@authup/server-core 1.0.0-beta.50 → 1.0.0-beta.52

package/dist/app/modules/http/modules/controller.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"controller.mjs","names":["decorators","ClientEntity","ClientPermissionEntity","ClientRoleEntity","ClientScopeEntity","IdentityProviderRepository","IdentityProviderRoleMappingEntity","KeyEntity","PermissionEntity","PermissionPolicyEntity","PolicyRepository","RealmEntity","RobotEntity","RobotPermissionEntity","RobotRoleEntity","RoleAttributeEntity","RoleEntity","RolePermissionEntity","ScopeEntity","UserAttributeEntity","UserEntity","UserPermissionEntity","UserRepository","UserRoleEntity","ClientPermissionRepositoryAdapter","ClientRepositoryAdapter","ClientRoleRepositoryAdapter","ClientScopeRepositoryAdapter","DatabaseInjectionKey","IdentityProviderRepositoryAdapter","IdentityProviderRoleMappingRepositoryAdapter","PermissionDatabaseProvider","PermissionPolicyRepositoryAdapter","PermissionRepositoryAdapter","PolicyRepositoryAdapter","RealmRepositoryAdapter","RobotPermissionRepositoryAdapter","RobotRepositoryAdapter","RobotRoleRepositoryAdapter","RoleAttributeRepositoryAdapter","RolePermissionRepositoryAdapter","RoleRepositoryAdapter","ScopeRepositoryAdapter","UserAttributeRepositoryAdapter","UserPermissionRepositoryAdapter","UserRepositoryAdapter","UserRoleRepositoryAdapter","ClientController","ClientPermissionController","ClientRoleController","ClientScopeController","IdentityProviderController","IdentityProviderRoleMappingController","PermissionController","PermissionPolicyController","PolicyController","RealmController","RobotController","RobotPermissionController","RobotRoleController","RoleAttributeController","RoleController","RolePermissionController","ScopeController","UserAttributeController","UserController","UserPermissionController","UserRoleController","ActivateController","AuthorizeController","JwkController","OpenIDController","PasswordForgotController","PasswordResetController","RegisterController","StatusController","TokenController","ClientAuthenticator","ClientPermissionService","ClientRoleService","ClientScopeService","ClientService","CredentialsAuthenticator","IdentityProviderRoleMappingService","OAuth2ClientAuthenticator","PasswordRecoveryService","PermissionCheckerService","PermissionPolicyService","PermissionService","PolicyCheckerService","PolicyService","RealmService","RegistrationService","RobotAuthenticator","RobotPermissionService","RobotRoleService","RobotService","RoleAttributeService","RolePermissionService","RoleService","ScopeService","UserAttributeService","UserAuthenticator","UserPermissionService","UserRoleService","UserService","WebClientProvisioner","AuthenticationInjectionKey","OAuth2InjectionToken","IdentityInjectionKey","ConfigInjectionKey","getAppOrigins","LoggerInjectionKey","MailInjectionKey","MailTemplateRendererInjectionKey","HTTPControllerModule","mount","router","container","realmController","createRealmController","roleController","createRoleController","permissionController","createPermissionController","permissionPolicyController","createPermissionPolicyController","clientController","createClientController","robotController","createRobotController","clientPermissionController","createClientPermissionController","clientRoleController","createClientRoleController","clientScopeController","createClientScopeController","robotPermissionController","createRobotPermissionController","robotRoleController","createRobotRoleController","roleAttributeController","createRoleAttributeController","rolePermissionController","createRolePermissionController","scopeController","createScopeController","userController","createUserController","userAttributeController","createUserAttributeController","userPermissionController","createUserPermissionController","userRoleController","createUserRoleController","policyController","createPolicyController","identityProviderRoleController","createIdentityProviderRoleController","use","controllers","createAuthorize","createToken","createJwkController","createOpenIDController","createActivateController","createPasswordForgotController","createPasswordResetController","createRegisterController","createStatusController","createIdentityProvider","config","resolve","accessTokenIssuer","AccessTokenIssuer","openIdTokenIssuer","OpenIDTokenIssuer","codeIssuer","AuthorizationCodeIssuer","codeRequestVerifier","AuthorizationCodeRequestVerifier","identityResolver","Resolver","options","baseURL","publicUrl","features","buildUIFeatures","sessionManager","SessionManager","codeVerifier","AuthorizationCodeVerifier","refreshTokenIssuer","RefreshTokenIssuer","tokenRevoker","TokenRevoker","tokenVerifier","TokenVerifier","identityProviderLdapCollectionAuthenticator","ProviderLdapCollectionAuthenticator","identityPermissionProvider","PermissionProvider","clientAuthenticator","robotAuthenticator","userAuthenticator","oauth2ClientAuthenticator","service","createRegistrationService","createPasswordRecoveryService","dataSource","DataSource","realmRepository","repository","mailClient","mailTemplateRenderer","passwordRecoveryEnabled","emailVerificationEnabled","registration","registrationEnabled","passwordRecovery","emailVerification","accountManager","ProviderAccountManager","stateManager","AuthorizationStateManager","realmRepositoryAdapter","roleRepository","rolePermissionRepository","policyRepository","permissionPolicyRepository","permissionProvider","checkerService","reservedNames","Set","getMetadata","columns","map","c","propertyName","getRepository","clientRepository","logger","webClientProvisioner","appOrigins","keyRepository"],"sources":["../../../../../src/app/modules/http/modules/controller.ts"],"sourcesContent":["/*\n * Copyright (c) 2025.\n *  Author Peter Placzek (tada5hi)\n *  For the full copyright and license information,\n *  view the LICENSE file that was distributed with this source code.\n */\n\nimport type { App } from 'routup';\nimport { decorators } from '@routup/decorators';\nimport type {\n    Client,\n    ClientPermission,\n    ClientRole,\n    ClientScope,\n    Permission,\n    PermissionPolicy,\n    Realm,\n    Robot,\n    RobotPermission,\n    RobotRole,\n    Role,\n    RoleAttribute,\n    RolePermission,\n    Scope,\n    UserAttribute,\n    UserPermission,\n    UserRole,\n} from '@authup/core-kit';\nimport type { Repository } from 'typeorm';\nimport {\n    ClientEntity,\n    ClientPermissionEntity,\n    ClientRoleEntity,\n    ClientScopeEntity,\n    IdentityProviderRepository,\n    IdentityProviderRoleMappingEntity,\n    KeyEntity,\n    PermissionEntity,\n    PermissionPolicyEntity,\n    PolicyRepository,\n    RealmEntity,\n    RobotEntity,\n    RobotPermissionEntity,\n    RobotRoleEntity,\n    RoleAttributeEntity,\n    RoleEntity,\n    RolePermissionEntity,\n    ScopeEntity,\n    UserAttributeEntity,\n    UserEntity,\n    UserPermissionEntity,\n    UserRepository,\n    UserRoleEntity,\n} from '../../../../adapters/database/domains/index.ts';\nimport {\n    ClientPermissionRepositoryAdapter,\n    ClientRepositoryAdapter,\n    ClientRoleRepositoryAdapter,\n    ClientScopeRepositoryAdapter,\n    DatabaseInjectionKey,\n    IdentityProviderRepositoryAdapter,\n    IdentityProviderRoleMappingRepositoryAdapter,\n    PermissionDatabaseProvider,\n    PermissionPolicyRepositoryAdapter,\n    PermissionRepositoryAdapter,\n    PolicyRepositoryAdapter,\n    RealmRepositoryAdapter,\n    RobotPermissionRepositoryAdapter,\n    RobotRepositoryAdapter,\n    RobotRoleRepositoryAdapter,\n    RoleAttributeRepositoryAdapter,\n    RolePermissionRepositoryAdapter,\n    RoleRepositoryAdapter,\n    ScopeRepositoryAdapter,\n    UserAttributeRepositoryAdapter,\n    UserPermissionRepositoryAdapter,\n    UserRepositoryAdapter,\n    UserRoleRepositoryAdapter,\n} from '../../database/index.ts';\nimport {\n    ClientController,\n    ClientPermissionController,\n    ClientRoleController,\n    ClientScopeController, \n    IdentityProviderController,\n    IdentityProviderRoleMappingController,\n    PermissionController,\n    PermissionPolicyController,\n    PolicyController,\n    RealmController,\n    RobotController,\n    RobotPermissionController,\n    RobotRoleController,\n    RoleAttributeController,\n    RoleController,\n    RolePermissionController,\n    ScopeController,\n    UserAttributeController,\n    UserController,\n    UserPermissionController,\n    UserRoleController,\n} from '../../../../adapters/http/index.ts';\nimport {\n    ActivateController,\n    AuthorizeController,\n    JwkController,\n    OpenIDController,\n    PasswordForgotController,\n    PasswordResetController,\n    RegisterController,\n    StatusController,\n    TokenController,\n} from '../../../../adapters/http/controllers/index.ts';\nimport type { IContainer } from 'eldin';\nimport {\n    ClientAuthenticator,\n    ClientPermissionService,\n    ClientRoleService,\n    ClientScopeService,\n    ClientService,\n    CredentialsAuthenticator,\n    IdentityProviderRoleMappingService,\n    OAuth2ClientAuthenticator,\n    PasswordRecoveryService,\n    PermissionCheckerService,\n    PermissionPolicyService,\n    PermissionService,\n    PolicyCheckerService,\n    PolicyService,\n    RealmService,\n    RegistrationService,\n    RobotAuthenticator,\n    RobotPermissionService,\n    RobotRoleService,\n    RobotService,\n    RoleAttributeService,\n    RolePermissionService,\n    RoleService,\n    ScopeService,\n    UserAttributeService,\n    UserAuthenticator,\n    UserPermissionService,\n    UserRoleService,\n    UserService,\n    WebClientProvisioner,\n} from '../../../../core/index.ts';\nimport { AuthenticationInjectionKey } from '../../authentication/index.ts';\nimport { OAuth2InjectionToken } from '../../oauth2/index.ts';\nimport { IdentityInjectionKey } from '../../identity/index.ts';\nimport type { StatusResponseFeatures } from '@authup/core-http-kit';\nimport type { Config } from '../../config/index.ts';\nimport { ConfigInjectionKey, getAppOrigins } from '../../config/index.ts';\nimport { LoggerInjectionKey } from '../../logger/index.ts';\nimport { MailInjectionKey, MailTemplateRendererInjectionKey } from '../../mail/index.ts';\n\nexport class HTTPControllerModule {\n    async mount(router: App, container: IContainer): Promise<void> {\n        const realmController = this.createRealmController(container);\n        const roleController = this.createRoleController(container);\n        const permissionController = await this.createPermissionController(container);\n        const permissionPolicyController = this.createPermissionPolicyController(container);\n        const clientController = this.createClientController(container);\n        const robotController = this.createRobotController(container);\n        const clientPermissionController = this.createClientPermissionController(container);\n        const clientRoleController = this.createClientRoleController(container);\n        const clientScopeController = this.createClientScopeController(container);\n        const robotPermissionController = this.createRobotPermissionController(container);\n        const robotRoleController = this.createRobotRoleController(container);\n        const roleAttributeController = this.createRoleAttributeController(container);\n        const rolePermissionController = this.createRolePermissionController(container);\n        const scopeController = this.createScopeController(container);\n        const userController = this.createUserController(container);\n        const userAttributeController = this.createUserAttributeController(container);\n        const userPermissionController = this.createUserPermissionController(container);\n        const userRoleController = this.createUserRoleController(container);\n        const policyController = this.createPolicyController(container);\n        const identityProviderRoleController = this.createIdentityProviderRoleController(container);\n\n        router.use(decorators({\n            controllers: [\n                this.createAuthorize(container),\n                this.createToken(container),\n                this.createJwkController(container),\n                this.createOpenIDController(container),\n                this.createActivateController(container),\n                this.createPasswordForgotController(container),\n                this.createPasswordResetController(container),\n                this.createRegisterController(container),\n\n                this.createStatusController(container),\n\n                clientController,\n                clientPermissionController,\n                clientRoleController,\n                clientScopeController,\n                identityProviderRoleController,\n                this.createIdentityProvider(container),\n                permissionController,\n                permissionPolicyController,\n                policyController,\n                robotController,\n                robotPermissionController,\n                robotRoleController,\n                realmController,\n                roleController,\n                roleAttributeController,\n                rolePermissionController,\n                scopeController,\n                userController,\n                userAttributeController,\n                userPermissionController,\n                userRoleController,\n            ],\n        }));\n    }\n\n    // ----------------------------------------------------\n\n    createAuthorize(container: IContainer) {\n        const config = container.resolve(ConfigInjectionKey);\n        const accessTokenIssuer = container.resolve(OAuth2InjectionToken.AccessTokenIssuer);\n        const openIdTokenIssuer = container.resolve(OAuth2InjectionToken.OpenIDTokenIssuer);\n\n        const codeIssuer = container.resolve(OAuth2InjectionToken.AuthorizationCodeIssuer);\n        const codeRequestVerifier = container.resolve(OAuth2InjectionToken.AuthorizationCodeRequestVerifier);\n\n        const identityResolver = container.resolve(IdentityInjectionKey.Resolver);\n\n        return new AuthorizeController({\n            options: {\n                baseURL: config.publicUrl,\n                features: this.buildUIFeatures(config),\n            },\n\n            accessTokenIssuer,\n            openIdTokenIssuer,\n\n            codeIssuer,\n            codeRequestVerifier,\n\n            identityResolver,\n        });\n    }\n\n    createToken(container: IContainer) {\n        const sessionManager = container.resolve(AuthenticationInjectionKey.SessionManager);\n\n        const codeVerifier = container.resolve(OAuth2InjectionToken.AuthorizationCodeVerifier);\n\n        const accessTokenIssuer = container.resolve(OAuth2InjectionToken.AccessTokenIssuer);\n        const refreshTokenIssuer = container.resolve(OAuth2InjectionToken.RefreshTokenIssuer);\n\n        const tokenRevoker = container.resolve(OAuth2InjectionToken.TokenRevoker);\n        const tokenVerifier = container.resolve(OAuth2InjectionToken.TokenVerifier);\n\n        const identityResolver = container.resolve(IdentityInjectionKey.Resolver);\n        const identityProviderLdapCollectionAuthenticator = container.resolve(IdentityInjectionKey.ProviderLdapCollectionAuthenticator);\n\n        const identityPermissionProvider = container.resolve(IdentityInjectionKey.PermissionProvider);\n\n        const clientAuthenticator = new ClientAuthenticator(identityResolver);\n        const robotAuthenticator = new RobotAuthenticator(identityResolver);\n\n        const userAuthenticator = new CredentialsAuthenticator([\n            identityProviderLdapCollectionAuthenticator,\n            new UserAuthenticator(identityResolver),\n        ]);\n\n        const oauth2ClientAuthenticator = new OAuth2ClientAuthenticator(identityResolver);\n\n        return new TokenController({\n            codeVerifier,\n\n            accessTokenIssuer,\n            refreshTokenIssuer,\n\n            tokenVerifier,\n            tokenRevoker,\n\n            identityResolver,\n            identityPermissionProvider,\n\n            clientAuthenticator,\n            robotAuthenticator,\n            userAuthenticator,\n\n            oauth2ClientAuthenticator,\n\n            sessionManager,\n        });\n    }\n\n    createOpenIDController(container: IContainer) {\n        const config = container.resolve(ConfigInjectionKey);\n\n        return new OpenIDController({ baseURL: config.publicUrl });\n    }\n\n    createActivateController(container: IContainer) {\n        const config = container.resolve(ConfigInjectionKey);\n\n        return new ActivateController({\n            options: {\n                baseURL: config.publicUrl,\n                features: this.buildUIFeatures(config),\n            },\n            service: this.createRegistrationService(container),\n        });\n    }\n\n    createPasswordForgotController(container: IContainer) {\n        const config = container.resolve(ConfigInjectionKey);\n\n        return new PasswordForgotController({\n            options: {\n                baseURL: config.publicUrl,\n                features: this.buildUIFeatures(config),\n            },\n            service: this.createPasswordRecoveryService(container),\n        });\n    }\n\n    createPasswordResetController(container: IContainer) {\n        const config = container.resolve(ConfigInjectionKey);\n\n        return new PasswordResetController({\n            options: {\n                baseURL: config.publicUrl,\n                features: this.buildUIFeatures(config),\n            },\n            service: this.createPasswordRecoveryService(container),\n        });\n    }\n\n    createPasswordRecoveryService(container: IContainer) {\n        const config = container.resolve(ConfigInjectionKey);\n        const dataSource = container.resolve(DatabaseInjectionKey.DataSource);\n        const realmRepository = container.resolve<Repository<Realm>>(RealmEntity);\n        const repository = new UserRepositoryAdapter({\n            repository: new UserRepository(dataSource),\n            realmRepository,\n        });\n        const mailClient = container.resolve(MailInjectionKey);\n        const mailTemplateRenderer = container.resolve(MailTemplateRendererInjectionKey);\n\n        return new PasswordRecoveryService({\n            mailClient,\n            mailTemplateRenderer,\n            repository,\n            realmRepository: new RealmRepositoryAdapter(realmRepository),\n            options: {\n                passwordRecoveryEnabled: config.passwordRecoveryEnabled,\n                emailVerificationEnabled: config.emailVerificationEnabled,\n                publicUrl: config.publicUrl,\n            },\n        });\n    }\n\n    createRegisterController(container: IContainer) {\n        const config = container.resolve(ConfigInjectionKey);\n\n        return new RegisterController({\n            options: {\n                baseURL: config.publicUrl,\n                features: this.buildUIFeatures(config),\n            },\n            service: this.createRegistrationService(container),\n        });\n    }\n\n    createStatusController(container: IContainer) {\n        const config = container.resolve(ConfigInjectionKey);\n\n        return new StatusController({ options: { features: this.buildUIFeatures(config) } });\n    }\n\n    buildUIFeatures(config: Config) : StatusResponseFeatures {\n        return {\n            registration: config.registrationEnabled,\n            passwordRecovery: config.passwordRecoveryEnabled,\n            emailVerification: config.emailVerificationEnabled,\n        };\n    }\n\n    createRegistrationService(container: IContainer) {\n        const config = container.resolve(ConfigInjectionKey);\n        const dataSource = container.resolve(DatabaseInjectionKey.DataSource);\n        const realmRepository = container.resolve<Repository<Realm>>(RealmEntity);\n        const repository = new UserRepositoryAdapter({\n            repository: new UserRepository(dataSource),\n            realmRepository,\n        });\n        const mailClient = container.resolve(MailInjectionKey);\n        const mailTemplateRenderer = container.resolve(MailTemplateRendererInjectionKey);\n\n        return new RegistrationService({\n            mailClient,\n            mailTemplateRenderer,\n            repository,\n            realmRepository: new RealmRepositoryAdapter(realmRepository),\n            options: {\n                registrationEnabled: config.registrationEnabled,\n                emailVerificationEnabled: config.emailVerificationEnabled,\n                publicUrl: config.publicUrl,\n            },\n        });\n    }\n\n    createIdentityProvider(container: IContainer) {\n        const config = container.resolve(ConfigInjectionKey);\n        const dataSource = container.resolve(DatabaseInjectionKey.DataSource);\n\n        const accountManager = container.resolve(IdentityInjectionKey.ProviderAccountManager);\n\n        const codeIssuer = container.resolve(OAuth2InjectionToken.AuthorizationCodeIssuer);\n\n        const codeRequestVerifier = container.resolve(OAuth2InjectionToken.AuthorizationCodeRequestVerifier);\n\n        const stateManager = container.resolve(OAuth2InjectionToken.AuthorizationStateManager);\n\n        const realmRepository = container.resolve<Repository<Realm>>(RealmEntity);\n\n        const repository = new IdentityProviderRepositoryAdapter({\n            repository: new IdentityProviderRepository(dataSource),\n            realmRepository,\n        });\n\n        return new IdentityProviderController({\n            options: { baseURL: config.publicUrl },\n\n            repository,\n            realmRepository: new RealmRepositoryAdapter(realmRepository),\n\n            accountManager,\n\n            codeIssuer,\n            codeRequestVerifier,\n            stateManager,\n        });\n    }\n\n    createClientController(container: IContainer) {\n        const realmRepository = container.resolve<Repository<Realm>>(RealmEntity);\n        const repository = new ClientRepositoryAdapter({\n            repository: container.resolve<Repository<Client>>(ClientEntity),\n            realmRepository,\n        });\n        const realmRepositoryAdapter = new RealmRepositoryAdapter(realmRepository);\n        const service = new ClientService({\n            repository,\n            realmRepository: realmRepositoryAdapter, \n        });\n        return new ClientController({\n            service,\n            repository, \n        });\n    }\n\n    createRobotController(container: IContainer) {\n        const dataSource = container.resolve(DatabaseInjectionKey.DataSource);\n        const realmRepository = container.resolve<Repository<Realm>>(RealmEntity);\n        const repository = new RobotRepositoryAdapter({\n            repository: container.resolve<Repository<Robot>>(RobotEntity),\n            realmRepository,\n        });\n        const realmRepositoryAdapter = new RealmRepositoryAdapter(realmRepository);\n        const service = new RobotService({\n            repository,\n            realmRepository: realmRepositoryAdapter, \n        });\n        return new RobotController({\n            service,\n            repository,\n            realmRepository: realmRepositoryAdapter,\n            dataSource,\n        });\n    }\n\n    async createPermissionController(container: IContainer) {\n        const dataSource = container.resolve(DatabaseInjectionKey.DataSource);\n        const realmRepository = container.resolve<Repository<Realm>>(RealmEntity);\n        const repository = new PermissionRepositoryAdapter({\n            repository: container.resolve<Repository<Permission>>(PermissionEntity),\n            realmRepository,\n        });\n\n        const realmRepositoryAdapter = new RealmRepositoryAdapter(realmRepository);\n        const roleRepository = new RoleRepositoryAdapter({\n            repository: container.resolve<Repository<Role>>(RoleEntity),\n            realmRepository,\n        });\n        const rolePermissionRepository = new RolePermissionRepositoryAdapter(\n            container.resolve<Repository<RolePermission>>(RolePermissionEntity),\n        );\n        const policyRepository = new PolicyRepositoryAdapter({\n            repository: new PolicyRepository(dataSource),\n            realmRepository,\n        });\n\n        const permissionPolicyRepository = new PermissionPolicyRepositoryAdapter(\n            container.resolve<Repository<PermissionPolicy>>(PermissionPolicyEntity),\n        );\n\n        const service = new PermissionService({\n            repository,\n            realmRepository: realmRepositoryAdapter,\n            roleRepository,\n            rolePermissionRepository,\n            policyRepository,\n            permissionPolicyRepository,\n        });\n\n        const identityPermissionProvider = container.resolve(IdentityInjectionKey.PermissionProvider);\n        const permissionProvider = new PermissionDatabaseProvider(dataSource);\n\n        const checkerService = new PermissionCheckerService({\n            repository,\n            realmRepository: realmRepositoryAdapter,\n            permissionProvider,\n            identityPermissionProvider,\n        });\n\n        return new PermissionController({\n            service,\n            checkerService,\n        });\n    }\n\n    createRoleController(container: IContainer) {\n        const realmRepository = new RealmRepositoryAdapter(\n            container.resolve<Repository<Realm>>(RealmEntity),\n        );\n        const repository = new RoleRepositoryAdapter({\n            repository: container.resolve<Repository<Role>>(RoleEntity),\n            realmRepository: container.resolve<Repository<Realm>>(RealmEntity),\n        });\n        const service = new RoleService({\n            repository,\n            realmRepository, \n        });\n        return new RoleController({ service });\n    }\n\n    createClientPermissionController(container: IContainer) {\n        const repository = new ClientPermissionRepositoryAdapter(\n            container.resolve<Repository<ClientPermission>>(ClientPermissionEntity),\n        );\n        const identityPermissionProvider = container.resolve(IdentityInjectionKey.PermissionProvider);\n        const service = new ClientPermissionService({\n            repository,\n            identityPermissionProvider, \n        });\n        return new ClientPermissionController({ service });\n    }\n\n    createClientRoleController(container: IContainer) {\n        const repository = new ClientRoleRepositoryAdapter(\n            container.resolve<Repository<ClientRole>>(ClientRoleEntity),\n        );\n        const identityPermissionProvider = container.resolve(IdentityInjectionKey.PermissionProvider);\n        const service = new ClientRoleService({ repository, identityPermissionProvider });\n        return new ClientRoleController({ service });\n    }\n\n    createClientScopeController(container: IContainer) {\n        const repository = new ClientScopeRepositoryAdapter(\n            container.resolve<Repository<ClientScope>>(ClientScopeEntity),\n        );\n        const service = new ClientScopeService({ repository });\n        return new ClientScopeController({ service });\n    }\n\n    createRobotPermissionController(container: IContainer) {\n        const repository = new RobotPermissionRepositoryAdapter(\n            container.resolve<Repository<RobotPermission>>(RobotPermissionEntity),\n        );\n        const identityPermissionProvider = container.resolve(IdentityInjectionKey.PermissionProvider);\n        const service = new RobotPermissionService({\n            repository,\n            identityPermissionProvider, \n        });\n        return new RobotPermissionController({ service });\n    }\n\n    createRobotRoleController(container: IContainer) {\n        const repository = new RobotRoleRepositoryAdapter(\n            container.resolve<Repository<RobotRole>>(RobotRoleEntity),\n        );\n        const identityPermissionProvider = container.resolve(IdentityInjectionKey.PermissionProvider);\n        const service = new RobotRoleService({ repository, identityPermissionProvider });\n        return new RobotRoleController({ service });\n    }\n\n    createRoleAttributeController(container: IContainer) {\n        const dataSource = container.resolve(DatabaseInjectionKey.DataSource);\n        const repository = new RoleAttributeRepositoryAdapter(\n            container.resolve<Repository<RoleAttribute>>(RoleAttributeEntity),\n        );\n        const reservedNames = new Set(\n            dataSource.getMetadata(RoleEntity).columns.map((c) => c.propertyName),\n        );\n        const service = new RoleAttributeService({ repository, reservedNames });\n        return new RoleAttributeController({ service });\n    }\n\n    createRolePermissionController(container: IContainer) {\n        const repository = new RolePermissionRepositoryAdapter(\n            container.resolve<Repository<RolePermission>>(RolePermissionEntity),\n        );\n        const identityPermissionProvider = container.resolve(IdentityInjectionKey.PermissionProvider);\n        const service = new RolePermissionService({\n            repository,\n            identityPermissionProvider, \n        });\n        return new RolePermissionController({ service });\n    }\n\n    createPermissionPolicyController(container: IContainer) {\n        const repository = new PermissionPolicyRepositoryAdapter(\n            container.resolve<Repository<PermissionPolicy>>(PermissionPolicyEntity),\n        );\n        const service = new PermissionPolicyService({ repository });\n        return new PermissionPolicyController({ service });\n    }\n\n    createScopeController(container: IContainer) {\n        const realmRepository = new RealmRepositoryAdapter(\n            container.resolve<Repository<Realm>>(RealmEntity),\n        );\n        const repository = new ScopeRepositoryAdapter({\n            repository: container.resolve<Repository<Scope>>(ScopeEntity),\n            realmRepository: container.resolve<Repository<Realm>>(RealmEntity),\n        });\n        const service = new ScopeService({\n            repository,\n            realmRepository, \n        });\n        return new ScopeController({ service });\n    }\n\n    createUserController(container: IContainer) {\n        const dataSource = container.resolve(DatabaseInjectionKey.DataSource);\n        const realmRepository = container.resolve<Repository<Realm>>(RealmEntity);\n        const repository = new UserRepositoryAdapter({\n            repository: new UserRepository(dataSource),\n            realmRepository,\n        });\n        const realmRepositoryAdapter = new RealmRepositoryAdapter(realmRepository);\n        const service = new UserService({\n            repository,\n            realmRepository: realmRepositoryAdapter, \n        });\n        return new UserController({ service });\n    }\n\n    createUserAttributeController(container: IContainer) {\n        const dataSource = container.resolve(DatabaseInjectionKey.DataSource);\n        const repository = new UserAttributeRepositoryAdapter(\n            container.resolve<Repository<UserAttribute>>(UserAttributeEntity),\n        );\n        const reservedNames = new Set(\n            dataSource.getMetadata(UserEntity).columns.map((c) => c.propertyName),\n        );\n        const service = new UserAttributeService({ repository, reservedNames });\n        return new UserAttributeController({ service });\n    }\n\n    createUserPermissionController(container: IContainer) {\n        const repository = new UserPermissionRepositoryAdapter(\n            container.resolve<Repository<UserPermission>>(UserPermissionEntity),\n        );\n        const identityPermissionProvider = container.resolve(IdentityInjectionKey.PermissionProvider);\n        const service = new UserPermissionService({\n            repository,\n            identityPermissionProvider, \n        });\n        return new UserPermissionController({ service });\n    }\n\n    createUserRoleController(container: IContainer) {\n        const repository = new UserRoleRepositoryAdapter(\n            container.resolve<Repository<UserRole>>(UserRoleEntity),\n        );\n        const identityPermissionProvider = container.resolve(IdentityInjectionKey.PermissionProvider);\n        const service = new UserRoleService({ repository, identityPermissionProvider });\n        return new UserRoleController({ service });\n    }\n\n    createPolicyController(container: IContainer) {\n        const dataSource = container.resolve(DatabaseInjectionKey.DataSource);\n        const realmRepository = container.resolve<Repository<Realm>>(RealmEntity);\n        const repository = new PolicyRepositoryAdapter({\n            repository: new PolicyRepository(dataSource),\n            realmRepository,\n        });\n        const realmRepositoryAdapter = new RealmRepositoryAdapter(realmRepository);\n        const service = new PolicyService({\n            repository,\n            realmRepository: realmRepositoryAdapter, \n        });\n        const identityPermissionProvider = container.resolve(IdentityInjectionKey.PermissionProvider);\n        const checkerService = new PolicyCheckerService({\n            repository,\n            realmRepository: realmRepositoryAdapter,\n            identityPermissionProvider,\n        });\n\n        return new PolicyController({\n            service,\n            checkerService,\n        });\n    }\n\n    createIdentityProviderRoleController(container: IContainer) {\n        const repository = new IdentityProviderRoleMappingRepositoryAdapter(\n            container.resolve<Repository<any>>(IdentityProviderRoleMappingEntity),\n        );\n        const identityPermissionProvider = container.resolve(IdentityInjectionKey.PermissionProvider);\n        const service = new IdentityProviderRoleMappingService({ repository, identityPermissionProvider });\n        return new IdentityProviderRoleMappingController({ service });\n    }\n\n    createJwkController(container: IContainer) {\n        const dataSource = container.resolve(DatabaseInjectionKey.DataSource);\n        const repository = dataSource.getRepository(KeyEntity);\n        return new JwkController({ repository });\n    }\n\n    createRealmController(container: IContainer) {\n        const config = container.resolve(ConfigInjectionKey);\n        const dataSource = container.resolve(DatabaseInjectionKey.DataSource);\n        const realmRepository = container.resolve<Repository<Realm>>(RealmEntity);\n        const repository = new RealmRepositoryAdapter(realmRepository);\n\n        const clientRepository = new ClientRepositoryAdapter({\n            repository: container.resolve<Repository<Client>>(ClientEntity),\n            realmRepository,\n        });\n        const logger = container.resolve(LoggerInjectionKey);\n        const webClientProvisioner = new WebClientProvisioner({\n            clientRepository,\n            appOrigins: getAppOrigins(config),\n            logger,\n        });\n\n        const service = new RealmService({\n            repository, \n            webClientProvisioner, \n            logger, \n        });\n        const keyRepository = dataSource.getRepository(KeyEntity);\n\n        return new RealmController({\n            options: { baseURL: config.publicUrl },\n            service,\n            keyRepository,\n        });\n    }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AA2JA,IAAamH,uBAAb,MAAaA;CACT,MAAMC,MAAMC,QAAaC,WAAsC;EAC3D,MAAMC,kBAAkB,KAAKC,sBAAsBF,SAAAA;EACnD,MAAMG,iBAAiB,KAAKC,qBAAqBJ,SAAAA;EACjD,MAAMK,uBAAuB,MAAM,KAAKC,2BAA2BN,SAAAA;EACnE,MAAMO,6BAA6B,KAAKC,iCAAiCR,SAAAA;EACzE,MAAMS,mBAAmB,KAAKC,uBAAuBV,SAAAA;EACrD,MAAMW,kBAAkB,KAAKC,sBAAsBZ,SAAAA;EACnD,MAAMa,6BAA6B,KAAKC,iCAAiCd,SAAAA;EACzE,MAAMe,uBAAuB,KAAKC,2BAA2BhB,SAAAA;EAC7D,MAAMiB,wBAAwB,KAAKC,4BAA4BlB,SAAAA;EAC/D,MAAMmB,4BAA4B,KAAKC,gCAAgCpB,SAAAA;EACvE,MAAMqB,sBAAsB,KAAKC,0BAA0BtB,SAAAA;EAC3D,MAAMuB,0BAA0B,KAAKC,8BAA8BxB,SAAAA;EACnE,MAAMyB,2BAA2B,KAAKC,+BAA+B1B,SAAAA;EACrE,MAAM2B,kBAAkB,KAAKC,sBAAsB5B,SAAAA;EACnD,MAAM6B,iBAAiB,KAAKC,qBAAqB9B,SAAAA;EACjD,MAAM+B,0BAA0B,KAAKC,8BAA8BhC,SAAAA;EACnE,MAAMiC,2BAA2B,KAAKC,+BAA+BlC,SAAAA;EACrE,MAAMmC,qBAAqB,KAAKC,yBAAyBpC,SAAAA;EACzD,MAAMqC,mBAAmB,KAAKC,uBAAuBtC,SAAAA;EACrD,MAAMuC,iCAAiC,KAAKC,qCAAqCxC,SAAAA;EAEjFD,OAAO0C,IAAI/J,WAAW,EAClBgK,aAAa;GACT,KAAKC,gBAAgB3C,SAAAA;GACrB,KAAK4C,YAAY5C,SAAAA;GACjB,KAAK6C,oBAAoB7C,SAAAA;GACzB,KAAK8C,uBAAuB9C,SAAAA;GAC5B,KAAK+C,yBAAyB/C,SAAAA;GAC9B,KAAKgD,+BAA+BhD,SAAAA;GACpC,KAAKiD,8BAA8BjD,SAAAA;GACnC,KAAKkD,yBAAyBlD,SAAAA;GAE9B,KAAKmD,uBAAuBnD,SAAAA;GAE5BS;GACAI;GACAE;GACAE;GACAsB;GACA,KAAKa,uBAAuBpD,SAAAA;GAC5BK;GACAE;GACA8B;GACA1B;GACAQ;GACAE;GACApB;GACAE;GACAoB;GACAE;GACAE;GACAE;GACAE;GACAE;GACAE;IAER,CAAA,CAAA;CACJ;CAIAQ,gBAAgB3C,WAAuB;EACnC,MAAMqD,SAASrD,UAAUsD,QAAQ9D,kBAAAA;EACjC,MAAM+D,oBAAoBvD,UAAUsD,QAAQhE,qBAAqBkE,iBAAiB;EAClF,MAAMC,oBAAoBzD,UAAUsD,QAAQhE,qBAAqBoE,iBAAiB;EAElF,MAAMC,aAAa3D,UAAUsD,QAAQhE,qBAAqBsE,uBAAuB;EACjF,MAAMC,sBAAsB7D,UAAUsD,QAAQhE,qBAAqBwE,gCAAgC;EAEnG,MAAMC,mBAAmB/D,UAAUsD,QAAQ/D,qBAAqByE,QAAQ;EAExE,OAAO,IAAIjH,oBAAoB;GAC3BkH,SAAS;IACLC,SAASb,OAAOc;IAChBC,UAAU,KAAKC,gBAAgBhB,MAAAA;GACnC;GAEAE;GACAE;GAEAE;GACAE;GAEAE;EACJ,CAAA;CACJ;CAEAnB,YAAY5C,WAAuB;EAC/B,MAAMsE,iBAAiBtE,UAAUsD,QAAQjE,2BAA2BkF,cAAc;EAElF,MAAMC,eAAexE,UAAUsD,QAAQhE,qBAAqBmF,yBAAyB;EAErF,MAAMlB,oBAAoBvD,UAAUsD,QAAQhE,qBAAqBkE,iBAAiB;EAClF,MAAMkB,qBAAqB1E,UAAUsD,QAAQhE,qBAAqBqF,kBAAkB;EAEpF,MAAMC,eAAe5E,UAAUsD,QAAQhE,qBAAqBuF,YAAY;EACxE,MAAMC,gBAAgB9E,UAAUsD,QAAQhE,qBAAqByF,aAAa;EAE1E,MAAMhB,mBAAmB/D,UAAUsD,QAAQ/D,qBAAqByE,QAAQ;EACxE,MAAMgB,8CAA8ChF,UAAUsD,QAAQ/D,qBAAqB0F,mCAAmC;EAc9H,OAAO,IAAI3H,gBAAgB;GACvBkH;GAEAjB;GACAmB;GAEAI;GACAF;GAEAb;GACAmB,4BAtB+BlF,UAAUsD,QAAQ/D,qBAAqB4F,kBAsBtED;GAEAE,qBAAAA,IAtB4B7H,oBAAoBwG,gBAsBhDqB;GACAC,oBAAAA,IAtB2B9G,mBAAmBwF,gBAsB9CsB;GACAC,mBAAAA,IArB0B1H,yBAAyB,CACnDoH,6CACA,IAAIhG,kBAAkB+E,gBAAAA,CAAAA,CAmBtBuB;GAEAC,2BAAAA,IAlBkCzH,0BAA0BiG,gBAkB5DwB;GAEAjB;EACJ,CAAA;CACJ;CAEAxB,uBAAuB9C,WAAuB;EAG1C,OAAO,IAAI/C,iBAAiB,EAAEiH,SAFflE,UAAUsD,QAAQ9D,kBAEM6D,CAAAA,CAAOc,UAAU,CAAA;CAC5D;CAEApB,yBAAyB/C,WAAuB;EAC5C,MAAMqD,SAASrD,UAAUsD,QAAQ9D,kBAAAA;EAEjC,OAAO,IAAI1C,mBAAmB;GAC1BmH,SAAS;IACLC,SAASb,OAAOc;IAChBC,UAAU,KAAKC,gBAAgBhB,MAAAA;GACnC;GACAmC,SAAS,KAAKC,0BAA0BzF,SAAAA;EAC5C,CAAA;CACJ;CAEAgD,+BAA+BhD,WAAuB;EAClD,MAAMqD,SAASrD,UAAUsD,QAAQ9D,kBAAAA;EAEjC,OAAO,IAAItC,yBAAyB;GAChC+G,SAAS;IACLC,SAASb,OAAOc;IAChBC,UAAU,KAAKC,gBAAgBhB,MAAAA;GACnC;GACAmC,SAAS,KAAKE,8BAA8B1F,SAAAA;EAChD,CAAA;CACJ;CAEAiD,8BAA8BjD,WAAuB;EACjD,MAAMqD,SAASrD,UAAUsD,QAAQ9D,kBAAAA;EAEjC,OAAO,IAAIrC,wBAAwB;GAC/B8G,SAAS;IACLC,SAASb,OAAOc;IAChBC,UAAU,KAAKC,gBAAgBhB,MAAAA;GACnC;GACAmC,SAAS,KAAKE,8BAA8B1F,SAAAA;EAChD,CAAA;CACJ;CAEA0F,8BAA8B1F,WAAuB;EACjD,MAAMqD,SAASrD,UAAUsD,QAAQ9D,kBAAAA;EACjC,MAAMmG,aAAa3F,UAAUsD,QAAQhJ,qBAAqBsL,UAAU;EACpE,MAAMC,kBAAkB7F,UAAUsD,QAA2BjK,WAAAA;EAC7D,MAAMyM,aAAa,IAAIvK,sBAAsB;GACzCuK,YAAY,IAAI9L,eAAe2L,UAAAA;GAC/BE;EACJ,CAAA;EAIA,OAAO,IAAI9H,wBAAwB;GAC/BgI,YAJe/F,UAAUsD,QAAQ3D,gBAIjCoG;GACAC,sBAJyBhG,UAAUsD,QAAQ1D,gCAI3CoG;GACAF;GACAD,iBAAiB,IAAIhL,uBAAuBgL,eAAAA;GAC5C5B,SAAS;IACLgC,yBAAyB5C,OAAO4C;IAChCC,0BAA0B7C,OAAO6C;IACjC/B,WAAWd,OAAOc;GACtB;EACJ,CAAA;CACJ;CAEAjB,yBAAyBlD,WAAuB;EAC5C,MAAMqD,SAASrD,UAAUsD,QAAQ9D,kBAAAA;EAEjC,OAAO,IAAIpC,mBAAmB;GAC1B6G,SAAS;IACLC,SAASb,OAAOc;IAChBC,UAAU,KAAKC,gBAAgBhB,MAAAA;GACnC;GACAmC,SAAS,KAAKC,0BAA0BzF,SAAAA;EAC5C,CAAA;CACJ;CAEAmD,uBAAuBnD,WAAuB;EAC1C,MAAMqD,SAASrD,UAAUsD,QAAQ9D,kBAAAA;EAEjC,OAAO,IAAInC,iBAAiB,EAAE4G,SAAS,EAAEG,UAAU,KAAKC,gBAAgBhB,MAAAA,EAAQ,EAAE,CAAA;CACtF;CAEAgB,gBAAgBhB,QAAyC;EACrD,OAAO;GACH8C,cAAc9C,OAAO+C;GACrBC,kBAAkBhD,OAAO4C;GACzBK,mBAAmBjD,OAAO6C;EAC9B;CACJ;CAEAT,0BAA0BzF,WAAuB;EAC7C,MAAMqD,SAASrD,UAAUsD,QAAQ9D,kBAAAA;EACjC,MAAMmG,aAAa3F,UAAUsD,QAAQhJ,qBAAqBsL,UAAU;EACpE,MAAMC,kBAAkB7F,UAAUsD,QAA2BjK,WAAAA;EAC7D,MAAMyM,aAAa,IAAIvK,sBAAsB;GACzCuK,YAAY,IAAI9L,eAAe2L,UAAAA;GAC/BE;EACJ,CAAA;EAIA,OAAO,IAAIvH,oBAAoB;GAC3ByH,YAJe/F,UAAUsD,QAAQ3D,gBAIjCoG;GACAC,sBAJyBhG,UAAUsD,QAAQ1D,gCAI3CoG;GACAF;GACAD,iBAAiB,IAAIhL,uBAAuBgL,eAAAA;GAC5C5B,SAAS;IACLmC,qBAAqB/C,OAAO+C;IAC5BF,0BAA0B7C,OAAO6C;IACjC/B,WAAWd,OAAOc;GACtB;EACJ,CAAA;CACJ;CAEAf,uBAAuBpD,WAAuB;EAC1C,MAAMqD,SAASrD,UAAUsD,QAAQ9D,kBAAAA;EACjC,MAAMmG,aAAa3F,UAAUsD,QAAQhJ,qBAAqBsL,UAAU;EAEpE,MAAMW,iBAAiBvG,UAAUsD,QAAQ/D,qBAAqBiH,sBAAsB;EAEpF,MAAM7C,aAAa3D,UAAUsD,QAAQhE,qBAAqBsE,uBAAuB;EAEjF,MAAMC,sBAAsB7D,UAAUsD,QAAQhE,qBAAqBwE,gCAAgC;EAEnG,MAAM2C,eAAezG,UAAUsD,QAAQhE,qBAAqBoH,yBAAyB;EAErF,MAAMb,kBAAkB7F,UAAUsD,QAA2BjK,WAAAA;EAE7D,MAAMyM,aAAa,IAAIvL,kCAAkC;GACrDuL,YAAY,IAAI/M,2BAA2B4M,UAAAA;GAC3CE;EACJ,CAAA;EAEA,OAAO,IAAIhK,2BAA2B;GAClCoI,SAAS,EAAEC,SAASb,OAAOc,UAAU;GAErC2B;GACAD,iBAAiB,IAAIhL,uBAAuBgL,eAAAA;GAE5CU;GAEA5C;GACAE;GACA4C;EACJ,CAAA;CACJ;CAEA/F,uBAAuBV,WAAuB;EAC1C,MAAM6F,kBAAkB7F,UAAUsD,QAA2BjK,WAAAA;EAC7D,MAAMyM,aAAa,IAAI3L,wBAAwB;GAC3C2L,YAAY9F,UAAUsD,QAA4B3K,YAAAA;GAClDkN;EACJ,CAAA;EAMA,OAAO,IAAIpK,iBAAiB;GACxB+J,SAAAA,IALgB7H,cAAc;IAC9BmI;IACAD,iBAAiBc,IAHc9L,uBAAuBgL,eAGrCc;GACrB,CAEInB;GACAM;EACJ,CAAA;CACJ;CAEAlF,sBAAsBZ,WAAuB;EACzC,MAAM2F,aAAa3F,UAAUsD,QAAQhJ,qBAAqBsL,UAAU;EACpE,MAAMC,kBAAkB7F,UAAUsD,QAA2BjK,WAAAA;EAC7D,MAAMyM,aAAa,IAAI/K,uBAAuB;GAC1C+K,YAAY9F,UAAUsD,QAA2BhK,WAAAA;GACjDuM;EACJ,CAAA;EACA,MAAMc,yBAAyB,IAAI9L,uBAAuBgL,eAAAA;EAK1D,OAAO,IAAI1J,gBAAgB;GACvBqJ,SAAAA,IALgB9G,aAAa;IAC7BoH;IACAD,iBAAiBc;GACrB,CAEInB;GACAM;GACAD,iBAAiBc;GACjBhB;EACJ,CAAA;CACJ;CAEA,MAAMrF,2BAA2BN,WAAuB;EACpD,MAAM2F,aAAa3F,UAAUsD,QAAQhJ,qBAAqBsL,UAAU;EACpE,MAAMC,kBAAkB7F,UAAUsD,QAA2BjK,WAAAA;EAC7D,MAAMyM,aAAa,IAAInL,4BAA4B;GAC/CmL,YAAY9F,UAAUsD,QAAgCpK,gBAAAA;GACtD2M;EACJ,CAAA;EAEA,MAAMc,yBAAyB,IAAI9L,uBAAuBgL,eAAAA;EAiB1D,MAAML,UAAU,IAAItH,kBAAkB;GAClC4H;GACAD,iBAAiBc;GACjBC,gBAAAA,IAnBuBzL,sBAAsB;IAC7C2K,YAAY9F,UAAUsD,QAA0B5J,UAAAA;IAChDmM;GACJ,CAgBIe;GACAC,0BAAAA,IAhBiC3L,gCACjC8E,UAAUsD,QAAoC3J,oBAAAA,CAe9CkN;GACAC,kBAAAA,IAdyBlM,wBAAwB;IACjDkL,YAAY,IAAI1M,iBAAiBuM,UAAAA;IACjCE;GACJ,CAWIiB;GACAC,4BAAAA,IAVmCrM,kCACnCsF,UAAUsD,QAAsCnK,sBAAAA,CAShD4N;EACJ,CAAA;EAEA,MAAM7B,6BAA6BlF,UAAUsD,QAAQ/D,qBAAqB4F,kBAAkB;EAU5F,OAAO,IAAIpJ,qBAAqB;GAC5ByJ;GACAyB,gBAAAA,IATuBjJ,yBAAyB;IAChD8H;IACAD,iBAAiBc;IACjBK,oBAAAA,IAL2BvM,2BAA2BkL,UAKtDqB;IACA9B;GACJ,CAII+B;EACJ,CAAA;CACJ;CAEA7G,qBAAqBJ,WAAuB;EACxC,MAAM6F,kBAAkB,IAAIhL,uBACxBmF,UAAUsD,QAA2BjK,WAAAA,CAAAA;EAUzC,OAAO,IAAIkD,eAAe,EAAEiJ,SAAAA,IAJR3G,YAAY;GAC5BiH,YAAAA,IALmB3K,sBAAsB;IACzC2K,YAAY9F,UAAUsD,QAA0B5J,UAAAA;IAChDmM,iBAAiB7F,UAAUsD,QAA2BjK,WAAAA;GAC1D,CAEIyM;GACAD;EACJ,CAC4BL,EAAQ,CAAA;CACxC;CAEA1E,iCAAiCd,WAAuB;EASpD,OAAO,IAAItE,2BAA2B,EAAE8J,SAAAA,IAJpBhI,wBAAwB;GACxCsI,YAAAA,IALmB5L,kCACnB8F,UAAUsD,QAAsC1K,sBAAAA,CAIhDkN;GACAZ,4BAH+BlF,UAAUsD,QAAQ/D,qBAAqB4F,kBAGtED;EACJ,CACwCM,EAAQ,CAAA;CACpD;CAEAxE,2BAA2BhB,WAAuB;EAM9C,OAAO,IAAIrE,qBAAqB,EAAE6J,SAAAA,IADd/H,kBAAkB;GAAEqI,YAAAA,IAJjB1L,4BACnB4F,UAAUsD,QAAgCzK,gBAAAA,CAGNiN;GAAYZ,4BADjBlF,UAAUsD,QAAQ/D,qBAAqB4F,kBACtBD;EAA2B,CAC7CM,EAAQ,CAAA;CAC9C;CAEAtE,4BAA4BlB,WAAuB;EAK/C,OAAO,IAAIpE,sBAAsB,EAAE4J,SAAAA,IADf9H,mBAAmB,EAAEoI,YAAAA,IAHlBzL,6BACnB2F,UAAUsD,QAAiCxK,iBAAAA,CAENgN,EAAW,CACjBN,EAAQ,CAAA;CAC/C;CAEApE,gCAAgCpB,WAAuB;EASnD,OAAO,IAAI5D,0BAA0B,EAAEoJ,SAAAA,IAJnBhH,uBAAuB;GACvCsH,YAAAA,IALmBhL,iCACnBkF,UAAUsD,QAAqC/J,qBAAAA,CAI/CuM;GACAZ,4BAH+BlF,UAAUsD,QAAQ/D,qBAAqB4F,kBAGtED;EACJ,CACuCM,EAAQ,CAAA;CACnD;CAEAlE,0BAA0BtB,WAAuB;EAM7C,OAAO,IAAI3D,oBAAoB,EAAEmJ,SAAAA,IADb/G,iBAAiB;GAAEqH,YAAAA,IAJhB9K,2BACnBgF,UAAUsD,QAA+B9J,eAAAA,CAGNsM;GAAYZ,4BADhBlF,UAAUsD,QAAQ/D,qBAAqB4F,kBACvBD;EAA2B,CAC7CM,EAAQ,CAAA;CAC7C;CAEAhE,8BAA8BxB,WAAuB;EACjD,MAAM2F,aAAa3F,UAAUsD,QAAQhJ,qBAAqBsL,UAAU;EAQpE,OAAO,IAAItJ,wBAAwB,EAAEkJ,SAAAA,IADjB7G,qBAAqB;GAAEmH,YAAAA,IANpB7K,+BACnB+E,UAAUsD,QAAmC7J,mBAAAA,CAKNqM;GAAYoB,eAAAA,IAH7BC,IACtBxB,WAAWyB,YAAY1N,UAAAA,CAAAA,CAAY2N,QAAQC,KAAKC,MAAMA,EAAEC,YAAY,CAEjBN;EAAc,CAChC1B,EAAQ,CAAA;CACjD;CAEA9D,+BAA+B1B,WAAuB;EASlD,OAAO,IAAIxD,yBAAyB,EAAEgJ,SAAAA,IAJlB5G,sBAAsB;GACtCkH,YAAAA,IALmB5K,gCACnB8E,UAAUsD,QAAoC3J,oBAAAA,CAI9CmM;GACAZ,4BAH+BlF,UAAUsD,QAAQ/D,qBAAqB4F,kBAGtED;EACJ,CACsCM,EAAQ,CAAA;CAClD;CAEAhF,iCAAiCR,WAAuB;EAKpD,OAAO,IAAIhE,2BAA2B,EAAEwJ,SAAAA,IADpBvH,wBAAwB,EAAE6H,YAAAA,IAHvBpL,kCACnBsF,UAAUsD,QAAsCnK,sBAAAA,CAEN2M,EAAW,CACjBN,EAAQ,CAAA;CACpD;CAEA5D,sBAAsB5B,WAAuB;EACzC,MAAM6F,kBAAkB,IAAIhL,uBACxBmF,UAAUsD,QAA2BjK,WAAAA,CAAAA;EAUzC,OAAO,IAAIoD,gBAAgB,EAAE+I,SAAAA,IAJT1G,aAAa;GAC7BgH,YAAAA,IALmB1K,uBAAuB;IAC1C0K,YAAY9F,UAAUsD,QAA2B1J,WAAAA;IACjDiM,iBAAiB7F,UAAUsD,QAA2BjK,WAAAA;GAC1D,CAEIyM;GACAD;EACJ,CAC6BL,EAAQ,CAAA;CACzC;CAEA1D,qBAAqB9B,WAAuB;EACxC,MAAM2F,aAAa3F,UAAUsD,QAAQhJ,qBAAqBsL,UAAU;EACpE,MAAMC,kBAAkB7F,UAAUsD,QAA2BjK,WAAAA;EAU7D,OAAO,IAAIsD,eAAe,EAAE6I,SAAAA,IAJRrG,YAAY;GAC5B2G,YAAAA,IANmBvK,sBAAsB;IACzCuK,YAAY,IAAI9L,eAAe2L,UAAAA;IAC/BE;GACJ,CAGIC;GACAD,iBAAiBc,IAHc9L,uBAAuBgL,eAGrCc;EACrB,CAC4BnB,EAAQ,CAAA;CACxC;CAEAxD,8BAA8BhC,WAAuB;EACjD,MAAM2F,aAAa3F,UAAUsD,QAAQhJ,qBAAqBsL,UAAU;EAQpE,OAAO,IAAIlJ,wBAAwB,EAAE8I,SAAAA,IADjBzG,qBAAqB;GAAE+G,YAAAA,IANpBzK,+BACnB2E,UAAUsD,QAAmCzJ,mBAAAA,CAKNiM;GAAYoB,eAAAA,IAH7BC,IACtBxB,WAAWyB,YAAYtN,UAAAA,CAAAA,CAAYuN,QAAQC,KAAKC,MAAMA,EAAEC,YAAY,CAEjBN;EAAc,CAChC1B,EAAQ,CAAA;CACjD;CAEAtD,+BAA+BlC,WAAuB;EASlD,OAAO,IAAIpD,yBAAyB,EAAE4I,SAAAA,IAJlBvG,sBAAsB;GACtC6G,YAAAA,IALmBxK,gCACnB0E,UAAUsD,QAAoCvJ,oBAAAA,CAI9C+L;GACAZ,4BAH+BlF,UAAUsD,QAAQ/D,qBAAqB4F,kBAGtED;EACJ,CACsCM,EAAQ,CAAA;CAClD;CAEApD,yBAAyBpC,WAAuB;EAM5C,OAAO,IAAInD,mBAAmB,EAAE2I,SAAAA,IADZtG,gBAAgB;GAAE4G,YAAAA,IAJftK,0BACnBwE,UAAUsD,QAA8BrJ,cAAAA,CAGN6L;GAAYZ,4BADflF,UAAUsD,QAAQ/D,qBAAqB4F,kBACxBD;EAA2B,CAC7CM,EAAQ,CAAA;CAC5C;CAEAlD,uBAAuBtC,WAAuB;EAC1C,MAAM2F,aAAa3F,UAAUsD,QAAQhJ,qBAAqBsL,UAAU;EACpE,MAAMC,kBAAkB7F,UAAUsD,QAA2BjK,WAAAA;EAC7D,MAAMyM,aAAa,IAAIlL,wBAAwB;GAC3CkL,YAAY,IAAI1M,iBAAiBuM,UAAAA;GACjCE;EACJ,CAAA;EACA,MAAMc,yBAAyB,IAAI9L,uBAAuBgL,eAAAA;EAY1D,OAAO,IAAI5J,iBAAiB;GACxBuJ,SAAAA,IAZgBpH,cAAc;IAC9B0H;IACAD,iBAAiBc;GACrB,CASInB;GACAyB,gBAAAA,IARuB9I,qBAAqB;IAC5C2H;IACAD,iBAAiBc;IACjBzB,4BAJ+BlF,UAAUsD,QAAQ/D,qBAAqB4F,kBAItED;GACJ,CAII+B;EACJ,CAAA;CACJ;CAEAzE,qCAAqCxC,WAAuB;EAMxD,OAAO,IAAIlE,sCAAsC,EAAE0J,SAAAA,IAD/B3H,mCAAmC;GAAEiI,YAAAA,IAJlCtL,6CACnBwF,UAAUsD,QAAyBtK,iCAAAA,CAGkB8M;GAAYZ,4BADlClF,UAAUsD,QAAQ/D,qBAAqB4F,kBACLD;EAA2B,CAC7CM,EAAQ,CAAA;CAC/D;CAEA3C,oBAAoB7C,WAAuB;EAGvC,OAAO,IAAIhD,cAAc,EAAE8I,YAFR9F,UAAUsD,QAAQhJ,qBAAqBsL,UACvCD,CAAAA,CAAW8B,cAAcxO,SACjB6M,EAAW,CAAA;CAC1C;CAEA5F,sBAAsBF,WAAuB;EACzC,MAAMqD,SAASrD,UAAUsD,QAAQ9D,kBAAAA;EACjC,MAAMmG,aAAa3F,UAAUsD,QAAQhJ,qBAAqBsL,UAAU;EACpE,MAAMC,kBAAkB7F,UAAUsD,QAA2BjK,WAAAA;EAC7D,MAAMyM,aAAa,IAAIjL,uBAAuBgL,eAAAA;EAE9C,MAAM6B,mBAAmB,IAAIvN,wBAAwB;GACjD2L,YAAY9F,UAAUsD,QAA4B3K,YAAAA;GAClDkN;EACJ,CAAA;EACA,MAAM8B,SAAS3H,UAAUsD,QAAQ5D,kBAAAA;EAOjC,MAAM8F,UAAU,IAAInH,aAAa;GAC7ByH;GACA8B,sBAAAA,IAR6BxI,qBAAqB;IAClDsI;IACAG,YAAYpI,cAAc4D,MAAAA;IAC1BsE;GACJ,CAIIC;GACAD;EACJ,CAAA;EACA,MAAMG,gBAAgBnC,WAAW8B,cAAcxO,SAAAA;EAE/C,OAAO,IAAIiD,gBAAgB;GACvB+H,SAAS,EAAEC,SAASb,OAAOc,UAAU;GACrCqB;GACAsC;EACJ,CAAA;CACJ;AACJ"}
+{"version":3,"file":"controller.mjs","names":["decorators","ClientEntity","ClientPermissionEntity","ClientRoleEntity","ClientScopeEntity","IdentityProviderRepository","IdentityProviderRoleMappingEntity","KeyEntity","PermissionEntity","PermissionPolicyEntity","PolicyRepository","RealmEntity","RobotEntity","RobotPermissionEntity","RobotRoleEntity","RoleAttributeEntity","RoleEntity","RolePermissionEntity","ScopeEntity","UserAttributeEntity","UserEntity","UserPermissionEntity","UserRepository","UserRoleEntity","ClientPermissionRepositoryAdapter","ClientRepositoryAdapter","ClientRoleRepositoryAdapter","ClientScopeRepositoryAdapter","DatabaseInjectionKey","IdentityProviderRepositoryAdapter","IdentityProviderRoleMappingRepositoryAdapter","PermissionDatabaseProvider","PermissionPolicyRepositoryAdapter","PermissionRepositoryAdapter","PolicyRepositoryAdapter","RealmRepositoryAdapter","RobotPermissionRepositoryAdapter","RobotRepositoryAdapter","RobotRoleRepositoryAdapter","RoleAttributeRepositoryAdapter","RolePermissionRepositoryAdapter","RoleRepositoryAdapter","ScopeRepositoryAdapter","UserAttributeRepositoryAdapter","UserPermissionRepositoryAdapter","UserRepositoryAdapter","UserRoleRepositoryAdapter","ClientController","ClientPermissionController","ClientRoleController","ClientScopeController","IdentityProviderController","IdentityProviderRoleMappingController","PermissionController","PermissionPolicyController","PolicyController","RealmController","RobotController","RobotPermissionController","RobotRoleController","RoleAttributeController","RoleController","RolePermissionController","ScopeController","SessionController","UserAttributeController","UserController","UserPermissionController","UserRoleController","ActivateController","AuthorizeController","JwkController","LogoutController","OpenIDController","PasswordForgotController","PasswordResetController","RegisterController","StatusController","TokenController","ClientAuthenticator","ClientPermissionService","ClientRoleService","ClientScopeService","ClientService","CredentialsAuthenticator","IdentityProviderRoleMappingService","OAuth2ClientAuthenticator","OAuth2EndSessionService","PasswordRecoveryService","PermissionCheckerService","PermissionPolicyService","PermissionService","PolicyCheckerService","PolicyService","RealmService","RegistrationService","RobotAuthenticator","RobotPermissionService","RobotRoleService","RobotService","RoleAttributeService","RolePermissionService","RoleService","ScopeService","SessionService","UserAttributeService","UserAuthenticator","UserPermissionService","UserRoleService","UserService","WebClientProvisioner","AuthenticationInjectionKey","OAuth2InjectionToken","IdentityInjectionKey","ConfigInjectionKey","getAppOrigins","LoggerInjectionKey","MailInjectionKey","MailTemplateRendererInjectionKey","HTTPControllerModule","mount","router","container","realmController","createRealmController","roleController","createRoleController","permissionController","createPermissionController","permissionPolicyController","createPermissionPolicyController","clientController","createClientController","robotController","createRobotController","clientPermissionController","createClientPermissionController","clientRoleController","createClientRoleController","clientScopeController","createClientScopeController","robotPermissionController","createRobotPermissionController","robotRoleController","createRobotRoleController","roleAttributeController","createRoleAttributeController","rolePermissionController","createRolePermissionController","scopeController","createScopeController","sessionController","createSessionController","userController","createUserController","userAttributeController","createUserAttributeController","userPermissionController","createUserPermissionController","userRoleController","createUserRoleController","policyController","createPolicyController","identityProviderRoleController","createIdentityProviderRoleController","use","controllers","createAuthorize","createToken","createJwkController","createOpenIDController","createActivateController","createPasswordForgotController","createPasswordResetController","createRegisterController","createLogoutController","createStatusController","createIdentityProvider","config","resolve","codeIssuer","AuthorizationCodeIssuer","codeRequestVerifier","AuthorizationCodeRequestVerifier","sessionManager","SessionManager","options","baseURL","publicUrl","features","buildUIFeatures","promptLoginMaxAge","logger","codeVerifier","AuthorizationCodeVerifier","accessTokenIssuer","AccessTokenIssuer","refreshTokenIssuer","RefreshTokenIssuer","openIdTokenIssuer","OpenIDTokenIssuer","keyRepository","KeyRepository","tokenRevoker","TokenRevoker","tokenVerifier","TokenVerifier","tokenRepository","TokenRepository","sessionTokenRepository","SessionTokenRepository","identityResolver","Resolver","identityProviderLdapCollectionAuthenticator","ProviderLdapCollectionAuthenticator","identityPermissionProvider","PermissionProvider","clientAuthenticator","robotAuthenticator","userAuthenticator","oauth2ClientAuthenticator","tokenRefreshGracePeriod","realmRepository","service","createRegistrationService","createPasswordRecoveryService","dataSource","DataSource","repository","mailClient","mailTemplateRenderer","passwordRecoveryEnabled","emailVerificationEnabled","passwordMinLength","clientRepository","ClientRepository","endSessionService","hintGracePeriod","endSessionHintGracePeriod","registration","registrationEnabled","passwordRecovery","emailVerification","accountManager","ProviderAccountManager","stateManager","AuthorizationStateManager","realmRepositoryAdapter","createPermissionRepository","createRoleRepository","roleRepository","rolePermissionRepository","policyRepository","permissionPolicyRepository","permissionProvider","checkerService","permissionRepository","reservedNames","Set","getMetadata","columns","map","c","propertyName","SessionRepository","getRepository","webClientProvisioner","appOrigins"],"sources":["../../../../../src/app/modules/http/modules/controller.ts"],"sourcesContent":["/*\n * Copyright (c) 2025.\n *  Author Peter Placzek (tada5hi)\n *  For the full copyright and license information,\n *  view the LICENSE file that was distributed with this source code.\n */\n\nimport type { App } from 'routup';\nimport { decorators } from '@routup/decorators';\nimport type {\n    Client,\n    ClientPermission,\n    ClientRole,\n    ClientScope,\n    Permission,\n    PermissionPolicy,\n    Realm,\n    Robot,\n    RobotPermission,\n    RobotRole,\n    Role,\n    RoleAttribute,\n    RolePermission,\n    Scope,\n    UserAttribute,\n    UserPermission,\n    UserRole,\n} from '@authup/core-kit';\nimport type { Repository } from 'typeorm';\nimport {\n    ClientEntity,\n    ClientPermissionEntity,\n    ClientRoleEntity,\n    ClientScopeEntity,\n    IdentityProviderRepository,\n    IdentityProviderRoleMappingEntity,\n    KeyEntity,\n    PermissionEntity,\n    PermissionPolicyEntity,\n    PolicyRepository,\n    RealmEntity,\n    RobotEntity,\n    RobotPermissionEntity,\n    RobotRoleEntity,\n    RoleAttributeEntity,\n    RoleEntity,\n    RolePermissionEntity,\n    ScopeEntity,\n    UserAttributeEntity,\n    UserEntity,\n    UserPermissionEntity,\n    UserRepository,\n    UserRoleEntity,\n} from '../../../../adapters/database/domains/index.ts';\nimport {\n    ClientPermissionRepositoryAdapter,\n    ClientRepositoryAdapter,\n    ClientRoleRepositoryAdapter,\n    ClientScopeRepositoryAdapter,\n    DatabaseInjectionKey,\n    IdentityProviderRepositoryAdapter,\n    IdentityProviderRoleMappingRepositoryAdapter,\n    PermissionDatabaseProvider,\n    PermissionPolicyRepositoryAdapter,\n    PermissionRepositoryAdapter,\n    PolicyRepositoryAdapter,\n    RealmRepositoryAdapter,\n    RobotPermissionRepositoryAdapter,\n    RobotRepositoryAdapter,\n    RobotRoleRepositoryAdapter,\n    RoleAttributeRepositoryAdapter,\n    RolePermissionRepositoryAdapter,\n    RoleRepositoryAdapter,\n    ScopeRepositoryAdapter,\n    UserAttributeRepositoryAdapter,\n    UserPermissionRepositoryAdapter,\n    UserRepositoryAdapter,\n    UserRoleRepositoryAdapter,\n} from '../../database/index.ts';\nimport {\n    ClientController,\n    ClientPermissionController,\n    ClientRoleController,\n    ClientScopeController,\n    IdentityProviderController,\n    IdentityProviderRoleMappingController,\n    PermissionController,\n    PermissionPolicyController,\n    PolicyController,\n    RealmController,\n    RobotController,\n    RobotPermissionController,\n    RobotRoleController,\n    RoleAttributeController,\n    RoleController,\n    RolePermissionController,\n    ScopeController,\n    SessionController,\n    UserAttributeController,\n    UserController,\n    UserPermissionController,\n    UserRoleController,\n} from '../../../../adapters/http/index.ts';\nimport {\n    ActivateController,\n    AuthorizeController,\n    JwkController,\n    LogoutController,\n    OpenIDController,\n    PasswordForgotController,\n    PasswordResetController,\n    RegisterController,\n    StatusController,\n    TokenController,\n} from '../../../../adapters/http/controllers/index.ts';\nimport type { IContainer } from 'eldin';\nimport {\n    ClientAuthenticator,\n    ClientPermissionService,\n    ClientRoleService,\n    ClientScopeService,\n    ClientService,\n    CredentialsAuthenticator,\n    IdentityProviderRoleMappingService,\n    OAuth2ClientAuthenticator,\n    OAuth2EndSessionService,\n    PasswordRecoveryService,\n    PermissionCheckerService,\n    PermissionPolicyService,\n    PermissionService,\n    PolicyCheckerService,\n    PolicyService,\n    RealmService,\n    RegistrationService,\n    RobotAuthenticator,\n    RobotPermissionService,\n    RobotRoleService,\n    RobotService,\n    RoleAttributeService,\n    RolePermissionService,\n    RoleService,\n    ScopeService,\n    SessionService,\n    UserAttributeService,\n    UserAuthenticator,\n    UserPermissionService,\n    UserRoleService,\n    UserService,\n    WebClientProvisioner,\n} from '../../../../core/index.ts';\nimport { AuthenticationInjectionKey } from '../../authentication/index.ts';\nimport { OAuth2InjectionToken } from '../../oauth2/index.ts';\nimport { IdentityInjectionKey } from '../../identity/index.ts';\nimport type { StatusResponseFeatures } from '@authup/core-http-kit';\nimport type { Config } from '../../config/index.ts';\nimport { ConfigInjectionKey, getAppOrigins } from '../../config/index.ts';\nimport { LoggerInjectionKey } from '../../logger/index.ts';\nimport { MailInjectionKey, MailTemplateRendererInjectionKey } from '../../mail/index.ts';\n\nexport class HTTPControllerModule {\n    async mount(router: App, container: IContainer): Promise<void> {\n        const realmController = this.createRealmController(container);\n        const roleController = this.createRoleController(container);\n        const permissionController = await this.createPermissionController(container);\n        const permissionPolicyController = this.createPermissionPolicyController(container);\n        const clientController = this.createClientController(container);\n        const robotController = this.createRobotController(container);\n        const clientPermissionController = this.createClientPermissionController(container);\n        const clientRoleController = this.createClientRoleController(container);\n        const clientScopeController = this.createClientScopeController(container);\n        const robotPermissionController = this.createRobotPermissionController(container);\n        const robotRoleController = this.createRobotRoleController(container);\n        const roleAttributeController = this.createRoleAttributeController(container);\n        const rolePermissionController = this.createRolePermissionController(container);\n        const scopeController = this.createScopeController(container);\n        const sessionController = this.createSessionController(container);\n        const userController = this.createUserController(container);\n        const userAttributeController = this.createUserAttributeController(container);\n        const userPermissionController = this.createUserPermissionController(container);\n        const userRoleController = this.createUserRoleController(container);\n        const policyController = this.createPolicyController(container);\n        const identityProviderRoleController = this.createIdentityProviderRoleController(container);\n\n        router.use(decorators({\n            controllers: [\n                this.createAuthorize(container),\n                this.createToken(container),\n                