@authup/server-core 1.0.0-beta.40 → 1.0.0-beta.42

package/dist/adapters/http/controllers/workflows/password-reset/module.mjs

@@ -1,5 +1,4 @@
-import { sendAccepted } from "routup";
-import { DBody, DController, DPost, DRequest, DResponse } from "@routup/decorators";
+import { DBody, DContext, DController, DPost } from "@routup/decorators";
 //#region src/adapters/http/controllers/workflows/password-reset/module.ts
 function _ts_decorate(decorators, target, key, desc) {
 	var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
@@ -20,21 +19,18 @@ var PasswordResetController = class {
 	constructor(ctx) {
 		this.service = ctx.service;
 	}
-	async execute(data, req, res) {
-		return sendAccepted(res, await this.service.resetPassword(data));
+	async execute(data, event) {
+		const result = await this.service.resetPassword(data);
+		event.response.status = 202;
+		return result;
 	}
 };
 _ts_decorate([
 	DPost("", []),
 	_ts_param(0, DBody()),
-	_ts_param(1, DRequest()),
-	_ts_param(2, DResponse()),
+	_ts_param(1, DContext()),
 	_ts_metadata("design:type", Function),
-	_ts_metadata("design:paramtypes", [
-		Object,
-		typeof Request === "undefined" ? Object : Request,
-		typeof Response === "undefined" ? Object : Response
-	]),
+	_ts_metadata("design:paramtypes", [typeof PasswordResetPayload === "undefined" ? Object : PasswordResetPayload, typeof IRoutupEvent === "undefined" ? Object : IRoutupEvent]),
 	_ts_metadata("design:returntype", Promise)
 ], PasswordResetController.prototype, "execute", null);
 PasswordResetController = _ts_decorate([

package/dist/adapters/http/controllers/workflows/password-reset/module.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"module.mjs","names":["DBody","DController","DPost","DRequest","DResponse","sendAccepted","PasswordResetController","service","ctx","execute","data","req","res","result","resetPassword"],"sources":["../../../../../../src/adapters/http/controllers/workflows/password-reset/module.ts"],"sourcesContent":["/*\n * Copyright (c) 2022-2024.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport type { PasswordResetResponse } from '@authup/core-http-kit';\nimport {\n    DBody, \n    DController, \n    DPost, \n    DRequest, \n    DResponse,\n} from '@routup/decorators';\nimport type { Request, Response } from 'routup';\nimport { sendAccepted } from 'routup';\nimport type { IPasswordRecoveryService } from '../../../../../core/index.ts';\n\nexport type PasswordResetControllerContext = {\n    service: IPasswordRecoveryService,\n};\n\n@DController('/password-reset')\nexport class PasswordResetController {\n    protected service: IPasswordRecoveryService;\n\n    constructor(ctx: PasswordResetControllerContext) {\n        this.service = ctx.service;\n    }\n\n    @DPost('', [])\n    async execute(\n        @DBody() data: any,\n        @DRequest() req: Request,\n        @DResponse() res: Response,\n    ): Promise<PasswordResetResponse> {\n        const result = await this.service.resetPassword(data);\n\n        // eslint-disable-next-line @typescript-eslint/ban-ts-comment\n        // @ts-expect-error\n        return sendAccepted(res, result);\n    }\n}\n"],"mappings":";;;AAKC,SAAA,aAAA,YAAA,QAAA,KAAA,MAAA;;;;;;;;;;;;;;AAmBD,IAAaM,0BAAb,MAAaA;CACCC;CAEV,YAAYC,KAAqC;AAC7C,OAAKD,UAAUC,IAAID;;CAGvB,MACME,QACF,MACA,KACA,KAC8B;AAK9B,SAAOJ,aAAaO,KAAKC,MAJJ,KAAKN,QAAQO,cAAcJ,KAAAA,CAIvBG"}
+{"version":3,"file":"module.mjs","names":["DBody","DContext","DController","DPost","PasswordResetController","service","ctx","execute","data","event","result","resetPassword","response","status"],"sources":["../../../../../../src/adapters/http/controllers/workflows/password-reset/module.ts"],"sourcesContent":["/*\n * Copyright (c) 2022-2024.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport type { PasswordResetPayload, PasswordResetResponse } from '@authup/core-http-kit';\nimport {\n    DBody,\n    DContext,\n    DController,\n    DPost,\n} from '@routup/decorators';\nimport type { IRoutupEvent } from 'routup';\nimport type { IPasswordRecoveryService } from '../../../../../core/index.ts';\n\nexport type PasswordResetControllerContext = {\n    service: IPasswordRecoveryService,\n};\n\n@DController('/password-reset')\nexport class PasswordResetController {\n    protected service: IPasswordRecoveryService;\n\n    constructor(ctx: PasswordResetControllerContext) {\n        this.service = ctx.service;\n    }\n\n    @DPost('', [])\n    async execute(\n        @DBody() data: PasswordResetPayload,\n        @DContext() event: IRoutupEvent,\n    ): Promise<PasswordResetResponse> {\n        const result = await this.service.resetPassword(data);\n\n        event.response.status = 202;\n\n        return result;\n    }\n}\n"],"mappings":";;AAKC,SAAA,aAAA,YAAA,QAAA,KAAA,MAAA;;;;;;;;;;;;;;AAiBD,IAAaI,0BAAb,MAAaA;CACCC;CAEV,YAAYC,KAAqC;EAC7C,KAAKD,UAAUC,IAAID;CACvB;CAEA,MACME,QACF,MACA,OAC8B;EAC9B,MAAMG,SAAS,MAAM,KAAKL,QAAQM,cAAcH,IAAAA;EAEhDC,MAAMG,SAASC,SAAS;EAExB,OAAOH;CACX;AACJ"}

package/dist/adapters/http/controllers/workflows/register/module.d.ts

@@ -1,5 +1,5 @@
-import type { RegisterResponse } from '@authup/core-http-kit';
-import type { Request, Response } from 'routup';
+import type { RegisterPayload, RegisterResponse } from '@authup/core-http-kit';
+import type { IRoutupEvent } from 'routup';
 import type { IRegistrationService } from '../../../../../core/index.ts';
 export type RegisterControllerContext = {
     service: IRegistrationService;
@@ -7,6 +7,6 @@ export type RegisterControllerContext = {
 export declare class RegisterController {
     protected service: IRegistrationService;
     constructor(ctx: RegisterControllerContext);
-    execute(data: any, req: Request, res: Response): Promise<RegisterResponse>;
+    execute(data: RegisterPayload, event: IRoutupEvent): Promise<RegisterResponse>;
 }
 //# sourceMappingURL=module.d.ts.map

package/dist/adapters/http/controllers/workflows/register/module.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"module.d.ts","sourceRoot":"","sources":["../../../../../../src/adapters/http/controllers/workflows/register/module.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAC;AAQ9D,OAAO,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,QAAQ,CAAC;AAEhD,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,8BAA8B,CAAC;AAEzE,MAAM,MAAM,yBAAyB,GAAG;IACpC,OAAO,EAAE,oBAAoB,CAAC;CACjC,CAAC;AAEF,qBACa,kBAAkB;IAC3B,SAAS,CAAC,OAAO,EAAE,oBAAoB,CAAC;gBAE5B,GAAG,EAAE,yBAAyB;IAKpC,OAAO,CACA,IAAI,EAAE,GAAG,EACN,GAAG,EAAE,OAAO,EACX,GAAG,EAAE,QAAQ,GAC3B,OAAO,CAAC,gBAAgB,CAAC;CAO/B"}
+{"version":3,"file":"module.d.ts","sourceRoot":"","sources":["../../../../../../src/adapters/http/controllers/workflows/register/module.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,eAAe,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAC;AAO/E,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,QAAQ,CAAC;AAC3C,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,8BAA8B,CAAC;AAEzE,MAAM,MAAM,yBAAyB,GAAG;IACpC,OAAO,EAAE,oBAAoB,CAAC;CACjC,CAAC;AAEF,qBACa,kBAAkB;IAC3B,SAAS,CAAC,OAAO,EAAE,oBAAoB,CAAC;gBAE5B,GAAG,EAAE,yBAAyB;IAKpC,OAAO,CACA,IAAI,EAAE,eAAe,EAClB,KAAK,EAAE,YAAY,GAChC,OAAO,CAAC,gBAAgB,CAAC;CAO/B"}

package/dist/adapters/http/controllers/workflows/register/module.mjs

@@ -1,5 +1,4 @@
-import { sendAccepted } from "routup";
-import { DBody, DController, DPost, DRequest, DResponse } from "@routup/decorators";
+import { DBody, DContext, DController, DPost } from "@routup/decorators";
 //#region src/adapters/http/controllers/workflows/register/module.ts
 function _ts_decorate(decorators, target, key, desc) {
 	var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
@@ -20,21 +19,18 @@ var RegisterController = class {
 	constructor(ctx) {
 		this.service = ctx.service;
 	}
-	async execute(data, req, res) {
-		return sendAccepted(res, await this.service.register(data));
+	async execute(data, event) {
+		const result = await this.service.register(data);
+		event.response.status = 202;
+		return result;
 	}
 };
 _ts_decorate([
 	DPost("", []),
 	_ts_param(0, DBody()),
-	_ts_param(1, DRequest()),
-	_ts_param(2, DResponse()),
+	_ts_param(1, DContext()),
 	_ts_metadata("design:type", Function),
-	_ts_metadata("design:paramtypes", [
-		Object,
-		typeof Request === "undefined" ? Object : Request,
-		typeof Response === "undefined" ? Object : Response
-	]),
+	_ts_metadata("design:paramtypes", [typeof RegisterPayload === "undefined" ? Object : RegisterPayload, typeof IRoutupEvent === "undefined" ? Object : IRoutupEvent]),
 	_ts_metadata("design:returntype", Promise)
 ], RegisterController.prototype, "execute", null);
 RegisterController = _ts_decorate([

package/dist/adapters/http/controllers/workflows/register/module.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"module.mjs","names":["DBody","DController","DPost","DRequest","DResponse","sendAccepted","RegisterController","service","ctx","execute","data","req","res","result","register"],"sources":["../../../../../../src/adapters/http/controllers/workflows/register/module.ts"],"sourcesContent":["/*\n * Copyright (c) 2022-2024.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport type { RegisterResponse } from '@authup/core-http-kit';\nimport {\n    DBody, \n    DController, \n    DPost, \n    DRequest, \n    DResponse,\n} from '@routup/decorators';\nimport type { Request, Response } from 'routup';\nimport { sendAccepted } from 'routup';\nimport type { IRegistrationService } from '../../../../../core/index.ts';\n\nexport type RegisterControllerContext = {\n    service: IRegistrationService,\n};\n\n@DController('/register')\nexport class RegisterController {\n    protected service: IRegistrationService;\n\n    constructor(ctx: RegisterControllerContext) {\n        this.service = ctx.service;\n    }\n\n    @DPost('', [])\n    async execute(\n        @DBody() data: any,\n        @DRequest() req: Request,\n        @DResponse() res: Response,\n    ): Promise<RegisterResponse> {\n        const result = await this.service.register(data);\n\n        // eslint-disable-next-line @typescript-eslint/ban-ts-comment\n        // @ts-expect-error\n        return sendAccepted(res, result);\n    }\n}\n"],"mappings":";;;AAKC,SAAA,aAAA,YAAA,QAAA,KAAA,MAAA;;;;;;;;;;;;;;AAmBD,IAAaM,qBAAb,MAAaA;CACCC;CAEV,YAAYC,KAAgC;AACxC,OAAKD,UAAUC,IAAID;;CAGvB,MACME,QACF,MACA,KACA,KACyB;AAKzB,SAAOJ,aAAaO,KAAKC,MAJJ,KAAKN,QAAQO,SAASJ,KAAAA,CAIlBG"}
+{"version":3,"file":"module.mjs","names":["DBody","DContext","DController","DPost","RegisterController","service","ctx","execute","data","event","result","register","response","status"],"sources":["../../../../../../src/adapters/http/controllers/workflows/register/module.ts"],"sourcesContent":["/*\n * Copyright (c) 2022-2024.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport type { RegisterPayload, RegisterResponse } from '@authup/core-http-kit';\nimport {\n    DBody,\n    DContext,\n    DController,\n    DPost,\n} from '@routup/decorators';\nimport type { IRoutupEvent } from 'routup';\nimport type { IRegistrationService } from '../../../../../core/index.ts';\n\nexport type RegisterControllerContext = {\n    service: IRegistrationService,\n};\n\n@DController('/register')\nexport class RegisterController {\n    protected service: IRegistrationService;\n\n    constructor(ctx: RegisterControllerContext) {\n        this.service = ctx.service;\n    }\n\n    @DPost('', [])\n    async execute(\n        @DBody() data: RegisterPayload,\n        @DContext() event: IRoutupEvent,\n    ): Promise<RegisterResponse> {\n        const result = await this.service.register(data);\n\n        event.response.status = 202;\n\n        return result;\n    }\n}\n"],"mappings":";;AAKC,SAAA,aAAA,YAAA,QAAA,KAAA,MAAA;;;;;;;;;;;;;;AAiBD,IAAaI,qBAAb,MAAaA;CACCC;CAEV,YAAYC,KAAgC;EACxC,KAAKD,UAAUC,IAAID;CACvB;CAEA,MACME,QACF,MACA,OACyB;EACzB,MAAMG,SAAS,MAAM,KAAKL,QAAQM,SAASH,IAAAA;EAE3CC,MAAMG,SAASC,SAAS;EAExB,OAAOH;CACX;AACJ"}

