@authup/server-core 1.0.0-beta.36 → 1.0.0-beta.38

package/dist/adapters/http/controllers/entities/client-scope/utils/validator.mjs

@@ -0,0 +1,20 @@
+import { RequestHandlerOperation } from "../../../../request/constants.mjs";
+import "../../../../request/index.mjs";
+import { Container } from "validup";
+import { createValidationChain, createValidator } from "@validup/adapter-validator";
+//#region src/adapters/http/controllers/entities/client-scope/utils/validator.ts
+var ClientScopeRequestValidator = class extends Container {
+	initialize() {
+		super.initialize();
+		this.mount("client_id", { group: RequestHandlerOperation.CREATE }, createValidator(() => {
+			return createValidationChain().exists().isUUID();
+		}));
+		this.mount("scope_id", { group: RequestHandlerOperation.CREATE }, createValidator(() => {
+			return createValidationChain().exists().isUUID();
+		}));
+	}
+};
+//#endregion
+export { ClientScopeRequestValidator };
+
+//# sourceMappingURL=validator.mjs.map

package/dist/adapters/http/controllers/entities/client-scope/utils/validator.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"validator.mjs","names":["createValidationChain","createValidator","Container","RequestHandlerOperation","ClientScopeRequestValidator","initialize","mount","group","CREATE","chain","exists","isUUID"],"sources":["../../../../../../../src/adapters/http/controllers/entities/client-scope/utils/validator.ts"],"sourcesContent":["/*\n * Copyright (c) 2022.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport { createValidationChain, createValidator } from '@validup/adapter-validator';\nimport { Container } from 'validup';\nimport type { ClientScopeEntity } from '../../../../../database/domains/index.ts';\nimport { RequestHandlerOperation } from '../../../../request/index.ts';\n\nexport class ClientScopeRequestValidator extends Container<ClientScopeEntity> {\n    protected initialize() {\n        super.initialize();\n\n        this.mount(\n            'client_id',\n            { group: RequestHandlerOperation.CREATE },\n            createValidator(() => {\n                const chain = createValidationChain();\n                return chain\n                    .exists()\n                    .isUUID();\n            }),\n        );\n\n        this.mount(\n            'scope_id',\n            { group: RequestHandlerOperation.CREATE },\n            createValidator(() => {\n                const chain = createValidationChain();\n                return chain\n                    .exists()\n                    .isUUID();\n            }),\n        );\n    }\n}\n"],"mappings":";;;;;AAYA,IAAaI,8BAAb,cAAiDF,UAAAA;CACnCG,aAAa;AACnB,QAAMA,YAAAA;AAEN,OAAKC,MACD,aACA,EAAEC,OAAOJ,wBAAwBK,QAAO,EACxCP,sBAAgB;AAEZ,UADcD,uBACPS,CACFC,QAAM,CACNC,QAAM;IACf,CAAA;AAGJ,OAAKL,MACD,YACA,EAAEC,OAAOJ,wBAAwBK,QAAO,EACxCP,sBAAgB;AAEZ,UADcD,uBACPS,CACFC,QAAM,CACNC,QAAM;IACf,CAAA"}

package/dist/adapters/http/controllers/entities/identity-provide-role/index.mjs

@@ -0,0 +1,2 @@
+import { IdentityProviderRoleMappingController } from "./module.mjs";
+export { IdentityProviderRoleMappingController };

package/dist/adapters/http/controllers/entities/identity-provide-role/module.mjs

@@ -0,0 +1,124 @@
+import { buildActorContext } from "../../../request/helpers/actor.mjs";
+import "../../../request/index.mjs";
+import { ForceLoggedInMiddleware } from "../../../middleware/built-in/loggedin/module.mjs";
+import "../../../middleware/index.mjs";
+import { send, sendAccepted, sendCreated } from "routup";
+import { useRequestQuery } from "@routup/basic/query";
+import { DBody, DController, DDelete, DGet, DPath, DPost, DRequest, DResponse, DTags } from "@routup/decorators";
+//#region src/adapters/http/controllers/entities/identity-provide-role/module.ts
+function _ts_decorate(decorators, target, key, desc) {
+	var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+	if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+	else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+	return c > 3 && r && Object.defineProperty(target, key, r), r;
+}
+function _ts_metadata(k, v) {
+	if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+}
+function _ts_param(paramIndex, decorator) {
+	return function(target, key) {
+		decorator(target, key, paramIndex);
+	};
+}
+var IdentityProviderRoleMappingController = class {
+	service;
+	constructor(ctx) {
+		this.service = ctx.service;
+	}
+	async getMany(req, res) {
+		const actor = buildActorContext(req);
+		const { data, meta } = await this.service.getMany(useRequestQuery(req), actor);
+		return send(res, {
+			data,
+			meta
+		});
+	}
+	async getOne(id, req, res) {
+		const actor = buildActorContext(req);
+		return send(res, await this.service.getOne(id, actor));
+	}
+	async add(data, req, res) {
+		const actor = buildActorContext(req);
+		return sendCreated(res, await this.service.create(data, actor));
+	}
+	async edit(id, data, req, res) {
+		const actor = buildActorContext(req);
+		return sendAccepted(res, await this.service.update(id, data, actor));
+	}
+	async drop(id, req, res) {
+		const actor = buildActorContext(req);
+		return sendAccepted(res, await this.service.delete(id, actor));
+	}
+};
+_ts_decorate([
+	DGet("", [ForceLoggedInMiddleware]),
+	_ts_param(0, DRequest()),
+	_ts_param(1, DResponse()),
+	_ts_metadata("design:type", Function),
+	_ts_metadata("design:paramtypes", [typeof Request === "undefined" ? Object : Request, typeof Response === "undefined" ? Object : Response]),
+	_ts_metadata("design:returntype", Promise)
+], IdentityProviderRoleMappingController.prototype, "getMany", null);
+_ts_decorate([
+	DGet("/:id", [ForceLoggedInMiddleware]),
+	_ts_param(0, DPath("id")),
+	_ts_param(1, DRequest()),
+	_ts_param(2, DResponse()),
+	_ts_metadata("design:type", Function),
+	_ts_metadata("design:paramtypes", [
+		String,
+		typeof Request === "undefined" ? Object : Request,
+		typeof Response === "undefined" ? Object : Response
+	]),
+	_ts_metadata("design:returntype", Promise)
+], IdentityProviderRoleMappingController.prototype, "getOne", null);
+_ts_decorate([
+	DPost("", [ForceLoggedInMiddleware]),
+	_ts_param(0, DBody()),
+	_ts_param(1, DRequest()),
+	_ts_param(2, DResponse()),
+	_ts_metadata("design:type", Function),
+	_ts_metadata("design:paramtypes", [
+		Object,
+		typeof Request === "undefined" ? Object : Request,
+		typeof Response === "undefined" ? Object : Response
+	]),
+	_ts_metadata("design:returntype", Promise)
+], IdentityProviderRoleMappingController.prototype, "add", null);
+_ts_decorate([
+	DPost("/:id", [ForceLoggedInMiddleware]),
+	_ts_param(0, DPath("id")),
+	_ts_param(1, DBody()),
+	_ts_param(2, DRequest()),
+	_ts_param(3, DResponse()),
+	_ts_metadata("design:type", Function),
+	_ts_metadata("design:paramtypes", [
+		String,
+		Object,
+		typeof Request === "undefined" ? Object : Request,
+		typeof Response === "undefined" ? Object : Response
+	]),
+	_ts_metadata("design:returntype", Promise)
+], IdentityProviderRoleMappingController.prototype, "edit", null);
+_ts_decorate([
+	DDelete("/:id", [ForceLoggedInMiddleware]),
+	_ts_param(0, DPath("id")),
+	_ts_param(1, DRequest()),
+	_ts_param(2, DResponse()),
+	_ts_metadata("design:type", Function),
+	_ts_metadata("design:paramtypes", [
+		String,
+		typeof Request === "undefined" ? Object : Request,
+		typeof Response === "undefined" ? Object : Response
+	]),
+	_ts_metadata("design:returntype", Promise)
+], IdentityProviderRoleMappingController.prototype, "drop", null);
+IdentityProviderRoleMappingController = _ts_decorate([
+	DTags("identity-provider"),
+	DController("/identity-provider-role-mappings"),
+	_ts_metadata("design:type", Function),
+	_ts_metadata("design:paramtypes", [typeof IdentityProviderRoleMappingControllerContext === "undefined" ? Object : IdentityProviderRoleMappingControllerContext])
+], IdentityProviderRoleMappingController);
+//#endregion
+export { IdentityProviderRoleMappingController };
+
+//# sourceMappingURL=module.mjs.map

