@authup/server-core 1.0.0-beta.4 → 1.0.0-beta.40

package/dist/adapters/database/migrations/postgres/1766830857009-Default.mjs

@@ -0,0 +1,245 @@
+//#region src/adapters/database/migrations/postgres/1766830857009-Default.ts
+var Default1766830857009 = class {
+	name = "Default1766830857009";
+	async up(queryRunner) {
+		await queryRunner.query(`
+            ALTER TABLE "auth_clients" DROP CONSTRAINT "FK_9c9f985a5cfc1ff52a04c05e5d5"
+        `);
+		await queryRunner.query(`
+            ALTER TABLE "auth_permissions" DROP CONSTRAINT "FK_0d8fb586aa4d177206142bd4ed5"
+        `);
+		await queryRunner.query(`
+            ALTER TABLE "auth_users" DROP CONSTRAINT "FK_b1797e07106b4af61280b8edac1"
+        `);
+		await queryRunner.query(`
+            CREATE TABLE "auth_sessions" (
+                "id" uuid NOT NULL DEFAULT uuid_generate_v4(),
+                "sub" character varying(64) NOT NULL,
+                "sub_kind" character varying(64) NOT NULL,
+                "ip_address" character varying(15) NOT NULL,
+                "user_agent" character varying(512) NOT NULL,
+                "expires_at" character varying(28) NOT NULL,
+                "refreshed_at" character varying(28),
+                "seen_at" character varying(28),
+                "updated_at" TIMESTAMP NOT NULL DEFAULT now(),
+                "created_at" TIMESTAMP NOT NULL DEFAULT now(),
+                "client_id" uuid,
+                "user_id" uuid,
+                "robot_id" uuid,
+                "realm_id" uuid NOT NULL,
+                CONSTRAINT "PK_641507381f32580e8479efc36cd" PRIMARY KEY ("id")
+            )
+        `);
+		await queryRunner.query(`
+            CREATE INDEX "IDX_a83763bae0948e46c0c128a3c4" ON "auth_sessions" ("sub")
+        `);
+		await queryRunner.query(`
+            CREATE INDEX "IDX_00a5096d599ad839dee7385f4e" ON "auth_sessions" ("sub_kind")
+        `);
+		await queryRunner.query(`
+            CREATE INDEX "IDX_514d063fddd0ce969e7b8881c5" ON "auth_sessions" ("ip_address")
+        `);
+		await queryRunner.query(`
+            CREATE INDEX "IDX_717d1d5d49af59b84a3c70281f" ON "auth_sessions" ("user_agent")
+        `);
+		await queryRunner.query(`
+            ALTER TABLE "auth_clients" DROP COLUMN "user_id"
+        `);
+		await queryRunner.query(`
+            ALTER TABLE "auth_permissions" DROP COLUMN "target"
+        `);
+		await queryRunner.query(`
+            ALTER TABLE "auth_identity_provider_attribute_mappings"
+                RENAME COLUMN "source_value_is_regex" TO "value_is_regex"
+        `);
+		await queryRunner.query(`
+            ALTER TABLE "auth_identity_provider_attribute_mappings"
+                RENAME COLUMN "source_name" TO "name"
+        `);
+		await queryRunner.query(`
+            ALTER TABLE "auth_identity_provider_attribute_mappings"
+                RENAME COLUMN "source_value" TO "value"
+        `);
+		await queryRunner.query(`
+            ALTER TABLE "auth_clients"
+            ADD "active" boolean NOT NULL DEFAULT true
+        `);
+		await queryRunner.query(`
+            ALTER TABLE "auth_clients"
+            ADD "secret_hashed" boolean NOT NULL DEFAULT false
+        `);
+		await queryRunner.query(`
+            ALTER TABLE "auth_clients"
+            ADD "secret_encrypted" boolean NOT NULL DEFAULT false
+        `);
+		await queryRunner.query(`
+            ALTER TABLE "auth_clients" DROP CONSTRAINT "FK_b628ffa1b2f5415598cfb1a72af"
+        `);
+		await queryRunner.query(`
+            ALTER TABLE "auth_clients" DROP CONSTRAINT "UQ_6018b722f28f1cc6fdac450e611"
+        `);
+		await queryRunner.query(`
+            DELETE FROM "auth_clients"
+            WHERE "realm_id" IS NULL
+        `);
+		await queryRunner.query(`
+            ALTER TABLE "auth_clients"
+            ALTER COLUMN "realm_id"
+            SET NOT NULL
+        `);
+		await queryRunner.query(`
+            DELETE FROM "auth_users"
+            WHERE "client_id" IS NOT NULL
+        `);
+		await queryRunner.query(`
+            UPDATE "auth_users"
+            SET "email" = CONCAT("name", '@example.com')
+            WHERE "email" IS NULL;
+        `);
+		await queryRunner.query(`
+            ALTER TABLE "auth_users"
+            ALTER COLUMN "email"
+            SET NOT NULL
+        `);
+		await queryRunner.query(`
+            ALTER TABLE "auth_clients"
+            ADD CONSTRAINT "UQ_6018b722f28f1cc6fdac450e611" UNIQUE ("name", "realm_id")
+        `);
+		await queryRunner.query(`
+            ALTER TABLE "auth_clients"
+            ADD CONSTRAINT "FK_b628ffa1b2f5415598cfb1a72af" FOREIGN KEY ("realm_id") REFERENCES "auth_realms"("id") ON DELETE CASCADE ON UPDATE NO ACTION
+        `);
+		await queryRunner.query(`
+            DELETE FROM "auth_permissions"
+            WHERE "client_id" IS NOT NULL
+        `);
+		await queryRunner.query(`
+            ALTER TABLE "auth_permissions"
+            ADD CONSTRAINT "FK_0d8fb586aa4d177206142bd4ed5" FOREIGN KEY ("client_id") REFERENCES "auth_clients"("id") ON DELETE
+            SET NULL ON UPDATE NO ACTION
+        `);
+		await queryRunner.query(`
+            ALTER TABLE "auth_users"
+            ADD CONSTRAINT "FK_b1797e07106b4af61280b8edac1" FOREIGN KEY ("client_id") REFERENCES "auth_clients"("id") ON DELETE CASCADE ON UPDATE NO ACTION
+        `);
+		await queryRunner.query(`
+            ALTER TABLE "auth_sessions"
+            ADD CONSTRAINT "FK_4b428fb760524b6ef45e7c2cbff" FOREIGN KEY ("client_id") REFERENCES "auth_clients"("id") ON DELETE CASCADE ON UPDATE NO ACTION
+        `);
+		await queryRunner.query(`
+            ALTER TABLE "auth_sessions"
+            ADD CONSTRAINT "FK_50ccaa6440288a06f0ba693ccc6" FOREIGN KEY ("user_id") REFERENCES "auth_users"("id") ON DELETE CASCADE ON UPDATE NO ACTION
+        `);
+		await queryRunner.query(`
+            ALTER TABLE "auth_sessions"
+            ADD CONSTRAINT "FK_46b30e5d8e5d5de58d454f53f8c" FOREIGN KEY ("robot_id") REFERENCES "auth_robots"("id") ON DELETE CASCADE ON UPDATE NO ACTION
+        `);
+		await queryRunner.query(`
+            ALTER TABLE "auth_sessions"
+            ADD CONSTRAINT "FK_5a40fe23cbb002e73bf740715f5" FOREIGN KEY ("realm_id") REFERENCES "auth_realms"("id") ON DELETE CASCADE ON UPDATE NO ACTION
+        `);
+	}
+	async down(queryRunner) {
+		await queryRunner.query(`
+            ALTER TABLE "auth_sessions" DROP CONSTRAINT "FK_5a40fe23cbb002e73bf740715f5"
+        `);
+		await queryRunner.query(`
+            ALTER TABLE "auth_sessions" DROP CONSTRAINT "FK_46b30e5d8e5d5de58d454f53f8c"
+        `);
+		await queryRunner.query(`
+            ALTER TABLE "auth_sessions" DROP CONSTRAINT "FK_50ccaa6440288a06f0ba693ccc6"
+        `);
+		await queryRunner.query(`
+            ALTER TABLE "auth_sessions" DROP CONSTRAINT "FK_4b428fb760524b6ef45e7c2cbff"
+        `);
+		await queryRunner.query(`
+            ALTER TABLE "auth_users" DROP CONSTRAINT "FK_b1797e07106b4af61280b8edac1"
+        `);
+		await queryRunner.query(`
+            ALTER TABLE "auth_permissions" DROP CONSTRAINT "FK_0d8fb586aa4d177206142bd4ed5"
+        `);
+		await queryRunner.query(`
+            ALTER TABLE "auth_clients" DROP CONSTRAINT "FK_b628ffa1b2f5415598cfb1a72af"
+        `);
+		await queryRunner.query(`
+            ALTER TABLE "auth_clients" DROP CONSTRAINT "UQ_6018b722f28f1cc6fdac450e611"
+        `);
+		await queryRunner.query(`
+            ALTER TABLE "auth_users"
+            ALTER COLUMN "email" DROP NOT NULL
+        `);
+		await queryRunner.query(`
+            ALTER TABLE "auth_clients"
+            ALTER COLUMN "realm_id" DROP NOT NULL
+        `);
+		await queryRunner.query(`
+            ALTER TABLE "auth_clients"
+            ADD CONSTRAINT "UQ_6018b722f28f1cc6fdac450e611" UNIQUE ("name", "realm_id")
+        `);
+		await queryRunner.query(`
+            ALTER TABLE "auth_clients"
+            ADD CONSTRAINT "FK_b628ffa1b2f5415598cfb1a72af" FOREIGN KEY ("realm_id") REFERENCES "auth_realms"("id") ON DELETE CASCADE ON UPDATE NO ACTION
+        `);
+		await queryRunner.query(`
+            ALTER TABLE "auth_clients" DROP COLUMN "secret_encrypted"
+        `);
+		await queryRunner.query(`
+            ALTER TABLE "auth_clients" DROP COLUMN "secret_hashed"
+        `);
+		await queryRunner.query(`
+            ALTER TABLE "auth_clients" DROP COLUMN "active"
+        `);
+		await queryRunner.query(`
+            ALTER TABLE "auth_identity_provider_attribute_mappings"
+                RENAME COLUMN "value_is_regex" TO "source_value_is_regex"
+        `);
+		await queryRunner.query(`
+            ALTER TABLE "auth_identity_provider_attribute_mappings"
+                RENAME COLUMN "name" TO "source_name"
+        `);
+		await queryRunner.query(`
+            ALTER TABLE "auth_identity_provider_attribute_mappings"
+                RENAME COLUMN "value" TO "source_value"
+        `);
+		await queryRunner.query(`
+            ALTER TABLE "auth_permissions"
+            ADD "target" character varying(16)
+        `);
+		await queryRunner.query(`
+            ALTER TABLE "auth_clients"
+            ADD "user_id" uuid
+        `);
+		await queryRunner.query(`
+            DROP INDEX "public"."IDX_717d1d5d49af59b84a3c70281f"
+        `);
+		await queryRunner.query(`
+            DROP INDEX "public"."IDX_514d063fddd0ce969e7b8881c5"
+        `);
+		await queryRunner.query(`
+            DROP INDEX "public"."IDX_00a5096d599ad839dee7385f4e"
+        `);
+		await queryRunner.query(`
+            DROP INDEX "public"."IDX_a83763bae0948e46c0c128a3c4"
+        `);
+		await queryRunner.query(`
+            DROP TABLE "auth_sessions"
+        `);
+		await queryRunner.query(`
+            ALTER TABLE "auth_users"
+            ADD CONSTRAINT "FK_b1797e07106b4af61280b8edac1" FOREIGN KEY ("client_id") REFERENCES "auth_realms"("id") ON DELETE CASCADE ON UPDATE NO ACTION
+        `);
+		await queryRunner.query(`
+            ALTER TABLE "auth_permissions"
+            ADD CONSTRAINT "FK_0d8fb586aa4d177206142bd4ed5" FOREIGN KEY ("client_id") REFERENCES "auth_realms"("id") ON DELETE
+            SET NULL ON UPDATE NO ACTION
+        `);
+		await queryRunner.query(`
+            ALTER TABLE "auth_clients"
+            ADD CONSTRAINT "FK_9c9f985a5cfc1ff52a04c05e5d5" FOREIGN KEY ("user_id") REFERENCES "auth_users"("id") ON DELETE CASCADE ON UPDATE NO ACTION
+        `);
+	}
+};
+//#endregion
+export { Default1766830857009 };
+
+//# sourceMappingURL=1766830857009-Default.mjs.map

