@authup/server-core 1.0.0-beta.48 → 1.0.0-beta.49

package/dist/app/modules/config/validator.mjs

@@ -0,0 +1,72 @@
+import "node:path";
+import "node:url";
+import.meta.url;
+import { expandToOrigins } from "./origins.mjs";
+import { isObject } from "@authup/kit";
+import { Container } from "validup";
+import { createValidator } from "@validup/zod";
+import { z } from "zod";
+//#region src/app/modules/config/validator.ts
+var ConfigValidator = class extends Container {
+	initialize() {
+		super.initialize();
+		const stringValidator = createValidator(z.string());
+		const booleanValidator = createValidator(z.boolean());
+		const nonNegativeNumberValidator = createValidator(z.number().nonnegative());
+		const secretValidator = createValidator(z.string().min(3).max(256));
+		const middlewareValidator = createValidator(z.boolean().or(z.record(z.string(), z.any())));
+		const serviceValidator = createValidator(z.string().or(z.boolean()).or(z.custom((value) => isObject(value))));
+		const validators = {
+			env: stringValidator,
+			rootPath: stringValidator,
+			writableDirectoryPath: stringValidator,
+			logger: booleanValidator,
+			db: createValidator(z.custom((value) => isObject(value))),
+			redis: serviceValidator,
+			smtp: serviceValidator,
+			port: nonNegativeNumberValidator,
+			host: stringValidator,
+			publicUrl: createValidator(z.url()),
+			trustedOrigins: createValidator(z.array(z.string().refine((value) => {
+				try {
+					expandToOrigins(value);
+					return true;
+				} catch {
+					return false;
+				}
+			}, "must be a http(s) origin or a bare host[:port]"))),
+			middlewareBody: middlewareValidator,
+			middlewareCors: middlewareValidator,
+			middlewareCookie: middlewareValidator,
+			middlewareQuery: middlewareValidator,
+			middlewarePrometheus: middlewareValidator,
+			middlewareRateLimit: middlewareValidator,
+			middlewareSwagger: booleanValidator,
+			tokenAccessMaxAge: nonNegativeNumberValidator,
+			tokenRefreshMaxAge: nonNegativeNumberValidator,
+			registrationEnabled: booleanValidator,
+			emailVerificationEnabled: booleanValidator,
+			passwordRecoveryEnabled: booleanValidator,
+			clientAuthBasic: booleanValidator,
+			clientSystemEnabled: booleanValidator,
+			clientSystemSecret: secretValidator,
+			clientSystemSecretReset: booleanValidator,
+			userAuthBasic: booleanValidator,
+			userAdminEnabled: booleanValidator,
+			userAdminPassword: secretValidator,
+			userAdminPasswordReset: booleanValidator,
+			robotAuthBasic: booleanValidator,
+			robotAdminEnabled: booleanValidator,
+			robotAdminSecret: secretValidator,
+			robotAdminSecretReset: booleanValidator,
+			permissions: createValidator(z.string().or(z.array(z.string()))),
+			permissionsDefaultPolicyAssignment: booleanValidator
+		};
+		const keys = Object.keys(validators);
+		for (const key of keys) this.mount(key, { optional: true }, validators[key]);
+	}
+};
+//#endregion
+export { ConfigValidator };
+
+//# sourceMappingURL=validator.mjs.map

package/dist/app/modules/config/validator.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"validator.mjs","names":["isObject","createValidator","Container","z","expandToOrigins","ConfigValidator","initialize","stringValidator","string","booleanValidator","boolean","nonNegativeNumberValidator","number","nonnegative","secretValidator","min","max","middlewareValidator","or","record","any","serviceValidator","custom","value","validators","env","rootPath","writableDirectoryPath","logger","db","redis","smtp","port","host","publicUrl","url","trustedOrigins","array","refine","middlewareBody","middlewareCors","middlewareCookie","middlewareQuery","middlewarePrometheus","middlewareRateLimit","middlewareSwagger","tokenAccessMaxAge","tokenRefreshMaxAge","registrationEnabled","emailVerificationEnabled","passwordRecoveryEnabled","clientAuthBasic","clientSystemEnabled","clientSystemSecret","clientSystemSecretReset","userAuthBasic","userAdminEnabled","userAdminPassword","userAdminPasswordReset","robotAuthBasic","robotAdminEnabled","robotAdminSecret","robotAdminSecretReset","permissions","permissionsDefaultPolicyAssignment","keys","Object","key","mount","optional"],"sources":["../../../../src/app/modules/config/validator.ts"],"sourcesContent":["/*\n * Copyright (c) 2026.