@authup/server-core 1.0.0-beta.27 → 1.0.0-beta.29

package/dist/adapters/http/controllers/workflows/register/module.d.ts

@@ -0,0 +1,24 @@
+import { RegisterResponse } from '@authup/core-http-kit';
+import { User } from '@authup/core-kit';
+import { RoutupContainerAdapter } from '@validup/adapter-routup';
+import type { Request, Response } from 'routup';
+import type { Repository } from 'typeorm';
+import { IMailClient } from '../../../../../core/index.ts';
+export type RegisterControllerOptions = {
+    registration?: boolean;
+    emailVerification?: boolean;
+};
+export type RegisterControllerContext = {
+    options: RegisterControllerOptions;
+    mailClient: IMailClient;
+    repository: Repository<User>;
+};
+export declare class RegisterController {
+    protected options: RegisterControllerOptions;
+    protected mailClient: IMailClient;
+    protected repository: Repository<User>;
+    protected validator: RoutupContainerAdapter<User>;
+    constructor(ctx: RegisterControllerContext);
+    execute(req: Request, res: Response): Promise<RegisterResponse>;
+}
+//# sourceMappingURL=module.d.ts.map

package/dist/adapters/http/controllers/workflows/register/module.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"module.d.ts","sourceRoot":"","sources":["../../../../../../src/adapters/http/controllers/workflows/register/module.ts"],"names":[],"mappings":"AAOA,OAAO,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAC;AACzD,OAAO,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAC;AAMxC,OAAO,EAAE,sBAAsB,EAAE,MAAM,yBAAyB,CAAC;AAEjE,OAAO,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,QAAQ,CAAC;AAEhD,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AAE1C,OAAO,EAAE,WAAW,EAA0B,MAAM,8BAA8B,CAAC;AAKnF,MAAM,MAAM,yBAAyB,GAAG;IACpC,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB,iBAAiB,CAAC,EAAE,OAAO,CAAA;CAC9B,CAAC;AAEF,MAAM,MAAM,yBAAyB,GAAG;IACpC,OAAO,EAAE,yBAAyB,CAAC;IACnC,UAAU,EAAE,WAAW,CAAC;IACxB,UAAU,EAAE,UAAU,CAAC,IAAI,CAAC,CAAA;CAC/B,CAAC;AAEF,qBACa,kBAAkB;IAC3B,SAAS,CAAC,OAAO,EAAE,yBAAyB,CAAC;IAE7C,SAAS,CAAC,UAAU,EAAE,WAAW,CAAC;IAElC,SAAS,CAAC,UAAU,EAAE,UAAU,CAAC,IAAI,CAAC,CAAC;IAEvC,SAAS,CAAC,SAAS,EAAG,sBAAsB,CAAC,IAAI,CAAC,CAAC;gBAEvC,GAAG,EAAE,yBAAyB;IAUpC,OAAO,CACG,GAAG,EAAE,OAAO,EACP,GAAG,EAAE,QAAQ,GAC/B,OAAO,CAAC,gBAAgB,CAAC;CAmD/B"}

package/dist/adapters/http/controllers/workflows/register/module.js

@@ -0,0 +1,99 @@
+/*
+ * Copyright (c) 2022-2024.
+ * Author Peter Placzek (tada5hi)
+ * For the full copyright and license information,
+ * view the LICENSE file that was distributed with this source code.
+ */
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+var __param = (this && this.__param) || function (paramIndex, decorator) {
+    return function (target, key) { decorator(target, key, paramIndex); }
+};
+import { createNanoID } from '@authup/kit';
+import { BadRequestError } from '@ebec/http';
+import { DController, DPost, DRequest, DResponse, } from '@routup/decorators';
+import { RoutupContainerAdapter } from '@validup/adapter-routup';
+import { randomBytes } from 'node:crypto';
+import { sendAccepted } from 'routup';
+import { useDataSource, validateEntityJoinColumns } from 'typeorm-extension';
+import { UserCredentialsService } from "../../../../../core/index.js";
+import { UserEntity, resolveRealm } from "../../../../database/domains/index.js";
+import { RequestHandlerOperation } from "../../../request/index.js";
+import { RegisterRequestValidator } from "./validator.js";
+let RegisterController = class RegisterController {
+    options;
+    mailClient;
+    repository;
+    validator;
+    constructor(ctx) {
+        this.options = ctx.options;
+        this.mailClient = ctx.mailClient;
+        this.repository = ctx.repository;
+        const validator = new RegisterRequestValidator();
+        this.validator = new RoutupContainerAdapter(validator);
+    }
+    async execute(req, res) {
+        if (!this.options.registration) {
+            throw new BadRequestError('User registration is not enabled.');
+        }
+        const data = await this.validator.run(req, {
+            group: RequestHandlerOperation.CREATE,
+        });
+        // todo: remove this
+        const dataSource = await useDataSource();
+        await validateEntityJoinColumns(data, {
+            dataSource,
+            entityTarget: UserEntity,
+        });
+        if (this.options.emailVerification) {
+            data.active = false;
+            data.activate_hash = randomBytes(32).toString('hex');
+        }
+        else {
+            data.active = true;
+        }
+        const entity = this.repository.create(data);
+        const credentialsService = new UserCredentialsService();
+        entity.password = entity.password || createNanoID(64);
+        entity.password = await credentialsService.protect(entity.password);
+        const realm = await resolveRealm(entity.realm_id, true);
+        entity.realm_id = realm.id;
+        await this.repository.save(entity);
+        if (this.options.emailVerification) {
+            await this.mailClient.send({
+                to: entity.email,
+                subject: 'Registration - Activation code',
+                html: `
+                <p>Please use the code below to activate your account and start using the site.</p>
+                <p>${entity.activate_hash}</p>
+                `,
+            });
+        }
+        // eslint-disable-next-line @typescript-eslint/ban-ts-comment
+        // @ts-expect-error
+        return sendAccepted(res, {
+            active: entity.active,
+        });
+    }
+};
+__decorate([
+    DPost('', []),
+    __param(0, DRequest()),
+    __param(1, DResponse()),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [Object, Object]),
+    __metadata("design:returntype", Promise)
+], RegisterController.prototype, "execute", null);
+RegisterController = __decorate([
+    DController('/register'),
+    __metadata("design:paramtypes", [Object])
+], RegisterController);
+export { RegisterController };
+//# sourceMappingURL=module.js.map

