@authup/server-core 1.0.0-beta.3 → 1.0.0-beta.30

package/dist/adapters/http/controllers/workflows/status/module.d.ts

@@ -0,0 +1,8 @@
+export type EndpointInfo = {
+    version: string;
+    date: string;
+};
+export declare class StatusController {
+    status(): Promise<EndpointInfo>;
+}
+//# sourceMappingURL=module.d.ts.map

package/dist/adapters/http/controllers/workflows/status/module.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"module.d.ts","sourceRoot":"","sources":["../../../../../../src/adapters/http/controllers/workflows/status/module.ts"],"names":[],"mappings":"AAcA,MAAM,MAAM,YAAY,GAAG;IACvB,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,MAAM,CAAA;CACf,CAAC;AAEF,qBACa,gBAAgB;IAEnB,MAAM,IAAI,OAAO,CAAC,YAAY,CAAC;CASxC"}

package/dist/adapters/http/controllers/workflows/status/module.js

@@ -0,0 +1,40 @@
+/*
+ * Copyright (c) 2022-2024.
+ * Author Peter Placzek (tada5hi)
+ * For the full copyright and license information,
+ * view the LICENSE file that was distributed with this source code.
+ */
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+import { DController, DGet, } from '@routup/decorators';
+import { load } from 'locter';
+import path from 'node:path';
+import { PACKAGE_PATH } from "../../../../../path.js";
+let StatusController = class StatusController {
+    async status() {
+        const pkgJson = await load(path.join(PACKAGE_PATH, 'package.json'));
+        const isoDate = new Date().toISOString();
+        return {
+            version: pkgJson.version,
+            date: isoDate,
+        };
+    }
+};
+__decorate([
+    DGet('/', []),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", []),
+    __metadata("design:returntype", Promise)
+], StatusController.prototype, "status", null);
+StatusController = __decorate([
+    DController('')
+], StatusController);
+export { StatusController };
+//# sourceMappingURL=module.js.map

package/dist/adapters/http/controllers/workflows/status/module.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"module.js","sourceRoot":"","sources":["../../../../../../src/adapters/http/controllers/workflows/status/module.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;;;;;;;;;;AAEH,OAAO,EACH,WAAW,EAAE,IAAI,GACpB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAAE,IAAI,EAAE,MAAM,QAAQ,CAAC;AAC9B,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,YAAY,EAAE,MAAM,wBAAwB,CAAC;AAQ/C,IAAM,gBAAgB,GAAtB,MAAM,gBAAgB;IAEnB,AAAN,KAAK,CAAC,MAAM;QACR,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,cAAc,CAAC,CAAC,CAAC;QACpE,MAAM,OAAO,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QAEzC,OAAO;YACH,OAAO,EAAE,OAAO,CAAC,OAAO;YACxB,IAAI,EAAE,OAAO;SAChB,CAAC;IACN,CAAC;CACJ,CAAA;AATS;IADL,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC;;;;8CASb;AAVQ,gBAAgB;IAD5B,WAAW,CAAC,EAAE,CAAC;GACH,gBAAgB,CAW5B"}

package/dist/adapters/http/controllers/workflows/token/index.d.ts

@@ -0,0 +1,2 @@
+export * from './module.ts';
+//# sourceMappingURL=index.d.ts.map

package/dist/adapters/http/controllers/workflows/token/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../../src/adapters/http/controllers/workflows/token/index.ts"],"names":[],"mappings":"AAOA,cAAc,aAAa,CAAC"}

package/dist/adapters/http/controllers/workflows/token/index.js

@@ -0,0 +1,8 @@
+/*
+ * Copyright (c) 2022.
+ * Author Peter Placzek (tada5hi)
+ * For the full copyright and license information,
+ * view the LICENSE file that was distributed with this source code.
+ */
+export * from "./module.js";
+//# sourceMappingURL=index.js.map

package/dist/adapters/http/controllers/workflows/token/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../../../src/adapters/http/controllers/workflows/token/index.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,cAAc,aAAa,CAAC"}

package/dist/adapters/http/controllers/workflows/token/module.d.ts

@@ -0,0 +1,20 @@
+import { OAuth2TokenGrant, OAuth2TokenGrantResponse, type OAuth2TokenIntrospectionResponse } from '@authup/specs';
+import type { Request, Response } from 'routup';
+import type { TokenControllerContext, TokenControllerOptions } from './types.ts';
+import { IIdentityResolver, IOAuth2TokenIssuer, IOAuth2TokenRevoker, IOAuth2TokenVerifier } from '../../../../../core/index.ts';
+import { IHTTPOAuth2Grant } from '../../../adapters/index.ts';
+export declare class TokenController {
+    protected options: TokenControllerOptions;
+    protected refreshTokenIssuer: IOAuth2TokenIssuer;
+    protected accessTokenIssuer: IOAuth2TokenIssuer;
+    protected tokenVerifier: IOAuth2TokenVerifier;
+    protected tokenRevoker: IOAuth2TokenRevoker;
+    protected identityResolver: IIdentityResolver;
+    protected tokenGrants: Record<`${OAuth2TokenGrant}`, IHTTPOAuth2Grant>;
+    constructor(ctx: TokenControllerContext);
+    getIntrospect(req: Request): Promise<OAuth2TokenIntrospectionResponse>;
+    postIntrospect(req: Request): Promise<OAuth2TokenIntrospectionResponse>;
+    revokeToken(req: Request, res: Response): Promise<void>;
+    createToken(req: Request, res: Response): Promise<OAuth2TokenGrantResponse>;
+}
+//# sourceMappingURL=module.d.ts.map

