@authup/server-core 1.0.0-beta.3 → 1.0.0-beta.30

package/dist/adapters/http/controllers/workflows/activate/module.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"module.js","sourceRoot":"","sources":["../../../../../../src/adapters/http/controllers/workflows/activate/module.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;;;;;;;;;;;;;AAGH,OAAO,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAC3C,OAAO,EACH,WAAW,EAAE,KAAK,EAAE,QAAQ,EAAE,SAAS,GAC1C,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAAE,sBAAsB,EAAE,MAAM,yBAAyB,CAAC;AAEjE,OAAO,EAAE,YAAY,EAAE,MAAM,QAAQ,CAAC;AAEtC,OAAO,EAAE,wBAAwB,EAAE,MAAM,gBAAgB,CAAC;AAOnD,IAAM,kBAAkB,GAAxB,MAAM,kBAAkB;IACjB,UAAU,CAAmB;IAE7B,SAAS,CAA6C;IAEhE,YAAY,GAA8B;QACtC,IAAI,CAAC,UAAU,GAAG,GAAG,CAAC,UAAU,CAAC;QAEjC,MAAM,SAAS,GAAG,IAAI,wBAAwB,EAAE,CAAC;QACjD,IAAI,CAAC,SAAS,GAAG,IAAI,sBAAsB,CAAC,SAAS,CAAC,CAAC;IAC3D,CAAC;IAGK,AAAN,KAAK,CAAC,OAAO,CACG,GAAY,EACP,GAAa;QAE9B,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAE3C,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC;YAC3C,aAAa,EAAE,IAAI,CAAC,KAAK;SAC5B,CAAC,CAAC;QAEH,IAAI,CAAC,MAAM,EAAE,CAAC;YACV,MAAM,IAAI,aAAa,EAAE,CAAC;QAC9B,CAAC;QAED,MAAM,CAAC,MAAM,GAAG,IAAI,CAAC;QACrB,MAAM,CAAC,aAAa,GAAG,IAAI,CAAC;QAE5B,MAAM,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAEnC,OAAO,YAAY,CAAC,GAAG,CAAC,CAAC;IAC7B,CAAC;CACJ,CAAA;AArBS;IADL,KAAK,CAAC,EAAE,EAAE,EAAE,CAAC;IAET,WAAA,QAAQ,EAAE,CAAA;IACN,WAAA,SAAS,EAAE,CAAA;;;;iDAkBnB;AAjCQ,kBAAkB;IAD9B,WAAW,CAAC,WAAW,CAAC;;GACZ,kBAAkB,CAkC9B"}

package/dist/adapters/http/controllers/workflows/activate/validator.d.ts

@@ -0,0 +1,7 @@
+import { Container } from 'validup';
+export declare class ActivateRequestValidator extends Container<{
+    token: string;
+}> {
+    protected initialize(): void;
+}
+//# sourceMappingURL=validator.d.ts.map

package/dist/adapters/http/controllers/workflows/activate/validator.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"validator.d.ts","sourceRoot":"","sources":["../../../../../../src/adapters/http/controllers/workflows/activate/validator.ts"],"names":[],"mappings":"AAQA,OAAO,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AAEpC,qBAAa,wBAAyB,SAAQ,SAAS,CAAC;IAAE,KAAK,EAAE,MAAM,CAAA;CAAE,CAAC;IACtE,SAAS,CAAC,UAAU;CAavB"}

package/dist/adapters/http/controllers/workflows/activate/validator.js

@@ -0,0 +1,20 @@
+/*
+ * Copyright (c) 2025.
+ * Author Peter Placzek (tada5hi)
+ * For the full copyright and license information,
+ * view the LICENSE file that was distributed with this source code.
+ */
+import { createValidationChain, createValidator } from '@validup/adapter-validator';
+import { Container } from 'validup';
+export class ActivateRequestValidator extends Container {
+    initialize() {
+        super.initialize();
+        this.mount('token', createValidator(() => {
+            const chain = createValidationChain();
+            return chain.exists()
+                .notEmpty()
+                .isLength({ min: 3, max: 256 });
+        }));
+    }
+}
+//# sourceMappingURL=validator.js.map

package/dist/adapters/http/controllers/workflows/activate/validator.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"validator.js","sourceRoot":"","sources":["../../../../../../src/adapters/http/controllers/workflows/activate/validator.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,qBAAqB,EAAE,eAAe,EAAE,MAAM,4BAA4B,CAAC;AACpF,OAAO,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AAEpC,MAAM,OAAO,wBAAyB,SAAQ,SAA4B;IAC5D,UAAU;QAChB,KAAK,CAAC,UAAU,EAAE,CAAC;QAEnB,IAAI,CAAC,KAAK,CACN,OAAO,EACP,eAAe,CAAC,GAAG,EAAE;YACjB,MAAM,KAAK,GAAG,qBAAqB,EAAE,CAAC;YACtC,OAAO,KAAK,CAAC,MAAM,EAAE;iBAChB,QAAQ,EAAE;iBACV,QAAQ,CAAC,EAAE,GAAG,EAAE,CAAC,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,CAAC;QACxC,CAAC,CAAC,CACL,CAAC;IACN,CAAC;CACJ"}

package/dist/adapters/http/controllers/workflows/authorize/index.d.ts

@@ -0,0 +1,3 @@
+export * from './module.ts';
+export * from './types.ts';
+//# sourceMappingURL=index.d.ts.map

package/dist/adapters/http/controllers/workflows/authorize/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../../src/adapters/http/controllers/workflows/authorize/index.ts"],"names":[],"mappings":"AAOA,cAAc,aAAa,CAAC;AAC5B,cAAc,YAAY,CAAC"}

package/dist/adapters/http/controllers/workflows/authorize/index.js

@@ -0,0 +1,9 @@
+/*
+ * Copyright (c) 2022.
+ * Author Peter Placzek (tada5hi)
+ * For the full copyright and license information,
+ * view the LICENSE file that was distributed with this source code.
+ */
+export * from "./module.js";
+export * from "./types.js";
+//# sourceMappingURL=index.js.map

