@authup/server-core 1.0.0-beta.36 → 1.0.0-beta.37

package/dist/app/modules/oauth2/module.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"module.mjs","names":["CacheInjectionKey","ModuleName","OAuth2AuthorizationCodeRepository","OAuth2AuthorizationStateRepository","OAuth2ClientRepository","OAuth2KeyRepository","OAuth2ScopeRepository","OAuth2TokenRepository","OAuth2AccessTokenIssuer","OAuth2AuthorizationCodeIssuer","OAuth2AuthorizationCodeRequestVerifier","OAuth2AuthorizationCodeVerifier","OAuth2AuthorizationStateManager","OAuth2OpenIDTokenIssuer","OAuth2RefreshTokenIssuer","OAuth2TokenRevoker","OAuth2TokenSigner","OAuth2TokenVerifier","OAuth2InjectionToken","IdentityInjectionKey","ClientEntity","ClientScopeEntity","ConfigInjectionKey","OAuth2Module","name","dependencies","OAUTH2","DATABASE","CACHE","CONFIG","IDENTITY","setup","container","config","resolve","register","ClientRepository","useFactory","c","repository","ScopeRepository","AuthorizationCodeRepository","cache","AuthorizationStateRepository","TokenRepository","KeyRepository","TokenSigner","keyRepository","AuthorizationCodeIssuer","codeRepository","maxAge","tokenAccessMaxAge","AuthorizationCodeVerifier","AuthorizationCodeRequestVerifier","clientRepository","clientScopeRepository","scopeRepository","AuthorizationStateManager","stateRepository","TokenRevoker","tokenRepository","TokenVerifier","AccessTokenIssuer","tokenSigner","issuer","publicUrl","RefreshTokenIssuer","tokenRefreshMaxAge","OpenIDTokenIssuer","signer","identityResolver","Resolver","options"],"sources":["../../../../src/app/modules/oauth2/module.ts"],"sourcesContent":["/*\n * Copyright (c) 2025.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport type { Repository } from 'typeorm';\nimport { CacheInjectionKey } from '../cache/index.ts';\nimport type { IContainer } from 'eldin';\nimport type { IModule } from 'orkos';\nimport { ModuleName } from '../constants.ts';\n\nimport {\n    OAuth2AuthorizationCodeRepository,\n    OAuth2AuthorizationStateRepository,\n    OAuth2ClientRepository,\n    OAuth2KeyRepository,\n    OAuth2ScopeRepository, \n    OAuth2TokenRepository,\n} from './repositories/index.ts';\nimport {\n    OAuth2AccessTokenIssuer,\n    OAuth2AuthorizationCodeIssuer,\n    OAuth2AuthorizationCodeRequestVerifier,\n    OAuth2AuthorizationCodeVerifier,\n    OAuth2AuthorizationStateManager,\n    OAuth2OpenIDTokenIssuer,\n    OAuth2RefreshTokenIssuer,\n    OAuth2TokenRevoker,\n    OAuth2TokenSigner,\n    OAuth2TokenVerifier,\n} from '../../../core/index.ts';\nimport { OAuth2InjectionToken } from './constants.ts';\nimport { IdentityInjectionKey } from '../identity/index.ts';\nimport { ClientEntity, ClientScopeEntity } from '../../../adapters/database/domains/index.ts';\nimport { ConfigInjectionKey } from '../config/index.ts';\n\nexport class OAuth2Module implements IModule {\n    readonly name: string;\n\n    readonly dependencies: string[];\n\n    constructor() {\n        this.name = ModuleName.OAUTH2;\n        this.dependencies = [ModuleName.DATABASE, ModuleName.CACHE, ModuleName.CONFIG, ModuleName.IDENTITY];\n    }\n\n    async setup(container: IContainer) : Promise<void> {\n        const config = container.resolve(ConfigInjectionKey);\n\n        container.register(OAuth2InjectionToken.ClientRepository, {\n            useFactory: (c) => {\n                const repository = c.resolve<Repository<ClientEntity>>(ClientEntity);\n                return new OAuth2ClientRepository(repository);\n            },\n        });\n\n        container.register(OAuth2InjectionToken.ScopeRepository, {\n            useFactory: (c) => {\n                const repository = c.resolve<Repository<ClientScopeEntity>>(ClientScopeEntity);\n                return new OAuth2ScopeRepository(repository);\n            },\n        });\n\n        container.register(OAuth2InjectionToken.AuthorizationCodeRepository, {\n            useFactory: (c) => {\n                const cache = c.resolve(CacheInjectionKey);\n                return new OAuth2AuthorizationCodeRepository(cache);\n            },\n        });\n\n        container.register(OAuth2InjectionToken.AuthorizationStateRepository, {\n            useFactory: (c) => {\n                const cache = c.resolve(CacheInjectionKey);\n                return new OAuth2AuthorizationStateRepository(cache);\n            },\n        });\n\n        container.register(OAuth2InjectionToken.TokenRepository, {\n            useFactory: (c) => {\n                const cache = c.resolve(CacheInjectionKey);\n                return new OAuth2TokenRepository(cache);\n            },\n        });\n\n        container.register(OAuth2InjectionToken.KeyRepository, {\n            // todo: cache use here\n            useFactory: () => new OAuth2KeyRepository(),\n        });\n\n        container.register(OAuth2InjectionToken.TokenSigner, {\n            useFactory: (c) => {\n                const keyRepository = c.resolve(OAuth2InjectionToken.KeyRepository);\n                return new OAuth2TokenSigner(keyRepository);\n            },\n        });\n\n        // authorization code issuer\n        container.register(OAuth2InjectionToken.AuthorizationCodeIssuer, {\n            useFactory: (c) => {\n                const codeRepository = c.resolve(OAuth2InjectionToken.AuthorizationCodeRepository);\n\n                return new OAuth2AuthorizationCodeIssuer(\n                    codeRepository,\n                    {\n                        // todo: own constant here\n                        maxAge: config.tokenAccessMaxAge,\n                    },\n                );\n            },\n        });\n        container.register(OAuth2InjectionToken.AuthorizationCodeVerifier, {\n            useFactory: (c) => {\n                const codeRepository = c.resolve(OAuth2InjectionToken.AuthorizationCodeRepository);\n\n                return new OAuth2AuthorizationCodeVerifier(codeRepository);\n            },\n        });\n\n        // authorization code request verifier\n        container.register(OAuth2InjectionToken.AuthorizationCodeRequestVerifier, {\n            useFactory: (c) => {\n                const clientRepository = c.resolve(OAuth2InjectionToken.ClientRepository);\n                const clientScopeRepository = c.resolve(OAuth2InjectionToken.ScopeRepository);\n\n                return new OAuth2AuthorizationCodeRequestVerifier({\n                    clientRepository,\n                    scopeRepository: clientScopeRepository,\n                });\n            },\n        });\n\n        container.register(OAuth2InjectionToken.AuthorizationStateManager, {\n            useFactory: (c) => {\n                const stateRepository = c.resolve(OAuth2InjectionToken.AuthorizationStateRepository);\n\n                return new OAuth2AuthorizationStateManager(stateRepository);\n            },\n        });\n\n        // token revoker\n        container.register(OAuth2InjectionToken.TokenRevoker, {\n            useFactory: (c) => {\n                const tokenRepository = c.resolve(OAuth2InjectionToken.TokenRepository);\n                return new OAuth2TokenRevoker(tokenRepository);\n            },\n        });\n\n        // token verifier\n        container.register(OAuth2InjectionToken.TokenVerifier, {\n            useFactory: (c) => {\n                const keyRepository = c.resolve(OAuth2InjectionToken.KeyRepository);\n                const tokenRepository = c.resolve(OAuth2InjectionToken.TokenRepository);\n\n                return new OAuth2TokenVerifier(keyRepository, tokenRepository);\n            },\n        });\n\n        // access token issuer\n        container.register(OAuth2InjectionToken.AccessTokenIssuer, {\n            useFactory: (c) => {\n                const tokenRepository = c.resolve(OAuth2InjectionToken.TokenRepository);\n                const tokenSigner = c.resolve(OAuth2InjectionToken.TokenSigner);\n                return new OAuth2AccessTokenIssuer(\n                    tokenRepository,\n                    tokenSigner,\n                    {\n                        maxAge: config.tokenAccessMaxAge,\n                        issuer: config.publicUrl,\n                    },\n                );\n            },\n        });\n\n        // refresh token issuer\n        container.register(OAuth2InjectionToken.RefreshTokenIssuer, {\n            useFactory: (c) => {\n                const tokenRepository = c.resolve(OAuth2InjectionToken.TokenRepository);\n                const tokenSigner = c.resolve(OAuth2InjectionToken.TokenSigner);\n\n                return new OAuth2RefreshTokenIssuer(\n                    tokenRepository,\n                    tokenSigner,\n                    {\n                        maxAge: config.tokenRefreshMaxAge,\n                        issuer: config.publicUrl,\n                    },\n                );\n            },\n        });\n\n        // open-id token issuer\n        container.register(OAuth2InjectionToken.OpenIDTokenIssuer, {\n            useFactory: (c) => {\n                const repository = c.resolve(OAuth2InjectionToken.TokenRepository);\n                const signer = c.resolve(OAuth2InjectionToken.TokenSigner);\n                const identityResolver = c.resolve(IdentityInjectionKey.Resolver);\n\n                return new OAuth2OpenIDTokenIssuer({\n                    repository,\n                    signer,\n\n                    identityResolver,\n\n                    options: {\n                        // todo: own constant here\n                        maxAge: config.tokenAccessMaxAge,\n                        issuer: config.publicUrl,\n                    },\n                });\n            },\n        });\n    }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAsCA,IAAauB,eAAb,MAAaA;CACAC;CAEAC;CAET,cAAc;AACV,OAAKD,OAAOvB,WAAWyB;AACvB,OAAKD,eAAe;GAACxB,WAAW0B;GAAU1B,WAAW2B;GAAO3B,WAAW4B;GAAQ5B,WAAW6B;GAAS;;CAGvG,MAAMC,MAAMC,WAAuC;EAC/C,MAAMC,SAASD,UAAUE,QAAQZ,mBAAAA;AAEjCU,YAAUG,SAASjB,qBAAqBkB,kBAAkB,EACtDC,aAAaC,MAAAA;AAET,UAAO,IAAIlC,uBADQkC,EAAEJ,QAAkCd,aACrBmB,CAAAA;KAE1C,CAAA;AAEAP,YAAUG,SAASjB,qBAAqBsB,iBAAiB,EACrDH,aAAaC,MAAAA;AAET,UAAO,IAAIhC,sBADQgC,EAAEJ,QAAuCb,kBAC3BkB,CAAAA;KAEzC,CAAA;AAEAP,YAAUG,SAASjB,qBAAqBuB,6BAA6B,EACjEJ,aAAaC,MAAAA;AAET,UAAO,IAAIpC,kCADGoC,EAAEJ,QAAQlC,kBACqB0C,CAAAA;KAErD,CAAA;AAEAV,YAAUG,SAASjB,qBAAqByB,8BAA8B,EAClEN,aAAaC,MAAAA;AAET,UAAO,IAAInC,mCADGmC,EAAEJ,QAAQlC,kBACsB0C,CAAAA;KAEtD,CAAA;AAEAV,YAAUG,SAASjB,qBAAqB0B,iBAAiB,EACrDP,aAAaC,MAAAA;AAET,UAAO,IAAI/B,sBADG+B,EAAEJ,QAAQlC,kBACS0C,CAAAA;KAEzC,CAAA;AAEAV,YAAUG,SAASjB,qBAAqB2B,eAAe,EAEnDR,kBAAkB,IAAIhC,qBAAAA,EAC1B,CAAA;AAEA2B,YAAUG,SAASjB,qBAAqB4B,aAAa,EACjDT,aAAaC,MAAAA;AAET,UAAO,IAAItB,kBADWsB,EAAEJ,QAAQhB,qBAAqB2B,cACxBE,CAAAA;KAErC,CAAA;AAGAf,YAAUG,SAASjB,qBAAqB8B,yBAAyB,EAC7DX,aAAaC,MAAAA;AAGT,UAAO,IAAI7B,8BAFY6B,EAAEJ,QAAQhB,qBAAqBuB,4BAGlDQ,EACA,EAEIC,QAAQjB,OAAOkB,mBACnB,CAAA;KAGZ,CAAA;AACAnB,YAAUG,SAASjB,qBAAqBkC,2BAA2B,EAC/Df,aAAaC,MAAAA;AAGT,UAAO,IAAI3B,gCAFY2B,EAAEJ,QAAQhB,qBAAqBuB,4BAEXQ,CAAAA;KAEnD,CAAA;AAGAjB,YAAUG,SAASjB,qBAAqBmC,kCAAkC,EACtEhB,aAAaC,MAAAA;AAIT,UAAO,IAAI5B,uCAAuC;IAC9C4C,kBAJqBhB,EAAEJ,QAAQhB,qBAAqBkB,iBAIpDkB;IACAE,iBAJ0BlB,EAAEJ,QAAQhB,qBAAqBsB,gBAIxCe;IACrB,CAAA;KAER,CAAA;AAEAvB,YAAUG,SAASjB,qBAAqBuC,2BAA2B,EAC/DpB,aAAaC,MAAAA;AAGT,UAAO,IAAI1B,gCAFa0B,EAAEJ,QAAQhB,qBAAqByB,6BAEZe,CAAAA;KAEnD,CAAA;AAGA1B,YAAUG,SAASjB,qBAAqByC,cAAc,EAClDtB,aAAaC,MAAAA;AAET,UAAO,IAAIvB,mBADauB,EAAEJ,QAAQhB,qBAAqB0B,gBACzBgB,CAAAA;KAEtC,CAAA;AAGA5B,YAAUG,SAASjB,qBAAqB2C,eAAe,EACnDxB,aAAaC,MAAAA;AAIT,UAAO,IAAIrB,oBAHWqB,EAAEJ,QAAQhB,qBAAqB2B,cAGtBE,EAFPT,EAAEJ,QAAQhB,qBAAqB0B,gBAETgB,CAAAA;KAEtD,CAAA;AAGA5B,YAAUG,SAASjB,qBAAqB4C,mBAAmB,EACvDzB,aAAaC,MAAAA;AAGT,UAAO,IAAI9B,wBAFa8B,EAAEJ,QAAQhB,qBAAqB0B,gBAGnDgB,EAFgBtB,EAAEJ,QAAQhB,qBAAqB4B,YAG/CiB,EACA;IACIb,QAAQjB,OAAOkB;IACfa,QAAQ/B,OAAOgC;IACnB,CAAA;KAGZ,CAAA;AAGAjC,YAAUG,SAASjB,qBAAqBgD,oBAAoB,EACxD7B,aAAaC,MAAAA;AAIT,UAAO,IAAIxB,yBAHawB,EAAEJ,QAAQhB,qBAAqB0B,gBAInDgB,EAHgBtB,EAAEJ,QAAQhB,qBAAqB4B,YAI/CiB,EACA;IACIb,QAAQjB,OAAOkC;IACfH,QAAQ/B,OAAOgC;IACnB,CAAA;KAGZ,CAAA;AAGAjC,YAAUG,SAASjB,qBAAqBkD,mBAAmB,EACvD/B,aAAaC,MAAAA;AAKT,UAAO,IAAIzB,wBAAwB;IAC/B0B,YALeD,EAAEJ,QAAQhB,qBAAqB0B,gBAK9CL;IACA8B,QALW/B,EAAEJ,QAAQhB,qBAAqB4B,YAK1CuB;IAEAC,kBANqBhC,EAAEJ,QAAQf,qBAAqBoD,SAMpDD;IAEAE,SAAS;KAELtB,QAAQjB,OAAOkB;KACfa,QAAQ/B,OAAOgC;KACnB;IACJ,CAAA;KAER,CAAA"}

