@authup/server-core 1.0.0-beta.40 → 1.0.0-beta.41

package/dist/adapters/http/controllers/workflows/activate/module.d.ts

@@ -1,4 +1,5 @@
-import type { Request, Response } from 'routup';
+import type { IRoutupEvent } from 'routup';
+import type { ActivatePayload } from '@authup/core-http-kit';
 import type { IRegistrationService } from '../../../../../core/index.ts';
 export type ActivateControllerContext = {
     service: IRegistrationService;
@@ -6,6 +7,6 @@ export type ActivateControllerContext = {
 export declare class ActivateController {
     protected service: IRegistrationService;
     constructor(ctx: ActivateControllerContext);
-    execute(data: any, req: Request, res: Response): Promise<any>;
+    execute(data: ActivatePayload, event: IRoutupEvent): Promise<null>;
 }
 //# sourceMappingURL=module.d.ts.map

package/dist/adapters/http/controllers/workflows/activate/module.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"module.d.ts","sourceRoot":"","sources":["../../../../../../src/adapters/http/controllers/workflows/activate/module.ts"],"names":[],"mappings":"AAcA,OAAO,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,QAAQ,CAAC;AAEhD,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,8BAA8B,CAAC;AAGzE,MAAM,MAAM,yBAAyB,GAAG;IACpC,OAAO,EAAE,oBAAoB,CAAC;CACjC,CAAC;AAEF,qBACa,kBAAkB;IAC3B,SAAS,CAAC,OAAO,EAAE,oBAAoB,CAAC;gBAE5B,GAAG,EAAE,yBAAyB;IAKpC,OAAO,CACA,IAAI,EAAE,GAAG,EACN,GAAG,EAAE,OAAO,EACX,GAAG,EAAE,QAAQ,GAC3B,OAAO,CAAC,GAAG,CAAC;CAQlB"}
+{"version":3,"file":"module.d.ts","sourceRoot":"","sources":["../../../../../../src/adapters/http/controllers/workflows/activate/module.ts"],"names":[],"mappings":"AAaA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,QAAQ,CAAC;AAC3C,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AAC7D,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,8BAA8B,CAAC;AAGzE,MAAM,MAAM,yBAAyB,GAAG;IACpC,OAAO,EAAE,oBAAoB,CAAC;CACjC,CAAC;AAEF,qBACa,kBAAkB;IAC3B,SAAS,CAAC,OAAO,EAAE,oBAAoB,CAAC;gBAE5B,GAAG,EAAE,yBAAyB;IAKpC,OAAO,CACA,IAAI,EAAE,eAAe,EAClB,KAAK,EAAE,YAAY,GAChC,OAAO,CAAC,IAAI,CAAC;CASnB"}

package/dist/adapters/http/controllers/workflows/activate/module.mjs

@@ -1,6 +1,5 @@
 import { ActivateRequestValidator } from "./validator.mjs";
-import { sendAccepted } from "routup";
-import { DBody, DController, DPost, DRequest, DResponse } from "@routup/decorators";
+import { DBody, DContext, DController, DPost } from "@routup/decorators";
 //#region src/adapters/http/controllers/workflows/activate/module.ts
 function _ts_decorate(decorators, target, key, desc) {
 	var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
@@ -21,23 +20,19 @@ var ActivateController = class {
 	constructor(ctx) {
 		this.service = ctx.service;
 	}
-	async execute(data, req, res) {
+	async execute(data, event) {
 		const validated = await new ActivateRequestValidator().run(data);
 		await this.service.activate(validated);
-		return sendAccepted(res);
+		event.response.status = 202;
+		return null;
 	}
 };
 _ts_decorate([
 	DPost("", []),
 	_ts_param(0, DBody()),
-	_ts_param(1, DRequest()),
-	_ts_param(2, DResponse()),
+	_ts_param(1, DContext()),
 	_ts_metadata("design:type", Function),
-	_ts_metadata("design:paramtypes", [
-		Object,
-		typeof Request === "undefined" ? Object : Request,
-		typeof Response === "undefined" ? Object : Response
-	]),
+	_ts_metadata("design:paramtypes", [typeof ActivatePayload === "undefined" ? Object : ActivatePayload, typeof IRoutupEvent === "undefined" ? Object : IRoutupEvent]),
 	_ts_metadata("design:returntype", Promise)
 ], ActivateController.prototype, "execute", null);
 ActivateController = _ts_decorate([

package/dist/adapters/http/controllers/workflows/activate/module.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"module.mjs","names":["DBody","DController","DPost","DRequest","DResponse","sendAccepted","ActivateRequestValidator","ActivateController","service","ctx","execute","data","req","res","validator","validated","run","activate"],"sources":["../../../../../../src/adapters/http/controllers/workflows/activate/module.ts"],"sourcesContent":["/*\n * Copyright (c) 2022-2024.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport {\n    DBody, \n    DController, \n    DPost, \n    DRequest, \n    DResponse,\n} from '@routup/decorators';\nimport type { Request, Response } from 'routup';\nimport { sendAccepted } from 'routup';\nimport type { IRegistrationService } from '../../../../../core/index.ts';\nimport { ActivateRequestValidator } from './validator.ts';\n\nexport type ActivateControllerContext = {\n    service: IRegistrationService,\n};\n\n@DController('/activate')\nexport class ActivateController {\n    protected service: IRegistrationService;\n\n    constructor(ctx: ActivateControllerContext) {\n        this.service = ctx.service;\n    }\n\n    @DPost('', [])\n    async execute(\n        @DBody() data: any,\n        @DRequest() req: Request,\n        @DResponse() res: Response,\n    ): Promise<any> {\n        const validator = new ActivateRequestValidator();\n        const validated = await validator.run(data);\n\n        await this.service.activate(validated);\n\n        return sendAccepted(res);\n    }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;AAwBA,IAAaO,qBAAb,MAAaA;CACCC;CAEV,YAAYC,KAAgC;AACxC,OAAKD,UAAUC,IAAID;;CAGvB,MACME,QACF,MACA,KACA,KACY;EAEZ,MAAMK,YAAY,MAAMD,IADFR,0BACEQ,CAAUE,IAAIL,KAAAA;AAEtC,QAAM,KAAKH,QAAQS,SAASF,UAAAA;AAE5B,SAAOV,aAAaQ,IAAAA"}
+{"version":3,"file":"module.mjs","names":["DBody","DContext","DController","DPost","ActivateRequestValidator","ActivateController","service","ctx","execute","data","event","validator","validated","run","activate","response","status"],"sources":["../../../../../../src/adapters/http/controllers/workflows/activate/module.ts"],"sourcesContent":["/*\n * Copyright (c) 2022-2024.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport {\n    DBody,\n    DContext,\n    DController,\n    DPost,\n} from '@routup/decorators';\nimport type { IRoutupEvent } from 'routup';\nimport type { ActivatePayload } from '@authup/core-http-kit';\nimport type { IRegistrationService } from '../../../../../core/index.ts';\nimport { ActivateRequestValidator } from './validator.ts';\n\nexport type ActivateControllerContext = {\n    service: IRegistrationService,\n};\n\n@DController('/activate')\nexport class ActivateController {\n    protected service: IRegistrationService;\n\n    constructor(ctx: ActivateControllerContext) {\n        this.service = ctx.service;\n    }\n\n    @DPost('', [])\n    async execute(\n        @DBody() data: ActivatePayload,\n        @DContext() event: IRoutupEvent,\n    ): Promise<null> {\n        const validator = new ActivateRequestValidator();\n        const validated = await validator.run(data);\n\n        await this.service.activate(validated);\n\n        event.response.status = 202;\n        return null;\n    }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;AAuBA,IAAaK,qBAAb,MAAaA;CACCC;CAEV,YAAYC,KAAgC;AACxC,OAAKD,UAAUC,IAAID;;CAGvB,MACME,QACF,MACA,OACa;EAEb,MAAMI,YAAY,MAAMD,IADFP,0BACEO,CAAUE,IAAIJ,KAAAA;AAEtC,QAAM,KAAKH,QAAQQ,SAASF,UAAAA;AAE5BF,QAAMK,SAASC,SAAS;AACxB,SAAO"}

package/dist/adapters/http/controllers/workflows/authorize/module.d.ts

@@ -1,15 +1,17 @@
-import { RoutupContainerAdapter } from '@validup/adapter-routup';
-import type { OAuth2AuthorizationCodeRequest } from '@authup/core-kit';
+import type { IRoutupEvent } from 'routup';
 import { HTTPOAuth2Authorizer } from '../../../adapters/index.ts';
 import type { IOAuth2AuthorizationCodeRequestVerifier } from '../../../../../core/index.ts';
+import { OAuth2AuthorizationCodeRequestValidator } from '../../../../../core/index.ts';
 import type { AuthorizeControllerContext, AuthorizeControllerOptions } from './types.ts';
 export declare class AuthorizeController {
     protected options: AuthorizeControllerOptions;
     protected codeRequestVerifier: IOAuth2AuthorizationCodeRequestVerifier;
-    protected codeRequestValidator: RoutupContainerAdapter<OAuth2AuthorizationCodeRequest>;
+    protected codeRequestValidator: OAuth2AuthorizationCodeRequestValidator;
     protected authorizer: HTTPOAuth2Authorizer;
     constructor(ctx: AuthorizeControllerContext);
-    confirm(req: any, res: any): Promise<void>;
-    serve(req: any, res: any): Promise<void>;
+    confirm(event: IRoutupEvent): Promise<{
+        url: string;
+    }>;
+    serve(event: IRoutupEvent): Promise<string>;
 }
 //# sourceMappingURL=module.d.ts.map

package/dist/adapters/http/controllers/workflows/authorize/module.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"module.d.ts","sourceRoot":"","sources":["../../../../../../src/adapters/http/controllers/workflows/authorize/module.ts"],"names":[],"mappings":"AAmBA,OAAO,EAAE,sBAAsB,EAAE,MAAM,yBAAyB,CAAC;AACjE,OAAO,KAAK,EAAU,8BAA8B,EAAS,MAAM,kBAAkB,CAAC;AAItF,OAAO,EAAE,oBAAoB,EAAE,MAAM,4BAA4B,CAAC;AAClE,OAAO,KAAK,EAAE,uCAAuC,EAAE,MAAM,8BAA8B,CAAC;AAG5F,OAAO,KAAK,EAAE,0BAA0B,EAAE,0BAA0B,EAAE,MAAM,YAAY,CAAC;AAEzF,qBACa,mBAAmB;IAI5B,SAAS,CAAC,OAAO,EAAE,0BAA0B,CAAC;IAE9C,SAAS,CAAC,mBAAmB,EAAG,uCAAuC,CAAC;IAExE,SAAS,CAAC,oBAAoB,EAAG,sBAAsB,CAAC,8BAA8B,CAAC,CAAC;IAExF,SAAS,CAAC,UAAU,EAAE,oBAAoB,CAAC;gBAI/B,GAAG,EAAE,0BAA0B;IAoBrC,OAAO,CACG,GAAG,EAAE,GAAG,EACP,GAAG,EAAE,GAAG,GACtB,OAAO,CAAC,IAAI,CAAC;IAwBV,KAAK,CACK,GAAG,EAAE,GAAG,EACP,GAAG,EAAE,GAAG,GACtB,OAAO,CAAC,IAAI,CAAC;CAgFnB"}
+{"version":3,"file":"module.d.ts","sourceRoot":"","sources":["../../../../../../src/adapters/http/controllers/workflows/authorize/module.ts"],"names":[],"mappings":"AAkBA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,QAAQ,CAAC;AAM3C,OAAO,EAAE,oBAAoB,EAAE,MAAM,4BAA4B,CAAC;AAElE,OAAO,KAAK,EAAE,uCAAuC,EAAE,MAAM,8BAA8B,CAAC;AAC5F,OAAO,EAAE,uCAAuC,EAAE,MAAM,8BAA8B,CAAC;AAEvF,OAAO,KAAK,EAAE,0BAA0B,EAAE,0BAA0B,EAAE,MAAM,YAAY,CAAC;AAEzF,qBACa,mBAAmB;IAI5B,SAAS,CAAC,OAAO,EAAE,0BAA0B,CAAC;IAE9C,SAAS,CAAC,mBAAmB,EAAG,uCAAuC,CAAC;IAExE,SAAS,CAAC,oBAAoB,EAAG,uCAAuC,CAAC;IAEzE,SAAS,CAAC,UAAU,EAAE,oBAAoB,CAAC;gBAI/B,GAAG,EAAE,0BAA0B;IAmBrC,OAAO,CAAa,KAAK,EAAE,YAAY,GAAG,OAAO,CAAC;QAAE,GAAG,EAAE,MAAM,CAAA;KAAE,CAAC;IAwBlE,KAAK,CAAa,KAAK,EAAE,YAAY,GAAG,OAAO,CAAC,MAAM,CAAC;CA8EhE"}