package/dist/adapters/http/controllers/workflows/authorize/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../../../src/adapters/http/controllers/workflows/authorize/index.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,cAAc,aAAa,CAAC;AAC5B,cAAc,YAAY,CAAC"}

package/dist/adapters/http/controllers/workflows/authorize/module.d.ts

@@ -0,0 +1,15 @@
+import { RoutupContainerAdapter } from '@validup/adapter-routup';
+import { OAuth2AuthorizationCodeRequest } from '@authup/core-kit';
+import { HTTPOAuth2Authorizer } from '../../../adapters/index.ts';
+import { IOAuth2AuthorizationCodeRequestVerifier } from '../../../../../core/index.ts';
+import type { AuthorizeControllerContext, AuthorizeControllerOptions } from './types.ts';
+export declare class AuthorizeController {
+    protected options: AuthorizeControllerOptions;
+    protected codeRequestVerifier: IOAuth2AuthorizationCodeRequestVerifier;
+    protected codeRequestValidator: RoutupContainerAdapter<OAuth2AuthorizationCodeRequest>;
+    protected authorizer: HTTPOAuth2Authorizer;
+    constructor(ctx: AuthorizeControllerContext);
+    confirm(req: any, res: any): Promise<void>;
+    serve(req: any, res: any): Promise<void>;
+}
+//# sourceMappingURL=module.d.ts.map

package/dist/adapters/http/controllers/workflows/authorize/module.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"module.d.ts","sourceRoot":"","sources":["../../../../../../src/adapters/http/controllers/workflows/authorize/module.ts"],"names":[],"mappings":"AAeA,OAAO,EAAE,sBAAsB,EAAE,MAAM,yBAAyB,CAAC;AACjE,OAAO,EAAe,8BAA8B,EAAc,MAAM,kBAAkB,CAAC;AAI3F,OAAO,EAAE,oBAAoB,EAAE,MAAM,4BAA4B,CAAC;AAClE,OAAO,EACH,uCAAuC,EAE1C,MAAM,8BAA8B,CAAC;AAEtC,OAAO,KAAK,EAAE,0BAA0B,EAAE,0BAA0B,EAAE,MAAM,YAAY,CAAC;AAEzF,qBACa,mBAAmB;IAI5B,SAAS,CAAC,OAAO,EAAE,0BAA0B,CAAC;IAE9C,SAAS,CAAC,mBAAmB,EAAG,uCAAuC,CAAC;IAExE,SAAS,CAAC,oBAAoB,EAAG,sBAAsB,CAAC,8BAA8B,CAAC,CAAC;IAExF,SAAS,CAAC,UAAU,EAAE,oBAAoB,CAAC;gBAI/B,GAAG,EAAE,0BAA0B;IAoBrC,OAAO,CACG,GAAG,EAAE,GAAG,EACH,GAAG,EAAE,GAAG,GAC1B,OAAO,CAAC,IAAI,CAAC;IAwBV,KAAK,CACK,GAAG,EAAE,GAAG,EACH,GAAG,EAAE,GAAG,GAC1B,OAAO,CAAC,IAAI,CAAC;CAsFnB"}

package/dist/adapters/http/controllers/workflows/authorize/module.js

@@ -0,0 +1,154 @@
+/*
+ * Copyright (c) 2024.
+ * Author Peter Placzek (tada5hi)
+ * For the full copyright and license information,
+ * view the LICENSE file that was distributed with this source code.
+ */
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+var __param = (this && this.__param) || function (paramIndex, decorator) {
+    return function (target, key) { decorator(target, key, paramIndex); }
+};
+import { DController, DGet, DPost, DRequest, DResponse, } from '@routup/decorators';
+import { load } from 'locter';
+import fs from 'node:fs';
+import path from 'node:path';
+import { URL } from 'node:url';
+import { send, useRequestParam } from 'routup';
+import { RoutupContainerAdapter } from '@validup/adapter-routup';
+import { CodeTransformation, isCodeTransformation } from 'typeorm-extension';
+import { CLIENT_WEB_SLIM_PACKAGE_PATH } from "../../../../../path.js";
+import { ForceUserLoggedInMiddleware } from "../../../middleware/index.js";
+import { HTTPOAuth2Authorizer } from "../../../adapters/index.js";
+import { OAuth2AuthorizationCodeRequestValidator, } from "../../../../../core/index.js";
+import { sanitizeError } from "../../../../../utils/index.js";
+let AuthorizeController = class AuthorizeController {
+    // todo: maybe /realms/<realm>/protocol/openid-connect/authorize
+    // todo: maybe /realms/<realm>/[...]/authorize
+    options;
+    codeRequestVerifier;
+    codeRequestValidator;
+    authorizer;
+    // ---------------------------------------------------------
+    constructor(ctx) {
+        this.options = ctx.options;
+        this.codeRequestVerifier = ctx.codeRequestVerifier;
+        const validator = new OAuth2AuthorizationCodeRequestValidator();
+        this.codeRequestValidator = new RoutupContainerAdapter(validator);
+        this.authorizer = new HTTPOAuth2Authorizer({
