@authup/server-core 1.0.0-beta.5 → 1.0.0-beta.51

package/dist/adapters/http/controllers/index.mjs

@@ -0,0 +1,49 @@
+import "node:path";
+import "node:url";
+import.meta.url;
+import { ClientController } from "./entities/client/module.mjs";
+import { ClientPermissionController } from "./entities/client-permission/module.mjs";
+import { ClientPermissionRequestValidator } from "./entities/client-permission/utils/validation.mjs";
+import { ClientRoleRequestValidator } from "./entities/client-role/utils/validation.mjs";
+import { ClientRoleController } from "./entities/client-role/module.mjs";
+import { ClientScopeController } from "./entities/client-scope/module.mjs";
+import { ClientScopeRequestValidator } from "./entities/client-scope/utils/validator.mjs";
+import { IdentityProviderController } from "./entities/identity-provider/module.mjs";
+import { IdentityProviderRoleMappingController } from "./entities/identity-provide-role/module.mjs";
+import { PermissionController } from "./entities/permission/module.mjs";
+import { PermissionPolicyController } from "./entities/permission-policy/module.mjs";
+import { ActivateController } from "./workflows/activate/module.mjs";
+import { AuthorizeController } from "./workflows/authorize/module.mjs";
+import { getJwkRouteHandler, getJwksRouteHandler } from "./workflows/jwks/handlers/read.mjs";
+import { JwkController } from "./workflows/jwks/module.mjs";
+import { OpenIDController } from "./workflows/openid/module.mjs";
+import { PasswordForgotController } from "./workflows/password-forgot/module.mjs";
+import { PasswordResetController } from "./workflows/password-reset/module.mjs";
+import { RegisterController } from "./workflows/register/module.mjs";
+import { StatusController } from "./workflows/status/module.mjs";
+import { TokenController } from "./workflows/token/module.mjs";
+import "./workflows/index.mjs";
+import { RealmController } from "./entities/realm/module.mjs";
+import { RobotController } from "./entities/robot/module.mjs";
+import { RobotPermissionController } from "./entities/robot-permission/module.mjs";
+import { RobotPermissionRequestValidator } from "./entities/robot-permission/utils/validation.mjs";
+import { RobotRoleController } from "./entities/robot-role/module.mjs";
+import { RobotRoleRequestValidator } from "./entities/robot-role/utils/validation.mjs";
+import { RoleController } from "./entities/role/module.mjs";
+import { RoleAttributeController } from "./entities/role-attribute/module.mjs";
+import { RoleAttributeRequestValidator } from "./entities/role-attribute/utils/validation.mjs";
+import { RolePermissionController } from "./entities/role-permission/module.mjs";
+import { RolePermissionRequestValidator } from "./entities/role-permission/utils/validation.mjs";
+import { PolicyController } from "./entities/policy/module.mjs";
+import { PolicyAttributesValidator } from "./entities/policy/utils/attributes-validator.mjs";
+import { PolicyValidator } from "./entities/policy/utils/validation.mjs";
+import { ScopeController } from "./entities/scope/module.mjs";
+import { UserController } from "./entities/user/module.mjs";
+import { UserAttributeController } from "./entities/user-attribute/module.mjs";
+import { UserAttributeRequestValidator } from "./entities/user-attribute/utils/validation.mjs";
+import { UserPermissionController } from "./entities/user-permission/module.mjs";
+import { UserPermissionRequestValidator } from "./entities/user-permission/utils/validation.mjs";
+import { UserRoleController } from "./entities/user-role/module.mjs";
+import { UserRoleRequestValidator } from "./entities/user-role/utils/validation.mjs";
+import "./entities/index.mjs";
+export { ActivateController, AuthorizeController, ClientController, ClientPermissionController, ClientPermissionRequestValidator, ClientRoleController, ClientRoleRequestValidator, ClientScopeController, ClientScopeRequestValidator, IdentityProviderController, IdentityProviderRoleMappingController, JwkController, OpenIDController, PasswordForgotController, PasswordResetController, PermissionController, PermissionPolicyController, PolicyAttributesValidator, PolicyController, PolicyValidator, RealmController, RegisterController, RobotController, RobotPermissionController, RobotPermissionRequestValidator, RobotRoleController, RobotRoleRequestValidator, RoleAttributeController, RoleAttributeRequestValidator, RoleController, RolePermissionController, RolePermissionRequestValidator, ScopeController, StatusController, TokenController, UserAttributeController, UserAttributeRequestValidator, UserController, UserPermissionController, UserPermissionRequestValidator, UserRoleController, UserRoleRequestValidator, getJwkRouteHandler, getJwksRouteHandler };

package/dist/adapters/http/controllers/workflows/activate/index.d.ts

@@ -0,0 +1,2 @@
+export * from './module.ts';
+//# sourceMappingURL=index.d.ts.map

package/dist/adapters/http/controllers/workflows/activate/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../../src/adapters/http/controllers/workflows/activate/index.ts"],"names":[],"mappings":"AAOA,cAAc,aAAa,CAAC"}

package/dist/adapters/http/controllers/workflows/activate/index.mjs

@@ -0,0 +1,5 @@
+import "node:path";
+import "node:url";
+import.meta.url;
+import { ActivateController } from "./module.mjs";
+export { ActivateController };

package/dist/adapters/http/controllers/workflows/activate/module.d.ts

@@ -0,0 +1,19 @@
+import type { IAppEvent } from 'routup';
+import type { ActivatePayload, StatusResponseFeatures } from '@authup/core-http-kit';
+import type { IRegistrationService } from '../../../../../core/index.ts';
+export type ActivateControllerOptions = {
+    baseURL: string;
+    features: StatusResponseFeatures;
+};
+export type ActivateControllerContext = {
+    options: ActivateControllerOptions;
+    service: IRegistrationService;
+};
+export declare class ActivateController {
+    protected options: ActivateControllerOptions;
+    protected service: IRegistrationService;
+    constructor(ctx: ActivateControllerContext);
+    serve(event: IAppEvent): Promise<string>;
+    execute(data: ActivatePayload, event: IAppEvent): Promise<null>;
+}
+//# sourceMappingURL=module.d.ts.map

