@authup/server-core 1.0.0-beta.4 → 1.0.0-beta.40

package/dist/adapters/http/controllers/workflows/token/utils/extract.mjs

@@ -0,0 +1,27 @@
+import { useRequestToken } from "../../../../request/helpers/token.mjs";
+import "../../../../request/index.mjs";
+import { TokenRequestValidator } from "./validator.mjs";
+import { ValidupError, buildErrorMessageForAttribute, defineIssueItem } from "validup";
+import { RoutupContainerAdapter } from "@validup/adapter-routup";
+//#region src/adapters/http/controllers/workflows/token/utils/extract.ts
+async function extractTokenFromRequest(req) {
+	let token;
+	try {
+		token = (await new RoutupContainerAdapter(new TokenRequestValidator()).run(req, { locations: [
+			"body",
+			"query",
+			"params"
+		] })).token;
+	} catch {
+		token = useRequestToken(req);
+	}
+	if (!token) throw new ValidupError([defineIssueItem({
+		path: ["token"],
+		message: buildErrorMessageForAttribute("token")
+	})]);
+	return token;
+}
+//#endregion
+export { extractTokenFromRequest };
+
+//# sourceMappingURL=extract.mjs.map

package/dist/adapters/http/controllers/workflows/token/utils/extract.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"extract.mjs","names":["RoutupContainerAdapter","ValidupError","buildErrorMessageForAttribute","defineIssueItem","useRequestToken","TokenRequestValidator","extractTokenFromRequest","req","token","validator","validatorAdapter","data","run","locations","path","message"],"sources":["../../../../../../../src/adapters/http/controllers/workflows/token/utils/extract.ts"],"sourcesContent":["/*\n * Copyright (c) 2024.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport type { Request } from 'routup';\nimport { RoutupContainerAdapter } from '@validup/adapter-routup';\nimport { ValidupError, buildErrorMessageForAttribute, defineIssueItem } from 'validup';\nimport { useRequestToken } from '../../../../request/index.ts';\nimport { TokenRequestValidator } from './validator.ts';\n\nexport async function extractTokenFromRequest(req: Request) : Promise<string> {\n    let token : string | undefined;\n\n    try {\n        const validator = new TokenRequestValidator();\n        const validatorAdapter = new RoutupContainerAdapter(validator);\n        const data = await validatorAdapter.run(req, { locations: ['body', 'query', 'params'] });\n\n        token = data.token;\n    } catch {\n        token = useRequestToken(req);\n    }\n\n    if (!token) {\n        throw new ValidupError([\n            defineIssueItem({\n                path: ['token'],\n                message: buildErrorMessageForAttribute('token'),\n            }),\n        ]);\n    }\n\n    return token;\n}\n"],"mappings":";;;;;;AAaA,eAAsBM,wBAAwBC,KAAY;CACtD,IAAIC;AAEJ,KAAI;AAKAA,WAAQG,MAFWD,IADUV,uBAAuBS,IAD9BJ,uBAC8BI,CACjCC,CAAiBE,IAAIL,KAAK,EAAEM,WAAW;GAAC;GAAQ;GAAS;GAAS,EAAC,CAAA,EAEzEL;SACT;AACJA,UAAQJ,gBAAgBG,IAAAA;;AAG5B,KAAI,CAACC,MACD,OAAM,IAAIP,aAAa,CACnBE,gBAAgB;EACZW,MAAM,CAAC,QAAQ;EACfC,SAASb,8BAA8B,QAAA;EAC3C,CAAA,CACH,CAAA;AAGL,QAAOM"}

package/dist/adapters/http/controllers/workflows/token/utils/index.d.ts

@@ -0,0 +1,3 @@
+export * from './extract.ts';
+export * from './validator.ts';
+//# sourceMappingURL=index.d.ts.map

package/dist/adapters/http/controllers/workflows/token/utils/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../../../src/adapters/http/controllers/workflows/token/utils/index.ts"],"names":[],"mappings":"AAOA,cAAc,cAAc,CAAC;AAC7B,cAAc,gBAAgB,CAAC"}

package/dist/adapters/http/controllers/workflows/token/utils/index.mjs

@@ -0,0 +1,3 @@
+import { TokenRequestValidator } from "./validator.mjs";
+import { extractTokenFromRequest } from "./extract.mjs";
+export { TokenRequestValidator, extractTokenFromRequest };

package/dist/adapters/http/controllers/workflows/token/utils/validator.d.ts

@@ -0,0 +1,7 @@
+import { Container } from 'validup';
+export declare class TokenRequestValidator extends Container<{
+    token: string;
+}> {
+    protected initialize(): void;
+}
+//# sourceMappingURL=validator.d.ts.map

package/dist/adapters/http/controllers/workflows/token/utils/validator.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"validator.d.ts","sourceRoot":"","sources":["../../../../../../../src/adapters/http/controllers/workflows/token/utils/validator.ts"],"names":[],"mappings":"AAQA,OAAO,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AAEpC,qBAAa,qBAAsB,SAAQ,SAAS,CAAC;IAAE,KAAK,EAAE,MAAM,CAAA;CAAE,CAAC;IACnE,SAAS,CAAC,UAAU;CAkBvB"}

package/dist/adapters/http/controllers/workflows/token/utils/validator.mjs

@@ -0,0 +1,18 @@
+import { Container } from "validup";
+import { createValidationChain, createValidator } from "@validup/adapter-validator";
+//#region src/adapters/http/controllers/workflows/token/utils/validator.ts
+var TokenRequestValidator = class extends Container {
+	initialize() {
+		super.initialize();
+		this.mount("token", createValidator(() => {
+			return createValidationChain().exists().notEmpty().isString().isLength({
+				min: 16,
+				max: 2048
+			});
+		}));
+	}
+};
+//#endregion
+export { TokenRequestValidator };
+
+//# sourceMappingURL=validator.mjs.map

package/dist/adapters/http/controllers/workflows/token/utils/validator.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"validator.mjs","names":["createValidationChain","createValidator","Container","TokenRequestValidator","initialize","mount","chain","exists","notEmpty","isString","isLength","min","max"],"sources":["../../../../../../../src/adapters/http/controllers/workflows/token/utils/validator.ts"],"sourcesContent":["/*\n * Copyright (c) 2024.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport { createValidationChain, createValidator } from '@validup/adapter-validator';\nimport { Container } from 'validup';\n\nexport class TokenRequestValidator extends Container<{ token: string }> {\n    protected initialize() {\n        super.initialize();\n\n        this.mount(\n            'token',\n            createValidator(() => {\n                const chain = createValidationChain();\n                return chain\n                    .exists()\n                    .notEmpty()\n                    .isString()\n                    .isLength({\n                        min: 16,\n                        max: 2048, \n                    });\n            }),\n        );\n    }\n}\n"],"mappings":";;;AAUA,IAAaG,wBAAb,cAA2CD,UAAAA;CAC7BE,aAAa;AACnB,QAAMA,YAAAA;AAEN,OAAKC,MACD,SACAJ,sBAAgB;AAEZ,UADcD,uBACPM,CACFC,QAAM,CACNC,UAAQ,CACRC,UAAQ,CACRC,SAAS;IACNC,KAAK;IACLC,KAAK;IACT,CAAA;IACR,CAAA"}

package/dist/adapters/http/index.d.ts

@@ -0,0 +1,7 @@
+export * from './adapters/index.ts';
+export * from './controllers/index.ts';
+export * from './middleware/index.ts';
+export * from './request/index.ts';
+export * from './server/index.ts';
+export * from './swagger/index.ts';
+//# sourceMappingURL=index.d.ts.map

package/dist/adapters/http/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/adapters/http/index.ts"],"names":[],"mappings":"AAOA,cAAc,qBAAqB,CAAC;AACpC,cAAc,wBAAwB,CAAC;AACvC,cAAc,uBAAuB,CAAC;AACtC,cAAc,oBAAoB,CAAC;AACnC,cAAc,mBAAmB,CAAC;AAClC,cAAc,oBAAoB,CAAC"}

