@authup/server-core 1.0.0-beta.27 → 1.0.0-beta.29

package/dist/services/identity-provider/account/module.js

@@ -1,309 +0,0 @@
-"use strict";
-/*
- * Copyright (c) 2024-2024.
- * Author Peter Placzek (tada5hi)
- * For the full copyright and license information,
- * view the LICENSE file that was distributed with this source code.
- */
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.IdentityProviderAccountService = void 0;
-const core_kit_1 = require("@authup/core-kit");
-const kit_1 = require("@authup/kit");
-const specs_1 = require("@authup/specs");
-const http_1 = require("@ebec/http");
-const smob_1 = require("smob");
-const validup_1 = require("validup");
-const domains_1 = require("../../../database/domains");
-class IdentityProviderAccountService {
-    constructor(dataSource, provider) {
-        this.dataSource = dataSource;
-        this.provider = provider;
-        this.userRepository = new domains_1.UserRepository(dataSource);
-        this.userValidator = new core_kit_1.UserValidator();
-        this.providerAccountRepository = dataSource.getRepository(domains_1.IdentityProviderAccountEntity);
-    }
-    async save(identity) {
-        const account = await this.saveAccount(identity);
-        await this.saveRoles(identity, account);
-        await this.savePermissions(identity, account);
-        return account;
-    }
-    async saveAccount(identity) {
-        let account = await this.providerAccountRepository.findOne({
-            where: {
-                provider_user_id: identity.id,
-                provider_id: this.provider.id,
-            },
-            relations: ['user'],
-        });
-        if (account) {
-            account.user = await this.updateUser(identity, account.user);
-            identity.status = 'updated';
-        }
-        else {
-            const user = await this.createUser(identity);
-            account = this.providerAccountRepository.create({
-                provider_id: this.provider.id,
-                provider_user_id: identity.id,
-                provider_user_name: user.name, // todo: parse identity.name
-                provider_realm_id: this.provider.realm_id,
-                user,
-                user_id: user.id,
-                user_realm_id: user.realm_id,
-            });
-            identity.status = 'created';
-        }
-        await this.providerAccountRepository.save(account);
-        return account;
-    }
-    async saveRoles(identity, account) {
-        const providerRoleRepository = this.dataSource.getRepository(domains_1.IdentityProviderRoleMappingEntity);
-        const entities = await providerRoleRepository.findBy({
-            provider_id: this.provider.id,
-        });
-        const items = [];
-        for (let i = 0; i < entities.length; i++) {
-            const entity = entities[i];
-            items.push({
-                id: entity.role_id,
-                realmId: entity.role_realm_id,
-                operation: this.getSyncOperationForMapping(identity, entity),
-            });
-        }
-        await this.userRepository.saveRoles({
-            items,
-            id: account.user_id,
-            realmId: account.user_realm_id,
-        });
-    }
-    async savePermissions(identity, account) {
-        const providerRoleRepository = this.dataSource.getRepository(domains_1.IdentityProviderPermissionMappingEntity);
-        const entities = await providerRoleRepository.findBy({
-            provider_id: this.provider.id,
-        });
-        const items = [];
-        for (let i = 0; i < entities.length; i++) {
-            const entity = entities[i];
-            items.push({
-                id: entity.permission_id,
-                realmId: entity.permission_realm_id,
-                operation: this.getSyncOperationForMapping(identity, entity),
-            });
-        }
-        await this.userRepository.savePermissions({
-            items,
-            id: account.user_id,
-            realmId: account.user_realm_id,
-        });
-    }
-    getSyncOperationForMapping(identity, mapping) {
-        let operation;
-        if (mapping.synchronization_mode === core_kit_1.IdentityProviderMappingSyncMode.ONCE &&
-            identity.status === 'updated') {
-            operation = domains_1.UserRelationItemSyncOperation.NONE;
-        }
-        else if (!mapping.name || !mapping.value) {
-            operation = domains_1.UserRelationItemSyncOperation.CREATE;
-        }
-        else {
-            const value = (0, specs_1.getJWTClaimByPattern)(identity.data, mapping.name, mapping.value, mapping.value_is_regex);
-            if (value.length === 0) {
-                operation = domains_1.UserRelationItemSyncOperation.DELETE;
-            }
-            else {
-                operation = domains_1.UserRelationItemSyncOperation.CREATE;
-            }
-        }
-        return operation;
-    }
-    async getClaimAttributes(identity, validatorGroup) {
-        const repository = this.dataSource.getRepository(domains_1.IdentityProviderAttributeMappingEntity);
-        const entities = await repository.findBy({
-            provider_id: this.provider.id,
-        });
-        const attributes = {};
-        for (let i = 0; i < entities.length; i++) {
-            const entity = entities[i];
-            const value = (0, specs_1.getJWTClaimByPattern)(identity.data, entity.source_name, entity.source_value, entity.source_value_is_regex);
-            if (value.length === 0) {
-                continue;
-            }
-            if (validatorGroup === core_kit_1.ValidatorGroup.UPDATE &&
-                entity.synchronization_mode === core_kit_1.IdentityProviderMappingSyncMode.ONCE) {
-                continue;
-            }
-            if (entity.target_value) {
-                attributes[entity.target_name] = {
-                    value: [entity.target_value],
-                    mode: entity.synchronization_mode,
-                };
-            }
-            else {
-                attributes[entity.target_name] = {
-                    value,
-                    mode: entity.synchronization_mode,
-                };
-            }
-        }
-        return attributes;
-    }
-    groupClaimAttributes(input) {
-        const columnPropertyNames = this.userRepository.metadata.columns.map((c) => c.propertyName);
-        const relationPropertyNames = this.userRepository.metadata.relations.map((r) => r.propertyName);
-        const internalAllowed = [
-            'first_name',
-            'last_name',
-            'avatar',
-            'cover',
-            'display_name',
-        ];
-        const internal = {};
-        const external = {};
-        const inputKeys = Object.keys(input);
-        for (let i = 0; i < inputKeys.length; i++) {
-            const attributeKey = inputKeys[i];
-            let index = relationPropertyNames.indexOf(attributeKey);
-            if (index !== -1) {
-                continue;
-            }
-            const value = (0, kit_1.toArrayElement)(input[attributeKey].value);
-            if (typeof value === 'undefined') {
-                continue;
-            }
-            index = columnPropertyNames.indexOf(attributeKey);
-            if (index === -1) {
-                external[attributeKey] = value;
-            }
-            else {
-                const internalAllowedIndex = internalAllowed.indexOf(attributeKey);
-                if (internalAllowedIndex !== -1) {
-                    internal[attributeKey] = value;
-                }
-            }
-        }
-        return [internal, external];
-    }
-    async updateUser(identity, entity) {
-        const claimAttributes = await this.getClaimAttributes(identity, core_kit_1.ValidatorGroup.UPDATE);
-        const [attributesNew, attributesExtraNew,] = this.groupClaimAttributes(claimAttributes);
-        const attributesExtraOld = await this.userRepository.findOneWithEAByPrimaryColumn(entity.id);
-        const attributesExtra = (0, smob_1.assign)(attributesExtraOld, attributesExtraNew);
-        const attributesNewKeys = Object.keys(attributesNew);
-        while (attributesNewKeys.length > 0) {
-            try {
-                const validation = await this.userValidator.run(attributesNew, {
-                    pathsToInclude: attributesNewKeys,
-                    group: core_kit_1.ValidatorGroup.UPDATE,
-                });
-                (0, kit_1.extendObject)(entity, validation);
-                break;
-            }
-            catch (e) {
-                if (!(e instanceof validup_1.ValidupNestedError) ||
-                    e.children.length === 0) {
-                    throw new Error('Unknown validation error occurred.');
-                }
-                let keysDeleted = 0;
-                for (let i = 0; i < e.children.length; i++) {
-                    const child = e.children[i];
-                    const index = attributesNewKeys.indexOf(child.path);
-                    if (index !== -1) {
-                        attributesNewKeys.splice(index, 1);
-                        keysDeleted++;
-                    }
-                }
-                if (keysDeleted === 0) {
-                    throw new Error('Validation errors can not be fixed.');
-                }
-            }
-        }
-        await this.userRepository.saveOneWithEA(entity, attributesExtra);
-        return entity;
-    }
-    async createUser(identity) {
-        const claimAttributes = await this.getClaimAttributes(identity, core_kit_1.ValidatorGroup.CREATE);
-        const [attributes, attributesExtra,] = this.groupClaimAttributes(claimAttributes);
-        attributes.name_locked = false;
-        attributes.realm_id = this.provider.realm_id;
-        attributes.active = true;
-        if (identity.attributeCandidates) {
-            const attributeCandidateKeys = Object.keys(identity.attributeCandidates);
-            for (let i = 0; i < attributeCandidateKeys.length; i++) {
-                if (!(attributeCandidateKeys[i] in attributes)) {
-                    attributes[attributeCandidateKeys[i]] = identity.attributeCandidates[attributeCandidateKeys[i]].shift();
-                }
-            }
-        }
-        let attempts = 0;
-        while (attempts < 10) {
-            attempts++;
-            let validationResult;
-            try {
-                validationResult = await this.userValidator.run(attributes, {
-                    group: core_kit_1.ValidatorGroup.CREATE,
-                });
-            }
-            catch (e) {
-                if (!(e instanceof validup_1.ValidupNestedError)) {
-                    throw new Error('Unknown validation error occurred.');
-                }
-                let retry = false;
-                for (let i = 0; i < e.children.length; i++) {
-                    const child = e.children[i];
-                    if (Array.isArray(attributes[child.path]) &&
-                        attributes[child.path].length > 0) {
-                        const [first, ...rest] = attributes[child.path];
-                        attributes[child.path] = first;
-                        if (rest.length > 0) {
-                            if (!identity.attributeCandidates) {
-                                identity.attributeCandidates = {};
-                            }
-                            if (!identity.attributeCandidates[child.path]) {
-                                identity.attributeCandidates[child.path] = [];
-                            }
-                            identity.attributeCandidates[child.path].push(...rest);
-                        }
-                        retry = true;
-                        break;
-                    }
-                    if (identity.attributeCandidates &&
-                        identity.attributeCandidates[child.path] &&
-                        identity.attributeCandidates[child.path].length > 0) {
-                        attributes[child.path] = identity.attributeCandidates[child.path].shift();
-                        retry = true;
-                        break;
-                    }
-                    if (attributes[child.path]) {
-                        attributes[child.path] = null;
-                        break;
-                    }
-                }
-                if (retry) {
-                    continue;
-                }
-                else {
-                    throw e;
-                }
-            }
-            try {
-                const output = this.userRepository.create(validationResult);
-                await this.userRepository.saveOneWithEA(output, attributesExtra);
-                return output;
-            }
-            catch (e) {
-                // todo: conflict can only occur due name unique constraint
-                if (identity.attributeCandidates &&
-                    identity.attributeCandidates.name &&
-                    identity.attributeCandidates.name.length > 0) {
-                    attributes.name = identity.attributeCandidates.name.shift();
-                }
-                else {
-                    attributes.name = (0, kit_1.createNanoID)('0123456789abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ-_', 30);
-                }
-            }
-        }
-        throw new http_1.BadRequestError('The user could not be created.');
-    }
-}
-exports.IdentityProviderAccountService = IdentityProviderAccountService;
-//# sourceMappingURL=module.js.map

