@authup/server-core 1.0.0-beta.36 → 1.0.0-beta.38

package/dist/components/index.mjs

@@ -0,0 +1,6 @@
+import { DatabaseUniqueEntriesComponent } from "./database/unique-entries/module.mjs";
+import { createDatabaseUniqueEntriesComponent } from "./database/unique-entries/factory.mjs";
+import "./database/index.mjs";
+import { createOAuth2CleanerComponent } from "./oauth2-cleaner/module.mjs";
+import "./oauth2-cleaner/index.mjs";
+export { DatabaseUniqueEntriesComponent, createDatabaseUniqueEntriesComponent, createOAuth2CleanerComponent };

package/dist/components/oauth2-cleaner/index.mjs

@@ -0,0 +1,2 @@
+import { createOAuth2CleanerComponent } from "./module.mjs";
+export { createOAuth2CleanerComponent };

package/dist/components/oauth2-cleaner/module.mjs

@@ -0,0 +1,22 @@
+import { SessionEntity } from "../../adapters/database/domains/session/entity.mjs";
+import "../../adapters/database/domains/index.mjs";
+import { LessThan } from "typeorm";
+import cron from "node-cron";
+//#region src/components/oauth2-cleaner/module.ts
+function createOAuth2CleanerComponent(dataSource) {
+	return { async start() {
+		const sessionRepository = dataSource.getRepository(SessionEntity);
+		const execute = async () => {
+			const isoDate = (/* @__PURE__ */ new Date()).toISOString();
+			await sessionRepository.delete({ expires_at: LessThan(isoDate) });
+		};
+		await execute();
+		cron.schedule("* * * * *", async () => {
+			await execute();
+		});
+	} };
+}
+//#endregion
+export { createOAuth2CleanerComponent };
+
+//# sourceMappingURL=module.mjs.map

package/dist/components/oauth2-cleaner/module.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"module.mjs","names":["cron","LessThan","SessionEntity","createOAuth2CleanerComponent","dataSource","start","sessionRepository","getRepository","execute","isoDate","Date","toISOString","delete","expires_at","schedule"],"sources":["../../../src/components/oauth2-cleaner/module.ts"],"sourcesContent":["/*\n * Copyright (c) 2022-2022.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport cron from 'node-cron';\nimport type { DataSource } from 'typeorm';\nimport { LessThan } from 'typeorm';\nimport { SessionEntity } from '../../adapters/database/domains/index.ts';\nimport type { Component } from '../types.ts';\n\nexport function createOAuth2CleanerComponent(dataSource: DataSource) : Component {\n    return {\n        async start() {\n            const sessionRepository = dataSource.getRepository(SessionEntity);\n\n            const execute = async () => {\n                const isoDate = new Date().toISOString();\n\n                await sessionRepository\n                    .delete({ expires_at: LessThan(isoDate) });\n            };\n\n            await execute();\n\n            cron.schedule('* * * * *', async () => {\n                await execute();\n            });\n        },\n    };\n}\n"],"mappings":";;;;;AAaA,SAAgBG,6BAA6BC,YAAsB;AAC/D,QAAO,EACH,MAAMC,QAAAA;EACF,MAAMC,oBAAoBF,WAAWG,cAAcL,cAAAA;EAEnD,MAAMM,UAAU,YAAA;GACZ,MAAMC,2BAAU,IAAIC,MAAAA,EAAOC,aAAW;AAEtC,SAAML,kBACDM,OAAO,EAAEC,YAAYZ,SAASQ,QAAAA,EAAS,CAAA;;AAGhD,QAAMD,SAAAA;AAENR,OAAKc,SAAS,aAAa,YAAA;AACvB,SAAMN,SAAAA;IACV;IAER"}

package/dist/components/types.mjs

@@ -0,0 +1 @@
+export {};

package/dist/core/authentication/base.mjs

@@ -0,0 +1,20 @@
+//#region src/core/authentication/base.ts
+var BaseCredentialsAuthenticator = class {
+	async safeAuthenticate(key, value, realmId) {
+		try {
+			return {
+				success: true,
+				data: await this.authenticate(key, value, realmId)
+			};
+		} catch (e) {
+			return {
+				success: false,
+				error: e
+			};
+		}
+	}
+};
+//#endregion
+export { BaseCredentialsAuthenticator };
+
+//# sourceMappingURL=base.mjs.map

package/dist/core/authentication/base.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"base.mjs","names":["BaseCredentialsAuthenticator","safeAuthenticate","key","value","realmId","data","authenticate","success","e","error"],"sources":["../../../src/core/authentication/base.ts"],"sourcesContent":["/*\n * Copyright (c) 2025.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport type { Result } from '@authup/kit';\nimport type { ObjectLiteral } from 'validup';\nimport type { ICredentialsAuthenticator } from './types.ts';\n\nexport abstract class BaseCredentialsAuthenticator<\n    OUTPUT extends ObjectLiteral = ObjectLiteral,\n> implements ICredentialsAuthenticator<OUTPUT> {\n    async safeAuthenticate(key: string, value: string, realmId?: string): Promise<Result<OUTPUT>> {\n        try {\n            const data = await this.authenticate(key, value, realmId);\n            return {\n                success: true,\n                data, \n            };\n        } catch (e) {\n            return {\n                success: false,\n                error: e as Error, \n            };\n        }\n    }\n\n    abstract authenticate(key: string, value: string, realmId?: string): Promise<OUTPUT>;\n}\n"],"mappings":";AAWA,IAAsBA,+BAAtB,MAAsBA;CAGlB,MAAMC,iBAAiBC,KAAaC,OAAeC,SAA2C;AAC1F,MAAI;AAEA,UAAO;IACHG,SAAS;IACTF,MAAAA,MAHe,KAAKC,aAAaJ,KAAKC,OAAOC,QAAAA;IAIjD;WACKI,GAAG;AACR,UAAO;IACHD,SAAS;IACTE,OAAOD;IACX"}