package/dist/adapters/http/controllers/workflows/status/module.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"module.d.ts","sourceRoot":"","sources":["../../../../../../src/adapters/http/controllers/workflows/status/module.ts"],"names":[],"mappings":"AAYA,MAAM,MAAM,YAAY,GAAG;IACvB,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,MAAM,CAAA;CACf,CAAC;AAEF,qBACa,gBAAgB;IAEnB,MAAM,IAAI,OAAO,CAAC,YAAY,CAAC;CASxC"}
+{"version":3,"file":"module.d.ts","sourceRoot":"","sources":["../../../../../../src/adapters/http/controllers/workflows/status/module.ts"],"names":[],"mappings":"AAeA,MAAM,MAAM,YAAY,GAAG;IACvB,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,MAAM,CAAA;CACf,CAAC;AAEF,qBACa,gBAAgB;IAEnB,MAAM,IAAI,OAAO,CAAC,YAAY,CAAC;CASxC"}

package/dist/adapters/http/controllers/workflows/status/module.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"module.mjs","names":["DController","DGet","load","path","PACKAGE_PATH","StatusController","status","pkgJson","join","isoDate","Date","toISOString","version","date"],"sources":["../../../../../../src/adapters/http/controllers/workflows/status/module.ts"],"sourcesContent":["/*\n * Copyright (c) 2022-2024.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport { DController, DGet } from '@routup/decorators';\nimport { load } from 'locter';\nimport path from 'node:path';\nimport { PACKAGE_PATH } from '../../../../../path.ts';\n\nexport type EndpointInfo = {\n    version: string,\n    date: string\n};\n\n@DController('')\nexport class StatusController {\n    @DGet('/', [])\n    async status(): Promise<EndpointInfo> {\n        const pkgJson = await load(path.join(PACKAGE_PATH, 'package.json'));\n        const isoDate = new Date().toISOString();\n\n        return {\n            version: pkgJson.version,\n            date: isoDate,\n        };\n    }\n}\n"],"mappings":";;;;;;;;;;;;;;AAkBA,IAAaK,mBAAb,MAAaA;CACT,MACMC,SAAgC;EAClC,MAAMC,UAAU,MAAML,KAAKC,KAAKK,KAAKJ,cAAc,eAAA,CAAA;EACnD,MAAMK,2BAAU,IAAIC,MAAAA,EAAOC,aAAW;AAEtC,SAAO;GACHC,SAASL,QAAQK;GACjBC,MAAMJ;GACV"}
+{"version":3,"file":"module.mjs","names":["DController","DGet","load","path","PACKAGE_PATH","StatusController","status","pkgJson","join","isoDate","Date","toISOString","version","date"],"sources":["../../../../../../src/adapters/http/controllers/workflows/status/module.ts"],"sourcesContent":["/*\n * Copyright (c) 2022-2024.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport {\n    DController,\n    DGet,\n} from '@routup/decorators';\nimport { load } from 'locter';\nimport path from 'node:path';\nimport { PACKAGE_PATH } from '../../../../../path.ts';\n\nexport type EndpointInfo = {\n    version: string,\n    date: string\n};\n\n@DController('')\nexport class StatusController {\n    @DGet('/', [])\n    async status(): Promise<EndpointInfo> {\n        const pkgJson = await load(path.join(PACKAGE_PATH, 'package.json'));\n        const isoDate = new Date().toISOString();\n\n        return {\n            version: pkgJson.version,\n            date: isoDate,\n        };\n    }\n}\n"],"mappings":";;;;;;;;;;;;;;AAqBA,IAAaK,mBAAb,MAAaA;CACT,MACMC,SAAgC;EAClC,MAAMC,UAAU,MAAML,KAAKC,KAAKK,KAAKJ,cAAc,cAAA,CAAA;EACnD,MAAMK,2BAAU,IAAIC,KAAAA,GAAOC,YAAW;EAEtC,OAAO;GACHC,SAASL,QAAQK;GACjBC,MAAMJ;EACV;CACJ;AACJ"}

package/dist/adapters/http/controllers/workflows/token/module.d.ts

@@ -1,6 +1,6 @@
 import type { OAuth2TokenGrantResponse, OAuth2TokenIntrospectionResponse } from '@authup/specs';
 import { OAuth2TokenGrant } from '@authup/specs';
-import type { Request, Response } from 'routup';
+import type { IRoutupEvent } from 'routup';
 import type { TokenControllerContext } from './types.ts';
 import type { IIdentityPermissionProvider, IIdentityResolver, IOAuth2TokenIssuer, IOAuth2TokenRevoker, IOAuth2TokenVerifier } from '../../../../../core/index.ts';
 import type { IHTTPOAuth2Grant } from '../../../adapters/index.ts';
@@ -13,9 +13,9 @@ export declare class TokenController {
     protected identityPermissionProvider: IIdentityPermissionProvider;
     protected tokenGrants: Record<`${OAuth2TokenGrant}`, IHTTPOAuth2Grant>;
     constructor(ctx: TokenControllerContext);
-    getIntrospect(req: Request): Promise<OAuth2TokenIntrospectionResponse>;
-    postIntrospect(req: Request): Promise<OAuth2TokenIntrospectionResponse>;
-    revokeToken(req: Request, res: Response): Promise<void>;
-    createToken(req: Request): Promise<OAuth2TokenGrantResponse>;
+    getIntrospect(event: IRoutupEvent): Promise<OAuth2TokenIntrospectionResponse>;
+    postIntrospect(event: IRoutupEvent): Promise<OAuth2TokenIntrospectionResponse>;
+    revokeToken(event: IRoutupEvent): Promise<null>;
+    createToken(event: IRoutupEvent): Promise<OAuth2TokenGrantResponse>;
 }
 //# sourceMappingURL=module.d.ts.map

package/dist/adapters/http/controllers/workflows/token/module.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"module.d.ts","sourceRoot":"","sources":["../../../../../../src/adapters/http/controllers/workflows/token/module.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,wBAAwB,EAAE,gCAAgC,EAAyB,MAAM,eAAe,CAAC;AACvH,OAAO,EAAe,gBAAgB,EAAE,MAAM,eAAe,CAAC;AAS9D,OAAO,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,QAAQ,CAAC;AAIhD,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,YAAY,CAAC;AACzD,OAAO,KAAK,EACR,2BAA2B,EAC3B,iBAAiB,EACjB,kBAAkB,EAClB,mBAAmB,EACnB,oBAAoB,EACvB,MAAM,8BAA8B,CAAC;AAEtC,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,4BAA4B,CAAC;AAWnE,qBAEa,eAAe;IACxB,SAAS,CAAC,kBAAkB,EAAE,kBAAkB,CAAC;IAEjD,SAAS,CAAC,iBAAiB,EAAE,kBAAkB,CAAC;IAEhD,SAAS,CAAC,aAAa,EAAE,oBAAoB,CAAC;IAE9C,SAAS,CAAC,YAAY,EAAE,mBAAmB,CAAC;IAE5C,SAAS,CAAC,gBAAgB,EAAG,iBAAiB,CAAC;IAE/C,SAAS,CAAC,0BAA0B,EAAG,2BAA2B,CAAC;IAEnE,SAAS,CAAC,WAAW,EAAG,MAAM,CAAC,GAAG,gBAAgB,EAAE,EAAE,gBAAgB,CAAC,CAAC;gBAI5D,GAAG,EAAE,sBAAsB;IA+CjC,aAAa,CACH,GAAG,EAAE,OAAO,GACzB,OAAO,CAAC,gCAAgC,CAAC;IAKtC,cAAc,CACJ,GAAG,EAAE,OAAO,GACzB,OAAO,CAAC,gCAAgC,CAAC;IA4DtC,WAAW,CACD,GAAG,EAAE,OAAO,EACX,GAAG,EAAE,QAAQ;IAkBxB,WAAW,CACD,GAAG,EAAE,OAAO,GACzB,OAAO,CAAC,wBAAwB,CAAC;CAavC"}
+{"version":3,"file":"module.d.ts","sourceRoot":"","sources":["../../../../../../src/adapters/http/controllers/workflows/token/module.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,wBAAwB,EAAE,gCAAgC,EAAyB,MAAM,eAAe,CAAC;AACvH,OAAO,EAA4C,gBAAgB,EAAE,MAAM,eAAe,CAAC;AAQ3F,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,QAAQ,CAAC;AAG3C,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,YAAY,CAAC;AACzD,OAAO,KAAK,EACR,2BAA2B,EAC3B,iBAAiB,EACjB,kBAAkB,EAClB,mBAAmB,EACnB,oBAAoB,EACvB,MAAM,8BAA8B,CAAC;AAEtC,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,4BAA4B,CAAC;AAWnE,qBAEa,eAAe;IACxB,SAAS,CAAC,kBAAkB,EAAE,kBAAkB,CAAC;IAEjD,SAAS,CAAC,iBAAiB,EAAE,kBAAkB,CAAC;IAEhD,SAAS,CAAC,aAAa,EAAE,oBAAoB,CAAC;IAE9C,SAAS,CAAC,YAAY,EAAE,mBAAmB,CAAC;IAE5C,SAAS,CAAC,gBAAgB,EAAG,iBAAiB,CAAC;IAE/C,SAAS,CAAC,0BAA0B,EAAG,2BAA2B,CAAC;IAEnE,SAAS,CAAC,WAAW,EAAG,MAAM,CAAC,GAAG,gBAAgB,EAAE,EAAE,gBAAgB,CAAC,CAAC;gBAI5D,GAAG,EAAE,sBAAsB;IA+CjC,aAAa,CAAa,KAAK,EAAE,YAAY,GAAG,OAAO,CAAC,gCAAgC,CAAC;IAKzF,cAAc,CACJ,KAAK,EAAE,YAAY,GAChC,OAAO,CAAC,gCAAgC,CAAC;IA4DtC,WAAW,CACD,KAAK,EAAE,YAAY,GAChC,OAAO,CAAC,IAAI,CAAC;IAkBV,WAAW,CAAa,KAAK,EAAE,YAAY,GAAG,OAAO,CAAC,wBAAwB,CAAC;CAaxF"}

