@authup/server-core 1.0.0-beta.26 → 1.0.0-beta.28

package/dist/core/oauth2/authorization/state/types.js

@@ -0,0 +1,8 @@
+/*
+ * Copyright (c) 2025.
+ * Author Peter Placzek (tada5hi)
+ * For the full copyright and license information,
+ * view the LICENSE file that was distributed with this source code.
+ */
+export {};
+//# sourceMappingURL=types.js.map

package/dist/core/oauth2/authorization/state/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../../../../src/core/oauth2/authorization/state/types.ts"],"names":[],"mappings":"AAAA;;;;;GAKG"}

package/dist/core/oauth2/authorization/types.d.ts

@@ -0,0 +1,17 @@
+import type { IOAuth2OpenIDTokenIssuer, IOAuth2TokenIssuer } from '../token/index.ts';
+import type { IOAuth2AuthorizationCodeIssuer } from './code/index.ts';
+import type { IIdentityResolver } from '../../identity/index.ts';
+export type OAuth2AuthorizationManagerContext = {
+    accessTokenIssuer: IOAuth2TokenIssuer;
+    openIdTokenIssuer: IOAuth2OpenIDTokenIssuer;
+    codeIssuer: IOAuth2AuthorizationCodeIssuer;
+    identityResolver: IIdentityResolver;
+};
+export type OAuth2AuthorizationResult = {
+    authorizationCode?: string;
+    accessToken?: string;
+    idToken?: string;
+    redirectUri: string;
+    state?: string;
+};
+//# sourceMappingURL=types.d.ts.map

package/dist/core/oauth2/authorization/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../../src/core/oauth2/authorization/types.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,wBAAwB,EAAE,kBAAkB,EAAE,MAAM,mBAAmB,CAAC;AACtF,OAAO,KAAK,EAAE,8BAA8B,EAAE,MAAM,iBAAiB,CAAC;AACtE,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,yBAAyB,CAAC;AAEjE,MAAM,MAAM,iCAAiC,GAAG;IAC5C,iBAAiB,EAAE,kBAAkB,CAAC;IACtC,iBAAiB,EAAE,wBAAwB,CAAC;IAC5C,UAAU,EAAE,8BAA8B,CAAC;IAC3C,gBAAgB,EAAE,iBAAiB,CAAA;CACtC,CAAC;AAEF,MAAM,MAAM,yBAAyB,GAAG;IACpC,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,OAAO,CAAC,EAAE,MAAM,CAAC;IAEjB,WAAW,EAAE,MAAM,CAAC;IACpB,KAAK,CAAC,EAAE,MAAM,CAAA;CACjB,CAAC"}

package/dist/core/oauth2/authorization/types.js

@@ -0,0 +1,8 @@
+/*
+ * Copyright (c) 2023.
+ * Author Peter Placzek (tada5hi)
+ * For the full copyright and license information,
+ * view the LICENSE file that was distributed with this source code.
+ */
+export {};
+//# sourceMappingURL=types.js.map

package/dist/core/oauth2/authorization/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../../../src/core/oauth2/authorization/types.ts"],"names":[],"mappings":"AAAA;;;;;GAKG"}

package/dist/core/oauth2/client/index.d.ts

@@ -0,0 +1,2 @@
+export * from './types.ts';
+//# sourceMappingURL=index.d.ts.map

package/dist/core/oauth2/client/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/core/oauth2/client/index.ts"],"names":[],"mappings":"AAOA,cAAc,YAAY,CAAC"}

package/dist/core/oauth2/client/index.js

@@ -0,0 +1,8 @@
+/*
+ * Copyright (c) 2025.
+ * Author Peter Placzek (tada5hi)
+ * For the full copyright and license information,
+ * view the LICENSE file that was distributed with this source code.
+ */
+export * from "./types.js";
+//# sourceMappingURL=index.js.map

package/dist/core/oauth2/client/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../src/core/oauth2/client/index.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,cAAc,YAAY,CAAC"}

package/dist/core/oauth2/client/types.d.ts

@@ -0,0 +1,11 @@
+import type { Client } from '@authup/core-kit';
+export interface IOAuth2ClientRepository {
+    /**
+     * Find client with realm.
+     *
+     * @param idOrName
+     * @param realmId
+     */
+    findOneByIdOrName(idOrName: string, realmId?: string): Promise<Client | null>;
+}
+//# sourceMappingURL=types.d.ts.map

package/dist/core/oauth2/client/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../../src/core/oauth2/client/types.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAC;AAE/C,MAAM,WAAW,uBAAuB;IACpC;;;;;OAKG;IACH,iBAAiB,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,GAAI,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAAA;CACjF"}

package/dist/core/oauth2/client/types.js

@@ -0,0 +1,8 @@
+/*
+ * Copyright (c) 2025.
+ * Author Peter Placzek (tada5hi)
+ * For the full copyright and license information,
+ * view the LICENSE file that was distributed with this source code.
+ */
+export {};
+//# sourceMappingURL=types.js.map

package/dist/core/oauth2/client/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../../../src/core/oauth2/client/types.ts"],"names":[],"mappings":"AAAA;;;;;GAKG"}

package/dist/core/oauth2/grant-types/authorize.d.ts

@@ -0,0 +1,11 @@
+import type { OAuth2TokenGrantResponse } from '@authup/specs';
+import type { OAuth2AuthorizationCode } from '@authup/core-kit';
+import type { IOAuth2TokenIssuer } from '../token/index.ts';
+import { OAuth2BaseGrant } from './base.ts';
+import type { IOAuth2Grant, OAuth2AuthorizeGrantContext, OAuth2GrantRunWIthOptions } from './types.ts';
+export declare class OAuth2AuthorizeGrant extends OAuth2BaseGrant<OAuth2AuthorizationCode> implements IOAuth2Grant {
+    protected refreshTokenIssuer: IOAuth2TokenIssuer;
+    constructor(ctx: OAuth2AuthorizeGrantContext);
+    runWith(authorizationCode: OAuth2AuthorizationCode, options?: OAuth2GrantRunWIthOptions): Promise<OAuth2TokenGrantResponse>;
+}
+//# sourceMappingURL=authorize.d.ts.map

