@authup/server-core 1.0.0-beta.26 → 1.0.0-beta.28

package/dist/core/identity/provider/account/module.js

@@ -0,0 +1,194 @@
+/*
+ * Copyright (c) 2025.
+ * Author Peter Placzek (tada5hi)
+ * For the full copyright and license information,
+ * view the LICENSE file that was distributed with this source code.
+ */
+import { UserValidator, ValidatorGroup, buildUserFakeEmail, isUserFakeEmail, } from '@authup/core-kit';
+import { createNanoID, extendObject } from '@authup/kit';
+import { ValidupNestedError } from 'validup';
+import { IdentityProviderIdentityOperation } from "../constants.js";
+import { IdentityProviderMapperOperation } from "../mapper/index.js";
+export class IdentityProviderAccountManager {
+    attributesMapper;
+    permissionMapper;
+    roleMapper;
+    repository;
+    userRepository;
+    userValidator;
+    constructor(ctx) {
+        this.attributesMapper = ctx.attributeMapper;
+        this.permissionMapper = ctx.permissionMapper;
+        this.roleMapper = ctx.roleMapper;
+        this.repository = ctx.repository;
+        this.userRepository = ctx.userRepository;
+        this.userValidator = new UserValidator();
+    }
+    async save(identity) {
+        let account = await this.repository.findOneByProviderIdentity(identity);
+        if (account) {
+            identity.operation = IdentityProviderIdentityOperation.UPDATE;
+            account.user = await this.saveUser(identity, account.user);
+            await this.repository.save(account);
+            await this.saveRoles(identity, account.user);
+            await this.savePermissions(identity, account.user);
+            return account;
+        }
+        identity.operation = IdentityProviderIdentityOperation.CREATE;
+        const user = await this.saveUser(identity);
+        account = await this.repository.save({
+            provider_id: identity.provider.id,
+            provider_user_id: identity.id,
+            provider_user_name: user.name, // todo: parse identity.name
+            provider_realm_id: identity.provider.realm_id,
+            user,
+            user_id: user.id,
+            user_realm_id: user.realm_id,
+        });
+        await this.saveRoles(identity, account.user);
+        await this.savePermissions(identity, account.user);
+        return account;
+    }
+    async saveUser(identity, user) {
+        const attributes = await this.attributesMapper.execute(identity);
+        const entity = {};
+        for (let i = 0; i < attributes.length; i++) {
+            const attribute = attributes[i];
+            if (attribute.key &&
+                attribute.operation === IdentityProviderMapperOperation.CREATE) {
+                // attribute value might be object, array, ...
+                entity[attribute.key] = attribute.value;
+            }
+        }
+        if (!user) {
+            entity.realm_id = identity.provider.realm_id;
+            entity.active = true;
+            entity.name_locked = true;
+            entity.client_id = identity.clientId || null;
+        }
+        const attributesSelf = await this.validateAttributes(entity, identity, 10);
+        if (!attributesSelf) {
+            // todo: better error name
+            throw new Error('Identity provider attributes could not be validated.');
+        }
+        const attributesSelfKeys = Object.keys(attributesSelf);
+        const attributesExtra = {};
+        const entityKeys = Object.keys(entity);
+        for (let i = 0; i < entityKeys.length; i++) {
+            const index = attributesSelfKeys.indexOf(entityKeys[i]);
+            if (index !== -1) {
+                continue;
+            }
+            attributesExtra[entityKeys[i]] = entity[entityKeys[i]];
+        }
+        let output;
+        if (user) {
+            output = extendObject(user, attributesSelf);
+        }
+        else {
+            output = attributesSelf;
+        }
+        let attempts = Math.max((identity.attributeCandidates?.name?.length || 0) + 1, 10);
+        while (attempts > 0) {
+            try {
+                // todo: we also need to remove existing ones via idp login flow ( but not other attributes!)
+                return await this.userRepository.saveOneWithEA(output, attributesExtra);
+            }
+            catch (e) {
+                const names = identity.attributeCandidates?.name || [];
+                if (names.length > 0) {
+                    while (names.length > 0) {
+                        output.name = `${names.shift()}`;
+                        try {
+                            await this.userValidator.run(output, {
+                                group: identity.operation === IdentityProviderIdentityOperation.CREATE ?
+                                    ValidatorGroup.CREATE :
+                                    ValidatorGroup.UPDATE,
+                            });
+                            break;
+                        }
+                        catch (e) {
+                            // todo: do nothing.
+                        }
+                    }
+                }
+                else {
+                    output.name = createNanoID('0123456789abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ-_', 10);
+                }
+                if (isUserFakeEmail(output.email)) {
+                    output.email = buildUserFakeEmail(output.name);
+                }
+                attempts -= 1;
+            }
+        }
+        throw new Error('The user account could not be created due a conflict error.');
+    }
+    async validateAttributes(entity, identity, attempts) {
+        attempts--;
+        if (attempts <= 0) {
+            return null;
+        }
+        try {
+            return await this.userValidator.run(entity, {
+                group: identity.operation === IdentityProviderIdentityOperation.CREATE ?
+                    ValidatorGroup.CREATE :
+                    ValidatorGroup.UPDATE,
+            });
+        }
+        catch (e) {
+            if (!(e instanceof ValidupNestedError)) {
+                return null;
+            }
+            let retry = false;
+            for (let i = 0; i < e.children.length; i++) {
+                const child = e.children[i];
+                if (Array.isArray(entity[child.path]) &&
+                    entity[child.path].length > 0) {
+                    const [first, ...rest] = entity[child.path];
+                    entity[child.path] = first;
+                    if (rest.length > 0) {
+                        if (!identity.attributeCandidates) {
+                            identity.attributeCandidates = {};
+                        }
+                        if (!identity.attributeCandidates[child.path]) {
+                            identity.attributeCandidates[child.path] = [];
+                        }
+                        identity.attributeCandidates[child.path].push(...rest);
+                    }
+                    retry = true;
+                    break;
+                }
+                if (identity.attributeCandidates &&
+                    identity.attributeCandidates[child.path] &&
+                    identity.attributeCandidates[child.path].length > 0) {
+                    entity[child.path] = identity.attributeCandidates[child.path].shift();
+                    retry = true;
+                    break;
+                }
+                if (entity.name &&
+                    child.path === 'email') {
+                    entity[child.path] = buildUserFakeEmail(entity.name);
+                    retry = true;
+                    break;
+                }
+                if (entity[child.path]) {
+                    entity[child.path] = null;
+                    break;
+                }
+            }
+            if (retry) {
+                return this.validateAttributes(entity, identity, attempts);
+            }
+            return null;
+        }
+    }
+    async savePermissions(identity, user) {
+        const entities = await this.permissionMapper.execute(identity);
+        await this.userRepository.savePermissions(user, entities);
+    }
+    async saveRoles(identity, user) {
+        const entities = await this.roleMapper.execute(identity);
+        await this.userRepository.saveRoles(user, entities);
+    }
+}
+//# sourceMappingURL=module.js.map