package/dist/services/identity-provider/account/module.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"module.js","sourceRoot":"","sources":["../../../../src/services/identity-provider/account/module.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;;AAQH,+CAI0B;AAC1B,qCAIqB;AACrB,yCAAqD;AACrD,qCAA6C;AAC7C,+BAA8B;AAE9B,qCAA6C;AAK7C,uDAOmC;AAQnC,MAAa,8BAA8B;IAWvC,YACI,UAAsB,EACtB,QAA0B;QAE1B,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC;QAC7B,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAC;QAEzB,IAAI,CAAC,cAAc,GAAG,IAAI,wBAAc,CAAC,UAAU,CAAC,CAAC;QACrD,IAAI,CAAC,aAAa,GAAG,IAAI,wBAAa,EAAE,CAAC;QAEzC,IAAI,CAAC,yBAAyB,GAAG,UAAU,CAAC,aAAa,CAAC,uCAA6B,CAAC,CAAC;IAC7F,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,QAAkC;QACzC,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAC;QAEjD,MAAM,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;QACxC,MAAM,IAAI,CAAC,eAAe,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;QAE9C,OAAO,OAAO,CAAC;IACnB,CAAC;IAES,KAAK,CAAC,WAAW,CAAC,QAAkC;QAC1D,IAAI,OAAO,GAAG,MAAM,IAAI,CAAC,yBAAyB,CAAC,OAAO,CAAC;YACvD,KAAK,EAAE;gBACH,gBAAgB,EAAE,QAAQ,CAAC,EAAE;gBAC7B,WAAW,EAAE,IAAI,CAAC,QAAQ,CAAC,EAAE;aAChC;YACD,SAAS,EAAE,CAAC,MAAM,CAAC;SACtB,CAAC,CAAC;QAEH,IAAI,OAAO,EAAE,CAAC;YACV,OAAO,CAAC,IAAI,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC;YAE7D,QAAQ,CAAC,MAAM,GAAG,SAAS,CAAC;QAChC,CAAC;aAAM,CAAC;YACJ,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC;YAE7C,OAAO,GAAG,IAAI,CAAC,yBAAyB,CAAC,MAAM,CAAC;gBAC5C,WAAW,EAAE,IAAI,CAAC,QAAQ,CAAC,EAAE;gBAC7B,gBAAgB,EAAE,QAAQ,CAAC,EAAE;gBAC7B,kBAAkB,EAAE,IAAI,CAAC,IAAI,EAAE,4BAA4B;gBAC3D,iBAAiB,EAAE,IAAI,CAAC,QAAQ,CAAC,QAAQ;gBACzC,IAAI;gBACJ,OAAO,EAAE,IAAI,CAAC,EAAE;gBAChB,aAAa,EAAE,IAAI,CAAC,QAAQ;aAC/B,CAAC,CAAC;YAEH,QAAQ,CAAC,MAAM,GAAG,SAAS,CAAC;QAChC,CAAC;QAED,MAAM,IAAI,CAAC,yBAAyB,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAEnD,OAAO,OAAO,CAAC;IACnB,CAAC;IAES,KAAK,CAAC,SAAS,CACrB,QAAkC,EAClC,OAAsC;QAEtC,MAAM,sBAAsB,GAAG,IAAI,CAAC,UAAU,CAAC,aAAa,CAAC,2CAAiC,CAAC,CAAC;QAChG,MAAM,QAAQ,GAAG,MAAM,sBAAsB,CAAC,MAAM,CAAC;YACjD,WAAW,EAAE,IAAI,CAAC,QAAQ,CAAC,EAAE;SAChC,CAAC,CAAC;QAEH,MAAM,KAAK,GAA4B,EAAE,CAAC;QAC1C,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,QAAQ,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YACvC,MAAM,MAAM,GAAG,QAAQ,CAAC,CAAC,CAAC,CAAC;YAE3B,KAAK,CAAC,IAAI,CAAC;gBACP,EAAE,EAAE,MAAM,CAAC,OAAO;gBAClB,OAAO,EAAE,MAAM,CAAC,aAAa;gBAC7B,SAAS,EAAE,IAAI,CAAC,0BAA0B,CAAC,QAAQ,EAAE,MAAM,CAAC;aAC/D,CAAC,CAAC;QACP,CAAC;QAED,MAAM,IAAI,CAAC,cAAc,CAAC,SAAS,CAAC;YAChC,KAAK;YACL,EAAE,EAAE,OAAO,CAAC,OAAO;YACnB,OAAO,EAAE,OAAO,CAAC,aAAa;SACjC,CAAC,CAAC;IACP,CAAC;IAES,KAAK,CAAC,eAAe,CAC3B,QAAkC,EAClC,OAAsC;QAEtC,MAAM,sBAAsB,GAAG,IAAI,CAAC,UAAU,CAAC,aAAa,CAAC,iDAAuC,CAAC,CAAC;QACtG,MAAM,QAAQ,GAAG,MAAM,sBAAsB,CAAC,MAAM,CAAC;YACjD,WAAW,EAAE,IAAI,CAAC,QAAQ,CAAC,EAAE;SAChC,CAAC,CAAC;QAEH,MAAM,KAAK,GAA4B,EAAE,CAAC;QAC1C,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,QAAQ,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YACvC,MAAM,MAAM,GAAG,QAAQ,CAAC,CAAC,CAAC,CAAC;YAE3B,KAAK,CAAC,IAAI,CAAC;gBACP,EAAE,EAAE,MAAM,CAAC,aAAa;gBACxB,OAAO,EAAE,MAAM,CAAC,mBAAmB;gBACnC,SAAS,EAAE,IAAI,CAAC,0BAA0B,CAAC,QAAQ,EAAE,MAAM,CAAC;aAC/D,CAAC,CAAC;QACP,CAAC;QAED,MAAM,IAAI,CAAC,cAAc,CAAC,eAAe,CAAC;YACtC,KAAK;YACL,EAAE,EAAE,OAAO,CAAC,OAAO;YACnB,OAAO,EAAE,OAAO,CAAC,aAAa;SACjC,CAAC,CAAC;IACP,CAAC;IAES,0BAA0B,CAChC,QAAkC,EAClC,OAAwE;QAExE,IAAI,SAAyC,CAAC;QAC9C,IACI,OAAO,CAAC,oBAAoB,KAAK,0CAA+B,CAAC,IAAI;YACrE,QAAQ,CAAC,MAAM,KAAK,SAAS,EAC/B,CAAC;YACC,SAAS,GAAG,uCAA6B,CAAC,IAAI,CAAC;QACnD,CAAC;aAAM,IAAI,CAAC,OAAO,CAAC,IAAI,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;YACzC,SAAS,GAAG,uCAA6B,CAAC,MAAM,CAAC;QACrD,CAAC;aAAM,CAAC;YACJ,MAAM,KAAK,GAAG,IAAA,4BAAoB,EAC9B,QAAQ,CAAC,IAAI,EACb,OAAO,CAAC,IAAI,EACZ,OAAO,CAAC,KAAK,EACb,OAAO,CAAC,cAAc,CACzB,CAAC;YAEF,