@authup/server-core 1.0.0-beta.4 → 1.0.0-beta.41

package/dist/components/database/unique-entries/index.mjs

@@ -0,0 +1,3 @@
+import { DatabaseUniqueEntriesComponent } from "./module.mjs";
+import { createDatabaseUniqueEntriesComponent } from "./factory.mjs";
+export { DatabaseUniqueEntriesComponent, createDatabaseUniqueEntriesComponent };

package/dist/components/database/unique-entries/module.d.ts

@@ -0,0 +1,15 @@
+import type { DataSource } from 'typeorm';
+import type { Component } from '../../types.ts';
+export declare class DatabaseUniqueEntriesComponent implements Component {
+    protected dataSource: DataSource;
+    constructor(dataSource: DataSource);
+    /**
+     * Thus a unique check failed for mysql driver,
+     * existing duplicate entries must be removed.
+     */
+    start(): Promise<void>;
+    enforceUniqueRoles(): Promise<void>;
+    enforceUniquePermissions(): Promise<void>;
+    protected buildKey(props: Record<string, string | null>): string;
+}
+//# sourceMappingURL=module.d.ts.map

package/dist/components/database/unique-entries/module.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"module.d.ts","sourceRoot":"","sources":["../../../../src/components/database/unique-entries/module.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AAE1C,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAC;AAEhD,qBAAa,8BAA+B,YAAW,SAAS;IAC5D,SAAS,CAAC,UAAU,EAAE,UAAU,CAAC;gBAErB,UAAU,EAAE,UAAU;IAIlC;;;OAGG;IACG,KAAK;IAKL,kBAAkB;IAkClB,wBAAwB;IAkC9B,SAAS,CAAC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;CAO1D"}

package/dist/components/database/unique-entries/module.mjs

@@ -0,0 +1,66 @@
+import { RoleEntity } from "../../../adapters/database/domains/role/entity.mjs";
+import { PermissionEntity } from "../../../adapters/database/domains/permission/entity.mjs";
+import "../../../adapters/database/domains/index.mjs";
+//#region src/components/database/unique-entries/module.ts
+var DatabaseUniqueEntriesComponent = class {
+	dataSource;
+	constructor(dataSource) {
+		this.dataSource = dataSource;
+	}
+	/**
+	* Thus a unique check failed for mysql driver,
+	* existing duplicate entries must be removed.
+	*/ async start() {
+		await this.enforceUniqueRoles();
+		await this.enforceUniquePermissions();
+	}
+	async enforceUniqueRoles() {
+		const repository = this.dataSource.getRepository(RoleEntity);
+		const queryBuilder = repository.createQueryBuilder("role");
+		queryBuilder.orderBy("role.created_at", "ASC");
+		const aggregated = (await queryBuilder.getMany()).reduce((prev, curr) => {
+			const key = this.buildKey({
+				name: curr.name,
+				client_id: curr.client_id,
+				realm_id: curr.realm_id
+			});
+			if (Array.isArray(prev[key])) prev[key].push(curr);
+			else prev[key] = [curr];
+			return prev;
+		}, {});
+		const keys = Object.keys(aggregated);
+		for (const key of keys) {
+			const [, ...rest] = aggregated[key];
+			if (rest.length === 0) continue;
+			await repository.remove(rest);
+		}
+	}
+	async enforceUniquePermissions() {
+		const repository = this.dataSource.getRepository(PermissionEntity);
+		const queryBuilder = repository.createQueryBuilder("permission");
+		queryBuilder.orderBy("permission.created_at", "ASC");
+		const aggregated = (await queryBuilder.getMany()).reduce((prev, curr) => {
+			const key = this.buildKey({
+				name: curr.name,
+				client_id: curr.client_id,
+				realm_id: curr.realm_id
+			});
+			if (Array.isArray(prev[key])) prev[key].push(curr);
+			else prev[key] = [curr];
+			return prev;
+		}, {});
+		const keys = Object.keys(aggregated);
+		for (const key of keys) {
+			const [, ...rest] = aggregated[key];
+			if (rest.length === 0) continue;
+			await repository.remove(rest);
+		}
+	}
+	buildKey(props) {
+		return Object.keys(props).map((key) => typeof props[key] === "string" ? props[key] : `${props[key]}`).join(":");
+	}
+};
+//#endregion
+export { DatabaseUniqueEntriesComponent };
+
+//# sourceMappingURL=module.mjs.map