package/dist/core/identity/provider/account/module.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"module.js","sourceRoot":"","sources":["../../../../../src/core/identity/provider/account/module.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAGH,OAAO,EACH,aAAa,EAAE,cAAc,EAC7B,kBAAkB,EAAE,eAAe,GACtC,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAAE,YAAY,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AACzD,OAAO,EAAE,kBAAkB,EAAE,MAAM,SAAS,CAAC;AAE7C,OAAO,EAAE,iCAAiC,EAAE,MAAM,iBAAiB,CAAC;AAEpE,OAAO,EAAE,+BAA+B,EAAE,MAAM,oBAAoB,CAAC;AAIrE,MAAM,OAAO,8BAA8B;IAC7B,gBAAgB,CAA2B;IAE3C,gBAAgB,CAA2B;IAE3C,UAAU,CAA2B;IAErC,UAAU,CAAsC;IAEhD,cAAc,CAA0B;IAExC,aAAa,CAAiB;IAExC,YAAY,GAA0C;QAClD,IAAI,CAAC,gBAAgB,GAAG,GAAG,CAAC,eAAe,CAAC;QAC5C,IAAI,CAAC,gBAAgB,GAAG,GAAG,CAAC,gBAAgB,CAAC;QAC7C,IAAI,CAAC,UAAU,GAAG,GAAG,CAAC,UAAU,CAAC;QACjC,IAAI,CAAC,UAAU,GAAG,GAAG,CAAC,UAAU,CAAC;QACjC,IAAI,CAAC,cAAc,GAAG,GAAG,CAAC,cAAc,CAAC;QAEzC,IAAI,CAAC,aAAa,GAAG,IAAI,aAAa,EAAE,CAAC;IAC7C,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,QAAkC;QACzC,IAAI,OAAO,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,yBAAyB,CAAC,QAAQ,CAAC,CAAC;QACxE,IAAI,OAAO,EAAE,CAAC;YACV,QAAQ,CAAC,SAAS,GAAG,iCAAiC,CAAC,MAAM,CAAC;YAE9D,OAAO,CAAC,IAAI,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC;YAE3D,MAAM,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YAEpC,MAAM,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC;YAC7C,MAAM,IAAI,CAAC,eAAe,CAAC,QAAQ,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC;YAEnD,OAAO,OAAO,CAAC;QACnB,CAAC;QAED,QAAQ,CAAC,SAAS,GAAG,iCAAiC,CAAC,MAAM,CAAC;QAE9D,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;QAE3C,OAAO,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;YACjC,WAAW,EAAE,QAAQ,CAAC,QAAQ,CAAC,EAAE;YACjC,gBAAgB,EAAE,QAAQ,CAAC,EAAE;YAC7B,kBAAkB,EAAE,IAAI,CAAC,IAAI,EAAE,4BAA4B;YAC3D,iBAAiB,EAAE,QAAQ,CAAC,QAAQ,CAAC,QAAQ;YAC7C,IAAI;YACJ,OAAO,EAAE,IAAI,CAAC,EAAE;YAChB,aAAa,EAAE,IAAI,CAAC,QAAQ;SAC/B,CAAC,CAAC;QAEH,MAAM,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC;QAC7C,MAAM,IAAI,CAAC,eAAe,CAAC,QAAQ,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC;QAEnD,OAAO,OAAO,CAAC;IACnB,CAAC;IAED,KAAK,CAAC,QAAQ,CACV,QAAkC,EAClC,IAAW;QAEX,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAAC,OAAO,CAClD,QAAQ,CACX,CAAC;QAEF,MAAM,MAAM,GAAyB,EAAE,CAAC;QACxC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,UAAU,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YACzC,MAAM,SAAS,GAAG,UAAU,CAAC,CAAC,CAAC,CAAC;YAChC,IACI,SAAS,CAAC,GAAG;gBACb,SAAS,CAAC,SAAS,KAAK,+BAA+B,CAAC,MAAM,EAChE,CAAC;gBACC,8CAA8C;gBAC9C,MAAM,CAAC,SAAS,CAAC,GAAG,CAAC,GAAG,SAAS,CAAC,KAAK,CAAC;YAC5C,CAAC;QACL,CAAC;QAED,IAAI,CAAC,IAAI,EAAE,CAAC;YACP,MAAe,CAAC,QAAQ,GAAG,QAAQ,CAAC,QAAQ,CAAC,QAAQ,CAAC;YACtD,MAAe,CAAC,MAAM,GAAG,IAAI,CAAC;YAC9B,MAAe,CAAC,WAAW,GAAG,IAAI,CAAC;YACnC,MAAe,CAAC,SAAS,GAAG,QAAQ,CAAC,QAAQ,IAAI,IAAI,CAAC;QAC3D,CAAC;QAED,MAAM,cAAc,GAAG,MAAM,IAAI,CAAC,kBAAkB,CAAC,MAAM,EAAE,QAAQ,EAAE,EAAE,CAAC,CAAC;QAC3E,IAAI,CAAC,cAAc,EAAE,CAAC;YAClB,0BAA0B;YAC1B,MAAM,IAAI,KAAK,CAAC,sDAAsD,CAAC,CAAC;QAC5E,CAAC;QACD,MAAM,kBAAkB,GAAG,MAAM,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;QAEvD,MAAM,eAAe,GAAyB,EAAE,CAAC;QAEjD,MAAM,UAAU,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACvC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,UAAU,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YACzC,MAAM,KAAK,GAAG,kBAAkB,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC;YACxD,IAAI,KAAK,KAAK,CAAC,CAAC,EAAE,CAAC;gBACf,SAAS;YACb,CAAC;YAED,eAAe,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,GAAG,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC;QAC3D,CAAC;QAED,IAAI,MAAa,CAAC;QAClB,IAAI,IAAI,EAAE,CAAC;YACP,MAAM,GAAG,YAAY,CAAC,IAAI,EAAE,cAAc,CAAC,CAAC;QAChD,CAAC;aAAM,CAAC;YACJ,MAAM,GAAG,cAAc,CAAC;QAC5B,CAAC;QAED,IAAI,QAAQ,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,mBAAmB,EAAE,IAAI,EAAE,MAAM,IAAI,CAAC