@authup/server-core 1.0.0-beta.26 → 1.0.0-beta.28

package/dist/adapters/http/controllers/workflows/jwks/handlers/read.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"read.d.ts","sourceRoot":"","sources":["../../../../../../../src/adapters/http/controllers/workflows/jwks/handlers/read.ts"],"names":[],"mappings":"AASA,OAAO,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,QAAQ,CAAC;AAQhD,wBAAsB,mBAAmB,CACrC,GAAG,EAAE,OAAO,EACZ,GAAG,EAAE,QAAQ,EACb,eAAe,CAAC,EAAE,MAAM,GACxB,OAAO,CAAC,GAAG,CAAC,CAsCf;AAED,wBAAsB,kBAAkB,CACpC,GAAG,EAAE,OAAO,EACZ,GAAG,EAAE,QAAQ,EACb,UAAU,CAAC,EAAE,MAAM,GACnB,OAAO,CAAC,GAAG,CAAC,CAmCf"}

package/dist/adapters/http/controllers/workflows/jwks/handlers/read.js

@@ -0,0 +1,76 @@
+/*
+ * Copyright (c) 2022-2022.
+ * Author Peter Placzek (tada5hi)
+ * For the full copyright and license information,
+ * view the LICENSE file that was distributed with this source code.
+ */
+import { AsymmetricKey } from '@authup/server-kit';
+import { JWKType } from '@authup/specs';
+import { send } from 'routup';
+import { In } from 'typeorm';
+import { BadRequestError, NotFoundError } from '@ebec/http';
+import { useDataSource } from 'typeorm-extension';
+import { KeyEntity } from "../../../../../database/domains/index.js";
+import { getRequestStringParam, getRequestStringParamOrFail } from "../../../../request/index.js";
+export async function getJwksRouteHandler(req, res, realmIdParamKey) {
+    const dataSource = await useDataSource();
+    const repository = dataSource.getRepository(KeyEntity);
+    const realmId = getRequestStringParam(req, realmIdParamKey || 'realmId');
+    const entities = await repository.find({
+        where: {
+            type: In([JWKType.RSA, JWKType.EC]),
+            ...(realmId ? { realm_id: realmId } : {}),
+        },
+        order: {
+            priority: 'DESC',
+        },
+    });
+    const promises = entities
+        .filter((entity) => !!entity.encryption_key)
+        .map((entity) => AsymmetricKey
+        .fromBase64({
+        format: 'spki',
+        key: entity.encryption_key,
+        options: AsymmetricKey.buildImportOptionsForJWTAlgorithm(entity.signature_algorithm),
+    })
+        .then((container) => container.toJWK())
+        .then((key) => ({
+        ...key,
+        kid: entity.id,
+        alg: entity.signature_algorithm,
+    })));
+    const keys = await Promise.all(promises);
+    return send(res, {
+        keys,
+    });
+}
+export async function getJwkRouteHandler(req, res, idParamKey) {
+    const id = getRequestStringParamOrFail(req, idParamKey || 'id');
+    const dataSource = await useDataSource();
+    const repository = dataSource.getRepository(KeyEntity);
+    const entity = await repository.findOne({
+        where: {
+            type: In([JWKType.RSA, JWKType.EC]),
+            id,
+        },
+    });
+    if (!entity) {
+        throw new NotFoundError();
+    }
+    if (!entity.encryption_key) {
+        throw new BadRequestError('The encryption key does not exist');
+    }
+    const container = await AsymmetricKey
+        .fromBase64({
+        format: 'spki',
+        key: entity.encryption_key,
+        options: AsymmetricKey.buildImportOptionsForJWTAlgorithm(entity.signature_algorithm),
+    });
+    const jsonWebKey = await container.toJWK();
+    jsonWebKey.alg = entity.signature_algorithm;
+    return send(res, {
+        ...jsonWebKey,
+        kid: entity.id,
+    });
+}
+//# sourceMappingURL=read.js.map

