@authup/server-core 1.0.0-beta.5 → 1.0.0-beta.50

package/dist/adapters/http/controllers/workflows/status/module.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"module.mjs","names":["DController","DGet","load","path","PACKAGE_PATH","StatusController","options","versionPromise","ctx","resolveVersion","join","then","pkgJson","version","status","date","Date","toISOString","features"],"sources":["../../../../../../src/adapters/http/controllers/workflows/status/module.ts"],"sourcesContent":["/*\n * Copyright (c) 2022-2026.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport type { StatusResponse, StatusResponseFeatures } from '@authup/core-http-kit';\nimport {\n    DController,\n    DGet,\n} from '@routup/decorators';\nimport { load } from 'locter';\nimport path from 'node:path';\nimport { PACKAGE_PATH } from '../../../../../path.ts';\n\nexport type StatusControllerOptions = {\n    features: StatusResponseFeatures,\n};\n\nexport type StatusControllerContext = {\n    options: StatusControllerOptions,\n};\n\n@DController('')\nexport class StatusController {\n    protected options: StatusControllerOptions;\n\n    // The version is constant for the process lifetime — read package.json\n    // once and memoize instead of on every GET /.\n    protected versionPromise: Promise<string> | undefined;\n\n    constructor(ctx: StatusControllerContext) {\n        this.options = ctx.options;\n    }\n\n    protected resolveVersion(): Promise<string> {\n        if (!this.versionPromise) {\n            this.versionPromise = load(path.join(PACKAGE_PATH, 'package.json'))\n                .then((pkgJson) => pkgJson.version);\n        }\n\n        return this.versionPromise;\n    }\n\n    @DGet('/', [])\n    async status(): Promise<StatusResponse> {\n        return {\n            version: await this.resolveVersion(),\n            date: new Date().toISOString(),\n            features: this.options.features,\n        };\n    }\n}\n"],"mappings":";;;;;;;;AAKC,SAAA,aAAA,YAAA,QAAA,KAAA,MAAA;;;;;;;;;AAoBD,IAAaK,mBAAb,MAAaA;CACCC;CAIAC;CAEV,YAAYC,KAA8B;EACtC,KAAKF,UAAUE,IAAIF;CACvB;CAEUG,iBAAkC;EACxC,IAAI,CAAC,KAAKF,gBACN,KAAKA,iBAAiBL,KAAKC,KAAKO,KAAKN,cAAc,cAAA,CAAA,CAAA,CAC9CO,MAAMC,YAAYA,QAAQC,OAAO;EAG1C,OAAO,KAAKN;CAChB;CAEA,MACMO,SAAkC;EACpC,OAAO;GACHD,SAAS,MAAM,KAAKJ,eAAc;GAClCM,uBAAM,IAAIC,KAAAA,EAAAA,CAAOC,YAAW;GAC5BC,UAAU,KAAKZ,QAAQY;EAC3B;CACJ;AACJ"}

package/dist/adapters/http/controllers/workflows/token/index.d.ts

@@ -0,0 +1,2 @@
+export * from './module.ts';
+//# sourceMappingURL=index.d.ts.map

package/dist/adapters/http/controllers/workflows/token/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../../src/adapters/http/controllers/workflows/token/index.ts"],"names":[],"mappings":"AAOA,cAAc,aAAa,CAAC"}

package/dist/adapters/http/controllers/workflows/token/index.mjs

@@ -0,0 +1,5 @@
+import "node:path";
+import "node:url";
+import.meta.url;
+import { TokenController } from "./module.mjs";
+export { TokenController };

package/dist/adapters/http/controllers/workflows/token/module.d.ts

@@ -0,0 +1,21 @@
+import type { OAuth2TokenGrantResponse, OAuth2TokenIntrospectionResponse } from '@authup/specs';
+import { OAuth2TokenGrant } from '@authup/specs';
+import type { IAppEvent } from 'routup';
+import type { TokenControllerContext } from './types.ts';
+import type { IIdentityPermissionProvider, IIdentityResolver, IOAuth2TokenIssuer, IOAuth2TokenRevoker, IOAuth2TokenVerifier } from '../../../../../core/index.ts';
+import type { IHTTPOAuth2Grant } from '../../../adapters/index.ts';
+export declare class TokenController {
+    protected refreshTokenIssuer: IOAuth2TokenIssuer;
+    protected accessTokenIssuer: IOAuth2TokenIssuer;
+    protected tokenVerifier: IOAuth2TokenVerifier;
+    protected tokenRevoker: IOAuth2TokenRevoker;
+    protected identityResolver: IIdentityResolver;
+    protected identityPermissionProvider: IIdentityPermissionProvider;
+    protected tokenGrants: Record<`${OAuth2TokenGrant}`, IHTTPOAuth2Grant>;
+    constructor(ctx: TokenControllerContext);
+    getIntrospect(event: IAppEvent): Promise<OAuth2TokenIntrospectionResponse>;
+    postIntrospect(event: IAppEvent): Promise<OAuth2TokenIntrospectionResponse>;
+    revokeToken(event: IAppEvent): Promise<null>;
+    createToken(event: IAppEvent): Promise<OAuth2TokenGrantResponse>;
+}
+//# sourceMappingURL=module.d.ts.map

package/dist/adapters/http/controllers/workflows/token/module.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"module.d.ts","sourceRoot":"","sources":["../../../../../../src/adapters/http/controllers/workflows/token/module.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,wBAAwB,EAAE,gCAAgC,EAAyB,MAAM,eAAe,CAAC;AACvH,OAAO,EAA4C,gBAAgB,EAAE,MAAM,eAAe,CAAC;AAQ3F,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,QAAQ,CAAC;AAGxC,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,YAAY,CAAC;AACzD,OAAO,KAAK,EACR,2BAA2B,EAC3B,iBAAiB,EACjB,kBAAkB,EAClB,mBAAmB,EACnB,oBAAoB,EACvB,MAAM,8BAA8B,CAAC;AAEtC,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,4BAA4B,CAAC;AAWnE,qBAEa,eAAe;IACxB,SAAS,CAAC,kBAAkB,EAAE,kBAAkB,CAAC;IAEjD,SAAS,CAAC,iBAAiB,EAAE,kBAAkB,CAAC;IAEhD,SAAS,CAAC,aAAa,EAAE,oBAAoB,CAAC;IAE9C,SAAS,CAAC,YAAY,EAAE,mBAAmB,CAAC;IAE5C,SAAS,CAAC,gBAAgB,EAAG,iBAAiB,CAAC;IAE/C,SAAS,CAAC,0BAA0B,EAAG,2BAA2B,CAAC;IAEnE,SAAS,CAAC,WAAW,EAAG,MAAM,CAAC,GAAG,gBAAgB,EAAE,EAAE,gBAAgB,CAAC,CAAC;gBAI5D,GAAG,EAAE,sBAAsB;IA+CjC,aAAa,CAAa,KAAK,EAAE,SAAS,GAAG,OAAO,CAAC,gCAAgC,CAAC;IAKtF,cAAc,CACJ,KAAK,EAAE,SAAS,GAC7B,OAAO,CAAC,gCAAgC,CAAC;IA4DtC,WAAW,CACD,KAAK,EAAE,SAAS,GAC7B,OAAO,CAAC,IAAI,CAAC;IAkBV,WAAW,CAAa,KAAK,EAAE,SAAS,GAAG,OAAO,CAAC,wBAAwB,CAAC;CAarF"}

