@authup/server-core 1.0.0-beta.5 → 1.0.0-beta.50

package/dist/app/modules/http/modules/controller.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"controller.mjs","names":["decorators","ClientEntity","ClientPermissionEntity","ClientRoleEntity","ClientScopeEntity","IdentityProviderRepository","IdentityProviderRoleMappingEntity","KeyEntity","PermissionEntity","PermissionPolicyEntity","PolicyRepository","RealmEntity","RobotEntity","RobotPermissionEntity","RobotRoleEntity","RoleAttributeEntity","RoleEntity","RolePermissionEntity","ScopeEntity","UserAttributeEntity","UserEntity","UserPermissionEntity","UserRepository","UserRoleEntity","ClientPermissionRepositoryAdapter","ClientRepositoryAdapter","ClientRoleRepositoryAdapter","ClientScopeRepositoryAdapter","DatabaseInjectionKey","IdentityProviderRepositoryAdapter","IdentityProviderRoleMappingRepositoryAdapter","PermissionDatabaseProvider","PermissionPolicyRepositoryAdapter","PermissionRepositoryAdapter","PolicyRepositoryAdapter","RealmRepositoryAdapter","RobotPermissionRepositoryAdapter","RobotRepositoryAdapter","RobotRoleRepositoryAdapter","RoleAttributeRepositoryAdapter","RolePermissionRepositoryAdapter","RoleRepositoryAdapter","ScopeRepositoryAdapter","UserAttributeRepositoryAdapter","UserPermissionRepositoryAdapter","UserRepositoryAdapter","UserRoleRepositoryAdapter","ClientController","ClientPermissionController","ClientRoleController","ClientScopeController","IdentityProviderController","IdentityProviderRoleMappingController","PermissionController","PermissionPolicyController","PolicyController","RealmController","RobotController","RobotPermissionController","RobotRoleController","RoleAttributeController","RoleController","RolePermissionController","ScopeController","UserAttributeController","UserController","UserPermissionController","UserRoleController","ActivateController","AuthorizeController","JwkController","OpenIDController","PasswordForgotController","PasswordResetController","RegisterController","StatusController","TokenController","ClientAuthenticator","ClientPermissionService","ClientRoleService","ClientScopeService","ClientService","CredentialsAuthenticator","IdentityProviderRoleMappingService","OAuth2ClientAuthenticator","PasswordRecoveryService","PermissionCheckerService","PermissionPolicyService","PermissionService","PolicyCheckerService","PolicyService","RealmService","RegistrationService","RobotAuthenticator","RobotPermissionService","RobotRoleService","RobotService","RoleAttributeService","RolePermissionService","RoleService","ScopeService","UserAttributeService","UserAuthenticator","UserPermissionService","UserRoleService","UserService","WebClientProvisioner","AuthenticationInjectionKey","OAuth2InjectionToken","IdentityInjectionKey","ConfigInjectionKey","getAppOrigins","LoggerInjectionKey","MailInjectionKey","MailTemplateRendererInjectionKey","HTTPControllerModule","mount","router","container","realmController","createRealmController","roleController","createRoleController","permissionController","createPermissionController","permissionPolicyController","createPermissionPolicyController","clientController","createClientController","robotController","createRobotController","clientPermissionController","createClientPermissionController","clientRoleController","createClientRoleController","clientScopeController","createClientScopeController","robotPermissionController","createRobotPermissionController","robotRoleController","createRobotRoleController","roleAttributeController","createRoleAttributeController","rolePermissionController","createRolePermissionController","scopeController","createScopeController","userController","createUserController","userAttributeController","createUserAttributeController","userPermissionController","createUserPermissionController","userRoleController","createUserRoleController","policyController","createPolicyController","identityProviderRoleController","createIdentityProviderRoleController","use","controllers","createAuthorize","createToken","createJwkController","createOpenIDController","createActivateController","createPasswordForgotController","createPasswordResetController","createRegisterController","createStatusController","createIdentityProvider","config","resolve","accessTokenIssuer","AccessTokenIssuer","openIdTokenIssuer","OpenIDTokenIssuer","codeIssuer","AuthorizationCodeIssuer","codeRequestVerifier","AuthorizationCodeRequestVerifier","identityResolver","Resolver","options","baseURL","publicUrl","features","buildUIFeatures","sessionManager","SessionManager","codeVerifier","AuthorizationCodeVerifier","refreshTokenIssuer","RefreshTokenIssuer","tokenRevoker","TokenRevoker","tokenVerifier","TokenVerifier","identityProviderLdapCollectionAuthenticator","ProviderLdapCollectionAuthenticator","identityPermissionProvider","PermissionProvider","clientAuthenticator","robotAuthenticator","userAuthenticator","oauth2ClientAuthenticator","service","createRegistrationService","createPasswordRecoveryService","dataSource","DataSource","realmRepository","repository","mailClient","mailTemplateRenderer","passwordRecoveryEnabled","emailVerificationEnabled","registration","registrationEnabled","passwordRecovery","emailVerification","accountManager","ProviderAccountManager","stateManager","AuthorizationStateManager","realmRepositoryAdapter","roleRepository","rolePermissionRepository","policyRepository","permissionPolicyRepository","permissionProvider","checkerService","reservedNames","Set","getMetadata","columns","map","c","propertyName","getRepository","clientRepository","logger","webClientProvisioner","appOrigins","keyRepository"],"sources":["../../../../../src/app/modules/http/modules/controller.ts"],"sourcesContent":["/*\n * Copyright (c) 2025.\n *  Author Peter Placzek (tada5hi)\n *  For the full copyright and license information,\n *  view the LICENSE file that was distributed with this source code.\n */\n\nimport type { App } from 'routup';\nimport { decorators } from '@routup/decorators';\nimport type {\n    Client,\n    ClientPermission,\n    ClientRole,\n    ClientScope,\n    Permission,\n    PermissionPolicy,\n    Realm,\n    Robot,\n    RobotPermission,\n    RobotRole,\n    Role,\n    RoleAttribute,\n    RolePermission,\n    Scope,\n    UserAttribute,\n    UserPermission,\n    UserRole,\n} from '@authup/core-kit';\nimport type { Repository } from 'typeorm';\nimport {\n    ClientEntity,\n    ClientPermissionEntity,\n    ClientRoleEntity,\n    ClientScopeEntity,\n    IdentityProviderRepository,\n    IdentityProviderRoleMappingEntity,\n    KeyEntity,\n    PermissionEntity,\n    PermissionPolicyEntity,\n    PolicyRepository,\n    RealmEntity,\n    RobotEntity,\n    RobotPermissionEntity,\n    RobotRoleEntity,\n    RoleAttributeEntity,\n    RoleEntity,\n    RolePermissionEntity,\n    ScopeEntity,\n    UserAttributeEntity,\n    UserEntity,\n    UserPermissionEntity,\n    UserRepository,\n    UserRoleEntity,\n} from '../../../../adapters/database/domains/index.ts';\nimport {\n    ClientPermissionRepositoryAdapter,\n    ClientRepositoryAdapter,\n    ClientRoleRepositoryAdapter,\n    ClientScopeRepositoryAdapter,\n    DatabaseInjectionKey,\n    IdentityProviderRepositoryAdapter,\n    IdentityProviderRoleMappingRepositoryAdapter,\n    PermissionDatabaseProvider,\n    PermissionPolicyRepositoryAdapter,\n    PermissionRepositoryAdapter,\n    PolicyRepositoryAdapter,\n    RealmRepositoryAdapter,\n    RobotPermissionRepositoryAdapter,\n    RobotRepositoryAdapter,\n    RobotRoleRepositoryAdapter,\n    RoleAttributeRepositoryAdapter,\n    RolePermissionRepositoryAdapter,\n    RoleRepositoryAdapter,\n    ScopeRepositoryAdapter,\n    UserAttributeRepositoryAdapter,\n    UserPermissionRepositoryAdapter,\n    UserRepositoryAdapter,\n    UserRoleRepositoryAdapter,\n} from '../../database/index.ts';\nimport {\n    ClientController,\n    ClientPermissionController,\n    ClientRoleController,\n    ClientScopeController, \n    IdentityProviderController,\n    IdentityProviderRoleMappingController,\n    PermissionController,\n    PermissionPolicyController,\n    PolicyController,\n    RealmController,\n    RobotController,\n    RobotPermissionController,\n    RobotRoleController,\n    RoleAttributeController,\n    RoleController,\n    RolePermissionController,\n    ScopeController,\n    UserAttributeController,\n    UserController,\n    UserPermissionController,\n    UserRoleController,\n} from '../../../../adapters/http/index.ts';\nimport {\n    ActivateController,\n    AuthorizeController,\n    JwkController,\n    OpenIDController,\n    PasswordForgotController,\n    PasswordResetController,\n    RegisterController,\n    StatusController,\n    TokenController,\n} from '../../../../adapters/http/controllers/index.ts';\nimport type { IContainer } from 'eldin';\nimport {\n    ClientAuthenticator,\n    ClientPermissionService,\n    ClientRoleService,\n    ClientScopeService,\n    ClientService,\n    CredentialsAuthenticator,\n    IdentityProviderRoleMappingService,\n    OAuth2ClientAuthenticator,\n    PasswordRecoveryService,\n    PermissionCheckerService,\n    PermissionPolicyService,\n    PermissionService,\n    PolicyCheckerService,\n    PolicyService,\n    RealmService,\n    RegistrationService,\n    RobotAuthenticator,\n    RobotPermissionService,\n    RobotRoleService,\n    RobotService,\n    RoleAttributeService,\n    RolePermissionService,\n    RoleService,\n    ScopeService,\n    UserAttributeService,\n    UserAuthenticator,\n    UserPermissionService,\n    UserRoleService,\n    UserService,\n    WebClientProvisioner,\n} from '../../../../core/index.ts';\nimport { AuthenticationInjectionKey } from '../../authentication/index.ts';\nimport { OAuth2InjectionToken } from '../../oauth2/index.ts';\nimport { IdentityInjectionKey } from '../../identity/index.ts';\nimport type { StatusResponseFeatures } from '@authup/core-http-kit';\nimport type { Config } from '../../config/index.ts';\nimport { ConfigInjectionKey, getAppOrigins } from '../../config/index.ts';\nimport { LoggerInjectionKey } from '../../logger/index.ts';\nimport { MailInjectionKey, MailTemplateRendererInjectionKey } from '../../mail/index.ts';\n\nexport class HTTPControllerModule {\n    async mount(router: App, container: IContainer): Promise<void> {\n        const realmController = this.createRealmController(container);\n        const roleController = this.createRoleController(container);\n        const permissionController = await this.createPermissionController(container);\n        const permissionPolicyController = this.createPermissionPolicyController(container);\n        const clientController = this.createClientController(container);\n        const robotController = this.createRobotController(container);\n        const clientPermissionController = this.createClientPermissionController(container);\n        const clientRoleController = this.createClientRoleController(container);\n        const clientScopeController = this.createClientScopeController(container);\n        const robotPermissionController = this.createRobotPermissionController(container);\n        const robotRoleController = this.createRobotRoleController(container);\n        const roleAttributeController = this.createRoleAttributeController(container);\n        const rolePermissionController = this.createRolePermissionController(container);\n        const scopeController = this.createScopeController(container);\n        const userController = this.createUserController(container);\n        const userAttributeController = this.createUserAttributeController(container);\n        const userPermissionController = this.createUserPermissionController(container);\n        const userRoleController = this.createUserRoleController(container);\n        const policyController = this.createPolicyController(container);\n        const identityProviderRoleController = this.createIdentityProviderRoleController(container);\n\n        router.use(decorators({\n            controllers: [\n                this.createAuthorize(container),\n                this.createToken(container),\n                this.createJwkController(container),\n                this.createOpenIDController(container),\n                this.createActivateController(container),\n                this.createPasswordForgotController(container),\n                this.createPasswordResetController(container),\n                this.createRegisterController(container),\n\n                this.createStatusController(container),\n\n                clientController,\n                clientPermissionController,\n                clientRoleController,\n                clientScopeController,\n                identityProviderRoleController,\n                this.createIdentityProvider(container),\n                permissionController,\n                permissionPolicyController,\n                policyController,\n                robotController,\n                robotPermissionController,\n                robotRoleController,\n                realmController,\n                roleController,\n                roleAttributeController,\n                rolePermissionController,\n                scopeController,\n                userController,\n                userAttributeController,\n                userPermissionController,\n                userRoleController,\n            ],\n        }));\n    }\n\n    // ----------------------------------------------------\n\n    createAuthorize(container: IContainer) {\n        const config = container.resolve(ConfigInjectionKey);\n        const accessTokenIssuer = container.resolve(OAuth2InjectionToken.AccessTokenIssuer);\n        const openIdTokenIssuer = container.resolve(OAuth2InjectionToken.OpenIDTokenIssuer);\n\n        const codeIssuer = container.resolve(OAuth2InjectionToken.AuthorizationCodeIssuer);\n        const codeRequestVerifier = container.resolve(OAuth2InjectionToken.AuthorizationCodeRequestVerifier);\n\n        const identityResolver = container.resolve(IdentityInjectionKey.Resolver);\n\n        return new AuthorizeController({\n            options: {\n                baseURL: config.publicUrl,\n                features: this.buildUIFeatures(config),\n            },\n\n            accessTokenIssuer,\n            openIdTokenIssuer,\n\n            codeIssuer,\n            codeRequestVerifier,\n\n            identityResolver,\n        });\n    }\n\n    createToken(container: IContainer) {\n        const sessionManager = container.resolve(AuthenticationInjectionKey.SessionManager);\n\n        const codeVerifier = container.resolve(OAuth2InjectionToken.AuthorizationCodeVerifier);\n\n        const accessTokenIssuer = container.resolve(OAuth2InjectionToken.AccessTokenIssuer);\n        const refreshTokenIssuer = container.resolve(OAuth2InjectionToken.RefreshTokenIssuer);\n\n        const tokenRevoker = container.resolve(OAuth2InjectionToken.TokenRevoker);\n        const tokenVerifier = container.resolve(OAuth2InjectionToken.TokenVerifier);\n\n        const identityResolver = container.resolve(IdentityInjectionKey.Resolver);\n        const identityProviderLdapCollectionAuthenticator = container.resolve(IdentityInjectionKey.ProviderLdapCollectionAuthenticator);\n\n        const identityPermissionProvider = container.resolve(IdentityInjectionKey.PermissionProvider);\n\n        const clientAuthenticator = new ClientAuthenticator(identityResolver);\n        const robotAuthenticator = new RobotAuthenticator(identityResolver);\n\n        const userAuthenticator = new CredentialsAuthenticator([\n            identityProviderLdapCollectionAuthenticator,\n            new UserAuthenticator(identityResolver),\n        ]);\n\n        const oauth2ClientAuthenticator = new OAuth2ClientAuthenticator(identityResolver);\n\n        return new TokenController({\n            codeVerifier,\n\n            accessTokenIssuer,\n            refreshTokenIssuer,\n\n            tokenVerifier,\n            tokenRevoker,\n\n            identityResolver,\n            identityPermissionProvider,\n\n            clientAuthenticator,\n            robotAuthenticator,\n            userAuthenticator,\n\n            oauth2ClientAuthenticator,\n\n            sessionManager,\n        });\n    }\n\n    createOpenIDController(container: IContainer) {\n        const config = container.resolve(ConfigInjectionKey);\n\n        return new OpenIDController({ baseURL: config.publicUrl });\n    }\n\n    createActivateController(container: IContainer) {\n        const config = container.resolve(ConfigInjectionKey);\n\n        return new ActivateController({\n            options: {\n                baseURL: config.publicUrl,\n                features: this.buildUIFeatures(config),\n            },\n            service: this.createRegistrationService(container),\n        });\n    }\n\n    createPasswordForgotController(container: IContainer) {\n        const config = container.resolve(ConfigInjectionKey);\n\n        return new PasswordForgotController({\n            options: {\n                baseURL: config.publicUrl,\n                features: this.buildUIFeatures(config),\n            },\n            service: this.createPasswordRecoveryService(container),\n        });\n    }\n\n    createPasswordResetController(container: IContainer) {\n        const config = container.resolve(ConfigInjectionKey);\n\n        return new PasswordResetController({\n            options: {\n                baseURL: config.publicUrl,\n                features: this.buildUIFeatures(config),\n            },\n            service: this.createPasswordRecoveryService(container),\n        });\n    }\n\n    createPasswordRecoveryService(container: IContainer) {\n        const config = container.resolve(ConfigInjectionKey);\n        const dataSource = container.resolve(DatabaseInjectionKey.DataSource);\n        const realmRepository = container.resolve<Repository<Realm>>(RealmEntity);\n        const repository = new UserRepositoryAdapter({\n            repository: new UserRepository(dataSource),\n            realmRepository,\n        });\n        const mailClient = container.resolve(MailInjectionKey);\n        const mailTemplateRenderer = container.resolve(MailTemplateRendererInjectionKey);\n\n        return new PasswordRecoveryService({\n            mailClient,\n            mailTemplateRenderer,\n            repository,\n            realmRepository: new RealmRepositoryAdapter(realmRepository),\n            options: {\n                passwordRecoveryEnabled: config.passwordRecoveryEnabled,\n                emailVerificationEnabled: config.emailVerificationEnabled,\n                publicUrl: config.publicUrl,\n            },\n        });\n    }\n\n    createRegisterController(container: IContainer) {\n        const config = container.resolve(ConfigInjectionKey);\n\n        return new RegisterController({\n            options: {\n                baseURL: config.publicUrl,\n                features: this.buildUIFeatures(config),\n            },\n            service: this.createRegistrationService(container),\n        });\n    }\n\n    createStatusController(container: IContainer) {\n        const config = container.resolve(ConfigInjectionKey);\n\n        return new StatusController({ options: { features: this.buildUIFeatures(config) } });\n    }\n\n    buildUIFeatures(config: Config) : StatusResponseFeatures {\n        return {\n            registration: config.registrationEnabled,\n            passwordRecovery: config.passwordRecoveryEnabled,\n            emailVerification: config.emailVerificationEnabled,\n        };\n    }\n\n    createRegistrationService(container: IContainer) {\n        const config = container.resolve(ConfigInjectionKey);\n        const dataSource = container.resolve(DatabaseInjectionKey.DataSource);\n        const realmRepository = container.resolve<Repository<Realm>>(RealmEntity);\n        const repository = new UserRepositoryAdapter({\n            repository: new UserRepository(dataSource),\n            realmRepository,\n        });\n        const mailClient = container.resolve(MailInjectionKey);\n        const mailTemplateRenderer = container.resolve(MailTemplateRendererInjectionKey);\n\n        return new RegistrationService({\n            mailClient,\n            mailTemplateRenderer,\n            repository,\n            realmRepository: new RealmRepositoryAdapter(realmRepository),\n            options: {\n                registrationEnabled: config.registrationEnabled,\n                emailVerificationEnabled: config.emailVerificationEnabled,\n                publicUrl: config.publicUrl,\n            },\n        });\n    }\n\n    createIdentityProvider(container: IContainer) {\n        const config = container.resolve(ConfigInjectionKey);\n        const dataSource = container.resolve(DatabaseInjectionKey.DataSource);\n\n        const accountManager = container.resolve(IdentityInjectionKey.ProviderAccountManager);\n\n        const codeIssuer = container.resolve(OAuth2InjectionToken.AuthorizationCodeIssuer);\n\n        const codeRequestVerifier = container.resolve(OAuth2InjectionToken.AuthorizationCodeRequestVerifier);\n\n        const stateManager = container.resolve(OAuth2InjectionToken.AuthorizationStateManager);\n\n        const realmRepository = container.resolve<Repository<Realm>>(RealmEntity);\n\n        const repository = new IdentityProviderRepositoryAdapter({\n            repository: new IdentityProviderRepository(dataSource),\n            realmRepository,\n        });\n\n        return new IdentityProviderController({\n            options: { baseURL: config.publicUrl },\n\n            repository,\n            realmRepository: new RealmRepositoryAdapter(realmRepository),\n\n            accountManager,\n\n            codeIssuer,\n            codeRequestVerifier,\n            stateManager,\n        });\n    }\n\n    createClientController(container: IContainer) {\n        const realmRepository = container.resolve<Repository<Realm>>(RealmEntity);\n        const repository = new ClientRepositoryAdapter({\n            repository: container.resolve<Repository<Client>>(ClientEntity),\n            realmRepository,\n        });\n        const realmRepositoryAdapter = new RealmRepositoryAdapter(realmRepository);\n        const service = new ClientService({\n            repository,\n            realmRepository: realmRepositoryAdapter, \n        });\n        return new ClientController({\n            service,\n            repository, \n        });\n    }\n\n    createRobotController(container: IContainer) {\n        const dataSource = container.resolve(DatabaseInjectionKey.DataSource);\n        const realmRepository = container.resolve<Repository<Realm>>(RealmEntity);\n        const repository = new RobotRepositoryAdapter({\n            repository: container.resolve<Repository<Robot>>(RobotEntity),\n            realmRepository,\n        });\n        const realmRepositoryAdapter = new RealmRepositoryAdapter(realmRepository);\n        const service = new RobotService({\n            repository,\n            realmRepository: realmRepositoryAdapter, \n        });\n        return new RobotController({\n            service,\n            repository,\n            realmRepository: realmRepositoryAdapter,\n            dataSource,\n        });\n    }\n\n    async createPermissionController(container: IContainer) {\n        const dataSource = container.resolve(DatabaseInjectionKey.DataSource);\n        