@authup/server-core 1.0.0-beta.26 → 1.0.0-beta.28

package/dist/http/oauth2/grant-types/abstract.js

@@ -1,65 +0,0 @@
-"use strict";
-/*
- * Copyright (c) 2022.
- * Author Peter Placzek (tada5hi)
- * For the full copyright and license information,
- * view the LICENSE file that was distributed with this source code.
- */
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.AbstractGrant = void 0;
-const specs_1 = require("@authup/specs");
-const typeorm_extension_1 = require("typeorm-extension");
-const domains_1 = require("../../../database/domains");
-const config_1 = require("../../../config");
-const token_1 = require("../token");
-class AbstractGrant {
-    // -----------------------------------------------------
-    constructor() {
-        this.config = (0, config_1.useConfig)();
-        this.tokenManager = new token_1.OAuth2TokenManager();
-    }
-    // -----------------------------------------------------
-    async issueAccessToken(context) {
-        const raw = (0, token_1.buildOAuth2AccessTokenPayload)({
-            issuer: this.config.publicUrl,
-            realmId: context.realmId,
-            realmName: context.realmName,
-            sub: context.sub,
-            subKind: context.subKind,
-            remoteAddress: context.remoteAddress,
-            scope: context.scope,
-            clientId: context.clientId,
-            maxAge: this.config.tokenAccessMaxAge,
-        });
-        return this.tokenManager.sign(raw);
-    }
-    async issueRefreshToken(accessToken) {
-        const dataSource = await (0, typeorm_extension_1.useDataSource)();
-        const repository = dataSource.getRepository(domains_1.OAuth2RefreshTokenEntity);
-        const entity = repository.create({
-            client_id: accessToken.client_id,
-            expires: new Date(Date.now() + (1000 * this.config.tokenRefreshMaxAge)).toISOString(),
-            scope: accessToken.scope,
-            access_token: accessToken.jti,
-            realm_id: accessToken.realm_id,
-            ...(accessToken.sub_kind === specs_1.OAuth2SubKind.USER ? { user_id: accessToken.sub } : {}),
-            ...(accessToken.sub_kind === specs_1.OAuth2SubKind.ROBOT ? { robot_id: accessToken.sub } : {}),
-        });
-        await repository.insert(entity);
-        const payload = (0, token_1.buildOAuth2RefreshTokenPayload)({
-            issuer: accessToken.iss,
-            remoteAddress: accessToken.remote_address,
-            sub: accessToken.sub,
-            subKind: accessToken.sub_kind,
-            clientId: accessToken.client_id,
-            realmId: accessToken.realm_id,
-            realmName: accessToken.realm_name,
-            scope: accessToken.scope,
-            maxAge: this.config.tokenRefreshMaxAge,
-        });
-        payload.jti = entity.id;
-        return this.tokenManager.sign(payload);
-    }
-}
-exports.AbstractGrant = AbstractGrant;
-//# sourceMappingURL=abstract.js.map

package/dist/http/oauth2/grant-types/abstract.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"abstract.js","sourceRoot":"","sources":["../../../../src/http/oauth2/grant-types/abstract.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;;AAGH,yCAA8C;AAC9C,yDAAkD;AAClD,uDAAqE;AAErE,4CAA4C;AAC5C,oCAIkB;AAGlB,MAAsB,aAAa;IAK/B,wDAAwD;IAExD;QACI,IAAI,CAAC,MAAM,GAAG,IAAA,kBAAS,GAAE,CAAC;QAE1B,IAAI,CAAC,YAAY,GAAG,IAAI,0BAAkB,EAAE,CAAC;IACjD,CAAC;IAED,wDAAwD;IAE9C,KAAK,CAAC,gBAAgB,CAC5B,OAAgC;QAEhC,MAAM,GAAG,GAAG,IAAA,qCAA6B,EAAC;YACtC,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,SAAS;YAC7B,OAAO,EAAE,OAAO,CAAC,OAAO;YACxB,SAAS,EAAE,OAAO,CAAC,SAAS;YAC5B,GAAG,EAAE,OAAO,CAAC,GAAG;YAChB,OAAO,EAAE,OAAO,CAAC,OAAO;YACxB,aAAa,EAAE,OAAO,CAAC,aAAa;YACpC,KAAK,EAAE,OAAO,CAAC,KAAK;YACpB,QAAQ,EAAE,OAAO,CAAC,QAAQ;YAC1B,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,iBAAiB;SACxC,CAAC,CAAC;QAEH,OAAO,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACvC,CAAC;IAES,KAAK,CAAC,iBAAiB,CAC7B,WAA+B;QAE/B,MAAM,UAAU,GAAG,MAAM,IAAA,iCAAa,GAAE,CAAC;QACzC,MAAM,UAAU,GAAG,UAAU,CAAC,aAAa,CAAC,kCAAwB,CAAC,CAAC;QAEtE,MAAM,MAAM,GAAG,UAAU,CAAC,MAAM,CAAC;YAC7B,SAAS,EAAE,WAAW,CAAC,SAAS;YAChC,OAAO,EAAE,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,IAAI,GAAG,IAAI,CAAC,MAAM,CAAC,kBAAkB,CAAC,CAAC,CAAC,WAAW,EAAE;YACrF,KAAK,EAAE,WAAW,CAAC,KAAK;YACxB,YAAY,EAAE,WAAW,CAAC,GAAG;YAC7B,QAAQ,EAAE,WAAW,CAAC,QAAQ;YAC9B,GAAG,CAAC,WAAW,CAAC,QAAQ,KAAK,qBAAa,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,WAAW,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACpF,GAAG,CAAC,WAAW,CAAC,QAAQ,KAAK,qBAAa,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,WAAW,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACzF,CAAC,CAAC;QAEH,MAAM,UAAU,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QAEhC,MAAM,OAAO,GAAG,IAAA,sCAA8B,EAAC;YAC3C,MAAM,EAAE,WAAW,CAAC,GAAG;YACvB,aAAa,EAAE,WAAW,CAAC,cAAc;YACzC,GAAG,EAAE,WAAW,CAAC,GAAG;YACpB,OAAO,EAAE,WAAW,CAAC,QAAQ;YAC7B,QAAQ,EAAE,WAAW,CAAC,SAAS;YAC/B,OAAO,EAAE,WAAW,CAAC,QAAQ;YAC7B,SAAS,EAAE,WAAW,CAAC,UAAU;YACjC,KAAK,EAAE,WAAW,CAAC,KAAK;YACxB,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,kBAAkB;SACzC,CAAC,CAAC;QAEH,OAAO,CAAC,GAAG,GAAG,MAAM,CAAC,EAAE,CAAC;QAExB,OAAO,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAC3C,CAAC;CACJ;AAnED,sCAmEC"}