+            codeRequestVerifier: this.codeRequestVerifier,
+            accessTokenIssuer: ctx.accessTokenIssuer,
+            openIdTokenIssuer: ctx.openIdTokenIssuer,
+            codeIssuer: ctx.codeIssuer,
+            identityResolver: ctx.identityResolver,
+        });
+    }
+    // ---------------------------------------------------------
+    async confirm(req, res) {
+        const result = await this.authorizer.authorizeWithRequest(req);
+        const url = new URL(result.redirectUri);
+        if (result.state) {
+            url.searchParams.set('state', result.state);
+        }
+        if (result.authorizationCode) {
+            url.searchParams.set('code', result.authorizationCode);
+        }
+        if (result.accessToken) {
+            url.searchParams.set('access_token', result.accessToken);
+        }
+        if (result.idToken) {
+            url.searchParams.set('id_token', result.idToken);
+        }
+        return send(res, { url: url.href });
+    }
+    async serve(req, res) {
+        let codeRequest;
+        let client;
+        let scopes;
+        let error;
+        try {
+            const data = await this.codeRequestValidator.run(req, {
+                locations: ['body', 'query'],
+            });
+            const result = await this.codeRequestVerifier.verify(data);
+            client = result.client;
+            scopes = result.scopes;
+            codeRequest = result.data;
+        }
+        catch (e) {
+            const normalized = sanitizeError(e);
+            error = {
+                ...normalized,
+                message: normalized.message,
+            };
+        }
+        const isJIT = isCodeTransformation(CodeTransformation.JUST_IN_TIME);
+        const payload = {
+            config: {
+                baseURL: this.options.baseURL,
+            },
+            data: {
+                codeRequest,
+                error,
+                client,
+                scopes,
+            },
+        };
+        let html;
+        let manifest;
+        let render;
+        const clientWebSlimPackagePath = CLIENT_WEB_SLIM_PACKAGE_PATH;
+        if (isJIT) {
+            /**
+             * @type {import('vite').ViteDevServer}
+             */
+            const vite = useRequestParam(req, 'viteServer');
+            html = await fs.promises.readFile(path.join(clientWebSlimPackagePath, 'index.html'), 'utf-8');
+            html = await vite.transformIndexHtml('/', html);
+            manifest = {};
+            render = (await vite.ssrLoadModule('/src/server.ts')).render;
+        }
+        else {
+            html = await fs.promises.readFile(path.join(clientWebSlimPackagePath, 'dist', 'client', 'index.html'), 'utf-8');
+            manifest = JSON.parse(await fs.promises.readFile(path.join(clientWebSlimPackagePath, 'dist', 'client', '.vite', 'ssr-manifest.json'), 'utf-8'));
+            render = (await load(path.join(clientWebSlimPackagePath, 'dist', 'server', 'server.js'))).render;
+        }
+        const [appHtml, preloadLinks] = await render({
+            url: '/authorize',
+            manifest,
+            payload,
+        });
+        return send(res, html
+            .replace('<!--preload-links-->', preloadLinks)
+            .replace('<!--app-html-->', appHtml));
+    }
+};
+__decorate([
+    DPost('', [ForceUserLoggedInMiddleware]),
+    __param(0, DRequest()),
+    __param(1, DResponse()),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [Object, Object]),
+    __metadata("design:returntype", Promise)
+], AuthorizeController.prototype, "confirm", null);
+__decorate([
+    DGet('', []),
+    __param(0, DRequest()),
+    __param(1, DResponse()),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [Object, Object]),
+    __metadata("design:returntype", Promise)
+], AuthorizeController.prototype, "serve", null);
+AuthorizeController = __decorate([
+    DController('/authorize'),
+    __metadata("design:paramtypes", [Object])
+], AuthorizeController);
+export { AuthorizeController };
+//# sourceMappingURL=module.js.map

