@authup/server-core 1.0.0-beta.3 → 1.0.0-beta.32

package/dist/core/identity/provider/authentication/protocols/ldap/module.js

@@ -0,0 +1,191 @@
+/*
+ * Copyright (c) 2024-2025.
+ * Author Peter Placzek (tada5hi)
+ * For the full copyright and license information,
+ * view the LICENSE file that was distributed with this source code.
+ */
+import { UserError } from '@authup/core-kit';
+import { template } from '@authup/kit';
+import ldap from 'ldapjs';
+import { BaseCredentialsAuthenticator } from "../../../../../authentication/index.js";
+export class IdentityProviderLdapAuthenticator extends BaseCredentialsAuthenticator {
+    provider;
+    accountManager;
+    client;
+    constructor(ctx) {
+        super();
+        this.accountManager = ctx.accountManager;
+        this.provider = ctx.provider;
+        this.client = ctx.clientFactory.create({
+            url: ctx.provider.url,
+            tls: ctx.provider.tls,
+            startTLS: ctx.provider.start_tls,
+            baseDn: ctx.provider.base_dn,
+            user: ctx.provider.user,
+            password: ctx.provider.password,
+            userNameAttribute: ctx.provider.user_name_attribute,
+        });
+    }
+    async authenticate(name, password) {
+        let bind = await this.safeBind();
+        if (!bind.success) {
+            await this.safeUnbind();
+            throw UserError.credentialsInvalid();
+        }
+        const entity = await this.findOneByName(name);
+        if (!entity) {
+            throw UserError.credentialsInvalid();
+        }
+        const identity = {
+            id: entity.dn,
+            attributeCandidates: {
+                name: [
+                    entity[this.provider.user_name_attribute || 'cn'],
+                    this.extractCnFromDn(entity.dn),
+                ],
+                email: [
+                    entity[this.provider.user_mail_attribute || 'mail'],
+                ],
+            },
+            data: entity,
+            provider: this.provider,
+        };
+        try {
+            identity.roles = await this.findUserGroups(entity);
+        }
+        catch {
+            // todo: log event
+        }
+        bind = await this.safeBind(identity.id, password);
+        await this.safeUnbind();
+        if (!bind.success) {
+            throw UserError.credentialsInvalid();
+        }
+        const account = await this.accountManager.save(identity);
+        return account.user;
+    }
+    async bind(user, password) {
+        if (!user) {
+            return this.client.bind();
+        }
+        if (!this.client.isDn(user)) {
+            const nameAttribute = this.provider.user_name_attribute || 'cn';
+            user = `${nameAttribute}=${user},${this.client.resolveDn(this.provider.user_base_dn, this.provider.base_dn)}`;
+        }
+        return this.client.bind(user, password);
+    }
+    async safeBind(user, password) {
+        try {
+            await this.bind(user, password);
+            return { success: true, data: null };
+        }
+        catch (e) {
+            return { success: false, error: e };
+        }
+    }
+    async unbind() {
+        return this.client.unbind();
+    }
+    async safeUnbind() {
+        try {
+            await this.unbind();
+            return { success: true, data: null };
+        }
+        catch (e) {
+            return { success: false, error: e };
+        }
+    }
+    async findOneByName(input) {
+        let filter;
+        if (this.provider.user_filter) {
+            filter = template(this.provider.user_filter, {
+                input,
+                name_attribute: this.provider.user_name_attribute || 'cn',
+                mail_attribute: this.provider.user_mail_attribute || 'mail',
+                display_name_attribute: this.provider.user_display_name_attribute || 'cn',
+            });
+        }
+        else if (this.provider.user_name_attribute) {
+            filter = new ldap.EqualityFilter({
+                attribute: this.provider.user_name_attribute,
+                value: input,
+            });
+        }
+        else {
+            filter = new ldap.OrFilter({
+                filters: [
+                    new ldap.EqualityFilter({
+                        attribute: 'cn',
+                        value: input,
+                    }),
+                    new ldap.EqualityFilter({
+                        attribute: 'sAMAccountName',
+                        value: input,
+                    }),
+                ],
+            });
+        }
+        const entities = await this.client.search({
+            filter,
+            scope: 'sub',
+        }, this.client.resolveDn(this.provider.user_base_dn, this.provider.base_dn));
+        if (entities.length === 0) {
+            return null;
+        }
+        return entities[0];
+    }
+    extractCnFromDn(dn) {
+        const match = /^cn=([^,]+)/i.exec(dn);
+        return match ? match[1].trim() : undefined;
+    }
+    async findUserGroups(user) {
+        const nameAttribute = this.provider.group_name_attribute || 'cn';
+        const memberAttribute = this.provider.group_member_attribute || 'member';
+        let filter;
+        if (this.provider.group_filter) {
+            filter = template(this.provider.group_filter, {
+                ...user,
+                name_attribute: nameAttribute,
+                member_attribute: memberAttribute,
+            });
+        }
+        else {
+            filter = new ldap.AndFilter({
+                filters: [
+                    new ldap.EqualityFilter({
+                        attribute: 'objectClass',
+                        value: this.provider.group_class || 'group',
+                    }),
+                    new ldap.EqualityFilter({
+                        attribute: memberAttribute,
+                        value: user[this.provider.group_member_user_attribute || 'dn'],
+                    }),
+                ],
+            });
+        }
+        const entities = await this.client.search({
+            filter,
+            scope: 'sub',
+        }, this.client.resolveDn(this.provider.group_base_dn, this.provider.base_dn));
+        if (entities.length === 0) {
+            return [];
+        }
+        const attributeKey = this.provider.group_name_attribute || 'cn';
+        const names = [];
+        for (const entity of entities) {
+            const attribute = entity[attributeKey];
+            if (typeof attribute === 'undefined') {
+                continue;
+            }
+            if (typeof attribute === 'string') {
+                names.push(attribute);
+                continue;
+            }
+            if (Array.isArray(attribute)) {
+                names.push(...attribute.filter((el) => typeof el === 'string'));
+            }
+        }
+        return names;
+    }
+}
+//# sourceMappingURL=module.js.map

