@authup/server-core 1.0.0-beta.3 → 1.0.0-beta.32

package/dist/core/entities/robot-role/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../../../src/core/entities/robot-role/types.ts"],"names":[],"mappings":"AAAA;;;;;GAKG"}

package/dist/core/entities/role/index.d.ts

@@ -0,0 +1,3 @@
+export * from './service.ts';
+export * from './types.ts';
+//# sourceMappingURL=index.d.ts.map

package/dist/core/entities/role/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/core/entities/role/index.ts"],"names":[],"mappings":"AAOA,cAAc,cAAc,CAAC;AAC7B,cAAc,YAAY,CAAC"}

package/dist/core/entities/role/index.js

@@ -0,0 +1,9 @@
+/*
+ * Copyright (c) 2025.
+ * Author Peter Placzek (tada5hi)
+ * For the full copyright and license information,
+ * view the LICENSE file that was distributed with this source code.
+ */
+export * from "./service.js";
+export * from "./types.js";
+//# sourceMappingURL=index.js.map

package/dist/core/entities/role/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../src/core/entities/role/index.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,cAAc,cAAc,CAAC;AAC7B,cAAc,YAAY,CAAC"}

package/dist/core/entities/role/service.d.ts

@@ -0,0 +1,29 @@
+import { RoleValidator } from '@authup/core-kit';
+import type { Role } from '@authup/core-kit';
+import type { ActorContext } from '../actor/types.ts';
+import type { IRealmRepository } from '../realm/types.ts';
+import { AbstractEntityService } from '../service.ts';
+import type { EntityRepositoryFindManyResult } from '../types.ts';
+import type { IRoleRepository, IRoleService } from './types.ts';
+export type RoleServiceContext = {
+    repository: IRoleRepository;
+    realmRepository: IRealmRepository;
+};
+export declare class RoleService extends AbstractEntityService implements IRoleService {
+    protected repository: IRoleRepository;
+    protected realmRepository: IRealmRepository;
+    protected validator: RoleValidator;
+    constructor(ctx: RoleServiceContext);
+    getMany(query: Record<string, any>, actor: ActorContext): Promise<EntityRepositoryFindManyResult<Role>>;
+    getOne(idOrName: string, actor: ActorContext): Promise<Role>;
+    create(data: Record<string, any>, actor: ActorContext): Promise<Role>;
+    update(idOrName: string, data: Record<string, any>, actor: ActorContext): Promise<Role>;
+    save(idOrName: string | undefined, data: Record<string, any>, actor: ActorContext, options?: {
+        updateOnly?: boolean;
+    }): Promise<{
+        entity: Role;
+        created: boolean;
+    }>;
+    delete(id: string, actor: ActorContext): Promise<Role>;
+}
+//# sourceMappingURL=service.d.ts.map

package/dist/core/entities/role/service.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"service.d.ts","sourceRoot":"","sources":["../../../../src/core/entities/role/service.ts"],"names":[],"mappings":"AAUA,OAAO,EAGH,aAAa,EAEhB,MAAM,kBAAkB,CAAC;AAC1B,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAC;AAC7C,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AACtD,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AAC1D,OAAO,EAAE,qBAAqB,EAAE,MAAM,eAAe,CAAC;AACtD,OAAO,KAAK,EAAE,8BAA8B,EAAE,MAAM,aAAa,CAAC;AAClE,OAAO,KAAK,EAAE,eAAe,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAEhE,MAAM,MAAM,kBAAkB,GAAG;IAC7B,UAAU,EAAE,eAAe,CAAC;IAC5B,eAAe,EAAE,gBAAgB,CAAC;CACrC,CAAC;AAEF,qBAAa,WAAY,SAAQ,qBAAsB,YAAW,YAAY;IAC1E,SAAS,CAAC,UAAU,EAAE,eAAe,CAAC;IAEtC,SAAS,CAAC,eAAe,EAAE,gBAAgB,CAAC;IAE5C,SAAS,CAAC,SAAS,EAAE,aAAa,CAAC;gBAEvB,GAAG,EAAE,kBAAkB;IAO7B,OAAO,CACT,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,EAC1B,KAAK,EAAE,YAAY,GACpB,OAAO,CAAC,8BAA8B,CAAC,IAAI,CAAC,CAAC;IAY1C,MAAM,CACR,QAAQ,EAAE,MAAM,EAChB,KAAK,EAAE,YAAY,GACpB,OAAO,CAAC,IAAI,CAAC;IAiBV,MAAM,CACR,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,EACzB,KAAK,EAAE,YAAY,GACpB,OAAO,CAAC,IAAI,CAAC;IAKV,MAAM,CACR,QAAQ,EAAE,MAAM,EAChB,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,EACzB,KAAK,EAAE,YAAY,GACpB,OAAO,CAAC,IAAI,CAAC;IAKV,IAAI,CACN,QAAQ,EAAE,MAAM,GAAG,SAAS,EAC5B,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,EACzB,KAAK,EAAE,YAAY,EACnB,OAAO,GAAE;QAAE,UAAU,CAAC,EAAE,OAAO,CAAA;KAAO,GACvC,OAAO,CAAC;QAAE,MAAM,EAAE,IAAI,CAAC;QAAC,OAAO,EAAE,OAAO,CAAA;KAAE,CAAC;IA6ExC,MAAM,CACR,EAAE,EAAE,MAAM,EACV,KAAK,EAAE,YAAY,GACpB,OAAO,CAAC,IAAI,CAAC;CAyBnB"}

