@authup/server-core 1.0.0-beta.27 → 1.0.0-beta.28

package/dist/adapters/http/controllers/entities/identity-provider/module.js

@@ -0,0 +1,301 @@
+/*
+ * Copyright (c) 2022.
+ * Author Peter Placzek (tada5hi)
+ * For the full copyright and license information,
+ * view the LICENSE file that was distributed with this source code.
+ */
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+var __param = (this && this.__param) || function (paramIndex, decorator) {
+    return function (target, key) { decorator(target, key, paramIndex); }
+};
+import { DBody, DController, DDelete, DGet, DPath, DPost, DPut, DRequest, DResponse, DTags, } from '@routup/decorators';
+import { getRequestHeader, getRequestHostName, getRequestIP, sendRedirect, } from 'routup';
+import { IdentityType, isOAuth2IdentityProvider, isOpenIDIdentityProvider, } from '@authup/core-kit';
+import { useDataSource } from 'typeorm-extension';
+import { BadRequestError, NotFoundError } from '@ebec/http';
+import { useRequestQuery } from '@routup/basic/query';
+import { OAuth2Error } from '@authup/specs';
+import { base64URLDecode } from '@authup/kit';
+import { URL } from 'node:url';
+import { setResponseCookie } from '@routup/basic/cookie';
+import { CookieName } from '@authup/core-http-kit';
+import { IdentityGrantType, OAuth2AuthorizationCodeRequestValidator, createIdentityProviderOAuth2Authenticator, } from "../../../../../core/index.js";
+import { useRequestParamID } from "../../../request/index.js";
+import { ForceLoggedInMiddleware } from "../../../middleware/index.js";
+import { deleteIdentityProviderRouteHandler, getManyIdentityProviderRouteHandler, getOneIdentityProviderRouteHandler, writeIdentityProviderRouteHandler, } from "./handlers/index.js";
+import { IdentityProviderRepository } from "../../../../database/domains/index.js";
+let IdentityProviderController = class IdentityProviderController {
+    options;
+    accountManager;
+    codeRequestVerifier;
+    codeRequestValidator;
+    stateManager;
+    identityGrant;
+    // ---------------------------------------------------------
+    constructor(ctx) {
+        this.options = ctx.options;
+        this.accountManager = ctx.accountManager;
+        this.codeRequestVerifier = ctx.codeRequestVerifier;
+        this.codeRequestValidator = new OAuth2AuthorizationCodeRequestValidator();
+        this.stateManager = ctx.stateManager;
+        this.identityGrant = new IdentityGrantType({
+            accessTokenIssuer: ctx.accessTokenIssuer,
+            refreshTokenIssuer: ctx.refreshTokenIssuer,
+            sessionManager: ctx.sessionManager,
+        });
+    }
+    // ---------------------------------------------------------
+    async getProviders(req, res) {
+        return getManyIdentityProviderRouteHandler(req, res);
+    }
+    async getProvider(id, req, res) {
+        return getOneIdentityProviderRouteHandler(req, res);
+    }
+    async editProvider(id, user, req, res) {
+        return writeIdentityProviderRouteHandler(req, res, {
+            updateOnly: true,
+        });
+    }
+    async put(id, user, req, res) {
+        return writeIdentityProviderRouteHandler(req, res);
+    }
+    async dropProvider(id, req, res) {
+        return deleteIdentityProviderRouteHandler(req, res);
+    }
+    async addProvider(user, req, res) {
+        return writeIdentityProviderRouteHandler(req, res);
+    }
+    // ---------------------------------------------------------
+    async authorizeOut(_id, req, res) {
+        const id = useRequestParamID(req);
+        const dataSource = await useDataSource();
+        const entity = await this.resolve(dataSource, id);
+        if (!isOAuth2IdentityProvider(entity) && !isOpenIDIdentityProvider(entity)) {
+            throw new BadRequestError('Only an identity-provider based on the oauth protocol supports authorize redirect.');
+        }
+        const authenticator = createIdentityProviderOAuth2Authenticator({
+            accountManager: this.accountManager,
+            provider: entity,
+            options: {
+                baseURL: this.options.baseURL,
+            },
+        });
+        const parameters = {};
+        let codeRequest;
+        const query = useRequestQuery(req);
+        if (typeof query.codeRequest === 'string') {
+            let codeRequestDecoded;
+            try {
+                codeRequestDecoded = JSON.parse(base64URLDecode(query.codeRequest));
+            }
+            catch (e) {
+                throw OAuth2Error.requestInvalid('The code request is malformed and can not be parsed.');
+            }
+            const codeRequestValidated = await this.codeRequestValidator.run(codeRequestDecoded);
+            const data = await this.codeRequestVerifier.verify(codeRequestValidated);
+            if (data.client.realm_id &&
+                entity.realm_id &&
+                entity.realm_id !== data.client.realm_id) {
+                throw OAuth2Error.requestInvalid('The provider and client realm do not match.');
+            }
+            codeRequest = data.data;
+        }
+        parameters.state = await this.saveAuthorizationState(req, codeRequest);
+        return sendRedirect(res, authenticator.buildRedirectURL(parameters));
+    }
+    async authorizeIn(_id, req, res) {
+        const id = useRequestParamID(req);
+        const dataSource = await useDataSource();
+        const entity = await this.resolve(dataSource, id);
+        if (!isOAuth2IdentityProvider(entity) && !isOpenIDIdentityProvider(entity)) {
+            throw new Error(`The provider protocol ${entity.protocol} is not valid.`);
+        }
+        const data = await this.verifyAuthorizationState(req);
+        if (entity.realm_id &&
+            data.codeRequest &&
+            data.codeRequest.realm_id &&
+            data.codeRequest.realm_id !== entity.realm_id) {
+            throw OAuth2Error.requestInvalid('The provider and client realm do not match.');
+        }
+        const { code } = useRequestQuery(req);
+        const authenticator = createIdentityProviderOAuth2Authenticator({
+            accountManager: this.accountManager,
+            provider: entity,
+            options: {