package/dist/core/oauth2/grant-types/authorize.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"authorize.d.ts","sourceRoot":"","sources":["../../../../src/core/oauth2/grant-types/authorize.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,wBAAwB,EAAsB,MAAM,eAAe,CAAC;AAIlF,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,kBAAkB,CAAC;AAIhE,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,mBAAmB,CAAC;AAC5D,OAAO,EAAE,eAAe,EAAE,MAAM,WAAW,CAAC;AAC5C,OAAO,KAAK,EAAE,YAAY,EAAE,2BAA2B,EAAE,yBAAyB,EAAE,MAAM,YAAY,CAAC;AAIvG,qBAAa,oBAAqB,SAAQ,eAAe,CAAC,uBAAuB,CAAE,YAAW,YAAY;IACtG,SAAS,CAAC,kBAAkB,EAAG,kBAAkB,CAAC;gBAEtC,GAAG,EAAE,2BAA2B;IAStC,OAAO,CACT,iBAAiB,EAAE,uBAAuB,EAC1C,OAAO,GAAE,yBAA8B,GACvC,OAAO,CAAC,wBAAwB,CAAC;CAyCxC"}

package/dist/core/oauth2/grant-types/authorize.js

@@ -0,0 +1,55 @@
+/*
+ * Copyright (c) 2022.
+ * Author Peter Placzek (tada5hi)
+ * For the full copyright and license information,
+ * view the LICENSE file that was distributed with this source code.
+ */
+import { hasOAuth2Scopes, } from '@authup/specs';
+import { ScopeName, } from '@authup/core-kit';
+import { OAuth2BaseGrant } from "./base.js";
+import { buildOAuth2BearerTokenResponse } from "../response/index.js";
+export class OAuth2AuthorizeGrant extends OAuth2BaseGrant {
+    refreshTokenIssuer;
+    constructor(ctx) {
+        super({
+            accessTokenIssuer: ctx.accessTokenIssuer,
+            sessionManager: ctx.sessionManager,
+        });
+        this.refreshTokenIssuer = ctx.refreshTokenIssuer;
+    }
+    async runWith(authorizationCode, options = {}) {
+        const session = await this.sessionManager.create({
+            user_agent: options.userAgent,
+            ip_address: options.ipAddress,
+            realm_id: authorizationCode.realm_id,
+            client_id: authorizationCode.client_id,
+            sub_kind: authorizationCode.sub_kind,
+            sub: authorizationCode.sub,
+        });
+        const issuePayload = {
+            user_agent: options.userAgent,
+            remote_address: options.ipAddress,
+            session_id: session.id,
+            sub: authorizationCode.sub || undefined,
+            sub_kind: authorizationCode.sub_kind,
+            realm_id: authorizationCode.realm_id,
+            realm_name: authorizationCode.realm_name,
+            scope: authorizationCode.scope || undefined,
+            client_id: authorizationCode.client_id || undefined,
+        };
+        const [accessToken, accessTokenPayload] = await this.accessTokenIssuer.issue(issuePayload);
+        const [refreshToken, refreshTokenPayload] = await this.refreshTokenIssuer.issue(issuePayload);
+        const buildContext = {
+            accessToken,
+            accessTokenPayload,
+            refreshToken,
+            refreshTokenPayload,
+        };
+        if (authorizationCode.scope &&
+            hasOAuth2Scopes(authorizationCode.scope, ScopeName.OPEN_ID)) {
+            buildContext.idToken = authorizationCode.id_token || undefined;
+        }
+        return buildOAuth2BearerTokenResponse(buildContext);
+    }
+}
+//# sourceMappingURL=authorize.js.map

package/dist/core/oauth2/grant-types/authorize.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"authorize.js","sourceRoot":"","sources":["../../../../src/core/oauth2/grant-types/authorize.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAGH,OAAO,EACH,eAAe,GAClB,MAAM,eAAe,CAAC;AAEvB,OAAO,EACH,SAAS,GACZ,MAAM,kBAAkB,CAAC;AAE1B,OAAO,EAAE,eAAe,EAAE,MAAM,WAAW,CAAC;AAG5C,OAAO,EAAE,8BAA8B,EAAE,MAAM,sBAAsB,CAAC;AAEtE,MAAM,OAAO,oBAAqB,SAAQ,eAAwC;IACpE,kBAAkB,CAAsB;IAElD,YAAY,GAAgC;QACxC,KAAK,CAAC;YACF,iBAAiB,EAAE,GAAG,CAAC,iBAAiB;YACxC,cAAc,EAAE,GAAG,CAAC,cAAc;SACrC,CAAC,CAAC;QAEH,IAAI,CAAC,kBAAkB,GAAG,GAAG,CAAC,kBAAkB,CAAC;IACrD,CAAC;IAED,KAAK,CAAC,OAAO,CACT,iBAA0C,EAC1C,UAAqC,EAAE;QAEvC,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC;YAC7C,UAAU,EAAE,OAAO,CAAC,SAAS;YAC7B,UAAU,EAAE,OAAO,CAAC,SAAS;YAC7B,QAAQ,EAAE,iBAAiB,CAAC,QAAQ;YACpC,SAAS,EAAE,iBAAiB,CAAC,SAAS;YACtC,QAAQ,EAAE,iBAAiB,CAAC,QAAQ;YACpC,GAAG,EAAE,iBAAiB,CAAC,GAAG;SAC7B,CAAC,CAAC;QAEH,MAAM,YAAY,GAAiC;YAC/C,UAAU,EAAE,OAAO,CAAC,SAAS;YAC7B,cAAc,EAAE,OAAO,CAAC,SAAS;YACjC,UAAU,EAAE,OAAO,CAAC,EAAE;YACtB,GAAG,EAAE,iBAAiB,CAAC,GAAG,IAAI,SAAS;YACvC,QAAQ,EAAE,iBAAiB,CAAC,QAAQ;YACpC,QAAQ,EAAE,iBAAiB,CAAC,QAAQ;YACpC,UAAU,EAAE,iBAAiB,CAAC,UAAU;YACxC,KAAK,EAAE,iBAAiB,CAAC,KAAK,IAAI,SAAS;YAC3C,SAAS,EAAE,iBAAiB,CAAC,SAAS,IAAI,SAAS;SACtD,CAAC;QAEF,MAAM,CAAC,WAAW,EAAE,kBAAkB,CAAC,GAAG,MAAM,IAAI,CAAC,iBAAiB,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;QAC3F,MAAM,CAAC,YAAY,EAAE,mBAAmB,CAAC,GAAG,MAAM,IAAI,CAAC,kBAAkB,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;QAE9F,MAAM,YAAY,GAAsC;YACpD,WAAW;YACX,kBAAkB;YAClB,YAAY;YACZ,mBAAmB;SACtB,CAAC;QAEF,IACI,iBAAiB,CAAC,KAAK;YACvB,eAAe,CAAC,iBAAiB,CAAC,KAAK,EAAE,SAAS,CAAC,OAAO,CAAC,EAC7D,CAAC;YACC,YAAY,CAAC,OAAO,GAAG,iBAAiB,CAAC,QAAQ,IAAI,SAAS,CAAC;QACnE,CAAC;QAED,OAAO,8BAA8B,CAAC,YAAY,CAAC,CAAC;IACxD,CAAC;CACJ"}

