@authup/server-core 1.0.0-beta.41 → 1.0.0-beta.42

package/dist/adapters/http/controllers/entities/client-permission/utils/validation.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"validation.mjs","names":["createValidationChain","createValidator","Container","RequestHandlerOperation","ClientPermissionRequestValidator","initialize","mount","group","CREATE","chain","exists","isUUID","optional","values"],"sources":["../../../../../../../src/adapters/http/controllers/entities/client-permission/utils/validation.ts"],"sourcesContent":["/*\n * Copyright (c) 2022.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport { createValidationChain, createValidator } from '@validup/adapter-validator';\nimport { Container } from 'validup';\nimport type { ClientPermissionEntity } from '../../../../../database/domains/index.ts';\nimport { RequestHandlerOperation } from '../../../../request/index.ts';\n\nexport class ClientPermissionRequestValidator extends Container<\n    ClientPermissionEntity\n> {\n    protected initialize() {\n        super.initialize();\n\n        this.mount(\n            'client_id',\n            { group: RequestHandlerOperation.CREATE },\n            createValidator(() => {\n                const chain = createValidationChain();\n                return chain\n                    .exists()\n                    .isUUID();\n            }),\n        );\n\n        this.mount(\n            'permission_id',\n            { group: RequestHandlerOperation.CREATE },\n            createValidator(() => {\n                const chain = createValidationChain();\n                return chain\n                    .exists()\n                    .isUUID();\n            }),\n        );\n\n        this.mount(\n            'policy_id',\n            { optional: true },\n            createValidator(() => {\n                const chain = createValidationChain();\n                return chain\n                    .isUUID()\n                    .optional({ values: 'null' });\n            }),\n        );\n    }\n}\n"],"mappings":";;;;;AAYA,IAAaI,mCAAb,cAAsDF,UAAAA;CAGxCG,aAAa;AACnB,QAAMA,YAAAA;AAEN,OAAKC,MACD,aACA,EAAEC,OAAOJ,wBAAwBK,QAAO,EACxCP,sBAAgB;AAEZ,UADcD,uBACPS,CACFC,QAAM,CACNC,QAAM;IACf,CAAA;AAGJ,OAAKL,MACD,iBACA,EAAEC,OAAOJ,wBAAwBK,QAAO,EACxCP,sBAAgB;AAEZ,UADcD,uBACPS,CACFC,QAAM,CACNC,QAAM;IACf,CAAA;AAGJ,OAAKL,MACD,aACA,EAAEM,UAAU,MAAK,EACjBX,sBAAgB;AAEZ,UADcD,uBACPS,CACFE,QAAM,CACNC,SAAS,EAAEC,QAAQ,QAAO,CAAA;IACnC,CAAA"}
+{"version":3,"file":"validation.mjs","names":["createValidationChain","createValidator","Container","RequestHandlerOperation","ClientPermissionRequestValidator","initialize","mount","group","CREATE","chain","exists","isUUID","optional","values"],"sources":["../../../../../../../src/adapters/http/controllers/entities/client-permission/utils/validation.ts"],"sourcesContent":["/*\n * Copyright (c) 2022.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport { createValidationChain, createValidator } from '@validup/adapter-validator';\nimport { Container } from 'validup';\nimport type { ClientPermissionEntity } from '../../../../../database/domains/index.ts';\nimport { RequestHandlerOperation } from '../../../../request/index.ts';\n\nexport class ClientPermissionRequestValidator extends Container<\n    ClientPermissionEntity\n> {\n    protected initialize() {\n        super.initialize();\n\n        this.mount(\n            'client_id',\n            { group: RequestHandlerOperation.CREATE },\n            createValidator(() => {\n                const chain = createValidationChain();\n                return chain\n                    .exists()\n                    .isUUID();\n            }),\n        );\n\n        this.mount(\n            'permission_id',\n            { group: RequestHandlerOperation.CREATE },\n            createValidator(() => {\n                const chain = createValidationChain();\n                return chain\n                    .exists()\n                    .isUUID();\n            }),\n        );\n\n        this.mount(\n            'policy_id',\n            { optional: true },\n            createValidator(() => {\n                const chain = createValidationChain();\n                return chain\n                    .isUUID()\n                    .optional({ values: 'null' });\n            }),\n        );\n    }\n}\n"],"mappings":";;;;;AAYA,IAAaI,mCAAb,cAAsDF,UAAAA;CAGxCG,aAAa;EACnB,MAAMA,WAAAA;EAEN,KAAKC,MACD,aACA,EAAEC,OAAOJ,wBAAwBK,OAAO,GACxCP,sBAAgB;GAEZ,OADcD,sBACPS,EACFC,OAAM,EACNC,OAAM;EACf,CAAA,CAAA;EAGJ,KAAKL,MACD,iBACA,EAAEC,OAAOJ,wBAAwBK,OAAO,GACxCP,sBAAgB;GAEZ,OADcD,sBACPS,EACFC,OAAM,EACNC,OAAM;EACf,CAAA,CAAA;EAGJ,KAAKL,MACD,aACA,EAAEM,UAAU,KAAK,GACjBX,sBAAgB;GAEZ,OADcD,sBACPS,EACFE,OAAM,EACNC,SAAS,EAAEC,QAAQ,OAAO,CAAA;EACnC,CAAA,CAAA;CAER;AACJ"}

package/dist/adapters/http/controllers/entities/client-role/module.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"module.mjs","names":["DBody","DContext","DController","DDelete","DGet","DPath","DPost","DTags","useRequestQuery","ForceLoggedInMiddleware","buildActorContext","ClientRoleController","service","ctx","getMany","event","actor","data","meta","add","entity","create","response","status","getOne","id","drop","delete"],"sources":["../../../../../../src/adapters/http/controllers/entities/client-role/module.ts"],"sourcesContent":["/*\n * Copyright (c) 2022.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport {\n    DBody,\n    DContext,\n    DController,\n    DDelete,\n    DGet,\n    DPath,\n    DPost,\n    DTags,\n} from '@routup/decorators';\nimport type { IRoutupEvent } from 'routup';\nimport { useRequestQuery } from '@routup/basic/query';\nimport type {\n    ClientRoleCreatePayload,\n    EntityCollectionResponse,\n} from '@authup/core-http-kit';\nimport type { ClientRole } from '@authup/core-kit';\nimport type { IClientRoleService } from '../../../../../core/index.ts';\nimport { ForceLoggedInMiddleware } from '../../../middleware/index.ts';\nimport {\n    buildActorContext,\n} from '../../../request/index.ts';\n\nexport type ClientRoleControllerContext = {\n    service: IClientRoleService,\n};\n\n@DTags('client')\n@DController('/client-roles')\nexport class ClientRoleController {\n    protected service: IClientRoleService;\n\n    constructor(ctx: ClientRoleControllerContext) {\n        this.service = ctx.service;\n    }\n\n    @DGet('', [ForceLoggedInMiddleware])\n    async getMany(\n        @DContext() event: IRoutupEvent,\n    ): Promise<EntityCollectionResponse<ClientRole>> {\n        const actor = buildActorContext(event);\n        const {\n            data,\n            meta,\n        } = await this.service.getMany(useRequestQuery(event), actor);\n\n        return {\n            data,\n            meta,\n        };\n    }\n\n    @DPost('', [ForceLoggedInMiddleware])\n    async add(\n        @DBody() data: ClientRoleCreatePayload,\n        @DContext() event: IRoutupEvent,\n    ): Promise<ClientRole> {\n        const actor = buildActorContext(event);\n        const entity = await this.service.create(data, actor);\n\n        event.response.status = 201;\n\n        return entity;\n    }\n\n    @DGet('/:id', [ForceLoggedInMiddleware])\n    async getOne(\n        @DPath('id') id: string,\n        @DContext() event: IRoutupEvent,\n    ): Promise<ClientRole> {\n        const actor = buildActorContext(event);\n        const entity = await this.service.getOne(id, actor);\n\n        return entity;\n    }\n\n    @DDelete('/:id', [ForceLoggedInMiddleware])\n    async drop(\n        @DPath('id') id: string,\n        @DContext() event: IRoutupEvent,\n    ): Promise<ClientRole> {\n        const actor = buildActorContext(event);\n        const entity = await this.service.delete(id, actor);\n\n        event.response.status = 202;\n\n        return entity;\n    }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;AAoCA,IAAaW,uBAAb,MAAaA;CACCC;CAEV,YAAYC,KAAkC;AAC1C,OAAKD,UAAUC,IAAID;;CAGvB,MACME,QACF,OAC6C;EAC7C,MAAME,QAAQN,kBAAkBK,MAAAA;EAChC,MAAM,EACFE,MACAC,SACA,MAAM,KAAKN,QAAQE,QAAQN,gBAAgBO,MAAAA,EAAQC,MAAAA;AAEvD,SAAO;GACHC;GACAC;GACJ;;CAGJ,MACMC,IACF,MACA,OACmB;EACnB,MAAMH,QAAQN,kBAAkBK,MAAAA;EAChC,MAAMK,SAAS,MAAM,KAAKR,QAAQS,OAAOJ,MAAMD,MAAAA;AAE/CD,QAAMO,SAASC,SAAS;AAExB,SAAOH;;CAGX,MACMI,OACF,IACA,OACmB;EACnB,MAAMR,QAAQN,kBAAkBK,MAAAA;AAGhC,SAAOK,MAFc,KAAKR,QAAQY,OAAOC,IAAIT,MAAAA;;CAKjD,MACMU,KACF,IACA,OACmB;EACnB,MAAMV,QAAQN,kBAAkBK,MAAAA;EAChC,MAAMK,SAAS,MAAM,KAAKR,QAAQe,OAAOF,IAAIT,MAAAA;AAE7CD,QAAMO,SAASC,SAAS;AAExB,SAAOH;;;;WAlDAX,wBAAAA,CAAAA;;;;;;;YAgBCA,wBAAAA,CAAAA;;;;;;;;eAaGA,wBAAAA,CAAAA;;;;;;;;kBAWGA,wBAAAA,CAAAA"}
+{"version":3,"file":"module.mjs","names":["DBody","DContext","DController","DDelete","DGet","DPath","DPost","DTags","useRequestQuery","ForceLoggedInMiddleware","buildActorContext","ClientRoleController","service","ctx","getMany","event","actor","data","meta","add","entity","create","response","status","getOne","id","drop","delete"],"sources":["../../../../../../src/adapters/http/controllers/entities/client-role/module.ts"],"sourcesContent":["/*\n * Copyright (c) 2022.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport {\n    DBody,\n    DContext,\n    DController,\n    DDelete,\n    DGet,\n    DPath,\n    DPost,\n    DTags,\n} from '@routup/decorators';\nimport type { IRoutupEvent } from 'routup';\nimport { useRequestQuery } from '@routup/basic/query';\nimport type {\n    ClientRoleCreatePayload,\n    EntityCollectionResponse,\n} from '@authup/core-http-kit';\nimport type { ClientRole } from '@authup/core-kit';\nimport type { IClientRoleService } from '../../../../../core/index.ts';\nimport { ForceLoggedInMiddleware } from '../../../middleware/index.ts';\nimport {\n    buildActorContext,\n} from '../../../request/index.ts';\n\nexport type ClientRoleControllerContext = {\n    service: IClientRoleService,\n};\n\n@DTags('client')\n@DController('/client-roles')\nexport class ClientRoleController {\n    protected service: IClientRoleService;\n\n    constructor(ctx: ClientRoleControllerContext) {\n        this.service = ctx.service;\n    }\n\n    @DGet('', [ForceLoggedInMiddleware])\n    async getMany(\n        @DContext() event: IRoutupEvent,\n    ): Promise<EntityCollectionResponse<ClientRole>> {\n        const actor = buildActorContext(event);\n        const {\n            data,\n            meta,\n        } = await this.service.getMany(useRequestQuery(event), actor);\n\n        return {\n            data,\n            meta,\n        };\n    }\n\n    @DPost('', [ForceLoggedInMiddleware])\n    async add(\n        @DBody() data: ClientRoleCreatePayload,\n        @DContext() event: IRoutupEvent,\n    ): Promise<ClientRole> {\n        const actor = buildActorContext(event);\n        const entity = await this.service.create(data, actor);\n\n        event.response.status = 201;\n\n        return entity;\n    }\n\n    @DGet('/:id', [ForceLoggedInMiddleware])\n    async getOne(\n        @DPath('id') id: string,\n        @DContext() event: IRoutupEvent,\n    ): Promise<ClientRole> {\n        const actor = buildActorContext(event);\n        const entity = await this.service.getOne(id, actor);\n\n        return entity;\n    }\n\n    @DDelete('/:id', [ForceLoggedInMiddleware])\n    async drop(\n        @DPath('id') id: string,\n        @DContext() event: IRoutupEvent,\n    ): Promise<ClientRole> {\n        const actor = buildActorContext(event);\n        const entity = await this.service.delete(id, actor);\n\n        event.response.status = 202;\n\n        return entity;\n    }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;AAoCA,IAAaW,uBAAb,MAAaA;CACCC;CAEV,YAAYC,KAAkC;EAC1C,KAAKD,UAAUC,IAAID;CACvB;CAEA,MACME,QACF,OAC6C;EAC7C,MAAME,QAAQN,kBAAkBK,KAAAA;EAChC,MAAM,EACFE,MACAC,SACA,MAAM,KAAKN,QAAQE,QAAQN,gBAAgBO,KAAAA,GAAQC,KAAAA;EAEvD,OAAO;GACHC;GACAC;EACJ;CACJ;CAEA,MACMC,IACF,MACA,OACmB;EACnB,MAAMH,QAAQN,kBAAkBK,KAAAA;EAChC,MAAMK,SAAS,MAAM,KAAKR,QAAQS,OAAOJ,MAAMD,KAAAA;EAE/CD,MAAMO,SAASC,SAAS;EAExB,OAAOH;CACX;CAEA,MACMI,OACF,IACA,OACmB;EACnB,MAAMR,QAAQN,kBAAkBK,KAAAA;EAGhC,OAAOK,MAFc,KAAKR,QAAQY,OAAOC,IAAIT,KAAAA;CAGjD;CAEA,MACMU,KACF,IACA,OACmB;EACnB,MAAMV,QAAQN,kBAAkBK,KAAAA;EAChC,MAAMK,SAAS,MAAM,KAAKR,QAAQe,OAAOF,IAAIT,KAAAA;EAE7CD,MAAMO,SAASC,SAAS;EAExB,OAAOH;CACX;AACJ;;WApDeX,uBAAAA,CAAAA;;;;;;;YAgBCA,uBAAAA,CAAAA;;;;;;;;eAaGA,uBAAAA,CAAAA;;;;;;;;kBAWGA,uBAAAA,CAAAA"}

package/dist/adapters/http/controllers/entities/client-role/utils/validation.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"validation.mjs","names":["createValidationChain","createValidator","Container","RequestHandlerOperation","ClientRoleRequestValidator","initialize","mount","group","CREATE","chain","exists","isUUID"],"sources":["../../../../../../../src/adapters/http/controllers/entities/client-role/utils/validation.ts"],"sourcesContent":["/*\n * Copyright (c) 2022.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport { createValidationChain, createValidator } from '@validup/adapter-validator';\nimport { Container } from 'validup';\nimport type { ClientRole } from '@authup/core-kit';\nimport { RequestHandlerOperation } from '../../../../request/index.ts';\n\nexport class ClientRoleRequestValidator extends Container<\n    ClientRole\n> {\n    protected initialize() {\n        super.initialize();\n\n        this.mount(\n            'client_id',\n            { group: RequestHandlerOperation.CREATE },\n            createValidator(() => {\n                const chain = createValidationChain();\n                return chain\n                    .exists()\n                    .isUUID();\n            }),\n        );\n\n        this.mount(\n            'role_id',\n            { group: RequestHandlerOperation.CREATE },\n            createValidator(() => {\n                const chain = createValidationChain();\n                return chain\n                    .exists()\n                    .isUUID();\n            }),\n        );\n    }\n}\n"],"mappings":";;;;;AAYA,IAAaI,6BAAb,cAAgDF,UAAAA;CAGlCG,aAAa;AACnB,QAAMA,YAAAA;AAEN,OAAKC,MACD,aACA,EAAEC,OAAOJ,wBAAwBK,QAAO,EACxCP,sBAAgB;AAEZ,UADcD,uBACPS,CACFC,QAAM,CACNC,QAAM;IACf,CAAA;AAGJ,OAAKL,MACD,WACA,EAAEC,OAAOJ,wBAAwBK,QAAO,EACxCP,sBAAgB;AAEZ,UADcD,uBACPS,CACFC,QAAM,CACNC,QAAM;IACf,CAAA"}
+{"version":3,"file":"validation.mjs","names":["createValidationChain","createValidator","Container","RequestHandlerOperation","ClientRoleRequestValidator","initialize","mount","group","CREATE","chain","exists","isUUID"],"sources":["../../../../../../../src/adapters/http/controllers/entities/client-role/utils/validation.ts"],"sourcesContent":["/*\n * Copyright (c) 2022.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport { createValidationChain, createValidator } from '@validup/adapter-validator';\nimport { Container } from 'validup';\nimport type { ClientRole } from '@authup/core-kit';\nimport { RequestHandlerOperation } from '../../../../request/index.ts';\n\nexport class ClientRoleRequestValidator extends Container<\n    ClientRole\n> {\n    protected initialize() {\n        super.initialize();\n\n        this.mount(\n            'client_id',\n            { group: RequestHandlerOperation.CREATE },\n            createValidator(() => {\n                const chain = createValidationChain();\n                return chain\n                    .exists()\n                    .isUUID();\n            }),\n        );\n\n        this.mount(\n            'role_id',\n            { group: RequestHandlerOperation.CREATE },\n            createValidator(() => {\n                const chain = createValidationChain();\n                return chain\n                    .exists()\n                    .isUUID();\n            }),\n        );\n    }\n}\n"],"mappings":";;;;;AAYA,IAAaI,6BAAb,cAAgDF,UAAAA;CAGlCG,aAAa;EACnB,MAAMA,WAAAA;EAEN,KAAKC,MACD,aACA,EAAEC,OAAOJ,wBAAwBK,OAAO,GACxCP,sBAAgB;GAEZ,OADcD,sBACPS,EACFC,OAAM,EACNC,OAAM;EACf,CAAA,CAAA;EAGJ,KAAKL,MACD,WACA,EAAEC,OAAOJ,wBAAwBK,OAAO,GACxCP,sBAAgB;GAEZ,OADcD,sBACPS,EACFC,OAAM,EACNC,OAAM;EACf,CAAA,CAAA;CAER;AACJ"}

