@authup/server-core 1.0.0-beta.4 → 1.0.0-beta.41

package/dist/adapters/http/controllers/workflows/authorize/module.mjs

@@ -0,0 +1,135 @@
+import { OAuth2AuthorizationCodeRequestValidator } from "../../../../../core/oauth2/authorization/code-request/validator.mjs";
+import "../../../../../core/index.mjs";
+import { readFromLocations } from "../../../request/helpers/locations.mjs";
+import "../../../request/index.mjs";
+import { HTTPOAuth2Authorizer } from "../../../adapters/oauth2/authorization/module.mjs";
+import "../../../adapters/index.mjs";
+import { ForceUserLoggedInMiddleware } from "../../../middleware/built-in/loggedin/user.mjs";
+import { UI_DIST_PATH, UI_SOURCE_PATH } from "../../../../../path.mjs";
+import { VITE_SERVER_STORE_KEY } from "../../../middleware/built-in/assets.mjs";
+import { sanitizeError } from "../../../../../utils/error.mjs";
+import "../../../../../utils/index.mjs";
+import "../../../middleware/index.mjs";
+import path from "node:path";
+import { CodeTransformation, isCodeTransformation } from "typeorm-extension";
+import { DContext, DController, DGet, DPost } from "@routup/decorators";
+import { load } from "locter";
+import { URL } from "node:url";
+import fs from "node:fs";
+//#region src/adapters/http/controllers/workflows/authorize/module.ts
+function _ts_decorate(decorators, target, key, desc) {
+	var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+	if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+	else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+	return c > 3 && r && Object.defineProperty(target, key, r), r;
+}
+function _ts_metadata(k, v) {
+	if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+}
+function _ts_param(paramIndex, decorator) {
+	return function(target, key) {
+		decorator(target, key, paramIndex);
+	};
+}
+var AuthorizeController = class {
+	options;
+	codeRequestVerifier;
+	codeRequestValidator;
+	authorizer;
+	constructor(ctx) {
+		this.options = ctx.options;
+		this.codeRequestVerifier = ctx.codeRequestVerifier;
+		this.codeRequestValidator = new OAuth2AuthorizationCodeRequestValidator();
+		this.authorizer = new HTTPOAuth2Authorizer({
+			codeRequestVerifier: this.codeRequestVerifier,
+			accessTokenIssuer: ctx.accessTokenIssuer,
+			openIdTokenIssuer: ctx.openIdTokenIssuer,
+			codeIssuer: ctx.codeIssuer,
+			identityResolver: ctx.identityResolver
+		});
+	}
+	async confirm(event) {
+		const result = await this.authorizer.authorizeWithRequest(event);
+		const url = new URL(result.redirectUri);
+		if (result.state) url.searchParams.set("state", result.state);
+		if (result.authorizationCode) url.searchParams.set("code", result.authorizationCode);
+		if (result.accessToken) url.searchParams.set("access_token", result.accessToken);
+		if (result.idToken) url.searchParams.set("id_token", result.idToken);
+		return { url: url.href };
+	}
+	async serve(event) {
+		let codeRequest;
+		let client;
+		let scopes;
+		let error;
+		try {
+			const merged = await readFromLocations(event, ["body", "query"]);
+			const data = await this.codeRequestValidator.run(merged);
+			const result = await this.codeRequestVerifier.verify(data);
+			client = result.client;
+			scopes = result.scopes;
+			codeRequest = result.data;
+		} catch (e) {
+			const normalized = sanitizeError(e);
+			error = {
+				...normalized,
+				message: normalized.message
+			};
+		}
+		const isJIT = isCodeTransformation(CodeTransformation.JUST_IN_TIME);
+		const payload = {
+			config: { baseURL: this.options.baseURL },
+			data: {
+				codeRequest,
+				error,
+				client,
+				scopes
+			}
+		};
+		let html;
+		let manifest;
+		let render;
+		if (isJIT) {
+			const vite = event.store[VITE_SERVER_STORE_KEY];
+			html = await fs.promises.readFile(path.join(UI_SOURCE_PATH, "index.html"), "utf-8");
+			html = await vite.transformIndexHtml("/", html);
+			manifest = {};
+			render = (await vite.ssrLoadModule("/src/server.ts")).render;
+		} else {
+			html = await fs.promises.readFile(path.join(UI_DIST_PATH, "client", "index.html"), "utf-8");
+			manifest = JSON.parse(await fs.promises.readFile(path.join(UI_DIST_PATH, "client", ".vite", "ssr-manifest.json"), "utf-8"));
+			render = (await load(path.join(UI_DIST_PATH, "server", "server.js"))).render;
+		}
+		const [appHtml, preloadLinks] = await render({
+			url: "/authorize",
+			manifest,
+			payload
+		});
+		const body = html.replace("<!--preload-links-->", preloadLinks).replace("<!--app-html-->", appHtml);
+		event.response.headers.set("content-type", "text/html; charset=utf-8");
+		return body;
+	}
+};
+_ts_decorate([
+	DPost("", [ForceUserLoggedInMiddleware]),
+	_ts_param(0, DContext()),
+	_ts_metadata("design:type", Function),
+	_ts_metadata("design:paramtypes", [typeof IRoutupEvent === "undefined" ? Object : IRoutupEvent]),
+	_ts_metadata("design:returntype", Promise)
+], AuthorizeController.prototype, "confirm", null);
+_ts_decorate([
+	DGet("", []),
+	_ts_param(0, DContext()),
+	_ts_metadata("design:type", Function),
+	_ts_metadata("design:paramtypes", [typeof IRoutupEvent === "undefined" ? Object : IRoutupEvent]),
+	_ts_metadata("design:returntype", Promise)
+], AuthorizeController.prototype, "serve", null);
+AuthorizeController = _ts_decorate([
+	DController("/authorize"),
+	_ts_metadata("design:type", Function),
+	_ts_metadata("design:paramtypes", [typeof AuthorizeControllerContext === "undefined" ? Object : AuthorizeControllerContext])
+], AuthorizeController);
+//#endregion
+export { AuthorizeController };
+
+//# sourceMappingURL=module.mjs.map

