@authup/server-core 1.0.0-beta.50 → 1.0.0-beta.52

package/dist/app/modules/http/constants.d.ts

@@ -5,8 +5,10 @@ export type HTTPServer = ReturnType<typeof serve>;
 export declare const HTTPInjectionKey: {
     readonly Server: TypedToken<import("srvx").Server<import("srvx").ServerHandler>>;
     /**
-     * Optional HTTP-client override for the SSR'd UI pages (test
-     * injection — production registers nothing). Register it with a
+     * HTTP client for the SSR'd UI pages. `HTTPModule.setup` registers a
+     * default whose transport dispatches against the server's own listen
+     * address (see `createInternalUIHttpClient`); a registration made
+     * BEFORE setup wins (test injection). Register it with a
      * `useFactory` provider and `lifetime: 'transient'` so every
      * resolve yields a FRESH client: client-web-kit's authentication
      * hook writes per-user Authorization state onto the client it

package/dist/app/modules/http/constants.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"constants.d.ts","sourceRoot":"","sources":["../../../../src/app/modules/http/constants.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,uBAAuB,CAAC;AACrD,OAAO,EAAE,UAAU,EAAE,MAAM,OAAO,CAAC;AACnC,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,aAAa,CAAC;AAEzC,MAAM,MAAM,UAAU,GAAG,UAAU,CAAC,OAAO,KAAK,CAAC,CAAC;AAElD,eAAO,MAAM,gBAAgB;;IAEzB;;;;;;;;OAQG;;CAEG,CAAC"}
+{"version":3,"file":"constants.d.ts","sourceRoot":"","sources":["../../../../src/app/modules/http/constants.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,uBAAuB,CAAC;AACrD,OAAO,EAAE,UAAU,EAAE,MAAM,OAAO,CAAC;AACnC,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,aAAa,CAAC;AAEzC,MAAM,MAAM,UAAU,GAAG,UAAU,CAAC,OAAO,KAAK,CAAC,CAAC;AAElD,eAAO,MAAM,gBAAgB;;IAEzB;;;;;;;;;;OAUG;;CAEG,CAAC"}

package/dist/app/modules/http/constants.mjs

@@ -6,8 +6,10 @@ import { TypedToken } from "eldin";
 const HTTPInjectionKey = {
 	Server: new TypedToken("Server"),
 	/**
-	* Optional HTTP-client override for the SSR'd UI pages (test
-	* injection — production registers nothing). Register it with a
+	* HTTP client for the SSR'd UI pages. `HTTPModule.setup` registers a
+	* default whose transport dispatches against the server's own listen
+	* address (see `createInternalUIHttpClient`); a registration made
+	* BEFORE setup wins (test injection). Register it with a
 	* `useFactory` provider and `lifetime: 'transient'` so every
 	* resolve yields a FRESH client: client-web-kit's authentication
 	* hook writes per-user Authorization state onto the client it

package/dist/app/modules/http/constants.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"constants.mjs","names":["TypedToken","HTTPInjectionKey","Server","UIHttpClient"],"sources":["../../../../src/app/modules/http/constants.ts"],"sourcesContent":["/*\n * Copyright (c) 2025.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport type { IClient } from '@authup/core-http-kit';\nimport { TypedToken } from 'eldin';\nimport type { serve } from 'routup/node';\n\nexport type HTTPServer = ReturnType<typeof serve>;\n\nexport const HTTPInjectionKey = {\n    Server: new TypedToken<HTTPServer>('Server'),\n    /**\n     * Optional HTTP-client override for the SSR'd UI pages (test\n     * injection — production registers nothing). Register it with a\n     * `useFactory` provider and `lifetime: 'transient'` so every\n     * resolve yields a FRESH client: client-web-kit's authentication\n     * hook writes per-user Authorization state onto the client it\n     * attaches to, so a singleton-lifetime instance shared across\n     * concurrent renders would leak tokens between sessions.\n     */\n    UIHttpClient: new TypedToken<IClient>('UIHttpClient'),\n} as const;\n"],"mappings":";;;;;AAaA,MAAaC,mBAAmB;CAC5BC,QAAQ,IAAIF,WAAuB,QAAA;;;;;;;;;IAUnCG,cAAc,IAAIH,WAAoB,cAAA;AAC1C"}
+{"version":3,"file":"constants.mjs","names":["TypedToken","HTTPInjectionKey","Server","UIHttpClient"],"sources":["../../../../src/app/modules/http/constants.ts"],"sourcesContent":["/*\n * Copyright (c) 2025.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport type { IClient } from '@authup/core-http-kit';\nimport { TypedToken } from 'eldin';\nimport type { serve } from 'routup/node';\n\nexport type HTTPServer = ReturnType<typeof serve>;\n\nexport const HTTPInjectionKey = {\n    Server: new TypedToken<HTTPServer>('Server'),\n    /**\n     * HTTP client for the SSR'd UI pages. `HTTPModule.setup` registers a\n     * default whose transport dispatches against the server's own listen\n     * address (see `createInternalUIHttpClient`); a registration made\n     * BEFORE setup wins (test injection). Register it with a\n     * `useFactory` provider and `lifetime: 'transient'` so every\n     * resolve yields a FRESH client: client-web-kit's authentication\n     * hook writes per-user Authorization state onto the client it\n     * attaches to, so a singleton-lifetime instance shared across\n     * concurrent renders would leak tokens between sessions.\n     */\n    UIHttpClient: new TypedToken<IClient>('UIHttpClient'),\n} as const;\n"],"mappings":";;;;;AAaA,MAAaC,mBAAmB;CAC5BC,QAAQ,IAAIF,WAAuB,QAAA;;;;;;;;;;;IAYnCG,cAAc,IAAIH,WAAoB,cAAA;AAC1C"}

package/dist/app/modules/http/module.d.ts

@@ -8,8 +8,18 @@ export declare class HTTPModule implements IModule {
     protected instance: HTTPServer | undefined;
     protected middleware: HTTPMiddlewareModule;
     protected controller: HTTPControllerModule;
+    protected uiHttpClientRegistered: boolean;
     constructor();
     setup(container: IContainer): Promise<void>;
+    /**
+     * Default HTTP client for the SSR'd UI pages: dispatches against the
+     * server's own listen address instead of round-tripping through the
+     * reverse proxy at `publicUrl` (see `createInternalUIHttpClient`).
+     * Skipped when the token is already bound (test injection wins).
+     * Transient lifetime is mandatory — client-web-kit's authentication
+     * hook writes per-user Authorization state onto the client.
+     */
+    protected registerUIHttpClient(container: IContainer): void;
     teardown(container: IContainer): Promise<void>;
 }
 //# sourceMappingURL=module.d.ts.map