package/dist/components/database/unique-entries/module.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"module.mjs","names":["PermissionEntity","RoleEntity","DatabaseUniqueEntriesComponent","dataSource","start","enforceUniqueRoles","enforceUniquePermissions","repository","getRepository","queryBuilder","createQueryBuilder","orderBy","entities","getMany","aggregated","reduce","prev","curr","key","buildKey","name","client_id","realm_id","Array","isArray","push","keys","Object","rest","length","remove","props","map","join"],"sources":["../../../../src/components/database/unique-entries/module.ts"],"sourcesContent":["/*\n * Copyright (c) 2025.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport type { DataSource } from 'typeorm';\nimport { PermissionEntity, RoleEntity } from '../../../adapters/database/domains/index.ts';\nimport type { Component } from '../../types.ts';\n\nexport class DatabaseUniqueEntriesComponent implements Component {\n    protected dataSource: DataSource;\n\n    constructor(dataSource: DataSource) {\n        this.dataSource = dataSource;\n    }\n\n    /**\n     * Thus a unique check failed for mysql driver,\n     * existing duplicate entries must be removed.\n     */\n    async start() {\n        await this.enforceUniqueRoles();\n        await this.enforceUniquePermissions();\n    }\n\n    async enforceUniqueRoles() {\n        const repository = this.dataSource.getRepository(RoleEntity);\n        const queryBuilder = repository.createQueryBuilder('role');\n\n        queryBuilder.orderBy('role.created_at', 'ASC');\n\n        const entities = await queryBuilder.getMany();\n        const aggregated = entities.reduce((prev, curr) => {\n            const key = this.buildKey({\n                name: curr.name,\n                client_id: curr.client_id,\n                realm_id: curr.realm_id,\n            });\n\n            if (Array.isArray(prev[key])) {\n                prev[key].push(curr);\n            } else {\n                prev[key] = [curr];\n            }\n\n            return prev;\n        }, {} as Record<string, RoleEntity[]>);\n\n        const keys = Object.keys(aggregated);\n        for (const key of keys) {\n            const [, ...rest] = aggregated[key];\n            if (rest.length === 0) {\n                continue;\n            }\n\n            await repository.remove(rest);\n        }\n    }\n\n    async enforceUniquePermissions() {\n        const repository = this.dataSource.getRepository(PermissionEntity);\n        const queryBuilder = repository.createQueryBuilder('permission');\n\n        queryBuilder.orderBy('permission.created_at', 'ASC');\n\n        const entities = await queryBuilder.getMany();\n        const aggregated = entities.reduce((prev, curr) => {\n            const key = this.buildKey({\n                name: curr.name,\n                client_id: curr.client_id,\n                realm_id: curr.realm_id,\n            });\n\n            if (Array.isArray(prev[key])) {\n                prev[key].push(curr);\n            } else {\n                prev[key] = [curr];\n            }\n\n            return prev;\n        }, {} as Record<string, PermissionEntity[]>);\n\n        const keys = Object.keys(aggregated);\n        for (const key of keys) {\n            const [, ...rest] = aggregated[key];\n            if (rest.length === 0) {\n                continue;\n            }\n\n            await repository.remove(rest);\n        }\n    }\n\n    protected buildKey(props: Record<string, string | null>) {\n        const keys = Object.keys(props);\n\n        return keys\n            .map((key) => (typeof props[key] === 'string' ? props[key] : `${props[key]}`))\n            .join(':');\n    }\n}\n"],"mappings":";;;;AAWA,IAAaE,iCAAb,MAAaA;CACCC;CAEV,YAAYA,YAAwB;AAChC,OAAKA,aAAaA;;;;;IAOtB,MAAMC,QAAQ;AACV,QAAM,KAAKC,oBAAkB;AAC7B,QAAM,KAAKC,0BAAwB;;CAGvC,MAAMD,qBAAqB;EACvB,MAAME,aAAa,KAAKJ,WAAWK,cAAcP,WAAAA;EACjD,MAAMQ,eAAeF,WAAWG,mBAAmB,OAAA;AAEnDD,eAAaE,QAAQ,mBAAmB,MAAA;EAGxC,MAAMG,cAAaF,MADIH,aAAaI,SAAO,EACfE,QAAQC,MAAMC,SAAAA;GACtC,MAAMC,MAAM,KAAKC,SAAS;IACtBC,MAAMH,KAAKG;IACXC,WAAWJ,KAAKI;IAChBC,UAAUL,KAAKK;IACnB,CAAA;AAEA,OAAIC,MAAMC,QAAQR,KAAKE,KAAI,CACvBF,MAAKE,KAAKO,KAAKR,KAAAA;OAEfD,MAAKE,OAAO,CAACD,KAAK;AAGtB,UAAOD;KACR,EAAC,CAAA;EAEJ,MAAMU,OAAOC,OAAOD,KAAKZ,WAAAA;AACzB,OAAK,MAAMI,OAAOQ,MAAM;GACpB,MAAM,GAAG,GAAGE,QAAQd,WAAWI;AAC/B,OAAIU,KAAKC,WAAW,EAChB;AAGJ,SAAMtB,WAAWuB,OAAOF,KAAAA;;;CAIhC,MAAMtB,2BAA2B;EAC7B,MAAMC,aAAa,KAAKJ,WAAWK,cAAcR,iBAAAA;EACjD,MAAMS,eAAeF,WAAWG,mBAAmB,aAAA;AAEnDD,eAAaE,QAAQ,yBAAyB,MAAA;EAG9C,MAAMG,cAAaF,MADIH,aAAaI,SAAO,EACfE,QAAQC,MAAMC,SAAAA;GACtC,MAAMC,MAAM,KAAKC,SAAS;IACtBC,MAAMH,KAAKG;IACXC,WAAWJ,KAAKI;IAChBC,UAAUL,KAAKK;IACnB,CAAA;AAEA,OAAIC,MAAMC,QAAQR,KAAKE,KAAI,CACvBF,MAAKE,KAAKO,KAAKR,KAAAA;OAEfD,MAAKE,OAAO,CAACD,KAAK;AAGtB,UAAOD;KACR,EAAC,CAAA;EAEJ,MAAMU,OAAOC,OAAOD,KAAKZ,WAAAA;AACzB,OAAK,MAAMI,OAAOQ,MAAM;GACpB,MAAM,GAAG,GAAGE,QAAQd,WAAWI;AAC/B,OAAIU,KAAKC,WAAW,EAChB;AAGJ,SAAMtB,WAAWuB,OAAOF,KAAAA;;;CAItBT,SAASY,OAAsC;AAGrD,SAFaJ,OAAOD,KAAKK,MAElBL,CACFM,KAAKd,QAAS,OAAOa,MAAMb,SAAS,WAAWa,MAAMb,OAAO,GAAGa,MAAMb,OAAM,CAC3Ee,KAAK,IAAA"}

package/dist/components/index.d.ts

@@ -0,0 +1,4 @@
+export * from './database/index.ts';
+export * from './oauth2-cleaner/index.ts';
+export * from './types.ts';
+//# sourceMappingURL=index.d.ts.map

package/dist/components/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/components/index.ts"],"names":[],"mappings":"AAOA,cAAc,qBAAqB,CAAC;AACpC,cAAc,2BAA2B,CAAC;AAC1C,cAAc,YAAY,CAAC"}

package/dist/components/index.mjs

@@ -0,0 +1,6 @@
+import { DatabaseUniqueEntriesComponent } from "./database/unique-entries/module.mjs";
+import { createDatabaseUniqueEntriesComponent } from "./database/unique-entries/factory.mjs";
+import "./database/index.mjs";
+import { createOAuth2CleanerComponent } from "./oauth2-cleaner/module.mjs";
+import "./oauth2-cleaner/index.mjs";
+export { DatabaseUniqueEntriesComponent, createDatabaseUniqueEntriesComponent, createOAuth2CleanerComponent };

package/dist/components/oauth2-cleaner/index.d.ts

@@ -0,0 +1,2 @@
+export * from './module.ts';
+//# sourceMappingURL=index.d.ts.map

