@authup/server-core 1.0.0-beta.4 → 1.0.0-beta.40

package/dist/core/identity/provider/authentication/presets/facebook.d.ts

@@ -0,0 +1,9 @@
+import type { TokenGrantResponse } from '@hapic/oauth2';
+import type { IdentityProviderIdentity } from '../../types.ts';
+import type { IdentityProviderOAuth2AuthenticatorContext } from '../protocols/index.ts';
+import { IdentityProviderOAuth2Authenticator } from '../protocols/index.ts';
+export declare class IdentityProviderFacebookAuthenticator extends IdentityProviderOAuth2Authenticator {
+    constructor(ctx: IdentityProviderOAuth2AuthenticatorContext);
+    protected buildIdentityWithTokenGrantResponse(input: TokenGrantResponse): Promise<IdentityProviderIdentity>;
+}
+//# sourceMappingURL=facebook.d.ts.map

package/dist/core/identity/provider/authentication/presets/facebook.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"facebook.d.ts","sourceRoot":"","sources":["../../../../../../src/core/identity/provider/authentication/presets/facebook.ts"],"names":[],"mappings":"AAQA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,eAAe,CAAC;AACxD,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,gBAAgB,CAAC;AAC/D,OAAO,KAAK,EAAE,0CAA0C,EAAE,MAAM,uBAAuB,CAAC;AACxF,OAAO,EAAE,mCAAmC,EAAE,MAAM,uBAAuB,CAAC;AAE5E,qBAAa,qCAAsC,SAAQ,mCAAmC;gBAC9E,GAAG,EAAE,0CAA0C;cAS3C,mCAAmC,CAAC,KAAK,EAAE,kBAAkB,GAAG,OAAO,CAAC,wBAAwB,CAAC;CA6BpH"}

package/dist/core/identity/provider/authentication/presets/facebook.mjs

@@ -0,0 +1,35 @@
+import { IdentityProviderOAuth2Authenticator } from "../protocols/oauth2/module.mjs";
+import "../protocols/index.mjs";
+import { extractTokenPayload } from "@authup/server-kit";
+//#region src/core/identity/provider/authentication/presets/facebook.ts
+var IdentityProviderFacebookAuthenticator = class extends IdentityProviderOAuth2Authenticator {
+	constructor(ctx) {
+		ctx.provider.scope = "email";
+		ctx.provider.authorize_url = "https://graph.facebook.com/oauth/authorize";
+		ctx.provider.token_url = "https://graph.facebook.com/oauth/access_token";
+		ctx.provider.user_info_url = "https://graph.facebook.com/me?fields=id,name,email,first_name,last_name";
+		super(ctx);
+	}
+	async buildIdentityWithTokenGrantResponse(input) {
+		const userInfo = await this.client.userInfo.get({
+			type: "Bearer",
+			token: input.access_token
+		});
+		const payload = extractTokenPayload(input.access_token);
+		return {
+			id: userInfo.id,
+			attributeCandidates: {
+				name: [userInfo.username, userInfo.id],
+				email: [userInfo.email],
+				first_name: [userInfo.first_name],
+				last_name: [userInfo.last_name]
+			},
+			data: payload,
+			provider: this.provider
+		};
+	}
+};
+//#endregion
+export { IdentityProviderFacebookAuthenticator };
+
+//# sourceMappingURL=facebook.mjs.map

package/dist/core/identity/provider/authentication/presets/facebook.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"facebook.mjs","names":["extractTokenPayload","IdentityProviderOAuth2Authenticator","IdentityProviderFacebookAuthenticator","ctx","provider","scope","authorize_url","token_url","user_info_url","buildIdentityWithTokenGrantResponse","input","userInfo","client","get","type","token","access_token","payload","id","attributeCandidates","name","username","email","first_name","last_name","data"],"sources":["../../../../../../src/core/identity/provider/authentication/presets/facebook.ts"],"sourcesContent":["/*\n * Copyright (c) 2023-2023.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport { extractTokenPayload } from '@authup/server-kit';\nimport type { TokenGrantResponse } from '@hapic/oauth2';\nimport type { IdentityProviderIdentity } from '../../types.ts';\nimport type { IdentityProviderOAuth2AuthenticatorContext } from '../protocols/index.ts';\nimport { IdentityProviderOAuth2Authenticator } from '../protocols/index.ts';\n\nexport class IdentityProviderFacebookAuthenticator extends IdentityProviderOAuth2Authenticator {\n    constructor(ctx: IdentityProviderOAuth2AuthenticatorContext) {\n        ctx.provider.scope = 'email';\n        ctx.provider.authorize_url = 'https://graph.facebook.com/oauth/authorize';\n        ctx.provider.token_url = 'https://graph.facebook.com/oauth/access_token';\n        ctx.provider.user_info_url = 'https://graph.facebook.com/me?fields=id,name,email,first_name,last_name';\n\n        super(ctx);\n    }\n\n    protected async buildIdentityWithTokenGrantResponse(input: TokenGrantResponse): Promise<IdentityProviderIdentity> {\n        const userInfo = await this.client.userInfo.get({\n            type: 'Bearer',\n            token: input.access_token,\n        });\n\n        const payload = extractTokenPayload(input.access_token);\n\n        return {\n            id: userInfo.id,\n            attributeCandidates: {\n                name: [\n                    userInfo.username,\n                    userInfo.id,\n                ],\n                email: [\n                    userInfo.email,\n                ],\n                first_name: [\n                    userInfo.first_name,\n                ],\n                last_name: [\n                    userInfo.last_name,\n                ],\n            },\n            data: payload,\n            provider: this.provider,\n        };\n    }\n}\n"],"mappings":";;;;AAaA,IAAaE,wCAAb,cAA2DD,oCAAAA;CACvD,YAAYE,KAAiD;AACzDA,MAAIC,SAASC,QAAQ;AACrBF,MAAIC,SAASE,gBAAgB;AAC7BH,MAAIC,SAASG,YAAY;AACzBJ,MAAIC,SAASI,gBAAgB;AAE7B,QAAML,IAAAA;;CAGV,MAAgBM,oCAAoCC,OAA8D;EAC9G,MAAMC,WAAW,MAAM,KAAKC,OAAOD,SAASE,IAAI;GAC5CC,MAAM;GACNC,OAAOL,MAAMM;GACjB,CAAA;EAEA,MAAMC,UAAUjB,oBAAoBU,MAAMM,aAAY;AAEtD,SAAO;GACHE,IAAIP,SAASO;GACbC,qBAAqB;IACjBC,MAAM,CACFT,SAASU,UACTV,SAASO,GACZ;IACDI,OAAO,CACHX,SAASW,MACZ;IACDC,YAAY,CACRZ,SAASY,WACZ;IACDC,WAAW,CACPb,SAASa,UACZ;IACL;GACAC,MAAMR;GACNb,UAAU,KAAKA;GACnB"}