package/dist/adapters/http/controllers/entities/identity-provide-role/module.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"module.mjs","names":["DBody","DController","DDelete","DGet","DPath","DPost","DRequest","DResponse","DTags","send","sendAccepted","sendCreated","useRequestQuery","ForceLoggedInMiddleware","buildActorContext","IdentityProviderRoleMappingController","service","ctx","getMany","req","res","actor","data","meta","getOne","id","entity","add","create","edit","update","drop","delete"],"sources":["../../../../../../src/adapters/http/controllers/entities/identity-provide-role/module.ts"],"sourcesContent":["/*\n * Copyright (c) 2022.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport {\n    DBody,\n    DController,\n    DDelete,\n    DGet,\n    DPath,\n    DPost,\n    DRequest,\n    DResponse,\n    DTags,\n} from '@routup/decorators';\nimport type { Request, Response } from 'routup';\nimport { send, sendAccepted, sendCreated } from 'routup';\nimport { useRequestQuery } from '@routup/basic/query';\nimport type {\n    IIdentityProviderRoleMappingService,\n} from '../../../../../core/index.ts';\nimport { ForceLoggedInMiddleware } from '../../../middleware/index.ts';\nimport {\n    buildActorContext,\n} from '../../../request/index.ts';\n\nexport type IdentityProviderRoleMappingControllerContext = {\n    service: IIdentityProviderRoleMappingService,\n};\n\n@DTags('identity-provider')\n@DController('/identity-provider-role-mappings')\nexport class IdentityProviderRoleMappingController {\n    protected service: IIdentityProviderRoleMappingService;\n\n    constructor(ctx: IdentityProviderRoleMappingControllerContext) {\n        this.service = ctx.service;\n    }\n\n    @DGet('', [ForceLoggedInMiddleware])\n    async getMany(\n        @DRequest() req: Request,\n        @DResponse() res: Response,\n    ): Promise<any> {\n        const actor = buildActorContext(req);\n        const {\n            data,\n            meta,\n        } = await this.service.getMany(useRequestQuery(req), actor);\n\n        return send(res, {\n            data,\n            meta,\n        });\n    }\n\n    @DGet('/:id', [ForceLoggedInMiddleware])\n    async getOne(\n        @DPath('id') id: string,\n        @DRequest() req: Request,\n        @DResponse() res: Response,\n    ): Promise<any> {\n        const actor = buildActorContext(req);\n        const entity = await this.service.getOne(id, actor);\n\n        return send(res, entity);\n    }\n\n    @DPost('', [ForceLoggedInMiddleware])\n    async add(\n        @DBody() data: any,\n        @DRequest() req: Request,\n        @DResponse() res: Response,\n    ): Promise<any> {\n        const actor = buildActorContext(req);\n        const entity = await this.service.create(data, actor);\n\n        return sendCreated(res, entity);\n    }\n\n    @DPost('/:id', [ForceLoggedInMiddleware])\n    async edit(\n        @DPath('id') id: string,\n        @DBody() data: any,\n        @DRequest() req: Request,\n        @DResponse() res: Response,\n    ): Promise<any> {\n        const actor = buildActorContext(req);\n        const entity = await this.service.update(id, data, actor);\n\n        return sendAccepted(res, entity);\n    }\n\n    @DDelete('/:id', [ForceLoggedInMiddleware])\n    async drop(\n        @DPath('id') id: string,\n        @DRequest() req: Request,\n        @DResponse() res: Response,\n    ): Promise<any> {\n        const actor = buildActorContext(req);\n        const entity = await this.service.delete(id, actor);\n\n        return sendAccepted(res, entity);\n    }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;AAmCA,IAAae,wCAAb,MAAaA;CACCC;CAEV,YAAYC,KAAmD;AAC3D,OAAKD,UAAUC,IAAID;;CAGvB,MACME,QACF,KACA,KACY;EACZ,MAAMG,QAAQP,kBAAkBK,IAAAA;EAChC,MAAM,EACFG,MACAC,SACA,MAAM,KAAKP,QAAQE,QAAQN,gBAAgBO,IAAAA,EAAME,MAAAA;AAErD,SAAOZ,KAAKW,KAAK;GACbE;GACAC;GACJ,CAAA;;CAGJ,MACMC,OACF,IACA,KACA,KACY;EACZ,MAAMH,QAAQP,kBAAkBK,IAAAA;AAGhC,SAAOV,KAAKW,KAAKM,MAFI,KAAKV,QAAQQ,OAAOC,IAAIJ,MAAAA,CAE5BK;;CAGrB,MACMC,IACF,MACA,KACA,KACY;EACZ,MAAMN,QAAQP,kBAAkBK,IAAAA;AAGhC,SAAOR,YAAYS,KAAKM,MAFH,KAAKV,QAAQY,OAAON,MAAMD,MAAAA,CAEvBK;;CAG5B,MACMG,KACF,IACA,MACA,KACA,KACY;EACZ,MAAMR,QAAQP,kBAAkBK,IAAAA;AAGhC,SAAOT,aAAaU,KAAKM,MAFJ,KAAKV,QAAQc,OAAOL,IAAIH,MAAMD,MAAAA,CAE1BK;;CAG7B,MACMK,KACF,IACA,KACA,KACY;EACZ,MAAMV,QAAQP,kBAAkBK,IAAAA;AAGhC,SAAOT,aAAaU,KAAKM,MAFJ,KAAKV,QAAQgB,OAAOP,IAAIJ,MAAAA,CAEpBK;;;;WA/DlBb,wBAAAA,CAAAA;;;;;;;;eAiBIA,wBAAAA,CAAAA;;;;;;;;;;;;;YAYHA,wBAAAA,CAAAA;;;;;;;;;;;;;gBAYIA,wBAAAA,CAAAA;;;;;;;;;;;;;;;kBAaEA,wBAAAA,CAAAA"}

package/dist/adapters/http/controllers/entities/identity-provider/index.mjs

@@ -0,0 +1,2 @@
+import { IdentityProviderController } from "./module.mjs";
+export { IdentityProviderController };

