@authup/server-core 1.0.0-beta.33 → 1.0.0-beta.35

package/dist/core/identity/password-recovery/service.js

@@ -1,171 +0,0 @@
-/*
- * Copyright (c) 2025.
- * Author Peter Placzek (tada5hi)
- * For the full copyright and license information,
- * view the LICENSE file that was distributed with this source code.
- */
-import { BadRequestError, NotFoundError } from '@ebec/http';
-import { createValidationChain, createValidator } from '@validup/adapter-validator';
-import { randomBytes } from 'node:crypto';
-import { Container } from 'validup';
-import { UserCredentialsService } from "../../authentication/credential/entities/user/module.js";
-export class PasswordRecoveryService {
-    options;
-    repository;
-    realmRepository;
-    mailClient;
-    constructor(ctx) {
-        this.options = ctx.options;
-        this.repository = ctx.repository;
-        this.realmRepository = ctx.realmRepository;
-        this.mailClient = ctx.mailClient;
-    }
-    async forgotPassword(data) {
-        if (!this.options.passwordRecoveryEnabled) {
-            throw new BadRequestError('Password recovery is not enabled.');
-        }
-        if (!this.options.emailVerificationEnabled) {
-            throw new BadRequestError('Email verification is not enabled, but required to reset a password.');
-        }
-        const validated = await this.runForgotPasswordValidator(data);
-        const realm = await this.realmRepository.resolve(validated.realm_id, true);
-        const where = {
-            ...(validated.name ? { name: validated.name } : {}),
-            ...(validated.email ? { email: validated.email } : {}),
-            realm_id: realm.id,
-        };
-        const entity = await this.repository.findOneByWithEmail(where);
-        if (!entity) {
-            throw new NotFoundError();
-        }
-        const merged = this.repository.merge(entity, {
-            reset_expires: new Date(Date.now() + (1000 * 60 * 30)).toISOString(),
-            reset_hash: randomBytes(32).toString('hex'),
-        });
-        await this.repository.save(merged);
-        try {
-            await this.mailClient.send({
-                to: entity.email,
-                subject: 'Forgot Password - Reset code',
-                html: `
-                <p>Please use the code below to reset your account password.</p>
-                <p>${merged.reset_hash}</p>
-                `,
-            });
-        }
-        catch {
-            this.repository.merge(merged, {
-                reset_hash: null,
-                reset_expires: null,
-            });
-            await this.repository.save(merged);
-            throw new BadRequestError('Password recovery failed. Could not send reset email.');
-        }
-        return { reset_expires: merged.reset_expires };
-    }
-    async resetPassword(data) {
-        if (!this.options.passwordRecoveryEnabled) {
-            throw new BadRequestError('Password recovery is not enabled.');
-        }
-        const validated = await this.runResetPasswordValidator(data);
-        await this.repository.validateJoinColumns(validated);
-        const realm = await this.realmRepository.resolve(validated.realm_id, true);
-        const where = {
-            ...(validated.name ? { name: validated.name } : {}),
-            ...(validated.email ? { email: validated.email } : {}),
-            reset_hash: validated.token,
-            realm_id: realm.id,
-        };
-        const entity = await this.repository.findOneBy(where);
-        if (!entity) {
-            throw new NotFoundError();
-        }
-        if (!entity.reset_expires || new Date(entity.reset_expires) < new Date()) {
-            throw new BadRequestError('Reset token has expired.');
-        }
-        const credentialsService = new UserCredentialsService();
-        const hashedPassword = await credentialsService.protect(validated.password);
-        const merged = this.repository.merge(entity, {
-            reset_at: new Date().toISOString(),
-            reset_hash: null,
-            reset_expires: null,
-            password: hashedPassword,
-        });
-        await this.repository.save(merged);
-        return { reset_at: merged.reset_at };
-    }
-    async runForgotPasswordValidator(data) {
-        const validator = new Container({});
-        const oneOfContainer = new Container({ oneOf: true });
-        oneOfContainer.mount('email', createValidator(() => {
-            const chain = createValidationChain();
-            return chain
-                .exists()
-                .notEmpty()
-                .isEmail();
-        }));
-        oneOfContainer.mount('name', createValidator(() => {
-            const chain = createValidationChain();
-            return chain
-                .exists()
-                .notEmpty()
-                .isString();
-        }));
-        validator.mount(oneOfContainer);
-        validator.mount('realm_id', { optional: true }, createValidator(() => {
-            const chain = createValidationChain();
-            return chain.exists()
-                .isUUID()
-                .optional({ values: 'null' });
-        }));
-        return validator.run(data);
-    }
-    async runResetPasswordValidator(data) {
-        const validator = new Container({});
-        const oneOfContainer = new Container({ oneOf: true });
-        oneOfContainer.mount('email', createValidator(() => {
-            const chain = createValidationChain();
-            return chain
-                .exists()
-                .notEmpty()
-                .isEmail();
-        }));
-        oneOfContainer.mount('name', createValidator(() => {
-            const chain = createValidationChain();
-            return chain
-                .exists()
-                .notEmpty()
-                .isString();
-        }));
-        validator.mount(oneOfContainer);
-        validator.mount('realm_id', { optional: true }, createValidator(() => {
-            const chain = createValidationChain();
-            return chain
-                .exists()
-                .isUUID()
-                .optional({ values: 'null' });
-        }));
-        validator.mount('token', createValidator(() => {
-            const chain = createValidationChain();
-            return chain
-                .exists()
-                .notEmpty()
-                .isLength({
-                min: 3,
-                max: 256,
-            });
-        }));
-        validator.mount('password', createValidator(() => {
-            const chain = createValidationChain();
-            return chain
-                .exists()
-                .notEmpty()
-                .isLength({
-                min: 5,
-                max: 512,
-            });
-        }));
-        return validator.run(data);
-    }
-}
-//# sourceMappingURL=service.js.map

