@authup/server-core 1.0.0-beta.5 → 1.0.0-beta.51

package/dist/adapters/http/controllers/entities/policy/module.mjs

@@ -0,0 +1,178 @@
+import "node:path";
+import "node:url";
+import.meta.url;
+import { buildActorContext } from "../../../request/helpers/actor.mjs";
+import { applyRouteRealmIDToBody, getRequestRealmID } from "../../../request/helpers/realm-id.mjs";
+import "../../../request/index.mjs";
+import { ForceLoggedInMiddleware } from "../../../middleware/built-in/loggedin/module.mjs";
+import "../../../middleware/index.mjs";
+import { serializeError } from "@authup/errors";
+import { DBody, DContext, DController, DDelete, DGet, DPath, DPost, DPut, DTags } from "@routup/decorators";
+import { useRequestQuery } from "@routup/basic/query";
+//#region src/adapters/http/controllers/entities/policy/module.ts
+function _ts_decorate(decorators, target, key, desc) {
+	var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+	if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+	else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+	return c > 3 && r && Object.defineProperty(target, key, r), r;
+}
+function _ts_metadata(k, v) {
+	if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+}
+function _ts_param(paramIndex, decorator) {
+	return function(target, key) {
+		decorator(target, key, paramIndex);
+	};
+}
+var PolicyController = class {
+	service;
+	checkerService;
+	constructor(ctx) {
+		this.service = ctx.service;
+		this.checkerService = ctx.checkerService;
+	}
+	async getMany(event) {
+		const actor = buildActorContext(event);
+		const { data, meta } = await this.service.getMany(useRequestQuery(event), actor);
+		return {
+			data,
+			meta
+		};
+	}
+	async getOneExpanded(id, event) {
+		return this.getOne(id, event, { expanded: true });
+	}
+	async getOne(id, event, options = {}) {
+		const actor = buildActorContext(event);
+		return await this.service.getOne(id, actor, getRequestRealmID(event));
+	}
+	async check(id, data, event) {
+		const actor = buildActorContext(event);
+		const result = await this.checkerService.safeCheck(id, data, actor, getRequestRealmID(event));
+		event.response.status = 202;
+		if (result.success) return { status: "success" };
+		return {
+			status: "error",
+			data: serializeError(result.error)
+		};
+	}
+	async update(id, data, event) {
+		applyRouteRealmIDToBody(event, data);
+		const actor = buildActorContext(event);
+		const entity = await this.service.update(id, data, actor);
+		event.response.status = 202;
+		return entity;
+	}
+	async replace(id, data, event) {
+		applyRouteRealmIDToBody(event, data);
+		const actor = buildActorContext(event);
+		const { entity, created } = await this.service.save(id || void 0, data, actor);
+		event.response.status = created ? 201 : 202;
+		return entity;
+	}
+	async drop(id, event) {
+		const actor = buildActorContext(event);
+		const entity = await this.service.delete(id, actor);
+		event.response.status = 202;
+		return entity;
+	}
+	async create(data, event) {
+		applyRouteRealmIDToBody(event, data);
+		const actor = buildActorContext(event);
+		const entity = await this.service.create(data, actor);
+		event.response.status = 201;
+		return entity;
+	}
+};
+_ts_decorate([
+	DGet("", []),
+	_ts_param(0, DContext()),
+	_ts_metadata("design:type", Function),
+	_ts_metadata("design:paramtypes", [typeof IAppEvent === "undefined" ? Object : IAppEvent]),
+	_ts_metadata("design:returntype", Promise)
+], PolicyController.prototype, "getMany", null);
+_ts_decorate([
+	DGet("/:id/expanded", []),
+	_ts_param(0, DPath("id")),
+	_ts_param(1, DContext()),
+	_ts_metadata("design:type", Function),
+	_ts_metadata("design:paramtypes", [String, typeof IAppEvent === "undefined" ? Object : IAppEvent]),
+	_ts_metadata("design:returntype", Promise)
+], PolicyController.prototype, "getOneExpanded", null);
+_ts_decorate([
+	DGet("/:id", []),
+	_ts_param(0, DPath("id")),
+	_ts_param(1, DContext()),
+	_ts_metadata("design:type", Function),
+	_ts_metadata("design:paramtypes", [
+		String,
+		typeof IAppEvent === "undefined" ? Object : IAppEvent,
+		Object
+	]),
+	_ts_metadata("design:returntype", Promise)
+], PolicyController.prototype, "getOne", null);
+_ts_decorate([
+	DPost("/:id/check", [ForceLoggedInMiddleware]),
+	_ts_param(0, DPath("id")),
+	_ts_param(1, DBody()),
+	_ts_param(2, DContext()),
+	_ts_metadata("design:type", Function),
+	_ts_metadata("design:paramtypes", [
+		String,
+		Object,
+		typeof IAppEvent === "undefined" ? Object : IAppEvent
+	]),
+	_ts_metadata("design:returntype", Promise)
+], PolicyController.prototype, "check", null);
+_ts_decorate([
+	DPost("/:id", [ForceLoggedInMiddleware]),
+	_ts_param(0, DPath("id")),
+	_ts_param(1, DBody()),
+	_ts_param(2, DContext()),
+	_ts_metadata("design:type", Function),
+	_ts_metadata("design:paramtypes", [
+		String,
+		typeof PolicyUpdatePayload === "undefined" ? Object : PolicyUpdatePayload,
+		typeof IAppEvent === "undefined" ? Object : IAppEvent
+	]),
+	_ts_metadata("design:returntype", Promise)
+], PolicyController.prototype, "update", null);
+_ts_decorate([
+	DPut("/:id", [ForceLoggedInMiddleware]),
+	_ts_param(0, DPath("id")),
+	_ts_param(1, DBody()),
+	_ts_param(2, DContext()),
+	_ts_metadata("design:type", Function),
+	_ts_metadata("design:paramtypes", [
+		String,
+		typeof PolicySavePayload === "undefined" ? Object : PolicySavePayload,
+		typeof IAppEvent === "undefined" ? Object : IAppEvent
+	]),
+	_ts_metadata("design:returntype", Promise)
+], PolicyController.prototype, "replace", null);
+_ts_decorate([
+	DDelete("/:id", [ForceLoggedInMiddleware]),
+	_ts_param(0, DPath("id")),
+	_ts_param(1, DContext()),
+	_ts_metadata("design:type", Function),
+	_ts_metadata("design:paramtypes", [String, typeof IAppEvent === "undefined" ? Object : IAppEvent]),
+	_ts_metadata("design:returntype", Promise)
+], PolicyController.prototype, "drop", null);
+_ts_decorate([
+	DPost("", [ForceLoggedInMiddleware]),
+	_ts_param(0, DBody()),
+	_ts_param(1, DContext()),
+	_ts_metadata("design:type", Function),
+	_ts_metadata("design:paramtypes", [typeof PolicyCreatePayload === "undefined" ? Object : PolicyCreatePayload, typeof IAppEvent === "undefined" ? Object : IAppEvent]),
+	_ts_metadata("design:returntype", Promise)
+], PolicyController.prototype, "create", null);
+PolicyController = _ts_decorate([
+	DTags("policy"),
+	DController(["/policies", "/realms/:realmId/policies"]),
+	_ts_metadata("design:type", Function),
+	_ts_metadata("design:paramtypes", [typeof PolicyControllerContext === "undefined" ? Object : PolicyControllerContext])
+], PolicyController);
+//#endregion
+export { PolicyController };
+
+//# sourceMappingURL=module.mjs.map

