@authup/server-core 1.0.0-beta.40 → 1.0.0-beta.42

package/dist/adapters/http/controllers/workflows/authorize/module.mjs

@@ -1,17 +1,18 @@
 import { OAuth2AuthorizationCodeRequestValidator } from "../../../../../core/oauth2/authorization/code-request/validator.mjs";
 import "../../../../../core/index.mjs";
+import { readFromLocations } from "../../../request/helpers/locations.mjs";
+import "../../../request/index.mjs";
 import { HTTPOAuth2Authorizer } from "../../../adapters/oauth2/authorization/module.mjs";
 import "../../../adapters/index.mjs";
-import { ForceUserLoggedInMiddleware } from "../../../middleware/built-in/loggedin/user.mjs";
-import { UI_DIST_PATH, UI_SOURCE_PATH } from "../../../../../path.mjs";
 import { sanitizeError } from "../../../../../utils/error.mjs";
 import "../../../../../utils/index.mjs";
+import { ForceUserLoggedInMiddleware } from "../../../middleware/built-in/loggedin/user.mjs";
+import { UI_DIST_PATH, UI_SOURCE_PATH } from "../../../../../path.mjs";
+import { VITE_SERVER_STORE_KEY } from "../../../middleware/built-in/assets.mjs";
 import "../../../middleware/index.mjs";
 import path from "node:path";
 import { CodeTransformation, isCodeTransformation } from "typeorm-extension";
-import { send, useRequestParam } from "routup";
-import { RoutupContainerAdapter } from "@validup/adapter-routup";
-import { DController, DGet, DPost, DRequest, DResponse } from "@routup/decorators";
+import { DContext, DController, DGet, DPost } from "@routup/decorators";
 import { load } from "locter";
 import { URL } from "node:url";
 import fs from "node:fs";
@@ -38,8 +39,7 @@ var AuthorizeController = class {
 	constructor(ctx) {
 		this.options = ctx.options;
 		this.codeRequestVerifier = ctx.codeRequestVerifier;
-		const validator = new OAuth2AuthorizationCodeRequestValidator();
-		this.codeRequestValidator = new RoutupContainerAdapter(validator);
+		this.codeRequestValidator = new OAuth2AuthorizationCodeRequestValidator();
 		this.authorizer = new HTTPOAuth2Authorizer({
 			codeRequestVerifier: this.codeRequestVerifier,
 			accessTokenIssuer: ctx.accessTokenIssuer,
@@ -48,22 +48,23 @@ var AuthorizeController = class {
 			identityResolver: ctx.identityResolver
 		});
 	}
-	async confirm(req, res) {
-		const result = await this.authorizer.authorizeWithRequest(req);
+	async confirm(event) {
+		const result = await this.authorizer.authorizeWithRequest(event);
 		const url = new URL(result.redirectUri);
 		if (result.state) url.searchParams.set("state", result.state);
 		if (result.authorizationCode) url.searchParams.set("code", result.authorizationCode);
 		if (result.accessToken) url.searchParams.set("access_token", result.accessToken);
 		if (result.idToken) url.searchParams.set("id_token", result.idToken);
-		return send(res, { url: url.href });
+		return { url: url.href };
 	}
-	async serve(req, res) {
+	async serve(event) {
 		let codeRequest;
 		let client;
 		let scopes;
 		let error;
 		try {
-			const data = await this.codeRequestValidator.run(req, { locations: ["body", "query"] });
+			const merged = await readFromLocations(event, ["body", "query"]);
+			const data = await this.codeRequestValidator.run(merged);
 			const result = await this.codeRequestVerifier.verify(data);
 			client = result.client;
 			scopes = result.scopes;
@@ -89,9 +90,7 @@ var AuthorizeController = class {
 		let manifest;
 		let render;
 		if (isJIT) {
-			/**
-			* @type {import('vite').ViteDevServer}
-			*/ const vite = useRequestParam(req, "viteServer");
+			const vite = event.store[VITE_SERVER_STORE_KEY];
 			html = await fs.promises.readFile(path.join(UI_SOURCE_PATH, "index.html"), "utf-8");
 			html = await vite.transformIndexHtml("/", html);
 			manifest = {};
@@ -106,23 +105,23 @@ var AuthorizeController = class {
 			manifest,
 			payload
 		});
-		return send(res, html.replace("<!--preload-links-->", preloadLinks).replace("<!--app-html-->", appHtml));
+		const body = html.replace("<!--preload-links-->", preloadLinks).replace("<!--app-html-->", appHtml);
+		event.response.headers.set("content-type", "text/html; charset=utf-8");
+		return body;
 	}
 };
 _ts_decorate([
 	DPost("", [ForceUserLoggedInMiddleware]),
-	_ts_param(0, DRequest()),
-	_ts_param(1, DResponse()),
+	_ts_param(0, DContext()),
 	_ts_metadata("design:type", Function),
-	_ts_metadata("design:paramtypes", [Object, Object]),
+	_ts_metadata("design:paramtypes", [typeof IRoutupEvent === "undefined" ? Object : IRoutupEvent]),
 	_ts_metadata("design:returntype", Promise)
 ], AuthorizeController.prototype, "confirm", null);
 _ts_decorate([
 	DGet("", []),
-	_ts_param(0, DRequest()),
-	_ts_param(1, DResponse()),
+	_ts_param(0, DContext()),
 	_ts_metadata("design:type", Function),
-	_ts_metadata("design:paramtypes", [Object, Object]),
+	_ts_metadata("design:paramtypes", [typeof IRoutupEvent === "undefined" ? Object : IRoutupEvent]),
 	_ts_metadata("design:returntype", Promise)
 ], AuthorizeController.prototype, "serve", null);
 AuthorizeController = _ts_decorate([