package/dist/core/authentication/credential/entities/client/index.mjs

@@ -0,0 +1,2 @@
+import { ClientCredentialsService } from "./module.mjs";
+export { ClientCredentialsService };

package/dist/core/authentication/credential/entities/client/module.mjs

@@ -0,0 +1,21 @@
+import { compare, hash } from "@authup/server-kit";
+import { createNanoID, isBCryptHash } from "@authup/kit";
+//#region src/core/authentication/credential/entities/client/module.ts
+var ClientCredentialsService = class {
+	async verify(input, entity) {
+		if (!entity.secret || !entity.is_confidential) return false;
+		if (entity.secret_hashed) return compare(input, entity.secret);
+		return input === entity.secret;
+	}
+	async protect(input, entity) {
+		if (entity.secret_hashed) return isBCryptHash(input) ? input : hash(input);
+		return input;
+	}
+	generateSecret() {
+		return createNanoID(64);
+	}
+};
+//#endregion
+export { ClientCredentialsService };
+
+//# sourceMappingURL=module.mjs.map

package/dist/core/authentication/credential/entities/client/module.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"module.mjs","names":["createNanoID","isBCryptHash","compare","hash","ClientCredentialsService","verify","input","entity","secret","is_confidential","secret_hashed","protect","generateSecret"],"sources":["../../../../../../src/core/authentication/credential/entities/client/module.ts"],"sourcesContent":["/*\n * Copyright (c) 2025.\n *  Author Peter Placzek (tada5hi)\n *  For the full copyright and license information,\n *  view the LICENSE file that was distributed with this source code.\n */\n\nimport { createNanoID, isBCryptHash } from '@authup/kit';\nimport { compare, hash } from '@authup/server-kit';\nimport type { Client } from '@authup/core-kit';\nimport type { ICredentialService } from '../../types.ts';\n\nexport class ClientCredentialsService implements ICredentialService<Client> {\n    async verify(input: string, entity: Client): Promise<boolean> {\n        if (!entity.secret || !entity.is_confidential) {\n            return false;\n        }\n\n        if (entity.secret_hashed) {\n            return compare(input, entity.secret);\n        }\n\n        // todo: secret encrypted missing (decrypt)\n\n        return input === entity.secret;\n    }\n\n    async protect(input: string, entity: Pick<Client, 'secret_hashed'>): Promise<string> {\n        if (entity.secret_hashed) {\n            return isBCryptHash(input) ?\n                input :\n                hash(input);\n        }\n\n        // todo: secret encrypted missing (encrypt)\n\n        return input;\n    }\n\n    generateSecret() {\n        return createNanoID(64);\n    }\n}\n"],"mappings":";;;AAYA,IAAaI,2BAAb,MAAaA;CACT,MAAMC,OAAOC,OAAeC,QAAkC;AAC1D,MAAI,CAACA,OAAOC,UAAU,CAACD,OAAOE,gBAC1B,QAAO;AAGX,MAAIF,OAAOG,cACP,QAAOR,QAAQI,OAAOC,OAAOC,OAAM;AAKvC,SAAOF,UAAUC,OAAOC;;CAG5B,MAAMG,QAAQL,OAAeC,QAAwD;AACjF,MAAIA,OAAOG,cACP,QAAOT,aAAaK,MAAAA,GAChBA,QACAH,KAAKG,MAAAA;AAKb,SAAOA;;CAGXM,iBAAiB;AACb,SAAOZ,aAAa,GAAA"}

package/dist/core/authentication/credential/entities/index.mjs

@@ -0,0 +1,7 @@
+import { ClientCredentialsService } from "./client/module.mjs";
+import "./client/index.mjs";
+import { RobotCredentialsService } from "./robot/module.mjs";
+import "./robot/index.mjs";
+import { UserCredentialsService } from "./user/module.mjs";
+import "./user/index.mjs";
+export { ClientCredentialsService, RobotCredentialsService, UserCredentialsService };

package/dist/core/authentication/credential/entities/robot/index.mjs

@@ -0,0 +1,2 @@
+import { RobotCredentialsService } from "./module.mjs";
+export { RobotCredentialsService };

package/dist/core/authentication/credential/entities/robot/module.mjs

@@ -0,0 +1,19 @@
+import { compare, hash } from "@authup/server-kit";
+import { createNanoID } from "@authup/kit";
+//#region src/core/authentication/credential/entities/robot/module.ts
+var RobotCredentialsService = class {
+	async verify(input, entity) {
+		if (!entity.secret) return false;
+		return compare(input, entity.secret);
+	}
+	async protect(input) {
+		return hash(input);
+	}
+	generateSecret() {
+		return createNanoID(64);
+	}
+};
+//#endregion
+export { RobotCredentialsService };
+
+//# sourceMappingURL=module.mjs.map

package/dist/core/authentication/credential/entities/robot/module.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"module.mjs","names":["compare","hash","createNanoID","RobotCredentialsService","verify","input","entity","secret","protect","generateSecret"],"sources":["../../../../../../src/core/authentication/credential/entities/robot/module.ts"],"sourcesContent":["/*\n * Copyright (c) 2025.\n *  Author Peter Placzek (tada5hi)\n *  For the full copyright and license information,\n *  view the LICENSE file that was distributed with this source code.\n */\n\nimport { compare, hash } from '@authup/server-kit';\nimport { createNanoID } from '@authup/kit';\nimport type { Robot } from '@authup/core-kit';\nimport type { ICredentialService } from '../../types.ts';\n\nexport class RobotCredentialsService implements ICredentialService<Robot> {\n    async verify(input: string, entity: Robot): Promise<boolean> {\n        if (!entity.secret) {\n            return false;\n        }\n\n        return compare(input, entity.secret);\n    }\n\n    async protect(input: string): Promise<string> {\n        return hash(input);\n    }\n\n    generateSecret() {\n        return createNanoID(64);\n    }\n}\n"],"mappings":";;;AAYA,IAAaG,0BAAb,MAAaA;CACT,MAAMC,OAAOC,OAAeC,QAAiC;AACzD,MAAI,CAACA,OAAOC,OACR,QAAO;AAGX,SAAOP,QAAQK,OAAOC,OAAOC,OAAM;;CAGvC,MAAMC,QAAQH,OAAgC;AAC1C,SAAOJ,KAAKI,MAAAA;;CAGhBI,iBAAiB;AACb,SAAOP,aAAa,GAAA"}

