@authup/server-core 1.0.0-beta.36 → 1.0.0-beta.37

package/dist/adapters/http/controllers/workflows/activate/module.mjs

@@ -0,0 +1,51 @@
+import { ActivateRequestValidator } from "./validator.mjs";
+import { sendAccepted } from "routup";
+import { DBody, DController, DPost, DRequest, DResponse } from "@routup/decorators";
+//#region src/adapters/http/controllers/workflows/activate/module.ts
+function _ts_decorate(decorators, target, key, desc) {
+	var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+	if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+	else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+	return c > 3 && r && Object.defineProperty(target, key, r), r;
+}
+function _ts_metadata(k, v) {
+	if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+}
+function _ts_param(paramIndex, decorator) {
+	return function(target, key) {
+		decorator(target, key, paramIndex);
+	};
+}
+var ActivateController = class {
+	service;
+	constructor(ctx) {
+		this.service = ctx.service;
+	}
+	async execute(data, req, res) {
+		const validated = await new ActivateRequestValidator().run(data);
+		await this.service.activate(validated);
+		return sendAccepted(res);
+	}
+};
+_ts_decorate([
+	DPost("", []),
+	_ts_param(0, DBody()),
+	_ts_param(1, DRequest()),
+	_ts_param(2, DResponse()),
+	_ts_metadata("design:type", Function),
+	_ts_metadata("design:paramtypes", [
+		Object,
+		typeof Request === "undefined" ? Object : Request,
+		typeof Response === "undefined" ? Object : Response
+	]),
+	_ts_metadata("design:returntype", Promise)
+], ActivateController.prototype, "execute", null);
+ActivateController = _ts_decorate([
+	DController("/activate"),
+	_ts_metadata("design:type", Function),
+	_ts_metadata("design:paramtypes", [typeof ActivateControllerContext === "undefined" ? Object : ActivateControllerContext])
+], ActivateController);
+//#endregion
+export { ActivateController };
+
+//# sourceMappingURL=module.mjs.map

package/dist/adapters/http/controllers/workflows/activate/module.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"module.mjs","names":["DBody","DController","DPost","DRequest","DResponse","sendAccepted","ActivateRequestValidator","ActivateController","service","ctx","execute","data","req","res","validator","validated","run","activate"],"sources":["../../../../../../src/adapters/http/controllers/workflows/activate/module.ts"],"sourcesContent":["/*\n * Copyright (c) 2022-2024.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport {\n    DBody, \n    DController, \n    DPost, \n    DRequest, \n    DResponse,\n} from '@routup/decorators';\nimport type { Request, Response } from 'routup';\nimport { sendAccepted } from 'routup';\nimport type { IRegistrationService } from '../../../../../core/index.ts';\nimport { ActivateRequestValidator } from './validator.ts';\n\nexport type ActivateControllerContext = {\n    service: IRegistrationService,\n};\n\n@DController('/activate')\nexport class ActivateController {\n    protected service: IRegistrationService;\n\n    constructor(ctx: ActivateControllerContext) {\n        this.service = ctx.service;\n    }\n\n    @DPost('', [])\n    async execute(\n        @DBody() data: any,\n        @DRequest() req: Request,\n        @DResponse() res: Response,\n    ): Promise<any> {\n        const validator = new ActivateRequestValidator();\n        const validated = await validator.run(data);\n\n        await this.service.activate(validated);\n\n        return sendAccepted(res);\n    }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;AAwBA,IAAaO,qBAAb,MAAaA;CACCC;CAEV,YAAYC,KAAgC;AACxC,OAAKD,UAAUC,IAAID;;CAGvB,MACME,QACF,MACA,KACA,KACY;EAEZ,MAAMK,YAAY,MAAMD,IADFR,0BACEQ,CAAUE,IAAIL,KAAAA;AAEtC,QAAM,KAAKH,QAAQS,SAASF,UAAAA;AAE5B,SAAOV,aAAaQ,IAAAA"}

package/dist/adapters/http/controllers/workflows/activate/validator.mjs

@@ -0,0 +1,18 @@
+import { Container } from "validup";
+import { createValidationChain, createValidator } from "@validup/adapter-validator";
+//#region src/adapters/http/controllers/workflows/activate/validator.ts
+var ActivateRequestValidator = class extends Container {
+	initialize() {
+		super.initialize();
+		this.mount("token", createValidator(() => {
+			return createValidationChain().exists().notEmpty().isLength({
+				min: 3,
+				max: 256
+			});
+		}));
+	}
+};
+//#endregion
+export { ActivateRequestValidator };
+
+//# sourceMappingURL=validator.mjs.map

package/dist/adapters/http/controllers/workflows/activate/validator.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"validator.mjs","names":["createValidationChain","createValidator","Container","ActivateRequestValidator","initialize","mount","chain","exists","notEmpty","isLength","min","max"],"sources":["../../../../../../src/adapters/http/controllers/workflows/activate/validator.ts"],"sourcesContent":["/*\n * Copyright (c) 2025.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport { createValidationChain, createValidator } from '@validup/adapter-validator';\nimport { Container } from 'validup';\n\nexport class ActivateRequestValidator extends Container<{ token: string }> {\n    protected initialize() {\n        super.initialize();\n\n        this.mount(\n            'token',\n            createValidator(() => {\n                const chain = createValidationChain();\n                return chain.exists()\n                    .notEmpty()\n                    .isLength({\n                        min: 3,\n                        max: 256, \n                    });\n            }),\n        );\n    }\n}\n"],"mappings":";;;AAUA,IAAaG,2BAAb,cAA8CD,UAAAA;CAChCE,aAAa;AACnB,QAAMA,YAAAA;AAEN,OAAKC,MACD,SACAJ,sBAAgB;AAEZ,UADcD,uBACPM,CAAMC,QAAM,CACdC,UAAQ,CACRC,SAAS;IACNC,KAAK;IACLC,KAAK;IACT,CAAA;IACR,CAAA"}

package/dist/adapters/http/controllers/workflows/authorize/index.mjs

@@ -0,0 +1,2 @@
+import { AuthorizeController } from "./module.mjs";
+export { AuthorizeController };

