@authup/server-core 1.0.0-beta.27 → 1.0.0-beta.29

package/dist/core/oauth2/grant-types/password.js

@@ -0,0 +1,50 @@
+/*
+ * Copyright (c) 2022.
+ * Author Peter Placzek (tada5hi)
+ * For the full copyright and license information,
+ * view the LICENSE file that was distributed with this source code.
+ */
+import { OAuth2SubKind } from '@authup/specs';
+import { IdentityType, ScopeName, } from '@authup/core-kit';
+import { buildOAuth2BearerTokenResponse } from "../response/index.js";
+import { OAuth2BaseGrant } from "./base.js";
+export class PasswordGrantType extends OAuth2BaseGrant {
+    refreshTokenIssuer;
+    constructor(ctx) {
+        super({
+            accessTokenIssuer: ctx.accessTokenIssuer,
+            sessionManager: ctx.sessionManager,
+        });
+        this.refreshTokenIssuer = ctx.refreshTokenIssuer;
+    }
+    async runWith(input, options = {}) {
+        const session = await this.sessionManager.create({
+            user_agent: options.userAgent,
+            ip_address: options.ipAddress,
+            realm_id: input.realm_id,
+            client_id: input.client_id || undefined,
+            sub: input.id,
+            sub_kind: IdentityType.USER,
+        });
+        const issuePayload = {
+            client_id: input.client_id || undefined,
+            session_id: session.id,
+            user_agent: session.user_agent,
+            remote_address: session.ip_address,
+            scope: ScopeName.GLOBAL,
+            sub: input.id,
+            sub_kind: OAuth2SubKind.USER,
+            realm_id: input.realm_id,
+            realm_name: input.realm?.name,
+        };
+        const [accessToken, accessTokenPayload] = await this.accessTokenIssuer.issue(issuePayload);
+        const [refreshToken, refreshTokenPayload] = await this.refreshTokenIssuer.issue(issuePayload);
+        return buildOAuth2BearerTokenResponse({
+            accessToken,
+            accessTokenPayload,
+            refreshToken,
+            refreshTokenPayload,
+        });
+    }
+}
+//# sourceMappingURL=password.js.map

package/dist/core/oauth2/grant-types/password.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"password.js","sourceRoot":"","sources":["../../../../src/core/oauth2/grant-types/password.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAGH,OAAO,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AAE9C,OAAO,EACH,YAAY,EACZ,SAAS,GACZ,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAAE,8BAA8B,EAAE,MAAM,sBAAsB,CAAC;AAEtE,OAAO,EAAE,eAAe,EAAE,MAAM,WAAW,CAAC;AAG5C,MAAM,OAAO,iBAAkB,SAAQ,eAAqB;IAC9C,kBAAkB,CAAsB;IAElD,YAAY,GAA+B;QACvC,KAAK,CAAC;YACF,iBAAiB,EAAE,GAAG,CAAC,iBAAiB;YACxC,cAAc,EAAE,GAAG,CAAC,cAAc;SACrC,CAAC,CAAC;QAEH,IAAI,CAAC,kBAAkB,GAAG,GAAG,CAAC,kBAAkB,CAAC;IACrD,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,KAAW,EAAE,UAAqC,EAAE;QAC9D,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC;YAC7C,UAAU,EAAE,OAAO,CAAC,SAAS;YAC7B,UAAU,EAAE,OAAO,CAAC,SAAS;YAC7B,QAAQ,EAAE,KAAK,CAAC,QAAQ;YACxB,SAAS,EAAE,KAAK,CAAC,SAAS,IAAI,SAAS;YACvC,GAAG,EAAE,KAAK,CAAC,EAAE;YACb,QAAQ,EAAE,YAAY,CAAC,IAAI;SAC9B,CAAC,CAAC;QAEH,MAAM,YAAY,GAAiC;YAC/C,SAAS,EAAE,KAAK,CAAC,SAAS,IAAI,SAAS;YACvC,UAAU,EAAE,OAAO,CAAC,EAAE;YACtB,UAAU,EAAE,OAAO,CAAC,UAAU;YAC9B,cAAc,EAAE,OAAO,CAAC,UAAU;YAClC,KAAK,EAAE,SAAS,CAAC,MAAM;YACvB,GAAG,EAAE,KAAK,CAAC,EAAE;YACb,QAAQ,EAAE,aAAa,CAAC,IAAI;YAC5B,QAAQ,EAAE,KAAK,CAAC,QAAQ;YACxB,UAAU,EAAE,KAAK,CAAC,KAAK,EAAE,IAAI;SAChC,CAAC;QAEF,MAAM,CAAC,WAAW,EAAE,kBAAkB,CAAC,GAAG,MAAM,IAAI,CAAC,iBAAiB,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;QAC3F,MAAM,CAAC,YAAY,EAAE,mBAAmB,CAAC,GAAG,MAAM,IAAI,CAAC,kBAAkB,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;QAE9F,OAAO,8BAA8B,CAAC;YAClC,WAAW;YACX,kBAAkB;YAClB,YAAY;YACZ,mBAAmB;SACtB,CAAC,CAAC;IACP,CAAC;CACJ"}

package/dist/core/oauth2/grant-types/refresh-token.d.ts

@@ -0,0 +1,12 @@
+import type { OAuth2TokenGrantResponse, OAuth2TokenPayload } from '@authup/specs';
+import type { IOAuth2TokenIssuer, IOAuth2TokenRevoker, IOAuth2TokenVerifier } from '../token/index.ts';
+import { OAuth2BaseGrant } from './base.ts';
+import type { IOAuth2Grant, OAuth2GrantRunWIthOptions, OAuth2RefreshTokenGrantContext } from './types.ts';
+export declare class OAuth2RefreshTokenGrant extends OAuth2BaseGrant<string | OAuth2TokenPayload> implements IOAuth2Grant {
+    protected refreshTokenIssuer: IOAuth2TokenIssuer;
+    protected tokenVerifier: IOAuth2TokenVerifier;
+    protected tokenRevoker: IOAuth2TokenRevoker;
+    constructor(ctx: OAuth2RefreshTokenGrantContext);
+    runWith(input: string | OAuth2TokenPayload, options?: OAuth2GrantRunWIthOptions): Promise<OAuth2TokenGrantResponse>;
+}
+//# sourceMappingURL=refresh-token.d.ts.map