const realmRepository = container.resolve<Repository<Realm>>(RealmEntity);\n        const repository = new PermissionRepositoryAdapter({\n            repository: container.resolve<Repository<Permission>>(PermissionEntity),\n            realmRepository,\n        });\n\n        const realmRepositoryAdapter = new RealmRepositoryAdapter(realmRepository);\n        const roleRepository = new RoleRepositoryAdapter({\n            repository: container.resolve<Repository<Role>>(RoleEntity),\n            realmRepository,\n        });\n        const rolePermissionRepository = new RolePermissionRepositoryAdapter(\n            container.resolve<Repository<RolePermission>>(RolePermissionEntity),\n        );\n        const policyRepository = new PolicyRepositoryAdapter({\n            repository: new PolicyRepository(dataSource),\n            realmRepository,\n        });\n\n        const permissionPolicyRepository = new PermissionPolicyRepositoryAdapter(\n            container.resolve<Repository<PermissionPolicy>>(PermissionPolicyEntity),\n        );\n\n        const service = new PermissionService({\n            repository,\n            realmRepository: realmRepositoryAdapter,\n            roleRepository,\n            rolePermissionRepository,\n            policyRepository,\n            permissionPolicyRepository,\n        });\n\n        const identityPermissionProvider = container.resolve(IdentityInjectionKey.PermissionProvider);\n        const permissionProvider = new PermissionDatabaseProvider(dataSource);\n\n        const checkerService = new PermissionCheckerService({\n            repository,\n            realmRepository: realmRepositoryAdapter,\n            permissionProvider,\n            identityPermissionProvider,\n        });\n\n        return new PermissionController({\n            service,\n            checkerService,\n        });\n    }\n\n    createRoleController(container: IContainer) {\n        const realmRepository = new RealmRepositoryAdapter(\n            container.resolve<Repository<Realm>>(RealmEntity),\n        );\n        const repository = new RoleRepositoryAdapter({\n            repository: container.resolve<Repository<Role>>(RoleEntity),\n            realmRepository: container.resolve<Repository<Realm>>(RealmEntity),\n        });\n        const service = new RoleService({\n            repository,\n            realmRepository, \n        });\n        return new RoleController({ service });\n    }\n\n    createClientPermissionController(container: IContainer) {\n        const repository = new ClientPermissionRepositoryAdapter(\n            container.resolve<Repository<ClientPermission>>(ClientPermissionEntity),\n        );\n        const identityPermissionProvider = container.resolve(IdentityInjectionKey.PermissionProvider);\n        const service = new ClientPermissionService({\n            repository,\n            identityPermissionProvider, \n        });\n        return new ClientPermissionController({ service });\n    }\n\n    createClientRoleController(container: IContainer) {\n        const repository = new ClientRoleRepositoryAdapter(\n            container.resolve<Repository<ClientRole>>(ClientRoleEntity),\n        );\n        const identityPermissionProvider = container.resolve(IdentityInjectionKey.PermissionProvider);\n        const service = new ClientRoleService({ repository, identityPermissionProvider });\n        return new ClientRoleController({ service });\n    }\n\n    createClientScopeController(container: IContainer) {\n        const repository = new ClientScopeRepositoryAdapter(\n            container.resolve<Repository<ClientScope>>(ClientScopeEntity),\n        );\n        const service = new ClientScopeService({ repository });\n        return new ClientScopeController({ service });\n    }\n\n    createRobotPermissionController(container: IContainer) {\n        const repository = new RobotPermissionRepositoryAdapter(\n            container.resolve<Repository<RobotPermission>>(RobotPermissionEntity),\n        );\n        const identityPermissionProvider = container.resolve(IdentityInjectionKey.PermissionProvider);\n        const service = new RobotPermissionService({\n            repository,\n            identityPermissionProvider, \n        });\n        return new RobotPermissionController({ service });\n    }\n\n    createRobotRoleController(container: IContainer) {\n        const repository = new RobotRoleRepositoryAdapter(\n            container.resolve<Repository<RobotRole>>(RobotRoleEntity),\n        );\n        const identityPermissionProvider = container.resolve(IdentityInjectionKey.PermissionProvider);\n        const service = new RobotRoleService({ repository, identityPermissionProvider });\n        return new RobotRoleController({ service });\n    }\n\n    createRoleAttributeController(container: IContainer) {\n        const dataSource = container.resolve(DatabaseInjectionKey.DataSource);\n        const repository = new RoleAttributeRepositoryAdapter(\n            container.resolve<Repository<RoleAttribute>>(RoleAttributeEntity),\n        );\n        const reservedNames = new Set(\n            dataSource.getMetadata(RoleEntity).columns.map((c) => c.propertyName),\n        );\n        const service = new RoleAttributeService({ repository, reservedNames });\n        return new RoleAttributeController({ service });\n    }\n\n    createRolePermissionController(container: IContainer) {\n        const repository = new RolePermissionRepositoryAdapter(\n            container.resolve<Repository<RolePermission>>(RolePermissionEntity),\n        );\n        const identityPermissionProvider = container.resolve(IdentityInjectionKey.PermissionProvider);\n        const service = new RolePermissionService({\n            repository,\n            identityPermissionProvider, \n        });\n        return new RolePermissionController({ service });\n    }\n\n    createPermissionPolicyController(container: IContainer) {\n        const repository = new PermissionPolicyRepositoryAdapter(\n            container.resolve<Repository<PermissionPolicy>>(PermissionPolicyEntity),\n        );\n        const service = new PermissionPolicyService({ repository });\n        return new PermissionPolicyController({ service });\n    }\n\n    createScopeController(container: IContainer) {\n        const realmRepository = new RealmRepositoryAdapter(\n            container.resolve<Repository<Realm>>(RealmEntity),\n        );\n        const repository = new ScopeRepositoryAdapter({\n            repository: container.resolve<Repository<Scope>>(ScopeEntity),\n            realmRepository: container.resolve<Repository<Realm>>(RealmEntity),\n        });\n        const service = new ScopeService({\n            repository,\n            realmRepository, \n        });\n        return new ScopeController({ service });\n    }\n\n    createUserController(container: IContainer) {\n        const dataSource = container.resolve(DatabaseInjectionKey.DataSource);\n        const realmRepository = container.resolve<Repository<Realm>>(RealmEntity);\n        const repository = new UserRepositoryAdapter({\n            repository: new UserRepository(dataSource),\n            realmRepository,\n        });\n        const realmRepositoryAdapter = new RealmRepositoryAdapter(realmRepository);\n        const service = new UserService({\n            repository,\n            realmRepository: realmRepositoryAdapter, \n        });\n        return new UserController({ service });\n    }\n\n    createUserAttributeController(container: IContainer) {\n        const dataSource = container.resolve(DatabaseInjectionKey.DataSource);\n        const repository = new UserAttributeRepositoryAdapter(\n            container.resolve<Repository<UserAttribute>>(UserAttributeEntity),\n        );\n        const reservedNames = new Set(\n            dataSource.getMetadata(UserEntity).columns.map((c) => c.propertyName),\n        );\n        const service = new UserAttributeService({ repository, reservedNames });\n        return new UserAttributeController({ service });\n    }\n\n    createUserPermissionController(container: IContainer) {\n        const repository = new UserPermissionRepositoryAdapter(\n            container.resolve<Repository<UserPermission>>(UserPermissionEntity),\n        );\n        const identityPermissionProvider = container.resolve(IdentityInjectionKey.PermissionProvider);\n        const service = new UserPermissionService({\n            repository,\n            identityPermissionProvider, \n        });\n        return new UserPermissionController({ service });\n    }\n\n    createUserRoleController(container: IContainer) {\n        const repository = new UserRoleRepositoryAdapter(\n            container.resolve<Repository<UserRole>>(UserRoleEntity),\n        );\n        const identityPermissionProvider = container.resolve(IdentityInjectionKey.PermissionProvider);\n        const service = new UserRoleService({ repository, identityPermissionProvider });\n        return new UserRoleController({ service });\n    }\n\n    createPolicyController(container: IContainer) {\n        const dataSource = container.resolve(DatabaseInjectionKey.DataSource);\n        const realmRepository = container.resolve<Repository<Realm>>(RealmEntity);\n        const repository = new PolicyRepositoryAdapter({\n            repository: new PolicyRepository(dataSource),\n            realmRepository,\n        });\n        const realmRepositoryAdapter = new RealmRepositoryAdapter(realmRepository);\n        const service = new PolicyService({\n            repository,\n            realmRepository: realmRepositoryAdapter, \n        });\n        const identityPermissionProvider = container.resolve(IdentityInjectionKey.PermissionProvider);\n        const checkerService = new PolicyCheckerService({\n            repository,\n            realmRepository: realmRepositoryAdapter,\n            identityPermissionProvider,\n        });\n\n        return new PolicyController({\n            service,\n            checkerService,\n        });\n    }\n\n    createIdentityProviderRoleController(container: IContainer) {\n        const repository = new IdentityProviderRoleMappingRepositoryAdapter(\n            container.resolve<Repository<any>>(IdentityProviderRoleMappingEntity),\n        );\n        const identityPermissionProvider = container.resolve(IdentityInjectionKey.PermissionProvider);\n        const service = new IdentityProviderRoleMappingService({ repository, identityPermissionProvider });\n        return new IdentityProviderRoleMappingController({ service });\n    }\n\n    createJwkController(container: IContainer) {\n        const dataSource = container.resolve(DatabaseInjectionKey.DataSource);\n        const repository = dataSource.getRepository(KeyEntity);\n        return new JwkController({ repository });\n    }\n\n    createRealmController(container: IContainer) {\n        const config = container.resolve(ConfigInjectionKey);\n        const dataSource = container.resolve(DatabaseInjectionKey.DataSource);\n        const realmRepository = container.resolve<Repository<Realm>>(RealmEntity);\n        const repository = new RealmRepositoryAdapter(realmRepository);\n\n        const clientRepository = new ClientRepositoryAdapter({\n            repository: container.resolve<Repository<Client>>(ClientEntity),\n            realmRepository,\n        });\n        const logger = container.resolve(LoggerInjectionKey);\n        const webClientProvisioner = new WebClientProvisioner({\n            clientRepository,\n            appOrigins: getAppOrigins(config),\n            logger,\n        });\n\n        const service = new RealmService({\n            repository, \n            