package/dist/app/modules/http/module.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"module.d.ts","sourceRoot":"","sources":["../../../../src/app/modules/http/module.ts"],"names":[],"mappings":"AAUA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,OAAO,CAAC;AAErC,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,gBAAgB,CAAC;AAEjD,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,OAAO,CAAC;AACxC,OAAO,EAAE,oBAAoB,EAAE,oBAAoB,EAAE,MAAM,oBAAoB,CAAC;AAGhF,qBAAa,UAAW,YAAW,OAAO;IACtC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IAEtB,QAAQ,CAAC,YAAY,EAAE,MAAM,EAAE,CAAC;IAEhC,SAAS,CAAC,QAAQ,EAAG,UAAU,GAAG,SAAS,CAAC;IAE5C,SAAS,CAAC,UAAU,EAAG,oBAAoB,CAAC;IAE5C,SAAS,CAAC,UAAU,EAAG,oBAAoB,CAAC;;IAWtC,KAAK,CAAC,SAAS,EAAE,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC;IAoC3C,QAAQ,CAAC,SAAS,EAAE,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC;CAQvD"}
+{"version":3,"file":"module.d.ts","sourceRoot":"","sources":["../../../../src/app/modules/http/module.ts"],"names":[],"mappings":"AAWA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,OAAO,CAAC;AAGrC,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,gBAAgB,CAAC;AAEjD,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,OAAO,CAAC;AACxC,OAAO,EAAE,oBAAoB,EAAE,oBAAoB,EAAE,MAAM,oBAAoB,CAAC;AAGhF,qBAAa,UAAW,YAAW,OAAO;IACtC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IAEtB,QAAQ,CAAC,YAAY,EAAE,MAAM,EAAE,CAAC;IAEhC,SAAS,CAAC,QAAQ,EAAG,UAAU,GAAG,SAAS,CAAC;IAE5C,SAAS,CAAC,UAAU,EAAG,oBAAoB,CAAC;IAE5C,SAAS,CAAC,UAAU,EAAG,oBAAoB,CAAC;IAE5C,SAAS,CAAC,sBAAsB,EAAG,OAAO,CAAC;;IAYrC,KAAK,CAAC,SAAS,EAAE,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC;IAsCjD;;;;;;;OAOG;IACH,SAAS,CAAC,oBAAoB,CAAC,SAAS,EAAE,UAAU,GAAG,IAAI;IAiCrD,QAAQ,CAAC,SAAS,EAAE,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC;CAavD"}

package/dist/app/modules/http/module.mjs

@@ -7,9 +7,12 @@ import "../config/index.mjs";
 import { LoggerInjectionKey } from "../logger/constants.mjs";
 import "../logger/index.mjs";
 import { HTTPInjectionKey } from "./constants.mjs";
+import { createInternalUIHttpClient } from "../../../adapters/http/ui/internal-http-client.mjs";
+import "../../../adapters/http/ui/index.mjs";
 import { HTTPControllerModule } from "./modules/controller.mjs";
 import { HTTPMiddlewareModule } from "./modules/middleware.mjs";
 import "./modules/index.mjs";
+import { Client } from "@authup/core-http-kit";
 import { App } from "routup";
 import { serve } from "routup/node";
 //#region src/app/modules/http/module.ts
@@ -19,6 +22,7 @@ var HTTPModule = class {
 	instance;
 	middleware;
 	controller;
+	uiHttpClientRegistered;
 	constructor() {
 		this.name = ModuleName.HTTP;
 		this.dependencies = [
@@ -30,12 +34,14 @@ var HTTPModule = class {
 		];
 		this.controller = new HTTPControllerModule();
 		this.middleware = new HTTPMiddlewareModule();
+		this.uiHttpClientRegistered = false;
 	}
 	async setup(container) {
 		const config = container.resolve(ConfigInjectionKey);
 		const logger = container.resolve(LoggerInjectionKey);
 		logger.debug("Starting http server...");
 		const router = new App();
+		this.registerUIHttpClient(container);
 		await this.middleware.mountBefore(router, container);
 		await this.controller.mount(router, container);
 		await this.middleware.mountAfter(router, container);
@@ -51,7 +57,31 @@ var HTTPModule = class {
 		container.register(HTTPInjectionKey.Server, { useValue: server });
 		logger.debug("Started http server.");
 	}
+	/**
+	* Default HTTP client for the SSR'd UI pages: dispatches against the
+	* server's own listen address instead of round-tripping through the
+	* reverse proxy at `publicUrl` (see `createInternalUIHttpClient`).
+	* Skipped when the token is already bound (test injection wins).
+	* Transient lifetime is mandatory — client-web-kit's authentication
+	* hook writes per-user Authorization state onto the client.
+	*/ registerUIHttpClient(container) {
+		if (container.has(HTTPInjectionKey.UIHttpClient)) return;
+		container.register(HTTPInjectionKey.UIHttpClient, { useFactory: (c) => {
+			const config = c.resolve(ConfigInjectionKey);
+			const server = c.has(HTTPInjectionKey.Server) ? c.resolve(HTTPInjectionKey.Server) : void 0;
+			if (server && server.url) return createInternalUIHttpClient({
+				publicURL: config.publicUrl,
+				internalURL: server.url
+			});
+			return new Client({ baseURL: config.publicUrl });
+		} }, { lifetime: "transient" });
+		this.uiHttpClientRegistered = true;
+	}
 	async teardown(container) {
+		if (this.uiHttpClientRegistered) {
+			container.unregister(HTTPInjectionKey.UIHttpClient);
+			this.uiHttpClientRegistered = false;
+		}
 		if (!this.instance) return;
 		container.unregister(HTTPInjectionKey.Server);
 		await this.instance.close();

