@authup/server-core 1.0.0-beta.49 → 1.0.0-beta.50

package/dist/adapters/http/controllers/workflows/openid/module.mjs

@@ -3,8 +3,9 @@ import "node:url";
 import.meta.url;
 import { resolveURL } from "../../../../../utils/url.mjs";
 import "../../../../../utils/index.mjs";
-import { OAuth2AuthorizationResponseType } from "@authup/specs";
-import { DController, DGet } from "@routup/decorators";
+import { REALM_MASTER_NAME } from "@authup/core-kit";
+import { sendRedirect } from "routup";
+import { DContext, DController, DGet } from "@routup/decorators";
 //#region src/adapters/http/controllers/workflows/openid/module.ts
 function _ts_decorate(decorators, target, key, desc) {
 	var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
@@ -15,45 +16,26 @@ function _ts_decorate(decorators, target, key, desc) {
 function _ts_metadata(k, v) {
 	if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
 }
+function _ts_param(paramIndex, decorator) {
+	return function(target, key) {
+		decorator(target, key, paramIndex);
+	};
+}
 var OpenIDController = class {
 	options;
 	constructor(options) {
 		this.options = options;
 	}
-	async getOpenIdConfiguration() {
-		const { baseURL } = this.options;
-		return {
-			issuer: baseURL,
-			authorization_endpoint: resolveURL(baseURL, "authorize"),
-			jwks_uri: resolveURL(baseURL, "jwks"),
-			response_types_supported: [
-				OAuth2AuthorizationResponseType.CODE,
-				OAuth2AuthorizationResponseType.TOKEN,
-				OAuth2AuthorizationResponseType.NONE
-			],
-			subject_types_supported: ["public"],
-			id_token_signing_alg_values_supported: [
-				"HS256",
-				"HS384",
-				"HS512",
-				"RS256",
-				"RS384",
-				"RS512",
-				"none"
-			],
-			token_endpoint: resolveURL(baseURL, "token"),
-			introspection_endpoint: resolveURL(baseURL, "token/introspect"),
-			revocation_endpoint: resolveURL(baseURL, "token"),
-			service_documentation: "https://authup.org/",
-			userinfo_endpoint: resolveURL(baseURL, "users/@me")
-		};
+	getOpenIdConfiguration(event) {
+		return sendRedirect(event, resolveURL(this.options.baseURL, `realms/${REALM_MASTER_NAME}/.well-known/openid-configuration`));
 	}
 };
 _ts_decorate([
 	DGet("/.well-known/openid-configuration", []),
+	_ts_param(0, DContext()),
 	_ts_metadata("design:type", Function),
-	_ts_metadata("design:paramtypes", []),
-	_ts_metadata("design:returntype", Promise)
+	_ts_metadata("design:paramtypes", [typeof IAppEvent === "undefined" ? Object : IAppEvent]),
+	_ts_metadata("design:returntype", void 0)
 ], OpenIDController.prototype, "getOpenIdConfiguration", null);
 OpenIDController = _ts_decorate([
 	DController(""),

package/dist/adapters/http/controllers/workflows/openid/module.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"module.mjs","names":["OAuth2AuthorizationResponseType","DController","DGet","resolveURL","OpenIDController","options","getOpenIdConfiguration","baseURL","issuer","authorization_endpoint","jwks_uri","response_types_supported","CODE","TOKEN","NONE","subject_types_supported","id_token_signing_alg_values_supported","token_endpoint","introspection_endpoint","revocation_endpoint","service_documentation","userinfo_endpoint"],"sources":["../../../../../../src/adapters/http/controllers/workflows/openid/module.ts"],"sourcesContent":["/*\n * Copyright (c) 2024.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport type { OpenIDProviderMetadata } from '@authup/specs';\nimport { OAuth2AuthorizationResponseType } from '@authup/specs';\nimport {\n    DController,\n    DGet,\n} from '@routup/decorators';\nimport { resolveURL } from '../../../../../utils/index.ts';\n\nexport type OpenIDControllerOptions = {\n    baseURL: string\n};\n\n@DController('')\nexport class OpenIDController {\n    protected options: OpenIDControllerOptions;\n\n    constructor(options: OpenIDControllerOptions) {\n        this.options = options;\n    }\n\n    @DGet('/.well-known/openid-configuration', [])\n    async getOpenIdConfiguration(): Promise<OpenIDProviderMetadata> {\n        const { baseURL } = this.options;\n        return {\n            issuer: baseURL,\n\n            authorization_endpoint: resolveURL(baseURL, 'authorize'),\n\n            jwks_uri: resolveURL(baseURL, 'jwks'),\n\n            response_types_supported: [\n                OAuth2AuthorizationResponseType.CODE,\n                OAuth2AuthorizationResponseType.TOKEN,\n                OAuth2AuthorizationResponseType.NONE,\n            ],\n\n            subject_types_supported: [\n                'public',\n            ],\n\n            id_token_signing_alg_values_supported: [\n                'HS256',\n                'HS384',\n                'HS512',\n                'RS256',\n                'RS384',\n                'RS512',\n                'none',\n            ],\n\n            token_endpoint: resolveURL(baseURL, 'token'),\n\n            introspection_endpoint: resolveURL(baseURL, 'token/introspect'),\n\n            revocation_endpoint: resolveURL(baseURL, 'token'),\n\n            // -----------------------------------------------------------\n\n            service_documentation: 'https://authup.org/',\n\n            userinfo_endpoint: resolveURL(baseURL, 'users/@me'),\n        };\n    }\n}\n"],"mappings":";;;;;;;;AAKC,SAAA,aAAA,YAAA,QAAA,KAAA,MAAA;;;;;;;;;AAeD,IAAaI,mBAAb,MAAaA;CACCC;CAEV,YAAYA,SAAkC;EAC1C,KAAKA,UAAUA;CACnB;CAEA,MACMC,yBAA0D;EAC5D,MAAM,EAAEC,YAAY,KAAKF;EACzB,OAAO;GACHG,QAAQD;GAERE,wBAAwBN,WAAWI,SAAS,WAAA;GAE5CG,UAAUP,WAAWI,SAAS,MAAA;GAE9BI,0BAA0B;IACtBX,gCAAgCY;IAChCZ,gCAAgCa;IAChCb,gCAAgCc;;GAGpCC,yBAAyB,CACrB,QAAA;GAGJC,uCAAuC;IACnC;IACA;IACA;IACA;IACA;IACA;IACA;;GAGJC,gBAAgBd,WAAWI,SAAS,OAAA;GAEpCW,wBAAwBf,WAAWI,SAAS,kBAAA;GAE5CY,qBAAqBhB,WAAWI,SAAS,OAAA;GAIzCa,uBAAuB;GAEvBC,mBAAmBlB,WAAWI,SAAS,WAAA;EAC3C;CACJ;AACJ"}
+{"version":3,"file":"module.mjs","names":["REALM_MASTER_NAME","DContext","DController","DGet","sendRedirect","resolveURL","OpenIDController","options","getOpenIdConfiguration","event","baseURL"],"sources":["../../../../../../src/adapters/http/controllers/workflows/openid/module.ts"],"sourcesContent":["/*\n * Copyright (c) 2024.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport { REALM_MASTER_NAME } from '@authup/core-kit';\nimport {\n    DContext,\n    DController,\n    DGet,\n} from '@routup/decorators';\nimport type { IAppEvent } from 'routup';\nimport { sendRedirect } from 'routup';\nimport { resolveURL } from '../../../../../utils/index.ts';\n\nexport type OpenIDControllerOptions = {\n    baseURL: string\n};\n\n@DController('')\nexport class OpenIDController {\n    protected options: OpenIDControllerOptions;\n\n    constructor(options: OpenIDControllerOptions) {\n        this.options = options;\n    }\n\n    @DGet('/.well-known/openid-configuration', [])\n    getOpenIdConfiguration(@DContext() event: IAppEvent) {\n        // A single global discovery doc can't satisfy OIDC Discovery §4.3 /\n        // RFC 8414 §3.3: tokens are issued per realm (iss=<baseURL>/realms/<name>),\n        // so a global `issuer` would never match the `iss` of any token.\n        // Redirect to the master realm's realm-scoped, conformant doc.\n        // ponytail: master is the default realm; swap REALM_MASTER_NAME for a\n        // config key if a deployment ever needs a different default.\n        return sendRedirect(\n            event,\n            resolveURL(this.options.baseURL, `realms/${REALM_MASTER_NAME}/.well-known/openid-configuration`),\n        );\n    }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;AAsBA,IAAaM,mBAAb,MAAaA;CACCC;CAEV,YAAYA,SAAkC;EAC1C,KAAKA,UAAUA;CACnB;CAGAC,uBAAuB,OAA8B;EAOjD,OAAOJ,aACHK,OACAJ,WAAW,KAAKE,QAAQG,SAAS,UAAUV,kBAAkB,kCAAkC,CAAA;CAEvG;AACJ"}