package/dist/core/identity/password-recovery/service.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"service.js","sourceRoot":"","sources":["../../../../src/core/identity/password-recovery/service.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,eAAe,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAC5D,OAAO,EAAE,qBAAqB,EAAE,eAAe,EAAE,MAAM,4BAA4B,CAAC;AACpF,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC1C,OAAO,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AACpC,OAAO,EAAE,sBAAsB,EAAE,MAAM,yDAAyD,CAAC;AAWjG,MAAM,OAAO,uBAAuB;IACtB,OAAO,CAAiC;IAExC,UAAU,CAAkB;IAE5B,eAAe,CAAmB;IAElC,UAAU,CAAc;IAElC,YAAY,GAAmC;QAC3C,IAAI,CAAC,OAAO,GAAG,GAAG,CAAC,OAAO,CAAC;QAC3B,IAAI,CAAC,UAAU,GAAG,GAAG,CAAC,UAAU,CAAC;QACjC,IAAI,CAAC,eAAe,GAAG,GAAG,CAAC,eAAe,CAAC;QAC3C,IAAI,CAAC,UAAU,GAAG,GAAG,CAAC,UAAU,CAAC;IACrC,CAAC;IAED,KAAK,CAAC,cAAc,CAAC,IAAyB;QAC1C,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,uBAAuB,EAAE,CAAC;YACxC,MAAM,IAAI,eAAe,CAAC,mCAAmC,CAAC,CAAC;QACnE,CAAC;QAED,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,wBAAwB,EAAE,CAAC;YACzC,MAAM,IAAI,eAAe,CAAC,sEAAsE,CAAC,CAAC;QACtG,CAAC;QAED,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,0BAA0B,CAAC,IAAI,CAAC,CAAC;QAE9D,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,eAAe,CAAC,OAAO,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;QAE3E,MAAM,KAAK,GAAwB;YAC/B,GAAG,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,SAAS,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACnD,GAAG,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,SAAS,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACtD,QAAQ,EAAE,KAAK,CAAC,EAAE;SACrB,CAAC;QAEF,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,kBAAkB,CAAC,KAAK,CAAC,CAAC;QAE/D,IAAI,CAAC,MAAM,EAAE,CAAC;YACV,MAAM,IAAI,aAAa,EAAE,CAAC;QAC9B,CAAC;QAED,MAAM,MAAM,GAAG,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,MAAM,EAAE;YACzC,aAAa,EAAE,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,IAAI,GAAG,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE;YACpE,UAAU,EAAE,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC;SAC9C,CAAC,CAAC;QAEH,MAAM,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAEnC,IAAI,CAAC;YACD,MAAM,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;gBACvB,EAAE,EAAE,MAAM,CAAC,KAAK;gBAChB,OAAO,EAAE,8BAA8B;gBACvC,IAAI,EAAE;;qBAED,MAAM,CAAC,UAAU;iBACrB;aACJ,CAAC,CAAC;QACP,CAAC;QAAC,MAAM,CAAC;YACL,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,MAAM,EAAE;gBAC1B,UAAU,EAAE,IAAI;gBAChB,aAAa,EAAE,IAAI;aACtB,CAAC,CAAC;YACH,MAAM,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YAEnC,MAAM,IAAI,eAAe,CAAC,uDAAuD,CAAC,CAAC;QACvF,CAAC;QAED,OAAO,EAAE,aAAa,EAAE,MAAM,CAAC,aAAc,EAAE,CAAC;IACpD,CAAC;IAED,KAAK,CAAC,aAAa,CAAC,IAAyB;QACzC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,uBAAuB,EAAE,CAAC;YACxC,MAAM,IAAI,eAAe,CAAC,mCAAmC,CAAC,CAAC;QACnE,CAAC;QAED,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,yBAAyB,CAAC,IAAI,CAAC,CAAC;QAE7D,MAAM,IAAI,CAAC,UAAU,CAAC,mBAAmB,CAAC,SAAS,CAAC,CAAC;QAErD,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,eAAe,CAAC,OAAO,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;QAE3E,MAAM,KAAK,GAAwB;YAC/B,GAAG,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,SAAS,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACnD,GAAG,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,SAAS,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACtD,UAAU,EAAE,SAAS,CAAC,KAAK;YAC3B,QAAQ,EAAE,KAAK,CAAC,EAAE;SACrB,CAAC;QAEF,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;QACtD,IAAI,CAAC,MAAM,EAAE,CAAC;YACV,MAAM,IAAI,aAAa,EAAE,CAAC;QAC9B,CAAC;QAED,IAAI,CAAC,MAAM,CAAC,aAAa,IAAI,IAAI,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,GAAG,IAAI,IAAI,EAAE,EAAE,CAAC;YACvE,MAAM,IAAI,eAAe,CAAC,0BAA0B,CAAC,CAAC;QAC1D,CAAC;QAED,MAAM,kBAAkB,GAAG,IAAI,sBAAsB,EAAE,CAAC;QACxD,MAAM,cAAc,GAAG,MAAM,kBAAkB,CAAC,OAAO,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;QAE5E,MAAM,MAAM,GAAG,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,MAAM,EAAE;YACzC,QAAQ,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YAClC,UAAU,EAAE,IAAI;YAChB,aAAa,EAAE,IAAI;YACnB,QAAQ,EAAE,cAAc;SAC3B,CAAC,CAAC;QAEH,MAAM,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAEnC,OAAO,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAS,EAAE,CAAC;IAC1C,CAAC;IAEO,KAAK,CAAC,0BAA0B,CAAC,IAAyB;QAC9D,MAAM,SAAS,GAAG,IAAI,SAAS,CAAM,EAAE,CAAC,CAAC;QAEzC,MAAM,cAAc,GAAG,IAAI,SAAS,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QAEtD,cAAc,CAAC,KAAK,CAAC,OAAO,EAAE,eAAe,CAAC,GAAG,EAAE;YAC/C,MAAM,KAAK,GAAG,qBAAqB,EAAE,CAAC;YACtC,OAAO,KAAK;iBACP,MAAM,EAAE;iBACR,QAAQ,EAAE;iBACV,OAAO,EAAE,CAAC;QACnB,CAAC,CAAC,CAAC,CAAC;QAEJ,cAAc,CAAC,KAAK,CAChB,MAAM,EACN,eAAe,CAAC,GAAG,EAAE;YACjB,MAAM,KAAK,GAAG,qBAAqB,EAAE,CAAC;YACtC,OAAO,KAAK;iBACP,MAAM,EAAE;iBACR,QAAQ,EAAE;iBACV,QAAQ,EAAE,CAAC;QACpB,CAAC,CAAC,CACL,CAAC;QAEF,SAAS,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC;QAEhC,SAAS,CAAC,KAAK,CACX,UAAU,EACV,EAAE,QAAQ,EAAE,IAAI,EAAE,EAClB,eAAe,CAAC,GAAG,EAAE;YACjB,MAAM,KAAK,GAAG,qBAAqB,EAAE,CAAC;YACtC,OAAO,KAAK,CAAC,MAAM,EAAE;iBAChB,MAAM,EAAE;iBACR,QAAQ,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;QACtC,CAAC,CAAC,CACL,CAAC;QAEF,OAAO,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IAC/B,CAAC;IAEO,KAAK,CAAC,yBAAyB,CAAC,IAAyB;QAC7D,MAAM,SAAS,GAAG,IAAI,SAAS,CAAM,EAAE,CAAC,CAAC;QAEzC,MAAM,cAAc,GAAG,IAAI,SAAS,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QACtD,cAAc,CAAC,KAAK,CAChB,OAAO,EACP,eAAe,CAAC,GAAG,EAAE;YACjB,MAAM,KAAK,GAAG,qBAAqB,EAAE,CAAC;YACtC,OAAO,KAAK;iBACP,MAAM,EAAE;iBACR,QAAQ,EAAE;iBACV,OAAO,EAAE,CAAC;QACnB,CAAC,CAAC,CACL,CAAC;QACF,cAAc,CAAC,KAAK,CAChB,MAAM,EACN,eAAe,CAAC,GAAG,EAAE;YACjB,MAAM,KAAK,GAAG,qBAAqB,EAAE,CAAC;YACtC,OAAO,KAAK;iBACP,MAAM,EAAE;iBACR,QAAQ,EAAE;iBACV,QAAQ,EAAE,CAAC;QACpB,CAAC,CAAC,CACL,CAAC;QAEF,SAAS,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC;QAEhC,SAAS,CAAC,KAAK,CACX,UAAU,EACV,EAAE,QAAQ,EAAE,IAAI,EAAE,EAClB,eAAe,CAAC,GAAG,EAAE;YACjB,MAAM,KAAK,GAAG,qBAAqB,EAAE,CAAC;YACtC,OAAO,KAAK;iBACP,MAAM,EAAE;iBACR,MAAM,EAAE;iBACR,QAAQ,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;QACtC,CAAC,CAAC,CACL,CAAC;QAEF,SAAS,CAAC,KAAK,CACX,OAAO,EACP,eAAe,CAAC,GAAG,EAAE;YACjB,MAAM,KAAK,GAAG,qBAAqB,EAAE,CAAC;YACtC,OAAO,KAAK;iBACP,MAAM,EAAE;iBACR,QAAQ,EAAE;iBACV,QAAQ,CAAC;gBACN,GAAG,EAAE,CAAC;gBACN,GAAG,EAAE,GAAG;aACX,CAAC,CAAC;QACX,CAAC,CAAC,CACL,CAAC;QAEF,SAAS,CAAC,KAAK,CACX,UAAU,EACV,eAAe,CAAC,GAAG,EAAE;YACjB,MAAM,KAAK,GAAG,qBAAqB,EAAE,CAAC;YACtC,OAAO,KAAK;iBACP,MAAM,EAAE;iBACR,QAAQ,EAAE;iBACV,QAAQ,CAAC;gBACN,GAAG,EAAE,CAAC;gBACN,GAAG,EAAE,GAAG;aACX,CAAC,CAAC;QACX,CAAC,CAAC,CACL,CAAC;QAEF,OAAO,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IAC/B,CAAC;CACJ"}