package/dist/components/oauth2-cleaner/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/components/oauth2-cleaner/index.ts"],"names":[],"mappings":"AAOA,cAAc,aAAa,CAAC"}

package/dist/components/oauth2-cleaner/index.mjs

@@ -0,0 +1,2 @@
+import { createOAuth2CleanerComponent } from "./module.mjs";
+export { createOAuth2CleanerComponent };

package/dist/components/oauth2-cleaner/module.d.ts

@@ -0,0 +1,4 @@
+import type { DataSource } from 'typeorm';
+import type { Component } from '../types.ts';
+export declare function createOAuth2CleanerComponent(dataSource: DataSource): Component;
+//# sourceMappingURL=module.d.ts.map

package/dist/components/oauth2-cleaner/module.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"module.d.ts","sourceRoot":"","sources":["../../../src/components/oauth2-cleaner/module.ts"],"names":[],"mappings":"AAQA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AAG1C,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AAE7C,wBAAgB,4BAA4B,CAAC,UAAU,EAAE,UAAU,GAAI,SAAS,CAmB/E"}

package/dist/components/oauth2-cleaner/module.mjs

@@ -0,0 +1,22 @@
+import { SessionEntity } from "../../adapters/database/domains/session/entity.mjs";
+import "../../adapters/database/domains/index.mjs";
+import { LessThan } from "typeorm";
+import cron from "node-cron";
+//#region src/components/oauth2-cleaner/module.ts
+function createOAuth2CleanerComponent(dataSource) {
+	return { async start() {
+		const sessionRepository = dataSource.getRepository(SessionEntity);
+		const execute = async () => {
+			const isoDate = (/* @__PURE__ */ new Date()).toISOString();
+			await sessionRepository.delete({ expires_at: LessThan(isoDate) });
+		};
+		await execute();
+		cron.schedule("* * * * *", async () => {
+			await execute();
+		});
+	} };
+}
+//#endregion
+export { createOAuth2CleanerComponent };
+
+//# sourceMappingURL=module.mjs.map

package/dist/components/oauth2-cleaner/module.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"module.mjs","names":["cron","LessThan","SessionEntity","createOAuth2CleanerComponent","dataSource","start","sessionRepository","getRepository","execute","isoDate","Date","toISOString","delete","expires_at","schedule"],"sources":["../../../src/components/oauth2-cleaner/module.ts"],"sourcesContent":["/*\n * Copyright (c) 2022-2022.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport cron from 'node-cron';\nimport type { DataSource } from 'typeorm';\nimport { LessThan } from 'typeorm';\nimport { SessionEntity } from '../../adapters/database/domains/index.ts';\nimport type { Component } from '../types.ts';\n\nexport function createOAuth2CleanerComponent(dataSource: DataSource) : Component {\n    return {\n        async start() {\n            const sessionRepository = dataSource.getRepository(SessionEntity);\n\n            const execute = async () => {\n                const isoDate = new Date().toISOString();\n\n                await sessionRepository\n                    .delete({ expires_at: LessThan(isoDate) });\n            };\n\n            await execute();\n\n            cron.schedule('* * * * *', async () => {\n                await execute();\n            });\n        },\n    };\n}\n"],"mappings":";;;;;AAaA,SAAgBG,6BAA6BC,YAAsB;AAC/D,QAAO,EACH,MAAMC,QAAAA;EACF,MAAMC,oBAAoBF,WAAWG,cAAcL,cAAAA;EAEnD,MAAMM,UAAU,YAAA;GACZ,MAAMC,2BAAU,IAAIC,MAAAA,EAAOC,aAAW;AAEtC,SAAML,kBACDM,OAAO,EAAEC,YAAYZ,SAASQ,QAAAA,EAAS,CAAA;;AAGhD,QAAMD,SAAAA;AAENR,OAAKc,SAAS,aAAa,YAAA;AACvB,SAAMN,SAAAA;IACV;IAER"}

package/dist/components/types.d.ts

@@ -0,0 +1,4 @@
+export type Component = {
+    start: () => Promise<void>;
+};
+//# sourceMappingURL=types.d.ts.map

package/dist/components/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/components/types.ts"],"names":[],"mappings":"AAOA,MAAM,MAAM,SAAS,GAAG;IACpB,KAAK,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;CAC9B,CAAC"}

package/dist/components/types.mjs

@@ -0,0 +1 @@
+export {};

package/dist/core/authentication/base.d.ts

@@ -0,0 +1,8 @@
+import type { Result } from '@authup/kit';
+import type { ObjectLiteral } from 'validup';
+import type { ICredentialsAuthenticator } from './types.ts';
+export declare abstract class BaseCredentialsAuthenticator<OUTPUT extends ObjectLiteral = ObjectLiteral> implements ICredentialsAuthenticator<OUTPUT> {
+    safeAuthenticate(key: string, value: string, realmId?: string): Promise<Result<OUTPUT>>;
+    abstract authenticate(key: string, value: string, realmId?: string): Promise<OUTPUT>;
+}
+//# sourceMappingURL=base.d.ts.map

package/dist/core/authentication/base.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"base.d.ts","sourceRoot":"","sources":["../../../src/core/authentication/base.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AAC1C,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AAC7C,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,YAAY,CAAC;AAE5D,8BAAsB,4BAA4B,CAC9C,MAAM,SAAS,aAAa,GAAG,aAAa,CAC9C,YAAW,yBAAyB,CAAC,MAAM,CAAC;IACpC,gBAAgB,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAe7F,QAAQ,CAAC,YAAY,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;CACvF"}

package/dist/core/authentication/base.mjs

@@ -0,0 +1,20 @@
+//#region src/core/authentication/base.ts
+var BaseCredentialsAuthenticator = class {
+	async safeAuthenticate(key, value, realmId) {
+		try {
+			return {
+				success: true,
+				data: await this.authenticate(key, value, realmId)
+			};
+		} catch (e) {
+			return {
+				success: false,
+				error: e
+			};
+		}
+	}
+};
+//#endregion
+export { BaseCredentialsAuthenticator };
+
+//# sourceMappingURL=base.mjs.map