package/dist/adapters/http/controllers/entities/client-scope/module.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"module.mjs","names":["DBody","DContext","DController","DDelete","DGet","DPath","DPost","DTags","useRequestQuery","ForceLoggedInMiddleware","buildActorContext","ClientScopeController","service","ctx","getMany","event","actor","data","meta","add","entity","create","response","status","getOne","id","drop","delete"],"sources":["../../../../../../src/adapters/http/controllers/entities/client-scope/module.ts"],"sourcesContent":["/*\n * Copyright (c) 2022.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport {\n    DBody,\n    DContext,\n    DController,\n    DDelete,\n    DGet,\n    DPath,\n    DPost,\n    DTags,\n} from '@routup/decorators';\nimport type { IRoutupEvent } from 'routup';\nimport { useRequestQuery } from '@routup/basic/query';\nimport type {\n    ClientScopeCreatePayload,\n    EntityCollectionResponse,\n} from '@authup/core-http-kit';\nimport type { ClientScope } from '@authup/core-kit';\nimport type { IClientScopeService } from '../../../../../core/index.ts';\nimport { ForceLoggedInMiddleware } from '../../../middleware/index.ts';\nimport { buildActorContext } from '../../../request/index.ts';\n\nexport type ClientScopeControllerContext = {\n    service: IClientScopeService,\n};\n\n@DTags('client', 'scope')\n@DController('/client-scopes')\nexport class ClientScopeController {\n    protected service: IClientScopeService;\n\n    constructor(ctx: ClientScopeControllerContext) {\n        this.service = ctx.service;\n    }\n\n    @DGet('', [])\n    async getMany(\n        @DContext() event: IRoutupEvent,\n    ): Promise<EntityCollectionResponse<ClientScope>> {\n        const actor = buildActorContext(event);\n        const {\n            data,\n            meta,\n        } = await this.service.getMany(useRequestQuery(event), actor);\n\n        return {\n            data,\n            meta,\n        };\n    }\n\n    @DPost('', [ForceLoggedInMiddleware])\n    async add(\n        @DBody() data: ClientScopeCreatePayload,\n        @DContext() event: IRoutupEvent,\n    ): Promise<ClientScope> {\n        const actor = buildActorContext(event);\n\n        const entity = await this.service.create(data, actor);\n\n        event.response.status = 201;\n\n        return entity;\n    }\n\n    @DGet('/:id', [])\n    async getOne(\n        @DPath('id') id: string,\n        @DContext() event: IRoutupEvent,\n    ): Promise<ClientScope> {\n        const actor = buildActorContext(event);\n        const entity = await this.service.getOne(id, actor);\n\n        return entity;\n    }\n\n    @DDelete('/:id', [ForceLoggedInMiddleware])\n    async drop(\n        @DPath('id') id: string,\n        @DContext() event: IRoutupEvent,\n    ): Promise<ClientScope> {\n        const actor = buildActorContext(event);\n        const entity = await this.service.delete(id, actor);\n\n        event.response.status = 202;\n\n        return entity;\n    }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;AAkCA,IAAaW,wBAAb,MAAaA;CACCC;CAEV,YAAYC,KAAmC;AAC3C,OAAKD,UAAUC,IAAID;;CAGvB,MACME,QACF,OAC8C;EAC9C,MAAME,QAAQN,kBAAkBK,MAAAA;EAChC,MAAM,EACFE,MACAC,SACA,MAAM,KAAKN,QAAQE,QAAQN,gBAAgBO,MAAAA,EAAQC,MAAAA;AAEvD,SAAO;GACHC;GACAC;GACJ;;CAGJ,MACMC,IACF,MACA,OACoB;EACpB,MAAMH,QAAQN,kBAAkBK,MAAAA;EAEhC,MAAMK,SAAS,MAAM,KAAKR,QAAQS,OAAOJ,MAAMD,MAAAA;AAE/CD,QAAMO,SAASC,SAAS;AAExB,SAAOH;;CAGX,MACMI,OACF,IACA,OACoB;EACpB,MAAMR,QAAQN,kBAAkBK,MAAAA;AAGhC,SAAOK,MAFc,KAAKR,QAAQY,OAAOC,IAAIT,MAAAA;;CAKjD,MACMU,KACF,IACA,OACoB;EACpB,MAAMV,QAAQN,kBAAkBK,MAAAA;EAChC,MAAMK,SAAS,MAAM,KAAKR,QAAQe,OAAOF,IAAIT,MAAAA;AAE7CD,QAAMO,SAASC,SAAS;AAExB,SAAOH;;;;;;;;;;;YAnCCX,wBAAAA,CAAAA;;;;;;;;;;;;;;;;kBAyBMA,wBAAAA,CAAAA"}
+{"version":3,"file":"module.mjs","names":["DBody","DContext","DController","DDelete","DGet","DPath","DPost","DTags","useRequestQuery","ForceLoggedInMiddleware","buildActorContext","ClientScopeController","service","ctx","getMany","event","actor","data","meta","add","entity","create","response","status","getOne","id","drop","delete"],"sources":["../../../../../../src/adapters/http/controllers/entities/client-scope/module.ts"],"sourcesContent":["/*\n * Copyright (c) 2022.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport {\n    DBody,\n    DContext,\n    DController,\n    DDelete,\n    DGet,\n    DPath,\n    DPost,\n    DTags,\n} from '@routup/decorators';\nimport type { IRoutupEvent } from 'routup';\nimport { useRequestQuery } from '@routup/basic/query';\nimport type {\n    ClientScopeCreatePayload,\n    EntityCollectionResponse,\n} from '@authup/core-http-kit';\nimport type { ClientScope } from '@authup/core-kit';\nimport type { IClientScopeService } from '../../../../../core/index.ts';\nimport { ForceLoggedInMiddleware } from '../../../middleware/index.ts';\nimport { buildActorContext } from '../../../request/index.ts';\n\nexport type ClientScopeControllerContext = {\n    service: IClientScopeService,\n};\n\n@DTags('client', 'scope')\n@DController('/client-scopes')\nexport class ClientScopeController {\n    protected service: IClientScopeService;\n\n    constructor(ctx: ClientScopeControllerContext) {\n        this.service = ctx.service;\n    }\n\n    @DGet('', [])\n    async getMany(\n        @DContext() event: IRoutupEvent,\n    ): Promise<EntityCollectionResponse<ClientScope>> {\n        const actor = buildActorContext(event);\n        const {\n            data,\n            meta,\n        } = await this.service.getMany(useRequestQuery(event), actor);\n\n        return {\n            data,\n            meta,\n        };\n    }\n\n    @DPost('', [ForceLoggedInMiddleware])\n    async add(\n        @DBody() data: ClientScopeCreatePayload,\n        @DContext() event: IRoutupEvent,\n    ): Promise<ClientScope> {\n        const actor = buildActorContext(event);\n\n        const entity = await this.service.create(data, actor);\n\n        event.response.status = 201;\n\n        return entity;\n    }\n\n    @DGet('/:id', [])\n    async getOne(\n        @DPath('id') id: string,\n        @DContext() event: IRoutupEvent,\n    ): Promise<ClientScope> {\n        const actor = buildActorContext(event);\n        const entity = await this.service.getOne(id, actor);\n\n        return entity;\n    }\n\n    @DDelete('/:id', [ForceLoggedInMiddleware])\n    async drop(\n        @DPath('id') id: string,\n        @DContext() event: IRoutupEvent,\n    ): Promise<ClientScope> {\n        const actor = buildActorContext(event);\n        const entity = await this.service.delete(id, actor);\n\n        event.response.status = 202;\n\n        return entity;\n    }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;AAkCA,IAAaW,wBAAb,MAAaA;CACCC;CAEV,YAAYC,KAAmC;EAC3C,KAAKD,UAAUC,IAAID;CACvB;CAEA,MACME,QACF,OAC8C;EAC9C,MAAME,QAAQN,kBAAkBK,KAAAA;EAChC,MAAM,EACFE,MACAC,SACA,MAAM,KAAKN,QAAQE,QAAQN,gBAAgBO,KAAAA,GAAQC,KAAAA;EAEvD,OAAO;GACHC;GACAC;EACJ;CACJ;CAEA,MACMC,IACF,MACA,OACoB;EACpB,MAAMH,QAAQN,kBAAkBK,KAAAA;EAEhC,MAAMK,SAAS,MAAM,KAAKR,QAAQS,OAAOJ,MAAMD,KAAAA;EAE/CD,MAAMO,SAASC,SAAS;EAExB,OAAOH;CACX;CAEA,MACMI,OACF,IACA,OACoB;EACpB,MAAMR,QAAQN,kBAAkBK,KAAAA;EAGhC,OAAOK,MAFc,KAAKR,QAAQY,OAAOC,IAAIT,KAAAA;CAGjD;CAEA,MACMU,KACF,IACA,OACoB;EACpB,MAAMV,QAAQN,kBAAkBK,KAAAA;EAChC,MAAMK,SAAS,MAAM,KAAKR,QAAQe,OAAOF,IAAIT,KAAAA;EAE7CD,MAAMO,SAASC,SAAS;EAExB,OAAOH;CACX;AACJ;;;;;;;;;YArCgBX,uBAAAA,CAAAA;;;;;;;;;;;;;;;;kBAyBMA,uBAAAA,CAAAA"}

package/dist/adapters/http/controllers/entities/client-scope/utils/validator.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"validator.mjs","names":["createValidationChain","createValidator","Container","RequestHandlerOperation","ClientScopeRequestValidator","initialize","mount","group","CREATE","chain","exists","isUUID"],"sources":["../../../../../../../src/adapters/http/controllers/entities/client-scope/utils/validator.ts"],"sourcesContent":["/*\n * Copyright (c) 2022.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport { createValidationChain, createValidator } from '@validup/adapter-validator';\nimport { Container } from 'validup';\nimport type { ClientScopeEntity } from '../../../../../database/domains/index.ts';\nimport { RequestHandlerOperation } from '../../../../request/index.ts';\n\nexport class ClientScopeRequestValidator extends Container<ClientScopeEntity> {\n    protected initialize() {\n        super.initialize();\n\n        this.mount(\n            'client_id',\n            { group: RequestHandlerOperation.CREATE },\n            createValidator(() => {\n                const chain = createValidationChain();\n                return chain\n                    .exists()\n                    .isUUID();\n            }),\n        );\n\n        this.mount(\n            'scope_id',\n            { group: RequestHandlerOperation.CREATE },\n            createValidator(() => {\n                const chain = createValidationChain();\n                return chain\n                    .exists()\n                    .isUUID();\n            }),\n        );\n    }\n}\n"],"mappings":";;;;;AAYA,IAAaI,8BAAb,cAAiDF,UAAAA;CACnCG,aAAa;AACnB,QAAMA,YAAAA;AAEN,OAAKC,MACD,aACA,EAAEC,OAAOJ,wBAAwBK,QAAO,EACxCP,sBAAgB;AAEZ,UADcD,uBACPS,CACFC,QAAM,CACNC,QAAM;IACf,CAAA;AAGJ,OAAKL,MACD,YACA,EAAEC,OAAOJ,wBAAwBK,QAAO,EACxCP,sBAAgB;AAEZ,UADcD,uBACPS,CACFC,QAAM,CACNC,QAAM;IACf,CAAA"}
+{"version":3,"file":"validator.mjs","names":["createValidationChain","createValidator","Container","RequestHandlerOperation","ClientScopeRequestValidator","initialize","mount","group","CREATE","chain","exists","isUUID"],"sources":["../../../../../../../src/adapters/http/controllers/entities/client-scope/utils/validator.ts"],"sourcesContent":["/*\n * Copyright (c) 2022.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport { createValidationChain, createValidator } from '@validup/adapter-validator';\nimport { Container } from 'validup';\nimport type { ClientScopeEntity } from '../../../../../database/domains/index.ts';\nimport { RequestHandlerOperation } from '../../../../request/index.ts';\n\nexport class ClientScopeRequestValidator extends Container<ClientScopeEntity> {\n    protected initialize() {\n        super.initialize();\n\n        this.mount(\n            'client_id',\n            { group: RequestHandlerOperation.CREATE },\n            createValidator(() => {\n                const chain = createValidationChain();\n                return chain\n                    .exists()\n                    .isUUID();\n            }),\n        );\n\n        this.mount(\n            'scope_id',\n            { group: RequestHandlerOperation.CREATE },\n            createValidator(() => {\n                const chain = createValidationChain();\n                return chain\n                    .exists()\n                    .isUUID();\n            }),\n        );\n    }\n}\n"],"mappings":";;;;;AAYA,IAAaI,8BAAb,cAAiDF,UAAAA;CACnCG,aAAa;EACnB,MAAMA,WAAAA;EAEN,KAAKC,MACD,aACA,EAAEC,OAAOJ,wBAAwBK,OAAO,GACxCP,sBAAgB;GAEZ,OADcD,sBACPS,EACFC,OAAM,EACNC,OAAM;EACf,CAAA,CAAA;EAGJ,KAAKL,MACD,YACA,EAAEC,OAAOJ,wBAAwBK,OAAO,GACxCP,sBAAgB;GAEZ,OADcD,sBACPS,EACFC,OAAM,EACNC,OAAM;EACf,CAAA,CAAA;CAER;AACJ"}

package/dist/adapters/http/controllers/entities/identity-provide-role/module.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"module.mjs","names":["DBody","DContext","DController","DDelete","DGet","DPath","DPost","DTags","useRequestQuery","ForceLoggedInMiddleware","buildActorContext","IdentityProviderRoleMappingController","service","ctx","getMany","event","actor","data","meta","getOne","id","entity","add","create","response","status","edit","update","drop","delete"],"sources":["../../../../../../src/adapters/http/controllers/entities/identity-provide-role/module.ts"],"sourcesContent":["/*\n * Copyright (c) 2022.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport {\n    DBody,\n    DContext,\n    DController,\n    DDelete,\n    DGet,\n    DPath,\n    DPost,\n    DTags,\n} from '@routup/decorators';\nimport type { IRoutupEvent } from 'routup';\nimport { useRequestQuery } from '@routup/basic/query';\nimport type {\n    EntityCollectionResponse,\n    IdentityProviderRoleMappingCreatePayload,\n    IdentityProviderRoleMappingUpdatePayload,\n} from '@authup/core-http-kit';\nimport type { IdentityProviderRoleMapping } from '@authup/core-kit';\nimport type {\n    IIdentityProviderRoleMappingService,\n} from '../../../../../core/index.ts';\nimport { ForceLoggedInMiddleware } from '../../../middleware/index.ts';\nimport {\n    buildActorContext,\n} from '../../../request/index.ts';\n\nexport type IdentityProviderRoleMappingControllerContext = {\n    service: IIdentityProviderRoleMappingService,\n};\n\n@DTags('identity-provider')\n@DController('/identity-provider-role-mappings')\nexport class IdentityProviderRoleMappingController {\n    protected service: IIdentityProviderRoleMappingService;\n\n    constructor(ctx: IdentityProviderRoleMappingControllerContext) {\n        this.service = ctx.service;\n    }\n\n    @DGet('', [ForceLoggedInMiddleware])\n    async getMany(\n        @DContext() event: IRoutupEvent,\n    ): Promise<EntityCollectionResponse<IdentityProviderRoleMapping>> {\n        const actor = buildActorContext(event);\n        const {\n            data,\n            meta,\n        } = await this.service.getMany(useRequestQuery(event), actor);\n\n        return {\n            data,\n            meta,\n        };\n    }\n\n    @DGet('/:id', [ForceLoggedInMiddleware])\n    async getOne(\n        @DPath('id') id: string,\n        @DContext() event: IRoutupEvent,\n    ): Promise<IdentityProviderRoleMapping> {\n        const actor = buildActorContext(event);\n        const entity = await this.service.getOne(id, actor);\n\n        return entity;\n    }\n\n    @DPost('', [ForceLoggedInMiddleware])\n    async add(\n        @DBody() data: IdentityProviderRoleMappingCreatePayload,\n        @DContext() event: IRoutupEvent,\n    ): Promise<IdentityProviderRoleMapping> {\n        const actor = buildActorContext(event);\n        const entity = await this.service.create(data, actor);\n\n        event.response.status = 201;\n\n        return entity;\n    }\n\n    @DPost('/:id', [ForceLoggedInMiddleware])\n    async edit(\n        @DPath('id') id: string,\n        @DBody() data: IdentityProviderRoleMappingUpdatePayload,\n        @DContext() event: IRoutupEvent,\n    ): Promise<IdentityProviderRoleMapping> {\n        const actor = buildActorContext(event);\n        const entity = await this.service.update(id, data, actor);\n\n        event.response.status = 202;\n\n        return entity;\n    }\n\n    @DDelete('/:id', [ForceLoggedInMiddleware])\n    async drop(\n        @DPath('id') id: string,\n        @DContext() event: IRoutupEvent,\n    ): Promise<IdentityProviderRoleMapping> {\n        const actor = buildActorContext(event);\n        const entity = await this.service.delete(id, actor);\n\n        event.response.status = 202;\n\n        return entity;\n    }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;AAuCA,IAAaW,wCAAb,MAAaA;CACCC;CAEV,YAAYC,KAAmD;AAC3D,OAAKD,UAAUC,IAAID;;CAGvB,MACME,QACF,OAC8D;EAC9D,MAAME,QAAQN,kBAAkBK,MAAAA;EAChC,MAAM,EACFE,MACAC,SACA,MAAM,KAAKN,QAAQE,QAAQN,gBAAgBO,MAAAA,EAAQC,MAAAA;AAEvD,SAAO;GACHC;GACAC;GACJ;;CAGJ,MACMC,OACF,IACA,OACoC;EACpC,MAAMH,QAAQN,kBAAkBK,MAAAA;AAGhC,SAAOM,MAFc,KAAKT,QAAQO,OAAOC,IAAIJ,MAAAA;;CAKjD,MACMM,IACF,MACA,OACoC;EACpC,MAAMN,QAAQN,kBAAkBK,MAAAA;EAChC,MAAMM,SAAS,MAAM,KAAKT,QAAQW,OAAON,MAAMD,MAAAA;AAE/CD,QAAMS,SAASC,SAAS;AAExB,SAAOJ;;CAGX,MACMK,KACF,IACA,MACA,OACoC;EACpC,MAAMV,QAAQN,kBAAkBK,MAAAA;EAChC,MAAMM,SAAS,MAAM,KAAKT,QAAQe,OAAOP,IAAIH,MAAMD,MAAAA;AAEnDD,QAAMS,SAASC,SAAS;AAExB,SAAOJ;;CAGX,MACMO,KACF,IACA,OACoC;EACpC,MAAMZ,QAAQN,kBAAkBK,MAAAA;EAChC,MAAMM,SAAS,MAAM,KAAKT,QAAQiB,OAAOT,IAAIJ,MAAAA;AAE7CD,QAAMS,SAASC,SAAS;AAExB,SAAOJ;;;;WAhEAZ,wBAAAA,CAAAA;;;;;;;eAgBIA,wBAAAA,CAAAA;;;;;;;;YAWHA,wBAAAA,CAAAA;;;;;;;;gBAaIA,wBAAAA,CAAAA;;;;;;;;;;;;;kBAcEA,wBAAAA,CAAAA"}
+{"version":3,"file":"module.mjs","names":["DBody","DContext","DController","DDelete","DGet","DPath","DPost","DTags","useRequestQuery","ForceLoggedInMiddleware","buildActorContext","IdentityProviderRoleMappingController","service","ctx","getMany","event","actor","data","meta","getOne","id","entity","add","create","response","status","edit","update","drop","delete"],"sources":["../../../../../../src/adapters/http/controllers/entities/identity-provide-role/module.ts"],"sourcesContent":["/*\n * Copyright (c) 2022.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport {\n    DBody,\n    DContext,\n    DController,\n    DDelete,\n    DGet,\n    DPath,\n    DPost,\n    DTags,\n} from '@routup/decorators';\nimport type { IRoutupEvent } from 'routup';\nimport { useRequestQuery } from '@routup/basic/query';\nimport type {\n    EntityCollectionResponse,\n    IdentityProviderRoleMappingCreatePayload,\n    IdentityProviderRoleMappingUpdatePayload,\n} from '@authup/core-http-kit';\nimport type { IdentityProviderRoleMapping } from '@authup/core-kit';\nimport type {\n    IIdentityProviderRoleMappingService,\n} from '../../../../../core/index.ts';\nimport { ForceLoggedInMiddleware } from '../../../middleware/index.ts';\nimport {\n    buildActorContext,\n} from '../../../request/index.ts';\n\nexport type IdentityProviderRoleMappingControllerContext = {\n    service: IIdentityProviderRoleMappingService,\n};\n\n@DTags('identity-provider')\n@DController('/identity-provider-role-mappings')\nexport class IdentityProviderRoleMappingController {\n    protected service: IIdentityProviderRoleMappingService;\n\n    constructor(ctx: IdentityProviderRoleMappingControllerContext) {\n        this.service = ctx.service;\n    }\n\n    @DGet('', [ForceLoggedInMiddleware])\n    async getMany(\n        @DContext() event: IRoutupEvent,\n    ): Promise<EntityCollectionResponse<IdentityProviderRoleMapping>> {\n        const actor = buildActorContext(event);\n        const {\n            data,\n            meta,\n        } = await this.service.getMany(useRequestQuery(event), actor);\n\n        return {\n            data,\n            meta,\n        };\n    }\n\n    @DGet('/:id', [ForceLoggedInMiddleware])\n    async getOne(\n        @DPath('id') id: string,\n        @DContext() event: IRoutupEvent,\n    ): Promise<IdentityProviderRoleMapping> {\n        const actor = buildActorContext(event);\n        const entity = await this.service.getOne(id, actor);\n\n        return entity;\n    }\n\n    @DPost('', [ForceLoggedInMiddleware])\n    async add(\n        @DBody() data: IdentityProviderRoleMappingCreatePayload,\n        @DContext() event: IRoutupEvent,\n    ): Promise<IdentityProviderRoleMapping> {\n        const actor = buildActorContext(event);\n        const entity = await this.service.create(data, actor);\n\n        event.response.status = 201;\n\n        return entity;\n    }\n\n    @DPost('/:id', [ForceLoggedInMiddleware])\n    async edit(\n        @DPath('id') id: string,\n        @DBody() data: IdentityProviderRoleMappingUpdatePayload,\n        @DContext() event: IRoutupEvent,\n    ): Promise<IdentityProviderRoleMapping> {\n        const actor = buildActorContext(event);\n        const entity = await this.service.update(id, data, actor);\n\n        event.response.status = 202;\n\n        return entity;\n    }\n\n    @DDelete('/:id', [ForceLoggedInMiddleware])\n    async drop(\n        @DPath('id') id: string,\n        @DContext() event: IRoutupEvent,\n    ): Promise<IdentityProviderRoleMapping> {\n        const actor = buildActorContext(event);\n        const entity = await this.service.delete(id, actor);\n\n        event.response.status = 202;\n\n        return entity;\n    }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;AAuCA,IAAaW,wCAAb,MAAaA;CACCC;CAEV,YAAYC,KAAmD;EAC3D,KAAKD,UAAUC,IAAID;CACvB;CAEA,MACME,QACF,OAC8D;EAC9D,MAAME,QAAQN,kBAAkBK,KAAAA;EAChC,MAAM,EACFE,MACAC,SACA,MAAM,KAAKN,QAAQE,QAAQN,gBAAgBO,KAAAA,GAAQC,KAAAA;EAEvD,OAAO;GACHC;GACAC;EACJ;CACJ;CAEA,MACMC,OACF,IACA,OACoC;EACpC,MAAMH,QAAQN,kBAAkBK,KAAAA;EAGhC,OAAOM,MAFc,KAAKT,QAAQO,OAAOC,IAAIJ,KAAAA;CAGjD;CAEA,MACMM,IACF,MACA,OACoC;EACpC,MAAMN,QAAQN,kBAAkBK,KAAAA;EAChC,MAAMM,SAAS,MAAM,KAAKT,QAAQW,OAAON,MAAMD,KAAAA;EAE/CD,MAAMS,SAASC,SAAS;EAExB,OAAOJ;CACX;CAEA,MACMK,KACF,IACA,MACA,OACoC;EACpC,MAAMV,QAAQN,kBAAkBK,KAAAA;EAChC,MAAMM,SAAS,MAAM,KAAKT,QAAQe,OAAOP,IAAIH,MAAMD,KAAAA;EAEnDD,MAAMS,SAASC,SAAS;EAExB,OAAOJ;CACX;CAEA,MACMO,KACF,IACA,OACoC;EACpC,MAAMZ,QAAQN,kBAAkBK,KAAAA;EAChC,MAAMM,SAAS,MAAM,KAAKT,QAAQiB,OAAOT,IAAIJ,KAAAA;EAE7CD,MAAMS,SAASC,SAAS;EAExB,OAAOJ;CACX;AACJ;;WAlEeZ,uBAAAA,CAAAA;;;;;;;eAgBIA,uBAAAA,CAAAA;;;;;;;;YAWHA,uBAAAA,CAAAA;;;;;;;;gBAaIA,uBAAAA,CAAAA;;;;;;;;;;;;;kBAcEA,uBAAAA,CAAAA"}

