@authup/server-core 1.0.0-beta.41 → 1.0.0-beta.44

package/dist/adapters/http/middleware/built-in/authorization/module.d.ts

@@ -1,6 +1,6 @@
 import type { IPermissionEvaluator } from '@authup/access';
 import type { Client, Robot, User } from '@authup/core-kit';
-import type { IRoutupEvent } from 'routup';
+import type { IAppEvent } from 'routup';
 import { type BasicAuthorizationHeader, type BearerAuthorizationHeader } from 'hapic';
 import type { ICredentialsAuthenticator, IIdentityResolver, IOAuth2TokenVerifier, ISessionManager } from '../../../../../core/index.ts';
 import type { HTTPAuthorizationMiddlewareContext, HTTPAuthorizationMiddlewareOptions } from './types.ts';
@@ -14,11 +14,11 @@ export declare class AuthorizationMiddleware {
     protected robotAuthenticator: ICredentialsAuthenticator<Robot>;
     protected userAuthenticator: ICredentialsAuthenticator<User>;
     constructor(ctx: HTTPAuthorizationMiddlewareContext);
-    run(event: IRoutupEvent): Promise<void>;
+    run(event: IAppEvent): Promise<void>;
     /**
      * @throws JWTError
      */
-    protected verifyBearerAuthorizationHeader(event: IRoutupEvent, header: BearerAuthorizationHeader): Promise<void>;
-    protected verifyBasicAuthorizationHeader(event: IRoutupEvent, header: BasicAuthorizationHeader): Promise<void>;
+    protected verifyBearerAuthorizationHeader(event: IAppEvent, header: BearerAuthorizationHeader): Promise<void>;
+    protected verifyBasicAuthorizationHeader(event: IAppEvent, header: BasicAuthorizationHeader): Promise<void>;
 }
 //# sourceMappingURL=module.d.ts.map

package/dist/adapters/http/middleware/built-in/authorization/module.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"module.d.ts","sourceRoot":"","sources":["../../../../../../src/adapters/http/middleware/built-in/authorization/module.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,gBAAgB,CAAC;AAE3D,OAAO,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAC;AAO5D,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,QAAQ,CAAC;AAC3C,OAAO,EAEH,KAAK,wBAAwB,EAC7B,KAAK,yBAAyB,EAEjC,MAAM,OAAO,CAAC;AAOf,OAAO,KAAK,EACR,yBAAyB,EACzB,iBAAiB,EACjB,oBAAoB,EACpB,eAAe,EAClB,MAAM,8BAA8B,CAAC;AAQtC,OAAO,KAAK,EAAE,kCAAkC,EAAE,kCAAkC,EAAE,MAAM,YAAY,CAAC;AAEzG,qBAAa,uBAAuB;IAChC,SAAS,CAAC,OAAO,EAAE,kCAAkC,CAAC;IAItD,SAAS,CAAC,mBAAmB,EAAE,oBAAoB,CAAC;IAEpD,SAAS,CAAC,mBAAmB,EAAE,oBAAoB,CAAC;IAIpD,SAAS,CAAC,gBAAgB,EAAE,iBAAiB,CAAC;IAE9C,SAAS,CAAC,cAAc,EAAG,eAAe,CAAC;IAI3C,SAAS,CAAC,mBAAmB,EAAG,yBAAyB,CAAC,MAAM,CAAC,CAAC;IAElE,SAAS,CAAC,kBAAkB,EAAG,yBAAyB,CAAC,KAAK,CAAC,CAAC;IAEhE,SAAS,CAAC,iBAAiB,EAAG,yBAAyB,CAAC,IAAI,CAAC,CAAC;gBAIlD,GAAG,EAAE,kCAAkC;IAsB7C,GAAG,CAAC,KAAK,EAAE,YAAY;IA2B7B;;OAEG;cACa,+BAA+B,CAC3C,KAAK,EAAE,YAAY,EACnB,MAAM,EAAE,yBAAyB;cAwDrB,8BAA8B,CAC1C,KAAK,EAAE,YAAY,EACnB,MAAM,EAAE,wBAAwB;CA+CvC"}
+{"version":3,"file":"module.d.ts","sourceRoot":"","sources":["../../../../../../src/adapters/http/middleware/built-in/authorization/module.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,gBAAgB,CAAC;AAE3D,OAAO,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAC;AAO5D,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,QAAQ,CAAC;AACxC,OAAO,EAEH,KAAK,wBAAwB,EAC7B,KAAK,yBAAyB,EAEjC,MAAM,OAAO,CAAC;AAOf,OAAO,KAAK,EACR,yBAAyB,EACzB,iBAAiB,EACjB,oBAAoB,EACpB,eAAe,EAClB,MAAM,8BAA8B,CAAC;AAQtC,OAAO,KAAK,EAAE,kCAAkC,EAAE,kCAAkC,EAAE,MAAM,YAAY,CAAC;AAEzG,qBAAa,uBAAuB;IAChC,SAAS,CAAC,OAAO,EAAE,kCAAkC,CAAC;IAItD,SAAS,CAAC,mBAAmB,EAAE,oBAAoB,CAAC;IAEpD,SAAS,CAAC,mBAAmB,EAAE,oBAAoB,CAAC;IAIpD,SAAS,CAAC,gBAAgB,EAAE,iBAAiB,CAAC;IAE9C,SAAS,CAAC,cAAc,EAAG,eAAe,CAAC;IAI3C,SAAS,CAAC,mBAAmB,EAAG,yBAAyB,CAAC,MAAM,CAAC,CAAC;IAElE,SAAS,CAAC,kBAAkB,EAAG,yBAAyB,CAAC,KAAK,CAAC,CAAC;IAEhE,SAAS,CAAC,iBAAiB,EAAG,yBAAyB,CAAC,IAAI,CAAC,CAAC;gBAIlD,GAAG,EAAE,kCAAkC;IAsB7C,GAAG,CAAC,KAAK,EAAE,SAAS;IA2B1B;;OAEG;cACa,+BAA+B,CAC3C,KAAK,EAAE,SAAS,EAChB,MAAM,EAAE,yBAAyB;cAwDrB,8BAA8B,CAC1C,KAAK,EAAE,SAAS,EAChB,MAAM,EAAE,wBAAwB;CA+CvC"}

package/dist/adapters/http/middleware/built-in/authorization/module.mjs

@@ -1,3 +1,6 @@
+import "node:path";
+import "node:url";
+import.meta.url;
 import { ClientAuthenticator } from "../../../../../core/authentication/entities/client/module.mjs";
 import { RobotAuthenticator } from "../../../../../core/authentication/entities/robot/module.mjs";
 import { UserAuthenticator } from "../../../../../core/authentication/entities/user/module.mjs";
@@ -11,8 +14,8 @@ import { RequestPermissionEvaluator } from "../../../request/permission/module.m
 import "../../../request/index.mjs";
 import { IdentityType, ScopeName } from "@authup/core-kit";
 import { PermissionEvaluator } from "@authup/access";
+import { AuthHeaderError } from "@authup/errors";
 import { JWTError, OAuth2TokenKind, deserializeOAuth2Scope } from "@authup/specs";
-import { HTTPError } from "@authup/errors";
 import { AuthorizationHeaderType, parseAuthorizationHeader } from "hapic";
 //#region src/adapters/http/middleware/built-in/authorization/module.ts
 var AuthorizationMiddleware = class {
@@ -52,7 +55,7 @@ var AuthorizationMiddleware = class {
 			await this.verifyBasicAuthorizationHeader(event, header);
 			return;
 		}
-		throw HTTPError.unsupportedHeaderType(header.type);
+		throw AuthHeaderError.unsupportedType(header.type);
 	}
 	/**
 	* @throws JWTError