package/dist/app/modules/oauth2/repositories/authorize/code/index.mjs

@@ -0,0 +1,2 @@
+import { OAuth2AuthorizationCodeRepository } from "./repository.mjs";
+export { OAuth2AuthorizationCodeRepository };

package/dist/app/modules/oauth2/repositories/authorize/code/repository.mjs

@@ -0,0 +1,46 @@
+import { CacheOAuth2Prefix } from "../../constants.mjs";
+import { buildCacheKey } from "@authup/server-kit";
+import { randomBytes } from "node:crypto";
+//#region src/app/modules/oauth2/repositories/authorize/code/repository.ts
+var OAuth2AuthorizationCodeRepository = class {
+	cache;
+	constructor(cache) {
+		this.cache = cache;
+	}
+	async findOneById(id) {
+		const entity = await this.cache.get(buildCacheKey({
+			prefix: CacheOAuth2Prefix.AUTHORIZATION_CODE,
+			key: id
+		}));
+		if (entity) return entity;
+		return null;
+	}
+	async popOneById(id) {
+		return this.cache.pop(buildCacheKey({
+			prefix: CacheOAuth2Prefix.AUTHORIZATION_CODE,
+			key: id
+		}));
+	}
+	async save(input, options = {}) {
+		const ttl = (options.maxAge || 300) * 1e3;
+		if (!input.id) input.id = randomBytes(10).toString("hex");
+		await this.cache.set(buildCacheKey({
+			prefix: CacheOAuth2Prefix.AUTHORIZATION_CODE,
+			key: input.id
+		}), input, { ttl });
+		return input;
+	}
+	async remove(entity) {
+		return this.removeById(entity.id);
+	}
+	async removeById(id) {
+		await this.cache.drop(buildCacheKey({
+			prefix: CacheOAuth2Prefix.AUTHORIZATION_CODE,
+			key: id
+		}));
+	}
+};
+//#endregion
+export { OAuth2AuthorizationCodeRepository };
+
+//# sourceMappingURL=repository.mjs.map

package/dist/app/modules/oauth2/repositories/authorize/code/repository.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"repository.mjs","names":["buildCacheKey","randomBytes","CacheOAuth2Prefix","OAuth2AuthorizationCodeRepository","cache","findOneById","id","entity","get","prefix","AUTHORIZATION_CODE","key","popOneById","pop","save","input","options","ttl","maxAge","toString","set","remove","removeById","drop"],"sources":["../../../../../../../src/app/modules/oauth2/repositories/authorize/code/repository.ts"],"sourcesContent":["/*\n * Copyright (c) 2024-2025.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport type { OAuth2AuthorizationCode } from '@authup/core-kit';\nimport type { ICache } from '@authup/server-kit';\nimport { buildCacheKey } from '@authup/server-kit';\nimport { randomBytes } from 'node:crypto';\nimport { CacheOAuth2Prefix } from '../../constants.ts';\nimport type {\n    IOAuth2AuthorizationCodeRepository,\n    OAuth2AuthorizationCodeInput,\n    OAuth2AuthorizationCodeRepositorySaveOptions,\n} from '../../../../../../core/index.ts';\n\nexport class OAuth2AuthorizationCodeRepository implements IOAuth2AuthorizationCodeRepository {\n    protected cache : ICache;\n\n    constructor(cache: ICache) {\n        this.cache = cache;\n    }\n\n    async findOneById(id: string): Promise<OAuth2AuthorizationCode | null> {\n        const entity = await this.cache.get<OAuth2AuthorizationCode>(buildCacheKey({\n            prefix: CacheOAuth2Prefix.AUTHORIZATION_CODE,\n            key: id,\n        }));\n\n        if (entity) {\n            return entity;\n        }\n\n        return null;\n    }\n\n    async popOneById(id: string): Promise<OAuth2AuthorizationCode | null> {\n        return this.cache.pop<OAuth2AuthorizationCode>(buildCacheKey({\n            prefix: CacheOAuth2Prefix.AUTHORIZATION_CODE,\n            key: id,\n        }));\n    }\n\n    async save(\n        input: OAuth2AuthorizationCodeInput,\n        options: OAuth2AuthorizationCodeRepositorySaveOptions = {},\n    ): Promise<OAuth2AuthorizationCode> {\n        const ttl = (options.maxAge || 300) * 1_000;\n\n        if (!input.id) {\n            input.id = randomBytes(10).toString('hex');\n        }\n\n        await this.cache.set(buildCacheKey({\n            prefix: CacheOAuth2Prefix.AUTHORIZATION_CODE,\n            key: input.id,\n        }), input, { ttl });\n\n        return input as OAuth2AuthorizationCode;\n    }\n\n    async remove(entity: OAuth2AuthorizationCode): Promise<void> {\n        return this.removeById(entity.id);\n    }\n\n    async removeById(id: string): Promise<void> {\n        await this.cache.drop(buildCacheKey({\n            prefix: CacheOAuth2Prefix.AUTHORIZATION_CODE,\n            key: id,\n        }));\n    }\n}\n"],"mappings":";;;;AAkBA,IAAaG,oCAAb,MAAaA;CACCC;CAEV,YAAYA,OAAe;AACvB,OAAKA,QAAQA;;CAGjB,MAAMC,YAAYC,IAAqD;EACnE,MAAMC,SAAS,MAAM,KAAKH,MAAMI,IAA6BR,cAAc;GACvES,QAAQP,kBAAkBQ;GAC1BC,KAAKL;GACT,CAAA,CAAA;AAEA,MAAIC,OACA,QAAOA;AAGX,SAAO;;CAGX,MAAMK,WAAWN,IAAqD;AAClE,SAAO,KAAKF,MAAMS,IAA6Bb,cAAc;GACzDS,QAAQP,kBAAkBQ;GAC1BC,KAAKL;GACT,CAAA,CAAA;;CAGJ,MAAMQ,KACFC,OACAC,UAAwD,EAAE,EAC1B;EAChC,MAAMC,OAAOD,QAAQE,UAAU,OAAO;AAEtC,MAAI,CAACH,MAAMT,GACPS,OAAMT,KAAKL,YAAY,GAAA,CAAIkB,SAAS,MAAA;AAGxC,QAAM,KAAKf,MAAMgB,IAAIpB,cAAc;GAC/BS,QAAQP,kBAAkBQ;GAC1BC,KAAKI,MAAMT;GACf,CAAA,EAAIS,OAAO,EAAEE,KAAI,CAAA;AAEjB,SAAOF;;CAGX,MAAMM,OAAOd,QAAgD;AACzD,SAAO,KAAKe,WAAWf,OAAOD,GAAE;;CAGpC,MAAMgB,WAAWhB,IAA2B;AACxC,QAAM,KAAKF,MAAMmB,KAAKvB,cAAc;GAChCS,QAAQP,kBAAkBQ;GAC1BC,KAAKL;GACT,CAAA,CAAA"}

package/dist/app/modules/oauth2/repositories/authorize/index.mjs

@@ -0,0 +1,5 @@
+import { OAuth2AuthorizationCodeRepository } from "./code/repository.mjs";
+import "./code/index.mjs";
+import { OAuth2AuthorizationStateRepository } from "./state/repository.mjs";
+import "./state/index.mjs";
+export { OAuth2AuthorizationCodeRepository, OAuth2AuthorizationStateRepository };

package/dist/app/modules/oauth2/repositories/authorize/state/index.mjs

@@ -0,0 +1,2 @@
+import { OAuth2AuthorizationStateRepository } from "./repository.mjs";
+export { OAuth2AuthorizationStateRepository };

package/dist/app/modules/oauth2/repositories/authorize/state/repository.mjs

@@ -0,0 +1,37 @@
+import { CacheOAuth2Prefix } from "../../constants.mjs";
+import { buildCacheKey } from "@authup/server-kit";
+import { createNanoID } from "@authup/kit";
+//#region src/app/modules/oauth2/repositories/authorize/state/repository.ts
+var OAuth2AuthorizationStateRepository = class {
+	cache;
+	constructor(cache) {
+		this.cache = cache;
+	}
+	async findOneById(key) {
+		const id = buildCacheKey({
+			prefix: CacheOAuth2Prefix.AUTHORIZATION_CODE,
+			key
+		});
+		const payload = await this.cache.get(id);
+		if (payload) return payload;
+		return null;
+	}
+	async remove(key) {
+		await this.cache.drop(buildCacheKey({
+			prefix: CacheOAuth2Prefix.AUTHORIZATION_CODE,
+			key
+		}));
+	}
+	async insert(data) {
+		const state = createNanoID();
+		await this.cache.set(buildCacheKey({
+			prefix: CacheOAuth2Prefix.AUTHORIZATION_CODE,
+			key: state
+		}), data, { ttl: 1e3 * 60 * 30 });
+		return state;
+	}
+};
+//#endregion
+export { OAuth2AuthorizationStateRepository };
+
+//# sourceMappingURL=repository.mjs.map