package/dist/adapters/http/controllers/workflows/authorize/module.mjs

@@ -0,0 +1,137 @@
+import { OAuth2AuthorizationCodeRequestValidator } from "../../../../../core/oauth2/authorization/code-request/validator.mjs";
+import "../../../../../core/index.mjs";
+import { HTTPOAuth2Authorizer } from "../../../adapters/oauth2/authorization/module.mjs";
+import "../../../adapters/index.mjs";
+import { ForceUserLoggedInMiddleware } from "../../../middleware/built-in/loggedin/user.mjs";
+import { CLIENT_WEB_SLIM_PACKAGE_PATH } from "../../../../../path.mjs";
+import { sanitizeError } from "../../../../../utils/error.mjs";
+import "../../../../../utils/index.mjs";
+import "../../../middleware/index.mjs";
+import path from "node:path";
+import { CodeTransformation, isCodeTransformation } from "typeorm-extension";
+import { send, useRequestParam } from "routup";
+import { RoutupContainerAdapter } from "@validup/adapter-routup";
+import { DController, DGet, DPost, DRequest, DResponse } from "@routup/decorators";
+import { load } from "locter";
+import { URL } from "node:url";
+import fs from "node:fs";
+//#region src/adapters/http/controllers/workflows/authorize/module.ts
+function _ts_decorate(decorators, target, key, desc) {
+	var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+	if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+	else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+	return c > 3 && r && Object.defineProperty(target, key, r), r;
+}
+function _ts_metadata(k, v) {
+	if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+}
+function _ts_param(paramIndex, decorator) {
+	return function(target, key) {
+		decorator(target, key, paramIndex);
+	};
+}
+var AuthorizeController = class {
+	options;
+	codeRequestVerifier;
+	codeRequestValidator;
+	authorizer;
+	constructor(ctx) {
+		this.options = ctx.options;
+		this.codeRequestVerifier = ctx.codeRequestVerifier;
+		const validator = new OAuth2AuthorizationCodeRequestValidator();
+		this.codeRequestValidator = new RoutupContainerAdapter(validator);
+		this.authorizer = new HTTPOAuth2Authorizer({
+			codeRequestVerifier: this.codeRequestVerifier,
+			accessTokenIssuer: ctx.accessTokenIssuer,
+			openIdTokenIssuer: ctx.openIdTokenIssuer,
+			codeIssuer: ctx.codeIssuer,
+			identityResolver: ctx.identityResolver
+		});
+	}
+	async confirm(req, res) {
+		const result = await this.authorizer.authorizeWithRequest(req);
+		const url = new URL(result.redirectUri);
+		if (result.state) url.searchParams.set("state", result.state);
+		if (result.authorizationCode) url.searchParams.set("code", result.authorizationCode);
+		if (result.accessToken) url.searchParams.set("access_token", result.accessToken);
+		if (result.idToken) url.searchParams.set("id_token", result.idToken);
+		return send(res, { url: url.href });
+	}
+	async serve(req, res) {
+		let codeRequest;
+		let client;
+		let scopes;
+		let error;
+		try {
+			const data = await this.codeRequestValidator.run(req, { locations: ["body", "query"] });
+			const result = await this.codeRequestVerifier.verify(data);
+			client = result.client;
+			scopes = result.scopes;
+			codeRequest = result.data;
+		} catch (e) {
+			const normalized = sanitizeError(e);
+			error = {
+				...normalized,
+				message: normalized.message
+			};
+		}
+		const isJIT = isCodeTransformation(CodeTransformation.JUST_IN_TIME);
+		const payload = {
+			config: { baseURL: this.options.baseURL },
+			data: {
+				codeRequest,
+				error,
+				client,
+				scopes
+			}
+		};
+		let html;
+		let manifest;
+		let render;
+		const clientWebSlimPackagePath = CLIENT_WEB_SLIM_PACKAGE_PATH;
+		if (isJIT) {
+			/**
+			* @type {import('vite').ViteDevServer}
+			*/ const vite = useRequestParam(req, "viteServer");
+			html = await fs.promises.readFile(path.join(clientWebSlimPackagePath, "index.html"), "utf-8");
+			html = await vite.transformIndexHtml("/", html);
+			manifest = {};
+			render = (await vite.ssrLoadModule("/src/server.ts")).render;
+		} else {
+			html = await fs.promises.readFile(path.join(clientWebSlimPackagePath, "dist", "client", "index.html"), "utf-8");
+			manifest = JSON.parse(await fs.promises.readFile(path.join(clientWebSlimPackagePath, "dist", "client", ".vite", "ssr-manifest.json"), "utf-8"));
+			render = (await load(path.join(clientWebSlimPackagePath, "dist", "server", "server.js"))).render;
+		}
+		const [appHtml, preloadLinks] = await render({
+			url: "/authorize",
+			manifest,
+			payload
+		});
+		return send(res, html.replace("<!--preload-links-->", preloadLinks).replace("<!--app-html-->", appHtml));
+	}
+};
+_ts_decorate([
+	DPost("", [ForceUserLoggedInMiddleware]),
+	_ts_param(0, DRequest()),
+	_ts_param(1, DResponse()),
+	_ts_metadata("design:type", Function),
+	_ts_metadata("design:paramtypes", [Object, Object]),
+	_ts_metadata("design:returntype", Promise)
+], AuthorizeController.prototype, "confirm", null);
+_ts_decorate([
+	DGet("", []),
+	_ts_param(0, DRequest()),
+	_ts_param(1, DResponse()),
+	_ts_metadata("design:type", Function),
+	_ts_metadata("design:paramtypes", [Object, Object]),
+	_ts_metadata("design:returntype", Promise)
+], AuthorizeController.prototype, "serve", null);
+AuthorizeController = _ts_decorate([
+	DController("/authorize"),
+	_ts_metadata("design:type", Function),
+	_ts_metadata("design:paramtypes", [typeof AuthorizeControllerContext === "undefined" ? Object : AuthorizeControllerContext])
+], AuthorizeController);
+//#endregion
+export { AuthorizeController };
+
+//# sourceMappingURL=module.mjs.map

