@authup/server-core 1.0.0-beta.23 → 1.0.0-beta.25

package/dist/path.js

@@ -0,0 +1,29 @@
+"use strict";
+/*
+ * Copyright (c) 2023-2024.
+ * Author Peter Placzek (tada5hi)
+ * For the full copyright and license information,
+ * view the LICENSE file that was distributed with this source code.
+ */
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.resolveRootPath = resolveRootPath;
+exports.resolvePackagePath = resolvePackagePath;
+exports.getSrcPath = getSrcPath;
+exports.getDistPath = getDistPath;
+const node_path_1 = __importDefault(require("node:path"));
+function resolveRootPath() {
+    return __dirname;
+}
+function resolvePackagePath() {
+    return node_path_1.default.resolve(resolveRootPath(), '..');
+}
+function getSrcPath() {
+    return node_path_1.default.join(resolvePackagePath(), 'src');
+}
+function getDistPath() {
+    return node_path_1.default.join(resolvePackagePath(), 'dist');
+}
+//# sourceMappingURL=path.js.map

package/dist/path.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"path.js","sourceRoot":"","sources":["../src/path.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;;;;AAIH,0CAEC;AAED,gDAEC;AAED,gCAEC;AAED,kCAEC;AAhBD,0DAA6B;AAE7B,SAAgB,eAAe;IAC3B,OAAO,SAAS,CAAC;AACrB,CAAC;AAED,SAAgB,kBAAkB;IAC9B,OAAO,mBAAI,CAAC,OAAO,CAAC,eAAe,EAAE,EAAE,IAAI,CAAC,CAAC;AACjD,CAAC;AAED,SAAgB,UAAU;IACtB,OAAO,mBAAI,CAAC,IAAI,CAAC,kBAAkB,EAAE,EAAE,KAAK,CAAC,CAAC;AAClD,CAAC;AAED,SAAgB,WAAW;IACvB,OAAO,mBAAI,CAAC,IAAI,CAAC,kBAAkB,EAAE,EAAE,MAAM,CAAC,CAAC;AACnD,CAAC"}

package/dist/security/permission/provider/db.d.ts

@@ -1,9 +1,10 @@
-import type { CompositePolicy, PermissionGetOptions, PermissionItem, PermissionProvider, PolicyWithType } from '@authup/kit';
+import type { CompositePolicy, PermissionGetOptions, PermissionItem, PermissionProvider, PolicyWithType } from '@authup/access';
 import type { DataSource, Repository } from 'typeorm';
-import { PermissionEntity } from '../../../database/domains';
+import { PermissionEntity, PolicyRepository } from '../../../database/domains';
 export declare class PermissionDBProvider implements PermissionProvider {
     protected dataSource: DataSource;
     protected repository: Repository<PermissionEntity>;
+    protected policyRepository: PolicyRepository;
     constructor(dataSource: DataSource);
     get(options: PermissionGetOptions): Promise<PermissionItem | undefined>;
     getDefaultPolicy(): PolicyWithType<CompositePolicy>;

package/dist/security/permission/provider/db.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"db.d.ts","sourceRoot":"","sources":["../../../../src/security/permission/provider/db.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EACR,eAAe,EAGf,oBAAoB,EACpB,cAAc,EACd,kBAAkB,EAClB,cAAc,EAEjB,MAAM,aAAa,CAAC;AAGrB,OAAO,KAAK,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACtD,OAAO,EAAe,gBAAgB,EAAE,MAAM,2BAA2B,CAAC;AAE1E,qBAAa,oBAAqB,YAAW,kBAAkB;IAC3D,SAAS,CAAC,UAAU,EAAE,UAAU,CAAC;IAEjC,SAAS,CAAC,UAAU,EAAG,UAAU,CAAC,gBAAgB,CAAC,CAAC;gBAExC,UAAU,EAAE,UAAU;IAK5B,GAAG,CAAC,OAAO,EAAE,oBAAoB,GAAI,OAAO,CAAC,cAAc,GAAG,SAAS,CAAC;IAgC9E,gBAAgB;CA4BnB"}
+{"version":3,"file":"db.d.ts","sourceRoot":"","sources":["../../../../src/security/permission/provider/db.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EACR,eAAe,EAGf,oBAAoB,EACpB,cAAc,EACd,kBAAkB,EAClB,cAAc,EAEjB,MAAM,gBAAgB,CAAC;AAIxB,OAAO,KAAK,EAAE,UAAU,EAAoB,UAAU,EAAE,MAAM,SAAS,CAAC;AACxE,OAAO,EAAe,gBAAgB,EAAE,gBAAgB,EAAE,MAAM,2BAA2B,CAAC;AAE5F,qBAAa,oBAAqB,YAAW,kBAAkB;IAC3D,SAAS,CAAC,UAAU,EAAE,UAAU,CAAC;IAEjC,SAAS,CAAC,UAAU,EAAG,UAAU,CAAC,gBAAgB,CAAC,CAAC;IAEpD,SAAS,CAAC,gBAAgB,EAAE,gBAAgB,CAAC;gBAEjC,UAAU,EAAE,UAAU;IAM5B,GAAG,CAAC,OAAO,EAAE,oBAAoB,GAAI,OAAO,CAAC,cAAc,GAAG,SAAS,CAAC;IAkD9E,gBAAgB;CA4BnB"}

package/dist/security/permission/provider/db.js

@@ -7,39 +7,55 @@
  */
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.PermissionDBProvider = void 0;
-const kit_1 = require("@authup/kit");
+const access_1 = require("@authup/access");
 const server_kit_1 = require("@authup/server-kit");
 const domains_1 = require("../../../database/domains");
 class PermissionDBProvider {
     constructor(dataSource) {
         this.dataSource = dataSource;
         this.repository = this.dataSource.getRepository(domains_1.PermissionEntity);
+        this.policyRepository = new domains_1.PolicyRepository(this.dataSource);
     }
     async get(options) {
+        const where = {
+            name: options.name,
+        };
+        if (options.clientId) {
+            where.client_id = options.clientId;
+        }
+        if (options.realmId) {
+            where.realm_id = options.realmId;
+        }
         const entity = await this.repository.findOne({
-            where: {
-                name: options.name,
-                ...(options.realmId ? { realm_id: options.realmId } : {}),
-            },
+            where,
             relations: [
                 'policy',
-                'policy.children',
             ],
             cache: {
                 id: (0, server_kit_1.buildCacheKey)({
                     prefix: domains_1.CachePrefix.PERMISSION,
-                    key: options.name,
+                    key: (0, access_1.buildPermissionItemKey)({
+                        name: options.name,
+                        clientId: options.clientId,
+                        realmId: options.realmId,
+                    }),
                 }),
                 milliseconds: 60000,
             },
         });
         if (entity) {
+            let policy;
+            if (entity.policy) {
+                policy = await this.policyRepository.findDescendantsTree(entity.policy);
+            }
+            else {
+                policy = this.getDefaultPolicy();
+            }
             return {
                 name: entity.name,
-                ...(entity.realm_id ? { realm_id: entity.realm_id } : {}),
-                // todo: fake policy should only be enabled for built_in
-                // todo: entity.policy and children need to be transformed
-                policy: entity.policy || this.getDefaultPolicy(),
+                realmId: entity.realm_id,
+                clientId: entity.client_id,
+                policy,
             };
         }
         return undefined;
@@ -47,24 +63,24 @@ class PermissionDBProvider {
     getDefaultPolicy() {
         const children = [];
         const identity = {
-            type: kit_1.BuiltInPolicyType.IDENTITY,
+            type: access_1.BuiltInPolicyType.IDENTITY,
         };
         children.push(identity);
         const realmMatch = {
-            type: kit_1.BuiltInPolicyType.REALM_MATCH,
+            type: access_1.BuiltInPolicyType.REALM_MATCH,
             attributeName: ['realm_id'],
             attributeNameStrict: false,
             identityMasterMatchAll: true,
         };
         children.push(realmMatch);
         const permissionBinding = {
-            type: kit_1.BuiltInPolicyType.PERMISSION_BINDING,
+            type: access_1.BuiltInPolicyType.PERMISSION_BINDING,
         };
         children.push(permissionBinding);
         const composite = {
-            type: kit_1.BuiltInPolicyType.COMPOSITE,
+            type: access_1.BuiltInPolicyType.COMPOSITE,
             children,
-            decisionStrategy: kit_1.DecisionStrategy.UNANIMOUS,
+            decisionStrategy: access_1.DecisionStrategy.UNANIMOUS,
         };
         return composite;
     }

package/dist/security/permission/provider/db.js.map

@@ -1 +1 @@
-{"version":3,"file":"db.js","sourceRoot":"","sources":["../../../../src/security/permission/provider/db.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;;AAYH,qCAAkE;AAClE,mDAAmD;AAEnD,uDAA0E;AAE1E,MAAa,oBAAoB;IAK7B,YAAY,UAAsB;QAC9B,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC;QAC7B,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC,UAAU,CAAC,aAAa,CAAC,0BAAgB,CAAC,CAAC;IACtE,CAAC;IAED,KAAK,CAAC,GAAG,CAAC,OAA6B;QACnC,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC;YACzC,KAAK,EAAE;gBACH,IAAI,EAAE,OAAO,CAAC,IAAI;gBAClB,GAAG,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aAC5D;YACD,SAAS,EAAE;gBACP,QAAQ;gBACR,iBAAiB;aACpB;YACD,KAAK,EAAE;gBACH,EAAE,EAAE,IAAA,0BAAa,EAAC;oBACd,MAAM,EAAE,qBAAW,CAAC,UAAU;oBAC9B,GAAG,EAAE,OAAO,CAAC,IAAI;iBACpB,CAAC;gBACF,YAAY,EAAE,KAAM;aACvB;SACJ,CAAC,CAAC;QAEH,IAAI,MAAM,EAAE,CAAC;YACT,OAAO;gBACH,IAAI,EAAE,MAAM,CAAC,IAAI;gBACjB,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACzD,wDAAwD;gBACxD,0DAA0D;gBAC1D,MAAM,EAAE,MAAM,CAAC,MAAM,IAAI,IAAI,CAAC,gBAAgB,EAAE;aACnD,CAAC;QACN,CAAC;QAED,OAAO,SAAS,CAAC;IACrB,CAAC;IAED,gBAAgB;QACZ,MAAM,QAAQ,GAAsB,EAAE,CAAC;QACvC,MAAM,QAAQ,GAAoC;YAC9C,IAAI,EAAE,uBAAiB,CAAC,QAAQ;SACnC,CAAC;QACF,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAExB,MAAM,UAAU,GAAsC;YAClD,IAAI,EAAE,uBAAiB,CAAC,WAAW;YACnC,aAAa,EAAE,CAAC,UAAU,CAAC;YAC3B,mBAAmB,EAAE,KAAK;YAC1B,sBAAsB,EAAE,IAAI;SAC/B,CAAC;QACF,QAAQ,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QAE1B,MAAM,iBAAiB,GAA6C;YAChE,IAAI,EAAE,uBAAiB,CAAC,kBAAkB;SAC7C,CAAC;QACF,QAAQ,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC;QAEjC,MAAM,SAAS,GAAqC;YAChD,IAAI,EAAE,uBAAiB,CAAC,SAAS;YACjC,QAAQ;YACR,gBAAgB,EAAE,sBAAgB,CAAC,SAAS;SAC/C,CAAC;QAEF,OAAO,SAAS,CAAC;IACrB,CAAC;CACJ;AAtED,oDAsEC"}
+{"version":3,"file":"db.js","sourceRoot":"","sources":["../../../../src/security/permission/provider/db.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;;AAYH,2CAA6F;AAE7F,mDAAmD;AAEnD,uDAA4F;AAE5F,MAAa,oBAAoB;IAO7B,YAAY,UAAsB;QAC9B,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC;QAC7B,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC,UAAU,CAAC,aAAa,CAAC,0BAAgB,CAAC,CAAC;QAClE,IAAI,CAAC,gBAAgB,GAAG,IAAI,0BAAgB,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IAClE,CAAC;IAED,KAAK,CAAC,GAAG,CAAC,OAA6B;QACnC,MAAM,KAAK,GAAkC;YACzC,IAAI,EAAE,OAAO,CAAC,IAAI;SACrB,CAAC;QAEF,IAAI,OAAO,CAAC,QAAQ,EAAE,CAAC;YACnB,KAAK,CAAC,SAAS,GAAG,OAAO,CAAC,QAAQ,CAAC;QACvC,CAAC;QAED,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;YAClB,KAAK,CAAC,QAAQ,GAAG,OAAO,CAAC,OAAO,CAAC;QACrC,CAAC;QAED,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC;YACzC,KAAK;YACL,SAAS,EAAE;gBACP,QAAQ;aACX;YACD,KAAK,EAAE;gBACH,EAAE,EAAE,IAAA,0BAAa,EAAC;oBACd,MAAM,EAAE,qBAAW,CAAC,UAAU;oBAC9B,GAAG,EAAE,IAAA,+BAAsB,EAAC;wBACxB,IAAI,EAAE,OAAO,CAAC,IAAI;wBAClB,QAAQ,EAAE,OAAO,CAAC,QAAQ;wBAC1B,OAAO,EAAE,OAAO,CAAC,OAAO;qBAC3B,CAAC;iBACL,CAAC;gBACF,YAAY,EAAE,KAAM;aACvB;SACJ,CAAC,CAAC;QAEH,IAAI,MAAM,EAAE,CAAC;YACT,IAAI,MAAmC,CAAC;YACxC,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC;gBAChB,MAAM,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAAC,mBAAmB,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;YAC5E,CAAC;iBAAM,CAAC;gBACJ,MAAM,GAAG,IAAI,CAAC,gBAAgB,EAAE,CAAC;YACrC,CAAC;YAED,OAAO;gBACH,IAAI,EAAE,MAAM,CAAC,IAAI;gBACjB,OAAO,EAAE,MAAM,CAAC,QAAQ;gBACxB,QAAQ,EAAE,MAAM,CAAC,SAAS;gBAC1B,MAAM;aACT,CAAC;QACN,CAAC;QAED,OAAO,SAAS,CAAC;IACrB,CAAC;IAED,gBAAgB;QACZ,MAAM,QAAQ,GAAsB,EAAE,CAAC;QACvC,MAAM,QAAQ,GAAoC;YAC9C,IAAI,EAAE,0BAAiB,CAAC,QAAQ;SACnC,CAAC;QACF,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAExB,MAAM,UAAU,GAAsC;YAClD,IAAI,EAAE,0BAAiB,CAAC,WAAW;YACnC,aAAa,EAAE,CAAC,UAAU,CAAC;YAC3B,mBAAmB,EAAE,KAAK;YAC1B,sBAAsB,EAAE,IAAI;SAC/B,CAAC;QACF,QAAQ,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QAE1B,MAAM,iBAAiB,GAA6C;YAChE,IAAI,EAAE,0BAAiB,CAAC,kBAAkB;SAC7C,CAAC;QACF,QAAQ,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC;QAEjC,MAAM,SAAS,GAAqC;YAChD,IAAI,EAAE,0BAAiB,CAAC,SAAS;YACjC,QAAQ;YACR,gBAAgB,EAAE,yBAAgB,CAAC,SAAS;SAC/C,CAAC;QAEF,OAAO,SAAS,CAAC;IACrB,CAAC;CACJ;AA3FD,oDA2FC"}