package/dist/app/modules/database/module.mjs

@@ -1,6 +1,7 @@
 import "node:path";
 import "node:url";
 import.meta.url;
+import { isDatabaseTypeSupported, isDatabaseTypeSupportedForEnvironment } from "../../../adapters/database/helpers/is-supported.mjs";
 import { EntitySubscriber } from "../../../adapters/database/subscriber/module.mjs";
 import { CacheInjectionKey } from "../cache/constants.mjs";
 import { ModuleName } from "../constants.mjs";
@@ -10,7 +11,6 @@ import "../cache/index.mjs";
 import { DatabaseInjectionKey } from "./constants.mjs";
 import { DatabaseQueryResultCache } from "../../../adapters/database/cache/module.mjs";
 import { DataSourceOptionsBuilder } from "../../../adapters/database/data-source/options/module.mjs";
-import { isDatabaseTypeSupported, isDatabaseTypeSupportedForEnvironment } from "../../../adapters/database/helpers/is-supported.mjs";
 import "../../../adapters/database/index.mjs";
 import { LoggerInjectionKey } from "../logger/constants.mjs";
 import "../logger/index.mjs";

package/dist/app/modules/database/repositories/client/repository.mjs

@@ -11,8 +11,8 @@ import "../../../../../adapters/database/index.mjs";
 import { translateWhereConditions } from "../helpers.mjs";
 import { loadBoundPermissions } from "../bindings.mjs";
 import { RealmRepositoryAdapter } from "../realm/repository.mjs";
-import { buildRedisKeyPath } from "@authup/server-kit";
 import { isUUID } from "@authup/kit";
+import { buildRedisKeyPath } from "@authup/server-kit";
 import { applyQuery, isEntityUnique, validateEntityJoinColumns } from "typeorm-extension";
 //#region src/app/modules/database/repositories/client/repository.ts
 var ClientRepositoryAdapter = class {

package/dist/app/modules/database/repositories/realm/repository.mjs

@@ -4,8 +4,8 @@ import.meta.url;
 import { RealmEntity } from "../../../../../adapters/database/domains/realm/entity.mjs";
 import "../../../../../adapters/database/domains/index.mjs";
 import { translateWhereConditions } from "../helpers.mjs";
-import { REALM_MASTER_NAME } from "@authup/core-kit";
 import { isUUID } from "@authup/kit";
+import { REALM_MASTER_NAME } from "@authup/core-kit";
 import { applyQuery, validateEntityJoinColumns } from "typeorm-extension";
 //#region src/app/modules/database/repositories/realm/repository.ts
 var RealmRepositoryAdapter = class {

package/dist/app/modules/database/repositories/robot/repository.mjs

@@ -11,8 +11,8 @@ import "../../../../../adapters/database/index.mjs";
 import { translateWhereConditions } from "../helpers.mjs";
 import { loadBoundPermissions } from "../bindings.mjs";
 import { RealmRepositoryAdapter } from "../realm/repository.mjs";
-import { buildRedisKeyPath } from "@authup/server-kit";
 import { isUUID } from "@authup/kit";
+import { buildRedisKeyPath } from "@authup/server-kit";
 import { applyQuery, isEntityUnique, validateEntityJoinColumns } from "typeorm-extension";
 //#region src/app/modules/database/repositories/robot/repository.ts
 var RobotRepositoryAdapter = class {

package/dist/app/modules/database/repositories/user/repository.mjs

@@ -11,8 +11,8 @@ import "../../../../../adapters/database/index.mjs";
 import { translateWhereConditions } from "../helpers.mjs";
 import { loadBoundPermissions } from "../bindings.mjs";
 import { RealmRepositoryAdapter } from "../realm/repository.mjs";
-import { buildRedisKeyPath } from "@authup/server-kit";
 import { isUUID } from "@authup/kit";
+import { buildRedisKeyPath } from "@authup/server-kit";
 import { applyQuery, isEntityUnique, validateEntityJoinColumns } from "typeorm-extension";
 //#region src/app/modules/database/repositories/user/repository.ts
 var UserRepositoryAdapter = class {

package/dist/app/modules/identity/repositories/client.mjs

@@ -3,8 +3,8 @@ import "node:url";
 import.meta.url;
 import { CachePrefix } from "../../../../adapters/database/domains/constants.mjs";
 import "../../../../adapters/database/domains/index.mjs";
-import { buildRedisKeyPath } from "@authup/server-kit";
 import { isUUID } from "@authup/kit";
+import { buildRedisKeyPath } from "@authup/server-kit";
 //#region src/app/modules/identity/repositories/client.ts
 var ClientIdentityRepository = class {
 	repository;