package/dist/core/identity/password-recovery/types.js

@@ -1,8 +0,0 @@
-/*
- * Copyright (c) 2025.
- * Author Peter Placzek (tada5hi)
- * For the full copyright and license information,
- * view the LICENSE file that was distributed with this source code.
- */
-export {};
-//# sourceMappingURL=types.js.map

package/dist/core/identity/password-recovery/types.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"types.js","sourceRoot":"","sources":["../../../../src/core/identity/password-recovery/types.ts"],"names":[],"mappings":"AAAA;;;;;GAKG"}

package/dist/core/identity/permission/index.js

@@ -1,9 +0,0 @@
-/*
- * Copyright (c) 2025.
- * Author Peter Placzek (tada5hi)
- * For the full copyright and license information,
- * view the LICENSE file that was distributed with this source code.
- */
-export * from "./module.js";
-export * from "./types.js";
-//# sourceMappingURL=index.js.map

package/dist/core/identity/permission/index.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../src/core/identity/permission/index.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,cAAc,aAAa,CAAC;AAC5B,cAAc,YAAY,CAAC"}

package/dist/core/identity/permission/module.js

@@ -1,137 +0,0 @@
-/*
- * Copyright (c) 2024.
- * Author Peter Placzek (tada5hi)
- * For the full copyright and license information,
- * view the LICENSE file that was distributed with this source code.
- */
-import { isPermissionBindingEqual, mergePermissionBindings } from '@authup/core-kit';
-export class IdentityPermissionProvider {
-    clientRepository;
-    userRepository;
-    roleRepository;
-    robotRepository;
-    constructor(ctx) {
-        this.clientRepository = ctx.clientRepository;
-        this.userRepository = ctx.userRepository;
-        this.roleRepository = ctx.roleRepository;
-        this.robotRepository = ctx.robotRepository;
-    }
-    async isSuperset(parent, child) {
-        const parentBindings = await this.getFor(parent);
-        const childBindings = await this.getFor(child);
-        const parentMerged = mergePermissionBindings(parentBindings);
-        const childMerged = mergePermissionBindings(childBindings);
-        for (const childItem of childMerged) {
-            const parentItem = parentMerged.find((p) => isPermissionBindingEqual(p, childItem));
-            if (!parentItem) {
-                return false;
-            }
-            if (parentItem.policies && parentItem.policies.length > 0 &&
-                (!childItem.policies || childItem.policies.length === 0)) {
-                return false;
-            }
-        }
-        return true;
-    }
-    async resolveJunctionPolicy(identity, options) {
-        const bindings = await this.getFor(identity);
-        const matching = bindings.filter((b) => {
-            if (b.permission.name !== options.name) {
-                return false;
-            }
-            if (typeof options.realmId !== 'undefined') {
-                if ((b.permission.realm_id ?? null) !== (options.realmId ?? null)) {
-                    return false;
-                }
-            }
-            if (typeof options.clientId !== 'undefined') {
-                if ((b.permission.client_id ?? null) !== (options.clientId ?? null)) {
-                    return false;
-                }
-            }
-            return true;
-        });
-        if (matching.length === 0) {
-            return undefined;
-        }
-        const merged = mergePermissionBindings(matching);
-        if (merged.length > 0 && merged[0].policies && merged[0].policies.length > 0) {
-            return merged[0].policies[0];
-        }
-        return undefined;
-    }
-    async getFor(identity) {
-        switch (identity.type) {
-            case 'client': {
-                return this.getForClient(identity);
-            }
-            case 'user': {
-                return this.getForUser(identity);
-            }
-            case 'robot': {
-                return this.getForRobot(identity);
-            }
-            case 'role': {
-                return this.getForRole(identity);
-            }
-        }
-        return [];
-    }
-    async getForClient(identity) {
-        const bindings = await this.clientRepository.getBoundPermissions(identity.id);
-        const roles = await this.clientRepository.getBoundRoles(identity.id);
-        const roleBindings = await this.roleRepository.getBoundPermissionsForMany(roles);
-        if (roleBindings.length === 0) {
-            return bindings;
-        }
-        return [
-            ...bindings,
-            ...roleBindings,
-        ];
-    }
-    async getForUser(identity) {
-        const bindings = await this.userRepository.getBoundPermissions(identity.id)
-            .then((data) => this.reduceBindingsByIdentityClient(data, identity));
-        const roles = await this.userRepository.getBoundRoles(identity.id)
-            .then((data) => this.reduceEntitiesByIdentityClient(data, identity));
-        const roleBindings = await this.roleRepository.getBoundPermissionsForMany(roles);
-        if (roleBindings.length === 0) {
-            return bindings;
-        }
-        return [
-            ...bindings,
-            ...roleBindings,
-        ];
-    }
-    async getForRobot(identity) {
-        const bindings = await this.robotRepository.getBoundPermissions(identity.id)
-            .then((data) => this.reduceBindingsByIdentityClient(data, identity));
-        const roles = await this.robotRepository.getBoundRoles(identity.id)
-            .then((data) => this.reduceEntitiesByIdentityClient(data, identity));
-        const roleBindings = await this.roleRepository.getBoundPermissionsForMany(roles);
-        if (roleBindings.length === 0) {
-            return bindings;
-        }
-        return [
-            ...bindings,
-            ...roleBindings,
-        ];
-    }
-    async getForRole(identity) {
-        return this.roleRepository.getBoundPermissions(identity.id)
-            .then((data) => this.reduceBindingsByIdentityClient(data, identity));
-    }
-    reduceBindingsByIdentityClient(bindings, identity) {
-        if (!identity.clientId) {
-            return bindings;
-        }
-        return bindings.filter((binding) => binding.permission.client_id === identity.clientId);
-    }
-    reduceEntitiesByIdentityClient(entities, identity) {
-        if (!identity.clientId) {
-            return entities;
-        }
-        return entities.filter((entity) => entity.client_id === identity.clientId);
-    }
-}
-//# sourceMappingURL=module.js.map

