@authup/server-core 1.0.0-beta.26 → 1.0.0-beta.28

package/dist/adapters/database/seeder/module.js

@@ -0,0 +1,246 @@
+/*
+ * Copyright (c) 2021-2021.
+ * Author Peter Placzek (tada5hi)
+ * For the full copyright and license information,
+ * view the LICENSE file that was distributed with this source code.
+ */
+import { PermissionName, REALM_MASTER_NAME, ROLE_ADMIN_NAME, ScopeName, buildUserFakeEmail, } from '@authup/core-kit';
+import { createNanoID } from '@authup/kit';
+import { hash } from '@authup/server-kit';
+import { IsNull } from 'typeorm';
+import { PermissionEntity, RealmEntity, RobotEntity, RobotRoleEntity, RoleEntity, RolePermissionEntity, ScopeEntity, UserRepository, UserRoleEntity, } from "../domains/index.js";
+function getPermissions(permissions) {
+    return Array.from(new Set([
+        ...Object.values(PermissionName),
+        ...(permissions || []),
+    ]));
+}
+export class DatabaseSeeder {
+    options;
+    constructor(options) {
+        this.options = {
+            ...options,
+            userAdminEnabled: options.userAdminEnabled ?? true,
+            userAdminName: options.userAdminName ?? 'admin',
+            userAdminPassword: options.userAdminPassword || 'start123',
+            robotAdminEnabled: options.robotAdminEnabled ?? false,
+            robotAdminName: options.robotAdminName ?? 'system',
+            permissions: options.permissions || [],
+        };
+    }
+    async run(dataSource) {
+        const response = {};
+        /**
+         * Create default realm
+         */
+        const realmRepository = dataSource.getRepository(RealmEntity);
+        let realm = await realmRepository.findOneBy({
+            name: REALM_MASTER_NAME,
+        });
+        if (!realm) {
+            realm = realmRepository.create({
+                name: REALM_MASTER_NAME,
+                built_in: true,
+            });
+        }
+        else {
+            realm.built_in = true;
+        }
+        await realmRepository.save(realm);
+        // -------------------------------------------------
+        // todo: maybe update existing scope attributes
+        const scopeNames = Object.values(ScopeName);
+        const scopeIds = [];
+        const scopeRepository = dataSource.getRepository(ScopeEntity);
+        const existingScopes = await scopeRepository.findBy({
+            built_in: true,
+        });
+        const removableScopes = [];
+        for (let i = 0; i < existingScopes.length; i++) {
+            const index = scopeNames.indexOf(existingScopes[i].name);
+            if (index === -1) {
+                removableScopes.push(existingScopes[i]);
+            }
+            else {
+                scopeIds.push(existingScopes[i].id);
+                scopeNames.splice(index, 1);
+            }
+        }
+        if (removableScopes.length > 0) {
+            await scopeRepository.remove(removableScopes);
+        }
+        const scopes = scopeNames.map((name) => scopeRepository.create({ name, built_in: true }));
+        if (scopes.length > 0) {
+            await scopeRepository.save(scopes);
+            scopeIds.push(...scopes.map((permission) => permission.id));
+        }
+        // -------------------------------------------------
+        /**
+         * Create default role
+         */
+        const roleRepository = dataSource.getRepository(RoleEntity);
+        let role = await roleRepository.findOneBy({
+            name: ROLE_ADMIN_NAME,
+            realm_id: IsNull(),
+        });
+        if (!role) {
+            role = roleRepository.create({
+                name: ROLE_ADMIN_NAME,
+                built_in: true,
+            });
+        }
+        await roleRepository.save(role);
+        // -------------------------------------------------
+        /**
+         * Create default user
+         */
+        const userRepository = new UserRepository(dataSource);
+        let user = await userRepository.findOneBy({
+            name: this.options.userAdminName,
+            realm_id: realm.id,
+        });
+        const userPassword = this.options.userAdminPassword;
+        if (!user) {
+            user = userRepository.create({
+                name: this.options.userAdminName,
+                password: await hash(userPassword),
+                email: buildUserFakeEmail(this.options.userAdminName),
+                realm_id: realm.id,
+                active: this.options.userAdminEnabled,
+            });
+            response.user = user;
+        }
+        else {
+            if (this.options.userAdminPasswordReset) {
+                user.password = await hash(userPassword);
+            }
+            user.active = this.options.userAdminEnabled;
+        }
+        await userRepository.save(user);
+        // -------------------------------------------------
+        /**
+         * Create default user - role association
+         */
+        const userRoleData = {
+            role_id: role.id,
+            user_id: user.id,
+        };
+        const userRoleRepository = dataSource.getRepository(UserRoleEntity);
+        let userRole = await userRoleRepository.findOneBy(userRoleData);
+        if (!userRole) {
+            userRole = userRoleRepository.create(userRoleData);
+        }
+        await userRoleRepository.save(userRole);
+        // -------------------------------------------------
+        /**
+         * Create default robot account
+         */
+        const robotRepository = dataSource.getRepository(RobotEntity);
+        let robot = await robotRepository.findOneBy({
+            name: this.options.robotAdminName,
+            realm_id: realm.id,
+        });
+        const secret = this.options.robotAdminSecret || createNanoID(64);
+        if (!robot) {
+            robot = robotRepository.create({
+                name: this.options.robotAdminName,
+                realm_id: realm.id,
+                secret: await hash(secret),
+                active: this.options.robotAdminEnabled,
+            });
+            await robotRepository.save(robot);
+            robot.secret = secret;
+            response.robot = robot;
+        }
+        else {
+            if (this.options.robotAdminSecretReset) {
+                robot.secret = await hash(secret);
+            }
+            robot.active = this.options.robotAdminEnabled;
+            await robotRepository.save(robot);
+            if (this.options.robotAdminSecretReset) {
+                robot.secret = secret;
+                response.robot = robot;
+            }
+        }
+        // -------------------------------------------------
+        /**
+         * Create default robot - role association
+         */
+        const robotRoleData = {
+            role_id: role.id,
+            robot_id: robot.id,
+        };
+        const robotRoleRepository = dataSource.getRepository(RobotRoleEntity);
+        let robotRole = await robotRoleRepository.findOneBy(robotRoleData);
+        if (!robotRole) {
+            robotRole = robotRoleRepository.create(robotRoleData);
+        }
+        await robotRoleRepository.save(robotRole);
+        // -------------------------------------------------
+        /**
+         * Create all permissions
+         */
+        let permissionNames;
+        const permissionNamesRaw = this.options.permissions || [];
+        if (Array.isArray(permissionNamesRaw)) {
+            permissionNames = getPermissions(permissionNamesRaw);
+        }
+        else {
+            permissionNames = getPermissions([permissionNamesRaw]);
+        }
+        const permissions = [];
+        const permissionRepository = dataSource.getRepository(PermissionEntity);
+        const existingPermissions = await permissionRepository.find();
+        const permissionsToDrop = [];
+        for (let i = 0; i < existingPermissions.length; i++) {
+            if (existingPermissions[i].built_in) {
+                const index = permissionNames.indexOf(existingPermissions[i].name);
+                if (index === -1) {
+                    permissionsToDrop.push(existingPermissions[i]);
+                }
+                else {
+                    permissions.push(existingPermissions[i]);
+                    permissionNames.splice(index, 1);
+                }
+            }
+            else {
+                permissions.push(existingPermissions[i]);
+            }
+        }
+        if (permissionsToDrop.length > 0) {
+            await permissionRepository.remove(permissionsToDrop);
+        }
+        const permissionsToAdd = permissionNames.map((name) => permissionRepository.create({ name, built_in: true }));
+        if (permissionsToAdd.length > 0) {
+            await permissionRepository.save(permissionsToAdd);
+            permissions.push(...permissionsToAdd.map((permission) => permission));
+        }
+        // -------------------------------------------------
+        /**
+         * Assign all permissions to default role.
+         */
+        const rolePermissionRepository = dataSource.getRepository(RolePermissionEntity);
+        const existingRolePermissions = await rolePermissionRepository.findBy({
+            role_id: role.id,
+        });
+        const rolePermissionsToAdd = [];
+        let index;
+        for (let i = 0; i < permissions.length; i++) {
+            index = existingRolePermissions.findIndex((e) => e.permission_id === permissions[i].id);
+            if (index === -1) {
+                rolePermissionsToAdd.push(rolePermissionRepository.create({
+                    role_id: role.id,
+                    role_realm_id: role.realm_id,
+                    permission_id: permissions[i].id,
+                    permission_realm_id: permissions[i].realm_id,
+                }));
+            }
+        }
+        if (rolePermissionsToAdd.length > 0) {
+            await rolePermissionRepository.save(rolePermissionsToAdd);
+        }
+        return response;
+    }
+}
+//# sourceMappingURL=module.js.map

