@authup/server-core 1.0.0-beta.27 → 1.0.0-beta.29

package/dist/core/identity/provider/authentication/presets/index.d.ts

@@ -0,0 +1,6 @@
+export * from './facebook.ts';
+export * from './github.ts';
+export * from './google.ts';
+export * from './instagram.ts';
+export * from './paypal.ts';
+//# sourceMappingURL=index.d.ts.map

package/dist/core/identity/provider/authentication/presets/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../../src/core/identity/provider/authentication/presets/index.ts"],"names":[],"mappings":"AAOA,cAAc,eAAe,CAAC;AAC9B,cAAc,aAAa,CAAC;AAC5B,cAAc,aAAa,CAAC;AAC5B,cAAc,gBAAgB,CAAC;AAC/B,cAAc,aAAa,CAAC"}

package/dist/core/identity/provider/authentication/presets/index.js

@@ -0,0 +1,12 @@
+/*
+ * Copyright (c) 2023.
+ * Author Peter Placzek (tada5hi)
+ * For the full copyright and license information,
+ * view the LICENSE file that was distributed with this source code.
+ */
+export * from "./facebook.js";
+export * from "./github.js";
+export * from "./google.js";
+export * from "./instagram.js";
+export * from "./paypal.js";
+//# sourceMappingURL=index.js.map

package/dist/core/identity/provider/authentication/presets/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../../../src/core/identity/provider/authentication/presets/index.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,cAAc,eAAe,CAAC;AAC9B,cAAc,aAAa,CAAC;AAC5B,cAAc,aAAa,CAAC;AAC5B,cAAc,gBAAgB,CAAC;AAC/B,cAAc,aAAa,CAAC"}

package/dist/core/identity/provider/authentication/presets/instagram.d.ts

@@ -0,0 +1,9 @@
+import type { TokenGrantResponse } from '@hapic/oauth2';
+import type { IdentityProviderIdentity } from '../../types.ts';
+import type { IdentityProviderOAuth2AuthenticatorContext } from '../protocols/index.ts';
+import { IdentityProviderOAuth2Authenticator } from '../protocols/index.ts';
+export declare class IdentityProviderInstagramAuthenticator extends IdentityProviderOAuth2Authenticator {
+    constructor(ctx: IdentityProviderOAuth2AuthenticatorContext);
+    protected buildIdentityWithTokenGrantResponse(input: TokenGrantResponse): Promise<IdentityProviderIdentity>;
+}
+//# sourceMappingURL=instagram.d.ts.map

package/dist/core/identity/provider/authentication/presets/instagram.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"instagram.d.ts","sourceRoot":"","sources":["../../../../../../src/core/identity/provider/authentication/presets/instagram.ts"],"names":[],"mappings":"AAQA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,eAAe,CAAC;AACxD,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,gBAAgB,CAAC;AAC/D,OAAO,KAAK,EAAE,0CAA0C,EAAE,MAAM,uBAAuB,CAAC;AACxF,OAAO,EAAE,mCAAmC,EAAE,MAAM,uBAAuB,CAAC;AAE5E,qBAAa,sCAAuC,SAAQ,mCAAmC;gBAC/E,GAAG,EAAE,0CAA0C;cAS3C,mCAAmC,CAAC,KAAK,EAAE,kBAAkB,GAAG,OAAO,CAAC,wBAAwB,CAAC;CAoBpH"}

package/dist/core/identity/provider/authentication/presets/instagram.js

@@ -0,0 +1,36 @@
+/*
+ * Copyright (c) 2023-2023.
+ * Author Peter Placzek (tada5hi)
+ * For the full copyright and license information,
+ * view the LICENSE file that was distributed with this source code.
+ */
+import { extractTokenPayload } from '@authup/server-kit';
+import { IdentityProviderOAuth2Authenticator } from "../protocols/index.js";
+export class IdentityProviderInstagramAuthenticator extends IdentityProviderOAuth2Authenticator {
+    constructor(ctx) {
+        ctx.provider.scope = 'user_profile';
+        ctx.provider.authorize_url = 'https://api.instagram.com/oauth/authorize';
+        ctx.provider.token_url = 'https://api.instagram.com/oauth/access_token';
+        ctx.provider.user_info_url = 'https://graph.instagram.com/me?fields=id,username';
+        super(ctx);
+    }
+    async buildIdentityWithTokenGrantResponse(input) {
+        const userInfo = await this.client.userInfo.get({
+            type: 'Bearer',
+            token: input.access_token,
+        });
+        const payload = extractTokenPayload(input.access_token);
+        return {
+            id: userInfo.id,
+            attributeCandidates: {
+                name: [
+                    userInfo.username,
+                    userInfo.id,
+                ],
+            },
+            data: payload,
+            provider: this.provider,
+        };
+    }
+}
+//# sourceMappingURL=instagram.js.map

package/dist/core/identity/provider/authentication/presets/instagram.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"instagram.js","sourceRoot":"","sources":["../../../../../../src/core/identity/provider/authentication/presets/instagram.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAC;AAIzD,OAAO,EAAE,mCAAmC,EAAE,MAAM,uBAAuB,CAAC;AAE5E,MAAM,OAAO,sCAAuC,SAAQ,mCAAmC;IAC3F,YAAY,GAA+C;QACvD,GAAG,CAAC,QAAQ,CAAC,KAAK,GAAG,cAAc,CAAC;QACpC,GAAG,CAAC,QAAQ,CAAC,aAAa,GAAG,2CAA2C,CAAC;QACzE,GAAG,CAAC,QAAQ,CAAC,SAAS,GAAG,8CAA8C,CAAC;QACxE,GAAG,CAAC,QAAQ,CAAC,aAAa,GAAG,mDAAmD,CAAC;QAEjF,KAAK,CAAC,GAAG,CAAC,CAAC;IACf,CAAC;IAES,KAAK,CAAC,mCAAmC,CAAC,KAAyB;QACzE,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC;YAC5C,IAAI,EAAE,QAAQ;YACd,KAAK,EAAE,KAAK,CAAC,YAAY;SAC5B,CAAC,CAAC;QAEH,MAAM,OAAO,GAAG,mBAAmB,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;QAExD,OAAO;YACH,EAAE,EAAE,QAAQ,CAAC,EAAE;YACf,mBAAmB,EAAE;gBACjB,IAAI,EAAE;oBACF,QAAQ,CAAC,QAAQ;oBACjB,QAAQ,CAAC,EAAE;iBACd;aACJ;YACD,IAAI,EAAE,OAAO;YACb,QAAQ,EAAE,IAAI,CAAC,QAAQ;SAC1B,CAAC;IACN,CAAC;CACJ"}