package/dist/adapters/http/controllers/workflows/authorize/module.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"module.mjs","names":["DContext","DController","DGet","DPost","load","fs","path","URL","CodeTransformation","isCodeTransformation","UI_DIST_PATH","UI_SOURCE_PATH","ForceUserLoggedInMiddleware","VITE_SERVER_STORE_KEY","HTTPOAuth2Authorizer","readFromLocations","OAuth2AuthorizationCodeRequestValidator","sanitizeError","AuthorizeController","options","codeRequestVerifier","codeRequestValidator","authorizer","ctx","accessTokenIssuer","openIdTokenIssuer","codeIssuer","identityResolver","confirm","event","result","authorizeWithRequest","url","redirectUri","state","searchParams","set","authorizationCode","accessToken","idToken","href","serve","codeRequest","client","scopes","error","merged","data","run","verify","e","normalized","message","isJIT","JUST_IN_TIME","payload","config","baseURL","html","manifest","render","vite","store","promises","readFile","join","transformIndexHtml","ssrLoadModule","JSON","parse","appHtml","preloadLinks","body","replace","response","headers"],"sources":["../../../../../../src/adapters/http/controllers/workflows/authorize/module.ts"],"sourcesContent":["/*\n * Copyright (c) 2024.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport {\n    DContext,\n    DController,\n    DGet,\n    DPost,\n} from '@routup/decorators';\nimport { load } from 'locter';\nimport fs from 'node:fs';\nimport path from 'node:path';\nimport { URL } from 'node:url';\n\nimport type { IRoutupEvent } from 'routup';\nimport type { ViteDevServer } from 'vite';\nimport type { Client, OAuth2AuthorizationCodeRequest, Scope } from '@authup/core-kit';\nimport { CodeTransformation, isCodeTransformation } from 'typeorm-extension';\nimport { UI_DIST_PATH, UI_SOURCE_PATH } from '../../../../../path.ts';\nimport { ForceUserLoggedInMiddleware, VITE_SERVER_STORE_KEY } from '../../../middleware/index.ts';\nimport { HTTPOAuth2Authorizer } from '../../../adapters/index.ts';\nimport { readFromLocations } from '../../../request/index.ts';\nimport type { IOAuth2AuthorizationCodeRequestVerifier } from '../../../../../core/index.ts';\nimport { OAuth2AuthorizationCodeRequestValidator } from '../../../../../core/index.ts';\nimport { sanitizeError } from '../../../../../utils/index.ts';\nimport type { AuthorizeControllerContext, AuthorizeControllerOptions } from './types.ts';\n\n@DController('/authorize')\nexport class AuthorizeController {\n    // todo: maybe /realms/<realm>/protocol/openid-connect/authorize\n    // todo: maybe /realms/<realm>/[...]/authorize\n\n    protected options: AuthorizeControllerOptions;\n\n    protected codeRequestVerifier : IOAuth2AuthorizationCodeRequestVerifier;\n\n    protected codeRequestValidator : OAuth2AuthorizationCodeRequestValidator;\n\n    protected authorizer: HTTPOAuth2Authorizer;\n\n    // ---------------------------------------------------------\n\n    constructor(ctx: AuthorizeControllerContext) {\n        this.options = ctx.options;\n\n        this.codeRequestVerifier = ctx.codeRequestVerifier;\n\n        this.codeRequestValidator = new OAuth2AuthorizationCodeRequestValidator();\n\n        this.authorizer = new HTTPOAuth2Authorizer({\n            codeRequestVerifier: this.codeRequestVerifier,\n            accessTokenIssuer: ctx.accessTokenIssuer,\n            openIdTokenIssuer: ctx.openIdTokenIssuer,\n            codeIssuer: ctx.codeIssuer,\n            identityResolver: ctx.identityResolver,\n        });\n    }\n\n    // ---------------------------------------------------------\n\n    @DPost('', [ForceUserLoggedInMiddleware])\n    async confirm(@DContext() event: IRoutupEvent): Promise<{ url: string }> {\n        const result = await this.authorizer.authorizeWithRequest(event);\n\n        const url = new URL(result.redirectUri);\n        if (result.state) {\n            url.searchParams.set('state', result.state);\n        }\n\n        if (result.authorizationCode) {\n            url.searchParams.set('code', result.authorizationCode);\n        }\n\n        if (result.accessToken) {\n            url.searchParams.set('access_token', result.accessToken);\n        }\n\n        if (result.idToken) {\n            url.searchParams.set('id_token', result.idToken);\n        }\n\n        return { url: url.href };\n    }\n\n    @DGet('', [])\n    async serve(@DContext() event: IRoutupEvent): Promise<string> {\n        let codeRequest : OAuth2AuthorizationCodeRequest | undefined;\n\n        let client : Client | undefined;\n        let scopes : Scope[] | undefined;\n\n        let error : Error | undefined;\n\n        try {\n            const merged = await readFromLocations(event, ['body', 'query']);\n            const data = await this.codeRequestValidator.run(merged);\n\n            const result = await this.codeRequestVerifier.verify(data);\n            client = result.client;\n            scopes = result.scopes;\n\n            codeRequest = result.data;\n        } catch (e) {\n            const normalized = sanitizeError(e);\n            error = {\n                ...normalized,\n                message: normalized.message,\n            };\n        }\n\n        const isJIT = isCodeTransformation(CodeTransformation.JUST_IN_TIME);\n\n        const payload = {\n            config: { baseURL: this.options.baseURL },\n            data: {\n                codeRequest,\n                error,\n                client,\n                scopes,\n            },\n        };\n\n        let html : string;\n        let manifest : Record<string, any>;\n        let render : CallableFunction;\n\n        if (isJIT) {\n            const vite = event.store[VITE_SERVER_STORE_KEY] as ViteDevServer;\n\n            html = await fs.promises.readFile(\n                path.join(UI_SOURCE_PATH, 'index.html'),\n                'utf-8',\n            );\n            html = await vite.transformIndexHtml('/', html);\n            manifest = {};\n            render = (await vite.ssrLoadModule('/src/server.ts')).render;\n        } else {\n            html = await fs.promises.readFile(\n                path.join(UI_DIST_PATH, 'client', 'index.html'),\n                'utf-8',\n            );\n\n            manifest = JSON.parse(await fs.promises.readFile(\n                path.join(UI_DIST_PATH, 'client', '.vite', 'ssr-manifest.json'),\n                'utf-8',\n            ));\n\n            render = (await load(path.join(UI_DIST_PATH, 'server', 'server.js'))).render;\n        }\n\n        const [appHtml, preloadLinks] = await render({\n            url: '/authorize',\n            manifest,\n            payload,\n        });\n\n        const body = html\n            .replace('<!--preload-links-->', preloadLinks)\n            .replace('<!--app-html-->', appHtml);\n\n        event.response.headers.set('content-type', 'text/html; charset=utf-8');\n        return body;\n    }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAgCA,IAAakB,sBAAb,MAAaA;CAICC;CAEAC;CAEAC;CAEAC;CAIV,YAAYC,KAAiC;AACzC,OAAKJ,UAAUI,IAAIJ;AAEnB,OAAKC,sBAAsBG,IAAIH;AAE/B,OAAKC,uBAAuB,IAAIL,yCAAAA;AAEhC,OAAKM,aAAa,IAAIR,qBAAqB;GACvCM,qBAAqB,KAAKA;GAC1BI,mBAAmBD,IAAIC;GACvBC,mBAAmBF,IAAIE;GACvBC,YAAYH,IAAIG;GAChBC,kBAAkBJ,IAAII;GAC1B,CAAA;;CAKJ,MACMC,QAAQ,OAA2D;EACrE,MAAME,SAAS,MAAM,KAAKR,WAAWS,qBAAqBF,MAAAA;EAE1D,MAAMG,MAAM,IAAIzB,IAAIuB,OAAOG,YAAW;AACtC,MAAIH,OAAOI,MACPF,KAAIG,aAAaC,IAAI,SAASN,OAAOI,MAAK;AAG9C,MAAIJ,OAAOO,kBACPL,KAAIG,aAAaC,IAAI,QAAQN,OAAOO,kBAAiB;AAGzD,MAAIP,OAAOQ,YACPN,KAAIG,aAAaC,IAAI,gBAAgBN,OAAOQ,YAAW;AAG3D,MAAIR,OAAOS,QACPP,KAAIG,aAAaC,IAAI,YAAYN,OAAOS,QAAO;AAGnD,SAAO,EAAEP,KAAKA,IAAIQ,MAAK;;CAG3B,MACMC,MAAM,OAAkD;EAC1D,IAAIC;EAEJ,IAAIC;EACJ,IAAIC;EAEJ,IAAIC;AAEJ,MAAI;GACA,MAAMC,SAAS,MAAM/B,kBAAkBc,OAAO,CAAC,QAAQ,QAAQ,CAAA;GAC/D,MAAMkB,OAAO,MAAM,KAAK1B,qBAAqB2B,IAAIF,OAAAA;GAEjD,MAAMhB,SAAS,MAAM,KAAKV,oBAAoB6B,OAAOF,KAAAA;AACrDJ,YAASb,OAAOa;AAChBC,YAASd,OAAOc;AAEhBF,iBAAcZ,OAAOiB;WAChBG,GAAG;GACR,MAAMC,aAAalC,cAAciC,EAAAA;AACjCL,WAAQ;IACJ,GAAGM;IACHC,SAASD,WAAWC;IACxB;;EAGJ,MAAMC,QAAQ5C,qBAAqBD,mBAAmB8C,aAAY;EAElE,MAAMC,UAAU;GACZC,QAAQ,EAAEC,SAAS,KAAKtC,QAAQsC,SAAQ;GACxCV,MAAM;IACFL;IACAG;IACAF;IACAC;IACJ;GACJ;EAEA,IAAIc;EACJ,IAAIC;EACJ,IAAIC;AAEJ,MAAIP,OAAO;GACP,MAAMQ,OAAOhC,MAAMiC,MAAMjD;AAEzB6C,UAAO,MAAMrD,GAAG0D,SAASC,SACrB1D,KAAK2D,KAAKtD,gBAAgB,aAAA,EAC1B,QAAA;AAEJ+C,UAAO,MAAMG,KAAKK,mBAAmB,KAAKR,KAAAA;AAC1CC,cAAW,EAAC;AACZC,aAAU,MAAMC,KAAKM,cAAc,iBAAgB,EAAGP;SACnD;AACHF,UAAO,MAAMrD,GAAG0D,SAASC,SACrB1D,KAAK2D,KAAKvD,cAAc,UAAU,aAAA,EAClC,QAAA;AAGJiD,cAAWS,KAAKC,MAAM,MAAMhE,GAAG0D,SAASC,SACpC1D,KAAK2D,KAAKvD,cAAc,UAAU,SAAS,oBAAA,EAC3C,QAAA,CAAA;AAGJkD,aAAU,MAAMxD,KAAKE,KAAK2D,KAAKvD,cAAc,UAAU,YAAA,CAAY,EAAGkD;;EAG1E,MAAM,CAACU,SAASC,gBAAgB,MAAMX,OAAO;GACzC5B,KAAK;GACL2B;GACAJ;GACJ,CAAA;EAEA,MAAMiB,OAAOd,KACRe,QAAQ,wBAAwBF,aAAAA,CAChCE,QAAQ,mBAAmBH,QAAAA;AAEhCzC,QAAM6C,SAASC,QAAQvC,IAAI,gBAAgB,2BAAA;AAC3C,SAAOoC;;;;YArGC5D,4BAAAA,CAAAA"}