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport { isObject } from '@authup/kit';\nimport { createValidator } from '@validup/zod';\nimport type { BetterSqlite3ConnectionOptions } from 'typeorm/driver/better-sqlite3/BetterSqlite3ConnectionOptions.js';\nimport type { MysqlConnectionOptions } from 'typeorm/driver/mysql/MysqlConnectionOptions.js';\nimport type { PostgresConnectionOptions } from 'typeorm/driver/postgres/PostgresConnectionOptions.js';\nimport type { ValidatorDescriptor } from 'validup';\nimport { Container } from 'validup';\nimport { z } from 'zod';\nimport { expandToOrigins } from './origins.ts';\nimport type { Config } from './types.ts';\n\nexport class ConfigValidator extends Container<Config> {\n    protected override initialize() {\n        super.initialize();\n\n        const stringValidator = createValidator(z.string());\n        const booleanValidator = createValidator(z.boolean());\n        const nonNegativeNumberValidator = createValidator(z.number().nonnegative());\n        const secretValidator = createValidator(z.string().min(3).max(256));\n        const middlewareValidator = createValidator(\n            z.boolean().or(z.record(z.string(), z.any())),\n        );\n        const serviceValidator = createValidator(\n            z.string()\n                .or(z.boolean())\n                .or(z.custom<Record<string, any>>((value) => isObject(value))),\n        );\n\n        // Record<keyof Config, ...> is the compile-time exhaustiveness\n        // guard: a Config key without a validator here fails the build\n        // instead of being silently stripped by run().\n        const validators: Record<keyof Config, ValidatorDescriptor> = {\n            env: stringValidator,\n            rootPath: stringValidator,\n            writableDirectoryPath: stringValidator,\n\n            logger: booleanValidator,\n            db: createValidator(\n                z.custom<MysqlConnectionOptions | PostgresConnectionOptions | BetterSqlite3ConnectionOptions>(\n                    (value) => isObject(value),\n                ),\n            ),\n            redis: serviceValidator,\n            smtp: serviceValidator,\n\n            port: nonNegativeNumberValidator,\n            host: stringValidator,\n            publicUrl: createValidator(z.url()),\n            trustedOrigins: createValidator(\n                z.array(z.string().refine((value) => {\n                    try {\n                        expandToOrigins(value);\n                        return true;\n                    } catch {\n                        return false;\n                    }\n                }, 'must be a http(s) origin or a bare host[:port]')),\n            ),\n\n            middlewareBody: middlewareValidator,\n            middlewareCors: middlewareValidator,\n            middlewareCookie: middlewareValidator,\n            middlewareQuery: middlewareValidator,\n            middlewarePrometheus: middlewareValidator,\n            middlewareRateLimit: middlewareValidator,\n            middlewareSwagger: booleanValidator,\n\n            tokenAccessMaxAge: nonNegativeNumberValidator,\n            tokenRefreshMaxAge: nonNegativeNumberValidator,\n            registrationEnabled: booleanValidator,\n            emailVerificationEnabled: booleanValidator,\n            passwordRecoveryEnabled: booleanValidator,\n\n            clientAuthBasic: booleanValidator,\n            clientSystemEnabled: booleanValidator,\n            clientSystemSecret: secretValidator,\n            clientSystemSecretReset: booleanValidator,\n\n            userAuthBasic: booleanValidator,\n            userAdminEnabled: booleanValidator,\n            userAdminPassword: secretValidator,\n            userAdminPasswordReset: booleanValidator,\n\n            robotAuthBasic: booleanValidator,\n            robotAdminEnabled: booleanValidator,\n            robotAdminSecret: secretValidator,\n            robotAdminSecretReset: booleanValidator,\n\n            permissions: createValidator(\n                z.string().or(z.array(z.string())),\n            ),\n            permissionsDefaultPolicyAssignment: booleanValidator,\n        };\n\n        const keys = Object.keys(validators) as (keyof Config)[];\n        for (const key of keys) {\n            this.mount(key, { optional: true }, validators[key]);\n        }\n    }\n}\n"],"mappings":";;;;;;;;;AAkBA,IAAaK,kBAAb,cAAqCH,UAAAA;CACdI,aAAa;EAC5B,MAAMA,WAAAA;EAEN,MAAMC,kBAAkBN,gBAAgBE,EAAEK,OAAM,CAAA;EAChD,MAAMC,mBAAmBR,gBAAgBE,EAAEO,QAAO,CAAA;EAClD,MAAMC,6BAA6BV,gBAAgBE,EAAES,OAAM,CAAA,CAAGC,YAAW,CAAA;EACzE,MAAMC,kBAAkBb,gBAAgBE,EAAEK,OAAM,CAAA,CAAGO,IAAI,CAAA,CAAA,CAAGC,IAAI,GAAA,CAAA;EAC9D,MAAMC,sBAAsBhB,gBACxBE,EAAEO,QAAO,CAAA,CAAGQ,GAAGf,EAAEgB,OAAOhB,EAAEK,OAAM,GAAIL,EAAEiB,IAAG,CAAA,CAAA,CAAA;EAE7C,MAAMC,mBAAmBpB,gBACrBE,EAAEK,OAAM,CAAA,CACHU,GAAGf,EAAEO,QAAO,CAAA,CAAA,CACZQ,GAAGf,EAAEmB,QAA6BC,UAAUvB,SAASuB,KAAAA,CAAAA,CAAAA,CAAAA;EAM9D,MAAMC,aAAwD;GAC1DC,KAAKlB;GACLmB,UAAUnB;GACVoB,uBAAuBpB;GAEvBqB,QAAQnB;GACRoB,IAAI5B,gBACAE,EAAEmB,QACGC,UAAUvB,SAASuB,KAAAA,CAAAA,CAAAA;GAG5BO,OAAOT;GACPU,MAAMV;GAENW,MAAMrB;GACNsB,MAAM1B;GACN2B,WAAWjC,gBAAgBE,EAAEgC,IAAG,CAAA;GAChCC,gBAAgBnC,gBACZE,EAAEkC,MAAMlC,EAAEK,OAAM,CAAA,CAAG8B,QAAQf,UAAAA;IACvB,IAAI;KACAnB,gBAAgBmB,KAAAA;KAChB,OAAO;IACX,QAAQ;KACJ,OAAO;IACX;GACJ,GAAG,gDAAA,CAAA,CAAA;GAGPgB,gBAAgBtB;GAChBuB,gBAAgBvB;GAChBwB,kBAAkBxB;GAClByB,iBAAiBzB;GACjB0B,sBAAsB1B;GACtB2B,qBAAqB3B;GACrB4B,mBAAmBpC;GAEnBqC,mBAAmBnC;GACnBoC,oBAAoBpC;GACpBqC,qBAAqBvC;GACrBwC,0BAA0BxC;GAC1ByC,yBAAyBzC;GAEzB0C,iBAAiB1C;GACjB2C,qBAAqB3C;GACrB4C,oBAAoBvC;GACpBwC,yBAAyB7C;GAEzB8C,eAAe9C;GACf+C,kBAAkB/C;GAClBgD,mBAAmB3C;GACnB4C,wBAAwBjD;GAExBkD,gBAAgBlD;GAChBmD,mBAAmBnD;GACnBoD,kBAAkB/C;GAClBgD,uBAAuBrD;GAEvBsD,aAAa9D,gBACTE,EAAEK,OAAM,CAAA,CAAGU,GAAGf,EAAEkC,MAAMlC,EAAEK,OAAM,CAAA,CAAA,CAAA;GAElCwD,oCAAoCvD;EACxC;EAEA,MAAMwD,OAAOC,OAAOD,KAAKzC,UAAAA;EACzB,KAAK,MAAM2C,OAAOF,MACd,KAAKG,MAAMD,KAAK,EAAEE,UAAU,KAAK,GAAG7C,WAAW2C,IAAI;CAE3D;AACJ"}

package/dist/app/modules/index.mjs

@@ -5,8 +5,8 @@ import { AuthenticationInjectionKey } from "./authentication/constants.mjs";
 import { CacheInjectionKey } from "./cache/constants.mjs";
 import { ModuleName } from "./constants.mjs";
 import { ConfigEnvironmentVariableName, ConfigInjectionKey } from "./config/constants.mjs";
+import { expandToOrigins, getAppOrigins } from "./config/origins.mjs";
 import { ConfigModule } from "./config/module.mjs";
-import { getAppOrigins } from "./config/origins.mjs";
 import "./config/index.mjs";
 import { CacheModule } from "./cache/module.mjs";
 import "./cache/index.mjs";
@@ -72,4 +72,4 @@ import { ProvisionerModule } from "./provisioning/module.mjs";
 import "./provisioning/index.mjs";
 import { RuntimeModule } from "./runtime/module.mjs";
 import "./runtime/index.mjs";
-export { AuthenticationInjectionKey, AuthenticationModule, CacheInjectionKey, CacheModule, ClientIdentityRepository, ClientPermissionRepositoryAdapter, ClientRepositoryAdapter, ClientRoleRepositoryAdapter, ClientScopeRepositoryAdapter, ComponentsModule, CompositeProvisioningSource, ConfigEnvironmentVariableName, ConfigInjectionKey, ConfigModule, DatabaseInjectionKey, DatabaseModule, DefaultProvisioningSource, FileProvisioningSource, HTTPInjectionKey, HTTPModule, IdentityInjectionKey, IdentityModule, IdentityProviderAccountRepository, IdentityProviderAttributeMappingRepository, IdentityProviderPermissionMappingRepository, IdentityProviderRepositoryAdapter, IdentityProviderRoleMappingRepository, IdentityProviderRoleMappingRepositoryAdapter, LDAPInjectionKey, LdapModule, LoggerInjectionKey, LoggerModule, MailInjectionKey, MailModule, MailTemplateRendererInjectionKey, ModuleName, OAuth2InjectionToken, OAuth2Module, PermissionDatabaseProvider, PermissionPolicyRepositoryAdapter, PermissionRepositoryAdapter, PolicyRepositoryAdapter, ProvisionerModule, RealmRepositoryAdapter, RobotIdentityRepository, RobotPermissionRepositoryAdapter, RobotRepositoryAdapter, RobotRoleRepositoryAdapter, RoleAttributeRepositoryAdapter, RolePermissionRepositoryAdapter, RoleRepositoryAdapter, RuntimeModule, ScopeRepositoryAdapter, SessionRepository, UserAttributeRepositoryAdapter, UserIdentityRepository, UserPermissionRepositoryAdapter, UserRepositoryAdapter, UserRoleRepositoryAdapter, getAppOrigins };
+export { AuthenticationInjectionKey, AuthenticationModule, CacheInjectionKey, CacheModule, ClientIdentityRepository, ClientPermissionRepositoryAdapter, ClientRepositoryAdapter, ClientRoleRepositoryAdapter, ClientScopeRepositoryAdapter, ComponentsModule, CompositeProvisioningSource, ConfigEnvironmentVariableName, ConfigInjectionKey, ConfigModule, DatabaseInjectionKey, DatabaseModule, DefaultProvisioningSource, FileProvisioningSource, HTTPInjectionKey, HTTPModule, IdentityInjectionKey, IdentityModule, IdentityProviderAccountRepository, IdentityProviderAttributeMappingRepository, IdentityProviderPermissionMappingRepository, IdentityProviderRepositoryAdapter, IdentityProviderRoleMappingRepository, IdentityProviderRoleMappingRepositoryAdapter, LDAPInjectionKey, LdapModule, LoggerInjectionKey, LoggerModule, MailInjectionKey, MailModule, MailTemplateRendererInjectionKey, ModuleName, OAuth2InjectionToken, OAuth2Module, PermissionDatabaseProvider, PermissionPolicyRepositoryAdapter, PermissionRepositoryAdapter, PolicyRepositoryAdapter, ProvisionerModule, RealmRepositoryAdapter, RobotIdentityRepository, RobotPermissionRepositoryAdapter, RobotRepositoryAdapter, RobotRoleRepositoryAdapter, RoleAttributeRepositoryAdapter, RolePermissionRepositoryAdapter, RoleRepositoryAdapter, RuntimeModule, ScopeRepositoryAdapter, SessionRepository, UserAttributeRepositoryAdapter, UserIdentityRepository, UserPermissionRepositoryAdapter, UserRepositoryAdapter, UserRoleRepositoryAdapter, expandToOrigins, getAppOrigins };