package/dist/adapters/http/controllers/entities/policy/module.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"module.mjs","names":["serializeError","DBody","DContext","DController","DDelete","DGet","DPath","DPost","DPut","DTags","useRequestQuery","ForceLoggedInMiddleware","applyRouteRealmIDToBody","buildActorContext","getRequestRealmID","PolicyController","service","checkerService","ctx","getMany","event","actor","data","meta","getOneExpanded","id","getOne","expanded","options","entity","check","result","safeCheck","response","status","success","error","update","replace","created","save","undefined","drop","delete","create"],"sources":["../../../../../../src/adapters/http/controllers/entities/policy/module.ts"],"sourcesContent":["/*\n * Copyright (c) 2022.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport type {\n    EntityCollectionResponse,\n    PolicyAPICheckResponse,\n    PolicyCreatePayload,\n    PolicyResponse,\n    PolicySavePayload,\n    PolicyUpdatePayload,\n} from '@authup/core-http-kit';\nimport { serializeError } from '@authup/errors';\nimport {\n    DBody,\n    DContext,\n    DController,\n    DDelete,\n    DGet,\n    DPath,\n    DPost,\n    DPut,\n    DTags,\n} from '@routup/decorators';\nimport { useRequestQuery } from '@routup/basic/query';\nimport type { IAppEvent } from 'routup';\nimport type {\n    IPolicyCheckerService,\n    IPolicyService,\n} from '../../../../../core/index.ts';\nimport { ForceLoggedInMiddleware } from '../../../middleware/index.ts';\nimport {\n    applyRouteRealmIDToBody,\n    buildActorContext,\n    getRequestRealmID,\n} from '../../../request/index.ts';\n\nexport type PolicyControllerContext = {\n    service: IPolicyService,\n    checkerService: IPolicyCheckerService,\n};\n\n@DTags('policy')\n@DController(['/policies', '/realms/:realmId/policies'])\nexport class PolicyController {\n    protected service: IPolicyService;\n\n    protected checkerService: IPolicyCheckerService;\n\n    constructor(ctx: PolicyControllerContext) {\n        this.service = ctx.service;\n        this.checkerService = ctx.checkerService;\n    }\n\n    @DGet('', [])\n    async getMany(\n        @DContext() event: IAppEvent,\n    ): Promise<EntityCollectionResponse<PolicyResponse>> {\n        const actor = buildActorContext(event);\n        const {\n            data,\n            meta,\n        } = await this.service.getMany(useRequestQuery(event), actor);\n\n        return {\n            data,\n            meta,\n        };\n    }\n\n    @DGet('/:id/expanded', [])\n    async getOneExpanded(\n        @DPath('id') id: string,\n        @DContext() event: IAppEvent,\n    ): Promise<PolicyResponse> {\n        return this.getOne(id, event, { expanded: true });\n    }\n\n    @DGet('/:id', [])\n    async getOne(\n        @DPath('id') id: string,\n        @DContext() event: IAppEvent,\n        // eslint-disable-next-line @typescript-eslint/no-unused-vars\n        options: { expanded?: boolean } = {},\n    ): Promise<PolicyResponse> {\n        const actor = buildActorContext(event);\n        const entity = await this.service.getOne(\n            id,\n            actor,\n            getRequestRealmID(event),\n        );\n\n        return entity;\n    }\n\n    @DPost('/:id/check', [ForceLoggedInMiddleware])\n    async check(\n        @DPath('id') id: string,\n        @DBody() data: any,\n        @DContext() event: IAppEvent,\n    ): Promise<PolicyAPICheckResponse> {\n        const actor = buildActorContext(event);\n        const result = await this.checkerService.safeCheck(\n            id,\n            data,\n            actor,\n            getRequestRealmID(event),\n        );\n\n        event.response.status = 202;\n        if (result.success) {\n            return { status: 'success' };\n        }\n\n        return {\n            status: 'error',\n            data: serializeError(result.error),\n        };\n    }\n\n    @DPost('/:id', [ForceLoggedInMiddleware])\n    async update(\n        @DPath('id') id: string,\n        @DBody() data: PolicyUpdatePayload,\n        @DContext() event: IAppEvent,\n    ): Promise<PolicyResponse> {\n        applyRouteRealmIDToBody(event, data);\n        const actor = buildActorContext(event);\n        const entity = await this.service.update(\n            id,\n            data,\n            actor,\n        );\n\n        event.response.status = 202;\n\n        return entity;\n    }\n\n    @DPut('/:id', [ForceLoggedInMiddleware])\n    async replace(\n        @DPath('id') id: string,\n        @DBody() data: PolicySavePayload,\n        @DContext() event: IAppEvent,\n    ): Promise<PolicyResponse> {\n        applyRouteRealmIDToBody(event, data);\n        const actor = buildActorContext(event);\n\n        const {\n            entity,\n            created,\n        } = await this.service.save(\n            id || undefined,\n            data,\n            actor,\n        );\n\n        event.response.status = created ? 201 : 202;\n        return entity;\n    }\n\n    @DDelete('/:id', [ForceLoggedInMiddleware])\n    async drop(\n        @DPath('id') id: string,\n        @DContext() event: IAppEvent,\n    ): Promise<PolicyResponse> {\n        const actor = buildActorContext(event);\n        const entity = await this.service.delete(id, actor);\n\n        event.response.status = 202;\n\n        return entity;\n    }\n\n    @DPost('', [ForceLoggedInMiddleware])\n    async create(\n        @DBody() data: PolicyCreatePayload,\n        @DContext() event: IAppEvent,\n    ): Promise<PolicyResponse> {\n        applyRouteRealmIDToBody(event, data);\n        const actor = buildActorContext(event);\n        const entity = await this.service.create(data, actor);\n\n        event.response.status = 201;\n\n        return entity;\n    }\n}\n"],"mappings":";;;;;;;;;;;;AAKC,SAAA,aAAA,YAAA,QAAA,KAAA,MAAA;;;;;;;;;;;;;;AA0CD,IAAae,mBAAb,MAAaA;CACCC;CAEAC;CAEV,YAAYC,KAA8B;EACtC,KAAKF,UAAUE,IAAIF;EACnB,KAAKC,iBAAiBC,IAAID;CAC9B;CAEA,MACME,QACF,OACiD;EACjD,MAAME,QAAQR,kBAAkBO,KAAAA;EAChC,MAAM,EACFE,MACAC,SACA,MAAM,KAAKP,QAAQG,QAAQT,gBAAgBU,KAAAA,GAAQC,KAAAA;EAEvD,OAAO;GACHC;GACAC;EACJ;CACJ;CAEA,MACMC,eACF,IACA,OACuB;EACvB,OAAO,KAAKE,OAAOD,IAAIL,OAAO,EAAEO,UAAU,KAAK,CAAA;CACnD;CAEA,MACMD,OACF,IACA,OAEAE,UAAkC,CAAC,GACZ;EACvB,MAAMP,QAAQR,kBAAkBO,KAAAA;EAOhC,OAAOS,MANc,KAAKb,QAAQU,OAC9BD,IACAJ,OACAP,kBAAkBM,KAAAA,CAAAA;CAI1B;CAEA,MACMU,MACF,IACA,MACA,OAC+B;EAC/B,MAAMT,QAAQR,kBAAkBO,KAAAA;EAChC,MAAMW,SAAS,MAAM,KAAKd,eAAee,UACrCP,IACAH,MACAD,OACAP,kBAAkBM,KAAAA,CAAAA;EAGtBA,MAAMa,SAASC,SAAS;EACxB,IAAIH,OAAOI,SACP,OAAO,EAAED,QAAQ,UAAU;EAG/B,OAAO;GACHA,QAAQ;GACRZ,MAAMtB,eAAe+B,OAAOK,KAAK;EACrC;CACJ;CAEA,MACMC,OACF,IACA,MACA,OACuB;EACvBzB,wBAAwBQ,OAAOE,IAAAA;EAC/B,MAAMD,QAAQR,kBAAkBO,KAAAA;EAChC,MAAMS,SAAS,MAAM,KAAKb,QAAQqB,OAC9BZ,IACAH,MACAD,KAAAA;EAGJD,MAAMa,SAASC,SAAS;EAExB,OAAOL;CACX;CAEA,MACMS,QACF,IACA,MACA,OACuB;EACvB1B,wBAAwBQ,OAAOE,IAAAA;EAC/B,MAAMD,QAAQR,kBAAkBO,KAAAA;EAEhC,MAAM,EACFS,QACAU,YACA,MAAM,KAAKvB,QAAQwB,KACnBf,MAAMgB,KAAAA,GACNnB,MACAD,KAAAA;EAGJD,MAAMa,SAASC,SAASK,UAAU,MAAM;EACxC,OAAOV;CACX;CAEA,MACMa,KACF,IACA,OACuB;EACvB,MAAMrB,QAAQR,kBAAkBO,KAAAA;EAChC,MAAMS,SAAS,MAAM,KAAKb,QAAQ2B,OAAOlB,IAAIJ,KAAAA;EAE7CD,MAAMa,SAASC,SAAS;EAExB,OAAOL;CACX;CAEA,MACMe,OACF,MACA,OACuB;EACvBhC,wBAAwBQ,OAAOE,IAAAA;EAC/B,MAAMD,QAAQR,kBAAkBO,KAAAA;EAChC,MAAMS,SAAS,MAAM,KAAKb,QAAQ4B,OAAOtB,MAAMD,KAAAA;EAE/CD,MAAMa,SAASC,SAAS;EAExB,OAAOL;CACX;AACJ;;;;;;;;;;;;;;;;;;;;;;;;;;;;;sBA5F0BlB,uBAAAA,CAAAA;;;;;;;;;;;;;gBAyBNA,uBAAAA,CAAAA;;;;;;;;;;;;;eAmBDA,uBAAAA,CAAAA;;;;;;;;;;;;;kBAsBGA,uBAAAA,CAAAA;;;;;;;;YAaNA,uBAAAA,CAAAA;;;;;;;;;cAnIF,aAAa,2BAAA,CAAA"}