package/dist/core/identity/provider/authentication/protocols/ldap/module.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"module.js","sourceRoot":"","sources":["../../../../../../../src/core/identity/provider/authentication/protocols/ldap/module.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAGH,OAAO,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAE7C,OAAO,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AACvC,OAAO,IAAI,MAAM,QAAQ,CAAC;AAE1B,OAAO,EAAE,4BAA4B,EAAE,MAAM,wCAAwC,CAAC;AAMtF,MAAM,OAAO,iCAAkC,SAAQ,4BAAkC;IAC3E,QAAQ,CAAwB;IAEhC,cAAc,CAAkC;IAEhD,MAAM,CAAc;IAE9B,YAAY,GAA6C;QACrD,KAAK,EAAE,CAAC;QAER,IAAI,CAAC,cAAc,GAAG,GAAG,CAAC,cAAc,CAAC;QACzC,IAAI,CAAC,QAAQ,GAAG,GAAG,CAAC,QAAQ,CAAC;QAC7B,IAAI,CAAC,MAAM,GAAG,GAAG,CAAC,aAAa,CAAC,MAAM,CAAC;YACnC,GAAG,EAAE,GAAG,CAAC,QAAQ,CAAC,GAAG;YACrB,GAAG,EAAE,GAAG,CAAC,QAAQ,CAAC,GAAG;YACrB,QAAQ,EAAE,GAAG,CAAC,QAAQ,CAAC,SAAS;YAChC,MAAM,EAAE,GAAG,CAAC,QAAQ,CAAC,OAAO;YAC5B,IAAI,EAAE,GAAG,CAAC,QAAQ,CAAC,IAAI;YACvB,QAAQ,EAAE,GAAG,CAAC,QAAQ,CAAC,QAAQ;YAC/B,iBAAiB,EAAE,GAAG,CAAC,QAAQ,CAAC,mBAAmB;SACtD,CAAC,CAAC;IACP,CAAC;IAED,KAAK,CAAC,YAAY,CAAC,IAAY,EAAE,QAAgB;QAC7C,IAAI,IAAI,GAAG,MAAM,IAAI,CAAC,QAAQ,EAAE,CAAC;QACjC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;YAChB,MAAM,IAAI,CAAC,UAAU,EAAE,CAAC;YAExB,MAAM,SAAS,CAAC,kBAAkB,EAAE,CAAC;QACzC,CAAC;QAED,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC;QAC9C,IAAI,CAAC,MAAM,EAAE,CAAC;YACV,MAAM,SAAS,CAAC,kBAAkB,EAAE,CAAC;QACzC,CAAC;QAED,MAAM,QAAQ,GAA8B;YACxC,EAAE,EAAE,MAAM,CAAC,EAAE;YACb,mBAAmB,EAAE;gBACjB,IAAI,EAAE;oBACF,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,mBAAmB,IAAI,IAAI,CAAC;oBACjD,IAAI,CAAC,eAAe,CAAC,MAAM,CAAC,EAAE,CAAC;iBAClC;gBACD,KAAK,EAAE;oBACH,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,mBAAmB,IAAI,MAAM,CAAC;iBACtD;aACJ;YACD,IAAI,EAAE,MAAM;YACZ,QAAQ,EAAE,IAAI,CAAC,QAAQ;SAC1B,CAAC;QAEF,IAAI,CAAC;YACD,QAAQ,CAAC,KAAK,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC,CAAC;QACvD,CAAC;QAAC,MAAM,CAAC;YACL,kBAAkB;QACtB,CAAC;QAED,IAAI,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,EAAE,QAAQ,CAAC,CAAC;QAClD,MAAM,IAAI,CAAC,UAAU,EAAE,CAAC;QAExB,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;YAChB,MAAM,SAAS,CAAC,kBAAkB,EAAE,CAAC;QACzC,CAAC;QAED,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAEzD,OAAO,OAAO,CAAC,IAAI,CAAC;IACxB,CAAC;IAES,KAAK,CAAC,IAAI,CAAC,IAAa,EAAE,QAAiB;QACjD,IAAI,CAAC,IAAI,EAAE,CAAC;YACR,OAAO,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;QAC9B,CAAC;QAED,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YAC1B,MAAM,aAAa,GAAG,IAAI,CAAC,QAAQ,CAAC,mBAAmB,IAAI,IAAI,CAAC;YAChE,IAAI,GAAG,GAAG,aAAa,IAAI,IAAI,IAAI,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,QAAQ,CAAC,YAAY,EAAE,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;QAClH,CAAC;QAED,OAAO,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;IAC5C,CAAC;IAES,KAAK,CAAC,QAAQ,CAAC,IAAa,EAAE,QAAiB;QACrD,IAAI,CAAC;YACD,MAAM,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;YAEhC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;QACzC,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACT,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,CAAU,EAAE,CAAC;QACjD,CAAC;IACL,CAAC;IAES,KAAK,CAAC,MAAM;QAClB,OAAO,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC;IAChC,CAAC;IAES,KAAK,CAAC,UAAU;QACtB,IAAI,CAAC;YACD,MAAM,IAAI,CAAC,MAAM,EAAE,CAAC;YAEpB,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;QACzC,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACT,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,CAAU,EAAE,CAAC;QACjD,CAAC;IACL,CAAC;IAES,KAAK,CAAC,aAAa,CAAC,KAAa;QACvC,IAAI,MAAwB,CAAC;QAE7B,IAAI,IAAI,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC;YAC5B,MAAM,GAAG,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC,WAAW,EAAE;gBACzC,KAAK;gBACL,cAAc,EAAE,IAAI,CAAC,QAAQ,CAAC,mBAAmB,IAAI,IAAI;gBACzD,cAAc,EAAE,IAAI,CAAC,QAAQ,CAAC,mBAAmB,IAAI,MAAM;gBAC3D,sBAAsB,EAAE,IAAI,CAAC,QAAQ,CAAC,2BAA2B,IAAI,IAAI;aAC5E,CAAC,CAAC;QACP,CAAC;aAAM,IAAI,IAAI,CAAC,QAAQ,CAAC,mBAAmB,EAAE,CAAC;YAC3C,MAAM,GAAG,IAAI,IAAI,CAAC,cAAc,CAAC;gBAC7B,SAAS,EAAE,IAAI,CAAC,QAAQ,CAAC,mBAAmB;gBAC5C,KAAK,EAAE,KAAK;aACf,CAAC,CAAC;QACP,CAAC;aAAM,CAAC;YACJ,MAAM,GAAG,IAAI,IAAI,CAAC,QAAQ,CAAC;gBACvB,OAAO,EAAE;oBACL,IAAI,IAAI,CAAC,cAAc,CAAC;wBACpB,SAAS,EAAE,IAAI;wBACf,KAAK,EAAE,KAAK;qBACf,CAAC;oBACF,IAAI,IAAI,CAAC,cAAc,CAAC;wBACpB,SAAS,EAAE,gBAAgB;wBAC3B,KAAK,EAAE,KAAK;qBACf,CAAC;iBACL;aACJ,CAAC,CAAC;QACP,CAAC;QAED,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC;YACtC,MAAM;YACN,KAAK,EAAE,KAAK;SACf,EAAE,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,QAAQ,CAAC,YAAY,EAAE,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC;QAE7E,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACxB,OAAO,IAAI,CAAC;QAChB,CAAC;QAED,OAAO,QAAQ,CAAC,CAAC,CAAC,CAAC;IACvB,CAAC;IAES,eAAe,CAAC,EAAU;QAChC,MAAM,KAAK,GAAG,cAAc,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACtC,OAAO,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;IAC/C,CAAC;IAEM,KAAK,CAAC,cAAc,CAAC,IAAyB;QACjD,MAAM,aAAa,GAAG,IAAI,CAAC,QAAQ,CAAC,oBAAoB,IAAI,IAAI,CAAC;QACjE,MAAM,eAAe,GAAG,IAAI,CAAC,QAAQ,CAAC,sBAAsB,IAAI,QAAQ,CAAC;QAEzE,IAAI,MAAwB,CAAC;QAC7B,IAAI,IAAI,CAAC,QAAQ,CAAC,YAAY,EAAE,CAAC;YAC7B,MAAM,GAAG,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC,YAAY,EAAE;gBAC1C,GAAG,IAAI;gBACP,cAAc,EAAE,aAAa;gBAC7B,gBAAgB,EAAE,eAAe;aACpC,CAAC,CAAC;QACP,CAAC;aAAM,CAAC;YACJ,MAAM,GAAG,IAAI,IAAI,CAAC,SAAS,CAAC;gBACxB,OAAO,EAAE;oBACL,IAAI,IAAI,CAAC,cAAc,CAAC;wBACpB,SAAS,EAAE,aAAa;wBACxB,KAAK,EAAE,IAAI,CAAC,QAAQ,CAAC,WAAW,IAAI,OAAO;qBAC9C,CAAC;oBACF,IAAI,IAAI,CAAC,cAAc,CAAC;wBACpB,SAAS,EAAE,eAAe;wBAC1B,KAAK,EAAE,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,2BAA2B,IAAI,IAAI,CAAC;qBACjE,CAAC;iBACL;aACJ,CAAC,CAAC;QACP,CAAC;QAED,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC;YACtC,MAAM;YACN,KAAK,EAAE,KAAK;SACf,EAAE,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,QAAQ,CAAC,aAAa,EAAE,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC;QAE9E,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACxB,OAAO,EAAE,CAAC;QACd,CAAC;QAED,MAAM,YAAY,GAAG,IAAI,CAAC,QAAQ,CAAC,oBAAoB,IAAI,IAAI,CAAC;QAChE,MAAM,KAAK,GAAc,EAAE,CAAC;QAC5B,KAAK,MAAM,MAAM,IAAI,QAAQ,EAAE,CAAC;YAC5B,MAAM,SAAS,GAAG,MAAM,CAAC,YAAY,CAAC,CAAC;YACvC,IAAI,OAAO,SAAS,KAAK,WAAW,EAAE,CAAC;gBACnC,SAAS;YACb,CAAC;YAED,IAAI,OAAO,SAAS,KAAK,QAAQ,EAAE,CAAC;gBAChC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;gBACtB,SAAS;YACb,CAAC;YAED,IAAI,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,CAAC;gBAC3B,KAAK,CAAC,IAAI,CAAC,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,OAAO,EAAE,KAAK,QAAQ,CAAC,CAAC,CAAC;YACpE,CAAC;QACL,CAAC;QAED,OAAO,KAAK,CAAC;IACjB,CAAC;CACJ"}

