@authup/server-core 1.0.0-beta.40 → 1.0.0-beta.41

package/dist/adapters/http/adapters/oauth2/authorization/module.d.ts

@@ -1,21 +1,18 @@
-import type { Request } from 'routup';
+import type { IRoutupEvent } from 'routup';
 import type { OAuth2AuthorizationCodeRequest } from '@authup/core-kit';
-import { RoutupContainerAdapter } from '@validup/adapter-routup';
 import type { IOAuth2AuthorizationCodeRequestVerifier, OAuth2AuthorizationResult } from '../../../../../core/index.ts';
-import { OAuth2Authorization } from '../../../../../core/index.ts';
+import { OAuth2Authorization, OAuth2AuthorizationCodeRequestValidator } from '../../../../../core/index.ts';
 import type { HTTPOAuth2AuthorizationManagerContext } from './types.ts';
 export declare class HTTPOAuth2Authorizer extends OAuth2Authorization {
     protected codeRequestVerifier: IOAuth2AuthorizationCodeRequestVerifier;
-    protected requestValidator: RoutupContainerAdapter<OAuth2AuthorizationCodeRequest>;
+    protected requestValidator: OAuth2AuthorizationCodeRequestValidator;
     constructor(ctx: HTTPOAuth2AuthorizationManagerContext);
-    authorizeWithRequest(req: Request): Promise<OAuth2AuthorizationResult>;
+    authorizeWithRequest(event: IRoutupEvent): Promise<OAuth2AuthorizationResult>;
     /**
      * Validate authorization request.
      *
      * @throws OAuth2Error
-     *
-     * @param req
      */
-    validateWithRequest(req: Request): Promise<OAuth2AuthorizationCodeRequest>;
+    validateWithRequest(event: IRoutupEvent): Promise<OAuth2AuthorizationCodeRequest>;
 }
 //# sourceMappingURL=module.d.ts.map

package/dist/adapters/http/adapters/oauth2/authorization/module.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"module.d.ts","sourceRoot":"","sources":["../../../../../../src/adapters/http/adapters/oauth2/authorization/module.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,QAAQ,CAAC;AACtC,OAAO,KAAK,EAAE,8BAA8B,EAAE,MAAM,kBAAkB,CAAC;AACvE,OAAO,EAAE,sBAAsB,EAAE,MAAM,yBAAyB,CAAC;AACjE,OAAO,KAAK,EAAE,uCAAuC,EAAE,yBAAyB,EAAE,MAAM,8BAA8B,CAAC;AACvH,OAAO,EAAE,mBAAmB,EAA2C,MAAM,8BAA8B,CAAC;AAE5G,OAAO,KAAK,EAAE,qCAAqC,EAAE,MAAM,YAAY,CAAC;AAExE,qBAAa,oBAAqB,SAAQ,mBAAmB;IACzD,SAAS,CAAC,mBAAmB,EAAG,uCAAuC,CAAC;IAExE,SAAS,CAAC,gBAAgB,EAAG,sBAAsB,CAAC,8BAA8B,CAAC,CAAC;gBAExE,GAAG,EAAE,qCAAqC;IAShD,oBAAoB,CAAC,GAAG,EAAE,OAAO,GAAI,OAAO,CAAC,yBAAyB,CAAC;IAU7E;;;;;;OAMG;IACG,mBAAmB,CACrB,GAAG,EAAE,OAAO,GACZ,OAAO,CAAC,8BAA8B,CAAC;CAG9C"}
+{"version":3,"file":"module.d.ts","sourceRoot":"","sources":["../../../../../../src/adapters/http/adapters/oauth2/authorization/module.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,QAAQ,CAAC;AAC3C,OAAO,KAAK,EAAE,8BAA8B,EAAE,MAAM,kBAAkB,CAAC;AACvE,OAAO,KAAK,EAAE,uCAAuC,EAAE,yBAAyB,EAAE,MAAM,8BAA8B,CAAC;AACvH,OAAO,EAAE,mBAAmB,EAAE,uCAAuC,EAAE,MAAM,8BAA8B,CAAC;AAE5G,OAAO,KAAK,EAAE,qCAAqC,EAAE,MAAM,YAAY,CAAC;AAExE,qBAAa,oBAAqB,SAAQ,mBAAmB;IACzD,SAAS,CAAC,mBAAmB,EAAG,uCAAuC,CAAC;IAExE,SAAS,CAAC,gBAAgB,EAAG,uCAAuC,CAAC;gBAEzD,GAAG,EAAE,qCAAqC;IAQhD,oBAAoB,CAAC,KAAK,EAAE,YAAY,GAAI,OAAO,CAAC,yBAAyB,CAAC;IAUpF;;;;OAIG;IACG,mBAAmB,CACrB,KAAK,EAAE,YAAY,GACnB,OAAO,CAAC,8BAA8B,CAAC;CAI9C"}

package/dist/adapters/http/adapters/oauth2/authorization/module.mjs

@@ -2,8 +2,8 @@ import { OAuth2AuthorizationCodeRequestValidator } from "../../../../../core/oau
 import { OAuth2Authorization } from "../../../../../core/oauth2/authorization/module.mjs";
 import "../../../../../core/index.mjs";
 import { useRequestIdentityOrFail } from "../../../request/helpers/identity.mjs";
+import { readFromLocations } from "../../../request/helpers/locations.mjs";
 import "../../../request/index.mjs";
-import { RoutupContainerAdapter } from "@validup/adapter-routup";
 //#region src/adapters/http/adapters/oauth2/authorization/module.ts
 var HTTPOAuth2Authorizer = class extends OAuth2Authorization {
 	codeRequestVerifier;
@@ -11,23 +11,21 @@ var HTTPOAuth2Authorizer = class extends OAuth2Authorization {
 	constructor(ctx) {
 		super(ctx);
 		this.codeRequestVerifier = ctx.codeRequestVerifier;
-		const validator = new OAuth2AuthorizationCodeRequestValidator();
-		this.requestValidator = new RoutupContainerAdapter(validator);
+		this.requestValidator = new OAuth2AuthorizationCodeRequestValidator();
 	}
-	async authorizeWithRequest(req) {
-		const codeRequestValidated = await this.validateWithRequest(req);
+	async authorizeWithRequest(event) {
+		const codeRequestValidated = await this.validateWithRequest(event);
 		const { data } = await this.codeRequestVerifier.verify(codeRequestValidated);
-		const identity = useRequestIdentityOrFail(req);
+		const identity = useRequestIdentityOrFail(event);
 		return this.authorize(data, identity.raw);
 	}
 	/**
 	* Validate authorization request.
 	*
 	* @throws OAuth2Error
-	*
-	* @param req
-	*/ async validateWithRequest(req) {
-		return this.requestValidator.run(req, { locations: ["body", "query"] });
+	*/ async validateWithRequest(event) {
+		const data = await readFromLocations(event, ["body", "query"]);
+		return this.requestValidator.run(data);
 	}
 };
 //#endregion

package/dist/adapters/http/adapters/oauth2/authorization/module.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"module.mjs","names":["RoutupContainerAdapter","OAuth2Authorization","OAuth2AuthorizationCodeRequestValidator","useRequestIdentityOrFail","HTTPOAuth2Authorizer","codeRequestVerifier","requestValidator","ctx","validator","authorizeWithRequest","req","codeRequestValidated","validateWithRequest","data","verify","identity","authorize","raw","run","locations"],"sources":["../../../../../../src/adapters/http/adapters/oauth2/authorization/module.ts"],"sourcesContent":["/*\n * Copyright (c) 2025.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport type { Request } from 'routup';\nimport type { OAuth2AuthorizationCodeRequest } from '@authup/core-kit';\nimport { RoutupContainerAdapter } from '@validup/adapter-routup';\nimport type { IOAuth2AuthorizationCodeRequestVerifier, OAuth2AuthorizationResult } from '../../../../../core/index.ts';\nimport { OAuth2Authorization, OAuth2AuthorizationCodeRequestValidator } from '../../../../../core/index.ts';\nimport { useRequestIdentityOrFail } from '../../../request/index.ts';\nimport type { HTTPOAuth2AuthorizationManagerContext } from './types.ts';\n\nexport class HTTPOAuth2Authorizer extends OAuth2Authorization {\n    protected codeRequestVerifier : IOAuth2AuthorizationCodeRequestVerifier;\n\n    protected requestValidator : RoutupContainerAdapter<OAuth2AuthorizationCodeRequest>;\n\n    constructor(ctx: HTTPOAuth2AuthorizationManagerContext) {\n        super(ctx);\n\n        this.codeRequestVerifier = ctx.codeRequestVerifier;\n\n        const validator = new OAuth2AuthorizationCodeRequestValidator();\n        this.requestValidator = new RoutupContainerAdapter(validator);\n    }\n\n    async authorizeWithRequest(req: Request) : Promise<OAuth2AuthorizationResult> {\n        const codeRequestValidated = await this.validateWithRequest(req);\n\n        const { data } = await this.codeRequestVerifier.verify(codeRequestValidated);\n\n        const identity = useRequestIdentityOrFail(req);\n\n        return this.authorize(data, identity.raw);\n    }\n\n    /**\n     * Validate authorization request.\n     *\n     * @throws OAuth2Error\n     *\n     * @param req\n     */\n    async validateWithRequest(\n        req: Request,\n    ) : Promise<OAuth2AuthorizationCodeRequest> {\n        return this.requestValidator.run(req, { locations: ['body', 'query'] });\n    }\n}\n"],"mappings":";;;;;;;AAeA,IAAaI,uBAAb,cAA0CH,oBAAAA;CAC5BI;CAEAC;CAEV,YAAYC,KAA4C;AACpD,QAAMA,IAAAA;AAEN,OAAKF,sBAAsBE,IAAIF;EAE/B,MAAMG,YAAY,IAAIN,yCAAAA;AACtB,OAAKI,mBAAmB,IAAIN,uBAAuBQ,UAAAA;;CAGvD,MAAMC,qBAAqBC,KAAmD;EAC1E,MAAMC,uBAAuB,MAAM,KAAKC,oBAAoBF,IAAAA;EAE5D,MAAM,EAAEG,SAAS,MAAM,KAAKR,oBAAoBS,OAAOH,qBAAAA;EAEvD,MAAMI,WAAWZ,yBAAyBO,IAAAA;AAE1C,SAAO,KAAKM,UAAUH,MAAME,SAASE,IAAG;;;;;;;;IAU5C,MAAML,oBACFF,KACwC;AACxC,SAAO,KAAKJ,iBAAiBY,IAAIR,KAAK,EAAES,WAAW,CAAC,QAAQ,QAAQ,EAAC,CAAA"}
+{"version":3,"file":"module.mjs","names":["OAuth2Authorization","OAuth2AuthorizationCodeRequestValidator","readFromLocations","useRequestIdentityOrFail","HTTPOAuth2Authorizer","codeRequestVerifier","requestValidator","ctx","authorizeWithRequest","event","codeRequestValidated","validateWithRequest","data","verify","identity","authorize","raw","run"],"sources":["../../../../../../src/adapters/http/adapters/oauth2/authorization/module.ts"],"sourcesContent":["/*\n * Copyright (c) 2025.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport type { IRoutupEvent } from 'routup';\nimport type { OAuth2AuthorizationCodeRequest } from '@authup/core-kit';\nimport type { IOAuth2AuthorizationCodeRequestVerifier, OAuth2AuthorizationResult } from '../../../../../core/index.ts';\nimport { OAuth2Authorization, OAuth2AuthorizationCodeRequestValidator } from '../../../../../core/index.ts';\nimport { readFromLocations, useRequestIdentityOrFail } from '../../../request/index.ts';\nimport type { HTTPOAuth2AuthorizationManagerContext } from './types.ts';\n\nexport class HTTPOAuth2Authorizer extends OAuth2Authorization {\n    protected codeRequestVerifier : IOAuth2AuthorizationCodeRequestVerifier;\n\n    protected requestValidator : OAuth2AuthorizationCodeRequestValidator;\n\n    constructor(ctx: HTTPOAuth2AuthorizationManagerContext) {\n        super(ctx);\n\n        this.codeRequestVerifier = ctx.codeRequestVerifier;\n\n        this.requestValidator = new OAuth2AuthorizationCodeRequestValidator();\n    }\n\n    async authorizeWithRequest(event: IRoutupEvent) : Promise<OAuth2AuthorizationResult> {\n        const codeRequestValidated = await this.validateWithRequest(event);\n\n        const { data } = await this.codeRequestVerifier.verify(codeRequestValidated);\n\n        const identity = useRequestIdentityOrFail(event);\n\n        return this.authorize(data, identity.raw);\n    }\n\n    /**\n     * Validate authorization request.\n     *\n     * @throws OAuth2Error\n     */\n    async validateWithRequest(\n        event: IRoutupEvent,\n    ) : Promise<OAuth2AuthorizationCodeRequest> {\n        const data = await readFromLocations(event, ['body', 'query']);\n        return this.requestValidator.run(data);\n    }\n}\n"],"mappings":";;;;;;;AAcA,IAAaI,uBAAb,cAA0CJ,oBAAAA;CAC5BK;CAEAC;CAEV,YAAYC,KAA4C;AACpD,QAAMA,IAAAA;AAEN,OAAKF,sBAAsBE,IAAIF;AAE/B,OAAKC,mBAAmB,IAAIL,yCAAAA;;CAGhC,MAAMO,qBAAqBC,OAA0D;EACjF,MAAMC,uBAAuB,MAAM,KAAKC,oBAAoBF,MAAAA;EAE5D,MAAM,EAAEG,SAAS,MAAM,KAAKP,oBAAoBQ,OAAOH,qBAAAA;EAEvD,MAAMI,WAAWX,yBAAyBM,MAAAA;AAE1C,SAAO,KAAKM,UAAUH,MAAME,SAASE,IAAG;;;;;;IAQ5C,MAAML,oBACFF,OACwC;EACxC,MAAMG,OAAO,MAAMV,kBAAkBO,OAAO,CAAC,QAAQ,QAAQ,CAAA;AAC7D,SAAO,KAAKH,iBAAiBW,IAAIL,KAAAA"}