package/dist/security/policy/engine/module.d.ts

@@ -1,4 +1,4 @@
-import { PolicyEngine as BasePolicyEngine } from '@authup/kit';
+import { PolicyEngine as BasePolicyEngine } from '@authup/access';
 export declare class PolicyEngine extends BasePolicyEngine {
     constructor();
 }

package/dist/security/policy/engine/module.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"module.d.ts","sourceRoot":"","sources":["../../../../src/security/policy/engine/module.ts"],"names":[],"mappings":"AAOA,OAAO,EAAE,YAAY,IAAI,gBAAgB,EAAqB,MAAM,aAAa,CAAC;AAGlF,qBAAa,YAAa,SAAQ,gBAAgB;;CAMjD"}
+{"version":3,"file":"module.d.ts","sourceRoot":"","sources":["../../../../src/security/policy/engine/module.ts"],"names":[],"mappings":"AAOA,OAAO,EAAE,YAAY,IAAI,gBAAgB,EAAqB,MAAM,gBAAgB,CAAC;AAGrF,qBAAa,YAAa,SAAQ,gBAAgB;;CAMjD"}

package/dist/security/policy/engine/module.js

@@ -7,12 +7,12 @@
  */
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.PolicyEngine = void 0;
-const kit_1 = require("@authup/kit");
+const access_1 = require("@authup/access");
 const variants_1 = require("../variants");
-class PolicyEngine extends kit_1.PolicyEngine {
+class PolicyEngine extends access_1.PolicyEngine {
     constructor() {
         super();
-        this.registerEvaluator(kit_1.BuiltInPolicyType.PERMISSION_BINDING, new variants_1.PermissionBindingPolicyEvaluator());
+        this.registerEvaluator(access_1.BuiltInPolicyType.PERMISSION_BINDING, new variants_1.PermissionBindingPolicyEvaluator());
     }
 }
 exports.PolicyEngine = PolicyEngine;

package/dist/security/policy/engine/module.js.map

@@ -1 +1 @@
-{"version":3,"file":"module.js","sourceRoot":"","sources":["../../../../src/security/policy/engine/module.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;;AAEH,qCAAkF;AAClF,0CAA+D;AAE/D,MAAa,YAAa,SAAQ,kBAAgB;IAC9C;QACI,KAAK,EAAE,CAAC;QAER,IAAI,CAAC,iBAAiB,CAAC,uBAAiB,CAAC,kBAAkB,EAAE,IAAI,2CAAgC,EAAE,CAAC,CAAC;IACzG,CAAC;CACJ;AAND,oCAMC"}
+{"version":3,"file":"module.js","sourceRoot":"","sources":["../../../../src/security/policy/engine/module.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;;AAEH,2CAAqF;AACrF,0CAA+D;AAE/D,MAAa,YAAa,SAAQ,qBAAgB;IAC9C;QACI,KAAK,EAAE,CAAC;QAER,IAAI,CAAC,iBAAiB,CAAC,0BAAiB,CAAC,kBAAkB,EAAE,IAAI,2CAAgC,EAAE,CAAC,CAAC;IACzG,CAAC;CACJ;AAND,oCAMC"}

package/dist/security/policy/variants/permission-binding/evaluator.d.ts

@@ -1,5 +1,5 @@
-import type { PermissionBindingPolicy, PolicyData, PolicyEvaluateContext, PolicyEvaluator, PolicyWithType } from '@authup/kit';
-import { PermissionBindingPolicyValidator } from '@authup/kit';
+import type { PermissionBindingPolicy, PolicyData, PolicyEvaluateContext, PolicyEvaluator, PolicyWithType } from '@authup/access';
+import { PermissionBindingPolicyValidator } from '@authup/access';
 export declare class PermissionBindingPolicyEvaluator implements PolicyEvaluator<PermissionBindingPolicy> {
     protected validator: PermissionBindingPolicyValidator;
     constructor();

package/dist/security/policy/variants/permission-binding/evaluator.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"evaluator.d.ts","sourceRoot":"","sources":["../../../../../src/security/policy/variants/permission-binding/evaluator.ts"],"names":[],"mappings":"AAQA,OAAO,KAAK,EAER,uBAAuB,EACvB,UAAU,EACV,qBAAqB,EACrB,eAAe,EACf,cAAc,EACjB,MAAM,aAAa,CAAC;AACrB,OAAO,EAGH,gCAAgC,EAInC,MAAM,aAAa,CAAC;AAIrB,qBAAa,gCAAiC,YAAW,eAAe,CAAC,uBAAuB,CAAC;IAC7F,SAAS,CAAC,SAAS,EAAG,gCAAgC,CAAC;;IAMjD,GAAG,CACL,GAAG,EAAE,qBAAqB,CAAC,cAAc,CAAC,GAC1C,OAAO,CAAC,OAAO,CAAC;IAId,qBAAqB,CAAC,GAAG,EAAE,qBAAqB,GAAI,OAAO,CAAC,uBAAuB,CAAC;IAIpF,YAAY,CAAC,GAAG,EAAE,qBAAqB,GAAI,OAAO,CAAC,UAAU,CAAC;IAQ9D,QAAQ,CAAC,GAAG,EAAE,qBAAqB,CACzC,uBAAuB,EACvB,UAAU,CACT,GAAG,OAAO,CAAC,OAAO,CAAC;CAoDvB"}
+{"version":3,"file":"evaluator.d.ts","sourceRoot":"","sources":["../../../../../src/security/policy/variants/permission-binding/evaluator.ts"],"names":[],"mappings":"AAQA,OAAO,KAAK,EAER,uBAAuB,EACvB,UAAU,EACV,qBAAqB,EACrB,eAAe,EACf,cAAc,EACjB,MAAM,gBAAgB,CAAC;AACxB,OAAO,EAGH,gCAAgC,EAInC,MAAM,gBAAgB,CAAC;AAIxB,qBAAa,gCAAiC,YAAW,eAAe,CAAC,uBAAuB,CAAC;IAC7F,SAAS,CAAC,SAAS,EAAG,gCAAgC,CAAC;;IAMjD,GAAG,CACL,GAAG,EAAE,qBAAqB,CAAC,cAAc,CAAC,GAC1C,OAAO,CAAC,OAAO,CAAC;IAId,qBAAqB,CAAC,GAAG,EAAE,qBAAqB,GAAI,OAAO,CAAC,uBAAuB,CAAC;IAIpF,YAAY,CAAC,GAAG,EAAE,qBAAqB,GAAI,OAAO,CAAC,UAAU,CAAC;IAQ9D,QAAQ,CAAC,GAAG,EAAE,qBAAqB,CACzC,uBAAuB,EACvB,UAAU,CACT,GAAG,OAAO,CAAC,OAAO,CAAC;CA6DvB"}