package/dist/adapters/http/controllers/entities/identity-provider/module.mjs

@@ -0,0 +1,358 @@
+import { OAuth2AuthorizationCodeRequestValidator } from "../../../../../core/oauth2/authorization/code-request/validator.mjs";
+import { createIdentityProviderOAuth2Authenticator } from "../../../../../core/identity/provider/authentication/factory.mjs";
+import "../../../../../core/index.mjs";
+import { useRequestPermissionEvaluator } from "../../../request/permission/helper.mjs";
+import { useRequestIdentityOrFail } from "../../../request/helpers/identity.mjs";
+import { getRequestBodyRealmID } from "../../../request/helpers/body-realm-id.mjs";
+import { getRequestParamID, useRequestParamID } from "../../../request/helpers/param-id.mjs";
+import "../../../request/index.mjs";
+import { ForceLoggedInMiddleware } from "../../../middleware/built-in/loggedin/module.mjs";
+import "../../../middleware/index.mjs";
+import { IdentityProviderAttributesValidator, IdentityProviderValidator, IdentityType, PermissionName, ValidatorGroup, isOAuth2IdentityProvider, isOpenIDIdentityProvider } from "@authup/core-kit";
+import { base64URLDecode, isUUID } from "@authup/kit";
+import { BuiltInPolicyType, PolicyData } from "@authup/access";
+import { OAuth2Error } from "@authup/specs";
+import { BadRequestError, NotFoundError } from "@ebec/http";
+import { getRequestHeader, getRequestIP, send, sendAccepted, sendCreated, sendRedirect, useRequestParam } from "routup";
+import { RoutupContainerAdapter } from "@validup/adapter-routup";
+import { useRequestQuery } from "@routup/basic/query";
+import { DBody, DController, DDelete, DGet, DPath, DPost, DPut, DRequest, DResponse, DTags } from "@routup/decorators";
+import { URL } from "node:url";
+//#region src/adapters/http/controllers/entities/identity-provider/module.ts
+function _ts_decorate(decorators, target, key, desc) {
+	var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+	if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+	else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+	return c > 3 && r && Object.defineProperty(target, key, r), r;
+}
+function _ts_metadata(k, v) {
+	if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+}
+function _ts_param(paramIndex, decorator) {
+	return function(target, key) {
+		decorator(target, key, paramIndex);
+	};
+}
+var IdentityProviderController = class {
+	options;
+	repository;
+	realmRepository;
+	accountManager;
+	codeRequestVerifier;
+	codeRequestValidator;
+	stateManager;
+	codeIssuer;
+	constructor(ctx) {
+		this.options = ctx.options;
+		this.repository = ctx.repository;
+		this.realmRepository = ctx.realmRepository;
+		this.accountManager = ctx.accountManager;
+		this.codeIssuer = ctx.codeIssuer;
+		this.codeRequestVerifier = ctx.codeRequestVerifier;
+		this.codeRequestValidator = new OAuth2AuthorizationCodeRequestValidator();
+		this.stateManager = ctx.stateManager;
+	}
+	async getProviders(req, res) {
+		const { data, meta } = await this.repository.findMany(useRequestQuery(req));
+		try {
+			const permissionEvaluator = useRequestPermissionEvaluator(req);
+			await permissionEvaluator.preEvaluate({ name: PermissionName.IDENTITY_PROVIDER_READ });
+			for (const datum of data) try {
+				await permissionEvaluator.evaluate({
+					name: PermissionName.IDENTITY_PROVIDER_READ,
+					input: new PolicyData({ [BuiltInPolicyType.ATTRIBUTES]: datum })
+				});
+			} catch {}
+		} catch {}
+		return send(res, {
+			data,
+			meta
+		});
+	}
+	async getProvider(id, req, res) {
+		const paramId = useRequestParamID(req, { isUUID: false });
+		const entity = await this.repository.findOneByIdOrName(paramId, useRequestParam(req, "realmId"));
+		if (!entity) throw new NotFoundError();
+		try {
+			await useRequestPermissionEvaluator(req).evaluate({
+				name: PermissionName.IDENTITY_PROVIDER_READ,
+				input: new PolicyData({ [BuiltInPolicyType.ATTRIBUTES]: entity })
+			});
+		} catch {}
+		return send(res, entity);
+	}
+	async editProvider(id, user, req, res) {
+		return this.write(req, res, { updateOnly: true });
+	}
+	async put(id, user, req, res) {
+		return this.write(req, res);
+	}
+	async dropProvider(id, req, res) {
+		const paramId = useRequestParamID(req);
+		const permissionEvaluator = useRequestPermissionEvaluator(req);
+		await permissionEvaluator.preEvaluate({ name: PermissionName.IDENTITY_PROVIDER_DELETE });
+		const entity = await this.repository.findOneBy({ id: paramId });
+		if (!entity) throw new NotFoundError();
+		await permissionEvaluator.evaluate({
+			name: PermissionName.IDENTITY_PROVIDER_DELETE,
+			input: new PolicyData({ [BuiltInPolicyType.ATTRIBUTES]: entity })
+		});
+		const { id: entityId } = entity;
+		await this.repository.remove(entity);
+		entity.id = entityId;
+		return sendAccepted(res, entity);
+	}
+	async addProvider(user, req, res) {
+		return this.write(req, res);
+	}
+	async authorizeOut(_id, req, res) {
+		const id = useRequestParamID(req);
+		const entity = await this.resolve(id);
+		if (!isOAuth2IdentityProvider(entity) && !isOpenIDIdentityProvider(entity)) throw new BadRequestError("Only an identity-provider based on the oauth protocol supports authorize redirect.");
+		const authenticator = createIdentityProviderOAuth2Authenticator({
+			accountManager: this.accountManager,
+			provider: entity,
+			options: { baseURL: this.options.baseURL }
+		});
+		const parameters = {};
+		let codeRequest;
+		const query = useRequestQuery(req);
+		if (typeof query.codeRequest === "string") {
+			let codeRequestDecoded;
+			try {
+				codeRequestDecoded = JSON.parse(base64URLDecode(query.codeRequest));
+			} catch {
+				throw OAuth2Error.requestInvalid("The code request is malformed and can not be parsed.");
+			}
+			const codeRequestValidated = await this.codeRequestValidator.run(codeRequestDecoded);
+			const data = await this.codeRequestVerifier.verify(codeRequestValidated);
+			if (data.client.realm_id && entity.realm_id && entity.realm_id !== data.client.realm_id) throw OAuth2Error.requestInvalid("The provider and client realm do not match.");
+			codeRequest = data.data;
+		}
+		parameters.state = await this.saveAuthorizationState(req, codeRequest);
+		return sendRedirect(res, authenticator.buildRedirectURL(parameters));
+	}
+	async authorizeIn(_id, req, res) {
+		const id = useRequestParamID(req);
+		const entity = await this.resolve(id);
+		if (!isOAuth2IdentityProvider(entity) && !isOpenIDIdentityProvider(entity)) throw new Error(`The provider protocol ${entity.protocol} is not valid.`);
+		const data = await this.verifyAuthorizationState(req);
+		if (entity.realm_id && data.codeRequest && data.codeRequest.realm_id && data.codeRequest.realm_id !== entity.realm_id) throw OAuth2Error.requestInvalid("The provider and client realm do not match.");
+		const { code } = useRequestQuery(req);
+		const user = await createIdentityProviderOAuth2Authenticator({
+			accountManager: this.accountManager,
+			provider: entity,
+			options: {
+				baseURL: this.options.baseURL,
+				clientId: data.codeRequest?.client_id
+			}
+		}).authenticate(code);
+		const realm = await this.realmRepository.resolve(entity.realm_id, true);