package/dist/core/oauth2/grant-types/refresh-token.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"refresh-token.d.ts","sourceRoot":"","sources":["../../../../src/core/oauth2/grant-types/refresh-token.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,wBAAwB,EAAE,kBAAkB,EAAE,MAAM,eAAe,CAAC;AAGlF,OAAO,KAAK,EAAE,kBAAkB,EAAE,mBAAmB,EAAE,oBAAoB,EAAE,MAAM,mBAAmB,CAAC;AACvG,OAAO,EAAE,eAAe,EAAE,MAAM,WAAW,CAAC;AAC5C,OAAO,KAAK,EAAE,YAAY,EAAE,yBAAyB,EAAE,8BAA8B,EAAE,MAAM,YAAY,CAAC;AAE1G,qBAAa,uBAAwB,SAAQ,eAAe,CAAC,MAAM,GAAG,kBAAkB,CAAE,YAAW,YAAY;IAC7G,SAAS,CAAC,kBAAkB,EAAG,kBAAkB,CAAC;IAElD,SAAS,CAAC,aAAa,EAAG,oBAAoB,CAAC;IAE/C,SAAS,CAAC,YAAY,EAAG,mBAAmB,CAAC;gBAEjC,GAAG,EAAE,8BAA8B;IAYzC,OAAO,CACT,KAAK,EAAE,MAAM,GAAG,kBAAkB,EAClC,OAAO,GAAE,yBAA8B,GACvC,OAAO,CAAC,wBAAwB,CAAC;CAkDxC"}

package/dist/core/oauth2/grant-types/refresh-token.js

@@ -0,0 +1,67 @@
+/*
+ * Copyright (c) 2022.
+ * Author Peter Placzek (tada5hi)
+ * For the full copyright and license information,
+ * view the LICENSE file that was distributed with this source code.
+ */
+import { JWTError } from '@authup/specs';
+import { buildOAuth2BearerTokenResponse } from "../response/index.js";
+import { OAuth2BaseGrant } from "./base.js";
+export class OAuth2RefreshTokenGrant extends OAuth2BaseGrant {
+    refreshTokenIssuer;
+    tokenVerifier;
+    tokenRevoker;
+    constructor(ctx) {
+        super({
+            accessTokenIssuer: ctx.accessTokenIssuer,
+            sessionManager: ctx.sessionManager,
+        });
+        this.refreshTokenIssuer = ctx.refreshTokenIssuer;
+        this.tokenVerifier = ctx.tokenVerifier;
+        this.tokenRevoker = ctx.tokenRevoker;
+    }
+    async runWith(input, options = {}) {
+        let payload;
+        if (typeof input === 'string') {
+            payload = await this.tokenVerifier.verify(input);
+        }
+        else {
+            payload = input;
+        }
+        await this.tokenRevoker.revoke(payload);
+        if (!payload.session_id) {
+            throw JWTError.payloadPropertyInvalid('session_id');
+        }
+        const session = await this.sessionManager.findOneById(payload.session_id);
+        if (!session) {
+            throw JWTError.payloadPropertyInvalid('session_id');
+        }
+        await this.sessionManager.verify(session);
+        if (options.userAgent) {
+            session.user_agent = options.userAgent;
+        }
+        if (options.ipAddress) {
+            session.ip_address = options.ipAddress;
+        }
+        await this.sessionManager.refresh(session);
+        const [accessToken, accessTokenPayload] = await this.accessTokenIssuer.issue({
+            ...payload,
+            user_agent: session.user_agent,
+            remote_address: session.ip_address,
+            exp: this.accessTokenIssuer.buildExp(),
+        });
+        const [refreshToken, refreshTokenPayload] = await this.refreshTokenIssuer.issue({
+            ...payload,
+            user_agent: session.user_agent,
+            remote_address: session.ip_address,
+            exp: this.refreshTokenIssuer.buildExp(),
+        });
+        return buildOAuth2BearerTokenResponse({
+            accessToken,
+            accessTokenPayload,
+            refreshToken,
+            refreshTokenPayload,
+        });
+    }
+}
+//# sourceMappingURL=refresh-token.js.map