package/dist/core/oauth2/grant-types/base.d.ts

@@ -0,0 +1,12 @@
+import type { ObjectLiteral } from '@authup/kit';
+import type { OAuth2TokenGrantResponse } from '@authup/specs';
+import type { ISessionManager } from '../../authentication/index.ts';
+import type { IOAuth2TokenIssuer } from '../token/index.ts';
+import type { BaseGrantContext, IOAuth2Grant, OAuth2GrantRunWIthOptions } from './types.ts';
+export declare abstract class OAuth2BaseGrant<T = ObjectLiteral> implements IOAuth2Grant<T> {
+    protected accessTokenIssuer: IOAuth2TokenIssuer;
+    protected sessionManager: ISessionManager;
+    constructor(ctx: BaseGrantContext);
+    abstract runWith(input: T, options?: OAuth2GrantRunWIthOptions): Promise<OAuth2TokenGrantResponse>;
+}
+//# sourceMappingURL=base.d.ts.map

package/dist/core/oauth2/grant-types/base.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"base.d.ts","sourceRoot":"","sources":["../../../../src/core/oauth2/grant-types/base.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AACjD,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,eAAe,CAAC;AAC9D,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,+BAA+B,CAAC;AACrE,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,mBAAmB,CAAC;AAC5D,OAAO,KAAK,EAAE,gBAAgB,EAAE,YAAY,EAAE,yBAAyB,EAAE,MAAM,YAAY,CAAC;AAE5F,8BAAsB,eAAe,CACjC,CAAC,GAAG,aAAa,CACnB,YAAW,YAAY,CAAC,CAAC,CAAC;IACxB,SAAS,CAAC,iBAAiB,EAAG,kBAAkB,CAAC;IAEjD,SAAS,CAAC,cAAc,EAAG,eAAe,CAAC;gBAI/B,GAAG,EAAE,gBAAgB;IAOjC,QAAQ,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC,EAAE,OAAO,CAAC,EAAE,yBAAyB,GAAG,OAAO,CAAC,wBAAwB,CAAC;CACrG"}

package/dist/core/oauth2/grant-types/base.js

@@ -0,0 +1,16 @@
+/*
+ * Copyright (c) 2022.
+ * Author Peter Placzek (tada5hi)
+ * For the full copyright and license information,
+ * view the LICENSE file that was distributed with this source code.
+ */
+export class OAuth2BaseGrant {
+    accessTokenIssuer;
+    sessionManager;
+    // -----------------------------------------------------
+    constructor(ctx) {
+        this.accessTokenIssuer = ctx.accessTokenIssuer;
+        this.sessionManager = ctx.sessionManager;
+    }
+}
+//# sourceMappingURL=base.js.map

package/dist/core/oauth2/grant-types/base.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"base.js","sourceRoot":"","sources":["../../../../src/core/oauth2/grant-types/base.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAQH,MAAM,OAAgB,eAAe;IAGvB,iBAAiB,CAAsB;IAEvC,cAAc,CAAmB;IAE3C,wDAAwD;IAExD,YAAY,GAAqB;QAC7B,IAAI,CAAC,iBAAiB,GAAG,GAAG,CAAC,iBAAiB,CAAC;QAC/C,IAAI,CAAC,cAAc,GAAG,GAAG,CAAC,cAAc,CAAC;IAC7C,CAAC;CAKJ"}

package/dist/core/oauth2/grant-types/client-credentials.d.ts

@@ -0,0 +1,8 @@
+import type { OAuth2TokenGrantResponse } from '@authup/specs';
+import type { Client } from '@authup/core-kit';
+import { OAuth2BaseGrant } from './base.ts';
+import type { OAuth2GrantRunWIthOptions } from './types.ts';
+export declare class ClientCredentialsGrant extends OAuth2BaseGrant<Client> {
+    runWith(input: Client, options?: OAuth2GrantRunWIthOptions): Promise<OAuth2TokenGrantResponse>;
+}
+//# sourceMappingURL=client-credentials.d.ts.map

package/dist/core/oauth2/grant-types/client-credentials.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"client-credentials.d.ts","sourceRoot":"","sources":["../../../../src/core/oauth2/grant-types/client-credentials.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,eAAe,CAAC;AAI9D,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAC;AAK/C,OAAO,EAAE,eAAe,EAAE,MAAM,WAAW,CAAC;AAE5C,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,YAAY,CAAC;AAE5D,qBAAa,sBAAuB,SAAQ,eAAe,CAAC,MAAM,CAAC;IACzD,OAAO,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,GAAE,yBAA8B,GAAI,OAAO,CAAC,wBAAwB,CAAC;CA0B5G"}

package/dist/core/oauth2/grant-types/client-credentials.js

@@ -0,0 +1,37 @@
+/*
+ * Copyright (c) 2022.
+ * Author Peter Placzek (tada5hi)
+ * For the full copyright and license information,
+ * view the LICENSE file that was distributed with this source code.
+ */
+import { OAuth2SubKind, } from '@authup/specs';
+import { IdentityType, ScopeName, } from '@authup/core-kit';
+import { OAuth2BaseGrant } from "./base.js";
+import { buildOAuth2BearerTokenResponse } from "../response/index.js";
+export class ClientCredentialsGrant extends OAuth2BaseGrant {
+    async runWith(input, options = {}) {
+        const session = await this.sessionManager.create({
+            user_agent: options.userAgent,
+            ip_address: options.ipAddress,
+            realm_id: input.realm_id,
+            sub: input.id,
+            sub_kind: IdentityType.CLIENT,
+        });
+        const [accessToken, accessTokenPayload] = await this.accessTokenIssuer.issue({
+            user_agent: session.user_agent,
+            remote_address: session.ip_address,
+            session_id: session.id,
+            scope: ScopeName.GLOBAL,
+            sub: input.id,
+            sub_kind: OAuth2SubKind.CLIENT,
+            realm_id: input.realm.id,
+            realm_name: input.realm.id,
+            client_id: input.id,
+        });
+        return buildOAuth2BearerTokenResponse({
+            accessToken,
+            accessTokenPayload,
+        });
+    }
+}
+//# sourceMappingURL=client-credentials.js.map