package/dist/adapters/http/index.mjs

@@ -0,0 +1,82 @@
+import { RequestHandlerOperation } from "./request/constants.mjs";
+import { setRequestPermissionEvaluator, useRequestPermissionEvaluator } from "./request/permission/helper.mjs";
+import { RequestIdentity, isRequestIdentityMasterRealmMember, setRequestIdentity, useRequestIdentity, useRequestIdentityOrFail } from "./request/helpers/identity.mjs";
+import { buildActorContext } from "./request/helpers/actor.mjs";
+import { getRequestBodyRealmID } from "./request/helpers/body-realm-id.mjs";
+import { getRequestParamID, getRequestStringParam, getRequestStringParamOrFail, useRequestParamID } from "./request/helpers/param-id.mjs";
+import { setRequestScopes, useRequestScopes } from "./request/helpers/scopes.mjs";
+import { setRequestToken, useRequestToken } from "./request/helpers/token.mjs";
+import { RequestPermissionEvaluator } from "./request/permission/module.mjs";
+import "./request/index.mjs";
+import { HTTPOAuth2Authorizer } from "./adapters/oauth2/authorization/module.mjs";
+import { extractClientCredentialsFromRequest } from "./adapters/oauth2/grant-types/utils/credentials.mjs";
+import { guessOauth2GrantTypeByRequest } from "./adapters/oauth2/grant-types/utils/guess.mjs";
+import { HTTPOAuth2AuthorizeGrant } from "./adapters/oauth2/grant-types/authorize.mjs";
+import { HTTPClientCredentialsGrant } from "./adapters/oauth2/grant-types/client-credentials.mjs";
+import { HTTPOAuth2IdentityGrantType } from "./adapters/oauth2/grant-types/identity.mjs";
+import { HTTPPasswordGrant } from "./adapters/oauth2/grant-types/password.mjs";
+import { HTTPOAuth2RefreshTokenGrant } from "./adapters/oauth2/grant-types/refresh_token.mjs";
+import { HTTPRobotCredentialsGrant } from "./adapters/oauth2/grant-types/robot-credentials.mjs";
+import "./adapters/index.mjs";
+import { AuthorizationMiddleware } from "./middleware/built-in/authorization/module.mjs";
+import { createAuthorizationMiddleware } from "./middleware/built-in/authorization/factory.mjs";
+import { ForceLoggedInMiddleware } from "./middleware/built-in/loggedin/module.mjs";
+import { ForceUserLoggedInMiddleware } from "./middleware/built-in/loggedin/user.mjs";
+import { registerAssetsMiddleware } from "./middleware/built-in/assets.mjs";
+import { registerBasicMiddleware } from "./middleware/built-in/basic.mjs";
+import { registerCorsMiddleware } from "./middleware/built-in/cors.mjs";
+import { registerErrorMiddleware } from "./middleware/built-in/error.mjs";
+import { createLoggerMiddleware } from "./middleware/built-in/logger.mjs";
+import { registerPrometheusMiddleware } from "./middleware/built-in/prometheus.mjs";
+import { registerRateLimitMiddleware } from "./middleware/built-in/rate-limit.mjs";
+import { createSwaggerMiddleware } from "./middleware/built-in/swagger.mjs";
+import "./middleware/index.mjs";
+import { ClientController } from "./controllers/entities/client/module.mjs";
+import { ClientPermissionController } from "./controllers/entities/client-permission/module.mjs";
+import { ClientPermissionRequestValidator } from "./controllers/entities/client-permission/utils/validation.mjs";
+import { ClientRoleRequestValidator } from "./controllers/entities/client-role/utils/validation.mjs";
+import { ClientRoleController } from "./controllers/entities/client-role/module.mjs";
+import { ClientScopeController } from "./controllers/entities/client-scope/module.mjs";
+import { ClientScopeRequestValidator } from "./controllers/entities/client-scope/utils/validator.mjs";
+import { IdentityProviderController } from "./controllers/entities/identity-provider/module.mjs";
+import { IdentityProviderRoleMappingController } from "./controllers/entities/identity-provide-role/module.mjs";
+import { PermissionController } from "./controllers/entities/permission/module.mjs";
+import { PermissionPolicyController } from "./controllers/entities/permission-policy/module.mjs";
+import { ActivateController } from "./controllers/workflows/activate/module.mjs";
+import { AuthorizeController } from "./controllers/workflows/authorize/module.mjs";
+import { getJwkRouteHandler, getJwksRouteHandler } from "./controllers/workflows/jwks/handlers/read.mjs";
+import { JwkController } from "./controllers/workflows/jwks/module.mjs";
+import { OpenIDController } from "./controllers/workflows/openid/module.mjs";
+import { PasswordForgotController } from "./controllers/workflows/password-forgot/module.mjs";
+import { PasswordResetController } from "./controllers/workflows/password-reset/module.mjs";
+import { RegisterController } from "./controllers/workflows/register/module.mjs";
+import { StatusController } from "./controllers/workflows/status/module.mjs";
+import { TokenController } from "./controllers/workflows/token/module.mjs";
+import { RealmController } from "./controllers/entities/realm/module.mjs";
+import { RobotController } from "./controllers/entities/robot/module.mjs";
+import { RobotPermissionController } from "./controllers/entities/robot-permission/module.mjs";
+import { RobotPermissionRequestValidator } from "./controllers/entities/robot-permission/utils/validation.mjs";
+import { RobotRoleController } from "./controllers/entities/robot-role/module.mjs";
+import { RobotRoleRequestValidator } from "./controllers/entities/robot-role/utils/validation.mjs";
+import { RoleController } from "./controllers/entities/role/module.mjs";
+import { RoleAttributeController } from "./controllers/entities/role-attribute/module.mjs";
+import { RoleAttributeRequestValidator } from "./controllers/entities/role-attribute/utils/validation.mjs";
+import { RolePermissionController } from "./controllers/entities/role-permission/module.mjs";
+import { RolePermissionRequestValidator } from "./controllers/entities/role-permission/utils/validation.mjs";
+import { PolicyController } from "./controllers/entities/policy/module.mjs";
+import { PolicyAttributesValidator } from "./controllers/entities/policy/utils/attributes-validator.mjs";
+import { PolicyValidator } from "./controllers/entities/policy/utils/validation.mjs";
+import { ScopeController } from "./controllers/entities/scope/module.mjs";
+import { UserController } from "./controllers/entities/user/module.mjs";
+import { UserAttributeController } from "./controllers/entities/user-attribute/module.mjs";
+import { UserAttributeRequestValidator } from "./controllers/entities/user-attribute/utils/validation.mjs";
+import { UserPermissionController } from "./controllers/entities/user-permission/module.mjs";
+import { UserPermissionRequestValidator } from "./controllers/entities/user-permission/utils/validation.mjs";
+import { UserRoleController } from "./controllers/entities/user-role/module.mjs";
+import { UserRoleRequestValidator } from "./controllers/entities/user-role/utils/validation.mjs";
+import "./controllers/index.mjs";
+import { createHttpServer } from "./server/module.mjs";
+import "./server/index.mjs";
+import { Swagger } from "./swagger/module.mjs";
+import "./swagger/index.mjs";
+export { ActivateController, AuthorizationMiddleware, AuthorizeController, ClientController, ClientPermissionController, ClientPermissionRequestValidator, ClientRoleController, ClientRoleRequestValidator, ClientScopeController, ClientScopeRequestValidator, ForceLoggedInMiddleware, ForceUserLoggedInMiddleware, HTTPClientCredentialsGrant, HTTPOAuth2AuthorizeGrant, HTTPOAuth2Authorizer, HTTPOAuth2IdentityGrantType, HTTPOAuth2RefreshTokenGrant, HTTPPasswordGrant, HTTPRobotCredentialsGrant, IdentityProviderController, IdentityProviderRoleMappingController, JwkController, OpenIDController, PasswordForgotController, PasswordResetController, PermissionController, PermissionPolicyController, PolicyAttributesValidator, PolicyController, PolicyValidator, RealmController, RegisterController, RequestHandlerOperation, RequestIdentity, RequestPermissionEvaluator, RobotController, RobotPermissionController, RobotPermissionRequestValidator, RobotRoleController, RobotRoleRequestValidator, RoleAttributeController, RoleAttributeRequestValidator, RoleController, RolePermissionController, RolePermissionRequestValidator, ScopeController, StatusController, Swagger, TokenController, UserAttributeController, UserAttributeRequestValidator, UserController, UserPermissionController, UserPermissionRequestValidator, UserRoleController, UserRoleRequestValidator, buildActorContext, createAuthorizationMiddleware, createHttpServer, createLoggerMiddleware, createSwaggerMiddleware, extractClientCredentialsFromRequest, getJwkRouteHandler, getJwksRouteHandler, getRequestBodyRealmID, getRequestParamID, getRequestStringParam, getRequestStringParamOrFail, guessOauth2GrantTypeByRequest, isRequestIdentityMasterRealmMember, registerAssetsMiddleware, registerBasicMiddleware, registerCorsMiddleware, registerErrorMiddleware, registerPrometheusMiddleware, registerRateLimitMiddleware, setRequestIdentity, setRequestPermissionEvaluator, setRequestScopes, setRequestToken, useRequestIdentity, useRequestIdentityOrFail, useRequestParamID, useRequestPermissionEvaluator, useRequestScopes, useRequestToken };