package/dist/adapters/http/controllers/entities/policy/utils/attributes-validator.d.ts

@@ -0,0 +1,17 @@
+import { AttributeNamesPolicyValidator, AttributesPolicyValidator, DatePolicyValidator, TimePolicyValidator } from '@authup/access';
+import type { ContainerOptions } from 'validup';
+import { Container } from 'validup';
+type PolicyContainerRunOptions<T> = ContainerOptions<T> & {
+    attributeNames?: string[];
+};
+export declare class PolicyAttributesValidator extends Container<Record<string, any>> {
+    protected attributeNames: string[];
+    protected attributesOptionsValidator: AttributesPolicyValidator;
+    protected attributeNamesOptionsValidator: AttributeNamesPolicyValidator;
+    protected dateOptionsValidator: DatePolicyValidator;
+    protected timeOptionsValidator: TimePolicyValidator;
+    constructor(options: PolicyContainerRunOptions<Record<string, any>>);
+    run(data: Record<string, any>): Promise<Record<string, any>>;
+}
+export {};
+//# sourceMappingURL=attributes-validator.d.ts.map

package/dist/adapters/http/controllers/entities/policy/utils/attributes-validator.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"attributes-validator.d.ts","sourceRoot":"","sources":["../../../../../../../src/adapters/http/controllers/entities/policy/utils/attributes-validator.ts"],"names":[],"mappings":"AAOA,OAAO,EACH,6BAA6B,EAC7B,yBAAyB,EAEzB,mBAAmB,EACnB,mBAAmB,EACtB,MAAM,gBAAgB,CAAC;AAExB,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,SAAS,CAAC;AAChD,OAAO,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AAEpC,KAAK,yBAAyB,CAAC,CAAC,IAAI,gBAAgB,CAAC,CAAC,CAAC,GAAG;IACtD,cAAc,CAAC,EAAE,MAAM,EAAE,CAAA;CAC5B,CAAC;AAEF,qBAAa,yBAA0B,SAAQ,SAAS,CAAC,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IACzE,SAAS,CAAC,cAAc,EAAG,MAAM,EAAE,CAAC;IAEpC,SAAS,CAAC,0BAA0B,EAAG,yBAAyB,CAAC;IAEjE,SAAS,CAAC,8BAA8B,EAAG,6BAA6B,CAAC;IAEzE,SAAS,CAAC,oBAAoB,EAAG,mBAAmB,CAAC;IAErD,SAAS,CAAC,oBAAoB,EAAG,mBAAmB,CAAC;gBAEzC,OAAO,EAAE,yBAAyB,CAAC,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IAWpD,GAAG,CACd,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,GACzB,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;CA8BnC"}

package/dist/adapters/http/controllers/entities/policy/utils/attributes-validator.mjs

