@authup/server-core 1.0.0-beta.5 → 1.0.0-beta.50

package/dist/http/oauth2/grant-types/abstract.js

@@ -1,46 +0,0 @@
-"use strict";
-/*
- * Copyright (c) 2022.
- * Author Peter Placzek (tada5hi)
- * For the full copyright and license information,
- * view the LICENSE file that was distributed with this source code.
- */
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.AbstractGrant = void 0;
-const typeorm_extension_1 = require("typeorm-extension");
-const domains_1 = require("../../../domains");
-const config_1 = require("../../../config");
-const token_1 = require("../token");
-const cache_1 = require("../cache");
-class AbstractGrant {
-    // -----------------------------------------------------
-    constructor() {
-        this.config = (0, config_1.useConfig)();
-        this.refreshTokenCache = new cache_1.OAuth2RefreshTokenCache();
-    }
-    // -----------------------------------------------------
-    async issueAccessToken(context) {
-        return (0, token_1.buildOAuth2AccessTokenPayload)({
-            issuer: this.config.publicUrl,
-            realmId: context.realmId,
-            realmName: context.realmName,
-            sub: context.sub,
-            subKind: context.subKind,
-            remoteAddress: context.remoteAddress,
-            scope: context.scope,
-            clientId: context.clientId,
-        });
-    }
-    async issueRefreshToken(accessToken) {
-        const dataSource = await (0, typeorm_extension_1.useDataSource)();
-        const repository = dataSource.getRepository(domains_1.OAuth2RefreshTokenEntity);
-        const token = repository.create((0, token_1.transformToRefreshTokenEntity)(accessToken, this.config.tokenAccessMaxAge));
-        await repository.insert(token);
-        await this.refreshTokenCache.set(token);
-        return (0, token_1.transformToRefreshTokenPayload)(accessToken, {
-            id: token.id,
-        });
-    }
-}
-exports.AbstractGrant = AbstractGrant;
-//# sourceMappingURL=abstract.js.map

package/dist/http/oauth2/grant-types/abstract.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"abstract.js","sourceRoot":"","sources":["../../../../src/http/oauth2/grant-types/abstract.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;;AAGH,yDAAkD;AAClD,8CAA4D;AAE5D,4CAA4C;AAC5C,oCAIkB;AAClB,oCAAmD;AAGnD,MAAsB,aAAa;IAK/B,wDAAwD;IAExD;QACI,IAAI,CAAC,MAAM,GAAG,IAAA,kBAAS,GAAE,CAAC;QAE1B,IAAI,CAAC,iBAAiB,GAAG,IAAI,+BAAuB,EAAE,CAAC;IAC3D,CAAC;IAED,wDAAwD;IAE9C,KAAK,CAAC,gBAAgB,CAAC,OAAgC;QAC7D,OAAO,IAAA,qCAA6B,EAAC;YACjC,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,SAAS;YAC7B,OAAO,EAAE,OAAO,CAAC,OAAO;YACxB,SAAS,EAAE,OAAO,CAAC,SAAS;YAC5B,GAAG,EAAE,OAAO,CAAC,GAAG;YAChB,OAAO,EAAE,OAAO,CAAC,OAAO;YACxB,aAAa,EAAE,OAAO,CAAC,aAAa;YACpC,KAAK,EAAE,OAAO,CAAC,KAAK;YACpB,QAAQ,EAAE,OAAO,CAAC,QAAQ;SAC7B,CAAC,CAAC;IACP,CAAC;IAES,KAAK,CAAC,iBAAiB,CAAC,WAAwC;QACtE,MAAM,UAAU,GAAG,MAAM,IAAA,iCAAa,GAAE,CAAC;QACzC,MAAM,UAAU,GAAG,UAAU,CAAC,aAAa,CAAC,kCAAwB,CAAC,CAAC;QAEtE,MAAM,KAAK,GAAG,UAAU,CAAC,MAAM,CAC3B,IAAA,qCAA6B,EACzB,WAAW,EACX,IAAI,CAAC,MAAM,CAAC,iBAAiB,CAChC,CACJ,CAAC;QAEF,MAAM,UAAU,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QAE/B,MAAM,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QAExC,OAAO,IAAA,sCAA8B,EAAC,WAAW,EAAE;YAC/C,EAAE,EAAE,KAAK,CAAC,EAAE;SACf,CAAC,CAAC;IACP,CAAC;CACJ;AA/CD,sCA+CC"}

package/dist/http/oauth2/grant-types/authorize.d.ts

@@ -1,12 +0,0 @@
-import type { OAuth2TokenGrantResponse } from '@authup/core';
-import type { Request } from 'routup';
-import { OAuth2AuthorizationCodeEntity } from '../../../domains';
-import { AbstractGrant } from './abstract';
-import type { Grant } from './type';
-export declare class AuthorizeGrantType extends AbstractGrant implements Grant {
-    run(request: Request): Promise<OAuth2TokenGrantResponse>;
-    validate(request: Request): Promise<OAuth2AuthorizationCodeEntity>;
-    protected getAuthorizationCode(request: Request): string;
-    protected getRedirectURI(request: Request): string;
-}
-//# sourceMappingURL=authorize.d.ts.map

package/dist/http/oauth2/grant-types/authorize.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"authorize.d.ts","sourceRoot":"","sources":["../../../../src/http/oauth2/grant-types/authorize.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,cAAc,CAAC;AAO7D,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,QAAQ,CAAC;AAEtC,OAAO,EAAE,6BAA6B,EAAE,MAAM,kBAAkB,CAAC;AACjE,OAAO,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAC3C,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,QAAQ,CAAC;AAIpC,qBAAa,kBAAmB,SAAQ,aAAc,YAAW,KAAK;IAC5D,GAAG,CAAC,OAAO,EAAE,OAAO,GAAI,OAAO,CAAC,wBAAwB,CAAC;IA4BzD,QAAQ,CAAC,OAAO,EAAE,OAAO,GAAI,OAAO,CAAC,6BAA6B,CAAC;IA8BzE,SAAS,CAAC,oBAAoB,CAAC,OAAO,EAAE,OAAO,GAAI,MAAM;IAczD,SAAS,CAAC,cAAc,CAAC,OAAO,EAAE,OAAO,GAAI,MAAM;CAatD"}