package/dist/http/oauth2/grant-types/authorize.d.ts

@@ -1,16 +0,0 @@
-import type { OAuth2TokenGrantResponse } from '@authup/specs';
-import type { OAuth2AuthorizationCode } from '@authup/core-kit';
-import type { Request } from 'routup';
-import { OAuth2AuthorizationCodeRepository } from '../authorize/repository';
-import { AbstractGrant } from './abstract';
-import type { Grant } from './type';
-export declare class AuthorizeGrantType extends AbstractGrant implements Grant {
-    protected codeRepository: OAuth2AuthorizationCodeRepository;
-    constructor();
-    run(request: Request): Promise<OAuth2TokenGrantResponse>;
-    validate(request: Request): Promise<OAuth2AuthorizationCode>;
-    protected extractRedirectURIParam(request: Request): string;
-    protected extractCodeParam(request: Request): string;
-    protected extractParam(req: Request, key: string): string | undefined;
-}
-//# sourceMappingURL=authorize.d.ts.map

package/dist/http/oauth2/grant-types/authorize.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"authorize.d.ts","sourceRoot":"","sources":["../../../../src/http/oauth2/grant-types/authorize.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,eAAe,CAAC;AAM9D,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,kBAAkB,CAAC;AAMhE,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,QAAQ,CAAC;AAGtC,OAAO,EAAE,iCAAiC,EAAE,MAAM,yBAAyB,CAAC;AAC5E,OAAO,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAC3C,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,QAAQ,CAAC;AAIpC,qBAAa,kBAAmB,SAAQ,aAAc,YAAW,KAAK;IAClE,SAAS,CAAC,cAAc,EAAG,iCAAiC,CAAC;;IAOvD,GAAG,CAAC,OAAO,EAAE,OAAO,GAAI,OAAO,CAAC,wBAAwB,CAAC;IAmCzD,QAAQ,CAAC,OAAO,EAAE,OAAO,GAAI,OAAO,CAAC,uBAAuB,CAAC;IAiCnE,SAAS,CAAC,uBAAuB,CAAC,OAAO,EAAE,OAAO,GAAI,MAAM;IAS5D,SAAS,CAAC,gBAAgB,CAAC,OAAO,EAAE,OAAO,GAAI,MAAM;IASrD,SAAS,CAAC,YAAY,CAAC,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,GAAI,MAAM,GAAG,SAAS;CAezE"}

package/dist/http/oauth2/grant-types/authorize.js

@@ -1,102 +0,0 @@
-"use strict";
-/*
- * Copyright (c) 2022.
- * Author Peter Placzek (tada5hi)
- * For the full copyright and license information,
- * view the LICENSE file that was distributed with this source code.
- */
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.AuthorizeGrantType = void 0;
-const specs_1 = require("@authup/specs");
-const core_kit_1 = require("@authup/core-kit");
-const body_1 = require("@routup/basic/body");
-const query_1 = require("@routup/basic/query");
-const routup_1 = require("routup");
-const authorize_1 = require("../authorize");
-const repository_1 = require("../authorize/repository");
-const abstract_1 = require("./abstract");
-const response_1 = require("../response");
-class AuthorizeGrantType extends abstract_1.AbstractGrant {
-    constructor() {
-        super();
-        this.codeRepository = new repository_1.OAuth2AuthorizationCodeRepository();
-    }
-    async run(request) {
-        const authorizationCode = await this.validate(request);
-        const { payload: accessTokenPayload, token: accessToken, } = await this.issueAccessToken({
-            remoteAddress: (0, routup_1.getRequestIP)(request, { trustProxy: true }),
-            sub: authorizationCode.user_id,
-            subKind: specs_1.OAuth2SubKind.USER,
-            realmId: authorizationCode.realm_id,
-            realmName: authorizationCode.realm_name,
-            scope: authorizationCode.scope,
-            clientId: authorizationCode.client_id,
-        });
-        const { token: refreshToken, payload: refreshTokenPayload, } = await this.issueRefreshToken(accessTokenPayload);
-        const buildContext = {
-            accessToken,
-            accessTokenPayload,
-            refreshToken,
-            refreshTokenPayload,
-        };
-        if ((0, core_kit_1.hasOAuth2OpenIDScope)(authorizationCode.scope)) {
-            buildContext.idToken = authorizationCode.id_token;
-        }
-        return (0, response_1.buildOAuth2BearerTokenResponse)(buildContext);
-    }
-    async validate(request) {
-        const code = this.extractCodeParam(request);
-        const entity = await this.codeRepository.get(code);
-        if (!entity) {
-            throw specs_1.OAuth2Error.grantInvalid();
-        }
-        if (entity.redirect_uri) {
-            const redirectUri = this.extractRedirectURIParam(request);
-            if (!redirectUri || entity.redirect_uri !== redirectUri) {
-                throw specs_1.OAuth2Error.redirectUriMismatch();
-            }
-        }
-        if (entity.code_challenge) {
-            const codeVerifier = this.extractParam(request, 'code_verifier');
-            if (entity.code_challenge_method === specs_1.OAuth2AuthorizationCodeChallengeMethod.PLAIN) {
-                if (codeVerifier !== entity.code_challenge) {
-                    throw specs_1.OAuth2Error.grantInvalid('PKCE code_verifier mismatch.');
-                }
-            }
-            else {
-                const codeVerifierHash = await (0, authorize_1.buildOAuth2CodeChallenge)(codeVerifier);
-                if (codeVerifierHash !== entity.code_challenge) {
-                    throw specs_1.OAuth2Error.grantInvalid('PKCE code_verifier mismatch.');
-                }
-            }
-        }
-        return entity;
-    }
-    extractRedirectURIParam(request) {
-        const redirectUri = this.extractParam(request, 'redirect_uri');
-        if (!redirectUri) {
-            throw specs_1.OAuth2Error.redirectUriMismatch();
-        }
-        return redirectUri;
-    }
-    extractCodeParam(request) {
-        const code = this.extractParam(request, 'code');
-        if (!code) {
-            throw specs_1.OAuth2Error.requestInvalid();
-        }
-        return code;
-    }
-    extractParam(req, key) {
-        let value = (0, body_1.useRequestBody)(req, key);
-        if (!value) {
-            value = (0, query_1.useRequestQuery)(req, key);
-        }
-        if (typeof value === 'string' &&
-            value.length > 0) {
-            return value;
-        }
-        return undefined;
-    }
-}
-exports.AuthorizeGrantType = AuthorizeGrantType;
-//# sourceMappingURL=authorize.js.map