package/dist/core/oauth2/grant-types/client-credentials.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"client-credentials.js","sourceRoot":"","sources":["../../../../src/core/oauth2/grant-types/client-credentials.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAGH,OAAO,EACH,aAAa,GAChB,MAAM,eAAe,CAAC;AAEvB,OAAO,EACH,YAAY,EACZ,SAAS,GACZ,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAAE,eAAe,EAAE,MAAM,WAAW,CAAC;AAC5C,OAAO,EAAE,8BAA8B,EAAE,MAAM,sBAAsB,CAAC;AAGtE,MAAM,OAAO,sBAAuB,SAAQ,eAAuB;IAC/D,KAAK,CAAC,OAAO,CAAC,KAAa,EAAE,UAAqC,EAAE;QAChE,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC;YAC7C,UAAU,EAAE,OAAO,CAAC,SAAS;YAC7B,UAAU,EAAE,OAAO,CAAC,SAAS;YAC7B,QAAQ,EAAE,KAAK,CAAC,QAAQ;YACxB,GAAG,EAAE,KAAK,CAAC,EAAE;YACb,QAAQ,EAAE,YAAY,CAAC,MAAM;SAChC,CAAC,CAAC;QAEH,MAAM,CAAC,WAAW,EAAE,kBAAkB,CAAC,GAAG,MAAM,IAAI,CAAC,iBAAiB,CAAC,KAAK,CAAC;YACzE,UAAU,EAAE,OAAO,CAAC,UAAU;YAC9B,cAAc,EAAE,OAAO,CAAC,UAAU;YAClC,UAAU,EAAE,OAAO,CAAC,EAAE;YACtB,KAAK,EAAE,SAAS,CAAC,MAAM;YACvB,GAAG,EAAE,KAAK,CAAC,EAAE;YACb,QAAQ,EAAE,aAAa,CAAC,MAAM;YAC9B,QAAQ,EAAE,KAAK,CAAC,KAAK,CAAC,EAAE;YACxB,UAAU,EAAE,KAAK,CAAC,KAAK,CAAC,EAAE;YAC1B,SAAS,EAAE,KAAK,CAAC,EAAE;SACtB,CAAC,CAAC;QAEH,OAAO,8BAA8B,CAAC;YAClC,WAAW;YACX,kBAAkB;SACrB,CAAC,CAAC;IACP,CAAC;CACJ"}

package/dist/core/oauth2/grant-types/identity.d.ts

@@ -0,0 +1,11 @@
+import type { OAuth2TokenGrantResponse } from '@authup/specs';
+import type { Identity } from '@authup/core-kit';
+import type { IOAuth2TokenIssuer } from '../token/index.ts';
+import { OAuth2BaseGrant } from './base.ts';
+import type { OAuth2GrantRunWIthOptions, OAuth2IdentityGrantContext } from './types.ts';
+export declare class IdentityGrantType extends OAuth2BaseGrant<Identity> {
+    protected refreshTokenIssuer: IOAuth2TokenIssuer;
+    constructor(ctx: OAuth2IdentityGrantContext);
+    runWith(identity: Identity, options?: OAuth2GrantRunWIthOptions): Promise<OAuth2TokenGrantResponse>;
+}
+//# sourceMappingURL=identity.d.ts.map

package/dist/core/oauth2/grant-types/identity.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"identity.d.ts","sourceRoot":"","sources":["../../../../src/core/oauth2/grant-types/identity.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,wBAAwB,EAAsB,MAAM,eAAe,CAAC;AAClF,OAAO,KAAK,EAAE,QAAQ,EAAW,MAAM,kBAAkB,CAAC;AAE1D,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,mBAAmB,CAAC;AAC5D,OAAO,EAAE,eAAe,EAAE,MAAM,WAAW,CAAC;AAE5C,OAAO,KAAK,EAAE,yBAAyB,EAAE,0BAA0B,EAAE,MAAM,YAAY,CAAC;AAExF,qBAAa,iBAAkB,SAAQ,eAAe,CAAC,QAAQ,CAAC;IAC5D,SAAS,CAAC,kBAAkB,EAAG,kBAAkB,CAAC;gBAEtC,GAAG,EAAE,0BAA0B;IASrC,OAAO,CACT,QAAQ,EAAE,QAAQ,EAClB,OAAO,GAAE,yBAA8B,GACxC,OAAO,CAAC,wBAAwB,CAAC;CAgCvC"}

package/dist/core/oauth2/grant-types/identity.js

@@ -0,0 +1,48 @@
+/*
+ * Copyright (c) 2022.
+ * Author Peter Placzek (tada5hi)
+ * For the full copyright and license information,
+ * view the LICENSE file that was distributed with this source code.
+ */
+import { ScopeName } from '@authup/core-kit';
+import { OAuth2BaseGrant } from "./base.js";
+import { buildOAuth2BearerTokenResponse } from "../response/index.js";
+export class IdentityGrantType extends OAuth2BaseGrant {
+    refreshTokenIssuer;
+    constructor(ctx) {
+        super({
+            accessTokenIssuer: ctx.accessTokenIssuer,
+            sessionManager: ctx.sessionManager,
+        });
+        this.refreshTokenIssuer = ctx.refreshTokenIssuer;
+    }
+    async runWith(identity, options = {}) {
+        const session = {
+            user_agent: options.userAgent,
+            ip_address: options.ipAddress,
+            realm_id: identity.data.realm_id,
+            sub: identity.data.id,
+            sub_kind: identity.type,
+        };
+        const { id: sessionId } = await this.sessionManager.create(session);
+        const issuePayload = {
+            session_id: sessionId,
+            user_agent: session.user_agent,
+            remote_address: session.ip_address,
+            scope: ScopeName.GLOBAL,
+            realm_id: identity.data.realm_id,
+            realm_name: identity.data.realm?.name,
+            sub: identity.data.id,
+            sub_kind: identity.type,
+        };
+        const [accessToken, accessTokenPayload] = await this.accessTokenIssuer.issue(issuePayload);
+        const [refreshToken, refreshTokenPayload] = await this.refreshTokenIssuer.issue(issuePayload);
+        return buildOAuth2BearerTokenResponse({
+            accessToken,
+            accessTokenPayload,
+            refreshToken,
+            refreshTokenPayload,
+        });
+    }
+}
+//# sourceMappingURL=identity.js.map