package/dist/adapters/http/controllers/workflows/token/module.mjs

@@ -0,0 +1,179 @@
+import "node:path";
+import "node:url";
+import.meta.url;
+import { OAuth2OpenIDClaimsBuilder } from "../../../../../core/oauth2/openid/claims.mjs";
+import "../../../../../core/index.mjs";
+import { guessOauth2GrantTypeByRequest } from "../../../adapters/oauth2/grant-types/utils/guess.mjs";
+import { HTTPOAuth2AuthorizeGrant } from "../../../adapters/oauth2/grant-types/authorize.mjs";
+import { HTTPClientCredentialsGrant } from "../../../adapters/oauth2/grant-types/client-credentials.mjs";
+import { HTTPPasswordGrant } from "../../../adapters/oauth2/grant-types/password.mjs";
+import { HTTPOAuth2RefreshTokenGrant } from "../../../adapters/oauth2/grant-types/refresh_token.mjs";
+import { HTTPRobotCredentialsGrant } from "../../../adapters/oauth2/grant-types/robot-credentials.mjs";
+import "../../../adapters/index.mjs";
+import { toOAuth2Error } from "../../../../../core/oauth2/helpers/error.mjs";
+import "../../../../../core/oauth2/helpers/index.mjs";
+import { extractTokenFromRequest } from "./utils/extract.mjs";
+import "./utils/index.mjs";
+import { buildPermissionKey } from "@authup/access";
+import { OAuth2GrantTypeError, OAuth2RequestError, OAuth2TokenGrant } from "@authup/specs";
+import { DContext, DController, DGet, DPost, DTags } from "@routup/decorators";
+//#region src/adapters/http/controllers/workflows/token/module.ts
+function _ts_decorate(decorators, target, key, desc) {
+	var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+	if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+	else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+	return c > 3 && r && Object.defineProperty(target, key, r), r;
+}
+function _ts_metadata(k, v) {
+	if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+}
+function _ts_param(paramIndex, decorator) {
+	return function(target, key) {
+		decorator(target, key, paramIndex);
+	};
+}
+var TokenController = class {
+	refreshTokenIssuer;
+	accessTokenIssuer;
+	tokenVerifier;
+	tokenRevoker;
+	identityResolver;
+	identityPermissionProvider;
+	tokenGrants;
+	constructor(ctx) {
+		this.refreshTokenIssuer = ctx.refreshTokenIssuer;
+		this.accessTokenIssuer = ctx.accessTokenIssuer;
+		this.tokenVerifier = ctx.tokenVerifier;
+		this.tokenRevoker = ctx.tokenRevoker;
+		this.identityResolver = ctx.identityResolver;
+		this.identityPermissionProvider = ctx.identityPermissionProvider;
+		this.tokenGrants = {
+			[OAuth2TokenGrant.AUTHORIZATION_CODE]: new HTTPOAuth2AuthorizeGrant({
+				codeVerifier: ctx.codeVerifier,
+				clientAuthenticator: ctx.oauth2ClientAuthenticator,
+				accessTokenIssuer: ctx.accessTokenIssuer,
+				refreshTokenIssuer: ctx.refreshTokenIssuer,
+				sessionManager: ctx.sessionManager
+			}),
+			[OAuth2TokenGrant.CLIENT_CREDENTIALS]: new HTTPClientCredentialsGrant({
+				accessTokenIssuer: ctx.accessTokenIssuer,
+				authenticator: ctx.clientAuthenticator,
+				sessionManager: ctx.sessionManager
+			}),
+			[OAuth2TokenGrant.ROBOT_CREDENTIALS]: new HTTPRobotCredentialsGrant({
+				accessTokenIssuer: ctx.accessTokenIssuer,
+				authenticator: ctx.robotAuthenticator,
+				sessionManager: ctx.sessionManager
+			}),
+			[OAuth2TokenGrant.PASSWORD]: new HTTPPasswordGrant({
+				accessTokenIssuer: ctx.accessTokenIssuer,
+				refreshTokenIssuer: ctx.refreshTokenIssuer,
+				authenticator: ctx.userAuthenticator,
+				clientAuthenticator: ctx.oauth2ClientAuthenticator,
+				sessionManager: ctx.sessionManager
+			}),
+			[OAuth2TokenGrant.REFRESH_TOKEN]: new HTTPOAuth2RefreshTokenGrant({
+				accessTokenIssuer: ctx.accessTokenIssuer,
+				refreshTokenIssuer: ctx.refreshTokenIssuer,
+				tokenVerifier: ctx.tokenVerifier,
+				tokenRevoker: ctx.tokenRevoker,
+				sessionManager: ctx.sessionManager,
+				clientAuthenticator: ctx.oauth2ClientAuthenticator
+			})
+		};
+	}
+	async getIntrospect(event) {
+		return this.postIntrospect(event);
+	}
+	async postIntrospect(event) {
+		try {
+			const token = await extractTokenFromRequest(event);
+			const payload = await this.tokenVerifier.verify(token, { skipActiveCheck: true });
+			if (!payload.sub || !payload.sub_kind) throw OAuth2RequestError.identityInvalid();
+			const permissions = await this.identityPermissionProvider.getFor({
+				id: payload.sub,
+				type: payload.sub_kind,
+				clientId: payload.client_id,
+				realmId: payload.realm_id
+			});
+			const identity = await this.identityResolver.resolve(payload.sub_kind, payload.sub);
+			if (!identity) throw OAuth2RequestError.identityInvalid();
+			const claims = new OAuth2OpenIDClaimsBuilder().fromIdentity(identity);
+			let active;
+			if (payload.jti) active = !await this.tokenVerifier.isInactive(payload.jti);
+			else active = false;
+			return {
+				active,
+				permissions: Object.values(permissions.reduce((acc, binding) => {
+					const key = buildPermissionKey(binding.permission);
+					if (!acc[key]) acc[key] = {
+						name: binding.permission.name,
+						client_id: binding.permission.client_id,
+						realm_id: binding.permission.realm_id
+					};
+					return acc;
+				}, {})),
+				...payload,
+				...claims
+			};
+		} catch (e) {
+			throw toOAuth2Error(e);
+		}
+	}
+	async revokeToken(event) {
+		try {
+			const token = await extractTokenFromRequest(event);
+			const payload = await this.tokenVerifier.verify(token);
+			await this.tokenRevoker.revoke(payload);
+			event.response.status = 202;
+			return null;
+		} catch (e) {
+			throw toOAuth2Error(e);
+		}
+	}
+	async createToken(event) {
+		const grantType = await guessOauth2GrantTypeByRequest(event);
+		if (!grantType) throw OAuth2GrantTypeError.unsupported();
+		const grant = this.tokenGrants[grantType];
+		if (!grant) throw OAuth2GrantTypeError.unsupported();
+		return grant.runWithRequest(event);
+	}
+};
+_ts_decorate([
+	DGet("/introspect", []),
+	_ts_param(0, DContext()),
+	_ts_metadata("design:type", Function),
+	_ts_metadata("design:paramtypes", [typeof IAppEvent === "undefined" ? Object : IAppEvent]),
+	_ts_metadata("design:returntype", Promise)
+], TokenController.prototype, "getIntrospect", null);
+_ts_decorate([
+	DPost("/introspect", []),
+	_ts_param(0, DContext()),
+	_ts_metadata("design:type", Function),
+	_ts_metadata("design:paramtypes", [typeof IAppEvent === "undefined" ? Object : IAppEvent]),
+	_ts_metadata("design:returntype", Promise)
+], TokenController.prototype, "postIntrospect", null);
+_ts_decorate([
+	DPost("/revoke", []),
+	_ts_param(0, DContext()),
+	_ts_metadata("design:type", Function),
+	_ts_metadata("design:paramtypes", [typeof IAppEvent === "undefined" ? Object : IAppEvent]),
+	_ts_metadata("design:returntype", Promise)
+], TokenController.prototype, "revokeToken", null);
+_ts_decorate([
+	DPost("", []),
+	_ts_param(0, DContext()),
+	_ts_metadata("design:type", Function),
+	_ts_metadata("design:paramtypes", [typeof IAppEvent === "undefined" ? Object : IAppEvent]),
+	_ts_metadata("design:returntype", Promise)
+], TokenController.prototype, "createToken", null);
+TokenController = _ts_decorate([
+	DTags("auth"),
+	DController("/token"),
+	_ts_metadata("design:type", Function),
+	_ts_metadata("design:paramtypes", [typeof TokenControllerContext === "undefined" ? Object : TokenControllerContext])
+], TokenController);
+//#endregion
+export { TokenController };
+
+//# sourceMappingURL=module.mjs.map