package/dist/core/identity/provider/authentication/presets/github.d.ts

@@ -0,0 +1,9 @@
+import type { TokenGrantResponse } from '@hapic/oauth2';
+import type { IdentityProviderIdentity } from '../../types.ts';
+import type { IdentityProviderOAuth2AuthenticatorContext } from '../protocols/index.ts';
+import { IdentityProviderOAuth2Authenticator } from '../protocols/index.ts';
+export declare class IdentityProviderGithubAuthenticator extends IdentityProviderOAuth2Authenticator {
+    constructor(ctx: IdentityProviderOAuth2AuthenticatorContext);
+    protected buildIdentityWithTokenGrantResponse(input: TokenGrantResponse): Promise<IdentityProviderIdentity>;
+}
+//# sourceMappingURL=github.d.ts.map

package/dist/core/identity/provider/authentication/presets/github.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"github.d.ts","sourceRoot":"","sources":["../../../../../../src/core/identity/provider/authentication/presets/github.ts"],"names":[],"mappings":"AAQA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,eAAe,CAAC;AACxD,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,gBAAgB,CAAC;AAC/D,OAAO,KAAK,EAAE,0CAA0C,EAAE,MAAM,uBAAuB,CAAC;AACxF,OAAO,EAAE,mCAAmC,EAAE,MAAM,uBAAuB,CAAC;AAE5E,qBAAa,mCAAoC,SAAQ,mCAAmC;gBAC5E,GAAG,EAAE,0CAA0C;cAS3C,mCAAmC,CAAC,KAAK,EAAE,kBAAkB,GAAG,OAAO,CAAC,wBAAwB,CAAC;CAwBpH"}

package/dist/core/identity/provider/authentication/presets/github.mjs

@@ -0,0 +1,37 @@
+import { IdentityProviderOAuth2Authenticator } from "../protocols/oauth2/module.mjs";
+import "../protocols/index.mjs";
+import { extractTokenPayload } from "@authup/server-kit";
+//#region src/core/identity/provider/authentication/presets/github.ts
+var IdentityProviderGithubAuthenticator = class extends IdentityProviderOAuth2Authenticator {
+	constructor(ctx) {
+		ctx.provider.scope = "user:email";
+		ctx.provider.authorize_url = "https://github.com/login/oauth/authorize";
+		ctx.provider.token_url = "https://github.com/login/oauth/access_token";
+		ctx.provider.user_info_url = "https://api.github.com/user";
+		super(ctx);
+	}
+	async buildIdentityWithTokenGrantResponse(input) {
+		const userInfo = await this.client.userInfo.get({
+			type: "Bearer",
+			token: input.access_token
+		});
+		const payload = extractTokenPayload(input.access_token);
+		return {
+			id: userInfo.id,
+			attributeCandidates: {
+				name: [
+					userInfo.login,
+					userInfo.name,
+					userInfo.id
+				],
+				email: [userInfo.email]
+			},
+			data: payload,
+			provider: this.provider
+		};
+	}
+};
+//#endregion
+export { IdentityProviderGithubAuthenticator };
+
+//# sourceMappingURL=github.mjs.map

package/dist/core/identity/provider/authentication/presets/github.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"github.mjs","names":["extractTokenPayload","IdentityProviderOAuth2Authenticator","IdentityProviderGithubAuthenticator","ctx","provider","scope","authorize_url","token_url","user_info_url","buildIdentityWithTokenGrantResponse","input","userInfo","client","get","type","token","access_token","payload","id","attributeCandidates","name","login","email","data"],"sources":["../../../../../../src/core/identity/provider/authentication/presets/github.ts"],"sourcesContent":["/*\n * Copyright (c) 2023-2023.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport { extractTokenPayload } from '@authup/server-kit';\nimport type { TokenGrantResponse } from '@hapic/oauth2';\nimport type { IdentityProviderIdentity } from '../../types.ts';\nimport type { IdentityProviderOAuth2AuthenticatorContext } from '../protocols/index.ts';\nimport { IdentityProviderOAuth2Authenticator } from '../protocols/index.ts';\n\nexport class IdentityProviderGithubAuthenticator extends IdentityProviderOAuth2Authenticator {\n    constructor(ctx: IdentityProviderOAuth2AuthenticatorContext) {\n        ctx.provider.scope = 'user:email';\n        ctx.provider.authorize_url = 'https://github.com/login/oauth/authorize';\n        ctx.provider.token_url = 'https://github.com/login/oauth/access_token';\n        ctx.provider.user_info_url = 'https://api.github.com/user';\n\n        super(ctx);\n    }\n\n    protected async buildIdentityWithTokenGrantResponse(input: TokenGrantResponse): Promise<IdentityProviderIdentity> {\n        const userInfo = await this.client.userInfo.get({\n            type: 'Bearer',\n            token: input.access_token,\n        });\n\n        const payload = extractTokenPayload(input.access_token);\n\n        return {\n            id: userInfo.id,\n            attributeCandidates: {\n                name: [\n                    userInfo.login,\n                    userInfo.name,\n                    userInfo.id,\n                ],\n                email: [\n                    userInfo.email,\n                ],\n            },\n            data: payload,\n            provider: this.provider,\n        };\n    }\n}\n"],"mappings":";;;;AAaA,IAAaE,sCAAb,cAAyDD,oCAAAA;CACrD,YAAYE,KAAiD;AACzDA,MAAIC,SAASC,QAAQ;AACrBF,MAAIC,SAASE,gBAAgB;AAC7BH,MAAIC,SAASG,YAAY;AACzBJ,MAAIC,SAASI,gBAAgB;AAE7B,QAAML,IAAAA;;CAGV,MAAgBM,oCAAoCC,OAA8D;EAC9G,MAAMC,WAAW,MAAM,KAAKC,OAAOD,SAASE,IAAI;GAC5CC,MAAM;GACNC,OAAOL,MAAMM;GACjB,CAAA;EAEA,MAAMC,UAAUjB,oBAAoBU,MAAMM,aAAY;AAEtD,SAAO;GACHE,IAAIP,SAASO;GACbC,qBAAqB;IACjBC,MAAM;KACFT,SAASU;KACTV,SAASS;KACTT,SAASO;KACZ;IACDI,OAAO,CACHX,SAASW,MACZ;IACL;GACAC,MAAMN;GACNb,UAAU,KAAKA;GACnB"}