package/dist/adapters/http/controllers/workflows/token/module.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"module.d.ts","sourceRoot":"","sources":["../../../../../../src/adapters/http/controllers/workflows/token/module.ts"],"names":[],"mappings":"AAOA,OAAO,EAEH,gBAAgB,EAChB,wBAAwB,EACxB,KAAK,gCAAgC,EACxC,MAAM,eAAe,CAAC;AAIvB,OAAO,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,QAAQ,CAAC;AAOhD,OAAO,KAAK,EAAE,sBAAsB,EAAE,sBAAsB,EAAE,MAAM,YAAY,CAAC;AACjF,OAAO,EACH,iBAAiB,EACjB,kBAAkB,EAClB,mBAAmB,EACnB,oBAAoB,EAEvB,MAAM,8BAA8B,CAAC;AACtC,OAAO,EAMH,gBAAgB,EAEnB,MAAM,4BAA4B,CAAC;AAIpC,qBAEa,eAAe;IACxB,SAAS,CAAC,OAAO,EAAE,sBAAsB,CAAC;IAE1C,SAAS,CAAC,kBAAkB,EAAE,kBAAkB,CAAC;IAEjD,SAAS,CAAC,iBAAiB,EAAE,kBAAkB,CAAC;IAEhD,SAAS,CAAC,aAAa,EAAE,oBAAoB,CAAC;IAE9C,SAAS,CAAC,YAAY,EAAE,mBAAmB,CAAC;IAE5C,SAAS,CAAC,gBAAgB,EAAG,iBAAiB,CAAC;IAE/C,SAAS,CAAC,WAAW,EAAG,MAAM,CAAC,GAAG,gBAAgB,EAAE,EAAE,gBAAgB,CAAC,CAAC;gBAI5D,GAAG,EAAE,sBAAsB;IA4CjC,aAAa,CACH,GAAG,EAAE,OAAO,GACzB,OAAO,CAAC,gCAAgC,CAAC;IAKtC,cAAc,CACJ,GAAG,EAAE,OAAO,GACzB,OAAO,CAAC,gCAAgC,CAAC;IAsDtC,WAAW,CACL,GAAG,EAAE,OAAO,EACP,GAAG,EAAE,QAAQ;IAkBxB,WAAW,CACD,GAAG,EAAE,OAAO,EACP,GAAG,EAAE,QAAQ,GAC/B,OAAO,CAAC,wBAAwB,CAAC;CAwDvC"}

package/dist/adapters/http/controllers/workflows/token/module.js

@@ -0,0 +1,215 @@
+/*
+ * Copyright (c) 2022.
+ * Author Peter Placzek (tada5hi)
+ * For the full copyright and license information,
+ * view the LICENSE file that was distributed with this source code.
+ */
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+var __param = (this && this.__param) || function (paramIndex, decorator) {
+    return function (target, key) { decorator(target, key, paramIndex); }
+};
+import { OAuth2Error, OAuth2TokenGrant, } from '@authup/specs';
+import { DController, DGet, DPost, DRequest, DResponse, DTags, } from '@routup/decorators';
+import { getRequestHostName, sendAccepted } from 'routup';
+import { setResponseCookie } from '@routup/basic/cookie';
+import { CookieName } from '@authup/core-http-kit';
+import { useDataSource } from 'typeorm-extension';
+import { pickRecord } from '@authup/kit';
+import { toOAuth2Error } from "../../../../../core/oauth2/helpers/index.js";
+import { OAuth2OpenIDClaimsBuilder, } from "../../../../../core/index.js";
+import { HTTPClientCredentialsGrant, HTTPOAuth2AuthorizeGrant, HTTPOAuth2RefreshTokenGrant, HTTPPasswordGrant, HTTPRobotCredentialsGrant, guessOauth2GrantTypeByRequest, } from "../../../adapters/index.js";
+import { extractTokenFromRequest } from "./utils/index.js";
+import { IdentityPermissionService } from "../../../../../services/index.js";
+let TokenController = class TokenController {
+    options;
+    refreshTokenIssuer;
+    accessTokenIssuer;
+    tokenVerifier;
+    tokenRevoker;
+    identityResolver;
+    tokenGrants;
+    // -------------------------------------------
+    constructor(ctx) {
+        this.options = ctx.options;
+        this.refreshTokenIssuer = ctx.refreshTokenIssuer;
+        this.accessTokenIssuer = ctx.accessTokenIssuer;
+        this.tokenVerifier = ctx.tokenVerifier;
+        this.tokenRevoker = ctx.tokenRevoker;
+        this.identityResolver = ctx.identityResolver;
+        this.tokenGrants = {
+            [OAuth2TokenGrant.AUTHORIZATION_CODE]: new HTTPOAuth2AuthorizeGrant({
+                codeVerifier: ctx.codeVerifier,
+                accessTokenIssuer: ctx.accessTokenIssuer,
+                refreshTokenIssuer: ctx.refreshTokenIssuer,
+                sessionManager: ctx.sessionManager,
+            }),
+            [OAuth2TokenGrant.CLIENT_CREDENTIALS]: new HTTPClientCredentialsGrant({
+                accessTokenIssuer: ctx.accessTokenIssuer,
+                authenticator: ctx.clientAuthenticator,
+                sessionManager: ctx.sessionManager,
+            }),
+            [OAuth2TokenGrant.ROBOT_CREDENTIALS]: new HTTPRobotCredentialsGrant({
+                accessTokenIssuer: ctx.accessTokenIssuer,
+                authenticator: ctx.robotAuthenticator,
+                sessionManager: ctx.sessionManager,
+            }),
+            [OAuth2TokenGrant.PASSWORD]: new HTTPPasswordGrant({
+                accessTokenIssuer: ctx.accessTokenIssuer,
+                refreshTokenIssuer: ctx.refreshTokenIssuer,
+                authenticator: ctx.userAuthenticator,
+                sessionManager: ctx.sessionManager,
+            }),
+            [OAuth2TokenGrant.REFRESH_TOKEN]: new HTTPOAuth2RefreshTokenGrant({
+                accessTokenIssuer: ctx.accessTokenIssuer,
+                refreshTokenIssuer: ctx.refreshTokenIssuer,
+                tokenVerifier: ctx.tokenVerifier,
+                tokenRevoker: ctx.tokenRevoker,
+                sessionManager: ctx.sessionManager,
+            }),
+        };
+    }
+    // -------------------------------------------
+    async getIntrospect(req) {
+        return this.postIntrospect(req);
+    }
+    async postIntrospect(req) {
+        try {
+            const token = await extractTokenFromRequest(req);
+            const payload = await this.tokenVerifier.verify(token, {
+                skipActiveCheck: true,
+            });
+            const dataSource = await useDataSource();
+            const identityPermissionService = new IdentityPermissionService(dataSource);
+            if (!payload.sub || !payload.sub_kind) {
+                throw OAuth2Error.identityInvalid();
+            }
+            // todo: only receive client specific permissions
+            const permissions = await identityPermissionService.getFor({
+                id: payload.sub,
+                type: payload.sub_kind,
+                clientId: payload.client_id,
+                realmId: payload.realm_id,
+            });
+            const identity = await this.identityResolver.resolve(payload.sub_kind, payload.sub);
+            if (!identity) {
+                // todo: differentiate between client, robot & user
+                throw OAuth2Error.identityInvalid();
+            }
+            const claimsBuilder = new OAuth2OpenIDClaimsBuilder();
+            const claims = claimsBuilder.fromIdentity(identity);
+            let active;
+            if (payload.jti) {
+                const isInactive = await this.tokenVerifier.isInactive(payload.jti);
+                active = !isInactive;
+            }
+            else {
+                active = false;
+            }
+            return {
+                active,
+                // todo: permissions property should be removed.
+                permissions: permissions
+                    .map((permission) => pickRecord(permission, ['name', 'client_id', 'realm_id'])),
+                ...payload,
+                ...claims,
+            };
+        }
+        catch (e) {
+            throw toOAuth2Error(e);
+        }
+    }
+    // ----------------------------------------------------------
+    async revokeToken(req, res) {
+        try {
+            const token = await extractTokenFromRequest(req);
+            const payload = await this.tokenVerifier.verify(token);
+            await this.tokenRevoker.revoke(payload);
+            return await sendAccepted(res);
+        }
+        catch (e) {
+            throw toOAuth2Error(e);
+        }
+    }
+    // ----------------------------------------------------------
+    async createToken(req, res) {
+        const grantType = guessOauth2GrantTypeByRequest(req);
+        if (!grantType) {
+            throw OAuth2Error.grantInvalid();
+        }
+        const grant = this.tokenGrants[grantType];
+        if (!grant) {
+            throw OAuth2Error.grantInvalid();
+        }
+        const grantResponse = await grant.runWithRequest(req);
+        const domainsRaw = [
+            ...this.options.cookieDomains,
+        ];
+        const requestHostName = getRequestHostName(req, {
+            trustProxy: true,
+        });
+        if (requestHostName) {
+            domainsRaw.push(requestHostName);
+        }
+        const domains = [...new Set(domainsRaw)];
+        for (let i = 0; i < domains.length; i++) {
+            const domain = domains[i];
+            setResponseCookie(res, CookieName.ACCESS_TOKEN, grantResponse.access_token, {
+                domain,
+                maxAge: grantResponse.expires_in * 1_000,
+            });
+            if (grantResponse.refresh_token &&
+                grantResponse.refresh_token_expires_in) {
+                setResponseCookie(res, CookieName.REFRESH_TOKEN, grantResponse.refresh_token, {
+                    domain,
+                    maxAge: grantResponse.refresh_token_expires_in * 1_000,
+                });
+            }
+        }
+        return grantResponse;
+    }
+};
+__decorate([
+    DGet('/introspect', []),
+    __param(0, DRequest()),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [Object]),
+    __metadata("design:returntype", Promise)
+], TokenController.prototype, "getIntrospect", null);
+__decorate([
+    DPost('/introspect', []),
+    __param(0, DRequest()),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [Object]),
+    __metadata("design:returntype", Promise)
+], TokenController.prototype, "postIntrospect", null);
+__decorate([
+    DPost('/revoke', []),
+    __param(0, DRequest()),
+    __param(1, DResponse()),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [Object, Object]),
+    __metadata("design:returntype", Promise)
+], TokenController.prototype, "revokeToken", null);
+__decorate([
+    DPost('', []),
+    __param(0, DRequest()),
+    __param(1, DResponse()),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [Object, Object]),
+    __metadata("design:returntype", Promise)
+], TokenController.prototype, "createToken", null);
+TokenController = __decorate([
+    DTags('auth'),
+    DController('/token'),
+    __metadata("design:paramtypes", [Object])
+], TokenController);
+export { TokenController };
+//# sourceMappingURL=module.js.map