package/dist/adapters/http/controllers/workflows/token/module.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"module.mjs","names":["OAuth2GrantTypeError","OAuth2RequestError","OAuth2TokenGrant","DContext","DController","DGet","DPost","DTags","buildPermissionKey","toOAuth2Error","OAuth2OpenIDClaimsBuilder","HTTPClientCredentialsGrant","HTTPOAuth2AuthorizeGrant","HTTPOAuth2RefreshTokenGrant","HTTPPasswordGrant","HTTPRobotCredentialsGrant","guessOauth2GrantTypeByRequest","extractTokenFromRequest","TokenController","refreshTokenIssuer","accessTokenIssuer","tokenVerifier","tokenRevoker","identityResolver","identityPermissionProvider","tokenGrants","ctx","AUTHORIZATION_CODE","codeVerifier","clientAuthenticator","oauth2ClientAuthenticator","sessionManager","CLIENT_CREDENTIALS","authenticator","ROBOT_CREDENTIALS","robotAuthenticator","PASSWORD","userAuthenticator","REFRESH_TOKEN","getIntrospect","event","postIntrospect","token","payload","verify","skipActiveCheck","sub","sub_kind","identityInvalid","permissions","getFor","id","type","clientId","client_id","realmId","realm_id","identity","resolve","claimsBuilder","claims","fromIdentity","active","jti","isInactive","Object","values","reduce","acc","binding","key","permission","name","e","revokeToken","revoke","response","status","createToken","grantType","unsupported","grant","runWithRequest"],"sources":["../../../../../../src/adapters/http/controllers/workflows/token/module.ts"],"sourcesContent":["/*\n * Copyright (c) 2022.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport type { OAuth2TokenGrantResponse, OAuth2TokenIntrospectionResponse, OAuth2TokenPermission } from '@authup/specs';\nimport { OAuth2GrantTypeError, OAuth2RequestError, OAuth2TokenGrant } from '@authup/specs';\nimport {\n    DContext,\n    DController,\n    DGet,\n    DPost,\n    DTags,\n} from '@routup/decorators';\nimport type { IAppEvent } from 'routup';\nimport { buildPermissionKey } from '@authup/access';\nimport { toOAuth2Error } from '../../../../../core/oauth2/helpers/index.ts';\nimport type { TokenControllerContext } from './types.ts';\nimport type {\n    IIdentityPermissionProvider,\n    IIdentityResolver,\n    IOAuth2TokenIssuer,\n    IOAuth2TokenRevoker,\n    IOAuth2TokenVerifier,\n} from '../../../../../core/index.ts';\nimport { OAuth2OpenIDClaimsBuilder } from '../../../../../core/index.ts';\nimport type { IHTTPOAuth2Grant } from '../../../adapters/index.ts';\nimport {\n    HTTPClientCredentialsGrant,\n    HTTPOAuth2AuthorizeGrant,\n    HTTPOAuth2RefreshTokenGrant,\n    HTTPPasswordGrant,\n    HTTPRobotCredentialsGrant,\n    guessOauth2GrantTypeByRequest,\n} from '../../../adapters/index.ts';\nimport { extractTokenFromRequest } from './utils/index.ts';\n\n@DTags('auth')\n@DController('/token')\nexport class TokenController {\n    protected refreshTokenIssuer: IOAuth2TokenIssuer;\n\n    protected accessTokenIssuer: IOAuth2TokenIssuer;\n\n    protected tokenVerifier: IOAuth2TokenVerifier;\n\n    protected tokenRevoker: IOAuth2TokenRevoker;\n\n    protected identityResolver : IIdentityResolver;\n\n    protected identityPermissionProvider : IIdentityPermissionProvider;\n\n    protected tokenGrants : Record<`${OAuth2TokenGrant}`, IHTTPOAuth2Grant>;\n\n    // -------------------------------------------\n\n    constructor(ctx: TokenControllerContext) {\n        this.refreshTokenIssuer = ctx.refreshTokenIssuer;\n        this.accessTokenIssuer = ctx.accessTokenIssuer;\n        this.tokenVerifier = ctx.tokenVerifier;\n        this.tokenRevoker = ctx.tokenRevoker;\n        this.identityResolver = ctx.identityResolver;\n        this.identityPermissionProvider = ctx.identityPermissionProvider;\n\n        this.tokenGrants = {\n            [OAuth2TokenGrant.AUTHORIZATION_CODE]: new HTTPOAuth2AuthorizeGrant({\n                codeVerifier: ctx.codeVerifier,\n                clientAuthenticator: ctx.oauth2ClientAuthenticator,\n                accessTokenIssuer: ctx.accessTokenIssuer,\n                refreshTokenIssuer: ctx.refreshTokenIssuer,\n                sessionManager: ctx.sessionManager,\n            }),\n            [OAuth2TokenGrant.CLIENT_CREDENTIALS]: new HTTPClientCredentialsGrant({\n                accessTokenIssuer: ctx.accessTokenIssuer,\n                authenticator: ctx.clientAuthenticator,\n                sessionManager: ctx.sessionManager,\n            }),\n            [OAuth2TokenGrant.ROBOT_CREDENTIALS]: new HTTPRobotCredentialsGrant({\n                accessTokenIssuer: ctx.accessTokenIssuer,\n                authenticator: ctx.robotAuthenticator,\n                sessionManager: ctx.sessionManager,\n            }),\n            [OAuth2TokenGrant.PASSWORD]: new HTTPPasswordGrant({\n                accessTokenIssuer: ctx.accessTokenIssuer,\n                refreshTokenIssuer: ctx.refreshTokenIssuer,\n                authenticator: ctx.userAuthenticator,\n                clientAuthenticator: ctx.oauth2ClientAuthenticator,\n                sessionManager: ctx.sessionManager,\n            }),\n            [OAuth2TokenGrant.REFRESH_TOKEN]: new HTTPOAuth2RefreshTokenGrant({\n                accessTokenIssuer: ctx.accessTokenIssuer,\n                refreshTokenIssuer: ctx.refreshTokenIssuer,\n                tokenVerifier: ctx.tokenVerifier,\n                tokenRevoker: ctx.tokenRevoker,\n                sessionManager: ctx.sessionManager,\n                clientAuthenticator: ctx.oauth2ClientAuthenticator,\n            }),\n        };\n    }\n\n    // -------------------------------------------\n\n    @DGet('/introspect', [])\n    async getIntrospect(@DContext() event: IAppEvent): Promise<OAuth2TokenIntrospectionResponse> {\n        return this.postIntrospect(event);\n    }\n\n    @DPost('/introspect', [])\n    async postIntrospect(\n        @DContext() event: IAppEvent,\n    ): Promise<OAuth2TokenIntrospectionResponse> {\n        try {\n            const token = await extractTokenFromRequest(event);\n            const payload = await this.tokenVerifier.verify(token, { skipActiveCheck: true });\n            if (!payload.sub || !payload.sub_kind) {\n                throw OAuth2RequestError.identityInvalid();\n            }\n\n            // todo: only receive client specific permissions\n            const permissions = await this.identityPermissionProvider.getFor({\n                id: payload.sub,\n                type: payload.sub_kind,\n                clientId: payload.client_id,\n                realmId: payload.realm_id,\n            });\n\n            const identity = await this.identityResolver.resolve(payload.sub_kind, payload.sub);\n            if (!identity) {\n                // todo: differentiate between client, robot & user\n                throw OAuth2RequestError.identityInvalid();\n            }\n\n            const claimsBuilder = new OAuth2OpenIDClaimsBuilder();\n            const claims = claimsBuilder.fromIdentity(identity);\n\n            let active : boolean;\n            if (payload.jti) {\n                const isInactive = await this.tokenVerifier.isInactive(payload.jti);\n                active = !isInactive;\n            } else {\n                active = false;\n            }\n\n            return {\n                active,\n                // todo: permissions property should be removed.\n                permissions: Object.values(\n                    permissions.reduce((acc, binding) => {\n                        const key = buildPermissionKey(binding.permission);\n                        if (!acc[key]) {\n                            acc[key] = {\n                                name: binding.permission.name,\n                                client_id: binding.permission.client_id,\n                                realm_id: binding.permission.realm_id,\n                            } as OAuth2TokenPermission;\n                        }\n                        return acc;\n                    }, {} as Record<string, OAuth2TokenPermission>),\n                ),\n                ...payload,\n                ...claims,\n            };\n        } catch (e) {\n            throw toOAuth2Error(e);\n        }\n    }\n\n    // ----------------------------------------------------------\n\n    @DPost('/revoke', [])\n    async revokeToken(\n        @DContext() event: IAppEvent,\n    ): Promise<null> {\n        try {\n            const token = await extractTokenFromRequest(event);\n\n            const payload = await this.tokenVerifier.verify(token);\n\n            await this.tokenRevoker.revoke(payload);\n\n            event.response.status = 202;\n            return null;\n        } catch (e) {\n            throw toOAuth2Error(e);\n        }\n    }\n\n    // ----------------------------------------------------------\n\n    @DPost('', [])\n    async createToken(@DContext() event: IAppEvent): Promise<OAuth2TokenGrantResponse> {\n        const grantType = await guessOauth2GrantTypeByRequest(event);\n        if (!grantType) {\n            throw OAuth2GrantTypeError.unsupported();\n        }\n\n        const grant = this.tokenGrants[grantType];\n        if (!grant) {\n            throw OAuth2GrantTypeError.unsupported();\n        }\n\n        return grant.runWithRequest(event);\n    }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;AAKC,SAAA,aAAA,YAAA,QAAA,KAAA,MAAA;;;;;;;;;;;;;;AAoCD,IAAakB,kBAAb,MAAaA;CACCC;CAEAC;CAEAC;CAEAC;CAEAC;CAEAC;CAEAC;CAIV,YAAYC,KAA6B;EACrC,KAAKP,qBAAqBO,IAAIP;EAC9B,KAAKC,oBAAoBM,IAAIN;EAC7B,KAAKC,gBAAgBK,IAAIL;EACzB,KAAKC,eAAeI,IAAIJ;EACxB,KAAKC,mBAAmBG,IAAIH;EAC5B,KAAKC,6BAA6BE,IAAIF;EAEtC,KAAKC,cAAc;IACdvB,iBAAiByB,qBAAqB,IAAIf,yBAAyB;IAChEgB,cAAcF,IAAIE;IAClBC,qBAAqBH,IAAII;IACzBV,mBAAmBM,IAAIN;IACvBD,oBAAoBO,IAAIP;IACxBY,gBAAgBL,IAAIK;GACxB,CAAA;IACC7B,iBAAiB8B,qBAAqB,IAAIrB,2BAA2B;IAClES,mBAAmBM,IAAIN;IACvBa,eAAeP,IAAIG;IACnBE,gBAAgBL,IAAIK;GACxB,CAAA;IACC7B,iBAAiBgC,oBAAoB,IAAInB,0BAA0B;IAChEK,mBAAmBM,IAAIN;IACvBa,eAAeP,IAAIS;IACnBJ,gBAAgBL,IAAIK;GACxB,CAAA;IACC7B,iBAAiBkC,WAAW,IAAItB,kBAAkB;IAC/CM,mBAAmBM,IAAIN;IACvBD,oBAAoBO,IAAIP;IACxBc,eAAeP,IAAIW;IACnBR,qBAAqBH,IAAII;IACzBC,gBAAgBL,IAAIK;GACxB,CAAA;IACC7B,iBAAiBoC,gBAAgB,IAAIzB,4BAA4B;IAC9DO,mBAAmBM,IAAIN;IACvBD,oBAAoBO,IAAIP;IACxBE,eAAeK,IAAIL;IACnBC,cAAcI,IAAIJ;IAClBS,gBAAgBL,IAAIK;IACpBF,qBAAqBH,IAAII;GAC7B,CAAA;EACJ;CACJ;CAIA,MACMS,cAAc,OAAyE;EACzF,OAAO,KAAKE,eAAeD,KAAAA;CAC/B;CAEA,MACMC,eACF,OACyC;EACzC,IAAI;GACA,MAAMC,QAAQ,MAAMzB,wBAAwBuB,KAAAA;GAC5C,MAAMG,UAAU,MAAM,KAAKtB,cAAcuB,OAAOF,OAAO,EAAEG,iBAAiB,KAAK,CAAA;GAC/E,IAAI,CAACF,QAAQG,OAAO,CAACH,QAAQI,UACzB,MAAM9C,mBAAmB+C,gBAAe;GAI5C,MAAMC,cAAc,MAAM,KAAKzB,2BAA2B0B,OAAO;IAC7DC,IAAIR,QAAQG;IACZM,MAAMT,QAAQI;IACdM,UAAUV,QAAQW;IAClBC,SAASZ,QAAQa;GACrB,CAAA;GAEA,MAAMC,WAAW,MAAM,KAAKlC,iBAAiBmC,QAAQf,QAAQI,UAAUJ,QAAQG,GAAG;GAClF,IAAI,CAACW,UAED,MAAMxD,mBAAmB+C,gBAAe;GAI5C,MAAMY,SAASD,IADWjD,0BACXiD,CAAAA,CAAcE,aAAaJ,QAAAA;GAE1C,IAAIK;GACJ,IAAInB,QAAQoB,KAERD,SAAS,CAACE,MADe,KAAK3C,cAAc2C,WAAWrB,QAAQoB,GAAG;QAGlED,SAAS;GAGb,OAAO;IACHA;IAEAb,aAAagB,OAAOC,OAChBjB,YAAYkB,QAAQC,KAAKC,YAAAA;KACrB,MAAMC,MAAM9D,mBAAmB6D,QAAQE,UAAU;KACjD,IAAI,CAACH,IAAIE,MACLF,IAAIE,OAAO;MACPE,MAAMH,QAAQE,WAAWC;MACzBlB,WAAWe,QAAQE,WAAWjB;MAC9BE,UAAUa,QAAQE,WAAWf;KACjC;KAEJ,OAAOY;IACX,GAAG,CAAC,CAAA,CAAA;IAER,GAAGzB;IACH,GAAGiB;GACP;EACJ,SAASa,GAAG;GACR,MAAMhE,cAAcgE,CAAAA;EACxB;CACJ;CAIA,MACMC,YACF,OACa;EACb,IAAI;GACA,MAAMhC,QAAQ,MAAMzB,wBAAwBuB,KAAAA;GAE5C,MAAMG,UAAU,MAAM,KAAKtB,cAAcuB,OAAOF,KAAAA;GAEhD,MAAM,KAAKpB,aAAaqD,OAAOhC,OAAAA;GAE/BH,MAAMoC,SAASC,SAAS;GACxB,OAAO;EACX,SAASJ,GAAG;GACR,MAAMhE,cAAcgE,CAAAA;EACxB;CACJ;CAIA,MACMK,YAAY,OAAiE;EAC/E,MAAMC,YAAY,MAAM/D,8BAA8BwB,KAAAA;EACtD,IAAI,CAACuC,WACD,MAAM/E,qBAAqBgF,YAAW;EAG1C,MAAMC,QAAQ,KAAKxD,YAAYsD;EAC/B,IAAI,CAACE,OACD,MAAMjF,qBAAqBgF,YAAW;EAG1C,OAAOC,MAAMC,eAAe1C,KAAAA;CAChC;AACJ"}