package/dist/http/oauth2/grant-types/authorize.js

@@ -1,86 +0,0 @@
-"use strict";
-/*
- * Copyright (c) 2022.
- * Author Peter Placzek (tada5hi)
- * For the full copyright and license information,
- * view the LICENSE file that was distributed with this source code.
- */
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.AuthorizeGrantType = void 0;
-const core_1 = require("@authup/core");
-const body_1 = require("@routup/basic/body");
-const query_1 = require("@routup/basic/query");
-const typeorm_extension_1 = require("typeorm-extension");
-const routup_1 = require("routup");
-const domains_1 = require("../../../domains");
-const abstract_1 = require("./abstract");
-const response_1 = require("../response");
-class AuthorizeGrantType extends abstract_1.AbstractGrant {
-    async run(request) {
-        const authorizationCode = await this.validate(request);
-        const accessToken = await this.issueAccessToken({
-            remoteAddress: (0, routup_1.getRequestIP)(request, { trustProxy: true }),
-            sub: authorizationCode.user_id,
-            subKind: core_1.OAuth2SubKind.USER,
-            realmId: authorizationCode.realm.id,
-            realmName: authorizationCode.realm.name,
-            scope: authorizationCode.scope,
-            clientId: authorizationCode.client_id,
-        });
-        const refreshToken = await this.issueRefreshToken(accessToken);
-        const buildContext = {
-            accessToken,
-            accessTokenMaxAge: this.config.tokenRefreshMaxAge,
-            refreshToken,
-            refreshTokenMaxAge: this.config.tokenAccessMaxAge,
-        };
-        if ((0, core_1.hasOAuth2OpenIDScope)(authorizationCode.scope)) {
-            buildContext.idToken = authorizationCode.id_token;
-        }
-        return (0, response_1.buildOAuth2BearerTokenResponse)(buildContext);
-    }
-    async validate(request) {
-        const code = this.getAuthorizationCode(request);
-        const dataSource = await (0, typeorm_extension_1.useDataSource)();
-        const repository = dataSource.getRepository(domains_1.OAuth2AuthorizationCodeEntity);
-        const entity = await repository.findOne({
-            where: {
-                content: code,
-            },
-            relations: ['user', 'realm'],
-        });
-        if (!entity) {
-            throw core_1.TokenError.grantInvalid();
-        }
-        if (entity.redirect_uri) {
-            const redirectUri = this.getRedirectURI(request);
-            if (!redirectUri || entity.redirect_uri !== redirectUri) {
-                throw core_1.TokenError.redirectUriMismatch();
-            }
-        }
-        await repository.remove(entity);
-        return entity;
-    }
-    getAuthorizationCode(request) {
-        let code = (0, body_1.useRequestBody)(request, 'code');
-        if (!code) {
-            code = (0, query_1.useRequestQuery)(request, 'code');
-        }
-        if (!code || typeof code !== 'string') {
-            throw core_1.TokenError.requestInvalid();
-        }
-        return code;
-    }
-    getRedirectURI(request) {
-        let redirectUri = (0, body_1.useRequestBody)(request, 'redirect_uri');
-        if (!redirectUri) {
-            redirectUri = (0, query_1.useRequestQuery)(request, 'redirect_uri');
-        }
-        if (!redirectUri || typeof redirectUri !== 'string') {
-            throw core_1.TokenError.redirectUriMismatch();
-        }
-        return redirectUri;
-    }
-}
-exports.AuthorizeGrantType = AuthorizeGrantType;
-//# sourceMappingURL=authorize.js.map

package/dist/http/oauth2/grant-types/authorize.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"authorize.js","sourceRoot":"","sources":["../../../../src/http/oauth2/grant-types/authorize.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;;AAGH,uCAEsB;AACtB,6CAAoD;AACpD,+CAAsD;AACtD,yDAAkD;AAElD,mCAAsC;AACtC,8CAAiE;AACjE,yCAA2C;AAG3C,0CAA6D;AAE7D,MAAa,kBAAmB,SAAQ,wBAAa;IACjD,KAAK,CAAC,GAAG,CAAC,OAAgB;QACtB,MAAM,iBAAiB,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;QAEvD,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAAC;YAC5C,aAAa,EAAE,IAAA,qBAAY,EAAC,OAAO,EAAE,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC;YAC1D,GAAG,EAAE,iBAAiB,CAAC,OAAO;YAC9B,OAAO,EAAE,oBAAa,CAAC,IAAI;YAC3B,OAAO,EAAE,iBAAiB,CAAC,KAAK,CAAC,EAAE;YACnC,SAAS,EAAE,iBAAiB,CAAC,KAAK,CAAC,IAAI;YACvC,KAAK,EAAE,iBAAiB,CAAC,KAAK;YAC9B,QAAQ,EAAE,iBAAiB,CAAC,SAAS;SACxC,CAAC,CAAC;QAEH,MAAM,YAAY,GAAG,MAAM,IAAI,CAAC,iBAAiB,CAAC,WAAW,CAAC,CAAC;QAC/D,MAAM,YAAY,GAAsC;YACpD,WAAW;YACX,iBAAiB,EAAE,IAAI,CAAC,MAAM,CAAC,kBAAkB;YACjD,YAAY;YACZ,kBAAkB,EAAE,IAAI,CAAC,MAAM,CAAC,iBAAiB;SACpD,CAAC;QAEF,IAAI,IAAA,2BAAoB,EAAC,iBAAiB,CAAC,KAAK,CAAC,EAAE,CAAC;YAChD,YAAY,CAAC,OAAO,GAAG,iBAAiB,CAAC,QAAQ,CAAC;QACtD,CAAC;QAED,OAAO,IAAA,yCAA8B,EAAC,YAAY,CAAC,CAAC;IACxD,CAAC;IAED,KAAK,CAAC,QAAQ,CAAC,OAAgB;QAC3B,MAAM,IAAI,GAAG,IAAI,CAAC,oBAAoB,CAAC,OAAO,CAAC,CAAC;QAEhD,MAAM,UAAU,GAAG,MAAM,IAAA,iCAAa,GAAE,CAAC;QACzC,MAAM,UAAU,GAAG,UAAU,CAAC,aAAa,CAAC,uCAA6B,CAAC,CAAC;QAE3E,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,OAAO,CAAC;YACpC,KAAK,EAAE;gBACH,OAAO,EAAE,IAAI;aAChB;YACD,SAAS,EAAE,CAAC,MAAM,EAAE,OAAO,CAAC;SAC/B,CAAC,CAAC;QAEH,IAAI,CAAC,MAAM,EAAE,CAAC;YACV,MAAM,iBAAU,CAAC,YAAY,EAAE,CAAC;QACpC,CAAC;QAED,IAAI,MAAM,CAAC,YAAY,EAAE,CAAC;YACtB,MAAM,WAAW,GAAG,IAAI,CAAC,cAAc,CAAC,OAAO,CAAC,CAAC;YAEjD,IAAI,CAAC,WAAW,IAAI,MAAM,CAAC,YAAY,KAAK,WAAW,EAAE,CAAC;gBACtD,MAAM,iBAAU,CAAC,mBAAmB,EAAE,CAAC;YAC3C,CAAC;QACL,CAAC;QAED,MAAM,UAAU,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QAEhC,OAAO,MAAM,CAAC;IAClB,CAAC;IAES,oBAAoB,CAAC,OAAgB;QAC3C,IAAI,IAAI,GAAG,IAAA,qBAAc,EAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QAE3C,IAAI,CAAC,IAAI,EAAE,CAAC;YACR,IAAI,GAAG,IAAA,uBAAe,EAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QAC5C,CAAC;QAED,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;YACpC,MAAM,iBAAU,CAAC,cAAc,EAAE,CAAC;QACtC,CAAC;QAED,OAAO,IAAI,CAAC;IAChB,CAAC;IAES,cAAc,CAAC,OAAgB;QACrC,IAAI,WAAW,GAAG,IAAA,qBAAc,EAAC,OAAO,EAAE,cAAc,CAAC,CAAC;QAE1D,IAAI,CAAC,WAAW,EAAE,CAAC;YACf,WAAW,GAAG,IAAA,uBAAe,EAAC,OAAO,EAAE,cAAc,CAAC,CAAC;QAC3D,CAAC;QAED,IAAI,CAAC,WAAW,IAAI,OAAO,WAAW,KAAK,QAAQ,EAAE,CAAC;YAClD,MAAM,iBAAU,CAAC,mBAAmB,EAAE,CAAC;QAC3C,CAAC;QAED,OAAO,WAAW,CAAC;IACvB,CAAC;CACJ;AAtFD,gDAsFC"}

