@authup/server-core 1.0.0-beta.35 → 1.0.0-beta.37

package/dist/core/identity/provider/mapper/attributes/module.mjs

@@ -0,0 +1,27 @@
+import { IdentityProviderAccountBaseMapper } from "../base.mjs";
+//#region src/core/identity/provider/mapper/attributes/module.ts
+var IdentityProviderAttributeMapper = class extends IdentityProviderAccountBaseMapper {
+	repository;
+	constructor(repository) {
+		super();
+		this.repository = repository;
+	}
+	async execute(identity) {
+		const entities = await this.repository.findByProviderId(identity.provider.id);
+		const items = [];
+		for (const entity of entities) {
+			const [operation, value] = this.resolve(identity, entity);
+			items.push({
+				key: entity.target_name,
+				value: entity.target_value ? entity.target_value : value,
+				realmId: entity.provider_realm_id,
+				operation
+			});
+		}
+		return items;
+	}
+};
+//#endregion
+export { IdentityProviderAttributeMapper };
+
+//# sourceMappingURL=module.mjs.map

package/dist/core/identity/provider/mapper/attributes/module.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"module.mjs","names":["IdentityProviderAccountBaseMapper","IdentityProviderAttributeMapper","repository","execute","identity","entities","findByProviderId","provider","id","items","entity","operation","value","resolve","push","key","target_name","target_value","realmId","provider_realm_id"],"sources":["../../../../../../src/core/identity/provider/mapper/attributes/module.ts"],"sourcesContent":["/*\n * Copyright (c) 2025.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\nimport type { IdentityProviderIdentity } from '../../types.ts';\nimport { IdentityProviderAccountBaseMapper } from '../base.ts';\nimport type { IdentityProviderMapperElement } from '../types.ts';\nimport type { IIdentityProviderAttributeMappingRepository } from './types.ts';\n\nexport class IdentityProviderAttributeMapper extends IdentityProviderAccountBaseMapper {\n    protected repository: IIdentityProviderAttributeMappingRepository;\n\n    constructor(repository: IIdentityProviderAttributeMappingRepository) {\n        super();\n\n        this.repository = repository;\n    }\n\n    async execute(identity: IdentityProviderIdentity): Promise<IdentityProviderMapperElement[]> {\n        const entities = await this.repository.findByProviderId(identity.provider.id);\n\n        const items : IdentityProviderMapperElement[] = [];\n        for (const entity of entities) {\n            const [operation, value] = this.resolve(identity, entity);\n\n            items.push({\n                key: entity.target_name,\n                value: entity.target_value ? entity.target_value : value,\n                realmId: entity.provider_realm_id,\n                operation,\n            });\n        }\n\n        return items;\n    }\n}\n"],"mappings":";;AAWA,IAAaC,kCAAb,cAAqDD,kCAAAA;CACvCE;CAEV,YAAYA,YAAyD;AACjE,SAAK;AAEL,OAAKA,aAAaA;;CAGtB,MAAMC,QAAQC,UAA8E;EACxF,MAAMC,WAAW,MAAM,KAAKH,WAAWI,iBAAiBF,SAASG,SAASC,GAAE;EAE5E,MAAMC,QAA0C,EAAE;AAClD,OAAK,MAAMC,UAAUL,UAAU;GAC3B,MAAM,CAACM,WAAWC,SAAS,KAAKC,QAAQT,UAAUM,OAAAA;AAElDD,SAAMK,KAAK;IACPC,KAAKL,OAAOM;IACZJ,OAAOF,OAAOO,eAAeP,OAAOO,eAAeL;IACnDM,SAASR,OAAOS;IAChBR;IACJ,CAAA;;AAGJ,SAAOF"}

package/dist/core/identity/provider/mapper/attributes/types.mjs

@@ -0,0 +1 @@
+export {};

package/dist/core/identity/provider/mapper/base.mjs

@@ -0,0 +1,26 @@
+import { IdentityProviderIdentityOperation } from "../constants.mjs";
+import { IdentityProviderMapperOperation } from "./constants.mjs";
+import { IdentityProviderMappingSyncMode } from "@authup/core-kit";
+import { getJWTClaimByPattern } from "@authup/specs";
+//#region src/core/identity/provider/mapper/base.ts
+var IdentityProviderAccountBaseMapper = class {
+	resolve(identity, mapping) {
+		let operation;
+		if (mapping.synchronization_mode === IdentityProviderMappingSyncMode.ONCE && identity.operation === IdentityProviderIdentityOperation.UPDATE) {
+			operation = IdentityProviderMapperOperation.NONE;
+			return [operation];
+		}
+		if (!mapping.name || !mapping.value) {
+			operation = IdentityProviderMapperOperation.CREATE;
+			return [operation];
+		}
+		const value = getJWTClaimByPattern(identity.data, mapping.name, mapping.value, mapping.value_is_regex);
+		if (value.length === 0) operation = IdentityProviderMapperOperation.DELETE;
+		else operation = IdentityProviderMapperOperation.CREATE;
+		return [operation, value];
+	}
+};
+//#endregion
+export { IdentityProviderAccountBaseMapper };
+
+//# sourceMappingURL=base.mjs.map

package/dist/core/identity/provider/mapper/base.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"base.mjs","names":["IdentityProviderMappingSyncMode","getJWTClaimByPattern","IdentityProviderIdentityOperation","IdentityProviderMapperOperation","IdentityProviderAccountBaseMapper","resolve","identity","mapping","operation","synchronization_mode","ONCE","UPDATE","NONE","name","value","CREATE","data","value_is_regex","length","DELETE"],"sources":["../../../../../src/core/identity/provider/mapper/base.ts"],"sourcesContent":["/*\n * Copyright (c) 2025.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport type { IdentityProviderBaseMapping } from '@authup/core-kit';\nimport { IdentityProviderMappingSyncMode } from '@authup/core-kit';\nimport { getJWTClaimByPattern } from '@authup/specs';\nimport { IdentityProviderIdentityOperation } from '../constants.ts';\nimport type { IdentityProviderIdentity } from '../types.ts';\nimport { IdentityProviderMapperOperation } from './constants.ts';\nimport type { IIdentityProviderMapper, IdentityProviderMapperElement } from './types.ts';\n\nexport abstract class IdentityProviderAccountBaseMapper implements IIdentityProviderMapper {\n    protected resolve(\n        identity: IdentityProviderIdentity,\n        mapping: IdentityProviderBaseMapping,\n    ) : [IdentityProviderMapperOperation, unknown] | [IdentityProviderMapperOperation] {\n        let operation : IdentityProviderMapperOperation;\n        if (\n            mapping.synchronization_mode === IdentityProviderMappingSyncMode.ONCE &&\n            identity.operation === IdentityProviderIdentityOperation.UPDATE\n        ) {\n            operation = IdentityProviderMapperOperation.NONE;\n\n            return [operation];\n        }\n\n        if (!mapping.name || !mapping.value) {\n            operation = IdentityProviderMapperOperation.CREATE;\n\n            return [operation];\n        }\n\n        const value = getJWTClaimByPattern(\n            identity.data,\n            mapping.name,\n            mapping.value,\n            mapping.value_is_regex,\n        );\n\n        if (value.length === 0) {\n            operation = IdentityProviderMapperOperation.DELETE;\n        } else {\n            operation = IdentityProviderMapperOperation.CREATE;\n        }\n\n        return [operation, value];\n    }\n\n    abstract execute(\n        identity: IdentityProviderIdentity\n    ): Promise<IdentityProviderMapperElement[]>;\n}\n"],"mappings":";;;;;AAeA,IAAsBI,oCAAtB,MAAsBA;CACRC,QACNC,UACAC,SAC+E;EAC/E,IAAIC;AACJ,MACID,QAAQE,yBAAyBT,gCAAgCU,QACjEJ,SAASE,cAAcN,kCAAkCS,QAC3D;AACEH,eAAYL,gCAAgCS;AAE5C,UAAO,CAACJ,UAAU;;AAGtB,MAAI,CAACD,QAAQM,QAAQ,CAACN,QAAQO,OAAO;AACjCN,eAAYL,gCAAgCY;AAE5C,UAAO,CAACP,UAAU;;EAGtB,MAAMM,QAAQb,qBACVK,SAASU,MACTT,QAAQM,MACRN,QAAQO,OACRP,QAAQU,eAAc;AAG1B,MAAIH,MAAMI,WAAW,EACjBV,aAAYL,gCAAgCgB;MAE5CX,aAAYL,gCAAgCY;AAGhD,SAAO,CAACP,WAAWM,MAAM"}

