B,KAAK,EAAE,MAAM,EACb,IAAI,EAAE,kBAAkB,GACzB,OAAO,CAAC,IAAI,CAAC;IAYhB;;;;OAIG;cACa,mBAAmB,CAC/B,GAAG,EAAE,MAAM,GACX,OAAO,CAAC,kBAAkB,GAAG,SAAS,CAAC;IAQ3C;;;OAGG;IACH,SAAS,CAAC,2BAA2B,CAAC,GAAG,EAAE,MAAM;CAKpD"}

package/dist/http/oauth2/token/module.js

@@ -7,8 +7,9 @@
  */
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.OAuth2TokenManager = void 0;
-const kit_1 = require("@authup/kit");
+const specs_1 = require("@authup/specs");
 const server_kit_1 = require("@authup/server-kit");
+const typeorm_extension_1 = require("typeorm-extension");
 const domains_1 = require("../../../database/domains");
 const constants_1 = require("../constants");
 class OAuth2TokenManager {
@@ -16,51 +17,138 @@ class OAuth2TokenManager {
         this.cache = (0, server_kit_1.useCache)();
     }
     // -----------------------------------------------------
+    /**
+     * @throws JWTError
+     * @throws JWKError
+     *
+     * @param token
+     * @param options
+     */
     async verify(token, options = {}) {
         if (!token) {
-            throw kit_1.TokenError.requestInvalid('The token is not defined.');
+            throw specs_1.JWTError.invalid();
         }
         if (!options.skipActiveCheck) {
             const isActive = await this.isActive(token);
             if (!isActive) {
-                throw kit_1.TokenError.inactive();
+                throw specs_1.JWTError.notActive();
             }
         }
-        const payload = await this.getPayloadFromCache(token);
+        let payload = await this.getPayloadFromCache(token);
         if (payload) {
             return payload;
         }
         const header = (0, server_kit_1.extractTokenHeader)(token);
         if (!header.kid) {
-            throw kit_1.TokenError.payloadInvalid('The jwk (kid) is invalid.');
+            throw specs_1.JWTError.headerPropertyInvalid('kid');
         }
-        const entity = await (0, domains_1.useKey)({
+        const entity = await this.useKey({
             id: header.kid,
         });
-        if (entity) {
-            const payload = await (0, domains_1.verifyOAuth2TokenWithKey)(token, entity);
-            await this.addPayloadToCache(token, payload);
-            return payload;
+        if (!entity) {
+            throw specs_1.JWKError.notFound(header.kid);
+        }
+        if (entity.type === specs_1.JWKType.OCT) {
+            payload = await (0, server_kit_1.verifyToken)(token, {
+                type: specs_1.JWKType.OCT,
+                key: entity.decryption_key,
+            });
+        }
+        else if (entity.type === specs_1.JWKType.EC) {
+            payload = await (0, server_kit_1.verifyToken)(token, {
+                type: entity.type,
+                key: entity.encryption_key,
+                ...(entity.signature_algorithm ?
+                    { algorithms: [entity.signature_algorithm] } :
+                    []),
+            });
         }
-        throw kit_1.TokenError.payloadInvalid('The referenced jwk (kid) does not exist.');
+        else {
+            payload = await (0, server_kit_1.verifyToken)(token, {
+                type: entity.type,
+                key: entity.encryption_key,
+                ...(entity.signature_algorithm ?
+                    { algorithms: [entity.signature_algorithm] } :
+                    []),
+            });
+        }
+        await this.addPayloadToCache(token, payload);
+        return payload;
     }
     async sign(payload) {
-        const key = await (0, domains_1.useKey)({
+        const key = await this.useKey({
             realm_id: payload.realm_id,
         });
         if (!key) {
-            throw kit_1.TokenError.payloadInvalid('No jwk found to sign the token.');
+            throw specs_1.JWKError.notFoundForRealm(payload.realm_id, payload.realm_name);
         }
         if (!payload.exp) {
             payload.exp = Math.floor(new Date().getTime() / 1000) + 3600;
         }
-        const token = await (0, domains_1.signOAuth2TokenWithKey)(payload, key, { keyId: key.id });
+        let token;
+        if (key.type === specs_1.JWKType.OCT) {
+            token = await (0, server_kit_1.signToken)(payload, {
+                type: specs_1.JWKType.OCT,
+                key: key.decryption_key,
+                keyId: key.id,
+            });
+        }
+        else if (key.type === specs_1.JWKType.EC) {
+            token = await (0, server_kit_1.signToken)(payload, {
+                type: key.type,
+                key: key.decryption_key,
+                algorithm: key.signature_algorithm,
+                keyId: key.id,
+            });
+        }
+        else {
+            token = await (0, server_kit_1.signToken)(payload, {
+                type: key.type,
+                key: key.decryption_key,
+                algorithm: key.signature_algorithm,
+                keyId: key.id,
+            });
+        }
         await this.addPayloadToCache(token, payload);
         return {
             payload,
             token,
         };
     }
+    async useKey(where) {
+        const dataSource = await (0, typeorm_extension_1.useDataSource)();
+        const repository = dataSource.getRepository(domains_1.KeyEntity);
+        let entity = await repository.findOne({
+            select: {
+                id: true,
+                type: true,
+                signature_algorithm: true,
+                encryption_key: true,
+                decryption_key: true,
+            },
+            where,
+        });
+        if (entity) {
+            return entity;
+        }
+        if (typeof where.realm_id !== 'string') {
+            return undefined;
+        }
+        const keyPair = await (0, server_kit_1.createAsymmetricKeyPair)({
+            name: server_kit_1.CryptoAsymmetricAlgorithm.RSASSA_PKCS1_V1_5,
+        });
+        const privateKeyContainer = new server_kit_1.CryptoKeyContainer(keyPair.privateKey);
+        const publicKeyContainer = new server_kit_1.CryptoKeyContainer(keyPair.publicKey);
+        entity = repository.create({
+            type: specs_1.JWKType.RSA,
+            decryption_key: await privateKeyContainer.toBase64(),
+            encryption_key: await publicKeyContainer.toBase64(),
+            realm_id: where.realm_id,
+            signature_algorithm: `${specs_1.JWTAlgorithm.RS256}`,
+        });
+        await repository.save(entity);
+        return entity;
+    }
     // -----------------------------------------------------
     async setInactive(token, options = {}) {
         if (!options.ttl) {