package/dist/app/modules/http/module.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"module.mjs","names":["App","serve","ConfigInjectionKey","ModuleName","HTTPInjectionKey","HTTPControllerModule","HTTPMiddlewareModule","LoggerInjectionKey","HTTPModule","name","dependencies","instance","middleware","controller","HTTP","CONFIG","LOGGER","AUTHENTICATION","IDENTITY","OAUTH2","setup","container","config","resolve","logger","debug","router","mountBefore","mount","mountAfter","server","port","hostname","host","silent","gracefulShutdown","ready","url","register","Server","useValue","teardown","unregister","close","undefined"],"sources":["../../../../src/app/modules/http/module.ts"],"sourcesContent":["/*\n * Copyright (c) 2025.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport { App } from 'routup';\nimport { serve } from 'routup/node';\nimport { ConfigInjectionKey } from '../config/index.ts';\nimport type { IModule } from 'orkos';\nimport { ModuleName } from '../constants.ts';\nimport type { HTTPServer } from './constants.ts';\nimport { HTTPInjectionKey } from './constants.ts';\nimport type { IContainer } from 'eldin';\nimport { HTTPControllerModule, HTTPMiddlewareModule } from './modules/index.ts';\nimport { LoggerInjectionKey } from '../logger/index.ts';\n\nexport class HTTPModule implements IModule {\n    readonly name: string;\n\n    readonly dependencies: string[];\n\n    protected instance : HTTPServer | undefined;\n\n    protected middleware : HTTPMiddlewareModule;\n\n    protected controller : HTTPControllerModule;\n\n    constructor() {\n        this.name = ModuleName.HTTP;\n        this.dependencies = [ModuleName.CONFIG, ModuleName.LOGGER, ModuleName.AUTHENTICATION, ModuleName.IDENTITY, ModuleName.OAUTH2];\n        this.controller = new HTTPControllerModule();\n        this.middleware = new HTTPMiddlewareModule();\n    }\n\n    // ----------------------------------------------------\n\n    async setup(container: IContainer): Promise<void> {\n        const config = container.resolve(ConfigInjectionKey);\n        const logger = container.resolve(LoggerInjectionKey);\n\n        logger.debug('Starting http server...');\n\n        const router = new App();\n\n        await this.middleware.mountBefore(router, container);\n        await this.controller.mount(router, container);\n        await this.middleware.mountAfter(router, container);\n\n        const server = serve(router, {\n            port: config.port,\n            hostname: config.host,\n            silent: true,\n            // Shutdown is driven by the orkos teardown chain (see cli/commands/start.ts);\n            // srvx's plugin would only close the HTTP server, leaving DB / cache / etc. open.\n            gracefulShutdown: false,\n        });\n\n        await server.ready();\n\n        this.instance = server;\n\n        if (server.url) {\n            logger.debug(`Listening on ${server.url}`);\n        }\n\n        container.register(HTTPInjectionKey.Server, { useValue: server });\n\n        logger.debug('Started http server.');\n    }\n\n    // ----------------------------------------------------\n\n    async teardown(container: IContainer): Promise<void> {\n        if (!this.instance) return;\n\n        container.unregister(HTTPInjectionKey.Server);\n\n        await this.instance.close();\n        this.instance = undefined;\n    }\n}\n"],"mappings":";;;;;;;;;;;;;;;AAkBA,IAAaQ,aAAb,MAAaA;CACAC;CAEAC;CAECC;CAEAC;CAEAC;CAEV,cAAc;EACV,KAAKJ,OAAON,WAAWW;EACvB,KAAKJ,eAAe;GAACP,WAAWY;GAAQZ,WAAWa;GAAQb,WAAWc;GAAgBd,WAAWe;GAAUf,WAAWgB;;EACtH,KAAKN,aAAa,IAAIR,qBAAAA;EACtB,KAAKO,aAAa,IAAIN,qBAAAA;CAC1B;CAIA,MAAMc,MAAMC,WAAsC;EAC9C,MAAMC,SAASD,UAAUE,QAAQrB,kBAAAA;EACjC,MAAMsB,SAASH,UAAUE,QAAQhB,kBAAAA;EAEjCiB,OAAOC,MAAM,yBAAA;EAEb,MAAMC,SAAS,IAAI1B,IAAAA;EAEnB,MAAM,KAAKY,WAAWe,YAAYD,QAAQL,SAAAA;EAC1C,MAAM,KAAKR,WAAWe,MAAMF,QAAQL,SAAAA;EACpC,MAAM,KAAKT,WAAWiB,WAAWH,QAAQL,SAAAA;EAEzC,MAAMS,SAAS7B,MAAMyB,QAAQ;GACzBK,MAAMT,OAAOS;GACbC,UAAUV,OAAOW;GACjBC,QAAQ;GAGRC,kBAAkB;EACtB,CAAA;EAEA,MAAML,OAAOM,MAAK;EAElB,KAAKzB,WAAWmB;EAEhB,IAAIA,OAAOO,KACPb,OAAOC,MAAM,gBAAgBK,OAAOO,KAAK;EAG7ChB,UAAUiB,SAASlC,iBAAiBmC,QAAQ,EAAEC,UAAUV,OAAO,CAAA;EAE/DN,OAAOC,MAAM,sBAAA;CACjB;CAIA,MAAMgB,SAASpB,WAAsC;EACjD,IAAI,CAAC,KAAKV,UAAU;EAEpBU,UAAUqB,WAAWtC,iBAAiBmC,MAAM;EAE5C,MAAM,KAAK5B,SAASgC,MAAK;EACzB,KAAKhC,WAAWiC,KAAAA;CACpB;AACJ"}
+{"version":3,"file":"module.mjs","names":["Client","App","serve","ConfigInjectionKey","createInternalUIHttpClient","ModuleName","HTTPInjectionKey","HTTPControllerModule","HTTPMiddlewareModule","LoggerInjectionKey","HTTPModule","name","dependencies","instance","middleware","controller","uiHttpClientRegistered","HTTP","CONFIG","LOGGER","AUTHENTICATION","IDENTITY","OAUTH2","setup","container","config","resolve","logger","debug","router","registerUIHttpClient","mountBefore","mount","mountAfter","server","port","hostname","host","silent","gracefulShutdown","ready","url","register","Server","useValue","has","UIHttpClient","useFactory","c","undefined","publicURL","publicUrl","internalURL","baseURL","lifetime","teardown","unregister","close"],"sources":["../../../../src/app/modules/http/module.ts"],"sourcesContent":["/*\n * Copyright (c) 2025.