package/dist/core/identity/provider/authentication/presets/paypal.d.ts

@@ -0,0 +1,9 @@
+import type { TokenGrantResponse } from '@hapic/oauth2';
+import type { IdentityProviderIdentity } from '../../types.ts';
+import type { IdentityProviderOAuth2AuthenticatorContext } from '../protocols/index.ts';
+import { IdentityProviderOAuth2Authenticator } from '../protocols/index.ts';
+export declare class IdentityProviderPaypalAuthenticator extends IdentityProviderOAuth2Authenticator {
+    constructor(ctx: IdentityProviderOAuth2AuthenticatorContext);
+    protected buildIdentityWithTokenGrantResponse(input: TokenGrantResponse): Promise<IdentityProviderIdentity>;
+}
+//# sourceMappingURL=paypal.d.ts.map

package/dist/core/identity/provider/authentication/presets/paypal.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"paypal.d.ts","sourceRoot":"","sources":["../../../../../../src/core/identity/provider/authentication/presets/paypal.ts"],"names":[],"mappings":"AAQA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,eAAe,CAAC;AACxD,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,gBAAgB,CAAC;AAC/D,OAAO,KAAK,EAAE,0CAA0C,EAAE,MAAM,uBAAuB,CAAC;AACxF,OAAO,EAAE,mCAAmC,EAAE,MAAM,uBAAuB,CAAC;AAE5E,qBAAa,mCAAoC,SAAQ,mCAAmC;gBAC5E,GAAG,EAAE,0CAA0C;cAS3C,mCAAmC,CAAC,KAAK,EAAE,kBAAkB,GAAG,OAAO,CAAC,wBAAwB,CAAC;CAuBpH"}

package/dist/core/identity/provider/authentication/presets/paypal.js

@@ -0,0 +1,39 @@
+/*
+ * Copyright (c) 2023-2023.
+ * Author Peter Placzek (tada5hi)
+ * For the full copyright and license information,
+ * view the LICENSE file that was distributed with this source code.
+ */
+import { extractTokenPayload } from '@authup/server-kit';
+import { IdentityProviderOAuth2Authenticator } from "../protocols/index.js";
+export class IdentityProviderPaypalAuthenticator extends IdentityProviderOAuth2Authenticator {
+    constructor(ctx) {
+        ctx.provider.scope = 'openid profile email';
+        ctx.provider.authorize_url = 'https://www.paypal.com/signin/authorize';
+        ctx.provider.token_url = 'https://api.paypal.com/v1/identity/openidconnect/tokenservice';
+        ctx.provider.user_info_url = 'https://api.paypal.com/v1/oauth2/token/userinfo?schema=openid';
+        super(ctx);
+    }
+    async buildIdentityWithTokenGrantResponse(input) {
+        const userInfo = await this.client.userInfo.get({
+            type: 'Bearer',
+            token: input.access_token,
+        });
+        const payload = extractTokenPayload(input.access_token);
+        return {
+            id: userInfo.user_id,
+            attributeCandidates: {
+                name: [
+                    userInfo.name,
+                    userInfo.user_id,
+                ],
+                email: [
+                    userInfo.email,
+                ],
+            },
+            data: payload,
+            provider: this.provider,
+        };
+    }
+}
+//# sourceMappingURL=paypal.js.map

package/dist/core/identity/provider/authentication/presets/paypal.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"paypal.js","sourceRoot":"","sources":["../../../../../../src/core/identity/provider/authentication/presets/paypal.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAC;AAIzD,OAAO,EAAE,mCAAmC,EAAE,MAAM,uBAAuB,CAAC;AAE5E,MAAM,OAAO,mCAAoC,SAAQ,mCAAmC;IACxF,YAAY,GAA+C;QACvD,GAAG,CAAC,QAAQ,CAAC,KAAK,GAAG,sBAAsB,CAAC;QAC5C,GAAG,CAAC,QAAQ,CAAC,aAAa,GAAG,yCAAyC,CAAC;QACvE,GAAG,CAAC,QAAQ,CAAC,SAAS,GAAG,+DAA+D,CAAC;QACzF,GAAG,CAAC,QAAQ,CAAC,aAAa,GAAG,+DAA+D,CAAC;QAE7F,KAAK,CAAC,GAAG,CAAC,CAAC;IACf,CAAC;IAES,KAAK,CAAC,mCAAmC,CAAC,KAAyB;QACzE,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC;YAC5C,IAAI,EAAE,QAAQ;YACd,KAAK,EAAE,KAAK,CAAC,YAAY;SAC5B,CAAC,CAAC;QAEH,MAAM,OAAO,GAAG,mBAAmB,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;QAExD,OAAO;YACH,EAAE,EAAE,QAAQ,CAAC,OAAO;YACpB,mBAAmB,EAAE;gBACjB,IAAI,EAAE;oBACF,QAAQ,CAAC,IAAI;oBACb,QAAQ,CAAC,OAAO;iBACnB;gBACD,KAAK,EAAE;oBACH,QAAQ,CAAC,KAAK;iBACjB;aACJ;YACD,IAAI,EAAE,OAAO;YACb,QAAQ,EAAE,IAAI,CAAC,QAAQ;SAC1B,CAAC;IACN,CAAC;CACJ"}

package/dist/core/identity/provider/authentication/protocols/index.d.ts

@@ -0,0 +1,4 @@
+export * from './ldap/index.ts';
+export * from './oauth2/index.ts';
+export * from './open-id/index.ts';
+//# sourceMappingURL=index.d.ts.map