package/dist/adapters/http/adapters/oauth2/grant-types/authorize.d.ts

@@ -1,5 +1,5 @@
 import type { OAuth2TokenGrantResponse } from '@authup/specs';
-import type { Request } from 'routup';
+import type { IRoutupEvent } from 'routup';
 import { OAuth2AuthorizeGrant } from '../../../../../core/index.ts';
 import type { IOAuth2AuthorizationCodeVerifier, OAuth2ClientAuthenticator } from '../../../../../core/index.ts';
 import type { HTTPOAuth2AuthorizeGrantContext, IHTTPOAuth2Grant } from './types.ts';
@@ -7,7 +7,7 @@ export declare class HTTPOAuth2AuthorizeGrant extends OAuth2AuthorizeGrant imple
     protected codeVerifier: IOAuth2AuthorizationCodeVerifier;
     protected clientAuthenticator: OAuth2ClientAuthenticator;
     constructor(ctx: HTTPOAuth2AuthorizeGrantContext);
-    runWithRequest(req: Request): Promise<OAuth2TokenGrantResponse>;
-    protected extractParam(req: Request, key: string): string | undefined;
+    runWithRequest(event: IRoutupEvent): Promise<OAuth2TokenGrantResponse>;
+    protected pickStringParam(body: Record<string, any> | undefined, query: Record<string, any> | undefined, key: string): string | undefined;
 }
 //# sourceMappingURL=authorize.d.ts.map

package/dist/adapters/http/adapters/oauth2/grant-types/authorize.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"authorize.d.ts","sourceRoot":"","sources":["../../../../../../src/adapters/http/adapters/oauth2/grant-types/authorize.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,eAAe,CAAC;AAI9D,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,QAAQ,CAAC;AAEtC,OAAO,EAAE,oBAAoB,EAAE,MAAM,8BAA8B,CAAC;AACpE,OAAO,KAAK,EACR,gCAAgC,EAChC,yBAAyB,EAC5B,MAAM,8BAA8B,CAAC;AACtC,OAAO,KAAK,EAAE,+BAA+B,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAC;AAGpF,qBAAa,wBAAyB,SAAQ,oBAAqB,YAAW,gBAAgB;IAC1F,SAAS,CAAC,YAAY,EAAG,gCAAgC,CAAC;IAE1D,SAAS,CAAC,mBAAmB,EAAG,yBAAyB,CAAC;gBAE9C,GAAG,EAAE,+BAA+B;IAO1C,cAAc,CAAC,GAAG,EAAE,OAAO,GAAG,OAAO,CAAC,wBAAwB,CAAC;IA0BrE,SAAS,CAAC,YAAY,CAAC,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,GAAI,MAAM,GAAG,SAAS;CAUzE"}
+{"version":3,"file":"authorize.d.ts","sourceRoot":"","sources":["../../../../../../src/adapters/http/adapters/oauth2/grant-types/authorize.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,eAAe,CAAC;AAI9D,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,QAAQ,CAAC;AAE3C,OAAO,EAAE,oBAAoB,EAAE,MAAM,8BAA8B,CAAC;AACpE,OAAO,KAAK,EACR,gCAAgC,EAChC,yBAAyB,EAC5B,MAAM,8BAA8B,CAAC;AACtC,OAAO,KAAK,EAAE,+BAA+B,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAC;AAGpF,qBAAa,wBAAyB,SAAQ,oBAAqB,YAAW,gBAAgB;IAC1F,SAAS,CAAC,YAAY,EAAG,gCAAgC,CAAC;IAE1D,SAAS,CAAC,mBAAmB,EAAG,yBAAyB,CAAC;gBAE9C,GAAG,EAAE,+BAA+B;IAO1C,cAAc,CAAC,KAAK,EAAE,YAAY,GAAG,OAAO,CAAC,wBAAwB,CAAC;IA6B5E,SAAS,CAAC,eAAe,CACrB,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,GAAG,SAAS,EACrC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,GAAG,SAAS,EACtC,GAAG,EAAE,MAAM,GACZ,MAAM,GAAG,SAAS;CAIxB"}

package/dist/adapters/http/adapters/oauth2/grant-types/authorize.mjs

@@ -4,7 +4,7 @@ import { extractClientCredentialsFromRequest } from "./utils/credentials.mjs";
 import "./utils/index.mjs";
 import { OAuth2Error } from "@authup/specs";
 import { getRequestHeader, getRequestIP } from "routup";
-import { useRequestBody } from "@routup/basic/body";
+import { readRequestBody } from "@routup/basic/body";
 import { useRequestQuery } from "@routup/basic/query";
 //#region src/adapters/http/adapters/oauth2/grant-types/authorize.ts
 var HTTPOAuth2AuthorizeGrant = class extends OAuth2AuthorizeGrant {
@@ -15,13 +15,15 @@ var HTTPOAuth2AuthorizeGrant = class extends OAuth2AuthorizeGrant {
 		this.codeVerifier = ctx.codeVerifier;
 		this.clientAuthenticator = ctx.clientAuthenticator;
 	}
-	async runWithRequest(req) {
-		const code = this.extractParam(req, "code");
-		const redirectUri = this.extractParam(req, "redirect_uri");
-		const codeVerifier = this.extractParam(req, "code_verifier");
+	async runWithRequest(event) {
+		const body = await readRequestBody(event);
+		const query = useRequestQuery(event);
+		const code = this.pickStringParam(body, query, "code");
+		const redirectUri = this.pickStringParam(body, query, "redirect_uri");
+		const codeVerifier = this.pickStringParam(body, query, "code_verifier");
 		if (!code) throw OAuth2Error.requestInvalid();
-		const { clientId, clientSecret } = extractClientCredentialsFromRequest(req);
-		const realmId = this.extractParam(req, "realm_id");
+		const { clientId, clientSecret } = await extractClientCredentialsFromRequest(event);
+		const realmId = this.pickStringParam(body, query, "realm_id");
 		const client = await this.clientAuthenticator.authenticate(clientId, clientSecret, realmId);
 		const entity = await this.codeVerifier.verify(code, {
 			redirectUri,
@@ -30,13 +32,12 @@ var HTTPOAuth2AuthorizeGrant = class extends OAuth2AuthorizeGrant {
 			clientIsPublic: !client.is_confidential
 		});
 		return this.runWith(entity, {
-			ipAddress: getRequestIP(req, { trustProxy: true }),
-			userAgent: getRequestHeader(req, "user-agent")
+			ipAddress: getRequestIP(event, { trustProxy: true }) ?? void 0,
+			userAgent: getRequestHeader(event, "user-agent") ?? void 0
 		});
 	}
-	extractParam(req, key) {
-		let value = useRequestBody(req, key);
-		if (!value) value = useRequestQuery(req, key);
+	pickStringParam(body, query, key) {
+		const value = body?.[key] ?? query?.[key];
 		return typeof value === "string" && value.length > 0 ? value : void 0;
 	}
 };