package/dist/adapters/http/controllers/workflows/authorize/module.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"module.mjs","names":["DController","DGet","DPost","DRequest","DResponse","load","fs","path","URL","send","useRequestParam","RoutupContainerAdapter","CodeTransformation","isCodeTransformation","CLIENT_WEB_SLIM_PACKAGE_PATH","ForceUserLoggedInMiddleware","HTTPOAuth2Authorizer","OAuth2AuthorizationCodeRequestValidator","sanitizeError","AuthorizeController","options","codeRequestVerifier","codeRequestValidator","authorizer","ctx","validator","accessTokenIssuer","openIdTokenIssuer","codeIssuer","identityResolver","confirm","req","res","result","authorizeWithRequest","url","redirectUri","state","searchParams","set","authorizationCode","accessToken","idToken","href","serve","codeRequest","client","scopes","error","data","run","locations","verify","e","normalized","message","isJIT","JUST_IN_TIME","payload","config","baseURL","html","manifest","render","clientWebSlimPackagePath","vite","promises","readFile","join","transformIndexHtml","ssrLoadModule","JSON","parse","appHtml","preloadLinks","replace"],"sources":["../../../../../../src/adapters/http/controllers/workflows/authorize/module.ts"],"sourcesContent":["/*\n * Copyright (c) 2024.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport {\n    DController, \n    DGet, \n    DPost, \n    DRequest, \n    DResponse,\n} from '@routup/decorators';\nimport { load } from 'locter';\nimport fs from 'node:fs';\nimport path from 'node:path';\nimport { URL } from 'node:url';\nimport { send, useRequestParam } from 'routup';\nimport { RoutupContainerAdapter } from '@validup/adapter-routup';\nimport type { Client, OAuth2AuthorizationCodeRequest, Scope } from '@authup/core-kit';\nimport { CodeTransformation, isCodeTransformation } from 'typeorm-extension';\nimport { CLIENT_WEB_SLIM_PACKAGE_PATH } from '../../../../../path.ts';\nimport { ForceUserLoggedInMiddleware } from '../../../middleware/index.ts';\nimport { HTTPOAuth2Authorizer } from '../../../adapters/index.ts';\nimport type { IOAuth2AuthorizationCodeRequestVerifier } from '../../../../../core/index.ts';\nimport { OAuth2AuthorizationCodeRequestValidator } from '../../../../../core/index.ts';\nimport { sanitizeError } from '../../../../../utils/index.ts';\nimport type { AuthorizeControllerContext, AuthorizeControllerOptions } from './types.ts';\n\n@DController('/authorize')\nexport class AuthorizeController {\n    // todo: maybe /realms/<realm>/protocol/openid-connect/authorize\n    // todo: maybe /realms/<realm>/[...]/authorize\n\n    protected options: AuthorizeControllerOptions;\n\n    protected codeRequestVerifier : IOAuth2AuthorizationCodeRequestVerifier;\n\n    protected codeRequestValidator : RoutupContainerAdapter<OAuth2AuthorizationCodeRequest>;\n\n    protected authorizer: HTTPOAuth2Authorizer;\n\n    // ---------------------------------------------------------\n\n    constructor(ctx: AuthorizeControllerContext) {\n        this.options = ctx.options;\n\n        this.codeRequestVerifier = ctx.codeRequestVerifier;\n\n        const validator = new OAuth2AuthorizationCodeRequestValidator();\n        this.codeRequestValidator = new RoutupContainerAdapter(validator);\n\n        this.authorizer = new HTTPOAuth2Authorizer({\n            codeRequestVerifier: this.codeRequestVerifier,\n            accessTokenIssuer: ctx.accessTokenIssuer,\n            openIdTokenIssuer: ctx.openIdTokenIssuer,\n            codeIssuer: ctx.codeIssuer,\n            identityResolver: ctx.identityResolver,\n        });\n    }\n\n    // ---------------------------------------------------------\n\n    @DPost('', [ForceUserLoggedInMiddleware])\n    async confirm(\n        @DRequest() req: any,\n        @DResponse() res: any,\n    ): Promise<void> {\n        const result = await this.authorizer.authorizeWithRequest(req);\n\n        const url = new URL(result.redirectUri);\n        if (result.state) {\n            url.searchParams.set('state', result.state);\n        }\n\n        if (result.authorizationCode) {\n            url.searchParams.set('code', result.authorizationCode);\n        }\n\n        if (result.accessToken) {\n            url.searchParams.set('access_token', result.accessToken);\n        }\n\n        if (result.idToken) {\n            url.searchParams.set('id_token', result.idToken);\n        }\n\n        return send(res, { url: url.href });\n    }\n\n    @DGet('', [])\n    async serve(\n        @DRequest() req: any,\n        @DResponse() res: any,\n    ): Promise<void> {\n        let codeRequest : OAuth2AuthorizationCodeRequest | undefined;\n\n        let client : Client | undefined;\n        let scopes : Scope[] | undefined;\n\n        let error : Error | undefined;\n\n        try {\n            const data = await this.codeRequestValidator.run(req, { locations: ['body', 'query'] });\n\n            const result = await this.codeRequestVerifier.verify(data);\n            client = result.client;\n            scopes = result.scopes;\n\n            codeRequest = result.data;\n        } catch (e) {\n            const normalized = sanitizeError(e);\n            error = {\n                ...normalized,\n                message: normalized.message,\n            };\n        }\n\n        const isJIT = isCodeTransformation(CodeTransformation.JUST_IN_TIME);\n\n        const payload = {\n            config: { baseURL: this.options.baseURL },\n            data: {\n                codeRequest,\n                error,\n                client,\n                scopes,\n            },\n        };\n\n        let html : string;\n        let manifest : Record<string, any>;\n        let render : CallableFunction;\n\n        const clientWebSlimPackagePath = CLIENT_WEB_SLIM_PACKAGE_PATH;\n\n        if (isJIT) {\n            /**\n             * @type {import('vite').ViteDevServer}\n             */\n            const vite = useRequestParam(req, 'viteServer');\n\n            html = await fs.promises.readFile(\n                path.join(clientWebSlimPackagePath, 'index.html'),\n                'utf-8',\n            );\n            html = await vite.transformIndexHtml('/', html);\n            manifest = {};\n            render = (await vite.ssrLoadModule('/src/server.ts')).render;\n        } else {\n            html = await fs.promises.readFile(\n                path.join(clientWebSlimPackagePath, 'dist', 'client', 'index.html'),\n                'utf-8',\n            );\n\n            manifest = JSON.parse(await fs.promises.readFile(\n                path.join(clientWebSlimPackagePath, 'dist', 'client', '.vite', 'ssr-manifest.json'),\n                'utf-8',\n            ));\n\n            render = (await load(path.join(clientWebSlimPackagePath, 'dist', 'server', 'server.js'))).render;\n        }\n\n        const [appHtml, preloadLinks] = await render({\n            url: '/authorize',\n            manifest,\n            payload,\n        });\n\n        return send(\n            res,\n            html\n                .replace('<!--preload-links-->', preloadLinks)\n                .replace('<!--app-html-->', appHtml),\n        );\n    }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AA+BA,IAAamB,sBAAb,MAAaA;CAICC;CAEAC;CAEAC;CAEAC;CAIV,YAAYC,KAAiC;AACzC,OAAKJ,UAAUI,IAAIJ;AAEnB,OAAKC,sBAAsBG,IAAIH;EAE/B,MAAMI,YAAY,IAAIR,yCAAAA;AACtB,OAAKK,uBAAuB,IAAIX,uBAAuBc,UAAAA;AAEvD,OAAKF,aAAa,IAAIP,qBAAqB;GACvCK,qBAAqB,KAAKA;GAC1BK,mBAAmBF,IAAIE;GACvBC,mBAAmBH,IAAIG;GACvBC,YAAYJ,IAAII;GAChBC,kBAAkBL,IAAIK;GAC1B,CAAA;;CAKJ,MACMC,QACF,KACA,KACa;EACb,MAAMG,SAAS,MAAM,KAAKV,WAAWW,qBAAqBH,IAAAA;EAE1D,MAAMI,MAAM,IAAI3B,IAAIyB,OAAOG,YAAW;AACtC,MAAIH,OAAOI,MACPF,KAAIG,aAAaC,IAAI,SAASN,OAAOI,MAAK;AAG9C,MAAIJ,OAAOO,kBACPL,KAAIG,aAAaC,IAAI,QAAQN,OAAOO,kBAAiB;AAGzD,MAAIP,OAAOQ,YACPN,KAAIG,aAAaC,IAAI,gBAAgBN,OAAOQ,YAAW;AAG3D,MAAIR,OAAOS,QACPP,KAAIG,aAAaC,IAAI,YAAYN,OAAOS,QAAO;AAGnD,SAAOjC,KAAKuB,KAAK,EAAEG,KAAKA,IAAIQ,MAAK,CAAA;;CAGrC,MACMC,MACF,KACA,KACa;EACb,IAAIC;EAEJ,IAAIC;EACJ,IAAIC;EAEJ,IAAIC;AAEJ,MAAI;GACA,MAAMC,OAAO,MAAM,KAAK3B,qBAAqB4B,IAAInB,KAAK,EAAEoB,WAAW,CAAC,QAAQ,QAAQ,EAAC,CAAA;GAErF,MAAMlB,SAAS,MAAM,KAAKZ,oBAAoB+B,OAAOH,KAAAA;AACrDH,YAASb,OAAOa;AAChBC,YAASd,OAAOc;AAEhBF,iBAAcZ,OAAOgB;WAChBI,GAAG;GACR,MAAMC,aAAapC,cAAcmC,EAAAA;AACjCL,WAAQ;IACJ,GAAGM;IACHC,SAASD,WAAWC;IACxB;;EAGJ,MAAMC,QAAQ3C,qBAAqBD,mBAAmB6C,aAAY;EAElE,MAAMC,UAAU;GACZC,QAAQ,EAAEC,SAAS,KAAKxC,QAAQwC,SAAQ;GACxCX,MAAM;IACFJ;IACAG;IACAF;IACAC;IACJ;GACJ;EAEA,IAAIc;EACJ,IAAIC;EACJ,IAAIC;EAEJ,MAAMC,2BAA2BlD;AAEjC,MAAI0C,OAAO;;;MAIP,MAAMS,OAAOvD,gBAAgBqB,KAAK,aAAA;AAElC8B,UAAO,MAAMvD,GAAG4D,SAASC,SACrB5D,KAAK6D,KAAKJ,0BAA0B,aAAA,EACpC,QAAA;AAEJH,UAAO,MAAMI,KAAKI,mBAAmB,KAAKR,KAAAA;AAC1CC,cAAW,EAAC;AACZC,aAAU,MAAME,KAAKK,cAAc,iBAAgB,EAAGP;SACnD;AACHF,UAAO,MAAMvD,GAAG4D,SAASC,SACrB5D,KAAK6D,KAAKJ,0BAA0B,QAAQ,UAAU,aAAA,EACtD,QAAA;AAGJF,cAAWS,KAAKC,MAAM,MAAMlE,GAAG4D,SAASC,SACpC5D,KAAK6D,KAAKJ,0BAA0B,QAAQ,UAAU,SAAS,oBAAA,EAC/D,QAAA,CAAA;AAGJD,aAAU,MAAM1D,KAAKE,KAAK6D,KAAKJ,0BAA0B,QAAQ,UAAU,YAAA,CAAY,EAAGD;;EAG9F,MAAM,CAACU,SAASC,gBAAgB,MAAMX,OAAO;GACzC5B,KAAK;GACL2B;GACAJ;GACJ,CAAA;AAEA,SAAOjD,KACHuB,KACA6B,KACKc,QAAQ,wBAAwBD,aAAAA,CAChCC,QAAQ,mBAAmBF,QAAAA,CAAAA;;;;YA9G5B1D,4BAAAA,CAAAA"}