package/dist/http/oauth2/grant-types/client-credentials.d.ts

@@ -1,11 +0,0 @@
-import type { OAuth2TokenGrantResponse } from '@authup/core';
-import type { Request } from 'routup';
-import { ClientEntity } from '../../../domains';
-import { AbstractGrant } from './abstract';
-import type { Grant } from './type';
-export declare class ClientCredentialsGrant extends AbstractGrant implements Grant {
-    run(request: Request): Promise<OAuth2TokenGrantResponse>;
-    validate(request: Request): Promise<ClientEntity>;
-    protected getClientCredentials(request: Request): [string, string];
-}
-//# sourceMappingURL=client-credentials.d.ts.map

package/dist/http/oauth2/grant-types/client-credentials.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"client-credentials.d.ts","sourceRoot":"","sources":["../../../../src/http/oauth2/grant-types/client-credentials.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,cAAc,CAAC;AAO7D,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,QAAQ,CAAC;AAGtC,OAAO,EAAE,YAAY,EAAE,MAAM,kBAAkB,CAAC;AAChD,OAAO,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAC3C,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,QAAQ,CAAC;AAGpC,qBAAa,sBAAuB,SAAQ,aAAc,YAAW,KAAK;IAChE,GAAG,CAAC,OAAO,EAAE,OAAO,GAAI,OAAO,CAAC,wBAAwB,CAAC;IAuBzD,QAAQ,CAAC,OAAO,EAAE,OAAO,GAAI,OAAO,CAAC,YAAY,CAAC;IAqBxD,SAAS,CAAC,oBAAoB,CAAC,OAAO,EAAE,OAAO,GAAI,CAAC,MAAM,EAAE,MAAM,CAAC;CAmBtE"}

package/dist/http/oauth2/grant-types/client-credentials.js

@@ -1,71 +0,0 @@
-"use strict";
-/*
- * Copyright (c) 2022.
- * Author Peter Placzek (tada5hi)
- * For the full copyright and license information,
- * view the LICENSE file that was distributed with this source code.
- */
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.ClientCredentialsGrant = void 0;
-const core_1 = require("@authup/core");
-const body_1 = require("@routup/basic/body");
-const query_1 = require("@routup/basic/query");
-const hapic_1 = require("hapic");
-const routup_1 = require("routup");
-const typeorm_extension_1 = require("typeorm-extension");
-const domains_1 = require("../../../domains");
-const abstract_1 = require("./abstract");
-const response_1 = require("../response");
-class ClientCredentialsGrant extends abstract_1.AbstractGrant {
-    async run(request) {
-        const client = await this.validate(request);
-        const accessToken = await this.issueAccessToken({
-            remoteAddress: (0, routup_1.getRequestIP)(request, { trustProxy: true }),
-            scope: core_1.ScopeName.GLOBAL,
-            sub: client.id,
-            subKind: core_1.OAuth2SubKind.CLIENT,
-            realmId: client.realm.id,
-            realmName: client.realm.name,
-            clientId: client.id,
-        });
-        const refreshToken = await this.issueRefreshToken(accessToken);
-        return (0, response_1.buildOAuth2BearerTokenResponse)({
-            accessToken,
-            accessTokenMaxAge: this.config.tokenRefreshMaxAge,
-            refreshToken,
-            refreshTokenMaxAge: this.config.tokenAccessMaxAge,
-        });
-    }
-    async validate(request) {
-        const [id, secret] = this.getClientCredentials(request);
-        const dataSource = await (0, typeorm_extension_1.useDataSource)();
-        const repository = dataSource.getRepository(domains_1.ClientEntity);
-        const entity = await repository.findOne({
-            where: {
-                id,
-                secret,
-            },
-            relations: ['realm'],
-        });
-        if (!entity) {
-            throw core_1.UserError.credentialsInvalid();
-        }
-        return entity;
-    }
-    getClientCredentials(request) {
-        let clientId = (0, body_1.useRequestBody)(request, 'client_id') || (0, query_1.useRequestQuery)(request, 'client_id');
-        let clientSecret = (0, body_1.useRequestBody)(request, 'client_secret') || (0, query_1.useRequestQuery)(request, 'client_secret');
-        if (!clientId && !clientSecret) {
-            const { authorization: headerValue } = request.headers;
-            const header = (0, hapic_1.parseAuthorizationHeader)(headerValue);
-            if (header.type !== hapic_1.AuthorizationHeaderType.BASIC) {
-                throw core_1.TokenError.requestInvalid();
-            }
-            clientId = header.username;
-            clientSecret = header.password;
-        }
-        return [clientId, clientSecret];
-    }
-}
-exports.ClientCredentialsGrant = ClientCredentialsGrant;
-//# sourceMappingURL=client-credentials.js.map