package/dist/core/identity/provider/authentication/protocols/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../../src/core/identity/provider/authentication/protocols/index.ts"],"names":[],"mappings":"AAOA,cAAc,iBAAiB,CAAC;AAChC,cAAc,mBAAmB,CAAC;AAClC,cAAc,oBAAoB,CAAC"}

package/dist/core/identity/provider/authentication/protocols/index.js

@@ -0,0 +1,10 @@
+/*
+ * Copyright (c) 2025.
+ * Author Peter Placzek (tada5hi)
+ * For the full copyright and license information,
+ * view the LICENSE file that was distributed with this source code.
+ */
+export * from "./ldap/index.js";
+export * from "./oauth2/index.js";
+export * from "./open-id/index.js";
+//# sourceMappingURL=index.js.map

package/dist/core/identity/provider/authentication/protocols/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../../../src/core/identity/provider/authentication/protocols/index.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,cAAc,iBAAiB,CAAC;AAChC,cAAc,mBAAmB,CAAC;AAClC,cAAc,oBAAoB,CAAC"}

package/dist/core/identity/provider/authentication/protocols/ldap/collection.d.ts

@@ -0,0 +1,14 @@
+import type { User } from '@authup/core-kit';
+import type { IIdentityProviderRepository } from '../../../../../entities/index.ts';
+import type { IIdentityProviderAccountManager } from '../../../account/index.ts';
+import type { ILdapClientFactory } from '../../../../../ldap/index.ts';
+import { BaseCredentialsAuthenticator } from '../../../../../authentication/index.ts';
+import type { IdentityProviderLdapCollectionAuthenticatorContext } from './types.ts';
+export declare class IdentityProviderLdapCollectionAuthenticator extends BaseCredentialsAuthenticator<User> {
+    protected repository: IIdentityProviderRepository;
+    protected accountManager: IIdentityProviderAccountManager;
+    protected clientFactory: ILdapClientFactory;
+    constructor(ctx: IdentityProviderLdapCollectionAuthenticatorContext);
+    authenticate(name: string, password: string, realmId?: string): Promise<User>;
+}
+//# sourceMappingURL=collection.d.ts.map

package/dist/core/identity/provider/authentication/protocols/ldap/collection.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"collection.d.ts","sourceRoot":"","sources":["../../../../../../../src/core/identity/provider/authentication/protocols/ldap/collection.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAC;AAE7C,OAAO,KAAK,EAAE,2BAA2B,EAAE,MAAM,kCAAkC,CAAC;AACpF,OAAO,KAAK,EAAE,+BAA+B,EAAE,MAAM,2BAA2B,CAAC;AAEjF,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,8BAA8B,CAAC;AACvE,OAAO,EAAE,4BAA4B,EAAE,MAAM,wCAAwC,CAAC;AACtF,OAAO,KAAK,EAAE,kDAAkD,EAAE,MAAM,YAAY,CAAC;AAErF,qBAAa,2CAA4C,SAAQ,4BAA4B,CAAC,IAAI,CAAC;IAC/F,SAAS,CAAC,UAAU,EAAE,2BAA2B,CAAC;IAElD,SAAS,CAAC,cAAc,EAAE,+BAA+B,CAAC;IAE1D,SAAS,CAAC,aAAa,EAAE,kBAAkB,CAAC;gBAEhC,GAAG,EAAE,kDAAkD;IAQ7D,YAAY,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;CA+BtF"}

package/dist/core/identity/provider/authentication/protocols/ldap/collection.js

@@ -0,0 +1,45 @@
+/*
+ * Copyright (c) 2025-2025.
+ * Author Peter Placzek (tada5hi)
+ * For the full copyright and license information,
+ * view the LICENSE file that was distributed with this source code.
+ */
+import { IdentityProviderProtocol, UserError, isLdapIdentityProvider } from '@authup/core-kit';
+import { IdentityProviderLdapAuthenticator } from "./module.js";
+import { BaseCredentialsAuthenticator } from "../../../../../authentication/index.js";
+export class IdentityProviderLdapCollectionAuthenticator extends BaseCredentialsAuthenticator {
+    repository;
+    accountManager;
+    clientFactory;
+    constructor(ctx) {
+        super();
+        this.repository = ctx.repository;
+        this.accountManager = ctx.accountManager;
+        this.clientFactory = ctx.clientFactory;
+    }
+    async authenticate(name, password, realmId) {
+        let error;
+        const entities = await this.repository.findByProtocol(IdentityProviderProtocol.LDAP, realmId);
+        for (let i = 0; i < entities.length; i++) {
+            const provider = entities[i];
+            if (!isLdapIdentityProvider(provider)) {
+                continue;
+            }
+            const authenticator = new IdentityProviderLdapAuthenticator({
+                provider,
+                accountManager: this.accountManager,
+                clientFactory: this.clientFactory,
+            });
+            const response = await authenticator.safeAuthenticate(name, password);
+            if (response.success === true) {
+                return response.data;
+            }
+            error = response.error;
+        }
+        if (error) {
+            throw error;
+        }
+        throw UserError.credentialsInvalid();
+    }
+}
+//# sourceMappingURL=collection.js.map