package/dist/adapters/http/controllers/workflows/token/module.mjs

@@ -7,14 +7,13 @@ import { HTTPPasswordGrant } from "../../../adapters/oauth2/grant-types/password
 import { HTTPOAuth2RefreshTokenGrant } from "../../../adapters/oauth2/grant-types/refresh_token.mjs";
 import { HTTPRobotCredentialsGrant } from "../../../adapters/oauth2/grant-types/robot-credentials.mjs";
 import "../../../adapters/index.mjs";
-import { toOAuth2Error } from "../../../../../core/oauth2/helpers/erorr.mjs";
+import { toOAuth2Error } from "../../../../../core/oauth2/helpers/error.mjs";
 import "../../../../../core/oauth2/helpers/index.mjs";
 import { extractTokenFromRequest } from "./utils/extract.mjs";
 import "./utils/index.mjs";
 import { buildPermissionKey } from "@authup/access";
-import { OAuth2Error, OAuth2TokenGrant } from "@authup/specs";
-import { sendAccepted } from "routup";
-import { DController, DGet, DPost, DRequest, DResponse, DTags } from "@routup/decorators";
+import { OAuth2GrantTypeError, OAuth2RequestError, OAuth2TokenGrant } from "@authup/specs";
+import { DContext, DController, DGet, DPost, DTags } from "@routup/decorators";
 //#region src/adapters/http/controllers/workflows/token/module.ts
 function _ts_decorate(decorators, target, key, desc) {
 	var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
@@ -80,14 +79,14 @@ var TokenController = class {
 			})
 		};
 	}
-	async getIntrospect(req) {
-		return this.postIntrospect(req);
+	async getIntrospect(event) {
+		return this.postIntrospect(event);
 	}
-	async postIntrospect(req) {
+	async postIntrospect(event) {
 		try {
-			const token = await extractTokenFromRequest(req);
+			const token = await extractTokenFromRequest(event);
 			const payload = await this.tokenVerifier.verify(token, { skipActiveCheck: true });
-			if (!payload.sub || !payload.sub_kind) throw OAuth2Error.identityInvalid();
+			if (!payload.sub || !payload.sub_kind) throw OAuth2RequestError.identityInvalid();
 			const permissions = await this.identityPermissionProvider.getFor({
 				id: payload.sub,
 				type: payload.sub_kind,
@@ -95,7 +94,7 @@ var TokenController = class {
 				realmId: payload.realm_id
 			});
 			const identity = await this.identityResolver.resolve(payload.sub_kind, payload.sub);
-			if (!identity) throw OAuth2Error.identityInvalid();
+			if (!identity) throw OAuth2RequestError.identityInvalid();
 			const claims = new OAuth2OpenIDClaimsBuilder().fromIdentity(identity);
 			let active;
 			if (payload.jti) active = !await this.tokenVerifier.isInactive(payload.jti);
@@ -118,51 +117,51 @@ var TokenController = class {
 			throw toOAuth2Error(e);
 		}
 	}
-	async revokeToken(req, res) {
+	async revokeToken(event) {
 		try {
-			const token = await extractTokenFromRequest(req);
+			const token = await extractTokenFromRequest(event);
 			const payload = await this.tokenVerifier.verify(token);
 			await this.tokenRevoker.revoke(payload);
-			return await sendAccepted(res);
+			event.response.status = 202;
+			return null;
 		} catch (e) {
 			throw toOAuth2Error(e);
 		}
 	}
-	async createToken(req) {
-		const grantType = guessOauth2GrantTypeByRequest(req);
-		if (!grantType) throw OAuth2Error.grantInvalid();
+	async createToken(event) {
+		const grantType = await guessOauth2GrantTypeByRequest(event);
+		if (!grantType) throw OAuth2GrantTypeError.unsupported();
 		const grant = this.tokenGrants[grantType];
-		if (!grant) throw OAuth2Error.grantInvalid();
-		return grant.runWithRequest(req);
+		if (!grant) throw OAuth2GrantTypeError.unsupported();
+		return grant.runWithRequest(event);
 	}
 };
 _ts_decorate([
 	DGet("/introspect", []),
-	_ts_param(0, DRequest()),
+	_ts_param(0, DContext()),
 	_ts_metadata("design:type", Function),
-	_ts_metadata("design:paramtypes", [typeof Request === "undefined" ? Object : Request]),
+	_ts_metadata("design:paramtypes", [typeof IRoutupEvent === "undefined" ? Object : IRoutupEvent]),
 	_ts_metadata("design:returntype", Promise)
 ], TokenController.prototype, "getIntrospect", null);
 _ts_decorate([
 	DPost("/introspect", []),
-	_ts_param(0, DRequest()),
+	_ts_param(0, DContext()),
 	_ts_metadata("design:type", Function),
-	_ts_metadata("design:paramtypes", [typeof Request === "undefined" ? Object : Request]),
+	_ts_metadata("design:paramtypes", [typeof IRoutupEvent === "undefined" ? Object : IRoutupEvent]),
 	_ts_metadata("design:returntype", Promise)
 ], TokenController.prototype, "postIntrospect", null);
 _ts_decorate([
 	DPost("/revoke", []),
-	_ts_param(0, DRequest()),
-	_ts_param(1, DResponse()),
+	_ts_param(0, DContext()),
 	_ts_metadata("design:type", Function),
-	_ts_metadata("design:paramtypes", [typeof Request === "undefined" ? Object : Request, typeof Response === "undefined" ? Object : Response]),
+	_ts_metadata("design:paramtypes", [typeof IRoutupEvent === "undefined" ? Object : IRoutupEvent]),
 	_ts_metadata("design:returntype", Promise)
 ], TokenController.prototype, "revokeToken", null);
 _ts_decorate([
 	DPost("", []),
-	_ts_param(0, DRequest()),
+	_ts_param(0, DContext()),
 	_ts_metadata("design:type", Function),
-	_ts_metadata("design:paramtypes", [typeof Request === "undefined" ? Object : Request]),
+	_ts_metadata("design:paramtypes", [typeof IRoutupEvent === "undefined" ? Object : IRoutupEvent]),
 	_ts_metadata("design:returntype", Promise)
 ], TokenController.prototype, "createToken", null);
 TokenController = _ts_decorate([

