@authup/server-core 1.0.0-beta.37 → 1.0.0-beta.38

package/dist/app/modules/database/repositories/role/repository.d.ts

@@ -1,4 +1,5 @@
 import type { Realm, Role } from '@authup/core-kit';
+import type { PermissionPolicyBinding } from '@authup/access';
 import type { Repository } from 'typeorm';
 import type { EntityRepositoryFindManyResult, IRoleRepository } from '../../../../../core/index.ts';
 export type RoleRepositoryAdapterContext = {
@@ -21,5 +22,7 @@ export declare class RoleRepositoryAdapter implements IRoleRepository {
     remove(entity: Role): Promise<void>;
     validateJoinColumns(data: Partial<Role>): Promise<void>;
     checkUniqueness(data: Partial<Role>, existing?: Role): Promise<void>;
+    getBoundPermissions(entity: string | Role): Promise<PermissionPolicyBinding[]>;
+    getBoundPermissionsForMany(entities: (string | Role)[]): Promise<PermissionPolicyBinding[]>;
 }
 //# sourceMappingURL=repository.d.ts.map

package/dist/app/modules/database/repositories/role/repository.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"repository.d.ts","sourceRoot":"","sources":["../../../../../../src/app/modules/database/repositories/role/repository.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAC;AAEpD,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AAE1C,OAAO,KAAK,EAAE,8BAA8B,EAAoB,eAAe,EAAE,MAAM,8BAA8B,CAAC;AAMtH,MAAM,MAAM,4BAA4B,GAAG;IACvC,UAAU,EAAE,UAAU,CAAC,IAAI,CAAC,CAAC;IAC7B,eAAe,EAAE,UAAU,CAAC,KAAK,CAAC,CAAC;CACtC,CAAC;AAEF,qBAAa,qBAAsB,YAAW,eAAe;IACzD,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAmB;IAE9C,OAAO,CAAC,QAAQ,CAAC,eAAe,CAAmB;gBAEvC,GAAG,EAAE,4BAA4B;IAKvC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,GAAG,OAAO,CAAC,8BAA8B,CAAC,IAAI,CAAC,CAAC;IAkCzF,WAAW,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,GAAG,IAAI,CAAC;IAIvC,aAAa,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,GAAG,IAAI,CAAC;IAcpE,iBAAiB,CAAC,QAAQ,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,GAAG,IAAI,CAAC;IAMzE,UAAU,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC;IAIvD,SAAS,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,GAAG,OAAO,CAAC,IAAI,GAAG,IAAI,CAAC;IAIjE,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI;IAIjC,KAAK,CAAC,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI;IAIxC,IAAI,CAAC,MAAM,EAAE,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC;IAIjC,MAAM,CAAC,MAAM,EAAE,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC;IAInC,mBAAmB,CAAC,IAAI,EAAE,OAAO,CAAC,IAAI,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC;IAOvD,eAAe,CAAC,IAAI,EAAE,OAAO,CAAC,IAAI,CAAC,EAAE,QAAQ,CAAC,EAAE,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC;CAY7E"}
+{"version":3,"file":"repository.d.ts","sourceRoot":"","sources":["../../../../../../src/app/modules/database/repositories/role/repository.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAC;AACpD,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,gBAAgB,CAAC;AAE9D,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AAE1C,OAAO,KAAK,EAAE,8BAA8B,EAAoB,eAAe,EAAE,MAAM,8BAA8B,CAAC;AAWtH,MAAM,MAAM,4BAA4B,GAAG;IACvC,UAAU,EAAE,UAAU,CAAC,IAAI,CAAC,CAAC;IAC7B,eAAe,EAAE,UAAU,CAAC,KAAK,CAAC,CAAC;CACtC,CAAC;AAEF,qBAAa,qBAAsB,YAAW,eAAe;IACzD,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAmB;IAE9C,OAAO,CAAC,QAAQ,CAAC,eAAe,CAAmB;gBAEvC,GAAG,EAAE,4BAA4B;IAKvC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,GAAG,OAAO,CAAC,8BAA8B,CAAC,IAAI,CAAC,CAAC;IAkCzF,WAAW,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,GAAG,IAAI,CAAC;IAIvC,aAAa,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,GAAG,IAAI,CAAC;IAcpE,iBAAiB,CAAC,QAAQ,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,GAAG,IAAI,CAAC;IAMzE,UAAU,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC;IAIvD,SAAS,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,GAAG,OAAO,CAAC,IAAI,GAAG,IAAI,CAAC;IAIjE,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI;IAIjC,KAAK,CAAC,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI;IAIxC,IAAI,CAAC,MAAM,EAAE,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC;IAIjC,MAAM,CAAC,MAAM,EAAE,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC;IAInC,mBAAmB,CAAC,IAAI,EAAE,OAAO,CAAC,IAAI,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC;IAOvD,eAAe,CAAC,IAAI,EAAE,OAAO,CAAC,IAAI,CAAC,EAAE,QAAQ,CAAC,EAAE,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC;IAapE,mBAAmB,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,GAAG,OAAO,CAAC,uBAAuB,EAAE,CAAC;IAW9E,0BAA0B,CAAC,QAAQ,EAAE,CAAC,MAAM,GAAG,IAAI,CAAC,EAAE,GAAG,OAAO,CAAC,uBAAuB,EAAE,CAAC;CAIpG"}

package/dist/app/modules/database/repositories/role/repository.mjs

@@ -1,8 +1,11 @@
+import { CachePrefix } from "../../../../../adapters/database/domains/constants.mjs";
 import { RoleEntity } from "../../../../../adapters/database/domains/role/entity.mjs";
+import { RolePermissionEntity } from "../../../../../adapters/database/domains/role-permission/entity.mjs";
 import "../../../../../adapters/database/domains/index.mjs";
 import { DatabaseConflictError } from "../../../../../adapters/database/errors/conflict.mjs";
 import "../../../../../adapters/database/index.mjs";
 import { translateWhereConditions } from "../helpers.mjs";
+import { loadBoundPermissions } from "../bindings.mjs";
 import { RealmRepositoryAdapter } from "../realm/repository.mjs";
 import { isUUID } from "@authup/kit";
 import { applyQuery, isEntityUnique, validateEntityJoinColumns } from "typeorm-extension";
@@ -99,6 +102,19 @@ var RoleRepositoryAdapter = class {
 			entityExisting: existing
 		})) throw new DatabaseConflictError();
 	}
+	async getBoundPermissions(entity) {
+		const id = typeof entity === "string" ? entity : entity.id;
+		return loadBoundPermissions({
+			manager: this.repository.manager,
+			junctionTarget: RolePermissionEntity,
+			where: { role_id: id },
+			cachePrefix: CachePrefix.ROLE_OWNED_PERMISSIONS,
+			cacheKey: id
+		});
+	}
+	async getBoundPermissionsForMany(entities) {
+		return (await Promise.all(entities.map((entity) => this.getBoundPermissions(entity)))).flat();
+	}
 };
 //#endregion
 export { RoleRepositoryAdapter };