package/dist/adapters/http/middleware/built-in/assets.d.ts

@@ -0,0 +1,3 @@
+import type { Router } from 'routup';
+export declare function registerAssetsMiddleware(router: Router): Promise<void>;
+//# sourceMappingURL=assets.d.ts.map

package/dist/adapters/http/middleware/built-in/assets.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"assets.d.ts","sourceRoot":"","sources":["../../../../../src/adapters/http/middleware/built-in/assets.ts"],"names":[],"mappings":"AAWA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAIrC,wBAAsB,wBAAwB,CAAC,MAAM,EAAE,MAAM,iBAgD5D"}

package/dist/adapters/http/middleware/built-in/assets.mjs

@@ -0,0 +1,44 @@
+import { PACKAGE_PATH, UI_DIST_PATH, UI_SOURCE_PATH } from "../../../../path.mjs";
+import path from "node:path";
+import { CodeTransformation, isCodeTransformation } from "typeorm-extension";
+import { coreHandler, setRequestParam } from "routup";
+import { load } from "locter";
+import { createHandler } from "@routup/assets";
+//#region src/adapters/http/middleware/built-in/assets.ts
+async function registerAssetsMiddleware(router) {
+	if (!isCodeTransformation(CodeTransformation.JUST_IN_TIME)) {
+		router.use("public", createHandler(path.posix.join(PACKAGE_PATH, "public"), {
+			fallthrough: true,
+			scan: false
+		}));
+		router.use("public", createHandler(path.posix.join(UI_DIST_PATH, "client"), {
+			fallthrough: false,
+			scan: false
+		}));
+		return;
+	}
+	/**
+	* @type {import('vite').ViteDevServer}
+	*/ const server = await (await load("vite")).createServer({
+		root: UI_SOURCE_PATH,
+		base: "/public/",
+		logLevel: "error",
+		server: {
+			middlewareMode: true,
+			watch: {
+				usePolling: true,
+				interval: 100
+			}
+		},
+		appType: "custom"
+	});
+	router.use("public", coreHandler((req, res, next) => server.middlewares(req, res, next)));
+	router.use(coreHandler((req, res, next) => {
+		setRequestParam(req, "viteServer", server);
+		next();
+	}));
+}
+//#endregion
+export { registerAssetsMiddleware };
+
+//# sourceMappingURL=assets.mjs.map

package/dist/adapters/http/middleware/built-in/assets.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"assets.mjs","names":["load","CodeTransformation","isCodeTransformation","createHandler","path","coreHandler","setRequestParam","PACKAGE_PATH","UI_DIST_PATH","UI_SOURCE_PATH","registerAssetsMiddleware","router","JUST_IN_TIME","use","posix","join","fallthrough","scan","vite","server","createServer","root","base","logLevel","middlewareMode","watch","usePolling","interval","appType","req","res","next","middlewares"],"sources":["../../../../../src/adapters/http/middleware/built-in/assets.ts"],"sourcesContent":["/*\n * Copyright (c) 2023.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport { load } from 'locter';\nimport { CodeTransformation, isCodeTransformation } from 'typeorm-extension';\nimport { createHandler } from '@routup/assets';\nimport path from 'node:path';\nimport type { Router } from 'routup';\nimport { coreHandler, setRequestParam } from 'routup';\nimport { PACKAGE_PATH, UI_DIST_PATH, UI_SOURCE_PATH } from '../../../../path.ts';\n\nexport async function registerAssetsMiddleware(router: Router) {\n    if (!isCodeTransformation(CodeTransformation.JUST_IN_TIME)) {\n        router.use('public', createHandler(\n            path.posix.join(PACKAGE_PATH, 'public'),\n            {\n                fallthrough: true,\n                scan: false,\n            },\n        ));\n\n        router.use('public', createHandler(\n            path.posix.join(UI_DIST_PATH, 'client'),\n            {\n                fallthrough: false,\n                scan: false,\n            },\n        ));\n        return;\n    }\n\n    /**\n     * @type import('vite')\n     */\n    const vite = await load('vite');\n\n    /**\n     * @type {import('vite').ViteDevServer}\n     */\n    const server = await vite.createServer({\n        root: UI_SOURCE_PATH,\n        base: '/public/',\n        logLevel: 'error',\n        server: {\n            middlewareMode: true,\n            watch: {\n                usePolling: true,\n                interval: 100,\n            },\n        },\n        appType: 'custom',\n    });\n\n    router.use('public', coreHandler((req, res, next) => server.middlewares(req, res, next)));\n    router.use(coreHandler((req, res, next) => {\n        setRequestParam(req, 'viteServer', server);\n\n        next();\n    }));\n}\n"],"mappings":";;;;;;;AAeA,eAAsBU,yBAAyBC,QAAc;AACzD,KAAI,CAACT,qBAAqBD,mBAAmBW,aAAY,EAAG;AACxDD,SAAOE,IAAI,UAAUV,cACjBC,KAAKU,MAAMC,KAAKR,cAAc,SAAA,EAC9B;GACIS,aAAa;GACbC,MAAM;GACV,CAAA,CAAA;AAGJN,SAAOE,IAAI,UAAUV,cACjBC,KAAKU,MAAMC,KAAKP,cAAc,SAAA,EAC9B;GACIQ,aAAa;GACbC,MAAM;GACV,CAAA,CAAA;AAEJ;;;;IAWJ,MAAME,SAAS,OAAMD,MALFlB,KAAK,OAAA,EAKEoB,aAAa;EACnCC,MAAMZ;EACNa,MAAM;EACNC,UAAU;EACVJ,QAAQ;GACJK,gBAAgB;GAChBC,OAAO;IACHC,YAAY;IACZC,UAAU;IACd;GACJ;EACAC,SAAS;EACb,CAAA;AAEAjB,QAAOE,IAAI,UAAUR,aAAawB,KAAKC,KAAKC,SAASZ,OAAOa,YAAYH,KAAKC,KAAKC,KAAAA,CAAAA,CAAAA;AAClFpB,QAAOE,IAAIR,aAAawB,KAAKC,KAAKC,SAAAA;AAC9BzB,kBAAgBuB,KAAK,cAAcV,OAAAA;AAEnCY,QAAAA;GACJ,CAAA"}