package/dist/core/identity/provider/authentication/protocols/ldap/collection.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"collection.js","sourceRoot":"","sources":["../../../../../../../src/core/identity/provider/authentication/protocols/ldap/collection.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAGH,OAAO,EAAE,wBAAwB,EAAE,SAAS,EAAE,sBAAsB,EAAE,MAAM,kBAAkB,CAAC;AAG/F,OAAO,EAAE,iCAAiC,EAAE,MAAM,aAAa,CAAC;AAEhE,OAAO,EAAE,4BAA4B,EAAE,MAAM,wCAAwC,CAAC;AAGtF,MAAM,OAAO,2CAA4C,SAAQ,4BAAkC;IACrF,UAAU,CAA8B;IAExC,cAAc,CAAkC;IAEhD,aAAa,CAAqB;IAE5C,YAAY,GAAuD;QAC/D,KAAK,EAAE,CAAC;QAER,IAAI,CAAC,UAAU,GAAG,GAAG,CAAC,UAAU,CAAC;QACjC,IAAI,CAAC,cAAc,GAAG,GAAG,CAAC,cAAc,CAAC;QACzC,IAAI,CAAC,aAAa,GAAG,GAAG,CAAC,aAAa,CAAC;IAC3C,CAAC;IAED,KAAK,CAAC,YAAY,CAAC,IAAY,EAAE,QAAgB,EAAE,OAAgB;QAC/D,IAAI,KAAyB,CAAC;QAC9B,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,cAAc,CAAC,wBAAwB,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QAE9F,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,QAAQ,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YACvC,MAAM,QAAQ,GAAG,QAAQ,CAAC,CAAC,CAAC,CAAC;YAE7B,IAAI,CAAC,sBAAsB,CAAC,QAAQ,CAAC,EAAE,CAAC;gBACpC,SAAS;YACb,CAAC;YAED,MAAM,aAAa,GAAG,IAAI,iCAAiC,CAAC;gBACxD,QAAQ;gBACR,cAAc,EAAE,IAAI,CAAC,cAAc;gBACnC,aAAa,EAAE,IAAI,CAAC,aAAa;aACpC,CAAC,CAAC;YAEH,MAAM,QAAQ,GAAG,MAAM,aAAa,CAAC,gBAAgB,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;YACtE,IAAI,QAAQ,CAAC,OAAO,KAAK,IAAI,EAAE,CAAC;gBAC5B,OAAO,QAAQ,CAAC,IAAI,CAAC;YACzB,CAAC;YAED,KAAK,GAAG,QAAQ,CAAC,KAAK,CAAC;QAC3B,CAAC;QAED,IAAI,KAAK,EAAE,CAAC;YACR,MAAM,KAAK,CAAC;QAChB,CAAC;QAED,MAAM,SAAS,CAAC,kBAAkB,EAAE,CAAC;IACzC,CAAC;CACJ"}

package/dist/core/identity/provider/authentication/protocols/ldap/index.d.ts

@@ -0,0 +1,4 @@
+export * from './collection.ts';
+export * from './module.ts';
+export * from './types.ts';
+//# sourceMappingURL=index.d.ts.map

package/dist/core/identity/provider/authentication/protocols/ldap/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../../../src/core/identity/provider/authentication/protocols/ldap/index.ts"],"names":[],"mappings":"AAOA,cAAc,iBAAiB,CAAC;AAChC,cAAc,aAAa,CAAC;AAC5B,cAAc,YAAY,CAAC"}

package/dist/core/identity/provider/authentication/protocols/ldap/index.js

@@ -0,0 +1,10 @@
+/*
+ * Copyright (c) 2025.
+ * Author Peter Placzek (tada5hi)
+ * For the full copyright and license information,
+ * view the LICENSE file that was distributed with this source code.
+ */
+export * from "./collection.js";
+export * from "./module.js";
+export * from "./types.js";
+//# sourceMappingURL=index.js.map

package/dist/core/identity/provider/authentication/protocols/ldap/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../../../../src/core/identity/provider/authentication/protocols/ldap/index.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,cAAc,iBAAiB,CAAC;AAChC,cAAc,aAAa,CAAC;AAC5B,cAAc,YAAY,CAAC"}

package/dist/core/identity/provider/authentication/protocols/ldap/module.d.ts

@@ -0,0 +1,20 @@
+import type { LdapIdentityProvider, User } from '@authup/core-kit';
+import type { Result } from '@authup/kit';
+import { BaseCredentialsAuthenticator } from '../../../../../authentication/index.ts';
+import type { ILdapClient } from '../../../../../ldap/index.ts';
+import type { IIdentityProviderAccountManager } from '../../../account/index.ts';
+import type { IdentityProviderLdapAuthenticatorContext } from './types.ts';
+export declare class IdentityProviderLdapAuthenticator extends BaseCredentialsAuthenticator<User> {
+    protected provider: LdapIdentityProvider;
+    protected accountManager: IIdentityProviderAccountManager;
+    protected client: ILdapClient;
+    constructor(ctx: IdentityProviderLdapAuthenticatorContext);
+    authenticate(name: string, password: string): Promise<User>;
+    protected bind(user?: string, password?: string): Promise<void>;
+    protected safeBind(user?: string, password?: string): Promise<Result<null>>;
+    protected unbind(): Promise<void>;
+    protected safeUnbind(): Promise<Result<null>>;
+    protected findOneByName(input: string): Promise<Record<string, any> | null>;
+    findUserGroups(user: Record<string, any>): Promise<string[]>;
+}
+//# sourceMappingURL=module.d.ts.map

package/dist/core/identity/provider/authentication/protocols/ldap/module.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"module.d.ts","sourceRoot":"","sources":["../../../../../../../src/core/identity/provider/authentication/protocols/ldap/module.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,oBAAoB,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAC;AAEnE,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AAI1C,OAAO,EAAE,4BAA4B,EAAE,MAAM,wCAAwC,CAAC;AACtF,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAChE,OAAO,KAAK,EAAE,+BAA+B,EAAE,MAAM,2BAA2B,CAAC;AAEjF,OAAO,KAAK,EAAE,wCAAwC,EAAE,MAAM,YAAY,CAAC;AAE3E,qBAAa,iCAAkC,SAAQ,4BAA4B,CAAC,IAAI,CAAC;IACrF,SAAS,CAAC,QAAQ,EAAG,oBAAoB,CAAC;IAE1C,SAAS,CAAC,cAAc,EAAE,+BAA+B,CAAC;IAE1D,SAAS,CAAC,MAAM,EAAE,WAAW,CAAC;gBAElB,GAAG,EAAE,wCAAwC;IAgBnD,YAAY,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAI,OAAO,CAAC,IAAI,CAAC;cA8ClD,IAAI,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,MAAM,GAAI,OAAO,CAAC,IAAI,CAAC;cAatD,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,MAAM,GAAI,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;cAUlE,MAAM,IAAK,OAAO,CAAC,IAAI,CAAC;cAIxB,UAAU,IAAK,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;cAUpC,aAAa,CAAC,KAAK,EAAE,MAAM,GAAI,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,GAAG,IAAI,CAAC;IA0CrE,cAAc,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,GAAI,OAAO,CAAC,MAAM,EAAE,CAAC;CAuD7E"}