package/dist/app/modules/oauth2/repositories/authorize/state/repository.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"repository.mjs","names":["createNanoID","buildCacheKey","CacheOAuth2Prefix","OAuth2AuthorizationStateRepository","cache","findOneById","key","id","prefix","AUTHORIZATION_CODE","payload","get","remove","drop","insert","data","state","set","ttl"],"sources":["../../../../../../../src/app/modules/oauth2/repositories/authorize/state/repository.ts"],"sourcesContent":["/*\n * Copyright (c) 2025.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport { createNanoID } from '@authup/kit';\nimport type { ICache } from '@authup/server-kit';\nimport { buildCacheKey } from '@authup/server-kit';\nimport type { IOAuth2AuthorizeStateRepository, OAuth2AuthorizationState } from '../../../../../../core/index.ts';\nimport { CacheOAuth2Prefix } from '../../constants.ts';\n\nexport class OAuth2AuthorizationStateRepository implements IOAuth2AuthorizeStateRepository {\n    protected cache : ICache;\n\n    constructor(cache: ICache) {\n        this.cache = cache;\n    }\n\n    async findOneById(key: string): Promise<OAuth2AuthorizationState | null> {\n        const id = buildCacheKey({\n            prefix: CacheOAuth2Prefix.AUTHORIZATION_CODE,\n            key, \n        });\n        const payload = await this.cache.get<OAuth2AuthorizationState>(id);\n        if (payload) {\n            return payload;\n        }\n\n        return null;\n    }\n\n    async remove(key: string): Promise<void> {\n        await this.cache.drop(\n            buildCacheKey({\n                prefix: CacheOAuth2Prefix.AUTHORIZATION_CODE,\n                key, \n            }),\n        );\n    }\n\n    async insert(data: OAuth2AuthorizationState): Promise<string> {\n        const state = createNanoID();\n\n        await this.cache.set(\n            buildCacheKey({\n                prefix: CacheOAuth2Prefix.AUTHORIZATION_CODE,\n                key: state, \n            }),\n            data,\n            { ttl: 1000 * 60 * 30 }, // 30 min\n        );\n\n        return state;\n    }\n}\n"],"mappings":";;;;AAaA,IAAaG,qCAAb,MAAaA;CACCC;CAEV,YAAYA,OAAe;AACvB,OAAKA,QAAQA;;CAGjB,MAAMC,YAAYC,KAAuD;EACrE,MAAMC,KAAKN,cAAc;GACrBO,QAAQN,kBAAkBO;GAC1BH;GACJ,CAAA;EACA,MAAMI,UAAU,MAAM,KAAKN,MAAMO,IAA8BJ,GAAAA;AAC/D,MAAIG,QACA,QAAOA;AAGX,SAAO;;CAGX,MAAME,OAAON,KAA4B;AACrC,QAAM,KAAKF,MAAMS,KACbZ,cAAc;GACVO,QAAQN,kBAAkBO;GAC1BH;GACJ,CAAA,CAAA;;CAIR,MAAMQ,OAAOC,MAAiD;EAC1D,MAAMC,QAAQhB,cAAAA;AAEd,QAAM,KAAKI,MAAMa,IACbhB,cAAc;GACVO,QAAQN,kBAAkBO;GAC1BH,KAAKU;GACT,CAAA,EACAD,MACA,EAAEG,KAAK,MAAO,KAAK,IAAG,CAAA;AAG1B,SAAOF"}

package/dist/app/modules/oauth2/repositories/client/index.mjs

@@ -0,0 +1,2 @@
+import { OAuth2ClientRepository } from "./repository.mjs";
+export { OAuth2ClientRepository };

package/dist/app/modules/oauth2/repositories/client/repository.mjs

@@ -0,0 +1,22 @@
+import { isUUID } from "@authup/kit";
+//#region src/app/modules/oauth2/repositories/client/repository.ts
+var OAuth2ClientRepository = class {
+	repository;
+	constructor(repository) {
+		this.repository = repository;
+	}
+	async findOneByIdOrName(key, realmKey) {
+		const query = this.repository.createQueryBuilder("client").leftJoinAndSelect("client.realm", "realm");
+		if (isUUID(key)) query.where("client.id = :id", { id: key });
+		else {
+			query.where("client.name = :name", { name: key });
+			if (realmKey) if (isUUID(realmKey)) query.andWhere("client.realm_id = :realmId", { realmId: realmKey });
+			else query.andWhere("realm.name = :realmName", { realmName: realmKey });
+		}
+		return query.getOne();
+	}
+};
+//#endregion
+export { OAuth2ClientRepository };
+
+//# sourceMappingURL=repository.mjs.map

package/dist/app/modules/oauth2/repositories/client/repository.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"repository.mjs","names":["isUUID","OAuth2ClientRepository","repository","findOneByIdOrName","key","realmKey","query","createQueryBuilder","leftJoinAndSelect","where","id","name","andWhere","realmId","realmName","getOne"],"sources":["../../../../../../src/app/modules/oauth2/repositories/client/repository.ts"],"sourcesContent":["/*\n * Copyright (c) 2025.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport type { Client } from '@authup/core-kit';\nimport { isUUID } from '@authup/kit';\nimport type { Repository } from 'typeorm';\nimport type { IOAuth2ClientRepository } from '../../../../../core/index.ts';\n\nexport class OAuth2ClientRepository implements IOAuth2ClientRepository {\n    private readonly repository: Repository<Client>;\n\n    constructor(\n        repository: Repository<Client>,\n    ) {\n        this.repository = repository;\n    }\n\n    async findOneByIdOrName(key: string, realmKey?: string): Promise<Client | null> {\n        const query = this.repository.createQueryBuilder('client')\n            .leftJoinAndSelect('client.realm', 'realm');\n\n        if (isUUID(key)) {\n            query.where('client.id = :id', { id: key });\n        } else {\n            query.where('client.name = :name', { name: key });\n\n            if (realmKey) {\n                if (isUUID(realmKey)) {\n                    query.andWhere('client.realm_id = :realmId', { realmId: realmKey });\n                } else {\n                    query.andWhere('realm.name = :realmName', { realmName: realmKey });\n                }\n            }\n        }\n\n        return query.getOne();\n    }\n}\n"],"mappings":";;AAYA,IAAaC,yBAAb,MAAaA;CACQC;CAEjB,YACIA,YACF;AACE,OAAKA,aAAaA;;CAGtB,MAAMC,kBAAkBC,KAAaC,UAA2C;EAC5E,MAAMC,QAAQ,KAAKJ,WAAWK,mBAAmB,SAAA,CAC5CC,kBAAkB,gBAAgB,QAAA;AAEvC,MAAIR,OAAOI,IAAAA,CACPE,OAAMG,MAAM,mBAAmB,EAAEC,IAAIN,KAAI,CAAA;OACtC;AACHE,SAAMG,MAAM,uBAAuB,EAAEE,MAAMP,KAAI,CAAA;AAE/C,OAAIC,SACA,KAAIL,OAAOK,SAAAA,CACPC,OAAMM,SAAS,8BAA8B,EAAEC,SAASR,UAAS,CAAA;OAEjEC,OAAMM,SAAS,2BAA2B,EAAEE,WAAWT,UAAS,CAAA;;AAK5E,SAAOC,MAAMS,QAAM"}

package/dist/app/modules/oauth2/repositories/constants.mjs

@@ -0,0 +1,13 @@
+//#region src/app/modules/oauth2/repositories/constants.ts
+var CacheOAuth2Prefix = /* @__PURE__ */ function(CacheOAuth2Prefix) {
+	CacheOAuth2Prefix["AUTHORIZATION_STATE"] = "oauth2_authorization_state";
+	CacheOAuth2Prefix["AUTHORIZATION_CODE"] = "oauth2_authorization_code";
+	CacheOAuth2Prefix["TOKEN"] = "oauth2_token";
+	CacheOAuth2Prefix["TOKEN_CLAIMS"] = "oauth2_token_claims";
+	CacheOAuth2Prefix["TOKEN_INACTIVE"] = "oauth2_token_blocked";
+	return CacheOAuth2Prefix;
+}({});
+//#endregion
+export { CacheOAuth2Prefix };
+
+//# sourceMappingURL=constants.mjs.map