package/dist/adapters/http/controllers/workflows/jwks/handlers/read.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"read.js","sourceRoot":"","sources":["../../../../../../../src/adapters/http/controllers/workflows/jwks/handlers/read.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AACnD,OAAO,EAAE,OAAO,EAAE,MAAM,eAAe,CAAC;AAExC,OAAO,EAAE,IAAI,EAAE,MAAM,QAAQ,CAAC;AAC9B,OAAO,EAAE,EAAE,EAAE,MAAM,SAAS,CAAC;AAC7B,OAAO,EAAE,eAAe,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAC5D,OAAO,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAC;AAClD,OAAO,EAAE,SAAS,EAAE,MAAM,0CAA0C,CAAC;AACrE,OAAO,EAAE,qBAAqB,EAAE,2BAA2B,EAAE,MAAM,8BAA8B,CAAC;AAElG,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACrC,GAAY,EACZ,GAAa,EACb,eAAwB;IAExB,MAAM,UAAU,GAAG,MAAM,aAAa,EAAE,CAAC;IACzC,MAAM,UAAU,GAAG,UAAU,CAAC,aAAa,CAAC,SAAS,CAAC,CAAC;IAEvD,MAAM,OAAO,GAAG,qBAAqB,CAAC,GAAG,EAAE,eAAe,IAAI,SAAS,CAAC,CAAC;IAEzE,MAAM,QAAQ,GAAG,MAAM,UAAU,CAAC,IAAI,CAAC;QACnC,KAAK,EAAE;YACH,IAAI,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE,OAAO,CAAC,EAAE,CAAC,CAAC;YACnC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC5C;QACD,KAAK,EAAE;YACH,QAAQ,EAAE,MAAM;SACnB;KACJ,CAAC,CAAC;IAEH,MAAM,QAAQ,GAAG,QAAQ;SACpB,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,cAAc,CAAC;SAC3C,GAAG,CACA,CAAC,MAAM,EAAE,EAAE,CAAC,aAAa;SACpB,UAAU,CAAC;QACR,MAAM,EAAE,MAAM;QACd,GAAG,EAAE,MAAM,CAAC,cAAe;QAC3B,OAAO,EAAE,aAAa,CAAC,iCAAiC,CAAC,MAAM,CAAC,mBAAmB,CAAC;KACvF,CAAC;SACD,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,KAAK,EAAE,CAAC;SACtC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;QACZ,GAAG,GAAG;QACN,GAAG,EAAE,MAAM,CAAC,EAAE;QACd,GAAG,EAAE,MAAM,CAAC,mBAAmB;KAClC,CAAC,CAAC,CACV,CAAC;IAEN,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IAEzC,OAAO,IAAI,CAAC,GAAG,EAAE;QACb,IAAI;KACP,CAAC,CAAC;AACP,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACpC,GAAY,EACZ,GAAa,EACb,UAAmB;IAEnB,MAAM,EAAE,GAAG,2BAA2B,CAAC,GAAG,EAAE,UAAU,IAAI,IAAI,CAAC,CAAC;IAEhE,MAAM,UAAU,GAAG,MAAM,aAAa,EAAE,CAAC;IACzC,MAAM,UAAU,GAAG,UAAU,CAAC,aAAa,CAAC,SAAS,CAAC,CAAC;IAEvD,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,OAAO,CAAC;QACpC,KAAK,EAAE;YACH,IAAI,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE,OAAO,CAAC,EAAE,CAAC,CAAC;YACnC,EAAE;SACL;KACJ,CAAC,CAAC;IAEH,IAAI,CAAC,MAAM,EAAE,CAAC;QACV,MAAM,IAAI,aAAa,EAAE,CAAC;IAC9B,CAAC;IAED,IAAI,CAAC,MAAM,CAAC,cAAc,EAAE,CAAC;QACzB,MAAM,IAAI,eAAe,CAAC,mCAAmC,CAAC,CAAC;IACnE,CAAC;IAED,MAAM,SAAS,GAAG,MAAM,aAAa;SAChC,UAAU,CAAC;QACR,MAAM,EAAE,MAAM;QACd,GAAG,EAAE,MAAM,CAAC,cAAe;QAC3B,OAAO,EAAE,aAAa,CAAC,iCAAiC,CAAC,MAAM,CAAC,mBAAmB,CAAC;KACvF,CAAC,CAAC;IAEP,MAAM,UAAU,GAAG,MAAM,SAAS,CAAC,KAAK,EAAE,CAAC;IAC3C,UAAU,CAAC,GAAG,GAAG,MAAM,CAAC,mBAAmB,CAAC;IAE5C,OAAO,IAAI,CAAC,GAAG,EAAE;QACb,GAAG,UAAU;QACb,GAAG,EAAE,MAAM,CAAC,EAAE;KACjB,CAAC,CAAC;AACP,CAAC"}

package/dist/adapters/http/controllers/workflows/jwks/index.d.ts

@@ -0,0 +1,3 @@
+export * from './handlers/index.ts';
+export * from './module.ts';
+//# sourceMappingURL=index.d.ts.map

package/dist/adapters/http/controllers/workflows/jwks/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../../src/adapters/http/controllers/workflows/jwks/index.ts"],"names":[],"mappings":"AAOA,cAAc,qBAAqB,CAAC;AACpC,cAAc,aAAa,CAAC"}

package/dist/adapters/http/controllers/workflows/jwks/index.js

@@ -0,0 +1,9 @@
+/*
+ * Copyright (c) 2022.
+ * Author Peter Placzek (tada5hi)
+ * For the full copyright and license information,
+ * view the LICENSE file that was distributed with this source code.
+ */
+export * from "./handlers/index.js";
+export * from "./module.js";
+//# sourceMappingURL=index.js.map

package/dist/adapters/http/controllers/workflows/jwks/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../../../src/adapters/http/controllers/workflows/jwks/index.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,cAAc,qBAAqB,CAAC;AACpC,cAAc,aAAa,CAAC"}

package/dist/adapters/http/controllers/workflows/jwks/module.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"module.d.ts","sourceRoot":"","sources":["../../../../../../src/adapters/http/controllers/workflows/jwks/module.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,eAAe,CAAC;AAMtD,qBACa,aAAa;IAEhB,WAAW,CACD,GAAG,EAAE,GAAG,EACH,GAAG,EAAE,GAAG,GAC1B,OAAO,CAAC,gBAAgB,EAAE,CAAC;IAKxB,UAAU,CACC,EAAE,EAAE,MAAM,EACP,GAAG,EAAE,GAAG,EACP,GAAG,EAAE,GAAG,GAC1B,OAAO,CAAC,gBAAgB,CAAC;CAG/B"}

package/dist/adapters/http/controllers/workflows/jwks/module.js

@@ -0,0 +1,50 @@
+/*
+ * Copyright (c) 2024.
+ * Author Peter Placzek (tada5hi)
+ * For the full copyright and license information,
+ * view the LICENSE file that was distributed with this source code.
+ */
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+var __param = (this && this.__param) || function (paramIndex, decorator) {
+    return function (target, key) { decorator(target, key, paramIndex); }
+};
+import { DController, DGet, DPath, DRequest, DResponse, } from '@routup/decorators';
+import { getJwkRouteHandler, getJwksRouteHandler } from "./handlers/index.js";
+let JwkController = class JwkController {
+    async getManyJwks(req, res) {
+        return getJwksRouteHandler(req, res);
+    }
+    async getOneJwks(id, req, res) {
+        return getJwkRouteHandler(req, res);
+    }
+};
+__decorate([
+    DGet('/jwks', []),
+    __param(0, DRequest()),
+    __param(1, DResponse()),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [Object, Object]),
+    __metadata("design:returntype", Promise)
+], JwkController.prototype, "getManyJwks", null);
+__decorate([
+    DGet('/jwks/:id', []),
+    __param(0, DPath('id')),
+    __param(1, DRequest()),
+    __param(2, DResponse()),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [String, Object, Object]),
+    __metadata("design:returntype", Promise)
+], JwkController.prototype, "getOneJwks", null);
+JwkController = __decorate([
+    DController('')
+], JwkController);
+export { JwkController };
+//# sourceMappingURL=module.js.map

