@authup/server-core 1.0.0-beta.36 → 1.0.0-beta.38

package/dist/adapters/http/middleware/built-in/authorization/module.mjs

@@ -0,0 +1,131 @@
+import { ClientAuthenticator } from "../../../../../core/authentication/entities/client/module.mjs";
+import { RobotAuthenticator } from "../../../../../core/authentication/entities/robot/module.mjs";
+import { UserAuthenticator } from "../../../../../core/authentication/entities/user/module.mjs";
+import { PolicyEngine as PolicyEngine$1 } from "../../../../../core/security/policy/engine.mjs";
+import "../../../../../core/index.mjs";
+import { setRequestPermissionEvaluator } from "../../../request/permission/helper.mjs";
+import { setRequestIdentity } from "../../../request/helpers/identity.mjs";
+import { setRequestScopes } from "../../../request/helpers/scopes.mjs";
+import { setRequestToken } from "../../../request/helpers/token.mjs";
+import { RequestPermissionEvaluator } from "../../../request/permission/module.mjs";
+import "../../../request/index.mjs";
+import { IdentityType, ScopeName } from "@authup/core-kit";
+import { PermissionEvaluator } from "@authup/access";
+import { JWTError, OAuth2TokenKind, deserializeOAuth2Scope } from "@authup/specs";
+import { HTTPError } from "@authup/errors";
+import { AuthorizationHeaderType, parseAuthorizationHeader } from "hapic";
+//#region src/adapters/http/middleware/built-in/authorization/module.ts
+var AuthorizationMiddleware = class {
+	options;
+	oauth2TokenVerifier;
+	permissionEvaluator;
+	identityResolver;
+	sessionManager;
+	clientAuthenticator;
+	robotAuthenticator;
+	userAuthenticator;
+	constructor(ctx) {
+		this.options = ctx.options || {};
+		this.identityResolver = ctx.identityResolver;
+		this.sessionManager = ctx.sessionManager;
+		this.clientAuthenticator = new ClientAuthenticator(ctx.identityResolver);
+		this.robotAuthenticator = new RobotAuthenticator(ctx.identityResolver);
+		this.userAuthenticator = new UserAuthenticator(ctx.identityResolver);
+		this.oauth2TokenVerifier = ctx.oauth2TokenVerifier;
+		this.permissionEvaluator = new PermissionEvaluator({
+			provider: ctx.permissionProvider,
+			policyEngine: new PolicyEngine$1(ctx.identityPermissionProvider),
+			realmId: null,
+			clientId: null
+		});
+	}
+	async run(request, response, next) {
+		setRequestPermissionEvaluator(request, new RequestPermissionEvaluator(request, this.permissionEvaluator));
+		const { authorization: headerValue } = request.headers;
+		try {
+			if (typeof headerValue !== "string") {
+				next();
+				return;
+			}
+			const header = parseAuthorizationHeader(headerValue);
+			if (header.type === AuthorizationHeaderType.BEARER) {
+				await this.verifyBearerAuthorizationHeader(request, header);
+				next();
+				return;
+			}
+			if (header.type === AuthorizationHeaderType.BASIC) {
+				await this.verifyBasicAuthorizationHeader(request, header);
+				next();
+				return;
+			}
+			next(HTTPError.unsupportedHeaderType(header.type));
+		} catch (e) {
+			next(e);
+		}
+	}
+	/**
+	*
+	* @throws JWTError
+	*
+	* @param request
+	* @param header
+	*
+	* @protected
+	*/ async verifyBearerAuthorizationHeader(request, header) {
+		const payload = await this.oauth2TokenVerifier.verify(header.token);
+		if (payload.kind !== OAuth2TokenKind.ACCESS) throw JWTError.payloadPropertyInvalid("kind");
+		if (!payload.realm_id) throw JWTError.payloadPropertyInvalid("realm_id");
+		setRequestToken(request, header.token);
+		if (payload.scope) setRequestScopes(request, deserializeOAuth2Scope(payload.scope));
+		if (!payload.session_id) throw JWTError.payloadPropertyInvalid("session_id");
+		const session = await this.sessionManager.findOneById(payload.session_id);
+		if (!session) throw JWTError.expired();
+		try {
+			await this.sessionManager.verify(session);
+		} catch {
+			throw JWTError.expired();
+		}
+		await this.sessionManager.ping(session);
+		if (!payload.sub_kind) throw JWTError.payloadPropertyInvalid("sub_kind");
+		if (!payload.sub) throw JWTError.payloadPropertyInvalid("sub");
+		const identity = await this.identityResolver.resolve(payload.sub_kind, payload.sub);
+		if (identity) setRequestIdentity(request, identity);
+	}
+	async verifyBasicAuthorizationHeader(request, header) {
+		if (this.options.clientAuthBasic) {
+			const authenticator = await this.clientAuthenticator.safeAuthenticate(header.username, header.password);
+			if (authenticator.success) {
+				setRequestScopes(request, [ScopeName.GLOBAL]);
+				setRequestIdentity(request, {
+					type: IdentityType.CLIENT,
+					data: authenticator.data
+				});
+			}
+		}
+		if (this.options.userAuthBasic) {
+			const authenticated = await this.userAuthenticator.safeAuthenticate(header.username, header.password);
+			if (authenticated.success) {
+				setRequestScopes(request, [ScopeName.GLOBAL]);
+				setRequestIdentity(request, {
+					type: IdentityType.USER,
+					data: authenticated.data
+				});
+				return;
+			}
+		}
+		if (this.options.robotAuthBasic) {
+			const authenticated = await this.robotAuthenticator.safeAuthenticate(header.username, header.password);
+			if (authenticated.success) {
+				setRequestScopes(request, [ScopeName.GLOBAL]);
+				setRequestIdentity(request, {
+					type: IdentityType.ROBOT,
+					data: authenticated.data
+				});
+			}
+		}
+	}
+};
+//#endregion
+export { AuthorizationMiddleware };
+
+//# sourceMappingURL=module.mjs.map