package/dist/adapters/database/seeder/module.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"module.js","sourceRoot":"","sources":["../../../../src/adapters/database/seeder/module.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAGH,OAAO,EACH,cAAc,EACd,iBAAiB,EACjB,eAAe,EACf,SAAS,EACT,kBAAkB,GACrB,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAC3C,OAAO,EAAE,IAAI,EAAE,MAAM,oBAAoB,CAAC;AAE1C,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AAEjC,OAAO,EACH,gBAAgB,EAChB,WAAW,EACX,WAAW,EACX,eAAe,EACf,UAAU,EACV,oBAAoB,EACpB,WAAW,EACX,cAAc,EACd,cAAc,GACjB,MAAM,qBAAqB,CAAC;AAG7B,SAAS,cAAc,CAAC,WAAsB;IAC1C,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,GAAG,CAAC;QACtB,GAAG,MAAM,CAAC,MAAM,CAAC,cAAc,CAAC;QAChC,GAAG,CAAC,WAAW,IAAI,EAAE,CAAC;KACzB,CAAC,CAAC,CAAC;AACR,CAAC;AAED,MAAM,OAAO,cAAc;IACb,OAAO,CAAwB;IAEzC,YAAY,OAAuC;QAC/C,IAAI,CAAC,OAAO,GAAG;YACX,GAAG,OAAO;YACV,gBAAgB,EAAE,OAAO,CAAC,gBAAgB,IAAI,IAAI;YAClD,aAAa,EAAE,OAAO,CAAC,aAAa,IAAI,OAAO;YAC/C,iBAAiB,EAAE,OAAO,CAAC,iBAAiB,IAAI,UAAU;YAC1D,iBAAiB,EAAE,OAAO,CAAC,iBAAiB,IAAI,KAAK;YACrD,cAAc,EAAE,OAAO,CAAC,cAAc,IAAI,QAAQ;YAClD,WAAW,EAAE,OAAO,CAAC,WAAW,IAAI,EAAE;SACzC,CAAC;IACN,CAAC;IAEM,KAAK,CAAC,GAAG,CAAC,UAAsB;QACnC,MAAM,QAAQ,GAA8B,EAAE,CAAC;QAE/C;;WAEG;QACH,MAAM,eAAe,GAAG,UAAU,CAAC,aAAa,CAAC,WAAW,CAAC,CAAC;QAC9D,IAAI,KAAK,GAAG,MAAM,eAAe,CAAC,SAAS,CAAC;YACxC,IAAI,EAAE,iBAAiB;SAC1B,CAAC,CAAC;QAEH,IAAI,CAAC,KAAK,EAAE,CAAC;YACT,KAAK,GAAG,eAAe,CAAC,MAAM,CAAC;gBAC3B,IAAI,EAAE,iBAAiB;gBACvB,QAAQ,EAAE,IAAI;aACjB,CAAC,CAAC;QACP,CAAC;aAAM,CAAC;YACJ,KAAK,CAAC,QAAQ,GAAG,IAAI,CAAC;QAC1B,CAAC;QAED,MAAM,eAAe,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAElC,oDAAoD;QAEpD,+CAA+C;QAE/C,MAAM,UAAU,GAAc,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QACvD,MAAM,QAAQ,GAAG,EAAE,CAAC;QAEpB,MAAM,eAAe,GAAG,UAAU,CAAC,aAAa,CAAC,WAAW,CAAC,CAAC;QAE9D,MAAM,cAAc,GAAG,MAAM,eAAe,CAAC,MAAM,CAAC;YAChD,QAAQ,EAAE,IAAI;SACjB,CAAC,CAAC;QACH,MAAM,eAAe,GAAmB,EAAE,CAAC;QAE3C,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,cAAc,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YAC7C,MAAM,KAAK,GAAG,UAAU,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;YACzD,IAAI,KAAK,KAAK,CAAC,CAAC,EAAE,CAAC;gBACf,eAAe,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,CAAC;YAC5C,CAAC;iBAAM,CAAC;gBACJ,QAAQ,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;gBACpC,UAAU,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;YAChC,CAAC;QACL,CAAC;QAED,IAAI,eAAe,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC7B,MAAM,eAAe,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC;QAClD,CAAC;QAED,MAAM,MAAM,GAAG,UAAU,CAAC,GAAG,CACzB,CAAC,IAAY,EAAE,EAAE,CAAC,eAAe,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CACrE,CAAC;QACF,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACpB,MAAM,eAAe,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YAEnC,QAAQ,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC,CAAC;QAChE,CAAC;QACD,oDAAoD;QAEpD;;WAEG;QACH,MAAM,cAAc,GAAG,UAAU,CAAC,aAAa,CAAC,UAAU,CAAC,CAAC;QAC5D,IAAI,IAAI,GAAG,MAAM,cAAc,CAAC,SAAS,CAAC;YACtC,IAAI,EAAE,eAAe;YACrB,QAAQ,EAAE,MAAM,EAAE;SACrB,CAAC,CAAC;QACH,IAAI,CAAC,IAAI,EAAE,CAAC;YACR,IAAI,GAAG,cAAc,CAAC,MAAM,CAAC;gBACzB,IAAI,EAAE,eAAe;gBACrB,QAAQ,EAAE,IAAI;aACjB,CAAC,CAAC;QACP,CAAC;QAED,MAAM,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAEhC,oDAAoD;QAEpD;;WAEG;QACH,MAAM,cAAc,GAAG,IAAI,cAAc,CAAC,UAAU,CAAC,CAAC;QACtD,IAAI,IAAI,GAAG,MAAM,cAAc,CAAC,SAAS,CAAC;YACtC,IAAI,EAAE,IAAI,CAAC,OAAO,CAAC,aAAa;YAChC,QAAQ,EAAE,KAAK,CAAC,EAAE;SACrB,CAAC,CAAC;QAEH,MAAM,YAAY,GAAG,IAAI,CAAC,OAAO,CAAC,iBAAiB,CAAC;QACpD,IAAI,CAAC,IAAI,EAAE,CAAC;YACR,IAAI,GAAG,cAAc,CAAC,MAAM,CAAC;gBACzB,IAAI,EAAE,IAAI,CAAC,OAAO,CAAC,aAAa;gBAChC,QAAQ,EAAE,MAAM,IAAI,CAAC,YAAY,CAAC;gBAClC,KAAK,EAAE,kBAAkB,CAAC,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC;gBACrD,QAAQ,EAAE,KAAK,CAAC,EAAE;gBAClB,MAAM,EAAE,IAAI,CAAC,OAAO,CAAC,gBAAgB;aACxC,CAAC,CAAC;YAEH,QAAQ,CAAC,IAAI,GAAG,IAAI,CAAC;QACzB,CAAC;aAAM,CAAC;YACJ,IAAI,IAAI,CAAC,OAAO,CAAC,sBAAsB,EAAE,CAAC;gBACtC,IAAI,CAAC,QAAQ,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,CAAC;YAC7C,CAAC;YAED,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,gBAAgB,CAAC;QAChD,CAAC;QAED,MAAM,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAChC,oDAAoD;QAEpD;;WAEG;QACH,MAAM,YAAY,GAAuB;YACrC,OAAO,EAAE,IAAI,CAAC,EAAE;YAChB,OAAO,EAAE,IAAI,CAAC,EAAE;SACnB,CAAC;QAEF,MAAM,kBAAkB,GAAG,UAAU,CAAC,aAAa,CAAC,cAAc,CAAC,CAAC;QACpE,IAAI,QAAQ,GAAG,MAAM,kBAAkB,CAAC,SAAS,CAAC,YAA0C,CAAC,CAAC;QAE9F,IAAI,CAAC,QAAQ,EAAE,CAAC;YACZ,QAAQ,GAAG,kBAAkB,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;QACvD,CAAC;QAED,MAAM,kBAAkB,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAExC,oDAAoD;QAEpD;;WAEG;QACH,MAAM,eAAe,GAAG,UAAU,CAAC,aAAa,CAAQ,WAAW,CAAC,CAAC;QACrE,IAAI,KAAK,GAAG,MAAM,eAAe,CAAC,SAAS,CAAC;YACxC,IAAI,EAAE,IAAI,CAAC,OAAO,CAAC,cAAc;YACjC,QAAQ,EAAE,KAAK,CAAC,EAAE;SACrB,CAAC,CAAC;QAEH,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,gBAAgB,IAAI,YAAY,CAAC,EAAE,CAAC,CAAC;QACjE,IAAI,CAAC,KAAK,EAAE,CAAC;YACT,KAAK,GAAG,eAAe,CAAC,MAAM,CAAC;gBAC3B,IAAI,EAAE,IAAI,CAAC,OAAO,CAAC,cAAc;gBACjC,QAAQ,EAAE,KAAK,CAAC,EAAE;gBAClB,MAAM,EAAE,MAAM,IAAI,CAAC,MAAM,CAAC;gBAC1B,MAAM,EAAE,IAAI,CAAC,OAAO,CAAC,iBAAiB;aACzC,CAAC,CAAC;YAEH,MAAM,eAAe,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YAElC,KAAK,CAAC,MAAM,GAAG,MAAM,CAAC;YACtB,QAAQ,CAAC,KAAK,GAAG,KAAK,CAAC;QAC3B,CAAC;aAAM,CAAC;YACJ,IAAI,IAAI,CAAC,OAAO,CAAC,qBAAqB,EAAE,CAAC;gBACrC,KAAK,CAAC,MAAM,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,CAAC;YACtC,CAAC;YAED,KAAK,CAAC,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,iBAAiB,CAAC;YAE9C,MAAM,eAAe,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YAElC,IAAI,IAAI,CAAC,OAAO,CAAC,qBAAqB,EAAE,CAAC;gBACrC,KAAK,CAAC,MAAM,GAAG,MAAM,CAAC;gBACtB,QAAQ,CAAC,KAAK,GAAG,KAAK,CAAC;YAC3B,CAAC;QACL,CAAC;QAED,oDAAoD;QAEpD;;WAEG;QACH,MAAM,aAAa,GAAwB;YACvC,OAAO,EAAE,IAAI,CAAC,EAAE;YAChB,QAAQ,EAAE,KAAK,CAAC,EAAE;SACrB,CAAC;QAEF,MAAM,mBAAmB,GAAG,UAAU,CAAC,aAAa,CAAC,eAAe,CAAC,CAAC;QACtE,IAAI,SAAS,GAAG,MAAM,mBAAmB,CAAC,SAAS,CAAC,aAA4C,CAAC,CAAC;QAElG,IAAI,CAAC,SAAS,EAAE,CAAC;YACb,SAAS,GAAG,mBAAmB,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC;QAC1D,CAAC;QAED,MAAM,mBAAmB,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QAE1C,oDAAoD;QAEpD;;WAEG;QACH,IAAI,eAA0B,CAAC;QAC/B,MAAM,kBAAkB,GAAG,IAAI,CAAC,OAAO,CAAC,WAAW,IAAI,EAAE,CAAC;QAC1D,IAAI,KAAK,CAAC,OAAO,CAAC,kBAAkB,CAAC,EAAE,CAAC;YACpC,eAAe,GAAG,cAAc,CAAC,kBAAkB,CAAC,CAAC;QACzD,CAAC;aAAM,CAAC;YACJ,eAAe,GAAG,cAAc,CAAC,CAAC,kBAAkB,CAAC,CAAC,CAAC;QAC3D,CAAC;QAED,MAAM,WAAW,GAAwB,EAAE,CAAC;QAE5C,MAAM,oBAAoB,GAAG,UAAU,CAAC,aAAa,CAAC,gBAAgB,CAAC,CAAC;QACxE,MAAM,mBAAmB,GAAG,MAAM,oBAAoB,CAAC,IAAI,EAAE,CAAC;QAE9D,MAAM,iBAAiB,GAAwB,EAAE,CAAC;QAElD,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,mBAAmB,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YAClD,IAAI,mBAAmB,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC;gBAClC,MAAM,KAAK,GAAG,eAAe,CAAC,OAAO,CAAC,mBAAmB,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;gBACnE,IAAI,KAAK,KAAK,CAAC,CAAC,EAAE,CAAC;oBACf,iBAAiB,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC,CAAC,CAAC,CAAC;gBACnD,CAAC;qBAAM,CAAC;oBACJ,WAAW,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC,CAAC,CAAC,CAAC;oBACzC,eAAe,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;gBACrC,CAAC;YACL,CAAC;iBAAM,CAAC;gBACJ,WAAW,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC,CAAC,CAAC,CAAC;YAC7C,CAAC;QACL,CAAC;QAED,IAAI,iBAAiB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC/B,MAAM,oBAAoB,CAAC,MAAM,CAAC,iBAAiB,CAAC,CAAC;QACzD,CAAC;QAED,MAAM,gBAAgB,GAAG,eAAe,CAAC,GAAG,CACxC,CAAC,IAAI,EAAE,EAAE,CAAC,oBAAoB,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAClE,CAAC;QACF,IAAI,gBAAgB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC9B,MAAM,oBAAoB,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;YAElD,WAAW,CAAC,IAAI,CAAC,GAAG,gBAAgB,CAAC,GAAG,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,CAAC;QAC1E,CAAC;QAED,oDAAoD;QAEpD;;WAEG;QACH,MAAM,wBAAwB,GAAG,UAAU,CAAC,aAAa,CAAC,oBAAoB,CAAC,CAAC;QAEhF,MAAM,uBAAuB,GAAG,MAAM,wBAAwB,CAAC,MAAM,CAAC;YAClE,OAAO,EAAE,IAAI,CAAC,EAAE;SACnB,CAAC,CAAC;QAEH,MAAM,oBAAoB,GAA4B,EAAE,CAAC;QACzD,IAAI,KAAc,CAAC;QACnB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,WAAW,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YAC1C,KAAK,GAAG,uBAAuB,CAAC,SAAS,CACrC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,aAAa,KAAK,WAAW,CAAC,CAAC,CAAC,CAAC,EAAE,CAC/C,CAAC;YACF,IAAI,KAAK,KAAK,CAAC,CAAC,EAAE,CAAC;gBACf,oBAAoB,CAAC,IAAI,CAAC,wBAAwB,CAAC,MAAM,CAAC;oBACtD,OAAO,EAAE,IAAI,CAAC,EAAE;oBAChB,aAAa,EAAE,IAAI,CAAC,QAAQ;oBAC5B,aAAa,EAAE,WAAW,CAAC,CAAC,CAAC,CAAC,EAAE;oBAChC,mBAAmB,EAAE,WAAW,CAAC,CAAC,CAAC,CAAC,QAAQ;iBAC/C,CAAC,CAAC,CAAC;YACR,CAAC;QACL,CAAC;QAED,IAAI,oBAAoB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAClC,MAAM,wBAAwB,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAC;QAC9D,CAAC;QAED,OAAO,QAAQ,CAAC;IACpB,CAAC;CACJ"}