package/dist/adapters/http/middleware/built-in/authorization/module.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"module.mjs","names":["PermissionEvaluator","IdentityType","ScopeName","HTTPError","JWTError","OAuth2TokenKind","deserializeOAuth2Scope","AuthorizationHeaderType","parseAuthorizationHeader","ClientAuthenticator","PolicyEngine","RobotAuthenticator","UserAuthenticator","RequestPermissionEvaluator","setRequestIdentity","setRequestPermissionEvaluator","setRequestScopes","setRequestToken","AuthorizationMiddleware","options","oauth2TokenVerifier","permissionEvaluator","identityResolver","sessionManager","clientAuthenticator","robotAuthenticator","userAuthenticator","ctx","provider","permissionProvider","policyEngine","identityPermissionProvider","realmId","clientId","run","event","requestAccessContext","headerValue","headers","get","header","type","BEARER","verifyBearerAuthorizationHeader","BASIC","verifyBasicAuthorizationHeader","unsupportedHeaderType","payload","verify","token","kind","ACCESS","payloadPropertyInvalid","realm_id","scope","session_id","session","findOneById","expired","ping","sub_kind","sub","identity","resolve","clientAuthBasic","authenticator","safeAuthenticate","username","password","success","GLOBAL","CLIENT","data","userAuthBasic","authenticated","USER","robotAuthBasic","ROBOT"],"sources":["../../../../../../src/adapters/http/middleware/built-in/authorization/module.ts"],"sourcesContent":["/*\n * Copyright (c) 2025.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport type { IPermissionEvaluator } from '@authup/access';\nimport { PermissionEvaluator } from '@authup/access';\nimport type { Client, Robot, User } from '@authup/core-kit';\nimport {\n    IdentityType,\n    ScopeName,\n} from '@authup/core-kit';\nimport { HTTPError } from '@authup/errors';\nimport { JWTError, OAuth2TokenKind, deserializeOAuth2Scope } from '@authup/specs';\nimport type { IRoutupEvent } from 'routup';\nimport {\n    AuthorizationHeaderType,\n    type BasicAuthorizationHeader,\n    type BearerAuthorizationHeader,\n    parseAuthorizationHeader,\n} from 'hapic';\nimport {\n    ClientAuthenticator,\n    PolicyEngine,\n    RobotAuthenticator,\n    UserAuthenticator, \n} from '../../../../../core/index.ts';\nimport type {\n    ICredentialsAuthenticator, \n    IIdentityResolver,\n    IOAuth2TokenVerifier, \n    ISessionManager,\n} from '../../../../../core/index.ts';\nimport {\n    RequestPermissionEvaluator,\n    setRequestIdentity,\n    setRequestPermissionEvaluator,\n    setRequestScopes,\n    setRequestToken,\n} from '../../../request/index.ts';\nimport type { HTTPAuthorizationMiddlewareContext, HTTPAuthorizationMiddlewareOptions } from './types.ts';\n\nexport class AuthorizationMiddleware {\n    protected options: HTTPAuthorizationMiddlewareOptions;\n\n    // --------------------------------------\n\n    protected oauth2TokenVerifier: IOAuth2TokenVerifier;\n\n    protected permissionEvaluator: IPermissionEvaluator;\n\n    // --------------------------------------\n\n    protected identityResolver: IIdentityResolver;\n\n    protected sessionManager : ISessionManager;\n\n    // --------------------------------------\n\n    protected clientAuthenticator : ICredentialsAuthenticator<Client>;\n\n    protected robotAuthenticator : ICredentialsAuthenticator<Robot>;\n\n    protected userAuthenticator : ICredentialsAuthenticator<User>;\n\n    // --------------------------------------\n\n    constructor(ctx: HTTPAuthorizationMiddlewareContext) {\n        this.options = ctx.options || {};\n\n        this.identityResolver = ctx.identityResolver;\n        this.sessionManager = ctx.sessionManager;\n\n        this.clientAuthenticator = new ClientAuthenticator(ctx.identityResolver);\n        this.robotAuthenticator = new RobotAuthenticator(ctx.identityResolver);\n        this.userAuthenticator = new UserAuthenticator(ctx.identityResolver);\n\n        this.oauth2TokenVerifier = ctx.oauth2TokenVerifier;\n\n        this.permissionEvaluator = new PermissionEvaluator({\n            provider: ctx.permissionProvider,\n            policyEngine: new PolicyEngine(ctx.identityPermissionProvider),\n            realmId: null,\n            clientId: null,\n        });\n    }\n\n    // --------------------------------------\n\n    async run(event: IRoutupEvent) {\n        const requestAccessContext = new RequestPermissionEvaluator(\n            event,\n            this.permissionEvaluator,\n        );\n        setRequestPermissionEvaluator(event, requestAccessContext);\n\n        const headerValue = event.headers.get('authorization');\n        if (!headerValue) {\n            return;\n        }\n\n        const header = parseAuthorizationHeader(headerValue);\n\n        if (header.type === AuthorizationHeaderType.BEARER) {\n            await this.verifyBearerAuthorizationHeader(event, header);\n            return;\n        }\n\n        if (header.type === AuthorizationHeaderType.BASIC) {\n            await this.verifyBasicAuthorizationHeader(event, header);\n            return;\n        }\n\n        throw HTTPError.unsupportedHeaderType(header.type);\n    }\n\n    /**\n     * @throws JWTError\n     */\n    protected async verifyBearerAuthorizationHeader(\n        event: IRoutupEvent,\n        header: BearerAuthorizationHeader,\n    ) {\n        const payload = await this.oauth2TokenVerifier.verify(header.token);\n        if (payload.kind !== OAuth2TokenKind.ACCESS) {\n            throw JWTError.payloadPropertyInvalid('kind');\n        }\n\n        if (!payload.realm_id) {\n            throw JWTError.payloadPropertyInvalid('realm_id');\n        }\n\n        setRequestToken(event, header.token);\n\n        if (payload.scope) {\n            setRequestScopes(event, deserializeOAuth2Scope(payload.scope));\n        }\n\n        // -------------------------------------------------------\n\n        if (!payload.session_id) {\n            throw JWTError.payloadPropertyInvalid('session_id');\n        }\n\n        const session = await this.sessionManager.findOneById(payload.session_id);\n        if (!session) {\n            throw JWTError.expired();\n        }\n\n        try {\n            await this.sessionManager.verify(session);\n        } catch {\n            throw JWTError.expired();\n        }\n\n        await this.sessionManager.ping(session);\n\n        // -------------------------------------------------------\n\n        if (!payload.sub_kind) {\n            throw JWTError.payloadPropertyInvalid('sub_kind');\n        }\n\n        if (!payload.sub) {\n            throw JWTError.payloadPropertyInvalid('sub');\n        }\n\n        const identity = await this.identityResolver.resolve(\n            payload.sub_kind,\n            payload.sub,\n        );\n\n        if (identity) {\n            setRequestIdentity(event, identity);\n        }\n    }\n\n    protected async verifyBasicAuthorizationHeader(\n        event: IRoutupEvent,\n        header: BasicAuthorizationHeader,\n    ) {\n        if (this.options.clientAuthBasic) {\n            const authenticator = await this.clientAuthenticator.safeAuthenticate(\n                header.username,\n                header.password,\n            );\n            if (authenticator.success) {\n                setRequestScopes(event, [ScopeName.GLOBAL]);\n                setRequestIdentity(event, {\n                    type: IdentityType.CLIENT,\n                    data: authenticator.data,\n                });\n            }\n        }\n\n        if (this.options.userAuthBasic) {\n            const authenticated = await this.userAuthenticator.safeAuthenticate(\n                header.username,\n                header.password,\n            );\n\n            if (authenticated.success) {\n                setRequestScopes(event, [ScopeName.GLOBAL]);\n                setRequestIdentity(event, {\n                    type: IdentityType.USER,\n                    data: authenticated.data,\n                });\n\n                return;\n            }\n        }\n\n        if (this.options.robotAuthBasic) {\n            const authenticated = await this.robotAuthenticator.safeAuthenticate(\n                header.username,\n                header.password,\n            );\n            if (authenticated.success) {\n                setRequestScopes(event, [ScopeName.GLOBAL]);\n                setRequestIdentity(event, {\n                    type: IdentityType.ROBOT,\n                    data: authenticated.data,\n                });\n            }\n        }\n    }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;AA4CA,IAAakB,0BAAb,MAAaA;CACCC;CAIAC;CAEAC;CAIAC;CAEAC;CAIAC;CAEAC;CAEAC;CAIV,YAAYC,KAAyC;AACjD,OAAKR,UAAUQ,IAAIR,WAAW,EAAC;AAE/B,OAAKG,mBAAmBK,IAAIL;AAC5B,OAAKC,iBAAiBI,IAAIJ;AAE1B,OAAKC,sBAAsB,IAAIf,oBAAoBkB,IAAIL,iBAAgB;AACvE,OAAKG,qBAAqB,IAAId,mBAAmBgB,IAAIL,iBAAgB;AACrE,OAAKI,oBAAoB,IAAId,kBAAkBe,IAAIL,iBAAgB;AAEnE,OAAKF,sBAAsBO,IAAIP;AAE/B,OAAKC,sBAAsB,IAAIrB,oBAAoB;GAC/C4B,UAAUD,IAAIE;GACdC,cAAc,IAAIpB,eAAaiB,IAAII,2BAA0B;GAC7DC,SAAS;GACTC,UAAU;GACd,CAAA;;CAKJ,MAAMC,IAAIC,OAAqB;AAK3BpB,gCAA8BoB,OAAOC,IAJJvB,2BAC7BsB,OACA,KAAKd,oBAE4Be,CAAAA;EAErC,MAAMC,cAAcF,MAAMG,QAAQC,IAAI,gBAAA;AACtC,MAAI,CAACF,YACD;EAGJ,MAAMG,SAAShC,yBAAyB6B,YAAAA;AAExC,MAAIG,OAAOC,SAASlC,wBAAwBmC,QAAQ;AAChD,SAAM,KAAKC,gCAAgCR,OAAOK,OAAAA;AAClD;;AAGJ,MAAIA,OAAOC,SAASlC,wBAAwBqC,OAAO;AAC/C,SAAM,KAAKC,+BAA+BV,OAAOK,OAAAA;AACjD;;AAGJ,QAAMrC,UAAU2C,sBAAsBN,OAAOC,KAAI;;;;IAMrD,MAAgBE,gCACZR,OACAK,QACF;EACE,MAAMO,UAAU,MAAM,KAAK3B,oBAAoB4B,OAAOR,OAAOS,MAAK;AAClE,MAAIF,QAAQG,SAAS7C,gBAAgB8C,OACjC,OAAM/C,SAASgD,uBAAuB,OAAA;AAG1C,MAAI,CAACL,QAAQM,SACT,OAAMjD,SAASgD,uBAAuB,WAAA;AAG1CnC,kBAAgBkB,OAAOK,OAAOS,MAAK;AAEnC,MAAIF,QAAQO,MACRtC,kBAAiBmB,OAAO7B,uBAAuByC,QAAQO,MAAK,CAAA;AAKhE,MAAI,CAACP,QAAQQ,WACT,OAAMnD,SAASgD,uBAAuB,aAAA;EAG1C,MAAMI,UAAU,MAAM,KAAKjC,eAAekC,YAAYV,QAAQQ,WAAU;AACxE,MAAI,CAACC,QACD,OAAMpD,SAASsD,SAAO;AAG1B,MAAI;AACA,SAAM,KAAKnC,eAAeyB,OAAOQ,QAAAA;UAC7B;AACJ,SAAMpD,SAASsD,SAAO;;AAG1B,QAAM,KAAKnC,eAAeoC,KAAKH,QAAAA;AAI/B,MAAI,CAACT,QAAQa,SACT,OAAMxD,SAASgD,uBAAuB,WAAA;AAG1C,MAAI,CAACL,QAAQc,IACT,OAAMzD,SAASgD,uBAAuB,MAAA;EAG1C,MAAMU,WAAW,MAAM,KAAKxC,iBAAiByC,QACzChB,QAAQa,UACRb,QAAQc,IAAG;AAGf,MAAIC,SACAhD,oBAAmBqB,OAAO2B,SAAAA;;CAIlC,MAAgBjB,+BACZV,OACAK,QACF;AACE,MAAI,KAAKrB,QAAQ6C,iBAAiB;GAC9B,MAAMC,gBAAgB,MAAM,KAAKzC,oBAAoB0C,iBACjD1B,OAAO2B,UACP3B,OAAO4B,SAAQ;AAEnB,OAAIH,cAAcI,SAAS;AACvBrD,qBAAiBmB,OAAO,CAACjC,UAAUoE,OAAO,CAAA;AAC1CxD,uBAAmBqB,OAAO;KACtBM,MAAMxC,aAAasE;KACnBC,MAAMP,cAAcO;KACxB,CAAA;;;AAIR,MAAI,KAAKrD,QAAQsD,eAAe;GAC5B,MAAMC,gBAAgB,MAAM,KAAKhD,kBAAkBwC,iBAC/C1B,OAAO2B,UACP3B,OAAO4B,SAAQ;AAGnB,OAAIM,cAAcL,SAAS;AACvBrD,qBAAiBmB,OAAO,CAACjC,UAAUoE,OAAO,CAAA;AAC1CxD,uBAAmBqB,OAAO;KACtBM,MAAMxC,aAAa0E;KACnBH,MAAME,cAAcF;KACxB,CAAA;AAEA;;;AAIR,MAAI,KAAKrD,QAAQyD,gBAAgB;GAC7B,MAAMF,gBAAgB,MAAM,KAAKjD,mBAAmByC,iBAChD1B,OAAO2B,UACP3B,OAAO4B,SAAQ;AAEnB,OAAIM,cAAcL,SAAS;AACvBrD,qBAAiBmB,OAAO,CAACjC,UAAUoE,OAAO,CAAA;AAC1CxD,uBAAmBqB,OAAO;KACtBM,MAAMxC,aAAa4E;KACnBL,MAAME,cAAcF;KACxB,CAAA"}
