@authup/server-core 1.0.0-beta.3 → 1.0.0-beta.30

package/dist/http/oauth2/scope/resolve.js

@@ -1,58 +0,0 @@
-"use strict";
-/*
- * Copyright (c) 2022.
- * Author Peter Placzek (tada5hi)
- * For the full copyright and license information,
- * view the LICENSE file that was distributed with this source code.
- */
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.resolveOAuth2SubAttributesForScope = void 0;
-const core_1 = require("@authup/core");
-const userFields = {
-    [core_1.ScopeName.IDENTITY]: ['name', 'display_name', 'last_name', 'first_name'],
-    [core_1.ScopeName.EMAIL]: ['email'],
-};
-const robotFields = {
-    [core_1.ScopeName.IDENTITY]: ['name'],
-};
-const clientFields = {
-    [core_1.ScopeName.IDENTITY]: ['name'],
-};
-function resolveOAuth2SubAttributesForScope(subKind, scope) {
-    const fields = [];
-    const scopes = (0, core_1.transformOAuth2ScopeToArray)(scope);
-    for (let i = 0; i < scopes.length; i++) {
-        switch (subKind) {
-            case core_1.OAuth2SubKind.USER: {
-                if ((0, core_1.hasOwnProperty)(userFields, scopes[i])) {
-                    fields.push(...userFields[scopes[i]]);
-                }
-                if (scopes[i] === core_1.ScopeName.GLOBAL) {
-                    fields.push(...Object.values(userFields));
-                }
-                break;
-            }
-            case core_1.OAuth2SubKind.ROBOT: {
-                if ((0, core_1.hasOwnProperty)(robotFields, scopes[i])) {
-                    fields.push(...robotFields[scopes[i]]);
-                }
-                if (scopes[i] === core_1.ScopeName.GLOBAL) {
-                    fields.push(...Object.values(robotFields));
-                }
-                break;
-            }
-            case core_1.OAuth2SubKind.CLIENT: {
-                if ((0, core_1.hasOwnProperty)(clientFields, scopes[i])) {
-                    fields.push(...clientFields[scopes[i]]);
-                }
-                if (scopes[i] === core_1.ScopeName.GLOBAL) {
-                    fields.push(...Object.values(clientFields));
-                }
-                break;
-            }
-        }
-    }
-    return fields;
-}
-exports.resolveOAuth2SubAttributesForScope = resolveOAuth2SubAttributesForScope;
-//# sourceMappingURL=resolve.js.map

package/dist/http/oauth2/scope/resolve.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"resolve.js","sourceRoot":"","sources":["../../../../src/http/oauth2/scope/resolve.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;;AAGH,uCAEsB;AAQtB,MAAM,UAAU,GAAuE;IACnF,CAAC,gBAAS,CAAC,QAAQ,CAAC,EAAE,CAAC,MAAM,EAAE,cAAc,EAAE,WAAW,EAAE,YAAY,CAAC;IACzE,CAAC,gBAAS,CAAC,KAAK,CAAC,EAAE,CAAC,OAAO,CAAC;CAC/B,CAAC;AAEF,MAAM,WAAW,GAAwE;IACrF,CAAC,gBAAS,CAAC,QAAQ,CAAC,EAAE,CAAC,MAAM,CAAC;CACjC,CAAC;AAEF,MAAM,YAAY,GAAyE;IACvF,CAAC,gBAAS,CAAC,QAAQ,CAAC,EAAE,CAAC,MAAM,CAAC;CACjC,CAAC;AAEF,SAAgB,kCAAkC,CAC9C,OAA2C,EAC3C,KAAyB;IAEzB,MAAM,MAAM,GAAc,EAAE,CAAC;IAE7B,MAAM,MAAM,GAAG,IAAA,kCAA2B,EAAC,KAAK,CAAC,CAAC;IAClD,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACrC,QAAQ,OAAO,EAAE,CAAC;YACd,KAAK,oBAAa,CAAC,IAAI,CAAC,CAAC,CAAC;gBACtB,IAAI,IAAA,qBAAc,EAAC,UAAU,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;oBACxC,MAAM,CAAC,IAAI,CAAC,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,CAAa,CAAC,CAAC;gBACtD,CAAC;gBAED,IAAI,MAAM,CAAC,CAAC,CAAC,KAAK,gBAAS,CAAC,MAAM,EAAE,CAAC;oBACjC,MAAM,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC,MAAM,CAAC,UAAU,CAAa,CAAC,CAAC;gBAC1D,CAAC;gBACD,MAAM;YACV,CAAC;YACD,KAAK,oBAAa,CAAC,KAAK,CAAC,CAAC,CAAC;gBACvB,IAAI,IAAA,qBAAc,EAAC,WAAW,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;oBACzC,MAAM,CAAC,IAAI,CAAC,GAAG,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC,CAAa,CAAC,CAAC;gBACvD,CAAC;gBAED,IAAI,MAAM,CAAC,CAAC,CAAC,KAAK,gBAAS,CAAC,MAAM,EAAE,CAAC;oBACjC,MAAM,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC,MAAM,CAAC,WAAW,CAAa,CAAC,CAAC;gBAC3D,CAAC;gBACD,MAAM;YACV,CAAC;YACD,KAAK,oBAAa,CAAC,MAAM,CAAC,CAAC,CAAC;gBACxB,IAAI,IAAA,qBAAc,EAAC,YAAY,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;oBAC1C,MAAM,CAAC,IAAI,CAAC,GAAG,YAAY,CAAC,MAAM,CAAC,CAAC,CAAC,CAAa,CAAC,CAAC;gBACxD,CAAC;gBAED,IAAI,MAAM,CAAC,CAAC,CAAC,KAAK,gBAAS,CAAC,MAAM,EAAE,CAAC;oBACjC,MAAM,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC,MAAM,CAAC,YAAY,CAAa,CAAC,CAAC;gBAC5D,CAAC;gBACD,MAAM;YACV,CAAC;QACL,CAAC;IACL,CAAC;IAED,OAAO,MAAM,CAAC;AAClB,CAAC;AA3CD,gFA2CC"}