package/dist/core/authentication/credential/entities/user/index.mjs

@@ -0,0 +1,2 @@
+import { UserCredentialsService } from "./module.mjs";
+export { UserCredentialsService };

package/dist/core/authentication/credential/entities/user/module.mjs

@@ -0,0 +1,15 @@
+import { compare, hash } from "@authup/server-kit";
+//#region src/core/authentication/credential/entities/user/module.ts
+var UserCredentialsService = class {
+	async verify(input, entity) {
+		if (!entity.password) return false;
+		return compare(input, entity.password);
+	}
+	async protect(input) {
+		return hash(input);
+	}
+};
+//#endregion
+export { UserCredentialsService };
+
+//# sourceMappingURL=module.mjs.map

package/dist/core/authentication/credential/entities/user/module.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"module.mjs","names":["compare","hash","UserCredentialsService","verify","input","entity","password","protect"],"sources":["../../../../../../src/core/authentication/credential/entities/user/module.ts"],"sourcesContent":["/*\n * Copyright (c) 2025.\n *  Author Peter Placzek (tada5hi)\n *  For the full copyright and license information,\n *  view the LICENSE file that was distributed with this source code.\n */\n\nimport { compare, hash } from '@authup/server-kit';\nimport type { User } from '@authup/core-kit';\nimport type { ICredentialService } from '../../types.ts';\n\nexport class UserCredentialsService implements ICredentialService<User> {\n    async verify(input: string, entity: User): Promise<boolean> {\n        if (!entity.password) {\n            return false;\n        }\n\n        return compare(input, entity.password);\n    }\n\n    async protect(input: string): Promise<string> {\n        return hash(input);\n    }\n}\n"],"mappings":";;AAWA,IAAaE,yBAAb,MAAaA;CACT,MAAMC,OAAOC,OAAeC,QAAgC;AACxD,MAAI,CAACA,OAAOC,SACR,QAAO;AAGX,SAAON,QAAQI,OAAOC,OAAOC,SAAQ;;CAGzC,MAAMC,QAAQH,OAAgC;AAC1C,SAAOH,KAAKG,MAAAA"}

package/dist/core/authentication/credential/index.mjs

@@ -0,0 +1,5 @@
+import { ClientCredentialsService } from "./entities/client/module.mjs";
+import { RobotCredentialsService } from "./entities/robot/module.mjs";
+import { UserCredentialsService } from "./entities/user/module.mjs";
+import "./entities/index.mjs";
+export { ClientCredentialsService, RobotCredentialsService, UserCredentialsService };

package/dist/core/authentication/credential/types.mjs

@@ -0,0 +1 @@
+export {};

package/dist/core/authentication/entities/client/index.mjs

@@ -0,0 +1,2 @@
+import { ClientAuthenticator } from "./module.mjs";
+export { ClientAuthenticator };

package/dist/core/authentication/entities/client/module.mjs

@@ -0,0 +1,27 @@
+import { ClientCredentialsService } from "../../credential/entities/client/module.mjs";
+import "../../credential/index.mjs";
+import { BaseCredentialsAuthenticator } from "../../base.mjs";
+import { ClientError, IdentityType } from "@authup/core-kit";
+//#region src/core/authentication/entities/client/module.ts
+var ClientAuthenticator = class extends BaseCredentialsAuthenticator {
+	identityResolver;
+	credentialsService;
+	constructor(identityResolver) {
+		super();
+		this.identityResolver = identityResolver;
+		this.credentialsService = new ClientCredentialsService();
+	}
+	async authenticate(key, secret, realmId) {
+		const identity = await this.identityResolver.resolve(IdentityType.CLIENT, key, realmId);
+		if (!identity || identity.type !== IdentityType.CLIENT) throw ClientError.credentialsInvalid();
+		if (!identity.data.active) throw ClientError.inactive();
+		if (identity.data.is_confidential) {
+			if (!await this.credentialsService.verify(secret, identity.data)) throw ClientError.credentialsInvalid();
+		} else throw ClientError.invalid();
+		return identity.data;
+	}
+};
+//#endregion
+export { ClientAuthenticator };
+
+//# sourceMappingURL=module.mjs.map