package/dist/cli/module.mjs

@@ -42,7 +42,7 @@ async function createCLIEntryPointCommand() {
 			}
 		},
 		async setup(context) {
-			normalizeConfig(await readConfigRaw({
+			await normalizeConfig(await readConfigRaw({
 				env: true,
 				fs: {
 					cwd: context.args.configDirectory,

package/dist/cli/module.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"module.mjs","names":["defineCommand","fs","path","process","normalizeConfig","readConfigRaw","defineCLIHealthCheckCommand","defineCLIMigrationCommand","defineCLIResetCommand","defineCLIStartCommand","createCLIEntryPointCommand","pkgRaw","promises","readFile","join","cwd","encoding","pkg","JSON","parse","meta","name","version","description","subCommands","healthcheck","migration","reset","start","args","configDirectory","type","alias","configFile","setup","context","raw","env","file"],"sources":["../../src/cli/module.ts"],"sourcesContent":["/*\n * Copyright (c) 2024.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport { defineCommand } from 'citty';\nimport fs from 'node:fs';\nimport path from 'node:path';\nimport process from 'node:process';\nimport { normalizeConfig } from '../app/modules/config/normalize.ts';\nimport { readConfigRaw } from '../app/modules/config/read/index.ts';\nimport {\n    defineCLIHealthCheckCommand,\n    defineCLIMigrationCommand,\n    defineCLIResetCommand,\n    defineCLIStartCommand,\n} from './commands/index.ts';\n\nexport async function createCLIEntryPointCommand() {\n    const pkgRaw = await fs.promises.readFile(\n        path.join(process.cwd(), 'package.json'),\n        { encoding: 'utf8' },\n    );\n    const pkg = JSON.parse(pkgRaw);\n\n    return defineCommand({\n        meta: {\n            name: pkg.name,\n            version: pkg.version,\n            description: pkg.description,\n        },\n        subCommands: {\n            healthcheck: defineCLIHealthCheckCommand(),\n            migration: defineCLIMigrationCommand(),\n            reset: defineCLIResetCommand(),\n            start: defineCLIStartCommand(),\n        },\n        args: {\n            configDirectory: {\n                type: 'string',\n                description: 'Config directory path',\n                alias: 'cD',\n            },\n            configFile: {\n                type: 'string',\n                description: 'Name of one or more configuration files.',\n                alias: 'cF',\n            },\n        },\n        async setup(context) {\n            const raw = await readConfigRaw({\n                env: true,\n                fs: {\n                    cwd: context.args.configDirectory,\n                    file: context.args.configFile,\n                },\n            });\n\n            normalizeConfig(raw);\n        },\n    });\n}\n"],"mappings":";;;;;;;;;;;;;;;;AAoBA,eAAsBU,6BAAAA;CAClB,MAAMC,SAAS,MAAMV,GAAGW,SAASC,SAC7BX,KAAKY,KAAKX,QAAQY,IAAG,GAAI,cAAA,GACzB,EAAEC,UAAU,OAAO,CAAA;CAEvB,MAAMC,MAAMC,KAAKC,MAAMR,MAAAA;CAEvB,OAAOX,cAAc;EACjBoB,MAAM;GACFC,MAAMJ,IAAII;GACVC,SAASL,IAAIK;GACbC,aAAaN,IAAIM;EACrB;EACAC,aAAa;GACTC,aAAanB,4BAAAA;GACboB,WAAWnB,0BAAAA;GACXoB,OAAOnB,sBAAAA;GACPoB,OAAOnB,sBAAAA;EACX;EACAoB,MAAM;GACFC,iBAAiB;IACbC,MAAM;IACNR,aAAa;IACbS,OAAO;GACX;GACAC,YAAY;IACRF,MAAM;IACNR,aAAa;IACbS,OAAO;GACX;EACJ;EACA,MAAME,MAAMC,SAAO;GASf/B,gBAAgBgC,MARE/B,cAAc;IAC5BgC,KAAK;IACLpC,IAAI;KACAc,KAAKoB,QAAQN,KAAKC;KAClBQ,MAAMH,QAAQN,KAAKI;IACvB;GACJ,CAAA,CAEgBG;EACpB;CACJ,CAAA;AACJ"}