package/dist/core/oauth2/grant-types/identity.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"identity.js","sourceRoot":"","sources":["../../../../src/core/oauth2/grant-types/identity.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAIH,OAAO,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAE7C,OAAO,EAAE,eAAe,EAAE,MAAM,WAAW,CAAC;AAC5C,OAAO,EAAE,8BAA8B,EAAE,MAAM,sBAAsB,CAAC;AAGtE,MAAM,OAAO,iBAAkB,SAAQ,eAAyB;IAClD,kBAAkB,CAAsB;IAElD,YAAY,GAA+B;QACvC,KAAK,CAAC;YACF,iBAAiB,EAAE,GAAG,CAAC,iBAAiB;YACxC,cAAc,EAAE,GAAG,CAAC,cAAc;SACrC,CAAC,CAAC;QAEH,IAAI,CAAC,kBAAkB,GAAG,GAAG,CAAC,kBAAkB,CAAC;IACrD,CAAC;IAED,KAAK,CAAC,OAAO,CACT,QAAkB,EAClB,UAAqC,EAAE;QAEvC,MAAM,OAAO,GAAsB;YAC/B,UAAU,EAAE,OAAO,CAAC,SAAS;YAC7B,UAAU,EAAE,OAAO,CAAC,SAAS;YAC7B,QAAQ,EAAE,QAAQ,CAAC,IAAI,CAAC,QAAQ;YAChC,GAAG,EAAE,QAAQ,CAAC,IAAI,CAAC,EAAE;YACrB,QAAQ,EAAE,QAAQ,CAAC,IAAI;SAC1B,CAAC;QAEF,MAAM,EAAE,EAAE,EAAE,SAAS,EAAE,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QAEpE,MAAM,YAAY,GAAiC;YAC/C,UAAU,EAAE,SAAS;YACrB,UAAU,EAAE,OAAO,CAAC,UAAU;YAC9B,cAAc,EAAE,OAAO,CAAC,UAAU;YAClC,KAAK,EAAE,SAAS,CAAC,MAAM;YACvB,QAAQ,EAAE,QAAQ,CAAC,IAAI,CAAC,QAAQ;YAChC,UAAU,EAAE,QAAQ,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI;YACrC,GAAG,EAAE,QAAQ,CAAC,IAAI,CAAC,EAAE;YACrB,QAAQ,EAAE,QAAQ,CAAC,IAAI;SAC1B,CAAC;QAEF,MAAM,CAAC,WAAW,EAAE,kBAAkB,CAAC,GAAG,MAAM,IAAI,CAAC,iBAAiB,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;QAC3F,MAAM,CAAC,YAAY,EAAE,mBAAmB,CAAC,GAAG,MAAM,IAAI,CAAC,kBAAkB,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;QAE9F,OAAO,8BAA8B,CAAC;YAClC,WAAW;YACX,kBAAkB;YAClB,YAAY;YACZ,mBAAmB;SACtB,CAAC,CAAC;IACP,CAAC;CACJ"}

package/dist/core/oauth2/grant-types/index.d.ts

@@ -0,0 +1,8 @@
+export * from './authorize.ts';
+export * from './client-credentials.ts';
+export * from './identity.ts';
+export * from './password.ts';
+export * from './refresh-token.ts';
+export * from './robot-credentials.ts';
+export * from './types.ts';
+//# sourceMappingURL=index.d.ts.map

package/dist/core/oauth2/grant-types/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/core/oauth2/grant-types/index.ts"],"names":[],"mappings":"AAOA,cAAc,gBAAgB,CAAC;AAC/B,cAAc,yBAAyB,CAAC;AACxC,cAAc,eAAe,CAAC;AAC9B,cAAc,eAAe,CAAC;AAC9B,cAAc,oBAAoB,CAAC;AACnC,cAAc,wBAAwB,CAAC;AACvC,cAAc,YAAY,CAAC"}

package/dist/core/oauth2/grant-types/index.js

@@ -0,0 +1,14 @@
+/*
+ * Copyright (c) 2022.
+ * Author Peter Placzek (tada5hi)
+ * For the full copyright and license information,
+ * view the LICENSE file that was distributed with this source code.
+ */
+export * from "./authorize.js";
+export * from "./client-credentials.js";
+export * from "./identity.js";
+export * from "./password.js";
+export * from "./refresh-token.js";
+export * from "./robot-credentials.js";
+export * from "./types.js";
+//# sourceMappingURL=index.js.map

package/dist/core/oauth2/grant-types/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../src/core/oauth2/grant-types/index.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,cAAc,gBAAgB,CAAC;AAC/B,cAAc,yBAAyB,CAAC;AACxC,cAAc,eAAe,CAAC;AAC9B,cAAc,eAAe,CAAC;AAC9B,cAAc,oBAAoB,CAAC;AACnC,cAAc,wBAAwB,CAAC;AACvC,cAAc,YAAY,CAAC"}

package/dist/core/oauth2/grant-types/password.d.ts

@@ -0,0 +1,11 @@
+import type { OAuth2TokenGrantResponse } from '@authup/specs';
+import type { User } from '@authup/core-kit';
+import type { IOAuth2TokenIssuer } from '../token/index.ts';
+import { OAuth2BaseGrant } from './base.ts';
+import type { OAuth2GrantRunWIthOptions, OAuth2PasswordGrantContext } from './types.ts';
+export declare class PasswordGrantType extends OAuth2BaseGrant<User> {
+    protected refreshTokenIssuer: IOAuth2TokenIssuer;
+    constructor(ctx: OAuth2PasswordGrantContext);
+    runWith(input: User, options?: OAuth2GrantRunWIthOptions): Promise<OAuth2TokenGrantResponse>;
+}
+//# sourceMappingURL=password.d.ts.map

package/dist/core/oauth2/grant-types/password.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"password.d.ts","sourceRoot":"","sources":["../../../../src/core/oauth2/grant-types/password.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,wBAAwB,EAAsB,MAAM,eAAe,CAAC;AAElF,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAC;AAM7C,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,mBAAmB,CAAC;AAC5D,OAAO,EAAE,eAAe,EAAE,MAAM,WAAW,CAAC;AAC5C,OAAO,KAAK,EAAE,yBAAyB,EAAE,0BAA0B,EAAE,MAAM,YAAY,CAAC;AAExF,qBAAa,iBAAkB,SAAQ,eAAe,CAAC,IAAI,CAAC;IACxD,SAAS,CAAC,kBAAkB,EAAG,kBAAkB,CAAC;gBAEtC,GAAG,EAAE,0BAA0B;IASrC,OAAO,CAAC,KAAK,EAAE,IAAI,EAAE,OAAO,GAAE,yBAA8B,GAAI,OAAO,CAAC,wBAAwB,CAAC;CAgC1G"}