package/dist/core/oauth2/grant-types/refresh-token.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"refresh-token.js","sourceRoot":"","sources":["../../../../src/core/oauth2/grant-types/refresh-token.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAGH,OAAO,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AACzC,OAAO,EAAE,8BAA8B,EAAE,MAAM,sBAAsB,CAAC;AAEtE,OAAO,EAAE,eAAe,EAAE,MAAM,WAAW,CAAC;AAG5C,MAAM,OAAO,uBAAwB,SAAQ,eAA4C;IAC3E,kBAAkB,CAAsB;IAExC,aAAa,CAAwB;IAErC,YAAY,CAAuB;IAE7C,YAAY,GAAmC;QAC3C,KAAK,CAAC;YACF,iBAAiB,EAAE,GAAG,CAAC,iBAAiB;YACxC,cAAc,EAAE,GAAG,CAAC,cAAc;SACrC,CAAC,CAAC;QAEH,IAAI,CAAC,kBAAkB,GAAG,GAAG,CAAC,kBAAkB,CAAC;QAEjD,IAAI,CAAC,aAAa,GAAG,GAAG,CAAC,aAAa,CAAC;QACvC,IAAI,CAAC,YAAY,GAAG,GAAG,CAAC,YAAY,CAAC;IACzC,CAAC;IAED,KAAK,CAAC,OAAO,CACT,KAAkC,EAClC,UAAqC,EAAE;QAEvC,IAAI,OAA4B,CAAC;QACjC,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;YAC5B,OAAO,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACrD,CAAC;aAAM,CAAC;YACJ,OAAO,GAAG,KAAK,CAAC;QACpB,CAAC;QAED,MAAM,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QAExC,IAAI,CAAC,OAAO,CAAC,UAAU,EAAE,CAAC;YACtB,MAAM,QAAQ,CAAC,sBAAsB,CAAC,YAAY,CAAC,CAAC;QACxD,CAAC;QAED,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,WAAW,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;QAC1E,IAAI,CAAC,OAAO,EAAE,CAAC;YACX,MAAM,QAAQ,CAAC,sBAAsB,CAAC,YAAY,CAAC,CAAC;QACxD,CAAC;QAED,MAAM,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QAE1C,IAAI,OAAO,CAAC,SAAS,EAAE,CAAC;YACpB,OAAO,CAAC,UAAU,GAAG,OAAO,CAAC,SAAS,CAAC;QAC3C,CAAC;QACD,IAAI,OAAO,CAAC,SAAS,EAAE,CAAC;YACpB,OAAO,CAAC,UAAU,GAAG,OAAO,CAAC,SAAS,CAAC;QAC3C,CAAC;QACD,MAAM,IAAI,CAAC,cAAc,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;QAE3C,MAAM,CAAC,WAAW,EAAE,kBAAkB,CAAC,GAAG,MAAM,IAAI,CAAC,iBAAiB,CAAC,KAAK,CAAC;YACzE,GAAG,OAAO;YACV,UAAU,EAAE,OAAO,CAAC,UAAU;YAC9B,cAAc,EAAE,OAAO,CAAC,UAAU;YAClC,GAAG,EAAE,IAAI,CAAC,iBAAiB,CAAC,QAAQ,EAAE;SACzC,CAAC,CAAC;QAEH,MAAM,CAAC,YAAY,EAAE,mBAAmB,CAAC,GAAG,MAAM,IAAI,CAAC,kBAAkB,CAAC,KAAK,CAAC;YAC5E,GAAG,OAAO;YACV,UAAU,EAAE,OAAO,CAAC,UAAU;YAC9B,cAAc,EAAE,OAAO,CAAC,UAAU;YAClC,GAAG,EAAE,IAAI,CAAC,kBAAkB,CAAC,QAAQ,EAAE;SAC1C,CAAC,CAAC;QAEH,OAAO,8BAA8B,CAAC;YAClC,WAAW;YACX,kBAAkB;YAClB,YAAY;YACZ,mBAAmB;SACtB,CAAC,CAAC;IACP,CAAC;CACJ"}

package/dist/core/oauth2/grant-types/robot-credentials.d.ts

@@ -0,0 +1,8 @@
+import type { OAuth2TokenGrantResponse } from '@authup/specs';
+import type { Robot } from '@authup/core-kit';
+import { OAuth2BaseGrant } from './base.ts';
+import type { OAuth2GrantRunWIthOptions } from './types.ts';
+export declare class RobotCredentialsGrant extends OAuth2BaseGrant<Robot> {
+    runWith(input: Robot, options?: OAuth2GrantRunWIthOptions): Promise<OAuth2TokenGrantResponse>;
+}
+//# sourceMappingURL=robot-credentials.d.ts.map

package/dist/core/oauth2/grant-types/robot-credentials.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"robot-credentials.d.ts","sourceRoot":"","sources":["../../../../src/core/oauth2/grant-types/robot-credentials.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,eAAe,CAAC;AAE9D,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,kBAAkB,CAAC;AAK9C,OAAO,EAAE,eAAe,EAAE,MAAM,WAAW,CAAC;AAE5C,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,YAAY,CAAC;AAE5D,qBAAa,qBAAsB,SAAQ,eAAe,CAAC,KAAK,CAAC;IACvD,OAAO,CAAC,KAAK,EAAE,KAAK,EAAE,OAAO,GAAE,yBAA8B,GAAI,OAAO,CAAC,wBAAwB,CAAC;CA0B3G"}

package/dist/core/oauth2/grant-types/robot-credentials.js

@@ -0,0 +1,37 @@
+/*
+ * Copyright (c) 2022.
+ * Author Peter Placzek (tada5hi)
+ * For the full copyright and license information,
+ * view the LICENSE file that was distributed with this source code.
+ */
+import { OAuth2SubKind } from '@authup/specs';
+import { IdentityType, ScopeName, } from '@authup/core-kit';
+import { OAuth2BaseGrant } from "./base.js";
+import { buildOAuth2BearerTokenResponse } from "../response/index.js";
+export class RobotCredentialsGrant extends OAuth2BaseGrant {
+    async runWith(input, options = {}) {
+        const session = await this.sessionManager.create({
+            user_agent: options.userAgent,
+            ip_address: options.ipAddress,
+            realm_id: input.realm_id,
+            sub: input.id,
+            sub_kind: IdentityType.ROBOT,
+        });
+        const [accessToken, accessTokenPayload] = await this.accessTokenIssuer.issue({
+            session_id: session.id,
+            user_agent: session.user_agent,
+            remote_address: session.ip_address,
+            scope: ScopeName.GLOBAL,
+            sub: input.id,
+            sub_kind: OAuth2SubKind.ROBOT,
+            realm_id: input.realm.id,
+            realm_name: input.realm?.id,
+            client_id: input.client_id || undefined,
+        });
+        return buildOAuth2BearerTokenResponse({
+            accessToken,
+            accessTokenPayload,
+        });
+    }
+}
+//# sourceMappingURL=robot-credentials.js.map