package/dist/app/modules/identity/repositories/robot.mjs

@@ -3,8 +3,8 @@ import "node:url";
 import.meta.url;
 import { CachePrefix } from "../../../../adapters/database/domains/constants.mjs";
 import "../../../../adapters/database/domains/index.mjs";
-import { buildRedisKeyPath } from "@authup/server-kit";
 import { isUUID } from "@authup/kit";
+import { buildRedisKeyPath } from "@authup/server-kit";
 //#region src/app/modules/identity/repositories/robot.ts
 var RobotIdentityRepository = class {
 	repository;

package/dist/app/modules/identity/repositories/user.mjs

@@ -6,8 +6,8 @@ import "../../../../adapters/database/domains/index.mjs";
 import { IdentityProviderMapperOperation } from "../../../../core/identity/provider/mapper/constants.mjs";
 import "../../../../core/index.mjs";
 import { In } from "typeorm";
-import { buildRedisKeyPath } from "@authup/server-kit";
 import { isUUID } from "@authup/kit";
+import { buildRedisKeyPath } from "@authup/server-kit";
 //#region src/app/modules/identity/repositories/user.ts
 var UserIdentityRepository = class {
 	repository;

package/dist/app/modules/oauth2/repositories/authorize/state/repository.mjs

@@ -2,8 +2,8 @@ import "node:path";
 import "node:url";
 import.meta.url;
 import { CacheOAuth2Prefix } from "../../constants.mjs";
-import { buildCacheKey } from "@authup/server-kit";
 import { createNanoID } from "@authup/kit";
+import { buildCacheKey } from "@authup/server-kit";
 //#region src/app/modules/oauth2/repositories/authorize/state/repository.ts
 var OAuth2AuthorizationStateRepository = class {
 	cache;

package/dist/app/modules/provisioning/sources/default/module.mjs

@@ -9,8 +9,8 @@ import "../../../../../core/provisioning/strategy/index.mjs";
 import "../../../../../core/index.mjs";
 import { ConfigInjectionKey } from "../../../config/constants.mjs";
 import "../../../config/index.mjs";
-import { PermissionName, REALM_MASTER_NAME, ROLE_ADMIN_NAME, ROLE_REALM_ADMIN_NAME, ScopeName, buildUserFakeEmail } from "@authup/core-kit";
 import { DecisionStrategy } from "@authup/kit";
+import { PermissionName, REALM_MASTER_NAME, ROLE_ADMIN_NAME, ROLE_REALM_ADMIN_NAME, ScopeName, buildUserFakeEmail } from "@authup/core-kit";
 import { BuiltInPolicyType, SystemPolicyName } from "@authup/access";
 //#region src/app/modules/provisioning/sources/default/module.ts
 var DefaultProvisioningSource = class {

package/dist/core/authentication/credential/entities/client/module.mjs

@@ -1,8 +1,8 @@
 import "node:path";
 import "node:url";
 import.meta.url;
-import { compare, hash } from "@authup/server-kit";
 import { createNanoID, isBCryptHash } from "@authup/kit";
+import { compare, hash } from "@authup/server-kit";
 //#region src/core/authentication/credential/entities/client/module.ts
 var ClientCredentialsService = class {
 	async verify(input, entity) {

package/dist/core/authentication/credential/entities/robot/module.mjs

@@ -1,8 +1,8 @@
 import "node:path";
 import "node:url";
 import.meta.url;
-import { compare, hash } from "@authup/server-kit";
 import { createNanoID } from "@authup/kit";
+import { compare, hash } from "@authup/server-kit";
 //#region src/core/authentication/credential/entities/robot/module.ts
 var RobotCredentialsService = class {
 	async verify(input, entity) {

package/dist/core/entities/client/service.mjs

@@ -2,9 +2,9 @@ import "node:path";
 import "node:url";
 import.meta.url;
 import { ClientCredentialsService } from "../../authentication/credential/entities/client/module.mjs";
+import { ValidatorGroup, isUUID } from "@authup/kit";
 import { CLIENT_RESERVED_NAMES, ClientValidator, PermissionName } from "@authup/core-kit";
 import { AbstractEntityService } from "@authup/server-kit";
-import { ValidatorGroup, isUUID } from "@authup/kit";
 import { BuiltInPolicyType, PolicyData } from "@authup/access";
 import { BadRequestError, EntityNotFoundError } from "@authup/errors";
 //#region src/core/entities/client/service.ts

package/dist/core/entities/client-permission/service.mjs

@@ -1,9 +1,9 @@
 import "node:path";
 import "node:url";
 import.meta.url;
+import { ValidatorGroup } from "@authup/kit";
 import { ClientPermissionValidator, PermissionName } from "@authup/core-kit";
 import { AbstractEntityService } from "@authup/server-kit";
-import { ValidatorGroup } from "@authup/kit";
 import { BuiltInPolicyType, PolicyData } from "@authup/access";
 import { EntityConflictError, EntityNotFoundError } from "@authup/errors";
 //#region src/core/entities/client-permission/service.ts

package/dist/core/entities/client-role/service.mjs

@@ -1,9 +1,9 @@
 import "node:path";
 import "node:url";
 import.meta.url;
+import { ValidatorGroup } from "@authup/kit";
 import { ClientRoleValidator, PermissionName } from "@authup/core-kit";
 import { AbstractEntityService } from "@authup/server-kit";
-import { ValidatorGroup } from "@authup/kit";
 import { BuiltInPolicyType, PermissionError, PolicyData } from "@authup/access";
 import { EntityConflictError, EntityNotFoundError } from "@authup/errors";
 //#region src/core/entities/client-role/service.ts

package/dist/core/entities/client-scope/service.mjs

@@ -1,9 +1,9 @@
 import "node:path";
 import "node:url";
 import.meta.url;
+import { ValidatorGroup } from "@authup/kit";
 import { ClientScopeValidator, PermissionName } from "@authup/core-kit";
 import { AbstractEntityService } from "@authup/server-kit";
-import { ValidatorGroup } from "@authup/kit";
 import { BuiltInPolicyType, PolicyData } from "@authup/access";
 import { EntityConflictError, EntityNotFoundError } from "@authup/errors";
 //#region src/core/entities/client-scope/service.ts

package/dist/core/entities/identity-provider-role-mapping/service.mjs

@@ -1,9 +1,9 @@
 import "node:path";
 import "node:url";
 import.meta.url;
+import { ValidatorGroup } from "@authup/kit";
 import { IdentityProviderRoleMappingValidator, PermissionName } from "@authup/core-kit";
 import { AbstractEntityService } from "@authup/server-kit";
-import { ValidatorGroup } from "@authup/kit";
 import { BuiltInPolicyType, PermissionError, PolicyData } from "@authup/access";
 import { BadRequestError, EntityConflictError, EntityNotFoundError } from "@authup/errors";
 //#region src/core/entities/identity-provider-role-mapping/service.ts