package/dist/adapters/http/controllers/workflows/authorize/module.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"module.mjs","names":["DController","DGet","DPost","DRequest","DResponse","load","fs","path","URL","send","useRequestParam","RoutupContainerAdapter","CodeTransformation","isCodeTransformation","UI_DIST_PATH","UI_SOURCE_PATH","ForceUserLoggedInMiddleware","HTTPOAuth2Authorizer","OAuth2AuthorizationCodeRequestValidator","sanitizeError","AuthorizeController","options","codeRequestVerifier","codeRequestValidator","authorizer","ctx","validator","accessTokenIssuer","openIdTokenIssuer","codeIssuer","identityResolver","confirm","req","res","result","authorizeWithRequest","url","redirectUri","state","searchParams","set","authorizationCode","accessToken","idToken","href","serve","codeRequest","client","scopes","error","data","run","locations","verify","e","normalized","message","isJIT","JUST_IN_TIME","payload","config","baseURL","html","manifest","render","vite","promises","readFile","join","transformIndexHtml","ssrLoadModule","JSON","parse","appHtml","preloadLinks","replace"],"sources":["../../../../../../src/adapters/http/controllers/workflows/authorize/module.ts"],"sourcesContent":["/*\n * Copyright (c) 2024.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport {\n    DController, \n    DGet, \n    DPost, \n    DRequest, \n    DResponse,\n} from '@routup/decorators';\nimport { load } from 'locter';\nimport fs from 'node:fs';\nimport path from 'node:path';\nimport { URL } from 'node:url';\nimport { send, useRequestParam } from 'routup';\nimport { RoutupContainerAdapter } from '@validup/adapter-routup';\nimport type { Client, OAuth2AuthorizationCodeRequest, Scope } from '@authup/core-kit';\nimport { CodeTransformation, isCodeTransformation } from 'typeorm-extension';\nimport { UI_DIST_PATH, UI_SOURCE_PATH } from '../../../../../path.ts';\nimport { ForceUserLoggedInMiddleware } from '../../../middleware/index.ts';\nimport { HTTPOAuth2Authorizer } from '../../../adapters/index.ts';\nimport type { IOAuth2AuthorizationCodeRequestVerifier } from '../../../../../core/index.ts';\nimport { OAuth2AuthorizationCodeRequestValidator } from '../../../../../core/index.ts';\nimport { sanitizeError } from '../../../../../utils/index.ts';\nimport type { AuthorizeControllerContext, AuthorizeControllerOptions } from './types.ts';\n\n@DController('/authorize')\nexport class AuthorizeController {\n    // todo: maybe /realms/<realm>/protocol/openid-connect/authorize\n    // todo: maybe /realms/<realm>/[...]/authorize\n\n    protected options: AuthorizeControllerOptions;\n\n    protected codeRequestVerifier : IOAuth2AuthorizationCodeRequestVerifier;\n\n    protected codeRequestValidator : RoutupContainerAdapter<OAuth2AuthorizationCodeRequest>;\n\n    protected authorizer: HTTPOAuth2Authorizer;\n\n    // ---------------------------------------------------------\n\n    constructor(ctx: AuthorizeControllerContext) {\n        this.options = ctx.options;\n\n        this.codeRequestVerifier = ctx.codeRequestVerifier;\n\n        const validator = new OAuth2AuthorizationCodeRequestValidator();\n        this.codeRequestValidator = new RoutupContainerAdapter(validator);\n\n        this.authorizer = new HTTPOAuth2Authorizer({\n            codeRequestVerifier: this.codeRequestVerifier,\n            accessTokenIssuer: ctx.accessTokenIssuer,\n            openIdTokenIssuer: ctx.openIdTokenIssuer,\n            codeIssuer: ctx.codeIssuer,\n            identityResolver: ctx.identityResolver,\n        });\n    }\n\n    // ---------------------------------------------------------\n\n    @DPost('', [ForceUserLoggedInMiddleware])\n    async confirm(\n        @DRequest() req: any,\n        @DResponse() res: any,\n    ): Promise<void> {\n        const result = await this.authorizer.authorizeWithRequest(req);\n\n        const url = new URL(result.redirectUri);\n        if (result.state) {\n            url.searchParams.set('state', result.state);\n        }\n\n        if (result.authorizationCode) {\n            url.searchParams.set('code', result.authorizationCode);\n        }\n\n        if (result.accessToken) {\n            url.searchParams.set('access_token', result.accessToken);\n        }\n\n        if (result.idToken) {\n            url.searchParams.set('id_token', result.idToken);\n        }\n\n        return send(res, { url: url.href });\n    }\n\n    @DGet('', [])\n    async serve(\n        @DRequest() req: any,\n        @DResponse() res: any,\n    ): Promise<void> {\n        let codeRequest : OAuth2AuthorizationCodeRequest | undefined;\n\n        let client : Client | undefined;\n        let scopes : Scope[] | undefined;\n\n        let error : Error | undefined;\n\n        try {\n            const data = await this.codeRequestValidator.run(req, { locations: ['body', 'query'] });\n\n            const result = await this.codeRequestVerifier.verify(data);\n            client = result.client;\n            scopes = result.scopes;\n\n            codeRequest = result.data;\n        } catch (e) {\n            const normalized = sanitizeError(e);\n            error = {\n                ...normalized,\n                message: normalized.message,\n            };\n        }\n\n        const isJIT = isCodeTransformation(CodeTransformation.JUST_IN_TIME);\n\n        const payload = {\n            config: { baseURL: this.options.baseURL },\n            data: {\n                codeRequest,\n                error,\n                client,\n                scopes,\n            },\n        };\n\n        let html : string;\n        let manifest : Record<string, any>;\n        let render : CallableFunction;\n\n        if (isJIT) {\n            /**\n             * @type {import('vite').ViteDevServer}\n             */\n            const vite = useRequestParam(req, 'viteServer');\n\n            html = await fs.promises.readFile(\n                path.join(UI_SOURCE_PATH, 'index.html'),\n                'utf-8',\n            );\n            html = await vite.transformIndexHtml('/', html);\n            manifest = {};\n            render = (await vite.ssrLoadModule('/src/server.ts')).render;\n        } else {\n            html = await fs.promises.readFile(\n                path.join(UI_DIST_PATH, 'client', 'index.html'),\n                'utf-8',\n            );\n\n            manifest = JSON.parse(await fs.promises.readFile(\n                path.join(UI_DIST_PATH, 'client', '.vite', 'ssr-manifest.json'),\n                'utf-8',\n            ));\n\n            render = (await load(path.join(UI_DIST_PATH, 'server', 'server.js'))).render;\n        }\n\n        const [appHtml, preloadLinks] = await render({\n            url: '/authorize',\n            manifest,\n            payload,\n        });\n\n        return send(\n            res,\n            html\n                .replace('<!--preload-links-->', preloadLinks)\n                .replace('<!--app-html-->', appHtml),\n        );\n    }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AA+BA,IAAaoB,sBAAb,MAAaA;CAICC;CAEAC;CAEAC;CAEAC;CAIV,YAAYC,KAAiC;AACzC,OAAKJ,UAAUI,IAAIJ;AAEnB,OAAKC,sBAAsBG,IAAIH;EAE/B,MAAMI,YAAY,IAAIR,yCAAAA;AACtB,OAAKK,uBAAuB,IAAIZ,uBAAuBe,UAAAA;AAEvD,OAAKF,aAAa,IAAIP,qBAAqB;GACvCK,qBAAqB,KAAKA;GAC1BK,mBAAmBF,IAAIE;GACvBC,mBAAmBH,IAAIG;GACvBC,YAAYJ,IAAII;GAChBC,kBAAkBL,IAAIK;GAC1B,CAAA;;CAKJ,MACMC,QACF,KACA,KACa;EACb,MAAMG,SAAS,MAAM,KAAKV,WAAWW,qBAAqBH,IAAAA;EAE1D,MAAMI,MAAM,IAAI5B,IAAI0B,OAAOG,YAAW;AACtC,MAAIH,OAAOI,MACPF,KAAIG,aAAaC,IAAI,SAASN,OAAOI,MAAK;AAG9C,MAAIJ,OAAOO,kBACPL,KAAIG,aAAaC,IAAI,QAAQN,OAAOO,kBAAiB;AAGzD,MAAIP,OAAOQ,YACPN,KAAIG,aAAaC,IAAI,gBAAgBN,OAAOQ,YAAW;AAG3D,MAAIR,OAAOS,QACPP,KAAIG,aAAaC,IAAI,YAAYN,OAAOS,QAAO;AAGnD,SAAOlC,KAAKwB,KAAK,EAAEG,KAAKA,IAAIQ,MAAK,CAAA;;CAGrC,MACMC,MACF,KACA,KACa;EACb,IAAIC;EAEJ,IAAIC;EACJ,IAAIC;EAEJ,IAAIC;AAEJ,MAAI;GACA,MAAMC,OAAO,MAAM,KAAK3B,qBAAqB4B,IAAInB,KAAK,EAAEoB,WAAW,CAAC,QAAQ,QAAQ,EAAC,CAAA;GAErF,MAAMlB,SAAS,MAAM,KAAKZ,oBAAoB+B,OAAOH,KAAAA;AACrDH,YAASb,OAAOa;AAChBC,YAASd,OAAOc;AAEhBF,iBAAcZ,OAAOgB;WAChBI,GAAG;GACR,MAAMC,aAAapC,cAAcmC,EAAAA;AACjCL,WAAQ;IACJ,GAAGM;IACHC,SAASD,WAAWC;IACxB;;EAGJ,MAAMC,QAAQ5C,qBAAqBD,mBAAmB8C,aAAY;EAElE,MAAMC,UAAU;GACZC,QAAQ,EAAEC,SAAS,KAAKxC,QAAQwC,SAAQ;GACxCX,MAAM;IACFJ;IACAG;IACAF;IACAC;IACJ;GACJ;EAEA,IAAIc;EACJ,IAAIC;EACJ,IAAIC;AAEJ,MAAIP,OAAO;;;MAIP,MAAMQ,OAAOvD,gBAAgBsB,KAAK,aAAA;AAElC8B,UAAO,MAAMxD,GAAG4D,SAASC,SACrB5D,KAAK6D,KAAKrD,gBAAgB,aAAA,EAC1B,QAAA;AAEJ+C,UAAO,MAAMG,KAAKI,mBAAmB,KAAKP,KAAAA;AAC1CC,cAAW,EAAC;AACZC,aAAU,MAAMC,KAAKK,cAAc,iBAAgB,EAAGN;SACnD;AACHF,UAAO,MAAMxD,GAAG4D,SAASC,SACrB5D,KAAK6D,KAAKtD,cAAc,UAAU,aAAA,EAClC,QAAA;AAGJiD,cAAWQ,KAAKC,MAAM,MAAMlE,GAAG4D,SAASC,SACpC5D,KAAK6D,KAAKtD,cAAc,UAAU,SAAS,oBAAA,EAC3C,QAAA,CAAA;AAGJkD,aAAU,MAAM3D,KAAKE,KAAK6D,KAAKtD,cAAc,UAAU,YAAA,CAAY,EAAGkD;;EAG1E,MAAM,CAACS,SAASC,gBAAgB,MAAMV,OAAO;GACzC5B,KAAK;GACL2B;GACAJ;GACJ,CAAA;AAEA,SAAOlD,KACHwB,KACA6B,KACKa,QAAQ,wBAAwBD,aAAAA,CAChCC,QAAQ,mBAAmBF,QAAAA,CAAAA;;;;YA5G5BzD,4BAAAA,CAAAA"}
+{"version":3,"file":"module.mjs","names":["DContext","DController","DGet","DPost","load","fs","path","URL","CodeTransformation","isCodeTransformation","UI_DIST_PATH","UI_SOURCE_PATH","ForceUserLoggedInMiddleware","VITE_SERVER_STORE_KEY","HTTPOAuth2Authorizer","readFromLocations","OAuth2AuthorizationCodeRequestValidator","sanitizeError","AuthorizeController","options","codeRequestVerifier","codeRequestValidator","authorizer","ctx","accessTokenIssuer","openIdTokenIssuer","codeIssuer","identityResolver","confirm","event","result","authorizeWithRequest","url","redirectUri","state","searchParams","set","authorizationCode","accessToken","idToken","href","serve","codeRequest","client","scopes","error","merged","data","run","verify","e","normalized","message","isJIT","JUST_IN_TIME","payload","config","baseURL","html","manifest","render","vite","store","promises","readFile","join","transformIndexHtml","ssrLoadModule","JSON","parse","appHtml","preloadLinks","body","replace","response","headers"],"sources":["../../../../../../src/adapters/http/controllers/workflows/authorize/module.ts"],"sourcesContent":["/*\n * Copyright (c) 2024.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport {\n    DContext,\n    DController,\n    DGet,\n    DPost,\n} from '@routup/decorators';\nimport { load } from 'locter';\nimport fs from 'node:fs';\nimport path from 'node:path';\nimport { URL } from 'node:url';\n\nimport type { IRoutupEvent } from 'routup';\nimport type { ViteDevServer } from 'vite';\nimport type { Client, OAuth2AuthorizationCodeRequest, Scope } from '@authup/core-kit';\nimport { CodeTransformation, isCodeTransformation } from 'typeorm-extension';\nimport { UI_DIST_PATH, UI_SOURCE_PATH } from '../../../../../path.ts';\nimport { ForceUserLoggedInMiddleware, VITE_SERVER_STORE_KEY } from '../../../middleware/index.ts';\nimport { HTTPOAuth2Authorizer } from '../../../adapters/index.ts';\nimport { readFromLocations } from '../../../request/index.ts';\nimport type { IOAuth2AuthorizationCodeRequestVerifier } from '../../../../../core/index.ts';\nimport { OAuth2AuthorizationCodeRequestValidator } from '../../../../../core/index.ts';\nimport type { AuthorizeControllerContext, AuthorizeControllerOptions } from './types.ts';\nimport { sanitizeError } from '../../../../../utils/index.ts';\n\n@DController('/authorize')\nexport class AuthorizeController {\n    // todo: maybe /realms/<realm>/protocol/openid-connect/authorize\n    // todo: maybe /realms/<realm>/[...]/authorize\n\n    protected options: AuthorizeControllerOptions;\n\n    protected codeRequestVerifier : IOAuth2AuthorizationCodeRequestVerifier;\n\n    protected codeRequestValidator : OAuth2AuthorizationCodeRequestValidator;\n\n    protected authorizer: HTTPOAuth2Authorizer;\n\n    // ---------------------------------------------------------\n\n    constructor(ctx: AuthorizeControllerContext) {\n        this.options = ctx.options;\n\n        this.codeRequestVerifier = ctx.codeRequestVerifier;\n\n        this.codeRequestValidator = new OAuth2AuthorizationCodeRequestValidator();\n\n        this.authorizer = new HTTPOAuth2Authorizer({\n            codeRequestVerifier: this.codeRequestVerifier,\n            accessTokenIssuer: ctx.accessTokenIssuer,\n            openIdTokenIssuer: ctx.openIdTokenIssuer,\n            codeIssuer: ctx.codeIssuer,\n            identityResolver: ctx.identityResolver,\n        });\n    }\n\n    // ---------------------------------------------------------\n\n    @DPost('', [ForceUserLoggedInMiddleware])\n    async confirm(@DContext() event: IRoutupEvent): Promise<{ url: string }> {\n        const result = await this.authorizer.authorizeWithRequest(event);\n\n        const url = new URL(result.redirectUri);\n        if (result.state) {\n            url.searchParams.set('state', result.state);\n        }\n\n        if (result.authorizationCode) {\n            url.searchParams.set('code', result.authorizationCode);\n        }\n\n        if (result.accessToken) {\n            url.searchParams.set('access_token', result.accessToken);\n        }\n\n        if (result.idToken) {\n            url.searchParams.set('id_token', result.idToken);\n        }\n\n        return { url: url.href };\n    }\n\n    @DGet('', [])\n    async serve(@DContext() event: IRoutupEvent): Promise<string> {\n        let codeRequest : OAuth2AuthorizationCodeRequest | undefined;\n\n        let client : Client | undefined;\n        let scopes : Scope[] | undefined;\n\n        let error : Error | undefined;\n\n        try {\n            const merged = await readFromLocations(event, ['body', 'query']);\n            const data = await this.codeRequestValidator.run(merged);\n\n            const result = await this.codeRequestVerifier.verify(data);\n            client = result.client;\n            scopes = result.scopes;\n\n            codeRequest = result.data;\n        } catch (e) {\n            const normalized = sanitizeError(e);\n            error = {\n                ...normalized,\n                message: normalized.message,\n            };\n        }\n\n        const isJIT = isCodeTransformation(CodeTransformation.JUST_IN_TIME);\n\n        const payload = {\n            config: { baseURL: this.options.baseURL },\n            data: {\n                codeRequest,\n                error,\n                client,\n                scopes,\n            },\n        };\n\n        let html : string;\n        let manifest : Record<string, any>;\n        let render : CallableFunction;\n\n        if (isJIT) {\n            const vite = event.store[VITE_SERVER_STORE_KEY] as ViteDevServer;\n\n            html = await fs.promises.readFile(\n                path.join(UI_SOURCE_PATH, 'index.html'),\n                'utf-8',\n            );\n            html = await vite.transformIndexHtml('/', html);\n            manifest = {};\n            render = (await vite.ssrLoadModule('/src/server.ts')).render;\n        } else {\n            html = await fs.promises.readFile(\n                path.join(UI_DIST_PATH, 'client', 'index.html'),\n                'utf-8',\n            );\n\n            manifest = JSON.parse(await fs.promises.readFile(\n                path.join(UI_DIST_PATH, 'client', '.vite', 'ssr-manifest.json'),\n                'utf-8',\n            ));\n\n            render = (await load(path.join(UI_DIST_PATH, 'server', 'server.js'))).render;\n        }\n\n        const [appHtml, preloadLinks] = await render({\n            url: '/authorize',\n            manifest,\n            payload,\n        });\n\n        const body = html\n            .replace('<!--preload-links-->', preloadLinks)\n            .replace('<!--app-html-->', appHtml);\n\n        event.response.headers.set('content-type', 'text/html; charset=utf-8');\n        return body;\n    }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAgCA,IAAakB,sBAAb,MAAaA;CAICC;CAEAC;CAEAC;CAEAC;CAIV,YAAYC,KAAiC;EACzC,KAAKJ,UAAUI,IAAIJ;EAEnB,KAAKC,sBAAsBG,IAAIH;EAE/B,KAAKC,uBAAuB,IAAIL,wCAAAA;EAEhC,KAAKM,aAAa,IAAIR,qBAAqB;GACvCM,qBAAqB,KAAKA;GAC1BI,mBAAmBD,IAAIC;GACvBC,mBAAmBF,IAAIE;GACvBC,YAAYH,IAAIG;GAChBC,kBAAkBJ,IAAII;EAC1B,CAAA;CACJ;CAIA,MACMC,QAAQ,OAA2D;EACrE,MAAME,SAAS,MAAM,KAAKR,WAAWS,qBAAqBF,KAAAA;EAE1D,MAAMG,MAAM,IAAIzB,IAAIuB,OAAOG,WAAW;EACtC,IAAIH,OAAOI,OACPF,IAAIG,aAAaC,IAAI,SAASN,OAAOI,KAAK;EAG9C,IAAIJ,OAAOO,mBACPL,IAAIG,aAAaC,IAAI,QAAQN,OAAOO,iBAAiB;EAGzD,IAAIP,OAAOQ,aACPN,IAAIG,aAAaC,IAAI,gBAAgBN,OAAOQ,WAAW;EAG3D,IAAIR,OAAOS,SACPP,IAAIG,aAAaC,IAAI,YAAYN,OAAOS,OAAO;EAGnD,OAAO,EAAEP,KAAKA,IAAIQ,KAAK;CAC3B;CAEA,MACMC,MAAM,OAAkD;EAC1D,IAAIC;EAEJ,IAAIC;EACJ,IAAIC;EAEJ,IAAIC;EAEJ,IAAI;GACA,MAAMC,SAAS,MAAM/B,kBAAkBc,OAAO,CAAC,QAAQ,OAAA,CAAQ;GAC/D,MAAMkB,OAAO,MAAM,KAAK1B,qBAAqB2B,IAAIF,MAAAA;GAEjD,MAAMhB,SAAS,MAAM,KAAKV,oBAAoB6B,OAAOF,IAAAA;GACrDJ,SAASb,OAAOa;GAChBC,SAASd,OAAOc;GAEhBF,cAAcZ,OAAOiB;EACzB,SAASG,GAAG;GACR,MAAMC,aAAalC,cAAciC,CAAAA;GACjCL,QAAQ;IACJ,GAAGM;IACHC,SAASD,WAAWC;GACxB;EACJ;EAEA,MAAMC,QAAQ5C,qBAAqBD,mBAAmB8C,YAAY;EAElE,MAAMC,UAAU;GACZC,QAAQ,EAAEC,SAAS,KAAKtC,QAAQsC,QAAQ;GACxCV,MAAM;IACFL;IACAG;IACAF;IACAC;GACJ;EACJ;EAEA,IAAIc;EACJ,IAAIC;EACJ,IAAIC;EAEJ,IAAIP,OAAO;GACP,MAAMQ,OAAOhC,MAAMiC,MAAMjD;GAEzB6C,OAAO,MAAMrD,GAAG0D,SAASC,SACrB1D,KAAK2D,KAAKtD,gBAAgB,YAAA,GAC1B,OAAA;GAEJ+C,OAAO,MAAMG,KAAKK,mBAAmB,KAAKR,IAAAA;GAC1CC,WAAW,CAAC;GACZC,UAAU,MAAMC,KAAKM,cAAc,gBAAA,GAAmBP;EAC1D,OAAO;GACHF,OAAO,MAAMrD,GAAG0D,SAASC,SACrB1D,KAAK2D,KAAKvD,cAAc,UAAU,YAAA,GAClC,OAAA;GAGJiD,WAAWS,KAAKC,MAAM,MAAMhE,GAAG0D,SAASC,SACpC1D,KAAK2D,KAAKvD,cAAc,UAAU,SAAS,mBAAA,GAC3C,OAAA,CAAA;GAGJkD,UAAU,MAAMxD,KAAKE,KAAK2D,KAAKvD,cAAc,UAAU,WAAA,CAAA,GAAekD;EAC1E;EAEA,MAAM,CAACU,SAASC,gBAAgB,MAAMX,OAAO;GACzC5B,KAAK;GACL2B;GACAJ;EACJ,CAAA;EAEA,MAAMiB,OAAOd,KACRe,QAAQ,wBAAwBF,YAAAA,EAChCE,QAAQ,mBAAmBH,OAAAA;EAEhCzC,MAAM6C,SAASC,QAAQvC,IAAI,gBAAgB,0BAAA;EAC3C,OAAOoC;CACX;AACJ;;YAvGgB5D,2BAAAA,CAAAA"}