package/dist/adapters/http/controllers/workflows/token/types.d.ts

@@ -0,0 +1,17 @@
+import type { Client, Robot, User } from '@authup/core-kit';
+import type { ICredentialsAuthenticator, IIdentityPermissionProvider, IIdentityResolver, IOAuth2AuthorizationCodeVerifier, IOAuth2TokenIssuer, IOAuth2TokenRevoker, IOAuth2TokenVerifier, ISessionManager, OAuth2ClientAuthenticator } from '../../../../../core/index.ts';
+export type TokenControllerContext = {
+    codeVerifier: IOAuth2AuthorizationCodeVerifier;
+    accessTokenIssuer: IOAuth2TokenIssuer;
+    refreshTokenIssuer: IOAuth2TokenIssuer;
+    tokenVerifier: IOAuth2TokenVerifier;
+    tokenRevoker: IOAuth2TokenRevoker;
+    sessionManager: ISessionManager;
+    identityResolver: IIdentityResolver;
+    identityPermissionProvider: IIdentityPermissionProvider;
+    clientAuthenticator: ICredentialsAuthenticator<Client>;
+    robotAuthenticator: ICredentialsAuthenticator<Robot>;
+    userAuthenticator: ICredentialsAuthenticator<User>;
+    oauth2ClientAuthenticator: OAuth2ClientAuthenticator;
+};
+//# sourceMappingURL=types.d.ts.map