package/dist/app/modules/oauth2/repositories/constants.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"constants.mjs","names":["CacheOAuth2Prefix"],"sources":["../../../../../src/app/modules/oauth2/repositories/constants.ts"],"sourcesContent":["/*\n * Copyright (c) 2024-2026.\n *  Author Peter Placzek (tada5hi)\n *  For the full copyright and license information,\n *  view the LICENSE file that was distributed with this source code.\n */\n\nexport enum CacheOAuth2Prefix {\n    AUTHORIZATION_STATE = 'oauth2_authorization_state',\n    AUTHORIZATION_CODE = 'oauth2_authorization_code',\n    TOKEN = 'oauth2_token',\n    TOKEN_CLAIMS = 'oauth2_token_claims',\n    TOKEN_INACTIVE = 'oauth2_token_blocked',\n}\n"],"mappings":";AAOA,IAAO,oBAAKA,yBAAAA,mBAAAA;;;;;;QAAAA"}

package/dist/app/modules/oauth2/repositories/index.mjs

@@ -0,0 +1,11 @@
+import { OAuth2AuthorizationCodeRepository } from "./authorize/code/repository.mjs";
+import { OAuth2AuthorizationStateRepository } from "./authorize/state/repository.mjs";
+import "./authorize/index.mjs";
+import { OAuth2ClientRepository } from "./client/repository.mjs";
+import "./client/index.mjs";
+import { OAuth2ScopeRepository } from "./scope/repository.mjs";
+import { OAuth2KeyRepository } from "./key/repository.mjs";
+import "./key/index.mjs";
+import { OAuth2TokenRepository } from "./token/repository.mjs";
+import "./token/index.mjs";
+export { OAuth2AuthorizationCodeRepository, OAuth2AuthorizationStateRepository, OAuth2ClientRepository, OAuth2KeyRepository, OAuth2ScopeRepository, OAuth2TokenRepository };

package/dist/app/modules/oauth2/repositories/key/index.mjs

@@ -0,0 +1,2 @@
+import { OAuth2KeyRepository } from "./repository.mjs";
+export { OAuth2KeyRepository };

package/dist/app/modules/oauth2/repositories/key/repository.mjs

@@ -0,0 +1,45 @@
+import { KeyEntity } from "../../../../../adapters/database/domains/key/entity.mjs";
+import "../../../../../adapters/database/index.mjs";
+import { AsymmetricKey, CryptoAsymmetricAlgorithm, createAsymmetricKeyPair } from "@authup/server-kit";
+import { JWKType, JWTAlgorithm } from "@authup/specs";
+import { useDataSource } from "typeorm-extension";
+//#region src/app/modules/oauth2/repositories/key/repository.ts
+var OAuth2KeyRepository = class {
+	async findByRealmId(realmId) {
+		return this.createOrGet({ realm_id: realmId });
+	}
+	async findById(id) {
+		return this.createOrGet({ id });
+	}
+	async createOrGet(where) {
+		const repository = (await useDataSource()).getRepository(KeyEntity);
+		let entity = await repository.findOne({
+			select: {
+				id: true,
+				type: true,
+				signature_algorithm: true,
+				encryption_key: true,
+				decryption_key: true
+			},
+			where
+		});
+		if (entity) return entity;
+		if (typeof where.realm_id !== "string") return null;
+		const keyPair = await createAsymmetricKeyPair({ name: CryptoAsymmetricAlgorithm.RSASSA_PKCS1_V1_5 });
+		const privateKeyContainer = new AsymmetricKey(keyPair.privateKey);
+		const publicKeyContainer = new AsymmetricKey(keyPair.publicKey);
+		entity = repository.create({
+			type: JWKType.RSA,
+			decryption_key: await privateKeyContainer.toBase64(),
+			encryption_key: await publicKeyContainer.toBase64(),
+			realm_id: where.realm_id,
+			signature_algorithm: `${JWTAlgorithm.RS256}`
+		});
+		await repository.save(entity);
+		return entity;
+	}
+};
+//#endregion
+export { OAuth2KeyRepository };
+
+//# sourceMappingURL=repository.mjs.map

package/dist/app/modules/oauth2/repositories/key/repository.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"repository.mjs","names":["AsymmetricKey","CryptoAsymmetricAlgorithm","createAsymmetricKeyPair","JWKType","JWTAlgorithm","useDataSource","KeyEntity","OAuth2KeyRepository","findByRealmId","realmId","createOrGet","realm_id","findById","id","where","dataSource","repository","getRepository","entity","findOne","select","type","signature_algorithm","encryption_key","decryption_key","keyPair","name","RSASSA_PKCS1_V1_5","privateKeyContainer","privateKey","publicKeyContainer","publicKey","create","RSA","toBase64","RS256","save"],"sources":["../../../../../../src/app/modules/oauth2/repositories/key/repository.ts"],"sourcesContent":["/*\n * Copyright (c) 2025.\n *  Author Peter Placzek (tada5hi)\n *  For the full copyright and license information,\n *  view the LICENSE file that was distributed with this source code.\n */\n\nimport type { Key } from '@authup/core-kit';\nimport { AsymmetricKey, CryptoAsymmetricAlgorithm, createAsymmetricKeyPair } from '@authup/server-kit';\nimport { JWKType, JWTAlgorithm } from '@authup/specs';\nimport { useDataSource } from 'typeorm-extension';\nimport { KeyEntity } from '../../../../../adapters/database/index.ts';\nimport type { IOAuth2KeyRepository } from '../../../../../core/index.ts';\n\nexport class OAuth2KeyRepository implements IOAuth2KeyRepository {\n    async findByRealmId(realmId: string): Promise<Key | null> {\n        return this.createOrGet({ realm_id: realmId });\n    }\n\n    async findById(id: string): Promise<Key | null> {\n        return this.createOrGet({ id });\n    }\n\n    protected async createOrGet(where: {\n        realm_id?: string,\n        id?: string\n    }) : Promise<Key | null> {\n        const dataSource = await useDataSource();\n        const repository = dataSource.getRepository(KeyEntity);\n\n        let entity = await repository.findOne({\n            select: {\n                id: true,\n                type: true,\n                signature_algorithm: true,\n                encryption_key: true,\n                decryption_key: true,\n            },\n            where,\n        });\n\n        if (entity) {\n            return entity;\n        }\n\n        if (typeof where.realm_id !== 'string') {\n            return null;\n        }\n\n        const keyPair = await createAsymmetricKeyPair({ name: CryptoAsymmetricAlgorithm.RSASSA_PKCS1_V1_5 });\n\n        const privateKeyContainer = new AsymmetricKey(keyPair.privateKey);\n        const publicKeyContainer = new AsymmetricKey(keyPair.publicKey);\n\n        entity = repository.create({\n            type: JWKType.RSA,\n            decryption_key: await privateKeyContainer.toBase64(),\n            encryption_key: await publicKeyContainer.toBase64(),\n            realm_id: where.realm_id,\n            signature_algorithm: `${JWTAlgorithm.RS256}`,\n        });\n\n        await repository.save(entity);\n\n        return entity;\n    }\n}\n"],"mappings":";;;;;;AAcA,IAAaO,sBAAb,MAAaA;CACT,MAAMC,cAAcC,SAAsC;AACtD,SAAO,KAAKC,YAAY,EAAEC,UAAUF,SAAQ,CAAA;;CAGhD,MAAMG,SAASC,IAAiC;AAC5C,SAAO,KAAKH,YAAY,EAAEG,IAAG,CAAA;;CAGjC,MAAgBH,YAAYI,OAGH;EAErB,MAAME,cAAaD,MADMV,eAAAA,EACKY,cAAcX,UAAAA;EAE5C,IAAIY,SAAS,MAAMF,WAAWG,QAAQ;GAClCC,QAAQ;IACJP,IAAI;IACJQ,MAAM;IACNC,qBAAqB;IACrBC,gBAAgB;IAChBC,gBAAgB;IACpB;GACAV;GACJ,CAAA;AAEA,MAAII,OACA,QAAOA;AAGX,MAAI,OAAOJ,MAAMH,aAAa,SAC1B,QAAO;EAGX,MAAMc,UAAU,MAAMvB,wBAAwB,EAAEwB,MAAMzB,0BAA0B0B,mBAAkB,CAAA;EAElG,MAAMC,sBAAsB,IAAI5B,cAAcyB,QAAQI,WAAU;EAChE,MAAMC,qBAAqB,IAAI9B,cAAcyB,QAAQM,UAAS;AAE9Db,WAASF,WAAWgB,OAAO;GACvBX,MAAMlB,QAAQ8B;GACdT,gBAAgB,MAAMI,oBAAoBM,UAAQ;GAClDX,gBAAgB,MAAMO,mBAAmBI,UAAQ;GACjDvB,UAAUG,MAAMH;GAChBW,qBAAqB,GAAGlB,aAAa+B;GACzC,CAAA;AAEA,QAAMnB,WAAWoB,KAAKlB,OAAAA;AAEtB,SAAOA"}