package/dist/http/oauth2/token/builder/access-token.d.ts

@@ -1,4 +0,0 @@
-import type { OAuth2TokenPayload } from '@authup/core';
-import type { OAuth2AccessTokenBuildContext } from './type';
-export declare function buildOAuth2AccessTokenPayload(context: OAuth2AccessTokenBuildContext): Partial<OAuth2TokenPayload>;
-//# sourceMappingURL=access-token.d.ts.map

package/dist/http/oauth2/token/builder/access-token.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"access-token.d.ts","sourceRoot":"","sources":["../../../../../src/http/oauth2/token/builder/access-token.ts"],"names":[],"mappings":"AAQA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,cAAc,CAAC;AAEvD,OAAO,KAAK,EAAE,6BAA6B,EAAE,MAAM,QAAQ,CAAC;AAE5D,wBAAgB,6BAA6B,CACzC,OAAO,EAAE,6BAA6B,GACtC,OAAO,CAAC,kBAAkB,CAAC,CAc9B"}

package/dist/http/oauth2/token/builder/access-token.js

@@ -1,28 +0,0 @@
-"use strict";
-/*
- * Copyright (c) 2022-2022.
- * Author Peter Placzek (tada5hi)
- * For the full copyright and license information,
- * view the LICENSE file that was distributed with this source code.
- */
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.buildOAuth2AccessTokenPayload = void 0;
-const node_crypto_1 = require("node:crypto");
-const core_1 = require("@authup/core");
-function buildOAuth2AccessTokenPayload(context) {
-    return {
-        kind: core_1.OAuth2TokenKind.ACCESS,
-        jti: (0, node_crypto_1.randomUUID)(),
-        iss: context.issuer,
-        sub: context.sub,
-        sub_kind: context.subKind,
-        remote_address: context.remoteAddress,
-        aud: context.clientId,
-        client_id: context.clientId,
-        realm_id: context.realmId,
-        realm_name: context.realmName,
-        ...(context.scope ? { scope: context.scope } : {}),
-    };
-}
-exports.buildOAuth2AccessTokenPayload = buildOAuth2AccessTokenPayload;
-//# sourceMappingURL=access-token.js.map

package/dist/http/oauth2/token/builder/access-token.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"access-token.js","sourceRoot":"","sources":["../../../../../src/http/oauth2/token/builder/access-token.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;;AAEH,6CAAyC;AAEzC,uCAA+C;AAG/C,SAAgB,6BAA6B,CACzC,OAAsC;IAEtC,OAAO;QACH,IAAI,EAAE,sBAAe,CAAC,MAAM;QAC5B,GAAG,EAAE,IAAA,wBAAU,GAAE;QACjB,GAAG,EAAE,OAAO,CAAC,MAAM;QACnB,GAAG,EAAE,OAAO,CAAC,GAAG;QAChB,QAAQ,EAAE,OAAO,CAAC,OAAO;QACzB,cAAc,EAAE,OAAO,CAAC,aAAa;QACrC,GAAG,EAAE,OAAO,CAAC,QAAQ;QACrB,SAAS,EAAE,OAAO,CAAC,QAAQ;QAC3B,QAAQ,EAAE,OAAO,CAAC,OAAO;QACzB,UAAU,EAAE,OAAO,CAAC,SAAS;QAC7B,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACrD,CAAC;AACN,CAAC;AAhBD,sEAgBC"}

package/dist/http/oauth2/token/builder/id-token.d.ts

@@ -1,5 +0,0 @@
-import type { OAuth2OpenIdTokenPayload } from '@authup/core';
-import type { OAuth2OpenIdTokenBuildContext } from './type';
-export declare function buildOpenIdTokenPayload(context: OAuth2OpenIdTokenBuildContext): Partial<OAuth2OpenIdTokenPayload>;
-export declare function extendOpenIdTokenPayload(payload: Partial<OAuth2OpenIdTokenPayload>): Promise<Partial<OAuth2OpenIdTokenPayload>>;
-//# sourceMappingURL=id-token.d.ts.map

package/dist/http/oauth2/token/builder/id-token.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"id-token.d.ts","sourceRoot":"","sources":["../../../../../src/http/oauth2/token/builder/id-token.ts"],"names":[],"mappings":"AAQA,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,cAAc,CAAC;AAI7D,OAAO,KAAK,EAAE,6BAA6B,EAAE,MAAM,QAAQ,CAAC;AAE5D,wBAAgB,uBAAuB,CACnC,OAAO,EAAE,6BAA6B,GACtC,OAAO,CAAC,wBAAwB,CAAC,CAepC;AAED,wBAAsB,wBAAwB,CAC1C,OAAO,EAAE,OAAO,CAAC,wBAAwB,CAAC,GAC1C,OAAO,CAAC,OAAO,CAAC,wBAAwB,CAAC,CAAC,CAc7C"}