package/dist/adapters/http/controllers/workflows/authorize/module.mjs

@@ -1,17 +1,18 @@
 import { OAuth2AuthorizationCodeRequestValidator } from "../../../../../core/oauth2/authorization/code-request/validator.mjs";
 import "../../../../../core/index.mjs";
+import { readFromLocations } from "../../../request/helpers/locations.mjs";
+import "../../../request/index.mjs";
 import { HTTPOAuth2Authorizer } from "../../../adapters/oauth2/authorization/module.mjs";
 import "../../../adapters/index.mjs";
 import { ForceUserLoggedInMiddleware } from "../../../middleware/built-in/loggedin/user.mjs";
 import { UI_DIST_PATH, UI_SOURCE_PATH } from "../../../../../path.mjs";
+import { VITE_SERVER_STORE_KEY } from "../../../middleware/built-in/assets.mjs";
 import { sanitizeError } from "../../../../../utils/error.mjs";
 import "../../../../../utils/index.mjs";
 import "../../../middleware/index.mjs";
 import path from "node:path";
 import { CodeTransformation, isCodeTransformation } from "typeorm-extension";
-import { send, useRequestParam } from "routup";
-import { RoutupContainerAdapter } from "@validup/adapter-routup";
-import { DController, DGet, DPost, DRequest, DResponse } from "@routup/decorators";
+import { DContext, DController, DGet, DPost } from "@routup/decorators";
 import { load } from "locter";
 import { URL } from "node:url";
 import fs from "node:fs";
@@ -38,8 +39,7 @@ var AuthorizeController = class {
 	constructor(ctx) {
 		this.options = ctx.options;
 		this.codeRequestVerifier = ctx.codeRequestVerifier;
-		const validator = new OAuth2AuthorizationCodeRequestValidator();
-		this.codeRequestValidator = new RoutupContainerAdapter(validator);
+		this.codeRequestValidator = new OAuth2AuthorizationCodeRequestValidator();
 		this.authorizer = new HTTPOAuth2Authorizer({
 			codeRequestVerifier: this.codeRequestVerifier,
 			accessTokenIssuer: ctx.accessTokenIssuer,
@@ -48,22 +48,23 @@ var AuthorizeController = class {
 			identityResolver: ctx.identityResolver
 		});
 	}
-	async confirm(req, res) {
-		const result = await this.authorizer.authorizeWithRequest(req);
+	async confirm(event) {
+		const result = await this.authorizer.authorizeWithRequest(event);
 		const url = new URL(result.redirectUri);
 		if (result.state) url.searchParams.set("state", result.state);
 		if (result.authorizationCode) url.searchParams.set("code", result.authorizationCode);
 		if (result.accessToken) url.searchParams.set("access_token", result.accessToken);
 		if (result.idToken) url.searchParams.set("id_token", result.idToken);
-		return send(res, { url: url.href });
+		return { url: url.href };
 	}
-	async serve(req, res) {
+	async serve(event) {
 		let codeRequest;
 		let client;
 		let scopes;
 		let error;
 		try {
-			const data = await this.codeRequestValidator.run(req, { locations: ["body", "query"] });
+			const merged = await readFromLocations(event, ["body", "query"]);
+			const data = await this.codeRequestValidator.run(merged);
 			const result = await this.codeRequestVerifier.verify(data);
 			client = result.client;
 			scopes = result.scopes;
@@ -89,9 +90,7 @@ var AuthorizeController = class {
 		let manifest;
 		let render;
 		if (isJIT) {
-			/**
-			* @type {import('vite').ViteDevServer}
-			*/ const vite = useRequestParam(req, "viteServer");
+			const vite = event.store[VITE_SERVER_STORE_KEY];
 			html = await fs.promises.readFile(path.join(UI_SOURCE_PATH, "index.html"), "utf-8");
 			html = await vite.transformIndexHtml("/", html);
 			manifest = {};
@@ -106,23 +105,23 @@ var AuthorizeController = class {
 			manifest,
 			payload
 		});
-		return send(res, html.replace("<!--preload-links-->", preloadLinks).replace("<!--app-html-->", appHtml));
+		const body = html.replace("<!--preload-links-->", preloadLinks).replace("<!--app-html-->", appHtml);
+		event.response.headers.set("content-type", "text/html; charset=utf-8");
+		return body;
 	}
 };
 _ts_decorate([
 	DPost("", [ForceUserLoggedInMiddleware]),
-	_ts_param(0, DRequest()),
-	_ts_param(1, DResponse()),
+	_ts_param(0, DContext()),
 	_ts_metadata("design:type", Function),
-	_ts_metadata("design:paramtypes", [Object, Object]),
+	_ts_metadata("design:paramtypes", [typeof IRoutupEvent === "undefined" ? Object : IRoutupEvent]),
 	_ts_metadata("design:returntype", Promise)
 ], AuthorizeController.prototype, "confirm", null);
 _ts_decorate([
 	DGet("", []),
-	_ts_param(0, DRequest()),
-	_ts_param(1, DResponse()),
+	_ts_param(0, DContext()),
 	_ts_metadata("design:type", Function),
-	_ts_metadata("design:paramtypes", [Object, Object]),
+	_ts_metadata("design:paramtypes", [typeof IRoutupEvent === "undefined" ? Object : IRoutupEvent]),
 	_ts_metadata("design:returntype", Promise)
 ], AuthorizeController.prototype, "serve", null);
 AuthorizeController = _ts_decorate([