package/dist/adapters/http/controllers/workflows/activate/module.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"module.d.ts","sourceRoot":"","sources":["../../../../../../src/adapters/http/controllers/workflows/activate/module.ts"],"names":[],"mappings":"AAcA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,QAAQ,CAAC;AACxC,OAAO,KAAK,EAAE,eAAe,EAAE,sBAAsB,EAAE,MAAM,uBAAuB,CAAC;AACrF,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,8BAA8B,CAAC;AAIzE,MAAM,MAAM,yBAAyB,GAAG;IACpC,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,sBAAsB,CAAC;CACpC,CAAC;AAEF,MAAM,MAAM,yBAAyB,GAAG;IACpC,OAAO,EAAE,yBAAyB,CAAC;IACnC,OAAO,EAAE,oBAAoB,CAAC;CACjC,CAAC;AAEF,qBACa,kBAAkB;IAC3B,SAAS,CAAC,OAAO,EAAE,yBAAyB,CAAC;IAE7C,SAAS,CAAC,OAAO,EAAE,oBAAoB,CAAC;gBAE5B,GAAG,EAAE,yBAAyB;IAMpC,KAAK,CAAa,KAAK,EAAE,SAAS,GAAG,OAAO,CAAC,MAAM,CAAC;IAUpD,OAAO,CACA,IAAI,EAAE,eAAe,EAClB,KAAK,EAAE,SAAS,GAC7B,OAAO,CAAC,IAAI,CAAC;CASnB"}

package/dist/adapters/http/controllers/workflows/activate/module.mjs

@@ -0,0 +1,68 @@
+import "node:path";
+import "node:url";
+import.meta.url;
+import { serveWorkflowPage } from "../../../ui/serve.mjs";
+import "../../../ui/index.mjs";
+import { ActivateRequestValidator } from "./validator.mjs";
+import { DBody, DContext, DController, DGet, DPost } from "@routup/decorators";
+//#region src/adapters/http/controllers/workflows/activate/module.ts
+function _ts_decorate(decorators, target, key, desc) {
+	var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+	if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+	else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+	return c > 3 && r && Object.defineProperty(target, key, r), r;
+}
+function _ts_metadata(k, v) {
+	if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+}
+function _ts_param(paramIndex, decorator) {
+	return function(target, key) {
+		decorator(target, key, paramIndex);
+	};
+}
+var ActivateController = class {
+	options;
+	service;
+	constructor(ctx) {
+		this.options = ctx.options;
+		this.service = ctx.service;
+	}
+	async serve(event) {
+		return serveWorkflowPage(event, {
+			url: "/activate",
+			baseURL: this.options.baseURL,
+			features: this.options.features,
+			tokenAware: true
+		});
+	}
+	async execute(data, event) {
+		const validated = await new ActivateRequestValidator().run(data);
+		await this.service.activate(validated);
+		event.response.status = 202;
+		return null;
+	}
+};
+_ts_decorate([
+	DGet("", []),
+	_ts_param(0, DContext()),
+	_ts_metadata("design:type", Function),
+	_ts_metadata("design:paramtypes", [typeof IAppEvent === "undefined" ? Object : IAppEvent]),
+	_ts_metadata("design:returntype", Promise)
+], ActivateController.prototype, "serve", null);
+_ts_decorate([
+	DPost("", []),
+	_ts_param(0, DBody()),
+	_ts_param(1, DContext()),
+	_ts_metadata("design:type", Function),
+	_ts_metadata("design:paramtypes", [typeof ActivatePayload === "undefined" ? Object : ActivatePayload, typeof IAppEvent === "undefined" ? Object : IAppEvent]),
+	_ts_metadata("design:returntype", Promise)
+], ActivateController.prototype, "execute", null);
+ActivateController = _ts_decorate([
+	DController("/activate"),
+	_ts_metadata("design:type", Function),
+	_ts_metadata("design:paramtypes", [typeof ActivateControllerContext === "undefined" ? Object : ActivateControllerContext])
+], ActivateController);
+//#endregion
+export { ActivateController };
+
+//# sourceMappingURL=module.mjs.map

package/dist/adapters/http/controllers/workflows/activate/module.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"module.mjs","names":["DBody","DContext","DController","DGet","DPost","serveWorkflowPage","ActivateRequestValidator","ActivateController","options","service","ctx","serve","event","url","baseURL","features","tokenAware","execute","data","validator","validated","run","activate","response","status"],"sources":["../../../../../../src/adapters/http/controllers/workflows/activate/module.ts"],"sourcesContent":["/*\n * Copyright (c) 2022-2024.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport {\n    DBody,\n    DContext,\n    DController,\n    DGet,\n    DPost,\n} from '@routup/decorators';\nimport type { IAppEvent } from 'routup';\nimport type { ActivatePayload, StatusResponseFeatures } from '@authup/core-http-kit';\nimport type { IRegistrationService } from '../../../../../core/index.ts';\nimport { serveWorkflowPage } from '../../../ui/index.ts';\nimport { ActivateRequestValidator } from './validator.ts';\n\nexport type ActivateControllerOptions = {\n    baseURL: string,\n    features: StatusResponseFeatures,\n};\n\nexport type ActivateControllerContext = {\n    options: ActivateControllerOptions,\n    service: IRegistrationService,\n};\n\n@DController('/activate')\nexport class ActivateController {\n    protected options: ActivateControllerOptions;\n\n    protected service: IRegistrationService;\n\n    constructor(ctx: ActivateControllerContext) {\n        this.options = ctx.options;\n        this.service = ctx.service;\n    }\n\n    @DGet('', [])\n    async serve(@DContext() event: IAppEvent): Promise<string> {\n        return serveWorkflowPage(event, {\n            url: '/activate',\n            baseURL: this.options.baseURL,\n            features: this.options.features,\n            tokenAware: true,\n        });\n    }\n\n    @DPost('', [])\n    async execute(\n        @DBody() data: ActivatePayload,\n        @DContext() event: IAppEvent,\n    ): Promise<null> {\n        const validator = new ActivateRequestValidator();\n        const validated = await validator.run(data);\n\n        await this.service.activate(validated);\n\n        event.response.status = 202;\n        return null;\n    }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;AA+BA,IAAaO,qBAAb,MAAaA;CACCC;CAEAC;CAEV,YAAYC,KAAgC;EACxC,KAAKF,UAAUE,IAAIF;EACnB,KAAKC,UAAUC,IAAID;CACvB;CAEA,MACME,MAAM,OAA+C;EACvD,OAAON,kBAAkBO,OAAO;GAC5BC,KAAK;GACLC,SAAS,KAAKN,QAAQM;GACtBC,UAAU,KAAKP,QAAQO;GACvBC,YAAY;EAChB,CAAA;CACJ;CAEA,MACMC,QACF,MACA,OACa;EAEb,MAAMG,YAAY,MAAMD,IADFb,yBACEa,CAAAA,CAAUE,IAAIH,IAAAA;EAEtC,MAAM,KAAKT,QAAQa,SAASF,SAAAA;EAE5BR,MAAMW,SAASC,SAAS;EACxB,OAAO;CACX;AACJ"}