package/dist/adapters/http/adapters/oauth2/grant-types/authorize.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"authorize.mjs","names":["OAuth2Error","useRequestBody","useRequestQuery","getRequestHeader","getRequestIP","OAuth2AuthorizeGrant","extractClientCredentialsFromRequest","HTTPOAuth2AuthorizeGrant","codeVerifier","clientAuthenticator","ctx","runWithRequest","req","code","extractParam","redirectUri","requestInvalid","clientId","clientSecret","realmId","client","authenticate","entity","verify","id","clientIsPublic","is_confidential","runWith","ipAddress","trustProxy","userAgent","key","value","length","undefined"],"sources":["../../../../../../src/adapters/http/adapters/oauth2/grant-types/authorize.ts"],"sourcesContent":["/*\n * Copyright (c) 2025-2026.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport type { OAuth2TokenGrantResponse } from '@authup/specs';\nimport { OAuth2Error } from '@authup/specs';\nimport { useRequestBody } from '@routup/basic/body';\nimport { useRequestQuery } from '@routup/basic/query';\nimport type { Request } from 'routup';\nimport { getRequestHeader, getRequestIP } from 'routup';\nimport { OAuth2AuthorizeGrant } from '../../../../../core/index.ts';\nimport type {\n    IOAuth2AuthorizationCodeVerifier,\n    OAuth2ClientAuthenticator,\n} from '../../../../../core/index.ts';\nimport type { HTTPOAuth2AuthorizeGrantContext, IHTTPOAuth2Grant } from './types.ts';\nimport { extractClientCredentialsFromRequest } from './utils/index.ts';\n\nexport class HTTPOAuth2AuthorizeGrant extends OAuth2AuthorizeGrant implements IHTTPOAuth2Grant {\n    protected codeVerifier : IOAuth2AuthorizationCodeVerifier;\n\n    protected clientAuthenticator : OAuth2ClientAuthenticator;\n\n    constructor(ctx: HTTPOAuth2AuthorizeGrantContext) {\n        super(ctx);\n\n        this.codeVerifier = ctx.codeVerifier;\n        this.clientAuthenticator = ctx.clientAuthenticator;\n    }\n\n    async runWithRequest(req: Request): Promise<OAuth2TokenGrantResponse> {\n        const code = this.extractParam(req, 'code');\n        const redirectUri = this.extractParam(req, 'redirect_uri');\n        const codeVerifier = this.extractParam(req, 'code_verifier');\n        if (!code) {\n            throw OAuth2Error.requestInvalid();\n        }\n\n        const { clientId, clientSecret } = extractClientCredentialsFromRequest(req);\n        const realmId = this.extractParam(req, 'realm_id');\n\n        const client = await this.clientAuthenticator.authenticate(clientId, clientSecret, realmId);\n\n        const entity = await this.codeVerifier.verify(code, {\n            redirectUri,\n            codeVerifier,\n            clientId: client.id,\n            clientIsPublic: !client.is_confidential,\n        });\n\n        return this.runWith(entity, {\n            ipAddress: getRequestIP(req, { trustProxy: true }),\n            userAgent: getRequestHeader(req, 'user-agent'),\n        });\n    }\n\n    protected extractParam(req: Request, key: string) : string | undefined {\n        let value : unknown = useRequestBody(req, key);\n        if (!value) {\n            value = useRequestQuery(req, key);\n        }\n\n        return typeof value === 'string' && value.length > 0 ?\n            value :\n            undefined;\n    }\n}\n"],"mappings":";;;;;;;;;AAqBA,IAAaO,2BAAb,cAA8CF,qBAAAA;CAChCG;CAEAC;CAEV,YAAYC,KAAsC;AAC9C,QAAMA,IAAAA;AAEN,OAAKF,eAAeE,IAAIF;AACxB,OAAKC,sBAAsBC,IAAID;;CAGnC,MAAME,eAAeC,KAAiD;EAClE,MAAMC,OAAO,KAAKC,aAAaF,KAAK,OAAA;EACpC,MAAMG,cAAc,KAAKD,aAAaF,KAAK,eAAA;EAC3C,MAAMJ,eAAe,KAAKM,aAAaF,KAAK,gBAAA;AAC5C,MAAI,CAACC,KACD,OAAMb,YAAYgB,gBAAc;EAGpC,MAAM,EAAEC,UAAUC,iBAAiBZ,oCAAoCM,IAAAA;EACvE,MAAMO,UAAU,KAAKL,aAAaF,KAAK,WAAA;EAEvC,MAAMQ,SAAS,MAAM,KAAKX,oBAAoBY,aAAaJ,UAAUC,cAAcC,QAAAA;EAEnF,MAAMG,SAAS,MAAM,KAAKd,aAAae,OAAOV,MAAM;GAChDE;GACAP;GACAS,UAAUG,OAAOI;GACjBC,gBAAgB,CAACL,OAAOM;GAC5B,CAAA;AAEA,SAAO,KAAKC,QAAQL,QAAQ;GACxBM,WAAWxB,aAAaQ,KAAK,EAAEiB,YAAY,MAAK,CAAA;GAChDC,WAAW3B,iBAAiBS,KAAK,aAAA;GACrC,CAAA;;CAGME,aAAaF,KAAcmB,KAAkC;EACnE,IAAIC,QAAkB/B,eAAeW,KAAKmB,IAAAA;AAC1C,MAAI,CAACC,MACDA,SAAQ9B,gBAAgBU,KAAKmB,IAAAA;AAGjC,SAAO,OAAOC,UAAU,YAAYA,MAAMC,SAAS,IAC/CD,QACAE,KAAAA"}
+{"version":3,"file":"authorize.mjs","names":["OAuth2Error","readRequestBody","useRequestQuery","getRequestHeader","getRequestIP","OAuth2AuthorizeGrant","extractClientCredentialsFromRequest","HTTPOAuth2AuthorizeGrant","codeVerifier","clientAuthenticator","ctx","runWithRequest","event","body","query","code","pickStringParam","redirectUri","requestInvalid","clientId","clientSecret","realmId","client","authenticate","entity","verify","id","clientIsPublic","is_confidential","runWith","ipAddress","trustProxy","undefined","userAgent","key","value","length"],"sources":["../../../../../../src/adapters/http/adapters/oauth2/grant-types/authorize.ts"],"sourcesContent":["/*\n * Copyright (c) 2025-2026.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport type { OAuth2TokenGrantResponse } from '@authup/specs';\nimport { OAuth2Error } from '@authup/specs';\nimport { readRequestBody } from '@routup/basic/body';\nimport { useRequestQuery } from '@routup/basic/query';\nimport type { IRoutupEvent } from 'routup';\nimport { getRequestHeader, getRequestIP } from 'routup';\nimport { OAuth2AuthorizeGrant } from '../../../../../core/index.ts';\nimport type {\n    IOAuth2AuthorizationCodeVerifier,\n    OAuth2ClientAuthenticator,\n} from '../../../../../core/index.ts';\nimport type { HTTPOAuth2AuthorizeGrantContext, IHTTPOAuth2Grant } from './types.ts';\nimport { extractClientCredentialsFromRequest } from './utils/index.ts';\n\nexport class HTTPOAuth2AuthorizeGrant extends OAuth2AuthorizeGrant implements IHTTPOAuth2Grant {\n    protected codeVerifier : IOAuth2AuthorizationCodeVerifier;\n\n    protected clientAuthenticator : OAuth2ClientAuthenticator;\n\n    constructor(ctx: HTTPOAuth2AuthorizeGrantContext) {\n        super(ctx);\n\n        this.codeVerifier = ctx.codeVerifier;\n        this.clientAuthenticator = ctx.clientAuthenticator;\n    }\n\n    async runWithRequest(event: IRoutupEvent): Promise<OAuth2TokenGrantResponse> {\n        const body = await readRequestBody(event);\n        const query = useRequestQuery(event);\n\n        const code = this.pickStringParam(body, query, 'code');\n        const redirectUri = this.pickStringParam(body, query, 'redirect_uri');\n        const codeVerifier = this.pickStringParam(body, query, 'code_verifier');\n        if (!code) {\n            throw OAuth2Error.requestInvalid();\n        }\n\n        const { clientId, clientSecret } = await extractClientCredentialsFromRequest(event);\n        const realmId = this.pickStringParam(body, query, 'realm_id');\n\n        const client = await this.clientAuthenticator.authenticate(clientId, clientSecret, realmId);\n\n        const entity = await this.codeVerifier.verify(code, {\n            redirectUri,\n            codeVerifier,\n            clientId: client.id,\n            clientIsPublic: !client.is_confidential,\n        });\n\n        return this.runWith(entity, {\n            ipAddress: getRequestIP(event, { trustProxy: true }) ?? undefined,\n            userAgent: getRequestHeader(event, 'user-agent') ?? undefined,\n        });\n    }\n\n    protected pickStringParam(\n        body: Record<string, any> | undefined,\n        query: Record<string, any> | undefined,\n        key: string,\n    ): string | undefined {\n        const value = body?.[key] ?? query?.[key];\n        return typeof value === 'string' && value.length > 0 ? value : undefined;\n    }\n}\n"],"mappings":";;;;;;;;;AAqBA,IAAaO,2BAAb,cAA8CF,qBAAAA;CAChCG;CAEAC;CAEV,YAAYC,KAAsC;AAC9C,QAAMA,IAAAA;AAEN,OAAKF,eAAeE,IAAIF;AACxB,OAAKC,sBAAsBC,IAAID;;CAGnC,MAAME,eAAeC,OAAwD;EACzE,MAAMC,OAAO,MAAMZ,gBAAgBW,MAAAA;EACnC,MAAME,QAAQZ,gBAAgBU,MAAAA;EAE9B,MAAMG,OAAO,KAAKC,gBAAgBH,MAAMC,OAAO,OAAA;EAC/C,MAAMG,cAAc,KAAKD,gBAAgBH,MAAMC,OAAO,eAAA;EACtD,MAAMN,eAAe,KAAKQ,gBAAgBH,MAAMC,OAAO,gBAAA;AACvD,MAAI,CAACC,KACD,OAAMf,YAAYkB,gBAAc;EAGpC,MAAM,EAAEC,UAAUC,iBAAiB,MAAMd,oCAAoCM,MAAAA;EAC7E,MAAMS,UAAU,KAAKL,gBAAgBH,MAAMC,OAAO,WAAA;EAElD,MAAMQ,SAAS,MAAM,KAAKb,oBAAoBc,aAAaJ,UAAUC,cAAcC,QAAAA;EAEnF,MAAMG,SAAS,MAAM,KAAKhB,aAAaiB,OAAOV,MAAM;GAChDE;GACAT;GACAW,UAAUG,OAAOI;GACjBC,gBAAgB,CAACL,OAAOM;GAC5B,CAAA;AAEA,SAAO,KAAKC,QAAQL,QAAQ;GACxBM,WAAW1B,aAAaQ,OAAO,EAAEmB,YAAY,MAAK,CAAA,IAAMC,KAAAA;GACxDC,WAAW9B,iBAAiBS,OAAO,aAAA,IAAiBoB,KAAAA;GACxD,CAAA;;CAGMhB,gBACNH,MACAC,OACAoB,KACkB;EAClB,MAAMC,QAAQtB,OAAOqB,QAAQpB,QAAQoB;AACrC,SAAO,OAAOC,UAAU,YAAYA,MAAMC,SAAS,IAAID,QAAQH,KAAAA"}

package/dist/adapters/http/adapters/oauth2/grant-types/client-credentials.d.ts

@@ -1,12 +1,12 @@
 import type { OAuth2TokenGrantResponse } from '@authup/specs';
 import type { Client } from '@authup/core-kit';
-import type { Request } from 'routup';
+import type { IRoutupEvent } from 'routup';
 import type { ICredentialsAuthenticator } from '../../../../../core/index.ts';
 import { ClientCredentialsGrant } from '../../../../../core/index.ts';
 import type { HTTPOAuth2ClientCredentialsGrantContext, IHTTPOAuth2Grant } from './types.ts';
 export declare class HTTPClientCredentialsGrant extends ClientCredentialsGrant implements IHTTPOAuth2Grant {
     protected authenticator: ICredentialsAuthenticator<Client>;
     constructor(ctx: HTTPOAuth2ClientCredentialsGrantContext);
-    runWithRequest(req: Request): Promise<OAuth2TokenGrantResponse>;
+    runWithRequest(event: IRoutupEvent): Promise<OAuth2TokenGrantResponse>;
 }
 //# sourceMappingURL=client-credentials.d.ts.map

package/dist/adapters/http/adapters/oauth2/grant-types/client-credentials.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"client-credentials.d.ts","sourceRoot":"","sources":["../../../../../../src/adapters/http/adapters/oauth2/grant-types/client-credentials.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,eAAe,CAAC;AAE9D,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAC;AAE/C,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,QAAQ,CAAC;AAEtC,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,8BAA8B,CAAC;AAC9E,OAAO,EAAE,sBAAsB,EAAE,MAAM,8BAA8B,CAAC;AACtE,OAAO,KAAK,EAAE,uCAAuC,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAC;AAG5F,qBAAa,0BAA2B,SAAQ,sBAAuB,YAAW,gBAAgB;IAC9F,SAAS,CAAC,aAAa,EAAG,yBAAyB,CAAC,MAAM,CAAC,CAAC;gBAEhD,GAAG,EAAE,uCAAuC;IAMlD,cAAc,CAAC,GAAG,EAAE,OAAO,GAAG,OAAO,CAAC,wBAAwB,CAAC;CAexE"}
+{"version":3,"file":"client-credentials.d.ts","sourceRoot":"","sources":["../../../../../../src/adapters/http/adapters/oauth2/grant-types/client-credentials.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,eAAe,CAAC;AAE9D,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAC;AAE/C,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,QAAQ,CAAC;AAE3C,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,8BAA8B,CAAC;AAC9E,OAAO,EAAE,sBAAsB,EAAE,MAAM,8BAA8B,CAAC;AACtE,OAAO,KAAK,EAAE,uCAAuC,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAC;AAG5F,qBAAa,0BAA2B,SAAQ,sBAAuB,YAAW,gBAAgB;IAC9F,SAAS,CAAC,aAAa,EAAG,yBAAyB,CAAC,MAAM,CAAC,CAAC;gBAEhD,GAAG,EAAE,uCAAuC;IAMlD,cAAc,CAAC,KAAK,EAAE,YAAY,GAAG,OAAO,CAAC,wBAAwB,CAAC;CAgB/E"}