package/dist/core/entities/role/service.js

@@ -0,0 +1,139 @@
+/*
+ * Copyright (c) 2025.
+ * Author Peter Placzek (tada5hi)
+ * For the full copyright and license information,
+ * view the LICENSE file that was distributed with this source code.
+ */
+import { BuiltInPolicyType, PolicyData } from '@authup/access';
+import { isPropertySet, isUUID } from '@authup/kit';
+import { BadRequestError, NotFoundError } from '@ebec/http';
+import { PermissionName, ROLE_ADMIN_NAME, RoleValidator, ValidatorGroup, } from '@authup/core-kit';
+import { AbstractEntityService } from "../service.js";
+export class RoleService extends AbstractEntityService {
+    repository;
+    realmRepository;
+    validator;
+    constructor(ctx) {
+        super();
+        this.repository = ctx.repository;
+        this.realmRepository = ctx.realmRepository;
+        this.validator = new RoleValidator();
+    }
+    async getMany(query, actor) {
+        await actor.permissionEvaluator.preEvaluateOneOf({
+            name: [
+                PermissionName.ROLE_READ,
+                PermissionName.ROLE_UPDATE,
+                PermissionName.ROLE_DELETE,
+            ],
+        });
+        return this.repository.findMany(query);
+    }
+    async getOne(idOrName, actor) {
+        await actor.permissionEvaluator.preEvaluateOneOf({
+            name: [
+                PermissionName.ROLE_READ,
+                PermissionName.ROLE_UPDATE,
+                PermissionName.ROLE_DELETE,
+            ],
+        });
+        const entity = await this.repository.findOneByIdOrName(idOrName);
+        if (!entity) {
+            throw new NotFoundError();
+        }
+        return entity;
+    }
+    async create(data, actor) {
+        const { entity } = await this.save(undefined, data, actor);
+        return entity;
+    }
+    async update(idOrName, data, actor) {
+        const { entity } = await this.save(idOrName, data, actor, { updateOnly: true });
+        return entity;
+    }
+    async save(idOrName, data, actor, options = {}) {
+        let group;
+        const realm = typeof data.realm_id === 'string' ?
+            await this.realmRepository.resolve(data.realm_id) :
+            undefined;
+        let entity;
+        if (idOrName) {
+            const where = {};
+            if (isUUID(idOrName)) {
+                where.id = idOrName;
+            }
+            else {
+                where.name = idOrName;
+            }
+            if (realm) {
+                where.realm_id = realm.id;
+            }
+            entity = await this.repository.findOneBy(where);
+            if (!entity && options.updateOnly) {
+                throw new NotFoundError();
+            }
+        }
+        else if (options.updateOnly) {
+            throw new NotFoundError();
+        }
+        if (entity) {
+            await actor.permissionEvaluator.preEvaluate({ name: PermissionName.ROLE_UPDATE });
+            group = ValidatorGroup.UPDATE;
+        }
+        else {
+            await actor.permissionEvaluator.preEvaluate({ name: PermissionName.ROLE_CREATE });
+            group = ValidatorGroup.CREATE;
+        }
+        const validated = await this.validator.run(data, { group });
+        await this.repository.validateJoinColumns(validated);
+        if (entity) {
+            await actor.permissionEvaluator.evaluate({
+                name: PermissionName.ROLE_UPDATE,
+                input: new PolicyData({
+                    [BuiltInPolicyType.ATTRIBUTES]: {
+                        ...entity,
+                        ...validated,
+                    },
+                }),
+            });
+            entity = this.repository.merge(entity, validated);
+            await this.repository.checkUniqueness(validated, entity);
+            await this.repository.save(entity);
+            return { entity, created: false };
+        }
+        if (!isPropertySet(validated, 'realm_id') && actor.identity) {
+            validated.realm_id = this.getActorRealmId(actor) || null;
+        }
+        await actor.permissionEvaluator.evaluate({
+            name: PermissionName.ROLE_CREATE,
+            input: new PolicyData({
+                [BuiltInPolicyType.ATTRIBUTES]: validated,
+            }),
+        });
+        await this.repository.checkUniqueness(validated);
+        entity = this.repository.create(validated);
+        await this.repository.save(entity);
+        return { entity, created: true };
+    }
+    async delete(id, actor) {
+        await actor.permissionEvaluator.preEvaluate({ name: PermissionName.ROLE_DELETE });
+        const entity = await this.repository.findOneBy({ id });
+        if (!entity) {
+            throw new NotFoundError();
+        }
+        if (entity.name === ROLE_ADMIN_NAME) {
+            throw new BadRequestError('The default admin role can not be deleted.');
+        }
+        await actor.permissionEvaluator.evaluate({
+            name: PermissionName.ROLE_DELETE,
+            input: new PolicyData({
+                [BuiltInPolicyType.ATTRIBUTES]: entity,
+            }),
+        });
+        const { id: entityId } = entity;
+        await this.repository.remove(entity);
+        entity.id = entityId;
+        return entity;
+    }
+}
+//# sourceMappingURL=service.js.map