+{"version":3,"file":"module.mjs","names":["PermissionEvaluator","IdentityType","ScopeName","AuthHeaderError","JWTError","OAuth2TokenKind","deserializeOAuth2Scope","AuthorizationHeaderType","parseAuthorizationHeader","ClientAuthenticator","PolicyEngine","RobotAuthenticator","UserAuthenticator","RequestPermissionEvaluator","setRequestIdentity","setRequestPermissionEvaluator","setRequestScopes","setRequestToken","AuthorizationMiddleware","options","oauth2TokenVerifier","permissionEvaluator","identityResolver","sessionManager","clientAuthenticator","robotAuthenticator","userAuthenticator","ctx","provider","permissionProvider","policyEngine","identityPermissionProvider","realmId","clientId","run","event","requestAccessContext","headerValue","headers","get","header","type","BEARER","verifyBearerAuthorizationHeader","BASIC","verifyBasicAuthorizationHeader","unsupportedType","payload","verify","token","kind","ACCESS","payloadPropertyInvalid","realm_id","scope","session_id","session","findOneById","expired","ping","sub_kind","sub","identity","resolve","clientAuthBasic","authenticator","safeAuthenticate","username","password","success","GLOBAL","CLIENT","data","userAuthBasic","authenticated","USER","robotAuthBasic","ROBOT"],"sources":["../../../../../../src/adapters/http/middleware/built-in/authorization/module.ts"],"sourcesContent":["/*\n * Copyright (c) 2025.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport type { IPermissionEvaluator } from '@authup/access';\nimport { PermissionEvaluator } from '@authup/access';\nimport type { Client, Robot, User } from '@authup/core-kit';\nimport {\n    IdentityType,\n    ScopeName,\n} from '@authup/core-kit';\nimport { AuthHeaderError } from '@authup/errors';\nimport { JWTError, OAuth2TokenKind, deserializeOAuth2Scope } from '@authup/specs';\nimport type { IAppEvent } from 'routup';\nimport {\n    AuthorizationHeaderType,\n    type BasicAuthorizationHeader,\n    type BearerAuthorizationHeader,\n    parseAuthorizationHeader,\n} from 'hapic';\nimport {\n    ClientAuthenticator,\n    PolicyEngine,\n    RobotAuthenticator,\n    UserAuthenticator, \n} from '../../../../../core/index.ts';\nimport type {\n    ICredentialsAuthenticator, \n    IIdentityResolver,\n    IOAuth2TokenVerifier, \n    ISessionManager,\n} from '../../../../../core/index.ts';\nimport {\n    RequestPermissionEvaluator,\n    setRequestIdentity,\n    setRequestPermissionEvaluator,\n    setRequestScopes,\n    setRequestToken,\n} from '../../../request/index.ts';\nimport type { HTTPAuthorizationMiddlewareContext, HTTPAuthorizationMiddlewareOptions } from './types.ts';\n\nexport class AuthorizationMiddleware {\n    protected options: HTTPAuthorizationMiddlewareOptions;\n\n    // --------------------------------------\n\n    protected oauth2TokenVerifier: IOAuth2TokenVerifier;\n\n    protected permissionEvaluator: IPermissionEvaluator;\n\n    // --------------------------------------\n\n    protected identityResolver: IIdentityResolver;\n\n    protected sessionManager : ISessionManager;\n\n    // --------------------------------------\n\n    protected clientAuthenticator : ICredentialsAuthenticator<Client>;\n\n    protected robotAuthenticator : ICredentialsAuthenticator<Robot>;\n\n    protected userAuthenticator : ICredentialsAuthenticator<User>;\n\n    // --------------------------------------\n\n    constructor(ctx: HTTPAuthorizationMiddlewareContext) {\n        this.options = ctx.options || {};\n\n        this.identityResolver = ctx.identityResolver;\n        this.sessionManager = ctx.sessionManager;\n\n        this.clientAuthenticator = new ClientAuthenticator(ctx.identityResolver);\n        this.robotAuthenticator = new RobotAuthenticator(ctx.identityResolver);\n        this.userAuthenticator = new UserAuthenticator(ctx.identityResolver);\n\n        this.oauth2TokenVerifier = ctx.oauth2TokenVerifier;\n\n        this.permissionEvaluator = new PermissionEvaluator({\n            provider: ctx.permissionProvider,\n            policyEngine: new PolicyEngine(ctx.identityPermissionProvider),\n            realmId: null,\n            clientId: null,\n        });\n    }\n\n    // --------------------------------------\n\n    async run(event: IAppEvent) {\n        const requestAccessContext = new RequestPermissionEvaluator(\n            event,\n            this.permissionEvaluator,\n        );\n        setRequestPermissionEvaluator(event, requestAccessContext);\n\n        const headerValue = event.headers.get('authorization');\n        if (!headerValue) {\n            return;\n        }\n\n        const header = parseAuthorizationHeader(headerValue);\n\n        if (header.type === AuthorizationHeaderType.BEARER) {\n            await this.verifyBearerAuthorizationHeader(event, header);\n            return;\n        }\n\n        if (header.type === AuthorizationHeaderType.BASIC) {\n            await this.verifyBasicAuthorizationHeader(event, header);\n            return;\n        }\n\n        throw AuthHeaderError.unsupportedType(header.type);\n    }\n\n    /**\n     * @throws JWTError\n     */\n    protected async verifyBearerAuthorizationHeader(\n        event: IAppEvent,\n        header: BearerAuthorizationHeader,\n    ) {\n        const payload = await this.oauth2TokenVerifier.verify(header.token);\n        if (payload.kind !== OAuth2TokenKind.ACCESS) {\n            throw JWTError.payloadPropertyInvalid('kind');\n        }\n\n        if (!payload.realm_id) {\n            throw JWTError.payloadPropertyInvalid('realm_id');\n        }\n\n        setRequestToken(event, header.token);\n\n        if (payload.scope) {\n            setRequestScopes(event, deserializeOAuth2Scope(payload.scope));\n        }\n\n        // -------------------------------------------------------\n\n        if (!payload.session_id) {\n            throw JWTError.payloadPropertyInvalid('session_id');\n        }\n\n        const session = await this.sessionManager.findOneById(payload.session_id);\n        if (!session) {\n            throw JWTError.expired();\n        }\n\n        try {\n            await this.sessionManager.verify(session);\n        } catch {\n            throw JWTError.expired();\n        }\n\n        await this.sessionManager.ping(session);\n\n        // -------------------------------------------------------\n\n        if (!payload.sub_kind) {\n            throw JWTError.payloadPropertyInvalid('sub_kind');\n        }\n\n        if (!payload.sub) {\n            throw JWTError.payloadPropertyInvalid('sub');\n        }\n\n        const identity = await this.identityResolver.resolve(\n            payload.sub_kind,\n            payload.sub,\n        );\n\n        if (identity) {\n            setRequestIdentity(event, identity);\n        }\n    }\n\n    protected async verifyBasicAuthorizationHeader(\n        event: IAppEvent,\n        header: BasicAuthorizationHeader,\n    ) {\n        if (this.options.clientAuthBasic) {\n            const authenticator = await this.clientAuthenticator.safeAuthenticate(\n                header.username,\n                header.password,\n            );\n            if (authenticator.success) {\n                setRequestScopes(event, [ScopeName.GLOBAL]);\n                setRequestIdentity(event, {\n                    type: IdentityType.CLIENT,\n                    data: authenticator.data,\n                });\n            }\n        }\n\n        if (this.options.userAuthBasic) {\n            const authenticated = await this.userAuthenticator.safeAuthenticate(\n                header.username,\n                header.password,\n            );\n\n            if (authenticated.success) {\n                setRequestScopes(event, [ScopeName.GLOBAL]);\n                setRequestIdentity(event, {\n                    type: IdentityType.USER,\n                    data: authenticated.data,\n                });\n\n                return;\n            }\n        }\n\n        if (this.options.robotAuthBasic) {\n            const authenticated = await this.robotAuthenticator.safeAuthenticate(\n                header.username,\n                header.password,\n            );\n            if (authenticated.success) {\n                setRequestScopes(event, [ScopeName.GLOBAL]);\n                setRequestIdentity(event, {\n                    type: IdentityType.ROBOT,\n                    data: authenticated.data,\n                });\n            }\n        }\n    }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;AA4CA,IAAakB,0BAAb,MAAaA;CACCC;CAIAC;CAEAC;CAIAC;CAEAC;CAIAC;CAEAC;CAEAC;CAIV,YAAYC,KAAyC;EACjD,KAAKR,UAAUQ,IAAIR,WAAW,CAAC;EAE/B,KAAKG,mBAAmBK,IAAIL;EAC5B,KAAKC,iBAAiBI,IAAIJ;EAE1B,KAAKC,sBAAsB,IAAIf,oBAAoBkB,IAAIL,gBAAgB;EACvE,KAAKG,qBAAqB,IAAId,mBAAmBgB,IAAIL,gBAAgB;EACrE,KAAKI,oBAAoB,IAAId,kBAAkBe,IAAIL,gBAAgB;EAEnE,KAAKF,sBAAsBO,IAAIP;EAE/B,KAAKC,sBAAsB,IAAIrB,oBAAoB;GAC/C4B,UAAUD,IAAIE;GACdC,cAAc,IAAIpB,eAAaiB,IAAII,0BAA0B;GAC7DC,SAAS;GACTC,UAAU;EACd,CAAA;CACJ;CAIA,MAAMC,IAAIC,OAAkB;EAKxBpB,8BAA8BoB,OAAOC,IAJJvB,2BAC7BsB,OACA,KAAKd,mBAE4Be,CAAAA;EAErC,MAAMC,cAAcF,MAAMG,QAAQC,IAAI,eAAA;EACtC,IAAI,CAACF,aACD;EAGJ,MAAMG,SAAShC,yBAAyB6B,WAAAA;EAExC,IAAIG,OAAOC,SAASlC,wBAAwBmC,QAAQ;GAChD,MAAM,KAAKC,gCAAgCR,OAAOK,MAAAA;GAClD;EACJ;EAEA,IAAIA,OAAOC,SAASlC,wBAAwBqC,OAAO;GAC/C,MAAM,KAAKC,+BAA+BV,OAAOK,MAAAA;GACjD;EACJ;EAEA,MAAMrC,gBAAgB2C,gBAAgBN,OAAOC,IAAI;CACrD;;;IAKA,MAAgBE,gCACZR,OACAK,QACF;EACE,MAAMO,UAAU,MAAM,KAAK3B,oBAAoB4B,OAAOR,OAAOS,KAAK;EAClE,IAAIF,QAAQG,SAAS7C,gBAAgB8C,QACjC,MAAM/C,SAASgD,uBAAuB,MAAA;EAG1C,IAAI,CAACL,QAAQM,UACT,MAAMjD,SAASgD,uBAAuB,UAAA;EAG1CnC,gBAAgBkB,OAAOK,OAAOS,KAAK;EAEnC,IAAIF,QAAQO,OACRtC,iBAAiBmB,OAAO7B,uBAAuByC,QAAQO,KAAK,CAAA;EAKhE,IAAI,CAACP,QAAQQ,YACT,MAAMnD,SAASgD,uBAAuB,YAAA;EAG1C,MAAMI,UAAU,MAAM,KAAKjC,eAAekC,YAAYV,QAAQQ,UAAU;EACxE,IAAI,CAACC,SACD,MAAMpD,SAASsD,QAAO;EAG1B,IAAI;GACA,MAAM,KAAKnC,eAAeyB,OAAOQ,OAAAA;EACrC,QAAQ;GACJ,MAAMpD,SAASsD,QAAO;EAC1B;EAEA,MAAM,KAAKnC,eAAeoC,KAAKH,OAAAA;EAI/B,IAAI,CAACT,QAAQa,UACT,MAAMxD,SAASgD,uBAAuB,UAAA;EAG1C,IAAI,CAACL,QAAQc,KACT,MAAMzD,SAASgD,uBAAuB,KAAA;EAG1C,MAAMU,WAAW,MAAM,KAAKxC,iBAAiByC,QACzChB,QAAQa,UACRb,QAAQc,GAAG;EAGf,IAAIC,UACAhD,mBAAmBqB,OAAO2B,QAAAA;CAElC;CAEA,MAAgBjB,+BACZV,OACAK,QACF;EACE,IAAI,KAAKrB,QAAQ6C,iBAAiB;GAC9B,MAAMC,gBAAgB,MAAM,KAAKzC,oBAAoB0C,iBACjD1B,OAAO2B,UACP3B,OAAO4B,QAAQ;GAEnB,IAAIH,cAAcI,SAAS;IACvBrD,iBAAiBmB,OAAO,CAACjC,UAAUoE,MAAAA,CAAO;IAC1CxD,mBAAmBqB,OAAO;KACtBM,MAAMxC,aAAasE;KACnBC,MAAMP,cAAcO;IACxB,CAAA;GACJ;EACJ;EAEA,IAAI,KAAKrD,QAAQsD,eAAe;GAC5B,MAAMC,gBAAgB,MAAM,KAAKhD,kBAAkBwC,iBAC/C1B,OAAO2B,UACP3B,OAAO4B,QAAQ;GAGnB,IAAIM,cAAcL,SAAS;IACvBrD,iBAAiBmB,OAAO,CAACjC,UAAUoE,MAAAA,CAAO;IAC1CxD,mBAAmBqB,OAAO;KACtBM,MAAMxC,aAAa0E;KACnBH,MAAME,cAAcF;IACxB,CAAA;IAEA;GACJ;EACJ;EAEA,IAAI,KAAKrD,QAAQyD,gBAAgB;GAC7B,MAAMF,gBAAgB,MAAM,KAAKjD,mBAAmByC,iBAChD1B,OAAO2B,UACP3B,OAAO4B,QAAQ;GAEnB,IAAIM,cAAcL,SAAS;IACvBrD,iBAAiBmB,OAAO,CAACjC,UAAUoE,MAAAA,CAAO;IAC1CxD,mBAAmBqB,OAAO;KACtBM,MAAMxC,aAAa4E;KACnBL,MAAME,cAAcF;IACxB,CAAA;GACJ;EACJ;CACJ;AACJ"}