package/dist/core/identity/provider/authentication/protocols/ldap/types.d.ts

@@ -0,0 +1,16 @@
+import type { LdapIdentityProvider } from '@authup/core-kit';
+import type { IIdentityProviderRepository } from '../../../../../entities/index.ts';
+import type { ILdapClientFactory } from '../../../../../ldap/index.ts';
+import type { IIdentityProviderAccountManager } from '../../../account/index.ts';
+type IdentityProviderAuthenticatorBaseContext = {
+    clientFactory: ILdapClientFactory;
+    accountManager: IIdentityProviderAccountManager;
+};
+export type IdentityProviderLdapCollectionAuthenticatorContext = IdentityProviderAuthenticatorBaseContext & {
+    repository: IIdentityProviderRepository;
+};
+export type IdentityProviderLdapAuthenticatorContext = IdentityProviderAuthenticatorBaseContext & {
+    provider: LdapIdentityProvider;
+};
+export {};
+//# sourceMappingURL=types.d.ts.map

package/dist/core/identity/provider/authentication/protocols/ldap/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../../../../../src/core/identity/provider/authentication/protocols/ldap/types.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,kBAAkB,CAAC;AAC7D,OAAO,KAAK,EAAE,2BAA2B,EAAE,MAAM,kCAAkC,CAAC;AACpF,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,8BAA8B,CAAC;AACvE,OAAO,KAAK,EAAE,+BAA+B,EAAE,MAAM,2BAA2B,CAAC;AAEjF,KAAK,wCAAwC,GAAG;IAC5C,aAAa,EAAE,kBAAkB,CAAC;IAClC,cAAc,EAAE,+BAA+B,CAAA;CAClD,CAAC;AAEF,MAAM,MAAM,kDAAkD,GAAG,wCAAwC,GAAG;IACxG,UAAU,EAAE,2BAA2B,CAAA;CAC1C,CAAC;AAEF,MAAM,MAAM,wCAAwC,GAAG,wCAAwC,GAAG;IAC9F,QAAQ,EAAE,oBAAoB,CAAA;CACjC,CAAC"}