+{"version":3,"file":"module.mjs","names":["defineCommand","fs","path","process","normalizeConfig","readConfigRaw","defineCLIHealthCheckCommand","defineCLIMigrationCommand","defineCLIResetCommand","defineCLIStartCommand","createCLIEntryPointCommand","pkgRaw","promises","readFile","join","cwd","encoding","pkg","JSON","parse","meta","name","version","description","subCommands","healthcheck","migration","reset","start","args","configDirectory","type","alias","configFile","setup","context","raw","env","file"],"sources":["../../src/cli/module.ts"],"sourcesContent":["/*\n * Copyright (c) 2024.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport { defineCommand } from 'citty';\nimport fs from 'node:fs';\nimport path from 'node:path';\nimport process from 'node:process';\nimport { normalizeConfig } from '../app/modules/config/normalize.ts';\nimport { readConfigRaw } from '../app/modules/config/read/index.ts';\nimport {\n    defineCLIHealthCheckCommand,\n    defineCLIMigrationCommand,\n    defineCLIResetCommand,\n    defineCLIStartCommand,\n} from './commands/index.ts';\n\nexport async function createCLIEntryPointCommand() {\n    const pkgRaw = await fs.promises.readFile(\n        path.join(process.cwd(), 'package.json'),\n        { encoding: 'utf8' },\n    );\n    const pkg = JSON.parse(pkgRaw);\n\n    return defineCommand({\n        meta: {\n            name: pkg.name,\n            version: pkg.version,\n            description: pkg.description,\n        },\n        subCommands: {\n            healthcheck: defineCLIHealthCheckCommand(),\n            migration: defineCLIMigrationCommand(),\n            reset: defineCLIResetCommand(),\n            start: defineCLIStartCommand(),\n        },\n        args: {\n            configDirectory: {\n                type: 'string',\n                description: 'Config directory path',\n                alias: 'cD',\n            },\n            configFile: {\n                type: 'string',\n                description: 'Name of one or more configuration files.',\n                alias: 'cF',\n            },\n        },\n        async setup(context) {\n            const raw = await readConfigRaw({\n                env: true,\n                fs: {\n                    cwd: context.args.configDirectory,\n                    file: context.args.configFile,\n                },\n            });\n\n            await normalizeConfig(raw);\n        },\n    });\n}\n"],"mappings":";;;;;;;;;;;;;;;;AAoBA,eAAsBU,6BAAAA;CAClB,MAAMC,SAAS,MAAMV,GAAGW,SAASC,SAC7BX,KAAKY,KAAKX,QAAQY,IAAG,GAAI,cAAA,GACzB,EAAEC,UAAU,OAAO,CAAA;CAEvB,MAAMC,MAAMC,KAAKC,MAAMR,MAAAA;CAEvB,OAAOX,cAAc;EACjBoB,MAAM;GACFC,MAAMJ,IAAII;GACVC,SAASL,IAAIK;GACbC,aAAaN,IAAIM;EACrB;EACAC,aAAa;GACTC,aAAanB,4BAAAA;GACboB,WAAWnB,0BAAAA;GACXoB,OAAOnB,sBAAAA;GACPoB,OAAOnB,sBAAAA;EACX;EACAoB,MAAM;GACFC,iBAAiB;IACbC,MAAM;IACNR,aAAa;IACbS,OAAO;GACX;GACAC,YAAY;IACRF,MAAM;IACNR,aAAa;IACbS,OAAO;GACX;EACJ;EACA,MAAME,MAAMC,SAAO;GASf,MAAM/B,gBAAgBgC,MARJ/B,cAAc;IAC5BgC,KAAK;IACLpC,IAAI;KACAc,KAAKoB,QAAQN,KAAKC;KAClBQ,MAAMH,QAAQN,KAAKI;IACvB;GACJ,CAAA,CAEsBG;EAC1B;CACJ,CAAA;AACJ"}

package/dist/index.mjs

@@ -63,8 +63,8 @@ import { UserRoleSubscriber } from "./adapters/database/domains/user-role/subscr
 import { CacheInjectionKey } from "./app/modules/cache/constants.mjs";
 import { ModuleName } from "./app/modules/constants.mjs";
 import { ConfigEnvironmentVariableName, ConfigInjectionKey } from "./app/modules/config/constants.mjs";
+import { expandToOrigins, getAppOrigins } from "./app/modules/config/origins.mjs";
 import { ConfigModule } from "./app/modules/config/module.mjs";
-import { getAppOrigins } from "./app/modules/config/origins.mjs";
 import { CacheModule } from "./app/modules/cache/module.mjs";
 import { SessionRepository } from "./app/modules/authentication/repositories/session.mjs";
 import { AuthenticationModule } from "./app/modules/authentication/module.mjs";
@@ -212,4 +212,4 @@ import { defineCLIResetCommand } from "./cli/commands/reset.mjs";
 import { defineCLIStartCommand } from "./cli/commands/start.mjs";
 import "./cli/commands/index.mjs";
 import "reflect-metadata";
-export { ActivateController, ApplicationBuilder, AuthenticationInjectionKey, AuthenticationModule, AuthorizationMiddleware, AuthorizeController, CacheInjectionKey, CacheModule, CachePrefix, ClientController, ClientEntity, ClientIdentityRepository, ClientPermissionController, ClientPermissionEntity, ClientPermissionRepositoryAdapter, ClientPermissionRequestValidator, ClientPermissionSubscriber, ClientRepositoryAdapter, ClientRoleController, ClientRoleEntity, ClientRoleRepositoryAdapter, ClientRoleRequestValidator, ClientRoleSubscriber, ClientScopeController, ClientScopeEntity, ClientScopeRepositoryAdapter, ClientScopeRequestValidator, ClientScopeSubscriber, ClientSubscriber, ComponentsModule, CompositeProvisioningSource, ConfigEnvironmentVariableName, ConfigInjectionKey, ConfigModule, DataSourceOptionsBuilder, DatabaseConflictError, DatabaseInjectionKey, DatabaseModule, DatabaseQueryResultCache, DefaultProvisioningSource, EntitySubscriber, FileProvisioningSource, ForceLoggedInMiddleware, ForceUserLoggedInMiddleware, HTTPClientCredentialsGrant, HTTPInjectionKey, HTTPModule, HTTPOAuth2AuthorizeGrant, HTTPOAuth2Authorizer, HTTPOAuth2IdentityGrantType, HTTPOAuth2RefreshTokenGrant, HTTPPasswordGrant, HTTPRobotCredentialsGrant, IdentityInjectionKey, IdentityModule, IdentityProviderAccountEntity, IdentityProviderAccountRepository, IdentityProviderAccountSubscriber, IdentityProviderAttributeEntity, IdentityProviderAttributeMappingEntity, IdentityProviderAttributeMappingRepository, IdentityProviderAttributeSubscriber, IdentityProviderController, IdentityProviderEntity, IdentityProviderPermissionMappingEntity, IdentityProviderPermissionMappingRepository, IdentityProviderRepository, IdentityProviderRepositoryAdapter, IdentityProviderRoleMappingController, IdentityProviderRoleMappingEntity, IdentityProviderRoleMappingRepository, IdentityProviderRoleMappingRepositoryAdapter, IdentityProviderRoleSubscriber, IdentityProviderSubscriber, JwkController, KeyEntity, LDAPInjectionKey, LOCALE_COOKIE, LdapModule, LoggerInjectionKey, LoggerModule, MailInjectionKey, MailModule, MailTemplateRendererInjectionKey, ModuleName, OAuth2InjectionToken, OAuth2Module, OpenIDController, PasswordForgotController, PasswordResetController, PermissionController, PermissionDatabaseProvider, PermissionEntity, PermissionPolicyController, PermissionPolicyEntity, PermissionPolicyRepositoryAdapter, PermissionRepositoryAdapter, PermissionSubscriber, PolicyAttributeEntity, PolicyAttributeSubscriber, PolicyAttributesValidator, PolicyController, PolicyEntity, PolicyRepository, PolicyRepositoryAdapter, PolicySubscriber, PolicyValidator, ProvisionerModule, RealmController, RealmEntity, RealmRepository, RealmRepositoryAdapter, RealmResolverMiddleware, RealmSubscriber, RegisterController, RequestHandlerOperation, RequestIdentity, RequestPermissionEvaluator, RobotController, RobotEntity, RobotIdentityRepository, RobotPermissionController, RobotPermissionEntity, RobotPermissionRepositoryAdapter, RobotPermissionRequestValidator, RobotPermissionSubscriber, RobotRepositoryAdapter, RobotRoleController, RobotRoleEntity, RobotRoleRepositoryAdapter, RobotRoleRequestValidator, RobotRoleSubscriber, RobotSubscriber, RoleAttributeController, RoleAttributeEntity, RoleAttributeRepositoryAdapter, RoleAttributeRequestValidator, RoleAttributeSubscriber, RoleController, RoleEntity, RolePermissionController, RolePermissionEntity, RolePermissionRepositoryAdapter, RolePermissionRequestValidator, RolePermissionSubscriber, RoleRepository, RoleRepositoryAdapter, RoleSubscriber, RuntimeModule, ScopeController, ScopeEntity, ScopeRepositoryAdapter, ScopeSubscriber, SessionEntity, SessionRepository, StatusController, TokenController, UI_HTTP_CLIENT_FACTORY_STORE_KEY, UserAttributeController, UserAttributeEntity, UserAttributeRepositoryAdapter, UserAttributeRequestValidator, UserAttributeSubscriber, UserController, UserEntity, UserIdentityRepository, UserPermissionController, UserPermissionEntity, UserPermissionRepositoryAdapter, UserPermissionRequestValidator, UserPermissionSubscriber, UserRepository, UserRepositoryAdapter, UserRoleController, UserRoleEntity, UserRoleRepositoryAdapter, UserRoleRequestValidator, UserRoleSubscriber, UserSubscriber, VITE_SERVER_STORE_KEY, applyRouteRealmIDToBody, buildActorContext, buildEntityDestinations, createApplication, createAuthorizationMiddleware, createLoggerMiddleware, createRealmResolverMiddleware, createSwaggerMiddleware, defineCLIHealthCheckCommand, defineCLIMigrationCommand, defineCLIResetCommand, defineCLIStartCommand, extractClientCredentialsFromRequest, getAppOrigins, getBodyRealmID, getJwkRouteHandler, getJwksRouteHandler, getRequestParamID, getRequestRealmID, getRequestStringParam, getRequestStringParamOrFail, guessOauth2GrantTypeByRequest, isDatabaseTypeSupported, isDatabaseTypeSupportedForEnvironment, isRequestIdentityMasterRealmMember, readFromLocations, registerAssetsMiddleware, registerBasicMiddleware, registerCorsMiddleware, registerErrorMiddleware, registerPrometheusMiddleware, registerRateLimitMiddleware, registerUIHttpClientMiddleware, sanitizeRelativeRedirect, setRequestIdentity, setRequestPermissionEvaluator, setRequestRealmID, setRequestScopes, setRequestToken, useRequestIdentity, useRequestIdentityOrFail, useRequestLocale, useRequestParamID, useRequestPermissionEvaluator, useRequestScopes, useRequestToken };