package/dist/security/policy/variants/permission-binding/evaluator.js

@@ -8,59 +8,71 @@
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.PermissionBindingPolicyEvaluator = void 0;
 const smob_1 = require("smob");
-const kit_1 = require("@authup/kit");
+const access_1 = require("@authup/access");
 const typeorm_extension_1 = require("typeorm-extension");
 const services_1 = require("../../../../services");
 class PermissionBindingPolicyEvaluator {
     constructor() {
-        this.validator = new kit_1.PermissionBindingPolicyValidator();
+        this.validator = new access_1.PermissionBindingPolicyValidator();
     }
     async can(ctx) {
-        return ctx.spec.type === kit_1.BuiltInPolicyType.PERMISSION_BINDING;
+        return ctx.spec.type === access_1.BuiltInPolicyType.PERMISSION_BINDING;
     }
     async validateSpecification(ctx) {
         return this.validator.run(ctx.spec);
     }
     async validateData(ctx) {
         if (!(0, smob_1.isObject)(ctx.data.identity) && !(0, smob_1.isObject)(ctx.data.permission)) {
-            throw kit_1.PolicyError.evaluatorContextInvalid();
+            throw access_1.PolicyError.evaluatorContextInvalid();
         }
         return ctx.data;
     }
     async evaluate(ctx) {
         const dataSource = await (0, typeorm_extension_1.useDataSource)();
         const identityPermissionService = new services_1.IdentityPermissionService(dataSource);
-        const permissionsAll = await identityPermissionService.getFor(ctx.data.identity)
+        // get all identity permissions with applicable client(_id) restriction
+        const identityPermissions = await identityPermissionService.getFor(ctx.data.identity)
             .then((permissions) => permissions.filter((item) => {
             if (item.name !== ctx.data.permission.name) {
                 return false;
             }
-            if (typeof item.realm_id === 'string' ||
-                typeof ctx.data.permission.realm_id === 'string') {
-                return item.realm_id === ctx.data.permission.realm_id;
+            let realmId;
+            if (typeof ctx.data.permission.realmId === 'undefined') {
+                realmId = null;
             }
-            return !!item.realm_id === !!ctx.data.permission.realm_id;
+            else {
+                realmId = ctx.data.permission.realmId;
+            }
+            let clientId;
+            if (typeof ctx.data.permission.clientId === 'undefined') {
+                clientId = null;
+            }
+            else {
+                clientId = ctx.data.permission.clientId;
+            }
+            // we are comparing only string with null (db resources always null or string)
+            return realmId === item.realm_id && clientId === item.client_id;
         }));
-        if (permissionsAll.length === 0) {
-            return (0, kit_1.maybeInvertPolicyOutcome)(false, ctx.spec.invert);
+        if (identityPermissions.length === 0) {
+            return (0, access_1.maybeInvertPolicyOutcome)(false, ctx.spec.invert);
         }
-        const permissions = (0, kit_1.mergePermissionItems)(permissionsAll);
-        if (permissions.length === 0) {
-            return (0, kit_1.maybeInvertPolicyOutcome)(false, ctx.spec.invert);
+        const permissionsMerged = (0, access_1.mergePermissionItems)(identityPermissions);
+        if (permissionsMerged.length === 0) {
+            return (0, access_1.maybeInvertPolicyOutcome)(false, ctx.spec.invert);
         }
-        const policies = permissions
+        const policies = permissionsMerged
             .filter((permission) => !!permission.policy)
             .map((permission) => permission.policy);
         if (policies.length === 0) {
-            return (0, kit_1.maybeInvertPolicyOutcome)(true, ctx.spec.invert);
+            return (0, access_1.maybeInvertPolicyOutcome)(true, ctx.spec.invert);
         }
         if (!ctx.evaluators) {
-            return (0, kit_1.maybeInvertPolicyOutcome)(false, ctx.spec.invert);
+            return (0, access_1.maybeInvertPolicyOutcome)(false, ctx.spec.invert);
         }
         const compositePolicy = {
             children: policies,
         };
-        const compositePolicyEvaluator = new kit_1.CompositePolicyEvaluator();
+        const compositePolicyEvaluator = new access_1.CompositePolicyEvaluator();
         return compositePolicyEvaluator.evaluate({
             ...ctx,
             spec: compositePolicy,

package/dist/security/policy/variants/permission-binding/evaluator.js.map

@@ -1 +1 @@
-{"version":3,"file":"evaluator.js","sourceRoot":"","sources":["../../../../../src/security/policy/variants/permission-binding/evaluator.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;;AAEH,+BAAgC;AAShC,qCAOqB;AACrB,yDAAkD;AAClD,mDAAiE;AAEjE,MAAa,gCAAgC;IAGzC;QACI,IAAI,CAAC,SAAS,GAAG,IAAI,sCAAgC,EAAE,CAAC;IAC5D,CAAC;IAED,KAAK,CAAC,GAAG,CACL,GAA0C;QAE1C,OAAO,GAAG,CAAC,IAAI,CAAC,IAAI,KAAK,uBAAiB,CAAC,kBAAkB,CAAC;IAClE,CAAC;IAED,KAAK,CAAC,qBAAqB,CAAC,GAA0B;QAClD,OAAO,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IACxC,CAAC;IAED,KAAK,CAAC,YAAY,CAAC,GAA0B;QACzC,IAAI,CAAC,IAAA,eAAQ,EAAC,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAA,eAAQ,EAAC,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC;YACjE,MAAM,iBAAW,CAAC,uBAAuB,EAAE,CAAC;QAChD,CAAC;QAED,OAAO,GAAG,CAAC,IAAI,CAAC;IACpB,CAAC;IAED,KAAK,CAAC,QAAQ,CAAC,GAGd;QACG,MAAM,UAAU,GAAG,MAAM,IAAA,iCAAa,GAAE,CAAC;QACzC,MAAM,yBAAyB,GAAG,IAAI,oCAAyB,CAAC,UAAU,CAAC,CAAC;QAC5E,MAAM,cAAc,GAAG,MAAM,yBAAyB,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC;aAC3E,IAAI,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE;YAC/C,IAAI,IAAI,CAAC,IAAI,KAAK,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,EAAE,CAAC;gBACzC,OAAO,KAAK,CAAC;YACjB,CAAC;YAED,IACI,OAAO,IAAI,CAAC,QAAQ,KAAK,QAAQ;gBACrC,OAAO,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC,QAAQ,KAAK,QAAQ,EAC9C,CAAC;gBACC,OAAO,IAAI,CAAC,QAAQ,KAAK,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC;YAC1D,CAAC;YAED,OAAO,CAAC,CAAC,IAAI,CAAC,QAAQ,KAAK,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC;QAC9D,CAAC,CAAC,CAAC,CAAC;QAER,IAAI,cAAc,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC9B,OAAO,IAAA,8BAAwB,EAAC,KAAK,EAAE,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAC5D,CAAC;QAED,MAAM,WAAW,GAAG,IAAA,0BAAoB,EAAC,cAAc,CAAC,CAAC;QAEzD,IAAI,WAAW,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC3B,OAAO,IAAA,8BAAwB,EAAC,KAAK,EAAE,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAC5D,CAAC;QAED,MAAM,QAAQ,GAAG,WAAW;aACvB,MAAM,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,MAAM,CAAC;aAC3C,GAAG,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;QAE5C,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACxB,OAAO,IAAA,8BAAwB,EAAC,IAAI,EAAE,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAC3D,CAAC;QAED,IAAI,CAAC,GAAG,CAAC,UAAU,EAAE,CAAC;YAClB,OAAO,IAAA,8BAAwB,EAAC,KAAK,EAAE,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAC5D,CAAC;QAED,MAAM,eAAe,GAAqB;YACtC,QAAQ,EAAE,QAAQ;SACrB,CAAC;QAEF,MAAM,wBAAwB,GAAG,IAAI,8BAAwB,EAAE,CAAC;QAEhE,OAAO,wBAAwB,CAAC,QAAQ,CAAC;YACrC,GAAG,GAAG;YACN,IAAI,EAAE,eAAe;SACxB,CAAC,CAAC;IACP,CAAC;CACJ;AAhFD,4EAgFC"}
+{"version":3,"file":"evaluator.js","sourceRoot":"","sources":["../../../../../src/security/policy/variants/permission-binding/evaluator.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;;AAEH,+BAAgC;AAShC,2CAOwB;AACxB,yDAAkD;AAClD,mDAAiE;AAEjE,MAAa,gCAAgC;IAGzC;QACI,IAAI,CAAC,SAAS,GAAG,IAAI,yCAAgC,EAAE,CAAC;IAC5D,CAAC;IAED,KAAK,CAAC,GAAG,CACL,GAA0C;QAE1C,OAAO,GAAG,CAAC,IAAI,CAAC,IAAI,KAAK,0BAAiB,CAAC,kBAAkB,CAAC;IAClE,CAAC;IAED,KAAK,CAAC,qBAAqB,CAAC,GAA0B;QAClD,OAAO,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IACxC,CAAC;IAED,KAAK,CAAC,YAAY,CAAC,GAA0B;QACzC,IAAI,CAAC,IAAA,eAAQ,EAAC,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAA,eAAQ,EAAC,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC;YACjE,MAAM,oBAAW,CAAC,uBAAuB,EAAE,CAAC;QAChD,CAAC;QAED,OAAO,GAAG,CAAC,IAAI,CAAC;IACpB,CAAC;IAED,KAAK,CAAC,QAAQ,CAAC,GAGd;QACG,MAAM,UAAU,GAAG,MAAM,IAAA,iCAAa,GAAE,CAAC;QACzC,MAAM,yBAAyB,GAAG,IAAI,oCAAyB,CAAC,UAAU,CAAC,CAAC;QAE5E,uEAAuE;QACvE,MAAM,mBAAmB,GAAG,MAAM,yBAAyB,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC;aAChF,IAAI,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE;YAC/C,IAAI,IAAI,CAAC,IAAI,KAAK,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,EAAE,CAAC;gBACzC,OAAO,KAAK,CAAC;YACjB,CAAC;YAED,IAAI,OAAuB,CAAC;YAC5B,IAAI,OAAO,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC,OAAO,KAAK,WAAW,EAAE,CAAC;gBACrD,OAAO,GAAG,IAAI,CAAC;YACnB,CAAC;iBAAM,CAAC;gBACJ,OAAO,GAAG,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC;YAC1C,CAAC;YAED,IAAI,QAAwB,CAAC;YAC7B,IAAI,OAAO,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC,QAAQ,KAAK,WAAW,EAAE,CAAC;gBACtD,QAAQ,GAAG,IAAI,CAAC;YACpB,CAAC;iBAAM,CAAC;gBACJ,QAAQ,GAAG,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC;YAC5C,CAAC;YAED,8EAA8E;YAC9E,OAAO,OAAO,KAAK,IAAI,CAAC,QAAQ,IAAI,QAAQ,KAAK,IAAI,CAAC,SAAS,CAAC;QACpE,CAAC,CAAC,CAAC,CAAC;QAER,IAAI,mBAAmB,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACnC,OAAO,IAAA,iCAAwB,EAAC,KAAK,EAAE,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAC5D,CAAC;QAED,MAAM,iBAAiB,GAAG,IAAA,6BAAoB,EAAC,mBAAmB,CAAC,CAAC;QACpE,IAAI,iBAAiB,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACjC,OAAO,IAAA,iCAAwB,EAAC,KAAK,EAAE,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAC5D,CAAC;QAED,MAAM,QAAQ,GAAG,iBAAiB;aAC7B,MAAM,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,MAAM,CAAC;aAC3C,GAAG,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;QAE5C,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACxB,OAAO,IAAA,iCAAwB,EAAC,IAAI,EAAE,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAC3D,CAAC;QAED,IAAI,CAAC,GAAG,CAAC,UAAU,EAAE,CAAC;YAClB,OAAO,IAAA,iCAAwB,EAAC,KAAK,EAAE,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAC5D,CAAC;QAED,MAAM,eAAe,GAAqB;YACtC,QAAQ,EAAE,QAAQ;SACrB,CAAC;QAEF,MAAM,wBAAwB,GAAG,IAAI,iCAAwB,EAAE,CAAC;QAEhE,OAAO,wBAAwB,CAAC,QAAQ,CAAC;YACrC,GAAG,GAAG;YACN,IAAI,EAAE,eAAe;SACxB,CAAC,CAAC;IACP,CAAC;CACJ;AAzFD,4EAyFC"}

package/dist/services/identity-permission/module.d.ts

@@ -1,18 +1,20 @@
-import type { Permission, Role } from '@authup/core-kit';
-import type { PolicyIdentity } from '@authup/kit';
+import type { Permission } from '@authup/core-kit';
+import type { PolicyIdentity } from '@authup/access';
 import type { DataSource } from 'typeorm';
-import { RobotRepository, RoleRepository, UserRepository } from '../../database/domains';
+import { ClientRepository, RobotRepository, RoleRepository, UserRepository } from '../../database/domains';
 export declare class IdentityPermissionService {
     protected dataSource: DataSource;
+    protected clientRepository: ClientRepository;
     protected userRepository: UserRepository;
     protected roleRepository: RoleRepository;
     protected robotRepository: RobotRepository;
     constructor(dataSource: DataSource);
     hasSuperset(parent: PolicyIdentity, child: PolicyIdentity): Promise<boolean>;
     getFor(identity: PolicyIdentity): Promise<Permission[]>;
-    getForUser(id: string): Promise<Permission[]>;
-    getForRobot(id: string): Promise<Permission[]>;
-    getForRole(entity: Role | string): Promise<Permission[]>;
-    getForRoles(entities: (Role | string)[]): Promise<Permission[]>;
+    getForClient(identity: PolicyIdentity): Promise<Permission[]>;
+    getForUser(identity: PolicyIdentity): Promise<Permission[]>;
+    getForRobot(identity: PolicyIdentity): Promise<Permission[]>;
+    getForRole(identity: PolicyIdentity): Promise<Permission[]>;
+    private reduceEntitiesByIdentityClient;
 }
 //# sourceMappingURL=module.d.ts.map