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBACrB,SAAS,GAAG,uCAA6B,CAAC,MAAM,CAAC;YACrD,CAAC;iBAAM,CAAC;gBACJ,SAAS,GAAG,uCAA6B,CAAC,MAAM,CAAC;YACrD,CAAC;QACL,CAAC;QAED,OAAO,SAAS,CAAC;IACrB,CAAC;IAES,KAAK,CAAC,kBAAkB,CAC9B,QAAkC,EAClC,cAA8B;QAE9B,MAAM,UAAU,GAAG,IAAI,CAAC,UAAU,CAAC,aAAa,CAAC,gDAAsC,CAAC,CAAC;QACzF,MAAM,QAAQ,GAAG,MAAM,UAAU,CAAC,MAAM,CAAC;YACrC,WAAW,EAAE,IAAI,CAAC,QAAQ,CAAC,EAAE;SAChC,CAAC,CAAC;QAEH,MAAM,UAAU,GAAmC,EAAE,CAAC;QAEtD,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,QAAQ,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YACvC,MAAM,MAAM,GAAG,QAAQ,CAAC,CAAC,CAAC,CAAC;YAE3B,MAAM,KAAK,GAAG,IAAA,4BAAoB,EAC9B,QAAQ,CAAC,IAAI,EACb,MAAM,CAAC,WAAW,EAClB,MAAM,CAAC,YAAY,EACnB,MAAM,CAAC,qBAAqB,CAC/B,CAAC;YAEF,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBACrB,SAAS;YACb,CAAC;YAED,IACI,cAAc,KAAK,yBAAc,CAAC,MAAM;gBACxC,MAAM,CAAC,oBAAoB,KAAK,0CAA+B,CAAC,IAAI,EACtE,CAAC;gBACC,SAAS;YACb,CAAC;YAED,IAAI,MAAM,CAAC,YAAY,EAAE,CAAC;gBACtB,UAAU,CAAC,MAAM,CAAC,WAAW,CAAC,GAAG;oBAC7B,KAAK,EAAE,CAAC,MAAM,CAAC,YAAY,CAAC;oBAC5B,IAAI,EAAE,MAAM,CAAC,oBAAoB;iBACpC,CAAC;YACN,CAAC;iBAAM,CAAC;gBACJ,UAAU,CAAC,MAAM,CAAC,WAAW,CAAC,GAAG;oBAC7B,KAAK;oBACL,IAAI,EAAE,MAAM,CAAC,oBAAoB;iBACpC,CAAC;YACN,CAAC;QACL,CAAC;QAED,OAAO,UAAU,CAAC;IACtB,CAAC;IAED,oBAAoB,CAAC,KAAqC;QACtD,MAAM,mBAAmB,GAAG,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC;QAC5F,MAAM,qBAAqB,GAAG,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC;QAEhG,MAAM,eAAe,GAAG;YACpB,YAAY;YACZ,WAAW;YACX,QAAQ;YACR,OAAO;YACP,cAAc;SACjB,CAAC;QAEF,MAAM,QAAQ,GAAmB,EAAE,CAAC;QACpC,MAAM,QAAQ,GAAyB,EAAE,CAAC;QAE1C,MAAM,SAAS,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACrC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,SAAS,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YACxC,MAAM,YAAY,GAAG,SAAS,CAAC,CAAC,CAAC,CAAC;YAElC,IAAI,KAAK,GAAY,qBAAqB,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;YACjE,IAAI,KAAK,KAAK,CAAC,CAAC,EAAE,CAAC;gBACf,SAAS;YACb,CAAC;YAED,MAAM,KAAK,GAAG,IAAA,oBAAc,EAAC,KAAK,CAAC,YAAY,CAAC,CAAC,KAAK,CAAC,CAAC;YACxD,IAAI,OAAO,KAAK,KAAK,WAAW,EAAE,CAAC;gBAC/B,SAAS;YACb,CAAC;YAED,KAAK,GAAG,mBAAmB,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;YAClD,IAAI,KAAK,KAAK,CAAC,CAAC,EAAE,CAAC;gBACf,QAAQ,CAAC,YAAY,CAAC,GAAG,KAAK,CAAC;YACnC,CAAC;iBAAM,CAAC;gBACJ,MAAM,oBAAoB,GAAG,eAAe,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;gBACnE,IAAI,oBAAoB,KAAK,CAAC,CAAC,EAAE,CAAC;oBAC9B,QAAQ,CAAC,YAAY,CAAC,GAAG,KAAK,CAAC;gBACnC,CAAC;YACL,CAAC;QACL,CAAC;QAED,OAAO,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;IAChC,CAAC;IAES,KAAK,CAAC,UAAU,CACtB,QAAkC,EAClC,MAAkB;QAElB,MAAM,eAAe,GAAG,MAAM,IAAI,CAAC,kBAAkB,CACjD,QAAQ,EACR,yBAAc,CAAC,MAAM,CACxB,CAAC;QAEF,MAAM,CACF,aAAa,EACb,kBAAkB,EACrB,GAAG,IAAI,CAAC,oBAAoB,CAAC,eAAe,CAAC,CAAC;QAE/C,MAAM,kBAAkB,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,4BAA4B,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QAC7F,MAAM,eAAe,GAAG,IAAA,aAAM,EAAC,kBAAkB,EAAE,kBAAkB,CAAC,CAAC;QAEvE,MAAM,iBAAiB,GAAG,MAAM,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;QACrD,OAAO,iBAAiB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAClC,IAAI,CAAC;gBACD,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,aAAa,EAAE;oBAC3D,cAAc,EAAE,iBAAiB;oBACjC,KAAK,EAAE,yBAAc,CAAC,MAAM;iBAC/B,CAAC,CAAC;gBAEH,IAAA,kBAAY,EAAC,MAAM,EAAE,UAAU,CAAC,CAAC;gBAEjC,MAAM;YACV,CAAC;YAAC,OAAO,CAAC,EAAE,CAAC;gBACT,IACI,CAAC,CAAC,CAAC,YAAY,4BAAkB,CAAC;oBAClC,CAAC,CAAC,QAAQ,CAAC,MAAM,KAAK,CAAC,EACzB,CAAC;oBACC,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC;gBAC1D,CAAC;gBAED,IAAI,WAAW,GAAG,CAAC,CAAC;gBAEpB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;oBACzC,MAAM,KAAK,GAAG,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;oBAE5B,MAAM,KAAK,GAAG,iBAAiB,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;oBACpD,IAAI,KAAK,KAAK,CAAC,CAAC,EAAE,CAAC;wBACf,iBAAiB,