package/dist/adapters/http/controllers/workflows/token/module.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"module.js","sourceRoot":"","sources":["../../../../../../src/adapters/http/controllers/workflows/token/module.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;;;;;;;;;;;;;AAEH,OAAO,EACH,WAAW,EACX,gBAAgB,GAGnB,MAAM,eAAe,CAAC;AACvB,OAAO,EACH,WAAW,EAAE,IAAI,EAAE,KAAK,EAAE,QAAQ,EAAE,SAAS,EAAE,KAAK,GACvD,MAAM,oBAAoB,CAAC;AAE5B,OAAO,EAAE,kBAAkB,EAAE,YAAY,EAAE,MAAM,QAAQ,CAAC;AAC1D,OAAO,EAAE,iBAAiB,EAAE,MAAM,sBAAsB,CAAC;AACzD,OAAO,EAAE,UAAU,EAAE,MAAM,uBAAuB,CAAC;AACnD,OAAO,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAC;AAClD,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,aAAa,EAAE,MAAM,6CAA6C,CAAC;AAE5E,OAAO,EAKH,yBAAyB,GAC5B,MAAM,8BAA8B,CAAC;AACtC,OAAO,EACH,0BAA0B,EAC1B,wBAAwB,EACxB,2BAA2B,EAC3B,iBAAiB,EACjB,yBAAyB,EAEzB,6BAA6B,GAChC,MAAM,4BAA4B,CAAC;AACpC,OAAO,EAAE,uBAAuB,EAAE,MAAM,kBAAkB,CAAC;AAC3D,OAAO,EAAE,yBAAyB,EAAE,MAAM,kCAAkC,CAAC;AAItE,IAAM,eAAe,GAArB,MAAM,eAAe;IACd,OAAO,CAAyB;IAEhC,kBAAkB,CAAqB;IAEvC,iBAAiB,CAAqB;IAEtC,aAAa,CAAuB;IAEpC,YAAY,CAAsB;IAElC,gBAAgB,CAAqB;IAErC,WAAW,CAAmD;IAExE,8CAA8C;IAE9C,YAAY,GAA2B;QACnC,IAAI,CAAC,OAAO,GAAG,GAAG,CAAC,OAAO,CAAC;QAC3B,IAAI,CAAC,kBAAkB,GAAG,GAAG,CAAC,kBAAkB,CAAC;QACjD,IAAI,CAAC,iBAAiB,GAAG,GAAG,CAAC,iBAAiB,CAAC;QAC/C,IAAI,CAAC,aAAa,GAAG,GAAG,CAAC,aAAa,CAAC;QACvC,IAAI,CAAC,YAAY,GAAG,GAAG,CAAC,YAAY,CAAC;QACrC,IAAI,CAAC,gBAAgB,GAAG,GAAG,CAAC,gBAAgB,CAAC;QAE7C,IAAI,CAAC,WAAW,GAAG;YACf,CAAC,gBAAgB,CAAC,kBAAkB,CAAC,EAAE,IAAI,wBAAwB,CAAC;gBAChE,YAAY,EAAE,GAAG,CAAC,YAAY;gBAC9B,iBAAiB,EAAE,GAAG,CAAC,iBAAiB;gBACxC,kBAAkB,EAAE,GAAG,CAAC,kBAAkB;gBAC1C,cAAc,EAAE,GAAG,CAAC,cAAc;aACrC,CAAC;YACF,CAAC,gBAAgB,CAAC,kBAAkB,CAAC,EAAE,IAAI,0BAA0B,CAAC;gBAClE,iBAAiB,EAAE,GAAG,CAAC,iBAAiB;gBACxC,aAAa,EAAE,GAAG,CAAC,mBAAmB;gBACtC,cAAc,EAAE,GAAG,CAAC,cAAc;aACrC,CAAC;YACF,CAAC,gBAAgB,CAAC,iBAAiB,CAAC,EAAE,IAAI,yBAAyB,CAAC;gBAChE,iBAAiB,EAAE,GAAG,CAAC,iBAAiB;gBACxC,aAAa,EAAE,GAAG,CAAC,kBAAkB;gBACrC,cAAc,EAAE,GAAG,CAAC,cAAc;aACrC,CAAC;YACF,CAAC,gBAAgB,CAAC,QAAQ,CAAC,EAAE,IAAI,iBAAiB,CAAC;gBAC/C,iBAAiB,EAAE,GAAG,CAAC,iBAAiB;gBACxC,kBAAkB,EAAE,GAAG,CAAC,kBAAkB;gBAC1C,aAAa,EAAE,GAAG,CAAC,iBAAiB;gBACpC,cAAc,EAAE,GAAG,CAAC,cAAc;aACrC,CAAC;YACF,CAAC,gBAAgB,CAAC,aAAa,CAAC,EAAE,IAAI,2BAA2B,CAAC;gBAC9D,iBAAiB,EAAE,GAAG,CAAC,iBAAiB;gBACxC,kBAAkB,EAAE,GAAG,CAAC,kBAAkB;gBAC1C,aAAa,EAAE,GAAG,CAAC,aAAa;gBAChC,YAAY,EAAE,GAAG,CAAC,YAAY;gBAC9B,cAAc,EAAE,GAAG,CAAC,cAAc;aACrC,CAAC;SACL,CAAC;IACN,CAAC;IAED,8CAA8C;IAGxC,AAAN,KAAK,CAAC,aAAa,CACH,GAAY;QAExB,OAAO,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC;IACpC,CAAC;IAGK,AAAN,KAAK,CAAC,cAAc,CACJ,GAAY;QAExB,IAAI,CAAC;YACD,MAAM,KAAK,GAAG,MAAM,uBAAuB,CAAC,GAAG,CAAC,CAAC;YACjD,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC,KAAK,EAAE;gBACnD,eAAe,EAAE,IAAI;aACxB,CAAC,CAAC;YACH,MAAM,UAAU,GAAG,MAAM,aAAa,EAAE,CAAC;YACzC,MAAM,yBAAyB,GAAG,IAAI,yBAAyB,CAAC,UAAU,CAAC,CAAC;YAE5E,IAAI,CAAC,OAAO,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC;gBACpC,MAAM,WAAW,CAAC,eAAe,EAAE,CAAC;YACxC,CAAC;YAED,iDAAiD;YACjD,MAAM,WAAW,GAAG,MAAM,yBAAyB,CAAC,MAAM,CAAC;gBACvD,EAAE,EAAE,OAAO,CAAC,GAAG;gBACf,IAAI,EAAE,OAAO,CAAC,QAAQ;gBACtB,QAAQ,EAAE,OAAO,CAAC,SAAS;gBAC3B,OAAO,EAAE,OAAO,CAAC,QAAQ;aAC5B,CAAC,CAAC;YAEH,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAAC,OAAO,CAAC,OAAO,CAAC,QAAQ,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC;YACpF,IAAI,CAAC,QAAQ,EAAE,CAAC;gBACZ,mDAAmD;gBACnD,MAAM,WAAW,CAAC,eAAe,EAAE,CAAC;YACxC,CAAC;YAED,MAAM,aAAa,GAAG,IAAI,yBAAyB,EAAE,CAAC;YACtD,MAAM,MAAM,GAAG,aAAa,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC;YAEpD,IAAI,MAAgB,CAAC;YACrB,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC;gBACd,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,UAAU,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;gBACpE,MAAM,GAAG,CAAC,UAAU,CAAC;YACzB,CAAC;iBAAM,CAAC;gBACJ,MAAM,GAAG,KAAK,CAAC;YACnB,CAAC;YAED,OAAO;gBACH,MAAM;gBACN,gDAAgD;gBAChD,WAAW,EAAE,WAAW;qBACnB,GAAG,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC,UAAU,CAAC,UAAU,EAAE,CAAC,MAAM,EAAE,WAAW,EAAE,UAAU,CAAC,CAA0B,CAAC;gBAC5G,GAAG,OAAO;gBACV,GAAG,MAAM;aACZ,CAAC;QACN,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACT,MAAM,aAAa,CAAC,CAAC,CAAC,CAAC;QAC3B,CAAC;IACL,CAAC;IAED,6DAA6D;IAGvD,AAAN,KAAK,CAAC,WAAW,CACL,GAAY,EACP,GAAa;QAE1B,IAAI,CAAC;YACD,MAAM,KAAK,GAAG,MAAM,uBAAuB,CAAC,GAAG,CAAC,CAAC;YAEjD,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YAEvD,MAAM,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;YAExC,OAAO,MAAM,YAAY,CAAC,GAAG,CAAC,CAAC;QACnC,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACT,MAAM,aAAa,CAAC,CAAC,CAAC,CAAC;QAC3B,CAAC;IACL,CAAC;IAED,6DAA6D;IAGvD,AAAN,KAAK,CAAC,WAAW,CACD,GAAY,EACP,GAAa;QAE9B,MAAM,SAAS,GAAG,6BAA6B,CAAC,GAAG,CAAC,CAAC;QACrD,IAAI,CAAC,SAAS,EAAE,CAAC;YACb,MAAM,WAAW,CAAC,YAAY,EAAE,CAAC;QACrC,CAAC;QAED,MAAM,KAAK,GAAG,IAAI,CAAC,WAAW,CAAC,SAAS,CAAC,CAAC;QAC1C,IAAI,CAAC,KAAK,EAAE,CAAC;YACT,MAAM,WAAW,CAAC,YAAY,EAAE,CAAC;QACrC,CAAC;QAED,MAAM,aAAa,GAAG,MAAM,KAAK,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC;QAEtD,MAAM,UAAU,GAAG;YACf,GAAG,IAAI,CAAC,OAAO,CAAC,aAAa;SAChC,CAAC;QACF,MAAM,eAAe,GAAG,kBAAkB,CAAC,GAAG,EAAE;YAC5C,UAAU,EAAE,IAAI;SACnB,CAAC,CAAC;QACH,IAAI,eAAe,EAAE,CAAC;YAClB,UAAU,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;QACrC,CAAC;QAED,MAAM,OAAO,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC;QAEzC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YACtC,MAAM,MAAM,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;YAE1B,iBAAiB,CACb,GAAG,EACH,UAAU,CAAC,YAAY,EACvB,aAAa,CAAC,YAAY,EAC1B;gBACI,MAAM;gBACN,MAAM,EAAE,aAAa,CAAC,UAAU,GAAG,KAAK;aAC3C,CACJ,CAAC;YAEF,IACI,aAAa,CAAC,aAAa;gBAC3B,aAAa,CAAC,wBAAwB,EACxC,CAAC;gBACC,iBAAiB,CACb,GAAG,EACH,UAAU,CAAC,aAAa,EACxB,aAAa,CAAC,aAAa,EAC3B;oBACI,MAAM;oBACN,MAAM,EAAE,aAAa,CAAC,wBAAwB,GAAG,KAAK;iBACzD,CACJ,CAAC;YACN,CAAC;QACL,CAAC;QAED,OAAO,aAAa,CAAC;IACzB,CAAC;CACJ,CAAA;AA9IS;IADL,IAAI,CAAC,aAAa,EAAE,EAAE,CAAC;IAEnB,WAAA,QAAQ,EAAE,CAAA;;;;oDAGd;AAGK;IADL,KAAK,CAAC,aAAa,EAAE,EAAE,CAAC;IAEpB,WAAA,QAAQ,EAAE,CAAA;;;;qDAkDd;AAKK;IADL,KAAK,CAAC,SAAS,EAAE,EAAE,CAAC;IAEpB,WAAA,QAAQ,EAAE,CAAA;IACN,WAAA,SAAS,EAAE,CAAA;;;;kDAaf;AAKK;IADL,KAAK,CAAC,EAAE,EAAE,EAAE,CAAC;IAET,WAAA,QAAQ,EAAE,CAAA;IACN,WAAA,SAAS,EAAE,CAAA;;;;kDAwDnB;AA1MQ,eAAe;IAF3B,KAAK,CAAC,MAAM,CAAC;IACb,WAAW,CAAC,QAAQ,CAAC;;GACT,eAAe,CA2M3B"}