package/dist/adapters/http/middleware/built-in/authorization/module.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"module.mjs","names":["PermissionEvaluator","IdentityType","ScopeName","HTTPError","JWTError","OAuth2TokenKind","deserializeOAuth2Scope","AuthorizationHeaderType","parseAuthorizationHeader","ClientAuthenticator","PolicyEngine","RobotAuthenticator","UserAuthenticator","RequestPermissionEvaluator","setRequestIdentity","setRequestPermissionEvaluator","setRequestScopes","setRequestToken","AuthorizationMiddleware","options","oauth2TokenVerifier","permissionEvaluator","identityResolver","sessionManager","clientAuthenticator","robotAuthenticator","userAuthenticator","ctx","provider","permissionProvider","policyEngine","identityPermissionProvider","realmId","clientId","run","request","response","next","requestAccessContext","authorization","headerValue","headers","header","type","BEARER","verifyBearerAuthorizationHeader","BASIC","verifyBasicAuthorizationHeader","unsupportedHeaderType","e","payload","verify","token","kind","ACCESS","payloadPropertyInvalid","realm_id","scope","session_id","session","findOneById","expired","ping","sub_kind","sub","identity","resolve","clientAuthBasic","authenticator","safeAuthenticate","username","password","success","GLOBAL","CLIENT","data","userAuthBasic","authenticated","USER","robotAuthBasic","ROBOT"],"sources":["../../../../../../src/adapters/http/middleware/built-in/authorization/module.ts"],"sourcesContent":["/*\n * Copyright (c) 2025.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport type { IPermissionEvaluator } from '@authup/access';\nimport { PermissionEvaluator } from '@authup/access';\nimport type { Client, Robot, User } from '@authup/core-kit';\nimport {\n    IdentityType,\n    ScopeName,\n} from '@authup/core-kit';\nimport { HTTPError } from '@authup/errors';\nimport { JWTError, OAuth2TokenKind, deserializeOAuth2Scope } from '@authup/specs';\nimport type { Next, Request, Response } from 'routup';\nimport {\n    AuthorizationHeaderType,\n    type BasicAuthorizationHeader,\n    type BearerAuthorizationHeader,\n    parseAuthorizationHeader,\n} from 'hapic';\nimport {\n    ClientAuthenticator,\n    PolicyEngine,\n    RobotAuthenticator,\n    UserAuthenticator, \n} from '../../../../../core/index.ts';\nimport type {\n    ICredentialsAuthenticator, \n    IIdentityResolver,\n    IOAuth2TokenVerifier, \n    ISessionManager,\n} from '../../../../../core/index.ts';\nimport {\n    RequestPermissionEvaluator,\n    setRequestIdentity,\n    setRequestPermissionEvaluator,\n    setRequestScopes,\n    setRequestToken,\n} from '../../../request/index.ts';\nimport type { HTTPAuthorizationMiddlewareContext, HTTPAuthorizationMiddlewareOptions } from './types.ts';\n\nexport class AuthorizationMiddleware {\n    protected options: HTTPAuthorizationMiddlewareOptions;\n\n    // --------------------------------------\n\n    protected oauth2TokenVerifier: IOAuth2TokenVerifier;\n\n    protected permissionEvaluator: IPermissionEvaluator;\n\n    // --------------------------------------\n\n    protected identityResolver: IIdentityResolver;\n\n    protected sessionManager : ISessionManager;\n\n    // --------------------------------------\n\n    protected clientAuthenticator : ICredentialsAuthenticator<Client>;\n\n    protected robotAuthenticator : ICredentialsAuthenticator<Robot>;\n\n    protected userAuthenticator : ICredentialsAuthenticator<User>;\n\n    // --------------------------------------\n\n    constructor(ctx: HTTPAuthorizationMiddlewareContext) {\n        this.options = ctx.options || {};\n\n        this.identityResolver = ctx.identityResolver;\n        this.sessionManager = ctx.sessionManager;\n\n        this.clientAuthenticator = new ClientAuthenticator(ctx.identityResolver);\n        this.robotAuthenticator = new RobotAuthenticator(ctx.identityResolver);\n        this.userAuthenticator = new UserAuthenticator(ctx.identityResolver);\n\n        this.oauth2TokenVerifier = ctx.oauth2TokenVerifier;\n\n        this.permissionEvaluator = new PermissionEvaluator({\n            provider: ctx.permissionProvider,\n            policyEngine: new PolicyEngine(ctx.identityPermissionProvider),\n            realmId: null,\n            clientId: null,\n        });\n    }\n\n    // --------------------------------------\n\n    async run(request: Request, response: Response, next: Next) {\n        const requestAccessContext = new RequestPermissionEvaluator(\n            request,\n            this.permissionEvaluator,\n        );\n        setRequestPermissionEvaluator(request, requestAccessContext);\n\n        const { authorization: headerValue } = request.headers;\n\n        try {\n            if (typeof headerValue !== 'string') {\n                next();\n                return;\n            }\n\n            const header = parseAuthorizationHeader(headerValue);\n\n            if (header.type === AuthorizationHeaderType.BEARER) {\n                await this.verifyBearerAuthorizationHeader(request, header);\n                next();\n                return;\n            } if (header.type === AuthorizationHeaderType.BASIC) {\n                await this.verifyBasicAuthorizationHeader(request, header);\n                next();\n                return;\n            }\n\n            next(HTTPError.unsupportedHeaderType(header.type));\n        } catch (e) {\n            next(e as Error);\n        }\n    }\n\n    /**\n     *\n     * @throws JWTError\n     *\n     * @param request\n     * @param header\n     *\n     * @protected\n     */\n    protected async verifyBearerAuthorizationHeader(\n        request: Request,\n        header: BearerAuthorizationHeader,\n    ) {\n        const payload = await this.oauth2TokenVerifier.verify(header.token);\n        if (payload.kind !== OAuth2TokenKind.ACCESS) {\n            throw JWTError.payloadPropertyInvalid('kind');\n        }\n\n        if (!payload.realm_id) {\n            throw JWTError.payloadPropertyInvalid('realm_id');\n        }\n\n        setRequestToken(request, header.token);\n\n        if (payload.scope) {\n            setRequestScopes(request, deserializeOAuth2Scope(payload.scope));\n        }\n\n        // -------------------------------------------------------\n\n        if (!payload.session_id) {\n            throw JWTError.payloadPropertyInvalid('session_id');\n        }\n\n        const session = await this.sessionManager.findOneById(payload.session_id);\n        if (!session) {\n            throw JWTError.expired();\n        }\n\n        try {\n            await this.sessionManager.verify(session);\n        } catch {\n            throw JWTError.expired();\n        }\n\n        await this.sessionManager.ping(session);\n\n        // -------------------------------------------------------\n\n        if (!payload.sub_kind) {\n            throw JWTError.payloadPropertyInvalid('sub_kind');\n        }\n\n        if (!payload.sub) {\n            throw JWTError.payloadPropertyInvalid('sub');\n        }\n\n        const identity = await this.identityResolver.resolve(\n            payload.sub_kind,\n            payload.sub,\n        );\n\n        if (identity) {\n            setRequestIdentity(request, identity);\n        }\n    }\n\n    protected async verifyBasicAuthorizationHeader(\n        request: Request,\n        header: BasicAuthorizationHeader,\n    ) {\n        if (this.options.clientAuthBasic) {\n            const authenticator = await this.clientAuthenticator.safeAuthenticate(\n                header.username,\n                header.password,\n            );\n            if (authenticator.success) {\n                setRequestScopes(request, [ScopeName.GLOBAL]);\n                setRequestIdentity(request, {\n                    type: IdentityType.CLIENT,\n                    data: authenticator.data,\n                });\n            }\n        }\n\n        if (this.options.userAuthBasic) {\n            const authenticated = await this.userAuthenticator.safeAuthenticate(\n                header.username,\n                header.password,\n            );\n\n            if (authenticated.success) {\n                setRequestScopes(request, [ScopeName.GLOBAL]);\n                setRequestIdentity(request, {\n                    type: IdentityType.USER,\n                    data: authenticated.data,\n                });\n\n                return;\n            }\n        }\n\n        if (this.options.robotAuthBasic) {\n            const authenticated = await this.robotAuthenticator.safeAuthenticate(\n                header.username,\n                header.password,\n            );\n            if (authenticated.success) {\n                setRequestScopes(request, [ScopeName.GLOBAL]);\n                setRequestIdentity(request, {\n                    type: IdentityType.ROBOT,\n                    data: authenticated.data,\n                });\n            }\n        }\n    }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;AA4CA,IAAakB,0BAAb,MAAaA;CACCC;CAIAC;CAEAC;CAIAC;CAEAC;CAIAC;CAEAC;CAEAC;CAIV,YAAYC,KAAyC;AACjD,OAAKR,UAAUQ,IAAIR,WAAW,EAAC;AAE/B,OAAKG,mBAAmBK,IAAIL;AAC5B,OAAKC,iBAAiBI,IAAIJ;AAE1B,OAAKC,sBAAsB,IAAIf,oBAAoBkB,IAAIL,iBAAgB;AACvE,OAAKG,qBAAqB,IAAId,mBAAmBgB,IAAIL,iBAAgB;AACrE,OAAKI,oBAAoB,IAAId,kBAAkBe,IAAIL,iBAAgB;AAEnE,OAAKF,sBAAsBO,IAAIP;AAE/B,OAAKC,sBAAsB,IAAIrB,oBAAoB;GAC/C4B,UAAUD,IAAIE;GACdC,cAAc,IAAIpB,eAAaiB,IAAII,2BAA0B;GAC7DC,SAAS;GACTC,UAAU;GACd,CAAA;;CAKJ,MAAMC,IAAIC,SAAkBC,UAAoBC,MAAY;AAKxDtB,gCAA8BoB,SAASG,IAJNzB,2BAC7BsB,SACA,KAAKd,oBAE8BiB,CAAAA;EAEvC,MAAM,EAAEC,eAAeC,gBAAgBL,QAAQM;AAE/C,MAAI;AACA,OAAI,OAAOD,gBAAgB,UAAU;AACjCH,UAAAA;AACA;;GAGJ,MAAMK,SAASlC,yBAAyBgC,YAAAA;AAExC,OAAIE,OAAOC,SAASpC,wBAAwBqC,QAAQ;AAChD,UAAM,KAAKC,gCAAgCV,SAASO,OAAAA;AACpDL,UAAAA;AACA;;AACF,OAAIK,OAAOC,SAASpC,wBAAwBuC,OAAO;AACjD,UAAM,KAAKC,+BAA+BZ,SAASO,OAAAA;AACnDL,UAAAA;AACA;;AAGJA,QAAKlC,UAAU6C,sBAAsBN,OAAOC,KAAI,CAAA;WAC3CM,GAAG;AACRZ,QAAKY,EAAAA;;;;;;;;;;;IAab,MAAgBJ,gCACZV,SACAO,QACF;EACE,MAAMQ,UAAU,MAAM,KAAK9B,oBAAoB+B,OAAOT,OAAOU,MAAK;AAClE,MAAIF,QAAQG,SAAShD,gBAAgBiD,OACjC,OAAMlD,SAASmD,uBAAuB,OAAA;AAG1C,MAAI,CAACL,QAAQM,SACT,OAAMpD,SAASmD,uBAAuB,WAAA;AAG1CtC,kBAAgBkB,SAASO,OAAOU,MAAK;AAErC,MAAIF,QAAQO,MACRzC,kBAAiBmB,SAAS7B,uBAAuB4C,QAAQO,MAAK,CAAA;AAKlE,MAAI,CAACP,QAAQQ,WACT,OAAMtD,SAASmD,uBAAuB,aAAA;EAG1C,MAAMI,UAAU,MAAM,KAAKpC,eAAeqC,YAAYV,QAAQQ,WAAU;AACxE,MAAI,CAACC,QACD,OAAMvD,SAASyD,SAAO;AAG1B,MAAI;AACA,SAAM,KAAKtC,eAAe4B,OAAOQ,QAAAA;UAC7B;AACJ,SAAMvD,SAASyD,SAAO;;AAG1B,QAAM,KAAKtC,eAAeuC,KAAKH,QAAAA;AAI/B,MAAI,CAACT,QAAQa,SACT,OAAM3D,SAASmD,uBAAuB,WAAA;AAG1C,MAAI,CAACL,QAAQc,IACT,OAAM5D,SAASmD,uBAAuB,MAAA;EAG1C,MAAMU,WAAW,MAAM,KAAK3C,iBAAiB4C,QACzChB,QAAQa,UACRb,QAAQc,IAAG;AAGf,MAAIC,SACAnD,oBAAmBqB,SAAS8B,SAAAA;;CAIpC,MAAgBlB,+BACZZ,SACAO,QACF;AACE,MAAI,KAAKvB,QAAQgD,iBAAiB;GAC9B,MAAMC,gBAAgB,MAAM,KAAK5C,oBAAoB6C,iBACjD3B,OAAO4B,UACP5B,OAAO6B,SAAQ;AAEnB,OAAIH,cAAcI,SAAS;AACvBxD,qBAAiBmB,SAAS,CAACjC,UAAUuE,OAAO,CAAA;AAC5C3D,uBAAmBqB,SAAS;KACxBQ,MAAM1C,aAAayE;KACnBC,MAAMP,cAAcO;KACxB,CAAA;;;AAIR,MAAI,KAAKxD,QAAQyD,eAAe;GAC5B,MAAMC,gBAAgB,MAAM,KAAKnD,kBAAkB2C,iBAC/C3B,OAAO4B,UACP5B,OAAO6B,SAAQ;AAGnB,OAAIM,cAAcL,SAAS;AACvBxD,qBAAiBmB,SAAS,CAACjC,UAAUuE,OAAO,CAAA;AAC5C3D,uBAAmBqB,SAAS;KACxBQ,MAAM1C,aAAa6E;KACnBH,MAAME,cAAcF;KACxB,CAAA;AAEA;;;AAIR,MAAI,KAAKxD,QAAQ4D,gBAAgB;GAC7B,MAAMF,gBAAgB,MAAM,KAAKpD,mBAAmB4C,iBAChD3B,OAAO4B,UACP5B,OAAO6B,SAAQ;AAEnB,OAAIM,cAAcL,SAAS;AACvBxD,qBAAiBmB,SAAS,CAACjC,UAAUuE,OAAO,CAAA;AAC5C3D,uBAAmBqB,SAAS;KACxBQ,MAAM1C,aAAa+E;KACnBL,MAAME,cAAcF;KACxB,CAAA"}