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;wBACnC,WAAW,EAAE,CAAC;oBAClB,CAAC;gBACL,CAAC;gBAED,IAAI,WAAW,KAAK,CAAC,EAAE,CAAC;oBACpB,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAC;gBAC3D,CAAC;YACL,CAAC;QACL,CAAC;QAED,MAAM,IAAI,CAAC,cAAc,CAAC,aAAa,CAAC,MAAM,EAAE,eAAe,CAAC,CAAC;QAEjE,OAAO,MAAM,CAAC;IAClB,CAAC;IAES,KAAK,CAAC,UAAU,CACtB,QAAkC;QAElC,MAAM,eAAe,GAAG,MAAM,IAAI,CAAC,kBAAkB,CACjD,QAAQ,EACR,yBAAc,CAAC,MAAM,CACxB,CAAC;QAEF,MAAM,CACF,UAAU,EACV,eAAe,EAClB,GAAG,IAAI,CAAC,oBAAoB,CAAC,eAAe,CAAC,CAAC;QAE/C,UAAU,CAAC,WAAW,GAAG,KAAK,CAAC;QAC/B,UAAU,CAAC,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC;QAC7C,UAAU,CAAC,MAAM,GAAG,IAAI,CAAC;QAEzB,IAAI,QAAQ,CAAC,mBAAmB,EAAE,CAAC;YAC/B,MAAM,sBAAsB,GAAG,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,mBAAmB,CAAC,CAAC;YACzE,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,sBAAsB,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;gBACrD,IAAI,CAAC,CAAC,sBAAsB,CAAC,CAAC,CAAC,IAAI,UAAU,CAAC,EAAE,CAAC;oBAC7C,UAAU,CAAC,sBAAsB,CAAC,CAAC,CAAC,CAAC,GAAG,QAAQ,CAAC,mBAAmB,CAAC,sBAAsB,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC;gBAC5G,CAAC;YACL,CAAC;QACL,CAAC;QAED,IAAI,QAAQ,GAAY,CAAC,CAAC;QAC1B,OAAO,QAAQ,GAAG,EAAE,EAAE,CAAC;YACnB,QAAQ,EAAE,CAAC;YAEX,IAAI,gBAAuB,CAAC;YAE5B,IAAI,CAAC;gBACD,gBAAgB,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,UAAU,EAAE;oBACxD,KAAK,EAAE,yBAAc,CAAC,MAAM;iBAC/B,CAAC,CAAC;YACP,CAAC;YAAC,OAAO,CAAM,EAAE,CAAC;gBACd,IAAI,CAAC,CAAC,CAAC,YAAY,4BAAkB,CAAC,EAAE,CAAC;oBACrC,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC;gBAC1D,CAAC;gBAED,IAAI,KAAK,GAAG,KAAK,CAAC;gBAClB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;oBACzC,MAAM,KAAK,GAAG,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;oBAE5B,IACI,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;wBACrC,UAAU,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,GAAG,CAAC,EACnC,CAAC;wBACC,MAAM,CAAC,KAAK,EAAE,GAAG,IAAI,CAAC,GAAG,UAAU,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;wBAChD,UAAU,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC;wBAE/B,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;4BAClB,IAAI,CAAC,QAAQ,CAAC,mBAAmB,EAAE,CAAC;gCAChC,QAAQ,CAAC,mBAAmB,GAAG,EAAE,CAAC;4BACtC,CAAC;4BAED,IAAI,CAAC,QAAQ,CAAC,mBAAmB,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;gCAC5C,QAAQ,CAAC,mBAAmB,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC;4BAClD,CAAC;4BAED,QAAQ,CAAC,mBAAmB,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,CAAC;wBAC3D,CAAC;wBAED,KAAK,GAAG,IAAI,CAAC;wBACb,MAAM;oBACV,CAAC;oBAED,IACI,QAAQ,CAAC,mBAAmB;wBAC5B,QAAQ,CAAC,mBAAmB,CAAC,KAAK,CAAC,IAAI,CAAC;wBACxC,QAAQ,CAAC,mBAAmB,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,GAAG,CAAC,EACrD,CAAC;wBACC,UAAU,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,QAAQ,CAAC,mBAAmB,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,CAAC;wBAC1E,KAAK,GAAG,IAAI,CAAC;wBACb,MAAM;oBACV,CAAC;oBAED,IAAI,UAAU,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;wBACzB,UAAU,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;wBAC9B,MAAM;oBACV,CAAC;gBACL,CAAC;gBAED,IAAI,KAAK,EAAE,CAAC;oBACR,SAAS;gBACb,CAAC;qBAAM,CAAC;oBACJ,MAAM,CAAC,CAAC;gBACZ,CAAC;YACL,CAAC;YAED,IAAI,CAAC;gBACD,MAAM,MAAM,GAAG,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC;gBAC5D,MAAM,IAAI,CAAC,cAAc,CAAC,aAAa,CAAC,MAAM,EAAE,eAAe,CAAC,CAAC;gBAEjE,OAAO,MAAM,CAAC;YAClB,CAAC;YAAC,OAAO,CAAC,EAAE,CAAC;gBACT,2DAA2D;gBAC3D,IACI,QAAQ,CAAC,mBAAmB;oBAC5B,QAAQ,CAAC,mBAAmB,CAAC,IAAI;oBACjC,QAAQ,CAAC,mBAAmB,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,EAC9C,CAAC;oBACC,UAAU,CAAC,IAAI,GAAG,QAAQ,CAAC,mBAAmB,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC;gBAChE,CAAC;qBAAM,CAAC;oBACJ,UAAU,CAAC,IAAI,GAAG,IAAA,kBAAY,EAAC,kEAAkE,EAAE,EAAE,CAAC,CAAC;gBAC3G,CAAC;YACL,CAAC;QACL,CAAC;QAED,MAAM,IAAI,sBAAe,CAAC,gCAAgC,CAAC,CAAC;IAChE,CAAC;CACJ;AA7ZD,wEA6ZC"}