package/dist/adapters/database/seeder/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../../src/adapters/database/seeder/types.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAC;AAEpD,MAAM,MAAM,wBAAwB,GAAG;IACnC,KAAK,CAAC,EAAE,KAAK,CAAC;IACd,IAAI,CAAC,EAAE,IAAI,CAAA;CACd,CAAC;AACF,MAAM,MAAM,qBAAqB,GAAG;IAChC;;OAEG;IACH,gBAAgB,EAAE,OAAO,CAAC;IAC1B;;OAEG;IACH,aAAa,EAAE,MAAM,CAAC;IACtB;;OAEG;IACH,iBAAiB,EAAE,MAAM,CAAC;IAC1B;;OAEG;IACH,sBAAsB,CAAC,EAAE,OAAO,CAAC;IAIjC;;OAEG;IACH,iBAAiB,EAAE,OAAO,CAAC;IAC3B;;OAEG;IACH,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB;;OAEG;IACH,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B;;OAEG;IACH,qBAAqB,CAAC,EAAE,OAAO,CAAC;IAIhC;;OAEG;IACH,WAAW,EAAE,MAAM,GAAG,MAAM,EAAE,CAAC;CAClC,CAAC"}

package/dist/adapters/database/seeder/types.js

@@ -0,0 +1,8 @@
+/*
+ * Copyright (c) 2022.
+ * Author Peter Placzek (tada5hi)
+ * For the full copyright and license information,
+ * view the LICENSE file that was distributed with this source code.
+ */
+export {};
+//# sourceMappingURL=types.js.map

package/dist/adapters/database/seeder/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../../../src/adapters/database/seeder/types.ts"],"names":[],"mappings":"AAAA;;;;;GAKG"}

package/dist/adapters/http/adapters/index.d.ts

@@ -0,0 +1,2 @@
+export * from './oauth2/index.ts';
+//# sourceMappingURL=index.d.ts.map

package/dist/adapters/http/adapters/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/adapters/http/adapters/index.ts"],"names":[],"mappings":"AAOA,cAAc,mBAAmB,CAAC"}

package/dist/adapters/http/adapters/index.js

@@ -0,0 +1,8 @@
+/*
+ * Copyright (c) 2025.
+ * Author Peter Placzek (tada5hi)
+ * For the full copyright and license information,
+ * view the LICENSE file that was distributed with this source code.
+ */
+export * from "./oauth2/index.js";
+//# sourceMappingURL=index.js.map

package/dist/adapters/http/adapters/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../src/adapters/http/adapters/index.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,cAAc,mBAAmB,CAAC"}

package/dist/adapters/http/adapters/oauth2/authorization/index.d.ts

@@ -0,0 +1,2 @@
+export * from './module.ts';
+//# sourceMappingURL=index.d.ts.map

package/dist/adapters/http/adapters/oauth2/authorization/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../../src/adapters/http/adapters/oauth2/authorization/index.ts"],"names":[],"mappings":"AAOA,cAAc,aAAa,CAAC"}

package/dist/adapters/http/adapters/oauth2/authorization/index.js

@@ -0,0 +1,8 @@
+/*
+ * Copyright (c) 2025.
+ * Author Peter Placzek (tada5hi)
+ * For the full copyright and license information,
+ * view the LICENSE file that was distributed with this source code.
+ */
+export * from "./module.js";
+//# sourceMappingURL=index.js.map

package/dist/adapters/http/adapters/oauth2/authorization/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../../../src/adapters/http/adapters/oauth2/authorization/index.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,cAAc,aAAa,CAAC"}