package/dist/core/identity/provider/authentication/protocols/ldap/types.js

@@ -0,0 +1,8 @@
+/*
+ * Copyright (c) 2025.
+ * Author Peter Placzek (tada5hi)
+ * For the full copyright and license information,
+ * view the LICENSE file that was distributed with this source code.
+ */
+export {};
+//# sourceMappingURL=types.js.map

package/dist/core/identity/provider/authentication/protocols/ldap/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../../../../../../src/core/identity/provider/authentication/protocols/ldap/types.ts"],"names":[],"mappings":"AAAA;;;;;GAKG"}

package/dist/core/identity/provider/authentication/protocols/oauth2/index.d.ts

@@ -0,0 +1,3 @@
+export * from './module.ts';
+export * from './types.ts';
+//# sourceMappingURL=index.d.ts.map

package/dist/core/identity/provider/authentication/protocols/oauth2/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../../../src/core/identity/provider/authentication/protocols/oauth2/index.ts"],"names":[],"mappings":"AAOA,cAAc,aAAa,CAAC;AAC5B,cAAc,YAAY,CAAC"}

package/dist/core/identity/provider/authentication/protocols/oauth2/index.js

@@ -0,0 +1,9 @@
+/*
+ * Copyright (c) 2023.
+ * Author Peter Placzek (tada5hi)
+ * For the full copyright and license information,
+ * view the LICENSE file that was distributed with this source code.
+ */
+export * from "./module.js";
+export * from "./types.js";
+//# sourceMappingURL=index.js.map

package/dist/core/identity/provider/authentication/protocols/oauth2/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../../../../src/core/identity/provider/authentication/protocols/oauth2/index.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,cAAc,aAAa,CAAC;AAC5B,cAAc,YAAY,CAAC"}

package/dist/core/identity/provider/authentication/protocols/oauth2/module.d.ts

@@ -0,0 +1,19 @@
+import type { OAuth2IdentityProvider, OpenIDIdentityProvider, User } from '@authup/core-kit';
+import type { Result } from '@authup/kit';
+import type { AuthorizeParameters, TokenGrantResponse } from '@hapic/oauth2';
+import { OAuth2Client } from '@hapic/oauth2';
+import type { IIdentityProviderAccountManager } from '../../../account/index.ts';
+import type { IdentityProviderIdentity } from '../../../types.ts';
+import type { IOAuth2Authenticator, IdentityProviderOAuth2AuthenticatorContext, IdentityProviderOAuth2AuthenticatorOptions, OAuth2AuthorizationCodeGrantPayload } from './types.ts';
+export declare class IdentityProviderOAuth2Authenticator implements IOAuth2Authenticator<User> {
+    protected client: OAuth2Client;
+    protected options: IdentityProviderOAuth2AuthenticatorOptions;
+    protected accountManager: IIdentityProviderAccountManager;
+    protected provider: OAuth2IdentityProvider | OpenIDIdentityProvider;
+    constructor(ctx: IdentityProviderOAuth2AuthenticatorContext);
+    buildRedirectURL(parameters?: Partial<AuthorizeParameters>): string;
+    authenticate(params: OAuth2AuthorizationCodeGrantPayload): Promise<User>;
+    safeAuthenticate(params: OAuth2AuthorizationCodeGrantPayload): Promise<Result<User>>;
+    protected buildIdentityWithTokenGrantResponse(input: TokenGrantResponse): Promise<IdentityProviderIdentity>;
+}
+//# sourceMappingURL=module.d.ts.map

package/dist/core/identity/provider/authentication/protocols/oauth2/module.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"module.d.ts","sourceRoot":"","sources":["../../../../../../../src/core/identity/provider/authentication/protocols/oauth2/module.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,sBAAsB,EAAE,sBAAsB,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAC;AAE7F,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AAE1C,OAAO,KAAK,EAAE,mBAAmB,EAAE,kBAAkB,EAAE,MAAM,eAAe,CAAC;AAC7E,OAAO,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AAC7C,OAAO,KAAK,EAAE,+BAA+B,EAAE,MAAM,2BAA2B,CAAC;AACjF,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,mBAAmB,CAAC;AAClE,OAAO,KAAK,EACR,oBAAoB,EACpB,0CAA0C,EAC1C,0CAA0C,EAC1C,mCAAmC,EACtC,MAAM,YAAY,CAAC;AAEpB,qBAAa,mCAAoC,YAAW,oBAAoB,CAAC,IAAI,CAAC;IAClF,SAAS,CAAC,MAAM,EAAG,YAAY,CAAC;IAEhC,SAAS,CAAC,OAAO,EAAG,0CAA0C,CAAC;IAE/D,SAAS,CAAC,cAAc,EAAE,+BAA+B,CAAC;IAE1D,SAAS,CAAC,QAAQ,EAAG,sBAAsB,GAAG,sBAAsB,CAAC;gBAIzD,GAAG,EAAE,0CAA0C;IAoB3D,gBAAgB,CAAC,UAAU,GAAE,OAAO,CAAC,mBAAmB,CAAM,GAAI,MAAM;IAMlE,YAAY,CAAC,MAAM,EAAE,mCAAmC,GAAG,OAAO,CAAC,IAAI,CAAC;IAaxE,gBAAgB,CAAC,MAAM,EAAE,mCAAmC,GAAG,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;cAW1E,mCAAmC,CAAC,KAAK,EAAE,kBAAkB,GAAI,OAAO,CAAC,wBAAwB,CAAC;CAiBrH"}