package/dist/services/identity-provider/flow/core/index.d.ts

@@ -1,4 +0,0 @@
-export * from './ldap';
-export * from './oauth2';
-export * from './openid';
-//# sourceMappingURL=index.d.ts.map

package/dist/services/identity-provider/flow/core/index.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../src/services/identity-provider/flow/core/index.ts"],"names":[],"mappings":"AAOA,cAAc,QAAQ,CAAC;AACvB,cAAc,UAAU,CAAC;AACzB,cAAc,UAAU,CAAC"}

package/dist/services/identity-provider/flow/core/index.js

@@ -1,26 +0,0 @@
-"use strict";
-/*
- * Copyright (c) 2023.
- * Author Peter Placzek (tada5hi)
- * For the full copyright and license information,
- * view the LICENSE file that was distributed with this source code.
- */
-var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    var desc = Object.getOwnPropertyDescriptor(m, k);
-    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
-      desc = { enumerable: true, get: function() { return m[k]; } };
-    }
-    Object.defineProperty(o, k2, desc);
-}) : (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    o[k2] = m[k];
-}));
-var __exportStar = (this && this.__exportStar) || function(m, exports) {
-    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
-};
-Object.defineProperty(exports, "__esModule", { value: true });
-__exportStar(require("./ldap"), exports);
-__exportStar(require("./oauth2"), exports);
-__exportStar(require("./openid"), exports);
-//# sourceMappingURL=index.js.map

package/dist/services/identity-provider/flow/core/index.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../../src/services/identity-provider/flow/core/index.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;;;;;;;;;;;;;;;AAEH,yCAAuB;AACvB,2CAAyB;AACzB,2CAAyB"}

package/dist/services/identity-provider/flow/core/ldap.d.ts

@@ -1,14 +0,0 @@
-import { LdapClient } from '../../../../core';
-import type { ILdapIdentityProviderFlow, IdentityProviderIdentity, LdapIdentityProviderFlowOptions } from '../types';
-export declare class LdapIdentityProviderFlow implements ILdapIdentityProviderFlow {
-    protected options: LdapIdentityProviderFlowOptions;
-    protected client: LdapClient;
-    constructor(options: LdapIdentityProviderFlowOptions);
-    getIdentityForCredentials(user: string, password: string): Promise<IdentityProviderIdentity>;
-    getIdentity(input: string): Promise<IdentityProviderIdentity>;
-    bind(user?: string, password?: string): Promise<void>;
-    unbind(): Promise<void>;
-    findUser(input: string): Promise<Record<string, any> | undefined>;
-    findUserGroups(user: Record<string, any>): Promise<string[]>;
-}
-//# sourceMappingURL=ldap.d.ts.map

package/dist/services/identity-provider/flow/core/ldap.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"ldap.d.ts","sourceRoot":"","sources":["../../../../../src/services/identity-provider/flow/core/ldap.ts"],"names":[],"mappings":"AAYA,OAAO,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAC9C,OAAO,KAAK,EAAE,yBAAyB,EAAE,wBAAwB,EAAE,+BAA+B,EAAE,MAAM,UAAU,CAAC;AAErH,qBAAa,wBAAyB,YAAW,yBAAyB;IACtE,SAAS,CAAC,OAAO,EAAG,+BAA+B,CAAC;IAEpD,SAAS,CAAC,MAAM,EAAE,UAAU,CAAC;gBAEjB,OAAO,EAAE,+BAA+B;IAc9C,yBAAyB,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAI,OAAO,CAAC,wBAAwB,CAAC;IAQ7F,WAAW,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,wBAAwB,CAAC;IA2BtD,IAAI,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,MAAM,GAAI,OAAO,CAAC,IAAI,CAAC;IAa7D,MAAM,IAAK,OAAO,CAAC,IAAI,CAAC;IAIjB,QAAQ,CAAC,KAAK,EAAE,MAAM,GAAI,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,GAAG,SAAS,CAAC;IA0ClE,cAAc,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,GAAI,OAAO,CAAC,MAAM,EAAE,CAAC;CAuD7E"}