package/dist/adapters/http/middleware/built-in/authorization/types.mjs

@@ -1 +1,4 @@
+import "node:path";
+import "node:url";
+import.meta.url;
 export {};

package/dist/adapters/http/middleware/built-in/basic.d.ts

@@ -1,4 +1,4 @@
 import type { Options } from '@routup/basic';
-import type { Router } from 'routup';
-export declare function registerBasicMiddleware(router: Router, input?: Options): void;
+import type { App } from 'routup';
+export declare function registerBasicMiddleware(router: App, input?: Options): void;
 //# sourceMappingURL=basic.d.ts.map

package/dist/adapters/http/middleware/built-in/basic.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"basic.d.ts","sourceRoot":"","sources":["../../../../../src/adapters/http/middleware/built-in/basic.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,eAAe,CAAC;AAE7C,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAErC,wBAAgB,uBAAuB,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,OAAO,QAEtE"}
+{"version":3,"file":"basic.d.ts","sourceRoot":"","sources":["../../../../../src/adapters/http/middleware/built-in/basic.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,eAAe,CAAC;AAE7C,OAAO,KAAK,EAAE,GAAG,EAAE,MAAM,QAAQ,CAAC;AAElC,wBAAgB,uBAAuB,CAAC,MAAM,EAAE,GAAG,EAAE,KAAK,CAAC,EAAE,OAAO,QAEnE"}

package/dist/adapters/http/middleware/built-in/basic.mjs

@@ -1,3 +1,6 @@
+import "node:path";
+import "node:url";
+import.meta.url;
 import { basic } from "@routup/basic";
 //#region src/adapters/http/middleware/built-in/basic.ts
 function registerBasicMiddleware(router, input) {

package/dist/adapters/http/middleware/built-in/basic.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"basic.mjs","names":["basic","registerBasicMiddleware","router","input","use"],"sources":["../../../../../src/adapters/http/middleware/built-in/basic.ts"],"sourcesContent":["/*\n * Copyright (c) 2023.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport type { Options } from '@routup/basic';\nimport { basic } from '@routup/basic';\nimport type { Router } from 'routup';\n\nexport function registerBasicMiddleware(router: Router, input?: Options) {\n    router.use(basic(input));\n}\n"],"mappings":";;AAWA,SAAgBC,wBAAwBC,QAAgBC,OAAe;AACnED,QAAOE,IAAIJ,MAAMG,MAAAA,CAAAA"}
+{"version":3,"file":"basic.mjs","names":["basic","registerBasicMiddleware","router","input","use"],"sources":["../../../../../src/adapters/http/middleware/built-in/basic.ts"],"sourcesContent":["/*\n * Copyright (c) 2023.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport type { Options } from '@routup/basic';\nimport { basic } from '@routup/basic';\nimport type { App } from 'routup';\n\nexport function registerBasicMiddleware(router: App, input?: Options) {\n    router.use(basic(input));\n}\n"],"mappings":";;;;;AAWA,SAAgBC,wBAAwBC,QAAaC,OAAe;CAChED,OAAOE,IAAIJ,MAAMG,KAAAA,CAAAA;AACrB"}

package/dist/adapters/http/middleware/built-in/cors.d.ts

@@ -1,4 +1,4 @@
 import type { Options as CorsOptions } from '@routup/cors';
-import type { Router } from 'routup';
-export declare function registerCorsMiddleware(router: Router, input?: CorsOptions): void;
+import type { App } from 'routup';
+export declare function registerCorsMiddleware(router: App, input?: CorsOptions): void;
 //# sourceMappingURL=cors.d.ts.map

package/dist/adapters/http/middleware/built-in/cors.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"cors.d.ts","sourceRoot":"","sources":["../../../../../src/adapters/http/middleware/built-in/cors.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,OAAO,IAAI,WAAW,EAAE,MAAM,cAAc,CAAC;AAE3D,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAErC,wBAAgB,sBAAsB,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,WAAW,QAoBzE"}
+{"version":3,"file":"cors.d.ts","sourceRoot":"","sources":["../../../../../src/adapters/http/middleware/built-in/cors.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,OAAO,IAAI,WAAW,EAAE,MAAM,cAAc,CAAC;AAE3D,OAAO,KAAK,EAAE,GAAG,EAAE,MAAM,QAAQ,CAAC;AAElC,wBAAgB,sBAAsB,CAAC,MAAM,EAAE,GAAG,EAAE,KAAK,CAAC,EAAE,WAAW,QAoBtE"}

package/dist/adapters/http/middleware/built-in/cors.mjs

@@ -1,3 +1,6 @@
+import "node:path";
+import "node:url";
+import.meta.url;
 import { cors } from "@routup/cors";
 //#region src/adapters/http/middleware/built-in/cors.ts
 function registerCorsMiddleware(router, input) {

package/dist/adapters/http/middleware/built-in/cors.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"cors.mjs","names":["cors","registerCorsMiddleware","router","input","use","origin","credentials","exposeHeaders"],"sources":["../../../../../src/adapters/http/middleware/built-in/cors.ts"],"sourcesContent":["/*\n * Copyright (c) 2023.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport type { Options as CorsOptions } from '@routup/cors';\nimport { cors } from '@routup/cors';\nimport type { Router } from 'routup';\n\nexport function registerCorsMiddleware(router: Router, input?: CorsOptions) {\n    router.use(cors({\n        origin: true,\n        credentials: true,\n        // `credentials: true` is incompatible with the `*` wildcard for\n        // exposeHeaders, so enumerate the response headers JS clients need.\n        exposeHeaders: [\n            'ratelimit-limit',\n            'ratelimit-remaining',\n            'ratelimit-reset',\n            'retry-after',\n            'etag',\n            'content-disposition',\n            'content-range',\n            'accept-ranges',\n            'location',\n            'www-authenticate',\n        ],\n        ...(input ?? {}),\n    }));\n}\n"],"mappings":";;AAWA,SAAgBC,uBAAuBC,QAAgBC,OAAmB;AACtED,QAAOE,IAAIJ,KAAK;EACZK,QAAQ;EACRC,aAAa;EAGbC,eAAe;GACX;GACA;GACA;GACA;GACA;GACA;GACA;GACA;GACA;GACA;GACH;EACD,GAAIJ,SAAS,EAAE;EACnB,CAAA,CAAA"}
+{"version":3,"file":"cors.mjs","names":["cors","registerCorsMiddleware","router","input","use","origin","credentials","exposeHeaders"],"sources":["../../../../../src/adapters/http/middleware/built-in/cors.ts"],"sourcesContent":["/*\n * Copyright (c) 2023.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport type { Options as CorsOptions } from '@routup/cors';\nimport { cors } from '@routup/cors';\nimport type { App } from 'routup';\n\nexport function registerCorsMiddleware(router: App, input?: CorsOptions) {\n    router.use(cors({\n        origin: true,\n        credentials: true,\n        // `credentials: true` is incompatible with the `*` wildcard for\n        // exposeHeaders, so enumerate the response headers JS clients need.\n        exposeHeaders: [\n            'ratelimit-limit',\n            'ratelimit-remaining',\n            'ratelimit-reset',\n            'retry-after',\n            'etag',\n            'content-disposition',\n            'content-range',\n            'accept-ranges',\n            'location',\n            'www-authenticate',\n        ],\n        ...(input ?? {}),\n    }));\n}\n"],"mappings":";;;;;AAWA,SAAgBC,uBAAuBC,QAAaC,OAAmB;CACnED,OAAOE,IAAIJ,KAAK;EACZK,QAAQ;EACRC,aAAa;EAGbC,eAAe;GACX;GACA;GACA;GACA;GACA;GACA;GACA;GACA;GACA;GACA;;EAEJ,GAAIJ,SAAS,CAAC;CAClB,CAAA,CAAA;AACJ"}

package/dist/adapters/http/middleware/built-in/error.d.ts

@@ -1,3 +1,3 @@
-import type { Router } from 'routup';
-export declare function registerErrorMiddleware(router: Router): void;
+import type { App } from 'routup';
+export declare function registerErrorMiddleware(router: App): void;
 //# sourceMappingURL=error.d.ts.map