package/dist/core/identity/provider/authentication/presets/google.d.ts

@@ -0,0 +1,9 @@
+import type { TokenGrantResponse } from '@hapic/oauth2';
+import type { IdentityProviderIdentity } from '../../types.ts';
+import type { IdentityProviderOAuth2AuthenticatorContext } from '../protocols/index.ts';
+import { IdentityProviderOAuth2Authenticator } from '../protocols/index.ts';
+export declare class IdentityProviderGoogleAuthenticator extends IdentityProviderOAuth2Authenticator {
+    constructor(ctx: IdentityProviderOAuth2AuthenticatorContext);
+    protected buildIdentityWithTokenGrantResponse(input: TokenGrantResponse): Promise<IdentityProviderIdentity>;
+}
+//# sourceMappingURL=google.d.ts.map

package/dist/core/identity/provider/authentication/presets/google.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"google.d.ts","sourceRoot":"","sources":["../../../../../../src/core/identity/provider/authentication/presets/google.ts"],"names":[],"mappings":"AAUA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,eAAe,CAAC;AACxD,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,gBAAgB,CAAC;AAC/D,OAAO,KAAK,EAAE,0CAA0C,EAAE,MAAM,uBAAuB,CAAC;AACxF,OAAO,EAAE,mCAAmC,EAAE,MAAM,uBAAuB,CAAC;AAE5E,qBAAa,mCAAoC,SAAQ,mCAAmC;gBAC5E,GAAG,EAAE,0CAA0C;cAS3C,mCAAmC,CAAC,KAAK,EAAE,kBAAkB,GAAG,OAAO,CAAC,wBAAwB,CAAC;CAkCpH"}

package/dist/core/identity/provider/authentication/presets/google.mjs

@@ -0,0 +1,36 @@
+import { IdentityProviderOAuth2Authenticator } from "../protocols/oauth2/module.mjs";
+import "../protocols/index.mjs";
+import { extractTokenPayload } from "@authup/server-kit";
+//#region src/core/identity/provider/authentication/presets/google.ts
+var IdentityProviderGoogleAuthenticator = class extends IdentityProviderOAuth2Authenticator {
+	constructor(ctx) {
+		ctx.provider.scope = "openid profile email";
+		ctx.provider.authorize_url = "https://accounts.google.com/o/oauth2/v2/auth";
+		ctx.provider.token_url = "https://oauth2.googleapis.com/token";
+		ctx.provider.user_info_url = "https://openidconnect.googleapis.com/v1/userinfo";
+		super(ctx);
+	}
+	async buildIdentityWithTokenGrantResponse(input) {
+		const payload = extractTokenPayload(input.access_token);
+		const attributeCandidates = {};
+		/**
+		* @see https://developers.google.com/identity/openid-connect/openid-connect?hl=de#server-flow
+		*/ if (input.id_token) {
+			const idTokenPayload = extractTokenPayload(input.id_token);
+			attributeCandidates.name = [idTokenPayload.name];
+			attributeCandidates.email = [idTokenPayload.email];
+			attributeCandidates.first_name = [idTokenPayload.given_name];
+			attributeCandidates.last_name = [idTokenPayload.family_name];
+		}
+		return {
+			id: payload.sub,
+			attributeCandidates,
+			data: payload,
+			provider: this.provider
+		};
+	}
+};
+//#endregion
+export { IdentityProviderGoogleAuthenticator };
+
+//# sourceMappingURL=google.mjs.map

package/dist/core/identity/provider/authentication/presets/google.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"google.mjs","names":["extractTokenPayload","IdentityProviderOAuth2Authenticator","IdentityProviderGoogleAuthenticator","ctx","provider","scope","authorize_url","token_url","user_info_url","buildIdentityWithTokenGrantResponse","input","payload","access_token","attributeCandidates","id_token","idTokenPayload","name","email","first_name","given_name","last_name","family_name","id","sub","data"],"sources":["../../../../../../src/core/identity/provider/authentication/presets/google.ts"],"sourcesContent":["/*\n * Copyright (c) 2023-2023.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport type { User } from '@authup/core-kit';\nimport { extractTokenPayload } from '@authup/server-kit';\nimport type { OpenIDTokenPayload } from '@authup/specs';\nimport type { TokenGrantResponse } from '@hapic/oauth2';\nimport type { IdentityProviderIdentity } from '../../types.ts';\nimport type { IdentityProviderOAuth2AuthenticatorContext } from '../protocols/index.ts';\nimport { IdentityProviderOAuth2Authenticator } from '../protocols/index.ts';\n\nexport class IdentityProviderGoogleAuthenticator extends IdentityProviderOAuth2Authenticator {\n    constructor(ctx: IdentityProviderOAuth2AuthenticatorContext) {\n        ctx.provider.scope = 'openid profile email';\n        ctx.provider.authorize_url = 'https://accounts.google.com/o/oauth2/v2/auth';\n        ctx.provider.token_url = 'https://oauth2.googleapis.com/token';\n        ctx.provider.user_info_url = 'https://openidconnect.googleapis.com/v1/userinfo';\n\n        super(ctx);\n    }\n\n    protected async buildIdentityWithTokenGrantResponse(input: TokenGrantResponse): Promise<IdentityProviderIdentity> {\n        const payload = extractTokenPayload(input.access_token);\n\n        const attributeCandidates : Record<keyof User, unknown[]> = {};\n\n        /**\n         * @see https://developers.google.com/identity/openid-connect/openid-connect?hl=de#server-flow\n         */\n        if (input.id_token) {\n            const idTokenPayload = extractTokenPayload(input.id_token) as OpenIDTokenPayload;\n\n            attributeCandidates.name = [\n                idTokenPayload.name,\n            ];\n\n            attributeCandidates.email = [\n                idTokenPayload.email,\n            ];\n\n            attributeCandidates.first_name = [\n                idTokenPayload.given_name,\n            ];\n            attributeCandidates.last_name = [\n                idTokenPayload.family_name,\n            ];\n        }\n\n        return {\n            id: payload.sub!,\n            attributeCandidates,\n            data: payload,\n            provider: this.provider,\n        };\n    }\n}\n"],"mappings":";;;;AAeA,IAAaE,sCAAb,cAAyDD,oCAAAA;CACrD,YAAYE,KAAiD;AACzDA,MAAIC,SAASC,QAAQ;AACrBF,MAAIC,SAASE,gBAAgB;AAC7BH,MAAIC,SAASG,YAAY;AACzBJ,MAAIC,SAASI,gBAAgB;AAE7B,QAAML,IAAAA;;CAGV,MAAgBM,oCAAoCC,OAA8D;EAC9G,MAAMC,UAAUX,oBAAoBU,MAAME,aAAY;EAEtD,MAAMC,sBAAsD,EAAC;;;IAK7D,KAAIH,MAAMI,UAAU;GAChB,MAAMC,iBAAiBf,oBAAoBU,MAAMI,SAAQ;AAEzDD,uBAAoBG,OAAO,CACvBD,eAAeC,KAClB;AAEDH,uBAAoBI,QAAQ,CACxBF,eAAeE,MAClB;AAEDJ,uBAAoBK,aAAa,CAC7BH,eAAeI,WAClB;AACDN,uBAAoBO,YAAY,CAC5BL,eAAeM,YAClB;;AAGL,SAAO;GACHC,IAAIX,QAAQY;GACZV;GACAW,MAAMb;GACNP,UAAU,KAAKA;GACnB"}