+		const authorizationCode = await this.codeIssuer.issue({
+			response_type: "code",
+			client_id: data.codeRequest?.client_id,
+			redirect_uri: data.codeRequest?.redirect_uri,
+			scope: data.codeRequest?.scope
+		}, {
+			type: IdentityType.USER,
+			data: {
+				...user,
+				realm
+			}
+		});
+		if (data.codeRequest) {
+			const codeRequestKeys = Object.keys(data.codeRequest);
+			const url = new URL("/authorize", this.options.baseURL);
+			for (const codeRequestKey_ of codeRequestKeys) {
+				const codeRequestKey = codeRequestKey_;
+				if (data.codeRequest[codeRequestKey]) url.searchParams.set(codeRequestKey, data.codeRequest[codeRequestKey]);
+			}
+			url.searchParams.set("code", authorizationCode.id);
+			return sendRedirect(res, url.href);
+		}
+		const url = new URL(this.options.baseURL);
+		url.searchParams.set("code", authorizationCode.id);
+		return sendRedirect(res, url.href);
+	}
+	async write(req, res, options = {}) {
+		let group;
+		const id = getRequestParamID(req, { isUUID: false });
+		const realmId = getRequestBodyRealmID(req);
+		let entity;
+		if (id) {
+			const where = {};
+			if (isUUID(id)) where.id = id;
+			else where.name = id;
+			if (realmId) where.realm_id = realmId;
+			entity = await this.repository.findOneBy(where);
+			if (!entity && options.updateOnly) throw new NotFoundError();
+		} else if (options.updateOnly) throw new NotFoundError();
+		const permissionEvaluator = useRequestPermissionEvaluator(req);
+		if (entity) {
+			await permissionEvaluator.preEvaluate({ name: PermissionName.IDENTITY_PROVIDER_UPDATE });
+			group = ValidatorGroup.UPDATE;
+		} else {
+			await permissionEvaluator.preEvaluate({ name: PermissionName.IDENTITY_PROVIDER_CREATE });
+			group = ValidatorGroup.CREATE;
+		}
+		const data = await new RoutupContainerAdapter(new IdentityProviderValidator()).run(req, { group });
+		const attributes = await new RoutupContainerAdapter(new IdentityProviderAttributesValidator()).run(req);
+		await this.repository.validateJoinColumns(data);
+		if (entity) await permissionEvaluator.evaluate({
+			name: PermissionName.IDENTITY_PROVIDER_UPDATE,
+			input: new PolicyData({ [BuiltInPolicyType.ATTRIBUTES]: {
+				...entity,
+				...data
+			} })
+		});
+		else {
+			if (!data.realm_id) data.realm_id = useRequestIdentityOrFail(req).realmId;
+			await permissionEvaluator.evaluate({
+				name: PermissionName.IDENTITY_PROVIDER_CREATE,
+				input: new PolicyData({ [BuiltInPolicyType.ATTRIBUTES]: data })
+			});
+		}
+		await this.repository.checkUniqueness(data, entity || void 0);
+		if (entity) {
+			entity = this.repository.merge(entity, data);
+			await this.repository.saveWithEA(entity, attributes);
+			return sendAccepted(res, entity);
+		}
+		entity = this.repository.create(data);
+		await this.repository.saveWithEA(entity, attributes);
+		return sendCreated(res, entity);
+	}
+	async resolve(id) {
+		const entity = await this.repository.findOneById(id);
+		if (!entity) throw new NotFoundError();
+		return entity;
+	}
+	async saveAuthorizationState(req, codeRequest) {
+		return this.stateManager.save({
+			codeRequest,
+			ip: getRequestIP(req, { trustProxy: true }),
+			userAgent: getRequestHeader(req, "user-agent")
+		});
+	}
+	async verifyAuthorizationState(req) {
+		const query = useRequestQuery(req);
+		if (typeof query.state !== "string") throw OAuth2Error.stateInvalid();
+		return this.stateManager.verify(query.state, {
+			ip: getRequestIP(req, { trustProxy: true }),
+			userAgent: getRequestHeader(req, "user-agent")
+		});
+	}
+};
+_ts_decorate([
+	DGet("", []),
+	_ts_param(0, DRequest()),
+	_ts_param(1, DResponse()),
+	_ts_metadata("design:type", Function),
+	_ts_metadata("design:paramtypes", [Object, Object]),
+	_ts_metadata("design:returntype", Promise)
+], IdentityProviderController.prototype, "getProviders", null);
+_ts_decorate([
+	DGet("/:id", []),
+	_ts_param(0, DPath("id")),
+	_ts_param(1, DRequest()),
+	_ts_param(2, DResponse()),
+	_ts_metadata("design:type", Function),
+	_ts_metadata("design:paramtypes", [
+		String,
+		Object,
+		Object
+	]),
+	_ts_metadata("design:returntype", Promise)
+], IdentityProviderController.prototype, "getProvider", null);
+_ts_decorate([
+	DPost("/:id", [ForceLoggedInMiddleware]),
+	_ts_param(0, DPath("id")),
+	_ts_param(1, DBody()),
+	_ts_param(2, DRequest()),
+	_ts_param(3, DResponse()),
+	_ts_metadata("design:type", Function),
+	_ts_metadata("design:paramtypes", [
+		String,
+		typeof NonNullable === "undefined" ? Object : NonNullable,
+		Object,
+		Object
+	]),
+	_ts_metadata("design:returntype", Promise)
+], IdentityProviderController.prototype, "editProvider", null);
+_ts_decorate([
+	DPut("/:id", [ForceLoggedInMiddleware]),
+	_ts_param(0, DPath("id")),
+	_ts_param(1, DBody()),
+	_ts_param(2, DRequest()),
+	_ts_param(3, DResponse()),
+	_ts_metadata("design:type", Function),
+	_ts_metadata("design:paramtypes", [
+		String,
+		typeof NonNullable === "undefined" ? Object : NonNullable,
+		Object,
+		Object
+	]),
+	_ts_metadata("design:returntype", Promise)
+], IdentityProviderController.prototype, "put", null);
+_ts_decorate([
+	DDelete("/:id", [ForceLoggedInMiddleware]),
+	_ts_param(0, DPath("id")),
+	_ts_param(1, DRequest()),
+	_ts_param(2, DResponse()),
+	_ts_metadata("design:type", Function),
+	_ts_metadata("design:paramtypes", [
+		String,
+		Object,
+		Object
+	]),
+	_ts_metadata("design:returntype", Promise)
+], IdentityProviderController.prototype, "dropProvider", null);
+_ts_decorate([
+	DPost("", [ForceLoggedInMiddleware]),
+	_ts_param(0, DBody()),
+	_ts_param(1, DRequest()),
+	_ts_param(2, DResponse()),
+	_ts_metadata("design:type", Function),
+	_ts_metadata("design:paramtypes", [
+		typeof NonNullable === "undefined" ? Object : NonNullable,
+		Object,
+		Object
+	]),
+	_ts_metadata("design:returntype", Promise)
+], IdentityProviderController.prototype, "addProvider", null);
+_ts_decorate([
+	DGet("/:id/authorize-out", []),
+	_ts_param(0, DPath("id")),
+	_ts_param(1, DRequest()),
+	_ts_param(2, DResponse()),
+	_ts_metadata("design:type", Function),
+	_ts_metadata("design:paramtypes", [
+		String,
+		Object,
+		Object
+	]),
+	_ts_metadata("design:returntype", Promise)
+], IdentityProviderController.prototype, "authorizeOut", null);
+_ts_decorate([
+	DGet("/:id/authorize-in", []),
+	_ts_param(0, DPath("id")),
+	_ts_param(1, DRequest()),
+	_ts_param(2, DResponse()),
+	_ts_metadata("design:type", Function),
+	_ts_metadata("design:paramtypes", [
+		String,
+		typeof Request === "undefined" ? Object : Request,
+		typeof Response === "undefined" ? Object : Response
+	]),
+	_ts_metadata("design:returntype", Promise)
+], IdentityProviderController.prototype, "authorizeIn", null);
+IdentityProviderController = _ts_decorate([
+	DTags("identity"),
+	DController("/identity-providers"),
+	_ts_metadata("design:type", Function),
+	_ts_metadata("design:paramtypes", [typeof IdentityProviderControllerContext === "undefined" ? Object : IdentityProviderControllerContext])
+], IdentityProviderController);
+//#endregion
+export { IdentityProviderController };
+
+//# sourceMappingURL=module.mjs.map