package/dist/services/identity-permission/module.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"module.d.ts","sourceRoot":"","sources":["../../../src/services/identity-permission/module.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,UAAU,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAC;AACzD,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAElD,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AAC1C,OAAO,EAAE,eAAe,EAAE,cAAc,EAAE,cAAc,EAAE,MAAM,wBAAwB,CAAC;AAEzF,qBAAa,yBAAyB;IAClC,SAAS,CAAC,UAAU,EAAE,UAAU,CAAC;IAEjC,SAAS,CAAC,cAAc,EAAG,cAAc,CAAC;IAE1C,SAAS,CAAC,cAAc,EAAG,cAAc,CAAC;IAE1C,SAAS,CAAC,eAAe,EAAG,eAAe,CAAC;gBAEhC,UAAU,EAAE,UAAU;IAQ5B,WAAW,CAAC,MAAM,EAAE,cAAc,EAAE,KAAK,EAAE,cAAc,GAAI,OAAO,CAAC,OAAO,CAAC;IAgB7E,MAAM,CAAC,QAAQ,EAAE,cAAc,GAAI,OAAO,CAAC,UAAU,EAAE,CAAC;IAiBxD,UAAU,CAAC,EAAE,EAAE,MAAM,GAAI,OAAO,CAAC,UAAU,EAAE,CAAC;IAc9C,WAAW,CAAC,EAAE,EAAE,MAAM,GAAI,OAAO,CAAC,UAAU,EAAE,CAAC;IAc/C,UAAU,CAAC,MAAM,EAAE,IAAI,GAAG,MAAM,GAAI,OAAO,CAAC,UAAU,EAAE,CAAC;IAIzD,WAAW,CAAC,QAAQ,EAAE,CAAC,IAAI,GAAG,MAAM,CAAC,EAAE,GAAI,OAAO,CAAC,UAAU,EAAE,CAAC;CAOzE"}
+{"version":3,"file":"module.d.ts","sourceRoot":"","sources":["../../../src/services/identity-permission/module.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AACnD,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAC;AAErD,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AAC1C,OAAO,EACH,gBAAgB,EAChB,eAAe,EACf,cAAc,EACd,cAAc,EACjB,MAAM,wBAAwB,CAAC;AAEhC,qBAAa,yBAAyB;IAClC,SAAS,CAAC,UAAU,EAAE,UAAU,CAAC;IAEjC,SAAS,CAAC,gBAAgB,EAAE,gBAAgB,CAAC;IAE7C,SAAS,CAAC,cAAc,EAAG,cAAc,CAAC;IAE1C,SAAS,CAAC,cAAc,EAAG,cAAc,CAAC;IAE1C,SAAS,CAAC,eAAe,EAAG,eAAe,CAAC;gBAEhC,UAAU,EAAE,UAAU;IAS5B,WAAW,CAAC,MAAM,EAAE,cAAc,EAAE,KAAK,EAAE,cAAc,GAAI,OAAO,CAAC,OAAO,CAAC;IAgB7E,MAAM,CAAC,QAAQ,EAAE,cAAc,GAAI,OAAO,CAAC,UAAU,EAAE,CAAC;IAmBxD,YAAY,CAAC,QAAQ,EAAE,cAAc,GAAI,OAAO,CAAC,UAAU,EAAE,CAAC;IAc9D,UAAU,CAAC,QAAQ,EAAE,cAAc,GAAI,OAAO,CAAC,UAAU,EAAE,CAAC;IAkB5D,WAAW,CAAC,QAAQ,EAAE,cAAc,GAAI,OAAO,CAAC,UAAU,EAAE,CAAC;IAkB7D,UAAU,CAAC,QAAQ,EAAE,cAAc,GAAI,OAAO,CAAC,UAAU,EAAE,CAAC;IAKlE,OAAO,CAAC,8BAA8B;CAUzC"}

package/dist/services/identity-permission/module.js

@@ -7,11 +7,12 @@
  */
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.IdentityPermissionService = void 0;
-const kit_1 = require("@authup/kit");
+const access_1 = require("@authup/access");
 const domains_1 = require("../../database/domains");
 class IdentityPermissionService {
     constructor(dataSource) {
         this.dataSource = dataSource;
+        this.clientRepository = new domains_1.ClientRepository(dataSource);
         this.userRepository = new domains_1.UserRepository(dataSource);
         this.roleRepository = new domains_1.RoleRepository(dataSource);
         this.robotRepository = new domains_1.RobotRepository(dataSource);
@@ -20,7 +21,7 @@ class IdentityPermissionService {
         const parentPermissions = await this.getFor(parent);
         const childPermissions = await this.getFor(child);
         for (let i = 0; i < childPermissions.length; i++) {
-            const index = parentPermissions.findIndex((permission) => (0, kit_1.isPermissionItemEqual)(permission, childPermissions[i]));
+            const index = parentPermissions.findIndex((permission) => (0, access_1.isPermissionItemEqual)(permission, childPermissions[i]));
             if (index === -1) {
                 return false;
             }
@@ -28,24 +29,40 @@ class IdentityPermissionService {
         return true;
     }
     async getFor(identity) {
-        // todo: add client
         switch (identity.type) {
+            case 'client': {
+                return this.getForClient(identity);
+            }
             case 'user': {
-                return this.getForUser(identity.id);
+                return this.getForUser(identity);
             }
             case 'robot': {
-                return this.getForRobot(identity.id);
+                return this.getForRobot(identity);
             }
             case 'role': {
-                return this.getForRole(identity.id);
+                return this.getForRole(identity);
             }
         }
         return [];
     }
-    async getForUser(id) {
-        const permissions = await this.userRepository.getBoundPermissions(id);
-        const roles = await this.userRepository.getBoundRoles(id);
-        const rolePermissions = await this.getForRoles(roles);
+    async getForClient(identity) {
+        const permissions = await this.clientRepository.getBoundPermissions(identity.id);
+        const roles = await this.clientRepository.getBoundRoles(identity.id);
+        const rolePermissions = await this.roleRepository.getBoundPermissionsForMany(roles);
+        if (rolePermissions.length === 0) {
+            return permissions;
+        }
+        return [
+            ...permissions,
+            ...rolePermissions,
+        ];
+    }
+    async getForUser(identity) {
+        const permissions = await this.userRepository.getBoundPermissions(identity.id)
+            .then((data) => this.reduceEntitiesByIdentityClient(data, identity));
+        const roles = await this.userRepository.getBoundRoles(identity.id)
+            .then((data) => this.reduceEntitiesByIdentityClient(data, identity));
+        const rolePermissions = await this.roleRepository.getBoundPermissionsForMany(roles);
         if (rolePermissions.length === 0) {
             return permissions;
         }
@@ -54,10 +71,12 @@ class IdentityPermissionService {
             ...rolePermissions,
         ];
     }
-    async getForRobot(id) {
-        const permissions = await this.robotRepository.getBoundPermissions(id);
-        const roles = await this.robotRepository.getBoundRoles(id);
-        const rolePermissions = await this.getForRoles(roles);
+    async getForRobot(identity) {
+        const permissions = await this.robotRepository.getBoundPermissions(identity.id)
+            .then((data) => this.reduceEntitiesByIdentityClient(data, identity));
+        const roles = await this.robotRepository.getBoundRoles(identity.id)
+            .then((data) => this.reduceEntitiesByIdentityClient(data, identity));
+        const rolePermissions = await this.roleRepository.getBoundPermissionsForMany(roles);
         if (rolePermissions.length === 0) {
             return permissions;
         }
@@ -66,14 +85,15 @@ class IdentityPermissionService {
             ...rolePermissions,
         ];
     }
-    async getForRole(entity) {
-        return this.getForRoles([entity]);
+    async getForRole(identity) {
+        return this.roleRepository.getBoundPermissions(identity.id)
+            .then((data) => this.reduceEntitiesByIdentityClient(data, identity));
     }
-    async getForRoles(entities) {
-        if (entities.length === 0) {
-            return [];
+    reduceEntitiesByIdentityClient(entities, identity) {
+        if (!identity.clientId) {
+            return entities;
         }
-        return this.roleRepository.getBoundPermissionsForMany(entities);
+        return entities.filter((entity) => entity.client_id === identity.clientId);
     }
 }
 exports.IdentityPermissionService = IdentityPermissionService;