package/dist/adapters/http/middleware/built-in/authorization/factory.d.ts

@@ -0,0 +1,4 @@
+import type { Handler } from 'routup';
+import type { HTTPAuthorizationMiddlewareContext } from './types.ts';
+export declare function createAuthorizationMiddleware(ctx: HTTPAuthorizationMiddlewareContext): Handler;
+//# sourceMappingURL=factory.d.ts.map

package/dist/adapters/http/middleware/built-in/authorization/factory.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"factory.d.ts","sourceRoot":"","sources":["../../../../../../src/adapters/http/middleware/built-in/authorization/factory.ts"],"names":[],"mappings":"AAQA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,QAAQ,CAAC;AAEtC,OAAO,KAAK,EAAE,kCAAkC,EAAE,MAAM,YAAY,CAAC;AAErE,wBAAgB,6BAA6B,CAAC,GAAG,EAAE,kCAAkC,GAAI,OAAO,CAQ/F"}

package/dist/adapters/http/middleware/built-in/authorization/factory.mjs

@@ -0,0 +1,11 @@
+import { AuthorizationMiddleware } from "./module.mjs";
+import { coreHandler } from "routup";
+//#region src/adapters/http/middleware/built-in/authorization/factory.ts
+function createAuthorizationMiddleware(ctx) {
+	const middleware = new AuthorizationMiddleware(ctx);
+	return coreHandler(async (request, response, next) => middleware.run(request, response, next));
+}
+//#endregion
+export { createAuthorizationMiddleware };
+
+//# sourceMappingURL=factory.mjs.map

package/dist/adapters/http/middleware/built-in/authorization/factory.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"factory.mjs","names":["coreHandler","AuthorizationMiddleware","createAuthorizationMiddleware","ctx","middleware","request","response","next","run"],"sources":["../../../../../../src/adapters/http/middleware/built-in/authorization/factory.ts"],"sourcesContent":["/*\n * Copyright (c) 2021-2022.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport { coreHandler } from 'routup';\nimport type { Handler } from 'routup';\nimport { AuthorizationMiddleware } from './module.ts';\nimport type { HTTPAuthorizationMiddlewareContext } from './types.ts';\n\nexport function createAuthorizationMiddleware(ctx: HTTPAuthorizationMiddlewareContext) : Handler {\n    const middleware = new AuthorizationMiddleware(ctx);\n\n    return coreHandler(async (\n        request,\n        response,\n        next,\n    ) => middleware.run(request, response, next));\n}\n"],"mappings":";;;AAYA,SAAgBE,8BAA8BC,KAAuC;CACjF,MAAMC,aAAa,IAAIH,wBAAwBE,IAAAA;AAE/C,QAAOH,YAAY,OACfK,SACAC,UACAC,SACCH,WAAWI,IAAIH,SAASC,UAAUC,KAAAA,CAAAA"}

package/dist/adapters/http/middleware/built-in/authorization/index.d.ts

@@ -0,0 +1,4 @@
+export * from './module.ts';
+export * from './factory.ts';
+export * from './types.ts';
+//# sourceMappingURL=index.d.ts.map

package/dist/adapters/http/middleware/built-in/authorization/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../../src/adapters/http/middleware/built-in/authorization/index.ts"],"names":[],"mappings":"AAOA,cAAc,aAAa,CAAC;AAC5B,cAAc,cAAc,CAAC;AAC7B,cAAc,YAAY,CAAC"}

package/dist/adapters/http/middleware/built-in/authorization/index.mjs

@@ -0,0 +1,3 @@
+import { AuthorizationMiddleware } from "./module.mjs";
+import { createAuthorizationMiddleware } from "./factory.mjs";
+export { AuthorizationMiddleware, createAuthorizationMiddleware };

package/dist/adapters/http/middleware/built-in/authorization/module.d.ts

@@ -0,0 +1,30 @@
+import type { IPermissionEvaluator } from '@authup/access';
+import type { Client, Robot, User } from '@authup/core-kit';
+import type { Next, Request, Response } from 'routup';
+import { type BasicAuthorizationHeader, type BearerAuthorizationHeader } from 'hapic';
+import type { ICredentialsAuthenticator, IIdentityResolver, IOAuth2TokenVerifier, ISessionManager } from '../../../../../core/index.ts';
+import type { HTTPAuthorizationMiddlewareContext, HTTPAuthorizationMiddlewareOptions } from './types.ts';
+export declare class AuthorizationMiddleware {
+    protected options: HTTPAuthorizationMiddlewareOptions;
+    protected oauth2TokenVerifier: IOAuth2TokenVerifier;
+    protected permissionEvaluator: IPermissionEvaluator;
+    protected identityResolver: IIdentityResolver;
+    protected sessionManager: ISessionManager;
+    protected clientAuthenticator: ICredentialsAuthenticator<Client>;
+    protected robotAuthenticator: ICredentialsAuthenticator<Robot>;
+    protected userAuthenticator: ICredentialsAuthenticator<User>;
+    constructor(ctx: HTTPAuthorizationMiddlewareContext);
+    run(request: Request, response: Response, next: Next): Promise<void>;
+    /**
+     *
+     * @throws JWTError
+     *
+     * @param request
+     * @param header
+     *
+     * @protected
+     */
+    protected verifyBearerAuthorizationHeader(request: Request, header: BearerAuthorizationHeader): Promise<void>;
+    protected verifyBasicAuthorizationHeader(request: Request, header: BasicAuthorizationHeader): Promise<void>;
+}
+//# sourceMappingURL=module.d.ts.map

package/dist/adapters/http/middleware/built-in/authorization/module.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"module.d.ts","sourceRoot":"","sources":["../../../../../../src/adapters/http/middleware/built-in/authorization/module.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,gBAAgB,CAAC;AAE3D,OAAO,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAC;AAO5D,OAAO,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,QAAQ,CAAC;AACtD,OAAO,EAEH,KAAK,wBAAwB,EAC7B,KAAK,yBAAyB,EAEjC,MAAM,OAAO,CAAC;AAOf,OAAO,KAAK,EACR,yBAAyB,EACzB,iBAAiB,EACjB,oBAAoB,EACpB,eAAe,EAClB,MAAM,8BAA8B,CAAC;AAQtC,OAAO,KAAK,EAAE,kCAAkC,EAAE,kCAAkC,EAAE,MAAM,YAAY,CAAC;AAEzG,qBAAa,uBAAuB;IAChC,SAAS,CAAC,OAAO,EAAE,kCAAkC,CAAC;IAItD,SAAS,CAAC,mBAAmB,EAAE,oBAAoB,CAAC;IAEpD,SAAS,CAAC,mBAAmB,EAAE,oBAAoB,CAAC;IAIpD,SAAS,CAAC,gBAAgB,EAAE,iBAAiB,CAAC;IAE9C,SAAS,CAAC,cAAc,EAAG,eAAe,CAAC;IAI3C,SAAS,CAAC,mBAAmB,EAAG,yBAAyB,CAAC,MAAM,CAAC,CAAC;IAElE,SAAS,CAAC,kBAAkB,EAAG,yBAAyB,CAAC,KAAK,CAAC,CAAC;IAEhE,SAAS,CAAC,iBAAiB,EAAG,yBAAyB,CAAC,IAAI,CAAC,CAAC;gBAIlD,GAAG,EAAE,kCAAkC;IAsB7C,GAAG,CAAC,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE,IAAI;IAiC1D;;;;;;;;OAQG;cACa,+BAA+B,CAC3C,OAAO,EAAE,OAAO,EAChB,MAAM,EAAE,yBAAyB;cAwDrB,8BAA8B,CAC1C,OAAO,EAAE,OAAO,EAChB,MAAM,EAAE,wBAAwB;CA+CvC"}