package/dist/adapters/http/controllers/workflows/activate/validator.d.ts

@@ -0,0 +1,7 @@
+import { Container } from 'validup';
+export declare class ActivateRequestValidator extends Container<{
+    token: string;
+}> {
+    protected initialize(): void;
+}
+//# sourceMappingURL=validator.d.ts.map

package/dist/adapters/http/controllers/workflows/activate/validator.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"validator.d.ts","sourceRoot":"","sources":["../../../../../../src/adapters/http/controllers/workflows/activate/validator.ts"],"names":[],"mappings":"AAQA,OAAO,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AAGpC,qBAAa,wBAAyB,SAAQ,SAAS,CAAC;IAAE,KAAK,EAAE,MAAM,CAAA;CAAE,CAAC;IACtE,SAAS,CAAC,UAAU;CAQvB"}

package/dist/adapters/http/controllers/workflows/activate/validator.mjs

@@ -0,0 +1,17 @@
+import "node:path";
+import "node:url";
+import.meta.url;
+import { Container } from "validup";
+import { createValidator } from "@validup/zod";
+import { z } from "zod";
+//#region src/adapters/http/controllers/workflows/activate/validator.ts
+var ActivateRequestValidator = class extends Container {
+	initialize() {
+		super.initialize();
+		this.mount("token", createValidator(z.string().min(3).max(256)));
+	}
+};
+//#endregion
+export { ActivateRequestValidator };
+
+//# sourceMappingURL=validator.mjs.map

package/dist/adapters/http/controllers/workflows/activate/validator.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"validator.mjs","names":["createValidator","Container","z","ActivateRequestValidator","initialize","mount","string","min","max"],"sources":["../../../../../../src/adapters/http/controllers/workflows/activate/validator.ts"],"sourcesContent":["/*\n * Copyright (c) 2025.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport { createValidator } from '@validup/zod';\nimport { Container } from 'validup';\nimport { z } from 'zod';\n\nexport class ActivateRequestValidator extends Container<{ token: string }> {\n    protected initialize() {\n        super.initialize();\n\n        this.mount(\n            'token',\n            createValidator(z.string().min(3).max(256)),\n        );\n    }\n}\n"],"mappings":";;;;;;;AAWA,IAAaG,2BAAb,cAA8CF,UAAAA;CAChCG,aAAa;EACnB,MAAMA,WAAAA;EAEN,KAAKC,MACD,SACAL,gBAAgBE,EAAEI,OAAM,CAAA,CAAGC,IAAI,CAAA,CAAA,CAAGC,IAAI,GAAA,CAAA,CAAA;CAE9C;AACJ"}

package/dist/adapters/http/controllers/workflows/authorize/index.d.ts

@@ -0,0 +1,3 @@
+export * from './module.ts';
+export * from './types.ts';
+//# sourceMappingURL=index.d.ts.map

package/dist/adapters/http/controllers/workflows/authorize/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../../src/adapters/http/controllers/workflows/authorize/index.ts"],"names":[],"mappings":"AAOA,cAAc,aAAa,CAAC;AAC5B,cAAc,YAAY,CAAC"}

package/dist/adapters/http/controllers/workflows/authorize/index.mjs

@@ -0,0 +1,5 @@
+import "node:path";
+import "node:url";
+import.meta.url;
+import { AuthorizeController } from "./module.mjs";
+export { AuthorizeController };

package/dist/adapters/http/controllers/workflows/authorize/module.d.ts

@@ -0,0 +1,17 @@
+import type { IAppEvent } from 'routup';
+import { HTTPOAuth2Authorizer } from '../../../adapters/index.ts';
+import type { IOAuth2AuthorizationCodeRequestVerifier } from '../../../../../core/index.ts';
+import { OAuth2AuthorizationCodeRequestValidator } from '../../../../../core/index.ts';
+import type { AuthorizeControllerContext, AuthorizeControllerOptions } from './types.ts';
+export declare class AuthorizeController {
+    protected options: AuthorizeControllerOptions;
+    protected codeRequestVerifier: IOAuth2AuthorizationCodeRequestVerifier;
+    protected codeRequestValidator: OAuth2AuthorizationCodeRequestValidator;
+    protected authorizer: HTTPOAuth2Authorizer;
+    constructor(ctx: AuthorizeControllerContext);
+    confirm(event: IAppEvent): Promise<{
+        url: string;
+    }>;
+    serve(event: IAppEvent): Promise<string>;
+}
+//# sourceMappingURL=module.d.ts.map

package/dist/adapters/http/controllers/workflows/authorize/module.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"module.d.ts","sourceRoot":"","sources":["../../../../../../src/adapters/http/controllers/workflows/authorize/module.ts"],"names":[],"mappings":"AAeA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,QAAQ,CAAC;AAGxC,OAAO,EAAE,oBAAoB,EAAE,MAAM,4BAA4B,CAAC;AAGlE,OAAO,KAAK,EAAE,uCAAuC,EAAE,MAAM,8BAA8B,CAAC;AAC5F,OAAO,EAAE,uCAAuC,EAAE,MAAM,8BAA8B,CAAC;AACvF,OAAO,KAAK,EAAE,0BAA0B,EAAE,0BAA0B,EAAE,MAAM,YAAY,CAAC;AAGzF,qBACa,mBAAmB;IAI5B,SAAS,CAAC,OAAO,EAAE,0BAA0B,CAAC;IAE9C,SAAS,CAAC,mBAAmB,EAAG,uCAAuC,CAAC;IAExE,SAAS,CAAC,oBAAoB,EAAG,uCAAuC,CAAC;IAEzE,SAAS,CAAC,UAAU,EAAE,oBAAoB,CAAC;gBAI/B,GAAG,EAAE,0BAA0B;IAmBrC,OAAO,CAAa,KAAK,EAAE,SAAS,GAAG,OAAO,CAAC;QAAE,GAAG,EAAE,MAAM,CAAA;KAAE,CAAC;IAwB/D,KAAK,CAAa,KAAK,EAAE,SAAS,GAAG,OAAO,CAAC,MAAM,CAAC;CA6C7D"}