package/dist/core/entities/permission/service.mjs

@@ -1,9 +1,9 @@
 import "node:path";
 import "node:url";
 import.meta.url;
+import { ValidatorGroup, isPropertySet, isUUID } from "@authup/kit";
 import { PermissionName, PermissionValidator, ROLE_ADMIN_NAME, ROLE_REALM_ADMIN_NAME } from "@authup/core-kit";
 import { AbstractEntityService } from "@authup/server-kit";
-import { ValidatorGroup, isPropertySet, isUUID } from "@authup/kit";
 import { BuiltInPolicyType, PolicyData, SystemPolicyName } from "@authup/access";
 import { AuthupError, BadRequestError, EntityNotFoundError } from "@authup/errors";
 //#region src/core/entities/permission/service.ts

package/dist/core/entities/permission-policy/service.mjs

@@ -1,9 +1,9 @@
 import "node:path";
 import "node:url";
 import.meta.url;
+import { ValidatorGroup } from "@authup/kit";
 import { PermissionName, PermissionPolicyValidator } from "@authup/core-kit";
 import { AbstractEntityService } from "@authup/server-kit";
-import { ValidatorGroup } from "@authup/kit";
 import { BuiltInPolicyType, PolicyData } from "@authup/access";
 import { EntityConflictError, EntityNotFoundError } from "@authup/errors";
 //#region src/core/entities/permission-policy/service.ts

package/dist/core/entities/policy/service.mjs

@@ -2,9 +2,9 @@ import "node:path";
 import "node:url";
 import.meta.url;
 import { PolicyAttributesValidator } from "./attributes-validator.mjs";
+import { ValidatorGroup, extendObject, isPropertySet, isUUID, removeObjectProperty } from "@authup/kit";
 import { PermissionName, PolicyValidator } from "@authup/core-kit";
 import { AbstractEntityService } from "@authup/server-kit";
-import { ValidatorGroup, extendObject, isPropertySet, isUUID, removeObjectProperty } from "@authup/kit";
 import { BuiltInPolicyType, PolicyData } from "@authup/access";
 import { BadRequestError, EntityNotFoundError } from "@authup/errors";
 //#region src/core/entities/policy/service.ts

package/dist/core/entities/realm/service.mjs

@@ -1,9 +1,9 @@
 import "node:path";
 import "node:url";
 import.meta.url;
+import { ValidatorGroup, isPropertySet, isUUID } from "@authup/kit";
 import { PermissionName, REALM_MASTER_NAME, RealmValidator } from "@authup/core-kit";
 import { AbstractEntityService } from "@authup/server-kit";
-import { ValidatorGroup, isPropertySet, isUUID } from "@authup/kit";
 import { BuiltInPolicyType, PolicyData } from "@authup/access";
 import { BadRequestError, EntityNotFoundError } from "@authup/errors";
 //#region src/core/entities/realm/service.ts

package/dist/core/entities/robot/service.mjs

@@ -2,9 +2,9 @@ import "node:path";
 import "node:url";
 import.meta.url;
 import { RobotCredentialsService } from "../../authentication/credential/entities/robot/module.mjs";
+import { ValidatorGroup, isUUID } from "@authup/kit";
 import { PermissionName, RobotValidator } from "@authup/core-kit";
 import { AbstractEntityService } from "@authup/server-kit";
-import { ValidatorGroup, isUUID } from "@authup/kit";
 import { BuiltInPolicyType, PolicyData } from "@authup/access";
 import { EntityNotFoundError } from "@authup/errors";
 //#region src/core/entities/robot/service.ts

package/dist/core/entities/robot-permission/service.mjs

@@ -1,9 +1,9 @@
 import "node:path";
 import "node:url";
 import.meta.url;
+import { ValidatorGroup } from "@authup/kit";
 import { PermissionName, RobotPermissionValidator } from "@authup/core-kit";
 import { AbstractEntityService } from "@authup/server-kit";
-import { ValidatorGroup } from "@authup/kit";
 import { BuiltInPolicyType, PolicyData } from "@authup/access";
 import { EntityConflictError, EntityNotFoundError } from "@authup/errors";
 //#region src/core/entities/robot-permission/service.ts

package/dist/core/entities/robot-role/service.mjs

@@ -1,9 +1,9 @@
 import "node:path";
 import "node:url";
 import.meta.url;
+import { ValidatorGroup } from "@authup/kit";
 import { PermissionName, RobotRoleValidator } from "@authup/core-kit";
 import { AbstractEntityService } from "@authup/server-kit";
-import { ValidatorGroup } from "@authup/kit";
 import { BuiltInPolicyType, PermissionError, PolicyData } from "@authup/access";
 import { EntityConflictError, EntityNotFoundError } from "@authup/errors";
 //#region src/core/entities/robot-role/service.ts

package/dist/core/entities/role/service.mjs

@@ -1,9 +1,9 @@
 import "node:path";
 import "node:url";
 import.meta.url;
+import { ValidatorGroup, isPropertySet, isUUID } from "@authup/kit";
 import { PermissionName, ROLE_ADMIN_NAME, RoleValidator } from "@authup/core-kit";
 import { AbstractEntityService } from "@authup/server-kit";
-import { ValidatorGroup, isPropertySet, isUUID } from "@authup/kit";
 import { BuiltInPolicyType, PolicyData } from "@authup/access";
 import { BadRequestError, EntityNotFoundError } from "@authup/errors";
 //#region src/core/entities/role/service.ts

package/dist/core/entities/role-permission/service.mjs

@@ -1,9 +1,9 @@
 import "node:path";
 import "node:url";
 import.meta.url;
+import { ValidatorGroup } from "@authup/kit";
 import { PermissionName, ROLE_ADMIN_NAME, RolePermissionValidator } from "@authup/core-kit";
 import { AbstractEntityService } from "@authup/server-kit";
-import { ValidatorGroup } from "@authup/kit";
 import { BuiltInPolicyType, PolicyData } from "@authup/access";
 import { EntityConflictError, EntityNotFoundError } from "@authup/errors";
 //#region src/core/entities/role-permission/service.ts

package/dist/core/entities/scope/service.mjs

@@ -1,9 +1,9 @@
 import "node:path";
 import "node:url";
 import.meta.url;
+import { ValidatorGroup, isPropertySet, isUUID } from "@authup/kit";
 import { PermissionName, ScopeValidator } from "@authup/core-kit";
 import { AbstractEntityService } from "@authup/server-kit";
-import { ValidatorGroup, isPropertySet, isUUID } from "@authup/kit";
 import { BuiltInPolicyType, PolicyData } from "@authup/access";
 import { EntityNotFoundError } from "@authup/errors";
 //#region src/core/entities/scope/service.ts