package/dist/adapters/http/controllers/workflows/authorize/module.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"module.mjs","names":["DController","DGet","DPost","DRequest","DResponse","load","fs","path","URL","send","useRequestParam","RoutupContainerAdapter","CodeTransformation","isCodeTransformation","UI_DIST_PATH","UI_SOURCE_PATH","ForceUserLoggedInMiddleware","HTTPOAuth2Authorizer","OAuth2AuthorizationCodeRequestValidator","sanitizeError","AuthorizeController","options","codeRequestVerifier","codeRequestValidator","authorizer","ctx","validator","accessTokenIssuer","openIdTokenIssuer","codeIssuer","identityResolver","confirm","req","res","result","authorizeWithRequest","url","redirectUri","state","searchParams","set","authorizationCode","accessToken","idToken","href","serve","codeRequest","client","scopes","error","data","run","locations","verify","e","normalized","message","isJIT","JUST_IN_TIME","payload","config","baseURL","html","manifest","render","vite","promises","readFile","join","transformIndexHtml","ssrLoadModule","JSON","parse","appHtml","preloadLinks","replace"],"sources":["../../../../../../src/adapters/http/controllers/workflows/authorize/module.ts"],"sourcesContent":["/*\n * Copyright (c) 2024.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport {\n    DController, \n    DGet, \n    DPost, \n    DRequest, \n    DResponse,\n} from '@routup/decorators';\nimport { load } from 'locter';\nimport fs from 'node:fs';\nimport path from 'node:path';\nimport { URL } from 'node:url';\nimport { send, useRequestParam } from 'routup';\nimport { RoutupContainerAdapter } from '@validup/adapter-routup';\nimport type { Client, OAuth2AuthorizationCodeRequest, Scope } from '@authup/core-kit';\nimport { CodeTransformation, isCodeTransformation } from 'typeorm-extension';\nimport { UI_DIST_PATH, UI_SOURCE_PATH } from '../../../../../path.ts';\nimport { ForceUserLoggedInMiddleware } from '../../../middleware/index.ts';\nimport { HTTPOAuth2Authorizer } from '../../../adapters/index.ts';\nimport type { IOAuth2AuthorizationCodeRequestVerifier } from '../../../../../core/index.ts';\nimport { OAuth2AuthorizationCodeRequestValidator } from '../../../../../core/index.ts';\nimport { sanitizeError } from '../../../../../utils/index.ts';\nimport type { AuthorizeControllerContext, AuthorizeControllerOptions } from './types.ts';\n\n@DController('/authorize')\nexport class AuthorizeController {\n    // todo: maybe /realms/<realm>/protocol/openid-connect/authorize\n    // todo: maybe /realms/<realm>/[...]/authorize\n\n    protected options: AuthorizeControllerOptions;\n\n    protected codeRequestVerifier : IOAuth2AuthorizationCodeRequestVerifier;\n\n    protected codeRequestValidator : RoutupContainerAdapter<OAuth2AuthorizationCodeRequest>;\n\n    protected authorizer: HTTPOAuth2Authorizer;\n\n    // ---------------------------------------------------------\n\n    constructor(ctx: AuthorizeControllerContext) {\n        this.options = ctx.options;\n\n        this.codeRequestVerifier = ctx.codeRequestVerifier;\n\n        const validator = new OAuth2AuthorizationCodeRequestValidator();\n        this.codeRequestValidator = new RoutupContainerAdapter(validator);\n\n        this.authorizer = new HTTPOAuth2Authorizer({\n            codeRequestVerifier: this.codeRequestVerifier,\n            accessTokenIssuer: ctx.accessTokenIssuer,\n            openIdTokenIssuer: ctx.openIdTokenIssuer,\n            codeIssuer: ctx.codeIssuer,\n            identityResolver: ctx.identityResolver,\n        });\n    }\n\n    // ---------------------------------------------------------\n\n    @DPost('', [ForceUserLoggedInMiddleware])\n    async confirm(\n        @DRequest() req: any,\n        @DResponse() res: any,\n    ): Promise<void> {\n        const result = await this.authorizer.authorizeWithRequest(req);\n\n        const url = new URL(result.redirectUri);\n        if (result.state) {\n            url.searchParams.set('state', result.state);\n        }\n\n        if (result.authorizationCode) {\n            url.searchParams.set('code', result.authorizationCode);\n        }\n\n        if (result.accessToken) {\n            url.searchParams.set('access_token', result.accessToken);\n        }\n\n        if (result.idToken) {\n            url.searchParams.set('id_token', result.idToken);\n        }\n\n        return send(res, { url: url.href });\n    }\n\n    @DGet('', [])\n    async serve(\n        @DRequest() req: any,\n        @DResponse() res: any,\n    ): Promise<void> {\n        let codeRequest : OAuth2AuthorizationCodeRequest | undefined;\n\n        let client : Client | undefined;\n        let scopes : Scope[] | undefined;\n\n        let error : Error | undefined;\n\n        try {\n            const data = await this.codeRequestValidator.run(req, { locations: ['body', 'query'] });\n\n            const result = await this.codeRequestVerifier.verify(data);\n            client = result.client;\n            scopes = result.scopes;\n\n            codeRequest = result.data;\n        } catch (e) {\n            const normalized = sanitizeError(e);\n            error = {\n                ...normalized,\n                message: normalized.message,\n            };\n        }\n\n        const isJIT = isCodeTransformation(CodeTransformation.JUST_IN_TIME);\n\n        const payload = {\n            config: { baseURL: this.options.baseURL },\n            data: {\n                codeRequest,\n                error,\n                client,\n                scopes,\n            },\n        };\n\n        let html : string;\n        let manifest : Record<string, any>;\n        let render : CallableFunction;\n\n        if (isJIT) {\n            /**\n             * @type {import('vite').ViteDevServer}\n             */\n            const vite = useRequestParam(req, 'viteServer');\n\n            html = await fs.promises.readFile(\n                path.join(UI_SOURCE_PATH, 'index.html'),\n                'utf-8',\n            );\n            html = await vite.transformIndexHtml('/', html);\n            manifest = {};\n            render = (await vite.ssrLoadModule('/src/server.ts')).render;\n        } else {\n            html = await fs.promises.readFile(\n                path.join(UI_DIST_PATH, 'client', 'index.html'),\n                'utf-8',\n            );\n\n            manifest = JSON.parse(await fs.promises.readFile(\n                path.join(UI_DIST_PATH, 'client', '.vite', 'ssr-manifest.json'),\n                'utf-8',\n            ));\n\n            render = (await load(path.join(UI_DIST_PATH, 'server', 'server.js'))).render;\n        }\n\n        const [appHtml, preloadLinks] = await render({\n            url: '/authorize',\n            manifest,\n            payload,\n        });\n\n        return send(\n            res,\n            html\n                .replace('<!--preload-links-->', preloadLinks)\n                .replace('<!--app-html-->', appHtml),\n        );\n    }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AA+BA,IAAaoB,sBAAb,MAAaA;CAICC;CAEAC;CAEAC;CAEAC;CAIV,YAAYC,KAAiC;AACzC,OAAKJ,UAAUI,IAAIJ;AAEnB,OAAKC,sBAAsBG,IAAIH;EAE/B,MAAMI,YAAY,IAAIR,yCAAAA;AACtB,OAAKK,uBAAuB,IAAIZ,uBAAuBe,UAAAA;AAEvD,OAAKF,aAAa,IAAIP,qBAAqB;GACvCK,qBAAqB,KAAKA;GAC1BK,mBAAmBF,IAAIE;GACvBC,mBAAmBH,IAAIG;GACvBC,YAAYJ,IAAII;GAChBC,kBAAkBL,IAAIK;GAC1B,CAAA;;CAKJ,MACMC,QACF,KACA,KACa;EACb,MAAMG,SAAS,MAAM,KAAKV,WAAWW,qBAAqBH,IAAAA;EAE1D,MAAMI,MAAM,IAAI5B,IAAI0B,OAAOG,YAAW;AACtC,MAAIH,OAAOI,MACPF,KAAIG,aAAaC,IAAI,SAASN,OAAOI,MAAK;AAG9C,MAAIJ,OAAOO,kBACPL,KAAIG,aAAaC,IAAI,QAAQN,OAAOO,kBAAiB;AAGzD,MAAIP,OAAOQ,YACPN,KAAIG,aAAaC,IAAI,gBAAgBN,OAAOQ,YAAW;AAG3D,MAAIR,OAAOS,QACPP,KAAIG,aAAaC,IAAI,YAAYN,OAAOS,QAAO;AAGnD,SAAOlC,KAAKwB,KAAK,EAAEG,KAAKA,IAAIQ,MAAK,CAAA;;CAGrC,MACMC,MACF,KACA,KACa;EACb,IAAIC;EAEJ,IAAIC;EACJ,IAAIC;EAEJ,IAAIC;AAEJ,MAAI;GACA,MAAMC,OAAO,MAAM,KAAK3B,qBAAqB4B,IAAInB,KAAK,EAAEoB,WAAW,CAAC,QAAQ,QAAQ,EAAC,CAAA;GAErF,MAAMlB,SAAS,MAAM,KAAKZ,oBAAoB+B,OAAOH,KAAAA;AACrDH,YAASb,OAAOa;AAChBC,YAASd,OAAOc;AAEhBF,iBAAcZ,OAAOgB;WAChBI,GAAG;GACR,MAAMC,aAAapC,cAAcmC,EAAAA;AACjCL,WAAQ;IACJ,GAAGM;IACHC,SAASD,WAAWC;IACxB;;EAGJ,MAAMC,QAAQ5C,qBAAqBD,mBAAmB8C,aAAY;EAElE,MAAMC,UAAU;GACZC,QAAQ,EAAEC,SAAS,KAAKxC,QAAQwC,SAAQ;GACxCX,MAAM;IACFJ;IACAG;IACAF;IACAC;IACJ;GACJ;EAEA,IAAIc;EACJ,IAAIC;EACJ,IAAIC;AAEJ,MAAIP,OAAO;;;MAIP,MAAMQ,OAAOvD,gBAAgBsB,KAAK,aAAA;AAElC8B,UAAO,MAAMxD,GAAG4D,SAASC,SACrB5D,KAAK6D,KAAKrD,gBAAgB,aAAA,EAC1B,QAAA;AAEJ+C,UAAO,MAAMG,KAAKI,mBAAmB,KAAKP,KAAAA;AAC1CC,cAAW,EAAC;AACZC,aAAU,MAAMC,KAAKK,cAAc,iBAAgB,EAAGN;SACnD;AACHF,UAAO,MAAMxD,GAAG4D,SAASC,SACrB5D,KAAK6D,KAAKtD,cAAc,UAAU,aAAA,EAClC,QAAA;AAGJiD,cAAWQ,KAAKC,MAAM,MAAMlE,GAAG4D,SAASC,SACpC5D,KAAK6D,KAAKtD,cAAc,UAAU,SAAS,oBAAA,EAC3C,QAAA,CAAA;AAGJkD,aAAU,MAAM3D,KAAKE,KAAK6D,KAAKtD,cAAc,UAAU,YAAA,CAAY,EAAGkD;;EAG1E,MAAM,CAACS,SAASC,gBAAgB,MAAMV,OAAO;GACzC5B,KAAK;GACL2B;GACAJ;GACJ,CAAA;AAEA,SAAOlD,KACHwB,KACA6B,KACKa,QAAQ,wBAAwBD,aAAAA,CAChCC,QAAQ,mBAAmBF,QAAAA,CAAAA;;;;YA5G5BzD,4BAAAA,CAAAA"}
+{"version":3,"file":"module.mjs","names":["DContext","DController","DGet","DPost","load","fs","path","URL","CodeTransformation","isCodeTransformation","UI_DIST_PATH","UI_SOURCE_PATH","ForceUserLoggedInMiddleware","VITE_SERVER_STORE_KEY","HTTPOAuth2Authorizer","readFromLocations","OAuth2AuthorizationCodeRequestValidator","sanitizeError","AuthorizeController","options","codeRequestVerifier","codeRequestValidator","authorizer","ctx","accessTokenIssuer","openIdTokenIssuer","codeIssuer","identityResolver","confirm","event","result","authorizeWithRequest","url","redirectUri","state","searchParams","set","authorizationCode","accessToken","idToken","href","serve","codeRequest","client","scopes","error","merged","data","run","verify","e","normalized","message","isJIT","JUST_IN_TIME","payload","config","baseURL","html","manifest","render","vite","store","promises","readFile","join","transformIndexHtml","ssrLoadModule","JSON","parse","appHtml","preloadLinks","body","replace","response","headers"],"sources":["../../../../../../src/adapters/http/controllers/workflows/authorize/module.ts"],"sourcesContent":["/*\n * Copyright (c) 2024.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport {\n    DContext,\n    DController,\n    DGet,\n    DPost,\n} from '@routup/decorators';\nimport { load } from 'locter';\nimport fs from 'node:fs';\nimport path from 'node:path';\nimport { URL } from 'node:url';\n\nimport type { IRoutupEvent } from 'routup';\nimport type { ViteDevServer } from 'vite';\nimport type { Client, OAuth2AuthorizationCodeRequest, Scope } from '@authup/core-kit';\nimport { CodeTransformation, isCodeTransformation } from 'typeorm-extension';\nimport { UI_DIST_PATH, UI_SOURCE_PATH } from '../../../../../path.ts';\nimport { ForceUserLoggedInMiddleware, VITE_SERVER_STORE_KEY } from '../../../middleware/index.ts';\nimport { HTTPOAuth2Authorizer } from '../../../adapters/index.ts';\nimport { readFromLocations } from '../../../request/index.ts';\nimport type { IOAuth2AuthorizationCodeRequestVerifier } from '../../../../../core/index.ts';\nimport { OAuth2AuthorizationCodeRequestValidator } from '../../../../../core/index.ts';\nimport { sanitizeError } from '../../../../../utils/index.ts';\nimport type { AuthorizeControllerContext, AuthorizeControllerOptions } from './types.ts';\n\n@DController('/authorize')\nexport class AuthorizeController {\n    // todo: maybe /realms/<realm>/protocol/openid-connect/authorize\n    // todo: maybe /realms/<realm>/[...]/authorize\n\n    protected options: AuthorizeControllerOptions;\n\n    protected codeRequestVerifier : IOAuth2AuthorizationCodeRequestVerifier;\n\n    protected codeRequestValidator : OAuth2AuthorizationCodeRequestValidator;\n\n    protected authorizer: HTTPOAuth2Authorizer;\n\n    // ---------------------------------------------------------\n\n    constructor(ctx: AuthorizeControllerContext) {\n        this.options = ctx.options;\n\n        this.codeRequestVerifier = ctx.codeRequestVerifier;\n\n        this.codeRequestValidator = new OAuth2AuthorizationCodeRequestValidator();\n\n        this.authorizer = new HTTPOAuth2Authorizer({\n            codeRequestVerifier: this.codeRequestVerifier,\n            accessTokenIssuer: ctx.accessTokenIssuer,\n            openIdTokenIssuer: ctx.openIdTokenIssuer,\n            codeIssuer: ctx.codeIssuer,\n            identityResolver: ctx.identityResolver,\n        });\n    }\n\n    // ---------------------------------------------------------\n\n    @DPost('', [ForceUserLoggedInMiddleware])\n    async confirm(@DContext() event: IRoutupEvent): Promise<{ url: string }> {\n        const result = await this.authorizer.authorizeWithRequest(event);\n\n        const url = new URL(result.redirectUri);\n        if (result.state) {\n            url.searchParams.set('state', result.state);\n        }\n\n        if (result.authorizationCode) {\n            url.searchParams.set('code', result.authorizationCode);\n        }\n\n        if (result.accessToken) {\n            url.searchParams.set('access_token', result.accessToken);\n        }\n\n        if (result.idToken) {\n            url.searchParams.set('id_token', result.idToken);\n        }\n\n        return { url: url.href };\n    }\n\n    @DGet('', [])\n    async serve(@DContext() event: IRoutupEvent): Promise<string> {\n        let codeRequest : OAuth2AuthorizationCodeRequest | undefined;\n\n        let client : Client | undefined;\n        let scopes : Scope[] | undefined;\n\n        let error : Error | undefined;\n\n        try {\n            const merged = await readFromLocations(event, ['body', 'query']);\n            const data = await this.codeRequestValidator.run(merged);\n\n            const result = await this.codeRequestVerifier.verify(data);\n            client = result.client;\n            scopes = result.scopes;\n\n            codeRequest = result.data;\n        } catch (e) {\n            const normalized = sanitizeError(e);\n            error = {\n                ...normalized,\n                message: normalized.message,\n            };\n        }\n\n        const isJIT = isCodeTransformation(CodeTransformation.JUST_IN_TIME);\n\n        const payload = {\n            config: { baseURL: this.options.baseURL },\n            data: {\n                codeRequest,\n                error,\n                client,\n                scopes,\n            },\n        };\n\n        let html : string;\n        let manifest : Record<string, any>;\n        let render : CallableFunction;\n\n        if (isJIT) {\n            const vite = event.store[VITE_SERVER_STORE_KEY] as ViteDevServer;\n\n            html = await fs.promises.readFile(\n                path.join(UI_SOURCE_PATH, 'index.html'),\n                'utf-8',\n            );\n            html = await vite.transformIndexHtml('/', html);\n            manifest = {};\n            render = (await vite.ssrLoadModule('/src/server.ts')).render;\n        } else {\n            html = await fs.promises.readFile(\n                path.join(UI_DIST_PATH, 'client', 'index.html'),\n                'utf-8',\n            );\n\n            manifest = JSON.parse(await fs.promises.readFile(\n                path.join(UI_DIST_PATH, 'client', '.vite', 'ssr-manifest.json'),\n                'utf-8',\n            ));\n\n            render = (await load(path.join(UI_DIST_PATH, 'server', 'server.js'))).render;\n        }\n\n        const [appHtml, preloadLinks] = await render({\n            url: '/authorize',\n            manifest,\n            payload,\n        });\n\n        const body = html\n            .replace('<!--preload-links-->', preloadLinks)\n            .replace('<!--app-html-->', appHtml);\n\n        event.response.headers.set('content-type', 'text/html; charset=utf-8');\n        return body;\n    }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAgCA,IAAakB,sBAAb,MAAaA;CAICC;CAEAC;CAEAC;CAEAC;CAIV,YAAYC,KAAiC;AACzC,OAAKJ,UAAUI,IAAIJ;AAEnB,OAAKC,sBAAsBG,IAAIH;AAE/B,OAAKC,uBAAuB,IAAIL,yCAAAA;AAEhC,OAAKM,aAAa,IAAIR,qBAAqB;GACvCM,qBAAqB,KAAKA;GAC1BI,mBAAmBD,IAAIC;GACvBC,mBAAmBF,IAAIE;GACvBC,YAAYH,IAAIG;GAChBC,kBAAkBJ,IAAII;GAC1B,CAAA;;CAKJ,MACMC,QAAQ,OAA2D;EACrE,MAAME,SAAS,MAAM,KAAKR,WAAWS,qBAAqBF,MAAAA;EAE1D,MAAMG,MAAM,IAAIzB,IAAIuB,OAAOG,YAAW;AACtC,MAAIH,OAAOI,MACPF,KAAIG,aAAaC,IAAI,SAASN,OAAOI,MAAK;AAG9C,MAAIJ,OAAOO,kBACPL,KAAIG,aAAaC,IAAI,QAAQN,OAAOO,kBAAiB;AAGzD,MAAIP,OAAOQ,YACPN,KAAIG,aAAaC,IAAI,gBAAgBN,OAAOQ,YAAW;AAG3D,MAAIR,OAAOS,QACPP,KAAIG,aAAaC,IAAI,YAAYN,OAAOS,QAAO;AAGnD,SAAO,EAAEP,KAAKA,IAAIQ,MAAK;;CAG3B,MACMC,MAAM,OAAkD;EAC1D,IAAIC;EAEJ,IAAIC;EACJ,IAAIC;EAEJ,IAAIC;AAEJ,MAAI;GACA,MAAMC,SAAS,MAAM/B,kBAAkBc,OAAO,CAAC,QAAQ,QAAQ,CAAA;GAC/D,MAAMkB,OAAO,MAAM,KAAK1B,qBAAqB2B,IAAIF,OAAAA;GAEjD,MAAMhB,SAAS,MAAM,KAAKV,oBAAoB6B,OAAOF,KAAAA;AACrDJ,YAASb,OAAOa;AAChBC,YAASd,OAAOc;AAEhBF,iBAAcZ,OAAOiB;WAChBG,GAAG;GACR,MAAMC,aAAalC,cAAciC,EAAAA;AACjCL,WAAQ;IACJ,GAAGM;IACHC,SAASD,WAAWC;IACxB;;EAGJ,MAAMC,QAAQ5C,qBAAqBD,mBAAmB8C,aAAY;EAElE,MAAMC,UAAU;GACZC,QAAQ,EAAEC,SAAS,KAAKtC,QAAQsC,SAAQ;GACxCV,MAAM;IACFL;IACAG;IACAF;IACAC;IACJ;GACJ;EAEA,IAAIc;EACJ,IAAIC;EACJ,IAAIC;AAEJ,MAAIP,OAAO;GACP,MAAMQ,OAAOhC,MAAMiC,MAAMjD;AAEzB6C,UAAO,MAAMrD,GAAG0D,SAASC,SACrB1D,KAAK2D,KAAKtD,gBAAgB,aAAA,EAC1B,QAAA;AAEJ+C,UAAO,MAAMG,KAAKK,mBAAmB,KAAKR,KAAAA;AAC1CC,cAAW,EAAC;AACZC,aAAU,MAAMC,KAAKM,cAAc,iBAAgB,EAAGP;SACnD;AACHF,UAAO,MAAMrD,GAAG0D,SAASC,SACrB1D,KAAK2D,KAAKvD,cAAc,UAAU,aAAA,EAClC,QAAA;AAGJiD,cAAWS,KAAKC,MAAM,MAAMhE,GAAG0D,SAASC,SACpC1D,KAAK2D,KAAKvD,cAAc,UAAU,SAAS,oBAAA,EAC3C,QAAA,CAAA;AAGJkD,aAAU,MAAMxD,KAAKE,KAAK2D,KAAKvD,cAAc,UAAU,YAAA,CAAY,EAAGkD;;EAG1E,MAAM,CAACU,SAASC,gBAAgB,MAAMX,OAAO;GACzC5B,KAAK;GACL2B;GACAJ;GACJ,CAAA;EAEA,MAAMiB,OAAOd,KACRe,QAAQ,wBAAwBF,aAAAA,CAChCE,QAAQ,mBAAmBH,QAAAA;AAEhCzC,QAAM6C,SAASC,QAAQvC,IAAI,gBAAgB,2BAAA;AAC3C,SAAOoC;;;;YArGC5D,4BAAAA,CAAAA"}