+                baseURL: this.options.baseURL,
+                clientId: data.codeRequest?.client_id,
+            },
+        });
+        const user = await authenticator.authenticate(code);
+        const token = await this.identityGrant.runWith({
+            type: IdentityType.USER,
+            data: {
+                ...user,
+                realm: entity.realm,
+            },
+        }, {
+            ipAddress: getRequestIP(req, { trustProxy: true }),
+            userAgent: getRequestHeader(req, 'user-agent'),
+        });
+        const domainsRaw = [
+            ...this.options.cookieDomains,
+        ];
+        const requestHostName = getRequestHostName(req, {
+            trustProxy: true,
+        });
+        if (requestHostName) {
+            domainsRaw.push(requestHostName);
+        }
+        const domains = [...new Set(domainsRaw)];
+        for (let i = 0; i < domains.length; i++) {
+            setResponseCookie(res, CookieName.ACCESS_TOKEN, token.access_token, {
+                domain: domains[i],
+                maxAge: this.options.accessTokenMaxAge * 1000,
+            });
+            if (token.refresh_token) {
+                setResponseCookie(res, CookieName.REFRESH_TOKEN, token.refresh_token, {
+                    domain: domains[i],
+                    maxAge: this.options.refreshTokenMaxAge * 1000,
+                });
+            }
+        }
+        if (data.codeRequest) {
+            const codeRequestKeys = Object.keys(data.codeRequest);
+            const url = new URL('/authorize', this.options.baseURL);
+            for (let i = 0; i < codeRequestKeys.length; i++) {
+                const codeRequestKey = codeRequestKeys[i];
+                if (data.codeRequest[codeRequestKey]) {
+                    url.searchParams.set(codeRequestKey, data.codeRequest[codeRequestKey]);
+                }
+            }
+            return sendRedirect(res, url.href);
+        }
+        return sendRedirect(res, this.options.baseURL);
+    }
+    // ---------------------------------------------------------
+    async resolve(dataSource, id) {
+        const repository = new IdentityProviderRepository(dataSource);
+        const entity = await repository.findOneWithEA({
+            relations: {
+                realm: true,
+            },
+            where: {
+                id,
+            },
+        });
+        if (!entity) {
+            throw new NotFoundError();
+        }
+        return entity;
+    }
+    // ---------------------------------------------------------
+    async saveAuthorizationState(req, codeRequest) {
+        return this.stateManager.save({
+            codeRequest,
+            ip: getRequestIP(req, {
+                trustProxy: true,
+            }),
+            userAgent: getRequestHeader(req, 'user-agent'),
+        });
+    }
+    async verifyAuthorizationState(req) {
+        const query = useRequestQuery(req);
+        if (typeof query.state !== 'string') {
+            throw OAuth2Error.stateInvalid();
+        }
+        return this.stateManager.verify(query.state, {
+            ip: getRequestIP(req, {
+                trustProxy: true,
+            }),
+            userAgent: getRequestHeader(req, 'user-agent'),
+        });
+    }
+};
+__decorate([
+    DGet('', []),
+    __param(0, DRequest()),
+    __param(1, DResponse()),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [Object, Object]),
+    __metadata("design:returntype", Promise)
+], IdentityProviderController.prototype, "getProviders", null);
+__decorate([
+    DGet('/:id', []),
+    __param(0, DPath('id')),
+    __param(1, DRequest()),
+    __param(2, DResponse()),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [String, Object, Object]),
+    __metadata("design:returntype", Promise)
+], IdentityProviderController.prototype, "getProvider", null);
+__decorate([
+    DPost('/:id', [ForceLoggedInMiddleware]),
+    __param(0, DPath('id')),
+    __param(1, DBody()),
+    __param(2, DRequest()),
+    __param(3, DResponse()),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [String, Object, Object, Object]),
+    __metadata("design:returntype", Promise)
+], IdentityProviderController.prototype, "editProvider", null);
+__decorate([
+    DPut('/:id', [ForceLoggedInMiddleware]),
+    __param(0, DPath('id')),
+    __param(1, DBody()),
+    __param(2, DRequest()),
+    __param(3, DResponse()),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [String, Object, Object, Object]),
+    __metadata("design:returntype", Promise)
+], IdentityProviderController.prototype, "put", null);
+__decorate([
+    DDelete('/:id', [ForceLoggedInMiddleware]),
+    __param(0, DPath('id')),
+    __param(1, DRequest()),
+    __param(2, DResponse()),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [String, Object, Object]),
+    __metadata("design:returntype", Promise)
+], IdentityProviderController.prototype, "dropProvider", null);
+__decorate([
+    DPost('', [ForceLoggedInMiddleware]),
+    __param(0, DBody()),
+    __param(1, DRequest()),
+    __param(2, DResponse()),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [Object, Object, Object]),
+    __metadata("design:returntype", Promise)
+], IdentityProviderController.prototype, "addProvider", null);
+__decorate([
+    DGet('/:id/authorize-out', []),
+    __param(0, DPath('id')),
+    __param(1, DRequest()),
+    __param(2, DResponse()),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [String, Object, Object]),
+    __metadata("design:returntype", Promise)
+], IdentityProviderController.prototype, "authorizeOut", null);
+__decorate([
+    DGet('/:id/authorize-in', []),
+    __param(0, DPath('id')),
+    __param(1, DRequest()),
+    __param(2, DResponse()),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [String, Object, Object]),
+    __metadata("design:returntype", Promise)
+], IdentityProviderController.prototype, "authorizeIn", null);
+IdentityProviderController = __decorate([
+    DTags('identity'),
+    DController('/identity-providers'),
+    __metadata("design:paramtypes", [Object])
+], IdentityProviderController);
+export { IdentityProviderController };
+//# sourceMappingURL=module.js.map