package/dist/app/modules/database/repositories/role/repository.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"repository.mjs","names":["isUUID","applyQuery","isEntityUnique","validateEntityJoinColumns","DatabaseConflictError","translateWhereConditions","RoleEntity","RealmRepositoryAdapter","RoleRepositoryAdapter","repository","realmRepository","ctx","findMany","query","qb","createQueryBuilder","groupBy","pagination","defaultAlias","fields","allowed","filters","maxLimit","sort","entities","total","getManyAndCount","data","meta","findOneById","id","findOneBy","findOneByName","name","realmKey","where","realm","resolve","andWhere","realmId","getOne","findOneByIdOrName","idOrName","findManyBy","findBy","create","merge","entity","save","remove","validateJoinColumns","dataSource","manager","connection","entityTarget","checkUniqueness","existing","isUnique","entityExisting"],"sources":["../../../../../../src/app/modules/database/repositories/role/repository.ts"],"sourcesContent":["/*\n * Copyright (c) 2025.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport type { Realm, Role } from '@authup/core-kit';\nimport { isUUID } from '@authup/kit';\nimport type { Repository } from 'typeorm';\nimport { applyQuery, isEntityUnique, validateEntityJoinColumns } from 'typeorm-extension';\nimport type { EntityRepositoryFindManyResult, IRealmRepository, IRoleRepository } from '../../../../../core/index.ts';\nimport { DatabaseConflictError } from '../../../../../adapters/database/index.ts';\nimport { translateWhereConditions } from '../helpers.ts';\nimport { RoleEntity } from '../../../../../adapters/database/domains/index.ts';\nimport { RealmRepositoryAdapter } from '../realm/repository.ts';\n\nexport type RoleRepositoryAdapterContext = {\n    repository: Repository<Role>,\n    realmRepository: Repository<Realm>,\n};\n\nexport class RoleRepositoryAdapter implements IRoleRepository {\n    private readonly repository: Repository<Role>;\n\n    private readonly realmRepository: IRealmRepository;\n\n    constructor(ctx: RoleRepositoryAdapterContext) {\n        this.repository = ctx.repository;\n        this.realmRepository = new RealmRepositoryAdapter(ctx.realmRepository);\n    }\n\n    async findMany(query: Record<string, any>): Promise<EntityRepositoryFindManyResult<Role>> {\n        const qb = this.repository.createQueryBuilder('role');\n        qb.groupBy('role.id');\n\n        const { pagination } = applyQuery(qb, query, {\n            defaultAlias: 'role',\n            fields: {\n                allowed: [\n                    'id',\n                    'name',\n                    'display_name',\n                    'target',\n                    'description',\n                    'realm_id',\n                    'created_at',\n                    'updated_at',\n                ],\n            },\n            filters: { allowed: ['id', 'name', 'target', 'realm_id'] },\n            pagination: { maxLimit: 50 },\n            sort: { allowed: ['id', 'name', 'updated_at', 'created_at'] },\n        });\n\n        const [entities, total] = await qb.getManyAndCount();\n\n        return {\n            data: entities,\n            meta: {\n                total,\n                ...pagination,\n            },\n        };\n    }\n\n    findOneById(id: string): Promise<Role | null> {\n        return this.findOneBy({ id });\n    }\n\n    async findOneByName(name: string, realmKey?: string): Promise<Role | null> {\n        const qb = this.repository.createQueryBuilder('role');\n        qb.where('role.name LIKE :name', { name });\n\n        if (realmKey) {\n            const realm = await this.realmRepository.resolve(realmKey);\n            if (realm) {\n                qb.andWhere('role.realm_id = :realmId', { realmId: realm.id });\n            }\n        }\n\n        return qb.getOne();\n    }\n\n    async findOneByIdOrName(idOrName: string, realm?: string): Promise<Role | null> {\n        return isUUID(idOrName) ?\n            this.findOneById(idOrName) :\n            this.findOneByName(idOrName, realm);\n    }\n\n    async findManyBy(where: Record<string, any>): Promise<Role[]> {\n        return this.repository.findBy(translateWhereConditions(where));\n    }\n\n    async findOneBy(where: Record<string, any>): Promise<Role | null> {\n        return this.repository.findOneBy(translateWhereConditions(where));\n    }\n\n    create(data: Partial<Role>): Role {\n        return this.repository.create(data);\n    }\n\n    merge(entity: Role, data: Partial<Role>): Role {\n        return this.repository.merge(entity, data);\n    }\n\n    async save(entity: Role): Promise<Role> {\n        return this.repository.save(entity);\n    }\n\n    async remove(entity: Role): Promise<void> {\n        await this.repository.remove(entity);\n    }\n\n    async validateJoinColumns(data: Partial<Role>): Promise<void> {\n        await validateEntityJoinColumns(data, {\n            dataSource: this.repository.manager.connection,\n            entityTarget: RoleEntity,\n        });\n    }\n\n    async checkUniqueness(data: Partial<Role>, existing?: Role): Promise<void> {\n        const isUnique = await isEntityUnique({\n            dataSource: this.repository.manager.connection,\n            entityTarget: RoleEntity,\n            entity: data,\n            entityExisting: existing,\n        });\n\n        if (!isUnique) {\n            throw new DatabaseConflictError();\n        }\n    }\n}\n"],"mappings":";;;;;;;;;AAsBA,IAAaQ,wBAAb,MAAaA;CACQC;CAEAC;CAEjB,YAAYC,KAAmC;AAC3C,OAAKF,aAAaE,IAAIF;AACtB,OAAKC,kBAAkB,IAAIH,uBAAuBI,IAAID,gBAAe;;CAGzE,MAAME,SAASC,OAA2E;EACtF,MAAMC,KAAK,KAAKL,WAAWM,mBAAmB,OAAA;AAC9CD,KAAGE,QAAQ,UAAA;EAEX,MAAM,EAAEC,eAAehB,WAAWa,IAAID,OAAO;GACzCK,cAAc;GACdC,QAAQ,EACJC,SAAS;IACL;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACH,EACL;GACAC,SAAS,EAAED,SAAS;IAAC;IAAM;IAAQ;IAAU;IAAW,EAAC;GACzDH,YAAY,EAAEK,UAAU,IAAG;GAC3BC,MAAM,EAAEH,SAAS;IAAC;IAAM;IAAQ;IAAc;IAAa,EAAC;GAChE,CAAA;EAEA,MAAM,CAACI,UAAUC,SAAS,MAAMX,GAAGY,iBAAe;AAElD,SAAO;GACHC,MAAMH;GACNI,MAAM;IACFH;IACA,GAAGR;IACP;GACJ;;CAGJY,YAAYC,IAAkC;AAC1C,SAAO,KAAKC,UAAU,EAAED,IAAG,CAAA;;CAG/B,MAAME,cAAcC,MAAcC,UAAyC;EACvE,MAAMpB,KAAK,KAAKL,WAAWM,mBAAmB,OAAA;AAC9CD,KAAGqB,MAAM,wBAAwB,EAAEF,MAAK,CAAA;AAExC,MAAIC,UAAU;GACV,MAAME,QAAQ,MAAM,KAAK1B,gBAAgB2B,QAAQH,SAAAA;AACjD,OAAIE,MACAtB,IAAGwB,SAAS,4BAA4B,EAAEC,SAASH,MAAMN,IAAG,CAAA;;AAIpE,SAAOhB,GAAG0B,QAAM;;CAGpB,MAAMC,kBAAkBC,UAAkBN,OAAsC;AAC5E,SAAOpC,OAAO0C,SAAAA,GACV,KAAKb,YAAYa,SAAAA,GACjB,KAAKV,cAAcU,UAAUN,MAAAA;;CAGrC,MAAMO,WAAWR,OAA6C;AAC1D,SAAO,KAAK1B,WAAWmC,OAAOvC,yBAAyB8B,MAAAA,CAAAA;;CAG3D,MAAMJ,UAAUI,OAAkD;AAC9D,SAAO,KAAK1B,WAAWsB,UAAU1B,yBAAyB8B,MAAAA,CAAAA;;CAG9DU,OAAOlB,MAA2B;AAC9B,SAAO,KAAKlB,WAAWoC,OAAOlB,KAAAA;;CAGlCmB,MAAMC,QAAcpB,MAA2B;AAC3C,SAAO,KAAKlB,WAAWqC,MAAMC,QAAQpB,KAAAA;;CAGzC,MAAMqB,KAAKD,QAA6B;AACpC,SAAO,KAAKtC,WAAWuC,KAAKD,OAAAA;;CAGhC,MAAME,OAAOF,QAA6B;AACtC,QAAM,KAAKtC,WAAWwC,OAAOF,OAAAA;;CAGjC,MAAMG,oBAAoBvB,MAAoC;AAC1D,QAAMxB,0BAA0BwB,MAAM;GAClCwB,YAAY,KAAK1C,WAAW2C,QAAQC;GACpCC,cAAchD;GAClB,CAAA;;CAGJ,MAAMiD,gBAAgB5B,MAAqB6B,UAAgC;AAQvE,MAAI,CAACC,MAPkBvD,eAAe;GAClCiD,YAAY,KAAK1C,WAAW2C,QAAQC;GACpCC,cAAchD;GACdyC,QAAQpB;GACR+B,gBAAgBF;GACpB,CAAA,CAGI,OAAM,IAAIpD,uBAAAA"}
+{"version":3,"file":"repository.mjs","names":["isUUID","applyQuery","isEntityUnique","validateEntityJoinColumns","DatabaseConflictError","translateWhereConditions","loadBoundPermissions","CachePrefix","RoleEntity","RolePermissionEntity","RealmRepositoryAdapter","RoleRepositoryAdapter","repository","realmRepository","ctx","findMany","query","qb","createQueryBuilder","groupBy","pagination","defaultAlias","fields","allowed","filters","maxLimit","sort","entities","total","getManyAndCount","data","meta","findOneById","id","findOneBy","findOneByName","name","realmKey","where","realm","resolve","andWhere","realmId","getOne","findOneByIdOrName","idOrName","findManyBy","findBy","create","merge","entity","save","remove","validateJoinColumns","dataSource","manager","connection","entityTarget","checkUniqueness","existing","isUnique","entityExisting","getBoundPermissions","junctionTarget","role_id","cachePrefix","ROLE_OWNED_PERMISSIONS","cacheKey","getBoundPermissionsForMany","results","Promise","all","map","flat"],"sources":["../../../../../../src/app/modules/database/repositories/role/repository.ts"],"sourcesContent":["/*\n * Copyright (c) 2025.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport type { Realm, Role } from '@authup/core-kit';\nimport type { PermissionPolicyBinding } from '@authup/access';\nimport { isUUID } from '@authup/kit';\nimport type { Repository } from 'typeorm';\nimport { applyQuery, isEntityUnique, validateEntityJoinColumns } from 'typeorm-extension';\nimport type { EntityRepositoryFindManyResult, IRealmRepository, IRoleRepository } from '../../../../../core/index.ts';\nimport { DatabaseConflictError } from '../../../../../adapters/database/index.ts';\nimport { translateWhereConditions } from '../helpers.ts';\nimport { loadBoundPermissions } from '../bindings.ts';\nimport {\n    CachePrefix,\n    RoleEntity,\n    RolePermissionEntity,\n} from '../../../../../adapters/database/domains/index.ts';\nimport { RealmRepositoryAdapter } from '../realm/repository.ts';\n\nexport type RoleRepositoryAdapterContext = {\n    repository: Repository<Role>,\n    realmRepository: Repository<Realm>,\n};\n\nexport class RoleRepositoryAdapter implements IRoleRepository {\n    private readonly repository: Repository<Role>;\n\n    private readonly realmRepository: IRealmRepository;\n\n    constructor(ctx: RoleRepositoryAdapterContext) {\n        this.repository = ctx.repository;\n        this.realmRepository = new RealmRepositoryAdapter(ctx.realmRepository);\n    }\n\n    async findMany(query: Record<string, any>): Promise<EntityRepositoryFindManyResult<Role>> {\n        const qb = this.repository.createQueryBuilder('role');\n        qb.groupBy('role.id');\n\n        const { pagination } = applyQuery(qb, query, {\n            defaultAlias: 'role',\n            fields: {\n                allowed: [\n                    'id',\n                    'name',\n                    'display_name',\n                    'target',\n                    'description',\n                    'realm_id',\n                    'created_at',\n                    'updated_at',\n                ],\n            },\n            filters: { allowed: ['id', 'name', 'target', 'realm_id'] },\n            pagination: { maxLimit: 50 },\n            sort: { allowed: ['id', 'name', 'updated_at', 'created_at'] },\n        });\n\n        const [entities, total] = await qb.getManyAndCount();\n\n        return {\n            data: entities,\n            meta: {\n                total,\n                ...pagination,\n            },\n        };\n    }\n\n    findOneById(id: string): Promise<Role | null> {\n        return this.findOneBy({ id });\n    }\n\n    async findOneByName(name: string, realmKey?: string): Promise<Role | null> {\n        const qb = this.repository.createQueryBuilder('role');\n        qb.where('role.name LIKE :name', { name });\n\n        if (realmKey) {\n            const realm = await this.realmRepository.resolve(realmKey);\n            if (realm) {\n                qb.andWhere('role.realm_id = :realmId', { realmId: realm.id });\n            }\n        }\n\n        return qb.getOne();\n    }\n\n    async findOneByIdOrName(idOrName: string, realm?: string): Promise<Role | null> {\n        return isUUID(idOrName) ?\n            this.findOneById(idOrName) :\n            this.findOneByName(idOrName, realm);\n    }\n\n    async findManyBy(where: Record<string, any>): Promise<Role[]> {\n        return this.repository.findBy(translateWhereConditions(where));\n    }\n\n    async findOneBy(where: Record<string, any>): Promise<Role | null> {\n        return this.repository.findOneBy(translateWhereConditions(where));\n    }\n\n    create(data: Partial<Role>): Role {\n        return this.repository.create(data);\n    }\n\n    merge(entity: Role, data: Partial<Role>): Role {\n        return this.repository.merge(entity, data);\n    }\n\n    async save(entity: Role): Promise<Role> {\n        return this.repository.save(entity);\n    }\n\n    async remove(entity: Role): Promise<void> {\n        await this.repository.remove(entity);\n    }\n\n    async validateJoinColumns(data: Partial<Role>): Promise<void> {\n        await validateEntityJoinColumns(data, {\n            dataSource: this.repository.manager.connection,\n            entityTarget: RoleEntity,\n        });\n    }\n\n    async checkUniqueness(data: Partial<Role>, existing?: Role): Promise<void> {\n        const isUnique = await isEntityUnique({\n            dataSource: this.repository.manager.connection,\n            entityTarget: RoleEntity,\n            entity: data,\n            entityExisting: existing,\n        });\n\n        if (!isUnique) {\n            throw new DatabaseConflictError();\n        }\n    }\n\n    async getBoundPermissions(entity: string | Role): Promise<PermissionPolicyBinding[]> {\n        const id = typeof entity === 'string' ? entity : entity.id;\n        return loadBoundPermissions({\n            manager: this.repository.manager,\n            junctionTarget: RolePermissionEntity,\n            where: { role_id: id },\n            cachePrefix: CachePrefix.ROLE_OWNED_PERMISSIONS,\n            cacheKey: id,\n        });\n    }\n\n    async getBoundPermissionsForMany(entities: (string | Role)[]): Promise<PermissionPolicyBinding[]> {\n        const results = await Promise.all(entities.map((entity) => this.getBoundPermissions(entity)));\n        return results.flat();\n    }\n}\n"],"mappings":";;;;;;;;;;;;AA4BA,IAAaW,wBAAb,MAAaA;CACQC;CAEAC;CAEjB,YAAYC,KAAmC;AAC3C,OAAKF,aAAaE,IAAIF;AACtB,OAAKC,kBAAkB,IAAIH,uBAAuBI,IAAID,gBAAe;;CAGzE,MAAME,SAASC,OAA2E;EACtF,MAAMC,KAAK,KAAKL,WAAWM,mBAAmB,OAAA;AAC9CD,KAAGE,QAAQ,UAAA;EAEX,MAAM,EAAEC,eAAenB,WAAWgB,IAAID,OAAO;GACzCK,cAAc;GACdC,QAAQ,EACJC,SAAS;IACL;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACH,EACL;GACAC,SAAS,EAAED,SAAS;IAAC;IAAM;IAAQ;IAAU;IAAW,EAAC;GACzDH,YAAY,EAAEK,UAAU,IAAG;GAC3BC,MAAM,EAAEH,SAAS;IAAC;IAAM;IAAQ;IAAc;IAAa,EAAC;GAChE,CAAA;EAEA,MAAM,CAACI,UAAUC,SAAS,MAAMX,GAAGY,iBAAe;AAElD,SAAO;GACHC,MAAMH;GACNI,MAAM;IACFH;IACA,GAAGR;IACP;GACJ;;CAGJY,YAAYC,IAAkC;AAC1C,SAAO,KAAKC,UAAU,EAAED,IAAG,CAAA;;CAG/B,MAAME,cAAcC,MAAcC,UAAyC;EACvE,MAAMpB,KAAK,KAAKL,WAAWM,mBAAmB,OAAA;AAC9CD,KAAGqB,MAAM,wBAAwB,EAAEF,MAAK,CAAA;AAExC,MAAIC,UAAU;GACV,MAAME,QAAQ,MAAM,KAAK1B,gBAAgB2B,QAAQH,SAAAA;AACjD,OAAIE,MACAtB,IAAGwB,SAAS,4BAA4B,EAAEC,SAASH,MAAMN,IAAG,CAAA;;AAIpE,SAAOhB,GAAG0B,QAAM;;CAGpB,MAAMC,kBAAkBC,UAAkBN,OAAsC;AAC5E,SAAOvC,OAAO6C,SAAAA,GACV,KAAKb,YAAYa,SAAAA,GACjB,KAAKV,cAAcU,UAAUN,MAAAA;;CAGrC,MAAMO,WAAWR,OAA6C;AAC1D,SAAO,KAAK1B,WAAWmC,OAAO1C,yBAAyBiC,MAAAA,CAAAA;;CAG3D,MAAMJ,UAAUI,OAAkD;AAC9D,SAAO,KAAK1B,WAAWsB,UAAU7B,yBAAyBiC,MAAAA,CAAAA;;CAG9DU,OAAOlB,MAA2B;AAC9B,SAAO,KAAKlB,WAAWoC,OAAOlB,KAAAA;;CAGlCmB,MAAMC,QAAcpB,MAA2B;AAC3C,SAAO,KAAKlB,WAAWqC,MAAMC,QAAQpB,KAAAA;;CAGzC,MAAMqB,KAAKD,QAA6B;AACpC,SAAO,KAAKtC,WAAWuC,KAAKD,OAAAA;;CAGhC,MAAME,OAAOF,QAA6B;AACtC,QAAM,KAAKtC,WAAWwC,OAAOF,OAAAA;;CAGjC,MAAMG,oBAAoBvB,MAAoC;AAC1D,QAAM3B,0BAA0B2B,MAAM;GAClCwB,YAAY,KAAK1C,WAAW2C,QAAQC;GACpCC,cAAcjD;GAClB,CAAA;;CAGJ,MAAMkD,gBAAgB5B,MAAqB6B,UAAgC;AAQvE,MAAI,CAACC,MAPkB1D,eAAe;GAClCoD,YAAY,KAAK1C,WAAW2C,QAAQC;GACpCC,cAAcjD;GACd0C,QAAQpB;GACR+B,gBAAgBF;GACpB,CAAA,CAGI,OAAM,IAAIvD,uBAAAA;;CAIlB,MAAM0D,oBAAoBZ,QAA2D;EACjF,MAAMjB,KAAK,OAAOiB,WAAW,WAAWA,SAASA,OAAOjB;AACxD,SAAO3B,qBAAqB;GACxBiD,SAAS,KAAK3C,WAAW2C;GACzBQ,gBAAgBtD;GAChB6B,OAAO,EAAE0B,SAAS/B,IAAG;GACrBgC,aAAa1D,YAAY2D;GACzBC,UAAUlC;GACd,CAAA;;CAGJ,MAAMmC,2BAA2BzC,UAAiE;AAE9F,UAAO0C,MADeC,QAAQC,IAAI5C,SAAS6C,KAAKtB,WAAW,KAAKY,oBAAoBZ,OAAAA,CAAAA,CAAAA,EACrEuB,MAAI"}