package/dist/http/oauth2/grant-types/client-credentials.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"client-credentials.js","sourceRoot":"","sources":["../../../../src/http/oauth2/grant-types/client-credentials.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;;AAGH,uCAEsB;AACtB,6CAAoD;AACpD,+CAAsD;AACtD,iCAA0E;AAE1E,mCAAsC;AACtC,yDAAkD;AAClD,8CAAgD;AAChD,yCAA2C;AAE3C,0CAA6D;AAE7D,MAAa,sBAAuB,SAAQ,wBAAa;IACrD,KAAK,CAAC,GAAG,CAAC,OAAgB;QACtB,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;QAE5C,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAAC;YAC5C,aAAa,EAAE,IAAA,qBAAY,EAAC,OAAO,EAAE,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC;YAC1D,KAAK,EAAE,gBAAS,CAAC,MAAM;YACvB,GAAG,EAAE,MAAM,CAAC,EAAE;YACd,OAAO,EAAE,oBAAa,CAAC,MAAM;YAC7B,OAAO,EAAE,MAAM,CAAC,KAAK,CAAC,EAAE;YACxB,SAAS,EAAE,MAAM,CAAC,KAAK,CAAC,IAAI;YAC5B,QAAQ,EAAE,MAAM,CAAC,EAAE;SACtB,CAAC,CAAC;QAEH,MAAM,YAAY,GAAG,MAAM,IAAI,CAAC,iBAAiB,CAAC,WAAW,CAAC,CAAC;QAE/D,OAAO,IAAA,yCAA8B,EAAC;YAClC,WAAW;YACX,iBAAiB,EAAE,IAAI,CAAC,MAAM,CAAC,kBAAkB;YACjD,YAAY;YACZ,kBAAkB,EAAE,IAAI,CAAC,MAAM,CAAC,iBAAiB;SACpD,CAAC,CAAC;IACP,CAAC;IAED,KAAK,CAAC,QAAQ,CAAC,OAAgB;QAC3B,MAAM,CAAC,EAAE,EAAE,MAAM,CAAC,GAAG,IAAI,CAAC,oBAAoB,CAAC,OAAO,CAAC,CAAC;QAExD,MAAM,UAAU,GAAG,MAAM,IAAA,iCAAa,GAAE,CAAC;QACzC,MAAM,UAAU,GAAG,UAAU,CAAC,aAAa,CAAC,sBAAY,CAAC,CAAC;QAE1D,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,OAAO,CAAC;YACpC,KAAK,EAAE;gBACH,EAAE;gBACF,MAAM;aACT;YACD,SAAS,EAAE,CAAC,OAAO,CAAC;SACvB,CAAC,CAAC;QAEH,IAAI,CAAC,MAAM,EAAE,CAAC;YACV,MAAM,gBAAS,CAAC,kBAAkB,EAAE,CAAC;QACzC,CAAC;QAED,OAAO,MAAM,CAAC;IAClB,CAAC;IAES,oBAAoB,CAAC,OAAgB;QAC3C,IAAI,QAAQ,GAAG,IAAA,qBAAc,EAAC,OAAO,EAAE,WAAW,CAAC,IAAI,IAAA,uBAAe,EAAC,OAAO,EAAE,WAAW,CAAC,CAAC;QAC7F,IAAI,YAAY,GAAG,IAAA,qBAAc,EAAC,OAAO,EAAE,eAAe,CAAC,IAAI,IAAA,uBAAe,EAAC,OAAO,EAAE,eAAe,CAAC,CAAC;QAEzG,IAAI,CAAC,QAAQ,IAAI,CAAC,YAAY,EAAE,CAAC;YAC7B,MAAM,EAAE,aAAa,EAAE,WAAW,EAAE,GAAG,OAAO,CAAC,OAAO,CAAC;YAEvD,MAAM,MAAM,GAAG,IAAA,gCAAwB,EAAC,WAAW,CAAC,CAAC;YAErD,IAAI,MAAM,CAAC,IAAI,KAAK,+BAAuB,CAAC,KAAK,EAAE,CAAC;gBAChD,MAAM,iBAAU,CAAC,cAAc,EAAE,CAAC;YACtC,CAAC;YAED,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAC;YAC3B,YAAY,GAAG,MAAM,CAAC,QAAQ,CAAC;QACnC,CAAC;QAED,OAAO,CAAC,QAAQ,EAAE,YAAY,CAAC,CAAC;IACpC,CAAC;CACJ;AAhED,wDAgEC"}

package/dist/http/oauth2/grant-types/index.d.ts

@@ -1,9 +0,0 @@
-export * from './authorize';
-export * from './client-credentials';
-export * from './internal';
-export * from './password';
-export * from './refresh-token';
-export * from './robot-credentials';
-export * from './type';
-export * from './utils';
-//# sourceMappingURL=index.d.ts.map

package/dist/http/oauth2/grant-types/index.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/http/oauth2/grant-types/index.ts"],"names":[],"mappings":"AAOA,cAAc,aAAa,CAAC;AAC5B,cAAc,sBAAsB,CAAC;AACrC,cAAc,YAAY,CAAC;AAC3B,cAAc,YAAY,CAAC;AAC3B,cAAc,iBAAiB,CAAC;AAChC,cAAc,qBAAqB,CAAC;AACpC,cAAc,QAAQ,CAAC;AACvB,cAAc,SAAS,CAAC"}

package/dist/http/oauth2/grant-types/index.js

@@ -1,31 +0,0 @@
-"use strict";
-/*
- * Copyright (c) 2022.
- * Author Peter Placzek (tada5hi)
- * For the full copyright and license information,
- * view the LICENSE file that was distributed with this source code.
- */
-var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    var desc = Object.getOwnPropertyDescriptor(m, k);
-    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
-      desc = { enumerable: true, get: function() { return m[k]; } };
-    }
-    Object.defineProperty(o, k2, desc);
-}) : (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    o[k2] = m[k];
-}));
-var __exportStar = (this && this.__exportStar) || function(m, exports) {
-    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
-};
-Object.defineProperty(exports, "__esModule", { value: true });
-__exportStar(require("./authorize"), exports);
-__exportStar(require("./client-credentials"), exports);
-__exportStar(require("./internal"), exports);
-__exportStar(require("./password"), exports);
-__exportStar(require("./refresh-token"), exports);
-__exportStar(require("./robot-credentials"), exports);
-__exportStar(require("./type"), exports);
-__exportStar(require("./utils"), exports);
-//# sourceMappingURL=index.js.map

package/dist/http/oauth2/grant-types/index.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../src/http/oauth2/grant-types/index.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;;;;;;;;;;;;;;;AAEH,8CAA4B;AAC5B,uDAAqC;AACrC,6CAA2B;AAC3B,6CAA2B;AAC3B,kDAAgC;AAChC,sDAAoC;AACpC,yCAAuB;AACvB,0CAAwB"}