package/dist/adapters/http/adapters/oauth2/authorization/module.d.ts

@@ -0,0 +1,21 @@
+import type { Request } from 'routup';
+import type { OAuth2AuthorizationCodeRequest } from '@authup/core-kit';
+import { RoutupContainerAdapter } from '@validup/adapter-routup';
+import type { IOAuth2AuthorizationCodeRequestVerifier, OAuth2AuthorizationResult } from '../../../../../core/index.ts';
+import { OAuth2Authorization } from '../../../../../core/index.ts';
+import type { HTTPOAuth2AuthorizationManagerContext } from './types.ts';
+export declare class HTTPOAuth2Authorizer extends OAuth2Authorization {
+    protected codeRequestVerifier: IOAuth2AuthorizationCodeRequestVerifier;
+    protected requestValidator: RoutupContainerAdapter<OAuth2AuthorizationCodeRequest>;
+    constructor(ctx: HTTPOAuth2AuthorizationManagerContext);
+    authorizeWithRequest(req: Request): Promise<OAuth2AuthorizationResult>;
+    /**
+     * Validate authorization request.
+     *
+     * @throws OAuth2Error
+     *
+     * @param req
+     */
+    validateWithRequest(req: Request): Promise<OAuth2AuthorizationCodeRequest>;
+}
+//# sourceMappingURL=module.d.ts.map

package/dist/adapters/http/adapters/oauth2/authorization/module.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"module.d.ts","sourceRoot":"","sources":["../../../../../../src/adapters/http/adapters/oauth2/authorization/module.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,QAAQ,CAAC;AACtC,OAAO,KAAK,EAAE,8BAA8B,EAAE,MAAM,kBAAkB,CAAC;AACvE,OAAO,EAAE,sBAAsB,EAAE,MAAM,yBAAyB,CAAC;AACjE,OAAO,KAAK,EAAE,uCAAuC,EAAE,yBAAyB,EAAE,MAAM,8BAA8B,CAAC;AACvH,OAAO,EAAE,mBAAmB,EAA2C,MAAM,8BAA8B,CAAC;AAE5G,OAAO,KAAK,EAAE,qCAAqC,EAAE,MAAM,YAAY,CAAC;AAExE,qBAAa,oBAAqB,SAAQ,mBAAmB;IACzD,SAAS,CAAC,mBAAmB,EAAG,uCAAuC,CAAC;IAExE,SAAS,CAAC,gBAAgB,EAAG,sBAAsB,CAAC,8BAA8B,CAAC,CAAC;gBAExE,GAAG,EAAE,qCAAqC;IAShD,oBAAoB,CAAC,GAAG,EAAE,OAAO,GAAI,OAAO,CAAC,yBAAyB,CAAC;IAU7E;;;;;;OAMG;IACG,mBAAmB,CACrB,GAAG,EAAE,OAAO,GACZ,OAAO,CAAC,8BAA8B,CAAC;CAK9C"}

package/dist/adapters/http/adapters/oauth2/authorization/module.js

@@ -0,0 +1,38 @@
+/*
+ * Copyright (c) 2025.
+ * Author Peter Placzek (tada5hi)
+ * For the full copyright and license information,
+ * view the LICENSE file that was distributed with this source code.
+ */
+import { RoutupContainerAdapter } from '@validup/adapter-routup';
+import { OAuth2Authorization, OAuth2AuthorizationCodeRequestValidator } from "../../../../../core/index.js";
+import { useRequestIdentityOrFail } from "../../../request/index.js";
+export class HTTPOAuth2Authorizer extends OAuth2Authorization {
+    codeRequestVerifier;
+    requestValidator;
+    constructor(ctx) {
+        super(ctx);
+        this.codeRequestVerifier = ctx.codeRequestVerifier;
+        const validator = new OAuth2AuthorizationCodeRequestValidator();
+        this.requestValidator = new RoutupContainerAdapter(validator);
+    }
+    async authorizeWithRequest(req) {
+        const codeRequestValidated = await this.validateWithRequest(req);
+        const { data } = await this.codeRequestVerifier.verify(codeRequestValidated);
+        const identity = useRequestIdentityOrFail(req);
+        return this.authorize(data, identity.raw);
+    }
+    /**
+     * Validate authorization request.
+     *
+     * @throws OAuth2Error
+     *
+     * @param req
+     */
+    async validateWithRequest(req) {
+        return this.requestValidator.run(req, {
+            locations: ['body', 'query'],
+        });
+    }
+}
+//# sourceMappingURL=module.js.map

package/dist/adapters/http/adapters/oauth2/authorization/module.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"module.js","sourceRoot":"","sources":["../../../../../../src/adapters/http/adapters/oauth2/authorization/module.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAIH,OAAO,EAAE,sBAAsB,EAAE,MAAM,yBAAyB,CAAC;AAEjE,OAAO,EAAE,mBAAmB,EAAE,uCAAuC,EAAE,MAAM,8BAA8B,CAAC;AAC5G,OAAO,EAAE,wBAAwB,EAAE,MAAM,2BAA2B,CAAC;AAGrE,MAAM,OAAO,oBAAqB,SAAQ,mBAAmB;IAC/C,mBAAmB,CAA2C;IAE9D,gBAAgB,CAA0D;IAEpF,YAAY,GAA0C;QAClD,KAAK,CAAC,GAAG,CAAC,CAAC;QAEX,IAAI,CAAC,mBAAmB,GAAG,GAAG,CAAC,mBAAmB,CAAC;QAEnD,MAAM,SAAS,GAAG,IAAI,uCAAuC,EAAE,CAAC;QAChE,IAAI,CAAC,gBAAgB,GAAG,IAAI,sBAAsB,CAAC,SAAS,CAAC,CAAC;IAClE,CAAC;IAED,KAAK,CAAC,oBAAoB,CAAC,GAAY;QACnC,MAAM,oBAAoB,GAAG,MAAM,IAAI,CAAC,mBAAmB,CAAC,GAAG,CAAC,CAAC;QAEjE,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,IAAI,CAAC,mBAAmB,CAAC,MAAM,CAAC,oBAAoB,CAAC,CAAC;QAE7E,MAAM,QAAQ,GAAG,wBAAwB,CAAC,GAAG,CAAC,CAAC;QAE/C,OAAO,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,QAAQ,CAAC,GAAG,CAAC,CAAC;IAC9C,CAAC;IAED;;;;;;OAMG;IACH,KAAK,CAAC,mBAAmB,CACrB,GAAY;QAEZ,OAAO,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,GAAG,EAAE;YAClC,SAAS,EAAE,CAAC,MAAM,EAAE,OAAO,CAAC;SAC/B,CAAC,CAAC;IACP,CAAC;CACJ"}

package/dist/adapters/http/adapters/oauth2/authorization/types.d.ts

@@ -0,0 +1,5 @@
+import type { IOAuth2AuthorizationCodeRequestVerifier, OAuth2AuthorizationManagerContext } from '../../../../../core/index.ts';
+export type HTTPOAuth2AuthorizationManagerContext = OAuth2AuthorizationManagerContext & {
+    codeRequestVerifier: IOAuth2AuthorizationCodeRequestVerifier;
+};
+//# sourceMappingURL=types.d.ts.map