this.createJwkController(container),\n                this.createOpenIDController(container),\n                this.createActivateController(container),\n                this.createPasswordForgotController(container),\n                this.createPasswordResetController(container),\n                this.createRegisterController(container),\n                this.createLogoutController(container),\n\n                this.createStatusController(container),\n\n                clientController,\n                clientPermissionController,\n                clientRoleController,\n                clientScopeController,\n                identityProviderRoleController,\n                this.createIdentityProvider(container),\n                permissionController,\n                permissionPolicyController,\n                policyController,\n                robotController,\n                robotPermissionController,\n                robotRoleController,\n                realmController,\n                roleController,\n                roleAttributeController,\n                rolePermissionController,\n                scopeController,\n                sessionController,\n                userController,\n                userAttributeController,\n                userPermissionController,\n                userRoleController,\n            ],\n        }));\n    }\n\n    // ----------------------------------------------------\n\n    createAuthorize(container: IContainer) {\n        const config = container.resolve(ConfigInjectionKey);\n\n        const codeIssuer = container.resolve(OAuth2InjectionToken.AuthorizationCodeIssuer);\n        const codeRequestVerifier = container.resolve(OAuth2InjectionToken.AuthorizationCodeRequestVerifier);\n\n        const sessionManager = container.resolve(AuthenticationInjectionKey.SessionManager);\n\n        return new AuthorizeController({\n            options: {\n                baseURL: config.publicUrl,\n                features: this.buildUIFeatures(config),\n                promptLoginMaxAge: config.promptLoginMaxAge,\n            },\n\n            codeIssuer,\n            codeRequestVerifier,\n\n            sessionManager,\n        });\n    }\n\n    createToken(container: IContainer) {\n        const config = container.resolve(ConfigInjectionKey);\n        const logger = container.resolve(LoggerInjectionKey);\n\n        const sessionManager = container.resolve(AuthenticationInjectionKey.SessionManager);\n\n        const codeVerifier = container.resolve(OAuth2InjectionToken.AuthorizationCodeVerifier);\n\n        const accessTokenIssuer = container.resolve(OAuth2InjectionToken.AccessTokenIssuer);\n        const refreshTokenIssuer = container.resolve(OAuth2InjectionToken.RefreshTokenIssuer);\n        const openIdTokenIssuer = container.resolve(OAuth2InjectionToken.OpenIDTokenIssuer);\n        const keyRepository = container.resolve(OAuth2InjectionToken.KeyRepository);\n\n        const tokenRevoker = container.resolve(OAuth2InjectionToken.TokenRevoker);\n        const tokenVerifier = container.resolve(OAuth2InjectionToken.TokenVerifier);\n        const tokenRepository = container.resolve(OAuth2InjectionToken.TokenRepository);\n        const sessionTokenRepository = container.resolve(OAuth2InjectionToken.SessionTokenRepository);\n\n        const identityResolver = container.resolve(IdentityInjectionKey.Resolver);\n        const identityProviderLdapCollectionAuthenticator = container.resolve(IdentityInjectionKey.ProviderLdapCollectionAuthenticator);\n\n        const identityPermissionProvider = container.resolve(IdentityInjectionKey.PermissionProvider);\n\n        const clientAuthenticator = new ClientAuthenticator(identityResolver);\n        const robotAuthenticator = new RobotAuthenticator(identityResolver);\n\n        const userAuthenticator = new CredentialsAuthenticator([\n            identityProviderLdapCollectionAuthenticator,\n            new UserAuthenticator(identityResolver),\n        ]);\n\n        const oauth2ClientAuthenticator = new OAuth2ClientAuthenticator(identityResolver);\n\n        return new TokenController({\n            codeVerifier,\n\n            accessTokenIssuer,\n            refreshTokenIssuer,\n            openIdTokenIssuer,\n            keyRepository,\n\n            tokenVerifier,\n            tokenRevoker,\n            tokenRepository,\n            sessionTokenRepository,\n\n            tokenRefreshGracePeriod: config.tokenRefreshGracePeriod,\n            logger,\n\n            identityResolver,\n            identityPermissionProvider,\n\n            clientAuthenticator,\n            robotAuthenticator,\n            userAuthenticator,\n\n            oauth2ClientAuthenticator,\n\n            realmRepository: new RealmRepositoryAdapter(container.resolve<Repository<Realm>>(RealmEntity)),\n\n            sessionManager,\n        });\n    }\n\n    createOpenIDController(container: IContainer) {\n        const config = container.resolve(ConfigInjectionKey);\n\n        return new OpenIDController({ baseURL: config.publicUrl });\n    }\n\n    createActivateController(container: IContainer) {\n        const config = container.resolve(ConfigInjectionKey);\n\n        return new ActivateController({\n            options: {\n                baseURL: config.publicUrl,\n                features: this.buildUIFeatures(config),\n            },\n            service: this.createRegistrationService(container),\n        });\n    }\n\n    createPasswordForgotController(container: IContainer) {\n        const config = container.resolve(ConfigInjectionKey);\n\n        return new PasswordForgotController({\n            options: {\n                baseURL: config.publicUrl,\n                features: this.buildUIFeatures(config),\n            },\n            service: this.createPasswordRecoveryService(container),\n        });\n    }\n\n    createPasswordResetController(container: IContainer) {\n        const config = container.resolve(ConfigInjectionKey);\n\n        return new PasswordResetController({\n            options: {\n                baseURL: config.publicUrl,\n                features: this.buildUIFeatures(config),\n            },\n            service: this.createPasswordRecoveryService(container),\n        });\n    }\n\n    createPasswordRecoveryService(container: IContainer) {\n        const config = container.resolve(ConfigInjectionKey);\n        const dataSource = container.resolve(DatabaseInjectionKey.DataSource);\n        const realmRepository = container.resolve<Repository<Realm>>(RealmEntity);\n        const repository = new UserRepositoryAdapter({\n            repository: new UserRepository(dataSource),\n            realmRepository,\n        });\n        const mailClient = container.resolve(MailInjectionKey);\n        const mailTemplateRenderer = container.resolve(MailTemplateRendererInjectionKey);\n\n        return new PasswordRecoveryService({\n            mailClient,\n            mailTemplateRenderer,\n            repository,\n            realmRepository: new RealmRepositoryAdapter(realmRepository),\n            options: {\n                passwordRecoveryEnabled: config.passwordRecoveryEnabled,\n                emailVerificationEnabled: config.emailVerificationEnabled,\n                publicUrl: config.publicUrl,\n                passwordMinLength: config.passwordMinLength,\n            },\n        });\n    }\n\n    createRegisterController(container: IContainer) {\n        const config = container.resolve(ConfigInjectionKey);\n\n        return new RegisterController({\n            options: {\n                baseURL: config.publicUrl,\n                features: this.buildUIFeatures(config),\n            },\n            service: this.createRegistrationService(container),\n        });\n    }\n\n    createLogoutController(container: IContainer) {\n        const config = container.resolve(ConfigInjectionKey);\n        const tokenVerifier = container.resolve(OAuth2InjectionToken.TokenVerifier);\n        const sessionManager = container.resolve(AuthenticationInjectionKey.SessionManager);\n        const clientRepository = container.resolve(OAuth2InjectionToken.ClientRepository);\n        const realmRepository = new RealmRepositoryAdapter(container.resolve<Repository<Realm>>(RealmEntity));\n\n        const endSessionService = new OAuth2EndSessionService({\n            tokenVerifier,\n            sessionManager,\n            clientRepository,\n            realmRepository,\n            hintGracePeriod: config.endSessionHintGracePeriod,\n        });\n\n        return new LogoutController({\n            options: { baseURL: config.publicUrl },\n            endSessionService,\n        });\n    }\n\n    createStatusController(container: IContainer) {\n        const config = container.resolve(ConfigInjectionKey);\n\n        return new StatusController({ options: { features: this.buildUIFeatures(config) } });\n    }\n\n    buildUIFeatures(config: Config) : StatusResponseFeatures {\n        return {\n            registration: config.registrationEnabled,\n            passwordRecovery: config.passwordRecoveryEnabled,\n            emailVerification: config.emailVerificationEnabled,\n        };\n    }\n\n    createRegistrationService(container: IContainer) {\n        const config = container.resolve(ConfigInjectionKey);\n        const dataSource = container.resolve(DatabaseInjectionKey.DataSource);\n        const realmRepository = container.resolve<Repository<Realm>>(RealmEntity);\n        const repository = new UserRepositoryAdapter({\n            repository: new UserRepository(dataSource),\n            realmRepository,\n        });\n        const mailClient = container.resolve(MailInjectionKey);\n        const mailTemplateRenderer = container.resolve(MailTemplateRendererInjectionKey);\n\n        return new RegistrationService({\n            mailClient,\n            mailTemplateRenderer,\n            repository,\n            realmRepository: new RealmRepositoryAdapter(realmRepository),\n            options: {\n                registrationEnabled: config.registrationEnabled,\n                emailVerificationEnabled: config.emailVerificationEnabled,\n                publicUrl: config.publicUrl,\n                passwordMinLength: config.passwordMinLength,\n            },\n        });\n    }\n\n    createIdentityProvider(container: IContainer) {\n        const config = container.resolve(ConfigInjectionKey);\n        const dataSource = container.resolve(DatabaseInjectionKey.DataSource);\n\n        const accountManager = container.resolve(IdentityInjectionKey.ProviderAccountManager);\n\n        const codeIssuer = container.resolve(OAuth2InjectionToken.AuthorizationCodeIssuer);\n\n        const codeRequestVerifier = container.resolve(OAuth2InjectionToken.AuthorizationCodeRequestVerifier);\n\n        const stateManager = container.resolve(OAuth2InjectionToken.AuthorizationStateManager);\n\n        const realmRepository = container.resolve<Repository<Realm>>(RealmEntity);\n\n        const repository = new IdentityProviderRepositoryAdapter({\n            repository: new IdentityProviderRepository(dataSource),\n            realmRepository,\n        });\n\n        return new IdentityProviderController({\n            options: { baseURL: config.publicUrl },\n\n            repository,\n            realmRepository: new RealmRepositoryAdapter(realmRepository),\n\n            accountManager,\n\n            codeIssuer,\n            codeRequestVerifier,\n            stateManager,\n        });\n    }\n\n    createClientController(container: IContainer) {\n        const realmRepository = container.resolve<Repository<Realm>>(RealmEntity);\n        const repository = new ClientRepositoryAdapter({\n            repository: container.resolve<Repository<Client>>(ClientEntity),\n            realmRepository,\n        });\n        const realmRepositoryAdapter = new RealmRepositoryAdapter(realmRepository);\n        const service = new ClientService({\n            repository,\n            realmRepository: realmRepositoryAdapter,\n        });\n        return new ClientController({\n            service,\n            repository,\n        });\n    }\n\n    createRobotController(container: IContainer) {\n        const dataSource = container.resolve(DatabaseInjectionKey.DataSource);\n        const realmRepository = container.resolve<Repository<Realm>>(RealmEntity);\n        const repository = new RobotRepositoryAdapter({\n            repository: container.resolve<Repository<Robot>>(RobotEntity),\n            realmRepository,\n        });\n        const realmRepositoryAdapter = new RealmRepositoryAdapter(realmRepository);\n        const service = new RobotService({\n            repository,\n            realmRepository: realmRepositoryAdapter,\n        });\n        return new RobotController({\n            service,\n            repository,\n            realmRepository: realmRepositoryAdapter,\n            dataSource,\n        });\n    }\n\n    private createPermissionRepository(container: IContainer): PermissionRepositoryAdapter {\n        return new PermissionRepositoryAdapter({\n            repository: container.resolve<Repository<Permission>>(PermissionEntity),\n            realmRepository: container.resolve<Repository<Realm>>(RealmEntity),\n        });\n    }\n\n    private createRoleRepository(container: IContainer): RoleRepositoryAdapter {\n        return new RoleRepositoryAdapter({\n            repository: container.resolve<Repository<Role>>(RoleEntity),\n            realmRepository: container.resolve<Repository<Realm>>(RealmEntity),\n        });\n    }\n\n    async createPermissionController(container: IContainer) {\n        const dataSource = container.resolve(DatabaseInjectionKey.DataSource);\n        const realmRepository = container.resolve<Repository<Realm>>(RealmEntity);\n        const repository = new PermissionRepositoryAdapter({\n            repository: container.resolve<Repository<Permission>>(PermissionEntity),\n            realmRepository,\n        });\n\n        const realmRepositoryAdapter = new RealmRepositoryAdapter(realmRepository);\n        const roleRepository = new RoleRepositoryAdapter({\n            repository: container.resolve<Repository<Role>>(RoleEntity),\n            realmRepository,\n        });\n        const rolePermissionRepository = new RolePermissionRepositoryAdapter(\n            container.resolve<Repository<RolePermission>>(RolePermissionEntity),\n        );\n        const policyRepository = new PolicyRepositoryAdapter({\n            repository: new PolicyRepository(dataSource),\n            realmRepository,\n        });\n\n        const permissionPolicyRepository = new PermissionPolicyRepositoryAdapter(\n            container.resolve<Repository<PermissionPolicy>>(PermissionPolicyEntity),\n        );\n\n        const service = new PermissionService({\n            repository,\n            realmRepository: realmRepositoryAdapter,\n            roleRepository,\n            rolePermissionRepository,\n            policyRepository,\n            permissionPolicyRepository,\n        });\n\n        const identityPermissionProvider = container.resolve(IdentityInjectionKey.PermissionProvider);\n        const permissionProvider = new PermissionDatabaseProvider(dataSource);\n\n        const checkerService = new PermissionCheckerService({\n            repository,\n            realmRepository: realmRepositoryAdapter,\n            permissionProvider,\n            identityPermissionProvider,\n        });\n\n        return new PermissionController({\n            service,\n            checkerService,\n        });\n    }\n\n    createRoleController(container: IContainer) {\n        const realmRepository = new RealmRepositoryAdapter(\n            container.resolve<Repository<Realm>>(RealmEntity),\n        );\n        const repository = new RoleRepositoryAdapter({\n            repository: container.resolve<Repository<Role>>(RoleEntity),\n            realmRepository: container.resolve<Repository<Realm>>(RealmEntity),\n        });\n        const service = new RoleService({\n            repository,\n            realmRepository,\n        });\n        return new RoleController({ service });\n    }\n\n    createClientPermissionController(container: IContainer) {\n        const repository = new ClientPermissionRepositoryAdapter(\n            container.resolve<Repository<ClientPermission>>(ClientPermissionEntity),\n        );\n        const permissionRepository = this.createPermissionRepository(container);\n        const identityPermissionProvider = container.resolve(IdentityInjectionKey.PermissionProvider);\n        const service = new ClientPermissionService({\n            repository,\n            permissionRepository,\n            identityPermissionProvider,\n        });\n        return new ClientPermissionController({ service });\n    }\n\n    createClientRoleController(container: IContainer) {\n        const repository = new ClientRoleRepositoryAdapter(\n            container.resolve<Repository<ClientRole>>(ClientRoleEntity),\n        );\n        const identityPermissionProvider = container.resolve(IdentityInjectionKey.PermissionProvider);\n        const service = new ClientRoleService({ repository, identityPermissionProvider });\n        return new ClientRoleController({ service });\n    }\n\n    createClientScopeController(container: IContainer) {\n        const repository = new ClientScopeRepositoryAdapter(\n            container.resolve<Repository<ClientScope>>(ClientScopeEntity),\n        );\n        const service = new ClientScopeService({ repository });\n        return new ClientScopeController({ service });\n    }\n\n    createRobotPermissionController(container: IContainer) {\n        const repository = new RobotPermissionRepositoryAdapter(\n            container.resolve<Repository<RobotPermission>>(RobotPermissionEntity),\n        );\n        const permissionRepository = this.createPermissionRepository(container);\n        const identityPermissionProvider = container.resolve(IdentityInjectionKey.PermissionProvider);\n        const service = new RobotPermissionService({\n            repository,\n            permissionRepository,\n            identityPermissionProvider,\n        });\n        return new RobotPermissionController({ service });\n    }\n\n    createRobotRoleController(container: IContainer) {\n        const repository = new RobotRoleRepositoryAdapter(\n            container.resolve<Repository<RobotRole>>(RobotRoleEntity),\n        );\n        const identityPermissionProvider = container.resolve(IdentityInjectionKey.PermissionProvider);\n        const service = new RobotRoleService({ repository, identityPermissionProvider });\n        return new RobotRoleController({ service });\n    }\n\n    createRoleAttributeController(container: IContainer) {\n        const dataSource = container.resolve(DatabaseInjectionKey.DataSource);\n        const repository = new RoleAttributeRepositoryAdapter(\n            container.resolve<Repository<RoleAttribute>>(RoleAttributeEntity),\n        );\n        const reservedNames = new Set(\n            dataSource.getMetadata(RoleEntity).columns.map((c) => c.propertyName),\n        );\n        const service = new RoleAttributeService({ repository, reservedNames });\n        return new RoleAttributeController({ service });\n    }\n\n    createRolePermissionController(container: IContainer) {\n        const repository = new RolePermissionRepositoryAdapter(\n            container.resolve<Repository<RolePermission>>(RolePermissionEntity),\n        );\n        const permissionRepository = this.createPermissionRepository(container);\n        const identityPermissionProvider = container.resolve(IdentityInjectionKey.PermissionProvider);\n        const service = new RolePermissionService({\n            repository,\n            permissionRepository,\n            