,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC,CAAC;QACnF,OAAO,QAAQ,GAAG,CAAC,EAAE,CAAC;YAClB,IAAI,CAAC;gBACD,6FAA6F;gBAC7F,OAAO,MAAM,IAAI,CAAC,cAAc,CAAC,aAAa,CAAC,MAAM,EAAE,eAAe,CAAC,CAAC;YAC5E,CAAC;YAAC,OAAO,CAAC,EAAE,CAAC;gBACT,MAAM,KAAK,GAAG,QAAQ,CAAC,mBAAmB,EAAE,IAAI,IAAI,EAAE,CAAC;gBACvD,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;oBACnB,OAAO,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;wBACtB,MAAM,CAAC,IAAI,GAAG,GAAG,KAAK,CAAC,KAAK,EAAE,EAAE,CAAC;wBAEjC,IAAI,CAAC;4BACD,MAAM,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,MAAM,EAAE;gCACjC,KAAK,EAAE,QAAQ,CAAC,SAAS,KAAK,iCAAiC,CAAC,MAAM,CAAC,CAAC;oCACpE,cAAc,CAAC,MAAM,CAAC,CAAC;oCACvB,cAAc,CAAC,MAAM;6BAC5B,CAAC,CAAC;4BACH,MAAM;wBACV,CAAC;wBAAC,OAAO,CAAC,EAAE,CAAC;4BACT,oBAAoB;wBACxB,CAAC;oBACL,CAAC;gBACL,CAAC;qBAAM,CAAC;oBACJ,MAAM,CAAC,IAAI,GAAG,YAAY,CAAC,kEAAkE,EAAE,EAAE,CAAC,CAAC;gBACvG,CAAC;gBAED,IAAI,eAAe,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;oBAChC,MAAM,CAAC,KAAK,GAAG,kBAAkB,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;gBACnD,CAAC;gBAED,QAAQ,IAAI,CAAC,CAAC;YAClB,CAAC;QACL,CAAC;QAED,MAAM,IAAI,KAAK,CAAC,6DAA6D,CAAC,CAAC;IACnF,CAAC;IAED,KAAK,CAAC,kBAAkB,CACpB,MAA2B,EAC3B,QAAkC,EAClC,QAAgB;QAEhB,QAAQ,EAAE,CAAC;QACX,IAAI,QAAQ,IAAI,CAAC,EAAE,CAAC;YAChB,OAAO,IAAI,CAAC;QAChB,CAAC;QAED,IAAI,CAAC;YACD,OAAO,MAAM,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,MAAM,EAAE;gBACxC,KAAK,EAAE,QAAQ,CAAC,SAAS,KAAK,iCAAiC,CAAC,MAAM,CAAC,CAAC;oBACpE,cAAc,CAAC,MAAM,CAAC,CAAC;oBACvB,cAAc,CAAC,MAAM;aAC5B,CAAC,CAAC;QACP,CAAC;QAAC,OAAO,CAAM,EAAE,CAAC;YACd,IAAI,CAAC,CAAC,CAAC,YAAY,kBAAkB,CAAC,EAAE,CAAC;gBACrC,OAAO,IAAI,CAAC;YAChB,CAAC;YAED,IAAI,KAAK,GAAG,KAAK,CAAC;YAClB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;gBACzC,MAAM,KAAK,GAAG,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;gBAE5B,IACI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;oBACjC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,GAAG,CAAC,EAC/B,CAAC;oBACC,MAAM,CAAC,KAAK,EAAE,GAAG,IAAI,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;oBAC5C,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC;oBAE3B,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;wBAClB,IAAI,CAAC,QAAQ,CAAC,mBAAmB,EAAE,CAAC;4BAChC,QAAQ,CAAC,mBAAmB,GAAG,EAAE,CAAC;wBACtC,CAAC;wBAED,IAAI,CAAC,QAAQ,CAAC,mBAAmB,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;4BAC5C,QAAQ,CAAC,mBAAmB,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC;wBAClD,CAAC;wBAED,QAAQ,CAAC,mBAAmB,CAAC,KAAK,CAAC,IAAI,CAAE,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,CAAC;oBAC5D,CAAC;oBAED,KAAK,GAAG,IAAI,CAAC;oBACb,MAAM;gBACV,CAAC;gBAED,IACI,QAAQ,CAAC,mBAAmB;oBAC5B,QAAQ,CAAC,mBAAmB,CAAC,KAAK,CAAC,IAAI,CAAC;oBACxC,QAAQ,CAAC,mBAAmB,CAAC,KAAK,CAAC,IAAI,CAAE,CAAC,MAAM,GAAG,CAAC,EACtD,CAAC;oBACC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,QAAQ,CAAC,mBAAmB,CAAC,KAAK,CAAC,IAAI,CAAE,CAAC,KAAK,EAAE,CAAC;oBACvE,KAAK,GAAG,IAAI,CAAC;oBACb,MAAM;gBACV,CAAC;gBAED,IACI,MAAM,CAAC,IAAI;oBACX,KAAK,CAAC,IAAI,KAAK,OAAO,EACxB,CAAC;oBACC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,kBAAkB,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;oBACrD,KAAK,GAAG,IAAI,CAAC;oBACb,MAAM;gBACV,CAAC;gBAED,IAAI,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;oBACrB,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;oBAC1B,MAAM;gBACV,CAAC;YACL,CAAC;YAED,IAAI,KAAK,EAAE,CAAC;gBACR,OAAO,IAAI,CAAC,kBAAkB,CAAC,MAAM,EAAE,QAAQ,EAAE,QAAQ,CAAC,CAAC;YAC/D,CAAC;YAED,OAAO,IAAI,CAAC;QAChB,CAAC;IACL,CAAC;IAED,KAAK,CAAC,eAAe,CACjB,QAAkC,EAClC,IAAU;QAEV,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;QAE/D,MAAM,IAAI,CAAC,cAAc,CAAC,eAAe,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;IAC9D,CAAC;IAED,KAAK,CAAC,SAAS,CACX,QAAkC,EAClC,IAAU;QAEV,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;QAEzD,MAAM,IAAI,CAAC,cAAc,CAAC,SAAS,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;IACxD,CAAC;CACJ"}