package/dist/adapters/http/controllers/workflows/authorize/types.d.ts

@@ -0,0 +1,13 @@
+import type { IIdentityResolver, IOAuth2AuthorizationCodeIssuer, IOAuth2AuthorizationCodeRequestVerifier, IOAuth2OpenIDTokenIssuer, IOAuth2TokenIssuer } from '../../../../../core/index.ts';
+export type AuthorizeControllerOptions = {
+    baseURL: string;
+};
+export type AuthorizeControllerContext = {
+    options: AuthorizeControllerOptions;
+    accessTokenIssuer: IOAuth2TokenIssuer;
+    openIdTokenIssuer: IOAuth2OpenIDTokenIssuer;
+    codeIssuer: IOAuth2AuthorizationCodeIssuer;
+    codeRequestVerifier: IOAuth2AuthorizationCodeRequestVerifier;
+    identityResolver: IIdentityResolver;
+};
+//# sourceMappingURL=types.d.ts.map

package/dist/adapters/http/controllers/workflows/authorize/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../../../../src/adapters/http/controllers/workflows/authorize/types.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EACR,iBAAiB,EACjB,8BAA8B,EAC9B,uCAAuC,EACvC,wBAAwB,EACxB,kBAAkB,EACrB,MAAM,8BAA8B,CAAC;AAEtC,MAAM,MAAM,0BAA0B,GAAG;IACrC,OAAO,EAAE,MAAM,CAAC;CACnB,CAAC;AAEF,MAAM,MAAM,0BAA0B,GAAG;IACrC,OAAO,EAAE,0BAA0B,CAAC;IAEpC,iBAAiB,EAAE,kBAAkB,CAAC;IACtC,iBAAiB,EAAE,wBAAwB,CAAC;IAE5C,UAAU,EAAE,8BAA8B,CAAC;IAC3C,mBAAmB,EAAE,uCAAuC,CAAC;IAE7D,gBAAgB,EAAE,iBAAiB,CAAA;CACtC,CAAC"}

package/dist/adapters/http/controllers/workflows/authorize/types.mjs

@@ -0,0 +1 @@
+export {};

package/dist/adapters/http/controllers/workflows/index.d.ts

@@ -0,0 +1,10 @@
+export * from './activate/index.ts';
+export * from './authorize/index.ts';
+export * from './jwks/index.ts';
+export * from './openid/index.ts';
+export * from './password-forgot/index.ts';
+export * from './password-reset/index.ts';
+export * from './register/index.ts';
+export * from './status/index.ts';
+export * from './token/index.ts';
+//# sourceMappingURL=index.d.ts.map

package/dist/adapters/http/controllers/workflows/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../src/adapters/http/controllers/workflows/index.ts"],"names":[],"mappings":"AAOA,cAAc,qBAAqB,CAAC;AACpC,cAAc,sBAAsB,CAAC;AACrC,cAAc,iBAAiB,CAAC;AAChC,cAAc,mBAAmB,CAAC;AAClC,cAAc,4BAA4B,CAAC;AAC3C,cAAc,2BAA2B,CAAC;AAC1C,cAAc,qBAAqB,CAAC;AACpC,cAAc,mBAAmB,CAAC;AAClC,cAAc,kBAAkB,CAAC"}