package/dist/adapters/http/controllers/entities/identity-provider/module.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"module.js","sourceRoot":"","sources":["../../../../../../src/adapters/http/controllers/entities/identity-provider/module.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;;;;;;;;;;;;;AAEH,OAAO,EACH,KAAK,EAAE,WAAW,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,KAAK,GACpF,MAAM,oBAAoB,CAAC;AAE5B,OAAO,EACH,gBAAgB,EAAE,kBAAkB,EAAE,YAAY,EAAE,YAAY,GACnE,MAAM,QAAQ,CAAC;AAChB,OAAO,EAEH,YAAY,EAEZ,wBAAwB,EACxB,wBAAwB,GAC3B,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAC;AAClD,OAAO,EAAE,eAAe,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAE5D,OAAO,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AACtD,OAAO,EAAE,WAAW,EAAE,MAAM,eAAe,CAAC;AAC5C,OAAO,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAC9C,OAAO,EAAE,GAAG,EAAE,MAAM,UAAU,CAAC;AAC/B,OAAO,EAAE,iBAAiB,EAAE,MAAM,sBAAsB,CAAC;AACzD,OAAO,EAAE,UAAU,EAAE,MAAM,uBAAuB,CAAC;AAEnD,OAAO,EAIH,iBAAiB,EACjB,uCAAuC,EACb,yCAAyC,GACtE,MAAM,8BAA8B,CAAC;AACtC,OAAO,EAAE,iBAAiB,EAAE,MAAM,2BAA2B,CAAC;AAC9D,OAAO,EAAE,uBAAuB,EAAE,MAAM,8BAA8B,CAAC;AACvE,OAAO,EACH,kCAAkC,EAClC,mCAAmC,EACnC,kCAAkC,EAClC,iCAAiC,GACpC,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAAE,0BAA0B,EAAE,MAAM,uCAAuC,CAAC;AAK5E,IAAM,0BAA0B,GAAhC,MAAM,0BAA0B;IACzB,OAAO,CAAoC;IAE3C,cAAc,CAAkC;IAEhD,mBAAmB,CAA2C;IAE9D,oBAAoB,CAA2C;IAE/D,YAAY,CAAoC;IAEhD,aAAa,CAAqB;IAE5C,4DAA4D;IAE5D,YAAY,GAAsC;QAC9C,IAAI,CAAC,OAAO,GAAG,GAAG,CAAC,OAAO,CAAC;QAC3B,IAAI,CAAC,cAAc,GAAG,GAAG,CAAC,cAAc,CAAC;QACzC,IAAI,CAAC,mBAAmB,GAAG,GAAG,CAAC,mBAAmB,CAAC;QACnD,IAAI,CAAC,oBAAoB,GAAG,IAAI,uCAAuC,EAAE,CAAC;QAC1E,IAAI,CAAC,YAAY,GAAG,GAAG,CAAC,YAAY,CAAC;QAErC,IAAI,CAAC,aAAa,GAAG,IAAI,iBAAiB,CAAC;YACvC,iBAAiB,EAAE,GAAG,CAAC,iBAAiB;YACxC,kBAAkB,EAAE,GAAG,CAAC,kBAAkB;YAC1C,cAAc,EAAE,GAAG,CAAC,cAAc;SACrC,CAAC,CAAC;IACP,CAAC;IAED,4DAA4D;IAGtD,AAAN,KAAK,CAAC,YAAY,CACF,GAAQ,EACH,GAAQ;QAEzB,OAAO,mCAAmC,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;IACzD,CAAC;IAGK,AAAN,KAAK,CAAC,WAAW,CACA,EAAU,EACP,GAAQ,EACP,GAAQ;QAEzB,OAAO,kCAAkC,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;IACxD,CAAC;IAGK,AAAN,KAAK,CAAC,YAAY,CACD,EAAU,EACV,IAAmC,EAChC,GAAQ,EACP,GAAQ;QAEzB,OAAO,iCAAiC,CAAC,GAAG,EAAE,GAAG,EAAE;YAC/C,UAAU,EAAE,IAAI;SACnB,CAAC,CAAC;IACP,CAAC;IAGK,AAAN,KAAK,CAAC,GAAG,CACQ,EAAU,EACV,IAAmC,EAChC,GAAQ,EACP,GAAQ;QAEzB,OAAO,iCAAiC,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;IACvD,CAAC;IAGK,AAAN,KAAK,CAAC,YAAY,CACD,EAAU,EACP,GAAQ,EACP,GAAQ;QAEzB,OAAO,kCAAkC,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;IACxD,CAAC;IAGK,AAAN,KAAK,CAAC,WAAW,CACJ,IAAmC,EAC5B,GAAQ,EACP,GAAQ;QAEzB,OAAO,iCAAiC,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;IACvD,CAAC;IAED,4DAA4D;IAGtD,AAAN,KAAK,CAAC,YAAY,CACL,GAAW,EACR,GAAQ,EACP,GAAQ;QAErB,MAAM,EAAE,GAAG,iBAAiB,CAAC,GAAG,CAAC,CAAC;QAClC,MAAM,UAAU,GAAG,MAAM,aAAa,EAAE,CAAC;QACzC,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC;QAElD,IAAI,CAAC,wBAAwB,CAAC,MAAM,CAAC,IAAI,CAAC,wBAAwB,CAAC,MAAM,CAAC,EAAE,CAAC;YACzE,MAAM,IAAI,eAAe,CAAC,oFAAoF,CAAC,CAAC;QACpH,CAAC;QAED,MAAM,aAAa,GAAG,yCAAyC,CAAC;YAC5D,cAAc,EAAE,IAAI,CAAC,cAAc;YACnC,QAAQ,EAAE,MAAM;YAChB,OAAO,EAAE;gBACL,OAAO,EAAE,IAAI,CAAC,OAAO,CAAC,OAAO;aAChC;SACJ,CAAC,CAAC;QAEH,MAAM,UAAU,GAAyB,EAAE,CAAC;QAE5C,IAAI,WAAuD,CAAC;QAC5D,MAAM,KAAK,GAAG,eAAe,CAAC,GAAG,CAAC,CAAC;QACnC,IAAI,OAAO,KAAK,CAAC,WAAW,KAAK,QAAQ,EAAE,CAAC;YACxC,IAAI,kBAAkD,CAAC;YAEvD,IAAI,CAAC;gBACD,kBAAkB,GAAG,IAAI,CAAC,KAAK,CAAC,eAAe,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC;YACxE,CAAC;YAAC,OAAO,CAAC,EAAE,CAAC;gBACT,MAAM,WAAW,CAAC,cAAc,CAAC,sDAAsD,CAAC,CAAC;YAC7F,CAAC;YAED,MAAM,oBAAoB,GAAG,MAAM,IAAI,CAAC,oBAAoB,CAAC,GAAG,CAAC,kBAAkB,CAAC,CAAC;YACrF,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,mBAAmB,CAAC,MAAM,CAAC,oBAAoB,CAAC,CAAC;YAEzE,IACI,IAAI,CAAC,MAAM,CAAC,QAAQ;gBACpB,MAAM,CAAC,QAAQ;gBACf,MAAM,CAAC,QAAQ,KAAK,IAAI,CAAC,MAAM,CAAC,QAAQ,EAC1C,CAAC;gBACC,MAAM,WAAW,CAAC,cAAc,CAAC,6CAA6C,CAAC,CAAC;YACpF,CAAC;YAED,WAAW,GAAG,IAAI,CAAC,IAAI,CAAC;QAC5B,CAAC;QAED,UAAU,CAAC,KAAK,GAAG,MAAM,IAAI,CAAC,sBAAsB,CAAC,GAAG,EAAE,WAAW,CAAC,CAAC;QAEvE,OAAO,YAAY,CAAC,GAAG,EAAE,aAAa,CAAC,gBAAgB,CAAC,UAAU,CAAC,CAAC,CAAC;IACzE,CAAC;IAGK,AAAN,KAAK,CAAC,WAAW,CACJ,GAAW,EACR,GAAY,EACX,GAAa;QAE1B,MAAM,EAAE,GAAG,iBAAiB,CAAC,GAAG,CAAC,CAAC;QAClC,MAAM,UAAU,GAAG,MAAM,aAAa,EAAE,CAAC;QAEzC,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC;QAElD,IAAI,CAAC,wBAAwB,CAAC,MAAM,CAAC,IAAI,CAAC,wBAAwB,CAAC,MAAM,CAAC,EAAE,CAAC;YACzE,MAAM,IAAI,KAAK,CAAC,yBAAyB,MAAM,CAAC,QAAQ,gBAAgB,CAAC,CAAC;QAC9E,CAAC;QAED,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,wBAAwB,CAAC,GAAG,CAAC,CAAC;QACtD,IACI,MAAM,CAAC,QAAQ;YACf,IAAI,CAAC,WAAW;YAChB,IAAI,CAAC,WAAW,CAAC,QAAQ;YACzB,IAAI,CAAC,WAAW,CAAC,QAAQ,KAAK,MAAM,CAAC,QAAQ,EAC/C,CAAC;YACC,MAAM,WAAW,CAAC,cAAc,CAAC,6CAA6C,CAAC,CAAC;QACpF,CAAC;QAED,MAAM,EAAE,IAAI,EAAE,GAAG,eAAe,CAAC,GAAG,CAAC,CAAC;QAEtC,MAAM,aAAa,GAAG,yCAAyC,CAAC;YAC5D,cAAc,EAAE,IAAI,CAAC,cAAc;YACnC,QAAQ,EAAE,MAAM;YAChB,OAAO,EAAE;gBACL,OAAO,EAAE,IAAI,CAAC,OAAO,CAAC,OAAO;gBAC7B,QAAQ,EAAE,IAAI,CAAC,WAAW,EAAE,SAAS;aACxC;SACJ,CAAC,CAAC;QAEH,MAAM,IAAI,GAAG,MAAM,aAAa,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC;QAEpD,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,OAAO,CAC1C;YACI,IAAI,EAAE,YAAY,CAAC,IAAI;YACvB,IAAI,EAAE;gBACF,GAAG,IAAI;gBACP,KAAK,EAAE,MAAM,CAAC,KAAK;aACtB;SACJ,EACD;YACI,SAAS,EAAE,YAAY,CAAC,GAAG,EAAE,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC;YAClD,SAAS,EAAE,gBAAgB,CAAC,GAAG,EAAE,YAAY,CAAC;SACjD,CACJ,CAAC;QAEF,MAAM,UAAU,GAAc;YAC1B,GAAG,IAAI,CAAC,OAAO,CAAC,aAAa;SAChC,CAAC;QAEF,MAAM,eAAe,GAAG,kBAAkB,CAAC,GAAG,EAAE;YAC5C,UAAU,EAAE,IAAI;SACnB,CAAC,CAAC;QACH,IAAI,eAAe,EAAE,CAAC;YAClB,UAAU,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;QACrC,CAAC;QAED,MAAM,OAAO,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC;QAEzC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YACtC,iBAAiB,CACb,GAAG,EACH,UAAU,CAAC,YAAY,EACvB,KAAK,CAAC,YAAY,EAClB;gBACI,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;gBAClB,MAAM,EAAE,IAAI,CAAC,OAAO,CAAC,iBAAiB,GAAG,IAAI;aAChD,CACJ,CAAC;YAEF,IAAI,KAAK,CAAC,aAAa,EAAE,CAAC;gBACtB,iBAAiB,CACb,GAAG,EACH,UAAU,CAAC,aAAa,EACxB,KAAK,CAAC,aAAa,EACnB;oBACI,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;oBAClB,MAAM,EAAE,IAAI,CAAC,OAAO,CAAC,kBAAkB,GAAG,IAAI;iBACjD,CACJ,CAAC;YACN,CAAC;QACL,CAAC;QAED,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC;YACnB,MAAM,eAAe,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;YAEtD,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,YAAY,EAAE,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;YACxD,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,eAAe,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;gBAC9C,MAAM,cAAc,GAAG,eAAe,CAAC,CAAC,CAAyC,CAAC;gBAClF,IAAI,IAAI,CAAC,WAAW,CAAC,cAAc,CAAC,EAAE,CAAC;oBACnC,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,cAAc,EAAE,IAAI,CAAC,WAAW,CAAC,cAAc,CAAC,CAAC,CAAC;gBAC3E,CAAC;YACL,CAAC;YAED,OAAO,YAAY,CAAC,GAAG,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC;QACvC,CAAC;QAED,OAAO,YAAY,CAAC,GAAG,EAAE,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;IACnD,CAAC;IAED,4DAA4D;IAEpD,KAAK,CAAC,OAAO,CAAC,UAAsB,EAAE,EAAU;QACpD,MAAM,UAAU,GAAG,IAAI,0BAA0B,CAAC,UAAU,CAAC,CAAC;QAC9D,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,aAAa,CAAC;YAC1C,SAAS,EAAE;gBACP,KAAK,EAAE,IAAI;aACd;YACD,KAAK,EAAE;gBACH,EAAE;aACL;SACJ,CAAC,CAAC;QAEH,IAAI,CAAC,MAAM,EAAE,CAAC;YACV,MAAM,IAAI,aAAa,EAAE,CAAC;QAC9B,CAAC;QAED,OAAO,MAAM,CAAC;IAClB,CAAC;IAED,4DAA4D;IAEpD,KAAK,CAAC,sBAAsB,CAChC,GAAY,EACZ,WAA4C;QAE5C,OAAO,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC;YAC1B,WAAW;YACX,EAAE,EAAE,YAAY,CAAC,GAAG,EAAE;gBAClB,UAAU,EAAE,IAAI;aACnB,CAAC;YACF,SAAS,EAAE,gBAAgB,CAAC,GAAG,EAAE,YAAY,CAAC;SACjD,CAAC,CAAC;IACP,CAAC;IAEO,KAAK,CAAC,wBAAwB,CAAC,GAAY;QAC/C,MAAM,KAAK,GAAG,eAAe,CAAC,GAAG,CAAC,CAAC;QACnC,IAAI,OAAO,KAAK,CAAC,KAAK,KAAK,QAAQ,EAAE,CAAC;YAClC,MAAM,WAAW,CAAC,YAAY,EAAE,CAAC;QACrC,CAAC;QAED,OAAO,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,EAAE;YACzC,EAAE,EAAE,YAAY,CAAC,GAAG,EAAE;gBAClB,UAAU,EAAE,IAAI;aACnB,CAAC;YACF,SAAS,EAAE,gBAAgB,CAAC,GAAG,EAAE,YAAY,CAAC;SACjD,CAAC,CAAC;IACP,CAAC;CACJ,CAAA;AA1QS;IADL,IAAI,CAAC,EAAE,EAAE,EAAE,CAAC;IAER,WAAA,QAAQ,EAAE,CAAA;IACN,WAAA,SAAS,EAAE,CAAA;;;;8DAGnB;AAGK;IADL,IAAI,CAAC,MAAM,EAAE,EAAE,CAAC;IAEZ,WAAA,KAAK,CAAC,IAAI,CAAC,CAAA;IACP,WAAA,QAAQ,EAAE,CAAA;IACV,WAAA,SAAS,EAAE,CAAA;;;;6DAGnB;AAGK;IADL,KAAK,CAAC,MAAM,EAAE,CAAC,uBAAuB,CAAC,CAAC;IAEpC,WAAA,KAAK,CAAC,IAAI,CAAC,CAAA;IACP,WAAA,KAAK,EAAE,CAAA;IACP,WAAA,QAAQ,EAAE,CAAA;IACV,WAAA,SAAS,EAAE,CAAA;;;;8DAKnB;AAGK;IADL,IAAI,CAAC,MAAM,EAAE,CAAC,uBAAuB,CAAC,CAAC;IAEnC,WAAA,KAAK,CAAC,IAAI,CAAC,CAAA;IACP,WAAA,KAAK,EAAE,CAAA;IACP,WAAA,QAAQ,EAAE,CAAA;IACV,WAAA,SAAS,EAAE,CAAA;;;;qDAGnB;AAGK;IADL,OAAO,CAAC,MAAM,EAAE,CAAC,uBAAuB,CAAC,CAAC;IAEtC,WAAA,KAAK,CAAC,IAAI,CAAC,CAAA;IACP,WAAA,QAAQ,EAAE,CAAA;IACV,WAAA,SAAS,EAAE,CAAA;;;;8DAGnB;AAGK;IADL,KAAK,CAAC,EAAE,EAAE,CAAC,uBAAuB,CAAC,CAAC;IAEhC,WAAA,KAAK,EAAE,CAAA;IACH,WAAA,QAAQ,EAAE,CAAA;IACV,WAAA,SAAS,EAAE,CAAA;;;;6DAGnB;AAKK;IADL,IAAI,CAAC,oBAAoB,EAAE,EAAE,CAAC;IAE9B,WAAA,KAAK,CAAC,IAAI,CAAC,CAAA;IACP,WAAA,QAAQ,EAAE,CAAA;IACV,WAAA,SAAS,EAAE,CAAA;;;;8DAgDf;AAGK;IADL,IAAI,CAAC,mBAAmB,EAAE,EAAE,CAAC;IAE7B,WAAA,KAAK,CAAC,IAAI,CAAC,CAAA;IACP,WAAA,QAAQ,EAAE,CAAA;IACV,WAAA,SAAS,EAAE,CAAA;;;;6DAoGf;AAxPQ,0BAA0B;IAFtC,KAAK,CAAC,UAAU,CAAC;IACjB,WAAW,CAAC,qBAAqB,CAAC;;GACtB,0BAA0B,CA0StC"}