package/dist/adapters/http/middleware/built-in/authorization/types.mjs

@@ -0,0 +1 @@
+export {};

package/dist/adapters/http/middleware/built-in/basic.mjs

@@ -0,0 +1,9 @@
+import { basic } from "@routup/basic";
+//#region src/adapters/http/middleware/built-in/basic.ts
+function registerBasicMiddleware(router, input) {
+	router.use(basic(input));
+}
+//#endregion
+export { registerBasicMiddleware };
+
+//# sourceMappingURL=basic.mjs.map

package/dist/adapters/http/middleware/built-in/basic.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"basic.mjs","names":["basic","registerBasicMiddleware","router","input","use"],"sources":["../../../../../src/adapters/http/middleware/built-in/basic.ts"],"sourcesContent":["/*\n * Copyright (c) 2023.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport type { Options } from '@routup/basic';\nimport { basic } from '@routup/basic';\nimport type { Router } from 'routup';\n\nexport function registerBasicMiddleware(router: Router, input?: Options) {\n    router.use(basic(input));\n}\n"],"mappings":";;AAWA,SAAgBC,wBAAwBC,QAAgBC,OAAe;AACnED,QAAOE,IAAIJ,MAAMG,MAAAA,CAAAA"}

package/dist/adapters/http/middleware/built-in/cors.mjs

@@ -0,0 +1,17 @@
+import { merge } from "smob";
+import { coreHandler } from "routup";
+import cors from "cors";
+//#region src/adapters/http/middleware/built-in/cors.ts
+function registerCorsMiddleware(router, input) {
+	const options = merge(input || {}, {
+		origin(_origin, callback) {
+			callback(null, true);
+		},
+		credentials: true
+	});
+	router.use(coreHandler((req, res, next) => cors(options)(req, res, next)));
+}
+//#endregion
+export { registerCorsMiddleware };
+
+//# sourceMappingURL=cors.mjs.map

package/dist/adapters/http/middleware/built-in/cors.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"cors.mjs","names":["cors","coreHandler","merge","registerCorsMiddleware","router","input","options","origin","_origin","callback","credentials","use","req","res","next"],"sources":["../../../../../src/adapters/http/middleware/built-in/cors.ts"],"sourcesContent":["/*\n * Copyright (c) 2023.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport type { CorsOptions } from 'cors';\nimport cors from 'cors';\nimport { coreHandler } from 'routup';\nimport type { Router } from 'routup';\nimport { merge } from 'smob';\n\nexport function registerCorsMiddleware(router: Router, input?: CorsOptions) {\n    const options : CorsOptions = merge(input || {}, {\n        origin(_origin, callback) {\n            callback(null, true);\n        },\n        credentials: true,\n    } satisfies CorsOptions);\n\n    router.use(coreHandler((req, res, next) => cors(options)(req, res, next)));\n}\n"],"mappings":";;;;AAaA,SAAgBG,uBAAuBC,QAAgBC,OAAmB;CACtE,MAAMC,UAAwBJ,MAAMG,SAAS,EAAC,EAAG;EAC7CE,OAAOC,SAASC,UAAQ;AACpBA,YAAS,MAAM,KAAA;;EAEnBC,aAAa;EACjB,CAAA;AAEAN,QAAOO,IAAIV,aAAaW,KAAKC,KAAKC,SAASd,KAAKM,QAAAA,CAASM,KAAKC,KAAKC,KAAAA,CAAAA,CAAAA"}