package/dist/adapters/http/controllers/workflows/index.mjs

@@ -0,0 +1,20 @@
+import { ActivateController } from "./activate/module.mjs";
+import "./activate/index.mjs";
+import { AuthorizeController } from "./authorize/module.mjs";
+import "./authorize/index.mjs";
+import { getJwkRouteHandler, getJwksRouteHandler } from "./jwks/handlers/read.mjs";
+import { JwkController } from "./jwks/module.mjs";
+import "./jwks/index.mjs";
+import { OpenIDController } from "./openid/module.mjs";
+import "./openid/index.mjs";
+import { PasswordForgotController } from "./password-forgot/module.mjs";
+import "./password-forgot/index.mjs";
+import { PasswordResetController } from "./password-reset/module.mjs";
+import "./password-reset/index.mjs";
+import { RegisterController } from "./register/module.mjs";
+import "./register/index.mjs";
+import { StatusController } from "./status/module.mjs";
+import "./status/index.mjs";
+import { TokenController } from "./token/module.mjs";
+import "./token/index.mjs";
+export { ActivateController, AuthorizeController, JwkController, OpenIDController, PasswordForgotController, PasswordResetController, RegisterController, StatusController, TokenController, getJwkRouteHandler, getJwksRouteHandler };

package/dist/adapters/http/controllers/workflows/jwks/handlers/index.d.ts

@@ -0,0 +1,2 @@
+export * from './read.ts';
+//# sourceMappingURL=index.d.ts.map

package/dist/adapters/http/controllers/workflows/jwks/handlers/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../../../src/adapters/http/controllers/workflows/jwks/handlers/index.ts"],"names":[],"mappings":"AAOA,cAAc,WAAW,CAAC"}

package/dist/adapters/http/controllers/workflows/jwks/handlers/index.mjs

@@ -0,0 +1,2 @@
+import { getJwkRouteHandler, getJwksRouteHandler } from "./read.mjs";
+export { getJwkRouteHandler, getJwksRouteHandler };

package/dist/adapters/http/controllers/workflows/jwks/handlers/read.d.ts

@@ -0,0 +1,8 @@
+import type { OAuth2JsonWebKey } from '@authup/specs';
+import type { Repository } from 'typeorm';
+import type { KeyEntity } from '../../../../../database/domains/index.ts';
+export declare function getJwksRouteHandler(repository: Repository<KeyEntity>, realmId?: string): Promise<{
+    keys: OAuth2JsonWebKey[];
+}>;
+export declare function getJwkRouteHandler(repository: Repository<KeyEntity>, keyId: string, realmId?: string): Promise<OAuth2JsonWebKey>;
+//# sourceMappingURL=read.d.ts.map

package/dist/adapters/http/controllers/workflows/jwks/handlers/read.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"read.d.ts","sourceRoot":"","sources":["../../../../../../../src/adapters/http/controllers/workflows/jwks/handlers/read.ts"],"names":[],"mappings":"AAQA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,eAAe,CAAC;AAEtD,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AAG1C,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,0CAA0C,CAAC;AAE1E,wBAAsB,mBAAmB,CACrC,UAAU,EAAE,UAAU,CAAC,SAAS,CAAC,EACjC,OAAO,CAAC,EAAE,MAAM,GAChB,OAAO,CAAC;IAAE,IAAI,EAAE,gBAAgB,EAAE,CAAA;CAAE,CAAC,CA6BxC;AAED,wBAAsB,kBAAkB,CACpC,UAAU,EAAE,UAAU,CAAC,SAAS,CAAC,EACjC,KAAK,EAAE,MAAM,EACb,OAAO,CAAC,EAAE,MAAM,GAChB,OAAO,CAAC,gBAAgB,CAAC,CA+B5B"}

package/dist/adapters/http/controllers/workflows/jwks/handlers/read.mjs

@@ -0,0 +1,45 @@
+import { In } from "typeorm";
+import { AsymmetricKey } from "@authup/server-kit";
+import { JWKType } from "@authup/specs";
+import { BadRequestError, NotFoundError } from "@ebec/http";
+//#region src/adapters/http/controllers/workflows/jwks/handlers/read.ts
+async function getJwksRouteHandler(repository, realmId) {
+	const promises = (await repository.find({
+		where: {
+			type: In([JWKType.RSA, JWKType.EC]),
+			...realmId ? { realm_id: realmId } : {}
+		},
+		order: { priority: "DESC" }
+	})).filter((entity) => !!entity.encryption_key).map((entity) => AsymmetricKey.fromBase64({
+		format: "spki",
+		key: entity.encryption_key,
+		options: AsymmetricKey.buildImportOptionsForJWTAlgorithm(entity.signature_algorithm)
+	}).then((container) => container.toJWK()).then((key) => ({
+		...key,
+		kid: entity.id,
+		alg: entity.signature_algorithm
+	})));
+	return { keys: await Promise.all(promises) };
+}
+async function getJwkRouteHandler(repository, keyId, realmId) {
+	const entity = await repository.findOne({ where: {
+		type: In([JWKType.RSA, JWKType.EC]),
+		id: keyId,
+		...realmId ? { realm_id: realmId } : {}
+	} });
+	if (!entity) throw new NotFoundError();
+	if (!entity.encryption_key) throw new BadRequestError("The encryption key does not exist");
+	return {
+		...await (await AsymmetricKey.fromBase64({
+			format: "spki",
+			key: entity.encryption_key,
+			options: AsymmetricKey.buildImportOptionsForJWTAlgorithm(entity.signature_algorithm)
+		})).toJWK(),
+		kid: entity.id,
+		alg: entity.signature_algorithm
+	};
+}
+//#endregion
+export { getJwkRouteHandler, getJwksRouteHandler };
+
+//# sourceMappingURL=read.mjs.map