package/dist/services/identity-provider/flow/core/ldap.js

@@ -1,158 +0,0 @@
-"use strict";
-/*
- * Copyright (c) 2024.
- * Author Peter Placzek (tada5hi)
- * For the full copyright and license information,
- * view the LICENSE file that was distributed with this source code.
- */
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.LdapIdentityProviderFlow = void 0;
-const kit_1 = require("@authup/kit");
-const ldapjs_1 = require("ldapjs");
-const core_1 = require("../../../../core");
-class LdapIdentityProviderFlow {
-    constructor(options) {
-        this.options = options;
-        this.client = new core_1.LdapClient({
-            url: options.url,
-            tls: options.tls,
-            startTLS: options.start_tls,
-            baseDn: options.base_dn,
-            user: options.user,
-            password: options.password,
-            userNameAttribute: options.user_name_attribute,
-        });
-    }
-    async getIdentityForCredentials(user, password) {
-        const identity = await this.getIdentity(user);
-        await this.bind(identity.id, password);
-        return identity;
-    }
-    async getIdentity(input) {
-        await this.bind();
-        const user = await this.findUser(input);
-        const identity = {
-            id: user.dn,
-            attributeCandidates: {
-                name: [
-                    user[this.options.user_name_attribute || 'cn'],
-                    user.dn,
-                ],
-                email: [
-                    user[this.options.user_mail_attribute || 'mail'],
-                ],
-            },
-            data: user,
-        };
-        try {
-            identity.roles = await this.findUserGroups(user);
-        }
-        catch (e) {
-            // todo: log event
-        }
-        return identity;
-    }
-    async bind(user, password) {
-        if (!user) {
-            return this.client.bind();
-        }
-        if (!this.client.isDn(user)) {
-            const nameAttribute = this.options.user_name_attribute || 'cn';
-            user = `${nameAttribute}=${user},${this.client.resolveDn(this.options.user_base_dn, this.options.base_dn)}`;
-        }
-        return this.client.bind(user, password);
-    }
-    async unbind() {
-        return this.client.unbind();
-    }
-    async findUser(input) {
-        let filter;
-        if (this.options.user_filter) {
-            filter = (0, kit_1.template)(this.options.user_filter, {
-                input,
-                name_attribute: this.options.user_name_attribute || 'cn',
-                mail_attribute: this.options.user_mail_attribute || 'mail',
-                display_name_attribute: this.options.user_display_name_attribute || 'cn',
-            });
-        }
-        else if (this.options.user_name_attribute) {
-            filter = new ldapjs_1.EqualityFilter({
-                attribute: this.options.user_name_attribute,
-                value: input,
-            });
-        }
-        else {
-            filter = new ldapjs_1.OrFilter({
-                filters: [
-                    new ldapjs_1.EqualityFilter({
-                        attribute: 'cn',
-                        value: input,
-                    }),
-                    new ldapjs_1.EqualityFilter({
-                        attribute: 'sAMAccountName',
-                        value: input,
-                    }),
-                ],
-            });
-        }
-        const entities = await this.client.search({
-            filter,
-            scope: 'sub',
-        }, this.client.resolveDn(this.options.user_base_dn, this.options.base_dn));
-        if (entities.length === 0) {
-            return undefined;
-        }
-        return entities[0];
-    }
-    async findUserGroups(user) {
-        const nameAttribute = this.options.group_name_attribute || 'cn';
-        const memberAttribute = this.options.group_member_attribute || 'member';
-        let filter;
-        if (this.options.group_filter) {
-            filter = (0, kit_1.template)(this.options.group_filter, {
-                ...user,
-                name_attribute: nameAttribute,
-                member_attribute: memberAttribute,
-            });
-        }
-        else {
-            filter = new ldapjs_1.AndFilter({
-                filters: [
-                    new ldapjs_1.EqualityFilter({
-                        attribute: 'objectClass',
-                        value: this.options.group_class || 'group',
-                    }),
-                    new ldapjs_1.EqualityFilter({
-                        attribute: memberAttribute,
-                        value: user[this.options.group_member_user_attribute || 'dn'],
-                    }),
-                ],
-            });
-        }
-        const entities = await this.client.search({
-            filter,
-            scope: 'sub',
-        }, this.client.resolveDn(this.options.group_base_dn, this.options.base_dn));
-        if (entities.length === 0) {
-            return [];
-        }
-        const attributeKey = this.options.group_name_attribute || 'cn';
-        const names = [];
-        for (let i = 0; i < entities.length; i++) {
-            const attribute = entities[i][attributeKey];
-            if (typeof attribute === 'undefined') {
-                continue;
-            }
-            if (typeof attribute === 'string') {
-                names.push(attribute);
-                continue;
-            }
-            if (Array.isArray(attribute)) {
-                names.push(...attribute.filter((el) => typeof el === 'string'));
-            }
-        }
-        return names;
-    }
-}
-exports.LdapIdentityProviderFlow = LdapIdentityProviderFlow;
-//# sourceMappingURL=ldap.js.map