webClientProvisioner, \n            logger, \n        });\n        const keyRepository = dataSource.getRepository(KeyEntity);\n\n        return new RealmController({\n            options: { baseURL: config.publicUrl },\n            service,\n            keyRepository,\n        });\n    }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AA2JA,IAAamH,uBAAb,MAAaA;CACT,MAAMC,MAAMC,QAAaC,WAAsC;EAC3D,MAAMC,kBAAkB,KAAKC,sBAAsBF,SAAAA;EACnD,MAAMG,iBAAiB,KAAKC,qBAAqBJ,SAAAA;EACjD,MAAMK,uBAAuB,MAAM,KAAKC,2BAA2BN,SAAAA;EACnE,MAAMO,6BAA6B,KAAKC,iCAAiCR,SAAAA;EACzE,MAAMS,mBAAmB,KAAKC,uBAAuBV,SAAAA;EACrD,MAAMW,kBAAkB,KAAKC,sBAAsBZ,SAAAA;EACnD,MAAMa,6BAA6B,KAAKC,iCAAiCd,SAAAA;EACzE,MAAMe,uBAAuB,KAAKC,2BAA2BhB,SAAAA;EAC7D,MAAMiB,wBAAwB,KAAKC,4BAA4BlB,SAAAA;EAC/D,MAAMmB,4BAA4B,KAAKC,gCAAgCpB,SAAAA;EACvE,MAAMqB,sBAAsB,KAAKC,0BAA0BtB,SAAAA;EAC3D,MAAMuB,0BAA0B,KAAKC,8BAA8BxB,SAAAA;EACnE,MAAMyB,2BAA2B,KAAKC,+BAA+B1B,SAAAA;EACrE,MAAM2B,kBAAkB,KAAKC,sBAAsB5B,SAAAA;EACnD,MAAM6B,iBAAiB,KAAKC,qBAAqB9B,SAAAA;EACjD,MAAM+B,0BAA0B,KAAKC,8BAA8BhC,SAAAA;EACnE,MAAMiC,2BAA2B,KAAKC,+BAA+BlC,SAAAA;EACrE,MAAMmC,qBAAqB,KAAKC,yBAAyBpC,SAAAA;EACzD,MAAMqC,mBAAmB,KAAKC,uBAAuBtC,SAAAA;EACrD,MAAMuC,iCAAiC,KAAKC,qCAAqCxC,SAAAA;EAEjFD,OAAO0C,IAAI/J,WAAW,EAClBgK,aAAa;GACT,KAAKC,gBAAgB3C,SAAAA;GACrB,KAAK4C,YAAY5C,SAAAA;GACjB,KAAK6C,oBAAoB7C,SAAAA;GACzB,KAAK8C,uBAAuB9C,SAAAA;GAC5B,KAAK+C,yBAAyB/C,SAAAA;GAC9B,KAAKgD,+BAA+BhD,SAAAA;GACpC,KAAKiD,8BAA8BjD,SAAAA;GACnC,KAAKkD,yBAAyBlD,SAAAA;GAE9B,KAAKmD,uBAAuBnD,SAAAA;GAE5BS;GACAI;GACAE;GACAE;GACAsB;GACA,KAAKa,uBAAuBpD,SAAAA;GAC5BK;GACAE;GACA8B;GACA1B;GACAQ;GACAE;GACApB;GACAE;GACAoB;GACAE;GACAE;GACAE;GACAE;GACAE;GACAE;IAER,CAAA,CAAA;CACJ;CAIAQ,gBAAgB3C,WAAuB;EACnC,MAAMqD,SAASrD,UAAUsD,QAAQ9D,kBAAAA;EACjC,MAAM+D,oBAAoBvD,UAAUsD,QAAQhE,qBAAqBkE,iBAAiB;EAClF,MAAMC,oBAAoBzD,UAAUsD,QAAQhE,qBAAqBoE,iBAAiB;EAElF,MAAMC,aAAa3D,UAAUsD,QAAQhE,qBAAqBsE,uBAAuB;EACjF,MAAMC,sBAAsB7D,UAAUsD,QAAQhE,qBAAqBwE,gCAAgC;EAEnG,MAAMC,mBAAmB/D,UAAUsD,QAAQ/D,qBAAqByE,QAAQ;EAExE,OAAO,IAAIjH,oBAAoB;GAC3BkH,SAAS;IACLC,SAASb,OAAOc;IAChBC,UAAU,KAAKC,gBAAgBhB,MAAAA;GACnC;GAEAE;GACAE;GAEAE;GACAE;GAEAE;EACJ,CAAA;CACJ;CAEAnB,YAAY5C,WAAuB;EAC/B,MAAMsE,iBAAiBtE,UAAUsD,QAAQjE,2BAA2BkF,cAAc;EAElF,MAAMC,eAAexE,UAAUsD,QAAQhE,qBAAqBmF,yBAAyB;EAErF,MAAMlB,oBAAoBvD,UAAUsD,QAAQhE,qBAAqBkE,iBAAiB;EAClF,MAAMkB,qBAAqB1E,UAAUsD,QAAQhE,qBAAqBqF,kBAAkB;EAEpF,MAAMC,eAAe5E,UAAUsD,QAAQhE,qBAAqBuF,YAAY;EACxE,MAAMC,gBAAgB9E,UAAUsD,QAAQhE,qBAAqByF,aAAa;EAE1E,MAAMhB,mBAAmB/D,UAAUsD,QAAQ/D,qBAAqByE,QAAQ;EACxE,MAAMgB,8CAA8ChF,UAAUsD,QAAQ/D,qBAAqB0F,mCAAmC;EAc9H,OAAO,IAAI3H,gBAAgB;GACvBkH;GAEAjB;GACAmB;GAEAI;GACAF;GAEAb;GACAmB,4BAtB+BlF,UAAUsD,QAAQ/D,qBAAqB4F,kBAsBtED;GAEAE,qBAAAA,IAtB4B7H,oBAAoBwG,gBAsBhDqB;GACAC,oBAAAA,IAtB2B9G,mBAAmBwF,gBAsB9CsB;GACAC,mBAAAA,IArB0B1H,yBAAyB,CACnDoH,6CACA,IAAIhG,kBAAkB+E,gBAAAA,CAAAA,CAmBtBuB;GAEAC,2BAAAA,IAlBkCzH,0BAA0BiG,gBAkB5DwB;GAEAjB;EACJ,CAAA;CACJ;CAEAxB,uBAAuB9C,WAAuB;EAG1C,OAAO,IAAI/C,iBAAiB,EAAEiH,SAFflE,UAAUsD,QAAQ9D,kBAEM6D,CAAAA,CAAOc,UAAU,CAAA;CAC5D;CAEApB,yBAAyB/C,WAAuB;EAC5C,MAAMqD,SAASrD,UAAUsD,QAAQ9D,kBAAAA;EAEjC,OAAO,IAAI1C,mBAAmB;GAC1BmH,SAAS;IACLC,SAASb,OAAOc;IAChBC,UAAU,KAAKC,gBAAgBhB,MAAAA;GACnC;GACAmC,SAAS,KAAKC,0BAA0BzF,SAAAA;EAC5C,CAAA;CACJ;CAEAgD,+BAA+BhD,WAAuB;EAClD,MAAMqD,SAASrD,UAAUsD,QAAQ9D,kBAAAA;EAEjC,OAAO,IAAItC,yBAAyB;GAChC+G,SAAS;IACLC,SAASb,OAAOc;IAChBC,UAAU,KAAKC,gBAAgBhB,MAAAA;GACnC;GACAmC,SAAS,KAAKE,8BAA8B1F,SAAAA;EAChD,CAAA;CACJ;CAEAiD,8BAA8BjD,WAAuB;EACjD,MAAMqD,SAASrD,UAAUsD,QAAQ9D,kBAAAA;EAEjC,OAAO,IAAIrC,wBAAwB;GAC/B8G,SAAS;IACLC,SAASb,OAAOc;IAChBC,UAAU,KAAKC,gBAAgBhB,MAAAA;GACnC;GACAmC,SAAS,KAAKE,8BAA8B1F,SAAAA;EAChD,CAAA;CACJ;CAEA0F,8BAA8B1F,WAAuB;EACjD,MAAMqD,SAASrD,UAAUsD,QAAQ9D,kBAAAA;EACjC,MAAMmG,aAAa3F,UAAUsD,QAAQhJ,qBAAqBsL,UAAU;EACpE,MAAMC,kBAAkB7F,UAAUsD,QAA2BjK,WAAAA;EAC7D,MAAMyM,aAAa,IAAIvK,sBAAsB;GACzCuK,YAAY,IAAI9L,eAAe2L,UAAAA;GAC/BE;EACJ,CAAA;EAIA,OAAO,IAAI9H,wBAAwB;GAC/BgI,YAJe/F,UAAUsD,QAAQ3D,gBAIjCoG;GACAC,sBAJyBhG,UAAUsD,QAAQ1D,gCAI3CoG;GACAF;GACAD,iBAAiB,IAAIhL,uBAAuBgL,eAAAA;GAC5C5B,SAAS;IACLgC,yBAAyB5C,OAAO4C;IAChCC,0BAA0B7C,OAAO6C;IACjC/B,WAAWd,OAAOc;GACtB;EACJ,CAAA;CACJ;CAEAjB,yBAAyBlD,WAAuB;EAC5C,MAAMqD,SAASrD,UAAUsD,QAAQ9D,kBAAAA;EAEjC,OAAO,IAAIpC,mBAAmB;GAC1B6G,SAAS;IACLC,SAASb,OAAOc;IAChBC,UAAU,KAAKC,gBAAgBhB,MAAAA;GACnC;GACAmC,SAAS,KAAKC,0BAA0BzF,SAAAA;EAC5C,CAAA;CACJ;CAEAmD,uBAAuBnD,WAAuB;EAC1C,MAAMqD,SAASrD,UAAUsD,QAAQ9D,kBAAAA;EAEjC,OAAO,IAAInC,iBAAiB,EAAE4G,SAAS,EAAEG,UAAU,KAAKC,gBAAgBhB,MAAAA,EAAQ,EAAE,CAAA;CACtF;CAEAgB,gBAAgBhB,QAAyC;EACrD,OAAO;GACH8C,cAAc9C,OAAO+C;GACrBC,kBAAkBhD,OAAO4C;GACzBK,mBAAmBjD,OAAO6C;EAC9B;CACJ;CAEAT,0BAA0BzF,WAAuB;EAC7C,MAAMqD,SAASrD,UAAUsD,QAAQ9D,kBAAAA;EACjC,MAAMmG,aAAa3F,UAAUsD,QAAQhJ,qBAAqBsL,UAAU;EACpE,MAAMC,kBAAkB7F,UAAUsD,QAA2BjK,WAAAA;EAC7D,MAAMyM,aAAa,IAAIvK,sBAAsB;GACzCuK,YAAY,IAAI9L,eAAe2L,UAAAA;GAC/BE;EACJ,CAAA;EAIA,OAAO,IAAIvH,oBAAoB;GAC3ByH,YAJe/F,UAAUsD,QAAQ3D,gBAIjCoG;GACAC,sBAJyBhG,UAAUsD,QAAQ1D,gCAI3CoG;GACAF;GACAD,iBAAiB,IAAIhL,uBAAuBgL,eAAAA;GAC5C5B,SAAS;IACLmC,qBAAqB/C,OAAO+C;IAC5BF,0BAA0B7C,OAAO6C;IACjC/B,WAAWd,OAAOc;GACtB;EACJ,CAAA;CACJ;CAEAf,uBAAuBpD,WAAuB;EAC1C,MAAMqD,SAASrD,UAAUsD,QAAQ9D,kBAAAA;EACjC,MAAMmG,aAAa3F,UAAUsD,QAAQhJ,qBAAqBsL,UAAU;EAEpE,MAAMW,iBAAiBvG,UAAUsD,QAAQ/D,qBAAqBiH,sBAAsB;EAEpF,MAAM7C,aAAa3D,UAAUsD,QAAQhE,qBAAqBsE,uBAAuB;EAEjF,MAAMC,sBAAsB7D,UAAUsD,QAAQhE,qBAAqBwE,gCAAgC;EAEnG,MAAM2C,eAAezG,UAAUsD,QAAQhE,qBAAqBoH,yBAAyB;EAErF,MAAMb,kBAAkB7F,UAAUsD,QAA2BjK,WAAAA;EAE7D,MAAMyM,aAAa,IAAIvL,kCAAkC;GACrDuL,YAAY,IAAI/M,2BAA2B4M,UAAAA;GAC3CE;EACJ,CAAA;EAEA,OAAO,IAAIhK,2BAA2B;GAClCoI,SAAS,EAAEC,SAASb,OAAOc,UAAU;GAErC2B;GACAD,iBAAiB,IAAIhL,uBAAuBgL,eAAAA;GAE5CU;GAEA5C;GACAE;GACA4C;EACJ,CAAA;CACJ;CAEA/F,uBAAuBV,WAAuB;EAC1C,MAAM6F,kBAAkB7F,UAAUsD,QAA2BjK,WAAAA;EAC7D,MAAMyM,aAAa,IAAI3L,wBAAwB;GAC3C2L,YAAY9F,UAAUsD,QAA4B3K,YAAAA;GAClDkN;EACJ,CAAA;EAMA,OAAO,IAAIpK,iBAAiB;GACxB+J,SAAAA,IALgB7H,cAAc;IAC9BmI;IACAD,iBAAiBc,IAHc9L,uBAAuBgL,eAGrCc;GACrB,CAEInB;GACAM;EACJ,CAAA;CACJ;CAEAlF,sBAAsBZ,WAAuB;EACzC,MAAM2F,aAAa3F,UAAUsD,QAAQhJ,qBAAqBsL,UAAU;EACpE,MAAMC,kBAAkB7F,UAAUsD,QAA2BjK,WAAAA;EAC7D,MAAMyM,aAAa,IAAI/K,uBAAuB;GAC1C+K,YAAY9F,UAAUsD,QAA2BhK,WAAAA;GACjDuM;EACJ,CAAA;EACA,MAAMc,yBAAyB,IAAI9L,uBAAuBgL,eAAAA;EAK1D,OAAO,IAAI1J,gBAAgB;GACvBqJ,SAAAA,IALgB9G,aAAa;IAC7BoH;IACAD,iBAAiBc;GACrB,CAEInB;GACAM;GACAD,iBAAiBc;GACjBhB;EACJ,CAAA;CACJ;CAEA,MAAMrF,2BAA2BN,WAAuB;EACpD,MAAM2F,aAAa3F,UAAUsD,QAAQhJ,qBAAqBsL,UAAU;EACpE,MAAMC,kBAAkB7F,UAAUsD,QAA2BjK,WAAAA;EAC7D,MAAMyM,aAAa,IAAInL,4BAA4B;GAC/CmL,YAAY9F,UAAUsD,QAAgCpK,gBAAAA;GACtD2M;EACJ,CAAA;EAEA,MAAMc,yBAAyB,IAAI9L,uBAAuBgL,eAAAA;EAiB1D,MAAML,UAAU,IAAItH,kBAAkB;GAClC4H;GACAD,iBAAiBc;GACjBC,gBAAAA,IAnBuBzL,sBAAsB;IAC7C2K,YAAY9F,UAAUsD,QAA0B5J,UAAAA;IAChDmM;GACJ,CAgBIe;GACAC,0BAAAA,IAhBiC3L,gCACjC8E,UAAUsD,QAAoC3J,oBAAAA,CAe9CkN;GACAC,kBAAAA,IAdyBlM,wBAAwB;IACjDkL,YAAY,IAAI1M,iBAAiBuM,UAAAA;IACjCE;GACJ,CAWIiB;GACAC,4BAAAA,IAVmCrM,kCACnCsF,UAAUsD,QAAsCnK,sBAAAA,CAShD4N;EACJ,CAAA;EAEA,MAAM7B,6BAA6BlF,UAAUsD,QAAQ/D,qBAAqB4F,kBAAkB;EAU5F,OAAO,IAAIpJ,qBAAqB;GAC5ByJ;GACAyB,gBAAAA,IATuBjJ,yBAAyB;IAChD8H;IACAD,iBAAiBc;IACjBK,oBAAAA,IAL2BvM,2BAA2BkL,UAKtDqB;IACA9B;GACJ,CAII+B;EACJ,CAAA;CACJ;CAEA7G,qBAAqBJ,WAAuB;EACxC,MAAM6F,kBAAkB,IAAIhL,uBACxBmF,UAAUsD,QAA2BjK,WAAAA,CAAAA;EAUzC,OAAO,IAAIkD,eAAe,EAAEiJ,SAAAA,IAJR3G,YAAY;GAC5BiH,YAAAA,IALmB3K,sBAAsB;IACzC2K,YAAY9F,UAAUsD,QAA0B5J,UAAAA;IAChDmM,iBAAiB7F,UAAUsD,QAA2BjK,WAAAA;GAC1D,CAEIyM;GACAD;EACJ,CAC4BL,EAAQ,CAAA;CACxC;CAEA1E,iCAAiCd,WAAuB;EASpD,OAAO,IAAItE,2BAA2B,EAAE8J,SAAAA,IAJpBhI,wBAAwB;GACxCsI,YAAAA,IALmB5L,kCACnB8F,UAAUsD,QAAsC1K,sBAAAA,CAIhDkN;GACAZ,4BAH+BlF,UAAUsD,QAAQ/D,qBAAqB4F,kBAGtED;EACJ,CACwCM,EAAQ,CAAA;CACpD;CAEAxE,2BAA2BhB,WAAuB;EAM9C,OAAO,IAAIrE,qBAAqB,EAAE6J,SAAAA,IADd/H,kBAAkB;GAAEqI,YAAAA,IAJjB1L,4BACnB4F,UAAUsD,QAAgCzK,gBAAAA,CAGNiN;GAAYZ,4BADjBlF,UAAUsD,QAAQ/D,qBAAqB4F,kBACtBD;EAA2B,CAC7CM,EAAQ,CAAA;CAC9C;CAEAtE,4BAA4BlB,WAAuB;EAK/C,OAAO,IAAIpE,sBAAsB,EAAE4J,SAAAA,IADf9H,mBAAmB,EAAEoI,YAAAA,IAHlBzL,6BACnB2F,UAAUsD,QAAiCxK,iBAAAA,CAENgN,EAAW,CACjBN,EAAQ,CAAA;CAC/C;CAEApE,gCAAgCpB,WAAuB;EASnD,OAAO,IAAI5D,0BAA0B,EAAEoJ,SAAAA,IAJnBhH,uBAAuB;GACvCsH,YAAAA,IALmBhL,iCACnBkF,UAAUsD,QAAqC/J,qBAAAA,CAI/CuM;GACAZ,4BAH+BlF,UAAUsD,QAAQ/D,qBAAqB4F,kBAGtED;EACJ,CACuCM,EAAQ,CAAA;CACnD;CAEAlE,0BAA0BtB,WAAuB;EAM7C,OAAO,IAAI3D,oBAAoB,EAAEmJ,SAAAA,IADb/G,iBAAiB;GAAEqH,YAAAA,IAJhB9K,2BACnBgF,UAAUsD,QAA+B9J,eAAAA,CAGNsM;GAAYZ,4BADhBlF,UAAUsD,QAAQ/D,qBAAqB4F,kBACvBD;EAA2B,CAC7CM,EAAQ,CAAA;CAC7C;CAEAhE,8BAA8BxB,WAAuB;EACjD,MAAM2F,aAAa3F,UAAUsD,QAAQhJ,qBAAqBsL,UAAU;EAQpE,OAAO,IAAItJ,wBAAwB,EAAEkJ,SAAAA,IADjB7G,qBAAqB;GAAEmH,YAAAA,IANpB7K,+BACnB+E,UAAUsD,QAAmC7J,mBAAAA,CAKNqM;GAAYoB,eAAAA,IAH7BC,IACtBxB,WAAWyB,YAAY1N,UAAAA,CAAAA,CAAY2N,QAAQC,KAAKC,MAAMA,EAAEC,YAAY,CAEjBN;EAAc,CAChC1B,EAAQ,CAAA;CACjD;CAEA9D,+BAA+B1B,WAAuB;EASlD,OAAO,IAAIxD,yBAAyB,EAAEgJ,SAAAA,IAJlB5G,sBAAsB;GACtCkH,YAAAA,IALmB5K,gCACnB8E,UAAUsD,QAAoC3J,oBAAAA,CAI9CmM;GACAZ,4BAH+BlF,UAAUsD,QAAQ/D,qBAAqB4F,kBAGtED;EACJ,CACsCM,EAAQ,CAAA;CAClD;CAEAhF,iCAAiCR,WAAuB;EAKpD,OAAO,IAAIhE,2BAA2B,EAAEwJ,SAAAA,IADpBvH,wBAAwB,EAAE6H,YAAAA,IAHvBpL,kCACnBsF,UAAUsD,QAAsCnK,sBAAAA,CAEN2M,EAAW,CACjBN,EAAQ,CAAA;CACpD;CAEA5D,sBAAsB5B,WAAuB;EACzC,MAAM6F,kBAAkB,IAAIhL,uBACxBmF,UAAUsD,QAA2BjK,WAAAA,CAAAA;EAUzC,OAAO,IAAIoD,gBAAgB,EAAE+I,SAAAA,IAJT1G,aAAa;GAC7BgH,YAAAA,IALmB1K,uBAAuB;IAC1C0K,YAAY9F,UAAUsD,QAA2B1J,WAAAA;IACjDiM,iBAAiB7F,UAAUsD,QAA2BjK,WAAAA;GAC1D,CAEIyM;GACAD;EACJ,CAC6BL,EAAQ,CAAA;CACzC;CAEA1D,qBAAqB9B,WAAuB;EACxC,MAAM2F,aAAa3F,UAAUsD,QAAQhJ,qBAAqBsL,UAAU;EACpE,MAAMC,kBAAkB7F,UAAUsD,QAA2BjK,WAAAA;EAU7D,OAAO,IAAIsD,eAAe,EAAE6I,SAAAA,IAJRrG,YAAY;GAC5B2G,YAAAA,IANmBvK,sBAAsB;IACzCuK,YAAY,IAAI9L,eAAe2L,UAAAA;IAC/BE;GACJ,CAGIC;GACAD,iBAAiBc,IAHc9L,uBAAuBgL,eAGrCc;EACrB,CAC4BnB,EAAQ,CAAA;CACxC;CAEAxD,8BAA8BhC,WAAuB;EACjD,MAAM2F,aAAa3F,UAAUsD,QAAQhJ,qBAAqBsL,UAAU;EAQpE,OAAO,IAAIlJ,wBAAwB,EAAE8I,SAAAA,IADjBzG,qBAAqB;GAAE+G,YAAAA,IANpBzK,+BACnB2E,UAAUsD,QAAmCzJ,mBAAAA,CAKNiM;GAAYoB,eAAAA,IAH7BC,IACtBxB,WAAWyB,YAAYtN,UAAAA,CAAAA,CAAYuN,QAAQC,KAAKC,MAAMA,EAAEC,YAAY,CAEjBN;EAAc,CAChC1B,EAAQ,CAAA;CACjD;CAEAtD,+BAA+BlC,WAAuB;EASlD,OAAO,IAAIpD,yBAAyB,EAAE4I,SAAAA,IAJlBvG,sBAAsB;GACtC6G,YAAAA,IALmBxK,gCACnB0E,UAAUsD,QAAoCvJ,oBAAAA,CAI9C+L;GACAZ,4BAH+BlF,UAAUsD,QAAQ/D,qBAAqB4F,kBAGtED;EACJ,CACsCM,EAAQ,CAAA;CAClD;CAEApD,yBAAyBpC,WAAuB;EAM5C,OAAO,IAAInD,mBAAmB,EAAE2I,SAAAA,IADZtG,gBAAgB;GAAE4G,YAAAA,IAJftK,0BACnBwE,UAAUsD,QAA8BrJ,cAAAA,CAGN6L;GAAYZ,4BADflF,UAAUsD,QAAQ/D,qBAAqB4F,kBACxBD;EAA2B,CAC7CM,EAAQ,CAAA;CAC5C;CAEAlD,uBAAuBtC,WAAuB;EAC1C,MAAM2F,aAAa3F,UAAUsD,QAAQhJ,qBAAqBsL,UAAU;EACpE,MAAMC,kBAAkB7F,UAAUsD,QAA2BjK,WAAAA;EAC7D,MAAMyM,aAAa,IAAIlL,wBAAwB;GAC3CkL,YAAY,IAAI1M,iBAAiBuM,UAAAA;GACjCE;EACJ,CAAA;EACA,MAAMc,yBAAyB,IAAI9L,uBAAuBgL,eAAAA;EAY1D,OAAO,IAAI5J,iBAAiB;GACxBuJ,SAAAA,IAZgBpH,cAAc;IAC9B0H;IACAD,iBAAiBc;GACrB,CASInB;GACAyB,gBAAAA,IARuB9I,qBAAqB;IAC5C2H;IACAD,iBAAiBc;IACjBzB,4BAJ+BlF,UAAUsD,QAAQ/D,qBAAqB4F,kBAItED;GACJ,CAII+B;EACJ,CAAA;CACJ;CAEAzE,qCAAqCxC,WAAuB;EAMxD,OAAO,IAAIlE,sCAAsC,EAAE0J,SAAAA,IAD/B3H,mCAAmC;GAAEiI,YAAAA,IAJlCtL,6CACnBwF,UAAUsD,QAAyBtK,iCAAAA,CAGkB8M;GAAYZ,4BADlClF,UAAUsD,QAAQ/D,qBAAqB4F,kBACLD;EAA2B,CAC7CM,EAAQ,CAAA;CAC/D;CAEA3C,oBAAoB7C,WAAuB;EAGvC,OAAO,IAAIhD,cAAc,EAAE8I,YAFR9F,UAAUsD,QAAQhJ,qBAAqBsL,UACvCD,CAAAA,CAAW8B,cAAcxO,SACjB6M,EAAW,CAAA;CAC1C;CAEA5F,sBAAsBF,WAAuB;EACzC,MAAMqD,SAASrD,UAAUsD,QAAQ9D,kBAAAA;EACjC,MAAMmG,aAAa3F,UAAUsD,QAAQhJ,qBAAqBsL,UAAU;EACpE,MAAMC,kBAAkB7F,UAAUsD,QAA2BjK,WAAAA;EAC7D,MAAMyM,aAAa,IAAIjL,uBAAuBgL,eAAAA;EAE9C,MAAM6B,mBAAmB,IAAIvN,wBAAwB;GACjD2L,YAAY9F,UAAUsD,QAA4B3K,YAAAA;GAClDkN;EACJ,CAAA;EACA,MAAM8B,SAAS3H,UAAUsD,QAAQ5D,kBAAAA;EAOjC,MAAM8F,UAAU,IAAInH,aAAa;GAC7ByH;GACA8B,sBAAAA,IAR6BxI,qBAAqB;IAClDsI;IACAG,YAAYpI,cAAc4D,MAAAA;IAC1BsE;GACJ,CAIIC;GACAD;EACJ,CAAA;EACA,MAAMG,gBAAgBnC,WAAW8B,cAAcxO,SAAAA;EAE/C,OAAO,IAAIiD,gBAAgB;GACvB+H,SAAS,EAAEC,SAASb,OAAOc,UAAU;GACrCqB;GACAsC;EACJ,CAAA;CACJ;AACJ"}