package/dist/adapters/http/controllers/workflows/register/module.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"module.js","sourceRoot":"","sources":["../../../../../../src/adapters/http/controllers/workflows/register/module.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;;;;;;;;;;;;;AAIH,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAC3C,OAAO,EAAE,eAAe,EAAE,MAAM,YAAY,CAAC;AAC7C,OAAO,EACH,WAAW,EAAE,KAAK,EAAE,QAAQ,EAAE,SAAS,GAC1C,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAAE,sBAAsB,EAAE,MAAM,yBAAyB,CAAC;AACjE,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAE1C,OAAO,EAAE,YAAY,EAAE,MAAM,QAAQ,CAAC;AAEtC,OAAO,EAAE,aAAa,EAAE,yBAAyB,EAAE,MAAM,mBAAmB,CAAC;AAC7E,OAAO,EAAe,sBAAsB,EAAE,MAAM,8BAA8B,CAAC;AACnF,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,uCAAuC,CAAC;AACjF,OAAO,EAAE,uBAAuB,EAAE,MAAM,2BAA2B,CAAC;AACpE,OAAO,EAAE,wBAAwB,EAAE,MAAM,gBAAgB,CAAC;AAcnD,IAAM,kBAAkB,GAAxB,MAAM,kBAAkB;IACjB,OAAO,CAA4B;IAEnC,UAAU,CAAc;IAExB,UAAU,CAAmB;IAE7B,SAAS,CAAgC;IAEnD,YAAY,GAA8B;QACtC,IAAI,CAAC,OAAO,GAAG,GAAG,CAAC,OAAO,CAAC;QAC3B,IAAI,CAAC,UAAU,GAAG,GAAG,CAAC,UAAU,CAAC;QACjC,IAAI,CAAC,UAAU,GAAG,GAAG,CAAC,UAAU,CAAC;QAEjC,MAAM,SAAS,GAAG,IAAI,wBAAwB,EAAE,CAAC;QACjD,IAAI,CAAC,SAAS,GAAG,IAAI,sBAAsB,CAAC,SAAS,CAAC,CAAC;IAC3D,CAAC;IAGK,AAAN,KAAK,CAAC,OAAO,CACG,GAAY,EACP,GAAa;QAE9B,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,YAAY,EAAE,CAAC;YAC7B,MAAM,IAAI,eAAe,CAAC,mCAAmC,CAAC,CAAC;QACnE,CAAC;QAED,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,GAAG,EAAE;YACvC,KAAK,EAAE,uBAAuB,CAAC,MAAM;SACxC,CAAC,CAAC;QAEH,oBAAoB;QACpB,MAAM,UAAU,GAAG,MAAM,aAAa,EAAE,CAAC;QACzC,MAAM,yBAAyB,CAAC,IAAI,EAAE;YAClC,UAAU;YACV,YAAY,EAAE,UAAU;SAC3B,CAAC,CAAC;QAEH,IAAI,IAAI,CAAC,OAAO,CAAC,iBAAiB,EAAE,CAAC;YACjC,IAAI,CAAC,MAAM,GAAG,KAAK,CAAC;YACpB,IAAI,CAAC,aAAa,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;QACzD,CAAC;aAAM,CAAC;YACJ,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC;QACvB,CAAC;QAED,MAAM,MAAM,GAAG,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QAE5C,MAAM,kBAAkB,GAAG,IAAI,sBAAsB,EAAE,CAAC;QACxD,MAAM,CAAC,QAAQ,GAAG,MAAM,CAAC,QAAQ,IAAI,YAAY,CAAC,EAAE,CAAC,CAAC;QACtD,MAAM,CAAC,QAAQ,GAAG,MAAM,kBAAkB,CAAC,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QAEpE,MAAM,KAAK,GAAG,MAAM,YAAY,CAAC,MAAM,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;QACxD,MAAM,CAAC,QAAQ,GAAG,KAAK,CAAC,EAAE,CAAC;QAE3B,MAAM,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAEnC,IAAI,IAAI,CAAC,OAAO,CAAC,iBAAiB,EAAE,CAAC;YACjC,MAAM,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;gBACvB,EAAE,EAAE,MAAM,CAAC,KAAK;gBAChB,OAAO,EAAE,gCAAgC;gBACzC,IAAI,EAAE;;qBAED,MAAM,CAAC,aAAa;iBACxB;aACJ,CAAC,CAAC;QACP,CAAC;QAED,6DAA6D;QAC7D,mBAAmB;QACnB,OAAO,YAAY,CAAC,GAAG,EAAE;YACrB,MAAM,EAAE,MAAM,CAAC,MAAM;SACxB,CAAC,CAAC;IACP,CAAC;CACJ,CAAA;AAtDS;IADL,KAAK,CAAC,EAAE,EAAE,EAAE,CAAC;IAET,WAAA,QAAQ,EAAE,CAAA;IACN,WAAA,SAAS,EAAE,CAAA;;;;iDAmDnB;AAxEQ,kBAAkB;IAD9B,WAAW,CAAC,WAAW,CAAC;;GACZ,kBAAkB,CAyE9B"}

package/dist/adapters/http/controllers/workflows/register/validator.d.ts

@@ -0,0 +1,6 @@
+import type { User } from '@authup/core-kit';
+import { Container } from 'validup';
+export declare class RegisterRequestValidator extends Container<User> {
+    protected initialize(): void;
+}
+//# sourceMappingURL=validator.d.ts.map

package/dist/adapters/http/controllers/workflows/register/validator.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"validator.d.ts","sourceRoot":"","sources":["../../../../../../src/adapters/http/controllers/workflows/register/validator.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAC;AAE7C,OAAO,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AAEpC,qBAAa,wBAAyB,SAAQ,SAAS,CAAC,IAAI,CAAC;IACzD,SAAS,CAAC,UAAU;CAOvB"}

package/dist/adapters/http/controllers/workflows/register/validator.js

@@ -0,0 +1,17 @@
+/*
+ * Copyright (c) 2025.
+ * Author Peter Placzek (tada5hi)
+ * For the full copyright and license information,
+ * view the LICENSE file that was distributed with this source code.
+ */
+import { UserValidator } from '@authup/core-kit';
+import { Container } from 'validup';
+export class RegisterRequestValidator extends Container {
+    initialize() {
+        super.initialize();
+        this.mount(new UserValidator({
+            pathsToInclude: ['email', 'name', 'password', 'realm_id'],
+        }));
+    }
+}
+//# sourceMappingURL=validator.js.map