package/dist/core/identity/permission/module.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"module.js","sourceRoot":"","sources":["../../../../src/core/identity/permission/module.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAIH,OAAO,EAAE,wBAAwB,EAAE,uBAAuB,EAAE,MAAM,kBAAkB,CAAC;AASrF,MAAM,OAAO,0BAA0B;IACzB,gBAAgB,CAA6B;IAE7C,cAAc,CAA6B;IAE3C,cAAc,CAAyB;IAEvC,eAAe,CAA6B;IAEtD,YAAY,GAAsC;QAC9C,IAAI,CAAC,gBAAgB,GAAG,GAAG,CAAC,gBAAgB,CAAC;QAC7C,IAAI,CAAC,cAAc,GAAG,GAAG,CAAC,cAAc,CAAC;QACzC,IAAI,CAAC,cAAc,GAAG,GAAG,CAAC,cAAc,CAAC;QACzC,IAAI,CAAC,eAAe,GAAG,GAAG,CAAC,eAAe,CAAC;IAC/C,CAAC;IAED,KAAK,CAAC,UAAU,CAAC,MAA0B,EAAE,KAAyB;QAClE,MAAM,cAAc,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QACjD,MAAM,aAAa,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QAE/C,MAAM,YAAY,GAAG,uBAAuB,CAAC,cAAc,CAAC,CAAC;QAC7D,MAAM,WAAW,GAAG,uBAAuB,CAAC,aAAa,CAAC,CAAC;QAE3D,KAAK,MAAM,SAAS,IAAI,WAAW,EAAE,CAAC;YAClC,MAAM,UAAU,GAAG,YAAY,CAAC,IAAI,CAChC,CAAC,CAAC,EAAE,EAAE,CAAC,wBAAwB,CAAC,CAAC,EAAE,SAAS,CAAC,CAChD,CAAC;YAEF,IAAI,CAAC,UAAU,EAAE,CAAC;gBACd,OAAO,KAAK,CAAC;YACjB,CAAC;YAED,IACI,UAAU,CAAC,QAAQ,IAAI,UAAU,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC;gBACrD,CAAC,CAAC,SAAS,CAAC,QAAQ,IAAI,SAAS,CAAC,QAAQ,CAAC,MAAM,KAAK,CAAC,CAAC,EAC1D,CAAC;gBACC,OAAO,KAAK,CAAC;YACjB,CAAC;QACL,CAAC;QAED,OAAO,IAAI,CAAC;IAChB,CAAC;IAED,KAAK,CAAC,qBAAqB,CACvB,QAA4B,EAC5B,OAAqC;QAErC,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QAC7C,MAAM,QAAQ,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE;YACnC,IAAI,CAAC,CAAC,UAAU,CAAC,IAAI,KAAK,OAAO,CAAC,IAAI,EAAE,CAAC;gBACrC,OAAO,KAAK,CAAC;YACjB,CAAC;YAED,IAAI,OAAO,OAAO,CAAC,OAAO,KAAK,WAAW,EAAE,CAAC;gBACzC,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,QAAQ,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,IAAI,IAAI,CAAC,EAAE,CAAC;oBAChE,OAAO,KAAK,CAAC;gBACjB,CAAC;YACL,CAAC;YAED,IAAI,OAAO,OAAO,CAAC,QAAQ,KAAK,WAAW,EAAE,CAAC;gBAC1C,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,SAAS,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,IAAI,IAAI,CAAC,EAAE,CAAC;oBAClE,OAAO,KAAK,CAAC;gBACjB,CAAC;YACL,CAAC;YAED,OAAO,IAAI,CAAC;QAChB,CAAC,CAAC,CAAC;QAEH,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACxB,OAAO,SAAS,CAAC;QACrB,CAAC;QAED,MAAM,MAAM,GAAG,uBAAuB,CAAC,QAAQ,CAAC,CAAC;QAEjD,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,IAAI,MAAM,CAAC,CAAC,CAAC,CAAC,QAAQ,IAAI,MAAM,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC3E,OAAO,MAAM,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;QACjC,CAAC;QAED,OAAO,SAAS,CAAC;IACrB,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,QAA4B;QACrC,QAAQ,QAAQ,CAAC,IAAI,EAAE,CAAC;YACpB,KAAK,QAAQ,CAAC,CAAC,CAAC;gBACZ,OAAO,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC;YACvC,CAAC;YACD,KAAK,MAAM,CAAC,CAAC,CAAC;gBACV,OAAO,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC;YACrC,CAAC;YACD,KAAK,OAAO,CAAC,CAAC,CAAC;gBACX,OAAO,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAC;YACtC,CAAC;YACD,KAAK,MAAM,CAAC,CAAC,CAAC;gBACV,OAAO,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC;YACrC,CAAC;QACL,CAAC;QAED,OAAO,EAAE,CAAC;IACd,CAAC;IAED,KAAK,CAAC,YAAY,CAAC,QAA4B;QAC3C,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAAC,mBAAmB,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;QAC9E,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAAC,aAAa,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;QACrE,MAAM,YAAY,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,0BAA0B,CAAC,KAAK,CAAC,CAAC;QACjF,IAAI,YAAY,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC5B,OAAO,QAAQ,CAAC;QACpB,CAAC;QAED,OAAO;YACH,GAAG,QAAQ;YACX,GAAG,YAAY;SAClB,CAAC;IACN,CAAC;IAED,KAAK,CAAC,UAAU,CAAC,QAA4B;QACzC,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,mBAAmB,CAAC,QAAQ,CAAC,EAAE,CAAC;aACtE,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,8BAA8B,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC,CAAC;QAEzE,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,aAAa,CAAC,QAAQ,CAAC,EAAE,CAAC;aAC7D,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,8BAA8B,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC,CAAC;QAEzE,MAAM,YAAY,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,0BAA0B,CAAC,KAAK,CAAC,CAAC;QACjF,IAAI,YAAY,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC5B,OAAO,QAAQ,CAAC;QACpB,CAAC;QAED,OAAO;YACH,GAAG,QAAQ;YACX,GAAG,YAAY;SAClB,CAAC;IACN,CAAC;IAED,KAAK,CAAC,WAAW,CAAC,QAA4B;QAC1C,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,eAAe,CAAC,mBAAmB,CAAC,QAAQ,CAAC,EAAE,CAAC;aACvE,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,8BAA8B,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC,CAAC;QAEzE,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,eAAe,CAAC,aAAa,CAAC,QAAQ,CAAC,EAAE,CAAC;aAC9D,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,8BAA8B,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC,CAAC;QAEzE,MAAM,YAAY,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,0BAA0B,CAAC,KAAK,CAAC,CAAC;QACjF,IAAI,YAAY,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC5B,OAAO,QAAQ,CAAC;QACpB,CAAC;QAED,OAAO;YACH,GAAG,QAAQ;YACX,GAAG,YAAY;SAClB,CAAC;IACN,CAAC;IAED,KAAK,CAAC,UAAU,CAAC,QAA4B;QACzC,OAAO,IAAI,CAAC,cAAc,CAAC,mBAAmB,CAAC,QAAQ,CAAC,EAAE,CAAC;aACtD,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,8BAA8B,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC,CAAC;IAC7E,CAAC;IAEO,8BAA8B,CAClC,QAA6B,EAC7B,QAA4B;QAE5B,IAAI,CAAC,QAAQ,CAAC,QAAQ,EAAE,CAAC;YACrB,OAAO,QAAQ,CAAC;QACpB,CAAC;QAED,OAAO,QAAQ,CAAC,MAAM,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,UAAU,CAAC,SAAS,KAAK,QAAQ,CAAC,QAAQ,CAAC,CAAC;IAC5F,CAAC;IAEO,8BAA8B,CAClC,QAAa,EACb,QAA4B;QAE5B,IAAI,CAAC,QAAQ,CAAC,QAAQ,EAAE,CAAC;YACrB,OAAO,QAAQ,CAAC;QACpB,CAAC;QAED,OAAO,QAAQ,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,SAAS,KAAK,QAAQ,CAAC,QAAQ,CAAC,CAAC;IAC/E,CAAC;CACJ"}