package/dist/http/oauth2/grant-types/internal.d.ts

@@ -1,8 +0,0 @@
-import type { OAuth2TokenGrantResponse } from '@authup/core';
-import type { Request } from 'routup';
-import { AbstractGrant } from './abstract';
-import type { Grant } from './type';
-export declare class InternalGrantType extends AbstractGrant implements Grant {
-    run(request: Request): Promise<OAuth2TokenGrantResponse>;
-}
-//# sourceMappingURL=internal.d.ts.map

package/dist/http/oauth2/grant-types/internal.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"internal.d.ts","sourceRoot":"","sources":["../../../../src/http/oauth2/grant-types/internal.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,wBAAwB,EAAQ,MAAM,cAAc,CAAC;AAInE,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,QAAQ,CAAC;AAGtC,OAAO,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAC3C,OAAO,KAAK,EACR,KAAK,EACR,MAAM,QAAQ,CAAC;AAGhB,qBAAa,iBAAkB,SAAQ,aAAc,YAAW,KAAK;IAC3D,GAAG,CAAC,OAAO,EAAE,OAAO,GAAG,OAAO,CAAC,wBAAwB,CAAC;CAoBjE"}

package/dist/http/oauth2/grant-types/internal.js

@@ -1,36 +0,0 @@
-"use strict";
-/*
- * Copyright (c) 2022.
- * Author Peter Placzek (tada5hi)
- * For the full copyright and license information,
- * view the LICENSE file that was distributed with this source code.
- */
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.InternalGrantType = void 0;
-const core_1 = require("@authup/core");
-const routup_1 = require("routup");
-const utils_1 = require("../../utils");
-const abstract_1 = require("./abstract");
-const response_1 = require("../response");
-class InternalGrantType extends abstract_1.AbstractGrant {
-    async run(request) {
-        const realm = (0, utils_1.useRequestEnv)(request, 'realm');
-        const accessToken = await this.issueAccessToken({
-            remoteAddress: (0, routup_1.getRequestIP)(request, { trustProxy: true }),
-            scope: core_1.ScopeName.GLOBAL,
-            realmId: realm.id,
-            realmName: realm.name,
-            sub: (0, utils_1.useRequestEnv)(request, 'userId'),
-            subKind: core_1.OAuth2SubKind.USER,
-        });
-        const refreshToken = await this.issueRefreshToken(accessToken);
-        return (0, response_1.buildOAuth2BearerTokenResponse)({
-            accessToken,
-            accessTokenMaxAge: this.config.tokenRefreshMaxAge,
-            refreshToken,
-            refreshTokenMaxAge: this.config.tokenAccessMaxAge,
-        });
-    }
-}
-exports.InternalGrantType = InternalGrantType;
-//# sourceMappingURL=internal.js.map

package/dist/http/oauth2/grant-types/internal.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"internal.js","sourceRoot":"","sources":["../../../../src/http/oauth2/grant-types/internal.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;;AAGH,uCAEsB;AAEtB,mCAAsC;AACtC,uCAA4C;AAC5C,yCAA2C;AAI3C,0CAA6D;AAE7D,MAAa,iBAAkB,SAAQ,wBAAa;IAChD,KAAK,CAAC,GAAG,CAAC,OAAgB;QACtB,MAAM,KAAK,GAAG,IAAA,qBAAa,EAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QAC9C,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAAC;YAC5C,aAAa,EAAE,IAAA,qBAAY,EAAC,OAAO,EAAE,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC;YAC1D,KAAK,EAAE,gBAAS,CAAC,MAAM;YACvB,OAAO,EAAE,KAAK,CAAC,EAAE;YACjB,SAAS,EAAE,KAAK,CAAC,IAAI;YACrB,GAAG,EAAE,IAAA,qBAAa,EAAC,OAAO,EAAE,QAAQ,CAAe;YACnD,OAAO,EAAE,oBAAa,CAAC,IAAI;SAC9B,CAAC,CAAC;QAEH,MAAM,YAAY,GAAG,MAAM,IAAI,CAAC,iBAAiB,CAAC,WAAW,CAAC,CAAC;QAE/D,OAAO,IAAA,yCAA8B,EAAC;YAClC,WAAW;YACX,iBAAiB,EAAE,IAAI,CAAC,MAAM,CAAC,kBAAkB;YACjD,YAAY;YACZ,kBAAkB,EAAE,IAAI,CAAC,MAAM,CAAC,iBAAiB;SACpD,CAAC,CAAC;IACP,CAAC;CACJ;AArBD,8CAqBC"}

package/dist/http/oauth2/grant-types/password.d.ts

@@ -1,11 +0,0 @@
-import type { OAuth2TokenGrantResponse } from '@authup/core';
-import type { Request } from 'routup';
-import { UserEntity } from '../../../domains';
-import { AbstractGrant } from './abstract';
-import type { Grant } from './type';
-export declare class PasswordGrantType extends AbstractGrant implements Grant {
-    run(request: Request): Promise<OAuth2TokenGrantResponse>;
-    validate(request: Request): Promise<UserEntity>;
-    protected verifyCredentialsByLDAP(user: string, password: string, realmId?: string): Promise<UserEntity>;
-}
-//# sourceMappingURL=password.d.ts.map

package/dist/http/oauth2/grant-types/password.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"password.d.ts","sourceRoot":"","sources":["../../../../src/http/oauth2/grant-types/password.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAA2B,wBAAwB,EAAE,MAAM,cAAc,CAAC;AAKtF,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,QAAQ,CAAC;AAItC,OAAO,EAEuB,UAAU,EAEvC,MAAM,kBAAkB,CAAC;AAE1B,OAAO,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAC3C,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,QAAQ,CAAC;AAEpC,qBAAa,iBAAkB,SAAQ,aAAc,YAAW,KAAK;IAC3D,GAAG,CAAC,OAAO,EAAE,OAAO,GAAI,OAAO,CAAC,wBAAwB,CAAC;IAsBzD,QAAQ,CAAC,OAAO,EAAE,OAAO,GAAI,OAAO,CAAC,UAAU,CAAC;cAgCtC,uBAAuB,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,GAAI,OAAO,CAAC,UAAU,CAAC;CA2DlH"}