package/dist/adapters/http/controllers/workflows/register/validator.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"validator.js","sourceRoot":"","sources":["../../../../../../src/adapters/http/controllers/workflows/register/validator.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAGH,OAAO,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AACjD,OAAO,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AAEpC,MAAM,OAAO,wBAAyB,SAAQ,SAAe;IAC/C,UAAU;QAChB,KAAK,CAAC,UAAU,EAAE,CAAC;QAEnB,IAAI,CAAC,KAAK,CAAC,IAAI,aAAa,CAAC;YACzB,cAAc,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,UAAU,CAAC;SAC5D,CAAC,CAAC,CAAC;IACR,CAAC;CACJ"}

package/dist/adapters/http/controllers/workflows/status/index.d.ts

@@ -0,0 +1,2 @@
+export * from './module.ts';
+//# sourceMappingURL=index.d.ts.map

package/dist/adapters/http/controllers/workflows/status/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../../src/adapters/http/controllers/workflows/status/index.ts"],"names":[],"mappings":"AAOA,cAAc,aAAa,CAAC"}

package/dist/adapters/http/controllers/workflows/status/index.js

@@ -0,0 +1,8 @@
+/*
+ * Copyright (c) 2024.
+ * Author Peter Placzek (tada5hi)
+ * For the full copyright and license information,
+ * view the LICENSE file that was distributed with this source code.
+ */
+export * from "./module.js";
+//# sourceMappingURL=index.js.map

package/dist/adapters/http/controllers/workflows/status/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../../../src/adapters/http/controllers/workflows/status/index.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,cAAc,aAAa,CAAC"}

package/dist/adapters/http/controllers/workflows/status/module.d.ts

@@ -0,0 +1,8 @@
+export type EndpointInfo = {
+    version: string;
+    date: string;
+};
+export declare class StatusController {
+    status(): Promise<EndpointInfo>;
+}
+//# sourceMappingURL=module.d.ts.map

package/dist/adapters/http/controllers/workflows/status/module.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"module.d.ts","sourceRoot":"","sources":["../../../../../../src/adapters/http/controllers/workflows/status/module.ts"],"names":[],"mappings":"AAcA,MAAM,MAAM,YAAY,GAAG;IACvB,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,MAAM,CAAA;CACf,CAAC;AAEF,qBACa,gBAAgB;IAEnB,MAAM,IAAI,OAAO,CAAC,YAAY,CAAC;CASxC"}

package/dist/adapters/http/controllers/workflows/status/module.js

@@ -0,0 +1,40 @@
+/*
+ * Copyright (c) 2022-2024.
+ * Author Peter Placzek (tada5hi)
+ * For the full copyright and license information,
+ * view the LICENSE file that was distributed with this source code.
+ */
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+import { DController, DGet, } from '@routup/decorators';
+import { load } from 'locter';
+import path from 'node:path';
+import { resolvePackagePath } from "../../../../../path.js";
+let StatusController = class StatusController {
+    async status() {
+        const pkgJson = await load(path.join(resolvePackagePath(), 'package.json'));
+        const isoDate = new Date().toISOString();
+        return {
+            version: pkgJson.version,
+            date: isoDate,
+        };
+    }
+};
+__decorate([
+    DGet('/', []),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", []),
+    __metadata("design:returntype", Promise)
+], StatusController.prototype, "status", null);
+StatusController = __decorate([
+    DController('')
+], StatusController);
+export { StatusController };
+//# sourceMappingURL=module.js.map

package/dist/adapters/http/controllers/workflows/status/module.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"module.js","sourceRoot":"","sources":["../../../../../../src/adapters/http/controllers/workflows/status/module.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;;;;;;;;;;AAEH,OAAO,EACH,WAAW,EAAE,IAAI,GACpB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAAE,IAAI,EAAE,MAAM,QAAQ,CAAC;AAC9B,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,kBAAkB,EAAE,MAAM,wBAAwB,CAAC;AAQrD,IAAM,gBAAgB,GAAtB,MAAM,gBAAgB;IAEnB,AAAN,KAAK,CAAC,MAAM;QACR,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,kBAAkB,EAAE,EAAE,cAAc,CAAC,CAAC,CAAC;QAC5E,MAAM,OAAO,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QAEzC,OAAO;YACH,OAAO,EAAE,OAAO,CAAC,OAAO;YACxB,IAAI,EAAE,OAAO;SAChB,CAAC;IACN,CAAC;CACJ,CAAA;AATS;IADL,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC;;;;8CASb;AAVQ,gBAAgB;IAD5B,WAAW,CAAC,EAAE,CAAC;GACH,gBAAgB,CAW5B"}

package/dist/adapters/http/controllers/workflows/token/index.d.ts

@@ -0,0 +1,2 @@
+export * from './module.ts';
+//# sourceMappingURL=index.d.ts.map

package/dist/adapters/http/controllers/workflows/token/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../../src/adapters/http/controllers/workflows/token/index.ts"],"names":[],"mappings":"AAOA,cAAc,aAAa,CAAC"}

package/dist/adapters/http/controllers/workflows/token/index.js

@@ -0,0 +1,8 @@
+/*
+ * Copyright (c) 2022.
+ * Author Peter Placzek (tada5hi)
+ * For the full copyright and license information,
+ * view the LICENSE file that was distributed with this source code.
+ */
+export * from "./module.js";
+//# sourceMappingURL=index.js.map

package/dist/adapters/http/controllers/workflows/token/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../../../src/adapters/http/controllers/workflows/token/index.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,cAAc,aAAa,CAAC"}

package/dist/adapters/http/controllers/workflows/token/module.d.ts

@@ -0,0 +1,20 @@
+import { OAuth2TokenGrant, OAuth2TokenGrantResponse, type OAuth2TokenIntrospectionResponse } from '@authup/specs';
+import type { Request, Response } from 'routup';
+import type { TokenControllerContext, TokenControllerOptions } from './types.ts';
+import { IIdentityResolver, IOAuth2TokenIssuer, IOAuth2TokenRevoker, IOAuth2TokenVerifier } from '../../../../../core/index.ts';
+import { IHTTPOAuth2Grant } from '../../../adapters/index.ts';
+export declare class TokenController {
+    protected options: TokenControllerOptions;
+    protected refreshTokenIssuer: IOAuth2TokenIssuer;
+    protected accessTokenIssuer: IOAuth2TokenIssuer;
+    protected tokenVerifier: IOAuth2TokenVerifier;
+    protected tokenRevoker: IOAuth2TokenRevoker;
+    protected identityResolver: IIdentityResolver;
+    protected tokenGrants: Record<`${OAuth2TokenGrant}`, IHTTPOAuth2Grant>;
+    constructor(ctx: TokenControllerContext);
+    getIntrospect(req: Request): Promise<OAuth2TokenIntrospectionResponse>;
+    postIntrospect(req: Request): Promise<OAuth2TokenIntrospectionResponse>;
+    revokeToken(req: Request, res: Response): Promise<void>;
+    createToken(req: Request, res: Response): Promise<OAuth2TokenGrantResponse>;
+}
+//# sourceMappingURL=module.d.ts.map