package/dist/adapters/http/middleware/built-in/error.mjs

@@ -0,0 +1,32 @@
+import { sanitizeError } from "../../../../utils/error.mjs";
+import "../../../../utils/index.mjs";
+import { useLogger } from "@authup/server-kit";
+import { isObject } from "@authup/kit";
+import { errorHandler, send } from "routup";
+//#region src/adapters/http/middleware/built-in/error.ts
+function registerErrorMiddleware(router) {
+	router.use(errorHandler((error, request, response) => {
+		let next;
+		if (error.cause) next = sanitizeError(error.cause);
+		else next = sanitizeError(error);
+		const payload = {
+			statusCode: next.statusCode,
+			code: `${next.code}`,
+			message: next.message,
+			issues: next.issues
+		};
+		if (next.statusCode >= 500 && next.statusCode < 600) {
+			useLogger().error(next);
+			payload.message = "An internal server error occurred.";
+		} else if (isObject(next.data)) {
+			const keys = Object.keys(next.data);
+			for (const key of keys) payload[key] = next.data[key];
+		}
+		response.statusCode = payload.statusCode;
+		return send(response, payload);
+	}));
+}
+//#endregion
+export { registerErrorMiddleware };
+
+//# sourceMappingURL=error.mjs.map

package/dist/adapters/http/middleware/built-in/error.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"error.mjs","names":["isObject","errorHandler","send","useLogger","sanitizeError","registerErrorMiddleware","router","use","error","request","response","next","cause","payload","statusCode","code","message","issues","isServerError","data","keys","Object","key"],"sources":["../../../../../src/adapters/http/middleware/built-in/error.ts"],"sourcesContent":["/*\n * Copyright (c) 2021-2023.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport { isObject } from '@authup/kit';\nimport type { Router } from 'routup';\nimport { errorHandler, send } from 'routup';\nimport { useLogger } from '@authup/server-kit';\nimport type { AuthupError } from '@authup/errors';\nimport type { Issue } from 'validup';\nimport { sanitizeError } from '../../../../utils/index.ts';\n\ntype ErrorResponsePayload = {\n    statusCode: number,\n    code: string,\n    message: string,\n    issues: Issue[],\n    [key: string]: any\n};\n\nexport function registerErrorMiddleware(router: Router) {\n    router.use(errorHandler((\n        error,\n        request,\n        response,\n    ) => {\n        let next : AuthupError;\n        if (error.cause) {\n            next = sanitizeError(error.cause);\n        } else {\n            next = sanitizeError(error);\n        }\n\n        const payload : ErrorResponsePayload = {\n            statusCode: next.statusCode,\n            code: `${next.code}`,\n            message: next.message,\n            issues: next.issues,\n        };\n\n        const isServerError = next.statusCode >= 500 && next.statusCode < 600;\n        if (isServerError) {\n            useLogger().error(next);\n\n            payload.message = 'An internal server error occurred.';\n        } else if (isObject(next.data)) {\n            const keys = Object.keys(next.data);\n            for (const key of keys) {\n                payload[key] = next.data[key];\n            }\n        }\n\n        response.statusCode = payload.statusCode;\n        return send(response, payload);\n    }));\n}\n"],"mappings":";;;;;;AAuBA,SAAgBK,wBAAwBC,QAAc;AAClDA,QAAOC,IAAIN,cACPO,OACAC,SACAC,aAAAA;EAEA,IAAIC;AACJ,MAAIH,MAAMI,MACND,QAAOP,cAAcI,MAAMI,MAAK;MAEhCD,QAAOP,cAAcI,MAAAA;EAGzB,MAAMK,UAAiC;GACnCC,YAAYH,KAAKG;GACjBC,MAAM,GAAGJ,KAAKI;GACdC,SAASL,KAAKK;GACdC,QAAQN,KAAKM;GACjB;AAGA,MADsBN,KAAKG,cAAc,OAAOH,KAAKG,aAAa,KAC/C;AACfX,cAAAA,CAAYK,MAAMG,KAAAA;AAElBE,WAAQG,UAAU;aACXhB,SAASW,KAAKQ,KAAI,EAAG;GAC5B,MAAMC,OAAOC,OAAOD,KAAKT,KAAKQ,KAAI;AAClC,QAAK,MAAMG,OAAOF,KACdP,SAAQS,OAAOX,KAAKQ,KAAKG;;AAIjCZ,WAASI,aAAaD,QAAQC;AAC9B,SAAOZ,KAAKQ,UAAUG,QAAAA;GAC1B,CAAA"}

package/dist/adapters/http/middleware/built-in/index.mjs

@@ -0,0 +1,15 @@
+import { AuthorizationMiddleware } from "./authorization/module.mjs";
+import { createAuthorizationMiddleware } from "./authorization/factory.mjs";
+import "./authorization/index.mjs";
+import { ForceLoggedInMiddleware } from "./loggedin/module.mjs";
+import { ForceUserLoggedInMiddleware } from "./loggedin/user.mjs";
+import "./loggedin/index.mjs";
+import { registerAssetsMiddleware } from "./assets.mjs";
+import { registerBasicMiddleware } from "./basic.mjs";
+import { registerCorsMiddleware } from "./cors.mjs";
+import { registerErrorMiddleware } from "./error.mjs";
+import { createLoggerMiddleware } from "./logger.mjs";
+import { registerPrometheusMiddleware } from "./prometheus.mjs";
+import { registerRateLimitMiddleware } from "./rate-limit.mjs";
+import { createSwaggerMiddleware } from "./swagger.mjs";
+export { AuthorizationMiddleware, ForceLoggedInMiddleware, ForceUserLoggedInMiddleware, createAuthorizationMiddleware, createLoggerMiddleware, createSwaggerMiddleware, registerAssetsMiddleware, registerBasicMiddleware, registerCorsMiddleware, registerErrorMiddleware, registerPrometheusMiddleware, registerRateLimitMiddleware };

package/dist/adapters/http/middleware/built-in/loggedin/index.mjs

@@ -0,0 +1,3 @@
+import { ForceLoggedInMiddleware } from "./module.mjs";
+import { ForceUserLoggedInMiddleware } from "./user.mjs";
+export { ForceLoggedInMiddleware, ForceUserLoggedInMiddleware };

package/dist/adapters/http/middleware/built-in/loggedin/module.mjs

@@ -0,0 +1,13 @@
+import { useRequestIdentityOrFail } from "../../../request/helpers/identity.mjs";
+import "../../../request/index.mjs";
+//#region src/adapters/http/middleware/built-in/loggedin/module.ts
+var ForceLoggedInMiddleware = class {
+	run(request, response, next) {
+		useRequestIdentityOrFail(request);
+		next();
+	}
+};
+//#endregion
+export { ForceLoggedInMiddleware };
+
+//# sourceMappingURL=module.mjs.map

package/dist/adapters/http/middleware/built-in/loggedin/module.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"module.mjs","names":["useRequestIdentityOrFail","ForceLoggedInMiddleware","run","request","response","next"],"sources":["../../../../../../src/adapters/http/middleware/built-in/loggedin/module.ts"],"sourcesContent":["/*\n * Copyright (c) 2022-2022.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport type { HandlerInterface } from '@routup/decorators';\nimport type { Next, Request, Response } from 'routup';\nimport { useRequestIdentityOrFail } from '../../../request/index.ts';\n\nexport class ForceLoggedInMiddleware implements HandlerInterface {\n    public run(request: Request, response: Response, next: Next) {\n        useRequestIdentityOrFail(request);\n        next();\n    }\n}\n"],"mappings":";;;AAWA,IAAaC,0BAAb,MAAaA;CACFC,IAAIC,SAAkBC,UAAoBC,MAAY;AACzDL,2BAAyBG,QAAAA;AACzBE,QAAAA"}