package/dist/core/identity/provider/account/types.d.ts

@@ -0,0 +1,30 @@
+import type { IdentityProviderAccount } from '@authup/core-kit';
+import type { DeepPartial } from 'typeorm';
+import type { IUserIdentityRepository } from '../../entities/index.ts';
+import type { IIdentityProviderMapper } from '../mapper/index.ts';
+import type { IdentityProviderIdentity } from '../types.ts';
+export interface IIdentityProviderAccountRepository {
+    /**
+     * Find identity account with user relation.
+     *
+     * @param identity
+     */
+    findOneByProviderIdentity(identity: IdentityProviderIdentity): Promise<IdentityProviderAccount | null>;
+    save(entity: DeepPartial<IdentityProviderAccount>): Promise<IdentityProviderAccount>;
+}
+export type IdentityProviderAccountManagerContext = {
+    attributeMapper: IIdentityProviderMapper;
+    permissionMapper: IIdentityProviderMapper;
+    roleMapper: IIdentityProviderMapper;
+    repository: IIdentityProviderAccountRepository;
+    userRepository: IUserIdentityRepository;
+};
+export interface IIdentityProviderAccountManager {
+    /**
+     * Create or update identity provider account by provider identity.
+     *
+     * @param identity
+     */
+    save(identity: IdentityProviderIdentity): Promise<IdentityProviderAccount>;
+}
+//# sourceMappingURL=types.d.ts.map

package/dist/core/identity/provider/account/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../../../src/core/identity/provider/account/types.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,kBAAkB,CAAC;AAChE,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,SAAS,CAAC;AAC3C,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,yBAAyB,CAAC;AACvE,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,oBAAoB,CAAC;AAClE,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,aAAa,CAAC;AAE5D,MAAM,WAAW,kCAAkC;IAC/C;;;;OAIG;IACH,yBAAyB,CAAC,QAAQ,EAAE,wBAAwB,GAAI,OAAO,CAAC,uBAAuB,GAAG,IAAI,CAAC,CAAC;IAExG,IAAI,CAAC,MAAM,EAAE,WAAW,CAAC,uBAAuB,CAAC,GAAI,OAAO,CAAC,uBAAuB,CAAC,CAAC;CACzF;AAED,MAAM,MAAM,qCAAqC,GAAG;IAChD,eAAe,EAAE,uBAAuB,CAAC;IACzC,gBAAgB,EAAE,uBAAuB,CAAC;IAC1C,UAAU,EAAE,uBAAuB,CAAC;IAEpC,UAAU,EAAE,kCAAkC,CAAC;IAC/C,cAAc,EAAE,uBAAuB,CAAA;CAC1C,CAAC;AAEF,MAAM,WAAW,+BAA+B;IAC5C;;;;OAIG;IACH,IAAI,CAAC,QAAQ,EAAE,wBAAwB,GAAI,OAAO,CAAC,uBAAuB,CAAC,CAAC;CAC/E"}

package/dist/core/identity/provider/account/types.js

@@ -0,0 +1,8 @@
+/*
+ * Copyright (c) 2025.
+ * Author Peter Placzek (tada5hi)
+ * For the full copyright and license information,
+ * view the LICENSE file that was distributed with this source code.
+ */
+export {};
+//# sourceMappingURL=types.js.map

package/dist/core/identity/provider/account/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../../../../src/core/identity/provider/account/types.ts"],"names":[],"mappings":"AAAA;;;;;GAKG"}

package/dist/core/identity/provider/authentication/constants.d.ts

@@ -0,0 +1,2 @@
+export declare const IDENTITY_PROVIDER_LDAP_COLLECTION_AUTHENTICATOR_TOKEN: unique symbol;
+//# sourceMappingURL=constants.d.ts.map

package/dist/core/identity/provider/authentication/constants.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"constants.d.ts","sourceRoot":"","sources":["../../../../../src/core/identity/provider/authentication/constants.ts"],"names":[],"mappings":"AAOA,eAAO,MAAM,qDAAqD,eAAwD,CAAC"}

package/dist/core/identity/provider/authentication/constants.js

@@ -0,0 +1,8 @@
+/*
+ * Copyright (c) 2025.
+ * Author Peter Placzek (tada5hi)
+ * For the full copyright and license information,
+ * view the LICENSE file that was distributed with this source code.
+ */
+export const IDENTITY_PROVIDER_LDAP_COLLECTION_AUTHENTICATOR_TOKEN = Symbol('IdentityProviderLdapCollectionAuthenticator');
+//# sourceMappingURL=constants.js.map

package/dist/core/identity/provider/authentication/constants.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"constants.js","sourceRoot":"","sources":["../../../../../src/core/identity/provider/authentication/constants.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,MAAM,CAAC,MAAM,qDAAqD,GAAG,MAAM,CAAC,6CAA6C,CAAC,CAAC"}

package/dist/core/identity/provider/authentication/factory.d.ts

@@ -0,0 +1,4 @@
+import type { User } from '@authup/core-kit';
+import type { IOAuth2Authenticator, IdentityProviderOAuth2AuthenticatorContext } from './protocols/index.ts';
+export declare function createIdentityProviderOAuth2Authenticator(ctx: IdentityProviderOAuth2AuthenticatorContext): IOAuth2Authenticator<User>;
+//# sourceMappingURL=factory.d.ts.map

package/dist/core/identity/provider/authentication/factory.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"factory.d.ts","sourceRoot":"","sources":["../../../../../src/core/identity/provider/authentication/factory.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAC;AAE7C,OAAO,KAAK,EAAE,oBAAoB,EAAE,0CAA0C,EAAE,MAAM,sBAAsB,CAAC;AAU7G,wBAAgB,yCAAyC,CAAC,GAAG,EAAE,0CAA0C,GAAI,oBAAoB,CAAC,IAAI,CAAC,CA0BtI"}

package/dist/core/identity/provider/authentication/factory.js

@@ -0,0 +1,31 @@
+/*
+ * Copyright (c) 2023-2025.
+ * Author Peter Placzek (tada5hi)
+ * For the full copyright and license information,
+ * view the LICENSE file that was distributed with this source code.
+ */
+import { IdentityProviderPreset, IdentityProviderProtocol } from '@authup/core-kit';
+import { IdentityProviderOAuth2Authenticator, IdentityProviderOpenIDAuthenticator } from "./protocols/index.js";
+import { IdentityProviderFacebookAuthenticator, IdentityProviderGithubAuthenticator, IdentityProviderGoogleAuthenticator, IdentityProviderInstagramAuthenticator, IdentityProviderPaypalAuthenticator, } from "./presets/index.js";
+export function createIdentityProviderOAuth2Authenticator(ctx) {
+    if (ctx.provider.preset === IdentityProviderPreset.FACEBOOK) {
+        return new IdentityProviderFacebookAuthenticator(ctx);
+    }
+    if (ctx.provider.preset === IdentityProviderPreset.GITHUB) {
+        return new IdentityProviderGithubAuthenticator(ctx);
+    }
+    if (ctx.provider.preset === IdentityProviderPreset.GOOGLE) {
+        return new IdentityProviderGoogleAuthenticator(ctx);
+    }
+    if (ctx.provider.preset === IdentityProviderPreset.INSTAGRAM) {
+        return new IdentityProviderInstagramAuthenticator(ctx);
+    }
+    if (ctx.provider.preset === IdentityProviderPreset.PAYPAL) {
+        return new IdentityProviderPaypalAuthenticator(ctx);
+    }
+    if (ctx.provider.protocol === IdentityProviderProtocol.OIDC) {
+        return new IdentityProviderOpenIDAuthenticator(ctx);
+    }
+    return new IdentityProviderOAuth2Authenticator(ctx);
+}
+//# sourceMappingURL=factory.js.map