package/dist/adapters/http/controllers/workflows/jwks/module.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"module.js","sourceRoot":"","sources":["../../../../../../src/adapters/http/controllers/workflows/jwks/module.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;;;;;;;;;;;;;AAGH,OAAO,EACH,WAAW,EAAE,IAAI,EAAE,KAAK,EAAE,QAAQ,EAAE,SAAS,GAChD,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAAE,kBAAkB,EAAE,mBAAmB,EAAE,MAAM,qBAAqB,CAAC;AAGvE,IAAM,aAAa,GAAnB,MAAM,aAAa;IAEhB,AAAN,KAAK,CAAC,WAAW,CACD,GAAQ,EACH,GAAQ;QAEzB,OAAO,mBAAmB,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;IACzC,CAAC;IAGK,AAAN,KAAK,CAAC,UAAU,CACC,EAAU,EACP,GAAQ,EACP,GAAQ;QAEzB,OAAO,kBAAkB,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;IACxC,CAAC;CACJ,CAAA;AAfS;IADL,IAAI,CAAC,OAAO,EAAE,EAAE,CAAC;IAEb,WAAA,QAAQ,EAAE,CAAA;IACN,WAAA,SAAS,EAAE,CAAA;;;;gDAGnB;AAGK;IADL,IAAI,CAAC,WAAW,EAAE,EAAE,CAAC;IAEjB,WAAA,KAAK,CAAC,IAAI,CAAC,CAAA;IACP,WAAA,QAAQ,EAAE,CAAA;IACV,WAAA,SAAS,EAAE,CAAA;;;;+CAGnB;AAhBQ,aAAa;IADzB,WAAW,CAAC,EAAE,CAAC;GACH,aAAa,CAiBzB"}

package/dist/adapters/http/controllers/workflows/openid/index.d.ts

@@ -0,0 +1,2 @@
+export * from './module.ts';
+//# sourceMappingURL=index.d.ts.map

package/dist/adapters/http/controllers/workflows/openid/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../../src/adapters/http/controllers/workflows/openid/index.ts"],"names":[],"mappings":"AAOA,cAAc,aAAa,CAAC"}

package/dist/adapters/http/controllers/workflows/openid/index.js

@@ -0,0 +1,8 @@
+/*
+ * Copyright (c) 2022.
+ * Author Peter Placzek (tada5hi)
+ * For the full copyright and license information,
+ * view the LICENSE file that was distributed with this source code.
+ */
+export * from "./module.js";
+//# sourceMappingURL=index.js.map

package/dist/adapters/http/controllers/workflows/openid/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../../../src/adapters/http/controllers/workflows/openid/index.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,cAAc,aAAa,CAAC"}

package/dist/adapters/http/controllers/workflows/openid/module.d.ts

@@ -0,0 +1,10 @@
+import { OpenIDProviderMetadata } from '@authup/specs';
+export type OpenIDControllerOptions = {
+    baseURL: string;
+};
+export declare class OpenIDController {
+    protected options: OpenIDControllerOptions;
+    constructor(options: OpenIDControllerOptions);
+    getOpenIdConfiguration(): Promise<OpenIDProviderMetadata>;
+}
+//# sourceMappingURL=module.d.ts.map

package/dist/adapters/http/controllers/workflows/openid/module.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"module.d.ts","sourceRoot":"","sources":["../../../../../../src/adapters/http/controllers/workflows/openid/module.ts"],"names":[],"mappings":"AAOA,OAAO,EAAmC,sBAAsB,EAAE,MAAM,eAAe,CAAC;AAKxF,MAAM,MAAM,uBAAuB,GAAG;IAClC,OAAO,EAAE,MAAM,CAAA;CAClB,CAAC;AAEF,qBACa,gBAAgB;IACzB,SAAS,CAAC,OAAO,EAAE,uBAAuB,CAAC;gBAE/B,OAAO,EAAE,uBAAuB;IAKtC,sBAAsB,IAAI,OAAO,CAAC,sBAAsB,CAAC;CAmClE"}

package/dist/adapters/http/controllers/workflows/openid/module.js

@@ -0,0 +1,59 @@
+/*
+ * Copyright (c) 2024.
+ * Author Peter Placzek (tada5hi)
+ * For the full copyright and license information,
+ * view the LICENSE file that was distributed with this source code.
+ */
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+import { OAuth2AuthorizationResponseType } from '@authup/specs';
+import { DController, DGet, } from '@routup/decorators';
+let OpenIDController = class OpenIDController {
+    options;
+    constructor(options) {
+        this.options = options;
+    }
+    async getOpenIdConfiguration() {
+        return {
+            issuer: this.options.baseURL,
+            authorization_endpoint: new URL('authorize', this.options.baseURL).href,
+            jwks_uri: new URL('jwks', this.options.baseURL).href,
+            response_types_supported: [
+                OAuth2AuthorizationResponseType.CODE,
+                OAuth2AuthorizationResponseType.TOKEN,
+                OAuth2AuthorizationResponseType.NONE,
+            ],
+            subject_types_supported: [
+                'public',
+            ],
+            id_token_signing_alg_values_supported: [
+                'HS256', 'HS384', 'HS512', 'RS256', 'RS384', 'RS512', 'none',
+            ],
+            token_endpoint: new URL('token', this.options.baseURL).href,
+            introspection_endpoint: new URL('token/introspect', this.options.baseURL).href,
+            revocation_endpoint: new URL('token', this.options.baseURL).href,
+            // -----------------------------------------------------------
+            service_documentation: 'https://authup.org/',
+            userinfo_endpoint: new URL('users/@me', this.options.baseURL).href,
+        };
+    }
+};
+__decorate([
+    DGet('/.well-known/openid-configuration', []),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", []),
+    __metadata("design:returntype", Promise)
+], OpenIDController.prototype, "getOpenIdConfiguration", null);
+OpenIDController = __decorate([
+    DController(''),
+    __metadata("design:paramtypes", [Object])
+], OpenIDController);
+export { OpenIDController };
+//# sourceMappingURL=module.js.map