package/dist/adapters/http/controllers/workflows/jwks/handlers/read.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"read.mjs","names":["AsymmetricKey","JWKType","In","BadRequestError","NotFoundError","getJwksRouteHandler","repository","realmId","entities","find","where","type","RSA","EC","realm_id","order","priority","promises","filter","entity","encryption_key","map","fromBase64","format","key","options","buildImportOptionsForJWTAlgorithm","signature_algorithm","then","container","toJWK","kid","id","alg","keys","Promise","all","getJwkRouteHandler","keyId","findOne","jsonWebKey"],"sources":["../../../../../../../src/adapters/http/controllers/workflows/jwks/handlers/read.ts"],"sourcesContent":["/*\n * Copyright (c) 2022-2022.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport { AsymmetricKey } from '@authup/server-kit';\nimport type { OAuth2JsonWebKey } from '@authup/specs';\nimport { JWKType } from '@authup/specs';\nimport type { Repository } from 'typeorm';\nimport { In } from 'typeorm';\nimport { BadRequestError, NotFoundError } from '@ebec/http';\nimport type { KeyEntity } from '../../../../../database/domains/index.ts';\n\nexport async function getJwksRouteHandler(\n    repository: Repository<KeyEntity>,\n    realmId?: string,\n) : Promise<{ keys: OAuth2JsonWebKey[] }> {\n    const entities = await repository.find({\n        where: {\n            type: In([JWKType.RSA, JWKType.EC]),\n            ...(realmId ? { realm_id: realmId } : {}),\n        },\n        order: { priority: 'DESC' },\n    });\n\n    const promises = entities\n        .filter((entity): entity is KeyEntity & { encryption_key: string } => !!entity.encryption_key)\n        .map(\n            (entity) => AsymmetricKey\n                .fromBase64({\n                    format: 'spki',\n                    key: entity.encryption_key,\n                    options: AsymmetricKey.buildImportOptionsForJWTAlgorithm(entity.signature_algorithm),\n                })\n                .then((container) => container.toJWK())\n                .then((key) => ({\n                    ...key,\n                    kid: entity.id,\n                    alg: entity.signature_algorithm,\n                })),\n        );\n\n    const keys = await Promise.all(promises);\n\n    return { keys };\n}\n\nexport async function getJwkRouteHandler(\n    repository: Repository<KeyEntity>,\n    keyId: string,\n    realmId?: string,\n) : Promise<OAuth2JsonWebKey> {\n    const entity = await repository.findOne({\n        where: {\n            type: In([JWKType.RSA, JWKType.EC]),\n            id: keyId,\n            ...(realmId ? { realm_id: realmId } : {}),\n        },\n    });\n\n    if (!entity) {\n        throw new NotFoundError();\n    }\n\n    if (!entity.encryption_key) {\n        throw new BadRequestError('The encryption key does not exist');\n    }\n\n    const container = await AsymmetricKey\n        .fromBase64({\n            format: 'spki',\n            key: entity.encryption_key,\n            options: AsymmetricKey.buildImportOptionsForJWTAlgorithm(entity.signature_algorithm),\n        });\n\n    const jsonWebKey = await container.toJWK();\n\n    return {\n        ...jsonWebKey,\n        kid: entity.id,\n        alg: entity.signature_algorithm,\n    };\n}\n"],"mappings":";;;;;AAeA,eAAsBK,oBAClBC,YACAC,SAAgB;CAUhB,MAAMU,YAAWT,MARMF,WAAWG,KAAK;EACnCC,OAAO;GACHC,MAAMT,GAAG,CAACD,QAAQW,KAAKX,QAAQY,GAAG,CAAA;GAClC,GAAIN,UAAU,EAAEO,UAAUP,SAAQ,GAAI,EAAE;GAC5C;EACAQ,OAAO,EAAEC,UAAU,QAAO;EAC9B,CAAA,EAGKE,QAAQC,WAA6D,CAAC,CAACA,OAAOC,eAAc,CAC5FC,KACIF,WAAWnB,cACPsB,WAAW;EACRC,QAAQ;EACRC,KAAKL,OAAOC;EACZK,SAASzB,cAAc0B,kCAAkCP,OAAOQ,oBAAmB;EACvF,CAAA,CACCC,MAAMC,cAAcA,UAAUC,OAAK,CAAA,CACnCF,MAAMJ,SAAS;EACZ,GAAGA;EACHO,KAAKZ,OAAOa;EACZC,KAAKd,OAAOQ;EAChB,EAAA,CAAA;AAKZ,QAAO,EAAEO,MAAAA,MAFUC,QAAQC,IAAInB,SAAAA,EAEjB;;AAGlB,eAAsBoB,mBAClB/B,YACAgC,OACA/B,SAAgB;CAEhB,MAAMY,SAAS,MAAMb,WAAWiC,QAAQ,EACpC7B,OAAO;EACHC,MAAMT,GAAG,CAACD,QAAQW,KAAKX,QAAQY,GAAG,CAAA;EAClCmB,IAAIM;EACJ,GAAI/B,UAAU,EAAEO,UAAUP,SAAQ,GAAI,EAAE;EAC5C,EACJ,CAAA;AAEA,KAAI,CAACY,OACD,OAAM,IAAIf,eAAAA;AAGd,KAAI,CAACe,OAAOC,eACR,OAAM,IAAIjB,gBAAgB,oCAAA;AAY9B,QAAO;EACH,GAAGqC,OAHkBX,MAPD7B,cACnBsB,WAAW;GACRC,QAAQ;GACRC,KAAKL,OAAOC;GACZK,SAASzB,cAAc0B,kCAAkCP,OAAOQ,oBAAmB;GACvF,CAAA,EAE+BG,OAAK;EAIpCC,KAAKZ,OAAOa;EACZC,KAAKd,OAAOQ;EAChB"}

package/dist/adapters/http/controllers/workflows/jwks/index.d.ts

@@ -0,0 +1,3 @@
+export * from './handlers/index.ts';
+export * from './module.ts';
+//# sourceMappingURL=index.d.ts.map

package/dist/adapters/http/controllers/workflows/jwks/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../../src/adapters/http/controllers/workflows/jwks/index.ts"],"names":[],"mappings":"AAOA,cAAc,qBAAqB,CAAC;AACpC,cAAc,aAAa,CAAC"}

package/dist/adapters/http/controllers/workflows/jwks/index.mjs

@@ -0,0 +1,4 @@
+import { getJwkRouteHandler, getJwksRouteHandler } from "./handlers/read.mjs";
+import "./handlers/index.mjs";
+import { JwkController } from "./module.mjs";
+export { JwkController, getJwkRouteHandler, getJwksRouteHandler };

package/dist/adapters/http/controllers/workflows/jwks/module.d.ts

@@ -0,0 +1,16 @@
+import type { OAuth2JsonWebKey } from '@authup/specs';
+import type { IRoutupEvent } from 'routup';
+import type { Repository } from 'typeorm';
+import type { KeyEntity } from '../../../../database/domains/index.ts';
+export type JwkControllerContext = {
+    repository: Repository<KeyEntity>;
+};
+export declare class JwkController {
+    protected repository: Repository<KeyEntity>;
+    constructor(ctx: JwkControllerContext);
+    getManyJwks(event: IRoutupEvent): Promise<{
+        keys: OAuth2JsonWebKey[];
+    }>;
+    getOneJwks(id: string): Promise<OAuth2JsonWebKey>;
+}
+//# sourceMappingURL=module.d.ts.map

package/dist/adapters/http/controllers/workflows/jwks/module.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"module.d.ts","sourceRoot":"","sources":["../../../../../../src/adapters/http/controllers/workflows/jwks/module.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,eAAe,CAAC;AAStD,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,QAAQ,CAAC;AAC3C,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AAG1C,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,uCAAuC,CAAC;AAGvE,MAAM,MAAM,oBAAoB,GAAG;IAC/B,UAAU,EAAE,UAAU,CAAC,SAAS,CAAC,CAAA;CACpC,CAAC;AAEF,qBACa,aAAa;IACtB,SAAS,CAAC,UAAU,EAAE,UAAU,CAAC,SAAS,CAAC,CAAC;gBAEhC,GAAG,EAAE,oBAAoB;IAK/B,WAAW,CACD,KAAK,EAAE,YAAY,GAChC,OAAO,CAAC;QAAE,IAAI,EAAE,gBAAgB,EAAE,CAAA;KAAE,CAAC;IAkClC,UAAU,CAAc,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,gBAAgB,CAAC;CA+BvE"}