package/dist/adapters/http/controllers/workflows/token/module.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"module.d.ts","sourceRoot":"","sources":["../../../../../../src/adapters/http/controllers/workflows/token/module.ts"],"names":[],"mappings":"AAOA,OAAO,EAEH,gBAAgB,EAChB,wBAAwB,EACxB,KAAK,gCAAgC,EACxC,MAAM,eAAe,CAAC;AAIvB,OAAO,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,QAAQ,CAAC;AAOhD,OAAO,KAAK,EAAE,sBAAsB,EAAE,sBAAsB,EAAE,MAAM,YAAY,CAAC;AACjF,OAAO,EACH,iBAAiB,EACjB,kBAAkB,EAClB,mBAAmB,EACnB,oBAAoB,EAEvB,MAAM,8BAA8B,CAAC;AACtC,OAAO,EAMH,gBAAgB,EAEnB,MAAM,4BAA4B,CAAC;AAIpC,qBAEa,eAAe;IACxB,SAAS,CAAC,OAAO,EAAE,sBAAsB,CAAC;IAE1C,SAAS,CAAC,kBAAkB,EAAE,kBAAkB,CAAC;IAEjD,SAAS,CAAC,iBAAiB,EAAE,kBAAkB,CAAC;IAEhD,SAAS,CAAC,aAAa,EAAE,oBAAoB,CAAC;IAE9C,SAAS,CAAC,YAAY,EAAE,mBAAmB,CAAC;IAE5C,SAAS,CAAC,gBAAgB,EAAG,iBAAiB,CAAC;IAE/C,SAAS,CAAC,WAAW,EAAG,MAAM,CAAC,GAAG,gBAAgB,EAAE,EAAE,gBAAgB,CAAC,CAAC;gBAI5D,GAAG,EAAE,sBAAsB;IA4CjC,aAAa,CACH,GAAG,EAAE,OAAO,GACzB,OAAO,CAAC,gCAAgC,CAAC;IAKtC,cAAc,CACJ,GAAG,EAAE,OAAO,GACzB,OAAO,CAAC,gCAAgC,CAAC;IAsDtC,WAAW,CACL,GAAG,EAAE,OAAO,EACP,GAAG,EAAE,QAAQ;IAkBxB,WAAW,CACD,GAAG,EAAE,OAAO,EACP,GAAG,EAAE,QAAQ,GAC/B,OAAO,CAAC,wBAAwB,CAAC;CAwDvC"}