package/dist/adapters/http/controllers/workflows/authorize/module.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"module.js","sourceRoot":"","sources":["../../../../../../src/adapters/http/controllers/workflows/authorize/module.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;;;;;;;;;;;;;AAEH,OAAO,EACH,WAAW,EAAE,IAAI,EAAE,KAAK,EAAE,QAAQ,EAAE,SAAS,GAChD,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAAE,IAAI,EAAE,MAAM,QAAQ,CAAC;AAC9B,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,GAAG,EAAE,MAAM,UAAU,CAAC;AAC/B,OAAO,EAAE,IAAI,EAAE,eAAe,EAAE,MAAM,QAAQ,CAAC;AAC/C,OAAO,EAAE,sBAAsB,EAAE,MAAM,yBAAyB,CAAC;AAEjE,OAAO,EAAE,kBAAkB,EAAE,oBAAoB,EAAE,MAAM,mBAAmB,CAAC;AAC7E,OAAO,EAAE,4BAA4B,EAAE,MAAM,wBAAwB,CAAC;AACtE,OAAO,EAAE,2BAA2B,EAAE,MAAM,8BAA8B,CAAC;AAC3E,OAAO,EAAE,oBAAoB,EAAE,MAAM,4BAA4B,CAAC;AAClE,OAAO,EAEH,uCAAuC,GAC1C,MAAM,8BAA8B,CAAC;AACtC,OAAO,EAAE,aAAa,EAAE,MAAM,+BAA+B,CAAC;AAIvD,IAAM,mBAAmB,GAAzB,MAAM,mBAAmB;IAC5B,gEAAgE;IAChE,8CAA8C;IAEpC,OAAO,CAA6B;IAEpC,mBAAmB,CAA2C;IAE9D,oBAAoB,CAA0D;IAE9E,UAAU,CAAuB;IAE3C,4DAA4D;IAE5D,YAAY,GAA+B;QACvC,IAAI,CAAC,OAAO,GAAG,GAAG,CAAC,OAAO,CAAC;QAE3B,IAAI,CAAC,mBAAmB,GAAG,GAAG,CAAC,mBAAmB,CAAC;QAEnD,MAAM,SAAS,GAAG,IAAI,uCAAuC,EAAE,CAAC;QAChE,IAAI,CAAC,oBAAoB,GAAG,IAAI,sBAAsB,CAAC,SAAS,CAAC,CAAC;QAElE,IAAI,CAAC,UAAU,GAAG,IAAI,oBAAoB,CAAC;YACvC,mBAAmB,EAAE,IAAI,CAAC,mBAAmB;YAC7C,iBAAiB,EAAE,GAAG,CAAC,iBAAiB;YACxC,iBAAiB,EAAE,GAAG,CAAC,iBAAiB;YACxC,UAAU,EAAE,GAAG,CAAC,UAAU;YAC1B,gBAAgB,EAAE,GAAG,CAAC,gBAAgB;SACzC,CAAC,CAAC;IACP,CAAC;IAED,4DAA4D;IAGtD,AAAN,KAAK,CAAC,OAAO,CACG,GAAQ,EACH,GAAQ;QAEzB,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,oBAAoB,CAAC,GAAG,CAAC,CAAC;QAE/D,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;QACxC,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC;YACf,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC;QAChD,CAAC;QAED,IAAI,MAAM,CAAC,iBAAiB,EAAE,CAAC;YAC3B,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,iBAAiB,CAAC,CAAC;QAC3D,CAAC;QAED,IAAI,MAAM,CAAC,WAAW,EAAE,CAAC;YACrB,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,cAAc,EAAE,MAAM,CAAC,WAAW,CAAC,CAAC;QAC7D,CAAC;QAED,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;YACjB,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,UAAU,EAAE,MAAM,CAAC,OAAO,CAAC,CAAC;QACrD,CAAC;QAED,OAAO,IAAI,CAAC,GAAG,EAAE,EAAE,GAAG,EAAE,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC;IACxC,CAAC;IAGK,AAAN,KAAK,CAAC,KAAK,CACK,GAAQ,EACH,GAAQ;QAEzB,IAAI,WAAwD,CAAC;QAE7D,IAAI,MAA2B,CAAC;QAChC,IAAI,MAA4B,CAAC;QAEjC,IAAI,KAAyB,CAAC;QAE9B,IAAI,CAAC;YACD,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,oBAAoB,CAAC,GAAG,CAAC,GAAG,EAAE;gBAClD,SAAS,EAAE,CAAC,MAAM,EAAE,OAAO,CAAC;aAC/B,CAAC,CAAC;YAEH,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,mBAAmB,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;YAC3D,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC;YACvB,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC;YAEvB,WAAW,GAAG,MAAM,CAAC,IAAI,CAAC;QAC9B,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACT,MAAM,UAAU,GAAG,aAAa,CAAC,CAAC,CAAC,CAAC;YACpC,KAAK,GAAG;gBACJ,GAAG,UAAU;gBACb,OAAO,EAAE,UAAU,CAAC,OAAO;aAC9B,CAAC;QACN,CAAC;QAED,MAAM,KAAK,GAAG,oBAAoB,CAAC,kBAAkB,CAAC,YAAY,CAAC,CAAC;QAEpE,MAAM,OAAO,GAAG;YACZ,MAAM,EAAE;gBACJ,OAAO,EAAE,IAAI,CAAC,OAAO,CAAC,OAAO;aAChC;YACD,IAAI,EAAE;gBACF,WAAW;gBACX,KAAK;gBACL,MAAM;gBACN,MAAM;aACT;SACJ,CAAC;QAEF,IAAI,IAAa,CAAC;QAClB,IAAI,QAA8B,CAAC;QACnC,IAAI,MAAyB,CAAC;QAE9B,MAAM,wBAAwB,GAAG,4BAA4B,CAAC;QAE9D,IAAI,KAAK,EAAE,CAAC;YACR;;eAEG;YACH,MAAM,IAAI,GAAG,eAAe,CAAC,GAAG,EAAE,YAAY,CAAC,CAAC;YAEhD,IAAI,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAC7B,IAAI,CAAC,IAAI,CAAC,wBAAwB,EAAE,YAAY,CAAC,EACjD,OAAO,CACV,CAAC;YACF,IAAI,GAAG,MAAM,IAAI,CAAC,kBAAkB,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;YAChD,QAAQ,GAAG,EAAE,CAAC;YACd,MAAM,GAAG,CAAC,MAAM,IAAI,CAAC,aAAa,CAAC,gBAAgB,CAAC,CAAC,CAAC,MAAM,CAAC;QACjE,CAAC;aAAM,CAAC;YACJ,IAAI,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAC7B,IAAI,CAAC,IAAI,CAAC,wBAAwB,EAAE,MAAM,EAAE,QAAQ,EAAE,YAAY,CAAC,EACnE,OAAO,CACV,CAAC;YAEF,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAC5C,IAAI,CAAC,IAAI,CAAC,wBAAwB,EAAE,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,mBAAmB,CAAC,EACnF,OAAO,CACV,CAAC,CAAC;YAEH,MAAM,GAAG,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,wBAAwB,EAAE,MAAM,EAAE,QAAQ,EAAE,WAAW,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;QACrG,CAAC;QAED,MAAM,CAAC,OAAO,EAAE,YAAY,CAAC,GAAG,MAAM,MAAM,CAAC;YACzC,GAAG,EAAE,YAAY;YACjB,QAAQ;YACR,OAAO;SACV,CAAC,CAAC;QAEH,OAAO,IAAI,CACP,GAAG,EACH,IAAI;aACC,OAAO,CAAC,sBAAsB,EAAE,YAAY,CAAC;aAC7C,OAAO,CAAC,iBAAiB,EAAE,OAAO,CAAC,CAC3C,CAAC;IACN,CAAC;CACJ,CAAA;AApHS;IADL,KAAK,CAAC,EAAE,EAAE,CAAC,2BAA2B,CAAC,CAAC;IAEpC,WAAA,QAAQ,EAAE,CAAA;IACN,WAAA,SAAS,EAAE,CAAA;;;;kDAsBnB;AAGK;IADL,IAAI,CAAC,EAAE,EAAE,EAAE,CAAC;IAER,WAAA,QAAQ,EAAE,CAAA;IACN,WAAA,SAAS,EAAE,CAAA;;;;gDAsFnB;AArJQ,mBAAmB;IAD/B,WAAW,CAAC,YAAY,CAAC;;GACb,mBAAmB,CAsJ/B"}