package/dist/core/identity/provider/mapper/constants.mjs

@@ -0,0 +1,11 @@
+//#region src/core/identity/provider/mapper/constants.ts
+var IdentityProviderMapperOperation = /* @__PURE__ */ function(IdentityProviderMapperOperation) {
+	IdentityProviderMapperOperation["NONE"] = "none";
+	IdentityProviderMapperOperation["DELETE"] = "delete";
+	IdentityProviderMapperOperation["CREATE"] = "create";
+	return IdentityProviderMapperOperation;
+}({});
+//#endregion
+export { IdentityProviderMapperOperation };
+
+//# sourceMappingURL=constants.mjs.map

package/dist/core/identity/provider/mapper/constants.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"constants.mjs","names":["IdentityProviderMapperOperation"],"sources":["../../../../../src/core/identity/provider/mapper/constants.ts"],"sourcesContent":["/*\n * Copyright (c) 2025.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nexport enum IdentityProviderMapperOperation {\n    NONE = 'none',\n    DELETE = 'delete',\n    CREATE = 'create',\n}\n"],"mappings":";AAOA,IAAO,kCAAKA,yBAAAA,iCAAAA;;;;QAAAA"}

package/dist/core/identity/provider/mapper/index.mjs

@@ -0,0 +1,9 @@
+import { IdentityProviderMapperOperation } from "./constants.mjs";
+import { IdentityProviderAccountBaseMapper } from "./base.mjs";
+import { IdentityProviderAttributeMapper } from "./attributes/module.mjs";
+import "./attributes/index.mjs";
+import { IdentityProviderRoleMapper } from "./role/module.mjs";
+import "./role/index.mjs";
+import { IdentityProviderPermissionMapper } from "./permission/module.mjs";
+import "./permission/index.mjs";
+export { IdentityProviderAccountBaseMapper, IdentityProviderAttributeMapper, IdentityProviderMapperOperation, IdentityProviderPermissionMapper, IdentityProviderRoleMapper };

package/dist/core/identity/provider/mapper/permission/index.mjs

@@ -0,0 +1,2 @@
+import { IdentityProviderPermissionMapper } from "./module.mjs";
+export { IdentityProviderPermissionMapper };

package/dist/core/identity/provider/mapper/permission/module.mjs

@@ -0,0 +1,26 @@
+import { IdentityProviderAccountBaseMapper } from "../base.mjs";
+//#region src/core/identity/provider/mapper/permission/module.ts
+var IdentityProviderPermissionMapper = class extends IdentityProviderAccountBaseMapper {
+	repository;
+	constructor(repository) {
+		super();
+		this.repository = repository;
+	}
+	async execute(identity) {
+		const entities = await this.repository.findByProviderId(identity.provider.id);
+		const items = [];
+		for (const entity of entities) {
+			const [operation] = this.resolve(identity, entity);
+			items.push({
+				value: entity.permission_id,
+				realmId: entity.permission_realm_id,
+				operation
+			});
+		}
+		return items;
+	}
+};
+//#endregion
+export { IdentityProviderPermissionMapper };
+
+//# sourceMappingURL=module.mjs.map

package/dist/core/identity/provider/mapper/permission/module.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"module.mjs","names":["IdentityProviderAccountBaseMapper","IdentityProviderPermissionMapper","repository","execute","identity","entities","findByProviderId","provider","id","items","entity","operation","resolve","push","value","permission_id","realmId","permission_realm_id"],"sources":["../../../../../../src/core/identity/provider/mapper/permission/module.ts"],"sourcesContent":["/*\n * Copyright (c) 2025.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport type { IdentityProviderIdentity } from '../../types.ts';\nimport { IdentityProviderAccountBaseMapper } from '../base.ts';\nimport type { IdentityProviderMapperElement } from '../types.ts';\nimport type { IIdentityProviderPermissionMappingRepository } from './types.ts';\n\nexport class IdentityProviderPermissionMapper extends IdentityProviderAccountBaseMapper {\n    protected repository: IIdentityProviderPermissionMappingRepository;\n\n    constructor(repository: IIdentityProviderPermissionMappingRepository) {\n        super();\n\n        this.repository = repository;\n    }\n\n    async execute(identity: IdentityProviderIdentity): Promise<IdentityProviderMapperElement[]> {\n        const entities = await this.repository.findByProviderId(identity.provider.id);\n\n        const items : IdentityProviderMapperElement[] = [];\n        for (const entity of entities) {\n            const [operation] = this.resolve(identity, entity);\n\n            items.push({\n                value: entity.permission_id,\n                realmId: entity.permission_realm_id,\n                operation,\n            });\n        }\n\n        return items;\n    }\n}\n"],"mappings":";;AAYA,IAAaC,mCAAb,cAAsDD,kCAAAA;CACxCE;CAEV,YAAYA,YAA0D;AAClE,SAAK;AAEL,OAAKA,aAAaA;;CAGtB,MAAMC,QAAQC,UAA8E;EACxF,MAAMC,WAAW,MAAM,KAAKH,WAAWI,iBAAiBF,SAASG,SAASC,GAAE;EAE5E,MAAMC,QAA0C,EAAE;AAClD,OAAK,MAAMC,UAAUL,UAAU;GAC3B,MAAM,CAACM,aAAa,KAAKC,QAAQR,UAAUM,OAAAA;AAE3CD,SAAMI,KAAK;IACPC,OAAOJ,OAAOK;IACdC,SAASN,OAAOO;IAChBN;IACJ,CAAA;;AAGJ,SAAOF"}

package/dist/core/identity/provider/mapper/permission/types.mjs

@@ -0,0 +1 @@
+export {};

package/dist/core/identity/provider/mapper/role/index.mjs

@@ -0,0 +1,2 @@
+import { IdentityProviderRoleMapper } from "./module.mjs";
+export { IdentityProviderRoleMapper };

package/dist/core/identity/provider/mapper/role/module.mjs

@@ -0,0 +1,26 @@
+import { IdentityProviderAccountBaseMapper } from "../base.mjs";
+//#region src/core/identity/provider/mapper/role/module.ts
+var IdentityProviderRoleMapper = class extends IdentityProviderAccountBaseMapper {
+	finder;
+	constructor(finder) {
+		super();
+		this.finder = finder;
+	}
+	async execute(identity) {
+		const entities = await this.finder.findByProviderId(identity.provider.id);
+		const items = [];
+		for (const entity of entities) {
+			const [operation] = this.resolve(identity, entity);
+			items.push({
+				value: entity.role_id,
+				realmId: entity.role_realm_id,
+				operation
+			});
+		}
+		return items;
+	}
+};
+//#endregion
+export { IdentityProviderRoleMapper };
+
+//# sourceMappingURL=module.mjs.map