+export { ActivateController, ApplicationBuilder, AuthenticationInjectionKey, AuthenticationModule, AuthorizationMiddleware, AuthorizeController, CacheInjectionKey, CacheModule, CachePrefix, ClientController, ClientEntity, ClientIdentityRepository, ClientPermissionController, ClientPermissionEntity, ClientPermissionRepositoryAdapter, ClientPermissionRequestValidator, ClientPermissionSubscriber, ClientRepositoryAdapter, ClientRoleController, ClientRoleEntity, ClientRoleRepositoryAdapter, ClientRoleRequestValidator, ClientRoleSubscriber, ClientScopeController, ClientScopeEntity, ClientScopeRepositoryAdapter, ClientScopeRequestValidator, ClientScopeSubscriber, ClientSubscriber, ComponentsModule, CompositeProvisioningSource, ConfigEnvironmentVariableName, ConfigInjectionKey, ConfigModule, DataSourceOptionsBuilder, DatabaseConflictError, DatabaseInjectionKey, DatabaseModule, DatabaseQueryResultCache, DefaultProvisioningSource, EntitySubscriber, FileProvisioningSource, ForceLoggedInMiddleware, ForceUserLoggedInMiddleware, HTTPClientCredentialsGrant, HTTPInjectionKey, HTTPModule, HTTPOAuth2AuthorizeGrant, HTTPOAuth2Authorizer, HTTPOAuth2IdentityGrantType, HTTPOAuth2RefreshTokenGrant, HTTPPasswordGrant, HTTPRobotCredentialsGrant, IdentityInjectionKey, IdentityModule, IdentityProviderAccountEntity, IdentityProviderAccountRepository, IdentityProviderAccountSubscriber, IdentityProviderAttributeEntity, IdentityProviderAttributeMappingEntity, IdentityProviderAttributeMappingRepository, IdentityProviderAttributeSubscriber, IdentityProviderController, IdentityProviderEntity, IdentityProviderPermissionMappingEntity, IdentityProviderPermissionMappingRepository, IdentityProviderRepository, IdentityProviderRepositoryAdapter, IdentityProviderRoleMappingController, IdentityProviderRoleMappingEntity, IdentityProviderRoleMappingRepository, IdentityProviderRoleMappingRepositoryAdapter, IdentityProviderRoleSubscriber, IdentityProviderSubscriber, JwkController, KeyEntity, LDAPInjectionKey, LOCALE_COOKIE, LdapModule, LoggerInjectionKey, LoggerModule, MailInjectionKey, MailModule, MailTemplateRendererInjectionKey, ModuleName, OAuth2InjectionToken, OAuth2Module, OpenIDController, PasswordForgotController, PasswordResetController, PermissionController, PermissionDatabaseProvider, PermissionEntity, PermissionPolicyController, PermissionPolicyEntity, PermissionPolicyRepositoryAdapter, PermissionRepositoryAdapter, PermissionSubscriber, PolicyAttributeEntity, PolicyAttributeSubscriber, PolicyAttributesValidator, PolicyController, PolicyEntity, PolicyRepository, PolicyRepositoryAdapter, PolicySubscriber, PolicyValidator, ProvisionerModule, RealmController, RealmEntity, RealmRepository, RealmRepositoryAdapter, RealmResolverMiddleware, RealmSubscriber, RegisterController, RequestHandlerOperation, RequestIdentity, RequestPermissionEvaluator, RobotController, RobotEntity, RobotIdentityRepository, RobotPermissionController, RobotPermissionEntity, RobotPermissionRepositoryAdapter, RobotPermissionRequestValidator, RobotPermissionSubscriber, RobotRepositoryAdapter, RobotRoleController, RobotRoleEntity, RobotRoleRepositoryAdapter, RobotRoleRequestValidator, RobotRoleSubscriber, RobotSubscriber, RoleAttributeController, RoleAttributeEntity, RoleAttributeRepositoryAdapter, RoleAttributeRequestValidator, RoleAttributeSubscriber, RoleController, RoleEntity, RolePermissionController, RolePermissionEntity, RolePermissionRepositoryAdapter, RolePermissionRequestValidator, RolePermissionSubscriber, RoleRepository, RoleRepositoryAdapter, RoleSubscriber, RuntimeModule, ScopeController, ScopeEntity, ScopeRepositoryAdapter, ScopeSubscriber, SessionEntity, SessionRepository, StatusController, TokenController, UI_HTTP_CLIENT_FACTORY_STORE_KEY, UserAttributeController, UserAttributeEntity, UserAttributeRepositoryAdapter, UserAttributeRequestValidator, UserAttributeSubscriber, UserController, UserEntity, UserIdentityRepository, UserPermissionController, UserPermissionEntity, UserPermissionRepositoryAdapter, UserPermissionRequestValidator, UserPermissionSubscriber, UserRepository, UserRepositoryAdapter, UserRoleController, UserRoleEntity, UserRoleRepositoryAdapter, UserRoleRequestValidator, UserRoleSubscriber, UserSubscriber, VITE_SERVER_STORE_KEY, applyRouteRealmIDToBody, buildActorContext, buildEntityDestinations, createApplication, createAuthorizationMiddleware, createLoggerMiddleware, createRealmResolverMiddleware, createSwaggerMiddleware, defineCLIHealthCheckCommand, defineCLIMigrationCommand, defineCLIResetCommand, defineCLIStartCommand, expandToOrigins, extractClientCredentialsFromRequest, getAppOrigins, getBodyRealmID, getJwkRouteHandler, getJwksRouteHandler, getRequestParamID, getRequestRealmID, getRequestStringParam, getRequestStringParamOrFail, guessOauth2GrantTypeByRequest, isDatabaseTypeSupported, isDatabaseTypeSupportedForEnvironment, isRequestIdentityMasterRealmMember, readFromLocations, registerAssetsMiddleware, registerBasicMiddleware, registerCorsMiddleware, registerErrorMiddleware, registerPrometheusMiddleware, registerRateLimitMiddleware, registerUIHttpClientMiddleware, sanitizeRelativeRedirect, setRequestIdentity, setRequestPermissionEvaluator, setRequestRealmID, setRequestScopes, setRequestToken, useRequestIdentity, useRequestIdentityOrFail, useRequestLocale, useRequestParamID, useRequestPermissionEvaluator, useRequestScopes, useRequestToken };