package/dist/core/entities/user/service.mjs

@@ -2,9 +2,9 @@ import "node:path";
 import "node:url";
 import.meta.url;
 import { UserCredentialsService } from "../../authentication/credential/entities/user/module.mjs";
+import { ValidatorGroup, isUUID } from "@authup/kit";
 import { PermissionName, UserValidator } from "@authup/core-kit";
 import { AbstractEntityService } from "@authup/server-kit";
-import { ValidatorGroup, isUUID } from "@authup/kit";
 import { BuiltInPolicyType, PolicyData } from "@authup/access";
 import { BadRequestError, EntityNotFoundError } from "@authup/errors";
 //#region src/core/entities/user/service.ts

package/dist/core/entities/user-permission/service.mjs

@@ -1,9 +1,9 @@
 import "node:path";
 import "node:url";
 import.meta.url;
+import { ValidatorGroup } from "@authup/kit";
 import { PermissionName, UserPermissionValidator } from "@authup/core-kit";
 import { AbstractEntityService } from "@authup/server-kit";
-import { ValidatorGroup } from "@authup/kit";
 import { BuiltInPolicyType, PolicyData } from "@authup/access";
 import { EntityConflictError, EntityNotFoundError } from "@authup/errors";
 //#region src/core/entities/user-permission/service.ts

package/dist/core/entities/user-role/service.mjs

@@ -1,9 +1,9 @@
 import "node:path";
 import "node:url";
 import.meta.url;
+import { ValidatorGroup } from "@authup/kit";
 import { PermissionName, UserRoleValidator } from "@authup/core-kit";
 import { AbstractEntityService } from "@authup/server-kit";
-import { ValidatorGroup } from "@authup/kit";
 import { BuiltInPolicyType, PermissionError, PolicyData } from "@authup/access";
 import { EntityConflictError, EntityNotFoundError } from "@authup/errors";
 //#region src/core/entities/user-role/service.ts

package/dist/core/identity/provider/account/module.mjs

@@ -4,8 +4,8 @@ import.meta.url;
 import { IdentityProviderIdentityOperation } from "../constants.mjs";
 import { IdentityProviderMapperOperation } from "../mapper/constants.mjs";
 import "../mapper/index.mjs";
-import { UserValidator, buildUserFakeEmail, isUserFakeEmail } from "@authup/core-kit";
 import { ValidatorGroup, createNanoID, extendObject } from "@authup/kit";
+import { UserValidator, buildUserFakeEmail, isUserFakeEmail } from "@authup/core-kit";
 import { isValidupError, stringifyPath } from "validup";
 //#region src/core/identity/provider/account/module.ts
 var IdentityProviderAccountManager = class {

package/dist/core/identity/registration/service.mjs

@@ -5,8 +5,8 @@ import { UserCredentialsService } from "../../authentication/credential/entities
 import { MailTemplateName } from "../../mail/template/types.mjs";
 import "../../mail/index.mjs";
 import { RegistrationDisabledError } from "./error.mjs";
-import { UserValidator } from "@authup/core-kit";
 import { createNanoID } from "@authup/kit";
+import { UserValidator } from "@authup/core-kit";
 import { BadRequestError, EntityNotFoundError } from "@authup/errors";
 import { Container } from "validup";
 import { randomBytes } from "node:crypto";

package/dist/core/identity/resolver/module.mjs

@@ -1,8 +1,8 @@
 import "node:path";
 import "node:url";
 import.meta.url;
-import { IdentityType } from "@authup/core-kit";
 import { isUUID } from "@authup/kit";
+import { IdentityType } from "@authup/core-kit";
 //#region src/core/identity/resolver/module.ts
 var IdentityResolver = class {
 	clientRepository;

package/dist/core/oauth2/authorization/code-request/verifier/module.mjs

@@ -1,8 +1,8 @@
 import "node:path";
 import "node:url";
 import.meta.url;
-import { ScopeName } from "@authup/core-kit";
 import { isSimpleMatch } from "@authup/kit";
+import { ScopeName } from "@authup/core-kit";
 import { OAuth2AuthorizationResponseType, OAuth2ClientError, OAuth2GrantError, OAuth2RequestError, OAuth2ScopeError, hasOAuth2Scopes } from "@authup/specs";
 //#region src/core/oauth2/authorization/code-request/verifier/module.ts
 function willIssueCode(responseType) {

package/dist/core/oauth2/openid/claims.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"claims.d.ts","sourceRoot":"","sources":["../../../../src/core/oauth2/openid/claims.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EACR,MAAM,EACN,QAAQ,EACR,KAAK,EACL,IAAI,EACP,MAAM,kBAAkB,CAAC;AAE1B,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,eAAe,CAAC;AAExD,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AAE7C,KAAK,iBAAiB,CAAC,CAAC,IAAI;KACvB,CAAC,IAAI,MAAM,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,KAAK,EAAE,OAAO,KAAK,GAAG,CAAC;CAC/C,CAAC,MAAM,CAAC,CAAC,CAAC;AAEX,KAAK,YAAY,CAAC,CAAC,SAAS,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,IAAI,MAAM,CACrD,MAAM,kBAAkB,EAC5B,MAAM,CAAC,GAAG,iBAAiB,CAAC,CAAC,CAAC,CAC7B,CAAC;AAEF,qBAAa,yBAAyB;IAClC,SAAS,CAAC,SAAS,EAAG,YAAY,CAAC,MAAM,CAAC,CAkBxC;IAEF,SAAS,CAAC,QAAQ,EAAG,YAAY,CAAC,KAAK,CAAC,CAkBtC;IAEF,SAAS,CAAC,OAAO,EAAG,YAAY,CAAC,IAAI,CAAC,CAuBpC;IAEF;;;;OAIG;IACH,YAAY,CAAC,QAAQ,EAAE,QAAQ,GAAI,kBAAkB;IAYrD,UAAU,CAAC,KAAK,EAAE,MAAM,GAAI,kBAAkB;IAI9C,SAAS,CAAC,KAAK,EAAE,KAAK,GAAG,kBAAkB;IAI3C,QAAQ,CAAC,KAAK,EAAE,IAAI,GAAI,kBAAkB;IAI1C,SAAS,CAAC,OAAO,CAAC,CAAC,SAAS,aAAa,GAAG,aAAa,EACrD,YAAY,EAAE,YAAY,CAAC,CAAC,CAAC,EAC7B,UAAU,EAAE,CAAC,GACb,kBAAkB;CAqBzB"}
+{"version":3,"file":"claims.d.ts","sourceRoot":"","sources":["../../../../src/core/oauth2/openid/claims.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EACR,MAAM,EACN,QAAQ,EACR,KAAK,EACL,IAAI,EACP,MAAM,kBAAkB,CAAC;AAE1B,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,eAAe,CAAC;AAExD,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AAE7C,KAAK,iBAAiB,CAAC,CAAC,IAAI;KACvB,CAAC,IAAI,MAAM,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,KAAK,EAAE,OAAO,KAAK,GAAG,CAAC;CAC/C,CAAC,MAAM,CAAC,CAAC,CAAC;AAEX,KAAK,YAAY,CAAC,CAAC,SAAS,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,IAAI,MAAM,CACrD,MAAM,kBAAkB,EAC5B,MAAM,CAAC,GAAG,iBAAiB,CAAC,CAAC,CAAC,CAC7B,CAAC;AAEF,qBAAa,yBAAyB;IAClC,SAAS,CAAC,SAAS,EAAG,YAAY,CAAC,MAAM,CAAC,CAcxC;IAEF,SAAS,CAAC,QAAQ,EAAG,YAAY,CAAC,KAAK,CAAC,CActC;IAEF,SAAS,CAAC,OAAO,EAAG,YAAY,CAAC,IAAI,CAAC,CAmBpC;IAEF;;;;OAIG;IACH,YAAY,CAAC,QAAQ,EAAE,QAAQ,GAAI,kBAAkB;IAYrD,UAAU,CAAC,KAAK,EAAE,MAAM,GAAI,kBAAkB;IAI9C,SAAS,CAAC,KAAK,EAAE,KAAK,GAAG,kBAAkB;IAI3C,QAAQ,CAAC,KAAK,EAAE,IAAI,GAAI,kBAAkB;IAI1C,SAAS,CAAC,OAAO,CAAC,CAAC,SAAS,aAAa,GAAG,aAAa,EACrD,YAAY,EAAE,YAAY,CAAC,CAAC,CAAC,EAC7B,UAAU,EAAE,CAAC,GACb,kBAAkB;CAqBzB"}