package/dist/core/identity/provider/authentication/factory.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"factory.js","sourceRoot":"","sources":["../../../../../src/core/identity/provider/authentication/factory.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAGH,OAAO,EAAE,sBAAsB,EAAE,wBAAwB,EAAE,MAAM,kBAAkB,CAAC;AAEpF,OAAO,EAAE,mCAAmC,EAAE,mCAAmC,EAAE,MAAM,sBAAsB,CAAC;AAChH,OAAO,EACH,qCAAqC,EACrC,mCAAmC,EACnC,mCAAmC,EACnC,sCAAsC,EACtC,mCAAmC,GACtC,MAAM,oBAAoB,CAAC;AAE5B,MAAM,UAAU,yCAAyC,CAAC,GAA+C;IACrG,IAAI,GAAG,CAAC,QAAQ,CAAC,MAAM,KAAK,sBAAsB,CAAC,QAAQ,EAAE,CAAC;QAC1D,OAAO,IAAI,qCAAqC,CAAC,GAAG,CAAC,CAAC;IAC1D,CAAC;IAED,IAAI,GAAG,CAAC,QAAQ,CAAC,MAAM,KAAK,sBAAsB,CAAC,MAAM,EAAE,CAAC;QACxD,OAAO,IAAI,mCAAmC,CAAC,GAAG,CAAC,CAAC;IACxD,CAAC;IAED,IAAI,GAAG,CAAC,QAAQ,CAAC,MAAM,KAAK,sBAAsB,CAAC,MAAM,EAAE,CAAC;QACxD,OAAO,IAAI,mCAAmC,CAAC,GAAG,CAAC,CAAC;IACxD,CAAC;IAED,IAAI,GAAG,CAAC,QAAQ,CAAC,MAAM,KAAK,sBAAsB,CAAC,SAAS,EAAE,CAAC;QAC3D,OAAO,IAAI,sCAAsC,CAAC,GAAG,CAAC,CAAC;IAC3D,CAAC;IAED,IAAI,GAAG,CAAC,QAAQ,CAAC,MAAM,KAAK,sBAAsB,CAAC,MAAM,EAAE,CAAC;QACxD,OAAO,IAAI,mCAAmC,CAAC,GAAG,CAAC,CAAC;IACxD,CAAC;IAED,IAAI,GAAG,CAAC,QAAQ,CAAC,QAAQ,KAAK,wBAAwB,CAAC,IAAI,EAAE,CAAC;QAC1D,OAAO,IAAI,mCAAmC,CAAC,GAAG,CAAC,CAAC;IACxD,CAAC;IAED,OAAO,IAAI,mCAAmC,CAAC,GAAG,CAAC,CAAC;AACxD,CAAC"}

package/dist/core/identity/provider/authentication/index.d.ts

@@ -0,0 +1,5 @@
+export * from './protocols/index.ts';
+export * from './presets/index.ts';
+export * from './constants.ts';
+export * from './factory.ts';
+//# sourceMappingURL=index.d.ts.map

package/dist/core/identity/provider/authentication/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../src/core/identity/provider/authentication/index.ts"],"names":[],"mappings":"AAOA,cAAc,sBAAsB,CAAC;AACrC,cAAc,oBAAoB,CAAC;AAEnC,cAAc,gBAAgB,CAAC;AAC/B,cAAc,cAAc,CAAC"}

package/dist/core/identity/provider/authentication/index.js

@@ -0,0 +1,11 @@
+/*
+ * Copyright (c) 2025.
+ * Author Peter Placzek (tada5hi)
+ * For the full copyright and license information,
+ * view the LICENSE file that was distributed with this source code.
+ */
+export * from "./protocols/index.js";
+export * from "./presets/index.js";
+export * from "./constants.js";
+export * from "./factory.js";
+//# sourceMappingURL=index.js.map

package/dist/core/identity/provider/authentication/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../../src/core/identity/provider/authentication/index.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,cAAc,sBAAsB,CAAC;AACrC,cAAc,oBAAoB,CAAC;AAEnC,cAAc,gBAAgB,CAAC;AAC/B,cAAc,cAAc,CAAC"}

package/dist/core/identity/provider/authentication/presets/facebook.d.ts

@@ -0,0 +1,9 @@
+import type { TokenGrantResponse } from '@hapic/oauth2';
+import type { IdentityProviderIdentity } from '../../types.ts';
+import type { IdentityProviderOAuth2AuthenticatorContext } from '../protocols/index.ts';
+import { IdentityProviderOAuth2Authenticator } from '../protocols/index.ts';
+export declare class IdentityProviderFacebookAuthenticator extends IdentityProviderOAuth2Authenticator {
+    constructor(ctx: IdentityProviderOAuth2AuthenticatorContext);
+    protected buildIdentityWithTokenGrantResponse(input: TokenGrantResponse): Promise<IdentityProviderIdentity>;
+}
+//# sourceMappingURL=facebook.d.ts.map

package/dist/core/identity/provider/authentication/presets/facebook.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"facebook.d.ts","sourceRoot":"","sources":["../../../../../../src/core/identity/provider/authentication/presets/facebook.ts"],"names":[],"mappings":"AAQA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,eAAe,CAAC;AACxD,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,gBAAgB,CAAC;AAC/D,OAAO,KAAK,EAAE,0CAA0C,EAAE,MAAM,uBAAuB,CAAC;AACxF,OAAO,EAAE,mCAAmC,EAAE,MAAM,uBAAuB,CAAC;AAE5E,qBAAa,qCAAsC,SAAQ,mCAAmC;gBAC9E,GAAG,EAAE,0CAA0C;cAS3C,mCAAmC,CAAC,KAAK,EAAE,kBAAkB,GAAG,OAAO,CAAC,wBAAwB,CAAC;CA6BpH"}