package/dist/core/authentication/base.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"base.mjs","names":["BaseCredentialsAuthenticator","safeAuthenticate","key","value","realmId","data","authenticate","success","e","error"],"sources":["../../../src/core/authentication/base.ts"],"sourcesContent":["/*\n * Copyright (c) 2025.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport type { Result } from '@authup/kit';\nimport type { ObjectLiteral } from 'validup';\nimport type { ICredentialsAuthenticator } from './types.ts';\n\nexport abstract class BaseCredentialsAuthenticator<\n    OUTPUT extends ObjectLiteral = ObjectLiteral,\n> implements ICredentialsAuthenticator<OUTPUT> {\n    async safeAuthenticate(key: string, value: string, realmId?: string): Promise<Result<OUTPUT>> {\n        try {\n            const data = await this.authenticate(key, value, realmId);\n            return {\n                success: true,\n                data, \n            };\n        } catch (e) {\n            return {\n                success: false,\n                error: e as Error, \n            };\n        }\n    }\n\n    abstract authenticate(key: string, value: string, realmId?: string): Promise<OUTPUT>;\n}\n"],"mappings":";AAWA,IAAsBA,+BAAtB,MAAsBA;CAGlB,MAAMC,iBAAiBC,KAAaC,OAAeC,SAA2C;AAC1F,MAAI;AAEA,UAAO;IACHG,SAAS;IACTF,MAAAA,MAHe,KAAKC,aAAaJ,KAAKC,OAAOC,QAAAA;IAIjD;WACKI,GAAG;AACR,UAAO;IACHD,SAAS;IACTE,OAAOD;IACX"}

package/dist/core/authentication/credential/entities/client/index.d.ts

@@ -0,0 +1,2 @@
+export * from './module.ts';
+//# sourceMappingURL=index.d.ts.map

package/dist/core/authentication/credential/entities/client/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../../src/core/authentication/credential/entities/client/index.ts"],"names":[],"mappings":"AAOA,cAAc,aAAa,CAAC"}

package/dist/core/authentication/credential/entities/client/index.mjs

@@ -0,0 +1,2 @@
+import { ClientCredentialsService } from "./module.mjs";
+export { ClientCredentialsService };

package/dist/core/authentication/credential/entities/client/module.d.ts

@@ -0,0 +1,8 @@
+import type { Client } from '@authup/core-kit';
+import type { ICredentialService } from '../../types.ts';
+export declare class ClientCredentialsService implements ICredentialService<Client> {
+    verify(input: string, entity: Client): Promise<boolean>;
+    protect(input: string, entity: Pick<Client, 'secret_hashed'>): Promise<string>;
+    generateSecret(): string;
+}
+//# sourceMappingURL=module.d.ts.map

package/dist/core/authentication/credential/entities/client/module.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"module.d.ts","sourceRoot":"","sources":["../../../../../../src/core/authentication/credential/entities/client/module.ts"],"names":[],"mappings":"AASA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAC;AAC/C,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,gBAAgB,CAAC;AAEzD,qBAAa,wBAAyB,YAAW,kBAAkB,CAAC,MAAM,CAAC;IACjE,MAAM,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAcvD,OAAO,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,eAAe,CAAC,GAAG,OAAO,CAAC,MAAM,CAAC;IAYpF,cAAc;CAGjB"}

package/dist/core/authentication/credential/entities/client/module.mjs

@@ -0,0 +1,21 @@
+import { compare, hash } from "@authup/server-kit";
+import { createNanoID, isBCryptHash } from "@authup/kit";
+//#region src/core/authentication/credential/entities/client/module.ts
+var ClientCredentialsService = class {
+	async verify(input, entity) {
+		if (!entity.secret || !entity.is_confidential) return false;
+		if (entity.secret_hashed) return compare(input, entity.secret);
+		return input === entity.secret;
+	}
+	async protect(input, entity) {
+		if (entity.secret_hashed) return isBCryptHash(input) ? input : hash(input);
+		return input;
+	}
+	generateSecret() {
+		return createNanoID(64);
+	}
+};
+//#endregion
+export { ClientCredentialsService };
+
+//# sourceMappingURL=module.mjs.map

package/dist/core/authentication/credential/entities/client/module.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"module.mjs","names":["createNanoID","isBCryptHash","compare","hash","ClientCredentialsService","verify","input","entity","secret","is_confidential","secret_hashed","protect","generateSecret"],"sources":["../../../../../../src/core/authentication/credential/entities/client/module.ts"],"sourcesContent":["/*\n * Copyright (c) 2025.\n *  Author Peter Placzek (tada5hi)\n *  For the full copyright and license information,\n *  view the LICENSE file that was distributed with this source code.\n */\n\nimport { createNanoID, isBCryptHash } from '@authup/kit';\nimport { compare, hash } from '@authup/server-kit';\nimport type { Client } from '@authup/core-kit';\nimport type { ICredentialService } from '../../types.ts';\n\nexport class ClientCredentialsService implements ICredentialService<Client> {\n    async verify(input: string, entity: Client): Promise<boolean> {\n        if (!entity.secret || !entity.is_confidential) {\n            return false;\n        }\n\n        if (entity.secret_hashed) {\n            return compare(input, entity.secret);\n        }\n\n        // todo: secret encrypted missing (decrypt)\n\n        return input === entity.secret;\n    }\n\n    async protect(input: string, entity: Pick<Client, 'secret_hashed'>): Promise<string> {\n        if (entity.secret_hashed) {\n            return isBCryptHash(input) ?\n                input :\n                hash(input);\n        }\n\n        // todo: secret encrypted missing (encrypt)\n\n        return input;\n    }\n\n    generateSecret() {\n        return createNanoID(64);\n    }\n}\n"],"mappings":";;;AAYA,IAAaI,2BAAb,MAAaA;CACT,MAAMC,OAAOC,OAAeC,QAAkC;AAC1D,MAAI,CAACA,OAAOC,UAAU,CAACD,OAAOE,gBAC1B,QAAO;AAGX,MAAIF,OAAOG,cACP,QAAOR,QAAQI,OAAOC,OAAOC,OAAM;AAKvC,SAAOF,UAAUC,OAAOC;;CAG5B,MAAMG,QAAQL,OAAeC,QAAwD;AACjF,MAAIA,OAAOG,cACP,QAAOT,aAAaK,MAAAA,GAChBA,QACAH,KAAKG,MAAAA;AAKb,SAAOA;;CAGXM,iBAAiB;AACb,SAAOZ,aAAa,GAAA"}