package/dist/adapters/database/migrations/postgres/1766830857009-Default.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"1766830857009-Default.mjs","names":["Default1766830857009","name","up","queryRunner","query","down"],"sources":["../../../../../src/adapters/database/migrations/postgres/1766830857009-Default.ts"],"sourcesContent":["import type { MigrationInterface, QueryRunner } from 'typeorm';\n\nexport class Default1766830857009 implements MigrationInterface {\n    name = 'Default1766830857009';\n\n    public async up(queryRunner: QueryRunner): Promise<void> {\n        await queryRunner.query(`\n            ALTER TABLE \"auth_clients\" DROP CONSTRAINT \"FK_9c9f985a5cfc1ff52a04c05e5d5\"\n        `);\n        await queryRunner.query(`\n            ALTER TABLE \"auth_permissions\" DROP CONSTRAINT \"FK_0d8fb586aa4d177206142bd4ed5\"\n        `);\n        await queryRunner.query(`\n            ALTER TABLE \"auth_users\" DROP CONSTRAINT \"FK_b1797e07106b4af61280b8edac1\"\n        `);\n        await queryRunner.query(`\n            CREATE TABLE \"auth_sessions\" (\n                \"id\" uuid NOT NULL DEFAULT uuid_generate_v4(),\n                \"sub\" character varying(64) NOT NULL,\n                \"sub_kind\" character varying(64) NOT NULL,\n                \"ip_address\" character varying(15) NOT NULL,\n                \"user_agent\" character varying(512) NOT NULL,\n                \"expires_at\" character varying(28) NOT NULL,\n                \"refreshed_at\" character varying(28),\n                \"seen_at\" character varying(28),\n                \"updated_at\" TIMESTAMP NOT NULL DEFAULT now(),\n                \"created_at\" TIMESTAMP NOT NULL DEFAULT now(),\n                \"client_id\" uuid,\n                \"user_id\" uuid,\n                \"robot_id\" uuid,\n                \"realm_id\" uuid NOT NULL,\n                CONSTRAINT \"PK_641507381f32580e8479efc36cd\" PRIMARY KEY (\"id\")\n            )\n        `);\n        await queryRunner.query(`\n            CREATE INDEX \"IDX_a83763bae0948e46c0c128a3c4\" ON \"auth_sessions\" (\"sub\")\n        `);\n        await queryRunner.query(`\n            CREATE INDEX \"IDX_00a5096d599ad839dee7385f4e\" ON \"auth_sessions\" (\"sub_kind\")\n        `);\n        await queryRunner.query(`\n            CREATE INDEX \"IDX_514d063fddd0ce969e7b8881c5\" ON \"auth_sessions\" (\"ip_address\")\n        `);\n        await queryRunner.query(`\n            CREATE INDEX \"IDX_717d1d5d49af59b84a3c70281f\" ON \"auth_sessions\" (\"user_agent\")\n        `);\n        await queryRunner.query(`\n            ALTER TABLE \"auth_clients\" DROP COLUMN \"user_id\"\n        `);\n        await queryRunner.query(`\n            ALTER TABLE \"auth_permissions\" DROP COLUMN \"target\"\n        `);\n\n        await queryRunner.query(`\n            ALTER TABLE \"auth_identity_provider_attribute_mappings\"\n                RENAME COLUMN \"source_value_is_regex\" TO \"value_is_regex\"\n        `);\n        await queryRunner.query(`\n            ALTER TABLE \"auth_identity_provider_attribute_mappings\"\n                RENAME COLUMN \"source_name\" TO \"name\"\n        `);\n        await queryRunner.query(`\n            ALTER TABLE \"auth_identity_provider_attribute_mappings\"\n                RENAME COLUMN \"source_value\" TO \"value\"\n        `);\n\n        await queryRunner.query(`\n            ALTER TABLE \"auth_clients\"\n            ADD \"active\" boolean NOT NULL DEFAULT true\n        `);\n        await queryRunner.query(`\n            ALTER TABLE \"auth_clients\"\n            ADD \"secret_hashed\" boolean NOT NULL DEFAULT false\n        `);\n        await queryRunner.query(`\n            ALTER TABLE \"auth_clients\"\n            ADD \"secret_encrypted\" boolean NOT NULL DEFAULT false\n        `);\n\n        // client realm_id not null\n        await queryRunner.query(`\n            ALTER TABLE \"auth_clients\" DROP CONSTRAINT \"FK_b628ffa1b2f5415598cfb1a72af\"\n        `);\n        await queryRunner.query(`\n            ALTER TABLE \"auth_clients\" DROP CONSTRAINT \"UQ_6018b722f28f1cc6fdac450e611\"\n        `);\n        await queryRunner.query(`\n            DELETE FROM \"auth_clients\"\n            WHERE \"realm_id\" IS NULL\n        `);\n        await queryRunner.query(`\n            ALTER TABLE \"auth_clients\"\n            ALTER COLUMN \"realm_id\"\n            SET NOT NULL\n        `);\n\n        // user client_id referenced wrong table\n        await queryRunner.query(`\n            DELETE FROM \"auth_users\"\n            WHERE \"client_id\" IS NOT NULL\n        `);\n\n        // user email not null\n        await queryRunner.query(`\n            UPDATE \"auth_users\"\n            SET \"email\" = CONCAT(\"name\", '@example.com')\n            WHERE \"email\" IS NULL;\n        `);\n        await queryRunner.query(`\n            ALTER TABLE \"auth_users\"\n            ALTER COLUMN \"email\"\n            SET NOT NULL\n        `);\n\n        await queryRunner.query(`\n            ALTER TABLE \"auth_clients\"\n            ADD CONSTRAINT \"UQ_6018b722f28f1cc6fdac450e611\" UNIQUE (\"name\", \"realm_id\")\n        `);\n        await queryRunner.query(`\n            ALTER TABLE \"auth_clients\"\n            ADD CONSTRAINT \"FK_b628ffa1b2f5415598cfb1a72af\" FOREIGN KEY (\"realm_id\") REFERENCES \"auth_realms\"(\"id\") ON DELETE CASCADE ON UPDATE NO ACTION\n        `);\n\n        // permission client_id referenced wrong table\n        await queryRunner.query(`\n            DELETE FROM \"auth_permissions\"\n            WHERE \"client_id\" IS NOT NULL\n        `);\n        await queryRunner.query(`\n            ALTER TABLE \"auth_permissions\"\n            ADD CONSTRAINT \"FK_0d8fb586aa4d177206142bd4ed5\" FOREIGN KEY (\"client_id\") REFERENCES \"auth_clients\"(\"id\") ON DELETE\n            SET NULL ON UPDATE NO ACTION\n        `);\n        await queryRunner.query(`\n            ALTER TABLE \"auth_users\"\n            ADD CONSTRAINT \"FK_b1797e07106b4af61280b8edac1\" FOREIGN KEY (\"client_id\") REFERENCES \"auth_clients\"(\"id\") ON DELETE CASCADE ON UPDATE NO ACTION\n        `);\n        await queryRunner.query(`\n            ALTER TABLE \"auth_sessions\"\n            ADD CONSTRAINT \"FK_4b428fb760524b6ef45e7c2cbff\" FOREIGN KEY (\"client_id\") REFERENCES \"auth_clients\"(\"id\") ON DELETE CASCADE ON UPDATE NO ACTION\n        `);\n        await queryRunner.query(`\n            ALTER TABLE \"auth_sessions\"\n            ADD CONSTRAINT \"FK_50ccaa6440288a06f0ba693ccc6\" FOREIGN KEY (\"user_id\") REFERENCES \"auth_users\"(\"id\") ON DELETE CASCADE ON UPDATE NO ACTION\n        `);\n        await queryRunner.query(`\n            ALTER TABLE \"auth_sessions\"\n            ADD CONSTRAINT \"FK_46b30e5d8e5d5de58d454f53f8c\" FOREIGN KEY (\"robot_id\") REFERENCES \"auth_robots\"(\"id\") ON DELETE CASCADE ON UPDATE NO ACTION\n        `);\n        await queryRunner.query(`\n            ALTER TABLE \"auth_sessions\"\n            ADD CONSTRAINT \"FK_5a40fe23cbb002e73bf740715f5\" FOREIGN KEY (\"realm_id\") REFERENCES \"auth_realms\"(\"id\") ON DELETE CASCADE ON UPDATE NO ACTION\n        `);\n    }\n\n    public async down(queryRunner: QueryRunner): Promise<void> {\n        await queryRunner.query(`\n            ALTER TABLE \"auth_sessions\" DROP CONSTRAINT \"FK_5a40fe23cbb002e73bf740715f5\"\n        `);\n        await queryRunner.query(`\n            ALTER TABLE \"auth_sessions\" DROP CONSTRAINT \"FK_46b30e5d8e5d5de58d454f53f8c\"\n        `);\n        await queryRunner.query(`\n            ALTER TABLE \"auth_sessions\" DROP CONSTRAINT \"FK_50ccaa6440288a06f0ba693ccc6\"\n        `);\n        await queryRunner.query(`\n            ALTER TABLE \"auth_sessions\" DROP CONSTRAINT \"FK_4b428fb760524b6ef45e7c2cbff\"\n        `);\n        await queryRunner.query(`\n            ALTER TABLE \"auth_users\" DROP CONSTRAINT \"FK_b1797e07106b4af61280b8edac1\"\n        `);\n        await queryRunner.query(`\n            ALTER TABLE \"auth_permissions\" DROP CONSTRAINT \"FK_0d8fb586aa4d177206142bd4ed5\"\n        `);\n        await queryRunner.query(`\n            ALTER TABLE \"auth_clients\" DROP CONSTRAINT \"FK_b628ffa1b2f5415598cfb1a72af\"\n        `);\n        await queryRunner.query(`\n            ALTER TABLE \"auth_clients\" DROP CONSTRAINT \"UQ_6018b722f28f1cc6fdac450e611\"\n        `);\n        await queryRunner.query(`\n            ALTER TABLE \"auth_users\"\n            ALTER COLUMN \"email\" DROP NOT NULL\n        `);\n        await queryRunner.query(`\n            ALTER TABLE \"auth_clients\"\n            ALTER COLUMN \"realm_id\" DROP NOT NULL\n        `);\n        await queryRunner.query(`\n            ALTER TABLE \"auth_clients\"\n            ADD CONSTRAINT \"UQ_6018b722f28f1cc6fdac450e611\" UNIQUE (\"name\", \"realm_id\")\n        `);\n        await queryRunner.query(`\n            ALTER TABLE \"auth_clients\"\n            ADD CONSTRAINT \"FK_b628ffa1b2f5415598cfb1a72af\" FOREIGN KEY (\"realm_id\") REFERENCES \"auth_realms\"(\"id\") ON DELETE CASCADE ON UPDATE NO ACTION\n        `);\n        await queryRunner.query(`\n            ALTER TABLE \"auth_clients\" DROP COLUMN \"secret_encrypted\"\n        `);\n        await queryRunner.query(`\n            ALTER TABLE \"auth_clients\" DROP COLUMN \"secret_hashed\"\n        `);\n        await queryRunner.query(`\n            ALTER TABLE \"auth_clients\" DROP COLUMN \"active\"\n        `);\n\n        await queryRunner.query(`\n            ALTER TABLE \"auth_identity_provider_attribute_mappings\"\n                RENAME COLUMN \"value_is_regex\" TO \"source_value_is_regex\"\n        `);\n        await queryRunner.query(`\n            ALTER TABLE \"auth_identity_provider_attribute_mappings\"\n                RENAME COLUMN \"name\" TO \"source_name\"\n        `);\n        await queryRunner.query(`\n            ALTER TABLE \"auth_identity_provider_attribute_mappings\"\n                RENAME COLUMN \"value\" TO \"source_value\"\n        `);\n\n        await queryRunner.query(`\n            ALTER TABLE \"auth_permissions\"\n            ADD \"target\" character varying(16)\n        `);\n        await queryRunner.query(`\n            ALTER TABLE \"auth_clients\"\n            ADD \"user_id\" uuid\n        `);\n        await queryRunner.query(`\n            DROP INDEX \"public\".\"IDX_717d1d5d49af59b84a3c70281f\"\n        `);\n        await queryRunner.query(`\n            DROP INDEX \"public\".\"IDX_514d063fddd0ce969e7b8881c5\"\n        `);\n        await queryRunner.query(`\n            DROP INDEX \"public\".\"IDX_00a5096d599ad839dee7385f4e\"\n        `);\n        await queryRunner.query(`\n            DROP INDEX \"public\".\"IDX_a83763bae0948e46c0c128a3c4\"\n        `);\n        await queryRunner.query(`\n            DROP TABLE \"auth_sessions\"\n        `);\n        await queryRunner.query(`\n            ALTER TABLE \"auth_users\"\n            ADD CONSTRAINT \"FK_b1797e07106b4af61280b8edac1\" FOREIGN KEY (\"client_id\") REFERENCES \"auth_realms\"(\"id\") ON DELETE CASCADE ON UPDATE NO ACTION\n        `);\n        await queryRunner.query(`\n            ALTER TABLE \"auth_permissions\"\n            ADD CONSTRAINT \"FK_0d8fb586aa4d177206142bd4ed5\" FOREIGN KEY (\"client_id\") REFERENCES \"auth_realms\"(\"id\") ON DELETE\n            SET NULL ON UPDATE NO ACTION\n        `);\n        await queryRunner.query(`\n            ALTER TABLE \"auth_clients\"\n            ADD CONSTRAINT \"FK_9c9f985a5cfc1ff52a04c05e5d5\" FOREIGN KEY (\"user_id\") REFERENCES \"auth_users\"(\"id\") ON DELETE CASCADE ON UPDATE NO ACTION\n        `);\n    }\n}\n"],"mappings":";AAEA,IAAaA,uBAAb,MAAaA;CACTC,OAAO;CAEP,MAAaC,GAAGC,aAAyC;AACrD,QAAMA,YAAYC,MAAM;;UAEvB;AACD,QAAMD,YAAYC,MAAM;;UAEvB;AACD,QAAMD,YAAYC,MAAM;;UAEvB;AACD,QAAMD,YAAYC,MAAM;;;;;;;;;;;;;;;;;;UAkBvB;AACD,QAAMD,YAAYC,MAAM;;UAEvB;AACD,QAAMD,YAAYC,MAAM;;UAEvB;AACD,QAAMD,YAAYC,MAAM;;UAEvB;AACD,QAAMD,YAAYC,MAAM;;UAEvB;AACD,QAAMD,YAAYC,MAAM;;UAEvB;AACD,QAAMD,YAAYC,MAAM;;UAEvB;AAED,QAAMD,YAAYC,MAAM;;;UAGvB;AACD,QAAMD,YAAYC,MAAM;;;UAGvB;AACD,QAAMD,YAAYC,MAAM;;;UAGvB;AAED,QAAMD,YAAYC,MAAM;;;UAGvB;AACD,QAAMD,YAAYC,MAAM;;;UAGvB;AACD,QAAMD,YAAYC,MAAM;;;UAGvB;AAGD,QAAMD,YAAYC,MAAM;;UAEvB;AACD,QAAMD,YAAYC,MAAM;;UAEvB;AACD,QAAMD,YAAYC,MAAM;;;UAGvB;AACD,QAAMD,YAAYC,MAAM;;;;UAIvB;AAGD,QAAMD,YAAYC,MAAM;;;UAGvB;AAGD,QAAMD,YAAYC,MAAM;;;;UAIvB;AACD,QAAMD,YAAYC,MAAM;;;;UAIvB;AAED,QAAMD,YAAYC,MAAM;;;UAGvB;AACD,QAAMD,YAAYC,MAAM;;;UAGvB;AAGD,QAAMD,YAAYC,MAAM;;;UAGvB;AACD,QAAMD,YAAYC,MAAM;;;;UAIvB;AACD,QAAMD,YAAYC,MAAM;;;UAGvB;AACD,QAAMD,YAAYC,MAAM;;;UAGvB;AACD,QAAMD,YAAYC,MAAM;;;UAGvB;AACD,QAAMD,YAAYC,MAAM;;;UAGvB;AACD,QAAMD,YAAYC,MAAM;;;UAGvB;;CAGL,MAAaC,KAAKF,aAAyC;AACvD,QAAMA,YAAYC,MAAM;;UAEvB;AACD,QAAMD,YAAYC,MAAM;;UAEvB;AACD,QAAMD,YAAYC,MAAM;;UAEvB;AACD,QAAMD,YAAYC,MAAM;;UAEvB;AACD,QAAMD,YAAYC,MAAM;;UAEvB;AACD,QAAMD,YAAYC,MAAM;;UAEvB;AACD,QAAMD,YAAYC,MAAM;;UAEvB;AACD,QAAMD,YAAYC,MAAM;;UAEvB;AACD,QAAMD,YAAYC,MAAM;;;UAGvB;AACD,QAAMD,YAAYC,MAAM;;;UAGvB;AACD,QAAMD,YAAYC,MAAM;;;UAGvB;AACD,QAAMD,YAAYC,MAAM;;;UAGvB;AACD,QAAMD,YAAYC,MAAM;;UAEvB;AACD,QAAMD,YAAYC,MAAM;;UAEvB;AACD,QAAMD,YAAYC,MAAM;;UAEvB;AAED,QAAMD,YAAYC,MAAM;;;UAGvB;AACD,QAAMD,YAAYC,MAAM;;;UAGvB;AACD,QAAMD,YAAYC,MAAM;;;UAGvB;AAED,QAAMD,YAAYC,MAAM;;;UAGvB;AACD,QAAMD,YAAYC,MAAM;;;UAGvB;AACD,QAAMD,YAAYC,MAAM;;UAEvB;AACD,QAAMD,YAAYC,MAAM;;UAEvB;AACD,QAAMD,YAAYC,MAAM;;UAEvB;AACD,QAAMD,YAAYC,MAAM;;UAEvB;AACD,QAAMD,YAAYC,MAAM;;UAEvB;AACD,QAAMD,YAAYC,MAAM;;;UAGvB;AACD,QAAMD,YAAYC,MAAM;;;;UAIvB;AACD,QAAMD,YAAYC,MAAM;;;UAGvB"}