package/dist/adapters/http/controllers/workflows/authorize/types.mjs

@@ -0,0 +1 @@
+export {};

package/dist/adapters/http/controllers/workflows/index.mjs

@@ -0,0 +1,20 @@
+import { ActivateController } from "./activate/module.mjs";
+import "./activate/index.mjs";
+import { AuthorizeController } from "./authorize/module.mjs";
+import "./authorize/index.mjs";
+import { getJwkRouteHandler, getJwksRouteHandler } from "./jwks/handlers/read.mjs";
+import { JwkController } from "./jwks/module.mjs";
+import "./jwks/index.mjs";
+import { OpenIDController } from "./openid/module.mjs";
+import "./openid/index.mjs";
+import { PasswordForgotController } from "./password-forgot/module.mjs";
+import "./password-forgot/index.mjs";
+import { PasswordResetController } from "./password-reset/module.mjs";
+import "./password-reset/index.mjs";
+import { RegisterController } from "./register/module.mjs";
+import "./register/index.mjs";
+import { StatusController } from "./status/module.mjs";
+import "./status/index.mjs";
+import { TokenController } from "./token/module.mjs";
+import "./token/index.mjs";
+export { ActivateController, AuthorizeController, JwkController, OpenIDController, PasswordForgotController, PasswordResetController, RegisterController, StatusController, TokenController, getJwkRouteHandler, getJwksRouteHandler };

package/dist/adapters/http/controllers/workflows/jwks/handlers/index.mjs

@@ -0,0 +1,2 @@
+import { getJwkRouteHandler, getJwksRouteHandler } from "./read.mjs";
+export { getJwkRouteHandler, getJwksRouteHandler };

package/dist/adapters/http/controllers/workflows/jwks/handlers/read.mjs

@@ -0,0 +1,50 @@
+import { getRequestStringParam, getRequestStringParamOrFail } from "../../../../request/helpers/param-id.mjs";
+import "../../../../request/index.mjs";
+import { In } from "typeorm";
+import { AsymmetricKey } from "@authup/server-kit";
+import { JWKType } from "@authup/specs";
+import { BadRequestError, NotFoundError } from "@ebec/http";
+import { send } from "routup";
+//#region src/adapters/http/controllers/workflows/jwks/handlers/read.ts
+async function getJwksRouteHandler(req, res, repository, realmIdParamKey) {
+	const realmId = getRequestStringParam(req, realmIdParamKey || "realmId");
+	const promises = (await repository.find({
+		where: {
+			type: In([JWKType.RSA, JWKType.EC]),
+			...realmId ? { realm_id: realmId } : {}
+		},
+		order: { priority: "DESC" }
+	})).filter((entity) => !!entity.encryption_key).map((entity) => AsymmetricKey.fromBase64({
+		format: "spki",
+		key: entity.encryption_key,
+		options: AsymmetricKey.buildImportOptionsForJWTAlgorithm(entity.signature_algorithm)
+	}).then((container) => container.toJWK()).then((key) => ({
+		...key,
+		kid: entity.id,
+		alg: entity.signature_algorithm
+	})));
+	return send(res, { keys: await Promise.all(promises) });
+}
+async function getJwkRouteHandler(req, res, repository, idParamKey) {
+	const id = getRequestStringParamOrFail(req, idParamKey || "id");
+	const entity = await repository.findOne({ where: {
+		type: In([JWKType.RSA, JWKType.EC]),
+		id
+	} });
+	if (!entity) throw new NotFoundError();
+	if (!entity.encryption_key) throw new BadRequestError("The encryption key does not exist");
+	const jsonWebKey = await (await AsymmetricKey.fromBase64({
+		format: "spki",
+		key: entity.encryption_key,
+		options: AsymmetricKey.buildImportOptionsForJWTAlgorithm(entity.signature_algorithm)
+	})).toJWK();
+	jsonWebKey.alg = entity.signature_algorithm;
+	return send(res, {
+		...jsonWebKey,
+		kid: entity.id
+	});
+}
+//#endregion
+export { getJwkRouteHandler, getJwksRouteHandler };
+
+//# sourceMappingURL=read.mjs.map