package/dist/adapters/http/controllers/workflows/token/types.d.ts

@@ -0,0 +1,20 @@
+import type { Client, Robot, User } from '@authup/core-kit';
+import type { ICredentialsAuthenticator, IIdentityResolver, IOAuth2AuthorizationCodeVerifier, IOAuth2TokenIssuer, IOAuth2TokenRevoker, IOAuth2TokenVerifier, ISessionManager } from '../../../../../core/index.ts';
+export type TokenControllerOptions = {
+    cookieDomains: string[];
+};
+export type TokenControllerContext = {
+    options: TokenControllerOptions;
+    cookieDomain?: string;
+    codeVerifier: IOAuth2AuthorizationCodeVerifier;
+    accessTokenIssuer: IOAuth2TokenIssuer;
+    refreshTokenIssuer: IOAuth2TokenIssuer;
+    tokenVerifier: IOAuth2TokenVerifier;
+    tokenRevoker: IOAuth2TokenRevoker;
+    sessionManager: ISessionManager;
+    identityResolver: IIdentityResolver;
+    clientAuthenticator: ICredentialsAuthenticator<Client>;
+    robotAuthenticator: ICredentialsAuthenticator<Robot>;
+    userAuthenticator: ICredentialsAuthenticator<User>;
+};
+//# sourceMappingURL=types.d.ts.map

package/dist/adapters/http/controllers/workflows/token/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../../../../src/adapters/http/controllers/workflows/token/types.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAC;AAC5D,OAAO,KAAK,EACR,yBAAyB,EACzB,iBAAiB,EACjB,gCAAgC,EAChC,kBAAkB,EAClB,mBAAmB,EACnB,oBAAoB,EAAE,eAAe,EACxC,MAAM,8BAA8B,CAAC;AAEtC,MAAM,MAAM,sBAAsB,GAAG;IACjC,aAAa,EAAE,MAAM,EAAE,CAAA;CAC1B,CAAC;AAEF,MAAM,MAAM,sBAAsB,GAAG;IACjC,OAAO,EAAE,sBAAsB,CAAC;IAChC,YAAY,CAAC,EAAE,MAAM,CAAC;IAEtB,YAAY,EAAE,gCAAgC,CAAC;IAE/C,iBAAiB,EAAE,kBAAkB,CAAC;IACtC,kBAAkB,EAAE,kBAAkB,CAAC;IACvC,aAAa,EAAE,oBAAoB,CAAC;IACpC,YAAY,EAAE,mBAAmB,CAAC;IAElC,cAAc,EAAE,eAAe,CAAC;IAEhC,gBAAgB,EAAE,iBAAiB,CAAC;IAEpC,mBAAmB,EAAE,yBAAyB,CAAC,MAAM,CAAC,CAAA;IACtD,kBAAkB,EAAE,yBAAyB,CAAC,KAAK,CAAC,CAAA;IACpD,iBAAiB,EAAE,yBAAyB,CAAC,IAAI,CAAC,CAAA;CACrD,CAAC"}