package/dist/services/identity-permission/module.js.map

@@ -1 +1 @@
-{"version":3,"file":"module.js","sourceRoot":"","sources":["../../../src/services/identity-permission/module.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;;AAIH,qCAAoD;AAEpD,oDAAyF;AAEzF,MAAa,yBAAyB;IASlC,YAAY,UAAsB;QAC9B,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC;QAE7B,IAAI,CAAC,cAAc,GAAG,IAAI,wBAAc,CAAC,UAAU,CAAC,CAAC;QACrD,IAAI,CAAC,cAAc,GAAG,IAAI,wBAAc,CAAC,UAAU,CAAC,CAAC;QACrD,IAAI,CAAC,eAAe,GAAG,IAAI,yBAAe,CAAC,UAAU,CAAC,CAAC;IAC3D,CAAC;IAED,KAAK,CAAC,WAAW,CAAC,MAAsB,EAAE,KAAqB;QAC3D,MAAM,iBAAiB,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QACpD,MAAM,gBAAgB,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QAElD,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,gBAAgB,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YAC/C,MAAM,KAAK,GAAG,iBAAiB,CAAC,SAAS,CACrC,CAAC,UAAU,EAAE,EAAE,CAAC,IAAA,2BAAqB,EAAC,UAAU,EAAE,gBAAgB,CAAC,CAAC,CAAC,CAAC,CACzE,CAAC;YACF,IAAI,KAAK,KAAK,CAAC,CAAC,EAAE,CAAC;gBACf,OAAO,KAAK,CAAC;YACjB,CAAC;QACL,CAAC;QAED,OAAO,IAAI,CAAC;IAChB,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,QAAwB;QACjC,mBAAmB;QACnB,QAAQ,QAAQ,CAAC,IAAI,EAAE,CAAC;YACpB,KAAK,MAAM,CAAC,CAAC,CAAC;gBACV,OAAO,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;YACxC,CAAC;YACD,KAAK,OAAO,CAAC,CAAC,CAAC;gBACX,OAAO,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;YACzC,CAAC;YACD,KAAK,MAAM,CAAC,CAAC,CAAC;gBACV,OAAO,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;YACxC,CAAC;QACL,CAAC;QAED,OAAO,EAAE,CAAC;IACd,CAAC;IAED,KAAK,CAAC,UAAU,CAAC,EAAU;QACvB,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,mBAAmB,CAAC,EAAE,CAAC,CAAC;QACtE,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,aAAa,CAAC,EAAE,CAAC,CAAC;QAC1D,MAAM,eAAe,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC;QACtD,IAAI,eAAe,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC/B,OAAO,WAAW,CAAC;QACvB,CAAC;QAED,OAAO;YACH,GAAG,WAAW;YACd,GAAG,eAAe;SACrB,CAAC;IACN,CAAC;IAED,KAAK,CAAC,WAAW,CAAC,EAAU;QACxB,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,eAAe,CAAC,mBAAmB,CAAC,EAAE,CAAC,CAAC;QACvE,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,eAAe,CAAC,aAAa,CAAC,EAAE,CAAC,CAAC;QAC3D,MAAM,eAAe,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC;QACtD,IAAI,eAAe,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC/B,OAAO,WAAW,CAAC;QACvB,CAAC;QAED,OAAO;YACH,GAAG,WAAW;YACd,GAAG,eAAe;SACrB,CAAC;IACN,CAAC;IAED,KAAK,CAAC,UAAU,CAAC,MAAqB;QAClC,OAAO,IAAI,CAAC,WAAW,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC;IACtC,CAAC;IAED,KAAK,CAAC,WAAW,CAAC,QAA2B;QACzC,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACxB,OAAO,EAAE,CAAC;QACd,CAAC;QAED,OAAO,IAAI,CAAC,cAAc,CAAC,0BAA0B,CAAC,QAAQ,CAAC,CAAC;IACpE,CAAC;CACJ;AAzFD,8DAyFC"}
+{"version":3,"file":"module.js","sourceRoot":"","sources":["../../../src/services/identity-permission/module.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;;AAIH,2CAAuD;AAEvD,oDAKgC;AAEhC,MAAa,yBAAyB;IAWlC,YAAY,UAAsB;QAC9B,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC;QAE7B,IAAI,CAAC,gBAAgB,GAAG,IAAI,0BAAgB,CAAC,UAAU,CAAC,CAAC;QACzD,IAAI,CAAC,cAAc,GAAG,IAAI,wBAAc,CAAC,UAAU,CAAC,CAAC;QACrD,IAAI,CAAC,cAAc,GAAG,IAAI,wBAAc,CAAC,UAAU,CAAC,CAAC;QACrD,IAAI,CAAC,eAAe,GAAG,IAAI,yBAAe,CAAC,UAAU,CAAC,CAAC;IAC3D,CAAC;IAED,KAAK,CAAC,WAAW,CAAC,MAAsB,EAAE,KAAqB;QAC3D,MAAM,iBAAiB,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QACpD,MAAM,gBAAgB,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QAElD,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,gBAAgB,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YAC/C,MAAM,KAAK,GAAG,iBAAiB,CAAC,SAAS,CACrC,CAAC,UAAU,EAAE,EAAE,CAAC,IAAA,8BAAqB,EAAC,UAAU,EAAE,gBAAgB,CAAC,CAAC,CAAC,CAAC,CACzE,CAAC;YACF,IAAI,KAAK,KAAK,CAAC,CAAC,EAAE,CAAC;gBACf,OAAO,KAAK,CAAC;YACjB,CAAC;QACL,CAAC;QAED,OAAO,IAAI,CAAC;IAChB,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,QAAwB;QACjC,QAAQ,QAAQ,CAAC,IAAI,EAAE,CAAC;YACpB,KAAK,QAAQ,CAAC,CAAC,CAAC;gBACZ,OAAO,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC;YACvC,CAAC;YACD,KAAK,MAAM,CAAC,CAAC,CAAC;gBACV,OAAO,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC;YACrC,CAAC;YACD,KAAK,OAAO,CAAC,CAAC,CAAC;gBACX,OAAO,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAC;YACtC,CAAC;YACD,KAAK,MAAM,CAAC,CAAC,CAAC;gBACV,OAAO,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC;YACrC,CAAC;QACL,CAAC;QAED,OAAO,EAAE,CAAC;IACd,CAAC;IAED,KAAK,CAAC,YAAY,CAAC,QAAwB;QACvC,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAAC,mBAAmB,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;QACjF,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAAC,aAAa,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;QACrE,MAAM,eAAe,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,0BAA0B,CAAC,KAAK,CAAC,CAAC;QACpF,IAAI,eAAe,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC/B,OAAO,WAAW,CAAC;QACvB,CAAC;QAED,OAAO;YACH,GAAG,WAAW;YACd,GAAG,eAAe;SACrB,CAAC;IACN,CAAC;IAED,KAAK,CAAC,UAAU,CAAC,QAAwB;QACrC,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,mBAAmB,CAAC,QAAQ,CAAC,EAAE,CAAC;aACzE,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,8BAA8B,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC,CAAC;QAEzE,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,aAAa,CAAC,QAAQ,CAAC,EAAE,CAAC;aAC7D,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,8BAA8B,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC,CAAC;QAEzE,MAAM,eAAe,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,0BAA0B,CAAC,KAAK,CAAC,CAAC;QACpF,IAAI,eAAe,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC/B,OAAO,WAAW,CAAC;QACvB,CAAC;QAED,OAAO;YACH,GAAG,WAAW;YACd,GAAG,eAAe;SACrB,CAAC;IACN,CAAC;IAED,KAAK,CAAC,WAAW,CAAC,QAAwB;QACtC,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,eAAe,CAAC,mBAAmB,CAAC,QAAQ,CAAC,EAAE,CAAC;aAC1E,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,8BAA8B,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC,CAAC;QAEzE,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,eAAe,CAAC,aAAa,CAAC,QAAQ,CAAC,EAAE,CAAC;aAC9D,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,8BAA8B,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC,CAAC;QAEzE,MAAM,eAAe,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,0BAA0B,CAAC,KAAK,CAAC,CAAC;QACpF,IAAI,eAAe,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC/B,OAAO,WAAW,CAAC;QACvB,CAAC;QAED,OAAO;YACH,GAAG,WAAW;YACd,GAAG,eAAe;SACrB,CAAC;IACN,CAAC;IAED,KAAK,CAAC,UAAU,CAAC,QAAwB;QACrC,OAAO,IAAI,CAAC,cAAc,CAAC,mBAAmB,CAAC,QAAQ,CAAC,EAAE,CAAC;aACtD,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,8BAA8B,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC,CAAC;IAC7E,CAAC;IAEO,8BAA8B,CAClC,QAAa,EACb,QAAwB;QAExB,IAAI,CAAC,QAAQ,CAAC,QAAQ,EAAE,CAAC;YACrB,OAAO,QAAQ,CAAC;QACpB,CAAC;QAED,OAAO,QAAQ,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,SAAS,KAAK,QAAQ,CAAC,QAAQ,CAAC,CAAC;IAC/E,CAAC;CACJ;AAxHD,8DAwHC"}

package/dist/services/identity-provider/account/module.js

@@ -9,6 +9,7 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.IdentityProviderAccountService = void 0;
 const core_kit_1 = require("@authup/core-kit");
 const kit_1 = require("@authup/kit");
+const specs_1 = require("@authup/specs");
 const http_1 = require("@ebec/http");
 const domains_1 = require("../../../database/domains");
 class IdentityProviderAccountService {
@@ -109,7 +110,7 @@ class IdentityProviderAccountService {
             operation = domains_1.UserRelationItemSyncOperation.CREATE;
         }
         else {
-            const value = (0, kit_1.getJWTClaimByPattern)(identity.data, mapping.name, mapping.value, mapping.value_is_regex);
+            const value = (0, specs_1.getJWTClaimByPattern)(identity.data, mapping.name, mapping.value, mapping.value_is_regex);
             if (value.length === 0) {
                 operation = domains_1.UserRelationItemSyncOperation.DELETE;
             }
@@ -127,7 +128,7 @@ class IdentityProviderAccountService {
         const attributes = {};
         for (let i = 0; i < entities.length; i++) {
             const entity = entities[i];
-            const value = (0, kit_1.getJWTClaimByPattern)(identity.data, entity.source_name, entity.source_value, entity.source_value_is_regex);
+            const value = (0, specs_1.getJWTClaimByPattern)(identity.data, entity.source_name, entity.source_value, entity.source_value_is_regex);
             if (value.length === 0) {
                 continue;
             }
@@ -148,7 +149,7 @@ class IdentityProviderAccountService {
     }
     async updateUser(identity, user) {
         const claimAttributes = await this.getClaimAttributes(identity);
-        const extra = await this.userRepository.findExtraAttributesByPrimaryColumn(user.id);
+        const extra = await this.userRepository.findOneWithEAByPrimaryColumn(user.id);
         const columnPropertyNames = this.userRepository.metadata.columns.map((c) => c.propertyName);
         const relationPropertyNames = this.userRepository.metadata.relations.map((r) => r.propertyName);
         const claimAttributeKeys = Object.keys(claimAttributes);
@@ -188,7 +189,7 @@ class IdentityProviderAccountService {
                 user[attributeKey] = value;
             }
         }
-        await this.userRepository.saveWithAttributes(user, extra);
+        await this.userRepository.saveOneWithEA(user, extra);
         return user;
     }
     async createUser(identity) {
@@ -264,7 +265,7 @@ class IdentityProviderAccountService {
         while (!context.attributes.name &&
             context.attributeNamePool.length > 0) {
             const name = context.attributeNamePool.shift();
-            if (name && (0, core_kit_1.isValidUserName)(name)) {
+            if (name && (0, core_kit_1.isUserNameValid)(name)) {
                 context.attributes.name = name;
                 break;
             }
@@ -283,7 +284,7 @@ class IdentityProviderAccountService {
             context.attributes.name_locked = false;
             context.attributes.realm_id = this.provider.realm_id;
             context.attributes.active = true;
-            await this.userRepository.saveWithAttributes(context.attributes, context.attributesExtra);
+            await this.userRepository.saveOneWithEA(context.attributes, context.attributesExtra);
             return context.attributes;
         }
         catch (e) {