package/dist/adapters/http/controllers/entities/identity-provider/module.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"module.mjs","names":["BuiltInPolicyType","PolicyData","base64URLDecode","isUUID","DBody","DController","DDelete","DGet","DPath","DPost","DPut","DRequest","DResponse","DTags","getRequestHeader","getRequestIP","send","sendAccepted","sendCreated","sendRedirect","useRequestParam","IdentityProviderAttributesValidator","IdentityProviderValidator","IdentityType","PermissionName","ValidatorGroup","isOAuth2IdentityProvider","isOpenIDIdentityProvider","BadRequestError","NotFoundError","useRequestQuery","OAuth2Error","URL","RoutupContainerAdapter","OAuth2AuthorizationCodeRequestValidator","createIdentityProviderOAuth2Authenticator","getRequestBodyRealmID","getRequestParamID","useRequestIdentityOrFail","useRequestParamID","useRequestPermissionEvaluator","ForceLoggedInMiddleware","IdentityProviderController","options","repository","realmRepository","accountManager","codeRequestVerifier","codeRequestValidator","stateManager","codeIssuer","ctx","getProviders","req","res","data","meta","findMany","permissionEvaluator","preEvaluate","name","IDENTITY_PROVIDER_READ","datum","evaluate","input","ATTRIBUTES","getProvider","id","paramId","entity","findOneByIdOrName","editProvider","user","write","updateOnly","put","dropProvider","IDENTITY_PROVIDER_DELETE","findOneBy","entityId","remove","addProvider","authorizeOut","_id","resolve","authenticator","provider","baseURL","parameters","codeRequest","query","codeRequestDecoded","JSON","parse","requestInvalid","codeRequestValidated","run","verify","client","realm_id","state","saveAuthorizationState","buildRedirectURL","authorizeIn","Error","protocol","verifyAuthorizationState","code","clientId","client_id","authenticate","realm","authorizationCode","issue","response_type","redirect_uri","scope","type","USER","codeRequestKeys","Object","keys","url","codeRequestKey_","codeRequestKey","searchParams","set","href","group","realmId","where","IDENTITY_PROVIDER_UPDATE","UPDATE","IDENTITY_PROVIDER_CREATE","CREATE","validator","attributesValidator","attributes","validateJoinColumns","identity","checkUniqueness","undefined","merge","saveWithEA","create","findOneById","save","ip","trustProxy","userAgent","stateInvalid"],"sources":["../../../../../../src/adapters/http/controllers/entities/identity-provider/module.ts"],"sourcesContent":["/*\n * Copyright (c) 2022.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport { BuiltInPolicyType, PolicyData } from '@authup/access';\nimport { base64URLDecode, isUUID } from '@authup/kit';\nimport {\n    DBody, \n    DController, \n    DDelete, \n    DGet, \n    DPath, \n    DPost, \n    DPut, \n    DRequest, \n    DResponse, \n    DTags,\n} from '@routup/decorators';\nimport type { Request, Response } from 'routup';\nimport {\n    getRequestHeader, \n    getRequestIP, \n    send, \n    sendAccepted, \n    sendCreated, \n    sendRedirect, \n    useRequestParam,\n} from 'routup';\nimport type { IdentityProvider, OAuth2AuthorizationCodeRequest } from '@authup/core-kit';\nimport {\n \n    IdentityProviderAttributesValidator, \n    IdentityProviderValidator, \n    IdentityType, \n    PermissionName, \n    ValidatorGroup, \n    isOAuth2IdentityProvider, \n    isOpenIDIdentityProvider, \n} from '@authup/core-kit';\nimport { BadRequestError, NotFoundError } from '@ebec/http';\nimport type { AuthorizeParameters } from '@hapic/oauth2';\nimport { useRequestQuery } from '@routup/basic/query';\nimport { OAuth2Error } from '@authup/specs';\nimport { URL } from 'node:url';\nimport { RoutupContainerAdapter } from '@validup/adapter-routup';\nimport type {\n    IIdentityProviderAccountManager,\n    IIdentityProviderRepository,\n    IOAuth2AuthorizationCodeIssuer,\n    IOAuth2AuthorizationCodeRequestVerifier,\n    IOAuth2AuthorizationStateManager,\n    IRealmRepository,\n    OAuth2AuthorizationState,\n} from '../../../../../core/index.ts';\nimport {\n    OAuth2AuthorizationCodeRequestValidator,\n    createIdentityProviderOAuth2Authenticator,\n} from '../../../../../core/index.ts';\nimport {\n    getRequestBodyRealmID,\n    getRequestParamID,\n    useRequestIdentityOrFail,\n    useRequestParamID,\n    useRequestPermissionEvaluator,\n} from '../../../request/index.ts';\nimport { ForceLoggedInMiddleware } from '../../../middleware/index.ts';\nimport type { IdentityProviderControllerContext, IdentityProviderControllerOptions } from './types.ts';\n\n@DTags('identity')\n@DController('/identity-providers')\nexport class IdentityProviderController {\n    protected options: IdentityProviderControllerOptions;\n\n    protected repository: IIdentityProviderRepository;\n\n    protected realmRepository: IRealmRepository;\n\n    protected accountManager: IIdentityProviderAccountManager;\n\n    protected codeRequestVerifier : IOAuth2AuthorizationCodeRequestVerifier;\n\n    protected codeRequestValidator : OAuth2AuthorizationCodeRequestValidator;\n\n    protected stateManager : IOAuth2AuthorizationStateManager;\n\n    protected codeIssuer : IOAuth2AuthorizationCodeIssuer;\n\n    // ---------------------------------------------------------\n\n    constructor(ctx: IdentityProviderControllerContext) {\n        this.options = ctx.options;\n        this.repository = ctx.repository;\n        this.realmRepository = ctx.realmRepository;\n        this.accountManager = ctx.accountManager;\n        this.codeIssuer = ctx.codeIssuer;\n        this.codeRequestVerifier = ctx.codeRequestVerifier;\n        this.codeRequestValidator = new OAuth2AuthorizationCodeRequestValidator();\n        this.stateManager = ctx.stateManager;\n    }\n\n    // ---------------------------------------------------------\n\n    @DGet('', [])\n    async getProviders(\n        @DRequest() req: any,\n        @DResponse() res: any,\n    ): Promise<any> {\n        const {\n            data, \n            meta, \n        } = await this.repository.findMany(useRequestQuery(req));\n\n        try {\n            const permissionEvaluator = useRequestPermissionEvaluator(req);\n            await permissionEvaluator.preEvaluate({ name: PermissionName.IDENTITY_PROVIDER_READ });\n\n            for (const datum of data) {\n                try {\n                    await permissionEvaluator.evaluate({\n                        name: PermissionName.IDENTITY_PROVIDER_READ,\n                        input: new PolicyData({ [BuiltInPolicyType.ATTRIBUTES]: datum }),\n                    });\n                } catch {\n                    // do nothing\n                }\n            }\n        } catch {\n            // do nothing\n        }\n\n        return send(res, {\n            data,\n            meta,\n        });\n    }\n\n    @DGet('/:id', [])\n    async getProvider(\n        @DPath('id') id: string,\n        @DRequest() req: any,\n        @DResponse() res: any,\n    ): Promise<any> {\n        const paramId = useRequestParamID(req, { isUUID: false });\n\n        const entity = await this.repository.findOneByIdOrName(\n            paramId,\n            useRequestParam(req, 'realmId'),\n        );\n\n        if (!entity) {\n            throw new NotFoundError();\n        }\n\n        try {\n            const permissionEvaluator = useRequestPermissionEvaluator(req);\n            await permissionEvaluator.evaluate({\n                name: PermissionName.IDENTITY_PROVIDER_READ,\n                input: new PolicyData({ [BuiltInPolicyType.ATTRIBUTES]: entity }),\n            });\n        } catch {\n            // do nothing\n        }\n\n        return send(res, entity);\n    }\n\n    @DPost('/:id', [ForceLoggedInMiddleware])\n    async editProvider(\n        @DPath('id') id: string,\n        @DBody() user: NonNullable<IdentityProvider>,\n        @DRequest() req: any,\n        @DResponse() res: any,\n    ) : Promise<any> {\n        return this.write(req, res, { updateOnly: true });\n    }\n\n    @DPut('/:id', [ForceLoggedInMiddleware])\n    async put(\n        @DPath('id') id: string,\n        @DBody() user: NonNullable<IdentityProvider>,\n        @DRequest() req: any,\n        @DResponse() res: any,\n    ) : Promise<any> {\n        