package/dist/core/identity/provider/authentication/presets/index.d.ts

@@ -0,0 +1,6 @@
+export * from './facebook.ts';
+export * from './github.ts';
+export * from './google.ts';
+export * from './instagram.ts';
+export * from './paypal.ts';
+//# sourceMappingURL=index.d.ts.map

package/dist/core/identity/provider/authentication/presets/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../../src/core/identity/provider/authentication/presets/index.ts"],"names":[],"mappings":"AAOA,cAAc,eAAe,CAAC;AAC9B,cAAc,aAAa,CAAC;AAC5B,cAAc,aAAa,CAAC;AAC5B,cAAc,gBAAgB,CAAC;AAC/B,cAAc,aAAa,CAAC"}

package/dist/core/identity/provider/authentication/presets/index.mjs

@@ -0,0 +1,6 @@
+import { IdentityProviderFacebookAuthenticator } from "./facebook.mjs";
+import { IdentityProviderGithubAuthenticator } from "./github.mjs";
+import { IdentityProviderGoogleAuthenticator } from "./google.mjs";
+import { IdentityProviderInstagramAuthenticator } from "./instagram.mjs";
+import { IdentityProviderPaypalAuthenticator } from "./paypal.mjs";
+export { IdentityProviderFacebookAuthenticator, IdentityProviderGithubAuthenticator, IdentityProviderGoogleAuthenticator, IdentityProviderInstagramAuthenticator, IdentityProviderPaypalAuthenticator };

package/dist/core/identity/provider/authentication/presets/instagram.d.ts

@@ -0,0 +1,9 @@
+import type { TokenGrantResponse } from '@hapic/oauth2';
+import type { IdentityProviderIdentity } from '../../types.ts';
+import type { IdentityProviderOAuth2AuthenticatorContext } from '../protocols/index.ts';
+import { IdentityProviderOAuth2Authenticator } from '../protocols/index.ts';
+export declare class IdentityProviderInstagramAuthenticator extends IdentityProviderOAuth2Authenticator {
+    constructor(ctx: IdentityProviderOAuth2AuthenticatorContext);
+    protected buildIdentityWithTokenGrantResponse(input: TokenGrantResponse): Promise<IdentityProviderIdentity>;
+}
+//# sourceMappingURL=instagram.d.ts.map

package/dist/core/identity/provider/authentication/presets/instagram.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"instagram.d.ts","sourceRoot":"","sources":["../../../../../../src/core/identity/provider/authentication/presets/instagram.ts"],"names":[],"mappings":"AAQA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,eAAe,CAAC;AACxD,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,gBAAgB,CAAC;AAC/D,OAAO,KAAK,EAAE,0CAA0C,EAAE,MAAM,uBAAuB,CAAC;AACxF,OAAO,EAAE,mCAAmC,EAAE,MAAM,uBAAuB,CAAC;AAE5E,qBAAa,sCAAuC,SAAQ,mCAAmC;gBAC/E,GAAG,EAAE,0CAA0C;cAS3C,mCAAmC,CAAC,KAAK,EAAE,kBAAkB,GAAG,OAAO,CAAC,wBAAwB,CAAC;CAoBpH"}

package/dist/core/identity/provider/authentication/presets/instagram.mjs

@@ -0,0 +1,30 @@
+import { IdentityProviderOAuth2Authenticator } from "../protocols/oauth2/module.mjs";
+import "../protocols/index.mjs";
+import { extractTokenPayload } from "@authup/server-kit";
+//#region src/core/identity/provider/authentication/presets/instagram.ts
+var IdentityProviderInstagramAuthenticator = class extends IdentityProviderOAuth2Authenticator {
+	constructor(ctx) {
+		ctx.provider.scope = "user_profile";
+		ctx.provider.authorize_url = "https://api.instagram.com/oauth/authorize";
+		ctx.provider.token_url = "https://api.instagram.com/oauth/access_token";
+		ctx.provider.user_info_url = "https://graph.instagram.com/me?fields=id,username";
+		super(ctx);
+	}
+	async buildIdentityWithTokenGrantResponse(input) {
+		const userInfo = await this.client.userInfo.get({
+			type: "Bearer",
+			token: input.access_token
+		});
+		const payload = extractTokenPayload(input.access_token);
+		return {
+			id: userInfo.id,
+			attributeCandidates: { name: [userInfo.username, userInfo.id] },
+			data: payload,
+			provider: this.provider
+		};
+	}
+};
+//#endregion
+export { IdentityProviderInstagramAuthenticator };
+
+//# sourceMappingURL=instagram.mjs.map

package/dist/core/identity/provider/authentication/presets/instagram.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"instagram.mjs","names":["extractTokenPayload","IdentityProviderOAuth2Authenticator","IdentityProviderInstagramAuthenticator","ctx","provider","scope","authorize_url","token_url","user_info_url","buildIdentityWithTokenGrantResponse","input","userInfo","client","get","type","token","access_token","payload","id","attributeCandidates","name","username","data"],"sources":["../../../../../../src/core/identity/provider/authentication/presets/instagram.ts"],"sourcesContent":["/*\n * Copyright (c) 2023-2023.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport { extractTokenPayload } from '@authup/server-kit';\nimport type { TokenGrantResponse } from '@hapic/oauth2';\nimport type { IdentityProviderIdentity } from '../../types.ts';\nimport type { IdentityProviderOAuth2AuthenticatorContext } from '../protocols/index.ts';\nimport { IdentityProviderOAuth2Authenticator } from '../protocols/index.ts';\n\nexport class IdentityProviderInstagramAuthenticator extends IdentityProviderOAuth2Authenticator {\n    constructor(ctx: IdentityProviderOAuth2AuthenticatorContext) {\n        ctx.provider.scope = 'user_profile';\n        ctx.provider.authorize_url = 'https://api.instagram.com/oauth/authorize';\n        ctx.provider.token_url = 'https://api.instagram.com/oauth/access_token';\n        ctx.provider.user_info_url = 'https://graph.instagram.com/me?fields=id,username';\n\n        super(ctx);\n    }\n\n    protected async buildIdentityWithTokenGrantResponse(input: TokenGrantResponse): Promise<IdentityProviderIdentity> {\n        const userInfo = await this.client.userInfo.get({\n            type: 'Bearer',\n            token: input.access_token,\n        });\n\n        const payload = extractTokenPayload(input.access_token);\n\n        return {\n            id: userInfo.id,\n            attributeCandidates: {\n                name: [\n                    userInfo.username,\n                    userInfo.id,\n                ],\n            },\n            data: payload,\n            provider: this.provider,\n        };\n    }\n}\n"],"mappings":";;;;AAaA,IAAaE,yCAAb,cAA4DD,oCAAAA;CACxD,YAAYE,KAAiD;AACzDA,MAAIC,SAASC,QAAQ;AACrBF,MAAIC,SAASE,gBAAgB;AAC7BH,MAAIC,SAASG,YAAY;AACzBJ,MAAIC,SAASI,gBAAgB;AAE7B,QAAML,IAAAA;;CAGV,MAAgBM,oCAAoCC,OAA8D;EAC9G,MAAMC,WAAW,MAAM,KAAKC,OAAOD,SAASE,IAAI;GAC5CC,MAAM;GACNC,OAAOL,MAAMM;GACjB,CAAA;EAEA,MAAMC,UAAUjB,oBAAoBU,MAAMM,aAAY;AAEtD,SAAO;GACHE,IAAIP,SAASO;GACbC,qBAAqB,EACjBC,MAAM,CACFT,SAASU,UACTV,SAASO,GACZ,EACL;GACAI,MAAML;GACNb,UAAU,KAAKA;GACnB"}