package/dist/adapters/http/adapters/oauth2/grant-types/client-credentials.mjs

@@ -4,7 +4,7 @@ import { extractClientCredentialsFromRequest } from "./utils/credentials.mjs";
 import "./utils/index.mjs";
 import { ClientError } from "@authup/core-kit";
 import { getRequestHeader, getRequestIP } from "routup";
-import { useRequestBody } from "@routup/basic/body";
+import { readRequestBody } from "@routup/basic/body";
 //#region src/adapters/http/adapters/oauth2/grant-types/client-credentials.ts
 var HTTPClientCredentialsGrant = class extends ClientCredentialsGrant {
 	authenticator;
@@ -12,14 +12,14 @@ var HTTPClientCredentialsGrant = class extends ClientCredentialsGrant {
 		super(ctx);
 		this.authenticator = ctx.authenticator;
 	}
-	async runWithRequest(req) {
-		const { clientId, clientSecret } = extractClientCredentialsFromRequest(req);
-		const realmId = useRequestBody(req, "realm_id");
+	async runWithRequest(event) {
+		const { clientId, clientSecret } = await extractClientCredentialsFromRequest(event);
+		const realmId = (await readRequestBody(event))?.realm_id;
 		if (!clientId) throw ClientError.credentialsInvalid();
 		const client = await this.authenticator.authenticate(clientId, clientSecret ?? "", realmId);
 		return this.runWith(client, {
-			ipAddress: getRequestIP(req, { trustProxy: true }),
-			userAgent: getRequestHeader(req, "user-agent")
+			ipAddress: getRequestIP(event, { trustProxy: true }) ?? void 0,
+			userAgent: getRequestHeader(event, "user-agent") ?? void 0
 		});
 	}
 };

package/dist/adapters/http/adapters/oauth2/grant-types/client-credentials.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"client-credentials.mjs","names":["useRequestBody","ClientError","getRequestHeader","getRequestIP","ClientCredentialsGrant","extractClientCredentialsFromRequest","HTTPClientCredentialsGrant","authenticator","ctx","runWithRequest","req","clientId","clientSecret","realmId","credentialsInvalid","client","authenticate","runWith","ipAddress","trustProxy","userAgent"],"sources":["../../../../../../src/adapters/http/adapters/oauth2/grant-types/client-credentials.ts"],"sourcesContent":["/*\n * Copyright (c) 2025.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport type { OAuth2TokenGrantResponse } from '@authup/specs';\nimport { useRequestBody } from '@routup/basic/body';\nimport type { Client } from '@authup/core-kit';\nimport { ClientError } from '@authup/core-kit';\nimport type { Request } from 'routup';\nimport { getRequestHeader, getRequestIP } from 'routup';\nimport type { ICredentialsAuthenticator } from '../../../../../core/index.ts';\nimport { ClientCredentialsGrant } from '../../../../../core/index.ts';\nimport type { HTTPOAuth2ClientCredentialsGrantContext, IHTTPOAuth2Grant } from './types.ts';\nimport { extractClientCredentialsFromRequest } from './utils/index.ts';\n\nexport class HTTPClientCredentialsGrant extends ClientCredentialsGrant implements IHTTPOAuth2Grant {\n    protected authenticator : ICredentialsAuthenticator<Client>;\n\n    constructor(ctx: HTTPOAuth2ClientCredentialsGrantContext) {\n        super(ctx);\n\n        this.authenticator = ctx.authenticator;\n    }\n\n    async runWithRequest(req: Request): Promise<OAuth2TokenGrantResponse> {\n        const { clientId, clientSecret } = extractClientCredentialsFromRequest(req);\n        const realmId = useRequestBody(req, 'realm_id');\n\n        if (!clientId) {\n            throw ClientError.credentialsInvalid();\n        }\n\n        const client = await this.authenticator.authenticate(clientId, clientSecret ?? '', realmId);\n\n        return this.runWith(client, {\n            ipAddress: getRequestIP(req, { trustProxy: true }),\n            userAgent: getRequestHeader(req, 'user-agent'),\n        });\n    }\n}\n"],"mappings":";;;;;;;;AAkBA,IAAaM,6BAAb,cAAgDF,uBAAAA;CAClCG;CAEV,YAAYC,KAA8C;AACtD,QAAMA,IAAAA;AAEN,OAAKD,gBAAgBC,IAAID;;CAG7B,MAAME,eAAeC,KAAiD;EAClE,MAAM,EAAEC,UAAUC,iBAAiBP,oCAAoCK,IAAAA;EACvE,MAAMG,UAAUb,eAAeU,KAAK,WAAA;AAEpC,MAAI,CAACC,SACD,OAAMV,YAAYa,oBAAkB;EAGxC,MAAMC,SAAS,MAAM,KAAKR,cAAcS,aAAaL,UAAUC,gBAAgB,IAAIC,QAAAA;AAEnF,SAAO,KAAKI,QAAQF,QAAQ;GACxBG,WAAWf,aAAaO,KAAK,EAAES,YAAY,MAAK,CAAA;GAChDC,WAAWlB,iBAAiBQ,KAAK,aAAA;GACrC,CAAA"}
+{"version":3,"file":"client-credentials.mjs","names":["readRequestBody","ClientError","getRequestHeader","getRequestIP","ClientCredentialsGrant","extractClientCredentialsFromRequest","HTTPClientCredentialsGrant","authenticator","ctx","runWithRequest","event","clientId","clientSecret","body","realmId","realm_id","credentialsInvalid","client","authenticate","runWith","ipAddress","trustProxy","undefined","userAgent"],"sources":["../../../../../../src/adapters/http/adapters/oauth2/grant-types/client-credentials.ts"],"sourcesContent":["/*\n * Copyright (c) 2025.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport type { OAuth2TokenGrantResponse } from '@authup/specs';\nimport { readRequestBody } from '@routup/basic/body';\nimport type { Client } from '@authup/core-kit';\nimport { ClientError } from '@authup/core-kit';\nimport type { IRoutupEvent } from 'routup';\nimport { getRequestHeader, getRequestIP } from 'routup';\nimport type { ICredentialsAuthenticator } from '../../../../../core/index.ts';\nimport { ClientCredentialsGrant } from '../../../../../core/index.ts';\nimport type { HTTPOAuth2ClientCredentialsGrantContext, IHTTPOAuth2Grant } from './types.ts';\nimport { extractClientCredentialsFromRequest } from './utils/index.ts';\n\nexport class HTTPClientCredentialsGrant extends ClientCredentialsGrant implements IHTTPOAuth2Grant {\n    protected authenticator : ICredentialsAuthenticator<Client>;\n\n    constructor(ctx: HTTPOAuth2ClientCredentialsGrantContext) {\n        super(ctx);\n\n        this.authenticator = ctx.authenticator;\n    }\n\n    async runWithRequest(event: IRoutupEvent): Promise<OAuth2TokenGrantResponse> {\n        const { clientId, clientSecret } = await extractClientCredentialsFromRequest(event);\n        const body = await readRequestBody(event);\n        const realmId = body?.realm_id;\n\n        if (!clientId) {\n            throw ClientError.credentialsInvalid();\n        }\n\n        const client = await this.authenticator.authenticate(clientId, clientSecret ?? '', realmId);\n\n        return this.runWith(client, {\n            ipAddress: getRequestIP(event, { trustProxy: true }) ?? undefined,\n            userAgent: getRequestHeader(event, 'user-agent') ?? undefined,\n        });\n    }\n}\n"],"mappings":";;;;;;;;AAkBA,IAAaM,6BAAb,cAAgDF,uBAAAA;CAClCG;CAEV,YAAYC,KAA8C;AACtD,QAAMA,IAAAA;AAEN,OAAKD,gBAAgBC,IAAID;;CAG7B,MAAME,eAAeC,OAAwD;EACzE,MAAM,EAAEC,UAAUC,iBAAiB,MAAMP,oCAAoCK,MAAAA;EAE7E,MAAMI,WAAUD,MADGb,gBAAgBU,MAAAA,GACbK;AAEtB,MAAI,CAACJ,SACD,OAAMV,YAAYe,oBAAkB;EAGxC,MAAMC,SAAS,MAAM,KAAKV,cAAcW,aAAaP,UAAUC,gBAAgB,IAAIE,QAAAA;AAEnF,SAAO,KAAKK,QAAQF,QAAQ;GACxBG,WAAWjB,aAAaO,OAAO,EAAEW,YAAY,MAAK,CAAA,IAAMC,KAAAA;GACxDC,WAAWrB,iBAAiBQ,OAAO,aAAA,IAAiBY,KAAAA;GACxD,CAAA"}

package/dist/adapters/http/adapters/oauth2/grant-types/identity.d.ts

@@ -1,8 +1,8 @@
 import type { OAuth2TokenGrantResponse } from '@authup/specs';
-import type { Request } from 'routup';
+import type { IRoutupEvent } from 'routup';
 import { IdentityGrantType } from '../../../../../core/index.ts';
 import type { IHTTPOAuth2Grant } from './types.ts';
 export declare class HTTPOAuth2IdentityGrantType extends IdentityGrantType implements IHTTPOAuth2Grant {
-    runWithRequest(req: Request): Promise<OAuth2TokenGrantResponse>;
+    runWithRequest(event: IRoutupEvent): Promise<OAuth2TokenGrantResponse>;
 }
 //# sourceMappingURL=identity.d.ts.map

package/dist/adapters/http/adapters/oauth2/grant-types/identity.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"identity.d.ts","sourceRoot":"","sources":["../../../../../../src/adapters/http/adapters/oauth2/grant-types/identity.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,eAAe,CAAC;AAC9D,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,QAAQ,CAAC;AAEtC,OAAO,EAAE,iBAAiB,EAAE,MAAM,8BAA8B,CAAC;AAEjE,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAC;AAEnD,qBAAa,2BAA4B,SAAQ,iBAAkB,YAAW,gBAAgB;IAC1F,cAAc,CAAC,GAAG,EAAE,OAAO,GAAG,OAAO,CAAC,wBAAwB,CAAC;CAWlE"}
+{"version":3,"file":"identity.d.ts","sourceRoot":"","sources":["../../../../../../src/adapters/http/adapters/oauth2/grant-types/identity.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,eAAe,CAAC;AAC9D,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,QAAQ,CAAC;AAE3C,OAAO,EAAE,iBAAiB,EAAE,MAAM,8BAA8B,CAAC;AAEjE,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAC;AAEnD,qBAAa,2BAA4B,SAAQ,iBAAkB,YAAW,gBAAgB;IAC1F,cAAc,CAAC,KAAK,EAAE,YAAY,GAAG,OAAO,CAAC,wBAAwB,CAAC;CAWzE"}

package/dist/adapters/http/adapters/oauth2/grant-types/identity.mjs

@@ -5,11 +5,11 @@ import "../../../request/index.mjs";
 import { getRequestHeader, getRequestIP } from "routup";
 //#region src/adapters/http/adapters/oauth2/grant-types/identity.ts
 var HTTPOAuth2IdentityGrantType = class extends IdentityGrantType {
-	runWithRequest(req) {
-		const identity = useRequestIdentityOrFail(req);
+	runWithRequest(event) {
+		const identity = useRequestIdentityOrFail(event);
 		return this.runWith(identity.raw, {
-			ipAddress: getRequestIP(req, { trustProxy: true }),
-			userAgent: getRequestHeader(req, "user-agent")
+			ipAddress: getRequestIP(event, { trustProxy: true }) ?? void 0,
+			userAgent: getRequestHeader(event, "user-agent") ?? void 0
 		});
 	}
 };