package/dist/adapters/http/middleware/built-in/loggedin/user.mjs

@@ -0,0 +1,15 @@
+import { useRequestIdentity } from "../../../request/helpers/identity.mjs";
+import "../../../request/index.mjs";
+import { UnauthorizedError } from "@ebec/http";
+//#region src/adapters/http/middleware/built-in/loggedin/user.ts
+var ForceUserLoggedInMiddleware = class {
+	run(request, response, next) {
+		const identity = useRequestIdentity(request);
+		if (!identity || identity.type !== "user") throw new UnauthorizedError();
+		next();
+	}
+};
+//#endregion
+export { ForceUserLoggedInMiddleware };
+
+//# sourceMappingURL=user.mjs.map

package/dist/adapters/http/middleware/built-in/loggedin/user.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"user.mjs","names":["UnauthorizedError","useRequestIdentity","ForceUserLoggedInMiddleware","run","request","response","next","identity","type"],"sources":["../../../../../../src/adapters/http/middleware/built-in/loggedin/user.ts"],"sourcesContent":["/*\n * Copyright (c) 2022-2022.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport { UnauthorizedError } from '@ebec/http';\nimport type { HandlerInterface } from '@routup/decorators';\nimport type { Next, Request, Response } from 'routup';\nimport { useRequestIdentity } from '../../../request/index.ts';\n\nexport class ForceUserLoggedInMiddleware implements HandlerInterface {\n    public run(request: Request, response: Response, next: Next) {\n        const identity = useRequestIdentity(request);\n\n        if (!identity || identity.type !== 'user') {\n            throw new UnauthorizedError();\n        }\n\n        next();\n    }\n}\n"],"mappings":";;;;AAYA,IAAaE,8BAAb,MAAaA;CACFC,IAAIC,SAAkBC,UAAoBC,MAAY;EACzD,MAAMC,WAAWN,mBAAmBG,QAAAA;AAEpC,MAAI,CAACG,YAAYA,SAASC,SAAS,OAC/B,OAAM,IAAIR,mBAAAA;AAGdM,QAAAA"}

package/dist/adapters/http/middleware/built-in/logger.mjs

@@ -0,0 +1,39 @@
+import { useRequestIdentity } from "../../request/helpers/identity.mjs";
+import "../../request/index.mjs";
+import { useLogger } from "@authup/server-kit";
+import { EnvironmentName } from "@authup/kit";
+import { coreHandler, getRequestIP, useRequestPath } from "routup";
+import morgan from "morgan";
+//#region src/adapters/http/middleware/built-in/logger.ts
+function createLoggerMiddleware(options) {
+	return coreHandler((request, response, next) => {
+		morgan((tokens, req, res) => {
+			const parts = [getRequestIP(req, { trustProxy: true })];
+			const identity = useRequestIdentity(req);
+			if (identity) parts.push(`${identity.type}#${identity.id}`);
+			return [
+				...parts,
+				"-",
+				tokens.method(req, res),
+				tokens.url(req, res),
+				tokens.status(req, res),
+				"-",
+				`${tokens["response-time"](req, res)}ms`
+			].join(" ");
+		}, {
+			stream: { write(message) {
+				if (options.env !== EnvironmentName.TEST) useLogger().http(message.replace("\n", ""));
+			} },
+			skip(req, res) {
+				const path = useRequestPath(req);
+				if (path.length === 0 || path === "/") return true;
+				if (options.env === EnvironmentName.PRODUCTION) return res.statusCode < 400;
+				return false;
+			}
+		})(request, response, next);
+	});
+}
+//#endregion
+export { createLoggerMiddleware };
+
+//# sourceMappingURL=logger.mjs.map

package/dist/adapters/http/middleware/built-in/logger.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"logger.mjs","names":["morgan","coreHandler","getRequestIP","useRequestPath","useLogger","EnvironmentName","useRequestIdentity","createLoggerMiddleware","options","request","response","next","tokens","req","res","parts","trustProxy","identity","push","type","id","method","url","status","join","stream","write","message","env","TEST","http","replace","skip","path","length","PRODUCTION","statusCode"],"sources":["../../../../../src/adapters/http/middleware/built-in/logger.ts"],"sourcesContent":["/*\n * Copyright (c) 2023.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport morgan from 'morgan';\nimport type {\n    Handler,\n    Next, \n    Request, \n    Response,\n} from 'routup';\nimport { coreHandler, getRequestIP, useRequestPath } from 'routup';\nimport { useLogger } from '@authup/server-kit';\nimport { EnvironmentName } from '@authup/kit';\nimport { useRequestIdentity } from '../../request/index.ts';\n\ntype LoggerMiddlewareOptions = {\n    env: string\n};\nexport function createLoggerMiddleware(options: LoggerMiddlewareOptions) : Handler {\n    return coreHandler((\n        request: Request,\n        response: Response,\n        next: Next,\n    ) => {\n        morgan(\n            (tokens, req: Request, res: Response) => {\n                const parts = [\n                    getRequestIP(req, { trustProxy: true }),\n                ];\n\n                const identity = useRequestIdentity(req);\n                if (identity) {\n                    parts.push(`${identity.type}#${identity.id}`);\n                }\n\n                return [\n                    ...parts,\n                    '-',\n                    tokens.method(req, res),\n                    tokens.url(req, res),\n                    tokens.status(req, res),\n                    '-',\n                    `${tokens['response-time'](req, res)}ms`,\n                ].join(' ');\n            },\n            {\n                stream: {\n                    write(message) {\n                        if (options.env !== EnvironmentName.TEST) {\n                            useLogger()\n                                .http(message.replace('\\n', ''));\n                        }\n                    },\n                },\n                skip(req: Request, res: Response): boolean {\n                    const path = useRequestPath(req);\n                    if (path.length === 0 || path === '/') {\n                        return true;\n                    }\n\n                    if (options.env === EnvironmentName.PRODUCTION) {\n                        return res.statusCode < 400;\n                    }\n\n                    return false;\n                },\n            },\n        )(request, response, next);\n    });\n}\n"],"mappings":";;;;;;;AAsBA,SAAgBO,uBAAuBC,SAAgC;AACnE,QAAOP,aACHQ,SACAC,UACAC,SAAAA;AAEAX,UACKY,QAAQC,KAAcC,QAAAA;GACnB,MAAMC,QAAQ,CACVb,aAAaW,KAAK,EAAEG,YAAY,MAAK,CAAA,CACxC;GAED,MAAMC,WAAWX,mBAAmBO,IAAAA;AACpC,OAAII,SACAF,OAAMG,KAAK,GAAGD,SAASE,KAAK,GAAGF,SAASG,KAAI;AAGhD,UAAO;OACAL;IACH;IACAH,OAAOS,OAAOR,KAAKC,IAAAA;IACnBF,OAAOU,IAAIT,KAAKC,IAAAA;IAChBF,OAAOW,OAAOV,KAAKC,IAAAA;IACnB;IACA,GAAGF,OAAO,iBAAiBC,KAAKC,IAAAA,CAAK;IACxC,CAACU,KAAK,IAAA;KAEX;GACIC,QAAQ,EACJC,MAAMC,SAAO;AACT,QAAInB,QAAQoB,QAAQvB,gBAAgBwB,KAChCzB,YAAAA,CACK0B,KAAKH,QAAQI,QAAQ,MAAM,GAAA,CAAA;MAG5C;GACAC,KAAKnB,KAAcC,KAAa;IAC5B,MAAMmB,OAAO9B,eAAeU,IAAAA;AAC5B,QAAIoB,KAAKC,WAAW,KAAKD,SAAS,IAC9B,QAAO;AAGX,QAAIzB,QAAQoB,QAAQvB,gBAAgB8B,WAChC,QAAOrB,IAAIsB,aAAa;AAG5B,WAAO;;GAEf,CAAA,CACF3B,SAASC,UAAUC,KAAAA;GACzB"}