package/dist/app/modules/database/repositories/user/repository.d.ts

@@ -1,4 +1,5 @@
-import type { Realm, User } from '@authup/core-kit';
+import type { Realm, Role, User } from '@authup/core-kit';
+import type { PermissionPolicyBinding } from '@authup/access';
 import type { Repository } from 'typeorm';
 import type { EntityRepositoryFindManyResult, IUserRepository } from '../../../../../core/index.ts';
 import type { UserRepository } from '../../../../../adapters/database/domains/index.ts';
@@ -24,5 +25,7 @@ export declare class UserRepositoryAdapter implements IUserRepository {
     remove(entity: User): Promise<void>;
     validateJoinColumns(data: Partial<User>): Promise<void>;
     checkUniqueness(data: Partial<User>, existing?: User): Promise<void>;
+    getBoundRoles(entity: string | User): Promise<Role[]>;
+    getBoundPermissions(entity: string | User): Promise<PermissionPolicyBinding[]>;
 }
 //# sourceMappingURL=repository.d.ts.map

package/dist/app/modules/database/repositories/user/repository.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"repository.d.ts","sourceRoot":"","sources":["../../../../../../src/app/modules/database/repositories/user/repository.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAC;AAEpD,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AAE1C,OAAO,KAAK,EAAE,8BAA8B,EAAoB,eAAe,EAAE,MAAM,8BAA8B,CAAC;AAEtH,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,mDAAmD,CAAC;AAKxF,MAAM,MAAM,4BAA4B,GAAG;IACvC,UAAU,EAAE,cAAc,CAAC;IAC3B,eAAe,EAAE,UAAU,CAAC,KAAK,CAAC,CAAC;CACtC,CAAC;AAEF,qBAAa,qBAAsB,YAAW,eAAe;IACzD,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAiB;IAE5C,OAAO,CAAC,QAAQ,CAAC,eAAe,CAAmB;gBAEvC,GAAG,EAAE,4BAA4B;IAKvC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,GAAG,OAAO,CAAC,8BAA8B,CAAC,IAAI,CAAC,CAAC;IA+CnF,WAAW,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,GAAG,IAAI,CAAC;IAQ7C,aAAa,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,GAAG,IAAI,CAAC;IAkBpE,iBAAiB,CAAC,QAAQ,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,GAAG,IAAI,CAAC;IAMzE,OAAO,CAAC,EAAE,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,EAAE,QAAQ,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,GAAG,IAAI,CAAC;IA6CzF,UAAU,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC;IAIvD,SAAS,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,GAAG,OAAO,CAAC,IAAI,GAAG,IAAI,CAAC;IAI3D,kBAAkB,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,GAAG,OAAO,CAAC,IAAI,GAAG,IAAI,CAAC;IAU1E,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI;IAIjC,KAAK,CAAC,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI;IAIxC,IAAI,CAAC,MAAM,EAAE,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC;IAIjC,MAAM,CAAC,MAAM,EAAE,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC;IAInC,mBAAmB,CAAC,IAAI,EAAE,OAAO,CAAC,IAAI,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC;IAOvD,eAAe,CAAC,IAAI,EAAE,OAAO,CAAC,IAAI,CAAC,EAAE,QAAQ,CAAC,EAAE,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC;CAY7E"}
+{"version":3,"file":"repository.d.ts","sourceRoot":"","sources":["../../../../../../src/app/modules/database/repositories/user/repository.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAC;AAC1D,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,gBAAgB,CAAC;AAG9D,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AAE1C,OAAO,KAAK,EAAE,8BAA8B,EAAoB,eAAe,EAAE,MAAM,8BAA8B,CAAC;AAEtH,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,mDAAmD,CAAC;AAWxF,MAAM,MAAM,4BAA4B,GAAG;IACvC,UAAU,EAAE,cAAc,CAAC;IAC3B,eAAe,EAAE,UAAU,CAAC,KAAK,CAAC,CAAC;CACtC,CAAC;AAEF,qBAAa,qBAAsB,YAAW,eAAe;IACzD,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAiB;IAE5C,OAAO,CAAC,QAAQ,CAAC,eAAe,CAAmB;gBAEvC,GAAG,EAAE,4BAA4B;IAKvC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,GAAG,OAAO,CAAC,8BAA8B,CAAC,IAAI,CAAC,CAAC;IA+CnF,WAAW,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,GAAG,IAAI,CAAC;IAQ7C,aAAa,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,GAAG,IAAI,CAAC;IAkBpE,iBAAiB,CAAC,QAAQ,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,GAAG,IAAI,CAAC;IAMzE,OAAO,CAAC,EAAE,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,EAAE,QAAQ,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,GAAG,IAAI,CAAC;IA6CzF,UAAU,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC;IAIvD,SAAS,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,GAAG,OAAO,CAAC,IAAI,GAAG,IAAI,CAAC;IAI3D,kBAAkB,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,GAAG,OAAO,CAAC,IAAI,GAAG,IAAI,CAAC;IAU1E,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI;IAIjC,KAAK,CAAC,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI;IAIxC,IAAI,CAAC,MAAM,EAAE,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC;IAIjC,MAAM,CAAC,MAAM,EAAE,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC;IAInC,mBAAmB,CAAC,IAAI,EAAE,OAAO,CAAC,IAAI,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC;IAOvD,eAAe,CAAC,IAAI,EAAE,OAAO,CAAC,IAAI,CAAC,EAAE,QAAQ,CAAC,EAAE,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC;IAapE,aAAa,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC;IAmBrD,mBAAmB,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,GAAG,OAAO,CAAC,uBAAuB,EAAE,CAAC;CAUvF"}