package/dist/core/authentication/entities/client/module.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"module.mjs","names":["ClientError","IdentityType","ClientCredentialsService","BaseCredentialsAuthenticator","ClientAuthenticator","identityResolver","credentialsService","authenticate","key","secret","realmId","identity","resolve","CLIENT","type","credentialsInvalid","data","active","inactive","is_confidential","verified","verify","invalid"],"sources":["../../../../../src/core/authentication/entities/client/module.ts"],"sourcesContent":["/*\n * Copyright (c) 2025.\n *  Author Peter Placzek (tada5hi)\n *  For the full copyright and license information,\n *  view the LICENSE file that was distributed with this source code.\n */\n\nimport type { Client } from '@authup/core-kit';\nimport { ClientError, IdentityType } from '@authup/core-kit';\nimport type { IIdentityResolver } from '../../../identity/index.ts';\nimport { ClientCredentialsService } from '../../credential/index.ts';\nimport { BaseCredentialsAuthenticator } from '../../base.ts';\n\nexport class ClientAuthenticator extends BaseCredentialsAuthenticator<Client> {\n    protected identityResolver : IIdentityResolver;\n\n    protected credentialsService : ClientCredentialsService;\n\n    constructor(identityResolver: IIdentityResolver) {\n        super();\n\n        this.identityResolver = identityResolver;\n        this.credentialsService = new ClientCredentialsService();\n    }\n\n    async authenticate(key: string, secret: string, realmId?: string): Promise<Client> {\n        const identity = await this.identityResolver.resolve(IdentityType.CLIENT, key, realmId);\n        if (!identity || identity.type !== IdentityType.CLIENT) {\n            throw ClientError.credentialsInvalid();\n        }\n\n        if (!identity.data.active) {\n            throw ClientError.inactive();\n        }\n\n        if (identity.data.is_confidential) {\n            const verified = await this.credentialsService.verify(secret, identity.data);\n            if (!verified) {\n                throw ClientError.credentialsInvalid();\n            }\n        } else {\n            throw ClientError.invalid();\n        }\n\n        return identity.data;\n    }\n}\n"],"mappings":";;;;;AAaA,IAAaI,sBAAb,cAAyCD,6BAAAA;CAC3BE;CAEAC;CAEV,YAAYD,kBAAqC;AAC7C,SAAK;AAEL,OAAKA,mBAAmBA;AACxB,OAAKC,qBAAqB,IAAIJ,0BAAAA;;CAGlC,MAAMK,aAAaC,KAAaC,QAAgBC,SAAmC;EAC/E,MAAMC,WAAW,MAAM,KAAKN,iBAAiBO,QAAQX,aAAaY,QAAQL,KAAKE,QAAAA;AAC/E,MAAI,CAACC,YAAYA,SAASG,SAASb,aAAaY,OAC5C,OAAMb,YAAYe,oBAAkB;AAGxC,MAAI,CAACJ,SAASK,KAAKC,OACf,OAAMjB,YAAYkB,UAAQ;AAG9B,MAAIP,SAASK,KAAKG;OAEV,CAACC,MADkB,KAAKd,mBAAmBe,OAAOZ,QAAQE,SAASK,KAAI,CAEvE,OAAMhB,YAAYe,oBAAkB;QAGxC,OAAMf,YAAYsB,SAAO;AAG7B,SAAOX,SAASK"}

package/dist/core/authentication/entities/index.mjs

@@ -0,0 +1,7 @@
+import { ClientAuthenticator } from "./client/module.mjs";
+import "./client/index.mjs";
+import { RobotAuthenticator } from "./robot/module.mjs";
+import "./robot/index.mjs";
+import { UserAuthenticator } from "./user/module.mjs";
+import "./user/index.mjs";
+export { ClientAuthenticator, RobotAuthenticator, UserAuthenticator };

package/dist/core/authentication/entities/robot/index.mjs

@@ -0,0 +1,2 @@
+import { RobotAuthenticator } from "./module.mjs";
+export { RobotAuthenticator };

package/dist/core/authentication/entities/robot/module.mjs

@@ -0,0 +1,25 @@
+import { RobotCredentialsService } from "../../credential/entities/robot/module.mjs";
+import "../../credential/index.mjs";
+import { BaseCredentialsAuthenticator } from "../../base.mjs";
+import { IdentityType, RobotError } from "@authup/core-kit";
+//#region src/core/authentication/entities/robot/module.ts
+var RobotAuthenticator = class extends BaseCredentialsAuthenticator {
+	identityResolver;
+	credentialsService;
+	constructor(identityResolver) {
+		super();
+		this.identityResolver = identityResolver;
+		this.credentialsService = new RobotCredentialsService();
+	}
+	async authenticate(key, secret, realmId) {
+		const identity = await this.identityResolver.resolve(IdentityType.ROBOT, key, realmId);
+		if (!identity || identity.type !== IdentityType.ROBOT) throw RobotError.credentialsInvalid();
+		if (!await this.credentialsService.verify(secret, identity.data)) throw RobotError.credentialsInvalid();
+		if (!identity.data.active) throw RobotError.inactive();
+		return identity.data;
+	}
+};
+//#endregion
+export { RobotAuthenticator };
+
+//# sourceMappingURL=module.mjs.map

package/dist/core/authentication/entities/robot/module.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"module.mjs","names":["IdentityType","RobotError","RobotCredentialsService","BaseCredentialsAuthenticator","RobotAuthenticator","identityResolver","credentialsService","authenticate","key","secret","realmId","identity","resolve","ROBOT","type","credentialsInvalid","verified","verify","data","active","inactive"],"sources":["../../../../../src/core/authentication/entities/robot/module.ts"],"sourcesContent":["/*\n * Copyright (c) 2025.\n *  Author Peter Placzek (tada5hi)\n *  For the full copyright and license information,\n *  view the LICENSE file that was distributed with this source code.\n */\n\nimport type { Robot } from '@authup/core-kit';\nimport { IdentityType, RobotError } from '@authup/core-kit';\nimport type { IIdentityResolver } from '../../../identity/index.ts';\nimport { RobotCredentialsService } from '../../credential/index.ts';\nimport { BaseCredentialsAuthenticator } from '../../base.ts';\n\nexport class RobotAuthenticator extends BaseCredentialsAuthenticator<Robot> {\n    protected identityResolver : IIdentityResolver;\n\n    protected credentialsService : RobotCredentialsService;\n\n    constructor(identityResolver: IIdentityResolver) {\n        super();\n\n        this.identityResolver = identityResolver;\n        this.credentialsService = new RobotCredentialsService();\n    }\n\n    async authenticate(key: string, secret: string, realmId?: string): Promise<Robot> {\n        const identity = await this.identityResolver.resolve(IdentityType.ROBOT, key, realmId);\n        if (!identity || identity.type !== IdentityType.ROBOT) {\n            throw RobotError.credentialsInvalid();\n        }\n\n        const verified = await this.credentialsService.verify(secret, identity.data);\n        if (!verified) {\n            throw RobotError.credentialsInvalid();\n        }\n\n        if (!identity.data.active) {\n            throw RobotError.inactive();\n        }\n\n        return identity.data;\n    }\n}\n"],"mappings":";;;;;AAaA,IAAaI,qBAAb,cAAwCD,6BAAAA;CAC1BE;CAEAC;CAEV,YAAYD,kBAAqC;AAC7C,SAAK;AAEL,OAAKA,mBAAmBA;AACxB,OAAKC,qBAAqB,IAAIJ,yBAAAA;;CAGlC,MAAMK,aAAaC,KAAaC,QAAgBC,SAAkC;EAC9E,MAAMC,WAAW,MAAM,KAAKN,iBAAiBO,QAAQZ,aAAaa,OAAOL,KAAKE,QAAAA;AAC9E,MAAI,CAACC,YAAYA,SAASG,SAASd,aAAaa,MAC5C,OAAMZ,WAAWc,oBAAkB;AAIvC,MAAI,CAACC,MADkB,KAAKV,mBAAmBW,OAAOR,QAAQE,SAASO,KAAI,CAEvE,OAAMjB,WAAWc,oBAAkB;AAGvC,MAAI,CAACJ,SAASO,KAAKC,OACf,OAAMlB,WAAWmB,UAAQ;AAG7B,SAAOT,SAASO"}