identityPermissionProvider,\n        });\n        return new RolePermissionController({ service });\n    }\n\n    createPermissionPolicyController(container: IContainer) {\n        const repository = new PermissionPolicyRepositoryAdapter(\n            container.resolve<Repository<PermissionPolicy>>(PermissionPolicyEntity),\n        );\n        const service = new PermissionPolicyService({ repository });\n        return new PermissionPolicyController({ service });\n    }\n\n    createScopeController(container: IContainer) {\n        const realmRepository = new RealmRepositoryAdapter(\n            container.resolve<Repository<Realm>>(RealmEntity),\n        );\n        const repository = new ScopeRepositoryAdapter({\n            repository: container.resolve<Repository<Scope>>(ScopeEntity),\n            realmRepository: container.resolve<Repository<Realm>>(RealmEntity),\n        });\n        const service = new ScopeService({\n            repository,\n            realmRepository,\n        });\n        return new ScopeController({ service });\n    }\n\n    createSessionController(container: IContainer) {\n        const repository = container.resolve(AuthenticationInjectionKey.SessionRepository);\n        const service = new SessionService({ repository });\n        return new SessionController({ service });\n    }\n\n    createUserController(container: IContainer) {\n        const config = container.resolve(ConfigInjectionKey);\n        const dataSource = container.resolve(DatabaseInjectionKey.DataSource);\n        const realmRepository = container.resolve<Repository<Realm>>(RealmEntity);\n        const repository = new UserRepositoryAdapter({\n            repository: new UserRepository(dataSource),\n            realmRepository,\n        });\n        const realmRepositoryAdapter = new RealmRepositoryAdapter(realmRepository);\n        const service = new UserService({\n            repository,\n            realmRepository: realmRepositoryAdapter,\n            passwordMinLength: config.passwordMinLength,\n        });\n        return new UserController({ service });\n    }\n\n    createUserAttributeController(container: IContainer) {\n        const dataSource = container.resolve(DatabaseInjectionKey.DataSource);\n        const repository = new UserAttributeRepositoryAdapter(\n            container.resolve<Repository<UserAttribute>>(UserAttributeEntity),\n        );\n        const reservedNames = new Set(\n            dataSource.getMetadata(UserEntity).columns.map((c) => c.propertyName),\n        );\n        const service = new UserAttributeService({ repository, reservedNames });\n        return new UserAttributeController({ service });\n    }\n\n    createUserPermissionController(container: IContainer) {\n        const repository = new UserPermissionRepositoryAdapter(\n            container.resolve<Repository<UserPermission>>(UserPermissionEntity),\n        );\n        const permissionRepository = this.createPermissionRepository(container);\n        const identityPermissionProvider = container.resolve(IdentityInjectionKey.PermissionProvider);\n        const service = new UserPermissionService({\n            repository,\n            permissionRepository,\n            identityPermissionProvider,\n        });\n        return new UserPermissionController({ service });\n    }\n\n    createUserRoleController(container: IContainer) {\n        const repository = new UserRoleRepositoryAdapter(\n            container.resolve<Repository<UserRole>>(UserRoleEntity),\n        );\n        const identityPermissionProvider = container.resolve(IdentityInjectionKey.PermissionProvider);\n        const service = new UserRoleService({ repository, identityPermissionProvider });\n        return new UserRoleController({ service });\n    }\n\n    createPolicyController(container: IContainer) {\n        const dataSource = container.resolve(DatabaseInjectionKey.DataSource);\n        const realmRepository = container.resolve<Repository<Realm>>(RealmEntity);\n        const repository = new PolicyRepositoryAdapter({\n            repository: new PolicyRepository(dataSource),\n            realmRepository,\n        });\n        const realmRepositoryAdapter = new RealmRepositoryAdapter(realmRepository);\n        const service = new PolicyService({\n            repository,\n            realmRepository: realmRepositoryAdapter,\n        });\n        const identityPermissionProvider = container.resolve(IdentityInjectionKey.PermissionProvider);\n        const checkerService = new PolicyCheckerService({\n            repository,\n            realmRepository: realmRepositoryAdapter,\n            identityPermissionProvider,\n        });\n\n        return new PolicyController({\n            service,\n            checkerService,\n        });\n    }\n\n    createIdentityProviderRoleController(container: IContainer) {\n        const repository = new IdentityProviderRoleMappingRepositoryAdapter(\n            container.resolve<Repository<any>>(IdentityProviderRoleMappingEntity),\n        );\n        const roleRepository = this.createRoleRepository(container);\n        const identityPermissionProvider = container.resolve(IdentityInjectionKey.PermissionProvider);\n        const service = new IdentityProviderRoleMappingService({\n            repository,\n            roleRepository,\n            identityPermissionProvider,\n        });\n        return new IdentityProviderRoleMappingController({ service });\n    }\n\n    createJwkController(container: IContainer) {\n        const dataSource = container.resolve(DatabaseInjectionKey.DataSource);\n        const repository = dataSource.getRepository(KeyEntity);\n        return new JwkController({ repository });\n    }\n\n    createRealmController(container: IContainer) {\n        const config = container.resolve(ConfigInjectionKey);\n        const dataSource = container.resolve(DatabaseInjectionKey.DataSource);\n        const realmRepository = container.resolve<Repository<Realm>>(RealmEntity);\n        const repository = new RealmRepositoryAdapter(realmRepository);\n\n        const clientRepository = new ClientRepositoryAdapter({\n            repository: container.resolve<Repository<Client>>(ClientEntity),\n            realmRepository,\n        });\n        const logger = container.resolve(LoggerInjectionKey);\n        const webClientProvisioner = new WebClientProvisioner({\n            clientRepository,\n            appOrigins: getAppOrigins(config),\n            logger,\n        });\n\n        const service = new RealmService({\n            repository,\n            webClientProvisioner,\n            logger,\n        });\n        const keyRepository = dataSource.getRepository(KeyEntity);\n\n        return new RealmController({\n            options: { baseURL: config.publicUrl },\n            service,\n            keyRepository,\n        });\n    }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AA+JA,IAAauH,uBAAb,MAAaA;CACT,MAAMC,MAAMC,QAAaC,WAAsC;EAC3D,MAAMC,kBAAkB,KAAKC,sBAAsBF,SAAAA;EACnD,MAAMG,iBAAiB,KAAKC,qBAAqBJ,SAAAA;EACjD,MAAMK,uBAAuB,MAAM,KAAKC,2BAA2BN,SAAAA;EACnE,MAAMO,6BAA6B,KAAKC,iCAAiCR,SAAAA;EACzE,MAAMS,mBAAmB,KAAKC,uBAAuBV,SAAAA;EACrD,MAAMW,kBAAkB,KAAKC,sBAAsBZ,SAAAA;EACnD,MAAMa,6BAA6B,KAAKC,iCAAiCd,SAAAA;EACzE,MAAMe,uBAAuB,KAAKC,2BAA2BhB,SAAAA;EAC7D,MAAMiB,wBAAwB,KAAKC,4BAA4BlB,SAAAA;EAC/D,MAAMmB,4BAA4B,KAAKC,gCAAgCpB,SAAAA;EACvE,MAAMqB,sBAAsB,KAAKC,0BAA0BtB,SAAAA;EAC3D,MAAMuB,0BAA0B,KAAKC,8BAA8BxB,SAAAA;EACnE,MAAMyB,2BAA2B,KAAKC,+BAA+B1B,SAAAA;EACrE,MAAM2B,kBAAkB,KAAKC,sBAAsB5B,SAAAA;EACnD,MAAM6B,oBAAoB,KAAKC,wBAAwB9B,SAAAA;EACvD,MAAM+B,iBAAiB,KAAKC,qBAAqBhC,SAAAA;EACjD,MAAMiC,0BAA0B,KAAKC,8BAA8BlC,SAAAA;EACnE,MAAMmC,2BAA2B,KAAKC,+BAA+BpC,SAAAA;EACrE,MAAMqC,qBAAqB,KAAKC,yBAAyBtC,SAAAA;EACzD,MAAMuC,mBAAmB,KAAKC,uBAAuBxC,SAAAA;EACrD,MAAMyC,iCAAiC,KAAKC,qCAAqC1C,SAAAA;EAEjFD,OAAO4C,IAAIrK,WAAW,EAClBsK,aAAa;GACT,KAAKC,gBAAgB7C,SAAAA;GACrB,KAAK8C,YAAY9C,SAAAA;GACjB,KAAK+C,oBAAoB/C,SAAAA;GACzB,KAAKgD,uBAAuBhD,SAAAA;GAC5B,KAAKiD,yBAAyBjD,SAAAA;GAC9B,KAAKkD,+BAA+BlD,SAAAA;GACpC,KAAKmD,8BAA8BnD,SAAAA;GACnC,KAAKoD,yBAAyBpD,SAAAA;GAC9B,KAAKqD,uBAAuBrD,SAAAA;GAE5B,KAAKsD,uBAAuBtD,SAAAA;GAE5BS;GACAI;GACAE;GACAE;GACAwB;GACA,KAAKc,uBAAuBvD,SAAAA;GAC5BK;GACAE;GACAgC;GACA5B;GACAQ;GACAE;GACApB;GACAE;GACAoB;GACAE;GACAE;GACAE;GACAE;GACAE;GACAE;GACAE;IAER,CAAA,CAAA;CACJ;CAIAQ,gBAAgB7C,WAAuB;EACnC,MAAMwD,SAASxD,UAAUyD,QAAQjE,kBAAAA;EAEjC,MAAMkE,aAAa1D,UAAUyD,QAAQnE,qBAAqBqE,uBAAuB;EACjF,MAAMC,sBAAsB5D,UAAUyD,QAAQnE,qBAAqBuE,gCAAgC;EAEnG,MAAMC,iBAAiB9D,UAAUyD,QAAQpE,2BAA2B0E,cAAc;EAElF,OAAO,IAAInH,oBAAoB;GAC3BoH,SAAS;IACLC,SAAST,OAAOU;IAChBC,UAAU,KAAKC,gBAAgBZ,MAAAA;IAC/Ba,mBAAmBb,OAAOa;GAC9B;GAEAX;GACAE;GAEAE;EACJ,CAAA;CACJ;CAEAhB,YAAY9C,WAAuB;EAC/B,MAAMwD,SAASxD,UAAUyD,QAAQjE,kBAAAA;EACjC,MAAM8E,SAAStE,UAAUyD,QAAQ/D,kBAAAA;EAEjC,MAAMoE,iBAAiB9D,UAAUyD,QAAQpE,2BAA2B0E,cAAc;EAElF,MAAMQ,eAAevE,UAAUyD,QAAQnE,qBAAqBkF,yBAAyB;EAErF,MAAMC,oBAAoBzE,UAAUyD,QAAQnE,qBAAqBoF,iBAAiB;EAClF,MAAMC,qBAAqB3E,UAAUyD,QAAQnE,qBAAqBsF,kBAAkB;EACpF,MAAMC,oBAAoB7E,UAAUyD,QAAQnE,qBAAqBwF,iBAAiB;EAClF,MAAMC,gBAAgB/E,UAAUyD,QAAQnE,qBAAqB0F,aAAa;EAE1E,MAAMC,eAAejF,UAAUyD,QAAQnE,qBAAqB4F,YAAY;EACxE,MAAMC,gBAAgBnF,UAAUyD,QAAQnE,qBAAqB8F,aAAa;EAC1E,MAAMC,kBAAkBrF,UAAUyD,QAAQnE,qBAAqBgG,eAAe;EAC9E,MAAMC,yBAAyBvF,UAAUyD,QAAQnE,qBAAqBkG,sBAAsB;EAE5F,MAAMC,mBAAmBzF,UAAUyD,QAAQlE,qBAAqBmG,QAAQ;EACxE,MAAMC,8CAA8C3F,UAAUyD,QAAQlE,qBAAqBqG,mCAAmC;EAE9H,MAAMC,6BAA6B7F,UAAUyD,QAAQlE,qBAAqBuG,kBAAkB;EAE5F,MAAMC,sBAAsB,IAAI1I,oBAAoBoI,gBAAAA;EACpD,MAAMO,qBAAqB,IAAI1H,mBAAmBmH,gBAAAA;EAElD,MAAMQ,oBAAoB,IAAIvI,yBAAyB,CACnDiI,6CACA,IAAI3G,kBAAkByG,gBAAAA,CAAAA,CACzB;EAED,MAAMS,4BAA4B,IAAItI,0BAA0B6H,gBAAAA;EAEhE,OAAO,IAAIrI,gBAAgB;GACvBmH;GAEAE;GACAE;GACAE;GACAE;GAEAI;GACAF;GACAI;GACAE;GAEAY,yBAAyB3C,OAAO2C;GAChC7B;GAEAmB;GACAI;GAEAE;GACAC;GACAC;GAEAC;GAEAE,iBAAiB,IAAI3L,uBAAuBuF,UAAUyD,QAA2BxK,WAAAA,CAAAA;GAEjF6K;EACJ,CAAA;CACJ;CAEAd,uBAAuBhD,WAAuB;EAG1C,OAAO,IAAIjD,iBAAiB,EAAEkH,SAFfjE,UAAUyD,QAAQjE,kBAEMgE,CAAAA,CAAOU,UAAU,CAAA;CAC5D;CAEAjB,yBAAyBjD,WAAuB;EAC5C,MAAMwD,SAASxD,UAAUyD,QAAQjE,kBAAAA;EAEjC,OAAO,IAAI7C,mBAAmB;GAC1BqH,SAAS;IACLC,SAAST,OAAOU;IAChBC,UAAU,KAAKC,gBAAgBZ,MAAAA;GACnC;GACA6C,SAAS,KAAKC,0BAA0BtG,SAAAA;EAC5C,CAAA;CACJ;CAEAkD,+BAA+BlD,WAAuB;EAClD,MAAMwD,SAASxD,UAAUyD,QAAQjE,kBAAAA;EAEjC,OAAO,IAAIxC,yBAAyB;GAChCgH,SAAS;IACLC,SAAST,OAAOU;IAChBC,UAAU,KAAKC,gBAAgBZ,MAAAA;GACnC;GACA6C,SAAS,KAAKE,8BAA8BvG,SAAAA;EAChD,CAAA;CACJ;CAEAmD,8BAA8BnD,WAAuB;EACjD,MAAMwD,SAASxD,UAAUyD,QAAQjE,kBAAAA;EAEjC,OAAO,IAAIvC,wBAAwB;GAC/B+G,SAAS;IACLC,SAAST,OAAOU;IAChBC,UAAU,KAAKC,gBAAgBZ,MAAAA;GACnC;GACA6C,SAAS,KAAKE,8BAA8BvG,SAAAA;EAChD,CAAA;CACJ;CAEAuG,8BAA8BvG,WAAuB;EACjD,MAAMwD,SAASxD,UAAUyD,QAAQjE,kBAAAA;EACjC,MAAMgH,aAAaxG,UAAUyD,QAAQvJ,qBAAqBuM,UAAU;EACpE,MAAML,kBAAkBpG,UAAUyD,QAA2BxK,WAAAA;EAC7D,MAAMyN,aAAa,IAAIvL,sBAAsB;GACzCuL,YAAY,IAAI9M,eAAe4M,UAAAA;GAC/BJ;EACJ,CAAA;EAIA,OAAO,IAAItI,wBAAwB;GAC/B6I,YAJe3G,UAAUyD,QAAQ9D,gBAIjCgH;GACAC,sBAJyB5G,UAAUyD,QAAQ7D,gCAI3CgH;GACAF;GACAN,iBAAiB,IAAI3L,uBAAuB2L,eAAAA;GAC5CpC,SAAS;IACL6C,yBAAyBrD,OAAOqD;IAChCC,0BAA0BtD,OAAOsD;IACjC5C,WAAWV,OAAOU;IAClB6C,mBAAmBvD,OAAOuD;GAC9B;EACJ,CAAA;CACJ;CAEA3D,yBAAyBpD,WAAuB;EAC5C,MAAMwD,SAASxD,UAAUyD,QAAQjE,kBAAAA;EAEjC,OAAO,IAAItC,mBAAmB;GAC1B8G,SAAS;IACLC,SAAST,OAAOU;IAChBC,UAAU,KAAKC,gBAAgBZ,MAAAA;GACnC;GACA6C,SAAS,KAAKC,0BAA0BtG,SAAAA;EAC5C,CAAA;CACJ;CAEAqD,uBAAuBrD,WAAuB;EAC1C,MAAMwD,SAASxD,UAAUyD,QAAQjE,kBAAAA;EAMjC,MAAM0H,oBAAoB,IAAIrJ,wBAAwB;GAClDsH,eANkBnF,UAAUyD,QAAQnE,qBAAqB8F,aAMzDD;GACArB,gBANmB9D,UAAUyD,QAAQpE,2BAA2B0E,cAMhED;GACAkD,kBANqBhH,UAAUyD,QAAQnE,qBAAqB2H,gBAM5DD;GACAZ,iBAAAA,IANwB3L,uBAAuBuF,UAAUyD,QAA2BxK,WAAAA,CAMpFmN;GACAe,iBAAiB3D,OAAO4D;EAC5B,CAAA;EAEA,OAAO,IAAItK,iBAAiB;GACxBkH,SAAS,EAAEC,SAAST,OAAOU,UAAU;GACrCgD;EACJ,CAAA;CACJ;CAEA5D,uBAAuBtD,WAAuB;EAC1C,MAAMwD,SAASxD,UAAUyD,QAAQjE,kBAAAA;EAEjC,OAAO,IAAIrC,iBAAiB,EAAE6G,SAAS,EAAEG,UAAU,KAAKC,gBAAgBZ,MAAAA,EAAQ,EAAE,CAAA;CACtF;CAEAY,gBAAgBZ,QAAyC;EACrD,OAAO;GACH6D,cAAc7D,OAAO8D;GACrBC,kBAAkB/D,OAAOqD;GACzBW,mBAAmBhE,OAAOsD;EAC9B;CACJ;CAEAR,0BAA0BtG,WAAuB;EAC7C,MAAMwD,SAASxD,UAAUyD,QAAQjE,kBAAAA;EACjC,MAAMgH,aAAaxG,UAAUyD,QAAQvJ,qBAAqBuM,UAAU;EACpE,MAAML,kBAAkBpG,UAAUyD,QAA2BxK,WAAAA;EAC7D,MAAMyN,aAAa,IAAIvL,sBAAsB;GACzCuL,YAAY,IAAI9M,eAAe4M,UAAAA;GAC/BJ;EACJ,CAAA;EAIA,OAAO,IAAI/H,oBAAoB;GAC3BsI,YAJe3G,UAAUyD,QAAQ9D,gBAIjCgH;GACAC,sBAJyB5G,UAAUyD,QAAQ7D,gCAI3CgH;GACAF;GACAN,iBAAiB,IAAI3L,uBAAuB2L,eAAAA;GAC5CpC,SAAS;IACLsD,qBAAqB9D,OAAO8D;IAC5BR,0BAA0BtD,OAAOsD;IACjC5C,WAAWV,OAAOU;IAClB6C,mBAAmBvD,OAAOuD;GAC9B;EACJ,CAAA;CACJ;CAEAxD,uBAAuBvD,WAAuB;EAC1C,MAAMwD,SAASxD,UAAUyD,QAAQjE,kBAAAA;EACjC,MAAMgH,aAAaxG,UAAUyD,QAAQvJ,qBAAqBuM,UAAU;EAEpE,MAAMgB,iBAAiBzH,UAAUyD,QAAQlE,qBAAqBmI,sBAAsB;EAEpF,MAAMhE,aAAa1D,UAAUyD,QAAQnE,qBAAqBqE,uBAAuB;EAEjF,MAAMC,sBAAsB5D,UAAUyD,QAAQnE,qBAAqBuE,gCAAgC;EAEnG,MAAM8D,eAAe3H,UAAUyD,QAAQnE,qBAAqBsI,yBAAyB;EAErF,MAAMxB,kBAAkBpG,UAAUyD,QAA2BxK,WAAAA;EAE7D,MAAMyN,aAAa,IAAIvM,kCAAkC;GACrDuM,YAAY,IAAI/N,2BAA2B6N,UAAAA;GAC3CJ;EACJ,CAAA;EAEA,OAAO,IAAI3K,2BAA2B;GAClCuI,SAAS,EAAEC,SAAST,OAAOU,UAAU;GAErCwC;GACAN,iBAAiB,IAAI3L,uBAAuB2L,eAAAA;GAE5CqB;GAEA/D;GACAE;GACA+D;EACJ,CAAA;CACJ;CAEAjH,uBAAuBV,WAAuB;EAC1C,MAAMoG,kBAAkBpG,UAAUyD,QAA2BxK,WAAAA;EAC7D,MAAMyN,aAAa,IAAI3M,wBAAwB;GAC3C2M,YAAY1G,UAAUyD,QAA4BlL,YAAAA;GAClD6N;EACJ,CAAA;EAMA,OAAO,IAAI/K,iBAAiB;GACxBgL,SAAAA,IALgB5I,cAAc;IAC9BiJ;IACAN,iBAAiByB,IAHcpN,uBAAuB2L,eAGrCyB;GACrB,CAEIxB;GACAK;EACJ,CAAA;CACJ;CAEA9F,sBAAsBZ,WAAuB;EACzC,MAAMwG,aAAaxG,UAAUyD,QAAQvJ,qBAAqBuM,UAAU;EACpE,MAAML,kBAAkBpG,UAAUyD,QAA2BxK,WAAAA;EAC7D,MAAMyN,aAAa,IAAI/L,uBAAuB;GAC1C+L,YAAY1G,UAAUyD,QAA2BvK,WAAAA;GACjDkN;EACJ,CAAA;EACA,MAAMyB,yBAAyB,IAAIpN,uBAAuB2L,eAAAA;EAK1D,OAAO,IAAIrK,gBAAgB;GACvBsK,SAAAA,IALgB5H,aAAa;IAC7BiI;IACAN,iBAAiByB;GACrB,CAEIxB;GACAK;GACAN,iBAAiByB;GACjBrB;EACJ,CAAA;CACJ;CAEQsB,2BAA2B9H,WAAoD;EACnF,OAAO,IAAIzF,4BAA4B;GACnCmM,YAAY1G,UAAUyD,QAAgC3K,gBAAAA;GACtDsN,iBAAiBpG,UAAUyD,QAA2BxK,WAAAA;EAC1D,CAAA;CACJ;CAEQ8O,qBAAqB/H,WAA8C;EACvE,OAAO,IAAIjF,sBAAsB;GAC7B2L,YAAY1G,UAAUyD,QAA0BnK,UAAAA;GAChD8M,iBAAiBpG,UAAUyD,QAA2BxK,WAAAA;EAC1D,CAAA;CACJ;CAEA,MAAMqH,2BAA2BN,WAAuB;EACpD,MAAMwG,aAAaxG,UAAUyD,QAAQvJ,qBAAqBuM,UAAU;EACpE,MAAML,kBAAkBpG,UAAUyD,QAA2BxK,WAAAA;EAC7D,MAAMyN,aAAa,IAAInM,4BAA4B;GAC/CmM,YAAY1G,UAAUyD,QAAgC3K,gBAAAA;GACtDsN;EACJ,CAAA;EAEA,MAAMyB,yBAAyB,IAAIpN,uBAAuB2L,eAAAA;EAiB1D,MAAMC,UAAU,IAAIpI,kBAAkB;GAClCyI;GACAN,iBAAiByB;GACjBG,gBAAAA,IAnBuBjN,sBAAsB;IAC7C2L,YAAY1G,UAAUyD,QAA0BnK,UAAAA;IAChD8M;GACJ,CAgBI4B;GACAC,0BAAAA,IAhBiCnN,gCACjCkF,UAAUyD,QAAoClK,oBAAAA,CAe9C0O;GACAC,kBAAAA,IAdyB1N,wBAAwB;IACjDkM,YAAY,IAAI1N,iBAAiBwN,UAAAA;IACjCJ;GACJ,CAWI8B;GACAC,4BAAAA,IAVmC7N,kCACnC0F,UAAUyD,QAAsC1K,sBAAAA,CAShDoP;EACJ,CAAA;EAEA,MAAMtC,6BAA6B7F,UAAUyD,QAAQlE,qBAAqBuG,kBAAkB;EAU5F,OAAO,IAAInK,qBAAqB;GAC5B0K;GACAgC,gBAAAA,IATuBtK,yBAAyB;IAChD2I;IACAN,iBAAiByB;IACjBO,oBAAAA,IAL2B/N,2BAA2BmM,UAKtD4B;IACAvC;GACJ,CAIIwC;EACJ,CAAA;CACJ;CAEAjI,qBAAqBJ,WAAuB;EACxC,MAAMoG,kBAAkB,IAAI3L,uBACxBuF,UAAUyD,QAA2BxK,WAAAA,CAAAA;EAUzC,OAAO,IAAIkD,eAAe,EAAEkK,SAAAA,IAJRzH,YAAY;GAC5B8H,YAAAA,IALmB3L,sBAAsB;IACzC2L,YAAY1G,UAAUyD,QAA0BnK,UAAAA;IAChD8M,iBAAiBpG,UAAUyD,QAA2BxK,WAAAA;GAC1D,CAEIyN;GACAN;EACJ,CAC4BC,EAAQ,CAAA;CACxC;CAEAvF,iCAAiCd,WAAuB;EAWpD,OAAO,IAAI1E,2BAA2B,EAAE+K,SAAAA,IALpB/I,wBAAwB;GACxCoJ,YAAAA,IANmB5M,kCACnBkG,UAAUyD,QAAsCjL,sBAAAA,CAKhDkO;GACA4B,sBAJyB,KAAKR,2BAA2B9H,SAIzDsI;GACAzC,4BAJ+B7F,UAAUyD,QAAQlE,qBAAqBuG,kBAItED;EACJ,CACwCQ,EAAQ,CAAA;CACpD;CAEArF,2BAA2BhB,WAAuB;EAM9C,OAAO,IAAIzE,qBAAqB,EAAE8K,SAAAA,IADd9I,kBAAkB;GAAEmJ,YAAAA,IAJjB1M,4BACnBgG,UAAUyD,QAAgChL,gBAAAA,CAGNiO;GAAYb,4BADjB7F,UAAUyD,QAAQlE,qBAAqBuG,kBACtBD;EAA2B,CAC7CQ,EAAQ,CAAA;CAC9C;CAEAnF,4BAA4BlB,WAAuB;EAK/C,OAAO,IAAIxE,sBAAsB,EAAE6K,SAAAA,IADf7I,mBAAmB,EAAEkJ,YAAAA,IAHlBzM,6BACnB+F,UAAUyD,QAAiC/K,iBAAAA,CAENgO,EAAW,CACjBL,EAAQ,CAAA;CAC/C;CAEAjF,gCAAgCpB,WAAuB;EAWnD,OAAO,IAAIhE,0BAA0B,EAAEqK,SAAAA,IALnB9H,uBAAuB;GACvCmI,YAAAA,IANmBhM,iCACnBsF,UAAUyD,QAAqCtK,qBAAAA,CAK/CuN;GACA4B,sBAJyB,KAAKR,2BAA2B9H,SAIzDsI;GACAzC,4BAJ+B7F,UAAUyD,QAAQlE,qBAAqBuG,kBAItED;EACJ,CACuCQ,EAAQ,CAAA;CACnD;CAEA/E,0BAA0BtB,WAAuB;EAM7C,OAAO,IAAI/D,oBAAoB,EAAEoK,SAAAA,IADb7H,iBAAiB;GAAEkI,YAAAA,IAJhB9L,2BACnBoF,UAAUyD,QAA+BrK,eAAAA,CAGNsN;GAAYb,4BADhB7F,UAAUyD,QAAQlE,qBAAqBuG,kBACvBD;EAA2B,CAC7CQ,EAAQ,CAAA;CAC7C;CAEA7E,8BAA8BxB,WAAuB;EACjD,MAAMwG,aAAaxG,UAAUyD,QAAQvJ,qBAAqBuM,UAAU;EAQpE,OAAO,IAAIvK,wBAAwB,EAAEmK,SAAAA,IADjB3H,qBAAqB;GAAEgI,YAAAA,IANpB7L,+BACnBmF,UAAUyD,QAAmCpK,mBAAAA,CAKNqN;GAAY6B,eAAAA,IAH7BC,IACtBhC,WAAWiC,YAAYnP,UAAAA,CAAAA,CAAYoP,QAAQC,KAAKC,MAAMA,EAAEC,YAAY,CAEjBN;EAAc,CAChClC,EAAQ,CAAA;CACjD;CAEA3E,+BAA+B1B,WAAuB;EAWlD,OAAO,IAAI5D,yBAAyB,EAAEiK,SAAAA,IALlB1H,sBAAsB;GACtC+H,YAAAA,IANmB5L,gCACnBkF,UAAUyD,QAAoClK,oBAAAA,CAK9CmN;GACA4B,sBAJyB,KAAKR,2BAA2B9H,SAIzDsI;GACAzC,4BAJ+B7F,UAAUyD,QAAQlE,qBAAqBuG,kBAItED;EACJ,CACsCQ,EAAQ,CAAA;CAClD;CAEA7F,iCAAiCR,WAAuB;EAKpD,OAAO,IAAIpE,2BAA2B,EAAEyK,SAAAA,IADpBrI,wBAAwB,EAAE0I,YAAAA,IAHvBpM,kCACnB0F,UAAUyD,QAAsC1K,sBAAAA,CAEN2N,EAAW,CACjBL,EAAQ,CAAA;CACpD;CAEAzE,sBAAsB5B,WAAuB;EACzC,MAAMoG,kBAAkB,IAAI3L,uBACxBuF,UAAUyD,QAA2BxK,WAAAA,CAAAA;EAUzC,OAAO,IAAIoD,gBAAgB,EAAEgK,SAAAA,IAJTxH,aAAa;GAC7B6H,YAAAA,IALmB1L,uBAAuB;IAC1C0L,YAAY1G,UAAUyD,QAA2BjK,WAAAA;IACjD4M,iBAAiBpG,UAAUyD,QAA2BxK,WAAAA;GAC1D,CAEIyN;GACAN;EACJ,CAC6BC,EAAQ,CAAA;CACzC;CAEAvE,wBAAwB9B,WAAuB;EAG3C,OAAO,IAAI1D,kBAAkB,EAAE+J,SAAAA,IADXvH,eAAe,EAAE4H,YADlB1G,UAAUyD,QAAQpE,2BAA2ByJ,iBAC3BpC,EAAW,CACjBL,EAAQ,CAAA;CAC3C;CAEArE,qBAAqBhC,WAAuB;EACxC,MAAMwD,SAASxD,UAAUyD,QAAQjE,kBAAAA;EACjC,MAAMgH,aAAaxG,UAAUyD,QAAQvJ,qBAAqBuM,UAAU;EACpE,MAAML,kBAAkBpG,UAAUyD,QAA2BxK,WAAAA;EAW7D,OAAO,IAAIuD,eAAe,EAAE6J,SAAAA,IALRlH,YAAY;GAC5BuH,YAAAA,IANmBvL,sBAAsB;IACzCuL,YAAY,IAAI9M,eAAe4M,UAAAA;IAC/BJ;GACJ,CAGIM;GACAN,iBAAiByB,IAHcpN,uBAAuB2L,eAGrCyB;GACjBd,mBAAmBvD,OAAOuD;EAC9B,CAC4BV,EAAQ,CAAA;CACxC;CAEAnE,8BAA8BlC,WAAuB;EACjD,MAAMwG,aAAaxG,UAAUyD,QAAQvJ,qBAAqBuM,UAAU;EAQpE,OAAO,IAAIlK,wBAAwB,EAAE8J,SAAAA,IADjBtH,qBAAqB;GAAE2H,YAAAA,IANpBzL,+BACnB+E,UAAUyD,QAAmChK,mBAAAA,CAKNiN;GAAY6B,eAAAA,IAH7BC,IACtBhC,WAAWiC,YAAY/O,UAAAA,CAAAA,CAAYgP,QAAQC,KAAKC,MAAMA,EAAEC,YAAY,CAEjBN;EAAc,CAChClC,EAAQ,CAAA;CACjD;CAEAjE,+BAA+BpC,WAAuB;EAWlD,OAAO,IAAIvD,yBAAyB,EAAE4J,SAAAA,IALlBpH,sBAAsB;GACtCyH,YAAAA,IANmBxL,gCACnB8E,UAAUyD,QAAoC9J,oBAAAA,CAK9C+M;GACA4B,sBAJyB,KAAKR,2BAA2B9H,SAIzDsI;GACAzC,4BAJ+B7F,UAAUyD,QAAQlE,qBAAqBuG,kBAItED;EACJ,CACsCQ,EAAQ,CAAA;CAClD;CAEA/D,yBAAyBtC,WAAuB;EAM5C,OAAO,IAAItD,mBAAmB,EAAE2J,SAAAA,IADZnH,gBAAgB;GAAEwH,YAAAA,IAJftL,0BACnB4E,UAAUyD,QAA8B5J,cAAAA,CAGN6M;GAAYb,4BADf7F,UAAUyD,QAAQlE,qBAAqBuG,kBACxBD;EAA2B,CAC7CQ,EAAQ,CAAA;CAC5C;CAEA7D,uBAAuBxC,WAAuB;EAC1C,MAAMwG,aAAaxG,UAAUyD,QAAQvJ,qBAAqBuM,UAAU;EACpE,MAAML,kBAAkBpG,UAAUyD,QAA2BxK,WAAAA;EAC7D,MAAMyN,aAAa,IAAIlM,wBAAwB;GAC3CkM,YAAY,IAAI1N,iBAAiBwN,UAAAA;GACjCJ;EACJ,CAAA;EACA,MAAMyB,yBAAyB,IAAIpN,uBAAuB2L,eAAAA;EAY1D,OAAO,IAAIvK,iBAAiB;GACxBwK,SAAAA,IAZgBlI,cAAc;IAC9BuI;IACAN,iBAAiByB;GACrB,CASIxB;GACAgC,gBAAAA,IARuBnK,qBAAqB;IAC5CwI;IACAN,iBAAiByB;IACjBhC,4BAJ+B7F,UAAUyD,QAAQlE,qBAAqBuG,kBAItED;GACJ,CAIIwC;EACJ,CAAA;CACJ;CAEA3F,qCAAqC1C,WAAuB;EAWxD,OAAO,IAAItE,sCAAsC,EAAE2K,SAAAA,IAL/B1I,mCAAmC;GACnD+I,YAAAA,IANmBtM,6CACnB4F,UAAUyD,QAAyB7K,iCAAAA,CAKnC8N;GACAsB,gBAJmB,KAAKD,qBAAqB/H,SAI7CgI;GACAnC,4BAJ+B7F,UAAUyD,QAAQlE,qBAAqBuG,kBAItED;EACJ,CACmDQ,EAAQ,CAAA;CAC/D;CAEAtD,oBAAoB/C,WAAuB;EAGvC,OAAO,IAAInD,cAAc,EAAE6J,YAFR1G,UAAUyD,QAAQvJ,qBAAqBuM,UACvCD,CAAAA,CAAWuC,cAAclQ,SACjB6N,EAAW,CAAA;CAC1C;CAEAxG,sBAAsBF,WAAuB;EACzC,MAAMwD,SAASxD,UAAUyD,QAAQjE,kBAAAA;EACjC,MAAMgH,aAAaxG,UAAUyD,QAAQvJ,qBAAqBuM,UAAU;EACpE,MAAML,kBAAkBpG,UAAUyD,QAA2BxK,WAAAA;EAC7D,MAAMyN,aAAa,IAAIjM,uBAAuB2L,eAAAA;EAE9C,MAAMY,mBAAmB,IAAIjN,wBAAwB;GACjD2M,YAAY1G,UAAUyD,QAA4BlL,YAAAA;GAClD6N;EACJ,CAAA;EACA,MAAM9B,SAAStE,UAAUyD,QAAQ/D,kBAAAA;EAOjC,MAAM2G,UAAU,IAAIjI,aAAa;GAC7BsI;GACAsC,sBAAAA,IAR6B5J,qBAAqB;IAClD4H;IACAiC,YAAYxJ,cAAc+D,MAAAA;IAC1Bc;GACJ,CAII0E;GACA1E;EACJ,CAAA;EACA,MAAMS,gBAAgByB,WAAWuC,cAAclQ,SAAAA;EAE/C,OAAO,IAAIiD,gBAAgB;GACvBkI,SAAS,EAAEC,SAAST,OAAOU,UAAU;GACrCmC;GACAtB;EACJ,CAAA;CACJ;AACJ"}