package/dist/adapters/http/controllers/workflows/token/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../../../../src/adapters/http/controllers/workflows/token/types.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAC;AAC5D,OAAO,KAAK,EACR,yBAAyB,EACzB,2BAA2B,EAC3B,iBAAiB,EACjB,gCAAgC,EAChC,kBAAkB,EAClB,mBAAmB,EACnB,oBAAoB,EACpB,eAAe,EACf,yBAAyB,EAC5B,MAAM,8BAA8B,CAAC;AAEtC,MAAM,MAAM,sBAAsB,GAAG;IACjC,YAAY,EAAE,gCAAgC,CAAC;IAE/C,iBAAiB,EAAE,kBAAkB,CAAC;IACtC,kBAAkB,EAAE,kBAAkB,CAAC;IACvC,aAAa,EAAE,oBAAoB,CAAC;IACpC,YAAY,EAAE,mBAAmB,CAAC;IAElC,cAAc,EAAE,eAAe,CAAC;IAEhC,gBAAgB,EAAE,iBAAiB,CAAC;IACpC,0BAA0B,EAAE,2BAA2B,CAAC;IAExD,mBAAmB,EAAE,yBAAyB,CAAC,MAAM,CAAC,CAAA;IACtD,kBAAkB,EAAE,yBAAyB,CAAC,KAAK,CAAC,CAAA;IACpD,iBAAiB,EAAE,yBAAyB,CAAC,IAAI,CAAC,CAAA;IAElD,yBAAyB,EAAE,yBAAyB,CAAA;CACvD,CAAC"}

package/dist/adapters/http/controllers/workflows/token/types.mjs

@@ -0,0 +1,4 @@
+import "node:path";
+import "node:url";
+import.meta.url;
+export {};

package/dist/adapters/http/controllers/workflows/token/utils/extract.d.ts

@@ -0,0 +1,3 @@
+import type { IAppEvent } from 'routup';
+export declare function extractTokenFromRequest(event: IAppEvent): Promise<string>;
+//# sourceMappingURL=extract.d.ts.map

package/dist/adapters/http/controllers/workflows/token/utils/extract.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"extract.d.ts","sourceRoot":"","sources":["../../../../../../../src/adapters/http/controllers/workflows/token/utils/extract.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,QAAQ,CAAC;AAUxC,wBAAsB,uBAAuB,CAAC,KAAK,EAAE,SAAS,GAAI,OAAO,CAAC,MAAM,CAAC,CA2BhF"}

package/dist/adapters/http/controllers/workflows/token/utils/extract.mjs

@@ -0,0 +1,31 @@
+import "node:path";
+import "node:url";
+import.meta.url;
+import { readFromLocations } from "../../../../request/helpers/locations.mjs";
+import { useRequestToken } from "../../../../request/helpers/token.mjs";
+import "../../../../request/index.mjs";
+import { TokenRequestValidator } from "./validator.mjs";
+import { ValidupError, buildErrorMessageForAttribute, defineIssueItem, isValidupError } from "validup";
+//#region src/adapters/http/controllers/workflows/token/utils/extract.ts
+async function extractTokenFromRequest(event) {
+	let token;
+	try {
+		token = (await new TokenRequestValidator().run(await readFromLocations(event, [
+			"body",
+			"query",
+			"params"
+		]))).token;
+	} catch (e) {
+		if (!isValidupError(e)) throw e;
+		token = useRequestToken(event);
+	}
+	if (!token) throw new ValidupError([defineIssueItem({
+		path: ["token"],
+		message: buildErrorMessageForAttribute("token")
+	})]);
+	return token;
+}
+//#endregion
+export { extractTokenFromRequest };
+
+//# sourceMappingURL=extract.mjs.map

package/dist/adapters/http/controllers/workflows/token/utils/extract.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"extract.mjs","names":["ValidupError","buildErrorMessageForAttribute","defineIssueItem","isValidupError","readFromLocations","useRequestToken","TokenRequestValidator","extractTokenFromRequest","event","token","validator","data","run","e","path","message"],"sources":["../../../../../../../src/adapters/http/controllers/workflows/token/utils/extract.ts"],"sourcesContent":["/*\n * Copyright (c) 2024.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport type { IAppEvent } from 'routup';\nimport {\n    ValidupError, \n    buildErrorMessageForAttribute, \n    defineIssueItem, \n    isValidupError,\n} from 'validup';\nimport { readFromLocations, useRequestToken } from '../../../../request/index.ts';\nimport { TokenRequestValidator } from './validator.ts';\n\nexport async function extractTokenFromRequest(event: IAppEvent) : Promise<string> {\n    let token : string | undefined;\n\n    try {\n        const validator = new TokenRequestValidator();\n        const data = await validator.run(\n            await readFromLocations(event, ['body', 'query', 'params']),\n        );\n\n        token = data.token;\n    } catch (e) {\n        if (!isValidupError(e)) {\n            throw e;\n        }\n        token = useRequestToken(event);\n    }\n\n    if (!token) {\n        throw new ValidupError([\n            defineIssueItem({\n                path: ['token'],\n                message: buildErrorMessageForAttribute('token'),\n            }),\n        ]);\n    }\n\n    return token;\n}\n"],"mappings":";;;;;;;;;AAiBA,eAAsBO,wBAAwBC,OAAgB;CAC1D,IAAIC;CAEJ,IAAI;EAMAA,SAAQE,MAJWD,IADGJ,sBACHI,CAAAA,CAAUE,IACzB,MAAMR,kBAAkBI,OAAO;GAAC;GAAQ;GAAS;GAAS,CAAA,EAAA,CAGjDC;CACjB,SAASI,GAAG;EACR,IAAI,CAACV,eAAeU,CAAAA,GAChB,MAAMA;EAEVJ,QAAQJ,gBAAgBG,KAAAA;CAC5B;CAEA,IAAI,CAACC,OACD,MAAM,IAAIT,aAAa,CACnBE,gBAAgB;EACZY,MAAM,CAAC,OAAA;EACPC,SAASd,8BAA8B,OAAA;CAC3C,CAAA,CAAA,CACH;CAGL,OAAOQ;AACX"}

package/dist/adapters/http/controllers/workflows/token/utils/index.d.ts

@@ -0,0 +1,3 @@
+export * from './extract.ts';
+export * from './validator.ts';
+//# sourceMappingURL=index.d.ts.map

package/dist/adapters/http/controllers/workflows/token/utils/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../../../src/adapters/http/controllers/workflows/token/utils/index.ts"],"names":[],"mappings":"AAOA,cAAc,cAAc,CAAC;AAC7B,cAAc,gBAAgB,CAAC"}

package/dist/adapters/http/controllers/workflows/token/utils/index.mjs

@@ -0,0 +1,6 @@
+import "node:path";
+import "node:url";
+import.meta.url;
+import { TokenRequestValidator } from "./validator.mjs";
+import { extractTokenFromRequest } from "./extract.mjs";
+export { TokenRequestValidator, extractTokenFromRequest };

package/dist/adapters/http/controllers/workflows/token/utils/validator.d.ts

@@ -0,0 +1,7 @@
+import { Container } from 'validup';
+export declare class TokenRequestValidator extends Container<{
+    token: string;
+}> {
+    protected initialize(): void;
+}
+//# sourceMappingURL=validator.d.ts.map