package/dist/adapters/http/controllers/workflows/authorize/types.d.ts

@@ -0,0 +1,13 @@
+import type { IIdentityResolver, IOAuth2AuthorizationCodeIssuer, IOAuth2AuthorizationCodeRequestVerifier, IOAuth2OpenIDTokenIssuer, IOAuth2TokenIssuer } from '../../../../../core/index.ts';
+export type AuthorizeControllerOptions = {
+    baseURL: string;
+};
+export type AuthorizeControllerContext = {
+    options: AuthorizeControllerOptions;
+    accessTokenIssuer: IOAuth2TokenIssuer;
+    openIdTokenIssuer: IOAuth2OpenIDTokenIssuer;
+    codeIssuer: IOAuth2AuthorizationCodeIssuer;
+    codeRequestVerifier: IOAuth2AuthorizationCodeRequestVerifier;
+    identityResolver: IIdentityResolver;
+};
+//# sourceMappingURL=types.d.ts.map

package/dist/adapters/http/controllers/workflows/authorize/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../../../../src/adapters/http/controllers/workflows/authorize/types.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EACR,iBAAiB,EACjB,8BAA8B,EAC9B,uCAAuC,EACvC,wBAAwB,EACxB,kBAAkB,EACrB,MAAM,8BAA8B,CAAC;AAEtC,MAAM,MAAM,0BAA0B,GAAG;IACrC,OAAO,EAAE,MAAM,CAAC;CACnB,CAAC;AAEF,MAAM,MAAM,0BAA0B,GAAG;IACrC,OAAO,EAAE,0BAA0B,CAAC;IAEpC,iBAAiB,EAAE,kBAAkB,CAAC;IACtC,iBAAiB,EAAE,wBAAwB,CAAC;IAE5C,UAAU,EAAE,8BAA8B,CAAC;IAC3C,mBAAmB,EAAE,uCAAuC,CAAC;IAE7D,gBAAgB,EAAE,iBAAiB,CAAA;CACtC,CAAC"}

package/dist/adapters/http/controllers/workflows/authorize/types.js

@@ -0,0 +1,8 @@
+/*
+ * Copyright (c) 2025.
+ *  Author Peter Placzek (tada5hi)
+ *  For the full copyright and license information,
+ *  view the LICENSE file that was distributed with this source code.
+ */
+export {};
+//# sourceMappingURL=types.js.map

package/dist/adapters/http/controllers/workflows/authorize/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../../../../../src/adapters/http/controllers/workflows/authorize/types.ts"],"names":[],"mappings":"AAAA;;;;;GAKG"}

package/dist/adapters/http/controllers/workflows/index.d.ts

@@ -0,0 +1,10 @@
+export * from './activate/index.ts';
+export * from './authorize/index.ts';
+export * from './jwks/index.ts';
+export * from './openid/index.ts';
+export * from './password-forgot/index.ts';
+export * from './password-reset/index.ts';
+export * from './register/index.ts';
+export * from './status/index.ts';
+export * from './token/index.ts';
+//# sourceMappingURL=index.d.ts.map

package/dist/adapters/http/controllers/workflows/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../src/adapters/http/controllers/workflows/index.ts"],"names":[],"mappings":"AAOA,cAAc,qBAAqB,CAAC;AACpC,cAAc,sBAAsB,CAAC;AACrC,cAAc,iBAAiB,CAAC;AAChC,cAAc,mBAAmB,CAAC;AAClC,cAAc,4BAA4B,CAAC;AAC3C,cAAc,2BAA2B,CAAC;AAC1C,cAAc,qBAAqB,CAAC;AACpC,cAAc,mBAAmB,CAAC;AAClC,cAAc,kBAAkB,CAAC"}

package/dist/adapters/http/controllers/workflows/index.js

@@ -0,0 +1,16 @@
+/*
+ * Copyright (c) 2021-2021.
+ * Author Peter Placzek (tada5hi)
+ * For the full copyright and license information,
+ * view the LICENSE file that was distributed with this source code.
+ */
+export * from "./activate/index.js";
+export * from "./authorize/index.js";
+export * from "./jwks/index.js";
+export * from "./openid/index.js";
+export * from "./password-forgot/index.js";
+export * from "./password-reset/index.js";
+export * from "./register/index.js";
+export * from "./status/index.js";
+export * from "./token/index.js";
+//# sourceMappingURL=index.js.map

package/dist/adapters/http/controllers/workflows/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../../src/adapters/http/controllers/workflows/index.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,cAAc,qBAAqB,CAAC;AACpC,cAAc,sBAAsB,CAAC;AACrC,cAAc,iBAAiB,CAAC;AAChC,cAAc,mBAAmB,CAAC;AAClC,cAAc,4BAA4B,CAAC;AAC3C,cAAc,2BAA2B,CAAC;AAC1C,cAAc,qBAAqB,CAAC;AACpC,cAAc,mBAAmB,CAAC;AAClC,cAAc,kBAAkB,CAAC"}

package/dist/adapters/http/controllers/workflows/jwks/handlers/index.d.ts

@@ -0,0 +1,2 @@
+export * from './read.ts';
+//# sourceMappingURL=index.d.ts.map

package/dist/adapters/http/controllers/workflows/jwks/handlers/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../../../src/adapters/http/controllers/workflows/jwks/handlers/index.ts"],"names":[],"mappings":"AAOA,cAAc,WAAW,CAAC"}

package/dist/adapters/http/controllers/workflows/jwks/handlers/index.js

@@ -0,0 +1,8 @@
+/*
+ * Copyright (c) 2022.
+ * Author Peter Placzek (tada5hi)
+ * For the full copyright and license information,
+ * view the LICENSE file that was distributed with this source code.
+ */
+export * from "./read.js";
+//# sourceMappingURL=index.js.map

package/dist/adapters/http/controllers/workflows/jwks/handlers/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../../../../src/adapters/http/controllers/workflows/jwks/handlers/index.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,cAAc,WAAW,CAAC"}

package/dist/adapters/http/controllers/workflows/jwks/handlers/read.d.ts

@@ -0,0 +1,4 @@
+import type { Request, Response } from 'routup';
+export declare function getJwksRouteHandler(req: Request, res: Response, realmIdParamKey?: string): Promise<any>;
+export declare function getJwkRouteHandler(req: Request, res: Response, idParamKey?: string): Promise<any>;
+//# sourceMappingURL=read.d.ts.map