package/dist/app/modules/database/repositories/user/repository.mjs

@@ -1,9 +1,14 @@
+import { CachePrefix } from "../../../../../adapters/database/domains/constants.mjs";
 import { UserEntity } from "../../../../../adapters/database/domains/user/entity.mjs";
+import { UserPermissionEntity } from "../../../../../adapters/database/domains/user-permission/entity.mjs";
+import { UserRoleEntity } from "../../../../../adapters/database/domains/user-role/entity.mjs";
 import "../../../../../adapters/database/domains/index.mjs";
 import { DatabaseConflictError } from "../../../../../adapters/database/errors/conflict.mjs";
 import "../../../../../adapters/database/index.mjs";
 import { translateWhereConditions } from "../helpers.mjs";
+import { loadBoundPermissions } from "../bindings.mjs";
 import { RealmRepositoryAdapter } from "../realm/repository.mjs";
+import { buildRedisKeyPath } from "@authup/server-kit";
 import { isUUID } from "@authup/kit";
 import { applyQuery, isEntityUnique, validateEntityJoinColumns } from "typeorm-extension";
 //#region src/app/modules/database/repositories/user/repository.ts
@@ -159,6 +164,30 @@ var UserRepositoryAdapter = class {
 			entityExisting: existing
 		})) throw new DatabaseConflictError();
 	}
+	async getBoundRoles(entity) {
+		const id = typeof entity === "string" ? entity : entity.id;
+		return (await this.repository.manager.getRepository(UserRoleEntity).find({
+			where: { user_id: id },
+			relations: { role: true },
+			cache: {
+				id: buildRedisKeyPath({
+					prefix: CachePrefix.USER_OWNED_ROLES,
+					key: id
+				}),
+				milliseconds: 6e4
+			}
+		})).map((entry) => entry.role);
+	}
+	async getBoundPermissions(entity) {
+		const id = typeof entity === "string" ? entity : entity.id;
+		return loadBoundPermissions({
+			manager: this.repository.manager,
+			junctionTarget: UserPermissionEntity,
+			where: { user_id: id },
+			cachePrefix: CachePrefix.USER_OWNED_PERMISSIONS,
+			cacheKey: id
+		});
+	}
 };
 //#endregion
 export { UserRepositoryAdapter };