package/dist/adapters/database/migrations/postgres/1774800953474-Default.d.ts

@@ -0,0 +1,7 @@
+import type { MigrationInterface, QueryRunner } from 'typeorm';
+export declare class Default1774800953474 implements MigrationInterface {
+    name: string;
+    up(queryRunner: QueryRunner): Promise<void>;
+    down(queryRunner: QueryRunner): Promise<void>;
+}
+//# sourceMappingURL=1774800953474-Default.d.ts.map

package/dist/adapters/database/migrations/postgres/1774800953474-Default.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"1774800953474-Default.d.ts","sourceRoot":"","sources":["../../../../../src/adapters/database/migrations/postgres/1774800953474-Default.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,kBAAkB,EAAE,WAAW,EAAE,MAAM,SAAS,CAAC;AAE/D,qBAAa,oBAAqB,YAAW,kBAAkB;IAC3D,IAAI,SAA0B;IAEjB,EAAE,CAAC,WAAW,EAAE,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC;IA+C3C,IAAI,CAAC,WAAW,EAAE,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC;CAoC7D"}

package/dist/adapters/database/migrations/postgres/1774800953474-Default.mjs

@@ -0,0 +1,91 @@
+//#region src/adapters/database/migrations/postgres/1774800953474-Default.ts
+var Default1774800953474 = class {
+	name = "Default1774800953474";
+	async up(queryRunner) {
+		await queryRunner.query(`
+            ALTER TABLE "auth_permissions" DROP CONSTRAINT "FK_b669b08267cf6486c7e44a24fb8"
+        `);
+		await queryRunner.query(`
+            ALTER TABLE "auth_permissions"
+                RENAME COLUMN "policy_id" TO "decision_strategy"
+        `);
+		await queryRunner.query(`
+            CREATE TABLE "auth_permission_policies" (
+                "id" uuid NOT NULL DEFAULT uuid_generate_v4(),
+                "created_at" TIMESTAMP NOT NULL DEFAULT now(),
+                "updated_at" TIMESTAMP NOT NULL DEFAULT now(),
+                "permission_id" uuid NOT NULL,
+                "permission_realm_id" uuid,
+                "policy_id" uuid NOT NULL,
+                "policy_realm_id" uuid,
+                CONSTRAINT "PK_f99fb313ce4a7246530c9931bfb" PRIMARY KEY ("id")
+            )
+        `);
+		await queryRunner.query(`
+            CREATE UNIQUE INDEX "IDX_41ab2228f1cb7778aced673014" ON "auth_permission_policies" ("permission_id", "policy_id")
+        `);
+		await queryRunner.query(`
+            ALTER TABLE "auth_permissions" DROP COLUMN "decision_strategy"
+        `);
+		await queryRunner.query(`
+            ALTER TABLE "auth_permissions"
+            ADD "decision_strategy" character varying(50)
+        `);
+		await queryRunner.query(`
+            ALTER TABLE "auth_permission_policies"
+            ADD CONSTRAINT "FK_f49282ed769970070b9d5df30f3" FOREIGN KEY ("permission_id") REFERENCES "auth_permissions"("id") ON DELETE CASCADE ON UPDATE NO ACTION
+        `);
+		await queryRunner.query(`
+            ALTER TABLE "auth_permission_policies"
+            ADD CONSTRAINT "FK_babb340dda101f2df8334eea5c9" FOREIGN KEY ("permission_realm_id") REFERENCES "auth_realms"("id") ON DELETE CASCADE ON UPDATE NO ACTION
+        `);
+		await queryRunner.query(`
+            ALTER TABLE "auth_permission_policies"
+            ADD CONSTRAINT "FK_f5225aa8083c99b1cd09f4390c7" FOREIGN KEY ("policy_id") REFERENCES "auth_policies"("id") ON DELETE CASCADE ON UPDATE NO ACTION
+        `);
+		await queryRunner.query(`
+            ALTER TABLE "auth_permission_policies"
+            ADD CONSTRAINT "FK_a76f5f6a12317ea0e24a84c1a5b" FOREIGN KEY ("policy_realm_id") REFERENCES "auth_realms"("id") ON DELETE CASCADE ON UPDATE NO ACTION
+        `);
+	}
+	async down(queryRunner) {
+		await queryRunner.query(`
+            ALTER TABLE "auth_permission_policies" DROP CONSTRAINT "FK_a76f5f6a12317ea0e24a84c1a5b"
+        `);
+		await queryRunner.query(`
+            ALTER TABLE "auth_permission_policies" DROP CONSTRAINT "FK_f5225aa8083c99b1cd09f4390c7"
+        `);
+		await queryRunner.query(`
+            ALTER TABLE "auth_permission_policies" DROP CONSTRAINT "FK_babb340dda101f2df8334eea5c9"
+        `);
+		await queryRunner.query(`
+            ALTER TABLE "auth_permission_policies" DROP CONSTRAINT "FK_f49282ed769970070b9d5df30f3"
+        `);
+		await queryRunner.query(`
+            ALTER TABLE "auth_permissions" DROP COLUMN "decision_strategy"
+        `);
+		await queryRunner.query(`
+            ALTER TABLE "auth_permissions"
+            ADD "decision_strategy" uuid
+        `);
+		await queryRunner.query(`
+            DROP INDEX "public"."IDX_41ab2228f1cb7778aced673014"
+        `);
+		await queryRunner.query(`
+            DROP TABLE "auth_permission_policies"
+        `);
+		await queryRunner.query(`
+            ALTER TABLE "auth_permissions"
+                RENAME COLUMN "decision_strategy" TO "policy_id"
+        `);
+		await queryRunner.query(`
+            ALTER TABLE "auth_permissions"
+            ADD CONSTRAINT "FK_b669b08267cf6486c7e44a24fb8" FOREIGN KEY ("policy_id") REFERENCES "auth_policies"("id") ON DELETE
+            SET NULL ON UPDATE NO ACTION
+        `);
+	}
+};
+//#endregion
+export { Default1774800953474 };
+
+//# sourceMappingURL=1774800953474-Default.mjs.map