package/dist/http/oauth2/grant-types/password.js

@@ -1,105 +0,0 @@
-"use strict";
-/*
- * Copyright (c) 2022.
- * Author Peter Placzek (tada5hi)
- * For the full copyright and license information,
- * view the LICENSE file that was distributed with this source code.
- */
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.PasswordGrantType = void 0;
-const core_1 = require("@authup/core");
-const body_1 = require("@routup/basic/body");
-const routup_1 = require("routup");
-const typeorm_extension_1 = require("typeorm-extension");
-const domains_1 = require("../../../domains");
-const response_1 = require("../response");
-const abstract_1 = require("./abstract");
-class PasswordGrantType extends abstract_1.AbstractGrant {
-    async run(request) {
-        const user = await this.validate(request);
-        const accessToken = await this.issueAccessToken({
-            remoteAddress: (0, routup_1.getRequestIP)(request, { trustProxy: true }),
-            scope: core_1.ScopeName.GLOBAL,
-            sub: user.id,
-            subKind: core_1.OAuth2SubKind.USER,
-            realmId: user.realm.id,
-            realmName: user.realm.name,
-        });
-        const refreshToken = await this.issueRefreshToken(accessToken);
-        return (0, response_1.buildOAuth2BearerTokenResponse)({
-            accessToken,
-            accessTokenMaxAge: this.config.tokenRefreshMaxAge,
-            refreshToken,
-            refreshTokenMaxAge: this.config.tokenAccessMaxAge,
-        });
-    }
-    async validate(request) {
-        const { username, password, realm_id: requestRealmId } = (0, body_1.useRequestBody)(request);
-        const realm = await (0, domains_1.resolveRealm)((0, routup_1.useRequestParam)(request, 'realmId') || requestRealmId);
-        const dataSource = await (0, typeorm_extension_1.useDataSource)();
-        const repository = new domains_1.UserRepository(dataSource);
-        const realmId = (0, core_1.extractObjectProperty)(realm, 'id');
-        let entity = await repository.verifyCredentials(username, password, realmId);
-        if (!entity) {
-            entity = await this.verifyCredentialsByLDAP(username, password, realmId);
-        }
-        if (!entity) {
-            throw core_1.UserError.credentialsInvalid();
-        }
-        if (!entity.active) {
-            throw core_1.UserError.inactive();
-        }
-        return entity;
-    }
-    async verifyCredentialsByLDAP(user, password, realmId) {
-        const dataSource = await (0, typeorm_extension_1.useDataSource)();
-        const repository = new domains_1.IdentityProviderRepository(dataSource);
-        let entities = [];
-        if (realmId) {
-            entities = await repository.createQueryBuilder('provider')
-                .where('provider.realm_id = :realmId', { realmId })
-                .andWhere('provider.protocol = :protocol', { protocol: core_1.IdentityProviderProtocol.LDAP })
-                .getMany();
-        }
-        else {
-            entities = await repository.createQueryBuilder('provider')
-                .andWhere('provider.protocol = :protocol', { protocol: core_1.IdentityProviderProtocol.LDAP })
-                .getMany();
-        }
-        let account;
-        let identity;
-        for (let i = 0; i < entities.length; i++) {
-            const entity = await repository.extendEntity(entities[i]);
-            if (entity.protocol !== core_1.IdentityProviderProtocol.LDAP) {
-                continue;
-            }
-            const flow = new domains_1.LdapIdentityProviderFlow(entity);
-            try {
-                identity = await flow.getIdentityForCredentials(user, password);
-                await flow.unbind();
-            }
-            catch (e) {
-                await flow.unbind();
-                continue;
-            }
-            account = await (0, domains_1.createIdentityProviderAccount)(entity, identity);
-            break;
-        }
-        if (!account) {
-            return undefined;
-        }
-        if (account.user &&
-            account.user.realm) {
-            return account.user;
-        }
-        const userRepository = dataSource.getRepository(domains_1.UserEntity);
-        return userRepository.findOne({
-            where: {
-                id: account.user_id,
-            },
-            relations: ['realm'],
-        });
-    }
-}
-exports.PasswordGrantType = PasswordGrantType;
-//# sourceMappingURL=password.js.map