package/dist/core/oauth2/openid/claims.mjs

@@ -11,7 +11,6 @@ var OAuth2OpenIDClaimsBuilder = class {
 		preferred_username: "name",
 		updated_at: ["updated_at", (value) => {
 			if (typeof value === "string") return Math.floor(new Date(value).getTime() / 1e3);
-			if (value instanceof Date) return Math.floor(value.getTime() / 1e3);
 			return value;
 		}]
 	};
@@ -21,7 +20,6 @@ var OAuth2OpenIDClaimsBuilder = class {
 		preferred_username: "name",
 		updated_at: ["updated_at", (value) => {
 			if (typeof value === "string") return Math.floor(new Date(value).getTime() / 1e3);
-			if (value instanceof Date) return Math.floor(value.getTime() / 1e3);
 			return value;
 		}]
 	};
@@ -33,7 +31,6 @@ var OAuth2OpenIDClaimsBuilder = class {
 		preferred_username: "display_name",
 		updated_at: ["updated_at", (value) => {
 			if (typeof value === "string") return Math.floor(new Date(value).getTime() / 1e3);
-			if (value instanceof Date) return Math.floor(value.getTime() / 1e3);
 			return value;
 		}],
 		email: "email",

package/dist/core/oauth2/openid/claims.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"claims.mjs","names":["hasOwnProperty","OAuth2SubKind","OAuth2OpenIDClaimsBuilder","clientMap","name","nickname","preferred_username","updated_at","value","Math","floor","Date","getTime","robotMap","userMap","family_name","given_name","email","email_verified","fromIdentity","identity","type","CLIENT","fromClient","data","ROBOT","fromRobot","fromUser","input","extract","attributeMap","attributes","result","keys","Object","key_","attribute","key","transformer"],"sources":["../../../../src/core/oauth2/openid/claims.ts"],"sourcesContent":["/*\n * Copyright (c) 2022.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport type {\n    Client, \n    Identity, \n    Robot, \n    User,\n} from '@authup/core-kit';\nimport { hasOwnProperty } from '@authup/kit';\nimport type { OpenIDTokenPayload } from '@authup/specs';\nimport { OAuth2SubKind } from '@authup/specs';\nimport type { ObjectLiteral } from 'validup';\n\ntype AttributeMapTuple<T> = {\n    [K in keyof T]: [K, (value: unknown) => any]\n}[keyof T];\n\ntype AttributeMap<T extends Record<string, any>> = Record<\n    keyof OpenIDTokenPayload,\nkeyof T | AttributeMapTuple<T>\n>;\n\nexport class OAuth2OpenIDClaimsBuilder {\n    protected clientMap : AttributeMap<Client> = {\n        name: 'name',\n        nickname: 'name',\n        preferred_username: 'name',\n        updated_at: [\n            'updated_at',\n            (value: unknown) => {\n                if (typeof value === 'string') {\n                    return Math.floor(new Date(value).getTime() / 1000);\n                }\n\n                if (value instanceof Date) {\n                    return Math.floor(value.getTime() / 1000);\n                }\n\n                return value;\n            },\n        ],\n    };\n\n    protected robotMap : AttributeMap<Robot> = {\n        name: 'name',\n        nickname: 'name',\n        preferred_username: 'name',\n        updated_at: [\n            'updated_at',\n            (value: unknown) => {\n                if (typeof value === 'string') {\n                    return Math.floor(new Date(value).getTime() / 1000);\n                }\n\n                if (value instanceof Date) {\n                    return Math.floor(value.getTime() / 1000);\n                }\n\n                return value;\n            },\n        ],\n    };\n\n    protected userMap : AttributeMap<User> = {\n        name: 'name',\n        family_name: 'last_name',\n        given_name: 'first_name',\n        nickname: 'display_name',\n        preferred_username: 'display_name',\n        updated_at: [\n            'updated_at',\n            (value: unknown) => {\n                if (typeof value === 'string') {\n                    return Math.floor(new Date(value).getTime() / 1000);\n                }\n\n                if (value instanceof Date) {\n                    return Math.floor(value.getTime() / 1000);\n                }\n\n                return value;\n            },\n        ],\n\n        email: 'email',\n        email_verified: 'active',\n    };\n\n    /**\n     * Build OpenID Claims form Oauth2 Identity.