package/dist/core/entities/role/service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"service.js","sourceRoot":"","sources":["../../../../src/core/entities/role/service.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,iBAAiB,EAAE,UAAU,EAAE,MAAM,gBAAgB,CAAC;AAC/D,OAAO,EAAE,aAAa,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AACpD,OAAO,EAAE,eAAe,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAC5D,OAAO,EACH,cAAc,EACd,eAAe,EACf,aAAa,EACb,cAAc,GACjB,MAAM,kBAAkB,CAAC;AAI1B,OAAO,EAAE,qBAAqB,EAAE,MAAM,eAAe,CAAC;AAStD,MAAM,OAAO,WAAY,SAAQ,qBAAqB;IACxC,UAAU,CAAkB;IAE5B,eAAe,CAAmB;IAElC,SAAS,CAAgB;IAEnC,YAAY,GAAuB;QAC/B,KAAK,EAAE,CAAC;QACR,IAAI,CAAC,UAAU,GAAG,GAAG,CAAC,UAAU,CAAC;QACjC,IAAI,CAAC,eAAe,GAAG,GAAG,CAAC,eAAe,CAAC;QAC3C,IAAI,CAAC,SAAS,GAAG,IAAI,aAAa,EAAE,CAAC;IACzC,CAAC;IAED,KAAK,CAAC,OAAO,CACT,KAA0B,EAC1B,KAAmB;QAEnB,MAAM,KAAK,CAAC,mBAAmB,CAAC,gBAAgB,CAAC;YAC7C,IAAI,EAAE;gBACF,cAAc,CAAC,SAAS;gBACxB,cAAc,CAAC,WAAW;gBAC1B,cAAc,CAAC,WAAW;aAC7B;SACJ,CAAC,CAAC;QAEH,OAAO,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;IAC3C,CAAC;IAED,KAAK,CAAC,MAAM,CACR,QAAgB,EAChB,KAAmB;QAEnB,MAAM,KAAK,CAAC,mBAAmB,CAAC,gBAAgB,CAAC;YAC7C,IAAI,EAAE;gBACF,cAAc,CAAC,SAAS;gBACxB,cAAc,CAAC,WAAW;gBAC1B,cAAc,CAAC,WAAW;aAC7B;SACJ,CAAC,CAAC;QAEH,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,iBAAiB,CAAC,QAAQ,CAAC,CAAC;QACjE,IAAI,CAAC,MAAM,EAAE,CAAC;YACV,MAAM,IAAI,aAAa,EAAE,CAAC;QAC9B,CAAC;QAED,OAAO,MAAM,CAAC;IAClB,CAAC;IAED,KAAK,CAAC,MAAM,CACR,IAAyB,EACzB,KAAmB;QAEnB,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC;QAC3D,OAAO,MAAM,CAAC;IAClB,CAAC;IAED,KAAK,CAAC,MAAM,CACR,QAAgB,EAChB,IAAyB,EACzB,KAAmB;QAEnB,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC,CAAC;QAChF,OAAO,MAAM,CAAC;IAClB,CAAC;IAED,KAAK,CAAC,IAAI,CACN,QAA4B,EAC5B,IAAyB,EACzB,KAAmB,EACnB,UAAoC,EAAE;QAEtC,IAAI,KAAa,CAAC;QAElB,MAAM,KAAK,GAAG,OAAO,IAAI,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC;YAC7C,MAAM,IAAI,CAAC,eAAe,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC;YACnD,SAAS,CAAC;QAEd,IAAI,MAA+B,CAAC;QACpC,IAAI,QAAQ,EAAE,CAAC;YACX,MAAM,KAAK,GAAwB,EAAE,CAAC;YACtC,IAAI,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC;gBACnB,KAAK,CAAC,EAAE,GAAG,QAAQ,CAAC;YACxB,CAAC;iBAAM,CAAC;gBACJ,KAAK,CAAC,IAAI,GAAG,QAAQ,CAAC;YAC1B,CAAC;YAED,IAAI,KAAK,EAAE,CAAC;gBACR,KAAK,CAAC,QAAQ,GAAG,KAAK,CAAC,EAAE,CAAC;YAC9B,CAAC;YAED,MAAM,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;YAChD,IAAI,CAAC,MAAM,IAAI,OAAO,CAAC,UAAU,EAAE,CAAC;gBAChC,MAAM,IAAI,aAAa,EAAE,CAAC;YAC9B,CAAC;QACL,CAAC;aAAM,IAAI,OAAO,CAAC,UAAU,EAAE,CAAC;YAC5B,MAAM,IAAI,aAAa,EAAE,CAAC;QAC9B,CAAC;QAED,IAAI,MAAM,EAAE,CAAC;YACT,MAAM,KAAK,CAAC,mBAAmB,CAAC,WAAW,CAAC,EAAE,IAAI,EAAE,cAAc,CAAC,WAAW,EAAE,CAAC,CAAC;YAClF,KAAK,GAAG,cAAc,CAAC,MAAM,CAAC;QAClC,CAAC;aAAM,CAAC;YACJ,MAAM,KAAK,CAAC,mBAAmB,CAAC,WAAW,CAAC,EAAE,IAAI,EAAE,cAAc,CAAC,WAAW,EAAE,CAAC,CAAC;YAClF,KAAK,GAAG,cAAc,CAAC,MAAM,CAAC;QAClC,CAAC;QAED,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;QAE5D,MAAM,IAAI,CAAC,UAAU,CAAC,mBAAmB,CAAC,SAAS,CAAC,CAAC;QAErD,IAAI,MAAM,EAAE,CAAC;YACT,MAAM,KAAK,CAAC,mBAAmB,CAAC,QAAQ,CAAC;gBACrC,IAAI,EAAE,cAAc,CAAC,WAAW;gBAChC,KAAK,EAAE,IAAI,UAAU,CAAC;oBAClB,CAAC,iBAAiB,CAAC,UAAU,CAAC,EAAE;wBAC5B,GAAG,MAAM;wBACT,GAAG,SAAS;qBACf;iBACJ,CAAC;aACL,CAAC,CAAC;YAEH,MAAM,GAAG,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;YAClD,MAAM,IAAI,CAAC,UAAU,CAAC,eAAe,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;YACzD,MAAM,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YAEnC,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;QACtC,CAAC;QAED,IAAI,CAAC,aAAa,CAAC,SAAS,EAAE,UAAU,CAAC,IAAI,KAAK,CAAC,QAAQ,EAAE,CAAC;YAC1D,SAAS,CAAC,QAAQ,GAAG,IAAI,CAAC,eAAe,CAAC,KAAK,CAAC,IAAI,IAAI,CAAC;QAC7D,CAAC;QAED,MAAM,KAAK,CAAC,mBAAmB,CAAC,QAAQ,CAAC;YACrC,IAAI,EAAE,cAAc,CAAC,WAAW;YAChC,KAAK,EAAE,IAAI,UAAU,CAAC;gBAClB,CAAC,iBAAiB,CAAC,UAAU,CAAC,EAAE,SAAS;aAC5C,CAAC;SACL,CAAC,CAAC;QAEH,MAAM,IAAI,CAAC,UAAU,CAAC,eAAe,CAAC,SAAS,CAAC,CAAC;QAEjD,MAAM,GAAG,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QAC3C,MAAM,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAEnC,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IACrC,CAAC;IAED,KAAK,CAAC,MAAM,CACR,EAAU,EACV,KAAmB;QAEnB,MAAM,KAAK,CAAC,mBAAmB,CAAC,WAAW,CAAC,EAAE,IAAI,EAAE,cAAc,CAAC,WAAW,EAAE,CAAC,CAAC;QAElF,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;QACvD,IAAI,CAAC,MAAM,EAAE,CAAC;YACV,MAAM,IAAI,aAAa,EAAE,CAAC;QAC9B,CAAC;QAED,IAAI,MAAM,CAAC,IAAI,KAAK,eAAe,EAAE,CAAC;YAClC,MAAM,IAAI,eAAe,CAAC,4CAA4C,CAAC,CAAC;QAC5E,CAAC;QAED,MAAM,KAAK,CAAC,mBAAmB,CAAC,QAAQ,CAAC;YACrC,IAAI,EAAE,cAAc,CAAC,WAAW;YAChC,KAAK,EAAE,IAAI,UAAU,CAAC;gBAClB,CAAC,iBAAiB,CAAC,UAAU,CAAC,EAAE,MAAM;aACzC,CAAC;SACL,CAAC,CAAC;QAEH,MAAM,EAAE,EAAE,EAAE,QAAQ,EAAE,GAAG,MAAM,CAAC;QAChC,MAAM,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QACrC,MAAM,CAAC,EAAE,GAAG,QAAQ,CAAC;QAErB,OAAO,MAAM,CAAC;IAClB,CAAC;CACJ"}

package/dist/core/entities/role/types.d.ts

@@ -0,0 +1,20 @@
+import type { Role } from '@authup/core-kit';
+import type { ActorContext } from '../actor/types.ts';
+import type { EntityRepositoryFindManyResult, IEntityRepository } from '../types.ts';
+export interface IRoleRepository extends IEntityRepository<Role> {
+    checkUniqueness(data: Partial<Role>, existing?: Role): Promise<void>;
+}
+export interface IRoleService {
+    getMany(query: Record<string, any>, actor: ActorContext): Promise<EntityRepositoryFindManyResult<Role>>;
+    getOne(idOrName: string, actor: ActorContext): Promise<Role>;
+    create(data: Record<string, any>, actor: ActorContext): Promise<Role>;
+    update(idOrName: string, data: Record<string, any>, actor: ActorContext): Promise<Role>;
+    save(idOrName: string | undefined, data: Record<string, any>, actor: ActorContext, options?: {
+        updateOnly?: boolean;
+    }): Promise<{
+        entity: Role;
+        created: boolean;
+    }>;
+    delete(id: string, actor: ActorContext): Promise<Role>;
+}
+//# sourceMappingURL=types.d.ts.map

package/dist/core/entities/role/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../../src/core/entities/role/types.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAC;AAC7C,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AACtD,OAAO,KAAK,EAAE,8BAA8B,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AAErF,MAAM,WAAW,eAAgB,SAAQ,iBAAiB,CAAC,IAAI,CAAC;IAC5D,eAAe,CAAC,IAAI,EAAE,OAAO,CAAC,IAAI,CAAC,EAAE,QAAQ,CAAC,EAAE,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CACxE;AAED,MAAM,WAAW,YAAY;IACzB,OAAO,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,EAAE,KAAK,EAAE,YAAY,GAAG,OAAO,CAAC,8BAA8B,CAAC,IAAI,CAAC,CAAC,CAAC;IACxG,MAAM,CAAC,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,YAAY,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC7D,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,EAAE,KAAK,EAAE,YAAY,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACtE,MAAM,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,EAAE,KAAK,EAAE,YAAY,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACxF,IAAI,CACA,QAAQ,EAAE,MAAM,GAAG,SAAS,EAC5B,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,EACzB,KAAK,EAAE,YAAY,EACnB,OAAO,CAAC,EAAE;QAAE,UAAU,CAAC,EAAE,OAAO,CAAA;KAAE,GACnC,OAAO,CAAC;QAAE,MAAM,EAAE,IAAI,CAAC;QAAC,OAAO,EAAE,OAAO,CAAA;KAAE,CAAC,CAAC;IAC/C,MAAM,CAAC,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,YAAY,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CAC1D"}