package/dist/core/oauth2/grant-types/password.js

@@ -0,0 +1,50 @@
+/*
+ * Copyright (c) 2022.
+ * Author Peter Placzek (tada5hi)
+ * For the full copyright and license information,
+ * view the LICENSE file that was distributed with this source code.
+ */
+import { OAuth2SubKind } from '@authup/specs';
+import { IdentityType, ScopeName, } from '@authup/core-kit';
+import { buildOAuth2BearerTokenResponse } from "../response/index.js";
+import { OAuth2BaseGrant } from "./base.js";
+export class PasswordGrantType extends OAuth2BaseGrant {
+    refreshTokenIssuer;
+    constructor(ctx) {
+        super({
+            accessTokenIssuer: ctx.accessTokenIssuer,
+            sessionManager: ctx.sessionManager,
+        });
+        this.refreshTokenIssuer = ctx.refreshTokenIssuer;
+    }
+    async runWith(input, options = {}) {
+        const session = await this.sessionManager.create({
+            user_agent: options.userAgent,
+            ip_address: options.ipAddress,
+            realm_id: input.realm_id,
+            client_id: input.client_id || undefined,
+            sub: input.id,
+            sub_kind: IdentityType.USER,
+        });
+        const issuePayload = {
+            client_id: input.client_id || undefined,
+            session_id: session.id,
+            user_agent: session.user_agent,
+            remote_address: session.ip_address,
+            scope: ScopeName.GLOBAL,
+            sub: input.id,
+            sub_kind: OAuth2SubKind.USER,
+            realm_id: input.realm_id,
+            realm_name: input.realm?.name,
+        };
+        const [accessToken, accessTokenPayload] = await this.accessTokenIssuer.issue(issuePayload);
+        const [refreshToken, refreshTokenPayload] = await this.refreshTokenIssuer.issue(issuePayload);
+        return buildOAuth2BearerTokenResponse({
+            accessToken,
+            accessTokenPayload,
+            refreshToken,
+            refreshTokenPayload,
+        });
+    }
+}
+//# sourceMappingURL=password.js.map

package/dist/core/oauth2/grant-types/password.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"password.js","sourceRoot":"","sources":["../../../../src/core/oauth2/grant-types/password.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAGH,OAAO,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AAE9C,OAAO,EACH,YAAY,EACZ,SAAS,GACZ,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAAE,8BAA8B,EAAE,MAAM,sBAAsB,CAAC;AAEtE,OAAO,EAAE,eAAe,EAAE,MAAM,WAAW,CAAC;AAG5C,MAAM,OAAO,iBAAkB,SAAQ,eAAqB;IAC9C,kBAAkB,CAAsB;IAElD,YAAY,GAA+B;QACvC,KAAK,CAAC;YACF,iBAAiB,EAAE,GAAG,CAAC,iBAAiB;YACxC,cAAc,EAAE,GAAG,CAAC,cAAc;SACrC,CAAC,CAAC;QAEH,IAAI,CAAC,kBAAkB,GAAG,GAAG,CAAC,kBAAkB,CAAC;IACrD,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,KAAW,EAAE,UAAqC,EAAE;QAC9D,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC;YAC7C,UAAU,EAAE,OAAO,CAAC,SAAS;YAC7B,UAAU,EAAE,OAAO,CAAC,SAAS;YAC7B,QAAQ,EAAE,KAAK,CAAC,QAAQ;YACxB,SAAS,EAAE,KAAK,CAAC,SAAS,IAAI,SAAS;YACvC,GAAG,EAAE,KAAK,CAAC,EAAE;YACb,QAAQ,EAAE,YAAY,CAAC,IAAI;SAC9B,CAAC,CAAC;QAEH,MAAM,YAAY,GAAiC;YAC/C,SAAS,EAAE,KAAK,CAAC,SAAS,IAAI,SAAS;YACvC,UAAU,EAAE,OAAO,CAAC,EAAE;YACtB,UAAU,EAAE,OAAO,CAAC,UAAU;YAC9B,cAAc,EAAE,OAAO,CAAC,UAAU;YAClC,KAAK,EAAE,SAAS,CAAC,MAAM;YACvB,GAAG,EAAE,KAAK,CAAC,EAAE;YACb,QAAQ,EAAE,aAAa,CAAC,IAAI;YAC5B,QAAQ,EAAE,KAAK,CAAC,QAAQ;YACxB,UAAU,EAAE,KAAK,CAAC,KAAK,EAAE,IAAI;SAChC,CAAC;QAEF,MAAM,CAAC,WAAW,EAAE,kBAAkB,CAAC,GAAG,MAAM,IAAI,CAAC,iBAAiB,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;QAC3F,MAAM,CAAC,YAAY,EAAE,mBAAmB,CAAC,GAAG,MAAM,IAAI,CAAC,kBAAkB,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;QAE9F,OAAO,8BAA8B,CAAC;YAClC,WAAW;YACX,kBAAkB;YAClB,YAAY;YACZ,mBAAmB;SACtB,CAAC,CAAC;IACP,CAAC;CACJ"}

package/dist/core/oauth2/grant-types/refresh-token.d.ts

@@ -0,0 +1,12 @@
+import type { OAuth2TokenGrantResponse, OAuth2TokenPayload } from '@authup/specs';
+import type { IOAuth2TokenIssuer, IOAuth2TokenRevoker, IOAuth2TokenVerifier } from '../token/index.ts';
+import { OAuth2BaseGrant } from './base.ts';
+import type { IOAuth2Grant, OAuth2GrantRunWIthOptions, OAuth2RefreshTokenGrantContext } from './types.ts';
+export declare class OAuth2RefreshTokenGrant extends OAuth2BaseGrant<string | OAuth2TokenPayload> implements IOAuth2Grant {
+    protected refreshTokenIssuer: IOAuth2TokenIssuer;
+    protected tokenVerifier: IOAuth2TokenVerifier;
+    protected tokenRevoker: IOAuth2TokenRevoker;
+    constructor(ctx: OAuth2RefreshTokenGrantContext);
+    runWith(input: string | OAuth2TokenPayload, options?: OAuth2GrantRunWIthOptions): Promise<OAuth2TokenGrantResponse>;
+}
+//# sourceMappingURL=refresh-token.d.ts.map