package/dist/adapters/database/migrations/postgres/1774800953474-Default.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"1774800953474-Default.mjs","names":["Default1774800953474","name","up","queryRunner","query","down"],"sources":["../../../../../src/adapters/database/migrations/postgres/1774800953474-Default.ts"],"sourcesContent":["import type { MigrationInterface, QueryRunner } from 'typeorm';\n\nexport class Default1774800953474 implements MigrationInterface {\n    name = 'Default1774800953474';\n\n    public async up(queryRunner: QueryRunner): Promise<void> {\n        await queryRunner.query(`\n            ALTER TABLE \"auth_permissions\" DROP CONSTRAINT \"FK_b669b08267cf6486c7e44a24fb8\"\n        `);\n        await queryRunner.query(`\n            ALTER TABLE \"auth_permissions\"\n                RENAME COLUMN \"policy_id\" TO \"decision_strategy\"\n        `);\n        await queryRunner.query(`\n            CREATE TABLE \"auth_permission_policies\" (\n                \"id\" uuid NOT NULL DEFAULT uuid_generate_v4(),\n                \"created_at\" TIMESTAMP NOT NULL DEFAULT now(),\n                \"updated_at\" TIMESTAMP NOT NULL DEFAULT now(),\n                \"permission_id\" uuid NOT NULL,\n                \"permission_realm_id\" uuid,\n                \"policy_id\" uuid NOT NULL,\n                \"policy_realm_id\" uuid,\n                CONSTRAINT \"PK_f99fb313ce4a7246530c9931bfb\" PRIMARY KEY (\"id\")\n            )\n        `);\n        await queryRunner.query(`\n            CREATE UNIQUE INDEX \"IDX_41ab2228f1cb7778aced673014\" ON \"auth_permission_policies\" (\"permission_id\", \"policy_id\")\n        `);\n        await queryRunner.query(`\n            ALTER TABLE \"auth_permissions\" DROP COLUMN \"decision_strategy\"\n        `);\n        await queryRunner.query(`\n            ALTER TABLE \"auth_permissions\"\n            ADD \"decision_strategy\" character varying(50)\n        `);\n        await queryRunner.query(`\n            ALTER TABLE \"auth_permission_policies\"\n            ADD CONSTRAINT \"FK_f49282ed769970070b9d5df30f3\" FOREIGN KEY (\"permission_id\") REFERENCES \"auth_permissions\"(\"id\") ON DELETE CASCADE ON UPDATE NO ACTION\n        `);\n        await queryRunner.query(`\n            ALTER TABLE \"auth_permission_policies\"\n            ADD CONSTRAINT \"FK_babb340dda101f2df8334eea5c9\" FOREIGN KEY (\"permission_realm_id\") REFERENCES \"auth_realms\"(\"id\") ON DELETE CASCADE ON UPDATE NO ACTION\n        `);\n        await queryRunner.query(`\n            ALTER TABLE \"auth_permission_policies\"\n            ADD CONSTRAINT \"FK_f5225aa8083c99b1cd09f4390c7\" FOREIGN KEY (\"policy_id\") REFERENCES \"auth_policies\"(\"id\") ON DELETE CASCADE ON UPDATE NO ACTION\n        `);\n        await queryRunner.query(`\n            ALTER TABLE \"auth_permission_policies\"\n            ADD CONSTRAINT \"FK_a76f5f6a12317ea0e24a84c1a5b\" FOREIGN KEY (\"policy_realm_id\") REFERENCES \"auth_realms\"(\"id\") ON DELETE CASCADE ON UPDATE NO ACTION\n        `);\n    }\n    public async down(queryRunner: QueryRunner): Promise<void> {\n        await queryRunner.query(`\n            ALTER TABLE \"auth_permission_policies\" DROP CONSTRAINT \"FK_a76f5f6a12317ea0e24a84c1a5b\"\n        `);\n        await queryRunner.query(`\n            ALTER TABLE \"auth_permission_policies\" DROP CONSTRAINT \"FK_f5225aa8083c99b1cd09f4390c7\"\n        `);\n        await queryRunner.query(`\n            ALTER TABLE \"auth_permission_policies\" DROP CONSTRAINT \"FK_babb340dda101f2df8334eea5c9\"\n        `);\n        await queryRunner.query(`\n            ALTER TABLE \"auth_permission_policies\" DROP CONSTRAINT \"FK_f49282ed769970070b9d5df30f3\"\n        `);\n        await queryRunner.query(`\n            ALTER TABLE \"auth_permissions\" DROP COLUMN \"decision_strategy\"\n        `);\n        await queryRunner.query(`\n            ALTER TABLE \"auth_permissions\"\n            ADD \"decision_strategy\" uuid\n        `);\n        await queryRunner.query(`\n            DROP INDEX \"public\".\"IDX_41ab2228f1cb7778aced673014\"\n        `);\n        await queryRunner.query(`\n            DROP TABLE \"auth_permission_policies\"\n        `);\n        await queryRunner.query(`\n            ALTER TABLE \"auth_permissions\"\n                RENAME COLUMN \"decision_strategy\" TO \"policy_id\"\n        `);\n        await queryRunner.query(`\n            ALTER TABLE \"auth_permissions\"\n            ADD CONSTRAINT \"FK_b669b08267cf6486c7e44a24fb8\" FOREIGN KEY (\"policy_id\") REFERENCES \"auth_policies\"(\"id\") ON DELETE\n            SET NULL ON UPDATE NO ACTION\n        `);\n    }\n}\n"],"mappings":";AAEA,IAAaA,uBAAb,MAAaA;CACTC,OAAO;CAEP,MAAaC,GAAGC,aAAyC;AACrD,QAAMA,YAAYC,MAAM;;UAEvB;AACD,QAAMD,YAAYC,MAAM;;;UAGvB;AACD,QAAMD,YAAYC,MAAM;;;;;;;;;;;UAWvB;AACD,QAAMD,YAAYC,MAAM;;UAEvB;AACD,QAAMD,YAAYC,MAAM;;UAEvB;AACD,QAAMD,YAAYC,MAAM;;;UAGvB;AACD,QAAMD,YAAYC,MAAM;;;UAGvB;AACD,QAAMD,YAAYC,MAAM;;;UAGvB;AACD,QAAMD,YAAYC,MAAM;;;UAGvB;AACD,QAAMD,YAAYC,MAAM;;;UAGvB;;CAEL,MAAaC,KAAKF,aAAyC;AACvD,QAAMA,YAAYC,MAAM;;UAEvB;AACD,QAAMD,YAAYC,MAAM;;UAEvB;AACD,QAAMD,YAAYC,MAAM;;UAEvB;AACD,QAAMD,YAAYC,MAAM;;UAEvB;AACD,QAAMD,YAAYC,MAAM;;UAEvB;AACD,QAAMD,YAAYC,MAAM;;;UAGvB;AACD,QAAMD,YAAYC,MAAM;;UAEvB;AACD,QAAMD,YAAYC,MAAM;;UAEvB;AACD,QAAMD,YAAYC,MAAM;;;UAGvB;AACD,QAAMD,YAAYC,MAAM;;;;UAIvB"}