package/dist/adapters/http/controllers/entities/identity-provider/module.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"module.d.ts","sourceRoot":"","sources":["../../../../../../src/adapters/http/controllers/entities/identity-provider/module.ts"],"names":[],"mappings":"AAoBA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,QAAQ,CAAC;AAM3C,OAAO,KAAK,EAAE,gBAAgB,EAAkC,MAAM,kBAAkB,CAAC;AAgBzF,OAAO,KAAK,EACR,wBAAwB,EACxB,6BAA6B,EAC7B,2BAA2B,EAC3B,6BAA6B,EAChC,MAAM,uBAAuB,CAAC;AAE/B,OAAO,KAAK,EACR,+BAA+B,EAC/B,2BAA2B,EAC3B,8BAA8B,EAC9B,uCAAuC,EACvC,gCAAgC,EAChC,gBAAgB,EAEnB,MAAM,8BAA8B,CAAC;AACtC,OAAO,EACH,uCAAuC,EAE1C,MAAM,8BAA8B,CAAC;AAUtC,OAAO,KAAK,EAAE,iCAAiC,EAAE,iCAAiC,EAAE,MAAM,YAAY,CAAC;AAEvG,qBAEa,0BAA0B;IACnC,SAAS,CAAC,OAAO,EAAE,iCAAiC,CAAC;IAErD,SAAS,CAAC,UAAU,EAAE,2BAA2B,CAAC;IAElD,SAAS,CAAC,eAAe,EAAE,gBAAgB,CAAC;IAE5C,SAAS,CAAC,cAAc,EAAE,+BAA+B,CAAC;IAE1D,SAAS,CAAC,mBAAmB,EAAG,uCAAuC,CAAC;IAExE,SAAS,CAAC,oBAAoB,EAAG,uCAAuC,CAAC;IAEzE,SAAS,CAAC,YAAY,EAAG,gCAAgC,CAAC;IAE1D,SAAS,CAAC,UAAU,EAAG,8BAA8B,CAAC;gBAI1C,GAAG,EAAE,iCAAiC;IAc5C,YAAY,CACF,KAAK,EAAE,YAAY,GAChC,OAAO,CAAC,wBAAwB,CAAC,gBAAgB,CAAC,CAAC;IA+BhD,WAAW,CACA,EAAE,EAAE,MAAM,EACX,KAAK,EAAE,YAAY,GAChC,OAAO,CAAC,gBAAgB,CAAC;IA0BtB,YAAY,CACD,EAAE,EAAE,MAAM,EACd,IAAI,EAAE,6BAA6B,EAChC,KAAK,EAAE,YAAY,GAC/B,OAAO,CAAC,gBAAgB,CAAC;IAKvB,GAAG,CACQ,EAAE,EAAE,MAAM,EACd,IAAI,EAAE,2BAA2B,EAC9B,KAAK,EAAE,YAAY,GAC/B,OAAO,CAAC,gBAAgB,CAAC;IAKvB,YAAY,CACD,EAAE,EAAE,MAAM,EACX,KAAK,EAAE,YAAY,GAC/B,OAAO,CAAC,gBAAgB,CAAC;IA6BvB,WAAW,CACJ,IAAI,EAAE,6BAA6B,EAChC,KAAK,EAAE,YAAY,GAC/B,OAAO,CAAC,gBAAgB,CAAC;IAOvB,YAAY,CACD,GAAG,EAAE,MAAM,EACZ,KAAK,EAAE,YAAY;IAgD7B,WAAW,CACA,GAAG,EAAE,MAAM,EACZ,KAAK,EAAE,YAAY;YA2ErB,KAAK;YA2FL,OAAO;YAYP,sBAAsB;YAWtB,wBAAwB;CAWzC"}
+{"version":3,"file":"module.d.ts","sourceRoot":"","sources":["../../../../../../src/adapters/http/controllers/entities/identity-provider/module.ts"],"names":[],"mappings":"AAoBA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,QAAQ,CAAC;AAM3C,OAAO,KAAK,EAAE,gBAAgB,EAAkC,MAAM,kBAAkB,CAAC;AAgBzF,OAAO,KAAK,EACR,wBAAwB,EACxB,6BAA6B,EAC7B,2BAA2B,EAC3B,6BAA6B,EAChC,MAAM,uBAAuB,CAAC;AAE/B,OAAO,KAAK,EACR,+BAA+B,EAC/B,2BAA2B,EAC3B,8BAA8B,EAC9B,uCAAuC,EACvC,gCAAgC,EAChC,gBAAgB,EAEnB,MAAM,8BAA8B,CAAC;AACtC,OAAO,EACH,uCAAuC,EAE1C,MAAM,8BAA8B,CAAC;AAWtC,OAAO,KAAK,EAAE,iCAAiC,EAAE,iCAAiC,EAAE,MAAM,YAAY,CAAC;AAEvG,qBAEa,0BAA0B;IACnC,SAAS,CAAC,OAAO,EAAE,iCAAiC,CAAC;IAErD,SAAS,CAAC,UAAU,EAAE,2BAA2B,CAAC;IAElD,SAAS,CAAC,eAAe,EAAE,gBAAgB,CAAC;IAE5C,SAAS,CAAC,cAAc,EAAE,+BAA+B,CAAC;IAE1D,SAAS,CAAC,mBAAmB,EAAG,uCAAuC,CAAC;IAExE,SAAS,CAAC,oBAAoB,EAAG,uCAAuC,CAAC;IAEzE,SAAS,CAAC,YAAY,EAAG,gCAAgC,CAAC;IAE1D,SAAS,CAAC,UAAU,EAAG,8BAA8B,CAAC;gBAI1C,GAAG,EAAE,iCAAiC;IAc5C,YAAY,CACF,KAAK,EAAE,YAAY,GAChC,OAAO,CAAC,wBAAwB,CAAC,gBAAgB,CAAC,CAAC;IA+BhD,WAAW,CACA,EAAE,EAAE,MAAM,EACX,KAAK,EAAE,YAAY,GAChC,OAAO,CAAC,gBAAgB,CAAC;IA0BtB,YAAY,CACD,EAAE,EAAE,MAAM,EACd,IAAI,EAAE,6BAA6B,EAChC,KAAK,EAAE,YAAY,GAC/B,OAAO,CAAC,gBAAgB,CAAC;IAKvB,GAAG,CACQ,EAAE,EAAE,MAAM,EACd,IAAI,EAAE,2BAA2B,EAC9B,KAAK,EAAE,YAAY,GAC/B,OAAO,CAAC,gBAAgB,CAAC;IAKvB,YAAY,CACD,EAAE,EAAE,MAAM,EACX,KAAK,EAAE,YAAY,GAC/B,OAAO,CAAC,gBAAgB,CAAC;IA6BvB,WAAW,CACJ,IAAI,EAAE,6BAA6B,EAChC,KAAK,EAAE,YAAY,GAC/B,OAAO,CAAC,gBAAgB,CAAC;IAOvB,YAAY,CACD,GAAG,EAAE,MAAM,EACZ,KAAK,EAAE,YAAY;IAgD7B,WAAW,CACA,GAAG,EAAE,MAAM,EACZ,KAAK,EAAE,YAAY;YA2ErB,KAAK;YA4FL,OAAO;YAYP,sBAAsB;YAWtB,wBAAwB;CAWzC"}

package/dist/adapters/http/controllers/entities/identity-provider/module.mjs

@@ -5,16 +5,17 @@ import { useRequestPermissionEvaluator } from "../../../request/permission/helpe
 import { useRequestIdentityOrFail } from "../../../request/helpers/identity.mjs";
 import { getBodyRealmID } from "../../../request/helpers/body-realm-id.mjs";
 import { getRequestParamID, useRequestParamID } from "../../../request/helpers/param-id.mjs";
+import { applyRouteRealmIDToBody, getRequestRealmID } from "../../../request/helpers/realm-id.mjs";
 import "../../../request/index.mjs";
-import { ForceLoggedInMiddleware } from "../../../middleware/built-in/loggedin/module.mjs";
 import { resolveURL } from "../../../../../utils/url.mjs";
 import "../../../../../utils/index.mjs";
+import { ForceLoggedInMiddleware } from "../../../middleware/built-in/loggedin/module.mjs";
 import "../../../middleware/index.mjs";
-import { IdentityProviderAttributesValidator, IdentityProviderValidator, IdentityType, PermissionName, ValidatorGroup, isOAuth2IdentityProvider, isOpenIDIdentityProvider } from "@authup/core-kit";
-import { base64URLDecode, isUUID } from "@authup/kit";
+import { IdentityProviderAttributesValidator, IdentityProviderValidator, IdentityType, PermissionName, isOAuth2IdentityProvider, isOpenIDIdentityProvider } from "@authup/core-kit";
+import { ValidatorGroup, base64URLDecode, isUUID } from "@authup/kit";
 import { BuiltInPolicyType, PolicyData } from "@authup/access";
-import { OAuth2Error } from "@authup/specs";
-import { BadRequestError, NotFoundError } from "@ebec/http";
+import { BadRequestError, EntityNotFoundError } from "@authup/errors";
+import { OAuth2RequestError } from "@authup/specs";
 import { getRequestHeader, getRequestIP, sendRedirect } from "routup";
 import { DBody, DContext, DController, DDelete, DGet, DPath, DPost, DPut, DTags } from "@routup/decorators";
 import { readRequestBody } from "@routup/basic/body";
@@ -73,8 +74,8 @@ var IdentityProviderController = class {
 	}
 	async getProvider(id, event) {
 		const paramId = useRequestParamID(event, { isUUID: false });
-		const entity = await this.repository.findOneByIdOrName(paramId, event.params.realmId);
-		if (!entity) throw new NotFoundError();
+		const entity = await this.repository.findOneByIdOrName(paramId, getRequestRealmID(event));
+		if (!entity) throw new EntityNotFoundError();
 		try {
 			await useRequestPermissionEvaluator(event).evaluate({
 				name: PermissionName.IDENTITY_PROVIDER_READ,
@@ -94,7 +95,7 @@ var IdentityProviderController = class {
 		const permissionEvaluator = useRequestPermissionEvaluator(event);
 		await permissionEvaluator.preEvaluate({ name: PermissionName.IDENTITY_PROVIDER_DELETE });
 		const entity = await this.repository.findOneBy({ id: paramId });
-		if (!entity) throw new NotFoundError();
+		if (!entity) throw new EntityNotFoundError();
 		await permissionEvaluator.evaluate({
 			name: PermissionName.IDENTITY_PROVIDER_DELETE,
 			input: new PolicyData({ [BuiltInPolicyType.ATTRIBUTES]: entity })
@@ -125,11 +126,11 @@ var IdentityProviderController = class {
 			try {
 				codeRequestDecoded = JSON.parse(base64URLDecode(query.codeRequest));
 			} catch {
-				throw OAuth2Error.requestInvalid("The code request is malformed and can not be parsed.");
+				throw OAuth2RequestError.malformed("The code request is malformed and can not be parsed.");
 			}
 			const codeRequestValidated = await this.codeRequestValidator.run(codeRequestDecoded);
 			const data = await this.codeRequestVerifier.verify(codeRequestValidated);
-			if (data.client.realm_id && entity.realm_id && entity.realm_id !== data.client.realm_id) throw OAuth2Error.requestInvalid("The provider and client realm do not match.");
+			if (data.client.realm_id && entity.realm_id && entity.realm_id !== data.client.realm_id) throw OAuth2RequestError.malformed("The provider and client realm do not match.");
 			codeRequest = data.data;
 		}
 		parameters.state = await this.saveAuthorizationState(event, codeRequest);
@@ -140,7 +141,7 @@ var IdentityProviderController = class {
 		const entity = await this.resolve(id);
 		if (!isOAuth2IdentityProvider(entity) && !isOpenIDIdentityProvider(entity)) throw new Error(`The provider protocol ${entity.protocol} is not valid.`);
 		const data = await this.verifyAuthorizationState(event);
-		if (entity.realm_id && data.codeRequest && data.codeRequest.realm_id && data.codeRequest.realm_id !== entity.realm_id) throw OAuth2Error.requestInvalid("The provider and client realm do not match.");
+		if (entity.realm_id && data.codeRequest && data.codeRequest.realm_id && data.codeRequest.realm_id !== entity.realm_id) throw OAuth2RequestError.malformed("The provider and client realm do not match.");
 		const { code } = useRequestQuery(event);
 		const user = await createIdentityProviderOAuth2Authenticator({
 			accountManager: this.accountManager,
@@ -181,7 +182,8 @@ var IdentityProviderController = class {
 		let group;
 		const id = getRequestParamID(event, { isUUID: false });
 		const body = await readRequestBody(event);
-		const realmId = getBodyRealmID(body);
+		applyRouteRealmIDToBody(event, body);
+		const realmId = getRequestRealmID(event) ?? getBodyRealmID(body);
 		let entity;
 		if (id) {
 			const where = {};
@@ -189,8 +191,8 @@ var IdentityProviderController = class {
 			else where.name = id;
 			if (realmId) where.realm_id = realmId;
 			entity = await this.repository.findOneBy(where);
-			if (!entity && options.updateOnly) throw new NotFoundError();
-		} else if (options.updateOnly) throw new NotFoundError();
+			if (!entity && options.updateOnly) throw new EntityNotFoundError();
+		} else if (options.updateOnly) throw new EntityNotFoundError();
 		const permissionEvaluator = useRequestPermissionEvaluator(event);
 		if (entity) {
 			await permissionEvaluator.preEvaluate({ name: PermissionName.IDENTITY_PROVIDER_UPDATE });
@@ -230,7 +232,7 @@ var IdentityProviderController = class {
 	}
 	async resolve(id) {
 		const entity = await this.repository.findOneById(id);
-		if (!entity) throw new NotFoundError();
+		if (!entity) throw new EntityNotFoundError();
 		return entity;
 	}
 	async saveAuthorizationState(event, codeRequest) {
@@ -242,7 +244,7 @@ var IdentityProviderController = class {
 	}
 	async verifyAuthorizationState(event) {
 		const query = useRequestQuery(event);
-		if (typeof query.state !== "string") throw OAuth2Error.stateInvalid();
+		if (typeof query.state !== "string") throw OAuth2RequestError.stateInvalid();
 		return this.stateManager.verify(query.state, {
 			ip: getRequestIP(event, { trustProxy: true }) ?? "",
 			userAgent: getRequestHeader(event, "user-agent") ?? void 0
@@ -324,7 +326,7 @@ _ts_decorate([
 ], IdentityProviderController.prototype, "authorizeIn", null);
 IdentityProviderController = _ts_decorate([
 	DTags("identity"),
-	DController("/identity-providers"),
+	DController(["/identity-providers", "/realms/:realmId/identity-providers"]),
 	_ts_metadata("design:type", Function),
 	_ts_metadata("design:paramtypes", [typeof IdentityProviderControllerContext === "undefined" ? Object : IdentityProviderControllerContext])
 ], IdentityProviderController);