package/dist/core/identity/provider/authentication/presets/facebook.js

@@ -0,0 +1,45 @@
+/*
+ * Copyright (c) 2023-2023.
+ * Author Peter Placzek (tada5hi)
+ * For the full copyright and license information,
+ * view the LICENSE file that was distributed with this source code.
+ */
+import { extractTokenPayload } from '@authup/server-kit';
+import { IdentityProviderOAuth2Authenticator } from "../protocols/index.js";
+export class IdentityProviderFacebookAuthenticator extends IdentityProviderOAuth2Authenticator {
+    constructor(ctx) {
+        ctx.provider.scope = 'email';
+        ctx.provider.authorize_url = 'https://graph.facebook.com/oauth/authorize';
+        ctx.provider.token_url = 'https://graph.facebook.com/oauth/access_token';
+        ctx.provider.user_info_url = 'https://graph.facebook.com/me?fields=id,name,email,first_name,last_name';
+        super(ctx);
+    }
+    async buildIdentityWithTokenGrantResponse(input) {
+        const userInfo = await this.client.userInfo.get({
+            type: 'Bearer',
+            token: input.access_token,
+        });
+        const payload = extractTokenPayload(input.access_token);
+        return {
+            id: userInfo.id,
+            attributeCandidates: {
+                name: [
+                    userInfo.username,
+                    userInfo.id,
+                ],
+                email: [
+                    userInfo.email,
+                ],
+                first_name: [
+                    userInfo.first_name,
+                ],
+                last_name: [
+                    userInfo.last_name,
+                ],
+            },
+            data: payload,
+            provider: this.provider,
+        };
+    }
+}
+//# sourceMappingURL=facebook.js.map

package/dist/core/identity/provider/authentication/presets/facebook.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"facebook.js","sourceRoot":"","sources":["../../../../../../src/core/identity/provider/authentication/presets/facebook.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAC;AAIzD,OAAO,EAAE,mCAAmC,EAAE,MAAM,uBAAuB,CAAC;AAE5E,MAAM,OAAO,qCAAsC,SAAQ,mCAAmC;IAC1F,YAAY,GAA+C;QACvD,GAAG,CAAC,QAAQ,CAAC,KAAK,GAAG,OAAO,CAAC;QAC7B,GAAG,CAAC,QAAQ,CAAC,aAAa,GAAG,4CAA4C,CAAC;QAC1E,GAAG,CAAC,QAAQ,CAAC,SAAS,GAAG,+CAA+C,CAAC;QACzE,GAAG,CAAC,QAAQ,CAAC,aAAa,GAAG,yEAAyE,CAAC;QAEvG,KAAK,CAAC,GAAG,CAAC,CAAC;IACf,CAAC;IAES,KAAK,CAAC,mCAAmC,CAAC,KAAyB;QACzE,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC;YAC5C,IAAI,EAAE,QAAQ;YACd,KAAK,EAAE,KAAK,CAAC,YAAY;SAC5B,CAAC,CAAC;QAEH,MAAM,OAAO,GAAG,mBAAmB,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;QAExD,OAAO;YACH,EAAE,EAAE,QAAQ,CAAC,EAAE;YACf,mBAAmB,EAAE;gBACjB,IAAI,EAAE;oBACF,QAAQ,CAAC,QAAQ;oBACjB,QAAQ,CAAC,EAAE;iBACd;gBACD,KAAK,EAAE;oBACH,QAAQ,CAAC,KAAK;iBACjB;gBACD,UAAU,EAAE;oBACR,QAAQ,CAAC,UAAU;iBACtB;gBACD,SAAS,EAAE;oBACP,QAAQ,CAAC,SAAS;iBACrB;aACJ;YACD,IAAI,EAAE,OAAO;YACb,QAAQ,EAAE,IAAI,CAAC,QAAQ;SAC1B,CAAC;IACN,CAAC;CACJ"}

package/dist/core/identity/provider/authentication/presets/github.d.ts

@@ -0,0 +1,9 @@
+import type { TokenGrantResponse } from '@hapic/oauth2';
+import type { IdentityProviderIdentity } from '../../types.ts';
+import type { IdentityProviderOAuth2AuthenticatorContext } from '../protocols/index.ts';
+import { IdentityProviderOAuth2Authenticator } from '../protocols/index.ts';
+export declare class IdentityProviderGithubAuthenticator extends IdentityProviderOAuth2Authenticator {
+    constructor(ctx: IdentityProviderOAuth2AuthenticatorContext);
+    protected buildIdentityWithTokenGrantResponse(input: TokenGrantResponse): Promise<IdentityProviderIdentity>;
+}
+//# sourceMappingURL=github.d.ts.map

package/dist/core/identity/provider/authentication/presets/github.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"github.d.ts","sourceRoot":"","sources":["../../../../../../src/core/identity/provider/authentication/presets/github.ts"],"names":[],"mappings":"AAQA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,eAAe,CAAC;AACxD,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,gBAAgB,CAAC;AAC/D,OAAO,KAAK,EAAE,0CAA0C,EAAE,MAAM,uBAAuB,CAAC;AACxF,OAAO,EAAE,mCAAmC,EAAE,MAAM,uBAAuB,CAAC;AAE5E,qBAAa,mCAAoC,SAAQ,mCAAmC;gBAC5E,GAAG,EAAE,0CAA0C;cAS3C,mCAAmC,CAAC,KAAK,EAAE,kBAAkB,GAAG,OAAO,CAAC,wBAAwB,CAAC;CAwBpH"}

package/dist/core/identity/provider/authentication/presets/github.js

@@ -0,0 +1,40 @@
+/*
+ * Copyright (c) 2023-2023.
+ * Author Peter Placzek (tada5hi)
+ * For the full copyright and license information,
+ * view the LICENSE file that was distributed with this source code.
+ */
+import { extractTokenPayload } from '@authup/server-kit';
+import { IdentityProviderOAuth2Authenticator } from "../protocols/index.js";
+export class IdentityProviderGithubAuthenticator extends IdentityProviderOAuth2Authenticator {
+    constructor(ctx) {
+        ctx.provider.scope = 'user:email';
+        ctx.provider.authorize_url = 'https://github.com/login/oauth/authorize';
+        ctx.provider.token_url = 'https://github.com/login/oauth/access_token';
+        ctx.provider.user_info_url = 'https://api.github.com/user';
+        super(ctx);
+    }
+    async buildIdentityWithTokenGrantResponse(input) {
+        const userInfo = await this.client.userInfo.get({
+            type: 'Bearer',
+            token: input.access_token,
+        });
+        const payload = extractTokenPayload(input.access_token);
+        return {
+            id: userInfo.id,
+            attributeCandidates: {
+                name: [
+                    userInfo.login,
+                    userInfo.name,
+                    userInfo.id,
+                ],
+                email: [
+                    userInfo.email,
+                ],
+            },
+            data: payload,
+            provider: this.provider,
+        };
+    }
+}
+//# sourceMappingURL=github.js.map