package/dist/core/authentication/entities/user/index.mjs

@@ -0,0 +1,2 @@
+import { UserAuthenticator } from "./module.mjs";
+export { UserAuthenticator };

package/dist/core/authentication/entities/user/module.mjs

@@ -0,0 +1,25 @@
+import { UserCredentialsService } from "../../credential/entities/user/module.mjs";
+import "../../credential/index.mjs";
+import { BaseCredentialsAuthenticator } from "../../base.mjs";
+import { IdentityType, UserError } from "@authup/core-kit";
+//#region src/core/authentication/entities/user/module.ts
+var UserAuthenticator = class extends BaseCredentialsAuthenticator {
+	identityResolver;
+	credentialsService;
+	constructor(identityResolver) {
+		super();
+		this.identityResolver = identityResolver;
+		this.credentialsService = new UserCredentialsService();
+	}
+	async authenticate(key, secret, realmId) {
+		const identity = await this.identityResolver.resolve(IdentityType.USER, key, realmId);
+		if (!identity || identity.type !== IdentityType.USER) throw UserError.credentialsInvalid();
+		if (!await this.credentialsService.verify(secret, identity.data)) throw UserError.credentialsInvalid();
+		if (!identity.data.active) throw UserError.inactive();
+		return identity.data;
+	}
+};
+//#endregion
+export { UserAuthenticator };
+
+//# sourceMappingURL=module.mjs.map

package/dist/core/authentication/entities/user/module.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"module.mjs","names":["IdentityType","UserError","UserCredentialsService","BaseCredentialsAuthenticator","UserAuthenticator","identityResolver","credentialsService","authenticate","key","secret","realmId","identity","resolve","USER","type","credentialsInvalid","verified","verify","data","active","inactive"],"sources":["../../../../../src/core/authentication/entities/user/module.ts"],"sourcesContent":["/*\n * Copyright (c) 2025.\n *  Author Peter Placzek (tada5hi)\n *  For the full copyright and license information,\n *  view the LICENSE file that was distributed with this source code.\n */\n\nimport type { User } from '@authup/core-kit';\nimport { IdentityType, UserError } from '@authup/core-kit';\nimport type { IIdentityResolver } from '../../../identity/index.ts';\nimport { UserCredentialsService } from '../../credential/index.ts';\nimport { BaseCredentialsAuthenticator } from '../../base.ts';\n\nexport class UserAuthenticator extends BaseCredentialsAuthenticator<User> {\n    protected identityResolver : IIdentityResolver;\n\n    protected credentialsService : UserCredentialsService;\n\n    constructor(identityResolver: IIdentityResolver) {\n        super();\n\n        this.identityResolver = identityResolver;\n        this.credentialsService = new UserCredentialsService();\n    }\n\n    async authenticate(key: string, secret: string, realmId?: string): Promise<User> {\n        const identity = await this.identityResolver.resolve(IdentityType.USER, key, realmId);\n        if (!identity || identity.type !== IdentityType.USER) {\n            throw UserError.credentialsInvalid();\n        }\n\n        const verified = await this.credentialsService.verify(secret, identity.data);\n        if (!verified) {\n            throw UserError.credentialsInvalid();\n        }\n\n        if (!identity.data.active) {\n            throw UserError.inactive();\n        }\n\n        return identity.data;\n    }\n}\n"],"mappings":";;;;;AAaA,IAAaI,oBAAb,cAAuCD,6BAAAA;CACzBE;CAEAC;CAEV,YAAYD,kBAAqC;AAC7C,SAAK;AAEL,OAAKA,mBAAmBA;AACxB,OAAKC,qBAAqB,IAAIJ,wBAAAA;;CAGlC,MAAMK,aAAaC,KAAaC,QAAgBC,SAAiC;EAC7E,MAAMC,WAAW,MAAM,KAAKN,iBAAiBO,QAAQZ,aAAaa,MAAML,KAAKE,QAAAA;AAC7E,MAAI,CAACC,YAAYA,SAASG,SAASd,aAAaa,KAC5C,OAAMZ,UAAUc,oBAAkB;AAItC,MAAI,CAACC,MADkB,KAAKV,mBAAmBW,OAAOR,QAAQE,SAASO,KAAI,CAEvE,OAAMjB,UAAUc,oBAAkB;AAGtC,MAAI,CAACJ,SAASO,KAAKC,OACf,OAAMlB,UAAUmB,UAAQ;AAG5B,SAAOT,SAASO"}

package/dist/core/authentication/index.mjs

@@ -0,0 +1,13 @@
+import { ClientCredentialsService } from "./credential/entities/client/module.mjs";
+import { RobotCredentialsService } from "./credential/entities/robot/module.mjs";
+import { UserCredentialsService } from "./credential/entities/user/module.mjs";
+import "./credential/index.mjs";
+import { BaseCredentialsAuthenticator } from "./base.mjs";
+import { ClientAuthenticator } from "./entities/client/module.mjs";
+import { RobotAuthenticator } from "./entities/robot/module.mjs";
+import { UserAuthenticator } from "./entities/user/module.mjs";
+import "./entities/index.mjs";
+import { CredentialsAuthenticator } from "./module.mjs";
+import { SessionManager } from "./session/module.mjs";
+import "./session/index.mjs";
+export { BaseCredentialsAuthenticator, ClientAuthenticator, ClientCredentialsService, CredentialsAuthenticator, RobotAuthenticator, RobotCredentialsService, SessionManager, UserAuthenticator, UserCredentialsService };