package/dist/app/modules/http/modules/index.d.ts

@@ -0,0 +1,3 @@
+export * from './controller.ts';
+export * from './middleware.ts';
+//# sourceMappingURL=index.d.ts.map

package/dist/app/modules/http/modules/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../src/app/modules/http/modules/index.ts"],"names":[],"mappings":"AAOA,cAAc,iBAAiB,CAAC;AAChC,cAAc,iBAAiB,CAAC"}

package/dist/app/modules/http/modules/index.mjs

@@ -0,0 +1,6 @@
+import "node:path";
+import "node:url";
+import.meta.url;
+import { HTTPControllerModule } from "./controller.mjs";
+import { HTTPMiddlewareModule } from "./middleware.mjs";
+export { HTTPControllerModule, HTTPMiddlewareModule };

package/dist/app/modules/http/modules/middleware.d.ts

@@ -0,0 +1,19 @@
+import type { App } from 'routup';
+import type { IContainer } from 'eldin';
+export declare class HTTPMiddlewareModule {
+    mountBefore(router: App, container: IContainer): Promise<void>;
+    mountAfter(router: App, container: IContainer): Promise<void>;
+    mountCors(router: App, container: IContainer): Promise<void>;
+    mountLogger(router: App, container: IContainer): Promise<void>;
+    mountAssets(router: App): Promise<void>;
+    mountUIHttpClient(router: App, container: IContainer): Promise<void>;
+    mountBasic(router: App): Promise<void>;
+    mountPrometheus(router: App, container: IContainer): Promise<void>;
+    mountRateLimit(router: App, container: IContainer): Promise<void>;
+    mountSwagger(router: App, container: IContainer): Promise<void>;
+    mountRealmResolver(router: App, container: IContainer): Promise<void>;
+    mountAuthorization(router: App, container: IContainer): Promise<void>;
+    private transformBoolToEmptyObject;
+    private isEnabled;
+}
+//# sourceMappingURL=middleware.d.ts.map

package/dist/app/modules/http/modules/middleware.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"middleware.d.ts","sourceRoot":"","sources":["../../../../../src/app/modules/http/modules/middleware.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,GAAG,EAAE,MAAM,QAAQ,CAAC;AAElC,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,OAAO,CAAC;AA8BxC,qBAAa,oBAAoB;IACvB,WAAW,CAAC,MAAM,EAAE,GAAG,EAAE,SAAS,EAAE,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC;IAkB9D,UAAU,CAAC,MAAM,EAAE,GAAG,EAAE,SAAS,EAAE,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC;IAK7D,SAAS,CAAC,MAAM,EAAE,GAAG,EAAE,SAAS,EAAE,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC;IAY5D,WAAW,CAAC,MAAM,EAAE,GAAG,EAAE,SAAS,EAAE,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC;IAU9D,WAAW,CAAC,MAAM,EAAE,GAAG,GAAG,OAAO,CAAC,IAAI,CAAC;IAIvC,iBAAiB,CAAC,MAAM,EAAE,GAAG,EAAE,SAAS,EAAE,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC;IAQpE,UAAU,CAAC,MAAM,EAAE,GAAG,GAAG,OAAO,CAAC,IAAI,CAAC;IAItC,eAAe,CAAC,MAAM,EAAE,GAAG,EAAE,SAAS,EAAE,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC;IAUlE,cAAc,CAAC,MAAM,EAAE,GAAG,EAAE,SAAS,EAAE,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC;IAUjE,YAAY,CAAC,MAAM,EAAE,GAAG,EAAE,SAAS,EAAE,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC;IAc/D,kBAAkB,CAAC,MAAM,EAAE,GAAG,EAAE,SAAS,EAAE,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC;IAYrE,kBAAkB,CAAC,MAAM,EAAE,GAAG,EAAE,SAAS,EAAE,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC;IA6B3E,OAAO,CAAC,0BAA0B;IAUlC,OAAO,CAAC,SAAS;CAGpB"}

package/dist/app/modules/http/modules/middleware.mjs

@@ -0,0 +1,129 @@
+import "node:path";
+import "node:url";
+import.meta.url;
+import { AuthenticationInjectionKey } from "../../authentication/constants.mjs";
+import { RealmEntity } from "../../../../adapters/database/domains/realm/entity.mjs";
+import "../../../../adapters/database/domains/index.mjs";
+import { ConfigInjectionKey } from "../../config/constants.mjs";
+import "../../config/index.mjs";
+import "../../authentication/index.mjs";
+import { DatabaseInjectionKey } from "../../database/constants.mjs";
+import { LoggerInjectionKey } from "../../logger/constants.mjs";
+import "../../logger/index.mjs";
+import { RealmRepositoryAdapter } from "../../database/repositories/realm/repository.mjs";
+import { PermissionDatabaseProvider } from "../../database/repositories/permission-provider/module.mjs";
+import "../../database/repositories/index.mjs";
+import "../../database/index.mjs";
+import { HTTPInjectionKey } from "../constants.mjs";
+import { createAuthorizationMiddleware } from "../../../../adapters/http/middleware/built-in/authorization/factory.mjs";
+import { createRealmResolverMiddleware } from "../../../../adapters/http/middleware/built-in/realm-resolver/factory.mjs";
+import { DIST_PATH } from "../../../../path.mjs";
+import { registerAssetsMiddleware } from "../../../../adapters/http/middleware/built-in/assets.mjs";
+import { registerBasicMiddleware } from "../../../../adapters/http/middleware/built-in/basic.mjs";
+import { registerCorsMiddleware } from "../../../../adapters/http/middleware/built-in/cors.mjs";
+import { registerErrorMiddleware } from "../../../../adapters/http/middleware/built-in/error.mjs";
+import { createLoggerMiddleware } from "../../../../adapters/http/middleware/built-in/logger.mjs";
+import { registerPrometheusMiddleware } from "../../../../adapters/http/middleware/built-in/prometheus.mjs";
+import { registerRateLimitMiddleware } from "../../../../adapters/http/middleware/built-in/rate-limit.mjs";
+import { createSwaggerMiddleware } from "../../../../adapters/http/middleware/built-in/swagger.mjs";
+import { registerUIHttpClientMiddleware } from "../../../../adapters/http/middleware/built-in/ui-http-client.mjs";
+import "../../../../adapters/http/index.mjs";
+import { OAuth2InjectionToken } from "../../oauth2/constants.mjs";
+import { IdentityInjectionKey } from "../../identity/constants.mjs";
+import "../../identity/index.mjs";
+import "../../oauth2/index.mjs";
+import path from "node:path";
+//#region src/app/modules/http/modules/middleware.ts
+var HTTPMiddlewareModule = class {
+	async mountBefore(router, container) {
+		await this.mountPrometheus(router, container);
+		await this.mountLogger(router, container);
+		await this.mountCors(router, container);
+		await this.mountAssets(router);
+		await this.mountUIHttpClient(router, container);
+		await this.mountBasic(router);
+		await this.mountRateLimit(router, container);
+		await this.mountSwagger(router, container);
+		await this.mountAuthorization(router, container);
+		await this.mountRealmResolver(router, container);
+	}
+	async mountAfter(router, container) {
+		registerErrorMiddleware(router, { logger: container.resolve(LoggerInjectionKey) });
+	}
+	async mountCors(router, container) {
+		const config = container.resolve(ConfigInjectionKey);
+		if (!this.isEnabled(config.middlewareCors)) return;
+		registerCorsMiddleware(router, this.transformBoolToEmptyObject(config.middlewareCors) ?? {});
+	}
+	async mountLogger(router, container) {
+		const middleware = createLoggerMiddleware({
+			env: container.resolve(ConfigInjectionKey).env,
+			logger: container.resolve(LoggerInjectionKey)
+		});
+		router.use(middleware);
+	}
+	async mountAssets(router) {
+		await registerAssetsMiddleware(router);
+	}
+	async mountUIHttpClient(router, container) {
+		if (!container.has(HTTPInjectionKey.UIHttpClient)) return;
+		registerUIHttpClientMiddleware(router, () => container.resolve(HTTPInjectionKey.UIHttpClient));
+	}
+	async mountBasic(router) {
+		registerBasicMiddleware(router);
+	}
+	async mountPrometheus(router, container) {
+		const config = container.resolve(ConfigInjectionKey);
+		if (!this.isEnabled(config.middlewarePrometheus)) return;
+		registerPrometheusMiddleware(router, this.transformBoolToEmptyObject(config.middlewarePrometheus));
+	}
+	async mountRateLimit(router, container) {
+		const config = container.resolve(ConfigInjectionKey);
+		if (!this.isEnabled(config.middlewareRateLimit)) return;
+		registerRateLimitMiddleware(router, this.transformBoolToEmptyObject(config.middlewareRateLimit));
+	}
+	async mountSwagger(router, container) {
+		const config = container.resolve(ConfigInjectionKey);
+		if (!this.isEnabled(config.middlewareSwagger)) return;
+		const middleware = createSwaggerMiddleware({
+			documentPath: path.join(DIST_PATH, "swagger.json"),
+			baseURL: config.publicUrl
+		});
+		router.use("/docs", middleware);
+	}
+	async mountRealmResolver(router, container) {
+		const middleware = createRealmResolverMiddleware({ realmRepository: new RealmRepositoryAdapter(container.resolve(RealmEntity)) });
+		router.use("/realms/:realmId/:nested", middleware);
+	}
+	async mountAuthorization(router, container) {
+		const config = container.resolve(ConfigInjectionKey);
+		const dataSource = container.resolve(DatabaseInjectionKey.DataSource);
+		const identityResolver = container.resolve(IdentityInjectionKey.Resolver);
+		const sessionManager = container.resolve(AuthenticationInjectionKey.SessionManager);
+		const oauth2TokenVerifier = container.resolve(OAuth2InjectionToken.TokenVerifier);
+		const middleware = createAuthorizationMiddleware({
+			identityResolver,
+			identityPermissionProvider: container.resolve(IdentityInjectionKey.PermissionProvider),
+			permissionProvider: new PermissionDatabaseProvider(dataSource),
+			oauth2TokenVerifier,
+			sessionManager,
+			options: {
+				clientAuthBasic: config.clientAuthBasic,
+				robotAuthBasic: config.robotAuthBasic,
+				userAuthBasic: config.userAuthBasic
+			}
+		});
+		router.use(middleware);
+	}
+	transformBoolToEmptyObject(input) {
+		if (typeof input === "boolean") return {};
+		return input || {};
+	}
+	isEnabled(input) {
+		return typeof input !== "boolean" || input === true;
+	}
+};
+//#endregion
+export { HTTPMiddlewareModule };
+
+//# sourceMappingURL=middleware.mjs.map