package/dist/core/entities/role/types.js

@@ -0,0 +1,8 @@
+/*
+ * Copyright (c) 2025.
+ * Author Peter Placzek (tada5hi)
+ * For the full copyright and license information,
+ * view the LICENSE file that was distributed with this source code.
+ */
+export {};
+//# sourceMappingURL=types.js.map

package/dist/core/entities/role/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../../../src/core/entities/role/types.ts"],"names":[],"mappings":"AAAA;;;;;GAKG"}

package/dist/core/entities/role-attribute/index.d.ts

@@ -0,0 +1,3 @@
+export * from './service.ts';
+export * from './types.ts';
+//# sourceMappingURL=index.d.ts.map

package/dist/core/entities/role-attribute/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/core/entities/role-attribute/index.ts"],"names":[],"mappings":"AAOA,cAAc,cAAc,CAAC;AAC7B,cAAc,YAAY,CAAC"}

package/dist/core/entities/role-attribute/index.js

@@ -0,0 +1,9 @@
+/*
+ * Copyright (c) 2025.
+ * Author Peter Placzek (tada5hi)
+ * For the full copyright and license information,
+ * view the LICENSE file that was distributed with this source code.
+ */
+export * from "./service.js";
+export * from "./types.js";
+//# sourceMappingURL=index.js.map

package/dist/core/entities/role-attribute/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../src/core/entities/role-attribute/index.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,cAAc,cAAc,CAAC;AAC7B,cAAc,YAAY,CAAC"}

package/dist/core/entities/role-attribute/service.d.ts

@@ -0,0 +1,18 @@
+import type { RoleAttribute } from '@authup/core-kit';
+import type { ActorContext } from '../actor/types.ts';
+import { AbstractEntityService } from '../service.ts';
+import type { EntityRepositoryFindManyResult } from '../types.ts';
+import type { IRoleAttributeRepository, IRoleAttributeService } from './types.ts';
+export type RoleAttributeServiceContext = {
+    repository: IRoleAttributeRepository;
+};
+export declare class RoleAttributeService extends AbstractEntityService implements IRoleAttributeService {
+    protected repository: IRoleAttributeRepository;
+    constructor(ctx: RoleAttributeServiceContext);
+    getMany(query: Record<string, any>, actor: ActorContext): Promise<EntityRepositoryFindManyResult<RoleAttribute>>;
+    getOne(id: string, actor: ActorContext): Promise<RoleAttribute>;
+    create(data: Record<string, any>, actor: ActorContext): Promise<RoleAttribute>;
+    update(id: string, data: Record<string, any>, actor: ActorContext): Promise<RoleAttribute>;
+    delete(id: string, actor: ActorContext): Promise<RoleAttribute>;
+}
+//# sourceMappingURL=service.d.ts.map

package/dist/core/entities/role-attribute/service.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"service.d.ts","sourceRoot":"","sources":["../../../../src/core/entities/role-attribute/service.ts"],"names":[],"mappings":"AAUA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AACtD,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AACtD,OAAO,EAAE,qBAAqB,EAAE,MAAM,eAAe,CAAC;AACtD,OAAO,KAAK,EAAE,8BAA8B,EAAE,MAAM,aAAa,CAAC;AAClE,OAAO,KAAK,EAAE,wBAAwB,EAAE,qBAAqB,EAAE,MAAM,YAAY,CAAC;AAElF,MAAM,MAAM,2BAA2B,GAAG;IACtC,UAAU,EAAE,wBAAwB,CAAC;CACxC,CAAC;AAEF,qBAAa,oBAAqB,SAAQ,qBAAsB,YAAW,qBAAqB;IAC5F,SAAS,CAAC,UAAU,EAAE,wBAAwB,CAAC;gBAEnC,GAAG,EAAE,2BAA2B;IAKtC,OAAO,CACT,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,EAC1B,KAAK,EAAE,YAAY,GACpB,OAAO,CAAC,8BAA8B,CAAC,aAAa,CAAC,CAAC;IAmCnD,MAAM,CACR,EAAE,EAAE,MAAM,EACV,KAAK,EAAE,YAAY,GACpB,OAAO,CAAC,aAAa,CAAC;IA4BnB,MAAM,CACR,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,EACzB,KAAK,EAAE,YAAY,GACpB,OAAO,CAAC,aAAa,CAAC;IAqBnB,MAAM,CACR,EAAE,EAAE,MAAM,EACV,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,EACzB,KAAK,EAAE,YAAY,GACpB,OAAO,CAAC,aAAa,CAAC;IAwBnB,MAAM,CACR,EAAE,EAAE,MAAM,EACV,KAAK,EAAE,YAAY,GACpB,OAAO,CAAC,aAAa,CAAC;CAqB5B"}