package/dist/core/authentication/module.mjs

@@ -0,0 +1,23 @@
+import { BaseCredentialsAuthenticator } from "./base.mjs";
+//#region src/core/authentication/module.ts
+var CredentialsAuthenticator = class extends BaseCredentialsAuthenticator {
+	strategies;
+	constructor(strategies) {
+		super();
+		this.strategies = strategies;
+	}
+	async authenticate(key, value, realmId) {
+		let error;
+		for (let i = 0; i < this.strategies.length; i++) {
+			const output = await this.strategies[i].safeAuthenticate(key, value, realmId);
+			if (output.success) return output.data;
+			error = output.error;
+		}
+		if (error) throw error;
+		throw new Error("No authentication strategy worked.");
+	}
+};
+//#endregion
+export { CredentialsAuthenticator };
+
+//# sourceMappingURL=module.mjs.map

package/dist/core/authentication/module.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"module.mjs","names":["BaseCredentialsAuthenticator","CredentialsAuthenticator","strategies","authenticate","key","value","realmId","error","i","length","strategy","output","safeAuthenticate","success","data","Error"],"sources":["../../../src/core/authentication/module.ts"],"sourcesContent":["/*\n * Copyright (c) 2025.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport type { ObjectLiteral } from '@authup/kit';\nimport { BaseCredentialsAuthenticator } from './base.ts';\n\nexport class CredentialsAuthenticator<T extends ObjectLiteral = ObjectLiteral> extends BaseCredentialsAuthenticator<T> {\n    protected strategies: BaseCredentialsAuthenticator<T>[];\n\n    constructor(strategies: BaseCredentialsAuthenticator<T>[]) {\n        super();\n\n        this.strategies = strategies;\n    }\n\n    async authenticate(key: string, value: string, realmId?: string): Promise<T> {\n        let error : Error | undefined;\n\n        for (let i = 0; i < this.strategies.length; i++) {\n            const strategy = this.strategies[i];\n\n            const output = await strategy.safeAuthenticate(key, value, realmId);\n            if (output.success) {\n                return output.data;\n            }\n\n            error = output.error;\n        }\n\n        if (error) {\n            throw error;\n        }\n\n        throw new Error('No authentication strategy worked.');\n    }\n}\n"],"mappings":";;AAUA,IAAaC,2BAAb,cAAuFD,6BAAAA;CACzEE;CAEV,YAAYA,YAA+C;AACvD,SAAK;AAEL,OAAKA,aAAaA;;CAGtB,MAAMC,aAAaC,KAAaC,OAAeC,SAA8B;EACzE,IAAIC;AAEJ,OAAK,IAAIC,IAAI,GAAGA,IAAI,KAAKN,WAAWO,QAAQD,KAAK;GAG7C,MAAMG,SAAS,MAFE,KAAKT,WAAWM,GAEHI,iBAAiBR,KAAKC,OAAOC,QAAAA;AAC3D,OAAIK,OAAOE,QACP,QAAOF,OAAOG;AAGlBP,WAAQI,OAAOJ;;AAGnB,MAAIA,MACA,OAAMA;AAGV,QAAM,IAAIQ,MAAM,qCAAA"}

package/dist/core/authentication/session/index.mjs

@@ -0,0 +1,2 @@
+import { SessionManager } from "./module.mjs";
+export { SessionManager };

package/dist/core/authentication/session/module.mjs

@@ -0,0 +1,65 @@
+import { IdentityType } from "@authup/core-kit";
+import { JWTError } from "@authup/specs";
+//#region src/core/authentication/session/module.ts
+var SessionManager = class {
+	options;
+	repository;
+	constructor(ctx) {
+		this.options = ctx.options;
+		this.repository = ctx.repository;
+	}
+	/**
+	* Create/Update session
+	*
+	* @param input
+	*/ async create(input) {
+		input.ip_address = input.ip_address || "127.0.0.1";
+		input.user_agent = input.user_agent || "system";
+		input.expires_at = input.expires_at || new Date(Date.now() + this.options.maxAge * 1e3).toISOString();
+		switch (input.sub_kind) {
+			case IdentityType.CLIENT:
+				input.client_id = input.sub;
+				break;
+			case IdentityType.ROBOT:
+				input.robot_id = input.sub;
+				break;
+			case IdentityType.USER:
+				input.user_id = input.sub;
+				break;
+		}
+		return this.repository.save(input);
+	}
+	async ping(session) {
+		if (session.seen_at) {
+			if (new Date(session.seen_at).getTime() + 5 * 1e3 > Date.now()) return session;
+		}
+		session.seen_at = (/* @__PURE__ */ new Date()).toISOString();
+		return this.repository.save(session);
+	}
+	async refresh(session) {
+		const now = (/* @__PURE__ */ new Date()).toISOString();
+		session.refreshed_at = now;
+		session.seen_at = now;
+		session.expires_at = new Date(Date.now() + this.options.maxAge * 1e3).toISOString();
+		return this.repository.save(session);
+	}
+	/**
+	* Verify session on token inspection/verification.
+	*
+	* @param id
+	* @throws JWTError
+	*/ async findOneById(id) {
+		return this.repository.findOneById(id);
+	}
+	async verify(session) {
+		const ms = new Date(session.expires_at).getTime();
+		if (Date.now() > ms) {
+			await this.repository.remove(session);
+			throw JWTError.expired();
+		}
+	}
+};
+//#endregion
+export { SessionManager };
+
+//# sourceMappingURL=module.mjs.map