package/dist/app/modules/database/repositories/user/repository.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"repository.mjs","names":["isUUID","applyQuery","isEntityUnique","validateEntityJoinColumns","DatabaseConflictError","UserEntity","translateWhereConditions","RealmRepositoryAdapter","UserRepositoryAdapter","repository","realmRepository","ctx","findMany","query","qb","createQueryBuilder","groupBy","pagination","defaultAlias","fields","default","allowed","filters","maxLimit","relations","onJoin","_property","key","q","addGroupBy","sort","entities","total","getManyAndCount","extendManyWithEA","data","meta","findOneById","id","entity","findOneBy","extendOneWithEA","findOneByName","name","realmKey","where","realm","resolve","andWhere","realmId","getOne","findOneByIdOrName","idOrName","findOne","findManyBy","findBy","findOneByWithEmail","addSelect","translated","create","merge","save","remove","validateJoinColumns","dataSource","manager","connection","entityTarget","checkUniqueness","existing","isUnique","entityExisting"],"sources":["../../../../../../src/app/modules/database/repositories/user/repository.ts"],"sourcesContent":["/*\n * Copyright (c) 2025.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport type { Realm, User } from '@authup/core-kit';\nimport { isUUID } from '@authup/kit';\nimport type { Repository } from 'typeorm';\nimport { applyQuery, isEntityUnique, validateEntityJoinColumns } from 'typeorm-extension';\nimport type { EntityRepositoryFindManyResult, IRealmRepository, IUserRepository } from '../../../../../core/index.ts';\nimport { DatabaseConflictError } from '../../../../../adapters/database/index.ts';\nimport type { UserRepository } from '../../../../../adapters/database/domains/index.ts';\nimport { UserEntity } from '../../../../../adapters/database/domains/index.ts';\nimport { translateWhereConditions } from '../helpers.ts';\nimport { RealmRepositoryAdapter } from '../realm/repository.ts';\n\nexport type UserRepositoryAdapterContext = {\n    repository: UserRepository,\n    realmRepository: Repository<Realm>,\n};\n\nexport class UserRepositoryAdapter implements IUserRepository {\n    private readonly repository: UserRepository;\n\n    private readonly realmRepository: IRealmRepository;\n\n    constructor(ctx: UserRepositoryAdapterContext) {\n        this.repository = ctx.repository;\n        this.realmRepository = new RealmRepositoryAdapter(ctx.realmRepository);\n    }\n\n    async findMany(query: Record<string, any>): Promise<EntityRepositoryFindManyResult<User>> {\n        const qb = this.repository.createQueryBuilder('user');\n        qb.groupBy('user.id');\n\n        const { pagination } = applyQuery(qb, query, {\n            defaultAlias: 'user',\n            fields: {\n                default: [\n                    'id',\n                    'name',\n                    'name_locked',\n                    'first_name',\n                    'last_name',\n                    'display_name',\n                    'avatar',\n                    'cover',\n                    'active',\n                    'created_at',\n                    'updated_at',\n                    'realm_id',\n                ],\n                allowed: ['email'],\n            },\n            filters: { allowed: ['id', 'name', 'realm_id'] },\n            pagination: { maxLimit: 50 },\n            relations: {\n                allowed: ['realm'],\n                onJoin: (_property: string, key: string, q: any) => {\n                    q.addGroupBy(`${key}.id`);\n                },\n            },\n            sort: { allowed: ['id', 'name', 'display_name', 'created_at', 'updated_at'] },\n        });\n\n        const [entities, total] = await qb.getManyAndCount();\n\n        await this.repository.extendManyWithEA(entities);\n\n        return {\n            data: entities,\n            meta: {\n                total,\n                ...pagination,\n            },\n        };\n    }\n\n    async findOneById(id: string): Promise<User | null> {\n        const entity = await this.findOneBy({ id });\n        if (entity) {\n            await this.repository.extendOneWithEA(entity);\n        }\n        return entity;\n    }\n\n    async findOneByName(name: string, realmKey?: string): Promise<User | null> {\n        const qb = this.repository.createQueryBuilder('user');\n        qb.where('user.name LIKE :name', { name });\n\n        if (realmKey) {\n            const realm = await this.realmRepository.resolve(realmKey);\n            if (realm) {\n                qb.andWhere('user.realm_id = :realmId', { realmId: realm.id });\n            }\n        }\n\n        const entity = await qb.getOne();\n        if (entity) {\n            await this.repository.extendOneWithEA(entity);\n        }\n        return entity;\n    }\n\n    async findOneByIdOrName(idOrName: string, realm?: string): Promise<User | null> {\n        return isUUID(idOrName) ?\n            this.findOneById(idOrName) :\n            this.findOneByName(idOrName, realm);\n    }\n\n    async findOne(id: string, query?: Record<string, any>, realmKey?: string): Promise<User | null> {\n        const qb = this.repository.createQueryBuilder('user');\n\n        if (isUUID(id)) {\n            qb.where('user.id = :id', { id });\n        } else {\n            qb.where('user.name LIKE :name', { name: id });\n\n            if (realmKey) {\n                const realm = await this.realmRepository.resolve(realmKey);\n                if (realm) {\n                    qb.andWhere('user.realm_id = :realmId', { realmId: realm.id });\n                }\n            }\n        }\n\n        applyQuery(qb, query || {}, {\n            defaultAlias: 'user',\n            fields: {\n                default: [\n                    'id',\n                    'name',\n                    'name_locked',\n                    'first_name',\n                    'last_name',\n                    'display_name',\n                    'avatar',\n                    'cover',\n                    'active',\n                    'created_at',\n                    'updated_at',\n                    'realm_id',\n                ],\n                allowed: ['email'],\n            },\n            relations: { allowed: ['realm'] },\n        });\n\n        const entity = await qb.getOne();\n        if (entity) {\n            await this.repository.extendOneWithEA(entity);\n        }\n        return entity;\n    }\n\n    async findManyBy(where: Record<string, any>): Promise<User[]> {\n        return this.repository.findBy(translateWhereConditions(where));\n    }\n\n    async findOneBy(where: Record<string, any>): Promise<User | null> {\n        return this.repository.findOneBy(translateWhereConditions(where));\n    }\n\n    async findOneByWithEmail(where: Record<string, any>): Promise<User | null> {\n        const qb = this.repository.createQueryBuilder('user');\n        qb.addSelect('user.email');\n\n        const translated = translateWhereConditions(where);\n        qb.where(translated);\n\n        return qb.getOne();\n    }\n\n    create(data: Partial<User>): User {\n        return this.repository.create(data);\n    }\n\n    merge(entity: User, data: Partial<User>): User {\n        return this.repository.merge(entity, data);\n    }\n\n    async save(entity: User): Promise<User> {\n        return this.repository.save(entity);\n    }\n\n    async remove(entity: User): Promise<void> {\n        await this.repository.remove(entity);\n    }\n\n    async validateJoinColumns(data: Partial<User>): Promise<void> {\n        await validateEntityJoinColumns(data, {\n            dataSource: this.repository.manager.connection,\n            entityTarget: UserEntity,\n        });\n    }\n\n    async checkUniqueness(data: Partial<User>, existing?: User): Promise<void> {\n        const isUnique = await isEntityUnique({\n            dataSource: this.repository.manager.connection,\n            entityTarget: UserEntity,\n            entity: data,\n            entityExisting: existing,\n        });\n\n        if (!isUnique) {\n            throw new DatabaseConflictError();\n        }\n    }\n}\n"],"mappings":";;;;;;;;;AAuBA,IAAaQ,wBAAb,MAAaA;CACQC;CAEAC;CAEjB,YAAYC,KAAmC;AAC3C,OAAKF,aAAaE,IAAIF;AACtB,OAAKC,kBAAkB,IAAIH,uBAAuBI,IAAID,gBAAe;;CAGzE,MAAME,SAASC,OAA2E;EACtF,MAAMC,KAAK,KAAKL,WAAWM,mBAAmB,OAAA;AAC9CD,KAAGE,QAAQ,UAAA;EAEX,MAAM,EAAEC,eAAehB,WAAWa,IAAID,OAAO;GACzCK,cAAc;GACdC,QAAQ;IACJC,SAAS;KACL;KACA;KACA;KACA;KACA;KACA;KACA;KACA;KACA;KACA;KACA;KACA;KACH;IACDC,SAAS,CAAC,QAAQ;IACtB;GACAC,SAAS,EAAED,SAAS;IAAC;IAAM;IAAQ;IAAW,EAAC;GAC/CJ,YAAY,EAAEM,UAAU,IAAG;GAC3BC,WAAW;IACPH,SAAS,CAAC,QAAQ;IAClBI,SAASC,WAAmBC,KAAaC,MAAAA;AACrCA,OAAEC,WAAW,GAAGF,IAAI,KAAI;;IAEhC;GACAG,MAAM,EAAET,SAAS;IAAC;IAAM;IAAQ;IAAgB;IAAc;IAAa,EAAC;GAChF,CAAA;EAEA,MAAM,CAACU,UAAUC,SAAS,MAAMlB,GAAGmB,iBAAe;AAElD,QAAM,KAAKxB,WAAWyB,iBAAiBH,SAAAA;AAEvC,SAAO;GACHI,MAAMJ;GACNK,MAAM;IACFJ;IACA,GAAGf;IACP;GACJ;;CAGJ,MAAMoB,YAAYC,IAAkC;EAChD,MAAMC,SAAS,MAAM,KAAKC,UAAU,EAAEF,IAAG,CAAA;AACzC,MAAIC,OACA,OAAM,KAAK9B,WAAWgC,gBAAgBF,OAAAA;AAE1C,SAAOA;;CAGX,MAAMG,cAAcC,MAAcC,UAAyC;EACvE,MAAM9B,KAAK,KAAKL,WAAWM,mBAAmB,OAAA;AAC9CD,KAAG+B,MAAM,wBAAwB,EAAEF,MAAK,CAAA;AAExC,MAAIC,UAAU;GACV,MAAME,QAAQ,MAAM,KAAKpC,gBAAgBqC,QAAQH,SAAAA;AACjD,OAAIE,MACAhC,IAAGkC,SAAS,4BAA4B,EAAEC,SAASH,MAAMR,IAAG,CAAA;;EAIpE,MAAMC,SAAS,MAAMzB,GAAGoC,QAAM;AAC9B,MAAIX,OACA,OAAM,KAAK9B,WAAWgC,gBAAgBF,OAAAA;AAE1C,SAAOA;;CAGX,MAAMY,kBAAkBC,UAAkBN,OAAsC;AAC5E,SAAO9C,OAAOoD,SAAAA,GACV,KAAKf,YAAYe,SAAAA,GACjB,KAAKV,cAAcU,UAAUN,MAAAA;;CAGrC,MAAMO,QAAQf,IAAYzB,OAA6B+B,UAAyC;EAC5F,MAAM9B,KAAK,KAAKL,WAAWM,mBAAmB,OAAA;AAE9C,MAAIf,OAAOsC,GAAAA,CACPxB,IAAG+B,MAAM,iBAAiB,EAAEP,IAAG,CAAA;OAC5B;AACHxB,MAAG+B,MAAM,wBAAwB,EAAEF,MAAML,IAAG,CAAA;AAE5C,OAAIM,UAAU;IACV,MAAME,QAAQ,MAAM,KAAKpC,gBAAgBqC,QAAQH,SAAAA;AACjD,QAAIE,MACAhC,IAAGkC,SAAS,4BAA4B,EAAEC,SAASH,MAAMR,IAAG,CAAA;;;AAKxErC,aAAWa,IAAID,SAAS,EAAC,EAAG;GACxBK,cAAc;GACdC,QAAQ;IACJC,SAAS;KACL;KACA;KACA;KACA;KACA;KACA;KACA;KACA;KACA;KACA;KACA;KACA;KACH;IACDC,SAAS,CAAC,QAAQ;IACtB;GACAG,WAAW,EAAEH,SAAS,CAAC,QAAQ,EAAC;GACpC,CAAA;EAEA,MAAMkB,SAAS,MAAMzB,GAAGoC,QAAM;AAC9B,MAAIX,OACA,OAAM,KAAK9B,WAAWgC,gBAAgBF,OAAAA;AAE1C,SAAOA;;CAGX,MAAMe,WAAWT,OAA6C;AAC1D,SAAO,KAAKpC,WAAW8C,OAAOjD,yBAAyBuC,MAAAA,CAAAA;;CAG3D,MAAML,UAAUK,OAAkD;AAC9D,SAAO,KAAKpC,WAAW+B,UAAUlC,yBAAyBuC,MAAAA,CAAAA;;CAG9D,MAAMW,mBAAmBX,OAAkD;EACvE,MAAM/B,KAAK,KAAKL,WAAWM,mBAAmB,OAAA;AAC9CD,KAAG2C,UAAU,aAAA;EAEb,MAAMC,aAAapD,yBAAyBuC,MAAAA;AAC5C/B,KAAG+B,MAAMa,WAAAA;AAET,SAAO5C,GAAGoC,QAAM;;CAGpBS,OAAOxB,MAA2B;AAC9B,SAAO,KAAK1B,WAAWkD,OAAOxB,KAAAA;;CAGlCyB,MAAMrB,QAAcJ,MAA2B;AAC3C,SAAO,KAAK1B,WAAWmD,MAAMrB,QAAQJ,KAAAA;;CAGzC,MAAM0B,KAAKtB,QAA6B;AACpC,SAAO,KAAK9B,WAAWoD,KAAKtB,OAAAA;;CAGhC,MAAMuB,OAAOvB,QAA6B;AACtC,QAAM,KAAK9B,WAAWqD,OAAOvB,OAAAA;;CAGjC,MAAMwB,oBAAoB5B,MAAoC;AAC1D,QAAMhC,0BAA0BgC,MAAM;GAClC6B,YAAY,KAAKvD,WAAWwD,QAAQC;GACpCC,cAAc9D;GAClB,CAAA;;CAGJ,MAAM+D,gBAAgBjC,MAAqBkC,UAAgC;AAQvE,MAAI,CAACC,MAPkBpE,eAAe;GAClC8D,YAAY,KAAKvD,WAAWwD,QAAQC;GACpCC,cAAc9D;GACdkC,QAAQJ;GACRoC,gBAAgBF;GACpB,CAAA,CAGI,OAAM,IAAIjE,uBAAAA"}