package/dist/adapters/http/controllers/workflows/jwks/handlers/read.d.ts

@@ -1,6 +1,8 @@
-import type { Response } from 'routup';
+import type { OAuth2JsonWebKey } from '@authup/specs';
 import type { Repository } from 'typeorm';
 import type { KeyEntity } from '../../../../../database/domains/index.ts';
-export declare function getJwksRouteHandler(res: Response, repository: Repository<KeyEntity>, realmId?: string): Promise<any>;
-export declare function getJwkRouteHandler(res: Response, repository: Repository<KeyEntity>, keyId: string, realmId?: string): Promise<any>;
+export declare function getJwksRouteHandler(repository: Repository<KeyEntity>, realmId?: string): Promise<{
+    keys: OAuth2JsonWebKey[];
+}>;
+export declare function getJwkRouteHandler(repository: Repository<KeyEntity>, keyId: string, realmId?: string): Promise<OAuth2JsonWebKey>;
 //# sourceMappingURL=read.d.ts.map

package/dist/adapters/http/controllers/workflows/jwks/handlers/read.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"read.d.ts","sourceRoot":"","sources":["../../../../../../../src/adapters/http/controllers/workflows/jwks/handlers/read.ts"],"names":[],"mappings":"AASA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,QAAQ,CAAC;AAEvC,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AAG1C,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,0CAA0C,CAAC;AAE1E,wBAAsB,mBAAmB,CACrC,GAAG,EAAE,QAAQ,EACb,UAAU,EAAE,UAAU,CAAC,SAAS,CAAC,EACjC,OAAO,CAAC,EAAE,MAAM,GAChB,OAAO,CAAC,GAAG,CAAC,CA6Bf;AAED,wBAAsB,kBAAkB,CACpC,GAAG,EAAE,QAAQ,EACb,UAAU,EAAE,UAAU,CAAC,SAAS,CAAC,EACjC,KAAK,EAAE,MAAM,EACb,OAAO,CAAC,EAAE,MAAM,GAChB,OAAO,CAAC,GAAG,CAAC,CA+Bf"}
+{"version":3,"file":"read.d.ts","sourceRoot":"","sources":["../../../../../../../src/adapters/http/controllers/workflows/jwks/handlers/read.ts"],"names":[],"mappings":"AAQA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,eAAe,CAAC;AAEtD,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AAE1C,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,0CAA0C,CAAC;AAE1E,wBAAsB,mBAAmB,CACrC,UAAU,EAAE,UAAU,CAAC,SAAS,CAAC,EACjC,OAAO,CAAC,EAAE,MAAM,GAChB,OAAO,CAAC;IAAE,IAAI,EAAE,gBAAgB,EAAE,CAAA;CAAE,CAAC,CA6BxC;AAED,wBAAsB,kBAAkB,CACpC,UAAU,EAAE,UAAU,CAAC,SAAS,CAAC,EACjC,KAAK,EAAE,MAAM,EACb,OAAO,CAAC,EAAE,MAAM,GAChB,OAAO,CAAC,gBAAgB,CAAC,CA+B5B"}

package/dist/adapters/http/controllers/workflows/jwks/handlers/read.mjs

@@ -1,10 +1,8 @@
 import { In } from "typeorm";
 import { AsymmetricKey } from "@authup/server-kit";
-import { JWKType } from "@authup/specs";
-import { BadRequestError, NotFoundError } from "@ebec/http";
-import { send } from "routup";
+import { JWKError, JWKType } from "@authup/specs";
 //#region src/adapters/http/controllers/workflows/jwks/handlers/read.ts
-async function getJwksRouteHandler(res, repository, realmId) {
+async function getJwksRouteHandler(repository, realmId) {
 	const promises = (await repository.find({
 		where: {
 			type: In([JWKType.RSA, JWKType.EC]),
@@ -20,26 +18,25 @@ async function getJwksRouteHandler(res, repository, realmId) {
 		kid: entity.id,
 		alg: entity.signature_algorithm
 	})));
-	return send(res, { keys: await Promise.all(promises) });
+	return { keys: await Promise.all(promises) };
 }
-async function getJwkRouteHandler(res, repository, keyId, realmId) {
+async function getJwkRouteHandler(repository, keyId, realmId) {
 	const entity = await repository.findOne({ where: {
 		type: In([JWKType.RSA, JWKType.EC]),
 		id: keyId,
 		...realmId ? { realm_id: realmId } : {}
 	} });
-	if (!entity) throw new NotFoundError();
-	if (!entity.encryption_key) throw new BadRequestError("The encryption key does not exist");
-	const jsonWebKey = await (await AsymmetricKey.fromBase64({
-		format: "spki",
-		key: entity.encryption_key,
-		options: AsymmetricKey.buildImportOptionsForJWTAlgorithm(entity.signature_algorithm)
-	})).toJWK();
-	jsonWebKey.alg = entity.signature_algorithm;
-	return send(res, {
-		...jsonWebKey,
-		kid: entity.id
-	});
+	if (!entity) throw JWKError.notFound(keyId);
+	if (!entity.encryption_key) throw JWKError.encryptionKeyMissing();
+	return {
+		...await (await AsymmetricKey.fromBase64({
+			format: "spki",
+			key: entity.encryption_key,
+			options: AsymmetricKey.buildImportOptionsForJWTAlgorithm(entity.signature_algorithm)
+		})).toJWK(),
+		kid: entity.id,
+		alg: entity.signature_algorithm
+	};
 }
 //#endregion
 export { getJwkRouteHandler, getJwksRouteHandler };