package/dist/core/authentication/session/module.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"module.mjs","names":["IdentityType","JWTError","SessionManager","options","repository","ctx","create","input","ip_address","user_agent","expires_at","Date","now","maxAge","toISOString","sub_kind","CLIENT","client_id","sub","ROBOT","robot_id","USER","user_id","save","ping","session","seen_at","seenAt","getTime","threshold","refresh","refreshed_at","findOneById","id","verify","ms","remove","expired"],"sources":["../../../../src/core/authentication/session/module.ts"],"sourcesContent":["/*\n * Copyright (c) 2025.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport type { Session } from '@authup/core-kit';\nimport { IdentityType } from '@authup/core-kit';\nimport { JWTError } from '@authup/specs';\nimport type {\n    ISessionManager, \n    ISessionRepository, \n    SessionManagerContext, \n    SessionManagerOptions,\n} from './types.ts';\n\nexport class SessionManager implements ISessionManager {\n    protected options: SessionManagerOptions;\n\n    protected repository: ISessionRepository;\n\n    // -----------------------------------------------------\n\n    constructor(ctx: SessionManagerContext) {\n        this.options = ctx.options;\n        this.repository = ctx.repository;\n    }\n\n    // -----------------------------------------------------\n\n    /**\n     * Create/Update session\n     *\n     * @param input\n     */\n    async create(input: Partial<Session>): Promise<Session> {\n        input.ip_address = input.ip_address || '127.0.0.1';\n        input.user_agent = input.user_agent || 'system';\n        input.expires_at = input.expires_at || new Date(\n            Date.now() + (this.options.maxAge * 1_000),\n        ).toISOString();\n\n        switch (input.sub_kind) {\n            case IdentityType.CLIENT: {\n                input.client_id = input.sub;\n                break;\n            }\n            case IdentityType.ROBOT: {\n                input.robot_id = input.sub;\n                break;\n            }\n            case IdentityType.USER: {\n                input.user_id = input.sub;\n                break;\n            }\n        }\n\n        return this.repository.save(input);\n    }\n\n    // -----------------------------------------------------\n\n    async ping(session: Session): Promise<Session> {\n        if (session.seen_at) {\n            const seenAt = new Date(session.seen_at).getTime();\n            const threshold = seenAt + (5 * 1_000);\n\n            if (threshold > Date.now()) {\n                return session;\n            }\n        }\n\n        session.seen_at = new Date().toISOString();\n\n        return this.repository.save(session);\n    }\n\n    // -----------------------------------------------------\n\n    async refresh(session: Session): Promise<Session> {\n        const now = new Date().toISOString();\n        session.refreshed_at = now;\n        session.seen_at = now;\n\n        session.expires_at = new Date(\n            Date.now() + (this.options.maxAge * 1_000),\n        ).toISOString();\n\n        return this.repository.save(session);\n    }\n\n    // -----------------------------------------------------\n\n    /**\n     * Verify session on token inspection/verification.\n     *\n     * @param id\n     * @throws JWTError\n     */\n    async findOneById(id: string): Promise<Session | null> {\n        return this.repository.findOneById(id);\n    }\n\n    // -----------------------------------------------------\n\n    async verify(session: Session): Promise<void> {\n        const ms = new Date(session.expires_at).getTime();\n        if (Date.now() > ms) {\n            await this.repository.remove(session);\n\n            // todo: better error\n            throw JWTError.expired();\n        }\n    }\n}\n"],"mappings":";;;AAiBA,IAAaE,iBAAb,MAAaA;CACCC;CAEAC;CAIV,YAAYC,KAA4B;AACpC,OAAKF,UAAUE,IAAIF;AACnB,OAAKC,aAAaC,IAAID;;;;;;IAU1B,MAAME,OAAOC,OAA2C;AACpDA,QAAMC,aAAaD,MAAMC,cAAc;AACvCD,QAAME,aAAaF,MAAME,cAAc;AACvCF,QAAMG,aAAaH,MAAMG,cAAc,IAAIC,KACvCA,KAAKC,KAAG,GAAM,KAAKT,QAAQU,SAAS,IAAA,CACtCC,aAAW;AAEb,UAAQP,MAAMQ,UAAd;GACI,KAAKf,aAAagB;AACdT,UAAMU,YAAYV,MAAMW;AACxB;GAEJ,KAAKlB,aAAamB;AACdZ,UAAMa,WAAWb,MAAMW;AACvB;GAEJ,KAAKlB,aAAaqB;AACdd,UAAMe,UAAUf,MAAMW;AACtB;;AAIR,SAAO,KAAKd,WAAWmB,KAAKhB,MAAAA;;CAKhC,MAAMiB,KAAKC,SAAoC;AAC3C,MAAIA,QAAQC;OACO,IAAIf,KAAKc,QAAQC,QAAO,CAAEE,SACvBD,GAAU,IAAI,MAEhBhB,KAAKC,KAAG,CACpB,QAAOa;;AAIfA,UAAQC,2BAAU,IAAIf,MAAAA,EAAOG,aAAW;AAExC,SAAO,KAAKV,WAAWmB,KAAKE,QAAAA;;CAKhC,MAAMK,QAAQL,SAAoC;EAC9C,MAAMb,uBAAM,IAAID,MAAAA,EAAOG,aAAW;AAClCW,UAAQM,eAAenB;AACvBa,UAAQC,UAAUd;AAElBa,UAAQf,aAAa,IAAIC,KACrBA,KAAKC,KAAG,GAAM,KAAKT,QAAQU,SAAS,IAAA,CACtCC,aAAW;AAEb,SAAO,KAAKV,WAAWmB,KAAKE,QAAAA;;;;;;;IAWhC,MAAMO,YAAYC,IAAqC;AACnD,SAAO,KAAK7B,WAAW4B,YAAYC,GAAAA;;CAKvC,MAAMC,OAAOT,SAAiC;EAC1C,MAAMU,KAAK,IAAIxB,KAAKc,QAAQf,WAAU,CAAEkB,SAAO;AAC/C,MAAIjB,KAAKC,KAAG,GAAKuB,IAAI;AACjB,SAAM,KAAK/B,WAAWgC,OAAOX,QAAAA;AAG7B,SAAMxB,SAASoC,SAAO"}

package/dist/core/authentication/session/types.mjs

@@ -0,0 +1 @@
+export {};