@@ -0,0 +1,45 @@
+import "node:path";
+import "node:url";
+import.meta.url;
+import { omitRecord } from "@authup/kit";
+import { AttributeNamesPolicyValidator, AttributesPolicyValidator, BuiltInPolicyType, DatePolicyValidator, TimePolicyValidator } from "@authup/access";
+import { Container } from "validup";
+//#region src/adapters/http/controllers/entities/policy/utils/attributes-validator.ts
+var PolicyAttributesValidator = class extends Container {
+	attributeNames;
+	attributesOptionsValidator;
+	attributeNamesOptionsValidator;
+	dateOptionsValidator;
+	timeOptionsValidator;
+	constructor(options) {
+		super(options);
+		this.attributeNames = options.attributeNames || [];
+		this.attributesOptionsValidator = new AttributesPolicyValidator();
+		this.attributeNamesOptionsValidator = new AttributeNamesPolicyValidator();
+		this.dateOptionsValidator = new DatePolicyValidator();
+		this.timeOptionsValidator = new TimePolicyValidator();
+	}
+	async run(data) {
+		let attributes = {};
+		switch (data.type) {
+			case BuiltInPolicyType.ATTRIBUTES:
+				attributes = await this.attributesOptionsValidator.run(data);
+				break;
+			case BuiltInPolicyType.ATTRIBUTE_NAMES:
+				attributes = await this.attributeNamesOptionsValidator.run(data);
+				break;
+			case BuiltInPolicyType.DATE:
+				attributes = await this.dateOptionsValidator.run(data);
+				break;
+			case BuiltInPolicyType.TIME:
+				attributes = await this.timeOptionsValidator.run(data);
+				break;
+			default: if (typeof this.attributeNames !== "undefined") attributes = omitRecord(data, this.attributeNames);
+		}
+		return attributes;
+	}
+};
+//#endregion
+export { PolicyAttributesValidator };
+
+//# sourceMappingURL=attributes-validator.mjs.map

package/dist/adapters/http/controllers/entities/policy/utils/attributes-validator.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"attributes-validator.mjs","names":["AttributeNamesPolicyValidator","AttributesPolicyValidator","BuiltInPolicyType","DatePolicyValidator","TimePolicyValidator","omitRecord","Container","PolicyAttributesValidator","attributeNames","attributesOptionsValidator","attributeNamesOptionsValidator","dateOptionsValidator","timeOptionsValidator","options","run","data","attributes","type","ATTRIBUTES","ATTRIBUTE_NAMES","DATE","TIME"],"sources":["../../../../../../../src/adapters/http/controllers/entities/policy/utils/attributes-validator.ts"],"sourcesContent":["/*\n * Copyright (c) 2022.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport {\n    AttributeNamesPolicyValidator,\n    AttributesPolicyValidator,\n    BuiltInPolicyType,\n    DatePolicyValidator,\n    TimePolicyValidator,\n} from '@authup/access';\nimport { omitRecord } from '@authup/kit';\nimport type { ContainerOptions } from 'validup';\nimport { Container } from 'validup';\n\ntype PolicyContainerRunOptions<T> = ContainerOptions<T> & {\n    attributeNames?: string[]\n};\n\nexport class PolicyAttributesValidator extends Container<Record<string, any>> {\n    protected attributeNames : string[];\n\n    protected attributesOptionsValidator : AttributesPolicyValidator;\n\n    protected attributeNamesOptionsValidator : AttributeNamesPolicyValidator;\n\n    protected dateOptionsValidator : DatePolicyValidator;\n\n    protected timeOptionsValidator : TimePolicyValidator;\n\n    constructor(options: PolicyContainerRunOptions<Record<string, any>>) {\n        super(options);\n\n        this.attributeNames = options.attributeNames || [];\n\n        this.attributesOptionsValidator = new AttributesPolicyValidator();\n        this.attributeNamesOptionsValidator = new AttributeNamesPolicyValidator();\n        this.dateOptionsValidator = new DatePolicyValidator();\n        this.timeOptionsValidator = new TimePolicyValidator();\n    }\n\n    override async run(\n        data: Record<string, any>,\n    ) : Promise<Record<string, any>> {\n        let attributes : Record<string, any> = {};\n\n        switch (data.type) {\n            case BuiltInPolicyType.ATTRIBUTES: {\n                attributes = await this.attributesOptionsValidator.run(data);\n                break;\n            }\n            case BuiltInPolicyType.ATTRIBUTE_NAMES: {\n                attributes = await this.attributeNamesOptionsValidator.run(data);\n                break;\n            }\n            case BuiltInPolicyType.DATE: {\n                attributes = await this.dateOptionsValidator.run(data);\n                break;\n            }\n            case BuiltInPolicyType.TIME: {\n                attributes = await this.timeOptionsValidator.run(data);\n                break;\n            }\n            default: {\n                if (typeof this.attributeNames !== 'undefined') {\n                    attributes = omitRecord(data, this.attributeNames);\n                    // todo: maybe limit attributes size\n                }\n            }\n        }\n\n        return attributes;\n    }\n}\n"],"mappings":";;;;;;;AAsBA,IAAaO,4BAAb,cAA+CD,UAAAA;CACjCE;CAEAC;CAEAC;CAEAC;CAEAC;CAEV,YAAYC,SAAyD;EACjE,MAAMA,OAAAA;EAEN,KAAKL,iBAAiBK,QAAQL,kBAAkB,CAAA;EAEhD,KAAKC,6BAA6B,IAAIR,0BAAAA;EACtC,KAAKS,iCAAiC,IAAIV,8BAAAA;EAC1C,KAAKW,uBAAuB,IAAIR,oBAAAA;EAChC,KAAKS,uBAAuB,IAAIR,oBAAAA;CACpC;CAEA,MAAeU,IACXC,MAC6B;EAC7B,IAAIC,aAAmC,CAAC;EAExC,QAAQD,KAAKE,MAAb;GACI,KAAKf,kBAAkBgB;IACnBF,aAAa,MAAM,KAAKP,2BAA2BK,IAAIC,IAAAA;IACvD;GAEJ,KAAKb,kBAAkBiB;IACnBH,aAAa,MAAM,KAAKN,+BAA+BI,IAAIC,IAAAA;IAC3D;GAEJ,KAAKb,kBAAkBkB;IACnBJ,aAAa,MAAM,KAAKL,qBAAqBG,IAAIC,IAAAA;IACjD;GAEJ,KAAKb,kBAAkBmB;IACnBL,aAAa,MAAM,KAAKJ,qBAAqBE,IAAIC,IAAAA;IACjD;GAEJ,SACI,IAAI,OAAO,KAAKP,mBAAmB,aAC/BQ,aAAaX,WAAWU,MAAM,KAAKP,cAAc;EAI7D;EAEA,OAAOQ;CACX;AACJ"}