package/dist/adapters/http/controllers/workflows/jwks/handlers/read.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"read.d.ts","sourceRoot":"","sources":["../../../../../../../src/adapters/http/controllers/workflows/jwks/handlers/read.ts"],"names":[],"mappings":"AASA,OAAO,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,QAAQ,CAAC;AAQhD,wBAAsB,mBAAmB,CACrC,GAAG,EAAE,OAAO,EACZ,GAAG,EAAE,QAAQ,EACb,eAAe,CAAC,EAAE,MAAM,GACxB,OAAO,CAAC,GAAG,CAAC,CAsCf;AAED,wBAAsB,kBAAkB,CACpC,GAAG,EAAE,OAAO,EACZ,GAAG,EAAE,QAAQ,EACb,UAAU,CAAC,EAAE,MAAM,GACnB,OAAO,CAAC,GAAG,CAAC,CAmCf"}

package/dist/adapters/http/controllers/workflows/jwks/handlers/read.js

@@ -0,0 +1,76 @@
+/*
+ * Copyright (c) 2022-2022.
+ * Author Peter Placzek (tada5hi)
+ * For the full copyright and license information,
+ * view the LICENSE file that was distributed with this source code.
+ */
+import { AsymmetricKey } from '@authup/server-kit';
+import { JWKType } from '@authup/specs';
+import { send } from 'routup';
+import { In } from 'typeorm';
+import { BadRequestError, NotFoundError } from '@ebec/http';
+import { useDataSource } from 'typeorm-extension';
+import { KeyEntity } from "../../../../../database/domains/index.js";
+import { getRequestStringParam, getRequestStringParamOrFail } from "../../../../request/index.js";
+export async function getJwksRouteHandler(req, res, realmIdParamKey) {
+    const dataSource = await useDataSource();
+    const repository = dataSource.getRepository(KeyEntity);
+    const realmId = getRequestStringParam(req, realmIdParamKey || 'realmId');
+    const entities = await repository.find({
+        where: {
+            type: In([JWKType.RSA, JWKType.EC]),
+            ...(realmId ? { realm_id: realmId } : {}),
+        },
+        order: {
+            priority: 'DESC',
+        },
+    });
+    const promises = entities
+        .filter((entity) => !!entity.encryption_key)
+        .map((entity) => AsymmetricKey
+        .fromBase64({
+        format: 'spki',
+        key: entity.encryption_key,
+        options: AsymmetricKey.buildImportOptionsForJWTAlgorithm(entity.signature_algorithm),
+    })
+        .then((container) => container.toJWK())
+        .then((key) => ({
+        ...key,
+        kid: entity.id,
+        alg: entity.signature_algorithm,
+    })));
+    const keys = await Promise.all(promises);
+    return send(res, {
+        keys,
+    });
+}
+export async function getJwkRouteHandler(req, res, idParamKey) {
+    const id = getRequestStringParamOrFail(req, idParamKey || 'id');
+    const dataSource = await useDataSource();
+    const repository = dataSource.getRepository(KeyEntity);
+    const entity = await repository.findOne({
+        where: {
+            type: In([JWKType.RSA, JWKType.EC]),
+            id,
+        },
+    });
+    if (!entity) {
+        throw new NotFoundError();
+    }
+    if (!entity.encryption_key) {
+        throw new BadRequestError('The encryption key does not exist');
+    }
+    const container = await AsymmetricKey
+        .fromBase64({
+        format: 'spki',
+        key: entity.encryption_key,
+        options: AsymmetricKey.buildImportOptionsForJWTAlgorithm(entity.signature_algorithm),
+    });
+    const jsonWebKey = await container.toJWK();
+    jsonWebKey.alg = entity.signature_algorithm;
+    return send(res, {
+        ...jsonWebKey,
+        kid: entity.id,
+    });
+}
+//# sourceMappingURL=read.js.map

package/dist/adapters/http/controllers/workflows/jwks/handlers/read.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"read.js","sourceRoot":"","sources":["../../../../../../../src/adapters/http/controllers/workflows/jwks/handlers/read.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AACnD,OAAO,EAAE,OAAO,EAAE,MAAM,eAAe,CAAC;AAExC,OAAO,EAAE,IAAI,EAAE,MAAM,QAAQ,CAAC;AAC9B,OAAO,EAAE,EAAE,EAAE,MAAM,SAAS,CAAC;AAC7B,OAAO,EAAE,eAAe,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAC5D,OAAO,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAC;AAClD,OAAO,EAAE,SAAS,EAAE,MAAM,0CAA0C,CAAC;AACrE,OAAO,EAAE,qBAAqB,EAAE,2BAA2B,EAAE,MAAM,8BAA8B,CAAC;AAElG,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACrC,GAAY,EACZ,GAAa,EACb,eAAwB;IAExB,MAAM,UAAU,GAAG,MAAM,aAAa,EAAE,CAAC;IACzC,MAAM,UAAU,GAAG,UAAU,CAAC,aAAa,CAAC,SAAS,CAAC,CAAC;IAEvD,MAAM,OAAO,GAAG,qBAAqB,CAAC,GAAG,EAAE,eAAe,IAAI,SAAS,CAAC,CAAC;IAEzE,MAAM,QAAQ,GAAG,MAAM,UAAU,CAAC,IAAI,CAAC;QACnC,KAAK,EAAE;YACH,IAAI,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE,OAAO,CAAC,EAAE,CAAC,CAAC;YACnC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC5C;QACD,KAAK,EAAE;YACH,QAAQ,EAAE,MAAM;SACnB;KACJ,CAAC,CAAC;IAEH,MAAM,QAAQ,GAAG,QAAQ;SACpB,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,cAAc,CAAC;SAC3C,GAAG,CACA,CAAC,MAAM,EAAE,EAAE,CAAC,aAAa;SACpB,UAAU,CAAC;QACR,MAAM,EAAE,MAAM;QACd,GAAG,EAAE,MAAM,CAAC,cAAe;QAC3B,OAAO,EAAE,aAAa,CAAC,iCAAiC,CAAC,MAAM,CAAC,mBAAmB,CAAC;KACvF,CAAC;SACD,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,KAAK,EAAE,CAAC;SACtC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;QACZ,GAAG,GAAG;QACN,GAAG,EAAE,MAAM,CAAC,EAAE;QACd,GAAG,EAAE,MAAM,CAAC,mBAAmB;KAClC,CAAC,CAAC,CACV,CAAC;IAEN,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IAEzC,OAAO,IAAI,CAAC,GAAG,EAAE;QACb,IAAI;KACP,CAAC,CAAC;AACP,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACpC,GAAY,EACZ,GAAa,EACb,UAAmB;IAEnB,MAAM,EAAE,GAAG,2BAA2B,CAAC,GAAG,EAAE,UAAU,IAAI,IAAI,CAAC,CAAC;IAEhE,MAAM,UAAU,GAAG,MAAM,aAAa,EAAE,CAAC;IACzC,MAAM,UAAU,GAAG,UAAU,CAAC,aAAa,CAAC,SAAS,CAAC,CAAC;IAEvD,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,OAAO,CAAC;QACpC,KAAK,EAAE;YACH,IAAI,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE,OAAO,CAAC,EAAE,CAAC,CAAC;YACnC,EAAE;SACL;KACJ,CAAC,CAAC;IAEH,IAAI,CAAC,MAAM,EAAE,CAAC;QACV,MAAM,IAAI,aAAa,EAAE,CAAC;IAC9B,CAAC;IAED,IAAI,CAAC,MAAM,CAAC,cAAc,EAAE,CAAC;QACzB,MAAM,IAAI,eAAe,CAAC,mCAAmC,CAAC,CAAC;IACnE,CAAC;IAED,MAAM,SAAS,GAAG,MAAM,aAAa;SAChC,UAAU,CAAC;QACR,MAAM,EAAE,MAAM;QACd,GAAG,EAAE,MAAM,CAAC,cAAe;QAC3B,OAAO,EAAE,aAAa,CAAC,iCAAiC,CAAC,MAAM,CAAC,mBAAmB,CAAC;KACvF,CAAC,CAAC;IAEP,MAAM,UAAU,GAAG,MAAM,SAAS,CAAC,KAAK,EAAE,CAAC;IAC3C,UAAU,CAAC,GAAG,GAAG,MAAM,CAAC,mBAAmB,CAAC;IAE5C,OAAO,IAAI,CAAC,GAAG,EAAE;QACb,GAAG,UAAU;QACb,GAAG,EAAE,MAAM,CAAC,EAAE;KACjB,CAAC,CAAC;AACP,CAAC"}

