@authup/server-core 1.0.0-beta.3 → 1.0.0-beta.30

package/dist/core/oauth2/scope/types.d.ts

@@ -0,0 +1,5 @@
+import type { Scope } from '@authup/core-kit';
+export interface IOAuth2ScopeRepository {
+    findByClientId(clientId: string): Promise<Scope[]>;
+}
+//# sourceMappingURL=types.d.ts.map

package/dist/core/oauth2/scope/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../../src/core/oauth2/scope/types.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,kBAAkB,CAAC;AAE9C,MAAM,WAAW,sBAAsB;IACnC,cAAc,CAAC,QAAQ,EAAE,MAAM,GAAI,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC;CACvD"}

package/dist/core/oauth2/scope/types.js

@@ -0,0 +1,8 @@
+/*
+ * Copyright (c) 2025.
+ * Author Peter Placzek (tada5hi)
+ * For the full copyright and license information,
+ * view the LICENSE file that was distributed with this source code.
+ */
+export {};
+//# sourceMappingURL=types.js.map

package/dist/core/oauth2/scope/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../../../src/core/oauth2/scope/types.ts"],"names":[],"mappings":"AAAA;;;;;GAKG"}

package/dist/core/oauth2/token/index.d.ts

@@ -0,0 +1,6 @@
+export * from './issuer/index.ts';
+export * from './revoker/index.ts';
+export * from './signer/index.ts';
+export * from './verifier/index.ts';
+export * from './repository/index.ts';
+//# sourceMappingURL=index.d.ts.map

package/dist/core/oauth2/token/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/core/oauth2/token/index.ts"],"names":[],"mappings":"AAOA,cAAc,mBAAmB,CAAC;AAClC,cAAc,oBAAoB,CAAC;AACnC,cAAc,mBAAmB,CAAC;AAClC,cAAc,qBAAqB,CAAC;AACpC,cAAc,uBAAuB,CAAC"}

package/dist/core/oauth2/token/index.js

@@ -0,0 +1,12 @@
+/*
+ * Copyright (c) 2022.
+ * Author Peter Placzek (tada5hi)
+ * For the full copyright and license information,
+ * view the LICENSE file that was distributed with this source code.
+ */
+export * from "./issuer/index.js";
+export * from "./revoker/index.js";
+export * from "./signer/index.js";
+export * from "./verifier/index.js";
+export * from "./repository/index.js";
+//# sourceMappingURL=index.js.map

package/dist/core/oauth2/token/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../src/core/oauth2/token/index.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,cAAc,mBAAmB,CAAC;AAClC,cAAc,oBAAoB,CAAC;AACnC,cAAc,mBAAmB,CAAC;AAClC,cAAc,qBAAqB,CAAC;AACpC,cAAc,uBAAuB,CAAC"}

package/dist/core/oauth2/token/issuer/access/index.d.ts

@@ -0,0 +1,2 @@
+export * from './module.ts';
+//# sourceMappingURL=index.d.ts.map

package/dist/core/oauth2/token/issuer/access/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../../src/core/oauth2/token/issuer/access/index.ts"],"names":[],"mappings":"AAOA,cAAc,aAAa,CAAC"}

package/dist/core/oauth2/token/issuer/access/index.js

@@ -0,0 +1,8 @@
+/*
+ * Copyright (c) 2025.
+ * Author Peter Placzek (tada5hi)
+ * For the full copyright and license information,
+ * view the LICENSE file that was distributed with this source code.
+ */
+export * from "./module.js";
+//# sourceMappingURL=index.js.map

package/dist/core/oauth2/token/issuer/access/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../../../src/core/oauth2/token/issuer/access/index.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,cAAc,aAAa,CAAC"}

package/dist/core/oauth2/token/issuer/access/module.d.ts

@@ -0,0 +1,12 @@
+import type { OAuth2TokenPayload } from '@authup/specs';
+import type { IOAuth2TokenSigner } from '../../signer/index.ts';
+import type { IOAuth2TokenRepository } from '../../repository/index.ts';
+import { OAuth2BaseTokenIssuer } from '../base.ts';
+import type { IOAuth2TokenIssuer, OAuth2TokenIssuerOptions, OAuth2TokenIssuerResponse } from '../types.ts';
+export declare class OAuth2AccessTokenIssuer extends OAuth2BaseTokenIssuer implements IOAuth2TokenIssuer {
+    protected repository: IOAuth2TokenRepository;
+    protected signer: IOAuth2TokenSigner;
+    constructor(repository: IOAuth2TokenRepository, signer: IOAuth2TokenSigner, options?: OAuth2TokenIssuerOptions);
+    issue(input?: OAuth2TokenPayload): Promise<OAuth2TokenIssuerResponse>;
+}
+//# sourceMappingURL=module.d.ts.map