package/dist/core/authentication/credential/entities/index.d.ts

@@ -0,0 +1,4 @@
+export * from './client/index.ts';
+export * from './robot/index.ts';
+export * from './user/index.ts';
+//# sourceMappingURL=index.d.ts.map

package/dist/core/authentication/credential/entities/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../src/core/authentication/credential/entities/index.ts"],"names":[],"mappings":"AAOA,cAAc,mBAAmB,CAAC;AAClC,cAAc,kBAAkB,CAAC;AACjC,cAAc,iBAAiB,CAAC"}

package/dist/core/authentication/credential/entities/index.mjs

@@ -0,0 +1,7 @@
+import { ClientCredentialsService } from "./client/module.mjs";
+import "./client/index.mjs";
+import { RobotCredentialsService } from "./robot/module.mjs";
+import "./robot/index.mjs";
+import { UserCredentialsService } from "./user/module.mjs";
+import "./user/index.mjs";
+export { ClientCredentialsService, RobotCredentialsService, UserCredentialsService };

package/dist/core/authentication/credential/entities/robot/index.d.ts

@@ -0,0 +1,2 @@
+export * from './module.ts';
+//# sourceMappingURL=index.d.ts.map

package/dist/core/authentication/credential/entities/robot/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../../src/core/authentication/credential/entities/robot/index.ts"],"names":[],"mappings":"AAOA,cAAc,aAAa,CAAC"}

package/dist/core/authentication/credential/entities/robot/index.mjs

@@ -0,0 +1,2 @@
+import { RobotCredentialsService } from "./module.mjs";
+export { RobotCredentialsService };

package/dist/core/authentication/credential/entities/robot/module.d.ts

@@ -0,0 +1,8 @@
+import type { Robot } from '@authup/core-kit';
+import type { ICredentialService } from '../../types.ts';
+export declare class RobotCredentialsService implements ICredentialService<Robot> {
+    verify(input: string, entity: Robot): Promise<boolean>;
+    protect(input: string): Promise<string>;
+    generateSecret(): string;
+}
+//# sourceMappingURL=module.d.ts.map

package/dist/core/authentication/credential/entities/robot/module.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"module.d.ts","sourceRoot":"","sources":["../../../../../../src/core/authentication/credential/entities/robot/module.ts"],"names":[],"mappings":"AASA,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,kBAAkB,CAAC;AAC9C,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,gBAAgB,CAAC;AAEzD,qBAAa,uBAAwB,YAAW,kBAAkB,CAAC,KAAK,CAAC;IAC/D,MAAM,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,GAAG,OAAO,CAAC,OAAO,CAAC;IAQtD,OAAO,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAI7C,cAAc;CAGjB"}

package/dist/core/authentication/credential/entities/robot/module.mjs

@@ -0,0 +1,19 @@
+import { compare, hash } from "@authup/server-kit";
+import { createNanoID } from "@authup/kit";
+//#region src/core/authentication/credential/entities/robot/module.ts
+var RobotCredentialsService = class {
+	async verify(input, entity) {
+		if (!entity.secret) return false;
+		return compare(input, entity.secret);
+	}
+	async protect(input) {
+		return hash(input);
+	}
+	generateSecret() {
+		return createNanoID(64);
+	}
+};
+//#endregion
+export { RobotCredentialsService };
+
+//# sourceMappingURL=module.mjs.map

package/dist/core/authentication/credential/entities/robot/module.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"module.mjs","names":["compare","hash","createNanoID","RobotCredentialsService","verify","input","entity","secret","protect","generateSecret"],"sources":["../../../../../../src/core/authentication/credential/entities/robot/module.ts"],"sourcesContent":["/*\n * Copyright (c) 2025.\n *  Author Peter Placzek (tada5hi)\n *  For the full copyright and license information,\n *  view the LICENSE file that was distributed with this source code.\n */\n\nimport { compare, hash } from '@authup/server-kit';\nimport { createNanoID } from '@authup/kit';\nimport type { Robot } from '@authup/core-kit';\nimport type { ICredentialService } from '../../types.ts';\n\nexport class RobotCredentialsService implements ICredentialService<Robot> {\n    async verify(input: string, entity: Robot): Promise<boolean> {\n        if (!entity.secret) {\n            return false;\n        }\n\n        return compare(input, entity.secret);\n    }\n\n    async protect(input: string): Promise<string> {\n        return hash(input);\n    }\n\n    generateSecret() {\n        return createNanoID(64);\n    }\n}\n"],"mappings":";;;AAYA,IAAaG,0BAAb,MAAaA;CACT,MAAMC,OAAOC,OAAeC,QAAiC;AACzD,MAAI,CAACA,OAAOC,OACR,QAAO;AAGX,SAAOP,QAAQK,OAAOC,OAAOC,OAAM;;CAGvC,MAAMC,QAAQH,OAAgC;AAC1C,SAAOJ,KAAKI,MAAAA;;CAGhBI,iBAAiB;AACb,SAAOP,aAAa,GAAA"}

package/dist/core/authentication/credential/entities/user/index.d.ts

@@ -0,0 +1,2 @@
+export * from './module.ts';
+//# sourceMappingURL=index.d.ts.map

package/dist/core/authentication/credential/entities/user/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../../src/core/authentication/credential/entities/user/index.ts"],"names":[],"mappings":"AAOA,cAAc,aAAa,CAAC"}

package/dist/core/authentication/credential/entities/user/index.mjs

@@ -0,0 +1,2 @@
+import { UserCredentialsService } from "./module.mjs";
+export { UserCredentialsService };

package/dist/core/authentication/credential/entities/user/module.d.ts

@@ -0,0 +1,7 @@
+import type { User } from '@authup/core-kit';
+import type { ICredentialService } from '../../types.ts';
+export declare class UserCredentialsService implements ICredentialService<User> {
+    verify(input: string, entity: User): Promise<boolean>;
+    protect(input: string): Promise<string>;
+}
+//# sourceMappingURL=module.d.ts.map