package/dist/adapters/http/controllers/workflows/token/types.js

@@ -0,0 +1,8 @@
+/*
+ * Copyright (c) 2025.
+ *  Author Peter Placzek (tada5hi)
+ *  For the full copyright and license information,
+ *  view the LICENSE file that was distributed with this source code.
+ */
+export {};
+//# sourceMappingURL=types.js.map

package/dist/adapters/http/controllers/workflows/token/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../../../../../src/adapters/http/controllers/workflows/token/types.ts"],"names":[],"mappings":"AAAA;;;;;GAKG"}

package/dist/adapters/http/controllers/workflows/token/utils/extract.d.ts

@@ -0,0 +1,3 @@
+import type { Request } from 'routup';
+export declare function extractTokenFromRequest(req: Request): Promise<string>;
+//# sourceMappingURL=extract.d.ts.map

package/dist/adapters/http/controllers/workflows/token/utils/extract.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"extract.d.ts","sourceRoot":"","sources":["../../../../../../../src/adapters/http/controllers/workflows/token/utils/extract.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,QAAQ,CAAC;AAQtC,wBAAsB,uBAAuB,CAAC,GAAG,EAAE,OAAO,GAAI,OAAO,CAAC,MAAM,CAAC,CAyB5E"}

package/dist/adapters/http/controllers/workflows/token/utils/extract.js

@@ -0,0 +1,34 @@
+/*
+ * Copyright (c) 2024.
+ * Author Peter Placzek (tada5hi)
+ * For the full copyright and license information,
+ * view the LICENSE file that was distributed with this source code.
+ */
+import { RoutupContainerAdapter } from '@validup/adapter-routup';
+import { ValidupError, buildErrorMessageForAttribute, defineIssueItem, } from 'validup';
+import { useRequestToken } from "../../../../request/index.js";
+import { TokenRequestValidator } from "./validator.js";
+export async function extractTokenFromRequest(req) {
+    let token;
+    try {
+        const validator = new TokenRequestValidator();
+        const validatorAdapter = new RoutupContainerAdapter(validator);
+        const data = await validatorAdapter.run(req, {
+            locations: ['body', 'query', 'params'],
+        });
+        token = data.token;
+    }
+    catch (e) {
+        token = useRequestToken(req);
+    }
+    if (!token) {
+        throw new ValidupError([
+            defineIssueItem({
+                path: ['token'],
+                message: buildErrorMessageForAttribute('token'),
+            }),
+        ]);
+    }
+    return token;
+}
+//# sourceMappingURL=extract.js.map

package/dist/adapters/http/controllers/workflows/token/utils/extract.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"extract.js","sourceRoot":"","sources":["../../../../../../../src/adapters/http/controllers/workflows/token/utils/extract.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAGH,OAAO,EAAE,sBAAsB,EAAE,MAAM,yBAAyB,CAAC;AACjE,OAAO,EACH,YAAY,EAAE,6BAA6B,EAAE,eAAe,GAC/D,MAAM,SAAS,CAAC;AACjB,OAAO,EAAE,eAAe,EAAE,MAAM,8BAA8B,CAAC;AAC/D,OAAO,EAAE,qBAAqB,EAAE,MAAM,gBAAgB,CAAC;AAEvD,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAAC,GAAY;IACtD,IAAI,KAA0B,CAAC;IAE/B,IAAI,CAAC;QACD,MAAM,SAAS,GAAG,IAAI,qBAAqB,EAAE,CAAC;QAC9C,MAAM,gBAAgB,GAAG,IAAI,sBAAsB,CAAC,SAAS,CAAC,CAAC;QAC/D,MAAM,IAAI,GAAG,MAAM,gBAAgB,CAAC,GAAG,CAAC,GAAG,EAAE;YACzC,SAAS,EAAE,CAAC,MAAM,EAAE,OAAO,EAAE,QAAQ,CAAC;SACzC,CAAC,CAAC;QAEH,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC;IACvB,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACT,KAAK,GAAG,eAAe,CAAC,GAAG,CAAC,CAAC;IACjC,CAAC;IAED,IAAI,CAAC,KAAK,EAAE,CAAC;QACT,MAAM,IAAI,YAAY,CAAC;YACnB,eAAe,CAAC;gBACZ,IAAI,EAAE,CAAC,OAAO,CAAC;gBACf,OAAO,EAAE,6BAA6B,CAAC,OAAO,CAAC;aAClD,CAAC;SACL,CAAC,CAAC;IACP,CAAC;IAED,OAAO,KAAK,CAAC;AACjB,CAAC"}

package/dist/adapters/http/controllers/workflows/token/utils/index.d.ts

@@ -0,0 +1,3 @@
+export * from './extract.ts';
+export * from './validator.ts';
+//# sourceMappingURL=index.d.ts.map

package/dist/adapters/http/controllers/workflows/token/utils/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../../../src/adapters/http/controllers/workflows/token/utils/index.ts"],"names":[],"mappings":"AAOA,cAAc,cAAc,CAAC;AAC7B,cAAc,gBAAgB,CAAC"}

package/dist/adapters/http/controllers/workflows/token/utils/index.js

@@ -0,0 +1,9 @@
+/*
+ * Copyright (c) 2024.
+ * Author Peter Placzek (tada5hi)
+ * For the full copyright and license information,
+ * view the LICENSE file that was distributed with this source code.
+ */
+export * from "./extract.js";
+export * from "./validator.js";
+//# sourceMappingURL=index.js.map

package/dist/adapters/http/controllers/workflows/token/utils/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../../../../src/adapters/http/controllers/workflows/token/utils/index.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,cAAc,cAAc,CAAC;AAC7B,cAAc,gBAAgB,CAAC"}