package/dist/core/identity/provider/authentication/protocols/ldap/module.js

@@ -0,0 +1,187 @@
+/*
+ * Copyright (c) 2024-2025.
+ * Author Peter Placzek (tada5hi)
+ * For the full copyright and license information,
+ * view the LICENSE file that was distributed with this source code.
+ */
+import { UserError } from '@authup/core-kit';
+import { template } from '@authup/kit';
+import ldap from 'ldapjs';
+import { BaseCredentialsAuthenticator } from "../../../../../authentication/index.js";
+export class IdentityProviderLdapAuthenticator extends BaseCredentialsAuthenticator {
+    provider;
+    accountManager;
+    client;
+    constructor(ctx) {
+        super();
+        this.accountManager = ctx.accountManager;
+        this.provider = ctx.provider;
+        this.client = ctx.clientFactory.create({
+            url: ctx.provider.url,
+            tls: ctx.provider.tls,
+            startTLS: ctx.provider.start_tls,
+            baseDn: ctx.provider.base_dn,
+            user: ctx.provider.user,
+            password: ctx.provider.password,
+            userNameAttribute: ctx.provider.user_name_attribute,
+        });
+    }
+    async authenticate(name, password) {
+        let bind = await this.safeBind();
+        if (!bind.success) {
+            await this.safeUnbind();
+            throw UserError.credentialsInvalid();
+        }
+        const entity = await this.findOneByName(name);
+        if (!entity) {
+            throw UserError.credentialsInvalid();
+        }
+        const identity = {
+            id: entity.dn,
+            attributeCandidates: {
+                name: [
+                    entity[this.provider.user_name_attribute || 'cn'],
+                    entity.dn,
+                ],
+                email: [
+                    entity[this.provider.user_mail_attribute || 'mail'],
+                ],
+            },
+            data: entity,
+            provider: this.provider,
+        };
+        try {
+            identity.roles = await this.findUserGroups(entity);
+        }
+        catch (e) {
+            // todo: log event
+        }
+        bind = await this.safeBind(identity.id, password);
+        await this.safeUnbind();
+        if (!bind.success) {
+            throw UserError.credentialsInvalid();
+        }
+        const account = await this.accountManager.save(identity);
+        return account.user;
+    }
+    async bind(user, password) {
+        if (!user) {
+            return this.client.bind();
+        }
+        if (!this.client.isDn(user)) {
+            const nameAttribute = this.provider.user_name_attribute || 'cn';
+            user = `${nameAttribute}=${user},${this.client.resolveDn(this.provider.user_base_dn, this.provider.base_dn)}`;
+        }
+        return this.client.bind(user, password);
+    }
+    async safeBind(user, password) {
+        try {
+            await this.bind(user, password);
+            return { success: true, data: null };
+        }
+        catch (e) {
+            return { success: false, error: e };
+        }
+    }
+    async unbind() {
+        return this.client.unbind();
+    }
+    async safeUnbind() {
+        try {
+            await this.unbind();
+            return { success: true, data: null };
+        }
+        catch (e) {
+            return { success: false, error: e };
+        }
+    }
+    async findOneByName(input) {
+        let filter;
+        if (this.provider.user_filter) {
+            filter = template(this.provider.user_filter, {
+                input,
+                name_attribute: this.provider.user_name_attribute || 'cn',
+                mail_attribute: this.provider.user_mail_attribute || 'mail',
+                display_name_attribute: this.provider.user_display_name_attribute || 'cn',
+            });
+        }
+        else if (this.provider.user_name_attribute) {
+            filter = new ldap.EqualityFilter({
+                attribute: this.provider.user_name_attribute,
+                value: input,
+            });
+        }
+        else {
+            filter = new ldap.OrFilter({
+                filters: [
+                    new ldap.EqualityFilter({
+                        attribute: 'cn',
+                        value: input,
+                    }),
+                    new ldap.EqualityFilter({
+                        attribute: 'sAMAccountName',
+                        value: input,
+                    }),
+                ],
+            });
+        }
+        const entities = await this.client.search({
+            filter,
+            scope: 'sub',
+        }, this.client.resolveDn(this.provider.user_base_dn, this.provider.base_dn));
+        if (entities.length === 0) {
+            return null;
+        }
+        return entities[0];
+    }
+    async findUserGroups(user) {
+        const nameAttribute = this.provider.group_name_attribute || 'cn';
+        const memberAttribute = this.provider.group_member_attribute || 'member';
+        let filter;
+        if (this.provider.group_filter) {
+            filter = template(this.provider.group_filter, {
+                ...user,
+                name_attribute: nameAttribute,
+                member_attribute: memberAttribute,
+            });
+        }
+        else {
+            filter = new ldap.AndFilter({
+                filters: [
+                    new ldap.EqualityFilter({
+                        attribute: 'objectClass',
+                        value: this.provider.group_class || 'group',
+                    }),
+                    new ldap.EqualityFilter({
+                        attribute: memberAttribute,
+                        value: user[this.provider.group_member_user_attribute || 'dn'],
+                    }),
+                ],
+            });
+        }
+        const entities = await this.client.search({
+            filter,
+            scope: 'sub',
+        }, this.client.resolveDn(this.provider.group_base_dn, this.provider.base_dn));
+        if (entities.length === 0) {
+            return [];
+        }
+        const attributeKey = this.provider.group_name_attribute || 'cn';
+        const names = [];
+        for (let i = 0; i < entities.length; i++) {
+            const attribute = entities[i][attributeKey];
+            if (typeof attribute === 'undefined') {
+                continue;
+            }
+            if (typeof attribute === 'string') {
+                names.push(attribute);
+                continue;
+            }
+            if (Array.isArray(attribute)) {
+                names.push(...attribute.filter((el) => typeof el === 'string'));
+            }
+        }
+        return names;
+    }
+}
+//# sourceMappingURL=module.js.map