return this.write(req, res);\n    }\n\n    @DDelete('/:id', [ForceLoggedInMiddleware])\n    async dropProvider(\n        @DPath('id') id: string,\n        @DRequest() req: any,\n        @DResponse() res: any,\n    ) : Promise<any> {\n        const paramId = useRequestParamID(req);\n\n        const permissionEvaluator = useRequestPermissionEvaluator(req);\n        await permissionEvaluator.preEvaluate({ name: PermissionName.IDENTITY_PROVIDER_DELETE });\n\n        const entity = await this.repository.findOneBy({ id: paramId });\n\n        if (!entity) {\n            throw new NotFoundError();\n        }\n\n        await permissionEvaluator.evaluate({\n            name: PermissionName.IDENTITY_PROVIDER_DELETE,\n            input: new PolicyData({ [BuiltInPolicyType.ATTRIBUTES]: entity }),\n        });\n\n        const { id: entityId } = entity;\n\n        await this.repository.remove(entity);\n\n        entity.id = entityId;\n\n        return sendAccepted(res, entity);\n    }\n\n    @DPost('', [ForceLoggedInMiddleware])\n    async addProvider(\n        @DBody() user: NonNullable<IdentityProvider>,\n        @DRequest() req: any,\n        @DResponse() res: any,\n    ) : Promise<any> {\n        return this.write(req, res);\n    }\n\n    // ---------------------------------------------------------\n\n    @DGet('/:id/authorize-out', [])\n    async authorizeOut(\n        @DPath('id') _id: string,\n        @DRequest() req: any,\n        @DResponse() res: any,\n    ) {\n        const id = useRequestParamID(req);\n        const entity = await this.resolve(id);\n\n        if (!isOAuth2IdentityProvider(entity) && !isOpenIDIdentityProvider(entity)) {\n            throw new BadRequestError('Only an identity-provider based on the oauth protocol supports authorize redirect.');\n        }\n\n        const authenticator = createIdentityProviderOAuth2Authenticator({\n            accountManager: this.accountManager,\n            provider: entity,\n            options: { baseURL: this.options.baseURL },\n        });\n\n        const parameters : AuthorizeParameters = {};\n\n        let codeRequest: OAuth2AuthorizationCodeRequest | undefined;\n        const query = useRequestQuery(req);\n        if (typeof query.codeRequest === 'string') {\n            let codeRequestDecoded: OAuth2AuthorizationCodeRequest;\n\n            try {\n                codeRequestDecoded = JSON.parse(base64URLDecode(query.codeRequest));\n            } catch {\n                throw OAuth2Error.requestInvalid('The code request is malformed and can not be parsed.');\n            }\n\n            const codeRequestValidated = await this.codeRequestValidator.run(codeRequestDecoded);\n            const data = await this.codeRequestVerifier.verify(codeRequestValidated);\n\n            if (\n                data.client.realm_id &&\n                entity.realm_id &&\n                entity.realm_id !== data.client.realm_id\n            ) {\n                throw OAuth2Error.requestInvalid('The provider and client realm do not match.');\n            }\n\n            codeRequest = data.data;\n        }\n\n        parameters.state = await this.saveAuthorizationState(req, codeRequest);\n\n        return sendRedirect(res, authenticator.buildRedirectURL(parameters));\n    }\n\n    @DGet('/:id/authorize-in', [])\n    async authorizeIn(\n        @DPath('id') _id: string,\n        @DRequest() req: Request,\n        @DResponse() res: Response,\n    ) {\n        const id = useRequestParamID(req);\n\n        const entity = await this.resolve(id);\n\n        if (!isOAuth2IdentityProvider(entity) && !isOpenIDIdentityProvider(entity)) {\n            throw new Error(`The provider protocol ${entity.protocol} is not valid.`);\n        }\n\n        const data = await this.verifyAuthorizationState(req);\n        if (\n            entity.realm_id &&\n            data.codeRequest &&\n            data.codeRequest.realm_id &&\n            data.codeRequest.realm_id !== entity.realm_id\n        ) {\n            throw OAuth2Error.requestInvalid('The provider and client realm do not match.');\n        }\n\n        const { code } = useRequestQuery(req);\n\n        const authenticator = createIdentityProviderOAuth2Authenticator({\n            accountManager: this.accountManager,\n            provider: entity,\n            options: {\n                baseURL: this.options.baseURL,\n                clientId: data.codeRequest?.client_id,\n            },\n        });\n\n        const user = await authenticator.authenticate(code);\n\n        const realm = await this.realmRepository.resolve(entity.realm_id, true);\n\n        const authorizationCode = await this.codeIssuer.issue(\n            {\n                response_type: 'code',\n                client_id: data.codeRequest?.client_id,\n                redirect_uri: data.codeRequest?.redirect_uri,\n                scope: data.codeRequest?.scope,\n            },\n            {\n                type: IdentityType.USER,\n                data: {\n                    ...user,\n                    realm,\n                },\n            },\n        );\n\n        if (data.codeRequest) {\n            const codeRequestKeys = Object.keys(data.codeRequest);\n\n            const url = new URL('/authorize', this.options.baseURL);\n            for (const codeRequestKey_ of codeRequestKeys) {\n                const codeRequestKey = codeRequestKey_ as keyof OAuth2AuthorizationCodeRequest;\n                if (data.codeRequest[codeRequestKey]) {\n                    url.searchParams.set(codeRequestKey, data.codeRequest[codeRequestKey]);\n                }\n            }\n\n            url.searchParams.set('code', authorizationCode.id);\n\n            return sendRedirect(res, url.href);\n        }\n\n        const url = new URL(this.options.baseURL);\n        url.searchParams.set('code', authorizationCode.id);\n\n        return sendRedirect(res, url.href);\n    }\n\n    // ---------------------------------------------------------\n\n    private async write(req: Request, res: Response, options: {\n        updateOnly?: boolean\n    } = {}): Promise<any> {\n        let group: string;\n        const id = getRequestParamID(req, { isUUID: false });\n        const realmId = getRequestBodyRealmID(req);\n\n        let entity: IdentityProvider | null | undefined;\n        if (id) {\n            const where: Record<string, any> = {};\n            if (isUUID(id)) {\n                where.id = id;\n            } else {\n                where.name = id;\n            }\n\n            if (realmId) {\n                where.realm_id = realmId;\n            }\n\n            entity = await this.repository.findOneBy(where);\n            if (!entity && options.updateOnly) {\n                throw new NotFoundError();\n            }\n        } else if (options.updateOnly) {\n            throw new NotFoundError();\n        }\n\n        const permissionEvaluator = useRequestPermissionEvaluator(req);\n        if (entity) {\n            await permissionEvaluator.preEvaluate({ name: PermissionName.IDENTITY_PROVIDER_UPDATE });\n\n            group = ValidatorGroup.UPDATE;\n        } else {\n            await permissionEvaluator.preEvaluate({ name: PermissionName.IDENTITY_PROVIDER_CREATE });\n\n            group = ValidatorGroup.CREATE;\n        }\n\n        const validator = new RoutupContainerAdapter(new IdentityProviderValidator());\n        const data = await validator.run(req, { group });\n\n        const attributesValidator = new RoutupContainerAdapter(new IdentityProviderAttributesValidator());\n        const attributes = await attributesValidator.run(req);\n\n        await this.repository.validateJoinColumns(data);\n\n        if (entity) {\n            await permissionEvaluator.evaluate({\n                name: PermissionName.IDENTITY_PROVIDER_UPDATE,\n                input: new PolicyData({\n                    [BuiltInPolicyType.ATTRIBUTES]: {\n                        ...entity,\n                        ...data,\n                    },\n                }),\n            });\n        } else {\n            if (!data.realm_id) {\n                const identity = useRequestIdentityOrFail(req);\n                