package/dist/adapters/http/controllers/workflows/token/module.js

@@ -0,0 +1,215 @@
+/*
+ * Copyright (c) 2022.
+ * Author Peter Placzek (tada5hi)
+ * For the full copyright and license information,
+ * view the LICENSE file that was distributed with this source code.
+ */
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+var __param = (this && this.__param) || function (paramIndex, decorator) {
+    return function (target, key) { decorator(target, key, paramIndex); }
+};
+import { OAuth2Error, OAuth2TokenGrant, } from '@authup/specs';
+import { DController, DGet, DPost, DRequest, DResponse, DTags, } from '@routup/decorators';
+import { getRequestHostName, sendAccepted } from 'routup';
+import { setResponseCookie } from '@routup/basic/cookie';
+import { CookieName } from '@authup/core-http-kit';
+import { useDataSource } from 'typeorm-extension';
+import { pickRecord } from '@authup/kit';
+import { toOAuth2Error } from "../../../../../core/oauth2/helpers/index.js";
+import { OAuth2OpenIDClaimsBuilder, } from "../../../../../core/index.js";
+import { HTTPClientCredentialsGrant, HTTPOAuth2AuthorizeGrant, HTTPOAuth2RefreshTokenGrant, HTTPPasswordGrant, HTTPRobotCredentialsGrant, guessOauth2GrantTypeByRequest, } from "../../../adapters/index.js";
+import { extractTokenFromRequest } from "./utils/index.js";
+import { IdentityPermissionService } from "../../../../../services/index.js";
+let TokenController = class TokenController {
+    options;
+    refreshTokenIssuer;
+    accessTokenIssuer;
+    tokenVerifier;
+    tokenRevoker;
+    identityResolver;
+    tokenGrants;
+    // -------------------------------------------
+    constructor(ctx) {
+        this.options = ctx.options;
+        this.refreshTokenIssuer = ctx.refreshTokenIssuer;
+        this.accessTokenIssuer = ctx.accessTokenIssuer;
+        this.tokenVerifier = ctx.tokenVerifier;
+        this.tokenRevoker = ctx.tokenRevoker;
+        this.identityResolver = ctx.identityResolver;
+        this.tokenGrants = {
+            [OAuth2TokenGrant.AUTHORIZATION_CODE]: new HTTPOAuth2AuthorizeGrant({
+                codeVerifier: ctx.codeVerifier,
+                accessTokenIssuer: ctx.accessTokenIssuer,
+                refreshTokenIssuer: ctx.refreshTokenIssuer,
+                sessionManager: ctx.sessionManager,
+            }),
+            [OAuth2TokenGrant.CLIENT_CREDENTIALS]: new HTTPClientCredentialsGrant({
+                accessTokenIssuer: ctx.accessTokenIssuer,
+                authenticator: ctx.clientAuthenticator,
+                sessionManager: ctx.sessionManager,
+            }),
+            [OAuth2TokenGrant.ROBOT_CREDENTIALS]: new HTTPRobotCredentialsGrant({
+                accessTokenIssuer: ctx.accessTokenIssuer,
+                authenticator: ctx.robotAuthenticator,
+                sessionManager: ctx.sessionManager,
+            }),
+            [OAuth2TokenGrant.PASSWORD]: new HTTPPasswordGrant({
+                accessTokenIssuer: ctx.accessTokenIssuer,
+                refreshTokenIssuer: ctx.refreshTokenIssuer,
+                authenticator: ctx.userAuthenticator,
+                sessionManager: ctx.sessionManager,
+            }),
+            [OAuth2TokenGrant.REFRESH_TOKEN]: new HTTPOAuth2RefreshTokenGrant({
+                accessTokenIssuer: ctx.accessTokenIssuer,
+                refreshTokenIssuer: ctx.refreshTokenIssuer,
+                tokenVerifier: ctx.tokenVerifier,
+                tokenRevoker: ctx.tokenRevoker,
+                sessionManager: ctx.sessionManager,
+            }),
+        };
+    }
+    // -------------------------------------------
+    async getIntrospect(req) {
+        return this.postIntrospect(req);
+    }
+    async postIntrospect(req) {
+        try {
+            const token = await extractTokenFromRequest(req);
+            const payload = await this.tokenVerifier.verify(token, {
+                skipActiveCheck: true,
+            });
+            const dataSource = await useDataSource();
+            const identityPermissionService = new IdentityPermissionService(dataSource);
+            if (!payload.sub || !payload.sub_kind) {
+                throw OAuth2Error.identityInvalid();
+            }
+            // todo: only receive client specific permissions
+            const permissions = await identityPermissionService.getFor({
+                id: payload.sub,
+                type: payload.sub_kind,
+                clientId: payload.client_id,
+                realmId: payload.realm_id,
+            });
+            const identity = await this.identityResolver.resolve(payload.sub_kind, payload.sub);
+            if (!identity) {
+                // todo: differentiate between client, robot & user
+                throw OAuth2Error.identityInvalid();
+            }
+            const claimsBuilder = new OAuth2OpenIDClaimsBuilder();
+            const claims = claimsBuilder.fromIdentity(identity);
+            let active;
+            if (payload.jti) {
+                const isInactive = await this.tokenVerifier.isInactive(payload.jti);
+                active = !isInactive;
+            }
+            else {
+                active = false;
+            }
+            return {
+                active,
+                // todo: permissions property should be removed.
+                permissions: permissions
+                    .map((permission) => pickRecord(permission, ['name', 'client_id', 'realm_id'])),
+                ...payload,
+                ...claims,
+            };
+        }
+        catch (e) {
+            throw toOAuth2Error(e);
+        }
+    }
+    // ----------------------------------------------------------
+    async revokeToken(req, res) {
+        try {
+            const token = await extractTokenFromRequest(req);
+            const payload = await this.tokenVerifier.verify(token);
+            await this.tokenRevoker.revoke(payload);
+            return await sendAccepted(res);
+        }
+        catch (e) {
+            throw toOAuth2Error(e);
+        }
+    }
+    // ----------------------------------------------------------
+    async createToken(req, res) {
+        const grantType = guessOauth2GrantTypeByRequest(req);
+        if (!grantType) {
+            throw OAuth2Error.grantInvalid();
+        }
+        const grant = this.tokenGrants[grantType];
+        if (!grant) {
+            throw OAuth2Error.grantInvalid();
+        }
+        const grantResponse = await grant.runWithRequest(req);
+        const domainsRaw = [
+            ...this.options.cookieDomains,
+        ];
+        const requestHostName = getRequestHostName(req, {
+            trustProxy: true,
+        });
+        if (requestHostName) {
+            domainsRaw.push(requestHostName);
+        }
+        const domains = [...new Set(domainsRaw)];
+        for (let i = 0; i < domains.length; i++) {
+            const domain = domains[i];
+            setResponseCookie(res, CookieName.ACCESS_TOKEN, grantResponse.access_token, {
+                domain,
+                maxAge: grantResponse.expires_in * 1_000,
+            });
+            if (grantResponse.refresh_token &&
+                grantResponse.refresh_token_expires_in) {
+                setResponseCookie(res, CookieName.REFRESH_TOKEN, grantResponse.refresh_token, {
+                    domain,
+                    maxAge: grantResponse.refresh_token_expires_in * 1_000,
+                });
+            }
+        }
+        return grantResponse;
+    }
+};
+__decorate([
+    DGet('/introspect', []),
+    __param(0, DRequest()),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [Object]),
+    __metadata("design:returntype", Promise)
+], TokenController.prototype, "getIntrospect", null);
+__decorate([
+    DPost('/introspect', []),
+    __param(0, DRequest()),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [Object]),
+    __metadata("design:returntype", Promise)
+], TokenController.prototype, "postIntrospect", null);
+__decorate([
+    DPost('/revoke', []),
+    __param(0, DRequest()),
+    __param(1, DResponse()),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [Object, Object]),
+    __metadata("design:returntype", Promise)
+], TokenController.prototype, "revokeToken", null);
+__decorate([
+    DPost('', []),
+    __param(0, DRequest()),
+    __param(1, DResponse()),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [Object, Object]),
+    __metadata("design:returntype", Promise)
+], TokenController.prototype, "createToken", null);
+TokenController = __decorate([
+    DTags('auth'),
+    DController('/token'),
+    __metadata("design:paramtypes", [Object])
+], TokenController);
+export { TokenController };
+//# sourceMappingURL=module.js.map

package/dist/adapters/http/controllers/workflows/token/module.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"module.js","sourceRoot":"","sources":["../../../../../../src/adapters/http/controllers/workflows/token/module.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;;;;;;;;;;;;;AAEH,OAAO,EACH,WAAW,EACX,gBAAgB,GAGnB,MAAM,eAAe,CAAC;AACvB,OAAO,EACH,WAAW,EAAE,IAAI,EAAE,KAAK,EAAE,QAAQ,EAAE,SAAS,EAAE,KAAK,GACvD,MAAM,oBAAoB,CAAC;AAE5B,OAAO,EAAE,kBAAkB,EAAE,YAAY,EAAE,MAAM,QAAQ,CAAC;AAC1D,OAAO,EAAE,iBAAiB,EAAE,MAAM,sBAAsB,CAAC;AACzD,OAAO,EAAE,UAAU,EAAE,MAAM,uBAAuB,CAAC;AACnD,OAAO,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAC;AAClD,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,aAAa,EAAE,MAAM,6CAA6C,CAAC;AAE5E,OAAO,EAKH,yBAAyB,GAC5B,MAAM,8BAA8B,CAAC;AACtC,OAAO,EACH,0BAA0B,EAC1B,wBAAwB,EACxB,2BAA2B,EAC3B,iBAAiB,EACjB,yBAAyB,EAEzB,6BAA6B,GAChC,MAAM,4BAA4B,CAAC;AACpC,OAAO,EAAE,uBAAuB,EAAE,MAAM,kBAAkB,CAAC;AAC3D,OAAO,EAAE,yBAAyB,EAAE,MAAM,kCAAkC,CAAC;AAItE,IAAM,eAAe,GAArB,MAAM,eAAe;IACd,OAAO,CAAyB;IAEhC,kBAAkB,CAAqB;IAEvC,iBAAiB,CAAqB;IAEtC,aAAa,CAAuB;IAEpC,YAAY,CAAsB;IAElC,gBAAgB,CAAqB;IAErC,WAAW,CAAmD;IAExE,8CAA8C;IAE9C,YAAY,GAA2B;QACnC,IAAI,CAAC,OAAO,GAAG,GAAG,CAAC,OAAO,CAAC;QAC3B,IAAI,CAAC,kBAAkB,GAAG,GAAG,CAAC,kBAAkB,CAAC;QACjD,IAAI,CAAC,iBAAiB,GAAG,GAAG,CAAC,iBAAiB,CAAC;QAC/C,IAAI,CAAC,aAAa,GAAG,GAAG,CAAC,aAAa,CAAC;QACvC,IAAI,CAAC,YAAY,GAAG,GAAG,CAAC,YAAY,CAAC;QACrC,IAAI,CAAC,gBAAgB,GAAG,GAAG,CAAC,gBAAgB,CAAC;QAE7C,IAAI,CAAC,WAAW,GAAG;YACf,CAAC,gBAAgB,CAAC,kBAAkB,CAAC,EAAE,IAAI,wBAAwB,CAAC;gBAChE,YAAY,EAAE,GAAG,CAAC,YAAY;gBAC9B,iBAAiB,EAAE,GAAG,CAAC,iBAAiB;gBACxC,kBAAkB,EAAE,GAAG,CAAC,kBAAkB;gBAC1C,cAAc,EAAE,GAAG,CAAC,cAAc;aACrC,CAAC;YACF,CAAC,gBAAgB,CAAC,kBAAkB,CAAC,EAAE,IAAI,0BAA0B,CAAC;gBAClE,iBAAiB,EAAE,GAAG,CAAC,iBAAiB;gBACxC,aAAa,EAAE,GAAG,CAAC,mBAAmB;gBACtC,cAAc,EAAE,GAAG,CAAC,cAAc;aACrC,CAAC;YACF,CAAC,gBAAgB,CAAC,iBAAiB,CAAC,EAAE,IAAI,yBAAyB,CAAC;gBAChE,iBAAiB,EAAE,GAAG,CAAC,iBAAiB;gBACxC,aAAa,EAAE,GAAG,CAAC,kBAAkB;gBACrC,cAAc,EAAE,GAAG,CAAC,cAAc;aACrC,CAAC;YACF,CAAC,gBAAgB,CAAC,QAAQ,CAAC,EAAE,IAAI,iBAAiB,CAAC;gBAC/C,iBAAiB,EAAE,GAAG,CAAC,iBAAiB;gBACxC,kBAAkB,EAAE,GAAG,CAAC,kBAAkB;gBAC1C,aAAa,EAAE,GAAG,CAAC,iBAAiB;gBACpC,cAAc,EAAE,GAAG,CAAC,cAAc;aACrC,CAAC;YACF,CAAC,gBAAgB,CAAC,aAAa,CAAC,EAAE,IAAI,2BAA2B,CAAC;gBAC9D,iBAAiB,EAAE,GAAG,CAAC,iBAAiB;gBACxC,kBAAkB,EAAE,GAAG,CAAC,kBAAkB;gBAC1C,aAAa,EAAE,GAAG,CAAC,aAAa;gBAChC,YAAY,EAAE,GAAG,CAAC,YAAY;gBAC9B,cAAc,EAAE,GAAG,CAAC,cAAc;aACrC,CAAC;SACL,CAAC;IACN,CAAC;IAED,8CAA8C;IAGxC,AAAN,KAAK,CAAC,aAAa,CACH,GAAY;QAExB,OAAO,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC;IACpC,CAAC;IAGK,AAAN,KAAK,CAAC,cAAc,CACJ,GAAY;QAExB,IAAI,CAAC;YACD,MAAM,KAAK,GAAG,MAAM,uBAAuB,CAAC,GAAG,CAAC,CAAC;YACjD,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC,KAAK,EAAE;gBACnD,eAAe,EAAE,IAAI;aACxB,CAAC,CAAC;YACH,MAAM,UAAU,GAAG,MAAM,aAAa,EAAE,CAAC;YACzC,MAAM,yBAAyB,GAAG,IAAI,yBAAyB,CAAC,UAAU,CAAC,CAAC;YAE5E,IAAI,CAAC,OAAO,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC;gBACpC,MAAM,WAAW,CAAC,eAAe,EAAE,CAAC;YACxC,CAAC;YAED,iDAAiD;YACjD,MAAM,WAAW,GAAG,MAAM,yBAAyB,CAAC,MAAM,CAAC;gBACvD,EAAE,EAAE,OAAO,CAAC,GAAG;gBACf,IAAI,EAAE,OAAO,CAAC,QAAQ;gBACtB,QAAQ,EAAE,OAAO,CAAC,SAAS;gBAC3B,OAAO,EAAE,OAAO,CAAC,QAAQ;aAC5B,CAAC,CAAC;YAEH,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAAC,OAAO,CAAC,OAAO,CAAC,QAAQ,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC;YACpF,IAAI,CAAC,QAAQ,EAAE,CAAC;gBACZ,mDAAmD;gBACnD,MAAM,WAAW,CAAC,eAAe,EAAE,CAAC;YACxC,CAAC;YAED,MAAM,aAAa,GAAG,IAAI,yBAAyB,EAAE,CAAC;YACtD,MAAM,MAAM,GAAG,aAAa,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC;YAEpD,IAAI,MAAgB,CAAC;YACrB,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC;gBACd,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,UAAU,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;gBACpE,MAAM,GAAG,CAAC,UAAU,CAAC;YACzB,CAAC;iBAAM,CAAC;gBACJ,MAAM,GAAG,KAAK,CAAC;YACnB,CAAC;YAED,OAAO;gBACH,MAAM;gBACN,gDAAgD;gBAChD,WAAW,EAAE,WAAW;qBACnB,GAAG,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC,UAAU,CAAC,UAAU,EAAE,CAAC,MAAM,EAAE,WAAW,EAAE,UAAU,CAAC,CAA0B,CAAC;gBAC5G,GAAG,OAAO;gBACV,GAAG,MAAM;aACZ,CAAC;QACN,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACT,MAAM,aAAa,CAAC,CAAC,CAAC,CAAC;QAC3B,CAAC;IACL,CAAC;IAED,6DAA6D;IAGvD,AAAN,KAAK,CAAC,WAAW,CACL,GAAY,EACP,GAAa;QAE1B,IAAI,CAAC;YACD,MAAM,KAAK,GAAG,MAAM,uBAAuB,CAAC,GAAG,CAAC,CAAC;YAEjD,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YAEvD,MAAM,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;YAExC,OAAO,MAAM,YAAY,CAAC,GAAG,CAAC,CAAC;QACnC,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACT,MAAM,aAAa,CAAC,CAAC,CAAC,CAAC;QAC3B,CAAC;IACL,CAAC;IAED,6DAA6D;IAGvD,AAAN,KAAK,CAAC,WAAW,CACD,GAAY,EACP,GAAa;QAE9B,MAAM,SAAS,GAAG,6BAA6B,CAAC,GAAG,CAAC,CAAC;QACrD,IAAI,CAAC,SAAS,EAAE,CAAC;YACb,MAAM,WAAW,CAAC,YAAY,EAAE,CAAC;QACrC,CAAC;QAED,MAAM,KAAK,GAAG,IAAI,CAAC,WAAW,CAAC,SAAS,CAAC,CAAC;QAC1C,IAAI,CAAC,KAAK,EAAE,CAAC;YACT,MAAM,WAAW,CAAC,YAAY,EAAE,CAAC;QACrC,CAAC;QAED,MAAM,aAAa,GAAG,MAAM,KAAK,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC;QAEtD,MAAM,UAAU,GAAG;YACf,GAAG,IAAI,CAAC,OAAO,CAAC,aAAa;SAChC,CAAC;QACF,MAAM,eAAe,GAAG,kBAAkB,CAAC,GAAG,EAAE;YAC5C,UAAU,EAAE,IAAI;SACnB,CAAC,CAAC;QACH,IAAI,eAAe,EAAE,CAAC;YAClB,UAAU,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;QACrC,CAAC;QAED,MAAM,OAAO,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC;QAEzC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YACtC,MAAM,MAAM,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;YAE1B,iBAAiB,CACb,GAAG,EACH,UAAU,CAAC,YAAY,EACvB,aAAa,CAAC,YAAY,EAC1B;gBACI,MAAM;gBACN,MAAM,EAAE,aAAa,CAAC,UAAU,GAAG,KAAK;aAC3C,CACJ,CAAC;YAEF,IACI,aAAa,CAAC,aAAa;gBAC3B,aAAa,CAAC,wBAAwB,EACxC,CAAC;gBACC,iBAAiB,CACb,GAAG,EACH,UAAU,CAAC,aAAa,EACxB,aAAa,CAAC,aAAa,EAC3B;oBACI,MAAM;oBACN,MAAM,EAAE,aAAa,CAAC,wBAAwB,GAAG,KAAK;iBACzD,CACJ,CAAC;YACN,CAAC;QACL,CAAC;QAED,OAAO,aAAa,CAAC;IACzB,CAAC;CACJ,CAAA;AA9IS;IADL,IAAI,CAAC,aAAa,EAAE,EAAE,CAAC;IAEnB,WAAA,QAAQ,EAAE,CAAA;;;;oDAGd;AAGK;IADL,KAAK,CAAC,aAAa,EAAE,EAAE,CAAC;IAEpB,WAAA,QAAQ,EAAE,CAAA;;;;qDAkDd;AAKK;IADL,KAAK,CAAC,SAAS,EAAE,EAAE,CAAC;IAEpB,WAAA,QAAQ,EAAE,CAAA;IACN,WAAA,SAAS,EAAE,CAAA;;;;kDAaf;AAKK;IADL,KAAK,CAAC,EAAE,EAAE,EAAE,CAAC;IAET,WAAA,QAAQ,EAAE,CAAA;IACN,WAAA,SAAS,EAAE,CAAA;;;;kDAwDnB;AA1MQ,eAAe;IAF3B,KAAK,CAAC,MAAM,CAAC;IACb,WAAW,CAAC,QAAQ,CAAC;;GACT,eAAe,CA2M3B"}