package/dist/adapters/http/controllers/workflows/jwks/index.d.ts

@@ -0,0 +1,3 @@
+export * from './handlers/index.ts';
+export * from './module.ts';
+//# sourceMappingURL=index.d.ts.map

package/dist/adapters/http/controllers/workflows/jwks/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../../src/adapters/http/controllers/workflows/jwks/index.ts"],"names":[],"mappings":"AAOA,cAAc,qBAAqB,CAAC;AACpC,cAAc,aAAa,CAAC"}

package/dist/adapters/http/controllers/workflows/jwks/index.js

@@ -0,0 +1,9 @@
+/*
+ * Copyright (c) 2022.
+ * Author Peter Placzek (tada5hi)
+ * For the full copyright and license information,
+ * view the LICENSE file that was distributed with this source code.
+ */
+export * from "./handlers/index.js";
+export * from "./module.js";
+//# sourceMappingURL=index.js.map

package/dist/adapters/http/controllers/workflows/jwks/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../../../src/adapters/http/controllers/workflows/jwks/index.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,cAAc,qBAAqB,CAAC;AACpC,cAAc,aAAa,CAAC"}

package/dist/adapters/http/controllers/workflows/jwks/module.d.ts

@@ -0,0 +1,6 @@
+import type { OAuth2JsonWebKey } from '@authup/specs';
+export declare class JwkController {
+    getManyJwks(req: any, res: any): Promise<OAuth2JsonWebKey[]>;
+    getOneJwks(id: string, req: any, res: any): Promise<OAuth2JsonWebKey>;
+}
+//# sourceMappingURL=module.d.ts.map

package/dist/adapters/http/controllers/workflows/jwks/module.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"module.d.ts","sourceRoot":"","sources":["../../../../../../src/adapters/http/controllers/workflows/jwks/module.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,eAAe,CAAC;AAMtD,qBACa,aAAa;IAEhB,WAAW,CACD,GAAG,EAAE,GAAG,EACH,GAAG,EAAE,GAAG,GAC1B,OAAO,CAAC,gBAAgB,EAAE,CAAC;IAKxB,UAAU,CACC,EAAE,EAAE,MAAM,EACP,GAAG,EAAE,GAAG,EACP,GAAG,EAAE,GAAG,GAC1B,OAAO,CAAC,gBAAgB,CAAC;CAG/B"}

package/dist/adapters/http/controllers/workflows/jwks/module.js

@@ -0,0 +1,50 @@
+/*
+ * Copyright (c) 2024.
+ * Author Peter Placzek (tada5hi)
+ * For the full copyright and license information,
+ * view the LICENSE file that was distributed with this source code.
+ */
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+var __param = (this && this.__param) || function (paramIndex, decorator) {
+    return function (target, key) { decorator(target, key, paramIndex); }
+};
+import { DController, DGet, DPath, DRequest, DResponse, } from '@routup/decorators';
+import { getJwkRouteHandler, getJwksRouteHandler } from "./handlers/index.js";
+let JwkController = class JwkController {
+    async getManyJwks(req, res) {
+        return getJwksRouteHandler(req, res);
+    }
+    async getOneJwks(id, req, res) {
+        return getJwkRouteHandler(req, res);
+    }
+};
+__decorate([
+    DGet('/jwks', []),
+    __param(0, DRequest()),
+    __param(1, DResponse()),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [Object, Object]),
+    __metadata("design:returntype", Promise)
+], JwkController.prototype, "getManyJwks", null);
+__decorate([
+    DGet('/jwks/:id', []),
+    __param(0, DPath('id')),
+    __param(1, DRequest()),
+    __param(2, DResponse()),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [String, Object, Object]),
+    __metadata("design:returntype", Promise)
+], JwkController.prototype, "getOneJwks", null);
+JwkController = __decorate([
+    DController('')
+], JwkController);
+export { JwkController };
+//# sourceMappingURL=module.js.map