package/dist/core/oauth2/token/issuer/access/module.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"module.d.ts","sourceRoot":"","sources":["../../../../../../src/core/oauth2/token/issuer/access/module.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,eAAe,CAAC;AAExD,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,uBAAuB,CAAC;AAChE,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,2BAA2B,CAAC;AACxE,OAAO,EAAE,qBAAqB,EAAE,MAAM,YAAY,CAAC;AACnD,OAAO,KAAK,EAAE,kBAAkB,EAAE,wBAAwB,EAAE,yBAAyB,EAAE,MAAM,aAAa,CAAC;AAE3G,qBAAa,uBAAwB,SAAQ,qBAAsB,YAAW,kBAAkB;IAC5F,SAAS,CAAC,UAAU,EAAE,sBAAsB,CAAC;IAE7C,SAAS,CAAC,MAAM,EAAG,kBAAkB,CAAC;gBAGlC,UAAU,EAAE,sBAAsB,EAClC,MAAM,EAAE,kBAAkB,EAC1B,OAAO,GAAE,wBAA6B;IAQpC,KAAK,CAAC,KAAK,GAAE,kBAAuB,GAAI,OAAO,CAAC,yBAAyB,CAAC;CAanF"}

package/dist/core/oauth2/token/issuer/access/module.js

@@ -0,0 +1,28 @@
+/*
+ * Copyright (c) 2025.
+ * Author Peter Placzek (tada5hi)
+ * For the full copyright and license information,
+ * view the LICENSE file that was distributed with this source code.
+ */
+import { OAuth2TokenKind } from '@authup/specs';
+import { OAuth2BaseTokenIssuer } from "../base.js";
+export class OAuth2AccessTokenIssuer extends OAuth2BaseTokenIssuer {
+    repository;
+    signer;
+    constructor(repository, signer, options = {}) {
+        super(options);
+        this.repository = repository;
+        this.signer = signer;
+    }
+    async issue(input = {}) {
+        const data = await this.repository.insert({
+            ...input,
+            kind: OAuth2TokenKind.ACCESS,
+            exp: this.buildExp(input),
+        });
+        const token = await this.signer.sign(data);
+        await this.repository.saveWithSignature(data, token);
+        return [token, data];
+    }
+}
+//# sourceMappingURL=module.js.map

package/dist/core/oauth2/token/issuer/access/module.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"module.js","sourceRoot":"","sources":["../../../../../../src/core/oauth2/token/issuer/access/module.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAGH,OAAO,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAGhD,OAAO,EAAE,qBAAqB,EAAE,MAAM,YAAY,CAAC;AAGnD,MAAM,OAAO,uBAAwB,SAAQ,qBAAqB;IACpD,UAAU,CAAyB;IAEnC,MAAM,CAAsB;IAEtC,YACI,UAAkC,EAClC,MAA0B,EAC1B,UAAoC,EAAE;QAEtC,KAAK,CAAC,OAAO,CAAC,CAAC;QAEf,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC;QAC7B,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;IACzB,CAAC;IAED,KAAK,CAAC,KAAK,CAAC,QAA4B,EAAE;QACtC,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC;YACtC,GAAG,KAAK;YACR,IAAI,EAAE,eAAe,CAAC,MAAM;YAC5B,GAAG,EAAE,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC;SAC5B,CAAC,CAAC;QAEH,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAE3C,MAAM,IAAI,CAAC,UAAU,CAAC,iBAAiB,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;QAErD,OAAO,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;IACzB,CAAC;CACJ"}

package/dist/core/oauth2/token/issuer/base.d.ts

@@ -0,0 +1,14 @@
+import type { OAuth2TokenPayload } from '@authup/specs';
+import type { IOAuth2TokenIssuer, OAuth2TokenIssuerOptions, OAuth2TokenIssuerResponse } from './types.ts';
+export declare abstract class OAuth2BaseTokenIssuer implements IOAuth2TokenIssuer {
+    protected options: OAuth2TokenIssuerOptions;
+    protected constructor(options?: OAuth2TokenIssuerOptions);
+    abstract issue(input: OAuth2TokenPayload, options?: OAuth2TokenIssuerOptions): Promise<OAuth2TokenIssuerResponse>;
+    /**
+     * Build utc expire time (in seconds).
+     *
+     * @param input
+     */
+    buildExp(input?: OAuth2TokenPayload): number;
+}
+//# sourceMappingURL=base.d.ts.map

package/dist/core/oauth2/token/issuer/base.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"base.d.ts","sourceRoot":"","sources":["../../../../../src/core/oauth2/token/issuer/base.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,eAAe,CAAC;AACxD,OAAO,KAAK,EAAE,kBAAkB,EAAE,wBAAwB,EAAE,yBAAyB,EAAE,MAAM,YAAY,CAAC;AAE1G,8BAAsB,qBAAsB,YAAW,kBAAkB;IACrE,SAAS,CAAC,OAAO,EAAE,wBAAwB,CAAC;IAI5C,SAAS,aAAa,OAAO,CAAC,EAAE,wBAAwB;IAMxD,QAAQ,CAAC,KAAK,CAAC,KAAK,EAAE,kBAAkB,EAAE,OAAO,CAAC,EAAE,wBAAwB,GAAG,OAAO,CAAC,yBAAyB,CAAC;IAIjH;;;;OAIG;IACH,QAAQ,CAAC,KAAK,GAAE,kBAAuB,GAAI,MAAM;CAYpD"}