package/dist/adapters/http/adapters/oauth2/grant-types/identity.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"identity.mjs","names":["getRequestHeader","getRequestIP","IdentityGrantType","useRequestIdentityOrFail","HTTPOAuth2IdentityGrantType","runWithRequest","req","identity","runWith","raw","ipAddress","trustProxy","userAgent"],"sources":["../../../../../../src/adapters/http/adapters/oauth2/grant-types/identity.ts"],"sourcesContent":["/*\n * Copyright (c) 2025.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport type { OAuth2TokenGrantResponse } from '@authup/specs';\nimport type { Request } from 'routup';\nimport { getRequestHeader, getRequestIP } from 'routup';\nimport { IdentityGrantType } from '../../../../../core/index.ts';\nimport { useRequestIdentityOrFail } from '../../../request/index.ts';\nimport type { IHTTPOAuth2Grant } from './types.ts';\n\nexport class HTTPOAuth2IdentityGrantType extends IdentityGrantType implements IHTTPOAuth2Grant {\n    runWithRequest(req: Request): Promise<OAuth2TokenGrantResponse> {\n        const identity = useRequestIdentityOrFail(req);\n\n        return this.runWith(\n            identity.raw,\n            {\n                ipAddress: getRequestIP(req, { trustProxy: true }),\n                userAgent: getRequestHeader(req, 'user-agent'),\n            },\n        );\n    }\n}\n"],"mappings":";;;;;;AAcA,IAAaI,8BAAb,cAAiDF,kBAAAA;CAC7CG,eAAeC,KAAiD;EAC5D,MAAMC,WAAWJ,yBAAyBG,IAAAA;AAE1C,SAAO,KAAKE,QACRD,SAASE,KACT;GACIC,WAAWT,aAAaK,KAAK,EAAEK,YAAY,MAAK,CAAA;GAChDC,WAAWZ,iBAAiBM,KAAK,aAAA;GACrC,CAAA"}
+{"version":3,"file":"identity.mjs","names":["getRequestHeader","getRequestIP","IdentityGrantType","useRequestIdentityOrFail","HTTPOAuth2IdentityGrantType","runWithRequest","event","identity","runWith","raw","ipAddress","trustProxy","undefined","userAgent"],"sources":["../../../../../../src/adapters/http/adapters/oauth2/grant-types/identity.ts"],"sourcesContent":["/*\n * Copyright (c) 2025.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport type { OAuth2TokenGrantResponse } from '@authup/specs';\nimport type { IRoutupEvent } from 'routup';\nimport { getRequestHeader, getRequestIP } from 'routup';\nimport { IdentityGrantType } from '../../../../../core/index.ts';\nimport { useRequestIdentityOrFail } from '../../../request/index.ts';\nimport type { IHTTPOAuth2Grant } from './types.ts';\n\nexport class HTTPOAuth2IdentityGrantType extends IdentityGrantType implements IHTTPOAuth2Grant {\n    runWithRequest(event: IRoutupEvent): Promise<OAuth2TokenGrantResponse> {\n        const identity = useRequestIdentityOrFail(event);\n\n        return this.runWith(\n            identity.raw,\n            {\n                ipAddress: getRequestIP(event, { trustProxy: true }) ?? undefined,\n                userAgent: getRequestHeader(event, 'user-agent') ?? undefined,\n            },\n        );\n    }\n}\n"],"mappings":";;;;;;AAcA,IAAaI,8BAAb,cAAiDF,kBAAAA;CAC7CG,eAAeC,OAAwD;EACnE,MAAMC,WAAWJ,yBAAyBG,MAAAA;AAE1C,SAAO,KAAKE,QACRD,SAASE,KACT;GACIC,WAAWT,aAAaK,OAAO,EAAEK,YAAY,MAAK,CAAA,IAAMC,KAAAA;GACxDC,WAAWb,iBAAiBM,OAAO,aAAA,IAAiBM,KAAAA;GACxD,CAAA"}

package/dist/adapters/http/adapters/oauth2/grant-types/password.d.ts

@@ -1,6 +1,6 @@
 import type { User } from '@authup/core-kit';
 import type { OAuth2TokenGrantResponse } from '@authup/specs';
-import type { Request } from 'routup';
+import type { IRoutupEvent } from 'routup';
 import type { ICredentialsAuthenticator, OAuth2ClientAuthenticator } from '../../../../../core/index.ts';
 import { PasswordGrantType } from '../../../../../core/index.ts';
 import type { HTTPOAuth2PasswordGrantContext, IHTTPOAuth2Grant } from './types.ts';
@@ -8,6 +8,6 @@ export declare class HTTPPasswordGrant extends PasswordGrantType implements IHTT
     protected authenticator: ICredentialsAuthenticator<User>;
     protected clientAuthenticator: OAuth2ClientAuthenticator;
     constructor(ctx: HTTPOAuth2PasswordGrantContext);
-    runWithRequest(req: Request): Promise<OAuth2TokenGrantResponse>;
+    runWithRequest(event: IRoutupEvent): Promise<OAuth2TokenGrantResponse>;
 }
 //# sourceMappingURL=password.d.ts.map

package/dist/adapters/http/adapters/oauth2/grant-types/password.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"password.d.ts","sourceRoot":"","sources":["../../../../../../src/adapters/http/adapters/oauth2/grant-types/password.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAC;AAC7C,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,eAAe,CAAC;AAE9D,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,QAAQ,CAAC;AAEtC,OAAO,KAAK,EAAE,yBAAyB,EAAE,yBAAyB,EAAE,MAAM,8BAA8B,CAAC;AACzG,OAAO,EAAE,iBAAiB,EAAE,MAAM,8BAA8B,CAAC;AACjE,OAAO,KAAK,EAAE,8BAA8B,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAC;AAGnF,qBAAa,iBAAkB,SAAQ,iBAAkB,YAAW,gBAAgB;IAChF,SAAS,CAAC,aAAa,EAAG,yBAAyB,CAAC,IAAI,CAAC,CAAC;IAE1D,SAAS,CAAC,mBAAmB,EAAG,yBAAyB,CAAC;gBAE9C,GAAG,EAAE,8BAA8B;IAOzC,cAAc,CAAC,GAAG,EAAE,OAAO,GAAG,OAAO,CAAC,wBAAwB,CAAC;CA2BxE"}
+{"version":3,"file":"password.d.ts","sourceRoot":"","sources":["../../../../../../src/adapters/http/adapters/oauth2/grant-types/password.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAC;AAC7C,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,eAAe,CAAC;AAE9D,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,QAAQ,CAAC;AAE3C,OAAO,KAAK,EAAE,yBAAyB,EAAE,yBAAyB,EAAE,MAAM,8BAA8B,CAAC;AACzG,OAAO,EAAE,iBAAiB,EAAE,MAAM,8BAA8B,CAAC;AACjE,OAAO,KAAK,EAAE,8BAA8B,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAC;AAGnF,qBAAa,iBAAkB,SAAQ,iBAAkB,YAAW,gBAAgB;IAChF,SAAS,CAAC,aAAa,EAAG,yBAAyB,CAAC,IAAI,CAAC,CAAC;IAE1D,SAAS,CAAC,mBAAmB,EAAG,yBAAyB,CAAC;gBAE9C,GAAG,EAAE,8BAA8B;IAOzC,cAAc,CAAC,KAAK,EAAE,YAAY,GAAG,OAAO,CAAC,wBAAwB,CAAC;CA4B/E"}

package/dist/adapters/http/adapters/oauth2/grant-types/password.mjs

@@ -3,7 +3,7 @@ import "../../../../../core/index.mjs";
 import { extractClientCredentialsFromRequest } from "./utils/credentials.mjs";
 import "./utils/index.mjs";
 import { getRequestHeader, getRequestIP } from "routup";
-import { useRequestBody } from "@routup/basic/body";
+import { readRequestBody } from "@routup/basic/body";
 //#region src/adapters/http/adapters/oauth2/grant-types/password.ts
 var HTTPPasswordGrant = class extends PasswordGrantType {
 	authenticator;
@@ -13,17 +13,17 @@ var HTTPPasswordGrant = class extends PasswordGrantType {
 		this.authenticator = ctx.authenticator;
 		this.clientAuthenticator = ctx.clientAuthenticator;
 	}
-	async runWithRequest(req) {
-		const { username, password, realm_id: realmId } = useRequestBody(req);
-		const { clientId, clientSecret } = extractClientCredentialsFromRequest(req);
+	async runWithRequest(event) {
+		const { username, password, realm_id: realmId } = await readRequestBody(event) || {};
+		const { clientId, clientSecret } = await extractClientCredentialsFromRequest(event);
 		const client = clientId ? await this.clientAuthenticator.authenticate(clientId, clientSecret, typeof realmId === "string" ? realmId : void 0) : void 0;
 		const user = await this.authenticator.authenticate(username, password, realmId);
 		return this.runWith({
 			user,
 			client
 		}, {
-			ipAddress: getRequestIP(req, { trustProxy: true }),
-			userAgent: getRequestHeader(req, "user-agent")
+			ipAddress: getRequestIP(event, { trustProxy: true }) ?? void 0,
+			userAgent: getRequestHeader(event, "user-agent") ?? void 0
 		});
 	}
 };

package/dist/adapters/http/adapters/oauth2/grant-types/password.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"password.mjs","names":["useRequestBody","getRequestHeader","getRequestIP","PasswordGrantType","extractClientCredentialsFromRequest","HTTPPasswordGrant","authenticator","clientAuthenticator","ctx","runWithRequest","req","username","password","realm_id","realmId","clientId","clientSecret","client","authenticate","undefined","user","runWith","ipAddress","trustProxy","userAgent"],"sources":["../../../../../../src/adapters/http/adapters/oauth2/grant-types/password.ts"],"sourcesContent":["/*\n * Copyright (c) 2025-2026.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport type { User } from '@authup/core-kit';\nimport type { OAuth2TokenGrantResponse } from '@authup/specs';\nimport { useRequestBody } from '@routup/basic/body';\nimport type { Request } from 'routup';\nimport { getRequestHeader, getRequestIP } from 'routup';\nimport type { ICredentialsAuthenticator, OAuth2ClientAuthenticator } from '../../../../../core/index.ts';\nimport { PasswordGrantType } from '../../../../../core/index.ts';\nimport type { HTTPOAuth2PasswordGrantContext, IHTTPOAuth2Grant } from './types.ts';\nimport { extractClientCredentialsFromRequest } from './utils/index.ts';\n\nexport class HTTPPasswordGrant extends PasswordGrantType implements IHTTPOAuth2Grant {\n    protected authenticator : ICredentialsAuthenticator<User>;\n\n    protected clientAuthenticator : OAuth2ClientAuthenticator;\n\n    constructor(ctx: HTTPOAuth2PasswordGrantContext) {\n        super(ctx);\n\n        this.authenticator = ctx.authenticator;\n        this.clientAuthenticator = ctx.clientAuthenticator;\n    }\n\n    async runWithRequest(req: Request): Promise<OAuth2TokenGrantResponse> {\n        const {\n            username,\n            password,\n            realm_id: realmId,\n        } = useRequestBody(req);\n\n        const { clientId, clientSecret } = extractClientCredentialsFromRequest(req);\n\n        const client = clientId ?\n            await this.clientAuthenticator.authenticate(\n                clientId,\n                clientSecret,\n                typeof realmId === 'string' ? realmId : undefined,\n            ) :\n            undefined;\n\n        const user = await this.authenticator.authenticate(username, password, realmId);\n\n        return this.runWith(\n            { user, client },\n            {\n                ipAddress: getRequestIP(req, { trustProxy: true }),\n                userAgent: getRequestHeader(req, 'user-agent'),\n            },\n        );\n    }\n}\n"],"mappings":";;;;;;;AAiBA,IAAaK,oBAAb,cAAuCF,kBAAAA;CACzBG;CAEAC;CAEV,YAAYC,KAAqC;AAC7C,QAAMA,IAAAA;AAEN,OAAKF,gBAAgBE,IAAIF;AACzB,OAAKC,sBAAsBC,IAAID;;CAGnC,MAAME,eAAeC,KAAiD;EAClE,MAAM,EACFC,UACAC,UACAC,UAAUC,YACVd,eAAeU,IAAAA;EAEnB,MAAM,EAAEK,UAAUC,iBAAiBZ,oCAAoCM,IAAAA;EAEvE,MAAMO,SAASF,WACX,MAAM,KAAKR,oBAAoBW,aAC3BH,UACAC,cACA,OAAOF,YAAY,WAAWA,UAAUK,KAAAA,EAAAA,GAE5CA,KAAAA;EAEJ,MAAMC,OAAO,MAAM,KAAKd,cAAcY,aAAaP,UAAUC,UAAUE,QAAAA;AAEvE,SAAO,KAAKO,QACR;GAAED;GAAMH;GAAO,EACf;GACIK,WAAWpB,aAAaQ,KAAK,EAAEa,YAAY,MAAK,CAAA;GAChDC,WAAWvB,iBAAiBS,KAAK,aAAA;GACrC,CAAA"}
+{"version":3,"file":"password.mjs","names":["readRequestBody","getRequestHeader","getRequestIP","PasswordGrantType","extractClientCredentialsFromRequest","HTTPPasswordGrant","authenticator","clientAuthenticator","ctx","runWithRequest","event","body","username","password","realm_id","realmId","clientId","clientSecret","client","authenticate","undefined","user","runWith","ipAddress","trustProxy","userAgent"],"sources":["../../../../../../src/adapters/http/adapters/oauth2/grant-types/password.ts"],"sourcesContent":["/*\n * Copyright (c) 2025-2026.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport type { User } from '@authup/core-kit';\nimport type { OAuth2TokenGrantResponse } from '@authup/specs';\nimport { readRequestBody } from '@routup/basic/body';\nimport type { IRoutupEvent } from 'routup';\nimport { getRequestHeader, getRequestIP } from 'routup';\nimport type { ICredentialsAuthenticator, OAuth2ClientAuthenticator } from '../../../../../core/index.ts';\nimport { PasswordGrantType } from '../../../../../core/index.ts';\nimport type { HTTPOAuth2PasswordGrantContext, IHTTPOAuth2Grant } from './types.ts';\nimport { extractClientCredentialsFromRequest } from './utils/index.ts';\n\nexport class HTTPPasswordGrant extends PasswordGrantType implements IHTTPOAuth2Grant {\n    protected authenticator : ICredentialsAuthenticator<User>;\n\n    protected clientAuthenticator : OAuth2ClientAuthenticator;\n\n    constructor(ctx: HTTPOAuth2PasswordGrantContext) {\n        super(ctx);\n\n        this.authenticator = ctx.authenticator;\n        this.clientAuthenticator = ctx.clientAuthenticator;\n    }\n\n    async runWithRequest(event: IRoutupEvent): Promise<OAuth2TokenGrantResponse> {\n        const body = await readRequestBody(event);\n        const {\n            username,\n            password,\n            realm_id: realmId,\n        } = body || {};\n\n        const { clientId, clientSecret } = await extractClientCredentialsFromRequest(event);\n\n        const client = clientId ?\n            await this.clientAuthenticator.authenticate(\n                clientId,\n                clientSecret,\n                typeof realmId === 'string' ? realmId : undefined,\n            ) :\n            undefined;\n\n        const user = await this.authenticator.authenticate(username, password, realmId);\n\n        return this.runWith(\n            { user, client },\n            {\n                ipAddress: getRequestIP(event, { trustProxy: true }) ?? undefined,\n                userAgent: getRequestHeader(event, 'user-agent') ?? undefined,\n            },\n        );\n    }\n}\n"],"mappings":";;;;;;;AAiBA,IAAaK,oBAAb,cAAuCF,kBAAAA;CACzBG;CAEAC;CAEV,YAAYC,KAAqC;AAC7C,QAAMA,IAAAA;AAEN,OAAKF,gBAAgBE,IAAIF;AACzB,OAAKC,sBAAsBC,IAAID;;CAGnC,MAAME,eAAeC,OAAwD;EAEzE,MAAM,EACFE,UACAC,UACAC,UAAUC,YACVJ,MALeX,gBAAgBU,MAAAA,IAKvB,EAAC;EAEb,MAAM,EAAEM,UAAUC,iBAAiB,MAAMb,oCAAoCM,MAAAA;EAE7E,MAAMQ,SAASF,WACX,MAAM,KAAKT,oBAAoBY,aAC3BH,UACAC,cACA,OAAOF,YAAY,WAAWA,UAAUK,KAAAA,EAAAA,GAE5CA,KAAAA;EAEJ,MAAMC,OAAO,MAAM,KAAKf,cAAca,aAAaP,UAAUC,UAAUE,QAAAA;AAEvE,SAAO,KAAKO,QACR;GAAED;GAAMH;GAAO,EACf;GACIK,WAAWrB,aAAaQ,OAAO,EAAEc,YAAY,MAAK,CAAA,IAAMJ,KAAAA;GACxDK,WAAWxB,iBAAiBS,OAAO,aAAA,IAAiBU,KAAAA;GACxD,CAAA"}