package/dist/adapters/http/adapters/index.d.ts

@@ -0,0 +1,2 @@
+export * from './oauth2/index.ts';
+//# sourceMappingURL=index.d.ts.map

package/dist/adapters/http/adapters/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/adapters/http/adapters/index.ts"],"names":[],"mappings":"AAOA,cAAc,mBAAmB,CAAC"}

package/dist/adapters/http/adapters/index.mjs

@@ -0,0 +1,11 @@
+import { HTTPOAuth2Authorizer } from "./oauth2/authorization/module.mjs";
+import { extractClientCredentialsFromRequest } from "./oauth2/grant-types/utils/credentials.mjs";
+import { guessOauth2GrantTypeByRequest } from "./oauth2/grant-types/utils/guess.mjs";
+import { HTTPOAuth2AuthorizeGrant } from "./oauth2/grant-types/authorize.mjs";
+import { HTTPClientCredentialsGrant } from "./oauth2/grant-types/client-credentials.mjs";
+import { HTTPOAuth2IdentityGrantType } from "./oauth2/grant-types/identity.mjs";
+import { HTTPPasswordGrant } from "./oauth2/grant-types/password.mjs";
+import { HTTPOAuth2RefreshTokenGrant } from "./oauth2/grant-types/refresh_token.mjs";
+import { HTTPRobotCredentialsGrant } from "./oauth2/grant-types/robot-credentials.mjs";
+import "./oauth2/index.mjs";
+export { HTTPClientCredentialsGrant, HTTPOAuth2AuthorizeGrant, HTTPOAuth2Authorizer, HTTPOAuth2IdentityGrantType, HTTPOAuth2RefreshTokenGrant, HTTPPasswordGrant, HTTPRobotCredentialsGrant, extractClientCredentialsFromRequest, guessOauth2GrantTypeByRequest };

package/dist/adapters/http/adapters/oauth2/authorization/index.d.ts

@@ -0,0 +1,2 @@
+export * from './module.ts';
+//# sourceMappingURL=index.d.ts.map

package/dist/adapters/http/adapters/oauth2/authorization/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../../src/adapters/http/adapters/oauth2/authorization/index.ts"],"names":[],"mappings":"AAOA,cAAc,aAAa,CAAC"}

package/dist/adapters/http/adapters/oauth2/authorization/index.mjs

@@ -0,0 +1,2 @@
+import { HTTPOAuth2Authorizer } from "./module.mjs";
+export { HTTPOAuth2Authorizer };

package/dist/adapters/http/adapters/oauth2/authorization/module.d.ts

@@ -0,0 +1,21 @@
+import type { Request } from 'routup';
+import type { OAuth2AuthorizationCodeRequest } from '@authup/core-kit';
+import { RoutupContainerAdapter } from '@validup/adapter-routup';
+import type { IOAuth2AuthorizationCodeRequestVerifier, OAuth2AuthorizationResult } from '../../../../../core/index.ts';
+import { OAuth2Authorization } from '../../../../../core/index.ts';
+import type { HTTPOAuth2AuthorizationManagerContext } from './types.ts';
+export declare class HTTPOAuth2Authorizer extends OAuth2Authorization {
+    protected codeRequestVerifier: IOAuth2AuthorizationCodeRequestVerifier;
+    protected requestValidator: RoutupContainerAdapter<OAuth2AuthorizationCodeRequest>;
+    constructor(ctx: HTTPOAuth2AuthorizationManagerContext);
+    authorizeWithRequest(req: Request): Promise<OAuth2AuthorizationResult>;
+    /**
+     * Validate authorization request.
+     *
+     * @throws OAuth2Error
+     *
+     * @param req
+     */
+    validateWithRequest(req: Request): Promise<OAuth2AuthorizationCodeRequest>;
+}
+//# sourceMappingURL=module.d.ts.map

package/dist/adapters/http/adapters/oauth2/authorization/module.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"module.d.ts","sourceRoot":"","sources":["../../../../../../src/adapters/http/adapters/oauth2/authorization/module.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,QAAQ,CAAC;AACtC,OAAO,KAAK,EAAE,8BAA8B,EAAE,MAAM,kBAAkB,CAAC;AACvE,OAAO,EAAE,sBAAsB,EAAE,MAAM,yBAAyB,CAAC;AACjE,OAAO,KAAK,EAAE,uCAAuC,EAAE,yBAAyB,EAAE,MAAM,8BAA8B,CAAC;AACvH,OAAO,EAAE,mBAAmB,EAA2C,MAAM,8BAA8B,CAAC;AAE5G,OAAO,KAAK,EAAE,qCAAqC,EAAE,MAAM,YAAY,CAAC;AAExE,qBAAa,oBAAqB,SAAQ,mBAAmB;IACzD,SAAS,CAAC,mBAAmB,EAAG,uCAAuC,CAAC;IAExE,SAAS,CAAC,gBAAgB,EAAG,sBAAsB,CAAC,8BAA8B,CAAC,CAAC;gBAExE,GAAG,EAAE,qCAAqC;IAShD,oBAAoB,CAAC,GAAG,EAAE,OAAO,GAAI,OAAO,CAAC,yBAAyB,CAAC;IAU7E;;;;;;OAMG;IACG,mBAAmB,CACrB,GAAG,EAAE,OAAO,GACZ,OAAO,CAAC,8BAA8B,CAAC;CAG9C"}

package/dist/adapters/http/adapters/oauth2/authorization/module.mjs

@@ -0,0 +1,36 @@
+import { OAuth2AuthorizationCodeRequestValidator } from "../../../../../core/oauth2/authorization/code-request/validator.mjs";
+import { OAuth2Authorization } from "../../../../../core/oauth2/authorization/module.mjs";
+import "../../../../../core/index.mjs";
+import { useRequestIdentityOrFail } from "../../../request/helpers/identity.mjs";
+import "../../../request/index.mjs";
+import { RoutupContainerAdapter } from "@validup/adapter-routup";
+//#region src/adapters/http/adapters/oauth2/authorization/module.ts
+var HTTPOAuth2Authorizer = class extends OAuth2Authorization {
+	codeRequestVerifier;
+	requestValidator;
+	constructor(ctx) {
+		super(ctx);
+		this.codeRequestVerifier = ctx.codeRequestVerifier;
+		const validator = new OAuth2AuthorizationCodeRequestValidator();
+		this.requestValidator = new RoutupContainerAdapter(validator);
+	}
+	async authorizeWithRequest(req) {
+		const codeRequestValidated = await this.validateWithRequest(req);
+		const { data } = await this.codeRequestVerifier.verify(codeRequestValidated);
+		const identity = useRequestIdentityOrFail(req);
+		return this.authorize(data, identity.raw);
+	}
+	/**
+	* Validate authorization request.
+	*
+	* @throws OAuth2Error
+	*
+	* @param req
+	*/ async validateWithRequest(req) {
+		return this.requestValidator.run(req, { locations: ["body", "query"] });
+	}
+};
+//#endregion
+export { HTTPOAuth2Authorizer };
+
+//# sourceMappingURL=module.mjs.map