package/dist/adapters/http/adapters/oauth2/authorization/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../../../../src/adapters/http/adapters/oauth2/authorization/types.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,uCAAuC,EAAE,iCAAiC,EAAE,MAAM,8BAA8B,CAAC;AAE/H,MAAM,MAAM,qCAAqC,GAAG,iCAAiC,GAAG;IACpF,mBAAmB,EAAE,uCAAuC,CAAC;CAChE,CAAC"}

package/dist/adapters/http/adapters/oauth2/authorization/types.js

@@ -0,0 +1,8 @@
+/*
+ * Copyright (c) 2025.
+ * Author Peter Placzek (tada5hi)
+ * For the full copyright and license information,
+ * view the LICENSE file that was distributed with this source code.
+ */
+export {};
+//# sourceMappingURL=types.js.map

package/dist/adapters/http/adapters/oauth2/authorization/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../../../../../src/adapters/http/adapters/oauth2/authorization/types.ts"],"names":[],"mappings":"AAAA;;;;;GAKG"}

package/dist/adapters/http/adapters/oauth2/grant-types/authorize.d.ts

@@ -0,0 +1,12 @@
+import type { OAuth2TokenGrantResponse } from '@authup/specs';
+import type { Request } from 'routup';
+import { OAuth2AuthorizeGrant } from '../../../../../core/index.ts';
+import type { IOAuth2AuthorizationCodeVerifier } from '../../../../../core/index.ts';
+import type { HTTPOAuth2AuthorizeGrantContext, IHTTPOAuth2Grant } from './types.ts';
+export declare class HTTPOAuth2AuthorizeGrant extends OAuth2AuthorizeGrant implements IHTTPOAuth2Grant {
+    protected codeVerifier: IOAuth2AuthorizationCodeVerifier;
+    constructor(ctx: HTTPOAuth2AuthorizeGrantContext);
+    runWithRequest(req: Request): Promise<OAuth2TokenGrantResponse>;
+    protected extractParam(req: Request, key: string): string | undefined;
+}
+//# sourceMappingURL=authorize.d.ts.map

package/dist/adapters/http/adapters/oauth2/grant-types/authorize.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"authorize.d.ts","sourceRoot":"","sources":["../../../../../../src/adapters/http/adapters/oauth2/grant-types/authorize.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,eAAe,CAAC;AAI9D,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,QAAQ,CAAC;AAEtC,OAAO,EAAE,oBAAoB,EAAE,MAAM,8BAA8B,CAAC;AACpE,OAAO,KAAK,EAAE,gCAAgC,EAAE,MAAM,8BAA8B,CAAC;AACrF,OAAO,KAAK,EAAE,+BAA+B,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAC;AAEpF,qBAAa,wBAAyB,SAAQ,oBAAqB,YAAW,gBAAgB;IAC1F,SAAS,CAAC,YAAY,EAAG,gCAAgC,CAAC;gBAE9C,GAAG,EAAE,+BAA+B;IAM1C,cAAc,CAAC,GAAG,EAAE,OAAO,GAAG,OAAO,CAAC,wBAAwB,CAAC;IAuBrE,SAAS,CAAC,YAAY,CAAC,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,GAAI,MAAM,GAAG,SAAS;CAUzE"}

package/dist/adapters/http/adapters/oauth2/grant-types/authorize.js

@@ -0,0 +1,46 @@
+/*
+ * Copyright (c) 2025.
+ * Author Peter Placzek (tada5hi)
+ * For the full copyright and license information,
+ * view the LICENSE file that was distributed with this source code.
+ */
+import { OAuth2Error } from '@authup/specs';
+import { useRequestBody } from '@routup/basic/body';
+import { useRequestQuery } from '@routup/basic/query';
+import { getRequestHeader, getRequestIP } from 'routup';
+import { OAuth2AuthorizeGrant } from "../../../../../core/index.js";
+export class HTTPOAuth2AuthorizeGrant extends OAuth2AuthorizeGrant {
+    codeVerifier;
+    constructor(ctx) {
+        super(ctx);
+        this.codeVerifier = ctx.codeVerifier;
+    }
+    async runWithRequest(req) {
+        const code = this.extractParam(req, 'code');
+        const redirectUri = this.extractParam(req, 'redirect_uri');
+        const codeVerifier = this.extractParam(req, 'code_verifier');
+        if (!code) {
+            throw OAuth2Error.requestInvalid();
+        }
+        const entity = await this.codeVerifier.verify(code, {
+            redirectUri,
+            codeVerifier,
+        });
+        const tokenGrantResponse = await this.runWith(entity, {
+            ipAddress: getRequestIP(req, { trustProxy: true }),
+            userAgent: getRequestHeader(req, 'user-agent'),
+        });
+        await this.codeVerifier.remove(entity);
+        return tokenGrantResponse;
+    }
+    extractParam(req, key) {
+        let value = useRequestBody(req, key);
+        if (!value) {
+            value = useRequestQuery(req, key);
+        }
+        return typeof value === 'string' && value.length > 0 ?
+            value :
+            undefined;
+    }
+}
+//# sourceMappingURL=authorize.js.map

package/dist/adapters/http/adapters/oauth2/grant-types/authorize.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"authorize.js","sourceRoot":"","sources":["../../../../../../src/adapters/http/adapters/oauth2/grant-types/authorize.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAGH,OAAO,EAAE,WAAW,EAAE,MAAM,eAAe,CAAC;AAC5C,OAAO,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAC;AACpD,OAAO,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AAEtD,OAAO,EAAE,gBAAgB,EAAE,YAAY,EAAE,MAAM,QAAQ,CAAC;AACxD,OAAO,EAAE,oBAAoB,EAAE,MAAM,8BAA8B,CAAC;AAIpE,MAAM,OAAO,wBAAyB,SAAQ,oBAAoB;IACpD,YAAY,CAAoC;IAE1D,YAAY,GAAoC;QAC5C,KAAK,CAAC,GAAG,CAAC,CAAC;QAEX,IAAI,CAAC,YAAY,GAAG,GAAG,CAAC,YAAY,CAAC;IACzC,CAAC;IAED,KAAK,CAAC,cAAc,CAAC,GAAY;QAC7B,MAAM,IAAI,GAAG,IAAI,CAAC,YAAY,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;QAC5C,MAAM,WAAW,GAAG,IAAI,CAAC,YAAY,CAAC,GAAG,EAAE,cAAc,CAAC,CAAC;QAC3D,MAAM,YAAY,GAAG,IAAI,CAAC,YAAY,CAAC,GAAG,EAAE,eAAe,CAAC,CAAC;QAC7D,IAAI,CAAC,IAAI,EAAE,CAAC;YACR,MAAM,WAAW,CAAC,cAAc,EAAE,CAAC;QACvC,CAAC;QAED,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,IAAI,EAAE;YAChD,WAAW;YACX,YAAY;SACf,CAAC,CAAC;QAEH,MAAM,kBAAkB,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE;YAClD,SAAS,EAAE,YAAY,CAAC,GAAG,EAAE,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC;YAClD,SAAS,EAAE,gBAAgB,CAAC,GAAG,EAAE,YAAY,CAAC;SACjD,CAAC,CAAC;QAEH,MAAM,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QAEvC,OAAO,kBAAkB,CAAC;IAC9B,CAAC;IAES,YAAY,CAAC,GAAY,EAAE,GAAW;QAC5C,IAAI,KAAK,GAAa,cAAc,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;QAC/C,IAAI,CAAC,KAAK,EAAE,CAAC;YACT,KAAK,GAAG,eAAe,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;QACtC,CAAC;QAED,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;YAClD,KAAK,CAAC,CAAC;YACP,SAAS,CAAC;IAClB,CAAC;CACJ"}