package/dist/adapters/http/controllers/entities/identity-provider/module.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"module.mjs","names":["BuiltInPolicyType","PolicyData","base64URLDecode","isUUID","DBody","DContext","DController","DDelete","DGet","DPath","DPost","DPut","DTags","getRequestHeader","getRequestIP","sendRedirect","IdentityProviderAttributesValidator","IdentityProviderValidator","IdentityType","PermissionName","ValidatorGroup","isOAuth2IdentityProvider","isOpenIDIdentityProvider","BadRequestError","NotFoundError","useRequestQuery","readRequestBody","OAuth2Error","URL","OAuth2AuthorizationCodeRequestValidator","createIdentityProviderOAuth2Authenticator","getBodyRealmID","getRequestParamID","useRequestIdentityOrFail","useRequestParamID","useRequestPermissionEvaluator","ForceLoggedInMiddleware","resolveURL","IdentityProviderController","options","repository","realmRepository","accountManager","codeRequestVerifier","codeRequestValidator","stateManager","codeIssuer","ctx","getProviders","event","data","meta","findMany","permissionEvaluator","preEvaluate","name","IDENTITY_PROVIDER_READ","datum","evaluate","input","ATTRIBUTES","getProvider","id","paramId","entity","findOneByIdOrName","params","realmId","editProvider","user","write","updateOnly","put","dropProvider","IDENTITY_PROVIDER_DELETE","findOneBy","entityId","remove","response","status","addProvider","authorizeOut","_id","resolve","authenticator","provider","baseURL","parameters","codeRequest","query","codeRequestDecoded","JSON","parse","requestInvalid","codeRequestValidated","run","verify","client","realm_id","state","saveAuthorizationState","buildRedirectURL","authorizeIn","Error","protocol","verifyAuthorizationState","code","clientId","client_id","authenticate","realm","authorizationCode","issue","response_type","redirect_uri","scope","type","USER","codeRequestKeys","Object","keys","url","codeRequestKey_","codeRequestKey","searchParams","set","href","group","body","where","IDENTITY_PROVIDER_UPDATE","UPDATE","IDENTITY_PROVIDER_CREATE","CREATE","validator","attributesValidator","attributes","validateJoinColumns","identity","checkUniqueness","undefined","merge","saveWithEA","create","findOneById","save","ip","trustProxy","userAgent","stateInvalid"],"sources":["../../../../../../src/adapters/http/controllers/entities/identity-provider/module.ts"],"sourcesContent":["/*\n * Copyright (c) 2022.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport { BuiltInPolicyType, PolicyData } from '@authup/access';\nimport { base64URLDecode, isUUID } from '@authup/kit';\nimport {\n    DBody,\n    DContext,\n    DController,\n    DDelete,\n    DGet,\n    DPath,\n    DPost,\n    DPut,\n    DTags,\n} from '@routup/decorators';\nimport type { IRoutupEvent } from 'routup';\nimport {\n    getRequestHeader,\n    getRequestIP,\n    sendRedirect,\n} from 'routup';\nimport type { IdentityProvider, OAuth2AuthorizationCodeRequest } from '@authup/core-kit';\nimport {\n \n    IdentityProviderAttributesValidator, \n    IdentityProviderValidator, \n    IdentityType, \n    PermissionName, \n    ValidatorGroup, \n    isOAuth2IdentityProvider, \n    isOpenIDIdentityProvider, \n} from '@authup/core-kit';\nimport { BadRequestError, NotFoundError } from '@ebec/http';\nimport type { AuthorizeParameters } from '@hapic/oauth2';\nimport { useRequestQuery } from '@routup/basic/query';\nimport { readRequestBody } from '@routup/basic/body';\nimport { OAuth2Error } from '@authup/specs';\nimport type {\n    EntityCollectionResponse,\n    IdentityProviderCreatePayload,\n    IdentityProviderSavePayload,\n    IdentityProviderUpdatePayload,\n} from '@authup/core-http-kit';\nimport { URL } from 'node:url';\nimport type {\n    IIdentityProviderAccountManager,\n    IIdentityProviderRepository,\n    IOAuth2AuthorizationCodeIssuer,\n    IOAuth2AuthorizationCodeRequestVerifier,\n    IOAuth2AuthorizationStateManager,\n    IRealmRepository,\n    OAuth2AuthorizationState,\n} from '../../../../../core/index.ts';\nimport {\n    OAuth2AuthorizationCodeRequestValidator,\n    createIdentityProviderOAuth2Authenticator,\n} from '../../../../../core/index.ts';\nimport {\n    getBodyRealmID,\n    getRequestParamID,\n    useRequestIdentityOrFail,\n    useRequestParamID,\n    useRequestPermissionEvaluator,\n} from '../../../request/index.ts';\nimport { ForceLoggedInMiddleware } from '../../../middleware/index.ts';\nimport { resolveURL } from '../../../../../utils/index.ts';\nimport type { IdentityProviderControllerContext, IdentityProviderControllerOptions } from './types.ts';\n\n@DTags('identity')\n@DController('/identity-providers')\nexport class IdentityProviderController {\n    protected options: IdentityProviderControllerOptions;\n\n    protected repository: IIdentityProviderRepository;\n\n    protected realmRepository: IRealmRepository;\n\n    protected accountManager: IIdentityProviderAccountManager;\n\n    protected codeRequestVerifier : IOAuth2AuthorizationCodeRequestVerifier;\n\n    protected codeRequestValidator : OAuth2AuthorizationCodeRequestValidator;\n\n    protected stateManager : IOAuth2AuthorizationStateManager;\n\n    protected codeIssuer : IOAuth2AuthorizationCodeIssuer;\n\n    // ---------------------------------------------------------\n\n    constructor(ctx: IdentityProviderControllerContext) {\n        this.options = ctx.options;\n        this.repository = ctx.repository;\n        this.realmRepository = ctx.realmRepository;\n        this.accountManager = ctx.accountManager;\n        this.codeIssuer = ctx.codeIssuer;\n        this.codeRequestVerifier = ctx.codeRequestVerifier;\n        this.codeRequestValidator = new OAuth2AuthorizationCodeRequestValidator();\n        this.stateManager = ctx.stateManager;\n    }\n\n    // ---------------------------------------------------------\n\n    @DGet('', [])\n    async getProviders(\n        @DContext() event: IRoutupEvent,\n    ): Promise<EntityCollectionResponse<IdentityProvider>> {\n        const {\n            data, \n            meta, \n        } = await this.repository.findMany(useRequestQuery(event));\n\n        try {\n            const permissionEvaluator = useRequestPermissionEvaluator(event);\n            await permissionEvaluator.preEvaluate({ name: PermissionName.IDENTITY_PROVIDER_READ });\n\n            for (const datum of data) {\n                try {\n                    await permissionEvaluator.evaluate({\n                        name: PermissionName.IDENTITY_PROVIDER_READ,\n                        input: new PolicyData({ [BuiltInPolicyType.ATTRIBUTES]: datum }),\n                    });\n                } catch {\n                    // do nothing\n                }\n            }\n        } catch {\n            // do nothing\n        }\n\n        return {\n            data,\n            meta,\n        };\n    }\n\n    @DGet('/:id', [])\n    async getProvider(\n        @DPath('id') id: string,\n        @DContext() event: IRoutupEvent,\n    ): Promise<IdentityProvider> {\n        const paramId = useRequestParamID(event, { isUUID: false });\n\n        const entity = await this.repository.findOneByIdOrName(\n            paramId,\n            event.params.realmId,\n        );\n\n        if (!entity) {\n            throw new NotFoundError();\n        }\n\n        try {\n            const permissionEvaluator = useRequestPermissionEvaluator(event);\n            await permissionEvaluator.evaluate({\n                name: PermissionName.IDENTITY_PROVIDER_READ,\n                input: new PolicyData({ [BuiltInPolicyType.ATTRIBUTES]: entity }),\n            });\n        } catch {\n            // do nothing\n        }\n\n        return entity;\n    }\n\n    @DPost('/:id', [ForceLoggedInMiddleware])\n    async editProvider(\n        @DPath('id') id: string,\n        @DBody() user: IdentityProviderUpdatePayload,\n        @DContext() event: IRoutupEvent,\n    ) : Promise<IdentityProvider> {\n        return this.write(event, { updateOnly: true });\n    }\n\n    @DPut('/:id', [ForceLoggedInMiddleware])\n    async put(\n        @DPath('id') id: string,\n        @DBody() user: IdentityProviderSavePayload,\n        @DContext() event: IRoutupEvent,\n    ) : Promise<IdentityProvider> {\n        return this.write(event);\n    }\n\n    @DDelete('/:id', [ForceLoggedInMiddleware])\n    async dropProvider(\n        @DPath('id') id: string,\n        @DContext() event: IRoutupEvent,\n    ) : Promise<IdentityProvider> {\n        const paramId = useRequestParamID(event);\n\n        const permissionEvaluator = useRequestPermissionEvaluator(event);\n        await permissionEvaluator.preEvaluate({ name: PermissionName.IDENTITY_PROVIDER_DELETE });\n\n        const entity = await this.repository.findOneBy({ id: paramId });\n\n        if (!entity) {\n            throw new NotFoundError();\n        }\n\n        await permissionEvaluator.evaluate({\n            name: PermissionName.IDENTITY_PROVIDER_DELETE,\n            input: new PolicyData({ [BuiltInPolicyType.ATTRIBUTES]: entity }),\n        });\n\n        const { id: entityId } = entity;\n\n        await this.repository.remove(entity);\n\n        entity.id = entityId;\n\n        event.response.status = 202;\n\n        return entity;\n    }\n\n    @DPost('', [ForceLoggedInMiddleware])\n    async addProvider(\n        @DBody() user: IdentityProviderCreatePayload,\n        @DContext() event: IRoutupEvent,\n    ) : Promise<IdentityProvider> {\n        return this.write(event);\n    }\n\n    // ---------------------------------------------------------\n\n    @DGet('/:id/authorize-out', [])\n    async authorizeOut(\n        @DPath('id') _id: string,\n        @DContext() event: IRoutupEvent,\n    ) {\n        const id = useRequestParamID(event);\n        const entity = await this.resolve(id);\n\n        if (!isOAuth2IdentityProvider(entity) && !isOpenIDIdentityProvider(entity)) {\n            throw new BadRequestError('Only an identity-provider based on the oauth protocol supports authorize redirect.');\n        }\n\n        const authenticator = createIdentityProviderOAuth2Authenticator({\n            accountManager: this.accountManager,\n            provider: entity,\n            options: { baseURL: this.options.baseURL },\n        });\n\n        const parameters : AuthorizeParameters = {};\n\n        let codeRequest: OAuth2AuthorizationCodeRequest | undefined;\n        const query = useRequestQuery(event);\n        if (typeof query.codeRequest === 'string') {\n            let codeRequestDecoded: OAuth2AuthorizationCodeRequest;\n\n            try {\n                codeRequestDecoded = JSON.parse(base64URLDecode(query.codeRequest));\n            } catch {\n                throw OAuth2Error.requestInvalid('The code request is malformed and can not be parsed.');\n            }\n\n            const codeRequestValidated = await this.codeRequestValidator.run(codeRequestDecoded);\n            const data = await this.codeRequestVerifier.verify(codeRequestValidated);\n\n            if (\n                data.client.realm_id &&\n                entity.realm_id &&\n                entity.realm_id !== data.client.realm_id\n            ) {\n                throw OAuth2Error.requestInvalid('The provider and client realm do not match.');\n            }\n\n            codeRequest = data.data;\n        }\n\n        parameters.state = await this.saveAuthorizationState(event, codeRequest);\n\n        return sendRedirect(event, authenticator.buildRedirectURL(parameters));\n    }\n\n    @DGet('/:id/authorize-in', [])\n    async authorizeIn(\n        @DPath('id') _id: string,\n        @DContext() event: IRoutupEvent,\n    ) {\n        const id = useRequestParamID(event);\n\n        const entity = await this.resolve(id);\n\n        if (!isOAuth2IdentityProvider(entity) && !isOpenIDIdentityProvider(entity)) {\n            throw new Error(`The provider protocol ${entity.protocol} is not valid.`);\n        }\n\n        const data = await this.verifyAuthorizationState(event);\n        if (\n            entity.realm_id &&\n            data.codeRequest &&\n            data.codeRequest.realm_id &&\n            data.codeRequest.realm_id !== entity.realm_id\n        ) {\n            throw OAuth2Error.requestInvalid('The provider and client realm do not match.');\n        }\n\n        const { code } = useRequestQuery(event);\n\n        const authenticator = createIdentityProviderOAuth2Authenticator({\n            accountManager: this.accountManager,\n            provider: entity,\n            options: {\n                baseURL: this.options.baseURL,\n                clientId: data.codeRequest?.client_id,\n            },\n        });\n\n        const user = await authenticator.authenticate(code);\n\n        const realm = await this.realmRepository.resolve(entity.realm_id, true);\n\n        const authorizationCode = await this.codeIssuer.issue(\n            {\n                response_type: 'code',\n                client_id: data.codeRequest?.client_id,\n                redirect_uri: data.codeRequest?.redirect_uri,\n                scope: data.codeRequest?.scope,\n            },\n            {\n                type: IdentityType.USER,\n                data: {\n                    ...user,\n                    realm,\n                },\n            },\n        );\n\n        if (data.codeRequest) {\n            const codeRequestKeys = Object.keys(data.codeRequest);\n\n            const url = new URL(resolveURL(this.options.baseURL, 'authorize'));\n            for (const codeRequestKey_ of codeRequestKeys) {\n                const codeRequestKey = codeRequestKey_ as keyof OAuth2AuthorizationCodeRequest;\n                if (data.codeRequest[codeRequestKey]) {\n                    url.searchParams.set(codeRequestKey, data.codeRequest[codeRequestKey]);\n                }\n            }\n\n            url.searchParams.set('code', authorizationCode.id);\n\n            return sendRedirect(event, url.href);\n        }\n\n        const url = new URL(this.options.baseURL);\n        url.searchParams.set('code', authorizationCode.id);\n\n        return sendRedirect(event, url.href);\n    }\n\n    // ---------------------------------------------------------\n\n    private async write(event: IRoutupEvent, options: {\n        updateOnly?: boolean\n    } = {}): Promise<IdentityProvider> {\n        let group: string;\n        const id = getRequestParamID(event, { isUUID: false });\n        const body = await readRequestBody(event);\n        const realmId = getBodyRealmID(body);\n\n        let entity: IdentityProvider | null | undefined;\n        if (id) {\n            const where: Record<string, any> = {};\n            if (isUUID(id)) {\n                where.id = id;\n            } else {\n                where.name = id;\n            }\n\n            if (realmId) {\n                where.realm_id = realmId;\n            }\n\n            entity = await this.repository.findOneBy(where);\n            if (!entity && options.updateOnly) {\n                throw new NotFoundError();\n            }\n        } else if (options.updateOnly) {\n            throw new NotFoundError();\n        }\n\n        const permissionEvaluator = useRequestPermissionEvaluator(event);\n        if (entity) {\n            await permissionEvaluator.preEvaluate({ name: PermissionName.IDENTITY_PROVIDER_UPDATE });\n\n            group = ValidatorGroup.UPDATE;\n        } else {\n            await permissionEvaluator.preEvaluate({ name: PermissionName.IDENTITY_PROVIDER_CREATE });\n\n            group = ValidatorGroup.CREATE;\n        }\n\n        const validator = new IdentityProviderValidator();\n        const data = await validator.run(body, { group });\n\n        const attributesValidator = new IdentityProviderAttributesValidator();\n        const attributes = await attributesValidator.run(body);\n\n        await this.repository.validateJoinColumns(data);\n\n        if (entity) {\n            await permissionEvaluator.evaluate({\n                name: PermissionName.IDENTITY_PROVIDER_UPDATE,\n                input: new PolicyData({\n                    [BuiltInPolicyType.ATTRIBUTES]: {\n                        ...entity,\n                        ...data,\n                    },\n                }),\n            });\n        } else {\n            if (!data.realm_id) {\n                const identity = useRequestIdentityOrFail(event);\n                data.realm_id = identity.realmId;\n            }\n\n            await permissionEvaluator.evaluate({\n                name: PermissionName.IDENTITY_PROVIDER_CREATE,\n                input: new PolicyData({ [BuiltInPolicyType.ATTRIBUTES]: data }),\n            });\n        }\n\n        await this.repository.checkUniqueness(data, entity || undefined);\n\n        if (entity) {\n            entity = this.repository.merge(entity, data);\n            await this.repository.saveWithEA(entity, attributes);\n\n            event.response.status = 202;\n\n            return entity;\n        }\n\n        entity = this.repository.create(data);\n        await this.repository.saveWithEA(entity, attributes);\n\n        event.response.status = 201;\n\n        return entity;\n    }\n\n    // ---------------------------------------------------------\n\n    private async resolve(id: string) {\n        const entity = await this.repository.findOneById(id);\n\n        if (!entity) {\n            throw new NotFoundError();\n        }\n\n        return entity;\n    }\n\n    // ---------------------------------------------------------\n\n    private async saveAuthorizationState(\n        event: IRoutupEvent,\n        codeRequest?: OAuth2AuthorizationCodeRequest,\n    ) : Promise<string> {\n        return this.stateManager.save({\n            codeRequest,\n            ip: getRequestIP(event, { trustProxy: true }) ?? '',\n            userAgent: getRequestHeader(event, 'user-agent') ?? undefined,\n        });\n    }\n\n    private async verifyAuthorizationState(event: IRoutupEvent): Promise<OAuth2AuthorizationState> {\n        const query = useRequestQuery(event);\n        if (typeof query.state !