package/dist/core/identity/provider/mapper/role/module.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"module.mjs","names":["IdentityProviderAccountBaseMapper","IdentityProviderRoleMapper","finder","execute","identity","entities","findByProviderId","provider","id","items","entity","operation","resolve","push","value","role_id","realmId","role_realm_id"],"sources":["../../../../../../src/core/identity/provider/mapper/role/module.ts"],"sourcesContent":["/*\n * Copyright (c) 2025.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport type { IdentityProviderIdentity } from '../../types.ts';\nimport { IdentityProviderAccountBaseMapper } from '../base.ts';\nimport type { IdentityProviderMapperElement } from '../types.ts';\nimport type { IIdentityProviderRoleMappingFinder } from './types.ts';\n\nexport class IdentityProviderRoleMapper extends IdentityProviderAccountBaseMapper {\n    protected finder: IIdentityProviderRoleMappingFinder;\n\n    constructor(finder: IIdentityProviderRoleMappingFinder) {\n        super();\n\n        this.finder = finder;\n    }\n\n    async execute(identity: IdentityProviderIdentity): Promise<IdentityProviderMapperElement[]> {\n        const entities = await this.finder.findByProviderId(identity.provider.id);\n\n        const items : IdentityProviderMapperElement[] = [];\n        for (const entity of entities) {\n            const [operation] = this.resolve(identity, entity);\n\n            items.push({\n                value: entity.role_id,\n                realmId: entity.role_realm_id,\n                operation,\n            });\n        }\n\n        return items;\n    }\n}\n"],"mappings":";;AAYA,IAAaC,6BAAb,cAAgDD,kCAAAA;CAClCE;CAEV,YAAYA,QAA4C;AACpD,SAAK;AAEL,OAAKA,SAASA;;CAGlB,MAAMC,QAAQC,UAA8E;EACxF,MAAMC,WAAW,MAAM,KAAKH,OAAOI,iBAAiBF,SAASG,SAASC,GAAE;EAExE,MAAMC,QAA0C,EAAE;AAClD,OAAK,MAAMC,UAAUL,UAAU;GAC3B,MAAM,CAACM,aAAa,KAAKC,QAAQR,UAAUM,OAAAA;AAE3CD,SAAMI,KAAK;IACPC,OAAOJ,OAAOK;IACdC,SAASN,OAAOO;IAChBN;IACJ,CAAA;;AAGJ,SAAOF"}

package/dist/core/identity/provider/mapper/role/types.mjs

@@ -0,0 +1 @@
+export {};

package/dist/core/identity/provider/mapper/types.mjs

@@ -0,0 +1 @@
+export {};

package/dist/core/identity/provider/types.mjs

@@ -0,0 +1 @@
+export {};

package/dist/core/identity/registration/index.mjs

@@ -0,0 +1,2 @@
+import { RegistrationService } from "./service.mjs";
+export { RegistrationService };

package/dist/core/identity/registration/service.mjs

@@ -0,0 +1,68 @@
+import { UserCredentialsService } from "../../authentication/credential/entities/user/module.mjs";
+import { UserValidator } from "@authup/core-kit";
+import { createNanoID } from "@authup/kit";
+import { BadRequestError, NotFoundError } from "@ebec/http";
+import { Container } from "validup";
+import { randomBytes } from "node:crypto";
+//#region src/core/identity/registration/service.ts
+var RegistrationService = class {
+	options;
+	mailClient;
+	repository;
+	realmRepository;
+	constructor(ctx) {
+		this.options = ctx.options;
+		this.mailClient = ctx.mailClient;
+		this.repository = ctx.repository;
+		this.realmRepository = ctx.realmRepository;
+	}
+	async register(data) {
+		if (!this.options.registrationEnabled) throw new BadRequestError("User registration is not enabled.");
+		const validator = new Container({});
+		validator.mount(new UserValidator({ pathsToInclude: [
+			"email",
+			"name",
+			"password",
+			"realm_id"
+		] }));
+		const validated = await validator.run(data, { group: "create" });
+		await this.repository.validateJoinColumns(validated);
+		if (this.options.emailVerificationEnabled) {
+			validated.active = false;
+			validated.activate_hash = randomBytes(32).toString("hex");
+		} else validated.active = true;
+		const entity = this.repository.create(validated);
+		const credentialsService = new UserCredentialsService();
+		entity.password = entity.password || createNanoID(64);
+		entity.password = await credentialsService.protect(entity.password);
+		entity.realm_id = (await this.realmRepository.resolve(entity.realm_id, true)).id;
+		await this.repository.save(entity);
+		if (this.options.emailVerificationEnabled) try {
+			await this.mailClient.send({
+				to: entity.email,
+				subject: "Registration - Activation code",
+				html: `
+                    <p>Please use the code below to activate your account and start using the site.</p>
+                    <p>${entity.activate_hash}</p>
+                    `
+			});
+		} catch {
+			await this.repository.remove(entity);
+			throw new BadRequestError("Registration failed. Could not send activation email.");
+		}
+		return { active: entity.active };
+	}
+	async activate(data) {
+		const entity = await this.repository.findOneBy({ activate_hash: data.token });
+		if (!entity) throw new NotFoundError();
+		const merged = this.repository.merge(entity, {
+			active: true,
+			activate_hash: null
+		});
+		await this.repository.save(merged);
+	}
+};
+//#endregion
+export { RegistrationService };
+
+//# sourceMappingURL=service.mjs.map