package/dist/http/oauth2/grant-types/authorize.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"authorize.js","sourceRoot":"","sources":["../../../../src/http/oauth2/grant-types/authorize.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;;AAGH,yCAIuB;AAEvB,+CAE0B;AAC1B,6CAAoD;AACpD,+CAAsD;AAEtD,mCAAsC;AACtC,4CAAwD;AACxD,wDAA4E;AAC5E,yCAA2C;AAG3C,0CAA6D;AAE7D,MAAa,kBAAmB,SAAQ,wBAAa;IAGjD;QACI,KAAK,EAAE,CAAC;QACR,IAAI,CAAC,cAAc,GAAG,IAAI,8CAAiC,EAAE,CAAC;IAClE,CAAC;IAED,KAAK,CAAC,GAAG,CAAC,OAAgB;QACtB,MAAM,iBAAiB,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;QAEvD,MAAM,EACF,OAAO,EAAE,kBAAkB,EAC3B,KAAK,EAAE,WAAW,GACrB,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAAC;YAC5B,aAAa,EAAE,IAAA,qBAAY,EAAC,OAAO,EAAE,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC;YAC1D,GAAG,EAAE,iBAAiB,CAAC,OAAO;YAC9B,OAAO,EAAE,qBAAa,CAAC,IAAI;YAC3B,OAAO,EAAE,iBAAiB,CAAC,QAAQ;YACnC,SAAS,EAAE,iBAAiB,CAAC,UAAU;YACvC,KAAK,EAAE,iBAAiB,CAAC,KAAK;YAC9B,QAAQ,EAAE,iBAAiB,CAAC,SAAS;SACxC,CAAC,CAAC;QAEH,MAAM,EACF,KAAK,EAAE,YAAY,EACnB,OAAO,EAAE,mBAAmB,GAC/B,GAAG,MAAM,IAAI,CAAC,iBAAiB,CAAC,kBAAkB,CAAC,CAAC;QAErD,MAAM,YAAY,GAAsC;YACpD,WAAW;YACX,kBAAkB;YAClB,YAAY;YACZ,mBAAmB;SACtB,CAAC;QAEF,IAAI,IAAA,+BAAoB,EAAC,iBAAiB,CAAC,KAAK,CAAC,EAAE,CAAC;YAChD,YAAY,CAAC,OAAO,GAAG,iBAAiB,CAAC,QAAQ,CAAC;QACtD,CAAC;QAED,OAAO,IAAA,yCAA8B,EAAC,YAAY,CAAC,CAAC;IACxD,CAAC;IAED,KAAK,CAAC,QAAQ,CAAC,OAAgB;QAC3B,MAAM,IAAI,GAAG,IAAI,CAAC,gBAAgB,CAAC,OAAO,CAAC,CAAC;QAE5C,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACnD,IAAI,CAAC,MAAM,EAAE,CAAC;YACV,MAAM,mBAAW,CAAC,YAAY,EAAE,CAAC;QACrC,CAAC;QAED,IAAI,MAAM,CAAC,YAAY,EAAE,CAAC;YACtB,MAAM,WAAW,GAAG,IAAI,CAAC,uBAAuB,CAAC,OAAO,CAAC,CAAC;YAE1D,IAAI,CAAC,WAAW,IAAI,MAAM,CAAC,YAAY,KAAK,WAAW,EAAE,CAAC;gBACtD,MAAM,mBAAW,CAAC,mBAAmB,EAAE,CAAC;YAC5C,CAAC;QACL,CAAC;QAED,IAAI,MAAM,CAAC,cAAc,EAAE,CAAC;YACxB,MAAM,YAAY,GAAG,IAAI,CAAC,YAAY,CAAC,OAAO,EAAE,eAAe,CAAC,CAAC;YACjE,IAAI,MAAM,CAAC,qBAAqB,KAAK,8CAAsC,CAAC,KAAK,EAAE,CAAC;gBAChF,IAAI,YAAY,KAAK,MAAM,CAAC,cAAc,EAAE,CAAC;oBACzC,MAAM,mBAAW,CAAC,YAAY,CAAC,8BAA8B,CAAC,CAAC;gBACnE,CAAC;YACL,CAAC;iBAAM,CAAC;gBACJ,MAAM,gBAAgB,GAAG,MAAM,IAAA,oCAAwB,EAAC,YAAY,CAAC,CAAC;gBACtE,IAAI,gBAAgB,KAAK,MAAM,CAAC,cAAc,EAAE,CAAC;oBAC7C,MAAM,mBAAW,CAAC,YAAY,CAAC,8BAA8B,CAAC,CAAC;gBACnE,CAAC;YACL,CAAC;QACL,CAAC;QAED,OAAO,MAAM,CAAC;IAClB,CAAC;IAES,uBAAuB,CAAC,OAAgB;QAC9C,MAAM,WAAW,GAAG,IAAI,CAAC,YAAY,CAAC,OAAO,EAAE,cAAc,CAAC,CAAC;QAC/D,IAAI,CAAC,WAAW,EAAE,CAAC;YACf,MAAM,mBAAW,CAAC,mBAAmB,EAAE,CAAC;QAC5C,CAAC;QAED,OAAO,WAAW,CAAC;IACvB,CAAC;IAES,gBAAgB,CAAC,OAAgB;QACvC,MAAM,IAAI,GAAG,IAAI,CAAC,YAAY,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QAChD,IAAI,CAAC,IAAI,EAAE,CAAC;YACR,MAAM,mBAAW,CAAC,cAAc,EAAE,CAAC;QACvC,CAAC;QAED,OAAO,IAAI,CAAC;IAChB,CAAC;IAES,YAAY,CAAC,GAAY,EAAE,GAAW;QAC5C,IAAI,KAAK,GAAG,IAAA,qBAAc,EAAC,GAAG,EAAE,GAAG,CAAC,CAAC;QACrC,IAAI,CAAC,KAAK,EAAE,CAAC;YACT,KAAK,GAAG,IAAA,uBAAe,EAAC,GAAG,EAAE,GAAG,CAAC,CAAC;QACtC,CAAC;QAED,IACI,OAAO,KAAK,KAAK,QAAQ;YACzB,KAAK,CAAC,MAAM,GAAG,CAAC,EAClB,CAAC;YACC,OAAO,KAAK,CAAC;QACjB,CAAC;QAED,OAAO,SAAS,CAAC;IACrB,CAAC;CACJ;AA7GD,gDA6GC"}

package/dist/http/oauth2/grant-types/client-credentials.d.ts

@@ -1,11 +0,0 @@
-import type { OAuth2TokenGrantResponse } from '@authup/specs';
-import type { Request } from 'routup';
-import { ClientEntity } from '../../../database/domains';
-import { AbstractGrant } from './abstract';
-import type { Grant } from './type';
-export declare class ClientCredentialsGrant extends AbstractGrant implements Grant {
-    run(request: Request): Promise<OAuth2TokenGrantResponse>;
-    validate(request: Request): Promise<ClientEntity>;
-    protected getClientCredentials(request: Request): [string, string];
-}
-//# sourceMappingURL=client-credentials.d.ts.map