package/dist/core/oauth2/grant-types/robot-credentials.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"robot-credentials.js","sourceRoot":"","sources":["../../../../src/core/oauth2/grant-types/robot-credentials.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAGH,OAAO,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AAE9C,OAAO,EACH,YAAY,EACZ,SAAS,GACZ,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAAE,eAAe,EAAE,MAAM,WAAW,CAAC;AAC5C,OAAO,EAAE,8BAA8B,EAAE,MAAM,sBAAsB,CAAC;AAGtE,MAAM,OAAO,qBAAsB,SAAQ,eAAsB;IAC7D,KAAK,CAAC,OAAO,CAAC,KAAY,EAAE,UAAqC,EAAE;QAC/D,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC;YAC7C,UAAU,EAAE,OAAO,CAAC,SAAS;YAC7B,UAAU,EAAE,OAAO,CAAC,SAAS;YAC7B,QAAQ,EAAE,KAAK,CAAC,QAAQ;YACxB,GAAG,EAAE,KAAK,CAAC,EAAE;YACb,QAAQ,EAAE,YAAY,CAAC,KAAK;SAC/B,CAAC,CAAC;QAEH,MAAM,CAAC,WAAW,EAAE,kBAAkB,CAAC,GAAG,MAAM,IAAI,CAAC,iBAAiB,CAAC,KAAK,CAAC;YACzE,UAAU,EAAE,OAAO,CAAC,EAAE;YACtB,UAAU,EAAE,OAAO,CAAC,UAAU;YAC9B,cAAc,EAAE,OAAO,CAAC,UAAU;YAClC,KAAK,EAAE,SAAS,CAAC,MAAM;YACvB,GAAG,EAAE,KAAK,CAAC,EAAE;YACb,QAAQ,EAAE,aAAa,CAAC,KAAK;YAC7B,QAAQ,EAAE,KAAK,CAAC,KAAK,CAAC,EAAE;YACxB,UAAU,EAAE,KAAK,CAAC,KAAK,EAAE,EAAE;YAC3B,SAAS,EAAE,KAAK,CAAC,SAAS,IAAI,SAAS;SAC1C,CAAC,CAAC;QAEH,OAAO,8BAA8B,CAAC;YAClC,WAAW;YACX,kBAAkB;SACrB,CAAC,CAAC;IACP,CAAC;CACJ"}

package/dist/core/oauth2/grant-types/types.d.ts

@@ -0,0 +1,30 @@
+import type { ObjectLiteral } from '@authup/kit';
+import type { OAuth2TokenGrantResponse } from '@authup/specs';
+import type { ISessionManager } from '../../authentication/index.ts';
+import type { IOAuth2TokenIssuer, IOAuth2TokenRevoker, IOAuth2TokenVerifier } from '../token/index.ts';
+export type BaseGrantContext = {
+    accessTokenIssuer: IOAuth2TokenIssuer;
+    sessionManager: ISessionManager;
+};
+export type OAuth2AuthorizeGrantContext = BaseGrantContext & {
+    refreshTokenIssuer: IOAuth2TokenIssuer;
+};
+export type OAuth2IdentityGrantContext = BaseGrantContext & {
+    refreshTokenIssuer: IOAuth2TokenIssuer;
+};
+export type OAuth2PasswordGrantContext = BaseGrantContext & {
+    refreshTokenIssuer: IOAuth2TokenIssuer;
+};
+export type OAuth2RefreshTokenGrantContext = BaseGrantContext & {
+    refreshTokenIssuer: IOAuth2TokenIssuer;
+    tokenVerifier: IOAuth2TokenVerifier;
+    tokenRevoker: IOAuth2TokenRevoker;
+};
+export type OAuth2GrantRunWIthOptions = {
+    userAgent?: string;
+    ipAddress?: string;
+};
+export interface IOAuth2Grant<T = ObjectLiteral> {
+    runWith(data: T, base?: OAuth2GrantRunWIthOptions): Promise<OAuth2TokenGrantResponse>;
+}
+//# sourceMappingURL=types.d.ts.map

package/dist/core/oauth2/grant-types/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../../src/core/oauth2/grant-types/types.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AACjD,OAAO,KAAK,EACR,wBAAwB,EAC3B,MAAM,eAAe,CAAC;AACvB,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,+BAA+B,CAAC;AACrE,OAAO,KAAK,EAAE,kBAAkB,EAAE,mBAAmB,EAAE,oBAAoB,EAAE,MAAM,mBAAmB,CAAC;AAEvG,MAAM,MAAM,gBAAgB,GAAG;IAC3B,iBAAiB,EAAE,kBAAkB,CAAC;IACtC,cAAc,EAAE,eAAe,CAAA;CAClC,CAAC;AAEF,MAAM,MAAM,2BAA2B,GAAG,gBAAgB,GAAG;IACzD,kBAAkB,EAAE,kBAAkB,CAAC;CAC1C,CAAC;AAEF,MAAM,MAAM,0BAA0B,GAAG,gBAAgB,GAAG;IACxD,kBAAkB,EAAE,kBAAkB,CAAC;CAC1C,CAAC;AAEF,MAAM,MAAM,0BAA0B,GAAG,gBAAgB,GAAG;IACxD,kBAAkB,EAAE,kBAAkB,CAAC;CAC1C,CAAC;AAEF,MAAM,MAAM,8BAA8B,GAAG,gBAAgB,GAAG;IAC5D,kBAAkB,EAAE,kBAAkB,CAAC;IACvC,aAAa,EAAE,oBAAoB,CAAC;IACpC,YAAY,EAAE,mBAAmB,CAAA;CACpC,CAAC;AAEF,MAAM,MAAM,yBAAyB,GAAG;IACpC,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,SAAS,CAAC,EAAE,MAAM,CAAC;CACtB,CAAC;AAEF,MAAM,WAAW,YAAY,CAAC,CAAC,GAAG,aAAa;IAC3C,OAAO,CAAC,IAAI,EAAE,CAAC,EAAE,IAAI,CAAC,EAAE,yBAAyB,GAAI,OAAO,CAAC,wBAAwB,CAAC,CAAC;CAC1F"}

package/dist/core/oauth2/grant-types/types.js

@@ -0,0 +1,8 @@
+/*
+ * Copyright (c) 2022.
+ * Author Peter Placzek (tada5hi)
+ * For the full copyright and license information,
+ * view the LICENSE file that was distributed with this source code.
+ */
+export {};
+//# sourceMappingURL=types.js.map

package/dist/core/oauth2/grant-types/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../../../src/core/oauth2/grant-types/types.ts"],"names":[],"mappings":"AAAA;;;;;GAKG"}

package/dist/core/oauth2/helpers/erorr.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"erorr.d.ts","sourceRoot":"","sources":["../../../../src/core/oauth2/helpers/erorr.ts"],"names":[],"mappings":"AAOA,OAAO,EAAE,WAAW,EAAmB,MAAM,eAAe,CAAC;AAC7D,OAAO,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAC;AAI7C;;;;GAIG;AACH,wBAAgB,aAAa,CAAC,GAAG,EAAE,OAAO,GAAI,WAAW,GAAG,WAAW,CAmBtE"}