package/dist/core/oauth2/token/issuer/base.js

@@ -0,0 +1,30 @@
+/*
+ * Copyright (c) 2025.
+ * Author Peter Placzek (tada5hi)
+ * For the full copyright and license information,
+ * view the LICENSE file that was distributed with this source code.
+ */
+export class OAuth2BaseTokenIssuer {
+    options;
+    // ------------------------------------------------------------------
+    constructor(options) {
+        this.options = options || {};
+    }
+    // ------------------------------------------------------------------
+    /**
+     * Build utc expire time (in seconds).
+     *
+     * @param input
+     */
+    buildExp(input = {}) {
+        if (input.exp) {
+            return input.exp;
+        }
+        const utc = Math.floor(new Date().getTime() / 1000);
+        if (this.options.maxAge) {
+            return utc + this.options.maxAge;
+        }
+        return utc + 3_600;
+    }
+}
+//# sourceMappingURL=base.js.map

package/dist/core/oauth2/token/issuer/base.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"base.js","sourceRoot":"","sources":["../../../../../src/core/oauth2/token/issuer/base.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAKH,MAAM,OAAgB,qBAAqB;IAC7B,OAAO,CAA2B;IAE5C,qEAAqE;IAErE,YAAsB,OAAkC;QACpD,IAAI,CAAC,OAAO,GAAG,OAAO,IAAI,EAAE,CAAC;IACjC,CAAC;IAMD,qEAAqE;IAErE;;;;OAIG;IACH,QAAQ,CAAC,QAA4B,EAAE;QACnC,IAAI,KAAK,CAAC,GAAG,EAAE,CAAC;YACZ,OAAO,KAAK,CAAC,GAAG,CAAC;QACrB,CAAC;QAED,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,IAAI,EAAE,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,CAAC;QACpD,IAAI,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC;YACtB,OAAO,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC;QACrC,CAAC;QAED,OAAO,GAAG,GAAG,KAAK,CAAC;IACvB,CAAC;CACJ"}

package/dist/core/oauth2/token/issuer/index.d.ts

@@ -0,0 +1,5 @@
+export * from './access/index.ts';
+export * from './open-id/index.ts';
+export * from './refresh/index.ts';
+export * from './types.ts';
+//# sourceMappingURL=index.d.ts.map

package/dist/core/oauth2/token/issuer/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../src/core/oauth2/token/issuer/index.ts"],"names":[],"mappings":"AAOA,cAAc,mBAAmB,CAAC;AAClC,cAAc,oBAAoB,CAAC;AACnC,cAAc,oBAAoB,CAAC;AAEnC,cAAc,YAAY,CAAC"}

package/dist/core/oauth2/token/issuer/index.js

@@ -0,0 +1,11 @@
+/*
+ * Copyright (c) 2025.
+ * Author Peter Placzek (tada5hi)
+ * For the full copyright and license information,
+ * view the LICENSE file that was distributed with this source code.
+ */
+export * from "./access/index.js";
+export * from "./open-id/index.js";
+export * from "./refresh/index.js";
+export * from "./types.js";
+//# sourceMappingURL=index.js.map

package/dist/core/oauth2/token/issuer/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../../src/core/oauth2/token/issuer/index.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,cAAc,mBAAmB,CAAC;AAClC,cAAc,oBAAoB,CAAC;AACnC,cAAc,oBAAoB,CAAC;AAEnC,cAAc,YAAY,CAAC"}

package/dist/core/oauth2/token/issuer/open-id/index.d.ts

@@ -0,0 +1,3 @@
+export * from './module.ts';
+export * from './types.ts';
+//# sourceMappingURL=index.d.ts.map

package/dist/core/oauth2/token/issuer/open-id/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../../src/core/oauth2/token/issuer/open-id/index.ts"],"names":[],"mappings":"AAOA,cAAc,aAAa,CAAC;AAC5B,cAAc,YAAY,CAAC"}

package/dist/core/oauth2/token/issuer/open-id/index.js

@@ -0,0 +1,9 @@
+/*
+ * Copyright (c) 2025.
+ * Author Peter Placzek (tada5hi)
+ * For the full copyright and license information,
+ * view the LICENSE file that was distributed with this source code.
+ */
+export * from "./module.js";
+export * from "./types.js";
+//# sourceMappingURL=index.js.map

package/dist/core/oauth2/token/issuer/open-id/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../../../src/core/oauth2/token/issuer/open-id/index.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,cAAc,aAAa,CAAC;AAC5B,cAAc,YAAY,CAAC"}