package/dist/adapters/http/controllers/workflows/openid/module.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"module.js","sourceRoot":"","sources":["../../../../../../src/adapters/http/controllers/workflows/openid/module.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;;;;;;;;;;AAEH,OAAO,EAAE,+BAA+B,EAA0B,MAAM,eAAe,CAAC;AACxF,OAAO,EACH,WAAW,EAAE,IAAI,GACpB,MAAM,oBAAoB,CAAC;AAOrB,IAAM,gBAAgB,GAAtB,MAAM,gBAAgB;IACf,OAAO,CAA0B;IAE3C,YAAY,OAAgC;QACxC,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;IAC3B,CAAC;IAGK,AAAN,KAAK,CAAC,sBAAsB;QACxB,OAAO;YACH,MAAM,EAAE,IAAI,CAAC,OAAO,CAAC,OAAO;YAE5B,sBAAsB,EAAE,IAAI,GAAG,CAAC,WAAW,EAAE,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,IAAI;YAEvE,QAAQ,EAAE,IAAI,GAAG,CAAC,MAAM,EAAE,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,IAAI;YAEpD,wBAAwB,EAAE;gBACtB,+BAA+B,CAAC,IAAI;gBACpC,+BAA+B,CAAC,KAAK;gBACrC,+BAA+B,CAAC,IAAI;aACvC;YAED,uBAAuB,EAAE;gBACrB,QAAQ;aACX;YAED,qCAAqC,EAAE;gBACnC,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM;aAC/D;YAED,cAAc,EAAE,IAAI,GAAG,CAAC,OAAO,EAAE,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,IAAI;YAE3D,sBAAsB,EAAE,IAAI,GAAG,CAAC,kBAAkB,EAAE,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,IAAI;YAE9E,mBAAmB,EAAE,IAAI,GAAG,CAAC,OAAO,EAAE,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,IAAI;YAEhE,8DAA8D;YAE9D,qBAAqB,EAAE,qBAAqB;YAE5C,iBAAiB,EAAE,IAAI,GAAG,CAAC,WAAW,EAAE,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,IAAI;SACrE,CAAC;IACN,CAAC;CACJ,CAAA;AAnCS;IADL,IAAI,CAAC,mCAAmC,EAAE,EAAE,CAAC;;;;8DAmC7C;AA1CQ,gBAAgB;IAD5B,WAAW,CAAC,EAAE,CAAC;;GACH,gBAAgB,CA2C5B"}

package/dist/adapters/http/controllers/workflows/password-forgot/index.d.ts

@@ -0,0 +1,2 @@
+export * from './module.ts';
+//# sourceMappingURL=index.d.ts.map

package/dist/adapters/http/controllers/workflows/password-forgot/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../../src/adapters/http/controllers/workflows/password-forgot/index.ts"],"names":[],"mappings":"AAOA,cAAc,aAAa,CAAC"}

package/dist/adapters/http/controllers/workflows/password-forgot/index.js

@@ -0,0 +1,8 @@
+/*
+ * Copyright (c) 2024.
+ * Author Peter Placzek (tada5hi)
+ * For the full copyright and license information,
+ * view the LICENSE file that was distributed with this source code.
+ */
+export * from "./module.js";
+//# sourceMappingURL=index.js.map

package/dist/adapters/http/controllers/workflows/password-forgot/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../../../src/adapters/http/controllers/workflows/password-forgot/index.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,cAAc,aAAa,CAAC"}

package/dist/adapters/http/controllers/workflows/password-forgot/module.d.ts

@@ -0,0 +1,24 @@
+import { PasswordForgotResponse } from '@authup/core-http-kit';
+import { User } from '@authup/core-kit';
+import { RoutupContainerAdapter } from '@validup/adapter-routup';
+import type { Request, Response } from 'routup';
+import type { Repository } from 'typeorm';
+import { IMailClient } from '../../../../../core/index.ts';
+export type PasswordForgotControllerOptions = {
+    registration?: boolean;
+    emailVerification?: boolean;
+};
+export type PasswordForgotControllerContext = {
+    options: PasswordForgotControllerOptions;
+    mailClient: IMailClient;
+    repository: Repository<User>;
+};
+export declare class PasswordForgotController {
+    protected options: PasswordForgotControllerOptions;
+    protected repository: Repository<User>;
+    protected mailClient: IMailClient;
+    protected validator: RoutupContainerAdapter<User>;
+    constructor(ctx: PasswordForgotControllerContext);
+    execute(req: Request, res: Response): Promise<PasswordForgotResponse>;
+}
+//# sourceMappingURL=module.d.ts.map