package/dist/adapters/http/controllers/workflows/authorize/module.mjs

@@ -0,0 +1,117 @@
+import "node:path";
+import "node:url";
+import.meta.url;
+import { OAuth2AuthorizationCodeRequestValidator } from "../../../../../core/oauth2/authorization/code-request/validator.mjs";
+import "../../../../../core/index.mjs";
+import { readFromLocations } from "../../../request/helpers/locations.mjs";
+import "../../../request/index.mjs";
+import { HTTPOAuth2Authorizer } from "../../../adapters/oauth2/authorization/module.mjs";
+import "../../../adapters/index.mjs";
+import { sanitizeError } from "../../../../../utils/error.mjs";
+import "../../../../../utils/index.mjs";
+import { ForceUserLoggedInMiddleware } from "../../../middleware/built-in/loggedin/user.mjs";
+import "../../../middleware/index.mjs";
+import { renderUIPage } from "../../../ui/render.mjs";
+import "../../../ui/index.mjs";
+import { URL } from "node:url";
+import { DContext, DController, DGet, DPost } from "@routup/decorators";
+//#region src/adapters/http/controllers/workflows/authorize/module.ts
+function _ts_decorate(decorators, target, key, desc) {
+	var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+	if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+	else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+	return c > 3 && r && Object.defineProperty(target, key, r), r;
+}
+function _ts_metadata(k, v) {
+	if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+}
+function _ts_param(paramIndex, decorator) {
+	return function(target, key) {
+		decorator(target, key, paramIndex);
+	};
+}
+var AuthorizeController = class {
+	options;
+	codeRequestVerifier;
+	codeRequestValidator;
+	authorizer;
+	constructor(ctx) {
+		this.options = ctx.options;
+		this.codeRequestVerifier = ctx.codeRequestVerifier;
+		this.codeRequestValidator = new OAuth2AuthorizationCodeRequestValidator();
+		this.authorizer = new HTTPOAuth2Authorizer({
+			codeRequestVerifier: this.codeRequestVerifier,
+			accessTokenIssuer: ctx.accessTokenIssuer,
+			openIdTokenIssuer: ctx.openIdTokenIssuer,
+			codeIssuer: ctx.codeIssuer,
+			identityResolver: ctx.identityResolver
+		});
+	}
+	async confirm(event) {
+		const result = await this.authorizer.authorizeWithRequest(event);
+		const url = new URL(result.redirectUri);
+		if (result.state) url.searchParams.set("state", result.state);
+		if (result.authorizationCode) url.searchParams.set("code", result.authorizationCode);
+		if (result.accessToken) url.searchParams.set("access_token", result.accessToken);
+		if (result.idToken) url.searchParams.set("id_token", result.idToken);
+		return { url: url.href };
+	}
+	async serve(event) {
+		let codeRequest;
+		let client;
+		let scopes;
+		let error;
+		try {
+			const merged = await readFromLocations(event, ["body", "query"]);
+			const data = await this.codeRequestValidator.run(merged);
+			const result = await this.codeRequestVerifier.verify(data);
+			client = result.client;
+			scopes = result.scopes;
+			codeRequest = result.data;
+		} catch (e) {
+			const normalized = sanitizeError(e);
+			error = {
+				...normalized,
+				message: normalized.message
+			};
+		}
+		const requestURL = new URL(event.request.url);
+		return renderUIPage(event, {
+			url: "/authorize",
+			payload: {
+				config: { baseURL: this.options.baseURL },
+				data: {
+					codeRequest,
+					error,
+					client,
+					scopes,
+					features: this.options.features,
+					requestPath: `${requestURL.pathname}${requestURL.search}`
+				}
+			}
+		});
+	}
+};
+_ts_decorate([
+	DPost("", [ForceUserLoggedInMiddleware]),
+	_ts_param(0, DContext()),
+	_ts_metadata("design:type", Function),
+	_ts_metadata("design:paramtypes", [typeof IAppEvent === "undefined" ? Object : IAppEvent]),
+	_ts_metadata("design:returntype", Promise)
+], AuthorizeController.prototype, "confirm", null);
+_ts_decorate([
+	DGet("", []),
+	_ts_param(0, DContext()),
+	_ts_metadata("design:type", Function),
+	_ts_metadata("design:paramtypes", [typeof IAppEvent === "undefined" ? Object : IAppEvent]),
+	_ts_metadata("design:returntype", Promise)
+], AuthorizeController.prototype, "serve", null);
+AuthorizeController = _ts_decorate([
+	DController("/authorize"),
+	_ts_metadata("design:type", Function),
+	_ts_metadata("design:paramtypes", [typeof AuthorizeControllerContext === "undefined" ? Object : AuthorizeControllerContext])
+], AuthorizeController);
+//#endregion
+export { AuthorizeController };
+
+//# sourceMappingURL=module.mjs.map