package/dist/adapters/http/controllers/workflows/jwks/handlers/read.d.ts

@@ -1,6 +1,8 @@
-import type { Response } from 'routup';
+import type { OAuth2JsonWebKey } from '@authup/specs';
 import type { Repository } from 'typeorm';
 import type { KeyEntity } from '../../../../../database/domains/index.ts';
-export declare function getJwksRouteHandler(res: Response, repository: Repository<KeyEntity>, realmId?: string): Promise<any>;
-export declare function getJwkRouteHandler(res: Response, repository: Repository<KeyEntity>, keyId: string, realmId?: string): Promise<any>;
+export declare function getJwksRouteHandler(repository: Repository<KeyEntity>, realmId?: string): Promise<{
+    keys: OAuth2JsonWebKey[];
+}>;
+export declare function getJwkRouteHandler(repository: Repository<KeyEntity>, keyId: string, realmId?: string): Promise<OAuth2JsonWebKey>;
 //# sourceMappingURL=read.d.ts.map

package/dist/adapters/http/controllers/workflows/jwks/handlers/read.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"read.d.ts","sourceRoot":"","sources":["../../../../../../../src/adapters/http/controllers/workflows/jwks/handlers/read.ts"],"names":[],"mappings":"AASA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,QAAQ,CAAC;AAEvC,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AAG1C,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,0CAA0C,CAAC;AAE1E,wBAAsB,mBAAmB,CACrC,GAAG,EAAE,QAAQ,EACb,UAAU,EAAE,UAAU,CAAC,SAAS,CAAC,EACjC,OAAO,CAAC,EAAE,MAAM,GAChB,OAAO,CAAC,GAAG,CAAC,CA6Bf;AAED,wBAAsB,kBAAkB,CACpC,GAAG,EAAE,QAAQ,EACb,UAAU,EAAE,UAAU,CAAC,SAAS,CAAC,EACjC,KAAK,EAAE,MAAM,EACb,OAAO,CAAC,EAAE,MAAM,GAChB,OAAO,CAAC,GAAG,CAAC,CA+Bf"}
+{"version":3,"file":"read.d.ts","sourceRoot":"","sources":["../../../../../../../src/adapters/http/controllers/workflows/jwks/handlers/read.ts"],"names":[],"mappings":"AAQA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,eAAe,CAAC;AAEtD,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AAG1C,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,0CAA0C,CAAC;AAE1E,wBAAsB,mBAAmB,CACrC,UAAU,EAAE,UAAU,CAAC,SAAS,CAAC,EACjC,OAAO,CAAC,EAAE,MAAM,GAChB,OAAO,CAAC;IAAE,IAAI,EAAE,gBAAgB,EAAE,CAAA;CAAE,CAAC,CA6BxC;AAED,wBAAsB,kBAAkB,CACpC,UAAU,EAAE,UAAU,CAAC,SAAS,CAAC,EACjC,KAAK,EAAE,MAAM,EACb,OAAO,CAAC,EAAE,MAAM,GAChB,OAAO,CAAC,gBAAgB,CAAC,CA+B5B"}

package/dist/adapters/http/controllers/workflows/jwks/handlers/read.mjs

@@ -2,9 +2,8 @@ import { In } from "typeorm";
 import { AsymmetricKey } from "@authup/server-kit";
 import { JWKType } from "@authup/specs";
 import { BadRequestError, NotFoundError } from "@ebec/http";
-import { send } from "routup";
 //#region src/adapters/http/controllers/workflows/jwks/handlers/read.ts
-async function getJwksRouteHandler(res, repository, realmId) {
+async function getJwksRouteHandler(repository, realmId) {
 	const promises = (await repository.find({
 		where: {
 			type: In([JWKType.RSA, JWKType.EC]),
@@ -20,9 +19,9 @@ async function getJwksRouteHandler(res, repository, realmId) {
 		kid: entity.id,
 		alg: entity.signature_algorithm
 	})));
-	return send(res, { keys: await Promise.all(promises) });
+	return { keys: await Promise.all(promises) };
 }
-async function getJwkRouteHandler(res, repository, keyId, realmId) {
+async function getJwkRouteHandler(repository, keyId, realmId) {
 	const entity = await repository.findOne({ where: {
 		type: In([JWKType.RSA, JWKType.EC]),
 		id: keyId,
@@ -30,16 +29,15 @@ async function getJwkRouteHandler(res, repository, keyId, realmId) {
 	} });
 	if (!entity) throw new NotFoundError();
 	if (!entity.encryption_key) throw new BadRequestError("The encryption key does not exist");
-	const jsonWebKey = await (await AsymmetricKey.fromBase64({
-		format: "spki",
-		key: entity.encryption_key,
-		options: AsymmetricKey.buildImportOptionsForJWTAlgorithm(entity.signature_algorithm)
-	})).toJWK();
-	jsonWebKey.alg = entity.signature_algorithm;
-	return send(res, {
-		...jsonWebKey,
-		kid: entity.id
-	});
+	return {
+		...await (await AsymmetricKey.fromBase64({
+			format: "spki",
+			key: entity.encryption_key,
+			options: AsymmetricKey.buildImportOptionsForJWTAlgorithm(entity.signature_algorithm)
+		})).toJWK(),
+		kid: entity.id,
+		alg: entity.signature_algorithm
+	};
 }
 //#endregion
 export { getJwkRouteHandler, getJwksRouteHandler };