package/dist/core/oauth2/helpers/erorr.js

@@ -0,0 +1,34 @@
+/*
+ * Copyright (c) 2025.
+ *  Author Peter Placzek (tada5hi)
+ *  For the full copyright and license information,
+ *  view the LICENSE file that was distributed with this source code.
+ */
+import { OAuth2Error, OAuth2ErrorCode } from '@authup/specs';
+import { AuthupError } from '@authup/errors';
+import { isObject } from '@authup/kit';
+import { sanitizeError } from "../../../utils/index.js";
+/**
+ * Transforms an unknown error to an OAuth2Error.
+ *
+ * @param err
+ */
+export function toOAuth2Error(err) {
+    if (err instanceof OAuth2Error) {
+        return err;
+    }
+    let next;
+    if (err instanceof AuthupError) {
+        next = err;
+    }
+    else {
+        next = sanitizeError(err);
+    }
+    next.data = {
+        error: OAuth2ErrorCode.INVALID_REQUEST,
+        error_description: next.message,
+        ...(isObject(next.data) ? next.data : {}),
+    };
+    return next;
+}
+//# sourceMappingURL=erorr.js.map

package/dist/core/oauth2/helpers/erorr.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"erorr.js","sourceRoot":"","sources":["../../../../src/core/oauth2/helpers/erorr.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,WAAW,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAC7D,OAAO,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAC;AAC7C,OAAO,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AACvC,OAAO,EAAE,aAAa,EAAE,MAAM,yBAAyB,CAAC;AAExD;;;;GAIG;AACH,MAAM,UAAU,aAAa,CAAC,GAAY;IACtC,IAAI,GAAG,YAAY,WAAW,EAAE,CAAC;QAC7B,OAAO,GAAG,CAAC;IACf,CAAC;IAED,IAAI,IAAkB,CAAC;IACvB,IAAI,GAAG,YAAY,WAAW,EAAE,CAAC;QAC7B,IAAI,GAAG,GAAG,CAAC;IACf,CAAC;SAAM,CAAC;QACJ,IAAI,GAAG,aAAa,CAAC,GAAG,CAAC,CAAC;IAC9B,CAAC;IAED,IAAI,CAAC,IAAI,GAAG;QACR,KAAK,EAAE,eAAe,CAAC,eAAe;QACtC,iBAAiB,EAAE,IAAI,CAAC,OAAO;QAC/B,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;KAC5C,CAAC;IAEF,OAAO,IAAI,CAAC;AAChB,CAAC"}

package/dist/core/oauth2/helpers/index.d.ts

@@ -0,0 +1,2 @@
+export * from './erorr.ts';
+//# sourceMappingURL=index.d.ts.map

package/dist/core/oauth2/helpers/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/core/oauth2/helpers/index.ts"],"names":[],"mappings":"AAOA,cAAc,YAAY,CAAC"}

package/dist/core/oauth2/helpers/index.js

@@ -0,0 +1,8 @@
+/*
+ * Copyright (c) 2025.
+ *  Author Peter Placzek (tada5hi)
+ *  For the full copyright and license information,
+ *  view the LICENSE file that was distributed with this source code.
+ */
+export * from "./erorr.js";
+//# sourceMappingURL=index.js.map

package/dist/core/oauth2/helpers/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../src/core/oauth2/helpers/index.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,cAAc,YAAY,CAAC"}

package/dist/core/oauth2/index.d.ts

@@ -0,0 +1,9 @@
+export * from './authorization/index.ts';
+export * from './client/index.ts';
+export * from './grant-types/index.ts';
+export * from './key/index.ts';
+export * from './openid/index.ts';
+export * from './response/index.ts';
+export * from './scope/index.ts';
+export * from './token/index.ts';
+//# sourceMappingURL=index.d.ts.map

package/dist/core/oauth2/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/core/oauth2/index.ts"],"names":[],"mappings":"AAOA,cAAc,0BAA0B,CAAC;AACzC,cAAc,mBAAmB,CAAC;AAClC,cAAc,wBAAwB,CAAC;AACvC,cAAc,gBAAgB,CAAC;AAC/B,cAAc,mBAAmB,CAAC;AAClC,cAAc,qBAAqB,CAAC;AACpC,cAAc,kBAAkB,CAAC;AACjC,cAAc,kBAAkB,CAAC"}

package/dist/core/oauth2/index.js

@@ -0,0 +1,15 @@
+/*
+ * Copyright (c) 2022.
+ * Author Peter Placzek (tada5hi)
+ * For the full copyright and license information,
+ * view the LICENSE file that was distributed with this source code.
+ */
+export * from "./authorization/index.js";
+export * from "./client/index.js";
+export * from "./grant-types/index.js";
+export * from "./key/index.js";
+export * from "./openid/index.js";
+export * from "./response/index.js";
+export * from "./scope/index.js";
+export * from "./token/index.js";
+//# sourceMappingURL=index.js.map

package/dist/core/oauth2/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/core/oauth2/index.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,cAAc,0BAA0B,CAAC;AACzC,cAAc,mBAAmB,CAAC;AAClC,cAAc,wBAAwB,CAAC;AACvC,cAAc,gBAAgB,CAAC;AAC/B,cAAc,mBAAmB,CAAC;AAClC,cAAc,qBAAqB,CAAC;AACpC,cAAc,kBAAkB,CAAC;AACjC,cAAc,kBAAkB,CAAC"}

package/dist/core/oauth2/key/index.d.ts

@@ -0,0 +1,2 @@
+export * from './types.ts';
+//# sourceMappingURL=index.d.ts.map

package/dist/core/oauth2/key/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/core/oauth2/key/index.ts"],"names":[],"mappings":"AAOA,cAAc,YAAY,CAAC"}

package/dist/core/oauth2/key/index.js

@@ -0,0 +1,8 @@
+/*
+ * Copyright (c) 2025.
+ * Author Peter Placzek (tada5hi)
+ * For the full copyright and license information,
+ * view the LICENSE file that was distributed with this source code.
+ */
+export * from "./types.js";
+//# sourceMappingURL=index.js.map