package/dist/http/oauth2/token/builder/id-token.js

@@ -1,42 +0,0 @@
-"use strict";
-/*
- * Copyright (c) 2023.
- * Author Peter Placzek (tada5hi)
- * For the full copyright and license information,
- * view the LICENSE file that was distributed with this source code.
- */
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.extendOpenIdTokenPayload = exports.buildOpenIdTokenPayload = void 0;
-const node_crypto_1 = require("node:crypto");
-const core_1 = require("@authup/core");
-const openid_1 = require("../../openid");
-const sub_1 = require("../sub");
-function buildOpenIdTokenPayload(context) {
-    return {
-        kind: core_1.OAuth2TokenKind.ID_TOKEN,
-        jti: (0, node_crypto_1.randomUUID)(),
-        iss: context.issuer,
-        sub: context.sub,
-        sub_kind: context.subKind,
-        remote_address: context.remoteAddress,
-        aud: context.clientId,
-        client_id: context.clientId,
-        realm_id: context.realmId,
-        realm_name: context.realmName,
-        auth_time: new Date().getTime(),
-        ...(context.scope ? { scope: context.scope } : {}),
-    };
-}
-exports.buildOpenIdTokenPayload = buildOpenIdTokenPayload;
-async function extendOpenIdTokenPayload(payload) {
-    if (!payload.sub_kind || !payload.sub) {
-        return payload;
-    }
-    const claims = (0, openid_1.resolveOpenIdClaimsFromSubEntity)(payload.sub_kind, await (0, sub_1.loadOAuth2SubEntity)(payload.sub_kind, payload.sub, payload.scope));
-    return {
-        ...payload,
-        ...claims,
-    };
-}
-exports.extendOpenIdTokenPayload = extendOpenIdTokenPayload;
-//# sourceMappingURL=id-token.js.map

package/dist/http/oauth2/token/builder/id-token.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"id-token.js","sourceRoot":"","sources":["../../../../../src/http/oauth2/token/builder/id-token.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;;AAEH,6CAAyC;AAEzC,uCAA+C;AAC/C,yCAAgE;AAChE,gCAA6C;AAG7C,SAAgB,uBAAuB,CACnC,OAAsC;IAEtC,OAAO;QACH,IAAI,EAAE,sBAAe,CAAC,QAAQ;QAC9B,GAAG,EAAE,IAAA,wBAAU,GAAE;QACjB,GAAG,EAAE,OAAO,CAAC,MAAM;QACnB,GAAG,EAAE,OAAO,CAAC,GAAG;QAChB,QAAQ,EAAE,OAAO,CAAC,OAAO;QACzB,cAAc,EAAE,OAAO,CAAC,aAAa;QACrC,GAAG,EAAE,OAAO,CAAC,QAAQ;QACrB,SAAS,EAAE,OAAO,CAAC,QAAQ;QAC3B,QAAQ,EAAE,OAAO,CAAC,OAAO;QACzB,UAAU,EAAE,OAAO,CAAC,SAAS;QAC7B,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,OAAO,EAAE;QAC/B,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACrD,CAAC;AACN,CAAC;AAjBD,0DAiBC;AAEM,KAAK,UAAU,wBAAwB,CAC1C,OAA0C;IAE1C,IAAI,CAAC,OAAO,CAAC,QAAQ,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC;QACpC,OAAO,OAAO,CAAC;IACnB,CAAC;IAED,MAAM,MAAM,GAAuC,IAAA,yCAAgC,EAC/E,OAAO,CAAC,QAAQ,EAChB,MAAM,IAAA,yBAAmB,EAAC,OAAO,CAAC,QAAQ,EAAE,OAAO,CAAC,GAAG,EAAE,OAAO,CAAC,KAAK,CAAC,CAC1E,CAAC;IAEF,OAAO;QACH,GAAG,OAAO;QACV,GAAG,MAAM;KACZ,CAAC;AACN,CAAC;AAhBD,4DAgBC"}

package/dist/http/oauth2/token/builder/index.d.ts

@@ -1,5 +0,0 @@
-export * from './access-token';
-export * from './id-token';
-export * from './refresh-token';
-export * from './type';
-//# sourceMappingURL=index.d.ts.map

package/dist/http/oauth2/token/builder/index.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../src/http/oauth2/token/builder/index.ts"],"names":[],"mappings":"AAOA,cAAc,gBAAgB,CAAC;AAC/B,cAAc,YAAY,CAAC;AAC3B,cAAc,iBAAiB,CAAC;AAChC,cAAc,QAAQ,CAAC"}

package/dist/http/oauth2/token/builder/index.js

@@ -1,27 +0,0 @@
-"use strict";
-/*
- * Copyright (c) 2022.
- * Author Peter Placzek (tada5hi)
- * For the full copyright and license information,
- * view the LICENSE file that was distributed with this source code.
- */
-var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    var desc = Object.getOwnPropertyDescriptor(m, k);
-    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
-      desc = { enumerable: true, get: function() { return m[k]; } };
-    }
-    Object.defineProperty(o, k2, desc);
-}) : (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    o[k2] = m[k];
-}));
-var __exportStar = (this && this.__exportStar) || function(m, exports) {
-    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
-};
-Object.defineProperty(exports, "__esModule", { value: true });
-__exportStar(require("./access-token"), exports);
-__exportStar(require("./id-token"), exports);
-__exportStar(require("./refresh-token"), exports);
-__exportStar(require("./type"), exports);
-//# sourceMappingURL=index.js.map