package/dist/app/modules/oauth2/repositories/scope/index.mjs

@@ -0,0 +1,2 @@
+import { OAuth2ScopeRepository } from "./repository.mjs";
+export { OAuth2ScopeRepository };

package/dist/app/modules/oauth2/repositories/scope/repository.mjs

@@ -0,0 +1,17 @@
+//#region src/app/modules/oauth2/repositories/scope/repository.ts
+var OAuth2ScopeRepository = class {
+	repository;
+	constructor(repository) {
+		this.repository = repository;
+	}
+	async findByClientId(clientId) {
+		return (await this.repository.find({
+			where: { client_id: clientId },
+			relations: { scope: true }
+		})).map((clientScope) => clientScope.scope);
+	}
+};
+//#endregion
+export { OAuth2ScopeRepository };
+
+//# sourceMappingURL=repository.mjs.map

package/dist/app/modules/oauth2/repositories/scope/repository.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"repository.mjs","names":["OAuth2ScopeRepository","repository","findByClientId","clientId","clientScopes","find","where","client_id","relations","scope","map","clientScope"],"sources":["../../../../../../src/app/modules/oauth2/repositories/scope/repository.ts"],"sourcesContent":["/*\n * Copyright (c) 2025.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport type { ClientScope, Scope } from '@authup/core-kit';\nimport type { Repository } from 'typeorm';\nimport type { IOAuth2ScopeRepository } from '../../../../../core/index.ts';\n\nexport class OAuth2ScopeRepository implements IOAuth2ScopeRepository {\n    private readonly repository: Repository<ClientScope>;\n\n    constructor(\n        repository: Repository<ClientScope>,\n    ) {\n        this.repository = repository;\n    }\n\n    async findByClientId(clientId: string): Promise<Scope[]> {\n        const clientScopes = await this.repository.find({\n            where: { client_id: clientId },\n            relations: { scope: true },\n        });\n\n        return clientScopes.map((clientScope) => clientScope.scope);\n    }\n}\n"],"mappings":";AAWA,IAAaA,wBAAb,MAAaA;CACQC;CAEjB,YACIA,YACF;AACE,OAAKA,aAAaA;;CAGtB,MAAMC,eAAeC,UAAoC;AAMrD,UAAOC,MALoB,KAAKH,WAAWI,KAAK;GAC5CC,OAAO,EAAEC,WAAWJ,UAAS;GAC7BK,WAAW,EAAEC,OAAO,MAAK;GAC7B,CAAA,EAEoBC,KAAKC,gBAAgBA,YAAYF,MAAK"}

package/dist/app/modules/oauth2/repositories/token/index.mjs

@@ -0,0 +1,2 @@
+import { OAuth2TokenRepository } from "./repository.mjs";
+export { OAuth2TokenRepository };

package/dist/app/modules/oauth2/repositories/token/repository.mjs

@@ -0,0 +1,83 @@
+import { CacheOAuth2Prefix } from "../constants.mjs";
+import { buildCacheKey } from "@authup/server-kit";
+import { randomUUID } from "node:crypto";
+//#region src/app/modules/oauth2/repositories/token/repository.ts
+var OAuth2TokenRepository = class {
+	cache;
+	constructor(cache) {
+		this.cache = cache;
+	}
+	async findOneBySignature(signature) {
+		return this.cache.get(buildCacheKey({
+			prefix: CacheOAuth2Prefix.TOKEN_CLAIMS,
+			key: signature
+		}));
+	}
+	async findOneById(id) {
+		return this.cache.get(buildCacheKey({
+			prefix: CacheOAuth2Prefix.TOKEN,
+			key: id
+		}));
+	}
+	async removeById(id) {
+		const token = await this.findOneById(id);
+		if (!token) return;
+		const key = buildCacheKey({
+			prefix: CacheOAuth2Prefix.TOKEN,
+			key: id
+		});
+		await this.cache.drop(key);
+		await this.setInactive(id, token.exp);
+	}
+	async insert(payload) {
+		payload.jti = randomUUID();
+		await this.cache.set(buildCacheKey({
+			prefix: CacheOAuth2Prefix.TOKEN,
+			key: payload.jti
+		}), payload, { ttl: this.buildTTL(payload.exp) });
+		return payload;
+	}
+	async save(payload) {
+		if (payload.jti) return payload;
+		return this.insert(payload);
+	}
+	async saveWithSignature(data, signature) {
+		const normalized = await this.save(data);
+		await this.cache.set(buildCacheKey({
+			prefix: CacheOAuth2Prefix.TOKEN_CLAIMS,
+			key: signature
+		}), normalized, { ttl: this.buildTTL(data.exp) });
+		return normalized;
+	}
+	async isInactive(key) {
+		const cacheKey = buildCacheKey({
+			prefix: CacheOAuth2Prefix.TOKEN_INACTIVE,
+			key
+		});
+		return !!await this.cache.get(cacheKey);
+	}
+	async setInactive(key, exp) {
+		const ttl = this.buildTTL(exp);
+		const cacheKey = buildCacheKey({
+			prefix: CacheOAuth2Prefix.TOKEN_INACTIVE,
+			key
+		});
+		await this.cache.set(cacheKey, true, { ttl });
+	}
+	/**
+	* Transform timestamp in seconds to ttl in ms.
+	*
+	* @param utc
+	* @protected
+	*/ buildTTL(utc) {
+		if (typeof utc === "number") {
+			const ttl = utc * 1e3 - Date.now();
+			if (ttl > 0) return ttl;
+		}
+		return 3600 * 1e3;
+	}
+};
+//#endregion
+export { OAuth2TokenRepository };
+
+//# sourceMappingURL=repository.mjs.map