\n     *\n     * @param identity\n     */\n    fromIdentity(identity: Identity) : OpenIDTokenPayload {\n        if (identity.type === OAuth2SubKind.CLIENT) {\n            return this.fromClient(identity.data);\n        }\n\n        if (identity.type === OAuth2SubKind.ROBOT) {\n            return this.fromRobot(identity.data);\n        }\n\n        return this.fromUser(identity.data);\n    }\n\n    fromClient(input: Client) : OpenIDTokenPayload {\n        return this.extract(this.clientMap, input);\n    }\n\n    fromRobot(input: Robot): OpenIDTokenPayload {\n        return this.extract(this.robotMap, input);\n    }\n\n    fromUser(input: User) : OpenIDTokenPayload {\n        return this.extract(this.userMap, input);\n    }\n\n    protected extract<T extends ObjectLiteral = ObjectLiteral>(\n        attributeMap: AttributeMap<T>,\n        attributes: T,\n    ) : OpenIDTokenPayload {\n        const result = {} as OpenIDTokenPayload;\n\n        const keys = Object.keys(attributeMap);\n        for (const key_ of keys) {\n            const attribute = attributeMap[key_];\n            if (typeof attribute === 'string') {\n                if (hasOwnProperty(attributes, attribute)) {\n                    result[key_] = attributes[attribute];\n                }\n            } else {\n                const [key, transformer] = attribute as AttributeMapTuple<T>;\n\n                if (hasOwnProperty(attributes, key)) {\n                    result[key_] = transformer(attributes[key]);\n                }\n            }\n        }\n\n        return result;\n    }\n}\n"],"mappings":";;;;;;AA2BA,IAAaE,4BAAb,MAAaA;CACCC,YAAmC;EACzCC,MAAM;EACNC,UAAU;EACVC,oBAAoB;EACpBC,YAAY,CACR,eACCC,UAAAA;GACG,IAAI,OAAOA,UAAU,UACjB,OAAOC,KAAKC,MAAM,IAAIC,KAAKH,KAAAA,CAAAA,CAAOI,QAAO,IAAK,GAAA;GAGlD,IAAIJ,iBAAiBG,MACjB,OAAOF,KAAKC,MAAMF,MAAMI,QAAO,IAAK,GAAA;GAGxC,OAAOJ;EACX,CAAA;CAER;CAEUK,WAAiC;EACvCT,MAAM;EACNC,UAAU;EACVC,oBAAoB;EACpBC,YAAY,CACR,eACCC,UAAAA;GACG,IAAI,OAAOA,UAAU,UACjB,OAAOC,KAAKC,MAAM,IAAIC,KAAKH,KAAAA,CAAAA,CAAOI,QAAO,IAAK,GAAA;GAGlD,IAAIJ,iBAAiBG,MACjB,OAAOF,KAAKC,MAAMF,MAAMI,QAAO,IAAK,GAAA;GAGxC,OAAOJ;EACX,CAAA;CAER;CAEUM,UAA+B;EACrCV,MAAM;EACNW,aAAa;EACbC,YAAY;EACZX,UAAU;EACVC,oBAAoB;EACpBC,YAAY,CACR,eACCC,UAAAA;GACG,IAAI,OAAOA,UAAU,UACjB,OAAOC,KAAKC,MAAM,IAAIC,KAAKH,KAAAA,CAAAA,CAAOI,QAAO,IAAK,GAAA;GAGlD,IAAIJ,iBAAiBG,MACjB,OAAOF,KAAKC,MAAMF,MAAMI,QAAO,IAAK,GAAA;GAGxC,OAAOJ;EACX,CAAA;EAGJS,OAAO;EACPC,gBAAgB;CACpB;;;;;IAOAC,aAAaC,UAAyC;EAClD,IAAIA,SAASC,SAASpB,cAAcqB,QAChC,OAAO,KAAKC,WAAWH,SAASI,IAAI;EAGxC,IAAIJ,SAASC,SAASpB,cAAcwB,OAChC,OAAO,KAAKC,UAAUN,SAASI,IAAI;EAGvC,OAAO,KAAKG,SAASP,SAASI,IAAI;CACtC;CAEAD,WAAWK,OAAoC;EAC3C,OAAO,KAAKC,QAAQ,KAAK1B,WAAWyB,KAAAA;CACxC;CAEAF,UAAUE,OAAkC;EACxC,OAAO,KAAKC,QAAQ,KAAKhB,UAAUe,KAAAA;CACvC;CAEAD,SAASC,OAAkC;EACvC,OAAO,KAAKC,QAAQ,KAAKf,SAASc,KAAAA;CACtC;CAEUC,QACNC,cACAC,YACmB;EACnB,MAAMC,SAAS,CAAC;EAEhB,MAAMC,OAAOC,OAAOD,KAAKH,YAAAA;EACzB,KAAK,MAAMK,QAAQF,MAAM;GACrB,MAAMG,YAAYN,aAAaK;GAC/B,IAAI,OAAOC,cAAc;QACjBpC,eAAe+B,YAAYK,SAAAA,GAC3BJ,OAAOG,QAAQJ,WAAWK;GAAAA,OAE3B;IACH,MAAM,CAACC,KAAKC,eAAeF;IAE3B,IAAIpC,eAAe+B,YAAYM,GAAAA,GAC3BL,OAAOG,QAAQG,YAAYP,WAAWM,IAAI;GAElD;EACJ;EAEA,OAAOL;CACX;AACJ"}
+{"version":3,"file":"claims.mjs","names":["hasOwnProperty","OAuth2SubKind","OAuth2OpenIDClaimsBuilder","clientMap","name","nickname","preferred_username","updated_at","value","Math","floor","Date","getTime","robotMap","userMap","family_name","given_name","email","email_verified","fromIdentity","identity","type","CLIENT","fromClient","data","ROBOT","fromRobot","fromUser","input","extract","attributeMap","attributes","result","keys","Object","key_","attribute","key","transformer"],"sources":["../../../../src/core/oauth2/openid/claims.ts"],"sourcesContent":["/*\n * Copyright (c) 2022.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport type {\n    Client, \n    Identity, \n    Robot, \n    User,\n} from '@authup/core-kit';\nimport { hasOwnProperty } from '@authup/kit';\nimport type { OpenIDTokenPayload } from '@authup/specs';\nimport { OAuth2SubKind } from '@authup/specs';\nimport type { ObjectLiteral } from 'validup';\n\ntype AttributeMapTuple<T> = {\n    [K in keyof T]: [K, (value: unknown) => any]\n}[keyof T];\n\ntype AttributeMap<T extends Record<string, any>> = Record<\n    keyof OpenIDTokenPayload,\nkeyof T | AttributeMapTuple<T>\n>;\n\nexport class OAuth2OpenIDClaimsBuilder {\n    protected clientMap : AttributeMap<Client> = {\n        name: 'name',\n        nickname: 'name',\n        preferred_username: 'name',\n        updated_at: [\n            'updated_at',\n            (value: unknown) => {\n                if (typeof value === 'string') {\n                    return Math.floor(new Date(value).getTime() / 1000);\n                }\n\n                return value;\n            },\n        ],\n    };\n\n    protected robotMap : AttributeMap<Robot> = {\n        name: 'name',\n        nickname: 'name',\n        preferred_username: 'name',\n        updated_at: [\n            'updated_at',\n            (value: unknown) => {\n                if (typeof value === 'string') {\n                    return Math.floor(new Date(value).getTime() / 1000);\n                }\n\n                return value;\n            },\n        ],\n    };\n\n    protected userMap : AttributeMap<User> = {\n        name: 'name',\n        family_name: 'last_name',\n        given_name: 'first_name',\n        nickname: 'display_name',\n        preferred_username: 'display_name',\n        updated_at: [\n            'updated_at',\n            (value: unknown) => {\n                if (typeof value === 'string') {\n                    return Math.floor(new Date(value).getTime() / 1000);\n                }\n\n                return value;\n            },\n        ],\n\n        email: 'email',\n        email_verified: 'active',\n    };\n\n    /**\n     * Build OpenID Claims form Oauth2 Identity.