package/dist/core/oauth2/grant-types/refresh-token.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"refresh-token.d.ts","sourceRoot":"","sources":["../../../../src/core/oauth2/grant-types/refresh-token.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,wBAAwB,EAAE,kBAAkB,EAAE,MAAM,eAAe,CAAC;AAGlF,OAAO,KAAK,EAAE,kBAAkB,EAAE,mBAAmB,EAAE,oBAAoB,EAAE,MAAM,mBAAmB,CAAC;AACvG,OAAO,EAAE,eAAe,EAAE,MAAM,WAAW,CAAC;AAC5C,OAAO,KAAK,EAAE,YAAY,EAAE,yBAAyB,EAAE,8BAA8B,EAAE,MAAM,YAAY,CAAC;AAE1G,qBAAa,uBAAwB,SAAQ,eAAe,CAAC,MAAM,GAAG,kBAAkB,CAAE,YAAW,YAAY;IAC7G,SAAS,CAAC,kBAAkB,EAAG,kBAAkB,CAAC;IAElD,SAAS,CAAC,aAAa,EAAG,oBAAoB,CAAC;IAE/C,SAAS,CAAC,YAAY,EAAG,mBAAmB,CAAC;gBAEjC,GAAG,EAAE,8BAA8B;IAYzC,OAAO,CACT,KAAK,EAAE,MAAM,GAAG,kBAAkB,EAClC,OAAO,GAAE,yBAA8B,GACvC,OAAO,CAAC,wBAAwB,CAAC;CAkDxC"}

package/dist/core/oauth2/grant-types/refresh-token.js

@@ -0,0 +1,67 @@
+/*
+ * Copyright (c) 2022.
+ * Author Peter Placzek (tada5hi)
+ * For the full copyright and license information,
+ * view the LICENSE file that was distributed with this source code.
+ */
+import { JWTError } from '@authup/specs';
+import { buildOAuth2BearerTokenResponse } from "../response/index.js";
+import { OAuth2BaseGrant } from "./base.js";
+export class OAuth2RefreshTokenGrant extends OAuth2BaseGrant {
+    refreshTokenIssuer;
+    tokenVerifier;
+    tokenRevoker;
+    constructor(ctx) {
+        super({
+            accessTokenIssuer: ctx.accessTokenIssuer,
+            sessionManager: ctx.sessionManager,
+        });
+        this.refreshTokenIssuer = ctx.refreshTokenIssuer;
+        this.tokenVerifier = ctx.tokenVerifier;
+        this.tokenRevoker = ctx.tokenRevoker;
+    }
+    async runWith(input, options = {}) {
+        let payload;
+        if (typeof input === 'string') {
+            payload = await this.tokenVerifier.verify(input);
+        }
+        else {
+            payload = input;
+        }
+        await this.tokenRevoker.revoke(payload);
+        if (!payload.session_id) {
+            throw JWTError.payloadPropertyInvalid('session_id');
+        }
+        const session = await this.sessionManager.findOneById(payload.session_id);
+        if (!session) {
+            throw JWTError.payloadPropertyInvalid('session_id');
+        }
+        await this.sessionManager.verify(session);
+        if (options.userAgent) {
+            session.user_agent = options.userAgent;
+        }
+        if (options.ipAddress) {
+            session.ip_address = options.ipAddress;
+        }
+        await this.sessionManager.refresh(session);
+        const [accessToken, accessTokenPayload] = await this.accessTokenIssuer.issue({
+            ...payload,
+            user_agent: session.user_agent,
+            remote_address: session.ip_address,
+            exp: this.accessTokenIssuer.buildExp(),
+        });
+        const [refreshToken, refreshTokenPayload] = await this.refreshTokenIssuer.issue({
+            ...payload,
+            user_agent: session.user_agent,
+            remote_address: session.ip_address,
+            exp: this.refreshTokenIssuer.buildExp(),
+        });
+        return buildOAuth2BearerTokenResponse({
+            accessToken,
+            accessTokenPayload,
+            refreshToken,
+            refreshTokenPayload,
+        });
+    }
+}
+//# sourceMappingURL=refresh-token.js.map

package/dist/core/oauth2/grant-types/refresh-token.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"refresh-token.js","sourceRoot":"","sources":["../../../../src/core/oauth2/grant-types/refresh-token.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAGH,OAAO,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AACzC,OAAO,EAAE,8BAA8B,EAAE,MAAM,sBAAsB,CAAC;AAEtE,OAAO,EAAE,eAAe,EAAE,MAAM,WAAW,CAAC;AAG5C,MAAM,OAAO,uBAAwB,SAAQ,eAA4C;IAC3E,kBAAkB,CAAsB;IAExC,aAAa,CAAwB;IAErC,YAAY,CAAuB;IAE7C,YAAY,GAAmC;QAC3C,KAAK,CAAC;YACF,iBAAiB,EAAE,GAAG,CAAC,iBAAiB;YACxC,cAAc,EAAE,GAAG,CAAC,cAAc;SACrC,CAAC,CAAC;QAEH,IAAI,CAAC,kBAAkB,GAAG,GAAG,CAAC,kBAAkB,CAAC;QAEjD,IAAI,CAAC,aAAa,GAAG,GAAG,CAAC,aAAa,CAAC;QACvC,IAAI,CAAC,YAAY,GAAG,GAAG,CAAC,YAAY,CAAC;IACzC,CAAC;IAED,KAAK,CAAC,OAAO,CACT,KAAkC,EAClC,UAAqC,EAAE;QAEvC,IAAI,OAA4B,CAAC;QACjC,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;YAC5B,OAAO,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACrD,CAAC;aAAM,CAAC;YACJ,OAAO,GAAG,KAAK,CAAC;QACpB,CAAC;QAED,MAAM,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QAExC,IAAI,CAAC,OAAO,CAAC,UAAU,EAAE,CAAC;YACtB,MAAM,QAAQ,CAAC,sBAAsB,CAAC,YAAY,CAAC,CAAC;QACxD,CAAC;QAED,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,WAAW,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;QAC1E,IAAI,CAAC,OAAO,EAAE,CAAC;YACX,MAAM,QAAQ,CAAC,sBAAsB,CAAC,YAAY,CAAC,CAAC;QACxD,CAAC;QAED,MAAM,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QAE1C,IAAI,OAAO,CAAC,SAAS,EAAE,CAAC;YACpB,OAAO,CAAC,UAAU,GAAG,OAAO,CAAC,SAAS,CAAC;QAC3C,CAAC;QACD,IAAI,OAAO,CAAC,SAAS,EAAE,CAAC;YACpB,OAAO,CAAC,UAAU,GAAG,OAAO,CAAC,SAAS,CAAC;QAC3C,CAAC;QACD,MAAM,IAAI,CAAC,cAAc,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;QAE3C,MAAM,CAAC,WAAW,EAAE,kBAAkB,CAAC,GAAG,MAAM,IAAI,CAAC,iBAAiB,CAAC,KAAK,CAAC;YACzE,GAAG,OAAO;YACV,UAAU,EAAE,OAAO,CAAC,UAAU;YAC9B,cAAc,EAAE,OAAO,CAAC,UAAU;YAClC,GAAG,EAAE,IAAI,CAAC,iBAAiB,CAAC,QAAQ,EAAE;SACzC,CAAC,CAAC;QAEH,MAAM,CAAC,YAAY,EAAE,mBAAmB,CAAC,GAAG,MAAM,IAAI,CAAC,kBAAkB,CAAC,KAAK,CAAC;YAC5E,GAAG,OAAO;YACV,UAAU,EAAE,OAAO,CAAC,UAAU;YAC9B,cAAc,EAAE,OAAO,CAAC,UAAU;YAClC,GAAG,EAAE,IAAI,CAAC,kBAAkB,CAAC,QAAQ,EAAE;SAC1C,CAAC,CAAC;QAEH,OAAO,8BAA8B,CAAC;YAClC,WAAW;YACX,kBAAkB;YAClB,YAAY;YACZ,mBAAmB;SACtB,CAAC,CAAC;IACP,CAAC;CACJ"}