package/dist/http/oauth2/grant-types/client-credentials.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"client-credentials.d.ts","sourceRoot":"","sources":["../../../../src/http/oauth2/grant-types/client-credentials.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,eAAe,CAAC;AAW9D,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,QAAQ,CAAC;AAGtC,OAAO,EAAE,YAAY,EAAE,MAAM,2BAA2B,CAAC;AACzD,OAAO,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAC3C,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,QAAQ,CAAC;AAGpC,qBAAa,sBAAuB,SAAQ,aAAc,YAAW,KAAK;IAChE,GAAG,CAAC,OAAO,EAAE,OAAO,GAAI,OAAO,CAAC,wBAAwB,CAAC;IA6BzD,QAAQ,CAAC,OAAO,EAAE,OAAO,GAAI,OAAO,CAAC,YAAY,CAAC;IAqBxD,SAAS,CAAC,oBAAoB,CAAC,OAAO,EAAE,OAAO,GAAI,CAAC,MAAM,EAAE,MAAM,CAAC;CAmBtE"}

package/dist/http/oauth2/grant-types/client-credentials.js

@@ -1,72 +0,0 @@
-"use strict";
-/*
- * Copyright (c) 2022.
- * Author Peter Placzek (tada5hi)
- * For the full copyright and license information,
- * view the LICENSE file that was distributed with this source code.
- */
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.ClientCredentialsGrant = void 0;
-const specs_1 = require("@authup/specs");
-const core_kit_1 = require("@authup/core-kit");
-const body_1 = require("@routup/basic/body");
-const query_1 = require("@routup/basic/query");
-const hapic_1 = require("hapic");
-const routup_1 = require("routup");
-const typeorm_extension_1 = require("typeorm-extension");
-const domains_1 = require("../../../database/domains");
-const abstract_1 = require("./abstract");
-const response_1 = require("../response");
-class ClientCredentialsGrant extends abstract_1.AbstractGrant {
-    async run(request) {
-        const client = await this.validate(request);
-        const { token: accessToken, payload: accessTokenPayload, } = await this.issueAccessToken({
-            remoteAddress: (0, routup_1.getRequestIP)(request, { trustProxy: true }),
-            scope: core_kit_1.ScopeName.GLOBAL,
-            sub: client.id,
-            subKind: specs_1.OAuth2SubKind.CLIENT,
-            realmId: client.realm.id,
-            realmName: client.realm.name,
-            clientId: client.id,
-        });
-        const { token: refreshToken, payload: refreshTokenPayload, } = await this.issueRefreshToken(accessTokenPayload);
-        return (0, response_1.buildOAuth2BearerTokenResponse)({
-            accessToken,
-            accessTokenPayload,
-            refreshToken,
-            refreshTokenPayload,
-        });
-    }
-    async validate(request) {
-        const [id, secret] = this.getClientCredentials(request);
-        const dataSource = await (0, typeorm_extension_1.useDataSource)();
-        const repository = dataSource.getRepository(domains_1.ClientEntity);
-        const entity = await repository.findOne({
-            where: {
-                id,
-                secret,
-            },
-            relations: ['realm'],
-        });
-        if (!entity) {
-            throw core_kit_1.UserError.credentialsInvalid();
-        }
-        return entity;
-    }
-    getClientCredentials(request) {
-        let clientId = (0, body_1.useRequestBody)(request, 'client_id') || (0, query_1.useRequestQuery)(request, 'client_id');
-        let clientSecret = (0, body_1.useRequestBody)(request, 'client_secret') || (0, query_1.useRequestQuery)(request, 'client_secret');
-        if (!clientId && !clientSecret) {
-            const { authorization: headerValue } = request.headers;
-            const header = (0, hapic_1.parseAuthorizationHeader)(headerValue);
-            if (header.type !== hapic_1.AuthorizationHeaderType.BASIC) {
-                throw specs_1.OAuth2Error.requestInvalid();
-            }
-            clientId = header.username;
-            clientSecret = header.password;
-        }
-        return [clientId, clientSecret];
-    }
-}
-exports.ClientCredentialsGrant = ClientCredentialsGrant;
-//# sourceMappingURL=client-credentials.js.map

package/dist/http/oauth2/grant-types/client-credentials.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"client-credentials.js","sourceRoot":"","sources":["../../../../src/http/oauth2/grant-types/client-credentials.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;;AAGH,yCAGuB;AACvB,+CAE0B;AAC1B,6CAAoD;AACpD,+CAAsD;AACtD,iCAA0E;AAE1E,mCAAsC;AACtC,yDAAkD;AAClD,uDAAyD;AACzD,yCAA2C;AAE3C,0CAA6D;AAE7D,MAAa,sBAAuB,SAAQ,wBAAa;IACrD,KAAK,CAAC,GAAG,CAAC,OAAgB;QACtB,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;QAE5C,MAAM,EACF,KAAK,EAAE,WAAW,EAClB,OAAO,EAAE,kBAAkB,GAC9B,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAAC;YAC5B,aAAa,EAAE,IAAA,qBAAY,EAAC,OAAO,EAAE,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC;YAC1D,KAAK,EAAE,oBAAS,CAAC,MAAM;YACvB,GAAG,EAAE,MAAM,CAAC,EAAE;YACd,OAAO,EAAE,qBAAa,CAAC,MAAM;YAC7B,OAAO,EAAE,MAAM,CAAC,KAAK,CAAC,EAAE;YACxB,SAAS,EAAE,MAAM,CAAC,KAAK,CAAC,IAAI;YAC5B,QAAQ,EAAE,MAAM,CAAC,EAAE;SACtB,CAAC,CAAC;QAEH,MAAM,EACF,KAAK,EAAE,YAAY,EACnB,OAAO,EAAE,mBAAmB,GAC/B,GAAG,MAAM,IAAI,CAAC,iBAAiB,CAAC,kBAAkB,CAAC,CAAC;QAErD,OAAO,IAAA,yCAA8B,EAAC;YAClC,WAAW;YACX,kBAAkB;YAClB,YAAY;YACZ,mBAAmB;SACtB,CAAC,CAAC;IACP,CAAC;IAED,KAAK,CAAC,QAAQ,CAAC,OAAgB;QAC3B,MAAM,CAAC,EAAE,EAAE,MAAM,CAAC,GAAG,IAAI,CAAC,oBAAoB,CAAC,OAAO,CAAC,CAAC;QAExD,MAAM,UAAU,GAAG,MAAM,IAAA,iCAAa,GAAE,CAAC;QACzC,MAAM,UAAU,GAAG,UAAU,CAAC,aAAa,CAAC,sBAAY,CAAC,CAAC;QAE1D,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,OAAO,CAAC;YACpC,KAAK,EAAE;gBACH,EAAE;gBACF,MAAM;aACT;YACD,SAAS,EAAE,CAAC,OAAO,CAAC;SACvB,CAAC,CAAC;QAEH,IAAI,CAAC,MAAM,EAAE,CAAC;YACV,MAAM,oBAAS,CAAC,kBAAkB,EAAE,CAAC;QACzC,CAAC;QAED,OAAO,MAAM,CAAC;IAClB,CAAC;IAES,oBAAoB,CAAC,OAAgB;QAC3C,IAAI,QAAQ,GAAG,IAAA,qBAAc,EAAC,OAAO,EAAE,WAAW,CAAC,IAAI,IAAA,uBAAe,EAAC,OAAO,EAAE,WAAW,CAAC,CAAC;QAC7F,IAAI,YAAY,GAAG,IAAA,qBAAc,EAAC,OAAO,EAAE,eAAe,CAAC,IAAI,IAAA,uBAAe,EAAC,OAAO,EAAE,eAAe,CAAC,CAAC;QAEzG,IAAI,CAAC,QAAQ,IAAI,CAAC,YAAY,EAAE,CAAC;YAC7B,MAAM,EAAE,aAAa,EAAE,WAAW,EAAE,GAAG,OAAO,CAAC,OAAO,CAAC;YAEvD,MAAM,MAAM,GAAG,IAAA,gCAAwB,EAAC,WAAW,CAAC,CAAC;YAErD,IAAI,MAAM,CAAC,IAAI,KAAK,+BAAuB,CAAC,KAAK,EAAE,CAAC;gBAChD,MAAM,mBAAW,CAAC,cAAc,EAAE,CAAC;YACvC,CAAC;YAED,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAC;YAC3B,YAAY,GAAG,MAAM,CAAC,QAAQ,CAAC;QACnC,CAAC;QAED,OAAO,CAAC,QAAQ,EAAE,YAAY,CAAC,CAAC;IACpC,CAAC;CACJ;AAtED,wDAsEC"}