data.realm_id = identity.realmId;\n            }\n\n            await permissionEvaluator.evaluate({\n                name: PermissionName.IDENTITY_PROVIDER_CREATE,\n                input: new PolicyData({ [BuiltInPolicyType.ATTRIBUTES]: data }),\n            });\n        }\n\n        await this.repository.checkUniqueness(data, entity || undefined);\n\n        if (entity) {\n            entity = this.repository.merge(entity, data);\n            await this.repository.saveWithEA(entity, attributes);\n\n            return sendAccepted(res, entity);\n        }\n\n        entity = this.repository.create(data);\n        await this.repository.saveWithEA(entity, attributes);\n\n        return sendCreated(res, entity);\n    }\n\n    // ---------------------------------------------------------\n\n    private async resolve(id: string) {\n        const entity = await this.repository.findOneById(id);\n\n        if (!entity) {\n            throw new NotFoundError();\n        }\n\n        return entity;\n    }\n\n    // ---------------------------------------------------------\n\n    private async saveAuthorizationState(\n        req: Request,\n        codeRequest?: OAuth2AuthorizationCodeRequest,\n    ) : Promise<string> {\n        return this.stateManager.save({\n            codeRequest,\n            ip: getRequestIP(req, { trustProxy: true }),\n            userAgent: getRequestHeader(req, 'user-agent'),\n        });\n    }\n\n    private async verifyAuthorizationState(req: Request): Promise<OAuth2AuthorizationState> {\n        const query = useRequestQuery(req);\n        if (typeof query.state !== 'string') {\n            throw OAuth2Error.stateInvalid();\n        }\n\n        return this.stateManager.verify(query.state, {\n            ip: getRequestIP(req, { trustProxy: true }),\n            userAgent: getRequestHeader(req, 'user-agent'),\n        });\n    }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAyEA,IAAa0C,6BAAb,MAAaA;CACCC;CAEAC;CAEAC;CAEAC;CAEAC;CAEAC;CAEAC;CAEAC;CAIV,YAAYC,KAAwC;AAChD,OAAKR,UAAUQ,IAAIR;AACnB,OAAKC,aAAaO,IAAIP;AACtB,OAAKC,kBAAkBM,IAAIN;AAC3B,OAAKC,iBAAiBK,IAAIL;AAC1B,OAAKI,aAAaC,IAAID;AACtB,OAAKH,sBAAsBI,IAAIJ;AAC/B,OAAKC,uBAAuB,IAAId,yCAAAA;AAChC,OAAKe,eAAeE,IAAIF;;CAK5B,MACMG,aACF,KACA,KACY;EACZ,MAAM,EACFG,MACAC,SACA,MAAM,KAAKZ,WAAWa,SAAS3B,gBAAgBuB,IAAAA,CAAAA;AAEnD,MAAI;GACA,MAAMK,sBAAsBlB,8BAA8Ba,IAAAA;AAC1D,SAAMK,oBAAoBC,YAAY,EAAEC,MAAMpC,eAAeqC,wBAAuB,CAAA;AAEpF,QAAK,MAAMC,SAASP,KAChB,KAAI;AACA,UAAMG,oBAAoBK,SAAS;KAC/BH,MAAMpC,eAAeqC;KACrBG,OAAO,IAAI/D,WAAW,GAAGD,kBAAkBiE,aAAaH,OAAM,CAAA;KAClE,CAAA;WACI;UAIR;AAIR,SAAO9C,KAAKsC,KAAK;GACbC;GACAC;GACJ,CAAA;;CAGJ,MACMU,YACF,IACA,KACA,KACY;EACZ,MAAME,UAAU7B,kBAAkBc,KAAK,EAAElD,QAAQ,OAAM,CAAA;EAEvD,MAAMkE,SAAS,MAAM,KAAKzB,WAAW0B,kBACjCF,SACAhD,gBAAgBiC,KAAK,UAAA,CAAA;AAGzB,MAAI,CAACgB,OACD,OAAM,IAAIxC,eAAAA;AAGd,MAAI;AAEA,SAD4BW,8BAA8Ba,IACpDK,CAAoBK,SAAS;IAC/BH,MAAMpC,eAAeqC;IACrBG,OAAO,IAAI/D,WAAW,GAAGD,kBAAkBiE,aAAaI,QAAO,CAAA;IACnE,CAAA;UACI;AAIR,SAAOrD,KAAKsC,KAAKe,OAAAA;;CAGrB,MACME,aACF,IACA,MACA,KACA,KACa;AACb,SAAO,KAAKE,MAAMpB,KAAKC,KAAK,EAAEoB,YAAY,MAAK,CAAA;;CAGnD,MACMC,IACF,IACA,MACA,KACA,KACa;AACb,SAAO,KAAKF,MAAMpB,KAAKC,IAAAA;;CAG3B,MACMsB,aACF,IACA,KACA,KACa;EACb,MAAMR,UAAU7B,kBAAkBc,IAAAA;EAElC,MAAMK,sBAAsBlB,8BAA8Ba,IAAAA;AAC1D,QAAMK,oBAAoBC,YAAY,EAAEC,MAAMpC,eAAeqD,0BAAyB,CAAA;EAEtF,MAAMR,SAAS,MAAM,KAAKzB,WAAWkC,UAAU,EAAEX,IAAIC,SAAQ,CAAA;AAE7D,MAAI,CAACC,OACD,OAAM,IAAIxC,eAAAA;AAGd,QAAM6B,oBAAoBK,SAAS;GAC/BH,MAAMpC,eAAeqD;GACrBb,OAAO,IAAI/D,WAAW,GAAGD,kBAAkBiE,aAAaI,QAAO,CAAA;GACnE,CAAA;EAEA,MAAM,EAAEF,IAAIY,aAAaV;AAEzB,QAAM,KAAKzB,WAAWoC,OAAOX,OAAAA;AAE7BA,SAAOF,KAAKY;AAEZ,SAAO9D,aAAaqC,KAAKe,OAAAA;;CAG7B,MACMY,YACF,MACA,KACA,KACa;AACb,SAAO,KAAKR,MAAMpB,KAAKC,IAAAA;;CAK3B,MACM4B,aACF,KACA,KACA,KACF;EACE,MAAMf,KAAK5B,kBAAkBc,IAAAA;EAC7B,MAAMgB,SAAS,MAAM,KAAKe,QAAQjB,GAAAA;AAElC,MAAI,CAACzC,yBAAyB2C,OAAAA,IAAW,CAAC1C,yBAAyB0C,OAAAA,CAC/D,OAAM,IAAIzC,gBAAgB,qFAAA;EAG9B,MAAMyD,gBAAgBlD,0CAA0C;GAC5DW,gBAAgB,KAAKA;GACrBwC,UAAUjB;GACV1B,SAAS,EAAE4C,SAAS,KAAK5C,QAAQ4C,SAAQ;GAC7C,CAAA;EAEA,MAAMC,aAAmC,EAAC;EAE1C,IAAIC;EACJ,MAAMC,QAAQ5D,gBAAgBuB,IAAAA;AAC9B,MAAI,OAAOqC,MAAMD,gBAAgB,UAAU;GACvC,IAAIE;AAEJ,OAAI;AACAA,yBAAqBC,KAAKC,MAAM3F,gBAAgBwF,MAAMD,YAAW,CAAA;WAC7D;AACJ,UAAM1D,YAAY+D,eAAe,uDAAA;;GAGrC,MAAMC,uBAAuB,MAAM,KAAK/C,qBAAqBgD,IAAIL,mBAAAA;GACjE,MAAMpC,OAAO,MAAM,KAAKR,oBAAoBkD,OAAOF,qBAAAA;AAEnD,OACIxC,KAAK2C,OAAOC,YACZ9B,OAAO8B,YACP9B,OAAO8B,aAAa5C,KAAK2C,OAAOC,SAEhC,OAAMpE,YAAY+D,eAAe,8CAAA;AAGrCL,iBAAclC,KAAKA;;AAGvBiC,aAAWY,QAAQ,MAAM,KAAKC,uBAAuBhD,KAAKoC,YAAAA;AAE1D,SAAOtE,aAAamC,KAAK+B,cAAciB,iBAAiBd,WAAAA,CAAAA;;CAG5D,MACMe,YACF,KACA,KACA,KACF;EACE,MAAMpC,KAAK5B,kBAAkBc,IAAAA;EAE7B,MAAMgB,SAAS,MAAM,KAAKe,QAAQjB,GAAAA;AAElC,MAAI,CAACzC,yBAAyB2C,OAAAA,IAAW,CAAC1C,yBAAyB0C,OAAAA,CAC/D,OAAM,IAAImC,MAAM,yBAAyBnC,OAAOoC,SAAS,gBAAe;EAG5E,MAAMlD,OAAO,MAAM,KAAKmD,yBAAyBrD,IAAAA;AACjD,MACIgB,OAAO8B,YACP5C,KAAKkC,eACLlC,KAAKkC,YAAYU,YACjB5C,KAAKkC,YAAYU,aAAa9B,OAAO8B,SAErC,OAAMpE,YAAY+D,eAAe,8CAAA;EAGrC,MAAM,EAAEa,SAAS7E,gBAAgBuB,IAAAA;EAWjC,MAAMmB,OAAO,MATSrC,0CAA0C;GAC5DW,gBAAgB,KAAKA;GACrBwC,UAAUjB;GACV1B,SAAS;IACL4C,SAAS,KAAK5C,QAAQ4C;IACtBqB,UAAUrD,KAAKkC,aAAaoB;IAChC;GACJ,CAEmBxB,CAAcyB,aAAaH,KAAAA;EAE9C,MAAMI,QAAQ,MAAM,KAAKlE,gBAAgBuC,QAAQf,OAAO8B,UAAU,KAAA;EAElE,MAAMa,oBAAoB,MAAM,KAAK9D,WAAW+D,MAC5C;GACIC,eAAe;GACfL,WAAWtD,KAAKkC,aAAaoB;GAC7BM,cAAc5D,KAAKkC,aAAa0B;GAChCC,OAAO7D,KAAKkC,aAAa2B;GAC7B,EACA;GACIC,MAAM9F,aAAa+F;GACnB/D,MAAM;IACF,GAAGiB;IACHuC;IACJ;GACJ,CAAA;AAGJ,MAAIxD,KAAKkC,aAAa;GAClB,MAAM8B,kBAAkBC,OAAOC,KAAKlE,KAAKkC,YAAW;GAEpD,MAAMiC,MAAM,IAAI1F,IAAI,cAAc,KAAKW,QAAQ4C,QAAO;AACtD,QAAK,MAAMoC,mBAAmBJ,iBAAiB;IAC3C,MAAMK,iBAAiBD;AACvB,QAAIpE,KAAKkC,YAAYmC,gBACjBF,KAAIG,aAAaC,IAAIF,gBAAgBrE,KAAKkC,YAAYmC,gBAAe;;AAI7EF,OAAIG,aAAaC,IAAI,QAAQd,kBAAkB7C,GAAE;AAEjD,UAAOhD,aAAamC,KAAKoE,IAAIK,KAAI;;EAGrC,MAAML,MAAM,IAAI1F,IAAI,KAAKW,QAAQ4C,QAAO;AACxCmC,MAAIG,aAAaC,IAAI,QAAQd,kBAAkB7C,GAAE;AAEjD,SAAOhD,aAAamC,KAAKoE,IAAIK,KAAI;;CAKrC,MAActD,MAAMpB,KAAcC,KAAeX,UAE7C,EAAE,EAAgB;EAClB,IAAIqF;EACJ,MAAM7D,KAAK9B,kBAAkBgB,KAAK,EAAElD,QAAQ,OAAM,CAAA;EAClD,MAAM8H,UAAU7F,sBAAsBiB,IAAAA;EAEtC,IAAIgB;AACJ,MAAIF,IAAI;GACJ,MAAM+D,QAA6B,EAAC;AACpC,OAAI/H,OAAOgE,GAAAA,CACP+D,OAAM/D,KAAKA;OAEX+D,OAAMtE,OAAOO;AAGjB,OAAI8D,QACAC,OAAM/B,WAAW8B;AAGrB5D,YAAS,MAAM,KAAKzB,WAAWkC,UAAUoD,MAAAA;AACzC,OAAI,CAAC7D,UAAU1B,QAAQ+B,WACnB,OAAM,IAAI7C,eAAAA;aAEPc,QAAQ+B,WACf,OAAM,IAAI7C,eAAAA;EAGd,MAAM6B,sBAAsBlB,8BAA8Ba,IAAAA;AAC1D,MAAIgB,QAAQ;AACR,SAAMX,oBAAoBC,YAAY,EAAEC,MAAMpC,eAAe2G,0BAAyB,CAAA;AAEtFH,WAAQvG,eAAe2G;SACpB;AACH,SAAM1E,oBAAoBC,YAAY,EAAEC,MAAMpC,eAAe6G,0BAAyB,CAAA;AAEtFL,WAAQvG,eAAe6G;;EAI3B,MAAM/E,OAAO,MAAMgF,IADGtG,uBAAuB,IAAIX,2BAAAA,CAC9BiH,CAAUvC,IAAI3C,KAAK,EAAE2E,OAAM,CAAA;EAG9C,MAAMS,aAAa,MAAMD,IADOvG,uBAAuB,IAAIZ,qCAAAA,CAClCmH,CAAoBxC,IAAI3C,IAAAA;AAEjD,QAAM,KAAKT,WAAW8F,oBAAoBnF,KAAAA;AAE1C,MAAIc,OACA,OAAMX,oBAAoBK,SAAS;GAC/BH,MAAMpC,eAAe2G;GACrBnE,OAAO,IAAI/D,WAAW,GACjBD,kBAAkBiE,aAAa;IAC5B,GAAGI;IACH,GAAGd;IACP,EACJ,CAAA;GACJ,CAAA;OACG;AACH,OAAI,CAACA,KAAK4C,SAEN5C,MAAK4C,WADY7D,yBAAyBe,IAC1BsF,CAASV;AAG7B,SAAMvE,oBAAoBK,SAAS;IAC/BH,MAAMpC,eAAe6G;IACrBrE,OAAO,IAAI/D,WAAW,GAAGD,kBAAkBiE,aAAaV,MAAK,CAAA;IACjE,CAAA;;AAGJ,QAAM,KAAKX,WAAWgG,gBAAgBrF,MAAMc,UAAUwE,KAAAA,EAAAA;AAEtD,MAAIxE,QAAQ;AACRA,YAAS,KAAKzB,WAAWkG,MAAMzE,QAAQd,KAAAA;AACvC,SAAM,KAAKX,WAAWmG,WAAW1E,QAAQoE,WAAAA;AAEzC,UAAOxH,aAAaqC,KAAKe,OAAAA;;AAG7BA,WAAS,KAAKzB,WAAWoG,OAAOzF,KAAAA;AAChC,QAAM,KAAKX,WAAWmG,WAAW1E,QAAQoE,WAAAA;AAEzC,SAAOvH,YAAYoC,KAAKe,OAAAA;;CAK5B,MAAce,QAAQjB,IAAY;EAC9B,MAAME,SAAS,MAAM,KAAKzB,WAAWqG,YAAY9E,GAAAA;AAEjD,MAAI,CAACE,OACD,OAAM,IAAIxC,eAAAA;AAGd,SAAOwC;;CAKX,MAAcgC,uBACVhD,KACAoC,aACgB;AAChB,SAAO,KAAKxC,aAAaiG,KAAK;GAC1BzD;GACA0D,IAAIpI,aAAasC,KAAK,EAAE+F,YAAY,MAAK,CAAA;GACzCC,WAAWvI,iBAAiBuC,KAAK,aAAA;GACrC,CAAA;;CAGJ,MAAcqD,yBAAyBrD,KAAiD;EACpF,MAAMqC,QAAQ5D,gBAAgBuB,IAAAA;AAC9B,MAAI,OAAOqC,MAAMU,UAAU,SACvB,OAAMrE,YAAYuH,cAAY;AAGlC,SAAO,KAAKrG,aAAagD,OAAOP,MAAMU,OAAO;GACzC+C,IAAIpI,aAAasC,KAAK,EAAE+F,YAAY,MAAK,CAAA;GACzCC,WAAWvI,iBAAiBuC,KAAK,aAAA;GACrC,CAAA;;;;;;;;;;;;;;;;;;;;;;;;;gBAtTYZ,wBAAAA,CAAAA;;;;;;;;;;;;;;;eAUDA,wBAAAA,CAAAA;;;;;;;;;;;;;;;kBAUGA,wBAAAA,CAAAA;;;;;;;;;;;;;YA+BNA,wBAAAA,CAAAA"}