package/dist/core/oauth2/key/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../src/core/oauth2/key/index.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,cAAc,YAAY,CAAC"}

package/dist/core/oauth2/key/types.d.ts

@@ -0,0 +1,16 @@
+import type { Key } from '@authup/core-kit';
+export interface IOAuth2KeyRepository {
+    /**
+     * Find a key for signing and verifying tokens.
+     *
+     * @param realmId
+     */
+    findByRealmId(realmId: string): Promise<Key | null>;
+    /**
+     * Find a key by explicit id.
+     *
+     * @param id
+     */
+    findById(id: string): Promise<Key | null>;
+}
+//# sourceMappingURL=types.d.ts.map

package/dist/core/oauth2/key/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../../src/core/oauth2/key/types.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,GAAG,EAAE,MAAM,kBAAkB,CAAC;AAE5C,MAAM,WAAW,oBAAoB;IACjC;;;;OAIG;IACH,aAAa,CAAC,OAAO,EAAE,MAAM,GAAI,OAAO,CAAC,GAAG,GAAG,IAAI,CAAC,CAAC;IAErD;;;;OAIG;IACH,QAAQ,CAAC,EAAE,EAAE,MAAM,GAAI,OAAO,CAAC,GAAG,GAAG,IAAI,CAAC,CAAC;CAE9C"}

package/dist/core/oauth2/key/types.js

@@ -0,0 +1,8 @@
+/*
+ * Copyright (c) 2025.
+ * Author Peter Placzek (tada5hi)
+ * For the full copyright and license information,
+ * view the LICENSE file that was distributed with this source code.
+ */
+export {};
+//# sourceMappingURL=types.js.map

package/dist/core/oauth2/key/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../../../src/core/oauth2/key/types.ts"],"names":[],"mappings":"AAAA;;;;;GAKG"}

package/dist/core/oauth2/openid/claims.d.ts

@@ -0,0 +1,24 @@
+import type { Client, Identity, Robot, User } from '@authup/core-kit';
+import type { OpenIDTokenPayload } from '@authup/specs';
+import type { ObjectLiteral } from 'validup';
+type AttributeMapTuple<T> = {
+    [K in keyof T]: [K, (value: unknown) => any];
+}[keyof T];
+type AttributeMap<T extends Record<string, any>> = Record<keyof OpenIDTokenPayload, keyof T | AttributeMapTuple<T>>;
+export declare class OAuth2OpenIDClaimsBuilder {
+    protected clientMap: AttributeMap<Client>;
+    protected robotMap: AttributeMap<Robot>;
+    protected userMap: AttributeMap<User>;
+    /**
+     * Build OpenID Claims form Oauth2 Identity.
+     *
+     * @param identity
+     */
+    fromIdentity(identity: Identity): OpenIDTokenPayload;
+    fromClient(input: Client): OpenIDTokenPayload;
+    fromRobot(input: Robot): OpenIDTokenPayload;
+    fromUser(input: User): OpenIDTokenPayload;
+    protected extract<T extends ObjectLiteral = ObjectLiteral>(attributeMap: AttributeMap<T>, attributes: T): OpenIDTokenPayload;
+}
+export {};
+//# sourceMappingURL=claims.d.ts.map

package/dist/core/oauth2/openid/claims.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"claims.d.ts","sourceRoot":"","sources":["../../../../src/core/oauth2/openid/claims.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EACR,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,IAAI,EAChC,MAAM,kBAAkB,CAAC;AAE1B,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,eAAe,CAAC;AAExD,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AAE7C,KAAK,iBAAiB,CAAC,CAAC,IAAI;KACvB,CAAC,IAAI,MAAM,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,KAAK,EAAE,OAAO,KAAK,GAAG,CAAC;CAC/C,CAAC,MAAM,CAAC,CAAC,CAAC;AAEX,KAAK,YAAY,CAAC,CAAC,SAAS,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,IAAI,MAAM,CACzD,MAAM,kBAAkB,EACxB,MAAM,CAAC,GAAG,iBAAiB,CAAC,CAAC,CAAC,CAC7B,CAAC;AAEF,qBAAa,yBAAyB;IAClC,SAAS,CAAC,SAAS,EAAG,YAAY,CAAC,MAAM,CAAC,CAkBxC;IAEF,SAAS,CAAC,QAAQ,EAAG,YAAY,CAAC,KAAK,CAAC,CAkBtC;IAEF,SAAS,CAAC,OAAO,EAAG,YAAY,CAAC,IAAI,CAAC,CAuBpC;IAEF;;;;OAIG;IACH,YAAY,CAAC,QAAQ,EAAE,QAAQ,GAAI,kBAAkB;IAYrD,UAAU,CAAC,KAAK,EAAE,MAAM,GAAI,kBAAkB;IAI9C,SAAS,CAAC,KAAK,EAAE,KAAK,GAAG,kBAAkB;IAI3C,QAAQ,CAAC,KAAK,EAAE,IAAI,GAAI,kBAAkB;IAI1C,SAAS,CAAC,OAAO,CAAC,CAAC,SAAS,aAAa,GAAG,aAAa,EACrD,YAAY,EAAE,YAAY,CAAC,CAAC,CAAC,EAC7B,UAAU,EAAE,CAAC,GACb,kBAAkB;CAqBzB"}