package/dist/http/oauth2/token/builder/index.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../../src/http/oauth2/token/builder/index.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;;;;;;;;;;;;;;;AAEH,iDAA+B;AAC/B,6CAA2B;AAC3B,kDAAgC;AAChC,yCAAuB"}

package/dist/http/oauth2/token/builder/refresh-token.d.ts

@@ -1,6 +0,0 @@
-import type { OAuth2RefreshToken, OAuth2TokenPayload } from '@authup/core';
-import type { OAuth2RefreshTokenBuildContext } from './type';
-export declare function buildOAuth2RefreshTokenPayload(context: OAuth2RefreshTokenBuildContext): Partial<OAuth2TokenPayload>;
-export declare function transformToRefreshTokenPayload(accessToken: Partial<OAuth2TokenPayload>, refreshToken?: Partial<OAuth2RefreshTokenBuildContext>): Partial<OAuth2TokenPayload>;
-export declare function transformToRefreshTokenEntity(accessToken: Partial<OAuth2TokenPayload>, maxAge?: number): Partial<OAuth2RefreshToken>;
-//# sourceMappingURL=refresh-token.d.ts.map

package/dist/http/oauth2/token/builder/refresh-token.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"refresh-token.d.ts","sourceRoot":"","sources":["../../../../../src/http/oauth2/token/builder/refresh-token.ts"],"names":[],"mappings":"AAQA,OAAO,KAAK,EAAE,kBAAkB,EAAE,kBAAkB,EAAE,MAAM,cAAc,CAAC;AAE3E,OAAO,KAAK,EAAE,8BAA8B,EAAE,MAAM,QAAQ,CAAC;AAE7D,wBAAgB,8BAA8B,CAC1C,OAAO,EAAE,8BAA8B,GACvC,OAAO,CAAC,kBAAkB,CAAC,CAW9B;AAED,wBAAgB,8BAA8B,CAC1C,WAAW,EAAE,OAAO,CAAC,kBAAkB,CAAC,EACxC,YAAY,CAAC,EAAE,OAAO,CAAC,8BAA8B,CAAC,GACtD,OAAO,CAAC,kBAAkB,CAAC,CAU9B;AAED,wBAAgB,6BAA6B,CACzC,WAAW,EAAE,OAAO,CAAC,kBAAkB,CAAC,EACxC,MAAM,CAAC,EAAE,MAAM,GACf,OAAO,CAAC,kBAAkB,CAAC,CAU9B"}

package/dist/http/oauth2/token/builder/refresh-token.js

@@ -1,49 +0,0 @@
-"use strict";
-/*
- * Copyright (c) 2022-2022.
- * Author Peter Placzek (tada5hi)
- * For the full copyright and license information,
- * view the LICENSE file that was distributed with this source code.
- */
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.transformToRefreshTokenEntity = exports.transformToRefreshTokenPayload = exports.buildOAuth2RefreshTokenPayload = void 0;
-const node_crypto_1 = require("node:crypto");
-const core_1 = require("@authup/core");
-function buildOAuth2RefreshTokenPayload(context) {
-    return {
-        kind: core_1.OAuth2TokenKind.REFRESH,
-        jti: context.id || (0, node_crypto_1.randomUUID)(),
-        sub: context.sub,
-        sub_kind: context.subKind,
-        client_id: context.clientId,
-        realm_id: context.realmId,
-        realm_name: context.realmName,
-        ...(context.scope ? { scope: context.scope } : {}),
-    };
-}
-exports.buildOAuth2RefreshTokenPayload = buildOAuth2RefreshTokenPayload;
-function transformToRefreshTokenPayload(accessToken, refreshToken) {
-    return buildOAuth2RefreshTokenPayload({
-        ...(refreshToken || {}),
-        sub: accessToken.sub,
-        subKind: accessToken.sub_kind,
-        clientId: accessToken.client_id,
-        realmId: accessToken.realm_id,
-        realmName: accessToken.realm_name,
-        scope: accessToken.scope,
-    });
-}
-exports.transformToRefreshTokenPayload = transformToRefreshTokenPayload;
-function transformToRefreshTokenEntity(accessToken, maxAge) {
-    return {
-        client_id: accessToken.client_id,
-        expires: new Date(Date.now() + (1000 * (maxAge || 7200))).toISOString(),
-        scope: accessToken.scope,
-        access_token: accessToken.jti,
-        realm_id: accessToken.realm_id,
-        ...(accessToken.sub_kind === core_1.OAuth2SubKind.USER ? { user_id: accessToken.sub } : {}),
-        ...(accessToken.sub_kind === core_1.OAuth2SubKind.ROBOT ? { robot_id: accessToken.sub } : {}),
-    };
-}
-exports.transformToRefreshTokenEntity = transformToRefreshTokenEntity;
-//# sourceMappingURL=refresh-token.js.map