package/dist/adapters/http/controllers/workflows/jwks/handlers/read.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"read.mjs","names":["AsymmetricKey","JWKType","send","In","BadRequestError","NotFoundError","getRequestStringParam","getRequestStringParamOrFail","getJwksRouteHandler","req","res","repository","realmIdParamKey","realmId","entities","find","where","type","RSA","EC","realm_id","order","priority","promises","filter","entity","encryption_key","map","fromBase64","format","key","options","buildImportOptionsForJWTAlgorithm","signature_algorithm","then","container","toJWK","kid","id","alg","keys","Promise","all","getJwkRouteHandler","idParamKey","findOne","jsonWebKey"],"sources":["../../../../../../../src/adapters/http/controllers/workflows/jwks/handlers/read.ts"],"sourcesContent":["/*\n * Copyright (c) 2022-2022.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport { AsymmetricKey } from '@authup/server-kit';\nimport { JWKType } from '@authup/specs';\nimport type { Request, Response } from 'routup';\nimport { send } from 'routup';\nimport type { Repository } from 'typeorm';\nimport { In } from 'typeorm';\nimport { BadRequestError, NotFoundError } from '@ebec/http';\nimport type { KeyEntity } from '../../../../../database/domains/index.ts';\nimport { getRequestStringParam, getRequestStringParamOrFail } from '../../../../request/index.ts';\n\nexport async function getJwksRouteHandler(\n    req: Request,\n    res: Response,\n    repository: Repository<KeyEntity>,\n    realmIdParamKey?: string,\n) : Promise<any> {\n    const realmId = getRequestStringParam(req, realmIdParamKey || 'realmId');\n\n    const entities = await repository.find({\n        where: {\n            type: In([JWKType.RSA, JWKType.EC]),\n            ...(realmId ? { realm_id: realmId } : {}),\n        },\n        order: { priority: 'DESC' },\n    });\n\n    const promises = entities\n        .filter((entity) => !!entity.encryption_key)\n        .map(\n            (entity) => AsymmetricKey\n                .fromBase64({\n                    format: 'spki',\n                    key: entity.encryption_key!,\n                    options: AsymmetricKey.buildImportOptionsForJWTAlgorithm(entity.signature_algorithm),\n                })\n                .then((container) => container.toJWK())\n                .then((key) => ({\n                    ...key,\n                    kid: entity.id,\n                    alg: entity.signature_algorithm,\n                })),\n        );\n\n    const keys = await Promise.all(promises);\n\n    return send(res, { keys });\n}\n\nexport async function getJwkRouteHandler(\n    req: Request,\n    res: Response,\n    repository: Repository<KeyEntity>,\n    idParamKey?: string,\n) : Promise<any> {\n    const id = getRequestStringParamOrFail(req, idParamKey || 'id');\n\n    const entity = await repository.findOne({\n        where: {\n            type: In([JWKType.RSA, JWKType.EC]),\n            id,\n        },\n    });\n\n    if (!entity) {\n        throw new NotFoundError();\n    }\n\n    if (!entity.encryption_key) {\n        throw new BadRequestError('The encryption key does not exist');\n    }\n\n    const container = await AsymmetricKey\n        .fromBase64({\n            format: 'spki',\n            key: entity.encryption_key!,\n            options: AsymmetricKey.buildImportOptionsForJWTAlgorithm(entity.signature_algorithm),\n        });\n\n    const jsonWebKey = await container.toJWK();\n    jsonWebKey.alg = entity.signature_algorithm;\n\n    return send(res, {\n        ...jsonWebKey,\n        kid: entity.id,\n    });\n}\n"],"mappings":";;;;;;;;AAiBA,eAAsBQ,oBAClBC,KACAC,KACAC,YACAC,iBAAwB;CAExB,MAAMC,UAAUP,sBAAsBG,KAAKG,mBAAmB,UAAA;CAU9D,MAAMW,YAAWT,MARMH,WAAWI,KAAK;EACnCC,OAAO;GACHC,MAAMd,GAAG,CAACF,QAAQiB,KAAKjB,QAAQkB,GAAG,CAAA;GAClC,GAAIN,UAAU,EAAEO,UAAUP,SAAQ,GAAI,EAAE;GAC5C;EACAQ,OAAO,EAAEC,UAAU,QAAO;EAC9B,CAAA,EAGKE,QAAQC,WAAW,CAAC,CAACA,OAAOC,eAAc,CAC1CC,KACIF,WAAWzB,cACP4B,WAAW;EACRC,QAAQ;EACRC,KAAKL,OAAOC;EACZK,SAAS/B,cAAcgC,kCAAkCP,OAAOQ,oBAAmB;EACvF,CAAA,CACCC,MAAMC,cAAcA,UAAUC,OAAK,CAAA,CACnCF,MAAMJ,SAAS;EACZ,GAAGA;EACHO,KAAKZ,OAAOa;EACZC,KAAKd,OAAOQ;EAChB,EAAA,CAAA;AAKZ,QAAO/B,KAAKQ,KAAK,EAAE8B,MAAAA,MAFAC,QAAQC,IAAInB,SAAAA,EAEP,CAAA;;AAG5B,eAAsBoB,mBAClBlC,KACAC,KACAC,YACAiC,YAAmB;CAEnB,MAAMN,KAAK/B,4BAA4BE,KAAKmC,cAAc,KAAA;CAE1D,MAAMnB,SAAS,MAAMd,WAAWkC,QAAQ,EACpC7B,OAAO;EACHC,MAAMd,GAAG,CAACF,QAAQiB,KAAKjB,QAAQkB,GAAG,CAAA;EAClCmB;EACJ,EACJ,CAAA;AAEA,KAAI,CAACb,OACD,OAAM,IAAIpB,eAAAA;AAGd,KAAI,CAACoB,OAAOC,eACR,OAAM,IAAItB,gBAAgB,oCAAA;CAU9B,MAAM0C,aAAa,OAAMX,MAPDnC,cACnB4B,WAAW;EACRC,QAAQ;EACRC,KAAKL,OAAOC;EACZK,SAAS/B,cAAcgC,kCAAkCP,OAAOQ,oBAAmB;EACvF,CAAA,EAE+BG,OAAK;AACxCU,YAAWP,MAAMd,OAAOQ;AAExB,QAAO/B,KAAKQ,KAAK;EACb,GAAGoC;EACHT,KAAKZ,OAAOa;EAChB,CAAA"}

package/dist/adapters/http/controllers/workflows/jwks/index.mjs

@@ -0,0 +1,4 @@
+import { getJwkRouteHandler, getJwksRouteHandler } from "./handlers/read.mjs";
+import "./handlers/index.mjs";
+import { JwkController } from "./module.mjs";
+export { JwkController, getJwkRouteHandler, getJwksRouteHandler };