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport { Client } from '@authup/core-http-kit';\nimport { App } from 'routup';\nimport { serve } from 'routup/node';\nimport { ConfigInjectionKey } from '../config/index.ts';\nimport type { IModule } from 'orkos';\nimport { createInternalUIHttpClient } from '../../../adapters/http/ui/index.ts';\nimport { ModuleName } from '../constants.ts';\nimport type { HTTPServer } from './constants.ts';\nimport { HTTPInjectionKey } from './constants.ts';\nimport type { IContainer } from 'eldin';\nimport { HTTPControllerModule, HTTPMiddlewareModule } from './modules/index.ts';\nimport { LoggerInjectionKey } from '../logger/index.ts';\n\nexport class HTTPModule implements IModule {\n    readonly name: string;\n\n    readonly dependencies: string[];\n\n    protected instance : HTTPServer | undefined;\n\n    protected middleware : HTTPMiddlewareModule;\n\n    protected controller : HTTPControllerModule;\n\n    protected uiHttpClientRegistered : boolean;\n\n    constructor() {\n        this.name = ModuleName.HTTP;\n        this.dependencies = [ModuleName.CONFIG, ModuleName.LOGGER, ModuleName.AUTHENTICATION, ModuleName.IDENTITY, ModuleName.OAUTH2];\n        this.controller = new HTTPControllerModule();\n        this.middleware = new HTTPMiddlewareModule();\n        this.uiHttpClientRegistered = false;\n    }\n\n    // ----------------------------------------------------\n\n    async setup(container: IContainer): Promise<void> {\n        const config = container.resolve(ConfigInjectionKey);\n        const logger = container.resolve(LoggerInjectionKey);\n\n        logger.debug('Starting http server...');\n\n        const router = new App();\n\n        this.registerUIHttpClient(container);\n\n        await this.middleware.mountBefore(router, container);\n        await this.controller.mount(router, container);\n        await this.middleware.mountAfter(router, container);\n\n        const server = serve(router, {\n            port: config.port,\n            hostname: config.host,\n            silent: true,\n            // Shutdown is driven by the orkos teardown chain (see cli/commands/start.ts);\n            // srvx's plugin would only close the HTTP server, leaving DB / cache / etc. open.\n            gracefulShutdown: false,\n        });\n\n        await server.ready();\n\n        this.instance = server;\n\n        if (server.url) {\n            logger.debug(`Listening on ${server.url}`);\n        }\n\n        container.register(HTTPInjectionKey.Server, { useValue: server });\n\n        logger.debug('Started http server.');\n    }\n\n    // ----------------------------------------------------\n\n    /**\n     * Default HTTP client for the SSR'd UI pages: dispatches against the\n     * server's own listen address instead of round-tripping through the\n     * reverse proxy at `publicUrl` (see `createInternalUIHttpClient`).\n     * Skipped when the token is already bound (test injection wins).\n     * Transient lifetime is mandatory — client-web-kit's authentication\n     * hook writes per-user Authorization state onto the client.\n     */\n    protected registerUIHttpClient(container: IContainer): void {\n        if (container.has(HTTPInjectionKey.UIHttpClient)) {\n            return;\n        }\n\n        container.register(HTTPInjectionKey.UIHttpClient, {\n            useFactory: (c) => {\n                const config = c.resolve(ConfigInjectionKey);\n\n                // The server token is registered after listen; a resolve can\n                // only happen on a request, so it is present by then. The\n                // guards keep an edge case on the previous (public URL)\n                // dispatch behavior instead of failing the render.\n                const server = c.has(HTTPInjectionKey.Server) ?\n                    c.resolve(HTTPInjectionKey.Server) :\n                    undefined;\n\n                if (server && server.url) {\n                    return createInternalUIHttpClient({\n                        publicURL: config.publicUrl,\n                        internalURL: server.url,\n                    });\n                }\n\n                return new Client({ baseURL: config.publicUrl });\n            },\n        }, { lifetime: 'transient' });\n\n        this.uiHttpClientRegistered = true;\n    }\n\n    // ----------------------------------------------------\n\n    async teardown(container: IContainer): Promise<void> {\n        if (this.uiHttpClientRegistered) {\n            container.unregister(HTTPInjectionKey.UIHttpClient);\n            this.uiHttpClientRegistered = false;\n        }\n\n        if (!this.instance) return;\n\n        container.unregister(HTTPInjectionKey.Server);\n\n        await this.instance.close();\n        this.instance = undefined;\n    }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;AAoBA,IAAaU,aAAb,MAAaA;CACAC;CAEAC;CAECC;CAEAC;CAEAC;CAEAC;CAEV,cAAc;EACV,KAAKL,OAAON,WAAWY;EACvB,KAAKL,eAAe;GAACP,WAAWa;GAAQb,WAAWc;GAAQd,WAAWe;GAAgBf,WAAWgB;GAAUhB,WAAWiB;;EACtH,KAAKP,aAAa,IAAIR,qBAAAA;EACtB,KAAKO,aAAa,IAAIN,qBAAAA;EACtB,KAAKQ,yBAAyB;CAClC;CAIA,MAAMO,MAAMC,WAAsC;EAC9C,MAAMC,SAASD,UAAUE,QAAQvB,kBAAAA;EACjC,MAAMwB,SAASH,UAAUE,QAAQjB,kBAAAA;EAEjCkB,OAAOC,MAAM,yBAAA;EAEb,MAAMC,SAAS,IAAI5B,IAAAA;EAEnB,KAAK6B,qBAAqBN,SAAAA;EAE1B,MAAM,KAAKV,WAAWiB,YAAYF,QAAQL,SAAAA;EAC1C,MAAM,KAAKT,WAAWiB,MAAMH,QAAQL,SAAAA;EACpC,MAAM,KAAKV,WAAWmB,WAAWJ,QAAQL,SAAAA;EAEzC,MAAMU,SAAShC,MAAM2B,QAAQ;GACzBM,MAAMV,OAAOU;GACbC,UAAUX,OAAOY;GACjBC,QAAQ;GAGRC,kBAAkB;EACtB,CAAA;EAEA,MAAML,OAAOM,MAAK;EAElB,KAAK3B,WAAWqB;EAEhB,IAAIA,OAAOO,KACPd,OAAOC,MAAM,gBAAgBM,OAAOO,KAAK;EAG7CjB,UAAUkB,SAASpC,iBAAiBqC,QAAQ,EAAEC,UAAUV,OAAO,CAAA;EAE/DP,OAAOC,MAAM,sBAAA;CACjB;;;;;;;;IAYA,qBAA+BJ,WAA6B;EACxD,IAAIA,UAAUqB,IAAIvC,iBAAiBwC,YAAY,GAC3C;EAGJtB,UAAUkB,SAASpC,iBAAiBwC,cAAc,EAC9CC,aAAaC,MAAAA;GACT,MAAMvB,SAASuB,EAAEtB,QAAQvB,kBAAAA;GAMzB,MAAM+B,SAASc,EAAEH,IAAIvC,iBAAiBqC,MAAM,IACxCK,EAAEtB,QAAQpB,iBAAiBqC,MAAM,IACjCM,KAAAA;GAEJ,IAAIf,UAAUA,OAAOO,KACjB,OAAOrC,2BAA2B;IAC9B8C,WAAWzB,OAAO0B;IAClBC,aAAalB,OAAOO;GACxB,CAAA;GAGJ,OAAO,IAAIzC,OAAO,EAAEqD,SAAS5B,OAAO0B,UAAU,CAAA;EAClD,EACJ,GAAG,EAAEG,UAAU,YAAY,CAAA;EAE3B,KAAKtC,yBAAyB;CAClC;CAIA,MAAMuC,SAAS/B,WAAsC;EACjD,IAAI,KAAKR,wBAAwB;GAC7BQ,UAAUgC,WAAWlD,iBAAiBwC,YAAY;GAClD,KAAK9B,yBAAyB;EAClC;EAEA,IAAI,CAAC,KAAKH,UAAU;EAEpBW,UAAUgC,WAAWlD,iBAAiBqC,MAAM;EAE5C,MAAM,KAAK9B,SAAS4C,MAAK;EACzB,KAAK5C,WAAWoC,KAAAA;CACpB;AACJ"}