package/dist/adapters/http/controllers/workflows/token/types.d.ts

@@ -0,0 +1,20 @@
+import type { Client, Robot, User } from '@authup/core-kit';
+import type { ICredentialsAuthenticator, IIdentityResolver, IOAuth2AuthorizationCodeVerifier, IOAuth2TokenIssuer, IOAuth2TokenRevoker, IOAuth2TokenVerifier, ISessionManager } from '../../../../../core/index.ts';
+export type TokenControllerOptions = {
+    cookieDomains: string[];
+};
+export type TokenControllerContext = {
+    options: TokenControllerOptions;
+    cookieDomain?: string;
+    codeVerifier: IOAuth2AuthorizationCodeVerifier;
+    accessTokenIssuer: IOAuth2TokenIssuer;
+    refreshTokenIssuer: IOAuth2TokenIssuer;
+    tokenVerifier: IOAuth2TokenVerifier;
+    tokenRevoker: IOAuth2TokenRevoker;
+    sessionManager: ISessionManager;
+    identityResolver: IIdentityResolver;
+    clientAuthenticator: ICredentialsAuthenticator<Client>;
+    robotAuthenticator: ICredentialsAuthenticator<Robot>;
+    userAuthenticator: ICredentialsAuthenticator<User>;
+};
+//# sourceMappingURL=types.d.ts.map