package/dist/adapters/http/controllers/workflows/jwks/handlers/read.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"read.mjs","names":["AsymmetricKey","JWKType","send","In","BadRequestError","NotFoundError","getJwksRouteHandler","res","repository","realmId","entities","find","where","type","RSA","EC","realm_id","order","priority","promises","filter","entity","encryption_key","map","fromBase64","format","key","options","buildImportOptionsForJWTAlgorithm","signature_algorithm","then","container","toJWK","kid","id","alg","keys","Promise","all","getJwkRouteHandler","keyId","findOne","jsonWebKey"],"sources":["../../../../../../../src/adapters/http/controllers/workflows/jwks/handlers/read.ts"],"sourcesContent":["/*\n * Copyright (c) 2022-2022.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport { AsymmetricKey } from '@authup/server-kit';\nimport { JWKType } from '@authup/specs';\nimport type { Response } from 'routup';\nimport { send } from 'routup';\nimport type { Repository } from 'typeorm';\nimport { In } from 'typeorm';\nimport { BadRequestError, NotFoundError } from '@ebec/http';\nimport type { KeyEntity } from '../../../../../database/domains/index.ts';\n\nexport async function getJwksRouteHandler(\n    res: Response,\n    repository: Repository<KeyEntity>,\n    realmId?: string,\n) : Promise<any> {\n    const entities = await repository.find({\n        where: {\n            type: In([JWKType.RSA, JWKType.EC]),\n            ...(realmId ? { realm_id: realmId } : {}),\n        },\n        order: { priority: 'DESC' },\n    });\n\n    const promises = entities\n        .filter((entity) => !!entity.encryption_key)\n        .map(\n            (entity) => AsymmetricKey\n                .fromBase64({\n                    format: 'spki',\n                    key: entity.encryption_key!,\n                    options: AsymmetricKey.buildImportOptionsForJWTAlgorithm(entity.signature_algorithm),\n                })\n                .then((container) => container.toJWK())\n                .then((key) => ({\n                    ...key,\n                    kid: entity.id,\n                    alg: entity.signature_algorithm,\n                })),\n        );\n\n    const keys = await Promise.all(promises);\n\n    return send(res, { keys });\n}\n\nexport async function getJwkRouteHandler(\n    res: Response,\n    repository: Repository<KeyEntity>,\n    keyId: string,\n    realmId?: string,\n) : Promise<any> {\n    const entity = await repository.findOne({\n        where: {\n            type: In([JWKType.RSA, JWKType.EC]),\n            id: keyId,\n            ...(realmId ? { realm_id: realmId } : {}),\n        },\n    });\n\n    if (!entity) {\n        throw new NotFoundError();\n    }\n\n    if (!entity.encryption_key) {\n        throw new BadRequestError('The encryption key does not exist');\n    }\n\n    const container = await AsymmetricKey\n        .fromBase64({\n            format: 'spki',\n            key: entity.encryption_key!,\n            options: AsymmetricKey.buildImportOptionsForJWTAlgorithm(entity.signature_algorithm),\n        });\n\n    const jsonWebKey = await container.toJWK();\n    jsonWebKey.alg = entity.signature_algorithm;\n\n    return send(res, {\n        ...jsonWebKey,\n        kid: entity.id,\n    });\n}\n"],"mappings":";;;;;;AAgBA,eAAsBM,oBAClBC,KACAC,YACAC,SAAgB;CAUhB,MAAMU,YAAWT,MARMF,WAAWG,KAAK;EACnCC,OAAO;GACHC,MAAMV,GAAG,CAACF,QAAQa,KAAKb,QAAQc,GAAG,CAAA;GAClC,GAAIN,UAAU,EAAEO,UAAUP,SAAQ,GAAI,EAAE;GAC5C;EACAQ,OAAO,EAAEC,UAAU,QAAO;EAC9B,CAAA,EAGKE,QAAQC,WAAW,CAAC,CAACA,OAAOC,eAAc,CAC1CC,KACIF,WAAWrB,cACPwB,WAAW;EACRC,QAAQ;EACRC,KAAKL,OAAOC;EACZK,SAAS3B,cAAc4B,kCAAkCP,OAAOQ,oBAAmB;EACvF,CAAA,CACCC,MAAMC,cAAcA,UAAUC,OAAK,CAAA,CACnCF,MAAMJ,SAAS;EACZ,GAAGA;EACHO,KAAKZ,OAAOa;EACZC,KAAKd,OAAOQ;EAChB,EAAA,CAAA;AAKZ,QAAO3B,KAAKK,KAAK,EAAE6B,MAAAA,MAFAC,QAAQC,IAAInB,SAAAA,EAEP,CAAA;;AAG5B,eAAsBoB,mBAClBhC,KACAC,YACAgC,OACA/B,SAAgB;CAEhB,MAAMY,SAAS,MAAMb,WAAWiC,QAAQ,EACpC7B,OAAO;EACHC,MAAMV,GAAG,CAACF,QAAQa,KAAKb,QAAQc,GAAG,CAAA;EAClCmB,IAAIM;EACJ,GAAI/B,UAAU,EAAEO,UAAUP,SAAQ,GAAI,EAAE;EAC5C,EACJ,CAAA;AAEA,KAAI,CAACY,OACD,OAAM,IAAIhB,eAAAA;AAGd,KAAI,CAACgB,OAAOC,eACR,OAAM,IAAIlB,gBAAgB,oCAAA;CAU9B,MAAMsC,aAAa,OAAMX,MAPD/B,cACnBwB,WAAW;EACRC,QAAQ;EACRC,KAAKL,OAAOC;EACZK,SAAS3B,cAAc4B,kCAAkCP,OAAOQ,oBAAmB;EACvF,CAAA,EAE+BG,OAAK;AACxCU,YAAWP,MAAMd,OAAOQ;AAExB,QAAO3B,KAAKK,KAAK;EACb,GAAGmC;EACHT,KAAKZ,OAAOa;EAChB,CAAA"}
+{"version":3,"file":"read.mjs","names":["AsymmetricKey","JWKType","In","BadRequestError","NotFoundError","getJwksRouteHandler","repository","realmId","entities","find","where","type","RSA","EC","realm_id","order","priority","promises","filter","entity","encryption_key","map","fromBase64","format","key","options","buildImportOptionsForJWTAlgorithm","signature_algorithm","then","container","toJWK","kid","id","alg","keys","Promise","all","getJwkRouteHandler","keyId","findOne","jsonWebKey"],"sources":["../../../../../../../src/adapters/http/controllers/workflows/jwks/handlers/read.ts"],"sourcesContent":["/*\n * Copyright (c) 2022-2022.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport { AsymmetricKey } from '@authup/server-kit';\nimport type { OAuth2JsonWebKey } from '@authup/specs';\nimport { JWKType } from '@authup/specs';\nimport type { Repository } from 'typeorm';\nimport { In } from 'typeorm';\nimport { BadRequestError, NotFoundError } from '@ebec/http';\nimport type { KeyEntity } from '../../../../../database/domains/index.ts';\n\nexport async function getJwksRouteHandler(\n    repository: Repository<KeyEntity>,\n    realmId?: string,\n) : Promise<{ keys: OAuth2JsonWebKey[] }> {\n    const entities = await repository.find({\n        where: {\n            type: In([JWKType.RSA, JWKType.EC]),\n            ...(realmId ? { realm_id: realmId } : {}),\n        },\n        order: { priority: 'DESC' },\n    });\n\n    const promises = entities\n        .filter((entity): entity is KeyEntity & { encryption_key: string } => !!entity.encryption_key)\n        .map(\n            (entity) => AsymmetricKey\n                .fromBase64({\n                    format: 'spki',\n                    key: entity.encryption_key,\n                    options: AsymmetricKey.buildImportOptionsForJWTAlgorithm(entity.signature_algorithm),\n                })\n                .then((container) => container.toJWK())\n                .then((key) => ({\n                    ...key,\n                    kid: entity.id,\n                    alg: entity.signature_algorithm,\n                })),\n        );\n\n    const keys = await Promise.all(promises);\n\n    return { keys };\n}\n\nexport async function getJwkRouteHandler(\n    repository: Repository<KeyEntity>,\n    keyId: string,\n    realmId?: string,\n) : Promise<OAuth2JsonWebKey> {\n    const entity = await repository.findOne({\n        where: {\n            type: In([JWKType.RSA, JWKType.EC]),\n            id: keyId,\n            ...(realmId ? { realm_id: realmId } : {}),\n        },\n    });\n\n    if (!entity) {\n        throw new NotFoundError();\n    }\n\n    if (!entity.encryption_key) {\n        throw new BadRequestError('The encryption key does not exist');\n    }\n\n    const container = await AsymmetricKey\n        .fromBase64({\n            format: 'spki',\n            key: entity.encryption_key,\n            options: AsymmetricKey.buildImportOptionsForJWTAlgorithm(entity.signature_algorithm),\n        });\n\n    const jsonWebKey = await container.toJWK();\n\n    return {\n        ...jsonWebKey,\n        kid: entity.id,\n        alg: entity.signature_algorithm,\n    };\n}\n"],"mappings":";;;;;AAeA,eAAsBK,oBAClBC,YACAC,SAAgB;CAUhB,MAAMU,YAAWT,MARMF,WAAWG,KAAK;EACnCC,OAAO;GACHC,MAAMT,GAAG,CAACD,QAAQW,KAAKX,QAAQY,GAAG,CAAA;GAClC,GAAIN,UAAU,EAAEO,UAAUP,SAAQ,GAAI,EAAE;GAC5C;EACAQ,OAAO,EAAEC,UAAU,QAAO;EAC9B,CAAA,EAGKE,QAAQC,WAA6D,CAAC,CAACA,OAAOC,eAAc,CAC5FC,KACIF,WAAWnB,cACPsB,WAAW;EACRC,QAAQ;EACRC,KAAKL,OAAOC;EACZK,SAASzB,cAAc0B,kCAAkCP,OAAOQ,oBAAmB;EACvF,CAAA,CACCC,MAAMC,cAAcA,UAAUC,OAAK,CAAA,CACnCF,MAAMJ,SAAS;EACZ,GAAGA;EACHO,KAAKZ,OAAOa;EACZC,KAAKd,OAAOQ;EAChB,EAAA,CAAA;AAKZ,QAAO,EAAEO,MAAAA,MAFUC,QAAQC,IAAInB,SAAAA,EAEjB;;AAGlB,eAAsBoB,mBAClB/B,YACAgC,OACA/B,SAAgB;CAEhB,MAAMY,SAAS,MAAMb,WAAWiC,QAAQ,EACpC7B,OAAO;EACHC,MAAMT,GAAG,CAACD,QAAQW,KAAKX,QAAQY,GAAG,CAAA;EAClCmB,IAAIM;EACJ,GAAI/B,UAAU,EAAEO,UAAUP,SAAQ,GAAI,EAAE;EAC5C,EACJ,CAAA;AAEA,KAAI,CAACY,OACD,OAAM,IAAIf,eAAAA;AAGd,KAAI,CAACe,OAAOC,eACR,OAAM,IAAIjB,gBAAgB,oCAAA;AAY9B,QAAO;EACH,GAAGqC,OAHkBX,MAPD7B,cACnBsB,WAAW;GACRC,QAAQ;GACRC,KAAKL,OAAOC;GACZK,SAASzB,cAAc0B,kCAAkCP,OAAOQ,oBAAmB;GACvF,CAAA,EAE+BG,OAAK;EAIpCC,KAAKZ,OAAOa;EACZC,KAAKd,OAAOQ;EAChB"}