== 'string') {\n            throw OAuth2Error.stateInvalid();\n        }\n\n        return this.stateManager.verify(query.state, {\n            ip: getRequestIP(event, { trustProxy: true }) ?? '',\n            userAgent: getRequestHeader(event, 'user-agent') ?? undefined,\n        });\n    }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AA2EA,IAAasC,6BAAb,MAAaA;CACCC;CAEAC;CAEAC;CAEAC;CAEAC;CAEAC;CAEAC;CAEAC;CAIV,YAAYC,KAAwC;AAChD,OAAKR,UAAUQ,IAAIR;AACnB,OAAKC,aAAaO,IAAIP;AACtB,OAAKC,kBAAkBM,IAAIN;AAC3B,OAAKC,iBAAiBK,IAAIL;AAC1B,OAAKI,aAAaC,IAAID;AACtB,OAAKH,sBAAsBI,IAAIJ;AAC/B,OAAKC,uBAAuB,IAAIf,yCAAAA;AAChC,OAAKgB,eAAeE,IAAIF;;CAK5B,MACMG,aACF,OACmD;EACnD,MAAM,EACFE,MACAC,SACA,MAAM,KAAKX,WAAWY,SAAS3B,gBAAgBwB,MAAAA,CAAAA;AAEnD,MAAI;GACA,MAAMI,sBAAsBlB,8BAA8Bc,MAAAA;AAC1D,SAAMI,oBAAoBC,YAAY,EAAEC,MAAMpC,eAAeqC,wBAAuB,CAAA;AAEpF,QAAK,MAAMC,SAASP,KAChB,KAAI;AACA,UAAMG,oBAAoBK,SAAS;KAC/BH,MAAMpC,eAAeqC;KACrBG,OAAO,IAAI1D,WAAW,GAAGD,kBAAkB4D,aAAaH,OAAM,CAAA;KAClE,CAAA;WACI;UAIR;AAIR,SAAO;GACHP;GACAC;GACJ;;CAGJ,MACMU,YACF,IACA,OACyB;EACzB,MAAME,UAAU7B,kBAAkBe,OAAO,EAAE9C,QAAQ,OAAM,CAAA;EAEzD,MAAM6D,SAAS,MAAM,KAAKxB,WAAWyB,kBACjCF,SACAd,MAAMiB,OAAOC,QAAO;AAGxB,MAAI,CAACH,OACD,OAAM,IAAIxC,eAAAA;AAGd,MAAI;AAEA,SAD4BW,8BAA8Bc,MACpDI,CAAoBK,SAAS;IAC/BH,MAAMpC,eAAeqC;IACrBG,OAAO,IAAI1D,WAAW,GAAGD,kBAAkB4D,aAAaI,QAAO,CAAA;IACnE,CAAA;UACI;AAIR,SAAOA;;CAGX,MACMI,aACF,IACA,MACA,OAC0B;AAC1B,SAAO,KAAKE,MAAMrB,OAAO,EAAEsB,YAAY,MAAK,CAAA;;CAGhD,MACMC,IACF,IACA,MACA,OAC0B;AAC1B,SAAO,KAAKF,MAAMrB,MAAAA;;CAGtB,MACMwB,aACF,IACA,OAC0B;EAC1B,MAAMV,UAAU7B,kBAAkBe,MAAAA;EAElC,MAAMI,sBAAsBlB,8BAA8Bc,MAAAA;AAC1D,QAAMI,oBAAoBC,YAAY,EAAEC,MAAMpC,eAAeuD,0BAAyB,CAAA;EAEtF,MAAMV,SAAS,MAAM,KAAKxB,WAAWmC,UAAU,EAAEb,IAAIC,SAAQ,CAAA;AAE7D,MAAI,CAACC,OACD,OAAM,IAAIxC,eAAAA;AAGd,QAAM6B,oBAAoBK,SAAS;GAC/BH,MAAMpC,eAAeuD;GACrBf,OAAO,IAAI1D,WAAW,GAAGD,kBAAkB4D,aAAaI,QAAO,CAAA;GACnE,CAAA;EAEA,MAAM,EAAEF,IAAIc,aAAaZ;AAEzB,QAAM,KAAKxB,WAAWqC,OAAOb,OAAAA;AAE7BA,SAAOF,KAAKc;AAEZ3B,QAAM6B,SAASC,SAAS;AAExB,SAAOf;;CAGX,MACMgB,YACF,MACA,OAC0B;AAC1B,SAAO,KAAKV,MAAMrB,MAAAA;;CAKtB,MACMgC,aACF,KACA,OACF;EACE,MAAMnB,KAAK5B,kBAAkBe,MAAAA;EAC7B,MAAMe,SAAS,MAAM,KAAKmB,QAAQrB,GAAAA;AAElC,MAAI,CAACzC,yBAAyB2C,OAAAA,IAAW,CAAC1C,yBAAyB0C,OAAAA,CAC/D,OAAM,IAAIzC,gBAAgB,qFAAA;EAG9B,MAAM6D,gBAAgBtD,0CAA0C;GAC5DY,gBAAgB,KAAKA;GACrB2C,UAAUrB;GACVzB,SAAS,EAAE+C,SAAS,KAAK/C,QAAQ+C,SAAQ;GAC7C,CAAA;EAEA,MAAMC,aAAmC,EAAC;EAE1C,IAAIC;EACJ,MAAMC,QAAQhE,gBAAgBwB,MAAAA;AAC9B,MAAI,OAAOwC,MAAMD,gBAAgB,UAAU;GACvC,IAAIE;AAEJ,OAAI;AACAA,yBAAqBC,KAAKC,MAAM1F,gBAAgBuF,MAAMD,YAAW,CAAA;WAC7D;AACJ,UAAM7D,YAAYkE,eAAe,uDAAA;;GAGrC,MAAMC,uBAAuB,MAAM,KAAKlD,qBAAqBmD,IAAIL,mBAAAA;GACjE,MAAMxC,OAAO,MAAM,KAAKP,oBAAoBqD,OAAOF,qBAAAA;AAEnD,OACI5C,KAAK+C,OAAOC,YACZlC,OAAOkC,YACPlC,OAAOkC,aAAahD,KAAK+C,OAAOC,SAEhC,OAAMvE,YAAYkE,eAAe,8CAAA;AAGrCL,iBAActC,KAAKA;;AAGvBqC,aAAWY,QAAQ,MAAM,KAAKC,uBAAuBnD,OAAOuC,YAAAA;AAE5D,SAAOzE,aAAakC,OAAOmC,cAAciB,iBAAiBd,WAAAA,CAAAA;;CAG9D,MACMe,YACF,KACA,OACF;EACE,MAAMxC,KAAK5B,kBAAkBe,MAAAA;EAE7B,MAAMe,SAAS,MAAM,KAAKmB,QAAQrB,GAAAA;AAElC,MAAI,CAACzC,yBAAyB2C,OAAAA,IAAW,CAAC1C,yBAAyB0C,OAAAA,CAC/D,OAAM,IAAIuC,MAAM,yBAAyBvC,OAAOwC,SAAS,gBAAe;EAG5E,MAAMtD,OAAO,MAAM,KAAKuD,yBAAyBxD,MAAAA;AACjD,MACIe,OAAOkC,YACPhD,KAAKsC,eACLtC,KAAKsC,YAAYU,YACjBhD,KAAKsC,YAAYU,aAAalC,OAAOkC,SAErC,OAAMvE,YAAYkE,eAAe,8CAAA;EAGrC,MAAM,EAAEa,SAASjF,gBAAgBwB,MAAAA;EAWjC,MAAMoB,OAAO,MATSvC,0CAA0C;GAC5DY,gBAAgB,KAAKA;GACrB2C,UAAUrB;GACVzB,SAAS;IACL+C,SAAS,KAAK/C,QAAQ+C;IACtBqB,UAAUzD,KAAKsC,aAAaoB;IAChC;GACJ,CAEmBxB,CAAcyB,aAAaH,KAAAA;EAE9C,MAAMI,QAAQ,MAAM,KAAKrE,gBAAgB0C,QAAQnB,OAAOkC,UAAU,KAAA;EAElE,MAAMa,oBAAoB,MAAM,KAAKjE,WAAWkE,MAC5C;GACIC,eAAe;GACfL,WAAW1D,KAAKsC,aAAaoB;GAC7BM,cAAchE,KAAKsC,aAAa0B;GAChCC,OAAOjE,KAAKsC,aAAa2B;GAC7B,EACA;GACIC,MAAMlG,aAAamG;GACnBnE,MAAM;IACF,GAAGmB;IACHyC;IACJ;GACJ,CAAA;AAGJ,MAAI5D,KAAKsC,aAAa;GAClB,MAAM8B,kBAAkBC,OAAOC,KAAKtE,KAAKsC,YAAW;GAEpD,MAAMiC,MAAM,IAAI7F,IAAIS,WAAW,KAAKE,QAAQ+C,SAAS,YAAA,CAAA;AACrD,QAAK,MAAMoC,mBAAmBJ,iBAAiB;IAC3C,MAAMK,iBAAiBD;AACvB,QAAIxE,KAAKsC,YAAYmC,gBACjBF,KAAIG,aAAaC,IAAIF,gBAAgBzE,KAAKsC,YAAYmC,gBAAe;;AAI7EF,OAAIG,aAAaC,IAAI,QAAQd,kBAAkBjD,GAAE;AAEjD,UAAO/C,aAAakC,OAAOwE,IAAIK,KAAI;;EAGvC,MAAML,MAAM,IAAI7F,IAAI,KAAKW,QAAQ+C,QAAO;AACxCmC,MAAIG,aAAaC,IAAI,QAAQd,kBAAkBjD,GAAE;AAEjD,SAAO/C,aAAakC,OAAOwE,IAAIK,KAAI;;CAKvC,MAAcxD,MAAMrB,OAAqBV,UAErC,EAAE,EAA6B;EAC/B,IAAIwF;EACJ,MAAMjE,KAAK9B,kBAAkBiB,OAAO,EAAE9C,QAAQ,OAAM,CAAA;EACpD,MAAM6H,OAAO,MAAMtG,gBAAgBuB,MAAAA;EACnC,MAAMkB,UAAUpC,eAAeiG,KAAAA;EAE/B,IAAIhE;AACJ,MAAIF,IAAI;GACJ,MAAMmE,QAA6B,EAAC;AACpC,OAAI9H,OAAO2D,GAAAA,CACPmE,OAAMnE,KAAKA;OAEXmE,OAAM1E,OAAOO;AAGjB,OAAIK,QACA8D,OAAM/B,WAAW/B;AAGrBH,YAAS,MAAM,KAAKxB,WAAWmC,UAAUsD,MAAAA;AACzC,OAAI,CAACjE,UAAUzB,QAAQgC,WACnB,OAAM,IAAI/C,eAAAA;aAEPe,QAAQgC,WACf,OAAM,IAAI/C,eAAAA;EAGd,MAAM6B,sBAAsBlB,8BAA8Bc,MAAAA;AAC1D,MAAIe,QAAQ;AACR,SAAMX,oBAAoBC,YAAY,EAAEC,MAAMpC,eAAe+G,0BAAyB,CAAA;AAEtFH,WAAQ3G,eAAe+G;SACpB;AACH,SAAM9E,oBAAoBC,YAAY,EAAEC,MAAMpC,eAAeiH,0BAAyB,CAAA;AAEtFL,WAAQ3G,eAAeiH;;EAI3B,MAAMnF,OAAO,MAAMoF,IADGrH,2BACHqH,CAAUvC,IAAIiC,MAAM,EAAED,OAAM,CAAA;EAG/C,MAAMS,aAAa,MAAMD,IADOvH,qCACPuH,CAAoBxC,IAAIiC,KAAAA;AAEjD,QAAM,KAAKxF,WAAWiG,oBAAoBvF,KAAAA;AAE1C,MAAIc,OACA,OAAMX,oBAAoBK,SAAS;GAC/BH,MAAMpC,eAAe+G;GACrBvE,OAAO,IAAI1D,WAAW,GACjBD,kBAAkB4D,aAAa;IAC5B,GAAGI;IACH,GAAGd;IACP,EACJ,CAAA;GACJ,CAAA;OACG;AACH,OAAI,CAACA,KAAKgD,SAENhD,MAAKgD,WADYjE,yBAAyBgB,MAC1ByF,CAASvE;AAG7B,SAAMd,oBAAoBK,SAAS;IAC/BH,MAAMpC,eAAeiH;IACrBzE,OAAO,IAAI1D,WAAW,GAAGD,kBAAkB4D,aAAaV,MAAK,CAAA;IACjE,CAAA;;AAGJ,QAAM,KAAKV,WAAWmG,gBAAgBzF,MAAMc,UAAU4E,KAAAA,EAAAA;AAEtD,MAAI5E,QAAQ;AACRA,YAAS,KAAKxB,WAAWqG,MAAM7E,QAAQd,KAAAA;AACvC,SAAM,KAAKV,WAAWsG,WAAW9E,QAAQwE,WAAAA;AAEzCvF,SAAM6B,SAASC,SAAS;AAExB,UAAOf;;AAGXA,WAAS,KAAKxB,WAAWuG,OAAO7F,KAAAA;AAChC,QAAM,KAAKV,WAAWsG,WAAW9E,QAAQwE,WAAAA;AAEzCvF,QAAM6B,SAASC,SAAS;AAExB,SAAOf;;CAKX,MAAcmB,QAAQrB,IAAY;EAC9B,MAAME,SAAS,MAAM,KAAKxB,WAAWwG,YAAYlF,GAAAA;AAEjD,MAAI,CAACE,OACD,OAAM,IAAIxC,eAAAA;AAGd,SAAOwC;;CAKX,MAAcoC,uBACVnD,OACAuC,aACgB;AAChB,SAAO,KAAK3C,aAAaoG,KAAK;GAC1BzD;GACA0D,IAAIpI,aAAamC,OAAO,EAAEkG,YAAY,MAAK,CAAA,IAAM;GACjDC,WAAWvI,iBAAiBoC,OAAO,aAAA,IAAiB2F,KAAAA;GACxD,CAAA;;CAGJ,MAAcnC,yBAAyBxD,OAAwD;EAC3F,MAAMwC,QAAQhE,gBAAgBwB,MAAAA;AAC9B,MAAI,OAAOwC,MAAMU,UAAU,SACvB,OAAMxE,YAAY0H,cAAY;AAGlC,SAAO,KAAKxG,aAAamD,OAAOP,MAAMU,OAAO;GACzC+C,IAAIpI,aAAamC,OAAO,EAAEkG,YAAY,MAAK,CAAA,IAAM;GACjDC,WAAWvI,iBAAiBoC,OAAO,aAAA,IAAiB2F,KAAAA;GACxD,CAAA;;;;;;;;;;;;;;;;;;;gBAvTYxG,wBAAAA,CAAAA;;;;;;;;;;;;;eASDA,wBAAAA,CAAAA;;;;;;;;;;;;;kBASGA,wBAAAA,CAAAA;;;;;;;;YAgCNA,wBAAAA,CAAAA"}
+{"version":3,"file":"module.mjs","names":["BuiltInPolicyType","PolicyData","ValidatorGroup","base64URLDecode","isUUID","DBody","DContext","DController","DDelete","DGet","DPath","DPost","DPut","DTags","getRequestHeader","getRequestIP","sendRedirect","IdentityProviderAttributesValidator","IdentityProviderValidator","IdentityType","PermissionName","isOAuth2IdentityProvider","isOpenIDIdentityProvider","BadRequestError","EntityNotFoundError","resolveURL","useRequestQuery","readRequestBody","OAuth2RequestError","URL","OAuth2AuthorizationCodeRequestValidator","createIdentityProviderOAuth2Authenticator","applyRouteRealmIDToBody","getBodyRealmID","getRequestParamID","getRequestRealmID","useRequestIdentityOrFail","useRequestParamID","useRequestPermissionEvaluator","ForceLoggedInMiddleware","IdentityProviderController","options","repository","realmRepository","accountManager","codeRequestVerifier","codeRequestValidator","stateManager","codeIssuer","ctx","getProviders","event","data","meta","findMany","permissionEvaluator","preEvaluate","name","IDENTITY_PROVIDER_READ","datum","evaluate","input","ATTRIBUTES","getProvider","id","paramId","entity","findOneByIdOrName","editProvider","user","write","updateOnly","put","dropProvider","IDENTITY_PROVIDER_DELETE","findOneBy","entityId","remove","response","status","addProvider","authorizeOut","_id","resolve","authenticator","provider","baseURL","parameters","codeRequest","query","codeRequestDecoded","JSON","parse","malformed","codeRequestValidated","run","verify","client","realm_id","state","saveAuthorizationState","buildRedirectURL","authorizeIn","Error","protocol","verifyAuthorizationState","code","clientId","client_id","authenticate","realm","authorizationCode","issue","response_type","redirect_uri","scope","type","USER","codeRequestKeys","Object","keys","url","codeRequestKey_","codeRequestKey","searchParams","set","href","group","body","realmId","where","IDENTITY_PROVIDER_UPDATE","UPDATE","IDENTITY_PROVIDER_CREATE","CREATE","validator","attributesValidator","attributes","validateJoinColumns","identity","checkUniqueness","undefined","merge","saveWithEA","create","findOneById","save","ip","trustProxy","userAgent","stateInvalid"],"sources":["../../../../../../src/adapters/http/controllers/entities/identity-provider/module.ts"],"sourcesContent":["/*\n * Copyright (c) 2022.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport { BuiltInPolicyType, PolicyData } from '@authup/access';\nimport { ValidatorGroup, base64URLDecode, isUUID } from '@authup/kit';\nimport {\n    DBody,\n    DContext,\n    DController,\n    DDelete,\n    DGet,\n    DPath,\n    DPost,\n    DPut,\n    DTags,\n} from '@routup/decorators';\nimport type { IRoutupEvent } from 'routup';\nimport {\n    getRequestHeader,\n    getRequestIP,\n    sendRedirect,\n} from 'routup';\nimport type { IdentityProvider, OAuth2AuthorizationCodeRequest } from '@authup/core-kit';\nimport {\n\n    IdentityProviderAttributesValidator,\n    IdentityProviderValidator,\n    IdentityType,\n    PermissionName,\n    isOAuth2IdentityProvider,\n    isOpenIDIdentityProvider,\n} from '@authup/core-kit';\nimport { BadRequestError, EntityNotFoundError } from '@authup/errors';\nimport { resolveURL } from '../../../../../utils/index.ts';\nimport type { AuthorizeParameters } from '@hapic/oauth2';\nimport { useRequestQuery } from '@routup/basic/query';\nimport { readRequestBody } from '@routup/basic/body';\nimport { OAuth2RequestError } from '@authup/specs';\nimport type {\n    EntityCollectionResponse,\n    IdentityProviderCreatePayload,\n    IdentityProviderSavePayload,\n    IdentityProviderUpdatePayload,\n} from '@authup/core-http-kit';\nimport { URL } from 'node:url';\nimport type {\n    IIdentityProviderAccountManager,\n    IIdentityProviderRepository,\n    IOAuth2AuthorizationCodeIssuer,\n    IOAuth2AuthorizationCodeRequestVerifier,\n    IOAuth2AuthorizationStateManager,\n    IRealmRepository,\n    OAuth2AuthorizationState,\n} from '../../../../../core/index.ts';\nimport {\n    OAuth2AuthorizationCodeRequestValidator,\n    createIdentityProviderOAuth2Authenticator,\n} from '../../../../../core/index.ts';\nimport {\n    applyRouteRealmIDToBody,\n    getBodyRealmID,\n    getRequestParamID,\n    getRequestRealmID,\n    useRequestIdentityOrFail,\n    useRequestParamID,\n    useRequestPermissionEvaluator,\n} from '../../../request/index.ts';\nimport { ForceLoggedInMiddleware } from '../../../middleware/index.ts';\nimport type { IdentityProviderControllerContext, IdentityProviderControllerOptions } from './types.ts';\n\n@DTags('identity')\n@DController(['/identity-providers', '/realms/:realmId/identity-providers'])\nexport class IdentityProviderController {\n    protected options: IdentityProviderControllerOptions;\n\n    protected repository: IIdentityProviderRepository;\n\n    protected realmRepository: IRealmRepository;\n\n    protected accountManager: IIdentityProviderAccountManager;\n\n    protected codeRequestVerifier : IOAuth2AuthorizationCodeRequestVerifier;\n\n    protected codeRequestValidator : OAuth2AuthorizationCodeRequestValidator;\n\n    protected stateManager : IOAuth2AuthorizationStateManager;\n\n    protected codeIssuer : IOAuth2AuthorizationCodeIssuer;\n\n    // ---------------------------------------------------------\n\n    constructor(ctx: IdentityProviderControllerContext) {\n        this.options = ctx.options;\n        this.repository = ctx.repository;\n        this.realmRepository = ctx.realmRepository;\n        this.accountManager = ctx.accountManager;\n        this.codeIssuer = ctx.codeIssuer;\n        this.codeRequestVerifier = ctx.codeRequestVerifier;\n        this.codeRequestValidator = new OAuth2AuthorizationCodeRequestValidator();\n        this.stateManager = ctx.stateManager;\n    }\n\n    // ---------------------------------------------------------\n\n    @DGet('', [])\n    async getProviders(\n        @DContext() event: IRoutupEvent,\n    ): Promise<EntityCollectionResponse<IdentityProvider>> {\n        const {\n            data, \n            meta, \n        } = await this.repository.findMany(useRequestQuery(event));\n\n        try {\n            const permissionEvaluator = useRequestPermissionEvaluator(event);\n            await permissionEvaluator.preEvaluate({ name: PermissionName.IDENTITY_PROVIDER_READ });\n\n            for (const datum of data) {\n                try {\n                    await permissionEvaluator.evaluate({\n                        name: PermissionName.IDENTITY_PROVIDER_READ,\n                        input: new PolicyData({ [BuiltInPolicyType.ATTRIBUTES]: datum }),\n                    });\n                } catch {\n                    // do nothing\n                }\n            }\n        } catch {\n            // do nothing\n        }\n\n        return {\n            data,\n            meta,\n        };\n    }\n\n    @DGet('/:id', [])\n    async getProvider(\n        @DPath('id') id: string,\n        @DContext() event: IRoutupEvent,\n    ): Promise<IdentityProvider> {\n        const paramId = useRequestParamID(event, { isUUID: false });\n\n        const entity = await this.repository.findOneByIdOrName(\n            paramId,\n            getRequestRealmID(event),\n        );\n\n        if (!entity) {\n            throw new EntityNotFoundError();\n        }\n\n        try {\n            const permissionEvaluator = useRequestPermissionEvaluator(event);\n            await permissionEvaluator.evaluate({\n                name: PermissionName.IDENTITY_PROVIDER_READ,\n                input: new PolicyData({ [BuiltInPolicyType.ATTRIBUTES]: entity }),\n            });\n        } catch {\n            // do nothing\n        }\n\n        return entity;\n    }\n\n    @DPost('/:id', [ForceLoggedInMiddleware])\n    async editProvider(\n        @DPath('id') id: string,\n        @DBody() user: IdentityProviderUpdatePayload,\n        @DContext() event: IRoutupEvent,\n    ) : Promise<IdentityProvider> {\n        return this.write(event, { updateOnly: true });\n    }\n\n    @DPut('/:id', [ForceLoggedInMiddleware])\n    async put(\n        @DPath('id') id: string,\n        @DBody() user: IdentityProviderSavePayload,\n        @DContext() event: IRoutupEvent,\n    ) : Promise<IdentityProvider> {\n        return this.write(event);\n    }\n\n    @DDelete('/:id', [ForceLoggedInMiddleware])\n    async dropProvider(\n        @DPath('id') id: string,\n        @DContext() event: IRoutupEvent,\n    ) : Promise<IdentityProvider> {\n        const paramId = useRequestParamID(event);\n\n        const permissionEvaluator = useRequestPermissionEvaluator(event);\n        await permissionEvaluator.preEvaluate({ name: PermissionName.IDENTITY_PROVIDER_DELETE });\n\n        const entity = await this.repository.findOneBy({ id: paramId });\n\n        if (!entity) {\n            throw new EntityNotFoundError();\n        }\n\n        await permissionEvaluator.evaluate({\n            name: PermissionName.IDENTITY_PROVIDER_DELETE,\n            input: new PolicyData({ [BuiltInPolicyType.ATTRIBUTES]: entity }),\n        });\n\n        const { id: entityId } = entity;\n\n        await this.repository.remove(entity);\n\n        entity.id = entityId;\n\n        event.response.status = 202;\n\n        return entity;\n    }\n\n    @DPost('', [ForceLoggedInMiddleware])\n    async addProvider(\n        @DBody() user: IdentityProviderCreatePayload,\n        @DContext() event: IRoutupEvent,\n    ) : Promise<IdentityProvider> {\n        return this.write(event);\n    }\n\n    // ---------------------------------------------------------\n\n    @DGet('/:id/authorize-out', [])\n    async authorizeOut(\n        @DPath('id') _id: string,\n        @DContext() event: IRoutupEvent,\n    ) {\n        const id = useRequestParamID(event);\n        const entity = await this.resolve(id);\n\n        if (!isOAuth2IdentityProvider(entity) && !isOpenIDIdentityProvider(entity)) {\n            throw new BadRequestError('Only an identity-provider based on the oauth protocol supports authorize redirect.');\n        }\n\n        const authenticator = createIdentityProviderOAuth2Authenticator({\n            accountManager: this.accountManager,\n            provider: entity,\n            options: { baseURL: this.options.baseURL },\n        });\n\n        const parameters : AuthorizeParameters = {};\n\n        let codeRequest: OAuth2AuthorizationCodeRequest | undefined;\n        const query = useRequestQuery(event);\n        if (typeof query.codeRequest === 'string') {\n            let codeRequestDecoded: OAuth2AuthorizationCodeRequest;\n\n            try {\n                codeRequestDecoded = JSON.parse(base64URLDecode(query.codeRequest));\n            } catch {\n                throw OAuth2RequestError.malformed('The code request is malformed and can not be parsed.');\n            }\n\n            const codeRequestValidated = await this.codeRequestValidator.run(codeRequestDecoded);\n            const data = await this.codeRequestVerifier.verify(codeRequestValidated);\n\n            if (\n                data.client.realm_id &&\n                entity.realm_id &&\n                entity.realm_id !== data.client.realm_id\n            ) {\n                throw OAuth2RequestError.malformed('The provider and client realm do not match.');\n            }\n\n            codeRequest = data.data;\n        }\n\n        parameters.state = await this.saveAuthorizationState(event, codeRequest);\n\n        return sendRedirect(event, authenticator.buildRedirectURL(parameters));\n    }\n\n    @DGet('/:id/authorize-in', [])\n    async authorizeIn(\n        @DPath('id') _id: string,\n        @DContext() event: IRoutupEvent,\n    ) {\n        const id = useRequestParamID(event);\n\n        const entity = await this.resolve(id);\n\n        if (!isOAuth2IdentityProvider(entity) && !isOpenIDIdentityProvider(entity)) {\n            throw new Error(`The provider protocol ${entity.protocol} is not valid.`);\n        }\n\n        const data = await this.verifyAuthorizationState(event);\n        if (\n            entity.realm_id &&\n            data.codeRequest &&\n            data.codeRequest.realm_id &&\n            data.codeRequest.realm_id !== entity.realm_id\n        ) {\n            throw OAuth2RequestError.malformed('The provider and client realm do not match.');\n        }\n\n        const { code } = useRequestQuery(event);\n\n        const authenticator = createIdentityProviderOAuth2Authenticator({\n            accountManager: this.accountManager,\n            provider: entity,\n            options: {\n                baseURL: this.options.baseURL,\n                clientId: data.codeRequest?.client_id,\n            },\n        });\n\n        const user = await authenticator.authenticate(code);\n\n        const realm = await this.realmRepository.resolve(entity.realm_id, true);\n\n        const authorizationCode = await this.codeIssuer.issue(\n            {\n                response_type: 'code',\n                client_id: data.codeRequest?.client_id,\n                redirect_uri: data.codeRequest?.redirect_uri,\n                scope: data.codeRequest?.scope,\n            },\n            {\n                type: IdentityType.USER,\n                data: {\n                    ...user,\n                    realm,\n                },\n            },\n        );\n\n        if (data.codeRequest) {\n            const codeRequestKeys = Object.keys(data.codeRequest);\n\n            const url = new URL(resolveURL(this.options.baseURL, 'authorize'));\n            for (const codeRequestKey_ of codeRequestKeys) {\n                const codeRequestKey = codeRequestKey_ as keyof OAuth2AuthorizationCodeRequest;\n                if (data.codeRequest[codeRequestKey]) {\n                    url.searchParams.set(codeRequestKey, data.codeRequest[codeRequestKey]);\n                }\n            }\n\n            url.searchParams.set('code', authorizationCode.id);\n\n            return sendRedirect(event, url.href);\n        }\n\n        const url = new URL(this.options.baseURL);\n        url.searchParams.set('code', authorizationCode.id);\n\n        return sendRedirect(event, url.href);\n    }\n\n    // ---------------------------------------------------------\n\n    private async write(event: IRoutupEvent, options: {\n        updateOnly?: boolean\n    } = {}): Promise<IdentityProvider> {\n        let group: string;\n        const id = getRequestParamID(event, { isUUID: false });\n        const body = await readRequestBody(event);\n        applyRouteRealmIDToBody(event, body);\n        const realmId = getRequestRealmID(event) ?? getBodyRealmID(body);\n\n        let entity: IdentityProvider | null | undefined;\n        if (id) {\n            const where: Record<string, any> = {};\n            if (isUUID(id)) {\n                where.id = id;\n            } else {\n                where.name = id;\n            }\n\n            if (realmId) {\n                where.realm_id = realmId;\n            }\n\n            entity = await this.repository.findOneBy(where);\n            if (!entity && options.updateOnly) {\n                throw new EntityNotFoundError();\n            }\n        } else if (options.updateOnly) {\n            throw new EntityNotFoundError();\n        }\n\n        const permissionEvaluator = useRequestPermissionEvaluator(event);\n        if (entity) {\n            await permissionEvaluator.preEvaluate({ name: PermissionName.IDENTITY_PROVIDER_UPDATE });\n\n            group = ValidatorGroup.UPDATE;\n        } else {\n            await permissionEvaluator.preEvaluate({ name: PermissionName.IDENTITY_PROVIDER_CREATE });\n\n            group = ValidatorGroup.CREATE;\n        }\n\n        const validator = new IdentityProviderValidator();\n        const data = await validator.run(body, { group });\n\n        const attributesValidator = new IdentityProviderAttributesValidator();\n        const attributes = await attributesValidator.run(body);\n\n        await this.repository.validateJoinColumns(data);\n\n        if (entity) {\n            await permissionEvaluator.evaluate({\n                name: PermissionName.IDENTITY_PROVIDER_UPDATE,\n                input: new PolicyData({\n                    [BuiltInPolicyType.ATTRIBUTES]: {\n                        ...entity,\n                        ...data,\n                    },\n                }),\n            });\n        } else {\n            if (!data.realm_id) {\n                const identity = useRequestIdentityOrFail(event);\n                data.realm_id = identity.realmId;\n            }\n\n            await permissionEvaluator.evaluate({\n                name: PermissionName.IDENTITY_PROVIDER_CREATE,\n                input: new PolicyData({ [BuiltInPolicyType.ATTRIBUTES]: data }),\n            });\n        }\n\n        await this.repository.checkUniqueness(data, entity || undefined);\n\n        if (entity) {\n            entity = this.repository.merge(entity, data);\n            await this.repository.saveWithEA(entity, attributes);\n\n            event.response.status = 202;\n\n            return entity;\n        }\n\n        entity = this.repository.create(data);\n        await this.repository.saveWithEA(entity, attributes);\n\n        event.response.status = 201;\n\n        return entity;\n    }\n\n    // ---------------------------------------------------------\n\n    private async resolve(id: string) {\n        const entity = await this.repository.findOneById(id);\n\n        if (!entity) {\n            throw new EntityNotFoundError();\n        }\n\n        return entity;\n    }\n\n    // ---------------------------------------------------------\n\n    private async saveAuthorizationState(\n        event: IRoutupEvent,\n        codeRequest?: OAuth2AuthorizationCodeRequest,\n    ) : Promise<string> {\n        return this.stateManager.save({\n            codeRequest,\n            ip: getRequestIP(event, { trustProxy: true }) ?? '',\n            userAgent: getRequestHeader(event, 'user-agent') ?? undefined,\n        });\n    }\n\n    private async verifyAuthorizationState(event: IRoutupEvent): Promise<OAuth2AuthorizationState> {\n        const query = useRequestQuery(event);\n        if (typeof query.state !== 'string') {\n            throw OAuth2RequestError.stateInvalid();\n        }\n\n        return this.stateManager.verify(query.state, {\n            ip: getRequestIP(event, { trustProxy: true }) ?? '',\n            userAgent: getRequestHeader(event, 'user-agent') ?? undefined,\n        });\n    }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AA4EA,IAAawC,6BAAb,MAAaA;CACCC;CAEAC;CAEAC;CAEAC;CAEAC;CAEAC;CAEAC;CAEAC;CAIV,YAAYC,KAAwC;EAChD,KAAKR,UAAUQ,IAAIR;EACnB,KAAKC,aAAaO,IAAIP;EACtB,KAAKC,kBAAkBM,IAAIN;EAC3B,KAAKC,iBAAiBK,IAAIL;EAC1B,KAAKI,aAAaC,IAAID;EACtB,KAAKH,sBAAsBI,IAAIJ;EAC/B,KAAKC,uBAAuB,IAAIhB,wCAAAA;EAChC,KAAKiB,eAAeE,IAAIF;CAC5B;CAIA,MACMG,aACF,OACmD;EACnD,MAAM,EACFE,MACAC,SACA,MAAM,KAAKX,WAAWY,SAAS5B,gBAAgByB,KAAAA,CAAAA;EAEnD,IAAI;GACA,MAAMI,sBAAsBjB,8BAA8Ba,KAAAA;GAC1D,MAAMI,oBAAoBC,YAAY,EAAEC,MAAMrC,eAAesC,uBAAuB,CAAA;GAEpF,KAAK,MAAMC,SAASP,MAChB,IAAI;IACA,MAAMG,oBAAoBK,SAAS;KAC/BH,MAAMrC,eAAesC;KACrBG,OAAO,IAAI5D,WAAW,GAAGD,kBAAkB8D,aAAaH,MAAM,CAAA;IAClE,CAAA;GACJ,QAAQ,CAER;EAER,QAAQ,CAER;EAEA,OAAO;GACHP;GACAC;EACJ;CACJ;CAEA,MACMU,YACF,IACA,OACyB;EACzB,MAAME,UAAU5B,kBAAkBc,OAAO,EAAE/C,QAAQ,MAAM,CAAA;EAEzD,MAAM8D,SAAS,MAAM,KAAKxB,WAAWyB,kBACjCF,SACA9B,kBAAkBgB,KAAAA,CAAAA;EAGtB,IAAI,CAACe,QACD,MAAM,IAAI1C,oBAAAA;EAGd,IAAI;GAEA,MAD4Bc,8BAA8Ba,KACpDI,EAAoBK,SAAS;IAC/BH,MAAMrC,eAAesC;IACrBG,OAAO,IAAI5D,WAAW,GAAGD,kBAAkB8D,aAAaI,OAAO,CAAA;GACnE,CAAA;EACJ,QAAQ,CAER;EAEA,OAAOA;CACX;CAEA,MACME,aACF,IACA,MACA,OAC0B;EAC1B,OAAO,KAAKE,MAAMnB,OAAO,EAAEoB,YAAY,KAAK,CAAA;CAChD;CAEA,MACMC,IACF,IACA,MACA,OAC0B;EAC1B,OAAO,KAAKF,MAAMnB,KAAAA;CACtB;CAEA,MACMsB,aACF,IACA,OAC0B;EAC1B,MAAMR,UAAU5B,kBAAkBc,KAAAA;EAElC,MAAMI,sBAAsBjB,8BAA8Ba,KAAAA;EAC1D,MAAMI,oBAAoBC,YAAY,EAAEC,MAAMrC,eAAesD,yBAAyB,CAAA;EAEtF,MAAMR,SAAS,MAAM,KAAKxB,WAAWiC,UAAU,EAAEX,IAAIC,QAAQ,CAAA;EAE7D,IAAI,CAACC,QACD,MAAM,IAAI1C,oBAAAA;EAGd,MAAM+B,oBAAoBK,SAAS;GAC/BH,MAAMrC,eAAesD;GACrBb,OAAO,IAAI5D,WAAW,GAAGD,kBAAkB8D,aAAaI,OAAO,CAAA;EACnE,CAAA;EAEA,MAAM,EAAEF,IAAIY,aAAaV;EAEzB,MAAM,KAAKxB,WAAWmC,OAAOX,MAAAA;EAE7BA,OAAOF,KAAKY;EAEZzB,MAAM2B,SAASC,SAAS;EAExB,OAAOb;CACX;CAEA,MACMc,YACF,MACA,OAC0B;EAC1B,OAAO,KAAKV,MAAMnB,KAAAA;CACtB;CAIA,MACM8B,aACF,KACA,OACF;EACE,MAAMjB,KAAK3B,kBAAkBc,KAAAA;EAC7B,MAAMe,SAAS,MAAM,KAAKiB,QAAQnB,EAAAA;EAElC,IAAI,CAAC3C,yBAAyB6C,MAAAA,KAAW,CAAC5C,yBAAyB4C,MAAAA,GAC/D,MAAM,IAAI3C,gBAAgB,oFAAA;EAG9B,MAAM6D,gBAAgBrD,0CAA0C;GAC5Da,gBAAgB,KAAKA;GACrByC,UAAUnB;GACVzB,SAAS,EAAE6C,SAAS,KAAK7C,QAAQ6C,QAAQ;EAC7C,CAAA;EAEA,MAAMC,aAAmC,CAAC;EAE1C,IAAIC;EACJ,MAAMC,QAAQ/D,gBAAgByB,KAAAA;EAC9B,IAAI,OAAOsC,MAAMD,gBAAgB,UAAU;GACvC,IAAIE;GAEJ,IAAI;IACAA,qBAAqBC,KAAKC,MAAMzF,gBAAgBsF,MAAMD,WAAW,CAAA;GACrE,QAAQ;IACJ,MAAM5D,mBAAmBiE,UAAU,sDAAA;GACvC;GAEA,MAAMC,uBAAuB,MAAM,KAAKhD,qBAAqBiD,IAAIL,kBAAAA;GACjE,MAAMtC,OAAO,MAAM,KAAKP,oBAAoBmD,OAAOF,oBAAAA;GAEnD,IACI1C,KAAK6C,OAAOC,YACZhC,OAAOgC,YACPhC,OAAOgC,aAAa9C,KAAK6C,OAAOC,UAEhC,MAAMtE,mBAAmBiE,UAAU,6CAAA;GAGvCL,cAAcpC,KAAKA;EACvB;EAEAmC,WAAWY,QAAQ,MAAM,KAAKC,uBAAuBjD,OAAOqC,WAAAA;EAE5D,OAAOxE,aAAamC,OAAOiC,cAAciB,iBAAiBd,UAAAA,CAAAA;CAC9D;CAEA,MACMe,YACF,KACA,OACF;EACE,MAAMtC,KAAK3B,kBAAkBc,KAAAA;EAE7B,MAAMe,SAAS,MAAM,KAAKiB,QAAQnB,EAAAA;EAElC,IAAI,CAAC3C,yBAAyB6C,MAAAA,KAAW,CAAC5C,yBAAyB4C,MAAAA,GAC/D,MAAM,IAAIqC,MAAM,yBAAyBrC,OAAOsC,SAAS,eAAe;EAG5E,MAAMpD,OAAO,MAAM,KAAKqD,yBAAyBtD,KAAAA;EACjD,IACIe,OAAOgC,YACP9C,KAAKoC,eACLpC,KAAKoC,YAAYU,YACjB9C,KAAKoC,YAAYU,aAAahC,OAAOgC,UAErC,MAAMtE,mBAAmBiE,UAAU,6CAAA;EAGvC,MAAM,EAAEa,SAAShF,gBAAgByB,KAAAA;EAWjC,MAAMkB,OAAO,MATStC,0CAA0C;GAC5Da,gBAAgB,KAAKA;GACrByC,UAAUnB;GACVzB,SAAS;IACL6C,SAAS,KAAK7C,QAAQ6C;IACtBqB,UAAUvD,KAAKoC,aAAaoB;GAChC;EACJ,CAEmBxB,EAAcyB,aAAaH,IAAAA;EAE9C,MAAMI,QAAQ,MAAM,KAAKnE,gBAAgBwC,QAAQjB,OAAOgC,UAAU,IAAA;EAElE,MAAMa,oBAAoB,MAAM,KAAK/D,WAAWgE,MAC5C;GACIC,eAAe;GACfL,WAAWxD,KAAKoC,aAAaoB;GAC7BM,cAAc9D,KAAKoC,aAAa0B;GAChCC,OAAO/D,KAAKoC,aAAa2B;EAC7B,GACA;GACIC,MAAMjG,aAAakG;GACnBjE,MAAM;IACF,GAAGiB;IACHyC;GACJ;EACJ,CAAA;EAGJ,IAAI1D,KAAKoC,aAAa;GAClB,MAAM8B,kBAAkBC,OAAOC,KAAKpE,KAAKoC,WAAW;GAEpD,MAAMiC,MAAM,IAAI5F,IAAIJ,WAAW,KAAKgB,QAAQ6C,SAAS,WAAA,CAAA;GACrD,KAAK,MAAMoC,mBAAmBJ,iBAAiB;IAC3C,MAAMK,iBAAiBD;IACvB,IAAItE,KAAKoC,YAAYmC,iBACjBF,IAAIG,aAAaC,IAAIF,gBAAgBvE,KAAKoC,YAAYmC,eAAe;GAE7E;GAEAF,IAAIG,aAAaC,IAAI,QAAQd,kBAAkB/C,EAAE;GAEjD,OAAOhD,aAAamC,OAAOsE,IAAIK,IAAI;EACvC;EAEA,MAAML,MAAM,IAAI5F,IAAI,KAAKY,QAAQ6C,OAAO;EACxCmC,IAAIG,aAAaC,IAAI,QAAQd,kBAAkB/C,EAAE;EAEjD,OAAOhD,aAAamC,OAAOsE,IAAIK,IAAI;CACvC;CAIA,MAAcxD,MAAMnB,OAAqBV,UAErC,CAAC,GAA8B;EAC/B,IAAIsF;EACJ,MAAM/D,KAAK9B,kBAAkBiB,OAAO,EAAE/C,QAAQ,MAAM,CAAA;EACpD,MAAM4H,OAAO,MAAMrG,gBAAgBwB,KAAAA;EACnCnB,wBAAwBmB,OAAO6E,IAAAA;EAC/B,MAAMC,UAAU9F,kBAAkBgB,KAAAA,KAAUlB,eAAe+F,IAAAA;EAE3D,IAAI9D;EACJ,IAAIF,IAAI;GACJ,MAAMkE,QAA6B,CAAC;GACpC,IAAI9H,OAAO4D,EAAAA,GACPkE,MAAMlE,KAAKA;QAEXkE,MAAMzE,OAAOO;GAGjB,IAAIiE,SACAC,MAAMhC,WAAW+B;GAGrB/D,SAAS,MAAM,KAAKxB,WAAWiC,UAAUuD,KAAAA;GACzC,IAAI,CAAChE,UAAUzB,QAAQ8B,YACnB,MAAM,IAAI/C,oBAAAA;EAElB,OAAO,IAAIiB,QAAQ8B,YACf,MAAM,IAAI/C,oBAAAA;EAGd,MAAM+B,sBAAsBjB,8BAA8Ba,KAAAA;EAC1D,IAAIe,QAAQ;GACR,MAAMX,oBAAoBC,YAAY,EAAEC,MAAMrC,eAAe+G,yBAAyB,CAAA;GAEtFJ,QAAQ7H,eAAekI;EAC3B,OAAO;GACH,MAAM7E,oBAAoBC,YAAY,EAAEC,MAAMrC,eAAeiH,yBAAyB,CAAA;GAEtFN,QAAQ7H,eAAeoI;EAC3B;EAGA,MAAMlF,OAAO,MAAMmF,IADGrH,0BACHqH,EAAUxC,IAAIiC,MAAM,EAAED,MAAM,CAAA;EAG/C,MAAMU,aAAa,MAAMD,IADOvH,oCACPuH,EAAoBzC,IAAIiC,IAAAA;EAEjD,MAAM,KAAKtF,WAAWgG,oBAAoBtF,IAAAA;EAE1C,IAAIc,QACA,MAAMX,oBAAoBK,SAAS;GAC/BH,MAAMrC,eAAe+G;GACrBtE,OAAO,IAAI5D,WAAW,GACjBD,kBAAkB8D,aAAa;IAC5B,GAAGI;IACH,GAAGd;GACP,EACJ,CAAA;EACJ,CAAA;OACG;GACH,IAAI,CAACA,KAAK8C,UAEN9C,KAAK8C,WADY9D,yBAAyBe,KAC1BwF,EAASV;GAG7B,MAAM1E,oBAAoBK,SAAS;IAC/BH,MAAMrC,eAAeiH;IACrBxE,OAAO,IAAI5D,WAAW,GAAGD,kBAAkB8D,aAAaV,KAAK,CAAA;GACjE,CAAA;EACJ;EAEA,MAAM,KAAKV,WAAWkG,gBAAgBxF,MAAMc,UAAU2E,KAAAA,CAAAA;EAEtD,IAAI3E,QAAQ;GACRA,SAAS,KAAKxB,WAAWoG,MAAM5E,QAAQd,IAAAA;GACvC,MAAM,KAAKV,WAAWqG,WAAW7E,QAAQuE,UAAAA;GAEzCtF,MAAM2B,SAASC,SAAS;GAExB,OAAOb;EACX;EAEAA,SAAS,KAAKxB,WAAWsG,OAAO5F,IAAAA;EAChC,MAAM,KAAKV,WAAWqG,WAAW7E,QAAQuE,UAAAA;EAEzCtF,MAAM2B,SAASC,SAAS;EAExB,OAAOb;CACX;CAIA,MAAciB,QAAQnB,IAAY;EAC9B,MAAME,SAAS,MAAM,KAAKxB,WAAWuG,YAAYjF,EAAAA;EAEjD,IAAI,CAACE,QACD,MAAM,IAAI1C,oBAAAA;EAGd,OAAO0C;CACX;CAIA,MAAckC,uBACVjD,OACAqC,aACgB;EAChB,OAAO,KAAKzC,aAAamG,KAAK;GAC1B1D;GACA2D,IAAIpI,aAAaoC,OAAO,EAAEiG,YAAY,KAAK,CAAA,KAAM;GACjDC,WAAWvI,iBAAiBqC,OAAO,YAAA,KAAiB0F,KAAAA;EACxD,CAAA;CACJ;CAEA,MAAcpC,yBAAyBtD,OAAwD;EAC3F,MAAMsC,QAAQ/D,gBAAgByB,KAAAA;EAC9B,IAAI,OAAOsC,MAAMU,UAAU,UACvB,MAAMvE,mBAAmB0H,aAAY;EAGzC,OAAO,KAAKvG,aAAaiD,OAAOP,MAAMU,OAAO;GACzCgD,IAAIpI,aAAaoC,OAAO,EAAEiG,YAAY,KAAK,CAAA,KAAM;GACjDC,WAAWvI,iBAAiBqC,OAAO,YAAA,KAAiB0F,KAAAA;EACxD,CAAA;CACJ;AACJ;;;;;;;;;;;;;;;;;gBA1ToBtG,uBAAAA,CAAAA;;;;;;;;;;;;;eASDA,uBAAAA,CAAAA;;;;;;;;;;;;;kBASGA,uBAAAA,CAAAA;;;;;;;;YAgCNA,uBAAAA,CAAAA;;;;;;;;;;;;;;;;;;;;;;;;;cAjJF,uBAAuB,qCAAA,CAAA"}