package/dist/adapters/http/controllers/entities/identity-provider/types.d.ts

@@ -0,0 +1,17 @@
+import type { IIdentityProviderAccountManager, IOAuth2AuthorizationCodeRequestVerifier, IOAuth2AuthorizationStateManager, IOAuth2TokenIssuer, ISessionManager } from '../../../../../core/index.ts';
+export type IdentityProviderControllerOptions = {
+    baseURL: string;
+    cookieDomains: string[];
+    accessTokenMaxAge: number;
+    refreshTokenMaxAge: number;
+};
+export type IdentityProviderControllerContext = {
+    options: IdentityProviderControllerOptions;
+    accountManager: IIdentityProviderAccountManager;
+    codeRequestVerifier: IOAuth2AuthorizationCodeRequestVerifier;
+    stateManager: IOAuth2AuthorizationStateManager;
+    accessTokenIssuer: IOAuth2TokenIssuer;
+    refreshTokenIssuer: IOAuth2TokenIssuer;
+    sessionManager: ISessionManager;
+};
+//# sourceMappingURL=types.d.ts.map

package/dist/adapters/http/controllers/entities/identity-provider/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../../../../src/adapters/http/controllers/entities/identity-provider/types.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EACR,+BAA+B,EAC/B,uCAAuC,EACvC,gCAAgC,EAChC,kBAAkB,EAClB,eAAe,EAClB,MAAM,8BAA8B,CAAC;AAEtC,MAAM,MAAM,iCAAiC,GAAG;IAC5C,OAAO,EAAE,MAAM,CAAC;IAChB,aAAa,EAAE,MAAM,EAAE,CAAC;IAExB,iBAAiB,EAAE,MAAM,CAAC;IAC1B,kBAAkB,EAAE,MAAM,CAAC;CAC9B,CAAC;AAEF,MAAM,MAAM,iCAAiC,GAAG;IAC5C,OAAO,EAAE,iCAAiC,CAAC;IAE3C,cAAc,EAAE,+BAA+B,CAAC;IAChD,mBAAmB,EAAE,uCAAuC,CAAC;IAC7D,YAAY,EAAE,gCAAgC,CAAC;IAE/C,iBAAiB,EAAE,kBAAkB,CAAC;IACtC,kBAAkB,EAAE,kBAAkB,CAAC;IAEvC,cAAc,EAAE,eAAe,CAAC;CACnC,CAAC"}