package/dist/adapters/http/middleware/built-in/authorization/module.mjs

@@ -0,0 +1,131 @@
+import { ClientAuthenticator } from "../../../../../core/authentication/entities/client/module.mjs";
+import { RobotAuthenticator } from "../../../../../core/authentication/entities/robot/module.mjs";
+import { UserAuthenticator } from "../../../../../core/authentication/entities/user/module.mjs";
+import { PolicyEngine as PolicyEngine$1 } from "../../../../../core/security/policy/engine.mjs";
+import "../../../../../core/index.mjs";
+import { setRequestPermissionEvaluator } from "../../../request/permission/helper.mjs";
+import { setRequestIdentity } from "../../../request/helpers/identity.mjs";
+import { setRequestScopes } from "../../../request/helpers/scopes.mjs";
+import { setRequestToken } from "../../../request/helpers/token.mjs";
+import { RequestPermissionEvaluator } from "../../../request/permission/module.mjs";
+import "../../../request/index.mjs";
+import { IdentityType, ScopeName } from "@authup/core-kit";
+import { PermissionEvaluator } from "@authup/access";
+import { JWTError, OAuth2TokenKind, deserializeOAuth2Scope } from "@authup/specs";
+import { HTTPError } from "@authup/errors";
+import { AuthorizationHeaderType, parseAuthorizationHeader } from "hapic";
+//#region src/adapters/http/middleware/built-in/authorization/module.ts
+var AuthorizationMiddleware = class {
+	options;
+	oauth2TokenVerifier;
+	permissionEvaluator;
+	identityResolver;
+	sessionManager;
+	clientAuthenticator;
+	robotAuthenticator;
+	userAuthenticator;
+	constructor(ctx) {
+		this.options = ctx.options || {};
+		this.identityResolver = ctx.identityResolver;
+		this.sessionManager = ctx.sessionManager;
+		this.clientAuthenticator = new ClientAuthenticator(ctx.identityResolver);
+		this.robotAuthenticator = new RobotAuthenticator(ctx.identityResolver);
+		this.userAuthenticator = new UserAuthenticator(ctx.identityResolver);
+		this.oauth2TokenVerifier = ctx.oauth2TokenVerifier;
+		this.permissionEvaluator = new PermissionEvaluator({
+			provider: ctx.permissionProvider,
+			policyEngine: new PolicyEngine$1(ctx.identityPermissionProvider),
+			realmId: null,
+			clientId: null
+		});
+	}
+	async run(request, response, next) {
+		setRequestPermissionEvaluator(request, new RequestPermissionEvaluator(request, this.permissionEvaluator));
+		const { authorization: headerValue } = request.headers;
+		try {
+			if (typeof headerValue !== "string") {
+				next();
+				return;
+			}
+			const header = parseAuthorizationHeader(headerValue);
+			if (header.type === AuthorizationHeaderType.BEARER) {
+				await this.verifyBearerAuthorizationHeader(request, header);
+				next();
+				return;
+			}
+			if (header.type === AuthorizationHeaderType.BASIC) {
+				await this.verifyBasicAuthorizationHeader(request, header);
+				next();
+				return;
+			}
+			next(HTTPError.unsupportedHeaderType(header.type));
+		} catch (e) {
+			next(e);
+		}
+	}
+	/**
+	*
+	* @throws JWTError
+	*
+	* @param request
+	* @param header
+	*
+	* @protected
+	*/ async verifyBearerAuthorizationHeader(request, header) {
+		const payload = await this.oauth2TokenVerifier.verify(header.token);
+		if (payload.kind !== OAuth2TokenKind.ACCESS) throw JWTError.payloadPropertyInvalid("kind");
+		if (!payload.realm_id) throw JWTError.payloadPropertyInvalid("realm_id");
+		setRequestToken(request, header.token);
+		if (payload.scope) setRequestScopes(request, deserializeOAuth2Scope(payload.scope));
+		if (!payload.session_id) throw JWTError.payloadPropertyInvalid("session_id");
+		const session = await this.sessionManager.findOneById(payload.session_id);
+		if (!session) throw JWTError.expired();
+		try {
+			await this.sessionManager.verify(session);
+		} catch {
+			throw JWTError.expired();
+		}
+		await this.sessionManager.ping(session);
+		if (!payload.sub_kind) throw JWTError.payloadPropertyInvalid("sub_kind");
+		if (!payload.sub) throw JWTError.payloadPropertyInvalid("sub");
+		const identity = await this.identityResolver.resolve(payload.sub_kind, payload.sub);
+		if (identity) setRequestIdentity(request, identity);
+	}
+	async verifyBasicAuthorizationHeader(request, header) {
+		if (this.options.clientAuthBasic) {
+			const authenticator = await this.clientAuthenticator.safeAuthenticate(header.username, header.password);
+			if (authenticator.success) {
+				setRequestScopes(request, [ScopeName.GLOBAL]);
+				setRequestIdentity(request, {
+					type: IdentityType.CLIENT,
+					data: authenticator.data
+				});
+			}
+		}
+		if (this.options.userAuthBasic) {
+			const authenticated = await this.userAuthenticator.safeAuthenticate(header.username, header.password);
+			if (authenticated.success) {
+				setRequestScopes(request, [ScopeName.GLOBAL]);
+				setRequestIdentity(request, {
+					type: IdentityType.USER,
+					data: authenticated.data
+				});
+				return;
+			}
+		}
+		if (this.options.robotAuthBasic) {
+			const authenticated = await this.robotAuthenticator.safeAuthenticate(header.username, header.password);
+			if (authenticated.success) {
+				setRequestScopes(request, [ScopeName.GLOBAL]);
+				setRequestIdentity(request, {
+					type: IdentityType.ROBOT,
+					data: authenticated.data
+				});
+			}
+		}
+	}
+};
+//#endregion
+export { AuthorizationMiddleware };
+
+//# sourceMappingURL=module.mjs.map