package/dist/core/identity/provider/authentication/protocols/ldap/module.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"module.js","sourceRoot":"","sources":["../../../../../../../src/core/identity/provider/authentication/protocols/ldap/module.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAGH,OAAO,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAE7C,OAAO,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AACvC,OAAO,IAAI,MAAM,QAAQ,CAAC;AAE1B,OAAO,EAAE,4BAA4B,EAAE,MAAM,wCAAwC,CAAC;AAMtF,MAAM,OAAO,iCAAkC,SAAQ,4BAAkC;IAC3E,QAAQ,CAAwB;IAEhC,cAAc,CAAkC;IAEhD,MAAM,CAAc;IAE9B,YAAY,GAA6C;QACrD,KAAK,EAAE,CAAC;QAER,IAAI,CAAC,cAAc,GAAG,GAAG,CAAC,cAAc,CAAC;QACzC,IAAI,CAAC,QAAQ,GAAG,GAAG,CAAC,QAAQ,CAAC;QAC7B,IAAI,CAAC,MAAM,GAAG,GAAG,CAAC,aAAa,CAAC,MAAM,CAAC;YACnC,GAAG,EAAE,GAAG,CAAC,QAAQ,CAAC,GAAG;YACrB,GAAG,EAAE,GAAG,CAAC,QAAQ,CAAC,GAAG;YACrB,QAAQ,EAAE,GAAG,CAAC,QAAQ,CAAC,SAAS;YAChC,MAAM,EAAE,GAAG,CAAC,QAAQ,CAAC,OAAO;YAC5B,IAAI,EAAE,GAAG,CAAC,QAAQ,CAAC,IAAI;YACvB,QAAQ,EAAE,GAAG,CAAC,QAAQ,CAAC,QAAQ;YAC/B,iBAAiB,EAAE,GAAG,CAAC,QAAQ,CAAC,mBAAmB;SACtD,CAAC,CAAC;IACP,CAAC;IAED,KAAK,CAAC,YAAY,CAAC,IAAY,EAAE,QAAgB;QAC7C,IAAI,IAAI,GAAG,MAAM,IAAI,CAAC,QAAQ,EAAE,CAAC;QACjC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;YAChB,MAAM,IAAI,CAAC,UAAU,EAAE,CAAC;YAExB,MAAM,SAAS,CAAC,kBAAkB,EAAE,CAAC;QACzC,CAAC;QAED,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC;QAC9C,IAAI,CAAC,MAAM,EAAE,CAAC;YACV,MAAM,SAAS,CAAC,kBAAkB,EAAE,CAAC;QACzC,CAAC;QAED,MAAM,QAAQ,GAA8B;YACxC,EAAE,EAAE,MAAM,CAAC,EAAE;YACb,mBAAmB,EAAE;gBACjB,IAAI,EAAE;oBACF,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,mBAAmB,IAAI,IAAI,CAAC;oBACjD,MAAM,CAAC,EAAE;iBACZ;gBACD,KAAK,EAAE;oBACH,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,mBAAmB,IAAI,MAAM,CAAC;iBACtD;aACJ;YACD,IAAI,EAAE,MAAM;YACZ,QAAQ,EAAE,IAAI,CAAC,QAAQ;SAC1B,CAAC;QAEF,IAAI,CAAC;YACD,QAAQ,CAAC,KAAK,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC,CAAC;QACvD,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACT,kBAAkB;QACtB,CAAC;QAED,IAAI,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,EAAE,QAAQ,CAAC,CAAC;QAClD,MAAM,IAAI,CAAC,UAAU,EAAE,CAAC;QAExB,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;YAChB,MAAM,SAAS,CAAC,kBAAkB,EAAE,CAAC;QACzC,CAAC;QAED,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAEzD,OAAO,OAAO,CAAC,IAAI,CAAC;IACxB,CAAC;IAES,KAAK,CAAC,IAAI,CAAC,IAAa,EAAE,QAAiB;QACjD,IAAI,CAAC,IAAI,EAAE,CAAC;YACR,OAAO,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;QAC9B,CAAC;QAED,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YAC1B,MAAM,aAAa,GAAG,IAAI,CAAC,QAAQ,CAAC,mBAAmB,IAAI,IAAI,CAAC;YAChE,IAAI,GAAG,GAAG,aAAa,IAAI,IAAI,IAAI,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,QAAQ,CAAC,YAAY,EAAE,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;QAClH,CAAC;QAED,OAAO,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;IAC5C,CAAC;IAES,KAAK,CAAC,QAAQ,CAAC,IAAa,EAAE,QAAiB;QACrD,IAAI,CAAC;YACD,MAAM,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;YAEhC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;QACzC,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACT,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,CAAU,EAAE,CAAC;QACjD,CAAC;IACL,CAAC;IAES,KAAK,CAAC,MAAM;QAClB,OAAO,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC;IAChC,CAAC;IAES,KAAK,CAAC,UAAU;QACtB,IAAI,CAAC;YACD,MAAM,IAAI,CAAC,MAAM,EAAE,CAAC;YAEpB,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;QACzC,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACT,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,CAAU,EAAE,CAAC;QACjD,CAAC;IACL,CAAC;IAES,KAAK,CAAC,aAAa,CAAC,KAAa;QACvC,IAAI,MAAwB,CAAC;QAE7B,IAAI,IAAI,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC;YAC5B,MAAM,GAAG,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC,WAAW,EAAE;gBACzC,KAAK;gBACL,cAAc,EAAE,IAAI,CAAC,QAAQ,CAAC,mBAAmB,IAAI,IAAI;gBACzD,cAAc,EAAE,IAAI,CAAC,QAAQ,CAAC,mBAAmB,IAAI,MAAM;gBAC3D,sBAAsB,EAAE,IAAI,CAAC,QAAQ,CAAC,2BAA2B,IAAI,IAAI;aAC5E,CAAC,CAAC;QACP,CAAC;aAAM,IAAI,IAAI,CAAC,QAAQ,CAAC,mBAAmB,EAAE,CAAC;YAC3C,MAAM,GAAG,IAAI,IAAI,CAAC,cAAc,CAAC;gBAC7B,SAAS,EAAE,IAAI,CAAC,QAAQ,CAAC,mBAAmB;gBAC5C,KAAK,EAAE,KAAK;aACf,CAAC,CAAC;QACP,CAAC;aAAM,CAAC;YACJ,MAAM,GAAG,IAAI,IAAI,CAAC,QAAQ,CAAC;gBACvB,OAAO,EAAE;oBACL,IAAI,IAAI,CAAC,cAAc,CAAC;wBACpB,SAAS,EAAE,IAAI;wBACf,KAAK,EAAE,KAAK;qBACf,CAAC;oBACF,IAAI,IAAI,CAAC,cAAc,CAAC;wBACpB,SAAS,EAAE,gBAAgB;wBAC3B,KAAK,EAAE,KAAK;qBACf,CAAC;iBACL;aACJ,CAAC,CAAC;QACP,CAAC;QAED,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC;YACtC,MAAM;YACN,KAAK,EAAE,KAAK;SACf,EAAE,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,QAAQ,CAAC,YAAY,EAAE,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC;QAE7E,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACxB,OAAO,IAAI,CAAC;QAChB,CAAC;QAED,OAAO,QAAQ,CAAC,CAAC,CAAC,CAAC;IACvB,CAAC;IAEM,KAAK,CAAC,cAAc,CAAC,IAAyB;QACjD,MAAM,aAAa,GAAG,IAAI,CAAC,QAAQ,CAAC,oBAAoB,IAAI,IAAI,CAAC;QACjE,MAAM,eAAe,GAAG,IAAI,CAAC,QAAQ,CAAC,sBAAsB,IAAI,QAAQ,CAAC;QAEzE,IAAI,MAAwB,CAAC;QAC7B,IAAI,IAAI,CAAC,QAAQ,CAAC,YAAY,EAAE,CAAC;YAC7B,MAAM,GAAG,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC,YAAY,EAAE;gBAC1C,GAAG,IAAI;gBACP,cAAc,EAAE,aAAa;gBAC7B,gBAAgB,EAAE,eAAe;aACpC,CAAC,CAAC;QACP,CAAC;aAAM,CAAC;YACJ,MAAM,GAAG,IAAI,IAAI,CAAC,SAAS,CAAC;gBACxB,OAAO,EAAE;oBACL,IAAI,IAAI,CAAC,cAAc,CAAC;wBACpB,SAAS,EAAE,aAAa;wBACxB,KAAK,EAAE,IAAI,CAAC,QAAQ,CAAC,WAAW,IAAI,OAAO;qBAC9C,CAAC;oBACF,IAAI,IAAI,CAAC,cAAc,CAAC;wBACpB,SAAS,EAAE,eAAe;wBAC1B,KAAK,EAAE,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,2BAA2B,IAAI,IAAI,CAAC;qBACjE,CAAC;iBACL;aACJ,CAAC,CAAC;QACP,CAAC;QAED,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC;YACtC,MAAM;YACN,KAAK,EAAE,KAAK;SACf,EAAE,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,QAAQ,CAAC,aAAa,EAAE,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC;QAE9E,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACxB,OAAO,EAAE,CAAC;QACd,CAAC;QAED,MAAM,YAAY,GAAG,IAAI,CAAC,QAAQ,CAAC,oBAAoB,IAAI,IAAI,CAAC;QAChE,MAAM,KAAK,GAAc,EAAE,CAAC;QAC5B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,QAAQ,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YACvC,MAAM,SAAS,GAAG,QAAQ,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC;YAC5C,IAAI,OAAO,SAAS,KAAK,WAAW,EAAE,CAAC;gBACnC,SAAS;YACb,CAAC;YAED,IAAI,OAAO,SAAS,KAAK,QAAQ,EAAE,CAAC;gBAChC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;gBACtB,SAAS;YACb,CAAC;YAED,IAAI,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,CAAC;gBAC3B,KAAK,CAAC,IAAI,CAAC,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,OAAO,EAAE,KAAK,QAAQ,CAAC,CAAC,CAAC;YACpE,CAAC;QACL,CAAC;QAED,OAAO,KAAK,CAAC;IACjB,CAAC;CACJ"}