package/dist/adapters/http/adapters/oauth2/grant-types/client-credentials.d.ts

@@ -0,0 +1,12 @@
+import type { OAuth2TokenGrantResponse } from '@authup/specs';
+import type { Client } from '@authup/core-kit';
+import type { Request } from 'routup';
+import type { ICredentialsAuthenticator } from '../../../../../core/index.ts';
+import { ClientCredentialsGrant } from '../../../../../core/index.ts';
+import type { HTTPOAuth2ClientCredentialsGrantContext, IHTTPOAuth2Grant } from './types.ts';
+export declare class HTTPClientCredentialsGrant extends ClientCredentialsGrant implements IHTTPOAuth2Grant {
+    protected authenticator: ICredentialsAuthenticator<Client>;
+    constructor(ctx: HTTPOAuth2ClientCredentialsGrantContext);
+    runWithRequest(req: Request): Promise<OAuth2TokenGrantResponse>;
+}
+//# sourceMappingURL=client-credentials.d.ts.map

package/dist/adapters/http/adapters/oauth2/grant-types/client-credentials.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"client-credentials.d.ts","sourceRoot":"","sources":["../../../../../../src/adapters/http/adapters/oauth2/grant-types/client-credentials.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,eAAe,CAAC;AAG9D,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAC;AAG/C,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,QAAQ,CAAC;AAEtC,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,8BAA8B,CAAC;AAC9E,OAAO,EACH,sBAAsB,EACzB,MAAM,8BAA8B,CAAC;AACtC,OAAO,KAAK,EAAE,uCAAuC,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAC;AAE5F,qBAAa,0BAA2B,SAAQ,sBAAuB,YAAW,gBAAgB;IAC9F,SAAS,CAAC,aAAa,EAAG,yBAAyB,CAAC,MAAM,CAAC,CAAC;gBAEhD,GAAG,EAAE,uCAAuC;IAMlD,cAAc,CAAC,GAAG,EAAE,OAAO,GAAG,OAAO,CAAC,wBAAwB,CAAC;CA6BxE"}

package/dist/adapters/http/adapters/oauth2/grant-types/client-credentials.js

@@ -0,0 +1,42 @@
+/*
+ * Copyright (c) 2025.
+ * Author Peter Placzek (tada5hi)
+ * For the full copyright and license information,
+ * view the LICENSE file that was distributed with this source code.
+ */
+import { OAuth2Error } from '@authup/specs';
+import { useRequestBody } from '@routup/basic/body';
+import { ClientError } from '@authup/core-kit';
+import { AuthorizationHeaderType, parseAuthorizationHeader } from 'hapic';
+import { getRequestHeader, getRequestIP } from 'routup';
+import { ClientCredentialsGrant, } from "../../../../../core/index.js";
+export class HTTPClientCredentialsGrant extends ClientCredentialsGrant {
+    authenticator;
+    constructor(ctx) {
+        super(ctx);
+        this.authenticator = ctx.authenticator;
+    }
+    async runWithRequest(req) {
+        let clientId = useRequestBody(req, 'client_id');
+        let clientSecret = useRequestBody(req, 'client_secret');
+        const realmId = useRequestBody(req, 'realm_id');
+        if (!clientId && !clientSecret) {
+            const { authorization: headerValue } = req.headers;
+            if (typeof headerValue !== 'string') {
+                throw ClientError.credentialsInvalid();
+            }
+            const header = parseAuthorizationHeader(headerValue);
+            if (header.type !== AuthorizationHeaderType.BASIC) {
+                throw OAuth2Error.requestInvalid();
+            }
+            clientId = header.username;
+            clientSecret = header.password;
+        }
+        const client = await this.authenticator.authenticate(clientId, clientSecret, realmId);
+        return this.runWith(client, {
+            ipAddress: getRequestIP(req, { trustProxy: true }),
+            userAgent: getRequestHeader(req, 'user-agent'),
+        });
+    }
+}
+//# sourceMappingURL=client-credentials.js.map

package/dist/adapters/http/adapters/oauth2/grant-types/client-credentials.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"client-credentials.js","sourceRoot":"","sources":["../../../../../../src/adapters/http/adapters/oauth2/grant-types/client-credentials.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAGH,OAAO,EAAE,WAAW,EAAE,MAAM,eAAe,CAAC;AAC5C,OAAO,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAC;AAEpD,OAAO,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AAC/C,OAAO,EAAE,uBAAuB,EAAE,wBAAwB,EAAE,MAAM,OAAO,CAAC;AAE1E,OAAO,EAAE,gBAAgB,EAAE,YAAY,EAAE,MAAM,QAAQ,CAAC;AAExD,OAAO,EACH,sBAAsB,GACzB,MAAM,8BAA8B,CAAC;AAGtC,MAAM,OAAO,0BAA2B,SAAQ,sBAAsB;IACxD,aAAa,CAAqC;IAE5D,YAAY,GAA4C;QACpD,KAAK,CAAC,GAAG,CAAC,CAAC;QAEX,IAAI,CAAC,aAAa,GAAG,GAAG,CAAC,aAAa,CAAC;IAC3C,CAAC;IAED,KAAK,CAAC,cAAc,CAAC,GAAY;QAC7B,IAAI,QAAQ,GAAG,cAAc,CAAC,GAAG,EAAE,WAAW,CAAC,CAAC;QAChD,IAAI,YAAY,GAAG,cAAc,CAAC,GAAG,EAAE,eAAe,CAAC,CAAC;QACxD,MAAM,OAAO,GAAG,cAAc,CAAC,GAAG,EAAE,UAAU,CAAC,CAAC;QAEhD,IAAI,CAAC,QAAQ,IAAI,CAAC,YAAY,EAAE,CAAC;YAC7B,MAAM,EAAE,aAAa,EAAE,WAAW,EAAE,GAAG,GAAG,CAAC,OAAO,CAAC;YAEnD,IAAI,OAAO,WAAW,KAAK,QAAQ,EAAE,CAAC;gBAClC,MAAM,WAAW,CAAC,kBAAkB,EAAE,CAAC;YAC3C,CAAC;YAED,MAAM,MAAM,GAAG,wBAAwB,CAAC,WAAW,CAAC,CAAC;YAErD,IAAI,MAAM,CAAC,IAAI,KAAK,uBAAuB,CAAC,KAAK,EAAE,CAAC;gBAChD,MAAM,WAAW,CAAC,cAAc,EAAE,CAAC;YACvC,CAAC;YAED,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAC;YAC3B,YAAY,GAAG,MAAM,CAAC,QAAQ,CAAC;QACnC,CAAC;QAED,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,YAAY,CAAC,QAAQ,EAAE,YAAY,EAAE,OAAO,CAAC,CAAC;QAEtF,OAAO,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE;YACxB,SAAS,EAAE,YAAY,CAAC,GAAG,EAAE,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC;YAClD,SAAS,EAAE,gBAAgB,CAAC,GAAG,EAAE,YAAY,CAAC;SACjD,CAAC,CAAC;IACP,CAAC;CACJ"}