package/dist/adapters/http/middleware/built-in/prometheus.mjs

@@ -0,0 +1,19 @@
+import { useRequestPath } from "routup";
+import { prometheus } from "@routup/prometheus";
+//#region src/adapters/http/middleware/built-in/prometheus.ts
+function registerPrometheusMiddleware(router, input) {
+	let options = { skip(req) {
+		let path = useRequestPath(req);
+		if (!path.startsWith("/")) path = `/${path}`;
+		return path.startsWith("/authorize") || path.startsWith("/token") || path.startsWith("/metrics") || path === "/";
+	} };
+	if (input) options = {
+		...options,
+		...input
+	};
+	router.use(prometheus(options));
+}
+//#endregion
+export { registerPrometheusMiddleware };
+
+//# sourceMappingURL=prometheus.mjs.map

package/dist/adapters/http/middleware/built-in/prometheus.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"prometheus.mjs","names":["prometheus","useRequestPath","registerPrometheusMiddleware","router","input","options","skip","req","path","startsWith","use"],"sources":["../../../../../src/adapters/http/middleware/built-in/prometheus.ts"],"sourcesContent":["/*\n * Copyright (c) 2023.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport type { OptionsInput } from '@routup/prometheus';\nimport { prometheus } from '@routup/prometheus';\nimport type { Router } from 'routup';\nimport { useRequestPath } from 'routup';\n\nexport function registerPrometheusMiddleware(router: Router, input?: OptionsInput) {\n    let options : OptionsInput = {\n        skip(req) {\n            let path = useRequestPath(req);\n            if (!path.startsWith('/')) {\n                path = `/${path}`;\n            }\n\n            return path.startsWith('/authorize') ||\n                path.startsWith('/token') ||\n                path.startsWith('/metrics') ||\n                path === '/';\n        },\n    };\n\n    if (input) {\n        options = {\n            ...options,\n            ...input,\n        };\n    }\n\n    router.use(prometheus(options));\n}\n"],"mappings":";;;AAYA,SAAgBE,6BAA6BC,QAAgBC,OAAoB;CAC7E,IAAIC,UAAyB,EACzBC,KAAKC,KAAG;EACJ,IAAIC,OAAOP,eAAeM,IAAAA;AAC1B,MAAI,CAACC,KAAKC,WAAW,IAAA,CACjBD,QAAO,IAAIA;AAGf,SAAOA,KAAKC,WAAW,aAAA,IACnBD,KAAKC,WAAW,SAAA,IAChBD,KAAKC,WAAW,WAAA,IAChBD,SAAS;IAErB;AAEA,KAAIJ,MACAC,WAAU;EACN,GAAGA;EACH,GAAGD;EACP;AAGJD,QAAOO,IAAIV,WAAWK,QAAAA,CAAAA"}

package/dist/adapters/http/middleware/built-in/rate-limit.mjs

@@ -0,0 +1,25 @@
+import { useRequestIdentity } from "../../request/helpers/identity.mjs";
+import "../../request/index.mjs";
+import { merge } from "smob";
+import { rateLimit } from "@routup/rate-limit";
+//#region src/adapters/http/middleware/built-in/rate-limit.ts
+function registerRateLimitMiddleware(router, input) {
+	let options = {
+		max(req) {
+			const identity = useRequestIdentity(req);
+			if (!identity) return 1200;
+			switch (identity.type) {
+				case "robot":
+				case "client": return 60 * 5e3;
+				default: return 6e3;
+			}
+		},
+		windowMs: 60 * 1e3
+	};
+	options = merge(input || {}, options);
+	router.use(rateLimit(options));
+}
+//#endregion
+export { registerRateLimitMiddleware };
+
+//# sourceMappingURL=rate-limit.mjs.map

package/dist/adapters/http/middleware/built-in/rate-limit.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"rate-limit.mjs","names":["rateLimit","merge","useRequestIdentity","registerRateLimitMiddleware","router","input","options","max","req","identity","type","windowMs","use"],"sources":["../../../../../src/adapters/http/middleware/built-in/rate-limit.ts"],"sourcesContent":["/*\n * Copyright (c) 2023.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport type { OptionsInput } from '@routup/rate-limit';\nimport { rateLimit } from '@routup/rate-limit';\nimport type { Request, Router } from 'routup';\nimport { merge } from 'smob';\nimport { useRequestIdentity } from '../../request/index.ts';\n\nexport function registerRateLimitMiddleware(router: Router, input?: OptionsInput) {\n    let options : OptionsInput = {\n        max(req: Request) {\n            const identity = useRequestIdentity(req);\n            if (!identity) {\n                return 60 * 20; // 20 req. p. sec\n            }\n\n            switch (identity.type) {\n                case 'robot':\n                case 'client': {\n                    return 60 * 5_000; // 1000 req p. sec\n                }\n                case 'user':\n                default: {\n                    return 60 * 100; // 100 req p. sec\n                }\n            }\n        },\n        windowMs: 60 * 1000, // 60 sec\n    };\n\n    options = merge(input || {}, options);\n\n    router.use(rateLimit(options));\n}\n"],"mappings":";;;;;AAaA,SAAgBG,4BAA4BC,QAAgBC,OAAoB;CAC5E,IAAIC,UAAyB;EACzBC,IAAIC,KAAY;GACZ,MAAMC,WAAWP,mBAAmBM,IAAAA;AACpC,OAAI,CAACC,SACD,QAAO;AAGX,WAAQA,SAASC,MAAjB;IACI,KAAK;IACL,KAAK,SACD,QAAO,KAAK;IAGhB,QACI,QAAO;;;EAInBC,UAAU,KAAK;EACnB;AAEAL,WAAUL,MAAMI,SAAS,EAAC,EAAGC,QAAAA;AAE7BF,QAAOQ,IAAIZ,UAAUM,QAAAA,CAAAA"}

package/dist/adapters/http/middleware/built-in/swagger.mjs

@@ -0,0 +1,22 @@
+import { AuthupError } from "@authup/errors";
+import path from "node:path";
+import process from "node:process";
+import { buildFilePath, load, locate } from "locter";
+import fs from "node:fs";
+import { swaggerUI } from "@routup/swagger";
+//#region src/adapters/http/middleware/built-in/swagger.ts
+async function createSwaggerMiddleware(input = {}) {
+	let documentPath;
+	if (input.documentPath) documentPath = path.isAbsolute(input.documentPath) ? input.documentPath : path.join(process.cwd(), input.documentPath);
+	else {
+		const locatorInfo = await locate("**/swagger.json");
+		if (!locatorInfo) throw new AuthupError("Swagger file not found.");
+		documentPath = buildFilePath(locatorInfo);
+	}
+	if (!fs.existsSync(documentPath)) throw new AuthupError(`Swagger file ( ${documentPath} ) does not exist.`);
+	return swaggerUI(await load(documentPath), input.options);
+}
+//#endregion
+export { createSwaggerMiddleware };
+
+//# sourceMappingURL=swagger.mjs.map