+{"version":3,"file":"repository.mjs","names":["buildRedisKeyPath","isUUID","applyQuery","isEntityUnique","validateEntityJoinColumns","DatabaseConflictError","CachePrefix","UserEntity","UserPermissionEntity","UserRoleEntity","translateWhereConditions","loadBoundPermissions","RealmRepositoryAdapter","UserRepositoryAdapter","repository","realmRepository","ctx","findMany","query","qb","createQueryBuilder","groupBy","pagination","defaultAlias","fields","default","allowed","filters","maxLimit","relations","onJoin","_property","key","q","addGroupBy","sort","entities","total","getManyAndCount","extendManyWithEA","data","meta","findOneById","id","entity","findOneBy","extendOneWithEA","findOneByName","name","realmKey","where","realm","resolve","andWhere","realmId","getOne","findOneByIdOrName","idOrName","findOne","findManyBy","findBy","findOneByWithEmail","addSelect","translated","create","merge","save","remove","validateJoinColumns","dataSource","manager","connection","entityTarget","checkUniqueness","existing","isUnique","entityExisting","getBoundRoles","entries","getRepository","find","user_id","role","cache","prefix","USER_OWNED_ROLES","milliseconds","map","entry","getBoundPermissions","junctionTarget","cachePrefix","USER_OWNED_PERMISSIONS","cacheKey"],"sources":["../../../../../../src/app/modules/database/repositories/user/repository.ts"],"sourcesContent":["/*\n * Copyright (c) 2025.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport type { Realm, Role, User } from '@authup/core-kit';\nimport type { PermissionPolicyBinding } from '@authup/access';\nimport { buildRedisKeyPath } from '@authup/server-kit';\nimport { isUUID } from '@authup/kit';\nimport type { Repository } from 'typeorm';\nimport { applyQuery, isEntityUnique, validateEntityJoinColumns } from 'typeorm-extension';\nimport type { EntityRepositoryFindManyResult, IRealmRepository, IUserRepository } from '../../../../../core/index.ts';\nimport { DatabaseConflictError } from '../../../../../adapters/database/index.ts';\nimport type { UserRepository } from '../../../../../adapters/database/domains/index.ts';\nimport {\n    CachePrefix,\n    UserEntity,\n    UserPermissionEntity,\n    UserRoleEntity,\n} from '../../../../../adapters/database/domains/index.ts';\nimport { translateWhereConditions } from '../helpers.ts';\nimport { loadBoundPermissions } from '../bindings.ts';\nimport { RealmRepositoryAdapter } from '../realm/repository.ts';\n\nexport type UserRepositoryAdapterContext = {\n    repository: UserRepository,\n    realmRepository: Repository<Realm>,\n};\n\nexport class UserRepositoryAdapter implements IUserRepository {\n    private readonly repository: UserRepository;\n\n    private readonly realmRepository: IRealmRepository;\n\n    constructor(ctx: UserRepositoryAdapterContext) {\n        this.repository = ctx.repository;\n        this.realmRepository = new RealmRepositoryAdapter(ctx.realmRepository);\n    }\n\n    async findMany(query: Record<string, any>): Promise<EntityRepositoryFindManyResult<User>> {\n        const qb = this.repository.createQueryBuilder('user');\n        qb.groupBy('user.id');\n\n        const { pagination } = applyQuery(qb, query, {\n            defaultAlias: 'user',\n            fields: {\n                default: [\n                    'id',\n                    'name',\n                    'name_locked',\n                    'first_name',\n                    'last_name',\n                    'display_name',\n                    'avatar',\n                    'cover',\n                    'active',\n                    'created_at',\n                    'updated_at',\n                    'realm_id',\n                ],\n                allowed: ['email'],\n            },\n            filters: { allowed: ['id', 'name', 'realm_id'] },\n            pagination: { maxLimit: 50 },\n            relations: {\n                allowed: ['realm'],\n                onJoin: (_property: string, key: string, q: any) => {\n                    q.addGroupBy(`${key}.id`);\n                },\n            },\n            sort: { allowed: ['id', 'name', 'display_name', 'created_at', 'updated_at'] },\n        });\n\n        const [entities, total] = await qb.getManyAndCount();\n\n        await this.repository.extendManyWithEA(entities);\n\n        return {\n            data: entities,\n            meta: {\n                total,\n                ...pagination,\n            },\n        };\n    }\n\n    async findOneById(id: string): Promise<User | null> {\n        const entity = await this.findOneBy({ id });\n        if (entity) {\n            await this.repository.extendOneWithEA(entity);\n        }\n        return entity;\n    }\n\n    async findOneByName(name: string, realmKey?: string): Promise<User | null> {\n        const qb = this.repository.createQueryBuilder('user');\n        qb.where('user.name LIKE :name', { name });\n\n        if (realmKey) {\n            const realm = await this.realmRepository.resolve(realmKey);\n            if (realm) {\n                qb.andWhere('user.realm_id = :realmId', { realmId: realm.id });\n            }\n        }\n\n        const entity = await qb.getOne();\n        if (entity) {\n            await this.repository.extendOneWithEA(entity);\n        }\n        return entity;\n    }\n\n    async findOneByIdOrName(idOrName: string, realm?: string): Promise<User | null> {\n        return isUUID(idOrName) ?\n            this.findOneById(idOrName) :\n            this.findOneByName(idOrName, realm);\n    }\n\n    async findOne(id: string, query?: Record<string, any>, realmKey?: string): Promise<User | null> {\n        const qb = this.repository.createQueryBuilder('user');\n\n        if (isUUID(id)) {\n            qb.where('user.id = :id', { id });\n        } else {\n            qb.where('user.name LIKE :name', { name: id });\n\n            if (realmKey) {\n                const realm = await this.realmRepository.resolve(realmKey);\n                if (realm) {\n                    qb.andWhere('user.realm_id = :realmId', { realmId: realm.id });\n                }\n            }\n        }\n\n        applyQuery(qb, query || {}, {\n            defaultAlias: 'user',\n            fields: {\n                default: [\n                    'id',\n                    'name',\n                    'name_locked',\n                    'first_name',\n                    'last_name',\n                    'display_name',\n                    'avatar',\n                    'cover',\n                    'active',\n                    'created_at',\n                    'updated_at',\n                    'realm_id',\n                ],\n                allowed: ['email'],\n            },\n            relations: { allowed: ['realm'] },\n        });\n\n        const entity = await qb.getOne();\n        if (entity) {\n            await this.repository.extendOneWithEA(entity);\n        }\n        return entity;\n    }\n\n    async findManyBy(where: Record<string, any>): Promise<User[]> {\n        return this.repository.findBy(translateWhereConditions(where));\n    }\n\n    async findOneBy(where: Record<string, any>): Promise<User | null> {\n        return this.repository.findOneBy(translateWhereConditions(where));\n    }\n\n    async findOneByWithEmail(where: Record<string, any>): Promise<User | null> {\n        const qb = this.repository.createQueryBuilder('user');\n        qb.addSelect('user.email');\n\n        const translated = translateWhereConditions(where);\n        qb.where(translated);\n\n        return qb.getOne();\n    }\n\n    create(data: Partial<User>): User {\n        return this.repository.create(data);\n    }\n\n    merge(entity: User, data: Partial<User>): User {\n        return this.repository.merge(entity, data);\n    }\n\n    async save(entity: User): Promise<User> {\n        return this.repository.save(entity);\n    }\n\n    async remove(entity: User): Promise<void> {\n        await this.repository.remove(entity);\n    }\n\n    async validateJoinColumns(data: Partial<User>): Promise<void> {\n        await validateEntityJoinColumns(data, {\n            dataSource: this.repository.manager.connection,\n            entityTarget: UserEntity,\n        });\n    }\n\n    async checkUniqueness(data: Partial<User>, existing?: User): Promise<void> {\n        const isUnique = await isEntityUnique({\n            dataSource: this.repository.manager.connection,\n            entityTarget: UserEntity,\n            entity: data,\n            entityExisting: existing,\n        });\n\n        if (!isUnique) {\n            throw new DatabaseConflictError();\n        }\n    }\n\n    async getBoundRoles(entity: string | User): Promise<Role[]> {\n        const id = typeof entity === 'string' ? entity : entity.id;\n        const entries = await this.repository.manager\n            .getRepository(UserRoleEntity)\n            .find({\n                where: { user_id: id },\n                relations: { role: true },\n                cache: {\n                    id: buildRedisKeyPath({\n                        prefix: CachePrefix.USER_OWNED_ROLES,\n                        key: id,\n                    }),\n                    milliseconds: 60_000,\n                },\n            });\n\n        return entries.map((entry) => entry.role);\n    }\n\n    async getBoundPermissions(entity: string | User): Promise<PermissionPolicyBinding[]> {\n        const id = typeof entity === 'string' ? entity : entity.id;\n        return loadBoundPermissions({\n            manager: this.repository.manager,\n            junctionTarget: UserPermissionEntity,\n            where: { user_id: id },\n            cachePrefix: CachePrefix.USER_OWNED_PERMISSIONS,\n            cacheKey: id,\n        });\n    }\n}\n"],"mappings":";;;;;;;;;;;;;;AA+BA,IAAaa,wBAAb,MAAaA;CACQC;CAEAC;CAEjB,YAAYC,KAAmC;AAC3C,OAAKF,aAAaE,IAAIF;AACtB,OAAKC,kBAAkB,IAAIH,uBAAuBI,IAAID,gBAAe;;CAGzE,MAAME,SAASC,OAA2E;EACtF,MAAMC,KAAK,KAAKL,WAAWM,mBAAmB,OAAA;AAC9CD,KAAGE,QAAQ,UAAA;EAEX,MAAM,EAAEC,eAAepB,WAAWiB,IAAID,OAAO;GACzCK,cAAc;GACdC,QAAQ;IACJC,SAAS;KACL;KACA;KACA;KACA;KACA;KACA;KACA;KACA;KACA;KACA;KACA;KACA;KACH;IACDC,SAAS,CAAC,QAAQ;IACtB;GACAC,SAAS,EAAED,SAAS;IAAC;IAAM;IAAQ;IAAW,EAAC;GAC/CJ,YAAY,EAAEM,UAAU,IAAG;GAC3BC,WAAW;IACPH,SAAS,CAAC,QAAQ;IAClBI,SAASC,WAAmBC,KAAaC,MAAAA;AACrCA,OAAEC,WAAW,GAAGF,IAAI,KAAI;;IAEhC;GACAG,MAAM,EAAET,SAAS;IAAC;IAAM;IAAQ;IAAgB;IAAc;IAAa,EAAC;GAChF,CAAA;EAEA,MAAM,CAACU,UAAUC,SAAS,MAAMlB,GAAGmB,iBAAe;AAElD,QAAM,KAAKxB,WAAWyB,iBAAiBH,SAAAA;AAEvC,SAAO;GACHI,MAAMJ;GACNK,MAAM;IACFJ;IACA,GAAGf;IACP;GACJ;;CAGJ,MAAMoB,YAAYC,IAAkC;EAChD,MAAMC,SAAS,MAAM,KAAKC,UAAU,EAAEF,IAAG,CAAA;AACzC,MAAIC,OACA,OAAM,KAAK9B,WAAWgC,gBAAgBF,OAAAA;AAE1C,SAAOA;;CAGX,MAAMG,cAAcC,MAAcC,UAAyC;EACvE,MAAM9B,KAAK,KAAKL,WAAWM,mBAAmB,OAAA;AAC9CD,KAAG+B,MAAM,wBAAwB,EAAEF,MAAK,CAAA;AAExC,MAAIC,UAAU;GACV,MAAME,QAAQ,MAAM,KAAKpC,gBAAgBqC,QAAQH,SAAAA;AACjD,OAAIE,MACAhC,IAAGkC,SAAS,4BAA4B,EAAEC,SAASH,MAAMR,IAAG,CAAA;;EAIpE,MAAMC,SAAS,MAAMzB,GAAGoC,QAAM;AAC9B,MAAIX,OACA,OAAM,KAAK9B,WAAWgC,gBAAgBF,OAAAA;AAE1C,SAAOA;;CAGX,MAAMY,kBAAkBC,UAAkBN,OAAsC;AAC5E,SAAOlD,OAAOwD,SAAAA,GACV,KAAKf,YAAYe,SAAAA,GACjB,KAAKV,cAAcU,UAAUN,MAAAA;;CAGrC,MAAMO,QAAQf,IAAYzB,OAA6B+B,UAAyC;EAC5F,MAAM9B,KAAK,KAAKL,WAAWM,mBAAmB,OAAA;AAE9C,MAAInB,OAAO0C,GAAAA,CACPxB,IAAG+B,MAAM,iBAAiB,EAAEP,IAAG,CAAA;OAC5B;AACHxB,MAAG+B,MAAM,wBAAwB,EAAEF,MAAML,IAAG,CAAA;AAE5C,OAAIM,UAAU;IACV,MAAME,QAAQ,MAAM,KAAKpC,gBAAgBqC,QAAQH,SAAAA;AACjD,QAAIE,MACAhC,IAAGkC,SAAS,4BAA4B,EAAEC,SAASH,MAAMR,IAAG,CAAA;;;AAKxEzC,aAAWiB,IAAID,SAAS,EAAC,EAAG;GACxBK,cAAc;GACdC,QAAQ;IACJC,SAAS;KACL;KACA;KACA;KACA;KACA;KACA;KACA;KACA;KACA;KACA;KACA;KACA;KACH;IACDC,SAAS,CAAC,QAAQ;IACtB;GACAG,WAAW,EAAEH,SAAS,CAAC,QAAQ,EAAC;GACpC,CAAA;EAEA,MAAMkB,SAAS,MAAMzB,GAAGoC,QAAM;AAC9B,MAAIX,OACA,OAAM,KAAK9B,WAAWgC,gBAAgBF,OAAAA;AAE1C,SAAOA;;CAGX,MAAMe,WAAWT,OAA6C;AAC1D,SAAO,KAAKpC,WAAW8C,OAAOlD,yBAAyBwC,MAAAA,CAAAA;;CAG3D,MAAML,UAAUK,OAAkD;AAC9D,SAAO,KAAKpC,WAAW+B,UAAUnC,yBAAyBwC,MAAAA,CAAAA;;CAG9D,MAAMW,mBAAmBX,OAAkD;EACvE,MAAM/B,KAAK,KAAKL,WAAWM,mBAAmB,OAAA;AAC9CD,KAAG2C,UAAU,aAAA;EAEb,MAAMC,aAAarD,yBAAyBwC,MAAAA;AAC5C/B,KAAG+B,MAAMa,WAAAA;AAET,SAAO5C,GAAGoC,QAAM;;CAGpBS,OAAOxB,MAA2B;AAC9B,SAAO,KAAK1B,WAAWkD,OAAOxB,KAAAA;;CAGlCyB,MAAMrB,QAAcJ,MAA2B;AAC3C,SAAO,KAAK1B,WAAWmD,MAAMrB,QAAQJ,KAAAA;;CAGzC,MAAM0B,KAAKtB,QAA6B;AACpC,SAAO,KAAK9B,WAAWoD,KAAKtB,OAAAA;;CAGhC,MAAMuB,OAAOvB,QAA6B;AACtC,QAAM,KAAK9B,WAAWqD,OAAOvB,OAAAA;;CAGjC,MAAMwB,oBAAoB5B,MAAoC;AAC1D,QAAMpC,0BAA0BoC,MAAM;GAClC6B,YAAY,KAAKvD,WAAWwD,QAAQC;GACpCC,cAAcjE;GAClB,CAAA;;CAGJ,MAAMkE,gBAAgBjC,MAAqBkC,UAAgC;AAQvE,MAAI,CAACC,MAPkBxE,eAAe;GAClCkE,YAAY,KAAKvD,WAAWwD,QAAQC;GACpCC,cAAcjE;GACdqC,QAAQJ;GACRoC,gBAAgBF;GACpB,CAAA,CAGI,OAAM,IAAIrE,uBAAAA;;CAIlB,MAAMwE,cAAcjC,QAAwC;EACxD,MAAMD,KAAK,OAAOC,WAAW,WAAWA,SAASA,OAAOD;AAexD,UAAOmC,MAde,KAAKhE,WAAWwD,QACjCS,cAActE,eAAAA,CACduE,KAAK;GACF9B,OAAO,EAAE+B,SAAStC,IAAG;GACrBd,WAAW,EAAEqD,MAAM,MAAK;GACxBC,OAAO;IACHxC,IAAI3C,kBAAkB;KAClBoF,QAAQ9E,YAAY+E;KACpBrD,KAAKW;KACT,CAAA;IACA2C,cAAc;IAClB;GACJ,CAAA,EAEWC,KAAKC,UAAUA,MAAMN,KAAI;;CAG5C,MAAMO,oBAAoB7C,QAA2D;EACjF,MAAMD,KAAK,OAAOC,WAAW,WAAWA,SAASA,OAAOD;AACxD,SAAOhC,qBAAqB;GACxB2D,SAAS,KAAKxD,WAAWwD;GACzBoB,gBAAgBlF;GAChB0C,OAAO,EAAE+B,SAAStC,IAAG;GACrBgD,aAAarF,YAAYsF;GACzBC,UAAUlD;GACd,CAAA"}