package/dist/core/identity/provider/authentication/presets/paypal.d.ts

@@ -0,0 +1,9 @@
+import type { TokenGrantResponse } from '@hapic/oauth2';
+import type { IdentityProviderIdentity } from '../../types.ts';
+import type { IdentityProviderOAuth2AuthenticatorContext } from '../protocols/index.ts';
+import { IdentityProviderOAuth2Authenticator } from '../protocols/index.ts';
+export declare class IdentityProviderPaypalAuthenticator extends IdentityProviderOAuth2Authenticator {
+    constructor(ctx: IdentityProviderOAuth2AuthenticatorContext);
+    protected buildIdentityWithTokenGrantResponse(input: TokenGrantResponse): Promise<IdentityProviderIdentity>;
+}
+//# sourceMappingURL=paypal.d.ts.map

package/dist/core/identity/provider/authentication/presets/paypal.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"paypal.d.ts","sourceRoot":"","sources":["../../../../../../src/core/identity/provider/authentication/presets/paypal.ts"],"names":[],"mappings":"AAQA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,eAAe,CAAC;AACxD,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,gBAAgB,CAAC;AAC/D,OAAO,KAAK,EAAE,0CAA0C,EAAE,MAAM,uBAAuB,CAAC;AACxF,OAAO,EAAE,mCAAmC,EAAE,MAAM,uBAAuB,CAAC;AAE5E,qBAAa,mCAAoC,SAAQ,mCAAmC;gBAC5E,GAAG,EAAE,0CAA0C;cAS3C,mCAAmC,CAAC,KAAK,EAAE,kBAAkB,GAAG,OAAO,CAAC,wBAAwB,CAAC;CAuBpH"}

package/dist/core/identity/provider/authentication/presets/paypal.mjs

@@ -0,0 +1,33 @@
+import { IdentityProviderOAuth2Authenticator } from "../protocols/oauth2/module.mjs";
+import "../protocols/index.mjs";
+import { extractTokenPayload } from "@authup/server-kit";
+//#region src/core/identity/provider/authentication/presets/paypal.ts
+var IdentityProviderPaypalAuthenticator = class extends IdentityProviderOAuth2Authenticator {
+	constructor(ctx) {
+		ctx.provider.scope = "openid profile email";
+		ctx.provider.authorize_url = "https://www.paypal.com/signin/authorize";
+		ctx.provider.token_url = "https://api.paypal.com/v1/identity/openidconnect/tokenservice";
+		ctx.provider.user_info_url = "https://api.paypal.com/v1/oauth2/token/userinfo?schema=openid";
+		super(ctx);
+	}
+	async buildIdentityWithTokenGrantResponse(input) {
+		const userInfo = await this.client.userInfo.get({
+			type: "Bearer",
+			token: input.access_token
+		});
+		const payload = extractTokenPayload(input.access_token);
+		return {
+			id: userInfo.user_id,
+			attributeCandidates: {
+				name: [userInfo.name, userInfo.user_id],
+				email: [userInfo.email]
+			},
+			data: payload,
+			provider: this.provider
+		};
+	}
+};
+//#endregion
+export { IdentityProviderPaypalAuthenticator };
+
+//# sourceMappingURL=paypal.mjs.map

package/dist/core/identity/provider/authentication/presets/paypal.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"paypal.mjs","names":["extractTokenPayload","IdentityProviderOAuth2Authenticator","IdentityProviderPaypalAuthenticator","ctx","provider","scope","authorize_url","token_url","user_info_url","buildIdentityWithTokenGrantResponse","input","userInfo","client","get","type","token","access_token","payload","id","user_id","attributeCandidates","name","email","data"],"sources":["../../../../../../src/core/identity/provider/authentication/presets/paypal.ts"],"sourcesContent":["/*\n * Copyright (c) 2023-2023.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport { extractTokenPayload } from '@authup/server-kit';\nimport type { TokenGrantResponse } from '@hapic/oauth2';\nimport type { IdentityProviderIdentity } from '../../types.ts';\nimport type { IdentityProviderOAuth2AuthenticatorContext } from '../protocols/index.ts';\nimport { IdentityProviderOAuth2Authenticator } from '../protocols/index.ts';\n\nexport class IdentityProviderPaypalAuthenticator extends IdentityProviderOAuth2Authenticator {\n    constructor(ctx: IdentityProviderOAuth2AuthenticatorContext) {\n        ctx.provider.scope = 'openid profile email';\n        ctx.provider.authorize_url = 'https://www.paypal.com/signin/authorize';\n        ctx.provider.token_url = 'https://api.paypal.com/v1/identity/openidconnect/tokenservice';\n        ctx.provider.user_info_url = 'https://api.paypal.com/v1/oauth2/token/userinfo?schema=openid';\n\n        super(ctx);\n    }\n\n    protected async buildIdentityWithTokenGrantResponse(input: TokenGrantResponse): Promise<IdentityProviderIdentity> {\n        const userInfo = await this.client.userInfo.get({\n            type: 'Bearer',\n            token: input.access_token,\n        });\n\n        const payload = extractTokenPayload(input.access_token);\n\n        return {\n            id: userInfo.user_id,\n            attributeCandidates: {\n                name: [\n                    userInfo.name,\n                    userInfo.user_id,\n                ],\n                email: [\n                    userInfo.email,\n                ],\n            },\n            data: payload,\n            provider: this.provider,\n        };\n    }\n}\n"],"mappings":";;;;AAaA,IAAaE,sCAAb,cAAyDD,oCAAAA;CACrD,YAAYE,KAAiD;AACzDA,MAAIC,SAASC,QAAQ;AACrBF,MAAIC,SAASE,gBAAgB;AAC7BH,MAAIC,SAASG,YAAY;AACzBJ,MAAIC,SAASI,gBAAgB;AAE7B,QAAML,IAAAA;;CAGV,MAAgBM,oCAAoCC,OAA8D;EAC9G,MAAMC,WAAW,MAAM,KAAKC,OAAOD,SAASE,IAAI;GAC5CC,MAAM;GACNC,OAAOL,MAAMM;GACjB,CAAA;EAEA,MAAMC,UAAUjB,oBAAoBU,MAAMM,aAAY;AAEtD,SAAO;GACHE,IAAIP,SAASQ;GACbC,qBAAqB;IACjBC,MAAM,CACFV,SAASU,MACTV,SAASQ,QACZ;IACDG,OAAO,CACHX,SAASW,MACZ;IACL;GACAC,MAAMN;GACNb,UAAU,KAAKA;GACnB"}