package/dist/http/oauth2/token/builder/refresh-token.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"refresh-token.js","sourceRoot":"","sources":["../../../../../src/http/oauth2/token/builder/refresh-token.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;;AAEH,6CAAyC;AAEzC,uCAA8D;AAG9D,SAAgB,8BAA8B,CAC1C,OAAuC;IAEvC,OAAO;QACH,IAAI,EAAE,sBAAe,CAAC,OAAO;QAC7B,GAAG,EAAE,OAAO,CAAC,EAAE,IAAI,IAAA,wBAAU,GAAE;QAC/B,GAAG,EAAE,OAAO,CAAC,GAAG;QAChB,QAAQ,EAAE,OAAO,CAAC,OAAO;QACzB,SAAS,EAAE,OAAO,CAAC,QAAQ;QAC3B,QAAQ,EAAE,OAAO,CAAC,OAAO;QACzB,UAAU,EAAE,OAAO,CAAC,SAAS;QAC7B,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACrD,CAAC;AACN,CAAC;AAbD,wEAaC;AAED,SAAgB,8BAA8B,CAC1C,WAAwC,EACxC,YAAsD;IAEtD,OAAO,8BAA8B,CAAC;QAClC,GAAG,CAAC,YAAY,IAAI,EAAE,CAAC;QACvB,GAAG,EAAE,WAAW,CAAC,GAAG;QACpB,OAAO,EAAE,WAAW,CAAC,QAAQ;QAC7B,QAAQ,EAAE,WAAW,CAAC,SAAS;QAC/B,OAAO,EAAE,WAAW,CAAC,QAAQ;QAC7B,SAAS,EAAE,WAAW,CAAC,UAAU;QACjC,KAAK,EAAE,WAAW,CAAC,KAAK;KAC3B,CAAC,CAAC;AACP,CAAC;AAbD,wEAaC;AAED,SAAgB,6BAA6B,CACzC,WAAwC,EACxC,MAAe;IAEf,OAAO;QACH,SAAS,EAAE,WAAW,CAAC,SAAS;QAChC,OAAO,EAAE,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,IAAI,GAAG,CAAC,MAAM,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE;QACvE,KAAK,EAAE,WAAW,CAAC,KAAK;QACxB,YAAY,EAAE,WAAW,CAAC,GAAG;QAC7B,QAAQ,EAAE,WAAW,CAAC,QAAQ;QAC9B,GAAG,CAAC,WAAW,CAAC,QAAQ,KAAK,oBAAa,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,WAAW,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACpF,GAAG,CAAC,WAAW,CAAC,QAAQ,KAAK,oBAAa,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,WAAW,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACzF,CAAC;AACN,CAAC;AAbD,sEAaC"}

package/dist/http/oauth2/token/builder/type.d.ts

@@ -1,16 +0,0 @@
-import type { OAuth2SubKind } from '@authup/core';
-export type OAuth2AccessTokenBuildContext = {
-    issuer: string;
-    sub: string;
-    subKind: `${OAuth2SubKind}`;
-    realmId: string;
-    realmName: string;
-    scope?: string;
-    clientId?: string;
-    remoteAddress: string;
-};
-export type OAuth2OpenIdTokenBuildContext = OAuth2AccessTokenBuildContext;
-export type OAuth2RefreshTokenBuildContext = Omit<OAuth2AccessTokenBuildContext, 'remoteAddress' | 'issuer'> & {
-    id?: string;
-};
-//# sourceMappingURL=type.d.ts.map

package/dist/http/oauth2/token/builder/type.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"type.d.ts","sourceRoot":"","sources":["../../../../../src/http/oauth2/token/builder/type.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAElD,MAAM,MAAM,6BAA6B,GAAG;IACxC,MAAM,EAAE,MAAM,CAAC;IAEf,GAAG,EAAE,MAAM,CAAC;IACZ,OAAO,EAAE,GAAG,aAAa,EAAE,CAAC;IAE5B,OAAO,EAAE,MAAM,CAAC;IAEhB,SAAS,EAAE,MAAM,CAAC;IAElB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,QAAQ,CAAC,EAAE,MAAM,CAAC;IAElB,aAAa,EAAE,MAAM,CAAC;CACzB,CAAC;AAEF,MAAM,MAAM,6BAA6B,GAAG,6BAA6B,CAAC;AAI1E,MAAM,MAAM,8BAA8B,GAAG,IAAI,CACjD,6BAA6B,EAAE,eAAe,GAAG,QAAQ,CACxD,GAAG;IACA,EAAE,CAAC,EAAE,MAAM,CAAA;CACd,CAAC"}

package/dist/http/oauth2/token/builder/type.js

@@ -1,9 +0,0 @@
-"use strict";
-/*
- * Copyright (c) 2022.
- * Author Peter Placzek (tada5hi)
- * For the full copyright and license information,
- * view the LICENSE file that was distributed with this source code.
- */
-Object.defineProperty(exports, "__esModule", { value: true });
-//# sourceMappingURL=type.js.map

package/dist/http/oauth2/token/builder/type.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"type.js","sourceRoot":"","sources":["../../../../../src/http/oauth2/token/builder/type.ts"],"names":[],"mappings":";AAAA;;;;;GAKG"}

package/dist/http/oauth2/token/index.d.ts

@@ -1,5 +0,0 @@
-export * from './builder';
-export * from './payload';
-export * from './permissions';
-export * from './sub';
-//# sourceMappingURL=index.d.ts.map