package/dist/core/entities/role-attribute/service.js

@@ -0,0 +1,121 @@
+/*
+ * Copyright (c) 2025.
+ * Author Peter Placzek (tada5hi)
+ * For the full copyright and license information,
+ * view the LICENSE file that was distributed with this source code.
+ */
+import { BuiltInPolicyType, PolicyData } from '@authup/access';
+import { NotFoundError } from '@ebec/http';
+import { PermissionName } from '@authup/core-kit';
+import { AbstractEntityService } from "../service.js";
+export class RoleAttributeService extends AbstractEntityService {
+    repository;
+    constructor(ctx) {
+        super();
+        this.repository = ctx.repository;
+    }
+    async getMany(query, actor) {
+        await actor.permissionEvaluator.preEvaluateOneOf({
+            name: [
+                PermissionName.ROLE_READ,
+                PermissionName.ROLE_UPDATE,
+                PermissionName.ROLE_DELETE,
+            ],
+        });
+        const { data: entities, meta } = await this.repository.findMany(query);
+        const data = [];
+        let { total } = meta;
+        for (const entity of entities) {
+            try {
+                await actor.permissionEvaluator.evaluateOneOf({
+                    name: [
+                        PermissionName.ROLE_READ,
+                        PermissionName.ROLE_UPDATE,
+                        PermissionName.ROLE_DELETE,
+                    ],
+                    input: new PolicyData({
+                        [BuiltInPolicyType.ATTRIBUTES]: entity,
+                    }),
+                });
+                data.push(entity);
+            }
+            catch {
+                total--;
+            }
+        }
+        return { data, meta: { ...meta, total } };
+    }
+    async getOne(id, actor) {
+        await actor.permissionEvaluator.preEvaluateOneOf({
+            name: [
+                PermissionName.ROLE_READ,
+                PermissionName.ROLE_UPDATE,
+                PermissionName.ROLE_DELETE,
+            ],
+        });
+        const entity = await this.repository.findOneBy({ id });
+        if (!entity) {
+            throw new NotFoundError();
+        }
+        await actor.permissionEvaluator.evaluateOneOf({
+            name: [
+                PermissionName.ROLE_READ,
+                PermissionName.ROLE_UPDATE,
+                PermissionName.ROLE_DELETE,
+            ],
+            input: new PolicyData({
+                [BuiltInPolicyType.ATTRIBUTES]: entity,
+            }),
+        });
+        return entity;
+    }
+    async create(data, actor) {
+        await actor.permissionEvaluator.preEvaluate({ name: PermissionName.ROLE_UPDATE });
+        await this.repository.validateJoinColumns(data);
+        data.realm_id = data.role.realm_id;
+        const entity = this.repository.create(data);
+        await actor.permissionEvaluator.evaluate({
+            name: PermissionName.ROLE_UPDATE,
+            input: new PolicyData({
+                [BuiltInPolicyType.ATTRIBUTES]: entity,
+            }),
+        });
+        await this.repository.save(entity);
+        return entity;
+    }
+    async update(id, data, actor) {
+        await actor.permissionEvaluator.preEvaluate({ name: PermissionName.ROLE_UPDATE });
+        await this.repository.validateJoinColumns(data);
+        let entity = await this.repository.findOneBy({ id });
+        if (!entity) {
+            throw new NotFoundError();
+        }
+        entity = this.repository.merge(entity, data);
+        await actor.permissionEvaluator.evaluate({
+            name: PermissionName.ROLE_UPDATE,
+            input: new PolicyData({
+                [BuiltInPolicyType.ATTRIBUTES]: entity,
+            }),
+        });
+        await this.repository.save(entity);
+        return entity;
+    }
+    async delete(id, actor) {
+        await actor.permissionEvaluator.preEvaluate({ name: PermissionName.ROLE_UPDATE });
+        const entity = await this.repository.findOneBy({ id });
+        if (!entity) {
+            throw new NotFoundError();
+        }
+        await actor.permissionEvaluator.evaluate({
+            name: PermissionName.ROLE_UPDATE,
+            input: new PolicyData({
+                [BuiltInPolicyType.ATTRIBUTES]: entity,
+            }),
+        });
+        const { id: entityId } = entity;
+        await this.repository.remove(entity);
+        entity.id = entityId;
+        return entity;
+    }
+}
+//# sourceMappingURL=service.js.map

package/dist/core/entities/role-attribute/service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"service.js","sourceRoot":"","sources":["../../../../src/core/entities/role-attribute/service.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,iBAAiB,EAAE,UAAU,EAAE,MAAM,gBAAgB,CAAC;AAC/D,OAAO,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAC3C,OAAO,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAC;AAGlD,OAAO,EAAE,qBAAqB,EAAE,MAAM,eAAe,CAAC;AAQtD,MAAM,OAAO,oBAAqB,SAAQ,qBAAqB;IACjD,UAAU,CAA2B;IAE/C,YAAY,GAAgC;QACxC,KAAK,EAAE,CAAC;QACR,IAAI,CAAC,UAAU,GAAG,GAAG,CAAC,UAAU,CAAC;IACrC,CAAC;IAED,KAAK,CAAC,OAAO,CACT,KAA0B,EAC1B,KAAmB;QAEnB,MAAM,KAAK,CAAC,mBAAmB,CAAC,gBAAgB,CAAC;YAC7C,IAAI,EAAE;gBACF,cAAc,CAAC,SAAS;gBACxB,cAAc,CAAC,WAAW;gBAC1B,cAAc,CAAC,WAAW;aAC7B;SACJ,CAAC,CAAC;QAEH,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;QAEvE,MAAM,IAAI,GAAoB,EAAE,CAAC;QACjC,IAAI,EAAE,KAAK,EAAE,GAAG,IAAI,CAAC;QAErB,KAAK,MAAM,MAAM,IAAI,QAAQ,EAAE,CAAC;YAC5B,IAAI,CAAC;gBACD,MAAM,KAAK,CAAC,mBAAmB,CAAC,aAAa,CAAC;oBAC1C,IAAI,EAAE;wBACF,cAAc,CAAC,SAAS;wBACxB,cAAc,CAAC,WAAW;wBAC1B,cAAc,CAAC,WAAW;qBAC7B;oBACD,KAAK,EAAE,IAAI,UAAU,CAAC;wBAClB,CAAC,iBAAiB,CAAC,UAAU,CAAC,EAAE,MAAM;qBACzC,CAAC;iBACL,CAAC,CAAC;gBACH,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YACtB,CAAC;YAAC,MAAM,CAAC;gBACL,KAAK,EAAE,CAAC;YACZ,CAAC;QACL,CAAC;QAED,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,GAAG,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;IAC9C,CAAC;IAED,KAAK,CAAC,MAAM,CACR,EAAU,EACV,KAAmB;QAEnB,MAAM,KAAK,CAAC,mBAAmB,CAAC,gBAAgB,CAAC;YAC7C,IAAI,EAAE;gBACF,cAAc,CAAC,SAAS;gBACxB,cAAc,CAAC,WAAW;gBAC1B,cAAc,CAAC,WAAW;aAC7B;SACJ,CAAC,CAAC;QAEH,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;QACvD,IAAI,CAAC,MAAM,EAAE,CAAC;YACV,MAAM,IAAI,aAAa,EAAE,CAAC;QAC9B,CAAC;QAED,MAAM,KAAK,CAAC,mBAAmB,CAAC,aAAa,CAAC;YAC1C,IAAI,EAAE;gBACF,cAAc,CAAC,SAAS;gBACxB,cAAc,CAAC,WAAW;gBAC1B,cAAc,CAAC,WAAW;aAC7B;YACD,KAAK,EAAE,IAAI,UAAU,CAAC;gBAClB,CAAC,iBAAiB,CAAC,UAAU,CAAC,EAAE,MAAM;aACzC,CAAC;SACL,CAAC,CAAC;QAEH,OAAO,MAAM,CAAC;IAClB,CAAC;IAED,KAAK,CAAC,MAAM,CACR,IAAyB,EACzB,KAAmB;QAEnB,MAAM,KAAK,CAAC,mBAAmB,CAAC,WAAW,CAAC,EAAE,IAAI,EAAE,cAAc,CAAC,WAAW,EAAE,CAAC,CAAC;QAElF,MAAM,IAAI,CAAC,UAAU,CAAC,mBAAmB,CAAC,IAAI,CAAC,CAAC;QAEhD,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC;QAEnC,MAAM,MAAM,GAAG,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QAE5C,MAAM,KAAK,CAAC,mBAAmB,CAAC,QAAQ,CAAC;YACrC,IAAI,EAAE,cAAc,CAAC,WAAW;YAChC,KAAK,EAAE,IAAI,UAAU,CAAC;gBAClB,CAAC,iBAAiB,CAAC,UAAU,CAAC,EAAE,MAAM;aACzC,CAAC;SACL,CAAC,CAAC;QAEH,MAAM,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAEnC,OAAO,MAAM,CAAC;IAClB,CAAC;IAED,KAAK,CAAC,MAAM,CACR,EAAU,EACV,IAAyB,EACzB,KAAmB;QAEnB,MAAM,KAAK,CAAC,mBAAmB,CAAC,WAAW,CAAC,EAAE,IAAI,EAAE,cAAc,CAAC,WAAW,EAAE,CAAC,CAAC;QAElF,MAAM,IAAI,CAAC,UAAU,CAAC,mBAAmB,CAAC,IAAI,CAAC,CAAC;QAEhD,IAAI,MAAM,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;QACrD,IAAI,CAAC,MAAM,EAAE,CAAC;YACV,MAAM,IAAI,aAAa,EAAE,CAAC;QAC9B,CAAC;QAED,MAAM,GAAG,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;QAE7C,MAAM,KAAK,CAAC,mBAAmB,CAAC,QAAQ,CAAC;YACrC,IAAI,EAAE,cAAc,CAAC,WAAW;YAChC,KAAK,EAAE,IAAI,UAAU,CAAC;gBAClB,CAAC,iBAAiB,CAAC,UAAU,CAAC,EAAE,MAAM;aACzC,CAAC;SACL,CAAC,CAAC;QAEH,MAAM,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAEnC,OAAO,MAAM,CAAC;IAClB,CAAC;IAED,KAAK,CAAC,MAAM,CACR,EAAU,EACV,KAAmB;QAEnB,MAAM,KAAK,CAAC,mBAAmB,CAAC,WAAW,CAAC,EAAE,IAAI,EAAE,cAAc,CAAC,WAAW,EAAE,CAAC,CAAC;QAElF,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;QACvD,IAAI,CAAC,MAAM,EAAE,CAAC;YACV,MAAM,IAAI,aAAa,EAAE,CAAC;QAC9B,CAAC;QAED,MAAM,KAAK,CAAC,mBAAmB,CAAC,QAAQ,CAAC;YACrC,IAAI,EAAE,cAAc,CAAC,WAAW;YAChC,KAAK,EAAE,IAAI,UAAU,CAAC;gBAClB,CAAC,iBAAiB,CAAC,UAAU,CAAC,EAAE,MAAM;aACzC,CAAC;SACL,CAAC,CAAC;QAEH,MAAM,EAAE,EAAE,EAAE,QAAQ,EAAE,GAAG,MAAM,CAAC;QAChC,MAAM,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QACrC,MAAM,CAAC,EAAE,GAAG,QAAQ,CAAC;QAErB,OAAO,MAAM,CAAC;IAClB,CAAC;CACJ"}