package/dist/adapters/http/controllers/workflows/jwks/handlers/read.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"read.mjs","names":["AsymmetricKey","JWKType","send","In","BadRequestError","NotFoundError","getJwksRouteHandler","res","repository","realmId","entities","find","where","type","RSA","EC","realm_id","order","priority","promises","filter","entity","encryption_key","map","fromBase64","format","key","options","buildImportOptionsForJWTAlgorithm","signature_algorithm","then","container","toJWK","kid","id","alg","keys","Promise","all","getJwkRouteHandler","keyId","findOne","jsonWebKey"],"sources":["../../../../../../../src/adapters/http/controllers/workflows/jwks/handlers/read.ts"],"sourcesContent":["/*\n * Copyright (c) 2022-2022.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport { AsymmetricKey } from '@authup/server-kit';\nimport { JWKType } from '@authup/specs';\nimport type { Response } from 'routup';\nimport { send } from 'routup';\nimport type { Repository } from 'typeorm';\nimport { In } from 'typeorm';\nimport { BadRequestError, NotFoundError } from '@ebec/http';\nimport type { KeyEntity } from '../../../../../database/domains/index.ts';\n\nexport async function getJwksRouteHandler(\n    res: Response,\n    repository: Repository<KeyEntity>,\n    realmId?: string,\n) : Promise<any> {\n    const entities = await repository.find({\n        where: {\n            type: In([JWKType.RSA, JWKType.EC]),\n            ...(realmId ? { realm_id: realmId } : {}),\n        },\n        order: { priority: 'DESC' },\n    });\n\n    const promises = entities\n        .filter((entity) => !!entity.encryption_key)\n        .map(\n            (entity) => AsymmetricKey\n                .fromBase64({\n                    format: 'spki',\n                    key: entity.encryption_key!,\n                    options: AsymmetricKey.buildImportOptionsForJWTAlgorithm(entity.signature_algorithm),\n                })\n                .then((container) => container.toJWK())\n                .then((key) => ({\n                    ...key,\n                    kid: entity.id,\n                    alg: entity.signature_algorithm,\n                })),\n        );\n\n    const keys = await Promise.all(promises);\n\n    return send(res, { keys });\n}\n\nexport async function getJwkRouteHandler(\n    res: Response,\n    repository: Repository<KeyEntity>,\n    keyId: string,\n    realmId?: string,\n) : Promise<any> {\n    const entity = await repository.findOne({\n        where: {\n            type: In([JWKType.RSA, JWKType.EC]),\n            id: keyId,\n            ...(realmId ? { realm_id: realmId } : {}),\n        },\n    });\n\n    if (!entity) {\n        throw new NotFoundError();\n    }\n\n    if (!entity.encryption_key) {\n        throw new BadRequestError('The encryption key does not exist');\n    }\n\n    const container = await AsymmetricKey\n        .fromBase64({\n            format: 'spki',\n            key: entity.encryption_key!,\n            options: AsymmetricKey.buildImportOptionsForJWTAlgorithm(entity.signature_algorithm),\n        });\n\n    const jsonWebKey = await container.toJWK();\n    jsonWebKey.alg = entity.signature_algorithm;\n\n    return send(res, {\n        ...jsonWebKey,\n        kid: entity.id,\n    });\n}\n"],"mappings":";;;;;;AAgBA,eAAsBM,oBAClBC,KACAC,YACAC,SAAgB;CAUhB,MAAMU,YAAWT,MARMF,WAAWG,KAAK;EACnCC,OAAO;GACHC,MAAMV,GAAG,CAACF,QAAQa,KAAKb,QAAQc,GAAG,CAAA;GAClC,GAAIN,UAAU,EAAEO,UAAUP,SAAQ,GAAI,EAAE;GAC5C;EACAQ,OAAO,EAAEC,UAAU,QAAO;EAC9B,CAAA,EAGKE,QAAQC,WAAW,CAAC,CAACA,OAAOC,eAAc,CAC1CC,KACIF,WAAWrB,cACPwB,WAAW;EACRC,QAAQ;EACRC,KAAKL,OAAOC;EACZK,SAAS3B,cAAc4B,kCAAkCP,OAAOQ,oBAAmB;EACvF,CAAA,CACCC,MAAMC,cAAcA,UAAUC,OAAK,CAAA,CACnCF,MAAMJ,SAAS;EACZ,GAAGA;EACHO,KAAKZ,OAAOa;EACZC,KAAKd,OAAOQ;EAChB,EAAA,CAAA;AAKZ,QAAO3B,KAAKK,KAAK,EAAE6B,MAAAA,MAFAC,QAAQC,IAAInB,SAAAA,EAEP,CAAA;;AAG5B,eAAsBoB,mBAClBhC,KACAC,YACAgC,OACA/B,SAAgB;CAEhB,MAAMY,SAAS,MAAMb,WAAWiC,QAAQ,EACpC7B,OAAO;EACHC,MAAMV,GAAG,CAACF,QAAQa,KAAKb,QAAQc,GAAG,CAAA;EAClCmB,IAAIM;EACJ,GAAI/B,UAAU,EAAEO,UAAUP,SAAQ,GAAI,EAAE;EAC5C,EACJ,CAAA;AAEA,KAAI,CAACY,OACD,OAAM,IAAIhB,eAAAA;AAGd,KAAI,CAACgB,OAAOC,eACR,OAAM,IAAIlB,gBAAgB,oCAAA;CAU9B,MAAMsC,aAAa,OAAMX,MAPD/B,cACnBwB,WAAW;EACRC,QAAQ;EACRC,KAAKL,OAAOC;EACZK,SAAS3B,cAAc4B,kCAAkCP,OAAOQ,oBAAmB;EACvF,CAAA,EAE+BG,OAAK;AACxCU,YAAWP,MAAMd,OAAOQ;AAExB,QAAO3B,KAAKK,KAAK;EACb,GAAGmC;EACHT,KAAKZ,OAAOa;EAChB,CAAA"}
+{"version":3,"file":"read.mjs","names":["AsymmetricKey","JWKError","JWKType","In","getJwksRouteHandler","repository","realmId","entities","find","where","type","RSA","EC","realm_id","order","priority","promises","filter","entity","encryption_key","map","fromBase64","format","key","options","buildImportOptionsForJWTAlgorithm","signature_algorithm","then","container","toJWK","kid","id","alg","keys","Promise","all","getJwkRouteHandler","keyId","findOne","notFound","encryptionKeyMissing","jsonWebKey"],"sources":["../../../../../../../src/adapters/http/controllers/workflows/jwks/handlers/read.ts"],"sourcesContent":["/*\n * Copyright (c) 2022-2022.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport { AsymmetricKey } from '@authup/server-kit';\nimport type { OAuth2JsonWebKey } from '@authup/specs';\nimport { JWKError, JWKType } from '@authup/specs';\nimport type { Repository } from 'typeorm';\nimport { In } from 'typeorm';\nimport type { KeyEntity } from '../../../../../database/domains/index.ts';\n\nexport async function getJwksRouteHandler(\n    repository: Repository<KeyEntity>,\n    realmId?: string,\n) : Promise<{ keys: OAuth2JsonWebKey[] }> {\n    const entities = await repository.find({\n        where: {\n            type: In([JWKType.RSA, JWKType.EC]),\n            ...(realmId ? { realm_id: realmId } : {}),\n        },\n        order: { priority: 'DESC' },\n    });\n\n    const promises = entities\n        .filter((entity): entity is KeyEntity & { encryption_key: string } => !!entity.encryption_key)\n        .map(\n            (entity) => AsymmetricKey\n                .fromBase64({\n                    format: 'spki',\n                    key: entity.encryption_key,\n                    options: AsymmetricKey.buildImportOptionsForJWTAlgorithm(entity.signature_algorithm),\n                })\n                .then((container) => container.toJWK())\n                .then((key) => ({\n                    ...key,\n                    kid: entity.id,\n                    alg: entity.signature_algorithm,\n                })),\n        );\n\n    const keys = await Promise.all(promises);\n\n    return { keys };\n}\n\nexport async function getJwkRouteHandler(\n    repository: Repository<KeyEntity>,\n    keyId: string,\n    realmId?: string,\n) : Promise<OAuth2JsonWebKey> {\n    const entity = await repository.findOne({\n        where: {\n            type: In([JWKType.RSA, JWKType.EC]),\n            id: keyId,\n            ...(realmId ? { realm_id: realmId } : {}),\n        },\n    });\n\n    if (!entity) {\n        throw JWKError.notFound(keyId);\n    }\n\n    if (!entity.encryption_key) {\n        throw JWKError.encryptionKeyMissing();\n    }\n\n    const container = await AsymmetricKey\n        .fromBase64({\n            format: 'spki',\n            key: entity.encryption_key,\n            options: AsymmetricKey.buildImportOptionsForJWTAlgorithm(entity.signature_algorithm),\n        });\n\n    const jsonWebKey = await container.toJWK();\n\n    return {\n        ...jsonWebKey,\n        kid: entity.id,\n        alg: entity.signature_algorithm,\n    };\n}\n"],"mappings":";;;;AAcA,eAAsBI,oBAClBC,YACAC,SAAgB;CAUhB,MAAMU,YAAWT,MARMF,WAAWG,KAAK;EACnCC,OAAO;GACHC,MAAMP,GAAG,CAACD,QAAQS,KAAKT,QAAQU,EAAAA,CAAG;GAClC,GAAIN,UAAU,EAAEO,UAAUP,QAAQ,IAAI,CAAC;EAC3C;EACAQ,OAAO,EAAEC,UAAU,OAAO;CAC9B,CAAA,GAGKE,QAAQC,WAA6D,CAAC,CAACA,OAAOC,cAAc,EAC5FC,KACIF,WAAWlB,cACPqB,WAAW;EACRC,QAAQ;EACRC,KAAKL,OAAOC;EACZK,SAASxB,cAAcyB,kCAAkCP,OAAOQ,mBAAmB;CACvF,CAAA,EACCC,MAAMC,cAAcA,UAAUC,MAAK,CAAA,EACnCF,MAAMJ,SAAS;EACZ,GAAGA;EACHO,KAAKZ,OAAOa;EACZC,KAAKd,OAAOQ;CAChB,EAAA,CAAA;CAKZ,OAAO,EAAEO,MAAAA,MAFUC,QAAQC,IAAInB,QAAAA,EAEjB;AAClB;AAEA,eAAsBoB,mBAClB/B,YACAgC,OACA/B,SAAgB;CAEhB,MAAMY,SAAS,MAAMb,WAAWiC,QAAQ,EACpC7B,OAAO;EACHC,MAAMP,GAAG,CAACD,QAAQS,KAAKT,QAAQU,EAAAA,CAAG;EAClCmB,IAAIM;EACJ,GAAI/B,UAAU,EAAEO,UAAUP,QAAQ,IAAI,CAAC;CAC3C,EACJ,CAAA;CAEA,IAAI,CAACY,QACD,MAAMjB,SAASsC,SAASF,KAAAA;CAG5B,IAAI,CAACnB,OAAOC,gBACR,MAAMlB,SAASuC,qBAAoB;CAYvC,OAAO;EACH,GAAGC,OAHkBb,MAPD5B,cACnBqB,WAAW;GACRC,QAAQ;GACRC,KAAKL,OAAOC;GACZK,SAASxB,cAAcyB,kCAAkCP,OAAOQ,mBAAmB;EACvF,CAAA,GAE+BG,MAAK;EAIpCC,KAAKZ,OAAOa;EACZC,KAAKd,OAAOQ;CAChB;AACJ"}