package/dist/adapters/http/middleware/built-in/error.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"error.d.ts","sourceRoot":"","sources":["../../../../../src/adapters/http/middleware/built-in/error.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAMrC,wBAAgB,uBAAuB,CAAC,MAAM,EAAE,MAAM,QAerD"}
+{"version":3,"file":"error.d.ts","sourceRoot":"","sources":["../../../../../src/adapters/http/middleware/built-in/error.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,GAAG,EAAE,MAAM,QAAQ,CAAC;AAMlC,wBAAgB,uBAAuB,CAAC,MAAM,EAAE,GAAG,QAelD"}

package/dist/adapters/http/middleware/built-in/error.mjs

@@ -1,17 +1,22 @@
+import "node:path";
+import "node:url";
+import.meta.url;
 import { sanitizeError } from "../../../../utils/error.mjs";
 import "../../../../utils/index.mjs";
 import { useLogger } from "@authup/server-kit";
+import { httpStatusFromCode, serializeError } from "@authup/errors";
 import { defineErrorHandler } from "routup";
 //#region src/adapters/http/middleware/built-in/error.ts
 function registerErrorMiddleware(router) {
 	router.use(defineErrorHandler((error, event) => {
 		const next = sanitizeError(error.cause ?? error);
-		const payload = next.toJSON();
-		if (next.status >= 500 && next.status < 600) {
+		const status = httpStatusFromCode(next.code);
+		const payload = serializeError(next);
+		if (status >= 500) {
 			useLogger().error(next);
 			payload.message = "An internal server error occurred.";
 		}
-		event.response.status = next.status;
+		event.response.status = status;
 		return payload;
 	}));
 }

package/dist/adapters/http/middleware/built-in/error.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"error.mjs","names":["defineErrorHandler","useLogger","sanitizeError","registerErrorMiddleware","router","use","error","event","next","cause","payload","toJSON","isServerError","status","message","response"],"sources":["../../../../../src/adapters/http/middleware/built-in/error.ts"],"sourcesContent":["/*\n * Copyright (c) 2021-2023.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport type { Router } from 'routup';\nimport { defineErrorHandler } from 'routup';\nimport { useLogger } from '@authup/server-kit';\nimport type { AuthupError } from '@authup/errors';\nimport { sanitizeError } from '../../../../utils/index.ts';\n\nexport function registerErrorMiddleware(router: Router) {\n    router.use(defineErrorHandler((error, event) => {\n        const next : AuthupError = sanitizeError(error.cause ?? error);\n\n        const payload = next.toJSON();\n\n        const isServerError = next.status >= 500 && next.status < 600;\n        if (isServerError) {\n            useLogger().error(next);\n            payload.message = 'An internal server error occurred.';\n        }\n\n        event.response.status = next.status;\n        return payload;\n    }));\n}\n"],"mappings":";;;;;AAaA,SAAgBG,wBAAwBC,QAAc;AAClDA,QAAOC,IAAIL,oBAAoBM,OAAOC,UAAAA;EAClC,MAAMC,OAAqBN,cAAcI,MAAMG,SAASH,MAAAA;EAExD,MAAMI,UAAUF,KAAKG,QAAM;AAG3B,MADsBH,KAAKK,UAAU,OAAOL,KAAKK,SAAS,KACvC;AACfZ,cAAAA,CAAYK,MAAME,KAAAA;AAClBE,WAAQI,UAAU;;AAGtBP,QAAMQ,SAASF,SAASL,KAAKK;AAC7B,SAAOH;GACX,CAAA"}
+{"version":3,"file":"error.mjs","names":["defineErrorHandler","useLogger","httpStatusFromCode","serializeError","sanitizeError","registerErrorMiddleware","router","use","error","event","next","cause","status","code","payload","message","response"],"sources":["../../../../../src/adapters/http/middleware/built-in/error.ts"],"sourcesContent":["/*\n * Copyright (c) 2021-2023.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport type { App } from 'routup';\nimport { defineErrorHandler } from 'routup';\nimport { useLogger } from '@authup/server-kit';\nimport { httpStatusFromCode, serializeError } from '@authup/errors';\nimport { sanitizeError } from '../../../../utils/index.ts';\n\nexport function registerErrorMiddleware(router: App) {\n    router.use(defineErrorHandler((error, event) => {\n        const next = sanitizeError(error.cause ?? error);\n        const status = httpStatusFromCode(next.code);\n\n        const payload = serializeError(next);\n\n        if (status >= 500) {\n            useLogger().error(next);\n            payload.message = 'An internal server error occurred.';\n        }\n\n        event.response.status = status;\n        return payload;\n    }));\n}\n"],"mappings":";;;;;;;;;AAaA,SAAgBK,wBAAwBC,QAAW;CAC/CA,OAAOC,IAAIP,oBAAoBQ,OAAOC,UAAAA;EAClC,MAAMC,OAAON,cAAcI,MAAMG,SAASH,KAAAA;EAC1C,MAAMI,SAASV,mBAAmBQ,KAAKG,IAAI;EAE3C,MAAMC,UAAUX,eAAeO,IAAAA;EAE/B,IAAIE,UAAU,KAAK;GACfX,UAAAA,CAAAA,CAAYO,MAAME,IAAAA;GAClBI,QAAQC,UAAU;EACtB;EAEAN,MAAMO,SAASJ,SAASA;EACxB,OAAOE;CACX,CAAA,CAAA;AACJ"}

package/dist/adapters/http/middleware/built-in/index.d.ts

@@ -1,5 +1,6 @@
 export * from './authorization/index.ts';
 export * from './loggedin/index.ts';
+export * from './realm-resolver/index.ts';
 export * from './assets.ts';
 export * from './basic.ts';
 export * from './cors.ts';

package/dist/adapters/http/middleware/built-in/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../src/adapters/http/middleware/built-in/index.ts"],"names":[],"mappings":"AAOA,cAAc,0BAA0B,CAAC;AACzC,cAAc,qBAAqB,CAAC;AAEpC,cAAc,aAAa,CAAC;AAC5B,cAAc,YAAY,CAAC;AAC3B,cAAc,WAAW,CAAC;AAC1B,cAAc,YAAY,CAAC;AAC3B,cAAc,aAAa,CAAC;AAC5B,cAAc,iBAAiB,CAAC;AAChC,cAAc,iBAAiB,CAAC;AAChC,cAAc,cAAc,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../src/adapters/http/middleware/built-in/index.ts"],"names":[],"mappings":"AAOA,cAAc,0BAA0B,CAAC;AACzC,cAAc,qBAAqB,CAAC;AACpC,cAAc,2BAA2B,CAAC;AAE1C,cAAc,aAAa,CAAC;AAC5B,cAAc,YAAY,CAAC;AAC3B,cAAc,WAAW,CAAC;AAC1B,cAAc,YAAY,CAAC;AAC3B,cAAc,aAAa,CAAC;AAC5B,cAAc,iBAAiB,CAAC;AAChC,cAAc,iBAAiB,CAAC;AAChC,cAAc,cAAc,CAAC"}

package/dist/adapters/http/middleware/built-in/index.mjs

@@ -1,9 +1,15 @@
+import "node:path";
+import "node:url";
+import.meta.url;
 import { AuthorizationMiddleware } from "./authorization/module.mjs";
 import { createAuthorizationMiddleware } from "./authorization/factory.mjs";
 import "./authorization/index.mjs";
 import { ForceLoggedInMiddleware } from "./loggedin/module.mjs";
 import { ForceUserLoggedInMiddleware } from "./loggedin/user.mjs";
 import "./loggedin/index.mjs";
+import { RealmResolverMiddleware } from "./realm-resolver/module.mjs";
+import { createRealmResolverMiddleware } from "./realm-resolver/factory.mjs";
+import "./realm-resolver/index.mjs";
 import { VITE_SERVER_STORE_KEY, registerAssetsMiddleware } from "./assets.mjs";
 import { registerBasicMiddleware } from "./basic.mjs";
 import { registerCorsMiddleware } from "./cors.mjs";
@@ -12,4 +18,4 @@ import { createLoggerMiddleware } from "./logger.mjs";
 import { registerPrometheusMiddleware } from "./prometheus.mjs";
 import { registerRateLimitMiddleware } from "./rate-limit.mjs";
 import { createSwaggerMiddleware } from "./swagger.mjs";
-export { AuthorizationMiddleware, ForceLoggedInMiddleware, ForceUserLoggedInMiddleware, VITE_SERVER_STORE_KEY, createAuthorizationMiddleware, createLoggerMiddleware, createSwaggerMiddleware, registerAssetsMiddleware, registerBasicMiddleware, registerCorsMiddleware, registerErrorMiddleware, registerPrometheusMiddleware, registerRateLimitMiddleware };
+export { AuthorizationMiddleware, ForceLoggedInMiddleware, ForceUserLoggedInMiddleware, RealmResolverMiddleware, VITE_SERVER_STORE_KEY, createAuthorizationMiddleware, createLoggerMiddleware, createRealmResolverMiddleware, createSwaggerMiddleware, registerAssetsMiddleware, registerBasicMiddleware, registerCorsMiddleware, registerErrorMiddleware, registerPrometheusMiddleware, registerRateLimitMiddleware };

package/dist/adapters/http/middleware/built-in/loggedin/index.mjs

@@ -1,3 +1,6 @@
+import "node:path";
+import "node:url";
+import.meta.url;
 import { ForceLoggedInMiddleware } from "./module.mjs";
 import { ForceUserLoggedInMiddleware } from "./user.mjs";
 export { ForceLoggedInMiddleware, ForceUserLoggedInMiddleware };

package/dist/adapters/http/middleware/built-in/loggedin/module.d.ts

@@ -1,6 +1,6 @@
 import type { HandlerInterface } from '@routup/decorators';
-import type { IRoutupEvent } from 'routup';
+import type { IAppEvent } from 'routup';
 export declare class ForceLoggedInMiddleware implements HandlerInterface {
-    run(event: IRoutupEvent): Promise<Response | undefined>;
+    run(event: IAppEvent): Promise<Response | undefined>;
 }
 //# sourceMappingURL=module.d.ts.map

package/dist/adapters/http/middleware/built-in/loggedin/module.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"module.d.ts","sourceRoot":"","sources":["../../../../../../src/adapters/http/middleware/built-in/loggedin/module.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AAC3D,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,QAAQ,CAAC;AAG3C,qBAAa,uBAAwB,YAAW,gBAAgB;IACrD,GAAG,CAAC,KAAK,EAAE,YAAY;CAIjC"}
+{"version":3,"file":"module.d.ts","sourceRoot":"","sources":["../../../../../../src/adapters/http/middleware/built-in/loggedin/module.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AAC3D,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,QAAQ,CAAC;AAGxC,qBAAa,uBAAwB,YAAW,gBAAgB;IACrD,GAAG,CAAC,KAAK,EAAE,SAAS;CAI9B"}

package/dist/adapters/http/middleware/built-in/loggedin/module.mjs

@@ -1,3 +1,6 @@
+import "node:path";
+import "node:url";
+import.meta.url;
 import { useRequestIdentityOrFail } from "../../../request/helpers/identity.mjs";
 import "../../../request/index.mjs";
 //#region src/adapters/http/middleware/built-in/loggedin/module.ts