package/dist/core/oauth2/token/issuer/open-id/module.d.ts

@@ -0,0 +1,19 @@
+import type { OAuth2TokenPayload } from '@authup/specs';
+import type { Identity } from '@authup/core-kit';
+import { OAuth2OpenIDClaimsBuilder } from '../../../openid/index.ts';
+import type { IOAuth2TokenSigner } from '../../signer/index.ts';
+import type { IOAuth2TokenRepository } from '../../repository/index.ts';
+import { OAuth2BaseTokenIssuer } from '../base.ts';
+import type { OAuth2TokenIssuerResponse } from '../types.ts';
+import type { IOAuth2OpenIDTokenIssuer, OAuth2OpenIDTokenIssuerContext } from './types.ts';
+import type { IIdentityResolver } from '../../../../identity/index.ts';
+export declare class OAuth2OpenIDTokenIssuer extends OAuth2BaseTokenIssuer implements IOAuth2OpenIDTokenIssuer {
+    protected repository: IOAuth2TokenRepository;
+    protected signer: IOAuth2TokenSigner;
+    protected identityResolver: IIdentityResolver;
+    protected claimsBuilder: OAuth2OpenIDClaimsBuilder;
+    constructor(ctx: OAuth2OpenIDTokenIssuerContext);
+    issue(input?: OAuth2TokenPayload): Promise<OAuth2TokenIssuerResponse>;
+    issueWithIdentity(input: OAuth2TokenPayload, identity: Identity): Promise<OAuth2TokenIssuerResponse>;
+}
+//# sourceMappingURL=module.d.ts.map

package/dist/core/oauth2/token/issuer/open-id/module.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"module.d.ts","sourceRoot":"","sources":["../../../../../../src/core/oauth2/token/issuer/open-id/module.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,eAAe,CAAC;AAExD,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AACjD,OAAO,EAAE,yBAAyB,EAAE,MAAM,0BAA0B,CAAC;AACrE,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,uBAAuB,CAAC;AAChE,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,2BAA2B,CAAC;AACxE,OAAO,EAAE,qBAAqB,EAAE,MAAM,YAAY,CAAC;AACnD,OAAO,KAAK,EACR,yBAAyB,EAC5B,MAAM,aAAa,CAAC;AACrB,OAAO,KAAK,EAAE,wBAAwB,EAAE,8BAA8B,EAAE,MAAM,YAAY,CAAC;AAC3F,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,+BAA+B,CAAC;AAEvE,qBAAa,uBAAwB,SAAQ,qBAAsB,YAAW,wBAAwB;IAClG,SAAS,CAAC,UAAU,EAAE,sBAAsB,CAAC;IAE7C,SAAS,CAAC,MAAM,EAAG,kBAAkB,CAAC;IAEtC,SAAS,CAAC,gBAAgB,EAAG,iBAAiB,CAAC;IAE/C,SAAS,CAAC,aAAa,EAAE,yBAAyB,CAAC;gBAEvC,GAAG,EAAE,8BAA8B;IAUzC,KAAK,CAAC,KAAK,GAAE,kBAAuB,GAAI,OAAO,CAAC,yBAAyB,CAAC;IAqB1E,iBAAiB,CACnB,KAAK,EAAE,kBAAkB,EACzB,QAAQ,EAAE,QAAQ,GACnB,OAAO,CAAC,yBAAyB,CAAC;CAoBxC"}

package/dist/core/oauth2/token/issuer/open-id/module.js

@@ -0,0 +1,51 @@
+/*
+ * Copyright (c) 2025.
+ * Author Peter Placzek (tada5hi)
+ * For the full copyright and license information,
+ * view the LICENSE file that was distributed with this source code.
+ */
+import { JWTError, OAuth2TokenKind } from '@authup/specs';
+import { OAuth2OpenIDClaimsBuilder } from "../../../openid/index.js";
+import { OAuth2BaseTokenIssuer } from "../base.js";
+export class OAuth2OpenIDTokenIssuer extends OAuth2BaseTokenIssuer {
+    repository;
+    signer;
+    identityResolver;
+    claimsBuilder;
+    constructor(ctx) {
+        super(ctx.options);
+        this.repository = ctx.repository;
+        this.signer = ctx.signer;
+        this.identityResolver = ctx.identityResolver;
+        this.claimsBuilder = new OAuth2OpenIDClaimsBuilder();
+    }
+    async issue(input = {}) {
+        if (!input.sub_kind) {
+            throw JWTError.payloadPropertyInvalid('sub_kind');
+        }
+        if (!input.sub) {
+            throw JWTError.payloadPropertyInvalid('sub');
+        }
+        const identity = await this.identityResolver.resolve(input.sub_kind, input.sub);
+        if (!identity) {
+            throw JWTError.payloadInvalid();
+        }
+        return this.issueWithIdentity(input, identity);
+    }
+    async issueWithIdentity(input, identity) {
+        const claims = this.claimsBuilder.fromIdentity(identity);
+        const utc = Math.floor(new Date().getTime() / 1000);
+        const data = await this.repository.insert({
+            ...input,
+            ...claims,
+            kind: OAuth2TokenKind.ID_TOKEN,
+            auth_time: utc,
+            exp: this.buildExp(input),
+            updated_at: utc,
+        });
+        const token = await this.signer.sign(data);
+        await this.repository.saveWithSignature(data, token);
+        return [token, data];
+    }
+}
+//# sourceMappingURL=module.js.map