package/dist/adapters/http/controllers/entities/policy/utils/index.d.ts

@@ -0,0 +1,3 @@
+export * from './attributes-validator.ts';
+export * from './validation.ts';
+//# sourceMappingURL=index.d.ts.map

package/dist/adapters/http/controllers/entities/policy/utils/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../../../src/adapters/http/controllers/entities/policy/utils/index.ts"],"names":[],"mappings":"AAOA,cAAc,2BAA2B,CAAC;AAC1C,cAAc,iBAAiB,CAAC"}

package/dist/adapters/http/controllers/entities/policy/utils/index.mjs

@@ -0,0 +1,6 @@
+import "node:path";
+import "node:url";
+import.meta.url;
+import { PolicyAttributesValidator } from "./attributes-validator.mjs";
+import { PolicyValidator } from "./validation.mjs";
+export { PolicyAttributesValidator, PolicyValidator };

package/dist/adapters/http/controllers/entities/policy/utils/validation.d.ts

@@ -0,0 +1,8 @@
+import { Container } from 'validup';
+import type { PolicyEntity } from '../../../../../database/domains/index.ts';
+export declare class PolicyValidator extends Container<PolicyEntity & {
+    parent_id?: string | null;
+}> {
+    protected initialize(): void;
+}
+//# sourceMappingURL=validation.d.ts.map

package/dist/adapters/http/controllers/entities/policy/utils/validation.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"validation.d.ts","sourceRoot":"","sources":["../../../../../../../src/adapters/http/controllers/entities/policy/utils/validation.ts"],"names":[],"mappings":"AAWA,OAAO,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AAGpC,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,0CAA0C,CAAC;AAI7E,qBAAa,eAAgB,SAAQ,SAAS,CAAC,YAAY,GAAG;IAAE,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;CAAE,CAAC;IACxF,SAAS,CAAC,UAAU;CAsFvB"}

package/dist/adapters/http/controllers/entities/policy/utils/validation.mjs

@@ -0,0 +1,54 @@
+import "node:path";
+import "node:url";
+import.meta.url;
+import { RequestHandlerOperation } from "../../../../request/constants.mjs";
+import "../../../../request/index.mjs";
+import { PolicyAttributesValidator } from "./attributes-validator.mjs";
+import { isPolicyNameValid } from "@authup/core-kit";
+import { BuiltInPolicyType } from "@authup/access";
+import { Container } from "validup";
+import { createValidator } from "@validup/zod";
+import { z } from "zod";
+import { isObject } from "smob";
+//#region src/adapters/http/controllers/entities/policy/utils/validation.ts
+var PolicyValidator = class extends Container {
+	initialize() {
+		super.initialize();
+		const nameValidator = createValidator(z.string().trim().toLowerCase().min(3).max(128).check((ctx) => {
+			try {
+				isPolicyNameValid(ctx.value, { throwOnFailure: true });
+			} catch (e) {
+				ctx.issues.push({
+					input: ctx.value,
+					code: "custom",
+					message: e instanceof Error ? e.message : "The policy name is not valid."
+				});
+			}
+		}));
+		this.mount("name", { group: RequestHandlerOperation.CREATE }, nameValidator);
+		this.mount("name", {
+			group: RequestHandlerOperation.UPDATE,
+			optional: true
+		}, nameValidator);
+		this.mount("display_name", { optional: true }, createValidator(z.string().min(3).max(256).nullable()));
+		this.mount("invert", { optional: true }, createValidator(z.boolean()));
+		this.mount("type", { group: RequestHandlerOperation.CREATE }, createValidator(z.string().min(3).max(128)));
+		this.mount("parent_id", { optional: true }, createValidator(z.uuid().nullable()));
+		this.mount("realm_id", { group: RequestHandlerOperation.CREATE }, createValidator(z.uuid().nullable()));
+		this.mount({ optional: true }, new PolicyAttributesValidator({}));
+		this.mount("children", { optional: true }, async (ctx) => {
+			if (!Array.isArray(ctx.value)) return;
+			if (isObject(ctx.data) && ctx.data.type !== BuiltInPolicyType.COMPOSITE) return;
+			const promises = ctx.value.map((child) => this.run(child, {
+				group: ctx.group,
+				flat: false,
+				path: ctx.path
+			}));
+			return Promise.all(promises);
+		});
+	}
+};
+//#endregion
+export { PolicyValidator };
+
+//# sourceMappingURL=validation.mjs.map