package/dist/adapters/http/controllers/entities/permission/module.d.ts

@@ -1,21 +1,14 @@
 import type { EntityCollectionResponse, PermissionAPICheckResponse, PermissionCreatePayload, PermissionSavePayload, PermissionUpdatePayload } from '@authup/core-http-kit';
 import type { Permission } from '@authup/core-kit';
-import type { IPermissionProvider } from '@authup/access';
 import type { IRoutupEvent } from 'routup';
-import type { IIdentityPermissionProvider, IPermissionRepository, IPermissionService, IRealmRepository } from '../../../../../core/index.ts';
+import type { IPermissionCheckerService, IPermissionService } from '../../../../../core/index.ts';
 export type PermissionControllerContext = {
     service: IPermissionService;
-    repository: IPermissionRepository;
-    realmRepository: IRealmRepository;
-    identityPermissionProvider: IIdentityPermissionProvider;
-    permissionProvider: IPermissionProvider;
+    checkerService: IPermissionCheckerService;
 };
 export declare class PermissionController {
     protected service: IPermissionService;
-    protected repository: IPermissionRepository;
-    protected realmRepository: IRealmRepository;
-    protected identityPermissionProvider: IIdentityPermissionProvider;
-    protected permissionProvider: IPermissionProvider;
+    protected checkerService: IPermissionCheckerService;
     constructor(ctx: PermissionControllerContext);
     getMany(event: IRoutupEvent): Promise<EntityCollectionResponse<Permission>>;
     add(data: PermissionCreatePayload, event: IRoutupEvent): Promise<Permission>;

package/dist/adapters/http/controllers/entities/permission/module.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"module.d.ts","sourceRoot":"","sources":["../../../../../../src/adapters/http/controllers/entities/permission/module.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EACR,wBAAwB,EACxB,0BAA0B,EAC1B,uBAAuB,EACvB,qBAAqB,EACrB,uBAAuB,EAC1B,MAAM,uBAAuB,CAAC;AAC/B,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AACnD,OAAO,KAAK,EAAE,mBAAmB,EAA+B,MAAM,gBAAgB,CAAC;AAmBvF,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,QAAQ,CAAC;AAE3C,OAAO,KAAK,EAER,2BAA2B,EAC3B,qBAAqB,EACrB,kBAAkB,EAClB,gBAAgB,EACnB,MAAM,8BAA8B,CAAC;AAQtC,MAAM,MAAM,2BAA2B,GAAG;IACtC,OAAO,EAAE,kBAAkB,CAAC;IAC5B,UAAU,EAAE,qBAAqB,CAAC;IAClC,eAAe,EAAE,gBAAgB,CAAC;IAClC,0BAA0B,EAAE,2BAA2B,CAAC;IACxD,kBAAkB,EAAE,mBAAmB,CAAC;CAC3C,CAAC;AAEF,qBAEa,oBAAoB;IAC7B,SAAS,CAAC,OAAO,EAAE,kBAAkB,CAAC;IAEtC,SAAS,CAAC,UAAU,EAAE,qBAAqB,CAAC;IAE5C,SAAS,CAAC,eAAe,EAAE,gBAAgB,CAAC;IAE5C,SAAS,CAAC,0BAA0B,EAAE,2BAA2B,CAAC;IAElE,SAAS,CAAC,kBAAkB,EAAE,mBAAmB,CAAC;gBAEtC,GAAG,EAAE,2BAA2B;IAStC,OAAO,CACG,KAAK,EAAE,YAAY,GAChC,OAAO,CAAC,wBAAwB,CAAC,UAAU,CAAC,CAAC;IAc1C,GAAG,CACI,IAAI,EAAE,uBAAuB,EAC1B,KAAK,EAAE,YAAY,GAChC,OAAO,CAAC,UAAU,CAAC;IAUhB,KAAK,CACE,IAAI,EAAE,GAAG,EACN,KAAK,EAAE,YAAY,GAChC,OAAO,CAAC,0BAA0B,CAAC;IAyDhC,GAAG,CACQ,EAAE,EAAE,MAAM,EACX,KAAK,EAAE,YAAY,GAChC,OAAO,CAAC,UAAU,CAAC;IAYhB,IAAI,CACO,EAAE,EAAE,MAAM,EACd,IAAI,EAAE,uBAAuB,EAC1B,KAAK,EAAE,YAAY,GAChC,OAAO,CAAC,UAAU,CAAC;IAchB,GAAG,CACQ,EAAE,EAAE,MAAM,EACd,IAAI,EAAE,qBAAqB,EACxB,KAAK,EAAE,YAAY,GAChC,OAAO,CAAC,UAAU,CAAC;IAgBhB,IAAI,CACO,EAAE,EAAE,MAAM,EACX,KAAK,EAAE,YAAY,GAChC,OAAO,CAAC,UAAU,CAAC;CAQzB"}
+{"version":3,"file":"module.d.ts","sourceRoot":"","sources":["../../../../../../src/adapters/http/controllers/entities/permission/module.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EACR,wBAAwB,EACxB,0BAA0B,EAC1B,uBAAuB,EACvB,qBAAqB,EACrB,uBAAuB,EAC1B,MAAM,uBAAuB,CAAC;AAC/B,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAanD,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,QAAQ,CAAC;AAE3C,OAAO,KAAK,EACR,yBAAyB,EACzB,kBAAkB,EACrB,MAAM,8BAA8B,CAAC;AAQtC,MAAM,MAAM,2BAA2B,GAAG;IACtC,OAAO,EAAE,kBAAkB,CAAC;IAC5B,cAAc,EAAE,yBAAyB,CAAC;CAC7C,CAAC;AAEF,qBAEa,oBAAoB;IAC7B,SAAS,CAAC,OAAO,EAAE,kBAAkB,CAAC;IAEtC,SAAS,CAAC,cAAc,EAAE,yBAAyB,CAAC;gBAExC,GAAG,EAAE,2BAA2B;IAMtC,OAAO,CACG,KAAK,EAAE,YAAY,GAChC,OAAO,CAAC,wBAAwB,CAAC,UAAU,CAAC,CAAC;IAc1C,GAAG,CACI,IAAI,EAAE,uBAAuB,EAC1B,KAAK,EAAE,YAAY,GAChC,OAAO,CAAC,UAAU,CAAC;IAWhB,KAAK,CACE,IAAI,EAAE,GAAG,EACN,KAAK,EAAE,YAAY,GAChC,OAAO,CAAC,0BAA0B,CAAC;IAqBhC,GAAG,CACQ,EAAE,EAAE,MAAM,EACX,KAAK,EAAE,YAAY,GAChC,OAAO,CAAC,UAAU,CAAC;IAYhB,IAAI,CACO,EAAE,EAAE,MAAM,EACd,IAAI,EAAE,uBAAuB,EAC1B,KAAK,EAAE,YAAY,GAChC,OAAO,CAAC,UAAU,CAAC;IAehB,GAAG,CACQ,EAAE,EAAE,MAAM,EACd,IAAI,EAAE,qBAAqB,EACxB,KAAK,EAAE,YAAY,GAChC,OAAO,CAAC,UAAU,CAAC;IAiBhB,IAAI,CACO,EAAE,EAAE,MAAM,EACX,KAAK,EAAE,YAAY,GAChC,OAAO,CAAC,UAAU,CAAC;CAQzB"}

package/dist/adapters/http/controllers/entities/permission/module.mjs

@@ -1,13 +1,9 @@
-import { PolicyEngine as PolicyEngine$1 } from "../../../../../core/security/policy/engine.mjs";
-import "../../../../../core/index.mjs";
-import { useRequestIdentity } from "../../../request/helpers/identity.mjs";
 import { buildActorContext } from "../../../request/helpers/actor.mjs";
+import { applyRouteRealmIDToBody, getRequestRealmID } from "../../../request/helpers/realm-id.mjs";
 import "../../../request/index.mjs";
 import { ForceLoggedInMiddleware } from "../../../middleware/built-in/loggedin/module.mjs";
 import "../../../middleware/index.mjs";
-import { isUUID } from "@authup/kit";
-import { BuiltInPolicyType, PermissionEvaluator, PolicyData } from "@authup/access";
-import { NotFoundError } from "@ebec/http";
+import { serializeError } from "@authup/errors";
 import { DBody, DContext, DController, DDelete, DGet, DPath, DPost, DPut, DTags } from "@routup/decorators";
 import { useRequestQuery } from "@routup/basic/query";
 //#region src/adapters/http/controllers/entities/permission/module.ts
@@ -27,16 +23,10 @@ function _ts_param(paramIndex, decorator) {
 }
 var PermissionController = class {
 	service;
-	repository;
-	realmRepository;
-	identityPermissionProvider;
-	permissionProvider;
+	checkerService;
 	constructor(ctx) {
 		this.service = ctx.service;
-		this.repository = ctx.repository;
-		this.realmRepository = ctx.realmRepository;
-		this.identityPermissionProvider = ctx.identityPermissionProvider;
-		this.permissionProvider = ctx.permissionProvider;
+		this.checkerService = ctx.checkerService;
 	}
 	async getMany(event) {
 		const actor = buildActorContext(event);
@@ -47,58 +37,35 @@ var PermissionController = class {
 		};
 	}
 	async add(data, event) {
+		applyRouteRealmIDToBody(event, data);
 		const actor = buildActorContext(event);
 		const entity = await this.service.create(data, actor);
 		event.response.status = 201;
 		return entity;
 	}
 	async check(data, event) {
-		const { id } = event.params;
-		let criteria;
-		if (isUUID(id)) criteria = { id };
-		else {
-			const realm = await this.realmRepository.resolve(event.params.realmId);
-			criteria = {
-				name: id,
-				...realm ? { realm_id: realm.id } : {}
-			};
-		}
-		const entity = await this.repository.findOneBy(criteria);
-		if (!entity) throw new NotFoundError();
-		if (typeof data[BuiltInPolicyType.IDENTITY] === "undefined") data[BuiltInPolicyType.IDENTITY] = useRequestIdentity(event);
-		const ctx = {
-			name: entity.name,
-			input: new PolicyData(data)
-		};
-		const permissionEvaluator = new PermissionEvaluator({
-			provider: this.permissionProvider,
-			policyEngine: new PolicyEngine$1(this.identityPermissionProvider)
-		});
-		let output;
-		try {
-			if (ctx.input && ctx.input.has(BuiltInPolicyType.ATTRIBUTES)) await permissionEvaluator.evaluate(ctx);
-			else await permissionEvaluator.preEvaluate(ctx);
-			output = { status: "success" };
-		} catch (e) {
-			output = {
-				status: "error",
-				data: e
-			};
-		}
+		const actor = buildActorContext(event);
+		const result = await this.checkerService.safeCheck(event.params.id, data, actor, getRequestRealmID(event));
 		event.response.status = 202;
-		return output;
+		if (result.success) return { status: "success" };
+		return {
+			status: "error",
+			data: serializeError(result.error)
+		};
 	}
 	async get(id, event) {
 		const actor = buildActorContext(event);
-		return await this.service.getOne(id, actor, event.params.realmId);
+		return await this.service.getOne(id, actor, getRequestRealmID(event));
 	}
 	async edit(id, data, event) {
+		applyRouteRealmIDToBody(event, data);
 		const actor = buildActorContext(event);
 		const entity = await this.service.update(id, data, actor);
 		event.response.status = 202;
 		return entity;
 	}
 	async put(id, data, event) {
+		applyRouteRealmIDToBody(event, data);
 		const actor = buildActorContext(event);
 		const { entity, created } = await this.service.save(id || void 0, data, actor);
 		event.response.status = created ? 201 : 202;
@@ -178,7 +145,7 @@ _ts_decorate([
 ], PermissionController.prototype, "drop", null);
 PermissionController = _ts_decorate([
 	DTags("permission"),
-	DController("/permissions"),
+	DController(["/permissions", "/realms/:realmId/permissions"]),
 	_ts_metadata("design:type", Function),
 	_ts_metadata("design:paramtypes", [typeof PermissionControllerContext === "undefined" ? Object : PermissionControllerContext])
 ], PermissionController);