package/dist/app/modules/http/modules/controller.d.ts

@@ -2,10 +2,9 @@ import type { Router } from 'routup';
 import { ClientController, ClientPermissionController, ClientRoleController, ClientScopeController, IdentityProviderController, IdentityProviderRoleMappingController, PermissionController, PermissionPolicyController, PolicyController, RealmController, RobotController, RobotPermissionController, RobotRoleController, RoleAttributeController, RoleController, RolePermissionController, ScopeController, UserAttributeController, UserController, UserPermissionController, UserRoleController } from '../../../../adapters/http/index.ts';
 import { ActivateController, AuthorizeController, JwkController, OpenIDController, PasswordForgotController, PasswordResetController, RegisterController, TokenController } from '../../../../adapters/http/controllers/index.ts';
 import type { IContainer } from 'eldin';
-import { IdentityPermissionProvider, PasswordRecoveryService, RegistrationService } from '../../../../core/index.ts';
+import { PasswordRecoveryService, RegistrationService } from '../../../../core/index.ts';
 export declare class HTTPControllerModule {
     mount(router: Router, container: IContainer): Promise<void>;
-    createIdentityPermissionProvider(container: IContainer): IdentityPermissionProvider;
     createAuthorize(container: IContainer): AuthorizeController;
     createToken(container: IContainer): TokenController;
     createOpenIDController(container: IContainer): OpenIDController;

package/dist/app/modules/http/modules/controller.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"controller.d.ts","sourceRoot":"","sources":["../../../../../src/app/modules/http/modules/controller.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AA6ErC,OAAO,EACH,gBAAgB,EAChB,0BAA0B,EAC1B,oBAAoB,EACpB,qBAAqB,EACrB,0BAA0B,EAC1B,qCAAqC,EACrC,oBAAoB,EACpB,0BAA0B,EAC1B,gBAAgB,EAChB,eAAe,EACf,eAAe,EACf,yBAAyB,EACzB,mBAAmB,EACnB,uBAAuB,EACvB,cAAc,EACd,wBAAwB,EACxB,eAAe,EACf,uBAAuB,EACvB,cAAc,EACd,wBAAwB,EACxB,kBAAkB,EACrB,MAAM,oCAAoC,CAAC;AAC5C,OAAO,EACH,kBAAkB,EAClB,mBAAmB,EACnB,aAAa,EACb,gBAAgB,EAChB,wBAAwB,EACxB,uBAAuB,EACvB,kBAAkB,EAElB,eAAe,EAClB,MAAM,gDAAgD,CAAC;AACxD,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,OAAO,CAAC;AACxC,OAAO,EAOH,0BAA0B,EAE1B,uBAAuB,EAKvB,mBAAmB,EActB,MAAM,2BAA2B,CAAC;AAOnC,qBAAa,oBAAoB;IACvB,KAAK,CAAC,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC;IAqFjE,gCAAgC,CAAC,SAAS,EAAE,UAAU;IAUtD,eAAe,CAAC,SAAS,EAAE,UAAU;IAuBrC,WAAW,CAAC,SAAS,EAAE,UAAU;IA4CjC,sBAAsB,CAAC,SAAS,EAAE,UAAU;IAM5C,wBAAwB,CAAC,SAAS,EAAE,UAAU;IAI9C,8BAA8B,CAAC,SAAS,EAAE,UAAU;IAIpD,6BAA6B,CAAC,SAAS,EAAE,UAAU;IAInD,6BAA6B,CAAC,SAAS,EAAE,UAAU;IAqBnD,wBAAwB,CAAC,SAAS,EAAE,UAAU;IAI9C,yBAAyB,CAAC,SAAS,EAAE,UAAU;IAqB/C,sBAAsB,CAAC,SAAS,EAAE,UAAU;IAiC5C,sBAAsB,CAAC,SAAS,EAAE,UAAU;IAiB5C,qBAAqB,CAAC,SAAS,EAAE,UAAU;IAoBrC,0BAA0B,CAAC,SAAS,EAAE,UAAU;IA8CtD,oBAAoB,CAAC,SAAS,EAAE,UAAU;IAe1C,gCAAgC,CAAC,SAAS,EAAE,UAAU;IAYtD,0BAA0B,CAAC,SAAS,EAAE,UAAU;IAShD,2BAA2B,CAAC,SAAS,EAAE,UAAU;IAQjD,+BAA+B,CAAC,SAAS,EAAE,UAAU;IAYrD,yBAAyB,CAAC,SAAS,EAAE,UAAU;IAS/C,6BAA6B,CAAC,SAAS,EAAE,UAAU;IAQnD,8BAA8B,CAAC,SAAS,EAAE,UAAU;IAYpD,gCAAgC,CAAC,SAAS,EAAE,UAAU;IAQtD,qBAAqB,CAAC,SAAS,EAAE,UAAU;IAe3C,oBAAoB,CAAC,SAAS,EAAE,UAAU;IAe1C,6BAA6B,CAAC,SAAS,EAAE,UAAU;IAQnD,8BAA8B,CAAC,SAAS,EAAE,UAAU;IAYpD,wBAAwB,CAAC,SAAS,EAAE,UAAU;IAS9C,sBAAsB,CAAC,SAAS,EAAE,UAAU;IAqB5C,oCAAoC,CAAC,SAAS,EAAE,UAAU;IAS1D,mBAAmB,CAAC,SAAS,EAAE,UAAU;IAMzC,qBAAqB,CAAC,SAAS,EAAE,UAAU;CAe9C"}
+{"version":3,"file":"controller.d.ts","sourceRoot":"","sources":["../../../../../src/app/modules/http/modules/controller.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AA2ErC,OAAO,EACH,gBAAgB,EAChB,0BAA0B,EAC1B,oBAAoB,EACpB,qBAAqB,EACrB,0BAA0B,EAC1B,qCAAqC,EACrC,oBAAoB,EACpB,0BAA0B,EAC1B,gBAAgB,EAChB,eAAe,EACf,eAAe,EACf,yBAAyB,EACzB,mBAAmB,EACnB,uBAAuB,EACvB,cAAc,EACd,wBAAwB,EACxB,eAAe,EACf,uBAAuB,EACvB,cAAc,EACd,wBAAwB,EACxB,kBAAkB,EACrB,MAAM,oCAAoC,CAAC;AAC5C,OAAO,EACH,kBAAkB,EAClB,mBAAmB,EACnB,aAAa,EACb,gBAAgB,EAChB,wBAAwB,EACxB,uBAAuB,EACvB,kBAAkB,EAElB,eAAe,EAClB,MAAM,gDAAgD,CAAC;AACxD,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,OAAO,CAAC;AACxC,OAAO,EAQH,uBAAuB,EAKvB,mBAAmB,EActB,MAAM,2BAA2B,CAAC;AAOnC,qBAAa,oBAAoB;IACvB,KAAK,CAAC,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC;IAqFjE,eAAe,CAAC,SAAS,EAAE,UAAU;IAuBrC,WAAW,CAAC,SAAS,EAAE,UAAU;IA4CjC,sBAAsB,CAAC,SAAS,EAAE,UAAU;IAM5C,wBAAwB,CAAC,SAAS,EAAE,UAAU;IAI9C,8BAA8B,CAAC,SAAS,EAAE,UAAU;IAIpD,6BAA6B,CAAC,SAAS,EAAE,UAAU;IAInD,6BAA6B,CAAC,SAAS,EAAE,UAAU;IAqBnD,wBAAwB,CAAC,SAAS,EAAE,UAAU;IAI9C,yBAAyB,CAAC,SAAS,EAAE,UAAU;IAqB/C,sBAAsB,CAAC,SAAS,EAAE,UAAU;IAiC5C,sBAAsB,CAAC,SAAS,EAAE,UAAU;IAiB5C,qBAAqB,CAAC,SAAS,EAAE,UAAU;IAoBrC,0BAA0B,CAAC,SAAS,EAAE,UAAU;IA8CtD,oBAAoB,CAAC,SAAS,EAAE,UAAU;IAe1C,gCAAgC,CAAC,SAAS,EAAE,UAAU;IAYtD,0BAA0B,CAAC,SAAS,EAAE,UAAU;IAShD,2BAA2B,CAAC,SAAS,EAAE,UAAU;IAQjD,+BAA+B,CAAC,SAAS,EAAE,UAAU;IAYrD,yBAAyB,CAAC,SAAS,EAAE,UAAU;IAS/C,6BAA6B,CAAC,SAAS,EAAE,UAAU;IAYnD,8BAA8B,CAAC,SAAS,EAAE,UAAU;IAYpD,gCAAgC,CAAC,SAAS,EAAE,UAAU;IAQtD,qBAAqB,CAAC,SAAS,EAAE,UAAU;IAe3C,oBAAoB,CAAC,SAAS,EAAE,UAAU;IAe1C,6BAA6B,CAAC,SAAS,EAAE,UAAU;IAYnD,8BAA8B,CAAC,SAAS,EAAE,UAAU;IAYpD,wBAAwB,CAAC,SAAS,EAAE,UAAU;IAS9C,sBAAsB,CAAC,SAAS,EAAE,UAAU;IAqB5C,oCAAoC,CAAC,SAAS,EAAE,UAAU;IAS1D,mBAAmB,CAAC,SAAS,EAAE,UAAU;IAMzC,qBAAqB,CAAC,SAAS,EAAE,UAAU;CAe9C"}