package/dist/adapters/http/controllers/entities/policy/utils/validation.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"validation.mjs","names":["BuiltInPolicyType","isPolicyNameValid","isObject","Container","createValidator","z","RequestHandlerOperation","PolicyAttributesValidator","PolicyValidator","initialize","nameValidator","string","trim","toLowerCase","min","max","check","ctx","value","throwOnFailure","e","issues","push","input","code","message","Error","mount","group","CREATE","UPDATE","optional","nullable","boolean","uuid","Array","isArray","undefined","data","type","COMPOSITE","promises","map","child","run","flat","path","Promise","all"],"sources":["../../../../../../../src/adapters/http/controllers/entities/policy/utils/validation.ts"],"sourcesContent":["/*\n * Copyright (c) 2022.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport { BuiltInPolicyType } from '@authup/access';\nimport { isPolicyNameValid } from '@authup/core-kit';\nimport { isObject } from 'smob';\nimport type { ValidatorContext } from 'validup';\nimport { Container } from 'validup';\nimport { createValidator } from '@validup/zod';\nimport { z } from 'zod';\nimport type { PolicyEntity } from '../../../../../database/domains/index.ts';\nimport { RequestHandlerOperation } from '../../../../request/index.ts';\nimport { PolicyAttributesValidator } from './attributes-validator.ts';\n\nexport class PolicyValidator extends Container<PolicyEntity & { parent_id?: string | null }> {\n    protected initialize() {\n        super.initialize();\n\n        const nameValidator = createValidator(\n            z.string()\n                .trim()\n                .toLowerCase()\n                .min(3)\n                .max(128)\n                .check((ctx) => {\n                    try {\n                        isPolicyNameValid(ctx.value, { throwOnFailure: true });\n                    } catch (e) {\n                        ctx.issues.push({\n                            input: ctx.value,\n                            code: 'custom',\n                            message: e instanceof Error ? e.message : 'The policy name is not valid.',\n                        });\n                    }\n                }),\n        );\n\n        this.mount('name', { group: RequestHandlerOperation.CREATE }, nameValidator);\n        this.mount('name', {\n            group: RequestHandlerOperation.UPDATE,\n            optional: true,\n        }, nameValidator);\n\n        this.mount(\n            'display_name',\n            { optional: true },\n            createValidator(z.string().min(3).max(256).nullable()),\n        );\n\n        this.mount(\n            'invert',\n            { optional: true },\n            createValidator(z.boolean()),\n        );\n\n        this.mount(\n            'type',\n            { group: RequestHandlerOperation.CREATE },\n            createValidator(z.string().min(3).max(128)),\n        );\n\n        this.mount(\n            'parent_id',\n            { optional: true },\n            createValidator(z.uuid().nullable()),\n        );\n\n        this.mount(\n            'realm_id',\n            { group: RequestHandlerOperation.CREATE },\n            createValidator(z.uuid().nullable()),\n        );\n\n        this.mount({ optional: true }, new PolicyAttributesValidator({}));\n\n        this.mount(\n            'children',\n            { optional: true },\n            async (ctx: ValidatorContext) => {\n                if (!Array.isArray(ctx.value)) {\n                    // todo: throw error\n                    return undefined;\n                }\n\n                if (\n                    isObject(ctx.data) &&\n                    ctx.data.type !== BuiltInPolicyType.COMPOSITE\n                ) {\n                    return undefined;\n                }\n\n                const promises = ctx.value.map((child) => this.run(child, {\n                    group: ctx.group,\n                    flat: false,\n                    path: ctx.path,\n                }));\n\n                return Promise.all(promises);\n            },\n        );\n    }\n}\n"],"mappings":";;;;;;;;;;;;;AAkBA,IAAaQ,kBAAb,cAAqCL,UAAAA;CACvBM,aAAa;EACnB,MAAMA,WAAAA;EAEN,MAAMC,gBAAgBN,gBAClBC,EAAEM,OAAM,CAAA,CACHC,KAAI,CAAA,CACJC,YAAW,CAAA,CACXC,IAAI,CAAA,CAAA,CACJC,IAAI,GAAA,CAAA,CACJC,OAAOC,QAAAA;GACJ,IAAI;IACAhB,kBAAkBgB,IAAIC,OAAO,EAAEC,gBAAgB,KAAK,CAAA;GACxD,SAASC,GAAG;IACRH,IAAII,OAAOC,KAAK;KACZC,OAAON,IAAIC;KACXM,MAAM;KACNC,SAASL,aAAaM,QAAQN,EAAEK,UAAU;IAC9C,CAAA;GACJ;EACJ,CAAA,CAAA;EAGR,KAAKE,MAAM,QAAQ,EAAEC,OAAOtB,wBAAwBuB,OAAO,GAAGnB,aAAAA;EAC9D,KAAKiB,MAAM,QAAQ;GACfC,OAAOtB,wBAAwBwB;GAC/BC,UAAU;EACd,GAAGrB,aAAAA;EAEH,KAAKiB,MACD,gBACA,EAAEI,UAAU,KAAK,GACjB3B,gBAAgBC,EAAEM,OAAM,CAAA,CAAGG,IAAI,CAAA,CAAA,CAAGC,IAAI,GAAA,CAAA,CAAKiB,SAAQ,CAAA,CAAA;EAGvD,KAAKL,MACD,UACA,EAAEI,UAAU,KAAK,GACjB3B,gBAAgBC,EAAE4B,QAAO,CAAA,CAAA;EAG7B,KAAKN,MACD,QACA,EAAEC,OAAOtB,wBAAwBuB,OAAO,GACxCzB,gBAAgBC,EAAEM,OAAM,CAAA,CAAGG,IAAI,CAAA,CAAA,CAAGC,IAAI,GAAA,CAAA,CAAA;EAG1C,KAAKY,MACD,aACA,EAAEI,UAAU,KAAK,GACjB3B,gBAAgBC,EAAE6B,KAAI,CAAA,CAAGF,SAAQ,CAAA,CAAA;EAGrC,KAAKL,MACD,YACA,EAAEC,OAAOtB,wBAAwBuB,OAAO,GACxCzB,gBAAgBC,EAAE6B,KAAI,CAAA,CAAGF,SAAQ,CAAA,CAAA;EAGrC,KAAKL,MAAM,EAAEI,UAAU,KAAK,GAAG,IAAIxB,0BAA0B,CAAC,CAAA,CAAA;EAE9D,KAAKoB,MACD,YACA,EAAEI,UAAU,KAAK,GACjB,OAAOd,QAAAA;GACH,IAAI,CAACkB,MAAMC,QAAQnB,IAAIC,KAAK,GAExB;GAGJ,IACIhB,SAASe,IAAIqB,IAAI,KACjBrB,IAAIqB,KAAKC,SAASvC,kBAAkBwC,WAEpC;GAGJ,MAAMC,WAAWxB,IAAIC,MAAMwB,KAAKC,UAAU,KAAKC,IAAID,OAAO;IACtDf,OAAOX,IAAIW;IACXiB,MAAM;IACNC,MAAM7B,IAAI6B;GACd,CAAA,CAAA;GAEA,OAAOC,QAAQC,IAAIP,QAAAA;EACvB,CAAA;CAER;AACJ"}

package/dist/adapters/http/controllers/entities/realm/index.d.ts

@@ -0,0 +1,2 @@
+export * from './module.ts';
+//# sourceMappingURL=index.d.ts.map

package/dist/adapters/http/controllers/entities/realm/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../../src/adapters/http/controllers/entities/realm/index.ts"],"names":[],"mappings":"AAOA,cAAc,aAAa,CAAC"}

package/dist/adapters/http/controllers/entities/realm/index.mjs

@@ -0,0 +1,5 @@
+import "node:path";
+import "node:url";
+import.meta.url;
+import { RealmController } from "./module.mjs";
+export { RealmController };