package/dist/adapters/http/controllers/entities/identity-provider/types.js

@@ -0,0 +1,8 @@
+/*
+ * Copyright (c) 2025.
+ *  Author Peter Placzek (tada5hi)
+ *  For the full copyright and license information,
+ *  view the LICENSE file that was distributed with this source code.
+ */
+export {};
+//# sourceMappingURL=types.js.map

package/dist/adapters/http/controllers/entities/identity-provider/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../../../../../src/adapters/http/controllers/entities/identity-provider/types.ts"],"names":[],"mappings":"AAAA;;;;;GAKG"}

package/dist/adapters/http/controllers/entities/index.d.ts

@@ -0,0 +1,21 @@
+export * from './client/index.ts';
+export * from './client-permission/index.ts';
+export * from './client-role/index.ts';
+export * from './client-scope/index.ts';
+export * from './identity-provider/index.ts';
+export * from './identity-provide-role/index.ts';
+export * from './permission/index.ts';
+export * from './realm/index.ts';
+export * from './robot/index.ts';
+export * from './robot-permission/index.ts';
+export * from './robot-role/index.ts';
+export * from './role/index.ts';
+export * from './role-attribute/index.ts';
+export * from './role-permission/index.ts';
+export * from './policy/index.ts';
+export * from './scope/index.ts';
+export * from './user/index.ts';
+export * from './user-attribute/index.ts';
+export * from './user-permission/index.ts';
+export * from './user-role/index.ts';
+//# sourceMappingURL=index.d.ts.map

package/dist/adapters/http/controllers/entities/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../src/adapters/http/controllers/entities/index.ts"],"names":[],"mappings":"AAOA,cAAc,mBAAmB,CAAC;AAClC,cAAc,8BAA8B,CAAC;AAC7C,cAAc,wBAAwB,CAAC;AACvC,cAAc,yBAAyB,CAAC;AACxC,cAAc,8BAA8B,CAAC;AAC7C,cAAc,kCAAkC,CAAC;AACjD,cAAc,uBAAuB,CAAC;AACtC,cAAc,kBAAkB,CAAC;AACjC,cAAc,kBAAkB,CAAC;AACjC,cAAc,6BAA6B,CAAC;AAC5C,cAAc,uBAAuB,CAAC;AACtC,cAAc,iBAAiB,CAAC;AAChC,cAAc,2BAA2B,CAAC;AAC1C,cAAc,4BAA4B,CAAC;AAC3C,cAAc,mBAAmB,CAAC;AAClC,cAAc,kBAAkB,CAAC;AACjC,cAAc,iBAAiB,CAAC;AAChC,cAAc,2BAA2B,CAAC;AAC1C,cAAc,4BAA4B,CAAC;AAC3C,cAAc,sBAAsB,CAAC"}

package/dist/adapters/http/controllers/entities/index.js

@@ -0,0 +1,27 @@
+/*
+ * Copyright (c) 2022-2024.
+ * Author Peter Placzek (tada5hi)
+ * For the full copyright and license information,
+ * view the LICENSE file that was distributed with this source code.
+ */
+export * from "./client/index.js";
+export * from "./client-permission/index.js";
+export * from "./client-role/index.js";
+export * from "./client-scope/index.js";
+export * from "./identity-provider/index.js";
+export * from "./identity-provide-role/index.js";
+export * from "./permission/index.js";
+export * from "./realm/index.js";
+export * from "./robot/index.js";
+export * from "./robot-permission/index.js";
+export * from "./robot-role/index.js";
+export * from "./role/index.js";
+export * from "./role-attribute/index.js";
+export * from "./role-permission/index.js";
+export * from "./policy/index.js";
+export * from "./scope/index.js";
+export * from "./user/index.js";
+export * from "./user-attribute/index.js";
+export * from "./user-permission/index.js";
+export * from "./user-role/index.js";
+//# sourceMappingURL=index.js.map

package/dist/adapters/http/controllers/entities/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../../src/adapters/http/controllers/entities/index.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,cAAc,mBAAmB,CAAC;AAClC,cAAc,8BAA8B,CAAC;AAC7C,cAAc,wBAAwB,CAAC;AACvC,cAAc,yBAAyB,CAAC;AACxC,cAAc,8BAA8B,CAAC;AAC7C,cAAc,kCAAkC,CAAC;AACjD,cAAc,uBAAuB,CAAC;AACtC,cAAc,kBAAkB,CAAC;AACjC,cAAc,kBAAkB,CAAC;AACjC,cAAc,6BAA6B,CAAC;AAC5C,cAAc,uBAAuB,CAAC;AACtC,cAAc,iBAAiB,CAAC;AAChC,cAAc,2BAA2B,CAAC;AAC1C,cAAc,4BAA4B,CAAC;AAC3C,cAAc,mBAAmB,CAAC;AAClC,cAAc,kBAAkB,CAAC;AACjC,cAAc,iBAAiB,CAAC;AAChC,cAAc,2BAA2B,CAAC;AAC1C,cAAc,4BAA4B,CAAC;AAC3C,cAAc,sBAAsB,CAAC"}

package/dist/adapters/http/controllers/entities/permission/handlers/check.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"check.d.ts","sourceRoot":"","sources":["../../../../../../../src/adapters/http/controllers/entities/permission/handlers/check.ts"],"names":[],"mappings":"AAaA,OAAO,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,QAAQ,CAAC;AAQhD,wBAAsB,2BAA2B,CAAC,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,QAAQ,GAAI,OAAO,CAAC,GAAG,CAAC,CA+D5F"}