package/dist/core/authentication/credential/entities/user/module.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"module.d.ts","sourceRoot":"","sources":["../../../../../../src/core/authentication/credential/entities/user/module.ts"],"names":[],"mappings":"AAQA,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAC;AAC7C,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,gBAAgB,CAAC;AAEzD,qBAAa,sBAAuB,YAAW,kBAAkB,CAAC,IAAI,CAAC;IAC7D,MAAM,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,GAAG,OAAO,CAAC,OAAO,CAAC;IAQrD,OAAO,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;CAGhD"}

package/dist/core/authentication/credential/entities/user/module.mjs

@@ -0,0 +1,15 @@
+import { compare, hash } from "@authup/server-kit";
+//#region src/core/authentication/credential/entities/user/module.ts
+var UserCredentialsService = class {
+	async verify(input, entity) {
+		if (!entity.password) return false;
+		return compare(input, entity.password);
+	}
+	async protect(input) {
+		return hash(input);
+	}
+};
+//#endregion
+export { UserCredentialsService };
+
+//# sourceMappingURL=module.mjs.map

package/dist/core/authentication/credential/entities/user/module.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"module.mjs","names":["compare","hash","UserCredentialsService","verify","input","entity","password","protect"],"sources":["../../../../../../src/core/authentication/credential/entities/user/module.ts"],"sourcesContent":["/*\n * Copyright (c) 2025.\n *  Author Peter Placzek (tada5hi)\n *  For the full copyright and license information,\n *  view the LICENSE file that was distributed with this source code.\n */\n\nimport { compare, hash } from '@authup/server-kit';\nimport type { User } from '@authup/core-kit';\nimport type { ICredentialService } from '../../types.ts';\n\nexport class UserCredentialsService implements ICredentialService<User> {\n    async verify(input: string, entity: User): Promise<boolean> {\n        if (!entity.password) {\n            return false;\n        }\n\n        return compare(input, entity.password);\n    }\n\n    async protect(input: string): Promise<string> {\n        return hash(input);\n    }\n}\n"],"mappings":";;AAWA,IAAaE,yBAAb,MAAaA;CACT,MAAMC,OAAOC,OAAeC,QAAgC;AACxD,MAAI,CAACA,OAAOC,SACR,QAAO;AAGX,SAAON,QAAQI,OAAOC,OAAOC,SAAQ;;CAGzC,MAAMC,QAAQH,OAAgC;AAC1C,SAAOH,KAAKG,MAAAA"}

package/dist/core/authentication/credential/index.d.ts

@@ -0,0 +1,3 @@
+export * from './entities/index.ts';
+export * from './types.ts';
+//# sourceMappingURL=index.d.ts.map

package/dist/core/authentication/credential/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/core/authentication/credential/index.ts"],"names":[],"mappings":"AAOA,cAAc,qBAAqB,CAAC;AACpC,cAAc,YAAY,CAAC"}

package/dist/core/authentication/credential/index.mjs

@@ -0,0 +1,5 @@
+import { ClientCredentialsService } from "./entities/client/module.mjs";
+import { RobotCredentialsService } from "./entities/robot/module.mjs";
+import { UserCredentialsService } from "./entities/user/module.mjs";
+import "./entities/index.mjs";
+export { ClientCredentialsService, RobotCredentialsService, UserCredentialsService };

package/dist/core/authentication/credential/types.d.ts

@@ -0,0 +1,6 @@
+import type { ObjectLiteral } from 'validup';
+export interface ICredentialService<T extends ObjectLiteral = ObjectLiteral> {
+    verify(input: string, entity: T): Promise<boolean>;
+    protect(input: string, entity: T): Promise<string>;
+}
+//# sourceMappingURL=types.d.ts.map

package/dist/core/authentication/credential/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../../src/core/authentication/credential/types.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AAE7C,MAAM,WAAW,kBAAkB,CAAC,CAAC,SAAS,aAAa,GAAG,aAAa;IACvE,MAAM,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,GAAI,OAAO,CAAC,OAAO,CAAC,CAAC;IAEpD,OAAO,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;CACtD"}

package/dist/core/authentication/credential/types.mjs

@@ -0,0 +1 @@
+export {};

package/dist/core/authentication/entities/client/index.d.ts

@@ -0,0 +1,2 @@
+export * from './module.ts';
+//# sourceMappingURL=index.d.ts.map

package/dist/core/authentication/entities/client/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../src/core/authentication/entities/client/index.ts"],"names":[],"mappings":"AAOA,cAAc,aAAa,CAAC"}

package/dist/core/authentication/entities/client/index.mjs

@@ -0,0 +1,2 @@
+import { ClientAuthenticator } from "./module.mjs";
+export { ClientAuthenticator };

package/dist/core/authentication/entities/client/module.d.ts

@@ -0,0 +1,11 @@
+import type { Client } from '@authup/core-kit';
+import type { IIdentityResolver } from '../../../identity/index.ts';
+import { ClientCredentialsService } from '../../credential/index.ts';
+import { BaseCredentialsAuthenticator } from '../../base.ts';
+export declare class ClientAuthenticator extends BaseCredentialsAuthenticator<Client> {
+    protected identityResolver: IIdentityResolver;
+    protected credentialsService: ClientCredentialsService;
+    constructor(identityResolver: IIdentityResolver);
+    authenticate(key: string, secret: string, realmId?: string): Promise<Client>;
+}
+//# sourceMappingURL=module.d.ts.map

package/dist/core/authentication/entities/client/module.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"module.d.ts","sourceRoot":"","sources":["../../../../../src/core/authentication/entities/client/module.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAC;AAE/C,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,4BAA4B,CAAC;AACpE,OAAO,EAAE,wBAAwB,EAAE,MAAM,2BAA2B,CAAC;AACrE,OAAO,EAAE,4BAA4B,EAAE,MAAM,eAAe,CAAC;AAE7D,qBAAa,mBAAoB,SAAQ,4BAA4B,CAAC,MAAM,CAAC;IACzE,SAAS,CAAC,gBAAgB,EAAG,iBAAiB,CAAC;IAE/C,SAAS,CAAC,kBAAkB,EAAG,wBAAwB,CAAC;gBAE5C,gBAAgB,EAAE,iBAAiB;IAOzC,YAAY,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;CAqBrF"}