package/dist/core/identity/provider/authentication/protocols/oauth2/module.js

@@ -0,0 +1,73 @@
+/*
+ * Copyright (c) 2023-2023.
+ * Author Peter Placzek (tada5hi)
+ * For the full copyright and license information,
+ * view the LICENSE file that was distributed with this source code.
+ */
+import { buildIdentityProviderAuthorizeCallbackPath } from '@authup/core-kit';
+import { extractTokenPayload } from '@authup/server-kit';
+import { OAuth2Client } from '@hapic/oauth2';
+export class IdentityProviderOAuth2Authenticator {
+    client;
+    options;
+    accountManager;
+    provider;
+    //----------------------------------------------------------------------
+    constructor(ctx) {
+        this.options = ctx.options;
+        this.accountManager = ctx.accountManager;
+        this.provider = ctx.provider;
+        this.client = new OAuth2Client({
+            options: {
+                clientId: ctx.provider.client_id,
+                clientSecret: ctx.provider.client_secret,
+                redirectUri: `${ctx.options.baseURL}${buildIdentityProviderAuthorizeCallbackPath(ctx.provider.id)}`,
+                scope: ctx.provider.scope,
+                authorizationEndpoint: ctx.provider.authorize_url,
+                tokenEndpoint: ctx.provider.token_url,
+                userinfoEndpoint: ctx.provider.user_info_url || undefined,
+            },
+        });
+    }
+    //----------------------------------------------------------------------
+    buildRedirectURL(parameters = {}) {
+        return this.client.authorize.buildURL(parameters);
+    }
+    //----------------------------------------------------------------------
+    async authenticate(params) {
+        const token = await this.client.token.createWithAuthorizationCode(params);
+        const identity = await this.buildIdentityWithTokenGrantResponse(token);
+        if (this.options.clientId) {
+            identity.clientId = this.options.clientId;
+        }
+        const account = await this.accountManager.save(identity);
+        return account.user;
+    }
+    async safeAuthenticate(params) {
+        try {
+            const data = await this.authenticate(params);
+            return { success: true, data };
+        }
+        catch (e) {
+            return { success: false, error: e };
+        }
+    }
+    //----------------------------------------------------------------------
+    async buildIdentityWithTokenGrantResponse(input) {
+        const payload = extractTokenPayload(input.access_token);
+        return {
+            id: payload.sub,
+            attributeCandidates: {
+                name: [
+                    payload.sub,
+                ],
+                email: [
+                    payload.email,
+                ],
+            },
+            data: payload,
+            provider: this.provider,
+        };
+    }
+}
+//# sourceMappingURL=module.js.map

package/dist/core/identity/provider/authentication/protocols/oauth2/module.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"module.js","sourceRoot":"","sources":["../../../../../../../src/core/identity/provider/authentication/protocols/oauth2/module.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAGH,OAAO,EAAE,0CAA0C,EAAE,MAAM,kBAAkB,CAAC;AAE9E,OAAO,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAC;AAEzD,OAAO,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AAU7C,MAAM,OAAO,mCAAmC;IAClC,MAAM,CAAgB;IAEtB,OAAO,CAA8C;IAErD,cAAc,CAAkC;IAEhD,QAAQ,CAAmD;IAErE,wEAAwE;IAExE,YAAY,GAA+C;QACvD,IAAI,CAAC,OAAO,GAAG,GAAG,CAAC,OAAO,CAAC;QAC3B,IAAI,CAAC,cAAc,GAAG,GAAG,CAAC,cAAc,CAAC;QACzC,IAAI,CAAC,QAAQ,GAAG,GAAG,CAAC,QAAQ,CAAC;QAE7B,IAAI,CAAC,MAAM,GAAG,IAAI,YAAY,CAAC;YAC3B,OAAO,EAAE;gBACL,QAAQ,EAAE,GAAG,CAAC,QAAQ,CAAC,SAAS;gBAChC,YAAY,EAAE,GAAG,CAAC,QAAQ,CAAC,aAAa;gBACxC,WAAW,EAAE,GAAG,GAAG,CAAC,OAAO,CAAC,OAAO,GAAG,0CAA0C,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC,EAAE;gBACnG,KAAK,EAAE,GAAG,CAAC,QAAQ,CAAC,KAAK;gBACzB,qBAAqB,EAAE,GAAG,CAAC,QAAQ,CAAC,aAAa;gBACjD,aAAa,EAAE,GAAG,CAAC,QAAQ,CAAC,SAAS;gBACrC,gBAAgB,EAAE,GAAG,CAAC,QAAQ,CAAC,aAAa,IAAI,SAAS;aAC5D;SACJ,CAAC,CAAC;IACP,CAAC;IAED,wEAAwE;IAExE,gBAAgB,CAAC,aAA2C,EAAE;QAC1D,OAAO,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC;IACtD,CAAC;IAED,wEAAwE;IAExE,KAAK,CAAC,YAAY,CAAC,MAA2C;QAC1D,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,2BAA2B,CAAC,MAAM,CAAC,CAAC;QAE1E,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,mCAAmC,CAAC,KAAK,CAAC,CAAC;QACvE,IAAI,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC;YACxB,QAAQ,CAAC,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC;QAC9C,CAAC;QAED,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAEzD,OAAO,OAAO,CAAC,IAAI,CAAC;IACxB,CAAC;IAED,KAAK,CAAC,gBAAgB,CAAC,MAA2C;QAC9D,IAAI,CAAC;YACD,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC;YAC7C,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;QACnC,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACT,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,CAAU,EAAE,CAAC;QACjD,CAAC;IACL,CAAC;IAED,wEAAwE;IAE9D,KAAK,CAAC,mCAAmC,CAAC,KAAyB;QACzE,MAAM,OAAO,GAAG,mBAAmB,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;QAExD,OAAO;YACH,EAAE,EAAE,OAAO,CAAC,GAAI;YAChB,mBAAmB,EAAE;gBACjB,IAAI,EAAE;oBACF,OAAO,CAAC,GAAG;iBACd;gBACD,KAAK,EAAE;oBACH,OAAO,CAAC,KAAK;iBAChB;aACJ;YACD,IAAI,EAAE,OAAO;YACb,QAAQ,EAAE,IAAI,CAAC,QAAQ;SAC1B,CAAC;IACN,CAAC;CACJ"}