package/dist/adapters/http/controllers/workflows/jwks/module.d.ts

@@ -1,4 +1,5 @@
-import type { Request, Response } from 'routup';
+import type { OAuth2JsonWebKey } from '@authup/specs';
+import type { IRoutupEvent } from 'routup';
 import type { Repository } from 'typeorm';
 import type { KeyEntity } from '../../../../database/domains/index.ts';
 export type JwkControllerContext = {
@@ -7,7 +8,9 @@ export type JwkControllerContext = {
 export declare class JwkController {
     protected repository: Repository<KeyEntity>;
     constructor(ctx: JwkControllerContext);
-    getManyJwks(req: Request, res: Response): Promise<any>;
-    getOneJwks(id: string, req: Request, res: Response): Promise<any>;
+    getManyJwks(event: IRoutupEvent): Promise<{
+        keys: OAuth2JsonWebKey[];
+    }>;
+    getOneJwks(id: string): Promise<OAuth2JsonWebKey>;
 }
 //# sourceMappingURL=module.d.ts.map

package/dist/adapters/http/controllers/workflows/jwks/module.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"module.d.ts","sourceRoot":"","sources":["../../../../../../src/adapters/http/controllers/workflows/jwks/module.ts"],"names":[],"mappings":"AAgBA,OAAO,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,QAAQ,CAAC;AAEhD,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AAG1C,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,uCAAuC,CAAC;AAGvE,MAAM,MAAM,oBAAoB,GAAG;IAC/B,UAAU,EAAE,UAAU,CAAC,SAAS,CAAC,CAAA;CACpC,CAAC;AAEF,qBACa,aAAa;IACtB,SAAS,CAAC,UAAU,EAAE,UAAU,CAAC,SAAS,CAAC,CAAC;gBAEhC,GAAG,EAAE,oBAAoB;IAK/B,WAAW,CACD,GAAG,EAAE,OAAO,EACX,GAAG,EAAE,QAAQ,GAC3B,OAAO,CAAC,GAAG,CAAC;IAkCT,UAAU,CACC,EAAE,EAAE,MAAM,EACX,GAAG,EAAE,OAAO,EACX,GAAG,EAAE,QAAQ,GAC3B,OAAO,CAAC,GAAG,CAAC;CA+BlB"}
+{"version":3,"file":"module.d.ts","sourceRoot":"","sources":["../../../../../../src/adapters/http/controllers/workflows/jwks/module.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,eAAe,CAAC;AAStD,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,QAAQ,CAAC;AAC3C,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AAE1C,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,uCAAuC,CAAC;AAGvE,MAAM,MAAM,oBAAoB,GAAG;IAC/B,UAAU,EAAE,UAAU,CAAC,SAAS,CAAC,CAAA;CACpC,CAAC;AAEF,qBACa,aAAa;IACtB,SAAS,CAAC,UAAU,EAAE,UAAU,CAAC,SAAS,CAAC,CAAC;gBAEhC,GAAG,EAAE,oBAAoB;IAK/B,WAAW,CACD,KAAK,EAAE,YAAY,GAChC,OAAO,CAAC;QAAE,IAAI,EAAE,gBAAgB,EAAE,CAAA;KAAE,CAAC;IAkClC,UAAU,CAAc,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,gBAAgB,CAAC;CA+BvE"}

package/dist/adapters/http/controllers/workflows/jwks/module.mjs

@@ -2,10 +2,8 @@ import { getRequestStringParam } from "../../../request/helpers/param-id.mjs";
 import "../../../request/index.mjs";
 import { In } from "typeorm";
 import { AsymmetricKey } from "@authup/server-kit";
-import { JWKType } from "@authup/specs";
-import { BadRequestError, NotFoundError } from "@ebec/http";
-import { send } from "routup";
-import { DController, DGet, DPath, DRequest, DResponse } from "@routup/decorators";
+import { JWKError, JWKType } from "@authup/specs";
+import { DContext, DController, DGet, DPath } from "@routup/decorators";
 //#region src/adapters/http/controllers/workflows/jwks/module.ts
 function _ts_decorate(decorators, target, key, desc) {
 	var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
@@ -26,8 +24,8 @@ var JwkController = class {
 	constructor(ctx) {
 		this.repository = ctx.repository;
 	}
-	async getManyJwks(req, res) {
-		const realmId = getRequestStringParam(req, "realmId");
+	async getManyJwks(event) {
+		const realmId = getRequestStringParam(event, "realmId");
 		const promises = (await this.repository.find({
 			where: {
 				type: In([JWKType.RSA, JWKType.EC]),
@@ -43,46 +41,38 @@ var JwkController = class {
 			kid: entity.id,
 			alg: entity.signature_algorithm
 		})));
-		return send(res, { keys: await Promise.all(promises) });
+		return { keys: await Promise.all(promises) };
 	}
-	async getOneJwks(id, req, res) {
+	async getOneJwks(id) {
 		const entity = await this.repository.findOne({ where: {
 			type: In([JWKType.RSA, JWKType.EC]),
 			id
 		} });
-		if (!entity) throw new NotFoundError();
-		if (!entity.encryption_key) throw new BadRequestError("The encryption key does not exist");
-		const jsonWebKey = await (await AsymmetricKey.fromBase64({
-			format: "spki",
-			key: entity.encryption_key,
-			options: AsymmetricKey.buildImportOptionsForJWTAlgorithm(entity.signature_algorithm)
-		})).toJWK();
-		jsonWebKey.alg = entity.signature_algorithm;
-		return send(res, {
-			...jsonWebKey,
-			kid: entity.id
-		});
+		if (!entity) throw JWKError.notFound(id);
+		if (!entity.encryption_key) throw JWKError.encryptionKeyMissing();
+		return {
+			...await (await AsymmetricKey.fromBase64({
+				format: "spki",
+				key: entity.encryption_key,
+				options: AsymmetricKey.buildImportOptionsForJWTAlgorithm(entity.signature_algorithm)
+			})).toJWK(),
+			kid: entity.id,
+			alg: entity.signature_algorithm
+		};
 	}
 };
 _ts_decorate([
 	DGet("/jwks", []),
-	_ts_param(0, DRequest()),
-	_ts_param(1, DResponse()),
+	_ts_param(0, DContext()),
 	_ts_metadata("design:type", Function),
-	_ts_metadata("design:paramtypes", [typeof Request === "undefined" ? Object : Request, typeof Response === "undefined" ? Object : Response]),
+	_ts_metadata("design:paramtypes", [typeof IRoutupEvent === "undefined" ? Object : IRoutupEvent]),
 	_ts_metadata("design:returntype", Promise)
 ], JwkController.prototype, "getManyJwks", null);
 _ts_decorate([
 	DGet("/jwks/:id", []),
 	_ts_param(0, DPath("id")),
-	_ts_param(1, DRequest()),
-	_ts_param(2, DResponse()),
 	_ts_metadata("design:type", Function),
-	_ts_metadata("design:paramtypes", [
-		String,
-		typeof Request === "undefined" ? Object : Request,
-		typeof Response === "undefined" ? Object : Response
-	]),
+	_ts_metadata("design:paramtypes", [String]),
 	_ts_metadata("design:returntype", Promise)
 ], JwkController.prototype, "getOneJwks", null);
 JwkController = _ts_decorate([