package/dist/core/oauth2/token/issuer/open-id/module.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"module.js","sourceRoot":"","sources":["../../../../../../src/core/oauth2/token/issuer/open-id/module.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAGH,OAAO,EAAE,QAAQ,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAE1D,OAAO,EAAE,yBAAyB,EAAE,MAAM,0BAA0B,CAAC;AAGrE,OAAO,EAAE,qBAAqB,EAAE,MAAM,YAAY,CAAC;AAOnD,MAAM,OAAO,uBAAwB,SAAQ,qBAAqB;IACpD,UAAU,CAAyB;IAEnC,MAAM,CAAsB;IAE5B,gBAAgB,CAAqB;IAErC,aAAa,CAA4B;IAEnD,YAAY,GAAmC;QAC3C,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QAEnB,IAAI,CAAC,UAAU,GAAG,GAAG,CAAC,UAAU,CAAC;QACjC,IAAI,CAAC,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC;QAEzB,IAAI,CAAC,gBAAgB,GAAG,GAAG,CAAC,gBAAgB,CAAC;QAC7C,IAAI,CAAC,aAAa,GAAG,IAAI,yBAAyB,EAAE,CAAC;IACzD,CAAC;IAED,KAAK,CAAC,KAAK,CAAC,QAA4B,EAAE;QACtC,IAAI,CAAC,KAAK,CAAC,QAAQ,EAAE,CAAC;YAClB,MAAM,QAAQ,CAAC,sBAAsB,CAAC,UAAU,CAAC,CAAC;QACtD,CAAC;QAED,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC;YACb,MAAM,QAAQ,CAAC,sBAAsB,CAAC,KAAK,CAAC,CAAC;QACjD,CAAC;QAED,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAAC,OAAO,CAChD,KAAK,CAAC,QAAQ,EACd,KAAK,CAAC,GAAG,CACZ,CAAC;QAEF,IAAI,CAAC,QAAQ,EAAE,CAAC;YACZ,MAAM,QAAQ,CAAC,cAAc,EAAE,CAAC;QACpC,CAAC;QAED,OAAO,IAAI,CAAC,iBAAiB,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;IACnD,CAAC;IAED,KAAK,CAAC,iBAAiB,CACnB,KAAyB,EACzB,QAAkB;QAElB,MAAM,MAAM,GAAG,IAAI,CAAC,aAAa,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC;QAEzD,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,IAAI,EAAE,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,CAAC;QAEpD,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC;YACtC,GAAG,KAAK;YACR,GAAG,MAAM;YACT,IAAI,EAAE,eAAe,CAAC,QAAQ;YAC9B,SAAS,EAAE,GAAG;YACd,GAAG,EAAE,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC;YACzB,UAAU,EAAE,GAAG;SAClB,CAAC,CAAC;QAEH,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAE3C,MAAM,IAAI,CAAC,UAAU,CAAC,iBAAiB,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;QAErD,OAAO,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;IACzB,CAAC;CACJ"}

package/dist/core/oauth2/token/issuer/open-id/types.d.ts

@@ -0,0 +1,16 @@
+import type { OAuth2TokenPayload } from '@authup/specs';
+import type { Identity } from '@authup/core-kit';
+import type { IOAuth2TokenRepository } from '../../repository/index.ts';
+import type { IOAuth2TokenSigner } from '../../signer/index.ts';
+import type { IOAuth2TokenIssuer, OAuth2TokenIssuerOptions, OAuth2TokenIssuerResponse } from '../types.ts';
+import type { IIdentityResolver } from '../../../../identity/index.ts';
+export type OAuth2OpenIDTokenIssuerContext = {
+    options?: OAuth2TokenIssuerOptions;
+    repository: IOAuth2TokenRepository;
+    signer: IOAuth2TokenSigner;
+    identityResolver: IIdentityResolver;
+};
+export interface IOAuth2OpenIDTokenIssuer extends IOAuth2TokenIssuer {
+    issueWithIdentity(input: OAuth2TokenPayload, identity: Identity, options?: OAuth2TokenIssuerOptions): Promise<OAuth2TokenIssuerResponse>;
+}
+//# sourceMappingURL=types.d.ts.map

package/dist/core/oauth2/token/issuer/open-id/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../../../../src/core/oauth2/token/issuer/open-id/types.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,eAAe,CAAC;AACxD,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AACjD,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,2BAA2B,CAAC;AACxE,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,uBAAuB,CAAC;AAChE,OAAO,KAAK,EAAE,kBAAkB,EAAE,wBAAwB,EAAE,yBAAyB,EAAE,MAAM,aAAa,CAAC;AAC3G,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,+BAA+B,CAAC;AAEvE,MAAM,MAAM,8BAA8B,GAAG;IACzC,OAAO,CAAC,EAAE,wBAAwB,CAAC;IAEnC,UAAU,EAAE,sBAAsB,CAAC;IACnC,MAAM,EAAE,kBAAkB,CAAC;IAE3B,gBAAgB,EAAE,iBAAiB,CAAA;CACtC,CAAC;AAEF,MAAM,WAAW,wBAAyB,SAAQ,kBAAkB;IAChE,iBAAiB,CACb,KAAK,EAAE,kBAAkB,EACzB,QAAQ,EAAE,QAAQ,EAClB,OAAO,CAAC,EAAE,wBAAwB,GAClC,OAAO,CAAC,yBAAyB,CAAC,CAAC;CAC1C"}