package/dist/adapters/http/middleware/built-in/authorization/module.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"module.mjs","names":["PermissionEvaluator","IdentityType","ScopeName","HTTPError","JWTError","OAuth2TokenKind","deserializeOAuth2Scope","AuthorizationHeaderType","parseAuthorizationHeader","ClientAuthenticator","PolicyEngine","RobotAuthenticator","UserAuthenticator","RequestPermissionEvaluator","setRequestIdentity","setRequestPermissionEvaluator","setRequestScopes","setRequestToken","AuthorizationMiddleware","options","oauth2TokenVerifier","permissionEvaluator","identityResolver","sessionManager","clientAuthenticator","robotAuthenticator","userAuthenticator","ctx","provider","permissionProvider","policyEngine","identityPermissionProvider","realmId","clientId","run","request","response","next","requestAccessContext","authorization","headerValue","headers","header","type","BEARER","verifyBearerAuthorizationHeader","BASIC","verifyBasicAuthorizationHeader","unsupportedHeaderType","e","payload","verify","token","kind","ACCESS","payloadPropertyInvalid","realm_id","scope","session_id","session","findOneById","expired","ping","sub_kind","sub","identity","resolve","clientAuthBasic","authenticator","safeAuthenticate","username","password","success","GLOBAL","CLIENT","data","userAuthBasic","authenticated","USER","robotAuthBasic","ROBOT"],"sources":["../../../../../../src/adapters/http/middleware/built-in/authorization/module.ts"],"sourcesContent":["/*\n * Copyright (c) 2025.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport type { IPermissionEvaluator } from '@authup/access';\nimport { PermissionEvaluator } from '@authup/access';\nimport type { Client, Robot, User } from '@authup/core-kit';\nimport {\n    IdentityType,\n    ScopeName,\n} from '@authup/core-kit';\nimport { HTTPError } from '@authup/errors';\nimport { JWTError, OAuth2TokenKind, deserializeOAuth2Scope } from '@authup/specs';\nimport type { Next, Request, Response } from 'routup';\nimport {\n    AuthorizationHeaderType,\n    type BasicAuthorizationHeader,\n    type BearerAuthorizationHeader,\n    parseAuthorizationHeader,\n} from 'hapic';\nimport {\n    ClientAuthenticator,\n    PolicyEngine,\n    RobotAuthenticator,\n    UserAuthenticator, \n} from '../../../../../core/index.ts';\nimport type {\n    ICredentialsAuthenticator, \n    IIdentityResolver,\n    IOAuth2TokenVerifier, \n    ISessionManager,\n} from '../../../../../core/index.ts';\nimport {\n    RequestPermissionEvaluator,\n    setRequestIdentity,\n    setRequestPermissionEvaluator,\n    setRequestScopes,\n    setRequestToken,\n} from '../../../request/index.ts';\nimport type { HTTPAuthorizationMiddlewareContext, HTTPAuthorizationMiddlewareOptions } from './types.ts';\n\nexport class AuthorizationMiddleware {\n    protected options: HTTPAuthorizationMiddlewareOptions;\n\n    // --------------------------------------\n\n    protected oauth2TokenVerifier: IOAuth2TokenVerifier;\n\n    protected permissionEvaluator: IPermissionEvaluator;\n\n    // --------------------------------------\n\n    protected identityResolver: IIdentityResolver;\n\n    protected sessionManager : ISessionManager;\n\n    // --------------------------------------\n\n    protected clientAuthenticator : ICredentialsAuthenticator<Client>;\n\n    protected robotAuthenticator : ICredentialsAuthenticator<Robot>;\n\n    protected userAuthenticator : ICredentialsAuthenticator<User>;\n\n    // --------------------------------------\n\n    constructor(ctx: HTTPAuthorizationMiddlewareContext) {\n        this.options = ctx.options || {};\n\n        this.identityResolver = ctx.identityResolver;\n        this.sessionManager = ctx.sessionManager;\n\n        this.clientAuthenticator = new ClientAuthenticator(ctx.identityResolver);\n        this.robotAuthenticator = new RobotAuthenticator(ctx.identityResolver);\n        this.userAuthenticator = new UserAuthenticator(ctx.identityResolver);\n\n        this.oauth2TokenVerifier = ctx.oauth2TokenVerifier;\n\n        this.permissionEvaluator = new PermissionEvaluator({\n            provider: ctx.permissionProvider,\n            policyEngine: new PolicyEngine(ctx.identityPermissionProvider),\n            realmId: null,\n            clientId: null,\n        });\n    }\n\n    // --------------------------------------\n\n    async run(request: Request, response: Response, next: Next) {\n        const requestAccessContext = new RequestPermissionEvaluator(\n            request,\n            this.permissionEvaluator,\n        );\n        setRequestPermissionEvaluator(request, requestAccessContext);\n\n        const { authorization: headerValue } = request.headers;\n\n        try {\n            if (typeof headerValue !== 'string') {\n                next();\n                return;\n            }\n\n            const header = parseAuthorizationHeader(headerValue);\n\n            if (header.type === AuthorizationHeaderType.BEARER) {\n                await this.verifyBearerAuthorizationHeader(request, header);\n                next();\n                return;\n            } if (header.type === AuthorizationHeaderType.BASIC) {\n                await this.verifyBasicAuthorizationHeader(request, header);\n                next();\n                return;\n            }\n\n            next(HTTPError.unsupportedHeaderType(header.type));\n        } catch (e) {\n            next(e as Error);\n        }\n    }\n\n    /**\n     *\n     * @throws JWTError\n     *\n     * @param request\n     * @param header\n     *\n     * @protected\n     */\n    protected async verifyBearerAuthorizationHeader(\n        request: Request,\n        header: BearerAuthorizationHeader,\n    ) {\n        const payload = await this.oauth2TokenVerifier.verify(header.token);\n        if (payload.kind !== OAuth2TokenKind.ACCESS) {\n            throw JWTError.payloadPropertyInvalid('kind');\n        }\n\n        if (!payload.realm_id) {\n            throw JWTError.payloadPropertyInvalid('realm_id');\n        }\n\n        setRequestToken(request, header.token);\n\n        if (payload.scope) {\n            setRequestScopes(request, deserializeOAuth2Scope(payload.scope));\n        }\n\n        // -------------------------------------------------------\n\n        if (!payload.session_id) {\n            throw JWTError.payloadPropertyInvalid('session_id');\n        }\n\n        const session = await this.sessionManager.findOneById(payload.session_id);\n        if (!session) {\n            throw JWTError.expired();\n        }\n\n        try {\n            await this.sessionManager.verify(session);\n        } catch {\n            throw JWTError.expired();\n        }\n\n        await this.sessionManager.ping(session);\n\n        // -------------------------------------------------------\n\n        if (!payload.sub_kind) {\n            throw JWTError.payloadPropertyInvalid('sub_kind');\n        }\n\n        if (!payload.sub) {\n            throw JWTError.payloadPropertyInvalid('sub');\n        }\n\n        const identity = await this.identityResolver.resolve(\n            payload.sub_kind,\n            payload.sub,\n        );\n\n        if (identity) {\n            setRequestIdentity(request, identity);\n        }\n    }\n\n    protected async verifyBasicAuthorizationHeader(\n        request: Request,\n        header: BasicAuthorizationHeader,\n    ) {\n        if (this.options.clientAuthBasic) {\n            const authenticator = await this.clientAuthenticator.safeAuthenticate(\n                header.username,\n                header.password,\n            );\n            if (authenticator.success) {\n                setRequestScopes(request, [ScopeName.GLOBAL]);\n                setRequestIdentity(request, {\n                    type: IdentityType.CLIENT,\n                    data: authenticator.data,\n                });\n            }\n        }\n\n        if (this.options.userAuthBasic) {\n            const authenticated = await this.userAuthenticator.safeAuthenticate(\n                header.username,\n                header.password,\n            );\n\n            if (authenticated.success) {\n                setRequestScopes(request, [ScopeName.GLOBAL]);\n                setRequestIdentity(request, {\n                    type: IdentityType.USER,\n                    data: authenticated.data,\n                });\n\n                return;\n            }\n        }\n\n        if (this.options.robotAuthBasic) {\n            const authenticated = await this.robotAuthenticator.safeAuthenticate(\n                header.username,\n                header.password,\n            );\n            if (authenticated.success) {\n                setRequestScopes(request, [ScopeName.GLOBAL]);\n                setRequestIdentity(request, {\n                    type: IdentityType.ROBOT,\n                    data: authenticated.data,\n                });\n            }\n        }\n    }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;AA4CA,IAAakB,0BAAb,MAAaA;CACCC;CAIAC;CAEAC;CAIAC;CAEAC;CAIAC;CAEAC;CAEAC;CAIV,YAAYC,KAAyC;AACjD,OAAKR,UAAUQ,IAAIR,WAAW,EAAC;AAE/B,OAAKG,mBAAmBK,IAAIL;AAC5B,OAAKC,iBAAiBI,IAAIJ;AAE1B,OAAKC,sBAAsB,IAAIf,oBAAoBkB,IAAIL,iBAAgB;AACvE,OAAKG,qBAAqB,IAAId,mBAAmBgB,IAAIL,iBAAgB;AACrE,OAAKI,oBAAoB,IAAId,kBAAkBe,IAAIL,iBAAgB;AAEnE,OAAKF,sBAAsBO,IAAIP;AAE/B,OAAKC,sBAAsB,IAAIrB,oBAAoB;GAC/C4B,UAAUD,IAAIE;GACdC,cAAc,IAAIpB,eAAaiB,IAAII,2BAA0B;GAC7DC,SAAS;GACTC,UAAU;GACd,CAAA;;CAKJ,MAAMC,IAAIC,SAAkBC,UAAoBC,MAAY;AAKxDtB,gCAA8BoB,SAASG,IAJNzB,2BAC7BsB,SACA,KAAKd,oBAE8BiB,CAAAA;EAEvC,MAAM,EAAEC,eAAeC,gBAAgBL,QAAQM;AAE/C,MAAI;AACA,OAAI,OAAOD,gBAAgB,UAAU;AACjCH,UAAAA;AACA;;GAGJ,MAAMK,SAASlC,yBAAyBgC,YAAAA;AAExC,OAAIE,OAAOC,SAASpC,wBAAwBqC,QAAQ;AAChD,UAAM,KAAKC,gCAAgCV,SAASO,OAAAA;AACpDL,UAAAA;AACA;;AACF,OAAIK,OAAOC,SAASpC,wBAAwBuC,OAAO;AACjD,UAAM,KAAKC,+BAA+BZ,SAASO,OAAAA;AACnDL,UAAAA;AACA;;AAGJA,QAAKlC,UAAU6C,sBAAsBN,OAAOC,KAAI,CAAA;WAC3CM,GAAG;AACRZ,QAAKY,EAAAA;;;;;;;;;;;IAab,MAAgBJ,gCACZV,SACAO,QACF;EACE,MAAMQ,UAAU,MAAM,KAAK9B,oBAAoB+B,OAAOT,OAAOU,MAAK;AAClE,MAAIF,QAAQG,SAAShD,gBAAgBiD,OACjC,OAAMlD,SAASmD,uBAAuB,OAAA;AAG1C,MAAI,CAACL,QAAQM,SACT,OAAMpD,SAASmD,uBAAuB,WAAA;AAG1CtC,kBAAgBkB,SAASO,OAAOU,MAAK;AAErC,MAAIF,QAAQO,MACRzC,kBAAiBmB,SAAS7B,uBAAuB4C,QAAQO,MAAK,CAAA;AAKlE,MAAI,CAACP,QAAQQ,WACT,OAAMtD,SAASmD,uBAAuB,aAAA;EAG1C,MAAMI,UAAU,MAAM,KAAKpC,eAAeqC,YAAYV,QAAQQ,WAAU;AACxE,MAAI,CAACC,QACD,OAAMvD,SAASyD,SAAO;AAG1B,MAAI;AACA,SAAM,KAAKtC,eAAe4B,OAAOQ,QAAAA;UAC7B;AACJ,SAAMvD,SAASyD,SAAO;;AAG1B,QAAM,KAAKtC,eAAeuC,KAAKH,QAAAA;AAI/B,MAAI,CAACT,QAAQa,SACT,OAAM3D,SAASmD,uBAAuB,WAAA;AAG1C,MAAI,CAACL,QAAQc,IACT,OAAM5D,SAASmD,uBAAuB,MAAA;EAG1C,MAAMU,WAAW,MAAM,KAAK3C,iBAAiB4C,QACzChB,QAAQa,UACRb,QAAQc,IAAG;AAGf,MAAIC,SACAnD,oBAAmBqB,SAAS8B,SAAAA;;CAIpC,MAAgBlB,+BACZZ,SACAO,QACF;AACE,MAAI,KAAKvB,QAAQgD,iBAAiB;GAC9B,MAAMC,gBAAgB,MAAM,KAAK5C,oBAAoB6C,iBACjD3B,OAAO4B,UACP5B,OAAO6B,SAAQ;AAEnB,OAAIH,cAAcI,SAAS;AACvBxD,qBAAiBmB,SAAS,CAACjC,UAAUuE,OAAO,CAAA;AAC5C3D,uBAAmBqB,SAAS;KACxBQ,MAAM1C,aAAayE;KACnBC,MAAMP,cAAcO;KACxB,CAAA;;;AAIR,MAAI,KAAKxD,QAAQyD,eAAe;GAC5B,MAAMC,gBAAgB,MAAM,KAAKnD,kBAAkB2C,iBAC/C3B,OAAO4B,UACP5B,OAAO6B,SAAQ;AAGnB,OAAIM,cAAcL,SAAS;AACvBxD,qBAAiBmB,SAAS,CAACjC,UAAUuE,OAAO,CAAA;AAC5C3D,uBAAmBqB,SAAS;KACxBQ,MAAM1C,aAAa6E;KACnBH,MAAME,cAAcF;KACxB,CAAA;AAEA;;;AAIR,MAAI,KAAKxD,QAAQ4D,gBAAgB;GAC7B,MAAMF,gBAAgB,MAAM,KAAKpD,mBAAmB4C,iBAChD3B,OAAO4B,UACP5B,OAAO6B,SAAQ;AAEnB,OAAIM,cAAcL,SAAS;AACvBxD,qBAAiBmB,SAAS,CAACjC,UAAUuE,OAAO,CAAA;AAC5C3D,uBAAmBqB,SAAS;KACxBQ,MAAM1C,aAAa+E;KACnBL,MAAME,cAAcF;KACxB,CAAA"}