package/dist/adapters/http/controllers/workflows/token/utils/validator.d.ts

@@ -0,0 +1,7 @@
+import { Container } from 'validup';
+export declare class TokenRequestValidator extends Container<{
+    token: string;
+}> {
+    protected initialize(): void;
+}
+//# sourceMappingURL=validator.d.ts.map

package/dist/adapters/http/controllers/workflows/token/utils/validator.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"validator.d.ts","sourceRoot":"","sources":["../../../../../../../src/adapters/http/controllers/workflows/token/utils/validator.ts"],"names":[],"mappings":"AAQA,OAAO,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AAEpC,qBAAa,qBAAsB,SAAQ,SAAS,CAAC;IAAE,KAAK,EAAE,MAAM,CAAA;CAAE,CAAC;IACnE,SAAS,CAAC,UAAU;CAevB"}

package/dist/adapters/http/controllers/workflows/token/utils/validator.js

@@ -0,0 +1,22 @@
+/*
+ * Copyright (c) 2024.
+ * Author Peter Placzek (tada5hi)
+ * For the full copyright and license information,
+ * view the LICENSE file that was distributed with this source code.
+ */
+import { createValidationChain, createValidator } from '@validup/adapter-validator';
+import { Container } from 'validup';
+export class TokenRequestValidator extends Container {
+    initialize() {
+        super.initialize();
+        this.mount('token', createValidator(() => {
+            const chain = createValidationChain();
+            return chain
+                .exists()
+                .notEmpty()
+                .isString()
+                .isLength({ min: 16, max: 2048 });
+        }));
+    }
+}
+//# sourceMappingURL=validator.js.map

package/dist/adapters/http/controllers/workflows/token/utils/validator.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"validator.js","sourceRoot":"","sources":["../../../../../../../src/adapters/http/controllers/workflows/token/utils/validator.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,qBAAqB,EAAE,eAAe,EAAE,MAAM,4BAA4B,CAAC;AACpF,OAAO,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AAEpC,MAAM,OAAO,qBAAsB,SAAQ,SAA4B;IACzD,UAAU;QAChB,KAAK,CAAC,UAAU,EAAE,CAAC;QAEnB,IAAI,CAAC,KAAK,CACN,OAAO,EACP,eAAe,CAAC,GAAG,EAAE;YACjB,MAAM,KAAK,GAAG,qBAAqB,EAAE,CAAC;YACtC,OAAO,KAAK;iBACP,MAAM,EAAE;iBACR,QAAQ,EAAE;iBACV,QAAQ,EAAE;iBACV,QAAQ,CAAC,EAAE,GAAG,EAAE,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC;QAC1C,CAAC,CAAC,CACL,CAAC;IACN,CAAC;CACJ"}

package/dist/adapters/http/index.d.ts

@@ -0,0 +1,7 @@
+export * from './adapters/index.ts';
+export * from './controllers/index.ts';
+export * from './middleware/index.ts';
+export * from './request/index.ts';
+export * from './server/index.ts';
+export * from './swagger/index.ts';
+//# sourceMappingURL=index.d.ts.map

package/dist/adapters/http/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/adapters/http/index.ts"],"names":[],"mappings":"AAOA,cAAc,qBAAqB,CAAC;AACpC,cAAc,wBAAwB,CAAC;AACvC,cAAc,uBAAuB,CAAC;AACtC,cAAc,oBAAoB,CAAC;AACnC,cAAc,mBAAmB,CAAC;AAClC,cAAc,oBAAoB,CAAC"}

package/dist/adapters/http/index.js

@@ -0,0 +1,13 @@
+/*
+ * Copyright (c) 2021-2023.
+ * Author Peter Placzek (tada5hi)
+ * For the full copyright and license information,
+ * view the LICENSE file that was distributed with this source code.
+ */
+export * from "./adapters/index.js";
+export * from "./controllers/index.js";
+export * from "./middleware/index.js";
+export * from "./request/index.js";
+export * from "./server/index.js";
+export * from "./swagger/index.js";
+//# sourceMappingURL=index.js.map

package/dist/adapters/http/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/adapters/http/index.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,cAAc,qBAAqB,CAAC;AACpC,cAAc,wBAAwB,CAAC;AACvC,cAAc,uBAAuB,CAAC;AACtC,cAAc,oBAAoB,CAAC;AACnC,cAAc,mBAAmB,CAAC;AAClC,cAAc,oBAAoB,CAAC"}

package/dist/adapters/http/middleware/built-in/assets.d.ts

@@ -0,0 +1,3 @@
+import type { Router } from 'routup';
+export declare function registerAssetsMiddleware(router: Router): Promise<void>;
+//# sourceMappingURL=assets.d.ts.map

package/dist/adapters/http/middleware/built-in/assets.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"assets.d.ts","sourceRoot":"","sources":["../../../../../src/adapters/http/middleware/built-in/assets.ts"],"names":[],"mappings":"AAWA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAIrC,wBAAsB,wBAAwB,CAAC,MAAM,EAAE,MAAM,iBAgD5D"}

package/dist/adapters/http/middleware/built-in/assets.js

@@ -0,0 +1,51 @@
+/*
+ * Copyright (c) 2023.
+ * Author Peter Placzek (tada5hi)
+ * For the full copyright and license information,
+ * view the LICENSE file that was distributed with this source code.
+ */
+import { load } from 'locter';
+import { CodeTransformation, isCodeTransformation } from 'typeorm-extension';
+import { createHandler } from '@routup/assets';
+import path from 'node:path';
+import { coreHandler, setRequestParam } from 'routup';
+import { CLIENT_WEB_SLIM_PACKAGE_PATH, DIST_PATH, PACKAGE_PATH } from "../../../../path.js";
+export async function registerAssetsMiddleware(router) {
+    if (!isCodeTransformation(CodeTransformation.JUST_IN_TIME)) {
+        router.use('public', createHandler(path.posix.join(PACKAGE_PATH, 'public'), {
+            fallthrough: true,
+            scan: false,
+        }));
+        router.use('public', createHandler(path.posix.join(DIST_PATH, 'client'), {
+            fallthrough: false,
+            scan: false,
+        }));
+        return;
+    }
+    /**
+     * @type import('vite')
+     */
+    const vite = await load('vite');
+    /**
+     * @type {import('vite').ViteDevServer}
+     */
+    const server = await vite.createServer({
+        root: CLIENT_WEB_SLIM_PACKAGE_PATH,
+        base: '/public/',
+        logLevel: 'error',
+        server: {
+            middlewareMode: true,
+            watch: {
+                usePolling: true,
+                interval: 100,
+            },
+        },
+        appType: 'custom',
+    });
+    router.use('public', coreHandler((req, res, next) => server.middlewares(req, res, next)));
+    router.use(coreHandler((req, res, next) => {
+        setRequestParam(req, 'viteServer', server);
+        next();
+    }));
+}
+//# sourceMappingURL=assets.js.map