package/dist/adapters/http/middleware/built-in/loggedin/module.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"module.mjs","names":["useRequestIdentityOrFail","ForceLoggedInMiddleware","run","event","next"],"sources":["../../../../../../src/adapters/http/middleware/built-in/loggedin/module.ts"],"sourcesContent":["/*\n * Copyright (c) 2022-2022.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport type { HandlerInterface } from '@routup/decorators';\nimport type { IRoutupEvent } from 'routup';\nimport { useRequestIdentityOrFail } from '../../../request/index.ts';\n\nexport class ForceLoggedInMiddleware implements HandlerInterface {\n    public run(event: IRoutupEvent) {\n        useRequestIdentityOrFail(event);\n        return event.next();\n    }\n}\n"],"mappings":";;;AAWA,IAAaC,0BAAb,MAAaA;CACFC,IAAIC,OAAqB;AAC5BH,2BAAyBG,MAAAA;AACzB,SAAOA,MAAMC,MAAI"}
+{"version":3,"file":"module.mjs","names":["useRequestIdentityOrFail","ForceLoggedInMiddleware","run","event","next"],"sources":["../../../../../../src/adapters/http/middleware/built-in/loggedin/module.ts"],"sourcesContent":["/*\n * Copyright (c) 2022-2022.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport type { HandlerInterface } from '@routup/decorators';\nimport type { IAppEvent } from 'routup';\nimport { useRequestIdentityOrFail } from '../../../request/index.ts';\n\nexport class ForceLoggedInMiddleware implements HandlerInterface {\n    public run(event: IAppEvent) {\n        useRequestIdentityOrFail(event);\n        return event.next();\n    }\n}\n"],"mappings":";;;;;;AAWA,IAAaC,0BAAb,MAAaA;CACFC,IAAIC,OAAkB;EACzBH,yBAAyBG,KAAAA;EACzB,OAAOA,MAAMC,KAAI;CACrB;AACJ"}

package/dist/adapters/http/middleware/built-in/loggedin/user.d.ts

@@ -1,6 +1,6 @@
 import type { HandlerInterface } from '@routup/decorators';
-import type { IRoutupEvent } from 'routup';
+import type { IAppEvent } from 'routup';
 export declare class ForceUserLoggedInMiddleware implements HandlerInterface {
-    run(event: IRoutupEvent): Promise<Response | undefined>;
+    run(event: IAppEvent): Promise<Response | undefined>;
 }
 //# sourceMappingURL=user.d.ts.map

package/dist/adapters/http/middleware/built-in/loggedin/user.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"user.d.ts","sourceRoot":"","sources":["../../../../../../src/adapters/http/middleware/built-in/loggedin/user.ts"],"names":[],"mappings":"AAQA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AAC3D,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,QAAQ,CAAC;AAG3C,qBAAa,2BAA4B,YAAW,gBAAgB;IACzD,GAAG,CAAC,KAAK,EAAE,YAAY;CASjC"}
+{"version":3,"file":"user.d.ts","sourceRoot":"","sources":["../../../../../../src/adapters/http/middleware/built-in/loggedin/user.ts"],"names":[],"mappings":"AAQA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AAC3D,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,QAAQ,CAAC;AAGxC,qBAAa,2BAA4B,YAAW,gBAAgB;IACzD,GAAG,CAAC,KAAK,EAAE,SAAS;CAS9B"}

package/dist/adapters/http/middleware/built-in/loggedin/user.mjs

@@ -1,6 +1,9 @@
+import "node:path";
+import "node:url";
+import.meta.url;
 import { useRequestIdentity } from "../../../request/helpers/identity.mjs";
 import "../../../request/index.mjs";
-import { UnauthorizedError } from "@ebec/http";
+import { UnauthorizedError } from "@authup/errors";
 //#region src/adapters/http/middleware/built-in/loggedin/user.ts
 var ForceUserLoggedInMiddleware = class {
 	run(event) {

package/dist/adapters/http/middleware/built-in/loggedin/user.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"user.mjs","names":["UnauthorizedError","useRequestIdentity","ForceUserLoggedInMiddleware","run","event","identity","type","next"],"sources":["../../../../../../src/adapters/http/middleware/built-in/loggedin/user.ts"],"sourcesContent":["/*\n * Copyright (c) 2022-2022.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport { UnauthorizedError } from '@ebec/http';\nimport type { HandlerInterface } from '@routup/decorators';\nimport type { IRoutupEvent } from 'routup';\nimport { useRequestIdentity } from '../../../request/index.ts';\n\nexport class ForceUserLoggedInMiddleware implements HandlerInterface {\n    public run(event: IRoutupEvent) {\n        const identity = useRequestIdentity(event);\n\n        if (!identity || identity.type !== 'user') {\n            throw new UnauthorizedError();\n        }\n\n        return event.next();\n    }\n}\n"],"mappings":";;;;AAYA,IAAaE,8BAAb,MAAaA;CACFC,IAAIC,OAAqB;EAC5B,MAAMC,WAAWJ,mBAAmBG,MAAAA;AAEpC,MAAI,CAACC,YAAYA,SAASC,SAAS,OAC/B,OAAM,IAAIN,mBAAAA;AAGd,SAAOI,MAAMG,MAAI"}
+{"version":3,"file":"user.mjs","names":["UnauthorizedError","useRequestIdentity","ForceUserLoggedInMiddleware","run","event","identity","type","next"],"sources":["../../../../../../src/adapters/http/middleware/built-in/loggedin/user.ts"],"sourcesContent":["/*\n * Copyright (c) 2022-2022.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport { UnauthorizedError } from '@authup/errors';\nimport type { HandlerInterface } from '@routup/decorators';\nimport type { IAppEvent } from 'routup';\nimport { useRequestIdentity } from '../../../request/index.ts';\n\nexport class ForceUserLoggedInMiddleware implements HandlerInterface {\n    public run(event: IAppEvent) {\n        const identity = useRequestIdentity(event);\n\n        if (!identity || identity.type !== 'user') {\n            throw new UnauthorizedError();\n        }\n\n        return event.next();\n    }\n}\n"],"mappings":";;;;;;;AAYA,IAAaE,8BAAb,MAAaA;CACFC,IAAIC,OAAkB;EACzB,MAAMC,WAAWJ,mBAAmBG,KAAAA;EAEpC,IAAI,CAACC,YAAYA,SAASC,SAAS,QAC/B,MAAM,IAAIN,kBAAAA;EAGd,OAAOI,MAAMG,KAAI;CACrB;AACJ"}

package/dist/adapters/http/middleware/built-in/logger.mjs

@@ -1,3 +1,6 @@
+import "node:path";
+import "node:url";
+import.meta.url;
 import { useLogger } from "@authup/server-kit";
 import { EnvironmentName } from "@authup/kit";
 import { getRequestIP } from "routup";

package/dist/adapters/http/middleware/built-in/logger.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"logger.mjs","names":["logger","getRequestIP","useLogger","EnvironmentName","createLoggerMiddleware","options","format","tokens","event","response","method","url","status","join","write","line","env","TEST","http","skip","path","length","PRODUCTION"],"sources":["../../../../../src/adapters/http/middleware/built-in/logger.ts"],"sourcesContent":["/*\n * Copyright (c) 2023.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport { logger } from '@routup/logger';\nimport type { Handler } from 'routup';\nimport { getRequestIP } from 'routup';\nimport { useLogger } from '@authup/server-kit';\nimport { EnvironmentName } from '@authup/kit';\n\ntype LoggerMiddlewareOptions = {\n    env: string\n};\n\nexport function createLoggerMiddleware(options: LoggerMiddlewareOptions) : Handler {\n    return logger({\n        format: (tokens, event, response) => [\n            getRequestIP(event) || '-',\n            '-',\n            tokens.method(event, response) ?? '-',\n            tokens.url(event, response) ?? '-',\n            tokens.status(event, response) ?? '-',\n            '-',\n            tokens['response-time'](event, response) ?? '-',\n        ].join(' '),\n        write(line) {\n            if (options.env !== EnvironmentName.TEST) {\n                useLogger().http(line);\n            }\n        },\n        skip(event, response): boolean {\n            const path = event.path || '';\n            if (path.length === 0 || path === '/') {\n                return true;\n            }\n\n            if (options.env === EnvironmentName.PRODUCTION) {\n                return (response?.status ?? 0) < 400;\n            }\n\n            return false;\n        },\n    });\n}\n"],"mappings":";;;;;AAiBA,SAAgBI,uBAAuBC,SAAgC;AACnE,QAAOL,OAAO;EACVM,SAASC,QAAQC,OAAOC,aAAa;GACjCR,aAAaO,MAAAA,IAAU;GACvB;GACAD,OAAOG,OAAOF,OAAOC,SAAAA,IAAa;GAClCF,OAAOI,IAAIH,OAAOC,SAAAA,IAAa;GAC/BF,OAAOK,OAAOJ,OAAOC,SAAAA,IAAa;GAClC;GACAF,OAAO,iBAAiBC,OAAOC,SAAAA,IAAa;GAC/C,CAACI,KAAK,IAAA;EACPC,MAAMC,MAAI;AACN,OAAIV,QAAQW,QAAQb,gBAAgBc,KAChCf,YAAAA,CAAYgB,KAAKH,KAAAA;;EAGzBI,KAAKX,OAAOC,UAAQ;GAChB,MAAMW,OAAOZ,MAAMY,QAAQ;AAC3B,OAAIA,KAAKC,WAAW,KAAKD,SAAS,IAC9B,QAAO;AAGX,OAAIf,QAAQW,QAAQb,gBAAgBmB,WAChC,SAAQb,UAAUG,UAAU,KAAK;AAGrC,UAAO;;EAEf,CAAA"}
+{"version":3,"file":"logger.mjs","names":["logger","getRequestIP","useLogger","EnvironmentName","createLoggerMiddleware","options","format","tokens","event","response","method","url","status","join","write","line","env","TEST","http","skip","path","length","PRODUCTION"],"sources":["../../../../../src/adapters/http/middleware/built-in/logger.ts"],"sourcesContent":["/*\n * Copyright (c) 2023.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport { logger } from '@routup/logger';\nimport type { Handler } from 'routup';\nimport { getRequestIP } from 'routup';\nimport { useLogger } from '@authup/server-kit';\nimport { EnvironmentName } from '@authup/kit';\n\ntype LoggerMiddlewareOptions = {\n    env: string\n};\n\nexport function createLoggerMiddleware(options: LoggerMiddlewareOptions) : Handler {\n    return logger({\n        format: (tokens, event, response) => [\n            getRequestIP(event) || '-',\n            '-',\n            tokens.method(event, response) ?? '-',\n            tokens.url(event, response) ?? '-',\n            tokens.status(event, response) ?? '-',\n            '-',\n            tokens['response-time'](event, response) ?? '-',\n        ].join(' '),\n        write(line) {\n            if (options.env !== EnvironmentName.TEST) {\n                useLogger().http(line);\n            }\n        },\n        skip(event, response): boolean {\n            const path = event.path || '';\n            if (path.length === 0 || path === '/') {\n                return true;\n            }\n\n            if (options.env === EnvironmentName.PRODUCTION) {\n                return (response?.status ?? 0) < 400;\n            }\n\n            return false;\n        },\n    });\n}\n"],"mappings":";;;;;;;;AAiBA,SAAgBI,uBAAuBC,SAAgC;CACnE,OAAOL,OAAO;EACVM,SAASC,QAAQC,OAAOC,aAAa;GACjCR,aAAaO,KAAAA,KAAU;GACvB;GACAD,OAAOG,OAAOF,OAAOC,QAAAA,KAAa;GAClCF,OAAOI,IAAIH,OAAOC,QAAAA,KAAa;GAC/BF,OAAOK,OAAOJ,OAAOC,QAAAA,KAAa;GAClC;GACAF,OAAO,gBAAgB,CAACC,OAAOC,QAAAA,KAAa;GAC/C,CAACI,KAAK,GAAA;EACPC,MAAMC,MAAI;GACN,IAAIV,QAAQW,QAAQb,gBAAgBc,MAChCf,UAAAA,CAAAA,CAAYgB,KAAKH,IAAAA;EAEzB;EACAI,KAAKX,OAAOC,UAAQ;GAChB,MAAMW,OAAOZ,MAAMY,QAAQ;GAC3B,IAAIA,KAAKC,WAAW,KAAKD,SAAS,KAC9B,OAAO;GAGX,IAAIf,QAAQW,QAAQb,gBAAgBmB,YAChC,QAAQb,UAAUG,UAAU,KAAK;GAGrC,OAAO;EACX;CACJ,CAAA;AACJ"}