package/dist/core/identity/provider/authentication/protocols/index.d.ts

@@ -0,0 +1,4 @@
+export * from './ldap/index.ts';
+export * from './oauth2/index.ts';
+export * from './open-id/index.ts';
+//# sourceMappingURL=index.d.ts.map

package/dist/core/identity/provider/authentication/protocols/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../../src/core/identity/provider/authentication/protocols/index.ts"],"names":[],"mappings":"AAOA,cAAc,iBAAiB,CAAC;AAChC,cAAc,mBAAmB,CAAC;AAClC,cAAc,oBAAoB,CAAC"}

package/dist/core/identity/provider/authentication/protocols/index.mjs

@@ -0,0 +1,8 @@
+import { IdentityProviderLdapAuthenticator } from "./ldap/module.mjs";
+import { IdentityProviderLdapCollectionAuthenticator } from "./ldap/collection.mjs";
+import "./ldap/index.mjs";
+import { IdentityProviderOAuth2Authenticator } from "./oauth2/module.mjs";
+import "./oauth2/index.mjs";
+import { IdentityProviderOpenIDAuthenticator } from "./open-id/module.mjs";
+import "./open-id/index.mjs";
+export { IdentityProviderLdapAuthenticator, IdentityProviderLdapCollectionAuthenticator, IdentityProviderOAuth2Authenticator, IdentityProviderOpenIDAuthenticator };

package/dist/core/identity/provider/authentication/protocols/ldap/collection.d.ts

@@ -0,0 +1,14 @@
+import type { User } from '@authup/core-kit';
+import type { IIdentityProviderRepository } from '../../../../../entities/index.ts';
+import type { IIdentityProviderAccountManager } from '../../../account/index.ts';
+import type { ILdapClientFactory } from '../../../../../ldap/index.ts';
+import { BaseCredentialsAuthenticator } from '../../../../../authentication/index.ts';
+import type { IdentityProviderLdapCollectionAuthenticatorContext } from './types.ts';
+export declare class IdentityProviderLdapCollectionAuthenticator extends BaseCredentialsAuthenticator<User> {
+    protected repository: IIdentityProviderRepository;
+    protected accountManager: IIdentityProviderAccountManager;
+    protected clientFactory: ILdapClientFactory;
+    constructor(ctx: IdentityProviderLdapCollectionAuthenticatorContext);
+    authenticate(name: string, password: string, realmId?: string): Promise<User>;
+}
+//# sourceMappingURL=collection.d.ts.map

package/dist/core/identity/provider/authentication/protocols/ldap/collection.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"collection.d.ts","sourceRoot":"","sources":["../../../../../../../src/core/identity/provider/authentication/protocols/ldap/collection.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAC;AAE7C,OAAO,KAAK,EAAE,2BAA2B,EAAE,MAAM,kCAAkC,CAAC;AACpF,OAAO,KAAK,EAAE,+BAA+B,EAAE,MAAM,2BAA2B,CAAC;AAEjF,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,8BAA8B,CAAC;AACvE,OAAO,EAAE,4BAA4B,EAAE,MAAM,wCAAwC,CAAC;AACtF,OAAO,KAAK,EAAE,kDAAkD,EAAE,MAAM,YAAY,CAAC;AAErF,qBAAa,2CAA4C,SAAQ,4BAA4B,CAAC,IAAI,CAAC;IAC/F,SAAS,CAAC,UAAU,EAAE,2BAA2B,CAAC;IAElD,SAAS,CAAC,cAAc,EAAE,+BAA+B,CAAC;IAE1D,SAAS,CAAC,aAAa,EAAE,kBAAkB,CAAC;gBAEhC,GAAG,EAAE,kDAAkD;IAQ7D,YAAY,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;CA6BtF"}

package/dist/core/identity/provider/authentication/protocols/ldap/collection.mjs

@@ -0,0 +1,36 @@
+import { BaseCredentialsAuthenticator } from "../../../../../authentication/base.mjs";
+import "../../../../../authentication/index.mjs";
+import { IdentityProviderLdapAuthenticator } from "./module.mjs";
+import { IdentityProviderProtocol, UserError, isLdapIdentityProvider } from "@authup/core-kit";
+//#region src/core/identity/provider/authentication/protocols/ldap/collection.ts
+var IdentityProviderLdapCollectionAuthenticator = class extends BaseCredentialsAuthenticator {
+	repository;
+	accountManager;
+	clientFactory;
+	constructor(ctx) {
+		super();
+		this.repository = ctx.repository;
+		this.accountManager = ctx.accountManager;
+		this.clientFactory = ctx.clientFactory;
+	}
+	async authenticate(name, password, realmId) {
+		let error;
+		const entities = await this.repository.findByProtocol(IdentityProviderProtocol.LDAP, realmId);
+		for (const provider of entities) {
+			if (!isLdapIdentityProvider(provider)) continue;
+			const response = await new IdentityProviderLdapAuthenticator({
+				provider,
+				accountManager: this.accountManager,
+				clientFactory: this.clientFactory
+			}).safeAuthenticate(name, password);
+			if (response.success === true) return response.data;
+			error = response.error;
+		}
+		if (error) throw error;
+		throw UserError.credentialsInvalid();
+	}
+};
+//#endregion
+export { IdentityProviderLdapCollectionAuthenticator };
+
+//# sourceMappingURL=collection.mjs.map