package/dist/adapters/http/controllers/workflows/jwks/module.d.ts

@@ -1,4 +1,5 @@
-import type { Request, Response } from 'routup';
+import type { OAuth2JsonWebKey } from '@authup/specs';
+import type { IRoutupEvent } from 'routup';
 import type { Repository } from 'typeorm';
 import type { KeyEntity } from '../../../../database/domains/index.ts';
 export type JwkControllerContext = {
@@ -7,7 +8,9 @@ export type JwkControllerContext = {
 export declare class JwkController {
     protected repository: Repository<KeyEntity>;
     constructor(ctx: JwkControllerContext);
-    getManyJwks(req: Request, res: Response): Promise<any>;
-    getOneJwks(id: string, req: Request, res: Response): Promise<any>;
+    getManyJwks(event: IRoutupEvent): Promise<{
+        keys: OAuth2JsonWebKey[];
+    }>;
+    getOneJwks(id: string): Promise<OAuth2JsonWebKey>;
 }
 //# sourceMappingURL=module.d.ts.map

package/dist/adapters/http/controllers/workflows/jwks/module.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"module.d.ts","sourceRoot":"","sources":["../../../../../../src/adapters/http/controllers/workflows/jwks/module.ts"],"names":[],"mappings":"AAgBA,OAAO,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,QAAQ,CAAC;AAEhD,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AAG1C,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,uCAAuC,CAAC;AAGvE,MAAM,MAAM,oBAAoB,GAAG;IAC/B,UAAU,EAAE,UAAU,CAAC,SAAS,CAAC,CAAA;CACpC,CAAC;AAEF,qBACa,aAAa;IACtB,SAAS,CAAC,UAAU,EAAE,UAAU,CAAC,SAAS,CAAC,CAAC;gBAEhC,GAAG,EAAE,oBAAoB;IAK/B,WAAW,CACD,GAAG,EAAE,OAAO,EACX,GAAG,EAAE,QAAQ,GAC3B,OAAO,CAAC,GAAG,CAAC;IAkCT,UAAU,CACC,EAAE,EAAE,MAAM,EACX,GAAG,EAAE,OAAO,EACX,GAAG,EAAE,QAAQ,GAC3B,OAAO,CAAC,GAAG,CAAC;CA+BlB"}
+{"version":3,"file":"module.d.ts","sourceRoot":"","sources":["../../../../../../src/adapters/http/controllers/workflows/jwks/module.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,eAAe,CAAC;AAStD,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,QAAQ,CAAC;AAC3C,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AAG1C,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,uCAAuC,CAAC;AAGvE,MAAM,MAAM,oBAAoB,GAAG;IAC/B,UAAU,EAAE,UAAU,CAAC,SAAS,CAAC,CAAA;CACpC,CAAC;AAEF,qBACa,aAAa;IACtB,SAAS,CAAC,UAAU,EAAE,UAAU,CAAC,SAAS,CAAC,CAAC;gBAEhC,GAAG,EAAE,oBAAoB;IAK/B,WAAW,CACD,KAAK,EAAE,YAAY,GAChC,OAAO,CAAC;QAAE,IAAI,EAAE,gBAAgB,EAAE,CAAA;KAAE,CAAC;IAkClC,UAAU,CAAc,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,gBAAgB,CAAC;CA+BvE"}

package/dist/adapters/http/controllers/workflows/jwks/module.mjs

@@ -4,8 +4,7 @@ import { In } from "typeorm";
 import { AsymmetricKey } from "@authup/server-kit";
 import { JWKType } from "@authup/specs";
 import { BadRequestError, NotFoundError } from "@ebec/http";
-import { send } from "routup";
-import { DController, DGet, DPath, DRequest, DResponse } from "@routup/decorators";
+import { DContext, DController, DGet, DPath } from "@routup/decorators";
 //#region src/adapters/http/controllers/workflows/jwks/module.ts
 function _ts_decorate(decorators, target, key, desc) {
 	var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
@@ -26,8 +25,8 @@ var JwkController = class {
 	constructor(ctx) {
 		this.repository = ctx.repository;
 	}
-	async getManyJwks(req, res) {
-		const realmId = getRequestStringParam(req, "realmId");
+	async getManyJwks(event) {
+		const realmId = getRequestStringParam(event, "realmId");
 		const promises = (await this.repository.find({
 			where: {
 				type: In([JWKType.RSA, JWKType.EC]),
@@ -43,46 +42,38 @@ var JwkController = class {
 			kid: entity.id,
 			alg: entity.signature_algorithm
 		})));
-		return send(res, { keys: await Promise.all(promises) });
+		return { keys: await Promise.all(promises) };
 	}
-	async getOneJwks(id, req, res) {
+	async getOneJwks(id) {
 		const entity = await this.repository.findOne({ where: {
 			type: In([JWKType.RSA, JWKType.EC]),
 			id
 		} });
 		if (!entity) throw new NotFoundError();
 		if (!entity.encryption_key) throw new BadRequestError("The encryption key does not exist");
-		const jsonWebKey = await (await AsymmetricKey.fromBase64({
-			format: "spki",
-			key: entity.encryption_key,
-			options: AsymmetricKey.buildImportOptionsForJWTAlgorithm(entity.signature_algorithm)
-		})).toJWK();
-		jsonWebKey.alg = entity.signature_algorithm;
-		return send(res, {
-			...jsonWebKey,
-			kid: entity.id
-		});
+		return {
+			...await (await AsymmetricKey.fromBase64({
+				format: "spki",
+				key: entity.encryption_key,
+				options: AsymmetricKey.buildImportOptionsForJWTAlgorithm(entity.signature_algorithm)
+			})).toJWK(),
+			kid: entity.id,
+			alg: entity.signature_algorithm
+		};
 	}
 };
 _ts_decorate([
 	DGet("/jwks", []),
-	_ts_param(0, DRequest()),
-	_ts_param(1, DResponse()),
+	_ts_param(0, DContext()),
 	_ts_metadata("design:type", Function),
-	_ts_metadata("design:paramtypes", [typeof Request === "undefined" ? Object : Request, typeof Response === "undefined" ? Object : Response]),
+	_ts_metadata("design:paramtypes", [typeof IRoutupEvent === "undefined" ? Object : IRoutupEvent]),
 	_ts_metadata("design:returntype", Promise)
 ], JwkController.prototype, "getManyJwks", null);
 _ts_decorate([
 	DGet("/jwks/:id", []),
 	_ts_param(0, DPath("id")),
-	_ts_param(1, DRequest()),
-	_ts_param(2, DResponse()),
 	_ts_metadata("design:type", Function),
-	_ts_metadata("design:paramtypes", [
-		String,
-		typeof Request === "undefined" ? Object : Request,
-		typeof Response === "undefined" ? Object : Response
-	]),
+	_ts_metadata("design:paramtypes", [String]),
 	_ts_metadata("design:returntype", Promise)
 ], JwkController.prototype, "getOneJwks", null);
 JwkController = _ts_decorate([