package/dist/core/entities/role-attribute/types.d.ts

@@ -0,0 +1,13 @@
+import type { RoleAttribute } from '@authup/core-kit';
+import type { ActorContext } from '../actor/types.ts';
+import type { EntityRepositoryFindManyResult, IEntityRepository } from '../types.ts';
+export interface IRoleAttributeRepository extends IEntityRepository<RoleAttribute> {
+}
+export interface IRoleAttributeService {
+    getMany(query: Record<string, any>, actor: ActorContext): Promise<EntityRepositoryFindManyResult<RoleAttribute>>;
+    getOne(id: string, actor: ActorContext): Promise<RoleAttribute>;
+    create(data: Record<string, any>, actor: ActorContext): Promise<RoleAttribute>;
+    update(id: string, data: Record<string, any>, actor: ActorContext): Promise<RoleAttribute>;
+    delete(id: string, actor: ActorContext): Promise<RoleAttribute>;
+}
+//# sourceMappingURL=types.d.ts.map

package/dist/core/entities/role-attribute/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../../src/core/entities/role-attribute/types.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AACtD,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AACtD,OAAO,KAAK,EAAE,8BAA8B,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AAErF,MAAM,WAAW,wBAAyB,SAAQ,iBAAiB,CAAC,aAAa,CAAC;CAEjF;AAED,MAAM,WAAW,qBAAqB;IAClC,OAAO,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,EAAE,KAAK,EAAE,YAAY,GAAG,OAAO,CAAC,8BAA8B,CAAC,aAAa,CAAC,CAAC,CAAC;IACjH,MAAM,CAAC,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,YAAY,GAAG,OAAO,CAAC,aAAa,CAAC,CAAC;IAChE,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,EAAE,KAAK,EAAE,YAAY,GAAG,OAAO,CAAC,aAAa,CAAC,CAAC;IAC/E,MAAM,CAAC,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,EAAE,KAAK,EAAE,YAAY,GAAG,OAAO,CAAC,aAAa,CAAC,CAAC;IAC3F,MAAM,CAAC,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,YAAY,GAAG,OAAO,CAAC,aAAa,CAAC,CAAC;CACnE"}

package/dist/core/entities/role-attribute/types.js

@@ -0,0 +1,8 @@
+/*
+ * Copyright (c) 2025.
+ * Author Peter Placzek (tada5hi)
+ * For the full copyright and license information,
+ * view the LICENSE file that was distributed with this source code.
+ */
+export {};
+//# sourceMappingURL=types.js.map

package/dist/core/entities/role-attribute/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../../../src/core/entities/role-attribute/types.ts"],"names":[],"mappings":"AAAA;;;;;GAKG"}

package/dist/core/entities/role-permission/index.d.ts

@@ -0,0 +1,3 @@
+export * from './service.ts';
+export * from './types.ts';
+//# sourceMappingURL=index.d.ts.map

package/dist/core/entities/role-permission/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/core/entities/role-permission/index.ts"],"names":[],"mappings":"AAOA,cAAc,cAAc,CAAC;AAC7B,cAAc,YAAY,CAAC"}

package/dist/core/entities/role-permission/index.js

@@ -0,0 +1,9 @@
+/*
+ * Copyright (c) 2025.
+ * Author Peter Placzek (tada5hi)
+ * For the full copyright and license information,
+ * view the LICENSE file that was distributed with this source code.
+ */
+export * from "./service.js";
+export * from "./types.js";
+//# sourceMappingURL=index.js.map

package/dist/core/entities/role-permission/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../src/core/entities/role-permission/index.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,cAAc,cAAc,CAAC;AAC7B,cAAc,YAAY,CAAC"}

package/dist/core/entities/role-permission/service.d.ts

@@ -0,0 +1,20 @@
+import type { RolePermission } from '@authup/core-kit';
+import type { IIdentityPermissionProvider } from '../../identity/permission/types.ts';
+import type { ActorContext } from '../actor/types.ts';
+import { AbstractEntityService } from '../service.ts';
+import type { EntityRepositoryFindManyResult } from '../types.ts';
+import type { IRolePermissionRepository, IRolePermissionService } from './types.ts';
+export type RolePermissionServiceContext = {
+    repository: IRolePermissionRepository;
+    identityPermissionProvider: IIdentityPermissionProvider;
+};
+export declare class RolePermissionService extends AbstractEntityService implements IRolePermissionService {
+    protected repository: IRolePermissionRepository;
+    protected identityPermissionProvider: IIdentityPermissionProvider;
+    constructor(ctx: RolePermissionServiceContext);
+    getMany(query: Record<string, any>, actor: ActorContext): Promise<EntityRepositoryFindManyResult<RolePermission>>;
+    getOne(id: string, actor: ActorContext): Promise<RolePermission>;
+    create(data: Record<string, any>, actor: ActorContext): Promise<RolePermission>;
+    delete(id: string, actor: ActorContext): Promise<RolePermission>;
+}
+//# sourceMappingURL=service.d.ts.map