package/dist/core/identity/registration/service.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"service.mjs","names":["UserValidator","createNanoID","BadRequestError","NotFoundError","randomBytes","Container","UserCredentialsService","RegistrationService","options","mailClient","repository","realmRepository","ctx","register","data","registrationEnabled","validator","mount","pathsToInclude","validated","run","group","validateJoinColumns","emailVerificationEnabled","active","activate_hash","toString","entity","create","credentialsService","password","protect","realm","resolve","realm_id","id","save","send","to","email","subject","html","remove","activate","findOneBy","token","merged","merge"],"sources":["../../../../src/core/identity/registration/service.ts"],"sourcesContent":["/*\n * Copyright (c) 2025.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport { UserValidator } from '@authup/core-kit';\nimport { createNanoID } from '@authup/kit';\nimport { BadRequestError, NotFoundError } from '@ebec/http';\nimport { randomBytes } from 'node:crypto';\nimport { Container } from 'validup';\nimport { UserCredentialsService } from '../../authentication/credential/entities/user/module.ts';\nimport type {\n    IRegistrationService,\n    RegistrationResult,\n    RegistrationServiceContext,\n    RegistrationServiceOptions,\n} from './types.ts';\nimport type { IMailClient } from '../../mail/types.ts';\nimport type { IRealmRepository, IUserRepository } from '../../entities/index.ts';\n\nexport class RegistrationService implements IRegistrationService {\n    protected options: RegistrationServiceOptions;\n\n    protected mailClient: IMailClient;\n\n    protected repository: IUserRepository;\n\n    protected realmRepository: IRealmRepository;\n\n    constructor(ctx: RegistrationServiceContext) {\n        this.options = ctx.options;\n        this.mailClient = ctx.mailClient;\n        this.repository = ctx.repository;\n        this.realmRepository = ctx.realmRepository;\n    }\n\n    async register(data: Record<string, any>): Promise<RegistrationResult> {\n        if (!this.options.registrationEnabled) {\n            throw new BadRequestError('User registration is not enabled.');\n        }\n\n        const validator = new Container({});\n        validator.mount(new UserValidator({ pathsToInclude: ['email', 'name', 'password', 'realm_id'] }));\n        const validated = await validator.run(data, { group: 'create' });\n\n        await this.repository.validateJoinColumns(validated);\n\n        if (this.options.emailVerificationEnabled) {\n            validated.active = false;\n            validated.activate_hash = randomBytes(32).toString('hex');\n        } else {\n            validated.active = true;\n        }\n\n        const entity = this.repository.create(validated);\n\n        const credentialsService = new UserCredentialsService();\n        entity.password = entity.password || createNanoID(64);\n        entity.password = await credentialsService.protect(entity.password);\n\n        const realm = await this.realmRepository.resolve(entity.realm_id, true);\n        entity.realm_id = realm.id;\n\n        await this.repository.save(entity);\n\n        if (this.options.emailVerificationEnabled) {\n            try {\n                await this.mailClient.send({\n                    to: entity.email,\n                    subject: 'Registration - Activation code',\n                    html: `\n                    <p>Please use the code below to activate your account and start using the site.</p>\n                    <p>${entity.activate_hash}</p>\n                    `,\n                });\n            } catch {\n                await this.repository.remove(entity);\n                throw new BadRequestError('Registration failed. Could not send activation email.');\n            }\n        }\n\n        return { active: entity.active };\n    }\n\n    async activate(data: { token: string }): Promise<void> {\n        const entity = await this.repository.findOneBy({ activate_hash: data.token });\n\n        if (!entity) {\n            throw new NotFoundError();\n        }\n\n        const merged = this.repository.merge(entity, {\n            active: true,\n            activate_hash: null,\n        });\n\n        await this.repository.save(merged);\n    }\n}\n"],"mappings":";;;;;;;AAsBA,IAAaO,sBAAb,MAAaA;CACCC;CAEAC;CAEAC;CAEAC;CAEV,YAAYC,KAAiC;AACzC,OAAKJ,UAAUI,IAAIJ;AACnB,OAAKC,aAAaG,IAAIH;AACtB,OAAKC,aAAaE,IAAIF;AACtB,OAAKC,kBAAkBC,IAAID;;CAG/B,MAAME,SAASC,MAAwD;AACnE,MAAI,CAAC,KAAKN,QAAQO,oBACd,OAAM,IAAIb,gBAAgB,oCAAA;EAG9B,MAAMc,YAAY,IAAIX,UAAU,EAAC,CAAA;AACjCW,YAAUC,MAAM,IAAIjB,cAAc,EAAEkB,gBAAgB;GAAC;GAAS;GAAQ;GAAY;GAAW,EAAC,CAAA,CAAA;EAC9F,MAAMC,YAAY,MAAMH,UAAUI,IAAIN,MAAM,EAAEO,OAAO,UAAS,CAAA;AAE9D,QAAM,KAAKX,WAAWY,oBAAoBH,UAAAA;AAE1C,MAAI,KAAKX,QAAQe,0BAA0B;AACvCJ,aAAUK,SAAS;AACnBL,aAAUM,gBAAgBrB,YAAY,GAAA,CAAIsB,SAAS,MAAA;QAEnDP,WAAUK,SAAS;EAGvB,MAAMG,SAAS,KAAKjB,WAAWkB,OAAOT,UAAAA;EAEtC,MAAMU,qBAAqB,IAAIvB,wBAAAA;AAC/BqB,SAAOG,WAAWH,OAAOG,YAAY7B,aAAa,GAAA;AAClD0B,SAAOG,WAAW,MAAMD,mBAAmBE,QAAQJ,OAAOG,SAAQ;AAGlEH,SAAOO,YAAWF,MADE,KAAKrB,gBAAgBsB,QAAQN,OAAOO,UAAU,KAAA,EAC1CC;AAExB,QAAM,KAAKzB,WAAW0B,KAAKT,OAAAA;AAE3B,MAAI,KAAKnB,QAAQe,yBACb,KAAI;AACA,SAAM,KAAKd,WAAW4B,KAAK;IACvBC,IAAIX,OAAOY;IACXC,SAAS;IACTC,MAAM;;yBAEDd,OAAOF,cAAc;;IAE9B,CAAA;UACI;AACJ,SAAM,KAAKf,WAAWgC,OAAOf,OAAAA;AAC7B,SAAM,IAAIzB,gBAAgB,wDAAA;;AAIlC,SAAO,EAAEsB,QAAQG,OAAOH,QAAO;;CAGnC,MAAMmB,SAAS7B,MAAwC;EACnD,MAAMa,SAAS,MAAM,KAAKjB,WAAWkC,UAAU,EAAEnB,eAAeX,KAAK+B,OAAM,CAAA;AAE3E,MAAI,CAAClB,OACD,OAAM,IAAIxB,eAAAA;EAGd,MAAM2C,SAAS,KAAKpC,WAAWqC,MAAMpB,QAAQ;GACzCH,QAAQ;GACRC,eAAe;GACnB,CAAA;AAEA,QAAM,KAAKf,WAAW0B,KAAKU,OAAAA"}

package/dist/core/identity/registration/types.mjs

@@ -0,0 +1 @@
+export {};

package/dist/core/identity/resolver/entities/ldap/module.mjs

@@ -0,0 +1,8 @@
+//#region src/core/identity/resolver/entities/ldap/module.ts
+var LdapIdentityResolver = class {
+	repository;
+};
+//#endregion
+export { LdapIdentityResolver };
+
+//# sourceMappingURL=module.mjs.map

package/dist/core/identity/resolver/entities/ldap/module.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"module.mjs","names":["LdapIdentityResolver","repository"],"sources":["../../../../../../src/core/identity/resolver/entities/ldap/module.ts"],"sourcesContent":["/*\n * Copyright (c) 2025.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport type { IIdentityProviderRepository } from '../../../../entities/index.ts';\n\nexport class LdapIdentityResolver {\n    protected repository : IIdentityProviderRepository;\n}\n"],"mappings":";AASA,IAAaA,uBAAb,MAAaA;CACCC"}

package/dist/core/identity/resolver/index.mjs

@@ -0,0 +1,2 @@
+import { IdentityResolver } from "./module.mjs";
+export { IdentityResolver };

package/dist/core/identity/resolver/module.mjs

@@ -0,0 +1,55 @@
+import { IdentityType } from "@authup/core-kit";
+import { isUUID } from "@authup/kit";
+//#region src/core/identity/resolver/module.ts
+var IdentityResolver = class {
+	clientRepository;
+	userRepository;
+	robotRepository;
+	constructor(ctx) {
+		this.clientRepository = ctx.clientRepository;
+		this.userRepository = ctx.userRepository;
+		this.robotRepository = ctx.robotRepository;
+	}
+	async resolve(type, key, realmKey) {
+		switch (type) {
+			case IdentityType.CLIENT: return this.resolveClient(key, realmKey);
+			case IdentityType.ROBOT: return this.resolveRobot(key, realmKey);
+			case IdentityType.USER: return this.resolveUser(key, realmKey);
+		}
+		return null;
+	}
+	async resolveClient(key, realmKey) {
+		let data;
+		if (isUUID(key)) data = await this.clientRepository.findOneById(key);
+		else data = await this.clientRepository.findOneByName(key, realmKey);
+		if (data) return {
+			type: IdentityType.CLIENT,
+			data
+		};
+		return null;
+	}
+	async resolveRobot(key, realmKey) {
+		let data;
+		if (isUUID(key)) data = await this.robotRepository.findOneById(key);
+		else data = await this.robotRepository.findOneByName(key, realmKey);
+		if (data) return {
+			type: IdentityType.ROBOT,
+			data
+		};
+		return null;
+	}
+	async resolveUser(key, realmKey) {
+		let data;
+		if (isUUID(key)) data = await this.userRepository.findOneById(key);
+		else data = await this.userRepository.findOneByName(key, realmKey);
+		if (data) return {
+			type: IdentityType.USER,
+			data
+		};
+		return null;
+	}
+};
+//#endregion
+export { IdentityResolver };
+
+//# sourceMappingURL=module.mjs.map