package/dist/adapters/http/adapters/oauth2/authorization/module.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"module.mjs","names":["RoutupContainerAdapter","OAuth2Authorization","OAuth2AuthorizationCodeRequestValidator","useRequestIdentityOrFail","HTTPOAuth2Authorizer","codeRequestVerifier","requestValidator","ctx","validator","authorizeWithRequest","req","codeRequestValidated","validateWithRequest","data","verify","identity","authorize","raw","run","locations"],"sources":["../../../../../../src/adapters/http/adapters/oauth2/authorization/module.ts"],"sourcesContent":["/*\n * Copyright (c) 2025.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport type { Request } from 'routup';\nimport type { OAuth2AuthorizationCodeRequest } from '@authup/core-kit';\nimport { RoutupContainerAdapter } from '@validup/adapter-routup';\nimport type { IOAuth2AuthorizationCodeRequestVerifier, OAuth2AuthorizationResult } from '../../../../../core/index.ts';\nimport { OAuth2Authorization, OAuth2AuthorizationCodeRequestValidator } from '../../../../../core/index.ts';\nimport { useRequestIdentityOrFail } from '../../../request/index.ts';\nimport type { HTTPOAuth2AuthorizationManagerContext } from './types.ts';\n\nexport class HTTPOAuth2Authorizer extends OAuth2Authorization {\n    protected codeRequestVerifier : IOAuth2AuthorizationCodeRequestVerifier;\n\n    protected requestValidator : RoutupContainerAdapter<OAuth2AuthorizationCodeRequest>;\n\n    constructor(ctx: HTTPOAuth2AuthorizationManagerContext) {\n        super(ctx);\n\n        this.codeRequestVerifier = ctx.codeRequestVerifier;\n\n        const validator = new OAuth2AuthorizationCodeRequestValidator();\n        this.requestValidator = new RoutupContainerAdapter(validator);\n    }\n\n    async authorizeWithRequest(req: Request) : Promise<OAuth2AuthorizationResult> {\n        const codeRequestValidated = await this.validateWithRequest(req);\n\n        const { data } = await this.codeRequestVerifier.verify(codeRequestValidated);\n\n        const identity = useRequestIdentityOrFail(req);\n\n        return this.authorize(data, identity.raw);\n    }\n\n    /**\n     * Validate authorization request.\n     *\n     * @throws OAuth2Error\n     *\n     * @param req\n     */\n    async validateWithRequest(\n        req: Request,\n    ) : Promise<OAuth2AuthorizationCodeRequest> {\n        return this.requestValidator.run(req, { locations: ['body', 'query'] });\n    }\n}\n"],"mappings":";;;;;;;AAeA,IAAaI,uBAAb,cAA0CH,oBAAAA;CAC5BI;CAEAC;CAEV,YAAYC,KAA4C;AACpD,QAAMA,IAAAA;AAEN,OAAKF,sBAAsBE,IAAIF;EAE/B,MAAMG,YAAY,IAAIN,yCAAAA;AACtB,OAAKI,mBAAmB,IAAIN,uBAAuBQ,UAAAA;;CAGvD,MAAMC,qBAAqBC,KAAmD;EAC1E,MAAMC,uBAAuB,MAAM,KAAKC,oBAAoBF,IAAAA;EAE5D,MAAM,EAAEG,SAAS,MAAM,KAAKR,oBAAoBS,OAAOH,qBAAAA;EAEvD,MAAMI,WAAWZ,yBAAyBO,IAAAA;AAE1C,SAAO,KAAKM,UAAUH,MAAME,SAASE,IAAG;;;;;;;;IAU5C,MAAML,oBACFF,KACwC;AACxC,SAAO,KAAKJ,iBAAiBY,IAAIR,KAAK,EAAES,WAAW,CAAC,QAAQ,QAAQ,EAAC,CAAA"}

package/dist/adapters/http/adapters/oauth2/authorization/types.d.ts

@@ -0,0 +1,5 @@
+import type { IOAuth2AuthorizationCodeRequestVerifier, OAuth2AuthorizationManagerContext } from '../../../../../core/index.ts';
+export type HTTPOAuth2AuthorizationManagerContext = OAuth2AuthorizationManagerContext & {
+    codeRequestVerifier: IOAuth2AuthorizationCodeRequestVerifier;
+};
+//# sourceMappingURL=types.d.ts.map

package/dist/adapters/http/adapters/oauth2/authorization/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../../../../src/adapters/http/adapters/oauth2/authorization/types.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,uCAAuC,EAAE,iCAAiC,EAAE,MAAM,8BAA8B,CAAC;AAE/H,MAAM,MAAM,qCAAqC,GAAG,iCAAiC,GAAG;IACpF,mBAAmB,EAAE,uCAAuC,CAAC;CAChE,CAAC"}

package/dist/adapters/http/adapters/oauth2/authorization/types.mjs

@@ -0,0 +1 @@
+export {};

package/dist/adapters/http/adapters/oauth2/grant-types/authorize.d.ts

@@ -0,0 +1,13 @@
+import type { OAuth2TokenGrantResponse } from '@authup/specs';
+import type { Request } from 'routup';
+import { OAuth2AuthorizeGrant } from '../../../../../core/index.ts';
+import type { IOAuth2AuthorizationCodeVerifier, OAuth2ClientAuthenticator } from '../../../../../core/index.ts';
+import type { HTTPOAuth2AuthorizeGrantContext, IHTTPOAuth2Grant } from './types.ts';
+export declare class HTTPOAuth2AuthorizeGrant extends OAuth2AuthorizeGrant implements IHTTPOAuth2Grant {
+    protected codeVerifier: IOAuth2AuthorizationCodeVerifier;
+    protected clientAuthenticator: OAuth2ClientAuthenticator;
+    constructor(ctx: HTTPOAuth2AuthorizeGrantContext);
+    runWithRequest(req: Request): Promise<OAuth2TokenGrantResponse>;
+    protected extractParam(req: Request, key: string): string | undefined;
+}
+//# sourceMappingURL=authorize.d.ts.map

package/dist/adapters/http/adapters/oauth2/grant-types/authorize.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"authorize.d.ts","sourceRoot":"","sources":["../../../../../../src/adapters/http/adapters/oauth2/grant-types/authorize.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,eAAe,CAAC;AAI9D,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,QAAQ,CAAC;AAEtC,OAAO,EAAE,oBAAoB,EAAE,MAAM,8BAA8B,CAAC;AACpE,OAAO,KAAK,EACR,gCAAgC,EAChC,yBAAyB,EAC5B,MAAM,8BAA8B,CAAC;AACtC,OAAO,KAAK,EAAE,+BAA+B,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAC;AAGpF,qBAAa,wBAAyB,SAAQ,oBAAqB,YAAW,gBAAgB;IAC1F,SAAS,CAAC,YAAY,EAAG,gCAAgC,CAAC;IAE1D,SAAS,CAAC,mBAAmB,EAAG,yBAAyB,CAAC;gBAE9C,GAAG,EAAE,+BAA+B;IAO1C,cAAc,CAAC,GAAG,EAAE,OAAO,GAAG,OAAO,CAAC,wBAAwB,CAAC;IA0BrE,SAAS,CAAC,YAAY,CAAC,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,GAAI,MAAM,GAAG,SAAS;CAUzE"}

package/dist/adapters/http/adapters/oauth2/grant-types/authorize.mjs

@@ -0,0 +1,46 @@
+import { OAuth2AuthorizeGrant } from "../../../../../core/oauth2/grant-types/authorize.mjs";
+import "../../../../../core/index.mjs";
+import { extractClientCredentialsFromRequest } from "./utils/credentials.mjs";
+import "./utils/index.mjs";
+import { OAuth2Error } from "@authup/specs";
+import { getRequestHeader, getRequestIP } from "routup";
+import { useRequestBody } from "@routup/basic/body";
+import { useRequestQuery } from "@routup/basic/query";
+//#region src/adapters/http/adapters/oauth2/grant-types/authorize.ts
+var HTTPOAuth2AuthorizeGrant = class extends OAuth2AuthorizeGrant {
+	codeVerifier;
+	clientAuthenticator;
+	constructor(ctx) {
+		super(ctx);
+		this.codeVerifier = ctx.codeVerifier;
+		this.clientAuthenticator = ctx.clientAuthenticator;
+	}
+	async runWithRequest(req) {
+		const code = this.extractParam(req, "code");
+		const redirectUri = this.extractParam(req, "redirect_uri");
+		const codeVerifier = this.extractParam(req, "code_verifier");
+		if (!code) throw OAuth2Error.requestInvalid();
+		const { clientId, clientSecret } = extractClientCredentialsFromRequest(req);
+		const realmId = this.extractParam(req, "realm_id");
+		const client = await this.clientAuthenticator.authenticate(clientId, clientSecret, realmId);
+		const entity = await this.codeVerifier.verify(code, {
+			redirectUri,
+			codeVerifier,
+			clientId: client.id,
+			clientIsPublic: !client.is_confidential
+		});
+		return this.runWith(entity, {
+			ipAddress: getRequestIP(req, { trustProxy: true }),
+			userAgent: getRequestHeader(req, "user-agent")
+		});
+	}
+	extractParam(req, key) {
+		let value = useRequestBody(req, key);
+		if (!value) value = useRequestQuery(req, key);
+		return typeof value === "string" && value.length > 0 ? value : void 0;
+	}
+};
+//#endregion
+export { HTTPOAuth2AuthorizeGrant };
+
+//# sourceMappingURL=authorize.mjs.map