package/dist/adapters/http/adapters/oauth2/grant-types/identity.d.ts

@@ -0,0 +1,8 @@
+import type { OAuth2TokenGrantResponse } from '@authup/specs';
+import type { Request } from 'routup';
+import { IdentityGrantType } from '../../../../../core/index.ts';
+import type { IHTTPOAuth2Grant } from './types.ts';
+export declare class HTTPOAuth2IdentityGrantType extends IdentityGrantType implements IHTTPOAuth2Grant {
+    runWithRequest(req: Request): Promise<OAuth2TokenGrantResponse>;
+}
+//# sourceMappingURL=identity.d.ts.map

package/dist/adapters/http/adapters/oauth2/grant-types/identity.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"identity.d.ts","sourceRoot":"","sources":["../../../../../../src/adapters/http/adapters/oauth2/grant-types/identity.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,eAAe,CAAC;AAC9D,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,QAAQ,CAAC;AAEtC,OAAO,EAAE,iBAAiB,EAAE,MAAM,8BAA8B,CAAC;AAEjE,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAC;AAEnD,qBAAa,2BAA4B,SAAQ,iBAAkB,YAAW,gBAAgB;IAC1F,cAAc,CAAC,GAAG,EAAE,OAAO,GAAG,OAAO,CAAC,wBAAwB,CAAC;CAWlE"}

package/dist/adapters/http/adapters/oauth2/grant-types/identity.js

@@ -0,0 +1,19 @@
+/*
+ * Copyright (c) 2025.
+ * Author Peter Placzek (tada5hi)
+ * For the full copyright and license information,
+ * view the LICENSE file that was distributed with this source code.
+ */
+import { getRequestHeader, getRequestIP } from 'routup';
+import { IdentityGrantType } from "../../../../../core/index.js";
+import { useRequestIdentityOrFail } from "../../../request/index.js";
+export class HTTPOAuth2IdentityGrantType extends IdentityGrantType {
+    runWithRequest(req) {
+        const identity = useRequestIdentityOrFail(req);
+        return this.runWith(identity.raw, {
+            ipAddress: getRequestIP(req, { trustProxy: true }),
+            userAgent: getRequestHeader(req, 'user-agent'),
+        });
+    }
+}
+//# sourceMappingURL=identity.js.map

package/dist/adapters/http/adapters/oauth2/grant-types/identity.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"identity.js","sourceRoot":"","sources":["../../../../../../src/adapters/http/adapters/oauth2/grant-types/identity.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAIH,OAAO,EAAE,gBAAgB,EAAE,YAAY,EAAE,MAAM,QAAQ,CAAC;AACxD,OAAO,EAAE,iBAAiB,EAAE,MAAM,8BAA8B,CAAC;AACjE,OAAO,EAAE,wBAAwB,EAAE,MAAM,2BAA2B,CAAC;AAGrE,MAAM,OAAO,2BAA4B,SAAQ,iBAAiB;IAC9D,cAAc,CAAC,GAAY;QACvB,MAAM,QAAQ,GAAG,wBAAwB,CAAC,GAAG,CAAC,CAAC;QAE/C,OAAO,IAAI,CAAC,OAAO,CACf,QAAQ,CAAC,GAAG,EACZ;YACI,SAAS,EAAE,YAAY,CAAC,GAAG,EAAE,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC;YAClD,SAAS,EAAE,gBAAgB,CAAC,GAAG,EAAE,YAAY,CAAC;SACjD,CACJ,CAAC;IACN,CAAC;CACJ"}

package/dist/adapters/http/adapters/oauth2/grant-types/index.d.ts

@@ -0,0 +1,9 @@
+export * from './utils/index.ts';
+export * from './authorize.ts';
+export * from './client-credentials.ts';
+export * from './identity.ts';
+export * from './password.ts';
+export * from './refresh_token.ts';
+export * from './robot-credentials.ts';
+export * from './types.ts';
+//# sourceMappingURL=index.d.ts.map

package/dist/adapters/http/adapters/oauth2/grant-types/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../../src/adapters/http/adapters/oauth2/grant-types/index.ts"],"names":[],"mappings":"AAOA,cAAc,kBAAkB,CAAC;AAEjC,cAAc,gBAAgB,CAAC;AAC/B,cAAc,yBAAyB,CAAC;AACxC,cAAc,eAAe,CAAC;AAC9B,cAAc,eAAe,CAAC;AAC9B,cAAc,oBAAoB,CAAC;AACnC,cAAc,wBAAwB,CAAC;AAEvC,cAAc,YAAY,CAAC"}

package/dist/adapters/http/adapters/oauth2/grant-types/index.js

@@ -0,0 +1,15 @@
+/*
+ * Copyright (c) 2025.
+ * Author Peter Placzek (tada5hi)
+ * For the full copyright and license information,
+ * view the LICENSE file that was distributed with this source code.
+ */
+export * from "./utils/index.js";
+export * from "./authorize.js";
+export * from "./client-credentials.js";
+export * from "./identity.js";
+export * from "./password.js";
+export * from "./refresh_token.js";
+export * from "./robot-credentials.js";
+export * from "./types.js";
+//# sourceMappingURL=index.js.map

package/dist/adapters/http/adapters/oauth2/grant-types/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../../../src/adapters/http/adapters/oauth2/grant-types/index.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,cAAc,kBAAkB,CAAC;AAEjC,cAAc,gBAAgB,CAAC;AAC/B,cAAc,yBAAyB,CAAC;AACxC,cAAc,eAAe,CAAC;AAC9B,cAAc,eAAe,CAAC;AAC9B,cAAc,oBAAoB,CAAC;AACnC,cAAc,wBAAwB,CAAC;AAEvC,cAAc,YAAY,CAAC"}