package/dist/core/identity/resolver/module.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"module.mjs","names":["IdentityType","isUUID","IdentityResolver","clientRepository","userRepository","robotRepository","ctx","resolve","type","key","realmKey","CLIENT","resolveClient","ROBOT","resolveRobot","USER","resolveUser","data","findOneById","findOneByName"],"sources":["../../../../src/core/identity/resolver/module.ts"],"sourcesContent":["/*\n * Copyright (c) 2025.\n *  Author Peter Placzek (tada5hi)\n *  For the full copyright and license information,\n *  view the LICENSE file that was distributed with this source code.\n */\n\nimport type {\n    Client, \n    ClientIdentity, \n    Identity, \n    Robot, \n    RobotIdentity, \n    User, \n    UserIdentity,\n} from '@authup/core-kit';\nimport { IdentityType } from '@authup/core-kit';\nimport { isUUID } from '@authup/kit';\nimport type { IIdentityResolver, IdentityResolverContext } from './types.ts';\nimport type { IClientIdentityRepository, IRobotIdentityRepository, IUserIdentityRepository } from '../entities/index.ts';\n\nexport class IdentityResolver implements IIdentityResolver {\n    protected clientRepository: IClientIdentityRepository;\n\n    protected userRepository: IUserIdentityRepository;\n\n    protected robotRepository: IRobotIdentityRepository;\n\n    constructor(ctx: IdentityResolverContext) {\n        this.clientRepository = ctx.clientRepository;\n        this.userRepository = ctx.userRepository;\n        this.robotRepository = ctx.robotRepository;\n    }\n\n    async resolve(\n        type: `${IdentityType}`,\n        key: string,\n        realmKey?: string,\n    ): Promise<Identity | null> {\n        switch (type) {\n            case IdentityType.CLIENT: {\n                return this.resolveClient(key, realmKey);\n            }\n            case IdentityType.ROBOT: {\n                return this.resolveRobot(key, realmKey);\n            }\n            case IdentityType.USER: {\n                return this.resolveUser(key, realmKey);\n            }\n        }\n\n        return null;\n    }\n\n    private async resolveClient(\n        key: string,\n        realmKey?: string,\n    ) : Promise<ClientIdentity | null> {\n        let data : Client | null;\n\n        if (isUUID(key)) {\n            data = await this.clientRepository.findOneById(key);\n        } else {\n            data = await this.clientRepository.findOneByName(key, realmKey);\n        }\n\n        if (data) {\n            return {\n                type: IdentityType.CLIENT,\n                data, \n            };\n        }\n\n        return null;\n    }\n\n    private async resolveRobot(\n        key: string,\n        realmKey?: string,\n    ) : Promise<RobotIdentity | null> {\n        let data : Robot | null;\n\n        if (isUUID(key)) {\n            data = await this.robotRepository.findOneById(key);\n        } else {\n            data = await this.robotRepository.findOneByName(key, realmKey);\n        }\n\n        if (data) {\n            return {\n                type: IdentityType.ROBOT,\n                data, \n            };\n        }\n\n        return null;\n    }\n\n    private async resolveUser(\n        key: string,\n        realmKey?: string,\n    ) : Promise<UserIdentity | null> {\n        let data : User | null;\n\n        if (isUUID(key)) {\n            data = await this.userRepository.findOneById(key);\n        } else {\n            data = await this.userRepository.findOneByName(key, realmKey);\n        }\n\n        if (data) {\n            return {\n                type: IdentityType.USER,\n                data, \n            };\n        }\n\n        return null;\n    }\n}\n"],"mappings":";;;AAqBA,IAAaE,mBAAb,MAAaA;CACCC;CAEAC;CAEAC;CAEV,YAAYC,KAA8B;AACtC,OAAKH,mBAAmBG,IAAIH;AAC5B,OAAKC,iBAAiBE,IAAIF;AAC1B,OAAKC,kBAAkBC,IAAID;;CAG/B,MAAME,QACFC,MACAC,KACAC,UACwB;AACxB,UAAQF,MAAR;GACI,KAAKR,aAAaW,OACd,QAAO,KAAKC,cAAcH,KAAKC,SAAAA;GAEnC,KAAKV,aAAaa,MACd,QAAO,KAAKC,aAAaL,KAAKC,SAAAA;GAElC,KAAKV,aAAae,KACd,QAAO,KAAKC,YAAYP,KAAKC,SAAAA;;AAIrC,SAAO;;CAGX,MAAcE,cACVH,KACAC,UAC+B;EAC/B,IAAIO;AAEJ,MAAIhB,OAAOQ,IAAAA,CACPQ,QAAO,MAAM,KAAKd,iBAAiBe,YAAYT,IAAAA;MAE/CQ,QAAO,MAAM,KAAKd,iBAAiBgB,cAAcV,KAAKC,SAAAA;AAG1D,MAAIO,KACA,QAAO;GACHT,MAAMR,aAAaW;GACnBM;GACJ;AAGJ,SAAO;;CAGX,MAAcH,aACVL,KACAC,UAC8B;EAC9B,IAAIO;AAEJ,MAAIhB,OAAOQ,IAAAA,CACPQ,QAAO,MAAM,KAAKZ,gBAAgBa,YAAYT,IAAAA;MAE9CQ,QAAO,MAAM,KAAKZ,gBAAgBc,cAAcV,KAAKC,SAAAA;AAGzD,MAAIO,KACA,QAAO;GACHT,MAAMR,aAAaa;GACnBI;GACJ;AAGJ,SAAO;;CAGX,MAAcD,YACVP,KACAC,UAC6B;EAC7B,IAAIO;AAEJ,MAAIhB,OAAOQ,IAAAA,CACPQ,QAAO,MAAM,KAAKb,eAAec,YAAYT,IAAAA;MAE7CQ,QAAO,MAAM,KAAKb,eAAee,cAAcV,KAAKC,SAAAA;AAGxD,MAAIO,KACA,QAAO;GACHT,MAAMR,aAAae;GACnBE;GACJ;AAGJ,SAAO"}

package/dist/core/identity/resolver/types.mjs

@@ -0,0 +1 @@
+export {};