package/dist/adapters/http/controllers/workflows/password-forgot/module.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"module.d.ts","sourceRoot":"","sources":["../../../../../../src/adapters/http/controllers/workflows/password-forgot/module.ts"],"names":[],"mappings":"AAOA,OAAO,EAAE,sBAAsB,EAAE,MAAM,uBAAuB,CAAC;AAC/D,OAAO,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAC;AAKxC,OAAO,EAAE,sBAAsB,EAAE,MAAM,yBAAyB,CAAC;AAEjE,OAAO,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,QAAQ,CAAC;AAEhD,OAAO,KAAK,EAAoB,UAAU,EAAE,MAAM,SAAS,CAAC;AAC5D,OAAO,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAI3D,MAAM,MAAM,+BAA+B,GAAG;IAC1C,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB,iBAAiB,CAAC,EAAE,OAAO,CAAA;CAC9B,CAAC;AAEF,MAAM,MAAM,+BAA+B,GAAG;IAC1C,OAAO,EAAE,+BAA+B,CAAC;IACzC,UAAU,EAAE,WAAW,CAAC;IACxB,UAAU,EAAE,UAAU,CAAC,IAAI,CAAC,CAAA;CAC/B,CAAC;AAEF,qBACa,wBAAwB;IACjC,SAAS,CAAC,OAAO,EAAE,+BAA+B,CAAC;IAEnD,SAAS,CAAC,UAAU,EAAE,UAAU,CAAC,IAAI,CAAC,CAAC;IAEvC,SAAS,CAAC,UAAU,EAAE,WAAW,CAAC;IAElC,SAAS,CAAC,SAAS,EAAG,sBAAsB,CAAC,IAAI,CAAC,CAAC;gBAEvC,GAAG,EAAE,+BAA+B;IAU1C,OAAO,CACG,GAAG,EAAE,OAAO,EACP,GAAG,EAAE,QAAQ,GAC/B,OAAO,CAAC,sBAAsB,CAAC;CAiDrC"}

package/dist/adapters/http/controllers/workflows/password-forgot/module.js

@@ -0,0 +1,91 @@
+/*
+ * Copyright (c) 2022-2024.
+ * Author Peter Placzek (tada5hi)
+ * For the full copyright and license information,
+ * view the LICENSE file that was distributed with this source code.
+ */
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+var __param = (this && this.__param) || function (paramIndex, decorator) {
+    return function (target, key) { decorator(target, key, paramIndex); }
+};
+import { BadRequestError, NotFoundError } from '@ebec/http';
+import { DController, DPost, DRequest, DResponse, } from '@routup/decorators';
+import { RoutupContainerAdapter } from '@validup/adapter-routup';
+import { randomBytes } from 'node:crypto';
+import { sendAccepted } from 'routup';
+import { resolveRealm } from "../../../../database/domains/index.js";
+import { PasswordForgotRequestValidator } from "./validator.js";
+let PasswordForgotController = class PasswordForgotController {
+    options;
+    repository;
+    mailClient;
+    validator;
+    constructor(ctx) {
+        this.options = ctx.options;
+        this.repository = ctx.repository;
+        this.mailClient = ctx.mailClient;
+        const validator = new PasswordForgotRequestValidator();
+        this.validator = new RoutupContainerAdapter(validator);
+    }
+    async execute(req, res) {
+        if (!this.options.registration) {
+            throw new BadRequestError('User registration is not enabled.');
+        }
+        if (!this.options.emailVerification) {
+            throw new BadRequestError('Email verification is not enabled, but required to reset a password.');
+        }
+        const data = await this.validator.run(req);
+        const where = {
+            ...(data.name ? { name: data.name } : {}),
+            ...(data.email ? { email: data.email } : {}),
+        };
+        const realm = await resolveRealm(data.realm_id, true);
+        where.realm_id = realm.id;
+        const query = this.repository.createQueryBuilder('user');
+        const entity = await query
+            .addSelect('user.email')
+            .where(where)
+            .getOne();
+        if (!entity) {
+            throw new NotFoundError();
+        }
+        entity.reset_expires = new Date(Date.now() + (1000 * 60 * 30)).toISOString();
+        entity.reset_hash = randomBytes(32).toString('hex');
+        await this.repository.save(entity);
+        await this.mailClient.send({
+            to: entity.email,
+            subject: 'Forgot Password - Reset code',
+            html: `
+            <p>Please use the code below to reset your account password.</p>
+            <p>${entity.reset_hash}</p>
+            `,
+        });
+        // eslint-disable-next-line @typescript-eslint/ban-ts-comment
+        // @ts-expect-error
+        return sendAccepted(res, {
+            reset_expires: entity.reset_expires,
+        });
+    }
+};
+__decorate([
+    DPost('', []),
+    __param(0, DRequest()),
+    __param(1, DResponse()),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [Object, Object]),
+    __metadata("design:returntype", Promise)
+], PasswordForgotController.prototype, "execute", null);
+PasswordForgotController = __decorate([
+    DController('/password-forgot'),
+    __metadata("design:paramtypes", [Object])
+], PasswordForgotController);
+export { PasswordForgotController };
+//# sourceMappingURL=module.js.map