package/dist/services/identity-provider/account/module.js.map

@@ -1 +1 @@
-{"version":3,"file":"module.js","sourceRoot":"","sources":["../../../../src/services/identity-provider/account/module.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;;AAQH,+CAI0B;AAC1B,qCAOqB;AACrB,qCAA6C;AAM7C,uDAOmC;AAgBnC,MAAa,8BAA8B;IAiBvC,YACI,UAAsB,EACtB,QAA0B;QAZpB,mBAAc,GAAoB;YACxC,YAAY;YACZ,WAAW;YACX,QAAQ;YACR,OAAO;YACP,cAAc;SACjB,CAAC;QAQE,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC;QAC7B,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAC;QAEzB,IAAI,CAAC,cAAc,GAAG,IAAI,wBAAc,CAAC,UAAU,CAAC,CAAC;QACrD,IAAI,CAAC,yBAAyB,GAAG,UAAU,CAAC,aAAa,CAAC,uCAA6B,CAAC,CAAC;IAC7F,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,QAAkC;QACzC,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAC;QAEjD,MAAM,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;QACxC,MAAM,IAAI,CAAC,eAAe,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;QAE9C,OAAO,OAAO,CAAC;IACnB,CAAC;IAES,KAAK,CAAC,WAAW,CAAC,QAAkC;QAC1D,IAAI,OAAO,GAAG,MAAM,IAAI,CAAC,yBAAyB,CAAC,OAAO,CAAC;YACvD,KAAK,EAAE;gBACH,gBAAgB,EAAE,QAAQ,CAAC,EAAE;gBAC7B,WAAW,EAAE,IAAI,CAAC,QAAQ,CAAC,EAAE;aAChC;YACD,SAAS,EAAE,CAAC,MAAM,CAAC;SACtB,CAAC,CAAC;QAEH,IAAI,OAAO,EAAE,CAAC;YACV,OAAO,CAAC,IAAI,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC;YAE7D,QAAQ,CAAC,MAAM,GAAG,SAAS,CAAC;QAChC,CAAC;aAAM,CAAC;YACJ,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC;YAE7C,OAAO,GAAG,IAAI,CAAC,yBAAyB,CAAC,MAAM,CAAC;gBAC5C,WAAW,EAAE,IAAI,CAAC,QAAQ,CAAC,EAAE;gBAC7B,gBAAgB,EAAE,QAAQ,CAAC,EAAE;gBAC7B,kBAAkB,EAAE,IAAI,CAAC,IAAI,EAAE,4BAA4B;gBAC3D,iBAAiB,EAAE,IAAI,CAAC,QAAQ,CAAC,QAAQ;gBACzC,IAAI;gBACJ,OAAO,EAAE,IAAI,CAAC,EAAE;gBAChB,aAAa,EAAE,IAAI,CAAC,QAAQ;aAC/B,CAAC,CAAC;YAEH,QAAQ,CAAC,MAAM,GAAG,SAAS,CAAC;QAChC,CAAC;QAED,MAAM,IAAI,CAAC,yBAAyB,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAEnD,OAAO,OAAO,CAAC;IACnB,CAAC;IAES,KAAK,CAAC,SAAS,CACrB,QAAkC,EAClC,OAAsC;QAEtC,MAAM,sBAAsB,GAAG,IAAI,CAAC,UAAU,CAAC,aAAa,CAAC,2CAAiC,CAAC,CAAC;QAChG,MAAM,QAAQ,GAAG,MAAM,sBAAsB,CAAC,MAAM,CAAC;YACjD,WAAW,EAAE,IAAI,CAAC,QAAQ,CAAC,EAAE;SAChC,CAAC,CAAC;QAEH,MAAM,KAAK,GAA4B,EAAE,CAAC;QAC1C,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,QAAQ,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YACvC,MAAM,MAAM,GAAG,QAAQ,CAAC,CAAC,CAAC,CAAC;YAE3B,KAAK,CAAC,IAAI,CAAC;gBACP,EAAE,EAAE,MAAM,CAAC,OAAO;gBAClB,OAAO,EAAE,MAAM,CAAC,aAAa;gBAC7B,SAAS,EAAE,IAAI,CAAC,0BAA0B,CAAC,QAAQ,EAAE,MAAM,CAAC;aAC/D,CAAC,CAAC;QACP,CAAC;QAED,MAAM,IAAI,CAAC,cAAc,CAAC,SAAS,CAAC;YAChC,KAAK;YACL,EAAE,EAAE,OAAO,CAAC,OAAO;YACnB,OAAO,EAAE,OAAO,CAAC,aAAa;SACjC,CAAC,CAAC;IACP,CAAC;IAES,KAAK,CAAC,eAAe,CAC3B,QAAkC,EAClC,OAAsC;QAEtC,MAAM,sBAAsB,GAAG,IAAI,CAAC,UAAU,CAAC,aAAa,CAAC,iDAAuC,CAAC,CAAC;QACtG,MAAM,QAAQ,GAAG,MAAM,sBAAsB,CAAC,MAAM,CAAC;YACjD,WAAW,EAAE,IAAI,CAAC,QAAQ,CAAC,EAAE;SAChC,CAAC,CAAC;QAEH,MAAM,KAAK,GAA4B,EAAE,CAAC;QAC1C,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,QAAQ,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YACvC,MAAM,MAAM,GAAG,QAAQ,CAAC,CAAC,CAAC,CAAC;YAE3B,KAAK,CAAC,IAAI,CAAC;gBACP,EAAE,EAAE,MAAM,CAAC,aAAa;gBACxB,OAAO,EAAE,MAAM,CAAC,mBAAmB;gBACnC,SAAS,EAAE,IAAI,CAAC,0BAA0B,CAAC,QAAQ,EAAE,MAAM,CAAC;aAC/D,CAAC,CAAC;QACP,CAAC;QAED,MAAM,IAAI,CAAC,cAAc,CAAC,eAAe,CAAC;YACtC,KAAK;YACL,EAAE,EAAE,OAAO,CAAC,OAAO;YACnB,OAAO,EAAE,OAAO,CAAC,aAAa;SACjC,CAAC,CAAC;IACP,CAAC;IAES,0BAA0B,CAChC,QAAkC,EAClC,OAAwE;QAExE,IAAI,SAAyC,CAAC;QAC9C,IACI,OAAO,CAAC,oBAAoB,KAAK,0CAA+B,CAAC,IAAI;YACrE,QAAQ,CAAC,MAAM,KAAK,SAAS,EAC/B,CAAC;YACC,SAAS,GAAG,uCAA6B,CAAC,IAAI,CAAC;QACnD,CAAC;aAAM,IAAI,CAAC,OAAO,CAAC,IAAI,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;YACzC,SAAS,GAAG,uCAA6B,CAAC,MAAM,CAAC;QACrD,CAAC;aAAM,CAAC;YACJ,MAAM,KAAK,GAAG,IAAA,0BAAoB,EAC9B,QAAQ,CAAC,IAAI,EACb,OAAO,CAAC,IAAI,EACZ,OAAO,CAAC,KAAK,EACb,OAAO,CAAC,cAAc,CACzB,CAAC;YAEF,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBACrB,SAAS,GAAG,uCAA6B,CAAC,MAAM,CAAC;YACrD,CAAC;iBAAM,CAAC;gBACJ,SAAS,GAAG,uCAA6B,CAAC,MAAM,CAAC;YACrD,CAAC;QACL,CAAC;QAED,OAAO,SAAS,CAAC;IACrB,CAAC;IAES,KAAK,CAAC,kBAAkB,CAAC,QAAkC;QACjE,MAAM,UAAU,GAAG,IAAI,CAAC,UAAU,CAAC,aAAa,CAAC,gDAAsC,CAAC,CAAC;QACzF,MAAM,QAAQ,GAAG,MAAM,UAAU,CAAC,MAAM,CAAC;YACrC,WAAW,EAAE,IAAI,CAAC,QAAQ,CAAC,EAAE;SAChC,CAAC,CAAC;QAEH,MAAM,UAAU,GAAoC,EAAE,CAAC;QAEvD,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,QAAQ,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YACvC,MAAM,MAAM,GAAG,QAAQ,CAAC,CAAC,CAAC,CAAC;YAE3B,MAAM,KAAK,GAAG,IAAA,0BAAoB,EAC9B,QAAQ,CAAC,IAAI,EACb,MAAM,CAAC,WAAW,EAClB,MAAM,CAAC,YAAY,EACnB,MAAM,CAAC,qBAAqB,CAC/B,CAAC;YAEF,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBACrB,SAAS;YACb,CAAC;YAED,IAAI,MAAM,CAAC,YAAY,EAAE,CAAC;gBACtB,UAAU,CAAC,MAAM,CAAC,WAAW,CAAC,GAAG;oBAC7B,KAAK,EAAE,CAAC,MAAM,CAAC,YAAY,CAAC;oBAC5B,IAAI,EAAE,MAAM,CAAC,oBAAoB;iBACpC,CAAC;YACN,CAAC;iBAAM,CAAC;gBACJ,UAAU,CAAC,MAAM,CAAC,WAAW,CAAC,GAAG;oBAC7B,KAAK;oBACL,IAAI,EAAE,MAAM,CAAC,oBAAoB;iBACpC,CAAC;YACN,CAAC;QACL,CAAC;QAED,OAAO,UAAU,CAAC;IACtB,CAAC;IAES,KAAK,CAAC,UAAU,CACtB,QAAkC,EAClC,IAAgB;QAEhB,MAAM,eAAe,GAAG,MAAM,IAAI,CAAC,kBAAkB,CAAC,QAAQ,CAAC,CAAC;QAChE,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,kCAAkC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAEpF,MAAM,mBAAmB,GAAG,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC;QAC5F,MAAM,qBAAqB,GAAG,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC;QAEhG,MAAM,kBAAkB,GAAG,MAAM,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;QACxD,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,kBAAkB,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YACjD,MAAM,YAAY,GAAG,kBAAkB,CAAC,CAAC,CAAC,CAAC;YAE3C,IAAI,KAAK,GAAY,qBAAqB,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;YACjE,IAAI,KAAK,KAAK,CAAC,CAAC,EAAE,CAAC;gBACf,SAAS;YACb,CAAC;YAED,MAAM,IAAI,GAAG,eAAe,CAAC,YAAY,CAAC,CAAC,IAAI;gBAC3C,0CAA+B,CAAC,MAAM,CAAC;YAE3C,MAAM,KAAK,GAAG,IAAA,oBAAc,EAAC,eAAe,CAAC,YAAY,CAAC,CAAC,KAAK,CAAC,CAAC;YAClE,IAAI,CAAC,IAAA,cAAQ,EAAC,KAAK,CAAC,IAAI,OAAO,KAAK,KAAK,WAAW,EAAE,CAAC;gBACnD,SAAS;YACb,CAAC;YAED,KAAK,GAAG,mBAAmB,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;YAClD,IAAI,KAAK,KAAK,CAAC,CAAC,EAAE,CAAC;gBACf,IAAI,OAAO,KAAK,CAAC,YAAY,CAAC,KAAK,WAAW,EAAE,CAAC;oBAC7C,IAAI,IAAI,KAAK,0CAA+B,CAAC,IAAI,EAAE,CAAC;wBAChD,SAAS;oBACb,CAAC;gBACL,CAAC;gBAED,0CAA0C;gBAC1C,KAAK,CAAC,YAAY,CAAC,GAAG,KAAK,CAAC;YAChC,CAAC;iBAAM,CAAC;gBACJ,MAAM,SAAS,GAAG,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC;gBAC7D,IAAI,CAAC,SAAS,EAAE,CAAC;oBACb,SAAS;gBACb,CAAC;gBAED,IAAI,OAAO,IAAI,CAAC,YAAY,CAAC,KAAK,WAAW,EAAE,CAAC;oBAC5C,IAAI,IAAI,KAAK,0CAA+B,CAAC,IAAI,EAAE,CAAC;wBAChD,SAAS;oBACb,CAAC;gBACL,CAAC;gBAED,0CAA0C;gBAC1C,IAAI,CAAC,YAAY,CAAC,GAAG,KAAK,CAAC;YAC/B,CAAC;QACL,CAAC;QAED,MAAM,IAAI,CAAC,cAAc,CAAC,kBAAkB,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;QAE1D,OAAO,IAAI,CAAC;IAChB,CAAC;IAES,KAAK,CAAC,UAAU,CACtB,QAAkC;QAElC,MAAM,eAAe,GAAG,MAAM,IAAI,CAAC,kBAAkB,CAAC,QAAQ,CAAC,CAAC;QAEhE,MAAM,KAAK,GAAG,IAAA,aAAO,EAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;QACrC,MAAM,MAAM,GAAG,IAAA,aAAO,EAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;QAEvC,MAAM,mBAAmB,GAAG,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC;QAC5F,MAAM,qBAAqB,GAAG,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC;QAEhG,MAAM,IAAI,GAAG,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QAC5C,MAAM,KAAK,GAAyB,EAAE,CAAC;QAEvC,MAAM,kBAAkB,GAAG,MAAM,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