package/dist/core/index.mjs

@@ -0,0 +1,104 @@
+import { ClientCredentialsService } from "./authentication/credential/entities/client/module.mjs";
+import { RobotCredentialsService } from "./authentication/credential/entities/robot/module.mjs";
+import { UserCredentialsService } from "./authentication/credential/entities/user/module.mjs";
+import { BaseCredentialsAuthenticator } from "./authentication/base.mjs";
+import { ClientAuthenticator } from "./authentication/entities/client/module.mjs";
+import { RobotAuthenticator } from "./authentication/entities/robot/module.mjs";
+import { UserAuthenticator } from "./authentication/entities/user/module.mjs";
+import { CredentialsAuthenticator } from "./authentication/module.mjs";
+import { SessionManager } from "./authentication/session/module.mjs";
+import "./authentication/index.mjs";
+import { AbstractEntityService } from "./entities/service.mjs";
+import { ClientService } from "./entities/client/service.mjs";
+import { ClientPermissionService } from "./entities/client-permission/service.mjs";
+import { ClientRoleService } from "./entities/client-role/service.mjs";
+import { ClientScopeService } from "./entities/client-scope/service.mjs";
+import { PermissionService } from "./entities/permission/service.mjs";
+import { PermissionPolicyService } from "./entities/permission-policy/service.mjs";
+import { PolicyService } from "./entities/policy/service.mjs";
+import { RealmService } from "./entities/realm/service.mjs";
+import { RobotService } from "./entities/robot/service.mjs";
+import { RobotPermissionService } from "./entities/robot-permission/service.mjs";
+import { RobotRoleService } from "./entities/robot-role/service.mjs";
+import { RoleService } from "./entities/role/service.mjs";
+import { RoleAttributeService } from "./entities/role-attribute/service.mjs";
+import { RolePermissionService } from "./entities/role-permission/service.mjs";
+import { ScopeService } from "./entities/scope/service.mjs";
+import { UserService } from "./entities/user/service.mjs";
+import { UserAttributeService } from "./entities/user-attribute/service.mjs";
+import { UserPermissionService } from "./entities/user-permission/service.mjs";
+import { UserRoleService } from "./entities/user-role/service.mjs";
+import { IdentityProviderRoleMappingService } from "./entities/identity-provider-role-mapping/service.mjs";
+import "./entities/index.mjs";
+import { OAuth2AuthorizationCodeIssuer } from "./oauth2/authorization/code/issuer/module.mjs";
+import { base64URLEncode, buildOAuth2CodeChallenge, buildOAuth2TokenHash, generateOAuth2CodeVerifier } from "./oauth2/authorization/helpers.mjs";
+import { OAuth2AuthorizationCodeVerifier } from "./oauth2/authorization/code/verifier/module.mjs";
+import { OAuth2AuthorizationCodeRequestVerifier } from "./oauth2/authorization/code-request/verifier/module.mjs";
+import { OAuth2AuthorizationCodeRequestValidator } from "./oauth2/authorization/code-request/validator.mjs";
+import { OAuth2AuthorizationStateManager } from "./oauth2/authorization/state/module.mjs";
+import { OAuth2Authorization } from "./oauth2/authorization/module.mjs";
+import { buildOAuth2BearerTokenResponse } from "./oauth2/response/bearer.mjs";
+import { OAuth2AuthorizeGrant } from "./oauth2/grant-types/authorize.mjs";
+import { ClientCredentialsGrant } from "./oauth2/grant-types/client-credentials.mjs";
+import { IdentityGrantType } from "./oauth2/grant-types/identity.mjs";
+import { PasswordGrantType } from "./oauth2/grant-types/password.mjs";
+import { OAuth2RefreshTokenGrant } from "./oauth2/grant-types/refresh-token.mjs";
+import { RobotCredentialsGrant } from "./oauth2/grant-types/robot-credentials.mjs";
+import { OAuth2OpenIDClaimsBuilder } from "./oauth2/openid/claims.mjs";
+import { OAuth2ScopeAttributesResolver } from "./oauth2/scope/resolver.mjs";
+import { OAuth2AccessTokenIssuer } from "./oauth2/token/issuer/access/module.mjs";
+import { OAuth2OpenIDTokenIssuer } from "./oauth2/token/issuer/open-id/module.mjs";
+import { OAuth2RefreshTokenIssuer } from "./oauth2/token/issuer/refresh/module.mjs";
+import { OAuth2TokenRevoker } from "./oauth2/token/revoker/module.mjs";
+import { OAuth2TokenSigner } from "./oauth2/token/signer/module.mjs";
+import { OAuth2TokenVerifier } from "./oauth2/token/verifier/module.mjs";
+import "./oauth2/index.mjs";
+import { PasswordRecoveryService } from "./identity/password-recovery/service.mjs";
+import { IdentityPermissionProvider } from "./identity/permission/module.mjs";
+import { IdentityProviderMapperOperation } from "./identity/provider/mapper/constants.mjs";
+import { IdentityProviderAccountBaseMapper } from "./identity/provider/mapper/base.mjs";
+import { IdentityProviderAttributeMapper } from "./identity/provider/mapper/attributes/module.mjs";
+import { IdentityProviderRoleMapper } from "./identity/provider/mapper/role/module.mjs";
+import { IdentityProviderPermissionMapper } from "./identity/provider/mapper/permission/module.mjs";
+import { IdentityProviderAccountManager } from "./identity/provider/account/module.mjs";
+import { IdentityProviderLdapAuthenticator } from "./identity/provider/authentication/protocols/ldap/module.mjs";
+import { IdentityProviderLdapCollectionAuthenticator } from "./identity/provider/authentication/protocols/ldap/collection.mjs";
+import { IdentityProviderOAuth2Authenticator } from "./identity/provider/authentication/protocols/oauth2/module.mjs";
+import { IdentityProviderOpenIDAuthenticator } from "./identity/provider/authentication/protocols/open-id/module.mjs";
+import { IdentityProviderFacebookAuthenticator } from "./identity/provider/authentication/presets/facebook.mjs";
+import { IdentityProviderGithubAuthenticator } from "./identity/provider/authentication/presets/github.mjs";
+import { IdentityProviderGoogleAuthenticator } from "./identity/provider/authentication/presets/google.mjs";
+import { IdentityProviderInstagramAuthenticator } from "./identity/provider/authentication/presets/instagram.mjs";
+import { IdentityProviderPaypalAuthenticator } from "./identity/provider/authentication/presets/paypal.mjs";
+import { IDENTITY_PROVIDER_LDAP_COLLECTION_AUTHENTICATOR_TOKEN } from "./identity/provider/authentication/constants.mjs";
+import { createIdentityProviderOAuth2Authenticator } from "./identity/provider/authentication/factory.mjs";
+import { RegistrationService } from "./identity/registration/service.mjs";
+import { IdentityResolver } from "./identity/resolver/module.mjs";
+import "./identity/index.mjs";
+import { ProvisioningEntityStrategyType } from "./provisioning/strategy/constants.mjs";
+import { normalizeEntityProvisioningStrategy } from "./provisioning/strategy/normalize.mjs";
+import { ProvisioningStrategyValidator } from "./provisioning/strategy/validator.mjs";
+import { PermissionProvisioningValidator } from "./provisioning/entities/permission/validator.mjs";
+import { RoleProvisioningValidator } from "./provisioning/entities/role/validator.mjs";
+import { ClientProvisioningValidator } from "./provisioning/entities/client/validator.mjs";
+import { RobotProvisioningValidator } from "./provisioning/entities/robot/validator.mjs";
+import { ScopeProvisioningValidator } from "./provisioning/entities/scope/validator.mjs";
+import { UserProvisioningValidator } from "./provisioning/entities/user/validator.mjs";
+import { RealmProvisioningValidator } from "./provisioning/entities/realm/validator.mjs";
+import { RootProvisioningValidator } from "./provisioning/entities/root/validator.mjs";
+import { ProvisioningEntityResolver } from "./provisioning/synchronizer/entity-resolver.mjs";
+import { ProvisioningJunctionSynchronizer } from "./provisioning/synchronizer/junction-synchronizer.mjs";
+import { ClientProvisioningSynchronizer } from "./provisioning/synchronizer/client/module.mjs";
+import { PermissionProvisioningSynchronizer } from "./provisioning/synchronizer/permission/module.mjs";
+import { PolicyProvisioningSynchronizer } from "./provisioning/synchronizer/policy/module.mjs";
+import { RealmProvisioningSynchronizer } from "./provisioning/synchronizer/realm/module.mjs";
+import { RoleProvisioningSynchronizer } from "./provisioning/synchronizer/role/module.mjs";
+import { GraphProvisioningSynchronizer } from "./provisioning/synchronizer/root/module.mjs";
+import { RobotProvisioningSynchronizer } from "./provisioning/synchronizer/robot/module.mjs";
+import { ScopeProvisioningSynchronizer } from "./provisioning/synchronizer/scope/module.mjs";
+import { UserProvisioningSynchronizer } from "./provisioning/synchronizer/user/module.mjs";
+import "./provisioning/index.mjs";
+import { PermissionBindingPolicyEvaluator } from "./security/policy/evaluator.mjs";
+import { PolicyEngine } from "./security/policy/engine.mjs";
+import "./security/index.mjs";
+export { AbstractEntityService, BaseCredentialsAuthenticator, ClientAuthenticator, ClientCredentialsGrant, ClientCredentialsService, ClientPermissionService, ClientProvisioningSynchronizer, ClientProvisioningValidator, ClientRoleService, ClientScopeService, ClientService, CredentialsAuthenticator, GraphProvisioningSynchronizer, IDENTITY_PROVIDER_LDAP_COLLECTION_AUTHENTICATOR_TOKEN, IdentityGrantType, IdentityPermissionProvider, IdentityProviderAccountBaseMapper, IdentityProviderAccountManager, IdentityProviderAttributeMapper, IdentityProviderFacebookAuthenticator, IdentityProviderGithubAuthenticator, IdentityProviderGoogleAuthenticator, IdentityProviderInstagramAuthenticator, IdentityProviderLdapAuthenticator, IdentityProviderLdapCollectionAuthenticator, IdentityProviderMapperOperation, IdentityProviderOAuth2Authenticator, IdentityProviderOpenIDAuthenticator, IdentityProviderPaypalAuthenticator, IdentityProviderPermissionMapper, IdentityProviderRoleMapper, IdentityProviderRoleMappingService, IdentityResolver, OAuth2AccessTokenIssuer, OAuth2Authorization, OAuth2AuthorizationCodeIssuer, OAuth2AuthorizationCodeRequestValidator, OAuth2AuthorizationCodeRequestVerifier, OAuth2AuthorizationCodeVerifier, OAuth2AuthorizationStateManager, OAuth2AuthorizeGrant, OAuth2OpenIDClaimsBuilder, OAuth2OpenIDTokenIssuer, OAuth2RefreshTokenGrant, OAuth2RefreshTokenIssuer, OAuth2ScopeAttributesResolver, OAuth2TokenRevoker, OAuth2TokenSigner, OAuth2TokenVerifier, PasswordGrantType, PasswordRecoveryService, PermissionBindingPolicyEvaluator, PermissionPolicyService, PermissionProvisioningSynchronizer, PermissionProvisioningValidator, PermissionService, PolicyEngine, PolicyProvisioningSynchronizer, PolicyService, ProvisioningEntityResolver, ProvisioningEntityStrategyType, ProvisioningJunctionSynchronizer, ProvisioningStrategyValidator, RealmProvisioningSynchronizer, RealmProvisioningValidator, RealmService, RegistrationService, RobotAuthenticator, RobotCredentialsGrant, RobotCredentialsService, RobotPermissionService, RobotProvisioningSynchronizer, RobotProvisioningValidator, RobotRoleService, RobotService, RoleAttributeService, RolePermissionService, RoleProvisioningSynchronizer, RoleProvisioningValidator, RoleService, RootProvisioningValidator, ScopeProvisioningSynchronizer, ScopeProvisioningValidator, ScopeService, SessionManager, UserAttributeService, UserAuthenticator, UserCredentialsService, UserPermissionService, UserProvisioningSynchronizer, UserProvisioningValidator, UserRoleService, UserService, base64URLEncode, buildOAuth2BearerTokenResponse, buildOAuth2CodeChallenge, buildOAuth2TokenHash, createIdentityProviderOAuth2Authenticator, generateOAuth2CodeVerifier, normalizeEntityProvisioningStrategy };