package/dist/adapters/http/controllers/workflows/password-forgot/module.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"module.js","sourceRoot":"","sources":["../../../../../../src/adapters/http/controllers/workflows/password-forgot/module.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;;;;;;;;;;;;;AAIH,OAAO,EAAE,eAAe,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAC5D,OAAO,EACH,WAAW,EAAE,KAAK,EAAE,QAAQ,EAAE,SAAS,GAC1C,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAAE,sBAAsB,EAAE,MAAM,yBAAyB,CAAC;AACjE,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAE1C,OAAO,EAAE,YAAY,EAAE,MAAM,QAAQ,CAAC;AAGtC,OAAO,EAAE,YAAY,EAAE,MAAM,uCAAuC,CAAC;AACrE,OAAO,EAAE,8BAA8B,EAAE,MAAM,gBAAgB,CAAC;AAczD,IAAM,wBAAwB,GAA9B,MAAM,wBAAwB;IACvB,OAAO,CAAkC;IAEzC,UAAU,CAAmB;IAE7B,UAAU,CAAc;IAExB,SAAS,CAAgC;IAEnD,YAAY,GAAoC;QAC5C,IAAI,CAAC,OAAO,GAAG,GAAG,CAAC,OAAO,CAAC;QAC3B,IAAI,CAAC,UAAU,GAAG,GAAG,CAAC,UAAU,CAAC;QACjC,IAAI,CAAC,UAAU,GAAG,GAAG,CAAC,UAAU,CAAC;QAEjC,MAAM,SAAS,GAAG,IAAI,8BAA8B,EAAE,CAAC;QACvD,IAAI,CAAC,SAAS,GAAG,IAAI,sBAAsB,CAAC,SAAS,CAAC,CAAC;IAC3D,CAAC;IAGK,AAAN,KAAK,CAAC,OAAO,CACG,GAAY,EACP,GAAa;QAE9B,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,YAAY,EAAE,CAAC;YAC7B,MAAM,IAAI,eAAe,CAAC,mCAAmC,CAAC,CAAC;QACnE,CAAC;QAED,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,iBAAiB,EAAE,CAAC;YAClC,MAAM,IAAI,eAAe,CAAC,sEAAsE,CAAC,CAAC;QACtG,CAAC;QAED,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAE3C,MAAM,KAAK,GAA4B;YACnC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACzC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC/C,CAAC;QAEF,MAAM,KAAK,GAAG,MAAM,YAAY,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;QACtD,KAAK,CAAC,QAAQ,GAAG,KAAK,CAAC,EAAE,CAAC;QAE1B,MAAM,KAAK,GAAG,IAAI,CAAC,UAAU,CAAC,kBAAkB,CAAC,MAAM,CAAC,CAAC;QACzD,MAAM,MAAM,GAAG,MAAM,KAAK;aACrB,SAAS,CAAC,YAAY,CAAC;aACvB,KAAK,CAAC,KAAK,CAAC;aACZ,MAAM,EAAE,CAAC;QAEd,IAAI,CAAC,MAAM,EAAE,CAAC;YACV,MAAM,IAAI,aAAa,EAAE,CAAC;QAC9B,CAAC;QAED,MAAM,CAAC,aAAa,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,IAAI,GAAG,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC;QAC7E,MAAM,CAAC,UAAU,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;QAEpD,MAAM,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAEnC,MAAM,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;YACvB,EAAE,EAAE,MAAM,CAAC,KAAK;YAChB,OAAO,EAAE,8BAA8B;YACvC,IAAI,EAAE;;iBAED,MAAM,CAAC,UAAU;aACrB;SACJ,CAAC,CAAC;QAEH,6DAA6D;QAC7D,mBAAmB;QACnB,OAAO,YAAY,CAAC,GAAG,EAAE;YACrB,aAAa,EAAE,MAAM,CAAC,aAAa;SACtC,CAAC,CAAC;IACP,CAAC;CACJ,CAAA;AApDS;IADL,KAAK,CAAC,EAAE,EAAE,EAAE,CAAC;IAET,WAAA,QAAQ,EAAE,CAAA;IACN,WAAA,SAAS,EAAE,CAAA;;;;uDAiDnB;AAtEQ,wBAAwB;IADpC,WAAW,CAAC,kBAAkB,CAAC;;GACnB,wBAAwB,CAuEpC"}

package/dist/adapters/http/controllers/workflows/password-forgot/validator.d.ts

@@ -0,0 +1,6 @@
+import type { User } from '@authup/core-kit';
+import { Container } from 'validup';
+export declare class PasswordForgotRequestValidator extends Container<User> {
+    protected initialize(): void;
+}
+//# sourceMappingURL=validator.d.ts.map

package/dist/adapters/http/controllers/workflows/password-forgot/validator.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"validator.d.ts","sourceRoot":"","sources":["../../../../../../src/adapters/http/controllers/workflows/password-forgot/validator.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAC;AAE7C,OAAO,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AAEpC,qBAAa,8BAA+B,SAAQ,SAAS,CAAC,IAAI,CAAC;IAC/D,SAAS,CAAC,UAAU;CAuCvB"}

package/dist/adapters/http/controllers/workflows/password-forgot/validator.js

@@ -0,0 +1,38 @@
+/*
+ * Copyright (c) 2025.
+ * Author Peter Placzek (tada5hi)
+ * For the full copyright and license information,
+ * view the LICENSE file that was distributed with this source code.
+ */
+import { createValidationChain, createValidator } from '@validup/adapter-validator';
+import { Container } from 'validup';
+export class PasswordForgotRequestValidator extends Container {
+    initialize() {
+        super.initialize();
+        const container = new Container({
+            oneOf: true,
+        });
+        container.mount('email', createValidator(() => {
+            const chain = createValidationChain();
+            return chain
+                .exists()
+                .notEmpty()
+                .isEmail();
+        }));
+        container.mount('name', createValidator(() => {
+            const chain = createValidationChain();
+            return chain
+                .exists()
+                .notEmpty()
+                .isString();
+        }));
+        this.mount(container);
+        this.mount('realm_id', { optional: true }, createValidator(() => {
+            const chain = createValidationChain();
+            return chain.exists()
+                .isUUID()
+                .optional({ values: 'null' });
+        }));
+    }
+}
+//# sourceMappingURL=validator.js.map