package/dist/adapters/http/controllers/workflows/jwks/module.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"module.js","sourceRoot":"","sources":["../../../../../../src/adapters/http/controllers/workflows/jwks/module.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;;;;;;;;;;;;;AAGH,OAAO,EACH,WAAW,EAAE,IAAI,EAAE,KAAK,EAAE,QAAQ,EAAE,SAAS,GAChD,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAAE,kBAAkB,EAAE,mBAAmB,EAAE,MAAM,qBAAqB,CAAC;AAGvE,IAAM,aAAa,GAAnB,MAAM,aAAa;IAEhB,AAAN,KAAK,CAAC,WAAW,CACD,GAAQ,EACH,GAAQ;QAEzB,OAAO,mBAAmB,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;IACzC,CAAC;IAGK,AAAN,KAAK,CAAC,UAAU,CACC,EAAU,EACP,GAAQ,EACP,GAAQ;QAEzB,OAAO,kBAAkB,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;IACxC,CAAC;CACJ,CAAA;AAfS;IADL,IAAI,CAAC,OAAO,EAAE,EAAE,CAAC;IAEb,WAAA,QAAQ,EAAE,CAAA;IACN,WAAA,SAAS,EAAE,CAAA;;;;gDAGnB;AAGK;IADL,IAAI,CAAC,WAAW,EAAE,EAAE,CAAC;IAEjB,WAAA,KAAK,CAAC,IAAI,CAAC,CAAA;IACP,WAAA,QAAQ,EAAE,CAAA;IACV,WAAA,SAAS,EAAE,CAAA;;;;+CAGnB;AAhBQ,aAAa;IADzB,WAAW,CAAC,EAAE,CAAC;GACH,aAAa,CAiBzB"}

package/dist/adapters/http/controllers/workflows/openid/index.d.ts

@@ -0,0 +1,2 @@
+export * from './module.ts';
+//# sourceMappingURL=index.d.ts.map

package/dist/adapters/http/controllers/workflows/openid/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../../src/adapters/http/controllers/workflows/openid/index.ts"],"names":[],"mappings":"AAOA,cAAc,aAAa,CAAC"}

package/dist/adapters/http/controllers/workflows/openid/index.js

@@ -0,0 +1,8 @@
+/*
+ * Copyright (c) 2022.
+ * Author Peter Placzek (tada5hi)
+ * For the full copyright and license information,
+ * view the LICENSE file that was distributed with this source code.
+ */
+export * from "./module.js";
+//# sourceMappingURL=index.js.map

package/dist/adapters/http/controllers/workflows/openid/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../../../src/adapters/http/controllers/workflows/openid/index.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,cAAc,aAAa,CAAC"}

package/dist/adapters/http/controllers/workflows/openid/module.d.ts

@@ -0,0 +1,10 @@
+import { OpenIDProviderMetadata } from '@authup/specs';
+export type OpenIDControllerOptions = {
+    baseURL: string;
+};
+export declare class OpenIDController {
+    protected options: OpenIDControllerOptions;
+    constructor(options: OpenIDControllerOptions);
+    getOpenIdConfiguration(): Promise<OpenIDProviderMetadata>;
+}
+//# sourceMappingURL=module.d.ts.map

package/dist/adapters/http/controllers/workflows/openid/module.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"module.d.ts","sourceRoot":"","sources":["../../../../../../src/adapters/http/controllers/workflows/openid/module.ts"],"names":[],"mappings":"AAOA,OAAO,EAAmC,sBAAsB,EAAE,MAAM,eAAe,CAAC;AAKxF,MAAM,MAAM,uBAAuB,GAAG;IAClC,OAAO,EAAE,MAAM,CAAA;CAClB,CAAC;AAEF,qBACa,gBAAgB;IACzB,SAAS,CAAC,OAAO,EAAE,uBAAuB,CAAC;gBAE/B,OAAO,EAAE,uBAAuB;IAKtC,sBAAsB,IAAI,OAAO,CAAC,sBAAsB,CAAC;CAmClE"}

package/dist/adapters/http/controllers/workflows/openid/module.js

@@ -0,0 +1,59 @@
+/*
+ * Copyright (c) 2024.
+ * Author Peter Placzek (tada5hi)
+ * For the full copyright and license information,
+ * view the LICENSE file that was distributed with this source code.
+ */
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+import { OAuth2AuthorizationResponseType } from '@authup/specs';
+import { DController, DGet, } from '@routup/decorators';
+let OpenIDController = class OpenIDController {
+    options;
+    constructor(options) {
+        this.options = options;
+    }
+    async getOpenIdConfiguration() {
+        return {
+            issuer: this.options.baseURL,
+            authorization_endpoint: new URL('authorize', this.options.baseURL).href,
+            jwks_uri: new URL('jwks', this.options.baseURL).href,
+            response_types_supported: [
+                OAuth2AuthorizationResponseType.CODE,
+                OAuth2AuthorizationResponseType.TOKEN,
+                OAuth2AuthorizationResponseType.NONE,
+            ],
+            subject_types_supported: [
+                'public',
+            ],
+            id_token_signing_alg_values_supported: [
+                'HS256', 'HS384', 'HS512', 'RS256', 'RS384', 'RS512', 'none',
+            ],
+            token_endpoint: new URL('token', this.options.baseURL).href,
+            introspection_endpoint: new URL('token/introspect', this.options.baseURL).href,
+            revocation_endpoint: new URL('token', this.options.baseURL).href,
+            // -----------------------------------------------------------
+            service_documentation: 'https://authup.org/',
+            userinfo_endpoint: new URL('users/@me', this.options.baseURL).href,
+        };
+    }
+};
+__decorate([
+    DGet('/.well-known/openid-configuration', []),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", []),
+    __metadata("design:returntype", Promise)
+], OpenIDController.prototype, "getOpenIdConfiguration", null);
+OpenIDController = __decorate([
+    DController(''),
+    __metadata("design:paramtypes", [Object])
+], OpenIDController);
+export { OpenIDController };
+//# sourceMappingURL=module.js.map