package/dist/core/entities/role-permission/service.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"service.d.ts","sourceRoot":"","sources":["../../../../src/core/entities/role-permission/service.ts"],"names":[],"mappings":"AAUA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAC;AACvD,OAAO,KAAK,EAAE,2BAA2B,EAAE,MAAM,oCAAoC,CAAC;AACtF,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AACtD,OAAO,EAAE,qBAAqB,EAAE,MAAM,eAAe,CAAC;AACtD,OAAO,KAAK,EAAE,8BAA8B,EAAE,MAAM,aAAa,CAAC;AAClE,OAAO,KAAK,EAAE,yBAAyB,EAAE,sBAAsB,EAAE,MAAM,YAAY,CAAC;AAEpF,MAAM,MAAM,4BAA4B,GAAG;IACvC,UAAU,EAAE,yBAAyB,CAAC;IACtC,0BAA0B,EAAE,2BAA2B,CAAC;CAC3D,CAAC;AAEF,qBAAa,qBAAsB,SAAQ,qBAAsB,YAAW,sBAAsB;IAC9F,SAAS,CAAC,UAAU,EAAE,yBAAyB,CAAC;IAEhD,SAAS,CAAC,0BAA0B,EAAE,2BAA2B,CAAC;gBAEtD,GAAG,EAAE,4BAA4B;IAMvC,OAAO,CACT,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,EAC1B,KAAK,EAAE,YAAY,GACpB,OAAO,CAAC,8BAA8B,CAAC,cAAc,CAAC,CAAC;IAWpD,MAAM,CACR,EAAE,EAAE,MAAM,EACV,KAAK,EAAE,YAAY,GACpB,OAAO,CAAC,cAAc,CAAC;IAgBpB,MAAM,CACR,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,EACzB,KAAK,EAAE,YAAY,GACpB,OAAO,CAAC,cAAc,CAAC;IAoDpB,MAAM,CACR,EAAE,EAAE,MAAM,EACV,KAAK,EAAE,YAAY,GACpB,OAAO,CAAC,cAAc,CAAC;CAqB7B"}

package/dist/core/entities/role-permission/service.js

@@ -0,0 +1,97 @@
+/*
+ * Copyright (c) 2025.
+ * Author Peter Placzek (tada5hi)
+ * For the full copyright and license information,
+ * view the LICENSE file that was distributed with this source code.
+ */
+import { BuiltInPolicyType, PolicyData } from '@authup/access';
+import { NotFoundError } from '@ebec/http';
+import { PermissionName, ROLE_ADMIN_NAME } from '@authup/core-kit';
+import { AbstractEntityService } from "../service.js";
+export class RolePermissionService extends AbstractEntityService {
+    repository;
+    identityPermissionProvider;
+    constructor(ctx) {
+        super();
+        this.repository = ctx.repository;
+        this.identityPermissionProvider = ctx.identityPermissionProvider;
+    }
+    async getMany(query, actor) {
+        await actor.permissionEvaluator.preEvaluateOneOf({
+            name: [
+                PermissionName.ROLE_PERMISSION_DELETE,
+                PermissionName.ROLE_PERMISSION_READ,
+            ],
+        });
+        return this.repository.findMany(query);
+    }
+    async getOne(id, actor) {
+        await actor.permissionEvaluator.preEvaluateOneOf({
+            name: [
+                PermissionName.ROLE_PERMISSION_DELETE,
+                PermissionName.ROLE_PERMISSION_READ,
+            ],
+        });
+        const entity = await this.repository.findOneBy({ id });
+        if (!entity) {
+            throw new NotFoundError();
+        }
+        return entity;
+    }
+    async create(data, actor) {
+        await actor.permissionEvaluator.preEvaluate({ name: PermissionName.ROLE_PERMISSION_CREATE });
+        await this.repository.validateJoinColumns(data);
+        if (data.permission) {
+            data.permission_realm_id = data.permission.realm_id;
+            if (!data.role || data.role.name !== ROLE_ADMIN_NAME) {
+                await actor.permissionEvaluator.preEvaluate({
+                    name: data.permission.name,
+                    realmId: data.permission.realm_id,
+                    clientId: data.permission.client_id,
+                });
+            }
+        }
+        if (data.role) {
+            data.role_realm_id = data.role.realm_id;
+        }
+        if (data.permission &&
+            actor.identity &&
+            typeof data.policy_id === 'undefined') {
+            const junctionPolicy = await this.identityPermissionProvider.resolveJunctionPolicy({ type: actor.identity.type, id: actor.identity.data.id }, {
+                name: data.permission.name,
+                realmId: data.permission.realm_id,
+                clientId: data.permission.client_id,
+            });
+            if (junctionPolicy) {
+                data.policy_id = junctionPolicy.id;
+            }
+        }
+        await actor.permissionEvaluator.evaluate({
+            name: PermissionName.ROLE_PERMISSION_CREATE,
+            input: new PolicyData({
+                [BuiltInPolicyType.ATTRIBUTES]: data,
+            }),
+        });
+        let entity = this.repository.create(data);
+        entity = await this.repository.save(entity);
+        return entity;
+    }
+    async delete(id, actor) {
+        await actor.permissionEvaluator.preEvaluate({ name: PermissionName.ROLE_PERMISSION_DELETE });
+        const entity = await this.repository.findOneBy({ id });
+        if (!entity) {
+            throw new NotFoundError();
+        }
+        await actor.permissionEvaluator.evaluate({
+            name: PermissionName.ROLE_PERMISSION_DELETE,
+            input: new PolicyData({
+                [BuiltInPolicyType.ATTRIBUTES]: entity,
+            }),
+        });
+        const { id: entityId } = entity;
+        await this.repository.remove(entity);
+        entity.id = entityId;
+        return entity;
+    }
+}
+//# sourceMappingURL=service.js.map