package/dist/adapters/http/controllers/workflows/password-forgot/validator.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"validator.js","sourceRoot":"","sources":["../../../../../../src/adapters/http/controllers/workflows/password-forgot/validator.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAGH,OAAO,EAAE,qBAAqB,EAAE,eAAe,EAAE,MAAM,4BAA4B,CAAC;AACpF,OAAO,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AAEpC,MAAM,OAAO,8BAA+B,SAAQ,SAAe;IACrD,UAAU;QAChB,KAAK,CAAC,UAAU,EAAE,CAAC;QAEnB,MAAM,SAAS,GAAG,IAAI,SAAS,CAAC;YAC5B,KAAK,EAAE,IAAI;SACd,CAAC,CAAC;QAEH,SAAS,CAAC,KAAK,CAAC,OAAO,EAAE,eAAe,CAAC,GAAG,EAAE;YAC1C,MAAM,KAAK,GAAG,qBAAqB,EAAE,CAAC;YACtC,OAAO,KAAK;iBACP,MAAM,EAAE;iBACR,QAAQ,EAAE;iBACV,OAAO,EAAE,CAAC;QACnB,CAAC,CAAC,CAAC,CAAC;QAEJ,SAAS,CAAC,KAAK,CACX,MAAM,EACN,eAAe,CAAC,GAAG,EAAE;YACjB,MAAM,KAAK,GAAG,qBAAqB,EAAE,CAAC;YACtC,OAAO,KAAK;iBACP,MAAM,EAAE;iBACR,QAAQ,EAAE;iBACV,QAAQ,EAAE,CAAC;QACpB,CAAC,CAAC,CACL,CAAC;QAEF,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;QAEtB,IAAI,CAAC,KAAK,CACN,UAAU,EACV,EAAE,QAAQ,EAAE,IAAI,EAAE,EAClB,eAAe,CAAC,GAAG,EAAE;YACjB,MAAM,KAAK,GAAG,qBAAqB,EAAE,CAAC;YACtC,OAAO,KAAK,CAAC,MAAM,EAAE;iBAChB,MAAM,EAAE;iBACR,QAAQ,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;QACtC,CAAC,CAAC,CACL,CAAC;IACN,CAAC;CACJ"}

package/dist/adapters/http/controllers/workflows/password-reset/index.d.ts

@@ -0,0 +1,2 @@
+export * from './module.ts';
+//# sourceMappingURL=index.d.ts.map

package/dist/adapters/http/controllers/workflows/password-reset/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../../src/adapters/http/controllers/workflows/password-reset/index.ts"],"names":[],"mappings":"AAOA,cAAc,aAAa,CAAC"}

package/dist/adapters/http/controllers/workflows/password-reset/index.js

@@ -0,0 +1,8 @@
+/*
+ * Copyright (c) 2024.
+ * Author Peter Placzek (tada5hi)
+ * For the full copyright and license information,
+ * view the LICENSE file that was distributed with this source code.
+ */
+export * from "./module.js";
+//# sourceMappingURL=index.js.map

package/dist/adapters/http/controllers/workflows/password-reset/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../../../src/adapters/http/controllers/workflows/password-reset/index.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,cAAc,aAAa,CAAC"}

package/dist/adapters/http/controllers/workflows/password-reset/module.d.ts

@@ -0,0 +1,17 @@
+import { PasswordResetResponse } from '@authup/core-http-kit';
+import { User } from '@authup/core-kit';
+import { RoutupContainerAdapter } from '@validup/adapter-routup';
+import type { Request, Response } from 'routup';
+import type { Repository } from 'typeorm';
+export type PasswordResetControllerContext = {
+    repository: Repository<User>;
+};
+export declare class PasswordResetController {
+    protected repository: Repository<User>;
+    protected validator: RoutupContainerAdapter<User & {
+        token: string;
+    }>;
+    constructor(ctx: PasswordResetControllerContext);
+    execute(req: Request, res: Response): Promise<PasswordResetResponse>;
+}
+//# sourceMappingURL=module.d.ts.map

package/dist/adapters/http/controllers/workflows/password-reset/module.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"module.d.ts","sourceRoot":"","sources":["../../../../../../src/adapters/http/controllers/workflows/password-reset/module.ts"],"names":[],"mappings":"AAOA,OAAO,EAAE,qBAAqB,EAAE,MAAM,uBAAuB,CAAC;AAC9D,OAAO,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAC;AAKxC,OAAO,EAAE,sBAAsB,EAAE,MAAM,yBAAyB,CAAC;AACjE,OAAO,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,QAAQ,CAAC;AAEhD,OAAO,KAAK,EAAoB,UAAU,EAAE,MAAM,SAAS,CAAC;AAK5D,MAAM,MAAM,8BAA8B,GAAG;IACzC,UAAU,EAAE,UAAU,CAAC,IAAI,CAAC,CAAA;CAC/B,CAAC;AAEF,qBACa,uBAAuB;IAChC,SAAS,CAAC,UAAU,EAAE,UAAU,CAAC,IAAI,CAAC,CAAC;IAEvC,SAAS,CAAC,SAAS,EAAG,sBAAsB,CAAC,IAAI,GAAG;QAAE,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;gBAE3D,GAAG,EAAE,8BAA8B;IAQzC,OAAO,CACG,GAAG,EAAE,OAAO,EACP,GAAG,EAAE,QAAQ,GAC/B,OAAO,CAAC,qBAAqB,CAAC;CAoCpC"}