package/dist/core/oauth2/token/issuer/open-id/types.js

@@ -0,0 +1,8 @@
+/*
+ * Copyright (c) 2025.
+ *  Author Peter Placzek (tada5hi)
+ *  For the full copyright and license information,
+ *  view the LICENSE file that was distributed with this source code.
+ */
+export {};
+//# sourceMappingURL=types.js.map

package/dist/core/oauth2/token/issuer/open-id/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../../../../../src/core/oauth2/token/issuer/open-id/types.ts"],"names":[],"mappings":"AAAA;;;;;GAKG"}

package/dist/core/oauth2/token/issuer/refresh/index.d.ts

@@ -0,0 +1,2 @@
+export * from './module.ts';
+//# sourceMappingURL=index.d.ts.map

package/dist/core/oauth2/token/issuer/refresh/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../../src/core/oauth2/token/issuer/refresh/index.ts"],"names":[],"mappings":"AAOA,cAAc,aAAa,CAAC"}

package/dist/core/oauth2/token/issuer/refresh/index.js

@@ -0,0 +1,8 @@
+/*
+ * Copyright (c) 2025.
+ * Author Peter Placzek (tada5hi)
+ * For the full copyright and license information,
+ * view the LICENSE file that was distributed with this source code.
+ */
+export * from "./module.js";
+//# sourceMappingURL=index.js.map

package/dist/core/oauth2/token/issuer/refresh/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../../../src/core/oauth2/token/issuer/refresh/index.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,cAAc,aAAa,CAAC"}

package/dist/core/oauth2/token/issuer/refresh/module.d.ts

@@ -0,0 +1,12 @@
+import type { OAuth2TokenPayload } from '@authup/specs';
+import type { IOAuth2TokenSigner } from '../../signer/index.ts';
+import type { IOAuth2TokenRepository } from '../../repository/index.ts';
+import { OAuth2BaseTokenIssuer } from '../base.ts';
+import type { IOAuth2TokenIssuer, OAuth2TokenIssuerOptions, OAuth2TokenIssuerResponse } from '../types.ts';
+export declare class OAuth2RefreshTokenIssuer extends OAuth2BaseTokenIssuer implements IOAuth2TokenIssuer {
+    protected repository: IOAuth2TokenRepository;
+    protected signer: IOAuth2TokenSigner;
+    constructor(repository: IOAuth2TokenRepository, signer: IOAuth2TokenSigner, options?: OAuth2TokenIssuerOptions);
+    issue(input?: OAuth2TokenPayload): Promise<OAuth2TokenIssuerResponse>;
+}
+//# sourceMappingURL=module.d.ts.map

package/dist/core/oauth2/token/issuer/refresh/module.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"module.d.ts","sourceRoot":"","sources":["../../../../../../src/core/oauth2/token/issuer/refresh/module.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,eAAe,CAAC;AAExD,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,uBAAuB,CAAC;AAChE,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,2BAA2B,CAAC;AACxE,OAAO,EAAE,qBAAqB,EAAE,MAAM,YAAY,CAAC;AACnD,OAAO,KAAK,EAAE,kBAAkB,EAAE,wBAAwB,EAAE,yBAAyB,EAAE,MAAM,aAAa,CAAC;AAE3G,qBAAa,wBAAyB,SAAQ,qBAAsB,YAAW,kBAAkB;IAC7F,SAAS,CAAC,UAAU,EAAE,sBAAsB,CAAC;IAE7C,SAAS,CAAC,MAAM,EAAG,kBAAkB,CAAC;gBAGlC,UAAU,EAAE,sBAAsB,EAClC,MAAM,EAAE,kBAAkB,EAC1B,OAAO,GAAE,wBAA6B;IAQpC,KAAK,CAAC,KAAK,GAAE,kBAAuB,GAAI,OAAO,CAAC,yBAAyB,CAAC;CAanF"}

package/dist/core/oauth2/token/issuer/refresh/module.js

@@ -0,0 +1,28 @@
+/*
+ * Copyright (c) 2025.
+ * Author Peter Placzek (tada5hi)
+ * For the full copyright and license information,
+ * view the LICENSE file that was distributed with this source code.
+ */
+import { OAuth2TokenKind } from '@authup/specs';
+import { OAuth2BaseTokenIssuer } from "../base.js";
+export class OAuth2RefreshTokenIssuer extends OAuth2BaseTokenIssuer {
+    repository;
+    signer;
+    constructor(repository, signer, options = {}) {
+        super(options);
+        this.repository = repository;
+        this.signer = signer;
+    }
+    async issue(input = {}) {
+        const data = await this.repository.insert({
+            ...input,
+            kind: OAuth2TokenKind.REFRESH,
+            exp: this.buildExp(input),
+        });
+        const token = await this.signer.sign(data);
+        await this.repository.saveWithSignature(data, token);
+        return [token, data];
+    }
+}
+//# sourceMappingURL=module.js.map