package/dist/core/identity/permission/types.js

@@ -1,8 +0,0 @@
-/*
- * Copyright (c) 2025.
- * Author Peter Placzek (tada5hi)
- * For the full copyright and license information,
- * view the LICENSE file that was distributed with this source code.
- */
-export {};
-//# sourceMappingURL=types.js.map

package/dist/core/identity/permission/types.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"types.js","sourceRoot":"","sources":["../../../../src/core/identity/permission/types.ts"],"names":[],"mappings":"AAAA;;;;;GAKG"}

package/dist/core/identity/provider/account/index.js

@@ -1,9 +0,0 @@
-/*
- * Copyright (c) 2025.
- * Author Peter Placzek (tada5hi)
- * For the full copyright and license information,
- * view the LICENSE file that was distributed with this source code.
- */
-export * from "./module.js";
-export * from "./types.js";
-//# sourceMappingURL=index.js.map

package/dist/core/identity/provider/account/index.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../../src/core/identity/provider/account/index.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,cAAc,aAAa,CAAC;AAC5B,cAAc,YAAY,CAAC"}

package/dist/core/identity/provider/account/module.js

@@ -1,194 +0,0 @@
-/*
- * Copyright (c) 2025.
- * Author Peter Placzek (tada5hi)
- * For the full copyright and license information,
- * view the LICENSE file that was distributed with this source code.
- */
-import { UserValidator, ValidatorGroup, buildUserFakeEmail, isUserFakeEmail, } from '@authup/core-kit';
-import { createNanoID, extendObject } from '@authup/kit';
-import { isValidupError, stringifyPath } from 'validup';
-import { IdentityProviderIdentityOperation } from "../constants.js";
-import { IdentityProviderMapperOperation } from "../mapper/index.js";
-export class IdentityProviderAccountManager {
-    attributesMapper;
-    permissionMapper;
-    roleMapper;
-    repository;
-    userRepository;
-    userValidator;
-    constructor(ctx) {
-        this.attributesMapper = ctx.attributeMapper;
-        this.permissionMapper = ctx.permissionMapper;
-        this.roleMapper = ctx.roleMapper;
-        this.repository = ctx.repository;
-        this.userRepository = ctx.userRepository;
-        this.userValidator = new UserValidator();
-    }
-    async save(identity) {
-        let account = await this.repository.findOneByProviderIdentity(identity);
-        if (account) {
-            identity.operation = IdentityProviderIdentityOperation.UPDATE;
-            account.user = await this.saveUser(identity, account.user);
-            await this.repository.save(account);
-            await this.saveRoles(identity, account.user);
-            await this.savePermissions(identity, account.user);
-            return account;
-        }
-        identity.operation = IdentityProviderIdentityOperation.CREATE;
-        const user = await this.saveUser(identity);
-        account = await this.repository.save({
-            provider_id: identity.provider.id,
-            provider_user_id: identity.id,
-            provider_user_name: user.name, // todo: parse identity.name
-            provider_realm_id: identity.provider.realm_id,
-            user,
-            user_id: user.id,
-            user_realm_id: user.realm_id,
-        });
-        await this.saveRoles(identity, account.user);
-        await this.savePermissions(identity, account.user);
-        return account;
-    }
-    async saveUser(identity, user) {
-        const attributes = await this.attributesMapper.execute(identity);
-        const entity = {};
-        for (const attribute of attributes) {
-            if (attribute.key &&
-                attribute.operation === IdentityProviderMapperOperation.CREATE) {
-                // attribute value might be object, array, ...
-                entity[attribute.key] = attribute.value;
-            }
-        }
-        if (!user) {
-            entity.realm_id = identity.provider.realm_id;
-            entity.active = true;
-            entity.name_locked = true;
-            entity.client_id = identity.clientId || null;
-        }
-        const attributesSelf = await this.validateAttributes(entity, identity, 10);
-        if (!attributesSelf) {
-            // todo: better error name
-            throw new Error('Identity provider attributes could not be validated.');
-        }
-        const attributesSelfKeys = Object.keys(attributesSelf);
-        const attributesExtra = {};
-        const entityKeys = Object.keys(entity);
-        for (const entityKey of entityKeys) {
-            const index = attributesSelfKeys.indexOf(entityKey);
-            if (index !== -1) {
-                continue;
-            }
-            attributesExtra[entityKey] = entity[entityKey];
-        }
-        let output;
-        if (user) {
-            output = extendObject(user, attributesSelf);
-        }
-        else {
-            output = attributesSelf;
-        }
-        let attempts = Math.max((identity.attributeCandidates?.name?.length || 0) + 1, 10);
-        while (attempts > 0) {
-            try {
-                // todo: we also need to remove existing ones via idp login flow ( but not other attributes!)
-                return await this.userRepository.saveOneWithEA(output, attributesExtra);
-            }
-            catch {
-                const names = identity.attributeCandidates?.name || [];
-                if (names.length > 0) {
-                    while (names.length > 0) {
-                        output.name = `${names.shift()}`;
-                        try {
-                            await this.userValidator.run(output, {
-                                group: identity.operation === IdentityProviderIdentityOperation.CREATE ?
-                                    ValidatorGroup.CREATE :
-                                    ValidatorGroup.UPDATE,
-                            });
-                            break;
-                        }
-                        catch {
-                            // todo: do nothing.
-                        }
-                    }
-                }
-                else {
-                    output.name = createNanoID('0123456789abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ-_', 10);
-                }
-                if (isUserFakeEmail(output.email)) {
-                    output.email = buildUserFakeEmail(output.name);
-                }
-                attempts -= 1;
-            }
-        }
-        throw new Error('The user account could not be created due a conflict error.');
-    }
-    async validateAttributes(entity, identity, attempts) {
-        attempts--;
-        if (attempts <= 0) {
-            return null;
-        }
-        try {
-            return await this.userValidator.run(entity, {
-                group: identity.operation === IdentityProviderIdentityOperation.CREATE ?
-                    ValidatorGroup.CREATE :
-                    ValidatorGroup.UPDATE,
-            });
-        }
-        catch (e) {
-            if (!isValidupError(e)) {
-                return null;
-            }
-            let retry = false;
-            for (let i = 0; i < e.issues.length; i++) {
-                const child = e.issues[i];
-                const pathNormalized = stringifyPath(child.path);
-                if (Array.isArray(entity[pathNormalized]) &&
-                    entity[pathNormalized].length > 0) {
-                    const [first, ...rest] = entity[pathNormalized];
-                    entity[pathNormalized] = first;
-                    if (rest.length > 0) {
-                        if (!identity.attributeCandidates) {
-                            identity.attributeCandidates = {};
-                        }
-                        if (!identity.attributeCandidates[pathNormalized]) {
-                            identity.attributeCandidates[pathNormalized] = [];
-                        }
-                        identity.attributeCandidates[pathNormalized].push(...rest);
-                    }
-                    retry = true;
-                    break;
-                }
-                if (identity.attributeCandidates &&
-                    identity.attributeCandidates[pathNormalized] &&
-                    identity.attributeCandidates[pathNormalized].length > 0) {
-                    entity[pathNormalized] = identity.attributeCandidates[pathNormalized].shift();
-                    retry = true;
-                    break;
-                }
-                if (entity.name &&
-                    pathNormalized === 'email') {
-                    entity[pathNormalized] = buildUserFakeEmail(entity.name);
-                    retry = true;
-                    break;
-                }
-                if (entity[pathNormalized]) {
-                    entity[pathNormalized] = null;
-                    break;
-                }
-            }
-            if (retry) {
-                return this.validateAttributes(entity, identity, attempts);
-            }
-            return null;
-        }
-    }
-    async savePermissions(identity, user) {
-        const entities = await this.permissionMapper.execute(identity);
-        await this.userRepository.savePermissions(user, entities);
-    }
-    async saveRoles(identity, user) {
-        const entities = await this.roleMapper.execute(identity);
-        await this.userRepository.saveRoles(user, entities);
-    }
-}
-//# sourceMappingURL=module.js.map