package/dist/core/identity/provider/authentication/presets/github.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"github.js","sourceRoot":"","sources":["../../../../../../src/core/identity/provider/authentication/presets/github.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAC;AAIzD,OAAO,EAAE,mCAAmC,EAAE,MAAM,uBAAuB,CAAC;AAE5E,MAAM,OAAO,mCAAoC,SAAQ,mCAAmC;IACxF,YAAY,GAA+C;QACvD,GAAG,CAAC,QAAQ,CAAC,KAAK,GAAG,YAAY,CAAC;QAClC,GAAG,CAAC,QAAQ,CAAC,aAAa,GAAG,0CAA0C,CAAC;QACxE,GAAG,CAAC,QAAQ,CAAC,SAAS,GAAG,6CAA6C,CAAC;QACvE,GAAG,CAAC,QAAQ,CAAC,aAAa,GAAG,6BAA6B,CAAC;QAE3D,KAAK,CAAC,GAAG,CAAC,CAAC;IACf,CAAC;IAES,KAAK,CAAC,mCAAmC,CAAC,KAAyB;QACzE,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC;YAC5C,IAAI,EAAE,QAAQ;YACd,KAAK,EAAE,KAAK,CAAC,YAAY;SAC5B,CAAC,CAAC;QAEH,MAAM,OAAO,GAAG,mBAAmB,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;QAExD,OAAO;YACH,EAAE,EAAE,QAAQ,CAAC,EAAE;YACf,mBAAmB,EAAE;gBACjB,IAAI,EAAE;oBACF,QAAQ,CAAC,KAAK;oBACd,QAAQ,CAAC,IAAI;oBACb,QAAQ,CAAC,EAAE;iBACd;gBACD,KAAK,EAAE;oBACH,QAAQ,CAAC,KAAK;iBACjB;aACJ;YACD,IAAI,EAAE,OAAO;YACb,QAAQ,EAAE,IAAI,CAAC,QAAQ;SAC1B,CAAC;IACN,CAAC;CACJ"}

package/dist/core/identity/provider/authentication/presets/google.d.ts

@@ -0,0 +1,9 @@
+import type { TokenGrantResponse } from '@hapic/oauth2';
+import type { IdentityProviderIdentity } from '../../types.ts';
+import type { IdentityProviderOAuth2AuthenticatorContext } from '../protocols/index.ts';
+import { IdentityProviderOAuth2Authenticator } from '../protocols/index.ts';
+export declare class IdentityProviderGoogleAuthenticator extends IdentityProviderOAuth2Authenticator {
+    constructor(ctx: IdentityProviderOAuth2AuthenticatorContext);
+    protected buildIdentityWithTokenGrantResponse(input: TokenGrantResponse): Promise<IdentityProviderIdentity>;
+}
+//# sourceMappingURL=google.d.ts.map

package/dist/core/identity/provider/authentication/presets/google.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"google.d.ts","sourceRoot":"","sources":["../../../../../../src/core/identity/provider/authentication/presets/google.ts"],"names":[],"mappings":"AAUA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,eAAe,CAAC;AACxD,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,gBAAgB,CAAC;AAC/D,OAAO,KAAK,EAAE,0CAA0C,EAAE,MAAM,uBAAuB,CAAC;AACxF,OAAO,EAAE,mCAAmC,EAAE,MAAM,uBAAuB,CAAC;AAE5E,qBAAa,mCAAoC,SAAQ,mCAAmC;gBAC5E,GAAG,EAAE,0CAA0C;cAS3C,mCAAmC,CAAC,KAAK,EAAE,kBAAkB,GAAG,OAAO,CAAC,wBAAwB,CAAC;CAkCpH"}

package/dist/core/identity/provider/authentication/presets/google.js

@@ -0,0 +1,46 @@
+/*
+ * Copyright (c) 2023-2023.
+ * Author Peter Placzek (tada5hi)
+ * For the full copyright and license information,
+ * view the LICENSE file that was distributed with this source code.
+ */
+import { extractTokenPayload } from '@authup/server-kit';
+import { IdentityProviderOAuth2Authenticator } from "../protocols/index.js";
+export class IdentityProviderGoogleAuthenticator extends IdentityProviderOAuth2Authenticator {
+    constructor(ctx) {
+        ctx.provider.scope = 'openid profile email';
+        ctx.provider.authorize_url = 'https://accounts.google.com/o/oauth2/v2/auth';
+        ctx.provider.token_url = 'https://oauth2.googleapis.com/token';
+        ctx.provider.user_info_url = 'https://openidconnect.googleapis.com/v1/userinfo';
+        super(ctx);
+    }
+    async buildIdentityWithTokenGrantResponse(input) {
+        const payload = extractTokenPayload(input.access_token);
+        const attributeCandidates = {};
+        /**
+         * @see https://developers.google.com/identity/openid-connect/openid-connect?hl=de#server-flow
+         */
+        if (input.id_token) {
+            const idTokenPayload = extractTokenPayload(input.id_token);
+            attributeCandidates.name = [
+                idTokenPayload.name,
+            ];
+            attributeCandidates.email = [
+                idTokenPayload.email,
+            ];
+            attributeCandidates.first_name = [
+                idTokenPayload.given_name,
+            ];
+            attributeCandidates.last_name = [
+                idTokenPayload.family_name,
+            ];
+        }
+        return {
+            id: payload.sub,
+            attributeCandidates,
+            data: payload,
+            provider: this.provider,
+        };
+    }
+}
+//# sourceMappingURL=google.js.map