package/dist/core/identity/provider/authentication/protocols/ldap/collection.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"collection.mjs","names":["IdentityProviderProtocol","UserError","isLdapIdentityProvider","IdentityProviderLdapAuthenticator","BaseCredentialsAuthenticator","IdentityProviderLdapCollectionAuthenticator","repository","accountManager","clientFactory","ctx","authenticate","name","password","realmId","error","entities","findByProtocol","LDAP","provider","authenticator","response","safeAuthenticate","success","data","credentialsInvalid"],"sources":["../../../../../../../src/core/identity/provider/authentication/protocols/ldap/collection.ts"],"sourcesContent":["/*\n * Copyright (c) 2025-2025.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport type { User } from '@authup/core-kit';\nimport { IdentityProviderProtocol, UserError, isLdapIdentityProvider } from '@authup/core-kit';\nimport type { IIdentityProviderRepository } from '../../../../../entities/index.ts';\nimport type { IIdentityProviderAccountManager } from '../../../account/index.ts';\nimport { IdentityProviderLdapAuthenticator } from './module.ts';\nimport type { ILdapClientFactory } from '../../../../../ldap/index.ts';\nimport { BaseCredentialsAuthenticator } from '../../../../../authentication/index.ts';\nimport type { IdentityProviderLdapCollectionAuthenticatorContext } from './types.ts';\n\nexport class IdentityProviderLdapCollectionAuthenticator extends BaseCredentialsAuthenticator<User> {\n    protected repository: IIdentityProviderRepository;\n\n    protected accountManager: IIdentityProviderAccountManager;\n\n    protected clientFactory: ILdapClientFactory;\n\n    constructor(ctx: IdentityProviderLdapCollectionAuthenticatorContext) {\n        super();\n\n        this.repository = ctx.repository;\n        this.accountManager = ctx.accountManager;\n        this.clientFactory = ctx.clientFactory;\n    }\n\n    async authenticate(name: string, password: string, realmId?: string): Promise<User> {\n        let error : Error | undefined;\n        const entities = await this.repository.findByProtocol(IdentityProviderProtocol.LDAP, realmId);\n\n        for (const provider of entities) {\n            if (!isLdapIdentityProvider(provider)) {\n                continue;\n            }\n\n            const authenticator = new IdentityProviderLdapAuthenticator({\n                provider,\n                accountManager: this.accountManager,\n                clientFactory: this.clientFactory,\n            });\n\n            const response = await authenticator.safeAuthenticate(name, password);\n            if (response.success === true) {\n                return response.data;\n            }\n\n            error = response.error;\n        }\n\n        if (error) {\n            throw error;\n        }\n\n        throw UserError.credentialsInvalid();\n    }\n}\n"],"mappings":";;;;;AAgBA,IAAaK,8CAAb,cAAiED,6BAAAA;CACnDE;CAEAC;CAEAC;CAEV,YAAYC,KAAyD;AACjE,SAAK;AAEL,OAAKH,aAAaG,IAAIH;AACtB,OAAKC,iBAAiBE,IAAIF;AAC1B,OAAKC,gBAAgBC,IAAID;;CAG7B,MAAME,aAAaC,MAAcC,UAAkBC,SAAiC;EAChF,IAAIC;EACJ,MAAMC,WAAW,MAAM,KAAKT,WAAWU,eAAehB,yBAAyBiB,MAAMJ,QAAAA;AAErF,OAAK,MAAMK,YAAYH,UAAU;AAC7B,OAAI,CAACb,uBAAuBgB,SAAAA,CACxB;GASJ,MAAME,WAAW,MAAMD,IANGhB,kCAAkC;IACxDe;IACAX,gBAAgB,KAAKA;IACrBC,eAAe,KAAKA;IACxB,CAEuBW,CAAcE,iBAAiBV,MAAMC,SAAAA;AAC5D,OAAIQ,SAASE,YAAY,KACrB,QAAOF,SAASG;AAGpBT,WAAQM,SAASN;;AAGrB,MAAIA,MACA,OAAMA;AAGV,QAAMb,UAAUuB,oBAAkB"}

package/dist/core/identity/provider/authentication/protocols/ldap/index.d.ts

@@ -0,0 +1,4 @@
+export * from './collection.ts';
+export * from './module.ts';
+export * from './types.ts';
+//# sourceMappingURL=index.d.ts.map

package/dist/core/identity/provider/authentication/protocols/ldap/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../../../src/core/identity/provider/authentication/protocols/ldap/index.ts"],"names":[],"mappings":"AAOA,cAAc,iBAAiB,CAAC;AAChC,cAAc,aAAa,CAAC;AAC5B,cAAc,YAAY,CAAC"}

package/dist/core/identity/provider/authentication/protocols/ldap/index.mjs

@@ -0,0 +1,3 @@
+import { IdentityProviderLdapAuthenticator } from "./module.mjs";
+import { IdentityProviderLdapCollectionAuthenticator } from "./collection.mjs";
+export { IdentityProviderLdapAuthenticator, IdentityProviderLdapCollectionAuthenticator };

package/dist/core/identity/provider/authentication/protocols/ldap/module.d.ts

@@ -0,0 +1,21 @@
+import type { LdapIdentityProvider, User } from '@authup/core-kit';
+import type { Result } from '@authup/kit';
+import { BaseCredentialsAuthenticator } from '../../../../../authentication/index.ts';
+import type { ILdapClient } from '../../../../../ldap/index.ts';
+import type { IIdentityProviderAccountManager } from '../../../account/index.ts';
+import type { IdentityProviderLdapAuthenticatorContext } from './types.ts';
+export declare class IdentityProviderLdapAuthenticator extends BaseCredentialsAuthenticator<User> {
+    protected provider: LdapIdentityProvider;
+    protected accountManager: IIdentityProviderAccountManager;
+    protected client: ILdapClient;
+    constructor(ctx: IdentityProviderLdapAuthenticatorContext);
+    authenticate(name: string, password: string): Promise<User>;
+    protected bind(user?: string, password?: string): Promise<void>;
+    protected safeBind(user?: string, password?: string): Promise<Result<null>>;
+    protected unbind(): Promise<void>;
+    protected safeUnbind(): Promise<Result<null>>;
+    protected findOneByName(input: string): Promise<Record<string, any> | null>;
+    protected extractCnFromDn(dn: string): string | undefined;
+    findUserGroups(user: Record<string, any>): Promise<string[]>;
+}
+//# sourceMappingURL=module.d.ts.map