package/dist/http/oauth2/grant-types/create.d.ts

@@ -1,4 +0,0 @@
-import { OAuth2TokenGrant } from '@authup/specs';
-import type { Grant } from './type';
-export declare function createOAuth2Grant(type: `${OAuth2TokenGrant}`): Grant;
-//# sourceMappingURL=create.d.ts.map

package/dist/http/oauth2/grant-types/create.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"create.d.ts","sourceRoot":"","sources":["../../../../src/http/oauth2/grant-types/create.ts"],"names":[],"mappings":"AAOA,OAAO,EAAE,gBAAgB,EAAE,MAAM,eAAe,CAAC;AAMjD,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,QAAQ,CAAC;AAEpC,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,GAAG,gBAAgB,EAAE,GAAG,KAAK,CAoBpE"}

package/dist/http/oauth2/grant-types/create.js

@@ -1,36 +0,0 @@
-"use strict";
-/*
- * Copyright (c) 2025.
- * Author Peter Placzek (tada5hi)
- * For the full copyright and license information,
- * view the LICENSE file that was distributed with this source code.
- */
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.createOAuth2Grant = createOAuth2Grant;
-const specs_1 = require("@authup/specs");
-const authorize_1 = require("./authorize");
-const client_credentials_1 = require("./client-credentials");
-const robot_credentials_1 = require("./robot-credentials");
-const password_1 = require("./password");
-const refresh_token_1 = require("./refresh-token");
-function createOAuth2Grant(type) {
-    switch (type) {
-        case specs_1.OAuth2TokenGrant.AUTHORIZATION_CODE: {
-            return new authorize_1.AuthorizeGrantType();
-        }
-        case specs_1.OAuth2TokenGrant.CLIENT_CREDENTIALS: {
-            return new client_credentials_1.ClientCredentialsGrant();
-        }
-        case specs_1.OAuth2TokenGrant.ROBOT_CREDENTIALS: {
-            return new robot_credentials_1.RobotCredentialsGrantType();
-        }
-        case specs_1.OAuth2TokenGrant.PASSWORD: {
-            return new password_1.PasswordGrantType();
-        }
-        case specs_1.OAuth2TokenGrant.REFRESH_TOKEN: {
-            return new refresh_token_1.RefreshTokenGrantType();
-        }
-    }
-    throw new SyntaxError(`OAuth2 grant type ${type} is not supported.`);
-}
-//# sourceMappingURL=create.js.map

package/dist/http/oauth2/grant-types/create.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"create.js","sourceRoot":"","sources":["../../../../src/http/oauth2/grant-types/create.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;AAUH,8CAoBC;AA5BD,yCAAiD;AACjD,2CAAiD;AACjD,6DAA8D;AAC9D,2DAAgE;AAChE,yCAA+C;AAC/C,mDAAwD;AAGxD,SAAgB,iBAAiB,CAAC,IAA2B;IACzD,QAAQ,IAAI,EAAE,CAAC;QACX,KAAK,wBAAgB,CAAC,kBAAkB,CAAC,CAAC,CAAC;YACvC,OAAO,IAAI,8BAAkB,EAAE,CAAC;QACpC,CAAC;QACD,KAAK,wBAAgB,CAAC,kBAAkB,CAAC,CAAC,CAAC;YACvC,OAAO,IAAI,2CAAsB,EAAE,CAAC;QACxC,CAAC;QACD,KAAK,wBAAgB,CAAC,iBAAiB,CAAC,CAAC,CAAC;YACtC,OAAO,IAAI,6CAAyB,EAAE,CAAC;QAC3C,CAAC;QACD,KAAK,wBAAgB,CAAC,QAAQ,CAAC,CAAC,CAAC;YAC7B,OAAO,IAAI,4BAAiB,EAAE,CAAC;QACnC,CAAC;QACD,KAAK,wBAAgB,CAAC,aAAa,CAAC,CAAC,CAAC;YAClC,OAAO,IAAI,qCAAqB,EAAE,CAAC;QACvC,CAAC;IACL,CAAC;IAED,MAAM,IAAI,WAAW,CAAC,qBAAqB,IAAI,oBAAoB,CAAC,CAAC;AACzE,CAAC"}

package/dist/http/oauth2/grant-types/index.d.ts

@@ -1,10 +0,0 @@
-export * from './authorize';
-export * from './client-credentials';
-export * from './create';
-export * from './internal';
-export * from './password';
-export * from './refresh-token';
-export * from './robot-credentials';
-export * from './type';
-export * from './utils';
-//# sourceMappingURL=index.d.ts.map

package/dist/http/oauth2/grant-types/index.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/http/oauth2/grant-types/index.ts"],"names":[],"mappings":"AAOA,cAAc,aAAa,CAAC;AAC5B,cAAc,sBAAsB,CAAC;AACrC,cAAc,UAAU,CAAC;AACzB,cAAc,YAAY,CAAC;AAC3B,cAAc,YAAY,CAAC;AAC3B,cAAc,iBAAiB,CAAC;AAChC,cAAc,qBAAqB,CAAC;AACpC,cAAc,QAAQ,CAAC;AACvB,cAAc,SAAS,CAAC"}