package/dist/app/modules/http/modules/controller.d.ts

@@ -1,6 +1,6 @@
 import type { App } from 'routup';
-import { ClientController, ClientPermissionController, ClientRoleController, ClientScopeController, IdentityProviderController, IdentityProviderRoleMappingController, PermissionController, PermissionPolicyController, PolicyController, RealmController, RobotController, RobotPermissionController, RobotRoleController, RoleAttributeController, RoleController, RolePermissionController, ScopeController, UserAttributeController, UserController, UserPermissionController, UserRoleController } from '../../../../adapters/http/index.ts';
-import { ActivateController, AuthorizeController, JwkController, OpenIDController, PasswordForgotController, PasswordResetController, RegisterController, StatusController, TokenController } from '../../../../adapters/http/controllers/index.ts';
+import { ClientController, ClientPermissionController, ClientRoleController, ClientScopeController, IdentityProviderController, IdentityProviderRoleMappingController, PermissionController, PermissionPolicyController, PolicyController, RealmController, RobotController, RobotPermissionController, RobotRoleController, RoleAttributeController, RoleController, RolePermissionController, ScopeController, SessionController, UserAttributeController, UserController, UserPermissionController, UserRoleController } from '../../../../adapters/http/index.ts';
+import { ActivateController, AuthorizeController, JwkController, LogoutController, OpenIDController, PasswordForgotController, PasswordResetController, RegisterController, StatusController, TokenController } from '../../../../adapters/http/controllers/index.ts';
 import type { IContainer } from 'eldin';
 import { PasswordRecoveryService, RegistrationService } from '../../../../core/index.ts';
 import type { StatusResponseFeatures } from '@authup/core-http-kit';
@@ -15,12 +15,15 @@ export declare class HTTPControllerModule {
     createPasswordResetController(container: IContainer): PasswordResetController;
     createPasswordRecoveryService(container: IContainer): PasswordRecoveryService;
     createRegisterController(container: IContainer): RegisterController;
+    createLogoutController(container: IContainer): LogoutController;
     createStatusController(container: IContainer): StatusController;
     buildUIFeatures(config: Config): StatusResponseFeatures;
     createRegistrationService(container: IContainer): RegistrationService;
     createIdentityProvider(container: IContainer): IdentityProviderController;
     createClientController(container: IContainer): ClientController;
     createRobotController(container: IContainer): RobotController;
+    private createPermissionRepository;
+    private createRoleRepository;
     createPermissionController(container: IContainer): Promise<PermissionController>;
     createRoleController(container: IContainer): RoleController;
     createClientPermissionController(container: IContainer): ClientPermissionController;
@@ -32,6 +35,7 @@ export declare class HTTPControllerModule {
     createRolePermissionController(container: IContainer): RolePermissionController;
     createPermissionPolicyController(container: IContainer): PermissionPolicyController;
     createScopeController(container: IContainer): ScopeController;
+    createSessionController(container: IContainer): SessionController;
     createUserController(container: IContainer): UserController;
     createUserAttributeController(container: IContainer): UserAttributeController;
     createUserPermissionController(container: IContainer): UserPermissionController;