package/dist/adapters/http/controllers/workflows/token/module.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"module.mjs","names":["OAuth2Error","OAuth2TokenGrant","DController","DGet","DPost","DRequest","DResponse","DTags","sendAccepted","buildPermissionKey","toOAuth2Error","OAuth2OpenIDClaimsBuilder","HTTPClientCredentialsGrant","HTTPOAuth2AuthorizeGrant","HTTPOAuth2RefreshTokenGrant","HTTPPasswordGrant","HTTPRobotCredentialsGrant","guessOauth2GrantTypeByRequest","extractTokenFromRequest","TokenController","refreshTokenIssuer","accessTokenIssuer","tokenVerifier","tokenRevoker","identityResolver","identityPermissionProvider","tokenGrants","ctx","AUTHORIZATION_CODE","codeVerifier","clientAuthenticator","oauth2ClientAuthenticator","sessionManager","CLIENT_CREDENTIALS","authenticator","ROBOT_CREDENTIALS","robotAuthenticator","PASSWORD","userAuthenticator","REFRESH_TOKEN","getIntrospect","req","postIntrospect","token","payload","verify","skipActiveCheck","sub","sub_kind","identityInvalid","permissions","getFor","id","type","clientId","client_id","realmId","realm_id","identity","resolve","claimsBuilder","claims","fromIdentity","active","jti","isInactive","Object","values","reduce","acc","binding","key","permission","name","e","revokeToken","res","revoke","createToken","grantType","grantInvalid","grant","runWithRequest"],"sources":["../../../../../../src/adapters/http/controllers/workflows/token/module.ts"],"sourcesContent":["/*\n * Copyright (c) 2022.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport type { OAuth2TokenGrantResponse, OAuth2TokenIntrospectionResponse, OAuth2TokenPermission } from '@authup/specs';\nimport { OAuth2Error, OAuth2TokenGrant } from '@authup/specs';\nimport {\n    DController,\n    DGet,\n    DPost,\n    DRequest,\n    DResponse,\n    DTags,\n} from '@routup/decorators';\nimport type { Request, Response } from 'routup';\nimport { sendAccepted } from 'routup';\nimport { buildPermissionKey } from '@authup/access';\nimport { toOAuth2Error } from '../../../../../core/oauth2/helpers/index.ts';\nimport type { TokenControllerContext } from './types.ts';\nimport type {\n    IIdentityPermissionProvider,\n    IIdentityResolver,\n    IOAuth2TokenIssuer,\n    IOAuth2TokenRevoker,\n    IOAuth2TokenVerifier,\n} from '../../../../../core/index.ts';\nimport { OAuth2OpenIDClaimsBuilder } from '../../../../../core/index.ts';\nimport type { IHTTPOAuth2Grant } from '../../../adapters/index.ts';\nimport {\n    HTTPClientCredentialsGrant,\n    HTTPOAuth2AuthorizeGrant,\n    HTTPOAuth2RefreshTokenGrant,\n    HTTPPasswordGrant,\n    HTTPRobotCredentialsGrant,\n    guessOauth2GrantTypeByRequest,\n} from '../../../adapters/index.ts';\nimport { extractTokenFromRequest } from './utils/index.ts';\n\n@DTags('auth')\n@DController('/token')\nexport class TokenController {\n    protected refreshTokenIssuer: IOAuth2TokenIssuer;\n\n    protected accessTokenIssuer: IOAuth2TokenIssuer;\n\n    protected tokenVerifier: IOAuth2TokenVerifier;\n\n    protected tokenRevoker: IOAuth2TokenRevoker;\n\n    protected identityResolver : IIdentityResolver;\n\n    protected identityPermissionProvider : IIdentityPermissionProvider;\n\n    protected tokenGrants : Record<`${OAuth2TokenGrant}`, IHTTPOAuth2Grant>;\n\n    // -------------------------------------------\n\n    constructor(ctx: TokenControllerContext) {\n        this.refreshTokenIssuer = ctx.refreshTokenIssuer;\n        this.accessTokenIssuer = ctx.accessTokenIssuer;\n        this.tokenVerifier = ctx.tokenVerifier;\n        this.tokenRevoker = ctx.tokenRevoker;\n        this.identityResolver = ctx.identityResolver;\n        this.identityPermissionProvider = ctx.identityPermissionProvider;\n\n        this.tokenGrants = {\n            [OAuth2TokenGrant.AUTHORIZATION_CODE]: new HTTPOAuth2AuthorizeGrant({\n                codeVerifier: ctx.codeVerifier,\n                clientAuthenticator: ctx.oauth2ClientAuthenticator,\n                accessTokenIssuer: ctx.accessTokenIssuer,\n                refreshTokenIssuer: ctx.refreshTokenIssuer,\n                sessionManager: ctx.sessionManager,\n            }),\n            [OAuth2TokenGrant.CLIENT_CREDENTIALS]: new HTTPClientCredentialsGrant({\n                accessTokenIssuer: ctx.accessTokenIssuer,\n                authenticator: ctx.clientAuthenticator,\n                sessionManager: ctx.sessionManager,\n            }),\n            [OAuth2TokenGrant.ROBOT_CREDENTIALS]: new HTTPRobotCredentialsGrant({\n                accessTokenIssuer: ctx.accessTokenIssuer,\n                authenticator: ctx.robotAuthenticator,\n                sessionManager: ctx.sessionManager,\n            }),\n            [OAuth2TokenGrant.PASSWORD]: new HTTPPasswordGrant({\n                accessTokenIssuer: ctx.accessTokenIssuer,\n                refreshTokenIssuer: ctx.refreshTokenIssuer,\n                authenticator: ctx.userAuthenticator,\n                clientAuthenticator: ctx.oauth2ClientAuthenticator,\n                sessionManager: ctx.sessionManager,\n            }),\n            [OAuth2TokenGrant.REFRESH_TOKEN]: new HTTPOAuth2RefreshTokenGrant({\n                accessTokenIssuer: ctx.accessTokenIssuer,\n                refreshTokenIssuer: ctx.refreshTokenIssuer,\n                tokenVerifier: ctx.tokenVerifier,\n                tokenRevoker: ctx.tokenRevoker,\n                sessionManager: ctx.sessionManager,\n                clientAuthenticator: ctx.oauth2ClientAuthenticator,\n            }),\n        };\n    }\n\n    // -------------------------------------------\n\n    @DGet('/introspect', [])\n    async getIntrospect(\n        @DRequest() req: Request,\n    ): Promise<OAuth2TokenIntrospectionResponse> {\n        return this.postIntrospect(req);\n    }\n\n    @DPost('/introspect', [])\n    async postIntrospect(\n        @DRequest() req: Request,\n    ): Promise<OAuth2TokenIntrospectionResponse> {\n        try {\n            const token = await extractTokenFromRequest(req);\n            const payload = await this.tokenVerifier.verify(token, { skipActiveCheck: true });\n            if (!payload.sub || !payload.sub_kind) {\n                throw OAuth2Error.identityInvalid();\n            }\n\n            // todo: only receive client specific permissions\n            const permissions = await this.identityPermissionProvider.getFor({\n                id: payload.sub,\n                type: payload.sub_kind,\n                clientId: payload.client_id,\n                realmId: payload.realm_id,\n            });\n\n            const identity = await this.identityResolver.resolve(payload.sub_kind, payload.sub);\n            if (!identity) {\n                // todo: differentiate between client, robot & user\n                throw OAuth2Error.identityInvalid();\n            }\n\n            const claimsBuilder = new OAuth2OpenIDClaimsBuilder();\n            const claims = claimsBuilder.fromIdentity(identity);\n\n            let active : boolean;\n            if (payload.jti) {\n                const isInactive = await this.tokenVerifier.isInactive(payload.jti);\n                active = !isInactive;\n            } else {\n                active = false;\n            }\n\n            return {\n                active,\n                // todo: permissions property should be removed.\n                permissions: Object.values(\n                    permissions.reduce((acc, binding) => {\n                        const key = buildPermissionKey(binding.permission);\n                        if (!acc[key]) {\n                            acc[key] = {\n                                name: binding.permission.name,\n                                client_id: binding.permission.client_id,\n                                realm_id: binding.permission.realm_id,\n                            } as OAuth2TokenPermission;\n                        }\n                        return acc;\n                    }, {} as Record<string, OAuth2TokenPermission>),\n                ),\n                ...payload,\n                ...claims,\n            };\n        } catch (e) {\n            throw toOAuth2Error(e);\n        }\n    }\n\n    // ----------------------------------------------------------\n\n    @DPost('/revoke', [])\n    async revokeToken(\n        @DRequest() req: Request,\n        @DResponse() res: Response,\n    ) {\n        try {\n            const token = await extractTokenFromRequest(req);\n\n            const payload = await this.tokenVerifier.verify(token);\n\n            await this.tokenRevoker.revoke(payload);\n\n            return await sendAccepted(res);\n        } catch (e) {\n            throw toOAuth2Error(e);\n        }\n    }\n\n    // ----------------------------------------------------------\n\n    @DPost('', [])\n    async createToken(\n        @DRequest() req: Request,\n    ): Promise<OAuth2TokenGrantResponse> {\n        const grantType = guessOauth2GrantTypeByRequest(req);\n        if (!grantType) {\n            throw OAuth2Error.grantInvalid();\n        }\n\n        const grant = this.tokenGrants[grantType];\n        if (!grant) {\n            throw OAuth2Error.grantInvalid();\n        }\n\n        return grant.runWithRequest(req);\n    }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;AAKC,SAAA,aAAA,YAAA,QAAA,KAAA,MAAA;;;;;;;;;;;;;;AAsCD,IAAamB,kBAAb,MAAaA;CACCC;CAEAC;CAEAC;CAEAC;CAEAC;CAEAC;CAEAC;CAIV,YAAYC,KAA6B;AACrC,OAAKP,qBAAqBO,IAAIP;AAC9B,OAAKC,oBAAoBM,IAAIN;AAC7B,OAAKC,gBAAgBK,IAAIL;AACzB,OAAKC,eAAeI,IAAIJ;AACxB,OAAKC,mBAAmBG,IAAIH;AAC5B,OAAKC,6BAA6BE,IAAIF;AAEtC,OAAKC,cAAc;IACdzB,iBAAiB2B,qBAAqB,IAAIf,yBAAyB;IAChEgB,cAAcF,IAAIE;IAClBC,qBAAqBH,IAAII;IACzBV,mBAAmBM,IAAIN;IACvBD,oBAAoBO,IAAIP;IACxBY,gBAAgBL,IAAIK;IACxB,CAAA;IACC/B,iBAAiBgC,qBAAqB,IAAIrB,2BAA2B;IAClES,mBAAmBM,IAAIN;IACvBa,eAAeP,IAAIG;IACnBE,gBAAgBL,IAAIK;IACxB,CAAA;IACC/B,iBAAiBkC,oBAAoB,IAAInB,0BAA0B;IAChEK,mBAAmBM,IAAIN;IACvBa,eAAeP,IAAIS;IACnBJ,gBAAgBL,IAAIK;IACxB,CAAA;IACC/B,iBAAiBoC,WAAW,IAAItB,kBAAkB;IAC/CM,mBAAmBM,IAAIN;IACvBD,oBAAoBO,IAAIP;IACxBc,eAAeP,IAAIW;IACnBR,qBAAqBH,IAAII;IACzBC,gBAAgBL,IAAIK;IACxB,CAAA;IACC/B,iBAAiBsC,gBAAgB,IAAIzB,4BAA4B;IAC9DO,mBAAmBM,IAAIN;IACvBD,oBAAoBO,IAAIP;IACxBE,eAAeK,IAAIL;IACnBC,cAAcI,IAAIJ;IAClBS,gBAAgBL,IAAIK;IACpBF,qBAAqBH,IAAII;IAC7B,CAAA;GACJ;;CAKJ,MACMS,cACF,KACyC;AACzC,SAAO,KAAKE,eAAeD,IAAAA;;CAG/B,MACMC,eACF,KACyC;AACzC,MAAI;GACA,MAAMC,QAAQ,MAAMzB,wBAAwBuB,IAAAA;GAC5C,MAAMG,UAAU,MAAM,KAAKtB,cAAcuB,OAAOF,OAAO,EAAEG,iBAAiB,MAAK,CAAA;AAC/E,OAAI,CAACF,QAAQG,OAAO,CAACH,QAAQI,SACzB,OAAMhD,YAAYiD,iBAAe;GAIrC,MAAMC,cAAc,MAAM,KAAKzB,2BAA2B0B,OAAO;IAC7DC,IAAIR,QAAQG;IACZM,MAAMT,QAAQI;IACdM,UAAUV,QAAQW;IAClBC,SAASZ,QAAQa;IACrB,CAAA;GAEA,MAAMC,WAAW,MAAM,KAAKlC,iBAAiBmC,QAAQf,QAAQI,UAAUJ,QAAQG,IAAG;AAClF,OAAI,CAACW,SAED,OAAM1D,YAAYiD,iBAAe;GAIrC,MAAMY,SAASD,IADWjD,2BACXiD,CAAcE,aAAaJ,SAAAA;GAE1C,IAAIK;AACJ,OAAInB,QAAQoB,IAERD,UAAS,CAACE,MADe,KAAK3C,cAAc2C,WAAWrB,QAAQoB,IAAG;OAGlED,UAAS;AAGb,UAAO;IACHA;IAEAb,aAAagB,OAAOC,OAChBjB,YAAYkB,QAAQC,KAAKC,YAAAA;KACrB,MAAMC,MAAM9D,mBAAmB6D,QAAQE,WAAU;AACjD,SAAI,CAACH,IAAIE,KACLF,KAAIE,OAAO;MACPE,MAAMH,QAAQE,WAAWC;MACzBlB,WAAWe,QAAQE,WAAWjB;MAC9BE,UAAUa,QAAQE,WAAWf;MACjC;AAEJ,YAAOY;OACR,EAAC,CAAA,CAAA;IAER,GAAGzB;IACH,GAAGiB;IACP;WACKa,GAAG;AACR,SAAMhE,cAAcgE,EAAAA;;;CAM5B,MACMC,YACF,KACA,KACF;AACE,MAAI;GACA,MAAMhC,QAAQ,MAAMzB,wBAAwBuB,IAAAA;GAE5C,MAAMG,UAAU,MAAM,KAAKtB,cAAcuB,OAAOF,MAAAA;AAEhD,SAAM,KAAKpB,aAAasD,OAAOjC,QAAAA;AAE/B,UAAO,MAAMpC,aAAaoE,IAAAA;WACrBF,GAAG;AACR,SAAMhE,cAAcgE,EAAAA;;;CAM5B,MACMI,YACF,KACiC;EACjC,MAAMC,YAAY9D,8BAA8BwB,IAAAA;AAChD,MAAI,CAACsC,UACD,OAAM/E,YAAYgF,cAAY;EAGlC,MAAMC,QAAQ,KAAKvD,YAAYqD;AAC/B,MAAI,CAACE,MACD,OAAMjF,YAAYgF,cAAY;AAGlC,SAAOC,MAAMC,eAAezC,IAAAA"}