package/dist/adapters/http/controllers/workflows/jwks/module.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"module.mjs","names":["JWKType","AsymmetricKey","DController","DGet","DPath","DRequest","DResponse","send","In","BadRequestError","NotFoundError","getRequestStringParam","JwkController","repository","ctx","getManyJwks","req","res","realmId","entities","find","where","type","RSA","EC","realm_id","order","priority","promises","filter","entity","encryption_key","map","fromBase64","format","key","options","buildImportOptionsForJWTAlgorithm","signature_algorithm","then","container","toJWK","kid","id","alg","keys","Promise","all","getOneJwks","findOne","jsonWebKey"],"sources":["../../../../../../src/adapters/http/controllers/workflows/jwks/module.ts"],"sourcesContent":["/*\n * Copyright (c) 2024.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport { JWKType } from '@authup/specs';\nimport { AsymmetricKey } from '@authup/server-kit';\nimport {\n    DController, \n    DGet, \n    DPath, \n    DRequest, \n    DResponse,\n} from '@routup/decorators';\nimport type { Request, Response } from 'routup';\nimport { send } from 'routup';\nimport type { Repository } from 'typeorm';\nimport { In } from 'typeorm';\nimport { BadRequestError, NotFoundError } from '@ebec/http';\nimport type { KeyEntity } from '../../../../database/domains/index.ts';\nimport { getRequestStringParam } from '../../../request/index.ts';\n\nexport type JwkControllerContext = {\n    repository: Repository<KeyEntity>\n};\n\n@DController('')\nexport class JwkController {\n    protected repository: Repository<KeyEntity>;\n\n    constructor(ctx: JwkControllerContext) {\n        this.repository = ctx.repository;\n    }\n\n    @DGet('/jwks', [])\n    async getManyJwks(\n        @DRequest() req: Request,\n        @DResponse() res: Response,\n    ): Promise<any> {\n        const realmId = getRequestStringParam(req, 'realmId');\n\n        const entities = await this.repository.find({\n            where: {\n                type: In([JWKType.RSA, JWKType.EC]),\n                ...(realmId ? { realm_id: realmId } : {}),\n            },\n            order: { priority: 'DESC' },\n        });\n\n        const promises = entities\n            .filter((entity) => !!entity.encryption_key)\n            .map(\n                (entity) => AsymmetricKey\n                    .fromBase64({\n                        format: 'spki',\n                        key: entity.encryption_key!,\n                        options: AsymmetricKey.buildImportOptionsForJWTAlgorithm(entity.signature_algorithm),\n                    })\n                    .then((container) => container.toJWK())\n                    .then((key) => ({\n                        ...key,\n                        kid: entity.id,\n                        alg: entity.signature_algorithm,\n                    })),\n            );\n\n        const keys = await Promise.all(promises);\n\n        return send(res, { keys });\n    }\n\n    @DGet('/jwks/:id', [])\n    async getOneJwks(\n        @DPath('id') id: string,\n        @DRequest() req: Request,\n        @DResponse() res: Response,\n    ): Promise<any> {\n        const entity = await this.repository.findOne({\n            where: {\n                type: In([JWKType.RSA, JWKType.EC]),\n                id,\n            },\n        });\n\n        if (!entity) {\n            throw new NotFoundError();\n        }\n\n        if (!entity.encryption_key) {\n            throw new BadRequestError('The encryption key does not exist');\n        }\n\n        const container = await AsymmetricKey\n            .fromBase64({\n                format: 'spki',\n                key: entity.encryption_key!,\n                options: AsymmetricKey.buildImportOptionsForJWTAlgorithm(entity.signature_algorithm),\n            });\n\n        const jsonWebKey = await container.toJWK();\n        jsonWebKey.alg = entity.signature_algorithm;\n\n        return send(res, {\n            ...jsonWebKey,\n            kid: entity.id,\n        });\n    }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;AA6BA,IAAaY,gBAAb,MAAaA;CACCC;CAEV,YAAYC,KAA2B;AACnC,OAAKD,aAAaC,IAAID;;CAG1B,MACME,YACF,KACA,KACY;EACZ,MAAMG,UAAUP,sBAAsBK,KAAK,UAAA;EAU3C,MAAMY,YAAWT,MARM,KAAKN,WAAWO,KAAK;GACxCC,OAAO;IACHC,MAAMd,GAAG,CAACR,QAAQuB,KAAKvB,QAAQwB,GAAG,CAAA;IAClC,GAAIN,UAAU,EAAEO,UAAUP,SAAQ,GAAI,EAAE;IAC5C;GACAQ,OAAO,EAAEC,UAAU,QAAO;GAC9B,CAAA,EAGKE,QAAQC,WAAW,CAAC,CAACA,OAAOC,eAAc,CAC1CC,KACIF,WAAW7B,cACPgC,WAAW;GACRC,QAAQ;GACRC,KAAKL,OAAOC;GACZK,SAASnC,cAAcoC,kCAAkCP,OAAOQ,oBAAmB;GACvF,CAAA,CACCC,MAAMC,cAAcA,UAAUC,OAAK,CAAA,CACnCF,MAAMJ,SAAS;GACZ,GAAGA;GACHO,KAAKZ,OAAOa;GACZC,KAAKd,OAAOQ;GAChB,EAAA,CAAA;AAKZ,SAAO/B,KAAKU,KAAK,EAAE4B,MAAAA,MAFAC,QAAQC,IAAInB,SAAAA,EAEP,CAAA;;CAG5B,MACMoB,WACF,IACA,KACA,KACY;EACZ,MAAMlB,SAAS,MAAM,KAAKjB,WAAWoC,QAAQ,EACzC5B,OAAO;GACHC,MAAMd,GAAG,CAACR,QAAQuB,KAAKvB,QAAQwB,GAAG,CAAA;GAClCmB;GACJ,EACJ,CAAA;AAEA,MAAI,CAACb,OACD,OAAM,IAAIpB,eAAAA;AAGd,MAAI,CAACoB,OAAOC,eACR,OAAM,IAAItB,gBAAgB,oCAAA;EAU9B,MAAMyC,aAAa,OAAMV,MAPDvC,cACnBgC,WAAW;GACRC,QAAQ;GACRC,KAAKL,OAAOC;GACZK,SAASnC,cAAcoC,kCAAkCP,OAAOQ,oBAAmB;GACvF,CAAA,EAE+BG,OAAK;AACxCS,aAAWN,MAAMd,OAAOQ;AAExB,SAAO/B,KAAKU,KAAK;GACb,GAAGiC;GACHR,KAAKZ,OAAOa;GAChB,CAAA"}
+{"version":3,"file":"module.mjs","names":["JWKError","JWKType","AsymmetricKey","DContext","DController","DGet","DPath","In","getRequestStringParam","JwkController","repository","ctx","getManyJwks","event","realmId","entities","find","where","type","RSA","EC","realm_id","order","priority","promises","filter","entity","encryption_key","map","fromBase64","format","key","options","buildImportOptionsForJWTAlgorithm","signature_algorithm","then","container","toJWK","kid","id","alg","keys","Promise","all","getOneJwks","findOne","notFound","encryptionKeyMissing","jsonWebKey"],"sources":["../../../../../../src/adapters/http/controllers/workflows/jwks/module.ts"],"sourcesContent":["/*\n * Copyright (c) 2024.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport type { OAuth2JsonWebKey } from '@authup/specs';\nimport { JWKError, JWKType } from '@authup/specs';\nimport { AsymmetricKey } from '@authup/server-kit';\nimport {\n    DContext,\n    DController,\n    DGet,\n    DPath,\n} from '@routup/decorators';\nimport type { IRoutupEvent } from 'routup';\nimport type { Repository } from 'typeorm';\nimport { In } from 'typeorm';\nimport type { KeyEntity } from '../../../../database/domains/index.ts';\nimport { getRequestStringParam } from '../../../request/index.ts';\n\nexport type JwkControllerContext = {\n    repository: Repository<KeyEntity>\n};\n\n@DController('')\nexport class JwkController {\n    protected repository: Repository<KeyEntity>;\n\n    constructor(ctx: JwkControllerContext) {\n        this.repository = ctx.repository;\n    }\n\n    @DGet('/jwks', [])\n    async getManyJwks(\n        @DContext() event: IRoutupEvent,\n    ): Promise<{ keys: OAuth2JsonWebKey[] }> {\n        const realmId = getRequestStringParam(event, 'realmId');\n\n        const entities = await this.repository.find({\n            where: {\n                type: In([JWKType.RSA, JWKType.EC]),\n                ...(realmId ? { realm_id: realmId } : {}),\n            },\n            order: { priority: 'DESC' },\n        });\n\n        const promises = entities\n            .filter((entity): entity is KeyEntity & { encryption_key: string } => !!entity.encryption_key)\n            .map(\n                (entity) => AsymmetricKey\n                    .fromBase64({\n                        format: 'spki',\n                        key: entity.encryption_key,\n                        options: AsymmetricKey.buildImportOptionsForJWTAlgorithm(entity.signature_algorithm),\n                    })\n                    .then((container) => container.toJWK())\n                    .then((key) => ({\n                        ...key,\n                        kid: entity.id,\n                        alg: entity.signature_algorithm,\n                    })),\n            );\n\n        const keys = await Promise.all(promises);\n\n        return { keys };\n    }\n\n    @DGet('/jwks/:id', [])\n    async getOneJwks(@DPath('id') id: string): Promise<OAuth2JsonWebKey> {\n        const entity = await this.repository.findOne({\n            where: {\n                type: In([JWKType.RSA, JWKType.EC]),\n                id,\n            },\n        });\n\n        if (!entity) {\n            throw JWKError.notFound(id);\n        }\n\n        if (!entity.encryption_key) {\n            throw JWKError.encryptionKeyMissing();\n        }\n\n        const container = await AsymmetricKey\n            .fromBase64({\n                format: 'spki',\n                key: entity.encryption_key,\n                options: AsymmetricKey.buildImportOptionsForJWTAlgorithm(entity.signature_algorithm),\n            });\n\n        const jsonWebKey = await container.toJWK();\n\n        return {\n            ...jsonWebKey,\n            kid: entity.id,\n            alg: entity.signature_algorithm,\n        };\n    }\n}\n"],"mappings":";;;;;;;AAKC,SAAA,aAAA,YAAA,QAAA,KAAA,MAAA;;;;;;;;;;;;;;AAsBD,IAAaS,gBAAb,MAAaA;CACCC;CAEV,YAAYC,KAA2B;EACnC,KAAKD,aAAaC,IAAID;CAC1B;CAEA,MACME,YACF,OACqC;EACrC,MAAME,UAAUN,sBAAsBK,OAAO,SAAA;EAU7C,MAAMW,YAAWT,MARM,KAAKL,WAAWM,KAAK;GACxCC,OAAO;IACHC,MAAMX,GAAG,CAACN,QAAQkB,KAAKlB,QAAQmB,EAAAA,CAAG;IAClC,GAAIN,UAAU,EAAEO,UAAUP,QAAQ,IAAI,CAAC;GAC3C;GACAQ,OAAO,EAAEC,UAAU,OAAO;EAC9B,CAAA,GAGKE,QAAQC,WAA6D,CAAC,CAACA,OAAOC,cAAc,EAC5FC,KACIF,WAAWxB,cACP2B,WAAW;GACRC,QAAQ;GACRC,KAAKL,OAAOC;GACZK,SAAS9B,cAAc+B,kCAAkCP,OAAOQ,mBAAmB;EACvF,CAAA,EACCC,MAAMC,cAAcA,UAAUC,MAAK,CAAA,EACnCF,MAAMJ,SAAS;GACZ,GAAGA;GACHO,KAAKZ,OAAOa;GACZC,KAAKd,OAAOQ;EAChB,EAAA,CAAA;EAKZ,OAAO,EAAEO,MAAAA,MAFUC,QAAQC,IAAInB,QAAAA,EAEjB;CAClB;CAEA,MACMoB,WAAW,IAAoD;EACjE,MAAMlB,SAAS,MAAM,KAAKhB,WAAWmC,QAAQ,EACzC5B,OAAO;GACHC,MAAMX,GAAG,CAACN,QAAQkB,KAAKlB,QAAQmB,EAAAA,CAAG;GAClCmB;EACJ,EACJ,CAAA;EAEA,IAAI,CAACb,QACD,MAAM1B,SAAS8C,SAASP,EAAAA;EAG5B,IAAI,CAACb,OAAOC,gBACR,MAAM3B,SAAS+C,qBAAoB;EAYvC,OAAO;GACH,GAAGC,OAHkBZ,MAPDlC,cACnB2B,WAAW;IACRC,QAAQ;IACRC,KAAKL,OAAOC;IACZK,SAAS9B,cAAc+B,kCAAkCP,OAAOQ,mBAAmB;GACvF,CAAA,GAE+BG,MAAK;GAIpCC,KAAKZ,OAAOa;GACZC,KAAKd,OAAOQ;EAChB;CACJ;AACJ"}