package/dist/core/identity/provider/account/module.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"module.js","sourceRoot":"","sources":["../../../../../src/core/identity/provider/account/module.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAGH,OAAO,EACH,aAAa,EACb,cAAc,EACd,kBAAkB,EAClB,eAAe,GAClB,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAAE,YAAY,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AACzD,OAAO,EAAE,cAAc,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AAExD,OAAO,EAAE,iCAAiC,EAAE,MAAM,iBAAiB,CAAC;AAEpE,OAAO,EAAE,+BAA+B,EAAE,MAAM,oBAAoB,CAAC;AAIrE,MAAM,OAAO,8BAA8B;IAC7B,gBAAgB,CAA2B;IAE3C,gBAAgB,CAA2B;IAE3C,UAAU,CAA2B;IAErC,UAAU,CAAsC;IAEhD,cAAc,CAA0B;IAExC,aAAa,CAAiB;IAExC,YAAY,GAA0C;QAClD,IAAI,CAAC,gBAAgB,GAAG,GAAG,CAAC,eAAe,CAAC;QAC5C,IAAI,CAAC,gBAAgB,GAAG,GAAG,CAAC,gBAAgB,CAAC;QAC7C,IAAI,CAAC,UAAU,GAAG,GAAG,CAAC,UAAU,CAAC;QACjC,IAAI,CAAC,UAAU,GAAG,GAAG,CAAC,UAAU,CAAC;QACjC,IAAI,CAAC,cAAc,GAAG,GAAG,CAAC,cAAc,CAAC;QAEzC,IAAI,CAAC,aAAa,GAAG,IAAI,aAAa,EAAE,CAAC;IAC7C,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,QAAkC;QACzC,IAAI,OAAO,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,yBAAyB,CAAC,QAAQ,CAAC,CAAC;QACxE,IAAI,OAAO,EAAE,CAAC;YACV,QAAQ,CAAC,SAAS,GAAG,iCAAiC,CAAC,MAAM,CAAC;YAE9D,OAAO,CAAC,IAAI,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC;YAE3D,MAAM,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YAEpC,MAAM,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC;YAC7C,MAAM,IAAI,CAAC,eAAe,CAAC,QAAQ,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC;YAEnD,OAAO,OAAO,CAAC;QACnB,CAAC;QAED,QAAQ,CAAC,SAAS,GAAG,iCAAiC,CAAC,MAAM,CAAC;QAE9D,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;QAE3C,OAAO,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;YACjC,WAAW,EAAE,QAAQ,CAAC,QAAQ,CAAC,EAAE;YACjC,gBAAgB,EAAE,QAAQ,CAAC,EAAE;YAC7B,kBAAkB,EAAE,IAAI,CAAC,IAAI,EAAE,4BAA4B;YAC3D,iBAAiB,EAAE,QAAQ,CAAC,QAAQ,CAAC,QAAQ;YAC7C,IAAI;YACJ,OAAO,EAAE,IAAI,CAAC,EAAE;YAChB,aAAa,EAAE,IAAI,CAAC,QAAQ;SAC/B,CAAC,CAAC;QAEH,MAAM,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC;QAC7C,MAAM,IAAI,CAAC,eAAe,CAAC,QAAQ,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC;QAEnD,OAAO,OAAO,CAAC;IACnB,CAAC;IAED,KAAK,CAAC,QAAQ,CACV,QAAkC,EAClC,IAAW;QAEX,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAAC,OAAO,CAClD,QAAQ,CACX,CAAC;QAEF,MAAM,MAAM,GAAyB,EAAE,CAAC;QACxC,KAAK,MAAM,SAAS,IAAI,UAAU,EAAE,CAAC;YACjC,IACI,SAAS,CAAC,GAAG;gBACb,SAAS,CAAC,SAAS,KAAK,+BAA+B,CAAC,MAAM,EAChE,CAAC;gBACC,8CAA8C;gBAC9C,MAAM,CAAC,SAAS,CAAC,GAAG,CAAC,GAAG,SAAS,CAAC,KAAK,CAAC;YAC5C,CAAC;QACL,CAAC;QAED,IAAI,CAAC,IAAI,EAAE,CAAC;YACR,MAAM,CAAC,QAAQ,GAAG,QAAQ,CAAC,QAAQ,CAAC,QAAQ,CAAC;YAC7C,MAAM,CAAC,MAAM,GAAG,IAAI,CAAC;YACrB,MAAM,CAAC,WAAW,GAAG,IAAI,CAAC;YAC1B,MAAM,CAAC,SAAS,GAAG,QAAQ,CAAC,QAAQ,IAAI,IAAI,CAAC;QACjD,CAAC;QAED,MAAM,cAAc,GAAG,MAAM,IAAI,CAAC,kBAAkB,CAAC,MAAM,EAAE,QAAQ,EAAE,EAAE,CAAC,CAAC;QAC3E,IAAI,CAAC,cAAc,EAAE,CAAC;YAClB,0BAA0B;YAC1B,MAAM,IAAI,KAAK,CAAC,sDAAsD,CAAC,CAAC;QAC5E,CAAC;QACD,MAAM,kBAAkB,GAAG,MAAM,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;QAEvD,MAAM,eAAe,GAAyB,EAAE,CAAC;QAEjD,MAAM,UAAU,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACvC,KAAK,MAAM,SAAS,IAAI,UAAU,EAAE,CAAC;YACjC,MAAM,KAAK,GAAG,kBAAkB,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;YACpD,IAAI,KAAK,KAAK,CAAC,CAAC,EAAE,CAAC;gBACf,SAAS;YACb,CAAC;YAED,eAAe,CAAC,SAAS,CAAC,GAAG,MAAM,CAAC,SAAS,CAAC,CAAC;QACnD,CAAC;QAED,IAAI,MAAa,CAAC;QAClB,IAAI,IAAI,EAAE,CAAC;YACP,MAAM,GAAG,YAAY,CAAC,IAAI,EAAE,cAAc,CAAC,CAAC;QAChD,CAAC;aAAM,CAAC;YACJ,MAAM,GAAG,cAAc,CAAC;QAC5B,CAAC;QAED,IAAI,QAAQ,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,mBAAmB,EAAE,IAAI,EAAE,MAAM,IAAI,CAAC,