package/dist/core/identity/provider/authentication/presets/google.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"google.js","sourceRoot":"","sources":["../../../../../../src/core/identity/provider/authentication/presets/google.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAGH,OAAO,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAC;AAKzD,OAAO,EAAE,mCAAmC,EAAE,MAAM,uBAAuB,CAAC;AAE5E,MAAM,OAAO,mCAAoC,SAAQ,mCAAmC;IACxF,YAAY,GAA+C;QACvD,GAAG,CAAC,QAAQ,CAAC,KAAK,GAAG,sBAAsB,CAAC;QAC5C,GAAG,CAAC,QAAQ,CAAC,aAAa,GAAG,8CAA8C,CAAC;QAC5E,GAAG,CAAC,QAAQ,CAAC,SAAS,GAAG,qCAAqC,CAAC;QAC/D,GAAG,CAAC,QAAQ,CAAC,aAAa,GAAG,kDAAkD,CAAC;QAEhF,KAAK,CAAC,GAAG,CAAC,CAAC;IACf,CAAC;IAES,KAAK,CAAC,mCAAmC,CAAC,KAAyB;QACzE,MAAM,OAAO,GAAG,mBAAmB,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;QAExD,MAAM,mBAAmB,GAAmC,EAAE,CAAC;QAE/D;;WAEG;QACH,IAAI,KAAK,CAAC,QAAQ,EAAE,CAAC;YACjB,MAAM,cAAc,GAAG,mBAAmB,CAAC,KAAK,CAAC,QAAQ,CAAuB,CAAC;YAEjF,mBAAmB,CAAC,IAAI,GAAG;gBACvB,cAAc,CAAC,IAAI;aACtB,CAAC;YAEF,mBAAmB,CAAC,KAAK,GAAG;gBACxB,cAAc,CAAC,KAAK;aACvB,CAAC;YAEF,mBAAmB,CAAC,UAAU,GAAG;gBAC7B,cAAc,CAAC,UAAU;aAC5B,CAAC;YACF,mBAAmB,CAAC,SAAS,GAAG;gBAC5B,cAAc,CAAC,WAAW;aAC7B,CAAC;QACN,CAAC;QAED,OAAO;YACH,EAAE,EAAE,OAAO,CAAC,GAAI;YAChB,mBAAmB;YACnB,IAAI,EAAE,OAAO;YACb,QAAQ,EAAE,IAAI,CAAC,QAAQ;SAC1B,CAAC;IACN,CAAC;CACJ"}

package/dist/core/identity/provider/authentication/presets/index.d.ts

@@ -0,0 +1,6 @@
+export * from './facebook.ts';
+export * from './github.ts';
+export * from './google.ts';
+export * from './instagram.ts';
+export * from './paypal.ts';
+//# sourceMappingURL=index.d.ts.map

package/dist/core/identity/provider/authentication/presets/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../../src/core/identity/provider/authentication/presets/index.ts"],"names":[],"mappings":"AAOA,cAAc,eAAe,CAAC;AAC9B,cAAc,aAAa,CAAC;AAC5B,cAAc,aAAa,CAAC;AAC5B,cAAc,gBAAgB,CAAC;AAC/B,cAAc,aAAa,CAAC"}

package/dist/core/identity/provider/authentication/presets/index.js

@@ -0,0 +1,12 @@
+/*
+ * Copyright (c) 2023.
+ * Author Peter Placzek (tada5hi)
+ * For the full copyright and license information,
+ * view the LICENSE file that was distributed with this source code.
+ */
+export * from "./facebook.js";
+export * from "./github.js";
+export * from "./google.js";
+export * from "./instagram.js";
+export * from "./paypal.js";
+//# sourceMappingURL=index.js.map

package/dist/core/identity/provider/authentication/presets/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../../../src/core/identity/provider/authentication/presets/index.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,cAAc,eAAe,CAAC;AAC9B,cAAc,aAAa,CAAC;AAC5B,cAAc,aAAa,CAAC;AAC5B,cAAc,gBAAgB,CAAC;AAC/B,cAAc,aAAa,CAAC"}

package/dist/core/identity/provider/authentication/presets/instagram.d.ts

@@ -0,0 +1,9 @@
+import type { TokenGrantResponse } from '@hapic/oauth2';
+import type { IdentityProviderIdentity } from '../../types.ts';
+import type { IdentityProviderOAuth2AuthenticatorContext } from '../protocols/index.ts';
+import { IdentityProviderOAuth2Authenticator } from '../protocols/index.ts';
+export declare class IdentityProviderInstagramAuthenticator extends IdentityProviderOAuth2Authenticator {
+    constructor(ctx: IdentityProviderOAuth2AuthenticatorContext);
+    protected buildIdentityWithTokenGrantResponse(input: TokenGrantResponse): Promise<IdentityProviderIdentity>;
+}
+//# sourceMappingURL=instagram.d.ts.map

package/dist/core/identity/provider/authentication/presets/instagram.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"instagram.d.ts","sourceRoot":"","sources":["../../../../../../src/core/identity/provider/authentication/presets/instagram.ts"],"names":[],"mappings":"AAQA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,eAAe,CAAC;AACxD,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,gBAAgB,CAAC;AAC/D,OAAO,KAAK,EAAE,0CAA0C,EAAE,MAAM,uBAAuB,CAAC;AACxF,OAAO,EAAE,mCAAmC,EAAE,MAAM,uBAAuB,CAAC;AAE5E,qBAAa,sCAAuC,SAAQ,mCAAmC;gBAC/E,GAAG,EAAE,0CAA0C;cAS3C,mCAAmC,CAAC,KAAK,EAAE,kBAAkB,GAAG,OAAO,CAAC,wBAAwB,CAAC;CAoBpH"}

package/dist/core/identity/provider/authentication/presets/instagram.js

@@ -0,0 +1,36 @@
+/*
+ * Copyright (c) 2023-2023.
+ * Author Peter Placzek (tada5hi)
+ * For the full copyright and license information,
+ * view the LICENSE file that was distributed with this source code.
+ */
+import { extractTokenPayload } from '@authup/server-kit';
+import { IdentityProviderOAuth2Authenticator } from "../protocols/index.js";
+export class IdentityProviderInstagramAuthenticator extends IdentityProviderOAuth2Authenticator {
+    constructor(ctx) {
+        ctx.provider.scope = 'user_profile';
+        ctx.provider.authorize_url = 'https://api.instagram.com/oauth/authorize';
+        ctx.provider.token_url = 'https://api.instagram.com/oauth/access_token';
+        ctx.provider.user_info_url = 'https://graph.instagram.com/me?fields=id,username';
+        super(ctx);
+    }
+    async buildIdentityWithTokenGrantResponse(input) {
+        const userInfo = await this.client.userInfo.get({
+            type: 'Bearer',
+            token: input.access_token,
+        });
+        const payload = extractTokenPayload(input.access_token);
+        return {
+            id: userInfo.id,
+            attributeCandidates: {
+                name: [
+                    userInfo.username,
+                    userInfo.id,
+                ],
+            },
+            data: payload,
+            provider: this.provider,
+        };
+    }
+}
+//# sourceMappingURL=instagram.js.map