package/dist/adapters/http/controllers/workflows/jwks/module.mjs

@@ -0,0 +1,96 @@
+import { getRequestStringParam } from "../../../request/helpers/param-id.mjs";
+import "../../../request/index.mjs";
+import { In } from "typeorm";
+import { AsymmetricKey } from "@authup/server-kit";
+import { JWKType } from "@authup/specs";
+import { BadRequestError, NotFoundError } from "@ebec/http";
+import { send } from "routup";
+import { DController, DGet, DPath, DRequest, DResponse } from "@routup/decorators";
+//#region src/adapters/http/controllers/workflows/jwks/module.ts
+function _ts_decorate(decorators, target, key, desc) {
+	var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+	if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+	else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+	return c > 3 && r && Object.defineProperty(target, key, r), r;
+}
+function _ts_metadata(k, v) {
+	if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+}
+function _ts_param(paramIndex, decorator) {
+	return function(target, key) {
+		decorator(target, key, paramIndex);
+	};
+}
+var JwkController = class {
+	repository;
+	constructor(ctx) {
+		this.repository = ctx.repository;
+	}
+	async getManyJwks(req, res) {
+		const realmId = getRequestStringParam(req, "realmId");
+		const promises = (await this.repository.find({
+			where: {
+				type: In([JWKType.RSA, JWKType.EC]),
+				...realmId ? { realm_id: realmId } : {}
+			},
+			order: { priority: "DESC" }
+		})).filter((entity) => !!entity.encryption_key).map((entity) => AsymmetricKey.fromBase64({
+			format: "spki",
+			key: entity.encryption_key,
+			options: AsymmetricKey.buildImportOptionsForJWTAlgorithm(entity.signature_algorithm)
+		}).then((container) => container.toJWK()).then((key) => ({
+			...key,
+			kid: entity.id,
+			alg: entity.signature_algorithm
+		})));
+		return send(res, { keys: await Promise.all(promises) });
+	}
+	async getOneJwks(id, req, res) {
+		const entity = await this.repository.findOne({ where: {
+			type: In([JWKType.RSA, JWKType.EC]),
+			id
+		} });
+		if (!entity) throw new NotFoundError();
+		if (!entity.encryption_key) throw new BadRequestError("The encryption key does not exist");
+		const jsonWebKey = await (await AsymmetricKey.fromBase64({
+			format: "spki",
+			key: entity.encryption_key,
+			options: AsymmetricKey.buildImportOptionsForJWTAlgorithm(entity.signature_algorithm)
+		})).toJWK();
+		jsonWebKey.alg = entity.signature_algorithm;
+		return send(res, {
+			...jsonWebKey,
+			kid: entity.id
+		});
+	}
+};
+_ts_decorate([
+	DGet("/jwks", []),
+	_ts_param(0, DRequest()),
+	_ts_param(1, DResponse()),
+	_ts_metadata("design:type", Function),
+	_ts_metadata("design:paramtypes", [typeof Request === "undefined" ? Object : Request, typeof Response === "undefined" ? Object : Response]),
+	_ts_metadata("design:returntype", Promise)
+], JwkController.prototype, "getManyJwks", null);
+_ts_decorate([
+	DGet("/jwks/:id", []),
+	_ts_param(0, DPath("id")),
+	_ts_param(1, DRequest()),
+	_ts_param(2, DResponse()),
+	_ts_metadata("design:type", Function),
+	_ts_metadata("design:paramtypes", [
+		String,
+		typeof Request === "undefined" ? Object : Request,
+		typeof Response === "undefined" ? Object : Response
+	]),
+	_ts_metadata("design:returntype", Promise)
+], JwkController.prototype, "getOneJwks", null);
+JwkController = _ts_decorate([
+	DController(""),
+	_ts_metadata("design:type", Function),
+	_ts_metadata("design:paramtypes", [typeof JwkControllerContext === "undefined" ? Object : JwkControllerContext])
+], JwkController);
+//#endregion
+export { JwkController };
+
+//# sourceMappingURL=module.mjs.map

package/dist/adapters/http/controllers/workflows/jwks/module.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"module.mjs","names":["JWKType","AsymmetricKey","DController","DGet","DPath","DRequest","DResponse","send","In","BadRequestError","NotFoundError","getRequestStringParam","JwkController","repository","ctx","getManyJwks","req","res","realmId","entities","find","where","type","RSA","EC","realm_id","order","priority","promises","filter","entity","encryption_key","map","fromBase64","format","key","options","buildImportOptionsForJWTAlgorithm","signature_algorithm","then","container","toJWK","kid","id","alg","keys","Promise","all","getOneJwks","findOne","jsonWebKey"],"sources":["../../../../../../src/adapters/http/controllers/workflows/jwks/module.ts"],"sourcesContent":["/*\n * Copyright (c) 2024.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport { JWKType } from '@authup/specs';\nimport { AsymmetricKey } from '@authup/server-kit';\nimport {\n    DController, \n    DGet, \n    DPath, \n    DRequest, \n    DResponse,\n} from '@routup/decorators';\nimport type { Request, Response } from 'routup';\nimport { send } from 'routup';\nimport type { Repository } from 'typeorm';\nimport { In } from 'typeorm';\nimport { BadRequestError, NotFoundError } from '@ebec/http';\nimport type { KeyEntity } from '../../../../database/domains/index.ts';\nimport { getRequestStringParam } from '../../../request/index.ts';\n\nexport type JwkControllerContext = {\n    repository: Repository<KeyEntity>\n};\n\n@DController('')\nexport class JwkController {\n    protected repository: Repository<KeyEntity>;\n\n    constructor(ctx: JwkControllerContext) {\n        this.repository = ctx.repository;\n    }\n\n    @DGet('/jwks', [])\n    async getManyJwks(\n        @DRequest() req: Request,\n        @DResponse() res: Response,\n    ): Promise<any> {\n        const realmId = getRequestStringParam(req, 'realmId');\n\n        const entities = await this.repository.find({\n            where: {\n                type: In([JWKType.RSA, JWKType.EC]),\n                ...(realmId ? { realm_id: realmId } : {}),\n            },\n            order: { priority: 'DESC' },\n        });\n\n        const promises = entities\n            .filter((entity) => !!entity.encryption_key)\n            .map(\n                (entity) => AsymmetricKey\n                    .fromBase64({\n                        format: 'spki',\n                        key: entity.encryption_key!,\n                        options: AsymmetricKey.buildImportOptionsForJWTAlgorithm(entity.signature_algorithm),\n                    })\n                    .then((container) => container.toJWK())\n                    .then((key) => ({\n                        ...key,\n                        kid: entity.id,\n                        alg: entity.signature_algorithm,\n                    })),\n            );\n\n        const keys = await Promise.all(promises);\n\n        return send(res, { keys });\n    }\n\n    @DGet('/jwks/:id', [])\n    async getOneJwks(\n        @DPath('id') id: string,\n        @DRequest() req: Request,\n        @DResponse() res: Response,\n    ): Promise<any> {\n        const entity = await this.repository.findOne({\n            where: {\n                type: In([JWKType.RSA, JWKType.EC]),\n                id,\n            },\n        });\n\n        if (!entity) {\n            throw new NotFoundError();\n        }\n\n        if (!entity.encryption_key) {\n            throw new BadRequestError('The encryption key does not exist');\n        }\n\n        const container = await AsymmetricKey\n            .fromBase64({\n                format: 'spki',\n                key: entity.encryption_key!,\n                options: AsymmetricKey.buildImportOptionsForJWTAlgorithm(entity.signature_algorithm),\n            });\n\n        const jsonWebKey = await container.toJWK();\n        jsonWebKey.alg = entity.signature_algorithm;\n\n        return send(res, {\n            ...jsonWebKey,\n            kid: entity.id,\n        });\n    }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;AA6BA,IAAaY,gBAAb,MAAaA;CACCC;CAEV,YAAYC,KAA2B;AACnC,OAAKD,aAAaC,IAAID;;CAG1B,MACME,YACF,KACA,KACY;EACZ,MAAMG,UAAUP,sBAAsBK,KAAK,UAAA;EAU3C,MAAMY,YAAWT,MARM,KAAKN,WAAWO,KAAK;GACxCC,OAAO;IACHC,MAAMd,GAAG,CAACR,QAAQuB,KAAKvB,QAAQwB,GAAG,CAAA;IAClC,GAAIN,UAAU,EAAEO,UAAUP,SAAQ,GAAI,EAAE;IAC5C;GACAQ,OAAO,EAAEC,UAAU,QAAO;GAC9B,CAAA,EAGKE,QAAQC,WAAW,CAAC,CAACA,OAAOC,eAAc,CAC1CC,KACIF,WAAW7B,cACPgC,WAAW;GACRC,QAAQ;GACRC,KAAKL,OAAOC;GACZK,SAASnC,cAAcoC,kCAAkCP,OAAOQ,oBAAmB;GACvF,CAAA,CACCC,MAAMC,cAAcA,UAAUC,OAAK,CAAA,CACnCF,MAAMJ,SAAS;GACZ,GAAGA;GACHO,KAAKZ,OAAOa;GACZC,KAAKd,OAAOQ;GAChB,EAAA,CAAA;AAKZ,SAAO/B,KAAKU,KAAK,EAAE4B,MAAAA,MAFAC,QAAQC,IAAInB,SAAAA,EAEP,CAAA;;CAG5B,MACMoB,WACF,IACA,KACA,KACY;EACZ,MAAMlB,SAAS,MAAM,KAAKjB,WAAWoC,QAAQ,EACzC5B,OAAO;GACHC,MAAMd,GAAG,CAACR,QAAQuB,KAAKvB,QAAQwB,GAAG,CAAA;GAClCmB;GACJ,EACJ,CAAA;AAEA,MAAI,CAACb,OACD,OAAM,IAAIpB,eAAAA;AAGd,MAAI,CAACoB,OAAOC,eACR,OAAM,IAAItB,gBAAgB,oCAAA;EAU9B,MAAMyC,aAAa,OAAMV,MAPDvC,cACnBgC,WAAW;GACRC,QAAQ;GACRC,KAAKL,OAAOC;GACZK,SAASnC,cAAcoC,kCAAkCP,OAAOQ,oBAAmB;GACvF,CAAA,EAE+BG,OAAK;AACxCS,aAAWN,MAAMd,OAAOQ;AAExB,SAAO/B,KAAKU,KAAK;GACb,GAAGiC;GACHR,KAAKZ,OAAOa;GAChB,CAAA"}