package/dist/app/modules/http/modules/middleware.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"middleware.mjs","names":["path","createAuthorizationMiddleware","createLoggerMiddleware","createRealmResolverMiddleware","createSwaggerMiddleware","registerAssetsMiddleware","registerBasicMiddleware","registerCorsMiddleware","registerErrorMiddleware","registerPrometheusMiddleware","registerRateLimitMiddleware","registerUIHttpClientMiddleware","HTTPInjectionKey","DIST_PATH","AuthenticationInjectionKey","ConfigInjectionKey","LoggerInjectionKey","IdentityInjectionKey","OAuth2InjectionToken","RealmEntity","RealmRepositoryAdapter","DatabaseInjectionKey","PermissionDatabaseProvider","HTTPMiddlewareModule","mountBefore","router","container","mountPrometheus","mountLogger","mountCors","mountAssets","mountUIHttpClient","mountBasic","mountRateLimit","mountSwagger","mountAuthorization","mountRealmResolver","mountAfter","logger","resolve","config","isEnabled","middlewareCors","options","transformBoolToEmptyObject","middleware","env","use","has","UIHttpClient","middlewarePrometheus","middlewareRateLimit","middlewareSwagger","documentPath","join","baseURL","publicUrl","realmRepository","dataSource","DataSource","identityResolver","Resolver","sessionManager","SessionManager","oauth2TokenVerifier","TokenVerifier","identityPermissionProvider","PermissionProvider","permissionProvider","clientAuthBasic","robotAuthBasic","userAuthBasic","input"],"sources":["../../../../../src/app/modules/http/modules/middleware.ts"],"sourcesContent":["/*\n * Copyright (c) 2025.\n *  Author Peter Placzek (tada5hi)\n *  For the full copyright and license information,\n *  view the LICENSE file that was distributed with this source code.\n */\n\nimport type { App } from 'routup';\nimport path from 'node:path';\nimport type { IContainer } from 'eldin';\nimport type { Repository } from 'typeorm';\nimport type { Realm } from '@authup/core-kit';\nimport {\n    createAuthorizationMiddleware,\n    createLoggerMiddleware,\n    createRealmResolverMiddleware,\n    createSwaggerMiddleware,\n    registerAssetsMiddleware,\n    registerBasicMiddleware,\n    registerCorsMiddleware,\n    registerErrorMiddleware,\n    registerPrometheusMiddleware,\n    registerRateLimitMiddleware,\n    registerUIHttpClientMiddleware,\n} from '../../../../adapters/http/index.ts';\nimport { HTTPInjectionKey } from '../constants.ts';\nimport { DIST_PATH } from '../../../../path.ts';\nimport { AuthenticationInjectionKey } from '../../authentication/index.ts';\nimport { ConfigInjectionKey } from '../../config/index.ts';\nimport { LoggerInjectionKey } from '../../logger/index.ts';\nimport { IdentityInjectionKey } from '../../identity/index.ts';\nimport { OAuth2InjectionToken } from '../../oauth2/index.ts';\nimport { RealmEntity } from '../../../../adapters/database/domains/index.ts';\nimport { RealmRepositoryAdapter } from '../../database/repositories/index.ts';\nimport {\n    DatabaseInjectionKey,\n    PermissionDatabaseProvider,\n} from '../../database/index.ts';\n\nexport class HTTPMiddlewareModule {\n    async mountBefore(router: App, container: IContainer): Promise<void> {\n        // @routup/prometheus must be installed before any other plugin or\n        // route so that its onion middleware can observe the full request\n        // lifecycle (the v3 README is explicit on this).\n        await this.mountPrometheus(router, container);\n        await this.mountLogger(router, container);\n        await this.mountCors(router, container);\n        await this.mountAssets(router);\n        await this.mountUIHttpClient(router, container);\n        await this.mountBasic(router);\n        await this.mountRateLimit(router, container);\n\n        await this.mountSwagger(router, container);\n        await this.mountAuthorization(router, container);\n        await this.mountRealmResolver(router, container);\n    }\n\n\n    async mountAfter(router: App, container: IContainer): Promise<void> {\n        registerErrorMiddleware(router, { logger: container.resolve(LoggerInjectionKey) });\n    }\n\n    // ----------------------------------------------------\n    async mountCors(router: App, container: IContainer): Promise<void> {\n        const config = container.resolve(ConfigInjectionKey);\n\n        if (!this.isEnabled(config.middlewareCors)) {\n            return;\n        }\n\n        const options = this.transformBoolToEmptyObject(config.middlewareCors) ?? {};\n\n        registerCorsMiddleware(router, options);\n    }\n\n    async mountLogger(router: App, container: IContainer): Promise<void> {\n        const config = container.resolve(ConfigInjectionKey);\n        const middleware = createLoggerMiddleware({\n            env: config.env,\n            logger: container.resolve(LoggerInjectionKey),\n        });\n\n        router.use(middleware);\n    }\n\n    async mountAssets(router: App): Promise<void> {\n        await registerAssetsMiddleware(router);\n    }\n\n    async mountUIHttpClient(router: App, container: IContainer): Promise<void> {\n        if (!container.has(HTTPInjectionKey.UIHttpClient)) {\n            return;\n        }\n\n        registerUIHttpClientMiddleware(router, () => container.resolve(HTTPInjectionKey.UIHttpClient));\n    }\n\n    async mountBasic(router: App): Promise<void> {\n        registerBasicMiddleware(router);\n    }\n\n    async mountPrometheus(router: App, container: IContainer): Promise<void> {\n        const config = container.resolve(ConfigInjectionKey);\n\n        if (!this.isEnabled(config.middlewarePrometheus)) {\n            return;\n        }\n\n        registerPrometheusMiddleware(router, this.transformBoolToEmptyObject(config.middlewarePrometheus));\n    }\n\n    async mountRateLimit(router: App, container: IContainer): Promise<void> {\n        const config = container.resolve(ConfigInjectionKey);\n\n        if (!this.isEnabled(config.middlewareRateLimit)) {\n            return;\n        }\n\n        registerRateLimitMiddleware(router, this.transformBoolToEmptyObject(config.middlewareRateLimit));\n    }\n\n    async mountSwagger(router: App, container: IContainer): Promise<void> {\n        const config = container.resolve(ConfigInjectionKey);\n        if (!this.isEnabled(config.middlewareSwagger)) {\n            return;\n        }\n\n        const middleware = createSwaggerMiddleware({\n            documentPath: path.join(DIST_PATH, 'swagger.json'),\n            baseURL: config.publicUrl,\n        });\n\n        router.use('/docs', middleware);\n    }\n\n    async mountRealmResolver(router: App, container: IContainer): Promise<void> {\n        const realmRepository = container.resolve<Repository<Realm>>(RealmEntity);\n        const middleware = createRealmResolverMiddleware({ realmRepository: new RealmRepositoryAdapter(realmRepository) });\n\n        // Mounted at /realms/:realmId/:nested so the middleware only fires on\n        // nested-resource URLs (e.g. /realms/master/users/...). Bare\n        // /realms/:id routes belong to RealmController (CRUD, openid-config,\n        // jwks) and would otherwise 404 on PUT upserts where the realm\n        // doesn't exist yet.\n        router.use('/realms/:realmId/:nested', middleware);\n    }\n\n    async mountAuthorization(router: App, container: IContainer): Promise<void> {\n        const config = container.resolve(ConfigInjectionKey);\n        const dataSource = container.resolve(DatabaseInjectionKey.DataSource);\n\n        const identityResolver = container.resolve(IdentityInjectionKey.Resolver);\n        const sessionManager = container.resolve(AuthenticationInjectionKey.SessionManager);\n        const oauth2TokenVerifier = container.resolve(OAuth2InjectionToken.TokenVerifier);\n        const identityPermissionProvider = container.resolve(IdentityInjectionKey.PermissionProvider);\n\n        const permissionProvider = new PermissionDatabaseProvider(dataSource);\n\n        const middleware = createAuthorizationMiddleware({\n            identityResolver,\n            identityPermissionProvider,\n            permissionProvider,\n            oauth2TokenVerifier,\n            sessionManager,\n            options: {\n                clientAuthBasic: config.clientAuthBasic,\n                robotAuthBasic: config.robotAuthBasic,\n                userAuthBasic: config.userAuthBasic,\n            },\n        });\n\n        router.use(middleware);\n    }\n\n    // ----------------------------------------------------\n\n    private transformBoolToEmptyObject<T extends Record<string, any>>(\n        input?: T | boolean,\n    ) : T | undefined {\n        if (typeof input === 'boolean') {\n            return {} as T;\n        }\n\n        return input || {} as T;\n    }\n\n    private isEnabled<T>(input: T | boolean) {\n        return typeof input !== 'boolean' || input === true;\n    }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAuCA,IAAauB,uBAAb,MAAaA;CACT,MAAMC,YAAYC,QAAaC,WAAsC;EAIjE,MAAM,KAAKC,gBAAgBF,QAAQC,SAAAA;EACnC,MAAM,KAAKE,YAAYH,QAAQC,SAAAA;EAC/B,MAAM,KAAKG,UAAUJ,QAAQC,SAAAA;EAC7B,MAAM,KAAKI,YAAYL,MAAAA;EACvB,MAAM,KAAKM,kBAAkBN,QAAQC,SAAAA;EACrC,MAAM,KAAKM,WAAWP,MAAAA;EACtB,MAAM,KAAKQ,eAAeR,QAAQC,SAAAA;EAElC,MAAM,KAAKQ,aAAaT,QAAQC,SAAAA;EAChC,MAAM,KAAKS,mBAAmBV,QAAQC,SAAAA;EACtC,MAAM,KAAKU,mBAAmBX,QAAQC,SAAAA;CAC1C;CAGA,MAAMW,WAAWZ,QAAaC,WAAsC;EAChElB,wBAAwBiB,QAAQ,EAAEa,QAAQZ,UAAUa,QAAQvB,kBAAAA,EAAoB,CAAA;CACpF;CAGA,MAAMa,UAAUJ,QAAaC,WAAsC;EAC/D,MAAMc,SAASd,UAAUa,QAAQxB,kBAAAA;EAEjC,IAAI,CAAC,KAAK0B,UAAUD,OAAOE,cAAc,GACrC;EAKJnC,uBAAuBkB,QAFP,KAAKmB,2BAA2BJ,OAAOE,cAAc,KAAK,CAAC,CAE5CC;CACnC;CAEA,MAAMf,YAAYH,QAAaC,WAAsC;EAEjE,MAAMmB,aAAa3C,uBAAuB;GACtC4C,KAFWpB,UAAUa,QAAQxB,kBAExByB,CAAAA,CAAOM;GACZR,QAAQZ,UAAUa,QAAQvB,kBAAAA;EAC9B,CAAA;EAEAS,OAAOsB,IAAIF,UAAAA;CACf;CAEA,MAAMf,YAAYL,QAA4B;EAC1C,MAAMpB,yBAAyBoB,MAAAA;CACnC;CAEA,MAAMM,kBAAkBN,QAAaC,WAAsC;EACvE,IAAI,CAACA,UAAUsB,IAAIpC,iBAAiBqC,YAAY,GAC5C;EAGJtC,+BAA+Bc,cAAcC,UAAUa,QAAQ3B,iBAAiBqC,YAAY,CAAA;CAChG;CAEA,MAAMjB,WAAWP,QAA4B;EACzCnB,wBAAwBmB,MAAAA;CAC5B;CAEA,MAAME,gBAAgBF,QAAaC,WAAsC;EACrE,MAAMc,SAASd,UAAUa,QAAQxB,kBAAAA;EAEjC,IAAI,CAAC,KAAK0B,UAAUD,OAAOU,oBAAoB,GAC3C;EAGJzC,6BAA6BgB,QAAQ,KAAKmB,2BAA2BJ,OAAOU,oBAAoB,CAAA;CACpG;CAEA,MAAMjB,eAAeR,QAAaC,WAAsC;EACpE,MAAMc,SAASd,UAAUa,QAAQxB,kBAAAA;EAEjC,IAAI,CAAC,KAAK0B,UAAUD,OAAOW,mBAAmB,GAC1C;EAGJzC,4BAA4Be,QAAQ,KAAKmB,2BAA2BJ,OAAOW,mBAAmB,CAAA;CAClG;CAEA,MAAMjB,aAAaT,QAAaC,WAAsC;EAClE,MAAMc,SAASd,UAAUa,QAAQxB,kBAAAA;EACjC,IAAI,CAAC,KAAK0B,UAAUD,OAAOY,iBAAiB,GACxC;EAGJ,MAAMP,aAAazC,wBAAwB;GACvCiD,cAAcrD,KAAKsD,KAAKzC,WAAW,cAAA;GACnC0C,SAASf,OAAOgB;EACpB,CAAA;EAEA/B,OAAOsB,IAAI,SAASF,UAAAA;CACxB;CAEA,MAAMT,mBAAmBX,QAAaC,WAAsC;EAExE,MAAMmB,aAAa1C,8BAA8B,EAAEsD,iBAAiB,IAAIrC,uBADhDM,UAAUa,QAA2BpB,WACkCsC,CAAAA,EAAiB,CAAA;EAOhHhC,OAAOsB,IAAI,4BAA4BF,UAAAA;CAC3C;CAEA,MAAMV,mBAAmBV,QAAaC,WAAsC;EACxE,MAAMc,SAASd,UAAUa,QAAQxB,kBAAAA;EACjC,MAAM2C,aAAahC,UAAUa,QAAQlB,qBAAqBsC,UAAU;EAEpE,MAAMC,mBAAmBlC,UAAUa,QAAQtB,qBAAqB4C,QAAQ;EACxE,MAAMC,iBAAiBpC,UAAUa,QAAQzB,2BAA2BiD,cAAc;EAClF,MAAMC,sBAAsBtC,UAAUa,QAAQrB,qBAAqB+C,aAAa;EAKhF,MAAMpB,aAAa5C,8BAA8B;GAC7C2D;GACAM,4BAN+BxC,UAAUa,QAAQtB,qBAAqBkD,kBAMtED;GACAE,oBAAAA,IAL2B9C,2BAA2BoC,UAKtDU;GACAJ;GACAF;GACAnB,SAAS;IACL0B,iBAAiB7B,OAAO6B;IACxBC,gBAAgB9B,OAAO8B;IACvBC,eAAe/B,OAAO+B;GAC1B;EACJ,CAAA;EAEA9C,OAAOsB,IAAIF,UAAAA;CACf;CAIQD,2BACJ4B,OACc;EACd,IAAI,OAAOA,UAAU,WACjB,OAAO,CAAC;EAGZ,OAAOA,SAAS,CAAC;CACrB;CAEQ/B,UAAa+B,OAAoB;EACrC,OAAO,OAAOA,UAAU,aAAaA,UAAU;CACnD;AACJ"}

package/dist/app/modules/identity/constants.d.ts

@@ -0,0 +1,10 @@
+import { TypedToken } from 'eldin';
+import type { IIdentityPermissionProvider, IIdentityProviderAccountManager, IIdentityResolver, IIdentityRoleProvider, IdentityProviderLdapCollectionAuthenticator } from '../../../core/index.ts';
+export declare const IdentityInjectionKey: {
+    readonly Resolver: TypedToken<IIdentityResolver>;
+    readonly PermissionProvider: TypedToken<IIdentityPermissionProvider>;
+    readonly RoleProvider: TypedToken<IIdentityRoleProvider>;
+    readonly ProviderAccountManager: TypedToken<IIdentityProviderAccountManager>;
+    readonly ProviderLdapCollectionAuthenticator: TypedToken<IdentityProviderLdapCollectionAuthenticator>;
+};
+//# sourceMappingURL=constants.d.ts.map