package/dist/core/oauth2/token/issuer/refresh/module.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"module.js","sourceRoot":"","sources":["../../../../../../src/core/oauth2/token/issuer/refresh/module.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAGH,OAAO,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAGhD,OAAO,EAAE,qBAAqB,EAAE,MAAM,YAAY,CAAC;AAGnD,MAAM,OAAO,wBAAyB,SAAQ,qBAAqB;IACrD,UAAU,CAAyB;IAEnC,MAAM,CAAsB;IAEtC,YACI,UAAkC,EAClC,MAA0B,EAC1B,UAAoC,EAAE;QAEtC,KAAK,CAAC,OAAO,CAAC,CAAC;QAEf,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC;QAC7B,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;IACzB,CAAC;IAED,KAAK,CAAC,KAAK,CAAC,QAA4B,EAAE;QACtC,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC;YACtC,GAAG,KAAK;YACR,IAAI,EAAE,eAAe,CAAC,OAAO;YAC7B,GAAG,EAAE,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC;SAC5B,CAAC,CAAC;QAEH,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAE3C,MAAM,IAAI,CAAC,UAAU,CAAC,iBAAiB,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;QAErD,OAAO,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;IACzB,CAAC;CACJ"}

package/dist/core/oauth2/token/issuer/types.d.ts

@@ -0,0 +1,27 @@
+import type { OAuth2TokenPayload } from '@authup/specs';
+export type OAuth2TokenIssuerResponse = [string, OAuth2TokenPayload];
+export type OAuth2TokenIssuerOptions = {
+    /**
+     * Max duration in seconds
+     */
+    maxAge?: number;
+    /**
+     * Token issuer name.
+     */
+    issuer?: string;
+};
+export interface IOAuth2TokenIssuer {
+    /**
+     * Issue new token.
+     *
+     * @param input
+     */
+    issue(input: OAuth2TokenPayload): Promise<OAuth2TokenIssuerResponse>;
+    /**
+     * Build expiration time in seconds (utc).
+     *
+     * @param input
+     */
+    buildExp(input?: OAuth2TokenPayload): number;
+}
+//# sourceMappingURL=types.d.ts.map

package/dist/core/oauth2/token/issuer/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../../../src/core/oauth2/token/issuer/types.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,eAAe,CAAC;AAExD,MAAM,MAAM,yBAAyB,GAAG,CAAC,MAAM,EAAE,kBAAkB,CAAC,CAAC;AACrE,MAAM,MAAM,wBAAwB,GAAG;IACnC;;OAEG;IACH,MAAM,CAAC,EAAE,MAAM,CAAC;IAEhB;;OAEG;IACH,MAAM,CAAC,EAAE,MAAM,CAAA;CAClB,CAAC;AAEF,MAAM,WAAW,kBAAkB;IAC/B;;;;OAIG;IACH,KAAK,CAAC,KAAK,EAAE,kBAAkB,GAAI,OAAO,CAAC,yBAAyB,CAAC,CAAC;IAEtE;;;;OAIG;IACH,QAAQ,CAAC,KAAK,CAAC,EAAE,kBAAkB,GAAI,MAAM,CAAC;CACjD"}

package/dist/core/oauth2/token/issuer/types.js

@@ -0,0 +1,8 @@
+/*
+ * Copyright (c) 2025.
+ * Author Peter Placzek (tada5hi)
+ * For the full copyright and license information,
+ * view the LICENSE file that was distributed with this source code.
+ */
+export {};
+//# sourceMappingURL=types.js.map

package/dist/core/oauth2/token/issuer/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../../../../src/core/oauth2/token/issuer/types.ts"],"names":[],"mappings":"AAAA;;;;;GAKG"}

package/dist/core/oauth2/token/repository/index.d.ts

@@ -0,0 +1,2 @@
+export * from './types.ts';
+//# sourceMappingURL=index.d.ts.map

package/dist/core/oauth2/token/repository/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../src/core/oauth2/token/repository/index.ts"],"names":[],"mappings":"AAOA,cAAc,YAAY,CAAC"}

package/dist/core/oauth2/token/repository/index.js

@@ -0,0 +1,8 @@
+/*
+ * Copyright (c) 2025.
+ * Author Peter Placzek (tada5hi)
+ * For the full copyright and license information,
+ * view the LICENSE file that was distributed with this source code.
+ */
+export * from "./types.js";
+//# sourceMappingURL=index.js.map

package/dist/core/oauth2/token/repository/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../../src/core/oauth2/token/repository/index.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,cAAc,YAAY,CAAC"}

package/dist/core/oauth2/token/repository/types.d.ts

@@ -0,0 +1,53 @@
+import type { OAuth2TokenPayload } from '@authup/specs';
+export interface IOAuth2TokenRepository {
+    /**
+     * Set a token inactive.
+     *
+     * @param id JTI
+     * @param exp Expiration date in unix timestamp
+     */
+    setInactive(id: string, exp?: number): Promise<void>;
+    /**
+     * Check if a token by its jti is active.
+     *
+     * @param id JTI
+     */
+    isInactive(id: string): Promise<boolean>;
+    /**
+     * Find refresh token by jti.
+     *
+     * @param id JTI
+     */
+    findOneById(id: string): Promise<OAuth2TokenPayload | null>;
+    /**
+     * Find token by signature (JWS).
+     * @param token JWS
+     */
+    findOneBySignature(token: string): Promise<OAuth2TokenPayload | null>;
+    /**
+     * Remove refresh token by jti.
+     *
+     * @param id JTI
+     */
+    removeById(id: string): Promise<void>;
+    /**
+     * Insert token.
+     *
+     * @param payload
+     */
+    insert(payload: OAuth2TokenPayload): Promise<OAuth2TokenPayload>;
+    /**
+     * Create or update token.
+     *
+     * @param payload
+     */
+    save(payload: OAuth2TokenPayload): Promise<OAuth2TokenPayload>;
+    /**
+     * Save token payload with signature (JWS).
+     *
+     * @param payload
+     * @param signature
+     */
+    saveWithSignature(payload: OAuth2TokenPayload, signature: string): Promise<OAuth2TokenPayload>;
+}
+//# sourceMappingURL=types.d.ts.map