package/dist/adapters/http/controllers/workflows/authorize/module.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"module.mjs","names":["DContext","DController","DGet","DPost","URL","ForceUserLoggedInMiddleware","HTTPOAuth2Authorizer","renderUIPage","readFromLocations","OAuth2AuthorizationCodeRequestValidator","sanitizeError","AuthorizeController","options","codeRequestVerifier","codeRequestValidator","authorizer","ctx","accessTokenIssuer","openIdTokenIssuer","codeIssuer","identityResolver","confirm","event","result","authorizeWithRequest","url","redirectUri","state","searchParams","set","authorizationCode","accessToken","idToken","href","serve","codeRequest","client","scopes","error","merged","data","run","verify","e","normalized","message","requestURL","request","payload","config","baseURL","features","requestPath","pathname","search"],"sources":["../../../../../../src/adapters/http/controllers/workflows/authorize/module.ts"],"sourcesContent":["/*\n * Copyright (c) 2024.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport {\n    DContext,\n    DController,\n    DGet,\n    DPost,\n} from '@routup/decorators';\nimport { URL } from 'node:url';\n\nimport type { IAppEvent } from 'routup';\nimport type { Client, OAuth2AuthorizationCodeRequest, Scope } from '@authup/core-kit';\nimport { ForceUserLoggedInMiddleware } from '../../../middleware/index.ts';\nimport { HTTPOAuth2Authorizer } from '../../../adapters/index.ts';\nimport { renderUIPage } from '../../../ui/index.ts';\nimport { readFromLocations } from '../../../request/index.ts';\nimport type { IOAuth2AuthorizationCodeRequestVerifier } from '../../../../../core/index.ts';\nimport { OAuth2AuthorizationCodeRequestValidator } from '../../../../../core/index.ts';\nimport type { AuthorizeControllerContext, AuthorizeControllerOptions } from './types.ts';\nimport { sanitizeError } from '../../../../../utils/index.ts';\n\n@DController('/authorize')\nexport class AuthorizeController {\n    // todo: maybe /realms/<realm>/protocol/openid-connect/authorize\n    // todo: maybe /realms/<realm>/[...]/authorize\n\n    protected options: AuthorizeControllerOptions;\n\n    protected codeRequestVerifier : IOAuth2AuthorizationCodeRequestVerifier;\n\n    protected codeRequestValidator : OAuth2AuthorizationCodeRequestValidator;\n\n    protected authorizer: HTTPOAuth2Authorizer;\n\n    // ---------------------------------------------------------\n\n    constructor(ctx: AuthorizeControllerContext) {\n        this.options = ctx.options;\n\n        this.codeRequestVerifier = ctx.codeRequestVerifier;\n\n        this.codeRequestValidator = new OAuth2AuthorizationCodeRequestValidator();\n\n        this.authorizer = new HTTPOAuth2Authorizer({\n            codeRequestVerifier: this.codeRequestVerifier,\n            accessTokenIssuer: ctx.accessTokenIssuer,\n            openIdTokenIssuer: ctx.openIdTokenIssuer,\n            codeIssuer: ctx.codeIssuer,\n            identityResolver: ctx.identityResolver,\n        });\n    }\n\n    // ---------------------------------------------------------\n\n    @DPost('', [ForceUserLoggedInMiddleware])\n    async confirm(@DContext() event: IAppEvent): Promise<{ url: string }> {\n        const result = await this.authorizer.authorizeWithRequest(event);\n\n        const url = new URL(result.redirectUri);\n        if (result.state) {\n            url.searchParams.set('state', result.state);\n        }\n\n        if (result.authorizationCode) {\n            url.searchParams.set('code', result.authorizationCode);\n        }\n\n        if (result.accessToken) {\n            url.searchParams.set('access_token', result.accessToken);\n        }\n\n        if (result.idToken) {\n            url.searchParams.set('id_token', result.idToken);\n        }\n\n        return { url: url.href };\n    }\n\n    @DGet('', [])\n    async serve(@DContext() event: IAppEvent): Promise<string> {\n        let codeRequest : OAuth2AuthorizationCodeRequest | undefined;\n\n        let client : Client | undefined;\n        let scopes : Scope[] | undefined;\n\n        let error : Error | undefined;\n\n        try {\n            const merged = await readFromLocations(event, ['body', 'query']);\n            const data = await this.codeRequestValidator.run(merged);\n\n            const result = await this.codeRequestVerifier.verify(data);\n            client = result.client;\n            scopes = result.scopes;\n\n            codeRequest = result.data;\n        } catch (e) {\n            const normalized = sanitizeError(e);\n            error = {\n                ...normalized,\n                message: normalized.message,\n            };\n        }\n\n        // Path + query of the original request — the SSR page uses it as\n        // the same-origin `redirect` parameter on register / password links\n        // so those pages can lead back into this authorize request.\n        const requestURL = new URL(event.request.url);\n\n        return renderUIPage(event, {\n            url: '/authorize',\n            payload: {\n                config: { baseURL: this.options.baseURL },\n                data: {\n                    codeRequest,\n                    error,\n                    client,\n                    scopes,\n                    features: this.options.features,\n                    requestPath: `${requestURL.pathname}${requestURL.search}`,\n                },\n            },\n        });\n    }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AA2BA,IAAaW,sBAAb,MAAaA;CAICC;CAEAC;CAEAC;CAEAC;CAIV,YAAYC,KAAiC;EACzC,KAAKJ,UAAUI,IAAIJ;EAEnB,KAAKC,sBAAsBG,IAAIH;EAE/B,KAAKC,uBAAuB,IAAIL,wCAAAA;EAEhC,KAAKM,aAAa,IAAIT,qBAAqB;GACvCO,qBAAqB,KAAKA;GAC1BI,mBAAmBD,IAAIC;GACvBC,mBAAmBF,IAAIE;GACvBC,YAAYH,IAAIG;GAChBC,kBAAkBJ,IAAII;EAC1B,CAAA;CACJ;CAIA,MACMC,QAAQ,OAAwD;EAClE,MAAME,SAAS,MAAM,KAAKR,WAAWS,qBAAqBF,KAAAA;EAE1D,MAAMG,MAAM,IAAIrB,IAAImB,OAAOG,WAAW;EACtC,IAAIH,OAAOI,OACPF,IAAIG,aAAaC,IAAI,SAASN,OAAOI,KAAK;EAG9C,IAAIJ,OAAOO,mBACPL,IAAIG,aAAaC,IAAI,QAAQN,OAAOO,iBAAiB;EAGzD,IAAIP,OAAOQ,aACPN,IAAIG,aAAaC,IAAI,gBAAgBN,OAAOQ,WAAW;EAG3D,IAAIR,OAAOS,SACPP,IAAIG,aAAaC,IAAI,YAAYN,OAAOS,OAAO;EAGnD,OAAO,EAAEP,KAAKA,IAAIQ,KAAK;CAC3B;CAEA,MACMC,MAAM,OAA+C;EACvD,IAAIC;EAEJ,IAAIC;EACJ,IAAIC;EAEJ,IAAIC;EAEJ,IAAI;GACA,MAAMC,SAAS,MAAM/B,kBAAkBc,OAAO,CAAC,QAAQ,OAAA,CAAQ;GAC/D,MAAMkB,OAAO,MAAM,KAAK1B,qBAAqB2B,IAAIF,MAAAA;GAEjD,MAAMhB,SAAS,MAAM,KAAKV,oBAAoB6B,OAAOF,IAAAA;GACrDJ,SAASb,OAAOa;GAChBC,SAASd,OAAOc;GAEhBF,cAAcZ,OAAOiB;EACzB,SAASG,GAAG;GACR,MAAMC,aAAalC,cAAciC,CAAAA;GACjCL,QAAQ;IACJ,GAAGM;IACHC,SAASD,WAAWC;GACxB;EACJ;EAKA,MAAMC,aAAa,IAAI1C,IAAIkB,MAAMyB,QAAQtB,GAAG;EAE5C,OAAOlB,aAAae,OAAO;GACvBG,KAAK;GACLuB,SAAS;IACLC,QAAQ,EAAEC,SAAS,KAAKtC,QAAQsC,QAAQ;IACxCV,MAAM;KACFL;KACAG;KACAF;KACAC;KACAc,UAAU,KAAKvC,QAAQuC;KACvBC,aAAa,GAAGN,WAAWO,WAAWP,WAAWQ;IACrD;GACJ;EACJ,CAAA;CACJ;AACJ;;YAtEgBjD,2BAAAA,CAAAA"}