package/dist/adapters/http/controllers/workflows/openid/index.mjs

@@ -0,0 +1,2 @@
+import { OpenIDController } from "./module.mjs";
+export { OpenIDController };

package/dist/adapters/http/controllers/workflows/openid/module.mjs

@@ -0,0 +1,60 @@
+import { OAuth2AuthorizationResponseType } from "@authup/specs";
+import { DController, DGet } from "@routup/decorators";
+//#region src/adapters/http/controllers/workflows/openid/module.ts
+function _ts_decorate(decorators, target, key, desc) {
+	var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+	if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+	else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+	return c > 3 && r && Object.defineProperty(target, key, r), r;
+}
+function _ts_metadata(k, v) {
+	if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+}
+var OpenIDController = class {
+	options;
+	constructor(options) {
+		this.options = options;
+	}
+	async getOpenIdConfiguration() {
+		return {
+			issuer: this.options.baseURL,
+			authorization_endpoint: new URL("authorize", this.options.baseURL).href,
+			jwks_uri: new URL("jwks", this.options.baseURL).href,
+			response_types_supported: [
+				OAuth2AuthorizationResponseType.CODE,
+				OAuth2AuthorizationResponseType.TOKEN,
+				OAuth2AuthorizationResponseType.NONE
+			],
+			subject_types_supported: ["public"],
+			id_token_signing_alg_values_supported: [
+				"HS256",
+				"HS384",
+				"HS512",
+				"RS256",
+				"RS384",
+				"RS512",
+				"none"
+			],
+			token_endpoint: new URL("token", this.options.baseURL).href,
+			introspection_endpoint: new URL("token/introspect", this.options.baseURL).href,
+			revocation_endpoint: new URL("token", this.options.baseURL).href,
+			service_documentation: "https://authup.org/",
+			userinfo_endpoint: new URL("users/@me", this.options.baseURL).href
+		};
+	}
+};
+_ts_decorate([
+	DGet("/.well-known/openid-configuration", []),
+	_ts_metadata("design:type", Function),
+	_ts_metadata("design:paramtypes", []),
+	_ts_metadata("design:returntype", Promise)
+], OpenIDController.prototype, "getOpenIdConfiguration", null);
+OpenIDController = _ts_decorate([
+	DController(""),
+	_ts_metadata("design:type", Function),
+	_ts_metadata("design:paramtypes", [typeof OpenIDControllerOptions === "undefined" ? Object : OpenIDControllerOptions])
+], OpenIDController);
+//#endregion
+export { OpenIDController };
+
+//# sourceMappingURL=module.mjs.map