package/dist/app/modules/http/modules/middleware.mjs

@@ -15,9 +15,9 @@ import { PermissionDatabaseProvider } from "../../database/repositories/permissi
 import "../../database/repositories/index.mjs";
 import "../../database/index.mjs";
 import { HTTPInjectionKey } from "../constants.mjs";
+import { DIST_PATH } from "../../../../path.mjs";
 import { createAuthorizationMiddleware } from "../../../../adapters/http/middleware/built-in/authorization/factory.mjs";
 import { createRealmResolverMiddleware } from "../../../../adapters/http/middleware/built-in/realm-resolver/factory.mjs";
-import { DIST_PATH } from "../../../../path.mjs";
 import { registerAssetsMiddleware } from "../../../../adapters/http/middleware/built-in/assets.mjs";
 import { registerBasicMiddleware } from "../../../../adapters/http/middleware/built-in/basic.mjs";
 import { registerCorsMiddleware } from "../../../../adapters/http/middleware/built-in/cors.mjs";

package/dist/app/modules/identity/repositories/client.mjs

@@ -28,9 +28,9 @@ var ClientIdentityRepository = class {
 		const isId = isUUID(key);
 		if (isId) query.where("client.id = :id", { id: key });
 		else {
-			query.where("client.name = :name", { name: key });
+			query.where("client.name = :name", { name: key.trim().toLowerCase() });
 			if (realmKey) if (isUUID(realmKey)) query.andWhere("client.realm_id = :realmId", { realmId: realmKey });
-			else query.andWhere("realm.name = :realmName", { realmName: realmKey });
+			else query.andWhere("realm.name = :realmName", { realmName: realmKey.trim().toLowerCase() });
 		}
 		const { columns } = this.repository.metadata;
 		for (const column of columns) if (!column.isSelect) query.addSelect(`client.${column.databaseName}`);

package/dist/app/modules/identity/repositories/client.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"client.mjs","names":["buildRedisKeyPath","isUUID","CachePrefix","ClientIdentityRepository","repository","findOneById","id","find","findOneByName","realm","findOneByIdOrName","idOrName","findOneBy","where","key","realmKey","query","createQueryBuilder","leftJoinAndSelect","isId","name","andWhere","realmId","realmName","columns","metadata","column","isSelect","addSelect","databaseName","cache","prefix","CLIENT","getOne"],"sources":["../../../../../src/app/modules/identity/repositories/client.ts"],"sourcesContent":["/*\n * Copyright (c) 2025.\n *  Author Peter Placzek (tada5hi)\n *  For the full copyright and license information,\n *  view the LICENSE file that was distributed with this source code.\n */\n\nimport { buildRedisKeyPath } from '@authup/server-kit';\nimport { isUUID } from '@authup/kit';\nimport type { Client } from '@authup/core-kit';\nimport type { Repository } from 'typeorm';\nimport type { IClientIdentityRepository } from '../../../../core/index.ts';\nimport { CachePrefix } from '../../../../adapters/database/domains/index.ts';\n\nexport class ClientIdentityRepository implements IClientIdentityRepository {\n    private readonly repository: Repository<Client>;\n\n    constructor(repository: Repository<Client>) {\n        this.repository = repository;\n    }\n\n    async findOneById(id: string): Promise<Client | null> {\n        return this.find(id);\n    }\n\n    async findOneByName(id: string, realm?: string): Promise<Client | null> {\n        return this.find(id, realm);\n    }\n\n    async findOneByIdOrName(idOrName: string, realm?: string): Promise<Client | null> {\n        return this.find(idOrName, realm);\n    }\n\n    async findOneBy(where: Record<string, any>): Promise<Client | null> {\n        return this.repository.findOneBy(where);\n    }\n\n    private async find(key: string, realmKey?: string) : Promise<Client | null> {\n        const query = this.repository.createQueryBuilder('client')\n            .leftJoinAndSelect('client.realm', 'realm');\n\n        const isId = isUUID(key);\n        if (isId) {\n            query.where('client.id = :id', { id: key });\n        } else {\n            query.where('client.name = :name', { name: key });\n\n            if (realmKey) {\n                if (isUUID(realmKey)) {\n                    query.andWhere('client.realm_id = :realmId', { realmId: realmKey });\n                } else {\n                    query.andWhere('realm.name = :realmName', { realmName: realmKey });\n                }\n            }\n        }\n        const { columns } = this.repository.metadata;\n        for (const column of columns) {\n            if (!column.isSelect) {\n                query.addSelect(`client.${column.databaseName}`);\n            }\n        }\n\n        if (isId) {\n            query.cache(\n                buildRedisKeyPath({\n                    prefix: CachePrefix.CLIENT,\n                    key,\n                }),\n                60_000,\n            );\n        }\n\n        return query.getOne();\n    }\n}\n"],"mappings":";;;;;;;;AAcA,IAAaG,2BAAb,MAAaA;CACQC;CAEjB,YAAYA,YAAgC;EACxC,KAAKA,aAAaA;CACtB;CAEA,MAAMC,YAAYC,IAAoC;EAClD,OAAO,KAAKC,KAAKD,EAAAA;CACrB;CAEA,MAAME,cAAcF,IAAYG,OAAwC;EACpE,OAAO,KAAKF,KAAKD,IAAIG,KAAAA;CACzB;CAEA,MAAMC,kBAAkBC,UAAkBF,OAAwC;EAC9E,OAAO,KAAKF,KAAKI,UAAUF,KAAAA;CAC/B;CAEA,MAAMG,UAAUC,OAAoD;EAChE,OAAO,KAAKT,WAAWQ,UAAUC,KAAAA;CACrC;CAEA,MAAcN,KAAKO,KAAaC,UAA4C;EACxE,MAAMC,QAAQ,KAAKZ,WAAWa,mBAAmB,QAAA,CAAA,CAC5CC,kBAAkB,gBAAgB,OAAA;EAEvC,MAAMC,OAAOlB,OAAOa,GAAAA;EACpB,IAAIK,MACAH,MAAMH,MAAM,mBAAmB,EAAEP,IAAIQ,IAAI,CAAA;OACtC;GACHE,MAAMH,MAAM,uBAAuB,EAAEO,MAAMN,IAAI,CAAA;GAE/C,IAAIC,UACA,IAAId,OAAOc,QAAAA,GACPC,MAAMK,SAAS,8BAA8B,EAAEC,SAASP,SAAS,CAAA;QAEjEC,MAAMK,SAAS,2BAA2B,EAAEE,WAAWR,SAAS,CAAA;EAG5E;EACA,MAAM,EAAES,YAAY,KAAKpB,WAAWqB;EACpC,KAAK,MAAMC,UAAUF,SACjB,IAAI,CAACE,OAAOC,UACRX,MAAMY,UAAU,UAAUF,OAAOG,cAAc;EAIvD,IAAIV,MACAH,MAAMc,MACF9B,kBAAkB;GACd+B,QAAQ7B,YAAY8B;GACpBlB;EACJ,CAAA,GACA,GAAA;EAIR,OAAOE,MAAMiB,OAAM;CACvB;AACJ"}
+{"version":3,"file":"client.mjs","names":["buildRedisKeyPath","isUUID","CachePrefix","ClientIdentityRepository","repository","findOneById","id","find","findOneByName","realm","findOneByIdOrName","idOrName","findOneBy","where","key","realmKey","query","createQueryBuilder","leftJoinAndSelect","isId","name","trim","toLowerCase","andWhere","realmId","realmName","columns","metadata","column","isSelect","addSelect","databaseName","cache","prefix","CLIENT","getOne"],"sources":["../../../../../src/app/modules/identity/repositories/client.ts"],"sourcesContent":["/*\n * Copyright (c) 2025.\n *  Author Peter Placzek (tada5hi)\n *  For the full copyright and license information,\n *  view the LICENSE file that was distributed with this source code.\n */\n\nimport { buildRedisKeyPath } from '@authup/server-kit';\nimport { isUUID } from '@authup/kit';\nimport type { Client } from '@authup/core-kit';\nimport type { Repository } from 'typeorm';\nimport type { IClientIdentityRepository } from '../../../../core/index.ts';\nimport { CachePrefix } from '../../../../adapters/database/domains/index.ts';\n\nexport class ClientIdentityRepository implements IClientIdentityRepository {\n    private readonly repository: Repository<Client>;\n\n    constructor(repository: Repository<Client>) {\n        this.repository = repository;\n    }\n\n    async findOneById(id: string): Promise<Client | null> {\n        return this.find(id);\n    }\n\n    async findOneByName(id: string, realm?: string): Promise<Client | null> {\n        return this.find(id, realm);\n    }\n\n    async findOneByIdOrName(idOrName: string, realm?: string): Promise<Client | null> {\n        return this.find(idOrName, realm);\n    }\n\n    async findOneBy(where: Record<string, any>): Promise<Client | null> {\n        return this.repository.findOneBy(where);\n    }\n\n    private async find(key: string, realmKey?: string) : Promise<Client | null> {\n        const query = this.repository.createQueryBuilder('client')\n            .leftJoinAndSelect('client.realm', 'realm');\n\n        const isId = isUUID(key);\n        if (isId) {\n            query.where('client.id = :id', { id: key });\n        } else {\n            query.where('client.name = :name', { name: key.trim().toLowerCase() });\n\n            if (realmKey) {\n                if (isUUID(realmKey)) {\n                    query.andWhere('client.realm_id = :realmId', { realmId: realmKey });\n                } else {\n                    query.andWhere('realm.name = :realmName', { realmName: realmKey.trim().toLowerCase() });\n                }\n            }\n        }\n        const { columns } = this.repository.metadata;\n        for (const column of columns) {\n            if (!column.isSelect) {\n                query.addSelect(`client.${column.databaseName}`);\n            }\n        }\n\n        if (isId) {\n            query.cache(\n                buildRedisKeyPath({\n                    prefix: CachePrefix.CLIENT,\n                    key,\n                }),\n                60_000,\n            );\n        }\n\n        return query.getOne();\n    }\n}\n"],"mappings":";;;;;;;;AAcA,IAAaG,2BAAb,MAAaA;CACQC;CAEjB,YAAYA,YAAgC;EACxC,KAAKA,aAAaA;CACtB;CAEA,MAAMC,YAAYC,IAAoC;EAClD,OAAO,KAAKC,KAAKD,EAAAA;CACrB;CAEA,MAAME,cAAcF,IAAYG,OAAwC;EACpE,OAAO,KAAKF,KAAKD,IAAIG,KAAAA;CACzB;CAEA,MAAMC,kBAAkBC,UAAkBF,OAAwC;EAC9E,OAAO,KAAKF,KAAKI,UAAUF,KAAAA;CAC/B;CAEA,MAAMG,UAAUC,OAAoD;EAChE,OAAO,KAAKT,WAAWQ,UAAUC,KAAAA;CACrC;CAEA,MAAcN,KAAKO,KAAaC,UAA4C;EACxE,MAAMC,QAAQ,KAAKZ,WAAWa,mBAAmB,QAAA,CAAA,CAC5CC,kBAAkB,gBAAgB,OAAA;EAEvC,MAAMC,OAAOlB,OAAOa,GAAAA;EACpB,IAAIK,MACAH,MAAMH,MAAM,mBAAmB,EAAEP,IAAIQ,IAAI,CAAA;OACtC;GACHE,MAAMH,MAAM,uBAAuB,EAAEO,MAAMN,IAAIO,KAAI,CAAA,CAAGC,YAAW,EAAG,CAAA;GAEpE,IAAIP,UACA,IAAId,OAAOc,QAAAA,GACPC,MAAMO,SAAS,8BAA8B,EAAEC,SAAST,SAAS,CAAA;QAEjEC,MAAMO,SAAS,2BAA2B,EAAEE,WAAWV,SAASM,KAAI,CAAA,CAAGC,YAAW,EAAG,CAAA;EAGjG;EACA,MAAM,EAAEI,YAAY,KAAKtB,WAAWuB;EACpC,KAAK,MAAMC,UAAUF,SACjB,IAAI,CAACE,OAAOC,UACRb,MAAMc,UAAU,UAAUF,OAAOG,cAAc;EAIvD,IAAIZ,MACAH,MAAMgB,MACFhC,kBAAkB;GACdiC,QAAQ/B,YAAYgC;GACpBpB;EACJ,CAAA,GACA,GAAA;EAIR,OAAOE,MAAMmB,OAAM;CACvB;AACJ"}

package/dist/app/modules/identity/repositories/robot.mjs

@@ -28,9 +28,9 @@ var RobotIdentityRepository = class {
 		const isId = isUUID(key);
 		if (isId) query.where("robot.id = :id", { id: key });
 		else {
-			query.where("robot.name = :name", { name: key });
+			query.where("robot.name = :name", { name: key.trim().toLowerCase() });
 			if (realmKey) if (isUUID(realmKey)) query.andWhere("robot.realm_id = :realmId", { realmId: realmKey });
-			else query.andWhere("realm.name = :realmName", { realmName: realmKey });
+			else query.andWhere("realm.name = :realmName", { realmName: realmKey.trim().toLowerCase() });
 		}
 		const { columns } = this.repository.metadata;
 		for (const column of columns) if (!column.isSelect) query.addSelect(`robot.${column.databaseName}`);

package/dist/app/modules/identity/repositories/robot.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"robot.mjs","names":["buildRedisKeyPath","isUUID","CachePrefix","RobotIdentityRepository","repository","findOneById","id","find","findOneByName","realm","findOneByIdOrName","idOrName","findOneBy","where","key","realmKey","query","createQueryBuilder","leftJoinAndSelect","isId","name","andWhere","realmId","realmName","columns","metadata","column","isSelect","addSelect","databaseName","cache","prefix","ROBOT","getOne"],"sources":["../../../../../src/app/modules/identity/repositories/robot.ts"],"sourcesContent":["/*\n * Copyright (c) 2025.\n *  Author Peter Placzek (tada5hi)\n *  For the full copyright and license information,\n *  view the LICENSE file that was distributed with this source code.\n */\n\nimport { buildRedisKeyPath } from '@authup/server-kit';\nimport { isUUID } from '@authup/kit';\nimport type { Robot } from '@authup/core-kit';\nimport type { Repository } from 'typeorm';\nimport type { IRobotIdentityRepository } from '../../../../core/index.ts';\nimport { CachePrefix } from '../../../../adapters/database/domains/index.ts';\n\nexport class RobotIdentityRepository implements IRobotIdentityRepository {\n    private readonly repository: Repository<Robot>;\n\n    constructor(repository: Repository<Robot>) {\n        this.repository = repository;\n    }\n\n    async findOneById(id: string): Promise<Robot | null> {\n        return this.find(id);\n    }\n\n    async findOneByName(id: string, realm?: string): Promise<Robot | null> {\n        return this.find(id, realm);\n    }\n\n    async findOneByIdOrName(idOrName: string, realm?: string): Promise<Robot | null> {\n        return this.find(idOrName, realm);\n    }\n\n    async findOneBy(where: Record<string, any>): Promise<Robot | null> {\n        return this.repository.findOneBy(where);\n    }\n\n    private async find(key: string, realmKey?: string) : Promise<Robot | null> {\n        const query = this.repository.createQueryBuilder('robot')\n            .leftJoinAndSelect('robot.realm', 'realm');\n\n        const isId = isUUID(key);\n        if (isId) {\n            query.where('robot.id = :id', { id: key });\n        } else {\n            query.where('robot.name = :name', { name: key });\n\n            if (realmKey) {\n                if (isUUID(realmKey)) {\n                    query.andWhere('robot.realm_id = :realmId', { realmId: realmKey });\n                } else {\n                    query.andWhere('realm.name = :realmName', { realmName: realmKey });\n                }\n            }\n        }\n\n        const { columns } = this.repository.metadata;\n        for (const column of columns) {\n            if (!column.isSelect) {\n                query.addSelect(`robot.${column.databaseName}`);\n            }\n        }\n\n        if (isId) {\n            query.cache(\n                buildRedisKeyPath({\n                    prefix: CachePrefix.ROBOT,\n                    key,\n                }),\n                60_000,\n            );\n        }\n\n        return query.getOne();\n    }\n}\n"],"mappings":";;;;;;;;AAcA,IAAaG,0BAAb,MAAaA;CACQC;CAEjB,YAAYA,YAA+B;EACvC,KAAKA,aAAaA;CACtB;CAEA,MAAMC,YAAYC,IAAmC;EACjD,OAAO,KAAKC,KAAKD,EAAAA;CACrB;CAEA,MAAME,cAAcF,IAAYG,OAAuC;EACnE,OAAO,KAAKF,KAAKD,IAAIG,KAAAA;CACzB;CAEA,MAAMC,kBAAkBC,UAAkBF,OAAuC;EAC7E,OAAO,KAAKF,KAAKI,UAAUF,KAAAA;CAC/B;CAEA,MAAMG,UAAUC,OAAmD;EAC/D,OAAO,KAAKT,WAAWQ,UAAUC,KAAAA;CACrC;CAEA,MAAcN,KAAKO,KAAaC,UAA2C;EACvE,MAAMC,QAAQ,KAAKZ,WAAWa,mBAAmB,OAAA,CAAA,CAC5CC,kBAAkB,eAAe,OAAA;EAEtC,MAAMC,OAAOlB,OAAOa,GAAAA;EACpB,IAAIK,MACAH,MAAMH,MAAM,kBAAkB,EAAEP,IAAIQ,IAAI,CAAA;OACrC;GACHE,MAAMH,MAAM,sBAAsB,EAAEO,MAAMN,IAAI,CAAA;GAE9C,IAAIC,UACA,IAAId,OAAOc,QAAAA,GACPC,MAAMK,SAAS,6BAA6B,EAAEC,SAASP,SAAS,CAAA;QAEhEC,MAAMK,SAAS,2BAA2B,EAAEE,WAAWR,SAAS,CAAA;EAG5E;EAEA,MAAM,EAAES,YAAY,KAAKpB,WAAWqB;EACpC,KAAK,MAAMC,UAAUF,SACjB,IAAI,CAACE,OAAOC,UACRX,MAAMY,UAAU,SAASF,OAAOG,cAAc;EAItD,IAAIV,MACAH,MAAMc,MACF9B,kBAAkB;GACd+B,QAAQ7B,YAAY8B;GACpBlB;EACJ,CAAA,GACA,GAAA;EAIR,OAAOE,MAAMiB,OAAM;CACvB;AACJ"}
+{"version":3,"file":"robot.mjs","names":["buildRedisKeyPath","isUUID","CachePrefix","RobotIdentityRepository","repository","findOneById","id","find","findOneByName","realm","findOneByIdOrName","idOrName","findOneBy","where","key","realmKey","query","createQueryBuilder","leftJoinAndSelect","isId","name","trim","toLowerCase","andWhere","realmId","realmName","columns","metadata","column","isSelect","addSelect","databaseName","cache","prefix","ROBOT","getOne"],"sources":["../../../../../src/app/modules/identity/repositories/robot.ts"],"sourcesContent":["/*\n * Copyright (c) 2025.\n *  Author Peter Placzek (tada5hi)\n *  For the full copyright and license information,\n *  view the LICENSE file that was distributed with this source code.\n */\n\nimport { buildRedisKeyPath } from '@authup/server-kit';\nimport { isUUID } from '@authup/kit';\nimport type { Robot } from '@authup/core-kit';\nimport type { Repository } from 'typeorm';\nimport type { IRobotIdentityRepository } from '../../../../core/index.ts';\nimport { CachePrefix } from '../../../../adapters/database/domains/index.ts';\n\nexport class RobotIdentityRepository implements IRobotIdentityRepository {\n    private readonly repository: Repository<Robot>;\n\n    constructor(repository: Repository<Robot>) {\n        this.repository = repository;\n    }\n\n    async findOneById(id: string): Promise<Robot | null> {\n        return this.find(id);\n    }\n\n    async findOneByName(id: string, realm?: string): Promise<Robot | null> {\n        return this.find(id, realm);\n    }\n\n    async findOneByIdOrName(idOrName: string, realm?: string): Promise<Robot | null> {\n        return this.find(idOrName, realm);\n    }\n\n    async findOneBy(where: Record<string, any>): Promise<Robot | null> {\n        return this.repository.findOneBy(where);\n    }\n\n    private async find(key: string, realmKey?: string) : Promise<Robot | null> {\n        const query = this.repository.createQueryBuilder('robot')\n            .leftJoinAndSelect('robot.realm', 'realm');\n\n        const isId = isUUID(key);\n        if (isId) {\n            query.where('robot.id = :id', { id: key });\n        } else {\n            query.where('robot.name = :name', { name: key.trim().toLowerCase() });\n\n            if (realmKey) {\n                if (isUUID(realmKey)) {\n                    query.andWhere('robot.realm_id = :realmId', { realmId: realmKey });\n                } else {\n                    query.andWhere('realm.name = :realmName', { realmName: realmKey.trim().toLowerCase() });\n                }\n            }\n        }\n\n        const { columns } = this.repository.metadata;\n        for (const column of columns) {\n            if (!column.isSelect) {\n                query.addSelect(`robot.${column.databaseName}`);\n            }\n        }\n\n        if (isId) {\n            query.cache(\n                buildRedisKeyPath({\n                    prefix: CachePrefix.ROBOT,\n                    key,\n                }),\n                60_000,\n            );\n        }\n\n        return query.getOne();\n    }\n}\n"],"mappings":";;;;;;;;AAcA,IAAaG,0BAAb,MAAaA;CACQC;CAEjB,YAAYA,YAA+B;EACvC,KAAKA,aAAaA;CACtB;CAEA,MAAMC,YAAYC,IAAmC;EACjD,OAAO,KAAKC,KAAKD,EAAAA;CACrB;CAEA,MAAME,cAAcF,IAAYG,OAAuC;EACnE,OAAO,KAAKF,KAAKD,IAAIG,KAAAA;CACzB;CAEA,MAAMC,kBAAkBC,UAAkBF,OAAuC;EAC7E,OAAO,KAAKF,KAAKI,UAAUF,KAAAA;CAC/B;CAEA,MAAMG,UAAUC,OAAmD;EAC/D,OAAO,KAAKT,WAAWQ,UAAUC,KAAAA;CACrC;CAEA,MAAcN,KAAKO,KAAaC,UAA2C;EACvE,MAAMC,QAAQ,KAAKZ,WAAWa,mBAAmB,OAAA,CAAA,CAC5CC,kBAAkB,eAAe,OAAA;EAEtC,MAAMC,OAAOlB,OAAOa,GAAAA;EACpB,IAAIK,MACAH,MAAMH,MAAM,kBAAkB,EAAEP,IAAIQ,IAAI,CAAA;OACrC;GACHE,MAAMH,MAAM,sBAAsB,EAAEO,MAAMN,IAAIO,KAAI,CAAA,CAAGC,YAAW,EAAG,CAAA;GAEnE,IAAIP,UACA,IAAId,OAAOc,QAAAA,GACPC,MAAMO,SAAS,6BAA6B,EAAEC,SAAST,SAAS,CAAA;QAEhEC,MAAMO,SAAS,2BAA2B,EAAEE,WAAWV,SAASM,KAAI,CAAA,CAAGC,YAAW,EAAG,CAAA;EAGjG;EAEA,MAAM,EAAEI,YAAY,KAAKtB,WAAWuB;EACpC,KAAK,MAAMC,UAAUF,SACjB,IAAI,CAACE,OAAOC,UACRb,MAAMc,UAAU,SAASF,OAAOG,cAAc;EAItD,IAAIZ,MACAH,MAAMgB,MACFhC,kBAAkB;GACdiC,QAAQ/B,YAAYgC;GACpBpB;EACJ,CAAA,GACA,GAAA;EAIR,OAAOE,MAAMmB,OAAM;CACvB;AACJ"}