package/dist/adapters/http/controllers/entities/realm/module.d.ts

@@ -0,0 +1,33 @@
+import type { OAuth2JsonWebKey, OpenIDProviderMetadata } from '@authup/specs';
+import type { IAppEvent } from 'routup';
+import type { Repository } from 'typeorm';
+import type { EntityCollectionResponse, RealmCreatePayload, RealmSavePayload, RealmUpdatePayload } from '@authup/core-http-kit';
+import type { Realm } from '@authup/core-kit';
+import type { IRealmService } from '../../../../../core/index.ts';
+import type { KeyEntity } from '../../../../database/domains/index.ts';
+export type RealmControllerOptions = {
+    baseURL: string;
+};
+export type RealmControllerContext = {
+    options: RealmControllerOptions;
+    service: IRealmService;
+    keyRepository: Repository<KeyEntity>;
+};
+export declare class RealmController {
+    protected options: RealmControllerOptions;
+    protected service: IRealmService;
+    protected keyRepository: Repository<KeyEntity>;
+    constructor(ctx: RealmControllerContext);
+    getMany(event: IAppEvent): Promise<EntityCollectionResponse<Realm>>;
+    add(data: RealmCreatePayload, event: IAppEvent): Promise<Realm>;
+    get(id: string): Promise<Realm>;
+    getOpenIdConfiguration(id: string): Promise<OpenIDProviderMetadata>;
+    getCerts(id: string): Promise<{
+        keys: OAuth2JsonWebKey[];
+    }>;
+    getCert(id: string, keyId: string): Promise<OAuth2JsonWebKey>;
+    edit(id: string, data: RealmUpdatePayload, event: IAppEvent): Promise<Realm>;
+    put(id: string, data: RealmSavePayload, event: IAppEvent): Promise<Realm>;
+    drop(id: string, event: IAppEvent): Promise<Realm>;
+}
+//# sourceMappingURL=module.d.ts.map

package/dist/adapters/http/controllers/entities/realm/module.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"module.d.ts","sourceRoot":"","sources":["../../../../../../src/adapters/http/controllers/entities/realm/module.ts"],"names":[],"mappings":"AAkBA,OAAO,KAAK,EAAE,gBAAgB,EAAE,sBAAsB,EAAE,MAAM,eAAe,CAAC;AAE9E,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,QAAQ,CAAC;AAExC,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AAC1C,OAAO,KAAK,EACR,wBAAwB,EACxB,kBAAkB,EAClB,gBAAgB,EAChB,kBAAkB,EACrB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,kBAAkB,CAAC;AAC9C,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,8BAA8B,CAAC;AAClE,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,uCAAuC,CAAC;AAMvE,MAAM,MAAM,sBAAsB,GAAG;IACjC,OAAO,EAAE,MAAM,CAAA;CAClB,CAAC;AAEF,MAAM,MAAM,sBAAsB,GAAG;IACjC,OAAO,EAAE,sBAAsB,CAAC;IAChC,OAAO,EAAE,aAAa,CAAC;IACvB,aAAa,EAAE,UAAU,CAAC,SAAS,CAAC,CAAC;CACxC,CAAC;AAEF,qBAEa,eAAe;IACxB,SAAS,CAAC,OAAO,EAAE,sBAAsB,CAAC;IAE1C,SAAS,CAAC,OAAO,EAAE,aAAa,CAAC;IAEjC,SAAS,CAAC,aAAa,EAAE,UAAU,CAAC,SAAS,CAAC,CAAC;gBAEnC,GAAG,EAAE,sBAAsB;IAOjC,OAAO,CACG,KAAK,EAAE,SAAS,GAC7B,OAAO,CAAC,wBAAwB,CAAC,KAAK,CAAC,CAAC;IAarC,GAAG,CACI,IAAI,EAAE,kBAAkB,EACrB,KAAK,EAAE,SAAS,GAC5B,OAAO,CAAC,KAAK,CAAC;IAUZ,GAAG,CAAc,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,KAAK,CAAC;IAK5C,sBAAsB,CACX,EAAE,EAAE,MAAM,GACxB,OAAO,CAAC,sBAAsB,CAAC;IA+C5B,QAAQ,CAAc,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC;QAAE,IAAI,EAAE,gBAAgB,EAAE,CAAA;KAAE,CAAC;IAMxE,OAAO,CACI,EAAE,EAAE,MAAM,EACP,KAAK,EAAE,MAAM,GAC9B,OAAO,CAAC,gBAAgB,CAAC;IAMtB,IAAI,CACO,EAAE,EAAE,MAAM,EACd,IAAI,EAAE,kBAAkB,EACrB,KAAK,EAAE,SAAS,GAC5B,OAAO,CAAC,KAAK,CAAC;IAcZ,GAAG,CACQ,EAAE,EAAE,MAAM,EACd,IAAI,EAAE,gBAAgB,EACnB,KAAK,EAAE,SAAS,GAC5B,OAAO,CAAC,KAAK,CAAC;IAgBZ,IAAI,CACO,EAAE,EAAE,MAAM,EACX,KAAK,EAAE,SAAS,GAC5B,OAAO,CAAC,KAAK,CAAC;CAQrB"}