package/dist/app/modules/http/modules/controller.mjs

@@ -2,28 +2,26 @@ import { AuthenticationInjectionKey } from "../../authentication/constants.mjs";
 import { RealmEntity } from "../../../../adapters/database/domains/realm/entity.mjs";
 import { KeyEntity } from "../../../../adapters/database/domains/key/entity.mjs";
 import { ClientEntity } from "../../../../adapters/database/domains/client/entity.mjs";
-import { PermissionEntity } from "../../../../adapters/database/domains/permission/entity.mjs";
-import { PolicyRepository } from "../../../../adapters/database/domains/policy/repository.mjs";
-import { ClientPermissionEntity } from "../../../../adapters/database/domains/client-permission/entity.mjs";
 import { RoleEntity } from "../../../../adapters/database/domains/role/entity.mjs";
 import { RoleAttributeEntity } from "../../../../adapters/database/domains/role-attribute/entity.mjs";
-import { RolePermissionEntity } from "../../../../adapters/database/domains/role-permission/entity.mjs";
-import { RoleRepository } from "../../../../adapters/database/domains/role/repository.mjs";
 import { ClientRoleEntity } from "../../../../adapters/database/domains/client-role/entity.mjs";
-import { ClientRepository } from "../../../../adapters/database/domains/client/repository.mjs";
+import { PermissionEntity } from "../../../../adapters/database/domains/permission/entity.mjs";
+import { PolicyRepository } from "../../../../adapters/database/domains/policy/repository.mjs";
+import { ClientPermissionEntity } from "../../../../adapters/database/domains/client-permission/entity.mjs";
 import { ScopeEntity } from "../../../../adapters/database/domains/scope/entity.mjs";
 import { ClientScopeEntity } from "../../../../adapters/database/domains/client-scope/entity.mjs";
 import { IdentityProviderRepository } from "../../../../adapters/database/domains/identity-provider/repository.mjs";
+import { UserEntity } from "../../../../adapters/database/domains/user/entity.mjs";
 import { UserAttributeEntity } from "../../../../adapters/database/domains/user-attribute/entity.mjs";
-import { UserPermissionEntity } from "../../../../adapters/database/domains/user-permission/entity.mjs";
-import { UserRoleEntity } from "../../../../adapters/database/domains/user-role/entity.mjs";
 import { UserRepository } from "../../../../adapters/database/domains/user/repository.mjs";
 import { IdentityProviderRoleMappingEntity } from "../../../../adapters/database/domains/identity-provider-role-mapping/entity.mjs";
 import { RobotEntity } from "../../../../adapters/database/domains/robot/entity.mjs";
-import { RobotRoleEntity } from "../../../../adapters/database/domains/robot-role/entity.mjs";
-import { RobotPermissionEntity } from "../../../../adapters/database/domains/robot-permission/entity.mjs";
-import { RobotRepository } from "../../../../adapters/database/domains/robot/repository.mjs";
 import { PermissionPolicyEntity } from "../../../../adapters/database/domains/permission-policy/entity.mjs";
+import { RobotPermissionEntity } from "../../../../adapters/database/domains/robot-permission/entity.mjs";
+import { RobotRoleEntity } from "../../../../adapters/database/domains/robot-role/entity.mjs";
+import { RolePermissionEntity } from "../../../../adapters/database/domains/role-permission/entity.mjs";
+import { UserPermissionEntity } from "../../../../adapters/database/domains/user-permission/entity.mjs";
+import { UserRoleEntity } from "../../../../adapters/database/domains/user-role/entity.mjs";
 import "../../../../adapters/database/domains/index.mjs";
 import { ClientAuthenticator } from "../../../../core/authentication/entities/client/module.mjs";
 import { RobotAuthenticator } from "../../../../core/authentication/entities/robot/module.mjs";
@@ -50,7 +48,6 @@ import { UserPermissionService } from "../../../../core/entities/user-permission
 import { UserRoleService } from "../../../../core/entities/user-role/service.mjs";
 import { IdentityProviderRoleMappingService } from "../../../../core/entities/identity-provider-role-mapping/service.mjs";
 import { PasswordRecoveryService } from "../../../../core/identity/password-recovery/service.mjs";
-import { IdentityPermissionProvider } from "../../../../core/identity/permission/module.mjs";
 import { RegistrationService } from "../../../../core/identity/registration/service.mjs";
 import "../../../../core/index.mjs";
 import { ConfigInjectionKey } from "../../config/constants.mjs";
@@ -194,15 +191,6 @@ var HTTPControllerModule = class {
 			}
 		}));
 	}
-	createIdentityPermissionProvider(container) {
-		const dataSource = container.resolve(DatabaseInjectionKey.DataSource);
-		return new IdentityPermissionProvider({
-			clientRepository: new ClientRepository(dataSource),
-			userRepository: new UserRepository(dataSource),
-			robotRepository: new RobotRepository(dataSource),
-			roleRepository: new RoleRepository(dataSource)
-		});
-	}
 	createAuthorize(container) {
 		const config = container.resolve(ConfigInjectionKey);
 		const accessTokenIssuer = container.resolve(OAuth2InjectionToken.AccessTokenIssuer);
@@ -235,7 +223,7 @@ var HTTPControllerModule = class {
 			tokenVerifier,
 			tokenRevoker,
 			identityResolver,
-			identityPermissionProvider: this.createIdentityPermissionProvider(container),
+			identityPermissionProvider: container.resolve(IdentityInjectionKey.PermissionProvider),
 			clientAuthenticator: new ClientAuthenticator(identityResolver),
 			robotAuthenticator: new RobotAuthenticator(identityResolver),
 			userAuthenticator: new CredentialsAuthenticator([identityProviderLdapCollectionAuthenticator, new UserAuthenticator(identityResolver)]),
@@ -372,7 +360,7 @@ var HTTPControllerModule = class {
 			}),
 			repository,
 			realmRepository: realmRepositoryAdapter,
-			identityPermissionProvider: this.createIdentityPermissionProvider(container),
+			identityPermissionProvider: container.resolve(IdentityInjectionKey.PermissionProvider),
 			permissionProvider: new PermissionDatabaseProvider(dataSource)
 		});
 	}
@@ -389,13 +377,13 @@ var HTTPControllerModule = class {
 	createClientPermissionController(container) {
 		return new ClientPermissionController({ service: new ClientPermissionService({
 			repository: new ClientPermissionRepositoryAdapter(container.resolve(ClientPermissionEntity)),
-			identityPermissionProvider: this.createIdentityPermissionProvider(container)
+			identityPermissionProvider: container.resolve(IdentityInjectionKey.PermissionProvider)
 		}) });
 	}
 	createClientRoleController(container) {
 		return new ClientRoleController({ service: new ClientRoleService({
 			repository: new ClientRoleRepositoryAdapter(container.resolve(ClientRoleEntity)),
-			identityPermissionProvider: this.createIdentityPermissionProvider(container)
+			identityPermissionProvider: container.resolve(IdentityInjectionKey.PermissionProvider)
 		}) });
 	}
 	createClientScopeController(container) {
@@ -404,22 +392,26 @@ var HTTPControllerModule = class {
 	createRobotPermissionController(container) {
 		return new RobotPermissionController({ service: new RobotPermissionService({
 			repository: new RobotPermissionRepositoryAdapter(container.resolve(RobotPermissionEntity)),
-			identityPermissionProvider: this.createIdentityPermissionProvider(container)
+			identityPermissionProvider: container.resolve(IdentityInjectionKey.PermissionProvider)
 		}) });
 	}
 	createRobotRoleController(container) {
 		return new RobotRoleController({ service: new RobotRoleService({
 			repository: new RobotRoleRepositoryAdapter(container.resolve(RobotRoleEntity)),
-			identityPermissionProvider: this.createIdentityPermissionProvider(container)
+			identityPermissionProvider: container.resolve(IdentityInjectionKey.PermissionProvider)
 		}) });
 	}
 	createRoleAttributeController(container) {
-		return new RoleAttributeController({ service: new RoleAttributeService({ repository: new RoleAttributeRepositoryAdapter(container.resolve(RoleAttributeEntity)) }) });
+		const dataSource = container.resolve(DatabaseInjectionKey.DataSource);
+		return new RoleAttributeController({ service: new RoleAttributeService({
+			repository: new RoleAttributeRepositoryAdapter(container.resolve(RoleAttributeEntity)),
+			reservedNames: new Set(dataSource.getMetadata(RoleEntity).columns.map((c) => c.propertyName))
+		}) });
 	}
 	createRolePermissionController(container) {
 		return new RolePermissionController({ service: new RolePermissionService({
 			repository: new RolePermissionRepositoryAdapter(container.resolve(RolePermissionEntity)),
-			identityPermissionProvider: this.createIdentityPermissionProvider(container)
+			identityPermissionProvider: container.resolve(IdentityInjectionKey.PermissionProvider)
 		}) });
 	}
 	createPermissionPolicyController(container) {
@@ -447,18 +439,22 @@ var HTTPControllerModule = class {
 		}) });
 	}
 	createUserAttributeController(container) {
-		return new UserAttributeController({ service: new UserAttributeService({ repository: new UserAttributeRepositoryAdapter(container.resolve(UserAttributeEntity)) }) });
+		const dataSource = container.resolve(DatabaseInjectionKey.DataSource);
+		return new UserAttributeController({ service: new UserAttributeService({
+			repository: new UserAttributeRepositoryAdapter(container.resolve(UserAttributeEntity)),
+			reservedNames: new Set(dataSource.getMetadata(UserEntity).columns.map((c) => c.propertyName))
+		}) });
 	}
 	createUserPermissionController(container) {
 		return new UserPermissionController({ service: new UserPermissionService({
 			repository: new UserPermissionRepositoryAdapter(container.resolve(UserPermissionEntity)),
-			identityPermissionProvider: this.createIdentityPermissionProvider(container)
+			identityPermissionProvider: container.resolve(IdentityInjectionKey.PermissionProvider)
 		}) });
 	}
 	createUserRoleController(container) {
 		return new UserRoleController({ service: new UserRoleService({
 			repository: new UserRoleRepositoryAdapter(container.resolve(UserRoleEntity)),
-			identityPermissionProvider: this.createIdentityPermissionProvider(container)
+			identityPermissionProvider: container.resolve(IdentityInjectionKey.PermissionProvider)
 		}) });
 	}
 	createPolicyController(container) {
@@ -476,13 +472,13 @@ var HTTPControllerModule = class {
 			}),
 			repository,
 			realmRepository: realmRepositoryAdapter,
-			identityPermissionProvider: this.createIdentityPermissionProvider(container)
+			identityPermissionProvider: container.resolve(IdentityInjectionKey.PermissionProvider)
 		});
 	}
 	createIdentityProviderRoleController(container) {
 		return new IdentityProviderRoleMappingController({ service: new IdentityProviderRoleMappingService({
 			repository: new IdentityProviderRoleMappingRepositoryAdapter(container.resolve(IdentityProviderRoleMappingEntity)),
-			identityPermissionProvider: this.createIdentityPermissionProvider(container)
+			identityPermissionProvider: container.resolve(IdentityInjectionKey.PermissionProvider)
 		}) });
 	}
 	createJwkController(container) {