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC,CAAC;QACnF,OAAO,QAAQ,GAAG,CAAC,EAAE,CAAC;YAClB,IAAI,CAAC;gBACD,6FAA6F;gBAC7F,OAAO,MAAM,IAAI,CAAC,cAAc,CAAC,aAAa,CAAC,MAAM,EAAE,eAAe,CAAC,CAAC;YAC5E,CAAC;YAAC,MAAM,CAAC;gBACL,MAAM,KAAK,GAAG,QAAQ,CAAC,mBAAmB,EAAE,IAAI,IAAI,EAAE,CAAC;gBACvD,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;oBACnB,OAAO,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;wBACtB,MAAM,CAAC,IAAI,GAAG,GAAG,KAAK,CAAC,KAAK,EAAE,EAAE,CAAC;wBAEjC,IAAI,CAAC;4BACD,MAAM,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,MAAM,EAAE;gCACjC,KAAK,EAAE,QAAQ,CAAC,SAAS,KAAK,iCAAiC,CAAC,MAAM,CAAC,CAAC;oCACpE,cAAc,CAAC,MAAM,CAAC,CAAC;oCACvB,cAAc,CAAC,MAAM;6BAC5B,CAAC,CAAC;4BACH,MAAM;wBACV,CAAC;wBAAC,MAAM,CAAC;4BACL,oBAAoB;wBACxB,CAAC;oBACL,CAAC;gBACL,CAAC;qBAAM,CAAC;oBACJ,MAAM,CAAC,IAAI,GAAG,YAAY,CAAC,kEAAkE,EAAE,EAAE,CAAC,CAAC;gBACvG,CAAC;gBAED,IAAI,eAAe,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;oBAChC,MAAM,CAAC,KAAK,GAAG,kBAAkB,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;gBACnD,CAAC;gBAED,QAAQ,IAAI,CAAC,CAAC;YAClB,CAAC;QACL,CAAC;QAED,MAAM,IAAI,KAAK,CAAC,6DAA6D,CAAC,CAAC;IACnF,CAAC;IAED,KAAK,CAAC,kBAAkB,CACpB,MAA2B,EAC3B,QAAkC,EAClC,QAAgB;QAEhB,QAAQ,EAAE,CAAC;QACX,IAAI,QAAQ,IAAI,CAAC,EAAE,CAAC;YAChB,OAAO,IAAI,CAAC;QAChB,CAAC;QAED,IAAI,CAAC;YACD,OAAO,MAAM,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,MAAM,EAAE;gBACxC,KAAK,EAAE,QAAQ,CAAC,SAAS,KAAK,iCAAiC,CAAC,MAAM,CAAC,CAAC;oBACpE,cAAc,CAAC,MAAM,CAAC,CAAC;oBACvB,cAAc,CAAC,MAAM;aAC5B,CAAC,CAAC;QACP,CAAC;QAAC,OAAO,CAAM,EAAE,CAAC;YACd,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC,EAAE,CAAC;gBACrB,OAAO,IAAI,CAAC;YAChB,CAAC;YAED,IAAI,KAAK,GAAG,KAAK,CAAC;YAClB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;gBACvC,MAAM,KAAK,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;gBAE1B,MAAM,cAAc,GAAG,aAAa,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;gBAEjD,IACI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC;oBACrC,MAAM,CAAC,cAAc,CAAC,CAAC,MAAM,GAAG,CAAC,EACnC,CAAC;oBACC,MAAM,CAAC,KAAK,EAAE,GAAG,IAAI,CAAC,GAAG,MAAM,CAAC,cAAc,CAAC,CAAC;oBAChD,MAAM,CAAC,cAAc,CAAC,GAAG,KAAK,CAAC;oBAE/B,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;wBAClB,IAAI,CAAC,QAAQ,CAAC,mBAAmB,EAAE,CAAC;4BAChC,QAAQ,CAAC,mBAAmB,GAAG,EAAE,CAAC;wBACtC,CAAC;wBAED,IAAI,CAAC,QAAQ,CAAC,mBAAmB,CAAC,cAAc,CAAC,EAAE,CAAC;4BAChD,QAAQ,CAAC,mBAAmB,CAAC,cAAc,CAAC,GAAG,EAAE,CAAC;wBACtD,CAAC;wBAED,QAAQ,CAAC,mBAAmB,CAAC,cAAc,CAAE,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,CAAC;oBAChE,CAAC;oBAED,KAAK,GAAG,IAAI,CAAC;oBACb,MAAM;gBACV,CAAC;gBAED,IACI,QAAQ,CAAC,mBAAmB;oBAC5B,QAAQ,CAAC,mBAAmB,CAAC,cAAc,CAAC;oBAC5C,QAAQ,CAAC,mBAAmB,CAAC,cAAc,CAAE,CAAC,MAAM,GAAG,CAAC,EAC1D,CAAC;oBACC,MAAM,CAAC,cAAc,CAAC,GAAG,QAAQ,CAAC,mBAAmB,CAAC,cAAc,CAAE,CAAC,KAAK,EAAE,CAAC;oBAC/E,KAAK,GAAG,IAAI,CAAC;oBACb,MAAM;gBACV,CAAC;gBAED,IACI,MAAM,CAAC,IAAI;oBACX,cAAc,KAAK,OAAO,EAC5B,CAAC;oBACC,MAAM,CAAC,cAAc,CAAC,GAAG,kBAAkB,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;oBACzD,KAAK,GAAG,IAAI,CAAC;oBACb,MAAM;gBACV,CAAC;gBAED,IAAI,MAAM,CAAC,cAAc,CAAC,EAAE,CAAC;oBACzB,MAAM,CAAC,cAAc,CAAC,GAAG,IAAI,CAAC;oBAC9B,MAAM;gBACV,CAAC;YACL,CAAC;YAED,IAAI,KAAK,EAAE,CAAC;gBACR,OAAO,IAAI,CAAC,kBAAkB,CAAC,MAAM,EAAE,QAAQ,EAAE,QAAQ,CAAC,CAAC;YAC/D,CAAC;YAED,OAAO,IAAI,CAAC;QAChB,CAAC;IACL,CAAC;IAED,KAAK,CAAC,eAAe,CACjB,QAAkC,EAClC,IAAU;QAEV,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;QAE/D,MAAM,IAAI,CAAC,cAAc,CAAC,eAAe,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;IAC9D,CAAC;IAED,KAAK,CAAC,SAAS,CACX,QAAkC,EAClC,IAAU;QAEV,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;QAEzD,MAAM,IAAI,CAAC,cAAc,CAAC,SAAS,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;IACxD,CAAC;CACJ"}