package/dist/core/oauth2/token/repository/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../../../src/core/oauth2/token/repository/types.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,eAAe,CAAC;AAExD,MAAM,WAAW,sBAAsB;IACnC;;;;;OAKG;IACH,WAAW,CAAC,EAAE,EAAE,MAAM,EAAE,GAAG,CAAC,EAAE,MAAM,GAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IAEtD;;;;OAIG;IACH,UAAU,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IAIzC;;;;OAIG;IACH,WAAW,CAAC,EAAE,EAAE,MAAM,GAAI,OAAO,CAAC,kBAAkB,GAAG,IAAI,CAAC,CAAC;IAE7D;;;OAGG;IACH,kBAAkB,CAAC,KAAK,EAAE,MAAM,GAAI,OAAO,CAAC,kBAAkB,GAAG,IAAI,CAAC,CAAC;IAIvE;;;;OAIG;IACH,UAAU,CAAC,EAAE,EAAE,MAAM,GAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IAIvC;;;;OAIG;IACH,MAAM,CAAC,OAAO,EAAE,kBAAkB,GAAI,OAAO,CAAC,kBAAkB,CAAC,CAAC;IAElE;;;;OAIG;IACH,IAAI,CAAC,OAAO,EAAE,kBAAkB,GAAI,OAAO,CAAC,kBAAkB,CAAC,CAAC;IAEhE;;;;;OAKG;IACH,iBAAiB,CAAC,OAAO,EAAE,kBAAkB,EAAE,SAAS,EAAE,MAAM,GAAI,OAAO,CAAC,kBAAkB,CAAC,CAAC;CACnG"}

package/dist/core/oauth2/token/repository/types.js

@@ -0,0 +1,8 @@
+/*
+ * Copyright (c) 2025-2025.
+ * Author Peter Placzek (tada5hi)
+ * For the full copyright and license information,
+ * view the LICENSE file that was distributed with this source code.
+ */
+export {};
+//# sourceMappingURL=types.js.map

package/dist/core/oauth2/token/repository/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../../../../src/core/oauth2/token/repository/types.ts"],"names":[],"mappings":"AAAA;;;;;GAKG"}

package/dist/core/oauth2/token/revoker/index.d.ts

@@ -0,0 +1,3 @@
+export * from './module.ts';
+export * from './types.ts';
+//# sourceMappingURL=index.d.ts.map

package/dist/core/oauth2/token/revoker/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../src/core/oauth2/token/revoker/index.ts"],"names":[],"mappings":"AAOA,cAAc,aAAa,CAAC;AAC5B,cAAc,YAAY,CAAC"}

package/dist/core/oauth2/token/revoker/index.js

@@ -0,0 +1,9 @@
+/*
+ * Copyright (c) 2025.
+ * Author Peter Placzek (tada5hi)
+ * For the full copyright and license information,
+ * view the LICENSE file that was distributed with this source code.
+ */
+export * from "./module.js";
+export * from "./types.js";
+//# sourceMappingURL=index.js.map

package/dist/core/oauth2/token/revoker/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../../src/core/oauth2/token/revoker/index.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,cAAc,aAAa,CAAC;AAC5B,cAAc,YAAY,CAAC"}

package/dist/core/oauth2/token/revoker/module.d.ts

@@ -0,0 +1,9 @@
+import type { OAuth2TokenPayload } from '@authup/specs';
+import type { IOAuth2TokenRepository } from '../repository/index.ts';
+import type { IOAuth2TokenRevoker } from './types.ts';
+export declare class OAuth2TokenRevoker implements IOAuth2TokenRevoker {
+    protected repository: IOAuth2TokenRepository;
+    constructor(repository: IOAuth2TokenRepository);
+    revoke(input: OAuth2TokenPayload): Promise<void>;
+}
+//# sourceMappingURL=module.d.ts.map

package/dist/core/oauth2/token/revoker/module.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"module.d.ts","sourceRoot":"","sources":["../../../../../src/core/oauth2/token/revoker/module.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,eAAe,CAAC;AAExD,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,wBAAwB,CAAC;AACrE,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,YAAY,CAAC;AAEtD,qBAAa,kBAAmB,YAAW,mBAAmB;IAC1D,SAAS,CAAC,UAAU,EAAG,sBAAsB,CAAC;gBAElC,UAAU,EAAG,sBAAsB;IAIzC,MAAM,CAAC,KAAK,EAAE,kBAAkB,GAAI,OAAO,CAAC,IAAI,CAAC;CAO1D"}