package/dist/adapters/http/controllers/workflows/password-reset/module.js

@@ -0,0 +1,77 @@
+/*
+ * Copyright (c) 2022-2024.
+ * Author Peter Placzek (tada5hi)
+ * For the full copyright and license information,
+ * view the LICENSE file that was distributed with this source code.
+ */
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+var __param = (this && this.__param) || function (paramIndex, decorator) {
+    return function (target, key) { decorator(target, key, paramIndex); }
+};
+import { NotFoundError } from '@ebec/http';
+import { DController, DPost, DRequest, DResponse, } from '@routup/decorators';
+import { RoutupContainerAdapter } from '@validup/adapter-routup';
+import { sendAccepted } from 'routup';
+import { useDataSource, validateEntityJoinColumns } from 'typeorm-extension';
+import { UserEntity, resolveRealm } from "../../../../database/domains/index.js";
+import { PasswordResetRequestValidator } from "./validator.js";
+let PasswordResetController = class PasswordResetController {
+    repository;
+    validator;
+    constructor(ctx) {
+        this.repository = ctx.repository;
+        const validator = new PasswordResetRequestValidator();
+        this.validator = new RoutupContainerAdapter(validator);
+    }
+    async execute(req, res) {
+        const data = await this.validator.run(req);
+        // todo: remove this.
+        const dataSource = await useDataSource();
+        await validateEntityJoinColumns(data, {
+            dataSource,
+            entityTarget: UserEntity,
+        });
+        const where = {
+            ...(data.name ? { name: data.name } : {}),
+            ...(data.email ? { email: data.email } : {}),
+            reset_hash: data.token,
+        };
+        const realm = await resolveRealm(data.realm_id, true);
+        where.realm_id = realm.id;
+        const entity = await this.repository.findOneBy(where);
+        if (!entity) {
+            throw new NotFoundError();
+        }
+        entity.reset_at = new Date().toISOString();
+        entity.reset_hash = null;
+        entity.reset_expires = null;
+        await this.repository.save(entity);
+        // eslint-disable-next-line @typescript-eslint/ban-ts-comment
+        // @ts-expect-error
+        return sendAccepted(res, {
+            reset_at: entity.reset_at,
+        });
+    }
+};
+__decorate([
+    DPost('', []),
+    __param(0, DRequest()),
+    __param(1, DResponse()),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [Object, Object]),
+    __metadata("design:returntype", Promise)
+], PasswordResetController.prototype, "execute", null);
+PasswordResetController = __decorate([
+    DController('/password-reset'),
+    __metadata("design:paramtypes", [Object])
+], PasswordResetController);
+export { PasswordResetController };
+//# sourceMappingURL=module.js.map

package/dist/adapters/http/controllers/workflows/password-reset/module.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"module.js","sourceRoot":"","sources":["../../../../../../src/adapters/http/controllers/workflows/password-reset/module.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;;;;;;;;;;;;;AAIH,OAAO,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAC3C,OAAO,EACH,WAAW,EAAE,KAAK,EAAE,QAAQ,EAAE,SAAS,GAC1C,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAAE,sBAAsB,EAAE,MAAM,yBAAyB,CAAC;AAEjE,OAAO,EAAE,YAAY,EAAE,MAAM,QAAQ,CAAC;AAEtC,OAAO,EAAE,aAAa,EAAE,yBAAyB,EAAE,MAAM,mBAAmB,CAAC;AAC7E,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,uCAAuC,CAAC;AACjF,OAAO,EAAE,6BAA6B,EAAE,MAAM,gBAAgB,CAAC;AAOxD,IAAM,uBAAuB,GAA7B,MAAM,uBAAuB;IACtB,UAAU,CAAmB;IAE7B,SAAS,CAAoD;IAEvE,YAAY,GAAmC;QAC3C,IAAI,CAAC,UAAU,GAAG,GAAG,CAAC,UAAU,CAAC;QAEjC,MAAM,SAAS,GAAG,IAAI,6BAA6B,EAAE,CAAC;QACtD,IAAI,CAAC,SAAS,GAAG,IAAI,sBAAsB,CAAC,SAAS,CAAC,CAAC;IAC3D,CAAC;IAGK,AAAN,KAAK,CAAC,OAAO,CACG,GAAY,EACP,GAAa;QAE9B,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAE3C,qBAAqB;QACrB,MAAM,UAAU,GAAG,MAAM,aAAa,EAAE,CAAC;QACzC,MAAM,yBAAyB,CAAC,IAAI,EAAE;YAClC,UAAU;YACV,YAAY,EAAE,UAAU;SAC3B,CAAC,CAAC;QAEH,MAAM,KAAK,GAA4B;YACnC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACzC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC5C,UAAU,EAAE,IAAI,CAAC,KAAK;SACzB,CAAC;QAEF,MAAM,KAAK,GAAG,MAAM,YAAY,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;QACtD,KAAK,CAAC,QAAQ,GAAG,KAAK,CAAC,EAAE,CAAC;QAE1B,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;QACtD,IAAI,CAAC,MAAM,EAAE,CAAC;YACV,MAAM,IAAI,aAAa,EAAE,CAAC;QAC9B,CAAC;QAED,MAAM,CAAC,QAAQ,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QAC3C,MAAM,CAAC,UAAU,GAAG,IAAI,CAAC;QACzB,MAAM,CAAC,aAAa,GAAG,IAAI,CAAC;QAE5B,MAAM,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAEnC,6DAA6D;QAC7D,mBAAmB;QACnB,OAAO,YAAY,CAAC,GAAG,EAAE;YACrB,QAAQ,EAAE,MAAM,CAAC,QAAQ;SAC5B,CAAC,CAAC;IACP,CAAC;CACJ,CAAA;AAvCS;IADL,KAAK,CAAC,EAAE,EAAE,EAAE,CAAC;IAET,WAAA,QAAQ,EAAE,CAAA;IACN,WAAA,SAAS,EAAE,CAAA;;;;sDAoCnB;AAnDQ,uBAAuB;IADnC,WAAW,CAAC,iBAAiB,CAAC;;GAClB,uBAAuB,CAoDnC"}

package/dist/adapters/http/controllers/workflows/password-reset/validator.d.ts

@@ -0,0 +1,8 @@
+import type { User } from '@authup/core-kit';
+import { Container } from 'validup';
+export declare class PasswordResetRequestValidator extends Container<User & {
+    token: string;
+}> {
+    protected initialize(): void;
+}
+//# sourceMappingURL=validator.d.ts.map

package/dist/adapters/http/controllers/workflows/password-reset/validator.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"validator.d.ts","sourceRoot":"","sources":["../../../../../../src/adapters/http/controllers/workflows/password-reset/validator.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAC;AAE7C,OAAO,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AAEpC,qBAAa,6BAA8B,SAAQ,SAAS,CAAC,IAAI,GAAG;IAAE,KAAK,EAAE,MAAM,CAAA;CAAE,CAAC;IAClF,SAAS,CAAC,UAAU;CAgEvB"}