package/dist/adapters/http/controllers/entities/realm/module.mjs

@@ -0,0 +1,198 @@
+import "node:path";
+import "node:url";
+import.meta.url;
+import { buildActorContext } from "../../../request/helpers/actor.mjs";
+import "../../../request/index.mjs";
+import { resolveURL } from "../../../../../utils/url.mjs";
+import "../../../../../utils/index.mjs";
+import { ForceLoggedInMiddleware } from "../../../middleware/built-in/loggedin/module.mjs";
+import "../../../middleware/index.mjs";
+import { getJwkRouteHandler, getJwksRouteHandler } from "../../workflows/jwks/handlers/read.mjs";
+import "../../workflows/index.mjs";
+import { OAuth2AuthorizationResponseType } from "@authup/specs";
+import { DBody, DContext, DController, DDelete, DGet, DPath, DPost, DPut, DTags } from "@routup/decorators";
+import { useRequestQuery } from "@routup/basic/query";
+//#region src/adapters/http/controllers/entities/realm/module.ts
+function _ts_decorate(decorators, target, key, desc) {
+	var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+	if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+	else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+	return c > 3 && r && Object.defineProperty(target, key, r), r;
+}
+function _ts_metadata(k, v) {
+	if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+}
+function _ts_param(paramIndex, decorator) {
+	return function(target, key) {
+		decorator(target, key, paramIndex);
+	};
+}
+var RealmController = class {
+	options;
+	service;
+	keyRepository;
+	constructor(ctx) {
+		this.options = ctx.options;
+		this.service = ctx.service;
+		this.keyRepository = ctx.keyRepository;
+	}
+	async getMany(event) {
+		const { data, meta } = await this.service.getMany(useRequestQuery(event));
+		return {
+			data,
+			meta
+		};
+	}
+	async add(data, event) {
+		const actor = buildActorContext(event);
+		const entity = await this.service.create(data, actor);
+		event.response.status = 201;
+		return entity;
+	}
+	async get(id) {
+		return this.service.getOne(id);
+	}
+	async getOpenIdConfiguration(id) {
+		const entity = await this.service.getOne(id);
+		const { baseURL } = this.options;
+		return {
+			issuer: resolveURL(baseURL, `realms/${entity.name}`).replace(/\/+$/, ""),
+			authorization_endpoint: resolveURL(baseURL, "authorize"),
+			jwks_uri: resolveURL(baseURL, `realms/${entity.name}/jwks`),
+			response_types_supported: [
+				OAuth2AuthorizationResponseType.CODE,
+				OAuth2AuthorizationResponseType.TOKEN,
+				OAuth2AuthorizationResponseType.NONE
+			],
+			subject_types_supported: ["public"],
+			id_token_signing_alg_values_supported: [
+				"HS256",
+				"HS384",
+				"HS512",
+				"RS256",
+				"RS384",
+				"RS512",
+				"none"
+			],
+			token_endpoint: resolveURL(baseURL, "token"),
+			introspection_endpoint: resolveURL(baseURL, "token/introspect"),
+			revocation_endpoint: resolveURL(baseURL, "token"),
+			service_documentation: "https://authup.org/",
+			userinfo_endpoint: resolveURL(baseURL, "users/@me")
+		};
+	}
+	async getCerts(id) {
+		const entity = await this.service.getOne(id);
+		return getJwksRouteHandler(this.keyRepository, entity.id);
+	}
+	async getCert(id, keyId) {
+		const entity = await this.service.getOne(id);
+		return getJwkRouteHandler(this.keyRepository, keyId, entity.id);
+	}
+	async edit(id, data, event) {
+		const actor = buildActorContext(event);
+		const entity = await this.service.update(id, data, actor);
+		event.response.status = 202;
+		return entity;
+	}
+	async put(id, data, event) {
+		const actor = buildActorContext(event);
+		const { entity, created } = await this.service.save(id || void 0, data, actor);
+		event.response.status = created ? 201 : 202;
+		return entity;
+	}
+	async drop(id, event) {
+		const actor = buildActorContext(event);
+		const entity = await this.service.delete(id, actor);
+		event.response.status = 202;
+		return entity;
+	}
+};
+_ts_decorate([
+	DGet("", []),
+	_ts_param(0, DContext()),
+	_ts_metadata("design:type", Function),
+	_ts_metadata("design:paramtypes", [typeof IAppEvent === "undefined" ? Object : IAppEvent]),
+	_ts_metadata("design:returntype", Promise)
+], RealmController.prototype, "getMany", null);
+_ts_decorate([
+	DPost("", [ForceLoggedInMiddleware]),
+	_ts_param(0, DBody()),
+	_ts_param(1, DContext()),
+	_ts_metadata("design:type", Function),
+	_ts_metadata("design:paramtypes", [typeof RealmCreatePayload === "undefined" ? Object : RealmCreatePayload, typeof IAppEvent === "undefined" ? Object : IAppEvent]),
+	_ts_metadata("design:returntype", Promise)
+], RealmController.prototype, "add", null);
+_ts_decorate([
+	DGet("/:id", []),
+	_ts_param(0, DPath("id")),
+	_ts_metadata("design:type", Function),
+	_ts_metadata("design:paramtypes", [String]),
+	_ts_metadata("design:returntype", Promise)
+], RealmController.prototype, "get", null);
+_ts_decorate([
+	DGet("/:id/.well-known/openid-configuration", []),
+	_ts_param(0, DPath("id")),
+	_ts_metadata("design:type", Function),
+	_ts_metadata("design:paramtypes", [String]),
+	_ts_metadata("design:returntype", Promise)
+], RealmController.prototype, "getOpenIdConfiguration", null);
+_ts_decorate([
+	DGet("/:id/jwks", []),
+	_ts_param(0, DPath("id")),
+	_ts_metadata("design:type", Function),
+	_ts_metadata("design:paramtypes", [String]),
+	_ts_metadata("design:returntype", Promise)
+], RealmController.prototype, "getCerts", null);
+_ts_decorate([
+	DGet("/:id/jwks/:keyId", []),
+	_ts_param(0, DPath("id")),
+	_ts_param(1, DPath("keyId")),
+	_ts_metadata("design:type", Function),
+	_ts_metadata("design:paramtypes", [String, String]),
+	_ts_metadata("design:returntype", Promise)
+], RealmController.prototype, "getCert", null);
+_ts_decorate([
+	DPost("/:id", [ForceLoggedInMiddleware]),
+	_ts_param(0, DPath("id")),
+	_ts_param(1, DBody()),
+	_ts_param(2, DContext()),
+	_ts_metadata("design:type", Function),
+	_ts_metadata("design:paramtypes", [
+		String,
+		typeof RealmUpdatePayload === "undefined" ? Object : RealmUpdatePayload,
+		typeof IAppEvent === "undefined" ? Object : IAppEvent
+	]),
+	_ts_metadata("design:returntype", Promise)
+], RealmController.prototype, "edit", null);
+_ts_decorate([
+	DPut("/:id", [ForceLoggedInMiddleware]),
+	_ts_param(0, DPath("id")),
+	_ts_param(1, DBody()),
+	_ts_param(2, DContext()),
+	_ts_metadata("design:type", Function),
+	_ts_metadata("design:paramtypes", [
+		String,
+		typeof RealmSavePayload === "undefined" ? Object : RealmSavePayload,
+		typeof IAppEvent === "undefined" ? Object : IAppEvent
+	]),
+	_ts_metadata("design:returntype", Promise)
+], RealmController.prototype, "put", null);
+_ts_decorate([
+	DDelete("/:id", [ForceLoggedInMiddleware]),
+	_ts_param(0, DPath("id")),
+	_ts_param(1, DContext()),
+	_ts_metadata("design:type", Function),
+	_ts_metadata("design:paramtypes", [String, typeof IAppEvent === "undefined" ? Object : IAppEvent]),
+	_ts_metadata("design:returntype", Promise)
+], RealmController.prototype, "drop", null);
+RealmController = _ts_decorate([
+	DTags("realm"),
+	DController("/realms"),
+	_ts_metadata("design:type", Function),
+	_ts_metadata("design:paramtypes", [typeof RealmControllerContext === "undefined" ? Object : RealmControllerContext])
+], RealmController);
+//#endregion
+export { RealmController };
+
+//# sourceMappingURL=module.mjs.map