package/dist/ui/client/.vite/ssr-manifest.json

@@ -27647,6 +27647,60 @@
     "/public/assets/asap-latin-700-normal-l2Y8pi-F.woff2",
     "/public/assets/asap-latin-700-normal-Dqcopq14.woff"
   ],
+  "../../../packages/client-web-kit/src/components/entities/policy/policy-type.ts": [
+    "/public/assets/nunito-cyrillic-ext-300-normal-ChMQLIrm.woff2",
+    "/public/assets/nunito-cyrillic-ext-300-normal-BDHtqmCR.woff",
+    "/public/assets/nunito-cyrillic-300-normal-BPQV259B.woff2",
+    "/public/assets/nunito-cyrillic-300-normal-g5qSsvc0.woff",
+    "/public/assets/nunito-vietnamese-300-normal-mLneKULB.woff2",
+    "/public/assets/nunito-vietnamese-300-normal-DATld5Vw.woff",
+    "/public/assets/nunito-latin-ext-300-normal-D1SyVuPt.woff2",
+    "/public/assets/nunito-latin-ext-300-normal-DfqbmdMl.woff",
+    "/public/assets/nunito-latin-300-normal-COoPE5VN.woff2",
+    "/public/assets/nunito-latin-300-normal-C3ZIKvzv.woff",
+    "/public/assets/nunito-cyrillic-ext-400-normal-CuPM9foi.woff2",
+    "/public/assets/nunito-cyrillic-ext-400-normal-xaE7D4Sw.woff",
+    "/public/assets/nunito-cyrillic-400-normal-xAOo5cBP.woff2",
+    "/public/assets/nunito-cyrillic-400-normal-D1j0u8EH.woff",
+    "/public/assets/nunito-vietnamese-400-normal-BHkVbP3T.woff2",
+    "/public/assets/nunito-vietnamese-400-normal-DtOtW02z.woff",
+    "/public/assets/nunito-latin-ext-400-normal-i-8OOpdj.woff2",
+    "/public/assets/nunito-latin-ext-400-normal-CjMJVfGn.woff",
+    "/public/assets/nunito-latin-400-normal-r8SDr6Up.woff2",
+    "/public/assets/nunito-latin-400-normal-DKg4f3fz.woff",
+    "/public/assets/nunito-cyrillic-ext-600-normal-CWPPjBOD.woff2",
+    "/public/assets/nunito-cyrillic-ext-600-normal-vnfu4DTE.woff",
+    "/public/assets/nunito-cyrillic-600-normal-DJGQ2h05.woff2",
+    "/public/assets/nunito-cyrillic-600-normal-BUjmtIuu.woff",
+    "/public/assets/nunito-vietnamese-600-normal-BY8O6Cug.woff2",
+    "/public/assets/nunito-vietnamese-600-normal-DO1RqFw5.woff",
+    "/public/assets/nunito-latin-ext-600-normal-Dd9Zuxh1.woff2",
+    "/public/assets/nunito-latin-ext-600-normal-BKUpuB78.woff",
+    "/public/assets/nunito-latin-600-normal-Br8yIETf.woff2",
+    "/public/assets/nunito-latin-600-normal-Cd0eNu1l.woff",
+    "/public/assets/nunito-cyrillic-ext-700-normal-BuR0mlCG.woff2",
+    "/public/assets/nunito-cyrillic-ext-700-normal-DfoqN4Gs.woff",
+    "/public/assets/nunito-cyrillic-700-normal-DP36NgGt.woff2",
+    "/public/assets/nunito-cyrillic-700-normal-DfHRUDv-.woff",
+    "/public/assets/nunito-vietnamese-700-normal-Ch8EUCfz.woff2",
+    "/public/assets/nunito-vietnamese-700-normal-C9SQsXvj.woff",
+    "/public/assets/nunito-latin-ext-700-normal-BWeMsAzO.woff2",
+    "/public/assets/nunito-latin-ext-700-normal-D4woHhbd.woff",
+    "/public/assets/nunito-latin-700-normal-Dort48En.woff2",
+    "/public/assets/nunito-latin-700-normal-OcDqTBcA.woff",
+    "/public/assets/asap-vietnamese-400-normal-DGyJlJLT.woff2",
+    "/public/assets/asap-vietnamese-400-normal-lfLaoF2x.woff",
+    "/public/assets/asap-latin-ext-400-normal-DwYtpHbV.woff2",
+    "/public/assets/asap-latin-ext-400-normal-C-fcRdtE.woff",
+    "/public/assets/asap-latin-400-normal-DnZ1MOsG.woff2",
+    "/public/assets/asap-latin-400-normal-Dc37g3Il.woff",
+    "/public/assets/asap-vietnamese-700-normal-D-SxY94i.woff2",
+    "/public/assets/asap-vietnamese-700-normal-B-e19ug5.woff",
+    "/public/assets/asap-latin-ext-700-normal-y8bo5aW5.woff2",
+    "/public/assets/asap-latin-ext-700-normal-D00OESsZ.woff",
+    "/public/assets/asap-latin-700-normal-l2Y8pi-F.woff2",
+    "/public/assets/asap-latin-700-normal-Dqcopq14.woff"
+  ],
   "../../../packages/client-web-kit/src/components/entities/policy/realm-match/ARealmMatchPolicyForm.vue": [
     "/public/assets/nunito-cyrillic-ext-300-normal-ChMQLIrm.woff2",
     "/public/assets/nunito-cyrillic-ext-300-normal-BDHtqmCR.woff",