package/dist/adapters/http/middleware/built-in/prometheus.d.ts

@@ -1,4 +1,4 @@
 import type { OptionsInput } from '@routup/prometheus';
-import type { Router } from 'routup';
-export declare function registerPrometheusMiddleware(router: Router, input?: OptionsInput): void;
+import type { App } from 'routup';
+export declare function registerPrometheusMiddleware(router: App, input?: OptionsInput): void;
 //# sourceMappingURL=prometheus.d.ts.map

package/dist/adapters/http/middleware/built-in/prometheus.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"prometheus.d.ts","sourceRoot":"","sources":["../../../../../src/adapters/http/middleware/built-in/prometheus.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAEvD,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAErC,wBAAgB,4BAA4B,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,YAAY,QAuBhF"}
+{"version":3,"file":"prometheus.d.ts","sourceRoot":"","sources":["../../../../../src/adapters/http/middleware/built-in/prometheus.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAEvD,OAAO,KAAK,EAAE,GAAG,EAAE,MAAM,QAAQ,CAAC;AAElC,wBAAgB,4BAA4B,CAAC,MAAM,EAAE,GAAG,EAAE,KAAK,CAAC,EAAE,YAAY,QAuB7E"}

package/dist/adapters/http/middleware/built-in/prometheus.mjs

@@ -1,3 +1,6 @@
+import "node:path";
+import "node:url";
+import.meta.url;
 import { prometheus } from "@routup/prometheus";
 //#region src/adapters/http/middleware/built-in/prometheus.ts
 function registerPrometheusMiddleware(router, input) {

package/dist/adapters/http/middleware/built-in/prometheus.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"prometheus.mjs","names":["prometheus","registerPrometheusMiddleware","router","input","options","skip","event","path","startsWith","use"],"sources":["../../../../../src/adapters/http/middleware/built-in/prometheus.ts"],"sourcesContent":["/*\n * Copyright (c) 2023.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport type { OptionsInput } from '@routup/prometheus';\nimport { prometheus } from '@routup/prometheus';\nimport type { Router } from 'routup';\n\nexport function registerPrometheusMiddleware(router: Router, input?: OptionsInput) {\n    let options : OptionsInput = {\n        skip(event) {\n            let { path } = event;\n            if (!path.startsWith('/')) {\n                path = `/${path}`;\n            }\n\n            return path.startsWith('/authorize') ||\n                path.startsWith('/token') ||\n                path.startsWith('/metrics') ||\n                path === '/';\n        },\n    };\n\n    if (input) {\n        options = {\n            ...options,\n            ...input,\n        };\n    }\n\n    router.use(prometheus(options));\n}\n"],"mappings":";;AAWA,SAAgBC,6BAA6BC,QAAgBC,OAAoB;CAC7E,IAAIC,UAAyB,EACzBC,KAAKC,OAAK;EACN,IAAI,EAAEC,SAASD;AACf,MAAI,CAACC,KAAKC,WAAW,IAAA,CACjBD,QAAO,IAAIA;AAGf,SAAOA,KAAKC,WAAW,aAAA,IACnBD,KAAKC,WAAW,SAAA,IAChBD,KAAKC,WAAW,WAAA,IAChBD,SAAS;IAErB;AAEA,KAAIJ,MACAC,WAAU;EACN,GAAGA;EACH,GAAGD;EACP;AAGJD,QAAOO,IAAIT,WAAWI,QAAAA,CAAAA"}
+{"version":3,"file":"prometheus.mjs","names":["prometheus","registerPrometheusMiddleware","router","input","options","skip","event","path","startsWith","use"],"sources":["../../../../../src/adapters/http/middleware/built-in/prometheus.ts"],"sourcesContent":["/*\n * Copyright (c) 2023.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport type { OptionsInput } from '@routup/prometheus';\nimport { prometheus } from '@routup/prometheus';\nimport type { App } from 'routup';\n\nexport function registerPrometheusMiddleware(router: App, input?: OptionsInput) {\n    let options : OptionsInput = {\n        skip(event) {\n            let { path } = event;\n            if (!path.startsWith('/')) {\n                path = `/${path}`;\n            }\n\n            return path.startsWith('/authorize') ||\n                path.startsWith('/token') ||\n                path.startsWith('/metrics') ||\n                path === '/';\n        },\n    };\n\n    if (input) {\n        options = {\n            ...options,\n            ...input,\n        };\n    }\n\n    router.use(prometheus(options));\n}\n"],"mappings":";;;;;AAWA,SAAgBC,6BAA6BC,QAAaC,OAAoB;CAC1E,IAAIC,UAAyB,EACzBC,KAAKC,OAAK;EACN,IAAI,EAAEC,SAASD;EACf,IAAI,CAACC,KAAKC,WAAW,GAAA,GACjBD,OAAO,IAAIA;EAGf,OAAOA,KAAKC,WAAW,YAAA,KACnBD,KAAKC,WAAW,QAAA,KAChBD,KAAKC,WAAW,UAAA,KAChBD,SAAS;CACjB,EACJ;CAEA,IAAIJ,OACAC,UAAU;EACN,GAAGA;EACH,GAAGD;CACP;CAGJD,OAAOO,IAAIT,WAAWI,OAAAA,CAAAA;AAC1B"}

package/dist/adapters/http/middleware/built-in/rate-limit.d.ts

@@ -1,4 +1,4 @@
 import type { OptionsInput } from '@routup/rate-limit';
-import type { Router } from 'routup';
-export declare function registerRateLimitMiddleware(router: Router, input?: OptionsInput): void;
+import type { App } from 'routup';
+export declare function registerRateLimitMiddleware(router: App, input?: OptionsInput): void;
 //# sourceMappingURL=rate-limit.d.ts.map

package/dist/adapters/http/middleware/built-in/rate-limit.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"rate-limit.d.ts","sourceRoot":"","sources":["../../../../../src/adapters/http/middleware/built-in/rate-limit.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAEvD,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAIrC,wBAAgB,2BAA2B,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,YAAY,QAyB/E"}
+{"version":3,"file":"rate-limit.d.ts","sourceRoot":"","sources":["../../../../../src/adapters/http/middleware/built-in/rate-limit.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAEvD,OAAO,KAAK,EAAE,GAAG,EAAE,MAAM,QAAQ,CAAC;AAIlC,wBAAgB,2BAA2B,CAAC,MAAM,EAAE,GAAG,EAAE,KAAK,CAAC,EAAE,YAAY,QAyB5E"}

package/dist/adapters/http/middleware/built-in/rate-limit.mjs

@@ -1,3 +1,6 @@
+import "node:path";
+import "node:url";
+import.meta.url;
 import { useRequestIdentity } from "../../request/helpers/identity.mjs";
 import "../../request/index.mjs";
 import { merge } from "smob";

package/dist/adapters/http/middleware/built-in/rate-limit.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"rate-limit.mjs","names":["rateLimit","merge","useRequestIdentity","registerRateLimitMiddleware","router","input","options","max","event","identity","type","windowMs","use"],"sources":["../../../../../src/adapters/http/middleware/built-in/rate-limit.ts"],"sourcesContent":["/*\n * Copyright (c) 2023.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport type { OptionsInput } from '@routup/rate-limit';\nimport { rateLimit } from '@routup/rate-limit';\nimport type { Router } from 'routup';\nimport { merge } from 'smob';\nimport { useRequestIdentity } from '../../request/index.ts';\n\nexport function registerRateLimitMiddleware(router: Router, input?: OptionsInput) {\n    let options : OptionsInput = {\n        max(event) {\n            const identity = useRequestIdentity(event);\n            if (!identity) {\n                return 60 * 20; // 20 req. p. sec\n            }\n\n            switch (identity.type) {\n                case 'robot':\n                case 'client': {\n                    return 60 * 5_000; // 1000 req p. sec\n                }\n                case 'user':\n                default: {\n                    return 60 * 100; // 100 req p. sec\n                }\n            }\n        },\n        windowMs: 60 * 1000, // 60 sec\n    };\n\n    options = merge(input || {}, options);\n\n    router.use(rateLimit(options));\n}\n"],"mappings":";;;;;AAaA,SAAgBG,4BAA4BC,QAAgBC,OAAoB;CAC5E,IAAIC,UAAyB;EACzBC,IAAIC,OAAK;GACL,MAAMC,WAAWP,mBAAmBM,MAAAA;AACpC,OAAI,CAACC,SACD,QAAO;AAGX,WAAQA,SAASC,MAAjB;IACI,KAAK;IACL,KAAK,SACD,QAAO,KAAK;IAGhB,QACI,QAAO;;;EAInBC,UAAU,KAAK;EACnB;AAEAL,WAAUL,MAAMI,SAAS,EAAC,EAAGC,QAAAA;AAE7BF,QAAOQ,IAAIZ,UAAUM,QAAAA,CAAAA"}
+{"version":3,"file":"rate-limit.mjs","names":["rateLimit","merge","useRequestIdentity","registerRateLimitMiddleware","router","input","options","max","event","identity","type","windowMs","use"],"sources":["../../../../../src/adapters/http/middleware/built-in/rate-limit.ts"],"sourcesContent":["/*\n * Copyright (c) 2023.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport type { OptionsInput } from '@routup/rate-limit';\nimport { rateLimit } from '@routup/rate-limit';\nimport type { App } from 'routup';\nimport { merge } from 'smob';\nimport { useRequestIdentity } from '../../request/index.ts';\n\nexport function registerRateLimitMiddleware(router: App, input?: OptionsInput) {\n    let options : OptionsInput = {\n        max(event) {\n            const identity = useRequestIdentity(event);\n            if (!identity) {\n                return 60 * 20; // 20 req. p. sec\n            }\n\n            switch (identity.type) {\n                case 'robot':\n                case 'client': {\n                    return 60 * 5_000; // 1000 req p. sec\n                }\n                case 'user':\n                default: {\n                    return 60 * 100; // 100 req p. sec\n                }\n            }\n        },\n        windowMs: 60 * 1000, // 60 sec\n    };\n\n    options = merge(input || {}, options);\n\n    router.use(rateLimit(options));\n}\n"],"mappings":";;;;;;;;AAaA,SAAgBG,4BAA4BC,QAAaC,OAAoB;CACzE,IAAIC,UAAyB;EACzBC,IAAIC,OAAK;GACL,MAAMC,WAAWP,mBAAmBM,KAAAA;GACpC,IAAI,CAACC,UACD,OAAO;GAGX,QAAQA,SAASC,MAAjB;IACI,KAAK;IACL,KAAK,UACD,OAAO,KAAK;IAGhB,SACI,OAAO;GAEf;EACJ;EACAC,UAAU,KAAK;CACnB;CAEAL,UAAUL,MAAMI,SAAS,CAAC,GAAGC,OAAAA;CAE7BF,OAAOQ,IAAIZ,UAAUM,OAAAA,CAAAA;AACzB"}