package/dist/core/authentication/types.mjs

@@ -0,0 +1 @@
+export {};

package/dist/core/entities/actor/index.mjs

@@ -0,0 +1 @@
+export {};

package/dist/core/entities/actor/types.mjs

@@ -0,0 +1 @@
+export {};

package/dist/core/entities/client/index.mjs

@@ -0,0 +1,2 @@
+import { ClientService } from "./service.mjs";
+export { ClientService };

package/dist/core/entities/client/service.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"service.d.ts","sourceRoot":"","sources":["../../../../src/core/entities/client/service.ts"],"names":[],"mappings":"AAUA,OAAO,EACH,eAAe,EAGlB,MAAM,kBAAkB,CAAC;AAC1B,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAC;AAC/C,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AACtD,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AAC1D,OAAO,EAAE,qBAAqB,EAAE,MAAM,eAAe,CAAC;AACtD,OAAO,KAAK,EAAE,8BAA8B,EAAE,MAAM,aAAa,CAAC;AAElE,OAAO,KAAK,EAAE,iBAAiB,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AAEpE,MAAM,MAAM,oBAAoB,GAAG;IAC/B,UAAU,EAAE,iBAAiB,CAAC;IAC9B,eAAe,EAAE,gBAAgB,CAAC;CACrC,CAAC;AAEF,qBAAa,aAAc,SAAQ,qBAAsB,YAAW,cAAc;IAC9E,SAAS,CAAC,UAAU,EAAE,iBAAiB,CAAC;IAExC,SAAS,CAAC,eAAe,EAAE,gBAAgB,CAAC;IAE5C,SAAS,CAAC,SAAS,EAAE,eAAe,CAAC;gBAEzB,GAAG,EAAE,oBAAoB;IAO/B,OAAO,CACT,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,EAC1B,KAAK,EAAE,YAAY,GACpB,OAAO,CAAC,8BAA8B,CAAC,MAAM,CAAC,CAAC;IAmD5C,MAAM,CACR,QAAQ,EAAE,MAAM,EAChB,KAAK,EAAE,YAAY,EACnB,OAAO,CAAC,EAAE,MAAM,GACjB,OAAO,CAAC,MAAM,CAAC;IAiDZ,MAAM,CACR,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,EACzB,KAAK,EAAE,YAAY,GACpB,OAAO,CAAC,MAAM,CAAC;IAKZ,MAAM,CACR,QAAQ,EAAE,MAAM,EAChB,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,EACzB,KAAK,EAAE,YAAY,GACpB,OAAO,CAAC,MAAM,CAAC;IAKZ,IAAI,CACN,QAAQ,EAAE,MAAM,GAAG,SAAS,EAC5B,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,EACzB,KAAK,EAAE,YAAY,EACnB,OAAO,GAAE;QAAE,UAAU,CAAC,EAAE,OAAO,CAAA;KAAO,GACvC,OAAO,CAAC;QACP,MAAM,EAAE,MAAM,CAAC;QACf,OAAO,EAAE,OAAO,CAAA;KACnB,CAAC;IAiHI,MAAM,CACR,EAAE,EAAE,MAAM,EACV,KAAK,EAAE,YAAY,GACpB,OAAO,CAAC,MAAM,CAAC;CAmBrB"}
+{"version":3,"file":"service.d.ts","sourceRoot":"","sources":["../../../../src/core/entities/client/service.ts"],"names":[],"mappings":"AAUA,OAAO,EACH,eAAe,EAGlB,MAAM,kBAAkB,CAAC;AAC1B,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAC;AAC/C,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AACtD,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AAC1D,OAAO,EAAE,qBAAqB,EAAE,MAAM,eAAe,CAAC;AACtD,OAAO,KAAK,EAAE,8BAA8B,EAAE,MAAM,aAAa,CAAC;AAElE,OAAO,KAAK,EAAE,iBAAiB,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AAEpE,MAAM,MAAM,oBAAoB,GAAG;IAC/B,UAAU,EAAE,iBAAiB,CAAC;IAC9B,eAAe,EAAE,gBAAgB,CAAC;CACrC,CAAC;AAEF,qBAAa,aAAc,SAAQ,qBAAsB,YAAW,cAAc;IAC9E,SAAS,CAAC,UAAU,EAAE,iBAAiB,CAAC;IAExC,SAAS,CAAC,eAAe,EAAE,gBAAgB,CAAC;IAE5C,SAAS,CAAC,SAAS,EAAE,eAAe,CAAC;gBAEzB,GAAG,EAAE,oBAAoB;IAO/B,OAAO,CACT,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,EAC1B,KAAK,EAAE,YAAY,GACpB,OAAO,CAAC,8BAA8B,CAAC,MAAM,CAAC,CAAC;IAmD5C,MAAM,CACR,QAAQ,EAAE,MAAM,EAChB,KAAK,EAAE,YAAY,EACnB,OAAO,CAAC,EAAE,MAAM,GACjB,OAAO,CAAC,MAAM,CAAC;IAiDZ,MAAM,CACR,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,EACzB,KAAK,EAAE,YAAY,GACpB,OAAO,CAAC,MAAM,CAAC;IAKZ,MAAM,CACR,QAAQ,EAAE,MAAM,EAChB,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,EACzB,KAAK,EAAE,YAAY,GACpB,OAAO,CAAC,MAAM,CAAC;IAKZ,IAAI,CACN,QAAQ,EAAE,MAAM,GAAG,SAAS,EAC5B,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,EACzB,KAAK,EAAE,YAAY,EACnB,OAAO,GAAE;QAAE,UAAU,CAAC,EAAE,OAAO,CAAA;KAAO,GACvC,OAAO,CAAC;QACP,MAAM,EAAE,MAAM,CAAC;QACf,OAAO,EAAE,OAAO,CAAA;KACnB,CAAC;IAwII,MAAM,CACR,EAAE,EAAE,MAAM,EACV,KAAK,EAAE,YAAY,GACpB,OAAO,CAAC,MAAM,CAAC;CAmBrB"}