package/dist/app/modules/oauth2/repositories/token/repository.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"repository.mjs","names":["buildCacheKey","randomUUID","CacheOAuth2Prefix","OAuth2TokenRepository","cache","findOneBySignature","signature","get","prefix","TOKEN_CLAIMS","key","findOneById","id","TOKEN","removeById","token","drop","setInactive","exp","insert","payload","jti","set","ttl","buildTTL","save","saveWithSignature","data","normalized","isInactive","cacheKey","TOKEN_INACTIVE","response","utc","Date","now"],"sources":["../../../../../../src/app/modules/oauth2/repositories/token/repository.ts"],"sourcesContent":["/*\n * Copyright (c) 2025-2025.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport type { ICache } from '@authup/server-kit';\nimport { buildCacheKey } from '@authup/server-kit';\nimport type { OAuth2TokenPayload } from '@authup/specs';\nimport { randomUUID } from 'node:crypto';\nimport type { IOAuth2TokenRepository } from '../../../../../core/index.ts';\nimport { CacheOAuth2Prefix } from '../constants.ts';\n\nexport class OAuth2TokenRepository implements IOAuth2TokenRepository {\n    protected cache : ICache;\n\n    constructor(cache: ICache) {\n        this.cache = cache;\n    }\n\n    // -----------------------------------------------------\n\n    async findOneBySignature(signature: string): Promise<OAuth2TokenPayload | null> {\n        return this.cache.get<OAuth2TokenPayload>(\n            buildCacheKey({\n                prefix: CacheOAuth2Prefix.TOKEN_CLAIMS,\n                key: signature, \n            }),\n        );\n    }\n\n    async findOneById(id: string): Promise<OAuth2TokenPayload | null> {\n        return this.cache.get<OAuth2TokenPayload>(\n            buildCacheKey({\n                prefix: CacheOAuth2Prefix.TOKEN,\n                key: id, \n            }),\n        );\n    }\n\n    // -----------------------------------------------------\n\n    async removeById(id: string): Promise<void> {\n        const token = await this.findOneById(id);\n        if (!token) {\n            return;\n        }\n\n        const key = buildCacheKey({\n            prefix: CacheOAuth2Prefix.TOKEN,\n            key: id, \n        });\n        await this.cache.drop(key);\n\n        await this.setInactive(id, token.exp);\n    }\n\n    // -----------------------------------------------------\n\n    async insert(payload: OAuth2TokenPayload): Promise<OAuth2TokenPayload> {\n        payload.jti = randomUUID();\n\n        await this.cache.set(\n            buildCacheKey({\n                prefix: CacheOAuth2Prefix.TOKEN,\n                key: payload.jti, \n            }),\n            payload,\n            { ttl: this.buildTTL(payload.exp) },\n        );\n\n        return payload;\n    }\n\n    async save(payload: OAuth2TokenPayload): Promise<OAuth2TokenPayload> {\n        if (payload.jti) {\n            return payload;\n        }\n\n        return this.insert(payload);\n    }\n\n    async saveWithSignature(data: OAuth2TokenPayload, signature: string): Promise<OAuth2TokenPayload> {\n        const normalized = await this.save(data);\n\n        await this.cache.set(\n            buildCacheKey({\n                prefix: CacheOAuth2Prefix.TOKEN_CLAIMS,\n                key: signature, \n            }),\n            normalized,\n            { ttl: this.buildTTL(data.exp) },\n        );\n\n        return normalized;\n    }\n\n    // -----------------------------------------------------\n\n    async isInactive(key: string): Promise<boolean> {\n        const cacheKey = buildCacheKey({\n            prefix: CacheOAuth2Prefix.TOKEN_INACTIVE,\n            key,\n        });\n\n        const response = await this.cache.get(cacheKey);\n\n        return !!response;\n    }\n\n    async setInactive(key: string, exp?: number): Promise<void> {\n        const ttl = this.buildTTL(exp);\n\n        const cacheKey = buildCacheKey({\n            prefix: CacheOAuth2Prefix.TOKEN_INACTIVE,\n            key,\n        });\n\n        await this.cache.set(\n            cacheKey,\n            true,\n            { ttl },\n        );\n    }\n\n    // -----------------------------------------------------\n\n    /**\n     * Transform timestamp in seconds to ttl in ms.\n     *\n     * @param utc\n     * @protected\n     */\n    protected buildTTL(utc?: number) {\n        if (typeof utc === 'number') {\n            const ttl = (utc * 1000) - Date.now();\n            if (ttl > 0) {\n                return ttl;\n            }\n        }\n\n        return 3_600 * 1000;\n    }\n}\n"],"mappings":";;;;AAcA,IAAaG,wBAAb,MAAaA;CACCC;CAEV,YAAYA,OAAe;AACvB,OAAKA,QAAQA;;CAKjB,MAAMC,mBAAmBC,WAAuD;AAC5E,SAAO,KAAKF,MAAMG,IACdP,cAAc;GACVQ,QAAQN,kBAAkBO;GAC1BC,KAAKJ;GACT,CAAA,CAAA;;CAIR,MAAMK,YAAYC,IAAgD;AAC9D,SAAO,KAAKR,MAAMG,IACdP,cAAc;GACVQ,QAAQN,kBAAkBW;GAC1BH,KAAKE;GACT,CAAA,CAAA;;CAMR,MAAME,WAAWF,IAA2B;EACxC,MAAMG,QAAQ,MAAM,KAAKJ,YAAYC,GAAAA;AACrC,MAAI,CAACG,MACD;EAGJ,MAAML,MAAMV,cAAc;GACtBQ,QAAQN,kBAAkBW;GAC1BH,KAAKE;GACT,CAAA;AACA,QAAM,KAAKR,MAAMY,KAAKN,IAAAA;AAEtB,QAAM,KAAKO,YAAYL,IAAIG,MAAMG,IAAG;;CAKxC,MAAMC,OAAOC,SAA0D;AACnEA,UAAQC,MAAMpB,YAAAA;AAEd,QAAM,KAAKG,MAAMkB,IACbtB,cAAc;GACVQ,QAAQN,kBAAkBW;GAC1BH,KAAKU,QAAQC;GACjB,CAAA,EACAD,SACA,EAAEG,KAAK,KAAKC,SAASJ,QAAQF,IAAG,EAAE,CAAA;AAGtC,SAAOE;;CAGX,MAAMK,KAAKL,SAA0D;AACjE,MAAIA,QAAQC,IACR,QAAOD;AAGX,SAAO,KAAKD,OAAOC,QAAAA;;CAGvB,MAAMM,kBAAkBC,MAA0BrB,WAAgD;EAC9F,MAAMsB,aAAa,MAAM,KAAKH,KAAKE,KAAAA;AAEnC,QAAM,KAAKvB,MAAMkB,IACbtB,cAAc;GACVQ,QAAQN,kBAAkBO;GAC1BC,KAAKJ;GACT,CAAA,EACAsB,YACA,EAAEL,KAAK,KAAKC,SAASG,KAAKT,IAAG,EAAE,CAAA;AAGnC,SAAOU;;CAKX,MAAMC,WAAWnB,KAA+B;EAC5C,MAAMoB,WAAW9B,cAAc;GAC3BQ,QAAQN,kBAAkB6B;GAC1BrB;GACJ,CAAA;AAIA,SAAO,CAAC,CAACsB,MAFc,KAAK5B,MAAMG,IAAIuB,SAAAA;;CAK1C,MAAMb,YAAYP,KAAaQ,KAA6B;EACxD,MAAMK,MAAM,KAAKC,SAASN,IAAAA;EAE1B,MAAMY,WAAW9B,cAAc;GAC3BQ,QAAQN,kBAAkB6B;GAC1BrB;GACJ,CAAA;AAEA,QAAM,KAAKN,MAAMkB,IACbQ,UACA,MACA,EAAEP,KAAI,CAAA;;;;;;;IAYd,SAAmBU,KAAc;AAC7B,MAAI,OAAOA,QAAQ,UAAU;GACzB,MAAMV,MAAM,MAAO,MAAQW,KAAKC,KAAG;AACnC,OAAIZ,MAAM,EACN,QAAOA;;AAIf,SAAO,OAAQ"}

package/dist/app/modules/provisioning/index.mjs

@@ -0,0 +1,6 @@
+import { DefaultProvisioningSource } from "./sources/default/module.mjs";
+import { CompositeProvisioningSource } from "./sources/composite/module.mjs";
+import { FileProvisioningSource } from "./sources/file/module.mjs";
+import "./sources/index.mjs";
+import { ProvisionerModule } from "./module.mjs";
+export { CompositeProvisioningSource, DefaultProvisioningSource, FileProvisioningSource, ProvisionerModule };