package/dist/core/identity/provider/authentication/protocols/ldap/module.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"module.d.ts","sourceRoot":"","sources":["../../../../../../../src/core/identity/provider/authentication/protocols/ldap/module.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,oBAAoB,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAC;AAEnE,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AAI1C,OAAO,EAAE,4BAA4B,EAAE,MAAM,wCAAwC,CAAC;AACtF,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAChE,OAAO,KAAK,EAAE,+BAA+B,EAAE,MAAM,2BAA2B,CAAC;AAEjF,OAAO,KAAK,EAAE,wCAAwC,EAAE,MAAM,YAAY,CAAC;AAE3E,qBAAa,iCAAkC,SAAQ,4BAA4B,CAAC,IAAI,CAAC;IACrF,SAAS,CAAC,QAAQ,EAAG,oBAAoB,CAAC;IAE1C,SAAS,CAAC,cAAc,EAAE,+BAA+B,CAAC;IAE1D,SAAS,CAAC,MAAM,EAAE,WAAW,CAAC;gBAElB,GAAG,EAAE,wCAAwC;IAgBnD,YAAY,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAI,OAAO,CAAC,IAAI,CAAC;cA8ClD,IAAI,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,MAAM,GAAI,OAAO,CAAC,IAAI,CAAC;cAatD,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,MAAM,GAAI,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;cAgBlE,MAAM,IAAK,OAAO,CAAC,IAAI,CAAC;cAIxB,UAAU,IAAK,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;cAgBpC,aAAa,CAAC,KAAK,EAAE,MAAM,GAAI,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,GAAG,IAAI,CAAC;IA0ClF,SAAS,CAAC,eAAe,CAAC,EAAE,EAAE,MAAM,GAAI,MAAM,GAAG,SAAS;IAK7C,cAAc,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,GAAI,OAAO,CAAC,MAAM,EAAE,CAAC;CAuD7E"}

package/dist/core/identity/provider/authentication/protocols/ldap/module.mjs

@@ -0,0 +1,154 @@
+import { BaseCredentialsAuthenticator } from "../../../../../authentication/base.mjs";
+import "../../../../../authentication/index.mjs";
+import { UserError } from "@authup/core-kit";
+import { template } from "@authup/kit";
+import ldap from "ldapjs";
+//#region src/core/identity/provider/authentication/protocols/ldap/module.ts
+var IdentityProviderLdapAuthenticator = class extends BaseCredentialsAuthenticator {
+	provider;
+	accountManager;
+	client;
+	constructor(ctx) {
+		super();
+		this.accountManager = ctx.accountManager;
+		this.provider = ctx.provider;
+		this.client = ctx.clientFactory.create({
+			url: ctx.provider.url,
+			tls: ctx.provider.tls,
+			startTLS: ctx.provider.start_tls,
+			baseDn: ctx.provider.base_dn,
+			user: ctx.provider.user,
+			password: ctx.provider.password,
+			userNameAttribute: ctx.provider.user_name_attribute
+		});
+	}
+	async authenticate(name, password) {
+		let bind = await this.safeBind();
+		if (!bind.success) {
+			await this.safeUnbind();
+			throw UserError.credentialsInvalid();
+		}
+		const entity = await this.findOneByName(name);
+		if (!entity) throw UserError.credentialsInvalid();
+		const identity = {
+			id: entity.dn,
+			attributeCandidates: {
+				name: [entity[this.provider.user_name_attribute || "cn"], this.extractCnFromDn(entity.dn)],
+				email: [entity[this.provider.user_mail_attribute || "mail"]]
+			},
+			data: entity,
+			provider: this.provider
+		};
+		try {
+			identity.roles = await this.findUserGroups(entity);
+		} catch {}
+		bind = await this.safeBind(identity.id, password);
+		await this.safeUnbind();
+		if (!bind.success) throw UserError.credentialsInvalid();
+		return (await this.accountManager.save(identity)).user;
+	}
+	async bind(user, password) {
+		if (!user) return this.client.bind();
+		if (!this.client.isDn(user)) user = `${this.provider.user_name_attribute || "cn"}=${user},${this.client.resolveDn(this.provider.user_base_dn, this.provider.base_dn)}`;
+		return this.client.bind(user, password);
+	}
+	async safeBind(user, password) {
+		try {
+			await this.bind(user, password);
+			return {
+				success: true,
+				data: null
+			};
+		} catch (e) {
+			return {
+				success: false,
+				error: e
+			};
+		}
+	}
+	async unbind() {
+		return this.client.unbind();
+	}
+	async safeUnbind() {
+		try {
+			await this.unbind();
+			return {
+				success: true,
+				data: null
+			};
+		} catch (e) {
+			return {
+				success: false,
+				error: e
+			};
+		}
+	}
+	async findOneByName(input) {
+		let filter;
+		if (this.provider.user_filter) filter = template(this.provider.user_filter, {
+			input,
+			name_attribute: this.provider.user_name_attribute || "cn",
+			mail_attribute: this.provider.user_mail_attribute || "mail",
+			display_name_attribute: this.provider.user_display_name_attribute || "cn"
+		});
+		else if (this.provider.user_name_attribute) filter = new ldap.EqualityFilter({
+			attribute: this.provider.user_name_attribute,
+			value: input
+		});
+		else filter = new ldap.OrFilter({ filters: [new ldap.EqualityFilter({
+			attribute: "cn",
+			value: input
+		}), new ldap.EqualityFilter({
+			attribute: "sAMAccountName",
+			value: input
+		})] });
+		const entities = await this.client.search({
+			filter,
+			scope: "sub"
+		}, this.client.resolveDn(this.provider.user_base_dn, this.provider.base_dn));
+		if (entities.length === 0) return null;
+		return entities[0];
+	}
+	extractCnFromDn(dn) {
+		const match = /^cn=([^,]+)/i.exec(dn);
+		return match ? match[1].trim() : void 0;
+	}
+	async findUserGroups(user) {
+		const nameAttribute = this.provider.group_name_attribute || "cn";
+		const memberAttribute = this.provider.group_member_attribute || "member";
+		let filter;
+		if (this.provider.group_filter) filter = template(this.provider.group_filter, {
+			...user,
+			name_attribute: nameAttribute,
+			member_attribute: memberAttribute
+		});
+		else filter = new ldap.AndFilter({ filters: [new ldap.EqualityFilter({
+			attribute: "objectClass",
+			value: this.provider.group_class || "group"
+		}), new ldap.EqualityFilter({
+			attribute: memberAttribute,
+			value: user[this.provider.group_member_user_attribute || "dn"]
+		})] });
+		const entities = await this.client.search({
+			filter,
+			scope: "sub"
+		}, this.client.resolveDn(this.provider.group_base_dn, this.provider.base_dn));
+		if (entities.length === 0) return [];
+		const attributeKey = this.provider.group_name_attribute || "cn";
+		const names = [];
+		for (const entity of entities) {
+			const attribute = entity[attributeKey];
+			if (typeof attribute === "undefined") continue;
+			if (typeof attribute === "string") {
+				names.push(attribute);
+				continue;
+			}
+			if (Array.isArray(attribute)) names.push(...attribute.filter((el) => typeof el === "string"));
+		}
+		return names;
+	}
+};
+//#endregion
+export { IdentityProviderLdapAuthenticator };
+
+//# sourceMappingURL=module.mjs.map