package/dist/app/modules/http/modules/controller.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"controller.d.ts","sourceRoot":"","sources":["../../../../../src/app/modules/http/modules/controller.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,GAAG,EAAE,MAAM,QAAQ,CAAC;AAwElC,OAAO,EACH,gBAAgB,EAChB,0BAA0B,EAC1B,oBAAoB,EACpB,qBAAqB,EACrB,0BAA0B,EAC1B,qCAAqC,EACrC,oBAAoB,EACpB,0BAA0B,EAC1B,gBAAgB,EAChB,eAAe,EACf,eAAe,EACf,yBAAyB,EACzB,mBAAmB,EACnB,uBAAuB,EACvB,cAAc,EACd,wBAAwB,EACxB,eAAe,EACf,uBAAuB,EACvB,cAAc,EACd,wBAAwB,EACxB,kBAAkB,EACrB,MAAM,oCAAoC,CAAC;AAC5C,OAAO,EACH,kBAAkB,EAClB,mBAAmB,EACnB,aAAa,EACb,gBAAgB,EAChB,wBAAwB,EACxB,uBAAuB,EACvB,kBAAkB,EAClB,gBAAgB,EAChB,eAAe,EAClB,MAAM,gDAAgD,CAAC;AACxD,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,OAAO,CAAC;AACxC,OAAO,EASH,uBAAuB,EAOvB,mBAAmB,EAetB,MAAM,2BAA2B,CAAC;AAInC,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,uBAAuB,CAAC;AACpE,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,uBAAuB,CAAC;AAKpD,qBAAa,oBAAoB;IACvB,KAAK,CAAC,MAAM,EAAE,GAAG,EAAE,SAAS,EAAE,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC;IA8D9D,eAAe,CAAC,SAAS,EAAE,UAAU;IA0BrC,WAAW,CAAC,SAAS,EAAE,UAAU;IAgDjC,sBAAsB,CAAC,SAAS,EAAE,UAAU;IAM5C,wBAAwB,CAAC,SAAS,EAAE,UAAU;IAY9C,8BAA8B,CAAC,SAAS,EAAE,UAAU;IAYpD,6BAA6B,CAAC,SAAS,EAAE,UAAU;IAYnD,6BAA6B,CAAC,SAAS,EAAE,UAAU;IAwBnD,wBAAwB,CAAC,SAAS,EAAE,UAAU;IAY9C,sBAAsB,CAAC,SAAS,EAAE,UAAU;IAM5C,eAAe,CAAC,MAAM,EAAE,MAAM,GAAI,sBAAsB;IAQxD,yBAAyB,CAAC,SAAS,EAAE,UAAU;IAwB/C,sBAAsB,CAAC,SAAS,EAAE,UAAU;IAiC5C,sBAAsB,CAAC,SAAS,EAAE,UAAU;IAiB5C,qBAAqB,CAAC,SAAS,EAAE,UAAU;IAoBrC,0BAA0B,CAAC,SAAS,EAAE,UAAU;IAkDtD,oBAAoB,CAAC,SAAS,EAAE,UAAU;IAe1C,gCAAgC,CAAC,SAAS,EAAE,UAAU;IAYtD,0BAA0B,CAAC,SAAS,EAAE,UAAU;IAShD,2BAA2B,CAAC,SAAS,EAAE,UAAU;IAQjD,+BAA+B,CAAC,SAAS,EAAE,UAAU;IAYrD,yBAAyB,CAAC,SAAS,EAAE,UAAU;IAS/C,6BAA6B,CAAC,SAAS,EAAE,UAAU;IAYnD,8BAA8B,CAAC,SAAS,EAAE,UAAU;IAYpD,gCAAgC,CAAC,SAAS,EAAE,UAAU;IAQtD,qBAAqB,CAAC,SAAS,EAAE,UAAU;IAe3C,oBAAoB,CAAC,SAAS,EAAE,UAAU;IAe1C,6BAA6B,CAAC,SAAS,EAAE,UAAU;IAYnD,8BAA8B,CAAC,SAAS,EAAE,UAAU;IAYpD,wBAAwB,CAAC,SAAS,EAAE,UAAU;IAS9C,sBAAsB,CAAC,SAAS,EAAE,UAAU;IAyB5C,oCAAoC,CAAC,SAAS,EAAE,UAAU;IAS1D,mBAAmB,CAAC,SAAS,EAAE,UAAU;IAMzC,qBAAqB,CAAC,SAAS,EAAE,UAAU;CA8B9C"}
+{"version":3,"file":"controller.d.ts","sourceRoot":"","sources":["../../../../../src/app/modules/http/modules/controller.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,GAAG,EAAE,MAAM,QAAQ,CAAC;AAwElC,OAAO,EACH,gBAAgB,EAChB,0BAA0B,EAC1B,oBAAoB,EACpB,qBAAqB,EACrB,0BAA0B,EAC1B,qCAAqC,EACrC,oBAAoB,EACpB,0BAA0B,EAC1B,gBAAgB,EAChB,eAAe,EACf,eAAe,EACf,yBAAyB,EACzB,mBAAmB,EACnB,uBAAuB,EACvB,cAAc,EACd,wBAAwB,EACxB,eAAe,EACf,iBAAiB,EACjB,uBAAuB,EACvB,cAAc,EACd,wBAAwB,EACxB,kBAAkB,EACrB,MAAM,oCAAoC,CAAC;AAC5C,OAAO,EACH,kBAAkB,EAClB,mBAAmB,EACnB,aAAa,EACb,gBAAgB,EAChB,gBAAgB,EAChB,wBAAwB,EACxB,uBAAuB,EACvB,kBAAkB,EAClB,gBAAgB,EAChB,eAAe,EAClB,MAAM,gDAAgD,CAAC;AACxD,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,OAAO,CAAC;AACxC,OAAO,EAUH,uBAAuB,EAOvB,mBAAmB,EAgBtB,MAAM,2BAA2B,CAAC;AAInC,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,uBAAuB,CAAC;AACpE,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,uBAAuB,CAAC;AAKpD,qBAAa,oBAAoB;IACvB,KAAK,CAAC,MAAM,EAAE,GAAG,EAAE,SAAS,EAAE,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC;IAiE9D,eAAe,CAAC,SAAS,EAAE,UAAU;IAsBrC,WAAW,CAAC,SAAS,EAAE,UAAU;IAgEjC,sBAAsB,CAAC,SAAS,EAAE,UAAU;IAM5C,wBAAwB,CAAC,SAAS,EAAE,UAAU;IAY9C,8BAA8B,CAAC,SAAS,EAAE,UAAU;IAYpD,6BAA6B,CAAC,SAAS,EAAE,UAAU;IAYnD,6BAA6B,CAAC,SAAS,EAAE,UAAU;IAyBnD,wBAAwB,CAAC,SAAS,EAAE,UAAU;IAY9C,sBAAsB,CAAC,SAAS,EAAE,UAAU;IAqB5C,sBAAsB,CAAC,SAAS,EAAE,UAAU;IAM5C,eAAe,CAAC,MAAM,EAAE,MAAM,GAAI,sBAAsB;IAQxD,yBAAyB,CAAC,SAAS,EAAE,UAAU;IAyB/C,sBAAsB,CAAC,SAAS,EAAE,UAAU;IAiC5C,sBAAsB,CAAC,SAAS,EAAE,UAAU;IAiB5C,qBAAqB,CAAC,SAAS,EAAE,UAAU;IAoB3C,OAAO,CAAC,0BAA0B;IAOlC,OAAO,CAAC,oBAAoB;IAOtB,0BAA0B,CAAC,SAAS,EAAE,UAAU;IAkDtD,oBAAoB,CAAC,SAAS,EAAE,UAAU;IAe1C,gCAAgC,CAAC,SAAS,EAAE,UAAU;IActD,0BAA0B,CAAC,SAAS,EAAE,UAAU;IAShD,2BAA2B,CAAC,SAAS,EAAE,UAAU;IAQjD,+BAA+B,CAAC,SAAS,EAAE,UAAU;IAcrD,yBAAyB,CAAC,SAAS,EAAE,UAAU;IAS/C,6BAA6B,CAAC,SAAS,EAAE,UAAU;IAYnD,8BAA8B,CAAC,SAAS,EAAE,UAAU;IAcpD,gCAAgC,CAAC,SAAS,EAAE,UAAU;IAQtD,qBAAqB,CAAC,SAAS,EAAE,UAAU;IAe3C,uBAAuB,CAAC,SAAS,EAAE,UAAU;IAM7C,oBAAoB,CAAC,SAAS,EAAE,UAAU;IAiB1C,6BAA6B,CAAC,SAAS,EAAE,UAAU;IAYnD,8BAA8B,CAAC,SAAS,EAAE,UAAU;IAcpD,wBAAwB,CAAC,SAAS,EAAE,UAAU;IAS9C,sBAAsB,CAAC,SAAS,EAAE,UAAU;IAyB5C,oCAAoC,CAAC,SAAS,EAAE,UAAU;IAc1D,mBAAmB,CAAC,SAAS,EAAE,UAAU;IAMzC,qBAAqB,CAAC,SAAS,EAAE,UAAU;CA8B9C"}