package/dist/adapters/http/controllers/workflows/authorize/types.d.ts

@@ -0,0 +1,15 @@
+import type { StatusResponseFeatures } from '@authup/core-http-kit';
+import type { IIdentityResolver, IOAuth2AuthorizationCodeIssuer, IOAuth2AuthorizationCodeRequestVerifier, IOAuth2OpenIDTokenIssuer, IOAuth2TokenIssuer } from '../../../../../core/index.ts';
+export type AuthorizeControllerOptions = {
+    baseURL: string;
+    features: StatusResponseFeatures;
+};
+export type AuthorizeControllerContext = {
+    options: AuthorizeControllerOptions;
+    accessTokenIssuer: IOAuth2TokenIssuer;
+    openIdTokenIssuer: IOAuth2OpenIDTokenIssuer;
+    codeIssuer: IOAuth2AuthorizationCodeIssuer;
+    codeRequestVerifier: IOAuth2AuthorizationCodeRequestVerifier;
+    identityResolver: IIdentityResolver;
+};
+//# sourceMappingURL=types.d.ts.map

package/dist/adapters/http/controllers/workflows/authorize/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../../../../src/adapters/http/controllers/workflows/authorize/types.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,uBAAuB,CAAC;AACpE,OAAO,KAAK,EACR,iBAAiB,EACjB,8BAA8B,EAC9B,uCAAuC,EACvC,wBAAwB,EACxB,kBAAkB,EACrB,MAAM,8BAA8B,CAAC;AAEtC,MAAM,MAAM,0BAA0B,GAAG;IACrC,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,sBAAsB,CAAC;CACpC,CAAC;AAEF,MAAM,MAAM,0BAA0B,GAAG;IACrC,OAAO,EAAE,0BAA0B,CAAC;IAEpC,iBAAiB,EAAE,kBAAkB,CAAC;IACtC,iBAAiB,EAAE,wBAAwB,CAAC;IAE5C,UAAU,EAAE,8BAA8B,CAAC;IAC3C,mBAAmB,EAAE,uCAAuC,CAAC;IAE7D,gBAAgB,EAAE,iBAAiB,CAAA;CACtC,CAAC"}

package/dist/adapters/http/controllers/workflows/authorize/types.mjs

@@ -0,0 +1,4 @@
+import "node:path";
+import "node:url";
+import.meta.url;
+export {};

package/dist/adapters/http/controllers/workflows/index.d.ts

@@ -0,0 +1,10 @@
+export * from './activate/index.ts';
+export * from './authorize/index.ts';
+export * from './jwks/index.ts';
+export * from './openid/index.ts';
+export * from './password-forgot/index.ts';
+export * from './password-reset/index.ts';
+export * from './register/index.ts';
+export * from './status/index.ts';
+export * from './token/index.ts';
+//# sourceMappingURL=index.d.ts.map

package/dist/adapters/http/controllers/workflows/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../src/adapters/http/controllers/workflows/index.ts"],"names":[],"mappings":"AAOA,cAAc,qBAAqB,CAAC;AACpC,cAAc,sBAAsB,CAAC;AACrC,cAAc,iBAAiB,CAAC;AAChC,cAAc,mBAAmB,CAAC;AAClC,cAAc,4BAA4B,CAAC;AAC3C,cAAc,2BAA2B,CAAC;AAC1C,cAAc,qBAAqB,CAAC;AACpC,cAAc,mBAAmB,CAAC;AAClC,cAAc,kBAAkB,CAAC"}

package/dist/adapters/http/controllers/workflows/index.mjs

@@ -0,0 +1,23 @@
+import "node:path";
+import "node:url";
+import.meta.url;
+import { ActivateController } from "./activate/module.mjs";
+import "./activate/index.mjs";
+import { AuthorizeController } from "./authorize/module.mjs";
+import "./authorize/index.mjs";
+import { getJwkRouteHandler, getJwksRouteHandler } from "./jwks/handlers/read.mjs";
+import { JwkController } from "./jwks/module.mjs";
+import "./jwks/index.mjs";
+import { OpenIDController } from "./openid/module.mjs";
+import "./openid/index.mjs";
+import { PasswordForgotController } from "./password-forgot/module.mjs";
+import "./password-forgot/index.mjs";
+import { PasswordResetController } from "./password-reset/module.mjs";
+import "./password-reset/index.mjs";
+import { RegisterController } from "./register/module.mjs";
+import "./register/index.mjs";
+import { StatusController } from "./status/module.mjs";
+import "./status/index.mjs";
+import { TokenController } from "./token/module.mjs";
+import "./token/index.mjs";
+export { ActivateController, AuthorizeController, JwkController, OpenIDController, PasswordForgotController, PasswordResetController, RegisterController, StatusController, TokenController, getJwkRouteHandler, getJwksRouteHandler };

package/dist/adapters/http/controllers/workflows/jwks/handlers/index.d.ts

@@ -0,0 +1,2 @@
+export * from './read.ts';
+//# sourceMappingURL=index.d.ts.map

package/dist/adapters/http/controllers/workflows/jwks/handlers/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../../../src/adapters/http/controllers/workflows/jwks/handlers/index.ts"],"names":[],"mappings":"AAOA,cAAc,WAAW,CAAC"}