package/dist/adapters/http/controllers/entities/permission/handlers/check.js

@@ -0,0 +1,72 @@
+/*
+ * Copyright (c) 2024.
+ * Author Peter Placzek (tada5hi)
+ * For the full copyright and license information,
+ * view the LICENSE file that was distributed with this source code.
+ */
+import { PermissionChecker, PolicyDataValidator } from '@authup/access';
+import { isUUID } from '@authup/kit';
+import { NotFoundError } from '@ebec/http';
+import { RoutupContainerAdapter } from '@validup/adapter-routup';
+import { sendAccepted, useRequestParam } from 'routup';
+import { useDataSource } from 'typeorm-extension';
+import { PermissionEntity, resolveRealm } from "../../../../../database/domains/index.js";
+import { PermissionDBProvider, PolicyEngine } from "../../../../../../security/index.js";
+import { useRequestIdentity } from "../../../../request/index.js";
+export async function checkPermissionRouteHandler(req, res) {
+    const id = useRequestParam(req, 'id');
+    const dataSource = await useDataSource();
+    const repository = dataSource.getRepository(PermissionEntity);
+    let criteria;
+    if (isUUID(id)) {
+        criteria = {
+            id,
+        };
+    }
+    else {
+        const realm = await resolveRealm(useRequestParam(req, 'realmId'));
+        criteria = {
+            name: id,
+            ...(realm ? { realm_id: realm.id } : {}),
+        };
+    }
+    const entity = await repository.findOneBy(criteria);
+    if (!entity) {
+        throw new NotFoundError();
+    }
+    const validator = new PolicyDataValidator();
+    const validatorAdapter = new RoutupContainerAdapter(validator);
+    const data = await validatorAdapter.run(req);
+    if (!data.identity &&
+        data.identity !== null) {
+        data.identity = useRequestIdentity(req);
+    }
+    const ctx = {
+        name: entity.name,
+        input: data,
+    };
+    const permissionChecker = new PermissionChecker({
+        provider: new PermissionDBProvider(dataSource),
+        policyEngine: new PolicyEngine(),
+    });
+    let output;
+    try {
+        if (ctx.input && ctx.input.attributes) {
+            await permissionChecker.check(ctx);
+        }
+        else {
+            await permissionChecker.preCheck(ctx);
+        }
+        output = {
+            status: 'success',
+        };
+    }
+    catch (e) {
+        output = {
+            status: 'error',
+            data: e,
+        };
+    }
+    return sendAccepted(res, output);
+}
+//# sourceMappingURL=check.js.map

package/dist/adapters/http/controllers/entities/permission/handlers/check.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"check.js","sourceRoot":"","sources":["../../../../../../../src/adapters/http/controllers/entities/permission/handlers/check.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAIH,OAAO,EAAE,iBAAiB,EAAE,mBAAmB,EAAE,MAAM,gBAAgB,CAAC;AACxE,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AACrC,OAAO,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAC3C,OAAO,EAAE,sBAAsB,EAAE,MAAM,yBAAyB,CAAC;AAEjE,OAAO,EAAE,YAAY,EAAE,eAAe,EAAE,MAAM,QAAQ,CAAC;AACvD,OAAO,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAC;AAElD,OAAO,EAAE,gBAAgB,EAAE,YAAY,EAAE,MAAM,0CAA0C,CAAC;AAC1F,OAAO,EAAE,oBAAoB,EAAE,YAAY,EAAE,MAAM,qCAAqC,CAAC;AACzF,OAAO,EAAE,kBAAkB,EAAE,MAAM,8BAA8B,CAAC;AAElE,MAAM,CAAC,KAAK,UAAU,2BAA2B,CAAC,GAAY,EAAE,GAAa;IACzE,MAAM,EAAE,GAAG,eAAe,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;IAEtC,MAAM,UAAU,GAAG,MAAM,aAAa,EAAE,CAAC;IACzC,MAAM,UAAU,GAAG,UAAU,CAAC,aAAa,CAAC,gBAAgB,CAAC,CAAC;IAC9D,IAAI,QAA6C,CAAC;IAElD,IAAI,MAAM,CAAC,EAAE,CAAC,EAAE,CAAC;QACb,QAAQ,GAAG;YACP,EAAE;SACL,CAAC;IACN,CAAC;SAAM,CAAC;QACJ,MAAM,KAAK,GAAG,MAAM,YAAY,CAAC,eAAe,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC,CAAC;QAClE,QAAQ,GAAG;YACP,IAAI,EAAE,EAAE;YACR,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC3C,CAAC;IACN,CAAC;IAED,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;IACpD,IAAI,CAAC,MAAM,EAAE,CAAC;QACV,MAAM,IAAI,aAAa,EAAE,CAAC;IAC9B,CAAC;IAED,MAAM,SAAS,GAAG,IAAI,mBAAmB,EAAE,CAAC;IAC5C,MAAM,gBAAgB,GAAG,IAAI,sBAAsB,CAAC,SAAS,CAAC,CAAC;IAC/D,MAAM,IAAI,GAAG,MAAM,gBAAgB,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IAC7C,IACI,CAAC,IAAI,CAAC,QAAQ;QACd,IAAI,CAAC,QAAQ,KAAK,IAAI,EACxB,CAAC;QACC,IAAI,CAAC,QAAQ,GAAG,kBAAkB,CAAC,GAAG,CAAC,CAAC;IAC5C,CAAC;IAED,MAAM,GAAG,GAAmC;QACxC,IAAI,EAAE,MAAM,CAAC,IAAI;QACjB,KAAK,EAAE,IAAI;KACd,CAAC;IAEF,MAAM,iBAAiB,GAAG,IAAI,iBAAiB,CAAC;QAC5C,QAAQ,EAAE,IAAI,oBAAoB,CAAC,UAAU,CAAC;QAC9C,YAAY,EAAE,IAAI,YAAY,EAAE;KACnC,CAAC,CAAC;IAEH,IAAI,MAAmC,CAAC;IACxC,IAAI,CAAC;QACD,IAAI,GAAG,CAAC,KAAK,IAAI,GAAG,CAAC,KAAK,CAAC,UAAU,EAAE,CAAC;YACpC,MAAM,iBAAiB,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QACvC,CAAC;aAAM,CAAC;YACJ,MAAM,iBAAiB,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;QAC1C,CAAC;QAED,MAAM,GAAG;YACL,MAAM,EAAE,SAAS;SACpB,CAAC;IACN,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACT,MAAM,GAAG;YACL,MAAM,EAAE,OAAO;YACf,IAAI,EAAE,CAAU;SACnB,CAAC;IACN,CAAC;IAED,OAAO,YAAY,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;AACrC,CAAC"}