package/dist/adapters/http/controllers/workflows/token/utils/validator.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"validator.d.ts","sourceRoot":"","sources":["../../../../../../../src/adapters/http/controllers/workflows/token/utils/validator.ts"],"names":[],"mappings":"AAQA,OAAO,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AAGpC,qBAAa,qBAAsB,SAAQ,SAAS,CAAC;IAAE,KAAK,EAAE,MAAM,CAAA;CAAE,CAAC;IACnE,SAAS,CAAC,UAAU;CAQvB"}

package/dist/adapters/http/controllers/workflows/token/utils/validator.mjs

@@ -0,0 +1,17 @@
+import "node:path";
+import "node:url";
+import.meta.url;
+import { Container } from "validup";
+import { createValidator } from "@validup/zod";
+import { z } from "zod";
+//#region src/adapters/http/controllers/workflows/token/utils/validator.ts
+var TokenRequestValidator = class extends Container {
+	initialize() {
+		super.initialize();
+		this.mount("token", createValidator(z.string().min(16).max(2048)));
+	}
+};
+//#endregion
+export { TokenRequestValidator };
+
+//# sourceMappingURL=validator.mjs.map

package/dist/adapters/http/controllers/workflows/token/utils/validator.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"validator.mjs","names":["createValidator","Container","z","TokenRequestValidator","initialize","mount","string","min","max"],"sources":["../../../../../../../src/adapters/http/controllers/workflows/token/utils/validator.ts"],"sourcesContent":["/*\n * Copyright (c) 2024.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport { createValidator } from '@validup/zod';\nimport { Container } from 'validup';\nimport { z } from 'zod';\n\nexport class TokenRequestValidator extends Container<{ token: string }> {\n    protected initialize() {\n        super.initialize();\n\n        this.mount(\n            'token',\n            createValidator(z.string().min(16).max(2048)),\n        );\n    }\n}\n"],"mappings":";;;;;;;AAWA,IAAaG,wBAAb,cAA2CF,UAAAA;CAC7BG,aAAa;EACnB,MAAMA,WAAAA;EAEN,KAAKC,MACD,SACAL,gBAAgBE,EAAEI,OAAM,CAAA,CAAGC,IAAI,EAAA,CAAA,CAAIC,IAAI,IAAA,CAAA,CAAA;CAE/C;AACJ"}

package/dist/adapters/http/index.d.ts

@@ -0,0 +1,5 @@
+export * from './adapters/index.ts';
+export * from './controllers/index.ts';
+export * from './middleware/index.ts';
+export * from './request/index.ts';
+//# sourceMappingURL=index.d.ts.map

package/dist/adapters/http/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/adapters/http/index.ts"],"names":[],"mappings":"AAOA,cAAc,qBAAqB,CAAC;AACpC,cAAc,wBAAwB,CAAC;AACvC,cAAc,uBAAuB,CAAC;AACtC,cAAc,oBAAoB,CAAC"}