package/dist/adapters/http/middleware/built-in/assets.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"assets.js","sourceRoot":"","sources":["../../../../../src/adapters/http/middleware/built-in/assets.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,IAAI,EAAE,MAAM,QAAQ,CAAC;AAC9B,OAAO,EAAE,kBAAkB,EAAE,oBAAoB,EAAE,MAAM,mBAAmB,CAAC;AAC7E,OAAO,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAC;AAC/C,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,OAAO,EAAE,WAAW,EAAE,eAAe,EAAE,MAAM,QAAQ,CAAC;AACtD,OAAO,EAAE,4BAA4B,EAAE,SAAS,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AAE5F,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAAC,MAAc;IACzD,IAAI,CAAC,oBAAoB,CAAC,kBAAkB,CAAC,YAAY,CAAC,EAAE,CAAC;QACzD,MAAM,CAAC,GAAG,CAAC,QAAQ,EAAE,aAAa,CAC9B,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,YAAY,EAAE,QAAQ,CAAC,EACvC;YACI,WAAW,EAAE,IAAI;YACjB,IAAI,EAAE,KAAK;SACd,CACJ,CAAC,CAAC;QAEH,MAAM,CAAC,GAAG,CAAC,QAAQ,EAAE,aAAa,CAC9B,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,EAAE,QAAQ,CAAC,EACpC;YACI,WAAW,EAAE,KAAK;YAClB,IAAI,EAAE,KAAK;SACd,CACJ,CAAC,CAAC;QACH,OAAO;IACX,CAAC;IAED;;OAEG;IACH,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,CAAC;IAEhC;;OAEG;IACH,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC;QACnC,IAAI,EAAE,4BAA4B;QAClC,IAAI,EAAE,UAAU;QAChB,QAAQ,EAAE,OAAO;QACjB,MAAM,EAAE;YACJ,cAAc,EAAE,IAAI;YACpB,KAAK,EAAE;gBACH,UAAU,EAAE,IAAI;gBAChB,QAAQ,EAAE,GAAG;aAChB;SACJ;QACD,OAAO,EAAE,QAAQ;KACpB,CAAC,CAAC;IAEH,MAAM,CAAC,GAAG,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,CAAC,MAAM,CAAC,WAAW,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC;IAC1F,MAAM,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE;QACtC,eAAe,CAAC,GAAG,EAAE,YAAY,EAAE,MAAM,CAAC,CAAC;QAE3C,IAAI,EAAE,CAAC;IACX,CAAC,CAAC,CAAC,CAAC;AACR,CAAC"}

package/dist/adapters/http/middleware/built-in/authorization/factory.d.ts

@@ -0,0 +1,4 @@
+import type { Handler } from 'routup';
+import type { HTTPAuthorizationMiddlewareContext } from './types.ts';
+export declare function createAuthorizationMiddleware(ctx: HTTPAuthorizationMiddlewareContext): Handler;
+//# sourceMappingURL=factory.d.ts.map

package/dist/adapters/http/middleware/built-in/authorization/factory.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"factory.d.ts","sourceRoot":"","sources":["../../../../../../src/adapters/http/middleware/built-in/authorization/factory.ts"],"names":[],"mappings":"AAQA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,QAAQ,CAAC;AAEtC,OAAO,KAAK,EAAE,kCAAkC,EAAE,MAAM,YAAY,CAAC;AAErE,wBAAgB,6BAA6B,CAAC,GAAG,EAAE,kCAAkC,GAAI,OAAO,CAQ/F"}

package/dist/adapters/http/middleware/built-in/authorization/factory.js

@@ -0,0 +1,13 @@
+/*
+ * Copyright (c) 2021-2022.
+ * Author Peter Placzek (tada5hi)
+ * For the full copyright and license information,
+ * view the LICENSE file that was distributed with this source code.
+ */
+import { coreHandler } from 'routup';
+import { AuthorizationMiddleware } from "./module.js";
+export function createAuthorizationMiddleware(ctx) {
+    const middleware = new AuthorizationMiddleware(ctx);
+    return coreHandler(async (request, response, next) => middleware.run(request, response, next));
+}
+//# sourceMappingURL=factory.js.map

package/dist/adapters/http/middleware/built-in/authorization/factory.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"factory.js","sourceRoot":"","sources":["../../../../../../src/adapters/http/middleware/built-in/authorization/factory.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,WAAW,EAAE,MAAM,QAAQ,CAAC;AAErC,OAAO,EAAE,uBAAuB,EAAE,MAAM,aAAa,CAAC;AAGtD,MAAM,UAAU,6BAA6B,CAAC,GAAuC;IACjF,MAAM,UAAU,GAAG,IAAI,uBAAuB,CAAC,GAAG,CAAC,CAAC;IAEpD,OAAO,WAAW,CAAC,KAAK,EACpB,OAAO,EACP,QAAQ,EACR,IAAI,EACN,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC,OAAO,EAAE,QAAQ,EAAE,IAAI,CAAC,CAAC,CAAC;AAClD,CAAC"}

package/dist/adapters/http/middleware/built-in/authorization/index.d.ts

@@ -0,0 +1,4 @@
+export * from './module.ts';
+export * from './factory.ts';
+export * from './types.ts';
+//# sourceMappingURL=index.d.ts.map

package/dist/adapters/http/middleware/built-in/authorization/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../../src/adapters/http/middleware/built-in/authorization/index.ts"],"names":[],"mappings":"AAOA,cAAc,aAAa,CAAC;AAC5B,cAAc,cAAc,CAAC;AAC7B,cAAc,YAAY,CAAC"}