package/dist/adapters/http/controllers/entities/identity-provider/types.mjs

@@ -0,0 +1 @@
+export {};

package/dist/adapters/http/controllers/entities/index.mjs

@@ -0,0 +1,55 @@
+import { ClientController } from "./client/module.mjs";
+import "./client/index.mjs";
+import { ClientPermissionController } from "./client-permission/module.mjs";
+import { ClientPermissionRequestValidator } from "./client-permission/utils/validation.mjs";
+import "./client-permission/index.mjs";
+import { ClientRoleRequestValidator } from "./client-role/utils/validation.mjs";
+import { ClientRoleController } from "./client-role/module.mjs";
+import "./client-role/index.mjs";
+import { ClientScopeController } from "./client-scope/module.mjs";
+import { ClientScopeRequestValidator } from "./client-scope/utils/validator.mjs";
+import "./client-scope/index.mjs";
+import { IdentityProviderController } from "./identity-provider/module.mjs";
+import "./identity-provider/index.mjs";
+import { IdentityProviderRoleMappingController } from "./identity-provide-role/module.mjs";
+import "./identity-provide-role/index.mjs";
+import { PermissionController } from "./permission/module.mjs";
+import "./permission/index.mjs";
+import { PermissionPolicyController } from "./permission-policy/module.mjs";
+import "./permission-policy/index.mjs";
+import { RealmController } from "./realm/module.mjs";
+import "./realm/index.mjs";
+import { RobotController } from "./robot/module.mjs";
+import "./robot/index.mjs";
+import { RobotPermissionController } from "./robot-permission/module.mjs";
+import { RobotPermissionRequestValidator } from "./robot-permission/utils/validation.mjs";
+import "./robot-permission/index.mjs";
+import { RobotRoleController } from "./robot-role/module.mjs";
+import { RobotRoleRequestValidator } from "./robot-role/utils/validation.mjs";
+import "./robot-role/index.mjs";
+import { RoleController } from "./role/module.mjs";
+import "./role/index.mjs";
+import { RoleAttributeController } from "./role-attribute/module.mjs";
+import { RoleAttributeRequestValidator } from "./role-attribute/utils/validation.mjs";
+import "./role-attribute/index.mjs";
+import { RolePermissionController } from "./role-permission/module.mjs";
+import { RolePermissionRequestValidator } from "./role-permission/utils/validation.mjs";
+import "./role-permission/index.mjs";
+import { PolicyController } from "./policy/module.mjs";
+import { PolicyAttributesValidator } from "./policy/utils/attributes-validator.mjs";
+import { PolicyValidator } from "./policy/utils/validation.mjs";
+import "./policy/index.mjs";
+import { ScopeController } from "./scope/module.mjs";
+import "./scope/index.mjs";
+import { UserController } from "./user/module.mjs";
+import "./user/index.mjs";
+import { UserAttributeController } from "./user-attribute/module.mjs";
+import { UserAttributeRequestValidator } from "./user-attribute/utils/validation.mjs";
+import "./user-attribute/index.mjs";
+import { UserPermissionController } from "./user-permission/module.mjs";
+import { UserPermissionRequestValidator } from "./user-permission/utils/validation.mjs";
+import "./user-permission/index.mjs";
+import { UserRoleController } from "./user-role/module.mjs";
+import { UserRoleRequestValidator } from "./user-role/utils/validation.mjs";
+import "./user-role/index.mjs";
+export { ClientController, ClientPermissionController, ClientPermissionRequestValidator, ClientRoleController, ClientRoleRequestValidator, ClientScopeController, ClientScopeRequestValidator, IdentityProviderController, IdentityProviderRoleMappingController, PermissionController, PermissionPolicyController, PolicyAttributesValidator, PolicyController, PolicyValidator, RealmController, RobotController, RobotPermissionController, RobotPermissionRequestValidator, RobotRoleController, RobotRoleRequestValidator, RoleAttributeController, RoleAttributeRequestValidator, RoleController, RolePermissionController, RolePermissionRequestValidator, ScopeController, UserAttributeController, UserAttributeRequestValidator, UserController, UserPermissionController, UserPermissionRequestValidator, UserRoleController, UserRoleRequestValidator };

package/dist/adapters/http/controllers/entities/permission/index.mjs

@@ -0,0 +1,2 @@
+import { PermissionController } from "./module.mjs";
+export { PermissionController };