package/dist/adapters/http/index.mjs

@@ -0,0 +1,88 @@
+import "node:path";
+import "node:url";
+import.meta.url;
+import { RequestHandlerOperation } from "./request/constants.mjs";
+import { setRequestPermissionEvaluator, useRequestPermissionEvaluator } from "./request/permission/helper.mjs";
+import { RequestIdentity, isRequestIdentityMasterRealmMember, setRequestIdentity, useRequestIdentity, useRequestIdentityOrFail } from "./request/helpers/identity.mjs";
+import { buildActorContext } from "./request/helpers/actor.mjs";
+import { getBodyRealmID } from "./request/helpers/body-realm-id.mjs";
+import { LOCALE_COOKIE, useRequestLocale } from "./request/helpers/locale.mjs";
+import { readFromLocations } from "./request/helpers/locations.mjs";
+import { getRequestParamID, getRequestStringParam, getRequestStringParamOrFail, useRequestParamID } from "./request/helpers/param-id.mjs";
+import { applyRouteRealmIDToBody, getRequestRealmID, setRequestRealmID } from "./request/helpers/realm-id.mjs";
+import { sanitizeRelativeRedirect } from "./request/helpers/redirect.mjs";
+import { setRequestScopes, useRequestScopes } from "./request/helpers/scopes.mjs";
+import { setRequestToken, useRequestToken } from "./request/helpers/token.mjs";
+import { RequestPermissionEvaluator } from "./request/permission/module.mjs";
+import "./request/index.mjs";
+import { HTTPOAuth2Authorizer } from "./adapters/oauth2/authorization/module.mjs";
+import { extractClientCredentialsFromRequest } from "./adapters/oauth2/grant-types/utils/credentials.mjs";
+import { guessOauth2GrantTypeByRequest } from "./adapters/oauth2/grant-types/utils/guess.mjs";
+import { HTTPOAuth2AuthorizeGrant } from "./adapters/oauth2/grant-types/authorize.mjs";
+import { HTTPClientCredentialsGrant } from "./adapters/oauth2/grant-types/client-credentials.mjs";
+import { HTTPOAuth2IdentityGrantType } from "./adapters/oauth2/grant-types/identity.mjs";
+import { HTTPPasswordGrant } from "./adapters/oauth2/grant-types/password.mjs";
+import { HTTPOAuth2RefreshTokenGrant } from "./adapters/oauth2/grant-types/refresh_token.mjs";
+import { HTTPRobotCredentialsGrant } from "./adapters/oauth2/grant-types/robot-credentials.mjs";
+import "./adapters/index.mjs";
+import { AuthorizationMiddleware } from "./middleware/built-in/authorization/module.mjs";
+import { createAuthorizationMiddleware } from "./middleware/built-in/authorization/factory.mjs";
+import { ForceLoggedInMiddleware } from "./middleware/built-in/loggedin/module.mjs";
+import { ForceUserLoggedInMiddleware } from "./middleware/built-in/loggedin/user.mjs";
+import { RealmResolverMiddleware } from "./middleware/built-in/realm-resolver/module.mjs";
+import { createRealmResolverMiddleware } from "./middleware/built-in/realm-resolver/factory.mjs";
+import { VITE_SERVER_STORE_KEY, registerAssetsMiddleware } from "./middleware/built-in/assets.mjs";
+import { registerBasicMiddleware } from "./middleware/built-in/basic.mjs";
+import { registerCorsMiddleware } from "./middleware/built-in/cors.mjs";
+import { registerErrorMiddleware } from "./middleware/built-in/error.mjs";
+import { createLoggerMiddleware } from "./middleware/built-in/logger.mjs";
+import { registerPrometheusMiddleware } from "./middleware/built-in/prometheus.mjs";
+import { registerRateLimitMiddleware } from "./middleware/built-in/rate-limit.mjs";
+import { createSwaggerMiddleware } from "./middleware/built-in/swagger.mjs";
+import { UI_HTTP_CLIENT_FACTORY_STORE_KEY, registerUIHttpClientMiddleware } from "./middleware/built-in/ui-http-client.mjs";
+import "./middleware/index.mjs";
+import { ClientController } from "./controllers/entities/client/module.mjs";
+import { ClientPermissionController } from "./controllers/entities/client-permission/module.mjs";
+import { ClientPermissionRequestValidator } from "./controllers/entities/client-permission/utils/validation.mjs";
+import { ClientRoleRequestValidator } from "./controllers/entities/client-role/utils/validation.mjs";
+import { ClientRoleController } from "./controllers/entities/client-role/module.mjs";
+import { ClientScopeController } from "./controllers/entities/client-scope/module.mjs";
+import { ClientScopeRequestValidator } from "./controllers/entities/client-scope/utils/validator.mjs";
+import { IdentityProviderController } from "./controllers/entities/identity-provider/module.mjs";
+import { IdentityProviderRoleMappingController } from "./controllers/entities/identity-provide-role/module.mjs";
+import { PermissionController } from "./controllers/entities/permission/module.mjs";
+import { PermissionPolicyController } from "./controllers/entities/permission-policy/module.mjs";
+import { ActivateController } from "./controllers/workflows/activate/module.mjs";
+import { AuthorizeController } from "./controllers/workflows/authorize/module.mjs";
+import { getJwkRouteHandler, getJwksRouteHandler } from "./controllers/workflows/jwks/handlers/read.mjs";
+import { JwkController } from "./controllers/workflows/jwks/module.mjs";
+import { OpenIDController } from "./controllers/workflows/openid/module.mjs";
+import { PasswordForgotController } from "./controllers/workflows/password-forgot/module.mjs";
+import { PasswordResetController } from "./controllers/workflows/password-reset/module.mjs";
+import { RegisterController } from "./controllers/workflows/register/module.mjs";
+import { StatusController } from "./controllers/workflows/status/module.mjs";
+import { TokenController } from "./controllers/workflows/token/module.mjs";
+import { RealmController } from "./controllers/entities/realm/module.mjs";
+import { RobotController } from "./controllers/entities/robot/module.mjs";
+import { RobotPermissionController } from "./controllers/entities/robot-permission/module.mjs";
+import { RobotPermissionRequestValidator } from "./controllers/entities/robot-permission/utils/validation.mjs";
+import { RobotRoleController } from "./controllers/entities/robot-role/module.mjs";
+import { RobotRoleRequestValidator } from "./controllers/entities/robot-role/utils/validation.mjs";
+import { RoleController } from "./controllers/entities/role/module.mjs";
+import { RoleAttributeController } from "./controllers/entities/role-attribute/module.mjs";
+import { RoleAttributeRequestValidator } from "./controllers/entities/role-attribute/utils/validation.mjs";
+import { RolePermissionController } from "./controllers/entities/role-permission/module.mjs";
+import { RolePermissionRequestValidator } from "./controllers/entities/role-permission/utils/validation.mjs";
+import { PolicyController } from "./controllers/entities/policy/module.mjs";
+import { PolicyAttributesValidator } from "./controllers/entities/policy/utils/attributes-validator.mjs";
+import { PolicyValidator } from "./controllers/entities/policy/utils/validation.mjs";
+import { ScopeController } from "./controllers/entities/scope/module.mjs";
+import { UserController } from "./controllers/entities/user/module.mjs";
+import { UserAttributeController } from "./controllers/entities/user-attribute/module.mjs";
+import { UserAttributeRequestValidator } from "./controllers/entities/user-attribute/utils/validation.mjs";
+import { UserPermissionController } from "./controllers/entities/user-permission/module.mjs";
+import { UserPermissionRequestValidator } from "./controllers/entities/user-permission/utils/validation.mjs";
+import { UserRoleController } from "./controllers/entities/user-role/module.mjs";
+import { UserRoleRequestValidator } from "./controllers/entities/user-role/utils/validation.mjs";
+import "./controllers/index.mjs";
+export { ActivateController, AuthorizationMiddleware, AuthorizeController, ClientController, ClientPermissionController, ClientPermissionRequestValidator, ClientRoleController, ClientRoleRequestValidator, ClientScopeController, ClientScopeRequestValidator, ForceLoggedInMiddleware, ForceUserLoggedInMiddleware, HTTPClientCredentialsGrant, HTTPOAuth2AuthorizeGrant, HTTPOAuth2Authorizer, HTTPOAuth2IdentityGrantType, HTTPOAuth2RefreshTokenGrant, HTTPPasswordGrant, HTTPRobotCredentialsGrant, IdentityProviderController, IdentityProviderRoleMappingController, JwkController, LOCALE_COOKIE, OpenIDController, PasswordForgotController, PasswordResetController, PermissionController, PermissionPolicyController, PolicyAttributesValidator, PolicyController, PolicyValidator, RealmController, RealmResolverMiddleware, RegisterController, RequestHandlerOperation, RequestIdentity, RequestPermissionEvaluator, RobotController, RobotPermissionController, RobotPermissionRequestValidator, RobotRoleController, RobotRoleRequestValidator, RoleAttributeController, RoleAttributeRequestValidator, RoleController, RolePermissionController, RolePermissionRequestValidator, ScopeController, StatusController, TokenController, UI_HTTP_CLIENT_FACTORY_STORE_KEY, UserAttributeController, UserAttributeRequestValidator, UserController, UserPermissionController, UserPermissionRequestValidator, UserRoleController, UserRoleRequestValidator, VITE_SERVER_STORE_KEY, applyRouteRealmIDToBody, buildActorContext, createAuthorizationMiddleware, createLoggerMiddleware, createRealmResolverMiddleware, createSwaggerMiddleware, extractClientCredentialsFromRequest, getBodyRealmID, getJwkRouteHandler, getJwksRouteHandler, getRequestParamID, getRequestRealmID, getRequestStringParam, getRequestStringParamOrFail, guessOauth2GrantTypeByRequest, isRequestIdentityMasterRealmMember, readFromLocations, registerAssetsMiddleware, registerBasicMiddleware, registerCorsMiddleware, registerErrorMiddleware, registerPrometheusMiddleware, registerRateLimitMiddleware, registerUIHttpClientMiddleware, sanitizeRelativeRedirect, setRequestIdentity, setRequestPermissionEvaluator, setRequestRealmID, setRequestScopes, setRequestToken, useRequestIdentity, useRequestIdentityOrFail, useRequestLocale, useRequestParamID, useRequestPermissionEvaluator, useRequestScopes, useRequestToken };

package/dist/adapters/http/middleware/built-in/assets.d.ts

@@ -0,0 +1,4 @@
+import type { App } from 'routup';
+export declare const VITE_SERVER_STORE_KEY: unique symbol;
+export declare function registerAssetsMiddleware(router: App): Promise<void>;
+//# sourceMappingURL=assets.d.ts.map

package/dist/adapters/http/middleware/built-in/assets.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"assets.d.ts","sourceRoot":"","sources":["../../../../../src/adapters/http/middleware/built-in/assets.ts"],"names":[],"mappings":"AAWA,OAAO,KAAK,EAAE,GAAG,EAAE,MAAM,QAAQ,CAAC;AAOlC,eAAO,MAAM,qBAAqB,eAAuB,CAAC;AAE1D,wBAAsB,wBAAwB,CAAC,MAAM,EAAE,GAAG,iBAyCzD"}

package/dist/adapters/http/middleware/built-in/assets.mjs

@@ -0,0 +1,47 @@
+import "node:path";
+import "node:url";
+import.meta.url;
+import { PACKAGE_PATH, UI_DIST_PATH, UI_SOURCE_PATH } from "../../../../path.mjs";
+import path from "node:path";
+import { CodeTransformation, isCodeTransformation } from "typeorm-extension";
+import { defineCoreHandler } from "routup";
+import { fromNodeMiddleware } from "routup/node";
+import { load } from "locter";
+import { createHandler } from "@routup/assets";
+//#region src/adapters/http/middleware/built-in/assets.ts
+const VITE_SERVER_STORE_KEY = Symbol("ViteServer");
+async function registerAssetsMiddleware(router) {
+	if (!isCodeTransformation(CodeTransformation.JUST_IN_TIME)) {
+		router.use("public", createHandler(path.posix.join(PACKAGE_PATH, "public"), {
+			fallthrough: true,
+			scan: false
+		}));
+		router.use("public", createHandler(path.posix.join(UI_DIST_PATH, "client"), {
+			fallthrough: false,
+			scan: false
+		}));
+		return;
+	}
+	const server = await (await load("vite")).createServer({
+		root: UI_SOURCE_PATH,
+		base: "/public/",
+		logLevel: "error",
+		server: {
+			middlewareMode: true,
+			watch: {
+				usePolling: true,
+				interval: 100
+			}
+		},
+		appType: "custom"
+	});
+	router.use("public", fromNodeMiddleware(server.middlewares));
+	router.use(defineCoreHandler((event) => {
+		event.store[VITE_SERVER_STORE_KEY] = server;
+		return event.next();
+	}));
+}
+//#endregion
+export { VITE_SERVER_STORE_KEY, registerAssetsMiddleware };
+
+//# sourceMappingURL=assets.mjs.map