+{"version":3,"file":"module.mjs","names":["OAuth2GrantTypeError","OAuth2RequestError","OAuth2TokenGrant","DContext","DController","DGet","DPost","DTags","buildPermissionKey","toOAuth2Error","OAuth2OpenIDClaimsBuilder","HTTPClientCredentialsGrant","HTTPOAuth2AuthorizeGrant","HTTPOAuth2RefreshTokenGrant","HTTPPasswordGrant","HTTPRobotCredentialsGrant","guessOauth2GrantTypeByRequest","extractTokenFromRequest","TokenController","refreshTokenIssuer","accessTokenIssuer","tokenVerifier","tokenRevoker","identityResolver","identityPermissionProvider","tokenGrants","ctx","AUTHORIZATION_CODE","codeVerifier","clientAuthenticator","oauth2ClientAuthenticator","sessionManager","CLIENT_CREDENTIALS","authenticator","ROBOT_CREDENTIALS","robotAuthenticator","PASSWORD","userAuthenticator","REFRESH_TOKEN","getIntrospect","event","postIntrospect","token","payload","verify","skipActiveCheck","sub","sub_kind","identityInvalid","permissions","getFor","id","type","clientId","client_id","realmId","realm_id","identity","resolve","claimsBuilder","claims","fromIdentity","active","jti","isInactive","Object","values","reduce","acc","binding","key","permission","name","e","revokeToken","revoke","response","status","createToken","grantType","unsupported","grant","runWithRequest"],"sources":["../../../../../../src/adapters/http/controllers/workflows/token/module.ts"],"sourcesContent":["/*\n * Copyright (c) 2022.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport type { OAuth2TokenGrantResponse, OAuth2TokenIntrospectionResponse, OAuth2TokenPermission } from '@authup/specs';\nimport { OAuth2GrantTypeError, OAuth2RequestError, OAuth2TokenGrant } from '@authup/specs';\nimport {\n    DContext,\n    DController,\n    DGet,\n    DPost,\n    DTags,\n} from '@routup/decorators';\nimport type { IRoutupEvent } from 'routup';\nimport { buildPermissionKey } from '@authup/access';\nimport { toOAuth2Error } from '../../../../../core/oauth2/helpers/index.ts';\nimport type { TokenControllerContext } from './types.ts';\nimport type {\n    IIdentityPermissionProvider,\n    IIdentityResolver,\n    IOAuth2TokenIssuer,\n    IOAuth2TokenRevoker,\n    IOAuth2TokenVerifier,\n} from '../../../../../core/index.ts';\nimport { OAuth2OpenIDClaimsBuilder } from '../../../../../core/index.ts';\nimport type { IHTTPOAuth2Grant } from '../../../adapters/index.ts';\nimport {\n    HTTPClientCredentialsGrant,\n    HTTPOAuth2AuthorizeGrant,\n    HTTPOAuth2RefreshTokenGrant,\n    HTTPPasswordGrant,\n    HTTPRobotCredentialsGrant,\n    guessOauth2GrantTypeByRequest,\n} from '../../../adapters/index.ts';\nimport { extractTokenFromRequest } from './utils/index.ts';\n\n@DTags('auth')\n@DController('/token')\nexport class TokenController {\n    protected refreshTokenIssuer: IOAuth2TokenIssuer;\n\n    protected accessTokenIssuer: IOAuth2TokenIssuer;\n\n    protected tokenVerifier: IOAuth2TokenVerifier;\n\n    protected tokenRevoker: IOAuth2TokenRevoker;\n\n    protected identityResolver : IIdentityResolver;\n\n    protected identityPermissionProvider : IIdentityPermissionProvider;\n\n    protected tokenGrants : Record<`${OAuth2TokenGrant}`, IHTTPOAuth2Grant>;\n\n    // -------------------------------------------\n\n    constructor(ctx: TokenControllerContext) {\n        this.refreshTokenIssuer = ctx.refreshTokenIssuer;\n        this.accessTokenIssuer = ctx.accessTokenIssuer;\n        this.tokenVerifier = ctx.tokenVerifier;\n        this.tokenRevoker = ctx.tokenRevoker;\n        this.identityResolver = ctx.identityResolver;\n        this.identityPermissionProvider = ctx.identityPermissionProvider;\n\n        this.tokenGrants = {\n            [OAuth2TokenGrant.AUTHORIZATION_CODE]: new HTTPOAuth2AuthorizeGrant({\n                codeVerifier: ctx.codeVerifier,\n                clientAuthenticator: ctx.oauth2ClientAuthenticator,\n                accessTokenIssuer: ctx.accessTokenIssuer,\n                refreshTokenIssuer: ctx.refreshTokenIssuer,\n                sessionManager: ctx.sessionManager,\n            }),\n            [OAuth2TokenGrant.CLIENT_CREDENTIALS]: new HTTPClientCredentialsGrant({\n                accessTokenIssuer: ctx.accessTokenIssuer,\n                authenticator: ctx.clientAuthenticator,\n                sessionManager: ctx.sessionManager,\n            }),\n            [OAuth2TokenGrant.ROBOT_CREDENTIALS]: new HTTPRobotCredentialsGrant({\n                accessTokenIssuer: ctx.accessTokenIssuer,\n                authenticator: ctx.robotAuthenticator,\n                sessionManager: ctx.sessionManager,\n            }),\n            [OAuth2TokenGrant.PASSWORD]: new HTTPPasswordGrant({\n                accessTokenIssuer: ctx.accessTokenIssuer,\n                refreshTokenIssuer: ctx.refreshTokenIssuer,\n                authenticator: ctx.userAuthenticator,\n                clientAuthenticator: ctx.oauth2ClientAuthenticator,\n                sessionManager: ctx.sessionManager,\n            }),\n            [OAuth2TokenGrant.REFRESH_TOKEN]: new HTTPOAuth2RefreshTokenGrant({\n                accessTokenIssuer: ctx.accessTokenIssuer,\n                refreshTokenIssuer: ctx.refreshTokenIssuer,\n                tokenVerifier: ctx.tokenVerifier,\n                tokenRevoker: ctx.tokenRevoker,\n                sessionManager: ctx.sessionManager,\n                clientAuthenticator: ctx.oauth2ClientAuthenticator,\n            }),\n        };\n    }\n\n    // -------------------------------------------\n\n    @DGet('/introspect', [])\n    async getIntrospect(@DContext() event: IRoutupEvent): Promise<OAuth2TokenIntrospectionResponse> {\n        return this.postIntrospect(event);\n    }\n\n    @DPost('/introspect', [])\n    async postIntrospect(\n        @DContext() event: IRoutupEvent,\n    ): Promise<OAuth2TokenIntrospectionResponse> {\n        try {\n            const token = await extractTokenFromRequest(event);\n            const payload = await this.tokenVerifier.verify(token, { skipActiveCheck: true });\n            if (!payload.sub || !payload.sub_kind) {\n                throw OAuth2RequestError.identityInvalid();\n            }\n\n            // todo: only receive client specific permissions\n            const permissions = await this.identityPermissionProvider.getFor({\n                id: payload.sub,\n                type: payload.sub_kind,\n                clientId: payload.client_id,\n                realmId: payload.realm_id,\n            });\n\n            const identity = await this.identityResolver.resolve(payload.sub_kind, payload.sub);\n            if (!identity) {\n                // todo: differentiate between client, robot & user\n                throw OAuth2RequestError.identityInvalid();\n            }\n\n            const claimsBuilder = new OAuth2OpenIDClaimsBuilder();\n            const claims = claimsBuilder.fromIdentity(identity);\n\n            let active : boolean;\n            if (payload.jti) {\n                const isInactive = await this.tokenVerifier.isInactive(payload.jti);\n                active = !isInactive;\n            } else {\n                active = false;\n            }\n\n            return {\n                active,\n                // todo: permissions property should be removed.\n                permissions: Object.values(\n                    permissions.reduce((acc, binding) => {\n                        const key = buildPermissionKey(binding.permission);\n                        if (!acc[key]) {\n                            acc[key] = {\n                                name: binding.permission.name,\n                                client_id: binding.permission.client_id,\n                                realm_id: binding.permission.realm_id,\n                            } as OAuth2TokenPermission;\n                        }\n                        return acc;\n                    }, {} as Record<string, OAuth2TokenPermission>),\n                ),\n                ...payload,\n                ...claims,\n            };\n        } catch (e) {\n            throw toOAuth2Error(e);\n        }\n    }\n\n    // ----------------------------------------------------------\n\n    @DPost('/revoke', [])\n    async revokeToken(\n        @DContext() event: IRoutupEvent,\n    ): Promise<null> {\n        try {\n            const token = await extractTokenFromRequest(event);\n\n            const payload = await this.tokenVerifier.verify(token);\n\n            await this.tokenRevoker.revoke(payload);\n\n            event.response.status = 202;\n            return null;\n        } catch (e) {\n            throw toOAuth2Error(e);\n        }\n    }\n\n    // ----------------------------------------------------------\n\n    @DPost('', [])\n    async createToken(@DContext() event: IRoutupEvent): Promise<OAuth2TokenGrantResponse> {\n        const grantType = await guessOauth2GrantTypeByRequest(event);\n        if (!grantType) {\n            throw OAuth2GrantTypeError.unsupported();\n        }\n\n        const grant = this.tokenGrants[grantType];\n        if (!grant) {\n            throw OAuth2GrantTypeError.unsupported();\n        }\n\n        return grant.runWithRequest(event);\n    }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;AAKC,SAAA,aAAA,YAAA,QAAA,KAAA,MAAA;;;;;;;;;;;;;;AAoCD,IAAakB,kBAAb,MAAaA;CACCC;CAEAC;CAEAC;CAEAC;CAEAC;CAEAC;CAEAC;CAIV,YAAYC,KAA6B;EACrC,KAAKP,qBAAqBO,IAAIP;EAC9B,KAAKC,oBAAoBM,IAAIN;EAC7B,KAAKC,gBAAgBK,IAAIL;EACzB,KAAKC,eAAeI,IAAIJ;EACxB,KAAKC,mBAAmBG,IAAIH;EAC5B,KAAKC,6BAA6BE,IAAIF;EAEtC,KAAKC,cAAc;IACdvB,iBAAiByB,qBAAqB,IAAIf,yBAAyB;IAChEgB,cAAcF,IAAIE;IAClBC,qBAAqBH,IAAII;IACzBV,mBAAmBM,IAAIN;IACvBD,oBAAoBO,IAAIP;IACxBY,gBAAgBL,IAAIK;GACxB,CAAA;IACC7B,iBAAiB8B,qBAAqB,IAAIrB,2BAA2B;IAClES,mBAAmBM,IAAIN;IACvBa,eAAeP,IAAIG;IACnBE,gBAAgBL,IAAIK;GACxB,CAAA;IACC7B,iBAAiBgC,oBAAoB,IAAInB,0BAA0B;IAChEK,mBAAmBM,IAAIN;IACvBa,eAAeP,IAAIS;IACnBJ,gBAAgBL,IAAIK;GACxB,CAAA;IACC7B,iBAAiBkC,WAAW,IAAItB,kBAAkB;IAC/CM,mBAAmBM,IAAIN;IACvBD,oBAAoBO,IAAIP;IACxBc,eAAeP,IAAIW;IACnBR,qBAAqBH,IAAII;IACzBC,gBAAgBL,IAAIK;GACxB,CAAA;IACC7B,iBAAiBoC,gBAAgB,IAAIzB,4BAA4B;IAC9DO,mBAAmBM,IAAIN;IACvBD,oBAAoBO,IAAIP;IACxBE,eAAeK,IAAIL;IACnBC,cAAcI,IAAIJ;IAClBS,gBAAgBL,IAAIK;IACpBF,qBAAqBH,IAAII;GAC7B,CAAA;EACJ;CACJ;CAIA,MACMS,cAAc,OAA4E;EAC5F,OAAO,KAAKE,eAAeD,KAAAA;CAC/B;CAEA,MACMC,eACF,OACyC;EACzC,IAAI;GACA,MAAMC,QAAQ,MAAMzB,wBAAwBuB,KAAAA;GAC5C,MAAMG,UAAU,MAAM,KAAKtB,cAAcuB,OAAOF,OAAO,EAAEG,iBAAiB,KAAK,CAAA;GAC/E,IAAI,CAACF,QAAQG,OAAO,CAACH,QAAQI,UACzB,MAAM9C,mBAAmB+C,gBAAe;GAI5C,MAAMC,cAAc,MAAM,KAAKzB,2BAA2B0B,OAAO;IAC7DC,IAAIR,QAAQG;IACZM,MAAMT,QAAQI;IACdM,UAAUV,QAAQW;IAClBC,SAASZ,QAAQa;GACrB,CAAA;GAEA,MAAMC,WAAW,MAAM,KAAKlC,iBAAiBmC,QAAQf,QAAQI,UAAUJ,QAAQG,GAAG;GAClF,IAAI,CAACW,UAED,MAAMxD,mBAAmB+C,gBAAe;GAI5C,MAAMY,SAASD,IADWjD,0BACXiD,EAAcE,aAAaJ,QAAAA;GAE1C,IAAIK;GACJ,IAAInB,QAAQoB,KAERD,SAAS,CAACE,MADe,KAAK3C,cAAc2C,WAAWrB,QAAQoB,GAAG;QAGlED,SAAS;GAGb,OAAO;IACHA;IAEAb,aAAagB,OAAOC,OAChBjB,YAAYkB,QAAQC,KAAKC,YAAAA;KACrB,MAAMC,MAAM9D,mBAAmB6D,QAAQE,UAAU;KACjD,IAAI,CAACH,IAAIE,MACLF,IAAIE,OAAO;MACPE,MAAMH,QAAQE,WAAWC;MACzBlB,WAAWe,QAAQE,WAAWjB;MAC9BE,UAAUa,QAAQE,WAAWf;KACjC;KAEJ,OAAOY;IACX,GAAG,CAAC,CAAA,CAAA;IAER,GAAGzB;IACH,GAAGiB;GACP;EACJ,SAASa,GAAG;GACR,MAAMhE,cAAcgE,CAAAA;EACxB;CACJ;CAIA,MACMC,YACF,OACa;EACb,IAAI;GACA,MAAMhC,QAAQ,MAAMzB,wBAAwBuB,KAAAA;GAE5C,MAAMG,UAAU,MAAM,KAAKtB,cAAcuB,OAAOF,KAAAA;GAEhD,MAAM,KAAKpB,aAAaqD,OAAOhC,OAAAA;GAE/BH,MAAMoC,SAASC,SAAS;GACxB,OAAO;EACX,SAASJ,GAAG;GACR,MAAMhE,cAAcgE,CAAAA;EACxB;CACJ;CAIA,MACMK,YAAY,OAAoE;EAClF,MAAMC,YAAY,MAAM/D,8BAA8BwB,KAAAA;EACtD,IAAI,CAACuC,WACD,MAAM/E,qBAAqBgF,YAAW;EAG1C,MAAMC,QAAQ,KAAKxD,YAAYsD;EAC/B,IAAI,CAACE,OACD,MAAMjF,qBAAqBgF,YAAW;EAG1C,OAAOC,MAAMC,eAAe1C,KAAAA;CAChC;AACJ"}