package/dist/core/identity/provider/authentication/protocols/oauth2/types.d.ts

@@ -0,0 +1,23 @@
+import type { OAuth2IdentityProvider, OpenIDIdentityProvider } from '@authup/core-kit';
+import type { ObjectLiteral, Result } from '@authup/kit';
+import type { AuthorizeParameters } from '@hapic/oauth2';
+import type { IIdentityProviderAccountManager } from '../../../account/index.ts';
+export type OAuth2AuthorizationCodeGrantPayload = {
+    code: string;
+    code_verifier?: string;
+};
+export interface IOAuth2Authenticator<T extends ObjectLiteral = ObjectLiteral> {
+    authenticate(params: OAuth2AuthorizationCodeGrantPayload): Promise<T>;
+    safeAuthenticate(params: OAuth2AuthorizationCodeGrantPayload): Promise<Result<T>>;
+    buildRedirectURL(parameters?: Partial<AuthorizeParameters>): string;
+}
+export type IdentityProviderOAuth2AuthenticatorOptions = {
+    baseURL: string;
+    clientId?: string;
+};
+export type IdentityProviderOAuth2AuthenticatorContext = {
+    options: IdentityProviderOAuth2AuthenticatorOptions;
+    accountManager: IIdentityProviderAccountManager;
+    provider: OAuth2IdentityProvider | OpenIDIdentityProvider;
+};
+//# sourceMappingURL=types.d.ts.map

package/dist/core/identity/provider/authentication/protocols/oauth2/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../../../../../src/core/identity/provider/authentication/protocols/oauth2/types.ts"],"names":[],"mappings":"AAMA,OAAO,KAAK,EAAE,sBAAsB,EAAE,sBAAsB,EAAE,MAAM,kBAAkB,CAAC;AACvF,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AACzD,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,eAAe,CAAC;AACzD,OAAO,KAAK,EAAE,+BAA+B,EAAE,MAAM,2BAA2B,CAAC;AAEjF,MAAM,MAAM,mCAAmC,GAAG;IAC9C,IAAI,EAAE,MAAM,CAAA;IACZ,aAAa,CAAC,EAAE,MAAM,CAAA;CACzB,CAAC;AAEF,MAAM,WAAW,oBAAoB,CAAC,CAAC,SAAS,aAAa,GAAG,aAAa;IACzE,YAAY,CAAC,MAAM,EAAE,mCAAmC,GAAI,OAAO,CAAC,CAAC,CAAC,CAAC;IAEvE,gBAAgB,CAAC,MAAM,EAAE,mCAAmC,GAAI,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;IAEnF,gBAAgB,CAAC,UAAU,CAAC,EAAE,OAAO,CAAC,mBAAmB,CAAC,GAAG,MAAM,CAAC;CACvE;AAED,MAAM,MAAM,0CAA0C,GAAG;IACrD,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,CAAC,EAAE,MAAM,CAAA;CACpB,CAAC;AAEF,MAAM,MAAM,0CAA0C,GAAG;IACrD,OAAO,EAAE,0CAA0C,CAAC;IACpD,cAAc,EAAE,+BAA+B,CAAA;IAC/C,QAAQ,EAAE,sBAAsB,GAAG,sBAAsB,CAAC;CAC7D,CAAC"}

package/dist/core/identity/provider/authentication/protocols/oauth2/types.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=types.js.map

package/dist/core/identity/provider/authentication/protocols/oauth2/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../../../../../../src/core/identity/provider/authentication/protocols/oauth2/types.ts"],"names":[],"mappings":""}

package/dist/core/identity/provider/authentication/protocols/open-id/index.d.ts

@@ -0,0 +1,2 @@
+export * from './module.ts';
+//# sourceMappingURL=index.d.ts.map

package/dist/core/identity/provider/authentication/protocols/open-id/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../../../src/core/identity/provider/authentication/protocols/open-id/index.ts"],"names":[],"mappings":"AAOA,cAAc,aAAa,CAAC"}

package/dist/core/identity/provider/authentication/protocols/open-id/index.js

@@ -0,0 +1,8 @@
+/*
+ * Copyright (c) 2025.
+ * Author Peter Placzek (tada5hi)
+ * For the full copyright and license information,
+ * view the LICENSE file that was distributed with this source code.
+ */
+export * from "./module.js";
+//# sourceMappingURL=index.js.map

package/dist/core/identity/provider/authentication/protocols/open-id/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../../../../src/core/identity/provider/authentication/protocols/open-id/index.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,cAAc,aAAa,CAAC"}

package/dist/core/identity/provider/authentication/protocols/open-id/module.d.ts

@@ -0,0 +1,7 @@
+import type { TokenGrantResponse } from '@hapic/oauth2';
+import type { IdentityProviderIdentity } from '../../../types.ts';
+import { IdentityProviderOAuth2Authenticator } from '../oauth2/index.ts';
+export declare class IdentityProviderOpenIDAuthenticator extends IdentityProviderOAuth2Authenticator {
+    protected buildIdentityWithTokenGrantResponse(input: TokenGrantResponse): Promise<IdentityProviderIdentity>;
+}
+//# sourceMappingURL=module.d.ts.map

package/dist/core/identity/provider/authentication/protocols/open-id/module.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"module.d.ts","sourceRoot":"","sources":["../../../../../../../src/core/identity/provider/authentication/protocols/open-id/module.ts"],"names":[],"mappings":"AAQA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,eAAe,CAAC;AACxD,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,mBAAmB,CAAC;AAClE,OAAO,EAAE,mCAAmC,EAAE,MAAM,oBAAoB,CAAC;AAEzE,qBAAa,mCAAoC,SAAQ,mCAAmC;cACxE,mCAAmC,CAAC,KAAK,EAAE,kBAAkB,GAAG,OAAO,CAAC,wBAAwB,CAAC;CAmBpH"}