package/dist/adapters/http/middleware/built-in/realm-resolver/factory.d.ts

@@ -0,0 +1,4 @@
+import type { Handler } from 'routup';
+import type { RealmResolverMiddlewareContext } from './types.ts';
+export declare function createRealmResolverMiddleware(ctx: RealmResolverMiddlewareContext): Handler;
+//# sourceMappingURL=factory.d.ts.map

package/dist/adapters/http/middleware/built-in/realm-resolver/factory.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"factory.d.ts","sourceRoot":"","sources":["../../../../../../src/adapters/http/middleware/built-in/realm-resolver/factory.ts"],"names":[],"mappings":"AAQA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,QAAQ,CAAC;AAEtC,OAAO,KAAK,EAAE,8BAA8B,EAAE,MAAM,YAAY,CAAC;AAEjE,wBAAgB,6BAA6B,CAAC,GAAG,EAAE,8BAA8B,GAAG,OAAO,CAO1F"}

package/dist/adapters/http/middleware/built-in/realm-resolver/factory.mjs

@@ -0,0 +1,17 @@
+import "node:path";
+import "node:url";
+import.meta.url;
+import { RealmResolverMiddleware } from "./module.mjs";
+import { defineCoreHandler } from "routup";
+//#region src/adapters/http/middleware/built-in/realm-resolver/factory.ts
+function createRealmResolverMiddleware(ctx) {
+	const middleware = new RealmResolverMiddleware(ctx);
+	return defineCoreHandler(async (event) => {
+		await middleware.run(event);
+		return event.next();
+	});
+}
+//#endregion
+export { createRealmResolverMiddleware };
+
+//# sourceMappingURL=factory.mjs.map

package/dist/adapters/http/middleware/built-in/realm-resolver/factory.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"factory.mjs","names":["defineCoreHandler","RealmResolverMiddleware","createRealmResolverMiddleware","ctx","middleware","event","run","next"],"sources":["../../../../../../src/adapters/http/middleware/built-in/realm-resolver/factory.ts"],"sourcesContent":["/*\n * Copyright (c) 2026.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport { defineCoreHandler } from 'routup';\nimport type { Handler } from 'routup';\nimport { RealmResolverMiddleware } from './module.ts';\nimport type { RealmResolverMiddlewareContext } from './types.ts';\n\nexport function createRealmResolverMiddleware(ctx: RealmResolverMiddlewareContext): Handler {\n    const middleware = new RealmResolverMiddleware(ctx);\n\n    return defineCoreHandler(async (event) => {\n        await middleware.run(event);\n        return event.next();\n    });\n}\n"],"mappings":";;;;;;AAYA,SAAgBE,8BAA8BC,KAAmC;CAC7E,MAAMC,aAAa,IAAIH,wBAAwBE,GAAAA;CAE/C,OAAOH,kBAAkB,OAAOK,UAAAA;EAC5B,MAAMD,WAAWE,IAAID,KAAAA;EACrB,OAAOA,MAAME,KAAI;CACrB,CAAA;AACJ"}

package/dist/adapters/http/middleware/built-in/realm-resolver/index.d.ts

@@ -0,0 +1,4 @@
+export * from './module.ts';
+export * from './factory.ts';
+export * from './types.ts';
+//# sourceMappingURL=index.d.ts.map

package/dist/adapters/http/middleware/built-in/realm-resolver/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../../src/adapters/http/middleware/built-in/realm-resolver/index.ts"],"names":[],"mappings":"AAOA,cAAc,aAAa,CAAC;AAC5B,cAAc,cAAc,CAAC;AAC7B,cAAc,YAAY,CAAC"}

package/dist/adapters/http/middleware/built-in/realm-resolver/index.mjs

@@ -0,0 +1,6 @@
+import "node:path";
+import "node:url";
+import.meta.url;
+import { RealmResolverMiddleware } from "./module.mjs";
+import { createRealmResolverMiddleware } from "./factory.mjs";
+export { RealmResolverMiddleware, createRealmResolverMiddleware };

package/dist/adapters/http/middleware/built-in/realm-resolver/module.d.ts

@@ -0,0 +1,9 @@
+import type { IAppEvent } from 'routup';
+import type { IRealmRepository } from '../../../../../core/index.ts';
+import type { RealmResolverMiddlewareContext } from './types.ts';
+export declare class RealmResolverMiddleware {
+    protected realmRepository: IRealmRepository;
+    constructor(ctx: RealmResolverMiddlewareContext);
+    run(event: IAppEvent): Promise<void>;
+}
+//# sourceMappingURL=module.d.ts.map

package/dist/adapters/http/middleware/built-in/realm-resolver/module.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"module.d.ts","sourceRoot":"","sources":["../../../../../../src/adapters/http/middleware/built-in/realm-resolver/module.ts"],"names":[],"mappings":"AASA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,QAAQ,CAAC;AACxC,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,8BAA8B,CAAC;AAErE,OAAO,KAAK,EAAE,8BAA8B,EAAE,MAAM,YAAY,CAAC;AAEjE,qBAAa,uBAAuB;IAChC,SAAS,CAAC,eAAe,EAAE,gBAAgB,CAAC;gBAEhC,GAAG,EAAE,8BAA8B;IAIzC,GAAG,CAAC,KAAK,EAAE,SAAS;CAkB7B"}

package/dist/adapters/http/middleware/built-in/realm-resolver/module.mjs

@@ -0,0 +1,29 @@
+import "node:path";
+import "node:url";
+import.meta.url;
+import { setRequestRealmID } from "../../../request/helpers/realm-id.mjs";
+import "../../../request/index.mjs";
+import { isUUID } from "@authup/kit";
+import { EntityNotFoundError } from "@authup/errors";
+//#region src/adapters/http/middleware/built-in/realm-resolver/module.ts
+var RealmResolverMiddleware = class {
+	realmRepository;
+	constructor(ctx) {
+		this.realmRepository = ctx.realmRepository;
+	}
+	async run(event) {
+		const value = event.params.realmId;
+		if (typeof value !== "string" || !value) return;
+		if (isUUID(value)) {
+			setRequestRealmID(event, value);
+			return;
+		}
+		const realm = await this.realmRepository.resolve(value);
+		if (!realm) throw new EntityNotFoundError(`realm '${value}' not found`);
+		setRequestRealmID(event, realm.id);
+	}
+};
+//#endregion
+export { RealmResolverMiddleware };
+
+//# sourceMappingURL=module.mjs.map

package/dist/adapters/http/middleware/built-in/realm-resolver/module.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"module.mjs","names":["isUUID","EntityNotFoundError","setRequestRealmID","RealmResolverMiddleware","realmRepository","ctx","run","event","value","params","realmId","realm","resolve","id"],"sources":["../../../../../../src/adapters/http/middleware/built-in/realm-resolver/module.ts"],"sourcesContent":["/*\n * Copyright (c) 2026.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport { isUUID } from '@authup/kit';\nimport { EntityNotFoundError } from '@authup/errors';\nimport type { IAppEvent } from 'routup';\nimport type { IRealmRepository } from '../../../../../core/index.ts';\nimport { setRequestRealmID } from '../../../request/index.ts';\nimport type { RealmResolverMiddlewareContext } from './types.ts';\n\nexport class RealmResolverMiddleware {\n    protected realmRepository: IRealmRepository;\n\n    constructor(ctx: RealmResolverMiddlewareContext) {\n        this.realmRepository = ctx.realmRepository;\n    }\n\n    async run(event: IAppEvent) {\n        const value = event.params.realmId;\n        if (typeof value !== 'string' || !value) {\n            return;\n        }\n\n        if (isUUID(value)) {\n            setRequestRealmID(event, value);\n            return;\n        }\n\n        const realm = await this.realmRepository.resolve(value);\n        if (!realm) {\n            throw new EntityNotFoundError(`realm '${value}' not found`);\n        }\n\n        setRequestRealmID(event, realm.id);\n    }\n}\n"],"mappings":";;;;;;;;AAcA,IAAaG,0BAAb,MAAaA;CACCC;CAEV,YAAYC,KAAqC;EAC7C,KAAKD,kBAAkBC,IAAID;CAC/B;CAEA,MAAME,IAAIC,OAAkB;EACxB,MAAMC,QAAQD,MAAME,OAAOC;EAC3B,IAAI,OAAOF,UAAU,YAAY,CAACA,OAC9B;EAGJ,IAAIR,OAAOQ,KAAAA,GAAQ;GACfN,kBAAkBK,OAAOC,KAAAA;GACzB;EACJ;EAEA,MAAMG,QAAQ,MAAM,KAAKP,gBAAgBQ,QAAQJ,KAAAA;EACjD,IAAI,CAACG,OACD,MAAM,IAAIV,oBAAoB,UAAUO,MAAM,YAAY;EAG9DN,kBAAkBK,OAAOI,MAAME,EAAE;CACrC;AACJ"}

package/dist/adapters/http/middleware/built-in/realm-resolver/types.d.ts

@@ -0,0 +1,5 @@
+import type { IRealmRepository } from '../../../../../core/index.ts';
+export type RealmResolverMiddlewareContext = {
+    realmRepository: IRealmRepository;
+};
+//# sourceMappingURL=types.d.ts.map

package/dist/adapters/http/middleware/built-in/realm-resolver/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../../../../src/adapters/http/middleware/built-in/realm-resolver/types.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,8BAA8B,CAAC;AAErE,MAAM,MAAM,8BAA8B,GAAG;IACzC,eAAe,EAAE,gBAAgB,CAAC;CACrC,CAAC"}

package/dist/adapters/http/middleware/built-in/realm-resolver/types.mjs

@@ -0,0 +1,4 @@
+import "node:path";
+import "node:url";
+import.meta.url;
+export {};