package/dist/http/oauth2/token/index.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/http/oauth2/token/index.ts"],"names":[],"mappings":"AAOA,cAAc,WAAW,CAAC;AAC1B,cAAc,WAAW,CAAC;AAC1B,cAAc,eAAe,CAAC;AAC9B,cAAc,OAAO,CAAC"}

package/dist/http/oauth2/token/index.js

@@ -1,27 +0,0 @@
-"use strict";
-/*
- * Copyright (c) 2022.
- * Author Peter Placzek (tada5hi)
- * For the full copyright and license information,
- * view the LICENSE file that was distributed with this source code.
- */
-var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    var desc = Object.getOwnPropertyDescriptor(m, k);
-    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
-      desc = { enumerable: true, get: function() { return m[k]; } };
-    }
-    Object.defineProperty(o, k2, desc);
-}) : (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    o[k2] = m[k];
-}));
-var __exportStar = (this && this.__exportStar) || function(m, exports) {
-    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
-};
-Object.defineProperty(exports, "__esModule", { value: true });
-__exportStar(require("./builder"), exports);
-__exportStar(require("./payload"), exports);
-__exportStar(require("./permissions"), exports);
-__exportStar(require("./sub"), exports);
-//# sourceMappingURL=index.js.map

package/dist/http/oauth2/token/index.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../src/http/oauth2/token/index.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;;;;;;;;;;;;;;;AAEH,4CAA0B;AAC1B,4CAA0B;AAC1B,gDAA8B;AAC9B,wCAAsB"}

package/dist/http/oauth2/token/payload/index.d.ts

@@ -1,2 +0,0 @@
-export * from './read';
-//# sourceMappingURL=index.d.ts.map

package/dist/http/oauth2/token/payload/index.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../src/http/oauth2/token/payload/index.ts"],"names":[],"mappings":"AAOA,cAAc,QAAQ,CAAC"}

package/dist/http/oauth2/token/payload/index.js

@@ -1,24 +0,0 @@
-"use strict";
-/*
- * Copyright (c) 2023.
- * Author Peter Placzek (tada5hi)
- * For the full copyright and license information,
- * view the LICENSE file that was distributed with this source code.
- */
-var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    var desc = Object.getOwnPropertyDescriptor(m, k);
-    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
-      desc = { enumerable: true, get: function() { return m[k]; } };
-    }
-    Object.defineProperty(o, k2, desc);
-}) : (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    o[k2] = m[k];
-}));
-var __exportStar = (this && this.__exportStar) || function(m, exports) {
-    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
-};
-Object.defineProperty(exports, "__esModule", { value: true });
-__exportStar(require("./read"), exports);
-//# sourceMappingURL=index.js.map

package/dist/http/oauth2/token/payload/index.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../../src/http/oauth2/token/payload/index.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;;;;;;;;;;;;;;;AAEH,yCAAuB"}

package/dist/http/oauth2/token/payload/read.d.ts

@@ -1,3 +0,0 @@
-import type { OAuth2TokenPayload } from '@authup/core';
-export declare function readOAuth2TokenPayload(token: string): Promise<OAuth2TokenPayload>;
-//# sourceMappingURL=read.d.ts.map

package/dist/http/oauth2/token/payload/read.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"read.d.ts","sourceRoot":"","sources":["../../../../../src/http/oauth2/token/payload/read.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,cAAc,CAAC;AAQvD,wBAAsB,sBAAsB,CAAC,KAAK,EAAE,MAAM,GAAI,OAAO,CAAC,kBAAkB,CAAC,CA8CxF"}

package/dist/http/oauth2/token/payload/read.js

@@ -1,60 +0,0 @@
-"use strict";
-/*
- * Copyright (c) 2022.
- * Author Peter Placzek (tada5hi)
- * For the full copyright and license information,
- * view the LICENSE file that was distributed with this source code.
- */
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.readOAuth2TokenPayload = void 0;
-const core_1 = require("@authup/core");
-const server_kit_1 = require("@authup/server-kit");
-const http_1 = require("@ebec/http");
-const redis_extension_1 = require("redis-extension");
-const typeorm_extension_1 = require("typeorm-extension");
-const domains_1 = require("../../../../domains");
-async function readOAuth2TokenPayload(token) {
-    if (typeof token === 'undefined' || token === null) {
-        throw core_1.TokenError.requestInvalid('The token is not defined.');
-    }
-    const jwt = (0, server_kit_1.decodeToken)(token, { complete: true });
-    if (jwt.header.kid) {
-        const dataSource = await (0, typeorm_extension_1.useDataSource)();
-        const repository = dataSource.getRepository(domains_1.KeyEntity);
-        const entity = await repository.findOne({
-            select: {
-                id: true,
-                type: true,
-                signature_algorithm: true,
-                encryption_key: true,
-                decryption_key: true,
-            },
-            where: {
-                id: jwt.header.kid,
-            },
-            cache: {
-                id: (0, redis_extension_1.buildKeyPath)({
-                    prefix: 'realm_key',
-                    id: jwt.header.kid,
-                }),
-                milliseconds: 60.000,
-            },
-        });
-        if (entity) {
-            try {
-                return await (0, domains_1.verifyOAuth2TokenWithKey)(token, entity);
-            }
-            catch (e) {
-                if ((0, http_1.isHTTPError)(e)) {
-                    if (e.code === core_1.ErrorCode.TOKEN_EXPIRED) {
-                        throw core_1.TokenError.expired(jwt.payload.kind);
-                    }
-                }
-                throw e;
-            }
-        }
-    }
-    throw core_1.TokenError.payloadInvalid('The jwt key id is invalid or not present.');
-}
-exports.readOAuth2TokenPayload = readOAuth2TokenPayload;
-//# sourceMappingURL=read.js.map