package/dist/adapters/http/controllers/entities/permission/handlers/delete.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"delete.d.ts","sourceRoot":"","sources":["../../../../../../../src/adapters/http/controllers/entities/permission/handlers/delete.ts"],"names":[],"mappings":"AASA,OAAO,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,QAAQ,CAAC;AAMhD,wBAAsB,4BAA4B,CAAC,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,QAAQ,GAAI,OAAO,CAAC,GAAG,CAAC,CAiC7F"}

package/dist/adapters/http/controllers/entities/permission/handlers/delete.js

@@ -0,0 +1,37 @@
+/*
+ * Copyright (c) 2022.
+ * Author Peter Placzek (tada5hi)
+ * For the full copyright and license information,
+ * view the LICENSE file that was distributed with this source code.
+ */
+import { BadRequestError, NotFoundError } from '@ebec/http';
+import { PermissionName } from '@authup/core-kit';
+import { sendAccepted } from 'routup';
+import { useDataSource } from 'typeorm-extension';
+import { PermissionEntity } from "../../../../../database/domains/index.js";
+import { useRequestParamID, useRequestPermissionChecker } from "../../../../request/index.js";
+export async function deletePermissionRouteHandler(req, res) {
+    const id = useRequestParamID(req);
+    const permissionChecker = useRequestPermissionChecker(req);
+    await permissionChecker.preCheck({ name: PermissionName.PERMISSION_DELETE });
+    const dataSource = await useDataSource();
+    const repository = dataSource.getRepository(PermissionEntity);
+    const entity = await repository.findOneBy({ id });
+    if (!entity) {
+        throw new NotFoundError();
+    }
+    if (entity.built_in) {
+        throw new BadRequestError('A built-in permission can not be deleted.');
+    }
+    await permissionChecker.check({
+        name: PermissionName.PERMISSION_DELETE,
+        input: {
+            attributes: entity,
+        },
+    });
+    const { id: entityId } = entity;
+    await repository.remove(entity);
+    entity.id = entityId;
+    return sendAccepted(res, entity);
+}
+//# sourceMappingURL=delete.js.map

package/dist/adapters/http/controllers/entities/permission/handlers/delete.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"delete.js","sourceRoot":"","sources":["../../../../../../../src/adapters/http/controllers/entities/permission/handlers/delete.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,eAAe,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAC5D,OAAO,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAC;AAElD,OAAO,EAAE,YAAY,EAAE,MAAM,QAAQ,CAAC;AACtC,OAAO,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAC;AAClD,OAAO,EAAE,gBAAgB,EAAE,MAAM,0CAA0C,CAAC;AAC5E,OAAO,EAAE,iBAAiB,EAAE,2BAA2B,EAAE,MAAM,8BAA8B,CAAC;AAE9F,MAAM,CAAC,KAAK,UAAU,4BAA4B,CAAC,GAAY,EAAE,GAAa;IAC1E,MAAM,EAAE,GAAG,iBAAiB,CAAC,GAAG,CAAC,CAAC;IAElC,MAAM,iBAAiB,GAAG,2BAA2B,CAAC,GAAG,CAAC,CAAC;IAC3D,MAAM,iBAAiB,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,cAAc,CAAC,iBAAiB,EAAE,CAAC,CAAC;IAE7E,MAAM,UAAU,GAAG,MAAM,aAAa,EAAE,CAAC;IACzC,MAAM,UAAU,GAAG,UAAU,CAAC,aAAa,CAAC,gBAAgB,CAAC,CAAC;IAE9D,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,SAAS,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;IAElD,IAAI,CAAC,MAAM,EAAE,CAAC;QACV,MAAM,IAAI,aAAa,EAAE,CAAC;IAC9B,CAAC;IAED,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;QAClB,MAAM,IAAI,eAAe,CAAC,2CAA2C,CAAC,CAAC;IAC3E,CAAC;IAED,MAAM,iBAAiB,CAAC,KAAK,CAAC;QAC1B,IAAI,EAAE,cAAc,CAAC,iBAAiB;QACtC,KAAK,EAAE;YACH,UAAU,EAAE,MAAM;SACrB;KACJ,CAAC,CAAC;IAEH,MAAM,EAAE,EAAE,EAAE,QAAQ,EAAE,GAAG,MAAM,CAAC;IAEhC,MAAM,UAAU,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAEhC,MAAM,CAAC,EAAE,GAAG,QAAQ,CAAC;IAErB,OAAO,YAAY,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;AACrC,CAAC"}

package/dist/adapters/http/controllers/entities/permission/handlers/index.d.ts

@@ -0,0 +1,5 @@
+export * from './check.ts';
+export * from './write.ts';
+export * from './delete.ts';
+export * from './read.ts';
+//# sourceMappingURL=index.d.ts.map

package/dist/adapters/http/controllers/entities/permission/handlers/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../../../src/adapters/http/controllers/entities/permission/handlers/index.ts"],"names":[],"mappings":"AAOA,cAAc,YAAY,CAAC;AAC3B,cAAc,YAAY,CAAC;AAC3B,cAAc,aAAa,CAAC;AAC5B,cAAc,WAAW,CAAC"}

package/dist/adapters/http/controllers/entities/permission/handlers/index.js

@@ -0,0 +1,11 @@
+/*
+ * Copyright (c) 2022.
+ * Author Peter Placzek (tada5hi)
+ * For the full copyright and license information,
+ * view the LICENSE file that was distributed with this source code.
+ */
+export * from "./check.js";
+export * from "./write.js";
+export * from "./delete.js";
+export * from "./read.js";
+//# sourceMappingURL=index.js.map

package/dist/adapters/http/controllers/entities/permission/handlers/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../../../../src/adapters/http/controllers/entities/permission/handlers/index.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,cAAc,YAAY,CAAC;AAC3B,cAAc,YAAY,CAAC;AAC3B,cAAc,aAAa,CAAC;AAC5B,cAAc,WAAW,CAAC"}

package/dist/adapters/http/controllers/entities/permission/handlers/read.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"read.d.ts","sourceRoot":"","sources":["../../../../../../../src/adapters/http/controllers/entities/permission/handlers/read.ts"],"names":[],"mappings":"AAUA,OAAO,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,QAAQ,CAAC;AAShD,wBAAsB,6BAA6B,CAAC,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,CAkD7F;AAED,wBAAsB,4BAA4B,CAAC,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,CAiD5F"}