package/dist/core/authentication/entities/client/module.mjs

@@ -0,0 +1,27 @@
+import { ClientCredentialsService } from "../../credential/entities/client/module.mjs";
+import "../../credential/index.mjs";
+import { BaseCredentialsAuthenticator } from "../../base.mjs";
+import { ClientError, IdentityType } from "@authup/core-kit";
+//#region src/core/authentication/entities/client/module.ts
+var ClientAuthenticator = class extends BaseCredentialsAuthenticator {
+	identityResolver;
+	credentialsService;
+	constructor(identityResolver) {
+		super();
+		this.identityResolver = identityResolver;
+		this.credentialsService = new ClientCredentialsService();
+	}
+	async authenticate(key, secret, realmId) {
+		const identity = await this.identityResolver.resolve(IdentityType.CLIENT, key, realmId);
+		if (!identity || identity.type !== IdentityType.CLIENT) throw ClientError.credentialsInvalid();
+		if (!identity.data.active) throw ClientError.inactive();
+		if (identity.data.is_confidential) {
+			if (!await this.credentialsService.verify(secret, identity.data)) throw ClientError.credentialsInvalid();
+		} else throw ClientError.invalid();
+		return identity.data;
+	}
+};
+//#endregion
+export { ClientAuthenticator };
+
+//# sourceMappingURL=module.mjs.map

package/dist/core/authentication/entities/client/module.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"module.mjs","names":["ClientError","IdentityType","ClientCredentialsService","BaseCredentialsAuthenticator","ClientAuthenticator","identityResolver","credentialsService","authenticate","key","secret","realmId","identity","resolve","CLIENT","type","credentialsInvalid","data","active","inactive","is_confidential","verified","verify","invalid"],"sources":["../../../../../src/core/authentication/entities/client/module.ts"],"sourcesContent":["/*\n * Copyright (c) 2025.\n *  Author Peter Placzek (tada5hi)\n *  For the full copyright and license information,\n *  view the LICENSE file that was distributed with this source code.\n */\n\nimport type { Client } from '@authup/core-kit';\nimport { ClientError, IdentityType } from '@authup/core-kit';\nimport type { IIdentityResolver } from '../../../identity/index.ts';\nimport { ClientCredentialsService } from '../../credential/index.ts';\nimport { BaseCredentialsAuthenticator } from '../../base.ts';\n\nexport class ClientAuthenticator extends BaseCredentialsAuthenticator<Client> {\n    protected identityResolver : IIdentityResolver;\n\n    protected credentialsService : ClientCredentialsService;\n\n    constructor(identityResolver: IIdentityResolver) {\n        super();\n\n        this.identityResolver = identityResolver;\n        this.credentialsService = new ClientCredentialsService();\n    }\n\n    async authenticate(key: string, secret: string, realmId?: string): Promise<Client> {\n        const identity = await this.identityResolver.resolve(IdentityType.CLIENT, key, realmId);\n        if (!identity || identity.type !== IdentityType.CLIENT) {\n            throw ClientError.credentialsInvalid();\n        }\n\n        if (!identity.data.active) {\n            throw ClientError.inactive();\n        }\n\n        if (identity.data.is_confidential) {\n            const verified = await this.credentialsService.verify(secret, identity.data);\n            if (!verified) {\n                throw ClientError.credentialsInvalid();\n            }\n        } else {\n            throw ClientError.invalid();\n        }\n\n        return identity.data;\n    }\n}\n"],"mappings":";;;;;AAaA,IAAaI,sBAAb,cAAyCD,6BAAAA;CAC3BE;CAEAC;CAEV,YAAYD,kBAAqC;AAC7C,SAAK;AAEL,OAAKA,mBAAmBA;AACxB,OAAKC,qBAAqB,IAAIJ,0BAAAA;;CAGlC,MAAMK,aAAaC,KAAaC,QAAgBC,SAAmC;EAC/E,MAAMC,WAAW,MAAM,KAAKN,iBAAiBO,QAAQX,aAAaY,QAAQL,KAAKE,QAAAA;AAC/E,MAAI,CAACC,YAAYA,SAASG,SAASb,aAAaY,OAC5C,OAAMb,YAAYe,oBAAkB;AAGxC,MAAI,CAACJ,SAASK,KAAKC,OACf,OAAMjB,YAAYkB,UAAQ;AAG9B,MAAIP,SAASK,KAAKG;OAEV,CAACC,MADkB,KAAKd,mBAAmBe,OAAOZ,QAAQE,SAASK,KAAI,CAEvE,OAAMhB,YAAYe,oBAAkB;QAGxC,OAAMf,YAAYsB,SAAO;AAG7B,SAAOX,SAASK"}

package/dist/core/authentication/entities/index.d.ts

@@ -0,0 +1,4 @@
+export * from './client/index.ts';
+export * from './robot/index.ts';
+export * from './user/index.ts';
+//# sourceMappingURL=index.d.ts.map

package/dist/core/authentication/entities/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/core/authentication/entities/index.ts"],"names":[],"mappings":"AAOA,cAAc,mBAAmB,CAAC;AAClC,cAAc,kBAAkB,CAAC;AACjC,cAAc,iBAAiB,CAAC"}

package/dist/core/authentication/entities/index.mjs

@@ -0,0 +1,7 @@
+import { ClientAuthenticator } from "./client/module.mjs";
+import "./client/index.mjs";
+import { RobotAuthenticator } from "./robot/module.mjs";
+import "./robot/index.mjs";
+import { UserAuthenticator } from "./user/module.mjs";
+import "./user/index.mjs";
+export { ClientAuthenticator, RobotAuthenticator, UserAuthenticator };

package/dist/core/authentication/entities/robot/index.d.ts

@@ -0,0 +1,2 @@
+export * from './module.ts';
+//# sourceMappingURL=index.d.ts.map

package/dist/core/authentication/entities/robot/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../src/core/authentication/entities/robot/index.ts"],"names":[],"mappings":"AAOA,cAAc,aAAa,CAAC"}

package/dist/core/authentication/entities/robot/index.mjs

@@ -0,0 +1,2 @@
+import { RobotAuthenticator } from "./module.mjs";
+export { RobotAuthenticator };