package/dist/services/identity-provider/flow/core/ldap.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"ldap.js","sourceRoot":"","sources":["../../../../../src/services/identity-provider/flow/core/ldap.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;;AAEH,qCAAuC;AACvC,mCAEgB;AAEhB,2CAA8C;AAG9C,MAAa,wBAAwB;IAKjC,YAAY,OAAwC;QAChD,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;QAEvB,IAAI,CAAC,MAAM,GAAG,IAAI,iBAAU,CAAC;YACzB,GAAG,EAAE,OAAO,CAAC,GAAG;YAChB,GAAG,EAAE,OAAO,CAAC,GAAG;YAChB,QAAQ,EAAE,OAAO,CAAC,SAAS;YAC3B,MAAM,EAAE,OAAO,CAAC,OAAO;YACvB,IAAI,EAAE,OAAO,CAAC,IAAI;YAClB,QAAQ,EAAE,OAAO,CAAC,QAAQ;YAC1B,iBAAiB,EAAE,OAAO,CAAC,mBAAmB;SACjD,CAAC,CAAC;IACP,CAAC;IAED,KAAK,CAAC,yBAAyB,CAAC,IAAY,EAAE,QAAgB;QAC1D,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC;QAE9C,MAAM,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,QAAQ,CAAC,CAAC;QAEvC,OAAO,QAAQ,CAAC;IACpB,CAAC;IAED,KAAK,CAAC,WAAW,CAAC,KAAa;QAC3B,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC;QAElB,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;QACxC,MAAM,QAAQ,GAA8B;YACxC,EAAE,EAAE,IAAI,CAAC,EAAE;YACX,mBAAmB,EAAE;gBACjB,IAAI,EAAE;oBACF,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,mBAAmB,IAAI,IAAI,CAAC;oBAC9C,IAAI,CAAC,EAAE;iBACV;gBACD,KAAK,EAAE;oBACH,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,mBAAmB,IAAI,MAAM,CAAC;iBACnD;aACJ;YACD,IAAI,EAAE,IAAI;SACb,CAAC;QAEF,IAAI,CAAC;YACD,QAAQ,CAAC,KAAK,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC;QACrD,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACT,kBAAkB;QACtB,CAAC;QAED,OAAO,QAAQ,CAAC;IACpB,CAAC;IAEM,KAAK,CAAC,IAAI,CAAC,IAAa,EAAE,QAAiB;QAC9C,IAAI,CAAC,IAAI,EAAE,CAAC;YACR,OAAO,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;QAC9B,CAAC;QAED,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YAC1B,MAAM,aAAa,GAAG,IAAI,CAAC,OAAO,CAAC,mBAAmB,IAAI,IAAI,CAAC;YAC/D,IAAI,GAAG,GAAG,aAAa,IAAI,IAAI,IAAI,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,YAAY,EAAE,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;QAChH,CAAC;QAED,OAAO,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;IAC5C,CAAC;IAED,KAAK,CAAC,MAAM;QACR,OAAO,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC;IAChC,CAAC;IAEM,KAAK,CAAC,QAAQ,CAAC,KAAa;QAC/B,IAAI,MAAwB,CAAC;QAE7B,IAAI,IAAI,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC;YAC3B,MAAM,GAAG,IAAA,cAAQ,EAAC,IAAI,CAAC,OAAO,CAAC,WAAW,EAAE;gBACxC,KAAK;gBACL,cAAc,EAAE,IAAI,CAAC,OAAO,CAAC,mBAAmB,IAAI,IAAI;gBACxD,cAAc,EAAE,IAAI,CAAC,OAAO,CAAC,mBAAmB,IAAI,MAAM;gBAC1D,sBAAsB,EAAE,IAAI,CAAC,OAAO,CAAC,2BAA2B,IAAI,IAAI;aAC3E,CAAC,CAAC;QACP,CAAC;aAAM,IAAI,IAAI,CAAC,OAAO,CAAC,mBAAmB,EAAE,CAAC;YAC1C,MAAM,GAAG,IAAI,uBAAc,CAAC;gBACxB,SAAS,EAAE,IAAI,CAAC,OAAO,CAAC,mBAAmB;gBAC3C,KAAK,EAAE,KAAK;aACf,CAAC,CAAC;QACP,CAAC;aAAM,CAAC;YACJ,MAAM,GAAG,IAAI,iBAAQ,CAAC;gBAClB,OAAO,EAAE;oBACL,IAAI,uBAAc,CAAC;wBACf,SAAS,EAAE,IAAI;wBACf,KAAK,EAAE,KAAK;qBACf,CAAC;oBACF,IAAI,uBAAc,CAAC;wBACf,SAAS,EAAE,gBAAgB;wBAC3B,KAAK,EAAE,KAAK;qBACf,CAAC;iBACL;aACJ,CAAC,CAAC;QACP,CAAC;QAED,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC;YACtC,MAAM;YACN,KAAK,EAAE,KAAK;SACf,EAAE,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,YAAY,EAAE,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC;QAE3E,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACxB,OAAO,SAAS,CAAC;QACrB,CAAC;QAED,OAAO,QAAQ,CAAC,CAAC,CAAC,CAAC;IACvB,CAAC;IAEM,KAAK,CAAC,cAAc,CAAC,IAAyB;QACjD,MAAM,aAAa,GAAG,IAAI,CAAC,OAAO,CAAC,oBAAoB,IAAI,IAAI,CAAC;QAChE,MAAM,eAAe,GAAG,IAAI,CAAC,OAAO,CAAC,sBAAsB,IAAI,QAAQ,CAAC;QAExE,IAAI,MAAwB,CAAC;QAC7B,IAAI,IAAI,CAAC,OAAO,CAAC,YAAY,EAAE,CAAC;YAC5B,MAAM,GAAG,IAAA,cAAQ,EAAC,IAAI,CAAC,OAAO,CAAC,YAAY,EAAE;gBACzC,GAAG,IAAI;gBACP,cAAc,EAAE,aAAa;gBAC7B,gBAAgB,EAAE,eAAe;aACpC,CAAC,CAAC;QACP,CAAC;aAAM,CAAC;YACJ,MAAM,GAAG,IAAI,kBAAS,CAAC;gBACnB,OAAO,EAAE;oBACL,IAAI,uBAAc,CAAC;wBACf,SAAS,EAAE,aAAa;wBACxB,KAAK,EAAE,IAAI,CAAC,OAAO,CAAC,WAAW,IAAI,OAAO;qBAC7C,CAAC;oBACF,IAAI,uBAAc,CAAC;wBACf,SAAS,EAAE,eAAe;wBAC1B,KAAK,EAAE,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,2BAA2B,IAAI,IAAI,CAAC;qBAChE,CAAC;iBACL;aACJ,CAAC,CAAC;QACP,CAAC;QAED,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC;YACtC,MAAM;YACN,KAAK,EAAE,KAAK;SACf,EAAE,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,aAAa,EAAE,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC;QAE5E,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACxB,OAAO,EAAE,CAAC;QACd,CAAC;QAED,MAAM,YAAY,GAAG,IAAI,CAAC,OAAO,CAAC,oBAAoB,IAAI,IAAI,CAAC;QAC/D,MAAM,KAAK,GAAc,EAAE,CAAC;QAC5B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,QAAQ,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YACvC,MAAM,SAAS,GAAG,QAAQ,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC;YAC5C,IAAI,OAAO,SAAS,KAAK,WAAW,EAAE,CAAC;gBACnC,SAAS;YACb,CAAC;YAED,IAAI,OAAO,SAAS,KAAK,QAAQ,EAAE,CAAC;gBAChC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;gBACtB,SAAS;YACb,CAAC;YAED,IAAI,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,CAAC;gBAC3B,KAAK,CAAC,IAAI,CAAC,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,OAAO,EAAE,KAAK,QAAQ,CAAC,CAAC,CAAC;YACpE,CAAC;QACL,CAAC;QAED,OAAO,KAAK,CAAC;IACjB,CAAC;CACJ;AAxKD,4DAwKC"}

package/dist/services/identity-provider/flow/core/oauth2.d.ts

@@ -1,12 +0,0 @@
-import type { AuthorizeParameters, TokenGrantResponse } from '@hapic/oauth2';
-import { OAuth2Client } from '@hapic/oauth2';
-import type { Request } from 'routup';
-import type { IOAuth2IdentityProviderFlow, IdentityProviderIdentity, OAuth2IdentityProviderFlowOptions } from '../types';
-export declare class OAuth2IdentityProviderFlow implements IOAuth2IdentityProviderFlow {
-    protected client: OAuth2Client;
-    constructor(provider: OAuth2IdentityProviderFlowOptions);
-    buildRedirectURL(parameters?: Partial<AuthorizeParameters>): string;
-    getTokenResponseForRequest(request: Request): Promise<TokenGrantResponse>;
-    getIdentityForRequest(request: Request): Promise<IdentityProviderIdentity>;
-}
-//# sourceMappingURL=oauth2.d.ts.map

package/dist/services/identity-provider/flow/core/oauth2.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"oauth2.d.ts","sourceRoot":"","sources":["../../../../../src/services/identity-provider/flow/core/oauth2.ts"],"names":[],"mappings":"AASA,OAAO,KAAK,EAAE,mBAAmB,EAAW,kBAAkB,EAAE,MAAM,eAAe,CAAC;AACtF,OAAO,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AAE7C,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,QAAQ,CAAC;AAEtC,OAAO,KAAK,EAAE,2BAA2B,EAAE,wBAAwB,EAAE,iCAAiC,EAAE,MAAM,UAAU,CAAC;AAEzH,qBAAa,0BAA2B,YAAW,2BAA2B;IAC1E,SAAS,CAAC,MAAM,EAAG,YAAY,CAAC;gBAEpB,QAAQ,EAAE,iCAAiC;IAgBvD,gBAAgB,CAAC,UAAU,GAAE,OAAO,CAAC,mBAAmB,CAAM,GAAI,MAAM;IAIlE,0BAA0B,CAAC,OAAO,EAAE,OAAO,GAAI,OAAO,CAAC,kBAAkB,CAAC;IAQ1E,qBAAqB,CAAC,OAAO,EAAE,OAAO,GAAI,OAAO,CAAC,wBAAwB,CAAC;CAiBpF"}