package/dist/adapters/http/controllers/workflows/token/utils/extract.d.ts

@@ -1,3 +1,3 @@
-import type { Request } from 'routup';
-export declare function extractTokenFromRequest(req: Request): Promise<string>;
+import type { IRoutupEvent } from 'routup';
+export declare function extractTokenFromRequest(event: IRoutupEvent): Promise<string>;
 //# sourceMappingURL=extract.d.ts.map

package/dist/adapters/http/controllers/workflows/token/utils/extract.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"extract.d.ts","sourceRoot":"","sources":["../../../../../../../src/adapters/http/controllers/workflows/token/utils/extract.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,QAAQ,CAAC;AAMtC,wBAAsB,uBAAuB,CAAC,GAAG,EAAE,OAAO,GAAI,OAAO,CAAC,MAAM,CAAC,CAuB5E"}
+{"version":3,"file":"extract.d.ts","sourceRoot":"","sources":["../../../../../../../src/adapters/http/controllers/workflows/token/utils/extract.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,QAAQ,CAAC;AAU3C,wBAAsB,uBAAuB,CAAC,KAAK,EAAE,YAAY,GAAI,OAAO,CAAC,MAAM,CAAC,CA2BnF"}

package/dist/adapters/http/controllers/workflows/token/utils/extract.mjs

@@ -1,19 +1,20 @@
+import { readFromLocations } from "../../../../request/helpers/locations.mjs";
 import { useRequestToken } from "../../../../request/helpers/token.mjs";
 import "../../../../request/index.mjs";
 import { TokenRequestValidator } from "./validator.mjs";
-import { ValidupError, buildErrorMessageForAttribute, defineIssueItem } from "validup";
-import { RoutupContainerAdapter } from "@validup/adapter-routup";
+import { ValidupError, buildErrorMessageForAttribute, defineIssueItem, isValidupError } from "validup";
 //#region src/adapters/http/controllers/workflows/token/utils/extract.ts
-async function extractTokenFromRequest(req) {
+async function extractTokenFromRequest(event) {
 	let token;
 	try {
-		token = (await new RoutupContainerAdapter(new TokenRequestValidator()).run(req, { locations: [
+		token = (await new TokenRequestValidator().run(await readFromLocations(event, [
 			"body",
 			"query",
 			"params"
-		] })).token;
-	} catch {
-		token = useRequestToken(req);
+		]))).token;
+	} catch (e) {
+		if (!isValidupError(e)) throw e;
+		token = useRequestToken(event);
 	}
 	if (!token) throw new ValidupError([defineIssueItem({
 		path: ["token"],

package/dist/adapters/http/controllers/workflows/token/utils/extract.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"extract.mjs","names":["RoutupContainerAdapter","ValidupError","buildErrorMessageForAttribute","defineIssueItem","useRequestToken","TokenRequestValidator","extractTokenFromRequest","req","token","validator","validatorAdapter","data","run","locations","path","message"],"sources":["../../../../../../../src/adapters/http/controllers/workflows/token/utils/extract.ts"],"sourcesContent":["/*\n * Copyright (c) 2024.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport type { Request } from 'routup';\nimport { RoutupContainerAdapter } from '@validup/adapter-routup';\nimport { ValidupError, buildErrorMessageForAttribute, defineIssueItem } from 'validup';\nimport { useRequestToken } from '../../../../request/index.ts';\nimport { TokenRequestValidator } from './validator.ts';\n\nexport async function extractTokenFromRequest(req: Request) : Promise<string> {\n    let token : string | undefined;\n\n    try {\n        const validator = new TokenRequestValidator();\n        const validatorAdapter = new RoutupContainerAdapter(validator);\n        const data = await validatorAdapter.run(req, { locations: ['body', 'query', 'params'] });\n\n        token = data.token;\n    } catch {\n        token = useRequestToken(req);\n    }\n\n    if (!token) {\n        throw new ValidupError([\n            defineIssueItem({\n                path: ['token'],\n                message: buildErrorMessageForAttribute('token'),\n            }),\n        ]);\n    }\n\n    return token;\n}\n"],"mappings":";;;;;;AAaA,eAAsBM,wBAAwBC,KAAY;CACtD,IAAIC;AAEJ,KAAI;AAKAA,WAAQG,MAFWD,IADUV,uBAAuBS,IAD9BJ,uBAC8BI,CACjCC,CAAiBE,IAAIL,KAAK,EAAEM,WAAW;GAAC;GAAQ;GAAS;GAAS,EAAC,CAAA,EAEzEL;SACT;AACJA,UAAQJ,gBAAgBG,IAAAA;;AAG5B,KAAI,CAACC,MACD,OAAM,IAAIP,aAAa,CACnBE,gBAAgB;EACZW,MAAM,CAAC,QAAQ;EACfC,SAASb,8BAA8B,QAAA;EAC3C,CAAA,CACH,CAAA;AAGL,QAAOM"}
+{"version":3,"file":"extract.mjs","names":["ValidupError","buildErrorMessageForAttribute","defineIssueItem","isValidupError","readFromLocations","useRequestToken","TokenRequestValidator","extractTokenFromRequest","event","token","validator","data","run","e","path","message"],"sources":["../../../../../../../src/adapters/http/controllers/workflows/token/utils/extract.ts"],"sourcesContent":["/*\n * Copyright (c) 2024.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport type { IRoutupEvent } from 'routup';\nimport {\n    ValidupError, \n    buildErrorMessageForAttribute, \n    defineIssueItem, \n    isValidupError,\n} from 'validup';\nimport { readFromLocations, useRequestToken } from '../../../../request/index.ts';\nimport { TokenRequestValidator } from './validator.ts';\n\nexport async function extractTokenFromRequest(event: IRoutupEvent) : Promise<string> {\n    let token : string | undefined;\n\n    try {\n        const validator = new TokenRequestValidator();\n        const data = await validator.run(\n            await readFromLocations(event, ['body', 'query', 'params']),\n        );\n\n        token = data.token;\n    } catch (e) {\n        if (!isValidupError(e)) {\n            throw e;\n        }\n        token = useRequestToken(event);\n    }\n\n    if (!token) {\n        throw new ValidupError([\n            defineIssueItem({\n                path: ['token'],\n                message: buildErrorMessageForAttribute('token'),\n            }),\n        ]);\n    }\n\n    return token;\n}\n"],"mappings":";;;;;;AAiBA,eAAsBO,wBAAwBC,OAAmB;CAC7D,IAAIC;CAEJ,IAAI;EAMAA,SAAQE,MAJWD,IADGJ,sBACHI,EAAUE,IACzB,MAAMR,kBAAkBI,OAAO;GAAC;GAAQ;GAAS;GAAS,CAAA,GAGjDC;CACjB,SAASI,GAAG;EACR,IAAI,CAACV,eAAeU,CAAAA,GAChB,MAAMA;EAEVJ,QAAQJ,gBAAgBG,KAAAA;CAC5B;CAEA,IAAI,CAACC,OACD,MAAM,IAAIT,aAAa,CACnBE,gBAAgB;EACZY,MAAM,CAAC,OAAA;EACPC,SAASd,8BAA8B,OAAA;CAC3C,CAAA,CAAA,CACH;CAGL,OAAOQ;AACX"}

package/dist/adapters/http/controllers/workflows/token/utils/validator.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"validator.mjs","names":["createValidationChain","createValidator","Container","TokenRequestValidator","initialize","mount","chain","exists","notEmpty","isString","isLength","min","max"],"sources":["../../../../../../../src/adapters/http/controllers/workflows/token/utils/validator.ts"],"sourcesContent":["/*\n * Copyright (c) 2024.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport { createValidationChain, createValidator } from '@validup/adapter-validator';\nimport { Container } from 'validup';\n\nexport class TokenRequestValidator extends Container<{ token: string }> {\n    protected initialize() {\n        super.initialize();\n\n        this.mount(\n            'token',\n            createValidator(() => {\n                const chain = createValidationChain();\n                return chain\n                    .exists()\n                    .notEmpty()\n                    .isString()\n                    .isLength({\n                        min: 16,\n                        max: 2048, \n                    });\n            }),\n        );\n    }\n}\n"],"mappings":";;;AAUA,IAAaG,wBAAb,cAA2CD,UAAAA;CAC7BE,aAAa;AACnB,QAAMA,YAAAA;AAEN,OAAKC,MACD,SACAJ,sBAAgB;AAEZ,UADcD,uBACPM,CACFC,QAAM,CACNC,UAAQ,CACRC,UAAQ,CACRC,SAAS;IACNC,KAAK;IACLC,KAAK;IACT,CAAA;IACR,CAAA"}
+{"version":3,"file":"validator.mjs","names":["createValidationChain","createValidator","Container","TokenRequestValidator","initialize","mount","chain","exists","notEmpty","isString","isLength","min","max"],"sources":["../../../../../../../src/adapters/http/controllers/workflows/token/utils/validator.ts"],"sourcesContent":["/*\n * Copyright (c) 2024.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport { createValidationChain, createValidator } from '@validup/adapter-validator';\nimport { Container } from 'validup';\n\nexport class TokenRequestValidator extends Container<{ token: string }> {\n    protected initialize() {\n        super.initialize();\n\n        this.mount(\n            'token',\n            createValidator(() => {\n                const chain = createValidationChain();\n                return chain\n                    .exists()\n                    .notEmpty()\n                    .isString()\n                    .isLength({\n                        min: 16,\n                        max: 2048, \n                    });\n            }),\n        );\n    }\n}\n"],"mappings":";;;AAUA,IAAaG,wBAAb,cAA2CD,UAAAA;CAC7BE,aAAa;EACnB,MAAMA,WAAAA;EAEN,KAAKC,MACD,SACAJ,sBAAgB;GAEZ,OADcD,sBACPM,EACFC,OAAM,EACNC,SAAQ,EACRC,SAAQ,EACRC,SAAS;IACNC,KAAK;IACLC,KAAK;GACT,CAAA;EACR,CAAA,CAAA;CAER;AACJ"}

package/dist/adapters/http/index.d.ts

@@ -2,6 +2,4 @@ export * from './adapters/index.ts';
 export * from './controllers/index.ts';
 export * from './middleware/index.ts';
 export * from './request/index.ts';
-export * from './server/index.ts';
-export * from './swagger/index.ts';
 //# sourceMappingURL=index.d.ts.map