package/dist/adapters/http/middleware/built-in/swagger.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"swagger.mjs","names":["fs","path","process","swaggerUI","buildFilePath","load","locate","AuthupError","createSwaggerMiddleware","input","documentPath","isAbsolute","join","cwd","locatorInfo","existsSync","document","options"],"sources":["../../../../../src/adapters/http/middleware/built-in/swagger.ts"],"sourcesContent":["/*\n * Copyright (c) 2023.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport fs from 'node:fs';\nimport path from 'node:path';\nimport process from 'node:process';\nimport type { UIOptions } from '@routup/swagger';\nimport { swaggerUI } from '@routup/swagger';\nimport type { Plugin } from 'routup';\nimport { buildFilePath, load, locate } from 'locter';\nimport { AuthupError } from '@authup/errors';\n\ntype SwaggerMiddlewareOptions = {\n    documentPath: string,\n    options?: UIOptions\n};\nexport async function createSwaggerMiddleware(input: Partial<SwaggerMiddlewareOptions> = {}) : Promise<Plugin> {\n    let documentPath : string;\n    if (input.documentPath) {\n        documentPath = path.isAbsolute(input.documentPath) ?\n            input.documentPath :\n            path.join(process.cwd(), input.documentPath);\n    } else {\n        const locatorInfo = await locate('**/swagger.json');\n        if (!locatorInfo) {\n            throw new AuthupError('Swagger file not found.');\n        }\n\n        documentPath = buildFilePath(locatorInfo);\n    }\n\n    if (!fs.existsSync(documentPath)) {\n        throw new AuthupError(`Swagger file ( ${documentPath} ) does not exist.`);\n    }\n\n    const document = await load(documentPath);\n\n    return swaggerUI(document, input.options);\n}\n"],"mappings":";;;;;;;AAoBA,eAAsBQ,wBAAwBC,QAA2C,EAAE,EAAA;CACvF,IAAIC;AACJ,KAAID,MAAMC,aACNA,gBAAeT,KAAKU,WAAWF,MAAMC,aAAY,GAC7CD,MAAMC,eACNT,KAAKW,KAAKV,QAAQW,KAAG,EAAIJ,MAAMC,aAAY;MAC5C;EACH,MAAMI,cAAc,MAAMR,OAAO,kBAAA;AACjC,MAAI,CAACQ,YACD,OAAM,IAAIP,YAAY,0BAAA;AAG1BG,iBAAeN,cAAcU,YAAAA;;AAGjC,KAAI,CAACd,GAAGe,WAAWL,aAAAA,CACf,OAAM,IAAIH,YAAY,kBAAkBG,aAAa,oBAAmB;AAK5E,QAAOP,UAAUa,MAFMX,KAAKK,aAAAA,EAEDD,MAAMQ,QAAO"}

package/dist/adapters/http/middleware/index.mjs

@@ -0,0 +1,14 @@
+import { AuthorizationMiddleware } from "./built-in/authorization/module.mjs";
+import { createAuthorizationMiddleware } from "./built-in/authorization/factory.mjs";
+import { ForceLoggedInMiddleware } from "./built-in/loggedin/module.mjs";
+import { ForceUserLoggedInMiddleware } from "./built-in/loggedin/user.mjs";
+import { registerAssetsMiddleware } from "./built-in/assets.mjs";
+import { registerBasicMiddleware } from "./built-in/basic.mjs";
+import { registerCorsMiddleware } from "./built-in/cors.mjs";
+import { registerErrorMiddleware } from "./built-in/error.mjs";
+import { createLoggerMiddleware } from "./built-in/logger.mjs";
+import { registerPrometheusMiddleware } from "./built-in/prometheus.mjs";
+import { registerRateLimitMiddleware } from "./built-in/rate-limit.mjs";
+import { createSwaggerMiddleware } from "./built-in/swagger.mjs";
+import "./built-in/index.mjs";
+export { AuthorizationMiddleware, ForceLoggedInMiddleware, ForceUserLoggedInMiddleware, createAuthorizationMiddleware, createLoggerMiddleware, createSwaggerMiddleware, registerAssetsMiddleware, registerBasicMiddleware, registerCorsMiddleware, registerErrorMiddleware, registerPrometheusMiddleware, registerRateLimitMiddleware };

package/dist/adapters/http/request/constants.mjs

@@ -0,0 +1,13 @@
+//#region src/adapters/http/request/constants.ts
+var RequestHandlerOperation = /* @__PURE__ */ function(RequestHandlerOperation) {
+	RequestHandlerOperation["COMMAND"] = "command";
+	RequestHandlerOperation["CREATE"] = "create";
+	RequestHandlerOperation["READ"] = "read";
+	RequestHandlerOperation["UPDATE"] = "update";
+	RequestHandlerOperation["DELETE"] = "delete";
+	return RequestHandlerOperation;
+}({});
+//#endregion
+export { RequestHandlerOperation };
+
+//# sourceMappingURL=constants.mjs.map

package/dist/adapters/http/request/constants.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"constants.mjs","names":["RequestHandlerOperation"],"sources":["../../../../src/adapters/http/request/constants.ts"],"sourcesContent":["/*\n * Copyright (c) 2022.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nexport enum RequestHandlerOperation {\n    COMMAND = 'command',\n    CREATE = 'create',\n    READ = 'read',\n    UPDATE = 'update',\n    DELETE = 'delete',\n}\n"],"mappings":";AAOA,IAAO,0BAAKA,yBAAAA,yBAAAA;;;;;;QAAAA"}

package/dist/adapters/http/request/helpers/actor.mjs

@@ -0,0 +1,14 @@
+import { useRequestPermissionEvaluator } from "../permission/helper.mjs";
+import { useRequestIdentity } from "./identity.mjs";
+//#region src/adapters/http/request/helpers/actor.ts
+function buildActorContext(req) {
+	const identity = useRequestIdentity(req);
+	return {
+		permissionEvaluator: useRequestPermissionEvaluator(req),
+		identity: identity ? identity.raw : void 0
+	};
+}
+//#endregion
+export { buildActorContext };
+
+//# sourceMappingURL=actor.mjs.map

package/dist/adapters/http/request/helpers/actor.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"actor.mjs","names":["useRequestPermissionEvaluator","useRequestIdentity","buildActorContext","req","identity","permissionEvaluator","raw","undefined"],"sources":["../../../../../src/adapters/http/request/helpers/actor.ts"],"sourcesContent":["/*\n * Copyright (c) 2025.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport type { Request } from 'routup';\nimport type { ActorContext } from '../../../../core/index.ts';\nimport { useRequestPermissionEvaluator } from '../permission/helper.ts';\nimport { useRequestIdentity } from './identity.ts';\n\nexport function buildActorContext(req: Request): ActorContext {\n    const identity = useRequestIdentity(req);\n\n    return {\n        permissionEvaluator: useRequestPermissionEvaluator(req),\n        identity: identity ? identity.raw : undefined,\n    };\n}\n"],"mappings":";;;AAYA,SAAgBE,kBAAkBC,KAAY;CAC1C,MAAMC,WAAWH,mBAAmBE,IAAAA;AAEpC,QAAO;EACHE,qBAAqBL,8BAA8BG,IAAAA;EACnDC,UAAUA,WAAWA,SAASE,MAAMC,KAAAA;EACxC"}

package/dist/adapters/http/request/helpers/body-realm-id.mjs

@@ -0,0 +1,13 @@
+import { isUUID } from "@authup/kit";
+import { useRequestBody } from "@routup/basic/body";
+//#region src/adapters/http/request/helpers/body-realm-id.ts
+function getRequestBodyRealmID(req) {
+	const realmId = useRequestBody(req, "realm_id");
+	if (typeof realmId !== "string") return;
+	if (!isUUID(realmId)) return;
+	return realmId;
+}
+//#endregion
+export { getRequestBodyRealmID };
+
+//# sourceMappingURL=body-realm-id.mjs.map

package/dist/adapters/http/request/helpers/body-realm-id.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"body-realm-id.mjs","names":["isUUID","useRequestBody","getRequestBodyRealmID","req","realmId","undefined"],"sources":["../../../../../src/adapters/http/request/helpers/body-realm-id.ts"],"sourcesContent":["/*\n * Copyright (c) 2024.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport { isUUID } from '@authup/kit';\nimport { useRequestBody } from '@routup/basic/body';\nimport type { Request } from 'routup';\n\nexport function getRequestBodyRealmID(req: Request) : string | undefined {\n    const realmId = useRequestBody(req, 'realm_id');\n    if (typeof realmId !== 'string') {\n        return undefined;\n    }\n\n    if (!isUUID(realmId)) {\n        return undefined;\n    }\n\n    return realmId;\n}\n"],"mappings":";;;AAWA,SAAgBE,sBAAsBC,KAAY;CAC9C,MAAMC,UAAUH,eAAeE,KAAK,WAAA;AACpC,KAAI,OAAOC,YAAY,SACnB;AAGJ,KAAI,CAACJ,OAAOI,QAAAA,CACR;AAGJ,QAAOA"}