package/dist/adapters/http/middleware/built-in/authorization/types.d.ts

@@ -0,0 +1,16 @@
+import type { IPermissionProvider } from '@authup/access';
+import type { IIdentityPermissionProvider, IIdentityResolver, IOAuth2TokenVerifier, ISessionManager } from '../../../../../core/index.ts';
+export type HTTPAuthorizationMiddlewareOptions = {
+    clientAuthBasic?: boolean;
+    robotAuthBasic?: boolean;
+    userAuthBasic?: boolean;
+};
+export type HTTPAuthorizationMiddlewareContext = {
+    identityResolver: IIdentityResolver;
+    identityPermissionProvider: IIdentityPermissionProvider;
+    sessionManager: ISessionManager;
+    oauth2TokenVerifier: IOAuth2TokenVerifier;
+    permissionProvider: IPermissionProvider;
+    options?: HTTPAuthorizationMiddlewareOptions;
+};
+//# sourceMappingURL=types.d.ts.map

package/dist/adapters/http/middleware/built-in/authorization/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../../../../src/adapters/http/middleware/built-in/authorization/types.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,gBAAgB,CAAC;AAC1D,OAAO,KAAK,EAER,2BAA2B,EAC3B,iBAAiB,EACjB,oBAAoB,EACpB,eAAe,EAClB,MAAM,8BAA8B,CAAC;AAEtC,MAAM,MAAM,kCAAkC,GAAG;IAC7C,eAAe,CAAC,EAAE,OAAO,CAAC;IAC1B,cAAc,CAAC,EAAE,OAAO,CAAC;IACzB,aAAa,CAAC,EAAE,OAAO,CAAC;CAC3B,CAAC;AAEF,MAAM,MAAM,kCAAkC,GAAG;IAC7C,gBAAgB,EAAE,iBAAiB,CAAC;IACpC,0BAA0B,EAAE,2BAA2B,CAAC;IACxD,cAAc,EAAE,eAAe,CAAC;IAChC,mBAAmB,EAAE,oBAAoB,CAAC;IAC1C,kBAAkB,EAAE,mBAAmB,CAAC;IAExC,OAAO,CAAC,EAAE,kCAAkC,CAAA;CAC/C,CAAC"}

package/dist/adapters/http/middleware/built-in/authorization/types.mjs

@@ -0,0 +1 @@
+export {};

package/dist/adapters/http/middleware/built-in/basic.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"basic.d.ts","sourceRoot":"","sources":["../../../../../src/adapters/http/middleware/built-in/basic.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,eAAe,CAAC;AAE7C,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAErC,wBAAgB,uBAAuB,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,OAAO,QAEtE"}

package/dist/adapters/http/middleware/built-in/basic.mjs

@@ -0,0 +1,9 @@
+import { basic } from "@routup/basic";
+//#region src/adapters/http/middleware/built-in/basic.ts
+function registerBasicMiddleware(router, input) {
+	router.use(basic(input));
+}
+//#endregion
+export { registerBasicMiddleware };
+
+//# sourceMappingURL=basic.mjs.map