;QACxD,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,kBAAkB,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YACjD,MAAM,YAAY,GAAG,kBAAkB,CAAC,CAAC,CAAC,CAAC;YAC3C,IAAI,KAAK,GAAY,qBAAqB,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;YACjE,IAAI,KAAK,KAAK,CAAC,CAAC,EAAE,CAAC;gBACf,SAAS;YACb,CAAC;YAED,MAAM,SAAS,GAAG,eAAe,CAAC,YAAY,CAAC,CAAC;YAEhD,KAAK,GAAG,mBAAmB,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;YAClD,IAAI,KAAK,KAAK,CAAC,CAAC,EAAE,CAAC;gBACf,MAAM,KAAK,GAAG,IAAA,oBAAc,EAAC,SAAS,CAAC,KAAK,CAAC,CAAC;gBAC9C,IAAI,CAAC,IAAA,cAAQ,EAAC,KAAK,CAAC,IAAI,OAAO,KAAK,KAAK,WAAW,EAAE,CAAC;oBACnD,SAAS;gBACb,CAAC;gBAED,0CAA0C;gBAC1C,KAAK,CAAC,YAAY,CAAC,GAAG,KAAK,CAAC;YAChC,CAAC;iBAAM,CAAC;gBACJ,MAAM,SAAS,GAAG,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC;gBAC7D,IAAI,CAAC,SAAS,EAAE,CAAC;oBACb,SAAS;gBACb,CAAC;gBAED,QAAQ,YAAY,EAAE,CAAC;oBACnB,KAAK,MAAM,CAAC,CAAC,CAAC;wBACV,MAAM,MAAM,GAAG,IAAA,mBAAa,EAAC,SAAS,CAAC,KAAK,CAAC,CAAC;wBAC9C,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;4BACpB,KAAK,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC,CAAC;wBAC1B,CAAC;wBACD,MAAM;oBACV,CAAC;oBACD,KAAK,OAAO,CAAC,CAAC,CAAC;wBACX,MAAM,MAAM,GAAG,IAAA,mBAAa,EAAC,SAAS,CAAC,KAAK,CAAC,CAAC;wBAC9C,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;4BACpB,MAAM,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC,CAAC;wBAC3B,CAAC;wBACD,MAAM;oBACV,CAAC;oBACD,OAAO,CAAC,CAAC,CAAC;wBACN,MAAM,KAAK,GAAG,IAAA,oBAAc,EAAC,SAAS,CAAC,KAAK,CAAC,CAAC;wBAC9C,IAAI,CAAC,IAAA,cAAQ,EAAC,KAAK,CAAC,IAAI,OAAO,KAAK,KAAK,WAAW,EAAE,CAAC;4BACnD,SAAS;wBACb,CAAC;wBAED,0CAA0C;wBAC1C,IAAI,CAAC,YAAY,CAAC,GAAG,KAAK,CAAC;wBAC3B,MAAM;oBACV,CAAC;gBACL,CAAC;YACL,CAAC;QACL,CAAC;QAED,OAAO,IAAI,CAAC,eAAe,CAAC;YACxB,UAAU,EAAE,IAAI;YAChB,eAAe,EAAE,KAAK;YACtB,QAAQ,EAAE,CAAC;YACX,iBAAiB,EAAE,KAAK;YACxB,kBAAkB,EAAE,MAAM;SAC7B,CAAC,CAAC;IACP,CAAC;IAES,KAAK,CAAC,eAAe,CAAC,OAA0B;QACtD,OAAO,CAAC,QAAQ,EAAE,CAAC;QAEnB,IAAI,OAAO,CAAC,QAAQ,IAAI,CAAC,EAAE,CAAC;YACxB,MAAM,IAAI,sBAAe,CAAC,gCAAgC,CAAC,CAAC;QAChE,CAAC;QAED,OACI,CAAC,OAAO,CAAC,UAAU,CAAC,IAAI;YACxB,OAAO,CAAC,iBAAiB,CAAC,MAAM,GAAG,CAAC,EACtC,CAAC;YACC,MAAM,IAAI,GAAG,OAAO,CAAC,iBAAiB,CAAC,KAAK,EAAE,CAAC;YAC/C,IAAI,IAAI,IAAI,IAAA,0BAAe,EAAC,IAAI,CAAC,EAAE,CAAC;gBAChC,OAAO,CAAC,UAAU,CAAC,IAAI,GAAG,IAAI,CAAC;gBAC/B,MAAM;YACV,CAAC;QACL,CAAC;QAED,OACI,CAAC,OAAO,CAAC,UAAU,CAAC,KAAK;YACzB,OAAO,CAAC,kBAAkB,CAAC,MAAM,GAAG,CAAC,EACvC,CAAC;YACC,MAAM,KAAK,GAAG,OAAO,CAAC,kBAAkB,CAAC,KAAK,EAAE,CAAC;YACjD,IAAI,KAAK,IAAI,IAAA,2BAAgB,EAAC,KAAK,CAAC,EAAE,CAAC;gBACnC,OAAO,CAAC,UAAU,CAAC,KAAK,GAAG,KAAK,CAAC;gBACjC,MAAM;YACV,CAAC;QACL,CAAC;QAED,IAAI,CAAC;YACD,OAAO,CAAC,UAAU,CAAC,IAAI,GAAG,OAAO,CAAC,UAAU,CAAC,IAAI,IAAI,IAAA,kBAAY,EAAC,kEAAkE,EAAE,EAAE,CAAC,CAAC;YAC1I,OAAO,CAAC,UAAU,CAAC,YAAY,GAAG,OAAO,CAAC,UAAU,CAAC,YAAY,IAAI,OAAO,CAAC,UAAU,CAAC,IAAI,CAAC;YAC7F,OAAO,CAAC,UAAU,CAAC,WAAW,GAAG,KAAK,CAAC;YACvC,OAAO,CAAC,UAAU,CAAC,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC;YACrD,OAAO,CAAC,UAAU,CAAC,MAAM,GAAG,IAAI,CAAC;YAEjC,MAAM,IAAI,CAAC,cAAc,CAAC,kBAAkB,CAAC,OAAO,CAAC,UAAU,EAAE,OAAO,CAAC,eAAe,CAAC,CAAC;YAE1F,OAAO,OAAO,CAAC,UAAU,CAAC;QAC9B,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACT,sEAAsE;YACtE,OAAO,CAAC,UAAU,CAAC,IAAI,GAAG,SAAS,CAAC;YACpC,OAAO,IAAI,CAAC,eAAe,CAAC,OAAO,CAAC,CAAC;QACzC,CAAC;IACL,CAAC;CACJ;AAtXD,wEAsXC"}
+{"version":3,"file":"module.js","sourceRoot":"","sources":["../../../../src/services/identity-provider/account/module.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;;AAQH,+CAI0B;AAC1B,qCAMqB;AACrB,yCAAqD;AACrD,qCAA6C;AAM7C,uDAOmC;AAgBnC,MAAa,8BAA8B;IAiBvC,YACI,UAAsB,EACtB,QAA0B;QAZpB,mBAAc,GAAoB;YACxC,YAAY;YACZ,WAAW;YACX,QAAQ;YACR,OAAO;YACP,cAAc;SACjB,CAAC;QAQE,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC;QAC7B,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAC;QAEzB,IAAI,CAAC,cAAc,GAAG,IAAI,wBAAc,CAAC,UAAU,CAAC,CAAC;QACrD,IAAI,CAAC,yBAAyB,GAAG,UAAU,CAAC,aAAa,CAAC,uCAA6B,CAAC,CAAC;IAC7F,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,QAAkC;QACzC,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAC;QAEjD,MAAM,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;QACxC,MAAM,IAAI,CAAC,eAAe,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;QAE9C,OAAO,OAAO,CAAC;IACnB,CAAC;IAES,KAAK,CAAC,WAAW,CAAC,QAAkC;QAC1D,IAAI,OAAO,GAAG,MAAM,IAAI,CAAC,yBAAyB,CAAC,OAAO,CAAC;YACvD,KAAK,EAAE;gBACH,gBAAgB,EAAE,QAAQ,CAAC,EAAE;gBAC7B,WAAW,EAAE,IAAI,CAAC,QAAQ,CAAC,EAAE;aAChC;YACD,SAAS,EAAE,CAAC,MAAM,CAAC;SACtB,CAAC,CAAC;QAEH,IAAI,OAAO,EAAE,CAAC;YACV,OAAO,CAAC,IAAI,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC;YAE7D,QAAQ,CAAC,MAAM,GAAG,SAAS,CAAC;QAChC,CAAC;aAAM,CAAC;YACJ,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC;YAE7C,OAAO,GAAG,IAAI,CAAC,yBAAyB,CAAC,MAAM,CAAC;gBAC5C,WAAW,EAAE,IAAI,CAAC,QAAQ,CAAC,EAAE;gBAC7B,gBAAgB,EAAE,QAAQ,CAAC,EAAE;gBAC7B,kBAAkB,EAAE,IAAI,CAAC,IAAI,EAAE,4BAA4B;gBAC3D,iBAAiB,EAAE,IAAI,CAAC,QAAQ,CAAC,QAAQ;gBACzC,IAAI;gBACJ,OAAO,EAAE,IAAI,CAAC,EAAE;gBAChB,aAAa,EAAE,IAAI,CAAC,QAAQ;aAC/B,CAAC,CAAC;YAEH,QAAQ,CAAC,MAAM,GAAG,SAAS,CAAC;QAChC,CAAC;QAED,MAAM,IAAI,CAAC,yBAAyB,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAEnD,OAAO,OAAO,CAAC;IACnB,CAAC;IAES,KAAK,CAAC,SAAS,CACrB,QAAkC,EAClC,OAAsC;QAEtC,MAAM,sBAAsB,GAAG,IAAI,CAAC,UAAU,CAAC,aAAa,CAAC,2CAAiC,CAAC,CAAC;QAChG,MAAM,QAAQ,GAAG,MAAM,sBAAsB,CAAC,MAAM,CAAC;YACjD,WAAW,EAAE,IAAI,CAAC,QAAQ,CAAC,EAAE;SAChC,CAAC,CAAC;QAEH,MAAM,KAAK,GAA4B,EAAE,CAAC;QAC1C,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,QAAQ,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YACvC,MAAM,MAAM,GAAG,QAAQ,CAAC,CAAC,CAAC,CAAC;YAE3B,KAAK,CAAC,IAAI,CAAC;gBACP,EAAE,EAAE,MAAM,CAAC,OAAO;gBAClB,OAAO,EAAE,MAAM,CAAC,aAAa;gBAC7B,SAAS,EAAE,IAAI,CAAC,0BAA0B,CAAC,QAAQ,EAAE,MAAM,CAAC;aAC/D,CAAC,CAAC;QACP,CAAC;QAED,MAAM,IAAI,CAAC,cAAc,CAAC,SAAS,CAAC;YAChC,KAAK;YACL,EAAE,EAAE,OAAO,CAAC,OAAO;YACnB,OAAO,EAAE,OAAO,CAAC,aAAa;SACjC,CAAC,CAAC;IACP,CAAC;IAES,KAAK,CAAC,eAAe,CAC3B,QAAkC,EAClC,OAAsC;QAEtC,MAAM,sBAAsB,GAAG,IAAI,CAAC,UAAU,CAAC,aAAa,CAAC,iDAAuC,CAAC,CAAC;QACtG,MAAM,QAAQ,GAAG,MAAM,sBAAsB,CAAC,MAAM,CAAC;YACjD,WAAW,EAAE,IAAI,CAAC,QAAQ,CAAC,EAAE;SAChC,CAAC,CAAC;QAEH,MAAM,KAAK,GAA4B,EAAE,CAAC;QAC1C,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,QAAQ,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YACvC,MAAM,MAAM,GAAG,QAAQ,CAAC,CAAC,CAAC,CAAC;YAE3B,KAAK,CAAC,IAAI,CAAC;gBACP,EAAE,EAAE,MAAM,CAAC,aAAa;gBACxB,OAAO,EAAE,MAAM,CAAC,mBAAmB;gBACnC,SAAS,EAAE,IAAI,CAAC,0BAA0B,CAAC,QAAQ,EAAE,MAAM,CAAC;aAC/D,CAAC,CAAC;QACP,CAAC;QAED,MAAM,IAAI,CAAC,cAAc,CAAC,eAAe,CAAC;YACtC,KAAK;YACL,EAAE,EAAE,OAAO,CAAC,OAAO;YACnB,OAAO,EAAE,OAAO,CAAC,aAAa;SACjC,CAAC,CAAC;IACP,CAAC;IAES,0BAA0B,CAChC,QAAkC,EAClC,OAAwE;QAExE,IAAI,SAAyC,CAAC;QAC9C,IACI,OAAO,CAAC,oBAAoB,KAAK,0CAA+B,CAAC,IAAI;YACrE,QAAQ,CAAC,MAAM,KAAK,SAAS,EAC/B,CAAC;YACC,SAAS,GAAG,uCAA6B,CAAC,IAAI,CAAC;QACnD,CAAC;aAAM,IAAI,CAAC,OAAO,CAAC,IAAI,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;YACzC,SAAS,GAAG,uCAA6B,CAAC,MAAM,CAAC;QACrD,CAAC;aAAM,CAAC;YACJ,MAAM,KAAK,GAAG,IAAA,4BAAoB,EAC9B,QAAQ,CAAC,IAAI,EACb,OAAO,CAAC,IAAI,EACZ,OAAO,CAAC,KAAK,EACb,OAAO,CAAC,cAAc,CACzB,CAAC;YAEF,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBACrB,SAAS,GAAG,uCAA6B,CAAC,MAAM,CAAC;YACrD,CAAC;iBAAM,CAAC;gBACJ,SAAS,GAAG,uCAA6B,CAAC,MAAM,CAAC;YACrD,CAAC;QACL,CAAC;QAED,OAAO,SAAS,CAAC;IACrB,CAAC;IAES,KAAK,CAAC,kBAAkB,CAAC,QAAkC;QACjE,MAAM,UAAU,GAAG,IAAI,CAAC,UAAU,CAAC,aAAa,CAAC,gDAAsC,CAAC,CAAC;QACzF,MAAM,QAAQ,GAAG,MAAM,UAAU,CAAC,MAAM,CAAC;YACrC,WAAW,EAAE,IAAI,CAAC,QAAQ,CAAC,EAAE;SAChC,CAAC,CAAC;QAEH,MAAM,UAAU,GAAoC,EAAE,CAAC;QAEvD,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,QAAQ,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YACvC,MAAM,MAAM,GAAG,QAAQ,CAAC,CAAC,CAAC,CAAC;YAE3B,MAAM,KAAK,GAAG,IAAA,4BAAoB,EAC9B,QAAQ,CAAC,IAAI,EACb,MAAM,CAAC,WAAW,EAClB,MAAM,CAAC,YAAY,EACnB,MAAM,CAAC,qBAAqB,CAC/B,CAAC;YAEF,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBACrB,SAAS;YACb,CAAC;YAED,IAAI,MAAM,CAAC,YAAY,EAAE,CAAC;gBACtB,UAAU,CAAC,MAAM,CAAC,WAAW,CAAC,GAAG;oBAC7B,KAAK,EAAE,CAAC,MAAM,CAAC,YAAY,CAAC;oBAC5B,IAAI,EAAE,MAAM,CAAC,oBAAoB;iBACpC,CAAC;YACN,CAAC;iBAAM,CAAC;gBACJ,UAAU,CAAC,MAAM,CAAC,WAAW,CAAC,GAAG;oBAC7B,KAAK;oBACL,IAAI,EAAE,MAAM,CAAC,oBAAoB;iBACpC,CAAC;YACN,CAAC;QACL,CAAC;QAED,OAAO,UAAU,CAAC;IACtB,CAAC;IAES,KAAK,CAAC,UAAU,CACtB,QAAkC,EAClC,IAAgB;QAEhB,MAAM,eAAe,GAAG,MAAM,IAAI,CAAC,kBAAkB,CAAC,QAAQ,CAAC,CAAC;QAChE,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,4BAA4B,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAE9E,MAAM,mBAAmB,GAAG,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC;QAC5F,MAAM,qBAAqB,GAAG,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC;QAEhG,MAAM,kBAAkB,GAAG,MAAM,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;QACxD,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,kBAAkB,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YACjD,MAAM,YAAY,GAAG,kBAAkB,CAAC,CAAC,CAAC,CAAC;YAE3C,IAAI,KAAK,GAAY,qBAAqB,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;YACjE,IAAI,KAAK,KAAK,CAAC,CAAC,EAAE,CAAC;gBACf,SAAS;YACb,CAAC;YAED,MAAM,IAAI,GAAG,eAAe,CAAC,YAAY,CAAC,CAAC,IAAI;gBAC3C,0CAA+B,CAAC,MAAM,CAAC;YAE3C,MAAM,KAAK,GAAG,IAAA,oBAAc,EAAC,eAAe,CAAC,YAAY,CAAC,CAAC,KAAK,CAAC,CAAC;YAClE,IAAI,CAAC,IAAA,cAAQ,EAAC,KAAK,CAAC,IAAI,OAAO,KAAK,KAAK,WAAW,EAAE,CAAC;gBACnD,SAAS;YACb,CAAC;YAED,KAAK,GAAG,mBAAmB,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;YAClD,IAAI,KAAK,KAAK,CAAC,CAAC,EAAE,CAAC;gBACf,IAAI,OAAO,KAAK,CAAC,YAAY,CAAC,KAAK,WAAW,EAAE,CAAC;oBAC7C,IAAI,IAAI,KAAK,0CAA+B,CAAC,IAAI,EAAE,CAAC;wBAChD,SAAS;oBACb,CAAC;gBACL,CAAC;gBAED,0CAA0C;gBAC1C,KAAK,CAAC,YAAY,CAAC,GAAG,KAAK,CAAC;YAChC,CAAC;iBAAM,CAAC;gBACJ,MAAM,SAAS,GAAG,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC;gBAC7D,IAAI,CAAC,SAAS,EAAE,CAAC;oBACb,SAAS;gBACb,CAAC;gBAED,IAAI,OAAO,IAAI,CAAC,YAAY,CAAC,KAAK,WAAW,EAAE,CAAC;oBAC5C,IAAI,IAAI,KAAK,0CAA+B,CAAC,IAAI,EAAE,CAAC;wBAChD,SAAS;oBACb,CAAC;gBACL,CAAC;gBAED,0CAA0C;gBAC1C,IAAI,CAAC,YAAY,CAAC,GAAG,KAAK,CAAC;YAC/B,CAAC;QACL,CAAC;QAED,MAAM,IAAI,CAAC,cAAc,CAAC,aAAa,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;QAErD,OAAO,IAAI,CAAC;IAChB,CAAC;IAES,KAAK,CAAC,UAAU,CACtB,QAAkC;QAElC,MAAM,eAAe,GAAG,MAAM,IAAI,CAAC,kBAAkB,CAAC,QAAQ,CAAC,CAAC;QAEhE,MAAM,KAAK,GAAG,IAAA,aAAO,EAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;QACrC,MAAM,MAAM,GAAG,IAAA,aAAO,EAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;QAEvC,MAAM,mBAAmB,GAAG,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC;QAC5F,MAAM,qBAAqB,GAAG,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC;QAEhG,MAAM,IAAI,GAAG,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QAC5C,MAAM,KAAK,GAAyB,EAAE,CAAC;QAEvC,MAAM,kBAAkB,GAAG,MAAM,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;QACxD,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,kBAAkB,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YACjD,MAAM,YAAY,GAAG,kBAAkB,CAAC,CAAC,CAAC,CAAC;YAC3C,IAAI,KAAK,GAAY,qBAAqB,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;YACjE,IAAI,KAAK,KAAK,CAAC,CAAC,EAAE,CAAC;gBACf,SAAS;YACb,CAAC;YAED,MAAM,SAAS,GAAG,eAAe,CAAC,YAAY,CAAC,CAAC;YAEhD,KAAK,GAAG,mBAAmB,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;YAClD,IAAI,KAAK,KAAK,CAAC,CAAC,EAAE,CAAC;gBACf,MAAM,KAAK,GAAG,IAAA,oBAAc,EAAC,SAAS,CAAC,KAAK,CAAC,CAAC;gBAC9C,IAAI,CAAC,IAAA,cAAQ,EAAC,KAAK,CAAC,IAAI,OAAO,KAAK,KAAK,WAAW,EAAE,CAAC;oBACnD,SAAS;gBACb,CAAC;gBAED,0CAA0C;gBAC1C,KAAK,CAAC,YAAY,CAAC,GAAG,KAAK,CAAC;YAChC,CAAC;iBAAM,CAAC;gBACJ,MAAM,SAAS,GAAG,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC;gBAC7D,IAAI,CAAC,SAAS,EAAE,CAAC;oBACb,SAAS;gBACb,CAAC;gBAED,QAAQ,YAAY,EAAE,CAAC;oBACnB,KAAK,MAAM,CAAC,CAAC,CAAC;wBACV,MAAM,MAAM,GAAG,IAAA,mBAAa,EAAC,SAAS,CAAC,KAAK,CAAC,CAAC;wBAC9C,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;4BACpB,KAAK,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC,CAAC;wBAC1B,CAAC;wBACD,MAAM;oBACV,CAAC;oBACD,KAAK,OAAO,CAAC,CAAC,CAAC;wBACX,MAAM,MAAM,GAAG,IAAA,mBAAa,EAAC,SAAS,CAAC,KAAK,CAAC,CAAC;wBAC9C,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;4BACpB,MAAM,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC,CAAC;wBAC3B,CAAC;wBACD,MAAM;oBACV,CAAC;oBACD,OAAO,CAAC,CAAC,CAAC;wBACN,MAAM,KAAK,GAAG,IAAA,oBAAc,EAAC,SAAS,CAAC,KAAK,CAAC,CAAC;wBAC9C,IAAI,CAAC,IAAA,cAAQ,EAAC,KAAK,CAAC,IAAI,OAAO,KAAK,KAAK,WAAW,EAAE,CAAC;4BACnD,SAAS;wBACb,CAAC;wBAED,0CAA0C;wBAC1C,IAAI,CAAC,YAAY,CAAC,GAAG,KAAK,CAAC;wBAC3B,MAAM;oBACV,CAAC;gBACL,CAAC;YACL,CAAC;QACL,CAAC;QAED,OAAO,IAAI,CAAC,eAAe,CAAC;YACxB,UAAU,EAAE,IAAI;YAChB,eAAe,EAAE,KAAK;YACtB,QAAQ,EAAE,CAAC;YACX,iBAAiB,EAAE,KAAK;YACxB,kBAAkB,EAAE,MAAM;SAC7B,CAAC,CAAC;IACP,CAAC;IAES,KAAK,CAAC,eAAe,CAAC,OAA0B;QACtD,OAAO,CAAC,QAAQ,EAAE,CAAC;QAEnB,IAAI,OAAO,CAAC,QAAQ,IAAI,CAAC,EAAE,CAAC;YACxB,MAAM,IAAI,sBAAe,CAAC,gCAAgC,CAAC,CAAC;QAChE,CAAC;QAED,OACI,CAAC,OAAO,CAAC,UAAU,CAAC,IAAI;YACxB,OAAO,CAAC,iBAAiB,CAAC,MAAM,GAAG,CAAC,EACtC,CAAC;YACC,MAAM,IAAI,GAAG,OAAO,CAAC,iBAAiB,CAAC,KAAK,EAAE,CAAC;YAC/C,IAAI,IAAI,IAAI,IAAA,0BAAe,EAAC,IAAI,CAAC,EAAE,CAAC;gBAChC,OAAO,CAAC,UAAU,CAAC,IAAI,GAAG,IAAI,CAAC;gBAC/B,MAAM;YACV,CAAC;QACL,CAAC;QAED,OACI,CAAC,OAAO,CAAC,UAAU,CAAC,KAAK;YACzB,OAAO,CAAC,kBAAkB,CAAC,MAAM,GAAG,CAAC,EACvC,CAAC;YACC,MAAM,KAAK,GAAG,OAAO,CAAC,kBAAkB,CAAC,KAAK,EAAE,CAAC;YACjD,IAAI,KAAK,IAAI,IAAA,2BAAgB,EAAC,KAAK,CAAC,EAAE,CAAC;gBACnC,OAAO,CAAC,UAAU,CAAC,KAAK,GAAG,KAAK,CAAC;gBACjC,MAAM;YACV,CAAC;QACL,CAAC;QAED,IAAI,CAAC;YACD,OAAO,CAAC,UAAU,CAAC,IAAI,GAAG,OAAO,CAAC,UAAU,CAAC,IAAI,IAAI,IAAA,kBAAY,EAAC,kEAAkE,EAAE,EAAE,CAAC,CAAC;YAC1I,OAAO,CAAC,UAAU,CAAC,YAAY,GAAG,OAAO,CAAC,UAAU,CAAC,YAAY,IAAI,OAAO,CAAC,UAAU,CAAC,IAAI,CAAC;YAC7F,OAAO,CAAC,UAAU,CAAC,WAAW,GAAG,KAAK,CAAC;YACvC,OAAO,CAAC,UAAU,CAAC,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC;YACrD,OAAO,CAAC,UAAU,CAAC,MAAM,GAAG,IAAI,CAAC;YAEjC,MAAM,IAAI,CAAC,cAAc,CAAC,aAAa,CAAC,OAAO,CAAC,UAAU,EAAE,OAAO,CAAC,eAAe,CAAC,CAAC;YAErF,OAAO,OAAO,CAAC,UAAU,CAAC;QAC9B,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACT,sEAAsE;YACtE,OAAO,CAAC,UAAU,CAAC,IAAI,GAAG,SAAS,CAAC;YACpC,OAAO,IAAI,CAAC,eAAe,CAAC,OAAO,CAAC,CAAC;QACzC,CAAC;IACL,CAAC;CACJ;AAtXD,wEAsXC"}

package/dist/services/identity-provider/flow/core/oauth2.d.ts

@@ -1,10 +1,11 @@
+import type { AuthorizeParameters } from '@hapic/oauth2';
 import { OAuth2Client } from '@hapic/oauth2';
 import type { Request } from 'routup';
 import type { IOAuth2IdentityProviderFlow, IdentityProviderIdentity, OAuth2IdentityProviderFlowOptions } from '../types';
 export declare abstract class OAuth2IdentityProviderFlow implements IOAuth2IdentityProviderFlow {
     protected client: OAuth2Client;
     protected constructor(provider: OAuth2IdentityProviderFlowOptions);
-    buildAuthorizeURL(): string;
+    buildAuthorizeURL(parameters?: Partial<AuthorizeParameters>): string;
     abstract getIdentityForRequest(request: Request): Promise<IdentityProviderIdentity>;
 }
 //# sourceMappingURL=oauth2.d.ts.map