package/dist/services/identity-provider/flow/core/oauth2.js

@@ -1,57 +0,0 @@
-"use strict";
-/*
- * Copyright (c) 2023-2023.
- * Author Peter Placzek (tada5hi)
- * For the full copyright and license information,
- * view the LICENSE file that was distributed with this source code.
- */
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.OAuth2IdentityProviderFlow = void 0;
-const core_kit_1 = require("@authup/core-kit");
-const server_kit_1 = require("@authup/server-kit");
-const oauth2_1 = require("@hapic/oauth2");
-const query_1 = require("@routup/basic/query");
-const config_1 = require("../../../../config");
-class OAuth2IdentityProviderFlow {
-    constructor(provider) {
-        const clientOptions = {
-            clientId: provider.client_id,
-            clientSecret: provider.client_secret,
-            redirectUri: `${(0, config_1.useConfig)().publicUrl}${(0, core_kit_1.buildIdentityProviderAuthorizeCallbackPath)(provider.id)}`,
-            scope: provider.scope,
-            authorizationEndpoint: provider.authorize_url,
-            tokenEndpoint: provider.token_url,
-            userinfoEndpoint: provider.user_info_url,
-        };
-        this.client = new oauth2_1.OAuth2Client({
-            options: clientOptions,
-        });
-    }
-    buildRedirectURL(parameters = {}) {
-        return this.client.authorize.buildURL(parameters);
-    }
-    async getTokenResponseForRequest(request) {
-        const { code } = (0, query_1.useRequestQuery)(request);
-        return this.client.token.createWithAuthorizationCode({
-            code: code,
-        });
-    }
-    async getIdentityForRequest(request) {
-        const response = await this.getTokenResponseForRequest(request);
-        const payload = (0, server_kit_1.extractTokenPayload)(response.access_token);
-        return {
-            id: payload.sub,
-            attributeCandidates: {
-                name: [
-                    payload.sub,
-                ],
-                email: [
-                    payload.email,
-                ],
-            },
-            data: payload,
-        };
-    }
-}
-exports.OAuth2IdentityProviderFlow = OAuth2IdentityProviderFlow;
-//# sourceMappingURL=oauth2.js.map

package/dist/services/identity-provider/flow/core/oauth2.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"oauth2.js","sourceRoot":"","sources":["../../../../../src/services/identity-provider/flow/core/oauth2.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;;AAEH,+CAA8E;AAC9E,mDAAyD;AAEzD,0CAA6C;AAC7C,+CAAsD;AAEtD,+CAA+C;AAG/C,MAAa,0BAA0B;IAGnC,YAAY,QAA2C;QACnD,MAAM,aAAa,GAAa;YAC5B,QAAQ,EAAE,QAAQ,CAAC,SAAS;YAC5B,YAAY,EAAE,QAAQ,CAAC,aAAa;YACpC,WAAW,EAAE,GAAG,IAAA,kBAAS,GAAE,CAAC,SAAS,GAAG,IAAA,qDAA0C,EAAC,QAAQ,CAAC,EAAE,CAAC,EAAE;YACjG,KAAK,EAAE,QAAQ,CAAC,KAAK;YACrB,qBAAqB,EAAE,QAAQ,CAAC,aAAa;YAC7C,aAAa,EAAE,QAAQ,CAAC,SAAS;YACjC,gBAAgB,EAAE,QAAQ,CAAC,aAAa;SAC3C,CAAC;QAEF,IAAI,CAAC,MAAM,GAAG,IAAI,qBAAY,CAAC;YAC3B,OAAO,EAAE,aAAa;SACzB,CAAC,CAAC;IACP,CAAC;IAED,gBAAgB,CAAC,aAA2C,EAAE;QAC1D,OAAO,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC;IACtD,CAAC;IAED,KAAK,CAAC,0BAA0B,CAAC,OAAgB;QAC7C,MAAM,EAAE,IAAI,EAAE,GAAG,IAAA,uBAAe,EAAC,OAAO,CAAC,CAAC;QAE1C,OAAO,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,2BAA2B,CAAC;YACjD,IAAI,EAAE,IAAc;SACvB,CAAC,CAAC;IACP,CAAC;IAED,KAAK,CAAC,qBAAqB,CAAC,OAAgB;QACxC,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,0BAA0B,CAAC,OAAO,CAAC,CAAC;QAChE,MAAM,OAAO,GAAG,IAAA,gCAAmB,EAAC,QAAQ,CAAC,YAAY,CAAC,CAAC;QAE3D,OAAO;YACH,EAAE,EAAE,OAAO,CAAC,GAAG;YACf,mBAAmB,EAAE;gBACjB,IAAI,EAAE;oBACF,OAAO,CAAC,GAAG;iBACd;gBACD,KAAK,EAAE;oBACH,OAAO,CAAC,KAAK;iBAChB;aACJ;YACD,IAAI,EAAE,OAAO;SAChB,CAAC;IACN,CAAC;CACJ;AAhDD,gEAgDC"}

package/dist/services/identity-provider/flow/core/openid.d.ts

@@ -1,8 +0,0 @@
-import type { Request } from 'routup';
-import type { IOAuth2IdentityProviderFlow, IdentityProviderIdentity, OAuth2IdentityProviderFlowOptions } from '../types';
-import { OAuth2IdentityProviderFlow } from './oauth2';
-export declare class OpenIDIdentityProviderFlow extends OAuth2IdentityProviderFlow implements IOAuth2IdentityProviderFlow {
-    constructor(options: OAuth2IdentityProviderFlowOptions);
-    getIdentityForRequest(request: Request): Promise<IdentityProviderIdentity>;
-}
-//# sourceMappingURL=openid.d.ts.map

package/dist/services/identity-provider/flow/core/openid.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"openid.d.ts","sourceRoot":"","sources":["../../../../../src/services/identity-provider/flow/core/openid.ts"],"names":[],"mappings":"AAQA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,QAAQ,CAAC;AACtC,OAAO,KAAK,EAAE,2BAA2B,EAAE,wBAAwB,EAAE,iCAAiC,EAAE,MAAM,UAAU,CAAC;AACzH,OAAO,EAAE,0BAA0B,EAAE,MAAM,UAAU,CAAC;AAEtD,qBAAa,0BAA2B,SAAQ,0BAA2B,YAAW,2BAA2B;gBAEjG,OAAO,EAAE,iCAAiC;IAIhD,qBAAqB,CAAC,OAAO,EAAE,OAAO,GAAG,OAAO,CAAC,wBAAwB,CAAC;CAmBnF"}