package/dist/app/modules/identity/constants.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"constants.d.ts","sourceRoot":"","sources":["../../../../src/app/modules/identity/constants.ts"],"names":[],"mappings":"AAOA,OAAO,EAAE,UAAU,EAAE,MAAM,OAAO,CAAC;AACnC,OAAO,KAAK,EACR,2BAA2B,EAC3B,+BAA+B,EAC/B,iBAAiB,EACjB,qBAAqB,EACrB,2CAA2C,EAC9C,MAAM,wBAAwB,CAAC;AAEhC,eAAO,MAAM,oBAAoB;;;;;;CAMvB,CAAC"}

package/dist/app/modules/identity/constants.mjs

@@ -0,0 +1,16 @@
+import "node:path";
+import "node:url";
+import.meta.url;
+import { TypedToken } from "eldin";
+//#region src/app/modules/identity/constants.ts
+const IdentityInjectionKey = {
+	Resolver: new TypedToken("Resolver"),
+	PermissionProvider: new TypedToken("IdentityPermissionProvider"),
+	RoleProvider: new TypedToken("IdentityRoleProvider"),
+	ProviderAccountManager: new TypedToken("AccountManager"),
+	ProviderLdapCollectionAuthenticator: new TypedToken("ProviderLdapCollectionAuthenticator")
+};
+//#endregion
+export { IdentityInjectionKey };
+
+//# sourceMappingURL=constants.mjs.map

package/dist/app/modules/identity/constants.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"constants.mjs","names":["TypedToken","IdentityInjectionKey","Resolver","PermissionProvider","RoleProvider","ProviderAccountManager","ProviderLdapCollectionAuthenticator"],"sources":["../../../../src/app/modules/identity/constants.ts"],"sourcesContent":["/*\n * Copyright (c) 2025.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport { TypedToken } from 'eldin';\nimport type {\n    IIdentityPermissionProvider,\n    IIdentityProviderAccountManager,\n    IIdentityResolver,\n    IIdentityRoleProvider,\n    IdentityProviderLdapCollectionAuthenticator,\n} from '../../../core/index.ts';\n\nexport const IdentityInjectionKey = {\n    Resolver: new TypedToken<IIdentityResolver>('Resolver'),\n    PermissionProvider: new TypedToken<IIdentityPermissionProvider>('IdentityPermissionProvider'),\n    RoleProvider: new TypedToken<IIdentityRoleProvider>('IdentityRoleProvider'),\n    ProviderAccountManager: new TypedToken<IIdentityProviderAccountManager>('AccountManager'),\n    ProviderLdapCollectionAuthenticator: new TypedToken<IdentityProviderLdapCollectionAuthenticator>('ProviderLdapCollectionAuthenticator'),\n} as const;\n"],"mappings":";;;;;AAgBA,MAAaC,uBAAuB;CAChCC,UAAU,IAAIF,WAA8B,UAAA;CAC5CG,oBAAoB,IAAIH,WAAwC,4BAAA;CAChEI,cAAc,IAAIJ,WAAkC,sBAAA;CACpDK,wBAAwB,IAAIL,WAA4C,gBAAA;CACxEM,qCAAqC,IAAIN,WAAwD,qCAAA;AACrG"}

package/dist/app/modules/identity/index.d.ts

@@ -0,0 +1,4 @@
+export * from './constants.ts';
+export * from './module.ts';
+export * from './repositories/index.ts';
+//# sourceMappingURL=index.d.ts.map

package/dist/app/modules/identity/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/app/modules/identity/index.ts"],"names":[],"mappings":"AAOA,cAAc,gBAAgB,CAAC;AAC/B,cAAc,aAAa,CAAC;AAC5B,cAAc,yBAAyB,CAAC"}

package/dist/app/modules/identity/index.mjs

@@ -0,0 +1,14 @@
+import "node:path";
+import "node:url";
+import.meta.url;
+import { IdentityInjectionKey } from "./constants.mjs";
+import { IdentityProviderAccountRepository } from "./repositories/provider/account/module.mjs";
+import { IdentityProviderAttributeMappingRepository } from "./repositories/provider/mapper/attribute.mjs";
+import { IdentityProviderPermissionMappingRepository } from "./repositories/provider/mapper/permission.mjs";
+import { IdentityProviderRoleMappingRepository } from "./repositories/provider/mapper/role.mjs";
+import { ClientIdentityRepository } from "./repositories/client.mjs";
+import { RobotIdentityRepository } from "./repositories/robot.mjs";
+import { UserIdentityRepository } from "./repositories/user.mjs";
+import "./repositories/index.mjs";
+import { IdentityModule } from "./module.mjs";
+export { ClientIdentityRepository, IdentityInjectionKey, IdentityModule, IdentityProviderAccountRepository, IdentityProviderAttributeMappingRepository, IdentityProviderPermissionMappingRepository, IdentityProviderRoleMappingRepository, RobotIdentityRepository, UserIdentityRepository };

package/dist/app/modules/identity/module.d.ts

@@ -0,0 +1,9 @@
+import type { IContainer } from 'eldin';
+import type { IModule } from 'orkos';
+export declare class IdentityModule implements IModule {
+    readonly name: string;
+    readonly dependencies: string[];
+    constructor();
+    setup(container: IContainer): Promise<void>;
+}
+//# sourceMappingURL=module.d.ts.map

package/dist/app/modules/identity/module.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"module.d.ts","sourceRoot":"","sources":["../../../../src/app/modules/identity/module.ts"],"names":[],"mappings":"AA0CA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,OAAO,CAAC;AAaxC,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,OAAO,CAAC;AAIrC,qBAAa,cAAe,YAAW,OAAO;IAC1C,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IAEtB,QAAQ,CAAC,YAAY,EAAE,MAAM,EAAE,CAAC;;IAO1B,KAAK,CAAC,SAAS,EAAE,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC;CAkGpD"}

package/dist/app/modules/identity/module.mjs

@@ -0,0 +1,118 @@
+import "node:path";
+import "node:url";
+import.meta.url;
+import { RealmEntity } from "../../../adapters/database/domains/realm/entity.mjs";
+import { ClientEntity } from "../../../adapters/database/domains/client/entity.mjs";
+import { RoleEntity } from "../../../adapters/database/domains/role/entity.mjs";
+import { IdentityProviderRepository } from "../../../adapters/database/domains/identity-provider/repository.mjs";
+import { UserRepository } from "../../../adapters/database/domains/user/repository.mjs";
+import { RobotEntity } from "../../../adapters/database/domains/robot/entity.mjs";
+import { UserPermissionEntity } from "../../../adapters/database/domains/user-permission/entity.mjs";
+import { UserRoleEntity } from "../../../adapters/database/domains/user-role/entity.mjs";
+import "../../../adapters/database/domains/index.mjs";
+import { IdentityPermissionProvider } from "../../../core/identity/permission/module.mjs";
+import { IdentityProviderAttributeMapper } from "../../../core/identity/provider/mapper/attributes/module.mjs";
+import { IdentityProviderRoleMapper } from "../../../core/identity/provider/mapper/role/module.mjs";
+import { IdentityProviderPermissionMapper } from "../../../core/identity/provider/mapper/permission/module.mjs";
+import { IdentityProviderAccountManager } from "../../../core/identity/provider/account/module.mjs";
+import { IdentityProviderLdapCollectionAuthenticator } from "../../../core/identity/provider/authentication/protocols/ldap/collection.mjs";
+import { IdentityResolver } from "../../../core/identity/resolver/module.mjs";
+import { IdentityRoleProvider } from "../../../core/identity/role/module.mjs";
+import "../../../core/index.mjs";
+import { ModuleName } from "../constants.mjs";
+import { DatabaseInjectionKey } from "../database/constants.mjs";
+import { ClientRepositoryAdapter } from "../database/repositories/client/repository.mjs";
+import { IdentityProviderRepositoryAdapter } from "../database/repositories/identity-provider/repository.mjs";
+import { RobotRepositoryAdapter } from "../database/repositories/robot/repository.mjs";
+import { RoleRepositoryAdapter } from "../database/repositories/role/repository.mjs";
+import { UserRepositoryAdapter } from "../database/repositories/user/repository.mjs";
+import "../database/repositories/index.mjs";
+import "../database/index.mjs";
+import { IdentityInjectionKey } from "./constants.mjs";
+import { IdentityProviderAccountRepository } from "./repositories/provider/account/module.mjs";
+import { IdentityProviderAttributeMappingRepository } from "./repositories/provider/mapper/attribute.mjs";
+import { IdentityProviderPermissionMappingRepository } from "./repositories/provider/mapper/permission.mjs";
+import { IdentityProviderRoleMappingRepository } from "./repositories/provider/mapper/role.mjs";
+import { ClientIdentityRepository } from "./repositories/client.mjs";
+import { RobotIdentityRepository } from "./repositories/robot.mjs";
+import { UserIdentityRepository } from "./repositories/user.mjs";
+import "./repositories/index.mjs";
+import { LDAPInjectionKey } from "../ldap/constants.mjs";
+import "../ldap/index.mjs";
+//#region src/app/modules/identity/module.ts
+var IdentityModule = class {
+	name;
+	dependencies;
+	constructor() {
+		this.name = ModuleName.IDENTITY;
+		this.dependencies = [ModuleName.DATABASE];
+	}
+	async setup(container) {
+		const dataSource = container.resolve(DatabaseInjectionKey.DataSource);
+		const realmRepository = container.resolve(RealmEntity);
+		const clientRepository = new ClientIdentityRepository(container.resolve(ClientEntity));
+		const robotRepository = new RobotIdentityRepository(container.resolve(RobotEntity));
+		const userRepository = new UserIdentityRepository({
+			repository: new UserRepository(dataSource),
+			userPermissionRepository: container.resolve(UserPermissionEntity),
+			userRoleRepository: container.resolve(UserRoleEntity)
+		});
+		container.register(IdentityInjectionKey.Resolver, { useFactory: () => new IdentityResolver({
+			clientRepository,
+			robotRepository,
+			userRepository
+		}) });
+		const clientRepositoryAdapter = new ClientRepositoryAdapter({
+			repository: container.resolve(ClientEntity),
+			realmRepository
+		});
+		const userRepositoryAdapter = new UserRepositoryAdapter({
+			repository: new UserRepository(dataSource),
+			realmRepository
+		});
+		const robotRepositoryAdapter = new RobotRepositoryAdapter({
+			repository: container.resolve(RobotEntity),
+			realmRepository
+		});
+		const roleRepositoryAdapter = new RoleRepositoryAdapter({
+			repository: container.resolve(RoleEntity),
+			realmRepository
+		});
+		container.register(IdentityInjectionKey.RoleProvider, { useFactory: () => new IdentityRoleProvider({
+			clientRepository: clientRepositoryAdapter,
+			userRepository: userRepositoryAdapter,
+			robotRepository: robotRepositoryAdapter
+		}) });
+		container.register(IdentityInjectionKey.PermissionProvider, { useFactory: (c) => new IdentityPermissionProvider({
+			clientRepository: clientRepositoryAdapter,
+			userRepository: userRepositoryAdapter,
+			robotRepository: robotRepositoryAdapter,
+			roleRepository: roleRepositoryAdapter,
+			roleProvider: c.resolve(IdentityInjectionKey.RoleProvider)
+		}) });
+		const attributeMapper = new IdentityProviderAttributeMapper(new IdentityProviderAttributeMappingRepository(dataSource));
+		const roleMapper = new IdentityProviderRoleMapper(new IdentityProviderRoleMappingRepository(dataSource));
+		const permissionMapper = new IdentityProviderPermissionMapper(new IdentityProviderPermissionMappingRepository(dataSource));
+		const providerAccountRepository = new IdentityProviderAccountRepository(dataSource);
+		container.register(IdentityInjectionKey.ProviderAccountManager, { useFactory: () => new IdentityProviderAccountManager({
+			repository: providerAccountRepository,
+			userRepository,
+			attributeMapper,
+			roleMapper,
+			permissionMapper
+		}) });
+		const identityProviderRepository = new IdentityProviderRepositoryAdapter({
+			repository: new IdentityProviderRepository(dataSource),
+			realmRepository: container.resolve(RealmEntity)
+		});
+		container.register(IdentityInjectionKey.ProviderLdapCollectionAuthenticator, { useFactory: (c) => new IdentityProviderLdapCollectionAuthenticator({
+			repository: identityProviderRepository,
+			accountManager: c.resolve(IdentityInjectionKey.ProviderAccountManager),
+			clientFactory: c.resolve(LDAPInjectionKey.ClientFactory)
+		}) });
+	}
+};
+//#endregion
+export { IdentityModule };
+
+//# sourceMappingURL=module.mjs.map