package/dist/adapters/http/controllers/workflows/jwks/module.mjs

@@ -0,0 +1,87 @@
+import { getRequestStringParam } from "../../../request/helpers/param-id.mjs";
+import "../../../request/index.mjs";
+import { In } from "typeorm";
+import { AsymmetricKey } from "@authup/server-kit";
+import { JWKType } from "@authup/specs";
+import { BadRequestError, NotFoundError } from "@ebec/http";
+import { DContext, DController, DGet, DPath } from "@routup/decorators";
+//#region src/adapters/http/controllers/workflows/jwks/module.ts
+function _ts_decorate(decorators, target, key, desc) {
+	var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+	if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+	else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+	return c > 3 && r && Object.defineProperty(target, key, r), r;
+}
+function _ts_metadata(k, v) {
+	if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+}
+function _ts_param(paramIndex, decorator) {
+	return function(target, key) {
+		decorator(target, key, paramIndex);
+	};
+}
+var JwkController = class {
+	repository;
+	constructor(ctx) {
+		this.repository = ctx.repository;
+	}
+	async getManyJwks(event) {
+		const realmId = getRequestStringParam(event, "realmId");
+		const promises = (await this.repository.find({
+			where: {
+				type: In([JWKType.RSA, JWKType.EC]),
+				...realmId ? { realm_id: realmId } : {}
+			},
+			order: { priority: "DESC" }
+		})).filter((entity) => !!entity.encryption_key).map((entity) => AsymmetricKey.fromBase64({
+			format: "spki",
+			key: entity.encryption_key,
+			options: AsymmetricKey.buildImportOptionsForJWTAlgorithm(entity.signature_algorithm)
+		}).then((container) => container.toJWK()).then((key) => ({
+			...key,
+			kid: entity.id,
+			alg: entity.signature_algorithm
+		})));
+		return { keys: await Promise.all(promises) };
+	}
+	async getOneJwks(id) {
+		const entity = await this.repository.findOne({ where: {
+			type: In([JWKType.RSA, JWKType.EC]),
+			id
+		} });
+		if (!entity) throw new NotFoundError();
+		if (!entity.encryption_key) throw new BadRequestError("The encryption key does not exist");
+		return {
+			...await (await AsymmetricKey.fromBase64({
+				format: "spki",
+				key: entity.encryption_key,
+				options: AsymmetricKey.buildImportOptionsForJWTAlgorithm(entity.signature_algorithm)
+			})).toJWK(),
+			kid: entity.id,
+			alg: entity.signature_algorithm
+		};
+	}
+};
+_ts_decorate([
+	DGet("/jwks", []),
+	_ts_param(0, DContext()),
+	_ts_metadata("design:type", Function),
+	_ts_metadata("design:paramtypes", [typeof IRoutupEvent === "undefined" ? Object : IRoutupEvent]),
+	_ts_metadata("design:returntype", Promise)
+], JwkController.prototype, "getManyJwks", null);
+_ts_decorate([
+	DGet("/jwks/:id", []),
+	_ts_param(0, DPath("id")),
+	_ts_metadata("design:type", Function),
+	_ts_metadata("design:paramtypes", [String]),
+	_ts_metadata("design:returntype", Promise)
+], JwkController.prototype, "getOneJwks", null);
+JwkController = _ts_decorate([
+	DController(""),
+	_ts_metadata("design:type", Function),
+	_ts_metadata("design:paramtypes", [typeof JwkControllerContext === "undefined" ? Object : JwkControllerContext])
+], JwkController);
+//#endregion
+export { JwkController };
+
+//# sourceMappingURL=module.mjs.map

package/dist/adapters/http/controllers/workflows/jwks/module.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"module.mjs","names":["JWKType","AsymmetricKey","DContext","DController","DGet","DPath","In","BadRequestError","NotFoundError","getRequestStringParam","JwkController","repository","ctx","getManyJwks","event","realmId","entities","find","where","type","RSA","EC","realm_id","order","priority","promises","filter","entity","encryption_key","map","fromBase64","format","key","options","buildImportOptionsForJWTAlgorithm","signature_algorithm","then","container","toJWK","kid","id","alg","keys","Promise","all","getOneJwks","findOne","jsonWebKey"],"sources":["../../../../../../src/adapters/http/controllers/workflows/jwks/module.ts"],"sourcesContent":["/*\n * Copyright (c) 2024.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport type { OAuth2JsonWebKey } from '@authup/specs';\nimport { JWKType } from '@authup/specs';\nimport { AsymmetricKey } from '@authup/server-kit';\nimport {\n    DContext,\n    DController,\n    DGet,\n    DPath,\n} from '@routup/decorators';\nimport type { IRoutupEvent } from 'routup';\nimport type { Repository } from 'typeorm';\nimport { In } from 'typeorm';\nimport { BadRequestError, NotFoundError } from '@ebec/http';\nimport type { KeyEntity } from '../../../../database/domains/index.ts';\nimport { getRequestStringParam } from '../../../request/index.ts';\n\nexport type JwkControllerContext = {\n    repository: Repository<KeyEntity>\n};\n\n@DController('')\nexport class JwkController {\n    protected repository: Repository<KeyEntity>;\n\n    constructor(ctx: JwkControllerContext) {\n        this.repository = ctx.repository;\n    }\n\n    @DGet('/jwks', [])\n    async getManyJwks(\n        @DContext() event: IRoutupEvent,\n    ): Promise<{ keys: OAuth2JsonWebKey[] }> {\n        const realmId = getRequestStringParam(event, 'realmId');\n\n        const entities = await this.repository.find({\n            where: {\n                type: In([JWKType.RSA, JWKType.EC]),\n                ...(realmId ? { realm_id: realmId } : {}),\n            },\n            order: { priority: 'DESC' },\n        });\n\n        const promises = entities\n            .filter((entity): entity is KeyEntity & { encryption_key: string } => !!entity.encryption_key)\n            .map(\n                (entity) => AsymmetricKey\n                    .fromBase64({\n                        format: 'spki',\n                        key: entity.encryption_key,\n                        options: AsymmetricKey.buildImportOptionsForJWTAlgorithm(entity.signature_algorithm),\n                    })\n                    .then((container) => container.toJWK())\n                    .then((key) => ({\n                        ...key,\n                        kid: entity.id,\n                        alg: entity.signature_algorithm,\n                    })),\n            );\n\n        const keys = await Promise.all(promises);\n\n        return { keys };\n    }\n\n    @DGet('/jwks/:id', [])\n    async getOneJwks(@DPath('id') id: string): Promise<OAuth2JsonWebKey> {\n        const entity = await this.repository.findOne({\n            where: {\n                type: In([JWKType.RSA, JWKType.EC]),\n                id,\n            },\n        });\n\n        if (!entity) {\n            throw new NotFoundError();\n        }\n\n        if (!entity.encryption_key) {\n            throw new BadRequestError('The encryption key does not exist');\n        }\n\n        const container = await AsymmetricKey\n            .fromBase64({\n                format: 'spki',\n                key: entity.encryption_key,\n                options: AsymmetricKey.buildImportOptionsForJWTAlgorithm(entity.signature_algorithm),\n            });\n\n        const jsonWebKey = await container.toJWK();\n\n        return {\n            ...jsonWebKey,\n            kid: entity.id,\n            alg: entity.signature_algorithm,\n        };\n    }\n}\n"],"mappings":";;;;;;;;AAKC,SAAA,aAAA,YAAA,QAAA,KAAA,MAAA;;;;;;;;;;;;;;AAuBD,IAAaU,gBAAb,MAAaA;CACCC;CAEV,YAAYC,KAA2B;AACnC,OAAKD,aAAaC,IAAID;;CAG1B,MACME,YACF,OACqC;EACrC,MAAME,UAAUN,sBAAsBK,OAAO,UAAA;EAU7C,MAAMW,YAAWT,MARM,KAAKL,WAAWM,KAAK;GACxCC,OAAO;IACHC,MAAMb,GAAG,CAACN,QAAQoB,KAAKpB,QAAQqB,GAAG,CAAA;IAClC,GAAIN,UAAU,EAAEO,UAAUP,SAAQ,GAAI,EAAE;IAC5C;GACAQ,OAAO,EAAEC,UAAU,QAAO;GAC9B,CAAA,EAGKE,QAAQC,WAA6D,CAAC,CAACA,OAAOC,eAAc,CAC5FC,KACIF,WAAW1B,cACP6B,WAAW;GACRC,QAAQ;GACRC,KAAKL,OAAOC;GACZK,SAAShC,cAAciC,kCAAkCP,OAAOQ,oBAAmB;GACvF,CAAA,CACCC,MAAMC,cAAcA,UAAUC,OAAK,CAAA,CACnCF,MAAMJ,SAAS;GACZ,GAAGA;GACHO,KAAKZ,OAAOa;GACZC,KAAKd,OAAOQ;GAChB,EAAA,CAAA;AAKZ,SAAO,EAAEO,MAAAA,MAFUC,QAAQC,IAAInB,SAAAA,EAEjB;;CAGlB,MACMoB,WAAW,IAAoD;EACjE,MAAMlB,SAAS,MAAM,KAAKhB,WAAWmC,QAAQ,EACzC5B,OAAO;GACHC,MAAMb,GAAG,CAACN,QAAQoB,KAAKpB,QAAQqB,GAAG,CAAA;GAClCmB;GACJ,EACJ,CAAA;AAEA,MAAI,CAACb,OACD,OAAM,IAAInB,eAAAA;AAGd,MAAI,CAACmB,OAAOC,eACR,OAAM,IAAIrB,gBAAgB,oCAAA;AAY9B,SAAO;GACH,GAAGwC,OAHkBV,MAPDpC,cACnB6B,WAAW;IACRC,QAAQ;IACRC,KAAKL,OAAOC;IACZK,SAAShC,cAAciC,kCAAkCP,OAAOQ,oBAAmB;IACvF,CAAA,EAE+BG,OAAK;GAIpCC,KAAKZ,OAAOa;GACZC,KAAKd,OAAOQ;GAChB"}