package/dist/app/modules/provisioning/module.mjs

@@ -0,0 +1,170 @@
+import { RealmEntity } from "../../../adapters/database/domains/realm/entity.mjs";
+import { ClientEntity } from "../../../adapters/database/domains/client/entity.mjs";
+import { PermissionEntity } from "../../../adapters/database/domains/permission/entity.mjs";
+import { PolicyRepository } from "../../../adapters/database/domains/policy/repository.mjs";
+import { ClientPermissionEntity } from "../../../adapters/database/domains/client-permission/entity.mjs";
+import { RoleEntity } from "../../../adapters/database/domains/role/entity.mjs";
+import { RolePermissionEntity } from "../../../adapters/database/domains/role-permission/entity.mjs";
+import { ClientRoleEntity } from "../../../adapters/database/domains/client-role/entity.mjs";
+import { ScopeEntity } from "../../../adapters/database/domains/scope/entity.mjs";
+import { UserPermissionEntity } from "../../../adapters/database/domains/user-permission/entity.mjs";
+import { UserRoleEntity } from "../../../adapters/database/domains/user-role/entity.mjs";
+import { UserRepository } from "../../../adapters/database/domains/user/repository.mjs";
+import { RobotEntity } from "../../../adapters/database/domains/robot/entity.mjs";
+import { RobotRoleEntity } from "../../../adapters/database/domains/robot-role/entity.mjs";
+import { RobotPermissionEntity } from "../../../adapters/database/domains/robot-permission/entity.mjs";
+import { PermissionPolicyEntity } from "../../../adapters/database/domains/permission-policy/entity.mjs";
+import "../../../adapters/database/domains/index.mjs";
+import { ClientProvisioningSynchronizer } from "../../../core/provisioning/synchronizer/client/module.mjs";
+import { PermissionProvisioningSynchronizer } from "../../../core/provisioning/synchronizer/permission/module.mjs";
+import { PolicyProvisioningSynchronizer } from "../../../core/provisioning/synchronizer/policy/module.mjs";
+import { RealmProvisioningSynchronizer } from "../../../core/provisioning/synchronizer/realm/module.mjs";
+import { RoleProvisioningSynchronizer } from "../../../core/provisioning/synchronizer/role/module.mjs";
+import { GraphProvisioningSynchronizer } from "../../../core/provisioning/synchronizer/root/module.mjs";
+import { RobotProvisioningSynchronizer } from "../../../core/provisioning/synchronizer/robot/module.mjs";
+import { ScopeProvisioningSynchronizer } from "../../../core/provisioning/synchronizer/scope/module.mjs";
+import { UserProvisioningSynchronizer } from "../../../core/provisioning/synchronizer/user/module.mjs";
+import "../../../core/provisioning/synchronizer/index.mjs";
+import { ModuleName } from "../constants.mjs";
+import { ConfigInjectionKey } from "../config/constants.mjs";
+import "../config/index.mjs";
+import { DatabaseInjectionKey } from "../database/constants.mjs";
+import "../../../adapters/database/index.mjs";
+import { RealmRepositoryAdapter } from "../database/repositories/realm/repository.mjs";
+import { ClientRepositoryAdapter } from "../database/repositories/client/repository.mjs";
+import { ClientPermissionRepositoryAdapter } from "../database/repositories/client-permission/repository.mjs";
+import { ClientRoleRepositoryAdapter } from "../database/repositories/client-role/repository.mjs";
+import { PermissionRepositoryAdapter } from "../database/repositories/permission/repository.mjs";
+import { PermissionPolicyRepositoryAdapter } from "../database/repositories/permission-policy/repository.mjs";
+import { PolicyRepositoryAdapter } from "../database/repositories/policy/repository.mjs";
+import { RobotRepositoryAdapter } from "../database/repositories/robot/repository.mjs";
+import { RobotPermissionRepositoryAdapter } from "../database/repositories/robot-permission/repository.mjs";
+import { RobotRoleRepositoryAdapter } from "../database/repositories/robot-role/repository.mjs";
+import { RoleRepositoryAdapter } from "../database/repositories/role/repository.mjs";
+import { RolePermissionRepositoryAdapter } from "../database/repositories/role-permission/repository.mjs";
+import { ScopeRepositoryAdapter } from "../database/repositories/scope/repository.mjs";
+import { UserRepositoryAdapter } from "../database/repositories/user/repository.mjs";
+import { UserPermissionRepositoryAdapter } from "../database/repositories/user-permission/repository.mjs";
+import { UserRoleRepositoryAdapter } from "../database/repositories/user-role/repository.mjs";
+import "../database/repositories/index.mjs";
+import "../database/index.mjs";
+import { CompositeProvisioningSource } from "./sources/composite/module.mjs";
+import { FileProvisioningSource } from "./sources/file/module.mjs";
+import "./sources/index.mjs";
+import { SystemPolicyName } from "@authup/access";
+import path from "node:path";
+import fs from "node:fs";
+//#region src/app/modules/provisioning/module.ts
+var ProvisionerModule = class {
+	name;
+	dependencies;
+	sources;
+	constructor(sources = []) {
+		this.name = ModuleName.PROVISIONING;
+		this.dependencies = [ModuleName.CONFIG, ModuleName.DATABASE];
+		this.sources = sources;
+	}
+	async setup(container) {
+		const sources = [...this.sources];
+		const config = container.resolve(ConfigInjectionKey);
+		const provisioningDir = path.join(config.writableDirectoryPath, "provisioning");
+		if (fs.existsSync(provisioningDir)) sources.push(new FileProvisioningSource({ cwd: provisioningDir }));
+		const data = await new CompositeProvisioningSource(sources).load(container);
+		const dataSource = container.resolve(DatabaseInjectionKey.DataSource);
+		const realmRepository = container.resolve(RealmEntity);
+		const permissionRepository = new PermissionRepositoryAdapter({
+			repository: container.resolve(PermissionEntity),
+			realmRepository
+		});
+		const policyRepository = new PolicyRepositoryAdapter({
+			repository: new PolicyRepository(dataSource),
+			realmRepository
+		});
+		const policySynchronizer = new PolicyProvisioningSynchronizer({
+			repository: policyRepository,
+			permissionPolicyRepository: new PermissionPolicyRepositoryAdapter(container.resolve(PermissionPolicyEntity))
+		});
+		const roleRepository = new RoleRepositoryAdapter({
+			repository: container.resolve(RoleEntity),
+			realmRepository
+		});
+		const clientRepository = new ClientRepositoryAdapter({
+			repository: container.resolve(ClientEntity),
+			realmRepository
+		});
+		const permissionSynchronizer = new PermissionProvisioningSynchronizer({ repository: permissionRepository });
+		const roleSynchronizer = new RoleProvisioningSynchronizer({
+			repository: roleRepository,
+			permissionRepository,
+			policyRepository,
+			rolePermissionRepository: new RolePermissionRepositoryAdapter(container.resolve(RolePermissionEntity))
+		});
+		const clientSynchronizer = new ClientProvisioningSynchronizer({
+			clientRepository,
+			clientRoleRepository: new ClientRoleRepositoryAdapter(container.resolve(ClientRoleEntity)),
+			clientPermissionRepository: new ClientPermissionRepositoryAdapter(container.resolve(ClientPermissionEntity)),
+			roleRepository,
+			permissionRepository,
+			roleSynchronizer,
+			permissionSynchronizer
+		});
+		const userSynchronizer = new UserProvisioningSynchronizer({
+			userRepository: new UserRepositoryAdapter({
+				repository: new UserRepository(dataSource),
+				realmRepository
+			}),
+			userRoleRepository: new UserRoleRepositoryAdapter(container.resolve(UserRoleEntity)),
+			userPermissionRepository: new UserPermissionRepositoryAdapter(container.resolve(UserPermissionEntity)),
+			clientRepository,
+			roleRepository,
+			permissionRepository
+		});
+		const robotSynchronizer = new RobotProvisioningSynchronizer({
+			robotRepository: new RobotRepositoryAdapter({
+				repository: container.resolve(RobotEntity),
+				realmRepository
+			}),
+			robotRoleRepository: new RobotRoleRepositoryAdapter(container.resolve(RobotRoleEntity)),
+			robotPermissionRepository: new RobotPermissionRepositoryAdapter(container.resolve(RobotPermissionEntity)),
+			roleRepository,
+			permissionRepository
+		});
+		const scopeSynchronizer = new ScopeProvisioningSynchronizer({ repository: new ScopeRepositoryAdapter({
+			repository: container.resolve(ScopeEntity),
+			realmRepository
+		}) });
+		await new GraphProvisioningSynchronizer({
+			policySynchronizer,
+			permissionSynchronizer,
+			roleSynchronizer,
+			realmSynchronizer: new RealmProvisioningSynchronizer({
+				repository: new RealmRepositoryAdapter(realmRepository),
+				clientSynchronizer,
+				roleSynchronizer,
+				permissionSynchronizer,
+				userSynchronizer,
+				robotSynchronizer,
+				scopeSynchronizer
+			}),
+			scopeSynchronizer
+		}).synchronize(data);
+		if (config.permissionsDefaultPolicyAssignment) await this.assignDefaultPolicy(dataSource, policyRepository);
+	}
+	async assignDefaultPolicy(dataSource, policyRepository) {
+		const defaultPolicy = await policyRepository.findOneByName(SystemPolicyName.DEFAULT);
+		if (!defaultPolicy) return;
+		const permissionRepo = dataSource.getRepository(PermissionEntity);
+		const junctionRepo = dataSource.getRepository(PermissionPolicyEntity);
+		const permissions = await permissionRepo.find();
+		for (const permission of permissions) if (!await junctionRepo.findOneBy({ permission_id: permission.id })) await junctionRepo.save(junctionRepo.create({
+			permission_id: permission.id,
+			permission_realm_id: permission.realm_id,
+			policy_id: defaultPolicy.id,
+			policy_realm_id: defaultPolicy.realm_id
+		}));
+	}
+};
+//#endregion
+export { ProvisionerModule };
+
+//# sourceMappingURL=module.mjs.map