package/dist/core/identity/provider/authentication/protocols/open-id/module.js

@@ -0,0 +1,29 @@
+/*
+ * Copyright (c) 2023-2025.
+ * Author Peter Placzek (tada5hi)
+ * For the full copyright and license information,
+ * view the LICENSE file that was distributed with this source code.
+ */
+import { extractTokenPayload } from '@authup/server-kit';
+import { IdentityProviderOAuth2Authenticator } from "../oauth2/index.js";
+export class IdentityProviderOpenIDAuthenticator extends IdentityProviderOAuth2Authenticator {
+    async buildIdentityWithTokenGrantResponse(input) {
+        const payload = extractTokenPayload(input.access_token);
+        return {
+            id: payload.sub,
+            attributeCandidates: {
+                name: [
+                    payload.preferred_username,
+                    payload.nickname,
+                    payload.sub,
+                ],
+                email: [
+                    payload.email,
+                ],
+            },
+            data: payload,
+            provider: this.provider,
+        };
+    }
+}
+//# sourceMappingURL=module.js.map

package/dist/core/identity/provider/authentication/protocols/open-id/module.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"module.js","sourceRoot":"","sources":["../../../../../../../src/core/identity/provider/authentication/protocols/open-id/module.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAC;AAGzD,OAAO,EAAE,mCAAmC,EAAE,MAAM,oBAAoB,CAAC;AAEzE,MAAM,OAAO,mCAAoC,SAAQ,mCAAmC;IAC9E,KAAK,CAAC,mCAAmC,CAAC,KAAyB;QACzE,MAAM,OAAO,GAAG,mBAAmB,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;QAExD,OAAO;YACH,EAAE,EAAE,OAAO,CAAC,GAAI;YAChB,mBAAmB,EAAE;gBACjB,IAAI,EAAE;oBACF,OAAO,CAAC,kBAAkB;oBAC1B,OAAO,CAAC,QAAQ;oBAChB,OAAO,CAAC,GAAG;iBACd;gBACD,KAAK,EAAE;oBACH,OAAO,CAAC,KAAK;iBAChB;aACJ;YACD,IAAI,EAAE,OAAO;YACb,QAAQ,EAAE,IAAI,CAAC,QAAQ;SAC1B,CAAC;IACN,CAAC;CACJ"}

package/dist/core/identity/provider/constants.d.ts

@@ -0,0 +1,5 @@
+export declare enum IdentityProviderIdentityOperation {
+    CREATE = "create",
+    UPDATE = "update"
+}
+//# sourceMappingURL=constants.d.ts.map

package/dist/core/identity/provider/constants.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"constants.d.ts","sourceRoot":"","sources":["../../../../src/core/identity/provider/constants.ts"],"names":[],"mappings":"AAOA,oBAAY,iCAAiC;IACzC,MAAM,WAAW;IACjB,MAAM,WAAW;CACpB"}

package/dist/core/identity/provider/constants.js

@@ -0,0 +1,12 @@
+/*
+ * Copyright (c) 2025.
+ * Author Peter Placzek (tada5hi)
+ * For the full copyright and license information,
+ * view the LICENSE file that was distributed with this source code.
+ */
+export var IdentityProviderIdentityOperation;
+(function (IdentityProviderIdentityOperation) {
+    IdentityProviderIdentityOperation["CREATE"] = "create";
+    IdentityProviderIdentityOperation["UPDATE"] = "update";
+})(IdentityProviderIdentityOperation || (IdentityProviderIdentityOperation = {}));
+//# sourceMappingURL=constants.js.map

package/dist/core/identity/provider/constants.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"constants.js","sourceRoot":"","sources":["../../../../src/core/identity/provider/constants.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,MAAM,CAAN,IAAY,iCAGX;AAHD,WAAY,iCAAiC;IACzC,sDAAiB,CAAA;IACjB,sDAAiB,CAAA;AACrB,CAAC,EAHW,iCAAiC,KAAjC,iCAAiC,QAG5C"}

package/dist/core/identity/provider/index.d.ts

@@ -0,0 +1,5 @@
+export * from './account/index.ts';
+export * from './authentication/index.ts';
+export * from './mapper/index.ts';
+export * from './types.ts';
+//# sourceMappingURL=index.d.ts.map

package/dist/core/identity/provider/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/core/identity/provider/index.ts"],"names":[],"mappings":"AAOA,cAAc,oBAAoB,CAAC;AACnC,cAAc,2BAA2B,CAAC;AAC1C,cAAc,mBAAmB,CAAC;AAClC,cAAc,YAAY,CAAC"}

package/dist/core/identity/provider/index.js

@@ -0,0 +1,11 @@
+/*
+ * Copyright (c) 2025.
+ * Author Peter Placzek (tada5hi)
+ * For the full copyright and license information,
+ * view the LICENSE file that was distributed with this source code.
+ */
+export * from "./account/index.js";
+export * from "./authentication/index.js";
+export * from "./mapper/index.js";
+export * from "./types.js";
+//# sourceMappingURL=index.js.map

package/dist/core/identity/provider/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../src/core/identity/provider/index.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,cAAc,oBAAoB,CAAC;AACnC,cAAc,2BAA2B,CAAC;AAC1C,cAAc,mBAAmB,CAAC;AAClC,cAAc,YAAY,CAAC"}

package/dist/core/identity/provider/mapper/attributes/index.d.ts

@@ -0,0 +1,3 @@
+export * from './module.ts';
+export * from './types.ts';
+//# sourceMappingURL=index.d.ts.map

package/dist/core/identity/provider/mapper/attributes/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../../src/core/identity/provider/mapper/attributes/index.ts"],"names":[],"mappings":"AAOA,cAAc,aAAa,CAAC;AAC5B,cAAc,YAAY,CAAC"}

package/dist/core/identity/provider/mapper/attributes/index.js

@@ -0,0 +1,9 @@
+/*
+ * Copyright (c) 2025.
+ * Author Peter Placzek (tada5hi)
+ * For the full copyright and license information,
+ * view the LICENSE file that was distributed with this source code.
+ */
+export * from "./module.js";
+export * from "./types.js";
+//# sourceMappingURL=index.js.map

package/dist/core/identity/provider/mapper/attributes/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../../../src/core/identity/provider/mapper/attributes/index.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,cAAc,aAAa,CAAC;AAC5B,cAAc,YAAY,CAAC"}