package/dist/core/oauth2/grant-types/robot-credentials.d.ts

@@ -0,0 +1,8 @@
+import type { OAuth2TokenGrantResponse } from '@authup/specs';
+import type { Robot } from '@authup/core-kit';
+import { OAuth2BaseGrant } from './base.ts';
+import type { OAuth2GrantRunWIthOptions } from './types.ts';
+export declare class RobotCredentialsGrant extends OAuth2BaseGrant<Robot> {
+    runWith(input: Robot, options?: OAuth2GrantRunWIthOptions): Promise<OAuth2TokenGrantResponse>;
+}
+//# sourceMappingURL=robot-credentials.d.ts.map

package/dist/core/oauth2/grant-types/robot-credentials.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"robot-credentials.d.ts","sourceRoot":"","sources":["../../../../src/core/oauth2/grant-types/robot-credentials.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,eAAe,CAAC;AAE9D,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,kBAAkB,CAAC;AAK9C,OAAO,EAAE,eAAe,EAAE,MAAM,WAAW,CAAC;AAE5C,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,YAAY,CAAC;AAE5D,qBAAa,qBAAsB,SAAQ,eAAe,CAAC,KAAK,CAAC;IACvD,OAAO,CAAC,KAAK,EAAE,KAAK,EAAE,OAAO,GAAE,yBAA8B,GAAI,OAAO,CAAC,wBAAwB,CAAC;CA0B3G"}

package/dist/core/oauth2/grant-types/robot-credentials.js

@@ -0,0 +1,37 @@
+/*
+ * Copyright (c) 2022.
+ * Author Peter Placzek (tada5hi)
+ * For the full copyright and license information,
+ * view the LICENSE file that was distributed with this source code.
+ */
+import { OAuth2SubKind } from '@authup/specs';
+import { IdentityType, ScopeName, } from '@authup/core-kit';
+import { OAuth2BaseGrant } from "./base.js";
+import { buildOAuth2BearerTokenResponse } from "../response/index.js";
+export class RobotCredentialsGrant extends OAuth2BaseGrant {
+    async runWith(input, options = {}) {
+        const session = await this.sessionManager.create({
+            user_agent: options.userAgent,
+            ip_address: options.ipAddress,
+            realm_id: input.realm_id,
+            sub: input.id,
+            sub_kind: IdentityType.ROBOT,
+        });
+        const [accessToken, accessTokenPayload] = await this.accessTokenIssuer.issue({
+            session_id: session.id,
+            user_agent: session.user_agent,
+            remote_address: session.ip_address,
+            scope: ScopeName.GLOBAL,
+            sub: input.id,
+            sub_kind: OAuth2SubKind.ROBOT,
+            realm_id: input.realm.id,
+            realm_name: input.realm?.id,
+            client_id: input.id,
+        });
+        return buildOAuth2BearerTokenResponse({
+            accessToken,
+            accessTokenPayload,
+        });
+    }
+}
+//# sourceMappingURL=robot-credentials.js.map

package/dist/core/oauth2/grant-types/robot-credentials.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"robot-credentials.js","sourceRoot":"","sources":["../../../../src/core/oauth2/grant-types/robot-credentials.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAGH,OAAO,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AAE9C,OAAO,EACH,YAAY,EACZ,SAAS,GACZ,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAAE,eAAe,EAAE,MAAM,WAAW,CAAC;AAC5C,OAAO,EAAE,8BAA8B,EAAE,MAAM,sBAAsB,CAAC;AAGtE,MAAM,OAAO,qBAAsB,SAAQ,eAAsB;IAC7D,KAAK,CAAC,OAAO,CAAC,KAAY,EAAE,UAAqC,EAAE;QAC/D,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC;YAC7C,UAAU,EAAE,OAAO,CAAC,SAAS;YAC7B,UAAU,EAAE,OAAO,CAAC,SAAS;YAC7B,QAAQ,EAAE,KAAK,CAAC,QAAQ;YACxB,GAAG,EAAE,KAAK,CAAC,EAAE;YACb,QAAQ,EAAE,YAAY,CAAC,KAAK;SAC/B,CAAC,CAAC;QAEH,MAAM,CAAC,WAAW,EAAE,kBAAkB,CAAC,GAAG,MAAM,IAAI,CAAC,iBAAiB,CAAC,KAAK,CAAC;YACzE,UAAU,EAAE,OAAO,CAAC,EAAE;YACtB,UAAU,EAAE,OAAO,CAAC,UAAU;YAC9B,cAAc,EAAE,OAAO,CAAC,UAAU;YAClC,KAAK,EAAE,SAAS,CAAC,MAAM;YACvB,GAAG,EAAE,KAAK,CAAC,EAAE;YACb,QAAQ,EAAE,aAAa,CAAC,KAAK;YAC7B,QAAQ,EAAE,KAAK,CAAC,KAAK,CAAC,EAAE;YACxB,UAAU,EAAE,KAAK,CAAC,KAAK,EAAE,EAAE;YAC3B,SAAS,EAAE,KAAK,CAAC,EAAE;SACtB,CAAC,CAAC;QAEH,OAAO,8BAA8B,CAAC;YAClC,WAAW;YACX,kBAAkB;SACrB,CAAC,CAAC;IACP,CAAC;CACJ"}