package/dist/adapters/http/middleware/built-in/basic.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"basic.mjs","names":["basic","registerBasicMiddleware","router","input","use"],"sources":["../../../../../src/adapters/http/middleware/built-in/basic.ts"],"sourcesContent":["/*\n * Copyright (c) 2023.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport type { Options } from '@routup/basic';\nimport { basic } from '@routup/basic';\nimport type { Router } from 'routup';\n\nexport function registerBasicMiddleware(router: Router, input?: Options) {\n    router.use(basic(input));\n}\n"],"mappings":";;AAWA,SAAgBC,wBAAwBC,QAAgBC,OAAe;AACnED,QAAOE,IAAIJ,MAAMG,MAAAA,CAAAA"}

package/dist/adapters/http/middleware/built-in/cors.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cors.d.ts","sourceRoot":"","sources":["../../../../../src/adapters/http/middleware/built-in/cors.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,MAAM,CAAC;AAGxC,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAGrC,wBAAgB,sBAAsB,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,WAAW,QASzE"}

package/dist/adapters/http/middleware/built-in/cors.mjs

@@ -0,0 +1,17 @@
+import { merge } from "smob";
+import { coreHandler } from "routup";
+import cors from "cors";
+//#region src/adapters/http/middleware/built-in/cors.ts
+function registerCorsMiddleware(router, input) {
+	const options = merge(input || {}, {
+		origin(_origin, callback) {
+			callback(null, true);
+		},
+		credentials: true
+	});
+	router.use(coreHandler((req, res, next) => cors(options)(req, res, next)));
+}
+//#endregion
+export { registerCorsMiddleware };
+
+//# sourceMappingURL=cors.mjs.map

package/dist/adapters/http/middleware/built-in/cors.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"cors.mjs","names":["cors","coreHandler","merge","registerCorsMiddleware","router","input","options","origin","_origin","callback","credentials","use","req","res","next"],"sources":["../../../../../src/adapters/http/middleware/built-in/cors.ts"],"sourcesContent":["/*\n * Copyright (c) 2023.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport type { CorsOptions } from 'cors';\nimport cors from 'cors';\nimport { coreHandler } from 'routup';\nimport type { Router } from 'routup';\nimport { merge } from 'smob';\n\nexport function registerCorsMiddleware(router: Router, input?: CorsOptions) {\n    const options : CorsOptions = merge(input || {}, {\n        origin(_origin, callback) {\n            callback(null, true);\n        },\n        credentials: true,\n    } satisfies CorsOptions);\n\n    router.use(coreHandler((req, res, next) => cors(options)(req, res, next)));\n}\n"],"mappings":";;;;AAaA,SAAgBG,uBAAuBC,QAAgBC,OAAmB;CACtE,MAAMC,UAAwBJ,MAAMG,SAAS,EAAC,EAAG;EAC7CE,OAAOC,SAASC,UAAQ;AACpBA,YAAS,MAAM,KAAA;;EAEnBC,aAAa;EACjB,CAAA;AAEAN,QAAOO,IAAIV,aAAaW,KAAKC,KAAKC,SAASd,KAAKM,QAAAA,CAASM,KAAKC,KAAKC,KAAAA,CAAAA,CAAAA"}

package/dist/adapters/http/middleware/built-in/error.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"error.d.ts","sourceRoot":"","sources":["../../../../../src/adapters/http/middleware/built-in/error.ts"],"names":[],"mappings":"AAQA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAerC,wBAAgB,uBAAuB,CAAC,MAAM,EAAE,MAAM,QAmCrD"}

package/dist/adapters/http/middleware/built-in/error.mjs

@@ -0,0 +1,32 @@
+import { sanitizeError } from "../../../../utils/error.mjs";
+import "../../../../utils/index.mjs";
+import { useLogger } from "@authup/server-kit";
+import { isObject } from "@authup/kit";
+import { errorHandler, send } from "routup";
+//#region src/adapters/http/middleware/built-in/error.ts
+function registerErrorMiddleware(router) {
+	router.use(errorHandler((error, request, response) => {
+		let next;
+		if (error.cause) next = sanitizeError(error.cause);
+		else next = sanitizeError(error);
+		const payload = {
+			statusCode: next.statusCode,
+			code: `${next.code}`,
+			message: next.message,
+			issues: next.issues
+		};
+		if (next.statusCode >= 500 && next.statusCode < 600) {
+			useLogger().error(next);
+			payload.message = "An internal server error occurred.";
+		} else if (isObject(next.data)) {
+			const keys = Object.keys(next.data);
+			for (const key of keys) payload[key] = next.data[key];
+		}
+		response.statusCode = payload.statusCode;
+		return send(response, payload);
+	}));
+}
+//#endregion
+export { registerErrorMiddleware };
+
+//# sourceMappingURL=error.mjs.map

package/dist/adapters/http/middleware/built-in/error.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"error.mjs","names":["isObject","errorHandler","send","useLogger","sanitizeError","registerErrorMiddleware","router","use","error","request","response","next","cause","payload","statusCode","code","message","issues","isServerError","data","keys","Object","key"],"sources":["../../../../../src/adapters/http/middleware/built-in/error.ts"],"sourcesContent":["/*\n * Copyright (c) 2021-2023.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport { isObject } from '@authup/kit';\nimport type { Router } from 'routup';\nimport { errorHandler, send } from 'routup';\nimport { useLogger } from '@authup/server-kit';\nimport type { AuthupError } from '@authup/errors';\nimport type { Issue } from 'validup';\nimport { sanitizeError } from '../../../../utils/index.ts';\n\ntype ErrorResponsePayload = {\n    statusCode: number,\n    code: string,\n    message: string,\n    issues: Issue[],\n    [key: string]: any\n};\n\nexport function registerErrorMiddleware(router: Router) {\n    router.use(errorHandler((\n        error,\n        request,\n        response,\n    ) => {\n        let next : AuthupError;\n        if (error.cause) {\n            next = sanitizeError(error.cause);\n        } else {\n            next = sanitizeError(error);\n        }\n\n        const payload : ErrorResponsePayload = {\n            statusCode: next.statusCode,\n            code: `${next.code}`,\n            message: next.message,\n            issues: next.issues,\n        };\n\n        const isServerError = next.statusCode >= 500 && next.statusCode < 600;\n        if (isServerError) {\n            useLogger().error(next);\n\n            payload.message = 'An internal server error occurred.';\n        } else if (isObject(next.data)) {\n            const keys = Object.keys(next.data);\n            for (const key of keys) {\n                payload[key] = next.data[key];\n            }\n        }\n\n        response.statusCode = payload.statusCode;\n        return send(response, payload);\n    }));\n}\n"],"mappings":";;;;;;AAuBA,SAAgBK,wBAAwBC,QAAc;AAClDA,QAAOC,IAAIN,cACPO,OACAC,SACAC,aAAAA;EAEA,IAAIC;AACJ,MAAIH,MAAMI,MACND,QAAOP,cAAcI,MAAMI,MAAK;MAEhCD,QAAOP,cAAcI,MAAAA;EAGzB,MAAMK,UAAiC;GACnCC,YAAYH,KAAKG;GACjBC,MAAM,GAAGJ,KAAKI;GACdC,SAASL,KAAKK;GACdC,QAAQN,KAAKM;GACjB;AAGA,MADsBN,KAAKG,cAAc,OAAOH,KAAKG,aAAa,KAC/C;AACfX,cAAAA,CAAYK,MAAMG,KAAAA;AAElBE,WAAQG,UAAU;aACXhB,SAASW,KAAKQ,KAAI,EAAG;GAC5B,MAAMC,OAAOC,OAAOD,KAAKT,KAAKQ,KAAI;AAClC,QAAK,MAAMG,OAAOF,KACdP,SAAQS,OAAOX,KAAKQ,KAAKG;;AAIjCZ,WAASI,aAAaD,QAAQC;AAC9B,SAAOZ,KAAKQ,UAAUG,QAAAA;GAC1B,CAAA"}