package/dist/core/oauth2/openid/claims.js

@@ -0,0 +1,108 @@
+/*
+ * Copyright (c) 2022.
+ * Author Peter Placzek (tada5hi)
+ * For the full copyright and license information,
+ * view the LICENSE file that was distributed with this source code.
+ */
+import { hasOwnProperty } from '@authup/kit';
+import { OAuth2SubKind } from '@authup/specs';
+export class OAuth2OpenIDClaimsBuilder {
+    clientMap = {
+        name: 'name',
+        nickname: 'name',
+        preferred_username: 'name',
+        updated_at: [
+            'updated_at',
+            (value) => {
+                if (typeof value === 'string') {
+                    return new Date(value).getTime();
+                }
+                if (value instanceof Date) {
+                    return value.getTime();
+                }
+                return value;
+            },
+        ],
+    };
+    robotMap = {
+        name: 'name',
+        nickname: 'name',
+        preferred_username: 'name',
+        updated_at: [
+            'updated_at',
+            (value) => {
+                if (typeof value === 'string') {
+                    return new Date(value).getTime();
+                }
+                if (value instanceof Date) {
+                    return value.getTime();
+                }
+                return value;
+            },
+        ],
+    };
+    userMap = {
+        name: 'name',
+        family_name: 'last_name',
+        given_name: 'first_name',
+        nickname: 'display_name',
+        preferred_username: 'display_name',
+        updated_at: [
+            'updated_at',
+            (value) => {
+                if (typeof value === 'string') {
+                    return new Date(value).getTime();
+                }
+                if (value instanceof Date) {
+                    return value.getTime();
+                }
+                return value;
+            },
+        ],
+        email: 'email',
+        email_verified: 'active',
+    };
+    /**
+     * Build OpenID Claims form Oauth2 Identity.
+     *
+     * @param identity
+     */
+    fromIdentity(identity) {
+        if (identity.type === OAuth2SubKind.CLIENT) {
+            return this.fromClient(identity.data);
+        }
+        if (identity.type === OAuth2SubKind.ROBOT) {
+            return this.fromRobot(identity.data);
+        }
+        return this.fromUser(identity.data);
+    }
+    fromClient(input) {
+        return this.extract(this.clientMap, input);
+    }
+    fromRobot(input) {
+        return this.extract(this.robotMap, input);
+    }
+    fromUser(input) {
+        return this.extract(this.userMap, input);
+    }
+    extract(attributeMap, attributes) {
+        const result = {};
+        const keys = Object.keys(attributeMap);
+        for (let i = 0; i < keys.length; i++) {
+            const attribute = attributeMap[keys[i]];
+            if (typeof attribute === 'string') {
+                if (hasOwnProperty(attributes, attribute)) {
+                    result[keys[i]] = attributes[attribute];
+                }
+            }
+            else {
+                const [key, transformer] = attribute;
+                if (hasOwnProperty(attributes, key)) {
+                    result[keys[i]] = transformer(attributes[key]);
+                }
+            }
+        }
+        return result;
+    }
+}
+//# sourceMappingURL=claims.js.map

package/dist/core/oauth2/openid/claims.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"claims.js","sourceRoot":"","sources":["../../../../src/core/oauth2/openid/claims.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAKH,OAAO,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAE7C,OAAO,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AAY9C,MAAM,OAAO,yBAAyB;IACxB,SAAS,GAA0B;QACzC,IAAI,EAAE,MAAM;QACZ,QAAQ,EAAE,MAAM;QAChB,kBAAkB,EAAE,MAAM;QAC1B,UAAU,EAAE;YACR,YAAY;YACZ,CAAC,KAAc,EAAE,EAAE;gBACf,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;oBAC5B,OAAO,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC,OAAO,EAAE,CAAC;gBACrC,CAAC;gBAED,IAAI,KAAK,YAAY,IAAI,EAAE,CAAC;oBACxB,OAAO,KAAK,CAAC,OAAO,EAAE,CAAC;gBAC3B,CAAC;gBAED,OAAO,KAAK,CAAC;YACjB,CAAC;SACJ;KACJ,CAAC;IAEQ,QAAQ,GAAyB;QACvC,IAAI,EAAE,MAAM;QACZ,QAAQ,EAAE,MAAM;QAChB,kBAAkB,EAAE,MAAM;QAC1B,UAAU,EAAE;YACR,YAAY;YACZ,CAAC,KAAc,EAAE,EAAE;gBACf,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;oBAC5B,OAAO,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC,OAAO,EAAE,CAAC;gBACrC,CAAC;gBAED,IAAI,KAAK,YAAY,IAAI,EAAE,CAAC;oBACxB,OAAO,KAAK,CAAC,OAAO,EAAE,CAAC;gBAC3B,CAAC;gBAED,OAAO,KAAK,CAAC;YACjB,CAAC;SACJ;KACJ,CAAC;IAEQ,OAAO,GAAwB;QACrC,IAAI,EAAE,MAAM;QACZ,WAAW,EAAE,WAAW;QACxB,UAAU,EAAE,YAAY;QACxB,QAAQ,EAAE,cAAc;QACxB,kBAAkB,EAAE,cAAc;QAClC,UAAU,EAAE;YACR,YAAY;YACZ,CAAC,KAAc,EAAE,EAAE;gBACf,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;oBAC5B,OAAO,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC,OAAO,EAAE,CAAC;gBACrC,CAAC;gBAED,IAAI,KAAK,YAAY,IAAI,EAAE,CAAC;oBACxB,OAAO,KAAK,CAAC,OAAO,EAAE,CAAC;gBAC3B,CAAC;gBAED,OAAO,KAAK,CAAC;YACjB,CAAC;SACJ;QAED,KAAK,EAAE,OAAO;QACd,cAAc,EAAE,QAAQ;KAC3B,CAAC;IAEF;;;;OAIG;IACH,YAAY,CAAC,QAAkB;QAC3B,IAAI,QAAQ,CAAC,IAAI,KAAK,aAAa,CAAC,MAAM,EAAE,CAAC;YACzC,OAAO,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;QAC1C,CAAC;QAED,IAAI,QAAQ,CAAC,IAAI,KAAK,aAAa,CAAC,KAAK,EAAE,CAAC;YACxC,OAAO,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;QACzC,CAAC;QAED,OAAO,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;IACxC,CAAC;IAED,UAAU,CAAC,KAAa;QACpB,OAAO,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;IAC/C,CAAC;IAED,SAAS,CAAC,KAAY;QAClB,OAAO,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;IAC9C,CAAC;IAED,QAAQ,CAAC,KAAW;QAChB,OAAO,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;IAC7C,CAAC;IAES,OAAO,CACb,YAA6B,EAC7B,UAAa;QAEb,MAAM,MAAM,GAAG,EAAwB,CAAC;QAExC,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;QACvC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YACnC,MAAM,SAAS,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;YACxC,IAAI,OAAO,SAAS,KAAK,QAAQ,EAAE,CAAC;gBAChC,IAAI,cAAc,CAAC,UAAU,EAAE,SAAS,CAAC,EAAE,CAAC;oBACxC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,GAAG,UAAU,CAAC,SAAS,CAAC,CAAC;gBAC5C,CAAC;YACL,CAAC;iBAAM,CAAC;gBACJ,MAAM,CAAC,GAAG,EAAE,WAAW,CAAC,GAAG,SAAiC,CAAC;gBAE7D,IAAI,cAAc,CAAC,UAAU,EAAE,GAAG,CAAC,EAAE,CAAC;oBAClC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,GAAG,WAAW,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC;gBACnD,CAAC;YACL,CAAC;QACL,CAAC;QAED,OAAO,MAAM,CAAC;IAClB,CAAC;CACJ"}