package/dist/adapters/http/request/helpers/identity.mjs

@@ -0,0 +1,52 @@
+import { IdentityType, REALM_MASTER_NAME } from "@authup/core-kit";
+import { UnauthorizedError } from "@ebec/http";
+import { setRequestEnv, useRequestEnv } from "routup";
+//#region src/adapters/http/request/helpers/identity.ts
+const sym = Symbol("RIdentity");
+var RequestIdentity = class {
+	raw;
+	constructor(identity) {
+		this.raw = identity;
+	}
+	get clientId() {
+		const { raw } = this;
+		if (raw.type === IdentityType.CLIENT) return raw.data.id;
+		return raw.data.client_id || null;
+	}
+	get data() {
+		return this.raw.data;
+	}
+	get type() {
+		return this.raw.type;
+	}
+	get id() {
+		return this.raw.data.id;
+	}
+	get realmId() {
+		return this.raw.data.realm_id || this.raw.data.realm?.id;
+	}
+	get realmName() {
+		return this.raw.data.realm?.name;
+	}
+};
+function useRequestIdentity(req) {
+	return useRequestEnv(req, sym);
+}
+function setRequestIdentity(req, input) {
+	let data;
+	if (input instanceof RequestIdentity) data = input;
+	else data = new RequestIdentity(input);
+	setRequestEnv(req, sym, data);
+}
+function useRequestIdentityOrFail(req) {
+	const identity = useRequestIdentity(req);
+	if (!identity) throw new UnauthorizedError();
+	return identity;
+}
+function isRequestIdentityMasterRealmMember(input) {
+	return input.realmName === REALM_MASTER_NAME;
+}
+//#endregion
+export { RequestIdentity, isRequestIdentityMasterRealmMember, setRequestIdentity, useRequestIdentity, useRequestIdentityOrFail };
+
+//# sourceMappingURL=identity.mjs.map

package/dist/adapters/http/request/helpers/identity.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"identity.mjs","names":["IdentityType","REALM_MASTER_NAME","UnauthorizedError","setRequestEnv","useRequestEnv","sym","Symbol","RequestIdentity","raw","identity","clientId","type","CLIENT","data","id","client_id","realmId","realm_id","realm","realmName","name","useRequestIdentity","req","setRequestIdentity","input","useRequestIdentityOrFail","isRequestIdentityMasterRealmMember"],"sources":["../../../../../src/adapters/http/request/helpers/identity.ts"],"sourcesContent":["/*\n * Copyright (c) 2024.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport type { Identity } from '@authup/core-kit';\nimport { IdentityType, REALM_MASTER_NAME } from '@authup/core-kit';\nimport { UnauthorizedError } from '@ebec/http';\nimport type { Request } from 'routup';\nimport { setRequestEnv, useRequestEnv } from 'routup';\n\nconst sym = Symbol('RIdentity');\n\nexport class RequestIdentity {\n    public readonly raw : Identity;\n\n    constructor(identity: Identity) {\n        this.raw = identity;\n    }\n\n    get clientId() {\n        const { raw } = this;\n        if (raw.type === IdentityType.CLIENT) {\n            return raw.data.id;\n        }\n\n        return raw.data.client_id || null;\n    }\n\n    get data() {\n        return this.raw.data;\n    }\n\n    get type() {\n        return this.raw.type;\n    }\n\n    get id() {\n        return this.raw.data.id;\n    }\n\n    get realmId() {\n        return this.raw.data.realm_id || this.raw.data.realm?.id;\n    }\n\n    get realmName() {\n        return this.raw.data.realm?.name;\n    }\n}\n\nexport function useRequestIdentity(req: Request) : RequestIdentity | undefined {\n    return useRequestEnv(req, sym) as RequestIdentity | undefined;\n}\n\nexport function setRequestIdentity(req: Request, input: Identity | RequestIdentity) : void {\n    let data : RequestIdentity;\n\n    if (input instanceof RequestIdentity) {\n        data = input;\n    } else {\n        data = new RequestIdentity(input);\n    }\n\n    setRequestEnv(req, sym, data);\n}\n\nexport function useRequestIdentityOrFail(req: Request) : RequestIdentity {\n    const identity = useRequestIdentity(req);\n    if (!identity) {\n        throw new UnauthorizedError();\n    }\n\n    return identity;\n}\n\nexport function isRequestIdentityMasterRealmMember(input: RequestIdentity) : boolean {\n    return input.realmName === REALM_MASTER_NAME;\n}\n"],"mappings":";;;;AAaA,MAAMK,MAAMC,OAAO,YAAA;AAEnB,IAAaC,kBAAb,MAAaA;CACOC;CAEhB,YAAYC,UAAoB;AAC5B,OAAKD,MAAMC;;CAGf,IAAIC,WAAW;EACX,MAAM,EAAEF,QAAQ;AAChB,MAAIA,IAAIG,SAASX,aAAaY,OAC1B,QAAOJ,IAAIK,KAAKC;AAGpB,SAAON,IAAIK,KAAKE,aAAa;;CAGjC,IAAIF,OAAO;AACP,SAAO,KAAKL,IAAIK;;CAGpB,IAAIF,OAAO;AACP,SAAO,KAAKH,IAAIG;;CAGpB,IAAIG,KAAK;AACL,SAAO,KAAKN,IAAIK,KAAKC;;CAGzB,IAAIE,UAAU;AACV,SAAO,KAAKR,IAAIK,KAAKI,YAAY,KAAKT,IAAIK,KAAKK,OAAOJ;;CAG1D,IAAIK,YAAY;AACZ,SAAO,KAAKX,IAAIK,KAAKK,OAAOE;;;AAIpC,SAAgBC,mBAAmBC,KAAY;AAC3C,QAAOlB,cAAckB,KAAKjB,IAAAA;;AAG9B,SAAgBkB,mBAAmBD,KAAcE,OAAiC;CAC9E,IAAIX;AAEJ,KAAIW,iBAAiBjB,gBACjBM,QAAOW;KAEPX,QAAO,IAAIN,gBAAgBiB,MAAAA;AAG/BrB,eAAcmB,KAAKjB,KAAKQ,KAAAA;;AAG5B,SAAgBY,yBAAyBH,KAAY;CACjD,MAAMb,WAAWY,mBAAmBC,IAAAA;AACpC,KAAI,CAACb,SACD,OAAM,IAAIP,mBAAAA;AAGd,QAAOO;;AAGX,SAAgBiB,mCAAmCF,OAAsB;AACrE,QAAOA,MAAML,cAAclB"}

package/dist/adapters/http/request/helpers/index.mjs

@@ -0,0 +1,7 @@
+import { RequestIdentity, isRequestIdentityMasterRealmMember, setRequestIdentity, useRequestIdentity, useRequestIdentityOrFail } from "./identity.mjs";
+import { buildActorContext } from "./actor.mjs";
+import { getRequestBodyRealmID } from "./body-realm-id.mjs";
+import { getRequestParamID, getRequestStringParam, getRequestStringParamOrFail, useRequestParamID } from "./param-id.mjs";
+import { setRequestScopes, useRequestScopes } from "./scopes.mjs";
+import { setRequestToken, useRequestToken } from "./token.mjs";
+export { RequestIdentity, buildActorContext, getRequestBodyRealmID, getRequestParamID, getRequestStringParam, getRequestStringParamOrFail, isRequestIdentityMasterRealmMember, setRequestIdentity, setRequestScopes, setRequestToken, useRequestIdentity, useRequestIdentityOrFail, useRequestParamID, useRequestScopes, useRequestToken };