package/dist/app/modules/identity/repositories/user.mjs

@@ -35,9 +35,9 @@ var UserIdentityRepository = class {
 		const isId = isUUID(key);
 		if (isId) query.where("user.id = :id", { id: key });
 		else {
-			query.where("user.name = :name", { name: key });
+			query.where("user.name = :name", { name: key.trim().toLowerCase() });
 			if (realmKey) if (isUUID(realmKey)) query.andWhere("user.realm_id = :realmId", { realmId: realmKey });
-			else query.andWhere("realm.name = :realmName", { realmName: realmKey });
+			else query.andWhere("realm.name = :realmName", { realmName: realmKey.trim().toLowerCase() });
 		}
 		const { columns } = this.repository.metadata;
 		for (const column of columns) if (!column.isSelect) query.addSelect(`user.${column.databaseName}`);

package/dist/app/modules/identity/repositories/user.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"user.mjs","names":["isUUID","buildRedisKeyPath","In","IdentityProviderMapperOperation","CachePrefix","UserIdentityRepository","repository","userPermissionRepository","userRoleRepository","ctx","findOneById","id","find","findOneByName","realm","findOneByIdOrName","idOrName","findOneBy","where","key","realmKey","query","createQueryBuilder","leftJoinAndSelect","isId","name","andWhere","realmId","realmName","columns","metadata","column","isSelect","addSelect","databaseName","cache","prefix","USER","entity","getOne","extendOneWithEA","saveOneWithEA","user","extraAttributes","create","savePermissions","items","ids","map","item","value","idsToDelete","filter","operation","DELETE","entities","findBy","user_id","permission_id","entitiesToDelete","index","indexOf","push","length","remove","entitiesToCreate","CREATE","findIndex","user_realm_id","realm_id","permission_realm_id","save","saveRoles","role_id","role_realm_id"],"sources":["../../../../../src/app/modules/identity/repositories/user.ts"],"sourcesContent":["/*\n * Copyright (c) 2025.\n *  Author Peter Placzek (tada5hi)\n *  For the full copyright and license information,\n *  view the LICENSE file that was distributed with this source code.\n */\n\nimport type { User, UserPermission, UserRole } from '@authup/core-kit';\nimport { isUUID } from '@authup/kit';\nimport { buildRedisKeyPath } from '@authup/server-kit';\nimport type { Repository } from 'typeorm';\nimport { In } from 'typeorm';\nimport type { IUserIdentityRepository, IdentityProviderMapperElement } from '../../../../core/index.ts';\nimport { IdentityProviderMapperOperation } from '../../../../core/index.ts';\nimport type { UserRepository } from '../../../../adapters/database/domains/index.ts';\nimport { CachePrefix } from '../../../../adapters/database/domains/index.ts';\n\nexport type UserIdentityRepositoryContext = {\n    repository: UserRepository,\n    userPermissionRepository: Repository<UserPermission>,\n    userRoleRepository: Repository<UserRole>,\n};\n\nexport class UserIdentityRepository implements IUserIdentityRepository {\n    private readonly repository: UserRepository;\n\n    private readonly userPermissionRepository: Repository<UserPermission>;\n\n    private readonly userRoleRepository: Repository<UserRole>;\n\n    constructor(ctx: UserIdentityRepositoryContext) {\n        this.repository = ctx.repository;\n        this.userPermissionRepository = ctx.userPermissionRepository;\n        this.userRoleRepository = ctx.userRoleRepository;\n    }\n\n    async findOneById(id: string): Promise<User | null> {\n        return this.find(id);\n    }\n\n    async findOneByName(id: string, realm?: string): Promise<User | null> {\n        return this.find(id, realm);\n    }\n\n    async findOneByIdOrName(idOrName: string, realm?: string): Promise<User | null> {\n        return this.find(idOrName, realm);\n    }\n\n    async findOneBy(where: Record<string, any>): Promise<User | null> {\n        return this.repository.findOneBy(where);\n    }\n\n    private async find(key: string, realmKey?: string) : Promise<User | null> {\n        const query = this.repository.createQueryBuilder('user')\n            .leftJoinAndSelect('user.realm', 'realm');\n\n        const isId = isUUID(key);\n        if (isId) {\n            query.where('user.id = :id', { id: key });\n        } else {\n            query.where('user.name = :name', { name: key });\n\n            if (realmKey) {\n                if (isUUID(realmKey)) {\n                    query.andWhere('user.realm_id = :realmId', { realmId: realmKey });\n                } else {\n                    query.andWhere('realm.name = :realmName', { realmName: realmKey });\n                }\n            }\n        }\n\n        const { columns } = this.repository.metadata;\n        for (const column of columns) {\n            if (!column.isSelect) {\n                query.addSelect(`user.${column.databaseName}`);\n            }\n        }\n\n        if (isId) {\n            query.cache(\n                buildRedisKeyPath({\n                    prefix: CachePrefix.USER,\n                    key,\n                }),\n                60_000,\n            );\n        }\n\n        const entity = await query.getOne();\n        if (entity) {\n            return this.repository.extendOneWithEA(entity);\n        }\n\n        return null;\n    }\n\n    async saveOneWithEA(user: Partial<User>, extraAttributes: Record<string, any>): Promise<User> {\n        const entity = this.repository.create(user);\n        return this.repository.saveOneWithEA(entity, extraAttributes);\n    }\n\n    async savePermissions(user: User, items: IdentityProviderMapperElement[]): Promise<void> {\n        const { userPermissionRepository: repository } = this;\n\n        const ids = items.map((item) => item.value);\n\n        const idsToDelete = items\n            .filter((item) => item.operation === IdentityProviderMapperOperation.DELETE)\n            .map((item) => item.value);\n\n        const entities = await repository.findBy({\n            user_id: user.id,\n            permission_id: In(ids),\n        });\n\n        const entitiesToDelete : UserPermission[] = [];\n        for (const entity of entities) {\n            const index = idsToDelete.indexOf(entity.permission_id);\n            if (index === -1) {\n                continue;\n            }\n\n            entitiesToDelete.push(entity);\n        }\n\n        if (entitiesToDelete.length > 0) {\n            await repository.remove(entitiesToDelete);\n        }\n\n        const entitiesToCreate : UserPermission[] = [];\n        for (const item of items) {\n            if (item.operation !== IdentityProviderMapperOperation.CREATE) {\n                continue;\n            }\n\n            const index = entities.findIndex(\n                (entity) => entity.permission_id === item.value,\n            );\n            if (index !== -1) {\n                continue;\n            }\n\n            const entity = repository.create({\n                user_id: user.id,\n                user_realm_id: user.realm_id,\n                permission_id: item.value as string,\n                permission_realm_id: item.realmId as string,\n            });\n\n            entitiesToCreate.push(entity);\n        }\n\n        if (entitiesToCreate.length > 0) {\n            await repository.save(entitiesToCreate);\n        }\n    }\n\n    async saveRoles(user: User, items: IdentityProviderMapperElement[]): Promise<void> {\n        const { userRoleRepository: repository } = this;\n\n        const ids = items.map((item) => item.value);\n\n        const idsToDelete = items\n            .filter((item) => item.operation === IdentityProviderMapperOperation.DELETE)\n            .map((item) => item.value);\n\n        const entities = await repository.findBy({\n            user_id: user.id,\n            role_id: In(ids),\n        });\n\n        const entitiesToDelete : UserRole[] = [];\n        for (const entity of entities) {\n            const index = idsToDelete.indexOf(entity.role_id);\n            if (index === -1) {\n                continue;\n            }\n\n            entitiesToDelete.push(entity);\n        }\n\n        if (entitiesToDelete.length > 0) {\n            await repository.remove(entitiesToDelete);\n        }\n\n        const entitiesToCreate : UserRole[] = [];\n        for (const item of items) {\n            if (item.operation !== IdentityProviderMapperOperation.CREATE) {\n                continue;\n            }\n\n            const index = entities.findIndex((entity) => entity.role_id === item.value);\n            if (index !== -1) {\n                continue;\n            }\n\n            const entity = repository.create({\n                user_id: user.id,\n                user_realm_id: user.realm_id,\n                role_id: item.value as string,\n                role_realm_id: item.realmId as string,\n            });\n\n            entitiesToCreate.push(entity);\n        }\n\n        if (entitiesToCreate.length > 0) {\n            await repository.save(entitiesToCreate);\n        }\n    }\n}\n"],"mappings":";;;;;;;;;;;AAuBA,IAAaK,yBAAb,MAAaA;CACQC;CAEAC;CAEAC;CAEjB,YAAYC,KAAoC;EAC5C,KAAKH,aAAaG,IAAIH;EACtB,KAAKC,2BAA2BE,IAAIF;EACpC,KAAKC,qBAAqBC,IAAID;CAClC;CAEA,MAAME,YAAYC,IAAkC;EAChD,OAAO,KAAKC,KAAKD,EAAAA;CACrB;CAEA,MAAME,cAAcF,IAAYG,OAAsC;EAClE,OAAO,KAAKF,KAAKD,IAAIG,KAAAA;CACzB;CAEA,MAAMC,kBAAkBC,UAAkBF,OAAsC;EAC5E,OAAO,KAAKF,KAAKI,UAAUF,KAAAA;CAC/B;CAEA,MAAMG,UAAUC,OAAkD;EAC9D,OAAO,KAAKZ,WAAWW,UAAUC,KAAAA;CACrC;CAEA,MAAcN,KAAKO,KAAaC,UAA0C;EACtE,MAAMC,QAAQ,KAAKf,WAAWgB,mBAAmB,MAAA,CAAA,CAC5CC,kBAAkB,cAAc,OAAA;EAErC,MAAMC,OAAOxB,OAAOmB,GAAAA;EACpB,IAAIK,MACAH,MAAMH,MAAM,iBAAiB,EAAEP,IAAIQ,IAAI,CAAA;OACpC;GACHE,MAAMH,MAAM,qBAAqB,EAAEO,MAAMN,IAAI,CAAA;GAE7C,IAAIC,UACA,IAAIpB,OAAOoB,QAAAA,GACPC,MAAMK,SAAS,4BAA4B,EAAEC,SAASP,SAAS,CAAA;QAE/DC,MAAMK,SAAS,2BAA2B,EAAEE,WAAWR,SAAS,CAAA;EAG5E;EAEA,MAAM,EAAES,YAAY,KAAKvB,WAAWwB;EACpC,KAAK,MAAMC,UAAUF,SACjB,IAAI,CAACE,OAAOC,UACRX,MAAMY,UAAU,QAAQF,OAAOG,cAAc;EAIrD,IAAIV,MACAH,MAAMc,MACFlC,kBAAkB;GACdmC,QAAQhC,YAAYiC;GACpBlB;EACJ,CAAA,GACA,GAAA;EAIR,MAAMmB,SAAS,MAAMjB,MAAMkB,OAAM;EACjC,IAAID,QACA,OAAO,KAAKhC,WAAWkC,gBAAgBF,MAAAA;EAG3C,OAAO;CACX;CAEA,MAAMG,cAAcC,MAAqBC,iBAAqD;EAC1F,MAAML,SAAS,KAAKhC,WAAWsC,OAAOF,IAAAA;EACtC,OAAO,KAAKpC,WAAWmC,cAAcH,QAAQK,eAAAA;CACjD;CAEA,MAAME,gBAAgBH,MAAYI,OAAuD;EACrF,MAAM,EAAEvC,0BAA0BD,eAAe;EAEjD,MAAMyC,MAAMD,MAAME,KAAKC,SAASA,KAAKC,KAAK;EAE1C,MAAMC,cAAcL,MACfM,QAAQH,SAASA,KAAKI,cAAclD,gCAAgCmD,MAAM,CAAA,CAC1EN,KAAKC,SAASA,KAAKC,KAAK;EAE7B,MAAMK,WAAW,MAAMjD,WAAWkD,OAAO;GACrCC,SAASf,KAAK/B;GACd+C,eAAexD,GAAG6C,GAAAA;EACtB,CAAA;EAEA,MAAMY,mBAAsC,CAAA;EAC5C,KAAK,MAAMrB,UAAUiB,UAAU;GAE3B,IADcJ,YAAYU,QAAQvB,OAAOoB,aACrCE,MAAU,IACV;GAGJD,iBAAiBG,KAAKxB,MAAAA;EAC1B;EAEA,IAAIqB,iBAAiBI,SAAS,GAC1B,MAAMzD,WAAW0D,OAAOL,gBAAAA;EAG5B,MAAMM,mBAAsC,CAAA;EAC5C,KAAK,MAAMhB,QAAQH,OAAO;GACtB,IAAIG,KAAKI,cAAclD,gCAAgC+D,QACnD;GAMJ,IAHcX,SAASY,WAClB7B,WAAWA,OAAOoB,kBAAkBT,KAAKC,KAE1CU,MAAU,IACV;GAGJ,MAAMtB,SAAShC,WAAWsC,OAAO;IAC7Ba,SAASf,KAAK/B;IACdyD,eAAe1B,KAAK2B;IACpBX,eAAeT,KAAKC;IACpBoB,qBAAqBrB,KAAKtB;GAC9B,CAAA;GAEAsC,iBAAiBH,KAAKxB,MAAAA;EAC1B;EAEA,IAAI2B,iBAAiBF,SAAS,GAC1B,MAAMzD,WAAWiE,KAAKN,gBAAAA;CAE9B;CAEA,MAAMO,UAAU9B,MAAYI,OAAuD;EAC/E,MAAM,EAAEtC,oBAAoBF,eAAe;EAE3C,MAAMyC,MAAMD,MAAME,KAAKC,SAASA,KAAKC,KAAK;EAE1C,MAAMC,cAAcL,MACfM,QAAQH,SAASA,KAAKI,cAAclD,gCAAgCmD,MAAM,CAAA,CAC1EN,KAAKC,SAASA,KAAKC,KAAK;EAE7B,MAAMK,WAAW,MAAMjD,WAAWkD,OAAO;GACrCC,SAASf,KAAK/B;GACd8D,SAASvE,GAAG6C,GAAAA;EAChB,CAAA;EAEA,MAAMY,mBAAgC,CAAA;EACtC,KAAK,MAAMrB,UAAUiB,UAAU;GAE3B,IADcJ,YAAYU,QAAQvB,OAAOmC,OACrCb,MAAU,IACV;GAGJD,iBAAiBG,KAAKxB,MAAAA;EAC1B;EAEA,IAAIqB,iBAAiBI,SAAS,GAC1B,MAAMzD,WAAW0D,OAAOL,gBAAAA;EAG5B,MAAMM,mBAAgC,CAAA;EACtC,KAAK,MAAMhB,QAAQH,OAAO;GACtB,IAAIG,KAAKI,cAAclD,gCAAgC+D,QACnD;GAIJ,IADcX,SAASY,WAAW7B,WAAWA,OAAOmC,YAAYxB,KAAKC,KACjEU,MAAU,IACV;GAGJ,MAAMtB,SAAShC,WAAWsC,OAAO;IAC7Ba,SAASf,KAAK/B;IACdyD,eAAe1B,KAAK2B;IACpBI,SAASxB,KAAKC;IACdwB,eAAezB,KAAKtB;GACxB,CAAA;GAEAsC,iBAAiBH,KAAKxB,MAAAA;EAC1B;EAEA,IAAI2B,iBAAiBF,SAAS,GAC1B,MAAMzD,WAAWiE,KAAKN,gBAAAA;CAE9B;AACJ"}
+{"version":3,"file":"user.mjs","names":["isUUID","buildRedisKeyPath","In","IdentityProviderMapperOperation","CachePrefix","UserIdentityRepository","repository","userPermissionRepository","userRoleRepository","ctx","findOneById","id","find","findOneByName","realm","findOneByIdOrName","idOrName","findOneBy","where","key","realmKey","query","createQueryBuilder","leftJoinAndSelect","isId","name","trim","toLowerCase","andWhere","realmId","realmName","columns","metadata","column","isSelect","addSelect","databaseName","cache","prefix","USER","entity","getOne","extendOneWithEA","saveOneWithEA","user","extraAttributes","create","savePermissions","items","ids","map","item","value","idsToDelete","filter","operation","DELETE","entities","findBy","user_id","permission_id","entitiesToDelete","index","indexOf","push","length","remove","entitiesToCreate","CREATE","findIndex","user_realm_id","realm_id","permission_realm_id","save","saveRoles","role_id","role_realm_id"],"sources":["../../../../../src/app/modules/identity/repositories/user.ts"],"sourcesContent":["/*\n * Copyright (c) 2025.\n *  Author Peter Placzek (tada5hi)\n *  For the full copyright and license information,\n *  view the LICENSE file that was distributed with this source code.\n */\n\nimport type { User, UserPermission, UserRole } from '@authup/core-kit';\nimport { isUUID } from '@authup/kit';\nimport { buildRedisKeyPath } from '@authup/server-kit';\nimport type { Repository } from 'typeorm';\nimport { In } from 'typeorm';\nimport type { IUserIdentityRepository, IdentityProviderMapperElement } from '../../../../core/index.ts';\nimport { IdentityProviderMapperOperation } from '../../../../core/index.ts';\nimport type { UserRepository } from '../../../../adapters/database/domains/index.ts';\nimport { CachePrefix } from '../../../../adapters/database/domains/index.ts';\n\nexport type UserIdentityRepositoryContext = {\n    repository: UserRepository,\n    userPermissionRepository: Repository<UserPermission>,\n    userRoleRepository: Repository<UserRole>,\n};\n\nexport class UserIdentityRepository implements IUserIdentityRepository {\n    private readonly repository: UserRepository;\n\n    private readonly userPermissionRepository: Repository<UserPermission>;\n\n    private readonly userRoleRepository: Repository<UserRole>;\n\n    constructor(ctx: UserIdentityRepositoryContext) {\n        this.repository = ctx.repository;\n        this.userPermissionRepository = ctx.userPermissionRepository;\n        this.userRoleRepository = ctx.userRoleRepository;\n    }\n\n    async findOneById(id: string): Promise<User | null> {\n        return this.find(id);\n    }\n\n    async findOneByName(id: string, realm?: string): Promise<User | null> {\n        return this.find(id, realm);\n    }\n\n    async findOneByIdOrName(idOrName: string, realm?: string): Promise<User | null> {\n        return this.find(idOrName, realm);\n    }\n\n    async findOneBy(where: Record<string, any>): Promise<User | null> {\n        return this.repository.findOneBy(where);\n    }\n\n    private async find(key: string, realmKey?: string) : Promise<User | null> {\n        const query = this.repository.createQueryBuilder('user')\n            .leftJoinAndSelect('user.realm', 'realm');\n\n        const isId = isUUID(key);\n        if (isId) {\n            query.where('user.id = :id', { id: key });\n        } else {\n            query.where('user.name = :name', { name: key.trim().toLowerCase() });\n\n            if (realmKey) {\n                if (isUUID(realmKey)) {\n                    query.andWhere('user.realm_id = :realmId', { realmId: realmKey });\n                } else {\n                    query.andWhere('realm.name = :realmName', { realmName: realmKey.trim().toLowerCase() });\n                }\n            }\n        }\n\n        const { columns } = this.repository.metadata;\n        for (const column of columns) {\n            if (!column.isSelect) {\n                query.addSelect(`user.${column.databaseName}`);\n            }\n        }\n\n        if (isId) {\n            query.cache(\n                buildRedisKeyPath({\n                    prefix: CachePrefix.USER,\n                    key,\n                }),\n                60_000,\n            );\n        }\n\n        const entity = await query.getOne();\n        if (entity) {\n            return this.repository.extendOneWithEA(entity);\n        }\n\n        return null;\n    }\n\n    async saveOneWithEA(user: Partial<User>, extraAttributes: Record<string, any>): Promise<User> {\n        const entity = this.repository.create(user);\n        return this.repository.saveOneWithEA(entity, extraAttributes);\n    }\n\n    async savePermissions(user: User, items: IdentityProviderMapperElement[]): Promise<void> {\n        const { userPermissionRepository: repository } = this;\n\n        const ids = items.map((item) => item.value);\n\n        const idsToDelete = items\n            .filter((item) => item.operation === IdentityProviderMapperOperation.DELETE)\n            .map((item) => item.value);\n\n        const entities = await repository.findBy({\n            user_id: user.id,\n            permission_id: In(ids),\n        });\n\n        const entitiesToDelete : UserPermission[] = [];\n        for (const entity of entities) {\n            const index = idsToDelete.indexOf(entity.permission_id);\n            if (index === -1) {\n                continue;\n            }\n\n            entitiesToDelete.push(entity);\n        }\n\n        if (entitiesToDelete.length > 0) {\n            await repository.remove(entitiesToDelete);\n        }\n\n        const entitiesToCreate : UserPermission[] = [];\n        for (const item of items) {\n            if (item.operation !== IdentityProviderMapperOperation.CREATE) {\n                continue;\n            }\n\n            const index = entities.findIndex(\n                (entity) => entity.permission_id === item.value,\n            );\n            if (index !== -1) {\n                continue;\n            }\n\n            const entity = repository.create({\n                user_id: user.id,\n                user_realm_id: user.realm_id,\n                permission_id: item.value as string,\n                permission_realm_id: item.realmId as string,\n            });\n\n            entitiesToCreate.push(entity);\n        }\n\n        if (entitiesToCreate.length > 0) {\n            await repository.save(entitiesToCreate);\n        }\n    }\n\n    async saveRoles(user: User, items: IdentityProviderMapperElement[]): Promise<void> {\n        const { userRoleRepository: repository } = this;\n\n        const ids = items.map((item) => item.value);\n\n        const idsToDelete = items\n            .filter((item) => item.operation === IdentityProviderMapperOperation.DELETE)\n            .map((item) => item.value);\n\n        const entities = await repository.findBy({\n            user_id: user.id,\n            role_id: In(ids),\n        });\n\n        const entitiesToDelete : UserRole[] = [];\n        for (const entity of entities) {\n            const index = idsToDelete.indexOf(entity.role_id);\n            if (index === -1) {\n                continue;\n            }\n\n            entitiesToDelete.push(entity);\n        }\n\n        if (entitiesToDelete.length > 0) {\n            await repository.remove(entitiesToDelete);\n        }\n\n        const entitiesToCreate : UserRole[] = [];\n        for (const item of items) {\n            if (item.operation !== IdentityProviderMapperOperation.CREATE) {\n                continue;\n            }\n\n            const index = entities.findIndex((entity) => entity.role_id === item.value);\n            if (index !== -1) {\n                continue;\n            }\n\n            const entity = repository.create({\n                user_id: user.id,\n                user_realm_id: user.realm_id,\n                role_id: item.value as string,\n                role_realm_id: item.realmId as string,\n            });\n\n            entitiesToCreate.push(entity);\n        }\n\n        if (entitiesToCreate.length > 0) {\n            await repository.save(entitiesToCreate);\n        }\n    }\n}\n"],"mappings":";;;;;;;;;;;AAuBA,IAAaK,yBAAb,MAAaA;CACQC;CAEAC;CAEAC;CAEjB,YAAYC,KAAoC;EAC5C,KAAKH,aAAaG,IAAIH;EACtB,KAAKC,2BAA2BE,IAAIF;EACpC,KAAKC,qBAAqBC,IAAID;CAClC;CAEA,MAAME,YAAYC,IAAkC;EAChD,OAAO,KAAKC,KAAKD,EAAAA;CACrB;CAEA,MAAME,cAAcF,IAAYG,OAAsC;EAClE,OAAO,KAAKF,KAAKD,IAAIG,KAAAA;CACzB;CAEA,MAAMC,kBAAkBC,UAAkBF,OAAsC;EAC5E,OAAO,KAAKF,KAAKI,UAAUF,KAAAA;CAC/B;CAEA,MAAMG,UAAUC,OAAkD;EAC9D,OAAO,KAAKZ,WAAWW,UAAUC,KAAAA;CACrC;CAEA,MAAcN,KAAKO,KAAaC,UAA0C;EACtE,MAAMC,QAAQ,KAAKf,WAAWgB,mBAAmB,MAAA,CAAA,CAC5CC,kBAAkB,cAAc,OAAA;EAErC,MAAMC,OAAOxB,OAAOmB,GAAAA;EACpB,IAAIK,MACAH,MAAMH,MAAM,iBAAiB,EAAEP,IAAIQ,IAAI,CAAA;OACpC;GACHE,MAAMH,MAAM,qBAAqB,EAAEO,MAAMN,IAAIO,KAAI,CAAA,CAAGC,YAAW,EAAG,CAAA;GAElE,IAAIP,UACA,IAAIpB,OAAOoB,QAAAA,GACPC,MAAMO,SAAS,4BAA4B,EAAEC,SAAST,SAAS,CAAA;QAE/DC,MAAMO,SAAS,2BAA2B,EAAEE,WAAWV,SAASM,KAAI,CAAA,CAAGC,YAAW,EAAG,CAAA;EAGjG;EAEA,MAAM,EAAEI,YAAY,KAAKzB,WAAW0B;EACpC,KAAK,MAAMC,UAAUF,SACjB,IAAI,CAACE,OAAOC,UACRb,MAAMc,UAAU,QAAQF,OAAOG,cAAc;EAIrD,IAAIZ,MACAH,MAAMgB,MACFpC,kBAAkB;GACdqC,QAAQlC,YAAYmC;GACpBpB;EACJ,CAAA,GACA,GAAA;EAIR,MAAMqB,SAAS,MAAMnB,MAAMoB,OAAM;EACjC,IAAID,QACA,OAAO,KAAKlC,WAAWoC,gBAAgBF,MAAAA;EAG3C,OAAO;CACX;CAEA,MAAMG,cAAcC,MAAqBC,iBAAqD;EAC1F,MAAML,SAAS,KAAKlC,WAAWwC,OAAOF,IAAAA;EACtC,OAAO,KAAKtC,WAAWqC,cAAcH,QAAQK,eAAAA;CACjD;CAEA,MAAME,gBAAgBH,MAAYI,OAAuD;EACrF,MAAM,EAAEzC,0BAA0BD,eAAe;EAEjD,MAAM2C,MAAMD,MAAME,KAAKC,SAASA,KAAKC,KAAK;EAE1C,MAAMC,cAAcL,MACfM,QAAQH,SAASA,KAAKI,cAAcpD,gCAAgCqD,MAAM,CAAA,CAC1EN,KAAKC,SAASA,KAAKC,KAAK;EAE7B,MAAMK,WAAW,MAAMnD,WAAWoD,OAAO;GACrCC,SAASf,KAAKjC;GACdiD,eAAe1D,GAAG+C,GAAAA;EACtB,CAAA;EAEA,MAAMY,mBAAsC,CAAA;EAC5C,KAAK,MAAMrB,UAAUiB,UAAU;GAE3B,IADcJ,YAAYU,QAAQvB,OAAOoB,aACrCE,MAAU,IACV;GAGJD,iBAAiBG,KAAKxB,MAAAA;EAC1B;EAEA,IAAIqB,iBAAiBI,SAAS,GAC1B,MAAM3D,WAAW4D,OAAOL,gBAAAA;EAG5B,MAAMM,mBAAsC,CAAA;EAC5C,KAAK,MAAMhB,QAAQH,OAAO;GACtB,IAAIG,KAAKI,cAAcpD,gCAAgCiE,QACnD;GAMJ,IAHcX,SAASY,WAClB7B,WAAWA,OAAOoB,kBAAkBT,KAAKC,KAE1CU,MAAU,IACV;GAGJ,MAAMtB,SAASlC,WAAWwC,OAAO;IAC7Ba,SAASf,KAAKjC;IACd2D,eAAe1B,KAAK2B;IACpBX,eAAeT,KAAKC;IACpBoB,qBAAqBrB,KAAKtB;GAC9B,CAAA;GAEAsC,iBAAiBH,KAAKxB,MAAAA;EAC1B;EAEA,IAAI2B,iBAAiBF,SAAS,GAC1B,MAAM3D,WAAWmE,KAAKN,gBAAAA;CAE9B;CAEA,MAAMO,UAAU9B,MAAYI,OAAuD;EAC/E,MAAM,EAAExC,oBAAoBF,eAAe;EAE3C,MAAM2C,MAAMD,MAAME,KAAKC,SAASA,KAAKC,KAAK;EAE1C,MAAMC,cAAcL,MACfM,QAAQH,SAASA,KAAKI,cAAcpD,gCAAgCqD,MAAM,CAAA,CAC1EN,KAAKC,SAASA,KAAKC,KAAK;EAE7B,MAAMK,WAAW,MAAMnD,WAAWoD,OAAO;GACrCC,SAASf,KAAKjC;GACdgE,SAASzE,GAAG+C,GAAAA;EAChB,CAAA;EAEA,MAAMY,mBAAgC,CAAA;EACtC,KAAK,MAAMrB,UAAUiB,UAAU;GAE3B,IADcJ,YAAYU,QAAQvB,OAAOmC,OACrCb,MAAU,IACV;GAGJD,iBAAiBG,KAAKxB,MAAAA;EAC1B;EAEA,IAAIqB,iBAAiBI,SAAS,GAC1B,MAAM3D,WAAW4D,OAAOL,gBAAAA;EAG5B,MAAMM,mBAAgC,CAAA;EACtC,KAAK,MAAMhB,QAAQH,OAAO;GACtB,IAAIG,KAAKI,cAAcpD,gCAAgCiE,QACnD;GAIJ,IADcX,SAASY,WAAW7B,WAAWA,OAAOmC,YAAYxB,KAAKC,KACjEU,MAAU,IACV;GAGJ,MAAMtB,SAASlC,WAAWwC,OAAO;IAC7Ba,SAASf,KAAKjC;IACd2D,eAAe1B,KAAK2B;IACpBI,SAASxB,KAAKC;IACdwB,eAAezB,KAAKtB;GACxB,CAAA;GAEAsC,iBAAiBH,KAAKxB,MAAAA;EAC1B;EAEA,IAAI2B,iBAAiBF,SAAS,GAC1B,MAAM3D,WAAWmE,KAAKN,gBAAAA;CAE9B;AACJ"}