package/dist/app/modules/http/modules/controller.mjs

@@ -46,12 +46,14 @@ import { RoleService } from "../../../../core/entities/role/service.mjs";
 import { RoleAttributeService } from "../../../../core/entities/role-attribute/service.mjs";
 import { RolePermissionService } from "../../../../core/entities/role-permission/service.mjs";
 import { ScopeService } from "../../../../core/entities/scope/service.mjs";
+import { SessionService } from "../../../../core/entities/session/service.mjs";
 import { UserService } from "../../../../core/entities/user/service.mjs";
 import { UserAttributeService } from "../../../../core/entities/user-attribute/service.mjs";
 import { UserPermissionService } from "../../../../core/entities/user-permission/service.mjs";
 import { UserRoleService } from "../../../../core/entities/user-role/service.mjs";
 import { IdentityProviderRoleMappingService } from "../../../../core/entities/identity-provider-role-mapping/service.mjs";
 import { OAuth2ClientAuthenticator } from "../../../../core/oauth2/client/authenticator.mjs";
+import { OAuth2EndSessionService } from "../../../../core/oauth2/end-session/service.mjs";
 import { PasswordRecoveryService } from "../../../../core/identity/password-recovery/service.mjs";
 import { PermissionCheckerService } from "../../../../core/identity/permission/checker/service.mjs";
 import { PolicyCheckerService } from "../../../../core/identity/policy/checker/service.mjs";
@@ -98,6 +100,7 @@ import { PermissionPolicyController } from "../../../../adapters/http/controller
 import { ActivateController } from "../../../../adapters/http/controllers/workflows/activate/module.mjs";
 import { AuthorizeController } from "../../../../adapters/http/controllers/workflows/authorize/module.mjs";
 import { JwkController } from "../../../../adapters/http/controllers/workflows/jwks/module.mjs";
+import { LogoutController } from "../../../../adapters/http/controllers/workflows/logout/module.mjs";
 import { OpenIDController } from "../../../../adapters/http/controllers/workflows/openid/module.mjs";
 import { PasswordForgotController } from "../../../../adapters/http/controllers/workflows/password-forgot/module.mjs";
 import { PasswordResetController } from "../../../../adapters/http/controllers/workflows/password-reset/module.mjs";
@@ -113,6 +116,7 @@ import { RoleAttributeController } from "../../../../adapters/http/controllers/e
 import { RolePermissionController } from "../../../../adapters/http/controllers/entities/role-permission/module.mjs";
 import { PolicyController } from "../../../../adapters/http/controllers/entities/policy/module.mjs";
 import { ScopeController } from "../../../../adapters/http/controllers/entities/scope/module.mjs";
+import { SessionController } from "../../../../adapters/http/controllers/entities/session/module.mjs";
 import { UserController } from "../../../../adapters/http/controllers/entities/user/module.mjs";
 import { UserAttributeController } from "../../../../adapters/http/controllers/entities/user-attribute/module.mjs";
 import { UserPermissionController } from "../../../../adapters/http/controllers/entities/user-permission/module.mjs";
@@ -143,6 +147,7 @@ var HTTPControllerModule = class {
 		const roleAttributeController = this.createRoleAttributeController(container);
 		const rolePermissionController = this.createRolePermissionController(container);
 		const scopeController = this.createScopeController(container);
+		const sessionController = this.createSessionController(container);
 		const userController = this.createUserController(container);
 		const userAttributeController = this.createUserAttributeController(container);
 		const userPermissionController = this.createUserPermissionController(container);
@@ -158,6 +163,7 @@ var HTTPControllerModule = class {
 			this.createPasswordForgotController(container),
 			this.createPasswordResetController(container),
 			this.createRegisterController(container),
+			this.createLogoutController(container),
 			this.createStatusController(container),
 			clientController,
 			clientPermissionController,
@@ -176,6 +182,7 @@ var HTTPControllerModule = class {
 			roleAttributeController,
 			rolePermissionController,
 			scopeController,
+			sessionController,
 			userController,
 			userAttributeController,
 			userPermissionController,
@@ -184,44 +191,59 @@ var HTTPControllerModule = class {
 	}
 	createAuthorize(container) {
 		const config = container.resolve(ConfigInjectionKey);
-		const accessTokenIssuer = container.resolve(OAuth2InjectionToken.AccessTokenIssuer);
-		const openIdTokenIssuer = container.resolve(OAuth2InjectionToken.OpenIDTokenIssuer);
 		const codeIssuer = container.resolve(OAuth2InjectionToken.AuthorizationCodeIssuer);
 		const codeRequestVerifier = container.resolve(OAuth2InjectionToken.AuthorizationCodeRequestVerifier);
-		const identityResolver = container.resolve(IdentityInjectionKey.Resolver);
+		const sessionManager = container.resolve(AuthenticationInjectionKey.SessionManager);
 		return new AuthorizeController({
 			options: {
 				baseURL: config.publicUrl,
-				features: this.buildUIFeatures(config)
+				features: this.buildUIFeatures(config),
+				promptLoginMaxAge: config.promptLoginMaxAge
 			},
-			accessTokenIssuer,
-			openIdTokenIssuer,
 			codeIssuer,
 			codeRequestVerifier,
-			identityResolver
+			sessionManager
 		});
 	}
 	createToken(container) {
+		const config = container.resolve(ConfigInjectionKey);
+		const logger = container.resolve(LoggerInjectionKey);
 		const sessionManager = container.resolve(AuthenticationInjectionKey.SessionManager);
 		const codeVerifier = container.resolve(OAuth2InjectionToken.AuthorizationCodeVerifier);
 		const accessTokenIssuer = container.resolve(OAuth2InjectionToken.AccessTokenIssuer);
 		const refreshTokenIssuer = container.resolve(OAuth2InjectionToken.RefreshTokenIssuer);
+		const openIdTokenIssuer = container.resolve(OAuth2InjectionToken.OpenIDTokenIssuer);
+		const keyRepository = container.resolve(OAuth2InjectionToken.KeyRepository);
 		const tokenRevoker = container.resolve(OAuth2InjectionToken.TokenRevoker);
 		const tokenVerifier = container.resolve(OAuth2InjectionToken.TokenVerifier);
+		const tokenRepository = container.resolve(OAuth2InjectionToken.TokenRepository);
+		const sessionTokenRepository = container.resolve(OAuth2InjectionToken.SessionTokenRepository);
 		const identityResolver = container.resolve(IdentityInjectionKey.Resolver);
 		const identityProviderLdapCollectionAuthenticator = container.resolve(IdentityInjectionKey.ProviderLdapCollectionAuthenticator);
+		const identityPermissionProvider = container.resolve(IdentityInjectionKey.PermissionProvider);
+		const clientAuthenticator = new ClientAuthenticator(identityResolver);