package/dist/core/ldap/index.mjs

@@ -0,0 +1 @@
+export {};

package/dist/core/ldap/types.mjs

@@ -0,0 +1 @@
+export {};

package/dist/core/mail/index.mjs

@@ -0,0 +1 @@
+export {};

package/dist/core/mail/types.mjs

@@ -0,0 +1 @@
+export {};

package/dist/core/oauth2/authorization/code/index.mjs

@@ -0,0 +1,4 @@
+import { OAuth2AuthorizationCodeIssuer } from "./issuer/module.mjs";
+import { OAuth2AuthorizationCodeVerifier } from "./verifier/module.mjs";
+import "./verifier/index.mjs";
+export { OAuth2AuthorizationCodeIssuer, OAuth2AuthorizationCodeVerifier };

package/dist/core/oauth2/authorization/code/issuer/index.mjs

@@ -0,0 +1,2 @@
+import { OAuth2AuthorizationCodeIssuer } from "./module.mjs";
+export { OAuth2AuthorizationCodeIssuer };

package/dist/core/oauth2/authorization/code/issuer/module.mjs

@@ -0,0 +1,33 @@
+//#region src/core/oauth2/authorization/code/issuer/module.ts
+var OAuth2AuthorizationCodeIssuer = class {
+	repository;
+	options;
+	constructor(repository, options = {}) {
+		this.repository = repository;
+		this.options = options;
+	}
+	async issue(input, identity, options = {}) {
+		const entity = {
+			redirect_uri: input.redirect_uri,
+			client_id: input.client_id,
+			scope: input.scope,
+			nonce: input.nonce,
+			code_challenge: input.code_challenge,
+			code_challenge_method: input.code_challenge_method,
+			realm_id: identity.data.realm.id,
+			realm_name: identity.data.realm.name,
+			sub: identity.data.id,
+			sub_kind: identity.type
+		};
+		if (options.idToken) entity.id_token = options.idToken;
+		return this.repository.save(entity, { maxAge: options.maxAge ?? this.options.maxAge });
+	}
+	async updateIdToken(entity, idToken) {
+		entity.id_token = idToken;
+		await this.repository.save(entity, { maxAge: this.options.maxAge });
+	}
+};
+//#endregion
+export { OAuth2AuthorizationCodeIssuer };
+
+//# sourceMappingURL=module.mjs.map

package/dist/core/oauth2/authorization/code/issuer/module.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"module.mjs","names":["OAuth2AuthorizationCodeIssuer","repository","options","issue","input","identity","entity","redirect_uri","client_id","scope","nonce","code_challenge","code_challenge_method","realm_id","data","realm","id","realm_name","name","sub","sub_kind","type","idToken","id_token","save","maxAge","updateIdToken"],"sources":["../../../../../../src/core/oauth2/authorization/code/issuer/module.ts"],"sourcesContent":["/*\n * Copyright (c) 2025.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport type { Identity, OAuth2AuthorizationCode, OAuth2AuthorizationCodeRequest } from '@authup/core-kit';\nimport type { IOAuth2AuthorizationCodeRepository, OAuth2AuthorizationCodeInput } from '../repository/index.ts';\nimport type { IOAuth2AuthorizationCodeIssuer, OAuth2AuthorizationCodeIssuerOptions } from './types.ts';\n\nexport class OAuth2AuthorizationCodeIssuer implements IOAuth2AuthorizationCodeIssuer {\n    protected repository: IOAuth2AuthorizationCodeRepository;\n\n    protected options: OAuth2AuthorizationCodeIssuerOptions;\n\n    constructor(\n        repository: IOAuth2AuthorizationCodeRepository,\n        options: OAuth2AuthorizationCodeIssuerOptions = {},\n    ) {\n        this.repository = repository;\n        this.options = options;\n    }\n\n    async issue(\n        input: OAuth2AuthorizationCodeRequest,\n        identity: Identity,\n        options: OAuth2AuthorizationCodeIssuerOptions = {},\n    ) : Promise<OAuth2AuthorizationCode> {\n        const entity: OAuth2AuthorizationCodeInput = {\n            redirect_uri: input.redirect_uri,\n            client_id: input.client_id,\n            scope: input.scope,\n            nonce: input.nonce,\n            code_challenge: input.code_challenge,\n            code_challenge_method: input.code_challenge_method,\n\n            realm_id: identity.data.realm.id,\n            realm_name: identity.data.realm.name,\n            sub: identity.data.id,\n            sub_kind: identity.type,\n        };\n\n        if (options.idToken) {\n            entity.id_token = options.idToken;\n        }\n\n        return this.repository.save(entity, { maxAge: options.maxAge ?? this.options.maxAge });\n    }\n\n    async updateIdToken(\n        entity: OAuth2AuthorizationCode,\n        idToken: string,\n    ) : Promise<void> {\n        entity.id_token = idToken;\n\n        await this.repository.save(entity, { maxAge: this.options.maxAge });\n    }\n}\n"],"mappings":";AAWA,IAAaA,gCAAb,MAAaA;CACCC;CAEAC;CAEV,YACID,YACAC,UAAgD,EAAE,EACpD;AACE,OAAKD,aAAaA;AAClB,OAAKC,UAAUA;;CAGnB,MAAMC,MACFC,OACAC,UACAH,UAAgD,EAAE,EACjB;EACjC,MAAMI,SAAuC;GACzCC,cAAcH,MAAMG;GACpBC,WAAWJ,MAAMI;GACjBC,OAAOL,MAAMK;GACbC,OAAON,MAAMM;GACbC,gBAAgBP,MAAMO;GACtBC,uBAAuBR,MAAMQ;GAE7BC,UAAUR,SAASS,KAAKC,MAAMC;GAC9BC,YAAYZ,SAASS,KAAKC,MAAMG;GAChCC,KAAKd,SAASS,KAAKE;GACnBI,UAAUf,SAASgB;GACvB;AAEA,MAAInB,QAAQoB,QACRhB,QAAOiB,WAAWrB,QAAQoB;AAG9B,SAAO,KAAKrB,WAAWuB,KAAKlB,QAAQ,EAAEmB,QAAQvB,QAAQuB,UAAU,KAAKvB,QAAQuB,QAAO,CAAA;;CAGxF,MAAMC,cACFpB,QACAgB,SACc;AACdhB,SAAOiB,WAAWD;AAElB,QAAM,KAAKrB,WAAWuB,KAAKlB,QAAQ,EAAEmB,QAAQ,KAAKvB,QAAQuB,QAAO,CAAA"}