package/dist/core/entities/role-permission/service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"service.js","sourceRoot":"","sources":["../../../../src/core/entities/role-permission/service.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,iBAAiB,EAAE,UAAU,EAAE,MAAM,gBAAgB,CAAC;AAC/D,OAAO,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAC3C,OAAO,EAAE,cAAc,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAC;AAInE,OAAO,EAAE,qBAAqB,EAAE,MAAM,eAAe,CAAC;AAStD,MAAM,OAAO,qBAAsB,SAAQ,qBAAqB;IAClD,UAAU,CAA4B;IAEtC,0BAA0B,CAA8B;IAElE,YAAY,GAAiC;QACzC,KAAK,EAAE,CAAC;QACR,IAAI,CAAC,UAAU,GAAG,GAAG,CAAC,UAAU,CAAC;QACjC,IAAI,CAAC,0BAA0B,GAAG,GAAG,CAAC,0BAA0B,CAAC;IACrE,CAAC;IAED,KAAK,CAAC,OAAO,CACT,KAA0B,EAC1B,KAAmB;QAEnB,MAAM,KAAK,CAAC,mBAAmB,CAAC,gBAAgB,CAAC;YAC7C,IAAI,EAAE;gBACF,cAAc,CAAC,sBAAsB;gBACrC,cAAc,CAAC,oBAAoB;aACtC;SACJ,CAAC,CAAC;QAEH,OAAO,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;IAC3C,CAAC;IAED,KAAK,CAAC,MAAM,CACR,EAAU,EACV,KAAmB;QAEnB,MAAM,KAAK,CAAC,mBAAmB,CAAC,gBAAgB,CAAC;YAC7C,IAAI,EAAE;gBACF,cAAc,CAAC,sBAAsB;gBACrC,cAAc,CAAC,oBAAoB;aACtC;SACJ,CAAC,CAAC;QAEH,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;QACvD,IAAI,CAAC,MAAM,EAAE,CAAC;YACV,MAAM,IAAI,aAAa,EAAE,CAAC;QAC9B,CAAC;QAED,OAAO,MAAM,CAAC;IAClB,CAAC;IAED,KAAK,CAAC,MAAM,CACR,IAAyB,EACzB,KAAmB;QAEnB,MAAM,KAAK,CAAC,mBAAmB,CAAC,WAAW,CAAC,EAAE,IAAI,EAAE,cAAc,CAAC,sBAAsB,EAAE,CAAC,CAAC;QAE7F,MAAM,IAAI,CAAC,UAAU,CAAC,mBAAmB,CAAC,IAAI,CAAC,CAAC;QAEhD,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;YAClB,IAAI,CAAC,mBAAmB,GAAG,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC;YAEpD,IAAI,CAAC,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,IAAI,CAAC,IAAI,KAAK,eAAe,EAAE,CAAC;gBACnD,MAAM,KAAK,CAAC,mBAAmB,CAAC,WAAW,CAAC;oBACxC,IAAI,EAAE,IAAI,CAAC,UAAU,CAAC,IAAI;oBAC1B,OAAO,EAAE,IAAI,CAAC,UAAU,CAAC,QAAQ;oBACjC,QAAQ,EAAE,IAAI,CAAC,UAAU,CAAC,SAAS;iBACtC,CAAC,CAAC;YACP,CAAC;QACL,CAAC;QAED,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;YACZ,IAAI,CAAC,aAAa,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC;QAC5C,CAAC;QAED,IACI,IAAI,CAAC,UAAU;YACf,KAAK,CAAC,QAAQ;YACd,OAAO,IAAI,CAAC,SAAS,KAAK,WAAW,EACvC,CAAC;YACC,MAAM,cAAc,GAAG,MAAM,IAAI,CAAC,0BAA0B,CAAC,qBAAqB,CAC9E,EAAE,IAAI,EAAE,KAAK,CAAC,QAAQ,CAAC,IAAI,EAAE,EAAE,EAAE,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,EAAE,EACzD;gBACI,IAAI,EAAE,IAAI,CAAC,UAAU,CAAC,IAAI;gBAC1B,OAAO,EAAE,IAAI,CAAC,UAAU,CAAC,QAAQ;gBACjC,QAAQ,EAAE,IAAI,CAAC,UAAU,CAAC,SAAS;aACtC,CACJ,CAAC;YACF,IAAI,cAAc,EAAE,CAAC;gBACjB,IAAI,CAAC,SAAS,GAAG,cAAc,CAAC,EAAE,CAAC;YACvC,CAAC;QACL,CAAC;QAED,MAAM,KAAK,CAAC,mBAAmB,CAAC,QAAQ,CAAC;YACrC,IAAI,EAAE,cAAc,CAAC,sBAAsB;YAC3C,KAAK,EAAE,IAAI,UAAU,CAAC;gBAClB,CAAC,iBAAiB,CAAC,UAAU,CAAC,EAAE,IAAI;aACvC,CAAC;SACL,CAAC,CAAC;QAEH,IAAI,MAAM,GAAG,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QAC1C,MAAM,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAE5C,OAAO,MAAM,CAAC;IAClB,CAAC;IAED,KAAK,CAAC,MAAM,CACR,EAAU,EACV,KAAmB;QAEnB,MAAM,KAAK,CAAC,mBAAmB,CAAC,WAAW,CAAC,EAAE,IAAI,EAAE,cAAc,CAAC,sBAAsB,EAAE,CAAC,CAAC;QAE7F,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;QACvD,IAAI,CAAC,MAAM,EAAE,CAAC;YACV,MAAM,IAAI,aAAa,EAAE,CAAC;QAC9B,CAAC;QAED,MAAM,KAAK,CAAC,mBAAmB,CAAC,QAAQ,CAAC;YACrC,IAAI,EAAE,cAAc,CAAC,sBAAsB;YAC3C,KAAK,EAAE,IAAI,UAAU,CAAC;gBAClB,CAAC,iBAAiB,CAAC,UAAU,CAAC,EAAE,MAAM;aACzC,CAAC;SACL,CAAC,CAAC;QAEH,MAAM,EAAE,EAAE,EAAE,QAAQ,EAAE,GAAG,MAAM,CAAC;QAChC,MAAM,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QACrC,MAAM,CAAC,EAAE,GAAG,QAAQ,CAAC;QAErB,OAAO,MAAM,CAAC;IAClB,CAAC;CACJ"}

package/dist/core/entities/role-permission/types.d.ts

@@ -0,0 +1,12 @@
+import type { RolePermission } from '@authup/core-kit';
+import type { ActorContext } from '../actor/types.ts';
+import type { EntityRepositoryFindManyResult, IEntityRepository } from '../types.ts';
+export interface IRolePermissionRepository extends IEntityRepository<RolePermission> {
+}
+export interface IRolePermissionService {
+    getMany(query: Record<string, any>, actor: ActorContext): Promise<EntityRepositoryFindManyResult<RolePermission>>;
+    getOne(id: string, actor: ActorContext): Promise<RolePermission>;
+    create(data: Record<string, any>, actor: ActorContext): Promise<RolePermission>;
+    delete(id: string, actor: ActorContext): Promise<RolePermission>;
+}
+//# sourceMappingURL=types.d.ts.map

package/dist/core/entities/role-permission/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../../src/core/entities/role-permission/types.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAC;AACvD,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AACtD,OAAO,KAAK,EAAE,8BAA8B,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AAErF,MAAM,WAAW,yBAA0B,SAAQ,iBAAiB,CAAC,cAAc,CAAC;CACnF;AAED,MAAM,WAAW,sBAAsB;IACnC,OAAO,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,EAAE,KAAK,EAAE,YAAY,GAAG,OAAO,CAAC,8BAA8B,CAAC,cAAc,CAAC,CAAC,CAAC;IAClH,MAAM,CAAC,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,YAAY,GAAG,OAAO,CAAC,cAAc,CAAC,CAAC;IACjE,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,EAAE,KAAK,EAAE,YAAY,GAAG,OAAO,CAAC,cAAc,CAAC,CAAC;IAChF,MAAM,CAAC,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,YAAY,GAAG,OAAO,CAAC,cAAc,CAAC,CAAC;CACpE"}