package/dist/adapters/http/controllers/workflows/openid/index.d.ts

@@ -0,0 +1,2 @@
+export * from './module.ts';
+//# sourceMappingURL=index.d.ts.map

package/dist/adapters/http/controllers/workflows/openid/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../../src/adapters/http/controllers/workflows/openid/index.ts"],"names":[],"mappings":"AAOA,cAAc,aAAa,CAAC"}

package/dist/adapters/http/controllers/workflows/openid/index.mjs

@@ -0,0 +1,2 @@
+import { OpenIDController } from "./module.mjs";
+export { OpenIDController };

package/dist/adapters/http/controllers/workflows/openid/module.d.ts

@@ -0,0 +1,10 @@
+import type { OpenIDProviderMetadata } from '@authup/specs';
+export type OpenIDControllerOptions = {
+    baseURL: string;
+};
+export declare class OpenIDController {
+    protected options: OpenIDControllerOptions;
+    constructor(options: OpenIDControllerOptions);
+    getOpenIdConfiguration(): Promise<OpenIDProviderMetadata>;
+}
+//# sourceMappingURL=module.d.ts.map

package/dist/adapters/http/controllers/workflows/openid/module.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"module.d.ts","sourceRoot":"","sources":["../../../../../../src/adapters/http/controllers/workflows/openid/module.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,eAAe,CAAC;AAQ5D,MAAM,MAAM,uBAAuB,GAAG;IAClC,OAAO,EAAE,MAAM,CAAA;CAClB,CAAC;AAEF,qBACa,gBAAgB;IACzB,SAAS,CAAC,OAAO,EAAE,uBAAuB,CAAC;gBAE/B,OAAO,EAAE,uBAAuB;IAKtC,sBAAsB,IAAI,OAAO,CAAC,sBAAsB,CAAC;CA0ClE"}

package/dist/adapters/http/controllers/workflows/openid/module.mjs

@@ -0,0 +1,63 @@
+import { resolveURL } from "../../../../../utils/url.mjs";
+import "../../../../../utils/index.mjs";
+import { OAuth2AuthorizationResponseType } from "@authup/specs";
+import { DController, DGet } from "@routup/decorators";
+//#region src/adapters/http/controllers/workflows/openid/module.ts
+function _ts_decorate(decorators, target, key, desc) {
+	var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+	if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+	else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+	return c > 3 && r && Object.defineProperty(target, key, r), r;
+}
+function _ts_metadata(k, v) {
+	if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+}
+var OpenIDController = class {
+	options;
+	constructor(options) {
+		this.options = options;
+	}
+	async getOpenIdConfiguration() {
+		const { baseURL } = this.options;
+		return {
+			issuer: baseURL,
+			authorization_endpoint: resolveURL(baseURL, "authorize"),
+			jwks_uri: resolveURL(baseURL, "jwks"),
+			response_types_supported: [
+				OAuth2AuthorizationResponseType.CODE,
+				OAuth2AuthorizationResponseType.TOKEN,
+				OAuth2AuthorizationResponseType.NONE
+			],
+			subject_types_supported: ["public"],
+			id_token_signing_alg_values_supported: [
+				"HS256",
+				"HS384",
+				"HS512",
+				"RS256",
+				"RS384",
+				"RS512",
+				"none"
+			],
+			token_endpoint: resolveURL(baseURL, "token"),
+			introspection_endpoint: resolveURL(baseURL, "token/introspect"),
+			revocation_endpoint: resolveURL(baseURL, "token"),
+			service_documentation: "https://authup.org/",
+			userinfo_endpoint: resolveURL(baseURL, "users/@me")
+		};
+	}
+};
+_ts_decorate([
+	DGet("/.well-known/openid-configuration", []),
+	_ts_metadata("design:type", Function),
+	_ts_metadata("design:paramtypes", []),
+	_ts_metadata("design:returntype", Promise)
+], OpenIDController.prototype, "getOpenIdConfiguration", null);
+OpenIDController = _ts_decorate([
+	DController(""),
+	_ts_metadata("design:type", Function),
+	_ts_metadata("design:paramtypes", [typeof OpenIDControllerOptions === "undefined" ? Object : OpenIDControllerOptions])
+], OpenIDController);
+//#endregion
+export { OpenIDController };
+
+//# sourceMappingURL=module.mjs.map