+		const robotAuthenticator = new RobotAuthenticator(identityResolver);
+		const userAuthenticator = new CredentialsAuthenticator([identityProviderLdapCollectionAuthenticator, new UserAuthenticator(identityResolver)]);
+		const oauth2ClientAuthenticator = new OAuth2ClientAuthenticator(identityResolver);
 		return new TokenController({
 			codeVerifier,
 			accessTokenIssuer,
 			refreshTokenIssuer,
+			openIdTokenIssuer,
+			keyRepository,
 			tokenVerifier,
 			tokenRevoker,
+			tokenRepository,
+			sessionTokenRepository,
+			tokenRefreshGracePeriod: config.tokenRefreshGracePeriod,
+			logger,
 			identityResolver,
-			identityPermissionProvider: container.resolve(IdentityInjectionKey.PermissionProvider),
-			clientAuthenticator: new ClientAuthenticator(identityResolver),
-			robotAuthenticator: new RobotAuthenticator(identityResolver),
-			userAuthenticator: new CredentialsAuthenticator([identityProviderLdapCollectionAuthenticator, new UserAuthenticator(identityResolver)]),
-			oauth2ClientAuthenticator: new OAuth2ClientAuthenticator(identityResolver),
+			identityPermissionProvider,
+			clientAuthenticator,
+			robotAuthenticator,
+			userAuthenticator,
+			oauth2ClientAuthenticator,
+			realmRepository: new RealmRepositoryAdapter(container.resolve(RealmEntity)),
 			sessionManager
 		});
 	}
@@ -274,7 +296,8 @@ var HTTPControllerModule = class {
 			options: {
 				passwordRecoveryEnabled: config.passwordRecoveryEnabled,
 				emailVerificationEnabled: config.emailVerificationEnabled,
-				publicUrl: config.publicUrl
+				publicUrl: config.publicUrl,
+				passwordMinLength: config.passwordMinLength
 			}
 		});
 	}
@@ -288,6 +311,20 @@ var HTTPControllerModule = class {
 			service: this.createRegistrationService(container)
 		});
 	}
+	createLogoutController(container) {
+		const config = container.resolve(ConfigInjectionKey);
+		const endSessionService = new OAuth2EndSessionService({
+			tokenVerifier: container.resolve(OAuth2InjectionToken.TokenVerifier),
+			sessionManager: container.resolve(AuthenticationInjectionKey.SessionManager),
+			clientRepository: container.resolve(OAuth2InjectionToken.ClientRepository),
+			realmRepository: new RealmRepositoryAdapter(container.resolve(RealmEntity)),
+			hintGracePeriod: config.endSessionHintGracePeriod
+		});
+		return new LogoutController({
+			options: { baseURL: config.publicUrl },
+			endSessionService
+		});
+	}
 	createStatusController(container) {
 		const config = container.resolve(ConfigInjectionKey);
 		return new StatusController({ options: { features: this.buildUIFeatures(config) } });
@@ -315,7 +352,8 @@ var HTTPControllerModule = class {
 			options: {
 				registrationEnabled: config.registrationEnabled,
 				emailVerificationEnabled: config.emailVerificationEnabled,
-				publicUrl: config.publicUrl
+				publicUrl: config.publicUrl,
+				passwordMinLength: config.passwordMinLength
 			}
 		});
 	}
@@ -373,6 +411,18 @@ var HTTPControllerModule = class {
 			dataSource
 		});
 	}
+	createPermissionRepository(container) {
+		return new PermissionRepositoryAdapter({
+			repository: container.resolve(PermissionEntity),
+			realmRepository: container.resolve(RealmEntity)
+		});
+	}
+	createRoleRepository(container) {
+		return new RoleRepositoryAdapter({
+			repository: container.resolve(RoleEntity),
+			realmRepository: container.resolve(RealmEntity)
+		});
+	}
 	async createPermissionController(container) {
 		const dataSource = container.resolve(DatabaseInjectionKey.DataSource);
 		const realmRepository = container.resolve(RealmEntity);
@@ -419,6 +469,7 @@ var HTTPControllerModule = class {
 	createClientPermissionController(container) {
 		return new ClientPermissionController({ service: new ClientPermissionService({
 			repository: new ClientPermissionRepositoryAdapter(container.resolve(ClientPermissionEntity)),
+			permissionRepository: this.createPermissionRepository(container),
 			identityPermissionProvider: container.resolve(IdentityInjectionKey.PermissionProvider)
 		}) });
 	}
@@ -434,6 +485,7 @@ var HTTPControllerModule = class {
 	createRobotPermissionController(container) {
 		return new RobotPermissionController({ service: new RobotPermissionService({
 			repository: new RobotPermissionRepositoryAdapter(container.resolve(RobotPermissionEntity)),
+			permissionRepository: this.createPermissionRepository(container),
 			identityPermissionProvider: container.resolve(IdentityInjectionKey.PermissionProvider)
 		}) });
 	}
@@ -453,6 +505,7 @@ var HTTPControllerModule = class {
 	createRolePermissionController(container) {
 		return new RolePermissionController({ service: new RolePermissionService({
 			repository: new RolePermissionRepositoryAdapter(container.resolve(RolePermissionEntity)),
+			permissionRepository: this.createPermissionRepository(container),
 			identityPermissionProvider: container.resolve(IdentityInjectionKey.PermissionProvider)
 		}) });
 	}
@@ -469,7 +522,11 @@ var HTTPControllerModule = class {
 			realmRepository
 		}) });
 	}
+	createSessionController(container) {
+		return new SessionController({ service: new SessionService({ repository: container.resolve(AuthenticationInjectionKey.SessionRepository) }) });
+	}
 	createUserController(container) {
+		const config = container.resolve(ConfigInjectionKey);
 		const dataSource = container.resolve(DatabaseInjectionKey.DataSource);
 		const realmRepository = container.resolve(RealmEntity);
 		return new UserController({ service: new UserService({
@@ -477,7 +534,8 @@ var HTTPControllerModule = class {
 				repository: new UserRepository(dataSource),
 				realmRepository
 			}),
-			realmRepository: new RealmRepositoryAdapter(realmRepository)
+			realmRepository: new RealmRepositoryAdapter(realmRepository),
+			passwordMinLength: config.passwordMinLength
 		}) });
 	}
 	createUserAttributeController(container) {
@@ -490,6 +548,7 @@ var HTTPControllerModule = class {
 	createUserPermissionController(container) {
 		return new UserPermissionController({ service: new UserPermissionService({
 			repository: new UserPermissionRepositoryAdapter(container.resolve(UserPermissionEntity)),
+			permissionRepository: this.createPermissionRepository(container),
 			identityPermissionProvider: container.resolve(IdentityInjectionKey.PermissionProvider)
 		}) });
 	}
@@ -522,6 +581,7 @@ var HTTPControllerModule = class {
 	createIdentityProviderRoleController(container) {
 		return new IdentityProviderRoleMappingController({ service: new IdentityProviderRoleMappingService({
 			repository: new IdentityProviderRoleMappingRepositoryAdapter(container.resolve(IdentityProviderRoleMappingEntity)),
+			roleRepository: this.createRoleRepository(container),
 			identityPermissionProvider: container.resolve(IdentityInjectionKey.PermissionProvider)
 		}) });
 	}