package/dist/core/identity/provider/authentication/protocols/ldap/types.d.ts

@@ -0,0 +1,16 @@
+import type { LdapIdentityProvider } from '@authup/core-kit';
+import type { IIdentityProviderRepository } from '../../../../../entities/index.ts';
+import type { ILdapClientFactory } from '../../../../../ldap/index.ts';
+import type { IIdentityProviderAccountManager } from '../../../account/index.ts';
+type IdentityProviderAuthenticatorBaseContext = {
+    clientFactory: ILdapClientFactory;
+    accountManager: IIdentityProviderAccountManager;
+};
+export type IdentityProviderLdapCollectionAuthenticatorContext = IdentityProviderAuthenticatorBaseContext & {
+    repository: IIdentityProviderRepository;
+};
+export type IdentityProviderLdapAuthenticatorContext = IdentityProviderAuthenticatorBaseContext & {
+    provider: LdapIdentityProvider;
+};
+export {};
+//# sourceMappingURL=types.d.ts.map

package/dist/core/identity/provider/authentication/protocols/ldap/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../../../../../src/core/identity/provider/authentication/protocols/ldap/types.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,kBAAkB,CAAC;AAC7D,OAAO,KAAK,EAAE,2BAA2B,EAAE,MAAM,kCAAkC,CAAC;AACpF,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,8BAA8B,CAAC;AACvE,OAAO,KAAK,EAAE,+BAA+B,EAAE,MAAM,2BAA2B,CAAC;AAEjF,KAAK,wCAAwC,GAAG;IAC5C,aAAa,EAAE,kBAAkB,CAAC;IAClC,cAAc,EAAE,+BAA+B,CAAA;CAClD,CAAC;AAEF,MAAM,MAAM,kDAAkD,GAAG,wCAAwC,GAAG;IACxG,UAAU,EAAE,2BAA2B,CAAA;CAC1C,CAAC;AAEF,MAAM,MAAM,wCAAwC,GAAG,wCAAwC,GAAG;IAC9F,QAAQ,EAAE,oBAAoB,CAAA;CACjC,CAAC"}

package/dist/core/identity/provider/authentication/protocols/ldap/types.js

@@ -0,0 +1,8 @@
+/*
+ * Copyright (c) 2025.
+ * Author Peter Placzek (tada5hi)
+ * For the full copyright and license information,
+ * view the LICENSE file that was distributed with this source code.
+ */
+export {};
+//# sourceMappingURL=types.js.map

package/dist/core/identity/provider/authentication/protocols/ldap/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../../../../../../src/core/identity/provider/authentication/protocols/ldap/types.ts"],"names":[],"mappings":"AAAA;;;;;GAKG"}

package/dist/core/identity/provider/authentication/protocols/oauth2/index.d.ts

@@ -0,0 +1,3 @@
+export * from './module.ts';
+export * from './types.ts';
+//# sourceMappingURL=index.d.ts.map

package/dist/core/identity/provider/authentication/protocols/oauth2/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../../../src/core/identity/provider/authentication/protocols/oauth2/index.ts"],"names":[],"mappings":"AAOA,cAAc,aAAa,CAAC;AAC5B,cAAc,YAAY,CAAC"}

package/dist/core/identity/provider/authentication/protocols/oauth2/index.js

@@ -0,0 +1,9 @@
+/*
+ * Copyright (c) 2023.
+ * Author Peter Placzek (tada5hi)
+ * For the full copyright and license information,
+ * view the LICENSE file that was distributed with this source code.
+ */
+export * from "./module.js";
+export * from "./types.js";
+//# sourceMappingURL=index.js.map

package/dist/core/identity/provider/authentication/protocols/oauth2/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../../../../src/core/identity/provider/authentication/protocols/oauth2/index.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,cAAc,aAAa,CAAC;AAC5B,cAAc,YAAY,CAAC"}

package/dist/core/identity/provider/authentication/protocols/oauth2/module.d.ts

@@ -0,0 +1,19 @@
+import type { OAuth2IdentityProvider, OpenIDIdentityProvider, User } from '@authup/core-kit';
+import type { Result } from '@authup/kit';
+import type { AuthorizeParameters, TokenGrantResponse } from '@hapic/oauth2';
+import { OAuth2Client } from '@hapic/oauth2';
+import type { IIdentityProviderAccountManager } from '../../../account/index.ts';
+import type { IdentityProviderIdentity } from '../../../types.ts';
+import type { IOAuth2Authenticator, IdentityProviderOAuth2AuthenticatorContext, IdentityProviderOAuth2AuthenticatorOptions, OAuth2AuthorizationCodeGrantPayload } from './types.ts';
+export declare class IdentityProviderOAuth2Authenticator implements IOAuth2Authenticator<User> {
+    protected client: OAuth2Client;
+    protected options: IdentityProviderOAuth2AuthenticatorOptions;
+    protected accountManager: IIdentityProviderAccountManager;
+    protected provider: OAuth2IdentityProvider | OpenIDIdentityProvider;
+    constructor(ctx: IdentityProviderOAuth2AuthenticatorContext);
+    buildRedirectURL(parameters?: Partial<AuthorizeParameters>): string;
+    authenticate(params: OAuth2AuthorizationCodeGrantPayload): Promise<User>;
+    safeAuthenticate(params: OAuth2AuthorizationCodeGrantPayload): Promise<Result<User>>;
+    protected buildIdentityWithTokenGrantResponse(input: TokenGrantResponse): Promise<IdentityProviderIdentity>;
+}
+//# sourceMappingURL=module.d.ts.map

package/dist/core/identity/provider/authentication/protocols/oauth2/module.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"module.d.ts","sourceRoot":"","sources":["../../../../../../../src/core/identity/provider/authentication/protocols/oauth2/module.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,sBAAsB,EAAE,sBAAsB,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAC;AAE7F,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AAE1C,OAAO,KAAK,EAAE,mBAAmB,EAAE,kBAAkB,EAAE,MAAM,eAAe,CAAC;AAC7E,OAAO,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AAC7C,OAAO,KAAK,EAAE,+BAA+B,EAAE,MAAM,2BAA2B,CAAC;AACjF,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,mBAAmB,CAAC;AAClE,OAAO,KAAK,EACR,oBAAoB,EACpB,0CAA0C,EAC1C,0CAA0C,EAC1C,mCAAmC,EACtC,MAAM,YAAY,CAAC;AAEpB,qBAAa,mCAAoC,YAAW,oBAAoB,CAAC,IAAI,CAAC;IAClF,SAAS,CAAC,MAAM,EAAG,YAAY,CAAC;IAEhC,SAAS,CAAC,OAAO,EAAG,0CAA0C,CAAC;IAE/D,SAAS,CAAC,cAAc,EAAE,+BAA+B,CAAC;IAE1D,SAAS,CAAC,QAAQ,EAAG,sBAAsB,GAAG,sBAAsB,CAAC;gBAIzD,GAAG,EAAE,0CAA0C;IAoB3D,gBAAgB,CAAC,UAAU,GAAE,OAAO,CAAC,mBAAmB,CAAM,GAAI,MAAM;IAMlE,YAAY,CAAC,MAAM,EAAE,mCAAmC,GAAG,OAAO,CAAC,IAAI,CAAC;IAaxE,gBAAgB,CAAC,MAAM,EAAE,mCAAmC,GAAG,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;cAW1E,mCAAmC,CAAC,KAAK,EAAE,kBAAkB,GAAI,OAAO,CAAC,wBAAwB,CAAC;CAiBrH"}