package/dist/http/oauth2/grant-types/index.js

@@ -1,32 +0,0 @@
-"use strict";
-/*
- * Copyright (c) 2022.
- * Author Peter Placzek (tada5hi)
- * For the full copyright and license information,
- * view the LICENSE file that was distributed with this source code.
- */
-var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    var desc = Object.getOwnPropertyDescriptor(m, k);
-    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
-      desc = { enumerable: true, get: function() { return m[k]; } };
-    }
-    Object.defineProperty(o, k2, desc);
-}) : (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    o[k2] = m[k];
-}));
-var __exportStar = (this && this.__exportStar) || function(m, exports) {
-    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
-};
-Object.defineProperty(exports, "__esModule", { value: true });
-__exportStar(require("./authorize"), exports);
-__exportStar(require("./client-credentials"), exports);
-__exportStar(require("./create"), exports);
-__exportStar(require("./internal"), exports);
-__exportStar(require("./password"), exports);
-__exportStar(require("./refresh-token"), exports);
-__exportStar(require("./robot-credentials"), exports);
-__exportStar(require("./type"), exports);
-__exportStar(require("./utils"), exports);
-//# sourceMappingURL=index.js.map

package/dist/http/oauth2/grant-types/index.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../src/http/oauth2/grant-types/index.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;;;;;;;;;;;;;;;AAEH,8CAA4B;AAC5B,uDAAqC;AACrC,2CAAyB;AACzB,6CAA2B;AAC3B,6CAA2B;AAC3B,kDAAgC;AAChC,sDAAoC;AACpC,yCAAuB;AACvB,0CAAwB"}

package/dist/http/oauth2/grant-types/internal.d.ts

@@ -1,8 +0,0 @@
-import type { OAuth2TokenGrantResponse } from '@authup/specs';
-import type { Request } from 'routup';
-import { AbstractGrant } from './abstract';
-import type { Grant } from './type';
-export declare class InternalGrantType extends AbstractGrant implements Grant {
-    run(request: Request): Promise<OAuth2TokenGrantResponse>;
-}
-//# sourceMappingURL=internal.d.ts.map

package/dist/http/oauth2/grant-types/internal.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"internal.d.ts","sourceRoot":"","sources":["../../../../src/http/oauth2/grant-types/internal.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAiB,wBAAwB,EAAE,MAAM,eAAe,CAAC;AAE7E,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,QAAQ,CAAC;AAGtC,OAAO,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAC3C,OAAO,KAAK,EACR,KAAK,EACR,MAAM,QAAQ,CAAC;AAGhB,qBAAa,iBAAkB,SAAQ,aAAc,YAAW,KAAK;IAC3D,GAAG,CAAC,OAAO,EAAE,OAAO,GAAG,OAAO,CAAC,wBAAwB,CAAC;CA2BjE"}

package/dist/http/oauth2/grant-types/internal.js

@@ -1,36 +0,0 @@
-"use strict";
-/*
- * Copyright (c) 2022.
- * Author Peter Placzek (tada5hi)
- * For the full copyright and license information,
- * view the LICENSE file that was distributed with this source code.
- */
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.InternalGrantType = void 0;
-const core_kit_1 = require("@authup/core-kit");
-const routup_1 = require("routup");
-const request_1 = require("../../request");
-const abstract_1 = require("./abstract");
-const response_1 = require("../response");
-class InternalGrantType extends abstract_1.AbstractGrant {
-    async run(request) {
-        const identity = (0, request_1.useRequestIdentityOrFail)(request);
-        const { token: accessToken, payload: accessTokenPayload, } = await this.issueAccessToken({
-            remoteAddress: (0, routup_1.getRequestIP)(request, { trustProxy: true }),
-            scope: core_kit_1.ScopeName.GLOBAL,
-            realmId: identity.realmId,
-            realmName: identity.realmName,
-            sub: identity.id,
-            subKind: identity.type,
-        });
-        const { token: refreshToken, payload: refreshTokenPayload, } = await this.issueRefreshToken(accessTokenPayload);
-        return (0, response_1.buildOAuth2BearerTokenResponse)({
-            accessToken,
-            accessTokenPayload,
-            refreshToken,
-            refreshTokenPayload,
-        });
-    }
-}
-exports.InternalGrantType = InternalGrantType;
-//# sourceMappingURL=internal.js.map

package/dist/http/oauth2/grant-types/internal.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"internal.js","sourceRoot":"","sources":["../../../../src/http/oauth2/grant-types/internal.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;;AAGH,+CAA6C;AAE7C,mCAAsC;AACtC,2CAAyD;AACzD,yCAA2C;AAI3C,0CAA6D;AAE7D,MAAa,iBAAkB,SAAQ,wBAAa;IAChD,KAAK,CAAC,GAAG,CAAC,OAAgB;QACtB,MAAM,QAAQ,GAAG,IAAA,kCAAwB,EAAC,OAAO,CAAC,CAAC;QAEnD,MAAM,EACF,KAAK,EAAE,WAAW,EAClB,OAAO,EAAE,kBAAkB,GAC9B,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAAC;YAC5B,aAAa,EAAE,IAAA,qBAAY,EAAC,OAAO,EAAE,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC;YAC1D,KAAK,EAAE,oBAAS,CAAC,MAAM;YACvB,OAAO,EAAE,QAAQ,CAAC,OAAO;YACzB,SAAS,EAAE,QAAQ,CAAC,SAAS;YAC7B,GAAG,EAAE,QAAQ,CAAC,EAAE;YAChB,OAAO,EAAE,QAAQ,CAAC,IAA0B;SAC/C,CAAC,CAAC;QAEH,MAAM,EACF,KAAK,EAAE,YAAY,EACnB,OAAO,EAAE,mBAAmB,GAC/B,GAAG,MAAM,IAAI,CAAC,iBAAiB,CAAC,kBAAkB,CAAC,CAAC;QAErD,OAAO,IAAA,yCAA8B,EAAC;YAClC,WAAW;YACX,kBAAkB;YAClB,YAAY;YACZ,mBAAmB;SACtB,CAAC,CAAC;IACP,CAAC;CACJ;AA5BD,8CA4BC"}

package/dist/http/oauth2/grant-types/password.d.ts

@@ -1,11 +0,0 @@
-import type { OAuth2TokenGrantResponse } from '@authup/specs';
-import type { Request } from 'routup';
-import { UserEntity } from '../../../database/domains';
-import { AbstractGrant } from './abstract';
-import type { Grant } from './type';
-export declare class PasswordGrantType extends AbstractGrant implements Grant {
-    run(request: Request): Promise<OAuth2TokenGrantResponse>;
-    validate(request: Request): Promise<UserEntity>;
-    protected verifyCredentialsByLDAP(user: string, password: string, realmId?: string): Promise<UserEntity>;
-}
-//# sourceMappingURL=password.d.ts.map