package/dist/app/modules/oauth2/constants.d.ts

@@ -1,5 +1,5 @@
 import { TypedToken } from 'eldin';
-import type { IOAuth2AuthorizationCodeIssuer, IOAuth2AuthorizationCodeRepository, IOAuth2AuthorizationCodeRequestVerifier, IOAuth2AuthorizationCodeVerifier, IOAuth2AuthorizationStateManager, IOAuth2AuthorizeStateRepository, IOAuth2ClientRepository, IOAuth2KeyRepository, IOAuth2OpenIDTokenIssuer, IOAuth2ScopeRepository, IOAuth2TokenIssuer, IOAuth2TokenRepository, IOAuth2TokenRevoker, IOAuth2TokenSigner, IOAuth2TokenVerifier } from '../../../core/index.ts';
+import type { IOAuth2AuthorizationCodeIssuer, IOAuth2AuthorizationCodeRepository, IOAuth2AuthorizationCodeRequestVerifier, IOAuth2AuthorizationCodeVerifier, IOAuth2AuthorizationStateManager, IOAuth2AuthorizeStateRepository, IOAuth2ClientRepository, IOAuth2KeyRepository, IOAuth2OpenIDTokenIssuer, IOAuth2ScopeRepository, IOAuth2TokenIssuer, IOAuth2TokenRepository, IOAuth2TokenRevoker, IOAuth2TokenSigner, IOAuth2TokenVerifier, ISessionTokenRepository } from '../../../core/index.ts';
 export declare const OAuth2InjectionToken: {
     readonly ClientRepository: TypedToken<IOAuth2ClientRepository>;
     readonly ScopeRepository: TypedToken<IOAuth2ScopeRepository>;
@@ -14,6 +14,7 @@ export declare const OAuth2InjectionToken: {
     readonly OpenIDTokenIssuer: TypedToken<IOAuth2OpenIDTokenIssuer>;
     readonly RefreshTokenIssuer: TypedToken<IOAuth2TokenIssuer>;
     readonly TokenRepository: TypedToken<IOAuth2TokenRepository>;
+    readonly SessionTokenRepository: TypedToken<ISessionTokenRepository>;
     readonly TokenRevoker: TypedToken<IOAuth2TokenRevoker>;
     readonly TokenSigner: TypedToken<IOAuth2TokenSigner>;
     readonly TokenVerifier: TypedToken<IOAuth2TokenVerifier>;

package/dist/app/modules/oauth2/constants.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"constants.d.ts","sourceRoot":"","sources":["../../../../src/app/modules/oauth2/constants.ts"],"names":[],"mappings":"AAOA,OAAO,EAAE,UAAU,EAAE,MAAM,OAAO,CAAC;AACnC,OAAO,KAAK,EACR,8BAA8B,EAC9B,kCAAkC,EAClC,uCAAuC,EACvC,gCAAgC,EAChC,gCAAgC,EAChC,+BAA+B,EAC/B,uBAAuB,EACvB,oBAAoB,EACpB,wBAAwB,EACxB,sBAAsB,EACtB,kBAAkB,EAClB,sBAAsB,EACtB,mBAAmB,EACnB,kBAAkB,EAClB,oBAAoB,EACvB,MAAM,wBAAwB,CAAC;AAEhC,eAAO,MAAM,oBAAoB;;;;;;;;;;;;;;;;;CAsBvB,CAAC"}
+{"version":3,"file":"constants.d.ts","sourceRoot":"","sources":["../../../../src/app/modules/oauth2/constants.ts"],"names":[],"mappings":"AAOA,OAAO,EAAE,UAAU,EAAE,MAAM,OAAO,CAAC;AACnC,OAAO,KAAK,EACR,8BAA8B,EAC9B,kCAAkC,EAClC,uCAAuC,EACvC,gCAAgC,EAChC,gCAAgC,EAChC,+BAA+B,EAC/B,uBAAuB,EACvB,oBAAoB,EACpB,wBAAwB,EACxB,sBAAsB,EACtB,kBAAkB,EAClB,sBAAsB,EACtB,mBAAmB,EACnB,kBAAkB,EAClB,oBAAoB,EACpB,uBAAuB,EAC1B,MAAM,wBAAwB,CAAC;AAEhC,eAAO,MAAM,oBAAoB;;;;;;;;;;;;;;;;;;CAuBvB,CAAC"}

package/dist/app/modules/oauth2/constants.mjs

@@ -17,6 +17,7 @@ const OAuth2InjectionToken = {
 	OpenIDTokenIssuer: new TypedToken("OpenIDTokenIssuer"),
 	RefreshTokenIssuer: new TypedToken("RefreshTokenIssuer"),
 	TokenRepository: new TypedToken("TokenRepository"),
+	SessionTokenRepository: new TypedToken("SessionTokenRepository"),
 	TokenRevoker: new TypedToken("TokenRevoker"),
 	TokenSigner: new TypedToken("TokenSigner"),
 	TokenVerifier: new TypedToken("TokenVerifier")

package/dist/app/modules/oauth2/constants.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"constants.mjs","names":["TypedToken","OAuth2InjectionToken","ClientRepository","ScopeRepository","AuthorizationCodeIssuer","AuthorizationCodeRepository","AuthorizationCodeVerifier","AuthorizationStateManager","AuthorizationCodeRequestVerifier","AuthorizationStateRepository","KeyRepository","AccessTokenIssuer","OpenIDTokenIssuer","RefreshTokenIssuer","TokenRepository","TokenRevoker","TokenSigner","TokenVerifier"],"sources":["../../../../src/app/modules/oauth2/constants.ts"],"sourcesContent":["/*\n * Copyright (c) 2025.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport { TypedToken } from 'eldin';\nimport type {\n    IOAuth2AuthorizationCodeIssuer,\n    IOAuth2AuthorizationCodeRepository,\n    IOAuth2AuthorizationCodeRequestVerifier,\n    IOAuth2AuthorizationCodeVerifier,\n    IOAuth2AuthorizationStateManager,\n    IOAuth2AuthorizeStateRepository,\n    IOAuth2ClientRepository,\n    IOAuth2KeyRepository,\n    IOAuth2OpenIDTokenIssuer,\n    IOAuth2ScopeRepository,\n    IOAuth2TokenIssuer,\n    IOAuth2TokenRepository,\n    IOAuth2TokenRevoker,\n    IOAuth2TokenSigner,\n    IOAuth2TokenVerifier,\n} from '../../../core/index.ts';\n\nexport const OAuth2InjectionToken = {\n    ClientRepository: new TypedToken<IOAuth2ClientRepository>('ClientRepository'),\n    ScopeRepository: new TypedToken<IOAuth2ScopeRepository>('ScopeRepository'),\n\n    AuthorizationCodeIssuer: new TypedToken<IOAuth2AuthorizationCodeIssuer>('AuthorizationCodeIssuer'),\n    AuthorizationCodeRepository: new TypedToken<IOAuth2AuthorizationCodeRepository>('AuthorizationCodeRepository'),\n    AuthorizationCodeVerifier: new TypedToken<IOAuth2AuthorizationCodeVerifier>('AuthorizationCodeVerifier'),\n    AuthorizationStateManager: new TypedToken<IOAuth2AuthorizationStateManager>('AuthorizationStateManager'),\n    AuthorizationCodeRequestVerifier: new TypedToken<IOAuth2AuthorizationCodeRequestVerifier>('AuthorizationCodeRequestVerifier'),\n\n    AuthorizationStateRepository: new TypedToken<IOAuth2AuthorizeStateRepository>('AuthorizationStateRepository'),\n\n    KeyRepository: new TypedToken<IOAuth2KeyRepository>('KeyRepository'),\n\n    AccessTokenIssuer: new TypedToken<IOAuth2TokenIssuer>('AccessTokenIssuer'),\n    OpenIDTokenIssuer: new TypedToken<IOAuth2OpenIDTokenIssuer>('OpenIDTokenIssuer'),\n    RefreshTokenIssuer: new TypedToken<IOAuth2TokenIssuer>('RefreshTokenIssuer'),\n\n    TokenRepository: new TypedToken<IOAuth2TokenRepository>('TokenRepository'),\n    TokenRevoker: new TypedToken<IOAuth2TokenRevoker>('TokenRevoker'),\n    TokenSigner: new TypedToken<IOAuth2TokenSigner>('TokenSigner'),\n    TokenVerifier: new TypedToken<IOAuth2TokenVerifier>('TokenVerifier'),\n} as const;\n"],"mappings":";;;;;AA0BA,MAAaC,uBAAuB;CAChCC,kBAAkB,IAAIF,WAAoC,kBAAA;CAC1DG,iBAAiB,IAAIH,WAAmC,iBAAA;CAExDI,yBAAyB,IAAIJ,WAA2C,yBAAA;CACxEK,6BAA6B,IAAIL,WAA+C,6BAAA;CAChFM,2BAA2B,IAAIN,WAA6C,2BAAA;CAC5EO,2BAA2B,IAAIP,WAA6C,2BAAA;CAC5EQ,kCAAkC,IAAIR,WAAoD,kCAAA;CAE1FS,8BAA8B,IAAIT,WAA4C,8BAAA;CAE9EU,eAAe,IAAIV,WAAiC,eAAA;CAEpDW,mBAAmB,IAAIX,WAA+B,mBAAA;CACtDY,mBAAmB,IAAIZ,WAAqC,mBAAA;CAC5Da,oBAAoB,IAAIb,WAA+B,oBAAA;CAEvDc,iBAAiB,IAAId,WAAmC,iBAAA;CACxDe,cAAc,IAAIf,WAAgC,cAAA;CAClDgB,aAAa,IAAIhB,WAA+B,aAAA;CAChDiB,eAAe,IAAIjB,WAAiC,eAAA;AACxD"}
+{"version":3,"file":"constants.mjs","names":["TypedToken","OAuth2InjectionToken","ClientRepository","ScopeRepository","AuthorizationCodeIssuer","AuthorizationCodeRepository","AuthorizationCodeVerifier","AuthorizationStateManager","AuthorizationCodeRequestVerifier","AuthorizationStateRepository","KeyRepository","AccessTokenIssuer","OpenIDTokenIssuer","RefreshTokenIssuer","TokenRepository","SessionTokenRepository","TokenRevoker","TokenSigner","TokenVerifier"],"sources":["../../../../src/app/modules/oauth2/constants.ts"],"sourcesContent":["/*\n * Copyright (c) 2025.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport { TypedToken } from 'eldin';\nimport type {\n    IOAuth2AuthorizationCodeIssuer,\n    IOAuth2AuthorizationCodeRepository,\n    IOAuth2AuthorizationCodeRequestVerifier,\n    IOAuth2AuthorizationCodeVerifier,\n    IOAuth2AuthorizationStateManager,\n    IOAuth2AuthorizeStateRepository,\n    IOAuth2ClientRepository,\n    IOAuth2KeyRepository,\n    IOAuth2OpenIDTokenIssuer,\n    IOAuth2ScopeRepository,\n    IOAuth2TokenIssuer,\n    IOAuth2TokenRepository,\n    IOAuth2TokenRevoker,\n    IOAuth2TokenSigner,\n    IOAuth2TokenVerifier,\n    ISessionTokenRepository,\n} from '../../../core/index.ts';\n\nexport const OAuth2InjectionToken = {\n    ClientRepository: new TypedToken<IOAuth2ClientRepository>('ClientRepository'),\n    ScopeRepository: new TypedToken<IOAuth2ScopeRepository>('ScopeRepository'),\n\n    AuthorizationCodeIssuer: new TypedToken<IOAuth2AuthorizationCodeIssuer>('AuthorizationCodeIssuer'),\n    AuthorizationCodeRepository: new TypedToken<IOAuth2AuthorizationCodeRepository>('AuthorizationCodeRepository'),\n    AuthorizationCodeVerifier: new TypedToken<IOAuth2AuthorizationCodeVerifier>('AuthorizationCodeVerifier'),\n    AuthorizationStateManager: new TypedToken<IOAuth2AuthorizationStateManager>('AuthorizationStateManager'),\n    AuthorizationCodeRequestVerifier: new TypedToken<IOAuth2AuthorizationCodeRequestVerifier>('AuthorizationCodeRequestVerifier'),\n\n    AuthorizationStateRepository: new TypedToken<IOAuth2AuthorizeStateRepository>('AuthorizationStateRepository'),\n\n    KeyRepository: new TypedToken<IOAuth2KeyRepository>('KeyRepository'),\n\n    AccessTokenIssuer: new TypedToken<IOAuth2TokenIssuer>('AccessTokenIssuer'),\n    OpenIDTokenIssuer: new TypedToken<IOAuth2OpenIDTokenIssuer>('OpenIDTokenIssuer'),\n    RefreshTokenIssuer: new TypedToken<IOAuth2TokenIssuer>('RefreshTokenIssuer'),\n\n    TokenRepository: new TypedToken<IOAuth2TokenRepository>('TokenRepository'),\n    SessionTokenRepository: new TypedToken<ISessionTokenRepository>('SessionTokenRepository'),\n    TokenRevoker: new TypedToken<IOAuth2TokenRevoker>('TokenRevoker'),\n    TokenSigner: new TypedToken<IOAuth2TokenSigner>('TokenSigner'),\n    TokenVerifier: new TypedToken<IOAuth2TokenVerifier>('TokenVerifier'),\n} as const;\n"],"mappings":";;;;;AA2BA,MAAaC,uBAAuB;CAChCC,kBAAkB,IAAIF,WAAoC,kBAAA;CAC1DG,iBAAiB,IAAIH,WAAmC,iBAAA;CAExDI,yBAAyB,IAAIJ,WAA2C,yBAAA;CACxEK,6BAA6B,IAAIL,WAA+C,6BAAA;CAChFM,2BAA2B,IAAIN,WAA6C,2BAAA;CAC5EO,2BAA2B,IAAIP,WAA6C,2BAAA;CAC5EQ,kCAAkC,IAAIR,WAAoD,kCAAA;CAE1FS,8BAA8B,IAAIT,WAA4C,8BAAA;CAE9EU,eAAe,IAAIV,WAAiC,eAAA;CAEpDW,mBAAmB,IAAIX,WAA+B,mBAAA;CACtDY,mBAAmB,IAAIZ,WAAqC,mBAAA;CAC5Da,oBAAoB,IAAIb,WAA+B,oBAAA;CAEvDc,iBAAiB,IAAId,WAAmC,iBAAA;CACxDe,wBAAwB,IAAIf,WAAoC,wBAAA;CAChEgB,cAAc,IAAIhB,WAAgC,cAAA;CAClDiB,aAAa,IAAIjB,WAA+B,aAAA;CAChDkB,eAAe,IAAIlB,WAAiC,eAAA;AACxD"}

package/dist/app/modules/oauth2/module.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"module.d.ts","sourceRoot":"","sources":["../../../../src/app/modules/oauth2/module.ts"],"names":[],"mappings":"AASA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,OAAO,CAAC;AACxC,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,OAAO,CAAC;AA6BrC,qBAAa,YAAa,YAAW,OAAO;IACxC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IAEtB,QAAQ,CAAC,YAAY,EAAE,MAAM,EAAE,CAAC;;IAO1B,KAAK,CAAC,SAAS,EAAE,UAAU,GAAI,OAAO,CAAC,IAAI,CAAC;CAwKrD"}
+{"version":3,"file":"module.d.ts","sourceRoot":"","sources":["../../../../src/app/modules/oauth2/module.ts"],"names":[],"mappings":"AASA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,OAAO,CAAC;AACxC,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,OAAO,CAAC;AA8BrC,qBAAa,YAAa,YAAW,OAAO;IACxC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IAEtB,QAAQ,CAAC,YAAY,EAAE,MAAM,EAAE,CAAC;;IAO1B,KAAK,CAAC,SAAS,EAAE,UAAU,GAAI,OAAO,CAAC,IAAI,CAAC;CAmLrD"}

package/dist/app/modules/oauth2/module.mjs

@@ -28,6 +28,7 @@ import { OAuth2AuthorizationStateRepository } from "./repositories/authorize/sta
 import { OAuth2ClientRepository } from "./repositories/client/repository.mjs";
 import { OAuth2ScopeRepository } from "./repositories/scope/repository.mjs";
 import { OAuth2KeyRepository } from "./repositories/key/repository.mjs";
+import { SessionTokenRepositoryAdapter } from "./repositories/session-token/repository.mjs";
 import { OAuth2TokenRepository } from "./repositories/token/repository.mjs";
 import "./repositories/index.mjs";
 import { IdentityInjectionKey } from "../identity/constants.mjs";
@@ -62,6 +63,7 @@ var OAuth2Module = class {
 		container.register(OAuth2InjectionToken.TokenRepository, { useFactory: (c) => {
 			return new OAuth2TokenRepository(c.resolve(CacheInjectionKey));
 		} });
+		container.register(OAuth2InjectionToken.SessionTokenRepository, { useFactory: (c) => new SessionTokenRepositoryAdapter(c.resolve(DatabaseInjectionKey.DataSource)) });
 		container.register(OAuth2InjectionToken.KeyRepository, { useFactory: (c) => new OAuth2KeyRepository(c.resolve(DatabaseInjectionKey.DataSource)) });
 		container.register(OAuth2InjectionToken.TokenSigner, { useFactory: (c) => {
 			return new OAuth2TokenSigner(c.resolve(OAuth2InjectionToken.KeyRepository));
@@ -82,7 +84,7 @@ var OAuth2Module = class {
 			return new OAuth2AuthorizationStateManager(c.resolve(OAuth2InjectionToken.AuthorizationStateRepository));
 		} });
 		container.register(OAuth2InjectionToken.TokenRevoker, { useFactory: (c) => {
-			return new OAuth2TokenRevoker(c.resolve(OAuth2InjectionToken.TokenRepository));
+			return new OAuth2TokenRevoker(c.resolve(OAuth2InjectionToken.TokenRepository), c.resolve(OAuth2InjectionToken.SessionTokenRepository));
 		} });
 		container.register(OAuth2InjectionToken.TokenVerifier, { useFactory: (c) => {
 			return new OAuth2TokenVerifier(c.resolve(OAuth2InjectionToken.KeyRepository), c.resolve(OAuth2InjectionToken.TokenRepository));
@@ -91,16 +93,20 @@ var OAuth2Module = class {
 			const tokenRepository = c.resolve(OAuth2InjectionToken.TokenRepository);
 			const tokenSigner = c.resolve(OAuth2InjectionToken.TokenSigner);
 			const identityRoleProvider = c.resolve(IdentityInjectionKey.RoleProvider);
+			const sessionTokenRepository = c.resolve(OAuth2InjectionToken.SessionTokenRepository);
 			return new OAuth2AccessTokenIssuer(tokenRepository, tokenSigner, {
 				maxAge: config.tokenAccessMaxAge,
 				issuer: config.publicUrl
-			}, identityRoleProvider);
+			}, identityRoleProvider, sessionTokenRepository);
 		} });
 		container.register(OAuth2InjectionToken.RefreshTokenIssuer, { useFactory: (c) => {
-			return new OAuth2RefreshTokenIssuer(c.resolve(OAuth2InjectionToken.TokenRepository), c.resolve(OAuth2InjectionToken.TokenSigner), {
+			const tokenRepository = c.resolve(OAuth2InjectionToken.TokenRepository);
+			const tokenSigner = c.resolve(OAuth2InjectionToken.TokenSigner);
+			const sessionTokenRepository = c.resolve(OAuth2InjectionToken.SessionTokenRepository);
+			return new OAuth2RefreshTokenIssuer(tokenRepository, tokenSigner, {
 				maxAge: config.tokenRefreshMaxAge,
 				issuer: config.publicUrl
-			});
+			}, sessionTokenRepository);
 		} });
 		container.register(OAuth2InjectionToken.OpenIDTokenIssuer, { useFactory: (c) => {
 			return new OAuth2OpenIDTokenIssuer({