package/dist/app/modules/identity/module.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"module.mjs","names":["ClientIdentityRepository","IdentityProviderAccountRepository","IdentityProviderAttributeMappingRepository","IdentityProviderPermissionMappingRepository","IdentityProviderRoleMappingRepository","RobotIdentityRepository","UserIdentityRepository","DatabaseInjectionKey","IdentityProviderRepositoryAdapter","ClientEntity","IdentityProviderRepository","RealmEntity","RobotEntity","RoleEntity","UserPermissionEntity","UserRepository","UserRoleEntity","ClientRepositoryAdapter","RobotRepositoryAdapter","RoleRepositoryAdapter","UserRepositoryAdapter","IdentityPermissionProvider","IdentityProviderAccountManager","IdentityProviderAttributeMapper","IdentityProviderLdapCollectionAuthenticator","IdentityProviderPermissionMapper","IdentityProviderRoleMapper","IdentityResolver","IdentityRoleProvider","LDAPInjectionKey","ModuleName","IdentityInjectionKey","IdentityModule","name","dependencies","IDENTITY","DATABASE","setup","container","dataSource","resolve","DataSource","realmRepository","clientRepository","robotRepository","userRepository","repository","userPermissionRepository","userRoleRepository","register","Resolver","useFactory","clientRepositoryAdapter","userRepositoryAdapter","robotRepositoryAdapter","roleRepositoryAdapter","RoleProvider","PermissionProvider","c","roleRepository","roleProvider","attributeMapperRepository","attributeMapper","roleMapperFinder","roleMapper","permissionMapperRepository","permissionMapper","providerAccountRepository","ProviderAccountManager","identityProviderRepository","ProviderLdapCollectionAuthenticator","accountManager","clientFactory","ClientFactory"],"sources":["../../../../src/app/modules/identity/module.ts"],"sourcesContent":["/*\n * Copyright (c) 2025.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport type {\n    Client,\n    Realm,\n    Robot,\n    Role,\n    UserPermission,\n    UserRole,\n} from '@authup/core-kit';\nimport type { Repository } from 'typeorm';\nimport {\n    ClientIdentityRepository,\n    IdentityProviderAccountRepository,\n    IdentityProviderAttributeMappingRepository,\n    IdentityProviderPermissionMappingRepository,\n    IdentityProviderRoleMappingRepository,\n    RobotIdentityRepository,\n    UserIdentityRepository,\n} from './repositories/index.ts';\nimport { DatabaseInjectionKey, IdentityProviderRepositoryAdapter } from '../database/index.ts';\nimport {\n    ClientEntity,\n    IdentityProviderRepository,\n    RealmEntity,\n    RobotEntity,\n    RoleEntity,\n    UserPermissionEntity,\n    UserRepository,\n    UserRoleEntity,\n} from '../../../adapters/database/domains/index.ts';\nimport {\n    ClientRepositoryAdapter,\n    RobotRepositoryAdapter,\n    RoleRepositoryAdapter,\n    UserRepositoryAdapter,\n} from '../database/repositories/index.ts';\nimport type { IContainer } from 'eldin';\nimport {\n    IdentityPermissionProvider,\n    IdentityProviderAccountManager,\n    IdentityProviderAttributeMapper,\n    IdentityProviderLdapCollectionAuthenticator,\n    IdentityProviderPermissionMapper,\n    IdentityProviderRoleMapper,\n    IdentityResolver,\n    IdentityRoleProvider,\n} from '../../../core/index.ts';\nimport { LDAPInjectionKey } from '../ldap/index.ts';\n\nimport type { IModule } from 'orkos';\nimport { ModuleName } from '../constants.ts';\nimport { IdentityInjectionKey } from './constants.ts';\n\nexport class IdentityModule implements IModule {\n    readonly name: string;\n\n    readonly dependencies: string[];\n\n    constructor() {\n        this.name = ModuleName.IDENTITY;\n        this.dependencies = [ModuleName.DATABASE];\n    }\n\n    async setup(container: IContainer): Promise<void> {\n        const dataSource = container.resolve(DatabaseInjectionKey.DataSource);\n        const realmRepository = container.resolve<Repository<Realm>>(RealmEntity);\n\n        const clientRepository = new ClientIdentityRepository(\n            container.resolve<Repository<Client>>(ClientEntity),\n        );\n        const robotRepository = new RobotIdentityRepository(\n            container.resolve<Repository<Robot>>(RobotEntity),\n        );\n        const userRepository = new UserIdentityRepository({\n            repository: new UserRepository(dataSource),\n            userPermissionRepository: container.resolve<Repository<UserPermission>>(UserPermissionEntity),\n            userRoleRepository: container.resolve<Repository<UserRole>>(UserRoleEntity),\n        });\n\n        container.register(IdentityInjectionKey.Resolver, {\n            useFactory: () => new IdentityResolver({\n                clientRepository,\n                robotRepository,\n                userRepository,\n            }),\n        });\n\n        // ---------------------------------------------\n\n        const clientRepositoryAdapter = new ClientRepositoryAdapter({\n            repository: container.resolve<Repository<Client>>(ClientEntity),\n            realmRepository,\n        });\n        const userRepositoryAdapter = new UserRepositoryAdapter({\n            repository: new UserRepository(dataSource),\n            realmRepository,\n        });\n        const robotRepositoryAdapter = new RobotRepositoryAdapter({\n            repository: container.resolve<Repository<Robot>>(RobotEntity),\n            realmRepository,\n        });\n        const roleRepositoryAdapter = new RoleRepositoryAdapter({\n            repository: container.resolve<Repository<Role>>(RoleEntity),\n            realmRepository,\n        });\n\n        container.register(IdentityInjectionKey.RoleProvider, {\n            useFactory: () => new IdentityRoleProvider({\n                clientRepository: clientRepositoryAdapter,\n                userRepository: userRepositoryAdapter,\n                robotRepository: robotRepositoryAdapter,\n            }),\n        });\n\n        container.register(IdentityInjectionKey.PermissionProvider, {\n            useFactory: (c) => new IdentityPermissionProvider({\n                clientRepository: clientRepositoryAdapter,\n                userRepository: userRepositoryAdapter,\n                robotRepository: robotRepositoryAdapter,\n                roleRepository: roleRepositoryAdapter,\n                roleProvider: c.resolve(IdentityInjectionKey.RoleProvider),\n            }),\n        });\n\n        // ---------------------------------------------\n\n        const attributeMapperRepository = new IdentityProviderAttributeMappingRepository(dataSource);\n        const attributeMapper = new IdentityProviderAttributeMapper(attributeMapperRepository);\n\n        const roleMapperFinder = new IdentityProviderRoleMappingRepository(dataSource);\n        const roleMapper = new IdentityProviderRoleMapper(roleMapperFinder);\n\n        const permissionMapperRepository = new IdentityProviderPermissionMappingRepository(dataSource);\n        const permissionMapper = new IdentityProviderPermissionMapper(permissionMapperRepository);\n\n        const providerAccountRepository = new IdentityProviderAccountRepository(dataSource);\n\n        container.register(IdentityInjectionKey.ProviderAccountManager, {\n            useFactory: () => new IdentityProviderAccountManager({\n                repository: providerAccountRepository,\n                userRepository,\n                attributeMapper,\n                roleMapper,\n                permissionMapper,\n            }),\n        });\n\n        // ---------------------------------------------\n\n        const identityProviderRepository = new IdentityProviderRepositoryAdapter({\n            repository: new IdentityProviderRepository(dataSource),\n            realmRepository: container.resolve<Repository<Realm>>(RealmEntity),\n        });\n        container.register(IdentityInjectionKey.ProviderLdapCollectionAuthenticator, {\n            useFactory: (c) => new IdentityProviderLdapCollectionAuthenticator({\n                repository: identityProviderRepository,\n                accountManager: c.resolve(IdentityInjectionKey.ProviderAccountManager),\n                clientFactory: c.resolve(LDAPInjectionKey.ClientFactory),\n            }),\n        });\n    }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AA2DA,IAAagC,iBAAb,MAAaA;CACAC;CAEAC;CAET,cAAc;EACV,KAAKD,OAAOH,WAAWK;EACvB,KAAKD,eAAe,CAACJ,WAAWM,QAAAA;CACpC;CAEA,MAAMC,MAAMC,WAAsC;EAC9C,MAAMC,aAAaD,UAAUE,QAAQjC,qBAAqBkC,UAAU;EACpE,MAAMC,kBAAkBJ,UAAUE,QAA2B7B,WAAAA;EAE7D,MAAMgC,mBAAmB,IAAI3C,yBACzBsC,UAAUE,QAA4B/B,YAAAA,CAAAA;EAE1C,MAAMmC,kBAAkB,IAAIvC,wBACxBiC,UAAUE,QAA2B5B,WAAAA,CAAAA;EAEzC,MAAMiC,iBAAiB,IAAIvC,uBAAuB;GAC9CwC,YAAY,IAAI/B,eAAewB,UAAAA;GAC/BQ,0BAA0BT,UAAUE,QAAoC1B,oBAAAA;GACxEkC,oBAAoBV,UAAUE,QAA8BxB,cAAAA;EAChE,CAAA;EAEAsB,UAAUW,SAASlB,qBAAqBmB,UAAU,EAC9CC,kBAAkB,IAAIxB,iBAAiB;GACnCgB;GACAC;GACAC;EACJ,CAAA,EACJ,CAAA;EAIA,MAAMO,0BAA0B,IAAInC,wBAAwB;GACxD6B,YAAYR,UAAUE,QAA4B/B,YAAAA;GAClDiC;EACJ,CAAA;EACA,MAAMW,wBAAwB,IAAIjC,sBAAsB;GACpD0B,YAAY,IAAI/B,eAAewB,UAAAA;GAC/BG;EACJ,CAAA;EACA,MAAMY,yBAAyB,IAAIpC,uBAAuB;GACtD4B,YAAYR,UAAUE,QAA2B5B,WAAAA;GACjD8B;EACJ,CAAA;EACA,MAAMa,wBAAwB,IAAIpC,sBAAsB;GACpD2B,YAAYR,UAAUE,QAA0B3B,UAAAA;GAChD6B;EACJ,CAAA;EAEAJ,UAAUW,SAASlB,qBAAqByB,cAAc,EAClDL,kBAAkB,IAAIvB,qBAAqB;GACvCe,kBAAkBS;GAClBP,gBAAgBQ;GAChBT,iBAAiBU;EACrB,CAAA,EACJ,CAAA;EAEAhB,UAAUW,SAASlB,qBAAqB0B,oBAAoB,EACxDN,aAAaO,MAAM,IAAIrC,2BAA2B;GAC9CsB,kBAAkBS;GAClBP,gBAAgBQ;GAChBT,iBAAiBU;GACjBK,gBAAgBJ;GAChBK,cAAcF,EAAElB,QAAQT,qBAAqByB,YAAY;EAC7D,CAAA,EACJ,CAAA;EAKA,MAAMM,kBAAkB,IAAIvC,gCAAgCsC,IADtB3D,2CAA2CqC,UACrBsB,CAAAA;EAG5D,MAAMG,aAAa,IAAItC,2BAA2BqC,IADrB3D,sCAAsCmC,UACjBwB,CAAAA;EAGlD,MAAMG,mBAAmB,IAAIzC,iCAAiCwC,IADvB9D,4CAA4CoC,UACrB0B,CAAAA;EAE9D,MAAME,4BAA4B,IAAIlE,kCAAkCsC,UAAAA;EAExED,UAAUW,SAASlB,qBAAqBqC,wBAAwB,EAC5DjB,kBAAkB,IAAI7B,+BAA+B;GACjDwB,YAAYqB;GACZtB;GACAiB;GACAE;GACAE;EACJ,CAAA,EACJ,CAAA;EAIA,MAAMG,6BAA6B,IAAI7D,kCAAkC;GACrEsC,YAAY,IAAIpC,2BAA2B6B,UAAAA;GAC3CG,iBAAiBJ,UAAUE,QAA2B7B,WAAAA;EAC1D,CAAA;EACA2B,UAAUW,SAASlB,qBAAqBuC,qCAAqC,EACzEnB,aAAaO,MAAM,IAAIlC,4CAA4C;GAC/DsB,YAAYuB;GACZE,gBAAgBb,EAAElB,QAAQT,qBAAqBqC,sBAAsB;GACrEI,eAAed,EAAElB,QAAQX,iBAAiB4C,aAAa;EAC3D,CAAA,EACJ,CAAA;CACJ;AACJ"}

package/dist/app/modules/identity/repositories/client.d.ts

@@ -0,0 +1,13 @@
+import type { Client } from '@authup/core-kit';
+import type { Repository } from 'typeorm';
+import type { IClientIdentityRepository } from '../../../../core/index.ts';
+export declare class ClientIdentityRepository implements IClientIdentityRepository {
+    private readonly repository;
+    constructor(repository: Repository<Client>);
+    findOneById(id: string): Promise<Client | null>;
+    findOneByName(id: string, realm?: string): Promise<Client | null>;
+    findOneByIdOrName(idOrName: string, realm?: string): Promise<Client | null>;
+    findOneBy(where: Record<string, any>): Promise<Client | null>;
+    private find;
+}
+//# sourceMappingURL=client.d.ts.map

package/dist/app/modules/identity/repositories/client.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"client.d.ts","sourceRoot":"","sources":["../../../../../src/app/modules/identity/repositories/client.ts"],"names":[],"mappings":"AASA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAC;AAC/C,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AAC1C,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,2BAA2B,CAAC;AAG3E,qBAAa,wBAAyB,YAAW,yBAAyB;IACtE,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAqB;gBAEpC,UAAU,EAAE,UAAU,CAAC,MAAM,CAAC;IAIpC,WAAW,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC;IAI/C,aAAa,CAAC,EAAE,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC;IAIjE,iBAAiB,CAAC,QAAQ,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC;IAI3E,SAAS,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC;YAIrD,IAAI;CAqCrB"}

package/dist/app/modules/identity/repositories/client.mjs

@@ -0,0 +1,47 @@
+import "node:path";
+import "node:url";
+import.meta.url;
+import { CachePrefix } from "../../../../adapters/database/domains/constants.mjs";
+import "../../../../adapters/database/domains/index.mjs";
+import { isUUID } from "@authup/kit";
+import { buildRedisKeyPath } from "@authup/server-kit";
+//#region src/app/modules/identity/repositories/client.ts
+var ClientIdentityRepository = class {
+	repository;
+	constructor(repository) {
+		this.repository = repository;
+	}
+	async findOneById(id) {
+		return this.find(id);
+	}
+	async findOneByName(id, realm) {
+		return this.find(id, realm);
+	}
+	async findOneByIdOrName(idOrName, realm) {
+		return this.find(idOrName, realm);
+	}
+	async findOneBy(where) {
+		return this.repository.findOneBy(where);
+	}
+	async find(key, realmKey) {
+		const query = this.repository.createQueryBuilder("client").leftJoinAndSelect("client.realm", "realm");
+		const isId = isUUID(key);
+		if (isId) query.where("client.id = :id", { id: key });
+		else {
+			query.where("client.name = :name", { name: key });
+			if (realmKey) if (isUUID(realmKey)) query.andWhere("client.realm_id = :realmId", { realmId: realmKey });
+			else query.andWhere("realm.name = :realmName", { realmName: realmKey });
+		}
+		const { columns } = this.repository.metadata;
+		for (const column of columns) if (!column.isSelect) query.addSelect(`client.${column.databaseName}`);
+		if (isId) query.cache(buildRedisKeyPath({
+			prefix: CachePrefix.CLIENT,
+			key
+		}), 6e4);
+		return query.getOne();
+	}
+};
+//#endregion
+export { ClientIdentityRepository };
+
+//# sourceMappingURL=client.mjs.map