package/dist/http/oauth2/token/payload/read.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"read.js","sourceRoot":"","sources":["../../../../../src/http/oauth2/token/payload/read.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;;AAGH,uCAAqD;AACrD,mDAAiD;AACjD,qCAAyC;AACzC,qDAA+C;AAC/C,yDAAkD;AAClD,iDAA0E;AAEnE,KAAK,UAAU,sBAAsB,CAAC,KAAa;IACtD,IAAI,OAAO,KAAK,KAAK,WAAW,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;QACjD,MAAM,iBAAU,CAAC,cAAc,CAAC,2BAA2B,CAAC,CAAC;IACjE,CAAC;IAED,MAAM,GAAG,GAAG,IAAA,wBAAW,EAAC,KAAK,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;IAEnD,IAAI,GAAG,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC;QACjB,MAAM,UAAU,GAAG,MAAM,IAAA,iCAAa,GAAE,CAAC;QACzC,MAAM,UAAU,GAAG,UAAU,CAAC,aAAa,CAAC,mBAAS,CAAC,CAAC;QACvD,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,OAAO,CAAC;YACpC,MAAM,EAAE;gBACJ,EAAE,EAAE,IAAI;gBACR,IAAI,EAAE,IAAI;gBACV,mBAAmB,EAAE,IAAI;gBACzB,cAAc,EAAE,IAAI;gBACpB,cAAc,EAAE,IAAI;aACvB;YACD,KAAK,EAAE;gBACH,EAAE,EAAE,GAAG,CAAC,MAAM,CAAC,GAAG;aACrB;YACD,KAAK,EAAE;gBACH,EAAE,EAAE,IAAA,8BAAY,EAAC;oBACb,MAAM,EAAE,WAAW;oBACnB,EAAE,EAAE,GAAG,CAAC,MAAM,CAAC,GAAG;iBACrB,CAAC;gBACF,YAAY,EAAE,MAAM;aACvB;SACJ,CAAC,CAAC;QAEH,IAAI,MAAM,EAAE,CAAC;YACT,IAAI,CAAC;gBACD,OAAO,MAAM,IAAA,kCAAwB,EAAC,KAAK,EAAE,MAAM,CAAC,CAAC;YACzD,CAAC;YAAC,OAAO,CAAC,EAAE,CAAC;gBACT,IAAI,IAAA,kBAAW,EAAC,CAAC,CAAC,EAAE,CAAC;oBACjB,IAAI,CAAC,CAAC,IAAI,KAAK,gBAAS,CAAC,aAAa,EAAE,CAAC;wBACrC,MAAM,iBAAU,CAAC,OAAO,CAAE,GAAG,CAAC,OAA8B,CAAC,IAAI,CAAC,CAAC;oBACvE,CAAC;gBACL,CAAC;gBAED,MAAM,CAAC,CAAC;YACZ,CAAC;QACL,CAAC;IACL,CAAC;IAED,MAAM,iBAAU,CAAC,cAAc,CAAC,2CAA2C,CAAC,CAAC;AACjF,CAAC;AA9CD,wDA8CC"}

package/dist/http/oauth2/token/permissions.d.ts

@@ -1,4 +0,0 @@
-import type { AbilityDescriptor } from '@authup/core';
-import { OAuth2SubKind } from '@authup/core';
-export declare function loadOAuth2SubPermissions(kind: `${OAuth2SubKind}`, id: string, scope?: string | string[]): Promise<AbilityDescriptor[]>;
-//# sourceMappingURL=permissions.d.ts.map

package/dist/http/oauth2/token/permissions.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"permissions.d.ts","sourceRoot":"","sources":["../../../../src/http/oauth2/token/permissions.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,cAAc,CAAC;AACtD,OAAO,EAAE,aAAa,EAA0C,MAAM,cAAc,CAAC;AAIrF,wBAAsB,wBAAwB,CAC1C,IAAI,EAAE,GAAG,aAAa,EAAE,EACxB,EAAE,EAAE,MAAM,EACV,KAAK,CAAC,EAAE,MAAM,GAAG,MAAM,EAAE,GACzB,OAAO,CAAC,iBAAiB,EAAE,CAAC,CAwB/B"}