package/dist/core/oauth2/authorization/code/issuer/types.mjs

@@ -0,0 +1 @@
+export {};

package/dist/core/oauth2/authorization/code/repository/index.mjs

@@ -0,0 +1 @@
+export {};

package/dist/core/oauth2/authorization/code/repository/types.mjs

@@ -0,0 +1 @@
+export {};

package/dist/core/oauth2/authorization/code/verifier/index.mjs

@@ -0,0 +1,2 @@
+import { OAuth2AuthorizationCodeVerifier } from "./module.mjs";
+export { OAuth2AuthorizationCodeVerifier };

package/dist/core/oauth2/authorization/code/verifier/module.mjs

@@ -0,0 +1,27 @@
+import { buildOAuth2CodeChallenge } from "../../helpers.mjs";
+import { OAuth2AuthorizationCodeChallengeMethod, OAuth2Error } from "@authup/specs";
+//#region src/core/oauth2/authorization/code/verifier/module.ts
+var OAuth2AuthorizationCodeVerifier = class {
+	repository;
+	constructor(repository) {
+		this.repository = repository;
+	}
+	async verify(code, options) {
+		const entity = await this.repository.popOneById(code);
+		if (!entity) throw OAuth2Error.grantInvalid();
+		if (entity.redirect_uri) {
+			if (!options.redirectUri || entity.redirect_uri !== options.redirectUri) throw OAuth2Error.redirectUriMismatch();
+		}
+		if (entity.code_challenge) if (entity.code_challenge_method === OAuth2AuthorizationCodeChallengeMethod.PLAIN) {
+			if (options.codeVerifier !== entity.code_challenge) throw OAuth2Error.grantInvalid("PKCE code_verifier mismatch.");
+		} else {
+			if (!options.codeVerifier) throw OAuth2Error.grantInvalid("Code verifier invalid.");
+			if (await buildOAuth2CodeChallenge(options.codeVerifier) !== entity.code_challenge) throw OAuth2Error.grantInvalid("PKCE code_verifier mismatch.");
+		}
+		return entity;
+	}
+};
+//#endregion
+export { OAuth2AuthorizationCodeVerifier };
+
+//# sourceMappingURL=module.mjs.map

package/dist/core/oauth2/authorization/code/verifier/module.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"module.mjs","names":["OAuth2AuthorizationCodeChallengeMethod","OAuth2Error","buildOAuth2CodeChallenge","OAuth2AuthorizationCodeVerifier","repository","verify","code","options","entity","popOneById","grantInvalid","redirect_uri","redirectUri","redirectUriMismatch","code_challenge","code_challenge_method","PLAIN","codeVerifier","codeVerifierHash"],"sources":["../../../../../../src/core/oauth2/authorization/code/verifier/module.ts"],"sourcesContent":["/*\n * Copyright (c) 2025.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport type { OAuth2AuthorizationCode } from '@authup/core-kit';\nimport { OAuth2AuthorizationCodeChallengeMethod, OAuth2Error } from '@authup/specs';\nimport { buildOAuth2CodeChallenge } from '../../helpers.ts';\n\nimport type { IOAuth2AuthorizationCodeRepository } from '../repository/index.ts';\nimport type { IOAuth2AuthorizationCodeVerifier, IOAuth2AuthorizationCodeVerifyOptions } from './types.ts';\n\nexport class OAuth2AuthorizationCodeVerifier implements IOAuth2AuthorizationCodeVerifier {\n    protected repository : IOAuth2AuthorizationCodeRepository;\n\n    constructor(repository: IOAuth2AuthorizationCodeRepository) {\n        this.repository = repository;\n    }\n\n    async verify(code: string, options: IOAuth2AuthorizationCodeVerifyOptions) : Promise<OAuth2AuthorizationCode> {\n        const entity = await this.repository.popOneById(code);\n        if (!entity) {\n            throw OAuth2Error.grantInvalid();\n        }\n\n        if (entity.redirect_uri) {\n            if (!options.redirectUri || entity.redirect_uri !== options.redirectUri) {\n                throw OAuth2Error.redirectUriMismatch();\n            }\n        }\n\n        if (entity.code_challenge) {\n            if (entity.code_challenge_method === OAuth2AuthorizationCodeChallengeMethod.PLAIN) {\n                if (options.codeVerifier !== entity.code_challenge) {\n                    throw OAuth2Error.grantInvalid('PKCE code_verifier mismatch.');\n                }\n            } else {\n                if (!options.codeVerifier) {\n                    throw OAuth2Error.grantInvalid('Code verifier invalid.');\n                }\n\n                const codeVerifierHash = await buildOAuth2CodeChallenge(options.codeVerifier);\n                if (codeVerifierHash !== entity.code_challenge) {\n                    throw OAuth2Error.grantInvalid('PKCE code_verifier mismatch.');\n                }\n            }\n        }\n\n        return entity;\n    }\n}\n"],"mappings":";;;AAcA,IAAaG,kCAAb,MAAaA;CACCC;CAEV,YAAYA,YAAgD;AACxD,OAAKA,aAAaA;;CAGtB,MAAMC,OAAOC,MAAcC,SAAmF;EAC1G,MAAMC,SAAS,MAAM,KAAKJ,WAAWK,WAAWH,KAAAA;AAChD,MAAI,CAACE,OACD,OAAMP,YAAYS,cAAY;AAGlC,MAAIF,OAAOG;OACH,CAACJ,QAAQK,eAAeJ,OAAOG,iBAAiBJ,QAAQK,YACxD,OAAMX,YAAYY,qBAAmB;;AAI7C,MAAIL,OAAOM,eACP,KAAIN,OAAOO,0BAA0Bf,uCAAuCgB;OACpET,QAAQU,iBAAiBT,OAAOM,eAChC,OAAMb,YAAYS,aAAa,+BAAA;SAEhC;AACH,OAAI,CAACH,QAAQU,aACT,OAAMhB,YAAYS,aAAa,yBAAA;AAInC,OAAIQ,MAD2BhB,yBAAyBK,QAAQU,aAAY,KACnDT,OAAOM,eAC5B,OAAMb,YAAYS,aAAa,+BAAA;;AAK3C,SAAOF"}

package/dist/core/oauth2/authorization/code/verifier/types.mjs

@@ -0,0 +1 @@
+export {};