package/dist/adapters/http/adapters/oauth2/grant-types/refresh_token.d.ts

@@ -1,5 +1,5 @@
 import type { OAuth2TokenGrantResponse } from '@authup/specs';
-import type { Request } from 'routup';
+import type { IRoutupEvent } from 'routup';
 import { OAuth2RefreshTokenGrant } from '../../../../../core/index.ts';
 import type { IOAuth2TokenVerifier, OAuth2ClientAuthenticator } from '../../../../../core/index.ts';
 import type { HTTPOAuth2RefreshTokenGrantContext, IHTTPOAuth2Grant } from './types.ts';
@@ -7,6 +7,6 @@ export declare class HTTPOAuth2RefreshTokenGrant extends OAuth2RefreshTokenGrant
     protected clientAuthenticator: OAuth2ClientAuthenticator;
     protected refreshTokenVerifier: IOAuth2TokenVerifier;
     constructor(ctx: HTTPOAuth2RefreshTokenGrantContext);
-    runWithRequest(req: Request): Promise<OAuth2TokenGrantResponse>;
+    runWithRequest(event: IRoutupEvent): Promise<OAuth2TokenGrantResponse>;
 }
 //# sourceMappingURL=refresh_token.d.ts.map

package/dist/adapters/http/adapters/oauth2/grant-types/refresh_token.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"refresh_token.d.ts","sourceRoot":"","sources":["../../../../../../src/adapters/http/adapters/oauth2/grant-types/refresh_token.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,eAAe,CAAC;AAG9D,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,QAAQ,CAAC;AAEtC,OAAO,EAAE,uBAAuB,EAAE,MAAM,8BAA8B,CAAC;AACvE,OAAO,KAAK,EACR,oBAAoB,EACpB,yBAAyB,EAC5B,MAAM,8BAA8B,CAAC;AACtC,OAAO,KAAK,EAAE,kCAAkC,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAC;AAGvF,qBAAa,2BAA4B,SAAQ,uBAAwB,YAAW,gBAAgB;IAChG,SAAS,CAAC,mBAAmB,EAAG,yBAAyB,CAAC;IAE1D,SAAS,CAAC,oBAAoB,EAAG,oBAAoB,CAAC;gBAE1C,GAAG,EAAE,kCAAkC;IAO7C,cAAc,CAAC,GAAG,EAAE,OAAO,GAAG,OAAO,CAAC,wBAAwB,CAAC;CAoCxE"}
+{"version":3,"file":"refresh_token.d.ts","sourceRoot":"","sources":["../../../../../../src/adapters/http/adapters/oauth2/grant-types/refresh_token.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,eAAe,CAAC;AAG9D,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,QAAQ,CAAC;AAE3C,OAAO,EAAE,uBAAuB,EAAE,MAAM,8BAA8B,CAAC;AACvE,OAAO,KAAK,EACR,oBAAoB,EACpB,yBAAyB,EAC5B,MAAM,8BAA8B,CAAC;AACtC,OAAO,KAAK,EAAE,kCAAkC,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAC;AAGvF,qBAAa,2BAA4B,SAAQ,uBAAwB,YAAW,gBAAgB;IAChG,SAAS,CAAC,mBAAmB,EAAG,yBAAyB,CAAC;IAE1D,SAAS,CAAC,oBAAoB,EAAG,oBAAoB,CAAC;gBAE1C,GAAG,EAAE,kCAAkC;IAO7C,cAAc,CAAC,KAAK,EAAE,YAAY,GAAG,OAAO,CAAC,wBAAwB,CAAC;CAqC/E"}

package/dist/adapters/http/adapters/oauth2/grant-types/refresh_token.mjs

@@ -4,7 +4,7 @@ import { extractClientCredentialsFromRequest } from "./utils/credentials.mjs";
 import "./utils/index.mjs";
 import { OAuth2Error } from "@authup/specs";
 import { getRequestHeader, getRequestIP } from "routup";
-import { useRequestBody } from "@routup/basic/body";
+import { readRequestBody } from "@routup/basic/body";
 //#region src/adapters/http/adapters/oauth2/grant-types/refresh_token.ts
 var HTTPOAuth2RefreshTokenGrant = class extends OAuth2RefreshTokenGrant {
 	clientAuthenticator;
@@ -14,19 +14,20 @@ var HTTPOAuth2RefreshTokenGrant = class extends OAuth2RefreshTokenGrant {
 		this.clientAuthenticator = ctx.clientAuthenticator;
 		this.refreshTokenVerifier = ctx.tokenVerifier;
 	}
-	async runWithRequest(req) {
-		const refreshToken = useRequestBody(req, "refresh_token");
+	async runWithRequest(event) {
+		const body = await readRequestBody(event);
+		const refreshToken = body?.refresh_token;
 		if (typeof refreshToken !== "string" || refreshToken.length === 0) throw OAuth2Error.requestInvalid();
-		const { clientId, clientSecret } = extractClientCredentialsFromRequest(req);
-		const realmId = useRequestBody(req, "realm_id");
+		const { clientId, clientSecret } = await extractClientCredentialsFromRequest(event);
+		const realmId = body?.realm_id;
 		const payload = await this.refreshTokenVerifier.verify(refreshToken);
 		if (clientId) {
 			const client = await this.clientAuthenticator.authenticate(clientId, clientSecret, typeof realmId === "string" ? realmId : void 0);
 			if (payload.client_id && payload.client_id !== client.id) throw OAuth2Error.grantInvalid();
 		} else if (payload.client_id) throw OAuth2Error.clientInvalid();
 		return this.runWith(payload, {
-			ipAddress: getRequestIP(req, { trustProxy: true }),
-			userAgent: getRequestHeader(req, "user-agent")
+			ipAddress: getRequestIP(event, { trustProxy: true }) ?? void 0,
+			userAgent: getRequestHeader(event, "user-agent") ?? void 0
 		});
 	}
 };