package/dist/adapters/http/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/adapters/http/index.ts"],"names":[],"mappings":"AAOA,cAAc,qBAAqB,CAAC;AACpC,cAAc,wBAAwB,CAAC;AACvC,cAAc,uBAAuB,CAAC;AACtC,cAAc,oBAAoB,CAAC;AACnC,cAAc,mBAAmB,CAAC;AAClC,cAAc,oBAAoB,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/adapters/http/index.ts"],"names":[],"mappings":"AAOA,cAAc,qBAAqB,CAAC;AACpC,cAAc,wBAAwB,CAAC;AACvC,cAAc,uBAAuB,CAAC;AACtC,cAAc,oBAAoB,CAAC"}

package/dist/adapters/http/index.mjs

@@ -2,8 +2,10 @@ import { RequestHandlerOperation } from "./request/constants.mjs";
 import { setRequestPermissionEvaluator, useRequestPermissionEvaluator } from "./request/permission/helper.mjs";
 import { RequestIdentity, isRequestIdentityMasterRealmMember, setRequestIdentity, useRequestIdentity, useRequestIdentityOrFail } from "./request/helpers/identity.mjs";
 import { buildActorContext } from "./request/helpers/actor.mjs";
-import { getRequestBodyRealmID } from "./request/helpers/body-realm-id.mjs";
+import { getBodyRealmID } from "./request/helpers/body-realm-id.mjs";
+import { readFromLocations } from "./request/helpers/locations.mjs";
 import { getRequestParamID, getRequestStringParam, getRequestStringParamOrFail, useRequestParamID } from "./request/helpers/param-id.mjs";
+import { applyRouteRealmIDToBody, getRequestRealmID, setRequestRealmID } from "./request/helpers/realm-id.mjs";
 import { setRequestScopes, useRequestScopes } from "./request/helpers/scopes.mjs";
 import { setRequestToken, useRequestToken } from "./request/helpers/token.mjs";
 import { RequestPermissionEvaluator } from "./request/permission/module.mjs";
@@ -22,7 +24,9 @@ import { AuthorizationMiddleware } from "./middleware/built-in/authorization/mod
 import { createAuthorizationMiddleware } from "./middleware/built-in/authorization/factory.mjs";
 import { ForceLoggedInMiddleware } from "./middleware/built-in/loggedin/module.mjs";
 import { ForceUserLoggedInMiddleware } from "./middleware/built-in/loggedin/user.mjs";
-import { registerAssetsMiddleware } from "./middleware/built-in/assets.mjs";
+import { RealmResolverMiddleware } from "./middleware/built-in/realm-resolver/module.mjs";
+import { createRealmResolverMiddleware } from "./middleware/built-in/realm-resolver/factory.mjs";
+import { VITE_SERVER_STORE_KEY, registerAssetsMiddleware } from "./middleware/built-in/assets.mjs";
 import { registerBasicMiddleware } from "./middleware/built-in/basic.mjs";
 import { registerCorsMiddleware } from "./middleware/built-in/cors.mjs";
 import { registerErrorMiddleware } from "./middleware/built-in/error.mjs";
@@ -75,8 +79,4 @@ import { UserPermissionRequestValidator } from "./controllers/entities/user-perm
 import { UserRoleController } from "./controllers/entities/user-role/module.mjs";
 import { UserRoleRequestValidator } from "./controllers/entities/user-role/utils/validation.mjs";
 import "./controllers/index.mjs";
-import { createHttpServer } from "./server/module.mjs";
-import "./server/index.mjs";
-import { Swagger } from "./swagger/module.mjs";
-import "./swagger/index.mjs";
-export { ActivateController, AuthorizationMiddleware, AuthorizeController, ClientController, ClientPermissionController, ClientPermissionRequestValidator, ClientRoleController, ClientRoleRequestValidator, ClientScopeController, ClientScopeRequestValidator, ForceLoggedInMiddleware, ForceUserLoggedInMiddleware, HTTPClientCredentialsGrant, HTTPOAuth2AuthorizeGrant, HTTPOAuth2Authorizer, HTTPOAuth2IdentityGrantType, HTTPOAuth2RefreshTokenGrant, HTTPPasswordGrant, HTTPRobotCredentialsGrant, IdentityProviderController, IdentityProviderRoleMappingController, JwkController, OpenIDController, PasswordForgotController, PasswordResetController, PermissionController, PermissionPolicyController, PolicyAttributesValidator, PolicyController, PolicyValidator, RealmController, RegisterController, RequestHandlerOperation, RequestIdentity, RequestPermissionEvaluator, RobotController, RobotPermissionController, RobotPermissionRequestValidator, RobotRoleController, RobotRoleRequestValidator, RoleAttributeController, RoleAttributeRequestValidator, RoleController, RolePermissionController, RolePermissionRequestValidator, ScopeController, StatusController, Swagger, TokenController, UserAttributeController, UserAttributeRequestValidator, UserController, UserPermissionController, UserPermissionRequestValidator, UserRoleController, UserRoleRequestValidator, buildActorContext, createAuthorizationMiddleware, createHttpServer, createLoggerMiddleware, createSwaggerMiddleware, extractClientCredentialsFromRequest, getJwkRouteHandler, getJwksRouteHandler, getRequestBodyRealmID, getRequestParamID, getRequestStringParam, getRequestStringParamOrFail, guessOauth2GrantTypeByRequest, isRequestIdentityMasterRealmMember, registerAssetsMiddleware, registerBasicMiddleware, registerCorsMiddleware, registerErrorMiddleware, registerPrometheusMiddleware, registerRateLimitMiddleware, setRequestIdentity, setRequestPermissionEvaluator, setRequestScopes, setRequestToken, useRequestIdentity, useRequestIdentityOrFail, useRequestParamID, useRequestPermissionEvaluator, useRequestScopes, useRequestToken };
+export { ActivateController, AuthorizationMiddleware, AuthorizeController, ClientController, ClientPermissionController, ClientPermissionRequestValidator, ClientRoleController, ClientRoleRequestValidator, ClientScopeController, ClientScopeRequestValidator, ForceLoggedInMiddleware, ForceUserLoggedInMiddleware, HTTPClientCredentialsGrant, HTTPOAuth2AuthorizeGrant, HTTPOAuth2Authorizer, HTTPOAuth2IdentityGrantType, HTTPOAuth2RefreshTokenGrant, HTTPPasswordGrant, HTTPRobotCredentialsGrant, IdentityProviderController, IdentityProviderRoleMappingController, JwkController, OpenIDController, PasswordForgotController, PasswordResetController, PermissionController, PermissionPolicyController, PolicyAttributesValidator, PolicyController, PolicyValidator, RealmController, RealmResolverMiddleware, RegisterController, RequestHandlerOperation, RequestIdentity, RequestPermissionEvaluator, RobotController, RobotPermissionController, RobotPermissionRequestValidator, RobotRoleController, RobotRoleRequestValidator, RoleAttributeController, RoleAttributeRequestValidator, RoleController, RolePermissionController, RolePermissionRequestValidator, ScopeController, StatusController, TokenController, UserAttributeController, UserAttributeRequestValidator, UserController, UserPermissionController, UserPermissionRequestValidator, UserRoleController, UserRoleRequestValidator, VITE_SERVER_STORE_KEY, applyRouteRealmIDToBody, buildActorContext, createAuthorizationMiddleware, createLoggerMiddleware, createRealmResolverMiddleware, createSwaggerMiddleware, extractClientCredentialsFromRequest, getBodyRealmID, getJwkRouteHandler, getJwksRouteHandler, getRequestParamID, getRequestRealmID, getRequestStringParam, getRequestStringParamOrFail, guessOauth2GrantTypeByRequest, isRequestIdentityMasterRealmMember, readFromLocations, registerAssetsMiddleware, registerBasicMiddleware, registerCorsMiddleware, registerErrorMiddleware, registerPrometheusMiddleware, registerRateLimitMiddleware, setRequestIdentity, setRequestPermissionEvaluator, setRequestRealmID, setRequestScopes, setRequestToken, useRequestIdentity, useRequestIdentityOrFail, useRequestParamID, useRequestPermissionEvaluator, useRequestScopes, useRequestToken };

package/dist/adapters/http/middleware/built-in/assets.d.ts

@@ -1,3 +1,4 @@
 import type { Router } from 'routup';
+export declare const VITE_SERVER_STORE_KEY: unique symbol;
 export declare function registerAssetsMiddleware(router: Router): Promise<void>;
 //# sourceMappingURL=assets.d.ts.map

package/dist/adapters/http/middleware/built-in/assets.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"assets.d.ts","sourceRoot":"","sources":["../../../../../src/adapters/http/middleware/built-in/assets.ts"],"names":[],"mappings":"AAWA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAIrC,wBAAsB,wBAAwB,CAAC,MAAM,EAAE,MAAM,iBAgD5D"}
+{"version":3,"file":"assets.d.ts","sourceRoot":"","sources":["../../../../../src/adapters/http/middleware/built-in/assets.ts"],"names":[],"mappings":"AAWA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAOrC,eAAO,MAAM,qBAAqB,eAAuB,CAAC;AAE1D,wBAAsB,wBAAwB,CAAC,MAAM,EAAE,MAAM,iBAyC5D"}

package/dist/adapters/http/middleware/built-in/assets.mjs

@@ -1,10 +1,12 @@
 import { PACKAGE_PATH, UI_DIST_PATH, UI_SOURCE_PATH } from "../../../../path.mjs";
 import path from "node:path";
 import { CodeTransformation, isCodeTransformation } from "typeorm-extension";
-import { coreHandler, setRequestParam } from "routup";
+import { defineCoreHandler } from "routup";
+import { fromNodeMiddleware } from "routup/node";
 import { load } from "locter";
 import { createHandler } from "@routup/assets";
 //#region src/adapters/http/middleware/built-in/assets.ts
+const VITE_SERVER_STORE_KEY = Symbol("ViteServer");
 async function registerAssetsMiddleware(router) {
 	if (!isCodeTransformation(CodeTransformation.JUST_IN_TIME)) {
 		router.use("public", createHandler(path.posix.join(PACKAGE_PATH, "public"), {
@@ -17,9 +19,7 @@ async function registerAssetsMiddleware(router) {
 		}));
 		return;
 	}
-	/**
-	* @type {import('vite').ViteDevServer}
-	*/ const server = await (await load("vite")).createServer({
+	const server = await (await load("vite")).createServer({
 		root: UI_SOURCE_PATH,
 		base: "/public/",
 		logLevel: "error",
@@ -32,13 +32,13 @@ async function registerAssetsMiddleware(router) {
 		},
 		appType: "custom"
 	});
-	router.use("public", coreHandler((req, res, next) => server.middlewares(req, res, next)));
-	router.use(coreHandler((req, res, next) => {
-		setRequestParam(req, "viteServer", server);
-		next();
+	router.use("public", fromNodeMiddleware(server.middlewares));
+	router.use(defineCoreHandler((event) => {
+		event.store[VITE_SERVER_STORE_KEY] = server;
+		return event.next();
 	}));
 }
 //#endregion
-export { registerAssetsMiddleware };
+export { VITE_SERVER_STORE_KEY, registerAssetsMiddleware };
 