package/dist/core/identity/provider/account/types.js

@@ -1,8 +0,0 @@
-/*
- * Copyright (c) 2025.
- * Author Peter Placzek (tada5hi)
- * For the full copyright and license information,
- * view the LICENSE file that was distributed with this source code.
- */
-export {};
-//# sourceMappingURL=types.js.map

package/dist/core/identity/provider/account/types.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"types.js","sourceRoot":"","sources":["../../../../../src/core/identity/provider/account/types.ts"],"names":[],"mappings":"AAAA;;;;;GAKG"}

package/dist/core/identity/provider/authentication/constants.js

@@ -1,9 +0,0 @@
-/*
- * Copyright (c) 2025.
- * Author Peter Placzek (tada5hi)
- * For the full copyright and license information,
- * view the LICENSE file that was distributed with this source code.
- */
-import { TypedToken } from 'eldin';
-export const IDENTITY_PROVIDER_LDAP_COLLECTION_AUTHENTICATOR_TOKEN = new TypedToken('IdentityProviderLdapCollectionAuthenticator');
-//# sourceMappingURL=constants.js.map

package/dist/core/identity/provider/authentication/constants.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"constants.js","sourceRoot":"","sources":["../../../../../src/core/identity/provider/authentication/constants.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,OAAO,CAAC;AAGnC,MAAM,CAAC,MAAM,qDAAqD,GAAG,IAAI,UAAU,CAA8C,6CAA6C,CAAC,CAAC"}

package/dist/core/identity/provider/authentication/factory.js

@@ -1,31 +0,0 @@
-/*
- * Copyright (c) 2023-2025.
- * Author Peter Placzek (tada5hi)
- * For the full copyright and license information,
- * view the LICENSE file that was distributed with this source code.
- */
-import { IdentityProviderPreset, IdentityProviderProtocol } from '@authup/core-kit';
-import { IdentityProviderOAuth2Authenticator, IdentityProviderOpenIDAuthenticator } from "./protocols/index.js";
-import { IdentityProviderFacebookAuthenticator, IdentityProviderGithubAuthenticator, IdentityProviderGoogleAuthenticator, IdentityProviderInstagramAuthenticator, IdentityProviderPaypalAuthenticator, } from "./presets/index.js";
-export function createIdentityProviderOAuth2Authenticator(ctx) {
-    if (ctx.provider.preset === IdentityProviderPreset.FACEBOOK) {
-        return new IdentityProviderFacebookAuthenticator(ctx);
-    }
-    if (ctx.provider.preset === IdentityProviderPreset.GITHUB) {
-        return new IdentityProviderGithubAuthenticator(ctx);
-    }
-    if (ctx.provider.preset === IdentityProviderPreset.GOOGLE) {
-        return new IdentityProviderGoogleAuthenticator(ctx);
-    }
-    if (ctx.provider.preset === IdentityProviderPreset.INSTAGRAM) {
-        return new IdentityProviderInstagramAuthenticator(ctx);
-    }
-    if (ctx.provider.preset === IdentityProviderPreset.PAYPAL) {
-        return new IdentityProviderPaypalAuthenticator(ctx);
-    }
-    if (ctx.provider.protocol === IdentityProviderProtocol.OIDC) {
-        return new IdentityProviderOpenIDAuthenticator(ctx);
-    }
-    return new IdentityProviderOAuth2Authenticator(ctx);
-}
-//# sourceMappingURL=factory.js.map