package/dist/adapters/http/controllers/workflows/jwks/module.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"module.mjs","names":["JWKType","AsymmetricKey","DController","DGet","DPath","DRequest","DResponse","send","In","BadRequestError","NotFoundError","getRequestStringParam","JwkController","repository","ctx","getManyJwks","req","res","realmId","entities","find","where","type","RSA","EC","realm_id","order","priority","promises","filter","entity","encryption_key","map","fromBase64","format","key","options","buildImportOptionsForJWTAlgorithm","signature_algorithm","then","container","toJWK","kid","id","alg","keys","Promise","all","getOneJwks","findOne","jsonWebKey"],"sources":["../../../../../../src/adapters/http/controllers/workflows/jwks/module.ts"],"sourcesContent":["/*\n * Copyright (c) 2024.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport { JWKType } from '@authup/specs';\nimport { AsymmetricKey } from '@authup/server-kit';\nimport {\n    DController, \n    DGet, \n    DPath, \n    DRequest, \n    DResponse,\n} from '@routup/decorators';\nimport type { Request, Response } from 'routup';\nimport { send } from 'routup';\nimport type { Repository } from 'typeorm';\nimport { In } from 'typeorm';\nimport { BadRequestError, NotFoundError } from '@ebec/http';\nimport type { KeyEntity } from '../../../../database/domains/index.ts';\nimport { getRequestStringParam } from '../../../request/index.ts';\n\nexport type JwkControllerContext = {\n    repository: Repository<KeyEntity>\n};\n\n@DController('')\nexport class JwkController {\n    protected repository: Repository<KeyEntity>;\n\n    constructor(ctx: JwkControllerContext) {\n        this.repository = ctx.repository;\n    }\n\n    @DGet('/jwks', [])\n    async getManyJwks(\n        @DRequest() req: Request,\n        @DResponse() res: Response,\n    ): Promise<any> {\n        const realmId = getRequestStringParam(req, 'realmId');\n\n        const entities = await this.repository.find({\n            where: {\n                type: In([JWKType.RSA, JWKType.EC]),\n                ...(realmId ? { realm_id: realmId } : {}),\n            },\n            order: { priority: 'DESC' },\n        });\n\n        const promises = entities\n            .filter((entity) => !!entity.encryption_key)\n            .map(\n                (entity) => AsymmetricKey\n                    .fromBase64({\n                        format: 'spki',\n                        key: entity.encryption_key!,\n                        options: AsymmetricKey.buildImportOptionsForJWTAlgorithm(entity.signature_algorithm),\n                    })\n                    .then((container) => container.toJWK())\n                    .then((key) => ({\n                        ...key,\n                        kid: entity.id,\n                        alg: entity.signature_algorithm,\n                    })),\n            );\n\n        const keys = await Promise.all(promises);\n\n        return send(res, { keys });\n    }\n\n    @DGet('/jwks/:id', [])\n    async getOneJwks(\n        @DPath('id') id: string,\n        @DRequest() req: Request,\n        @DResponse() res: Response,\n    ): Promise<any> {\n        const entity = await this.repository.findOne({\n            where: {\n                type: In([JWKType.RSA, JWKType.EC]),\n                id,\n            },\n        });\n\n        if (!entity) {\n            throw new NotFoundError();\n        }\n\n        if (!entity.encryption_key) {\n            throw new BadRequestError('The encryption key does not exist');\n        }\n\n        const container = await AsymmetricKey\n            .fromBase64({\n                format: 'spki',\n                key: entity.encryption_key!,\n                options: AsymmetricKey.buildImportOptionsForJWTAlgorithm(entity.signature_algorithm),\n            });\n\n        const jsonWebKey = await container.toJWK();\n        jsonWebKey.alg = entity.signature_algorithm;\n\n        return send(res, {\n            ...jsonWebKey,\n            kid: entity.id,\n        });\n    }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;AA6BA,IAAaY,gBAAb,MAAaA;CACCC;CAEV,YAAYC,KAA2B;AACnC,OAAKD,aAAaC,IAAID;;CAG1B,MACME,YACF,KACA,KACY;EACZ,MAAMG,UAAUP,sBAAsBK,KAAK,UAAA;EAU3C,MAAMY,YAAWT,MARM,KAAKN,WAAWO,KAAK;GACxCC,OAAO;IACHC,MAAMd,GAAG,CAACR,QAAQuB,KAAKvB,QAAQwB,GAAG,CAAA;IAClC,GAAIN,UAAU,EAAEO,UAAUP,SAAQ,GAAI,EAAE;IAC5C;GACAQ,OAAO,EAAEC,UAAU,QAAO;GAC9B,CAAA,EAGKE,QAAQC,WAAW,CAAC,CAACA,OAAOC,eAAc,CAC1CC,KACIF,WAAW7B,cACPgC,WAAW;GACRC,QAAQ;GACRC,KAAKL,OAAOC;GACZK,SAASnC,cAAcoC,kCAAkCP,OAAOQ,oBAAmB;GACvF,CAAA,CACCC,MAAMC,cAAcA,UAAUC,OAAK,CAAA,CACnCF,MAAMJ,SAAS;GACZ,GAAGA;GACHO,KAAKZ,OAAOa;GACZC,KAAKd,OAAOQ;GAChB,EAAA,CAAA;AAKZ,SAAO/B,KAAKU,KAAK,EAAE4B,MAAAA,MAFAC,QAAQC,IAAInB,SAAAA,EAEP,CAAA;;CAG5B,MACMoB,WACF,IACA,KACA,KACY;EACZ,MAAMlB,SAAS,MAAM,KAAKjB,WAAWoC,QAAQ,EACzC5B,OAAO;GACHC,MAAMd,GAAG,CAACR,QAAQuB,KAAKvB,QAAQwB,GAAG,CAAA;GAClCmB;GACJ,EACJ,CAAA;AAEA,MAAI,CAACb,OACD,OAAM,IAAIpB,eAAAA;AAGd,MAAI,CAACoB,OAAOC,eACR,OAAM,IAAItB,gBAAgB,oCAAA;EAU9B,MAAMyC,aAAa,OAAMV,MAPDvC,cACnBgC,WAAW;GACRC,QAAQ;GACRC,KAAKL,OAAOC;GACZK,SAASnC,cAAcoC,kCAAkCP,OAAOQ,oBAAmB;GACvF,CAAA,EAE+BG,OAAK;AACxCS,aAAWN,MAAMd,OAAOQ;AAExB,SAAO/B,KAAKU,KAAK;GACb,GAAGiC;GACHR,KAAKZ,OAAOa;GAChB,CAAA"}
+{"version":3,"file":"module.mjs","names":["JWKType","AsymmetricKey","DContext","DController","DGet","DPath","In","BadRequestError","NotFoundError","getRequestStringParam","JwkController","repository","ctx","getManyJwks","event","realmId","entities","find","where","type","RSA","EC","realm_id","order","priority","promises","filter","entity","encryption_key","map","fromBase64","format","key","options","buildImportOptionsForJWTAlgorithm","signature_algorithm","then","container","toJWK","kid","id","alg","keys","Promise","all","getOneJwks","findOne","jsonWebKey"],"sources":["../../../../../../src/adapters/http/controllers/workflows/jwks/module.ts"],"sourcesContent":["/*\n * Copyright (c) 2024.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport type { OAuth2JsonWebKey } from '@authup/specs';\nimport { JWKType } from '@authup/specs';\nimport { AsymmetricKey } from '@authup/server-kit';\nimport {\n    DContext,\n    DController,\n    DGet,\n    DPath,\n} from '@routup/decorators';\nimport type { IRoutupEvent } from 'routup';\nimport type { Repository } from 'typeorm';\nimport { In } from 'typeorm';\nimport { BadRequestError, NotFoundError } from '@ebec/http';\nimport type { KeyEntity } from '../../../../database/domains/index.ts';\nimport { getRequestStringParam } from '../../../request/index.ts';\n\nexport type JwkControllerContext = {\n    repository: Repository<KeyEntity>\n};\n\n@DController('')\nexport class JwkController {\n    protected repository: Repository<KeyEntity>;\n\n    constructor(ctx: JwkControllerContext) {\n        this.repository = ctx.repository;\n    }\n\n    @DGet('/jwks', [])\n    async getManyJwks(\n        @DContext() event: IRoutupEvent,\n    ): Promise<{ keys: OAuth2JsonWebKey[] }> {\n        const realmId = getRequestStringParam(event, 'realmId');\n\n        const entities = await this.repository.find({\n            where: {\n                type: In([JWKType.RSA, JWKType.EC]),\n                ...(realmId ? { realm_id: realmId } : {}),\n            },\n            order: { priority: 'DESC' },\n        });\n\n        const promises = entities\n            .filter((entity): entity is KeyEntity & { encryption_key: string } => !!entity.encryption_key)\n            .map(\n                (entity) => AsymmetricKey\n                    .fromBase64({\n                        format: 'spki',\n                        key: entity.encryption_key,\n                        options: AsymmetricKey.buildImportOptionsForJWTAlgorithm(entity.signature_algorithm),\n                    })\n                    .then((container) => container.toJWK())\n                    .then((key) => ({\n                        ...key,\n                        kid: entity.id,\n                        alg: entity.signature_algorithm,\n                    })),\n            );\n\n        const keys = await Promise.all(promises);\n\n        return { keys };\n    }\n\n    @DGet('/jwks/:id', [])\n    async getOneJwks(@DPath('id') id: string): Promise<OAuth2JsonWebKey> {\n        const entity = await this.repository.findOne({\n            where: {\n                type: In([JWKType.RSA, JWKType.EC]),\n                id,\n            },\n        });\n\n        if (!entity) {\n            throw new NotFoundError();\n        }\n\n        if (!entity.encryption_key) {\n            throw new BadRequestError('The encryption key does not exist');\n        }\n\n        const container = await AsymmetricKey\n            .fromBase64({\n                format: 'spki',\n                key: entity.encryption_key,\n                options: AsymmetricKey.buildImportOptionsForJWTAlgorithm(entity.signature_algorithm),\n            });\n\n        const jsonWebKey = await container.toJWK();\n\n        return {\n            ...jsonWebKey,\n            kid: entity.id,\n            alg: entity.signature_algorithm,\n        };\n    }\n}\n"],"mappings":";;;;;;;;AAKC,SAAA,aAAA,YAAA,QAAA,KAAA,MAAA;;;;;;;;;;;;;;AAuBD,IAAaU,gBAAb,MAAaA;CACCC;CAEV,YAAYC,KAA2B;AACnC,OAAKD,aAAaC,IAAID;;CAG1B,MACME,YACF,OACqC;EACrC,MAAME,UAAUN,sBAAsBK,OAAO,UAAA;EAU7C,MAAMW,YAAWT,MARM,KAAKL,WAAWM,KAAK;GACxCC,OAAO;IACHC,MAAMb,GAAG,CAACN,QAAQoB,KAAKpB,QAAQqB,GAAG,CAAA;IAClC,GAAIN,UAAU,EAAEO,UAAUP,SAAQ,GAAI,EAAE;IAC5C;GACAQ,OAAO,EAAEC,UAAU,QAAO;GAC9B,CAAA,EAGKE,QAAQC,WAA6D,CAAC,CAACA,OAAOC,eAAc,CAC5FC,KACIF,WAAW1B,cACP6B,WAAW;GACRC,QAAQ;GACRC,KAAKL,OAAOC;GACZK,SAAShC,cAAciC,kCAAkCP,OAAOQ,oBAAmB;GACvF,CAAA,CACCC,MAAMC,cAAcA,UAAUC,OAAK,CAAA,CACnCF,MAAMJ,SAAS;GACZ,GAAGA;GACHO,KAAKZ,OAAOa;GACZC,KAAKd,OAAOQ;GAChB,EAAA,CAAA;AAKZ,SAAO,EAAEO,MAAAA,MAFUC,QAAQC,IAAInB,SAAAA,EAEjB;;CAGlB,MACMoB,WAAW,IAAoD;EACjE,MAAMlB,SAAS,MAAM,KAAKhB,WAAWmC,QAAQ,EACzC5B,OAAO;GACHC,MAAMb,GAAG,CAACN,QAAQoB,KAAKpB,QAAQqB,GAAG,CAAA;GAClCmB;GACJ,EACJ,CAAA;AAEA,MAAI,CAACb,OACD,OAAM,IAAInB,eAAAA;AAGd,MAAI,CAACmB,OAAOC,eACR,OAAM,IAAIrB,gBAAgB,oCAAA;AAY9B,SAAO;GACH,GAAGwC,OAHkBV,MAPDpC,cACnB6B,WAAW;IACRC,QAAQ;IACRC,KAAKL,OAAOC;IACZK,SAAShC,cAAciC,kCAAkCP,OAAOQ,oBAAmB;IACvF,CAAA,EAE+BG,OAAK;GAIpCC,KAAKZ,OAAOa;GACZC,KAAKd,OAAOQ;GAChB"}

package/dist/adapters/http/controllers/workflows/openid/module.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"module.d.ts","sourceRoot":"","sources":["../../../../../../src/adapters/http/controllers/workflows/openid/module.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,eAAe,CAAC;AAI5D,MAAM,MAAM,uBAAuB,GAAG;IAClC,OAAO,EAAE,MAAM,CAAA;CAClB,CAAC;AAEF,qBACa,gBAAgB;IACzB,SAAS,CAAC,OAAO,EAAE,uBAAuB,CAAC;gBAE/B,OAAO,EAAE,uBAAuB;IAKtC,sBAAsB,IAAI,OAAO,CAAC,sBAAsB,CAAC;CAyClE"}
+{"version":3,"file":"module.d.ts","sourceRoot":"","sources":["../../../../../../src/adapters/http/controllers/workflows/openid/module.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,eAAe,CAAC;AAQ5D,MAAM,MAAM,uBAAuB,GAAG;IAClC,OAAO,EAAE,MAAM,CAAA;CAClB,CAAC;AAEF,qBACa,gBAAgB;IACzB,SAAS,CAAC,OAAO,EAAE,uBAAuB,CAAC;gBAE/B,OAAO,EAAE,uBAAuB;IAKtC,sBAAsB,IAAI,OAAO,CAAC,sBAAsB,CAAC;CA0ClE"}

package/dist/adapters/http/controllers/workflows/openid/module.mjs

@@ -1,3 +1,5 @@
+import { resolveURL } from "../../../../../utils/url.mjs";
+import "../../../../../utils/index.mjs";
 import { OAuth2AuthorizationResponseType } from "@authup/specs";
 import { DController, DGet } from "@routup/decorators";
 //#region src/adapters/http/controllers/workflows/openid/module.ts
@@ -16,10 +18,11 @@ var OpenIDController = class {
 		this.options = options;
 	}
 	async getOpenIdConfiguration() {
+		const { baseURL } = this.options;
 		return {
-			issuer: this.options.baseURL,
-			authorization_endpoint: new URL("authorize", this.options.baseURL).href,
-			jwks_uri: new URL("jwks", this.options.baseURL).href,
+			issuer: baseURL,
+			authorization_endpoint: resolveURL(baseURL, "authorize"),
+			jwks_uri: resolveURL(baseURL, "jwks"),
 			response_types_supported: [
 				OAuth2AuthorizationResponseType.CODE,
 				OAuth2AuthorizationResponseType.TOKEN,
@@ -35,11 +38,11 @@ var OpenIDController = class {
 				"RS512",
 				"none"
 			],
-			token_endpoint: new URL("token", this.options.baseURL).href,
-			introspection_endpoint: new URL("token/introspect", this.options.baseURL).href,
-			revocation_endpoint: new URL("token", this.options.baseURL).href,
+			token_endpoint: resolveURL(baseURL, "token"),
+			introspection_endpoint: resolveURL(baseURL, "token/introspect"),
+			revocation_endpoint: resolveURL(baseURL, "token"),
 			service_documentation: "https://authup.org/",
-			userinfo_endpoint: new URL("users/@me", this.options.baseURL).href
+			userinfo_endpoint: resolveURL(baseURL, "users/@me")
 		};
 	}
 };