package/dist/adapters/http/adapters/oauth2/grant-types/refresh_token.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"refresh_token.mjs","names":["OAuth2Error","useRequestBody","getRequestHeader","getRequestIP","OAuth2RefreshTokenGrant","extractClientCredentialsFromRequest","HTTPOAuth2RefreshTokenGrant","clientAuthenticator","refreshTokenVerifier","ctx","tokenVerifier","runWithRequest","req","refreshToken","length","requestInvalid","clientId","clientSecret","realmId","payload","verify","client","authenticate","undefined","client_id","id","grantInvalid","clientInvalid","runWith","ipAddress","trustProxy","userAgent"],"sources":["../../../../../../src/adapters/http/adapters/oauth2/grant-types/refresh_token.ts"],"sourcesContent":["/*\n * Copyright (c) 2025-2026.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport type { OAuth2TokenGrantResponse } from '@authup/specs';\nimport { OAuth2Error } from '@authup/specs';\nimport { useRequestBody } from '@routup/basic/body';\nimport type { Request } from 'routup';\nimport { getRequestHeader, getRequestIP } from 'routup';\nimport { OAuth2RefreshTokenGrant } from '../../../../../core/index.ts';\nimport type {\n    IOAuth2TokenVerifier,\n    OAuth2ClientAuthenticator,\n} from '../../../../../core/index.ts';\nimport type { HTTPOAuth2RefreshTokenGrantContext, IHTTPOAuth2Grant } from './types.ts';\nimport { extractClientCredentialsFromRequest } from './utils/index.ts';\n\nexport class HTTPOAuth2RefreshTokenGrant extends OAuth2RefreshTokenGrant implements IHTTPOAuth2Grant {\n    protected clientAuthenticator : OAuth2ClientAuthenticator;\n\n    protected refreshTokenVerifier : IOAuth2TokenVerifier;\n\n    constructor(ctx: HTTPOAuth2RefreshTokenGrantContext) {\n        super(ctx);\n\n        this.clientAuthenticator = ctx.clientAuthenticator;\n        this.refreshTokenVerifier = ctx.tokenVerifier;\n    }\n\n    async runWithRequest(req: Request): Promise<OAuth2TokenGrantResponse> {\n        const refreshToken = useRequestBody(req, 'refresh_token');\n        if (typeof refreshToken !== 'string' || refreshToken.length === 0) {\n            throw OAuth2Error.requestInvalid();\n        }\n\n        const { clientId, clientSecret } = extractClientCredentialsFromRequest(req);\n        const realmId = useRequestBody(req, 'realm_id');\n\n        // RFC 6749 §6: verify the refresh token first to learn its bound\n        // client (if any), then enforce binding. Authenticate the requesting\n        // client when credentials are present, or when the token requires\n        // a client binding.\n        const payload = await this.refreshTokenVerifier.verify(refreshToken);\n\n        if (clientId) {\n            const client = await this.clientAuthenticator.authenticate(\n                clientId,\n                clientSecret,\n                typeof realmId === 'string' ? realmId : undefined,\n            );\n\n            if (payload.client_id && payload.client_id !== client.id) {\n                throw OAuth2Error.grantInvalid();\n            }\n        } else if (payload.client_id) {\n            // Token was issued to a specific client — that client MUST\n            // re-authenticate (RFC 6749 §6 binding requirement).\n            throw OAuth2Error.clientInvalid();\n        }\n\n        return this.runWith(payload, {\n            ipAddress: getRequestIP(req, { trustProxy: true }),\n            userAgent: getRequestHeader(req, 'user-agent'),\n        });\n    }\n}\n"],"mappings":";;;;;;;;AAoBA,IAAaM,8BAAb,cAAiDF,wBAAAA;CACnCG;CAEAC;CAEV,YAAYC,KAAyC;AACjD,QAAMA,IAAAA;AAEN,OAAKF,sBAAsBE,IAAIF;AAC/B,OAAKC,uBAAuBC,IAAIC;;CAGpC,MAAMC,eAAeC,KAAiD;EAClE,MAAMC,eAAeZ,eAAeW,KAAK,gBAAA;AACzC,MAAI,OAAOC,iBAAiB,YAAYA,aAAaC,WAAW,EAC5D,OAAMd,YAAYe,gBAAc;EAGpC,MAAM,EAAEC,UAAUC,iBAAiBZ,oCAAoCO,IAAAA;EACvE,MAAMM,UAAUjB,eAAeW,KAAK,WAAA;EAMpC,MAAMO,UAAU,MAAM,KAAKX,qBAAqBY,OAAOP,aAAAA;AAEvD,MAAIG,UAAU;GACV,MAAMK,SAAS,MAAM,KAAKd,oBAAoBe,aAC1CN,UACAC,cACA,OAAOC,YAAY,WAAWA,UAAUK,KAAAA,EAAAA;AAG5C,OAAIJ,QAAQK,aAAaL,QAAQK,cAAcH,OAAOI,GAClD,OAAMzB,YAAY0B,cAAY;aAE3BP,QAAQK,UAGf,OAAMxB,YAAY2B,eAAa;AAGnC,SAAO,KAAKC,QAAQT,SAAS;GACzBU,WAAW1B,aAAaS,KAAK,EAAEkB,YAAY,MAAK,CAAA;GAChDC,WAAW7B,iBAAiBU,KAAK,aAAA;GACrC,CAAA"}
+{"version":3,"file":"refresh_token.mjs","names":["OAuth2Error","readRequestBody","getRequestHeader","getRequestIP","OAuth2RefreshTokenGrant","extractClientCredentialsFromRequest","HTTPOAuth2RefreshTokenGrant","clientAuthenticator","refreshTokenVerifier","ctx","tokenVerifier","runWithRequest","event","body","refreshToken","refresh_token","length","requestInvalid","clientId","clientSecret","realmId","realm_id","payload","verify","client","authenticate","undefined","client_id","id","grantInvalid","clientInvalid","runWith","ipAddress","trustProxy","userAgent"],"sources":["../../../../../../src/adapters/http/adapters/oauth2/grant-types/refresh_token.ts"],"sourcesContent":["/*\n * Copyright (c) 2025-2026.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport type { OAuth2TokenGrantResponse } from '@authup/specs';\nimport { OAuth2Error } from '@authup/specs';\nimport { readRequestBody } from '@routup/basic/body';\nimport type { IRoutupEvent } from 'routup';\nimport { getRequestHeader, getRequestIP } from 'routup';\nimport { OAuth2RefreshTokenGrant } from '../../../../../core/index.ts';\nimport type {\n    IOAuth2TokenVerifier,\n    OAuth2ClientAuthenticator,\n} from '../../../../../core/index.ts';\nimport type { HTTPOAuth2RefreshTokenGrantContext, IHTTPOAuth2Grant } from './types.ts';\nimport { extractClientCredentialsFromRequest } from './utils/index.ts';\n\nexport class HTTPOAuth2RefreshTokenGrant extends OAuth2RefreshTokenGrant implements IHTTPOAuth2Grant {\n    protected clientAuthenticator : OAuth2ClientAuthenticator;\n\n    protected refreshTokenVerifier : IOAuth2TokenVerifier;\n\n    constructor(ctx: HTTPOAuth2RefreshTokenGrantContext) {\n        super(ctx);\n\n        this.clientAuthenticator = ctx.clientAuthenticator;\n        this.refreshTokenVerifier = ctx.tokenVerifier;\n    }\n\n    async runWithRequest(event: IRoutupEvent): Promise<OAuth2TokenGrantResponse> {\n        const body = await readRequestBody(event);\n        const refreshToken = body?.refresh_token;\n        if (typeof refreshToken !== 'string' || refreshToken.length === 0) {\n            throw OAuth2Error.requestInvalid();\n        }\n\n        const { clientId, clientSecret } = await extractClientCredentialsFromRequest(event);\n        const realmId = body?.realm_id;\n\n        // RFC 6749 §6: verify the refresh token first to learn its bound\n        // client (if any), then enforce binding. Authenticate the requesting\n        // client when credentials are present, or when the token requires\n        // a client binding.\n        const payload = await this.refreshTokenVerifier.verify(refreshToken);\n\n        if (clientId) {\n            const client = await this.clientAuthenticator.authenticate(\n                clientId,\n                clientSecret,\n                typeof realmId === 'string' ? realmId : undefined,\n            );\n\n            if (payload.client_id && payload.client_id !== client.id) {\n                throw OAuth2Error.grantInvalid();\n            }\n        } else if (payload.client_id) {\n            // Token was issued to a specific client — that client MUST\n            // re-authenticate (RFC 6749 §6 binding requirement).\n            throw OAuth2Error.clientInvalid();\n        }\n\n        return this.runWith(payload, {\n            ipAddress: getRequestIP(event, { trustProxy: true }) ?? undefined,\n            userAgent: getRequestHeader(event, 'user-agent') ?? undefined,\n        });\n    }\n}\n"],"mappings":";;;;;;;;AAoBA,IAAaM,8BAAb,cAAiDF,wBAAAA;CACnCG;CAEAC;CAEV,YAAYC,KAAyC;AACjD,QAAMA,IAAAA;AAEN,OAAKF,sBAAsBE,IAAIF;AAC/B,OAAKC,uBAAuBC,IAAIC;;CAGpC,MAAMC,eAAeC,OAAwD;EACzE,MAAMC,OAAO,MAAMZ,gBAAgBW,MAAAA;EACnC,MAAME,eAAeD,MAAME;AAC3B,MAAI,OAAOD,iBAAiB,YAAYA,aAAaE,WAAW,EAC5D,OAAMhB,YAAYiB,gBAAc;EAGpC,MAAM,EAAEC,UAAUC,iBAAiB,MAAMd,oCAAoCO,MAAAA;EAC7E,MAAMQ,UAAUP,MAAMQ;EAMtB,MAAMC,UAAU,MAAM,KAAKd,qBAAqBe,OAAOT,aAAAA;AAEvD,MAAII,UAAU;GACV,MAAMM,SAAS,MAAM,KAAKjB,oBAAoBkB,aAC1CP,UACAC,cACA,OAAOC,YAAY,WAAWA,UAAUM,KAAAA,EAAAA;AAG5C,OAAIJ,QAAQK,aAAaL,QAAQK,cAAcH,OAAOI,GAClD,OAAM5B,YAAY6B,cAAY;aAE3BP,QAAQK,UAGf,OAAM3B,YAAY8B,eAAa;AAGnC,SAAO,KAAKC,QAAQT,SAAS;GACzBU,WAAW7B,aAAaS,OAAO,EAAEqB,YAAY,MAAK,CAAA,IAAMP,KAAAA;GACxDQ,WAAWhC,iBAAiBU,OAAO,aAAA,IAAiBc,KAAAA;GACxD,CAAA"}

package/dist/adapters/http/adapters/oauth2/grant-types/robot-credentials.d.ts

@@ -1,5 +1,5 @@
 import type { OAuth2TokenGrantResponse } from '@authup/specs';
-import type { Request } from 'routup';
+import type { IRoutupEvent } from 'routup';
 import type { Robot } from '@authup/core-kit';
 import type { ICredentialsAuthenticator } from '../../../../../core/index.ts';
 import { RobotCredentialsGrant } from '../../../../../core/index.ts';
@@ -7,6 +7,6 @@ import type { HTTPOAuth2RobotCredentialsGrantContext, IHTTPOAuth2Grant } from '.
 export declare class HTTPRobotCredentialsGrant extends RobotCredentialsGrant implements IHTTPOAuth2Grant {
     protected authenticator: ICredentialsAuthenticator<Robot>;
     constructor(ctx: HTTPOAuth2RobotCredentialsGrantContext);
-    runWithRequest(req: Request): Promise<OAuth2TokenGrantResponse>;
+    runWithRequest(event: IRoutupEvent): Promise<OAuth2TokenGrantResponse>;
 }
 //# sourceMappingURL=robot-credentials.d.ts.map

package/dist/adapters/http/adapters/oauth2/grant-types/robot-credentials.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"robot-credentials.d.ts","sourceRoot":"","sources":["../../../../../../src/adapters/http/adapters/oauth2/grant-types/robot-credentials.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,eAAe,CAAC;AAE9D,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,QAAQ,CAAC;AAEtC,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,kBAAkB,CAAC;AAC9C,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,8BAA8B,CAAC;AAC9E,OAAO,EAAE,qBAAqB,EAAE,MAAM,8BAA8B,CAAC;AACrE,OAAO,KAAK,EAAE,sCAAsC,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAC;AAE3F,qBAAa,yBAA0B,SAAQ,qBAAsB,YAAW,gBAAgB;IAC5F,SAAS,CAAC,aAAa,EAAG,yBAAyB,CAAC,KAAK,CAAC,CAAC;gBAE/C,GAAG,EAAE,sCAAsC;IAMjD,cAAc,CAAC,GAAG,EAAE,OAAO,GAAG,OAAO,CAAC,wBAAwB,CAAC;CAgBxE"}
+{"version":3,"file":"robot-credentials.d.ts","sourceRoot":"","sources":["../../../../../../src/adapters/http/adapters/oauth2/grant-types/robot-credentials.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,eAAe,CAAC;AAE9D,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,QAAQ,CAAC;AAE3C,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,kBAAkB,CAAC;AAC9C,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,8BAA8B,CAAC;AAC9E,OAAO,EAAE,qBAAqB,EAAE,MAAM,8BAA8B,CAAC;AACrE,OAAO,KAAK,EAAE,sCAAsC,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAC;AAE3F,qBAAa,yBAA0B,SAAQ,qBAAsB,YAAW,gBAAgB;IAC5F,SAAS,CAAC,aAAa,EAAG,yBAAyB,CAAC,KAAK,CAAC,CAAC;gBAE/C,GAAG,EAAE,sCAAsC;IAMjD,cAAc,CAAC,KAAK,EAAE,YAAY,GAAG,OAAO,CAAC,wBAAwB,CAAC;CAiB/E"}