package/dist/adapters/http/controllers/workflows/openid/module.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"module.d.ts","sourceRoot":"","sources":["../../../../../../src/adapters/http/controllers/workflows/openid/module.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,eAAe,CAAC;AAI5D,MAAM,MAAM,uBAAuB,GAAG;IAClC,OAAO,EAAE,MAAM,CAAA;CAClB,CAAC;AAEF,qBACa,gBAAgB;IACzB,SAAS,CAAC,OAAO,EAAE,uBAAuB,CAAC;gBAE/B,OAAO,EAAE,uBAAuB;IAKtC,sBAAsB,IAAI,OAAO,CAAC,sBAAsB,CAAC;CAyClE"}
+{"version":3,"file":"module.d.ts","sourceRoot":"","sources":["../../../../../../src/adapters/http/controllers/workflows/openid/module.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,eAAe,CAAC;AAQ5D,MAAM,MAAM,uBAAuB,GAAG;IAClC,OAAO,EAAE,MAAM,CAAA;CAClB,CAAC;AAEF,qBACa,gBAAgB;IACzB,SAAS,CAAC,OAAO,EAAE,uBAAuB,CAAC;gBAE/B,OAAO,EAAE,uBAAuB;IAKtC,sBAAsB,IAAI,OAAO,CAAC,sBAAsB,CAAC;CA0ClE"}

package/dist/adapters/http/controllers/workflows/openid/module.mjs

@@ -1,3 +1,5 @@
+import { resolveURL } from "../../../../../utils/url.mjs";
+import "../../../../../utils/index.mjs";
 import { OAuth2AuthorizationResponseType } from "@authup/specs";
 import { DController, DGet } from "@routup/decorators";
 //#region src/adapters/http/controllers/workflows/openid/module.ts
@@ -16,10 +18,11 @@ var OpenIDController = class {
 		this.options = options;
 	}
 	async getOpenIdConfiguration() {
+		const { baseURL } = this.options;
 		return {
-			issuer: this.options.baseURL,
-			authorization_endpoint: new URL("authorize", this.options.baseURL).href,
-			jwks_uri: new URL("jwks", this.options.baseURL).href,
+			issuer: baseURL,
+			authorization_endpoint: resolveURL(baseURL, "authorize"),
+			jwks_uri: resolveURL(baseURL, "jwks"),
 			response_types_supported: [
 				OAuth2AuthorizationResponseType.CODE,
 				OAuth2AuthorizationResponseType.TOKEN,
@@ -35,11 +38,11 @@ var OpenIDController = class {
 				"RS512",
 				"none"
 			],
-			token_endpoint: new URL("token", this.options.baseURL).href,
-			introspection_endpoint: new URL("token/introspect", this.options.baseURL).href,
-			revocation_endpoint: new URL("token", this.options.baseURL).href,
+			token_endpoint: resolveURL(baseURL, "token"),
+			introspection_endpoint: resolveURL(baseURL, "token/introspect"),
+			revocation_endpoint: resolveURL(baseURL, "token"),
 			service_documentation: "https://authup.org/",
-			userinfo_endpoint: new URL("users/@me", this.options.baseURL).href
+			userinfo_endpoint: resolveURL(baseURL, "users/@me")
 		};
 	}
 };

package/dist/adapters/http/controllers/workflows/openid/module.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"module.mjs","names":["OAuth2AuthorizationResponseType","DController","DGet","OpenIDController","options","getOpenIdConfiguration","issuer","baseURL","authorization_endpoint","URL","href","jwks_uri","response_types_supported","CODE","TOKEN","NONE","subject_types_supported","id_token_signing_alg_values_supported","token_endpoint","introspection_endpoint","revocation_endpoint","service_documentation","userinfo_endpoint"],"sources":["../../../../../../src/adapters/http/controllers/workflows/openid/module.ts"],"sourcesContent":["/*\n * Copyright (c) 2024.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport type { OpenIDProviderMetadata } from '@authup/specs';\nimport { OAuth2AuthorizationResponseType } from '@authup/specs';\nimport { DController, DGet } from '@routup/decorators';\n\nexport type OpenIDControllerOptions = {\n    baseURL: string\n};\n\n@DController('')\nexport class OpenIDController {\n    protected options: OpenIDControllerOptions;\n\n    constructor(options: OpenIDControllerOptions) {\n        this.options = options;\n    }\n\n    @DGet('/.well-known/openid-configuration', [])\n    async getOpenIdConfiguration(): Promise<OpenIDProviderMetadata> {\n        return {\n            issuer: this.options.baseURL,\n\n            authorization_endpoint: new URL('authorize', this.options.baseURL).href,\n\n            jwks_uri: new URL('jwks', this.options.baseURL).href,\n\n            response_types_supported: [\n                OAuth2AuthorizationResponseType.CODE,\n                OAuth2AuthorizationResponseType.TOKEN,\n                OAuth2AuthorizationResponseType.NONE,\n            ],\n\n            subject_types_supported: [\n                'public',\n            ],\n\n            id_token_signing_alg_values_supported: [\n                'HS256', \n                'HS384', \n                'HS512', \n                'RS256', \n                'RS384', \n                'RS512', \n                'none',\n            ],\n\n            token_endpoint: new URL('token', this.options.baseURL).href,\n\n            introspection_endpoint: new URL('token/introspect', this.options.baseURL).href,\n\n            revocation_endpoint: new URL('token', this.options.baseURL).href,\n\n            // -----------------------------------------------------------\n\n            service_documentation: 'https://authup.org/',\n\n            userinfo_endpoint: new URL('users/@me', this.options.baseURL).href,\n        };\n    }\n}\n"],"mappings":";;;AAKC,SAAA,aAAA,YAAA,QAAA,KAAA,MAAA;;;;;;;;;AAWD,IAAaG,mBAAb,MAAaA;CACCC;CAEV,YAAYA,SAAkC;AAC1C,OAAKA,UAAUA;;CAGnB,MACMC,yBAA0D;AAC5D,SAAO;GACHC,QAAQ,KAAKF,QAAQG;GAErBC,wBAAwB,IAAIC,IAAI,aAAa,KAAKL,QAAQG,QAAO,CAAEG;GAEnEC,UAAU,IAAIF,IAAI,QAAQ,KAAKL,QAAQG,QAAO,CAAEG;GAEhDE,0BAA0B;IACtBZ,gCAAgCa;IAChCb,gCAAgCc;IAChCd,gCAAgCe;IACnC;GAEDC,yBAAyB,CACrB,SACH;GAEDC,uCAAuC;IACnC;IACA;IACA;IACA;IACA;IACA;IACA;IACH;GAEDC,gBAAgB,IAAIT,IAAI,SAAS,KAAKL,QAAQG,QAAO,CAAEG;GAEvDS,wBAAwB,IAAIV,IAAI,oBAAoB,KAAKL,QAAQG,QAAO,CAAEG;GAE1EU,qBAAqB,IAAIX,IAAI,SAAS,KAAKL,QAAQG,QAAO,CAAEG;GAI5DW,uBAAuB;GAEvBC,mBAAmB,IAAIb,IAAI,aAAa,KAAKL,QAAQG,QAAO,CAAEG;GAClE"}
+{"version":3,"file":"module.mjs","names":["OAuth2AuthorizationResponseType","DController","DGet","resolveURL","OpenIDController","options","getOpenIdConfiguration","baseURL","issuer","authorization_endpoint","jwks_uri","response_types_supported","CODE","TOKEN","NONE","subject_types_supported","id_token_signing_alg_values_supported","token_endpoint","introspection_endpoint","revocation_endpoint","service_documentation","userinfo_endpoint"],"sources":["../../../../../../src/adapters/http/controllers/workflows/openid/module.ts"],"sourcesContent":["/*\n * Copyright (c) 2024.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport type { OpenIDProviderMetadata } from '@authup/specs';\nimport { OAuth2AuthorizationResponseType } from '@authup/specs';\nimport {\n    DController,\n    DGet,\n} from '@routup/decorators';\nimport { resolveURL } from '../../../../../utils/index.ts';\n\nexport type OpenIDControllerOptions = {\n    baseURL: string\n};\n\n@DController('')\nexport class OpenIDController {\n    protected options: OpenIDControllerOptions;\n\n    constructor(options: OpenIDControllerOptions) {\n        this.options = options;\n    }\n\n    @DGet('/.well-known/openid-configuration', [])\n    async getOpenIdConfiguration(): Promise<OpenIDProviderMetadata> {\n        const { baseURL } = this.options;\n        return {\n            issuer: baseURL,\n\n            authorization_endpoint: resolveURL(baseURL, 'authorize'),\n\n            jwks_uri: resolveURL(baseURL, 'jwks'),\n\n            response_types_supported: [\n                OAuth2AuthorizationResponseType.CODE,\n                OAuth2AuthorizationResponseType.TOKEN,\n                OAuth2AuthorizationResponseType.NONE,\n            ],\n\n            subject_types_supported: [\n                'public',\n            ],\n\n            id_token_signing_alg_values_supported: [\n                'HS256',\n                'HS384',\n                'HS512',\n                'RS256',\n                'RS384',\n                'RS512',\n                'none',\n            ],\n\n            token_endpoint: resolveURL(baseURL, 'token'),\n\n            introspection_endpoint: resolveURL(baseURL, 'token/introspect'),\n\n            revocation_endpoint: resolveURL(baseURL, 'token'),\n\n            // -----------------------------------------------------------\n\n            service_documentation: 'https://authup.org/',\n\n            userinfo_endpoint: resolveURL(baseURL, 'users/@me'),\n        };\n    }\n}\n"],"mappings":";;;;;AAKC,SAAA,aAAA,YAAA,QAAA,KAAA,MAAA;;;;;;;;;AAeD,IAAaI,mBAAb,MAAaA;CACCC;CAEV,YAAYA,SAAkC;EAC1C,KAAKA,UAAUA;CACnB;CAEA,MACMC,yBAA0D;EAC5D,MAAM,EAAEC,YAAY,KAAKF;EACzB,OAAO;GACHG,QAAQD;GAERE,wBAAwBN,WAAWI,SAAS,WAAA;GAE5CG,UAAUP,WAAWI,SAAS,MAAA;GAE9BI,0BAA0B;IACtBX,gCAAgCY;IAChCZ,gCAAgCa;IAChCb,gCAAgCc;;GAGpCC,yBAAyB,CACrB,QAAA;GAGJC,uCAAuC;IACnC;IACA;IACA;IACA;IACA;IACA;IACA;;GAGJC,gBAAgBd,WAAWI,SAAS,OAAA;GAEpCW,wBAAwBf,WAAWI,SAAS,kBAAA;GAE5CY,qBAAqBhB,WAAWI,SAAS,OAAA;GAIzCa,uBAAuB;GAEvBC,mBAAmBlB,WAAWI,SAAS,WAAA;EAC3C;CACJ;AACJ"}