package/dist/adapters/http/controllers/workflows/jwks/handlers/index.mjs

@@ -0,0 +1,5 @@
+import "node:path";
+import "node:url";
+import.meta.url;
+import { getJwkRouteHandler, getJwksRouteHandler } from "./read.mjs";
+export { getJwkRouteHandler, getJwksRouteHandler };

package/dist/adapters/http/controllers/workflows/jwks/handlers/read.d.ts

@@ -0,0 +1,8 @@
+import type { OAuth2JsonWebKey } from '@authup/specs';
+import type { Repository } from 'typeorm';
+import type { KeyEntity } from '../../../../../database/domains/index.ts';
+export declare function getJwksRouteHandler(repository: Repository<KeyEntity>, realmId?: string): Promise<{
+    keys: OAuth2JsonWebKey[];
+}>;
+export declare function getJwkRouteHandler(repository: Repository<KeyEntity>, keyId: string, realmId?: string): Promise<OAuth2JsonWebKey>;
+//# sourceMappingURL=read.d.ts.map

package/dist/adapters/http/controllers/workflows/jwks/handlers/read.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"read.d.ts","sourceRoot":"","sources":["../../../../../../../src/adapters/http/controllers/workflows/jwks/handlers/read.ts"],"names":[],"mappings":"AAQA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,eAAe,CAAC;AAEtD,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AAE1C,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,0CAA0C,CAAC;AAE1E,wBAAsB,mBAAmB,CACrC,UAAU,EAAE,UAAU,CAAC,SAAS,CAAC,EACjC,OAAO,CAAC,EAAE,MAAM,GAChB,OAAO,CAAC;IAAE,IAAI,EAAE,gBAAgB,EAAE,CAAA;CAAE,CAAC,CA6BxC;AAED,wBAAsB,kBAAkB,CACpC,UAAU,EAAE,UAAU,CAAC,SAAS,CAAC,EACjC,KAAK,EAAE,MAAM,EACb,OAAO,CAAC,EAAE,MAAM,GAChB,OAAO,CAAC,gBAAgB,CAAC,CA+B5B"}

package/dist/adapters/http/controllers/workflows/jwks/handlers/read.mjs

@@ -0,0 +1,47 @@
+import "node:path";
+import "node:url";
+import.meta.url;
+import { In } from "typeorm";
+import { AsymmetricKey } from "@authup/server-kit";
+import { JWKError, JWKType } from "@authup/specs";
+//#region src/adapters/http/controllers/workflows/jwks/handlers/read.ts
+async function getJwksRouteHandler(repository, realmId) {
+	const promises = (await repository.find({
+		where: {
+			type: In([JWKType.RSA, JWKType.EC]),
+			...realmId ? { realm_id: realmId } : {}
+		},
+		order: { priority: "DESC" }
+	})).filter((entity) => !!entity.encryption_key).map((entity) => AsymmetricKey.fromBase64({
+		format: "spki",
+		key: entity.encryption_key,
+		options: AsymmetricKey.buildImportOptionsForJWTAlgorithm(entity.signature_algorithm)
+	}).then((container) => container.toJWK()).then((key) => ({
+		...key,
+		kid: entity.id,
+		alg: entity.signature_algorithm
+	})));
+	return { keys: await Promise.all(promises) };
+}
+async function getJwkRouteHandler(repository, keyId, realmId) {
+	const entity = await repository.findOne({ where: {
+		type: In([JWKType.RSA, JWKType.EC]),
+		id: keyId,
+		...realmId ? { realm_id: realmId } : {}
+	} });
+	if (!entity) throw JWKError.notFound(keyId);
+	if (!entity.encryption_key) throw JWKError.encryptionKeyMissing();
+	return {
+		...await (await AsymmetricKey.fromBase64({
+			format: "spki",
+			key: entity.encryption_key,
+			options: AsymmetricKey.buildImportOptionsForJWTAlgorithm(entity.signature_algorithm)
+		})).toJWK(),
+		kid: entity.id,
+		alg: entity.signature_algorithm
+	};
+}
+//#endregion
+export { getJwkRouteHandler, getJwksRouteHandler };
+
+//# sourceMappingURL=read.mjs.map