package/dist/adapters/http/controllers/workflows/openid/module.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"module.mjs","names":["OAuth2AuthorizationResponseType","DController","DGet","OpenIDController","options","getOpenIdConfiguration","issuer","baseURL","authorization_endpoint","URL","href","jwks_uri","response_types_supported","CODE","TOKEN","NONE","subject_types_supported","id_token_signing_alg_values_supported","token_endpoint","introspection_endpoint","revocation_endpoint","service_documentation","userinfo_endpoint"],"sources":["../../../../../../src/adapters/http/controllers/workflows/openid/module.ts"],"sourcesContent":["/*\n * Copyright (c) 2024.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport type { OpenIDProviderMetadata } from '@authup/specs';\nimport { OAuth2AuthorizationResponseType } from '@authup/specs';\nimport { DController, DGet } from '@routup/decorators';\n\nexport type OpenIDControllerOptions = {\n    baseURL: string\n};\n\n@DController('')\nexport class OpenIDController {\n    protected options: OpenIDControllerOptions;\n\n    constructor(options: OpenIDControllerOptions) {\n        this.options = options;\n    }\n\n    @DGet('/.well-known/openid-configuration', [])\n    async getOpenIdConfiguration(): Promise<OpenIDProviderMetadata> {\n        return {\n            issuer: this.options.baseURL,\n\n            authorization_endpoint: new URL('authorize', this.options.baseURL).href,\n\n            jwks_uri: new URL('jwks', this.options.baseURL).href,\n\n            response_types_supported: [\n                OAuth2AuthorizationResponseType.CODE,\n                OAuth2AuthorizationResponseType.TOKEN,\n                OAuth2AuthorizationResponseType.NONE,\n            ],\n\n            subject_types_supported: [\n                'public',\n            ],\n\n            id_token_signing_alg_values_supported: [\n                'HS256', \n                'HS384', \n                'HS512', \n                'RS256', \n                'RS384', \n                'RS512', \n                'none',\n            ],\n\n            token_endpoint: new URL('token', this.options.baseURL).href,\n\n            introspection_endpoint: new URL('token/introspect', this.options.baseURL).href,\n\n            revocation_endpoint: new URL('token', this.options.baseURL).href,\n\n            // -----------------------------------------------------------\n\n            service_documentation: 'https://authup.org/',\n\n            userinfo_endpoint: new URL('users/@me', this.options.baseURL).href,\n        };\n    }\n}\n"],"mappings":";;;AAKC,SAAA,aAAA,YAAA,QAAA,KAAA,MAAA;;;;;;;;;AAWD,IAAaG,mBAAb,MAAaA;CACCC;CAEV,YAAYA,SAAkC;AAC1C,OAAKA,UAAUA;;CAGnB,MACMC,yBAA0D;AAC5D,SAAO;GACHC,QAAQ,KAAKF,QAAQG;GAErBC,wBAAwB,IAAIC,IAAI,aAAa,KAAKL,QAAQG,QAAO,CAAEG;GAEnEC,UAAU,IAAIF,IAAI,QAAQ,KAAKL,QAAQG,QAAO,CAAEG;GAEhDE,0BAA0B;IACtBZ,gCAAgCa;IAChCb,gCAAgCc;IAChCd,gCAAgCe;IACnC;GAEDC,yBAAyB,CACrB,SACH;GAEDC,uCAAuC;IACnC;IACA;IACA;IACA;IACA;IACA;IACA;IACH;GAEDC,gBAAgB,IAAIT,IAAI,SAAS,KAAKL,QAAQG,QAAO,CAAEG;GAEvDS,wBAAwB,IAAIV,IAAI,oBAAoB,KAAKL,QAAQG,QAAO,CAAEG;GAE1EU,qBAAqB,IAAIX,IAAI,SAAS,KAAKL,QAAQG,QAAO,CAAEG;GAI5DW,uBAAuB;GAEvBC,mBAAmB,IAAIb,IAAI,aAAa,KAAKL,QAAQG,QAAO,CAAEG;GAClE"}
+{"version":3,"file":"module.mjs","names":["OAuth2AuthorizationResponseType","DController","DGet","resolveURL","OpenIDController","options","getOpenIdConfiguration","baseURL","issuer","authorization_endpoint","jwks_uri","response_types_supported","CODE","TOKEN","NONE","subject_types_supported","id_token_signing_alg_values_supported","token_endpoint","introspection_endpoint","revocation_endpoint","service_documentation","userinfo_endpoint"],"sources":["../../../../../../src/adapters/http/controllers/workflows/openid/module.ts"],"sourcesContent":["/*\n * Copyright (c) 2024.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport type { OpenIDProviderMetadata } from '@authup/specs';\nimport { OAuth2AuthorizationResponseType } from '@authup/specs';\nimport {\n    DController,\n    DGet,\n} from '@routup/decorators';\nimport { resolveURL } from '../../../../../utils/index.ts';\n\nexport type OpenIDControllerOptions = {\n    baseURL: string\n};\n\n@DController('')\nexport class OpenIDController {\n    protected options: OpenIDControllerOptions;\n\n    constructor(options: OpenIDControllerOptions) {\n        this.options = options;\n    }\n\n    @DGet('/.well-known/openid-configuration', [])\n    async getOpenIdConfiguration(): Promise<OpenIDProviderMetadata> {\n        const { baseURL } = this.options;\n        return {\n            issuer: baseURL,\n\n            authorization_endpoint: resolveURL(baseURL, 'authorize'),\n\n            jwks_uri: resolveURL(baseURL, 'jwks'),\n\n            response_types_supported: [\n                OAuth2AuthorizationResponseType.CODE,\n                OAuth2AuthorizationResponseType.TOKEN,\n                OAuth2AuthorizationResponseType.NONE,\n            ],\n\n            subject_types_supported: [\n                'public',\n            ],\n\n            id_token_signing_alg_values_supported: [\n                'HS256',\n                'HS384',\n                'HS512',\n                'RS256',\n                'RS384',\n                'RS512',\n                'none',\n            ],\n\n            token_endpoint: resolveURL(baseURL, 'token'),\n\n            introspection_endpoint: resolveURL(baseURL, 'token/introspect'),\n\n            revocation_endpoint: resolveURL(baseURL, 'token'),\n\n            // -----------------------------------------------------------\n\n            service_documentation: 'https://authup.org/',\n\n            userinfo_endpoint: resolveURL(baseURL, 'users/@me'),\n        };\n    }\n}\n"],"mappings":";;;;;AAKC,SAAA,aAAA,YAAA,QAAA,KAAA,MAAA;;;;;;;;;AAeD,IAAaI,mBAAb,MAAaA;CACCC;CAEV,YAAYA,SAAkC;AAC1C,OAAKA,UAAUA;;CAGnB,MACMC,yBAA0D;EAC5D,MAAM,EAAEC,YAAY,KAAKF;AACzB,SAAO;GACHG,QAAQD;GAERE,wBAAwBN,WAAWI,SAAS,YAAA;GAE5CG,UAAUP,WAAWI,SAAS,OAAA;GAE9BI,0BAA0B;IACtBX,gCAAgCY;IAChCZ,gCAAgCa;IAChCb,gCAAgCc;IACnC;GAEDC,yBAAyB,CACrB,SACH;GAEDC,uCAAuC;IACnC;IACA;IACA;IACA;IACA;IACA;IACA;IACH;GAEDC,gBAAgBd,WAAWI,SAAS,QAAA;GAEpCW,wBAAwBf,WAAWI,SAAS,mBAAA;GAE5CY,qBAAqBhB,WAAWI,SAAS,QAAA;GAIzCa,uBAAuB;GAEvBC,mBAAmBlB,WAAWI,SAAS,YAAA;GAC3C"}

package/dist/adapters/http/controllers/workflows/password-forgot/module.d.ts

@@ -1,5 +1,5 @@
-import type { PasswordForgotResponse } from '@authup/core-http-kit';
-import type { Request, Response } from 'routup';
+import type { PasswordForgotPayload, PasswordForgotResponse } from '@authup/core-http-kit';
+import type { IRoutupEvent } from 'routup';
 import type { IPasswordRecoveryService } from '../../../../../core/index.ts';
 export type PasswordForgotControllerContext = {
     service: IPasswordRecoveryService;
@@ -7,6 +7,6 @@ export type PasswordForgotControllerContext = {
 export declare class PasswordForgotController {
     protected service: IPasswordRecoveryService;
     constructor(ctx: PasswordForgotControllerContext);
-    execute(data: any, req: Request, res: Response): Promise<PasswordForgotResponse>;
+    execute(data: PasswordForgotPayload, event: IRoutupEvent): Promise<PasswordForgotResponse>;
 }
 //# sourceMappingURL=module.d.ts.map

package/dist/adapters/http/controllers/workflows/password-forgot/module.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"module.d.ts","sourceRoot":"","sources":["../../../../../../src/adapters/http/controllers/workflows/password-forgot/module.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,uBAAuB,CAAC;AAQpE,OAAO,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,QAAQ,CAAC;AAEhD,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,8BAA8B,CAAC;AAE7E,MAAM,MAAM,+BAA+B,GAAG;IAC1C,OAAO,EAAE,wBAAwB,CAAC;CACrC,CAAC;AAEF,qBACa,wBAAwB;IACjC,SAAS,CAAC,OAAO,EAAE,wBAAwB,CAAC;gBAEhC,GAAG,EAAE,+BAA+B;IAK1C,OAAO,CACA,IAAI,EAAE,GAAG,EACN,GAAG,EAAE,OAAO,EACX,GAAG,EAAE,QAAQ,GAC3B,OAAO,CAAC,sBAAsB,CAAC;CAOrC"}
+{"version":3,"file":"module.d.ts","sourceRoot":"","sources":["../../../../../../src/adapters/http/controllers/workflows/password-forgot/module.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,qBAAqB,EAAE,sBAAsB,EAAE,MAAM,uBAAuB,CAAC;AAO3F,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,QAAQ,CAAC;AAC3C,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,8BAA8B,CAAC;AAE7E,MAAM,MAAM,+BAA+B,GAAG;IAC1C,OAAO,EAAE,wBAAwB,CAAC;CACrC,CAAC;AAEF,qBACa,wBAAwB;IACjC,SAAS,CAAC,OAAO,EAAE,wBAAwB,CAAC;gBAEhC,GAAG,EAAE,+BAA+B;IAK1C,OAAO,CACA,IAAI,EAAE,qBAAqB,EACxB,KAAK,EAAE,YAAY,GAChC,OAAO,CAAC,sBAAsB,CAAC;CAOrC"}