package/dist/adapters/http/controllers/workflows/openid/module.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"module.mjs","names":["OAuth2AuthorizationResponseType","DController","DGet","resolveURL","OpenIDController","options","getOpenIdConfiguration","baseURL","issuer","authorization_endpoint","jwks_uri","response_types_supported","CODE","TOKEN","NONE","subject_types_supported","id_token_signing_alg_values_supported","token_endpoint","introspection_endpoint","revocation_endpoint","service_documentation","userinfo_endpoint"],"sources":["../../../../../../src/adapters/http/controllers/workflows/openid/module.ts"],"sourcesContent":["/*\n * Copyright (c) 2024.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport type { OpenIDProviderMetadata } from '@authup/specs';\nimport { OAuth2AuthorizationResponseType } from '@authup/specs';\nimport {\n    DController,\n    DGet,\n} from '@routup/decorators';\nimport { resolveURL } from '../../../../../utils/index.ts';\n\nexport type OpenIDControllerOptions = {\n    baseURL: string\n};\n\n@DController('')\nexport class OpenIDController {\n    protected options: OpenIDControllerOptions;\n\n    constructor(options: OpenIDControllerOptions) {\n        this.options = options;\n    }\n\n    @DGet('/.well-known/openid-configuration', [])\n    async getOpenIdConfiguration(): Promise<OpenIDProviderMetadata> {\n        const { baseURL } = this.options;\n        return {\n            issuer: baseURL,\n\n            authorization_endpoint: resolveURL(baseURL, 'authorize'),\n\n            jwks_uri: resolveURL(baseURL, 'jwks'),\n\n            response_types_supported: [\n                OAuth2AuthorizationResponseType.CODE,\n                OAuth2AuthorizationResponseType.TOKEN,\n                OAuth2AuthorizationResponseType.NONE,\n            ],\n\n            subject_types_supported: [\n                'public',\n            ],\n\n            id_token_signing_alg_values_supported: [\n                'HS256',\n                'HS384',\n                'HS512',\n                'RS256',\n                'RS384',\n                'RS512',\n                'none',\n            ],\n\n            token_endpoint: resolveURL(baseURL, 'token'),\n\n            introspection_endpoint: resolveURL(baseURL, 'token/introspect'),\n\n            revocation_endpoint: resolveURL(baseURL, 'token'),\n\n            // -----------------------------------------------------------\n\n            service_documentation: 'https://authup.org/',\n\n            userinfo_endpoint: resolveURL(baseURL, 'users/@me'),\n        };\n    }\n}\n"],"mappings":";;;;;AAKC,SAAA,aAAA,YAAA,QAAA,KAAA,MAAA;;;;;;;;;AAeD,IAAaI,mBAAb,MAAaA;CACCC;CAEV,YAAYA,SAAkC;AAC1C,OAAKA,UAAUA;;CAGnB,MACMC,yBAA0D;EAC5D,MAAM,EAAEC,YAAY,KAAKF;AACzB,SAAO;GACHG,QAAQD;GAERE,wBAAwBN,WAAWI,SAAS,YAAA;GAE5CG,UAAUP,WAAWI,SAAS,OAAA;GAE9BI,0BAA0B;IACtBX,gCAAgCY;IAChCZ,gCAAgCa;IAChCb,gCAAgCc;IACnC;GAEDC,yBAAyB,CACrB,SACH;GAEDC,uCAAuC;IACnC;IACA;IACA;IACA;IACA;IACA;IACA;IACH;GAEDC,gBAAgBd,WAAWI,SAAS,QAAA;GAEpCW,wBAAwBf,WAAWI,SAAS,mBAAA;GAE5CY,qBAAqBhB,WAAWI,SAAS,QAAA;GAIzCa,uBAAuB;GAEvBC,mBAAmBlB,WAAWI,SAAS,YAAA;GAC3C"}

package/dist/adapters/http/controllers/workflows/password-forgot/index.d.ts

@@ -0,0 +1,2 @@
+export * from './module.ts';
+//# sourceMappingURL=index.d.ts.map

package/dist/adapters/http/controllers/workflows/password-forgot/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../../src/adapters/http/controllers/workflows/password-forgot/index.ts"],"names":[],"mappings":"AAOA,cAAc,aAAa,CAAC"}

package/dist/adapters/http/controllers/workflows/password-forgot/index.mjs

@@ -0,0 +1,2 @@
+import { PasswordForgotController } from "./module.mjs";
+export { PasswordForgotController };

package/dist/adapters/http/controllers/workflows/password-forgot/module.d.ts

@@ -0,0 +1,12 @@
+import type { PasswordForgotPayload, PasswordForgotResponse } from '@authup/core-http-kit';
+import type { IRoutupEvent } from 'routup';
+import type { IPasswordRecoveryService } from '../../../../../core/index.ts';
+export type PasswordForgotControllerContext = {
+    service: IPasswordRecoveryService;
+};
+export declare class PasswordForgotController {
+    protected service: IPasswordRecoveryService;
+    constructor(ctx: PasswordForgotControllerContext);
+    execute(data: PasswordForgotPayload, event: IRoutupEvent): Promise<PasswordForgotResponse>;
+}
+//# sourceMappingURL=module.d.ts.map

package/dist/adapters/http/controllers/workflows/password-forgot/module.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"module.d.ts","sourceRoot":"","sources":["../../../../../../src/adapters/http/controllers/workflows/password-forgot/module.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,qBAAqB,EAAE,sBAAsB,EAAE,MAAM,uBAAuB,CAAC;AAO3F,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,QAAQ,CAAC;AAC3C,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,8BAA8B,CAAC;AAE7E,MAAM,MAAM,+BAA+B,GAAG;IAC1C,OAAO,EAAE,wBAAwB,CAAC;CACrC,CAAC;AAEF,qBACa,wBAAwB;IACjC,SAAS,CAAC,OAAO,EAAE,wBAAwB,CAAC;gBAEhC,GAAG,EAAE,+BAA+B;IAK1C,OAAO,CACA,IAAI,EAAE,qBAAqB,EACxB,KAAK,EAAE,YAAY,GAChC,OAAO,CAAC,sBAAsB,CAAC;CAOrC"}

package/dist/adapters/http/controllers/workflows/password-forgot/module.mjs

@@ -0,0 +1,44 @@
+import { DBody, DContext, DController, DPost } from "@routup/decorators";
+//#region src/adapters/http/controllers/workflows/password-forgot/module.ts
+function _ts_decorate(decorators, target, key, desc) {
+	var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+	if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+	else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+	return c > 3 && r && Object.defineProperty(target, key, r), r;
+}
+function _ts_metadata(k, v) {
+	if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+}
+function _ts_param(paramIndex, decorator) {
+	return function(target, key) {
+		decorator(target, key, paramIndex);
+	};
+}
+var PasswordForgotController = class {
+	service;
+	constructor(ctx) {
+		this.service = ctx.service;
+	}
+	async execute(data, event) {
+		const result = await this.service.forgotPassword(data);
+		event.response.status = 202;
+		return result;
+	}
+};
+_ts_decorate([
+	DPost("", []),
+	_ts_param(0, DBody()),
+	_ts_param(1, DContext()),
+	_ts_metadata("design:type", Function),
+	_ts_metadata("design:paramtypes", [typeof PasswordForgotPayload === "undefined" ? Object : PasswordForgotPayload, typeof IRoutupEvent === "undefined" ? Object : IRoutupEvent]),
+	_ts_metadata("design:returntype", Promise)
+], PasswordForgotController.prototype, "execute", null);
+PasswordForgotController = _ts_decorate([
+	DController("/password-forgot"),
+	_ts_metadata("design:type", Function),
+	_ts_metadata("design:paramtypes", [typeof PasswordForgotControllerContext === "undefined" ? Object : PasswordForgotControllerContext])
+], PasswordForgotController);
+//#endregion
+export { PasswordForgotController };
+
+//# sourceMappingURL=module.mjs.map