package/dist/http/oauth2/grant-types/password.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"password.js","sourceRoot":"","sources":["../../../../src/http/oauth2/grant-types/password.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;;AAGH,uCAEsB;AACtB,6CAAoD;AAEpD,mCAAuD;AACvD,yDAAkD;AAElD,8CAI0B;AAC1B,0CAA6D;AAC7D,yCAA2C;AAG3C,MAAa,iBAAkB,SAAQ,wBAAa;IAChD,KAAK,CAAC,GAAG,CAAC,OAAgB;QACtB,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;QAE1C,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAAC;YAC5C,aAAa,EAAE,IAAA,qBAAY,EAAC,OAAO,EAAE,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC;YAC1D,KAAK,EAAE,gBAAS,CAAC,MAAM;YACvB,GAAG,EAAE,IAAI,CAAC,EAAE;YACZ,OAAO,EAAE,oBAAa,CAAC,IAAI;YAC3B,OAAO,EAAE,IAAI,CAAC,KAAK,CAAC,EAAE;YACtB,SAAS,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI;SAC7B,CAAC,CAAC;QAEH,MAAM,YAAY,GAAG,MAAM,IAAI,CAAC,iBAAiB,CAAC,WAAW,CAAC,CAAC;QAE/D,OAAO,IAAA,yCAA8B,EAAC;YAClC,WAAW;YACX,iBAAiB,EAAE,IAAI,CAAC,MAAM,CAAC,kBAAkB;YACjD,YAAY;YACZ,kBAAkB,EAAE,IAAI,CAAC,MAAM,CAAC,iBAAiB;SACpD,CAAC,CAAC;IACP,CAAC;IAED,KAAK,CAAC,QAAQ,CAAC,OAAgB;QAC3B,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,QAAQ,EAAE,cAAc,EAAE,GAAG,IAAA,qBAAc,EAAC,OAAO,CAAC,CAAC;QAEjF,MAAM,KAAK,GAAG,MAAM,IAAA,sBAAY,EAC5B,IAAA,wBAAe,EAAC,OAAO,EAAE,SAAS,CAAC,IAAI,cAAc,CACxD,CAAC;QAEF,MAAM,UAAU,GAAG,MAAM,IAAA,iCAAa,GAAE,CAAC;QACzC,MAAM,UAAU,GAAG,IAAI,wBAAc,CAAC,UAAU,CAAC,CAAC;QAClD,MAAM,OAAO,GAAG,IAAA,4BAAqB,EAAC,KAAK,EAAE,IAAI,CAAC,CAAC;QAEnD,IAAI,MAAM,GAAG,MAAM,UAAU,CAAC,iBAAiB,CAC3C,QAAQ,EACR,QAAQ,EACR,OAAO,CACV,CAAC;QAEF,IAAI,CAAC,MAAM,EAAE,CAAC;YACV,MAAM,GAAG,MAAM,IAAI,CAAC,uBAAuB,CAAC,QAAQ,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC;QAC7E,CAAC;QAED,IAAI,CAAC,MAAM,EAAE,CAAC;YACV,MAAM,gBAAS,CAAC,kBAAkB,EAAE,CAAC;QACzC,CAAC;QAED,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC;YACjB,MAAM,gBAAS,CAAC,QAAQ,EAAE,CAAC;QAC/B,CAAC;QAED,OAAO,MAAM,CAAC;IAClB,CAAC;IAES,KAAK,CAAC,uBAAuB,CAAC,IAAY,EAAE,QAAgB,EAAE,OAAgB;QACpF,MAAM,UAAU,GAAG,MAAM,IAAA,iCAAa,GAAE,CAAC;QACzC,MAAM,UAAU,GAAG,IAAI,oCAA0B,CAAC,UAAU,CAAC,CAAC;QAC9D,IAAI,QAAQ,GAA8B,EAAE,CAAC;QAE7C,IAAI,OAAO,EAAE,CAAC;YACV,QAAQ,GAAG,MAAM,UAAU,CAAC,kBAAkB,CAAC,UAAU,CAAC;iBACrD,KAAK,CAAC,8BAA8B,EAAE,EAAE,OAAO,EAAE,CAAC;iBAClD,QAAQ,CAAC,+BAA+B,EAAE,EAAE,QAAQ,EAAE,+BAAwB,CAAC,IAAI,EAAE,CAAC;iBACtF,OAAO,EAAE,CAAC;QACnB,CAAC;aAAM,CAAC;YACJ,QAAQ,GAAG,MAAM,UAAU,CAAC,kBAAkB,CAAC,UAAU,CAAC;iBACrD,QAAQ,CAAC,+BAA+B,EAAE,EAAE,QAAQ,EAAE,+BAAwB,CAAC,IAAI,EAAE,CAAC;iBACtF,OAAO,EAAE,CAAC;QACnB,CAAC;QAED,IAAI,OAA6C,CAAC;QAClD,IAAI,QAAkD,CAAC;QAEvD,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,QAAQ,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YACvC,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC;YAC1D,IAAI,MAAM,CAAC,QAAQ,KAAK,+BAAwB,CAAC,IAAI,EAAE,CAAC;gBACpD,SAAS;YACb,CAAC;YAED,MAAM,IAAI,GAAG,IAAI,kCAAwB,CAAC,MAAM,CAAC,CAAC;YAElD,IAAI,CAAC;gBACD,QAAQ,GAAG,MAAM,IAAI,CAAC,yBAAyB,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;gBAChE,MAAM,IAAI,CAAC,MAAM,EAAE,CAAC;YACxB,CAAC;YAAC,OAAO,CAAC,EAAE,CAAC;gBACT,MAAM,IAAI,CAAC,MAAM,EAAE,CAAC;gBACpB,SAAS;YACb,CAAC;YAED,OAAO,GAAG,MAAM,IAAA,uCAA6B,EAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;YAChE,MAAM;QACV,CAAC;QAED,IAAI,CAAC,OAAO,EAAE,CAAC;YACX,OAAO,SAAS,CAAC;QACrB,CAAC;QAED,IACI,OAAO,CAAC,IAAI;YACZ,OAAO,CAAC,IAAI,CAAC,KAAK,EACpB,CAAC;YACC,OAAO,OAAO,CAAC,IAAkB,CAAC;QACtC,CAAC;QAED,MAAM,cAAc,GAAG,UAAU,CAAC,aAAa,CAAC,oBAAU,CAAC,CAAC;QAE5D,OAAO,cAAc,CAAC,OAAO,CAAC;YAC1B,KAAK,EAAE;gBACH,EAAE,EAAE,OAAO,CAAC,OAAO;aACtB;YACD,SAAS,EAAE,CAAC,OAAO,CAAC;SACvB,CAAC,CAAC;IACP,CAAC;CACJ;AAlHD,8CAkHC"}

package/dist/http/oauth2/grant-types/refresh-token.d.ts

@@ -1,10 +0,0 @@
-import type { OAuth2TokenGrantResponse } from '@authup/core';
-import type { Request } from 'routup';
-import { OAuth2RefreshTokenEntity } from '../../../domains';
-import { AbstractGrant } from './abstract';
-import type { Grant } from './type';
-export declare class RefreshTokenGrantType extends AbstractGrant implements Grant {
-    run(request: Request): Promise<OAuth2TokenGrantResponse>;
-    validate(request: Request): Promise<OAuth2RefreshTokenEntity>;
-}
-//# sourceMappingURL=refresh-token.d.ts.map

package/dist/http/oauth2/grant-types/refresh-token.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"refresh-token.d.ts","sourceRoot":"","sources":["../../../../src/http/oauth2/grant-types/refresh-token.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,cAAc,CAAC;AAK7D,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,QAAQ,CAAC;AAGtC,OAAO,EAAE,wBAAwB,EAAE,MAAM,kBAAkB,CAAC;AAC5D,OAAO,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAE3C,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,QAAQ,CAAC;AAGpC,qBAAa,qBAAsB,SAAQ,aAAc,YAAW,KAAK;IAC/D,GAAG,CAAC,OAAO,EAAE,OAAO,GAAI,OAAO,CAAC,wBAAwB,CAAC;IAyBzD,QAAQ,CAAC,OAAO,EAAE,OAAO,GAAI,OAAO,CAAC,wBAAwB,CAAC;CA2BvE"}