package/dist/adapters/http/controllers/workflows/token/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../../../../src/adapters/http/controllers/workflows/token/types.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAC;AAC5D,OAAO,KAAK,EACR,yBAAyB,EACzB,iBAAiB,EACjB,gCAAgC,EAChC,kBAAkB,EAClB,mBAAmB,EACnB,oBAAoB,EAAE,eAAe,EACxC,MAAM,8BAA8B,CAAC;AAEtC,MAAM,MAAM,sBAAsB,GAAG;IACjC,aAAa,EAAE,MAAM,EAAE,CAAA;CAC1B,CAAC;AAEF,MAAM,MAAM,sBAAsB,GAAG;IACjC,OAAO,EAAE,sBAAsB,CAAC;IAChC,YAAY,CAAC,EAAE,MAAM,CAAC;IAEtB,YAAY,EAAE,gCAAgC,CAAC;IAE/C,iBAAiB,EAAE,kBAAkB,CAAC;IACtC,kBAAkB,EAAE,kBAAkB,CAAC;IACvC,aAAa,EAAE,oBAAoB,CAAC;IACpC,YAAY,EAAE,mBAAmB,CAAC;IAElC,cAAc,EAAE,eAAe,CAAC;IAEhC,gBAAgB,EAAE,iBAAiB,CAAC;IAEpC,mBAAmB,EAAE,yBAAyB,CAAC,MAAM,CAAC,CAAA;IACtD,kBAAkB,EAAE,yBAAyB,CAAC,KAAK,CAAC,CAAA;IACpD,iBAAiB,EAAE,yBAAyB,CAAC,IAAI,CAAC,CAAA;CACrD,CAAC"}

package/dist/adapters/http/controllers/workflows/token/types.js

@@ -0,0 +1,8 @@
+/*
+ * Copyright (c) 2025.
+ *  Author Peter Placzek (tada5hi)
+ *  For the full copyright and license information,
+ *  view the LICENSE file that was distributed with this source code.
+ */
+export {};
+//# sourceMappingURL=types.js.map

package/dist/adapters/http/controllers/workflows/token/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../../../../../src/adapters/http/controllers/workflows/token/types.ts"],"names":[],"mappings":"AAAA;;;;;GAKG"}

package/dist/adapters/http/controllers/workflows/token/utils/extract.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"extract.d.ts","sourceRoot":"","sources":["../../../../../../../src/adapters/http/controllers/workflows/token/utils/extract.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,QAAQ,CAAC;AAQtC,wBAAsB,uBAAuB,CAAC,GAAG,EAAE,OAAO,GAAI,OAAO,CAAC,MAAM,CAAC,CAyB5E"}

package/dist/adapters/http/controllers/workflows/token/utils/extract.js

@@ -0,0 +1,34 @@
+/*
+ * Copyright (c) 2024.
+ * Author Peter Placzek (tada5hi)
+ * For the full copyright and license information,
+ * view the LICENSE file that was distributed with this source code.
+ */
+import { RoutupContainerAdapter } from '@validup/adapter-routup';
+import { ValidupError, buildErrorMessageForAttribute, defineIssueItem, } from 'validup';
+import { useRequestToken } from "../../../../request/index.js";
+import { TokenRequestValidator } from "./validator.js";
+export async function extractTokenFromRequest(req) {
+    let token;
+    try {
+        const validator = new TokenRequestValidator();
+        const validatorAdapter = new RoutupContainerAdapter(validator);
+        const data = await validatorAdapter.run(req, {
+            locations: ['body', 'query', 'params'],
+        });
+        token = data.token;
+    }
+    catch (e) {
+        token = useRequestToken(req);
+    }
+    if (!token) {
+        throw new ValidupError([
+            defineIssueItem({
+                path: ['token'],
+                message: buildErrorMessageForAttribute('token'),
+            }),
+        ]);
+    }
+    return token;
+}
+//# sourceMappingURL=extract.js.map

package/dist/adapters/http/controllers/workflows/token/utils/extract.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"extract.js","sourceRoot":"","sources":["../../../../../../../src/adapters/http/controllers/workflows/token/utils/extract.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAGH,OAAO,EAAE,sBAAsB,EAAE,MAAM,yBAAyB,CAAC;AACjE,OAAO,EACH,YAAY,EAAE,6BAA6B,EAAE,eAAe,GAC/D,MAAM,SAAS,CAAC;AACjB,OAAO,EAAE,eAAe,EAAE,MAAM,8BAA8B,CAAC;AAC/D,OAAO,EAAE,qBAAqB,EAAE,MAAM,gBAAgB,CAAC;AAEvD,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAAC,GAAY;IACtD,IAAI,KAA0B,CAAC;IAE/B,IAAI,CAAC;QACD,MAAM,SAAS,GAAG,IAAI,qBAAqB,EAAE,CAAC;QAC9C,MAAM,gBAAgB,GAAG,IAAI,sBAAsB,CAAC,SAAS,CAAC,CAAC;QAC/D,MAAM,IAAI,GAAG,MAAM,gBAAgB,CAAC,GAAG,CAAC,GAAG,EAAE;YACzC,SAAS,EAAE,CAAC,MAAM,EAAE,OAAO,EAAE,QAAQ,CAAC;SACzC,CAAC,CAAC;QAEH,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC;IACvB,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACT,KAAK,GAAG,eAAe,CAAC,GAAG,CAAC,CAAC;IACjC,CAAC;IAED,IAAI,CAAC,KAAK,EAAE,CAAC;QACT,MAAM,IAAI,YAAY,CAAC;YACnB,eAAe,CAAC;gBACZ,IAAI,EAAE,CAAC,OAAO,CAAC;gBACf,OAAO,EAAE,6BAA6B,CAAC,OAAO,CAAC;aAClD,CAAC;SACL,CAAC,CAAC;IACP,CAAC;IAED,OAAO,KAAK,CAAC;AACjB,CAAC"}

package/dist/adapters/http/controllers/workflows/token/utils/index.d.ts

@@ -0,0 +1,3 @@
+export * from './extract.ts';
+export * from './validator.ts';
+//# sourceMappingURL=index.d.ts.map

package/dist/adapters/http/controllers/workflows/token/utils/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../../../src/adapters/http/controllers/workflows/token/utils/index.ts"],"names":[],"mappings":"AAOA,cAAc,cAAc,CAAC;AAC7B,cAAc,gBAAgB,CAAC"}

package/dist/adapters/http/controllers/workflows/token/utils/index.js

@@ -0,0 +1,9 @@
+/*
+ * Copyright (c) 2024.
+ * Author Peter Placzek (tada5hi)
+ * For the full copyright and license information,
+ * view the LICENSE file that was distributed with this source code.
+ */
+export * from "./extract.js";
+export * from "./validator.js";
+//# sourceMappingURL=index.js.map

package/dist/adapters/http/controllers/workflows/token/utils/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../../../../src/adapters/http/controllers/workflows/token/utils/index.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,cAAc,cAAc,CAAC;AAC7B,cAAc,gBAAgB,CAAC"}