package/dist/adapters/http/controllers/workflows/openid/module.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"module.mjs","names":["OAuth2AuthorizationResponseType","DController","DGet","OpenIDController","options","getOpenIdConfiguration","issuer","baseURL","authorization_endpoint","URL","href","jwks_uri","response_types_supported","CODE","TOKEN","NONE","subject_types_supported","id_token_signing_alg_values_supported","token_endpoint","introspection_endpoint","revocation_endpoint","service_documentation","userinfo_endpoint"],"sources":["../../../../../../src/adapters/http/controllers/workflows/openid/module.ts"],"sourcesContent":["/*\n * Copyright (c) 2024.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport type { OpenIDProviderMetadata } from '@authup/specs';\nimport { OAuth2AuthorizationResponseType } from '@authup/specs';\nimport { DController, DGet } from '@routup/decorators';\n\nexport type OpenIDControllerOptions = {\n    baseURL: string\n};\n\n@DController('')\nexport class OpenIDController {\n    protected options: OpenIDControllerOptions;\n\n    constructor(options: OpenIDControllerOptions) {\n        this.options = options;\n    }\n\n    @DGet('/.well-known/openid-configuration', [])\n    async getOpenIdConfiguration(): Promise<OpenIDProviderMetadata> {\n        return {\n            issuer: this.options.baseURL,\n\n            authorization_endpoint: new URL('authorize', this.options.baseURL).href,\n\n            jwks_uri: new URL('jwks', this.options.baseURL).href,\n\n            response_types_supported: [\n                OAuth2AuthorizationResponseType.CODE,\n                OAuth2AuthorizationResponseType.TOKEN,\n                OAuth2AuthorizationResponseType.NONE,\n            ],\n\n            subject_types_supported: [\n                'public',\n            ],\n\n            id_token_signing_alg_values_supported: [\n                'HS256', \n                'HS384', \n                'HS512', \n                'RS256', \n                'RS384', \n                'RS512', \n                'none',\n            ],\n\n            token_endpoint: new URL('token', this.options.baseURL).href,\n\n            introspection_endpoint: new URL('token/introspect', this.options.baseURL).href,\n\n            revocation_endpoint: new URL('token', this.options.baseURL).href,\n\n            // -----------------------------------------------------------\n\n            service_documentation: 'https://authup.org/',\n\n            userinfo_endpoint: new URL('users/@me', this.options.baseURL).href,\n        };\n    }\n}\n"],"mappings":";;;AAKC,SAAA,aAAA,YAAA,QAAA,KAAA,MAAA;;;;;;;;;AAWD,IAAaG,mBAAb,MAAaA;CACCC;CAEV,YAAYA,SAAkC;AAC1C,OAAKA,UAAUA;;CAGnB,MACMC,yBAA0D;AAC5D,SAAO;GACHC,QAAQ,KAAKF,QAAQG;GAErBC,wBAAwB,IAAIC,IAAI,aAAa,KAAKL,QAAQG,QAAO,CAAEG;GAEnEC,UAAU,IAAIF,IAAI,QAAQ,KAAKL,QAAQG,QAAO,CAAEG;GAEhDE,0BAA0B;IACtBZ,gCAAgCa;IAChCb,gCAAgCc;IAChCd,gCAAgCe;IACnC;GAEDC,yBAAyB,CACrB,SACH;GAEDC,uCAAuC;IACnC;IACA;IACA;IACA;IACA;IACA;IACA;IACH;GAEDC,gBAAgB,IAAIT,IAAI,SAAS,KAAKL,QAAQG,QAAO,CAAEG;GAEvDS,wBAAwB,IAAIV,IAAI,oBAAoB,KAAKL,QAAQG,QAAO,CAAEG;GAE1EU,qBAAqB,IAAIX,IAAI,SAAS,KAAKL,QAAQG,QAAO,CAAEG;GAI5DW,uBAAuB;GAEvBC,mBAAmB,IAAIb,IAAI,aAAa,KAAKL,QAAQG,QAAO,CAAEG;GAClE"}

package/dist/adapters/http/controllers/workflows/password-forgot/index.mjs

@@ -0,0 +1,2 @@
+import { PasswordForgotController } from "./module.mjs";
+export { PasswordForgotController };

package/dist/adapters/http/controllers/workflows/password-forgot/module.mjs

@@ -0,0 +1,48 @@
+import { sendAccepted } from "routup";
+import { DBody, DController, DPost, DRequest, DResponse } from "@routup/decorators";
+//#region src/adapters/http/controllers/workflows/password-forgot/module.ts
+function _ts_decorate(decorators, target, key, desc) {
+	var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+	if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+	else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+	return c > 3 && r && Object.defineProperty(target, key, r), r;
+}
+function _ts_metadata(k, v) {
+	if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+}
+function _ts_param(paramIndex, decorator) {
+	return function(target, key) {
+		decorator(target, key, paramIndex);
+	};
+}
+var PasswordForgotController = class {
+	service;
+	constructor(ctx) {
+		this.service = ctx.service;
+	}
+	async execute(data, req, res) {
+		return sendAccepted(res, await this.service.forgotPassword(data));
+	}
+};
+_ts_decorate([
+	DPost("", []),
+	_ts_param(0, DBody()),
+	_ts_param(1, DRequest()),
+	_ts_param(2, DResponse()),
+	_ts_metadata("design:type", Function),
+	_ts_metadata("design:paramtypes", [
+		Object,
+		typeof Request === "undefined" ? Object : Request,
+		typeof Response === "undefined" ? Object : Response
+	]),
+	_ts_metadata("design:returntype", Promise)
+], PasswordForgotController.prototype, "execute", null);
+PasswordForgotController = _ts_decorate([
+	DController("/password-forgot"),
+	_ts_metadata("design:type", Function),
+	_ts_metadata("design:paramtypes", [typeof PasswordForgotControllerContext === "undefined" ? Object : PasswordForgotControllerContext])
+], PasswordForgotController);
+//#endregion
+export { PasswordForgotController };
+
+//# sourceMappingURL=module.mjs.map

package/dist/adapters/http/controllers/workflows/password-forgot/module.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"module.mjs","names":["DBody","DController","DPost","DRequest","DResponse","sendAccepted","PasswordForgotController","service","ctx","execute","data","req","res","result","forgotPassword"],"sources":["../../../../../../src/adapters/http/controllers/workflows/password-forgot/module.ts"],"sourcesContent":["/*\n * Copyright (c) 2022-2024.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport type { PasswordForgotResponse } from '@authup/core-http-kit';\nimport {\n    DBody, \n    DController, \n    DPost, \n    DRequest, \n    DResponse,\n} from '@routup/decorators';\nimport type { Request, Response } from 'routup';\nimport { sendAccepted } from 'routup';\nimport type { IPasswordRecoveryService } from '../../../../../core/index.ts';\n\nexport type PasswordForgotControllerContext = {\n    service: IPasswordRecoveryService,\n};\n\n@DController('/password-forgot')\nexport class PasswordForgotController {\n    protected service: IPasswordRecoveryService;\n\n    constructor(ctx: PasswordForgotControllerContext) {\n        this.service = ctx.service;\n    }\n\n    @DPost('', [])\n    async execute(\n        @DBody() data: any,\n        @DRequest() req: Request,\n        @DResponse() res: Response,\n    ): Promise<PasswordForgotResponse> {\n        const result = await this.service.forgotPassword(data);\n\n        // eslint-disable-next-line @typescript-eslint/ban-ts-comment\n        // @ts-expect-error\n        return sendAccepted(res, result);\n    }\n}\n"],"mappings":";;;AAKC,SAAA,aAAA,YAAA,QAAA,KAAA,MAAA;;;;;;;;;;;;;;AAmBD,IAAaM,2BAAb,MAAaA;CACCC;CAEV,YAAYC,KAAsC;AAC9C,OAAKD,UAAUC,IAAID;;CAGvB,MACME,QACF,MACA,KACA,KAC+B;AAK/B,SAAOJ,aAAaO,KAAKC,MAJJ,KAAKN,QAAQO,eAAeJ,KAAAA,CAIxBG"}

package/dist/adapters/http/controllers/workflows/password-reset/index.mjs

@@ -0,0 +1,2 @@
+import { PasswordResetController } from "./module.mjs";
+export { PasswordResetController };