package/dist/adapters/http/controllers/workflows/password-forgot/module.d.ts

@@ -1,5 +1,5 @@
-import type { PasswordForgotResponse } from '@authup/core-http-kit';
-import type { Request, Response } from 'routup';
+import type { PasswordForgotPayload, PasswordForgotResponse } from '@authup/core-http-kit';
+import type { IRoutupEvent } from 'routup';
 import type { IPasswordRecoveryService } from '../../../../../core/index.ts';
 export type PasswordForgotControllerContext = {
     service: IPasswordRecoveryService;
@@ -7,6 +7,6 @@ export type PasswordForgotControllerContext = {
 export declare class PasswordForgotController {
     protected service: IPasswordRecoveryService;
     constructor(ctx: PasswordForgotControllerContext);
-    execute(data: any, req: Request, res: Response): Promise<PasswordForgotResponse>;
+    execute(data: PasswordForgotPayload, event: IRoutupEvent): Promise<PasswordForgotResponse>;
 }
 //# sourceMappingURL=module.d.ts.map

package/dist/adapters/http/controllers/workflows/password-forgot/module.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"module.d.ts","sourceRoot":"","sources":["../../../../../../src/adapters/http/controllers/workflows/password-forgot/module.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,uBAAuB,CAAC;AAQpE,OAAO,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,QAAQ,CAAC;AAEhD,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,8BAA8B,CAAC;AAE7E,MAAM,MAAM,+BAA+B,GAAG;IAC1C,OAAO,EAAE,wBAAwB,CAAC;CACrC,CAAC;AAEF,qBACa,wBAAwB;IACjC,SAAS,CAAC,OAAO,EAAE,wBAAwB,CAAC;gBAEhC,GAAG,EAAE,+BAA+B;IAK1C,OAAO,CACA,IAAI,EAAE,GAAG,EACN,GAAG,EAAE,OAAO,EACX,GAAG,EAAE,QAAQ,GAC3B,OAAO,CAAC,sBAAsB,CAAC;CAOrC"}
+{"version":3,"file":"module.d.ts","sourceRoot":"","sources":["../../../../../../src/adapters/http/controllers/workflows/password-forgot/module.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,qBAAqB,EAAE,sBAAsB,EAAE,MAAM,uBAAuB,CAAC;AAO3F,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,QAAQ,CAAC;AAC3C,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,8BAA8B,CAAC;AAE7E,MAAM,MAAM,+BAA+B,GAAG;IAC1C,OAAO,EAAE,wBAAwB,CAAC;CACrC,CAAC;AAEF,qBACa,wBAAwB;IACjC,SAAS,CAAC,OAAO,EAAE,wBAAwB,CAAC;gBAEhC,GAAG,EAAE,+BAA+B;IAK1C,OAAO,CACA,IAAI,EAAE,qBAAqB,EACxB,KAAK,EAAE,YAAY,GAChC,OAAO,CAAC,sBAAsB,CAAC;CAOrC"}

package/dist/adapters/http/controllers/workflows/password-forgot/module.mjs

@@ -1,5 +1,4 @@
-import { sendAccepted } from "routup";
-import { DBody, DController, DPost, DRequest, DResponse } from "@routup/decorators";
+import { DBody, DContext, DController, DPost } from "@routup/decorators";
 //#region src/adapters/http/controllers/workflows/password-forgot/module.ts
 function _ts_decorate(decorators, target, key, desc) {
 	var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
@@ -20,21 +19,18 @@ var PasswordForgotController = class {
 	constructor(ctx) {
 		this.service = ctx.service;
 	}
-	async execute(data, req, res) {
-		return sendAccepted(res, await this.service.forgotPassword(data));
+	async execute(data, event) {
+		const result = await this.service.forgotPassword(data);
+		event.response.status = 202;
+		return result;
 	}
 };
 _ts_decorate([
 	DPost("", []),
 	_ts_param(0, DBody()),
-	_ts_param(1, DRequest()),
-	_ts_param(2, DResponse()),
+	_ts_param(1, DContext()),
 	_ts_metadata("design:type", Function),
-	_ts_metadata("design:paramtypes", [
-		Object,
-		typeof Request === "undefined" ? Object : Request,
-		typeof Response === "undefined" ? Object : Response
-	]),
+	_ts_metadata("design:paramtypes", [typeof PasswordForgotPayload === "undefined" ? Object : PasswordForgotPayload, typeof IRoutupEvent === "undefined" ? Object : IRoutupEvent]),
 	_ts_metadata("design:returntype", Promise)
 ], PasswordForgotController.prototype, "execute", null);
 PasswordForgotController = _ts_decorate([

package/dist/adapters/http/controllers/workflows/password-forgot/module.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"module.mjs","names":["DBody","DController","DPost","DRequest","DResponse","sendAccepted","PasswordForgotController","service","ctx","execute","data","req","res","result","forgotPassword"],"sources":["../../../../../../src/adapters/http/controllers/workflows/password-forgot/module.ts"],"sourcesContent":["/*\n * Copyright (c) 2022-2024.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport type { PasswordForgotResponse } from '@authup/core-http-kit';\nimport {\n    DBody, \n    DController, \n    DPost, \n    DRequest, \n    DResponse,\n} from '@routup/decorators';\nimport type { Request, Response } from 'routup';\nimport { sendAccepted } from 'routup';\nimport type { IPasswordRecoveryService } from '../../../../../core/index.ts';\n\nexport type PasswordForgotControllerContext = {\n    service: IPasswordRecoveryService,\n};\n\n@DController('/password-forgot')\nexport class PasswordForgotController {\n    protected service: IPasswordRecoveryService;\n\n    constructor(ctx: PasswordForgotControllerContext) {\n        this.service = ctx.service;\n    }\n\n    @DPost('', [])\n    async execute(\n        @DBody() data: any,\n        @DRequest() req: Request,\n        @DResponse() res: Response,\n    ): Promise<PasswordForgotResponse> {\n        const result = await this.service.forgotPassword(data);\n\n        // eslint-disable-next-line @typescript-eslint/ban-ts-comment\n        // @ts-expect-error\n        return sendAccepted(res, result);\n    }\n}\n"],"mappings":";;;AAKC,SAAA,aAAA,YAAA,QAAA,KAAA,MAAA;;;;;;;;;;;;;;AAmBD,IAAaM,2BAAb,MAAaA;CACCC;CAEV,YAAYC,KAAsC;AAC9C,OAAKD,UAAUC,IAAID;;CAGvB,MACME,QACF,MACA,KACA,KAC+B;AAK/B,SAAOJ,aAAaO,KAAKC,MAJJ,KAAKN,QAAQO,eAAeJ,KAAAA,CAIxBG"}
+{"version":3,"file":"module.mjs","names":["DBody","DContext","DController","DPost","PasswordForgotController","service","ctx","execute","data","event","result","forgotPassword","response","status"],"sources":["../../../../../../src/adapters/http/controllers/workflows/password-forgot/module.ts"],"sourcesContent":["/*\n * Copyright (c) 2022-2024.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport type { PasswordForgotPayload, PasswordForgotResponse } from '@authup/core-http-kit';\nimport {\n    DBody,\n    DContext,\n    DController,\n    DPost,\n} from '@routup/decorators';\nimport type { IRoutupEvent } from 'routup';\nimport type { IPasswordRecoveryService } from '../../../../../core/index.ts';\n\nexport type PasswordForgotControllerContext = {\n    service: IPasswordRecoveryService,\n};\n\n@DController('/password-forgot')\nexport class PasswordForgotController {\n    protected service: IPasswordRecoveryService;\n\n    constructor(ctx: PasswordForgotControllerContext) {\n        this.service = ctx.service;\n    }\n\n    @DPost('', [])\n    async execute(\n        @DBody() data: PasswordForgotPayload,\n        @DContext() event: IRoutupEvent,\n    ): Promise<PasswordForgotResponse> {\n        const result = await this.service.forgotPassword(data);\n\n        event.response.status = 202;\n\n        return result;\n    }\n}\n"],"mappings":";;AAKC,SAAA,aAAA,YAAA,QAAA,KAAA,MAAA;;;;;;;;;;;;;;AAiBD,IAAaI,2BAAb,MAAaA;CACCC;CAEV,YAAYC,KAAsC;EAC9C,KAAKD,UAAUC,IAAID;CACvB;CAEA,MACME,QACF,MACA,OAC+B;EAC/B,MAAMG,SAAS,MAAM,KAAKL,QAAQM,eAAeH,IAAAA;EAEjDC,MAAMG,SAASC,SAAS;EAExB,OAAOH;CACX;AACJ"}

package/dist/adapters/http/controllers/workflows/password-reset/module.d.ts

@@ -1,5 +1,5 @@
-import type { PasswordResetResponse } from '@authup/core-http-kit';
-import type { Request, Response } from 'routup';
+import type { PasswordResetPayload, PasswordResetResponse } from '@authup/core-http-kit';
+import type { IRoutupEvent } from 'routup';
 import type { IPasswordRecoveryService } from '../../../../../core/index.ts';
 export type PasswordResetControllerContext = {
     service: IPasswordRecoveryService;
@@ -7,6 +7,6 @@ export type PasswordResetControllerContext = {
 export declare class PasswordResetController {
     protected service: IPasswordRecoveryService;
     constructor(ctx: PasswordResetControllerContext);
-    execute(data: any, req: Request, res: Response): Promise<PasswordResetResponse>;
+    execute(data: PasswordResetPayload, event: IRoutupEvent): Promise<PasswordResetResponse>;
 }
 //# sourceMappingURL=module.d.ts.map

package/dist/adapters/http/controllers/workflows/password-reset/module.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"module.d.ts","sourceRoot":"","sources":["../../../../../../src/adapters/http/controllers/workflows/password-reset/module.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,uBAAuB,CAAC;AAQnE,OAAO,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,QAAQ,CAAC;AAEhD,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,8BAA8B,CAAC;AAE7E,MAAM,MAAM,8BAA8B,GAAG;IACzC,OAAO,EAAE,wBAAwB,CAAC;CACrC,CAAC;AAEF,qBACa,uBAAuB;IAChC,SAAS,CAAC,OAAO,EAAE,wBAAwB,CAAC;gBAEhC,GAAG,EAAE,8BAA8B;IAKzC,OAAO,CACA,IAAI,EAAE,GAAG,EACN,GAAG,EAAE,OAAO,EACX,GAAG,EAAE,QAAQ,GAC3B,OAAO,CAAC,qBAAqB,CAAC;CAOpC"}
+{"version":3,"file":"module.d.ts","sourceRoot":"","sources":["../../../../../../src/adapters/http/controllers/workflows/password-reset/module.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,oBAAoB,EAAE,qBAAqB,EAAE,MAAM,uBAAuB,CAAC;AAOzF,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,QAAQ,CAAC;AAC3C,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,8BAA8B,CAAC;AAE7E,MAAM,MAAM,8BAA8B,GAAG;IACzC,OAAO,EAAE,wBAAwB,CAAC;CACrC,CAAC;AAEF,qBACa,uBAAuB;IAChC,SAAS,CAAC,OAAO,EAAE,wBAAwB,CAAC;gBAEhC,GAAG,EAAE,8BAA8B;IAKzC,OAAO,CACA,IAAI,EAAE,oBAAoB,EACvB,KAAK,EAAE,YAAY,GAChC,OAAO,CAAC,qBAAqB,CAAC;CAOpC"}