package/dist/http/oauth2/grant-types/refresh-token.js

@@ -1,62 +0,0 @@
-"use strict";
-/*
- * Copyright (c) 2022.
- * Author Peter Placzek (tada5hi)
- * For the full copyright and license information,
- * view the LICENSE file that was distributed with this source code.
- */
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.RefreshTokenGrantType = void 0;
-const core_1 = require("@authup/core");
-const body_1 = require("@routup/basic/body");
-const routup_1 = require("routup");
-const typeorm_extension_1 = require("typeorm-extension");
-const domains_1 = require("../../../domains");
-const abstract_1 = require("./abstract");
-const response_1 = require("../response");
-const token_1 = require("../token");
-class RefreshTokenGrantType extends abstract_1.AbstractGrant {
-    async run(request) {
-        const token = await this.validate(request);
-        const subKind = (0, core_1.getOAuth2SubKindByEntity)(token);
-        const sub = (0, core_1.getOAuth2SubByEntity)(token);
-        const accessToken = await this.issueAccessToken({
-            remoteAddress: (0, routup_1.getRequestIP)(request, { trustProxy: true }),
-            scope: token.scope,
-            sub,
-            subKind,
-            realmId: token.realm.id,
-            realmName: token.realm.name,
-        });
-        const refreshToken = await this.issueRefreshToken(accessToken);
-        return (0, response_1.buildOAuth2BearerTokenResponse)({
-            accessToken,
-            accessTokenMaxAge: this.config.tokenRefreshMaxAge,
-            refreshToken,
-            refreshTokenMaxAge: this.config.tokenAccessMaxAge,
-        });
-    }
-    async validate(request) {
-        const refreshToken = (0, body_1.useRequestBody)(request, 'refresh_token');
-        const payload = await (0, token_1.readOAuth2TokenPayload)(refreshToken);
-        const dataSource = await (0, typeorm_extension_1.useDataSource)();
-        const repository = dataSource.getRepository(domains_1.OAuth2RefreshTokenEntity);
-        const entity = await repository.findOne({
-            where: {
-                id: payload.jti,
-            },
-            relations: ['realm'],
-        });
-        if (!entity) {
-            throw core_1.TokenError.tokenNotFound(core_1.OAuth2TokenKind.REFRESH);
-        }
-        const expires = Date.parse(entity.expires);
-        if (expires < Date.now()) {
-            throw core_1.TokenError.expired(core_1.OAuth2TokenKind.REFRESH);
-        }
-        await repository.remove(entity);
-        return entity;
-    }
-}
-exports.RefreshTokenGrantType = RefreshTokenGrantType;
-//# sourceMappingURL=refresh-token.js.map

package/dist/http/oauth2/grant-types/refresh-token.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"refresh-token.js","sourceRoot":"","sources":["../../../../src/http/oauth2/grant-types/refresh-token.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;;AAGH,uCAEsB;AACtB,6CAAoD;AAEpD,mCAAsC;AACtC,yDAAkD;AAClD,8CAA4D;AAC5D,yCAA2C;AAC3C,0CAA6D;AAE7D,oCAAkD;AAElD,MAAa,qBAAsB,SAAQ,wBAAa;IACpD,KAAK,CAAC,GAAG,CAAC,OAAgB;QACtB,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;QAE3C,MAAM,OAAO,GAAG,IAAA,+BAAwB,EAAC,KAAK,CAAC,CAAC;QAChD,MAAM,GAAG,GAAG,IAAA,2BAAoB,EAAC,KAAK,CAAC,CAAC;QAExC,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAAC;YAC5C,aAAa,EAAE,IAAA,qBAAY,EAAC,OAAO,EAAE,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC;YAC1D,KAAK,EAAE,KAAK,CAAC,KAAK;YAClB,GAAG;YACH,OAAO;YACP,OAAO,EAAE,KAAK,CAAC,KAAK,CAAC,EAAE;YACvB,SAAS,EAAE,KAAK,CAAC,KAAK,CAAC,IAAI;SAC9B,CAAC,CAAC;QAEH,MAAM,YAAY,GAAG,MAAM,IAAI,CAAC,iBAAiB,CAAC,WAAW,CAAC,CAAC;QAE/D,OAAO,IAAA,yCAA8B,EAAC;YAClC,WAAW;YACX,iBAAiB,EAAE,IAAI,CAAC,MAAM,CAAC,kBAAkB;YACjD,YAAY;YACZ,kBAAkB,EAAE,IAAI,CAAC,MAAM,CAAC,iBAAiB;SACpD,CAAC,CAAC;IACP,CAAC;IAED,KAAK,CAAC,QAAQ,CAAC,OAAgB;QAC3B,MAAM,YAAY,GAAG,IAAA,qBAAc,EAAC,OAAO,EAAE,eAAe,CAAC,CAAC;QAE9D,MAAM,OAAO,GAAG,MAAM,IAAA,8BAAsB,EAAC,YAAY,CAAC,CAAC;QAE3D,MAAM,UAAU,GAAG,MAAM,IAAA,iCAAa,GAAE,CAAC;QACzC,MAAM,UAAU,GAAG,UAAU,CAAC,aAAa,CAAC,kCAAwB,CAAC,CAAC;QACtE,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,OAAO,CAAC;YACpC,KAAK,EAAE;gBACH,EAAE,EAAE,OAAO,CAAC,GAAG;aAClB;YACD,SAAS,EAAE,CAAC,OAAO,CAAC;SACvB,CAAC,CAAC;QAEH,IAAI,CAAC,MAAM,EAAE,CAAC;YACV,MAAM,iBAAU,CAAC,aAAa,CAAC,sBAAe,CAAC,OAAO,CAAC,CAAC;QAC5D,CAAC;QAED,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QAC3C,IAAI,OAAO,GAAG,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC;YACvB,MAAM,iBAAU,CAAC,OAAO,CAAC,sBAAe,CAAC,OAAO,CAAC,CAAC;QACtD,CAAC;QAED,MAAM,UAAU,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QAEhC,OAAO,MAAM,CAAC;IAClB,CAAC;CACJ;AArDD,sDAqDC"}

package/dist/http/oauth2/grant-types/robot-credentials.d.ts

@@ -1,10 +0,0 @@
-import type { OAuth2TokenGrantResponse } from '@authup/core';
-import type { Request } from 'routup';
-import type { RobotEntity } from '../../../domains';
-import { AbstractGrant } from './abstract';
-import type { Grant } from './type';
-export declare class RobotCredentialsGrantType extends AbstractGrant implements Grant {
-    run(request: Request): Promise<OAuth2TokenGrantResponse>;
-    validate(request: Request): Promise<RobotEntity>;
-}
-//# sourceMappingURL=robot-credentials.d.ts.map

package/dist/http/oauth2/grant-types/robot-credentials.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"robot-credentials.d.ts","sourceRoot":"","sources":["../../../../src/http/oauth2/grant-types/robot-credentials.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,cAAc,CAAC;AAO7D,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,QAAQ,CAAC;AAGtC,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AAEpD,OAAO,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAE3C,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,QAAQ,CAAC;AAEpC,qBAAa,yBAA0B,SAAQ,aAAc,YAAW,KAAK;IACnE,GAAG,CAAC,OAAO,EAAE,OAAO,GAAI,OAAO,CAAC,wBAAwB,CAAC;IAmBzD,QAAQ,CAAC,OAAO,EAAE,OAAO,GAAI,OAAO,CAAC,WAAW,CAAC;CAiB1D"}