package/dist/core/identity/provider/mapper/attributes/module.d.ts

@@ -0,0 +1,10 @@
+import type { IdentityProviderIdentity } from '../../types.ts';
+import { IdentityProviderAccountBaseMapper } from '../base.ts';
+import type { IdentityProviderMapperElement } from '../types.ts';
+import type { IIdentityProviderAttributeMappingRepository } from './types.ts';
+export declare class IdentityProviderAttributeMapper extends IdentityProviderAccountBaseMapper {
+    protected repository: IIdentityProviderAttributeMappingRepository;
+    constructor(repository: IIdentityProviderAttributeMappingRepository);
+    execute(identity: IdentityProviderIdentity): Promise<IdentityProviderMapperElement[]>;
+}
+//# sourceMappingURL=module.d.ts.map

package/dist/core/identity/provider/mapper/attributes/module.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"module.d.ts","sourceRoot":"","sources":["../../../../../../src/core/identity/provider/mapper/attributes/module.ts"],"names":[],"mappings":"AAMA,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,gBAAgB,CAAC;AAC/D,OAAO,EAAE,iCAAiC,EAAE,MAAM,YAAY,CAAC;AAC/D,OAAO,KAAK,EAAE,6BAA6B,EAAE,MAAM,aAAa,CAAC;AACjE,OAAO,KAAK,EAAE,2CAA2C,EAAE,MAAM,YAAY,CAAC;AAE9E,qBAAa,+BAAgC,SAAQ,iCAAiC;IAClF,SAAS,CAAC,UAAU,EAAE,2CAA2C,CAAC;gBAEtD,UAAU,EAAE,2CAA2C;IAM7D,OAAO,CAAC,QAAQ,EAAE,wBAAwB,GAAG,OAAO,CAAC,6BAA6B,EAAE,CAAC;CAkB9F"}

package/dist/core/identity/provider/mapper/attributes/module.js

@@ -0,0 +1,23 @@
+import { IdentityProviderAccountBaseMapper } from "../base.js";
+export class IdentityProviderAttributeMapper extends IdentityProviderAccountBaseMapper {
+    repository;
+    constructor(repository) {
+        super();
+        this.repository = repository;
+    }
+    async execute(identity) {
+        const entities = await this.repository.findByProviderId(identity.provider.id);
+        const items = [];
+        for (const entity of entities) {
+            const [operation, value] = this.resolve(identity, entity);
+            items.push({
+                key: entity.target_name,
+                value: entity.target_value ? entity.target_value : value,
+                realmId: entity.provider_realm_id,
+                operation,
+            });
+        }
+        return items;
+    }
+}
+//# sourceMappingURL=module.js.map

package/dist/core/identity/provider/mapper/attributes/module.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"module.js","sourceRoot":"","sources":["../../../../../../src/core/identity/provider/mapper/attributes/module.ts"],"names":[],"mappings":"AAOA,OAAO,EAAE,iCAAiC,EAAE,MAAM,YAAY,CAAC;AAI/D,MAAM,OAAO,+BAAgC,SAAQ,iCAAiC;IACxE,UAAU,CAA8C;IAElE,YAAY,UAAuD;QAC/D,KAAK,EAAE,CAAC;QAER,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC;IACjC,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,QAAkC;QAC5C,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,gBAAgB,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;QAE9E,MAAM,KAAK,GAAqC,EAAE,CAAC;QACnD,KAAK,MAAM,MAAM,IAAI,QAAQ,EAAE,CAAC;YAE5B,MAAM,CAAC,SAAS,EAAE,KAAK,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;YAE1D,KAAK,CAAC,IAAI,CAAC;gBACP,GAAG,EAAE,MAAM,CAAC,WAAW;gBACvB,KAAK,EAAE,MAAM,CAAC,YAAY,CAAC,CAAC,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,CAAC,KAAK;gBACxD,OAAO,EAAE,MAAM,CAAC,iBAAiB;gBACjC,SAAS;aACZ,CAAC,CAAC;QACP,CAAC;QAED,OAAO,KAAK,CAAC;IACjB,CAAC;CACJ"}

package/dist/core/identity/provider/mapper/attributes/types.d.ts

@@ -0,0 +1,5 @@
+import type { IdentityProviderAttributeMapping } from '@authup/core-kit';
+export interface IIdentityProviderAttributeMappingRepository {
+    findByProviderId(providerId: string): Promise<IdentityProviderAttributeMapping[]>;
+}
+//# sourceMappingURL=types.d.ts.map

package/dist/core/identity/provider/mapper/attributes/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../../../../src/core/identity/provider/mapper/attributes/types.ts"],"names":[],"mappings":"AAMA,OAAO,KAAK,EAAE,gCAAgC,EAAE,MAAM,kBAAkB,CAAC;AAEzE,MAAM,WAAW,2CAA2C;IACxD,gBAAgB,CAAC,UAAU,EAAE,MAAM,GAAI,OAAO,CAAC,gCAAgC,EAAE,CAAC,CAAC;CACtF"}

package/dist/core/identity/provider/mapper/attributes/types.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=types.js.map

package/dist/core/identity/provider/mapper/attributes/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../../../../../src/core/identity/provider/mapper/attributes/types.ts"],"names":[],"mappings":""}

package/dist/core/identity/provider/mapper/base.d.ts

@@ -0,0 +1,9 @@
+import type { IdentityProviderBaseMapping } from '@authup/core-kit';
+import type { IdentityProviderIdentity } from '../types.ts';
+import { IdentityProviderMapperOperation } from './constants.ts';
+import type { IIdentityProviderMapper, IdentityProviderMapperElement } from './types.ts';
+export declare abstract class IdentityProviderAccountBaseMapper implements IIdentityProviderMapper {
+    protected resolve(identity: IdentityProviderIdentity, mapping: IdentityProviderBaseMapping): [IdentityProviderMapperOperation, unknown] | [IdentityProviderMapperOperation];
+    abstract execute(identity: IdentityProviderIdentity): Promise<IdentityProviderMapperElement[]>;
+}
+//# sourceMappingURL=base.d.ts.map