package/dist/adapters/http/adapters/oauth2/grant-types/robot-credentials.mjs

@@ -1,7 +1,7 @@
 import { RobotCredentialsGrant } from "../../../../../core/oauth2/grant-types/robot-credentials.mjs";
 import "../../../../../core/index.mjs";
 import { getRequestHeader, getRequestIP } from "routup";
-import { useRequestBody } from "@routup/basic/body";
+import { readRequestBody } from "@routup/basic/body";
 //#region src/adapters/http/adapters/oauth2/grant-types/robot-credentials.ts
 var HTTPRobotCredentialsGrant = class extends RobotCredentialsGrant {
 	authenticator;
@@ -9,12 +9,12 @@ var HTTPRobotCredentialsGrant = class extends RobotCredentialsGrant {
 		super(ctx);
 		this.authenticator = ctx.authenticator;
 	}
-	async runWithRequest(req) {
-		const { id, secret, realm_id: realmId } = useRequestBody(req);
+	async runWithRequest(event) {
+		const { id, secret, realm_id: realmId } = await readRequestBody(event) || {};
 		const entity = await this.authenticator.authenticate(id, secret, realmId);
 		return this.runWith(entity, {
-			ipAddress: getRequestIP(req, { trustProxy: true }),
-			userAgent: getRequestHeader(req, "user-agent")
+			ipAddress: getRequestIP(event, { trustProxy: true }) ?? void 0,
+			userAgent: getRequestHeader(event, "user-agent") ?? void 0
 		});
 	}
 };

package/dist/adapters/http/adapters/oauth2/grant-types/robot-credentials.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"robot-credentials.mjs","names":["useRequestBody","getRequestHeader","getRequestIP","RobotCredentialsGrant","HTTPRobotCredentialsGrant","authenticator","ctx","runWithRequest","req","id","secret","realm_id","realmId","entity","authenticate","runWith","ipAddress","trustProxy","userAgent"],"sources":["../../../../../../src/adapters/http/adapters/oauth2/grant-types/robot-credentials.ts"],"sourcesContent":["/*\n * Copyright (c) 2025.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport type { OAuth2TokenGrantResponse } from '@authup/specs';\nimport { useRequestBody } from '@routup/basic/body';\nimport type { Request } from 'routup';\nimport { getRequestHeader, getRequestIP } from 'routup';\nimport type { Robot } from '@authup/core-kit';\nimport type { ICredentialsAuthenticator } from '../../../../../core/index.ts';\nimport { RobotCredentialsGrant } from '../../../../../core/index.ts';\nimport type { HTTPOAuth2RobotCredentialsGrantContext, IHTTPOAuth2Grant } from './types.ts';\n\nexport class HTTPRobotCredentialsGrant extends RobotCredentialsGrant implements IHTTPOAuth2Grant {\n    protected authenticator : ICredentialsAuthenticator<Robot>;\n\n    constructor(ctx: HTTPOAuth2RobotCredentialsGrantContext) {\n        super(ctx);\n\n        this.authenticator = ctx.authenticator;\n    }\n\n    async runWithRequest(req: Request): Promise<OAuth2TokenGrantResponse> {\n        const {\n            id,\n            secret,\n            realm_id: realmId,\n        } = useRequestBody(req);\n        const entity = await this.authenticator.authenticate(id, secret, realmId);\n\n        return this.runWith(\n            entity,\n            {\n                ipAddress: getRequestIP(req, { trustProxy: true }),\n                userAgent: getRequestHeader(req, 'user-agent'),\n            },\n        );\n    }\n}\n"],"mappings":";;;;;AAgBA,IAAaI,4BAAb,cAA+CD,sBAAAA;CACjCE;CAEV,YAAYC,KAA6C;AACrD,QAAMA,IAAAA;AAEN,OAAKD,gBAAgBC,IAAID;;CAG7B,MAAME,eAAeC,KAAiD;EAClE,MAAM,EACFC,IACAC,QACAC,UAAUC,YACVZ,eAAeQ,IAAAA;EACnB,MAAMK,SAAS,MAAM,KAAKR,cAAcS,aAAaL,IAAIC,QAAQE,QAAAA;AAEjE,SAAO,KAAKG,QACRF,QACA;GACIG,WAAWd,aAAaM,KAAK,EAAES,YAAY,MAAK,CAAA;GAChDC,WAAWjB,iBAAiBO,KAAK,aAAA;GACrC,CAAA"}
+{"version":3,"file":"robot-credentials.mjs","names":["readRequestBody","getRequestHeader","getRequestIP","RobotCredentialsGrant","HTTPRobotCredentialsGrant","authenticator","ctx","runWithRequest","event","body","id","secret","realm_id","realmId","entity","authenticate","runWith","ipAddress","trustProxy","undefined","userAgent"],"sources":["../../../../../../src/adapters/http/adapters/oauth2/grant-types/robot-credentials.ts"],"sourcesContent":["/*\n * Copyright (c) 2025.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport type { OAuth2TokenGrantResponse } from '@authup/specs';\nimport { readRequestBody } from '@routup/basic/body';\nimport type { IRoutupEvent } from 'routup';\nimport { getRequestHeader, getRequestIP } from 'routup';\nimport type { Robot } from '@authup/core-kit';\nimport type { ICredentialsAuthenticator } from '../../../../../core/index.ts';\nimport { RobotCredentialsGrant } from '../../../../../core/index.ts';\nimport type { HTTPOAuth2RobotCredentialsGrantContext, IHTTPOAuth2Grant } from './types.ts';\n\nexport class HTTPRobotCredentialsGrant extends RobotCredentialsGrant implements IHTTPOAuth2Grant {\n    protected authenticator : ICredentialsAuthenticator<Robot>;\n\n    constructor(ctx: HTTPOAuth2RobotCredentialsGrantContext) {\n        super(ctx);\n\n        this.authenticator = ctx.authenticator;\n    }\n\n    async runWithRequest(event: IRoutupEvent): Promise<OAuth2TokenGrantResponse> {\n        const body = await readRequestBody(event);\n        const {\n            id,\n            secret,\n            realm_id: realmId,\n        } = body || {};\n        const entity = await this.authenticator.authenticate(id, secret, realmId);\n\n        return this.runWith(\n            entity,\n            {\n                ipAddress: getRequestIP(event, { trustProxy: true }) ?? undefined,\n                userAgent: getRequestHeader(event, 'user-agent') ?? undefined,\n            },\n        );\n    }\n}\n"],"mappings":";;;;;AAgBA,IAAaI,4BAAb,cAA+CD,sBAAAA;CACjCE;CAEV,YAAYC,KAA6C;AACrD,QAAMA,IAAAA;AAEN,OAAKD,gBAAgBC,IAAID;;CAG7B,MAAME,eAAeC,OAAwD;EAEzE,MAAM,EACFE,IACAC,QACAC,UAAUC,YACVJ,MALeT,gBAAgBQ,MAAAA,IAKvB,EAAC;EACb,MAAMM,SAAS,MAAM,KAAKT,cAAcU,aAAaL,IAAIC,QAAQE,QAAAA;AAEjE,SAAO,KAAKG,QACRF,QACA;GACIG,WAAWf,aAAaM,OAAO,EAAEU,YAAY,MAAK,CAAA,IAAMC,KAAAA;GACxDC,WAAWnB,iBAAiBO,OAAO,aAAA,IAAiBW,KAAAA;GACxD,CAAA"}

package/dist/adapters/http/adapters/oauth2/grant-types/types.d.ts

@@ -1,13 +1,13 @@
 import type { Client, Robot, User } from '@authup/core-kit';
 import type { OAuth2TokenGrantResponse } from '@authup/specs';
-import type { Request } from 'routup';
+import type { IRoutupEvent } from 'routup';
 import type { BaseGrantContext, ICredentialsAuthenticator, IOAuth2AuthorizationCodeVerifier, OAuth2AuthorizeGrantContext, OAuth2ClientAuthenticator, OAuth2PasswordGrantContext, OAuth2RefreshTokenGrantContext } from '../../../../../core/index.ts';
 export type HTTPOAuth2AuthorizeGrantContext = OAuth2AuthorizeGrantContext & {
     codeVerifier: IOAuth2AuthorizationCodeVerifier;
     clientAuthenticator: OAuth2ClientAuthenticator;
 };
 export interface IHTTPOAuth2Grant {
-    runWithRequest(req: Request): Promise<OAuth2TokenGrantResponse>;
+    runWithRequest(event: IRoutupEvent): Promise<OAuth2TokenGrantResponse>;
 }
 export type HTTPOAuth2PasswordGrantContext = OAuth2PasswordGrantContext & {
     authenticator: ICredentialsAuthenticator<User>;

package/dist/adapters/http/adapters/oauth2/grant-types/types.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../../../../src/adapters/http/adapters/oauth2/grant-types/types.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAC;AAC5D,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,eAAe,CAAC;AAC9D,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,QAAQ,CAAC;AACtC,OAAO,KAAK,EACR,gBAAgB,EAChB,yBAAyB,EACzB,gCAAgC,EAChC,2BAA2B,EAC3B,yBAAyB,EACzB,0BAA0B,EAC1B,8BAA8B,EACjC,MAAM,8BAA8B,CAAC;AAEtC,MAAM,MAAM,+BAA+B,GAAG,2BAA2B,GAAG;IACxE,YAAY,EAAE,gCAAgC,CAAC;IAC/C,mBAAmB,EAAE,yBAAyB,CAAC;CAClD,CAAC;AAEF,MAAM,WAAW,gBAAgB;IAC7B,cAAc,CAAC,GAAG,EAAE,OAAO,GAAI,OAAO,CAAC,wBAAwB,CAAC,CAAA;CACnE;AAED,MAAM,MAAM,8BAA8B,GAAG,0BAA0B,GAAG;IACtE,aAAa,EAAG,yBAAyB,CAAC,IAAI,CAAC,CAAC;IAChD,mBAAmB,EAAE,yBAAyB,CAAC;CAClD,CAAC;AAEF,MAAM,MAAM,kCAAkC,GAAG,8BAA8B,GAAG;IAC9E,mBAAmB,EAAE,yBAAyB,CAAC;CAClD,CAAC;AAEF,MAAM,MAAM,uCAAuC,GAAG,gBAAgB,GAAG;IACrE,aAAa,EAAG,yBAAyB,CAAC,MAAM,CAAC,CAAA;CACpD,CAAC;AAEF,MAAM,MAAM,sCAAsC,GAAG,gBAAgB,GAAG;IACpE,aAAa,EAAG,yBAAyB,CAAC,KAAK,CAAC,CAAA;CACnD,CAAC"}
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../../../../src/adapters/http/adapters/oauth2/grant-types/types.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAC;AAC5D,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,eAAe,CAAC;AAC9D,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,QAAQ,CAAC;AAC3C,OAAO,KAAK,EACR,gBAAgB,EAChB,yBAAyB,EACzB,gCAAgC,EAChC,2BAA2B,EAC3B,yBAAyB,EACzB,0BAA0B,EAC1B,8BAA8B,EACjC,MAAM,8BAA8B,CAAC;AAEtC,MAAM,MAAM,+BAA+B,GAAG,2BAA2B,GAAG;IACxE,YAAY,EAAE,gCAAgC,CAAC;IAC/C,mBAAmB,EAAE,yBAAyB,CAAC;CAClD,CAAC;AAEF,MAAM,WAAW,gBAAgB;IAC7B,cAAc,CAAC,KAAK,EAAE,YAAY,GAAI,OAAO,CAAC,wBAAwB,CAAC,CAAA;CAC1E;AAED,MAAM,MAAM,8BAA8B,GAAG,0BAA0B,GAAG;IACtE,aAAa,EAAG,yBAAyB,CAAC,IAAI,CAAC,CAAC;IAChD,mBAAmB,EAAE,yBAAyB,CAAC;CAClD,CAAC;AAEF,MAAM,MAAM,kCAAkC,GAAG,8BAA8B,GAAG;IAC9E,mBAAmB,EAAE,yBAAyB,CAAC;CAClD,CAAC;AAEF,MAAM,MAAM,uCAAuC,GAAG,gBAAgB,GAAG;IACrE,aAAa,EAAG,yBAAyB,CAAC,MAAM,CAAC,CAAA;CACpD,CAAC;AAEF,MAAM,MAAM,sCAAsC,GAAG,gBAAgB,GAAG;IACpE,aAAa,EAAG,yBAAyB,CAAC,KAAK,CAAC,CAAA;CACnD,CAAC"}