package/dist/adapters/http/controllers/entities/permission/module.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"module.mjs","names":["BuiltInPolicyType","PermissionEvaluator","PolicyData","DBody","DContext","DController","DDelete","DGet","DPath","DPost","DPut","DTags","isUUID","NotFoundError","useRequestQuery","PolicyEngine","ForceLoggedInMiddleware","buildActorContext","useRequestIdentity","PermissionController","service","repository","realmRepository","identityPermissionProvider","permissionProvider","ctx","getMany","event","actor","data","meta","add","entity","create","response","status","check","id","params","criteria","realm","resolve","realmId","name","realm_id","findOneBy","IDENTITY","input","permissionEvaluator","provider","policyEngine","output","has","ATTRIBUTES","evaluate","preEvaluate","e","get","getOne","edit","update","put","created","save","undefined","drop","delete"],"sources":["../../../../../../src/adapters/http/controllers/entities/permission/module.ts"],"sourcesContent":["/*\n * Copyright (c) 2022.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport type {\n    EntityCollectionResponse,\n    PermissionAPICheckResponse,\n    PermissionCreatePayload,\n    PermissionSavePayload,\n    PermissionUpdatePayload,\n} from '@authup/core-http-kit';\nimport type { Permission } from '@authup/core-kit';\nimport type { IPermissionProvider, PermissionEvaluationContext } from '@authup/access';\nimport {\n    BuiltInPolicyType,\n    PermissionEvaluator, \n    PolicyData,\n} from '@authup/access';\nimport {\n    DBody,\n    DContext,\n    DController,\n    DDelete,\n    DGet,\n    DPath,\n    DPost,\n    DPut,\n    DTags,\n} from '@routup/decorators';\nimport { isUUID } from '@authup/kit';\nimport { NotFoundError } from '@ebec/http';\nimport type { IRoutupEvent } from 'routup';\nimport { useRequestQuery } from '@routup/basic/query';\nimport type {\n \n    IIdentityPermissionProvider, \n    IPermissionRepository, \n    IPermissionService, \n    IRealmRepository, \n} from '../../../../../core/index.ts';\nimport { PolicyEngine } from '../../../../../core/index.ts';\nimport { ForceLoggedInMiddleware } from '../../../middleware/index.ts';\nimport {\n    buildActorContext,\n    useRequestIdentity,\n} from '../../../request/index.ts';\n\nexport type PermissionControllerContext = {\n    service: IPermissionService,\n    repository: IPermissionRepository,\n    realmRepository: IRealmRepository,\n    identityPermissionProvider: IIdentityPermissionProvider,\n    permissionProvider: IPermissionProvider,\n};\n\n@DTags('permission')\n@DController('/permissions')\nexport class PermissionController {\n    protected service: IPermissionService;\n\n    protected repository: IPermissionRepository;\n\n    protected realmRepository: IRealmRepository;\n\n    protected identityPermissionProvider: IIdentityPermissionProvider;\n\n    protected permissionProvider: IPermissionProvider;\n\n    constructor(ctx: PermissionControllerContext) {\n        this.service = ctx.service;\n        this.repository = ctx.repository;\n        this.realmRepository = ctx.realmRepository;\n        this.identityPermissionProvider = ctx.identityPermissionProvider;\n        this.permissionProvider = ctx.permissionProvider;\n    }\n\n    @DGet('', [ForceLoggedInMiddleware])\n    async getMany(\n        @DContext() event: IRoutupEvent,\n    ): Promise<EntityCollectionResponse<Permission>> {\n        const actor = buildActorContext(event);\n        const {\n            data,\n            meta,\n        } = await this.service.getMany(useRequestQuery(event), actor);\n\n        return {\n            data,\n            meta,\n        };\n    }\n\n    @DPost('', [ForceLoggedInMiddleware])\n    async add(\n        @DBody() data: PermissionCreatePayload,\n        @DContext() event: IRoutupEvent,\n    ): Promise<Permission> {\n        const actor = buildActorContext(event);\n        const entity = await this.service.create(data, actor);\n\n        event.response.status = 201;\n\n        return entity;\n    }\n\n    @DPost('/:id/check', [ForceLoggedInMiddleware])\n    async check(\n        @DBody() data: any,\n        @DContext() event: IRoutupEvent,\n    ): Promise<PermissionAPICheckResponse> {\n        const { id } = event.params;\n\n        let criteria: Record<string, any>;\n        if (isUUID(id)) {\n            criteria = { id };\n        } else {\n            const realm = await this.realmRepository.resolve(event.params.realmId);\n            criteria = {\n                name: id,\n                ...(realm ? { realm_id: realm.id } : {}),\n            };\n        }\n\n        const entity = await this.repository.findOneBy(criteria);\n        if (!entity) {\n            throw new NotFoundError();\n        }\n\n        if (typeof data[BuiltInPolicyType.IDENTITY] === 'undefined') {\n            data[BuiltInPolicyType.IDENTITY] = useRequestIdentity(event);\n        }\n\n        const ctx: PermissionEvaluationContext = {\n            name: entity.name,\n            input: new PolicyData(data),\n        };\n\n        const permissionEvaluator = new PermissionEvaluator({\n            provider: this.permissionProvider,\n            policyEngine: new PolicyEngine(this.identityPermissionProvider),\n        });\n\n        let output: PermissionAPICheckResponse;\n        try {\n            if (\n                ctx.input &&\n                ctx.input.has(BuiltInPolicyType.ATTRIBUTES)\n            ) {\n                await permissionEvaluator.evaluate(ctx);\n            } else {\n                await permissionEvaluator.preEvaluate(ctx);\n            }\n\n            output = { status: 'success' };\n        } catch (e) {\n            output = {\n                status: 'error',\n                data: e as Error,\n            };\n        }\n\n        event.response.status = 202;\n        return output;\n    }\n\n    @DGet('/:id', [ForceLoggedInMiddleware])\n    async get(\n        @DPath('id') id: string,\n        @DContext() event: IRoutupEvent,\n    ): Promise<Permission> {\n        const actor = buildActorContext(event);\n        const entity = await this.service.getOne(\n            id,\n            actor,\n            event.params.realmId,\n        );\n\n        return entity;\n    }\n\n    @DPost('/:id', [ForceLoggedInMiddleware])\n    async edit(\n        @DPath('id') id: string,\n        @DBody() data: PermissionUpdatePayload,\n        @DContext() event: IRoutupEvent,\n    ): Promise<Permission> {\n        const actor = buildActorContext(event);\n        const entity = await this.service.update(\n            id,\n            data,\n            actor,\n        );\n\n        event.response.status = 202;\n\n        return entity;\n    }\n\n    @DPut('/:id', [ForceLoggedInMiddleware])\n    async put(\n        @DPath('id') id: string,\n        @DBody() data: PermissionSavePayload,\n        @DContext() event: IRoutupEvent,\n    ): Promise<Permission> {\n        const actor = buildActorContext(event);\n        const {\n            entity,\n            created,\n        } = await this.service.save(\n            id || undefined,\n            data,\n            actor,\n        );\n\n        event.response.status = created ? 201 : 202;\n        return entity;\n    }\n\n    @DDelete('/:id', [ForceLoggedInMiddleware])\n    async drop(\n        @DPath('id') id: string,\n        @DContext() event: IRoutupEvent,\n    ): Promise<Permission> {\n        const actor = buildActorContext(event);\n        const entity = await this.service.delete(id, actor);\n\n        event.response.status = 202;\n\n        return entity;\n    }\n}\n"],"mappings":";;;;;;;;;;;;;AAKC,SAAA,aAAA,YAAA,QAAA,KAAA,MAAA;;;;;;;;;;;;;;AAuDD,IAAamB,uBAAb,MAAaA;CACCC;CAEAC;CAEAC;CAEAC;CAEAC;CAEV,YAAYC,KAAkC;AAC1C,OAAKL,UAAUK,IAAIL;AACnB,OAAKC,aAAaI,IAAIJ;AACtB,OAAKC,kBAAkBG,IAAIH;AAC3B,OAAKC,6BAA6BE,IAAIF;AACtC,OAAKC,qBAAqBC,IAAID;;CAGlC,MACME,QACF,OAC6C;EAC7C,MAAME,QAAQX,kBAAkBU,MAAAA;EAChC,MAAM,EACFE,MACAC,SACA,MAAM,KAAKV,QAAQM,QAAQZ,gBAAgBa,MAAAA,EAAQC,MAAAA;AAEvD,SAAO;GACHC;GACAC;GACJ;;CAGJ,MACMC,IACF,MACA,OACmB;EACnB,MAAMH,QAAQX,kBAAkBU,MAAAA;EAChC,MAAMK,SAAS,MAAM,KAAKZ,QAAQa,OAAOJ,MAAMD,MAAAA;AAE/CD,QAAMO,SAASC,SAAS;AAExB,SAAOH;;CAGX,MACMI,MACF,MACA,OACmC;EACnC,MAAM,EAAEC,OAAOV,MAAMW;EAErB,IAAIC;AACJ,MAAI3B,OAAOyB,GAAAA,CACPE,YAAW,EAAEF,IAAG;OACb;GACH,MAAMG,QAAQ,MAAM,KAAKlB,gBAAgBmB,QAAQd,MAAMW,OAAOI,QAAO;AACrEH,cAAW;IACPI,MAAMN;IACN,GAAIG,QAAQ,EAAEI,UAAUJ,MAAMH,IAAG,GAAI,EAAE;IAC3C;;EAGJ,MAAML,SAAS,MAAM,KAAKX,WAAWwB,UAAUN,SAAAA;AAC/C,MAAI,CAACP,OACD,OAAM,IAAInB,eAAAA;AAGd,MAAI,OAAOgB,KAAK7B,kBAAkB8C,cAAc,YAC5CjB,MAAK7B,kBAAkB8C,YAAY5B,mBAAmBS,MAAAA;EAG1D,MAAMF,MAAmC;GACrCkB,MAAMX,OAAOW;GACbI,OAAO,IAAI7C,WAAW2B,KAAAA;GAC1B;EAEA,MAAMmB,sBAAsB,IAAI/C,oBAAoB;GAChDgD,UAAU,KAAKzB;GACf0B,cAAc,IAAInC,eAAa,KAAKQ,2BAA0B;GAClE,CAAA;EAEA,IAAI4B;AACJ,MAAI;AACA,OACI1B,IAAIsB,SACJtB,IAAIsB,MAAMK,IAAIpD,kBAAkBqD,WAAU,CAE1C,OAAML,oBAAoBM,SAAS7B,IAAAA;OAEnC,OAAMuB,oBAAoBO,YAAY9B,IAAAA;AAG1C0B,YAAS,EAAEhB,QAAQ,WAAU;WACxBqB,GAAG;AACRL,YAAS;IACLhB,QAAQ;IACRN,MAAM2B;IACV;;AAGJ7B,QAAMO,SAASC,SAAS;AACxB,SAAOgB;;CAGX,MACMM,IACF,IACA,OACmB;EACnB,MAAM7B,QAAQX,kBAAkBU,MAAAA;AAOhC,SAAOK,MANc,KAAKZ,QAAQsC,OAC9BrB,IACAT,OACAD,MAAMW,OAAOI,QAAO;;CAM5B,MACMiB,KACF,IACA,MACA,OACmB;EACnB,MAAM/B,QAAQX,kBAAkBU,MAAAA;EAChC,MAAMK,SAAS,MAAM,KAAKZ,QAAQwC,OAC9BvB,IACAR,MACAD,MAAAA;AAGJD,QAAMO,SAASC,SAAS;AAExB,SAAOH;;CAGX,MACM6B,IACF,IACA,MACA,OACmB;EACnB,MAAMjC,QAAQX,kBAAkBU,MAAAA;EAChC,MAAM,EACFK,QACA8B,YACA,MAAM,KAAK1C,QAAQ2C,KACnB1B,MAAM2B,KAAAA,GACNnC,MACAD,MAAAA;AAGJD,QAAMO,SAASC,SAAS2B,UAAU,MAAM;AACxC,SAAO9B;;CAGX,MACMiC,KACF,IACA,OACmB;EACnB,MAAMrC,QAAQX,kBAAkBU,MAAAA;EAChC,MAAMK,SAAS,MAAM,KAAKZ,QAAQ8C,OAAO7B,IAAIT,MAAAA;AAE7CD,QAAMO,SAASC,SAAS;AAExB,SAAOH;;;;WAxJAhB,wBAAAA,CAAAA;;;;;;;YAgBCA,wBAAAA,CAAAA;;;;;;;;sBAaUA,wBAAAA,CAAAA;;;;;;;;eA4DPA,wBAAAA,CAAAA;;;;;;;;gBAeCA,wBAAAA,CAAAA;;;;;;;;;;;;;eAkBDA,wBAAAA,CAAAA;;;;;;;;;;;;;kBAoBGA,wBAAAA,CAAAA"}
+{"version":3,"file":"module.mjs","names":["serializeError","DBody","DContext","DController","DDelete","DGet","DPath","DPost","DPut","DTags","useRequestQuery","ForceLoggedInMiddleware","applyRouteRealmIDToBody","buildActorContext","getRequestRealmID","PermissionController","service","checkerService","ctx","getMany","event","actor","data","meta","add","entity","create","response","status","check","result","safeCheck","params","id","success","error","get","getOne","edit","update","put","created","save","undefined","drop","delete"],"sources":["../../../../../../src/adapters/http/controllers/entities/permission/module.ts"],"sourcesContent":["/*\n * Copyright (c) 2022.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport type {\n    EntityCollectionResponse,\n    PermissionAPICheckResponse,\n    PermissionCreatePayload,\n    PermissionSavePayload,\n    PermissionUpdatePayload,\n} from '@authup/core-http-kit';\nimport type { Permission } from '@authup/core-kit';\nimport { serializeError } from '@authup/errors';\nimport {\n    DBody,\n    DContext,\n    DController,\n    DDelete,\n    DGet,\n    DPath,\n    DPost,\n    DPut,\n    DTags,\n} from '@routup/decorators';\nimport type { IRoutupEvent } from 'routup';\nimport { useRequestQuery } from '@routup/basic/query';\nimport type {\n    IPermissionCheckerService,\n    IPermissionService,\n} from '../../../../../core/index.ts';\nimport { ForceLoggedInMiddleware } from '../../../middleware/index.ts';\nimport {\n    applyRouteRealmIDToBody,\n    buildActorContext,\n    getRequestRealmID,\n} from '../../../request/index.ts';\n\nexport type PermissionControllerContext = {\n    service: IPermissionService,\n    checkerService: IPermissionCheckerService,\n};\n\n@DTags('permission')\n@DController(['/permissions', '/realms/:realmId/permissions'])\nexport class PermissionController {\n    protected service: IPermissionService;\n\n    protected checkerService: IPermissionCheckerService;\n\n    constructor(ctx: PermissionControllerContext) {\n        this.service = ctx.service;\n        this.checkerService = ctx.checkerService;\n    }\n\n    @DGet('', [ForceLoggedInMiddleware])\n    async getMany(\n        @DContext() event: IRoutupEvent,\n    ): Promise<EntityCollectionResponse<Permission>> {\n        const actor = buildActorContext(event);\n        const {\n            data,\n            meta,\n        } = await this.service.getMany(useRequestQuery(event), actor);\n\n        return {\n            data,\n            meta,\n        };\n    }\n\n    @DPost('', [ForceLoggedInMiddleware])\n    async add(\n        @DBody() data: PermissionCreatePayload,\n        @DContext() event: IRoutupEvent,\n    ): Promise<Permission> {\n        applyRouteRealmIDToBody(event, data);\n        const actor = buildActorContext(event);\n        const entity = await this.service.create(data, actor);\n\n        event.response.status = 201;\n\n        return entity;\n    }\n\n    @DPost('/:id/check', [ForceLoggedInMiddleware])\n    async check(\n        @DBody() data: any,\n        @DContext() event: IRoutupEvent,\n    ): Promise<PermissionAPICheckResponse> {\n        const actor = buildActorContext(event);\n        const result = await this.checkerService.safeCheck(\n            event.params.id,\n            data,\n            actor,\n            getRequestRealmID(event),\n        );\n\n        event.response.status = 202;\n        if (result.success) {\n            return { status: 'success' };\n        }\n\n        return {\n            status: 'error',\n            data: serializeError(result.error),\n        };\n    }\n\n    @DGet('/:id', [ForceLoggedInMiddleware])\n    async get(\n        @DPath('id') id: string,\n        @DContext() event: IRoutupEvent,\n    ): Promise<Permission> {\n        const actor = buildActorContext(event);\n        const entity = await this.service.getOne(\n            id,\n            actor,\n            getRequestRealmID(event),\n        );\n\n        return entity;\n    }\n\n    @DPost('/:id', [ForceLoggedInMiddleware])\n    async edit(\n        @DPath('id') id: string,\n        @DBody() data: PermissionUpdatePayload,\n        @DContext() event: IRoutupEvent,\n    ): Promise<Permission> {\n        applyRouteRealmIDToBody(event, data);\n        const actor = buildActorContext(event);\n        const entity = await this.service.update(\n            id,\n            data,\n            actor,\n        );\n\n        event.response.status = 202;\n\n        return entity;\n    }\n\n    @DPut('/:id', [ForceLoggedInMiddleware])\n    async put(\n        @DPath('id') id: string,\n        @DBody() data: PermissionSavePayload,\n        @DContext() event: IRoutupEvent,\n    ): Promise<Permission> {\n        applyRouteRealmIDToBody(event, data);\n        const actor = buildActorContext(event);\n        const {\n            entity,\n            created,\n        } = await this.service.save(\n            id || undefined,\n            data,\n            actor,\n        );\n\n        event.response.status = created ? 201 : 202;\n        return entity;\n    }\n\n    @DDelete('/:id', [ForceLoggedInMiddleware])\n    async drop(\n        @DPath('id') id: string,\n        @DContext() event: IRoutupEvent,\n    ): Promise<Permission> {\n        const actor = buildActorContext(event);\n        const entity = await this.service.delete(id, actor);\n\n        event.response.status = 202;\n\n        return entity;\n    }\n}\n"],"mappings":";;;;;;;;;AAKC,SAAA,aAAA,YAAA,QAAA,KAAA,MAAA;;;;;;;;;;;;;;AA0CD,IAAae,uBAAb,MAAaA;CACCC;CAEAC;CAEV,YAAYC,KAAkC;EAC1C,KAAKF,UAAUE,IAAIF;EACnB,KAAKC,iBAAiBC,IAAID;CAC9B;CAEA,MACME,QACF,OAC6C;EAC7C,MAAME,QAAQR,kBAAkBO,KAAAA;EAChC,MAAM,EACFE,MACAC,SACA,MAAM,KAAKP,QAAQG,QAAQT,gBAAgBU,KAAAA,GAAQC,KAAAA;EAEvD,OAAO;GACHC;GACAC;EACJ;CACJ;CAEA,MACMC,IACF,MACA,OACmB;EACnBZ,wBAAwBQ,OAAOE,IAAAA;EAC/B,MAAMD,QAAQR,kBAAkBO,KAAAA;EAChC,MAAMK,SAAS,MAAM,KAAKT,QAAQU,OAAOJ,MAAMD,KAAAA;EAE/CD,MAAMO,SAASC,SAAS;EAExB,OAAOH;CACX;CAEA,MACMI,MACF,MACA,OACmC;EACnC,MAAMR,QAAQR,kBAAkBO,KAAAA;EAChC,MAAMU,SAAS,MAAM,KAAKb,eAAec,UACrCX,MAAMY,OAAOC,IACbX,MACAD,OACAP,kBAAkBM,KAAAA,CAAAA;EAGtBA,MAAMO,SAASC,SAAS;EACxB,IAAIE,OAAOI,SACP,OAAO,EAAEN,QAAQ,UAAU;EAG/B,OAAO;GACHA,QAAQ;GACRN,MAAMtB,eAAe8B,OAAOK,KAAK;EACrC;CACJ;CAEA,MACMC,IACF,IACA,OACmB;EACnB,MAAMf,QAAQR,kBAAkBO,KAAAA;EAOhC,OAAOK,MANc,KAAKT,QAAQqB,OAC9BJ,IACAZ,OACAP,kBAAkBM,KAAAA,CAAAA;CAI1B;CAEA,MACMkB,KACF,IACA,MACA,OACmB;EACnB1B,wBAAwBQ,OAAOE,IAAAA;EAC/B,MAAMD,QAAQR,kBAAkBO,KAAAA;EAChC,MAAMK,SAAS,MAAM,KAAKT,QAAQuB,OAC9BN,IACAX,MACAD,KAAAA;EAGJD,MAAMO,SAASC,SAAS;EAExB,OAAOH;CACX;CAEA,MACMe,IACF,IACA,MACA,OACmB;EACnB5B,wBAAwBQ,OAAOE,IAAAA;EAC/B,MAAMD,QAAQR,kBAAkBO,KAAAA;EAChC,MAAM,EACFK,QACAgB,YACA,MAAM,KAAKzB,QAAQ0B,KACnBT,MAAMU,KAAAA,GACNrB,MACAD,KAAAA;EAGJD,MAAMO,SAASC,SAASa,UAAU,MAAM;EACxC,OAAOhB;CACX;CAEA,MACMmB,KACF,IACA,OACmB;EACnB,MAAMvB,QAAQR,kBAAkBO,KAAAA;EAChC,MAAMK,SAAS,MAAM,KAAKT,QAAQ6B,OAAOZ,IAAIZ,KAAAA;EAE7CD,MAAMO,SAASC,SAAS;EAExB,OAAOH;CACX;AACJ;;WAzHed,uBAAAA,CAAAA;;;;;;;YAgBCA,uBAAAA,CAAAA;;;;;;;;sBAcUA,uBAAAA,CAAAA;;;;;;;;eAwBPA,uBAAAA,CAAAA;;;;;;;;gBAeCA,uBAAAA,CAAAA;;;;;;;;;;;;;eAmBDA,uBAAAA,CAAAA;;;;;;;;;;;;;kBAqBGA,uBAAAA,CAAAA;;;;;;;;;cAxHR,gBAAgB,8BAAA,CAAA"}