package/dist/http/oauth2/token/permissions.js

@@ -1,34 +0,0 @@
-"use strict";
-/*
- * Copyright (c) 2022.
- * Author Peter Placzek (tada5hi)
- * For the full copyright and license information,
- * view the LICENSE file that was distributed with this source code.
- */
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.loadOAuth2SubPermissions = void 0;
-const core_1 = require("@authup/core");
-const typeorm_extension_1 = require("typeorm-extension");
-const domains_1 = require("../../../domains");
-async function loadOAuth2SubPermissions(kind, id, scope) {
-    const scopes = (0, core_1.transformOAuth2ScopeToArray)(scope);
-    // todo: grant permissions depending on scopes :)
-    if (scopes.indexOf(core_1.ScopeName.GLOBAL) === -1) {
-        return [];
-    }
-    const dataSource = await (0, typeorm_extension_1.useDataSource)();
-    switch (kind) {
-        case core_1.OAuth2SubKind.USER: {
-            const repository = new domains_1.UserRepository(dataSource);
-            return repository.getOwnedPermissions(id);
-        }
-        case core_1.OAuth2SubKind.ROBOT: {
-            const repository = new domains_1.RobotRepository(dataSource);
-            return repository.getOwnedPermissions(id);
-        }
-    }
-    // todo: reduce permissions based on scope :)
-    return [];
-}
-exports.loadOAuth2SubPermissions = loadOAuth2SubPermissions;
-//# sourceMappingURL=permissions.js.map

package/dist/http/oauth2/token/permissions.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"permissions.js","sourceRoot":"","sources":["../../../../src/http/oauth2/token/permissions.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;;AAGH,uCAAqF;AACrF,yDAAkD;AAClD,8CAAmE;AAE5D,KAAK,UAAU,wBAAwB,CAC1C,IAAwB,EACxB,EAAU,EACV,KAAyB;IAEzB,MAAM,MAAM,GAAG,IAAA,kCAA2B,EAAC,KAAK,CAAC,CAAC;IAElD,iDAAiD;IACjD,IAAI,MAAM,CAAC,OAAO,CAAC,gBAAS,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC;QAC1C,OAAO,EAAE,CAAC;IACd,CAAC;IAED,MAAM,UAAU,GAAG,MAAM,IAAA,iCAAa,GAAE,CAAC;IAEzC,QAAQ,IAAI,EAAE,CAAC;QACX,KAAK,oBAAa,CAAC,IAAI,CAAC,CAAC,CAAC;YACtB,MAAM,UAAU,GAAG,IAAI,wBAAc,CAAC,UAAU,CAAC,CAAC;YAClD,OAAO,UAAU,CAAC,mBAAmB,CAAC,EAAE,CAAC,CAAC;QAC9C,CAAC;QACD,KAAK,oBAAa,CAAC,KAAK,CAAC,CAAC,CAAC;YACvB,MAAM,UAAU,GAAG,IAAI,yBAAe,CAAC,UAAU,CAAC,CAAC;YACnD,OAAO,UAAU,CAAC,mBAAmB,CAAC,EAAE,CAAC,CAAC;QAC9C,CAAC;IACL,CAAC;IAED,6CAA6C;IAE7C,OAAO,EAAE,CAAC;AACd,CAAC;AA5BD,4DA4BC"}

package/dist/http/oauth2/token/sub.d.ts

@@ -1,15 +0,0 @@
-import { OAuth2SubKind } from '@authup/core';
-import type { RobotEntity, UserEntity } from '../../../domains';
-import { ClientEntity } from '../../../domains';
-export type OAuth2SubEntity<T extends `${OAuth2SubKind}` | OAuth2SubKind> = T extends `${OAuth2SubKind.USER}` | OAuth2SubKind.USER ? UserEntity : T extends `${OAuth2SubKind.ROBOT}` | OAuth2SubKind.ROBOT ? RobotEntity : T extends `${OAuth2SubKind.CLIENT}` | OAuth2SubKind.CLIENT ? ClientEntity : never;
-/**
- *
- *
- * @throws TokenError
- * @throws NotFoundError
- * @param kind
- * @param id
- * @param scope
- */
-export declare function loadOAuth2SubEntity<T extends `${OAuth2SubKind}` | OAuth2SubKind>(kind: `${OAuth2SubKind}`, id: string, scope?: string): Promise<OAuth2SubEntity<T>>;
-//# sourceMappingURL=sub.d.ts.map

package/dist/http/oauth2/token/sub.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"sub.d.ts","sourceRoot":"","sources":["../../../../src/http/oauth2/token/sub.ts"],"names":[],"mappings":"AAOA,OAAO,EACH,aAAa,EAEhB,MAAM,cAAc,CAAC;AAKtB,OAAO,KAAK,EACR,WAAW,EACX,UAAU,EACb,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EACH,YAAY,EAGf,MAAM,kBAAkB,CAAC;AAG1B,MAAM,MAAM,eAAe,CAAC,CAAC,SAAS,GAAG,aAAa,EAAE,GAAG,aAAa,IACpE,CAAC,SAAS,GAAG,aAAa,CAAC,IAAI,EAAE,GAAG,aAAa,CAAC,IAAI,GAClD,UAAU,GACV,CAAC,SAAS,GAAG,aAAa,CAAC,KAAK,EAAE,GAAG,aAAa,CAAC,KAAK,GACpD,WAAW,GACX,CAAC,SAAS,GAAG,aAAa,CAAC,MAAM,EAAE,GAAG,aAAa,CAAC,MAAM,GACtD,YAAY,GACZ,KAAK,CAAC;AAEtB;;;;;;;;GAQG;AACH,wBAAsB,mBAAmB,CAAC,CAAC,SAAS,GAAG,aAAa,EAAE,GAAG,aAAa,EAClF,IAAI,EAAE,GAAG,aAAa,EAAE,EACxB,EAAE,EAAE,MAAM,EACV,KAAK,CAAC,EAAE,MAAM,GACd,OAAO,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,CAuG9B"}