package/dist/adapters/http/middleware/built-in/assets.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"assets.mjs","names":["load","CodeTransformation","isCodeTransformation","createHandler","path","defineCoreHandler","fromNodeMiddleware","PACKAGE_PATH","UI_DIST_PATH","UI_SOURCE_PATH","VITE_SERVER_STORE_KEY","Symbol","registerAssetsMiddleware","router","JUST_IN_TIME","use","posix","join","fallthrough","scan","vite","server","createServer","root","base","logLevel","middlewareMode","watch","usePolling","interval","appType","middlewares","event","store","next"],"sources":["../../../../../src/adapters/http/middleware/built-in/assets.ts"],"sourcesContent":["/*\n * Copyright (c) 2023.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport { load } from 'locter';\nimport { CodeTransformation, isCodeTransformation } from 'typeorm-extension';\nimport { createHandler } from '@routup/assets';\nimport path from 'node:path';\nimport type { App } from 'routup';\nimport { defineCoreHandler } from 'routup';\nimport { fromNodeMiddleware } from 'routup/node';\nimport type * as Vite from 'vite';\nimport type { ViteDevServer } from 'vite';\nimport { PACKAGE_PATH, UI_DIST_PATH, UI_SOURCE_PATH } from '../../../../path.ts';\n\nexport const VITE_SERVER_STORE_KEY = Symbol('ViteServer');\n\nexport async function registerAssetsMiddleware(router: App) {\n    if (!isCodeTransformation(CodeTransformation.JUST_IN_TIME)) {\n        router.use('public', createHandler(\n            path.posix.join(PACKAGE_PATH, 'public'),\n            {\n                fallthrough: true,\n                scan: false,\n            },\n        ));\n\n        router.use('public', createHandler(\n            path.posix.join(UI_DIST_PATH, 'client'),\n            {\n                fallthrough: false,\n                scan: false,\n            },\n        ));\n        return;\n    }\n\n    const vite = await load('vite') as typeof Vite;\n\n    const server: ViteDevServer = await vite.createServer({\n        root: UI_SOURCE_PATH,\n        base: '/public/',\n        logLevel: 'error',\n        server: {\n            middlewareMode: true,\n            watch: {\n                usePolling: true,\n                interval: 100,\n            },\n        },\n        appType: 'custom',\n    });\n\n    router.use('public', fromNodeMiddleware(server.middlewares));\n    router.use(defineCoreHandler((event) => {\n        event.store[VITE_SERVER_STORE_KEY] = server;\n        return event.next();\n    }));\n}\n"],"mappings":";;;;;;;;;;;AAkBA,MAAaU,wBAAwBC,OAAO,YAAA;AAE5C,eAAsBC,yBAAyBC,QAAW;CACtD,IAAI,CAACX,qBAAqBD,mBAAmBa,YAAY,GAAG;EACxDD,OAAOE,IAAI,UAAUZ,cACjBC,KAAKY,MAAMC,KAAKV,cAAc,QAAA,GAC9B;GACIW,aAAa;GACbC,MAAM;EACV,CAAA,CAAA;EAGJN,OAAOE,IAAI,UAAUZ,cACjBC,KAAKY,MAAMC,KAAKT,cAAc,QAAA,GAC9B;GACIU,aAAa;GACbC,MAAM;EACV,CAAA,CAAA;EAEJ;CACJ;CAIA,MAAME,SAAwB,OAAMD,MAFjBpB,KAAK,MAAA,EAAA,CAEiBsB,aAAa;EAClDC,MAAMd;EACNe,MAAM;EACNC,UAAU;EACVJ,QAAQ;GACJK,gBAAgB;GAChBC,OAAO;IACHC,YAAY;IACZC,UAAU;GACd;EACJ;EACAC,SAAS;CACb,CAAA;CAEAjB,OAAOE,IAAI,UAAUT,mBAAmBe,OAAOU,WAAW,CAAA;CAC1DlB,OAAOE,IAAIV,mBAAmB2B,UAAAA;EAC1BA,MAAMC,MAAMvB,yBAAyBW;EACrC,OAAOW,MAAME,KAAI;CACrB,CAAA,CAAA;AACJ"}

package/dist/adapters/http/middleware/built-in/authorization/factory.d.ts

@@ -0,0 +1,4 @@
+import type { Handler } from 'routup';
+import type { HTTPAuthorizationMiddlewareContext } from './types.ts';
+export declare function createAuthorizationMiddleware(ctx: HTTPAuthorizationMiddlewareContext): Handler;
+//# sourceMappingURL=factory.d.ts.map

package/dist/adapters/http/middleware/built-in/authorization/factory.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"factory.d.ts","sourceRoot":"","sources":["../../../../../../src/adapters/http/middleware/built-in/authorization/factory.ts"],"names":[],"mappings":"AAQA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,QAAQ,CAAC;AAEtC,OAAO,KAAK,EAAE,kCAAkC,EAAE,MAAM,YAAY,CAAC;AAErE,wBAAgB,6BAA6B,CAAC,GAAG,EAAE,kCAAkC,GAAI,OAAO,CAO/F"}

package/dist/adapters/http/middleware/built-in/authorization/factory.mjs

@@ -0,0 +1,17 @@
+import "node:path";
+import "node:url";
+import.meta.url;
+import { AuthorizationMiddleware } from "./module.mjs";
+import { defineCoreHandler } from "routup";
+//#region src/adapters/http/middleware/built-in/authorization/factory.ts
+function createAuthorizationMiddleware(ctx) {
+	const middleware = new AuthorizationMiddleware(ctx);
+	return defineCoreHandler(async (event) => {
+		await middleware.run(event);
+		return event.next();
+	});
+}
+//#endregion
+export { createAuthorizationMiddleware };
+
+//# sourceMappingURL=factory.mjs.map

package/dist/adapters/http/middleware/built-in/authorization/factory.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"factory.mjs","names":["defineCoreHandler","AuthorizationMiddleware","createAuthorizationMiddleware","ctx","middleware","event","run","next"],"sources":["../../../../../../src/adapters/http/middleware/built-in/authorization/factory.ts"],"sourcesContent":["/*\n * Copyright (c) 2021-2022.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport { defineCoreHandler } from 'routup';\nimport type { Handler } from 'routup';\nimport { AuthorizationMiddleware } from './module.ts';\nimport type { HTTPAuthorizationMiddlewareContext } from './types.ts';\n\nexport function createAuthorizationMiddleware(ctx: HTTPAuthorizationMiddlewareContext) : Handler {\n    const middleware = new AuthorizationMiddleware(ctx);\n\n    return defineCoreHandler(async (event) => {\n        await middleware.run(event);\n        return event.next();\n    });\n}\n"],"mappings":";;;;;;AAYA,SAAgBE,8BAA8BC,KAAuC;CACjF,MAAMC,aAAa,IAAIH,wBAAwBE,GAAAA;CAE/C,OAAOH,kBAAkB,OAAOK,UAAAA;EAC5B,MAAMD,WAAWE,IAAID,KAAAA;EACrB,OAAOA,MAAME,KAAI;CACrB,CAAA;AACJ"}

package/dist/adapters/http/middleware/built-in/authorization/index.d.ts

@@ -0,0 +1,4 @@
+export * from './module.ts';
+export * from './factory.ts';
+export * from './types.ts';
+//# sourceMappingURL=index.d.ts.map

package/dist/adapters/http/middleware/built-in/authorization/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../../src/adapters/http/middleware/built-in/authorization/index.ts"],"names":[],"mappings":"AAOA,cAAc,aAAa,CAAC;AAC5B,cAAc,cAAc,CAAC;AAC7B,cAAc,YAAY,CAAC"}

package/dist/adapters/http/middleware/built-in/authorization/index.mjs

@@ -0,0 +1,6 @@
+import "node:path";
+import "node:url";
+import.meta.url;
+import { AuthorizationMiddleware } from "./module.mjs";
+import { createAuthorizationMiddleware } from "./factory.mjs";
+export { AuthorizationMiddleware, createAuthorizationMiddleware };