package/dist/http/oauth2/grant-types/password.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"password.d.ts","sourceRoot":"","sources":["../../../../src/http/oauth2/grant-types/password.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,eAAe,CAAC;AAO9D,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,QAAQ,CAAC;AAWtC,OAAO,EAEH,UAAU,EAGb,MAAM,2BAA2B,CAAC;AAMnC,OAAO,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAC3C,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,QAAQ,CAAC;AAEpC,qBAAa,iBAAkB,SAAQ,aAAc,YAAW,KAAK;IAC3D,GAAG,CAAC,OAAO,EAAE,OAAO,GAAI,OAAO,CAAC,wBAAwB,CAAC;IA4BzD,QAAQ,CAAC,OAAO,EAAE,OAAO,GAAI,OAAO,CAAC,UAAU,CAAC;cAmCtC,uBAAuB,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,GAAI,OAAO,CAAC,UAAU,CAAC;CAgElH"}

package/dist/http/oauth2/grant-types/password.js

@@ -1,110 +0,0 @@
-"use strict";
-/*
- * Copyright (c) 2022.
- * Author Peter Placzek (tada5hi)
- * For the full copyright and license information,
- * view the LICENSE file that was distributed with this source code.
- */
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.PasswordGrantType = void 0;
-const specs_1 = require("@authup/specs");
-const core_kit_1 = require("@authup/core-kit");
-const body_1 = require("@routup/basic/body");
-const routup_1 = require("routup");
-const typeorm_extension_1 = require("typeorm-extension");
-const domains_1 = require("../../../database/domains");
-const domains_2 = require("../../../domains");
-const services_1 = require("../../../services");
-const response_1 = require("../response");
-const abstract_1 = require("./abstract");
-class PasswordGrantType extends abstract_1.AbstractGrant {
-    async run(request) {
-        const user = await this.validate(request);
-        const { token: accessToken, payload: accessTokenPayload, } = await this.issueAccessToken({
-            remoteAddress: (0, routup_1.getRequestIP)(request, { trustProxy: true }),
-            scope: core_kit_1.ScopeName.GLOBAL,
-            sub: user.id,
-            subKind: specs_1.OAuth2SubKind.USER,
-            realmId: user.realm.id,
-            realmName: user.realm.name,
-        });
-        const { token: refreshToken, payload: refreshTokenPayload, } = await this.issueRefreshToken(accessTokenPayload);
-        return (0, response_1.buildOAuth2BearerTokenResponse)({
-            accessToken,
-            accessTokenPayload,
-            refreshToken,
-            refreshTokenPayload,
-        });
-    }
-    async validate(request) {
-        const { username, password, realm_id: requestRealmId } = (0, body_1.useRequestBody)(request);
-        const realm = await (0, domains_1.resolveRealm)((0, routup_1.useRequestParam)(request, 'realmId') || requestRealmId);
-        const dataSource = await (0, typeorm_extension_1.useDataSource)();
-        const repository = new domains_1.UserRepository(dataSource);
-        let realmId;
-        if (realm && realm.id) {
-            realmId = realm.id;
-        }
-        let entity = await repository.verifyCredentials(username, password, realmId);
-        if (!entity) {
-            entity = await this.verifyCredentialsByLDAP(username, password, realmId);
-        }
-        if (!entity) {
-            throw core_kit_1.UserError.credentialsInvalid();
-        }
-        if (!entity.active) {
-            throw core_kit_1.UserError.inactive();
-        }
-        return entity;
-    }
-    async verifyCredentialsByLDAP(user, password, realmId) {
-        const dataSource = await (0, typeorm_extension_1.useDataSource)();
-        const repository = new domains_1.IdentityProviderRepository(dataSource);
-        const where = {
-            protocol: core_kit_1.IdentityProviderProtocol.LDAP,
-        };
-        if (realmId) {
-            where.realm_id = realmId;
-        }
-        const entities = await repository.findManyWithEA({
-            where,
-        });
-        let manager;
-        let account;
-        let identity;
-        for (let i = 0; i < entities.length; i++) {
-            const entity = entities[i];
-            if (entity.protocol !== core_kit_1.IdentityProviderProtocol.LDAP) {
-                continue;
-            }
-            const flow = new domains_2.LdapIdentityProviderFlow(entity);
-            try {
-                identity = await flow.getIdentityForCredentials(user, password);
-                await flow.unbind();
-            }
-            catch (e) {
-                await flow.unbind();
-                continue;
-            }
-            manager = new services_1.IdentityProviderAccountService(dataSource, entity);
-            account = await manager.save(identity);
-            break;
-        }
-        if (!account) {
-            return undefined;
-        }
-        if (account.user &&
-            account.user.realm) {
-            return account.user;
-        }
-        const userRepository = dataSource.getRepository(domains_1.UserEntity);
-        return userRepository.findOne({
-            where: {
-                id: account.user_id,
-            },
-            relations: ['realm'],
-        });
-    }
-}
-exports.PasswordGrantType = PasswordGrantType;
-//# sourceMappingURL=password.js.map