 //# sourceMappingURL=assets.mjs.map

package/dist/adapters/http/middleware/built-in/assets.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"assets.mjs","names":["load","CodeTransformation","isCodeTransformation","createHandler","path","coreHandler","setRequestParam","PACKAGE_PATH","UI_DIST_PATH","UI_SOURCE_PATH","registerAssetsMiddleware","router","JUST_IN_TIME","use","posix","join","fallthrough","scan","vite","server","createServer","root","base","logLevel","middlewareMode","watch","usePolling","interval","appType","req","res","next","middlewares"],"sources":["../../../../../src/adapters/http/middleware/built-in/assets.ts"],"sourcesContent":["/*\n * Copyright (c) 2023.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport { load } from 'locter';\nimport { CodeTransformation, isCodeTransformation } from 'typeorm-extension';\nimport { createHandler } from '@routup/assets';\nimport path from 'node:path';\nimport type { Router } from 'routup';\nimport { coreHandler, setRequestParam } from 'routup';\nimport { PACKAGE_PATH, UI_DIST_PATH, UI_SOURCE_PATH } from '../../../../path.ts';\n\nexport async function registerAssetsMiddleware(router: Router) {\n    if (!isCodeTransformation(CodeTransformation.JUST_IN_TIME)) {\n        router.use('public', createHandler(\n            path.posix.join(PACKAGE_PATH, 'public'),\n            {\n                fallthrough: true,\n                scan: false,\n            },\n        ));\n\n        router.use('public', createHandler(\n            path.posix.join(UI_DIST_PATH, 'client'),\n            {\n                fallthrough: false,\n                scan: false,\n            },\n        ));\n        return;\n    }\n\n    /**\n     * @type import('vite')\n     */\n    const vite = await load('vite');\n\n    /**\n     * @type {import('vite').ViteDevServer}\n     */\n    const server = await vite.createServer({\n        root: UI_SOURCE_PATH,\n        base: '/public/',\n        logLevel: 'error',\n        server: {\n            middlewareMode: true,\n            watch: {\n                usePolling: true,\n                interval: 100,\n            },\n        },\n        appType: 'custom',\n    });\n\n    router.use('public', coreHandler((req, res, next) => server.middlewares(req, res, next)));\n    router.use(coreHandler((req, res, next) => {\n        setRequestParam(req, 'viteServer', server);\n\n        next();\n    }));\n}\n"],"mappings":";;;;;;;AAeA,eAAsBU,yBAAyBC,QAAc;AACzD,KAAI,CAACT,qBAAqBD,mBAAmBW,aAAY,EAAG;AACxDD,SAAOE,IAAI,UAAUV,cACjBC,KAAKU,MAAMC,KAAKR,cAAc,SAAA,EAC9B;GACIS,aAAa;GACbC,MAAM;GACV,CAAA,CAAA;AAGJN,SAAOE,IAAI,UAAUV,cACjBC,KAAKU,MAAMC,KAAKP,cAAc,SAAA,EAC9B;GACIQ,aAAa;GACbC,MAAM;GACV,CAAA,CAAA;AAEJ;;;;IAWJ,MAAME,SAAS,OAAMD,MALFlB,KAAK,OAAA,EAKEoB,aAAa;EACnCC,MAAMZ;EACNa,MAAM;EACNC,UAAU;EACVJ,QAAQ;GACJK,gBAAgB;GAChBC,OAAO;IACHC,YAAY;IACZC,UAAU;IACd;GACJ;EACAC,SAAS;EACb,CAAA;AAEAjB,QAAOE,IAAI,UAAUR,aAAawB,KAAKC,KAAKC,SAASZ,OAAOa,YAAYH,KAAKC,KAAKC,KAAAA,CAAAA,CAAAA;AAClFpB,QAAOE,IAAIR,aAAawB,KAAKC,KAAKC,SAAAA;AAC9BzB,kBAAgBuB,KAAK,cAAcV,OAAAA;AAEnCY,QAAAA;GACJ,CAAA"}
+{"version":3,"file":"assets.mjs","names":["load","CodeTransformation","isCodeTransformation","createHandler","path","defineCoreHandler","fromNodeMiddleware","PACKAGE_PATH","UI_DIST_PATH","UI_SOURCE_PATH","VITE_SERVER_STORE_KEY","Symbol","registerAssetsMiddleware","router","JUST_IN_TIME","use","posix","join","fallthrough","scan","vite","server","createServer","root","base","logLevel","middlewareMode","watch","usePolling","interval","appType","middlewares","event","store","next"],"sources":["../../../../../src/adapters/http/middleware/built-in/assets.ts"],"sourcesContent":["/*\n * Copyright (c) 2023.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport { load } from 'locter';\nimport { CodeTransformation, isCodeTransformation } from 'typeorm-extension';\nimport { createHandler } from '@routup/assets';\nimport path from 'node:path';\nimport type { Router } from 'routup';\nimport { defineCoreHandler } from 'routup';\nimport { fromNodeMiddleware } from 'routup/node';\nimport type * as Vite from 'vite';\nimport type { ViteDevServer } from 'vite';\nimport { PACKAGE_PATH, UI_DIST_PATH, UI_SOURCE_PATH } from '../../../../path.ts';\n\nexport const VITE_SERVER_STORE_KEY = Symbol('ViteServer');\n\nexport async function registerAssetsMiddleware(router: Router) {\n    if (!isCodeTransformation(CodeTransformation.JUST_IN_TIME)) {\n        router.use('public', createHandler(\n            path.posix.join(PACKAGE_PATH, 'public'),\n            {\n                fallthrough: true,\n                scan: false,\n            },\n        ));\n\n        router.use('public', createHandler(\n            path.posix.join(UI_DIST_PATH, 'client'),\n            {\n                fallthrough: false,\n                scan: false,\n            },\n        ));\n        return;\n    }\n\n    const vite = await load('vite') as typeof Vite;\n\n    const server: ViteDevServer = await vite.createServer({\n        root: UI_SOURCE_PATH,\n        base: '/public/',\n        logLevel: 'error',\n        server: {\n            middlewareMode: true,\n            watch: {\n                usePolling: true,\n                interval: 100,\n            },\n        },\n        appType: 'custom',\n    });\n\n    router.use('public', fromNodeMiddleware(server.middlewares));\n    router.use(defineCoreHandler((event) => {\n        event.store[VITE_SERVER_STORE_KEY] = server;\n        return event.next();\n    }));\n}\n"],"mappings":";;;;;;;;AAkBA,MAAaU,wBAAwBC,OAAO,YAAA;AAE5C,eAAsBC,yBAAyBC,QAAc;CACzD,IAAI,CAACX,qBAAqBD,mBAAmBa,YAAY,GAAG;EACxDD,OAAOE,IAAI,UAAUZ,cACjBC,KAAKY,MAAMC,KAAKV,cAAc,QAAA,GAC9B;GACIW,aAAa;GACbC,MAAM;EACV,CAAA,CAAA;EAGJN,OAAOE,IAAI,UAAUZ,cACjBC,KAAKY,MAAMC,KAAKT,cAAc,QAAA,GAC9B;GACIU,aAAa;GACbC,MAAM;EACV,CAAA,CAAA;EAEJ;CACJ;CAIA,MAAME,SAAwB,OAAMD,MAFjBpB,KAAK,MAAA,GAEiBsB,aAAa;EAClDC,MAAMd;EACNe,MAAM;EACNC,UAAU;EACVJ,QAAQ;GACJK,gBAAgB;GAChBC,OAAO;IACHC,YAAY;IACZC,UAAU;GACd;EACJ;EACAC,SAAS;CACb,CAAA;CAEAjB,OAAOE,IAAI,UAAUT,mBAAmBe,OAAOU,WAAW,CAAA;CAC1DlB,OAAOE,IAAIV,mBAAmB2B,UAAAA;EAC1BA,MAAMC,MAAMvB,yBAAyBW;EACrC,OAAOW,MAAME,KAAI;CACrB,CAAA,CAAA;AACJ"}

package/dist/adapters/http/middleware/built-in/authorization/factory.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"factory.d.ts","sourceRoot":"","sources":["../../../../../../src/adapters/http/middleware/built-in/authorization/factory.ts"],"names":[],"mappings":"AAQA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,QAAQ,CAAC;AAEtC,OAAO,KAAK,EAAE,kCAAkC,EAAE,MAAM,YAAY,CAAC;AAErE,wBAAgB,6BAA6B,CAAC,GAAG,EAAE,kCAAkC,GAAI,OAAO,CAQ/F"}
+{"version":3,"file":"factory.d.ts","sourceRoot":"","sources":["../../../../../../src/adapters/http/middleware/built-in/authorization/factory.ts"],"names":[],"mappings":"AAQA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,QAAQ,CAAC;AAEtC,OAAO,KAAK,EAAE,kCAAkC,EAAE,MAAM,YAAY,CAAC;AAErE,wBAAgB,6BAA6B,CAAC,GAAG,EAAE,kCAAkC,GAAI,OAAO,CAO/F"}

package/dist/adapters/http/middleware/built-in/authorization/factory.mjs

@@ -1,9 +1,12 @@
 import { AuthorizationMiddleware } from "./module.mjs";
-import { coreHandler } from "routup";
+import { defineCoreHandler } from "routup";
 //#region src/adapters/http/middleware/built-in/authorization/factory.ts
 function createAuthorizationMiddleware(ctx) {
 	const middleware = new AuthorizationMiddleware(ctx);
-	return coreHandler(async (request, response, next) => middleware.run(request, response, next));
+	return defineCoreHandler(async (event) => {
+		await middleware.run(event);
+		return event.next();
+	});
 }
 //#endregion
 export { createAuthorizationMiddleware };

package/dist/adapters/http/middleware/built-in/authorization/factory.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"factory.mjs","names":["coreHandler","AuthorizationMiddleware","createAuthorizationMiddleware","ctx","middleware","request","response","next","run"],"sources":["../../../../../../src/adapters/http/middleware/built-in/authorization/factory.ts"],"sourcesContent":["/*\n * Copyright (c) 2021-2022.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport { coreHandler } from 'routup';\nimport type { Handler } from 'routup';\nimport { AuthorizationMiddleware } from './module.ts';\nimport type { HTTPAuthorizationMiddlewareContext } from './types.ts';\n\nexport function createAuthorizationMiddleware(ctx: HTTPAuthorizationMiddlewareContext) : Handler {\n    const middleware = new AuthorizationMiddleware(ctx);\n\n    return coreHandler(async (\n        request,\n        response,\n        next,\n    ) => middleware.run(request, response, next));\n}\n"],"mappings":";;;AAYA,SAAgBE,8BAA8BC,KAAuC;CACjF,MAAMC,aAAa,IAAIH,wBAAwBE,IAAAA;AAE/C,QAAOH,YAAY,OACfK,SACAC,UACAC,SACCH,WAAWI,IAAIH,SAASC,UAAUC,KAAAA,CAAAA"}
+{"version":3,"file":"factory.mjs","names":["defineCoreHandler","AuthorizationMiddleware","createAuthorizationMiddleware","ctx","middleware","event","run","next"],"sources":["../../../../../../src/adapters/http/middleware/built-in/authorization/factory.ts"],"sourcesContent":["/*\n * Copyright (c) 2021-2022.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport { defineCoreHandler } from 'routup';\nimport type { Handler } from 'routup';\nimport { AuthorizationMiddleware } from './module.ts';\nimport type { HTTPAuthorizationMiddlewareContext } from './types.ts';\n\nexport function createAuthorizationMiddleware(ctx: HTTPAuthorizationMiddlewareContext) : Handler {\n    const middleware = new AuthorizationMiddleware(ctx);\n\n    return defineCoreHandler(async (event) => {\n        await middleware.run(event);\n        return event.next();\n    });\n}\n"],"mappings":";;;AAYA,SAAgBE,8BAA8BC,KAAuC;CACjF,MAAMC,aAAa,IAAIH,wBAAwBE,GAAAA;CAE/C,OAAOH,kBAAkB,OAAOK,UAAAA;EAC5B,MAAMD,WAAWE,IAAID,KAAAA;EACrB,OAAOA,MAAME,KAAI;CACrB,CAAA;AACJ"}