package/dist/adapters/http/controllers/workflows/jwks/handlers/read.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"read.mjs","names":["AsymmetricKey","JWKError","JWKType","In","getJwksRouteHandler","repository","realmId","entities","find","where","type","RSA","EC","realm_id","order","priority","promises","filter","entity","encryption_key","map","fromBase64","format","key","options","buildImportOptionsForJWTAlgorithm","signature_algorithm","then","container","toJWK","kid","id","alg","keys","Promise","all","getJwkRouteHandler","keyId","findOne","notFound","encryptionKeyMissing","jsonWebKey"],"sources":["../../../../../../../src/adapters/http/controllers/workflows/jwks/handlers/read.ts"],"sourcesContent":["/*\n * Copyright (c) 2022-2022.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport { AsymmetricKey } from '@authup/server-kit';\nimport type { OAuth2JsonWebKey } from '@authup/specs';\nimport { JWKError, JWKType } from '@authup/specs';\nimport type { Repository } from 'typeorm';\nimport { In } from 'typeorm';\nimport type { KeyEntity } from '../../../../../database/domains/index.ts';\n\nexport async function getJwksRouteHandler(\n    repository: Repository<KeyEntity>,\n    realmId?: string,\n) : Promise<{ keys: OAuth2JsonWebKey[] }> {\n    const entities = await repository.find({\n        where: {\n            type: In([JWKType.RSA, JWKType.EC]),\n            ...(realmId ? { realm_id: realmId } : {}),\n        },\n        order: { priority: 'DESC' },\n    });\n\n    const promises = entities\n        .filter((entity): entity is KeyEntity & { encryption_key: string } => !!entity.encryption_key)\n        .map(\n            (entity) => AsymmetricKey\n                .fromBase64({\n                    format: 'spki',\n                    key: entity.encryption_key,\n                    options: AsymmetricKey.buildImportOptionsForJWTAlgorithm(entity.signature_algorithm),\n                })\n                .then((container) => container.toJWK())\n                .then((key) => ({\n                    ...key,\n                    kid: entity.id,\n                    alg: entity.signature_algorithm,\n                })),\n        );\n\n    const keys = await Promise.all(promises);\n\n    return { keys };\n}\n\nexport async function getJwkRouteHandler(\n    repository: Repository<KeyEntity>,\n    keyId: string,\n    realmId?: string,\n) : Promise<OAuth2JsonWebKey> {\n    const entity = await repository.findOne({\n        where: {\n            type: In([JWKType.RSA, JWKType.EC]),\n            id: keyId,\n            ...(realmId ? { realm_id: realmId } : {}),\n        },\n    });\n\n    if (!entity) {\n        throw JWKError.notFound(keyId);\n    }\n\n    if (!entity.encryption_key) {\n        throw JWKError.encryptionKeyMissing();\n    }\n\n    const container = await AsymmetricKey\n        .fromBase64({\n            format: 'spki',\n            key: entity.encryption_key,\n            options: AsymmetricKey.buildImportOptionsForJWTAlgorithm(entity.signature_algorithm),\n        });\n\n    const jsonWebKey = await container.toJWK();\n\n    return {\n        ...jsonWebKey,\n        kid: entity.id,\n        alg: entity.signature_algorithm,\n    };\n}\n"],"mappings":";;;;;;;AAcA,eAAsBI,oBAClBC,YACAC,SAAgB;CAUhB,MAAMU,YAAWT,MARMF,WAAWG,KAAK;EACnCC,OAAO;GACHC,MAAMP,GAAG,CAACD,QAAQS,KAAKT,QAAQU,EAAAA,CAAG;GAClC,GAAIN,UAAU,EAAEO,UAAUP,QAAQ,IAAI,CAAC;EAC3C;EACAQ,OAAO,EAAEC,UAAU,OAAO;CAC9B,CAAA,EAAA,CAGKE,QAAQC,WAA6D,CAAC,CAACA,OAAOC,cAAc,CAAA,CAC5FC,KACIF,WAAWlB,cACPqB,WAAW;EACRC,QAAQ;EACRC,KAAKL,OAAOC;EACZK,SAASxB,cAAcyB,kCAAkCP,OAAOQ,mBAAmB;CACvF,CAAA,CAAA,CACCC,MAAMC,cAAcA,UAAUC,MAAK,CAAA,CAAA,CACnCF,MAAMJ,SAAS;EACZ,GAAGA;EACHO,KAAKZ,OAAOa;EACZC,KAAKd,OAAOQ;CAChB,EAAA,CAAA;CAKZ,OAAO,EAAEO,MAAAA,MAFUC,QAAQC,IAAInB,QAAAA,EAEjB;AAClB;AAEA,eAAsBoB,mBAClB/B,YACAgC,OACA/B,SAAgB;CAEhB,MAAMY,SAAS,MAAMb,WAAWiC,QAAQ,EACpC7B,OAAO;EACHC,MAAMP,GAAG,CAACD,QAAQS,KAAKT,QAAQU,EAAAA,CAAG;EAClCmB,IAAIM;EACJ,GAAI/B,UAAU,EAAEO,UAAUP,QAAQ,IAAI,CAAC;CAC3C,EACJ,CAAA;CAEA,IAAI,CAACY,QACD,MAAMjB,SAASsC,SAASF,KAAAA;CAG5B,IAAI,CAACnB,OAAOC,gBACR,MAAMlB,SAASuC,qBAAoB;CAYvC,OAAO;EACH,GAAGC,OAHkBb,MAPD5B,cACnBqB,WAAW;GACRC,QAAQ;GACRC,KAAKL,OAAOC;GACZK,SAASxB,cAAcyB,kCAAkCP,OAAOQ,mBAAmB;EACvF,CAAA,EAAA,CAE+BG,MAAK;EAIpCC,KAAKZ,OAAOa;EACZC,KAAKd,OAAOQ;CAChB;AACJ"}

package/dist/adapters/http/controllers/workflows/jwks/index.d.ts

@@ -0,0 +1,3 @@
+export * from './handlers/index.ts';
+export * from './module.ts';
+//# sourceMappingURL=index.d.ts.map

package/dist/adapters/http/controllers/workflows/jwks/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../../src/adapters/http/controllers/workflows/jwks/index.ts"],"names":[],"mappings":"AAOA,cAAc,qBAAqB,CAAC;AACpC,cAAc,aAAa,CAAC"}

package/dist/adapters/http/controllers/workflows/jwks/index.mjs

@@ -0,0 +1,7 @@
+import "node:path";
+import "node:url";
+import.meta.url;
+import { getJwkRouteHandler, getJwksRouteHandler } from "./handlers/read.mjs";
+import "./handlers/index.mjs";
+import { JwkController } from "./module.mjs";
+export { JwkController, getJwkRouteHandler, getJwksRouteHandler };

package/dist/adapters/http/controllers/workflows/jwks/module.d.ts

@@ -0,0 +1,16 @@
+import type { OAuth2JsonWebKey } from '@authup/specs';
+import type { IAppEvent } from 'routup';
+import type { Repository } from 'typeorm';
+import type { KeyEntity } from '../../../../database/domains/index.ts';
+export type JwkControllerContext = {
+    repository: Repository<KeyEntity>;
+};
+export declare class JwkController {
+    protected repository: Repository<KeyEntity>;
+    constructor(ctx: JwkControllerContext);
+    getManyJwks(event: IAppEvent): Promise<{
+        keys: OAuth2JsonWebKey[];
+    }>;
+    getOneJwks(id: string): Promise<OAuth2JsonWebKey>;
+}
+//# sourceMappingURL=module.d.ts.map

package/dist/adapters/http/controllers/workflows/jwks/module.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"module.d.ts","sourceRoot":"","sources":["../../../../../../src/adapters/http/controllers/workflows/jwks/module.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,eAAe,CAAC;AAStD,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,QAAQ,CAAC;AACxC,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AAE1C,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,uCAAuC,CAAC;AAGvE,MAAM,MAAM,oBAAoB,GAAG;IAC/B,UAAU,EAAE,UAAU,CAAC,SAAS,CAAC,CAAA;CACpC,CAAC;AAEF,qBACa,aAAa;IACtB,SAAS,CAAC,UAAU,EAAE,UAAU,CAAC,SAAS,CAAC,CAAC;gBAEhC,GAAG,EAAE,oBAAoB;IAK/B,WAAW,CACD,KAAK,EAAE,SAAS,GAC7B,OAAO,CAAC;QAAE,IAAI,EAAE,gBAAgB,EAAE,CAAA;KAAE,CAAC;IAkClC,UAAU,CAAc,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,gBAAgB,CAAC;CA+BvE"}