package/dist/http/oauth2/grant-types/password.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"password.js","sourceRoot":"","sources":["../../../../src/http/oauth2/grant-types/password.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;;AAGH,yCAA8C;AAE9C,+CAE0B;AAC1B,6CAAoD;AAEpD,mCAAuD;AAEvD,yDAAkD;AAQlD,uDAKmC;AACnC,8CAE0B;AAC1B,gDAAmE;AACnE,0CAA6D;AAC7D,yCAA2C;AAG3C,MAAa,iBAAkB,SAAQ,wBAAa;IAChD,KAAK,CAAC,GAAG,CAAC,OAAgB;QACtB,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;QAE1C,MAAM,EACF,KAAK,EAAE,WAAW,EAClB,OAAO,EAAE,kBAAkB,GAC9B,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAAC;YAC5B,aAAa,EAAE,IAAA,qBAAY,EAAC,OAAO,EAAE,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC;YAC1D,KAAK,EAAE,oBAAS,CAAC,MAAM;YACvB,GAAG,EAAE,IAAI,CAAC,EAAE;YACZ,OAAO,EAAE,qBAAa,CAAC,IAAI;YAC3B,OAAO,EAAE,IAAI,CAAC,KAAK,CAAC,EAAE;YACtB,SAAS,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI;SAC7B,CAAC,CAAC;QAEH,MAAM,EACF,KAAK,EAAE,YAAY,EACnB,OAAO,EAAE,mBAAmB,GAC/B,GAAG,MAAM,IAAI,CAAC,iBAAiB,CAAC,kBAAkB,CAAC,CAAC;QAErD,OAAO,IAAA,yCAA8B,EAAC;YAClC,WAAW;YACX,kBAAkB;YAClB,YAAY;YACZ,mBAAmB;SACtB,CAAC,CAAC;IACP,CAAC;IAED,KAAK,CAAC,QAAQ,CAAC,OAAgB;QAC3B,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,QAAQ,EAAE,cAAc,EAAE,GAAG,IAAA,qBAAc,EAAC,OAAO,CAAC,CAAC;QAEjF,MAAM,KAAK,GAAG,MAAM,IAAA,sBAAY,EAC5B,IAAA,wBAAe,EAAC,OAAO,EAAE,SAAS,CAAC,IAAI,cAAc,CACxD,CAAC;QAEF,MAAM,UAAU,GAAG,MAAM,IAAA,iCAAa,GAAE,CAAC;QACzC,MAAM,UAAU,GAAG,IAAI,wBAAc,CAAC,UAAU,CAAC,CAAC;QAClD,IAAI,OAA4B,CAAC;QACjC,IAAI,KAAK,IAAI,KAAK,CAAC,EAAE,EAAE,CAAC;YACpB,OAAO,GAAG,KAAK,CAAC,EAAE,CAAC;QACvB,CAAC;QAED,IAAI,MAAM,GAAG,MAAM,UAAU,CAAC,iBAAiB,CAC3C,QAAQ,EACR,QAAQ,EACR,OAAO,CACV,CAAC;QAEF,IAAI,CAAC,MAAM,EAAE,CAAC;YACV,MAAM,GAAG,MAAM,IAAI,CAAC,uBAAuB,CAAC,QAAQ,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC;QAC7E,CAAC;QAED,IAAI,CAAC,MAAM,EAAE,CAAC;YACV,MAAM,oBAAS,CAAC,kBAAkB,EAAE,CAAC;QACzC,CAAC;QAED,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC;YACjB,MAAM,oBAAS,CAAC,QAAQ,EAAE,CAAC;QAC/B,CAAC;QAED,OAAO,MAAM,CAAC;IAClB,CAAC;IAES,KAAK,CAAC,uBAAuB,CAAC,IAAY,EAAE,QAAgB,EAAE,OAAgB;QACpF,MAAM,UAAU,GAAG,MAAM,IAAA,iCAAa,GAAE,CAAC;QACzC,MAAM,UAAU,GAAG,IAAI,oCAA0B,CAAC,UAAU,CAAC,CAAC;QAE9D,MAAM,KAAK,GAA6C;YACpD,QAAQ,EAAE,mCAAwB,CAAC,IAAI;SAC1C,CAAC;QAEF,IAAI,OAAO,EAAE,CAAC;YACV,KAAK,CAAC,QAAQ,GAAG,OAAO,CAAC;QAC7B,CAAC;QAED,MAAM,QAAQ,GAAG,MAAM,UAAU,CAAC,cAAc,CAC5C;YACI,KAAK;SACR,CACJ,CAAC;QAEF,IAAI,OAAoD,CAAC;QACzD,IAAI,OAA6C,CAAC;QAClD,IAAI,QAA8C,CAAC;QAEnD,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,QAAQ,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YACvC,MAAM,MAAM,GAAG,QAAQ,CAAC,CAAC,CAAC,CAAC;YAE3B,IAAI,MAAM,CAAC,QAAQ,KAAK,mCAAwB,CAAC,IAAI,EAAE,CAAC;gBACpD,SAAS;YACb,CAAC;YAED,MAAM,IAAI,GAAG,IAAI,kCAAwB,CAAC,MAAM,CAAC,CAAC;YAElD,IAAI,CAAC;gBACD,QAAQ,GAAG,MAAM,IAAI,CAAC,yBAAyB,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;gBAChE,MAAM,IAAI,CAAC,MAAM,EAAE,CAAC;YACxB,CAAC;YAAC,OAAO,CAAC,EAAE,CAAC;gBACT,MAAM,IAAI,CAAC,MAAM,EAAE,CAAC;gBACpB,SAAS;YACb,CAAC;YAED,OAAO,GAAG,IAAI,yCAA8B,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;YACjE,OAAO,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;YACvC,MAAM;QACV,CAAC;QAED,IAAI,CAAC,OAAO,EAAE,CAAC;YACX,OAAO,SAAS,CAAC;QACrB,CAAC;QAED,IACI,OAAO,CAAC,IAAI;YACZ,OAAO,CAAC,IAAI,CAAC,KAAK,EACpB,CAAC;YACC,OAAO,OAAO,CAAC,IAAkB,CAAC;QACtC,CAAC;QAED,MAAM,cAAc,GAAG,UAAU,CAAC,aAAa,CAAC,oBAAU,CAAC,CAAC;QAE5D,OAAO,cAAc,CAAC,OAAO,CAAC;YAC1B,KAAK,EAAE;gBACH,EAAE,EAAE,OAAO,CAAC,OAAO;aACtB;YACD,SAAS,EAAE,CAAC,OAAO,CAAC;SACvB,CAAC,CAAC;IACP,CAAC;CACJ;AAhID,8CAgIC"}

package/dist/http/oauth2/grant-types/refresh-token.d.ts

@@ -1,13 +0,0 @@
-import { OAuth2SubKind } from '@authup/specs';
-import type { OAuth2TokenGrantResponse } from '@authup/specs';
-import type { Request } from 'routup';
-import { OAuth2RefreshTokenEntity } from '../../../database/domains';
-import { AbstractGrant } from './abstract';
-import type { Grant } from './type';
-export declare class RefreshTokenGrantType extends AbstractGrant implements Grant {
-    run(request: Request): Promise<OAuth2TokenGrantResponse>;
-    validate(request: Request): Promise<OAuth2RefreshTokenEntity>;
-    protected getSubject(entity: OAuth2RefreshTokenEntity): string;
-    protected getSubjectKind(entity: OAuth2RefreshTokenEntity): OAuth2SubKind;
-}
-//# sourceMappingURL=refresh-token.d.ts.map

package/dist/http/oauth2/grant-types/refresh-token.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"refresh-token.d.ts","sourceRoot":"","sources":["../../../../src/http/oauth2/grant-types/refresh-token.ts"],"names":[],"mappings":"AAOA,OAAO,EACO,aAAa,EAC1B,MAAM,eAAe,CAAC;AACvB,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,eAAe,CAAC;AAE9D,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,QAAQ,CAAC;AAGtC,OAAO,EAAE,wBAAwB,EAAE,MAAM,2BAA2B,CAAC;AAErE,OAAO,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAC3C,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,QAAQ,CAAC;AAEpC,qBAAa,qBAAsB,SAAQ,aAAc,YAAW,KAAK;IAC/D,GAAG,CAAC,OAAO,EAAE,OAAO,GAAI,OAAO,CAAC,wBAAwB,CAAC;IA+BzD,QAAQ,CAAC,OAAO,EAAE,OAAO,GAAI,OAAO,CAAC,wBAAwB,CAAC;IA6BpE,SAAS,CAAC,UAAU,CAAC,MAAM,EAAE,wBAAwB;IAgBrD,SAAS,CAAC,cAAc,CAAC,MAAM,EAAE,wBAAwB,GAAI,aAAa;CAe7E"}