package/dist/adapters/http/adapters/oauth2/grant-types/authorize.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"authorize.mjs","names":["OAuth2Error","useRequestBody","useRequestQuery","getRequestHeader","getRequestIP","OAuth2AuthorizeGrant","extractClientCredentialsFromRequest","HTTPOAuth2AuthorizeGrant","codeVerifier","clientAuthenticator","ctx","runWithRequest","req","code","extractParam","redirectUri","requestInvalid","clientId","clientSecret","realmId","client","authenticate","entity","verify","id","clientIsPublic","is_confidential","runWith","ipAddress","trustProxy","userAgent","key","value","length","undefined"],"sources":["../../../../../../src/adapters/http/adapters/oauth2/grant-types/authorize.ts"],"sourcesContent":["/*\n * Copyright (c) 2025-2026.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport type { OAuth2TokenGrantResponse } from '@authup/specs';\nimport { OAuth2Error } from '@authup/specs';\nimport { useRequestBody } from '@routup/basic/body';\nimport { useRequestQuery } from '@routup/basic/query';\nimport type { Request } from 'routup';\nimport { getRequestHeader, getRequestIP } from 'routup';\nimport { OAuth2AuthorizeGrant } from '../../../../../core/index.ts';\nimport type {\n    IOAuth2AuthorizationCodeVerifier,\n    OAuth2ClientAuthenticator,\n} from '../../../../../core/index.ts';\nimport type { HTTPOAuth2AuthorizeGrantContext, IHTTPOAuth2Grant } from './types.ts';\nimport { extractClientCredentialsFromRequest } from './utils/index.ts';\n\nexport class HTTPOAuth2AuthorizeGrant extends OAuth2AuthorizeGrant implements IHTTPOAuth2Grant {\n    protected codeVerifier : IOAuth2AuthorizationCodeVerifier;\n\n    protected clientAuthenticator : OAuth2ClientAuthenticator;\n\n    constructor(ctx: HTTPOAuth2AuthorizeGrantContext) {\n        super(ctx);\n\n        this.codeVerifier = ctx.codeVerifier;\n        this.clientAuthenticator = ctx.clientAuthenticator;\n    }\n\n    async runWithRequest(req: Request): Promise<OAuth2TokenGrantResponse> {\n        const code = this.extractParam(req, 'code');\n        const redirectUri = this.extractParam(req, 'redirect_uri');\n        const codeVerifier = this.extractParam(req, 'code_verifier');\n        if (!code) {\n            throw OAuth2Error.requestInvalid();\n        }\n\n        const { clientId, clientSecret } = extractClientCredentialsFromRequest(req);\n        const realmId = this.extractParam(req, 'realm_id');\n\n        const client = await this.clientAuthenticator.authenticate(clientId, clientSecret, realmId);\n\n        const entity = await this.codeVerifier.verify(code, {\n            redirectUri,\n            codeVerifier,\n            clientId: client.id,\n            clientIsPublic: !client.is_confidential,\n        });\n\n        return this.runWith(entity, {\n            ipAddress: getRequestIP(req, { trustProxy: true }),\n            userAgent: getRequestHeader(req, 'user-agent'),\n        });\n    }\n\n    protected extractParam(req: Request, key: string) : string | undefined {\n        let value : unknown = useRequestBody(req, key);\n        if (!value) {\n            value = useRequestQuery(req, key);\n        }\n\n        return typeof value === 'string' && value.length > 0 ?\n            value :\n            undefined;\n    }\n}\n"],"mappings":";;;;;;;;;AAqBA,IAAaO,2BAAb,cAA8CF,qBAAAA;CAChCG;CAEAC;CAEV,YAAYC,KAAsC;AAC9C,QAAMA,IAAAA;AAEN,OAAKF,eAAeE,IAAIF;AACxB,OAAKC,sBAAsBC,IAAID;;CAGnC,MAAME,eAAeC,KAAiD;EAClE,MAAMC,OAAO,KAAKC,aAAaF,KAAK,OAAA;EACpC,MAAMG,cAAc,KAAKD,aAAaF,KAAK,eAAA;EAC3C,MAAMJ,eAAe,KAAKM,aAAaF,KAAK,gBAAA;AAC5C,MAAI,CAACC,KACD,OAAMb,YAAYgB,gBAAc;EAGpC,MAAM,EAAEC,UAAUC,iBAAiBZ,oCAAoCM,IAAAA;EACvE,MAAMO,UAAU,KAAKL,aAAaF,KAAK,WAAA;EAEvC,MAAMQ,SAAS,MAAM,KAAKX,oBAAoBY,aAAaJ,UAAUC,cAAcC,QAAAA;EAEnF,MAAMG,SAAS,MAAM,KAAKd,aAAae,OAAOV,MAAM;GAChDE;GACAP;GACAS,UAAUG,OAAOI;GACjBC,gBAAgB,CAACL,OAAOM;GAC5B,CAAA;AAEA,SAAO,KAAKC,QAAQL,QAAQ;GACxBM,WAAWxB,aAAaQ,KAAK,EAAEiB,YAAY,MAAK,CAAA;GAChDC,WAAW3B,iBAAiBS,KAAK,aAAA;GACrC,CAAA;;CAGME,aAAaF,KAAcmB,KAAkC;EACnE,IAAIC,QAAkB/B,eAAeW,KAAKmB,IAAAA;AAC1C,MAAI,CAACC,MACDA,SAAQ9B,gBAAgBU,KAAKmB,IAAAA;AAGjC,SAAO,OAAOC,UAAU,YAAYA,MAAMC,SAAS,IAC/CD,QACAE,KAAAA"}

package/dist/adapters/http/adapters/oauth2/grant-types/client-credentials.d.ts

@@ -0,0 +1,12 @@
+import type { OAuth2TokenGrantResponse } from '@authup/specs';
+import type { Client } from '@authup/core-kit';
+import type { Request } from 'routup';
+import type { ICredentialsAuthenticator } from '../../../../../core/index.ts';
+import { ClientCredentialsGrant } from '../../../../../core/index.ts';
+import type { HTTPOAuth2ClientCredentialsGrantContext, IHTTPOAuth2Grant } from './types.ts';
+export declare class HTTPClientCredentialsGrant extends ClientCredentialsGrant implements IHTTPOAuth2Grant {
+    protected authenticator: ICredentialsAuthenticator<Client>;
+    constructor(ctx: HTTPOAuth2ClientCredentialsGrantContext);
+    runWithRequest(req: Request): Promise<OAuth2TokenGrantResponse>;
+}
+//# sourceMappingURL=client-credentials.d.ts.map

package/dist/adapters/http/adapters/oauth2/grant-types/client-credentials.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"client-credentials.d.ts","sourceRoot":"","sources":["../../../../../../src/adapters/http/adapters/oauth2/grant-types/client-credentials.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,eAAe,CAAC;AAE9D,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAC;AAE/C,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,QAAQ,CAAC;AAEtC,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,8BAA8B,CAAC;AAC9E,OAAO,EAAE,sBAAsB,EAAE,MAAM,8BAA8B,CAAC;AACtE,OAAO,KAAK,EAAE,uCAAuC,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAC;AAG5F,qBAAa,0BAA2B,SAAQ,sBAAuB,YAAW,gBAAgB;IAC9F,SAAS,CAAC,aAAa,EAAG,yBAAyB,CAAC,MAAM,CAAC,CAAC;gBAEhD,GAAG,EAAE,uCAAuC;IAMlD,cAAc,CAAC,GAAG,EAAE,OAAO,GAAG,OAAO,CAAC,wBAAwB,CAAC;CAexE"}