package/dist/core/authentication/entities/robot/module.d.ts

@@ -0,0 +1,11 @@
+import type { Robot } from '@authup/core-kit';
+import type { IIdentityResolver } from '../../../identity/index.ts';
+import { RobotCredentialsService } from '../../credential/index.ts';
+import { BaseCredentialsAuthenticator } from '../../base.ts';
+export declare class RobotAuthenticator extends BaseCredentialsAuthenticator<Robot> {
+    protected identityResolver: IIdentityResolver;
+    protected credentialsService: RobotCredentialsService;
+    constructor(identityResolver: IIdentityResolver);
+    authenticate(key: string, secret: string, realmId?: string): Promise<Robot>;
+}
+//# sourceMappingURL=module.d.ts.map

package/dist/core/authentication/entities/robot/module.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"module.d.ts","sourceRoot":"","sources":["../../../../../src/core/authentication/entities/robot/module.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,kBAAkB,CAAC;AAE9C,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,4BAA4B,CAAC;AACpE,OAAO,EAAE,uBAAuB,EAAE,MAAM,2BAA2B,CAAC;AACpE,OAAO,EAAE,4BAA4B,EAAE,MAAM,eAAe,CAAC;AAE7D,qBAAa,kBAAmB,SAAQ,4BAA4B,CAAC,KAAK,CAAC;IACvE,SAAS,CAAC,gBAAgB,EAAG,iBAAiB,CAAC;IAE/C,SAAS,CAAC,kBAAkB,EAAG,uBAAuB,CAAC;gBAE3C,gBAAgB,EAAE,iBAAiB;IAOzC,YAAY,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,KAAK,CAAC;CAiBpF"}

package/dist/core/authentication/entities/robot/module.mjs

@@ -0,0 +1,25 @@
+import { RobotCredentialsService } from "../../credential/entities/robot/module.mjs";
+import "../../credential/index.mjs";
+import { BaseCredentialsAuthenticator } from "../../base.mjs";
+import { IdentityType, RobotError } from "@authup/core-kit";
+//#region src/core/authentication/entities/robot/module.ts
+var RobotAuthenticator = class extends BaseCredentialsAuthenticator {
+	identityResolver;
+	credentialsService;
+	constructor(identityResolver) {
+		super();
+		this.identityResolver = identityResolver;
+		this.credentialsService = new RobotCredentialsService();
+	}
+	async authenticate(key, secret, realmId) {
+		const identity = await this.identityResolver.resolve(IdentityType.ROBOT, key, realmId);
+		if (!identity || identity.type !== IdentityType.ROBOT) throw RobotError.credentialsInvalid();
+		if (!await this.credentialsService.verify(secret, identity.data)) throw RobotError.credentialsInvalid();
+		if (!identity.data.active) throw RobotError.inactive();
+		return identity.data;
+	}
+};
+//#endregion
+export { RobotAuthenticator };
+
+//# sourceMappingURL=module.mjs.map

package/dist/core/authentication/entities/robot/module.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"module.mjs","names":["IdentityType","RobotError","RobotCredentialsService","BaseCredentialsAuthenticator","RobotAuthenticator","identityResolver","credentialsService","authenticate","key","secret","realmId","identity","resolve","ROBOT","type","credentialsInvalid","verified","verify","data","active","inactive"],"sources":["../../../../../src/core/authentication/entities/robot/module.ts"],"sourcesContent":["/*\n * Copyright (c) 2025.\n *  Author Peter Placzek (tada5hi)\n *  For the full copyright and license information,\n *  view the LICENSE file that was distributed with this source code.\n */\n\nimport type { Robot } from '@authup/core-kit';\nimport { IdentityType, RobotError } from '@authup/core-kit';\nimport type { IIdentityResolver } from '../../../identity/index.ts';\nimport { RobotCredentialsService } from '../../credential/index.ts';\nimport { BaseCredentialsAuthenticator } from '../../base.ts';\n\nexport class RobotAuthenticator extends BaseCredentialsAuthenticator<Robot> {\n    protected identityResolver : IIdentityResolver;\n\n    protected credentialsService : RobotCredentialsService;\n\n    constructor(identityResolver: IIdentityResolver) {\n        super();\n\n        this.identityResolver = identityResolver;\n        this.credentialsService = new RobotCredentialsService();\n    }\n\n    async authenticate(key: string, secret: string, realmId?: string): Promise<Robot> {\n        const identity = await this.identityResolver.resolve(IdentityType.ROBOT, key, realmId);\n        if (!identity || identity.type !== IdentityType.ROBOT) {\n            throw RobotError.credentialsInvalid();\n        }\n\n        const verified = await this.credentialsService.verify(secret, identity.data);\n        if (!verified) {\n            throw RobotError.credentialsInvalid();\n        }\n\n        if (!identity.data.active) {\n            throw RobotError.inactive();\n        }\n\n        return identity.data;\n    }\n}\n"],"mappings":";;;;;AAaA,IAAaI,qBAAb,cAAwCD,6BAAAA;CAC1BE;CAEAC;CAEV,YAAYD,kBAAqC;AAC7C,SAAK;AAEL,OAAKA,mBAAmBA;AACxB,OAAKC,qBAAqB,IAAIJ,yBAAAA;;CAGlC,MAAMK,aAAaC,KAAaC,QAAgBC,SAAkC;EAC9E,MAAMC,WAAW,MAAM,KAAKN,iBAAiBO,QAAQZ,aAAaa,OAAOL,KAAKE,QAAAA;AAC9E,MAAI,CAACC,YAAYA,SAASG,SAASd,aAAaa,MAC5C,OAAMZ,WAAWc,oBAAkB;AAIvC,MAAI,CAACC,MADkB,KAAKV,mBAAmBW,OAAOR,QAAQE,SAASO,KAAI,CAEvE,OAAMjB,WAAWc,oBAAkB;AAGvC,MAAI,CAACJ,SAASO,KAAKC,OACf,OAAMlB,WAAWmB,UAAQ;AAG7B,SAAOT,SAASO"}

package/dist/core/authentication/entities/user/index.d.ts

@@ -0,0 +1,2 @@
+export * from './module.ts';
+//# sourceMappingURL=index.d.ts.map

package/dist/core/authentication/entities/user/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../src/core/authentication/entities/user/index.ts"],"names":[],"mappings":"AAOA,cAAc,aAAa,CAAC"}