package/dist/core/oauth2/openid/index.d.ts

@@ -0,0 +1,2 @@
+export * from './claims.ts';
+//# sourceMappingURL=index.d.ts.map

package/dist/core/oauth2/openid/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/core/oauth2/openid/index.ts"],"names":[],"mappings":"AAOA,cAAc,aAAa,CAAC"}

package/dist/core/oauth2/openid/index.js

@@ -0,0 +1,8 @@
+/*
+ * Copyright (c) 2022.
+ * Author Peter Placzek (tada5hi)
+ * For the full copyright and license information,
+ * view the LICENSE file that was distributed with this source code.
+ */
+export * from "./claims.js";
+//# sourceMappingURL=index.js.map

package/dist/core/oauth2/openid/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../src/core/oauth2/openid/index.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,cAAc,aAAa,CAAC"}

package/dist/core/oauth2/response/bearer.d.ts

@@ -0,0 +1,4 @@
+import type { OAuth2TokenGrantResponse } from '@authup/specs';
+import type { OAuth2BearerResponseBuildContext } from './type.ts';
+export declare function buildOAuth2BearerTokenResponse(context: OAuth2BearerResponseBuildContext): OAuth2TokenGrantResponse;
+//# sourceMappingURL=bearer.d.ts.map

package/dist/core/oauth2/response/bearer.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"bearer.d.ts","sourceRoot":"","sources":["../../../../src/core/oauth2/response/bearer.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,wBAAwB,EAAsB,MAAM,eAAe,CAAC;AAClF,OAAO,KAAK,EAAE,gCAAgC,EAAE,MAAM,WAAW,CAAC;AAUlE,wBAAgB,8BAA8B,CAC1C,OAAO,EAAE,gCAAgC,GACzC,wBAAwB,CAuB3B"}

package/dist/core/oauth2/response/bearer.js

@@ -0,0 +1,34 @@
+/*
+ * Copyright (c) 2022.
+ * Author Peter Placzek (tada5hi)
+ * For the full copyright and license information,
+ * view the LICENSE file that was distributed with this source code.
+ */
+function resolveExpiresIn(payload, fallbackValue) {
+    if (payload && payload.exp) {
+        return payload.exp - Math.floor(new Date().getTime() / 1000);
+    }
+    return fallbackValue || 3_600;
+}
+export function buildOAuth2BearerTokenResponse(context) {
+    const response = {
+        access_token: context.accessToken,
+        expires_in: resolveExpiresIn(context.accessTokenPayload),
+        token_type: 'Bearer',
+    };
+    if (context.accessTokenPayload) {
+        response.scope = context.accessTokenPayload.scope;
+    }
+    else if (context.scope) {
+        response.scope = context.scope;
+    }
+    if (context.refreshToken) {
+        response.refresh_token = context.refreshToken;
+        response.refresh_token_expires_in = resolveExpiresIn(context.refreshTokenPayload);
+    }
+    if (context.idToken) {
+        response.id_token = context.idToken;
+    }
+    return response;
+}
+//# sourceMappingURL=bearer.js.map

package/dist/core/oauth2/response/bearer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"bearer.js","sourceRoot":"","sources":["../../../../src/core/oauth2/response/bearer.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAKH,SAAS,gBAAgB,CAAC,OAA4B,EAAE,aAAsB;IAC1E,IAAI,OAAO,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC;QACzB,OAAO,OAAO,CAAC,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,IAAI,EAAE,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,CAAC;IACjE,CAAC;IAED,OAAO,aAAa,IAAI,KAAK,CAAC;AAClC,CAAC;AAED,MAAM,UAAU,8BAA8B,CAC1C,OAAyC;IAEzC,MAAM,QAAQ,GAA8B;QACxC,YAAY,EAAE,OAAO,CAAC,WAAW;QACjC,UAAU,EAAE,gBAAgB,CAAC,OAAO,CAAC,kBAAkB,CAAC;QACxD,UAAU,EAAE,QAAQ;KACvB,CAAC;IAEF,IAAI,OAAO,CAAC,kBAAkB,EAAE,CAAC;QAC7B,QAAQ,CAAC,KAAK,GAAG,OAAO,CAAC,kBAAkB,CAAC,KAAK,CAAC;IACtD,CAAC;SAAM,IAAI,OAAO,CAAC,KAAK,EAAE,CAAC;QACvB,QAAQ,CAAC,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC;IACnC,CAAC;IAED,IAAI,OAAO,CAAC,YAAY,EAAE,CAAC;QACvB,QAAQ,CAAC,aAAa,GAAG,OAAO,CAAC,YAAY,CAAC;QAC9C,QAAQ,CAAC,wBAAwB,GAAG,gBAAgB,CAAC,OAAO,CAAC,mBAAmB,CAAC,CAAC;IACtF,CAAC;IAED,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;QAClB,QAAQ,CAAC,QAAQ,GAAG,OAAO,CAAC,OAAO,CAAC;IACxC,CAAC;IAED,OAAO,QAAQ,CAAC;AACpB,CAAC"}

package/dist/core/oauth2/response/index.d.ts

@@ -0,0 +1,3 @@
+export * from './bearer.ts';
+export * from './type.ts';
+//# sourceMappingURL=index.d.ts.map