\n     *\n     * @param identity\n     */\n    fromIdentity(identity: Identity) : OpenIDTokenPayload {\n        if (identity.type === OAuth2SubKind.CLIENT) {\n            return this.fromClient(identity.data);\n        }\n\n        if (identity.type === OAuth2SubKind.ROBOT) {\n            return this.fromRobot(identity.data);\n        }\n\n        return this.fromUser(identity.data);\n    }\n\n    fromClient(input: Client) : OpenIDTokenPayload {\n        return this.extract(this.clientMap, input);\n    }\n\n    fromRobot(input: Robot): OpenIDTokenPayload {\n        return this.extract(this.robotMap, input);\n    }\n\n    fromUser(input: User) : OpenIDTokenPayload {\n        return this.extract(this.userMap, input);\n    }\n\n    protected extract<T extends ObjectLiteral = ObjectLiteral>(\n        attributeMap: AttributeMap<T>,\n        attributes: T,\n    ) : OpenIDTokenPayload {\n        const result = {} as OpenIDTokenPayload;\n\n        const keys = Object.keys(attributeMap);\n        for (const key_ of keys) {\n            const attribute = attributeMap[key_];\n            if (typeof attribute === 'string') {\n                if (hasOwnProperty(attributes, attribute)) {\n                    result[key_] = attributes[attribute];\n                }\n            } else {\n                const [key, transformer] = attribute as AttributeMapTuple<T>;\n\n                if (hasOwnProperty(attributes, key)) {\n                    result[key_] = transformer(attributes[key]);\n                }\n            }\n        }\n\n        return result;\n    }\n}\n"],"mappings":";;;;;;AA2BA,IAAaE,4BAAb,MAAaA;CACCC,YAAmC;EACzCC,MAAM;EACNC,UAAU;EACVC,oBAAoB;EACpBC,YAAY,CACR,eACCC,UAAAA;GACG,IAAI,OAAOA,UAAU,UACjB,OAAOC,KAAKC,MAAM,IAAIC,KAAKH,KAAAA,CAAAA,CAAOI,QAAO,IAAK,GAAA;GAGlD,OAAOJ;EACX,CAAA;CAER;CAEUK,WAAiC;EACvCT,MAAM;EACNC,UAAU;EACVC,oBAAoB;EACpBC,YAAY,CACR,eACCC,UAAAA;GACG,IAAI,OAAOA,UAAU,UACjB,OAAOC,KAAKC,MAAM,IAAIC,KAAKH,KAAAA,CAAAA,CAAOI,QAAO,IAAK,GAAA;GAGlD,OAAOJ;EACX,CAAA;CAER;CAEUM,UAA+B;EACrCV,MAAM;EACNW,aAAa;EACbC,YAAY;EACZX,UAAU;EACVC,oBAAoB;EACpBC,YAAY,CACR,eACCC,UAAAA;GACG,IAAI,OAAOA,UAAU,UACjB,OAAOC,KAAKC,MAAM,IAAIC,KAAKH,KAAAA,CAAAA,CAAOI,QAAO,IAAK,GAAA;GAGlD,OAAOJ;EACX,CAAA;EAGJS,OAAO;EACPC,gBAAgB;CACpB;;;;;IAOAC,aAAaC,UAAyC;EAClD,IAAIA,SAASC,SAASpB,cAAcqB,QAChC,OAAO,KAAKC,WAAWH,SAASI,IAAI;EAGxC,IAAIJ,SAASC,SAASpB,cAAcwB,OAChC,OAAO,KAAKC,UAAUN,SAASI,IAAI;EAGvC,OAAO,KAAKG,SAASP,SAASI,IAAI;CACtC;CAEAD,WAAWK,OAAoC;EAC3C,OAAO,KAAKC,QAAQ,KAAK1B,WAAWyB,KAAAA;CACxC;CAEAF,UAAUE,OAAkC;EACxC,OAAO,KAAKC,QAAQ,KAAKhB,UAAUe,KAAAA;CACvC;CAEAD,SAASC,OAAkC;EACvC,OAAO,KAAKC,QAAQ,KAAKf,SAASc,KAAAA;CACtC;CAEUC,QACNC,cACAC,YACmB;EACnB,MAAMC,SAAS,CAAC;EAEhB,MAAMC,OAAOC,OAAOD,KAAKH,YAAAA;EACzB,KAAK,MAAMK,QAAQF,MAAM;GACrB,MAAMG,YAAYN,aAAaK;GAC/B,IAAI,OAAOC,cAAc;QACjBpC,eAAe+B,YAAYK,SAAAA,GAC3BJ,OAAOG,QAAQJ,WAAWK;GAAAA,OAE3B;IACH,MAAM,CAACC,KAAKC,eAAeF;IAE3B,IAAIpC,eAAe+B,YAAYM,GAAAA,GAC3BL,OAAOG,QAAQG,YAAYP,WAAWM,IAAI;GAElD;EACJ;EAEA,OAAOL;CACX;AACJ"}

package/dist/core/oauth2/scope/resolver.mjs

@@ -1,8 +1,8 @@
 import "node:path";
 import "node:url";
 import.meta.url;
-import { ScopeName } from "@authup/core-kit";
 import { hasOwnProperty } from "@authup/kit";
+import { ScopeName } from "@authup/core-kit";
 import { OAuth2SubKind, unwrapOAuth2Scope } from "@authup/specs";
 import { distinctArray } from "smob";
 //#region src/core/oauth2/scope/resolver.ts

package/dist/core/provisioning/synchronizer/user/module.mjs

@@ -7,8 +7,8 @@ import "../../strategy/index.mjs";
 import { BaseProvisioningSynchronizer } from "../base.mjs";
 import { ProvisioningEntityResolver } from "../entity-resolver.mjs";
 import { ProvisioningJunctionSynchronizer } from "../junction-synchronizer.mjs";
-import { buildUserFakeEmail } from "@authup/core-kit";
 import { pickRecord } from "@authup/kit";
+import { buildUserFakeEmail } from "@authup/core-kit";
 //#region src/core/provisioning/synchronizer/user/module.ts
 var UserProvisioningSynchronizer = class extends BaseProvisioningSynchronizer {
 	userRepository;